1	/*
2	* Copyright (C) 2014 Red Hat
3	* Copyright (C) 2014 Intel Corp.
4	* Copyright (C) 2018 Intel Corp.
5	* Copyright (c) 2020, The Linux Foundation. All rights reserved.
6	*
7	* Permission is hereby granted, free of charge, to any person obtaining a
8	* copy of this software and associated documentation files (the "Software"),
9	* to deal in the Software without restriction, including without limitation
10	* the rights to use, copy, modify, merge, publish, distribute, sublicense,
11	* and/or sell copies of the Software, and to permit persons to whom the
12	* Software is furnished to do so, subject to the following conditions:
13	*
14	* The above copyright notice and this permission notice shall be included in
15	* all copies or substantial portions of the Software.
16	*
17	* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
18	* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
19	* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
20	* THE COPYRIGHT HOLDER(S) OR AUTHOR(S) BE LIABLE FOR ANY CLAIM, DAMAGES OR
21	* OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
22	* ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
23	* OTHER DEALINGS IN THE SOFTWARE.
24	*
25	* Authors:
26	* Rob Clark <robdclark@gmail.com>
27	* Daniel Vetter <daniel.vetter@ffwll.ch>
28	*/
29
30	#include <drm/drm_atomic_uapi.h>
31	#include <drm/drm_atomic.h>
32	#include <drm/drm_framebuffer.h>
33	#include <drm/drm_print.h>
34	#include <drm/drm_drv.h>
35	#include <drm/drm_writeback.h>
36	#include <drm/drm_vblank.h>
37
38	#include <linux/dma-fence.h>
39	#include <linux/uaccess.h>
40	#include <linux/sync_file.h>
41	#include <linux/file.h>
42
43	#include "drm_crtc_internal.h"
44
45	/**
46	* DOC: overview
47	*
48	* This file contains the marshalling and demarshalling glue for the atomic UAPI
49	* in all its forms: The monster ATOMIC IOCTL itself, code for GET_PROPERTY and
50	* SET_PROPERTY IOCTLs. Plus interface functions for compatibility helpers and
51	* drivers which have special needs to construct their own atomic updates, e.g.
52	* for load detect or similar.
53	*/
54
55	/**
56	* drm_atomic_set_mode_for_crtc - set mode for CRTC
57	* @state: the CRTC whose incoming state to update
58	* @mode: kernel-internal mode to use for the CRTC, or NULL to disable
59	*
60	* Set a mode (originating from the kernel) on the desired CRTC state and update
61	* the enable property.
62	*
63	* RETURNS:
64	* Zero on success, error code on failure. Cannot return -EDEADLK.
65	*/
66	int drm_atomic_set_mode_for_crtc(struct drm_crtc_state *state,
67	const struct drm_display_mode *mode)
68	{
69	struct drm_crtc *crtc = state->crtc;
70	struct drm_mode_modeinfo umode;
71
72	/* Early return for no change. */
73	if (mode && memcmp(p: &state->mode, q: mode, size: sizeof(*mode)) == 0)
74	return 0;
75
76	drm_property_blob_put(blob: state->mode_blob);
77	state->mode_blob = NULL;
78
79	if (mode) {
80	struct drm_property_blob *blob;
81
82	drm_mode_convert_to_umode(out: &umode, in: mode);
83	blob = drm_property_create_blob(dev: crtc->dev,
84	length: sizeof(umode), data: &umode);
85	if (IS_ERR(ptr: blob))
86	return PTR_ERR(ptr: blob);
87
88	drm_mode_copy(dst: &state->mode, src: mode);
89
90	state->mode_blob = blob;
91	state->enable = true;
92	drm_dbg_atomic(crtc->dev,
93	"Set [MODE:%s] for [CRTC:%d:%s] state %p\n",
94	mode->name, crtc->base.id, crtc->name, state);
95	} else {
96	memset(&state->mode, 0, sizeof(state->mode));
97	state->enable = false;
98	drm_dbg_atomic(crtc->dev,
99	"Set [NOMODE] for [CRTC:%d:%s] state %p\n",
100	crtc->base.id, crtc->name, state);
101	}
102
103	return 0;
104	}
105	EXPORT_SYMBOL(drm_atomic_set_mode_for_crtc);
106
107	/**
108	* drm_atomic_set_mode_prop_for_crtc - set mode for CRTC
109	* @state: the CRTC whose incoming state to update
110	* @blob: pointer to blob property to use for mode
111	*
112	* Set a mode (originating from a blob property) on the desired CRTC state.
113	* This function will take a reference on the blob property for the CRTC state,
114	* and release the reference held on the state's existing mode property, if any
115	* was set.
116	*
117	* RETURNS:
118	* Zero on success, error code on failure. Cannot return -EDEADLK.
119	*/
120	int drm_atomic_set_mode_prop_for_crtc(struct drm_crtc_state *state,
121	struct drm_property_blob *blob)
122	{
123	struct drm_crtc *crtc = state->crtc;
124
125	if (blob == state->mode_blob)
126	return 0;
127
128	drm_property_blob_put(blob: state->mode_blob);
129	state->mode_blob = NULL;
130
131	memset(&state->mode, 0, sizeof(state->mode));
132
133	if (blob) {
134	int ret;
135
136	if (blob->length != sizeof(struct drm_mode_modeinfo)) {
137	drm_dbg_atomic(crtc->dev,
138	"[CRTC:%d:%s] bad mode blob length: %zu\n",
139	crtc->base.id, crtc->name,
140	blob->length);
141	return -EINVAL;
142	}
143
144	ret = drm_mode_convert_umode(dev: crtc->dev,
145	out: &state->mode, in: blob->data);
146	if (ret) {
147	drm_dbg_atomic(crtc->dev,
148	"[CRTC:%d:%s] invalid mode (ret=%d, status=%s):\n",
149	crtc->base.id, crtc->name,
150	ret, drm_get_mode_status_name(state->mode.status));
151	drm_mode_debug_printmodeline(mode: &state->mode);
152	return -EINVAL;
153	}
154
155	state->mode_blob = drm_property_blob_get(blob);
156	state->enable = true;
157	drm_dbg_atomic(crtc->dev,
158	"Set [MODE:%s] for [CRTC:%d:%s] state %p\n",
159	state->mode.name, crtc->base.id, crtc->name,
160	state);
161	} else {
162	state->enable = false;
163	drm_dbg_atomic(crtc->dev,
164	"Set [NOMODE] for [CRTC:%d:%s] state %p\n",
165	crtc->base.id, crtc->name, state);
166	}
167
168	return 0;
169	}
170	EXPORT_SYMBOL(drm_atomic_set_mode_prop_for_crtc);
171
172	/**
173	* drm_atomic_set_crtc_for_plane - set CRTC for plane
174	* @plane_state: the plane whose incoming state to update
175	* @crtc: CRTC to use for the plane
176	*
177	* Changing the assigned CRTC for a plane requires us to grab the lock and state
178	* for the new CRTC, as needed. This function takes care of all these details
179	* besides updating the pointer in the state object itself.
180	*
181	* Returns:
182	* 0 on success or can fail with -EDEADLK or -ENOMEM. When the error is EDEADLK
183	* then the w/w mutex code has detected a deadlock and the entire atomic
184	* sequence must be restarted. All other errors are fatal.
185	*/
186	int
187	drm_atomic_set_crtc_for_plane(struct drm_plane_state *plane_state,
188	struct drm_crtc *crtc)
189	{
190	struct drm_plane *plane = plane_state->plane;
191	struct drm_crtc_state *crtc_state;
192	/* Nothing to do for same crtc*/
193	if (plane_state->crtc == crtc)
194	return 0;
195	if (plane_state->crtc) {
196	crtc_state = drm_atomic_get_crtc_state(state: plane_state->state,
197	crtc: plane_state->crtc);
198	if (WARN_ON(IS_ERR(crtc_state)))
199	return PTR_ERR(ptr: crtc_state);
200
201	crtc_state->plane_mask &= ~drm_plane_mask(plane);
202	}
203
204	plane_state->crtc = crtc;
205
206	if (crtc) {
207	crtc_state = drm_atomic_get_crtc_state(state: plane_state->state,
208	crtc);
209	if (IS_ERR(ptr: crtc_state))
210	return PTR_ERR(ptr: crtc_state);
211	crtc_state->plane_mask |= drm_plane_mask(plane);
212	}
213
214	if (crtc)
215	drm_dbg_atomic(plane->dev,
216	"Link [PLANE:%d:%s] state %p to [CRTC:%d:%s]\n",
217	plane->base.id, plane->name, plane_state,
218	crtc->base.id, crtc->name);
219	else
220	drm_dbg_atomic(plane->dev,
221	"Link [PLANE:%d:%s] state %p to [NOCRTC]\n",
222	plane->base.id, plane->name, plane_state);
223
224	return 0;
225	}
226	EXPORT_SYMBOL(drm_atomic_set_crtc_for_plane);
227
228	/**
229	* drm_atomic_set_fb_for_plane - set framebuffer for plane
230	* @plane_state: atomic state object for the plane
231	* @fb: fb to use for the plane
232	*
233	* Changing the assigned framebuffer for a plane requires us to grab a reference
234	* to the new fb and drop the reference to the old fb, if there is one. This
235	* function takes care of all these details besides updating the pointer in the
236	* state object itself.
237	*/
238	void
239	drm_atomic_set_fb_for_plane(struct drm_plane_state *plane_state,
240	struct drm_framebuffer *fb)
241	{
242	struct drm_plane *plane = plane_state->plane;
243
244	if (fb)
245	drm_dbg_atomic(plane->dev,
246	"Set [FB:%d] for [PLANE:%d:%s] state %p\n",
247	fb->base.id, plane->base.id, plane->name,
248	plane_state);
249	else
250	drm_dbg_atomic(plane->dev,
251	"Set [NOFB] for [PLANE:%d:%s] state %p\n",
252	plane->base.id, plane->name, plane_state);
253
254	drm_framebuffer_assign(p: &plane_state->fb, fb);
255	}
256	EXPORT_SYMBOL(drm_atomic_set_fb_for_plane);
257
258	/**
259	* drm_atomic_set_crtc_for_connector - set CRTC for connector
260	* @conn_state: atomic state object for the connector
261	* @crtc: CRTC to use for the connector
262	*
263	* Changing the assigned CRTC for a connector requires us to grab the lock and
264	* state for the new CRTC, as needed. This function takes care of all these
265	* details besides updating the pointer in the state object itself.
266	*
267	* Returns:
268	* 0 on success or can fail with -EDEADLK or -ENOMEM. When the error is EDEADLK
269	* then the w/w mutex code has detected a deadlock and the entire atomic
270	* sequence must be restarted. All other errors are fatal.
271	*/
272	int
273	drm_atomic_set_crtc_for_connector(struct drm_connector_state *conn_state,
274	struct drm_crtc *crtc)
275	{
276	struct drm_connector *connector = conn_state->connector;
277	struct drm_crtc_state *crtc_state;
278
279	if (conn_state->crtc == crtc)
280	return 0;
281
282	if (conn_state->crtc) {
283	crtc_state = drm_atomic_get_new_crtc_state(state: conn_state->state,
284	crtc: conn_state->crtc);
285
286	crtc_state->connector_mask &=
287	~drm_connector_mask(connector: conn_state->connector);
288
289	drm_connector_put(connector: conn_state->connector);
290	conn_state->crtc = NULL;
291	}
292
293	if (crtc) {
294	crtc_state = drm_atomic_get_crtc_state(state: conn_state->state, crtc);
295	if (IS_ERR(ptr: crtc_state))
296	return PTR_ERR(ptr: crtc_state);
297
298	crtc_state->connector_mask |=
299	drm_connector_mask(connector: conn_state->connector);
300
301	drm_connector_get(connector: conn_state->connector);
302	conn_state->crtc = crtc;
303
304	drm_dbg_atomic(connector->dev,
305	"Link [CONNECTOR:%d:%s] state %p to [CRTC:%d:%s]\n",
306	connector->base.id, connector->name,
307	conn_state, crtc->base.id, crtc->name);
308	} else {
309	drm_dbg_atomic(connector->dev,
310	"Link [CONNECTOR:%d:%s] state %p to [NOCRTC]\n",
311	connector->base.id, connector->name,
312	conn_state);
313	}
314
315	return 0;
316	}
317	EXPORT_SYMBOL(drm_atomic_set_crtc_for_connector);
318
319	static void set_out_fence_for_crtc(struct drm_atomic_state *state,
320	struct drm_crtc *crtc, s32 __user *fence_ptr)
321	{
322	state->crtcs[drm_crtc_index(crtc)].out_fence_ptr = fence_ptr;
323	}
324
325	static s32 __user *get_out_fence_for_crtc(struct drm_atomic_state *state,
326	struct drm_crtc *crtc)
327	{
328	s32 __user *fence_ptr;
329
330	fence_ptr = state->crtcs[drm_crtc_index(crtc)].out_fence_ptr;
331	state->crtcs[drm_crtc_index(crtc)].out_fence_ptr = NULL;
332
333	return fence_ptr;
334	}
335
336	static int set_out_fence_for_connector(struct drm_atomic_state *state,
337	struct drm_connector *connector,
338	s32 __user *fence_ptr)
339	{
340	unsigned int index = drm_connector_index(connector);
341
342	if (!fence_ptr)
343	return 0;
344
345	if (put_user(-1, fence_ptr))
346	return -EFAULT;
347
348	state->connectors[index].out_fence_ptr = fence_ptr;
349
350	return 0;
351	}
352
353	static s32 __user *get_out_fence_for_connector(struct drm_atomic_state *state,
354	struct drm_connector *connector)
355	{
356	unsigned int index = drm_connector_index(connector);
357	s32 __user *fence_ptr;
358
359	fence_ptr = state->connectors[index].out_fence_ptr;
360	state->connectors[index].out_fence_ptr = NULL;
361
362	return fence_ptr;
363	}
364
365	static int
366	drm_atomic_replace_property_blob_from_id(struct drm_device *dev,
367	struct drm_property_blob **blob,
368	uint64_t blob_id,
369	ssize_t expected_size,
370	ssize_t expected_elem_size,
371	bool *replaced)
372	{
373	struct drm_property_blob *new_blob = NULL;
374
375	if (blob_id != 0) {
376	new_blob = drm_property_lookup_blob(dev, id: blob_id);
377	if (new_blob == NULL) {
378	drm_dbg_atomic(dev,
379	"cannot find blob ID %llu\n", blob_id);
380	return -EINVAL;
381	}
382
383	if (expected_size > 0 &&
384	new_blob->length != expected_size) {
385	drm_dbg_atomic(dev,
386	"[BLOB:%d] length %zu different from expected %zu\n",
387	new_blob->base.id, new_blob->length, expected_size);
388	drm_property_blob_put(blob: new_blob);
389	return -EINVAL;
390	}
391	if (expected_elem_size > 0 &&
392	new_blob->length % expected_elem_size != 0) {
393	drm_dbg_atomic(dev,
394	"[BLOB:%d] length %zu not divisible by element size %zu\n",
395	new_blob->base.id, new_blob->length, expected_elem_size);
396	drm_property_blob_put(blob: new_blob);
397	return -EINVAL;
398	}
399	}
400
401	*replaced |= drm_property_replace_blob(blob, new_blob);
402	drm_property_blob_put(blob: new_blob);
403
404	return 0;
405	}
406
407	static int drm_atomic_crtc_set_property(struct drm_crtc *crtc,
408	struct drm_crtc_state *state, struct drm_property *property,
409	uint64_t val)
410	{
411	struct drm_device *dev = crtc->dev;
412	struct drm_mode_config *config = &dev->mode_config;
413	bool replaced = false;
414	int ret;
415
416	if (property == config->prop_active)
417	state->active = val;
418	else if (property == config->prop_mode_id) {
419	struct drm_property_blob *mode =
420	drm_property_lookup_blob(dev, id: val);
421	ret = drm_atomic_set_mode_prop_for_crtc(state, mode);
422	drm_property_blob_put(blob: mode);
423	return ret;
424	} else if (property == config->prop_vrr_enabled) {
425	state->vrr_enabled = val;
426	} else if (property == config->degamma_lut_property) {
427	ret = drm_atomic_replace_property_blob_from_id(dev,
428	blob: &state->degamma_lut,
429	blob_id: val,
430	expected_size: -1, expected_elem_size: sizeof(struct drm_color_lut),
431	replaced: &replaced);
432	state->color_mgmt_changed |= replaced;
433	return ret;
434	} else if (property == config->ctm_property) {
435	ret = drm_atomic_replace_property_blob_from_id(dev,
436	blob: &state->ctm,
437	blob_id: val,
438	expected_size: sizeof(struct drm_color_ctm), expected_elem_size: -1,
439	replaced: &replaced);
440	state->color_mgmt_changed |= replaced;
441	return ret;
442	} else if (property == config->gamma_lut_property) {
443	ret = drm_atomic_replace_property_blob_from_id(dev,
444	blob: &state->gamma_lut,
445	blob_id: val,
446	expected_size: -1, expected_elem_size: sizeof(struct drm_color_lut),
447	replaced: &replaced);
448	state->color_mgmt_changed |= replaced;
449	return ret;
450	} else if (property == config->prop_out_fence_ptr) {
451	s32 __user *fence_ptr = u64_to_user_ptr(val);
452
453	if (!fence_ptr)
454	return 0;
455
456	if (put_user(-1, fence_ptr))
457	return -EFAULT;
458
459	set_out_fence_for_crtc(state: state->state, crtc, fence_ptr);
460	} else if (property == crtc->scaling_filter_property) {
461	state->scaling_filter = val;
462	} else if (crtc->funcs->atomic_set_property) {
463	return crtc->funcs->atomic_set_property(crtc, state, property, val);
464	} else {
465	drm_dbg_atomic(crtc->dev,
466	"[CRTC:%d:%s] unknown property [PROP:%d:%s]\n",
467	crtc->base.id, crtc->name,
468	property->base.id, property->name);
469	return -EINVAL;
470	}
471
472	return 0;
473	}
474
475	static int
476	drm_atomic_crtc_get_property(struct drm_crtc *crtc,
477	const struct drm_crtc_state *state,
478	struct drm_property *property, uint64_t *val)
479	{
480	struct drm_device *dev = crtc->dev;
481	struct drm_mode_config *config = &dev->mode_config;
482
483	if (property == config->prop_active)
484	*val = drm_atomic_crtc_effectively_active(state);
485	else if (property == config->prop_mode_id)
486	*val = (state->mode_blob) ? state->mode_blob->base.id : 0;
487	else if (property == config->prop_vrr_enabled)
488	*val = state->vrr_enabled;
489	else if (property == config->degamma_lut_property)
490	*val = (state->degamma_lut) ? state->degamma_lut->base.id : 0;
491	else if (property == config->ctm_property)
492	*val = (state->ctm) ? state->ctm->base.id : 0;
493	else if (property == config->gamma_lut_property)
494	*val = (state->gamma_lut) ? state->gamma_lut->base.id : 0;
495	else if (property == config->prop_out_fence_ptr)
496	*val = 0;
497	else if (property == crtc->scaling_filter_property)
498	*val = state->scaling_filter;
499	else if (crtc->funcs->atomic_get_property)
500	return crtc->funcs->atomic_get_property(crtc, state, property, val);
501	else {
502	drm_dbg_atomic(dev,
503	"[CRTC:%d:%s] unknown property [PROP:%d:%s]\n",
504	crtc->base.id, crtc->name,
505	property->base.id, property->name);
506	return -EINVAL;
507	}
508
509	return 0;
510	}
511
512	static int drm_atomic_plane_set_property(struct drm_plane *plane,
513	struct drm_plane_state *state, struct drm_file *file_priv,
514	struct drm_property *property, uint64_t val)
515	{
516	struct drm_device *dev = plane->dev;
517	struct drm_mode_config *config = &dev->mode_config;
518	bool replaced = false;
519	int ret;
520
521	if (property == config->prop_fb_id) {
522	struct drm_framebuffer *fb;
523
524	fb = drm_framebuffer_lookup(dev, file_priv, id: val);
525	drm_atomic_set_fb_for_plane(state, fb);
526	if (fb)
527	drm_framebuffer_put(fb);
528	} else if (property == config->prop_in_fence_fd) {
529	if (state->fence)
530	return -EINVAL;
531
532	if (U642I64(val) == -1)
533	return 0;
534
535	state->fence = sync_file_get_fence(fd: val);
536	if (!state->fence)
537	return -EINVAL;
538
539	} else if (property == config->prop_crtc_id) {
540	struct drm_crtc *crtc = drm_crtc_find(dev, file_priv, id: val);
541
542	if (val && !crtc) {
543	drm_dbg_atomic(dev,
544	"[PROP:%d:%s] cannot find CRTC with ID %llu\n",
545	property->base.id, property->name, val);
546	return -EACCES;
547	}
548	return drm_atomic_set_crtc_for_plane(state, crtc);
549	} else if (property == config->prop_crtc_x) {
550	state->crtc_x = U642I64(val);
551	} else if (property == config->prop_crtc_y) {
552	state->crtc_y = U642I64(val);
553	} else if (property == config->prop_crtc_w) {
554	state->crtc_w = val;
555	} else if (property == config->prop_crtc_h) {
556	state->crtc_h = val;
557	} else if (property == config->prop_src_x) {
558	state->src_x = val;
559	} else if (property == config->prop_src_y) {
560	state->src_y = val;
561	} else if (property == config->prop_src_w) {
562	state->src_w = val;
563	} else if (property == config->prop_src_h) {
564	state->src_h = val;
565	} else if (property == plane->alpha_property) {
566	state->alpha = val;
567	} else if (property == plane->blend_mode_property) {
568	state->pixel_blend_mode = val;
569	} else if (property == plane->rotation_property) {
570	if (!is_power_of_2(n: val & DRM_MODE_ROTATE_MASK)) {
571	drm_dbg_atomic(plane->dev,
572	"[PLANE:%d:%s] bad rotation bitmask: 0x%llx\n",
573	plane->base.id, plane->name, val);
574	return -EINVAL;
575	}
576	state->rotation = val;
577	} else if (property == plane->zpos_property) {
578	state->zpos = val;
579	} else if (property == plane->color_encoding_property) {
580	state->color_encoding = val;
581	} else if (property == plane->color_range_property) {
582	state->color_range = val;
583	} else if (property == config->prop_fb_damage_clips) {
584	ret = drm_atomic_replace_property_blob_from_id(dev,
585	blob: &state->fb_damage_clips,
586	blob_id: val,
587	expected_size: -1,
588	expected_elem_size: sizeof(struct drm_rect),
589	replaced: &replaced);
590	return ret;
591	} else if (property == plane->scaling_filter_property) {
592	state->scaling_filter = val;
593	} else if (plane->funcs->atomic_set_property) {
594	return plane->funcs->atomic_set_property(plane, state,
595	property, val);
596	} else {
597	drm_dbg_atomic(plane->dev,
598	"[PLANE:%d:%s] unknown property [PROP:%d:%s]\n",
599	plane->base.id, plane->name,
600	property->base.id, property->name);
601	return -EINVAL;
602	}
603
604	return 0;
605	}
606
607	static int
608	drm_atomic_plane_get_property(struct drm_plane *plane,
609	const struct drm_plane_state *state,
610	struct drm_property *property, uint64_t *val)
611	{
612	struct drm_device *dev = plane->dev;
613	struct drm_mode_config *config = &dev->mode_config;
614
615	if (property == config->prop_fb_id) {
616	*val = (state->fb) ? state->fb->base.id : 0;
617	} else if (property == config->prop_in_fence_fd) {
618	*val = -1;
619	} else if (property == config->prop_crtc_id) {
620	*val = (state->crtc) ? state->crtc->base.id : 0;
621	} else if (property == config->prop_crtc_x) {
622	*val = I642U64(val: state->crtc_x);
623	} else if (property == config->prop_crtc_y) {
624	*val = I642U64(val: state->crtc_y);
625	} else if (property == config->prop_crtc_w) {
626	*val = state->crtc_w;
627	} else if (property == config->prop_crtc_h) {
628	*val = state->crtc_h;
629	} else if (property == config->prop_src_x) {
630	*val = state->src_x;
631	} else if (property == config->prop_src_y) {
632	*val = state->src_y;
633	} else if (property == config->prop_src_w) {
634	*val = state->src_w;
635	} else if (property == config->prop_src_h) {
636	*val = state->src_h;
637	} else if (property == plane->alpha_property) {
638	*val = state->alpha;
639	} else if (property == plane->blend_mode_property) {
640	*val = state->pixel_blend_mode;
641	} else if (property == plane->rotation_property) {
642	*val = state->rotation;
643	} else if (property == plane->zpos_property) {
644	*val = state->zpos;
645	} else if (property == plane->color_encoding_property) {
646	*val = state->color_encoding;
647	} else if (property == plane->color_range_property) {
648	*val = state->color_range;
649	} else if (property == config->prop_fb_damage_clips) {
650	*val = (state->fb_damage_clips) ?
651	state->fb_damage_clips->base.id : 0;
652	} else if (property == plane->scaling_filter_property) {
653	*val = state->scaling_filter;
654	} else if (plane->funcs->atomic_get_property) {
655	return plane->funcs->atomic_get_property(plane, state, property, val);
656	} else {
657	drm_dbg_atomic(dev,
658	"[PLANE:%d:%s] unknown property [PROP:%d:%s]\n",
659	plane->base.id, plane->name,
660	property->base.id, property->name);
661	return -EINVAL;
662	}
663
664	return 0;
665	}
666
667	static int drm_atomic_set_writeback_fb_for_connector(
668	struct drm_connector_state *conn_state,
669	struct drm_framebuffer *fb)
670	{
671	int ret;
672	struct drm_connector *conn = conn_state->connector;
673
674	ret = drm_writeback_set_fb(conn_state, fb);
675	if (ret < 0)
676	return ret;
677
678	if (fb)
679	drm_dbg_atomic(conn->dev,
680	"Set [FB:%d] for connector state %p\n",
681	fb->base.id, conn_state);
682	else
683	drm_dbg_atomic(conn->dev,
684	"Set [NOFB] for connector state %p\n",
685	conn_state);
686
687	return 0;
688	}
689
690	static int drm_atomic_connector_set_property(struct drm_connector *connector,
691	struct drm_connector_state *state, struct drm_file *file_priv,
692	struct drm_property *property, uint64_t val)
693	{
694	struct drm_device *dev = connector->dev;
695	struct drm_mode_config *config = &dev->mode_config;
696	bool replaced = false;
697	int ret;
698
699	if (property == config->prop_crtc_id) {
700	struct drm_crtc *crtc = drm_crtc_find(dev, file_priv, id: val);
701
702	if (val && !crtc) {
703	drm_dbg_atomic(dev,
704	"[PROP:%d:%s] cannot find CRTC with ID %llu\n",
705	property->base.id, property->name, val);
706	return -EACCES;
707	}
708	return drm_atomic_set_crtc_for_connector(state, crtc);
709	} else if (property == config->dpms_property) {
710	/* setting DPMS property requires special handling, which
711	* is done in legacy setprop path for us. Disallow (for
712	* now?) atomic writes to DPMS property:
713	*/
714	drm_dbg_atomic(dev,
715	"legacy [PROP:%d:%s] can only be set via legacy uAPI\n",
716	property->base.id, property->name);
717	return -EINVAL;
718	} else if (property == config->tv_select_subconnector_property) {
719	state->tv.select_subconnector = val;
720	} else if (property == config->tv_subconnector_property) {
721	state->tv.subconnector = val;
722	} else if (property == config->tv_left_margin_property) {
723	state->tv.margins.left = val;
724	} else if (property == config->tv_right_margin_property) {
725	state->tv.margins.right = val;
726	} else if (property == config->tv_top_margin_property) {
727	state->tv.margins.top = val;
728	} else if (property == config->tv_bottom_margin_property) {
729	state->tv.margins.bottom = val;
730	} else if (property == config->legacy_tv_mode_property) {
731	state->tv.legacy_mode = val;
732	} else if (property == config->tv_mode_property) {
733	state->tv.mode = val;
734	} else if (property == config->tv_brightness_property) {
735	state->tv.brightness = val;
736	} else if (property == config->tv_contrast_property) {
737	state->tv.contrast = val;
738	} else if (property == config->tv_flicker_reduction_property) {
739	state->tv.flicker_reduction = val;
740	} else if (property == config->tv_overscan_property) {
741	state->tv.overscan = val;
742	} else if (property == config->tv_saturation_property) {
743	state->tv.saturation = val;
744	} else if (property == config->tv_hue_property) {
745	state->tv.hue = val;
746	} else if (property == config->link_status_property) {
747	/* Never downgrade from GOOD to BAD on userspace's request here,
748	* only hw issues can do that.
749	*
750	* For an atomic property the userspace doesn't need to be able
751	* to understand all the properties, but needs to be able to
752	* restore the state it wants on VT switch. So if the userspace
753	* tries to change the link_status from GOOD to BAD, driver
754	* silently rejects it and returns a 0. This prevents userspace
755	* from accidentally breaking the display when it restores the
756	* state.
757	*/
758	if (state->link_status != DRM_LINK_STATUS_GOOD)
759	state->link_status = val;
760	} else if (property == config->hdr_output_metadata_property) {
761	ret = drm_atomic_replace_property_blob_from_id(dev,
762	blob: &state->hdr_output_metadata,
763	blob_id: val,
764	expected_size: sizeof(struct hdr_output_metadata), expected_elem_size: -1,
765	replaced: &replaced);
766	return ret;
767	} else if (property == config->aspect_ratio_property) {
768	state->picture_aspect_ratio = val;
769	} else if (property == config->content_type_property) {
770	state->content_type = val;
771	} else if (property == connector->scaling_mode_property) {
772	state->scaling_mode = val;
773	} else if (property == config->content_protection_property) {
774	if (val == DRM_MODE_CONTENT_PROTECTION_ENABLED) {
775	drm_dbg_kms(dev, "only drivers can set CP Enabled\n");
776	return -EINVAL;
777	}
778	state->content_protection = val;
779	} else if (property == config->hdcp_content_type_property) {
780	state->hdcp_content_type = val;
781	} else if (property == connector->colorspace_property) {
782	state->colorspace = val;
783	} else if (property == config->writeback_fb_id_property) {
784	struct drm_framebuffer *fb;
785	int ret;
786
787	fb = drm_framebuffer_lookup(dev, file_priv, id: val);
788	ret = drm_atomic_set_writeback_fb_for_connector(conn_state: state, fb);
789	if (fb)
790	drm_framebuffer_put(fb);
791	return ret;
792	} else if (property == config->writeback_out_fence_ptr_property) {
793	s32 __user *fence_ptr = u64_to_user_ptr(val);
794
795	return set_out_fence_for_connector(state: state->state, connector,
796	fence_ptr);
797	} else if (property == connector->max_bpc_property) {
798	state->max_requested_bpc = val;
799	} else if (property == connector->privacy_screen_sw_state_property) {
800	state->privacy_screen_sw_state = val;
801	} else if (connector->funcs->atomic_set_property) {
802	return connector->funcs->atomic_set_property(connector,
803	state, property, val);
804	} else {
805	drm_dbg_atomic(connector->dev,
806	"[CONNECTOR:%d:%s] unknown property [PROP:%d:%s]\n",
807	connector->base.id, connector->name,
808	property->base.id, property->name);
809	return -EINVAL;
810	}
811
812	return 0;
813	}
814
815	static int
816	drm_atomic_connector_get_property(struct drm_connector *connector,
817	const struct drm_connector_state *state,
818	struct drm_property *property, uint64_t *val)
819	{
820	struct drm_device *dev = connector->dev;
821	struct drm_mode_config *config = &dev->mode_config;
822
823	if (property == config->prop_crtc_id) {
824	*val = (state->crtc) ? state->crtc->base.id : 0;
825	} else if (property == config->dpms_property) {
826	if (state->crtc && state->crtc->state->self_refresh_active)
827	*val = DRM_MODE_DPMS_ON;
828	else
829	*val = connector->dpms;
830	} else if (property == config->tv_select_subconnector_property) {
831	*val = state->tv.select_subconnector;
832	} else if (property == config->tv_subconnector_property) {
833	*val = state->tv.subconnector;
834	} else if (property == config->tv_left_margin_property) {
835	*val = state->tv.margins.left;
836	} else if (property == config->tv_right_margin_property) {
837	*val = state->tv.margins.right;
838	} else if (property == config->tv_top_margin_property) {
839	*val = state->tv.margins.top;
840	} else if (property == config->tv_bottom_margin_property) {
841	*val = state->tv.margins.bottom;
842	} else if (property == config->legacy_tv_mode_property) {
843	*val = state->tv.legacy_mode;
844	} else if (property == config->tv_mode_property) {
845	*val = state->tv.mode;
846	} else if (property == config->tv_brightness_property) {
847	*val = state->tv.brightness;
848	} else if (property == config->tv_contrast_property) {
849	*val = state->tv.contrast;
850	} else if (property == config->tv_flicker_reduction_property) {
851	*val = state->tv.flicker_reduction;
852	} else if (property == config->tv_overscan_property) {
853	*val = state->tv.overscan;
854	} else if (property == config->tv_saturation_property) {
855	*val = state->tv.saturation;
856	} else if (property == config->tv_hue_property) {
857	*val = state->tv.hue;
858	} else if (property == config->link_status_property) {
859	*val = state->link_status;
860	} else if (property == config->aspect_ratio_property) {
861	*val = state->picture_aspect_ratio;
862	} else if (property == config->content_type_property) {
863	*val = state->content_type;
864	} else if (property == connector->colorspace_property) {
865	*val = state->colorspace;
866	} else if (property == connector->scaling_mode_property) {
867	*val = state->scaling_mode;
868	} else if (property == config->hdr_output_metadata_property) {
869	*val = state->hdr_output_metadata ?
870	state->hdr_output_metadata->base.id : 0;
871	} else if (property == config->content_protection_property) {
872	*val = state->content_protection;
873	} else if (property == config->hdcp_content_type_property) {
874	*val = state->hdcp_content_type;
875	} else if (property == config->writeback_fb_id_property) {
876	/* Writeback framebuffer is one-shot, write and forget */
877	*val = 0;
878	} else if (property == config->writeback_out_fence_ptr_property) {
879	*val = 0;
880	} else if (property == connector->max_bpc_property) {
881	*val = state->max_requested_bpc;
882	} else if (property == connector->privacy_screen_sw_state_property) {
883	*val = state->privacy_screen_sw_state;
884	} else if (connector->funcs->atomic_get_property) {
885	return connector->funcs->atomic_get_property(connector,
886	state, property, val);
887	} else {
888	drm_dbg_atomic(dev,
889	"[CONNECTOR:%d:%s] unknown property [PROP:%d:%s]\n",
890	connector->base.id, connector->name,
891	property->base.id, property->name);
892	return -EINVAL;
893	}
894
895	return 0;
896	}
897
898	int drm_atomic_get_property(struct drm_mode_object *obj,
899	struct drm_property *property, uint64_t *val)
900	{
901	struct drm_device *dev = property->dev;
902	int ret;
903
904	switch (obj->type) {
905	case DRM_MODE_OBJECT_CONNECTOR: {
906	struct drm_connector *connector = obj_to_connector(obj);
907
908	WARN_ON(!drm_modeset_is_locked(&dev->mode_config.connection_mutex));
909	ret = drm_atomic_connector_get_property(connector,
910	state: connector->state, property, val);
911	break;
912	}
913	case DRM_MODE_OBJECT_CRTC: {
914	struct drm_crtc *crtc = obj_to_crtc(obj);
915
916	WARN_ON(!drm_modeset_is_locked(&crtc->mutex));
917	ret = drm_atomic_crtc_get_property(crtc,
918	state: crtc->state, property, val);
919	break;
920	}
921	case DRM_MODE_OBJECT_PLANE: {
922	struct drm_plane *plane = obj_to_plane(obj);
923
924	WARN_ON(!drm_modeset_is_locked(&plane->mutex));
925	ret = drm_atomic_plane_get_property(plane,
926	state: plane->state, property, val);
927	break;
928	}
929	default:
930	drm_dbg_atomic(dev, "[OBJECT:%d] has no properties\n", obj->id);
931	ret = -EINVAL;
932	break;
933	}
934
935	return ret;
936	}
937
938	/*
939	* The big monster ioctl
940	*/
941
942	static struct drm_pending_vblank_event *create_vblank_event(
943	struct drm_crtc *crtc, uint64_t user_data)
944	{
945	struct drm_pending_vblank_event *e = NULL;
946
947	e = kzalloc(size: sizeof *e, GFP_KERNEL);
948	if (!e)
949	return NULL;
950
951	e->event.base.type = DRM_EVENT_FLIP_COMPLETE;
952	e->event.base.length = sizeof(e->event);
953	e->event.vbl.crtc_id = crtc->base.id;
954	e->event.vbl.user_data = user_data;
955
956	return e;
957	}
958
959	int drm_atomic_connector_commit_dpms(struct drm_atomic_state *state,
960	struct drm_connector *connector,
961	int mode)
962	{
963	struct drm_connector *tmp_connector;
964	struct drm_connector_state *new_conn_state;
965	struct drm_crtc *crtc;
966	struct drm_crtc_state *crtc_state;
967	int i, ret, old_mode = connector->dpms;
968	bool active = false;
969
970	ret = drm_modeset_lock(lock: &state->dev->mode_config.connection_mutex,
971	ctx: state->acquire_ctx);
972	if (ret)
973	return ret;
974
975	if (mode != DRM_MODE_DPMS_ON)
976	mode = DRM_MODE_DPMS_OFF;
977	connector->dpms = mode;
978
979	crtc = connector->state->crtc;
980	if (!crtc)
981	goto out;
982	ret = drm_atomic_add_affected_connectors(state, crtc);
983	if (ret)
984	goto out;
985
986	crtc_state = drm_atomic_get_crtc_state(state, crtc);
987	if (IS_ERR(ptr: crtc_state)) {
988	ret = PTR_ERR(ptr: crtc_state);
989	goto out;
990	}
991
992	for_each_new_connector_in_state(state, tmp_connector, new_conn_state, i) {
993	if (new_conn_state->crtc != crtc)
994	continue;
995	if (tmp_connector->dpms == DRM_MODE_DPMS_ON) {
996	active = true;
997	break;
998	}
999	}
1000
1001	crtc_state->active = active;
1002	ret = drm_atomic_commit(state);
1003	out:
1004	if (ret != 0)
1005	connector->dpms = old_mode;
1006	return ret;
1007	}
1008
1009	int drm_atomic_set_property(struct drm_atomic_state *state,
1010	struct drm_file *file_priv,
1011	struct drm_mode_object *obj,
1012	struct drm_property *prop,
1013	uint64_t prop_value)
1014	{
1015	struct drm_mode_object *ref;
1016	int ret;
1017
1018	if (!drm_property_change_valid_get(property: prop, value: prop_value, ref: &ref))
1019	return -EINVAL;
1020
1021	switch (obj->type) {
1022	case DRM_MODE_OBJECT_CONNECTOR: {
1023	struct drm_connector *connector = obj_to_connector(obj);
1024	struct drm_connector_state *connector_state;
1025
1026	connector_state = drm_atomic_get_connector_state(state, connector);
1027	if (IS_ERR(ptr: connector_state)) {
1028	ret = PTR_ERR(ptr: connector_state);
1029	break;
1030	}
1031
1032	ret = drm_atomic_connector_set_property(connector,
1033	state: connector_state, file_priv,
1034	property: prop, val: prop_value);
1035	break;
1036	}
1037	case DRM_MODE_OBJECT_CRTC: {
1038	struct drm_crtc *crtc = obj_to_crtc(obj);
1039	struct drm_crtc_state *crtc_state;
1040
1041	crtc_state = drm_atomic_get_crtc_state(state, crtc);
1042	if (IS_ERR(ptr: crtc_state)) {
1043	ret = PTR_ERR(ptr: crtc_state);
1044	break;
1045	}
1046
1047	ret = drm_atomic_crtc_set_property(crtc,
1048	state: crtc_state, property: prop, val: prop_value);
1049	break;
1050	}
1051	case DRM_MODE_OBJECT_PLANE: {
1052	struct drm_plane *plane = obj_to_plane(obj);
1053	struct drm_plane_state *plane_state;
1054
1055	plane_state = drm_atomic_get_plane_state(state, plane);
1056	if (IS_ERR(ptr: plane_state)) {
1057	ret = PTR_ERR(ptr: plane_state);
1058	break;
1059	}
1060
1061	ret = drm_atomic_plane_set_property(plane,
1062	state: plane_state, file_priv,
1063	property: prop, val: prop_value);
1064	break;
1065	}
1066	default:
1067	drm_dbg_atomic(prop->dev, "[OBJECT:%d] has no properties\n", obj->id);
1068	ret = -EINVAL;
1069	break;
1070	}
1071
1072	drm_property_change_valid_put(property: prop, ref);
1073	return ret;
1074	}
1075
1076	/**
1077	* DOC: explicit fencing properties
1078	*
1079	* Explicit fencing allows userspace to control the buffer synchronization
1080	* between devices. A Fence or a group of fences are transferred to/from
1081	* userspace using Sync File fds and there are two DRM properties for that.
1082	* IN_FENCE_FD on each DRM Plane to send fences to the kernel and
1083	* OUT_FENCE_PTR on each DRM CRTC to receive fences from the kernel.
1084	*
1085	* As a contrast, with implicit fencing the kernel keeps track of any
1086	* ongoing rendering, and automatically ensures that the atomic update waits
1087	* for any pending rendering to complete. This is usually tracked in &struct
1088	* dma_resv which can also contain mandatory kernel fences. Implicit syncing
1089	* is how Linux traditionally worked (e.g. DRI2/3 on X.org), whereas explicit
1090	* fencing is what Android wants.
1091	*
1092	* "IN_FENCE_FD”:
1093	* Use this property to pass a fence that DRM should wait on before
1094	* proceeding with the Atomic Commit request and show the framebuffer for
1095	* the plane on the screen. The fence can be either a normal fence or a
1096	* merged one, the sync_file framework will handle both cases and use a
1097	* fence_array if a merged fence is received. Passing -1 here means no
1098	* fences to wait on.
1099	*
1100	* If the Atomic Commit request has the DRM_MODE_ATOMIC_TEST_ONLY flag
1101	* it will only check if the Sync File is a valid one.
1102	*
1103	* On the driver side the fence is stored on the @fence parameter of
1104	* &struct drm_plane_state. Drivers which also support implicit fencing
1105	* should extract the implicit fence using drm_gem_plane_helper_prepare_fb(),
1106	* to make sure there's consistent behaviour between drivers in precedence
1107	* of implicit vs. explicit fencing.
1108	*
1109	* "OUT_FENCE_PTR”:
1110	* Use this property to pass a file descriptor pointer to DRM. Once the
1111	* Atomic Commit request call returns OUT_FENCE_PTR will be filled with
1112	* the file descriptor number of a Sync File. This Sync File contains the
1113	* CRTC fence that will be signaled when all framebuffers present on the
1114	* Atomic Commit * request for that given CRTC are scanned out on the
1115	* screen.
1116	*
1117	* The Atomic Commit request fails if a invalid pointer is passed. If the
1118	* Atomic Commit request fails for any other reason the out fence fd
1119	* returned will be -1. On a Atomic Commit with the
1120	* DRM_MODE_ATOMIC_TEST_ONLY flag the out fence will also be set to -1.
1121	*
1122	* Note that out-fences don't have a special interface to drivers and are
1123	* internally represented by a &struct drm_pending_vblank_event in struct
1124	* &drm_crtc_state, which is also used by the nonblocking atomic commit
1125	* helpers and for the DRM event handling for existing userspace.
1126	*/
1127
1128	struct drm_out_fence_state {
1129	s32 __user *out_fence_ptr;
1130	struct sync_file *sync_file;
1131	int fd;
1132	};
1133
1134	static int setup_out_fence(struct drm_out_fence_state *fence_state,
1135	struct dma_fence *fence)
1136	{
1137	fence_state->fd = get_unused_fd_flags(O_CLOEXEC);
1138	if (fence_state->fd < 0)
1139	return fence_state->fd;
1140
1141	if (put_user(fence_state->fd, fence_state->out_fence_ptr))
1142	return -EFAULT;
1143
1144	fence_state->sync_file = sync_file_create(fence);
1145	if (!fence_state->sync_file)
1146	return -ENOMEM;
1147
1148	return 0;
1149	}
1150
1151	static int prepare_signaling(struct drm_device *dev,
1152	struct drm_atomic_state *state,
1153	struct drm_mode_atomic *arg,
1154	struct drm_file *file_priv,
1155	struct drm_out_fence_state **fence_state,
1156	unsigned int *num_fences)
1157	{
1158	struct drm_crtc *crtc;
1159	struct drm_crtc_state *crtc_state;
1160	struct drm_connector *conn;
1161	struct drm_connector_state *conn_state;
1162	int i, c = 0, ret;
1163
1164	if (arg->flags & DRM_MODE_ATOMIC_TEST_ONLY)
1165	return 0;
1166
1167	for_each_new_crtc_in_state(state, crtc, crtc_state, i) {
1168	s32 __user *fence_ptr;
1169
1170	fence_ptr = get_out_fence_for_crtc(state: crtc_state->state, crtc);
1171
1172	if (arg->flags & DRM_MODE_PAGE_FLIP_EVENT || fence_ptr) {
1173	struct drm_pending_vblank_event *e;
1174
1175	e = create_vblank_event(crtc, user_data: arg->user_data);
1176	if (!e)
1177	return -ENOMEM;
1178
1179	crtc_state->event = e;
1180	}
1181
1182	if (arg->flags & DRM_MODE_PAGE_FLIP_EVENT) {
1183	struct drm_pending_vblank_event *e = crtc_state->event;
1184
1185	if (!file_priv)
1186	continue;
1187
1188	ret = drm_event_reserve_init(dev, file_priv, p: &e->base,
1189	e: &e->event.base);
1190	if (ret) {
1191	kfree(objp: e);
1192	crtc_state->event = NULL;
1193	return ret;
1194	}
1195	}
1196
1197	if (fence_ptr) {
1198	struct dma_fence *fence;
1199	struct drm_out_fence_state *f;
1200
1201	f = krealloc(objp: *fence_state, new_size: sizeof(**fence_state) *
1202	(*num_fences + 1), GFP_KERNEL);
1203	if (!f)
1204	return -ENOMEM;
1205
1206	memset(&f[*num_fences], 0, sizeof(*f));
1207
1208	f[*num_fences].out_fence_ptr = fence_ptr;
1209	*fence_state = f;
1210
1211	fence = drm_crtc_create_fence(crtc);
1212	if (!fence)
1213	return -ENOMEM;
1214
1215	ret = setup_out_fence(fence_state: &f[(*num_fences)++], fence);
1216	if (ret) {
1217	dma_fence_put(fence);
1218	return ret;
1219	}
1220
1221	crtc_state->event->base.fence = fence;
1222	}
1223
1224	c++;
1225	}
1226
1227	for_each_new_connector_in_state(state, conn, conn_state, i) {
1228	struct drm_writeback_connector *wb_conn;
1229	struct drm_out_fence_state *f;
1230	struct dma_fence *fence;
1231	s32 __user *fence_ptr;
1232
1233	if (!conn_state->writeback_job)
1234	continue;
1235
1236	fence_ptr = get_out_fence_for_connector(state, connector: conn);
1237	if (!fence_ptr)
1238	continue;
1239
1240	f = krealloc(objp: *fence_state, new_size: sizeof(**fence_state) *
1241	(*num_fences + 1), GFP_KERNEL);
1242	if (!f)
1243	return -ENOMEM;
1244
1245	memset(&f[*num_fences], 0, sizeof(*f));
1246
1247	f[*num_fences].out_fence_ptr = fence_ptr;
1248	*fence_state = f;
1249
1250	wb_conn = drm_connector_to_writeback(connector: conn);
1251	fence = drm_writeback_get_out_fence(wb_connector: wb_conn);
1252	if (!fence)
1253	return -ENOMEM;
1254
1255	ret = setup_out_fence(fence_state: &f[(*num_fences)++], fence);
1256	if (ret) {
1257	dma_fence_put(fence);
1258	return ret;
1259	}
1260
1261	conn_state->writeback_job->out_fence = fence;
1262	}
1263
1264	/*
1265	* Having this flag means user mode pends on event which will never
1266	* reach due to lack of at least one CRTC for signaling
1267	*/
1268	if (c == 0 && (arg->flags & DRM_MODE_PAGE_FLIP_EVENT)) {
1269	drm_dbg_atomic(dev, "need at least one CRTC for DRM_MODE_PAGE_FLIP_EVENT");
1270	return -EINVAL;
1271	}
1272
1273	return 0;
1274	}
1275
1276	static void complete_signaling(struct drm_device *dev,
1277	struct drm_atomic_state *state,
1278	struct drm_out_fence_state *fence_state,
1279	unsigned int num_fences,
1280	bool install_fds)
1281	{
1282	struct drm_crtc *crtc;
1283	struct drm_crtc_state *crtc_state;
1284	int i;
1285
1286	if (install_fds) {
1287	for (i = 0; i < num_fences; i++)
1288	fd_install(fd: fence_state[i].fd,
1289	file: fence_state[i].sync_file->file);
1290
1291	kfree(objp: fence_state);
1292	return;
1293	}
1294
1295	for_each_new_crtc_in_state(state, crtc, crtc_state, i) {
1296	struct drm_pending_vblank_event *event = crtc_state->event;
1297	/*
1298	* Free the allocated event. drm_atomic_helper_setup_commit
1299	* can allocate an event too, so only free it if it's ours
1300	* to prevent a double free in drm_atomic_state_clear.
1301	*/
1302	if (event && (event->base.fence || event->base.file_priv)) {
1303	drm_event_cancel_free(dev, p: &event->base);
1304	crtc_state->event = NULL;
1305	}
1306	}
1307
1308	if (!fence_state)
1309	return;
1310
1311	for (i = 0; i < num_fences; i++) {
1312	if (fence_state[i].sync_file)
1313	fput(fence_state[i].sync_file->file);
1314	if (fence_state[i].fd >= 0)
1315	put_unused_fd(fd: fence_state[i].fd);
1316
1317	/* If this fails log error to the user */
1318	if (fence_state[i].out_fence_ptr &&
1319	put_user(-1, fence_state[i].out_fence_ptr))
1320	drm_dbg_atomic(dev, "Couldn't clear out_fence_ptr\n");
1321	}
1322
1323	kfree(objp: fence_state);
1324	}
1325
1326	int drm_mode_atomic_ioctl(struct drm_device *dev,
1327	void *data, struct drm_file *file_priv)
1328	{
1329	struct drm_mode_atomic *arg = data;
1330	uint32_t __user *objs_ptr = (uint32_t __user *)(unsigned long)(arg->objs_ptr);
1331	uint32_t __user *count_props_ptr = (uint32_t __user *)(unsigned long)(arg->count_props_ptr);
1332	uint32_t __user *props_ptr = (uint32_t __user *)(unsigned long)(arg->props_ptr);
1333	uint64_t __user *prop_values_ptr = (uint64_t __user *)(unsigned long)(arg->prop_values_ptr);
1334	unsigned int copied_objs, copied_props;
1335	struct drm_atomic_state *state;
1336	struct drm_modeset_acquire_ctx ctx;
1337	struct drm_out_fence_state *fence_state;
1338	int ret = 0;
1339	unsigned int i, j, num_fences;
1340
1341	/* disallow for drivers not supporting atomic: */
1342	if (!drm_core_check_feature(dev, feature: DRIVER_ATOMIC))
1343	return -EOPNOTSUPP;
1344
1345	/* disallow for userspace that has not enabled atomic cap (even
1346	* though this may be a bit overkill, since legacy userspace
1347	* wouldn't know how to call this ioctl)
1348	*/
1349	if (!file_priv->atomic) {
1350	drm_dbg_atomic(dev,
1351	"commit failed: atomic cap not enabled\n");
1352	return -EINVAL;
1353	}
1354
1355	if (arg->flags & ~DRM_MODE_ATOMIC_FLAGS) {
1356	drm_dbg_atomic(dev, "commit failed: invalid flag\n");
1357	return -EINVAL;
1358	}
1359
1360	if (arg->reserved) {
1361	drm_dbg_atomic(dev, "commit failed: reserved field set\n");
1362	return -EINVAL;
1363	}
1364
1365	if (arg->flags & DRM_MODE_PAGE_FLIP_ASYNC) {
1366	drm_dbg_atomic(dev,
1367	"commit failed: invalid flag DRM_MODE_PAGE_FLIP_ASYNC\n");
1368	return -EINVAL;
1369	}
1370
1371	/* can't test and expect an event at the same time. */
1372	if ((arg->flags & DRM_MODE_ATOMIC_TEST_ONLY) &&
1373	(arg->flags & DRM_MODE_PAGE_FLIP_EVENT)) {
1374	drm_dbg_atomic(dev,
1375	"commit failed: page-flip event requested with test-only commit\n");
1376	return -EINVAL;
1377	}
1378
1379	state = drm_atomic_state_alloc(dev);
1380	if (!state)
1381	return -ENOMEM;
1382
1383	drm_modeset_acquire_init(ctx: &ctx, DRM_MODESET_ACQUIRE_INTERRUPTIBLE);
1384	state->acquire_ctx = &ctx;
1385	state->allow_modeset = !!(arg->flags & DRM_MODE_ATOMIC_ALLOW_MODESET);
1386
1387	retry:
1388	copied_objs = 0;
1389	copied_props = 0;
1390	fence_state = NULL;
1391	num_fences = 0;
1392
1393	for (i = 0; i < arg->count_objs; i++) {
1394	uint32_t obj_id, count_props;
1395	struct drm_mode_object *obj;
1396
1397	if (get_user(obj_id, objs_ptr + copied_objs)) {
1398	ret = -EFAULT;
1399	goto out;
1400	}
1401
1402	obj = drm_mode_object_find(dev, file_priv, id: obj_id, DRM_MODE_OBJECT_ANY);
1403	if (!obj) {
1404	drm_dbg_atomic(dev, "cannot find object ID %d", obj_id);
1405	ret = -ENOENT;
1406	goto out;
1407	}
1408
1409	if (!obj->properties) {
1410	drm_dbg_atomic(dev, "[OBJECT:%d] has no properties", obj_id);
1411	drm_mode_object_put(obj);
1412	ret = -ENOENT;
1413	goto out;
1414	}
1415
1416	if (get_user(count_props, count_props_ptr + copied_objs)) {
1417	drm_mode_object_put(obj);
1418	ret = -EFAULT;
1419	goto out;
1420	}
1421
1422	copied_objs++;
1423
1424	for (j = 0; j < count_props; j++) {
1425	uint32_t prop_id;
1426	uint64_t prop_value;
1427	struct drm_property *prop;
1428
1429	if (get_user(prop_id, props_ptr + copied_props)) {
1430	drm_mode_object_put(obj);
1431	ret = -EFAULT;
1432	goto out;
1433	}
1434
1435	prop = drm_mode_obj_find_prop_id(obj, prop_id);
1436	if (!prop) {
1437	drm_dbg_atomic(dev,
1438	"[OBJECT:%d] cannot find property ID %d",
1439	obj_id, prop_id);
1440	drm_mode_object_put(obj);
1441	ret = -ENOENT;
1442	goto out;
1443	}
1444
1445	if (copy_from_user(to: &prop_value,
1446	from: prop_values_ptr + copied_props,
1447	n: sizeof(prop_value))) {
1448	drm_mode_object_put(obj);
1449	ret = -EFAULT;
1450	goto out;
1451	}
1452
1453	ret = drm_atomic_set_property(state, file_priv,
1454	obj, prop, prop_value);
1455	if (ret) {
1456	drm_mode_object_put(obj);
1457	goto out;
1458	}
1459
1460	copied_props++;
1461	}
1462
1463	drm_mode_object_put(obj);
1464	}
1465
1466	ret = prepare_signaling(dev, state, arg, file_priv, fence_state: &fence_state,
1467	num_fences: &num_fences);
1468	if (ret)
1469	goto out;
1470
1471	if (arg->flags & DRM_MODE_ATOMIC_TEST_ONLY) {
1472	ret = drm_atomic_check_only(state);
1473	} else if (arg->flags & DRM_MODE_ATOMIC_NONBLOCK) {
1474	ret = drm_atomic_nonblocking_commit(state);
1475	} else {
1476	ret = drm_atomic_commit(state);
1477	}
1478
1479	out:
1480	complete_signaling(dev, state, fence_state, num_fences, install_fds: !ret);
1481
1482	if (ret == -EDEADLK) {
1483	drm_atomic_state_clear(state);
1484	ret = drm_modeset_backoff(ctx: &ctx);
1485	if (!ret)
1486	goto retry;
1487	}
1488
1489	drm_atomic_state_put(state);
1490
1491	drm_modeset_drop_locks(ctx: &ctx);
1492	drm_modeset_acquire_fini(ctx: &ctx);
1493
1494	return ret;
1495	}
1496