drivers/video/fbdev/core/fbmem.c

   1 /*
   2  *  linux/drivers/video/fbmem.c
   3  *
   4  *  Copyright (C) 1994 Martin Schaller
   5  *
   6  *      2001 - Documented with DocBook
   7  *      - Brad Douglas <brad@neruo.com>
   8  *
   9  * This file is subject to the terms and conditions of the GNU General Public
  10  * License.  See the file COPYING in the main directory of this archive
  11  * for more details.
  12  */
  13
  14 #include <linux/module.h>
  15
  16 #include <linux/compat.h>
  17 #include <linux/types.h>
  18 #include <linux/errno.h>
  19 #include <linux/kernel.h>
  20 #include <linux/major.h>
  21 #include <linux/slab.h>
  22 #include <linux/mm.h>
  23 #include <linux/mman.h>
  24 #include <linux/vt.h>
  25 #include <linux/init.h>
  26 #include <linux/linux_logo.h>
  27 #include <linux/proc_fs.h>
  28 #include <linux/platform_device.h>
  29 #include <linux/seq_file.h>
  30 #include <linux/console.h>
  31 #include <linux/kmod.h>
  32 #include <linux/err.h>
  33 #include <linux/device.h>
  34 #include <linux/efi.h>
  35 #include <linux/fb.h>
  36 #include <linux/fbcon.h>
  37 #include <linux/mem_encrypt.h>
  38 #include <linux/pci.h>
  39
  40 #include <asm/fb.h>
  41
  42
  43     /*
  44      *  Frame buffer device initialization and setup routines
  45      */
  46
  47 #define FBPIXMAPSIZE    (1024 * 8)
  48
  49 static DEFINE_MUTEX(registration_lock);
  50
  51 struct fb_info *registered_fb[FB_MAX] __read_mostly;
  52 EXPORT_SYMBOL(registered_fb);
  53
  54 int num_registered_fb __read_mostly;
  55 EXPORT_SYMBOL(num_registered_fb);
  56
  57 bool fb_center_logo __read_mostly;
  58
  59 int fb_logo_count __read_mostly = -1;
  60
  61 static struct fb_info *get_fb_info(unsigned int idx)
  62 {
  63         struct fb_info *fb_info;
  64
  65         if (idx >= FB_MAX)
  66                 return ERR_PTR(-ENODEV);
  67
  68         mutex_lock(&registration_lock);
  69         fb_info = registered_fb[idx];
  70         if (fb_info)
  71                 refcount_inc(&fb_info->count);
  72         mutex_unlock(&registration_lock);
  73
  74         return fb_info;
  75 }
  76
  77 static void put_fb_info(struct fb_info *fb_info)
  78 {
  79         if (!refcount_dec_and_test(&fb_info->count))
  80                 return;
  81         if (fb_info->fbops->fb_destroy)
  82                 fb_info->fbops->fb_destroy(fb_info);
  83 }
  84
  85 /*
  86  * Helpers
  87  */
  88
  89 int fb_get_color_depth(struct fb_var_screeninfo *var,
  90                        struct fb_fix_screeninfo *fix)
  91 {
  92         int depth = 0;
  93
  94         if (fix->visual == FB_VISUAL_MONO01 ||
  95             fix->visual == FB_VISUAL_MONO10)
  96                 depth = 1;
  97         else {
  98                 if (var->green.length == var->blue.length &&
  99                     var->green.length == var->red.length &&
 100                     var->green.offset == var->blue.offset &&
 101                     var->green.offset == var->red.offset)
 102                         depth = var->green.length;
 103                 else
 104                         depth = var->green.length + var->red.length +
 105                                 var->blue.length;
 106         }
 107
 108         return depth;
 109 }
 110 EXPORT_SYMBOL(fb_get_color_depth);
 111
 112 /*
 113  * Data padding functions.
 114  */
 115 void fb_pad_aligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 s_pitch, u32 height)
 116 {
 117         __fb_pad_aligned_buffer(dst, d_pitch, src, s_pitch, height);
 118 }
 119 EXPORT_SYMBOL(fb_pad_aligned_buffer);
 120
 121 void fb_pad_unaligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 idx, u32 height,
 122                                 u32 shift_high, u32 shift_low, u32 mod)
 123 {
 124         u8 mask = (u8) (0xfff << shift_high), tmp;
 125         int i, j;
 126
 127         for (i = height; i--; ) {
 128                 for (j = 0; j < idx; j++) {
 129                         tmp = dst[j];
 130                         tmp &= mask;
 131                         tmp |= *src >> shift_low;
 132                         dst[j] = tmp;
 133                         tmp = *src << shift_high;
 134                         dst[j+1] = tmp;
 135                         src++;
 136                 }
 137                 tmp = dst[idx];
 138                 tmp &= mask;
 139                 tmp |= *src >> shift_low;
 140                 dst[idx] = tmp;
 141                 if (shift_high < mod) {
 142                         tmp = *src << shift_high;
 143                         dst[idx+1] = tmp;
 144                 }
 145                 src++;
 146                 dst += d_pitch;
 147         }
 148 }
 149 EXPORT_SYMBOL(fb_pad_unaligned_buffer);
 150
 151 /*
 152  * we need to lock this section since fb_cursor
 153  * may use fb_imageblit()
 154  */
 155 char* fb_get_buffer_offset(struct fb_info *info, struct fb_pixmap *buf, u32 size)
 156 {
 157         u32 align = buf->buf_align - 1, offset;
 158         char *addr = buf->addr;
 159
 160         /* If IO mapped, we need to sync before access, no sharing of
 161          * the pixmap is done
 162          */
 163         if (buf->flags & FB_PIXMAP_IO) {
 164                 if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
 165                         info->fbops->fb_sync(info);
 166                 return addr;
 167         }
 168
 169         /* See if we fit in the remaining pixmap space */
 170         offset = buf->offset + align;
 171         offset &= ~align;
 172         if (offset + size > buf->size) {
 173                 /* We do not fit. In order to be able to re-use the buffer,
 174                  * we must ensure no asynchronous DMA'ing or whatever operation
 175                  * is in progress, we sync for that.
 176                  */
 177                 if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
 178                         info->fbops->fb_sync(info);
 179                 offset = 0;
 180         }
 181         buf->offset = offset + size;
 182         addr += offset;
 183
 184         return addr;
 185 }
 186 EXPORT_SYMBOL(fb_get_buffer_offset);
 187
 188 #ifdef CONFIG_LOGO
 189
 190 static inline unsigned safe_shift(unsigned d, int n)
 191 {
 192         return n < 0 ? d >> -n : d << n;
 193 }
 194
 195 static void fb_set_logocmap(struct fb_info *info,
 196                                    const struct linux_logo *logo)
 197 {
 198         struct fb_cmap palette_cmap;
 199         u16 palette_green[16];
 200         u16 palette_blue[16];
 201         u16 palette_red[16];
 202         int i, j, n;
 203         const unsigned char *clut = logo->clut;
 204
 205         palette_cmap.start = 0;
 206         palette_cmap.len = 16;
 207         palette_cmap.red = palette_red;
 208         palette_cmap.green = palette_green;
 209         palette_cmap.blue = palette_blue;
 210         palette_cmap.transp = NULL;
 211
 212         for (i = 0; i < logo->clutsize; i += n) {
 213                 n = logo->clutsize - i;
 214                 /* palette_cmap provides space for only 16 colors at once */
 215                 if (n > 16)
 216                         n = 16;
 217                 palette_cmap.start = 32 + i;
 218                 palette_cmap.len = n;
 219                 for (j = 0; j < n; ++j) {
 220                         palette_cmap.red[j] = clut[0] << 8 | clut[0];
 221                         palette_cmap.green[j] = clut[1] << 8 | clut[1];
 222                         palette_cmap.blue[j] = clut[2] << 8 | clut[2];
 223                         clut += 3;
 224                 }
 225                 fb_set_cmap(&palette_cmap, info);
 226         }
 227 }
 228
 229 static void  fb_set_logo_truepalette(struct fb_info *info,
 230                                             const struct linux_logo *logo,
 231                                             u32 *palette)
 232 {
 233         static const unsigned char mask[] = { 0,0x80,0xc0,0xe0,0xf0,0xf8,0xfc,0xfe,0xff };
 234         unsigned char redmask, greenmask, bluemask;
 235         int redshift, greenshift, blueshift;
 236         int i;
 237         const unsigned char *clut = logo->clut;
 238
 239         /*
 240          * We have to create a temporary palette since console palette is only
 241          * 16 colors long.
 242          */
 243         /* Bug: Doesn't obey msb_right ... (who needs that?) */
 244         redmask   = mask[info->var.red.length   < 8 ? info->var.red.length   : 8];
 245         greenmask = mask[info->var.green.length < 8 ? info->var.green.length : 8];
 246         bluemask  = mask[info->var.blue.length  < 8 ? info->var.blue.length  : 8];
 247         redshift   = info->var.red.offset   - (8 - info->var.red.length);
 248         greenshift = info->var.green.offset - (8 - info->var.green.length);
 249         blueshift  = info->var.blue.offset  - (8 - info->var.blue.length);
 250
 251         for ( i = 0; i < logo->clutsize; i++) {
 252                 palette[i+32] = (safe_shift((clut[0] & redmask), redshift) |
 253                                  safe_shift((clut[1] & greenmask), greenshift) |
 254                                  safe_shift((clut[2] & bluemask), blueshift));
 255                 clut += 3;
 256         }
 257 }
 258
 259 static void fb_set_logo_directpalette(struct fb_info *info,
 260                                              const struct linux_logo *logo,
 261                                              u32 *palette)
 262 {
 263         int redshift, greenshift, blueshift;
 264         int i;
 265
 266         redshift = info->var.red.offset;
 267         greenshift = info->var.green.offset;
 268         blueshift = info->var.blue.offset;
 269
 270         for (i = 32; i < 32 + logo->clutsize; i++)
 271                 palette[i] = i << redshift | i << greenshift | i << blueshift;
 272 }
 273
 274 static void fb_set_logo(struct fb_info *info,
 275                                const struct linux_logo *logo, u8 *dst,
 276                                int depth)
 277 {
 278         int i, j, k;
 279         const u8 *src = logo->data;
 280         u8 xor = (info->fix.visual == FB_VISUAL_MONO01) ? 0xff : 0;
 281         u8 fg = 1, d;
 282
 283         switch (fb_get_color_depth(&info->var, &info->fix)) {
 284         case 1:
 285                 fg = 1;
 286                 break;
 287         case 2:
 288                 fg = 3;
 289                 break;
 290         default:
 291                 fg = 7;
 292                 break;
 293         }
 294
 295         if (info->fix.visual == FB_VISUAL_MONO01 ||
 296             info->fix.visual == FB_VISUAL_MONO10)
 297                 fg = ~((u8) (0xfff << info->var.green.length));
 298
 299         switch (depth) {
 300         case 4:
 301                 for (i = 0; i < logo->height; i++)
 302                         for (j = 0; j < logo->width; src++) {
 303                                 *dst++ = *src >> 4;
 304                                 j++;
 305                                 if (j < logo->width) {
 306                                         *dst++ = *src & 0x0f;
 307                                         j++;
 308                                 }
 309                         }
 310                 break;
 311         case 1:
 312                 for (i = 0; i < logo->height; i++) {
 313                         for (j = 0; j < logo->width; src++) {
 314                                 d = *src ^ xor;
 315                                 for (k = 7; k >= 0 && j < logo->width; k--) {
 316                                         *dst++ = ((d >> k) & 1) ? fg : 0;
 317                                         j++;
 318                                 }
 319                         }
 320                 }
 321                 break;
 322         }
 323 }
 324
 325 /*
 326  * Three (3) kinds of logo maps exist.  linux_logo_clut224 (>16 colors),
 327  * linux_logo_vga16 (16 colors) and linux_logo_mono (2 colors).  Depending on
 328  * the visual format and color depth of the framebuffer, the DAC, the
 329  * pseudo_palette, and the logo data will be adjusted accordingly.
 330  *
 331  * Case 1 - linux_logo_clut224:
 332  * Color exceeds the number of console colors (16), thus we set the hardware DAC
 333  * using fb_set_cmap() appropriately.  The "needs_cmapreset"  flag will be set.
 334  *
 335  * For visuals that require color info from the pseudo_palette, we also construct
 336  * one for temporary use. The "needs_directpalette" or "needs_truepalette" flags
 337  * will be set.
 338  *
 339  * Case 2 - linux_logo_vga16:
 340  * The number of colors just matches the console colors, thus there is no need
 341  * to set the DAC or the pseudo_palette.  However, the bitmap is packed, ie,
 342  * each byte contains color information for two pixels (upper and lower nibble).
 343  * To be consistent with fb_imageblit() usage, we therefore separate the two
 344  * nibbles into separate bytes. The "depth" flag will be set to 4.
 345  *
 346  * Case 3 - linux_logo_mono:
 347  * This is similar with Case 2.  Each byte contains information for 8 pixels.
 348  * We isolate each bit and expand each into a byte. The "depth" flag will
 349  * be set to 1.
 350  */
 351 static struct logo_data {
 352         int depth;
 353         int needs_directpalette;
 354         int needs_truepalette;
 355         int needs_cmapreset;
 356         const struct linux_logo *logo;
 357 } fb_logo __read_mostly;
 358
 359 static void fb_rotate_logo_ud(const u8 *in, u8 *out, u32 width, u32 height)
 360 {
 361         u32 size = width * height, i;
 362
 363         out += size - 1;
 364
 365         for (i = size; i--; )
 366                 *out-- = *in++;
 367 }
 368
 369 static void fb_rotate_logo_cw(const u8 *in, u8 *out, u32 width, u32 height)
 370 {
 371         int i, j, h = height - 1;
 372
 373         for (i = 0; i < height; i++)
 374                 for (j = 0; j < width; j++)
 375                                 out[height * j + h - i] = *in++;
 376 }
 377
 378 static void fb_rotate_logo_ccw(const u8 *in, u8 *out, u32 width, u32 height)
 379 {
 380         int i, j, w = width - 1;
 381
 382         for (i = 0; i < height; i++)
 383                 for (j = 0; j < width; j++)
 384                         out[height * (w - j) + i] = *in++;
 385 }
 386
 387 static void fb_rotate_logo(struct fb_info *info, u8 *dst,
 388                            struct fb_image *image, int rotate)
 389 {
 390         u32 tmp;
 391
 392         if (rotate == FB_ROTATE_UD) {
 393                 fb_rotate_logo_ud(image->data, dst, image->width,
 394                                   image->height);
 395                 image->dx = info->var.xres - image->width - image->dx;
 396                 image->dy = info->var.yres - image->height - image->dy;
 397         } else if (rotate == FB_ROTATE_CW) {
 398                 fb_rotate_logo_cw(image->data, dst, image->width,
 399                                   image->height);
 400                 swap(image->width, image->height);
 401                 tmp = image->dy;
 402                 image->dy = image->dx;
 403                 image->dx = info->var.xres - image->width - tmp;
 404         } else if (rotate == FB_ROTATE_CCW) {
 405                 fb_rotate_logo_ccw(image->data, dst, image->width,
 406                                    image->height);
 407                 swap(image->width, image->height);
 408                 tmp = image->dx;
 409                 image->dx = image->dy;
 410                 image->dy = info->var.yres - image->height - tmp;
 411         }
 412
 413         image->data = dst;
 414 }
 415
 416 static void fb_do_show_logo(struct fb_info *info, struct fb_image *image,
 417                             int rotate, unsigned int num)
 418 {
 419         unsigned int x;
 420
 421         if (image->width > info->var.xres || image->height > info->var.yres)
 422                 return;
 423
 424         if (rotate == FB_ROTATE_UR) {
 425                 for (x = 0;
 426                      x < num && image->dx + image->width <= info->var.xres;
 427                      x++) {
 428                         info->fbops->fb_imageblit(info, image);
 429                         image->dx += image->width + 8;
 430                 }
 431         } else if (rotate == FB_ROTATE_UD) {
 432                 u32 dx = image->dx;
 433
 434                 for (x = 0; x < num && image->dx <= dx; x++) {
 435                         info->fbops->fb_imageblit(info, image);
 436                         image->dx -= image->width + 8;
 437                 }
 438         } else if (rotate == FB_ROTATE_CW) {
 439                 for (x = 0;
 440                      x < num && image->dy + image->height <= info->var.yres;
 441                      x++) {
 442                         info->fbops->fb_imageblit(info, image);
 443                         image->dy += image->height + 8;
 444                 }
 445         } else if (rotate == FB_ROTATE_CCW) {
 446                 u32 dy = image->dy;
 447
 448                 for (x = 0; x < num && image->dy <= dy; x++) {
 449                         info->fbops->fb_imageblit(info, image);
 450                         image->dy -= image->height + 8;
 451                 }
 452         }
 453 }
 454
 455 static int fb_show_logo_line(struct fb_info *info, int rotate,
 456                              const struct linux_logo *logo, int y,
 457                              unsigned int n)
 458 {
 459         u32 *palette = NULL, *saved_pseudo_palette = NULL;
 460         unsigned char *logo_new = NULL, *logo_rotate = NULL;
 461         struct fb_image image;
 462
 463         /* Return if the frame buffer is not mapped or suspended */
 464         if (logo == NULL || info->state != FBINFO_STATE_RUNNING ||
 465             info->fbops->owner)
 466                 return 0;
 467
 468         image.depth = 8;
 469         image.data = logo->data;
 470
 471         if (fb_logo.needs_cmapreset)
 472                 fb_set_logocmap(info, logo);
 473
 474         if (fb_logo.needs_truepalette ||
 475             fb_logo.needs_directpalette) {
 476                 palette = kmalloc(256 * 4, GFP_KERNEL);
 477                 if (palette == NULL)
 478                         return 0;
 479
 480                 if (fb_logo.needs_truepalette)
 481                         fb_set_logo_truepalette(info, logo, palette);
 482                 else
 483                         fb_set_logo_directpalette(info, logo, palette);
 484
 485                 saved_pseudo_palette = info->pseudo_palette;
 486                 info->pseudo_palette = palette;
 487         }
 488
 489         if (fb_logo.depth <= 4) {
 490                 logo_new = kmalloc_array(logo->width, logo->height,
 491                                          GFP_KERNEL);
 492                 if (logo_new == NULL) {
 493                         kfree(palette);
 494                         if (saved_pseudo_palette)
 495                                 info->pseudo_palette = saved_pseudo_palette;
 496                         return 0;
 497                 }
 498                 image.data = logo_new;
 499                 fb_set_logo(info, logo, logo_new, fb_logo.depth);
 500         }
 501
 502         if (fb_center_logo) {
 503                 int xres = info->var.xres;
 504                 int yres = info->var.yres;
 505
 506                 if (rotate == FB_ROTATE_CW || rotate == FB_ROTATE_CCW) {
 507                         xres = info->var.yres;
 508                         yres = info->var.xres;
 509                 }
 510
 511                 while (n && (n * (logo->width + 8) - 8 > xres))
 512                         --n;
 513                 image.dx = (xres - n * (logo->width + 8) - 8) / 2;
 514                 image.dy = y ?: (yres - logo->height) / 2;
 515         } else {
 516                 image.dx = 0;
 517                 image.dy = y;
 518         }
 519
 520         image.width = logo->width;
 521         image.height = logo->height;
 522
 523         if (rotate) {
 524                 logo_rotate = kmalloc_array(logo->width, logo->height,
 525                                             GFP_KERNEL);
 526                 if (logo_rotate)
 527                         fb_rotate_logo(info, logo_rotate, &image, rotate);
 528         }
 529
 530         fb_do_show_logo(info, &image, rotate, n);
 531
 532         kfree(palette);
 533         if (saved_pseudo_palette != NULL)
 534                 info->pseudo_palette = saved_pseudo_palette;
 535         kfree(logo_new);
 536         kfree(logo_rotate);
 537         return image.dy + logo->height;
 538 }
 539
 540
 541 #ifdef CONFIG_FB_LOGO_EXTRA
 542
 543 #define FB_LOGO_EX_NUM_MAX 10
 544 static struct logo_data_extra {
 545         const struct linux_logo *logo;
 546         unsigned int n;
 547 } fb_logo_ex[FB_LOGO_EX_NUM_MAX];
 548 static unsigned int fb_logo_ex_num;
 549
 550 void fb_append_extra_logo(const struct linux_logo *logo, unsigned int n)
 551 {
 552         if (!n || fb_logo_ex_num == FB_LOGO_EX_NUM_MAX)
 553                 return;
 554
 555         fb_logo_ex[fb_logo_ex_num].logo = logo;
 556         fb_logo_ex[fb_logo_ex_num].n = n;
 557         fb_logo_ex_num++;
 558 }
 559
 560 static int fb_prepare_extra_logos(struct fb_info *info, unsigned int height,
 561                                   unsigned int yres)
 562 {
 563         unsigned int i;
 564
 565         /* FIXME: logo_ex supports only truecolor fb. */
 566         if (info->fix.visual != FB_VISUAL_TRUECOLOR)
 567                 fb_logo_ex_num = 0;
 568
 569         for (i = 0; i < fb_logo_ex_num; i++) {
 570                 if (fb_logo_ex[i].logo->type != fb_logo.logo->type) {
 571                         fb_logo_ex[i].logo = NULL;
 572                         continue;
 573                 }
 574                 height += fb_logo_ex[i].logo->height;
 575                 if (height > yres) {
 576                         height -= fb_logo_ex[i].logo->height;
 577                         fb_logo_ex_num = i;
 578                         break;
 579                 }
 580         }
 581         return height;
 582 }
 583
 584 static int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
 585 {
 586         unsigned int i;
 587
 588         for (i = 0; i < fb_logo_ex_num; i++)
 589                 y = fb_show_logo_line(info, rotate,
 590                                       fb_logo_ex[i].logo, y, fb_logo_ex[i].n);
 591
 592         return y;
 593 }
 594
 595 #else /* !CONFIG_FB_LOGO_EXTRA */
 596
 597 static inline int fb_prepare_extra_logos(struct fb_info *info,
 598                                          unsigned int height,
 599                                          unsigned int yres)
 600 {
 601         return height;
 602 }
 603
 604 static inline int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
 605 {
 606         return y;
 607 }
 608
 609 #endif /* CONFIG_FB_LOGO_EXTRA */
 610
 611
 612 int fb_prepare_logo(struct fb_info *info, int rotate)
 613 {
 614         int depth = fb_get_color_depth(&info->var, &info->fix);
 615         unsigned int yres;
 616         int height;
 617
 618         memset(&fb_logo, 0, sizeof(struct logo_data));
 619
 620         if (info->flags & FBINFO_MISC_TILEBLITTING ||
 621             info->fbops->owner || !fb_logo_count)
 622                 return 0;
 623
 624         if (info->fix.visual == FB_VISUAL_DIRECTCOLOR) {
 625                 depth = info->var.blue.length;
 626                 if (info->var.red.length < depth)
 627                         depth = info->var.red.length;
 628                 if (info->var.green.length < depth)
 629                         depth = info->var.green.length;
 630         }
 631
 632         if (info->fix.visual == FB_VISUAL_STATIC_PSEUDOCOLOR && depth > 4) {
 633                 /* assume console colormap */
 634                 depth = 4;
 635         }
 636
 637         /* Return if no suitable logo was found */
 638         fb_logo.logo = fb_find_logo(depth);
 639
 640         if (!fb_logo.logo) {
 641                 return 0;
 642         }
 643
 644         if (rotate == FB_ROTATE_UR || rotate == FB_ROTATE_UD)
 645                 yres = info->var.yres;
 646         else
 647                 yres = info->var.xres;
 648
 649         if (fb_logo.logo->height > yres) {
 650                 fb_logo.logo = NULL;
 651                 return 0;
 652         }
 653
 654         /* What depth we asked for might be different from what we get */
 655         if (fb_logo.logo->type == LINUX_LOGO_CLUT224)
 656                 fb_logo.depth = 8;
 657         else if (fb_logo.logo->type == LINUX_LOGO_VGA16)
 658                 fb_logo.depth = 4;
 659         else
 660                 fb_logo.depth = 1;
 661
 662
 663         if (fb_logo.depth > 4 && depth > 4) {
 664                 switch (info->fix.visual) {
 665                 case FB_VISUAL_TRUECOLOR:
 666                         fb_logo.needs_truepalette = 1;
 667                         break;
 668                 case FB_VISUAL_DIRECTCOLOR:
 669                         fb_logo.needs_directpalette = 1;
 670                         fb_logo.needs_cmapreset = 1;
 671                         break;
 672                 case FB_VISUAL_PSEUDOCOLOR:
 673                         fb_logo.needs_cmapreset = 1;
 674                         break;
 675                 }
 676         }
 677
 678         height = fb_logo.logo->height;
 679         if (fb_center_logo)
 680                 height += (yres - fb_logo.logo->height) / 2;
 681
 682         return fb_prepare_extra_logos(info, height, yres);
 683 }
 684
 685 int fb_show_logo(struct fb_info *info, int rotate)
 686 {
 687         unsigned int count;
 688         int y;
 689
 690         if (!fb_logo_count)
 691                 return 0;
 692
 693         count = fb_logo_count < 0 ? num_online_cpus() : fb_logo_count;
 694         y = fb_show_logo_line(info, rotate, fb_logo.logo, 0, count);
 695         y = fb_show_extra_logos(info, y, rotate);
 696
 697         return y;
 698 }
 699 #else
 700 int fb_prepare_logo(struct fb_info *info, int rotate) { return 0; }
 701 int fb_show_logo(struct fb_info *info, int rotate) { return 0; }
 702 #endif /* CONFIG_LOGO */
 703 EXPORT_SYMBOL(fb_prepare_logo);
 704 EXPORT_SYMBOL(fb_show_logo);
 705
 706 static void *fb_seq_start(struct seq_file *m, loff_t *pos)
 707 {
 708         mutex_lock(&registration_lock);
 709         return (*pos < FB_MAX) ? pos : NULL;
 710 }
 711
 712 static void *fb_seq_next(struct seq_file *m, void *v, loff_t *pos)
 713 {
 714         (*pos)++;
 715         return (*pos < FB_MAX) ? pos : NULL;
 716 }
 717
 718 static void fb_seq_stop(struct seq_file *m, void *v)
 719 {
 720         mutex_unlock(&registration_lock);
 721 }
 722
 723 static int fb_seq_show(struct seq_file *m, void *v)
 724 {
 725         int i = *(loff_t *)v;
 726         struct fb_info *fi = registered_fb[i];
 727
 728         if (fi)
 729                 seq_printf(m, "%d %s\n", fi->node, fi->fix.id);
 730         return 0;
 731 }
 732
 733 static const struct seq_operations __maybe_unused proc_fb_seq_ops = {
 734         .start  = fb_seq_start,
 735         .next   = fb_seq_next,
 736         .stop   = fb_seq_stop,
 737         .show   = fb_seq_show,
 738 };
 739
 740 /*
 741  * We hold a reference to the fb_info in file->private_data,
 742  * but if the current registered fb has changed, we don't
 743  * actually want to use it.
 744  *
 745  * So look up the fb_info using the inode minor number,
 746  * and just verify it against the reference we have.
 747  */
 748 static struct fb_info *file_fb_info(struct file *file)
 749 {
 750         struct inode *inode = file_inode(file);
 751         int fbidx = iminor(inode);
 752         struct fb_info *info = registered_fb[fbidx];
 753
 754         if (info != file->private_data)
 755                 info = NULL;
 756         return info;
 757 }
 758
 759 static ssize_t
 760 fb_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)
 761 {
 762         unsigned long p = *ppos;
 763         struct fb_info *info = file_fb_info(file);
 764         u8 *buffer, *dst;
 765         u8 __iomem *src;
 766         int c, cnt = 0, err = 0;
 767         unsigned long total_size;
 768
 769         if (!info || ! info->screen_base)
 770                 return -ENODEV;
 771
 772         if (info->state != FBINFO_STATE_RUNNING)
 773                 return -EPERM;
 774
 775         if (info->fbops->fb_read)
 776                 return info->fbops->fb_read(info, buf, count, ppos);
 777
 778         total_size = info->screen_size;
 779
 780         if (total_size == 0)
 781                 total_size = info->fix.smem_len;
 782
 783         if (p >= total_size)
 784                 return 0;
 785
 786         if (count >= total_size)
 787                 count = total_size;
 788
 789         if (count + p > total_size)
 790                 count = total_size - p;
 791
 792         buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
 793                          GFP_KERNEL);
 794         if (!buffer)
 795                 return -ENOMEM;
 796
 797         src = (u8 __iomem *) (info->screen_base + p);
 798
 799         if (info->fbops->fb_sync)
 800                 info->fbops->fb_sync(info);
 801
 802         while (count) {
 803                 c  = (count > PAGE_SIZE) ? PAGE_SIZE : count;
 804                 dst = buffer;
 805                 fb_memcpy_fromfb(dst, src, c);
 806                 dst += c;
 807                 src += c;
 808
 809                 if (copy_to_user(buf, buffer, c)) {
 810                         err = -EFAULT;
 811                         break;
 812                 }
 813                 *ppos += c;
 814                 buf += c;
 815                 cnt += c;
 816                 count -= c;
 817         }
 818
 819         kfree(buffer);
 820
 821         return (err) ? err : cnt;
 822 }
 823
 824 static ssize_t
 825 fb_write(struct file *file, const char __user *buf, size_t count, loff_t *ppos)
 826 {
 827         unsigned long p = *ppos;
 828         struct fb_info *info = file_fb_info(file);
 829         u8 *buffer, *src;
 830         u8 __iomem *dst;
 831         int c, cnt = 0, err = 0;
 832         unsigned long total_size;
 833
 834         if (!info || !info->screen_base)
 835                 return -ENODEV;
 836
 837         if (info->state != FBINFO_STATE_RUNNING)
 838                 return -EPERM;
 839
 840         if (info->fbops->fb_write)
 841                 return info->fbops->fb_write(info, buf, count, ppos);
 842
 843         total_size = info->screen_size;
 844
 845         if (total_size == 0)
 846                 total_size = info->fix.smem_len;
 847
 848         if (p > total_size)
 849                 return -EFBIG;
 850
 851         if (count > total_size) {
 852                 err = -EFBIG;
 853                 count = total_size;
 854         }
 855
 856         if (count + p > total_size) {
 857                 if (!err)
 858                         err = -ENOSPC;
 859
 860                 count = total_size - p;
 861         }
 862
 863         buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
 864                          GFP_KERNEL);
 865         if (!buffer)
 866                 return -ENOMEM;
 867
 868         dst = (u8 __iomem *) (info->screen_base + p);
 869
 870         if (info->fbops->fb_sync)
 871                 info->fbops->fb_sync(info);
 872
 873         while (count) {
 874                 c = (count > PAGE_SIZE) ? PAGE_SIZE : count;
 875                 src = buffer;
 876
 877                 if (copy_from_user(src, buf, c)) {
 878                         err = -EFAULT;
 879                         break;
 880                 }
 881
 882                 fb_memcpy_tofb(dst, src, c);
 883                 dst += c;
 884                 src += c;
 885                 *ppos += c;
 886                 buf += c;
 887                 cnt += c;
 888                 count -= c;
 889         }
 890
 891         kfree(buffer);
 892
 893         return (cnt) ? cnt : err;
 894 }
 895
 896 int
 897 fb_pan_display(struct fb_info *info, struct fb_var_screeninfo *var)
 898 {
 899         struct fb_fix_screeninfo *fix = &info->fix;
 900         unsigned int yres = info->var.yres;
 901         int err = 0;
 902
 903         if (var->yoffset > 0) {
 904                 if (var->vmode & FB_VMODE_YWRAP) {
 905                         if (!fix->ywrapstep || (var->yoffset % fix->ywrapstep))
 906                                 err = -EINVAL;
 907                         else
 908                                 yres = 0;
 909                 } else if (!fix->ypanstep || (var->yoffset % fix->ypanstep))
 910                         err = -EINVAL;
 911         }
 912
 913         if (var->xoffset > 0 && (!fix->xpanstep ||
 914                                  (var->xoffset % fix->xpanstep)))
 915                 err = -EINVAL;
 916
 917         if (err || !info->fbops->fb_pan_display ||
 918             var->yoffset > info->var.yres_virtual - yres ||
 919             var->xoffset > info->var.xres_virtual - info->var.xres)
 920                 return -EINVAL;
 921
 922         if ((err = info->fbops->fb_pan_display(var, info)))
 923                 return err;
 924         info->var.xoffset = var->xoffset;
 925         info->var.yoffset = var->yoffset;
 926         if (var->vmode & FB_VMODE_YWRAP)
 927                 info->var.vmode |= FB_VMODE_YWRAP;
 928         else
 929                 info->var.vmode &= ~FB_VMODE_YWRAP;
 930         return 0;
 931 }
 932 EXPORT_SYMBOL(fb_pan_display);
 933
 934 static int fb_check_caps(struct fb_info *info, struct fb_var_screeninfo *var,
 935                          u32 activate)
 936 {
 937         struct fb_blit_caps caps, fbcaps;
 938         int err = 0;
 939
 940         memset(&caps, 0, sizeof(caps));
 941         memset(&fbcaps, 0, sizeof(fbcaps));
 942         caps.flags = (activate & FB_ACTIVATE_ALL) ? 1 : 0;
 943         fbcon_get_requirement(info, &caps);
 944         info->fbops->fb_get_caps(info, &fbcaps, var);
 945
 946         if (((fbcaps.x ^ caps.x) & caps.x) ||
 947             ((fbcaps.y ^ caps.y) & caps.y) ||
 948             (fbcaps.len < caps.len))
 949                 err = -EINVAL;
 950
 951         return err;
 952 }
 953
 954 int
 955 fb_set_var(struct fb_info *info, struct fb_var_screeninfo *var)
 956 {
 957         int ret = 0;
 958         u32 activate;
 959         struct fb_var_screeninfo old_var;
 960         struct fb_videomode mode;
 961         struct fb_event event;
 962         u32 unused;
 963
 964         if (var->activate & FB_ACTIVATE_INV_MODE) {
 965                 struct fb_videomode mode1, mode2;
 966
 967                 fb_var_to_videomode(&mode1, var);
 968                 fb_var_to_videomode(&mode2, &info->var);
 969                 /* make sure we don't delete the videomode of current var */
 970                 ret = fb_mode_is_equal(&mode1, &mode2);
 971                 if (!ret) {
 972                         ret = fbcon_mode_deleted(info, &mode1);
 973                         if (!ret)
 974                                 fb_delete_videomode(&mode1, &info->modelist);
 975                 }
 976
 977                 return ret ? -EINVAL : 0;
 978         }
 979
 980         if (!(var->activate & FB_ACTIVATE_FORCE) &&
 981             !memcmp(&info->var, var, sizeof(struct fb_var_screeninfo)))
 982                 return 0;
 983
 984         activate = var->activate;
 985
 986         /* When using FOURCC mode, make sure the red, green, blue and
 987          * transp fields are set to 0.
 988          */
 989         if ((info->fix.capabilities & FB_CAP_FOURCC) &&
 990             var->grayscale > 1) {
 991                 if (var->red.offset     || var->green.offset    ||
 992                     var->blue.offset    || var->transp.offset   ||
 993                     var->red.length     || var->green.length    ||
 994                     var->blue.length    || var->transp.length   ||
 995                     var->red.msb_right  || var->green.msb_right ||
 996                     var->blue.msb_right || var->transp.msb_right)
 997                         return -EINVAL;
 998         }
 999
1000         if (!info->fbops->fb_check_var) {
1001                 *var = info->var;
1002                 return 0;
1003         }
1004
1005         /* bitfill_aligned() assumes that it's at least 8x8 */
1006         if (var->xres < 8 || var->yres < 8)
1007                 return -EINVAL;
1008
1009         /* Too huge resolution causes multiplication overflow. */
1010         if (check_mul_overflow(var->xres, var->yres, &unused) ||
1011             check_mul_overflow(var->xres_virtual, var->yres_virtual, &unused))
1012                 return -EINVAL;
1013
1014         ret = info->fbops->fb_check_var(var, info);
1015
1016         if (ret)
1017                 return ret;
1018
1019         if ((var->activate & FB_ACTIVATE_MASK) != FB_ACTIVATE_NOW)
1020                 return 0;
1021
1022         if (info->fbops->fb_get_caps) {
1023                 ret = fb_check_caps(info, var, activate);
1024
1025                 if (ret)
1026                         return ret;
1027         }
1028
1029         old_var = info->var;
1030         info->var = *var;
1031
1032         if (info->fbops->fb_set_par) {
1033                 ret = info->fbops->fb_set_par(info);
1034
1035                 if (ret) {
1036                         info->var = old_var;
1037                         printk(KERN_WARNING "detected "
1038                                 "fb_set_par error, "
1039                                 "error code: %d\n", ret);
1040                         return ret;
1041                 }
1042         }
1043
1044         fb_pan_display(info, &info->var);
1045         fb_set_cmap(&info->cmap, info);
1046         fb_var_to_videomode(&mode, &info->var);
1047
1048         if (info->modelist.prev && info->modelist.next &&
1049             !list_empty(&info->modelist))
1050                 ret = fb_add_videomode(&mode, &info->modelist);
1051
1052         if (ret)
1053                 return ret;
1054
1055         event.info = info;
1056         event.data = &mode;
1057         fb_notifier_call_chain(FB_EVENT_MODE_CHANGE, &event);
1058
1059         return 0;
1060 }
1061 EXPORT_SYMBOL(fb_set_var);
1062
1063 int
1064 fb_blank(struct fb_info *info, int blank)
1065 {
1066         struct fb_event event;
1067         int ret = -EINVAL;
1068
1069         if (blank > FB_BLANK_POWERDOWN)
1070                 blank = FB_BLANK_POWERDOWN;
1071
1072         event.info = info;
1073         event.data = &blank;
1074
1075         if (info->fbops->fb_blank)
1076                 ret = info->fbops->fb_blank(blank, info);
1077
1078         if (!ret)
1079                 fb_notifier_call_chain(FB_EVENT_BLANK, &event);
1080
1081         return ret;
1082 }
1083 EXPORT_SYMBOL(fb_blank);
1084
1085 static long do_fb_ioctl(struct fb_info *info, unsigned int cmd,
1086                         unsigned long arg)
1087 {
1088         const struct fb_ops *fb;
1089         struct fb_var_screeninfo var;
1090         struct fb_fix_screeninfo fix;
1091         struct fb_cmap cmap_from;
1092         struct fb_cmap_user cmap;
1093         void __user *argp = (void __user *)arg;
1094         long ret = 0;
1095
1096         switch (cmd) {
1097         case FBIOGET_VSCREENINFO:
1098                 lock_fb_info(info);
1099                 var = info->var;
1100                 unlock_fb_info(info);
1101
1102                 ret = copy_to_user(argp, &var, sizeof(var)) ? -EFAULT : 0;
1103                 break;
1104         case FBIOPUT_VSCREENINFO:
1105                 if (copy_from_user(&var, argp, sizeof(var)))
1106                         return -EFAULT;
1107                 console_lock();
1108                 lock_fb_info(info);
1109                 ret = fb_set_var(info, &var);
1110                 if (!ret)
1111                         fbcon_update_vcs(info, var.activate & FB_ACTIVATE_ALL);
1112                 unlock_fb_info(info);
1113                 console_unlock();
1114                 if (!ret && copy_to_user(argp, &var, sizeof(var)))
1115                         ret = -EFAULT;
1116                 break;
1117         case FBIOGET_FSCREENINFO:
1118                 lock_fb_info(info);
1119                 memcpy(&fix, &info->fix, sizeof(fix));
1120                 if (info->flags & FBINFO_HIDE_SMEM_START)
1121                         fix.smem_start = 0;
1122                 unlock_fb_info(info);
1123
1124                 ret = copy_to_user(argp, &fix, sizeof(fix)) ? -EFAULT : 0;
1125                 break;
1126         case FBIOPUTCMAP:
1127                 if (copy_from_user(&cmap, argp, sizeof(cmap)))
1128                         return -EFAULT;
1129                 ret = fb_set_user_cmap(&cmap, info);
1130                 break;
1131         case FBIOGETCMAP:
1132                 if (copy_from_user(&cmap, argp, sizeof(cmap)))
1133                         return -EFAULT;
1134                 lock_fb_info(info);
1135                 cmap_from = info->cmap;
1136                 unlock_fb_info(info);
1137                 ret = fb_cmap_to_user(&cmap_from, &cmap);
1138                 break;
1139         case FBIOPAN_DISPLAY:
1140                 if (copy_from_user(&var, argp, sizeof(var)))
1141                         return -EFAULT;
1142                 console_lock();
1143                 lock_fb_info(info);
1144                 ret = fb_pan_display(info, &var);
1145                 unlock_fb_info(info);
1146                 console_unlock();
1147                 if (ret == 0 && copy_to_user(argp, &var, sizeof(var)))
1148                         return -EFAULT;
1149                 break;
1150         case FBIO_CURSOR:
1151                 ret = -EINVAL;
1152                 break;
1153         case FBIOGET_CON2FBMAP:
1154                 ret = fbcon_get_con2fb_map_ioctl(argp);
1155                 break;
1156         case FBIOPUT_CON2FBMAP:
1157                 ret = fbcon_set_con2fb_map_ioctl(argp);
1158                 break;
1159         case FBIOBLANK:
1160                 if (arg > FB_BLANK_POWERDOWN)
1161                         return -EINVAL;
1162                 console_lock();
1163                 lock_fb_info(info);
1164                 ret = fb_blank(info, arg);
1165                 /* might again call into fb_blank */
1166                 fbcon_fb_blanked(info, arg);
1167                 unlock_fb_info(info);
1168                 console_unlock();
1169                 break;
1170         default:
1171                 lock_fb_info(info);
1172                 fb = info->fbops;
1173                 if (fb->fb_ioctl)
1174                         ret = fb->fb_ioctl(info, cmd, arg);
1175                 else
1176                         ret = -ENOTTY;
1177                 unlock_fb_info(info);
1178         }
1179         return ret;
1180 }
1181
1182 static long fb_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
1183 {
1184         struct fb_info *info = file_fb_info(file);
1185
1186         if (!info)
1187                 return -ENODEV;
1188         return do_fb_ioctl(info, cmd, arg);
1189 }
1190
1191 #ifdef CONFIG_COMPAT
1192 struct fb_fix_screeninfo32 {
1193         char                    id[16];
1194         compat_caddr_t          smem_start;
1195         u32                     smem_len;
1196         u32                     type;
1197         u32                     type_aux;
1198         u32                     visual;
1199         u16                     xpanstep;
1200         u16                     ypanstep;
1201         u16                     ywrapstep;
1202         u32                     line_length;
1203         compat_caddr_t          mmio_start;
1204         u32                     mmio_len;
1205         u32                     accel;
1206         u16                     reserved[3];
1207 };
1208
1209 struct fb_cmap32 {
1210         u32                     start;
1211         u32                     len;
1212         compat_caddr_t  red;
1213         compat_caddr_t  green;
1214         compat_caddr_t  blue;
1215         compat_caddr_t  transp;
1216 };
1217
1218 static int fb_getput_cmap(struct fb_info *info, unsigned int cmd,
1219                           unsigned long arg)
1220 {
1221         struct fb_cmap32 cmap32;
1222         struct fb_cmap cmap_from;
1223         struct fb_cmap_user cmap;
1224
1225         if (copy_from_user(&cmap32, compat_ptr(arg), sizeof(cmap32)))
1226                 return -EFAULT;
1227
1228         cmap = (struct fb_cmap_user) {
1229                 .start  = cmap32.start,
1230                 .len    = cmap32.len,
1231                 .red    = compat_ptr(cmap32.red),
1232                 .green  = compat_ptr(cmap32.green),
1233                 .blue   = compat_ptr(cmap32.blue),
1234                 .transp = compat_ptr(cmap32.transp),
1235         };
1236
1237         if (cmd == FBIOPUTCMAP)
1238                 return fb_set_user_cmap(&cmap, info);
1239
1240         lock_fb_info(info);
1241         cmap_from = info->cmap;
1242         unlock_fb_info(info);
1243
1244         return fb_cmap_to_user(&cmap_from, &cmap);
1245 }
1246
1247 static int do_fscreeninfo_to_user(struct fb_fix_screeninfo *fix,
1248                                   struct fb_fix_screeninfo32 __user *fix32)
1249 {
1250         __u32 data;
1251         int err;
1252
1253         err = copy_to_user(&fix32->id, &fix->id, sizeof(fix32->id));
1254
1255         data = (__u32) (unsigned long) fix->smem_start;
1256         err |= put_user(data, &fix32->smem_start);
1257
1258         err |= put_user(fix->smem_len, &fix32->smem_len);
1259         err |= put_user(fix->type, &fix32->type);
1260         err |= put_user(fix->type_aux, &fix32->type_aux);
1261         err |= put_user(fix->visual, &fix32->visual);
1262         err |= put_user(fix->xpanstep, &fix32->xpanstep);
1263         err |= put_user(fix->ypanstep, &fix32->ypanstep);
1264         err |= put_user(fix->ywrapstep, &fix32->ywrapstep);
1265         err |= put_user(fix->line_length, &fix32->line_length);
1266
1267         data = (__u32) (unsigned long) fix->mmio_start;
1268         err |= put_user(data, &fix32->mmio_start);
1269
1270         err |= put_user(fix->mmio_len, &fix32->mmio_len);
1271         err |= put_user(fix->accel, &fix32->accel);
1272         err |= copy_to_user(fix32->reserved, fix->reserved,
1273                             sizeof(fix->reserved));
1274
1275         if (err)
1276                 return -EFAULT;
1277         return 0;
1278 }
1279
1280 static int fb_get_fscreeninfo(struct fb_info *info, unsigned int cmd,
1281                               unsigned long arg)
1282 {
1283         struct fb_fix_screeninfo fix;
1284
1285         lock_fb_info(info);
1286         fix = info->fix;
1287         if (info->flags & FBINFO_HIDE_SMEM_START)
1288                 fix.smem_start = 0;
1289         unlock_fb_info(info);
1290         return do_fscreeninfo_to_user(&fix, compat_ptr(arg));
1291 }
1292
1293 static long fb_compat_ioctl(struct file *file, unsigned int cmd,
1294                             unsigned long arg)
1295 {
1296         struct fb_info *info = file_fb_info(file);
1297         const struct fb_ops *fb;
1298         long ret = -ENOIOCTLCMD;
1299
1300         if (!info)
1301                 return -ENODEV;
1302         fb = info->fbops;
1303         switch(cmd) {
1304         case FBIOGET_VSCREENINFO:
1305         case FBIOPUT_VSCREENINFO:
1306         case FBIOPAN_DISPLAY:
1307         case FBIOGET_CON2FBMAP:
1308         case FBIOPUT_CON2FBMAP:
1309                 arg = (unsigned long) compat_ptr(arg);
1310                 fallthrough;
1311         case FBIOBLANK:
1312                 ret = do_fb_ioctl(info, cmd, arg);
1313                 break;
1314
1315         case FBIOGET_FSCREENINFO:
1316                 ret = fb_get_fscreeninfo(info, cmd, arg);
1317                 break;
1318
1319         case FBIOGETCMAP:
1320         case FBIOPUTCMAP:
1321                 ret = fb_getput_cmap(info, cmd, arg);
1322                 break;
1323
1324         default:
1325                 if (fb->fb_compat_ioctl)
1326                         ret = fb->fb_compat_ioctl(info, cmd, arg);
1327                 break;
1328         }
1329         return ret;
1330 }
1331 #endif
1332
1333 static int
1334 fb_mmap(struct file *file, struct vm_area_struct * vma)
1335 {
1336         struct fb_info *info = file_fb_info(file);
1337         unsigned long mmio_pgoff;
1338         unsigned long start;
1339         u32 len;
1340
1341         if (!info)
1342                 return -ENODEV;
1343         mutex_lock(&info->mm_lock);
1344
1345         if (info->fbops->fb_mmap) {
1346                 int res;
1347
1348                 /*
1349                  * The framebuffer needs to be accessed decrypted, be sure
1350                  * SME protection is removed ahead of the call
1351                  */
1352                 vma->vm_page_prot = pgprot_decrypted(vma->vm_page_prot);
1353                 res = info->fbops->fb_mmap(info, vma);
1354                 mutex_unlock(&info->mm_lock);
1355                 return res;
1356 #if IS_ENABLED(CONFIG_FB_DEFERRED_IO)
1357         } else if (info->fbdefio) {
1358                 /*
1359                  * FB deferred I/O wants you to handle mmap in your drivers. At a
1360                  * minimum, point struct fb_ops.fb_mmap to fb_deferred_io_mmap().
1361                  */
1362                 dev_warn_once(info->dev, "fbdev mmap not set up for deferred I/O.\n");
1363                 mutex_unlock(&info->mm_lock);
1364                 return -ENODEV;
1365 #endif
1366         }
1367
1368         /*
1369          * Ugh. This can be either the frame buffer mapping, or
1370          * if pgoff points past it, the mmio mapping.
1371          */
1372         start = info->fix.smem_start;
1373         len = info->fix.smem_len;
1374         mmio_pgoff = PAGE_ALIGN((start & ~PAGE_MASK) + len) >> PAGE_SHIFT;
1375         if (vma->vm_pgoff >= mmio_pgoff) {
1376                 if (info->var.accel_flags) {
1377                         mutex_unlock(&info->mm_lock);
1378                         return -EINVAL;
1379                 }
1380
1381                 vma->vm_pgoff -= mmio_pgoff;
1382                 start = info->fix.mmio_start;
1383                 len = info->fix.mmio_len;
1384         }
1385         mutex_unlock(&info->mm_lock);
1386
1387         vma->vm_page_prot = vm_get_page_prot(vma->vm_flags);
1388         fb_pgprotect(file, vma, start);
1389
1390         return vm_iomap_memory(vma, start, len);
1391 }
1392
1393 static int
1394 fb_open(struct inode *inode, struct file *file)
1395 __acquires(&info->lock)
1396 __releases(&info->lock)
1397 {
1398         int fbidx = iminor(inode);
1399         struct fb_info *info;
1400         int res = 0;
1401
1402         info = get_fb_info(fbidx);
1403         if (!info) {
1404                 request_module("fb%d", fbidx);
1405                 info = get_fb_info(fbidx);
1406                 if (!info)
1407                         return -ENODEV;
1408         }
1409         if (IS_ERR(info))
1410                 return PTR_ERR(info);
1411
1412         lock_fb_info(info);
1413         if (!try_module_get(info->fbops->owner)) {
1414                 res = -ENODEV;
1415                 goto out;
1416         }
1417         file->private_data = info;
1418         if (info->fbops->fb_open) {
1419                 res = info->fbops->fb_open(info,1);
1420                 if (res)
1421                         module_put(info->fbops->owner);
1422         }
1423 #ifdef CONFIG_FB_DEFERRED_IO
1424         if (info->fbdefio)
1425                 fb_deferred_io_open(info, inode, file);
1426 #endif
1427 out:
1428         unlock_fb_info(info);
1429         if (res)
1430                 put_fb_info(info);
1431         return res;
1432 }
1433
1434 static int
1435 fb_release(struct inode *inode, struct file *file)
1436 __acquires(&info->lock)
1437 __releases(&info->lock)
1438 {
1439         struct fb_info * const info = file->private_data;
1440
1441         lock_fb_info(info);
1442         if (info->fbops->fb_release)
1443                 info->fbops->fb_release(info,1);
1444         module_put(info->fbops->owner);
1445         unlock_fb_info(info);
1446         put_fb_info(info);
1447         return 0;
1448 }
1449
1450 #if defined(CONFIG_FB_PROVIDE_GET_FB_UNMAPPED_AREA) && !defined(CONFIG_MMU)
1451 unsigned long get_fb_unmapped_area(struct file *filp,
1452                                    unsigned long addr, unsigned long len,
1453                                    unsigned long pgoff, unsigned long flags)
1454 {
1455         struct fb_info * const info = filp->private_data;
1456         unsigned long fb_size = PAGE_ALIGN(info->fix.smem_len);
1457
1458         if (pgoff > fb_size || len > fb_size - pgoff)
1459                 return -EINVAL;
1460
1461         return (unsigned long)info->screen_base + pgoff;
1462 }
1463 #endif
1464
1465 static const struct file_operations fb_fops = {
1466         .owner =        THIS_MODULE,
1467         .read =         fb_read,
1468         .write =        fb_write,
1469         .unlocked_ioctl = fb_ioctl,
1470 #ifdef CONFIG_COMPAT
1471         .compat_ioctl = fb_compat_ioctl,
1472 #endif
1473         .mmap =         fb_mmap,
1474         .open =         fb_open,
1475         .release =      fb_release,
1476 #if defined(HAVE_ARCH_FB_UNMAPPED_AREA) || \
1477         (defined(CONFIG_FB_PROVIDE_GET_FB_UNMAPPED_AREA) && \
1478          !defined(CONFIG_MMU))
1479         .get_unmapped_area = get_fb_unmapped_area,
1480 #endif
1481 #ifdef CONFIG_FB_DEFERRED_IO
1482         .fsync =        fb_deferred_io_fsync,
1483 #endif
1484         .llseek =       default_llseek,
1485 };
1486
1487 struct class *fb_class;
1488 EXPORT_SYMBOL(fb_class);
1489
1490 static int fb_check_foreignness(struct fb_info *fi)
1491 {
1492         const bool foreign_endian = fi->flags & FBINFO_FOREIGN_ENDIAN;
1493
1494         fi->flags &= ~FBINFO_FOREIGN_ENDIAN;
1495
1496 #ifdef __BIG_ENDIAN
1497         fi->flags |= foreign_endian ? 0 : FBINFO_BE_MATH;
1498 #else
1499         fi->flags |= foreign_endian ? FBINFO_BE_MATH : 0;
1500 #endif /* __BIG_ENDIAN */
1501
1502         if (fi->flags & FBINFO_BE_MATH && !fb_be_math(fi)) {
1503                 pr_err("%s: enable CONFIG_FB_BIG_ENDIAN to "
1504                        "support this framebuffer\n", fi->fix.id);
1505                 return -ENOSYS;
1506         } else if (!(fi->flags & FBINFO_BE_MATH) && fb_be_math(fi)) {
1507                 pr_err("%s: enable CONFIG_FB_LITTLE_ENDIAN to "
1508                        "support this framebuffer\n", fi->fix.id);
1509                 return -ENOSYS;
1510         }
1511
1512         return 0;
1513 }
1514
1515 static bool apertures_overlap(struct aperture *gen, struct aperture *hw)
1516 {
1517         /* is the generic aperture base the same as the HW one */
1518         if (gen->base == hw->base)
1519                 return true;
1520         /* is the generic aperture base inside the hw base->hw base+size */
1521         if (gen->base > hw->base && gen->base < hw->base + hw->size)
1522                 return true;
1523         return false;
1524 }
1525
1526 static bool fb_do_apertures_overlap(struct apertures_struct *gena,
1527                                     struct apertures_struct *hwa)
1528 {
1529         int i, j;
1530         if (!hwa || !gena)
1531                 return false;
1532
1533         for (i = 0; i < hwa->count; ++i) {
1534                 struct aperture *h = &hwa->ranges[i];
1535                 for (j = 0; j < gena->count; ++j) {
1536                         struct aperture *g = &gena->ranges[j];
1537                         printk(KERN_DEBUG "checking generic (%llx %llx) vs hw (%llx %llx)\n",
1538                                 (unsigned long long)g->base,
1539                                 (unsigned long long)g->size,
1540                                 (unsigned long long)h->base,
1541                                 (unsigned long long)h->size);
1542                         if (apertures_overlap(g, h))
1543                                 return true;
1544                 }
1545         }
1546
1547         return false;
1548 }
1549
1550 static void do_unregister_framebuffer(struct fb_info *fb_info);
1551
1552 #define VGA_FB_PHYS 0xA0000
1553 static void do_remove_conflicting_framebuffers(struct apertures_struct *a,
1554                                                const char *name, bool primary)
1555 {
1556         int i;
1557
1558         /* check all firmware fbs and kick off if the base addr overlaps */
1559         for_each_registered_fb(i) {
1560                 struct apertures_struct *gen_aper;
1561                 struct device *device;
1562
1563                 if (!(registered_fb[i]->flags & FBINFO_MISC_FIRMWARE))
1564                         continue;
1565
1566                 gen_aper = registered_fb[i]->apertures;
1567                 device = registered_fb[i]->device;
1568                 if (fb_do_apertures_overlap(gen_aper, a) ||
1569                         (primary && gen_aper && gen_aper->count &&
1570                          gen_aper->ranges[0].base == VGA_FB_PHYS)) {
1571
1572                         printk(KERN_INFO "fb%d: switching to %s from %s\n",
1573                                i, name, registered_fb[i]->fix.id);
1574
1575                         /*
1576                          * If we kick-out a firmware driver, we also want to remove
1577                          * the underlying platform device, such as simple-framebuffer,
1578                          * VESA, EFI, etc. A native driver will then be able to
1579                          * allocate the memory range.
1580                          *
1581                          * If it's not a platform device, at least print a warning. A
1582                          * fix would add code to remove the device from the system. For
1583                          * framebuffers without any Linux device, print a warning as
1584                          * well.
1585                          */
1586                         if (!device) {
1587                                 pr_warn("fb%d: no device set\n", i);
1588                                 do_unregister_framebuffer(registered_fb[i]);
1589                         } else if (dev_is_platform(device)) {
1590                                 registered_fb[i]->forced_out = true;
1591                                 platform_device_unregister(to_platform_device(device));
1592                         } else {
1593                                 pr_warn("fb%d: cannot remove device\n", i);
1594                                 do_unregister_framebuffer(registered_fb[i]);
1595                         }
1596                 }
1597         }
1598 }
1599
1600 static int do_register_framebuffer(struct fb_info *fb_info)
1601 {
1602         int i;
1603         struct fb_videomode mode;
1604
1605         if (fb_check_foreignness(fb_info))
1606                 return -ENOSYS;
1607
1608         do_remove_conflicting_framebuffers(fb_info->apertures,
1609                                            fb_info->fix.id,
1610                                            fb_is_primary_device(fb_info));
1611
1612         if (num_registered_fb == FB_MAX)
1613                 return -ENXIO;
1614
1615         num_registered_fb++;
1616         for (i = 0 ; i < FB_MAX; i++)
1617                 if (!registered_fb[i])
1618                         break;
1619         fb_info->node = i;
1620         refcount_set(&fb_info->count, 1);
1621         mutex_init(&fb_info->lock);
1622         mutex_init(&fb_info->mm_lock);
1623
1624         fb_info->dev = device_create(fb_class, fb_info->device,
1625                                      MKDEV(FB_MAJOR, i), NULL, "fb%d", i);
1626         if (IS_ERR(fb_info->dev)) {
1627                 /* Not fatal */
1628                 printk(KERN_WARNING "Unable to create device for framebuffer %d; errno = %ld\n", i, PTR_ERR(fb_info->dev));
1629                 fb_info->dev = NULL;
1630         } else
1631                 fb_init_device(fb_info);
1632
1633         if (fb_info->pixmap.addr == NULL) {
1634                 fb_info->pixmap.addr = kmalloc(FBPIXMAPSIZE, GFP_KERNEL);
1635                 if (fb_info->pixmap.addr) {
1636                         fb_info->pixmap.size = FBPIXMAPSIZE;
1637                         fb_info->pixmap.buf_align = 1;
1638                         fb_info->pixmap.scan_align = 1;
1639                         fb_info->pixmap.access_align = 32;
1640                         fb_info->pixmap.flags = FB_PIXMAP_DEFAULT;
1641                 }
1642         }
1643         fb_info->pixmap.offset = 0;
1644
1645         if (!fb_info->pixmap.blit_x)
1646                 fb_info->pixmap.blit_x = ~(u32)0;
1647
1648         if (!fb_info->pixmap.blit_y)
1649                 fb_info->pixmap.blit_y = ~(u32)0;
1650
1651         if (!fb_info->modelist.prev || !fb_info->modelist.next)
1652                 INIT_LIST_HEAD(&fb_info->modelist);
1653
1654         if (fb_info->skip_vt_switch)
1655                 pm_vt_switch_required(fb_info->dev, false);
1656         else
1657                 pm_vt_switch_required(fb_info->dev, true);
1658
1659         fb_var_to_videomode(&mode, &fb_info->var);
1660         fb_add_videomode(&mode, &fb_info->modelist);
1661         registered_fb[i] = fb_info;
1662
1663 #ifdef CONFIG_GUMSTIX_AM200EPD
1664         {
1665                 struct fb_event event;
1666                 event.info = fb_info;
1667                 fb_notifier_call_chain(FB_EVENT_FB_REGISTERED, &event);
1668         }
1669 #endif
1670
1671         return fbcon_fb_registered(fb_info);
1672 }
1673
1674 static void unbind_console(struct fb_info *fb_info)
1675 {
1676         int i = fb_info->node;
1677
1678         if (WARN_ON(i < 0 || i >= FB_MAX || registered_fb[i] != fb_info))
1679                 return;
1680
1681         fbcon_fb_unbind(fb_info);
1682 }
1683
1684 static void unlink_framebuffer(struct fb_info *fb_info)
1685 {
1686         int i;
1687
1688         i = fb_info->node;
1689         if (WARN_ON(i < 0 || i >= FB_MAX || registered_fb[i] != fb_info))
1690                 return;
1691
1692         if (!fb_info->dev)
1693                 return;
1694
1695         device_destroy(fb_class, MKDEV(FB_MAJOR, i));
1696
1697         pm_vt_switch_unregister(fb_info->dev);
1698
1699         unbind_console(fb_info);
1700
1701         fb_info->dev = NULL;
1702 }
1703
1704 static void do_unregister_framebuffer(struct fb_info *fb_info)
1705 {
1706         unlink_framebuffer(fb_info);
1707         if (fb_info->pixmap.addr &&
1708             (fb_info->pixmap.flags & FB_PIXMAP_DEFAULT)) {
1709                 kfree(fb_info->pixmap.addr);
1710                 fb_info->pixmap.addr = NULL;
1711         }
1712
1713         fb_destroy_modelist(&fb_info->modelist);
1714         registered_fb[fb_info->node] = NULL;
1715         num_registered_fb--;
1716         fb_cleanup_device(fb_info);
1717 #ifdef CONFIG_GUMSTIX_AM200EPD
1718         {
1719                 struct fb_event event;
1720                 event.info = fb_info;
1721                 fb_notifier_call_chain(FB_EVENT_FB_UNREGISTERED, &event);
1722         }
1723 #endif
1724         fbcon_fb_unregistered(fb_info);
1725
1726         /* this may free fb info */
1727         put_fb_info(fb_info);
1728 }
1729
1730 /**
1731  * remove_conflicting_framebuffers - remove firmware-configured framebuffers
1732  * @a: memory range, users of which are to be removed
1733  * @name: requesting driver name
1734  * @primary: also kick vga16fb if present
1735  *
1736  * This function removes framebuffer devices (initialized by firmware/bootloader)
1737  * which use memory range described by @a. If @a is NULL all such devices are
1738  * removed.
1739  */
1740 int remove_conflicting_framebuffers(struct apertures_struct *a,
1741                                     const char *name, bool primary)
1742 {
1743         bool do_free = false;
1744
1745         if (!a) {
1746                 a = alloc_apertures(1);
1747                 if (!a)
1748                         return -ENOMEM;
1749
1750                 a->ranges[0].base = 0;
1751                 a->ranges[0].size = ~0;
1752                 do_free = true;
1753         }
1754
1755         mutex_lock(&registration_lock);
1756         do_remove_conflicting_framebuffers(a, name, primary);
1757         mutex_unlock(&registration_lock);
1758
1759         if (do_free)
1760                 kfree(a);
1761
1762         return 0;
1763 }
1764 EXPORT_SYMBOL(remove_conflicting_framebuffers);
1765
1766 /**
1767  * remove_conflicting_pci_framebuffers - remove firmware-configured framebuffers for PCI devices
1768  * @pdev: PCI device
1769  * @name: requesting driver name
1770  *
1771  * This function removes framebuffer devices (eg. initialized by firmware)
1772  * using memory range configured for any of @pdev's memory bars.
1773  *
1774  * The function assumes that PCI device with shadowed ROM drives a primary
1775  * display and so kicks out vga16fb.
1776  */
1777 int remove_conflicting_pci_framebuffers(struct pci_dev *pdev, const char *name)
1778 {
1779         struct apertures_struct *ap;
1780         bool primary = false;
1781         int err, idx, bar;
1782
1783         for (idx = 0, bar = 0; bar < PCI_STD_NUM_BARS; bar++) {
1784                 if (!(pci_resource_flags(pdev, bar) & IORESOURCE_MEM))
1785                         continue;
1786                 idx++;
1787         }
1788
1789         ap = alloc_apertures(idx);
1790         if (!ap)
1791                 return -ENOMEM;
1792
1793         for (idx = 0, bar = 0; bar < PCI_STD_NUM_BARS; bar++) {
1794                 if (!(pci_resource_flags(pdev, bar) & IORESOURCE_MEM))
1795                         continue;
1796                 ap->ranges[idx].base = pci_resource_start(pdev, bar);
1797                 ap->ranges[idx].size = pci_resource_len(pdev, bar);
1798                 pci_dbg(pdev, "%s: bar %d: 0x%lx -> 0x%lx\n", __func__, bar,
1799                         (unsigned long)pci_resource_start(pdev, bar),
1800                         (unsigned long)pci_resource_end(pdev, bar));
1801                 idx++;
1802         }
1803
1804 #ifdef CONFIG_X86
1805         primary = pdev->resource[PCI_ROM_RESOURCE].flags &
1806                                         IORESOURCE_ROM_SHADOW;
1807 #endif
1808         err = remove_conflicting_framebuffers(ap, name, primary);
1809         kfree(ap);
1810         return err;
1811 }
1812 EXPORT_SYMBOL(remove_conflicting_pci_framebuffers);
1813
1814 /**
1815  *      register_framebuffer - registers a frame buffer device
1816  *      @fb_info: frame buffer info structure
1817  *
1818  *      Registers a frame buffer device @fb_info.
1819  *
1820  *      Returns negative errno on error, or zero for success.
1821  *
1822  */
1823 int
1824 register_framebuffer(struct fb_info *fb_info)
1825 {
1826         int ret;
1827
1828         mutex_lock(&registration_lock);
1829         ret = do_register_framebuffer(fb_info);
1830         mutex_unlock(&registration_lock);
1831
1832         return ret;
1833 }
1834 EXPORT_SYMBOL(register_framebuffer);
1835
1836 /**
1837  *      unregister_framebuffer - releases a frame buffer device
1838  *      @fb_info: frame buffer info structure
1839  *
1840  *      Unregisters a frame buffer device @fb_info.
1841  *
1842  *      Returns negative errno on error, or zero for success.
1843  *
1844  *      This function will also notify the framebuffer console
1845  *      to release the driver.
1846  *
1847  *      This is meant to be called within a driver's module_exit()
1848  *      function. If this is called outside module_exit(), ensure
1849  *      that the driver implements fb_open() and fb_release() to
1850  *      check that no processes are using the device.
1851  */
1852 void
1853 unregister_framebuffer(struct fb_info *fb_info)
1854 {
1855         bool forced_out = fb_info->forced_out;
1856
1857         if (!forced_out)
1858                 mutex_lock(&registration_lock);
1859         do_unregister_framebuffer(fb_info);
1860         if (!forced_out)
1861                 mutex_unlock(&registration_lock);
1862 }
1863 EXPORT_SYMBOL(unregister_framebuffer);
1864
1865 /**
1866  *      fb_set_suspend - low level driver signals suspend
1867  *      @info: framebuffer affected
1868  *      @state: 0 = resuming, !=0 = suspending
1869  *
1870  *      This is meant to be used by low level drivers to
1871  *      signal suspend/resume to the core & clients.
1872  *      It must be called with the console semaphore held
1873  */
1874 void fb_set_suspend(struct fb_info *info, int state)
1875 {
1876         WARN_CONSOLE_UNLOCKED();
1877
1878         if (state) {
1879                 fbcon_suspended(info);
1880                 info->state = FBINFO_STATE_SUSPENDED;
1881         } else {
1882                 info->state = FBINFO_STATE_RUNNING;
1883                 fbcon_resumed(info);
1884         }
1885 }
1886 EXPORT_SYMBOL(fb_set_suspend);
1887
1888 /**
1889  *      fbmem_init - init frame buffer subsystem
1890  *
1891  *      Initialize the frame buffer subsystem.
1892  *
1893  *      NOTE: This function is _only_ to be called by drivers/char/mem.c.
1894  *
1895  */
1896
1897 static int __init
1898 fbmem_init(void)
1899 {
1900         int ret;
1901
1902         if (!proc_create_seq("fb", 0, NULL, &proc_fb_seq_ops))
1903                 return -ENOMEM;
1904
1905         ret = register_chrdev(FB_MAJOR, "fb", &fb_fops);
1906         if (ret) {
1907                 printk("unable to get major %d for fb devs\n", FB_MAJOR);
1908                 goto err_chrdev;
1909         }
1910
1911         fb_class = class_create(THIS_MODULE, "graphics");
1912         if (IS_ERR(fb_class)) {
1913                 ret = PTR_ERR(fb_class);
1914                 pr_warn("Unable to create fb class; errno = %d\n", ret);
1915                 fb_class = NULL;
1916                 goto err_class;
1917         }
1918
1919         fb_console_init();
1920
1921         return 0;
1922
1923 err_class:
1924         unregister_chrdev(FB_MAJOR, "fb");
1925 err_chrdev:
1926         remove_proc_entry("fb", NULL);
1927         return ret;
1928 }
1929
1930 #ifdef MODULE
1931 module_init(fbmem_init);
1932 static void __exit
1933 fbmem_exit(void)
1934 {
1935         fb_console_exit();
1936
1937         remove_proc_entry("fb", NULL);
1938         class_destroy(fb_class);
1939         unregister_chrdev(FB_MAJOR, "fb");
1940 }
1941
1942 module_exit(fbmem_exit);
1943 MODULE_LICENSE("GPL");
1944 MODULE_DESCRIPTION("Framebuffer base");
1945 #else
1946 subsys_initcall(fbmem_init);
1947 #endif
1948
1949 int fb_new_modelist(struct fb_info *info)
1950 {
1951         struct fb_var_screeninfo var = info->var;
1952         struct list_head *pos, *n;
1953         struct fb_modelist *modelist;
1954         struct fb_videomode *m, mode;
1955         int err;
1956
1957         list_for_each_safe(pos, n, &info->modelist) {
1958                 modelist = list_entry(pos, struct fb_modelist, list);
1959                 m = &modelist->mode;
1960                 fb_videomode_to_var(&var, m);
1961                 var.activate = FB_ACTIVATE_TEST;
1962                 err = fb_set_var(info, &var);
1963                 fb_var_to_videomode(&mode, &var);
1964                 if (err || !fb_mode_is_equal(m, &mode)) {
1965                         list_del(pos);
1966                         kfree(pos);
1967                 }
1968         }
1969
1970         if (list_empty(&info->modelist))
1971                 return 1;
1972
1973         fbcon_new_modelist(info);
1974
1975         return 0;
1976 }
1977
1978 MODULE_LICENSE("GPL");