Merge branch 'fixes-hwmod-regression' of git://git.kernel.org/pub/scm/linux/kernel...
[linux-2.6.git] / drivers / gpu / drm / vmwgfx / vmwgfx_kms.c
1 /**************************************************************************
2  *
3  * Copyright © 2009 VMware, Inc., Palo Alto, CA., USA
4  * All Rights Reserved.
5  *
6  * Permission is hereby granted, free of charge, to any person obtaining a
7  * copy of this software and associated documentation files (the
8  * "Software"), to deal in the Software without restriction, including
9  * without limitation the rights to use, copy, modify, merge, publish,
10  * distribute, sub license, and/or sell copies of the Software, and to
11  * permit persons to whom the Software is furnished to do so, subject to
12  * the following conditions:
13  *
14  * The above copyright notice and this permission notice (including the
15  * next paragraph) shall be included in all copies or substantial portions
16  * of the Software.
17  *
18  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
19  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
20  * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL
21  * THE COPYRIGHT HOLDERS, AUTHORS AND/OR ITS SUPPLIERS BE LIABLE FOR ANY CLAIM,
22  * DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
23  * OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
24  * USE OR OTHER DEALINGS IN THE SOFTWARE.
25  *
26  **************************************************************************/
27
28 #include "vmwgfx_kms.h"
29
30
31 /* Might need a hrtimer here? */
32 #define VMWGFX_PRESENT_RATE ((HZ / 60 > 0) ? HZ / 60 : 1)
33
34 void vmw_display_unit_cleanup(struct vmw_display_unit *du)
35 {
36         if (du->cursor_surface)
37                 vmw_surface_unreference(&du->cursor_surface);
38         if (du->cursor_dmabuf)
39                 vmw_dmabuf_unreference(&du->cursor_dmabuf);
40         drm_crtc_cleanup(&du->crtc);
41         drm_encoder_cleanup(&du->encoder);
42         drm_connector_cleanup(&du->connector);
43 }
44
45 /*
46  * Display Unit Cursor functions
47  */
48
49 int vmw_cursor_update_image(struct vmw_private *dev_priv,
50                             u32 *image, u32 width, u32 height,
51                             u32 hotspotX, u32 hotspotY)
52 {
53         struct {
54                 u32 cmd;
55                 SVGAFifoCmdDefineAlphaCursor cursor;
56         } *cmd;
57         u32 image_size = width * height * 4;
58         u32 cmd_size = sizeof(*cmd) + image_size;
59
60         if (!image)
61                 return -EINVAL;
62
63         cmd = vmw_fifo_reserve(dev_priv, cmd_size);
64         if (unlikely(cmd == NULL)) {
65                 DRM_ERROR("Fifo reserve failed.\n");
66                 return -ENOMEM;
67         }
68
69         memset(cmd, 0, sizeof(*cmd));
70
71         memcpy(&cmd[1], image, image_size);
72
73         cmd->cmd = cpu_to_le32(SVGA_CMD_DEFINE_ALPHA_CURSOR);
74         cmd->cursor.id = cpu_to_le32(0);
75         cmd->cursor.width = cpu_to_le32(width);
76         cmd->cursor.height = cpu_to_le32(height);
77         cmd->cursor.hotspotX = cpu_to_le32(hotspotX);
78         cmd->cursor.hotspotY = cpu_to_le32(hotspotY);
79
80         vmw_fifo_commit(dev_priv, cmd_size);
81
82         return 0;
83 }
84
85 void vmw_cursor_update_position(struct vmw_private *dev_priv,
86                                 bool show, int x, int y)
87 {
88         __le32 __iomem *fifo_mem = dev_priv->mmio_virt;
89         uint32_t count;
90
91         iowrite32(show ? 1 : 0, fifo_mem + SVGA_FIFO_CURSOR_ON);
92         iowrite32(x, fifo_mem + SVGA_FIFO_CURSOR_X);
93         iowrite32(y, fifo_mem + SVGA_FIFO_CURSOR_Y);
94         count = ioread32(fifo_mem + SVGA_FIFO_CURSOR_COUNT);
95         iowrite32(++count, fifo_mem + SVGA_FIFO_CURSOR_COUNT);
96 }
97
98 int vmw_du_crtc_cursor_set(struct drm_crtc *crtc, struct drm_file *file_priv,
99                            uint32_t handle, uint32_t width, uint32_t height)
100 {
101         struct vmw_private *dev_priv = vmw_priv(crtc->dev);
102         struct ttm_object_file *tfile = vmw_fpriv(file_priv)->tfile;
103         struct vmw_display_unit *du = vmw_crtc_to_du(crtc);
104         struct vmw_surface *surface = NULL;
105         struct vmw_dma_buffer *dmabuf = NULL;
106         int ret;
107
108         /* A lot of the code assumes this */
109         if (handle && (width != 64 || height != 64))
110                 return -EINVAL;
111
112         if (handle) {
113                 ret = vmw_user_surface_lookup_handle(dev_priv, tfile,
114                                                      handle, &surface);
115                 if (!ret) {
116                         if (!surface->snooper.image) {
117                                 DRM_ERROR("surface not suitable for cursor\n");
118                                 vmw_surface_unreference(&surface);
119                                 return -EINVAL;
120                         }
121                 } else {
122                         ret = vmw_user_dmabuf_lookup(tfile,
123                                                      handle, &dmabuf);
124                         if (ret) {
125                                 DRM_ERROR("failed to find surface or dmabuf: %i\n", ret);
126                                 return -EINVAL;
127                         }
128                 }
129         }
130
131         /* takedown old cursor */
132         if (du->cursor_surface) {
133                 du->cursor_surface->snooper.crtc = NULL;
134                 vmw_surface_unreference(&du->cursor_surface);
135         }
136         if (du->cursor_dmabuf)
137                 vmw_dmabuf_unreference(&du->cursor_dmabuf);
138
139         /* setup new image */
140         if (surface) {
141                 /* vmw_user_surface_lookup takes one reference */
142                 du->cursor_surface = surface;
143
144                 du->cursor_surface->snooper.crtc = crtc;
145                 du->cursor_age = du->cursor_surface->snooper.age;
146                 vmw_cursor_update_image(dev_priv, surface->snooper.image,
147                                         64, 64, du->hotspot_x, du->hotspot_y);
148         } else if (dmabuf) {
149                 struct ttm_bo_kmap_obj map;
150                 unsigned long kmap_offset;
151                 unsigned long kmap_num;
152                 void *virtual;
153                 bool dummy;
154
155                 /* vmw_user_surface_lookup takes one reference */
156                 du->cursor_dmabuf = dmabuf;
157
158                 kmap_offset = 0;
159                 kmap_num = (64*64*4) >> PAGE_SHIFT;
160
161                 ret = ttm_bo_reserve(&dmabuf->base, true, false, false, 0);
162                 if (unlikely(ret != 0)) {
163                         DRM_ERROR("reserve failed\n");
164                         return -EINVAL;
165                 }
166
167                 ret = ttm_bo_kmap(&dmabuf->base, kmap_offset, kmap_num, &map);
168                 if (unlikely(ret != 0))
169                         goto err_unreserve;
170
171                 virtual = ttm_kmap_obj_virtual(&map, &dummy);
172                 vmw_cursor_update_image(dev_priv, virtual, 64, 64,
173                                         du->hotspot_x, du->hotspot_y);
174
175                 ttm_bo_kunmap(&map);
176 err_unreserve:
177                 ttm_bo_unreserve(&dmabuf->base);
178
179         } else {
180                 vmw_cursor_update_position(dev_priv, false, 0, 0);
181                 return 0;
182         }
183
184         vmw_cursor_update_position(dev_priv, true,
185                                    du->cursor_x + du->hotspot_x,
186                                    du->cursor_y + du->hotspot_y);
187
188         return 0;
189 }
190
191 int vmw_du_crtc_cursor_move(struct drm_crtc *crtc, int x, int y)
192 {
193         struct vmw_private *dev_priv = vmw_priv(crtc->dev);
194         struct vmw_display_unit *du = vmw_crtc_to_du(crtc);
195         bool shown = du->cursor_surface || du->cursor_dmabuf ? true : false;
196
197         du->cursor_x = x + crtc->x;
198         du->cursor_y = y + crtc->y;
199
200         vmw_cursor_update_position(dev_priv, shown,
201                                    du->cursor_x + du->hotspot_x,
202                                    du->cursor_y + du->hotspot_y);
203
204         return 0;
205 }
206
207 void vmw_kms_cursor_snoop(struct vmw_surface *srf,
208                           struct ttm_object_file *tfile,
209                           struct ttm_buffer_object *bo,
210                           SVGA3dCmdHeader *header)
211 {
212         struct ttm_bo_kmap_obj map;
213         unsigned long kmap_offset;
214         unsigned long kmap_num;
215         SVGA3dCopyBox *box;
216         unsigned box_count;
217         void *virtual;
218         bool dummy;
219         struct vmw_dma_cmd {
220                 SVGA3dCmdHeader header;
221                 SVGA3dCmdSurfaceDMA dma;
222         } *cmd;
223         int i, ret;
224
225         cmd = container_of(header, struct vmw_dma_cmd, header);
226
227         /* No snooper installed */
228         if (!srf->snooper.image)
229                 return;
230
231         if (cmd->dma.host.face != 0 || cmd->dma.host.mipmap != 0) {
232                 DRM_ERROR("face and mipmap for cursors should never != 0\n");
233                 return;
234         }
235
236         if (cmd->header.size < 64) {
237                 DRM_ERROR("at least one full copy box must be given\n");
238                 return;
239         }
240
241         box = (SVGA3dCopyBox *)&cmd[1];
242         box_count = (cmd->header.size - sizeof(SVGA3dCmdSurfaceDMA)) /
243                         sizeof(SVGA3dCopyBox);
244
245         if (cmd->dma.guest.ptr.offset % PAGE_SIZE ||
246             box->x != 0    || box->y != 0    || box->z != 0    ||
247             box->srcx != 0 || box->srcy != 0 || box->srcz != 0 ||
248             box->d != 1    || box_count != 1) {
249                 /* TODO handle none page aligned offsets */
250                 /* TODO handle more dst & src != 0 */
251                 /* TODO handle more then one copy */
252                 DRM_ERROR("Cant snoop dma request for cursor!\n");
253                 DRM_ERROR("(%u, %u, %u) (%u, %u, %u) (%ux%ux%u) %u %u\n",
254                           box->srcx, box->srcy, box->srcz,
255                           box->x, box->y, box->z,
256                           box->w, box->h, box->d, box_count,
257                           cmd->dma.guest.ptr.offset);
258                 return;
259         }
260
261         kmap_offset = cmd->dma.guest.ptr.offset >> PAGE_SHIFT;
262         kmap_num = (64*64*4) >> PAGE_SHIFT;
263
264         ret = ttm_bo_reserve(bo, true, false, false, 0);
265         if (unlikely(ret != 0)) {
266                 DRM_ERROR("reserve failed\n");
267                 return;
268         }
269
270         ret = ttm_bo_kmap(bo, kmap_offset, kmap_num, &map);
271         if (unlikely(ret != 0))
272                 goto err_unreserve;
273
274         virtual = ttm_kmap_obj_virtual(&map, &dummy);
275
276         if (box->w == 64 && cmd->dma.guest.pitch == 64*4) {
277                 memcpy(srf->snooper.image, virtual, 64*64*4);
278         } else {
279                 /* Image is unsigned pointer. */
280                 for (i = 0; i < box->h; i++)
281                         memcpy(srf->snooper.image + i * 64,
282                                virtual + i * cmd->dma.guest.pitch,
283                                box->w * 4);
284         }
285
286         srf->snooper.age++;
287
288         /* we can't call this function from this function since execbuf has
289          * reserved fifo space.
290          *
291          * if (srf->snooper.crtc)
292          *      vmw_ldu_crtc_cursor_update_image(dev_priv,
293          *                                       srf->snooper.image, 64, 64,
294          *                                       du->hotspot_x, du->hotspot_y);
295          */
296
297         ttm_bo_kunmap(&map);
298 err_unreserve:
299         ttm_bo_unreserve(bo);
300 }
301
302 void vmw_kms_cursor_post_execbuf(struct vmw_private *dev_priv)
303 {
304         struct drm_device *dev = dev_priv->dev;
305         struct vmw_display_unit *du;
306         struct drm_crtc *crtc;
307
308         mutex_lock(&dev->mode_config.mutex);
309
310         list_for_each_entry(crtc, &dev->mode_config.crtc_list, head) {
311                 du = vmw_crtc_to_du(crtc);
312                 if (!du->cursor_surface ||
313                     du->cursor_age == du->cursor_surface->snooper.age)
314                         continue;
315
316                 du->cursor_age = du->cursor_surface->snooper.age;
317                 vmw_cursor_update_image(dev_priv,
318                                         du->cursor_surface->snooper.image,
319                                         64, 64, du->hotspot_x, du->hotspot_y);
320         }
321
322         mutex_unlock(&dev->mode_config.mutex);
323 }
324
325 /*
326  * Generic framebuffer code
327  */
328
329 int vmw_framebuffer_create_handle(struct drm_framebuffer *fb,
330                                   struct drm_file *file_priv,
331                                   unsigned int *handle)
332 {
333         if (handle)
334                 handle = 0;
335
336         return 0;
337 }
338
339 /*
340  * Surface framebuffer code
341  */
342
343 #define vmw_framebuffer_to_vfbs(x) \
344         container_of(x, struct vmw_framebuffer_surface, base.base)
345
346 struct vmw_framebuffer_surface {
347         struct vmw_framebuffer base;
348         struct vmw_surface *surface;
349         struct vmw_dma_buffer *buffer;
350         struct list_head head;
351         struct drm_master *master;
352 };
353
354 void vmw_framebuffer_surface_destroy(struct drm_framebuffer *framebuffer)
355 {
356         struct vmw_framebuffer_surface *vfbs =
357                 vmw_framebuffer_to_vfbs(framebuffer);
358         struct vmw_master *vmaster = vmw_master(vfbs->master);
359
360
361         mutex_lock(&vmaster->fb_surf_mutex);
362         list_del(&vfbs->head);
363         mutex_unlock(&vmaster->fb_surf_mutex);
364
365         drm_master_put(&vfbs->master);
366         drm_framebuffer_cleanup(framebuffer);
367         vmw_surface_unreference(&vfbs->surface);
368         ttm_base_object_unref(&vfbs->base.user_obj);
369
370         kfree(vfbs);
371 }
372
373 static int do_surface_dirty_sou(struct vmw_private *dev_priv,
374                                 struct drm_file *file_priv,
375                                 struct vmw_framebuffer *framebuffer,
376                                 unsigned flags, unsigned color,
377                                 struct drm_clip_rect *clips,
378                                 unsigned num_clips, int inc)
379 {
380         struct drm_clip_rect *clips_ptr;
381         struct vmw_display_unit *units[VMWGFX_NUM_DISPLAY_UNITS];
382         struct drm_crtc *crtc;
383         size_t fifo_size;
384         int i, num_units;
385         int ret = 0; /* silence warning */
386         int left, right, top, bottom;
387
388         struct {
389                 SVGA3dCmdHeader header;
390                 SVGA3dCmdBlitSurfaceToScreen body;
391         } *cmd;
392         SVGASignedRect *blits;
393
394
395         num_units = 0;
396         list_for_each_entry(crtc, &dev_priv->dev->mode_config.crtc_list,
397                             head) {
398                 if (crtc->fb != &framebuffer->base)
399                         continue;
400                 units[num_units++] = vmw_crtc_to_du(crtc);
401         }
402
403         BUG_ON(!clips || !num_clips);
404
405         fifo_size = sizeof(*cmd) + sizeof(SVGASignedRect) * num_clips;
406         cmd = kzalloc(fifo_size, GFP_KERNEL);
407         if (unlikely(cmd == NULL)) {
408                 DRM_ERROR("Temporary fifo memory alloc failed.\n");
409                 return -ENOMEM;
410         }
411
412         left = clips->x1;
413         right = clips->x2;
414         top = clips->y1;
415         bottom = clips->y2;
416
417         /* skip the first clip rect */
418         for (i = 1, clips_ptr = clips + inc;
419              i < num_clips; i++, clips_ptr += inc) {
420                 left = min_t(int, left, (int)clips_ptr->x1);
421                 right = max_t(int, right, (int)clips_ptr->x2);
422                 top = min_t(int, top, (int)clips_ptr->y1);
423                 bottom = max_t(int, bottom, (int)clips_ptr->y2);
424         }
425
426         /* only need to do this once */
427         memset(cmd, 0, fifo_size);
428         cmd->header.id = cpu_to_le32(SVGA_3D_CMD_BLIT_SURFACE_TO_SCREEN);
429         cmd->header.size = cpu_to_le32(fifo_size - sizeof(cmd->header));
430
431         cmd->body.srcRect.left = left;
432         cmd->body.srcRect.right = right;
433         cmd->body.srcRect.top = top;
434         cmd->body.srcRect.bottom = bottom;
435
436         clips_ptr = clips;
437         blits = (SVGASignedRect *)&cmd[1];
438         for (i = 0; i < num_clips; i++, clips_ptr += inc) {
439                 blits[i].left   = clips_ptr->x1 - left;
440                 blits[i].right  = clips_ptr->x2 - left;
441                 blits[i].top    = clips_ptr->y1 - top;
442                 blits[i].bottom = clips_ptr->y2 - top;
443         }
444
445         /* do per unit writing, reuse fifo for each */
446         for (i = 0; i < num_units; i++) {
447                 struct vmw_display_unit *unit = units[i];
448                 int clip_x1 = left - unit->crtc.x;
449                 int clip_y1 = top - unit->crtc.y;
450                 int clip_x2 = right - unit->crtc.x;
451                 int clip_y2 = bottom - unit->crtc.y;
452
453                 /* skip any crtcs that misses the clip region */
454                 if (clip_x1 >= unit->crtc.mode.hdisplay ||
455                     clip_y1 >= unit->crtc.mode.vdisplay ||
456                     clip_x2 <= 0 || clip_y2 <= 0)
457                         continue;
458
459                 /* need to reset sid as it is changed by execbuf */
460                 cmd->body.srcImage.sid = cpu_to_le32(framebuffer->user_handle);
461
462                 cmd->body.destScreenId = unit->unit;
463
464                 /*
465                  * The blit command is a lot more resilient then the
466                  * readback command when it comes to clip rects. So its
467                  * okay to go out of bounds.
468                  */
469
470                 cmd->body.destRect.left = clip_x1;
471                 cmd->body.destRect.right = clip_x2;
472                 cmd->body.destRect.top = clip_y1;
473                 cmd->body.destRect.bottom = clip_y2;
474
475
476                 ret = vmw_execbuf_process(file_priv, dev_priv, NULL, cmd,
477                                           fifo_size, 0, NULL);
478
479                 if (unlikely(ret != 0))
480                         break;
481         }
482
483         kfree(cmd);
484
485         return ret;
486 }
487
488 int vmw_framebuffer_surface_dirty(struct drm_framebuffer *framebuffer,
489                                   struct drm_file *file_priv,
490                                   unsigned flags, unsigned color,
491                                   struct drm_clip_rect *clips,
492                                   unsigned num_clips)
493 {
494         struct vmw_private *dev_priv = vmw_priv(framebuffer->dev);
495         struct vmw_master *vmaster = vmw_master(file_priv->master);
496         struct vmw_framebuffer_surface *vfbs =
497                 vmw_framebuffer_to_vfbs(framebuffer);
498         struct drm_clip_rect norect;
499         int ret, inc = 1;
500
501         if (unlikely(vfbs->master != file_priv->master))
502                 return -EINVAL;
503
504         /* Require ScreenObject support for 3D */
505         if (!dev_priv->sou_priv)
506                 return -EINVAL;
507
508         ret = ttm_read_lock(&vmaster->lock, true);
509         if (unlikely(ret != 0))
510                 return ret;
511
512         if (!num_clips) {
513                 num_clips = 1;
514                 clips = &norect;
515                 norect.x1 = norect.y1 = 0;
516                 norect.x2 = framebuffer->width;
517                 norect.y2 = framebuffer->height;
518         } else if (flags & DRM_MODE_FB_DIRTY_ANNOTATE_COPY) {
519                 num_clips /= 2;
520                 inc = 2; /* skip source rects */
521         }
522
523         ret = do_surface_dirty_sou(dev_priv, file_priv, &vfbs->base,
524                                    flags, color,
525                                    clips, num_clips, inc);
526
527         ttm_read_unlock(&vmaster->lock);
528         return 0;
529 }
530
531 static struct drm_framebuffer_funcs vmw_framebuffer_surface_funcs = {
532         .destroy = vmw_framebuffer_surface_destroy,
533         .dirty = vmw_framebuffer_surface_dirty,
534         .create_handle = vmw_framebuffer_create_handle,
535 };
536
537 static int vmw_kms_new_framebuffer_surface(struct vmw_private *dev_priv,
538                                            struct drm_file *file_priv,
539                                            struct vmw_surface *surface,
540                                            struct vmw_framebuffer **out,
541                                            const struct drm_mode_fb_cmd
542                                            *mode_cmd)
543
544 {
545         struct drm_device *dev = dev_priv->dev;
546         struct vmw_framebuffer_surface *vfbs;
547         enum SVGA3dSurfaceFormat format;
548         struct vmw_master *vmaster = vmw_master(file_priv->master);
549         int ret;
550
551         /* 3D is only supported on HWv8 hosts which supports screen objects */
552         if (!dev_priv->sou_priv)
553                 return -ENOSYS;
554
555         /*
556          * Sanity checks.
557          */
558
559         if (unlikely(surface->mip_levels[0] != 1 ||
560                      surface->num_sizes != 1 ||
561                      surface->sizes[0].width < mode_cmd->width ||
562                      surface->sizes[0].height < mode_cmd->height ||
563                      surface->sizes[0].depth != 1)) {
564                 DRM_ERROR("Incompatible surface dimensions "
565                           "for requested mode.\n");
566                 return -EINVAL;
567         }
568
569         switch (mode_cmd->depth) {
570         case 32:
571                 format = SVGA3D_A8R8G8B8;
572                 break;
573         case 24:
574                 format = SVGA3D_X8R8G8B8;
575                 break;
576         case 16:
577                 format = SVGA3D_R5G6B5;
578                 break;
579         case 15:
580                 format = SVGA3D_A1R5G5B5;
581                 break;
582         case 8:
583                 format = SVGA3D_LUMINANCE8;
584                 break;
585         default:
586                 DRM_ERROR("Invalid color depth: %d\n", mode_cmd->depth);
587                 return -EINVAL;
588         }
589
590         if (unlikely(format != surface->format)) {
591                 DRM_ERROR("Invalid surface format for requested mode.\n");
592                 return -EINVAL;
593         }
594
595         vfbs = kzalloc(sizeof(*vfbs), GFP_KERNEL);
596         if (!vfbs) {
597                 ret = -ENOMEM;
598                 goto out_err1;
599         }
600
601         ret = drm_framebuffer_init(dev, &vfbs->base.base,
602                                    &vmw_framebuffer_surface_funcs);
603         if (ret)
604                 goto out_err2;
605
606         if (!vmw_surface_reference(surface)) {
607                 DRM_ERROR("failed to reference surface %p\n", surface);
608                 goto out_err3;
609         }
610
611         /* XXX get the first 3 from the surface info */
612         vfbs->base.base.bits_per_pixel = mode_cmd->bpp;
613         vfbs->base.base.pitch = mode_cmd->pitch;
614         vfbs->base.base.depth = mode_cmd->depth;
615         vfbs->base.base.width = mode_cmd->width;
616         vfbs->base.base.height = mode_cmd->height;
617         vfbs->surface = surface;
618         vfbs->base.user_handle = mode_cmd->handle;
619         vfbs->master = drm_master_get(file_priv->master);
620
621         mutex_lock(&vmaster->fb_surf_mutex);
622         list_add_tail(&vfbs->head, &vmaster->fb_surf);
623         mutex_unlock(&vmaster->fb_surf_mutex);
624
625         *out = &vfbs->base;
626
627         return 0;
628
629 out_err3:
630         drm_framebuffer_cleanup(&vfbs->base.base);
631 out_err2:
632         kfree(vfbs);
633 out_err1:
634         return ret;
635 }
636
637 /*
638  * Dmabuf framebuffer code
639  */
640
641 #define vmw_framebuffer_to_vfbd(x) \
642         container_of(x, struct vmw_framebuffer_dmabuf, base.base)
643
644 struct vmw_framebuffer_dmabuf {
645         struct vmw_framebuffer base;
646         struct vmw_dma_buffer *buffer;
647 };
648
649 void vmw_framebuffer_dmabuf_destroy(struct drm_framebuffer *framebuffer)
650 {
651         struct vmw_framebuffer_dmabuf *vfbd =
652                 vmw_framebuffer_to_vfbd(framebuffer);
653
654         drm_framebuffer_cleanup(framebuffer);
655         vmw_dmabuf_unreference(&vfbd->buffer);
656         ttm_base_object_unref(&vfbd->base.user_obj);
657
658         kfree(vfbd);
659 }
660
661 static int do_dmabuf_dirty_ldu(struct vmw_private *dev_priv,
662                                struct vmw_framebuffer *framebuffer,
663                                unsigned flags, unsigned color,
664                                struct drm_clip_rect *clips,
665                                unsigned num_clips, int increment)
666 {
667         size_t fifo_size;
668         int i;
669
670         struct {
671                 uint32_t header;
672                 SVGAFifoCmdUpdate body;
673         } *cmd;
674
675         fifo_size = sizeof(*cmd) * num_clips;
676         cmd = vmw_fifo_reserve(dev_priv, fifo_size);
677         if (unlikely(cmd == NULL)) {
678                 DRM_ERROR("Fifo reserve failed.\n");
679                 return -ENOMEM;
680         }
681
682         memset(cmd, 0, fifo_size);
683         for (i = 0; i < num_clips; i++, clips += increment) {
684                 cmd[i].header = cpu_to_le32(SVGA_CMD_UPDATE);
685                 cmd[i].body.x = cpu_to_le32(clips->x1);
686                 cmd[i].body.y = cpu_to_le32(clips->y1);
687                 cmd[i].body.width = cpu_to_le32(clips->x2 - clips->x1);
688                 cmd[i].body.height = cpu_to_le32(clips->y2 - clips->y1);
689         }
690
691         vmw_fifo_commit(dev_priv, fifo_size);
692         return 0;
693 }
694
695 static int do_dmabuf_define_gmrfb(struct drm_file *file_priv,
696                                   struct vmw_private *dev_priv,
697                                   struct vmw_framebuffer *framebuffer)
698 {
699         int depth = framebuffer->base.depth;
700         size_t fifo_size;
701         int ret;
702
703         struct {
704                 uint32_t header;
705                 SVGAFifoCmdDefineGMRFB body;
706         } *cmd;
707
708         /* Emulate RGBA support, contrary to svga_reg.h this is not
709          * supported by hosts. This is only a problem if we are reading
710          * this value later and expecting what we uploaded back.
711          */
712         if (depth == 32)
713                 depth = 24;
714
715         fifo_size = sizeof(*cmd);
716         cmd = kmalloc(fifo_size, GFP_KERNEL);
717         if (unlikely(cmd == NULL)) {
718                 DRM_ERROR("Failed to allocate temporary cmd buffer.\n");
719                 return -ENOMEM;
720         }
721
722         memset(cmd, 0, fifo_size);
723         cmd->header = SVGA_CMD_DEFINE_GMRFB;
724         cmd->body.format.bitsPerPixel = framebuffer->base.bits_per_pixel;
725         cmd->body.format.colorDepth = depth;
726         cmd->body.format.reserved = 0;
727         cmd->body.bytesPerLine = framebuffer->base.pitch;
728         cmd->body.ptr.gmrId = framebuffer->user_handle;
729         cmd->body.ptr.offset = 0;
730
731         ret = vmw_execbuf_process(file_priv, dev_priv, NULL, cmd,
732                                   fifo_size, 0, NULL);
733
734         kfree(cmd);
735
736         return ret;
737 }
738
739 static int do_dmabuf_dirty_sou(struct drm_file *file_priv,
740                                struct vmw_private *dev_priv,
741                                struct vmw_framebuffer *framebuffer,
742                                unsigned flags, unsigned color,
743                                struct drm_clip_rect *clips,
744                                unsigned num_clips, int increment)
745 {
746         struct vmw_display_unit *units[VMWGFX_NUM_DISPLAY_UNITS];
747         struct drm_clip_rect *clips_ptr;
748         int i, k, num_units, ret;
749         struct drm_crtc *crtc;
750         size_t fifo_size;
751
752         struct {
753                 uint32_t header;
754                 SVGAFifoCmdBlitGMRFBToScreen body;
755         } *blits;
756
757         ret = do_dmabuf_define_gmrfb(file_priv, dev_priv, framebuffer);
758         if (unlikely(ret != 0))
759                 return ret; /* define_gmrfb prints warnings */
760
761         fifo_size = sizeof(*blits) * num_clips;
762         blits = kmalloc(fifo_size, GFP_KERNEL);
763         if (unlikely(blits == NULL)) {
764                 DRM_ERROR("Failed to allocate temporary cmd buffer.\n");
765                 return -ENOMEM;
766         }
767
768         num_units = 0;
769         list_for_each_entry(crtc, &dev_priv->dev->mode_config.crtc_list, head) {
770                 if (crtc->fb != &framebuffer->base)
771                         continue;
772                 units[num_units++] = vmw_crtc_to_du(crtc);
773         }
774
775         for (k = 0; k < num_units; k++) {
776                 struct vmw_display_unit *unit = units[k];
777                 int hit_num = 0;
778
779                 clips_ptr = clips;
780                 for (i = 0; i < num_clips; i++, clips_ptr += increment) {
781                         int clip_x1 = clips_ptr->x1 - unit->crtc.x;
782                         int clip_y1 = clips_ptr->y1 - unit->crtc.y;
783                         int clip_x2 = clips_ptr->x2 - unit->crtc.x;
784                         int clip_y2 = clips_ptr->y2 - unit->crtc.y;
785
786                         /* skip any crtcs that misses the clip region */
787                         if (clip_x1 >= unit->crtc.mode.hdisplay ||
788                             clip_y1 >= unit->crtc.mode.vdisplay ||
789                             clip_x2 <= 0 || clip_y2 <= 0)
790                                 continue;
791
792                         blits[hit_num].header = SVGA_CMD_BLIT_GMRFB_TO_SCREEN;
793                         blits[hit_num].body.destScreenId = unit->unit;
794                         blits[hit_num].body.srcOrigin.x = clips_ptr->x1;
795                         blits[hit_num].body.srcOrigin.y = clips_ptr->y1;
796                         blits[hit_num].body.destRect.left = clip_x1;
797                         blits[hit_num].body.destRect.top = clip_y1;
798                         blits[hit_num].body.destRect.right = clip_x2;
799                         blits[hit_num].body.destRect.bottom = clip_y2;
800                         hit_num++;
801                 }
802
803                 /* no clips hit the crtc */
804                 if (hit_num == 0)
805                         continue;
806
807                 fifo_size = sizeof(*blits) * hit_num;
808                 ret = vmw_execbuf_process(file_priv, dev_priv, NULL, blits,
809                                           fifo_size, 0, NULL);
810
811                 if (unlikely(ret != 0))
812                         break;
813         }
814
815         kfree(blits);
816
817         return ret;
818 }
819
820 int vmw_framebuffer_dmabuf_dirty(struct drm_framebuffer *framebuffer,
821                                  struct drm_file *file_priv,
822                                  unsigned flags, unsigned color,
823                                  struct drm_clip_rect *clips,
824                                  unsigned num_clips)
825 {
826         struct vmw_private *dev_priv = vmw_priv(framebuffer->dev);
827         struct vmw_master *vmaster = vmw_master(file_priv->master);
828         struct vmw_framebuffer_dmabuf *vfbd =
829                 vmw_framebuffer_to_vfbd(framebuffer);
830         struct drm_clip_rect norect;
831         int ret, increment = 1;
832
833         ret = ttm_read_lock(&vmaster->lock, true);
834         if (unlikely(ret != 0))
835                 return ret;
836
837         if (!num_clips) {
838                 num_clips = 1;
839                 clips = &norect;
840                 norect.x1 = norect.y1 = 0;
841                 norect.x2 = framebuffer->width;
842                 norect.y2 = framebuffer->height;
843         } else if (flags & DRM_MODE_FB_DIRTY_ANNOTATE_COPY) {
844                 num_clips /= 2;
845                 increment = 2;
846         }
847
848         if (dev_priv->ldu_priv) {
849                 ret = do_dmabuf_dirty_ldu(dev_priv, &vfbd->base,
850                                           flags, color,
851                                           clips, num_clips, increment);
852         } else {
853                 ret = do_dmabuf_dirty_sou(file_priv, dev_priv, &vfbd->base,
854                                           flags, color,
855                                           clips, num_clips, increment);
856         }
857
858         ttm_read_unlock(&vmaster->lock);
859         return ret;
860 }
861
862 static struct drm_framebuffer_funcs vmw_framebuffer_dmabuf_funcs = {
863         .destroy = vmw_framebuffer_dmabuf_destroy,
864         .dirty = vmw_framebuffer_dmabuf_dirty,
865         .create_handle = vmw_framebuffer_create_handle,
866 };
867
868 /**
869  * Pin the dmabuffer to the start of vram.
870  */
871 static int vmw_framebuffer_dmabuf_pin(struct vmw_framebuffer *vfb)
872 {
873         struct vmw_private *dev_priv = vmw_priv(vfb->base.dev);
874         struct vmw_framebuffer_dmabuf *vfbd =
875                 vmw_framebuffer_to_vfbd(&vfb->base);
876         int ret;
877
878         /* This code should not be used with screen objects */
879         BUG_ON(dev_priv->sou_priv);
880
881         vmw_overlay_pause_all(dev_priv);
882
883         ret = vmw_dmabuf_to_start_of_vram(dev_priv, vfbd->buffer, true, false);
884
885         vmw_overlay_resume_all(dev_priv);
886
887         WARN_ON(ret != 0);
888
889         return 0;
890 }
891
892 static int vmw_framebuffer_dmabuf_unpin(struct vmw_framebuffer *vfb)
893 {
894         struct vmw_private *dev_priv = vmw_priv(vfb->base.dev);
895         struct vmw_framebuffer_dmabuf *vfbd =
896                 vmw_framebuffer_to_vfbd(&vfb->base);
897
898         if (!vfbd->buffer) {
899                 WARN_ON(!vfbd->buffer);
900                 return 0;
901         }
902
903         return vmw_dmabuf_unpin(dev_priv, vfbd->buffer, false);
904 }
905
906 static int vmw_kms_new_framebuffer_dmabuf(struct vmw_private *dev_priv,
907                                           struct vmw_dma_buffer *dmabuf,
908                                           struct vmw_framebuffer **out,
909                                           const struct drm_mode_fb_cmd
910                                           *mode_cmd)
911
912 {
913         struct drm_device *dev = dev_priv->dev;
914         struct vmw_framebuffer_dmabuf *vfbd;
915         unsigned int requested_size;
916         int ret;
917
918         requested_size = mode_cmd->height * mode_cmd->pitch;
919         if (unlikely(requested_size > dmabuf->base.num_pages * PAGE_SIZE)) {
920                 DRM_ERROR("Screen buffer object size is too small "
921                           "for requested mode.\n");
922                 return -EINVAL;
923         }
924
925         /* Limited framebuffer color depth support for screen objects */
926         if (dev_priv->sou_priv) {
927                 switch (mode_cmd->depth) {
928                 case 32:
929                 case 24:
930                         /* Only support 32 bpp for 32 and 24 depth fbs */
931                         if (mode_cmd->bpp == 32)
932                                 break;
933
934                         DRM_ERROR("Invalid color depth/bbp: %d %d\n",
935                                   mode_cmd->depth, mode_cmd->bpp);
936                         return -EINVAL;
937                 case 16:
938                 case 15:
939                         /* Only support 16 bpp for 16 and 15 depth fbs */
940                         if (mode_cmd->bpp == 16)
941                                 break;
942
943                         DRM_ERROR("Invalid color depth/bbp: %d %d\n",
944                                   mode_cmd->depth, mode_cmd->bpp);
945                         return -EINVAL;
946                 default:
947                         DRM_ERROR("Invalid color depth: %d\n", mode_cmd->depth);
948                         return -EINVAL;
949                 }
950         }
951
952         vfbd = kzalloc(sizeof(*vfbd), GFP_KERNEL);
953         if (!vfbd) {
954                 ret = -ENOMEM;
955                 goto out_err1;
956         }
957
958         ret = drm_framebuffer_init(dev, &vfbd->base.base,
959                                    &vmw_framebuffer_dmabuf_funcs);
960         if (ret)
961                 goto out_err2;
962
963         if (!vmw_dmabuf_reference(dmabuf)) {
964                 DRM_ERROR("failed to reference dmabuf %p\n", dmabuf);
965                 goto out_err3;
966         }
967
968         vfbd->base.base.bits_per_pixel = mode_cmd->bpp;
969         vfbd->base.base.pitch = mode_cmd->pitch;
970         vfbd->base.base.depth = mode_cmd->depth;
971         vfbd->base.base.width = mode_cmd->width;
972         vfbd->base.base.height = mode_cmd->height;
973         if (!dev_priv->sou_priv) {
974                 vfbd->base.pin = vmw_framebuffer_dmabuf_pin;
975                 vfbd->base.unpin = vmw_framebuffer_dmabuf_unpin;
976         }
977         vfbd->base.dmabuf = true;
978         vfbd->buffer = dmabuf;
979         vfbd->base.user_handle = mode_cmd->handle;
980         *out = &vfbd->base;
981
982         return 0;
983
984 out_err3:
985         drm_framebuffer_cleanup(&vfbd->base.base);
986 out_err2:
987         kfree(vfbd);
988 out_err1:
989         return ret;
990 }
991
992 /*
993  * Generic Kernel modesetting functions
994  */
995
996 static struct drm_framebuffer *vmw_kms_fb_create(struct drm_device *dev,
997                                                  struct drm_file *file_priv,
998                                                  struct drm_mode_fb_cmd *mode_cmd)
999 {
1000         struct vmw_private *dev_priv = vmw_priv(dev);
1001         struct ttm_object_file *tfile = vmw_fpriv(file_priv)->tfile;
1002         struct vmw_framebuffer *vfb = NULL;
1003         struct vmw_surface *surface = NULL;
1004         struct vmw_dma_buffer *bo = NULL;
1005         struct ttm_base_object *user_obj;
1006         u64 required_size;
1007         int ret;
1008
1009         /**
1010          * This code should be conditioned on Screen Objects not being used.
1011          * If screen objects are used, we can allocate a GMR to hold the
1012          * requested framebuffer.
1013          */
1014
1015         required_size = mode_cmd->pitch * mode_cmd->height;
1016         if (unlikely(required_size > (u64) dev_priv->vram_size)) {
1017                 DRM_ERROR("VRAM size is too small for requested mode.\n");
1018                 return ERR_PTR(-ENOMEM);
1019         }
1020
1021         /*
1022          * Take a reference on the user object of the resource
1023          * backing the kms fb. This ensures that user-space handle
1024          * lookups on that resource will always work as long as
1025          * it's registered with a kms framebuffer. This is important,
1026          * since vmw_execbuf_process identifies resources in the
1027          * command stream using user-space handles.
1028          */
1029
1030         user_obj = ttm_base_object_lookup(tfile, mode_cmd->handle);
1031         if (unlikely(user_obj == NULL)) {
1032                 DRM_ERROR("Could not locate requested kms frame buffer.\n");
1033                 return ERR_PTR(-ENOENT);
1034         }
1035
1036         /**
1037          * End conditioned code.
1038          */
1039
1040         ret = vmw_user_surface_lookup_handle(dev_priv, tfile,
1041                                              mode_cmd->handle, &surface);
1042         if (ret)
1043                 goto try_dmabuf;
1044
1045         if (!surface->scanout)
1046                 goto err_not_scanout;
1047
1048         ret = vmw_kms_new_framebuffer_surface(dev_priv, file_priv, surface,
1049                                               &vfb, mode_cmd);
1050
1051         /* vmw_user_surface_lookup takes one ref so does new_fb */
1052         vmw_surface_unreference(&surface);
1053
1054         if (ret) {
1055                 DRM_ERROR("failed to create vmw_framebuffer: %i\n", ret);
1056                 ttm_base_object_unref(&user_obj);
1057                 return ERR_PTR(ret);
1058         } else
1059                 vfb->user_obj = user_obj;
1060         return &vfb->base;
1061
1062 try_dmabuf:
1063         DRM_INFO("%s: trying buffer\n", __func__);
1064
1065         ret = vmw_user_dmabuf_lookup(tfile, mode_cmd->handle, &bo);
1066         if (ret) {
1067                 DRM_ERROR("failed to find buffer: %i\n", ret);
1068                 return ERR_PTR(-ENOENT);
1069         }
1070
1071         ret = vmw_kms_new_framebuffer_dmabuf(dev_priv, bo, &vfb,
1072                                              mode_cmd);
1073
1074         /* vmw_user_dmabuf_lookup takes one ref so does new_fb */
1075         vmw_dmabuf_unreference(&bo);
1076
1077         if (ret) {
1078                 DRM_ERROR("failed to create vmw_framebuffer: %i\n", ret);
1079                 ttm_base_object_unref(&user_obj);
1080                 return ERR_PTR(ret);
1081         } else
1082                 vfb->user_obj = user_obj;
1083
1084         return &vfb->base;
1085
1086 err_not_scanout:
1087         DRM_ERROR("surface not marked as scanout\n");
1088         /* vmw_user_surface_lookup takes one ref */
1089         vmw_surface_unreference(&surface);
1090         ttm_base_object_unref(&user_obj);
1091
1092         return ERR_PTR(-EINVAL);
1093 }
1094
1095 static struct drm_mode_config_funcs vmw_kms_funcs = {
1096         .fb_create = vmw_kms_fb_create,
1097 };
1098
1099 int vmw_kms_present(struct vmw_private *dev_priv,
1100                     struct drm_file *file_priv,
1101                     struct vmw_framebuffer *vfb,
1102                     struct vmw_surface *surface,
1103                     uint32_t sid,
1104                     int32_t destX, int32_t destY,
1105                     struct drm_vmw_rect *clips,
1106                     uint32_t num_clips)
1107 {
1108         struct vmw_display_unit *units[VMWGFX_NUM_DISPLAY_UNITS];
1109         struct drm_crtc *crtc;
1110         size_t fifo_size;
1111         int i, k, num_units;
1112         int ret = 0; /* silence warning */
1113
1114         struct {
1115                 SVGA3dCmdHeader header;
1116                 SVGA3dCmdBlitSurfaceToScreen body;
1117         } *cmd;
1118         SVGASignedRect *blits;
1119
1120         num_units = 0;
1121         list_for_each_entry(crtc, &dev_priv->dev->mode_config.crtc_list, head) {
1122                 if (crtc->fb != &vfb->base)
1123                         continue;
1124                 units[num_units++] = vmw_crtc_to_du(crtc);
1125         }
1126
1127         BUG_ON(surface == NULL);
1128         BUG_ON(!clips || !num_clips);
1129
1130         fifo_size = sizeof(*cmd) + sizeof(SVGASignedRect) * num_clips;
1131         cmd = kmalloc(fifo_size, GFP_KERNEL);
1132         if (unlikely(cmd == NULL)) {
1133                 DRM_ERROR("Failed to allocate temporary fifo memory.\n");
1134                 return -ENOMEM;
1135         }
1136
1137         /* only need to do this once */
1138         memset(cmd, 0, fifo_size);
1139         cmd->header.id = cpu_to_le32(SVGA_3D_CMD_BLIT_SURFACE_TO_SCREEN);
1140         cmd->header.size = cpu_to_le32(fifo_size - sizeof(cmd->header));
1141
1142         cmd->body.srcRect.left = 0;
1143         cmd->body.srcRect.right = surface->sizes[0].width;
1144         cmd->body.srcRect.top = 0;
1145         cmd->body.srcRect.bottom = surface->sizes[0].height;
1146
1147         blits = (SVGASignedRect *)&cmd[1];
1148         for (i = 0; i < num_clips; i++) {
1149                 blits[i].left   = clips[i].x;
1150                 blits[i].right  = clips[i].x + clips[i].w;
1151                 blits[i].top    = clips[i].y;
1152                 blits[i].bottom = clips[i].y + clips[i].h;
1153         }
1154
1155         for (k = 0; k < num_units; k++) {
1156                 struct vmw_display_unit *unit = units[k];
1157                 int clip_x1 = destX - unit->crtc.x;
1158                 int clip_y1 = destY - unit->crtc.y;
1159                 int clip_x2 = clip_x1 + surface->sizes[0].width;
1160                 int clip_y2 = clip_y1 + surface->sizes[0].height;
1161
1162                 /* skip any crtcs that misses the clip region */
1163                 if (clip_x1 >= unit->crtc.mode.hdisplay ||
1164                     clip_y1 >= unit->crtc.mode.vdisplay ||
1165                     clip_x2 <= 0 || clip_y2 <= 0)
1166                         continue;
1167
1168                 /* need to reset sid as it is changed by execbuf */
1169                 cmd->body.srcImage.sid = sid;
1170
1171                 cmd->body.destScreenId = unit->unit;
1172
1173                 /*
1174                  * The blit command is a lot more resilient then the
1175                  * readback command when it comes to clip rects. So its
1176                  * okay to go out of bounds.
1177                  */
1178
1179                 cmd->body.destRect.left = clip_x1;
1180                 cmd->body.destRect.right = clip_x2;
1181                 cmd->body.destRect.top = clip_y1;
1182                 cmd->body.destRect.bottom = clip_y2;
1183
1184                 ret = vmw_execbuf_process(file_priv, dev_priv, NULL, cmd,
1185                                           fifo_size, 0, NULL);
1186
1187                 if (unlikely(ret != 0))
1188                         break;
1189         }
1190
1191         kfree(cmd);
1192
1193         return ret;
1194 }
1195
1196 int vmw_kms_readback(struct vmw_private *dev_priv,
1197                      struct drm_file *file_priv,
1198                      struct vmw_framebuffer *vfb,
1199                      struct drm_vmw_fence_rep __user *user_fence_rep,
1200                      struct drm_vmw_rect *clips,
1201                      uint32_t num_clips)
1202 {
1203         struct vmw_framebuffer_dmabuf *vfbd =
1204                 vmw_framebuffer_to_vfbd(&vfb->base);
1205         struct vmw_dma_buffer *dmabuf = vfbd->buffer;
1206         struct vmw_display_unit *units[VMWGFX_NUM_DISPLAY_UNITS];
1207         struct drm_crtc *crtc;
1208         size_t fifo_size;
1209         int i, k, ret, num_units, blits_pos;
1210
1211         struct {
1212                 uint32_t header;
1213                 SVGAFifoCmdDefineGMRFB body;
1214         } *cmd;
1215         struct {
1216                 uint32_t header;
1217                 SVGAFifoCmdBlitScreenToGMRFB body;
1218         } *blits;
1219
1220         num_units = 0;
1221         list_for_each_entry(crtc, &dev_priv->dev->mode_config.crtc_list, head) {
1222                 if (crtc->fb != &vfb->base)
1223                         continue;
1224                 units[num_units++] = vmw_crtc_to_du(crtc);
1225         }
1226
1227         BUG_ON(dmabuf == NULL);
1228         BUG_ON(!clips || !num_clips);
1229
1230         /* take a safe guess at fifo size */
1231         fifo_size = sizeof(*cmd) + sizeof(*blits) * num_clips * num_units;
1232         cmd = kmalloc(fifo_size, GFP_KERNEL);
1233         if (unlikely(cmd == NULL)) {
1234                 DRM_ERROR("Failed to allocate temporary fifo memory.\n");
1235                 return -ENOMEM;
1236         }
1237
1238         memset(cmd, 0, fifo_size);
1239         cmd->header = SVGA_CMD_DEFINE_GMRFB;
1240         cmd->body.format.bitsPerPixel = vfb->base.bits_per_pixel;
1241         cmd->body.format.colorDepth = vfb->base.depth;
1242         cmd->body.format.reserved = 0;
1243         cmd->body.bytesPerLine = vfb->base.pitch;
1244         cmd->body.ptr.gmrId = vfb->user_handle;
1245         cmd->body.ptr.offset = 0;
1246
1247         blits = (void *)&cmd[1];
1248         blits_pos = 0;
1249         for (i = 0; i < num_units; i++) {
1250                 struct drm_vmw_rect *c = clips;
1251                 for (k = 0; k < num_clips; k++, c++) {
1252                         /* transform clip coords to crtc origin based coords */
1253                         int clip_x1 = c->x - units[i]->crtc.x;
1254                         int clip_x2 = c->x - units[i]->crtc.x + c->w;
1255                         int clip_y1 = c->y - units[i]->crtc.y;
1256                         int clip_y2 = c->y - units[i]->crtc.y + c->h;
1257                         int dest_x = c->x;
1258                         int dest_y = c->y;
1259
1260                         /* compensate for clipping, we negate
1261                          * a negative number and add that.
1262                          */
1263                         if (clip_x1 < 0)
1264                                 dest_x += -clip_x1;
1265                         if (clip_y1 < 0)
1266                                 dest_y += -clip_y1;
1267
1268                         /* clip */
1269                         clip_x1 = max(clip_x1, 0);
1270                         clip_y1 = max(clip_y1, 0);
1271                         clip_x2 = min(clip_x2, units[i]->crtc.mode.hdisplay);
1272                         clip_y2 = min(clip_y2, units[i]->crtc.mode.vdisplay);
1273
1274                         /* and cull any rects that misses the crtc */
1275                         if (clip_x1 >= units[i]->crtc.mode.hdisplay ||
1276                             clip_y1 >= units[i]->crtc.mode.vdisplay ||
1277                             clip_x2 <= 0 || clip_y2 <= 0)
1278                                 continue;
1279
1280                         blits[blits_pos].header = SVGA_CMD_BLIT_SCREEN_TO_GMRFB;
1281                         blits[blits_pos].body.srcScreenId = units[i]->unit;
1282                         blits[blits_pos].body.destOrigin.x = dest_x;
1283                         blits[blits_pos].body.destOrigin.y = dest_y;
1284
1285                         blits[blits_pos].body.srcRect.left = clip_x1;
1286                         blits[blits_pos].body.srcRect.top = clip_y1;
1287                         blits[blits_pos].body.srcRect.right = clip_x2;
1288                         blits[blits_pos].body.srcRect.bottom = clip_y2;
1289                         blits_pos++;
1290                 }
1291         }
1292         /* reset size here and use calculated exact size from loops */
1293         fifo_size = sizeof(*cmd) + sizeof(*blits) * blits_pos;
1294
1295         ret = vmw_execbuf_process(file_priv, dev_priv, NULL, cmd, fifo_size,
1296                                   0, user_fence_rep);
1297
1298         kfree(cmd);
1299
1300         return ret;
1301 }
1302
1303 int vmw_kms_init(struct vmw_private *dev_priv)
1304 {
1305         struct drm_device *dev = dev_priv->dev;
1306         int ret;
1307
1308         drm_mode_config_init(dev);
1309         dev->mode_config.funcs = &vmw_kms_funcs;
1310         dev->mode_config.min_width = 1;
1311         dev->mode_config.min_height = 1;
1312         /* assumed largest fb size */
1313         dev->mode_config.max_width = 8192;
1314         dev->mode_config.max_height = 8192;
1315
1316         ret = vmw_kms_init_screen_object_display(dev_priv);
1317         if (ret) /* Fallback */
1318                 (void)vmw_kms_init_legacy_display_system(dev_priv);
1319
1320         return 0;
1321 }
1322
1323 int vmw_kms_close(struct vmw_private *dev_priv)
1324 {
1325         /*
1326          * Docs says we should take the lock before calling this function
1327          * but since it destroys encoders and our destructor calls
1328          * drm_encoder_cleanup which takes the lock we deadlock.
1329          */
1330         drm_mode_config_cleanup(dev_priv->dev);
1331         if (dev_priv->sou_priv)
1332                 vmw_kms_close_screen_object_display(dev_priv);
1333         else
1334                 vmw_kms_close_legacy_display_system(dev_priv);
1335         return 0;
1336 }
1337
1338 int vmw_kms_cursor_bypass_ioctl(struct drm_device *dev, void *data,
1339                                 struct drm_file *file_priv)
1340 {
1341         struct drm_vmw_cursor_bypass_arg *arg = data;
1342         struct vmw_display_unit *du;
1343         struct drm_mode_object *obj;
1344         struct drm_crtc *crtc;
1345         int ret = 0;
1346
1347
1348         mutex_lock(&dev->mode_config.mutex);
1349         if (arg->flags & DRM_VMW_CURSOR_BYPASS_ALL) {
1350
1351                 list_for_each_entry(crtc, &dev->mode_config.crtc_list, head) {
1352                         du = vmw_crtc_to_du(crtc);
1353                         du->hotspot_x = arg->xhot;
1354                         du->hotspot_y = arg->yhot;
1355                 }
1356
1357                 mutex_unlock(&dev->mode_config.mutex);
1358                 return 0;
1359         }
1360
1361         obj = drm_mode_object_find(dev, arg->crtc_id, DRM_MODE_OBJECT_CRTC);
1362         if (!obj) {
1363                 ret = -EINVAL;
1364                 goto out;
1365         }
1366
1367         crtc = obj_to_crtc(obj);
1368         du = vmw_crtc_to_du(crtc);
1369
1370         du->hotspot_x = arg->xhot;
1371         du->hotspot_y = arg->yhot;
1372
1373 out:
1374         mutex_unlock(&dev->mode_config.mutex);
1375
1376         return ret;
1377 }
1378
1379 int vmw_kms_write_svga(struct vmw_private *vmw_priv,
1380                         unsigned width, unsigned height, unsigned pitch,
1381                         unsigned bpp, unsigned depth)
1382 {
1383         if (vmw_priv->capabilities & SVGA_CAP_PITCHLOCK)
1384                 vmw_write(vmw_priv, SVGA_REG_PITCHLOCK, pitch);
1385         else if (vmw_fifo_have_pitchlock(vmw_priv))
1386                 iowrite32(pitch, vmw_priv->mmio_virt + SVGA_FIFO_PITCHLOCK);
1387         vmw_write(vmw_priv, SVGA_REG_WIDTH, width);
1388         vmw_write(vmw_priv, SVGA_REG_HEIGHT, height);
1389         vmw_write(vmw_priv, SVGA_REG_BITS_PER_PIXEL, bpp);
1390
1391         if (vmw_read(vmw_priv, SVGA_REG_DEPTH) != depth) {
1392                 DRM_ERROR("Invalid depth %u for %u bpp, host expects %u\n",
1393                           depth, bpp, vmw_read(vmw_priv, SVGA_REG_DEPTH));
1394                 return -EINVAL;
1395         }
1396
1397         return 0;
1398 }
1399
1400 int vmw_kms_save_vga(struct vmw_private *vmw_priv)
1401 {
1402         struct vmw_vga_topology_state *save;
1403         uint32_t i;
1404
1405         vmw_priv->vga_width = vmw_read(vmw_priv, SVGA_REG_WIDTH);
1406         vmw_priv->vga_height = vmw_read(vmw_priv, SVGA_REG_HEIGHT);
1407         vmw_priv->vga_bpp = vmw_read(vmw_priv, SVGA_REG_BITS_PER_PIXEL);
1408         if (vmw_priv->capabilities & SVGA_CAP_PITCHLOCK)
1409                 vmw_priv->vga_pitchlock =
1410                   vmw_read(vmw_priv, SVGA_REG_PITCHLOCK);
1411         else if (vmw_fifo_have_pitchlock(vmw_priv))
1412                 vmw_priv->vga_pitchlock = ioread32(vmw_priv->mmio_virt +
1413                                                        SVGA_FIFO_PITCHLOCK);
1414
1415         if (!(vmw_priv->capabilities & SVGA_CAP_DISPLAY_TOPOLOGY))
1416                 return 0;
1417
1418         vmw_priv->num_displays = vmw_read(vmw_priv,
1419                                           SVGA_REG_NUM_GUEST_DISPLAYS);
1420
1421         if (vmw_priv->num_displays == 0)
1422                 vmw_priv->num_displays = 1;
1423
1424         for (i = 0; i < vmw_priv->num_displays; ++i) {
1425                 save = &vmw_priv->vga_save[i];
1426                 vmw_write(vmw_priv, SVGA_REG_DISPLAY_ID, i);
1427                 save->primary = vmw_read(vmw_priv, SVGA_REG_DISPLAY_IS_PRIMARY);
1428                 save->pos_x = vmw_read(vmw_priv, SVGA_REG_DISPLAY_POSITION_X);
1429                 save->pos_y = vmw_read(vmw_priv, SVGA_REG_DISPLAY_POSITION_Y);
1430                 save->width = vmw_read(vmw_priv, SVGA_REG_DISPLAY_WIDTH);
1431                 save->height = vmw_read(vmw_priv, SVGA_REG_DISPLAY_HEIGHT);
1432                 vmw_write(vmw_priv, SVGA_REG_DISPLAY_ID, SVGA_ID_INVALID);
1433                 if (i == 0 && vmw_priv->num_displays == 1 &&
1434                     save->width == 0 && save->height == 0) {
1435
1436                         /*
1437                          * It should be fairly safe to assume that these
1438                          * values are uninitialized.
1439                          */
1440
1441                         save->width = vmw_priv->vga_width - save->pos_x;
1442                         save->height = vmw_priv->vga_height - save->pos_y;
1443                 }
1444         }
1445
1446         return 0;
1447 }
1448
1449 int vmw_kms_restore_vga(struct vmw_private *vmw_priv)
1450 {
1451         struct vmw_vga_topology_state *save;
1452         uint32_t i;
1453
1454         vmw_write(vmw_priv, SVGA_REG_WIDTH, vmw_priv->vga_width);
1455         vmw_write(vmw_priv, SVGA_REG_HEIGHT, vmw_priv->vga_height);
1456         vmw_write(vmw_priv, SVGA_REG_BITS_PER_PIXEL, vmw_priv->vga_bpp);
1457         if (vmw_priv->capabilities & SVGA_CAP_PITCHLOCK)
1458                 vmw_write(vmw_priv, SVGA_REG_PITCHLOCK,
1459                           vmw_priv->vga_pitchlock);
1460         else if (vmw_fifo_have_pitchlock(vmw_priv))
1461                 iowrite32(vmw_priv->vga_pitchlock,
1462                           vmw_priv->mmio_virt + SVGA_FIFO_PITCHLOCK);
1463
1464         if (!(vmw_priv->capabilities & SVGA_CAP_DISPLAY_TOPOLOGY))
1465                 return 0;
1466
1467         for (i = 0; i < vmw_priv->num_displays; ++i) {
1468                 save = &vmw_priv->vga_save[i];
1469                 vmw_write(vmw_priv, SVGA_REG_DISPLAY_ID, i);
1470                 vmw_write(vmw_priv, SVGA_REG_DISPLAY_IS_PRIMARY, save->primary);
1471                 vmw_write(vmw_priv, SVGA_REG_DISPLAY_POSITION_X, save->pos_x);
1472                 vmw_write(vmw_priv, SVGA_REG_DISPLAY_POSITION_Y, save->pos_y);
1473                 vmw_write(vmw_priv, SVGA_REG_DISPLAY_WIDTH, save->width);
1474                 vmw_write(vmw_priv, SVGA_REG_DISPLAY_HEIGHT, save->height);
1475                 vmw_write(vmw_priv, SVGA_REG_DISPLAY_ID, SVGA_ID_INVALID);
1476         }
1477
1478         return 0;
1479 }
1480
1481 bool vmw_kms_validate_mode_vram(struct vmw_private *dev_priv,
1482                                 uint32_t pitch,
1483                                 uint32_t height)
1484 {
1485         return ((u64) pitch * (u64) height) < (u64) dev_priv->vram_size;
1486 }
1487
1488
1489 /**
1490  * Function called by DRM code called with vbl_lock held.
1491  */
1492 u32 vmw_get_vblank_counter(struct drm_device *dev, int crtc)
1493 {
1494         return 0;
1495 }
1496
1497 /**
1498  * Function called by DRM code called with vbl_lock held.
1499  */
1500 int vmw_enable_vblank(struct drm_device *dev, int crtc)
1501 {
1502         return -ENOSYS;
1503 }
1504
1505 /**
1506  * Function called by DRM code called with vbl_lock held.
1507  */
1508 void vmw_disable_vblank(struct drm_device *dev, int crtc)
1509 {
1510 }
1511
1512
1513 /*
1514  * Small shared kms functions.
1515  */
1516
1517 int vmw_du_update_layout(struct vmw_private *dev_priv, unsigned num,
1518                          struct drm_vmw_rect *rects)
1519 {
1520         struct drm_device *dev = dev_priv->dev;
1521         struct vmw_display_unit *du;
1522         struct drm_connector *con;
1523
1524         mutex_lock(&dev->mode_config.mutex);
1525
1526 #if 0
1527         {
1528                 unsigned int i;
1529
1530                 DRM_INFO("%s: new layout ", __func__);
1531                 for (i = 0; i < num; i++)
1532                         DRM_INFO("(%i, %i %ux%u) ", rects[i].x, rects[i].y,
1533                                  rects[i].w, rects[i].h);
1534                 DRM_INFO("\n");
1535         }
1536 #endif
1537
1538         list_for_each_entry(con, &dev->mode_config.connector_list, head) {
1539                 du = vmw_connector_to_du(con);
1540                 if (num > du->unit) {
1541                         du->pref_width = rects[du->unit].w;
1542                         du->pref_height = rects[du->unit].h;
1543                         du->pref_active = true;
1544                         du->gui_x = rects[du->unit].x;
1545                         du->gui_y = rects[du->unit].y;
1546                 } else {
1547                         du->pref_width = 800;
1548                         du->pref_height = 600;
1549                         du->pref_active = false;
1550                 }
1551                 con->status = vmw_du_connector_detect(con, true);
1552         }
1553
1554         mutex_unlock(&dev->mode_config.mutex);
1555
1556         return 0;
1557 }
1558
1559 void vmw_du_crtc_save(struct drm_crtc *crtc)
1560 {
1561 }
1562
1563 void vmw_du_crtc_restore(struct drm_crtc *crtc)
1564 {
1565 }
1566
1567 void vmw_du_crtc_gamma_set(struct drm_crtc *crtc,
1568                            u16 *r, u16 *g, u16 *b,
1569                            uint32_t start, uint32_t size)
1570 {
1571         struct vmw_private *dev_priv = vmw_priv(crtc->dev);
1572         int i;
1573
1574         for (i = 0; i < size; i++) {
1575                 DRM_DEBUG("%d r/g/b = 0x%04x / 0x%04x / 0x%04x\n", i,
1576                           r[i], g[i], b[i]);
1577                 vmw_write(dev_priv, SVGA_PALETTE_BASE + i * 3 + 0, r[i] >> 8);
1578                 vmw_write(dev_priv, SVGA_PALETTE_BASE + i * 3 + 1, g[i] >> 8);
1579                 vmw_write(dev_priv, SVGA_PALETTE_BASE + i * 3 + 2, b[i] >> 8);
1580         }
1581 }
1582
1583 void vmw_du_connector_dpms(struct drm_connector *connector, int mode)
1584 {
1585 }
1586
1587 void vmw_du_connector_save(struct drm_connector *connector)
1588 {
1589 }
1590
1591 void vmw_du_connector_restore(struct drm_connector *connector)
1592 {
1593 }
1594
1595 enum drm_connector_status
1596 vmw_du_connector_detect(struct drm_connector *connector, bool force)
1597 {
1598         uint32_t num_displays;
1599         struct drm_device *dev = connector->dev;
1600         struct vmw_private *dev_priv = vmw_priv(dev);
1601         struct vmw_display_unit *du = vmw_connector_to_du(connector);
1602
1603         mutex_lock(&dev_priv->hw_mutex);
1604         num_displays = vmw_read(dev_priv, SVGA_REG_NUM_DISPLAYS);
1605         mutex_unlock(&dev_priv->hw_mutex);
1606
1607         return ((vmw_connector_to_du(connector)->unit < num_displays &&
1608                  du->pref_active) ?
1609                 connector_status_connected : connector_status_disconnected);
1610 }
1611
1612 static struct drm_display_mode vmw_kms_connector_builtin[] = {
1613         /* 640x480@60Hz */
1614         { DRM_MODE("640x480", DRM_MODE_TYPE_DRIVER, 25175, 640, 656,
1615                    752, 800, 0, 480, 489, 492, 525, 0,
1616                    DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_NVSYNC) },
1617         /* 800x600@60Hz */
1618         { DRM_MODE("800x600", DRM_MODE_TYPE_DRIVER, 40000, 800, 840,
1619                    968, 1056, 0, 600, 601, 605, 628, 0,
1620                    DRM_MODE_FLAG_PHSYNC | DRM_MODE_FLAG_PVSYNC) },
1621         /* 1024x768@60Hz */
1622         { DRM_MODE("1024x768", DRM_MODE_TYPE_DRIVER, 65000, 1024, 1048,
1623                    1184, 1344, 0, 768, 771, 777, 806, 0,
1624                    DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_NVSYNC) },
1625         /* 1152x864@75Hz */
1626         { DRM_MODE("1152x864", DRM_MODE_TYPE_DRIVER, 108000, 1152, 1216,
1627                    1344, 1600, 0, 864, 865, 868, 900, 0,
1628                    DRM_MODE_FLAG_PHSYNC | DRM_MODE_FLAG_PVSYNC) },
1629         /* 1280x768@60Hz */
1630         { DRM_MODE("1280x768", DRM_MODE_TYPE_DRIVER, 79500, 1280, 1344,
1631                    1472, 1664, 0, 768, 771, 778, 798, 0,
1632                    DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_PVSYNC) },
1633         /* 1280x800@60Hz */
1634         { DRM_MODE("1280x800", DRM_MODE_TYPE_DRIVER, 83500, 1280, 1352,
1635                    1480, 1680, 0, 800, 803, 809, 831, 0,
1636                    DRM_MODE_FLAG_PHSYNC | DRM_MODE_FLAG_NVSYNC) },
1637         /* 1280x960@60Hz */
1638         { DRM_MODE("1280x960", DRM_MODE_TYPE_DRIVER, 108000, 1280, 1376,
1639                    1488, 1800, 0, 960, 961, 964, 1000, 0,
1640                    DRM_MODE_FLAG_PHSYNC | DRM_MODE_FLAG_PVSYNC) },
1641         /* 1280x1024@60Hz */
1642         { DRM_MODE("1280x1024", DRM_MODE_TYPE_DRIVER, 108000, 1280, 1328,
1643                    1440, 1688, 0, 1024, 1025, 1028, 1066, 0,
1644                    DRM_MODE_FLAG_PHSYNC | DRM_MODE_FLAG_PVSYNC) },
1645         /* 1360x768@60Hz */
1646         { DRM_MODE("1360x768", DRM_MODE_TYPE_DRIVER, 85500, 1360, 1424,
1647                    1536, 1792, 0, 768, 771, 777, 795, 0,
1648                    DRM_MODE_FLAG_PHSYNC | DRM_MODE_FLAG_PVSYNC) },
1649         /* 1440x1050@60Hz */
1650         { DRM_MODE("1400x1050", DRM_MODE_TYPE_DRIVER, 121750, 1400, 1488,
1651                    1632, 1864, 0, 1050, 1053, 1057, 1089, 0,
1652                    DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_PVSYNC) },
1653         /* 1440x900@60Hz */
1654         { DRM_MODE("1440x900", DRM_MODE_TYPE_DRIVER, 106500, 1440, 1520,
1655                    1672, 1904, 0, 900, 903, 909, 934, 0,
1656                    DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_PVSYNC) },
1657         /* 1600x1200@60Hz */
1658         { DRM_MODE("1600x1200", DRM_MODE_TYPE_DRIVER, 162000, 1600, 1664,
1659                    1856, 2160, 0, 1200, 1201, 1204, 1250, 0,
1660                    DRM_MODE_FLAG_PHSYNC | DRM_MODE_FLAG_PVSYNC) },
1661         /* 1680x1050@60Hz */
1662         { DRM_MODE("1680x1050", DRM_MODE_TYPE_DRIVER, 146250, 1680, 1784,
1663                    1960, 2240, 0, 1050, 1053, 1059, 1089, 0,
1664                    DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_PVSYNC) },
1665         /* 1792x1344@60Hz */
1666         { DRM_MODE("1792x1344", DRM_MODE_TYPE_DRIVER, 204750, 1792, 1920,
1667                    2120, 2448, 0, 1344, 1345, 1348, 1394, 0,
1668                    DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_PVSYNC) },
1669         /* 1853x1392@60Hz */
1670         { DRM_MODE("1856x1392", DRM_MODE_TYPE_DRIVER, 218250, 1856, 1952,
1671                    2176, 2528, 0, 1392, 1393, 1396, 1439, 0,
1672                    DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_PVSYNC) },
1673         /* 1920x1200@60Hz */
1674         { DRM_MODE("1920x1200", DRM_MODE_TYPE_DRIVER, 193250, 1920, 2056,
1675                    2256, 2592, 0, 1200, 1203, 1209, 1245, 0,
1676                    DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_PVSYNC) },
1677         /* 1920x1440@60Hz */
1678         { DRM_MODE("1920x1440", DRM_MODE_TYPE_DRIVER, 234000, 1920, 2048,
1679                    2256, 2600, 0, 1440, 1441, 1444, 1500, 0,
1680                    DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_PVSYNC) },
1681         /* 2560x1600@60Hz */
1682         { DRM_MODE("2560x1600", DRM_MODE_TYPE_DRIVER, 348500, 2560, 2752,
1683                    3032, 3504, 0, 1600, 1603, 1609, 1658, 0,
1684                    DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_PVSYNC) },
1685         /* Terminate */
1686         { DRM_MODE("", 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0) },
1687 };
1688
1689 /**
1690  * vmw_guess_mode_timing - Provide fake timings for a
1691  * 60Hz vrefresh mode.
1692  *
1693  * @mode - Pointer to a struct drm_display_mode with hdisplay and vdisplay
1694  * members filled in.
1695  */
1696 static void vmw_guess_mode_timing(struct drm_display_mode *mode)
1697 {
1698         mode->hsync_start = mode->hdisplay + 50;
1699         mode->hsync_end = mode->hsync_start + 50;
1700         mode->htotal = mode->hsync_end + 50;
1701
1702         mode->vsync_start = mode->vdisplay + 50;
1703         mode->vsync_end = mode->vsync_start + 50;
1704         mode->vtotal = mode->vsync_end + 50;
1705
1706         mode->clock = (u32)mode->htotal * (u32)mode->vtotal / 100 * 6;
1707         mode->vrefresh = drm_mode_vrefresh(mode);
1708 }
1709
1710
1711 int vmw_du_connector_fill_modes(struct drm_connector *connector,
1712                                 uint32_t max_width, uint32_t max_height)
1713 {
1714         struct vmw_display_unit *du = vmw_connector_to_du(connector);
1715         struct drm_device *dev = connector->dev;
1716         struct vmw_private *dev_priv = vmw_priv(dev);
1717         struct drm_display_mode *mode = NULL;
1718         struct drm_display_mode *bmode;
1719         struct drm_display_mode prefmode = { DRM_MODE("preferred",
1720                 DRM_MODE_TYPE_DRIVER | DRM_MODE_TYPE_PREFERRED,
1721                 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
1722                 DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_PVSYNC)
1723         };
1724         int i;
1725
1726         /* Add preferred mode */
1727         {
1728                 mode = drm_mode_duplicate(dev, &prefmode);
1729                 if (!mode)
1730                         return 0;
1731                 mode->hdisplay = du->pref_width;
1732                 mode->vdisplay = du->pref_height;
1733                 vmw_guess_mode_timing(mode);
1734
1735                 if (vmw_kms_validate_mode_vram(dev_priv, mode->hdisplay * 2,
1736                                                mode->vdisplay)) {
1737                         drm_mode_probed_add(connector, mode);
1738                 } else {
1739                         drm_mode_destroy(dev, mode);
1740                         mode = NULL;
1741                 }
1742
1743                 if (du->pref_mode) {
1744                         list_del_init(&du->pref_mode->head);
1745                         drm_mode_destroy(dev, du->pref_mode);
1746                 }
1747
1748                 /* mode might be null here, this is intended */
1749                 du->pref_mode = mode;
1750         }
1751
1752         for (i = 0; vmw_kms_connector_builtin[i].type != 0; i++) {
1753                 bmode = &vmw_kms_connector_builtin[i];
1754                 if (bmode->hdisplay > max_width ||
1755                     bmode->vdisplay > max_height)
1756                         continue;
1757
1758                 if (!vmw_kms_validate_mode_vram(dev_priv, bmode->hdisplay * 2,
1759                                                 bmode->vdisplay))
1760                         continue;
1761
1762                 mode = drm_mode_duplicate(dev, bmode);
1763                 if (!mode)
1764                         return 0;
1765                 mode->vrefresh = drm_mode_vrefresh(mode);
1766
1767                 drm_mode_probed_add(connector, mode);
1768         }
1769
1770         /* Move the prefered mode first, help apps pick the right mode. */
1771         if (du->pref_mode)
1772                 list_move(&du->pref_mode->head, &connector->probed_modes);
1773
1774         drm_mode_connector_list_update(connector);
1775
1776         return 1;
1777 }
1778
1779 int vmw_du_connector_set_property(struct drm_connector *connector,
1780                                   struct drm_property *property,
1781                                   uint64_t val)
1782 {
1783         return 0;
1784 }
1785
1786
1787 int vmw_kms_update_layout_ioctl(struct drm_device *dev, void *data,
1788                                 struct drm_file *file_priv)
1789 {
1790         struct vmw_private *dev_priv = vmw_priv(dev);
1791         struct drm_vmw_update_layout_arg *arg =
1792                 (struct drm_vmw_update_layout_arg *)data;
1793         struct vmw_master *vmaster = vmw_master(file_priv->master);
1794         void __user *user_rects;
1795         struct drm_vmw_rect *rects;
1796         unsigned rects_size;
1797         int ret;
1798         int i;
1799         struct drm_mode_config *mode_config = &dev->mode_config;
1800
1801         ret = ttm_read_lock(&vmaster->lock, true);
1802         if (unlikely(ret != 0))
1803                 return ret;
1804
1805         if (!arg->num_outputs) {
1806                 struct drm_vmw_rect def_rect = {0, 0, 800, 600};
1807                 vmw_du_update_layout(dev_priv, 1, &def_rect);
1808                 goto out_unlock;
1809         }
1810
1811         rects_size = arg->num_outputs * sizeof(struct drm_vmw_rect);
1812         rects = kcalloc(arg->num_outputs, sizeof(struct drm_vmw_rect),
1813                         GFP_KERNEL);
1814         if (unlikely(!rects)) {
1815                 ret = -ENOMEM;
1816                 goto out_unlock;
1817         }
1818
1819         user_rects = (void __user *)(unsigned long)arg->rects;
1820         ret = copy_from_user(rects, user_rects, rects_size);
1821         if (unlikely(ret != 0)) {
1822                 DRM_ERROR("Failed to get rects.\n");
1823                 ret = -EFAULT;
1824                 goto out_free;
1825         }
1826
1827         for (i = 0; i < arg->num_outputs; ++i) {
1828                 if (rects[i].x < 0 ||
1829                     rects[i].y < 0 ||
1830                     rects[i].x + rects[i].w > mode_config->max_width ||
1831                     rects[i].y + rects[i].h > mode_config->max_height) {
1832                         DRM_ERROR("Invalid GUI layout.\n");
1833                         ret = -EINVAL;
1834                         goto out_free;
1835                 }
1836         }
1837
1838         vmw_du_update_layout(dev_priv, arg->num_outputs, rects);
1839
1840 out_free:
1841         kfree(rects);
1842 out_unlock:
1843         ttm_read_unlock(&vmaster->lock);
1844         return ret;
1845 }