Avoid beyond bounds copy while caching ACL
[zen-stable.git] / drivers / video / aty / mach64_cursor.c
blob46f72ed5351065dadcce9703e012ae92ea1e7d23
1 /*
2 * ATI Mach64 CT/VT/GT/LT Cursor Support
3 */
5 #include <linux/fb.h>
6 #include <linux/init.h>
7 #include <linux/string.h>
9 #include <asm/io.h>
11 #ifdef __sparc__
12 #include <asm/fbio.h>
13 #endif
15 #include <video/mach64.h>
16 #include "atyfb.h"
19 * The hardware cursor definition requires 2 bits per pixel. The
20 * Cursor size reguardless of the visible cursor size is 64 pixels
21 * by 64 lines. The total memory required to define the cursor is
22 * 16 bytes / line for 64 lines or 1024 bytes of data. The data
23 * must be in a contigiuos format. The 2 bit cursor code values are
24 * as follows:
26 * 00 - pixel colour = CURSOR_CLR_0
27 * 01 - pixel colour = CURSOR_CLR_1
28 * 10 - pixel colour = transparent (current display pixel)
29 * 11 - pixel colour = 1's complement of current display pixel
31 * Cursor Offset 64 pixels Actual Displayed Area
32 * \_________________________/
33 * | | | |
34 * |<--------------->| | |
35 * | CURS_HORZ_OFFSET| | |
36 * | |_______| | 64 Lines
37 * | ^ | |
38 * | | | |
39 * | CURS_VERT_OFFSET| |
40 * | | | |
41 * |____________________|____| |
44 * The Screen position of the top left corner of the displayed
45 * cursor is specificed by CURS_HORZ_VERT_POSN. Care must be taken
46 * when the cursor hot spot is not the top left corner and the
47 * physical cursor position becomes negative. It will be be displayed
48 * if either the horizontal or vertical cursor position is negative
50 * If x becomes negative the cursor manager must adjust the CURS_HORZ_OFFSET
51 * to a larger number and saturate CUR_HORZ_POSN to zero.
53 * if Y becomes negative, CUR_VERT_OFFSET must be adjusted to a larger number,
54 * CUR_OFFSET must be adjusted to a point to the appropriate line in the cursor
55 * definitation and CUR_VERT_POSN must be saturated to zero.
59 * Hardware Cursor support.
61 static const u8 cursor_bits_lookup[16] = {
62 0x00, 0x40, 0x10, 0x50, 0x04, 0x44, 0x14, 0x54,
63 0x01, 0x41, 0x11, 0x51, 0x05, 0x45, 0x15, 0x55
66 static int atyfb_cursor(struct fb_info *info, struct fb_cursor *cursor)
68 struct atyfb_par *par = (struct atyfb_par *) info->par;
69 u16 xoff, yoff;
70 int x, y, h;
72 #ifdef __sparc__
73 if (par->mmaped)
74 return -EPERM;
75 #endif
76 if (par->asleep)
77 return -EPERM;
79 wait_for_fifo(1, par);
80 if (cursor->enable)
81 aty_st_le32(GEN_TEST_CNTL, aty_ld_le32(GEN_TEST_CNTL, par)
82 | HWCURSOR_ENABLE, par);
83 else
84 aty_st_le32(GEN_TEST_CNTL, aty_ld_le32(GEN_TEST_CNTL, par)
85 & ~HWCURSOR_ENABLE, par);
87 /* set position */
88 if (cursor->set & FB_CUR_SETPOS) {
89 x = cursor->image.dx - cursor->hot.x - info->var.xoffset;
90 if (x < 0) {
91 xoff = -x;
92 x = 0;
93 } else {
94 xoff = 0;
97 y = cursor->image.dy - cursor->hot.y - info->var.yoffset;
98 if (y < 0) {
99 yoff = -y;
100 y = 0;
101 } else {
102 yoff = 0;
105 h = cursor->image.height;
108 * In doublescan mode, the cursor location
109 * and heigh also needs to be doubled.
111 if (par->crtc.gen_cntl & CRTC_DBL_SCAN_EN) {
112 y<<=1;
113 h<<=1;
115 wait_for_fifo(3, par);
116 aty_st_le32(CUR_OFFSET, (info->fix.smem_len >> 3) + (yoff << 1), par);
117 aty_st_le32(CUR_HORZ_VERT_OFF,
118 ((u32) (64 - h + yoff) << 16) | xoff, par);
119 aty_st_le32(CUR_HORZ_VERT_POSN, ((u32) y << 16) | x, par);
122 /* Set color map */
123 if (cursor->set & FB_CUR_SETCMAP) {
124 u32 fg_idx, bg_idx, fg, bg;
126 fg_idx = cursor->image.fg_color;
127 bg_idx = cursor->image.bg_color;
129 fg = ((info->cmap.red[fg_idx] & 0xff) << 24) |
130 ((info->cmap.green[fg_idx] & 0xff) << 16) |
131 ((info->cmap.blue[fg_idx] & 0xff) << 8) | 0xff;
133 bg = ((info->cmap.red[bg_idx] & 0xff) << 24) |
134 ((info->cmap.green[bg_idx] & 0xff) << 16) |
135 ((info->cmap.blue[bg_idx] & 0xff) << 8);
137 wait_for_fifo(2, par);
138 aty_st_le32(CUR_CLR0, bg, par);
139 aty_st_le32(CUR_CLR1, fg, par);
142 if (cursor->set & (FB_CUR_SETSHAPE | FB_CUR_SETIMAGE)) {
143 u8 *src = (u8 *)cursor->image.data;
144 u8 *msk = (u8 *)cursor->mask;
145 u8 __iomem *dst = (u8 __iomem *)info->sprite.addr;
146 unsigned int width = (cursor->image.width + 7) >> 3;
147 unsigned int height = cursor->image.height;
148 unsigned int align = info->sprite.scan_align;
150 unsigned int i, j, offset;
151 u8 m, b;
153 // Clear cursor image with 1010101010...
154 fb_memset(dst, 0xaa, 1024);
156 offset = align - width*2;
158 for (i = 0; i < height; i++) {
159 for (j = 0; j < width; j++) {
160 b = *src++;
161 m = *msk++;
162 switch (cursor->rop) {
163 case ROP_XOR:
164 // Upper 4 bits of mask data
165 fb_writeb(cursor_bits_lookup[(b ^ m) >> 4], dst++);
166 // Lower 4 bits of mask
167 fb_writeb(cursor_bits_lookup[(b ^ m) & 0x0f],
168 dst++);
169 break;
170 case ROP_COPY:
171 // Upper 4 bits of mask data
172 fb_writeb(cursor_bits_lookup[(b & m) >> 4], dst++);
173 // Lower 4 bits of mask
174 fb_writeb(cursor_bits_lookup[(b & m) & 0x0f],
175 dst++);
176 break;
179 dst += offset;
183 return 0;
186 int __devinit aty_init_cursor(struct fb_info *info)
188 unsigned long addr;
190 info->fix.smem_len -= PAGE_SIZE;
192 #ifdef __sparc__
193 addr = (unsigned long) info->screen_base - 0x800000 + info->fix.smem_len;
194 info->sprite.addr = (u8 *) addr;
195 #else
196 #ifdef __BIG_ENDIAN
197 addr = info->fix.smem_start - 0x800000 + info->fix.smem_len;
198 info->sprite.addr = (u8 *) ioremap(addr, 1024);
199 #else
200 addr = (unsigned long) info->screen_base + info->fix.smem_len;
201 info->sprite.addr = (u8 *) addr;
202 #endif
203 #endif
204 if (!info->sprite.addr)
205 return -ENXIO;
206 info->sprite.size = PAGE_SIZE;
207 info->sprite.scan_align = 16; /* Scratch pad 64 bytes wide */
208 info->sprite.buf_align = 16; /* and 64 lines tall. */
209 info->sprite.flags = FB_PIXMAP_IO;
211 info->fbops->fb_cursor = atyfb_cursor;
213 return 0;