drivers/gpu/drm/radeon/evergreen_cs.c

   1 /*
   2  * Copyright 2010 Advanced Micro Devices, Inc.
   3  * Copyright 2008 Red Hat Inc.
   4  * Copyright 2009 Jerome Glisse.
   5  *
   6  * Permission is hereby granted, free of charge, to any person obtaining a
   7  * copy of this software and associated documentation files (the "Software"),
   8  * to deal in the Software without restriction, including without limitation
   9  * the rights to use, copy, modify, merge, publish, distribute, sublicense,
  10  * and/or sell copies of the Software, and to permit persons to whom the
  11  * Software is furnished to do so, subject to the following conditions:
  12  *
  13  * The above copyright notice and this permission notice shall be included in
  14  * all copies or substantial portions of the Software.
  15  *
  16  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  17  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  18  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
  19  * THE COPYRIGHT HOLDER(S) OR AUTHOR(S) BE LIABLE FOR ANY CLAIM, DAMAGES OR
  20  * OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
  21  * ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
  22  * OTHER DEALINGS IN THE SOFTWARE.
  23  *
  24  * Authors: Dave Airlie
  25  *          Alex Deucher
  26  *          Jerome Glisse
  27  */
  28 #include "drmP.h"
  29 #include "radeon.h"
  30 #include "evergreend.h"
  31 #include "evergreen_reg_safe.h"
  32 #include "cayman_reg_safe.h"
  33
  34 #define MAX(a,b)                   (((a)>(b))?(a):(b))
  35 #define MIN(a,b)                   (((a)<(b))?(a):(b))
  36
  37 static int evergreen_cs_packet_next_reloc(struct radeon_cs_parser *p,
  38                                           struct radeon_cs_reloc **cs_reloc);
  39
  40 struct evergreen_cs_track {
  41         u32                     group_size;
  42         u32                     nbanks;
  43         u32                     npipes;
  44         u32                     row_size;
  45         /* value we track */
  46         u32                     nsamples;
  47         u32                     cb_color_base_last[12];
  48         struct radeon_bo        *cb_color_bo[12];
  49         u32                     cb_color_bo_offset[12];
  50         struct radeon_bo        *cb_color_fmask_bo[8];
  51         struct radeon_bo        *cb_color_cmask_bo[8];
  52         u32                     cb_color_info[12];
  53         u32                     cb_color_view[12];
  54         u32                     cb_color_pitch_idx[12];
  55         u32                     cb_color_slice_idx[12];
  56         u32                     cb_color_dim_idx[12];
  57         u32                     cb_color_dim[12];
  58         u32                     cb_color_pitch[12];
  59         u32                     cb_color_slice[12];
  60         u32                     cb_color_attrib[12];
  61         u32                     cb_color_cmask_slice[8];
  62         u32                     cb_color_fmask_slice[8];
  63         u32                     cb_target_mask;
  64         u32                     cb_shader_mask;
  65         u32                     vgt_strmout_config;
  66         u32                     vgt_strmout_buffer_config;
  67         struct radeon_bo        *vgt_strmout_bo[4];
  68         u64                     vgt_strmout_bo_mc[4];
  69         u32                     vgt_strmout_bo_offset[4];
  70         u32                     vgt_strmout_size[4];
  71         u32                     db_depth_control;
  72         u32                     db_depth_view;
  73         u32                     db_depth_slice;
  74         u32                     db_depth_size;
  75         u32                     db_depth_size_idx;
  76         u32                     db_z_info;
  77         u32                     db_z_idx;
  78         u32                     db_z_read_offset;
  79         u32                     db_z_write_offset;
  80         struct radeon_bo        *db_z_read_bo;
  81         struct radeon_bo        *db_z_write_bo;
  82         u32                     db_s_info;
  83         u32                     db_s_idx;
  84         u32                     db_s_read_offset;
  85         u32                     db_s_write_offset;
  86         struct radeon_bo        *db_s_read_bo;
  87         struct radeon_bo        *db_s_write_bo;
  88         bool                    sx_misc_kill_all_prims;
  89 };
  90
  91 static u32 evergreen_cs_get_aray_mode(u32 tiling_flags)
  92 {
  93         if (tiling_flags & RADEON_TILING_MACRO)
  94                 return ARRAY_2D_TILED_THIN1;
  95         else if (tiling_flags & RADEON_TILING_MICRO)
  96                 return ARRAY_1D_TILED_THIN1;
  97         else
  98                 return ARRAY_LINEAR_GENERAL;
  99 }
 100
 101 static u32 evergreen_cs_get_num_banks(u32 nbanks)
 102 {
 103         switch (nbanks) {
 104         case 2:
 105                 return ADDR_SURF_2_BANK;
 106         case 4:
 107                 return ADDR_SURF_4_BANK;
 108         case 8:
 109         default:
 110                 return ADDR_SURF_8_BANK;
 111         case 16:
 112                 return ADDR_SURF_16_BANK;
 113         }
 114 }
 115
 116 static void evergreen_cs_track_init(struct evergreen_cs_track *track)
 117 {
 118         int i;
 119
 120         for (i = 0; i < 8; i++) {
 121                 track->cb_color_fmask_bo[i] = NULL;
 122                 track->cb_color_cmask_bo[i] = NULL;
 123                 track->cb_color_cmask_slice[i] = 0;
 124                 track->cb_color_fmask_slice[i] = 0;
 125         }
 126
 127         for (i = 0; i < 12; i++) {
 128                 track->cb_color_base_last[i] = 0;
 129                 track->cb_color_bo[i] = NULL;
 130                 track->cb_color_bo_offset[i] = 0xFFFFFFFF;
 131                 track->cb_color_info[i] = 0;
 132                 track->cb_color_view[i] = 0xFFFFFFFF;
 133                 track->cb_color_pitch_idx[i] = 0;
 134                 track->cb_color_slice_idx[i] = 0;
 135                 track->cb_color_dim[i] = 0;
 136                 track->cb_color_pitch[i] = 0;
 137                 track->cb_color_slice[i] = 0;
 138                 track->cb_color_dim[i] = 0;
 139         }
 140         track->cb_target_mask = 0xFFFFFFFF;
 141         track->cb_shader_mask = 0xFFFFFFFF;
 142
 143         track->db_depth_view = 0xFFFFC000;
 144         track->db_depth_size = 0xFFFFFFFF;
 145         track->db_depth_size_idx = 0;
 146         track->db_depth_control = 0xFFFFFFFF;
 147         track->db_z_info = 0xFFFFFFFF;
 148         track->db_z_idx = 0xFFFFFFFF;
 149         track->db_z_read_offset = 0xFFFFFFFF;
 150         track->db_z_write_offset = 0xFFFFFFFF;
 151         track->db_z_read_bo = NULL;
 152         track->db_z_write_bo = NULL;
 153         track->db_s_info = 0xFFFFFFFF;
 154         track->db_s_idx = 0xFFFFFFFF;
 155         track->db_s_read_offset = 0xFFFFFFFF;
 156         track->db_s_write_offset = 0xFFFFFFFF;
 157         track->db_s_read_bo = NULL;
 158         track->db_s_write_bo = NULL;
 159
 160         for (i = 0; i < 4; i++) {
 161                 track->vgt_strmout_size[i] = 0;
 162                 track->vgt_strmout_bo[i] = NULL;
 163                 track->vgt_strmout_bo_offset[i] = 0xFFFFFFFF;
 164                 track->vgt_strmout_bo_mc[i] = 0xFFFFFFFF;
 165         }
 166         track->sx_misc_kill_all_prims = false;
 167 }
 168
 169 struct eg_surface {
 170         /* value gathered from cs */
 171         unsigned        nbx;
 172         unsigned        nby;
 173         unsigned        format;
 174         unsigned        mode;
 175         unsigned        nbanks;
 176         unsigned        bankw;
 177         unsigned        bankh;
 178         unsigned        tsplit;
 179         unsigned        mtilea;
 180         unsigned        nsamples;
 181         /* output value */
 182         unsigned        bpe;
 183         unsigned        layer_size;
 184         unsigned        palign;
 185         unsigned        halign;
 186         unsigned long   base_align;
 187 };
 188
 189 static int evergreen_surface_check_linear(struct radeon_cs_parser *p,
 190                                           struct eg_surface *surf,
 191                                           const char *prefix)
 192 {
 193         surf->layer_size = surf->nbx * surf->nby * surf->bpe * surf->nsamples;
 194         surf->base_align = surf->bpe;
 195         surf->palign = 1;
 196         surf->halign = 1;
 197         return 0;
 198 }
 199
 200 static int evergreen_surface_check_linear_aligned(struct radeon_cs_parser *p,
 201                                                   struct eg_surface *surf,
 202                                                   const char *prefix)
 203 {
 204         struct evergreen_cs_track *track = p->track;
 205         unsigned palign;
 206
 207         palign = MAX(64, track->group_size / surf->bpe);
 208         surf->layer_size = surf->nbx * surf->nby * surf->bpe * surf->nsamples;
 209         surf->base_align = track->group_size;
 210         surf->palign = palign;
 211         surf->halign = 1;
 212         if (surf->nbx & (palign - 1)) {
 213                 if (prefix) {
 214                         dev_warn(p->dev, "%s:%d %s pitch %d invalid must be aligned with %d\n",
 215                                  __func__, __LINE__, prefix, surf->nbx, palign);
 216                 }
 217                 return -EINVAL;
 218         }
 219         return 0;
 220 }
 221
 222 static int evergreen_surface_check_1d(struct radeon_cs_parser *p,
 223                                       struct eg_surface *surf,
 224                                       const char *prefix)
 225 {
 226         struct evergreen_cs_track *track = p->track;
 227         unsigned palign;
 228
 229         palign = track->group_size / (8 * surf->bpe * surf->nsamples);
 230         palign = MAX(8, palign);
 231         surf->layer_size = surf->nbx * surf->nby * surf->bpe;
 232         surf->base_align = track->group_size;
 233         surf->palign = palign;
 234         surf->halign = 8;
 235         if ((surf->nbx & (palign - 1))) {
 236                 if (prefix) {
 237                         dev_warn(p->dev, "%s:%d %s pitch %d invalid must be aligned with %d (%d %d %d)\n",
 238                                  __func__, __LINE__, prefix, surf->nbx, palign,
 239                                  track->group_size, surf->bpe, surf->nsamples);
 240                 }
 241                 return -EINVAL;
 242         }
 243         if ((surf->nby & (8 - 1))) {
 244                 if (prefix) {
 245                         dev_warn(p->dev, "%s:%d %s height %d invalid must be aligned with 8\n",
 246                                  __func__, __LINE__, prefix, surf->nby);
 247                 }
 248                 return -EINVAL;
 249         }
 250         return 0;
 251 }
 252
 253 static int evergreen_surface_check_2d(struct radeon_cs_parser *p,
 254                                       struct eg_surface *surf,
 255                                       const char *prefix)
 256 {
 257         struct evergreen_cs_track *track = p->track;
 258         unsigned palign, halign, tileb, slice_pt;
 259
 260         tileb = 64 * surf->bpe * surf->nsamples;
 261         palign = track->group_size / (8 * surf->bpe * surf->nsamples);
 262         palign = MAX(8, palign);
 263         slice_pt = 1;
 264         if (tileb > surf->tsplit) {
 265                 slice_pt = tileb / surf->tsplit;
 266         }
 267         tileb = tileb / slice_pt;
 268         /* macro tile width & height */
 269         palign = (8 * surf->bankw * track->npipes) * surf->mtilea;
 270         halign = (8 * surf->bankh * surf->nbanks) / surf->mtilea;
 271         surf->layer_size = surf->nbx * surf->nby * surf->bpe * slice_pt;
 272         surf->base_align = (palign / 8) * (halign / 8) * tileb;
 273         surf->palign = palign;
 274         surf->halign = halign;
 275
 276         if ((surf->nbx & (palign - 1))) {
 277                 if (prefix) {
 278                         dev_warn(p->dev, "%s:%d %s pitch %d invalid must be aligned with %d\n",
 279                                  __func__, __LINE__, prefix, surf->nbx, palign);
 280                 }
 281                 return -EINVAL;
 282         }
 283         if ((surf->nby & (halign - 1))) {
 284                 if (prefix) {
 285                         dev_warn(p->dev, "%s:%d %s height %d invalid must be aligned with %d\n",
 286                                  __func__, __LINE__, prefix, surf->nby, halign);
 287                 }
 288                 return -EINVAL;
 289         }
 290
 291         return 0;
 292 }
 293
 294 static int evergreen_surface_check(struct radeon_cs_parser *p,
 295                                    struct eg_surface *surf,
 296                                    const char *prefix)
 297 {
 298         /* some common value computed here */
 299         surf->bpe = r600_fmt_get_blocksize(surf->format);
 300
 301         switch (surf->mode) {
 302         case ARRAY_LINEAR_GENERAL:
 303                 return evergreen_surface_check_linear(p, surf, prefix);
 304         case ARRAY_LINEAR_ALIGNED:
 305                 return evergreen_surface_check_linear_aligned(p, surf, prefix);
 306         case ARRAY_1D_TILED_THIN1:
 307                 return evergreen_surface_check_1d(p, surf, prefix);
 308         case ARRAY_2D_TILED_THIN1:
 309                 return evergreen_surface_check_2d(p, surf, prefix);
 310         default:
 311                 dev_warn(p->dev, "%s:%d %s invalid array mode %d\n",
 312                                 __func__, __LINE__, prefix, surf->mode);
 313                 return -EINVAL;
 314         }
 315         return -EINVAL;
 316 }
 317
 318 static int evergreen_surface_value_conv_check(struct radeon_cs_parser *p,
 319                                               struct eg_surface *surf,
 320                                               const char *prefix)
 321 {
 322         switch (surf->mode) {
 323         case ARRAY_2D_TILED_THIN1:
 324                 break;
 325         case ARRAY_LINEAR_GENERAL:
 326         case ARRAY_LINEAR_ALIGNED:
 327         case ARRAY_1D_TILED_THIN1:
 328                 return 0;
 329         default:
 330                 dev_warn(p->dev, "%s:%d %s invalid array mode %d\n",
 331                                 __func__, __LINE__, prefix, surf->mode);
 332                 return -EINVAL;
 333         }
 334
 335         switch (surf->nbanks) {
 336         case 0: surf->nbanks = 2; break;
 337         case 1: surf->nbanks = 4; break;
 338         case 2: surf->nbanks = 8; break;
 339         case 3: surf->nbanks = 16; break;
 340         default:
 341                 dev_warn(p->dev, "%s:%d %s invalid number of banks %d\n",
 342                          __func__, __LINE__, prefix, surf->nbanks);
 343                 return -EINVAL;
 344         }
 345         switch (surf->bankw) {
 346         case 0: surf->bankw = 1; break;
 347         case 1: surf->bankw = 2; break;
 348         case 2: surf->bankw = 4; break;
 349         case 3: surf->bankw = 8; break;
 350         default:
 351                 dev_warn(p->dev, "%s:%d %s invalid bankw %d\n",
 352                          __func__, __LINE__, prefix, surf->bankw);
 353                 return -EINVAL;
 354         }
 355         switch (surf->bankh) {
 356         case 0: surf->bankh = 1; break;
 357         case 1: surf->bankh = 2; break;
 358         case 2: surf->bankh = 4; break;
 359         case 3: surf->bankh = 8; break;
 360         default:
 361                 dev_warn(p->dev, "%s:%d %s invalid bankh %d\n",
 362                          __func__, __LINE__, prefix, surf->bankh);
 363                 return -EINVAL;
 364         }
 365         switch (surf->mtilea) {
 366         case 0: surf->mtilea = 1; break;
 367         case 1: surf->mtilea = 2; break;
 368         case 2: surf->mtilea = 4; break;
 369         case 3: surf->mtilea = 8; break;
 370         default:
 371                 dev_warn(p->dev, "%s:%d %s invalid macro tile aspect %d\n",
 372                          __func__, __LINE__, prefix, surf->mtilea);
 373                 return -EINVAL;
 374         }
 375         switch (surf->tsplit) {
 376         case 0: surf->tsplit = 64; break;
 377         case 1: surf->tsplit = 128; break;
 378         case 2: surf->tsplit = 256; break;
 379         case 3: surf->tsplit = 512; break;
 380         case 4: surf->tsplit = 1024; break;
 381         case 5: surf->tsplit = 2048; break;
 382         case 6: surf->tsplit = 4096; break;
 383         default:
 384                 dev_warn(p->dev, "%s:%d %s invalid tile split %d\n",
 385                          __func__, __LINE__, prefix, surf->tsplit);
 386                 return -EINVAL;
 387         }
 388         return 0;
 389 }
 390
 391 static int evergreen_cs_track_validate_cb(struct radeon_cs_parser *p, unsigned id)
 392 {
 393         struct evergreen_cs_track *track = p->track;
 394         struct eg_surface surf;
 395         unsigned pitch, slice, mslice;
 396         unsigned long offset;
 397         int r;
 398
 399         mslice = G_028C6C_SLICE_MAX(track->cb_color_view[id]) + 1;
 400         pitch = track->cb_color_pitch[id];
 401         slice = track->cb_color_slice[id];
 402         surf.nbx = (pitch + 1) * 8;
 403         surf.nby = ((slice + 1) * 64) / surf.nbx;
 404         surf.mode = G_028C70_ARRAY_MODE(track->cb_color_info[id]);
 405         surf.format = G_028C70_FORMAT(track->cb_color_info[id]);
 406         surf.tsplit = G_028C74_TILE_SPLIT(track->cb_color_attrib[id]);
 407         surf.nbanks = G_028C74_NUM_BANKS(track->cb_color_attrib[id]);
 408         surf.bankw = G_028C74_BANK_WIDTH(track->cb_color_attrib[id]);
 409         surf.bankh = G_028C74_BANK_HEIGHT(track->cb_color_attrib[id]);
 410         surf.mtilea = G_028C74_MACRO_TILE_ASPECT(track->cb_color_attrib[id]);
 411         surf.nsamples = 1;
 412
 413         if (!r600_fmt_is_valid_color(surf.format)) {
 414                 dev_warn(p->dev, "%s:%d cb invalid format %d for %d (0x%08x)\n",
 415                          __func__, __LINE__, surf.format,
 416                         id, track->cb_color_info[id]);
 417                 return -EINVAL;
 418         }
 419
 420         r = evergreen_surface_value_conv_check(p, &surf, "cb");
 421         if (r) {
 422                 return r;
 423         }
 424
 425         r = evergreen_surface_check(p, &surf, "cb");
 426         if (r) {
 427                 dev_warn(p->dev, "%s:%d cb[%d] invalid (0x%08x 0x%08x 0x%08x 0x%08x)\n",
 428                          __func__, __LINE__, id, track->cb_color_pitch[id],
 429                          track->cb_color_slice[id], track->cb_color_attrib[id],
 430                          track->cb_color_info[id]);
 431                 return r;
 432         }
 433
 434         offset = track->cb_color_bo_offset[id] << 8;
 435         if (offset & (surf.base_align - 1)) {
 436                 dev_warn(p->dev, "%s:%d cb[%d] bo base %ld not aligned with %ld\n",
 437                          __func__, __LINE__, id, offset, surf.base_align);
 438                 return -EINVAL;
 439         }
 440
 441         offset += surf.layer_size * mslice;
 442         if (offset > radeon_bo_size(track->cb_color_bo[id])) {
 443                 dev_warn(p->dev, "%s:%d cb[%d] bo too small (layer size %d, "
 444                          "offset %d, max layer %d, bo size %ld, slice %d)\n",
 445                          __func__, __LINE__, id, surf.layer_size,
 446                         track->cb_color_bo_offset[id] << 8, mslice,
 447                         radeon_bo_size(track->cb_color_bo[id]), slice);
 448                 dev_warn(p->dev, "%s:%d problematic surf: (%d %d) (%d %d %d %d %d %d %d)\n",
 449                          __func__, __LINE__, surf.nbx, surf.nby,
 450                         surf.mode, surf.bpe, surf.nsamples,
 451                         surf.bankw, surf.bankh,
 452                         surf.tsplit, surf.mtilea);
 453                 return -EINVAL;
 454         }
 455
 456         return 0;
 457 }
 458
 459 static int evergreen_cs_track_validate_stencil(struct radeon_cs_parser *p)
 460 {
 461         struct evergreen_cs_track *track = p->track;
 462         struct eg_surface surf;
 463         unsigned pitch, slice, mslice;
 464         unsigned long offset;
 465         int r;
 466
 467         mslice = G_028008_SLICE_MAX(track->db_depth_view) + 1;
 468         pitch = G_028058_PITCH_TILE_MAX(track->db_depth_size);
 469         slice = track->db_depth_slice;
 470         surf.nbx = (pitch + 1) * 8;
 471         surf.nby = ((slice + 1) * 64) / surf.nbx;
 472         surf.mode = G_028040_ARRAY_MODE(track->db_z_info);
 473         surf.format = G_028044_FORMAT(track->db_s_info);
 474         surf.tsplit = G_028044_TILE_SPLIT(track->db_s_info);
 475         surf.nbanks = G_028040_NUM_BANKS(track->db_z_info);
 476         surf.bankw = G_028040_BANK_WIDTH(track->db_z_info);
 477         surf.bankh = G_028040_BANK_HEIGHT(track->db_z_info);
 478         surf.mtilea = G_028040_MACRO_TILE_ASPECT(track->db_z_info);
 479         surf.nsamples = 1;
 480
 481         if (surf.format != 1) {
 482                 dev_warn(p->dev, "%s:%d stencil invalid format %d\n",
 483                          __func__, __LINE__, surf.format);
 484                 return -EINVAL;
 485         }
 486         /* replace by color format so we can use same code */
 487         surf.format = V_028C70_COLOR_8;
 488
 489         r = evergreen_surface_value_conv_check(p, &surf, "stencil");
 490         if (r) {
 491                 return r;
 492         }
 493
 494         r = evergreen_surface_check(p, &surf, NULL);
 495         if (r) {
 496                 /* old userspace doesn't compute proper depth/stencil alignment
 497                  * check that alignment against a bigger byte per elements and
 498                  * only report if that alignment is wrong too.
 499                  */
 500                 surf.format = V_028C70_COLOR_8_8_8_8;
 501                 r = evergreen_surface_check(p, &surf, "stencil");
 502                 if (r) {
 503                         dev_warn(p->dev, "%s:%d stencil invalid (0x%08x 0x%08x 0x%08x 0x%08x)\n",
 504                                  __func__, __LINE__, track->db_depth_size,
 505                                  track->db_depth_slice, track->db_s_info, track->db_z_info);
 506                 }
 507                 return r;
 508         }
 509
 510         offset = track->db_s_read_offset << 8;
 511         if (offset & (surf.base_align - 1)) {
 512                 dev_warn(p->dev, "%s:%d stencil read bo base %ld not aligned with %ld\n",
 513                          __func__, __LINE__, offset, surf.base_align);
 514                 return -EINVAL;
 515         }
 516         offset += surf.layer_size * mslice;
 517         if (offset > radeon_bo_size(track->db_s_read_bo)) {
 518                 dev_warn(p->dev, "%s:%d stencil read bo too small (layer size %d, "
 519                          "offset %ld, max layer %d, bo size %ld)\n",
 520                          __func__, __LINE__, surf.layer_size,
 521                         (unsigned long)track->db_s_read_offset << 8, mslice,
 522                         radeon_bo_size(track->db_s_read_bo));
 523                 dev_warn(p->dev, "%s:%d stencil invalid (0x%08x 0x%08x 0x%08x 0x%08x)\n",
 524                          __func__, __LINE__, track->db_depth_size,
 525                          track->db_depth_slice, track->db_s_info, track->db_z_info);
 526                 return -EINVAL;
 527         }
 528
 529         offset = track->db_s_write_offset << 8;
 530         if (offset & (surf.base_align - 1)) {
 531                 dev_warn(p->dev, "%s:%d stencil write bo base %ld not aligned with %ld\n",
 532                          __func__, __LINE__, offset, surf.base_align);
 533                 return -EINVAL;
 534         }
 535         offset += surf.layer_size * mslice;
 536         if (offset > radeon_bo_size(track->db_s_write_bo)) {
 537                 dev_warn(p->dev, "%s:%d stencil write bo too small (layer size %d, "
 538                          "offset %ld, max layer %d, bo size %ld)\n",
 539                          __func__, __LINE__, surf.layer_size,
 540                         (unsigned long)track->db_s_write_offset << 8, mslice,
 541                         radeon_bo_size(track->db_s_write_bo));
 542                 return -EINVAL;
 543         }
 544
 545         return 0;
 546 }
 547
 548 static int evergreen_cs_track_validate_depth(struct radeon_cs_parser *p)
 549 {
 550         struct evergreen_cs_track *track = p->track;
 551         struct eg_surface surf;
 552         unsigned pitch, slice, mslice;
 553         unsigned long offset;
 554         int r;
 555
 556         mslice = G_028008_SLICE_MAX(track->db_depth_view) + 1;
 557         pitch = G_028058_PITCH_TILE_MAX(track->db_depth_size);
 558         slice = track->db_depth_slice;
 559         surf.nbx = (pitch + 1) * 8;
 560         surf.nby = ((slice + 1) * 64) / surf.nbx;
 561         surf.mode = G_028040_ARRAY_MODE(track->db_z_info);
 562         surf.format = G_028040_FORMAT(track->db_z_info);
 563         surf.tsplit = G_028040_TILE_SPLIT(track->db_z_info);
 564         surf.nbanks = G_028040_NUM_BANKS(track->db_z_info);
 565         surf.bankw = G_028040_BANK_WIDTH(track->db_z_info);
 566         surf.bankh = G_028040_BANK_HEIGHT(track->db_z_info);
 567         surf.mtilea = G_028040_MACRO_TILE_ASPECT(track->db_z_info);
 568         surf.nsamples = 1;
 569
 570         switch (surf.format) {
 571         case V_028040_Z_16:
 572                 surf.format = V_028C70_COLOR_16;
 573                 break;
 574         case V_028040_Z_24:
 575         case V_028040_Z_32_FLOAT:
 576                 surf.format = V_028C70_COLOR_8_8_8_8;
 577                 break;
 578         default:
 579                 dev_warn(p->dev, "%s:%d depth invalid format %d\n",
 580                          __func__, __LINE__, surf.format);
 581                 return -EINVAL;
 582         }
 583
 584         r = evergreen_surface_value_conv_check(p, &surf, "depth");
 585         if (r) {
 586                 dev_warn(p->dev, "%s:%d depth invalid (0x%08x 0x%08x 0x%08x)\n",
 587                          __func__, __LINE__, track->db_depth_size,
 588                          track->db_depth_slice, track->db_z_info);
 589                 return r;
 590         }
 591
 592         r = evergreen_surface_check(p, &surf, "depth");
 593         if (r) {
 594                 dev_warn(p->dev, "%s:%d depth invalid (0x%08x 0x%08x 0x%08x)\n",
 595                          __func__, __LINE__, track->db_depth_size,
 596                          track->db_depth_slice, track->db_z_info);
 597                 return r;
 598         }
 599
 600         offset = track->db_z_read_offset << 8;
 601         if (offset & (surf.base_align - 1)) {
 602                 dev_warn(p->dev, "%s:%d stencil read bo base %ld not aligned with %ld\n",
 603                          __func__, __LINE__, offset, surf.base_align);
 604                 return -EINVAL;
 605         }
 606         offset += surf.layer_size * mslice;
 607         if (offset > radeon_bo_size(track->db_z_read_bo)) {
 608                 dev_warn(p->dev, "%s:%d depth read bo too small (layer size %d, "
 609                          "offset %ld, max layer %d, bo size %ld)\n",
 610                          __func__, __LINE__, surf.layer_size,
 611                         (unsigned long)track->db_z_read_offset << 8, mslice,
 612                         radeon_bo_size(track->db_z_read_bo));
 613                 return -EINVAL;
 614         }
 615
 616         offset = track->db_z_write_offset << 8;
 617         if (offset & (surf.base_align - 1)) {
 618                 dev_warn(p->dev, "%s:%d stencil write bo base %ld not aligned with %ld\n",
 619                          __func__, __LINE__, offset, surf.base_align);
 620                 return -EINVAL;
 621         }
 622         offset += surf.layer_size * mslice;
 623         if (offset > radeon_bo_size(track->db_z_write_bo)) {
 624                 dev_warn(p->dev, "%s:%d depth write bo too small (layer size %d, "
 625                          "offset %ld, max layer %d, bo size %ld)\n",
 626                          __func__, __LINE__, surf.layer_size,
 627                         (unsigned long)track->db_z_write_offset << 8, mslice,
 628                         radeon_bo_size(track->db_z_write_bo));
 629                 return -EINVAL;
 630         }
 631
 632         return 0;
 633 }
 634
 635 static int evergreen_cs_track_validate_texture(struct radeon_cs_parser *p,
 636                                                struct radeon_bo *texture,
 637                                                struct radeon_bo *mipmap,
 638                                                unsigned idx)
 639 {
 640         struct eg_surface surf;
 641         unsigned long toffset, moffset;
 642         unsigned dim, llevel, mslice, width, height, depth, i;
 643         u32 texdw[8];
 644         int r;
 645
 646         texdw[0] = radeon_get_ib_value(p, idx + 0);
 647         texdw[1] = radeon_get_ib_value(p, idx + 1);
 648         texdw[2] = radeon_get_ib_value(p, idx + 2);
 649         texdw[3] = radeon_get_ib_value(p, idx + 3);
 650         texdw[4] = radeon_get_ib_value(p, idx + 4);
 651         texdw[5] = radeon_get_ib_value(p, idx + 5);
 652         texdw[6] = radeon_get_ib_value(p, idx + 6);
 653         texdw[7] = radeon_get_ib_value(p, idx + 7);
 654         dim = G_030000_DIM(texdw[0]);
 655         llevel = G_030014_LAST_LEVEL(texdw[5]);
 656         mslice = G_030014_LAST_ARRAY(texdw[5]) + 1;
 657         width = G_030000_TEX_WIDTH(texdw[0]) + 1;
 658         height =  G_030004_TEX_HEIGHT(texdw[1]) + 1;
 659         depth = G_030004_TEX_DEPTH(texdw[1]) + 1;
 660         surf.format = G_03001C_DATA_FORMAT(texdw[7]);
 661         surf.nbx = (G_030000_PITCH(texdw[0]) + 1) * 8;
 662         surf.nbx = r600_fmt_get_nblocksx(surf.format, surf.nbx);
 663         surf.nby = r600_fmt_get_nblocksy(surf.format, height);
 664         surf.mode = G_030004_ARRAY_MODE(texdw[1]);
 665         surf.tsplit = G_030018_TILE_SPLIT(texdw[6]);
 666         surf.nbanks = G_03001C_NUM_BANKS(texdw[7]);
 667         surf.bankw = G_03001C_BANK_WIDTH(texdw[7]);
 668         surf.bankh = G_03001C_BANK_HEIGHT(texdw[7]);
 669         surf.mtilea = G_03001C_MACRO_TILE_ASPECT(texdw[7]);
 670         surf.nsamples = 1;
 671         toffset = texdw[2] << 8;
 672         moffset = texdw[3] << 8;
 673
 674         if (!r600_fmt_is_valid_texture(surf.format, p->family)) {
 675                 dev_warn(p->dev, "%s:%d texture invalid format %d\n",
 676                          __func__, __LINE__, surf.format);
 677                 return -EINVAL;
 678         }
 679         switch (dim) {
 680         case V_030000_SQ_TEX_DIM_1D:
 681         case V_030000_SQ_TEX_DIM_2D:
 682         case V_030000_SQ_TEX_DIM_CUBEMAP:
 683         case V_030000_SQ_TEX_DIM_1D_ARRAY:
 684         case V_030000_SQ_TEX_DIM_2D_ARRAY:
 685                 depth = 1;
 686         case V_030000_SQ_TEX_DIM_3D:
 687                 break;
 688         default:
 689                 dev_warn(p->dev, "%s:%d texture invalid dimension %d\n",
 690                          __func__, __LINE__, dim);
 691                 return -EINVAL;
 692         }
 693
 694         r = evergreen_surface_value_conv_check(p, &surf, "texture");
 695         if (r) {
 696                 return r;
 697         }
 698
 699         /* align height */
 700         evergreen_surface_check(p, &surf, NULL);
 701         surf.nby = ALIGN(surf.nby, surf.halign);
 702
 703         r = evergreen_surface_check(p, &surf, "texture");
 704         if (r) {
 705                 dev_warn(p->dev, "%s:%d texture invalid 0x%08x 0x%08x 0x%08x 0x%08x 0x%08x 0x%08x\n",
 706                          __func__, __LINE__, texdw[0], texdw[1], texdw[4],
 707                          texdw[5], texdw[6], texdw[7]);
 708                 return r;
 709         }
 710
 711         /* check texture size */
 712         if (toffset & (surf.base_align - 1)) {
 713                 dev_warn(p->dev, "%s:%d texture bo base %ld not aligned with %ld\n",
 714                          __func__, __LINE__, toffset, surf.base_align);
 715                 return -EINVAL;
 716         }
 717         if (moffset & (surf.base_align - 1)) {
 718                 dev_warn(p->dev, "%s:%d mipmap bo base %ld not aligned with %ld\n",
 719                          __func__, __LINE__, moffset, surf.base_align);
 720                 return -EINVAL;
 721         }
 722         if (dim == SQ_TEX_DIM_3D) {
 723                 toffset += surf.layer_size * depth;
 724         } else {
 725                 toffset += surf.layer_size * mslice;
 726         }
 727         if (toffset > radeon_bo_size(texture)) {
 728                 dev_warn(p->dev, "%s:%d texture bo too small (layer size %d, "
 729                          "offset %ld, max layer %d, depth %d, bo size %ld) (%d %d)\n",
 730                          __func__, __LINE__, surf.layer_size,
 731                         (unsigned long)texdw[2] << 8, mslice,
 732                         depth, radeon_bo_size(texture),
 733                         surf.nbx, surf.nby);
 734                 return -EINVAL;
 735         }
 736
 737         /* check mipmap size */
 738         for (i = 1; i <= llevel; i++) {
 739                 unsigned w, h, d;
 740
 741                 w = r600_mip_minify(width, i);
 742                 h = r600_mip_minify(height, i);
 743                 d = r600_mip_minify(depth, i);
 744                 surf.nbx = r600_fmt_get_nblocksx(surf.format, w);
 745                 surf.nby = r600_fmt_get_nblocksy(surf.format, h);
 746
 747                 switch (surf.mode) {
 748                 case ARRAY_2D_TILED_THIN1:
 749                         if (surf.nbx < surf.palign || surf.nby < surf.halign) {
 750                                 surf.mode = ARRAY_1D_TILED_THIN1;
 751                         }
 752                         /* recompute alignment */
 753                         evergreen_surface_check(p, &surf, NULL);
 754                         break;
 755                 case ARRAY_LINEAR_GENERAL:
 756                 case ARRAY_LINEAR_ALIGNED:
 757                 case ARRAY_1D_TILED_THIN1:
 758                         break;
 759                 default:
 760                         dev_warn(p->dev, "%s:%d invalid array mode %d\n",
 761                                  __func__, __LINE__, surf.mode);
 762                         return -EINVAL;
 763                 }
 764                 surf.nbx = ALIGN(surf.nbx, surf.palign);
 765                 surf.nby = ALIGN(surf.nby, surf.halign);
 766
 767                 r = evergreen_surface_check(p, &surf, "mipmap");
 768                 if (r) {
 769                         return r;
 770                 }
 771
 772                 if (dim == SQ_TEX_DIM_3D) {
 773                         moffset += surf.layer_size * d;
 774                 } else {
 775                         moffset += surf.layer_size * mslice;
 776                 }
 777                 if (moffset > radeon_bo_size(mipmap)) {
 778                         dev_warn(p->dev, "%s:%d mipmap [%d] bo too small (layer size %d, "
 779                                         "offset %ld, coffset %ld, max layer %d, depth %d, "
 780                                         "bo size %ld) level0 (%d %d %d)\n",
 781                                         __func__, __LINE__, i, surf.layer_size,
 782                                         (unsigned long)texdw[3] << 8, moffset, mslice,
 783                                         d, radeon_bo_size(mipmap),
 784                                         width, height, depth);
 785                         dev_warn(p->dev, "%s:%d problematic surf: (%d %d) (%d %d %d %d %d %d %d)\n",
 786                                  __func__, __LINE__, surf.nbx, surf.nby,
 787                                 surf.mode, surf.bpe, surf.nsamples,
 788                                 surf.bankw, surf.bankh,
 789                                 surf.tsplit, surf.mtilea);
 790                         return -EINVAL;
 791                 }
 792         }
 793
 794         return 0;
 795 }
 796
 797 static int evergreen_cs_track_check(struct radeon_cs_parser *p)
 798 {
 799         struct evergreen_cs_track *track = p->track;
 800         unsigned tmp, i, j;
 801         int r;
 802
 803         /* check streamout */
 804         for (i = 0; i < 4; i++) {
 805                 if (track->vgt_strmout_config & (1 << i)) {
 806                         for (j = 0; j < 4; j++) {
 807                                 if ((track->vgt_strmout_buffer_config >> (i * 4)) & (1 << j)) {
 808                                         if (track->vgt_strmout_bo[j]) {
 809                                                 u64 offset = (u64)track->vgt_strmout_bo_offset[j] +
 810                                                         (u64)track->vgt_strmout_size[j];
 811                                                 if (offset > radeon_bo_size(track->vgt_strmout_bo[i])) {
 812                                                         DRM_ERROR("streamout %d bo too small: 0x%llx, 0x%lx\n",
 813                                                                   j, offset,
 814                                                                   radeon_bo_size(track->vgt_strmout_bo[j]));
 815                                                         return -EINVAL;
 816                                                 }
 817                                         } else {
 818                                                 dev_warn(p->dev, "No buffer for streamout %d\n", j);
 819                                                 return -EINVAL;
 820                                         }
 821                                 }
 822                         }
 823                 }
 824         }
 825
 826         if (track->sx_misc_kill_all_prims)
 827                 return 0;
 828
 829         /* check that we have a cb for each enabled target
 830          */
 831         tmp = track->cb_target_mask;
 832         for (i = 0; i < 8; i++) {
 833                 if ((tmp >> (i * 4)) & 0xF) {
 834                         /* at least one component is enabled */
 835                         if (track->cb_color_bo[i] == NULL) {
 836                                 dev_warn(p->dev, "%s:%d mask 0x%08X | 0x%08X no cb for %d\n",
 837                                         __func__, __LINE__, track->cb_target_mask, track->cb_shader_mask, i);
 838                                 return -EINVAL;
 839                         }
 840                         /* check cb */
 841                         r = evergreen_cs_track_validate_cb(p, i);
 842                         if (r) {
 843                                 return r;
 844                         }
 845                 }
 846         }
 847
 848         /* Check stencil buffer */
 849         if (G_028800_STENCIL_ENABLE(track->db_depth_control)) {
 850                 r = evergreen_cs_track_validate_stencil(p);
 851                 if (r)
 852                         return r;
 853         }
 854         /* Check depth buffer */
 855         if (G_028800_Z_WRITE_ENABLE(track->db_depth_control)) {
 856                 r = evergreen_cs_track_validate_depth(p);
 857                 if (r)
 858                         return r;
 859         }
 860
 861         return 0;
 862 }
 863
 864 /**
 865  * evergreen_cs_packet_parse() - parse cp packet and point ib index to next packet
 866  * @parser:     parser structure holding parsing context.
 867  * @pkt:        where to store packet informations
 868  *
 869  * Assume that chunk_ib_index is properly set. Will return -EINVAL
 870  * if packet is bigger than remaining ib size. or if packets is unknown.
 871  **/
 872 int evergreen_cs_packet_parse(struct radeon_cs_parser *p,
 873                               struct radeon_cs_packet *pkt,
 874                               unsigned idx)
 875 {
 876         struct radeon_cs_chunk *ib_chunk = &p->chunks[p->chunk_ib_idx];
 877         uint32_t header;
 878
 879         if (idx >= ib_chunk->length_dw) {
 880                 DRM_ERROR("Can not parse packet at %d after CS end %d !\n",
 881                           idx, ib_chunk->length_dw);
 882                 return -EINVAL;
 883         }
 884         header = radeon_get_ib_value(p, idx);
 885         pkt->idx = idx;
 886         pkt->type = CP_PACKET_GET_TYPE(header);
 887         pkt->count = CP_PACKET_GET_COUNT(header);
 888         pkt->one_reg_wr = 0;
 889         switch (pkt->type) {
 890         case PACKET_TYPE0:
 891                 pkt->reg = CP_PACKET0_GET_REG(header);
 892                 break;
 893         case PACKET_TYPE3:
 894                 pkt->opcode = CP_PACKET3_GET_OPCODE(header);
 895                 break;
 896         case PACKET_TYPE2:
 897                 pkt->count = -1;
 898                 break;
 899         default:
 900                 DRM_ERROR("Unknown packet type %d at %d !\n", pkt->type, idx);
 901                 return -EINVAL;
 902         }
 903         if ((pkt->count + 1 + pkt->idx) >= ib_chunk->length_dw) {
 904                 DRM_ERROR("Packet (%d:%d:%d) end after CS buffer (%d) !\n",
 905                           pkt->idx, pkt->type, pkt->count, ib_chunk->length_dw);
 906                 return -EINVAL;
 907         }
 908         return 0;
 909 }
 910
 911 /**
 912  * evergreen_cs_packet_next_reloc() - parse next packet which should be reloc packet3
 913  * @parser:             parser structure holding parsing context.
 914  * @data:               pointer to relocation data
 915  * @offset_start:       starting offset
 916  * @offset_mask:        offset mask (to align start offset on)
 917  * @reloc:              reloc informations
 918  *
 919  * Check next packet is relocation packet3, do bo validation and compute
 920  * GPU offset using the provided start.
 921  **/
 922 static int evergreen_cs_packet_next_reloc(struct radeon_cs_parser *p,
 923                                           struct radeon_cs_reloc **cs_reloc)
 924 {
 925         struct radeon_cs_chunk *relocs_chunk;
 926         struct radeon_cs_packet p3reloc;
 927         unsigned idx;
 928         int r;
 929
 930         if (p->chunk_relocs_idx == -1) {
 931                 DRM_ERROR("No relocation chunk !\n");
 932                 return -EINVAL;
 933         }
 934         *cs_reloc = NULL;
 935         relocs_chunk = &p->chunks[p->chunk_relocs_idx];
 936         r = evergreen_cs_packet_parse(p, &p3reloc, p->idx);
 937         if (r) {
 938                 return r;
 939         }
 940         p->idx += p3reloc.count + 2;
 941         if (p3reloc.type != PACKET_TYPE3 || p3reloc.opcode != PACKET3_NOP) {
 942                 DRM_ERROR("No packet3 for relocation for packet at %d.\n",
 943                           p3reloc.idx);
 944                 return -EINVAL;
 945         }
 946         idx = radeon_get_ib_value(p, p3reloc.idx + 1);
 947         if (idx >= relocs_chunk->length_dw) {
 948                 DRM_ERROR("Relocs at %d after relocations chunk end %d !\n",
 949                           idx, relocs_chunk->length_dw);
 950                 return -EINVAL;
 951         }
 952         /* FIXME: we assume reloc size is 4 dwords */
 953         *cs_reloc = p->relocs_ptr[(idx / 4)];
 954         return 0;
 955 }
 956
 957 /**
 958  * evergreen_cs_packet_next_vline() - parse userspace VLINE packet
 959  * @parser:             parser structure holding parsing context.
 960  *
 961  * Userspace sends a special sequence for VLINE waits.
 962  * PACKET0 - VLINE_START_END + value
 963  * PACKET3 - WAIT_REG_MEM poll vline status reg
 964  * RELOC (P3) - crtc_id in reloc.
 965  *
 966  * This function parses this and relocates the VLINE START END
 967  * and WAIT_REG_MEM packets to the correct crtc.
 968  * It also detects a switched off crtc and nulls out the
 969  * wait in that case.
 970  */
 971 static int evergreen_cs_packet_parse_vline(struct radeon_cs_parser *p)
 972 {
 973         struct drm_mode_object *obj;
 974         struct drm_crtc *crtc;
 975         struct radeon_crtc *radeon_crtc;
 976         struct radeon_cs_packet p3reloc, wait_reg_mem;
 977         int crtc_id;
 978         int r;
 979         uint32_t header, h_idx, reg, wait_reg_mem_info;
 980         volatile uint32_t *ib;
 981
 982         ib = p->ib->ptr;
 983
 984         /* parse the WAIT_REG_MEM */
 985         r = evergreen_cs_packet_parse(p, &wait_reg_mem, p->idx);
 986         if (r)
 987                 return r;
 988
 989         /* check its a WAIT_REG_MEM */
 990         if (wait_reg_mem.type != PACKET_TYPE3 ||
 991             wait_reg_mem.opcode != PACKET3_WAIT_REG_MEM) {
 992                 DRM_ERROR("vline wait missing WAIT_REG_MEM segment\n");
 993                 return -EINVAL;
 994         }
 995
 996         wait_reg_mem_info = radeon_get_ib_value(p, wait_reg_mem.idx + 1);
 997         /* bit 4 is reg (0) or mem (1) */
 998         if (wait_reg_mem_info & 0x10) {
 999                 DRM_ERROR("vline WAIT_REG_MEM waiting on MEM rather than REG\n");
1000                 return -EINVAL;
1001         }
1002         /* waiting for value to be equal */
1003         if ((wait_reg_mem_info & 0x7) != 0x3) {
1004                 DRM_ERROR("vline WAIT_REG_MEM function not equal\n");
1005                 return -EINVAL;
1006         }
1007         if ((radeon_get_ib_value(p, wait_reg_mem.idx + 2) << 2) != EVERGREEN_VLINE_STATUS) {
1008                 DRM_ERROR("vline WAIT_REG_MEM bad reg\n");
1009                 return -EINVAL;
1010         }
1011
1012         if (radeon_get_ib_value(p, wait_reg_mem.idx + 5) != EVERGREEN_VLINE_STAT) {
1013                 DRM_ERROR("vline WAIT_REG_MEM bad bit mask\n");
1014                 return -EINVAL;
1015         }
1016
1017         /* jump over the NOP */
1018         r = evergreen_cs_packet_parse(p, &p3reloc, p->idx + wait_reg_mem.count + 2);
1019         if (r)
1020                 return r;
1021
1022         h_idx = p->idx - 2;
1023         p->idx += wait_reg_mem.count + 2;
1024         p->idx += p3reloc.count + 2;
1025
1026         header = radeon_get_ib_value(p, h_idx);
1027         crtc_id = radeon_get_ib_value(p, h_idx + 2 + 7 + 1);
1028         reg = CP_PACKET0_GET_REG(header);
1029         obj = drm_mode_object_find(p->rdev->ddev, crtc_id, DRM_MODE_OBJECT_CRTC);
1030         if (!obj) {
1031                 DRM_ERROR("cannot find crtc %d\n", crtc_id);
1032                 return -EINVAL;
1033         }
1034         crtc = obj_to_crtc(obj);
1035         radeon_crtc = to_radeon_crtc(crtc);
1036         crtc_id = radeon_crtc->crtc_id;
1037
1038         if (!crtc->enabled) {
1039                 /* if the CRTC isn't enabled - we need to nop out the WAIT_REG_MEM */
1040                 ib[h_idx + 2] = PACKET2(0);
1041                 ib[h_idx + 3] = PACKET2(0);
1042                 ib[h_idx + 4] = PACKET2(0);
1043                 ib[h_idx + 5] = PACKET2(0);
1044                 ib[h_idx + 6] = PACKET2(0);
1045                 ib[h_idx + 7] = PACKET2(0);
1046                 ib[h_idx + 8] = PACKET2(0);
1047         } else {
1048                 switch (reg) {
1049                 case EVERGREEN_VLINE_START_END:
1050                         header &= ~R600_CP_PACKET0_REG_MASK;
1051                         header |= (EVERGREEN_VLINE_START_END + radeon_crtc->crtc_offset) >> 2;
1052                         ib[h_idx] = header;
1053                         ib[h_idx + 4] = (EVERGREEN_VLINE_STATUS + radeon_crtc->crtc_offset) >> 2;
1054                         break;
1055                 default:
1056                         DRM_ERROR("unknown crtc reloc\n");
1057                         return -EINVAL;
1058                 }
1059         }
1060         return 0;
1061 }
1062
1063 static int evergreen_packet0_check(struct radeon_cs_parser *p,
1064                                    struct radeon_cs_packet *pkt,
1065                                    unsigned idx, unsigned reg)
1066 {
1067         int r;
1068
1069         switch (reg) {
1070         case EVERGREEN_VLINE_START_END:
1071                 r = evergreen_cs_packet_parse_vline(p);
1072                 if (r) {
1073                         DRM_ERROR("No reloc for ib[%d]=0x%04X\n",
1074                                         idx, reg);
1075                         return r;
1076                 }
1077                 break;
1078         default:
1079                 printk(KERN_ERR "Forbidden register 0x%04X in cs at %d\n",
1080                        reg, idx);
1081                 return -EINVAL;
1082         }
1083         return 0;
1084 }
1085
1086 static int evergreen_cs_parse_packet0(struct radeon_cs_parser *p,
1087                                       struct radeon_cs_packet *pkt)
1088 {
1089         unsigned reg, i;
1090         unsigned idx;
1091         int r;
1092
1093         idx = pkt->idx + 1;
1094         reg = pkt->reg;
1095         for (i = 0; i <= pkt->count; i++, idx++, reg += 4) {
1096                 r = evergreen_packet0_check(p, pkt, idx, reg);
1097                 if (r) {
1098                         return r;
1099                 }
1100         }
1101         return 0;
1102 }
1103
1104 /**
1105  * evergreen_cs_check_reg() - check if register is authorized or not
1106  * @parser: parser structure holding parsing context
1107  * @reg: register we are testing
1108  * @idx: index into the cs buffer
1109  *
1110  * This function will test against evergreen_reg_safe_bm and return 0
1111  * if register is safe. If register is not flag as safe this function
1112  * will test it against a list of register needind special handling.
1113  */
1114 static int evergreen_cs_check_reg(struct radeon_cs_parser *p, u32 reg, u32 idx)
1115 {
1116         struct evergreen_cs_track *track = (struct evergreen_cs_track *)p->track;
1117         struct radeon_cs_reloc *reloc;
1118         u32 last_reg;
1119         u32 m, i, tmp, *ib;
1120         int r;
1121
1122         if (p->rdev->family >= CHIP_CAYMAN)
1123                 last_reg = ARRAY_SIZE(cayman_reg_safe_bm);
1124         else
1125                 last_reg = ARRAY_SIZE(evergreen_reg_safe_bm);
1126
1127         i = (reg >> 7);
1128         if (i >= last_reg) {
1129                 dev_warn(p->dev, "forbidden register 0x%08x at %d\n", reg, idx);
1130                 return -EINVAL;
1131         }
1132         m = 1 << ((reg >> 2) & 31);
1133         if (p->rdev->family >= CHIP_CAYMAN) {
1134                 if (!(cayman_reg_safe_bm[i] & m))
1135                         return 0;
1136         } else {
1137                 if (!(evergreen_reg_safe_bm[i] & m))
1138                         return 0;
1139         }
1140         ib = p->ib->ptr;
1141         switch (reg) {
1142         /* force following reg to 0 in an attempt to disable out buffer
1143          * which will need us to better understand how it works to perform
1144          * security check on it (Jerome)
1145          */
1146         case SQ_ESGS_RING_SIZE:
1147         case SQ_GSVS_RING_SIZE:
1148         case SQ_ESTMP_RING_SIZE:
1149         case SQ_GSTMP_RING_SIZE:
1150         case SQ_HSTMP_RING_SIZE:
1151         case SQ_LSTMP_RING_SIZE:
1152         case SQ_PSTMP_RING_SIZE:
1153         case SQ_VSTMP_RING_SIZE:
1154         case SQ_ESGS_RING_ITEMSIZE:
1155         case SQ_ESTMP_RING_ITEMSIZE:
1156         case SQ_GSTMP_RING_ITEMSIZE:
1157         case SQ_GSVS_RING_ITEMSIZE:
1158         case SQ_GS_VERT_ITEMSIZE:
1159         case SQ_GS_VERT_ITEMSIZE_1:
1160         case SQ_GS_VERT_ITEMSIZE_2:
1161         case SQ_GS_VERT_ITEMSIZE_3:
1162         case SQ_GSVS_RING_OFFSET_1:
1163         case SQ_GSVS_RING_OFFSET_2:
1164         case SQ_GSVS_RING_OFFSET_3:
1165         case SQ_HSTMP_RING_ITEMSIZE:
1166         case SQ_LSTMP_RING_ITEMSIZE:
1167         case SQ_PSTMP_RING_ITEMSIZE:
1168         case SQ_VSTMP_RING_ITEMSIZE:
1169         case VGT_TF_RING_SIZE:
1170                 /* get value to populate the IB don't remove */
1171                 /*tmp =radeon_get_ib_value(p, idx);
1172                   ib[idx] = 0;*/
1173                 break;
1174         case SQ_ESGS_RING_BASE:
1175         case SQ_GSVS_RING_BASE:
1176         case SQ_ESTMP_RING_BASE:
1177         case SQ_GSTMP_RING_BASE:
1178         case SQ_HSTMP_RING_BASE:
1179         case SQ_LSTMP_RING_BASE:
1180         case SQ_PSTMP_RING_BASE:
1181         case SQ_VSTMP_RING_BASE:
1182                 r = evergreen_cs_packet_next_reloc(p, &reloc);
1183                 if (r) {
1184                         dev_warn(p->dev, "bad SET_CONTEXT_REG "
1185                                         "0x%04X\n", reg);
1186                         return -EINVAL;
1187                 }
1188                 ib[idx] += (u32)((reloc->lobj.gpu_offset >> 8) & 0xffffffff);
1189                 break;
1190         case DB_DEPTH_CONTROL:
1191                 track->db_depth_control = radeon_get_ib_value(p, idx);
1192                 break;
1193         case CAYMAN_DB_EQAA:
1194                 if (p->rdev->family < CHIP_CAYMAN) {
1195                         dev_warn(p->dev, "bad SET_CONTEXT_REG "
1196                                  "0x%04X\n", reg);
1197                         return -EINVAL;
1198                 }
1199                 break;
1200         case CAYMAN_DB_DEPTH_INFO:
1201                 if (p->rdev->family < CHIP_CAYMAN) {
1202                         dev_warn(p->dev, "bad SET_CONTEXT_REG "
1203                                  "0x%04X\n", reg);
1204                         return -EINVAL;
1205                 }
1206                 break;
1207         case DB_Z_INFO:
1208                 track->db_z_info = radeon_get_ib_value(p, idx);
1209                 if (!(p->cs_flags & RADEON_CS_KEEP_TILING_FLAGS)) {
1210                         r = evergreen_cs_packet_next_reloc(p, &reloc);
1211                         if (r) {
1212                                 dev_warn(p->dev, "bad SET_CONTEXT_REG "
1213                                                 "0x%04X\n", reg);
1214                                 return -EINVAL;
1215                         }
1216                         ib[idx] &= ~Z_ARRAY_MODE(0xf);
1217                         track->db_z_info &= ~Z_ARRAY_MODE(0xf);
1218                         ib[idx] |= Z_ARRAY_MODE(evergreen_cs_get_aray_mode(reloc->lobj.tiling_flags));
1219                         track->db_z_info |= Z_ARRAY_MODE(evergreen_cs_get_aray_mode(reloc->lobj.tiling_flags));
1220                         if (reloc->lobj.tiling_flags & RADEON_TILING_MACRO) {
1221                                 unsigned bankw, bankh, mtaspect, tile_split;
1222
1223                                 evergreen_tiling_fields(reloc->lobj.tiling_flags,
1224                                                         &bankw, &bankh, &mtaspect,
1225                                                         &tile_split);
1226                                 ib[idx] |= DB_NUM_BANKS(evergreen_cs_get_num_banks(track->nbanks));
1227                                 ib[idx] |= DB_TILE_SPLIT(tile_split) |
1228                                                 DB_BANK_WIDTH(bankw) |
1229                                                 DB_BANK_HEIGHT(bankh) |
1230                                                 DB_MACRO_TILE_ASPECT(mtaspect);
1231                         }
1232                 }
1233                 break;
1234         case DB_STENCIL_INFO:
1235                 track->db_s_info = radeon_get_ib_value(p, idx);
1236                 break;
1237         case DB_DEPTH_VIEW:
1238                 track->db_depth_view = radeon_get_ib_value(p, idx);
1239                 break;
1240         case DB_DEPTH_SIZE:
1241                 track->db_depth_size = radeon_get_ib_value(p, idx);
1242                 track->db_depth_size_idx = idx;
1243                 break;
1244         case R_02805C_DB_DEPTH_SLICE:
1245                 track->db_depth_slice = radeon_get_ib_value(p, idx);
1246                 break;
1247         case DB_Z_READ_BASE:
1248                 r = evergreen_cs_packet_next_reloc(p, &reloc);
1249                 if (r) {
1250                         dev_warn(p->dev, "bad SET_CONTEXT_REG "
1251                                         "0x%04X\n", reg);
1252                         return -EINVAL;
1253                 }
1254                 track->db_z_read_offset = radeon_get_ib_value(p, idx);
1255                 ib[idx] += (u32)((reloc->lobj.gpu_offset >> 8) & 0xffffffff);
1256                 track->db_z_read_bo = reloc->robj;
1257                 break;
1258         case DB_Z_WRITE_BASE:
1259                 r = evergreen_cs_packet_next_reloc(p, &reloc);
1260                 if (r) {
1261                         dev_warn(p->dev, "bad SET_CONTEXT_REG "
1262                                         "0x%04X\n", reg);
1263                         return -EINVAL;
1264                 }
1265                 track->db_z_write_offset = radeon_get_ib_value(p, idx);
1266                 ib[idx] += (u32)((reloc->lobj.gpu_offset >> 8) & 0xffffffff);
1267                 track->db_z_write_bo = reloc->robj;
1268                 break;
1269         case DB_STENCIL_READ_BASE:
1270                 r = evergreen_cs_packet_next_reloc(p, &reloc);
1271                 if (r) {
1272                         dev_warn(p->dev, "bad SET_CONTEXT_REG "
1273                                         "0x%04X\n", reg);
1274                         return -EINVAL;
1275                 }
1276                 track->db_s_read_offset = radeon_get_ib_value(p, idx);
1277                 ib[idx] += (u32)((reloc->lobj.gpu_offset >> 8) & 0xffffffff);
1278                 track->db_s_read_bo = reloc->robj;
1279                 break;
1280         case DB_STENCIL_WRITE_BASE:
1281                 r = evergreen_cs_packet_next_reloc(p, &reloc);
1282                 if (r) {
1283                         dev_warn(p->dev, "bad SET_CONTEXT_REG "
1284                                         "0x%04X\n", reg);
1285                         return -EINVAL;
1286                 }
1287                 track->db_s_write_offset = radeon_get_ib_value(p, idx);
1288                 ib[idx] += (u32)((reloc->lobj.gpu_offset >> 8) & 0xffffffff);
1289                 track->db_s_write_bo = reloc->robj;
1290                 break;
1291         case VGT_STRMOUT_CONFIG:
1292                 track->vgt_strmout_config = radeon_get_ib_value(p, idx);
1293                 break;
1294         case VGT_STRMOUT_BUFFER_CONFIG:
1295                 track->vgt_strmout_buffer_config = radeon_get_ib_value(p, idx);
1296                 break;
1297         case VGT_STRMOUT_BUFFER_BASE_0:
1298         case VGT_STRMOUT_BUFFER_BASE_1:
1299         case VGT_STRMOUT_BUFFER_BASE_2:
1300         case VGT_STRMOUT_BUFFER_BASE_3:
1301                 r = evergreen_cs_packet_next_reloc(p, &reloc);
1302                 if (r) {
1303                         dev_warn(p->dev, "bad SET_CONTEXT_REG "
1304                                         "0x%04X\n", reg);
1305                         return -EINVAL;
1306                 }
1307                 tmp = (reg - VGT_STRMOUT_BUFFER_BASE_0) / 16;
1308                 track->vgt_strmout_bo_offset[tmp] = radeon_get_ib_value(p, idx) << 8;
1309                 ib[idx] += (u32)((reloc->lobj.gpu_offset >> 8) & 0xffffffff);
1310                 track->vgt_strmout_bo[tmp] = reloc->robj;
1311                 track->vgt_strmout_bo_mc[tmp] = reloc->lobj.gpu_offset;
1312                 break;
1313         case VGT_STRMOUT_BUFFER_SIZE_0:
1314         case VGT_STRMOUT_BUFFER_SIZE_1:
1315         case VGT_STRMOUT_BUFFER_SIZE_2:
1316         case VGT_STRMOUT_BUFFER_SIZE_3:
1317                 tmp = (reg - VGT_STRMOUT_BUFFER_SIZE_0) / 16;
1318                 /* size in register is DWs, convert to bytes */
1319                 track->vgt_strmout_size[tmp] = radeon_get_ib_value(p, idx) * 4;
1320                 break;
1321         case CP_COHER_BASE:
1322                 r = evergreen_cs_packet_next_reloc(p, &reloc);
1323                 if (r) {
1324                         dev_warn(p->dev, "missing reloc for CP_COHER_BASE "
1325                                         "0x%04X\n", reg);
1326                         return -EINVAL;
1327                 }
1328                 ib[idx] += (u32)((reloc->lobj.gpu_offset >> 8) & 0xffffffff);
1329         case CB_TARGET_MASK:
1330                 track->cb_target_mask = radeon_get_ib_value(p, idx);
1331                 break;
1332         case CB_SHADER_MASK:
1333                 track->cb_shader_mask = radeon_get_ib_value(p, idx);
1334                 break;
1335         case PA_SC_AA_CONFIG:
1336                 if (p->rdev->family >= CHIP_CAYMAN) {
1337                         dev_warn(p->dev, "bad SET_CONTEXT_REG "
1338                                  "0x%04X\n", reg);
1339                         return -EINVAL;
1340                 }
1341                 tmp = radeon_get_ib_value(p, idx) & MSAA_NUM_SAMPLES_MASK;
1342                 track->nsamples = 1 << tmp;
1343                 break;
1344         case CAYMAN_PA_SC_AA_CONFIG:
1345                 if (p->rdev->family < CHIP_CAYMAN) {
1346                         dev_warn(p->dev, "bad SET_CONTEXT_REG "
1347                                  "0x%04X\n", reg);
1348                         return -EINVAL;
1349                 }
1350                 tmp = radeon_get_ib_value(p, idx) & CAYMAN_MSAA_NUM_SAMPLES_MASK;
1351                 track->nsamples = 1 << tmp;
1352                 break;
1353         case CB_COLOR0_VIEW:
1354         case CB_COLOR1_VIEW:
1355         case CB_COLOR2_VIEW:
1356         case CB_COLOR3_VIEW:
1357         case CB_COLOR4_VIEW:
1358         case CB_COLOR5_VIEW:
1359         case CB_COLOR6_VIEW:
1360         case CB_COLOR7_VIEW:
1361                 tmp = (reg - CB_COLOR0_VIEW) / 0x3c;
1362                 track->cb_color_view[tmp] = radeon_get_ib_value(p, idx);
1363                 break;
1364         case CB_COLOR8_VIEW:
1365         case CB_COLOR9_VIEW:
1366         case CB_COLOR10_VIEW:
1367         case CB_COLOR11_VIEW:
1368                 tmp = ((reg - CB_COLOR8_VIEW) / 0x1c) + 8;
1369                 track->cb_color_view[tmp] = radeon_get_ib_value(p, idx);
1370                 break;
1371         case CB_COLOR0_INFO:
1372         case CB_COLOR1_INFO:
1373         case CB_COLOR2_INFO:
1374         case CB_COLOR3_INFO:
1375         case CB_COLOR4_INFO:
1376         case CB_COLOR5_INFO:
1377         case CB_COLOR6_INFO:
1378         case CB_COLOR7_INFO:
1379                 tmp = (reg - CB_COLOR0_INFO) / 0x3c;
1380                 track->cb_color_info[tmp] = radeon_get_ib_value(p, idx);
1381                 if (!(p->cs_flags & RADEON_CS_KEEP_TILING_FLAGS)) {
1382                         r = evergreen_cs_packet_next_reloc(p, &reloc);
1383                         if (r) {
1384                                 dev_warn(p->dev, "bad SET_CONTEXT_REG "
1385                                                 "0x%04X\n", reg);
1386                                 return -EINVAL;
1387                         }
1388                         ib[idx] |= CB_ARRAY_MODE(evergreen_cs_get_aray_mode(reloc->lobj.tiling_flags));
1389                         track->cb_color_info[tmp] |= CB_ARRAY_MODE(evergreen_cs_get_aray_mode(reloc->lobj.tiling_flags));
1390                 }
1391                 break;
1392         case CB_COLOR8_INFO:
1393         case CB_COLOR9_INFO:
1394         case CB_COLOR10_INFO:
1395         case CB_COLOR11_INFO:
1396                 tmp = ((reg - CB_COLOR8_INFO) / 0x1c) + 8;
1397                 track->cb_color_info[tmp] = radeon_get_ib_value(p, idx);
1398                 if (!(p->cs_flags & RADEON_CS_KEEP_TILING_FLAGS)) {
1399                         r = evergreen_cs_packet_next_reloc(p, &reloc);
1400                         if (r) {
1401                                 dev_warn(p->dev, "bad SET_CONTEXT_REG "
1402                                                 "0x%04X\n", reg);
1403                                 return -EINVAL;
1404                         }
1405                         ib[idx] |= CB_ARRAY_MODE(evergreen_cs_get_aray_mode(reloc->lobj.tiling_flags));
1406                         track->cb_color_info[tmp] |= CB_ARRAY_MODE(evergreen_cs_get_aray_mode(reloc->lobj.tiling_flags));
1407                 }
1408                 break;
1409         case CB_COLOR0_PITCH:
1410         case CB_COLOR1_PITCH:
1411         case CB_COLOR2_PITCH:
1412         case CB_COLOR3_PITCH:
1413         case CB_COLOR4_PITCH:
1414         case CB_COLOR5_PITCH:
1415         case CB_COLOR6_PITCH:
1416         case CB_COLOR7_PITCH:
1417                 tmp = (reg - CB_COLOR0_PITCH) / 0x3c;
1418                 track->cb_color_pitch[tmp] = radeon_get_ib_value(p, idx);
1419                 track->cb_color_pitch_idx[tmp] = idx;
1420                 break;
1421         case CB_COLOR8_PITCH:
1422         case CB_COLOR9_PITCH:
1423         case CB_COLOR10_PITCH:
1424         case CB_COLOR11_PITCH:
1425                 tmp = ((reg - CB_COLOR8_PITCH) / 0x1c) + 8;
1426                 track->cb_color_pitch[tmp] = radeon_get_ib_value(p, idx);
1427                 track->cb_color_pitch_idx[tmp] = idx;
1428                 break;
1429         case CB_COLOR0_SLICE:
1430         case CB_COLOR1_SLICE:
1431         case CB_COLOR2_SLICE:
1432         case CB_COLOR3_SLICE:
1433         case CB_COLOR4_SLICE:
1434         case CB_COLOR5_SLICE:
1435         case CB_COLOR6_SLICE:
1436         case CB_COLOR7_SLICE:
1437                 tmp = (reg - CB_COLOR0_SLICE) / 0x3c;
1438                 track->cb_color_slice[tmp] = radeon_get_ib_value(p, idx);
1439                 track->cb_color_slice_idx[tmp] = idx;
1440                 break;
1441         case CB_COLOR8_SLICE:
1442         case CB_COLOR9_SLICE:
1443         case CB_COLOR10_SLICE:
1444         case CB_COLOR11_SLICE:
1445                 tmp = ((reg - CB_COLOR8_SLICE) / 0x1c) + 8;
1446                 track->cb_color_slice[tmp] = radeon_get_ib_value(p, idx);
1447                 track->cb_color_slice_idx[tmp] = idx;
1448                 break;
1449         case CB_COLOR0_ATTRIB:
1450         case CB_COLOR1_ATTRIB:
1451         case CB_COLOR2_ATTRIB:
1452         case CB_COLOR3_ATTRIB:
1453         case CB_COLOR4_ATTRIB:
1454         case CB_COLOR5_ATTRIB:
1455         case CB_COLOR6_ATTRIB:
1456         case CB_COLOR7_ATTRIB:
1457                 r = evergreen_cs_packet_next_reloc(p, &reloc);
1458                 if (r) {
1459                         dev_warn(p->dev, "bad SET_CONTEXT_REG "
1460                                         "0x%04X\n", reg);
1461                         return -EINVAL;
1462                 }
1463                 if (!(p->cs_flags & RADEON_CS_KEEP_TILING_FLAGS)) {
1464                         if (reloc->lobj.tiling_flags & RADEON_TILING_MACRO) {
1465                                 unsigned bankw, bankh, mtaspect, tile_split;
1466
1467                                 evergreen_tiling_fields(reloc->lobj.tiling_flags,
1468                                                         &bankw, &bankh, &mtaspect,
1469                                                         &tile_split);
1470                                 ib[idx] |= CB_NUM_BANKS(evergreen_cs_get_num_banks(track->nbanks));
1471                                 ib[idx] |= CB_TILE_SPLIT(tile_split) |
1472                                            CB_BANK_WIDTH(bankw) |
1473                                            CB_BANK_HEIGHT(bankh) |
1474                                            CB_MACRO_TILE_ASPECT(mtaspect);
1475                         }
1476                 }
1477                 tmp = ((reg - CB_COLOR0_ATTRIB) / 0x3c);
1478                 track->cb_color_attrib[tmp] = ib[idx];
1479                 break;
1480         case CB_COLOR8_ATTRIB:
1481         case CB_COLOR9_ATTRIB:
1482         case CB_COLOR10_ATTRIB:
1483         case CB_COLOR11_ATTRIB:
1484                 r = evergreen_cs_packet_next_reloc(p, &reloc);
1485                 if (r) {
1486                         dev_warn(p->dev, "bad SET_CONTEXT_REG "
1487                                         "0x%04X\n", reg);
1488                         return -EINVAL;
1489                 }
1490                 if (!(p->cs_flags & RADEON_CS_KEEP_TILING_FLAGS)) {
1491                         if (reloc->lobj.tiling_flags & RADEON_TILING_MACRO) {
1492                                 unsigned bankw, bankh, mtaspect, tile_split;
1493
1494                                 evergreen_tiling_fields(reloc->lobj.tiling_flags,
1495                                                         &bankw, &bankh, &mtaspect,
1496                                                         &tile_split);
1497                                 ib[idx] |= CB_NUM_BANKS(evergreen_cs_get_num_banks(track->nbanks));
1498                                 ib[idx] |= CB_TILE_SPLIT(tile_split) |
1499                                            CB_BANK_WIDTH(bankw) |
1500                                            CB_BANK_HEIGHT(bankh) |
1501                                            CB_MACRO_TILE_ASPECT(mtaspect);
1502                         }
1503                 }
1504                 tmp = ((reg - CB_COLOR8_ATTRIB) / 0x1c) + 8;
1505                 track->cb_color_attrib[tmp] = ib[idx];
1506                 break;
1507         case CB_COLOR0_DIM:
1508         case CB_COLOR1_DIM:
1509         case CB_COLOR2_DIM:
1510         case CB_COLOR3_DIM:
1511         case CB_COLOR4_DIM:
1512         case CB_COLOR5_DIM:
1513         case CB_COLOR6_DIM:
1514         case CB_COLOR7_DIM:
1515                 tmp = (reg - CB_COLOR0_DIM) / 0x3c;
1516                 track->cb_color_dim[tmp] = radeon_get_ib_value(p, idx);
1517                 track->cb_color_dim_idx[tmp] = idx;
1518                 break;
1519         case CB_COLOR8_DIM:
1520         case CB_COLOR9_DIM:
1521         case CB_COLOR10_DIM:
1522         case CB_COLOR11_DIM:
1523                 tmp = ((reg - CB_COLOR8_DIM) / 0x1c) + 8;
1524                 track->cb_color_dim[tmp] = radeon_get_ib_value(p, idx);
1525                 track->cb_color_dim_idx[tmp] = idx;
1526                 break;
1527         case CB_COLOR0_FMASK:
1528         case CB_COLOR1_FMASK:
1529         case CB_COLOR2_FMASK:
1530         case CB_COLOR3_FMASK:
1531         case CB_COLOR4_FMASK:
1532         case CB_COLOR5_FMASK:
1533         case CB_COLOR6_FMASK:
1534         case CB_COLOR7_FMASK:
1535                 tmp = (reg - CB_COLOR0_FMASK) / 0x3c;
1536                 r = evergreen_cs_packet_next_reloc(p, &reloc);
1537                 if (r) {
1538                         dev_err(p->dev, "bad SET_CONTEXT_REG 0x%04X\n", reg);
1539                         return -EINVAL;
1540                 }
1541                 ib[idx] += (u32)((reloc->lobj.gpu_offset >> 8) & 0xffffffff);
1542                 track->cb_color_fmask_bo[tmp] = reloc->robj;
1543                 break;
1544         case CB_COLOR0_CMASK:
1545         case CB_COLOR1_CMASK:
1546         case CB_COLOR2_CMASK:
1547         case CB_COLOR3_CMASK:
1548         case CB_COLOR4_CMASK:
1549         case CB_COLOR5_CMASK:
1550         case CB_COLOR6_CMASK:
1551         case CB_COLOR7_CMASK:
1552                 tmp = (reg - CB_COLOR0_CMASK) / 0x3c;
1553                 r = evergreen_cs_packet_next_reloc(p, &reloc);
1554                 if (r) {
1555                         dev_err(p->dev, "bad SET_CONTEXT_REG 0x%04X\n", reg);
1556                         return -EINVAL;
1557                 }
1558                 ib[idx] += (u32)((reloc->lobj.gpu_offset >> 8) & 0xffffffff);
1559                 track->cb_color_cmask_bo[tmp] = reloc->robj;
1560                 break;
1561         case CB_COLOR0_FMASK_SLICE:
1562         case CB_COLOR1_FMASK_SLICE:
1563         case CB_COLOR2_FMASK_SLICE:
1564         case CB_COLOR3_FMASK_SLICE:
1565         case CB_COLOR4_FMASK_SLICE:
1566         case CB_COLOR5_FMASK_SLICE:
1567         case CB_COLOR6_FMASK_SLICE:
1568         case CB_COLOR7_FMASK_SLICE:
1569                 tmp = (reg - CB_COLOR0_FMASK_SLICE) / 0x3c;
1570                 track->cb_color_fmask_slice[tmp] = radeon_get_ib_value(p, idx);
1571                 break;
1572         case CB_COLOR0_CMASK_SLICE:
1573         case CB_COLOR1_CMASK_SLICE:
1574         case CB_COLOR2_CMASK_SLICE:
1575         case CB_COLOR3_CMASK_SLICE:
1576         case CB_COLOR4_CMASK_SLICE:
1577         case CB_COLOR5_CMASK_SLICE:
1578         case CB_COLOR6_CMASK_SLICE:
1579         case CB_COLOR7_CMASK_SLICE:
1580                 tmp = (reg - CB_COLOR0_CMASK_SLICE) / 0x3c;
1581                 track->cb_color_cmask_slice[tmp] = radeon_get_ib_value(p, idx);
1582                 break;
1583         case CB_COLOR0_BASE:
1584         case CB_COLOR1_BASE:
1585         case CB_COLOR2_BASE:
1586         case CB_COLOR3_BASE:
1587         case CB_COLOR4_BASE:
1588         case CB_COLOR5_BASE:
1589         case CB_COLOR6_BASE:
1590         case CB_COLOR7_BASE:
1591                 r = evergreen_cs_packet_next_reloc(p, &reloc);
1592                 if (r) {
1593                         dev_warn(p->dev, "bad SET_CONTEXT_REG "
1594                                         "0x%04X\n", reg);
1595                         return -EINVAL;
1596                 }
1597                 tmp = (reg - CB_COLOR0_BASE) / 0x3c;
1598                 track->cb_color_bo_offset[tmp] = radeon_get_ib_value(p, idx);
1599                 ib[idx] += (u32)((reloc->lobj.gpu_offset >> 8) & 0xffffffff);
1600                 track->cb_color_base_last[tmp] = ib[idx];
1601                 track->cb_color_bo[tmp] = reloc->robj;
1602                 break;
1603         case CB_COLOR8_BASE:
1604         case CB_COLOR9_BASE:
1605         case CB_COLOR10_BASE:
1606         case CB_COLOR11_BASE:
1607                 r = evergreen_cs_packet_next_reloc(p, &reloc);
1608                 if (r) {
1609                         dev_warn(p->dev, "bad SET_CONTEXT_REG "
1610                                         "0x%04X\n", reg);
1611                         return -EINVAL;
1612                 }
1613                 tmp = ((reg - CB_COLOR8_BASE) / 0x1c) + 8;
1614                 track->cb_color_bo_offset[tmp] = radeon_get_ib_value(p, idx);
1615                 ib[idx] += (u32)((reloc->lobj.gpu_offset >> 8) & 0xffffffff);
1616                 track->cb_color_base_last[tmp] = ib[idx];
1617                 track->cb_color_bo[tmp] = reloc->robj;
1618                 break;
1619         case CB_IMMED0_BASE:
1620         case CB_IMMED1_BASE:
1621         case CB_IMMED2_BASE:
1622         case CB_IMMED3_BASE:
1623         case CB_IMMED4_BASE:
1624         case CB_IMMED5_BASE:
1625         case CB_IMMED6_BASE:
1626         case CB_IMMED7_BASE:
1627         case CB_IMMED8_BASE:
1628         case CB_IMMED9_BASE:
1629         case CB_IMMED10_BASE:
1630         case CB_IMMED11_BASE:
1631         case DB_HTILE_DATA_BASE:
1632         case SQ_PGM_START_FS:
1633         case SQ_PGM_START_ES:
1634         case SQ_PGM_START_VS:
1635         case SQ_PGM_START_GS:
1636         case SQ_PGM_START_PS:
1637         case SQ_PGM_START_HS:
1638         case SQ_PGM_START_LS:
1639         case SQ_CONST_MEM_BASE:
1640         case SQ_ALU_CONST_CACHE_GS_0:
1641         case SQ_ALU_CONST_CACHE_GS_1:
1642         case SQ_ALU_CONST_CACHE_GS_2:
1643         case SQ_ALU_CONST_CACHE_GS_3:
1644         case SQ_ALU_CONST_CACHE_GS_4:
1645         case SQ_ALU_CONST_CACHE_GS_5:
1646         case SQ_ALU_CONST_CACHE_GS_6:
1647         case SQ_ALU_CONST_CACHE_GS_7:
1648         case SQ_ALU_CONST_CACHE_GS_8:
1649         case SQ_ALU_CONST_CACHE_GS_9:
1650         case SQ_ALU_CONST_CACHE_GS_10:
1651         case SQ_ALU_CONST_CACHE_GS_11:
1652         case SQ_ALU_CONST_CACHE_GS_12:
1653         case SQ_ALU_CONST_CACHE_GS_13:
1654         case SQ_ALU_CONST_CACHE_GS_14:
1655         case SQ_ALU_CONST_CACHE_GS_15:
1656         case SQ_ALU_CONST_CACHE_PS_0:
1657         case SQ_ALU_CONST_CACHE_PS_1:
1658         case SQ_ALU_CONST_CACHE_PS_2:
1659         case SQ_ALU_CONST_CACHE_PS_3:
1660         case SQ_ALU_CONST_CACHE_PS_4:
1661         case SQ_ALU_CONST_CACHE_PS_5:
1662         case SQ_ALU_CONST_CACHE_PS_6:
1663         case SQ_ALU_CONST_CACHE_PS_7:
1664         case SQ_ALU_CONST_CACHE_PS_8:
1665         case SQ_ALU_CONST_CACHE_PS_9:
1666         case SQ_ALU_CONST_CACHE_PS_10:
1667         case SQ_ALU_CONST_CACHE_PS_11:
1668         case SQ_ALU_CONST_CACHE_PS_12:
1669         case SQ_ALU_CONST_CACHE_PS_13:
1670         case SQ_ALU_CONST_CACHE_PS_14:
1671         case SQ_ALU_CONST_CACHE_PS_15:
1672         case SQ_ALU_CONST_CACHE_VS_0:
1673         case SQ_ALU_CONST_CACHE_VS_1:
1674         case SQ_ALU_CONST_CACHE_VS_2:
1675         case SQ_ALU_CONST_CACHE_VS_3:
1676         case SQ_ALU_CONST_CACHE_VS_4:
1677         case SQ_ALU_CONST_CACHE_VS_5:
1678         case SQ_ALU_CONST_CACHE_VS_6:
1679         case SQ_ALU_CONST_CACHE_VS_7:
1680         case SQ_ALU_CONST_CACHE_VS_8:
1681         case SQ_ALU_CONST_CACHE_VS_9:
1682         case SQ_ALU_CONST_CACHE_VS_10:
1683         case SQ_ALU_CONST_CACHE_VS_11:
1684         case SQ_ALU_CONST_CACHE_VS_12:
1685         case SQ_ALU_CONST_CACHE_VS_13:
1686         case SQ_ALU_CONST_CACHE_VS_14:
1687         case SQ_ALU_CONST_CACHE_VS_15:
1688         case SQ_ALU_CONST_CACHE_HS_0:
1689         case SQ_ALU_CONST_CACHE_HS_1:
1690         case SQ_ALU_CONST_CACHE_HS_2:
1691         case SQ_ALU_CONST_CACHE_HS_3:
1692         case SQ_ALU_CONST_CACHE_HS_4:
1693         case SQ_ALU_CONST_CACHE_HS_5:
1694         case SQ_ALU_CONST_CACHE_HS_6:
1695         case SQ_ALU_CONST_CACHE_HS_7:
1696         case SQ_ALU_CONST_CACHE_HS_8:
1697         case SQ_ALU_CONST_CACHE_HS_9:
1698         case SQ_ALU_CONST_CACHE_HS_10:
1699         case SQ_ALU_CONST_CACHE_HS_11:
1700         case SQ_ALU_CONST_CACHE_HS_12:
1701         case SQ_ALU_CONST_CACHE_HS_13:
1702         case SQ_ALU_CONST_CACHE_HS_14:
1703         case SQ_ALU_CONST_CACHE_HS_15:
1704         case SQ_ALU_CONST_CACHE_LS_0:
1705         case SQ_ALU_CONST_CACHE_LS_1:
1706         case SQ_ALU_CONST_CACHE_LS_2:
1707         case SQ_ALU_CONST_CACHE_LS_3:
1708         case SQ_ALU_CONST_CACHE_LS_4:
1709         case SQ_ALU_CONST_CACHE_LS_5:
1710         case SQ_ALU_CONST_CACHE_LS_6:
1711         case SQ_ALU_CONST_CACHE_LS_7:
1712         case SQ_ALU_CONST_CACHE_LS_8:
1713         case SQ_ALU_CONST_CACHE_LS_9:
1714         case SQ_ALU_CONST_CACHE_LS_10:
1715         case SQ_ALU_CONST_CACHE_LS_11:
1716         case SQ_ALU_CONST_CACHE_LS_12:
1717         case SQ_ALU_CONST_CACHE_LS_13:
1718         case SQ_ALU_CONST_CACHE_LS_14:
1719         case SQ_ALU_CONST_CACHE_LS_15:
1720                 r = evergreen_cs_packet_next_reloc(p, &reloc);
1721                 if (r) {
1722                         dev_warn(p->dev, "bad SET_CONTEXT_REG "
1723                                         "0x%04X\n", reg);
1724                         return -EINVAL;
1725                 }
1726                 ib[idx] += (u32)((reloc->lobj.gpu_offset >> 8) & 0xffffffff);
1727                 break;
1728         case SX_MEMORY_EXPORT_BASE:
1729                 if (p->rdev->family >= CHIP_CAYMAN) {
1730                         dev_warn(p->dev, "bad SET_CONFIG_REG "
1731                                  "0x%04X\n", reg);
1732                         return -EINVAL;
1733                 }
1734                 r = evergreen_cs_packet_next_reloc(p, &reloc);
1735                 if (r) {
1736                         dev_warn(p->dev, "bad SET_CONFIG_REG "
1737                                         "0x%04X\n", reg);
1738                         return -EINVAL;
1739                 }
1740                 ib[idx] += (u32)((reloc->lobj.gpu_offset >> 8) & 0xffffffff);
1741                 break;
1742         case CAYMAN_SX_SCATTER_EXPORT_BASE:
1743                 if (p->rdev->family < CHIP_CAYMAN) {
1744                         dev_warn(p->dev, "bad SET_CONTEXT_REG "
1745                                  "0x%04X\n", reg);
1746                         return -EINVAL;
1747                 }
1748                 r = evergreen_cs_packet_next_reloc(p, &reloc);
1749                 if (r) {
1750                         dev_warn(p->dev, "bad SET_CONTEXT_REG "
1751                                         "0x%04X\n", reg);
1752                         return -EINVAL;
1753                 }
1754                 ib[idx] += (u32)((reloc->lobj.gpu_offset >> 8) & 0xffffffff);
1755                 break;
1756         case SX_MISC:
1757                 track->sx_misc_kill_all_prims = (radeon_get_ib_value(p, idx) & 0x1) != 0;
1758                 break;
1759         default:
1760                 dev_warn(p->dev, "forbidden register 0x%08x at %d\n", reg, idx);
1761                 return -EINVAL;
1762         }
1763         return 0;
1764 }
1765
1766 static bool evergreen_is_safe_reg(struct radeon_cs_parser *p, u32 reg, u32 idx)
1767 {
1768         u32 last_reg, m, i;
1769
1770         if (p->rdev->family >= CHIP_CAYMAN)
1771                 last_reg = ARRAY_SIZE(cayman_reg_safe_bm);
1772         else
1773                 last_reg = ARRAY_SIZE(evergreen_reg_safe_bm);
1774
1775         i = (reg >> 7);
1776         if (i >= last_reg) {
1777                 dev_warn(p->dev, "forbidden register 0x%08x at %d\n", reg, idx);
1778                 return false;
1779         }
1780         m = 1 << ((reg >> 2) & 31);
1781         if (p->rdev->family >= CHIP_CAYMAN) {
1782                 if (!(cayman_reg_safe_bm[i] & m))
1783                         return true;
1784         } else {
1785                 if (!(evergreen_reg_safe_bm[i] & m))
1786                         return true;
1787         }
1788         dev_warn(p->dev, "forbidden register 0x%08x at %d\n", reg, idx);
1789         return false;
1790 }
1791
1792 static int evergreen_packet3_check(struct radeon_cs_parser *p,
1793                                    struct radeon_cs_packet *pkt)
1794 {
1795         struct radeon_cs_reloc *reloc;
1796         struct evergreen_cs_track *track;
1797         volatile u32 *ib;
1798         unsigned idx;
1799         unsigned i;
1800         unsigned start_reg, end_reg, reg;
1801         int r;
1802         u32 idx_value;
1803
1804         track = (struct evergreen_cs_track *)p->track;
1805         ib = p->ib->ptr;
1806         idx = pkt->idx + 1;
1807         idx_value = radeon_get_ib_value(p, idx);
1808
1809         switch (pkt->opcode) {
1810         case PACKET3_SET_PREDICATION:
1811         {
1812                 int pred_op;
1813                 int tmp;
1814                 uint64_t offset;
1815
1816                 if (pkt->count != 1) {
1817                         DRM_ERROR("bad SET PREDICATION\n");
1818                         return -EINVAL;
1819                 }
1820
1821                 tmp = radeon_get_ib_value(p, idx + 1);
1822                 pred_op = (tmp >> 16) & 0x7;
1823
1824                 /* for the clear predicate operation */
1825                 if (pred_op == 0)
1826                         return 0;
1827
1828                 if (pred_op > 2) {
1829                         DRM_ERROR("bad SET PREDICATION operation %d\n", pred_op);
1830                         return -EINVAL;
1831                 }
1832
1833                 r = evergreen_cs_packet_next_reloc(p, &reloc);
1834                 if (r) {
1835                         DRM_ERROR("bad SET PREDICATION\n");
1836                         return -EINVAL;
1837                 }
1838
1839                 offset = reloc->lobj.gpu_offset +
1840                          (idx_value & 0xfffffff0) +
1841                          ((u64)(tmp & 0xff) << 32);
1842
1843                 ib[idx + 0] = offset;
1844                 ib[idx + 1] = (tmp & 0xffffff00) | (upper_32_bits(offset) & 0xff);
1845         }
1846         break;
1847         case PACKET3_CONTEXT_CONTROL:
1848                 if (pkt->count != 1) {
1849                         DRM_ERROR("bad CONTEXT_CONTROL\n");
1850                         return -EINVAL;
1851                 }
1852                 break;
1853         case PACKET3_INDEX_TYPE:
1854         case PACKET3_NUM_INSTANCES:
1855         case PACKET3_CLEAR_STATE:
1856                 if (pkt->count) {
1857                         DRM_ERROR("bad INDEX_TYPE/NUM_INSTANCES/CLEAR_STATE\n");
1858                         return -EINVAL;
1859                 }
1860                 break;
1861         case CAYMAN_PACKET3_DEALLOC_STATE:
1862                 if (p->rdev->family < CHIP_CAYMAN) {
1863                         DRM_ERROR("bad PACKET3_DEALLOC_STATE\n");
1864                         return -EINVAL;
1865                 }
1866                 if (pkt->count) {
1867                         DRM_ERROR("bad INDEX_TYPE/NUM_INSTANCES/CLEAR_STATE\n");
1868                         return -EINVAL;
1869                 }
1870                 break;
1871         case PACKET3_INDEX_BASE:
1872         {
1873                 uint64_t offset;
1874
1875                 if (pkt->count != 1) {
1876                         DRM_ERROR("bad INDEX_BASE\n");
1877                         return -EINVAL;
1878                 }
1879                 r = evergreen_cs_packet_next_reloc(p, &reloc);
1880                 if (r) {
1881                         DRM_ERROR("bad INDEX_BASE\n");
1882                         return -EINVAL;
1883                 }
1884
1885                 offset = reloc->lobj.gpu_offset +
1886                          idx_value +
1887                          ((u64)(radeon_get_ib_value(p, idx+1) & 0xff) << 32);
1888
1889                 ib[idx+0] = offset;
1890                 ib[idx+1] = upper_32_bits(offset) & 0xff;
1891
1892                 r = evergreen_cs_track_check(p);
1893                 if (r) {
1894                         dev_warn(p->dev, "%s:%d invalid cmd stream\n", __func__, __LINE__);
1895                         return r;
1896                 }
1897                 break;
1898         }
1899         case PACKET3_DRAW_INDEX:
1900         {
1901                 uint64_t offset;
1902                 if (pkt->count != 3) {
1903                         DRM_ERROR("bad DRAW_INDEX\n");
1904                         return -EINVAL;
1905                 }
1906                 r = evergreen_cs_packet_next_reloc(p, &reloc);
1907                 if (r) {
1908                         DRM_ERROR("bad DRAW_INDEX\n");
1909                         return -EINVAL;
1910                 }
1911
1912                 offset = reloc->lobj.gpu_offset +
1913                          idx_value +
1914                          ((u64)(radeon_get_ib_value(p, idx+1) & 0xff) << 32);
1915
1916                 ib[idx+0] = offset;
1917                 ib[idx+1] = upper_32_bits(offset) & 0xff;
1918
1919                 r = evergreen_cs_track_check(p);
1920                 if (r) {
1921                         dev_warn(p->dev, "%s:%d invalid cmd stream\n", __func__, __LINE__);
1922                         return r;
1923                 }
1924                 break;
1925         }
1926         case PACKET3_DRAW_INDEX_2:
1927         {
1928                 uint64_t offset;
1929
1930                 if (pkt->count != 4) {
1931                         DRM_ERROR("bad DRAW_INDEX_2\n");
1932                         return -EINVAL;
1933                 }
1934                 r = evergreen_cs_packet_next_reloc(p, &reloc);
1935                 if (r) {
1936                         DRM_ERROR("bad DRAW_INDEX_2\n");
1937                         return -EINVAL;
1938                 }
1939
1940                 offset = reloc->lobj.gpu_offset +
1941                          radeon_get_ib_value(p, idx+1) +
1942                          ((u64)(radeon_get_ib_value(p, idx+2) & 0xff) << 32);
1943
1944                 ib[idx+1] = offset;
1945                 ib[idx+2] = upper_32_bits(offset) & 0xff;
1946
1947                 r = evergreen_cs_track_check(p);
1948                 if (r) {
1949                         dev_warn(p->dev, "%s:%d invalid cmd stream\n", __func__, __LINE__);
1950                         return r;
1951                 }
1952                 break;
1953         }
1954         case PACKET3_DRAW_INDEX_AUTO:
1955                 if (pkt->count != 1) {
1956                         DRM_ERROR("bad DRAW_INDEX_AUTO\n");
1957                         return -EINVAL;
1958                 }
1959                 r = evergreen_cs_track_check(p);
1960                 if (r) {
1961                         dev_warn(p->dev, "%s:%d invalid cmd stream %d\n", __func__, __LINE__, idx);
1962                         return r;
1963                 }
1964                 break;
1965         case PACKET3_DRAW_INDEX_MULTI_AUTO:
1966                 if (pkt->count != 2) {
1967                         DRM_ERROR("bad DRAW_INDEX_MULTI_AUTO\n");
1968                         return -EINVAL;
1969                 }
1970                 r = evergreen_cs_track_check(p);
1971                 if (r) {
1972                         dev_warn(p->dev, "%s:%d invalid cmd stream %d\n", __func__, __LINE__, idx);
1973                         return r;
1974                 }
1975                 break;
1976         case PACKET3_DRAW_INDEX_IMMD:
1977                 if (pkt->count < 2) {
1978                         DRM_ERROR("bad DRAW_INDEX_IMMD\n");
1979                         return -EINVAL;
1980                 }
1981                 r = evergreen_cs_track_check(p);
1982                 if (r) {
1983                         dev_warn(p->dev, "%s:%d invalid cmd stream\n", __func__, __LINE__);
1984                         return r;
1985                 }
1986                 break;
1987         case PACKET3_DRAW_INDEX_OFFSET:
1988                 if (pkt->count != 2) {
1989                         DRM_ERROR("bad DRAW_INDEX_OFFSET\n");
1990                         return -EINVAL;
1991                 }
1992                 r = evergreen_cs_track_check(p);
1993                 if (r) {
1994                         dev_warn(p->dev, "%s:%d invalid cmd stream\n", __func__, __LINE__);
1995                         return r;
1996                 }
1997                 break;
1998         case PACKET3_DRAW_INDEX_OFFSET_2:
1999                 if (pkt->count != 3) {
2000                         DRM_ERROR("bad DRAW_INDEX_OFFSET_2\n");
2001                         return -EINVAL;
2002                 }
2003                 r = evergreen_cs_track_check(p);
2004                 if (r) {
2005                         dev_warn(p->dev, "%s:%d invalid cmd stream\n", __func__, __LINE__);
2006                         return r;
2007                 }
2008                 break;
2009         case PACKET3_DISPATCH_DIRECT:
2010                 if (pkt->count != 3) {
2011                         DRM_ERROR("bad DISPATCH_DIRECT\n");
2012                         return -EINVAL;
2013                 }
2014                 r = evergreen_cs_track_check(p);
2015                 if (r) {
2016                         dev_warn(p->dev, "%s:%d invalid cmd stream %d\n", __func__, __LINE__, idx);
2017                         return r;
2018                 }
2019                 break;
2020         case PACKET3_DISPATCH_INDIRECT:
2021                 if (pkt->count != 1) {
2022                         DRM_ERROR("bad DISPATCH_INDIRECT\n");
2023                         return -EINVAL;
2024                 }
2025                 r = evergreen_cs_packet_next_reloc(p, &reloc);
2026                 if (r) {
2027                         DRM_ERROR("bad DISPATCH_INDIRECT\n");
2028                         return -EINVAL;
2029                 }
2030                 ib[idx+0] = idx_value + (u32)(reloc->lobj.gpu_offset & 0xffffffff);
2031                 r = evergreen_cs_track_check(p);
2032                 if (r) {
2033                         dev_warn(p->dev, "%s:%d invalid cmd stream\n", __func__, __LINE__);
2034                         return r;
2035                 }
2036                 break;
2037         case PACKET3_WAIT_REG_MEM:
2038                 if (pkt->count != 5) {
2039                         DRM_ERROR("bad WAIT_REG_MEM\n");
2040                         return -EINVAL;
2041                 }
2042                 /* bit 4 is reg (0) or mem (1) */
2043                 if (idx_value & 0x10) {
2044                         uint64_t offset;
2045
2046                         r = evergreen_cs_packet_next_reloc(p, &reloc);
2047                         if (r) {
2048                                 DRM_ERROR("bad WAIT_REG_MEM\n");
2049                                 return -EINVAL;
2050                         }
2051
2052                         offset = reloc->lobj.gpu_offset +
2053                                  (radeon_get_ib_value(p, idx+1) & 0xfffffffc) +
2054                                  ((u64)(radeon_get_ib_value(p, idx+2) & 0xff) << 32);
2055
2056                         ib[idx+1] = (ib[idx+1] & 0x3) | (offset & 0xfffffffc);
2057                         ib[idx+2] = upper_32_bits(offset) & 0xff;
2058                 }
2059                 break;
2060         case PACKET3_SURFACE_SYNC:
2061                 if (pkt->count != 3) {
2062                         DRM_ERROR("bad SURFACE_SYNC\n");
2063                         return -EINVAL;
2064                 }
2065                 /* 0xffffffff/0x0 is flush all cache flag */
2066                 if (radeon_get_ib_value(p, idx + 1) != 0xffffffff ||
2067                     radeon_get_ib_value(p, idx + 2) != 0) {
2068                         r = evergreen_cs_packet_next_reloc(p, &reloc);
2069                         if (r) {
2070                                 DRM_ERROR("bad SURFACE_SYNC\n");
2071                                 return -EINVAL;
2072                         }
2073                         ib[idx+2] += (u32)((reloc->lobj.gpu_offset >> 8) & 0xffffffff);
2074                 }
2075                 break;
2076         case PACKET3_EVENT_WRITE:
2077                 if (pkt->count != 2 && pkt->count != 0) {
2078                         DRM_ERROR("bad EVENT_WRITE\n");
2079                         return -EINVAL;
2080                 }
2081                 if (pkt->count) {
2082                         uint64_t offset;
2083
2084                         r = evergreen_cs_packet_next_reloc(p, &reloc);
2085                         if (r) {
2086                                 DRM_ERROR("bad EVENT_WRITE\n");
2087                                 return -EINVAL;
2088                         }
2089                         offset = reloc->lobj.gpu_offset +
2090                                  (radeon_get_ib_value(p, idx+1) & 0xfffffff8) +
2091                                  ((u64)(radeon_get_ib_value(p, idx+2) & 0xff) << 32);
2092
2093                         ib[idx+1] = offset & 0xfffffff8;
2094                         ib[idx+2] = upper_32_bits(offset) & 0xff;
2095                 }
2096                 break;
2097         case PACKET3_EVENT_WRITE_EOP:
2098         {
2099                 uint64_t offset;
2100
2101                 if (pkt->count != 4) {
2102                         DRM_ERROR("bad EVENT_WRITE_EOP\n");
2103                         return -EINVAL;
2104                 }
2105                 r = evergreen_cs_packet_next_reloc(p, &reloc);
2106                 if (r) {
2107                         DRM_ERROR("bad EVENT_WRITE_EOP\n");
2108                         return -EINVAL;
2109                 }
2110
2111                 offset = reloc->lobj.gpu_offset +
2112                          (radeon_get_ib_value(p, idx+1) & 0xfffffffc) +
2113                          ((u64)(radeon_get_ib_value(p, idx+2) & 0xff) << 32);
2114
2115                 ib[idx+1] = offset & 0xfffffffc;
2116                 ib[idx+2] = (ib[idx+2] & 0xffffff00) | (upper_32_bits(offset) & 0xff);
2117                 break;
2118         }
2119         case PACKET3_EVENT_WRITE_EOS:
2120         {
2121                 uint64_t offset;
2122
2123                 if (pkt->count != 3) {
2124                         DRM_ERROR("bad EVENT_WRITE_EOS\n");
2125                         return -EINVAL;
2126                 }
2127                 r = evergreen_cs_packet_next_reloc(p, &reloc);
2128                 if (r) {
2129                         DRM_ERROR("bad EVENT_WRITE_EOS\n");
2130                         return -EINVAL;
2131                 }
2132
2133                 offset = reloc->lobj.gpu_offset +
2134                          (radeon_get_ib_value(p, idx+1) & 0xfffffffc) +
2135                          ((u64)(radeon_get_ib_value(p, idx+2) & 0xff) << 32);
2136
2137                 ib[idx+1] = offset & 0xfffffffc;
2138                 ib[idx+2] = (ib[idx+2] & 0xffffff00) | (upper_32_bits(offset) & 0xff);
2139                 break;
2140         }
2141         case PACKET3_SET_CONFIG_REG:
2142                 start_reg = (idx_value << 2) + PACKET3_SET_CONFIG_REG_START;
2143                 end_reg = 4 * pkt->count + start_reg - 4;
2144                 if ((start_reg < PACKET3_SET_CONFIG_REG_START) ||
2145                     (start_reg >= PACKET3_SET_CONFIG_REG_END) ||
2146                     (end_reg >= PACKET3_SET_CONFIG_REG_END)) {
2147                         DRM_ERROR("bad PACKET3_SET_CONFIG_REG\n");
2148                         return -EINVAL;
2149                 }
2150                 for (i = 0; i < pkt->count; i++) {
2151                         reg = start_reg + (4 * i);
2152                         r = evergreen_cs_check_reg(p, reg, idx+1+i);
2153                         if (r)
2154                                 return r;
2155                 }
2156                 break;
2157         case PACKET3_SET_CONTEXT_REG:
2158                 start_reg = (idx_value << 2) + PACKET3_SET_CONTEXT_REG_START;
2159                 end_reg = 4 * pkt->count + start_reg - 4;
2160                 if ((start_reg < PACKET3_SET_CONTEXT_REG_START) ||
2161                     (start_reg >= PACKET3_SET_CONTEXT_REG_END) ||
2162                     (end_reg >= PACKET3_SET_CONTEXT_REG_END)) {
2163                         DRM_ERROR("bad PACKET3_SET_CONTEXT_REG\n");
2164                         return -EINVAL;
2165                 }
2166                 for (i = 0; i < pkt->count; i++) {
2167                         reg = start_reg + (4 * i);
2168                         r = evergreen_cs_check_reg(p, reg, idx+1+i);
2169                         if (r)
2170                                 return r;
2171                 }
2172                 break;
2173         case PACKET3_SET_RESOURCE:
2174                 if (pkt->count % 8) {
2175                         DRM_ERROR("bad SET_RESOURCE\n");
2176                         return -EINVAL;
2177                 }
2178                 start_reg = (idx_value << 2) + PACKET3_SET_RESOURCE_START;
2179                 end_reg = 4 * pkt->count + start_reg - 4;
2180                 if ((start_reg < PACKET3_SET_RESOURCE_START) ||
2181                     (start_reg >= PACKET3_SET_RESOURCE_END) ||
2182                     (end_reg >= PACKET3_SET_RESOURCE_END)) {
2183                         DRM_ERROR("bad SET_RESOURCE\n");
2184                         return -EINVAL;
2185                 }
2186                 for (i = 0; i < (pkt->count / 8); i++) {
2187                         struct radeon_bo *texture, *mipmap;
2188                         u32 toffset, moffset;
2189                         u32 size, offset;
2190
2191                         switch (G__SQ_CONSTANT_TYPE(radeon_get_ib_value(p, idx+1+(i*8)+7))) {
2192                         case SQ_TEX_VTX_VALID_TEXTURE:
2193                                 /* tex base */
2194                                 r = evergreen_cs_packet_next_reloc(p, &reloc);
2195                                 if (r) {
2196                                         DRM_ERROR("bad SET_RESOURCE (tex)\n");
2197                                         return -EINVAL;
2198                                 }
2199                                 if (!(p->cs_flags & RADEON_CS_KEEP_TILING_FLAGS)) {
2200                                         ib[idx+1+(i*8)+1] |=
2201                                                 TEX_ARRAY_MODE(evergreen_cs_get_aray_mode(reloc->lobj.tiling_flags));
2202                                         if (reloc->lobj.tiling_flags & RADEON_TILING_MACRO) {
2203                                                 unsigned bankw, bankh, mtaspect, tile_split;
2204
2205                                                 evergreen_tiling_fields(reloc->lobj.tiling_flags,
2206                                                                         &bankw, &bankh, &mtaspect,
2207                                                                         &tile_split);
2208                                                 ib[idx+1+(i*8)+6] |= TEX_TILE_SPLIT(tile_split);
2209                                                 ib[idx+1+(i*8)+7] |=
2210                                                         TEX_BANK_WIDTH(bankw) |
2211                                                         TEX_BANK_HEIGHT(bankh) |
2212                                                         MACRO_TILE_ASPECT(mtaspect) |
2213                                                         TEX_NUM_BANKS(evergreen_cs_get_num_banks(track->nbanks));
2214                                         }
2215                                 }
2216                                 texture = reloc->robj;
2217                                 toffset = (u32)((reloc->lobj.gpu_offset >> 8) & 0xffffffff);
2218                                 /* tex mip base */
2219                                 r = evergreen_cs_packet_next_reloc(p, &reloc);
2220                                 if (r) {
2221                                         DRM_ERROR("bad SET_RESOURCE (tex)\n");
2222                                         return -EINVAL;
2223                                 }
2224                                 moffset = (u32)((reloc->lobj.gpu_offset >> 8) & 0xffffffff);
2225                                 mipmap = reloc->robj;
2226                                 r = evergreen_cs_track_validate_texture(p, texture, mipmap, idx+1+(i*8));
2227                                 if (r)
2228                                         return r;
2229                                 ib[idx+1+(i*8)+2] += toffset;
2230                                 ib[idx+1+(i*8)+3] += moffset;
2231                                 break;
2232                         case SQ_TEX_VTX_VALID_BUFFER:
2233                         {
2234                                 uint64_t offset64;
2235                                 /* vtx base */
2236                                 r = evergreen_cs_packet_next_reloc(p, &reloc);
2237                                 if (r) {
2238                                         DRM_ERROR("bad SET_RESOURCE (vtx)\n");
2239                                         return -EINVAL;
2240                                 }
2241                                 offset = radeon_get_ib_value(p, idx+1+(i*8)+0);
2242                                 size = radeon_get_ib_value(p, idx+1+(i*8)+1);
2243                                 if (p->rdev && (size + offset) > radeon_bo_size(reloc->robj)) {
2244                                         /* force size to size of the buffer */
2245                                         dev_warn(p->dev, "vbo resource seems too big for the bo\n");
2246                                         ib[idx+1+(i*8)+1] = radeon_bo_size(reloc->robj) - offset;
2247                                 }
2248
2249                                 offset64 = reloc->lobj.gpu_offset + offset;
2250                                 ib[idx+1+(i*8)+0] = offset64;
2251                                 ib[idx+1+(i*8)+2] = (ib[idx+1+(i*8)+2] & 0xffffff00) |
2252                                                     (upper_32_bits(offset64) & 0xff);
2253                                 break;
2254                         }
2255                         case SQ_TEX_VTX_INVALID_TEXTURE:
2256                         case SQ_TEX_VTX_INVALID_BUFFER:
2257                         default:
2258                                 DRM_ERROR("bad SET_RESOURCE\n");
2259                                 return -EINVAL;
2260                         }
2261                 }
2262                 break;
2263         case PACKET3_SET_ALU_CONST:
2264                 /* XXX fix me ALU const buffers only */
2265                 break;
2266         case PACKET3_SET_BOOL_CONST:
2267                 start_reg = (idx_value << 2) + PACKET3_SET_BOOL_CONST_START;
2268                 end_reg = 4 * pkt->count + start_reg - 4;
2269                 if ((start_reg < PACKET3_SET_BOOL_CONST_START) ||
2270                     (start_reg >= PACKET3_SET_BOOL_CONST_END) ||
2271                     (end_reg >= PACKET3_SET_BOOL_CONST_END)) {
2272                         DRM_ERROR("bad SET_BOOL_CONST\n");
2273                         return -EINVAL;
2274                 }
2275                 break;
2276         case PACKET3_SET_LOOP_CONST:
2277                 start_reg = (idx_value << 2) + PACKET3_SET_LOOP_CONST_START;
2278                 end_reg = 4 * pkt->count + start_reg - 4;
2279                 if ((start_reg < PACKET3_SET_LOOP_CONST_START) ||
2280                     (start_reg >= PACKET3_SET_LOOP_CONST_END) ||
2281                     (end_reg >= PACKET3_SET_LOOP_CONST_END)) {
2282                         DRM_ERROR("bad SET_LOOP_CONST\n");
2283                         return -EINVAL;
2284                 }
2285                 break;
2286         case PACKET3_SET_CTL_CONST:
2287                 start_reg = (idx_value << 2) + PACKET3_SET_CTL_CONST_START;
2288                 end_reg = 4 * pkt->count + start_reg - 4;
2289                 if ((start_reg < PACKET3_SET_CTL_CONST_START) ||
2290                     (start_reg >= PACKET3_SET_CTL_CONST_END) ||
2291                     (end_reg >= PACKET3_SET_CTL_CONST_END)) {
2292                         DRM_ERROR("bad SET_CTL_CONST\n");
2293                         return -EINVAL;
2294                 }
2295                 break;
2296         case PACKET3_SET_SAMPLER:
2297                 if (pkt->count % 3) {
2298                         DRM_ERROR("bad SET_SAMPLER\n");
2299                         return -EINVAL;
2300                 }
2301                 start_reg = (idx_value << 2) + PACKET3_SET_SAMPLER_START;
2302                 end_reg = 4 * pkt->count + start_reg - 4;
2303                 if ((start_reg < PACKET3_SET_SAMPLER_START) ||
2304                     (start_reg >= PACKET3_SET_SAMPLER_END) ||
2305                     (end_reg >= PACKET3_SET_SAMPLER_END)) {
2306                         DRM_ERROR("bad SET_SAMPLER\n");
2307                         return -EINVAL;
2308                 }
2309                 break;
2310         case PACKET3_STRMOUT_BUFFER_UPDATE:
2311                 if (pkt->count != 4) {
2312                         DRM_ERROR("bad STRMOUT_BUFFER_UPDATE (invalid count)\n");
2313                         return -EINVAL;
2314                 }
2315                 /* Updating memory at DST_ADDRESS. */
2316                 if (idx_value & 0x1) {
2317                         u64 offset;
2318                         r = evergreen_cs_packet_next_reloc(p, &reloc);
2319                         if (r) {
2320                                 DRM_ERROR("bad STRMOUT_BUFFER_UPDATE (missing dst reloc)\n");
2321                                 return -EINVAL;
2322                         }
2323                         offset = radeon_get_ib_value(p, idx+1);
2324                         offset += ((u64)(radeon_get_ib_value(p, idx+2) & 0xff)) << 32;
2325                         if ((offset + 4) > radeon_bo_size(reloc->robj)) {
2326                                 DRM_ERROR("bad STRMOUT_BUFFER_UPDATE dst bo too small: 0x%llx, 0x%lx\n",
2327                                           offset + 4, radeon_bo_size(reloc->robj));
2328                                 return -EINVAL;
2329                         }
2330                         offset += reloc->lobj.gpu_offset;
2331                         ib[idx+1] = offset;
2332                         ib[idx+2] = upper_32_bits(offset) & 0xff;
2333                 }
2334                 /* Reading data from SRC_ADDRESS. */
2335                 if (((idx_value >> 1) & 0x3) == 2) {
2336                         u64 offset;
2337                         r = evergreen_cs_packet_next_reloc(p, &reloc);
2338                         if (r) {
2339                                 DRM_ERROR("bad STRMOUT_BUFFER_UPDATE (missing src reloc)\n");
2340                                 return -EINVAL;
2341                         }
2342                         offset = radeon_get_ib_value(p, idx+3);
2343                         offset += ((u64)(radeon_get_ib_value(p, idx+4) & 0xff)) << 32;
2344                         if ((offset + 4) > radeon_bo_size(reloc->robj)) {
2345                                 DRM_ERROR("bad STRMOUT_BUFFER_UPDATE src bo too small: 0x%llx, 0x%lx\n",
2346                                           offset + 4, radeon_bo_size(reloc->robj));
2347                                 return -EINVAL;
2348                         }
2349                         offset += reloc->lobj.gpu_offset;
2350                         ib[idx+3] = offset;
2351                         ib[idx+4] = upper_32_bits(offset) & 0xff;
2352                 }
2353                 break;
2354         case PACKET3_COPY_DW:
2355                 if (pkt->count != 4) {
2356                         DRM_ERROR("bad COPY_DW (invalid count)\n");
2357                         return -EINVAL;
2358                 }
2359                 if (idx_value & 0x1) {
2360                         u64 offset;
2361                         /* SRC is memory. */
2362                         r = evergreen_cs_packet_next_reloc(p, &reloc);
2363                         if (r) {
2364                                 DRM_ERROR("bad COPY_DW (missing src reloc)\n");
2365                                 return -EINVAL;
2366                         }
2367                         offset = radeon_get_ib_value(p, idx+1);
2368                         offset += ((u64)(radeon_get_ib_value(p, idx+2) & 0xff)) << 32;
2369                         if ((offset + 4) > radeon_bo_size(reloc->robj)) {
2370                                 DRM_ERROR("bad COPY_DW src bo too small: 0x%llx, 0x%lx\n",
2371                                           offset + 4, radeon_bo_size(reloc->robj));
2372                                 return -EINVAL;
2373                         }
2374                         offset += reloc->lobj.gpu_offset;
2375                         ib[idx+1] = offset;
2376                         ib[idx+2] = upper_32_bits(offset) & 0xff;
2377                 } else {
2378                         /* SRC is a reg. */
2379                         reg = radeon_get_ib_value(p, idx+1) << 2;
2380                         if (!evergreen_is_safe_reg(p, reg, idx+1))
2381                                 return -EINVAL;
2382                 }
2383                 if (idx_value & 0x2) {
2384                         u64 offset;
2385                         /* DST is memory. */
2386                         r = evergreen_cs_packet_next_reloc(p, &reloc);
2387                         if (r) {
2388                                 DRM_ERROR("bad COPY_DW (missing dst reloc)\n");
2389                                 return -EINVAL;
2390                         }
2391                         offset = radeon_get_ib_value(p, idx+3);
2392                         offset += ((u64)(radeon_get_ib_value(p, idx+4) & 0xff)) << 32;
2393                         if ((offset + 4) > radeon_bo_size(reloc->robj)) {
2394                                 DRM_ERROR("bad COPY_DW dst bo too small: 0x%llx, 0x%lx\n",
2395                                           offset + 4, radeon_bo_size(reloc->robj));
2396                                 return -EINVAL;
2397                         }
2398                         offset += reloc->lobj.gpu_offset;
2399                         ib[idx+3] = offset;
2400                         ib[idx+4] = upper_32_bits(offset) & 0xff;
2401                 } else {
2402                         /* DST is a reg. */
2403                         reg = radeon_get_ib_value(p, idx+3) << 2;
2404                         if (!evergreen_is_safe_reg(p, reg, idx+3))
2405                                 return -EINVAL;
2406                 }
2407                 break;
2408         case PACKET3_NOP:
2409                 break;
2410         default:
2411                 DRM_ERROR("Packet3 opcode %x not supported\n", pkt->opcode);
2412                 return -EINVAL;
2413         }
2414         return 0;
2415 }
2416
2417 int evergreen_cs_parse(struct radeon_cs_parser *p)
2418 {
2419         struct radeon_cs_packet pkt;
2420         struct evergreen_cs_track *track;
2421         u32 tmp;
2422         int r;
2423
2424         if (p->track == NULL) {
2425                 /* initialize tracker, we are in kms */
2426                 track = kzalloc(sizeof(*track), GFP_KERNEL);
2427                 if (track == NULL)
2428                         return -ENOMEM;
2429                 evergreen_cs_track_init(track);
2430                 if (p->rdev->family >= CHIP_CAYMAN)
2431                         tmp = p->rdev->config.cayman.tile_config;
2432                 else
2433                         tmp = p->rdev->config.evergreen.tile_config;
2434
2435                 switch (tmp & 0xf) {
2436                 case 0:
2437                         track->npipes = 1;
2438                         break;
2439                 case 1:
2440                 default:
2441                         track->npipes = 2;
2442                         break;
2443                 case 2:
2444                         track->npipes = 4;
2445                         break;
2446                 case 3:
2447                         track->npipes = 8;
2448                         break;
2449                 }
2450
2451                 switch ((tmp & 0xf0) >> 4) {
2452                 case 0:
2453                         track->nbanks = 4;
2454                         break;
2455                 case 1:
2456                 default:
2457                         track->nbanks = 8;
2458                         break;
2459                 case 2:
2460                         track->nbanks = 16;
2461                         break;
2462                 }
2463
2464                 switch ((tmp & 0xf00) >> 8) {
2465                 case 0:
2466                         track->group_size = 256;
2467                         break;
2468                 case 1:
2469                 default:
2470                         track->group_size = 512;
2471                         break;
2472                 }
2473
2474                 switch ((tmp & 0xf000) >> 12) {
2475                 case 0:
2476                         track->row_size = 1;
2477                         break;
2478                 case 1:
2479                 default:
2480                         track->row_size = 2;
2481                         break;
2482                 case 2:
2483                         track->row_size = 4;
2484                         break;
2485                 }
2486
2487                 p->track = track;
2488         }
2489         do {
2490                 r = evergreen_cs_packet_parse(p, &pkt, p->idx);
2491                 if (r) {
2492                         kfree(p->track);
2493                         p->track = NULL;
2494                         return r;
2495                 }
2496                 p->idx += pkt.count + 2;
2497                 switch (pkt.type) {
2498                 case PACKET_TYPE0:
2499                         r = evergreen_cs_parse_packet0(p, &pkt);
2500                         break;
2501                 case PACKET_TYPE2:
2502                         break;
2503                 case PACKET_TYPE3:
2504                         r = evergreen_packet3_check(p, &pkt);
2505                         break;
2506                 default:
2507                         DRM_ERROR("Unknown packet type %d !\n", pkt.type);
2508                         kfree(p->track);
2509                         p->track = NULL;
2510                         return -EINVAL;
2511                 }
2512                 if (r) {
2513                         kfree(p->track);
2514                         p->track = NULL;
2515                         return r;
2516                 }
2517         } while (p->idx < p->chunks[p->chunk_ib_idx].length_dw);
2518 #if 0
2519         for (r = 0; r < p->ib->length_dw; r++) {
2520                 printk(KERN_INFO "%05d  0x%08X\n", r, p->ib->ptr[r]);
2521                 mdelay(1);
2522         }
2523 #endif
2524         kfree(p->track);
2525         p->track = NULL;
2526         return 0;
2527 }
2528
2529 /* vm parser */
2530 static bool evergreen_vm_reg_valid(u32 reg)
2531 {
2532         /* context regs are fine */
2533         if (reg >= 0x28000)
2534                 return true;
2535
2536         /* check config regs */
2537         switch (reg) {
2538         case GRBM_GFX_INDEX:
2539         case VGT_VTX_VECT_EJECT_REG:
2540         case VGT_CACHE_INVALIDATION:
2541         case VGT_GS_VERTEX_REUSE:
2542         case VGT_PRIMITIVE_TYPE:
2543         case VGT_INDEX_TYPE:
2544         case VGT_NUM_INDICES:
2545         case VGT_NUM_INSTANCES:
2546         case VGT_COMPUTE_DIM_X:
2547         case VGT_COMPUTE_DIM_Y:
2548         case VGT_COMPUTE_DIM_Z:
2549         case VGT_COMPUTE_START_X:
2550         case VGT_COMPUTE_START_Y:
2551         case VGT_COMPUTE_START_Z:
2552         case VGT_COMPUTE_INDEX:
2553         case VGT_COMPUTE_THREAD_GROUP_SIZE:
2554         case VGT_HS_OFFCHIP_PARAM:
2555         case PA_CL_ENHANCE:
2556         case PA_SU_LINE_STIPPLE_VALUE:
2557         case PA_SC_LINE_STIPPLE_STATE:
2558         case PA_SC_ENHANCE:
2559         case SQ_DYN_GPR_CNTL_PS_FLUSH_REQ:
2560         case SQ_DYN_GPR_SIMD_LOCK_EN:
2561         case SQ_CONFIG:
2562         case SQ_GPR_RESOURCE_MGMT_1:
2563         case SQ_GLOBAL_GPR_RESOURCE_MGMT_1:
2564         case SQ_GLOBAL_GPR_RESOURCE_MGMT_2:
2565         case SQ_CONST_MEM_BASE:
2566         case SQ_STATIC_THREAD_MGMT_1:
2567         case SQ_STATIC_THREAD_MGMT_2:
2568         case SQ_STATIC_THREAD_MGMT_3:
2569         case SPI_CONFIG_CNTL:
2570         case SPI_CONFIG_CNTL_1:
2571         case TA_CNTL_AUX:
2572         case DB_DEBUG:
2573         case DB_DEBUG2:
2574         case DB_DEBUG3:
2575         case DB_DEBUG4:
2576         case DB_WATERMARKS:
2577         case TD_PS_BORDER_COLOR_INDEX:
2578         case TD_PS_BORDER_COLOR_RED:
2579         case TD_PS_BORDER_COLOR_GREEN:
2580         case TD_PS_BORDER_COLOR_BLUE:
2581         case TD_PS_BORDER_COLOR_ALPHA:
2582         case TD_VS_BORDER_COLOR_INDEX:
2583         case TD_VS_BORDER_COLOR_RED:
2584         case TD_VS_BORDER_COLOR_GREEN:
2585         case TD_VS_BORDER_COLOR_BLUE:
2586         case TD_VS_BORDER_COLOR_ALPHA:
2587         case TD_GS_BORDER_COLOR_INDEX:
2588         case TD_GS_BORDER_COLOR_RED:
2589         case TD_GS_BORDER_COLOR_GREEN:
2590         case TD_GS_BORDER_COLOR_BLUE:
2591         case TD_GS_BORDER_COLOR_ALPHA:
2592         case TD_HS_BORDER_COLOR_INDEX:
2593         case TD_HS_BORDER_COLOR_RED:
2594         case TD_HS_BORDER_COLOR_GREEN:
2595         case TD_HS_BORDER_COLOR_BLUE:
2596         case TD_HS_BORDER_COLOR_ALPHA:
2597         case TD_LS_BORDER_COLOR_INDEX:
2598         case TD_LS_BORDER_COLOR_RED:
2599         case TD_LS_BORDER_COLOR_GREEN:
2600         case TD_LS_BORDER_COLOR_BLUE:
2601         case TD_LS_BORDER_COLOR_ALPHA:
2602         case TD_CS_BORDER_COLOR_INDEX:
2603         case TD_CS_BORDER_COLOR_RED:
2604         case TD_CS_BORDER_COLOR_GREEN:
2605         case TD_CS_BORDER_COLOR_BLUE:
2606         case TD_CS_BORDER_COLOR_ALPHA:
2607         case SQ_ESGS_RING_SIZE:
2608         case SQ_GSVS_RING_SIZE:
2609         case SQ_ESTMP_RING_SIZE:
2610         case SQ_GSTMP_RING_SIZE:
2611         case SQ_HSTMP_RING_SIZE:
2612         case SQ_LSTMP_RING_SIZE:
2613         case SQ_PSTMP_RING_SIZE:
2614         case SQ_VSTMP_RING_SIZE:
2615         case SQ_ESGS_RING_ITEMSIZE:
2616         case SQ_ESTMP_RING_ITEMSIZE:
2617         case SQ_GSTMP_RING_ITEMSIZE:
2618         case SQ_GSVS_RING_ITEMSIZE:
2619         case SQ_GS_VERT_ITEMSIZE:
2620         case SQ_GS_VERT_ITEMSIZE_1:
2621         case SQ_GS_VERT_ITEMSIZE_2:
2622         case SQ_GS_VERT_ITEMSIZE_3:
2623         case SQ_GSVS_RING_OFFSET_1:
2624         case SQ_GSVS_RING_OFFSET_2:
2625         case SQ_GSVS_RING_OFFSET_3:
2626         case SQ_HSTMP_RING_ITEMSIZE:
2627         case SQ_LSTMP_RING_ITEMSIZE:
2628         case SQ_PSTMP_RING_ITEMSIZE:
2629         case SQ_VSTMP_RING_ITEMSIZE:
2630         case VGT_TF_RING_SIZE:
2631         case SQ_ESGS_RING_BASE:
2632         case SQ_GSVS_RING_BASE:
2633         case SQ_ESTMP_RING_BASE:
2634         case SQ_GSTMP_RING_BASE:
2635         case SQ_HSTMP_RING_BASE:
2636         case SQ_LSTMP_RING_BASE:
2637         case SQ_PSTMP_RING_BASE:
2638         case SQ_VSTMP_RING_BASE:
2639         case CAYMAN_VGT_OFFCHIP_LDS_BASE:
2640         case CAYMAN_SQ_EX_ALLOC_TABLE_SLOTS:
2641                 return true;
2642         default:
2643                 return false;
2644         }
2645 }
2646
2647 static int evergreen_vm_packet3_check(struct radeon_device *rdev,
2648                                       u32 *ib, struct radeon_cs_packet *pkt)
2649 {
2650         u32 idx = pkt->idx + 1;
2651         u32 idx_value = ib[idx];
2652         u32 start_reg, end_reg, reg, i;
2653
2654         switch (pkt->opcode) {
2655         case PACKET3_NOP:
2656         case PACKET3_SET_BASE:
2657         case PACKET3_CLEAR_STATE:
2658         case PACKET3_INDEX_BUFFER_SIZE:
2659         case PACKET3_DISPATCH_DIRECT:
2660         case PACKET3_DISPATCH_INDIRECT:
2661         case PACKET3_MODE_CONTROL:
2662         case PACKET3_SET_PREDICATION:
2663         case PACKET3_COND_EXEC:
2664         case PACKET3_PRED_EXEC:
2665         case PACKET3_DRAW_INDIRECT:
2666         case PACKET3_DRAW_INDEX_INDIRECT:
2667         case PACKET3_INDEX_BASE:
2668         case PACKET3_DRAW_INDEX_2:
2669         case PACKET3_CONTEXT_CONTROL:
2670         case PACKET3_DRAW_INDEX_OFFSET:
2671         case PACKET3_INDEX_TYPE:
2672         case PACKET3_DRAW_INDEX:
2673         case PACKET3_DRAW_INDEX_AUTO:
2674         case PACKET3_DRAW_INDEX_IMMD:
2675         case PACKET3_NUM_INSTANCES:
2676         case PACKET3_DRAW_INDEX_MULTI_AUTO:
2677         case PACKET3_STRMOUT_BUFFER_UPDATE:
2678         case PACKET3_DRAW_INDEX_OFFSET_2:
2679         case PACKET3_DRAW_INDEX_MULTI_ELEMENT:
2680         case PACKET3_MPEG_INDEX:
2681         case PACKET3_WAIT_REG_MEM:
2682         case PACKET3_MEM_WRITE:
2683         case PACKET3_SURFACE_SYNC:
2684         case PACKET3_EVENT_WRITE:
2685         case PACKET3_EVENT_WRITE_EOP:
2686         case PACKET3_EVENT_WRITE_EOS:
2687         case PACKET3_SET_CONTEXT_REG:
2688         case PACKET3_SET_BOOL_CONST:
2689         case PACKET3_SET_LOOP_CONST:
2690         case PACKET3_SET_RESOURCE:
2691         case PACKET3_SET_SAMPLER:
2692         case PACKET3_SET_CTL_CONST:
2693         case PACKET3_SET_RESOURCE_OFFSET:
2694         case PACKET3_SET_CONTEXT_REG_INDIRECT:
2695         case PACKET3_SET_RESOURCE_INDIRECT:
2696         case CAYMAN_PACKET3_DEALLOC_STATE:
2697                 break;
2698         case PACKET3_COND_WRITE:
2699                 if (idx_value & 0x100) {
2700                         reg = ib[idx + 5] * 4;
2701                         if (!evergreen_vm_reg_valid(reg))
2702                                 return -EINVAL;
2703                 }
2704                 break;
2705         case PACKET3_COPY_DW:
2706                 if (idx_value & 0x2) {
2707                         reg = ib[idx + 3] * 4;
2708                         if (!evergreen_vm_reg_valid(reg))
2709                                 return -EINVAL;
2710                 }
2711                 break;
2712         case PACKET3_SET_CONFIG_REG:
2713                 start_reg = (idx_value << 2) + PACKET3_SET_CONFIG_REG_START;
2714                 end_reg = 4 * pkt->count + start_reg - 4;
2715                 if ((start_reg < PACKET3_SET_CONFIG_REG_START) ||
2716                     (start_reg >= PACKET3_SET_CONFIG_REG_END) ||
2717                     (end_reg >= PACKET3_SET_CONFIG_REG_END)) {
2718                         DRM_ERROR("bad PACKET3_SET_CONFIG_REG\n");
2719                         return -EINVAL;
2720                 }
2721                 for (i = 0; i < pkt->count; i++) {
2722                         reg = start_reg + (4 * i);
2723                         if (!evergreen_vm_reg_valid(reg))
2724                                 return -EINVAL;
2725                 }
2726                 break;
2727         default:
2728                 return -EINVAL;
2729         }
2730         return 0;
2731 }
2732
2733 int evergreen_ib_parse(struct radeon_device *rdev, struct radeon_ib *ib)
2734 {
2735         int ret = 0;
2736         u32 idx = 0;
2737         struct radeon_cs_packet pkt;
2738
2739         do {
2740                 pkt.idx = idx;
2741                 pkt.type = CP_PACKET_GET_TYPE(ib->ptr[idx]);
2742                 pkt.count = CP_PACKET_GET_COUNT(ib->ptr[idx]);
2743                 pkt.one_reg_wr = 0;
2744                 switch (pkt.type) {
2745                 case PACKET_TYPE0:
2746                         dev_err(rdev->dev, "Packet0 not allowed!\n");
2747                         ret = -EINVAL;
2748                         break;
2749                 case PACKET_TYPE2:
2750                         idx += 1;
2751                         break;
2752                 case PACKET_TYPE3:
2753                         pkt.opcode = CP_PACKET3_GET_OPCODE(ib->ptr[idx]);
2754                         ret = evergreen_vm_packet3_check(rdev, ib->ptr, &pkt);
2755                         idx += pkt.count + 2;
2756                         break;
2757                 default:
2758                         dev_err(rdev->dev, "Unknown packet type %d !\n", pkt.type);
2759                         ret = -EINVAL;
2760                         break;
2761                 }
2762                 if (ret)
2763                         break;
2764         } while (idx < ib->length_dw);
2765
2766         return ret;
2767 }