OMAPDSS: VENC: fix NULL pointer dereference in DSS2 VENC sysfs debug attr on OMAP4
[zen-stable.git] / drivers / video / hpfb.c
blobebf8495ff198b601220ee25b43545b4efe65b3b9
1 /*
2 * HP300 Topcat framebuffer support (derived from macfb of all things)
3 * Phil Blundell <philb@gnu.org> 1998
4 * DIO-II, colour map and Catseye support by
5 * Kars de Jong <jongk@linux-m68k.org>, May 2004.
6 */
8 #include <linux/module.h>
9 #include <linux/kernel.h>
10 #include <linux/errno.h>
11 #include <linux/string.h>
12 #include <linux/mm.h>
13 #include <linux/delay.h>
14 #include <linux/init.h>
15 #include <linux/fb.h>
16 #include <linux/dio.h>
18 #include <asm/io.h>
19 #include <asm/uaccess.h>
21 static struct fb_info fb_info = {
22 .fix = {
23 .id = "HP300 ",
24 .type = FB_TYPE_PACKED_PIXELS,
25 .visual = FB_VISUAL_PSEUDOCOLOR,
26 .accel = FB_ACCEL_NONE,
30 static unsigned long fb_regs;
31 static unsigned char fb_bitmask;
33 #define TC_NBLANK 0x4080
34 #define TC_WEN 0x4088
35 #define TC_REN 0x408c
36 #define TC_FBEN 0x4090
37 #define TC_PRR 0x40ea
39 /* These defines match the X window system */
40 #define RR_CLEAR 0x0
41 #define RR_COPY 0x3
42 #define RR_NOOP 0x5
43 #define RR_XOR 0x6
44 #define RR_INVERT 0xa
45 #define RR_COPYINVERTED 0xc
46 #define RR_SET 0xf
48 /* blitter regs */
49 #define BUSY 0x4044
50 #define WMRR 0x40ef
51 #define SOURCE_X 0x40f2
52 #define SOURCE_Y 0x40f6
53 #define DEST_X 0x40fa
54 #define DEST_Y 0x40fe
55 #define WHEIGHT 0x4106
56 #define WWIDTH 0x4102
57 #define WMOVE 0x409c
59 static struct fb_var_screeninfo hpfb_defined = {
60 .red = {
61 .length = 8,
63 .green = {
64 .length = 8,
66 .blue = {
67 .length = 8,
69 .activate = FB_ACTIVATE_NOW,
70 .height = -1,
71 .width = -1,
72 .vmode = FB_VMODE_NONINTERLACED,
75 static int hpfb_setcolreg(unsigned regno, unsigned red, unsigned green,
76 unsigned blue, unsigned transp,
77 struct fb_info *info)
79 /* use MSBs */
80 unsigned char _red =red>>8;
81 unsigned char _green=green>>8;
82 unsigned char _blue =blue>>8;
83 unsigned char _regno=regno;
86 * Set a single color register. The values supplied are
87 * already rounded down to the hardware's capabilities
88 * (according to the entries in the `var' structure). Return
89 * != 0 for invalid regno.
92 if (regno >= info->cmap.len)
93 return 1;
95 while (in_be16(fb_regs + 0x6002) & 0x4) udelay(1);
97 out_be16(fb_regs + 0x60ba, 0xff);
99 out_be16(fb_regs + 0x60b2, _red);
100 out_be16(fb_regs + 0x60b4, _green);
101 out_be16(fb_regs + 0x60b6, _blue);
102 out_be16(fb_regs + 0x60b8, ~_regno);
103 out_be16(fb_regs + 0x60f0, 0xff);
105 udelay(100);
107 while (in_be16(fb_regs + 0x6002) & 0x4) udelay(1);
108 out_be16(fb_regs + 0x60b2, 0);
109 out_be16(fb_regs + 0x60b4, 0);
110 out_be16(fb_regs + 0x60b6, 0);
111 out_be16(fb_regs + 0x60b8, 0);
113 return 0;
116 /* 0 unblank, 1 blank, 2 no vsync, 3 no hsync, 4 off */
118 static int hpfb_blank(int blank, struct fb_info *info)
120 out_8(fb_regs + TC_NBLANK, (blank ? 0x00 : fb_bitmask));
122 return 0;
125 static void topcat_blit(int x0, int y0, int x1, int y1, int w, int h, int rr)
127 if (rr >= 0) {
128 while (in_8(fb_regs + BUSY) & fb_bitmask)
131 out_8(fb_regs + TC_FBEN, fb_bitmask);
132 if (rr >= 0) {
133 out_8(fb_regs + TC_WEN, fb_bitmask);
134 out_8(fb_regs + WMRR, rr);
136 out_be16(fb_regs + SOURCE_X, x0);
137 out_be16(fb_regs + SOURCE_Y, y0);
138 out_be16(fb_regs + DEST_X, x1);
139 out_be16(fb_regs + DEST_Y, y1);
140 out_be16(fb_regs + WWIDTH, w);
141 out_be16(fb_regs + WHEIGHT, h);
142 out_8(fb_regs + WMOVE, fb_bitmask);
145 static void hpfb_copyarea(struct fb_info *info, const struct fb_copyarea *area)
147 topcat_blit(area->sx, area->sy, area->dx, area->dy, area->width, area->height, RR_COPY);
150 static void hpfb_fillrect(struct fb_info *p, const struct fb_fillrect *region)
152 u8 clr;
154 clr = region->color & 0xff;
156 while (in_8(fb_regs + BUSY) & fb_bitmask)
159 /* Foreground */
160 out_8(fb_regs + TC_WEN, fb_bitmask & clr);
161 out_8(fb_regs + WMRR, (region->rop == ROP_COPY ? RR_SET : RR_INVERT));
163 /* Background */
164 out_8(fb_regs + TC_WEN, fb_bitmask & ~clr);
165 out_8(fb_regs + WMRR, (region->rop == ROP_COPY ? RR_CLEAR : RR_NOOP));
167 topcat_blit(region->dx, region->dy, region->dx, region->dy, region->width, region->height, -1);
170 static int hpfb_sync(struct fb_info *info)
173 * Since we also access the framebuffer directly, we have to wait
174 * until the block mover is finished
176 while (in_8(fb_regs + BUSY) & fb_bitmask)
179 out_8(fb_regs + TC_WEN, fb_bitmask);
180 out_8(fb_regs + TC_PRR, RR_COPY);
181 out_8(fb_regs + TC_FBEN, fb_bitmask);
183 return 0;
186 static struct fb_ops hpfb_ops = {
187 .owner = THIS_MODULE,
188 .fb_setcolreg = hpfb_setcolreg,
189 .fb_blank = hpfb_blank,
190 .fb_fillrect = hpfb_fillrect,
191 .fb_copyarea = hpfb_copyarea,
192 .fb_imageblit = cfb_imageblit,
193 .fb_sync = hpfb_sync,
196 /* Common to all HP framebuffers */
197 #define HPFB_FBWMSB 0x05 /* Frame buffer width */
198 #define HPFB_FBWLSB 0x07
199 #define HPFB_FBHMSB 0x09 /* Frame buffer height */
200 #define HPFB_FBHLSB 0x0b
201 #define HPFB_DWMSB 0x0d /* Display width */
202 #define HPFB_DWLSB 0x0f
203 #define HPFB_DHMSB 0x11 /* Display height */
204 #define HPFB_DHLSB 0x13
205 #define HPFB_NUMPLANES 0x5b /* Number of colour planes */
206 #define HPFB_FBOMSB 0x5d /* Frame buffer offset */
207 #define HPFB_FBOLSB 0x5f
209 static int __devinit hpfb_init_one(unsigned long phys_base,
210 unsigned long virt_base)
212 unsigned long fboff, fb_width, fb_height, fb_start;
214 fb_regs = virt_base;
215 fboff = (in_8(fb_regs + HPFB_FBOMSB) << 8) | in_8(fb_regs + HPFB_FBOLSB);
217 fb_info.fix.smem_start = (in_8(fb_regs + fboff) << 16);
219 if (phys_base >= DIOII_BASE) {
220 fb_info.fix.smem_start += phys_base;
223 if (DIO_SECID(fb_regs) != DIO_ID2_TOPCAT) {
224 /* This is the magic incantation the HP X server uses to make Catseye boards work. */
225 while (in_be16(fb_regs+0x4800) & 1)
227 out_be16(fb_regs+0x4800, 0); /* Catseye status */
228 out_be16(fb_regs+0x4510, 0); /* VB */
229 out_be16(fb_regs+0x4512, 0); /* TCNTRL */
230 out_be16(fb_regs+0x4514, 0); /* ACNTRL */
231 out_be16(fb_regs+0x4516, 0); /* PNCNTRL */
232 out_be16(fb_regs+0x4206, 0x90); /* RUG Command/Status */
233 out_be16(fb_regs+0x60a2, 0); /* Overlay Mask */
234 out_be16(fb_regs+0x60bc, 0); /* Ram Select */
238 * Fill in the available video resolution
240 fb_width = (in_8(fb_regs + HPFB_FBWMSB) << 8) | in_8(fb_regs + HPFB_FBWLSB);
241 fb_info.fix.line_length = fb_width;
242 fb_height = (in_8(fb_regs + HPFB_FBHMSB) << 8) | in_8(fb_regs + HPFB_FBHLSB);
243 fb_info.fix.smem_len = fb_width * fb_height;
244 fb_start = (unsigned long)ioremap_writethrough(fb_info.fix.smem_start,
245 fb_info.fix.smem_len);
246 hpfb_defined.xres = (in_8(fb_regs + HPFB_DWMSB) << 8) | in_8(fb_regs + HPFB_DWLSB);
247 hpfb_defined.yres = (in_8(fb_regs + HPFB_DHMSB) << 8) | in_8(fb_regs + HPFB_DHLSB);
248 hpfb_defined.xres_virtual = hpfb_defined.xres;
249 hpfb_defined.yres_virtual = hpfb_defined.yres;
250 hpfb_defined.bits_per_pixel = in_8(fb_regs + HPFB_NUMPLANES);
252 printk(KERN_INFO "hpfb: framebuffer at 0x%lx, mapped to 0x%lx, size %dk\n",
253 fb_info.fix.smem_start, fb_start, fb_info.fix.smem_len/1024);
254 printk(KERN_INFO "hpfb: mode is %dx%dx%d, linelength=%d\n",
255 hpfb_defined.xres, hpfb_defined.yres, hpfb_defined.bits_per_pixel, fb_info.fix.line_length);
258 * Give the hardware a bit of a prod and work out how many bits per
259 * pixel are supported.
261 out_8(fb_regs + TC_WEN, 0xff);
262 out_8(fb_regs + TC_PRR, RR_COPY);
263 out_8(fb_regs + TC_FBEN, 0xff);
264 out_8(fb_start, 0xff);
265 fb_bitmask = in_8(fb_start);
266 out_8(fb_start, 0);
269 * Enable reading/writing of all the planes.
271 out_8(fb_regs + TC_WEN, fb_bitmask);
272 out_8(fb_regs + TC_PRR, RR_COPY);
273 out_8(fb_regs + TC_REN, fb_bitmask);
274 out_8(fb_regs + TC_FBEN, fb_bitmask);
277 * Clear the screen.
279 topcat_blit(0, 0, 0, 0, fb_width, fb_height, RR_CLEAR);
282 * Let there be consoles..
284 if (DIO_SECID(fb_regs) == DIO_ID2_TOPCAT)
285 strcat(fb_info.fix.id, "Topcat");
286 else
287 strcat(fb_info.fix.id, "Catseye");
288 fb_info.fbops = &hpfb_ops;
289 fb_info.flags = FBINFO_DEFAULT;
290 fb_info.var = hpfb_defined;
291 fb_info.screen_base = (char *)fb_start;
293 fb_alloc_cmap(&fb_info.cmap, 1 << hpfb_defined.bits_per_pixel, 0);
295 if (register_framebuffer(&fb_info) < 0) {
296 fb_dealloc_cmap(&fb_info.cmap);
297 iounmap(fb_info.screen_base);
298 fb_info.screen_base = NULL;
299 return 1;
302 printk(KERN_INFO "fb%d: %s frame buffer device\n",
303 fb_info.node, fb_info.fix.id);
305 return 0;
309 * Check that the secondary ID indicates that we have some hope of working with this
310 * framebuffer. The catseye boards are pretty much like topcats and we can muddle through.
313 #define topcat_sid_ok(x) (((x) == DIO_ID2_LRCATSEYE) || ((x) == DIO_ID2_HRCCATSEYE) \
314 || ((x) == DIO_ID2_HRMCATSEYE) || ((x) == DIO_ID2_TOPCAT))
317 * Initialise the framebuffer
319 static int __devinit hpfb_dio_probe(struct dio_dev * d, const struct dio_device_id * ent)
321 unsigned long paddr, vaddr;
323 paddr = d->resource.start;
324 if (!request_mem_region(d->resource.start, resource_size(&d->resource), d->name))
325 return -EBUSY;
327 if (d->scode >= DIOII_SCBASE) {
328 vaddr = (unsigned long)ioremap(paddr, resource_size(&d->resource));
329 } else {
330 vaddr = paddr + DIO_VIRADDRBASE;
332 printk(KERN_INFO "Topcat found at DIO select code %d "
333 "(secondary id %02x)\n", d->scode, (d->id >> 8) & 0xff);
334 if (hpfb_init_one(paddr, vaddr)) {
335 if (d->scode >= DIOII_SCBASE)
336 iounmap((void *)vaddr);
337 return -ENOMEM;
339 return 0;
342 static void __devexit hpfb_remove_one(struct dio_dev *d)
344 unregister_framebuffer(&fb_info);
345 if (d->scode >= DIOII_SCBASE)
346 iounmap((void *)fb_regs);
347 release_mem_region(d->resource.start, resource_size(&d->resource));
350 static struct dio_device_id hpfb_dio_tbl[] = {
351 { DIO_ENCODE_ID(DIO_ID_FBUFFER, DIO_ID2_LRCATSEYE) },
352 { DIO_ENCODE_ID(DIO_ID_FBUFFER, DIO_ID2_HRCCATSEYE) },
353 { DIO_ENCODE_ID(DIO_ID_FBUFFER, DIO_ID2_HRMCATSEYE) },
354 { DIO_ENCODE_ID(DIO_ID_FBUFFER, DIO_ID2_TOPCAT) },
355 { 0 }
358 static struct dio_driver hpfb_driver = {
359 .name = "hpfb",
360 .id_table = hpfb_dio_tbl,
361 .probe = hpfb_dio_probe,
362 .remove = __devexit_p(hpfb_remove_one),
365 int __init hpfb_init(void)
367 unsigned int sid;
368 mm_segment_t fs;
369 unsigned char i;
370 int err;
372 /* Topcats can be on the internal IO bus or real DIO devices.
373 * The internal variant sits at 0x560000; it has primary
374 * and secondary ID registers just like the DIO version.
375 * So we merge the two detection routines.
377 * Perhaps this #define should be in a global header file:
378 * I believe it's common to all internal fbs, not just topcat.
380 #define INTFBVADDR 0xf0560000
381 #define INTFBPADDR 0x560000
383 if (!MACH_IS_HP300)
384 return -ENODEV;
386 if (fb_get_options("hpfb", NULL))
387 return -ENODEV;
389 err = dio_register_driver(&hpfb_driver);
390 if (err)
391 return err;
393 fs = get_fs();
394 set_fs(KERNEL_DS);
395 err = get_user(i, (unsigned char *)INTFBVADDR + DIO_IDOFF);
396 set_fs(fs);
398 if (!err && (i == DIO_ID_FBUFFER) && topcat_sid_ok(sid = DIO_SECID(INTFBVADDR))) {
399 if (!request_mem_region(INTFBPADDR, DIO_DEVSIZE, "Internal Topcat"))
400 return -EBUSY;
401 printk(KERN_INFO "Internal Topcat found (secondary id %02x)\n", sid);
402 if (hpfb_init_one(INTFBPADDR, INTFBVADDR)) {
403 return -ENOMEM;
406 return 0;
409 void __exit hpfb_cleanup_module(void)
411 dio_unregister_driver(&hpfb_driver);
414 module_init(hpfb_init);
415 module_exit(hpfb_cleanup_module);
417 MODULE_LICENSE("GPL");