Merge branch 'rework/kthreads' into for-linus
[platform/kernel/linux-starfive.git] / drivers / video / fbdev / core / fbmem.c
1 /*
2  *  linux/drivers/video/fbmem.c
3  *
4  *  Copyright (C) 1994 Martin Schaller
5  *
6  *      2001 - Documented with DocBook
7  *      - Brad Douglas <brad@neruo.com>
8  *
9  * This file is subject to the terms and conditions of the GNU General Public
10  * License.  See the file COPYING in the main directory of this archive
11  * for more details.
12  */
13
14 #include <linux/module.h>
15
16 #include <linux/compat.h>
17 #include <linux/types.h>
18 #include <linux/errno.h>
19 #include <linux/kernel.h>
20 #include <linux/major.h>
21 #include <linux/slab.h>
22 #include <linux/mm.h>
23 #include <linux/mman.h>
24 #include <linux/vt.h>
25 #include <linux/init.h>
26 #include <linux/linux_logo.h>
27 #include <linux/proc_fs.h>
28 #include <linux/platform_device.h>
29 #include <linux/seq_file.h>
30 #include <linux/console.h>
31 #include <linux/kmod.h>
32 #include <linux/err.h>
33 #include <linux/device.h>
34 #include <linux/efi.h>
35 #include <linux/fb.h>
36 #include <linux/fbcon.h>
37 #include <linux/mem_encrypt.h>
38 #include <linux/pci.h>
39
40 #include <asm/fb.h>
41
42
43     /*
44      *  Frame buffer device initialization and setup routines
45      */
46
47 #define FBPIXMAPSIZE    (1024 * 8)
48
49 static DEFINE_MUTEX(registration_lock);
50
51 struct fb_info *registered_fb[FB_MAX] __read_mostly;
52 EXPORT_SYMBOL(registered_fb);
53
54 int num_registered_fb __read_mostly;
55 EXPORT_SYMBOL(num_registered_fb);
56
57 bool fb_center_logo __read_mostly;
58
59 int fb_logo_count __read_mostly = -1;
60
61 static struct fb_info *get_fb_info(unsigned int idx)
62 {
63         struct fb_info *fb_info;
64
65         if (idx >= FB_MAX)
66                 return ERR_PTR(-ENODEV);
67
68         mutex_lock(&registration_lock);
69         fb_info = registered_fb[idx];
70         if (fb_info)
71                 refcount_inc(&fb_info->count);
72         mutex_unlock(&registration_lock);
73
74         return fb_info;
75 }
76
77 static void put_fb_info(struct fb_info *fb_info)
78 {
79         if (!refcount_dec_and_test(&fb_info->count))
80                 return;
81         if (fb_info->fbops->fb_destroy)
82                 fb_info->fbops->fb_destroy(fb_info);
83 }
84
85 /*
86  * Helpers
87  */
88
89 int fb_get_color_depth(struct fb_var_screeninfo *var,
90                        struct fb_fix_screeninfo *fix)
91 {
92         int depth = 0;
93
94         if (fix->visual == FB_VISUAL_MONO01 ||
95             fix->visual == FB_VISUAL_MONO10)
96                 depth = 1;
97         else {
98                 if (var->green.length == var->blue.length &&
99                     var->green.length == var->red.length &&
100                     var->green.offset == var->blue.offset &&
101                     var->green.offset == var->red.offset)
102                         depth = var->green.length;
103                 else
104                         depth = var->green.length + var->red.length +
105                                 var->blue.length;
106         }
107
108         return depth;
109 }
110 EXPORT_SYMBOL(fb_get_color_depth);
111
112 /*
113  * Data padding functions.
114  */
115 void fb_pad_aligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 s_pitch, u32 height)
116 {
117         __fb_pad_aligned_buffer(dst, d_pitch, src, s_pitch, height);
118 }
119 EXPORT_SYMBOL(fb_pad_aligned_buffer);
120
121 void fb_pad_unaligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 idx, u32 height,
122                                 u32 shift_high, u32 shift_low, u32 mod)
123 {
124         u8 mask = (u8) (0xfff << shift_high), tmp;
125         int i, j;
126
127         for (i = height; i--; ) {
128                 for (j = 0; j < idx; j++) {
129                         tmp = dst[j];
130                         tmp &= mask;
131                         tmp |= *src >> shift_low;
132                         dst[j] = tmp;
133                         tmp = *src << shift_high;
134                         dst[j+1] = tmp;
135                         src++;
136                 }
137                 tmp = dst[idx];
138                 tmp &= mask;
139                 tmp |= *src >> shift_low;
140                 dst[idx] = tmp;
141                 if (shift_high < mod) {
142                         tmp = *src << shift_high;
143                         dst[idx+1] = tmp;
144                 }
145                 src++;
146                 dst += d_pitch;
147         }
148 }
149 EXPORT_SYMBOL(fb_pad_unaligned_buffer);
150
151 /*
152  * we need to lock this section since fb_cursor
153  * may use fb_imageblit()
154  */
155 char* fb_get_buffer_offset(struct fb_info *info, struct fb_pixmap *buf, u32 size)
156 {
157         u32 align = buf->buf_align - 1, offset;
158         char *addr = buf->addr;
159
160         /* If IO mapped, we need to sync before access, no sharing of
161          * the pixmap is done
162          */
163         if (buf->flags & FB_PIXMAP_IO) {
164                 if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
165                         info->fbops->fb_sync(info);
166                 return addr;
167         }
168
169         /* See if we fit in the remaining pixmap space */
170         offset = buf->offset + align;
171         offset &= ~align;
172         if (offset + size > buf->size) {
173                 /* We do not fit. In order to be able to re-use the buffer,
174                  * we must ensure no asynchronous DMA'ing or whatever operation
175                  * is in progress, we sync for that.
176                  */
177                 if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
178                         info->fbops->fb_sync(info);
179                 offset = 0;
180         }
181         buf->offset = offset + size;
182         addr += offset;
183
184         return addr;
185 }
186 EXPORT_SYMBOL(fb_get_buffer_offset);
187
188 #ifdef CONFIG_LOGO
189
190 static inline unsigned safe_shift(unsigned d, int n)
191 {
192         return n < 0 ? d >> -n : d << n;
193 }
194
195 static void fb_set_logocmap(struct fb_info *info,
196                                    const struct linux_logo *logo)
197 {
198         struct fb_cmap palette_cmap;
199         u16 palette_green[16];
200         u16 palette_blue[16];
201         u16 palette_red[16];
202         int i, j, n;
203         const unsigned char *clut = logo->clut;
204
205         palette_cmap.start = 0;
206         palette_cmap.len = 16;
207         palette_cmap.red = palette_red;
208         palette_cmap.green = palette_green;
209         palette_cmap.blue = palette_blue;
210         palette_cmap.transp = NULL;
211
212         for (i = 0; i < logo->clutsize; i += n) {
213                 n = logo->clutsize - i;
214                 /* palette_cmap provides space for only 16 colors at once */
215                 if (n > 16)
216                         n = 16;
217                 palette_cmap.start = 32 + i;
218                 palette_cmap.len = n;
219                 for (j = 0; j < n; ++j) {
220                         palette_cmap.red[j] = clut[0] << 8 | clut[0];
221                         palette_cmap.green[j] = clut[1] << 8 | clut[1];
222                         palette_cmap.blue[j] = clut[2] << 8 | clut[2];
223                         clut += 3;
224                 }
225                 fb_set_cmap(&palette_cmap, info);
226         }
227 }
228
229 static void  fb_set_logo_truepalette(struct fb_info *info,
230                                             const struct linux_logo *logo,
231                                             u32 *palette)
232 {
233         static const unsigned char mask[] = { 0,0x80,0xc0,0xe0,0xf0,0xf8,0xfc,0xfe,0xff };
234         unsigned char redmask, greenmask, bluemask;
235         int redshift, greenshift, blueshift;
236         int i;
237         const unsigned char *clut = logo->clut;
238
239         /*
240          * We have to create a temporary palette since console palette is only
241          * 16 colors long.
242          */
243         /* Bug: Doesn't obey msb_right ... (who needs that?) */
244         redmask   = mask[info->var.red.length   < 8 ? info->var.red.length   : 8];
245         greenmask = mask[info->var.green.length < 8 ? info->var.green.length : 8];
246         bluemask  = mask[info->var.blue.length  < 8 ? info->var.blue.length  : 8];
247         redshift   = info->var.red.offset   - (8 - info->var.red.length);
248         greenshift = info->var.green.offset - (8 - info->var.green.length);
249         blueshift  = info->var.blue.offset  - (8 - info->var.blue.length);
250
251         for ( i = 0; i < logo->clutsize; i++) {
252                 palette[i+32] = (safe_shift((clut[0] & redmask), redshift) |
253                                  safe_shift((clut[1] & greenmask), greenshift) |
254                                  safe_shift((clut[2] & bluemask), blueshift));
255                 clut += 3;
256         }
257 }
258
259 static void fb_set_logo_directpalette(struct fb_info *info,
260                                              const struct linux_logo *logo,
261                                              u32 *palette)
262 {
263         int redshift, greenshift, blueshift;
264         int i;
265
266         redshift = info->var.red.offset;
267         greenshift = info->var.green.offset;
268         blueshift = info->var.blue.offset;
269
270         for (i = 32; i < 32 + logo->clutsize; i++)
271                 palette[i] = i << redshift | i << greenshift | i << blueshift;
272 }
273
274 static void fb_set_logo(struct fb_info *info,
275                                const struct linux_logo *logo, u8 *dst,
276                                int depth)
277 {
278         int i, j, k;
279         const u8 *src = logo->data;
280         u8 xor = (info->fix.visual == FB_VISUAL_MONO01) ? 0xff : 0;
281         u8 fg = 1, d;
282
283         switch (fb_get_color_depth(&info->var, &info->fix)) {
284         case 1:
285                 fg = 1;
286                 break;
287         case 2:
288                 fg = 3;
289                 break;
290         default:
291                 fg = 7;
292                 break;
293         }
294
295         if (info->fix.visual == FB_VISUAL_MONO01 ||
296             info->fix.visual == FB_VISUAL_MONO10)
297                 fg = ~((u8) (0xfff << info->var.green.length));
298
299         switch (depth) {
300         case 4:
301                 for (i = 0; i < logo->height; i++)
302                         for (j = 0; j < logo->width; src++) {
303                                 *dst++ = *src >> 4;
304                                 j++;
305                                 if (j < logo->width) {
306                                         *dst++ = *src & 0x0f;
307                                         j++;
308                                 }
309                         }
310                 break;
311         case 1:
312                 for (i = 0; i < logo->height; i++) {
313                         for (j = 0; j < logo->width; src++) {
314                                 d = *src ^ xor;
315                                 for (k = 7; k >= 0 && j < logo->width; k--) {
316                                         *dst++ = ((d >> k) & 1) ? fg : 0;
317                                         j++;
318                                 }
319                         }
320                 }
321                 break;
322         }
323 }
324
325 /*
326  * Three (3) kinds of logo maps exist.  linux_logo_clut224 (>16 colors),
327  * linux_logo_vga16 (16 colors) and linux_logo_mono (2 colors).  Depending on
328  * the visual format and color depth of the framebuffer, the DAC, the
329  * pseudo_palette, and the logo data will be adjusted accordingly.
330  *
331  * Case 1 - linux_logo_clut224:
332  * Color exceeds the number of console colors (16), thus we set the hardware DAC
333  * using fb_set_cmap() appropriately.  The "needs_cmapreset"  flag will be set.
334  *
335  * For visuals that require color info from the pseudo_palette, we also construct
336  * one for temporary use. The "needs_directpalette" or "needs_truepalette" flags
337  * will be set.
338  *
339  * Case 2 - linux_logo_vga16:
340  * The number of colors just matches the console colors, thus there is no need
341  * to set the DAC or the pseudo_palette.  However, the bitmap is packed, ie,
342  * each byte contains color information for two pixels (upper and lower nibble).
343  * To be consistent with fb_imageblit() usage, we therefore separate the two
344  * nibbles into separate bytes. The "depth" flag will be set to 4.
345  *
346  * Case 3 - linux_logo_mono:
347  * This is similar with Case 2.  Each byte contains information for 8 pixels.
348  * We isolate each bit and expand each into a byte. The "depth" flag will
349  * be set to 1.
350  */
351 static struct logo_data {
352         int depth;
353         int needs_directpalette;
354         int needs_truepalette;
355         int needs_cmapreset;
356         const struct linux_logo *logo;
357 } fb_logo __read_mostly;
358
359 static void fb_rotate_logo_ud(const u8 *in, u8 *out, u32 width, u32 height)
360 {
361         u32 size = width * height, i;
362
363         out += size - 1;
364
365         for (i = size; i--; )
366                 *out-- = *in++;
367 }
368
369 static void fb_rotate_logo_cw(const u8 *in, u8 *out, u32 width, u32 height)
370 {
371         int i, j, h = height - 1;
372
373         for (i = 0; i < height; i++)
374                 for (j = 0; j < width; j++)
375                                 out[height * j + h - i] = *in++;
376 }
377
378 static void fb_rotate_logo_ccw(const u8 *in, u8 *out, u32 width, u32 height)
379 {
380         int i, j, w = width - 1;
381
382         for (i = 0; i < height; i++)
383                 for (j = 0; j < width; j++)
384                         out[height * (w - j) + i] = *in++;
385 }
386
387 static void fb_rotate_logo(struct fb_info *info, u8 *dst,
388                            struct fb_image *image, int rotate)
389 {
390         u32 tmp;
391
392         if (rotate == FB_ROTATE_UD) {
393                 fb_rotate_logo_ud(image->data, dst, image->width,
394                                   image->height);
395                 image->dx = info->var.xres - image->width - image->dx;
396                 image->dy = info->var.yres - image->height - image->dy;
397         } else if (rotate == FB_ROTATE_CW) {
398                 fb_rotate_logo_cw(image->data, dst, image->width,
399                                   image->height);
400                 swap(image->width, image->height);
401                 tmp = image->dy;
402                 image->dy = image->dx;
403                 image->dx = info->var.xres - image->width - tmp;
404         } else if (rotate == FB_ROTATE_CCW) {
405                 fb_rotate_logo_ccw(image->data, dst, image->width,
406                                    image->height);
407                 swap(image->width, image->height);
408                 tmp = image->dx;
409                 image->dx = image->dy;
410                 image->dy = info->var.yres - image->height - tmp;
411         }
412
413         image->data = dst;
414 }
415
416 static void fb_do_show_logo(struct fb_info *info, struct fb_image *image,
417                             int rotate, unsigned int num)
418 {
419         unsigned int x;
420
421         if (image->width > info->var.xres || image->height > info->var.yres)
422                 return;
423
424         if (rotate == FB_ROTATE_UR) {
425                 for (x = 0;
426                      x < num && image->dx + image->width <= info->var.xres;
427                      x++) {
428                         info->fbops->fb_imageblit(info, image);
429                         image->dx += image->width + 8;
430                 }
431         } else if (rotate == FB_ROTATE_UD) {
432                 u32 dx = image->dx;
433
434                 for (x = 0; x < num && image->dx <= dx; x++) {
435                         info->fbops->fb_imageblit(info, image);
436                         image->dx -= image->width + 8;
437                 }
438         } else if (rotate == FB_ROTATE_CW) {
439                 for (x = 0;
440                      x < num && image->dy + image->height <= info->var.yres;
441                      x++) {
442                         info->fbops->fb_imageblit(info, image);
443                         image->dy += image->height + 8;
444                 }
445         } else if (rotate == FB_ROTATE_CCW) {
446                 u32 dy = image->dy;
447
448                 for (x = 0; x < num && image->dy <= dy; x++) {
449                         info->fbops->fb_imageblit(info, image);
450                         image->dy -= image->height + 8;
451                 }
452         }
453 }
454
455 static int fb_show_logo_line(struct fb_info *info, int rotate,
456                              const struct linux_logo *logo, int y,
457                              unsigned int n)
458 {
459         u32 *palette = NULL, *saved_pseudo_palette = NULL;
460         unsigned char *logo_new = NULL, *logo_rotate = NULL;
461         struct fb_image image;
462
463         /* Return if the frame buffer is not mapped or suspended */
464         if (logo == NULL || info->state != FBINFO_STATE_RUNNING ||
465             info->fbops->owner)
466                 return 0;
467
468         image.depth = 8;
469         image.data = logo->data;
470
471         if (fb_logo.needs_cmapreset)
472                 fb_set_logocmap(info, logo);
473
474         if (fb_logo.needs_truepalette ||
475             fb_logo.needs_directpalette) {
476                 palette = kmalloc(256 * 4, GFP_KERNEL);
477                 if (palette == NULL)
478                         return 0;
479
480                 if (fb_logo.needs_truepalette)
481                         fb_set_logo_truepalette(info, logo, palette);
482                 else
483                         fb_set_logo_directpalette(info, logo, palette);
484
485                 saved_pseudo_palette = info->pseudo_palette;
486                 info->pseudo_palette = palette;
487         }
488
489         if (fb_logo.depth <= 4) {
490                 logo_new = kmalloc_array(logo->width, logo->height,
491                                          GFP_KERNEL);
492                 if (logo_new == NULL) {
493                         kfree(palette);
494                         if (saved_pseudo_palette)
495                                 info->pseudo_palette = saved_pseudo_palette;
496                         return 0;
497                 }
498                 image.data = logo_new;
499                 fb_set_logo(info, logo, logo_new, fb_logo.depth);
500         }
501
502         if (fb_center_logo) {
503                 int xres = info->var.xres;
504                 int yres = info->var.yres;
505
506                 if (rotate == FB_ROTATE_CW || rotate == FB_ROTATE_CCW) {
507                         xres = info->var.yres;
508                         yres = info->var.xres;
509                 }
510
511                 while (n && (n * (logo->width + 8) - 8 > xres))
512                         --n;
513                 image.dx = (xres - n * (logo->width + 8) - 8) / 2;
514                 image.dy = y ?: (yres - logo->height) / 2;
515         } else {
516                 image.dx = 0;
517                 image.dy = y;
518         }
519
520         image.width = logo->width;
521         image.height = logo->height;
522
523         if (rotate) {
524                 logo_rotate = kmalloc_array(logo->width, logo->height,
525                                             GFP_KERNEL);
526                 if (logo_rotate)
527                         fb_rotate_logo(info, logo_rotate, &image, rotate);
528         }
529
530         fb_do_show_logo(info, &image, rotate, n);
531
532         kfree(palette);
533         if (saved_pseudo_palette != NULL)
534                 info->pseudo_palette = saved_pseudo_palette;
535         kfree(logo_new);
536         kfree(logo_rotate);
537         return image.dy + logo->height;
538 }
539
540
541 #ifdef CONFIG_FB_LOGO_EXTRA
542
543 #define FB_LOGO_EX_NUM_MAX 10
544 static struct logo_data_extra {
545         const struct linux_logo *logo;
546         unsigned int n;
547 } fb_logo_ex[FB_LOGO_EX_NUM_MAX];
548 static unsigned int fb_logo_ex_num;
549
550 void fb_append_extra_logo(const struct linux_logo *logo, unsigned int n)
551 {
552         if (!n || fb_logo_ex_num == FB_LOGO_EX_NUM_MAX)
553                 return;
554
555         fb_logo_ex[fb_logo_ex_num].logo = logo;
556         fb_logo_ex[fb_logo_ex_num].n = n;
557         fb_logo_ex_num++;
558 }
559
560 static int fb_prepare_extra_logos(struct fb_info *info, unsigned int height,
561                                   unsigned int yres)
562 {
563         unsigned int i;
564
565         /* FIXME: logo_ex supports only truecolor fb. */
566         if (info->fix.visual != FB_VISUAL_TRUECOLOR)
567                 fb_logo_ex_num = 0;
568
569         for (i = 0; i < fb_logo_ex_num; i++) {
570                 if (fb_logo_ex[i].logo->type != fb_logo.logo->type) {
571                         fb_logo_ex[i].logo = NULL;
572                         continue;
573                 }
574                 height += fb_logo_ex[i].logo->height;
575                 if (height > yres) {
576                         height -= fb_logo_ex[i].logo->height;
577                         fb_logo_ex_num = i;
578                         break;
579                 }
580         }
581         return height;
582 }
583
584 static int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
585 {
586         unsigned int i;
587
588         for (i = 0; i < fb_logo_ex_num; i++)
589                 y = fb_show_logo_line(info, rotate,
590                                       fb_logo_ex[i].logo, y, fb_logo_ex[i].n);
591
592         return y;
593 }
594
595 #else /* !CONFIG_FB_LOGO_EXTRA */
596
597 static inline int fb_prepare_extra_logos(struct fb_info *info,
598                                          unsigned int height,
599                                          unsigned int yres)
600 {
601         return height;
602 }
603
604 static inline int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
605 {
606         return y;
607 }
608
609 #endif /* CONFIG_FB_LOGO_EXTRA */
610
611
612 int fb_prepare_logo(struct fb_info *info, int rotate)
613 {
614         int depth = fb_get_color_depth(&info->var, &info->fix);
615         unsigned int yres;
616         int height;
617
618         memset(&fb_logo, 0, sizeof(struct logo_data));
619
620         if (info->flags & FBINFO_MISC_TILEBLITTING ||
621             info->fbops->owner || !fb_logo_count)
622                 return 0;
623
624         if (info->fix.visual == FB_VISUAL_DIRECTCOLOR) {
625                 depth = info->var.blue.length;
626                 if (info->var.red.length < depth)
627                         depth = info->var.red.length;
628                 if (info->var.green.length < depth)
629                         depth = info->var.green.length;
630         }
631
632         if (info->fix.visual == FB_VISUAL_STATIC_PSEUDOCOLOR && depth > 4) {
633                 /* assume console colormap */
634                 depth = 4;
635         }
636
637         /* Return if no suitable logo was found */
638         fb_logo.logo = fb_find_logo(depth);
639
640         if (!fb_logo.logo) {
641                 return 0;
642         }
643
644         if (rotate == FB_ROTATE_UR || rotate == FB_ROTATE_UD)
645                 yres = info->var.yres;
646         else
647                 yres = info->var.xres;
648
649         if (fb_logo.logo->height > yres) {
650                 fb_logo.logo = NULL;
651                 return 0;
652         }
653
654         /* What depth we asked for might be different from what we get */
655         if (fb_logo.logo->type == LINUX_LOGO_CLUT224)
656                 fb_logo.depth = 8;
657         else if (fb_logo.logo->type == LINUX_LOGO_VGA16)
658                 fb_logo.depth = 4;
659         else
660                 fb_logo.depth = 1;
661
662
663         if (fb_logo.depth > 4 && depth > 4) {
664                 switch (info->fix.visual) {
665                 case FB_VISUAL_TRUECOLOR:
666                         fb_logo.needs_truepalette = 1;
667                         break;
668                 case FB_VISUAL_DIRECTCOLOR:
669                         fb_logo.needs_directpalette = 1;
670                         fb_logo.needs_cmapreset = 1;
671                         break;
672                 case FB_VISUAL_PSEUDOCOLOR:
673                         fb_logo.needs_cmapreset = 1;
674                         break;
675                 }
676         }
677
678         height = fb_logo.logo->height;
679         if (fb_center_logo)
680                 height += (yres - fb_logo.logo->height) / 2;
681
682         return fb_prepare_extra_logos(info, height, yres);
683 }
684
685 int fb_show_logo(struct fb_info *info, int rotate)
686 {
687         unsigned int count;
688         int y;
689
690         if (!fb_logo_count)
691                 return 0;
692
693         count = fb_logo_count < 0 ? num_online_cpus() : fb_logo_count;
694         y = fb_show_logo_line(info, rotate, fb_logo.logo, 0, count);
695         y = fb_show_extra_logos(info, y, rotate);
696
697         return y;
698 }
699 #else
700 int fb_prepare_logo(struct fb_info *info, int rotate) { return 0; }
701 int fb_show_logo(struct fb_info *info, int rotate) { return 0; }
702 #endif /* CONFIG_LOGO */
703 EXPORT_SYMBOL(fb_prepare_logo);
704 EXPORT_SYMBOL(fb_show_logo);
705
706 static void *fb_seq_start(struct seq_file *m, loff_t *pos)
707 {
708         mutex_lock(&registration_lock);
709         return (*pos < FB_MAX) ? pos : NULL;
710 }
711
712 static void *fb_seq_next(struct seq_file *m, void *v, loff_t *pos)
713 {
714         (*pos)++;
715         return (*pos < FB_MAX) ? pos : NULL;
716 }
717
718 static void fb_seq_stop(struct seq_file *m, void *v)
719 {
720         mutex_unlock(&registration_lock);
721 }
722
723 static int fb_seq_show(struct seq_file *m, void *v)
724 {
725         int i = *(loff_t *)v;
726         struct fb_info *fi = registered_fb[i];
727
728         if (fi)
729                 seq_printf(m, "%d %s\n", fi->node, fi->fix.id);
730         return 0;
731 }
732
733 static const struct seq_operations __maybe_unused proc_fb_seq_ops = {
734         .start  = fb_seq_start,
735         .next   = fb_seq_next,
736         .stop   = fb_seq_stop,
737         .show   = fb_seq_show,
738 };
739
740 /*
741  * We hold a reference to the fb_info in file->private_data,
742  * but if the current registered fb has changed, we don't
743  * actually want to use it.
744  *
745  * So look up the fb_info using the inode minor number,
746  * and just verify it against the reference we have.
747  */
748 static struct fb_info *file_fb_info(struct file *file)
749 {
750         struct inode *inode = file_inode(file);
751         int fbidx = iminor(inode);
752         struct fb_info *info = registered_fb[fbidx];
753
754         if (info != file->private_data)
755                 info = NULL;
756         return info;
757 }
758
759 static ssize_t
760 fb_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)
761 {
762         unsigned long p = *ppos;
763         struct fb_info *info = file_fb_info(file);
764         u8 *buffer, *dst;
765         u8 __iomem *src;
766         int c, cnt = 0, err = 0;
767         unsigned long total_size;
768
769         if (!info || ! info->screen_base)
770                 return -ENODEV;
771
772         if (info->state != FBINFO_STATE_RUNNING)
773                 return -EPERM;
774
775         if (info->fbops->fb_read)
776                 return info->fbops->fb_read(info, buf, count, ppos);
777
778         total_size = info->screen_size;
779
780         if (total_size == 0)
781                 total_size = info->fix.smem_len;
782
783         if (p >= total_size)
784                 return 0;
785
786         if (count >= total_size)
787                 count = total_size;
788
789         if (count + p > total_size)
790                 count = total_size - p;
791
792         buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
793                          GFP_KERNEL);
794         if (!buffer)
795                 return -ENOMEM;
796
797         src = (u8 __iomem *) (info->screen_base + p);
798
799         if (info->fbops->fb_sync)
800                 info->fbops->fb_sync(info);
801
802         while (count) {
803                 c  = (count > PAGE_SIZE) ? PAGE_SIZE : count;
804                 dst = buffer;
805                 fb_memcpy_fromfb(dst, src, c);
806                 dst += c;
807                 src += c;
808
809                 if (copy_to_user(buf, buffer, c)) {
810                         err = -EFAULT;
811                         break;
812                 }
813                 *ppos += c;
814                 buf += c;
815                 cnt += c;
816                 count -= c;
817         }
818
819         kfree(buffer);
820
821         return (err) ? err : cnt;
822 }
823
824 static ssize_t
825 fb_write(struct file *file, const char __user *buf, size_t count, loff_t *ppos)
826 {
827         unsigned long p = *ppos;
828         struct fb_info *info = file_fb_info(file);
829         u8 *buffer, *src;
830         u8 __iomem *dst;
831         int c, cnt = 0, err = 0;
832         unsigned long total_size;
833
834         if (!info || !info->screen_base)
835                 return -ENODEV;
836
837         if (info->state != FBINFO_STATE_RUNNING)
838                 return -EPERM;
839
840         if (info->fbops->fb_write)
841                 return info->fbops->fb_write(info, buf, count, ppos);
842
843         total_size = info->screen_size;
844
845         if (total_size == 0)
846                 total_size = info->fix.smem_len;
847
848         if (p > total_size)
849                 return -EFBIG;
850
851         if (count > total_size) {
852                 err = -EFBIG;
853                 count = total_size;
854         }
855
856         if (count + p > total_size) {
857                 if (!err)
858                         err = -ENOSPC;
859
860                 count = total_size - p;
861         }
862
863         buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
864                          GFP_KERNEL);
865         if (!buffer)
866                 return -ENOMEM;
867
868         dst = (u8 __iomem *) (info->screen_base + p);
869
870         if (info->fbops->fb_sync)
871                 info->fbops->fb_sync(info);
872
873         while (count) {
874                 c = (count > PAGE_SIZE) ? PAGE_SIZE : count;
875                 src = buffer;
876
877                 if (copy_from_user(src, buf, c)) {
878                         err = -EFAULT;
879                         break;
880                 }
881
882                 fb_memcpy_tofb(dst, src, c);
883                 dst += c;
884                 src += c;
885                 *ppos += c;
886                 buf += c;
887                 cnt += c;
888                 count -= c;
889         }
890
891         kfree(buffer);
892
893         return (cnt) ? cnt : err;
894 }
895
896 int
897 fb_pan_display(struct fb_info *info, struct fb_var_screeninfo *var)
898 {
899         struct fb_fix_screeninfo *fix = &info->fix;
900         unsigned int yres = info->var.yres;
901         int err = 0;
902
903         if (var->yoffset > 0) {
904                 if (var->vmode & FB_VMODE_YWRAP) {
905                         if (!fix->ywrapstep || (var->yoffset % fix->ywrapstep))
906                                 err = -EINVAL;
907                         else
908                                 yres = 0;
909                 } else if (!fix->ypanstep || (var->yoffset % fix->ypanstep))
910                         err = -EINVAL;
911         }
912
913         if (var->xoffset > 0 && (!fix->xpanstep ||
914                                  (var->xoffset % fix->xpanstep)))
915                 err = -EINVAL;
916
917         if (err || !info->fbops->fb_pan_display ||
918             var->yoffset > info->var.yres_virtual - yres ||
919             var->xoffset > info->var.xres_virtual - info->var.xres)
920                 return -EINVAL;
921
922         if ((err = info->fbops->fb_pan_display(var, info)))
923                 return err;
924         info->var.xoffset = var->xoffset;
925         info->var.yoffset = var->yoffset;
926         if (var->vmode & FB_VMODE_YWRAP)
927                 info->var.vmode |= FB_VMODE_YWRAP;
928         else
929                 info->var.vmode &= ~FB_VMODE_YWRAP;
930         return 0;
931 }
932 EXPORT_SYMBOL(fb_pan_display);
933
934 static int fb_check_caps(struct fb_info *info, struct fb_var_screeninfo *var,
935                          u32 activate)
936 {
937         struct fb_blit_caps caps, fbcaps;
938         int err = 0;
939
940         memset(&caps, 0, sizeof(caps));
941         memset(&fbcaps, 0, sizeof(fbcaps));
942         caps.flags = (activate & FB_ACTIVATE_ALL) ? 1 : 0;
943         fbcon_get_requirement(info, &caps);
944         info->fbops->fb_get_caps(info, &fbcaps, var);
945
946         if (((fbcaps.x ^ caps.x) & caps.x) ||
947             ((fbcaps.y ^ caps.y) & caps.y) ||
948             (fbcaps.len < caps.len))
949                 err = -EINVAL;
950
951         return err;
952 }
953
954 int
955 fb_set_var(struct fb_info *info, struct fb_var_screeninfo *var)
956 {
957         int ret = 0;
958         u32 activate;
959         struct fb_var_screeninfo old_var;
960         struct fb_videomode mode;
961         struct fb_event event;
962         u32 unused;
963
964         if (var->activate & FB_ACTIVATE_INV_MODE) {
965                 struct fb_videomode mode1, mode2;
966
967                 fb_var_to_videomode(&mode1, var);
968                 fb_var_to_videomode(&mode2, &info->var);
969                 /* make sure we don't delete the videomode of current var */
970                 ret = fb_mode_is_equal(&mode1, &mode2);
971                 if (!ret) {
972                         ret = fbcon_mode_deleted(info, &mode1);
973                         if (!ret)
974                                 fb_delete_videomode(&mode1, &info->modelist);
975                 }
976
977                 return ret ? -EINVAL : 0;
978         }
979
980         if (!(var->activate & FB_ACTIVATE_FORCE) &&
981             !memcmp(&info->var, var, sizeof(struct fb_var_screeninfo)))
982                 return 0;
983
984         activate = var->activate;
985
986         /* When using FOURCC mode, make sure the red, green, blue and
987          * transp fields are set to 0.
988          */
989         if ((info->fix.capabilities & FB_CAP_FOURCC) &&
990             var->grayscale > 1) {
991                 if (var->red.offset     || var->green.offset    ||
992                     var->blue.offset    || var->transp.offset   ||
993                     var->red.length     || var->green.length    ||
994                     var->blue.length    || var->transp.length   ||
995                     var->red.msb_right  || var->green.msb_right ||
996                     var->blue.msb_right || var->transp.msb_right)
997                         return -EINVAL;
998         }
999
1000         if (!info->fbops->fb_check_var) {
1001                 *var = info->var;
1002                 return 0;
1003         }
1004
1005         /* bitfill_aligned() assumes that it's at least 8x8 */
1006         if (var->xres < 8 || var->yres < 8)
1007                 return -EINVAL;
1008
1009         /* Too huge resolution causes multiplication overflow. */
1010         if (check_mul_overflow(var->xres, var->yres, &unused) ||
1011             check_mul_overflow(var->xres_virtual, var->yres_virtual, &unused))
1012                 return -EINVAL;
1013
1014         ret = info->fbops->fb_check_var(var, info);
1015
1016         if (ret)
1017                 return ret;
1018
1019         if ((var->activate & FB_ACTIVATE_MASK) != FB_ACTIVATE_NOW)
1020                 return 0;
1021
1022         if (info->fbops->fb_get_caps) {
1023                 ret = fb_check_caps(info, var, activate);
1024
1025                 if (ret)
1026                         return ret;
1027         }
1028
1029         old_var = info->var;
1030         info->var = *var;
1031
1032         if (info->fbops->fb_set_par) {
1033                 ret = info->fbops->fb_set_par(info);
1034
1035                 if (ret) {
1036                         info->var = old_var;
1037                         printk(KERN_WARNING "detected "
1038                                 "fb_set_par error, "
1039                                 "error code: %d\n", ret);
1040                         return ret;
1041                 }
1042         }
1043
1044         fb_pan_display(info, &info->var);
1045         fb_set_cmap(&info->cmap, info);
1046         fb_var_to_videomode(&mode, &info->var);
1047
1048         if (info->modelist.prev && info->modelist.next &&
1049             !list_empty(&info->modelist))
1050                 ret = fb_add_videomode(&mode, &info->modelist);
1051
1052         if (ret)
1053                 return ret;
1054
1055         event.info = info;
1056         event.data = &mode;
1057         fb_notifier_call_chain(FB_EVENT_MODE_CHANGE, &event);
1058
1059         return 0;
1060 }
1061 EXPORT_SYMBOL(fb_set_var);
1062
1063 int
1064 fb_blank(struct fb_info *info, int blank)
1065 {
1066         struct fb_event event;
1067         int ret = -EINVAL;
1068
1069         if (blank > FB_BLANK_POWERDOWN)
1070                 blank = FB_BLANK_POWERDOWN;
1071
1072         event.info = info;
1073         event.data = &blank;
1074
1075         if (info->fbops->fb_blank)
1076                 ret = info->fbops->fb_blank(blank, info);
1077
1078         if (!ret)
1079                 fb_notifier_call_chain(FB_EVENT_BLANK, &event);
1080
1081         return ret;
1082 }
1083 EXPORT_SYMBOL(fb_blank);
1084
1085 static long do_fb_ioctl(struct fb_info *info, unsigned int cmd,
1086                         unsigned long arg)
1087 {
1088         const struct fb_ops *fb;
1089         struct fb_var_screeninfo var;
1090         struct fb_fix_screeninfo fix;
1091         struct fb_cmap cmap_from;
1092         struct fb_cmap_user cmap;
1093         void __user *argp = (void __user *)arg;
1094         long ret = 0;
1095
1096         switch (cmd) {
1097         case FBIOGET_VSCREENINFO:
1098                 lock_fb_info(info);
1099                 var = info->var;
1100                 unlock_fb_info(info);
1101
1102                 ret = copy_to_user(argp, &var, sizeof(var)) ? -EFAULT : 0;
1103                 break;
1104         case FBIOPUT_VSCREENINFO:
1105                 if (copy_from_user(&var, argp, sizeof(var)))
1106                         return -EFAULT;
1107                 console_lock();
1108                 lock_fb_info(info);
1109                 ret = fb_set_var(info, &var);
1110                 if (!ret)
1111                         fbcon_update_vcs(info, var.activate & FB_ACTIVATE_ALL);
1112                 unlock_fb_info(info);
1113                 console_unlock();
1114                 if (!ret && copy_to_user(argp, &var, sizeof(var)))
1115                         ret = -EFAULT;
1116                 break;
1117         case FBIOGET_FSCREENINFO:
1118                 lock_fb_info(info);
1119                 memcpy(&fix, &info->fix, sizeof(fix));
1120                 if (info->flags & FBINFO_HIDE_SMEM_START)
1121                         fix.smem_start = 0;
1122                 unlock_fb_info(info);
1123
1124                 ret = copy_to_user(argp, &fix, sizeof(fix)) ? -EFAULT : 0;
1125                 break;
1126         case FBIOPUTCMAP:
1127                 if (copy_from_user(&cmap, argp, sizeof(cmap)))
1128                         return -EFAULT;
1129                 ret = fb_set_user_cmap(&cmap, info);
1130                 break;
1131         case FBIOGETCMAP:
1132                 if (copy_from_user(&cmap, argp, sizeof(cmap)))
1133                         return -EFAULT;
1134                 lock_fb_info(info);
1135                 cmap_from = info->cmap;
1136                 unlock_fb_info(info);
1137                 ret = fb_cmap_to_user(&cmap_from, &cmap);
1138                 break;
1139         case FBIOPAN_DISPLAY:
1140                 if (copy_from_user(&var, argp, sizeof(var)))
1141                         return -EFAULT;
1142                 console_lock();
1143                 lock_fb_info(info);
1144                 ret = fb_pan_display(info, &var);
1145                 unlock_fb_info(info);
1146                 console_unlock();
1147                 if (ret == 0 && copy_to_user(argp, &var, sizeof(var)))
1148                         return -EFAULT;
1149                 break;
1150         case FBIO_CURSOR:
1151                 ret = -EINVAL;
1152                 break;
1153         case FBIOGET_CON2FBMAP:
1154                 ret = fbcon_get_con2fb_map_ioctl(argp);
1155                 break;
1156         case FBIOPUT_CON2FBMAP:
1157                 ret = fbcon_set_con2fb_map_ioctl(argp);
1158                 break;
1159         case FBIOBLANK:
1160                 if (arg > FB_BLANK_POWERDOWN)
1161                         return -EINVAL;
1162                 console_lock();
1163                 lock_fb_info(info);
1164                 ret = fb_blank(info, arg);
1165                 /* might again call into fb_blank */
1166                 fbcon_fb_blanked(info, arg);
1167                 unlock_fb_info(info);
1168                 console_unlock();
1169                 break;
1170         default:
1171                 lock_fb_info(info);
1172                 fb = info->fbops;
1173                 if (fb->fb_ioctl)
1174                         ret = fb->fb_ioctl(info, cmd, arg);
1175                 else
1176                         ret = -ENOTTY;
1177                 unlock_fb_info(info);
1178         }
1179         return ret;
1180 }
1181
1182 static long fb_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
1183 {
1184         struct fb_info *info = file_fb_info(file);
1185
1186         if (!info)
1187                 return -ENODEV;
1188         return do_fb_ioctl(info, cmd, arg);
1189 }
1190
1191 #ifdef CONFIG_COMPAT
1192 struct fb_fix_screeninfo32 {
1193         char                    id[16];
1194         compat_caddr_t          smem_start;
1195         u32                     smem_len;
1196         u32                     type;
1197         u32                     type_aux;
1198         u32                     visual;
1199         u16                     xpanstep;
1200         u16                     ypanstep;
1201         u16                     ywrapstep;
1202         u32                     line_length;
1203         compat_caddr_t          mmio_start;
1204         u32                     mmio_len;
1205         u32                     accel;
1206         u16                     reserved[3];
1207 };
1208
1209 struct fb_cmap32 {
1210         u32                     start;
1211         u32                     len;
1212         compat_caddr_t  red;
1213         compat_caddr_t  green;
1214         compat_caddr_t  blue;
1215         compat_caddr_t  transp;
1216 };
1217
1218 static int fb_getput_cmap(struct fb_info *info, unsigned int cmd,
1219                           unsigned long arg)
1220 {
1221         struct fb_cmap32 cmap32;
1222         struct fb_cmap cmap_from;
1223         struct fb_cmap_user cmap;
1224
1225         if (copy_from_user(&cmap32, compat_ptr(arg), sizeof(cmap32)))
1226                 return -EFAULT;
1227
1228         cmap = (struct fb_cmap_user) {
1229                 .start  = cmap32.start,
1230                 .len    = cmap32.len,
1231                 .red    = compat_ptr(cmap32.red),
1232                 .green  = compat_ptr(cmap32.green),
1233                 .blue   = compat_ptr(cmap32.blue),
1234                 .transp = compat_ptr(cmap32.transp),
1235         };
1236
1237         if (cmd == FBIOPUTCMAP)
1238                 return fb_set_user_cmap(&cmap, info);
1239
1240         lock_fb_info(info);
1241         cmap_from = info->cmap;
1242         unlock_fb_info(info);
1243
1244         return fb_cmap_to_user(&cmap_from, &cmap);
1245 }
1246
1247 static int do_fscreeninfo_to_user(struct fb_fix_screeninfo *fix,
1248                                   struct fb_fix_screeninfo32 __user *fix32)
1249 {
1250         __u32 data;
1251         int err;
1252
1253         err = copy_to_user(&fix32->id, &fix->id, sizeof(fix32->id));
1254
1255         data = (__u32) (unsigned long) fix->smem_start;
1256         err |= put_user(data, &fix32->smem_start);
1257
1258         err |= put_user(fix->smem_len, &fix32->smem_len);
1259         err |= put_user(fix->type, &fix32->type);
1260         err |= put_user(fix->type_aux, &fix32->type_aux);
1261         err |= put_user(fix->visual, &fix32->visual);
1262         err |= put_user(fix->xpanstep, &fix32->xpanstep);
1263         err |= put_user(fix->ypanstep, &fix32->ypanstep);
1264         err |= put_user(fix->ywrapstep, &fix32->ywrapstep);
1265         err |= put_user(fix->line_length, &fix32->line_length);
1266
1267         data = (__u32) (unsigned long) fix->mmio_start;
1268         err |= put_user(data, &fix32->mmio_start);
1269
1270         err |= put_user(fix->mmio_len, &fix32->mmio_len);
1271         err |= put_user(fix->accel, &fix32->accel);
1272         err |= copy_to_user(fix32->reserved, fix->reserved,
1273                             sizeof(fix->reserved));
1274
1275         if (err)
1276                 return -EFAULT;
1277         return 0;
1278 }
1279
1280 static int fb_get_fscreeninfo(struct fb_info *info, unsigned int cmd,
1281                               unsigned long arg)
1282 {
1283         struct fb_fix_screeninfo fix;
1284
1285         lock_fb_info(info);
1286         fix = info->fix;
1287         if (info->flags & FBINFO_HIDE_SMEM_START)
1288                 fix.smem_start = 0;
1289         unlock_fb_info(info);
1290         return do_fscreeninfo_to_user(&fix, compat_ptr(arg));
1291 }
1292
1293 static long fb_compat_ioctl(struct file *file, unsigned int cmd,
1294                             unsigned long arg)
1295 {
1296         struct fb_info *info = file_fb_info(file);
1297         const struct fb_ops *fb;
1298         long ret = -ENOIOCTLCMD;
1299
1300         if (!info)
1301                 return -ENODEV;
1302         fb = info->fbops;
1303         switch(cmd) {
1304         case FBIOGET_VSCREENINFO:
1305         case FBIOPUT_VSCREENINFO:
1306         case FBIOPAN_DISPLAY:
1307         case FBIOGET_CON2FBMAP:
1308         case FBIOPUT_CON2FBMAP:
1309                 arg = (unsigned long) compat_ptr(arg);
1310                 fallthrough;
1311         case FBIOBLANK:
1312                 ret = do_fb_ioctl(info, cmd, arg);
1313                 break;
1314
1315         case FBIOGET_FSCREENINFO:
1316                 ret = fb_get_fscreeninfo(info, cmd, arg);
1317                 break;
1318
1319         case FBIOGETCMAP:
1320         case FBIOPUTCMAP:
1321                 ret = fb_getput_cmap(info, cmd, arg);
1322                 break;
1323
1324         default:
1325                 if (fb->fb_compat_ioctl)
1326                         ret = fb->fb_compat_ioctl(info, cmd, arg);
1327                 break;
1328         }
1329         return ret;
1330 }
1331 #endif
1332
1333 static int
1334 fb_mmap(struct file *file, struct vm_area_struct * vma)
1335 {
1336         struct fb_info *info = file_fb_info(file);
1337         unsigned long mmio_pgoff;
1338         unsigned long start;
1339         u32 len;
1340
1341         if (!info)
1342                 return -ENODEV;
1343         mutex_lock(&info->mm_lock);
1344
1345         if (info->fbops->fb_mmap) {
1346                 int res;
1347
1348                 /*
1349                  * The framebuffer needs to be accessed decrypted, be sure
1350                  * SME protection is removed ahead of the call
1351                  */
1352                 vma->vm_page_prot = pgprot_decrypted(vma->vm_page_prot);
1353                 res = info->fbops->fb_mmap(info, vma);
1354                 mutex_unlock(&info->mm_lock);
1355                 return res;
1356 #if IS_ENABLED(CONFIG_FB_DEFERRED_IO)
1357         } else if (info->fbdefio) {
1358                 /*
1359                  * FB deferred I/O wants you to handle mmap in your drivers. At a
1360                  * minimum, point struct fb_ops.fb_mmap to fb_deferred_io_mmap().
1361                  */
1362                 dev_warn_once(info->dev, "fbdev mmap not set up for deferred I/O.\n");
1363                 mutex_unlock(&info->mm_lock);
1364                 return -ENODEV;
1365 #endif
1366         }
1367
1368         /*
1369          * Ugh. This can be either the frame buffer mapping, or
1370          * if pgoff points past it, the mmio mapping.
1371          */
1372         start = info->fix.smem_start;
1373         len = info->fix.smem_len;
1374         mmio_pgoff = PAGE_ALIGN((start & ~PAGE_MASK) + len) >> PAGE_SHIFT;
1375         if (vma->vm_pgoff >= mmio_pgoff) {
1376                 if (info->var.accel_flags) {
1377                         mutex_unlock(&info->mm_lock);
1378                         return -EINVAL;
1379                 }
1380
1381                 vma->vm_pgoff -= mmio_pgoff;
1382                 start = info->fix.mmio_start;
1383                 len = info->fix.mmio_len;
1384         }
1385         mutex_unlock(&info->mm_lock);
1386
1387         vma->vm_page_prot = vm_get_page_prot(vma->vm_flags);
1388         fb_pgprotect(file, vma, start);
1389
1390         return vm_iomap_memory(vma, start, len);
1391 }
1392
1393 static int
1394 fb_open(struct inode *inode, struct file *file)
1395 __acquires(&info->lock)
1396 __releases(&info->lock)
1397 {
1398         int fbidx = iminor(inode);
1399         struct fb_info *info;
1400         int res = 0;
1401
1402         info = get_fb_info(fbidx);
1403         if (!info) {
1404                 request_module("fb%d", fbidx);
1405                 info = get_fb_info(fbidx);
1406                 if (!info)
1407                         return -ENODEV;
1408         }
1409         if (IS_ERR(info))
1410                 return PTR_ERR(info);
1411
1412         lock_fb_info(info);
1413         if (!try_module_get(info->fbops->owner)) {
1414                 res = -ENODEV;
1415                 goto out;
1416         }
1417         file->private_data = info;
1418         if (info->fbops->fb_open) {
1419                 res = info->fbops->fb_open(info,1);
1420                 if (res)
1421                         module_put(info->fbops->owner);
1422         }
1423 #ifdef CONFIG_FB_DEFERRED_IO
1424         if (info->fbdefio)
1425                 fb_deferred_io_open(info, inode, file);
1426 #endif
1427 out:
1428         unlock_fb_info(info);
1429         if (res)
1430                 put_fb_info(info);
1431         return res;
1432 }
1433
1434 static int
1435 fb_release(struct inode *inode, struct file *file)
1436 __acquires(&info->lock)
1437 __releases(&info->lock)
1438 {
1439         struct fb_info * const info = file->private_data;
1440
1441         lock_fb_info(info);
1442         if (info->fbops->fb_release)
1443                 info->fbops->fb_release(info,1);
1444         module_put(info->fbops->owner);
1445         unlock_fb_info(info);
1446         put_fb_info(info);
1447         return 0;
1448 }
1449
1450 #if defined(CONFIG_FB_PROVIDE_GET_FB_UNMAPPED_AREA) && !defined(CONFIG_MMU)
1451 unsigned long get_fb_unmapped_area(struct file *filp,
1452                                    unsigned long addr, unsigned long len,
1453                                    unsigned long pgoff, unsigned long flags)
1454 {
1455         struct fb_info * const info = filp->private_data;
1456         unsigned long fb_size = PAGE_ALIGN(info->fix.smem_len);
1457
1458         if (pgoff > fb_size || len > fb_size - pgoff)
1459                 return -EINVAL;
1460
1461         return (unsigned long)info->screen_base + pgoff;
1462 }
1463 #endif
1464
1465 static const struct file_operations fb_fops = {
1466         .owner =        THIS_MODULE,
1467         .read =         fb_read,
1468         .write =        fb_write,
1469         .unlocked_ioctl = fb_ioctl,
1470 #ifdef CONFIG_COMPAT
1471         .compat_ioctl = fb_compat_ioctl,
1472 #endif
1473         .mmap =         fb_mmap,
1474         .open =         fb_open,
1475         .release =      fb_release,
1476 #if defined(HAVE_ARCH_FB_UNMAPPED_AREA) || \
1477         (defined(CONFIG_FB_PROVIDE_GET_FB_UNMAPPED_AREA) && \
1478          !defined(CONFIG_MMU))
1479         .get_unmapped_area = get_fb_unmapped_area,
1480 #endif
1481 #ifdef CONFIG_FB_DEFERRED_IO
1482         .fsync =        fb_deferred_io_fsync,
1483 #endif
1484         .llseek =       default_llseek,
1485 };
1486
1487 struct class *fb_class;
1488 EXPORT_SYMBOL(fb_class);
1489
1490 static int fb_check_foreignness(struct fb_info *fi)
1491 {
1492         const bool foreign_endian = fi->flags & FBINFO_FOREIGN_ENDIAN;
1493
1494         fi->flags &= ~FBINFO_FOREIGN_ENDIAN;
1495
1496 #ifdef __BIG_ENDIAN
1497         fi->flags |= foreign_endian ? 0 : FBINFO_BE_MATH;
1498 #else
1499         fi->flags |= foreign_endian ? FBINFO_BE_MATH : 0;
1500 #endif /* __BIG_ENDIAN */
1501
1502         if (fi->flags & FBINFO_BE_MATH && !fb_be_math(fi)) {
1503                 pr_err("%s: enable CONFIG_FB_BIG_ENDIAN to "
1504                        "support this framebuffer\n", fi->fix.id);
1505                 return -ENOSYS;
1506         } else if (!(fi->flags & FBINFO_BE_MATH) && fb_be_math(fi)) {
1507                 pr_err("%s: enable CONFIG_FB_LITTLE_ENDIAN to "
1508                        "support this framebuffer\n", fi->fix.id);
1509                 return -ENOSYS;
1510         }
1511
1512         return 0;
1513 }
1514
1515 static bool apertures_overlap(struct aperture *gen, struct aperture *hw)
1516 {
1517         /* is the generic aperture base the same as the HW one */
1518         if (gen->base == hw->base)
1519                 return true;
1520         /* is the generic aperture base inside the hw base->hw base+size */
1521         if (gen->base > hw->base && gen->base < hw->base + hw->size)
1522                 return true;
1523         return false;
1524 }
1525
1526 static bool fb_do_apertures_overlap(struct apertures_struct *gena,
1527                                     struct apertures_struct *hwa)
1528 {
1529         int i, j;
1530         if (!hwa || !gena)
1531                 return false;
1532
1533         for (i = 0; i < hwa->count; ++i) {
1534                 struct aperture *h = &hwa->ranges[i];
1535                 for (j = 0; j < gena->count; ++j) {
1536                         struct aperture *g = &gena->ranges[j];
1537                         printk(KERN_DEBUG "checking generic (%llx %llx) vs hw (%llx %llx)\n",
1538                                 (unsigned long long)g->base,
1539                                 (unsigned long long)g->size,
1540                                 (unsigned long long)h->base,
1541                                 (unsigned long long)h->size);
1542                         if (apertures_overlap(g, h))
1543                                 return true;
1544                 }
1545         }
1546
1547         return false;
1548 }
1549
1550 static void do_unregister_framebuffer(struct fb_info *fb_info);
1551
1552 #define VGA_FB_PHYS 0xA0000
1553 static void do_remove_conflicting_framebuffers(struct apertures_struct *a,
1554                                                const char *name, bool primary)
1555 {
1556         int i;
1557
1558         /* check all firmware fbs and kick off if the base addr overlaps */
1559         for_each_registered_fb(i) {
1560                 struct apertures_struct *gen_aper;
1561                 struct device *device;
1562
1563                 if (!(registered_fb[i]->flags & FBINFO_MISC_FIRMWARE))
1564                         continue;
1565
1566                 gen_aper = registered_fb[i]->apertures;
1567                 device = registered_fb[i]->device;
1568                 if (fb_do_apertures_overlap(gen_aper, a) ||
1569                         (primary && gen_aper && gen_aper->count &&
1570                          gen_aper->ranges[0].base == VGA_FB_PHYS)) {
1571
1572                         printk(KERN_INFO "fb%d: switching to %s from %s\n",
1573                                i, name, registered_fb[i]->fix.id);
1574
1575                         /*
1576                          * If we kick-out a firmware driver, we also want to remove
1577                          * the underlying platform device, such as simple-framebuffer,
1578                          * VESA, EFI, etc. A native driver will then be able to
1579                          * allocate the memory range.
1580                          *
1581                          * If it's not a platform device, at least print a warning. A
1582                          * fix would add code to remove the device from the system. For
1583                          * framebuffers without any Linux device, print a warning as
1584                          * well.
1585                          */
1586                         if (!device) {
1587                                 pr_warn("fb%d: no device set\n", i);
1588                                 do_unregister_framebuffer(registered_fb[i]);
1589                         } else if (dev_is_platform(device)) {
1590                                 registered_fb[i]->forced_out = true;
1591                                 platform_device_unregister(to_platform_device(device));
1592                         } else {
1593                                 pr_warn("fb%d: cannot remove device\n", i);
1594                                 do_unregister_framebuffer(registered_fb[i]);
1595                         }
1596                 }
1597         }
1598 }
1599
1600 static int do_register_framebuffer(struct fb_info *fb_info)
1601 {
1602         int i;
1603         struct fb_videomode mode;
1604
1605         if (fb_check_foreignness(fb_info))
1606                 return -ENOSYS;
1607
1608         do_remove_conflicting_framebuffers(fb_info->apertures,
1609                                            fb_info->fix.id,
1610                                            fb_is_primary_device(fb_info));
1611
1612         if (num_registered_fb == FB_MAX)
1613                 return -ENXIO;
1614
1615         num_registered_fb++;
1616         for (i = 0 ; i < FB_MAX; i++)
1617                 if (!registered_fb[i])
1618                         break;
1619         fb_info->node = i;
1620         refcount_set(&fb_info->count, 1);
1621         mutex_init(&fb_info->lock);
1622         mutex_init(&fb_info->mm_lock);
1623
1624         fb_info->dev = device_create(fb_class, fb_info->device,
1625                                      MKDEV(FB_MAJOR, i), NULL, "fb%d", i);
1626         if (IS_ERR(fb_info->dev)) {
1627                 /* Not fatal */
1628                 printk(KERN_WARNING "Unable to create device for framebuffer %d; errno = %ld\n", i, PTR_ERR(fb_info->dev));
1629                 fb_info->dev = NULL;
1630         } else
1631                 fb_init_device(fb_info);
1632
1633         if (fb_info->pixmap.addr == NULL) {
1634                 fb_info->pixmap.addr = kmalloc(FBPIXMAPSIZE, GFP_KERNEL);
1635                 if (fb_info->pixmap.addr) {
1636                         fb_info->pixmap.size = FBPIXMAPSIZE;
1637                         fb_info->pixmap.buf_align = 1;
1638                         fb_info->pixmap.scan_align = 1;
1639                         fb_info->pixmap.access_align = 32;
1640                         fb_info->pixmap.flags = FB_PIXMAP_DEFAULT;
1641                 }
1642         }
1643         fb_info->pixmap.offset = 0;
1644
1645         if (!fb_info->pixmap.blit_x)
1646                 fb_info->pixmap.blit_x = ~(u32)0;
1647
1648         if (!fb_info->pixmap.blit_y)
1649                 fb_info->pixmap.blit_y = ~(u32)0;
1650
1651         if (!fb_info->modelist.prev || !fb_info->modelist.next)
1652                 INIT_LIST_HEAD(&fb_info->modelist);
1653
1654         if (fb_info->skip_vt_switch)
1655                 pm_vt_switch_required(fb_info->dev, false);
1656         else
1657                 pm_vt_switch_required(fb_info->dev, true);
1658
1659         fb_var_to_videomode(&mode, &fb_info->var);
1660         fb_add_videomode(&mode, &fb_info->modelist);
1661         registered_fb[i] = fb_info;
1662
1663 #ifdef CONFIG_GUMSTIX_AM200EPD
1664         {
1665                 struct fb_event event;
1666                 event.info = fb_info;
1667                 fb_notifier_call_chain(FB_EVENT_FB_REGISTERED, &event);
1668         }
1669 #endif
1670
1671         return fbcon_fb_registered(fb_info);
1672 }
1673
1674 static void unbind_console(struct fb_info *fb_info)
1675 {
1676         int i = fb_info->node;
1677
1678         if (WARN_ON(i < 0 || i >= FB_MAX || registered_fb[i] != fb_info))
1679                 return;
1680
1681         fbcon_fb_unbind(fb_info);
1682 }
1683
1684 static void unlink_framebuffer(struct fb_info *fb_info)
1685 {
1686         int i;
1687
1688         i = fb_info->node;
1689         if (WARN_ON(i < 0 || i >= FB_MAX || registered_fb[i] != fb_info))
1690                 return;
1691
1692         if (!fb_info->dev)
1693                 return;
1694
1695         device_destroy(fb_class, MKDEV(FB_MAJOR, i));
1696
1697         pm_vt_switch_unregister(fb_info->dev);
1698
1699         unbind_console(fb_info);
1700
1701         fb_info->dev = NULL;
1702 }
1703
1704 static void do_unregister_framebuffer(struct fb_info *fb_info)
1705 {
1706         unlink_framebuffer(fb_info);
1707         if (fb_info->pixmap.addr &&
1708             (fb_info->pixmap.flags & FB_PIXMAP_DEFAULT)) {
1709                 kfree(fb_info->pixmap.addr);
1710                 fb_info->pixmap.addr = NULL;
1711         }
1712
1713         fb_destroy_modelist(&fb_info->modelist);
1714         registered_fb[fb_info->node] = NULL;
1715         num_registered_fb--;
1716         fb_cleanup_device(fb_info);
1717 #ifdef CONFIG_GUMSTIX_AM200EPD
1718         {
1719                 struct fb_event event;
1720                 event.info = fb_info;
1721                 fb_notifier_call_chain(FB_EVENT_FB_UNREGISTERED, &event);
1722         }
1723 #endif
1724         fbcon_fb_unregistered(fb_info);
1725
1726         /* this may free fb info */
1727         put_fb_info(fb_info);
1728 }
1729
1730 /**
1731  * remove_conflicting_framebuffers - remove firmware-configured framebuffers
1732  * @a: memory range, users of which are to be removed
1733  * @name: requesting driver name
1734  * @primary: also kick vga16fb if present
1735  *
1736  * This function removes framebuffer devices (initialized by firmware/bootloader)
1737  * which use memory range described by @a. If @a is NULL all such devices are
1738  * removed.
1739  */
1740 int remove_conflicting_framebuffers(struct apertures_struct *a,
1741                                     const char *name, bool primary)
1742 {
1743         bool do_free = false;
1744
1745         if (!a) {
1746                 a = alloc_apertures(1);
1747                 if (!a)
1748                         return -ENOMEM;
1749
1750                 a->ranges[0].base = 0;
1751                 a->ranges[0].size = ~0;
1752                 do_free = true;
1753         }
1754
1755         mutex_lock(&registration_lock);
1756         do_remove_conflicting_framebuffers(a, name, primary);
1757         mutex_unlock(&registration_lock);
1758
1759         if (do_free)
1760                 kfree(a);
1761
1762         return 0;
1763 }
1764 EXPORT_SYMBOL(remove_conflicting_framebuffers);
1765
1766 /**
1767  * remove_conflicting_pci_framebuffers - remove firmware-configured framebuffers for PCI devices
1768  * @pdev: PCI device
1769  * @name: requesting driver name
1770  *
1771  * This function removes framebuffer devices (eg. initialized by firmware)
1772  * using memory range configured for any of @pdev's memory bars.
1773  *
1774  * The function assumes that PCI device with shadowed ROM drives a primary
1775  * display and so kicks out vga16fb.
1776  */
1777 int remove_conflicting_pci_framebuffers(struct pci_dev *pdev, const char *name)
1778 {
1779         struct apertures_struct *ap;
1780         bool primary = false;
1781         int err, idx, bar;
1782
1783         for (idx = 0, bar = 0; bar < PCI_STD_NUM_BARS; bar++) {
1784                 if (!(pci_resource_flags(pdev, bar) & IORESOURCE_MEM))
1785                         continue;
1786                 idx++;
1787         }
1788
1789         ap = alloc_apertures(idx);
1790         if (!ap)
1791                 return -ENOMEM;
1792
1793         for (idx = 0, bar = 0; bar < PCI_STD_NUM_BARS; bar++) {
1794                 if (!(pci_resource_flags(pdev, bar) & IORESOURCE_MEM))
1795                         continue;
1796                 ap->ranges[idx].base = pci_resource_start(pdev, bar);
1797                 ap->ranges[idx].size = pci_resource_len(pdev, bar);
1798                 pci_dbg(pdev, "%s: bar %d: 0x%lx -> 0x%lx\n", __func__, bar,
1799                         (unsigned long)pci_resource_start(pdev, bar),
1800                         (unsigned long)pci_resource_end(pdev, bar));
1801                 idx++;
1802         }
1803
1804 #ifdef CONFIG_X86
1805         primary = pdev->resource[PCI_ROM_RESOURCE].flags &
1806                                         IORESOURCE_ROM_SHADOW;
1807 #endif
1808         err = remove_conflicting_framebuffers(ap, name, primary);
1809         kfree(ap);
1810         return err;
1811 }
1812 EXPORT_SYMBOL(remove_conflicting_pci_framebuffers);
1813
1814 /**
1815  *      register_framebuffer - registers a frame buffer device
1816  *      @fb_info: frame buffer info structure
1817  *
1818  *      Registers a frame buffer device @fb_info.
1819  *
1820  *      Returns negative errno on error, or zero for success.
1821  *
1822  */
1823 int
1824 register_framebuffer(struct fb_info *fb_info)
1825 {
1826         int ret;
1827
1828         mutex_lock(&registration_lock);
1829         ret = do_register_framebuffer(fb_info);
1830         mutex_unlock(&registration_lock);
1831
1832         return ret;
1833 }
1834 EXPORT_SYMBOL(register_framebuffer);
1835
1836 /**
1837  *      unregister_framebuffer - releases a frame buffer device
1838  *      @fb_info: frame buffer info structure
1839  *
1840  *      Unregisters a frame buffer device @fb_info.
1841  *
1842  *      Returns negative errno on error, or zero for success.
1843  *
1844  *      This function will also notify the framebuffer console
1845  *      to release the driver.
1846  *
1847  *      This is meant to be called within a driver's module_exit()
1848  *      function. If this is called outside module_exit(), ensure
1849  *      that the driver implements fb_open() and fb_release() to
1850  *      check that no processes are using the device.
1851  */
1852 void
1853 unregister_framebuffer(struct fb_info *fb_info)
1854 {
1855         bool forced_out = fb_info->forced_out;
1856
1857         if (!forced_out)
1858                 mutex_lock(&registration_lock);
1859         do_unregister_framebuffer(fb_info);
1860         if (!forced_out)
1861                 mutex_unlock(&registration_lock);
1862 }
1863 EXPORT_SYMBOL(unregister_framebuffer);
1864
1865 /**
1866  *      fb_set_suspend - low level driver signals suspend
1867  *      @info: framebuffer affected
1868  *      @state: 0 = resuming, !=0 = suspending
1869  *
1870  *      This is meant to be used by low level drivers to
1871  *      signal suspend/resume to the core & clients.
1872  *      It must be called with the console semaphore held
1873  */
1874 void fb_set_suspend(struct fb_info *info, int state)
1875 {
1876         WARN_CONSOLE_UNLOCKED();
1877
1878         if (state) {
1879                 fbcon_suspended(info);
1880                 info->state = FBINFO_STATE_SUSPENDED;
1881         } else {
1882                 info->state = FBINFO_STATE_RUNNING;
1883                 fbcon_resumed(info);
1884         }
1885 }
1886 EXPORT_SYMBOL(fb_set_suspend);
1887
1888 /**
1889  *      fbmem_init - init frame buffer subsystem
1890  *
1891  *      Initialize the frame buffer subsystem.
1892  *
1893  *      NOTE: This function is _only_ to be called by drivers/char/mem.c.
1894  *
1895  */
1896
1897 static int __init
1898 fbmem_init(void)
1899 {
1900         int ret;
1901
1902         if (!proc_create_seq("fb", 0, NULL, &proc_fb_seq_ops))
1903                 return -ENOMEM;
1904
1905         ret = register_chrdev(FB_MAJOR, "fb", &fb_fops);
1906         if (ret) {
1907                 printk("unable to get major %d for fb devs\n", FB_MAJOR);
1908                 goto err_chrdev;
1909         }
1910
1911         fb_class = class_create(THIS_MODULE, "graphics");
1912         if (IS_ERR(fb_class)) {
1913                 ret = PTR_ERR(fb_class);
1914                 pr_warn("Unable to create fb class; errno = %d\n", ret);
1915                 fb_class = NULL;
1916                 goto err_class;
1917         }
1918
1919         fb_console_init();
1920
1921         return 0;
1922
1923 err_class:
1924         unregister_chrdev(FB_MAJOR, "fb");
1925 err_chrdev:
1926         remove_proc_entry("fb", NULL);
1927         return ret;
1928 }
1929
1930 #ifdef MODULE
1931 module_init(fbmem_init);
1932 static void __exit
1933 fbmem_exit(void)
1934 {
1935         fb_console_exit();
1936
1937         remove_proc_entry("fb", NULL);
1938         class_destroy(fb_class);
1939         unregister_chrdev(FB_MAJOR, "fb");
1940 }
1941
1942 module_exit(fbmem_exit);
1943 MODULE_LICENSE("GPL");
1944 MODULE_DESCRIPTION("Framebuffer base");
1945 #else
1946 subsys_initcall(fbmem_init);
1947 #endif
1948
1949 int fb_new_modelist(struct fb_info *info)
1950 {
1951         struct fb_var_screeninfo var = info->var;
1952         struct list_head *pos, *n;
1953         struct fb_modelist *modelist;
1954         struct fb_videomode *m, mode;
1955         int err;
1956
1957         list_for_each_safe(pos, n, &info->modelist) {
1958                 modelist = list_entry(pos, struct fb_modelist, list);
1959                 m = &modelist->mode;
1960                 fb_videomode_to_var(&var, m);
1961                 var.activate = FB_ACTIVATE_TEST;
1962                 err = fb_set_var(info, &var);
1963                 fb_var_to_videomode(&mode, &var);
1964                 if (err || !fb_mode_is_equal(m, &mode)) {
1965                         list_del(pos);
1966                         kfree(pos);
1967                 }
1968         }
1969
1970         if (list_empty(&info->modelist))
1971                 return 1;
1972
1973         fbcon_new_modelist(info);
1974
1975         return 0;
1976 }
1977
1978 MODULE_LICENSE("GPL");