ac24cfd431b5449aa0afbd344469b2abc3c5eb3b
[pandora-kernel.git] / drivers / gpu / drm / vmwgfx / vmwgfx_kms.c
1 /**************************************************************************
2  *
3  * Copyright © 2009 VMware, Inc., Palo Alto, CA., USA
4  * All Rights Reserved.
5  *
6  * Permission is hereby granted, free of charge, to any person obtaining a
7  * copy of this software and associated documentation files (the
8  * "Software"), to deal in the Software without restriction, including
9  * without limitation the rights to use, copy, modify, merge, publish,
10  * distribute, sub license, and/or sell copies of the Software, and to
11  * permit persons to whom the Software is furnished to do so, subject to
12  * the following conditions:
13  *
14  * The above copyright notice and this permission notice (including the
15  * next paragraph) shall be included in all copies or substantial portions
16  * of the Software.
17  *
18  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
19  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
20  * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL
21  * THE COPYRIGHT HOLDERS, AUTHORS AND/OR ITS SUPPLIERS BE LIABLE FOR ANY CLAIM,
22  * DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
23  * OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
24  * USE OR OTHER DEALINGS IN THE SOFTWARE.
25  *
26  **************************************************************************/
27
28 #include "vmwgfx_kms.h"
29
30
31 /* Might need a hrtimer here? */
32 #define VMWGFX_PRESENT_RATE ((HZ / 60 > 0) ? HZ / 60 : 1)
33
34 void vmw_display_unit_cleanup(struct vmw_display_unit *du)
35 {
36         if (du->cursor_surface)
37                 vmw_surface_unreference(&du->cursor_surface);
38         if (du->cursor_dmabuf)
39                 vmw_dmabuf_unreference(&du->cursor_dmabuf);
40         drm_crtc_cleanup(&du->crtc);
41         drm_encoder_cleanup(&du->encoder);
42         drm_connector_cleanup(&du->connector);
43 }
44
45 /*
46  * Display Unit Cursor functions
47  */
48
49 int vmw_cursor_update_image(struct vmw_private *dev_priv,
50                             u32 *image, u32 width, u32 height,
51                             u32 hotspotX, u32 hotspotY)
52 {
53         struct {
54                 u32 cmd;
55                 SVGAFifoCmdDefineAlphaCursor cursor;
56         } *cmd;
57         u32 image_size = width * height * 4;
58         u32 cmd_size = sizeof(*cmd) + image_size;
59
60         if (!image)
61                 return -EINVAL;
62
63         cmd = vmw_fifo_reserve(dev_priv, cmd_size);
64         if (unlikely(cmd == NULL)) {
65                 DRM_ERROR("Fifo reserve failed.\n");
66                 return -ENOMEM;
67         }
68
69         memset(cmd, 0, sizeof(*cmd));
70
71         memcpy(&cmd[1], image, image_size);
72
73         cmd->cmd = cpu_to_le32(SVGA_CMD_DEFINE_ALPHA_CURSOR);
74         cmd->cursor.id = cpu_to_le32(0);
75         cmd->cursor.width = cpu_to_le32(width);
76         cmd->cursor.height = cpu_to_le32(height);
77         cmd->cursor.hotspotX = cpu_to_le32(hotspotX);
78         cmd->cursor.hotspotY = cpu_to_le32(hotspotY);
79
80         vmw_fifo_commit(dev_priv, cmd_size);
81
82         return 0;
83 }
84
85 int vmw_cursor_update_dmabuf(struct vmw_private *dev_priv,
86                              struct vmw_dma_buffer *dmabuf,
87                              u32 width, u32 height,
88                              u32 hotspotX, u32 hotspotY)
89 {
90         struct ttm_bo_kmap_obj map;
91         unsigned long kmap_offset;
92         unsigned long kmap_num;
93         void *virtual;
94         bool dummy;
95         int ret;
96
97         kmap_offset = 0;
98         kmap_num = (width*height*4 + PAGE_SIZE - 1) >> PAGE_SHIFT;
99
100         ret = ttm_bo_reserve(&dmabuf->base, true, false, false, 0);
101         if (unlikely(ret != 0)) {
102                 DRM_ERROR("reserve failed\n");
103                 return -EINVAL;
104         }
105
106         ret = ttm_bo_kmap(&dmabuf->base, kmap_offset, kmap_num, &map);
107         if (unlikely(ret != 0))
108                 goto err_unreserve;
109
110         virtual = ttm_kmap_obj_virtual(&map, &dummy);
111         ret = vmw_cursor_update_image(dev_priv, virtual, width, height,
112                                       hotspotX, hotspotY);
113
114         ttm_bo_kunmap(&map);
115 err_unreserve:
116         ttm_bo_unreserve(&dmabuf->base);
117
118         return ret;
119 }
120
121
122 void vmw_cursor_update_position(struct vmw_private *dev_priv,
123                                 bool show, int x, int y)
124 {
125         __le32 __iomem *fifo_mem = dev_priv->mmio_virt;
126         uint32_t count;
127
128         iowrite32(show ? 1 : 0, fifo_mem + SVGA_FIFO_CURSOR_ON);
129         iowrite32(x, fifo_mem + SVGA_FIFO_CURSOR_X);
130         iowrite32(y, fifo_mem + SVGA_FIFO_CURSOR_Y);
131         count = ioread32(fifo_mem + SVGA_FIFO_CURSOR_COUNT);
132         iowrite32(++count, fifo_mem + SVGA_FIFO_CURSOR_COUNT);
133 }
134
135 int vmw_du_crtc_cursor_set(struct drm_crtc *crtc, struct drm_file *file_priv,
136                            uint32_t handle, uint32_t width, uint32_t height)
137 {
138         struct vmw_private *dev_priv = vmw_priv(crtc->dev);
139         struct ttm_object_file *tfile = vmw_fpriv(file_priv)->tfile;
140         struct vmw_display_unit *du = vmw_crtc_to_du(crtc);
141         struct vmw_surface *surface = NULL;
142         struct vmw_dma_buffer *dmabuf = NULL;
143         int ret;
144
145         /* A lot of the code assumes this */
146         if (handle && (width != 64 || height != 64))
147                 return -EINVAL;
148
149         if (handle) {
150                 ret = vmw_user_lookup_handle(dev_priv, tfile,
151                                              handle, &surface, &dmabuf);
152                 if (ret) {
153                         DRM_ERROR("failed to find surface or dmabuf: %i\n", ret);
154                         return -EINVAL;
155                 }
156         }
157
158         /* need to do this before taking down old image */
159         if (surface && !surface->snooper.image) {
160                 DRM_ERROR("surface not suitable for cursor\n");
161                 vmw_surface_unreference(&surface);
162                 return -EINVAL;
163         }
164
165         /* takedown old cursor */
166         if (du->cursor_surface) {
167                 du->cursor_surface->snooper.crtc = NULL;
168                 vmw_surface_unreference(&du->cursor_surface);
169         }
170         if (du->cursor_dmabuf)
171                 vmw_dmabuf_unreference(&du->cursor_dmabuf);
172
173         /* setup new image */
174         if (surface) {
175                 /* vmw_user_surface_lookup takes one reference */
176                 du->cursor_surface = surface;
177
178                 du->cursor_surface->snooper.crtc = crtc;
179                 du->cursor_age = du->cursor_surface->snooper.age;
180                 vmw_cursor_update_image(dev_priv, surface->snooper.image,
181                                         64, 64, du->hotspot_x, du->hotspot_y);
182         } else if (dmabuf) {
183                 /* vmw_user_surface_lookup takes one reference */
184                 du->cursor_dmabuf = dmabuf;
185
186                 ret = vmw_cursor_update_dmabuf(dev_priv, dmabuf, width, height,
187                                                du->hotspot_x, du->hotspot_y);
188         } else {
189                 vmw_cursor_update_position(dev_priv, false, 0, 0);
190                 return 0;
191         }
192
193         vmw_cursor_update_position(dev_priv, true,
194                                    du->cursor_x + du->hotspot_x,
195                                    du->cursor_y + du->hotspot_y);
196
197         return 0;
198 }
199
200 int vmw_du_crtc_cursor_move(struct drm_crtc *crtc, int x, int y)
201 {
202         struct vmw_private *dev_priv = vmw_priv(crtc->dev);
203         struct vmw_display_unit *du = vmw_crtc_to_du(crtc);
204         bool shown = du->cursor_surface || du->cursor_dmabuf ? true : false;
205
206         du->cursor_x = x + crtc->x;
207         du->cursor_y = y + crtc->y;
208
209         vmw_cursor_update_position(dev_priv, shown,
210                                    du->cursor_x + du->hotspot_x,
211                                    du->cursor_y + du->hotspot_y);
212
213         return 0;
214 }
215
216 void vmw_kms_cursor_snoop(struct vmw_surface *srf,
217                           struct ttm_object_file *tfile,
218                           struct ttm_buffer_object *bo,
219                           SVGA3dCmdHeader *header)
220 {
221         struct ttm_bo_kmap_obj map;
222         unsigned long kmap_offset;
223         unsigned long kmap_num;
224         SVGA3dCopyBox *box;
225         unsigned box_count;
226         void *virtual;
227         bool dummy;
228         struct vmw_dma_cmd {
229                 SVGA3dCmdHeader header;
230                 SVGA3dCmdSurfaceDMA dma;
231         } *cmd;
232         int i, ret;
233
234         cmd = container_of(header, struct vmw_dma_cmd, header);
235
236         /* No snooper installed */
237         if (!srf->snooper.image)
238                 return;
239
240         if (cmd->dma.host.face != 0 || cmd->dma.host.mipmap != 0) {
241                 DRM_ERROR("face and mipmap for cursors should never != 0\n");
242                 return;
243         }
244
245         if (cmd->header.size < 64) {
246                 DRM_ERROR("at least one full copy box must be given\n");
247                 return;
248         }
249
250         box = (SVGA3dCopyBox *)&cmd[1];
251         box_count = (cmd->header.size - sizeof(SVGA3dCmdSurfaceDMA)) /
252                         sizeof(SVGA3dCopyBox);
253
254         if (cmd->dma.guest.ptr.offset % PAGE_SIZE ||
255             box->x != 0    || box->y != 0    || box->z != 0    ||
256             box->srcx != 0 || box->srcy != 0 || box->srcz != 0 ||
257             box->d != 1    || box_count != 1) {
258                 /* TODO handle none page aligned offsets */
259                 /* TODO handle more dst & src != 0 */
260                 /* TODO handle more then one copy */
261                 DRM_ERROR("Cant snoop dma request for cursor!\n");
262                 DRM_ERROR("(%u, %u, %u) (%u, %u, %u) (%ux%ux%u) %u %u\n",
263                           box->srcx, box->srcy, box->srcz,
264                           box->x, box->y, box->z,
265                           box->w, box->h, box->d, box_count,
266                           cmd->dma.guest.ptr.offset);
267                 return;
268         }
269
270         kmap_offset = cmd->dma.guest.ptr.offset >> PAGE_SHIFT;
271         kmap_num = (64*64*4) >> PAGE_SHIFT;
272
273         ret = ttm_bo_reserve(bo, true, false, false, 0);
274         if (unlikely(ret != 0)) {
275                 DRM_ERROR("reserve failed\n");
276                 return;
277         }
278
279         ret = ttm_bo_kmap(bo, kmap_offset, kmap_num, &map);
280         if (unlikely(ret != 0))
281                 goto err_unreserve;
282
283         virtual = ttm_kmap_obj_virtual(&map, &dummy);
284
285         if (box->w == 64 && cmd->dma.guest.pitch == 64*4) {
286                 memcpy(srf->snooper.image, virtual, 64*64*4);
287         } else {
288                 /* Image is unsigned pointer. */
289                 for (i = 0; i < box->h; i++)
290                         memcpy(srf->snooper.image + i * 64,
291                                virtual + i * cmd->dma.guest.pitch,
292                                box->w * 4);
293         }
294
295         srf->snooper.age++;
296
297         /* we can't call this function from this function since execbuf has
298          * reserved fifo space.
299          *
300          * if (srf->snooper.crtc)
301          *      vmw_ldu_crtc_cursor_update_image(dev_priv,
302          *                                       srf->snooper.image, 64, 64,
303          *                                       du->hotspot_x, du->hotspot_y);
304          */
305
306         ttm_bo_kunmap(&map);
307 err_unreserve:
308         ttm_bo_unreserve(bo);
309 }
310
311 void vmw_kms_cursor_post_execbuf(struct vmw_private *dev_priv)
312 {
313         struct drm_device *dev = dev_priv->dev;
314         struct vmw_display_unit *du;
315         struct drm_crtc *crtc;
316
317         mutex_lock(&dev->mode_config.mutex);
318
319         list_for_each_entry(crtc, &dev->mode_config.crtc_list, head) {
320                 du = vmw_crtc_to_du(crtc);
321                 if (!du->cursor_surface ||
322                     du->cursor_age == du->cursor_surface->snooper.age)
323                         continue;
324
325                 du->cursor_age = du->cursor_surface->snooper.age;
326                 vmw_cursor_update_image(dev_priv,
327                                         du->cursor_surface->snooper.image,
328                                         64, 64, du->hotspot_x, du->hotspot_y);
329         }
330
331         mutex_unlock(&dev->mode_config.mutex);
332 }
333
334 /*
335  * Generic framebuffer code
336  */
337
338 int vmw_framebuffer_create_handle(struct drm_framebuffer *fb,
339                                   struct drm_file *file_priv,
340                                   unsigned int *handle)
341 {
342         if (handle)
343                 handle = 0;
344
345         return 0;
346 }
347
348 /*
349  * Surface framebuffer code
350  */
351
352 #define vmw_framebuffer_to_vfbs(x) \
353         container_of(x, struct vmw_framebuffer_surface, base.base)
354
355 struct vmw_framebuffer_surface {
356         struct vmw_framebuffer base;
357         struct vmw_surface *surface;
358         struct vmw_dma_buffer *buffer;
359         struct list_head head;
360         struct drm_master *master;
361 };
362
363 void vmw_framebuffer_surface_destroy(struct drm_framebuffer *framebuffer)
364 {
365         struct vmw_framebuffer_surface *vfbs =
366                 vmw_framebuffer_to_vfbs(framebuffer);
367         struct vmw_master *vmaster = vmw_master(vfbs->master);
368
369
370         mutex_lock(&vmaster->fb_surf_mutex);
371         list_del(&vfbs->head);
372         mutex_unlock(&vmaster->fb_surf_mutex);
373
374         drm_master_put(&vfbs->master);
375         drm_framebuffer_cleanup(framebuffer);
376         vmw_surface_unreference(&vfbs->surface);
377         ttm_base_object_unref(&vfbs->base.user_obj);
378
379         kfree(vfbs);
380 }
381
382 static int do_surface_dirty_sou(struct vmw_private *dev_priv,
383                                 struct drm_file *file_priv,
384                                 struct vmw_framebuffer *framebuffer,
385                                 unsigned flags, unsigned color,
386                                 struct drm_clip_rect *clips,
387                                 unsigned num_clips, int inc)
388 {
389         struct drm_clip_rect *clips_ptr;
390         struct vmw_display_unit *units[VMWGFX_NUM_DISPLAY_UNITS];
391         struct drm_crtc *crtc;
392         size_t fifo_size;
393         int i, num_units;
394         int ret = 0; /* silence warning */
395         int left, right, top, bottom;
396
397         struct {
398                 SVGA3dCmdHeader header;
399                 SVGA3dCmdBlitSurfaceToScreen body;
400         } *cmd;
401         SVGASignedRect *blits;
402
403
404         num_units = 0;
405         list_for_each_entry(crtc, &dev_priv->dev->mode_config.crtc_list,
406                             head) {
407                 if (crtc->fb != &framebuffer->base)
408                         continue;
409                 units[num_units++] = vmw_crtc_to_du(crtc);
410         }
411
412         BUG_ON(!clips || !num_clips);
413
414         fifo_size = sizeof(*cmd) + sizeof(SVGASignedRect) * num_clips;
415         cmd = kzalloc(fifo_size, GFP_KERNEL);
416         if (unlikely(cmd == NULL)) {
417                 DRM_ERROR("Temporary fifo memory alloc failed.\n");
418                 return -ENOMEM;
419         }
420
421         left = clips->x1;
422         right = clips->x2;
423         top = clips->y1;
424         bottom = clips->y2;
425
426         /* skip the first clip rect */
427         for (i = 1, clips_ptr = clips + inc;
428              i < num_clips; i++, clips_ptr += inc) {
429                 left = min_t(int, left, (int)clips_ptr->x1);
430                 right = max_t(int, right, (int)clips_ptr->x2);
431                 top = min_t(int, top, (int)clips_ptr->y1);
432                 bottom = max_t(int, bottom, (int)clips_ptr->y2);
433         }
434
435         /* only need to do this once */
436         memset(cmd, 0, fifo_size);
437         cmd->header.id = cpu_to_le32(SVGA_3D_CMD_BLIT_SURFACE_TO_SCREEN);
438         cmd->header.size = cpu_to_le32(fifo_size - sizeof(cmd->header));
439
440         cmd->body.srcRect.left = left;
441         cmd->body.srcRect.right = right;
442         cmd->body.srcRect.top = top;
443         cmd->body.srcRect.bottom = bottom;
444
445         clips_ptr = clips;
446         blits = (SVGASignedRect *)&cmd[1];
447         for (i = 0; i < num_clips; i++, clips_ptr += inc) {
448                 blits[i].left   = clips_ptr->x1 - left;
449                 blits[i].right  = clips_ptr->x2 - left;
450                 blits[i].top    = clips_ptr->y1 - top;
451                 blits[i].bottom = clips_ptr->y2 - top;
452         }
453
454         /* do per unit writing, reuse fifo for each */
455         for (i = 0; i < num_units; i++) {
456                 struct vmw_display_unit *unit = units[i];
457                 int clip_x1 = left - unit->crtc.x;
458                 int clip_y1 = top - unit->crtc.y;
459                 int clip_x2 = right - unit->crtc.x;
460                 int clip_y2 = bottom - unit->crtc.y;
461
462                 /* skip any crtcs that misses the clip region */
463                 if (clip_x1 >= unit->crtc.mode.hdisplay ||
464                     clip_y1 >= unit->crtc.mode.vdisplay ||
465                     clip_x2 <= 0 || clip_y2 <= 0)
466                         continue;
467
468                 /* need to reset sid as it is changed by execbuf */
469                 cmd->body.srcImage.sid = cpu_to_le32(framebuffer->user_handle);
470
471                 cmd->body.destScreenId = unit->unit;
472
473                 /*
474                  * The blit command is a lot more resilient then the
475                  * readback command when it comes to clip rects. So its
476                  * okay to go out of bounds.
477                  */
478
479                 cmd->body.destRect.left = clip_x1;
480                 cmd->body.destRect.right = clip_x2;
481                 cmd->body.destRect.top = clip_y1;
482                 cmd->body.destRect.bottom = clip_y2;
483
484
485                 ret = vmw_execbuf_process(file_priv, dev_priv, NULL, cmd,
486                                           fifo_size, 0, NULL);
487
488                 if (unlikely(ret != 0))
489                         break;
490         }
491
492         kfree(cmd);
493
494         return ret;
495 }
496
497 int vmw_framebuffer_surface_dirty(struct drm_framebuffer *framebuffer,
498                                   struct drm_file *file_priv,
499                                   unsigned flags, unsigned color,
500                                   struct drm_clip_rect *clips,
501                                   unsigned num_clips)
502 {
503         struct vmw_private *dev_priv = vmw_priv(framebuffer->dev);
504         struct vmw_master *vmaster = vmw_master(file_priv->master);
505         struct vmw_framebuffer_surface *vfbs =
506                 vmw_framebuffer_to_vfbs(framebuffer);
507         struct drm_clip_rect norect;
508         int ret, inc = 1;
509
510         if (unlikely(vfbs->master != file_priv->master))
511                 return -EINVAL;
512
513         /* Require ScreenObject support for 3D */
514         if (!dev_priv->sou_priv)
515                 return -EINVAL;
516
517         ret = ttm_read_lock(&vmaster->lock, true);
518         if (unlikely(ret != 0))
519                 return ret;
520
521         if (!num_clips) {
522                 num_clips = 1;
523                 clips = &norect;
524                 norect.x1 = norect.y1 = 0;
525                 norect.x2 = framebuffer->width;
526                 norect.y2 = framebuffer->height;
527         } else if (flags & DRM_MODE_FB_DIRTY_ANNOTATE_COPY) {
528                 num_clips /= 2;
529                 inc = 2; /* skip source rects */
530         }
531
532         ret = do_surface_dirty_sou(dev_priv, file_priv, &vfbs->base,
533                                    flags, color,
534                                    clips, num_clips, inc);
535
536         ttm_read_unlock(&vmaster->lock);
537         return 0;
538 }
539
540 static struct drm_framebuffer_funcs vmw_framebuffer_surface_funcs = {
541         .destroy = vmw_framebuffer_surface_destroy,
542         .dirty = vmw_framebuffer_surface_dirty,
543         .create_handle = vmw_framebuffer_create_handle,
544 };
545
546 static int vmw_kms_new_framebuffer_surface(struct vmw_private *dev_priv,
547                                            struct drm_file *file_priv,
548                                            struct vmw_surface *surface,
549                                            struct vmw_framebuffer **out,
550                                            const struct drm_mode_fb_cmd
551                                            *mode_cmd)
552
553 {
554         struct drm_device *dev = dev_priv->dev;
555         struct vmw_framebuffer_surface *vfbs;
556         enum SVGA3dSurfaceFormat format;
557         struct vmw_master *vmaster = vmw_master(file_priv->master);
558         int ret;
559
560         /* 3D is only supported on HWv8 hosts which supports screen objects */
561         if (!dev_priv->sou_priv)
562                 return -ENOSYS;
563
564         /*
565          * Sanity checks.
566          */
567
568         /* Surface must be marked as a scanout. */
569         if (unlikely(!surface->scanout))
570                 return -EINVAL;
571
572         if (unlikely(surface->mip_levels[0] != 1 ||
573                      surface->num_sizes != 1 ||
574                      surface->sizes[0].width < mode_cmd->width ||
575                      surface->sizes[0].height < mode_cmd->height ||
576                      surface->sizes[0].depth != 1)) {
577                 DRM_ERROR("Incompatible surface dimensions "
578                           "for requested mode.\n");
579                 return -EINVAL;
580         }
581
582         switch (mode_cmd->depth) {
583         case 32:
584                 format = SVGA3D_A8R8G8B8;
585                 break;
586         case 24:
587                 format = SVGA3D_X8R8G8B8;
588                 break;
589         case 16:
590                 format = SVGA3D_R5G6B5;
591                 break;
592         case 15:
593                 format = SVGA3D_A1R5G5B5;
594                 break;
595         case 8:
596                 format = SVGA3D_LUMINANCE8;
597                 break;
598         default:
599                 DRM_ERROR("Invalid color depth: %d\n", mode_cmd->depth);
600                 return -EINVAL;
601         }
602
603         if (unlikely(format != surface->format)) {
604                 DRM_ERROR("Invalid surface format for requested mode.\n");
605                 return -EINVAL;
606         }
607
608         vfbs = kzalloc(sizeof(*vfbs), GFP_KERNEL);
609         if (!vfbs) {
610                 ret = -ENOMEM;
611                 goto out_err1;
612         }
613
614         ret = drm_framebuffer_init(dev, &vfbs->base.base,
615                                    &vmw_framebuffer_surface_funcs);
616         if (ret)
617                 goto out_err2;
618
619         if (!vmw_surface_reference(surface)) {
620                 DRM_ERROR("failed to reference surface %p\n", surface);
621                 goto out_err3;
622         }
623
624         /* XXX get the first 3 from the surface info */
625         vfbs->base.base.bits_per_pixel = mode_cmd->bpp;
626         vfbs->base.base.pitch = mode_cmd->pitch;
627         vfbs->base.base.depth = mode_cmd->depth;
628         vfbs->base.base.width = mode_cmd->width;
629         vfbs->base.base.height = mode_cmd->height;
630         vfbs->surface = surface;
631         vfbs->base.user_handle = mode_cmd->handle;
632         vfbs->master = drm_master_get(file_priv->master);
633
634         mutex_lock(&vmaster->fb_surf_mutex);
635         list_add_tail(&vfbs->head, &vmaster->fb_surf);
636         mutex_unlock(&vmaster->fb_surf_mutex);
637
638         *out = &vfbs->base;
639
640         return 0;
641
642 out_err3:
643         drm_framebuffer_cleanup(&vfbs->base.base);
644 out_err2:
645         kfree(vfbs);
646 out_err1:
647         return ret;
648 }
649
650 /*
651  * Dmabuf framebuffer code
652  */
653
654 #define vmw_framebuffer_to_vfbd(x) \
655         container_of(x, struct vmw_framebuffer_dmabuf, base.base)
656
657 struct vmw_framebuffer_dmabuf {
658         struct vmw_framebuffer base;
659         struct vmw_dma_buffer *buffer;
660 };
661
662 void vmw_framebuffer_dmabuf_destroy(struct drm_framebuffer *framebuffer)
663 {
664         struct vmw_framebuffer_dmabuf *vfbd =
665                 vmw_framebuffer_to_vfbd(framebuffer);
666
667         drm_framebuffer_cleanup(framebuffer);
668         vmw_dmabuf_unreference(&vfbd->buffer);
669         ttm_base_object_unref(&vfbd->base.user_obj);
670
671         kfree(vfbd);
672 }
673
674 static int do_dmabuf_dirty_ldu(struct vmw_private *dev_priv,
675                                struct vmw_framebuffer *framebuffer,
676                                unsigned flags, unsigned color,
677                                struct drm_clip_rect *clips,
678                                unsigned num_clips, int increment)
679 {
680         size_t fifo_size;
681         int i;
682
683         struct {
684                 uint32_t header;
685                 SVGAFifoCmdUpdate body;
686         } *cmd;
687
688         fifo_size = sizeof(*cmd) * num_clips;
689         cmd = vmw_fifo_reserve(dev_priv, fifo_size);
690         if (unlikely(cmd == NULL)) {
691                 DRM_ERROR("Fifo reserve failed.\n");
692                 return -ENOMEM;
693         }
694
695         memset(cmd, 0, fifo_size);
696         for (i = 0; i < num_clips; i++, clips += increment) {
697                 cmd[i].header = cpu_to_le32(SVGA_CMD_UPDATE);
698                 cmd[i].body.x = cpu_to_le32(clips->x1);
699                 cmd[i].body.y = cpu_to_le32(clips->y1);
700                 cmd[i].body.width = cpu_to_le32(clips->x2 - clips->x1);
701                 cmd[i].body.height = cpu_to_le32(clips->y2 - clips->y1);
702         }
703
704         vmw_fifo_commit(dev_priv, fifo_size);
705         return 0;
706 }
707
708 static int do_dmabuf_define_gmrfb(struct drm_file *file_priv,
709                                   struct vmw_private *dev_priv,
710                                   struct vmw_framebuffer *framebuffer)
711 {
712         int depth = framebuffer->base.depth;
713         size_t fifo_size;
714         int ret;
715
716         struct {
717                 uint32_t header;
718                 SVGAFifoCmdDefineGMRFB body;
719         } *cmd;
720
721         /* Emulate RGBA support, contrary to svga_reg.h this is not
722          * supported by hosts. This is only a problem if we are reading
723          * this value later and expecting what we uploaded back.
724          */
725         if (depth == 32)
726                 depth = 24;
727
728         fifo_size = sizeof(*cmd);
729         cmd = kmalloc(fifo_size, GFP_KERNEL);
730         if (unlikely(cmd == NULL)) {
731                 DRM_ERROR("Failed to allocate temporary cmd buffer.\n");
732                 return -ENOMEM;
733         }
734
735         memset(cmd, 0, fifo_size);
736         cmd->header = SVGA_CMD_DEFINE_GMRFB;
737         cmd->body.format.bitsPerPixel = framebuffer->base.bits_per_pixel;
738         cmd->body.format.colorDepth = depth;
739         cmd->body.format.reserved = 0;
740         cmd->body.bytesPerLine = framebuffer->base.pitch;
741         cmd->body.ptr.gmrId = framebuffer->user_handle;
742         cmd->body.ptr.offset = 0;
743
744         ret = vmw_execbuf_process(file_priv, dev_priv, NULL, cmd,
745                                   fifo_size, 0, NULL);
746
747         kfree(cmd);
748
749         return ret;
750 }
751
752 static int do_dmabuf_dirty_sou(struct drm_file *file_priv,
753                                struct vmw_private *dev_priv,
754                                struct vmw_framebuffer *framebuffer,
755                                unsigned flags, unsigned color,
756                                struct drm_clip_rect *clips,
757                                unsigned num_clips, int increment)
758 {
759         struct vmw_display_unit *units[VMWGFX_NUM_DISPLAY_UNITS];
760         struct drm_clip_rect *clips_ptr;
761         int i, k, num_units, ret;
762         struct drm_crtc *crtc;
763         size_t fifo_size;
764
765         struct {
766                 uint32_t header;
767                 SVGAFifoCmdBlitGMRFBToScreen body;
768         } *blits;
769
770         ret = do_dmabuf_define_gmrfb(file_priv, dev_priv, framebuffer);
771         if (unlikely(ret != 0))
772                 return ret; /* define_gmrfb prints warnings */
773
774         fifo_size = sizeof(*blits) * num_clips;
775         blits = kmalloc(fifo_size, GFP_KERNEL);
776         if (unlikely(blits == NULL)) {
777                 DRM_ERROR("Failed to allocate temporary cmd buffer.\n");
778                 return -ENOMEM;
779         }
780
781         num_units = 0;
782         list_for_each_entry(crtc, &dev_priv->dev->mode_config.crtc_list, head) {
783                 if (crtc->fb != &framebuffer->base)
784                         continue;
785                 units[num_units++] = vmw_crtc_to_du(crtc);
786         }
787
788         for (k = 0; k < num_units; k++) {
789                 struct vmw_display_unit *unit = units[k];
790                 int hit_num = 0;
791
792                 clips_ptr = clips;
793                 for (i = 0; i < num_clips; i++, clips_ptr += increment) {
794                         int clip_x1 = clips_ptr->x1 - unit->crtc.x;
795                         int clip_y1 = clips_ptr->y1 - unit->crtc.y;
796                         int clip_x2 = clips_ptr->x2 - unit->crtc.x;
797                         int clip_y2 = clips_ptr->y2 - unit->crtc.y;
798
799                         /* skip any crtcs that misses the clip region */
800                         if (clip_x1 >= unit->crtc.mode.hdisplay ||
801                             clip_y1 >= unit->crtc.mode.vdisplay ||
802                             clip_x2 <= 0 || clip_y2 <= 0)
803                                 continue;
804
805                         blits[hit_num].header = SVGA_CMD_BLIT_GMRFB_TO_SCREEN;
806                         blits[hit_num].body.destScreenId = unit->unit;
807                         blits[hit_num].body.srcOrigin.x = clips_ptr->x1;
808                         blits[hit_num].body.srcOrigin.y = clips_ptr->y1;
809                         blits[hit_num].body.destRect.left = clip_x1;
810                         blits[hit_num].body.destRect.top = clip_y1;
811                         blits[hit_num].body.destRect.right = clip_x2;
812                         blits[hit_num].body.destRect.bottom = clip_y2;
813                         hit_num++;
814                 }
815
816                 /* no clips hit the crtc */
817                 if (hit_num == 0)
818                         continue;
819
820                 fifo_size = sizeof(*blits) * hit_num;
821                 ret = vmw_execbuf_process(file_priv, dev_priv, NULL, blits,
822                                           fifo_size, 0, NULL);
823
824                 if (unlikely(ret != 0))
825                         break;
826         }
827
828         kfree(blits);
829
830         return ret;
831 }
832
833 int vmw_framebuffer_dmabuf_dirty(struct drm_framebuffer *framebuffer,
834                                  struct drm_file *file_priv,
835                                  unsigned flags, unsigned color,
836                                  struct drm_clip_rect *clips,
837                                  unsigned num_clips)
838 {
839         struct vmw_private *dev_priv = vmw_priv(framebuffer->dev);
840         struct vmw_master *vmaster = vmw_master(file_priv->master);
841         struct vmw_framebuffer_dmabuf *vfbd =
842                 vmw_framebuffer_to_vfbd(framebuffer);
843         struct drm_clip_rect norect;
844         int ret, increment = 1;
845
846         ret = ttm_read_lock(&vmaster->lock, true);
847         if (unlikely(ret != 0))
848                 return ret;
849
850         if (!num_clips) {
851                 num_clips = 1;
852                 clips = &norect;
853                 norect.x1 = norect.y1 = 0;
854                 norect.x2 = framebuffer->width;
855                 norect.y2 = framebuffer->height;
856         } else if (flags & DRM_MODE_FB_DIRTY_ANNOTATE_COPY) {
857                 num_clips /= 2;
858                 increment = 2;
859         }
860
861         if (dev_priv->ldu_priv) {
862                 ret = do_dmabuf_dirty_ldu(dev_priv, &vfbd->base,
863                                           flags, color,
864                                           clips, num_clips, increment);
865         } else {
866                 ret = do_dmabuf_dirty_sou(file_priv, dev_priv, &vfbd->base,
867                                           flags, color,
868                                           clips, num_clips, increment);
869         }
870
871         ttm_read_unlock(&vmaster->lock);
872         return ret;
873 }
874
875 static struct drm_framebuffer_funcs vmw_framebuffer_dmabuf_funcs = {
876         .destroy = vmw_framebuffer_dmabuf_destroy,
877         .dirty = vmw_framebuffer_dmabuf_dirty,
878         .create_handle = vmw_framebuffer_create_handle,
879 };
880
881 /**
882  * Pin the dmabuffer to the start of vram.
883  */
884 static int vmw_framebuffer_dmabuf_pin(struct vmw_framebuffer *vfb)
885 {
886         struct vmw_private *dev_priv = vmw_priv(vfb->base.dev);
887         struct vmw_framebuffer_dmabuf *vfbd =
888                 vmw_framebuffer_to_vfbd(&vfb->base);
889         int ret;
890
891         /* This code should not be used with screen objects */
892         BUG_ON(dev_priv->sou_priv);
893
894         vmw_overlay_pause_all(dev_priv);
895
896         ret = vmw_dmabuf_to_start_of_vram(dev_priv, vfbd->buffer, true, false);
897
898         vmw_overlay_resume_all(dev_priv);
899
900         WARN_ON(ret != 0);
901
902         return 0;
903 }
904
905 static int vmw_framebuffer_dmabuf_unpin(struct vmw_framebuffer *vfb)
906 {
907         struct vmw_private *dev_priv = vmw_priv(vfb->base.dev);
908         struct vmw_framebuffer_dmabuf *vfbd =
909                 vmw_framebuffer_to_vfbd(&vfb->base);
910
911         if (!vfbd->buffer) {
912                 WARN_ON(!vfbd->buffer);
913                 return 0;
914         }
915
916         return vmw_dmabuf_unpin(dev_priv, vfbd->buffer, false);
917 }
918
919 static int vmw_kms_new_framebuffer_dmabuf(struct vmw_private *dev_priv,
920                                           struct vmw_dma_buffer *dmabuf,
921                                           struct vmw_framebuffer **out,
922                                           const struct drm_mode_fb_cmd
923                                           *mode_cmd)
924
925 {
926         struct drm_device *dev = dev_priv->dev;
927         struct vmw_framebuffer_dmabuf *vfbd;
928         unsigned int requested_size;
929         int ret;
930
931         requested_size = mode_cmd->height * mode_cmd->pitch;
932         if (unlikely(requested_size > dmabuf->base.num_pages * PAGE_SIZE)) {
933                 DRM_ERROR("Screen buffer object size is too small "
934                           "for requested mode.\n");
935                 return -EINVAL;
936         }
937
938         /* Limited framebuffer color depth support for screen objects */
939         if (dev_priv->sou_priv) {
940                 switch (mode_cmd->depth) {
941                 case 32:
942                 case 24:
943                         /* Only support 32 bpp for 32 and 24 depth fbs */
944                         if (mode_cmd->bpp == 32)
945                                 break;
946
947                         DRM_ERROR("Invalid color depth/bbp: %d %d\n",
948                                   mode_cmd->depth, mode_cmd->bpp);
949                         return -EINVAL;
950                 case 16:
951                 case 15:
952                         /* Only support 16 bpp for 16 and 15 depth fbs */
953                         if (mode_cmd->bpp == 16)
954                                 break;
955
956                         DRM_ERROR("Invalid color depth/bbp: %d %d\n",
957                                   mode_cmd->depth, mode_cmd->bpp);
958                         return -EINVAL;
959                 default:
960                         DRM_ERROR("Invalid color depth: %d\n", mode_cmd->depth);
961                         return -EINVAL;
962                 }
963         }
964
965         vfbd = kzalloc(sizeof(*vfbd), GFP_KERNEL);
966         if (!vfbd) {
967                 ret = -ENOMEM;
968                 goto out_err1;
969         }
970
971         ret = drm_framebuffer_init(dev, &vfbd->base.base,
972                                    &vmw_framebuffer_dmabuf_funcs);
973         if (ret)
974                 goto out_err2;
975
976         if (!vmw_dmabuf_reference(dmabuf)) {
977                 DRM_ERROR("failed to reference dmabuf %p\n", dmabuf);
978                 goto out_err3;
979         }
980
981         vfbd->base.base.bits_per_pixel = mode_cmd->bpp;
982         vfbd->base.base.pitch = mode_cmd->pitch;
983         vfbd->base.base.depth = mode_cmd->depth;
984         vfbd->base.base.width = mode_cmd->width;
985         vfbd->base.base.height = mode_cmd->height;
986         if (!dev_priv->sou_priv) {
987                 vfbd->base.pin = vmw_framebuffer_dmabuf_pin;
988                 vfbd->base.unpin = vmw_framebuffer_dmabuf_unpin;
989         }
990         vfbd->base.dmabuf = true;
991         vfbd->buffer = dmabuf;
992         vfbd->base.user_handle = mode_cmd->handle;
993         *out = &vfbd->base;
994
995         return 0;
996
997 out_err3:
998         drm_framebuffer_cleanup(&vfbd->base.base);
999 out_err2:
1000         kfree(vfbd);
1001 out_err1:
1002         return ret;
1003 }
1004
1005 /*
1006  * Generic Kernel modesetting functions
1007  */
1008
1009 static struct drm_framebuffer *vmw_kms_fb_create(struct drm_device *dev,
1010                                                  struct drm_file *file_priv,
1011                                                  struct drm_mode_fb_cmd *mode_cmd)
1012 {
1013         struct vmw_private *dev_priv = vmw_priv(dev);
1014         struct ttm_object_file *tfile = vmw_fpriv(file_priv)->tfile;
1015         struct vmw_framebuffer *vfb = NULL;
1016         struct vmw_surface *surface = NULL;
1017         struct vmw_dma_buffer *bo = NULL;
1018         struct ttm_base_object *user_obj;
1019         u64 required_size;
1020         int ret;
1021
1022         /**
1023          * This code should be conditioned on Screen Objects not being used.
1024          * If screen objects are used, we can allocate a GMR to hold the
1025          * requested framebuffer.
1026          */
1027
1028         required_size = mode_cmd->pitch * mode_cmd->height;
1029         if (unlikely(required_size > (u64) dev_priv->vram_size)) {
1030                 DRM_ERROR("VRAM size is too small for requested mode.\n");
1031                 return ERR_PTR(-ENOMEM);
1032         }
1033
1034         /*
1035          * Take a reference on the user object of the resource
1036          * backing the kms fb. This ensures that user-space handle
1037          * lookups on that resource will always work as long as
1038          * it's registered with a kms framebuffer. This is important,
1039          * since vmw_execbuf_process identifies resources in the
1040          * command stream using user-space handles.
1041          */
1042
1043         user_obj = ttm_base_object_lookup(tfile, mode_cmd->handle);
1044         if (unlikely(user_obj == NULL)) {
1045                 DRM_ERROR("Could not locate requested kms frame buffer.\n");
1046                 return ERR_PTR(-ENOENT);
1047         }
1048
1049         /* returns either a dmabuf or surface */
1050         ret = vmw_user_lookup_handle(dev_priv, tfile,
1051                                      mode_cmd->handle,
1052                                      &surface, &bo);
1053         if (ret)
1054                 goto err_out;
1055
1056         /* Create the new framebuffer depending one what we got back */
1057         if (bo)
1058                 ret = vmw_kms_new_framebuffer_dmabuf(dev_priv, bo, &vfb,
1059                                                      mode_cmd);
1060         else if (surface)
1061                 ret = vmw_kms_new_framebuffer_surface(dev_priv, file_priv,
1062                                                       surface, &vfb, mode_cmd);
1063         else
1064                 BUG();
1065
1066 err_out:
1067         /* vmw_user_lookup_handle takes one ref so does new_fb */
1068         if (bo)
1069                 vmw_dmabuf_unreference(&bo);
1070         if (surface)
1071                 vmw_surface_unreference(&surface);
1072
1073         if (ret) {
1074                 DRM_ERROR("failed to create vmw_framebuffer: %i\n", ret);
1075                 ttm_base_object_unref(&user_obj);
1076                 return ERR_PTR(ret);
1077         } else
1078                 vfb->user_obj = user_obj;
1079
1080         return &vfb->base;
1081 }
1082
1083 static struct drm_mode_config_funcs vmw_kms_funcs = {
1084         .fb_create = vmw_kms_fb_create,
1085 };
1086
1087 int vmw_kms_present(struct vmw_private *dev_priv,
1088                     struct drm_file *file_priv,
1089                     struct vmw_framebuffer *vfb,
1090                     struct vmw_surface *surface,
1091                     uint32_t sid,
1092                     int32_t destX, int32_t destY,
1093                     struct drm_vmw_rect *clips,
1094                     uint32_t num_clips)
1095 {
1096         struct vmw_display_unit *units[VMWGFX_NUM_DISPLAY_UNITS];
1097         struct drm_crtc *crtc;
1098         size_t fifo_size;
1099         int i, k, num_units;
1100         int ret = 0; /* silence warning */
1101
1102         struct {
1103                 SVGA3dCmdHeader header;
1104                 SVGA3dCmdBlitSurfaceToScreen body;
1105         } *cmd;
1106         SVGASignedRect *blits;
1107
1108         num_units = 0;
1109         list_for_each_entry(crtc, &dev_priv->dev->mode_config.crtc_list, head) {
1110                 if (crtc->fb != &vfb->base)
1111                         continue;
1112                 units[num_units++] = vmw_crtc_to_du(crtc);
1113         }
1114
1115         BUG_ON(surface == NULL);
1116         BUG_ON(!clips || !num_clips);
1117
1118         fifo_size = sizeof(*cmd) + sizeof(SVGASignedRect) * num_clips;
1119         cmd = kmalloc(fifo_size, GFP_KERNEL);
1120         if (unlikely(cmd == NULL)) {
1121                 DRM_ERROR("Failed to allocate temporary fifo memory.\n");
1122                 return -ENOMEM;
1123         }
1124
1125         /* only need to do this once */
1126         memset(cmd, 0, fifo_size);
1127         cmd->header.id = cpu_to_le32(SVGA_3D_CMD_BLIT_SURFACE_TO_SCREEN);
1128         cmd->header.size = cpu_to_le32(fifo_size - sizeof(cmd->header));
1129
1130         cmd->body.srcRect.left = 0;
1131         cmd->body.srcRect.right = surface->sizes[0].width;
1132         cmd->body.srcRect.top = 0;
1133         cmd->body.srcRect.bottom = surface->sizes[0].height;
1134
1135         blits = (SVGASignedRect *)&cmd[1];
1136         for (i = 0; i < num_clips; i++) {
1137                 blits[i].left   = clips[i].x;
1138                 blits[i].right  = clips[i].x + clips[i].w;
1139                 blits[i].top    = clips[i].y;
1140                 blits[i].bottom = clips[i].y + clips[i].h;
1141         }
1142
1143         for (k = 0; k < num_units; k++) {
1144                 struct vmw_display_unit *unit = units[k];
1145                 int clip_x1 = destX - unit->crtc.x;
1146                 int clip_y1 = destY - unit->crtc.y;
1147                 int clip_x2 = clip_x1 + surface->sizes[0].width;
1148                 int clip_y2 = clip_y1 + surface->sizes[0].height;
1149
1150                 /* skip any crtcs that misses the clip region */
1151                 if (clip_x1 >= unit->crtc.mode.hdisplay ||
1152                     clip_y1 >= unit->crtc.mode.vdisplay ||
1153                     clip_x2 <= 0 || clip_y2 <= 0)
1154                         continue;
1155
1156                 /* need to reset sid as it is changed by execbuf */
1157                 cmd->body.srcImage.sid = sid;
1158
1159                 cmd->body.destScreenId = unit->unit;
1160
1161                 /*
1162                  * The blit command is a lot more resilient then the
1163                  * readback command when it comes to clip rects. So its
1164                  * okay to go out of bounds.
1165                  */
1166
1167                 cmd->body.destRect.left = clip_x1;
1168                 cmd->body.destRect.right = clip_x2;
1169                 cmd->body.destRect.top = clip_y1;
1170                 cmd->body.destRect.bottom = clip_y2;
1171
1172                 ret = vmw_execbuf_process(file_priv, dev_priv, NULL, cmd,
1173                                           fifo_size, 0, NULL);
1174
1175                 if (unlikely(ret != 0))
1176                         break;
1177         }
1178
1179         kfree(cmd);
1180
1181         return ret;
1182 }
1183
1184 int vmw_kms_readback(struct vmw_private *dev_priv,
1185                      struct drm_file *file_priv,
1186                      struct vmw_framebuffer *vfb,
1187                      struct drm_vmw_fence_rep __user *user_fence_rep,
1188                      struct drm_vmw_rect *clips,
1189                      uint32_t num_clips)
1190 {
1191         struct vmw_framebuffer_dmabuf *vfbd =
1192                 vmw_framebuffer_to_vfbd(&vfb->base);
1193         struct vmw_dma_buffer *dmabuf = vfbd->buffer;
1194         struct vmw_display_unit *units[VMWGFX_NUM_DISPLAY_UNITS];
1195         struct drm_crtc *crtc;
1196         size_t fifo_size;
1197         int i, k, ret, num_units, blits_pos;
1198
1199         struct {
1200                 uint32_t header;
1201                 SVGAFifoCmdDefineGMRFB body;
1202         } *cmd;
1203         struct {
1204                 uint32_t header;
1205                 SVGAFifoCmdBlitScreenToGMRFB body;
1206         } *blits;
1207
1208         num_units = 0;
1209         list_for_each_entry(crtc, &dev_priv->dev->mode_config.crtc_list, head) {
1210                 if (crtc->fb != &vfb->base)
1211                         continue;
1212                 units[num_units++] = vmw_crtc_to_du(crtc);
1213         }
1214
1215         BUG_ON(dmabuf == NULL);
1216         BUG_ON(!clips || !num_clips);
1217
1218         /* take a safe guess at fifo size */
1219         fifo_size = sizeof(*cmd) + sizeof(*blits) * num_clips * num_units;
1220         cmd = kmalloc(fifo_size, GFP_KERNEL);
1221         if (unlikely(cmd == NULL)) {
1222                 DRM_ERROR("Failed to allocate temporary fifo memory.\n");
1223                 return -ENOMEM;
1224         }
1225
1226         memset(cmd, 0, fifo_size);
1227         cmd->header = SVGA_CMD_DEFINE_GMRFB;
1228         cmd->body.format.bitsPerPixel = vfb->base.bits_per_pixel;
1229         cmd->body.format.colorDepth = vfb->base.depth;
1230         cmd->body.format.reserved = 0;
1231         cmd->body.bytesPerLine = vfb->base.pitch;
1232         cmd->body.ptr.gmrId = vfb->user_handle;
1233         cmd->body.ptr.offset = 0;
1234
1235         blits = (void *)&cmd[1];
1236         blits_pos = 0;
1237         for (i = 0; i < num_units; i++) {
1238                 struct drm_vmw_rect *c = clips;
1239                 for (k = 0; k < num_clips; k++, c++) {
1240                         /* transform clip coords to crtc origin based coords */
1241                         int clip_x1 = c->x - units[i]->crtc.x;
1242                         int clip_x2 = c->x - units[i]->crtc.x + c->w;
1243                         int clip_y1 = c->y - units[i]->crtc.y;
1244                         int clip_y2 = c->y - units[i]->crtc.y + c->h;
1245                         int dest_x = c->x;
1246                         int dest_y = c->y;
1247
1248                         /* compensate for clipping, we negate
1249                          * a negative number and add that.
1250                          */
1251                         if (clip_x1 < 0)
1252                                 dest_x += -clip_x1;
1253                         if (clip_y1 < 0)
1254                                 dest_y += -clip_y1;
1255
1256                         /* clip */
1257                         clip_x1 = max(clip_x1, 0);
1258                         clip_y1 = max(clip_y1, 0);
1259                         clip_x2 = min(clip_x2, units[i]->crtc.mode.hdisplay);
1260                         clip_y2 = min(clip_y2, units[i]->crtc.mode.vdisplay);
1261
1262                         /* and cull any rects that misses the crtc */
1263                         if (clip_x1 >= units[i]->crtc.mode.hdisplay ||
1264                             clip_y1 >= units[i]->crtc.mode.vdisplay ||
1265                             clip_x2 <= 0 || clip_y2 <= 0)
1266                                 continue;
1267
1268                         blits[blits_pos].header = SVGA_CMD_BLIT_SCREEN_TO_GMRFB;
1269                         blits[blits_pos].body.srcScreenId = units[i]->unit;
1270                         blits[blits_pos].body.destOrigin.x = dest_x;
1271                         blits[blits_pos].body.destOrigin.y = dest_y;
1272
1273                         blits[blits_pos].body.srcRect.left = clip_x1;
1274                         blits[blits_pos].body.srcRect.top = clip_y1;
1275                         blits[blits_pos].body.srcRect.right = clip_x2;
1276                         blits[blits_pos].body.srcRect.bottom = clip_y2;
1277                         blits_pos++;
1278                 }
1279         }
1280         /* reset size here and use calculated exact size from loops */
1281         fifo_size = sizeof(*cmd) + sizeof(*blits) * blits_pos;
1282
1283         ret = vmw_execbuf_process(file_priv, dev_priv, NULL, cmd, fifo_size,
1284                                   0, user_fence_rep);
1285
1286         kfree(cmd);
1287
1288         return ret;
1289 }
1290
1291 int vmw_kms_init(struct vmw_private *dev_priv)
1292 {
1293         struct drm_device *dev = dev_priv->dev;
1294         int ret;
1295
1296         drm_mode_config_init(dev);
1297         dev->mode_config.funcs = &vmw_kms_funcs;
1298         dev->mode_config.min_width = 1;
1299         dev->mode_config.min_height = 1;
1300         /* assumed largest fb size */
1301         dev->mode_config.max_width = 8192;
1302         dev->mode_config.max_height = 8192;
1303
1304         ret = vmw_kms_init_screen_object_display(dev_priv);
1305         if (ret) /* Fallback */
1306                 (void)vmw_kms_init_legacy_display_system(dev_priv);
1307
1308         return 0;
1309 }
1310
1311 int vmw_kms_close(struct vmw_private *dev_priv)
1312 {
1313         /*
1314          * Docs says we should take the lock before calling this function
1315          * but since it destroys encoders and our destructor calls
1316          * drm_encoder_cleanup which takes the lock we deadlock.
1317          */
1318         drm_mode_config_cleanup(dev_priv->dev);
1319         if (dev_priv->sou_priv)
1320                 vmw_kms_close_screen_object_display(dev_priv);
1321         else
1322                 vmw_kms_close_legacy_display_system(dev_priv);
1323         return 0;
1324 }
1325
1326 int vmw_kms_cursor_bypass_ioctl(struct drm_device *dev, void *data,
1327                                 struct drm_file *file_priv)
1328 {
1329         struct drm_vmw_cursor_bypass_arg *arg = data;
1330         struct vmw_display_unit *du;
1331         struct drm_mode_object *obj;
1332         struct drm_crtc *crtc;
1333         int ret = 0;
1334
1335
1336         mutex_lock(&dev->mode_config.mutex);
1337         if (arg->flags & DRM_VMW_CURSOR_BYPASS_ALL) {
1338
1339                 list_for_each_entry(crtc, &dev->mode_config.crtc_list, head) {
1340                         du = vmw_crtc_to_du(crtc);
1341                         du->hotspot_x = arg->xhot;
1342                         du->hotspot_y = arg->yhot;
1343                 }
1344
1345                 mutex_unlock(&dev->mode_config.mutex);
1346                 return 0;
1347         }
1348
1349         obj = drm_mode_object_find(dev, arg->crtc_id, DRM_MODE_OBJECT_CRTC);
1350         if (!obj) {
1351                 ret = -EINVAL;
1352                 goto out;
1353         }
1354
1355         crtc = obj_to_crtc(obj);
1356         du = vmw_crtc_to_du(crtc);
1357
1358         du->hotspot_x = arg->xhot;
1359         du->hotspot_y = arg->yhot;
1360
1361 out:
1362         mutex_unlock(&dev->mode_config.mutex);
1363
1364         return ret;
1365 }
1366
1367 int vmw_kms_write_svga(struct vmw_private *vmw_priv,
1368                         unsigned width, unsigned height, unsigned pitch,
1369                         unsigned bpp, unsigned depth)
1370 {
1371         if (vmw_priv->capabilities & SVGA_CAP_PITCHLOCK)
1372                 vmw_write(vmw_priv, SVGA_REG_PITCHLOCK, pitch);
1373         else if (vmw_fifo_have_pitchlock(vmw_priv))
1374                 iowrite32(pitch, vmw_priv->mmio_virt + SVGA_FIFO_PITCHLOCK);
1375         vmw_write(vmw_priv, SVGA_REG_WIDTH, width);
1376         vmw_write(vmw_priv, SVGA_REG_HEIGHT, height);
1377         vmw_write(vmw_priv, SVGA_REG_BITS_PER_PIXEL, bpp);
1378
1379         if (vmw_read(vmw_priv, SVGA_REG_DEPTH) != depth) {
1380                 DRM_ERROR("Invalid depth %u for %u bpp, host expects %u\n",
1381                           depth, bpp, vmw_read(vmw_priv, SVGA_REG_DEPTH));
1382                 return -EINVAL;
1383         }
1384
1385         return 0;
1386 }
1387
1388 int vmw_kms_save_vga(struct vmw_private *vmw_priv)
1389 {
1390         struct vmw_vga_topology_state *save;
1391         uint32_t i;
1392
1393         vmw_priv->vga_width = vmw_read(vmw_priv, SVGA_REG_WIDTH);
1394         vmw_priv->vga_height = vmw_read(vmw_priv, SVGA_REG_HEIGHT);
1395         vmw_priv->vga_bpp = vmw_read(vmw_priv, SVGA_REG_BITS_PER_PIXEL);
1396         if (vmw_priv->capabilities & SVGA_CAP_PITCHLOCK)
1397                 vmw_priv->vga_pitchlock =
1398                   vmw_read(vmw_priv, SVGA_REG_PITCHLOCK);
1399         else if (vmw_fifo_have_pitchlock(vmw_priv))
1400                 vmw_priv->vga_pitchlock = ioread32(vmw_priv->mmio_virt +
1401                                                        SVGA_FIFO_PITCHLOCK);
1402
1403         if (!(vmw_priv->capabilities & SVGA_CAP_DISPLAY_TOPOLOGY))
1404                 return 0;
1405
1406         vmw_priv->num_displays = vmw_read(vmw_priv,
1407                                           SVGA_REG_NUM_GUEST_DISPLAYS);
1408
1409         if (vmw_priv->num_displays == 0)
1410                 vmw_priv->num_displays = 1;
1411
1412         for (i = 0; i < vmw_priv->num_displays; ++i) {
1413                 save = &vmw_priv->vga_save[i];
1414                 vmw_write(vmw_priv, SVGA_REG_DISPLAY_ID, i);
1415                 save->primary = vmw_read(vmw_priv, SVGA_REG_DISPLAY_IS_PRIMARY);
1416                 save->pos_x = vmw_read(vmw_priv, SVGA_REG_DISPLAY_POSITION_X);
1417                 save->pos_y = vmw_read(vmw_priv, SVGA_REG_DISPLAY_POSITION_Y);
1418                 save->width = vmw_read(vmw_priv, SVGA_REG_DISPLAY_WIDTH);
1419                 save->height = vmw_read(vmw_priv, SVGA_REG_DISPLAY_HEIGHT);
1420                 vmw_write(vmw_priv, SVGA_REG_DISPLAY_ID, SVGA_ID_INVALID);
1421                 if (i == 0 && vmw_priv->num_displays == 1 &&
1422                     save->width == 0 && save->height == 0) {
1423
1424                         /*
1425                          * It should be fairly safe to assume that these
1426                          * values are uninitialized.
1427                          */
1428
1429                         save->width = vmw_priv->vga_width - save->pos_x;
1430                         save->height = vmw_priv->vga_height - save->pos_y;
1431                 }
1432         }
1433
1434         return 0;
1435 }
1436
1437 int vmw_kms_restore_vga(struct vmw_private *vmw_priv)
1438 {
1439         struct vmw_vga_topology_state *save;
1440         uint32_t i;
1441
1442         vmw_write(vmw_priv, SVGA_REG_WIDTH, vmw_priv->vga_width);
1443         vmw_write(vmw_priv, SVGA_REG_HEIGHT, vmw_priv->vga_height);
1444         vmw_write(vmw_priv, SVGA_REG_BITS_PER_PIXEL, vmw_priv->vga_bpp);
1445         if (vmw_priv->capabilities & SVGA_CAP_PITCHLOCK)
1446                 vmw_write(vmw_priv, SVGA_REG_PITCHLOCK,
1447                           vmw_priv->vga_pitchlock);
1448         else if (vmw_fifo_have_pitchlock(vmw_priv))
1449                 iowrite32(vmw_priv->vga_pitchlock,
1450                           vmw_priv->mmio_virt + SVGA_FIFO_PITCHLOCK);
1451
1452         if (!(vmw_priv->capabilities & SVGA_CAP_DISPLAY_TOPOLOGY))
1453                 return 0;
1454
1455         for (i = 0; i < vmw_priv->num_displays; ++i) {
1456                 save = &vmw_priv->vga_save[i];
1457                 vmw_write(vmw_priv, SVGA_REG_DISPLAY_ID, i);
1458                 vmw_write(vmw_priv, SVGA_REG_DISPLAY_IS_PRIMARY, save->primary);
1459                 vmw_write(vmw_priv, SVGA_REG_DISPLAY_POSITION_X, save->pos_x);
1460                 vmw_write(vmw_priv, SVGA_REG_DISPLAY_POSITION_Y, save->pos_y);
1461                 vmw_write(vmw_priv, SVGA_REG_DISPLAY_WIDTH, save->width);
1462                 vmw_write(vmw_priv, SVGA_REG_DISPLAY_HEIGHT, save->height);
1463                 vmw_write(vmw_priv, SVGA_REG_DISPLAY_ID, SVGA_ID_INVALID);
1464         }
1465
1466         return 0;
1467 }
1468
1469 bool vmw_kms_validate_mode_vram(struct vmw_private *dev_priv,
1470                                 uint32_t pitch,
1471                                 uint32_t height)
1472 {
1473         return ((u64) pitch * (u64) height) < (u64) dev_priv->vram_size;
1474 }
1475
1476
1477 /**
1478  * Function called by DRM code called with vbl_lock held.
1479  */
1480 u32 vmw_get_vblank_counter(struct drm_device *dev, int crtc)
1481 {
1482         return 0;
1483 }
1484
1485 /**
1486  * Function called by DRM code called with vbl_lock held.
1487  */
1488 int vmw_enable_vblank(struct drm_device *dev, int crtc)
1489 {
1490         return -ENOSYS;
1491 }
1492
1493 /**
1494  * Function called by DRM code called with vbl_lock held.
1495  */
1496 void vmw_disable_vblank(struct drm_device *dev, int crtc)
1497 {
1498 }
1499
1500
1501 /*
1502  * Small shared kms functions.
1503  */
1504
1505 int vmw_du_update_layout(struct vmw_private *dev_priv, unsigned num,
1506                          struct drm_vmw_rect *rects)
1507 {
1508         struct drm_device *dev = dev_priv->dev;
1509         struct vmw_display_unit *du;
1510         struct drm_connector *con;
1511
1512         mutex_lock(&dev->mode_config.mutex);
1513
1514 #if 0
1515         {
1516                 unsigned int i;
1517
1518                 DRM_INFO("%s: new layout ", __func__);
1519                 for (i = 0; i < num; i++)
1520                         DRM_INFO("(%i, %i %ux%u) ", rects[i].x, rects[i].y,
1521                                  rects[i].w, rects[i].h);
1522                 DRM_INFO("\n");
1523         }
1524 #endif
1525
1526         list_for_each_entry(con, &dev->mode_config.connector_list, head) {
1527                 du = vmw_connector_to_du(con);
1528                 if (num > du->unit) {
1529                         du->pref_width = rects[du->unit].w;
1530                         du->pref_height = rects[du->unit].h;
1531                         du->pref_active = true;
1532                         du->gui_x = rects[du->unit].x;
1533                         du->gui_y = rects[du->unit].y;
1534                 } else {
1535                         du->pref_width = 800;
1536                         du->pref_height = 600;
1537                         du->pref_active = false;
1538                 }
1539                 con->status = vmw_du_connector_detect(con, true);
1540         }
1541
1542         mutex_unlock(&dev->mode_config.mutex);
1543
1544         return 0;
1545 }
1546
1547 void vmw_du_crtc_save(struct drm_crtc *crtc)
1548 {
1549 }
1550
1551 void vmw_du_crtc_restore(struct drm_crtc *crtc)
1552 {
1553 }
1554
1555 void vmw_du_crtc_gamma_set(struct drm_crtc *crtc,
1556                            u16 *r, u16 *g, u16 *b,
1557                            uint32_t start, uint32_t size)
1558 {
1559         struct vmw_private *dev_priv = vmw_priv(crtc->dev);
1560         int i;
1561
1562         for (i = 0; i < size; i++) {
1563                 DRM_DEBUG("%d r/g/b = 0x%04x / 0x%04x / 0x%04x\n", i,
1564                           r[i], g[i], b[i]);
1565                 vmw_write(dev_priv, SVGA_PALETTE_BASE + i * 3 + 0, r[i] >> 8);
1566                 vmw_write(dev_priv, SVGA_PALETTE_BASE + i * 3 + 1, g[i] >> 8);
1567                 vmw_write(dev_priv, SVGA_PALETTE_BASE + i * 3 + 2, b[i] >> 8);
1568         }
1569 }
1570
1571 void vmw_du_connector_dpms(struct drm_connector *connector, int mode)
1572 {
1573 }
1574
1575 void vmw_du_connector_save(struct drm_connector *connector)
1576 {
1577 }
1578
1579 void vmw_du_connector_restore(struct drm_connector *connector)
1580 {
1581 }
1582
1583 enum drm_connector_status
1584 vmw_du_connector_detect(struct drm_connector *connector, bool force)
1585 {
1586         uint32_t num_displays;
1587         struct drm_device *dev = connector->dev;
1588         struct vmw_private *dev_priv = vmw_priv(dev);
1589         struct vmw_display_unit *du = vmw_connector_to_du(connector);
1590
1591         mutex_lock(&dev_priv->hw_mutex);
1592         num_displays = vmw_read(dev_priv, SVGA_REG_NUM_DISPLAYS);
1593         mutex_unlock(&dev_priv->hw_mutex);
1594
1595         return ((vmw_connector_to_du(connector)->unit < num_displays &&
1596                  du->pref_active) ?
1597                 connector_status_connected : connector_status_disconnected);
1598 }
1599
1600 static struct drm_display_mode vmw_kms_connector_builtin[] = {
1601         /* 640x480@60Hz */
1602         { DRM_MODE("640x480", DRM_MODE_TYPE_DRIVER, 25175, 640, 656,
1603                    752, 800, 0, 480, 489, 492, 525, 0,
1604                    DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_NVSYNC) },
1605         /* 800x600@60Hz */
1606         { DRM_MODE("800x600", DRM_MODE_TYPE_DRIVER, 40000, 800, 840,
1607                    968, 1056, 0, 600, 601, 605, 628, 0,
1608                    DRM_MODE_FLAG_PHSYNC | DRM_MODE_FLAG_PVSYNC) },
1609         /* 1024x768@60Hz */
1610         { DRM_MODE("1024x768", DRM_MODE_TYPE_DRIVER, 65000, 1024, 1048,
1611                    1184, 1344, 0, 768, 771, 777, 806, 0,
1612                    DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_NVSYNC) },
1613         /* 1152x864@75Hz */
1614         { DRM_MODE("1152x864", DRM_MODE_TYPE_DRIVER, 108000, 1152, 1216,
1615                    1344, 1600, 0, 864, 865, 868, 900, 0,
1616                    DRM_MODE_FLAG_PHSYNC | DRM_MODE_FLAG_PVSYNC) },
1617         /* 1280x768@60Hz */
1618         { DRM_MODE("1280x768", DRM_MODE_TYPE_DRIVER, 79500, 1280, 1344,
1619                    1472, 1664, 0, 768, 771, 778, 798, 0,
1620                    DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_PVSYNC) },
1621         /* 1280x800@60Hz */
1622         { DRM_MODE("1280x800", DRM_MODE_TYPE_DRIVER, 83500, 1280, 1352,
1623                    1480, 1680, 0, 800, 803, 809, 831, 0,
1624                    DRM_MODE_FLAG_PHSYNC | DRM_MODE_FLAG_NVSYNC) },
1625         /* 1280x960@60Hz */
1626         { DRM_MODE("1280x960", DRM_MODE_TYPE_DRIVER, 108000, 1280, 1376,
1627                    1488, 1800, 0, 960, 961, 964, 1000, 0,
1628                    DRM_MODE_FLAG_PHSYNC | DRM_MODE_FLAG_PVSYNC) },
1629         /* 1280x1024@60Hz */
1630         { DRM_MODE("1280x1024", DRM_MODE_TYPE_DRIVER, 108000, 1280, 1328,
1631                    1440, 1688, 0, 1024, 1025, 1028, 1066, 0,
1632                    DRM_MODE_FLAG_PHSYNC | DRM_MODE_FLAG_PVSYNC) },
1633         /* 1360x768@60Hz */
1634         { DRM_MODE("1360x768", DRM_MODE_TYPE_DRIVER, 85500, 1360, 1424,
1635                    1536, 1792, 0, 768, 771, 777, 795, 0,
1636                    DRM_MODE_FLAG_PHSYNC | DRM_MODE_FLAG_PVSYNC) },
1637         /* 1440x1050@60Hz */
1638         { DRM_MODE("1400x1050", DRM_MODE_TYPE_DRIVER, 121750, 1400, 1488,
1639                    1632, 1864, 0, 1050, 1053, 1057, 1089, 0,
1640                    DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_PVSYNC) },
1641         /* 1440x900@60Hz */
1642         { DRM_MODE("1440x900", DRM_MODE_TYPE_DRIVER, 106500, 1440, 1520,
1643                    1672, 1904, 0, 900, 903, 909, 934, 0,
1644                    DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_PVSYNC) },
1645         /* 1600x1200@60Hz */
1646         { DRM_MODE("1600x1200", DRM_MODE_TYPE_DRIVER, 162000, 1600, 1664,
1647                    1856, 2160, 0, 1200, 1201, 1204, 1250, 0,
1648                    DRM_MODE_FLAG_PHSYNC | DRM_MODE_FLAG_PVSYNC) },
1649         /* 1680x1050@60Hz */
1650         { DRM_MODE("1680x1050", DRM_MODE_TYPE_DRIVER, 146250, 1680, 1784,
1651                    1960, 2240, 0, 1050, 1053, 1059, 1089, 0,
1652                    DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_PVSYNC) },
1653         /* 1792x1344@60Hz */
1654         { DRM_MODE("1792x1344", DRM_MODE_TYPE_DRIVER, 204750, 1792, 1920,
1655                    2120, 2448, 0, 1344, 1345, 1348, 1394, 0,
1656                    DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_PVSYNC) },
1657         /* 1853x1392@60Hz */
1658         { DRM_MODE("1856x1392", DRM_MODE_TYPE_DRIVER, 218250, 1856, 1952,
1659                    2176, 2528, 0, 1392, 1393, 1396, 1439, 0,
1660                    DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_PVSYNC) },
1661         /* 1920x1200@60Hz */
1662         { DRM_MODE("1920x1200", DRM_MODE_TYPE_DRIVER, 193250, 1920, 2056,
1663                    2256, 2592, 0, 1200, 1203, 1209, 1245, 0,
1664                    DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_PVSYNC) },
1665         /* 1920x1440@60Hz */
1666         { DRM_MODE("1920x1440", DRM_MODE_TYPE_DRIVER, 234000, 1920, 2048,
1667                    2256, 2600, 0, 1440, 1441, 1444, 1500, 0,
1668                    DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_PVSYNC) },
1669         /* 2560x1600@60Hz */
1670         { DRM_MODE("2560x1600", DRM_MODE_TYPE_DRIVER, 348500, 2560, 2752,
1671                    3032, 3504, 0, 1600, 1603, 1609, 1658, 0,
1672                    DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_PVSYNC) },
1673         /* Terminate */
1674         { DRM_MODE("", 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0) },
1675 };
1676
1677 /**
1678  * vmw_guess_mode_timing - Provide fake timings for a
1679  * 60Hz vrefresh mode.
1680  *
1681  * @mode - Pointer to a struct drm_display_mode with hdisplay and vdisplay
1682  * members filled in.
1683  */
1684 static void vmw_guess_mode_timing(struct drm_display_mode *mode)
1685 {
1686         mode->hsync_start = mode->hdisplay + 50;
1687         mode->hsync_end = mode->hsync_start + 50;
1688         mode->htotal = mode->hsync_end + 50;
1689
1690         mode->vsync_start = mode->vdisplay + 50;
1691         mode->vsync_end = mode->vsync_start + 50;
1692         mode->vtotal = mode->vsync_end + 50;
1693
1694         mode->clock = (u32)mode->htotal * (u32)mode->vtotal / 100 * 6;
1695         mode->vrefresh = drm_mode_vrefresh(mode);
1696 }
1697
1698
1699 int vmw_du_connector_fill_modes(struct drm_connector *connector,
1700                                 uint32_t max_width, uint32_t max_height)
1701 {
1702         struct vmw_display_unit *du = vmw_connector_to_du(connector);
1703         struct drm_device *dev = connector->dev;
1704         struct vmw_private *dev_priv = vmw_priv(dev);
1705         struct drm_display_mode *mode = NULL;
1706         struct drm_display_mode *bmode;
1707         struct drm_display_mode prefmode = { DRM_MODE("preferred",
1708                 DRM_MODE_TYPE_DRIVER | DRM_MODE_TYPE_PREFERRED,
1709                 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
1710                 DRM_MODE_FLAG_NHSYNC | DRM_MODE_FLAG_PVSYNC)
1711         };
1712         int i;
1713
1714         /* Add preferred mode */
1715         {
1716                 mode = drm_mode_duplicate(dev, &prefmode);
1717                 if (!mode)
1718                         return 0;
1719                 mode->hdisplay = du->pref_width;
1720                 mode->vdisplay = du->pref_height;
1721                 vmw_guess_mode_timing(mode);
1722
1723                 if (vmw_kms_validate_mode_vram(dev_priv, mode->hdisplay * 2,
1724                                                mode->vdisplay)) {
1725                         drm_mode_probed_add(connector, mode);
1726                 } else {
1727                         drm_mode_destroy(dev, mode);
1728                         mode = NULL;
1729                 }
1730
1731                 if (du->pref_mode) {
1732                         list_del_init(&du->pref_mode->head);
1733                         drm_mode_destroy(dev, du->pref_mode);
1734                 }
1735
1736                 /* mode might be null here, this is intended */
1737                 du->pref_mode = mode;
1738         }
1739
1740         for (i = 0; vmw_kms_connector_builtin[i].type != 0; i++) {
1741                 bmode = &vmw_kms_connector_builtin[i];
1742                 if (bmode->hdisplay > max_width ||
1743                     bmode->vdisplay > max_height)
1744                         continue;
1745
1746                 if (!vmw_kms_validate_mode_vram(dev_priv, bmode->hdisplay * 2,
1747                                                 bmode->vdisplay))
1748                         continue;
1749
1750                 mode = drm_mode_duplicate(dev, bmode);
1751                 if (!mode)
1752                         return 0;
1753                 mode->vrefresh = drm_mode_vrefresh(mode);
1754
1755                 drm_mode_probed_add(connector, mode);
1756         }
1757
1758         /* Move the prefered mode first, help apps pick the right mode. */
1759         if (du->pref_mode)
1760                 list_move(&du->pref_mode->head, &connector->probed_modes);
1761
1762         drm_mode_connector_list_update(connector);
1763
1764         return 1;
1765 }
1766
1767 int vmw_du_connector_set_property(struct drm_connector *connector,
1768                                   struct drm_property *property,
1769                                   uint64_t val)
1770 {
1771         return 0;
1772 }
1773
1774
1775 int vmw_kms_update_layout_ioctl(struct drm_device *dev, void *data,
1776                                 struct drm_file *file_priv)
1777 {
1778         struct vmw_private *dev_priv = vmw_priv(dev);
1779         struct drm_vmw_update_layout_arg *arg =
1780                 (struct drm_vmw_update_layout_arg *)data;
1781         struct vmw_master *vmaster = vmw_master(file_priv->master);
1782         void __user *user_rects;
1783         struct drm_vmw_rect *rects;
1784         unsigned rects_size;
1785         int ret;
1786         int i;
1787         struct drm_mode_config *mode_config = &dev->mode_config;
1788
1789         ret = ttm_read_lock(&vmaster->lock, true);
1790         if (unlikely(ret != 0))
1791                 return ret;
1792
1793         if (!arg->num_outputs) {
1794                 struct drm_vmw_rect def_rect = {0, 0, 800, 600};
1795                 vmw_du_update_layout(dev_priv, 1, &def_rect);
1796                 goto out_unlock;
1797         }
1798
1799         rects_size = arg->num_outputs * sizeof(struct drm_vmw_rect);
1800         rects = kcalloc(arg->num_outputs, sizeof(struct drm_vmw_rect),
1801                         GFP_KERNEL);
1802         if (unlikely(!rects)) {
1803                 ret = -ENOMEM;
1804                 goto out_unlock;
1805         }
1806
1807         user_rects = (void __user *)(unsigned long)arg->rects;
1808         ret = copy_from_user(rects, user_rects, rects_size);
1809         if (unlikely(ret != 0)) {
1810                 DRM_ERROR("Failed to get rects.\n");
1811                 ret = -EFAULT;
1812                 goto out_free;
1813         }
1814
1815         for (i = 0; i < arg->num_outputs; ++i) {
1816                 if (rects[i].x < 0 ||
1817                     rects[i].y < 0 ||
1818                     rects[i].x + rects[i].w > mode_config->max_width ||
1819                     rects[i].y + rects[i].h > mode_config->max_height) {
1820                         DRM_ERROR("Invalid GUI layout.\n");
1821                         ret = -EINVAL;
1822                         goto out_free;
1823                 }
1824         }
1825
1826         vmw_du_update_layout(dev_priv, arg->num_outputs, rects);
1827
1828 out_free:
1829         kfree(rects);
1830 out_unlock:
1831         ttm_read_unlock(&vmaster->lock);
1832         return ret;
1833 }