drm/nouveau: when bailing out of a pushbuf ioctl, do not remove previous fence
[pandora-kernel.git] / drivers / gpu / drm / nouveau / nouveau_gem.c
1 /*
2  * Copyright (C) 2008 Ben Skeggs.
3  * All Rights Reserved.
4  *
5  * Permission is hereby granted, free of charge, to any person obtaining
6  * a copy of this software and associated documentation files (the
7  * "Software"), to deal in the Software without restriction, including
8  * without limitation the rights to use, copy, modify, merge, publish,
9  * distribute, sublicense, and/or sell copies of the Software, and to
10  * permit persons to whom the Software is furnished to do so, subject to
11  * the following conditions:
12  *
13  * The above copyright notice and this permission notice (including the
14  * next paragraph) shall be included in all copies or substantial
15  * portions of the Software.
16  *
17  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
18  * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
19  * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
20  * IN NO EVENT SHALL THE COPYRIGHT OWNER(S) AND/OR ITS SUPPLIERS BE
21  * LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
22  * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
23  * WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
24  *
25  */
26 #include "drmP.h"
27 #include "drm.h"
28
29 #include "nouveau_drv.h"
30 #include "nouveau_drm.h"
31 #include "nouveau_dma.h"
32
33 #define nouveau_gem_pushbuf_sync(chan) 0
34
35 int
36 nouveau_gem_object_new(struct drm_gem_object *gem)
37 {
38         return 0;
39 }
40
41 void
42 nouveau_gem_object_del(struct drm_gem_object *gem)
43 {
44         struct nouveau_bo *nvbo = gem->driver_private;
45         struct ttm_buffer_object *bo = &nvbo->bo;
46
47         if (!nvbo)
48                 return;
49         nvbo->gem = NULL;
50
51         if (unlikely(nvbo->pin_refcnt)) {
52                 nvbo->pin_refcnt = 1;
53                 nouveau_bo_unpin(nvbo);
54         }
55
56         ttm_bo_unref(&bo);
57
58         drm_gem_object_release(gem);
59         kfree(gem);
60 }
61
62 int
63 nouveau_gem_object_open(struct drm_gem_object *gem, struct drm_file *file_priv)
64 {
65         struct nouveau_fpriv *fpriv = nouveau_fpriv(file_priv);
66         struct nouveau_bo *nvbo = nouveau_gem_object(gem);
67         struct nouveau_vma *vma;
68         int ret;
69
70         if (!fpriv->vm)
71                 return 0;
72
73         ret = ttm_bo_reserve(&nvbo->bo, false, false, false, 0);
74         if (ret)
75                 return ret;
76
77         vma = nouveau_bo_vma_find(nvbo, fpriv->vm);
78         if (!vma) {
79                 vma = kzalloc(sizeof(*vma), GFP_KERNEL);
80                 if (!vma) {
81                         ret = -ENOMEM;
82                         goto out;
83                 }
84
85                 ret = nouveau_bo_vma_add(nvbo, fpriv->vm, vma);
86                 if (ret) {
87                         kfree(vma);
88                         goto out;
89                 }
90         } else {
91                 vma->refcount++;
92         }
93
94 out:
95         ttm_bo_unreserve(&nvbo->bo);
96         return ret;
97 }
98
99 void
100 nouveau_gem_object_close(struct drm_gem_object *gem, struct drm_file *file_priv)
101 {
102         struct nouveau_fpriv *fpriv = nouveau_fpriv(file_priv);
103         struct nouveau_bo *nvbo = nouveau_gem_object(gem);
104         struct nouveau_vma *vma;
105         int ret;
106
107         if (!fpriv->vm)
108                 return;
109
110         ret = ttm_bo_reserve(&nvbo->bo, false, false, false, 0);
111         if (ret)
112                 return;
113
114         vma = nouveau_bo_vma_find(nvbo, fpriv->vm);
115         if (vma) {
116                 if (--vma->refcount == 0) {
117                         nouveau_bo_vma_del(nvbo, vma);
118                         kfree(vma);
119                 }
120         }
121         ttm_bo_unreserve(&nvbo->bo);
122 }
123
124 int
125 nouveau_gem_new(struct drm_device *dev, int size, int align, uint32_t domain,
126                 uint32_t tile_mode, uint32_t tile_flags,
127                 struct nouveau_bo **pnvbo)
128 {
129         struct drm_nouveau_private *dev_priv = dev->dev_private;
130         struct nouveau_bo *nvbo;
131         u32 flags = 0;
132         int ret;
133
134         if (domain & NOUVEAU_GEM_DOMAIN_VRAM)
135                 flags |= TTM_PL_FLAG_VRAM;
136         if (domain & NOUVEAU_GEM_DOMAIN_GART)
137                 flags |= TTM_PL_FLAG_TT;
138         if (!flags || domain & NOUVEAU_GEM_DOMAIN_CPU)
139                 flags |= TTM_PL_FLAG_SYSTEM;
140
141         ret = nouveau_bo_new(dev, size, align, flags, tile_mode,
142                              tile_flags, pnvbo);
143         if (ret)
144                 return ret;
145         nvbo = *pnvbo;
146
147         /* we restrict allowed domains on nv50+ to only the types
148          * that were requested at creation time.  not possibly on
149          * earlier chips without busting the ABI.
150          */
151         nvbo->valid_domains = NOUVEAU_GEM_DOMAIN_VRAM |
152                               NOUVEAU_GEM_DOMAIN_GART;
153         if (dev_priv->card_type >= NV_50)
154                 nvbo->valid_domains &= domain;
155
156         nvbo->gem = drm_gem_object_alloc(dev, nvbo->bo.mem.size);
157         if (!nvbo->gem) {
158                 nouveau_bo_ref(NULL, pnvbo);
159                 return -ENOMEM;
160         }
161
162         nvbo->bo.persistent_swap_storage = nvbo->gem->filp;
163         nvbo->gem->driver_private = nvbo;
164         return 0;
165 }
166
167 static int
168 nouveau_gem_info(struct drm_file *file_priv, struct drm_gem_object *gem,
169                  struct drm_nouveau_gem_info *rep)
170 {
171         struct nouveau_fpriv *fpriv = nouveau_fpriv(file_priv);
172         struct nouveau_bo *nvbo = nouveau_gem_object(gem);
173         struct nouveau_vma *vma;
174
175         if (nvbo->bo.mem.mem_type == TTM_PL_TT)
176                 rep->domain = NOUVEAU_GEM_DOMAIN_GART;
177         else
178                 rep->domain = NOUVEAU_GEM_DOMAIN_VRAM;
179
180         rep->offset = nvbo->bo.offset;
181         if (fpriv->vm) {
182                 vma = nouveau_bo_vma_find(nvbo, fpriv->vm);
183                 if (!vma)
184                         return -EINVAL;
185
186                 rep->offset = vma->offset;
187         }
188
189         rep->size = nvbo->bo.mem.num_pages << PAGE_SHIFT;
190         rep->map_handle = nvbo->bo.addr_space_offset;
191         rep->tile_mode = nvbo->tile_mode;
192         rep->tile_flags = nvbo->tile_flags;
193         return 0;
194 }
195
196 int
197 nouveau_gem_ioctl_new(struct drm_device *dev, void *data,
198                       struct drm_file *file_priv)
199 {
200         struct drm_nouveau_private *dev_priv = dev->dev_private;
201         struct drm_nouveau_gem_new *req = data;
202         struct nouveau_bo *nvbo = NULL;
203         int ret = 0;
204
205         if (unlikely(dev_priv->ttm.bdev.dev_mapping == NULL))
206                 dev_priv->ttm.bdev.dev_mapping = dev_priv->dev->dev_mapping;
207
208         if (!dev_priv->engine.vram.flags_valid(dev, req->info.tile_flags)) {
209                 NV_ERROR(dev, "bad page flags: 0x%08x\n", req->info.tile_flags);
210                 return -EINVAL;
211         }
212
213         ret = nouveau_gem_new(dev, req->info.size, req->align,
214                               req->info.domain, req->info.tile_mode,
215                               req->info.tile_flags, &nvbo);
216         if (ret)
217                 return ret;
218
219         ret = drm_gem_handle_create(file_priv, nvbo->gem, &req->info.handle);
220         if (ret == 0) {
221                 ret = nouveau_gem_info(file_priv, nvbo->gem, &req->info);
222                 if (ret)
223                         drm_gem_handle_delete(file_priv, req->info.handle);
224         }
225
226         /* drop reference from allocate - handle holds it now */
227         drm_gem_object_unreference_unlocked(nvbo->gem);
228         return ret;
229 }
230
231 static int
232 nouveau_gem_set_domain(struct drm_gem_object *gem, uint32_t read_domains,
233                        uint32_t write_domains, uint32_t valid_domains)
234 {
235         struct nouveau_bo *nvbo = gem->driver_private;
236         struct ttm_buffer_object *bo = &nvbo->bo;
237         uint32_t domains = valid_domains & nvbo->valid_domains &
238                 (write_domains ? write_domains : read_domains);
239         uint32_t pref_flags = 0, valid_flags = 0;
240
241         if (!domains)
242                 return -EINVAL;
243
244         if (valid_domains & NOUVEAU_GEM_DOMAIN_VRAM)
245                 valid_flags |= TTM_PL_FLAG_VRAM;
246
247         if (valid_domains & NOUVEAU_GEM_DOMAIN_GART)
248                 valid_flags |= TTM_PL_FLAG_TT;
249
250         if ((domains & NOUVEAU_GEM_DOMAIN_VRAM) &&
251             bo->mem.mem_type == TTM_PL_VRAM)
252                 pref_flags |= TTM_PL_FLAG_VRAM;
253
254         else if ((domains & NOUVEAU_GEM_DOMAIN_GART) &&
255                  bo->mem.mem_type == TTM_PL_TT)
256                 pref_flags |= TTM_PL_FLAG_TT;
257
258         else if (domains & NOUVEAU_GEM_DOMAIN_VRAM)
259                 pref_flags |= TTM_PL_FLAG_VRAM;
260
261         else
262                 pref_flags |= TTM_PL_FLAG_TT;
263
264         nouveau_bo_placement_set(nvbo, pref_flags, valid_flags);
265
266         return 0;
267 }
268
269 struct validate_op {
270         struct list_head vram_list;
271         struct list_head gart_list;
272         struct list_head both_list;
273 };
274
275 static void
276 validate_fini_list(struct list_head *list, struct nouveau_fence *fence)
277 {
278         struct list_head *entry, *tmp;
279         struct nouveau_bo *nvbo;
280
281         list_for_each_safe(entry, tmp, list) {
282                 nvbo = list_entry(entry, struct nouveau_bo, entry);
283
284                 if (likely(fence))
285                         nouveau_bo_fence(nvbo, fence);
286
287                 if (unlikely(nvbo->validate_mapped)) {
288                         ttm_bo_kunmap(&nvbo->kmap);
289                         nvbo->validate_mapped = false;
290                 }
291
292                 list_del(&nvbo->entry);
293                 nvbo->reserved_by = NULL;
294                 ttm_bo_unreserve(&nvbo->bo);
295                 drm_gem_object_unreference_unlocked(nvbo->gem);
296         }
297 }
298
299 static void
300 validate_fini(struct validate_op *op, struct nouveau_fence* fence)
301 {
302         validate_fini_list(&op->vram_list, fence);
303         validate_fini_list(&op->gart_list, fence);
304         validate_fini_list(&op->both_list, fence);
305 }
306
307 static int
308 validate_init(struct nouveau_channel *chan, struct drm_file *file_priv,
309               struct drm_nouveau_gem_pushbuf_bo *pbbo,
310               int nr_buffers, struct validate_op *op)
311 {
312         struct drm_device *dev = chan->dev;
313         struct drm_nouveau_private *dev_priv = dev->dev_private;
314         uint32_t sequence;
315         int trycnt = 0;
316         int ret, i;
317
318         sequence = atomic_add_return(1, &dev_priv->ttm.validate_sequence);
319 retry:
320         if (++trycnt > 100000) {
321                 NV_ERROR(dev, "%s failed and gave up.\n", __func__);
322                 return -EINVAL;
323         }
324
325         for (i = 0; i < nr_buffers; i++) {
326                 struct drm_nouveau_gem_pushbuf_bo *b = &pbbo[i];
327                 struct drm_gem_object *gem;
328                 struct nouveau_bo *nvbo;
329
330                 gem = drm_gem_object_lookup(dev, file_priv, b->handle);
331                 if (!gem) {
332                         NV_ERROR(dev, "Unknown handle 0x%08x\n", b->handle);
333                         validate_fini(op, NULL);
334                         return -ENOENT;
335                 }
336                 nvbo = gem->driver_private;
337
338                 if (nvbo->reserved_by && nvbo->reserved_by == file_priv) {
339                         NV_ERROR(dev, "multiple instances of buffer %d on "
340                                       "validation list\n", b->handle);
341                         validate_fini(op, NULL);
342                         return -EINVAL;
343                 }
344
345                 ret = ttm_bo_reserve(&nvbo->bo, true, false, true, sequence);
346                 if (ret) {
347                         validate_fini(op, NULL);
348                         if (unlikely(ret == -EAGAIN))
349                                 ret = ttm_bo_wait_unreserved(&nvbo->bo, true);
350                         drm_gem_object_unreference_unlocked(gem);
351                         if (unlikely(ret)) {
352                                 if (ret != -ERESTARTSYS)
353                                         NV_ERROR(dev, "fail reserve\n");
354                                 return ret;
355                         }
356                         goto retry;
357                 }
358
359                 b->user_priv = (uint64_t)(unsigned long)nvbo;
360                 nvbo->reserved_by = file_priv;
361                 nvbo->pbbo_index = i;
362                 if ((b->valid_domains & NOUVEAU_GEM_DOMAIN_VRAM) &&
363                     (b->valid_domains & NOUVEAU_GEM_DOMAIN_GART))
364                         list_add_tail(&nvbo->entry, &op->both_list);
365                 else
366                 if (b->valid_domains & NOUVEAU_GEM_DOMAIN_VRAM)
367                         list_add_tail(&nvbo->entry, &op->vram_list);
368                 else
369                 if (b->valid_domains & NOUVEAU_GEM_DOMAIN_GART)
370                         list_add_tail(&nvbo->entry, &op->gart_list);
371                 else {
372                         NV_ERROR(dev, "invalid valid domains: 0x%08x\n",
373                                  b->valid_domains);
374                         list_add_tail(&nvbo->entry, &op->both_list);
375                         validate_fini(op, NULL);
376                         return -EINVAL;
377                 }
378         }
379
380         return 0;
381 }
382
383 static int
384 validate_sync(struct nouveau_channel *chan, struct nouveau_bo *nvbo)
385 {
386         struct nouveau_fence *fence = NULL;
387         int ret = 0;
388
389         spin_lock(&nvbo->bo.bdev->fence_lock);
390         if (nvbo->bo.sync_obj)
391                 fence = nouveau_fence_ref(nvbo->bo.sync_obj);
392         spin_unlock(&nvbo->bo.bdev->fence_lock);
393
394         if (fence) {
395                 ret = nouveau_fence_sync(fence, chan);
396                 nouveau_fence_unref(&fence);
397         }
398
399         return ret;
400 }
401
402 static int
403 validate_list(struct nouveau_channel *chan, struct list_head *list,
404               struct drm_nouveau_gem_pushbuf_bo *pbbo, uint64_t user_pbbo_ptr)
405 {
406         struct drm_nouveau_private *dev_priv = chan->dev->dev_private;
407         struct drm_nouveau_gem_pushbuf_bo __user *upbbo =
408                                 (void __force __user *)(uintptr_t)user_pbbo_ptr;
409         struct drm_device *dev = chan->dev;
410         struct nouveau_bo *nvbo;
411         int ret, relocs = 0;
412
413         list_for_each_entry(nvbo, list, entry) {
414                 struct drm_nouveau_gem_pushbuf_bo *b = &pbbo[nvbo->pbbo_index];
415
416                 ret = validate_sync(chan, nvbo);
417                 if (unlikely(ret)) {
418                         NV_ERROR(dev, "fail pre-validate sync\n");
419                         return ret;
420                 }
421
422                 ret = nouveau_gem_set_domain(nvbo->gem, b->read_domains,
423                                              b->write_domains,
424                                              b->valid_domains);
425                 if (unlikely(ret)) {
426                         NV_ERROR(dev, "fail set_domain\n");
427                         return ret;
428                 }
429
430                 nvbo->channel = (b->read_domains & (1 << 31)) ? NULL : chan;
431                 ret = nouveau_bo_validate(nvbo, true, false, false);
432                 nvbo->channel = NULL;
433                 if (unlikely(ret)) {
434                         if (ret != -ERESTARTSYS)
435                                 NV_ERROR(dev, "fail ttm_validate\n");
436                         return ret;
437                 }
438
439                 ret = validate_sync(chan, nvbo);
440                 if (unlikely(ret)) {
441                         NV_ERROR(dev, "fail post-validate sync\n");
442                         return ret;
443                 }
444
445                 if (dev_priv->card_type < NV_50) {
446                         if (nvbo->bo.offset == b->presumed.offset &&
447                             ((nvbo->bo.mem.mem_type == TTM_PL_VRAM &&
448                               b->presumed.domain & NOUVEAU_GEM_DOMAIN_VRAM) ||
449                              (nvbo->bo.mem.mem_type == TTM_PL_TT &&
450                               b->presumed.domain & NOUVEAU_GEM_DOMAIN_GART)))
451                                 continue;
452
453                         if (nvbo->bo.mem.mem_type == TTM_PL_TT)
454                                 b->presumed.domain = NOUVEAU_GEM_DOMAIN_GART;
455                         else
456                                 b->presumed.domain = NOUVEAU_GEM_DOMAIN_VRAM;
457                         b->presumed.offset = nvbo->bo.offset;
458                         b->presumed.valid = 0;
459                         relocs++;
460
461                         if (DRM_COPY_TO_USER(&upbbo[nvbo->pbbo_index].presumed,
462                                              &b->presumed, sizeof(b->presumed)))
463                                 return -EFAULT;
464                 }
465         }
466
467         return relocs;
468 }
469
470 static int
471 nouveau_gem_pushbuf_validate(struct nouveau_channel *chan,
472                              struct drm_file *file_priv,
473                              struct drm_nouveau_gem_pushbuf_bo *pbbo,
474                              uint64_t user_buffers, int nr_buffers,
475                              struct validate_op *op, int *apply_relocs)
476 {
477         struct drm_device *dev = chan->dev;
478         int ret, relocs = 0;
479
480         INIT_LIST_HEAD(&op->vram_list);
481         INIT_LIST_HEAD(&op->gart_list);
482         INIT_LIST_HEAD(&op->both_list);
483
484         if (nr_buffers == 0)
485                 return 0;
486
487         ret = validate_init(chan, file_priv, pbbo, nr_buffers, op);
488         if (unlikely(ret)) {
489                 if (ret != -ERESTARTSYS)
490                         NV_ERROR(dev, "validate_init\n");
491                 return ret;
492         }
493
494         ret = validate_list(chan, &op->vram_list, pbbo, user_buffers);
495         if (unlikely(ret < 0)) {
496                 if (ret != -ERESTARTSYS)
497                         NV_ERROR(dev, "validate vram_list\n");
498                 validate_fini(op, NULL);
499                 return ret;
500         }
501         relocs += ret;
502
503         ret = validate_list(chan, &op->gart_list, pbbo, user_buffers);
504         if (unlikely(ret < 0)) {
505                 if (ret != -ERESTARTSYS)
506                         NV_ERROR(dev, "validate gart_list\n");
507                 validate_fini(op, NULL);
508                 return ret;
509         }
510         relocs += ret;
511
512         ret = validate_list(chan, &op->both_list, pbbo, user_buffers);
513         if (unlikely(ret < 0)) {
514                 if (ret != -ERESTARTSYS)
515                         NV_ERROR(dev, "validate both_list\n");
516                 validate_fini(op, NULL);
517                 return ret;
518         }
519         relocs += ret;
520
521         *apply_relocs = relocs;
522         return 0;
523 }
524
525 static inline void *
526 u_memcpya(uint64_t user, unsigned nmemb, unsigned size)
527 {
528         void *mem;
529         void __user *userptr = (void __force __user *)(uintptr_t)user;
530
531         mem = kmalloc(nmemb * size, GFP_KERNEL);
532         if (!mem)
533                 return ERR_PTR(-ENOMEM);
534
535         if (DRM_COPY_FROM_USER(mem, userptr, nmemb * size)) {
536                 kfree(mem);
537                 return ERR_PTR(-EFAULT);
538         }
539
540         return mem;
541 }
542
543 static int
544 nouveau_gem_pushbuf_reloc_apply(struct drm_device *dev,
545                                 struct drm_nouveau_gem_pushbuf *req,
546                                 struct drm_nouveau_gem_pushbuf_bo *bo)
547 {
548         struct drm_nouveau_gem_pushbuf_reloc *reloc = NULL;
549         int ret = 0;
550         unsigned i;
551
552         reloc = u_memcpya(req->relocs, req->nr_relocs, sizeof(*reloc));
553         if (IS_ERR(reloc))
554                 return PTR_ERR(reloc);
555
556         for (i = 0; i < req->nr_relocs; i++) {
557                 struct drm_nouveau_gem_pushbuf_reloc *r = &reloc[i];
558                 struct drm_nouveau_gem_pushbuf_bo *b;
559                 struct nouveau_bo *nvbo;
560                 uint32_t data;
561
562                 if (unlikely(r->bo_index > req->nr_buffers)) {
563                         NV_ERROR(dev, "reloc bo index invalid\n");
564                         ret = -EINVAL;
565                         break;
566                 }
567
568                 b = &bo[r->bo_index];
569                 if (b->presumed.valid)
570                         continue;
571
572                 if (unlikely(r->reloc_bo_index > req->nr_buffers)) {
573                         NV_ERROR(dev, "reloc container bo index invalid\n");
574                         ret = -EINVAL;
575                         break;
576                 }
577                 nvbo = (void *)(unsigned long)bo[r->reloc_bo_index].user_priv;
578
579                 if (unlikely(r->reloc_bo_offset + 4 >
580                              nvbo->bo.mem.num_pages << PAGE_SHIFT)) {
581                         NV_ERROR(dev, "reloc outside of bo\n");
582                         ret = -EINVAL;
583                         break;
584                 }
585
586                 if (!nvbo->kmap.virtual) {
587                         ret = ttm_bo_kmap(&nvbo->bo, 0, nvbo->bo.mem.num_pages,
588                                           &nvbo->kmap);
589                         if (ret) {
590                                 NV_ERROR(dev, "failed kmap for reloc\n");
591                                 break;
592                         }
593                         nvbo->validate_mapped = true;
594                 }
595
596                 if (r->flags & NOUVEAU_GEM_RELOC_LOW)
597                         data = b->presumed.offset + r->data;
598                 else
599                 if (r->flags & NOUVEAU_GEM_RELOC_HIGH)
600                         data = (b->presumed.offset + r->data) >> 32;
601                 else
602                         data = r->data;
603
604                 if (r->flags & NOUVEAU_GEM_RELOC_OR) {
605                         if (b->presumed.domain == NOUVEAU_GEM_DOMAIN_GART)
606                                 data |= r->tor;
607                         else
608                                 data |= r->vor;
609                 }
610
611                 spin_lock(&nvbo->bo.bdev->fence_lock);
612                 ret = ttm_bo_wait(&nvbo->bo, false, false, false);
613                 spin_unlock(&nvbo->bo.bdev->fence_lock);
614                 if (ret) {
615                         NV_ERROR(dev, "reloc wait_idle failed: %d\n", ret);
616                         break;
617                 }
618
619                 nouveau_bo_wr32(nvbo, r->reloc_bo_offset >> 2, data);
620         }
621
622         kfree(reloc);
623         return ret;
624 }
625
626 int
627 nouveau_gem_ioctl_pushbuf(struct drm_device *dev, void *data,
628                           struct drm_file *file_priv)
629 {
630         struct drm_nouveau_private *dev_priv = dev->dev_private;
631         struct drm_nouveau_gem_pushbuf *req = data;
632         struct drm_nouveau_gem_pushbuf_push *push;
633         struct drm_nouveau_gem_pushbuf_bo *bo;
634         struct nouveau_channel *chan;
635         struct validate_op op;
636         struct nouveau_fence *fence = NULL;
637         int i, j, ret = 0, do_reloc = 0;
638
639         chan = nouveau_channel_get(file_priv, req->channel);
640         if (IS_ERR(chan))
641                 return PTR_ERR(chan);
642
643         req->vram_available = dev_priv->fb_aper_free;
644         req->gart_available = dev_priv->gart_info.aper_free;
645         if (unlikely(req->nr_push == 0))
646                 goto out_next;
647
648         if (unlikely(req->nr_push > NOUVEAU_GEM_MAX_PUSH)) {
649                 NV_ERROR(dev, "pushbuf push count exceeds limit: %d max %d\n",
650                          req->nr_push, NOUVEAU_GEM_MAX_PUSH);
651                 nouveau_channel_put(&chan);
652                 return -EINVAL;
653         }
654
655         if (unlikely(req->nr_buffers > NOUVEAU_GEM_MAX_BUFFERS)) {
656                 NV_ERROR(dev, "pushbuf bo count exceeds limit: %d max %d\n",
657                          req->nr_buffers, NOUVEAU_GEM_MAX_BUFFERS);
658                 nouveau_channel_put(&chan);
659                 return -EINVAL;
660         }
661
662         if (unlikely(req->nr_relocs > NOUVEAU_GEM_MAX_RELOCS)) {
663                 NV_ERROR(dev, "pushbuf reloc count exceeds limit: %d max %d\n",
664                          req->nr_relocs, NOUVEAU_GEM_MAX_RELOCS);
665                 nouveau_channel_put(&chan);
666                 return -EINVAL;
667         }
668
669         push = u_memcpya(req->push, req->nr_push, sizeof(*push));
670         if (IS_ERR(push)) {
671                 nouveau_channel_put(&chan);
672                 return PTR_ERR(push);
673         }
674
675         bo = u_memcpya(req->buffers, req->nr_buffers, sizeof(*bo));
676         if (IS_ERR(bo)) {
677                 kfree(push);
678                 nouveau_channel_put(&chan);
679                 return PTR_ERR(bo);
680         }
681
682         /* Mark push buffers as being used on PFIFO, the validation code
683          * will then make sure that if the pushbuf bo moves, that they
684          * happen on the kernel channel, which will in turn cause a sync
685          * to happen before we try and submit the push buffer.
686          */
687         for (i = 0; i < req->nr_push; i++) {
688                 if (push[i].bo_index >= req->nr_buffers) {
689                         NV_ERROR(dev, "push %d buffer not in list\n", i);
690                         ret = -EINVAL;
691                         goto out_prevalid;
692                 }
693
694                 bo[push[i].bo_index].read_domains |= (1 << 31);
695         }
696
697         /* Validate buffer list */
698         ret = nouveau_gem_pushbuf_validate(chan, file_priv, bo, req->buffers,
699                                            req->nr_buffers, &op, &do_reloc);
700         if (ret) {
701                 if (ret != -ERESTARTSYS)
702                         NV_ERROR(dev, "validate: %d\n", ret);
703                 goto out_prevalid;
704         }
705
706         /* Apply any relocations that are required */
707         if (do_reloc) {
708                 ret = nouveau_gem_pushbuf_reloc_apply(dev, req, bo);
709                 if (ret) {
710                         NV_ERROR(dev, "reloc apply: %d\n", ret);
711                         goto out;
712                 }
713         }
714
715         if (chan->dma.ib_max) {
716                 ret = nouveau_dma_wait(chan, req->nr_push + 1, 6);
717                 if (ret) {
718                         NV_INFO(dev, "nv50cal_space: %d\n", ret);
719                         goto out;
720                 }
721
722                 for (i = 0; i < req->nr_push; i++) {
723                         struct nouveau_bo *nvbo = (void *)(unsigned long)
724                                 bo[push[i].bo_index].user_priv;
725
726                         nv50_dma_push(chan, nvbo, push[i].offset,
727                                       push[i].length);
728                 }
729         } else
730         if (dev_priv->chipset >= 0x25) {
731                 ret = RING_SPACE(chan, req->nr_push * 2);
732                 if (ret) {
733                         NV_ERROR(dev, "cal_space: %d\n", ret);
734                         goto out;
735                 }
736
737                 for (i = 0; i < req->nr_push; i++) {
738                         struct nouveau_bo *nvbo = (void *)(unsigned long)
739                                 bo[push[i].bo_index].user_priv;
740                         struct drm_mm_node *mem = nvbo->bo.mem.mm_node;
741
742                         OUT_RING(chan, ((mem->start << PAGE_SHIFT) +
743                                         push[i].offset) | 2);
744                         OUT_RING(chan, 0);
745                 }
746         } else {
747                 ret = RING_SPACE(chan, req->nr_push * (2 + NOUVEAU_DMA_SKIPS));
748                 if (ret) {
749                         NV_ERROR(dev, "jmp_space: %d\n", ret);
750                         goto out;
751                 }
752
753                 for (i = 0; i < req->nr_push; i++) {
754                         struct nouveau_bo *nvbo = (void *)(unsigned long)
755                                 bo[push[i].bo_index].user_priv;
756                         struct drm_mm_node *mem = nvbo->bo.mem.mm_node;
757                         uint32_t cmd;
758
759                         cmd = chan->pushbuf_base + ((chan->dma.cur + 2) << 2);
760                         cmd |= 0x20000000;
761                         if (unlikely(cmd != req->suffix0)) {
762                                 if (!nvbo->kmap.virtual) {
763                                         ret = ttm_bo_kmap(&nvbo->bo, 0,
764                                                           nvbo->bo.mem.
765                                                           num_pages,
766                                                           &nvbo->kmap);
767                                         if (ret) {
768                                                 WIND_RING(chan);
769                                                 goto out;
770                                         }
771                                         nvbo->validate_mapped = true;
772                                 }
773
774                                 nouveau_bo_wr32(nvbo, (push[i].offset +
775                                                 push[i].length - 8) / 4, cmd);
776                         }
777
778                         OUT_RING(chan, ((mem->start << PAGE_SHIFT) +
779                                         push[i].offset) | 0x20000000);
780                         OUT_RING(chan, 0);
781                         for (j = 0; j < NOUVEAU_DMA_SKIPS; j++)
782                                 OUT_RING(chan, 0);
783                 }
784         }
785
786         ret = nouveau_fence_new(chan, &fence, true);
787         if (ret) {
788                 NV_ERROR(dev, "error fencing pushbuf: %d\n", ret);
789                 WIND_RING(chan);
790                 goto out;
791         }
792
793 out:
794         validate_fini(&op, fence);
795         nouveau_fence_unref(&fence);
796
797 out_prevalid:
798         kfree(bo);
799         kfree(push);
800
801 out_next:
802         if (chan->dma.ib_max) {
803                 req->suffix0 = 0x00000000;
804                 req->suffix1 = 0x00000000;
805         } else
806         if (dev_priv->chipset >= 0x25) {
807                 req->suffix0 = 0x00020000;
808                 req->suffix1 = 0x00000000;
809         } else {
810                 req->suffix0 = 0x20000000 |
811                               (chan->pushbuf_base + ((chan->dma.cur + 2) << 2));
812                 req->suffix1 = 0x00000000;
813         }
814
815         nouveau_channel_put(&chan);
816         return ret;
817 }
818
819 static inline uint32_t
820 domain_to_ttm(struct nouveau_bo *nvbo, uint32_t domain)
821 {
822         uint32_t flags = 0;
823
824         if (domain & NOUVEAU_GEM_DOMAIN_VRAM)
825                 flags |= TTM_PL_FLAG_VRAM;
826         if (domain & NOUVEAU_GEM_DOMAIN_GART)
827                 flags |= TTM_PL_FLAG_TT;
828
829         return flags;
830 }
831
832 int
833 nouveau_gem_ioctl_cpu_prep(struct drm_device *dev, void *data,
834                            struct drm_file *file_priv)
835 {
836         struct drm_nouveau_gem_cpu_prep *req = data;
837         struct drm_gem_object *gem;
838         struct nouveau_bo *nvbo;
839         bool no_wait = !!(req->flags & NOUVEAU_GEM_CPU_PREP_NOWAIT);
840         int ret = -EINVAL;
841
842         gem = drm_gem_object_lookup(dev, file_priv, req->handle);
843         if (!gem)
844                 return -ENOENT;
845         nvbo = nouveau_gem_object(gem);
846
847         spin_lock(&nvbo->bo.bdev->fence_lock);
848         ret = ttm_bo_wait(&nvbo->bo, true, true, no_wait);
849         spin_unlock(&nvbo->bo.bdev->fence_lock);
850         drm_gem_object_unreference_unlocked(gem);
851         return ret;
852 }
853
854 int
855 nouveau_gem_ioctl_cpu_fini(struct drm_device *dev, void *data,
856                            struct drm_file *file_priv)
857 {
858         return 0;
859 }
860
861 int
862 nouveau_gem_ioctl_info(struct drm_device *dev, void *data,
863                        struct drm_file *file_priv)
864 {
865         struct drm_nouveau_gem_info *req = data;
866         struct drm_gem_object *gem;
867         int ret;
868
869         gem = drm_gem_object_lookup(dev, file_priv, req->handle);
870         if (!gem)
871                 return -ENOENT;
872
873         ret = nouveau_gem_info(file_priv, gem, req);
874         drm_gem_object_unreference_unlocked(gem);
875         return ret;
876 }
877