1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3  * Copyright (C) 2012 Red Hat
4  *
5  * based in parts on udlfb.c:
6  * Copyright (C) 2009 Roberto De Ioris <roberto@unbit.it>
7  * Copyright (C) 2009 Jaya Kumar <jayakumar.lkml@gmail.com>
8  * Copyright (C) 2009 Bernie Thompson <bernie@plugable.com>
9  */
10 
11 #include <linux/moduleparam.h>
12 #include <linux/dma-buf.h>
13 
14 #include <drm/drm_crtc_helper.h>
15 #include <drm/drm_drv.h>
16 #include <drm/drm_fb_helper.h>
17 #include <drm/drm_fourcc.h>
18 #include <drm/drm_modeset_helper.h>
19 
20 #include "udl_drv.h"
21 
22 #define DL_DEFIO_WRITE_DELAY    (HZ/20) /* fb_deferred_io.delay in jiffies */
23 
24 static int fb_defio = 0;  /* Optionally enable experimental fb_defio mmap support */
25 static int fb_bpp = 16;
26 
27 module_param(fb_bpp, int, S_IWUSR | S_IRUSR | S_IWGRP | S_IRGRP);
28 module_param(fb_defio, int, S_IWUSR | S_IRUSR | S_IWGRP | S_IRGRP);
29 
30 struct udl_fbdev {
31 	struct drm_fb_helper helper; /* must be first */
32 	struct udl_framebuffer ufb;
33 	int fb_count;
34 };
35 
36 #define DL_ALIGN_UP(x, a) ALIGN(x, a)
37 #define DL_ALIGN_DOWN(x, a) ALIGN_DOWN(x, a)
38 
39 /** Read the red component (0..255) of a 32 bpp colour. */
40 #define DLO_RGB_GETRED(col) (uint8_t)((col) & 0xFF)
41 
42 /** Read the green component (0..255) of a 32 bpp colour. */
43 #define DLO_RGB_GETGRN(col) (uint8_t)(((col) >> 8) & 0xFF)
44 
45 /** Read the blue component (0..255) of a 32 bpp colour. */
46 #define DLO_RGB_GETBLU(col) (uint8_t)(((col) >> 16) & 0xFF)
47 
48 /** Return red/green component of a 16 bpp colour number. */
49 #define DLO_RG16(red, grn) (uint8_t)((((red) & 0xF8) | ((grn) >> 5)) & 0xFF)
50 
51 /** Return green/blue component of a 16 bpp colour number. */
52 #define DLO_GB16(grn, blu) (uint8_t)(((((grn) & 0x1C) << 3) | ((blu) >> 3)) & 0xFF)
53 
54 /** Return 8 bpp colour number from red, green and blue components. */
55 #define DLO_RGB8(red, grn, blu) ((((red) << 5) | (((grn) & 3) << 3) | ((blu) & 7)) & 0xFF)
56 
57 #if 0
58 static uint8_t rgb8(uint32_t col)
59 {
60 	uint8_t red = DLO_RGB_GETRED(col);
61 	uint8_t grn = DLO_RGB_GETGRN(col);
62 	uint8_t blu = DLO_RGB_GETBLU(col);
63 
64 	return DLO_RGB8(red, grn, blu);
65 }
66 
67 static uint16_t rgb16(uint32_t col)
68 {
69 	uint8_t red = DLO_RGB_GETRED(col);
70 	uint8_t grn = DLO_RGB_GETGRN(col);
71 	uint8_t blu = DLO_RGB_GETBLU(col);
72 
73 	return (DLO_RG16(red, grn) << 8) + DLO_GB16(grn, blu);
74 }
75 #endif
76 
udl_handle_damage(struct udl_framebuffer * fb,int x,int y,int width,int height)77 int udl_handle_damage(struct udl_framebuffer *fb, int x, int y,
78 		      int width, int height)
79 {
80 	struct drm_device *dev = fb->base.dev;
81 	struct udl_device *udl = to_udl(dev);
82 	int i, ret;
83 	char *cmd;
84 	cycles_t start_cycles, end_cycles;
85 	int bytes_sent = 0;
86 	int bytes_identical = 0;
87 	struct urb *urb;
88 	int aligned_x;
89 	int log_bpp;
90 
91 	BUG_ON(!is_power_of_2(fb->base.format->cpp[0]));
92 	log_bpp = __ffs(fb->base.format->cpp[0]);
93 
94 	if (!fb->active_16)
95 		return 0;
96 
97 	if (!fb->obj->vmapping) {
98 		ret = udl_gem_vmap(fb->obj);
99 		if (ret == -ENOMEM) {
100 			DRM_ERROR("failed to vmap fb\n");
101 			return 0;
102 		}
103 		if (!fb->obj->vmapping) {
104 			DRM_ERROR("failed to vmapping\n");
105 			return 0;
106 		}
107 	}
108 
109 	aligned_x = DL_ALIGN_DOWN(x, sizeof(unsigned long));
110 	width = DL_ALIGN_UP(width + (x-aligned_x), sizeof(unsigned long));
111 	x = aligned_x;
112 
113 	if ((width <= 0) ||
114 	    (x + width > fb->base.width) ||
115 	    (y + height > fb->base.height))
116 		return -EINVAL;
117 
118 	start_cycles = get_cycles();
119 
120 	urb = udl_get_urb(dev);
121 	if (!urb)
122 		return 0;
123 	cmd = urb->transfer_buffer;
124 
125 	for (i = y; i < y + height ; i++) {
126 		const int line_offset = fb->base.pitches[0] * i;
127 		const int byte_offset = line_offset + (x << log_bpp);
128 		const int dev_byte_offset = (fb->base.width * i + x) << log_bpp;
129 		if (udl_render_hline(dev, log_bpp, &urb,
130 				     (char *) fb->obj->vmapping,
131 				     &cmd, byte_offset, dev_byte_offset,
132 				     width << log_bpp,
133 				     &bytes_identical, &bytes_sent))
134 			goto error;
135 	}
136 
137 	if (cmd > (char *) urb->transfer_buffer) {
138 		/* Send partial buffer remaining before exiting */
139 		int len;
140 		if (cmd < (char *) urb->transfer_buffer + urb->transfer_buffer_length)
141 			*cmd++ = 0xAF;
142 		len = cmd - (char *) urb->transfer_buffer;
143 		ret = udl_submit_urb(dev, urb, len);
144 		bytes_sent += len;
145 	} else
146 		udl_urb_completion(urb);
147 
148 error:
149 	atomic_add(bytes_sent, &udl->bytes_sent);
150 	atomic_add(bytes_identical, &udl->bytes_identical);
151 	atomic_add((width * height) << log_bpp, &udl->bytes_rendered);
152 	end_cycles = get_cycles();
153 	atomic_add(((unsigned int) ((end_cycles - start_cycles)
154 		    >> 10)), /* Kcycles */
155 		   &udl->cpu_kcycles_used);
156 
157 	return 0;
158 }
159 
udl_fb_mmap(struct fb_info * info,struct vm_area_struct * vma)160 static int udl_fb_mmap(struct fb_info *info, struct vm_area_struct *vma)
161 {
162 	unsigned long start = vma->vm_start;
163 	unsigned long size = vma->vm_end - vma->vm_start;
164 	unsigned long offset;
165 	unsigned long page, pos;
166 
167 	if (vma->vm_pgoff > (~0UL >> PAGE_SHIFT))
168 		return -EINVAL;
169 
170 	offset = vma->vm_pgoff << PAGE_SHIFT;
171 
172 	if (offset > info->fix.smem_len || size > info->fix.smem_len - offset)
173 		return -EINVAL;
174 
175 	pos = (unsigned long)info->fix.smem_start + offset;
176 
177 	pr_debug("mmap() framebuffer addr:%lu size:%lu\n",
178 		  pos, size);
179 
180 	/* We don't want the framebuffer to be mapped encrypted */
181 	vma->vm_page_prot = pgprot_decrypted(vma->vm_page_prot);
182 
183 	while (size > 0) {
184 		page = vmalloc_to_pfn((void *)pos);
185 		if (remap_pfn_range(vma, start, page, PAGE_SIZE, PAGE_SHARED))
186 			return -EAGAIN;
187 
188 		start += PAGE_SIZE;
189 		pos += PAGE_SIZE;
190 		if (size > PAGE_SIZE)
191 			size -= PAGE_SIZE;
192 		else
193 			size = 0;
194 	}
195 
196 	/* VM_IO | VM_DONTEXPAND | VM_DONTDUMP are set by remap_pfn_range() */
197 	return 0;
198 }
199 
200 /*
201  * It's common for several clients to have framebuffer open simultaneously.
202  * e.g. both fbcon and X. Makes things interesting.
203  * Assumes caller is holding info->lock (for open and release at least)
204  */
udl_fb_open(struct fb_info * info,int user)205 static int udl_fb_open(struct fb_info *info, int user)
206 {
207 	struct udl_fbdev *ufbdev = info->par;
208 	struct drm_device *dev = ufbdev->ufb.base.dev;
209 	struct udl_device *udl = to_udl(dev);
210 
211 	/* If the USB device is gone, we don't accept new opens */
212 	if (drm_dev_is_unplugged(&udl->drm))
213 		return -ENODEV;
214 
215 	ufbdev->fb_count++;
216 
217 #ifdef CONFIG_DRM_FBDEV_EMULATION
218 	if (fb_defio && (info->fbdefio == NULL)) {
219 		/* enable defio at last moment if not disabled by client */
220 
221 		struct fb_deferred_io *fbdefio;
222 
223 		fbdefio = kzalloc(sizeof(struct fb_deferred_io), GFP_KERNEL);
224 
225 		if (fbdefio) {
226 			fbdefio->delay = DL_DEFIO_WRITE_DELAY;
227 			fbdefio->deferred_io = drm_fb_helper_deferred_io;
228 		}
229 
230 		info->fbdefio = fbdefio;
231 		fb_deferred_io_init(info);
232 	}
233 #endif
234 
235 	pr_debug("open /dev/fb%d user=%d fb_info=%p count=%d\n",
236 		  info->node, user, info, ufbdev->fb_count);
237 
238 	return 0;
239 }
240 
241 
242 /*
243  * Assumes caller is holding info->lock mutex (for open and release at least)
244  */
udl_fb_release(struct fb_info * info,int user)245 static int udl_fb_release(struct fb_info *info, int user)
246 {
247 	struct udl_fbdev *ufbdev = info->par;
248 
249 	ufbdev->fb_count--;
250 
251 #ifdef CONFIG_DRM_FBDEV_EMULATION
252 	if ((ufbdev->fb_count == 0) && (info->fbdefio)) {
253 		fb_deferred_io_cleanup(info);
254 		kfree(info->fbdefio);
255 		info->fbdefio = NULL;
256 		info->fbops->fb_mmap = udl_fb_mmap;
257 	}
258 #endif
259 
260 	pr_debug("released /dev/fb%d user=%d count=%d\n",
261 		info->node, user, ufbdev->fb_count);
262 
263 	return 0;
264 }
265 
266 static struct fb_ops udlfb_ops = {
267 	.owner = THIS_MODULE,
268 	DRM_FB_HELPER_DEFAULT_OPS,
269 	.fb_fillrect = drm_fb_helper_sys_fillrect,
270 	.fb_copyarea = drm_fb_helper_sys_copyarea,
271 	.fb_imageblit = drm_fb_helper_sys_imageblit,
272 	.fb_mmap = udl_fb_mmap,
273 	.fb_open = udl_fb_open,
274 	.fb_release = udl_fb_release,
275 };
276 
udl_user_framebuffer_dirty(struct drm_framebuffer * fb,struct drm_file * file,unsigned flags,unsigned color,struct drm_clip_rect * clips,unsigned num_clips)277 static int udl_user_framebuffer_dirty(struct drm_framebuffer *fb,
278 				      struct drm_file *file,
279 				      unsigned flags, unsigned color,
280 				      struct drm_clip_rect *clips,
281 				      unsigned num_clips)
282 {
283 	struct udl_framebuffer *ufb = to_udl_fb(fb);
284 	int i;
285 	int ret = 0;
286 
287 	drm_modeset_lock_all(fb->dev);
288 
289 	if (!ufb->active_16)
290 		goto unlock;
291 
292 	if (ufb->obj->base.import_attach) {
293 		ret = dma_buf_begin_cpu_access(ufb->obj->base.import_attach->dmabuf,
294 					       DMA_FROM_DEVICE);
295 		if (ret)
296 			goto unlock;
297 	}
298 
299 	for (i = 0; i < num_clips; i++) {
300 		ret = udl_handle_damage(ufb, clips[i].x1, clips[i].y1,
301 				  clips[i].x2 - clips[i].x1,
302 				  clips[i].y2 - clips[i].y1);
303 		if (ret)
304 			break;
305 	}
306 
307 	if (ufb->obj->base.import_attach) {
308 		ret = dma_buf_end_cpu_access(ufb->obj->base.import_attach->dmabuf,
309 					     DMA_FROM_DEVICE);
310 	}
311 
312  unlock:
313 	drm_modeset_unlock_all(fb->dev);
314 
315 	return ret;
316 }
317 
udl_user_framebuffer_destroy(struct drm_framebuffer * fb)318 static void udl_user_framebuffer_destroy(struct drm_framebuffer *fb)
319 {
320 	struct udl_framebuffer *ufb = to_udl_fb(fb);
321 
322 	if (ufb->obj)
323 		drm_gem_object_put_unlocked(&ufb->obj->base);
324 
325 	drm_framebuffer_cleanup(fb);
326 	kfree(ufb);
327 }
328 
329 static const struct drm_framebuffer_funcs udlfb_funcs = {
330 	.destroy = udl_user_framebuffer_destroy,
331 	.dirty = udl_user_framebuffer_dirty,
332 };
333 
334 
335 static int
udl_framebuffer_init(struct drm_device * dev,struct udl_framebuffer * ufb,const struct drm_mode_fb_cmd2 * mode_cmd,struct udl_gem_object * obj)336 udl_framebuffer_init(struct drm_device *dev,
337 		     struct udl_framebuffer *ufb,
338 		     const struct drm_mode_fb_cmd2 *mode_cmd,
339 		     struct udl_gem_object *obj)
340 {
341 	int ret;
342 
343 	ufb->obj = obj;
344 	drm_helper_mode_fill_fb_struct(dev, &ufb->base, mode_cmd);
345 	ret = drm_framebuffer_init(dev, &ufb->base, &udlfb_funcs);
346 	return ret;
347 }
348 
349 
udlfb_create(struct drm_fb_helper * helper,struct drm_fb_helper_surface_size * sizes)350 static int udlfb_create(struct drm_fb_helper *helper,
351 			struct drm_fb_helper_surface_size *sizes)
352 {
353 	struct udl_fbdev *ufbdev =
354 		container_of(helper, struct udl_fbdev, helper);
355 	struct drm_device *dev = ufbdev->helper.dev;
356 	struct fb_info *info;
357 	struct drm_framebuffer *fb;
358 	struct drm_mode_fb_cmd2 mode_cmd;
359 	struct udl_gem_object *obj;
360 	uint32_t size;
361 	int ret = 0;
362 
363 	if (sizes->surface_bpp == 24)
364 		sizes->surface_bpp = 32;
365 
366 	mode_cmd.width = sizes->surface_width;
367 	mode_cmd.height = sizes->surface_height;
368 	mode_cmd.pitches[0] = mode_cmd.width * ((sizes->surface_bpp + 7) / 8);
369 
370 	mode_cmd.pixel_format = drm_mode_legacy_fb_format(sizes->surface_bpp,
371 							  sizes->surface_depth);
372 
373 	size = mode_cmd.pitches[0] * mode_cmd.height;
374 	size = ALIGN(size, PAGE_SIZE);
375 
376 	obj = udl_gem_alloc_object(dev, size);
377 	if (!obj)
378 		goto out;
379 
380 	ret = udl_gem_vmap(obj);
381 	if (ret) {
382 		DRM_ERROR("failed to vmap fb\n");
383 		goto out_gfree;
384 	}
385 
386 	info = drm_fb_helper_alloc_fbi(helper);
387 	if (IS_ERR(info)) {
388 		ret = PTR_ERR(info);
389 		goto out_gfree;
390 	}
391 
392 	ret = udl_framebuffer_init(dev, &ufbdev->ufb, &mode_cmd, obj);
393 	if (ret)
394 		goto out_gfree;
395 
396 	fb = &ufbdev->ufb.base;
397 
398 	ufbdev->helper.fb = fb;
399 
400 	info->screen_base = ufbdev->ufb.obj->vmapping;
401 	info->fix.smem_len = size;
402 	info->fix.smem_start = (unsigned long)ufbdev->ufb.obj->vmapping;
403 
404 	info->fbops = &udlfb_ops;
405 	drm_fb_helper_fill_info(info, &ufbdev->helper, sizes);
406 
407 	DRM_DEBUG_KMS("allocated %dx%d vmal %p\n",
408 		      fb->width, fb->height,
409 		      ufbdev->ufb.obj->vmapping);
410 
411 	return ret;
412 out_gfree:
413 	drm_gem_object_put_unlocked(&ufbdev->ufb.obj->base);
414 out:
415 	return ret;
416 }
417 
418 static const struct drm_fb_helper_funcs udl_fb_helper_funcs = {
419 	.fb_probe = udlfb_create,
420 };
421 
udl_fbdev_destroy(struct drm_device * dev,struct udl_fbdev * ufbdev)422 static void udl_fbdev_destroy(struct drm_device *dev,
423 			      struct udl_fbdev *ufbdev)
424 {
425 	drm_fb_helper_unregister_fbi(&ufbdev->helper);
426 	drm_fb_helper_fini(&ufbdev->helper);
427 	if (ufbdev->ufb.obj) {
428 		drm_framebuffer_unregister_private(&ufbdev->ufb.base);
429 		drm_framebuffer_cleanup(&ufbdev->ufb.base);
430 		drm_gem_object_put_unlocked(&ufbdev->ufb.obj->base);
431 	}
432 }
433 
udl_fbdev_init(struct drm_device * dev)434 int udl_fbdev_init(struct drm_device *dev)
435 {
436 	struct udl_device *udl = to_udl(dev);
437 	int bpp_sel = fb_bpp;
438 	struct udl_fbdev *ufbdev;
439 	int ret;
440 
441 	ufbdev = kzalloc(sizeof(struct udl_fbdev), GFP_KERNEL);
442 	if (!ufbdev)
443 		return -ENOMEM;
444 
445 	udl->fbdev = ufbdev;
446 
447 	drm_fb_helper_prepare(dev, &ufbdev->helper, &udl_fb_helper_funcs);
448 
449 	ret = drm_fb_helper_init(dev, &ufbdev->helper, 1);
450 	if (ret)
451 		goto free;
452 
453 	ret = drm_fb_helper_single_add_all_connectors(&ufbdev->helper);
454 	if (ret)
455 		goto fini;
456 
457 	/* disable all the possible outputs/crtcs before entering KMS mode */
458 	drm_helper_disable_unused_functions(dev);
459 
460 	ret = drm_fb_helper_initial_config(&ufbdev->helper, bpp_sel);
461 	if (ret)
462 		goto fini;
463 
464 	return 0;
465 
466 fini:
467 	drm_fb_helper_fini(&ufbdev->helper);
468 free:
469 	kfree(ufbdev);
470 	return ret;
471 }
472 
udl_fbdev_cleanup(struct drm_device * dev)473 void udl_fbdev_cleanup(struct drm_device *dev)
474 {
475 	struct udl_device *udl = to_udl(dev);
476 	if (!udl->fbdev)
477 		return;
478 
479 	udl_fbdev_destroy(dev, udl->fbdev);
480 	kfree(udl->fbdev);
481 	udl->fbdev = NULL;
482 }
483 
udl_fbdev_unplug(struct drm_device * dev)484 void udl_fbdev_unplug(struct drm_device *dev)
485 {
486 	struct udl_device *udl = to_udl(dev);
487 	struct udl_fbdev *ufbdev;
488 	if (!udl->fbdev)
489 		return;
490 
491 	ufbdev = udl->fbdev;
492 	drm_fb_helper_unlink_fbi(&ufbdev->helper);
493 }
494 
495 struct drm_framebuffer *
udl_fb_user_fb_create(struct drm_device * dev,struct drm_file * file,const struct drm_mode_fb_cmd2 * mode_cmd)496 udl_fb_user_fb_create(struct drm_device *dev,
497 		   struct drm_file *file,
498 		   const struct drm_mode_fb_cmd2 *mode_cmd)
499 {
500 	struct drm_gem_object *obj;
501 	struct udl_framebuffer *ufb;
502 	int ret;
503 	uint32_t size;
504 
505 	obj = drm_gem_object_lookup(file, mode_cmd->handles[0]);
506 	if (obj == NULL)
507 		return ERR_PTR(-ENOENT);
508 
509 	size = mode_cmd->pitches[0] * mode_cmd->height;
510 	size = ALIGN(size, PAGE_SIZE);
511 
512 	if (size > obj->size) {
513 		DRM_ERROR("object size not sufficient for fb %d %zu %d %d\n", size, obj->size, mode_cmd->pitches[0], mode_cmd->height);
514 		return ERR_PTR(-ENOMEM);
515 	}
516 
517 	ufb = kzalloc(sizeof(*ufb), GFP_KERNEL);
518 	if (ufb == NULL)
519 		return ERR_PTR(-ENOMEM);
520 
521 	ret = udl_framebuffer_init(dev, ufb, mode_cmd, to_udl_bo(obj));
522 	if (ret) {
523 		kfree(ufb);
524 		return ERR_PTR(-EINVAL);
525 	}
526 	return &ufb->base;
527 }
528