Merge tag 'drm-msm-next-2022-07-10' of https://gitlab.freedesktop.org/drm/msm into...
[platform/kernel/linux-starfive.git] / drivers / video / fbdev / core / fbmem.c
1 /*
2  *  linux/drivers/video/fbmem.c
3  *
4  *  Copyright (C) 1994 Martin Schaller
5  *
6  *      2001 - Documented with DocBook
7  *      - Brad Douglas <brad@neruo.com>
8  *
9  * This file is subject to the terms and conditions of the GNU General Public
10  * License.  See the file COPYING in the main directory of this archive
11  * for more details.
12  */
13
14 #include <linux/module.h>
15
16 #include <linux/compat.h>
17 #include <linux/types.h>
18 #include <linux/errno.h>
19 #include <linux/kernel.h>
20 #include <linux/major.h>
21 #include <linux/slab.h>
22 #include <linux/sysfb.h>
23 #include <linux/mm.h>
24 #include <linux/mman.h>
25 #include <linux/vt.h>
26 #include <linux/init.h>
27 #include <linux/linux_logo.h>
28 #include <linux/proc_fs.h>
29 #include <linux/platform_device.h>
30 #include <linux/seq_file.h>
31 #include <linux/console.h>
32 #include <linux/kmod.h>
33 #include <linux/err.h>
34 #include <linux/device.h>
35 #include <linux/efi.h>
36 #include <linux/fb.h>
37 #include <linux/fbcon.h>
38 #include <linux/mem_encrypt.h>
39 #include <linux/pci.h>
40
41 #include <asm/fb.h>
42
43
44     /*
45      *  Frame buffer device initialization and setup routines
46      */
47
48 #define FBPIXMAPSIZE    (1024 * 8)
49
50 static DEFINE_MUTEX(registration_lock);
51
52 struct fb_info *registered_fb[FB_MAX] __read_mostly;
53 EXPORT_SYMBOL(registered_fb);
54
55 int num_registered_fb __read_mostly;
56 EXPORT_SYMBOL(num_registered_fb);
57
58 bool fb_center_logo __read_mostly;
59
60 int fb_logo_count __read_mostly = -1;
61
62 static struct fb_info *get_fb_info(unsigned int idx)
63 {
64         struct fb_info *fb_info;
65
66         if (idx >= FB_MAX)
67                 return ERR_PTR(-ENODEV);
68
69         mutex_lock(&registration_lock);
70         fb_info = registered_fb[idx];
71         if (fb_info)
72                 refcount_inc(&fb_info->count);
73         mutex_unlock(&registration_lock);
74
75         return fb_info;
76 }
77
78 static void put_fb_info(struct fb_info *fb_info)
79 {
80         if (!refcount_dec_and_test(&fb_info->count))
81                 return;
82         if (fb_info->fbops->fb_destroy)
83                 fb_info->fbops->fb_destroy(fb_info);
84 }
85
86 /*
87  * Helpers
88  */
89
90 int fb_get_color_depth(struct fb_var_screeninfo *var,
91                        struct fb_fix_screeninfo *fix)
92 {
93         int depth = 0;
94
95         if (fix->visual == FB_VISUAL_MONO01 ||
96             fix->visual == FB_VISUAL_MONO10)
97                 depth = 1;
98         else {
99                 if (var->green.length == var->blue.length &&
100                     var->green.length == var->red.length &&
101                     var->green.offset == var->blue.offset &&
102                     var->green.offset == var->red.offset)
103                         depth = var->green.length;
104                 else
105                         depth = var->green.length + var->red.length +
106                                 var->blue.length;
107         }
108
109         return depth;
110 }
111 EXPORT_SYMBOL(fb_get_color_depth);
112
113 /*
114  * Data padding functions.
115  */
116 void fb_pad_aligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 s_pitch, u32 height)
117 {
118         __fb_pad_aligned_buffer(dst, d_pitch, src, s_pitch, height);
119 }
120 EXPORT_SYMBOL(fb_pad_aligned_buffer);
121
122 void fb_pad_unaligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 idx, u32 height,
123                                 u32 shift_high, u32 shift_low, u32 mod)
124 {
125         u8 mask = (u8) (0xfff << shift_high), tmp;
126         int i, j;
127
128         for (i = height; i--; ) {
129                 for (j = 0; j < idx; j++) {
130                         tmp = dst[j];
131                         tmp &= mask;
132                         tmp |= *src >> shift_low;
133                         dst[j] = tmp;
134                         tmp = *src << shift_high;
135                         dst[j+1] = tmp;
136                         src++;
137                 }
138                 tmp = dst[idx];
139                 tmp &= mask;
140                 tmp |= *src >> shift_low;
141                 dst[idx] = tmp;
142                 if (shift_high < mod) {
143                         tmp = *src << shift_high;
144                         dst[idx+1] = tmp;
145                 }
146                 src++;
147                 dst += d_pitch;
148         }
149 }
150 EXPORT_SYMBOL(fb_pad_unaligned_buffer);
151
152 /*
153  * we need to lock this section since fb_cursor
154  * may use fb_imageblit()
155  */
156 char* fb_get_buffer_offset(struct fb_info *info, struct fb_pixmap *buf, u32 size)
157 {
158         u32 align = buf->buf_align - 1, offset;
159         char *addr = buf->addr;
160
161         /* If IO mapped, we need to sync before access, no sharing of
162          * the pixmap is done
163          */
164         if (buf->flags & FB_PIXMAP_IO) {
165                 if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
166                         info->fbops->fb_sync(info);
167                 return addr;
168         }
169
170         /* See if we fit in the remaining pixmap space */
171         offset = buf->offset + align;
172         offset &= ~align;
173         if (offset + size > buf->size) {
174                 /* We do not fit. In order to be able to re-use the buffer,
175                  * we must ensure no asynchronous DMA'ing or whatever operation
176                  * is in progress, we sync for that.
177                  */
178                 if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
179                         info->fbops->fb_sync(info);
180                 offset = 0;
181         }
182         buf->offset = offset + size;
183         addr += offset;
184
185         return addr;
186 }
187 EXPORT_SYMBOL(fb_get_buffer_offset);
188
189 #ifdef CONFIG_LOGO
190
191 static inline unsigned safe_shift(unsigned d, int n)
192 {
193         return n < 0 ? d >> -n : d << n;
194 }
195
196 static void fb_set_logocmap(struct fb_info *info,
197                                    const struct linux_logo *logo)
198 {
199         struct fb_cmap palette_cmap;
200         u16 palette_green[16];
201         u16 palette_blue[16];
202         u16 palette_red[16];
203         int i, j, n;
204         const unsigned char *clut = logo->clut;
205
206         palette_cmap.start = 0;
207         palette_cmap.len = 16;
208         palette_cmap.red = palette_red;
209         palette_cmap.green = palette_green;
210         palette_cmap.blue = palette_blue;
211         palette_cmap.transp = NULL;
212
213         for (i = 0; i < logo->clutsize; i += n) {
214                 n = logo->clutsize - i;
215                 /* palette_cmap provides space for only 16 colors at once */
216                 if (n > 16)
217                         n = 16;
218                 palette_cmap.start = 32 + i;
219                 palette_cmap.len = n;
220                 for (j = 0; j < n; ++j) {
221                         palette_cmap.red[j] = clut[0] << 8 | clut[0];
222                         palette_cmap.green[j] = clut[1] << 8 | clut[1];
223                         palette_cmap.blue[j] = clut[2] << 8 | clut[2];
224                         clut += 3;
225                 }
226                 fb_set_cmap(&palette_cmap, info);
227         }
228 }
229
230 static void  fb_set_logo_truepalette(struct fb_info *info,
231                                             const struct linux_logo *logo,
232                                             u32 *palette)
233 {
234         static const unsigned char mask[] = { 0,0x80,0xc0,0xe0,0xf0,0xf8,0xfc,0xfe,0xff };
235         unsigned char redmask, greenmask, bluemask;
236         int redshift, greenshift, blueshift;
237         int i;
238         const unsigned char *clut = logo->clut;
239
240         /*
241          * We have to create a temporary palette since console palette is only
242          * 16 colors long.
243          */
244         /* Bug: Doesn't obey msb_right ... (who needs that?) */
245         redmask   = mask[info->var.red.length   < 8 ? info->var.red.length   : 8];
246         greenmask = mask[info->var.green.length < 8 ? info->var.green.length : 8];
247         bluemask  = mask[info->var.blue.length  < 8 ? info->var.blue.length  : 8];
248         redshift   = info->var.red.offset   - (8 - info->var.red.length);
249         greenshift = info->var.green.offset - (8 - info->var.green.length);
250         blueshift  = info->var.blue.offset  - (8 - info->var.blue.length);
251
252         for ( i = 0; i < logo->clutsize; i++) {
253                 palette[i+32] = (safe_shift((clut[0] & redmask), redshift) |
254                                  safe_shift((clut[1] & greenmask), greenshift) |
255                                  safe_shift((clut[2] & bluemask), blueshift));
256                 clut += 3;
257         }
258 }
259
260 static void fb_set_logo_directpalette(struct fb_info *info,
261                                              const struct linux_logo *logo,
262                                              u32 *palette)
263 {
264         int redshift, greenshift, blueshift;
265         int i;
266
267         redshift = info->var.red.offset;
268         greenshift = info->var.green.offset;
269         blueshift = info->var.blue.offset;
270
271         for (i = 32; i < 32 + logo->clutsize; i++)
272                 palette[i] = i << redshift | i << greenshift | i << blueshift;
273 }
274
275 static void fb_set_logo(struct fb_info *info,
276                                const struct linux_logo *logo, u8 *dst,
277                                int depth)
278 {
279         int i, j, k;
280         const u8 *src = logo->data;
281         u8 xor = (info->fix.visual == FB_VISUAL_MONO01) ? 0xff : 0;
282         u8 fg = 1, d;
283
284         switch (fb_get_color_depth(&info->var, &info->fix)) {
285         case 1:
286                 fg = 1;
287                 break;
288         case 2:
289                 fg = 3;
290                 break;
291         default:
292                 fg = 7;
293                 break;
294         }
295
296         if (info->fix.visual == FB_VISUAL_MONO01 ||
297             info->fix.visual == FB_VISUAL_MONO10)
298                 fg = ~((u8) (0xfff << info->var.green.length));
299
300         switch (depth) {
301         case 4:
302                 for (i = 0; i < logo->height; i++)
303                         for (j = 0; j < logo->width; src++) {
304                                 *dst++ = *src >> 4;
305                                 j++;
306                                 if (j < logo->width) {
307                                         *dst++ = *src & 0x0f;
308                                         j++;
309                                 }
310                         }
311                 break;
312         case 1:
313                 for (i = 0; i < logo->height; i++) {
314                         for (j = 0; j < logo->width; src++) {
315                                 d = *src ^ xor;
316                                 for (k = 7; k >= 0 && j < logo->width; k--) {
317                                         *dst++ = ((d >> k) & 1) ? fg : 0;
318                                         j++;
319                                 }
320                         }
321                 }
322                 break;
323         }
324 }
325
326 /*
327  * Three (3) kinds of logo maps exist.  linux_logo_clut224 (>16 colors),
328  * linux_logo_vga16 (16 colors) and linux_logo_mono (2 colors).  Depending on
329  * the visual format and color depth of the framebuffer, the DAC, the
330  * pseudo_palette, and the logo data will be adjusted accordingly.
331  *
332  * Case 1 - linux_logo_clut224:
333  * Color exceeds the number of console colors (16), thus we set the hardware DAC
334  * using fb_set_cmap() appropriately.  The "needs_cmapreset"  flag will be set.
335  *
336  * For visuals that require color info from the pseudo_palette, we also construct
337  * one for temporary use. The "needs_directpalette" or "needs_truepalette" flags
338  * will be set.
339  *
340  * Case 2 - linux_logo_vga16:
341  * The number of colors just matches the console colors, thus there is no need
342  * to set the DAC or the pseudo_palette.  However, the bitmap is packed, ie,
343  * each byte contains color information for two pixels (upper and lower nibble).
344  * To be consistent with fb_imageblit() usage, we therefore separate the two
345  * nibbles into separate bytes. The "depth" flag will be set to 4.
346  *
347  * Case 3 - linux_logo_mono:
348  * This is similar with Case 2.  Each byte contains information for 8 pixels.
349  * We isolate each bit and expand each into a byte. The "depth" flag will
350  * be set to 1.
351  */
352 static struct logo_data {
353         int depth;
354         int needs_directpalette;
355         int needs_truepalette;
356         int needs_cmapreset;
357         const struct linux_logo *logo;
358 } fb_logo __read_mostly;
359
360 static void fb_rotate_logo_ud(const u8 *in, u8 *out, u32 width, u32 height)
361 {
362         u32 size = width * height, i;
363
364         out += size - 1;
365
366         for (i = size; i--; )
367                 *out-- = *in++;
368 }
369
370 static void fb_rotate_logo_cw(const u8 *in, u8 *out, u32 width, u32 height)
371 {
372         int i, j, h = height - 1;
373
374         for (i = 0; i < height; i++)
375                 for (j = 0; j < width; j++)
376                                 out[height * j + h - i] = *in++;
377 }
378
379 static void fb_rotate_logo_ccw(const u8 *in, u8 *out, u32 width, u32 height)
380 {
381         int i, j, w = width - 1;
382
383         for (i = 0; i < height; i++)
384                 for (j = 0; j < width; j++)
385                         out[height * (w - j) + i] = *in++;
386 }
387
388 static void fb_rotate_logo(struct fb_info *info, u8 *dst,
389                            struct fb_image *image, int rotate)
390 {
391         u32 tmp;
392
393         if (rotate == FB_ROTATE_UD) {
394                 fb_rotate_logo_ud(image->data, dst, image->width,
395                                   image->height);
396                 image->dx = info->var.xres - image->width - image->dx;
397                 image->dy = info->var.yres - image->height - image->dy;
398         } else if (rotate == FB_ROTATE_CW) {
399                 fb_rotate_logo_cw(image->data, dst, image->width,
400                                   image->height);
401                 swap(image->width, image->height);
402                 tmp = image->dy;
403                 image->dy = image->dx;
404                 image->dx = info->var.xres - image->width - tmp;
405         } else if (rotate == FB_ROTATE_CCW) {
406                 fb_rotate_logo_ccw(image->data, dst, image->width,
407                                    image->height);
408                 swap(image->width, image->height);
409                 tmp = image->dx;
410                 image->dx = image->dy;
411                 image->dy = info->var.yres - image->height - tmp;
412         }
413
414         image->data = dst;
415 }
416
417 static void fb_do_show_logo(struct fb_info *info, struct fb_image *image,
418                             int rotate, unsigned int num)
419 {
420         unsigned int x;
421
422         if (image->width > info->var.xres || image->height > info->var.yres)
423                 return;
424
425         if (rotate == FB_ROTATE_UR) {
426                 for (x = 0;
427                      x < num && image->dx + image->width <= info->var.xres;
428                      x++) {
429                         info->fbops->fb_imageblit(info, image);
430                         image->dx += image->width + 8;
431                 }
432         } else if (rotate == FB_ROTATE_UD) {
433                 u32 dx = image->dx;
434
435                 for (x = 0; x < num && image->dx <= dx; x++) {
436                         info->fbops->fb_imageblit(info, image);
437                         image->dx -= image->width + 8;
438                 }
439         } else if (rotate == FB_ROTATE_CW) {
440                 for (x = 0;
441                      x < num && image->dy + image->height <= info->var.yres;
442                      x++) {
443                         info->fbops->fb_imageblit(info, image);
444                         image->dy += image->height + 8;
445                 }
446         } else if (rotate == FB_ROTATE_CCW) {
447                 u32 dy = image->dy;
448
449                 for (x = 0; x < num && image->dy <= dy; x++) {
450                         info->fbops->fb_imageblit(info, image);
451                         image->dy -= image->height + 8;
452                 }
453         }
454 }
455
456 static int fb_show_logo_line(struct fb_info *info, int rotate,
457                              const struct linux_logo *logo, int y,
458                              unsigned int n)
459 {
460         u32 *palette = NULL, *saved_pseudo_palette = NULL;
461         unsigned char *logo_new = NULL, *logo_rotate = NULL;
462         struct fb_image image;
463
464         /* Return if the frame buffer is not mapped or suspended */
465         if (logo == NULL || info->state != FBINFO_STATE_RUNNING ||
466             info->fbops->owner)
467                 return 0;
468
469         image.depth = 8;
470         image.data = logo->data;
471
472         if (fb_logo.needs_cmapreset)
473                 fb_set_logocmap(info, logo);
474
475         if (fb_logo.needs_truepalette ||
476             fb_logo.needs_directpalette) {
477                 palette = kmalloc(256 * 4, GFP_KERNEL);
478                 if (palette == NULL)
479                         return 0;
480
481                 if (fb_logo.needs_truepalette)
482                         fb_set_logo_truepalette(info, logo, palette);
483                 else
484                         fb_set_logo_directpalette(info, logo, palette);
485
486                 saved_pseudo_palette = info->pseudo_palette;
487                 info->pseudo_palette = palette;
488         }
489
490         if (fb_logo.depth <= 4) {
491                 logo_new = kmalloc_array(logo->width, logo->height,
492                                          GFP_KERNEL);
493                 if (logo_new == NULL) {
494                         kfree(palette);
495                         if (saved_pseudo_palette)
496                                 info->pseudo_palette = saved_pseudo_palette;
497                         return 0;
498                 }
499                 image.data = logo_new;
500                 fb_set_logo(info, logo, logo_new, fb_logo.depth);
501         }
502
503         if (fb_center_logo) {
504                 int xres = info->var.xres;
505                 int yres = info->var.yres;
506
507                 if (rotate == FB_ROTATE_CW || rotate == FB_ROTATE_CCW) {
508                         xres = info->var.yres;
509                         yres = info->var.xres;
510                 }
511
512                 while (n && (n * (logo->width + 8) - 8 > xres))
513                         --n;
514                 image.dx = (xres - (n * (logo->width + 8) - 8)) / 2;
515                 image.dy = y ?: (yres - logo->height) / 2;
516         } else {
517                 image.dx = 0;
518                 image.dy = y;
519         }
520
521         image.width = logo->width;
522         image.height = logo->height;
523
524         if (rotate) {
525                 logo_rotate = kmalloc_array(logo->width, logo->height,
526                                             GFP_KERNEL);
527                 if (logo_rotate)
528                         fb_rotate_logo(info, logo_rotate, &image, rotate);
529         }
530
531         fb_do_show_logo(info, &image, rotate, n);
532
533         kfree(palette);
534         if (saved_pseudo_palette != NULL)
535                 info->pseudo_palette = saved_pseudo_palette;
536         kfree(logo_new);
537         kfree(logo_rotate);
538         return image.dy + logo->height;
539 }
540
541
542 #ifdef CONFIG_FB_LOGO_EXTRA
543
544 #define FB_LOGO_EX_NUM_MAX 10
545 static struct logo_data_extra {
546         const struct linux_logo *logo;
547         unsigned int n;
548 } fb_logo_ex[FB_LOGO_EX_NUM_MAX];
549 static unsigned int fb_logo_ex_num;
550
551 void fb_append_extra_logo(const struct linux_logo *logo, unsigned int n)
552 {
553         if (!n || fb_logo_ex_num == FB_LOGO_EX_NUM_MAX)
554                 return;
555
556         fb_logo_ex[fb_logo_ex_num].logo = logo;
557         fb_logo_ex[fb_logo_ex_num].n = n;
558         fb_logo_ex_num++;
559 }
560
561 static int fb_prepare_extra_logos(struct fb_info *info, unsigned int height,
562                                   unsigned int yres)
563 {
564         unsigned int i;
565
566         /* FIXME: logo_ex supports only truecolor fb. */
567         if (info->fix.visual != FB_VISUAL_TRUECOLOR)
568                 fb_logo_ex_num = 0;
569
570         for (i = 0; i < fb_logo_ex_num; i++) {
571                 if (fb_logo_ex[i].logo->type != fb_logo.logo->type) {
572                         fb_logo_ex[i].logo = NULL;
573                         continue;
574                 }
575                 height += fb_logo_ex[i].logo->height;
576                 if (height > yres) {
577                         height -= fb_logo_ex[i].logo->height;
578                         fb_logo_ex_num = i;
579                         break;
580                 }
581         }
582         return height;
583 }
584
585 static int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
586 {
587         unsigned int i;
588
589         for (i = 0; i < fb_logo_ex_num; i++)
590                 y = fb_show_logo_line(info, rotate,
591                                       fb_logo_ex[i].logo, y, fb_logo_ex[i].n);
592
593         return y;
594 }
595
596 #else /* !CONFIG_FB_LOGO_EXTRA */
597
598 static inline int fb_prepare_extra_logos(struct fb_info *info,
599                                          unsigned int height,
600                                          unsigned int yres)
601 {
602         return height;
603 }
604
605 static inline int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
606 {
607         return y;
608 }
609
610 #endif /* CONFIG_FB_LOGO_EXTRA */
611
612
613 int fb_prepare_logo(struct fb_info *info, int rotate)
614 {
615         int depth = fb_get_color_depth(&info->var, &info->fix);
616         unsigned int yres;
617         int height;
618
619         memset(&fb_logo, 0, sizeof(struct logo_data));
620
621         if (info->flags & FBINFO_MISC_TILEBLITTING ||
622             info->fbops->owner || !fb_logo_count)
623                 return 0;
624
625         if (info->fix.visual == FB_VISUAL_DIRECTCOLOR) {
626                 depth = info->var.blue.length;
627                 if (info->var.red.length < depth)
628                         depth = info->var.red.length;
629                 if (info->var.green.length < depth)
630                         depth = info->var.green.length;
631         }
632
633         if (info->fix.visual == FB_VISUAL_STATIC_PSEUDOCOLOR && depth > 4) {
634                 /* assume console colormap */
635                 depth = 4;
636         }
637
638         /* Return if no suitable logo was found */
639         fb_logo.logo = fb_find_logo(depth);
640
641         if (!fb_logo.logo) {
642                 return 0;
643         }
644
645         if (rotate == FB_ROTATE_UR || rotate == FB_ROTATE_UD)
646                 yres = info->var.yres;
647         else
648                 yres = info->var.xres;
649
650         if (fb_logo.logo->height > yres) {
651                 fb_logo.logo = NULL;
652                 return 0;
653         }
654
655         /* What depth we asked for might be different from what we get */
656         if (fb_logo.logo->type == LINUX_LOGO_CLUT224)
657                 fb_logo.depth = 8;
658         else if (fb_logo.logo->type == LINUX_LOGO_VGA16)
659                 fb_logo.depth = 4;
660         else
661                 fb_logo.depth = 1;
662
663
664         if (fb_logo.depth > 4 && depth > 4) {
665                 switch (info->fix.visual) {
666                 case FB_VISUAL_TRUECOLOR:
667                         fb_logo.needs_truepalette = 1;
668                         break;
669                 case FB_VISUAL_DIRECTCOLOR:
670                         fb_logo.needs_directpalette = 1;
671                         fb_logo.needs_cmapreset = 1;
672                         break;
673                 case FB_VISUAL_PSEUDOCOLOR:
674                         fb_logo.needs_cmapreset = 1;
675                         break;
676                 }
677         }
678
679         height = fb_logo.logo->height;
680         if (fb_center_logo)
681                 height += (yres - fb_logo.logo->height) / 2;
682
683         return fb_prepare_extra_logos(info, height, yres);
684 }
685
686 int fb_show_logo(struct fb_info *info, int rotate)
687 {
688         unsigned int count;
689         int y;
690
691         if (!fb_logo_count)
692                 return 0;
693
694         count = fb_logo_count < 0 ? num_online_cpus() : fb_logo_count;
695         y = fb_show_logo_line(info, rotate, fb_logo.logo, 0, count);
696         y = fb_show_extra_logos(info, y, rotate);
697
698         return y;
699 }
700 #else
701 int fb_prepare_logo(struct fb_info *info, int rotate) { return 0; }
702 int fb_show_logo(struct fb_info *info, int rotate) { return 0; }
703 #endif /* CONFIG_LOGO */
704 EXPORT_SYMBOL(fb_prepare_logo);
705 EXPORT_SYMBOL(fb_show_logo);
706
707 static void *fb_seq_start(struct seq_file *m, loff_t *pos)
708 {
709         mutex_lock(&registration_lock);
710         return (*pos < FB_MAX) ? pos : NULL;
711 }
712
713 static void *fb_seq_next(struct seq_file *m, void *v, loff_t *pos)
714 {
715         (*pos)++;
716         return (*pos < FB_MAX) ? pos : NULL;
717 }
718
719 static void fb_seq_stop(struct seq_file *m, void *v)
720 {
721         mutex_unlock(&registration_lock);
722 }
723
724 static int fb_seq_show(struct seq_file *m, void *v)
725 {
726         int i = *(loff_t *)v;
727         struct fb_info *fi = registered_fb[i];
728
729         if (fi)
730                 seq_printf(m, "%d %s\n", fi->node, fi->fix.id);
731         return 0;
732 }
733
734 static const struct seq_operations __maybe_unused proc_fb_seq_ops = {
735         .start  = fb_seq_start,
736         .next   = fb_seq_next,
737         .stop   = fb_seq_stop,
738         .show   = fb_seq_show,
739 };
740
741 /*
742  * We hold a reference to the fb_info in file->private_data,
743  * but if the current registered fb has changed, we don't
744  * actually want to use it.
745  *
746  * So look up the fb_info using the inode minor number,
747  * and just verify it against the reference we have.
748  */
749 static struct fb_info *file_fb_info(struct file *file)
750 {
751         struct inode *inode = file_inode(file);
752         int fbidx = iminor(inode);
753         struct fb_info *info = registered_fb[fbidx];
754
755         if (info != file->private_data)
756                 info = NULL;
757         return info;
758 }
759
760 static ssize_t
761 fb_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)
762 {
763         unsigned long p = *ppos;
764         struct fb_info *info = file_fb_info(file);
765         u8 *buffer, *dst;
766         u8 __iomem *src;
767         int c, cnt = 0, err = 0;
768         unsigned long total_size;
769
770         if (!info || ! info->screen_base)
771                 return -ENODEV;
772
773         if (info->state != FBINFO_STATE_RUNNING)
774                 return -EPERM;
775
776         if (info->fbops->fb_read)
777                 return info->fbops->fb_read(info, buf, count, ppos);
778
779         total_size = info->screen_size;
780
781         if (total_size == 0)
782                 total_size = info->fix.smem_len;
783
784         if (p >= total_size)
785                 return 0;
786
787         if (count >= total_size)
788                 count = total_size;
789
790         if (count + p > total_size)
791                 count = total_size - p;
792
793         buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
794                          GFP_KERNEL);
795         if (!buffer)
796                 return -ENOMEM;
797
798         src = (u8 __iomem *) (info->screen_base + p);
799
800         if (info->fbops->fb_sync)
801                 info->fbops->fb_sync(info);
802
803         while (count) {
804                 c  = (count > PAGE_SIZE) ? PAGE_SIZE : count;
805                 dst = buffer;
806                 fb_memcpy_fromfb(dst, src, c);
807                 dst += c;
808                 src += c;
809
810                 if (copy_to_user(buf, buffer, c)) {
811                         err = -EFAULT;
812                         break;
813                 }
814                 *ppos += c;
815                 buf += c;
816                 cnt += c;
817                 count -= c;
818         }
819
820         kfree(buffer);
821
822         return (err) ? err : cnt;
823 }
824
825 static ssize_t
826 fb_write(struct file *file, const char __user *buf, size_t count, loff_t *ppos)
827 {
828         unsigned long p = *ppos;
829         struct fb_info *info = file_fb_info(file);
830         u8 *buffer, *src;
831         u8 __iomem *dst;
832         int c, cnt = 0, err = 0;
833         unsigned long total_size;
834
835         if (!info || !info->screen_base)
836                 return -ENODEV;
837
838         if (info->state != FBINFO_STATE_RUNNING)
839                 return -EPERM;
840
841         if (info->fbops->fb_write)
842                 return info->fbops->fb_write(info, buf, count, ppos);
843
844         total_size = info->screen_size;
845
846         if (total_size == 0)
847                 total_size = info->fix.smem_len;
848
849         if (p > total_size)
850                 return -EFBIG;
851
852         if (count > total_size) {
853                 err = -EFBIG;
854                 count = total_size;
855         }
856
857         if (count + p > total_size) {
858                 if (!err)
859                         err = -ENOSPC;
860
861                 count = total_size - p;
862         }
863
864         buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
865                          GFP_KERNEL);
866         if (!buffer)
867                 return -ENOMEM;
868
869         dst = (u8 __iomem *) (info->screen_base + p);
870
871         if (info->fbops->fb_sync)
872                 info->fbops->fb_sync(info);
873
874         while (count) {
875                 c = (count > PAGE_SIZE) ? PAGE_SIZE : count;
876                 src = buffer;
877
878                 if (copy_from_user(src, buf, c)) {
879                         err = -EFAULT;
880                         break;
881                 }
882
883                 fb_memcpy_tofb(dst, src, c);
884                 dst += c;
885                 src += c;
886                 *ppos += c;
887                 buf += c;
888                 cnt += c;
889                 count -= c;
890         }
891
892         kfree(buffer);
893
894         return (cnt) ? cnt : err;
895 }
896
897 int
898 fb_pan_display(struct fb_info *info, struct fb_var_screeninfo *var)
899 {
900         struct fb_fix_screeninfo *fix = &info->fix;
901         unsigned int yres = info->var.yres;
902         int err = 0;
903
904         if (var->yoffset > 0) {
905                 if (var->vmode & FB_VMODE_YWRAP) {
906                         if (!fix->ywrapstep || (var->yoffset % fix->ywrapstep))
907                                 err = -EINVAL;
908                         else
909                                 yres = 0;
910                 } else if (!fix->ypanstep || (var->yoffset % fix->ypanstep))
911                         err = -EINVAL;
912         }
913
914         if (var->xoffset > 0 && (!fix->xpanstep ||
915                                  (var->xoffset % fix->xpanstep)))
916                 err = -EINVAL;
917
918         if (err || !info->fbops->fb_pan_display ||
919             var->yoffset > info->var.yres_virtual - yres ||
920             var->xoffset > info->var.xres_virtual - info->var.xres)
921                 return -EINVAL;
922
923         if ((err = info->fbops->fb_pan_display(var, info)))
924                 return err;
925         info->var.xoffset = var->xoffset;
926         info->var.yoffset = var->yoffset;
927         if (var->vmode & FB_VMODE_YWRAP)
928                 info->var.vmode |= FB_VMODE_YWRAP;
929         else
930                 info->var.vmode &= ~FB_VMODE_YWRAP;
931         return 0;
932 }
933 EXPORT_SYMBOL(fb_pan_display);
934
935 static int fb_check_caps(struct fb_info *info, struct fb_var_screeninfo *var,
936                          u32 activate)
937 {
938         struct fb_blit_caps caps, fbcaps;
939         int err = 0;
940
941         memset(&caps, 0, sizeof(caps));
942         memset(&fbcaps, 0, sizeof(fbcaps));
943         caps.flags = (activate & FB_ACTIVATE_ALL) ? 1 : 0;
944         fbcon_get_requirement(info, &caps);
945         info->fbops->fb_get_caps(info, &fbcaps, var);
946
947         if (((fbcaps.x ^ caps.x) & caps.x) ||
948             ((fbcaps.y ^ caps.y) & caps.y) ||
949             (fbcaps.len < caps.len))
950                 err = -EINVAL;
951
952         return err;
953 }
954
955 int
956 fb_set_var(struct fb_info *info, struct fb_var_screeninfo *var)
957 {
958         int ret = 0;
959         u32 activate;
960         struct fb_var_screeninfo old_var;
961         struct fb_videomode mode;
962         struct fb_event event;
963         u32 unused;
964
965         if (var->activate & FB_ACTIVATE_INV_MODE) {
966                 struct fb_videomode mode1, mode2;
967
968                 fb_var_to_videomode(&mode1, var);
969                 fb_var_to_videomode(&mode2, &info->var);
970                 /* make sure we don't delete the videomode of current var */
971                 ret = fb_mode_is_equal(&mode1, &mode2);
972                 if (!ret) {
973                         ret = fbcon_mode_deleted(info, &mode1);
974                         if (!ret)
975                                 fb_delete_videomode(&mode1, &info->modelist);
976                 }
977
978                 return ret ? -EINVAL : 0;
979         }
980
981         if (!(var->activate & FB_ACTIVATE_FORCE) &&
982             !memcmp(&info->var, var, sizeof(struct fb_var_screeninfo)))
983                 return 0;
984
985         activate = var->activate;
986
987         /* When using FOURCC mode, make sure the red, green, blue and
988          * transp fields are set to 0.
989          */
990         if ((info->fix.capabilities & FB_CAP_FOURCC) &&
991             var->grayscale > 1) {
992                 if (var->red.offset     || var->green.offset    ||
993                     var->blue.offset    || var->transp.offset   ||
994                     var->red.length     || var->green.length    ||
995                     var->blue.length    || var->transp.length   ||
996                     var->red.msb_right  || var->green.msb_right ||
997                     var->blue.msb_right || var->transp.msb_right)
998                         return -EINVAL;
999         }
1000
1001         if (!info->fbops->fb_check_var) {
1002                 *var = info->var;
1003                 return 0;
1004         }
1005
1006         /* bitfill_aligned() assumes that it's at least 8x8 */
1007         if (var->xres < 8 || var->yres < 8)
1008                 return -EINVAL;
1009
1010         /* Too huge resolution causes multiplication overflow. */
1011         if (check_mul_overflow(var->xres, var->yres, &unused) ||
1012             check_mul_overflow(var->xres_virtual, var->yres_virtual, &unused))
1013                 return -EINVAL;
1014
1015         ret = info->fbops->fb_check_var(var, info);
1016
1017         if (ret)
1018                 return ret;
1019
1020         /* verify that virtual resolution >= physical resolution */
1021         if (var->xres_virtual < var->xres ||
1022             var->yres_virtual < var->yres) {
1023                 pr_warn("WARNING: fbcon: Driver '%s' missed to adjust virtual screen size (%ux%u vs. %ux%u)\n",
1024                         info->fix.id,
1025                         var->xres_virtual, var->yres_virtual,
1026                         var->xres, var->yres);
1027                 return -EINVAL;
1028         }
1029
1030         if ((var->activate & FB_ACTIVATE_MASK) != FB_ACTIVATE_NOW)
1031                 return 0;
1032
1033         if (info->fbops->fb_get_caps) {
1034                 ret = fb_check_caps(info, var, activate);
1035
1036                 if (ret)
1037                         return ret;
1038         }
1039
1040         old_var = info->var;
1041         info->var = *var;
1042
1043         if (info->fbops->fb_set_par) {
1044                 ret = info->fbops->fb_set_par(info);
1045
1046                 if (ret) {
1047                         info->var = old_var;
1048                         printk(KERN_WARNING "detected "
1049                                 "fb_set_par error, "
1050                                 "error code: %d\n", ret);
1051                         return ret;
1052                 }
1053         }
1054
1055         fb_pan_display(info, &info->var);
1056         fb_set_cmap(&info->cmap, info);
1057         fb_var_to_videomode(&mode, &info->var);
1058
1059         if (info->modelist.prev && info->modelist.next &&
1060             !list_empty(&info->modelist))
1061                 ret = fb_add_videomode(&mode, &info->modelist);
1062
1063         if (ret)
1064                 return ret;
1065
1066         event.info = info;
1067         event.data = &mode;
1068         fb_notifier_call_chain(FB_EVENT_MODE_CHANGE, &event);
1069
1070         return 0;
1071 }
1072 EXPORT_SYMBOL(fb_set_var);
1073
1074 int
1075 fb_blank(struct fb_info *info, int blank)
1076 {
1077         struct fb_event event;
1078         int ret = -EINVAL;
1079
1080         if (blank > FB_BLANK_POWERDOWN)
1081                 blank = FB_BLANK_POWERDOWN;
1082
1083         event.info = info;
1084         event.data = &blank;
1085
1086         if (info->fbops->fb_blank)
1087                 ret = info->fbops->fb_blank(blank, info);
1088
1089         if (!ret)
1090                 fb_notifier_call_chain(FB_EVENT_BLANK, &event);
1091
1092         return ret;
1093 }
1094 EXPORT_SYMBOL(fb_blank);
1095
1096 static long do_fb_ioctl(struct fb_info *info, unsigned int cmd,
1097                         unsigned long arg)
1098 {
1099         const struct fb_ops *fb;
1100         struct fb_var_screeninfo var;
1101         struct fb_fix_screeninfo fix;
1102         struct fb_cmap cmap_from;
1103         struct fb_cmap_user cmap;
1104         void __user *argp = (void __user *)arg;
1105         long ret = 0;
1106
1107         switch (cmd) {
1108         case FBIOGET_VSCREENINFO:
1109                 lock_fb_info(info);
1110                 var = info->var;
1111                 unlock_fb_info(info);
1112
1113                 ret = copy_to_user(argp, &var, sizeof(var)) ? -EFAULT : 0;
1114                 break;
1115         case FBIOPUT_VSCREENINFO:
1116                 if (copy_from_user(&var, argp, sizeof(var)))
1117                         return -EFAULT;
1118                 console_lock();
1119                 lock_fb_info(info);
1120                 ret = fbcon_modechange_possible(info, &var);
1121                 if (!ret)
1122                         ret = fb_set_var(info, &var);
1123                 if (!ret)
1124                         fbcon_update_vcs(info, var.activate & FB_ACTIVATE_ALL);
1125                 unlock_fb_info(info);
1126                 console_unlock();
1127                 if (!ret && copy_to_user(argp, &var, sizeof(var)))
1128                         ret = -EFAULT;
1129                 break;
1130         case FBIOGET_FSCREENINFO:
1131                 lock_fb_info(info);
1132                 memcpy(&fix, &info->fix, sizeof(fix));
1133                 if (info->flags & FBINFO_HIDE_SMEM_START)
1134                         fix.smem_start = 0;
1135                 unlock_fb_info(info);
1136
1137                 ret = copy_to_user(argp, &fix, sizeof(fix)) ? -EFAULT : 0;
1138                 break;
1139         case FBIOPUTCMAP:
1140                 if (copy_from_user(&cmap, argp, sizeof(cmap)))
1141                         return -EFAULT;
1142                 ret = fb_set_user_cmap(&cmap, info);
1143                 break;
1144         case FBIOGETCMAP:
1145                 if (copy_from_user(&cmap, argp, sizeof(cmap)))
1146                         return -EFAULT;
1147                 lock_fb_info(info);
1148                 cmap_from = info->cmap;
1149                 unlock_fb_info(info);
1150                 ret = fb_cmap_to_user(&cmap_from, &cmap);
1151                 break;
1152         case FBIOPAN_DISPLAY:
1153                 if (copy_from_user(&var, argp, sizeof(var)))
1154                         return -EFAULT;
1155                 console_lock();
1156                 lock_fb_info(info);
1157                 ret = fb_pan_display(info, &var);
1158                 unlock_fb_info(info);
1159                 console_unlock();
1160                 if (ret == 0 && copy_to_user(argp, &var, sizeof(var)))
1161                         return -EFAULT;
1162                 break;
1163         case FBIO_CURSOR:
1164                 ret = -EINVAL;
1165                 break;
1166         case FBIOGET_CON2FBMAP:
1167                 ret = fbcon_get_con2fb_map_ioctl(argp);
1168                 break;
1169         case FBIOPUT_CON2FBMAP:
1170                 ret = fbcon_set_con2fb_map_ioctl(argp);
1171                 break;
1172         case FBIOBLANK:
1173                 if (arg > FB_BLANK_POWERDOWN)
1174                         return -EINVAL;
1175                 console_lock();
1176                 lock_fb_info(info);
1177                 ret = fb_blank(info, arg);
1178                 /* might again call into fb_blank */
1179                 fbcon_fb_blanked(info, arg);
1180                 unlock_fb_info(info);
1181                 console_unlock();
1182                 break;
1183         default:
1184                 lock_fb_info(info);
1185                 fb = info->fbops;
1186                 if (fb->fb_ioctl)
1187                         ret = fb->fb_ioctl(info, cmd, arg);
1188                 else
1189                         ret = -ENOTTY;
1190                 unlock_fb_info(info);
1191         }
1192         return ret;
1193 }
1194
1195 static long fb_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
1196 {
1197         struct fb_info *info = file_fb_info(file);
1198
1199         if (!info)
1200                 return -ENODEV;
1201         return do_fb_ioctl(info, cmd, arg);
1202 }
1203
1204 #ifdef CONFIG_COMPAT
1205 struct fb_fix_screeninfo32 {
1206         char                    id[16];
1207         compat_caddr_t          smem_start;
1208         u32                     smem_len;
1209         u32                     type;
1210         u32                     type_aux;
1211         u32                     visual;
1212         u16                     xpanstep;
1213         u16                     ypanstep;
1214         u16                     ywrapstep;
1215         u32                     line_length;
1216         compat_caddr_t          mmio_start;
1217         u32                     mmio_len;
1218         u32                     accel;
1219         u16                     reserved[3];
1220 };
1221
1222 struct fb_cmap32 {
1223         u32                     start;
1224         u32                     len;
1225         compat_caddr_t  red;
1226         compat_caddr_t  green;
1227         compat_caddr_t  blue;
1228         compat_caddr_t  transp;
1229 };
1230
1231 static int fb_getput_cmap(struct fb_info *info, unsigned int cmd,
1232                           unsigned long arg)
1233 {
1234         struct fb_cmap32 cmap32;
1235         struct fb_cmap cmap_from;
1236         struct fb_cmap_user cmap;
1237
1238         if (copy_from_user(&cmap32, compat_ptr(arg), sizeof(cmap32)))
1239                 return -EFAULT;
1240
1241         cmap = (struct fb_cmap_user) {
1242                 .start  = cmap32.start,
1243                 .len    = cmap32.len,
1244                 .red    = compat_ptr(cmap32.red),
1245                 .green  = compat_ptr(cmap32.green),
1246                 .blue   = compat_ptr(cmap32.blue),
1247                 .transp = compat_ptr(cmap32.transp),
1248         };
1249
1250         if (cmd == FBIOPUTCMAP)
1251                 return fb_set_user_cmap(&cmap, info);
1252
1253         lock_fb_info(info);
1254         cmap_from = info->cmap;
1255         unlock_fb_info(info);
1256
1257         return fb_cmap_to_user(&cmap_from, &cmap);
1258 }
1259
1260 static int do_fscreeninfo_to_user(struct fb_fix_screeninfo *fix,
1261                                   struct fb_fix_screeninfo32 __user *fix32)
1262 {
1263         __u32 data;
1264         int err;
1265
1266         err = copy_to_user(&fix32->id, &fix->id, sizeof(fix32->id));
1267
1268         data = (__u32) (unsigned long) fix->smem_start;
1269         err |= put_user(data, &fix32->smem_start);
1270
1271         err |= put_user(fix->smem_len, &fix32->smem_len);
1272         err |= put_user(fix->type, &fix32->type);
1273         err |= put_user(fix->type_aux, &fix32->type_aux);
1274         err |= put_user(fix->visual, &fix32->visual);
1275         err |= put_user(fix->xpanstep, &fix32->xpanstep);
1276         err |= put_user(fix->ypanstep, &fix32->ypanstep);
1277         err |= put_user(fix->ywrapstep, &fix32->ywrapstep);
1278         err |= put_user(fix->line_length, &fix32->line_length);
1279
1280         data = (__u32) (unsigned long) fix->mmio_start;
1281         err |= put_user(data, &fix32->mmio_start);
1282
1283         err |= put_user(fix->mmio_len, &fix32->mmio_len);
1284         err |= put_user(fix->accel, &fix32->accel);
1285         err |= copy_to_user(fix32->reserved, fix->reserved,
1286                             sizeof(fix->reserved));
1287
1288         if (err)
1289                 return -EFAULT;
1290         return 0;
1291 }
1292
1293 static int fb_get_fscreeninfo(struct fb_info *info, unsigned int cmd,
1294                               unsigned long arg)
1295 {
1296         struct fb_fix_screeninfo fix;
1297
1298         lock_fb_info(info);
1299         fix = info->fix;
1300         if (info->flags & FBINFO_HIDE_SMEM_START)
1301                 fix.smem_start = 0;
1302         unlock_fb_info(info);
1303         return do_fscreeninfo_to_user(&fix, compat_ptr(arg));
1304 }
1305
1306 static long fb_compat_ioctl(struct file *file, unsigned int cmd,
1307                             unsigned long arg)
1308 {
1309         struct fb_info *info = file_fb_info(file);
1310         const struct fb_ops *fb;
1311         long ret = -ENOIOCTLCMD;
1312
1313         if (!info)
1314                 return -ENODEV;
1315         fb = info->fbops;
1316         switch(cmd) {
1317         case FBIOGET_VSCREENINFO:
1318         case FBIOPUT_VSCREENINFO:
1319         case FBIOPAN_DISPLAY:
1320         case FBIOGET_CON2FBMAP:
1321         case FBIOPUT_CON2FBMAP:
1322                 arg = (unsigned long) compat_ptr(arg);
1323                 fallthrough;
1324         case FBIOBLANK:
1325                 ret = do_fb_ioctl(info, cmd, arg);
1326                 break;
1327
1328         case FBIOGET_FSCREENINFO:
1329                 ret = fb_get_fscreeninfo(info, cmd, arg);
1330                 break;
1331
1332         case FBIOGETCMAP:
1333         case FBIOPUTCMAP:
1334                 ret = fb_getput_cmap(info, cmd, arg);
1335                 break;
1336
1337         default:
1338                 if (fb->fb_compat_ioctl)
1339                         ret = fb->fb_compat_ioctl(info, cmd, arg);
1340                 break;
1341         }
1342         return ret;
1343 }
1344 #endif
1345
1346 static int
1347 fb_mmap(struct file *file, struct vm_area_struct * vma)
1348 {
1349         struct fb_info *info = file_fb_info(file);
1350         unsigned long mmio_pgoff;
1351         unsigned long start;
1352         u32 len;
1353
1354         if (!info)
1355                 return -ENODEV;
1356         mutex_lock(&info->mm_lock);
1357
1358         if (info->fbops->fb_mmap) {
1359                 int res;
1360
1361                 /*
1362                  * The framebuffer needs to be accessed decrypted, be sure
1363                  * SME protection is removed ahead of the call
1364                  */
1365                 vma->vm_page_prot = pgprot_decrypted(vma->vm_page_prot);
1366                 res = info->fbops->fb_mmap(info, vma);
1367                 mutex_unlock(&info->mm_lock);
1368                 return res;
1369 #if IS_ENABLED(CONFIG_FB_DEFERRED_IO)
1370         } else if (info->fbdefio) {
1371                 /*
1372                  * FB deferred I/O wants you to handle mmap in your drivers. At a
1373                  * minimum, point struct fb_ops.fb_mmap to fb_deferred_io_mmap().
1374                  */
1375                 dev_warn_once(info->dev, "fbdev mmap not set up for deferred I/O.\n");
1376                 mutex_unlock(&info->mm_lock);
1377                 return -ENODEV;
1378 #endif
1379         }
1380
1381         /*
1382          * Ugh. This can be either the frame buffer mapping, or
1383          * if pgoff points past it, the mmio mapping.
1384          */
1385         start = info->fix.smem_start;
1386         len = info->fix.smem_len;
1387         mmio_pgoff = PAGE_ALIGN((start & ~PAGE_MASK) + len) >> PAGE_SHIFT;
1388         if (vma->vm_pgoff >= mmio_pgoff) {
1389                 if (info->var.accel_flags) {
1390                         mutex_unlock(&info->mm_lock);
1391                         return -EINVAL;
1392                 }
1393
1394                 vma->vm_pgoff -= mmio_pgoff;
1395                 start = info->fix.mmio_start;
1396                 len = info->fix.mmio_len;
1397         }
1398         mutex_unlock(&info->mm_lock);
1399
1400         vma->vm_page_prot = vm_get_page_prot(vma->vm_flags);
1401         fb_pgprotect(file, vma, start);
1402
1403         return vm_iomap_memory(vma, start, len);
1404 }
1405
1406 static int
1407 fb_open(struct inode *inode, struct file *file)
1408 __acquires(&info->lock)
1409 __releases(&info->lock)
1410 {
1411         int fbidx = iminor(inode);
1412         struct fb_info *info;
1413         int res = 0;
1414
1415         info = get_fb_info(fbidx);
1416         if (!info) {
1417                 request_module("fb%d", fbidx);
1418                 info = get_fb_info(fbidx);
1419                 if (!info)
1420                         return -ENODEV;
1421         }
1422         if (IS_ERR(info))
1423                 return PTR_ERR(info);
1424
1425         lock_fb_info(info);
1426         if (!try_module_get(info->fbops->owner)) {
1427                 res = -ENODEV;
1428                 goto out;
1429         }
1430         file->private_data = info;
1431         if (info->fbops->fb_open) {
1432                 res = info->fbops->fb_open(info,1);
1433                 if (res)
1434                         module_put(info->fbops->owner);
1435         }
1436 #ifdef CONFIG_FB_DEFERRED_IO
1437         if (info->fbdefio)
1438                 fb_deferred_io_open(info, inode, file);
1439 #endif
1440 out:
1441         unlock_fb_info(info);
1442         if (res)
1443                 put_fb_info(info);
1444         return res;
1445 }
1446
1447 static int
1448 fb_release(struct inode *inode, struct file *file)
1449 __acquires(&info->lock)
1450 __releases(&info->lock)
1451 {
1452         struct fb_info * const info = file->private_data;
1453
1454         lock_fb_info(info);
1455         if (info->fbops->fb_release)
1456                 info->fbops->fb_release(info,1);
1457         module_put(info->fbops->owner);
1458         unlock_fb_info(info);
1459         put_fb_info(info);
1460         return 0;
1461 }
1462
1463 #if defined(CONFIG_FB_PROVIDE_GET_FB_UNMAPPED_AREA) && !defined(CONFIG_MMU)
1464 unsigned long get_fb_unmapped_area(struct file *filp,
1465                                    unsigned long addr, unsigned long len,
1466                                    unsigned long pgoff, unsigned long flags)
1467 {
1468         struct fb_info * const info = filp->private_data;
1469         unsigned long fb_size = PAGE_ALIGN(info->fix.smem_len);
1470
1471         if (pgoff > fb_size || len > fb_size - pgoff)
1472                 return -EINVAL;
1473
1474         return (unsigned long)info->screen_base + pgoff;
1475 }
1476 #endif
1477
1478 static const struct file_operations fb_fops = {
1479         .owner =        THIS_MODULE,
1480         .read =         fb_read,
1481         .write =        fb_write,
1482         .unlocked_ioctl = fb_ioctl,
1483 #ifdef CONFIG_COMPAT
1484         .compat_ioctl = fb_compat_ioctl,
1485 #endif
1486         .mmap =         fb_mmap,
1487         .open =         fb_open,
1488         .release =      fb_release,
1489 #if defined(HAVE_ARCH_FB_UNMAPPED_AREA) || \
1490         (defined(CONFIG_FB_PROVIDE_GET_FB_UNMAPPED_AREA) && \
1491          !defined(CONFIG_MMU))
1492         .get_unmapped_area = get_fb_unmapped_area,
1493 #endif
1494 #ifdef CONFIG_FB_DEFERRED_IO
1495         .fsync =        fb_deferred_io_fsync,
1496 #endif
1497         .llseek =       default_llseek,
1498 };
1499
1500 struct class *fb_class;
1501 EXPORT_SYMBOL(fb_class);
1502
1503 static int fb_check_foreignness(struct fb_info *fi)
1504 {
1505         const bool foreign_endian = fi->flags & FBINFO_FOREIGN_ENDIAN;
1506
1507         fi->flags &= ~FBINFO_FOREIGN_ENDIAN;
1508
1509 #ifdef __BIG_ENDIAN
1510         fi->flags |= foreign_endian ? 0 : FBINFO_BE_MATH;
1511 #else
1512         fi->flags |= foreign_endian ? FBINFO_BE_MATH : 0;
1513 #endif /* __BIG_ENDIAN */
1514
1515         if (fi->flags & FBINFO_BE_MATH && !fb_be_math(fi)) {
1516                 pr_err("%s: enable CONFIG_FB_BIG_ENDIAN to "
1517                        "support this framebuffer\n", fi->fix.id);
1518                 return -ENOSYS;
1519         } else if (!(fi->flags & FBINFO_BE_MATH) && fb_be_math(fi)) {
1520                 pr_err("%s: enable CONFIG_FB_LITTLE_ENDIAN to "
1521                        "support this framebuffer\n", fi->fix.id);
1522                 return -ENOSYS;
1523         }
1524
1525         return 0;
1526 }
1527
1528 static bool apertures_overlap(struct aperture *gen, struct aperture *hw)
1529 {
1530         /* is the generic aperture base the same as the HW one */
1531         if (gen->base == hw->base)
1532                 return true;
1533         /* is the generic aperture base inside the hw base->hw base+size */
1534         if (gen->base > hw->base && gen->base < hw->base + hw->size)
1535                 return true;
1536         return false;
1537 }
1538
1539 static bool fb_do_apertures_overlap(struct apertures_struct *gena,
1540                                     struct apertures_struct *hwa)
1541 {
1542         int i, j;
1543         if (!hwa || !gena)
1544                 return false;
1545
1546         for (i = 0; i < hwa->count; ++i) {
1547                 struct aperture *h = &hwa->ranges[i];
1548                 for (j = 0; j < gena->count; ++j) {
1549                         struct aperture *g = &gena->ranges[j];
1550                         printk(KERN_DEBUG "checking generic (%llx %llx) vs hw (%llx %llx)\n",
1551                                 (unsigned long long)g->base,
1552                                 (unsigned long long)g->size,
1553                                 (unsigned long long)h->base,
1554                                 (unsigned long long)h->size);
1555                         if (apertures_overlap(g, h))
1556                                 return true;
1557                 }
1558         }
1559
1560         return false;
1561 }
1562
1563 static void do_unregister_framebuffer(struct fb_info *fb_info);
1564
1565 #define VGA_FB_PHYS 0xA0000
1566 static void do_remove_conflicting_framebuffers(struct apertures_struct *a,
1567                                                const char *name, bool primary)
1568 {
1569         int i;
1570
1571 restart_removal:
1572         /* check all firmware fbs and kick off if the base addr overlaps */
1573         for_each_registered_fb(i) {
1574                 struct apertures_struct *gen_aper;
1575                 struct device *device;
1576
1577                 if (!(registered_fb[i]->flags & FBINFO_MISC_FIRMWARE))
1578                         continue;
1579
1580                 gen_aper = registered_fb[i]->apertures;
1581                 device = registered_fb[i]->device;
1582                 if (fb_do_apertures_overlap(gen_aper, a) ||
1583                         (primary && gen_aper && gen_aper->count &&
1584                          gen_aper->ranges[0].base == VGA_FB_PHYS)) {
1585
1586                         printk(KERN_INFO "fb%d: switching to %s from %s\n",
1587                                i, name, registered_fb[i]->fix.id);
1588
1589                         /*
1590                          * If we kick-out a firmware driver, we also want to remove
1591                          * the underlying platform device, such as simple-framebuffer,
1592                          * VESA, EFI, etc. A native driver will then be able to
1593                          * allocate the memory range.
1594                          *
1595                          * If it's not a platform device, at least print a warning. A
1596                          * fix would add code to remove the device from the system. For
1597                          * framebuffers without any Linux device, print a warning as
1598                          * well.
1599                          */
1600                         if (!device) {
1601                                 pr_warn("fb%d: no device set\n", i);
1602                                 do_unregister_framebuffer(registered_fb[i]);
1603                         } else if (dev_is_platform(device)) {
1604                                 /*
1605                                  * Drop the lock because if the device is unregistered, its
1606                                  * driver will call to unregister_framebuffer(), that takes
1607                                  * this lock.
1608                                  */
1609                                 mutex_unlock(&registration_lock);
1610                                 platform_device_unregister(to_platform_device(device));
1611                                 mutex_lock(&registration_lock);
1612                         } else {
1613                                 pr_warn("fb%d: cannot remove device\n", i);
1614                                 do_unregister_framebuffer(registered_fb[i]);
1615                         }
1616                         /*
1617                          * Restart the removal loop now that the device has been
1618                          * unregistered and its associated framebuffer gone.
1619                          */
1620                         goto restart_removal;
1621                 }
1622         }
1623 }
1624
1625 static int do_register_framebuffer(struct fb_info *fb_info)
1626 {
1627         int i;
1628         struct fb_videomode mode;
1629
1630         if (fb_check_foreignness(fb_info))
1631                 return -ENOSYS;
1632
1633         do_remove_conflicting_framebuffers(fb_info->apertures,
1634                                            fb_info->fix.id,
1635                                            fb_is_primary_device(fb_info));
1636
1637         if (num_registered_fb == FB_MAX)
1638                 return -ENXIO;
1639
1640         num_registered_fb++;
1641         for (i = 0 ; i < FB_MAX; i++)
1642                 if (!registered_fb[i])
1643                         break;
1644         fb_info->node = i;
1645         refcount_set(&fb_info->count, 1);
1646         mutex_init(&fb_info->lock);
1647         mutex_init(&fb_info->mm_lock);
1648
1649         fb_info->dev = device_create(fb_class, fb_info->device,
1650                                      MKDEV(FB_MAJOR, i), NULL, "fb%d", i);
1651         if (IS_ERR(fb_info->dev)) {
1652                 /* Not fatal */
1653                 printk(KERN_WARNING "Unable to create device for framebuffer %d; errno = %ld\n", i, PTR_ERR(fb_info->dev));
1654                 fb_info->dev = NULL;
1655         } else
1656                 fb_init_device(fb_info);
1657
1658         if (fb_info->pixmap.addr == NULL) {
1659                 fb_info->pixmap.addr = kmalloc(FBPIXMAPSIZE, GFP_KERNEL);
1660                 if (fb_info->pixmap.addr) {
1661                         fb_info->pixmap.size = FBPIXMAPSIZE;
1662                         fb_info->pixmap.buf_align = 1;
1663                         fb_info->pixmap.scan_align = 1;
1664                         fb_info->pixmap.access_align = 32;
1665                         fb_info->pixmap.flags = FB_PIXMAP_DEFAULT;
1666                 }
1667         }
1668         fb_info->pixmap.offset = 0;
1669
1670         if (!fb_info->pixmap.blit_x)
1671                 fb_info->pixmap.blit_x = ~(u32)0;
1672
1673         if (!fb_info->pixmap.blit_y)
1674                 fb_info->pixmap.blit_y = ~(u32)0;
1675
1676         if (!fb_info->modelist.prev || !fb_info->modelist.next)
1677                 INIT_LIST_HEAD(&fb_info->modelist);
1678
1679         if (fb_info->skip_vt_switch)
1680                 pm_vt_switch_required(fb_info->dev, false);
1681         else
1682                 pm_vt_switch_required(fb_info->dev, true);
1683
1684         fb_var_to_videomode(&mode, &fb_info->var);
1685         fb_add_videomode(&mode, &fb_info->modelist);
1686         registered_fb[i] = fb_info;
1687
1688 #ifdef CONFIG_GUMSTIX_AM200EPD
1689         {
1690                 struct fb_event event;
1691                 event.info = fb_info;
1692                 fb_notifier_call_chain(FB_EVENT_FB_REGISTERED, &event);
1693         }
1694 #endif
1695
1696         return fbcon_fb_registered(fb_info);
1697 }
1698
1699 static void unbind_console(struct fb_info *fb_info)
1700 {
1701         int i = fb_info->node;
1702
1703         if (WARN_ON(i < 0 || i >= FB_MAX || registered_fb[i] != fb_info))
1704                 return;
1705
1706         fbcon_fb_unbind(fb_info);
1707 }
1708
1709 static void unlink_framebuffer(struct fb_info *fb_info)
1710 {
1711         int i;
1712
1713         i = fb_info->node;
1714         if (WARN_ON(i < 0 || i >= FB_MAX || registered_fb[i] != fb_info))
1715                 return;
1716
1717         if (!fb_info->dev)
1718                 return;
1719
1720         device_destroy(fb_class, MKDEV(FB_MAJOR, i));
1721
1722         pm_vt_switch_unregister(fb_info->dev);
1723
1724         unbind_console(fb_info);
1725
1726         fb_info->dev = NULL;
1727 }
1728
1729 static void do_unregister_framebuffer(struct fb_info *fb_info)
1730 {
1731         unlink_framebuffer(fb_info);
1732         if (fb_info->pixmap.addr &&
1733             (fb_info->pixmap.flags & FB_PIXMAP_DEFAULT)) {
1734                 kfree(fb_info->pixmap.addr);
1735                 fb_info->pixmap.addr = NULL;
1736         }
1737
1738         fb_destroy_modelist(&fb_info->modelist);
1739         registered_fb[fb_info->node] = NULL;
1740         num_registered_fb--;
1741         fb_cleanup_device(fb_info);
1742 #ifdef CONFIG_GUMSTIX_AM200EPD
1743         {
1744                 struct fb_event event;
1745                 event.info = fb_info;
1746                 fb_notifier_call_chain(FB_EVENT_FB_UNREGISTERED, &event);
1747         }
1748 #endif
1749         fbcon_fb_unregistered(fb_info);
1750
1751         /* this may free fb info */
1752         put_fb_info(fb_info);
1753 }
1754
1755 /**
1756  * remove_conflicting_framebuffers - remove firmware-configured framebuffers
1757  * @a: memory range, users of which are to be removed
1758  * @name: requesting driver name
1759  * @primary: also kick vga16fb if present
1760  *
1761  * This function removes framebuffer devices (initialized by firmware/bootloader)
1762  * which use memory range described by @a. If @a is NULL all such devices are
1763  * removed.
1764  */
1765 int remove_conflicting_framebuffers(struct apertures_struct *a,
1766                                     const char *name, bool primary)
1767 {
1768         bool do_free = false;
1769
1770         if (!a) {
1771                 a = alloc_apertures(1);
1772                 if (!a)
1773                         return -ENOMEM;
1774
1775                 a->ranges[0].base = 0;
1776                 a->ranges[0].size = ~0;
1777                 do_free = true;
1778         }
1779
1780         /*
1781          * If a driver asked to unregister a platform device registered by
1782          * sysfb, then can be assumed that this is a driver for a display
1783          * that is set up by the system firmware and has a generic driver.
1784          *
1785          * Drivers for devices that don't have a generic driver will never
1786          * ask for this, so let's assume that a real driver for the display
1787          * was already probed and prevent sysfb to register devices later.
1788          */
1789         sysfb_disable();
1790
1791         mutex_lock(&registration_lock);
1792         do_remove_conflicting_framebuffers(a, name, primary);
1793         mutex_unlock(&registration_lock);
1794
1795         if (do_free)
1796                 kfree(a);
1797
1798         return 0;
1799 }
1800 EXPORT_SYMBOL(remove_conflicting_framebuffers);
1801
1802 /**
1803  * remove_conflicting_pci_framebuffers - remove firmware-configured framebuffers for PCI devices
1804  * @pdev: PCI device
1805  * @name: requesting driver name
1806  *
1807  * This function removes framebuffer devices (eg. initialized by firmware)
1808  * using memory range configured for any of @pdev's memory bars.
1809  *
1810  * The function assumes that PCI device with shadowed ROM drives a primary
1811  * display and so kicks out vga16fb.
1812  */
1813 int remove_conflicting_pci_framebuffers(struct pci_dev *pdev, const char *name)
1814 {
1815         struct apertures_struct *ap;
1816         bool primary = false;
1817         int err, idx, bar;
1818
1819         for (idx = 0, bar = 0; bar < PCI_STD_NUM_BARS; bar++) {
1820                 if (!(pci_resource_flags(pdev, bar) & IORESOURCE_MEM))
1821                         continue;
1822                 idx++;
1823         }
1824
1825         ap = alloc_apertures(idx);
1826         if (!ap)
1827                 return -ENOMEM;
1828
1829         for (idx = 0, bar = 0; bar < PCI_STD_NUM_BARS; bar++) {
1830                 if (!(pci_resource_flags(pdev, bar) & IORESOURCE_MEM))
1831                         continue;
1832                 ap->ranges[idx].base = pci_resource_start(pdev, bar);
1833                 ap->ranges[idx].size = pci_resource_len(pdev, bar);
1834                 pci_dbg(pdev, "%s: bar %d: 0x%lx -> 0x%lx\n", __func__, bar,
1835                         (unsigned long)pci_resource_start(pdev, bar),
1836                         (unsigned long)pci_resource_end(pdev, bar));
1837                 idx++;
1838         }
1839
1840 #ifdef CONFIG_X86
1841         primary = pdev->resource[PCI_ROM_RESOURCE].flags &
1842                                         IORESOURCE_ROM_SHADOW;
1843 #endif
1844         err = remove_conflicting_framebuffers(ap, name, primary);
1845         kfree(ap);
1846         return err;
1847 }
1848 EXPORT_SYMBOL(remove_conflicting_pci_framebuffers);
1849
1850 /**
1851  *      register_framebuffer - registers a frame buffer device
1852  *      @fb_info: frame buffer info structure
1853  *
1854  *      Registers a frame buffer device @fb_info.
1855  *
1856  *      Returns negative errno on error, or zero for success.
1857  *
1858  */
1859 int
1860 register_framebuffer(struct fb_info *fb_info)
1861 {
1862         int ret;
1863
1864         mutex_lock(&registration_lock);
1865         ret = do_register_framebuffer(fb_info);
1866         mutex_unlock(&registration_lock);
1867
1868         return ret;
1869 }
1870 EXPORT_SYMBOL(register_framebuffer);
1871
1872 /**
1873  *      unregister_framebuffer - releases a frame buffer device
1874  *      @fb_info: frame buffer info structure
1875  *
1876  *      Unregisters a frame buffer device @fb_info.
1877  *
1878  *      Returns negative errno on error, or zero for success.
1879  *
1880  *      This function will also notify the framebuffer console
1881  *      to release the driver.
1882  *
1883  *      This is meant to be called within a driver's module_exit()
1884  *      function. If this is called outside module_exit(), ensure
1885  *      that the driver implements fb_open() and fb_release() to
1886  *      check that no processes are using the device.
1887  */
1888 void
1889 unregister_framebuffer(struct fb_info *fb_info)
1890 {
1891         mutex_lock(&registration_lock);
1892         do_unregister_framebuffer(fb_info);
1893         mutex_unlock(&registration_lock);
1894 }
1895 EXPORT_SYMBOL(unregister_framebuffer);
1896
1897 /**
1898  *      fb_set_suspend - low level driver signals suspend
1899  *      @info: framebuffer affected
1900  *      @state: 0 = resuming, !=0 = suspending
1901  *
1902  *      This is meant to be used by low level drivers to
1903  *      signal suspend/resume to the core & clients.
1904  *      It must be called with the console semaphore held
1905  */
1906 void fb_set_suspend(struct fb_info *info, int state)
1907 {
1908         WARN_CONSOLE_UNLOCKED();
1909
1910         if (state) {
1911                 fbcon_suspended(info);
1912                 info->state = FBINFO_STATE_SUSPENDED;
1913         } else {
1914                 info->state = FBINFO_STATE_RUNNING;
1915                 fbcon_resumed(info);
1916         }
1917 }
1918 EXPORT_SYMBOL(fb_set_suspend);
1919
1920 /**
1921  *      fbmem_init - init frame buffer subsystem
1922  *
1923  *      Initialize the frame buffer subsystem.
1924  *
1925  *      NOTE: This function is _only_ to be called by drivers/char/mem.c.
1926  *
1927  */
1928
1929 static int __init
1930 fbmem_init(void)
1931 {
1932         int ret;
1933
1934         if (!proc_create_seq("fb", 0, NULL, &proc_fb_seq_ops))
1935                 return -ENOMEM;
1936
1937         ret = register_chrdev(FB_MAJOR, "fb", &fb_fops);
1938         if (ret) {
1939                 printk("unable to get major %d for fb devs\n", FB_MAJOR);
1940                 goto err_chrdev;
1941         }
1942
1943         fb_class = class_create(THIS_MODULE, "graphics");
1944         if (IS_ERR(fb_class)) {
1945                 ret = PTR_ERR(fb_class);
1946                 pr_warn("Unable to create fb class; errno = %d\n", ret);
1947                 fb_class = NULL;
1948                 goto err_class;
1949         }
1950
1951         fb_console_init();
1952
1953         return 0;
1954
1955 err_class:
1956         unregister_chrdev(FB_MAJOR, "fb");
1957 err_chrdev:
1958         remove_proc_entry("fb", NULL);
1959         return ret;
1960 }
1961
1962 #ifdef MODULE
1963 module_init(fbmem_init);
1964 static void __exit
1965 fbmem_exit(void)
1966 {
1967         fb_console_exit();
1968
1969         remove_proc_entry("fb", NULL);
1970         class_destroy(fb_class);
1971         unregister_chrdev(FB_MAJOR, "fb");
1972 }
1973
1974 module_exit(fbmem_exit);
1975 MODULE_LICENSE("GPL");
1976 MODULE_DESCRIPTION("Framebuffer base");
1977 #else
1978 subsys_initcall(fbmem_init);
1979 #endif
1980
1981 int fb_new_modelist(struct fb_info *info)
1982 {
1983         struct fb_var_screeninfo var = info->var;
1984         struct list_head *pos, *n;
1985         struct fb_modelist *modelist;
1986         struct fb_videomode *m, mode;
1987         int err;
1988
1989         list_for_each_safe(pos, n, &info->modelist) {
1990                 modelist = list_entry(pos, struct fb_modelist, list);
1991                 m = &modelist->mode;
1992                 fb_videomode_to_var(&var, m);
1993                 var.activate = FB_ACTIVATE_TEST;
1994                 err = fb_set_var(info, &var);
1995                 fb_var_to_videomode(&mode, &var);
1996                 if (err || !fb_mode_is_equal(m, &mode)) {
1997                         list_del(pos);
1998                         kfree(pos);
1999                 }
2000         }
2001
2002         if (list_empty(&info->modelist))
2003                 return 1;
2004
2005         fbcon_new_modelist(info);
2006
2007         return 0;
2008 }
2009
2010 MODULE_LICENSE("GPL");