1 // SPDX-License-Identifier: GPL-2.0-only
5 * Copyright 2001 David Brownell
6 * Copyright 2007 Intel Corporation
7 * Author: Matthew Wilcox <willy@linux.intel.com>
9 * This allocator returns small blocks of a given size which are DMA-able by
10 * the given device. It uses the dma_alloc_coherent page allocator to get
11 * new pages, then splits them up into blocks of the required size.
12 * Many older drivers still have their own code to do this.
14 * The current design of this allocator is fairly simple. The pool is
15 * represented by the 'struct dma_pool' which keeps a doubly-linked list of
16 * allocated pages. Each page in the page_list is split into blocks of at
17 * least 'size' bytes. Free blocks are tracked in an unsorted singly-linked
18 * list of free blocks within the page. Used blocks aren't tracked, but we
19 * keep a count of how many are currently allocated from each page.
22 #include <linux/device.h>
23 #include <linux/dma-mapping.h>
24 #include <linux/dmapool.h>
25 #include <linux/kernel.h>
26 #include <linux/list.h>
27 #include <linux/export.h>
28 #include <linux/mutex.h>
29 #include <linux/poison.h>
30 #include <linux/sched.h>
31 #include <linux/slab.h>
32 #include <linux/stat.h>
33 #include <linux/spinlock.h>
34 #include <linux/string.h>
35 #include <linux/types.h>
36 #include <linux/wait.h>
38 #if defined(CONFIG_DEBUG_SLAB) || defined(CONFIG_SLUB_DEBUG_ON)
39 #define DMAPOOL_DEBUG 1
42 struct dma_pool
{ /* the pool */
43 struct list_head page_list
;
50 struct list_head pools
;
53 struct dma_page
{ /* cacheable header for 'allocation' bytes */
54 struct list_head page_list
;
61 static DEFINE_MUTEX(pools_lock
);
62 static DEFINE_MUTEX(pools_reg_lock
);
65 show_pools(struct device
*dev
, struct device_attribute
*attr
, char *buf
)
70 struct dma_page
*page
;
71 struct dma_pool
*pool
;
76 temp
= scnprintf(next
, size
, "poolinfo - 0.1\n");
80 mutex_lock(&pools_lock
);
81 list_for_each_entry(pool
, &dev
->dma_pools
, pools
) {
85 spin_lock_irq(&pool
->lock
);
86 list_for_each_entry(page
, &pool
->page_list
, page_list
) {
88 blocks
+= page
->in_use
;
90 spin_unlock_irq(&pool
->lock
);
92 /* per-pool info, no real statistics yet */
93 temp
= scnprintf(next
, size
, "%-16s %4u %4zu %4zu %2u\n",
95 pages
* (pool
->allocation
/ pool
->size
),
100 mutex_unlock(&pools_lock
);
102 return PAGE_SIZE
- size
;
105 static DEVICE_ATTR(pools
, 0444, show_pools
, NULL
);
108 * dma_pool_create - Creates a pool of consistent memory blocks, for dma.
109 * @name: name of pool, for diagnostics
110 * @dev: device that will be doing the DMA
111 * @size: size of the blocks in this pool.
112 * @align: alignment requirement for blocks; must be a power of two
113 * @boundary: returned blocks won't cross this power of two boundary
114 * Context: not in_interrupt()
116 * Given one of these pools, dma_pool_alloc()
117 * may be used to allocate memory. Such memory will all have "consistent"
118 * DMA mappings, accessible by the device and its driver without using
119 * cache flushing primitives. The actual size of blocks allocated may be
120 * larger than requested because of alignment.
122 * If @boundary is nonzero, objects returned from dma_pool_alloc() won't
123 * cross that size boundary. This is useful for devices which have
124 * addressing restrictions on individual DMA transfers, such as not crossing
125 * boundaries of 4KBytes.
127 * Return: a dma allocation pool with the requested characteristics, or
128 * %NULL if one can't be created.
130 struct dma_pool
*dma_pool_create(const char *name
, struct device
*dev
,
131 size_t size
, size_t align
, size_t boundary
)
133 struct dma_pool
*retval
;
139 else if (align
& (align
- 1))
147 size
= ALIGN(size
, align
);
148 allocation
= max_t(size_t, size
, PAGE_SIZE
);
151 boundary
= allocation
;
152 else if ((boundary
< size
) || (boundary
& (boundary
- 1)))
155 retval
= kmalloc_node(sizeof(*retval
), GFP_KERNEL
, dev_to_node(dev
));
159 strlcpy(retval
->name
, name
, sizeof(retval
->name
));
163 INIT_LIST_HEAD(&retval
->page_list
);
164 spin_lock_init(&retval
->lock
);
166 retval
->boundary
= boundary
;
167 retval
->allocation
= allocation
;
169 INIT_LIST_HEAD(&retval
->pools
);
172 * pools_lock ensures that the ->dma_pools list does not get corrupted.
173 * pools_reg_lock ensures that there is not a race between
174 * dma_pool_create() and dma_pool_destroy() or within dma_pool_create()
175 * when the first invocation of dma_pool_create() failed on
176 * device_create_file() and the second assumes that it has been done (I
177 * know it is a short window).
179 mutex_lock(&pools_reg_lock
);
180 mutex_lock(&pools_lock
);
181 if (list_empty(&dev
->dma_pools
))
183 list_add(&retval
->pools
, &dev
->dma_pools
);
184 mutex_unlock(&pools_lock
);
188 err
= device_create_file(dev
, &dev_attr_pools
);
190 mutex_lock(&pools_lock
);
191 list_del(&retval
->pools
);
192 mutex_unlock(&pools_lock
);
193 mutex_unlock(&pools_reg_lock
);
198 mutex_unlock(&pools_reg_lock
);
201 EXPORT_SYMBOL(dma_pool_create
);
203 static void pool_initialise_page(struct dma_pool
*pool
, struct dma_page
*page
)
205 unsigned int offset
= 0;
206 unsigned int next_boundary
= pool
->boundary
;
209 unsigned int next
= offset
+ pool
->size
;
210 if (unlikely((next
+ pool
->size
) >= next_boundary
)) {
211 next
= next_boundary
;
212 next_boundary
+= pool
->boundary
;
214 *(int *)(page
->vaddr
+ offset
) = next
;
216 } while (offset
< pool
->allocation
);
219 static struct dma_page
*pool_alloc_page(struct dma_pool
*pool
, gfp_t mem_flags
)
221 struct dma_page
*page
;
223 page
= kmalloc(sizeof(*page
), mem_flags
);
226 page
->vaddr
= dma_alloc_coherent(pool
->dev
, pool
->allocation
,
227 &page
->dma
, mem_flags
);
230 memset(page
->vaddr
, POOL_POISON_FREED
, pool
->allocation
);
232 pool_initialise_page(pool
, page
);
242 static inline bool is_page_busy(struct dma_page
*page
)
244 return page
->in_use
!= 0;
247 static void pool_free_page(struct dma_pool
*pool
, struct dma_page
*page
)
249 dma_addr_t dma
= page
->dma
;
252 memset(page
->vaddr
, POOL_POISON_FREED
, pool
->allocation
);
254 dma_free_coherent(pool
->dev
, pool
->allocation
, page
->vaddr
, dma
);
255 list_del(&page
->page_list
);
260 * dma_pool_destroy - destroys a pool of dma memory blocks.
261 * @pool: dma pool that will be destroyed
262 * Context: !in_interrupt()
264 * Caller guarantees that no more memory from the pool is in use,
265 * and that nothing will try to use the pool after this call.
267 void dma_pool_destroy(struct dma_pool
*pool
)
269 struct dma_page
*page
, *tmp
;
275 mutex_lock(&pools_reg_lock
);
276 mutex_lock(&pools_lock
);
277 list_del(&pool
->pools
);
278 if (pool
->dev
&& list_empty(&pool
->dev
->dma_pools
))
280 mutex_unlock(&pools_lock
);
282 device_remove_file(pool
->dev
, &dev_attr_pools
);
283 mutex_unlock(&pools_reg_lock
);
285 list_for_each_entry_safe(page
, tmp
, &pool
->page_list
, page_list
) {
286 if (is_page_busy(page
)) {
288 dev_err(pool
->dev
, "%s %s, %p busy\n", __func__
,
289 pool
->name
, page
->vaddr
);
291 pr_err("%s %s, %p busy\n", __func__
,
292 pool
->name
, page
->vaddr
);
293 /* leak the still-in-use consistent memory */
294 list_del(&page
->page_list
);
297 pool_free_page(pool
, page
);
302 EXPORT_SYMBOL(dma_pool_destroy
);
305 * dma_pool_alloc - get a block of consistent memory
306 * @pool: dma pool that will produce the block
307 * @mem_flags: GFP_* bitmask
308 * @handle: pointer to dma address of block
310 * Return: the kernel virtual address of a currently unused block,
311 * and reports its dma address through the handle.
312 * If such a memory block can't be allocated, %NULL is returned.
314 void *dma_pool_alloc(struct dma_pool
*pool
, gfp_t mem_flags
,
318 struct dma_page
*page
;
322 might_sleep_if(gfpflags_allow_blocking(mem_flags
));
324 spin_lock_irqsave(&pool
->lock
, flags
);
325 list_for_each_entry(page
, &pool
->page_list
, page_list
) {
326 if (page
->offset
< pool
->allocation
)
330 /* pool_alloc_page() might sleep, so temporarily drop &pool->lock */
331 spin_unlock_irqrestore(&pool
->lock
, flags
);
333 page
= pool_alloc_page(pool
, mem_flags
& (~__GFP_ZERO
));
337 spin_lock_irqsave(&pool
->lock
, flags
);
339 list_add(&page
->page_list
, &pool
->page_list
);
342 offset
= page
->offset
;
343 page
->offset
= *(int *)(page
->vaddr
+ offset
);
344 retval
= offset
+ page
->vaddr
;
345 *handle
= offset
+ page
->dma
;
350 /* page->offset is stored in first 4 bytes */
351 for (i
= sizeof(page
->offset
); i
< pool
->size
; i
++) {
352 if (data
[i
] == POOL_POISON_FREED
)
355 dev_err(pool
->dev
, "%s %s, %p (corrupted)\n",
356 __func__
, pool
->name
, retval
);
358 pr_err("%s %s, %p (corrupted)\n",
359 __func__
, pool
->name
, retval
);
362 * Dump the first 4 bytes even if they are not
365 print_hex_dump(KERN_ERR
, "", DUMP_PREFIX_OFFSET
, 16, 1,
366 data
, pool
->size
, 1);
370 if (!(mem_flags
& __GFP_ZERO
))
371 memset(retval
, POOL_POISON_ALLOCATED
, pool
->size
);
373 spin_unlock_irqrestore(&pool
->lock
, flags
);
375 if (want_init_on_alloc(mem_flags
))
376 memset(retval
, 0, pool
->size
);
380 EXPORT_SYMBOL(dma_pool_alloc
);
382 static struct dma_page
*pool_find_page(struct dma_pool
*pool
, dma_addr_t dma
)
384 struct dma_page
*page
;
386 list_for_each_entry(page
, &pool
->page_list
, page_list
) {
389 if ((dma
- page
->dma
) < pool
->allocation
)
396 * dma_pool_free - put block back into dma pool
397 * @pool: the dma pool holding the block
398 * @vaddr: virtual address of block
399 * @dma: dma address of block
401 * Caller promises neither device nor driver will again touch this block
402 * unless it is first re-allocated.
404 void dma_pool_free(struct dma_pool
*pool
, void *vaddr
, dma_addr_t dma
)
406 struct dma_page
*page
;
410 spin_lock_irqsave(&pool
->lock
, flags
);
411 page
= pool_find_page(pool
, dma
);
413 spin_unlock_irqrestore(&pool
->lock
, flags
);
415 dev_err(pool
->dev
, "%s %s, %p/%pad (bad dma)\n",
416 __func__
, pool
->name
, vaddr
, &dma
);
418 pr_err("%s %s, %p/%pad (bad dma)\n",
419 __func__
, pool
->name
, vaddr
, &dma
);
423 offset
= vaddr
- page
->vaddr
;
424 if (want_init_on_free())
425 memset(vaddr
, 0, pool
->size
);
427 if ((dma
- page
->dma
) != offset
) {
428 spin_unlock_irqrestore(&pool
->lock
, flags
);
430 dev_err(pool
->dev
, "%s %s, %p (bad vaddr)/%pad\n",
431 __func__
, pool
->name
, vaddr
, &dma
);
433 pr_err("%s %s, %p (bad vaddr)/%pad\n",
434 __func__
, pool
->name
, vaddr
, &dma
);
438 unsigned int chain
= page
->offset
;
439 while (chain
< pool
->allocation
) {
440 if (chain
!= offset
) {
441 chain
= *(int *)(page
->vaddr
+ chain
);
444 spin_unlock_irqrestore(&pool
->lock
, flags
);
446 dev_err(pool
->dev
, "%s %s, dma %pad already free\n",
447 __func__
, pool
->name
, &dma
);
449 pr_err("%s %s, dma %pad already free\n",
450 __func__
, pool
->name
, &dma
);
454 memset(vaddr
, POOL_POISON_FREED
, pool
->size
);
458 *(int *)vaddr
= page
->offset
;
459 page
->offset
= offset
;
461 * Resist a temptation to do
462 * if (!is_page_busy(page)) pool_free_page(pool, page);
463 * Better have a few empty pages hang around.
465 spin_unlock_irqrestore(&pool
->lock
, flags
);
467 EXPORT_SYMBOL(dma_pool_free
);
472 static void dmam_pool_release(struct device
*dev
, void *res
)
474 struct dma_pool
*pool
= *(struct dma_pool
**)res
;
476 dma_pool_destroy(pool
);
479 static int dmam_pool_match(struct device
*dev
, void *res
, void *match_data
)
481 return *(struct dma_pool
**)res
== match_data
;
485 * dmam_pool_create - Managed dma_pool_create()
486 * @name: name of pool, for diagnostics
487 * @dev: device that will be doing the DMA
488 * @size: size of the blocks in this pool.
489 * @align: alignment requirement for blocks; must be a power of two
490 * @allocation: returned blocks won't cross this boundary (or zero)
492 * Managed dma_pool_create(). DMA pool created with this function is
493 * automatically destroyed on driver detach.
495 * Return: a managed dma allocation pool with the requested
496 * characteristics, or %NULL if one can't be created.
498 struct dma_pool
*dmam_pool_create(const char *name
, struct device
*dev
,
499 size_t size
, size_t align
, size_t allocation
)
501 struct dma_pool
**ptr
, *pool
;
503 ptr
= devres_alloc(dmam_pool_release
, sizeof(*ptr
), GFP_KERNEL
);
507 pool
= *ptr
= dma_pool_create(name
, dev
, size
, align
, allocation
);
509 devres_add(dev
, ptr
);
515 EXPORT_SYMBOL(dmam_pool_create
);
518 * dmam_pool_destroy - Managed dma_pool_destroy()
519 * @pool: dma pool that will be destroyed
521 * Managed dma_pool_destroy().
523 void dmam_pool_destroy(struct dma_pool
*pool
)
525 struct device
*dev
= pool
->dev
;
527 WARN_ON(devres_release(dev
, dmam_pool_release
, dmam_pool_match
, pool
));
529 EXPORT_SYMBOL(dmam_pool_destroy
);