1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0-or-later
2*4882a593Smuzhiyun /*
3*4882a593Smuzhiyun * drm gem CMA (contiguous memory allocator) helper functions
4*4882a593Smuzhiyun *
5*4882a593Smuzhiyun * Copyright (C) 2012 Sascha Hauer, Pengutronix
6*4882a593Smuzhiyun *
7*4882a593Smuzhiyun * Based on Samsung Exynos code
8*4882a593Smuzhiyun *
9*4882a593Smuzhiyun * Copyright (c) 2011 Samsung Electronics Co., Ltd.
10*4882a593Smuzhiyun */
11*4882a593Smuzhiyun
12*4882a593Smuzhiyun #include <linux/dma-buf.h>
13*4882a593Smuzhiyun #include <linux/dma-mapping.h>
14*4882a593Smuzhiyun #include <linux/export.h>
15*4882a593Smuzhiyun #include <linux/mm.h>
16*4882a593Smuzhiyun #include <linux/mutex.h>
17*4882a593Smuzhiyun #include <linux/slab.h>
18*4882a593Smuzhiyun
19*4882a593Smuzhiyun #include <drm/drm.h>
20*4882a593Smuzhiyun #include <drm/drm_device.h>
21*4882a593Smuzhiyun #include <drm/drm_drv.h>
22*4882a593Smuzhiyun #include <drm/drm_gem_cma_helper.h>
23*4882a593Smuzhiyun #include <drm/drm_vma_manager.h>
24*4882a593Smuzhiyun
25*4882a593Smuzhiyun /**
26*4882a593Smuzhiyun * DOC: cma helpers
27*4882a593Smuzhiyun *
28*4882a593Smuzhiyun * The Contiguous Memory Allocator reserves a pool of memory at early boot
29*4882a593Smuzhiyun * that is used to service requests for large blocks of contiguous memory.
30*4882a593Smuzhiyun *
31*4882a593Smuzhiyun * The DRM GEM/CMA helpers use this allocator as a means to provide buffer
32*4882a593Smuzhiyun * objects that are physically contiguous in memory. This is useful for
33*4882a593Smuzhiyun * display drivers that are unable to map scattered buffers via an IOMMU.
34*4882a593Smuzhiyun */
35*4882a593Smuzhiyun
36*4882a593Smuzhiyun /**
37*4882a593Smuzhiyun * __drm_gem_cma_create - Create a GEM CMA object without allocating memory
38*4882a593Smuzhiyun * @drm: DRM device
39*4882a593Smuzhiyun * @size: size of the object to allocate
40*4882a593Smuzhiyun *
41*4882a593Smuzhiyun * This function creates and initializes a GEM CMA object of the given size,
42*4882a593Smuzhiyun * but doesn't allocate any memory to back the object.
43*4882a593Smuzhiyun *
44*4882a593Smuzhiyun * Returns:
45*4882a593Smuzhiyun * A struct drm_gem_cma_object * on success or an ERR_PTR()-encoded negative
46*4882a593Smuzhiyun * error code on failure.
47*4882a593Smuzhiyun */
48*4882a593Smuzhiyun static struct drm_gem_cma_object *
__drm_gem_cma_create(struct drm_device * drm,size_t size)49*4882a593Smuzhiyun __drm_gem_cma_create(struct drm_device *drm, size_t size)
50*4882a593Smuzhiyun {
51*4882a593Smuzhiyun struct drm_gem_cma_object *cma_obj;
52*4882a593Smuzhiyun struct drm_gem_object *gem_obj;
53*4882a593Smuzhiyun int ret;
54*4882a593Smuzhiyun
55*4882a593Smuzhiyun if (drm->driver->gem_create_object)
56*4882a593Smuzhiyun gem_obj = drm->driver->gem_create_object(drm, size);
57*4882a593Smuzhiyun else
58*4882a593Smuzhiyun gem_obj = kzalloc(sizeof(*cma_obj), GFP_KERNEL);
59*4882a593Smuzhiyun if (!gem_obj)
60*4882a593Smuzhiyun return ERR_PTR(-ENOMEM);
61*4882a593Smuzhiyun cma_obj = container_of(gem_obj, struct drm_gem_cma_object, base);
62*4882a593Smuzhiyun
63*4882a593Smuzhiyun ret = drm_gem_object_init(drm, gem_obj, size);
64*4882a593Smuzhiyun if (ret)
65*4882a593Smuzhiyun goto error;
66*4882a593Smuzhiyun
67*4882a593Smuzhiyun ret = drm_gem_create_mmap_offset(gem_obj);
68*4882a593Smuzhiyun if (ret) {
69*4882a593Smuzhiyun drm_gem_object_release(gem_obj);
70*4882a593Smuzhiyun goto error;
71*4882a593Smuzhiyun }
72*4882a593Smuzhiyun
73*4882a593Smuzhiyun return cma_obj;
74*4882a593Smuzhiyun
75*4882a593Smuzhiyun error:
76*4882a593Smuzhiyun kfree(cma_obj);
77*4882a593Smuzhiyun return ERR_PTR(ret);
78*4882a593Smuzhiyun }
79*4882a593Smuzhiyun
80*4882a593Smuzhiyun /**
81*4882a593Smuzhiyun * drm_gem_cma_create - allocate an object with the given size
82*4882a593Smuzhiyun * @drm: DRM device
83*4882a593Smuzhiyun * @size: size of the object to allocate
84*4882a593Smuzhiyun *
85*4882a593Smuzhiyun * This function creates a CMA GEM object and allocates a contiguous chunk of
86*4882a593Smuzhiyun * memory as backing store. The backing memory has the writecombine attribute
87*4882a593Smuzhiyun * set.
88*4882a593Smuzhiyun *
89*4882a593Smuzhiyun * Returns:
90*4882a593Smuzhiyun * A struct drm_gem_cma_object * on success or an ERR_PTR()-encoded negative
91*4882a593Smuzhiyun * error code on failure.
92*4882a593Smuzhiyun */
drm_gem_cma_create(struct drm_device * drm,size_t size)93*4882a593Smuzhiyun struct drm_gem_cma_object *drm_gem_cma_create(struct drm_device *drm,
94*4882a593Smuzhiyun size_t size)
95*4882a593Smuzhiyun {
96*4882a593Smuzhiyun struct drm_gem_cma_object *cma_obj;
97*4882a593Smuzhiyun int ret;
98*4882a593Smuzhiyun
99*4882a593Smuzhiyun size = round_up(size, PAGE_SIZE);
100*4882a593Smuzhiyun
101*4882a593Smuzhiyun cma_obj = __drm_gem_cma_create(drm, size);
102*4882a593Smuzhiyun if (IS_ERR(cma_obj))
103*4882a593Smuzhiyun return cma_obj;
104*4882a593Smuzhiyun
105*4882a593Smuzhiyun cma_obj->vaddr = dma_alloc_wc(drm->dev, size, &cma_obj->paddr,
106*4882a593Smuzhiyun GFP_KERNEL | __GFP_NOWARN);
107*4882a593Smuzhiyun if (!cma_obj->vaddr) {
108*4882a593Smuzhiyun drm_dbg(drm, "failed to allocate buffer with size %zu\n",
109*4882a593Smuzhiyun size);
110*4882a593Smuzhiyun ret = -ENOMEM;
111*4882a593Smuzhiyun goto error;
112*4882a593Smuzhiyun }
113*4882a593Smuzhiyun
114*4882a593Smuzhiyun return cma_obj;
115*4882a593Smuzhiyun
116*4882a593Smuzhiyun error:
117*4882a593Smuzhiyun drm_gem_object_put(&cma_obj->base);
118*4882a593Smuzhiyun return ERR_PTR(ret);
119*4882a593Smuzhiyun }
120*4882a593Smuzhiyun EXPORT_SYMBOL_GPL(drm_gem_cma_create);
121*4882a593Smuzhiyun
122*4882a593Smuzhiyun /**
123*4882a593Smuzhiyun * drm_gem_cma_create_with_handle - allocate an object with the given size and
124*4882a593Smuzhiyun * return a GEM handle to it
125*4882a593Smuzhiyun * @file_priv: DRM file-private structure to register the handle for
126*4882a593Smuzhiyun * @drm: DRM device
127*4882a593Smuzhiyun * @size: size of the object to allocate
128*4882a593Smuzhiyun * @handle: return location for the GEM handle
129*4882a593Smuzhiyun *
130*4882a593Smuzhiyun * This function creates a CMA GEM object, allocating a physically contiguous
131*4882a593Smuzhiyun * chunk of memory as backing store. The GEM object is then added to the list
132*4882a593Smuzhiyun * of object associated with the given file and a handle to it is returned.
133*4882a593Smuzhiyun *
134*4882a593Smuzhiyun * Returns:
135*4882a593Smuzhiyun * A struct drm_gem_cma_object * on success or an ERR_PTR()-encoded negative
136*4882a593Smuzhiyun * error code on failure.
137*4882a593Smuzhiyun */
138*4882a593Smuzhiyun static struct drm_gem_cma_object *
drm_gem_cma_create_with_handle(struct drm_file * file_priv,struct drm_device * drm,size_t size,uint32_t * handle)139*4882a593Smuzhiyun drm_gem_cma_create_with_handle(struct drm_file *file_priv,
140*4882a593Smuzhiyun struct drm_device *drm, size_t size,
141*4882a593Smuzhiyun uint32_t *handle)
142*4882a593Smuzhiyun {
143*4882a593Smuzhiyun struct drm_gem_cma_object *cma_obj;
144*4882a593Smuzhiyun struct drm_gem_object *gem_obj;
145*4882a593Smuzhiyun int ret;
146*4882a593Smuzhiyun
147*4882a593Smuzhiyun cma_obj = drm_gem_cma_create(drm, size);
148*4882a593Smuzhiyun if (IS_ERR(cma_obj))
149*4882a593Smuzhiyun return cma_obj;
150*4882a593Smuzhiyun
151*4882a593Smuzhiyun gem_obj = &cma_obj->base;
152*4882a593Smuzhiyun
153*4882a593Smuzhiyun /*
154*4882a593Smuzhiyun * allocate a id of idr table where the obj is registered
155*4882a593Smuzhiyun * and handle has the id what user can see.
156*4882a593Smuzhiyun */
157*4882a593Smuzhiyun ret = drm_gem_handle_create(file_priv, gem_obj, handle);
158*4882a593Smuzhiyun /* drop reference from allocate - handle holds it now. */
159*4882a593Smuzhiyun drm_gem_object_put(gem_obj);
160*4882a593Smuzhiyun if (ret)
161*4882a593Smuzhiyun return ERR_PTR(ret);
162*4882a593Smuzhiyun
163*4882a593Smuzhiyun return cma_obj;
164*4882a593Smuzhiyun }
165*4882a593Smuzhiyun
166*4882a593Smuzhiyun /**
167*4882a593Smuzhiyun * drm_gem_cma_free_object - free resources associated with a CMA GEM object
168*4882a593Smuzhiyun * @gem_obj: GEM object to free
169*4882a593Smuzhiyun *
170*4882a593Smuzhiyun * This function frees the backing memory of the CMA GEM object, cleans up the
171*4882a593Smuzhiyun * GEM object state and frees the memory used to store the object itself.
172*4882a593Smuzhiyun * If the buffer is imported and the virtual address is set, it is released.
173*4882a593Smuzhiyun * Drivers using the CMA helpers should set this as their
174*4882a593Smuzhiyun * &drm_driver.gem_free_object_unlocked callback.
175*4882a593Smuzhiyun */
drm_gem_cma_free_object(struct drm_gem_object * gem_obj)176*4882a593Smuzhiyun void drm_gem_cma_free_object(struct drm_gem_object *gem_obj)
177*4882a593Smuzhiyun {
178*4882a593Smuzhiyun struct drm_gem_cma_object *cma_obj;
179*4882a593Smuzhiyun
180*4882a593Smuzhiyun cma_obj = to_drm_gem_cma_obj(gem_obj);
181*4882a593Smuzhiyun
182*4882a593Smuzhiyun if (gem_obj->import_attach) {
183*4882a593Smuzhiyun if (cma_obj->vaddr)
184*4882a593Smuzhiyun dma_buf_vunmap(gem_obj->import_attach->dmabuf, cma_obj->vaddr);
185*4882a593Smuzhiyun drm_prime_gem_destroy(gem_obj, cma_obj->sgt);
186*4882a593Smuzhiyun } else if (cma_obj->vaddr) {
187*4882a593Smuzhiyun dma_free_wc(gem_obj->dev->dev, cma_obj->base.size,
188*4882a593Smuzhiyun cma_obj->vaddr, cma_obj->paddr);
189*4882a593Smuzhiyun }
190*4882a593Smuzhiyun
191*4882a593Smuzhiyun drm_gem_object_release(gem_obj);
192*4882a593Smuzhiyun
193*4882a593Smuzhiyun kfree(cma_obj);
194*4882a593Smuzhiyun }
195*4882a593Smuzhiyun EXPORT_SYMBOL_GPL(drm_gem_cma_free_object);
196*4882a593Smuzhiyun
197*4882a593Smuzhiyun /**
198*4882a593Smuzhiyun * drm_gem_cma_dumb_create_internal - create a dumb buffer object
199*4882a593Smuzhiyun * @file_priv: DRM file-private structure to create the dumb buffer for
200*4882a593Smuzhiyun * @drm: DRM device
201*4882a593Smuzhiyun * @args: IOCTL data
202*4882a593Smuzhiyun *
203*4882a593Smuzhiyun * This aligns the pitch and size arguments to the minimum required. This is
204*4882a593Smuzhiyun * an internal helper that can be wrapped by a driver to account for hardware
205*4882a593Smuzhiyun * with more specific alignment requirements. It should not be used directly
206*4882a593Smuzhiyun * as their &drm_driver.dumb_create callback.
207*4882a593Smuzhiyun *
208*4882a593Smuzhiyun * Returns:
209*4882a593Smuzhiyun * 0 on success or a negative error code on failure.
210*4882a593Smuzhiyun */
drm_gem_cma_dumb_create_internal(struct drm_file * file_priv,struct drm_device * drm,struct drm_mode_create_dumb * args)211*4882a593Smuzhiyun int drm_gem_cma_dumb_create_internal(struct drm_file *file_priv,
212*4882a593Smuzhiyun struct drm_device *drm,
213*4882a593Smuzhiyun struct drm_mode_create_dumb *args)
214*4882a593Smuzhiyun {
215*4882a593Smuzhiyun unsigned int min_pitch = DIV_ROUND_UP(args->width * args->bpp, 8);
216*4882a593Smuzhiyun struct drm_gem_cma_object *cma_obj;
217*4882a593Smuzhiyun
218*4882a593Smuzhiyun if (args->pitch < min_pitch)
219*4882a593Smuzhiyun args->pitch = min_pitch;
220*4882a593Smuzhiyun
221*4882a593Smuzhiyun if (args->size < args->pitch * args->height)
222*4882a593Smuzhiyun args->size = args->pitch * args->height;
223*4882a593Smuzhiyun
224*4882a593Smuzhiyun cma_obj = drm_gem_cma_create_with_handle(file_priv, drm, args->size,
225*4882a593Smuzhiyun &args->handle);
226*4882a593Smuzhiyun return PTR_ERR_OR_ZERO(cma_obj);
227*4882a593Smuzhiyun }
228*4882a593Smuzhiyun EXPORT_SYMBOL_GPL(drm_gem_cma_dumb_create_internal);
229*4882a593Smuzhiyun
230*4882a593Smuzhiyun /**
231*4882a593Smuzhiyun * drm_gem_cma_dumb_create - create a dumb buffer object
232*4882a593Smuzhiyun * @file_priv: DRM file-private structure to create the dumb buffer for
233*4882a593Smuzhiyun * @drm: DRM device
234*4882a593Smuzhiyun * @args: IOCTL data
235*4882a593Smuzhiyun *
236*4882a593Smuzhiyun * This function computes the pitch of the dumb buffer and rounds it up to an
237*4882a593Smuzhiyun * integer number of bytes per pixel. Drivers for hardware that doesn't have
238*4882a593Smuzhiyun * any additional restrictions on the pitch can directly use this function as
239*4882a593Smuzhiyun * their &drm_driver.dumb_create callback.
240*4882a593Smuzhiyun *
241*4882a593Smuzhiyun * For hardware with additional restrictions, drivers can adjust the fields
242*4882a593Smuzhiyun * set up by userspace and pass the IOCTL data along to the
243*4882a593Smuzhiyun * drm_gem_cma_dumb_create_internal() function.
244*4882a593Smuzhiyun *
245*4882a593Smuzhiyun * Returns:
246*4882a593Smuzhiyun * 0 on success or a negative error code on failure.
247*4882a593Smuzhiyun */
drm_gem_cma_dumb_create(struct drm_file * file_priv,struct drm_device * drm,struct drm_mode_create_dumb * args)248*4882a593Smuzhiyun int drm_gem_cma_dumb_create(struct drm_file *file_priv,
249*4882a593Smuzhiyun struct drm_device *drm,
250*4882a593Smuzhiyun struct drm_mode_create_dumb *args)
251*4882a593Smuzhiyun {
252*4882a593Smuzhiyun struct drm_gem_cma_object *cma_obj;
253*4882a593Smuzhiyun
254*4882a593Smuzhiyun args->pitch = DIV_ROUND_UP(args->width * args->bpp, 8);
255*4882a593Smuzhiyun args->size = args->pitch * args->height;
256*4882a593Smuzhiyun
257*4882a593Smuzhiyun cma_obj = drm_gem_cma_create_with_handle(file_priv, drm, args->size,
258*4882a593Smuzhiyun &args->handle);
259*4882a593Smuzhiyun return PTR_ERR_OR_ZERO(cma_obj);
260*4882a593Smuzhiyun }
261*4882a593Smuzhiyun EXPORT_SYMBOL_GPL(drm_gem_cma_dumb_create);
262*4882a593Smuzhiyun
263*4882a593Smuzhiyun const struct vm_operations_struct drm_gem_cma_vm_ops = {
264*4882a593Smuzhiyun .open = drm_gem_vm_open,
265*4882a593Smuzhiyun .close = drm_gem_vm_close,
266*4882a593Smuzhiyun };
267*4882a593Smuzhiyun EXPORT_SYMBOL_GPL(drm_gem_cma_vm_ops);
268*4882a593Smuzhiyun
drm_gem_cma_mmap_obj(struct drm_gem_cma_object * cma_obj,struct vm_area_struct * vma)269*4882a593Smuzhiyun static int drm_gem_cma_mmap_obj(struct drm_gem_cma_object *cma_obj,
270*4882a593Smuzhiyun struct vm_area_struct *vma)
271*4882a593Smuzhiyun {
272*4882a593Smuzhiyun int ret;
273*4882a593Smuzhiyun
274*4882a593Smuzhiyun /*
275*4882a593Smuzhiyun * Clear the VM_PFNMAP flag that was set by drm_gem_mmap(), and set the
276*4882a593Smuzhiyun * vm_pgoff (used as a fake buffer offset by DRM) to 0 as we want to map
277*4882a593Smuzhiyun * the whole buffer.
278*4882a593Smuzhiyun */
279*4882a593Smuzhiyun vma->vm_flags &= ~VM_PFNMAP;
280*4882a593Smuzhiyun vma->vm_pgoff = 0;
281*4882a593Smuzhiyun
282*4882a593Smuzhiyun ret = dma_mmap_wc(cma_obj->base.dev->dev, vma, cma_obj->vaddr,
283*4882a593Smuzhiyun cma_obj->paddr, vma->vm_end - vma->vm_start);
284*4882a593Smuzhiyun if (ret)
285*4882a593Smuzhiyun drm_gem_vm_close(vma);
286*4882a593Smuzhiyun
287*4882a593Smuzhiyun return ret;
288*4882a593Smuzhiyun }
289*4882a593Smuzhiyun
290*4882a593Smuzhiyun /**
291*4882a593Smuzhiyun * drm_gem_cma_mmap - memory-map a CMA GEM object
292*4882a593Smuzhiyun * @filp: file object
293*4882a593Smuzhiyun * @vma: VMA for the area to be mapped
294*4882a593Smuzhiyun *
295*4882a593Smuzhiyun * This function implements an augmented version of the GEM DRM file mmap
296*4882a593Smuzhiyun * operation for CMA objects: In addition to the usual GEM VMA setup it
297*4882a593Smuzhiyun * immediately faults in the entire object instead of using on-demaind
298*4882a593Smuzhiyun * faulting. Drivers which employ the CMA helpers should use this function
299*4882a593Smuzhiyun * as their ->mmap() handler in the DRM device file's file_operations
300*4882a593Smuzhiyun * structure.
301*4882a593Smuzhiyun *
302*4882a593Smuzhiyun * Instead of directly referencing this function, drivers should use the
303*4882a593Smuzhiyun * DEFINE_DRM_GEM_CMA_FOPS().macro.
304*4882a593Smuzhiyun *
305*4882a593Smuzhiyun * Returns:
306*4882a593Smuzhiyun * 0 on success or a negative error code on failure.
307*4882a593Smuzhiyun */
drm_gem_cma_mmap(struct file * filp,struct vm_area_struct * vma)308*4882a593Smuzhiyun int drm_gem_cma_mmap(struct file *filp, struct vm_area_struct *vma)
309*4882a593Smuzhiyun {
310*4882a593Smuzhiyun struct drm_gem_cma_object *cma_obj;
311*4882a593Smuzhiyun struct drm_gem_object *gem_obj;
312*4882a593Smuzhiyun int ret;
313*4882a593Smuzhiyun
314*4882a593Smuzhiyun ret = drm_gem_mmap(filp, vma);
315*4882a593Smuzhiyun if (ret)
316*4882a593Smuzhiyun return ret;
317*4882a593Smuzhiyun
318*4882a593Smuzhiyun gem_obj = vma->vm_private_data;
319*4882a593Smuzhiyun cma_obj = to_drm_gem_cma_obj(gem_obj);
320*4882a593Smuzhiyun
321*4882a593Smuzhiyun return drm_gem_cma_mmap_obj(cma_obj, vma);
322*4882a593Smuzhiyun }
323*4882a593Smuzhiyun EXPORT_SYMBOL_GPL(drm_gem_cma_mmap);
324*4882a593Smuzhiyun
325*4882a593Smuzhiyun #ifndef CONFIG_MMU
326*4882a593Smuzhiyun /**
327*4882a593Smuzhiyun * drm_gem_cma_get_unmapped_area - propose address for mapping in noMMU cases
328*4882a593Smuzhiyun * @filp: file object
329*4882a593Smuzhiyun * @addr: memory address
330*4882a593Smuzhiyun * @len: buffer size
331*4882a593Smuzhiyun * @pgoff: page offset
332*4882a593Smuzhiyun * @flags: memory flags
333*4882a593Smuzhiyun *
334*4882a593Smuzhiyun * This function is used in noMMU platforms to propose address mapping
335*4882a593Smuzhiyun * for a given buffer.
336*4882a593Smuzhiyun * It's intended to be used as a direct handler for the struct
337*4882a593Smuzhiyun * &file_operations.get_unmapped_area operation.
338*4882a593Smuzhiyun *
339*4882a593Smuzhiyun * Returns:
340*4882a593Smuzhiyun * mapping address on success or a negative error code on failure.
341*4882a593Smuzhiyun */
drm_gem_cma_get_unmapped_area(struct file * filp,unsigned long addr,unsigned long len,unsigned long pgoff,unsigned long flags)342*4882a593Smuzhiyun unsigned long drm_gem_cma_get_unmapped_area(struct file *filp,
343*4882a593Smuzhiyun unsigned long addr,
344*4882a593Smuzhiyun unsigned long len,
345*4882a593Smuzhiyun unsigned long pgoff,
346*4882a593Smuzhiyun unsigned long flags)
347*4882a593Smuzhiyun {
348*4882a593Smuzhiyun struct drm_gem_cma_object *cma_obj;
349*4882a593Smuzhiyun struct drm_gem_object *obj = NULL;
350*4882a593Smuzhiyun struct drm_file *priv = filp->private_data;
351*4882a593Smuzhiyun struct drm_device *dev = priv->minor->dev;
352*4882a593Smuzhiyun struct drm_vma_offset_node *node;
353*4882a593Smuzhiyun
354*4882a593Smuzhiyun if (drm_dev_is_unplugged(dev))
355*4882a593Smuzhiyun return -ENODEV;
356*4882a593Smuzhiyun
357*4882a593Smuzhiyun drm_vma_offset_lock_lookup(dev->vma_offset_manager);
358*4882a593Smuzhiyun node = drm_vma_offset_exact_lookup_locked(dev->vma_offset_manager,
359*4882a593Smuzhiyun pgoff,
360*4882a593Smuzhiyun len >> PAGE_SHIFT);
361*4882a593Smuzhiyun if (likely(node)) {
362*4882a593Smuzhiyun obj = container_of(node, struct drm_gem_object, vma_node);
363*4882a593Smuzhiyun /*
364*4882a593Smuzhiyun * When the object is being freed, after it hits 0-refcnt it
365*4882a593Smuzhiyun * proceeds to tear down the object. In the process it will
366*4882a593Smuzhiyun * attempt to remove the VMA offset and so acquire this
367*4882a593Smuzhiyun * mgr->vm_lock. Therefore if we find an object with a 0-refcnt
368*4882a593Smuzhiyun * that matches our range, we know it is in the process of being
369*4882a593Smuzhiyun * destroyed and will be freed as soon as we release the lock -
370*4882a593Smuzhiyun * so we have to check for the 0-refcnted object and treat it as
371*4882a593Smuzhiyun * invalid.
372*4882a593Smuzhiyun */
373*4882a593Smuzhiyun if (!kref_get_unless_zero(&obj->refcount))
374*4882a593Smuzhiyun obj = NULL;
375*4882a593Smuzhiyun }
376*4882a593Smuzhiyun
377*4882a593Smuzhiyun drm_vma_offset_unlock_lookup(dev->vma_offset_manager);
378*4882a593Smuzhiyun
379*4882a593Smuzhiyun if (!obj)
380*4882a593Smuzhiyun return -EINVAL;
381*4882a593Smuzhiyun
382*4882a593Smuzhiyun if (!drm_vma_node_is_allowed(node, priv)) {
383*4882a593Smuzhiyun drm_gem_object_put(obj);
384*4882a593Smuzhiyun return -EACCES;
385*4882a593Smuzhiyun }
386*4882a593Smuzhiyun
387*4882a593Smuzhiyun cma_obj = to_drm_gem_cma_obj(obj);
388*4882a593Smuzhiyun
389*4882a593Smuzhiyun drm_gem_object_put(obj);
390*4882a593Smuzhiyun
391*4882a593Smuzhiyun return cma_obj->vaddr ? (unsigned long)cma_obj->vaddr : -EINVAL;
392*4882a593Smuzhiyun }
393*4882a593Smuzhiyun EXPORT_SYMBOL_GPL(drm_gem_cma_get_unmapped_area);
394*4882a593Smuzhiyun #endif
395*4882a593Smuzhiyun
396*4882a593Smuzhiyun /**
397*4882a593Smuzhiyun * drm_gem_cma_print_info() - Print &drm_gem_cma_object info for debugfs
398*4882a593Smuzhiyun * @p: DRM printer
399*4882a593Smuzhiyun * @indent: Tab indentation level
400*4882a593Smuzhiyun * @obj: GEM object
401*4882a593Smuzhiyun *
402*4882a593Smuzhiyun * This function can be used as the &drm_driver->gem_print_info callback.
403*4882a593Smuzhiyun * It prints paddr and vaddr for use in e.g. debugfs output.
404*4882a593Smuzhiyun */
drm_gem_cma_print_info(struct drm_printer * p,unsigned int indent,const struct drm_gem_object * obj)405*4882a593Smuzhiyun void drm_gem_cma_print_info(struct drm_printer *p, unsigned int indent,
406*4882a593Smuzhiyun const struct drm_gem_object *obj)
407*4882a593Smuzhiyun {
408*4882a593Smuzhiyun const struct drm_gem_cma_object *cma_obj = to_drm_gem_cma_obj(obj);
409*4882a593Smuzhiyun
410*4882a593Smuzhiyun drm_printf_indent(p, indent, "paddr=%pad\n", &cma_obj->paddr);
411*4882a593Smuzhiyun drm_printf_indent(p, indent, "vaddr=%p\n", cma_obj->vaddr);
412*4882a593Smuzhiyun }
413*4882a593Smuzhiyun EXPORT_SYMBOL(drm_gem_cma_print_info);
414*4882a593Smuzhiyun
415*4882a593Smuzhiyun /**
416*4882a593Smuzhiyun * drm_gem_cma_prime_get_sg_table - provide a scatter/gather table of pinned
417*4882a593Smuzhiyun * pages for a CMA GEM object
418*4882a593Smuzhiyun * @obj: GEM object
419*4882a593Smuzhiyun *
420*4882a593Smuzhiyun * This function exports a scatter/gather table suitable for PRIME usage by
421*4882a593Smuzhiyun * calling the standard DMA mapping API. Drivers using the CMA helpers should
422*4882a593Smuzhiyun * set this as their &drm_driver.gem_prime_get_sg_table callback.
423*4882a593Smuzhiyun *
424*4882a593Smuzhiyun * Returns:
425*4882a593Smuzhiyun * A pointer to the scatter/gather table of pinned pages or NULL on failure.
426*4882a593Smuzhiyun */
drm_gem_cma_prime_get_sg_table(struct drm_gem_object * obj)427*4882a593Smuzhiyun struct sg_table *drm_gem_cma_prime_get_sg_table(struct drm_gem_object *obj)
428*4882a593Smuzhiyun {
429*4882a593Smuzhiyun struct drm_gem_cma_object *cma_obj = to_drm_gem_cma_obj(obj);
430*4882a593Smuzhiyun struct sg_table *sgt;
431*4882a593Smuzhiyun int ret;
432*4882a593Smuzhiyun
433*4882a593Smuzhiyun sgt = kzalloc(sizeof(*sgt), GFP_KERNEL);
434*4882a593Smuzhiyun if (!sgt)
435*4882a593Smuzhiyun return ERR_PTR(-ENOMEM);
436*4882a593Smuzhiyun
437*4882a593Smuzhiyun ret = dma_get_sgtable(obj->dev->dev, sgt, cma_obj->vaddr,
438*4882a593Smuzhiyun cma_obj->paddr, obj->size);
439*4882a593Smuzhiyun if (ret < 0)
440*4882a593Smuzhiyun goto out;
441*4882a593Smuzhiyun
442*4882a593Smuzhiyun return sgt;
443*4882a593Smuzhiyun
444*4882a593Smuzhiyun out:
445*4882a593Smuzhiyun kfree(sgt);
446*4882a593Smuzhiyun return ERR_PTR(ret);
447*4882a593Smuzhiyun }
448*4882a593Smuzhiyun EXPORT_SYMBOL_GPL(drm_gem_cma_prime_get_sg_table);
449*4882a593Smuzhiyun
450*4882a593Smuzhiyun /**
451*4882a593Smuzhiyun * drm_gem_cma_prime_import_sg_table - produce a CMA GEM object from another
452*4882a593Smuzhiyun * driver's scatter/gather table of pinned pages
453*4882a593Smuzhiyun * @dev: device to import into
454*4882a593Smuzhiyun * @attach: DMA-BUF attachment
455*4882a593Smuzhiyun * @sgt: scatter/gather table of pinned pages
456*4882a593Smuzhiyun *
457*4882a593Smuzhiyun * This function imports a scatter/gather table exported via DMA-BUF by
458*4882a593Smuzhiyun * another driver. Imported buffers must be physically contiguous in memory
459*4882a593Smuzhiyun * (i.e. the scatter/gather table must contain a single entry). Drivers that
460*4882a593Smuzhiyun * use the CMA helpers should set this as their
461*4882a593Smuzhiyun * &drm_driver.gem_prime_import_sg_table callback.
462*4882a593Smuzhiyun *
463*4882a593Smuzhiyun * Returns:
464*4882a593Smuzhiyun * A pointer to a newly created GEM object or an ERR_PTR-encoded negative
465*4882a593Smuzhiyun * error code on failure.
466*4882a593Smuzhiyun */
467*4882a593Smuzhiyun struct drm_gem_object *
drm_gem_cma_prime_import_sg_table(struct drm_device * dev,struct dma_buf_attachment * attach,struct sg_table * sgt)468*4882a593Smuzhiyun drm_gem_cma_prime_import_sg_table(struct drm_device *dev,
469*4882a593Smuzhiyun struct dma_buf_attachment *attach,
470*4882a593Smuzhiyun struct sg_table *sgt)
471*4882a593Smuzhiyun {
472*4882a593Smuzhiyun struct drm_gem_cma_object *cma_obj;
473*4882a593Smuzhiyun
474*4882a593Smuzhiyun /* check if the entries in the sg_table are contiguous */
475*4882a593Smuzhiyun if (drm_prime_get_contiguous_size(sgt) < attach->dmabuf->size)
476*4882a593Smuzhiyun return ERR_PTR(-EINVAL);
477*4882a593Smuzhiyun
478*4882a593Smuzhiyun /* Create a CMA GEM buffer. */
479*4882a593Smuzhiyun cma_obj = __drm_gem_cma_create(dev, attach->dmabuf->size);
480*4882a593Smuzhiyun if (IS_ERR(cma_obj))
481*4882a593Smuzhiyun return ERR_CAST(cma_obj);
482*4882a593Smuzhiyun
483*4882a593Smuzhiyun cma_obj->paddr = sg_dma_address(sgt->sgl);
484*4882a593Smuzhiyun cma_obj->sgt = sgt;
485*4882a593Smuzhiyun
486*4882a593Smuzhiyun DRM_DEBUG_PRIME("dma_addr = %pad, size = %zu\n", &cma_obj->paddr, attach->dmabuf->size);
487*4882a593Smuzhiyun
488*4882a593Smuzhiyun return &cma_obj->base;
489*4882a593Smuzhiyun }
490*4882a593Smuzhiyun EXPORT_SYMBOL_GPL(drm_gem_cma_prime_import_sg_table);
491*4882a593Smuzhiyun
492*4882a593Smuzhiyun /**
493*4882a593Smuzhiyun * drm_gem_cma_prime_mmap - memory-map an exported CMA GEM object
494*4882a593Smuzhiyun * @obj: GEM object
495*4882a593Smuzhiyun * @vma: VMA for the area to be mapped
496*4882a593Smuzhiyun *
497*4882a593Smuzhiyun * This function maps a buffer imported via DRM PRIME into a userspace
498*4882a593Smuzhiyun * process's address space. Drivers that use the CMA helpers should set this
499*4882a593Smuzhiyun * as their &drm_driver.gem_prime_mmap callback.
500*4882a593Smuzhiyun *
501*4882a593Smuzhiyun * Returns:
502*4882a593Smuzhiyun * 0 on success or a negative error code on failure.
503*4882a593Smuzhiyun */
drm_gem_cma_prime_mmap(struct drm_gem_object * obj,struct vm_area_struct * vma)504*4882a593Smuzhiyun int drm_gem_cma_prime_mmap(struct drm_gem_object *obj,
505*4882a593Smuzhiyun struct vm_area_struct *vma)
506*4882a593Smuzhiyun {
507*4882a593Smuzhiyun struct drm_gem_cma_object *cma_obj;
508*4882a593Smuzhiyun int ret;
509*4882a593Smuzhiyun
510*4882a593Smuzhiyun ret = drm_gem_mmap_obj(obj, obj->size, vma);
511*4882a593Smuzhiyun if (ret < 0)
512*4882a593Smuzhiyun return ret;
513*4882a593Smuzhiyun
514*4882a593Smuzhiyun cma_obj = to_drm_gem_cma_obj(obj);
515*4882a593Smuzhiyun return drm_gem_cma_mmap_obj(cma_obj, vma);
516*4882a593Smuzhiyun }
517*4882a593Smuzhiyun EXPORT_SYMBOL_GPL(drm_gem_cma_prime_mmap);
518*4882a593Smuzhiyun
519*4882a593Smuzhiyun /**
520*4882a593Smuzhiyun * drm_gem_cma_prime_vmap - map a CMA GEM object into the kernel's virtual
521*4882a593Smuzhiyun * address space
522*4882a593Smuzhiyun * @obj: GEM object
523*4882a593Smuzhiyun *
524*4882a593Smuzhiyun * This function maps a buffer exported via DRM PRIME into the kernel's
525*4882a593Smuzhiyun * virtual address space. Since the CMA buffers are already mapped into the
526*4882a593Smuzhiyun * kernel virtual address space this simply returns the cached virtual
527*4882a593Smuzhiyun * address. Drivers using the CMA helpers should set this as their DRM
528*4882a593Smuzhiyun * driver's &drm_driver.gem_prime_vmap callback.
529*4882a593Smuzhiyun *
530*4882a593Smuzhiyun * Returns:
531*4882a593Smuzhiyun * The kernel virtual address of the CMA GEM object's backing store.
532*4882a593Smuzhiyun */
drm_gem_cma_prime_vmap(struct drm_gem_object * obj)533*4882a593Smuzhiyun void *drm_gem_cma_prime_vmap(struct drm_gem_object *obj)
534*4882a593Smuzhiyun {
535*4882a593Smuzhiyun struct drm_gem_cma_object *cma_obj = to_drm_gem_cma_obj(obj);
536*4882a593Smuzhiyun
537*4882a593Smuzhiyun return cma_obj->vaddr;
538*4882a593Smuzhiyun }
539*4882a593Smuzhiyun EXPORT_SYMBOL_GPL(drm_gem_cma_prime_vmap);
540*4882a593Smuzhiyun
541*4882a593Smuzhiyun /**
542*4882a593Smuzhiyun * drm_gem_cma_prime_vunmap - unmap a CMA GEM object from the kernel's virtual
543*4882a593Smuzhiyun * address space
544*4882a593Smuzhiyun * @obj: GEM object
545*4882a593Smuzhiyun * @vaddr: kernel virtual address where the CMA GEM object was mapped
546*4882a593Smuzhiyun *
547*4882a593Smuzhiyun * This function removes a buffer exported via DRM PRIME from the kernel's
548*4882a593Smuzhiyun * virtual address space. This is a no-op because CMA buffers cannot be
549*4882a593Smuzhiyun * unmapped from kernel space. Drivers using the CMA helpers should set this
550*4882a593Smuzhiyun * as their &drm_driver.gem_prime_vunmap callback.
551*4882a593Smuzhiyun */
drm_gem_cma_prime_vunmap(struct drm_gem_object * obj,void * vaddr)552*4882a593Smuzhiyun void drm_gem_cma_prime_vunmap(struct drm_gem_object *obj, void *vaddr)
553*4882a593Smuzhiyun {
554*4882a593Smuzhiyun /* Nothing to do */
555*4882a593Smuzhiyun }
556*4882a593Smuzhiyun EXPORT_SYMBOL_GPL(drm_gem_cma_prime_vunmap);
557*4882a593Smuzhiyun
558*4882a593Smuzhiyun static const struct drm_gem_object_funcs drm_gem_cma_default_funcs = {
559*4882a593Smuzhiyun .free = drm_gem_cma_free_object,
560*4882a593Smuzhiyun .print_info = drm_gem_cma_print_info,
561*4882a593Smuzhiyun .get_sg_table = drm_gem_cma_prime_get_sg_table,
562*4882a593Smuzhiyun .vmap = drm_gem_cma_prime_vmap,
563*4882a593Smuzhiyun .vm_ops = &drm_gem_cma_vm_ops,
564*4882a593Smuzhiyun };
565*4882a593Smuzhiyun
566*4882a593Smuzhiyun /**
567*4882a593Smuzhiyun * drm_gem_cma_create_object_default_funcs - Create a CMA GEM object with a
568*4882a593Smuzhiyun * default function table
569*4882a593Smuzhiyun * @dev: DRM device
570*4882a593Smuzhiyun * @size: Size of the object to allocate
571*4882a593Smuzhiyun *
572*4882a593Smuzhiyun * This sets the GEM object functions to the default CMA helper functions.
573*4882a593Smuzhiyun * This function can be used as the &drm_driver.gem_create_object callback.
574*4882a593Smuzhiyun *
575*4882a593Smuzhiyun * Returns:
576*4882a593Smuzhiyun * A pointer to a allocated GEM object or an error pointer on failure.
577*4882a593Smuzhiyun */
578*4882a593Smuzhiyun struct drm_gem_object *
drm_gem_cma_create_object_default_funcs(struct drm_device * dev,size_t size)579*4882a593Smuzhiyun drm_gem_cma_create_object_default_funcs(struct drm_device *dev, size_t size)
580*4882a593Smuzhiyun {
581*4882a593Smuzhiyun struct drm_gem_cma_object *cma_obj;
582*4882a593Smuzhiyun
583*4882a593Smuzhiyun cma_obj = kzalloc(sizeof(*cma_obj), GFP_KERNEL);
584*4882a593Smuzhiyun if (!cma_obj)
585*4882a593Smuzhiyun return NULL;
586*4882a593Smuzhiyun
587*4882a593Smuzhiyun cma_obj->base.funcs = &drm_gem_cma_default_funcs;
588*4882a593Smuzhiyun
589*4882a593Smuzhiyun return &cma_obj->base;
590*4882a593Smuzhiyun }
591*4882a593Smuzhiyun EXPORT_SYMBOL(drm_gem_cma_create_object_default_funcs);
592*4882a593Smuzhiyun
593*4882a593Smuzhiyun /**
594*4882a593Smuzhiyun * drm_gem_cma_prime_import_sg_table_vmap - PRIME import another driver's
595*4882a593Smuzhiyun * scatter/gather table and get the virtual address of the buffer
596*4882a593Smuzhiyun * @dev: DRM device
597*4882a593Smuzhiyun * @attach: DMA-BUF attachment
598*4882a593Smuzhiyun * @sgt: Scatter/gather table of pinned pages
599*4882a593Smuzhiyun *
600*4882a593Smuzhiyun * This function imports a scatter/gather table using
601*4882a593Smuzhiyun * drm_gem_cma_prime_import_sg_table() and uses dma_buf_vmap() to get the kernel
602*4882a593Smuzhiyun * virtual address. This ensures that a CMA GEM object always has its virtual
603*4882a593Smuzhiyun * address set. This address is released when the object is freed.
604*4882a593Smuzhiyun *
605*4882a593Smuzhiyun * This function can be used as the &drm_driver.gem_prime_import_sg_table
606*4882a593Smuzhiyun * callback. The &DRM_GEM_CMA_DRIVER_OPS_VMAP macro provides a shortcut to set
607*4882a593Smuzhiyun * the necessary DRM driver operations.
608*4882a593Smuzhiyun *
609*4882a593Smuzhiyun * Returns:
610*4882a593Smuzhiyun * A pointer to a newly created GEM object or an ERR_PTR-encoded negative
611*4882a593Smuzhiyun * error code on failure.
612*4882a593Smuzhiyun */
613*4882a593Smuzhiyun struct drm_gem_object *
drm_gem_cma_prime_import_sg_table_vmap(struct drm_device * dev,struct dma_buf_attachment * attach,struct sg_table * sgt)614*4882a593Smuzhiyun drm_gem_cma_prime_import_sg_table_vmap(struct drm_device *dev,
615*4882a593Smuzhiyun struct dma_buf_attachment *attach,
616*4882a593Smuzhiyun struct sg_table *sgt)
617*4882a593Smuzhiyun {
618*4882a593Smuzhiyun struct drm_gem_cma_object *cma_obj;
619*4882a593Smuzhiyun struct drm_gem_object *obj;
620*4882a593Smuzhiyun void *vaddr;
621*4882a593Smuzhiyun
622*4882a593Smuzhiyun vaddr = dma_buf_vmap(attach->dmabuf);
623*4882a593Smuzhiyun if (!vaddr) {
624*4882a593Smuzhiyun DRM_ERROR("Failed to vmap PRIME buffer\n");
625*4882a593Smuzhiyun return ERR_PTR(-ENOMEM);
626*4882a593Smuzhiyun }
627*4882a593Smuzhiyun
628*4882a593Smuzhiyun obj = drm_gem_cma_prime_import_sg_table(dev, attach, sgt);
629*4882a593Smuzhiyun if (IS_ERR(obj)) {
630*4882a593Smuzhiyun dma_buf_vunmap(attach->dmabuf, vaddr);
631*4882a593Smuzhiyun return obj;
632*4882a593Smuzhiyun }
633*4882a593Smuzhiyun
634*4882a593Smuzhiyun cma_obj = to_drm_gem_cma_obj(obj);
635*4882a593Smuzhiyun cma_obj->vaddr = vaddr;
636*4882a593Smuzhiyun
637*4882a593Smuzhiyun return obj;
638*4882a593Smuzhiyun }
639*4882a593Smuzhiyun EXPORT_SYMBOL(drm_gem_cma_prime_import_sg_table_vmap);
640