bpf: Prevent memory disambiguation attack
[linux/fpc-iii.git] / drivers / gpu / drm / cirrus / cirrus_ttm.c
bloba8e31ea07382552869b5b6c2196b4fe2260d6abe
1 /*
2 * Copyright 2012 Red Hat Inc.
4 * Permission is hereby granted, free of charge, to any person obtaining a
5 * copy of this software and associated documentation files (the
6 * "Software"), to deal in the Software without restriction, including
7 * without limitation the rights to use, copy, modify, merge, publish,
8 * distribute, sub license, and/or sell copies of the Software, and to
9 * permit persons to whom the Software is furnished to do so, subject to
10 * the following conditions:
12 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
13 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
14 * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL
15 * THE COPYRIGHT HOLDERS, AUTHORS AND/OR ITS SUPPLIERS BE LIABLE FOR ANY CLAIM,
16 * DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
17 * OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
18 * USE OR OTHER DEALINGS IN THE SOFTWARE.
20 * The above copyright notice and this permission notice (including the
21 * next paragraph) shall be included in all copies or substantial portions
22 * of the Software.
26 * Authors: Dave Airlie <airlied@redhat.com>
28 #include <drm/drmP.h>
29 #include <drm/ttm/ttm_page_alloc.h>
31 #include "cirrus_drv.h"
33 static inline struct cirrus_device *
34 cirrus_bdev(struct ttm_bo_device *bd)
36 return container_of(bd, struct cirrus_device, ttm.bdev);
39 static int
40 cirrus_ttm_mem_global_init(struct drm_global_reference *ref)
42 return ttm_mem_global_init(ref->object);
45 static void
46 cirrus_ttm_mem_global_release(struct drm_global_reference *ref)
48 ttm_mem_global_release(ref->object);
51 static int cirrus_ttm_global_init(struct cirrus_device *cirrus)
53 struct drm_global_reference *global_ref;
54 int r;
56 global_ref = &cirrus->ttm.mem_global_ref;
57 global_ref->global_type = DRM_GLOBAL_TTM_MEM;
58 global_ref->size = sizeof(struct ttm_mem_global);
59 global_ref->init = &cirrus_ttm_mem_global_init;
60 global_ref->release = &cirrus_ttm_mem_global_release;
61 r = drm_global_item_ref(global_ref);
62 if (r != 0) {
63 DRM_ERROR("Failed setting up TTM memory accounting "
64 "subsystem.\n");
65 return r;
68 cirrus->ttm.bo_global_ref.mem_glob =
69 cirrus->ttm.mem_global_ref.object;
70 global_ref = &cirrus->ttm.bo_global_ref.ref;
71 global_ref->global_type = DRM_GLOBAL_TTM_BO;
72 global_ref->size = sizeof(struct ttm_bo_global);
73 global_ref->init = &ttm_bo_global_init;
74 global_ref->release = &ttm_bo_global_release;
75 r = drm_global_item_ref(global_ref);
76 if (r != 0) {
77 DRM_ERROR("Failed setting up TTM BO subsystem.\n");
78 drm_global_item_unref(&cirrus->ttm.mem_global_ref);
79 return r;
81 return 0;
84 static void
85 cirrus_ttm_global_release(struct cirrus_device *cirrus)
87 if (cirrus->ttm.mem_global_ref.release == NULL)
88 return;
90 drm_global_item_unref(&cirrus->ttm.bo_global_ref.ref);
91 drm_global_item_unref(&cirrus->ttm.mem_global_ref);
92 cirrus->ttm.mem_global_ref.release = NULL;
96 static void cirrus_bo_ttm_destroy(struct ttm_buffer_object *tbo)
98 struct cirrus_bo *bo;
100 bo = container_of(tbo, struct cirrus_bo, bo);
102 drm_gem_object_release(&bo->gem);
103 kfree(bo);
106 static bool cirrus_ttm_bo_is_cirrus_bo(struct ttm_buffer_object *bo)
108 if (bo->destroy == &cirrus_bo_ttm_destroy)
109 return true;
110 return false;
113 static int
114 cirrus_bo_init_mem_type(struct ttm_bo_device *bdev, uint32_t type,
115 struct ttm_mem_type_manager *man)
117 switch (type) {
118 case TTM_PL_SYSTEM:
119 man->flags = TTM_MEMTYPE_FLAG_MAPPABLE;
120 man->available_caching = TTM_PL_MASK_CACHING;
121 man->default_caching = TTM_PL_FLAG_CACHED;
122 break;
123 case TTM_PL_VRAM:
124 man->func = &ttm_bo_manager_func;
125 man->flags = TTM_MEMTYPE_FLAG_FIXED |
126 TTM_MEMTYPE_FLAG_MAPPABLE;
127 man->available_caching = TTM_PL_FLAG_UNCACHED |
128 TTM_PL_FLAG_WC;
129 man->default_caching = TTM_PL_FLAG_WC;
130 break;
131 default:
132 DRM_ERROR("Unsupported memory type %u\n", (unsigned)type);
133 return -EINVAL;
135 return 0;
138 static void
139 cirrus_bo_evict_flags(struct ttm_buffer_object *bo, struct ttm_placement *pl)
141 struct cirrus_bo *cirrusbo = cirrus_bo(bo);
143 if (!cirrus_ttm_bo_is_cirrus_bo(bo))
144 return;
146 cirrus_ttm_placement(cirrusbo, TTM_PL_FLAG_SYSTEM);
147 *pl = cirrusbo->placement;
150 static int cirrus_bo_verify_access(struct ttm_buffer_object *bo, struct file *filp)
152 struct cirrus_bo *cirrusbo = cirrus_bo(bo);
154 return drm_vma_node_verify_access(&cirrusbo->gem.vma_node,
155 filp->private_data);
158 static int cirrus_ttm_io_mem_reserve(struct ttm_bo_device *bdev,
159 struct ttm_mem_reg *mem)
161 struct ttm_mem_type_manager *man = &bdev->man[mem->mem_type];
162 struct cirrus_device *cirrus = cirrus_bdev(bdev);
164 mem->bus.addr = NULL;
165 mem->bus.offset = 0;
166 mem->bus.size = mem->num_pages << PAGE_SHIFT;
167 mem->bus.base = 0;
168 mem->bus.is_iomem = false;
169 if (!(man->flags & TTM_MEMTYPE_FLAG_MAPPABLE))
170 return -EINVAL;
171 switch (mem->mem_type) {
172 case TTM_PL_SYSTEM:
173 /* system memory */
174 return 0;
175 case TTM_PL_VRAM:
176 mem->bus.offset = mem->start << PAGE_SHIFT;
177 mem->bus.base = pci_resource_start(cirrus->dev->pdev, 0);
178 mem->bus.is_iomem = true;
179 break;
180 default:
181 return -EINVAL;
182 break;
184 return 0;
187 static void cirrus_ttm_io_mem_free(struct ttm_bo_device *bdev, struct ttm_mem_reg *mem)
191 static void cirrus_ttm_backend_destroy(struct ttm_tt *tt)
193 ttm_tt_fini(tt);
194 kfree(tt);
197 static struct ttm_backend_func cirrus_tt_backend_func = {
198 .destroy = &cirrus_ttm_backend_destroy,
202 static struct ttm_tt *cirrus_ttm_tt_create(struct ttm_bo_device *bdev,
203 unsigned long size, uint32_t page_flags,
204 struct page *dummy_read_page)
206 struct ttm_tt *tt;
208 tt = kzalloc(sizeof(struct ttm_tt), GFP_KERNEL);
209 if (tt == NULL)
210 return NULL;
211 tt->func = &cirrus_tt_backend_func;
212 if (ttm_tt_init(tt, bdev, size, page_flags, dummy_read_page)) {
213 kfree(tt);
214 return NULL;
216 return tt;
219 static int cirrus_ttm_tt_populate(struct ttm_tt *ttm,
220 struct ttm_operation_ctx *ctx)
222 return ttm_pool_populate(ttm, ctx);
225 static void cirrus_ttm_tt_unpopulate(struct ttm_tt *ttm)
227 ttm_pool_unpopulate(ttm);
230 struct ttm_bo_driver cirrus_bo_driver = {
231 .ttm_tt_create = cirrus_ttm_tt_create,
232 .ttm_tt_populate = cirrus_ttm_tt_populate,
233 .ttm_tt_unpopulate = cirrus_ttm_tt_unpopulate,
234 .init_mem_type = cirrus_bo_init_mem_type,
235 .eviction_valuable = ttm_bo_eviction_valuable,
236 .evict_flags = cirrus_bo_evict_flags,
237 .move = NULL,
238 .verify_access = cirrus_bo_verify_access,
239 .io_mem_reserve = &cirrus_ttm_io_mem_reserve,
240 .io_mem_free = &cirrus_ttm_io_mem_free,
243 int cirrus_mm_init(struct cirrus_device *cirrus)
245 int ret;
246 struct drm_device *dev = cirrus->dev;
247 struct ttm_bo_device *bdev = &cirrus->ttm.bdev;
249 ret = cirrus_ttm_global_init(cirrus);
250 if (ret)
251 return ret;
253 ret = ttm_bo_device_init(&cirrus->ttm.bdev,
254 cirrus->ttm.bo_global_ref.ref.object,
255 &cirrus_bo_driver,
256 dev->anon_inode->i_mapping,
257 DRM_FILE_PAGE_OFFSET,
258 true);
259 if (ret) {
260 DRM_ERROR("Error initialising bo driver; %d\n", ret);
261 return ret;
264 ret = ttm_bo_init_mm(bdev, TTM_PL_VRAM,
265 cirrus->mc.vram_size >> PAGE_SHIFT);
266 if (ret) {
267 DRM_ERROR("Failed ttm VRAM init: %d\n", ret);
268 return ret;
271 arch_io_reserve_memtype_wc(pci_resource_start(dev->pdev, 0),
272 pci_resource_len(dev->pdev, 0));
274 cirrus->fb_mtrr = arch_phys_wc_add(pci_resource_start(dev->pdev, 0),
275 pci_resource_len(dev->pdev, 0));
277 cirrus->mm_inited = true;
278 return 0;
281 void cirrus_mm_fini(struct cirrus_device *cirrus)
283 struct drm_device *dev = cirrus->dev;
285 if (!cirrus->mm_inited)
286 return;
288 ttm_bo_device_release(&cirrus->ttm.bdev);
290 cirrus_ttm_global_release(cirrus);
292 arch_phys_wc_del(cirrus->fb_mtrr);
293 cirrus->fb_mtrr = 0;
294 arch_io_free_memtype_wc(pci_resource_start(dev->pdev, 0),
295 pci_resource_len(dev->pdev, 0));
298 void cirrus_ttm_placement(struct cirrus_bo *bo, int domain)
300 u32 c = 0;
301 unsigned i;
302 bo->placement.placement = bo->placements;
303 bo->placement.busy_placement = bo->placements;
304 if (domain & TTM_PL_FLAG_VRAM)
305 bo->placements[c++].flags = TTM_PL_FLAG_WC | TTM_PL_FLAG_UNCACHED | TTM_PL_FLAG_VRAM;
306 if (domain & TTM_PL_FLAG_SYSTEM)
307 bo->placements[c++].flags = TTM_PL_MASK_CACHING | TTM_PL_FLAG_SYSTEM;
308 if (!c)
309 bo->placements[c++].flags = TTM_PL_MASK_CACHING | TTM_PL_FLAG_SYSTEM;
310 bo->placement.num_placement = c;
311 bo->placement.num_busy_placement = c;
312 for (i = 0; i < c; ++i) {
313 bo->placements[i].fpfn = 0;
314 bo->placements[i].lpfn = 0;
318 int cirrus_bo_create(struct drm_device *dev, int size, int align,
319 uint32_t flags, struct cirrus_bo **pcirrusbo)
321 struct cirrus_device *cirrus = dev->dev_private;
322 struct cirrus_bo *cirrusbo;
323 size_t acc_size;
324 int ret;
326 cirrusbo = kzalloc(sizeof(struct cirrus_bo), GFP_KERNEL);
327 if (!cirrusbo)
328 return -ENOMEM;
330 ret = drm_gem_object_init(dev, &cirrusbo->gem, size);
331 if (ret) {
332 kfree(cirrusbo);
333 return ret;
336 cirrusbo->bo.bdev = &cirrus->ttm.bdev;
338 cirrus_ttm_placement(cirrusbo, TTM_PL_FLAG_VRAM | TTM_PL_FLAG_SYSTEM);
340 acc_size = ttm_bo_dma_acc_size(&cirrus->ttm.bdev, size,
341 sizeof(struct cirrus_bo));
343 ret = ttm_bo_init(&cirrus->ttm.bdev, &cirrusbo->bo, size,
344 ttm_bo_type_device, &cirrusbo->placement,
345 align >> PAGE_SHIFT, false, NULL, acc_size,
346 NULL, NULL, cirrus_bo_ttm_destroy);
347 if (ret)
348 return ret;
350 *pcirrusbo = cirrusbo;
351 return 0;
354 static inline u64 cirrus_bo_gpu_offset(struct cirrus_bo *bo)
356 return bo->bo.offset;
359 int cirrus_bo_pin(struct cirrus_bo *bo, u32 pl_flag, u64 *gpu_addr)
361 struct ttm_operation_ctx ctx = { false, false };
362 int i, ret;
364 if (bo->pin_count) {
365 bo->pin_count++;
366 if (gpu_addr)
367 *gpu_addr = cirrus_bo_gpu_offset(bo);
370 cirrus_ttm_placement(bo, pl_flag);
371 for (i = 0; i < bo->placement.num_placement; i++)
372 bo->placements[i].flags |= TTM_PL_FLAG_NO_EVICT;
373 ret = ttm_bo_validate(&bo->bo, &bo->placement, &ctx);
374 if (ret)
375 return ret;
377 bo->pin_count = 1;
378 if (gpu_addr)
379 *gpu_addr = cirrus_bo_gpu_offset(bo);
380 return 0;
383 int cirrus_bo_push_sysram(struct cirrus_bo *bo)
385 struct ttm_operation_ctx ctx = { false, false };
386 int i, ret;
387 if (!bo->pin_count) {
388 DRM_ERROR("unpin bad %p\n", bo);
389 return 0;
391 bo->pin_count--;
392 if (bo->pin_count)
393 return 0;
395 if (bo->kmap.virtual)
396 ttm_bo_kunmap(&bo->kmap);
398 cirrus_ttm_placement(bo, TTM_PL_FLAG_SYSTEM);
399 for (i = 0; i < bo->placement.num_placement ; i++)
400 bo->placements[i].flags |= TTM_PL_FLAG_NO_EVICT;
402 ret = ttm_bo_validate(&bo->bo, &bo->placement, &ctx);
403 if (ret) {
404 DRM_ERROR("pushing to VRAM failed\n");
405 return ret;
407 return 0;
410 int cirrus_mmap(struct file *filp, struct vm_area_struct *vma)
412 struct drm_file *file_priv;
413 struct cirrus_device *cirrus;
415 if (unlikely(vma->vm_pgoff < DRM_FILE_PAGE_OFFSET))
416 return -EINVAL;
418 file_priv = filp->private_data;
419 cirrus = file_priv->minor->dev->dev_private;
420 return ttm_bo_mmap(filp, vma, &cirrus->ttm.bdev);