drivers/gpu/drm/drm_crtc.c

   1 /*
   2  * Copyright (c) 2006-2008 Intel Corporation
   3  * Copyright (c) 2007 Dave Airlie <airlied@linux.ie>
   4  * Copyright (c) 2008 Red Hat Inc.
   5  *
   6  * DRM core CRTC related functions
   7  *
   8  * Permission to use, copy, modify, distribute, and sell this software and its
   9  * documentation for any purpose is hereby granted without fee, provided that
  10  * the above copyright notice appear in all copies and that both that copyright
  11  * notice and this permission notice appear in supporting documentation, and
  12  * that the name of the copyright holders not be used in advertising or
  13  * publicity pertaining to distribution of the software without specific,
  14  * written prior permission.  The copyright holders make no representations
  15  * about the suitability of this software for any purpose.  It is provided "as
  16  * is" without express or implied warranty.
  17  *
  18  * THE COPYRIGHT HOLDERS DISCLAIM ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
  19  * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
  20  * EVENT SHALL THE COPYRIGHT HOLDERS BE LIABLE FOR ANY SPECIAL, INDIRECT OR
  21  * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
  22  * DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
  23  * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
  24  * OF THIS SOFTWARE.
  25  *
  26  * Authors:
  27  *      Keith Packard
  28  *      Eric Anholt <eric@anholt.net>
  29  *      Dave Airlie <airlied@linux.ie>
  30  *      Jesse Barnes <jesse.barnes@intel.com>
  31  */
  32 #include <linux/list.h>
  33 #include <linux/slab.h>
  34 #include <linux/export.h>
  35 #include <drm/drmP.h>
  36 #include <drm/drm_crtc.h>
  37 #include <drm/drm_edid.h>
  38 #include <drm/drm_fourcc.h>
  39
  40 /**
  41  * drm_modeset_lock_all - take all modeset locks
  42  * @dev: drm device
  43  *
  44  * This function takes all modeset locks, suitable where a more fine-grained
  45  * scheme isn't (yet) implemented.
  46  */
  47 void drm_modeset_lock_all(struct drm_device *dev)
  48 {
  49         struct drm_crtc *crtc;
  50
  51         mutex_lock(&dev->mode_config.mutex);
  52
  53         list_for_each_entry(crtc, &dev->mode_config.crtc_list, head)
  54                 mutex_lock_nest_lock(&crtc->mutex, &dev->mode_config.mutex);
  55 }
  56 EXPORT_SYMBOL(drm_modeset_lock_all);
  57
  58 /**
  59  * drm_modeset_unlock_all - drop all modeset locks
  60  * @dev: device
  61  */
  62 void drm_modeset_unlock_all(struct drm_device *dev)
  63 {
  64         struct drm_crtc *crtc;
  65
  66         list_for_each_entry(crtc, &dev->mode_config.crtc_list, head)
  67                 mutex_unlock(&crtc->mutex);
  68
  69         mutex_unlock(&dev->mode_config.mutex);
  70 }
  71 EXPORT_SYMBOL(drm_modeset_unlock_all);
  72
  73 /**
  74  * drm_warn_on_modeset_not_all_locked - check that all modeset locks are locked
  75  * @dev: device
  76  */
  77 void drm_warn_on_modeset_not_all_locked(struct drm_device *dev)
  78 {
  79         struct drm_crtc *crtc;
  80
  81         list_for_each_entry(crtc, &dev->mode_config.crtc_list, head)
  82                 WARN_ON(!mutex_is_locked(&crtc->mutex));
  83
  84         WARN_ON(!mutex_is_locked(&dev->mode_config.mutex));
  85 }
  86 EXPORT_SYMBOL(drm_warn_on_modeset_not_all_locked);
  87
  88 /* Avoid boilerplate.  I'm tired of typing. */
  89 #define DRM_ENUM_NAME_FN(fnname, list)                          \
  90         char *fnname(int val)                                   \
  91         {                                                       \
  92                 int i;                                          \
  93                 for (i = 0; i < ARRAY_SIZE(list); i++) {        \
  94                         if (list[i].type == val)                \
  95                                 return list[i].name;            \
  96                 }                                               \
  97                 return "(unknown)";                             \
  98         }
  99
 100 /*
 101  * Global properties
 102  */
 103 static struct drm_prop_enum_list drm_dpms_enum_list[] =
 104 {       { DRM_MODE_DPMS_ON, "On" },
 105         { DRM_MODE_DPMS_STANDBY, "Standby" },
 106         { DRM_MODE_DPMS_SUSPEND, "Suspend" },
 107         { DRM_MODE_DPMS_OFF, "Off" }
 108 };
 109
 110 DRM_ENUM_NAME_FN(drm_get_dpms_name, drm_dpms_enum_list)
 111
 112 /*
 113  * Optional properties
 114  */
 115 static struct drm_prop_enum_list drm_scaling_mode_enum_list[] =
 116 {
 117         { DRM_MODE_SCALE_NONE, "None" },
 118         { DRM_MODE_SCALE_FULLSCREEN, "Full" },
 119         { DRM_MODE_SCALE_CENTER, "Center" },
 120         { DRM_MODE_SCALE_ASPECT, "Full aspect" },
 121 };
 122
 123 static struct drm_prop_enum_list drm_dithering_mode_enum_list[] =
 124 {
 125         { DRM_MODE_DITHERING_OFF, "Off" },
 126         { DRM_MODE_DITHERING_ON, "On" },
 127         { DRM_MODE_DITHERING_AUTO, "Automatic" },
 128 };
 129
 130 /*
 131  * Non-global properties, but "required" for certain connectors.
 132  */
 133 static struct drm_prop_enum_list drm_dvi_i_select_enum_list[] =
 134 {
 135         { DRM_MODE_SUBCONNECTOR_Automatic, "Automatic" }, /* DVI-I and TV-out */
 136         { DRM_MODE_SUBCONNECTOR_DVID,      "DVI-D"     }, /* DVI-I  */
 137         { DRM_MODE_SUBCONNECTOR_DVIA,      "DVI-A"     }, /* DVI-I  */
 138 };
 139
 140 DRM_ENUM_NAME_FN(drm_get_dvi_i_select_name, drm_dvi_i_select_enum_list)
 141
 142 static struct drm_prop_enum_list drm_dvi_i_subconnector_enum_list[] =
 143 {
 144         { DRM_MODE_SUBCONNECTOR_Unknown,   "Unknown"   }, /* DVI-I and TV-out */
 145         { DRM_MODE_SUBCONNECTOR_DVID,      "DVI-D"     }, /* DVI-I  */
 146         { DRM_MODE_SUBCONNECTOR_DVIA,      "DVI-A"     }, /* DVI-I  */
 147 };
 148
 149 DRM_ENUM_NAME_FN(drm_get_dvi_i_subconnector_name,
 150                  drm_dvi_i_subconnector_enum_list)
 151
 152 static struct drm_prop_enum_list drm_tv_select_enum_list[] =
 153 {
 154         { DRM_MODE_SUBCONNECTOR_Automatic, "Automatic" }, /* DVI-I and TV-out */
 155         { DRM_MODE_SUBCONNECTOR_Composite, "Composite" }, /* TV-out */
 156         { DRM_MODE_SUBCONNECTOR_SVIDEO,    "SVIDEO"    }, /* TV-out */
 157         { DRM_MODE_SUBCONNECTOR_Component, "Component" }, /* TV-out */
 158         { DRM_MODE_SUBCONNECTOR_SCART,     "SCART"     }, /* TV-out */
 159 };
 160
 161 DRM_ENUM_NAME_FN(drm_get_tv_select_name, drm_tv_select_enum_list)
 162
 163 static struct drm_prop_enum_list drm_tv_subconnector_enum_list[] =
 164 {
 165         { DRM_MODE_SUBCONNECTOR_Unknown,   "Unknown"   }, /* DVI-I and TV-out */
 166         { DRM_MODE_SUBCONNECTOR_Composite, "Composite" }, /* TV-out */
 167         { DRM_MODE_SUBCONNECTOR_SVIDEO,    "SVIDEO"    }, /* TV-out */
 168         { DRM_MODE_SUBCONNECTOR_Component, "Component" }, /* TV-out */
 169         { DRM_MODE_SUBCONNECTOR_SCART,     "SCART"     }, /* TV-out */
 170 };
 171
 172 DRM_ENUM_NAME_FN(drm_get_tv_subconnector_name,
 173                  drm_tv_subconnector_enum_list)
 174
 175 static struct drm_prop_enum_list drm_dirty_info_enum_list[] = {
 176         { DRM_MODE_DIRTY_OFF,      "Off"      },
 177         { DRM_MODE_DIRTY_ON,       "On"       },
 178         { DRM_MODE_DIRTY_ANNOTATE, "Annotate" },
 179 };
 180
 181 struct drm_conn_prop_enum_list {
 182         int type;
 183         char *name;
 184         int count;
 185 };
 186
 187 /*
 188  * Connector and encoder types.
 189  */
 190 static struct drm_conn_prop_enum_list drm_connector_enum_list[] =
 191 {       { DRM_MODE_CONNECTOR_Unknown, "Unknown", 0 },
 192         { DRM_MODE_CONNECTOR_VGA, "VGA", 0 },
 193         { DRM_MODE_CONNECTOR_DVII, "DVI-I", 0 },
 194         { DRM_MODE_CONNECTOR_DVID, "DVI-D", 0 },
 195         { DRM_MODE_CONNECTOR_DVIA, "DVI-A", 0 },
 196         { DRM_MODE_CONNECTOR_Composite, "Composite", 0 },
 197         { DRM_MODE_CONNECTOR_SVIDEO, "SVIDEO", 0 },
 198         { DRM_MODE_CONNECTOR_LVDS, "LVDS", 0 },
 199         { DRM_MODE_CONNECTOR_Component, "Component", 0 },
 200         { DRM_MODE_CONNECTOR_9PinDIN, "DIN", 0 },
 201         { DRM_MODE_CONNECTOR_DisplayPort, "DP", 0 },
 202         { DRM_MODE_CONNECTOR_HDMIA, "HDMI-A", 0 },
 203         { DRM_MODE_CONNECTOR_HDMIB, "HDMI-B", 0 },
 204         { DRM_MODE_CONNECTOR_TV, "TV", 0 },
 205         { DRM_MODE_CONNECTOR_eDP, "eDP", 0 },
 206         { DRM_MODE_CONNECTOR_VIRTUAL, "Virtual", 0},
 207 };
 208
 209 static struct drm_prop_enum_list drm_encoder_enum_list[] =
 210 {       { DRM_MODE_ENCODER_NONE, "None" },
 211         { DRM_MODE_ENCODER_DAC, "DAC" },
 212         { DRM_MODE_ENCODER_TMDS, "TMDS" },
 213         { DRM_MODE_ENCODER_LVDS, "LVDS" },
 214         { DRM_MODE_ENCODER_TVDAC, "TV" },
 215         { DRM_MODE_ENCODER_VIRTUAL, "Virtual" },
 216 };
 217
 218 char *drm_get_encoder_name(struct drm_encoder *encoder)
 219 {
 220         static char buf[32];
 221
 222         snprintf(buf, 32, "%s-%d",
 223                  drm_encoder_enum_list[encoder->encoder_type].name,
 224                  encoder->base.id);
 225         return buf;
 226 }
 227 EXPORT_SYMBOL(drm_get_encoder_name);
 228
 229 char *drm_get_connector_name(struct drm_connector *connector)
 230 {
 231         static char buf[32];
 232
 233         snprintf(buf, 32, "%s-%d",
 234                  drm_connector_enum_list[connector->connector_type].name,
 235                  connector->connector_type_id);
 236         return buf;
 237 }
 238 EXPORT_SYMBOL(drm_get_connector_name);
 239
 240 char *drm_get_connector_status_name(enum drm_connector_status status)
 241 {
 242         if (status == connector_status_connected)
 243                 return "connected";
 244         else if (status == connector_status_disconnected)
 245                 return "disconnected";
 246         else
 247                 return "unknown";
 248 }
 249
 250 /**
 251  * drm_mode_object_get - allocate a new modeset identifier
 252  * @dev: DRM device
 253  * @obj: object pointer, used to generate unique ID
 254  * @obj_type: object type
 255  *
 256  * Create a unique identifier based on @ptr in @dev's identifier space.  Used
 257  * for tracking modes, CRTCs and connectors.
 258  *
 259  * RETURNS:
 260  * New unique (relative to other objects in @dev) integer identifier for the
 261  * object.
 262  */
 263 static int drm_mode_object_get(struct drm_device *dev,
 264                                struct drm_mode_object *obj, uint32_t obj_type)
 265 {
 266         int ret;
 267
 268         mutex_lock(&dev->mode_config.idr_mutex);
 269         ret = idr_alloc(&dev->mode_config.crtc_idr, obj, 1, 0, GFP_KERNEL);
 270         if (ret >= 0) {
 271                 /*
 272                  * Set up the object linking under the protection of the idr
 273                  * lock so that other users can't see inconsistent state.
 274                  */
 275                 obj->id = ret;
 276                 obj->type = obj_type;
 277         }
 278         mutex_unlock(&dev->mode_config.idr_mutex);
 279
 280         return ret < 0 ? ret : 0;
 281 }
 282
 283 /**
 284  * drm_mode_object_put - free a modeset identifer
 285  * @dev: DRM device
 286  * @object: object to free
 287  *
 288  * Free @id from @dev's unique identifier pool.
 289  */
 290 static void drm_mode_object_put(struct drm_device *dev,
 291                                 struct drm_mode_object *object)
 292 {
 293         mutex_lock(&dev->mode_config.idr_mutex);
 294         idr_remove(&dev->mode_config.crtc_idr, object->id);
 295         mutex_unlock(&dev->mode_config.idr_mutex);
 296 }
 297
 298 /**
 299  * drm_mode_object_find - look up a drm object with static lifetime
 300  * @dev: drm device
 301  * @id: id of the mode object
 302  * @type: type of the mode object
 303  *
 304  * Note that framebuffers cannot be looked up with this functions - since those
 305  * are reference counted, they need special treatment.
 306  */
 307 struct drm_mode_object *drm_mode_object_find(struct drm_device *dev,
 308                 uint32_t id, uint32_t type)
 309 {
 310         struct drm_mode_object *obj = NULL;
 311
 312         /* Framebuffers are reference counted and need their own lookup
 313          * function.*/
 314         WARN_ON(type == DRM_MODE_OBJECT_FB);
 315
 316         mutex_lock(&dev->mode_config.idr_mutex);
 317         obj = idr_find(&dev->mode_config.crtc_idr, id);
 318         if (!obj || (obj->type != type) || (obj->id != id))
 319                 obj = NULL;
 320         mutex_unlock(&dev->mode_config.idr_mutex);
 321
 322         return obj;
 323 }
 324 EXPORT_SYMBOL(drm_mode_object_find);
 325
 326 /**
 327  * drm_framebuffer_init - initialize a framebuffer
 328  * @dev: DRM device
 329  * @fb: framebuffer to be initialized
 330  * @funcs: ... with these functions
 331  *
 332  * Allocates an ID for the framebuffer's parent mode object, sets its mode
 333  * functions & device file and adds it to the master fd list.
 334  *
 335  * IMPORTANT:
 336  * This functions publishes the fb and makes it available for concurrent access
 337  * by other users. Which means by this point the fb _must_ be fully set up -
 338  * since all the fb attributes are invariant over its lifetime, no further
 339  * locking but only correct reference counting is required.
 340  *
 341  * RETURNS:
 342  * Zero on success, error code on failure.
 343  */
 344 int drm_framebuffer_init(struct drm_device *dev, struct drm_framebuffer *fb,
 345                          const struct drm_framebuffer_funcs *funcs)
 346 {
 347         int ret;
 348
 349         mutex_lock(&dev->mode_config.fb_lock);
 350         kref_init(&fb->refcount);
 351         INIT_LIST_HEAD(&fb->filp_head);
 352         fb->dev = dev;
 353         fb->funcs = funcs;
 354
 355         ret = drm_mode_object_get(dev, &fb->base, DRM_MODE_OBJECT_FB);
 356         if (ret)
 357                 goto out;
 358
 359         /* Grab the idr reference. */
 360         drm_framebuffer_reference(fb);
 361
 362         dev->mode_config.num_fb++;
 363         list_add(&fb->head, &dev->mode_config.fb_list);
 364 out:
 365         mutex_unlock(&dev->mode_config.fb_lock);
 366
 367         return 0;
 368 }
 369 EXPORT_SYMBOL(drm_framebuffer_init);
 370
 371 static void drm_framebuffer_free(struct kref *kref)
 372 {
 373         struct drm_framebuffer *fb =
 374                         container_of(kref, struct drm_framebuffer, refcount);
 375         fb->funcs->destroy(fb);
 376 }
 377
 378 static struct drm_framebuffer *__drm_framebuffer_lookup(struct drm_device *dev,
 379                                                         uint32_t id)
 380 {
 381         struct drm_mode_object *obj = NULL;
 382         struct drm_framebuffer *fb;
 383
 384         mutex_lock(&dev->mode_config.idr_mutex);
 385         obj = idr_find(&dev->mode_config.crtc_idr, id);
 386         if (!obj || (obj->type != DRM_MODE_OBJECT_FB) || (obj->id != id))
 387                 fb = NULL;
 388         else
 389                 fb = obj_to_fb(obj);
 390         mutex_unlock(&dev->mode_config.idr_mutex);
 391
 392         return fb;
 393 }
 394
 395 /**
 396  * drm_framebuffer_lookup - look up a drm framebuffer and grab a reference
 397  * @dev: drm device
 398  * @id: id of the fb object
 399  *
 400  * If successful, this grabs an additional reference to the framebuffer -
 401  * callers need to make sure to eventually unreference the returned framebuffer
 402  * again.
 403  */
 404 struct drm_framebuffer *drm_framebuffer_lookup(struct drm_device *dev,
 405                                                uint32_t id)
 406 {
 407         struct drm_framebuffer *fb;
 408
 409         mutex_lock(&dev->mode_config.fb_lock);
 410         fb = __drm_framebuffer_lookup(dev, id);
 411         if (fb)
 412                 drm_framebuffer_reference(fb);
 413         mutex_unlock(&dev->mode_config.fb_lock);
 414
 415         return fb;
 416 }
 417 EXPORT_SYMBOL(drm_framebuffer_lookup);
 418
 419 /**
 420  * drm_framebuffer_unreference - unref a framebuffer
 421  * @fb: framebuffer to unref
 422  *
 423  * This functions decrements the fb's refcount and frees it if it drops to zero.
 424  */
 425 void drm_framebuffer_unreference(struct drm_framebuffer *fb)
 426 {
 427         DRM_DEBUG("FB ID: %d\n", fb->base.id);
 428         kref_put(&fb->refcount, drm_framebuffer_free);
 429 }
 430 EXPORT_SYMBOL(drm_framebuffer_unreference);
 431
 432 /**
 433  * drm_framebuffer_reference - incr the fb refcnt
 434  * @fb: framebuffer
 435  */
 436 void drm_framebuffer_reference(struct drm_framebuffer *fb)
 437 {
 438         DRM_DEBUG("FB ID: %d\n", fb->base.id);
 439         kref_get(&fb->refcount);
 440 }
 441 EXPORT_SYMBOL(drm_framebuffer_reference);
 442
 443 static void drm_framebuffer_free_bug(struct kref *kref)
 444 {
 445         BUG();
 446 }
 447
 448 static void __drm_framebuffer_unreference(struct drm_framebuffer *fb)
 449 {
 450         DRM_DEBUG("FB ID: %d\n", fb->base.id);
 451         kref_put(&fb->refcount, drm_framebuffer_free_bug);
 452 }
 453
 454 /* dev->mode_config.fb_lock must be held! */
 455 static void __drm_framebuffer_unregister(struct drm_device *dev,
 456                                          struct drm_framebuffer *fb)
 457 {
 458         mutex_lock(&dev->mode_config.idr_mutex);
 459         idr_remove(&dev->mode_config.crtc_idr, fb->base.id);
 460         mutex_unlock(&dev->mode_config.idr_mutex);
 461
 462         fb->base.id = 0;
 463
 464         __drm_framebuffer_unreference(fb);
 465 }
 466
 467 /**
 468  * drm_framebuffer_unregister_private - unregister a private fb from the lookup idr
 469  * @fb: fb to unregister
 470  *
 471  * Drivers need to call this when cleaning up driver-private framebuffers, e.g.
 472  * those used for fbdev. Note that the caller must hold a reference of it's own,
 473  * i.e. the object may not be destroyed through this call (since it'll lead to a
 474  * locking inversion).
 475  */
 476 void drm_framebuffer_unregister_private(struct drm_framebuffer *fb)
 477 {
 478         struct drm_device *dev = fb->dev;
 479
 480         mutex_lock(&dev->mode_config.fb_lock);
 481         /* Mark fb as reaped and drop idr ref. */
 482         __drm_framebuffer_unregister(dev, fb);
 483         mutex_unlock(&dev->mode_config.fb_lock);
 484 }
 485 EXPORT_SYMBOL(drm_framebuffer_unregister_private);
 486
 487 /**
 488  * drm_framebuffer_cleanup - remove a framebuffer object
 489  * @fb: framebuffer to remove
 490  *
 491  * Cleanup references to a user-created framebuffer. This function is intended
 492  * to be used from the drivers ->destroy callback.
 493  *
 494  * Note that this function does not remove the fb from active usuage - if it is
 495  * still used anywhere, hilarity can ensue since userspace could call getfb on
 496  * the id and get back -EINVAL. Obviously no concern at driver unload time.
 497  *
 498  * Also, the framebuffer will not be removed from the lookup idr - for
 499  * user-created framebuffers this will happen in in the rmfb ioctl. For
 500  * driver-private objects (e.g. for fbdev) drivers need to explicitly call
 501  * drm_framebuffer_unregister_private.
 502  */
 503 void drm_framebuffer_cleanup(struct drm_framebuffer *fb)
 504 {
 505         struct drm_device *dev = fb->dev;
 506
 507         mutex_lock(&dev->mode_config.fb_lock);
 508         list_del(&fb->head);
 509         dev->mode_config.num_fb--;
 510         mutex_unlock(&dev->mode_config.fb_lock);
 511 }
 512 EXPORT_SYMBOL(drm_framebuffer_cleanup);
 513
 514 /**
 515  * drm_framebuffer_remove - remove and unreference a framebuffer object
 516  * @fb: framebuffer to remove
 517  *
 518  * Scans all the CRTCs and planes in @dev's mode_config.  If they're
 519  * using @fb, removes it, setting it to NULL. Then drops the reference to the
 520  * passed-in framebuffer. Might take the modeset locks.
 521  *
 522  * Note that this function optimizes the cleanup away if the caller holds the
 523  * last reference to the framebuffer. It is also guaranteed to not take the
 524  * modeset locks in this case.
 525  */
 526 void drm_framebuffer_remove(struct drm_framebuffer *fb)
 527 {
 528         struct drm_device *dev = fb->dev;
 529         struct drm_crtc *crtc;
 530         struct drm_plane *plane;
 531         struct drm_mode_set set;
 532         int ret;
 533
 534         WARN_ON(!list_empty(&fb->filp_head));
 535
 536         /*
 537          * drm ABI mandates that we remove any deleted framebuffers from active
 538          * useage. But since most sane clients only remove framebuffers they no
 539          * longer need, try to optimize this away.
 540          *
 541          * Since we're holding a reference ourselves, observing a refcount of 1
 542          * means that we're the last holder and can skip it. Also, the refcount
 543          * can never increase from 1 again, so we don't need any barriers or
 544          * locks.
 545          *
 546          * Note that userspace could try to race with use and instate a new
 547          * usage _after_ we've cleared all current ones. End result will be an
 548          * in-use fb with fb-id == 0. Userspace is allowed to shoot its own foot
 549          * in this manner.
 550          */
 551         if (atomic_read(&fb->refcount.refcount) > 1) {
 552                 drm_modeset_lock_all(dev);
 553                 /* remove from any CRTC */
 554                 list_for_each_entry(crtc, &dev->mode_config.crtc_list, head) {
 555                         if (crtc->fb == fb) {
 556                                 /* should turn off the crtc */
 557                                 memset(&set, 0, sizeof(struct drm_mode_set));
 558                                 set.crtc = crtc;
 559                                 set.fb = NULL;
 560                                 ret = drm_mode_set_config_internal(&set);
 561                                 if (ret)
 562                                         DRM_ERROR("failed to reset crtc %p when fb was deleted\n", crtc);
 563                         }
 564                 }
 565
 566                 list_for_each_entry(plane, &dev->mode_config.plane_list, head) {
 567                         if (plane->fb == fb) {
 568                                 /* should turn off the crtc */
 569                                 ret = plane->funcs->disable_plane(plane);
 570                                 if (ret)
 571                                         DRM_ERROR("failed to disable plane with busy fb\n");
 572                                 /* disconnect the plane from the fb and crtc: */
 573                                 __drm_framebuffer_unreference(plane->fb);
 574                                 plane->fb = NULL;
 575                                 plane->crtc = NULL;
 576                         }
 577                 }
 578                 drm_modeset_unlock_all(dev);
 579         }
 580
 581         drm_framebuffer_unreference(fb);
 582 }
 583 EXPORT_SYMBOL(drm_framebuffer_remove);
 584
 585 /**
 586  * drm_crtc_init - Initialise a new CRTC object
 587  * @dev: DRM device
 588  * @crtc: CRTC object to init
 589  * @funcs: callbacks for the new CRTC
 590  *
 591  * Inits a new object created as base part of an driver crtc object.
 592  *
 593  * RETURNS:
 594  * Zero on success, error code on failure.
 595  */
 596 int drm_crtc_init(struct drm_device *dev, struct drm_crtc *crtc,
 597                    const struct drm_crtc_funcs *funcs)
 598 {
 599         int ret;
 600
 601         crtc->dev = dev;
 602         crtc->funcs = funcs;
 603         crtc->invert_dimensions = false;
 604
 605         drm_modeset_lock_all(dev);
 606         mutex_init(&crtc->mutex);
 607         mutex_lock_nest_lock(&crtc->mutex, &dev->mode_config.mutex);
 608
 609         ret = drm_mode_object_get(dev, &crtc->base, DRM_MODE_OBJECT_CRTC);
 610         if (ret)
 611                 goto out;
 612
 613         crtc->base.properties = &crtc->properties;
 614
 615         list_add_tail(&crtc->head, &dev->mode_config.crtc_list);
 616         dev->mode_config.num_crtc++;
 617
 618  out:
 619         drm_modeset_unlock_all(dev);
 620
 621         return ret;
 622 }
 623 EXPORT_SYMBOL(drm_crtc_init);
 624
 625 /**
 626  * drm_crtc_cleanup - Cleans up the core crtc usage.
 627  * @crtc: CRTC to cleanup
 628  *
 629  * Cleanup @crtc. Removes from drm modesetting space
 630  * does NOT free object, caller does that.
 631  */
 632 void drm_crtc_cleanup(struct drm_crtc *crtc)
 633 {
 634         struct drm_device *dev = crtc->dev;
 635
 636         kfree(crtc->gamma_store);
 637         crtc->gamma_store = NULL;
 638
 639         drm_mode_object_put(dev, &crtc->base);
 640         list_del(&crtc->head);
 641         dev->mode_config.num_crtc--;
 642 }
 643 EXPORT_SYMBOL(drm_crtc_cleanup);
 644
 645 /**
 646  * drm_mode_probed_add - add a mode to a connector's probed mode list
 647  * @connector: connector the new mode
 648  * @mode: mode data
 649  *
 650  * Add @mode to @connector's mode list for later use.
 651  */
 652 void drm_mode_probed_add(struct drm_connector *connector,
 653                          struct drm_display_mode *mode)
 654 {
 655         list_add(&mode->head, &connector->probed_modes);
 656 }
 657 EXPORT_SYMBOL(drm_mode_probed_add);
 658
 659 /**
 660  * drm_mode_remove - remove and free a mode
 661  * @connector: connector list to modify
 662  * @mode: mode to remove
 663  *
 664  * Remove @mode from @connector's mode list, then free it.
 665  */
 666 void drm_mode_remove(struct drm_connector *connector,
 667                      struct drm_display_mode *mode)
 668 {
 669         list_del(&mode->head);
 670         drm_mode_destroy(connector->dev, mode);
 671 }
 672 EXPORT_SYMBOL(drm_mode_remove);
 673
 674 /**
 675  * drm_connector_init - Init a preallocated connector
 676  * @dev: DRM device
 677  * @connector: the connector to init
 678  * @funcs: callbacks for this connector
 679  * @connector_type: user visible type of the connector
 680  *
 681  * Initialises a preallocated connector. Connectors should be
 682  * subclassed as part of driver connector objects.
 683  *
 684  * RETURNS:
 685  * Zero on success, error code on failure.
 686  */
 687 int drm_connector_init(struct drm_device *dev,
 688                        struct drm_connector *connector,
 689                        const struct drm_connector_funcs *funcs,
 690                        int connector_type)
 691 {
 692         int ret;
 693
 694         drm_modeset_lock_all(dev);
 695
 696         ret = drm_mode_object_get(dev, &connector->base, DRM_MODE_OBJECT_CONNECTOR);
 697         if (ret)
 698                 goto out;
 699
 700         connector->base.properties = &connector->properties;
 701         connector->dev = dev;
 702         connector->funcs = funcs;
 703         connector->connector_type = connector_type;
 704         connector->connector_type_id =
 705                 ++drm_connector_enum_list[connector_type].count; /* TODO */
 706         INIT_LIST_HEAD(&connector->probed_modes);
 707         INIT_LIST_HEAD(&connector->modes);
 708         connector->edid_blob_ptr = NULL;
 709         connector->status = connector_status_unknown;
 710
 711         list_add_tail(&connector->head, &dev->mode_config.connector_list);
 712         dev->mode_config.num_connector++;
 713
 714         if (connector_type != DRM_MODE_CONNECTOR_VIRTUAL)
 715                 drm_object_attach_property(&connector->base,
 716                                               dev->mode_config.edid_property,
 717                                               0);
 718
 719         drm_object_attach_property(&connector->base,
 720                                       dev->mode_config.dpms_property, 0);
 721
 722  out:
 723         drm_modeset_unlock_all(dev);
 724
 725         return ret;
 726 }
 727 EXPORT_SYMBOL(drm_connector_init);
 728
 729 /**
 730  * drm_connector_cleanup - cleans up an initialised connector
 731  * @connector: connector to cleanup
 732  *
 733  * Cleans up the connector but doesn't free the object.
 734  */
 735 void drm_connector_cleanup(struct drm_connector *connector)
 736 {
 737         struct drm_device *dev = connector->dev;
 738         struct drm_display_mode *mode, *t;
 739
 740         list_for_each_entry_safe(mode, t, &connector->probed_modes, head)
 741                 drm_mode_remove(connector, mode);
 742
 743         list_for_each_entry_safe(mode, t, &connector->modes, head)
 744                 drm_mode_remove(connector, mode);
 745
 746         drm_mode_object_put(dev, &connector->base);
 747         list_del(&connector->head);
 748         dev->mode_config.num_connector--;
 749 }
 750 EXPORT_SYMBOL(drm_connector_cleanup);
 751
 752 void drm_connector_unplug_all(struct drm_device *dev)
 753 {
 754         struct drm_connector *connector;
 755
 756         /* taking the mode config mutex ends up in a clash with sysfs */
 757         list_for_each_entry(connector, &dev->mode_config.connector_list, head)
 758                 drm_sysfs_connector_remove(connector);
 759
 760 }
 761 EXPORT_SYMBOL(drm_connector_unplug_all);
 762
 763 int drm_encoder_init(struct drm_device *dev,
 764                       struct drm_encoder *encoder,
 765                       const struct drm_encoder_funcs *funcs,
 766                       int encoder_type)
 767 {
 768         int ret;
 769
 770         drm_modeset_lock_all(dev);
 771
 772         ret = drm_mode_object_get(dev, &encoder->base, DRM_MODE_OBJECT_ENCODER);
 773         if (ret)
 774                 goto out;
 775
 776         encoder->dev = dev;
 777         encoder->encoder_type = encoder_type;
 778         encoder->funcs = funcs;
 779
 780         list_add_tail(&encoder->head, &dev->mode_config.encoder_list);
 781         dev->mode_config.num_encoder++;
 782
 783  out:
 784         drm_modeset_unlock_all(dev);
 785
 786         return ret;
 787 }
 788 EXPORT_SYMBOL(drm_encoder_init);
 789
 790 void drm_encoder_cleanup(struct drm_encoder *encoder)
 791 {
 792         struct drm_device *dev = encoder->dev;
 793         drm_modeset_lock_all(dev);
 794         drm_mode_object_put(dev, &encoder->base);
 795         list_del(&encoder->head);
 796         dev->mode_config.num_encoder--;
 797         drm_modeset_unlock_all(dev);
 798 }
 799 EXPORT_SYMBOL(drm_encoder_cleanup);
 800
 801 int drm_plane_init(struct drm_device *dev, struct drm_plane *plane,
 802                    unsigned long possible_crtcs,
 803                    const struct drm_plane_funcs *funcs,
 804                    const uint32_t *formats, uint32_t format_count,
 805                    bool priv)
 806 {
 807         int ret;
 808
 809         drm_modeset_lock_all(dev);
 810
 811         ret = drm_mode_object_get(dev, &plane->base, DRM_MODE_OBJECT_PLANE);
 812         if (ret)
 813                 goto out;
 814
 815         plane->base.properties = &plane->properties;
 816         plane->dev = dev;
 817         plane->funcs = funcs;
 818         plane->format_types = kmalloc(sizeof(uint32_t) * format_count,
 819                                       GFP_KERNEL);
 820         if (!plane->format_types) {
 821                 DRM_DEBUG_KMS("out of memory when allocating plane\n");
 822                 drm_mode_object_put(dev, &plane->base);
 823                 ret = -ENOMEM;
 824                 goto out;
 825         }
 826
 827         memcpy(plane->format_types, formats, format_count * sizeof(uint32_t));
 828         plane->format_count = format_count;
 829         plane->possible_crtcs = possible_crtcs;
 830
 831         /* private planes are not exposed to userspace, but depending on
 832          * display hardware, might be convenient to allow sharing programming
 833          * for the scanout engine with the crtc implementation.
 834          */
 835         if (!priv) {
 836                 list_add_tail(&plane->head, &dev->mode_config.plane_list);
 837                 dev->mode_config.num_plane++;
 838         } else {
 839                 INIT_LIST_HEAD(&plane->head);
 840         }
 841
 842  out:
 843         drm_modeset_unlock_all(dev);
 844
 845         return ret;
 846 }
 847 EXPORT_SYMBOL(drm_plane_init);
 848
 849 void drm_plane_cleanup(struct drm_plane *plane)
 850 {
 851         struct drm_device *dev = plane->dev;
 852
 853         drm_modeset_lock_all(dev);
 854         kfree(plane->format_types);
 855         drm_mode_object_put(dev, &plane->base);
 856         /* if not added to a list, it must be a private plane */
 857         if (!list_empty(&plane->head)) {
 858                 list_del(&plane->head);
 859                 dev->mode_config.num_plane--;
 860         }
 861         drm_modeset_unlock_all(dev);
 862 }
 863 EXPORT_SYMBOL(drm_plane_cleanup);
 864
 865 /**
 866  * drm_mode_create - create a new display mode
 867  * @dev: DRM device
 868  *
 869  * Create a new drm_display_mode, give it an ID, and return it.
 870  *
 871  * RETURNS:
 872  * Pointer to new mode on success, NULL on error.
 873  */
 874 struct drm_display_mode *drm_mode_create(struct drm_device *dev)
 875 {
 876         struct drm_display_mode *nmode;
 877
 878         nmode = kzalloc(sizeof(struct drm_display_mode), GFP_KERNEL);
 879         if (!nmode)
 880                 return NULL;
 881
 882         if (drm_mode_object_get(dev, &nmode->base, DRM_MODE_OBJECT_MODE)) {
 883                 kfree(nmode);
 884                 return NULL;
 885         }
 886
 887         return nmode;
 888 }
 889 EXPORT_SYMBOL(drm_mode_create);
 890
 891 /**
 892  * drm_mode_destroy - remove a mode
 893  * @dev: DRM device
 894  * @mode: mode to remove
 895  *
 896  * Free @mode's unique identifier, then free it.
 897  */
 898 void drm_mode_destroy(struct drm_device *dev, struct drm_display_mode *mode)
 899 {
 900         if (!mode)
 901                 return;
 902
 903         drm_mode_object_put(dev, &mode->base);
 904
 905         kfree(mode);
 906 }
 907 EXPORT_SYMBOL(drm_mode_destroy);
 908
 909 static int drm_mode_create_standard_connector_properties(struct drm_device *dev)
 910 {
 911         struct drm_property *edid;
 912         struct drm_property *dpms;
 913
 914         /*
 915          * Standard properties (apply to all connectors)
 916          */
 917         edid = drm_property_create(dev, DRM_MODE_PROP_BLOB |
 918                                    DRM_MODE_PROP_IMMUTABLE,
 919                                    "EDID", 0);
 920         dev->mode_config.edid_property = edid;
 921
 922         dpms = drm_property_create_enum(dev, 0,
 923                                    "DPMS", drm_dpms_enum_list,
 924                                    ARRAY_SIZE(drm_dpms_enum_list));
 925         dev->mode_config.dpms_property = dpms;
 926
 927         return 0;
 928 }
 929
 930 /**
 931  * drm_mode_create_dvi_i_properties - create DVI-I specific connector properties
 932  * @dev: DRM device
 933  *
 934  * Called by a driver the first time a DVI-I connector is made.
 935  */
 936 int drm_mode_create_dvi_i_properties(struct drm_device *dev)
 937 {
 938         struct drm_property *dvi_i_selector;
 939         struct drm_property *dvi_i_subconnector;
 940
 941         if (dev->mode_config.dvi_i_select_subconnector_property)
 942                 return 0;
 943
 944         dvi_i_selector =
 945                 drm_property_create_enum(dev, 0,
 946                                     "select subconnector",
 947                                     drm_dvi_i_select_enum_list,
 948                                     ARRAY_SIZE(drm_dvi_i_select_enum_list));
 949         dev->mode_config.dvi_i_select_subconnector_property = dvi_i_selector;
 950
 951         dvi_i_subconnector = drm_property_create_enum(dev, DRM_MODE_PROP_IMMUTABLE,
 952                                     "subconnector",
 953                                     drm_dvi_i_subconnector_enum_list,
 954                                     ARRAY_SIZE(drm_dvi_i_subconnector_enum_list));
 955         dev->mode_config.dvi_i_subconnector_property = dvi_i_subconnector;
 956
 957         return 0;
 958 }
 959 EXPORT_SYMBOL(drm_mode_create_dvi_i_properties);
 960
 961 /**
 962  * drm_create_tv_properties - create TV specific connector properties
 963  * @dev: DRM device
 964  * @num_modes: number of different TV formats (modes) supported
 965  * @modes: array of pointers to strings containing name of each format
 966  *
 967  * Called by a driver's TV initialization routine, this function creates
 968  * the TV specific connector properties for a given device.  Caller is
 969  * responsible for allocating a list of format names and passing them to
 970  * this routine.
 971  */
 972 int drm_mode_create_tv_properties(struct drm_device *dev, int num_modes,
 973                                   char *modes[])
 974 {
 975         struct drm_property *tv_selector;
 976         struct drm_property *tv_subconnector;
 977         int i;
 978
 979         if (dev->mode_config.tv_select_subconnector_property)
 980                 return 0;
 981
 982         /*
 983          * Basic connector properties
 984          */
 985         tv_selector = drm_property_create_enum(dev, 0,
 986                                           "select subconnector",
 987                                           drm_tv_select_enum_list,
 988                                           ARRAY_SIZE(drm_tv_select_enum_list));
 989         dev->mode_config.tv_select_subconnector_property = tv_selector;
 990
 991         tv_subconnector =
 992                 drm_property_create_enum(dev, DRM_MODE_PROP_IMMUTABLE,
 993                                     "subconnector",
 994                                     drm_tv_subconnector_enum_list,
 995                                     ARRAY_SIZE(drm_tv_subconnector_enum_list));
 996         dev->mode_config.tv_subconnector_property = tv_subconnector;
 997
 998         /*
 999          * Other, TV specific properties: margins & TV modes.
1000          */
1001         dev->mode_config.tv_left_margin_property =
1002                 drm_property_create_range(dev, 0, "left margin", 0, 100);
1003
1004         dev->mode_config.tv_right_margin_property =
1005                 drm_property_create_range(dev, 0, "right margin", 0, 100);
1006
1007         dev->mode_config.tv_top_margin_property =
1008                 drm_property_create_range(dev, 0, "top margin", 0, 100);
1009
1010         dev->mode_config.tv_bottom_margin_property =
1011                 drm_property_create_range(dev, 0, "bottom margin", 0, 100);
1012
1013         dev->mode_config.tv_mode_property =
1014                 drm_property_create(dev, DRM_MODE_PROP_ENUM,
1015                                     "mode", num_modes);
1016         for (i = 0; i < num_modes; i++)
1017                 drm_property_add_enum(dev->mode_config.tv_mode_property, i,
1018                                       i, modes[i]);
1019
1020         dev->mode_config.tv_brightness_property =
1021                 drm_property_create_range(dev, 0, "brightness", 0, 100);
1022
1023         dev->mode_config.tv_contrast_property =
1024                 drm_property_create_range(dev, 0, "contrast", 0, 100);
1025
1026         dev->mode_config.tv_flicker_reduction_property =
1027                 drm_property_create_range(dev, 0, "flicker reduction", 0, 100);
1028
1029         dev->mode_config.tv_overscan_property =
1030                 drm_property_create_range(dev, 0, "overscan", 0, 100);
1031
1032         dev->mode_config.tv_saturation_property =
1033                 drm_property_create_range(dev, 0, "saturation", 0, 100);
1034
1035         dev->mode_config.tv_hue_property =
1036                 drm_property_create_range(dev, 0, "hue", 0, 100);
1037
1038         return 0;
1039 }
1040 EXPORT_SYMBOL(drm_mode_create_tv_properties);
1041
1042 /**
1043  * drm_mode_create_scaling_mode_property - create scaling mode property
1044  * @dev: DRM device
1045  *
1046  * Called by a driver the first time it's needed, must be attached to desired
1047  * connectors.
1048  */
1049 int drm_mode_create_scaling_mode_property(struct drm_device *dev)
1050 {
1051         struct drm_property *scaling_mode;
1052
1053         if (dev->mode_config.scaling_mode_property)
1054                 return 0;
1055
1056         scaling_mode =
1057                 drm_property_create_enum(dev, 0, "scaling mode",
1058                                 drm_scaling_mode_enum_list,
1059                                     ARRAY_SIZE(drm_scaling_mode_enum_list));
1060
1061         dev->mode_config.scaling_mode_property = scaling_mode;
1062
1063         return 0;
1064 }
1065 EXPORT_SYMBOL(drm_mode_create_scaling_mode_property);
1066
1067 /**
1068  * drm_mode_create_dithering_property - create dithering property
1069  * @dev: DRM device
1070  *
1071  * Called by a driver the first time it's needed, must be attached to desired
1072  * connectors.
1073  */
1074 int drm_mode_create_dithering_property(struct drm_device *dev)
1075 {
1076         struct drm_property *dithering_mode;
1077
1078         if (dev->mode_config.dithering_mode_property)
1079                 return 0;
1080
1081         dithering_mode =
1082                 drm_property_create_enum(dev, 0, "dithering",
1083                                 drm_dithering_mode_enum_list,
1084                                     ARRAY_SIZE(drm_dithering_mode_enum_list));
1085         dev->mode_config.dithering_mode_property = dithering_mode;
1086
1087         return 0;
1088 }
1089 EXPORT_SYMBOL(drm_mode_create_dithering_property);
1090
1091 /**
1092  * drm_mode_create_dirty_property - create dirty property
1093  * @dev: DRM device
1094  *
1095  * Called by a driver the first time it's needed, must be attached to desired
1096  * connectors.
1097  */
1098 int drm_mode_create_dirty_info_property(struct drm_device *dev)
1099 {
1100         struct drm_property *dirty_info;
1101
1102         if (dev->mode_config.dirty_info_property)
1103                 return 0;
1104
1105         dirty_info =
1106                 drm_property_create_enum(dev, DRM_MODE_PROP_IMMUTABLE,
1107                                     "dirty",
1108                                     drm_dirty_info_enum_list,
1109                                     ARRAY_SIZE(drm_dirty_info_enum_list));
1110         dev->mode_config.dirty_info_property = dirty_info;
1111
1112         return 0;
1113 }
1114 EXPORT_SYMBOL(drm_mode_create_dirty_info_property);
1115
1116 static int drm_mode_group_init(struct drm_device *dev, struct drm_mode_group *group)
1117 {
1118         uint32_t total_objects = 0;
1119
1120         total_objects += dev->mode_config.num_crtc;
1121         total_objects += dev->mode_config.num_connector;
1122         total_objects += dev->mode_config.num_encoder;
1123
1124         group->id_list = kzalloc(total_objects * sizeof(uint32_t), GFP_KERNEL);
1125         if (!group->id_list)
1126                 return -ENOMEM;
1127
1128         group->num_crtcs = 0;
1129         group->num_connectors = 0;
1130         group->num_encoders = 0;
1131         return 0;
1132 }
1133
1134 int drm_mode_group_init_legacy_group(struct drm_device *dev,
1135                                      struct drm_mode_group *group)
1136 {
1137         struct drm_crtc *crtc;
1138         struct drm_encoder *encoder;
1139         struct drm_connector *connector;
1140         int ret;
1141
1142         if ((ret = drm_mode_group_init(dev, group)))
1143                 return ret;
1144
1145         list_for_each_entry(crtc, &dev->mode_config.crtc_list, head)
1146                 group->id_list[group->num_crtcs++] = crtc->base.id;
1147
1148         list_for_each_entry(encoder, &dev->mode_config.encoder_list, head)
1149                 group->id_list[group->num_crtcs + group->num_encoders++] =
1150                 encoder->base.id;
1151
1152         list_for_each_entry(connector, &dev->mode_config.connector_list, head)
1153                 group->id_list[group->num_crtcs + group->num_encoders +
1154                                group->num_connectors++] = connector->base.id;
1155
1156         return 0;
1157 }
1158 EXPORT_SYMBOL(drm_mode_group_init_legacy_group);
1159
1160 /**
1161  * drm_crtc_convert_to_umode - convert a drm_display_mode into a modeinfo
1162  * @out: drm_mode_modeinfo struct to return to the user
1163  * @in: drm_display_mode to use
1164  *
1165  * Convert a drm_display_mode into a drm_mode_modeinfo structure to return to
1166  * the user.
1167  */
1168 static void drm_crtc_convert_to_umode(struct drm_mode_modeinfo *out,
1169                                       const struct drm_display_mode *in)
1170 {
1171         WARN(in->hdisplay > USHRT_MAX || in->hsync_start > USHRT_MAX ||
1172              in->hsync_end > USHRT_MAX || in->htotal > USHRT_MAX ||
1173              in->hskew > USHRT_MAX || in->vdisplay > USHRT_MAX ||
1174              in->vsync_start > USHRT_MAX || in->vsync_end > USHRT_MAX ||
1175              in->vtotal > USHRT_MAX || in->vscan > USHRT_MAX,
1176              "timing values too large for mode info\n");
1177
1178         out->clock = in->clock;
1179         out->hdisplay = in->hdisplay;
1180         out->hsync_start = in->hsync_start;
1181         out->hsync_end = in->hsync_end;
1182         out->htotal = in->htotal;
1183         out->hskew = in->hskew;
1184         out->vdisplay = in->vdisplay;
1185         out->vsync_start = in->vsync_start;
1186         out->vsync_end = in->vsync_end;
1187         out->vtotal = in->vtotal;
1188         out->vscan = in->vscan;
1189         out->vrefresh = in->vrefresh;
1190         out->flags = in->flags;
1191         out->type = in->type;
1192         strncpy(out->name, in->name, DRM_DISPLAY_MODE_LEN);
1193         out->name[DRM_DISPLAY_MODE_LEN-1] = 0;
1194 }
1195
1196 /**
1197  * drm_crtc_convert_to_umode - convert a modeinfo into a drm_display_mode
1198  * @out: drm_display_mode to return to the user
1199  * @in: drm_mode_modeinfo to use
1200  *
1201  * Convert a drm_mode_modeinfo into a drm_display_mode structure to return to
1202  * the caller.
1203  *
1204  * RETURNS:
1205  * Zero on success, errno on failure.
1206  */
1207 static int drm_crtc_convert_umode(struct drm_display_mode *out,
1208                                   const struct drm_mode_modeinfo *in)
1209 {
1210         if (in->clock > INT_MAX || in->vrefresh > INT_MAX)
1211                 return -ERANGE;
1212
1213         out->clock = in->clock;
1214         out->hdisplay = in->hdisplay;
1215         out->hsync_start = in->hsync_start;
1216         out->hsync_end = in->hsync_end;
1217         out->htotal = in->htotal;
1218         out->hskew = in->hskew;
1219         out->vdisplay = in->vdisplay;
1220         out->vsync_start = in->vsync_start;
1221         out->vsync_end = in->vsync_end;
1222         out->vtotal = in->vtotal;
1223         out->vscan = in->vscan;
1224         out->vrefresh = in->vrefresh;
1225         out->flags = in->flags;
1226         out->type = in->type;
1227         strncpy(out->name, in->name, DRM_DISPLAY_MODE_LEN);
1228         out->name[DRM_DISPLAY_MODE_LEN-1] = 0;
1229
1230         return 0;
1231 }
1232
1233 /**
1234  * drm_mode_getresources - get graphics configuration
1235  * @dev: drm device for the ioctl
1236  * @data: data pointer for the ioctl
1237  * @file_priv: drm file for the ioctl call
1238  *
1239  * Construct a set of configuration description structures and return
1240  * them to the user, including CRTC, connector and framebuffer configuration.
1241  *
1242  * Called by the user via ioctl.
1243  *
1244  * RETURNS:
1245  * Zero on success, errno on failure.
1246  */
1247 int drm_mode_getresources(struct drm_device *dev, void *data,
1248                           struct drm_file *file_priv)
1249 {
1250         struct drm_mode_card_res *card_res = data;
1251         struct list_head *lh;
1252         struct drm_framebuffer *fb;
1253         struct drm_connector *connector;
1254         struct drm_crtc *crtc;
1255         struct drm_encoder *encoder;
1256         int ret = 0;
1257         int connector_count = 0;
1258         int crtc_count = 0;
1259         int fb_count = 0;
1260         int encoder_count = 0;
1261         int copied = 0, i;
1262         uint32_t __user *fb_id;
1263         uint32_t __user *crtc_id;
1264         uint32_t __user *connector_id;
1265         uint32_t __user *encoder_id;
1266         struct drm_mode_group *mode_group;
1267
1268         if (!drm_core_check_feature(dev, DRIVER_MODESET))
1269                 return -EINVAL;
1270
1271
1272         mutex_lock(&file_priv->fbs_lock);
1273         /*
1274          * For the non-control nodes we need to limit the list of resources
1275          * by IDs in the group list for this node
1276          */
1277         list_for_each(lh, &file_priv->fbs)
1278                 fb_count++;
1279
1280         /* handle this in 4 parts */
1281         /* FBs */
1282         if (card_res->count_fbs >= fb_count) {
1283                 copied = 0;
1284                 fb_id = (uint32_t __user *)(unsigned long)card_res->fb_id_ptr;
1285                 list_for_each_entry(fb, &file_priv->fbs, filp_head) {
1286                         if (put_user(fb->base.id, fb_id + copied)) {
1287                                 mutex_unlock(&file_priv->fbs_lock);
1288                                 return -EFAULT;
1289                         }
1290                         copied++;
1291                 }
1292         }
1293         card_res->count_fbs = fb_count;
1294         mutex_unlock(&file_priv->fbs_lock);
1295
1296         drm_modeset_lock_all(dev);
1297         mode_group = &file_priv->master->minor->mode_group;
1298         if (file_priv->master->minor->type == DRM_MINOR_CONTROL) {
1299
1300                 list_for_each(lh, &dev->mode_config.crtc_list)
1301                         crtc_count++;
1302
1303                 list_for_each(lh, &dev->mode_config.connector_list)
1304                         connector_count++;
1305
1306                 list_for_each(lh, &dev->mode_config.encoder_list)
1307                         encoder_count++;
1308         } else {
1309
1310                 crtc_count = mode_group->num_crtcs;
1311                 connector_count = mode_group->num_connectors;
1312                 encoder_count = mode_group->num_encoders;
1313         }
1314
1315         card_res->max_height = dev->mode_config.max_height;
1316         card_res->min_height = dev->mode_config.min_height;
1317         card_res->max_width = dev->mode_config.max_width;
1318         card_res->min_width = dev->mode_config.min_width;
1319
1320         /* CRTCs */
1321         if (card_res->count_crtcs >= crtc_count) {
1322                 copied = 0;
1323                 crtc_id = (uint32_t __user *)(unsigned long)card_res->crtc_id_ptr;
1324                 if (file_priv->master->minor->type == DRM_MINOR_CONTROL) {
1325                         list_for_each_entry(crtc, &dev->mode_config.crtc_list,
1326                                             head) {
1327                                 DRM_DEBUG_KMS("[CRTC:%d]\n", crtc->base.id);
1328                                 if (put_user(crtc->base.id, crtc_id + copied)) {
1329                                         ret = -EFAULT;
1330                                         goto out;
1331                                 }
1332                                 copied++;
1333                         }
1334                 } else {
1335                         for (i = 0; i < mode_group->num_crtcs; i++) {
1336                                 if (put_user(mode_group->id_list[i],
1337                                              crtc_id + copied)) {
1338                                         ret = -EFAULT;
1339                                         goto out;
1340                                 }
1341                                 copied++;
1342                         }
1343                 }
1344         }
1345         card_res->count_crtcs = crtc_count;
1346
1347         /* Encoders */
1348         if (card_res->count_encoders >= encoder_count) {
1349                 copied = 0;
1350                 encoder_id = (uint32_t __user *)(unsigned long)card_res->encoder_id_ptr;
1351                 if (file_priv->master->minor->type == DRM_MINOR_CONTROL) {
1352                         list_for_each_entry(encoder,
1353                                             &dev->mode_config.encoder_list,
1354                                             head) {
1355                                 DRM_DEBUG_KMS("[ENCODER:%d:%s]\n", encoder->base.id,
1356                                                 drm_get_encoder_name(encoder));
1357                                 if (put_user(encoder->base.id, encoder_id +
1358                                              copied)) {
1359                                         ret = -EFAULT;
1360                                         goto out;
1361                                 }
1362                                 copied++;
1363                         }
1364                 } else {
1365                         for (i = mode_group->num_crtcs; i < mode_group->num_crtcs + mode_group->num_encoders; i++) {
1366                                 if (put_user(mode_group->id_list[i],
1367                                              encoder_id + copied)) {
1368                                         ret = -EFAULT;
1369                                         goto out;
1370                                 }
1371                                 copied++;
1372                         }
1373
1374                 }
1375         }
1376         card_res->count_encoders = encoder_count;
1377
1378         /* Connectors */
1379         if (card_res->count_connectors >= connector_count) {
1380                 copied = 0;
1381                 connector_id = (uint32_t __user *)(unsigned long)card_res->connector_id_ptr;
1382                 if (file_priv->master->minor->type == DRM_MINOR_CONTROL) {
1383                         list_for_each_entry(connector,
1384                                             &dev->mode_config.connector_list,
1385                                             head) {
1386                                 DRM_DEBUG_KMS("[CONNECTOR:%d:%s]\n",
1387                                         connector->base.id,
1388                                         drm_get_connector_name(connector));
1389                                 if (put_user(connector->base.id,
1390                                              connector_id + copied)) {
1391                                         ret = -EFAULT;
1392                                         goto out;
1393                                 }
1394                                 copied++;
1395                         }
1396                 } else {
1397                         int start = mode_group->num_crtcs +
1398                                 mode_group->num_encoders;
1399                         for (i = start; i < start + mode_group->num_connectors; i++) {
1400                                 if (put_user(mode_group->id_list[i],
1401                                              connector_id + copied)) {
1402                                         ret = -EFAULT;
1403                                         goto out;
1404                                 }
1405                                 copied++;
1406                         }
1407                 }
1408         }
1409         card_res->count_connectors = connector_count;
1410
1411         DRM_DEBUG_KMS("CRTC[%d] CONNECTORS[%d] ENCODERS[%d]\n", card_res->count_crtcs,
1412                   card_res->count_connectors, card_res->count_encoders);
1413
1414 out:
1415         drm_modeset_unlock_all(dev);
1416         return ret;
1417 }
1418
1419 /**
1420  * drm_mode_getcrtc - get CRTC configuration
1421  * @dev: drm device for the ioctl
1422  * @data: data pointer for the ioctl
1423  * @file_priv: drm file for the ioctl call
1424  *
1425  * Construct a CRTC configuration structure to return to the user.
1426  *
1427  * Called by the user via ioctl.
1428  *
1429  * RETURNS:
1430  * Zero on success, errno on failure.
1431  */
1432 int drm_mode_getcrtc(struct drm_device *dev,
1433                      void *data, struct drm_file *file_priv)
1434 {
1435         struct drm_mode_crtc *crtc_resp = data;
1436         struct drm_crtc *crtc;
1437         struct drm_mode_object *obj;
1438         int ret = 0;
1439
1440         if (!drm_core_check_feature(dev, DRIVER_MODESET))
1441                 return -EINVAL;
1442
1443         drm_modeset_lock_all(dev);
1444
1445         obj = drm_mode_object_find(dev, crtc_resp->crtc_id,
1446                                    DRM_MODE_OBJECT_CRTC);
1447         if (!obj) {
1448                 ret = -EINVAL;
1449                 goto out;
1450         }
1451         crtc = obj_to_crtc(obj);
1452
1453         crtc_resp->x = crtc->x;
1454         crtc_resp->y = crtc->y;
1455         crtc_resp->gamma_size = crtc->gamma_size;
1456         if (crtc->fb)
1457                 crtc_resp->fb_id = crtc->fb->base.id;
1458         else
1459                 crtc_resp->fb_id = 0;
1460
1461         if (crtc->enabled) {
1462
1463                 drm_crtc_convert_to_umode(&crtc_resp->mode, &crtc->mode);
1464                 crtc_resp->mode_valid = 1;
1465
1466         } else {
1467                 crtc_resp->mode_valid = 0;
1468         }
1469
1470 out:
1471         drm_modeset_unlock_all(dev);
1472         return ret;
1473 }
1474
1475 /**
1476  * drm_mode_getconnector - get connector configuration
1477  * @dev: drm device for the ioctl
1478  * @data: data pointer for the ioctl
1479  * @file_priv: drm file for the ioctl call
1480  *
1481  * Construct a connector configuration structure to return to the user.
1482  *
1483  * Called by the user via ioctl.
1484  *
1485  * RETURNS:
1486  * Zero on success, errno on failure.
1487  */
1488 int drm_mode_getconnector(struct drm_device *dev, void *data,
1489                           struct drm_file *file_priv)
1490 {
1491         struct drm_mode_get_connector *out_resp = data;
1492         struct drm_mode_object *obj;
1493         struct drm_connector *connector;
1494         struct drm_display_mode *mode;
1495         int mode_count = 0;
1496         int props_count = 0;
1497         int encoders_count = 0;
1498         int ret = 0;
1499         int copied = 0;
1500         int i;
1501         struct drm_mode_modeinfo u_mode;
1502         struct drm_mode_modeinfo __user *mode_ptr;
1503         uint32_t __user *prop_ptr;
1504         uint64_t __user *prop_values;
1505         uint32_t __user *encoder_ptr;
1506
1507         if (!drm_core_check_feature(dev, DRIVER_MODESET))
1508                 return -EINVAL;
1509
1510         memset(&u_mode, 0, sizeof(struct drm_mode_modeinfo));
1511
1512         DRM_DEBUG_KMS("[CONNECTOR:%d:?]\n", out_resp->connector_id);
1513
1514         mutex_lock(&dev->mode_config.mutex);
1515
1516         obj = drm_mode_object_find(dev, out_resp->connector_id,
1517                                    DRM_MODE_OBJECT_CONNECTOR);
1518         if (!obj) {
1519                 ret = -EINVAL;
1520                 goto out;
1521         }
1522         connector = obj_to_connector(obj);
1523
1524         props_count = connector->properties.count;
1525
1526         for (i = 0; i < DRM_CONNECTOR_MAX_ENCODER; i++) {
1527                 if (connector->encoder_ids[i] != 0) {
1528                         encoders_count++;
1529                 }
1530         }
1531
1532         if (out_resp->count_modes == 0) {
1533                 connector->funcs->fill_modes(connector,
1534                                              dev->mode_config.max_width,
1535                                              dev->mode_config.max_height);
1536         }
1537
1538         /* delayed so we get modes regardless of pre-fill_modes state */
1539         list_for_each_entry(mode, &connector->modes, head)
1540                 mode_count++;
1541
1542         out_resp->connector_id = connector->base.id;
1543         out_resp->connector_type = connector->connector_type;
1544         out_resp->connector_type_id = connector->connector_type_id;
1545         out_resp->mm_width = connector->display_info.width_mm;
1546         out_resp->mm_height = connector->display_info.height_mm;
1547         out_resp->subpixel = connector->display_info.subpixel_order;
1548         out_resp->connection = connector->status;
1549         if (connector->encoder)
1550                 out_resp->encoder_id = connector->encoder->base.id;
1551         else
1552                 out_resp->encoder_id = 0;
1553
1554         /*
1555          * This ioctl is called twice, once to determine how much space is
1556          * needed, and the 2nd time to fill it.
1557          */
1558         if ((out_resp->count_modes >= mode_count) && mode_count) {
1559                 copied = 0;
1560                 mode_ptr = (struct drm_mode_modeinfo __user *)(unsigned long)out_resp->modes_ptr;
1561                 list_for_each_entry(mode, &connector->modes, head) {
1562                         drm_crtc_convert_to_umode(&u_mode, mode);
1563                         if (copy_to_user(mode_ptr + copied,
1564                                          &u_mode, sizeof(u_mode))) {
1565                                 ret = -EFAULT;
1566                                 goto out;
1567                         }
1568                         copied++;
1569                 }
1570         }
1571         out_resp->count_modes = mode_count;
1572
1573         if ((out_resp->count_props >= props_count) && props_count) {
1574                 copied = 0;
1575                 prop_ptr = (uint32_t __user *)(unsigned long)(out_resp->props_ptr);
1576                 prop_values = (uint64_t __user *)(unsigned long)(out_resp->prop_values_ptr);
1577                 for (i = 0; i < connector->properties.count; i++) {
1578                         if (put_user(connector->properties.ids[i],
1579                                      prop_ptr + copied)) {
1580                                 ret = -EFAULT;
1581                                 goto out;
1582                         }
1583
1584                         if (put_user(connector->properties.values[i],
1585                                      prop_values + copied)) {
1586                                 ret = -EFAULT;
1587                                 goto out;
1588                         }
1589                         copied++;
1590                 }
1591         }
1592         out_resp->count_props = props_count;
1593
1594         if ((out_resp->count_encoders >= encoders_count) && encoders_count) {
1595                 copied = 0;
1596                 encoder_ptr = (uint32_t __user *)(unsigned long)(out_resp->encoders_ptr);
1597                 for (i = 0; i < DRM_CONNECTOR_MAX_ENCODER; i++) {
1598                         if (connector->encoder_ids[i] != 0) {
1599                                 if (put_user(connector->encoder_ids[i],
1600                                              encoder_ptr + copied)) {
1601                                         ret = -EFAULT;
1602                                         goto out;
1603                                 }
1604                                 copied++;
1605                         }
1606                 }
1607         }
1608         out_resp->count_encoders = encoders_count;
1609
1610 out:
1611         mutex_unlock(&dev->mode_config.mutex);
1612
1613         return ret;
1614 }
1615
1616 int drm_mode_getencoder(struct drm_device *dev, void *data,
1617                         struct drm_file *file_priv)
1618 {
1619         struct drm_mode_get_encoder *enc_resp = data;
1620         struct drm_mode_object *obj;
1621         struct drm_encoder *encoder;
1622         int ret = 0;
1623
1624         if (!drm_core_check_feature(dev, DRIVER_MODESET))
1625                 return -EINVAL;
1626
1627         drm_modeset_lock_all(dev);
1628         obj = drm_mode_object_find(dev, enc_resp->encoder_id,
1629                                    DRM_MODE_OBJECT_ENCODER);
1630         if (!obj) {
1631                 ret = -EINVAL;
1632                 goto out;
1633         }
1634         encoder = obj_to_encoder(obj);
1635
1636         if (encoder->crtc)
1637                 enc_resp->crtc_id = encoder->crtc->base.id;
1638         else
1639                 enc_resp->crtc_id = 0;
1640         enc_resp->encoder_type = encoder->encoder_type;
1641         enc_resp->encoder_id = encoder->base.id;
1642         enc_resp->possible_crtcs = encoder->possible_crtcs;
1643         enc_resp->possible_clones = encoder->possible_clones;
1644
1645 out:
1646         drm_modeset_unlock_all(dev);
1647         return ret;
1648 }
1649
1650 /**
1651  * drm_mode_getplane_res - get plane info
1652  * @dev: DRM device
1653  * @data: ioctl data
1654  * @file_priv: DRM file info
1655  *
1656  * Return an plane count and set of IDs.
1657  */
1658 int drm_mode_getplane_res(struct drm_device *dev, void *data,
1659                             struct drm_file *file_priv)
1660 {
1661         struct drm_mode_get_plane_res *plane_resp = data;
1662         struct drm_mode_config *config;
1663         struct drm_plane *plane;
1664         uint32_t __user *plane_ptr;
1665         int copied = 0, ret = 0;
1666
1667         if (!drm_core_check_feature(dev, DRIVER_MODESET))
1668                 return -EINVAL;
1669
1670         drm_modeset_lock_all(dev);
1671         config = &dev->mode_config;
1672
1673         /*
1674          * This ioctl is called twice, once to determine how much space is
1675          * needed, and the 2nd time to fill it.
1676          */
1677         if (config->num_plane &&
1678             (plane_resp->count_planes >= config->num_plane)) {
1679                 plane_ptr = (uint32_t __user *)(unsigned long)plane_resp->plane_id_ptr;
1680
1681                 list_for_each_entry(plane, &config->plane_list, head) {
1682                         if (put_user(plane->base.id, plane_ptr + copied)) {
1683                                 ret = -EFAULT;
1684                                 goto out;
1685                         }
1686                         copied++;
1687                 }
1688         }
1689         plane_resp->count_planes = config->num_plane;
1690
1691 out:
1692         drm_modeset_unlock_all(dev);
1693         return ret;
1694 }
1695
1696 /**
1697  * drm_mode_getplane - get plane info
1698  * @dev: DRM device
1699  * @data: ioctl data
1700  * @file_priv: DRM file info
1701  *
1702  * Return plane info, including formats supported, gamma size, any
1703  * current fb, etc.
1704  */
1705 int drm_mode_getplane(struct drm_device *dev, void *data,
1706                         struct drm_file *file_priv)
1707 {
1708         struct drm_mode_get_plane *plane_resp = data;
1709         struct drm_mode_object *obj;
1710         struct drm_plane *plane;
1711         uint32_t __user *format_ptr;
1712         int ret = 0;
1713
1714         if (!drm_core_check_feature(dev, DRIVER_MODESET))
1715                 return -EINVAL;
1716
1717         drm_modeset_lock_all(dev);
1718         obj = drm_mode_object_find(dev, plane_resp->plane_id,
1719                                    DRM_MODE_OBJECT_PLANE);
1720         if (!obj) {
1721                 ret = -ENOENT;
1722                 goto out;
1723         }
1724         plane = obj_to_plane(obj);
1725
1726         if (plane->crtc)
1727                 plane_resp->crtc_id = plane->crtc->base.id;
1728         else
1729                 plane_resp->crtc_id = 0;
1730
1731         if (plane->fb)
1732                 plane_resp->fb_id = plane->fb->base.id;
1733         else
1734                 plane_resp->fb_id = 0;
1735
1736         plane_resp->plane_id = plane->base.id;
1737         plane_resp->possible_crtcs = plane->possible_crtcs;
1738         plane_resp->gamma_size = plane->gamma_size;
1739
1740         /*
1741          * This ioctl is called twice, once to determine how much space is
1742          * needed, and the 2nd time to fill it.
1743          */
1744         if (plane->format_count &&
1745             (plane_resp->count_format_types >= plane->format_count)) {
1746                 format_ptr = (uint32_t __user *)(unsigned long)plane_resp->format_type_ptr;
1747                 if (copy_to_user(format_ptr,
1748                                  plane->format_types,
1749                                  sizeof(uint32_t) * plane->format_count)) {
1750                         ret = -EFAULT;
1751                         goto out;
1752                 }
1753         }
1754         plane_resp->count_format_types = plane->format_count;
1755
1756 out:
1757         drm_modeset_unlock_all(dev);
1758         return ret;
1759 }
1760
1761 /**
1762  * drm_mode_setplane - set up or tear down an plane
1763  * @dev: DRM device
1764  * @data: ioctl data*
1765  * @file_priv: DRM file info
1766  *
1767  * Set plane info, including placement, fb, scaling, and other factors.
1768  * Or pass a NULL fb to disable.
1769  */
1770 int drm_mode_setplane(struct drm_device *dev, void *data,
1771                         struct drm_file *file_priv)
1772 {
1773         struct drm_mode_set_plane *plane_req = data;
1774         struct drm_mode_object *obj;
1775         struct drm_plane *plane;
1776         struct drm_crtc *crtc;
1777         struct drm_framebuffer *fb = NULL, *old_fb = NULL;
1778         int ret = 0;
1779         unsigned int fb_width, fb_height;
1780         int i;
1781
1782         if (!drm_core_check_feature(dev, DRIVER_MODESET))
1783                 return -EINVAL;
1784
1785         /*
1786          * First, find the plane, crtc, and fb objects.  If not available,
1787          * we don't bother to call the driver.
1788          */
1789         obj = drm_mode_object_find(dev, plane_req->plane_id,
1790                                    DRM_MODE_OBJECT_PLANE);
1791         if (!obj) {
1792                 DRM_DEBUG_KMS("Unknown plane ID %d\n",
1793                               plane_req->plane_id);
1794                 return -ENOENT;
1795         }
1796         plane = obj_to_plane(obj);
1797
1798         /* No fb means shut it down */
1799         if (!plane_req->fb_id) {
1800                 drm_modeset_lock_all(dev);
1801                 old_fb = plane->fb;
1802                 plane->funcs->disable_plane(plane);
1803                 plane->crtc = NULL;
1804                 plane->fb = NULL;
1805                 drm_modeset_unlock_all(dev);
1806                 goto out;
1807         }
1808
1809         obj = drm_mode_object_find(dev, plane_req->crtc_id,
1810                                    DRM_MODE_OBJECT_CRTC);
1811         if (!obj) {
1812                 DRM_DEBUG_KMS("Unknown crtc ID %d\n",
1813                               plane_req->crtc_id);
1814                 ret = -ENOENT;
1815                 goto out;
1816         }
1817         crtc = obj_to_crtc(obj);
1818
1819         fb = drm_framebuffer_lookup(dev, plane_req->fb_id);
1820         if (!fb) {
1821                 DRM_DEBUG_KMS("Unknown framebuffer ID %d\n",
1822                               plane_req->fb_id);
1823                 ret = -ENOENT;
1824                 goto out;
1825         }
1826
1827         /* Check whether this plane supports the fb pixel format. */
1828         for (i = 0; i < plane->format_count; i++)
1829                 if (fb->pixel_format == plane->format_types[i])
1830                         break;
1831         if (i == plane->format_count) {
1832                 DRM_DEBUG_KMS("Invalid pixel format 0x%08x\n", fb->pixel_format);
1833                 ret = -EINVAL;
1834                 goto out;
1835         }
1836
1837         fb_width = fb->width << 16;
1838         fb_height = fb->height << 16;
1839
1840         /* Make sure source coordinates are inside the fb. */
1841         if (plane_req->src_w > fb_width ||
1842             plane_req->src_x > fb_width - plane_req->src_w ||
1843             plane_req->src_h > fb_height ||
1844             plane_req->src_y > fb_height - plane_req->src_h) {
1845                 DRM_DEBUG_KMS("Invalid source coordinates "
1846                               "%u.%06ux%u.%06u+%u.%06u+%u.%06u\n",
1847                               plane_req->src_w >> 16,
1848                               ((plane_req->src_w & 0xffff) * 15625) >> 10,
1849                               plane_req->src_h >> 16,
1850                               ((plane_req->src_h & 0xffff) * 15625) >> 10,
1851                               plane_req->src_x >> 16,
1852                               ((plane_req->src_x & 0xffff) * 15625) >> 10,
1853                               plane_req->src_y >> 16,
1854                               ((plane_req->src_y & 0xffff) * 15625) >> 10);
1855                 ret = -ENOSPC;
1856                 goto out;
1857         }
1858
1859         /* Give drivers some help against integer overflows */
1860         if (plane_req->crtc_w > INT_MAX ||
1861             plane_req->crtc_x > INT_MAX - (int32_t) plane_req->crtc_w ||
1862             plane_req->crtc_h > INT_MAX ||
1863             plane_req->crtc_y > INT_MAX - (int32_t) plane_req->crtc_h) {
1864                 DRM_DEBUG_KMS("Invalid CRTC coordinates %ux%u+%d+%d\n",
1865                               plane_req->crtc_w, plane_req->crtc_h,
1866                               plane_req->crtc_x, plane_req->crtc_y);
1867                 ret = -ERANGE;
1868                 goto out;
1869         }
1870
1871         drm_modeset_lock_all(dev);
1872         ret = plane->funcs->update_plane(plane, crtc, fb,
1873                                          plane_req->crtc_x, plane_req->crtc_y,
1874                                          plane_req->crtc_w, plane_req->crtc_h,
1875                                          plane_req->src_x, plane_req->src_y,
1876                                          plane_req->src_w, plane_req->src_h);
1877         if (!ret) {
1878                 old_fb = plane->fb;
1879                 plane->crtc = crtc;
1880                 plane->fb = fb;
1881                 fb = NULL;
1882         }
1883         drm_modeset_unlock_all(dev);
1884
1885 out:
1886         if (fb)
1887                 drm_framebuffer_unreference(fb);
1888         if (old_fb)
1889                 drm_framebuffer_unreference(old_fb);
1890
1891         return ret;
1892 }
1893
1894 /**
1895  * drm_mode_set_config_internal - helper to call ->set_config
1896  * @set: modeset config to set
1897  *
1898  * This is a little helper to wrap internal calls to the ->set_config driver
1899  * interface. The only thing it adds is correct refcounting dance.
1900  */
1901 int drm_mode_set_config_internal(struct drm_mode_set *set)
1902 {
1903         struct drm_crtc *crtc = set->crtc;
1904         struct drm_framebuffer *fb, *old_fb;
1905         int ret;
1906
1907         old_fb = crtc->fb;
1908         fb = set->fb;
1909
1910         ret = crtc->funcs->set_config(set);
1911         if (ret == 0) {
1912                 if (old_fb)
1913                         drm_framebuffer_unreference(old_fb);
1914                 if (fb)
1915                         drm_framebuffer_reference(fb);
1916         }
1917
1918         return ret;
1919 }
1920 EXPORT_SYMBOL(drm_mode_set_config_internal);
1921
1922 /**
1923  * drm_mode_setcrtc - set CRTC configuration
1924  * @dev: drm device for the ioctl
1925  * @data: data pointer for the ioctl
1926  * @file_priv: drm file for the ioctl call
1927  *
1928  * Build a new CRTC configuration based on user request.
1929  *
1930  * Called by the user via ioctl.
1931  *
1932  * RETURNS:
1933  * Zero on success, errno on failure.
1934  */
1935 int drm_mode_setcrtc(struct drm_device *dev, void *data,
1936                      struct drm_file *file_priv)
1937 {
1938         struct drm_mode_config *config = &dev->mode_config;
1939         struct drm_mode_crtc *crtc_req = data;
1940         struct drm_mode_object *obj;
1941         struct drm_crtc *crtc;
1942         struct drm_connector **connector_set = NULL, *connector;
1943         struct drm_framebuffer *fb = NULL;
1944         struct drm_display_mode *mode = NULL;
1945         struct drm_mode_set set;
1946         uint32_t __user *set_connectors_ptr;
1947         int ret;
1948         int i;
1949
1950         if (!drm_core_check_feature(dev, DRIVER_MODESET))
1951                 return -EINVAL;
1952
1953         /* For some reason crtc x/y offsets are signed internally. */
1954         if (crtc_req->x > INT_MAX || crtc_req->y > INT_MAX)
1955                 return -ERANGE;
1956
1957         drm_modeset_lock_all(dev);
1958         obj = drm_mode_object_find(dev, crtc_req->crtc_id,
1959                                    DRM_MODE_OBJECT_CRTC);
1960         if (!obj) {
1961                 DRM_DEBUG_KMS("Unknown CRTC ID %d\n", crtc_req->crtc_id);
1962                 ret = -EINVAL;
1963                 goto out;
1964         }
1965         crtc = obj_to_crtc(obj);
1966         DRM_DEBUG_KMS("[CRTC:%d]\n", crtc->base.id);
1967
1968         if (crtc_req->mode_valid) {
1969                 int hdisplay, vdisplay;
1970                 /* If we have a mode we need a framebuffer. */
1971                 /* If we pass -1, set the mode with the currently bound fb */
1972                 if (crtc_req->fb_id == -1) {
1973                         if (!crtc->fb) {
1974                                 DRM_DEBUG_KMS("CRTC doesn't have current FB\n");
1975                                 ret = -EINVAL;
1976                                 goto out;
1977                         }
1978                         fb = crtc->fb;
1979                         /* Make refcounting symmetric with the lookup path. */
1980                         drm_framebuffer_reference(fb);
1981                 } else {
1982                         fb = drm_framebuffer_lookup(dev, crtc_req->fb_id);
1983                         if (!fb) {
1984                                 DRM_DEBUG_KMS("Unknown FB ID%d\n",
1985                                                 crtc_req->fb_id);
1986                                 ret = -EINVAL;
1987                                 goto out;
1988                         }
1989                 }
1990
1991                 mode = drm_mode_create(dev);
1992                 if (!mode) {
1993                         ret = -ENOMEM;
1994                         goto out;
1995                 }
1996
1997                 ret = drm_crtc_convert_umode(mode, &crtc_req->mode);
1998                 if (ret) {
1999                         DRM_DEBUG_KMS("Invalid mode\n");
2000                         goto out;
2001                 }
2002
2003                 drm_mode_set_crtcinfo(mode, CRTC_INTERLACE_HALVE_V);
2004
2005                 hdisplay = mode->hdisplay;
2006                 vdisplay = mode->vdisplay;
2007
2008                 if (crtc->invert_dimensions)
2009                         swap(hdisplay, vdisplay);
2010
2011                 if (hdisplay > fb->width ||
2012                     vdisplay > fb->height ||
2013                     crtc_req->x > fb->width - hdisplay ||
2014                     crtc_req->y > fb->height - vdisplay) {
2015                         DRM_DEBUG_KMS("Invalid fb size %ux%u for CRTC viewport %ux%u+%d+%d%s.\n",
2016                                       fb->width, fb->height,
2017                                       hdisplay, vdisplay, crtc_req->x, crtc_req->y,
2018                                       crtc->invert_dimensions ? " (inverted)" : "");
2019                         ret = -ENOSPC;
2020                         goto out;
2021                 }
2022         }
2023
2024         if (crtc_req->count_connectors == 0 && mode) {
2025                 DRM_DEBUG_KMS("Count connectors is 0 but mode set\n");
2026                 ret = -EINVAL;
2027                 goto out;
2028         }
2029
2030         if (crtc_req->count_connectors > 0 && (!mode || !fb)) {
2031                 DRM_DEBUG_KMS("Count connectors is %d but no mode or fb set\n",
2032                           crtc_req->count_connectors);
2033                 ret = -EINVAL;
2034                 goto out;
2035         }
2036
2037         if (crtc_req->count_connectors > 0) {
2038                 u32 out_id;
2039
2040                 /* Avoid unbounded kernel memory allocation */
2041                 if (crtc_req->count_connectors > config->num_connector) {
2042                         ret = -EINVAL;
2043                         goto out;
2044                 }
2045
2046                 connector_set = kmalloc(crtc_req->count_connectors *
2047                                         sizeof(struct drm_connector *),
2048                                         GFP_KERNEL);
2049                 if (!connector_set) {
2050                         ret = -ENOMEM;
2051                         goto out;
2052                 }
2053
2054                 for (i = 0; i < crtc_req->count_connectors; i++) {
2055                         set_connectors_ptr = (uint32_t __user *)(unsigned long)crtc_req->set_connectors_ptr;
2056                         if (get_user(out_id, &set_connectors_ptr[i])) {
2057                                 ret = -EFAULT;
2058                                 goto out;
2059                         }
2060
2061                         obj = drm_mode_object_find(dev, out_id,
2062                                                    DRM_MODE_OBJECT_CONNECTOR);
2063                         if (!obj) {
2064                                 DRM_DEBUG_KMS("Connector id %d unknown\n",
2065                                                 out_id);
2066                                 ret = -EINVAL;
2067                                 goto out;
2068                         }
2069                         connector = obj_to_connector(obj);
2070                         DRM_DEBUG_KMS("[CONNECTOR:%d:%s]\n",
2071                                         connector->base.id,
2072                                         drm_get_connector_name(connector));
2073
2074                         connector_set[i] = connector;
2075                 }
2076         }
2077
2078         set.crtc = crtc;
2079         set.x = crtc_req->x;
2080         set.y = crtc_req->y;
2081         set.mode = mode;
2082         set.connectors = connector_set;
2083         set.num_connectors = crtc_req->count_connectors;
2084         set.fb = fb;
2085         ret = drm_mode_set_config_internal(&set);
2086
2087 out:
2088         if (fb)
2089                 drm_framebuffer_unreference(fb);
2090
2091         kfree(connector_set);
2092         drm_mode_destroy(dev, mode);
2093         drm_modeset_unlock_all(dev);
2094         return ret;
2095 }
2096
2097 int drm_mode_cursor_ioctl(struct drm_device *dev,
2098                         void *data, struct drm_file *file_priv)
2099 {
2100         struct drm_mode_cursor *req = data;
2101         struct drm_mode_object *obj;
2102         struct drm_crtc *crtc;
2103         int ret = 0;
2104
2105         if (!drm_core_check_feature(dev, DRIVER_MODESET))
2106                 return -EINVAL;
2107
2108         if (!req->flags || (~DRM_MODE_CURSOR_FLAGS & req->flags))
2109                 return -EINVAL;
2110
2111         obj = drm_mode_object_find(dev, req->crtc_id, DRM_MODE_OBJECT_CRTC);
2112         if (!obj) {
2113                 DRM_DEBUG_KMS("Unknown CRTC ID %d\n", req->crtc_id);
2114                 return -EINVAL;
2115         }
2116         crtc = obj_to_crtc(obj);
2117
2118         mutex_lock(&crtc->mutex);
2119         if (req->flags & DRM_MODE_CURSOR_BO) {
2120                 if (!crtc->funcs->cursor_set) {
2121                         ret = -ENXIO;
2122                         goto out;
2123                 }
2124                 /* Turns off the cursor if handle is 0 */
2125                 ret = crtc->funcs->cursor_set(crtc, file_priv, req->handle,
2126                                               req->width, req->height);
2127         }
2128
2129         if (req->flags & DRM_MODE_CURSOR_MOVE) {
2130                 if (crtc->funcs->cursor_move) {
2131                         ret = crtc->funcs->cursor_move(crtc, req->x, req->y);
2132                 } else {
2133                         ret = -EFAULT;
2134                         goto out;
2135                 }
2136         }
2137 out:
2138         mutex_unlock(&crtc->mutex);
2139
2140         return ret;
2141 }
2142
2143 /* Original addfb only supported RGB formats, so figure out which one */
2144 uint32_t drm_mode_legacy_fb_format(uint32_t bpp, uint32_t depth)
2145 {
2146         uint32_t fmt;
2147
2148         switch (bpp) {
2149         case 8:
2150                 fmt = DRM_FORMAT_C8;
2151                 break;
2152         case 16:
2153                 if (depth == 15)
2154                         fmt = DRM_FORMAT_XRGB1555;
2155                 else
2156                         fmt = DRM_FORMAT_RGB565;
2157                 break;
2158         case 24:
2159                 fmt = DRM_FORMAT_RGB888;
2160                 break;
2161         case 32:
2162                 if (depth == 24)
2163                         fmt = DRM_FORMAT_XRGB8888;
2164                 else if (depth == 30)
2165                         fmt = DRM_FORMAT_XRGB2101010;
2166                 else
2167                         fmt = DRM_FORMAT_ARGB8888;
2168                 break;
2169         default:
2170                 DRM_ERROR("bad bpp, assuming x8r8g8b8 pixel format\n");
2171                 fmt = DRM_FORMAT_XRGB8888;
2172                 break;
2173         }
2174
2175         return fmt;
2176 }
2177 EXPORT_SYMBOL(drm_mode_legacy_fb_format);
2178
2179 /**
2180  * drm_mode_addfb - add an FB to the graphics configuration
2181  * @dev: drm device for the ioctl
2182  * @data: data pointer for the ioctl
2183  * @file_priv: drm file for the ioctl call
2184  *
2185  * Add a new FB to the specified CRTC, given a user request.
2186  *
2187  * Called by the user via ioctl.
2188  *
2189  * RETURNS:
2190  * Zero on success, errno on failure.
2191  */
2192 int drm_mode_addfb(struct drm_device *dev,
2193                    void *data, struct drm_file *file_priv)
2194 {
2195         struct drm_mode_fb_cmd *or = data;
2196         struct drm_mode_fb_cmd2 r = {};
2197         struct drm_mode_config *config = &dev->mode_config;
2198         struct drm_framebuffer *fb;
2199         int ret = 0;
2200
2201         /* Use new struct with format internally */
2202         r.fb_id = or->fb_id;
2203         r.width = or->width;
2204         r.height = or->height;
2205         r.pitches[0] = or->pitch;
2206         r.pixel_format = drm_mode_legacy_fb_format(or->bpp, or->depth);
2207         r.handles[0] = or->handle;
2208
2209         if (!drm_core_check_feature(dev, DRIVER_MODESET))
2210                 return -EINVAL;
2211
2212         if ((config->min_width > r.width) || (r.width > config->max_width))
2213                 return -EINVAL;
2214
2215         if ((config->min_height > r.height) || (r.height > config->max_height))
2216                 return -EINVAL;
2217
2218         fb = dev->mode_config.funcs->fb_create(dev, file_priv, &r);
2219         if (IS_ERR(fb)) {
2220                 DRM_DEBUG_KMS("could not create framebuffer\n");
2221                 return PTR_ERR(fb);
2222         }
2223
2224         mutex_lock(&file_priv->fbs_lock);
2225         or->fb_id = fb->base.id;
2226         list_add(&fb->filp_head, &file_priv->fbs);
2227         DRM_DEBUG_KMS("[FB:%d]\n", fb->base.id);
2228         mutex_unlock(&file_priv->fbs_lock);
2229
2230         return ret;
2231 }
2232
2233 static int format_check(const struct drm_mode_fb_cmd2 *r)
2234 {
2235         uint32_t format = r->pixel_format & ~DRM_FORMAT_BIG_ENDIAN;
2236
2237         switch (format) {
2238         case DRM_FORMAT_C8:
2239         case DRM_FORMAT_RGB332:
2240         case DRM_FORMAT_BGR233:
2241         case DRM_FORMAT_XRGB4444:
2242         case DRM_FORMAT_XBGR4444:
2243         case DRM_FORMAT_RGBX4444:
2244         case DRM_FORMAT_BGRX4444:
2245         case DRM_FORMAT_ARGB4444:
2246         case DRM_FORMAT_ABGR4444:
2247         case DRM_FORMAT_RGBA4444:
2248         case DRM_FORMAT_BGRA4444:
2249         case DRM_FORMAT_XRGB1555:
2250         case DRM_FORMAT_XBGR1555:
2251         case DRM_FORMAT_RGBX5551:
2252         case DRM_FORMAT_BGRX5551:
2253         case DRM_FORMAT_ARGB1555:
2254         case DRM_FORMAT_ABGR1555:
2255         case DRM_FORMAT_RGBA5551:
2256         case DRM_FORMAT_BGRA5551:
2257         case DRM_FORMAT_RGB565:
2258         case DRM_FORMAT_BGR565:
2259         case DRM_FORMAT_RGB888:
2260         case DRM_FORMAT_BGR888:
2261         case DRM_FORMAT_XRGB8888:
2262         case DRM_FORMAT_XBGR8888:
2263         case DRM_FORMAT_RGBX8888:
2264         case DRM_FORMAT_BGRX8888:
2265         case DRM_FORMAT_ARGB8888:
2266         case DRM_FORMAT_ABGR8888:
2267         case DRM_FORMAT_RGBA8888:
2268         case DRM_FORMAT_BGRA8888:
2269         case DRM_FORMAT_XRGB2101010:
2270         case DRM_FORMAT_XBGR2101010:
2271         case DRM_FORMAT_RGBX1010102:
2272         case DRM_FORMAT_BGRX1010102:
2273         case DRM_FORMAT_ARGB2101010:
2274         case DRM_FORMAT_ABGR2101010:
2275         case DRM_FORMAT_RGBA1010102:
2276         case DRM_FORMAT_BGRA1010102:
2277         case DRM_FORMAT_YUYV:
2278         case DRM_FORMAT_YVYU:
2279         case DRM_FORMAT_UYVY:
2280         case DRM_FORMAT_VYUY:
2281         case DRM_FORMAT_AYUV:
2282         case DRM_FORMAT_NV12:
2283         case DRM_FORMAT_NV21:
2284         case DRM_FORMAT_NV16:
2285         case DRM_FORMAT_NV61:
2286         case DRM_FORMAT_NV24:
2287         case DRM_FORMAT_NV42:
2288         case DRM_FORMAT_YUV410:
2289         case DRM_FORMAT_YVU410:
2290         case DRM_FORMAT_YUV411:
2291         case DRM_FORMAT_YVU411:
2292         case DRM_FORMAT_YUV420:
2293         case DRM_FORMAT_YVU420:
2294         case DRM_FORMAT_YUV422:
2295         case DRM_FORMAT_YVU422:
2296         case DRM_FORMAT_YUV444:
2297         case DRM_FORMAT_YVU444:
2298                 return 0;
2299         default:
2300                 return -EINVAL;
2301         }
2302 }
2303
2304 static int framebuffer_check(const struct drm_mode_fb_cmd2 *r)
2305 {
2306         int ret, hsub, vsub, num_planes, i;
2307
2308         ret = format_check(r);
2309         if (ret) {
2310                 DRM_DEBUG_KMS("bad framebuffer format 0x%08x\n", r->pixel_format);
2311                 return ret;
2312         }
2313
2314         hsub = drm_format_horz_chroma_subsampling(r->pixel_format);
2315         vsub = drm_format_vert_chroma_subsampling(r->pixel_format);
2316         num_planes = drm_format_num_planes(r->pixel_format);
2317
2318         if (r->width == 0 || r->width % hsub) {
2319                 DRM_DEBUG_KMS("bad framebuffer width %u\n", r->height);
2320                 return -EINVAL;
2321         }
2322
2323         if (r->height == 0 || r->height % vsub) {
2324                 DRM_DEBUG_KMS("bad framebuffer height %u\n", r->height);
2325                 return -EINVAL;
2326         }
2327
2328         for (i = 0; i < num_planes; i++) {
2329                 unsigned int width = r->width / (i != 0 ? hsub : 1);
2330                 unsigned int height = r->height / (i != 0 ? vsub : 1);
2331                 unsigned int cpp = drm_format_plane_cpp(r->pixel_format, i);
2332
2333                 if (!r->handles[i]) {
2334                         DRM_DEBUG_KMS("no buffer object handle for plane %d\n", i);
2335                         return -EINVAL;
2336                 }
2337
2338                 if ((uint64_t) width * cpp > UINT_MAX)
2339                         return -ERANGE;
2340
2341                 if ((uint64_t) height * r->pitches[i] + r->offsets[i] > UINT_MAX)
2342                         return -ERANGE;
2343
2344                 if (r->pitches[i] < width * cpp) {
2345                         DRM_DEBUG_KMS("bad pitch %u for plane %d\n", r->pitches[i], i);
2346                         return -EINVAL;
2347                 }
2348         }
2349
2350         return 0;
2351 }
2352
2353 /**
2354  * drm_mode_addfb2 - add an FB to the graphics configuration
2355  * @dev: drm device for the ioctl
2356  * @data: data pointer for the ioctl
2357  * @file_priv: drm file for the ioctl call
2358  *
2359  * Add a new FB to the specified CRTC, given a user request with format.
2360  *
2361  * Called by the user via ioctl.
2362  *
2363  * RETURNS:
2364  * Zero on success, errno on failure.
2365  */
2366 int drm_mode_addfb2(struct drm_device *dev,
2367                     void *data, struct drm_file *file_priv)
2368 {
2369         struct drm_mode_fb_cmd2 *r = data;
2370         struct drm_mode_config *config = &dev->mode_config;
2371         struct drm_framebuffer *fb;
2372         int ret;
2373
2374         if (!drm_core_check_feature(dev, DRIVER_MODESET))
2375                 return -EINVAL;
2376
2377         if (r->flags & ~DRM_MODE_FB_INTERLACED) {
2378                 DRM_DEBUG_KMS("bad framebuffer flags 0x%08x\n", r->flags);
2379                 return -EINVAL;
2380         }
2381
2382         if ((config->min_width > r->width) || (r->width > config->max_width)) {
2383                 DRM_DEBUG_KMS("bad framebuffer width %d, should be >= %d && <= %d\n",
2384                           r->width, config->min_width, config->max_width);
2385                 return -EINVAL;
2386         }
2387         if ((config->min_height > r->height) || (r->height > config->max_height)) {
2388                 DRM_DEBUG_KMS("bad framebuffer height %d, should be >= %d && <= %d\n",
2389                           r->height, config->min_height, config->max_height);
2390                 return -EINVAL;
2391         }
2392
2393         ret = framebuffer_check(r);
2394         if (ret)
2395                 return ret;
2396
2397         fb = dev->mode_config.funcs->fb_create(dev, file_priv, r);
2398         if (IS_ERR(fb)) {
2399                 DRM_DEBUG_KMS("could not create framebuffer\n");
2400                 return PTR_ERR(fb);
2401         }
2402
2403         mutex_lock(&file_priv->fbs_lock);
2404         r->fb_id = fb->base.id;
2405         list_add(&fb->filp_head, &file_priv->fbs);
2406         DRM_DEBUG_KMS("[FB:%d]\n", fb->base.id);
2407         mutex_unlock(&file_priv->fbs_lock);
2408
2409
2410         return ret;
2411 }
2412
2413 /**
2414  * drm_mode_rmfb - remove an FB from the configuration
2415  * @dev: drm device for the ioctl
2416  * @data: data pointer for the ioctl
2417  * @file_priv: drm file for the ioctl call
2418  *
2419  * Remove the FB specified by the user.
2420  *
2421  * Called by the user via ioctl.
2422  *
2423  * RETURNS:
2424  * Zero on success, errno on failure.
2425  */
2426 int drm_mode_rmfb(struct drm_device *dev,
2427                    void *data, struct drm_file *file_priv)
2428 {
2429         struct drm_framebuffer *fb = NULL;
2430         struct drm_framebuffer *fbl = NULL;
2431         uint32_t *id = data;
2432         int found = 0;
2433
2434         if (!drm_core_check_feature(dev, DRIVER_MODESET))
2435                 return -EINVAL;
2436
2437         mutex_lock(&file_priv->fbs_lock);
2438         mutex_lock(&dev->mode_config.fb_lock);
2439         fb = __drm_framebuffer_lookup(dev, *id);
2440         if (!fb)
2441                 goto fail_lookup;
2442
2443         list_for_each_entry(fbl, &file_priv->fbs, filp_head)
2444                 if (fb == fbl)
2445                         found = 1;
2446         if (!found)
2447                 goto fail_lookup;
2448
2449         /* Mark fb as reaped, we still have a ref from fpriv->fbs. */
2450         __drm_framebuffer_unregister(dev, fb);
2451
2452         list_del_init(&fb->filp_head);
2453         mutex_unlock(&dev->mode_config.fb_lock);
2454         mutex_unlock(&file_priv->fbs_lock);
2455
2456         drm_framebuffer_remove(fb);
2457
2458         return 0;
2459
2460 fail_lookup:
2461         mutex_unlock(&dev->mode_config.fb_lock);
2462         mutex_unlock(&file_priv->fbs_lock);
2463
2464         return -EINVAL;
2465 }
2466
2467 /**
2468  * drm_mode_getfb - get FB info
2469  * @dev: drm device for the ioctl
2470  * @data: data pointer for the ioctl
2471  * @file_priv: drm file for the ioctl call
2472  *
2473  * Lookup the FB given its ID and return info about it.
2474  *
2475  * Called by the user via ioctl.
2476  *
2477  * RETURNS:
2478  * Zero on success, errno on failure.
2479  */
2480 int drm_mode_getfb(struct drm_device *dev,
2481                    void *data, struct drm_file *file_priv)
2482 {
2483         struct drm_mode_fb_cmd *r = data;
2484         struct drm_framebuffer *fb;
2485         int ret;
2486
2487         if (!drm_core_check_feature(dev, DRIVER_MODESET))
2488                 return -EINVAL;
2489
2490         fb = drm_framebuffer_lookup(dev, r->fb_id);
2491         if (!fb)
2492                 return -EINVAL;
2493
2494         r->height = fb->height;
2495         r->width = fb->width;
2496         r->depth = fb->depth;
2497         r->bpp = fb->bits_per_pixel;
2498         r->pitch = fb->pitches[0];
2499         if (fb->funcs->create_handle)
2500                 ret = fb->funcs->create_handle(fb, file_priv, &r->handle);
2501         else
2502                 ret = -ENODEV;
2503
2504         drm_framebuffer_unreference(fb);
2505
2506         return ret;
2507 }
2508
2509 int drm_mode_dirtyfb_ioctl(struct drm_device *dev,
2510                            void *data, struct drm_file *file_priv)
2511 {
2512         struct drm_clip_rect __user *clips_ptr;
2513         struct drm_clip_rect *clips = NULL;
2514         struct drm_mode_fb_dirty_cmd *r = data;
2515         struct drm_framebuffer *fb;
2516         unsigned flags;
2517         int num_clips;
2518         int ret;
2519
2520         if (!drm_core_check_feature(dev, DRIVER_MODESET))
2521                 return -EINVAL;
2522
2523         fb = drm_framebuffer_lookup(dev, r->fb_id);
2524         if (!fb)
2525                 return -EINVAL;
2526
2527         num_clips = r->num_clips;
2528         clips_ptr = (struct drm_clip_rect __user *)(unsigned long)r->clips_ptr;
2529
2530         if (!num_clips != !clips_ptr) {
2531                 ret = -EINVAL;
2532                 goto out_err1;
2533         }
2534
2535         flags = DRM_MODE_FB_DIRTY_FLAGS & r->flags;
2536
2537         /* If userspace annotates copy, clips must come in pairs */
2538         if (flags & DRM_MODE_FB_DIRTY_ANNOTATE_COPY && (num_clips % 2)) {
2539                 ret = -EINVAL;
2540                 goto out_err1;
2541         }
2542
2543         if (num_clips && clips_ptr) {
2544                 if (num_clips < 0 || num_clips > DRM_MODE_FB_DIRTY_MAX_CLIPS) {
2545                         ret = -EINVAL;
2546                         goto out_err1;
2547                 }
2548                 clips = kzalloc(num_clips * sizeof(*clips), GFP_KERNEL);
2549                 if (!clips) {
2550                         ret = -ENOMEM;
2551                         goto out_err1;
2552                 }
2553
2554                 ret = copy_from_user(clips, clips_ptr,
2555                                      num_clips * sizeof(*clips));
2556                 if (ret) {
2557                         ret = -EFAULT;
2558                         goto out_err2;
2559                 }
2560         }
2561
2562         if (fb->funcs->dirty) {
2563                 drm_modeset_lock_all(dev);
2564                 ret = fb->funcs->dirty(fb, file_priv, flags, r->color,
2565                                        clips, num_clips);
2566                 drm_modeset_unlock_all(dev);
2567         } else {
2568                 ret = -ENOSYS;
2569         }
2570
2571 out_err2:
2572         kfree(clips);
2573 out_err1:
2574         drm_framebuffer_unreference(fb);
2575
2576         return ret;
2577 }
2578
2579
2580 /**
2581  * drm_fb_release - remove and free the FBs on this file
2582  * @priv: drm file for the ioctl
2583  *
2584  * Destroy all the FBs associated with @filp.
2585  *
2586  * Called by the user via ioctl.
2587  *
2588  * RETURNS:
2589  * Zero on success, errno on failure.
2590  */
2591 void drm_fb_release(struct drm_file *priv)
2592 {
2593         struct drm_device *dev = priv->minor->dev;
2594         struct drm_framebuffer *fb, *tfb;
2595
2596         mutex_lock(&priv->fbs_lock);
2597         list_for_each_entry_safe(fb, tfb, &priv->fbs, filp_head) {
2598
2599                 mutex_lock(&dev->mode_config.fb_lock);
2600                 /* Mark fb as reaped, we still have a ref from fpriv->fbs. */
2601                 __drm_framebuffer_unregister(dev, fb);
2602                 mutex_unlock(&dev->mode_config.fb_lock);
2603
2604                 list_del_init(&fb->filp_head);
2605
2606                 /* This will also drop the fpriv->fbs reference. */
2607                 drm_framebuffer_remove(fb);
2608         }
2609         mutex_unlock(&priv->fbs_lock);
2610 }
2611
2612 struct drm_property *drm_property_create(struct drm_device *dev, int flags,
2613                                          const char *name, int num_values)
2614 {
2615         struct drm_property *property = NULL;
2616         int ret;
2617
2618         property = kzalloc(sizeof(struct drm_property), GFP_KERNEL);
2619         if (!property)
2620                 return NULL;
2621
2622         if (num_values) {
2623                 property->values = kzalloc(sizeof(uint64_t)*num_values, GFP_KERNEL);
2624                 if (!property->values)
2625                         goto fail;
2626         }
2627
2628         ret = drm_mode_object_get(dev, &property->base, DRM_MODE_OBJECT_PROPERTY);
2629         if (ret)
2630                 goto fail;
2631
2632         property->flags = flags;
2633         property->num_values = num_values;
2634         INIT_LIST_HEAD(&property->enum_blob_list);
2635
2636         if (name) {
2637                 strncpy(property->name, name, DRM_PROP_NAME_LEN);
2638                 property->name[DRM_PROP_NAME_LEN-1] = '\0';
2639         }
2640
2641         list_add_tail(&property->head, &dev->mode_config.property_list);
2642         return property;
2643 fail:
2644         kfree(property->values);
2645         kfree(property);
2646         return NULL;
2647 }
2648 EXPORT_SYMBOL(drm_property_create);
2649
2650 struct drm_property *drm_property_create_enum(struct drm_device *dev, int flags,
2651                                          const char *name,
2652                                          const struct drm_prop_enum_list *props,
2653                                          int num_values)
2654 {
2655         struct drm_property *property;
2656         int i, ret;
2657
2658         flags |= DRM_MODE_PROP_ENUM;
2659
2660         property = drm_property_create(dev, flags, name, num_values);
2661         if (!property)
2662                 return NULL;
2663
2664         for (i = 0; i < num_values; i++) {
2665                 ret = drm_property_add_enum(property, i,
2666                                       props[i].type,
2667                                       props[i].name);
2668                 if (ret) {
2669                         drm_property_destroy(dev, property);
2670                         return NULL;
2671                 }
2672         }
2673
2674         return property;
2675 }
2676 EXPORT_SYMBOL(drm_property_create_enum);
2677
2678 struct drm_property *drm_property_create_bitmask(struct drm_device *dev,
2679                                          int flags, const char *name,
2680                                          const struct drm_prop_enum_list *props,
2681                                          int num_values)
2682 {
2683         struct drm_property *property;
2684         int i, ret;
2685
2686         flags |= DRM_MODE_PROP_BITMASK;
2687
2688         property = drm_property_create(dev, flags, name, num_values);
2689         if (!property)
2690                 return NULL;
2691
2692         for (i = 0; i < num_values; i++) {
2693                 ret = drm_property_add_enum(property, i,
2694                                       props[i].type,
2695                                       props[i].name);
2696                 if (ret) {
2697                         drm_property_destroy(dev, property);
2698                         return NULL;
2699                 }
2700         }
2701
2702         return property;
2703 }
2704 EXPORT_SYMBOL(drm_property_create_bitmask);
2705
2706 struct drm_property *drm_property_create_range(struct drm_device *dev, int flags,
2707                                          const char *name,
2708                                          uint64_t min, uint64_t max)
2709 {
2710         struct drm_property *property;
2711
2712         flags |= DRM_MODE_PROP_RANGE;
2713
2714         property = drm_property_create(dev, flags, name, 2);
2715         if (!property)
2716                 return NULL;
2717
2718         property->values[0] = min;
2719         property->values[1] = max;
2720
2721         return property;
2722 }
2723 EXPORT_SYMBOL(drm_property_create_range);
2724
2725 int drm_property_add_enum(struct drm_property *property, int index,
2726                           uint64_t value, const char *name)
2727 {
2728         struct drm_property_enum *prop_enum;
2729
2730         if (!(property->flags & (DRM_MODE_PROP_ENUM | DRM_MODE_PROP_BITMASK)))
2731                 return -EINVAL;
2732
2733         /*
2734          * Bitmask enum properties have the additional constraint of values
2735          * from 0 to 63
2736          */
2737         if ((property->flags & DRM_MODE_PROP_BITMASK) && (value > 63))
2738                 return -EINVAL;
2739
2740         if (!list_empty(&property->enum_blob_list)) {
2741                 list_for_each_entry(prop_enum, &property->enum_blob_list, head) {
2742                         if (prop_enum->value == value) {
2743                                 strncpy(prop_enum->name, name, DRM_PROP_NAME_LEN);
2744                                 prop_enum->name[DRM_PROP_NAME_LEN-1] = '\0';
2745                                 return 0;
2746                         }
2747                 }
2748         }
2749
2750         prop_enum = kzalloc(sizeof(struct drm_property_enum), GFP_KERNEL);
2751         if (!prop_enum)
2752                 return -ENOMEM;
2753
2754         strncpy(prop_enum->name, name, DRM_PROP_NAME_LEN);
2755         prop_enum->name[DRM_PROP_NAME_LEN-1] = '\0';
2756         prop_enum->value = value;
2757
2758         property->values[index] = value;
2759         list_add_tail(&prop_enum->head, &property->enum_blob_list);
2760         return 0;
2761 }
2762 EXPORT_SYMBOL(drm_property_add_enum);
2763
2764 void drm_property_destroy(struct drm_device *dev, struct drm_property *property)
2765 {
2766         struct drm_property_enum *prop_enum, *pt;
2767
2768         list_for_each_entry_safe(prop_enum, pt, &property->enum_blob_list, head) {
2769                 list_del(&prop_enum->head);
2770                 kfree(prop_enum);
2771         }
2772
2773         if (property->num_values)
2774                 kfree(property->values);
2775         drm_mode_object_put(dev, &property->base);
2776         list_del(&property->head);
2777         kfree(property);
2778 }
2779 EXPORT_SYMBOL(drm_property_destroy);
2780
2781 void drm_object_attach_property(struct drm_mode_object *obj,
2782                                 struct drm_property *property,
2783                                 uint64_t init_val)
2784 {
2785         int count = obj->properties->count;
2786
2787         if (count == DRM_OBJECT_MAX_PROPERTY) {
2788                 WARN(1, "Failed to attach object property (type: 0x%x). Please "
2789                         "increase DRM_OBJECT_MAX_PROPERTY by 1 for each time "
2790                         "you see this message on the same object type.\n",
2791                         obj->type);
2792                 return;
2793         }
2794
2795         obj->properties->ids[count] = property->base.id;
2796         obj->properties->values[count] = init_val;
2797         obj->properties->count++;
2798 }
2799 EXPORT_SYMBOL(drm_object_attach_property);
2800
2801 int drm_object_property_set_value(struct drm_mode_object *obj,
2802                                   struct drm_property *property, uint64_t val)
2803 {
2804         int i;
2805
2806         for (i = 0; i < obj->properties->count; i++) {
2807                 if (obj->properties->ids[i] == property->base.id) {
2808                         obj->properties->values[i] = val;
2809                         return 0;
2810                 }
2811         }
2812
2813         return -EINVAL;
2814 }
2815 EXPORT_SYMBOL(drm_object_property_set_value);
2816
2817 int drm_object_property_get_value(struct drm_mode_object *obj,
2818                                   struct drm_property *property, uint64_t *val)
2819 {
2820         int i;
2821
2822         for (i = 0; i < obj->properties->count; i++) {
2823                 if (obj->properties->ids[i] == property->base.id) {
2824                         *val = obj->properties->values[i];
2825                         return 0;
2826                 }
2827         }
2828
2829         return -EINVAL;
2830 }
2831 EXPORT_SYMBOL(drm_object_property_get_value);
2832
2833 int drm_mode_getproperty_ioctl(struct drm_device *dev,
2834                                void *data, struct drm_file *file_priv)
2835 {
2836         struct drm_mode_object *obj;
2837         struct drm_mode_get_property *out_resp = data;
2838         struct drm_property *property;
2839         int enum_count = 0;
2840         int blob_count = 0;
2841         int value_count = 0;
2842         int ret = 0, i;
2843         int copied;
2844         struct drm_property_enum *prop_enum;
2845         struct drm_mode_property_enum __user *enum_ptr;
2846         struct drm_property_blob *prop_blob;
2847         uint32_t __user *blob_id_ptr;
2848         uint64_t __user *values_ptr;
2849         uint32_t __user *blob_length_ptr;
2850
2851         if (!drm_core_check_feature(dev, DRIVER_MODESET))
2852                 return -EINVAL;
2853
2854         drm_modeset_lock_all(dev);
2855         obj = drm_mode_object_find(dev, out_resp->prop_id, DRM_MODE_OBJECT_PROPERTY);
2856         if (!obj) {
2857                 ret = -EINVAL;
2858                 goto done;
2859         }
2860         property = obj_to_property(obj);
2861
2862         if (property->flags & (DRM_MODE_PROP_ENUM | DRM_MODE_PROP_BITMASK)) {
2863                 list_for_each_entry(prop_enum, &property->enum_blob_list, head)
2864                         enum_count++;
2865         } else if (property->flags & DRM_MODE_PROP_BLOB) {
2866                 list_for_each_entry(prop_blob, &property->enum_blob_list, head)
2867                         blob_count++;
2868         }
2869
2870         value_count = property->num_values;
2871
2872         strncpy(out_resp->name, property->name, DRM_PROP_NAME_LEN);
2873         out_resp->name[DRM_PROP_NAME_LEN-1] = 0;
2874         out_resp->flags = property->flags;
2875
2876         if ((out_resp->count_values >= value_count) && value_count) {
2877                 values_ptr = (uint64_t __user *)(unsigned long)out_resp->values_ptr;
2878                 for (i = 0; i < value_count; i++) {
2879                         if (copy_to_user(values_ptr + i, &property->values[i], sizeof(uint64_t))) {
2880                                 ret = -EFAULT;
2881                                 goto done;
2882                         }
2883                 }
2884         }
2885         out_resp->count_values = value_count;
2886
2887         if (property->flags & (DRM_MODE_PROP_ENUM | DRM_MODE_PROP_BITMASK)) {
2888                 if ((out_resp->count_enum_blobs >= enum_count) && enum_count) {
2889                         copied = 0;
2890                         enum_ptr = (struct drm_mode_property_enum __user *)(unsigned long)out_resp->enum_blob_ptr;
2891                         list_for_each_entry(prop_enum, &property->enum_blob_list, head) {
2892
2893                                 if (copy_to_user(&enum_ptr[copied].value, &prop_enum->value, sizeof(uint64_t))) {
2894                                         ret = -EFAULT;
2895                                         goto done;
2896                                 }
2897
2898                                 if (copy_to_user(&enum_ptr[copied].name,
2899                                                  &prop_enum->name, DRM_PROP_NAME_LEN)) {
2900                                         ret = -EFAULT;
2901                                         goto done;
2902                                 }
2903                                 copied++;
2904                         }
2905                 }
2906                 out_resp->count_enum_blobs = enum_count;
2907         }
2908
2909         if (property->flags & DRM_MODE_PROP_BLOB) {
2910                 if ((out_resp->count_enum_blobs >= blob_count) && blob_count) {
2911                         copied = 0;
2912                         blob_id_ptr = (uint32_t __user *)(unsigned long)out_resp->enum_blob_ptr;
2913                         blob_length_ptr = (uint32_t __user *)(unsigned long)out_resp->values_ptr;
2914
2915                         list_for_each_entry(prop_blob, &property->enum_blob_list, head) {
2916                                 if (put_user(prop_blob->base.id, blob_id_ptr + copied)) {
2917                                         ret = -EFAULT;
2918                                         goto done;
2919                                 }
2920
2921                                 if (put_user(prop_blob->length, blob_length_ptr + copied)) {
2922                                         ret = -EFAULT;
2923                                         goto done;
2924                                 }
2925
2926                                 copied++;
2927                         }
2928                 }
2929                 out_resp->count_enum_blobs = blob_count;
2930         }
2931 done:
2932         drm_modeset_unlock_all(dev);
2933         return ret;
2934 }
2935
2936 static struct drm_property_blob *drm_property_create_blob(struct drm_device *dev, int length,
2937                                                           void *data)
2938 {
2939         struct drm_property_blob *blob;
2940         int ret;
2941
2942         if (!length || !data)
2943                 return NULL;
2944
2945         blob = kzalloc(sizeof(struct drm_property_blob)+length, GFP_KERNEL);
2946         if (!blob)
2947                 return NULL;
2948
2949         ret = drm_mode_object_get(dev, &blob->base, DRM_MODE_OBJECT_BLOB);
2950         if (ret) {
2951                 kfree(blob);
2952                 return NULL;
2953         }
2954
2955         blob->length = length;
2956
2957         memcpy(blob->data, data, length);
2958
2959         list_add_tail(&blob->head, &dev->mode_config.property_blob_list);
2960         return blob;
2961 }
2962
2963 static void drm_property_destroy_blob(struct drm_device *dev,
2964                                struct drm_property_blob *blob)
2965 {
2966         drm_mode_object_put(dev, &blob->base);
2967         list_del(&blob->head);
2968         kfree(blob);
2969 }
2970
2971 int drm_mode_getblob_ioctl(struct drm_device *dev,
2972                            void *data, struct drm_file *file_priv)
2973 {
2974         struct drm_mode_object *obj;
2975         struct drm_mode_get_blob *out_resp = data;
2976         struct drm_property_blob *blob;
2977         int ret = 0;
2978         void __user *blob_ptr;
2979
2980         if (!drm_core_check_feature(dev, DRIVER_MODESET))
2981                 return -EINVAL;
2982
2983         drm_modeset_lock_all(dev);
2984         obj = drm_mode_object_find(dev, out_resp->blob_id, DRM_MODE_OBJECT_BLOB);
2985         if (!obj) {
2986                 ret = -EINVAL;
2987                 goto done;
2988         }
2989         blob = obj_to_blob(obj);
2990
2991         if (out_resp->length == blob->length) {
2992                 blob_ptr = (void __user *)(unsigned long)out_resp->data;
2993                 if (copy_to_user(blob_ptr, blob->data, blob->length)){
2994                         ret = -EFAULT;
2995                         goto done;
2996                 }
2997         }
2998         out_resp->length = blob->length;
2999
3000 done:
3001         drm_modeset_unlock_all(dev);
3002         return ret;
3003 }
3004
3005 int drm_mode_connector_update_edid_property(struct drm_connector *connector,
3006                                             struct edid *edid)
3007 {
3008         struct drm_device *dev = connector->dev;
3009         int ret, size;
3010
3011         if (connector->edid_blob_ptr)
3012                 drm_property_destroy_blob(dev, connector->edid_blob_ptr);
3013
3014         /* Delete edid, when there is none. */
3015         if (!edid) {
3016                 connector->edid_blob_ptr = NULL;
3017                 ret = drm_object_property_set_value(&connector->base, dev->mode_config.edid_property, 0);
3018                 return ret;
3019         }
3020
3021         size = EDID_LENGTH * (1 + edid->extensions);
3022         connector->edid_blob_ptr = drm_property_create_blob(connector->dev,
3023                                                             size, edid);
3024         if (!connector->edid_blob_ptr)
3025                 return -EINVAL;
3026
3027         ret = drm_object_property_set_value(&connector->base,
3028                                                dev->mode_config.edid_property,
3029                                                connector->edid_blob_ptr->base.id);
3030
3031         return ret;
3032 }
3033 EXPORT_SYMBOL(drm_mode_connector_update_edid_property);
3034
3035 static bool drm_property_change_is_valid(struct drm_property *property,
3036                                          uint64_t value)
3037 {
3038         if (property->flags & DRM_MODE_PROP_IMMUTABLE)
3039                 return false;
3040         if (property->flags & DRM_MODE_PROP_RANGE) {
3041                 if (value < property->values[0] || value > property->values[1])
3042                         return false;
3043                 return true;
3044         } else if (property->flags & DRM_MODE_PROP_BITMASK) {
3045                 int i;
3046                 uint64_t valid_mask = 0;
3047                 for (i = 0; i < property->num_values; i++)
3048                         valid_mask |= (1ULL << property->values[i]);
3049                 return !(value & ~valid_mask);
3050         } else if (property->flags & DRM_MODE_PROP_BLOB) {
3051                 /* Only the driver knows */
3052                 return true;
3053         } else {
3054                 int i;
3055                 for (i = 0; i < property->num_values; i++)
3056                         if (property->values[i] == value)
3057                                 return true;
3058                 return false;
3059         }
3060 }
3061
3062 int drm_mode_connector_property_set_ioctl(struct drm_device *dev,
3063                                        void *data, struct drm_file *file_priv)
3064 {
3065         struct drm_mode_connector_set_property *conn_set_prop = data;
3066         struct drm_mode_obj_set_property obj_set_prop = {
3067                 .value = conn_set_prop->value,
3068                 .prop_id = conn_set_prop->prop_id,
3069                 .obj_id = conn_set_prop->connector_id,
3070                 .obj_type = DRM_MODE_OBJECT_CONNECTOR
3071         };
3072
3073         /* It does all the locking and checking we need */
3074         return drm_mode_obj_set_property_ioctl(dev, &obj_set_prop, file_priv);
3075 }
3076
3077 static int drm_mode_connector_set_obj_prop(struct drm_mode_object *obj,
3078                                            struct drm_property *property,
3079                                            uint64_t value)
3080 {
3081         int ret = -EINVAL;
3082         struct drm_connector *connector = obj_to_connector(obj);
3083
3084         /* Do DPMS ourselves */
3085         if (property == connector->dev->mode_config.dpms_property) {
3086                 if (connector->funcs->dpms)
3087                         (*connector->funcs->dpms)(connector, (int)value);
3088                 ret = 0;
3089         } else if (connector->funcs->set_property)
3090                 ret = connector->funcs->set_property(connector, property, value);
3091
3092         /* store the property value if successful */
3093         if (!ret)
3094                 drm_object_property_set_value(&connector->base, property, value);
3095         return ret;
3096 }
3097
3098 static int drm_mode_crtc_set_obj_prop(struct drm_mode_object *obj,
3099                                       struct drm_property *property,
3100                                       uint64_t value)
3101 {
3102         int ret = -EINVAL;
3103         struct drm_crtc *crtc = obj_to_crtc(obj);
3104
3105         if (crtc->funcs->set_property)
3106                 ret = crtc->funcs->set_property(crtc, property, value);
3107         if (!ret)
3108                 drm_object_property_set_value(obj, property, value);
3109
3110         return ret;
3111 }
3112
3113 static int drm_mode_plane_set_obj_prop(struct drm_mode_object *obj,
3114                                       struct drm_property *property,
3115                                       uint64_t value)
3116 {
3117         int ret = -EINVAL;
3118         struct drm_plane *plane = obj_to_plane(obj);
3119
3120         if (plane->funcs->set_property)
3121                 ret = plane->funcs->set_property(plane, property, value);
3122         if (!ret)
3123                 drm_object_property_set_value(obj, property, value);
3124
3125         return ret;
3126 }
3127
3128 int drm_mode_obj_get_properties_ioctl(struct drm_device *dev, void *data,
3129                                       struct drm_file *file_priv)
3130 {
3131         struct drm_mode_obj_get_properties *arg = data;
3132         struct drm_mode_object *obj;
3133         int ret = 0;
3134         int i;
3135         int copied = 0;
3136         int props_count = 0;
3137         uint32_t __user *props_ptr;
3138         uint64_t __user *prop_values_ptr;
3139
3140         if (!drm_core_check_feature(dev, DRIVER_MODESET))
3141                 return -EINVAL;
3142
3143         drm_modeset_lock_all(dev);
3144
3145         obj = drm_mode_object_find(dev, arg->obj_id, arg->obj_type);
3146         if (!obj) {
3147                 ret = -EINVAL;
3148                 goto out;
3149         }
3150         if (!obj->properties) {
3151                 ret = -EINVAL;
3152                 goto out;
3153         }
3154
3155         props_count = obj->properties->count;
3156
3157         /* This ioctl is called twice, once to determine how much space is
3158          * needed, and the 2nd time to fill it. */
3159         if ((arg->count_props >= props_count) && props_count) {
3160                 copied = 0;
3161                 props_ptr = (uint32_t __user *)(unsigned long)(arg->props_ptr);
3162                 prop_values_ptr = (uint64_t __user *)(unsigned long)
3163                                   (arg->prop_values_ptr);
3164                 for (i = 0; i < props_count; i++) {
3165                         if (put_user(obj->properties->ids[i],
3166                                      props_ptr + copied)) {
3167                                 ret = -EFAULT;
3168                                 goto out;
3169                         }
3170                         if (put_user(obj->properties->values[i],
3171                                      prop_values_ptr + copied)) {
3172                                 ret = -EFAULT;
3173                                 goto out;
3174                         }
3175                         copied++;
3176                 }
3177         }
3178         arg->count_props = props_count;
3179 out:
3180         drm_modeset_unlock_all(dev);
3181         return ret;
3182 }
3183
3184 int drm_mode_obj_set_property_ioctl(struct drm_device *dev, void *data,
3185                                     struct drm_file *file_priv)
3186 {
3187         struct drm_mode_obj_set_property *arg = data;
3188         struct drm_mode_object *arg_obj;
3189         struct drm_mode_object *prop_obj;
3190         struct drm_property *property;
3191         int ret = -EINVAL;
3192         int i;
3193
3194         if (!drm_core_check_feature(dev, DRIVER_MODESET))
3195                 return -EINVAL;
3196
3197         drm_modeset_lock_all(dev);
3198
3199         arg_obj = drm_mode_object_find(dev, arg->obj_id, arg->obj_type);
3200         if (!arg_obj)
3201                 goto out;
3202         if (!arg_obj->properties)
3203                 goto out;
3204
3205         for (i = 0; i < arg_obj->properties->count; i++)
3206                 if (arg_obj->properties->ids[i] == arg->prop_id)
3207                         break;
3208
3209         if (i == arg_obj->properties->count)
3210                 goto out;
3211
3212         prop_obj = drm_mode_object_find(dev, arg->prop_id,
3213                                         DRM_MODE_OBJECT_PROPERTY);
3214         if (!prop_obj)
3215                 goto out;
3216         property = obj_to_property(prop_obj);
3217
3218         if (!drm_property_change_is_valid(property, arg->value))
3219                 goto out;
3220
3221         switch (arg_obj->type) {
3222         case DRM_MODE_OBJECT_CONNECTOR:
3223                 ret = drm_mode_connector_set_obj_prop(arg_obj, property,
3224                                                       arg->value);
3225                 break;
3226         case DRM_MODE_OBJECT_CRTC:
3227                 ret = drm_mode_crtc_set_obj_prop(arg_obj, property, arg->value);
3228                 break;
3229         case DRM_MODE_OBJECT_PLANE:
3230                 ret = drm_mode_plane_set_obj_prop(arg_obj, property, arg->value);
3231                 break;
3232         }
3233
3234 out:
3235         drm_modeset_unlock_all(dev);
3236         return ret;
3237 }
3238
3239 int drm_mode_connector_attach_encoder(struct drm_connector *connector,
3240                                       struct drm_encoder *encoder)
3241 {
3242         int i;
3243
3244         for (i = 0; i < DRM_CONNECTOR_MAX_ENCODER; i++) {
3245                 if (connector->encoder_ids[i] == 0) {
3246                         connector->encoder_ids[i] = encoder->base.id;
3247                         return 0;
3248                 }
3249         }
3250         return -ENOMEM;
3251 }
3252 EXPORT_SYMBOL(drm_mode_connector_attach_encoder);
3253
3254 void drm_mode_connector_detach_encoder(struct drm_connector *connector,
3255                                     struct drm_encoder *encoder)
3256 {
3257         int i;
3258         for (i = 0; i < DRM_CONNECTOR_MAX_ENCODER; i++) {
3259                 if (connector->encoder_ids[i] == encoder->base.id) {
3260                         connector->encoder_ids[i] = 0;
3261                         if (connector->encoder == encoder)
3262                                 connector->encoder = NULL;
3263                         break;
3264                 }
3265         }
3266 }
3267 EXPORT_SYMBOL(drm_mode_connector_detach_encoder);
3268
3269 int drm_mode_crtc_set_gamma_size(struct drm_crtc *crtc,
3270                                   int gamma_size)
3271 {
3272         crtc->gamma_size = gamma_size;
3273
3274         crtc->gamma_store = kzalloc(gamma_size * sizeof(uint16_t) * 3, GFP_KERNEL);
3275         if (!crtc->gamma_store) {
3276                 crtc->gamma_size = 0;
3277                 return -ENOMEM;
3278         }
3279
3280         return 0;
3281 }
3282 EXPORT_SYMBOL(drm_mode_crtc_set_gamma_size);
3283
3284 int drm_mode_gamma_set_ioctl(struct drm_device *dev,
3285                              void *data, struct drm_file *file_priv)
3286 {
3287         struct drm_mode_crtc_lut *crtc_lut = data;
3288         struct drm_mode_object *obj;
3289         struct drm_crtc *crtc;
3290         void *r_base, *g_base, *b_base;
3291         int size;
3292         int ret = 0;
3293
3294         if (!drm_core_check_feature(dev, DRIVER_MODESET))
3295                 return -EINVAL;
3296
3297         drm_modeset_lock_all(dev);
3298         obj = drm_mode_object_find(dev, crtc_lut->crtc_id, DRM_MODE_OBJECT_CRTC);
3299         if (!obj) {
3300                 ret = -EINVAL;
3301                 goto out;
3302         }
3303         crtc = obj_to_crtc(obj);
3304
3305         if (crtc->funcs->gamma_set == NULL) {
3306                 ret = -ENOSYS;
3307                 goto out;
3308         }
3309
3310         /* memcpy into gamma store */
3311         if (crtc_lut->gamma_size != crtc->gamma_size) {
3312                 ret = -EINVAL;
3313                 goto out;
3314         }
3315
3316         size = crtc_lut->gamma_size * (sizeof(uint16_t));
3317         r_base = crtc->gamma_store;
3318         if (copy_from_user(r_base, (void __user *)(unsigned long)crtc_lut->red, size)) {
3319                 ret = -EFAULT;
3320                 goto out;
3321         }
3322
3323         g_base = r_base + size;
3324         if (copy_from_user(g_base, (void __user *)(unsigned long)crtc_lut->green, size)) {
3325                 ret = -EFAULT;
3326                 goto out;
3327         }
3328
3329         b_base = g_base + size;
3330         if (copy_from_user(b_base, (void __user *)(unsigned long)crtc_lut->blue, size)) {
3331                 ret = -EFAULT;
3332                 goto out;
3333         }
3334
3335         crtc->funcs->gamma_set(crtc, r_base, g_base, b_base, 0, crtc->gamma_size);
3336
3337 out:
3338         drm_modeset_unlock_all(dev);
3339         return ret;
3340
3341 }
3342
3343 int drm_mode_gamma_get_ioctl(struct drm_device *dev,
3344                              void *data, struct drm_file *file_priv)
3345 {
3346         struct drm_mode_crtc_lut *crtc_lut = data;
3347         struct drm_mode_object *obj;
3348         struct drm_crtc *crtc;
3349         void *r_base, *g_base, *b_base;
3350         int size;
3351         int ret = 0;
3352
3353         if (!drm_core_check_feature(dev, DRIVER_MODESET))
3354                 return -EINVAL;
3355
3356         drm_modeset_lock_all(dev);
3357         obj = drm_mode_object_find(dev, crtc_lut->crtc_id, DRM_MODE_OBJECT_CRTC);
3358         if (!obj) {
3359                 ret = -EINVAL;
3360                 goto out;
3361         }
3362         crtc = obj_to_crtc(obj);
3363
3364         /* memcpy into gamma store */
3365         if (crtc_lut->gamma_size != crtc->gamma_size) {
3366                 ret = -EINVAL;
3367                 goto out;
3368         }
3369
3370         size = crtc_lut->gamma_size * (sizeof(uint16_t));
3371         r_base = crtc->gamma_store;
3372         if (copy_to_user((void __user *)(unsigned long)crtc_lut->red, r_base, size)) {
3373                 ret = -EFAULT;
3374                 goto out;
3375         }
3376
3377         g_base = r_base + size;
3378         if (copy_to_user((void __user *)(unsigned long)crtc_lut->green, g_base, size)) {
3379                 ret = -EFAULT;
3380                 goto out;
3381         }
3382
3383         b_base = g_base + size;
3384         if (copy_to_user((void __user *)(unsigned long)crtc_lut->blue, b_base, size)) {
3385                 ret = -EFAULT;
3386                 goto out;
3387         }
3388 out:
3389         drm_modeset_unlock_all(dev);
3390         return ret;
3391 }
3392
3393 int drm_mode_page_flip_ioctl(struct drm_device *dev,
3394                              void *data, struct drm_file *file_priv)
3395 {
3396         struct drm_mode_crtc_page_flip *page_flip = data;
3397         struct drm_mode_object *obj;
3398         struct drm_crtc *crtc;
3399         struct drm_framebuffer *fb = NULL, *old_fb = NULL;
3400         struct drm_pending_vblank_event *e = NULL;
3401         unsigned long flags;
3402         int hdisplay, vdisplay;
3403         int ret = -EINVAL;
3404
3405         if (page_flip->flags & ~DRM_MODE_PAGE_FLIP_FLAGS ||
3406             page_flip->reserved != 0)
3407                 return -EINVAL;
3408
3409         obj = drm_mode_object_find(dev, page_flip->crtc_id, DRM_MODE_OBJECT_CRTC);
3410         if (!obj)
3411                 return -EINVAL;
3412         crtc = obj_to_crtc(obj);
3413
3414         mutex_lock(&crtc->mutex);
3415         if (crtc->fb == NULL) {
3416                 /* The framebuffer is currently unbound, presumably
3417                  * due to a hotplug event, that userspace has not
3418                  * yet discovered.
3419                  */
3420                 ret = -EBUSY;
3421                 goto out;
3422         }
3423
3424         if (crtc->funcs->page_flip == NULL)
3425                 goto out;
3426
3427         fb = drm_framebuffer_lookup(dev, page_flip->fb_id);
3428         if (!fb)
3429                 goto out;
3430
3431         hdisplay = crtc->mode.hdisplay;
3432         vdisplay = crtc->mode.vdisplay;
3433
3434         if (crtc->invert_dimensions)
3435                 swap(hdisplay, vdisplay);
3436
3437         if (hdisplay > fb->width ||
3438             vdisplay > fb->height ||
3439             crtc->x > fb->width - hdisplay ||
3440             crtc->y > fb->height - vdisplay) {
3441                 DRM_DEBUG_KMS("Invalid fb size %ux%u for CRTC viewport %ux%u+%d+%d%s.\n",
3442                               fb->width, fb->height, hdisplay, vdisplay, crtc->x, crtc->y,
3443                               crtc->invert_dimensions ? " (inverted)" : "");
3444                 ret = -ENOSPC;
3445                 goto out;
3446         }
3447
3448         if (crtc->fb->pixel_format != fb->pixel_format) {
3449                 DRM_DEBUG_KMS("Page flip is not allowed to change frame buffer format.\n");
3450                 ret = -EINVAL;
3451                 goto out;
3452         }
3453
3454         if (page_flip->flags & DRM_MODE_PAGE_FLIP_EVENT) {
3455                 ret = -ENOMEM;
3456                 spin_lock_irqsave(&dev->event_lock, flags);
3457                 if (file_priv->event_space < sizeof e->event) {
3458                         spin_unlock_irqrestore(&dev->event_lock, flags);
3459                         goto out;
3460                 }
3461                 file_priv->event_space -= sizeof e->event;
3462                 spin_unlock_irqrestore(&dev->event_lock, flags);
3463
3464                 e = kzalloc(sizeof *e, GFP_KERNEL);
3465                 if (e == NULL) {
3466                         spin_lock_irqsave(&dev->event_lock, flags);
3467                         file_priv->event_space += sizeof e->event;
3468                         spin_unlock_irqrestore(&dev->event_lock, flags);
3469                         goto out;
3470                 }
3471
3472                 e->event.base.type = DRM_EVENT_FLIP_COMPLETE;
3473                 e->event.base.length = sizeof e->event;
3474                 e->event.user_data = page_flip->user_data;
3475                 e->base.event = &e->event.base;
3476                 e->base.file_priv = file_priv;
3477                 e->base.destroy =
3478                         (void (*) (struct drm_pending_event *)) kfree;
3479         }
3480
3481         old_fb = crtc->fb;
3482         ret = crtc->funcs->page_flip(crtc, fb, e);
3483         if (ret) {
3484                 if (page_flip->flags & DRM_MODE_PAGE_FLIP_EVENT) {
3485                         spin_lock_irqsave(&dev->event_lock, flags);
3486                         file_priv->event_space += sizeof e->event;
3487                         spin_unlock_irqrestore(&dev->event_lock, flags);
3488                         kfree(e);
3489                 }
3490                 /* Keep the old fb, don't unref it. */
3491                 old_fb = NULL;
3492         } else {
3493                 /*
3494                  * Warn if the driver hasn't properly updated the crtc->fb
3495                  * field to reflect that the new framebuffer is now used.
3496                  * Failing to do so will screw with the reference counting
3497                  * on framebuffers.
3498                  */
3499                 WARN_ON(crtc->fb != fb);
3500                 /* Unref only the old framebuffer. */
3501                 fb = NULL;
3502         }
3503
3504 out:
3505         if (fb)
3506                 drm_framebuffer_unreference(fb);
3507         if (old_fb)
3508                 drm_framebuffer_unreference(old_fb);
3509         mutex_unlock(&crtc->mutex);
3510
3511         return ret;
3512 }
3513
3514 void drm_mode_config_reset(struct drm_device *dev)
3515 {
3516         struct drm_crtc *crtc;
3517         struct drm_encoder *encoder;
3518         struct drm_connector *connector;
3519
3520         list_for_each_entry(crtc, &dev->mode_config.crtc_list, head)
3521                 if (crtc->funcs->reset)
3522                         crtc->funcs->reset(crtc);
3523
3524         list_for_each_entry(encoder, &dev->mode_config.encoder_list, head)
3525                 if (encoder->funcs->reset)
3526                         encoder->funcs->reset(encoder);
3527
3528         list_for_each_entry(connector, &dev->mode_config.connector_list, head) {
3529                 connector->status = connector_status_unknown;
3530
3531                 if (connector->funcs->reset)
3532                         connector->funcs->reset(connector);
3533         }
3534 }
3535 EXPORT_SYMBOL(drm_mode_config_reset);
3536
3537 int drm_mode_create_dumb_ioctl(struct drm_device *dev,
3538                                void *data, struct drm_file *file_priv)
3539 {
3540         struct drm_mode_create_dumb *args = data;
3541
3542         if (!dev->driver->dumb_create)
3543                 return -ENOSYS;
3544         return dev->driver->dumb_create(file_priv, dev, args);
3545 }
3546
3547 int drm_mode_mmap_dumb_ioctl(struct drm_device *dev,
3548                              void *data, struct drm_file *file_priv)
3549 {
3550         struct drm_mode_map_dumb *args = data;
3551
3552         /* call driver ioctl to get mmap offset */
3553         if (!dev->driver->dumb_map_offset)
3554                 return -ENOSYS;
3555
3556         return dev->driver->dumb_map_offset(file_priv, dev, args->handle, &args->offset);
3557 }
3558
3559 int drm_mode_destroy_dumb_ioctl(struct drm_device *dev,
3560                                 void *data, struct drm_file *file_priv)
3561 {
3562         struct drm_mode_destroy_dumb *args = data;
3563
3564         if (!dev->driver->dumb_destroy)
3565                 return -ENOSYS;
3566
3567         return dev->driver->dumb_destroy(file_priv, dev, args->handle);
3568 }
3569
3570 /*
3571  * Just need to support RGB formats here for compat with code that doesn't
3572  * use pixel formats directly yet.
3573  */
3574 void drm_fb_get_bpp_depth(uint32_t format, unsigned int *depth,
3575                           int *bpp)
3576 {
3577         switch (format) {
3578         case DRM_FORMAT_C8:
3579         case DRM_FORMAT_RGB332:
3580         case DRM_FORMAT_BGR233:
3581                 *depth = 8;
3582                 *bpp = 8;
3583                 break;
3584         case DRM_FORMAT_XRGB1555:
3585         case DRM_FORMAT_XBGR1555:
3586         case DRM_FORMAT_RGBX5551:
3587         case DRM_FORMAT_BGRX5551:
3588         case DRM_FORMAT_ARGB1555:
3589         case DRM_FORMAT_ABGR1555:
3590         case DRM_FORMAT_RGBA5551:
3591         case DRM_FORMAT_BGRA5551:
3592                 *depth = 15;
3593                 *bpp = 16;
3594                 break;
3595         case DRM_FORMAT_RGB565:
3596         case DRM_FORMAT_BGR565:
3597                 *depth = 16;
3598                 *bpp = 16;
3599                 break;
3600         case DRM_FORMAT_RGB888:
3601         case DRM_FORMAT_BGR888:
3602                 *depth = 24;
3603                 *bpp = 24;
3604                 break;
3605         case DRM_FORMAT_XRGB8888:
3606         case DRM_FORMAT_XBGR8888:
3607         case DRM_FORMAT_RGBX8888:
3608         case DRM_FORMAT_BGRX8888:
3609                 *depth = 24;
3610                 *bpp = 32;
3611                 break;
3612         case DRM_FORMAT_XRGB2101010:
3613         case DRM_FORMAT_XBGR2101010:
3614         case DRM_FORMAT_RGBX1010102:
3615         case DRM_FORMAT_BGRX1010102:
3616         case DRM_FORMAT_ARGB2101010:
3617         case DRM_FORMAT_ABGR2101010:
3618         case DRM_FORMAT_RGBA1010102:
3619         case DRM_FORMAT_BGRA1010102:
3620                 *depth = 30;
3621                 *bpp = 32;
3622                 break;
3623         case DRM_FORMAT_ARGB8888:
3624         case DRM_FORMAT_ABGR8888:
3625         case DRM_FORMAT_RGBA8888:
3626         case DRM_FORMAT_BGRA8888:
3627                 *depth = 32;
3628                 *bpp = 32;
3629                 break;
3630         default:
3631                 DRM_DEBUG_KMS("unsupported pixel format\n");
3632                 *depth = 0;
3633                 *bpp = 0;
3634                 break;
3635         }
3636 }
3637 EXPORT_SYMBOL(drm_fb_get_bpp_depth);
3638
3639 /**
3640  * drm_format_num_planes - get the number of planes for format
3641  * @format: pixel format (DRM_FORMAT_*)
3642  *
3643  * RETURNS:
3644  * The number of planes used by the specified pixel format.
3645  */
3646 int drm_format_num_planes(uint32_t format)
3647 {
3648         switch (format) {
3649         case DRM_FORMAT_YUV410:
3650         case DRM_FORMAT_YVU410:
3651         case DRM_FORMAT_YUV411:
3652         case DRM_FORMAT_YVU411:
3653         case DRM_FORMAT_YUV420:
3654         case DRM_FORMAT_YVU420:
3655         case DRM_FORMAT_YUV422:
3656         case DRM_FORMAT_YVU422:
3657         case DRM_FORMAT_YUV444:
3658         case DRM_FORMAT_YVU444:
3659                 return 3;
3660         case DRM_FORMAT_NV12:
3661         case DRM_FORMAT_NV21:
3662         case DRM_FORMAT_NV16:
3663         case DRM_FORMAT_NV61:
3664         case DRM_FORMAT_NV24:
3665         case DRM_FORMAT_NV42:
3666                 return 2;
3667         default:
3668                 return 1;
3669         }
3670 }
3671 EXPORT_SYMBOL(drm_format_num_planes);
3672
3673 /**
3674  * drm_format_plane_cpp - determine the bytes per pixel value
3675  * @format: pixel format (DRM_FORMAT_*)
3676  * @plane: plane index
3677  *
3678  * RETURNS:
3679  * The bytes per pixel value for the specified plane.
3680  */
3681 int drm_format_plane_cpp(uint32_t format, int plane)
3682 {
3683         unsigned int depth;
3684         int bpp;
3685
3686         if (plane >= drm_format_num_planes(format))
3687                 return 0;
3688
3689         switch (format) {
3690         case DRM_FORMAT_YUYV:
3691         case DRM_FORMAT_YVYU:
3692         case DRM_FORMAT_UYVY:
3693         case DRM_FORMAT_VYUY:
3694                 return 2;
3695         case DRM_FORMAT_NV12:
3696         case DRM_FORMAT_NV21:
3697         case DRM_FORMAT_NV16:
3698         case DRM_FORMAT_NV61:
3699         case DRM_FORMAT_NV24:
3700         case DRM_FORMAT_NV42:
3701                 return plane ? 2 : 1;
3702         case DRM_FORMAT_YUV410:
3703         case DRM_FORMAT_YVU410:
3704         case DRM_FORMAT_YUV411:
3705         case DRM_FORMAT_YVU411:
3706         case DRM_FORMAT_YUV420:
3707         case DRM_FORMAT_YVU420:
3708         case DRM_FORMAT_YUV422:
3709         case DRM_FORMAT_YVU422:
3710         case DRM_FORMAT_YUV444:
3711         case DRM_FORMAT_YVU444:
3712                 return 1;
3713         default:
3714                 drm_fb_get_bpp_depth(format, &depth, &bpp);
3715                 return bpp >> 3;
3716         }
3717 }
3718 EXPORT_SYMBOL(drm_format_plane_cpp);
3719
3720 /**
3721  * drm_format_horz_chroma_subsampling - get the horizontal chroma subsampling factor
3722  * @format: pixel format (DRM_FORMAT_*)
3723  *
3724  * RETURNS:
3725  * The horizontal chroma subsampling factor for the
3726  * specified pixel format.
3727  */
3728 int drm_format_horz_chroma_subsampling(uint32_t format)
3729 {
3730         switch (format) {
3731         case DRM_FORMAT_YUV411:
3732         case DRM_FORMAT_YVU411:
3733         case DRM_FORMAT_YUV410:
3734         case DRM_FORMAT_YVU410:
3735                 return 4;
3736         case DRM_FORMAT_YUYV:
3737         case DRM_FORMAT_YVYU:
3738         case DRM_FORMAT_UYVY:
3739         case DRM_FORMAT_VYUY:
3740         case DRM_FORMAT_NV12:
3741         case DRM_FORMAT_NV21:
3742         case DRM_FORMAT_NV16:
3743         case DRM_FORMAT_NV61:
3744         case DRM_FORMAT_YUV422:
3745         case DRM_FORMAT_YVU422:
3746         case DRM_FORMAT_YUV420:
3747         case DRM_FORMAT_YVU420:
3748                 return 2;
3749         default:
3750                 return 1;
3751         }
3752 }
3753 EXPORT_SYMBOL(drm_format_horz_chroma_subsampling);
3754
3755 /**
3756  * drm_format_vert_chroma_subsampling - get the vertical chroma subsampling factor
3757  * @format: pixel format (DRM_FORMAT_*)
3758  *
3759  * RETURNS:
3760  * The vertical chroma subsampling factor for the
3761  * specified pixel format.
3762  */
3763 int drm_format_vert_chroma_subsampling(uint32_t format)
3764 {
3765         switch (format) {
3766         case DRM_FORMAT_YUV410:
3767         case DRM_FORMAT_YVU410:
3768                 return 4;
3769         case DRM_FORMAT_YUV420:
3770         case DRM_FORMAT_YVU420:
3771         case DRM_FORMAT_NV12:
3772         case DRM_FORMAT_NV21:
3773                 return 2;
3774         default:
3775                 return 1;
3776         }
3777 }
3778 EXPORT_SYMBOL(drm_format_vert_chroma_subsampling);
3779
3780 /**
3781  * drm_mode_config_init - initialize DRM mode_configuration structure
3782  * @dev: DRM device
3783  *
3784  * Initialize @dev's mode_config structure, used for tracking the graphics
3785  * configuration of @dev.
3786  *
3787  * Since this initializes the modeset locks, no locking is possible. Which is no
3788  * problem, since this should happen single threaded at init time. It is the
3789  * driver's problem to ensure this guarantee.
3790  *
3791  */
3792 void drm_mode_config_init(struct drm_device *dev)
3793 {
3794         mutex_init(&dev->mode_config.mutex);
3795         mutex_init(&dev->mode_config.idr_mutex);
3796         mutex_init(&dev->mode_config.fb_lock);
3797         INIT_LIST_HEAD(&dev->mode_config.fb_list);
3798         INIT_LIST_HEAD(&dev->mode_config.crtc_list);
3799         INIT_LIST_HEAD(&dev->mode_config.connector_list);
3800         INIT_LIST_HEAD(&dev->mode_config.encoder_list);
3801         INIT_LIST_HEAD(&dev->mode_config.property_list);
3802         INIT_LIST_HEAD(&dev->mode_config.property_blob_list);
3803         INIT_LIST_HEAD(&dev->mode_config.plane_list);
3804         idr_init(&dev->mode_config.crtc_idr);
3805
3806         drm_modeset_lock_all(dev);
3807         drm_mode_create_standard_connector_properties(dev);
3808         drm_modeset_unlock_all(dev);
3809
3810         /* Just to be sure */
3811         dev->mode_config.num_fb = 0;
3812         dev->mode_config.num_connector = 0;
3813         dev->mode_config.num_crtc = 0;
3814         dev->mode_config.num_encoder = 0;
3815 }
3816 EXPORT_SYMBOL(drm_mode_config_init);
3817
3818 /**
3819  * drm_mode_config_cleanup - free up DRM mode_config info
3820  * @dev: DRM device
3821  *
3822  * Free up all the connectors and CRTCs associated with this DRM device, then
3823  * free up the framebuffers and associated buffer objects.
3824  *
3825  * Note that since this /should/ happen single-threaded at driver/device
3826  * teardown time, no locking is required. It's the driver's job to ensure that
3827  * this guarantee actually holds true.
3828  *
3829  * FIXME: cleanup any dangling user buffer objects too
3830  */
3831 void drm_mode_config_cleanup(struct drm_device *dev)
3832 {
3833         struct drm_connector *connector, *ot;
3834         struct drm_crtc *crtc, *ct;
3835         struct drm_encoder *encoder, *enct;
3836         struct drm_framebuffer *fb, *fbt;
3837         struct drm_property *property, *pt;
3838         struct drm_property_blob *blob, *bt;
3839         struct drm_plane *plane, *plt;
3840
3841         list_for_each_entry_safe(encoder, enct, &dev->mode_config.encoder_list,
3842                                  head) {
3843                 encoder->funcs->destroy(encoder);
3844         }
3845
3846         list_for_each_entry_safe(connector, ot,
3847                                  &dev->mode_config.connector_list, head) {
3848                 connector->funcs->destroy(connector);
3849         }
3850
3851         list_for_each_entry_safe(property, pt, &dev->mode_config.property_list,
3852                                  head) {
3853                 drm_property_destroy(dev, property);
3854         }
3855
3856         list_for_each_entry_safe(blob, bt, &dev->mode_config.property_blob_list,
3857                                  head) {
3858                 drm_property_destroy_blob(dev, blob);
3859         }
3860
3861         /*
3862          * Single-threaded teardown context, so it's not required to grab the
3863          * fb_lock to protect against concurrent fb_list access. Contrary, it
3864          * would actually deadlock with the drm_framebuffer_cleanup function.
3865          *
3866          * Also, if there are any framebuffers left, that's a driver leak now,
3867          * so politely WARN about this.
3868          */
3869         WARN_ON(!list_empty(&dev->mode_config.fb_list));
3870         list_for_each_entry_safe(fb, fbt, &dev->mode_config.fb_list, head) {
3871                 drm_framebuffer_remove(fb);
3872         }
3873
3874         list_for_each_entry_safe(plane, plt, &dev->mode_config.plane_list,
3875                                  head) {
3876                 plane->funcs->destroy(plane);
3877         }
3878
3879         list_for_each_entry_safe(crtc, ct, &dev->mode_config.crtc_list, head) {
3880                 crtc->funcs->destroy(crtc);
3881         }
3882
3883         idr_destroy(&dev->mode_config.crtc_idr);
3884 }
3885 EXPORT_SYMBOL(drm_mode_config_cleanup);