drivers/gpu/drm/nouveau/nouveau_gem.c

   1 /*
   2  * Copyright (C) 2008 Ben Skeggs.
   3  * All Rights Reserved.
   4  *
   5  * Permission is hereby granted, free of charge, to any person obtaining
   6  * a copy of this software and associated documentation files (the
   7  * "Software"), to deal in the Software without restriction, including
   8  * without limitation the rights to use, copy, modify, merge, publish,
   9  * distribute, sublicense, and/or sell copies of the Software, and to
  10  * permit persons to whom the Software is furnished to do so, subject to
  11  * the following conditions:
  12  *
  13  * The above copyright notice and this permission notice (including the
  14  * next paragraph) shall be included in all copies or substantial
  15  * portions of the Software.
  16  *
  17  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
  18  * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
  19  * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
  20  * IN NO EVENT SHALL THE COPYRIGHT OWNER(S) AND/OR ITS SUPPLIERS BE
  21  * LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
  22  * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
  23  * WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
  24  *
  25  */
  26 #include "drmP.h"
  27 #include "drm.h"
  28
  29 #include "nouveau_drv.h"
  30 #include "nouveau_drm.h"
  31 #include "nouveau_dma.h"
  32
  33 #define nouveau_gem_pushbuf_sync(chan) 0
  34
  35 int
  36 nouveau_gem_object_new(struct drm_gem_object *gem)
  37 {
  38         return 0;
  39 }
  40
  41 void
  42 nouveau_gem_object_del(struct drm_gem_object *gem)
  43 {
  44         struct nouveau_bo *nvbo = gem->driver_private;
  45         struct ttm_buffer_object *bo = &nvbo->bo;
  46
  47         if (!nvbo)
  48                 return;
  49         nvbo->gem = NULL;
  50
  51         if (unlikely(nvbo->cpu_filp))
  52                 ttm_bo_synccpu_write_release(bo);
  53
  54         if (unlikely(nvbo->pin_refcnt)) {
  55                 nvbo->pin_refcnt = 1;
  56                 nouveau_bo_unpin(nvbo);
  57         }
  58
  59         ttm_bo_unref(&bo);
  60
  61         drm_gem_object_release(gem);
  62         kfree(gem);
  63 }
  64
  65 int
  66 nouveau_gem_new(struct drm_device *dev, struct nouveau_channel *chan,
  67                 int size, int align, uint32_t flags, uint32_t tile_mode,
  68                 uint32_t tile_flags, bool no_vm, bool mappable,
  69                 struct nouveau_bo **pnvbo)
  70 {
  71         struct nouveau_bo *nvbo;
  72         int ret;
  73
  74         ret = nouveau_bo_new(dev, chan, size, align, flags, tile_mode,
  75                              tile_flags, no_vm, mappable, pnvbo);
  76         if (ret)
  77                 return ret;
  78         nvbo = *pnvbo;
  79
  80         nvbo->gem = drm_gem_object_alloc(dev, nvbo->bo.mem.size);
  81         if (!nvbo->gem) {
  82                 nouveau_bo_ref(NULL, pnvbo);
  83                 return -ENOMEM;
  84         }
  85
  86         nvbo->bo.persistant_swap_storage = nvbo->gem->filp;
  87         nvbo->gem->driver_private = nvbo;
  88         return 0;
  89 }
  90
  91 static int
  92 nouveau_gem_info(struct drm_gem_object *gem, struct drm_nouveau_gem_info *rep)
  93 {
  94         struct nouveau_bo *nvbo = nouveau_gem_object(gem);
  95
  96         if (nvbo->bo.mem.mem_type == TTM_PL_TT)
  97                 rep->domain = NOUVEAU_GEM_DOMAIN_GART;
  98         else
  99                 rep->domain = NOUVEAU_GEM_DOMAIN_VRAM;
 100
 101         rep->size = nvbo->bo.mem.num_pages << PAGE_SHIFT;
 102         rep->offset = nvbo->bo.offset;
 103         rep->map_handle = nvbo->mappable ? nvbo->bo.addr_space_offset : 0;
 104         rep->tile_mode = nvbo->tile_mode;
 105         rep->tile_flags = nvbo->tile_flags;
 106         return 0;
 107 }
 108
 109 static bool
 110 nouveau_gem_tile_flags_valid(struct drm_device *dev, uint32_t tile_flags)
 111 {
 112         struct drm_nouveau_private *dev_priv = dev->dev_private;
 113
 114         if (dev_priv->card_type >= NV_50) {
 115                 switch (tile_flags & NOUVEAU_GEM_TILE_LAYOUT_MASK) {
 116                 case 0x0000:
 117                 case 0x1800:
 118                 case 0x2800:
 119                 case 0x4800:
 120                 case 0x7000:
 121                 case 0x7400:
 122                 case 0x7a00:
 123                 case 0xe000:
 124                         return true;
 125                 }
 126         } else {
 127                 if (!(tile_flags & NOUVEAU_GEM_TILE_LAYOUT_MASK))
 128                         return true;
 129         }
 130
 131         NV_ERROR(dev, "bad page flags: 0x%08x\n", tile_flags);
 132         return false;
 133 }
 134
 135 int
 136 nouveau_gem_ioctl_new(struct drm_device *dev, void *data,
 137                       struct drm_file *file_priv)
 138 {
 139         struct drm_nouveau_private *dev_priv = dev->dev_private;
 140         struct drm_nouveau_gem_new *req = data;
 141         struct nouveau_bo *nvbo = NULL;
 142         struct nouveau_channel *chan = NULL;
 143         uint32_t flags = 0;
 144         int ret = 0;
 145
 146         if (unlikely(dev_priv->ttm.bdev.dev_mapping == NULL))
 147                 dev_priv->ttm.bdev.dev_mapping = dev_priv->dev->dev_mapping;
 148
 149         if (req->channel_hint) {
 150                 NOUVEAU_GET_USER_CHANNEL_WITH_RETURN(req->channel_hint,
 151                                                      file_priv, chan);
 152         }
 153
 154         if (req->info.domain & NOUVEAU_GEM_DOMAIN_VRAM)
 155                 flags |= TTM_PL_FLAG_VRAM;
 156         if (req->info.domain & NOUVEAU_GEM_DOMAIN_GART)
 157                 flags |= TTM_PL_FLAG_TT;
 158         if (!flags || req->info.domain & NOUVEAU_GEM_DOMAIN_CPU)
 159                 flags |= TTM_PL_FLAG_SYSTEM;
 160
 161         if (!nouveau_gem_tile_flags_valid(dev, req->info.tile_flags))
 162                 return -EINVAL;
 163
 164         ret = nouveau_gem_new(dev, chan, req->info.size, req->align, flags,
 165                               req->info.tile_mode, req->info.tile_flags, false,
 166                               (req->info.domain & NOUVEAU_GEM_DOMAIN_MAPPABLE),
 167                               &nvbo);
 168         if (ret)
 169                 return ret;
 170
 171         ret = nouveau_gem_info(nvbo->gem, &req->info);
 172         if (ret)
 173                 goto out;
 174
 175         ret = drm_gem_handle_create(file_priv, nvbo->gem, &req->info.handle);
 176         /* drop reference from allocate - handle holds it now */
 177         drm_gem_object_unreference_unlocked(nvbo->gem);
 178 out:
 179         return ret;
 180 }
 181
 182 static int
 183 nouveau_gem_set_domain(struct drm_gem_object *gem, uint32_t read_domains,
 184                        uint32_t write_domains, uint32_t valid_domains)
 185 {
 186         struct nouveau_bo *nvbo = gem->driver_private;
 187         struct ttm_buffer_object *bo = &nvbo->bo;
 188         uint32_t domains = valid_domains &
 189                 (write_domains ? write_domains : read_domains);
 190         uint32_t pref_flags = 0, valid_flags = 0;
 191
 192         if (!domains)
 193                 return -EINVAL;
 194
 195         if (valid_domains & NOUVEAU_GEM_DOMAIN_VRAM)
 196                 valid_flags |= TTM_PL_FLAG_VRAM;
 197
 198         if (valid_domains & NOUVEAU_GEM_DOMAIN_GART)
 199                 valid_flags |= TTM_PL_FLAG_TT;
 200
 201         if ((domains & NOUVEAU_GEM_DOMAIN_VRAM) &&
 202             bo->mem.mem_type == TTM_PL_VRAM)
 203                 pref_flags |= TTM_PL_FLAG_VRAM;
 204
 205         else if ((domains & NOUVEAU_GEM_DOMAIN_GART) &&
 206                  bo->mem.mem_type == TTM_PL_TT)
 207                 pref_flags |= TTM_PL_FLAG_TT;
 208
 209         else if (domains & NOUVEAU_GEM_DOMAIN_VRAM)
 210                 pref_flags |= TTM_PL_FLAG_VRAM;
 211
 212         else
 213                 pref_flags |= TTM_PL_FLAG_TT;
 214
 215         nouveau_bo_placement_set(nvbo, pref_flags, valid_flags);
 216
 217         return 0;
 218 }
 219
 220 struct validate_op {
 221         struct list_head vram_list;
 222         struct list_head gart_list;
 223         struct list_head both_list;
 224 };
 225
 226 static void
 227 validate_fini_list(struct list_head *list, struct nouveau_fence *fence)
 228 {
 229         struct list_head *entry, *tmp;
 230         struct nouveau_bo *nvbo;
 231
 232         list_for_each_safe(entry, tmp, list) {
 233                 nvbo = list_entry(entry, struct nouveau_bo, entry);
 234                 if (likely(fence)) {
 235                         struct nouveau_fence *prev_fence;
 236
 237                         spin_lock(&nvbo->bo.lock);
 238                         prev_fence = nvbo->bo.sync_obj;
 239                         nvbo->bo.sync_obj = nouveau_fence_ref(fence);
 240                         spin_unlock(&nvbo->bo.lock);
 241                         nouveau_fence_unref((void *)&prev_fence);
 242                 }
 243
 244                 if (unlikely(nvbo->validate_mapped)) {
 245                         ttm_bo_kunmap(&nvbo->kmap);
 246                         nvbo->validate_mapped = false;
 247                 }
 248
 249                 list_del(&nvbo->entry);
 250                 nvbo->reserved_by = NULL;
 251                 ttm_bo_unreserve(&nvbo->bo);
 252                 drm_gem_object_unreference_unlocked(nvbo->gem);
 253         }
 254 }
 255
 256 static void
 257 validate_fini(struct validate_op *op, struct nouveau_fence* fence)
 258 {
 259         validate_fini_list(&op->vram_list, fence);
 260         validate_fini_list(&op->gart_list, fence);
 261         validate_fini_list(&op->both_list, fence);
 262 }
 263
 264 static int
 265 validate_init(struct nouveau_channel *chan, struct drm_file *file_priv,
 266               struct drm_nouveau_gem_pushbuf_bo *pbbo,
 267               int nr_buffers, struct validate_op *op)
 268 {
 269         struct drm_device *dev = chan->dev;
 270         struct drm_nouveau_private *dev_priv = dev->dev_private;
 271         uint32_t sequence;
 272         int trycnt = 0;
 273         int ret, i;
 274
 275         sequence = atomic_add_return(1, &dev_priv->ttm.validate_sequence);
 276 retry:
 277         if (++trycnt > 100000) {
 278                 NV_ERROR(dev, "%s failed and gave up.\n", __func__);
 279                 return -EINVAL;
 280         }
 281
 282         for (i = 0; i < nr_buffers; i++) {
 283                 struct drm_nouveau_gem_pushbuf_bo *b = &pbbo[i];
 284                 struct drm_gem_object *gem;
 285                 struct nouveau_bo *nvbo;
 286
 287                 gem = drm_gem_object_lookup(dev, file_priv, b->handle);
 288                 if (!gem) {
 289                         NV_ERROR(dev, "Unknown handle 0x%08x\n", b->handle);
 290                         validate_fini(op, NULL);
 291                         return -ENOENT;
 292                 }
 293                 nvbo = gem->driver_private;
 294
 295                 if (nvbo->reserved_by && nvbo->reserved_by == file_priv) {
 296                         NV_ERROR(dev, "multiple instances of buffer %d on "
 297                                       "validation list\n", b->handle);
 298                         validate_fini(op, NULL);
 299                         return -EINVAL;
 300                 }
 301
 302                 ret = ttm_bo_reserve(&nvbo->bo, false, false, true, sequence);
 303                 if (ret) {
 304                         validate_fini(op, NULL);
 305                         if (ret == -EAGAIN)
 306                                 ret = ttm_bo_wait_unreserved(&nvbo->bo, false);
 307                         drm_gem_object_unreference_unlocked(gem);
 308                         if (ret) {
 309                                 NV_ERROR(dev, "fail reserve\n");
 310                                 return ret;
 311                         }
 312                         goto retry;
 313                 }
 314
 315                 b->user_priv = (uint64_t)(unsigned long)nvbo;
 316                 nvbo->reserved_by = file_priv;
 317                 nvbo->pbbo_index = i;
 318                 if ((b->valid_domains & NOUVEAU_GEM_DOMAIN_VRAM) &&
 319                     (b->valid_domains & NOUVEAU_GEM_DOMAIN_GART))
 320                         list_add_tail(&nvbo->entry, &op->both_list);
 321                 else
 322                 if (b->valid_domains & NOUVEAU_GEM_DOMAIN_VRAM)
 323                         list_add_tail(&nvbo->entry, &op->vram_list);
 324                 else
 325                 if (b->valid_domains & NOUVEAU_GEM_DOMAIN_GART)
 326                         list_add_tail(&nvbo->entry, &op->gart_list);
 327                 else {
 328                         NV_ERROR(dev, "invalid valid domains: 0x%08x\n",
 329                                  b->valid_domains);
 330                         list_add_tail(&nvbo->entry, &op->both_list);
 331                         validate_fini(op, NULL);
 332                         return -EINVAL;
 333                 }
 334
 335                 if (unlikely(atomic_read(&nvbo->bo.cpu_writers) > 0)) {
 336                         validate_fini(op, NULL);
 337
 338                         if (nvbo->cpu_filp == file_priv) {
 339                                 NV_ERROR(dev, "bo %p mapped by process trying "
 340                                               "to validate it!\n", nvbo);
 341                                 return -EINVAL;
 342                         }
 343
 344                         mutex_unlock(&drm_global_mutex);
 345                         ret = ttm_bo_wait_cpu(&nvbo->bo, false);
 346                         mutex_lock(&drm_global_mutex);
 347                         if (ret) {
 348                                 NV_ERROR(dev, "fail wait_cpu\n");
 349                                 return ret;
 350                         }
 351                         goto retry;
 352                 }
 353         }
 354
 355         return 0;
 356 }
 357
 358 static int
 359 validate_list(struct nouveau_channel *chan, struct list_head *list,
 360               struct drm_nouveau_gem_pushbuf_bo *pbbo, uint64_t user_pbbo_ptr)
 361 {
 362         struct drm_nouveau_gem_pushbuf_bo __user *upbbo =
 363                                 (void __force __user *)(uintptr_t)user_pbbo_ptr;
 364         struct drm_device *dev = chan->dev;
 365         struct nouveau_bo *nvbo;
 366         int ret, relocs = 0;
 367
 368         list_for_each_entry(nvbo, list, entry) {
 369                 struct drm_nouveau_gem_pushbuf_bo *b = &pbbo[nvbo->pbbo_index];
 370
 371                 ret = nouveau_fence_sync(nvbo->bo.sync_obj, chan);
 372                 if (unlikely(ret)) {
 373                         NV_ERROR(dev, "fail pre-validate sync\n");
 374                         return ret;
 375                 }
 376
 377                 ret = nouveau_gem_set_domain(nvbo->gem, b->read_domains,
 378                                              b->write_domains,
 379                                              b->valid_domains);
 380                 if (unlikely(ret)) {
 381                         NV_ERROR(dev, "fail set_domain\n");
 382                         return ret;
 383                 }
 384
 385                 nvbo->channel = (b->read_domains & (1 << 31)) ? NULL : chan;
 386                 ret = ttm_bo_validate(&nvbo->bo, &nvbo->placement,
 387                                       false, false, false);
 388                 nvbo->channel = NULL;
 389                 if (unlikely(ret)) {
 390                         NV_ERROR(dev, "fail ttm_validate\n");
 391                         return ret;
 392                 }
 393
 394                 ret = nouveau_fence_sync(nvbo->bo.sync_obj, chan);
 395                 if (unlikely(ret)) {
 396                         NV_ERROR(dev, "fail post-validate sync\n");
 397                         return ret;
 398                 }
 399
 400                 if (nvbo->bo.offset == b->presumed.offset &&
 401                     ((nvbo->bo.mem.mem_type == TTM_PL_VRAM &&
 402                       b->presumed.domain & NOUVEAU_GEM_DOMAIN_VRAM) ||
 403                      (nvbo->bo.mem.mem_type == TTM_PL_TT &&
 404                       b->presumed.domain & NOUVEAU_GEM_DOMAIN_GART)))
 405                         continue;
 406
 407                 if (nvbo->bo.mem.mem_type == TTM_PL_TT)
 408                         b->presumed.domain = NOUVEAU_GEM_DOMAIN_GART;
 409                 else
 410                         b->presumed.domain = NOUVEAU_GEM_DOMAIN_VRAM;
 411                 b->presumed.offset = nvbo->bo.offset;
 412                 b->presumed.valid = 0;
 413                 relocs++;
 414
 415                 if (DRM_COPY_TO_USER(&upbbo[nvbo->pbbo_index].presumed,
 416                                      &b->presumed, sizeof(b->presumed)))
 417                         return -EFAULT;
 418         }
 419
 420         return relocs;
 421 }
 422
 423 static int
 424 nouveau_gem_pushbuf_validate(struct nouveau_channel *chan,
 425                              struct drm_file *file_priv,
 426                              struct drm_nouveau_gem_pushbuf_bo *pbbo,
 427                              uint64_t user_buffers, int nr_buffers,
 428                              struct validate_op *op, int *apply_relocs)
 429 {
 430         struct drm_device *dev = chan->dev;
 431         int ret, relocs = 0;
 432
 433         INIT_LIST_HEAD(&op->vram_list);
 434         INIT_LIST_HEAD(&op->gart_list);
 435         INIT_LIST_HEAD(&op->both_list);
 436
 437         if (nr_buffers == 0)
 438                 return 0;
 439
 440         ret = validate_init(chan, file_priv, pbbo, nr_buffers, op);
 441         if (unlikely(ret)) {
 442                 NV_ERROR(dev, "validate_init\n");
 443                 return ret;
 444         }
 445
 446         ret = validate_list(chan, &op->vram_list, pbbo, user_buffers);
 447         if (unlikely(ret < 0)) {
 448                 NV_ERROR(dev, "validate vram_list\n");
 449                 validate_fini(op, NULL);
 450                 return ret;
 451         }
 452         relocs += ret;
 453
 454         ret = validate_list(chan, &op->gart_list, pbbo, user_buffers);
 455         if (unlikely(ret < 0)) {
 456                 NV_ERROR(dev, "validate gart_list\n");
 457                 validate_fini(op, NULL);
 458                 return ret;
 459         }
 460         relocs += ret;
 461
 462         ret = validate_list(chan, &op->both_list, pbbo, user_buffers);
 463         if (unlikely(ret < 0)) {
 464                 NV_ERROR(dev, "validate both_list\n");
 465                 validate_fini(op, NULL);
 466                 return ret;
 467         }
 468         relocs += ret;
 469
 470         *apply_relocs = relocs;
 471         return 0;
 472 }
 473
 474 static inline void *
 475 u_memcpya(uint64_t user, unsigned nmemb, unsigned size)
 476 {
 477         void *mem;
 478         void __user *userptr = (void __force __user *)(uintptr_t)user;
 479
 480         mem = kmalloc(nmemb * size, GFP_KERNEL);
 481         if (!mem)
 482                 return ERR_PTR(-ENOMEM);
 483
 484         if (DRM_COPY_FROM_USER(mem, userptr, nmemb * size)) {
 485                 kfree(mem);
 486                 return ERR_PTR(-EFAULT);
 487         }
 488
 489         return mem;
 490 }
 491
 492 static int
 493 nouveau_gem_pushbuf_reloc_apply(struct drm_device *dev,
 494                                 struct drm_nouveau_gem_pushbuf *req,
 495                                 struct drm_nouveau_gem_pushbuf_bo *bo)
 496 {
 497         struct drm_nouveau_gem_pushbuf_reloc *reloc = NULL;
 498         int ret = 0;
 499         unsigned i;
 500
 501         reloc = u_memcpya(req->relocs, req->nr_relocs, sizeof(*reloc));
 502         if (IS_ERR(reloc))
 503                 return PTR_ERR(reloc);
 504
 505         for (i = 0; i < req->nr_relocs; i++) {
 506                 struct drm_nouveau_gem_pushbuf_reloc *r = &reloc[i];
 507                 struct drm_nouveau_gem_pushbuf_bo *b;
 508                 struct nouveau_bo *nvbo;
 509                 uint32_t data;
 510
 511                 if (unlikely(r->bo_index > req->nr_buffers)) {
 512                         NV_ERROR(dev, "reloc bo index invalid\n");
 513                         ret = -EINVAL;
 514                         break;
 515                 }
 516
 517                 b = &bo[r->bo_index];
 518                 if (b->presumed.valid)
 519                         continue;
 520
 521                 if (unlikely(r->reloc_bo_index > req->nr_buffers)) {
 522                         NV_ERROR(dev, "reloc container bo index invalid\n");
 523                         ret = -EINVAL;
 524                         break;
 525                 }
 526                 nvbo = (void *)(unsigned long)bo[r->reloc_bo_index].user_priv;
 527
 528                 if (unlikely(r->reloc_bo_offset + 4 >
 529                              nvbo->bo.mem.num_pages << PAGE_SHIFT)) {
 530                         NV_ERROR(dev, "reloc outside of bo\n");
 531                         ret = -EINVAL;
 532                         break;
 533                 }
 534
 535                 if (!nvbo->kmap.virtual) {
 536                         ret = ttm_bo_kmap(&nvbo->bo, 0, nvbo->bo.mem.num_pages,
 537                                           &nvbo->kmap);
 538                         if (ret) {
 539                                 NV_ERROR(dev, "failed kmap for reloc\n");
 540                                 break;
 541                         }
 542                         nvbo->validate_mapped = true;
 543                 }
 544
 545                 if (r->flags & NOUVEAU_GEM_RELOC_LOW)
 546                         data = b->presumed.offset + r->data;
 547                 else
 548                 if (r->flags & NOUVEAU_GEM_RELOC_HIGH)
 549                         data = (b->presumed.offset + r->data) >> 32;
 550                 else
 551                         data = r->data;
 552
 553                 if (r->flags & NOUVEAU_GEM_RELOC_OR) {
 554                         if (b->presumed.domain == NOUVEAU_GEM_DOMAIN_GART)
 555                                 data |= r->tor;
 556                         else
 557                                 data |= r->vor;
 558                 }
 559
 560                 spin_lock(&nvbo->bo.lock);
 561                 ret = ttm_bo_wait(&nvbo->bo, false, false, false);
 562                 spin_unlock(&nvbo->bo.lock);
 563                 if (ret) {
 564                         NV_ERROR(dev, "reloc wait_idle failed: %d\n", ret);
 565                         break;
 566                 }
 567
 568                 nouveau_bo_wr32(nvbo, r->reloc_bo_offset >> 2, data);
 569         }
 570
 571         kfree(reloc);
 572         return ret;
 573 }
 574
 575 int
 576 nouveau_gem_ioctl_pushbuf(struct drm_device *dev, void *data,
 577                           struct drm_file *file_priv)
 578 {
 579         struct drm_nouveau_private *dev_priv = dev->dev_private;
 580         struct drm_nouveau_gem_pushbuf *req = data;
 581         struct drm_nouveau_gem_pushbuf_push *push;
 582         struct drm_nouveau_gem_pushbuf_bo *bo;
 583         struct nouveau_channel *chan;
 584         struct validate_op op;
 585         struct nouveau_fence *fence = NULL;
 586         int i, j, ret = 0, do_reloc = 0;
 587
 588         NOUVEAU_GET_USER_CHANNEL_WITH_RETURN(req->channel, file_priv, chan);
 589
 590         req->vram_available = dev_priv->fb_aper_free;
 591         req->gart_available = dev_priv->gart_info.aper_free;
 592         if (unlikely(req->nr_push == 0))
 593                 goto out_next;
 594
 595         if (unlikely(req->nr_push > NOUVEAU_GEM_MAX_PUSH)) {
 596                 NV_ERROR(dev, "pushbuf push count exceeds limit: %d max %d\n",
 597                          req->nr_push, NOUVEAU_GEM_MAX_PUSH);
 598                 return -EINVAL;
 599         }
 600
 601         if (unlikely(req->nr_buffers > NOUVEAU_GEM_MAX_BUFFERS)) {
 602                 NV_ERROR(dev, "pushbuf bo count exceeds limit: %d max %d\n",
 603                          req->nr_buffers, NOUVEAU_GEM_MAX_BUFFERS);
 604                 return -EINVAL;
 605         }
 606
 607         if (unlikely(req->nr_relocs > NOUVEAU_GEM_MAX_RELOCS)) {
 608                 NV_ERROR(dev, "pushbuf reloc count exceeds limit: %d max %d\n",
 609                          req->nr_relocs, NOUVEAU_GEM_MAX_RELOCS);
 610                 return -EINVAL;
 611         }
 612
 613         push = u_memcpya(req->push, req->nr_push, sizeof(*push));
 614         if (IS_ERR(push))
 615                 return PTR_ERR(push);
 616
 617         bo = u_memcpya(req->buffers, req->nr_buffers, sizeof(*bo));
 618         if (IS_ERR(bo)) {
 619                 kfree(push);
 620                 return PTR_ERR(bo);
 621         }
 622
 623         /* Mark push buffers as being used on PFIFO, the validation code
 624          * will then make sure that if the pushbuf bo moves, that they
 625          * happen on the kernel channel, which will in turn cause a sync
 626          * to happen before we try and submit the push buffer.
 627          */
 628         for (i = 0; i < req->nr_push; i++) {
 629                 if (push[i].bo_index >= req->nr_buffers) {
 630                         NV_ERROR(dev, "push %d buffer not in list\n", i);
 631                         ret = -EINVAL;
 632                         goto out;
 633                 }
 634
 635                 bo[push[i].bo_index].read_domains |= (1 << 31);
 636         }
 637
 638         /* Validate buffer list */
 639         ret = nouveau_gem_pushbuf_validate(chan, file_priv, bo, req->buffers,
 640                                            req->nr_buffers, &op, &do_reloc);
 641         if (ret) {
 642                 NV_ERROR(dev, "validate: %d\n", ret);
 643                 goto out;
 644         }
 645
 646         /* Apply any relocations that are required */
 647         if (do_reloc) {
 648                 ret = nouveau_gem_pushbuf_reloc_apply(dev, req, bo);
 649                 if (ret) {
 650                         NV_ERROR(dev, "reloc apply: %d\n", ret);
 651                         goto out;
 652                 }
 653         }
 654
 655         if (chan->dma.ib_max) {
 656                 ret = nouveau_dma_wait(chan, req->nr_push + 1, 6);
 657                 if (ret) {
 658                         NV_INFO(dev, "nv50cal_space: %d\n", ret);
 659                         goto out;
 660                 }
 661
 662                 for (i = 0; i < req->nr_push; i++) {
 663                         struct nouveau_bo *nvbo = (void *)(unsigned long)
 664                                 bo[push[i].bo_index].user_priv;
 665
 666                         nv50_dma_push(chan, nvbo, push[i].offset,
 667                                       push[i].length);
 668                 }
 669         } else
 670         if (dev_priv->chipset >= 0x25) {
 671                 ret = RING_SPACE(chan, req->nr_push * 2);
 672                 if (ret) {
 673                         NV_ERROR(dev, "cal_space: %d\n", ret);
 674                         goto out;
 675                 }
 676
 677                 for (i = 0; i < req->nr_push; i++) {
 678                         struct nouveau_bo *nvbo = (void *)(unsigned long)
 679                                 bo[push[i].bo_index].user_priv;
 680                         struct drm_mm_node *mem = nvbo->bo.mem.mm_node;
 681
 682                         OUT_RING(chan, ((mem->start << PAGE_SHIFT) +
 683                                         push[i].offset) | 2);
 684                         OUT_RING(chan, 0);
 685                 }
 686         } else {
 687                 ret = RING_SPACE(chan, req->nr_push * (2 + NOUVEAU_DMA_SKIPS));
 688                 if (ret) {
 689                         NV_ERROR(dev, "jmp_space: %d\n", ret);
 690                         goto out;
 691                 }
 692
 693                 for (i = 0; i < req->nr_push; i++) {
 694                         struct nouveau_bo *nvbo = (void *)(unsigned long)
 695                                 bo[push[i].bo_index].user_priv;
 696                         struct drm_mm_node *mem = nvbo->bo.mem.mm_node;
 697                         uint32_t cmd;
 698
 699                         cmd = chan->pushbuf_base + ((chan->dma.cur + 2) << 2);
 700                         cmd |= 0x20000000;
 701                         if (unlikely(cmd != req->suffix0)) {
 702                                 if (!nvbo->kmap.virtual) {
 703                                         ret = ttm_bo_kmap(&nvbo->bo, 0,
 704                                                           nvbo->bo.mem.
 705                                                           num_pages,
 706                                                           &nvbo->kmap);
 707                                         if (ret) {
 708                                                 WIND_RING(chan);
 709                                                 goto out;
 710                                         }
 711                                         nvbo->validate_mapped = true;
 712                                 }
 713
 714                                 nouveau_bo_wr32(nvbo, (push[i].offset +
 715                                                 push[i].length - 8) / 4, cmd);
 716                         }
 717
 718                         OUT_RING(chan, ((mem->start << PAGE_SHIFT) +
 719                                         push[i].offset) | 0x20000000);
 720                         OUT_RING(chan, 0);
 721                         for (j = 0; j < NOUVEAU_DMA_SKIPS; j++)
 722                                 OUT_RING(chan, 0);
 723                 }
 724         }
 725
 726         ret = nouveau_fence_new(chan, &fence, true);
 727         if (ret) {
 728                 NV_ERROR(dev, "error fencing pushbuf: %d\n", ret);
 729                 WIND_RING(chan);
 730                 goto out;
 731         }
 732
 733 out:
 734         validate_fini(&op, fence);
 735         nouveau_fence_unref((void**)&fence);
 736         kfree(bo);
 737         kfree(push);
 738
 739 out_next:
 740         if (chan->dma.ib_max) {
 741                 req->suffix0 = 0x00000000;
 742                 req->suffix1 = 0x00000000;
 743         } else
 744         if (dev_priv->chipset >= 0x25) {
 745                 req->suffix0 = 0x00020000;
 746                 req->suffix1 = 0x00000000;
 747         } else {
 748                 req->suffix0 = 0x20000000 |
 749                               (chan->pushbuf_base + ((chan->dma.cur + 2) << 2));
 750                 req->suffix1 = 0x00000000;
 751         }
 752
 753         return ret;
 754 }
 755
 756 static inline uint32_t
 757 domain_to_ttm(struct nouveau_bo *nvbo, uint32_t domain)
 758 {
 759         uint32_t flags = 0;
 760
 761         if (domain & NOUVEAU_GEM_DOMAIN_VRAM)
 762                 flags |= TTM_PL_FLAG_VRAM;
 763         if (domain & NOUVEAU_GEM_DOMAIN_GART)
 764                 flags |= TTM_PL_FLAG_TT;
 765
 766         return flags;
 767 }
 768
 769 int
 770 nouveau_gem_ioctl_cpu_prep(struct drm_device *dev, void *data,
 771                            struct drm_file *file_priv)
 772 {
 773         struct drm_nouveau_gem_cpu_prep *req = data;
 774         struct drm_gem_object *gem;
 775         struct nouveau_bo *nvbo;
 776         bool no_wait = !!(req->flags & NOUVEAU_GEM_CPU_PREP_NOWAIT);
 777         int ret = -EINVAL;
 778
 779         gem = drm_gem_object_lookup(dev, file_priv, req->handle);
 780         if (!gem)
 781                 return -ENOENT;
 782         nvbo = nouveau_gem_object(gem);
 783
 784         if (nvbo->cpu_filp) {
 785                 if (nvbo->cpu_filp == file_priv)
 786                         goto out;
 787
 788                 ret = ttm_bo_wait_cpu(&nvbo->bo, no_wait);
 789                 if (ret)
 790                         goto out;
 791         }
 792
 793         if (req->flags & NOUVEAU_GEM_CPU_PREP_NOBLOCK) {
 794                 spin_lock(&nvbo->bo.lock);
 795                 ret = ttm_bo_wait(&nvbo->bo, false, false, no_wait);
 796                 spin_unlock(&nvbo->bo.lock);
 797         } else {
 798                 ret = ttm_bo_synccpu_write_grab(&nvbo->bo, no_wait);
 799                 if (ret == 0)
 800                         nvbo->cpu_filp = file_priv;
 801         }
 802
 803 out:
 804         drm_gem_object_unreference_unlocked(gem);
 805         return ret;
 806 }
 807
 808 int
 809 nouveau_gem_ioctl_cpu_fini(struct drm_device *dev, void *data,
 810                            struct drm_file *file_priv)
 811 {
 812         struct drm_nouveau_gem_cpu_prep *req = data;
 813         struct drm_gem_object *gem;
 814         struct nouveau_bo *nvbo;
 815         int ret = -EINVAL;
 816
 817         gem = drm_gem_object_lookup(dev, file_priv, req->handle);
 818         if (!gem)
 819                 return -ENOENT;
 820         nvbo = nouveau_gem_object(gem);
 821
 822         if (nvbo->cpu_filp != file_priv)
 823                 goto out;
 824         nvbo->cpu_filp = NULL;
 825
 826         ttm_bo_synccpu_write_release(&nvbo->bo);
 827         ret = 0;
 828
 829 out:
 830         drm_gem_object_unreference_unlocked(gem);
 831         return ret;
 832 }
 833
 834 int
 835 nouveau_gem_ioctl_info(struct drm_device *dev, void *data,
 836                        struct drm_file *file_priv)
 837 {
 838         struct drm_nouveau_gem_info *req = data;
 839         struct drm_gem_object *gem;
 840         int ret;
 841
 842         gem = drm_gem_object_lookup(dev, file_priv, req->handle);
 843         if (!gem)
 844                 return -ENOENT;
 845
 846         ret = nouveau_gem_info(gem, req);
 847         drm_gem_object_unreference_unlocked(gem);
 848         return ret;
 849 }
 850