[go: nahoru, domu]

drm_crtc.c revision 3b336ec4c5460833ad7573d0b6e22793f6a389ab
1/*
2 * Copyright (c) 2006-2008 Intel Corporation
3 * Copyright (c) 2007 Dave Airlie <airlied@linux.ie>
4 * Copyright (c) 2008 Red Hat Inc.
5 *
6 * DRM core CRTC related functions
7 *
8 * Permission to use, copy, modify, distribute, and sell this software and its
9 * documentation for any purpose is hereby granted without fee, provided that
10 * the above copyright notice appear in all copies and that both that copyright
11 * notice and this permission notice appear in supporting documentation, and
12 * that the name of the copyright holders not be used in advertising or
13 * publicity pertaining to distribution of the software without specific,
14 * written prior permission.  The copyright holders make no representations
15 * about the suitability of this software for any purpose.  It is provided "as
16 * is" without express or implied warranty.
17 *
18 * THE COPYRIGHT HOLDERS DISCLAIM ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
19 * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
20 * EVENT SHALL THE COPYRIGHT HOLDERS BE LIABLE FOR ANY SPECIAL, INDIRECT OR
21 * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
22 * DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
23 * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
24 * OF THIS SOFTWARE.
25 *
26 * Authors:
27 *      Keith Packard
28 *	Eric Anholt <eric@anholt.net>
29 *      Dave Airlie <airlied@linux.ie>
30 *      Jesse Barnes <jesse.barnes@intel.com>
31 */
32#include <linux/ctype.h>
33#include <linux/list.h>
34#include <linux/slab.h>
35#include <linux/export.h>
36#include <drm/drmP.h>
37#include <drm/drm_crtc.h>
38#include <drm/drm_edid.h>
39#include <drm/drm_fourcc.h>
40
41/**
42 * drm_modeset_lock_all - take all modeset locks
43 * @dev: drm device
44 *
45 * This function takes all modeset locks, suitable where a more fine-grained
46 * scheme isn't (yet) implemented.
47 */
48void drm_modeset_lock_all(struct drm_device *dev)
49{
50	struct drm_crtc *crtc;
51
52	mutex_lock(&dev->mode_config.mutex);
53
54	list_for_each_entry(crtc, &dev->mode_config.crtc_list, head)
55		mutex_lock_nest_lock(&crtc->mutex, &dev->mode_config.mutex);
56}
57EXPORT_SYMBOL(drm_modeset_lock_all);
58
59/**
60 * drm_modeset_unlock_all - drop all modeset locks
61 * @dev: device
62 */
63void drm_modeset_unlock_all(struct drm_device *dev)
64{
65	struct drm_crtc *crtc;
66
67	list_for_each_entry(crtc, &dev->mode_config.crtc_list, head)
68		mutex_unlock(&crtc->mutex);
69
70	mutex_unlock(&dev->mode_config.mutex);
71}
72EXPORT_SYMBOL(drm_modeset_unlock_all);
73
74/**
75 * drm_warn_on_modeset_not_all_locked - check that all modeset locks are locked
76 * @dev: device
77 */
78void drm_warn_on_modeset_not_all_locked(struct drm_device *dev)
79{
80	struct drm_crtc *crtc;
81
82	/* Locking is currently fubar in the panic handler. */
83	if (oops_in_progress)
84		return;
85
86	list_for_each_entry(crtc, &dev->mode_config.crtc_list, head)
87		WARN_ON(!mutex_is_locked(&crtc->mutex));
88
89	WARN_ON(!mutex_is_locked(&dev->mode_config.mutex));
90}
91EXPORT_SYMBOL(drm_warn_on_modeset_not_all_locked);
92
93/* Avoid boilerplate.  I'm tired of typing. */
94#define DRM_ENUM_NAME_FN(fnname, list)				\
95	const char *fnname(int val)				\
96	{							\
97		int i;						\
98		for (i = 0; i < ARRAY_SIZE(list); i++) {	\
99			if (list[i].type == val)		\
100				return list[i].name;		\
101		}						\
102		return "(unknown)";				\
103	}
104
105/*
106 * Global properties
107 */
108static const struct drm_prop_enum_list drm_dpms_enum_list[] =
109{	{ DRM_MODE_DPMS_ON, "On" },
110	{ DRM_MODE_DPMS_STANDBY, "Standby" },
111	{ DRM_MODE_DPMS_SUSPEND, "Suspend" },
112	{ DRM_MODE_DPMS_OFF, "Off" }
113};
114
115DRM_ENUM_NAME_FN(drm_get_dpms_name, drm_dpms_enum_list)
116
117/*
118 * Optional properties
119 */
120static const struct drm_prop_enum_list drm_scaling_mode_enum_list[] =
121{
122	{ DRM_MODE_SCALE_NONE, "None" },
123	{ DRM_MODE_SCALE_FULLSCREEN, "Full" },
124	{ DRM_MODE_SCALE_CENTER, "Center" },
125	{ DRM_MODE_SCALE_ASPECT, "Full aspect" },
126};
127
128/*
129 * Non-global properties, but "required" for certain connectors.
130 */
131static const struct drm_prop_enum_list drm_dvi_i_select_enum_list[] =
132{
133	{ DRM_MODE_SUBCONNECTOR_Automatic, "Automatic" }, /* DVI-I and TV-out */
134	{ DRM_MODE_SUBCONNECTOR_DVID,      "DVI-D"     }, /* DVI-I  */
135	{ DRM_MODE_SUBCONNECTOR_DVIA,      "DVI-A"     }, /* DVI-I  */
136};
137
138DRM_ENUM_NAME_FN(drm_get_dvi_i_select_name, drm_dvi_i_select_enum_list)
139
140static const struct drm_prop_enum_list drm_dvi_i_subconnector_enum_list[] =
141{
142	{ DRM_MODE_SUBCONNECTOR_Unknown,   "Unknown"   }, /* DVI-I and TV-out */
143	{ DRM_MODE_SUBCONNECTOR_DVID,      "DVI-D"     }, /* DVI-I  */
144	{ DRM_MODE_SUBCONNECTOR_DVIA,      "DVI-A"     }, /* DVI-I  */
145};
146
147DRM_ENUM_NAME_FN(drm_get_dvi_i_subconnector_name,
148		 drm_dvi_i_subconnector_enum_list)
149
150static const struct drm_prop_enum_list drm_tv_select_enum_list[] =
151{
152	{ DRM_MODE_SUBCONNECTOR_Automatic, "Automatic" }, /* DVI-I and TV-out */
153	{ DRM_MODE_SUBCONNECTOR_Composite, "Composite" }, /* TV-out */
154	{ DRM_MODE_SUBCONNECTOR_SVIDEO,    "SVIDEO"    }, /* TV-out */
155	{ DRM_MODE_SUBCONNECTOR_Component, "Component" }, /* TV-out */
156	{ DRM_MODE_SUBCONNECTOR_SCART,     "SCART"     }, /* TV-out */
157};
158
159DRM_ENUM_NAME_FN(drm_get_tv_select_name, drm_tv_select_enum_list)
160
161static const struct drm_prop_enum_list drm_tv_subconnector_enum_list[] =
162{
163	{ DRM_MODE_SUBCONNECTOR_Unknown,   "Unknown"   }, /* DVI-I and TV-out */
164	{ DRM_MODE_SUBCONNECTOR_Composite, "Composite" }, /* TV-out */
165	{ DRM_MODE_SUBCONNECTOR_SVIDEO,    "SVIDEO"    }, /* TV-out */
166	{ DRM_MODE_SUBCONNECTOR_Component, "Component" }, /* TV-out */
167	{ DRM_MODE_SUBCONNECTOR_SCART,     "SCART"     }, /* TV-out */
168};
169
170DRM_ENUM_NAME_FN(drm_get_tv_subconnector_name,
171		 drm_tv_subconnector_enum_list)
172
173static const struct drm_prop_enum_list drm_dirty_info_enum_list[] = {
174	{ DRM_MODE_DIRTY_OFF,      "Off"      },
175	{ DRM_MODE_DIRTY_ON,       "On"       },
176	{ DRM_MODE_DIRTY_ANNOTATE, "Annotate" },
177};
178
179struct drm_conn_prop_enum_list {
180	int type;
181	const char *name;
182	struct ida ida;
183};
184
185/*
186 * Connector and encoder types.
187 */
188static struct drm_conn_prop_enum_list drm_connector_enum_list[] =
189{	{ DRM_MODE_CONNECTOR_Unknown, "Unknown" },
190	{ DRM_MODE_CONNECTOR_VGA, "VGA" },
191	{ DRM_MODE_CONNECTOR_DVII, "DVI-I" },
192	{ DRM_MODE_CONNECTOR_DVID, "DVI-D" },
193	{ DRM_MODE_CONNECTOR_DVIA, "DVI-A" },
194	{ DRM_MODE_CONNECTOR_Composite, "Composite" },
195	{ DRM_MODE_CONNECTOR_SVIDEO, "SVIDEO" },
196	{ DRM_MODE_CONNECTOR_LVDS, "LVDS" },
197	{ DRM_MODE_CONNECTOR_Component, "Component" },
198	{ DRM_MODE_CONNECTOR_9PinDIN, "DIN" },
199	{ DRM_MODE_CONNECTOR_DisplayPort, "DP" },
200	{ DRM_MODE_CONNECTOR_HDMIA, "HDMI-A" },
201	{ DRM_MODE_CONNECTOR_HDMIB, "HDMI-B" },
202	{ DRM_MODE_CONNECTOR_TV, "TV" },
203	{ DRM_MODE_CONNECTOR_eDP, "eDP" },
204	{ DRM_MODE_CONNECTOR_VIRTUAL, "Virtual" },
205};
206
207static const struct drm_prop_enum_list drm_encoder_enum_list[] =
208{	{ DRM_MODE_ENCODER_NONE, "None" },
209	{ DRM_MODE_ENCODER_DAC, "DAC" },
210	{ DRM_MODE_ENCODER_TMDS, "TMDS" },
211	{ DRM_MODE_ENCODER_LVDS, "LVDS" },
212	{ DRM_MODE_ENCODER_TVDAC, "TV" },
213	{ DRM_MODE_ENCODER_VIRTUAL, "Virtual" },
214};
215
216void drm_connector_ida_init(void)
217{
218	int i;
219
220	for (i = 0; i < ARRAY_SIZE(drm_connector_enum_list); i++)
221		ida_init(&drm_connector_enum_list[i].ida);
222}
223
224void drm_connector_ida_destroy(void)
225{
226	int i;
227
228	for (i = 0; i < ARRAY_SIZE(drm_connector_enum_list); i++)
229		ida_destroy(&drm_connector_enum_list[i].ida);
230}
231
232const char *drm_get_encoder_name(const struct drm_encoder *encoder)
233{
234	static char buf[32];
235
236	snprintf(buf, 32, "%s-%d",
237		 drm_encoder_enum_list[encoder->encoder_type].name,
238		 encoder->base.id);
239	return buf;
240}
241EXPORT_SYMBOL(drm_get_encoder_name);
242
243const char *drm_get_connector_name(const struct drm_connector *connector)
244{
245	static char buf[32];
246
247	snprintf(buf, 32, "%s-%d",
248		 drm_connector_enum_list[connector->connector_type].name,
249		 connector->connector_type_id);
250	return buf;
251}
252EXPORT_SYMBOL(drm_get_connector_name);
253
254const char *drm_get_connector_status_name(enum drm_connector_status status)
255{
256	if (status == connector_status_connected)
257		return "connected";
258	else if (status == connector_status_disconnected)
259		return "disconnected";
260	else
261		return "unknown";
262}
263EXPORT_SYMBOL(drm_get_connector_status_name);
264
265static char printable_char(int c)
266{
267	return isascii(c) && isprint(c) ? c : '?';
268}
269
270const char *drm_get_format_name(uint32_t format)
271{
272	static char buf[32];
273
274	snprintf(buf, sizeof(buf),
275		 "%c%c%c%c %s-endian (0x%08x)",
276		 printable_char(format & 0xff),
277		 printable_char((format >> 8) & 0xff),
278		 printable_char((format >> 16) & 0xff),
279		 printable_char((format >> 24) & 0x7f),
280		 format & DRM_FORMAT_BIG_ENDIAN ? "big" : "little",
281		 format);
282
283	return buf;
284}
285EXPORT_SYMBOL(drm_get_format_name);
286
287/**
288 * drm_mode_object_get - allocate a new modeset identifier
289 * @dev: DRM device
290 * @obj: object pointer, used to generate unique ID
291 * @obj_type: object type
292 *
293 * Create a unique identifier based on @ptr in @dev's identifier space.  Used
294 * for tracking modes, CRTCs and connectors.
295 *
296 * RETURNS:
297 * New unique (relative to other objects in @dev) integer identifier for the
298 * object.
299 */
300static int drm_mode_object_get(struct drm_device *dev,
301			       struct drm_mode_object *obj, uint32_t obj_type)
302{
303	int ret;
304
305	mutex_lock(&dev->mode_config.idr_mutex);
306	ret = idr_alloc(&dev->mode_config.crtc_idr, obj, 1, 0, GFP_KERNEL);
307	if (ret >= 0) {
308		/*
309		 * Set up the object linking under the protection of the idr
310		 * lock so that other users can't see inconsistent state.
311		 */
312		obj->id = ret;
313		obj->type = obj_type;
314	}
315	mutex_unlock(&dev->mode_config.idr_mutex);
316
317	return ret < 0 ? ret : 0;
318}
319
320/**
321 * drm_mode_object_put - free a modeset identifer
322 * @dev: DRM device
323 * @object: object to free
324 *
325 * Free @id from @dev's unique identifier pool.
326 */
327static void drm_mode_object_put(struct drm_device *dev,
328				struct drm_mode_object *object)
329{
330	mutex_lock(&dev->mode_config.idr_mutex);
331	idr_remove(&dev->mode_config.crtc_idr, object->id);
332	mutex_unlock(&dev->mode_config.idr_mutex);
333}
334
335/**
336 * drm_mode_object_find - look up a drm object with static lifetime
337 * @dev: drm device
338 * @id: id of the mode object
339 * @type: type of the mode object
340 *
341 * Note that framebuffers cannot be looked up with this functions - since those
342 * are reference counted, they need special treatment.
343 */
344struct drm_mode_object *drm_mode_object_find(struct drm_device *dev,
345		uint32_t id, uint32_t type)
346{
347	struct drm_mode_object *obj = NULL;
348
349	/* Framebuffers are reference counted and need their own lookup
350	 * function.*/
351	WARN_ON(type == DRM_MODE_OBJECT_FB);
352
353	mutex_lock(&dev->mode_config.idr_mutex);
354	obj = idr_find(&dev->mode_config.crtc_idr, id);
355	if (!obj || (obj->type != type) || (obj->id != id))
356		obj = NULL;
357	mutex_unlock(&dev->mode_config.idr_mutex);
358
359	return obj;
360}
361EXPORT_SYMBOL(drm_mode_object_find);
362
363/**
364 * drm_framebuffer_init - initialize a framebuffer
365 * @dev: DRM device
366 * @fb: framebuffer to be initialized
367 * @funcs: ... with these functions
368 *
369 * Allocates an ID for the framebuffer's parent mode object, sets its mode
370 * functions & device file and adds it to the master fd list.
371 *
372 * IMPORTANT:
373 * This functions publishes the fb and makes it available for concurrent access
374 * by other users. Which means by this point the fb _must_ be fully set up -
375 * since all the fb attributes are invariant over its lifetime, no further
376 * locking but only correct reference counting is required.
377 *
378 * RETURNS:
379 * Zero on success, error code on failure.
380 */
381int drm_framebuffer_init(struct drm_device *dev, struct drm_framebuffer *fb,
382			 const struct drm_framebuffer_funcs *funcs)
383{
384	int ret;
385
386	mutex_lock(&dev->mode_config.fb_lock);
387	kref_init(&fb->refcount);
388	INIT_LIST_HEAD(&fb->filp_head);
389	fb->dev = dev;
390	fb->funcs = funcs;
391
392	ret = drm_mode_object_get(dev, &fb->base, DRM_MODE_OBJECT_FB);
393	if (ret)
394		goto out;
395
396	/* Grab the idr reference. */
397	drm_framebuffer_reference(fb);
398
399	dev->mode_config.num_fb++;
400	list_add(&fb->head, &dev->mode_config.fb_list);
401out:
402	mutex_unlock(&dev->mode_config.fb_lock);
403
404	return 0;
405}
406EXPORT_SYMBOL(drm_framebuffer_init);
407
408static void drm_framebuffer_free(struct kref *kref)
409{
410	struct drm_framebuffer *fb =
411			container_of(kref, struct drm_framebuffer, refcount);
412	fb->funcs->destroy(fb);
413}
414
415static struct drm_framebuffer *__drm_framebuffer_lookup(struct drm_device *dev,
416							uint32_t id)
417{
418	struct drm_mode_object *obj = NULL;
419	struct drm_framebuffer *fb;
420
421	mutex_lock(&dev->mode_config.idr_mutex);
422	obj = idr_find(&dev->mode_config.crtc_idr, id);
423	if (!obj || (obj->type != DRM_MODE_OBJECT_FB) || (obj->id != id))
424		fb = NULL;
425	else
426		fb = obj_to_fb(obj);
427	mutex_unlock(&dev->mode_config.idr_mutex);
428
429	return fb;
430}
431
432/**
433 * drm_framebuffer_lookup - look up a drm framebuffer and grab a reference
434 * @dev: drm device
435 * @id: id of the fb object
436 *
437 * If successful, this grabs an additional reference to the framebuffer -
438 * callers need to make sure to eventually unreference the returned framebuffer
439 * again.
440 */
441struct drm_framebuffer *drm_framebuffer_lookup(struct drm_device *dev,
442					       uint32_t id)
443{
444	struct drm_framebuffer *fb;
445
446	mutex_lock(&dev->mode_config.fb_lock);
447	fb = __drm_framebuffer_lookup(dev, id);
448	if (fb)
449		drm_framebuffer_reference(fb);
450	mutex_unlock(&dev->mode_config.fb_lock);
451
452	return fb;
453}
454EXPORT_SYMBOL(drm_framebuffer_lookup);
455
456/**
457 * drm_framebuffer_unreference - unref a framebuffer
458 * @fb: framebuffer to unref
459 *
460 * This functions decrements the fb's refcount and frees it if it drops to zero.
461 */
462void drm_framebuffer_unreference(struct drm_framebuffer *fb)
463{
464	DRM_DEBUG("FB ID: %d\n", fb->base.id);
465	kref_put(&fb->refcount, drm_framebuffer_free);
466}
467EXPORT_SYMBOL(drm_framebuffer_unreference);
468
469/**
470 * drm_framebuffer_reference - incr the fb refcnt
471 * @fb: framebuffer
472 */
473void drm_framebuffer_reference(struct drm_framebuffer *fb)
474{
475	DRM_DEBUG("FB ID: %d\n", fb->base.id);
476	kref_get(&fb->refcount);
477}
478EXPORT_SYMBOL(drm_framebuffer_reference);
479
480static void drm_framebuffer_free_bug(struct kref *kref)
481{
482	BUG();
483}
484
485static void __drm_framebuffer_unreference(struct drm_framebuffer *fb)
486{
487	DRM_DEBUG("FB ID: %d\n", fb->base.id);
488	kref_put(&fb->refcount, drm_framebuffer_free_bug);
489}
490
491/* dev->mode_config.fb_lock must be held! */
492static void __drm_framebuffer_unregister(struct drm_device *dev,
493					 struct drm_framebuffer *fb)
494{
495	mutex_lock(&dev->mode_config.idr_mutex);
496	idr_remove(&dev->mode_config.crtc_idr, fb->base.id);
497	mutex_unlock(&dev->mode_config.idr_mutex);
498
499	fb->base.id = 0;
500
501	__drm_framebuffer_unreference(fb);
502}
503
504/**
505 * drm_framebuffer_unregister_private - unregister a private fb from the lookup idr
506 * @fb: fb to unregister
507 *
508 * Drivers need to call this when cleaning up driver-private framebuffers, e.g.
509 * those used for fbdev. Note that the caller must hold a reference of it's own,
510 * i.e. the object may not be destroyed through this call (since it'll lead to a
511 * locking inversion).
512 */
513void drm_framebuffer_unregister_private(struct drm_framebuffer *fb)
514{
515	struct drm_device *dev = fb->dev;
516
517	mutex_lock(&dev->mode_config.fb_lock);
518	/* Mark fb as reaped and drop idr ref. */
519	__drm_framebuffer_unregister(dev, fb);
520	mutex_unlock(&dev->mode_config.fb_lock);
521}
522EXPORT_SYMBOL(drm_framebuffer_unregister_private);
523
524/**
525 * drm_framebuffer_cleanup - remove a framebuffer object
526 * @fb: framebuffer to remove
527 *
528 * Cleanup references to a user-created framebuffer. This function is intended
529 * to be used from the drivers ->destroy callback.
530 *
531 * Note that this function does not remove the fb from active usuage - if it is
532 * still used anywhere, hilarity can ensue since userspace could call getfb on
533 * the id and get back -EINVAL. Obviously no concern at driver unload time.
534 *
535 * Also, the framebuffer will not be removed from the lookup idr - for
536 * user-created framebuffers this will happen in in the rmfb ioctl. For
537 * driver-private objects (e.g. for fbdev) drivers need to explicitly call
538 * drm_framebuffer_unregister_private.
539 */
540void drm_framebuffer_cleanup(struct drm_framebuffer *fb)
541{
542	struct drm_device *dev = fb->dev;
543
544	mutex_lock(&dev->mode_config.fb_lock);
545	list_del(&fb->head);
546	dev->mode_config.num_fb--;
547	mutex_unlock(&dev->mode_config.fb_lock);
548}
549EXPORT_SYMBOL(drm_framebuffer_cleanup);
550
551/**
552 * drm_framebuffer_remove - remove and unreference a framebuffer object
553 * @fb: framebuffer to remove
554 *
555 * Scans all the CRTCs and planes in @dev's mode_config.  If they're
556 * using @fb, removes it, setting it to NULL. Then drops the reference to the
557 * passed-in framebuffer. Might take the modeset locks.
558 *
559 * Note that this function optimizes the cleanup away if the caller holds the
560 * last reference to the framebuffer. It is also guaranteed to not take the
561 * modeset locks in this case.
562 */
563void drm_framebuffer_remove(struct drm_framebuffer *fb)
564{
565	struct drm_device *dev = fb->dev;
566	struct drm_crtc *crtc;
567	struct drm_plane *plane;
568	struct drm_mode_set set;
569	int ret;
570
571	WARN_ON(!list_empty(&fb->filp_head));
572
573	/*
574	 * drm ABI mandates that we remove any deleted framebuffers from active
575	 * useage. But since most sane clients only remove framebuffers they no
576	 * longer need, try to optimize this away.
577	 *
578	 * Since we're holding a reference ourselves, observing a refcount of 1
579	 * means that we're the last holder and can skip it. Also, the refcount
580	 * can never increase from 1 again, so we don't need any barriers or
581	 * locks.
582	 *
583	 * Note that userspace could try to race with use and instate a new
584	 * usage _after_ we've cleared all current ones. End result will be an
585	 * in-use fb with fb-id == 0. Userspace is allowed to shoot its own foot
586	 * in this manner.
587	 */
588	if (atomic_read(&fb->refcount.refcount) > 1) {
589		drm_modeset_lock_all(dev);
590		/* remove from any CRTC */
591		list_for_each_entry(crtc, &dev->mode_config.crtc_list, head) {
592			if (crtc->fb == fb) {
593				/* should turn off the crtc */
594				memset(&set, 0, sizeof(struct drm_mode_set));
595				set.crtc = crtc;
596				set.fb = NULL;
597				ret = drm_mode_set_config_internal(&set);
598				if (ret)
599					DRM_ERROR("failed to reset crtc %p when fb was deleted\n", crtc);
600			}
601		}
602
603		list_for_each_entry(plane, &dev->mode_config.plane_list, head) {
604			if (plane->fb == fb)
605				drm_plane_force_disable(plane);
606		}
607		drm_modeset_unlock_all(dev);
608	}
609
610	drm_framebuffer_unreference(fb);
611}
612EXPORT_SYMBOL(drm_framebuffer_remove);
613
614/**
615 * drm_crtc_init - Initialise a new CRTC object
616 * @dev: DRM device
617 * @crtc: CRTC object to init
618 * @funcs: callbacks for the new CRTC
619 *
620 * Inits a new object created as base part of a driver crtc object.
621 *
622 * RETURNS:
623 * Zero on success, error code on failure.
624 */
625int drm_crtc_init(struct drm_device *dev, struct drm_crtc *crtc,
626		   const struct drm_crtc_funcs *funcs)
627{
628	int ret;
629
630	crtc->dev = dev;
631	crtc->funcs = funcs;
632	crtc->invert_dimensions = false;
633
634	drm_modeset_lock_all(dev);
635	mutex_init(&crtc->mutex);
636	mutex_lock_nest_lock(&crtc->mutex, &dev->mode_config.mutex);
637
638	ret = drm_mode_object_get(dev, &crtc->base, DRM_MODE_OBJECT_CRTC);
639	if (ret)
640		goto out;
641
642	crtc->base.properties = &crtc->properties;
643
644	list_add_tail(&crtc->head, &dev->mode_config.crtc_list);
645	dev->mode_config.num_crtc++;
646
647 out:
648	drm_modeset_unlock_all(dev);
649
650	return ret;
651}
652EXPORT_SYMBOL(drm_crtc_init);
653
654/**
655 * drm_crtc_cleanup - Clean up the core crtc usage
656 * @crtc: CRTC to cleanup
657 *
658 * This function cleans up @crtc and removes it from the DRM mode setting
659 * core. Note that the function does *not* free the crtc structure itself,
660 * this is the responsibility of the caller.
661 */
662void drm_crtc_cleanup(struct drm_crtc *crtc)
663{
664	struct drm_device *dev = crtc->dev;
665
666	kfree(crtc->gamma_store);
667	crtc->gamma_store = NULL;
668
669	drm_mode_object_put(dev, &crtc->base);
670	list_del(&crtc->head);
671	dev->mode_config.num_crtc--;
672}
673EXPORT_SYMBOL(drm_crtc_cleanup);
674
675/**
676 * drm_mode_probed_add - add a mode to a connector's probed mode list
677 * @connector: connector the new mode
678 * @mode: mode data
679 *
680 * Add @mode to @connector's mode list for later use.
681 */
682void drm_mode_probed_add(struct drm_connector *connector,
683			 struct drm_display_mode *mode)
684{
685	list_add_tail(&mode->head, &connector->probed_modes);
686}
687EXPORT_SYMBOL(drm_mode_probed_add);
688
689/*
690 * drm_mode_remove - remove and free a mode
691 * @connector: connector list to modify
692 * @mode: mode to remove
693 *
694 * Remove @mode from @connector's mode list, then free it.
695 */
696static void drm_mode_remove(struct drm_connector *connector,
697			    struct drm_display_mode *mode)
698{
699	list_del(&mode->head);
700	drm_mode_destroy(connector->dev, mode);
701}
702
703/**
704 * drm_connector_init - Init a preallocated connector
705 * @dev: DRM device
706 * @connector: the connector to init
707 * @funcs: callbacks for this connector
708 * @connector_type: user visible type of the connector
709 *
710 * Initialises a preallocated connector. Connectors should be
711 * subclassed as part of driver connector objects.
712 *
713 * RETURNS:
714 * Zero on success, error code on failure.
715 */
716int drm_connector_init(struct drm_device *dev,
717		       struct drm_connector *connector,
718		       const struct drm_connector_funcs *funcs,
719		       int connector_type)
720{
721	int ret;
722	struct ida *connector_ida =
723		&drm_connector_enum_list[connector_type].ida;
724
725	drm_modeset_lock_all(dev);
726
727	ret = drm_mode_object_get(dev, &connector->base, DRM_MODE_OBJECT_CONNECTOR);
728	if (ret)
729		goto out;
730
731	connector->base.properties = &connector->properties;
732	connector->dev = dev;
733	connector->funcs = funcs;
734	connector->connector_type = connector_type;
735	connector->connector_type_id =
736		ida_simple_get(connector_ida, 1, 0, GFP_KERNEL);
737	if (connector->connector_type_id < 0) {
738		ret = connector->connector_type_id;
739		drm_mode_object_put(dev, &connector->base);
740		goto out;
741	}
742	INIT_LIST_HEAD(&connector->probed_modes);
743	INIT_LIST_HEAD(&connector->modes);
744	connector->edid_blob_ptr = NULL;
745	connector->status = connector_status_unknown;
746
747	list_add_tail(&connector->head, &dev->mode_config.connector_list);
748	dev->mode_config.num_connector++;
749
750	if (connector_type != DRM_MODE_CONNECTOR_VIRTUAL)
751		drm_object_attach_property(&connector->base,
752					      dev->mode_config.edid_property,
753					      0);
754
755	drm_object_attach_property(&connector->base,
756				      dev->mode_config.dpms_property, 0);
757
758 out:
759	drm_modeset_unlock_all(dev);
760
761	return ret;
762}
763EXPORT_SYMBOL(drm_connector_init);
764
765/**
766 * drm_connector_cleanup - cleans up an initialised connector
767 * @connector: connector to cleanup
768 *
769 * Cleans up the connector but doesn't free the object.
770 */
771void drm_connector_cleanup(struct drm_connector *connector)
772{
773	struct drm_device *dev = connector->dev;
774	struct drm_display_mode *mode, *t;
775
776	list_for_each_entry_safe(mode, t, &connector->probed_modes, head)
777		drm_mode_remove(connector, mode);
778
779	list_for_each_entry_safe(mode, t, &connector->modes, head)
780		drm_mode_remove(connector, mode);
781
782	ida_remove(&drm_connector_enum_list[connector->connector_type].ida,
783		   connector->connector_type_id);
784
785	drm_mode_object_put(dev, &connector->base);
786	list_del(&connector->head);
787	dev->mode_config.num_connector--;
788}
789EXPORT_SYMBOL(drm_connector_cleanup);
790
791void drm_connector_unplug_all(struct drm_device *dev)
792{
793	struct drm_connector *connector;
794
795	/* taking the mode config mutex ends up in a clash with sysfs */
796	list_for_each_entry(connector, &dev->mode_config.connector_list, head)
797		drm_sysfs_connector_remove(connector);
798
799}
800EXPORT_SYMBOL(drm_connector_unplug_all);
801
802int drm_bridge_init(struct drm_device *dev, struct drm_bridge *bridge,
803		const struct drm_bridge_funcs *funcs)
804{
805	int ret;
806
807	drm_modeset_lock_all(dev);
808
809	ret = drm_mode_object_get(dev, &bridge->base, DRM_MODE_OBJECT_BRIDGE);
810	if (ret)
811		goto out;
812
813	bridge->dev = dev;
814	bridge->funcs = funcs;
815
816	list_add_tail(&bridge->head, &dev->mode_config.bridge_list);
817	dev->mode_config.num_bridge++;
818
819 out:
820	drm_modeset_unlock_all(dev);
821	return ret;
822}
823EXPORT_SYMBOL(drm_bridge_init);
824
825void drm_bridge_cleanup(struct drm_bridge *bridge)
826{
827	struct drm_device *dev = bridge->dev;
828
829	drm_modeset_lock_all(dev);
830	drm_mode_object_put(dev, &bridge->base);
831	list_del(&bridge->head);
832	dev->mode_config.num_bridge--;
833	drm_modeset_unlock_all(dev);
834}
835EXPORT_SYMBOL(drm_bridge_cleanup);
836
837int drm_encoder_init(struct drm_device *dev,
838		      struct drm_encoder *encoder,
839		      const struct drm_encoder_funcs *funcs,
840		      int encoder_type)
841{
842	int ret;
843
844	drm_modeset_lock_all(dev);
845
846	ret = drm_mode_object_get(dev, &encoder->base, DRM_MODE_OBJECT_ENCODER);
847	if (ret)
848		goto out;
849
850	encoder->dev = dev;
851	encoder->encoder_type = encoder_type;
852	encoder->funcs = funcs;
853
854	list_add_tail(&encoder->head, &dev->mode_config.encoder_list);
855	dev->mode_config.num_encoder++;
856
857 out:
858	drm_modeset_unlock_all(dev);
859
860	return ret;
861}
862EXPORT_SYMBOL(drm_encoder_init);
863
864void drm_encoder_cleanup(struct drm_encoder *encoder)
865{
866	struct drm_device *dev = encoder->dev;
867	drm_modeset_lock_all(dev);
868	drm_mode_object_put(dev, &encoder->base);
869	list_del(&encoder->head);
870	dev->mode_config.num_encoder--;
871	drm_modeset_unlock_all(dev);
872}
873EXPORT_SYMBOL(drm_encoder_cleanup);
874
875/**
876 * drm_plane_init - Initialise a new plane object
877 * @dev: DRM device
878 * @plane: plane object to init
879 * @possible_crtcs: bitmask of possible CRTCs
880 * @funcs: callbacks for the new plane
881 * @formats: array of supported formats (%DRM_FORMAT_*)
882 * @format_count: number of elements in @formats
883 * @priv: plane is private (hidden from userspace)?
884 *
885 * Inits a new object created as base part of a driver plane object.
886 *
887 * RETURNS:
888 * Zero on success, error code on failure.
889 */
890int drm_plane_init(struct drm_device *dev, struct drm_plane *plane,
891		   unsigned long possible_crtcs,
892		   const struct drm_plane_funcs *funcs,
893		   const uint32_t *formats, uint32_t format_count,
894		   bool priv)
895{
896	int ret;
897
898	drm_modeset_lock_all(dev);
899
900	ret = drm_mode_object_get(dev, &plane->base, DRM_MODE_OBJECT_PLANE);
901	if (ret)
902		goto out;
903
904	plane->base.properties = &plane->properties;
905	plane->dev = dev;
906	plane->funcs = funcs;
907	plane->format_types = kmalloc(sizeof(uint32_t) * format_count,
908				      GFP_KERNEL);
909	if (!plane->format_types) {
910		DRM_DEBUG_KMS("out of memory when allocating plane\n");
911		drm_mode_object_put(dev, &plane->base);
912		ret = -ENOMEM;
913		goto out;
914	}
915
916	memcpy(plane->format_types, formats, format_count * sizeof(uint32_t));
917	plane->format_count = format_count;
918	plane->possible_crtcs = possible_crtcs;
919
920	/* private planes are not exposed to userspace, but depending on
921	 * display hardware, might be convenient to allow sharing programming
922	 * for the scanout engine with the crtc implementation.
923	 */
924	if (!priv) {
925		list_add_tail(&plane->head, &dev->mode_config.plane_list);
926		dev->mode_config.num_plane++;
927	} else {
928		INIT_LIST_HEAD(&plane->head);
929	}
930
931 out:
932	drm_modeset_unlock_all(dev);
933
934	return ret;
935}
936EXPORT_SYMBOL(drm_plane_init);
937
938/**
939 * drm_plane_cleanup - Clean up the core plane usage
940 * @plane: plane to cleanup
941 *
942 * This function cleans up @plane and removes it from the DRM mode setting
943 * core. Note that the function does *not* free the plane structure itself,
944 * this is the responsibility of the caller.
945 */
946void drm_plane_cleanup(struct drm_plane *plane)
947{
948	struct drm_device *dev = plane->dev;
949
950	drm_modeset_lock_all(dev);
951	kfree(plane->format_types);
952	drm_mode_object_put(dev, &plane->base);
953	/* if not added to a list, it must be a private plane */
954	if (!list_empty(&plane->head)) {
955		list_del(&plane->head);
956		dev->mode_config.num_plane--;
957	}
958	drm_modeset_unlock_all(dev);
959}
960EXPORT_SYMBOL(drm_plane_cleanup);
961
962/**
963 * drm_plane_force_disable - Forcibly disable a plane
964 * @plane: plane to disable
965 *
966 * Forces the plane to be disabled.
967 *
968 * Used when the plane's current framebuffer is destroyed,
969 * and when restoring fbdev mode.
970 */
971void drm_plane_force_disable(struct drm_plane *plane)
972{
973	int ret;
974
975	if (!plane->fb)
976		return;
977
978	ret = plane->funcs->disable_plane(plane);
979	if (ret)
980		DRM_ERROR("failed to disable plane with busy fb\n");
981	/* disconnect the plane from the fb and crtc: */
982	__drm_framebuffer_unreference(plane->fb);
983	plane->fb = NULL;
984	plane->crtc = NULL;
985}
986EXPORT_SYMBOL(drm_plane_force_disable);
987
988/**
989 * drm_mode_create - create a new display mode
990 * @dev: DRM device
991 *
992 * Create a new drm_display_mode, give it an ID, and return it.
993 *
994 * RETURNS:
995 * Pointer to new mode on success, NULL on error.
996 */
997struct drm_display_mode *drm_mode_create(struct drm_device *dev)
998{
999	struct drm_display_mode *nmode;
1000
1001	nmode = kzalloc(sizeof(struct drm_display_mode), GFP_KERNEL);
1002	if (!nmode)
1003		return NULL;
1004
1005	if (drm_mode_object_get(dev, &nmode->base, DRM_MODE_OBJECT_MODE)) {
1006		kfree(nmode);
1007		return NULL;
1008	}
1009
1010	return nmode;
1011}
1012EXPORT_SYMBOL(drm_mode_create);
1013
1014/**
1015 * drm_mode_destroy - remove a mode
1016 * @dev: DRM device
1017 * @mode: mode to remove
1018 *
1019 * Free @mode's unique identifier, then free it.
1020 */
1021void drm_mode_destroy(struct drm_device *dev, struct drm_display_mode *mode)
1022{
1023	if (!mode)
1024		return;
1025
1026	drm_mode_object_put(dev, &mode->base);
1027
1028	kfree(mode);
1029}
1030EXPORT_SYMBOL(drm_mode_destroy);
1031
1032static int drm_mode_create_standard_connector_properties(struct drm_device *dev)
1033{
1034	struct drm_property *edid;
1035	struct drm_property *dpms;
1036
1037	/*
1038	 * Standard properties (apply to all connectors)
1039	 */
1040	edid = drm_property_create(dev, DRM_MODE_PROP_BLOB |
1041				   DRM_MODE_PROP_IMMUTABLE,
1042				   "EDID", 0);
1043	dev->mode_config.edid_property = edid;
1044
1045	dpms = drm_property_create_enum(dev, 0,
1046				   "DPMS", drm_dpms_enum_list,
1047				   ARRAY_SIZE(drm_dpms_enum_list));
1048	dev->mode_config.dpms_property = dpms;
1049
1050	return 0;
1051}
1052
1053/**
1054 * drm_mode_create_dvi_i_properties - create DVI-I specific connector properties
1055 * @dev: DRM device
1056 *
1057 * Called by a driver the first time a DVI-I connector is made.
1058 */
1059int drm_mode_create_dvi_i_properties(struct drm_device *dev)
1060{
1061	struct drm_property *dvi_i_selector;
1062	struct drm_property *dvi_i_subconnector;
1063
1064	if (dev->mode_config.dvi_i_select_subconnector_property)
1065		return 0;
1066
1067	dvi_i_selector =
1068		drm_property_create_enum(dev, 0,
1069				    "select subconnector",
1070				    drm_dvi_i_select_enum_list,
1071				    ARRAY_SIZE(drm_dvi_i_select_enum_list));
1072	dev->mode_config.dvi_i_select_subconnector_property = dvi_i_selector;
1073
1074	dvi_i_subconnector = drm_property_create_enum(dev, DRM_MODE_PROP_IMMUTABLE,
1075				    "subconnector",
1076				    drm_dvi_i_subconnector_enum_list,
1077				    ARRAY_SIZE(drm_dvi_i_subconnector_enum_list));
1078	dev->mode_config.dvi_i_subconnector_property = dvi_i_subconnector;
1079
1080	return 0;
1081}
1082EXPORT_SYMBOL(drm_mode_create_dvi_i_properties);
1083
1084/**
1085 * drm_create_tv_properties - create TV specific connector properties
1086 * @dev: DRM device
1087 * @num_modes: number of different TV formats (modes) supported
1088 * @modes: array of pointers to strings containing name of each format
1089 *
1090 * Called by a driver's TV initialization routine, this function creates
1091 * the TV specific connector properties for a given device.  Caller is
1092 * responsible for allocating a list of format names and passing them to
1093 * this routine.
1094 */
1095int drm_mode_create_tv_properties(struct drm_device *dev, int num_modes,
1096				  char *modes[])
1097{
1098	struct drm_property *tv_selector;
1099	struct drm_property *tv_subconnector;
1100	int i;
1101
1102	if (dev->mode_config.tv_select_subconnector_property)
1103		return 0;
1104
1105	/*
1106	 * Basic connector properties
1107	 */
1108	tv_selector = drm_property_create_enum(dev, 0,
1109					  "select subconnector",
1110					  drm_tv_select_enum_list,
1111					  ARRAY_SIZE(drm_tv_select_enum_list));
1112	dev->mode_config.tv_select_subconnector_property = tv_selector;
1113
1114	tv_subconnector =
1115		drm_property_create_enum(dev, DRM_MODE_PROP_IMMUTABLE,
1116				    "subconnector",
1117				    drm_tv_subconnector_enum_list,
1118				    ARRAY_SIZE(drm_tv_subconnector_enum_list));
1119	dev->mode_config.tv_subconnector_property = tv_subconnector;
1120
1121	/*
1122	 * Other, TV specific properties: margins & TV modes.
1123	 */
1124	dev->mode_config.tv_left_margin_property =
1125		drm_property_create_range(dev, 0, "left margin", 0, 100);
1126
1127	dev->mode_config.tv_right_margin_property =
1128		drm_property_create_range(dev, 0, "right margin", 0, 100);
1129
1130	dev->mode_config.tv_top_margin_property =
1131		drm_property_create_range(dev, 0, "top margin", 0, 100);
1132
1133	dev->mode_config.tv_bottom_margin_property =
1134		drm_property_create_range(dev, 0, "bottom margin", 0, 100);
1135
1136	dev->mode_config.tv_mode_property =
1137		drm_property_create(dev, DRM_MODE_PROP_ENUM,
1138				    "mode", num_modes);
1139	for (i = 0; i < num_modes; i++)
1140		drm_property_add_enum(dev->mode_config.tv_mode_property, i,
1141				      i, modes[i]);
1142
1143	dev->mode_config.tv_brightness_property =
1144		drm_property_create_range(dev, 0, "brightness", 0, 100);
1145
1146	dev->mode_config.tv_contrast_property =
1147		drm_property_create_range(dev, 0, "contrast", 0, 100);
1148
1149	dev->mode_config.tv_flicker_reduction_property =
1150		drm_property_create_range(dev, 0, "flicker reduction", 0, 100);
1151
1152	dev->mode_config.tv_overscan_property =
1153		drm_property_create_range(dev, 0, "overscan", 0, 100);
1154
1155	dev->mode_config.tv_saturation_property =
1156		drm_property_create_range(dev, 0, "saturation", 0, 100);
1157
1158	dev->mode_config.tv_hue_property =
1159		drm_property_create_range(dev, 0, "hue", 0, 100);
1160
1161	return 0;
1162}
1163EXPORT_SYMBOL(drm_mode_create_tv_properties);
1164
1165/**
1166 * drm_mode_create_scaling_mode_property - create scaling mode property
1167 * @dev: DRM device
1168 *
1169 * Called by a driver the first time it's needed, must be attached to desired
1170 * connectors.
1171 */
1172int drm_mode_create_scaling_mode_property(struct drm_device *dev)
1173{
1174	struct drm_property *scaling_mode;
1175
1176	if (dev->mode_config.scaling_mode_property)
1177		return 0;
1178
1179	scaling_mode =
1180		drm_property_create_enum(dev, 0, "scaling mode",
1181				drm_scaling_mode_enum_list,
1182				    ARRAY_SIZE(drm_scaling_mode_enum_list));
1183
1184	dev->mode_config.scaling_mode_property = scaling_mode;
1185
1186	return 0;
1187}
1188EXPORT_SYMBOL(drm_mode_create_scaling_mode_property);
1189
1190/**
1191 * drm_mode_create_dirty_property - create dirty property
1192 * @dev: DRM device
1193 *
1194 * Called by a driver the first time it's needed, must be attached to desired
1195 * connectors.
1196 */
1197int drm_mode_create_dirty_info_property(struct drm_device *dev)
1198{
1199	struct drm_property *dirty_info;
1200
1201	if (dev->mode_config.dirty_info_property)
1202		return 0;
1203
1204	dirty_info =
1205		drm_property_create_enum(dev, DRM_MODE_PROP_IMMUTABLE,
1206				    "dirty",
1207				    drm_dirty_info_enum_list,
1208				    ARRAY_SIZE(drm_dirty_info_enum_list));
1209	dev->mode_config.dirty_info_property = dirty_info;
1210
1211	return 0;
1212}
1213EXPORT_SYMBOL(drm_mode_create_dirty_info_property);
1214
1215static int drm_mode_group_init(struct drm_device *dev, struct drm_mode_group *group)
1216{
1217	uint32_t total_objects = 0;
1218
1219	total_objects += dev->mode_config.num_crtc;
1220	total_objects += dev->mode_config.num_connector;
1221	total_objects += dev->mode_config.num_encoder;
1222	total_objects += dev->mode_config.num_bridge;
1223
1224	group->id_list = kzalloc(total_objects * sizeof(uint32_t), GFP_KERNEL);
1225	if (!group->id_list)
1226		return -ENOMEM;
1227
1228	group->num_crtcs = 0;
1229	group->num_connectors = 0;
1230	group->num_encoders = 0;
1231	group->num_bridges = 0;
1232	return 0;
1233}
1234
1235int drm_mode_group_init_legacy_group(struct drm_device *dev,
1236				     struct drm_mode_group *group)
1237{
1238	struct drm_crtc *crtc;
1239	struct drm_encoder *encoder;
1240	struct drm_connector *connector;
1241	struct drm_bridge *bridge;
1242	int ret;
1243
1244	if ((ret = drm_mode_group_init(dev, group)))
1245		return ret;
1246
1247	list_for_each_entry(crtc, &dev->mode_config.crtc_list, head)
1248		group->id_list[group->num_crtcs++] = crtc->base.id;
1249
1250	list_for_each_entry(encoder, &dev->mode_config.encoder_list, head)
1251		group->id_list[group->num_crtcs + group->num_encoders++] =
1252		encoder->base.id;
1253
1254	list_for_each_entry(connector, &dev->mode_config.connector_list, head)
1255		group->id_list[group->num_crtcs + group->num_encoders +
1256			       group->num_connectors++] = connector->base.id;
1257
1258	list_for_each_entry(bridge, &dev->mode_config.bridge_list, head)
1259		group->id_list[group->num_crtcs + group->num_encoders +
1260			       group->num_connectors + group->num_bridges++] =
1261					bridge->base.id;
1262
1263	return 0;
1264}
1265EXPORT_SYMBOL(drm_mode_group_init_legacy_group);
1266
1267/**
1268 * drm_crtc_convert_to_umode - convert a drm_display_mode into a modeinfo
1269 * @out: drm_mode_modeinfo struct to return to the user
1270 * @in: drm_display_mode to use
1271 *
1272 * Convert a drm_display_mode into a drm_mode_modeinfo structure to return to
1273 * the user.
1274 */
1275static void drm_crtc_convert_to_umode(struct drm_mode_modeinfo *out,
1276				      const struct drm_display_mode *in)
1277{
1278	WARN(in->hdisplay > USHRT_MAX || in->hsync_start > USHRT_MAX ||
1279	     in->hsync_end > USHRT_MAX || in->htotal > USHRT_MAX ||
1280	     in->hskew > USHRT_MAX || in->vdisplay > USHRT_MAX ||
1281	     in->vsync_start > USHRT_MAX || in->vsync_end > USHRT_MAX ||
1282	     in->vtotal > USHRT_MAX || in->vscan > USHRT_MAX,
1283	     "timing values too large for mode info\n");
1284
1285	out->clock = in->clock;
1286	out->hdisplay = in->hdisplay;
1287	out->hsync_start = in->hsync_start;
1288	out->hsync_end = in->hsync_end;
1289	out->htotal = in->htotal;
1290	out->hskew = in->hskew;
1291	out->vdisplay = in->vdisplay;
1292	out->vsync_start = in->vsync_start;
1293	out->vsync_end = in->vsync_end;
1294	out->vtotal = in->vtotal;
1295	out->vscan = in->vscan;
1296	out->vrefresh = in->vrefresh;
1297	out->flags = in->flags;
1298	out->type = in->type;
1299	strncpy(out->name, in->name, DRM_DISPLAY_MODE_LEN);
1300	out->name[DRM_DISPLAY_MODE_LEN-1] = 0;
1301}
1302
1303/**
1304 * drm_crtc_convert_to_umode - convert a modeinfo into a drm_display_mode
1305 * @out: drm_display_mode to return to the user
1306 * @in: drm_mode_modeinfo to use
1307 *
1308 * Convert a drm_mode_modeinfo into a drm_display_mode structure to return to
1309 * the caller.
1310 *
1311 * RETURNS:
1312 * Zero on success, errno on failure.
1313 */
1314static int drm_crtc_convert_umode(struct drm_display_mode *out,
1315				  const struct drm_mode_modeinfo *in)
1316{
1317	if (in->clock > INT_MAX || in->vrefresh > INT_MAX)
1318		return -ERANGE;
1319
1320	out->clock = in->clock;
1321	out->hdisplay = in->hdisplay;
1322	out->hsync_start = in->hsync_start;
1323	out->hsync_end = in->hsync_end;
1324	out->htotal = in->htotal;
1325	out->hskew = in->hskew;
1326	out->vdisplay = in->vdisplay;
1327	out->vsync_start = in->vsync_start;
1328	out->vsync_end = in->vsync_end;
1329	out->vtotal = in->vtotal;
1330	out->vscan = in->vscan;
1331	out->vrefresh = in->vrefresh;
1332	out->flags = in->flags;
1333	out->type = in->type;
1334	strncpy(out->name, in->name, DRM_DISPLAY_MODE_LEN);
1335	out->name[DRM_DISPLAY_MODE_LEN-1] = 0;
1336
1337	return 0;
1338}
1339
1340/**
1341 * drm_mode_getresources - get graphics configuration
1342 * @dev: drm device for the ioctl
1343 * @data: data pointer for the ioctl
1344 * @file_priv: drm file for the ioctl call
1345 *
1346 * Construct a set of configuration description structures and return
1347 * them to the user, including CRTC, connector and framebuffer configuration.
1348 *
1349 * Called by the user via ioctl.
1350 *
1351 * RETURNS:
1352 * Zero on success, errno on failure.
1353 */
1354int drm_mode_getresources(struct drm_device *dev, void *data,
1355			  struct drm_file *file_priv)
1356{
1357	struct drm_mode_card_res *card_res = data;
1358	struct list_head *lh;
1359	struct drm_framebuffer *fb;
1360	struct drm_connector *connector;
1361	struct drm_crtc *crtc;
1362	struct drm_encoder *encoder;
1363	int ret = 0;
1364	int connector_count = 0;
1365	int crtc_count = 0;
1366	int fb_count = 0;
1367	int encoder_count = 0;
1368	int copied = 0, i;
1369	uint32_t __user *fb_id;
1370	uint32_t __user *crtc_id;
1371	uint32_t __user *connector_id;
1372	uint32_t __user *encoder_id;
1373	struct drm_mode_group *mode_group;
1374
1375	if (!drm_core_check_feature(dev, DRIVER_MODESET))
1376		return -EINVAL;
1377
1378
1379	mutex_lock(&file_priv->fbs_lock);
1380	/*
1381	 * For the non-control nodes we need to limit the list of resources
1382	 * by IDs in the group list for this node
1383	 */
1384	list_for_each(lh, &file_priv->fbs)
1385		fb_count++;
1386
1387	/* handle this in 4 parts */
1388	/* FBs */
1389	if (card_res->count_fbs >= fb_count) {
1390		copied = 0;
1391		fb_id = (uint32_t __user *)(unsigned long)card_res->fb_id_ptr;
1392		list_for_each_entry(fb, &file_priv->fbs, filp_head) {
1393			if (put_user(fb->base.id, fb_id + copied)) {
1394				mutex_unlock(&file_priv->fbs_lock);
1395				return -EFAULT;
1396			}
1397			copied++;
1398		}
1399	}
1400	card_res->count_fbs = fb_count;
1401	mutex_unlock(&file_priv->fbs_lock);
1402
1403	drm_modeset_lock_all(dev);
1404	mode_group = &file_priv->master->minor->mode_group;
1405	if (file_priv->master->minor->type == DRM_MINOR_CONTROL) {
1406
1407		list_for_each(lh, &dev->mode_config.crtc_list)
1408			crtc_count++;
1409
1410		list_for_each(lh, &dev->mode_config.connector_list)
1411			connector_count++;
1412
1413		list_for_each(lh, &dev->mode_config.encoder_list)
1414			encoder_count++;
1415	} else {
1416
1417		crtc_count = mode_group->num_crtcs;
1418		connector_count = mode_group->num_connectors;
1419		encoder_count = mode_group->num_encoders;
1420	}
1421
1422	card_res->max_height = dev->mode_config.max_height;
1423	card_res->min_height = dev->mode_config.min_height;
1424	card_res->max_width = dev->mode_config.max_width;
1425	card_res->min_width = dev->mode_config.min_width;
1426
1427	/* CRTCs */
1428	if (card_res->count_crtcs >= crtc_count) {
1429		copied = 0;
1430		crtc_id = (uint32_t __user *)(unsigned long)card_res->crtc_id_ptr;
1431		if (file_priv->master->minor->type == DRM_MINOR_CONTROL) {
1432			list_for_each_entry(crtc, &dev->mode_config.crtc_list,
1433					    head) {
1434				DRM_DEBUG_KMS("[CRTC:%d]\n", crtc->base.id);
1435				if (put_user(crtc->base.id, crtc_id + copied)) {
1436					ret = -EFAULT;
1437					goto out;
1438				}
1439				copied++;
1440			}
1441		} else {
1442			for (i = 0; i < mode_group->num_crtcs; i++) {
1443				if (put_user(mode_group->id_list[i],
1444					     crtc_id + copied)) {
1445					ret = -EFAULT;
1446					goto out;
1447				}
1448				copied++;
1449			}
1450		}
1451	}
1452	card_res->count_crtcs = crtc_count;
1453
1454	/* Encoders */
1455	if (card_res->count_encoders >= encoder_count) {
1456		copied = 0;
1457		encoder_id = (uint32_t __user *)(unsigned long)card_res->encoder_id_ptr;
1458		if (file_priv->master->minor->type == DRM_MINOR_CONTROL) {
1459			list_for_each_entry(encoder,
1460					    &dev->mode_config.encoder_list,
1461					    head) {
1462				DRM_DEBUG_KMS("[ENCODER:%d:%s]\n", encoder->base.id,
1463						drm_get_encoder_name(encoder));
1464				if (put_user(encoder->base.id, encoder_id +
1465					     copied)) {
1466					ret = -EFAULT;
1467					goto out;
1468				}
1469				copied++;
1470			}
1471		} else {
1472			for (i = mode_group->num_crtcs; i < mode_group->num_crtcs + mode_group->num_encoders; i++) {
1473				if (put_user(mode_group->id_list[i],
1474					     encoder_id + copied)) {
1475					ret = -EFAULT;
1476					goto out;
1477				}
1478				copied++;
1479			}
1480
1481		}
1482	}
1483	card_res->count_encoders = encoder_count;
1484
1485	/* Connectors */
1486	if (card_res->count_connectors >= connector_count) {
1487		copied = 0;
1488		connector_id = (uint32_t __user *)(unsigned long)card_res->connector_id_ptr;
1489		if (file_priv->master->minor->type == DRM_MINOR_CONTROL) {
1490			list_for_each_entry(connector,
1491					    &dev->mode_config.connector_list,
1492					    head) {
1493				DRM_DEBUG_KMS("[CONNECTOR:%d:%s]\n",
1494					connector->base.id,
1495					drm_get_connector_name(connector));
1496				if (put_user(connector->base.id,
1497					     connector_id + copied)) {
1498					ret = -EFAULT;
1499					goto out;
1500				}
1501				copied++;
1502			}
1503		} else {
1504			int start = mode_group->num_crtcs +
1505				mode_group->num_encoders;
1506			for (i = start; i < start + mode_group->num_connectors; i++) {
1507				if (put_user(mode_group->id_list[i],
1508					     connector_id + copied)) {
1509					ret = -EFAULT;
1510					goto out;
1511				}
1512				copied++;
1513			}
1514		}
1515	}
1516	card_res->count_connectors = connector_count;
1517
1518	DRM_DEBUG_KMS("CRTC[%d] CONNECTORS[%d] ENCODERS[%d]\n", card_res->count_crtcs,
1519		  card_res->count_connectors, card_res->count_encoders);
1520
1521out:
1522	drm_modeset_unlock_all(dev);
1523	return ret;
1524}
1525
1526/**
1527 * drm_mode_getcrtc - get CRTC configuration
1528 * @dev: drm device for the ioctl
1529 * @data: data pointer for the ioctl
1530 * @file_priv: drm file for the ioctl call
1531 *
1532 * Construct a CRTC configuration structure to return to the user.
1533 *
1534 * Called by the user via ioctl.
1535 *
1536 * RETURNS:
1537 * Zero on success, errno on failure.
1538 */
1539int drm_mode_getcrtc(struct drm_device *dev,
1540		     void *data, struct drm_file *file_priv)
1541{
1542	struct drm_mode_crtc *crtc_resp = data;
1543	struct drm_crtc *crtc;
1544	struct drm_mode_object *obj;
1545	int ret = 0;
1546
1547	if (!drm_core_check_feature(dev, DRIVER_MODESET))
1548		return -EINVAL;
1549
1550	drm_modeset_lock_all(dev);
1551
1552	obj = drm_mode_object_find(dev, crtc_resp->crtc_id,
1553				   DRM_MODE_OBJECT_CRTC);
1554	if (!obj) {
1555		ret = -EINVAL;
1556		goto out;
1557	}
1558	crtc = obj_to_crtc(obj);
1559
1560	crtc_resp->x = crtc->x;
1561	crtc_resp->y = crtc->y;
1562	crtc_resp->gamma_size = crtc->gamma_size;
1563	if (crtc->fb)
1564		crtc_resp->fb_id = crtc->fb->base.id;
1565	else
1566		crtc_resp->fb_id = 0;
1567
1568	if (crtc->enabled) {
1569
1570		drm_crtc_convert_to_umode(&crtc_resp->mode, &crtc->mode);
1571		crtc_resp->mode_valid = 1;
1572
1573	} else {
1574		crtc_resp->mode_valid = 0;
1575	}
1576
1577out:
1578	drm_modeset_unlock_all(dev);
1579	return ret;
1580}
1581
1582/**
1583 * drm_mode_getconnector - get connector configuration
1584 * @dev: drm device for the ioctl
1585 * @data: data pointer for the ioctl
1586 * @file_priv: drm file for the ioctl call
1587 *
1588 * Construct a connector configuration structure to return to the user.
1589 *
1590 * Called by the user via ioctl.
1591 *
1592 * RETURNS:
1593 * Zero on success, errno on failure.
1594 */
1595int drm_mode_getconnector(struct drm_device *dev, void *data,
1596			  struct drm_file *file_priv)
1597{
1598	struct drm_mode_get_connector *out_resp = data;
1599	struct drm_mode_object *obj;
1600	struct drm_connector *connector;
1601	struct drm_display_mode *mode;
1602	int mode_count = 0;
1603	int props_count = 0;
1604	int encoders_count = 0;
1605	int ret = 0;
1606	int copied = 0;
1607	int i;
1608	struct drm_mode_modeinfo u_mode;
1609	struct drm_mode_modeinfo __user *mode_ptr;
1610	uint32_t __user *prop_ptr;
1611	uint64_t __user *prop_values;
1612	uint32_t __user *encoder_ptr;
1613
1614	if (!drm_core_check_feature(dev, DRIVER_MODESET))
1615		return -EINVAL;
1616
1617	memset(&u_mode, 0, sizeof(struct drm_mode_modeinfo));
1618
1619	DRM_DEBUG_KMS("[CONNECTOR:%d:?]\n", out_resp->connector_id);
1620
1621	mutex_lock(&dev->mode_config.mutex);
1622
1623	obj = drm_mode_object_find(dev, out_resp->connector_id,
1624				   DRM_MODE_OBJECT_CONNECTOR);
1625	if (!obj) {
1626		ret = -EINVAL;
1627		goto out;
1628	}
1629	connector = obj_to_connector(obj);
1630
1631	props_count = connector->properties.count;
1632
1633	for (i = 0; i < DRM_CONNECTOR_MAX_ENCODER; i++) {
1634		if (connector->encoder_ids[i] != 0) {
1635			encoders_count++;
1636		}
1637	}
1638
1639	if (out_resp->count_modes == 0) {
1640		connector->funcs->fill_modes(connector,
1641					     dev->mode_config.max_width,
1642					     dev->mode_config.max_height);
1643	}
1644
1645	/* delayed so we get modes regardless of pre-fill_modes state */
1646	list_for_each_entry(mode, &connector->modes, head)
1647		mode_count++;
1648
1649	out_resp->connector_id = connector->base.id;
1650	out_resp->connector_type = connector->connector_type;
1651	out_resp->connector_type_id = connector->connector_type_id;
1652	out_resp->mm_width = connector->display_info.width_mm;
1653	out_resp->mm_height = connector->display_info.height_mm;
1654	out_resp->subpixel = connector->display_info.subpixel_order;
1655	out_resp->connection = connector->status;
1656	if (connector->encoder)
1657		out_resp->encoder_id = connector->encoder->base.id;
1658	else
1659		out_resp->encoder_id = 0;
1660
1661	/*
1662	 * This ioctl is called twice, once to determine how much space is
1663	 * needed, and the 2nd time to fill it.
1664	 */
1665	if ((out_resp->count_modes >= mode_count) && mode_count) {
1666		copied = 0;
1667		mode_ptr = (struct drm_mode_modeinfo __user *)(unsigned long)out_resp->modes_ptr;
1668		list_for_each_entry(mode, &connector->modes, head) {
1669			drm_crtc_convert_to_umode(&u_mode, mode);
1670			if (copy_to_user(mode_ptr + copied,
1671					 &u_mode, sizeof(u_mode))) {
1672				ret = -EFAULT;
1673				goto out;
1674			}
1675			copied++;
1676		}
1677	}
1678	out_resp->count_modes = mode_count;
1679
1680	if ((out_resp->count_props >= props_count) && props_count) {
1681		copied = 0;
1682		prop_ptr = (uint32_t __user *)(unsigned long)(out_resp->props_ptr);
1683		prop_values = (uint64_t __user *)(unsigned long)(out_resp->prop_values_ptr);
1684		for (i = 0; i < connector->properties.count; i++) {
1685			if (put_user(connector->properties.ids[i],
1686				     prop_ptr + copied)) {
1687				ret = -EFAULT;
1688				goto out;
1689			}
1690
1691			if (put_user(connector->properties.values[i],
1692				     prop_values + copied)) {
1693				ret = -EFAULT;
1694				goto out;
1695			}
1696			copied++;
1697		}
1698	}
1699	out_resp->count_props = props_count;
1700
1701	if ((out_resp->count_encoders >= encoders_count) && encoders_count) {
1702		copied = 0;
1703		encoder_ptr = (uint32_t __user *)(unsigned long)(out_resp->encoders_ptr);
1704		for (i = 0; i < DRM_CONNECTOR_MAX_ENCODER; i++) {
1705			if (connector->encoder_ids[i] != 0) {
1706				if (put_user(connector->encoder_ids[i],
1707					     encoder_ptr + copied)) {
1708					ret = -EFAULT;
1709					goto out;
1710				}
1711				copied++;
1712			}
1713		}
1714	}
1715	out_resp->count_encoders = encoders_count;
1716
1717out:
1718	mutex_unlock(&dev->mode_config.mutex);
1719
1720	return ret;
1721}
1722
1723int drm_mode_getencoder(struct drm_device *dev, void *data,
1724			struct drm_file *file_priv)
1725{
1726	struct drm_mode_get_encoder *enc_resp = data;
1727	struct drm_mode_object *obj;
1728	struct drm_encoder *encoder;
1729	int ret = 0;
1730
1731	if (!drm_core_check_feature(dev, DRIVER_MODESET))
1732		return -EINVAL;
1733
1734	drm_modeset_lock_all(dev);
1735	obj = drm_mode_object_find(dev, enc_resp->encoder_id,
1736				   DRM_MODE_OBJECT_ENCODER);
1737	if (!obj) {
1738		ret = -EINVAL;
1739		goto out;
1740	}
1741	encoder = obj_to_encoder(obj);
1742
1743	if (encoder->crtc)
1744		enc_resp->crtc_id = encoder->crtc->base.id;
1745	else
1746		enc_resp->crtc_id = 0;
1747	enc_resp->encoder_type = encoder->encoder_type;
1748	enc_resp->encoder_id = encoder->base.id;
1749	enc_resp->possible_crtcs = encoder->possible_crtcs;
1750	enc_resp->possible_clones = encoder->possible_clones;
1751
1752out:
1753	drm_modeset_unlock_all(dev);
1754	return ret;
1755}
1756
1757/**
1758 * drm_mode_getplane_res - get plane info
1759 * @dev: DRM device
1760 * @data: ioctl data
1761 * @file_priv: DRM file info
1762 *
1763 * Return an plane count and set of IDs.
1764 */
1765int drm_mode_getplane_res(struct drm_device *dev, void *data,
1766			    struct drm_file *file_priv)
1767{
1768	struct drm_mode_get_plane_res *plane_resp = data;
1769	struct drm_mode_config *config;
1770	struct drm_plane *plane;
1771	uint32_t __user *plane_ptr;
1772	int copied = 0, ret = 0;
1773
1774	if (!drm_core_check_feature(dev, DRIVER_MODESET))
1775		return -EINVAL;
1776
1777	drm_modeset_lock_all(dev);
1778	config = &dev->mode_config;
1779
1780	/*
1781	 * This ioctl is called twice, once to determine how much space is
1782	 * needed, and the 2nd time to fill it.
1783	 */
1784	if (config->num_plane &&
1785	    (plane_resp->count_planes >= config->num_plane)) {
1786		plane_ptr = (uint32_t __user *)(unsigned long)plane_resp->plane_id_ptr;
1787
1788		list_for_each_entry(plane, &config->plane_list, head) {
1789			if (put_user(plane->base.id, plane_ptr + copied)) {
1790				ret = -EFAULT;
1791				goto out;
1792			}
1793			copied++;
1794		}
1795	}
1796	plane_resp->count_planes = config->num_plane;
1797
1798out:
1799	drm_modeset_unlock_all(dev);
1800	return ret;
1801}
1802
1803/**
1804 * drm_mode_getplane - get plane info
1805 * @dev: DRM device
1806 * @data: ioctl data
1807 * @file_priv: DRM file info
1808 *
1809 * Return plane info, including formats supported, gamma size, any
1810 * current fb, etc.
1811 */
1812int drm_mode_getplane(struct drm_device *dev, void *data,
1813			struct drm_file *file_priv)
1814{
1815	struct drm_mode_get_plane *plane_resp = data;
1816	struct drm_mode_object *obj;
1817	struct drm_plane *plane;
1818	uint32_t __user *format_ptr;
1819	int ret = 0;
1820
1821	if (!drm_core_check_feature(dev, DRIVER_MODESET))
1822		return -EINVAL;
1823
1824	drm_modeset_lock_all(dev);
1825	obj = drm_mode_object_find(dev, plane_resp->plane_id,
1826				   DRM_MODE_OBJECT_PLANE);
1827	if (!obj) {
1828		ret = -ENOENT;
1829		goto out;
1830	}
1831	plane = obj_to_plane(obj);
1832
1833	if (plane->crtc)
1834		plane_resp->crtc_id = plane->crtc->base.id;
1835	else
1836		plane_resp->crtc_id = 0;
1837
1838	if (plane->fb)
1839		plane_resp->fb_id = plane->fb->base.id;
1840	else
1841		plane_resp->fb_id = 0;
1842
1843	plane_resp->plane_id = plane->base.id;
1844	plane_resp->possible_crtcs = plane->possible_crtcs;
1845	plane_resp->gamma_size = 0;
1846
1847	/*
1848	 * This ioctl is called twice, once to determine how much space is
1849	 * needed, and the 2nd time to fill it.
1850	 */
1851	if (plane->format_count &&
1852	    (plane_resp->count_format_types >= plane->format_count)) {
1853		format_ptr = (uint32_t __user *)(unsigned long)plane_resp->format_type_ptr;
1854		if (copy_to_user(format_ptr,
1855				 plane->format_types,
1856				 sizeof(uint32_t) * plane->format_count)) {
1857			ret = -EFAULT;
1858			goto out;
1859		}
1860	}
1861	plane_resp->count_format_types = plane->format_count;
1862
1863out:
1864	drm_modeset_unlock_all(dev);
1865	return ret;
1866}
1867
1868/**
1869 * drm_mode_setplane - set up or tear down an plane
1870 * @dev: DRM device
1871 * @data: ioctl data*
1872 * @file_priv: DRM file info
1873 *
1874 * Set plane info, including placement, fb, scaling, and other factors.
1875 * Or pass a NULL fb to disable.
1876 */
1877int drm_mode_setplane(struct drm_device *dev, void *data,
1878			struct drm_file *file_priv)
1879{
1880	struct drm_mode_set_plane *plane_req = data;
1881	struct drm_mode_object *obj;
1882	struct drm_plane *plane;
1883	struct drm_crtc *crtc;
1884	struct drm_framebuffer *fb = NULL, *old_fb = NULL;
1885	int ret = 0;
1886	unsigned int fb_width, fb_height;
1887	int i;
1888
1889	if (!drm_core_check_feature(dev, DRIVER_MODESET))
1890		return -EINVAL;
1891
1892	/*
1893	 * First, find the plane, crtc, and fb objects.  If not available,
1894	 * we don't bother to call the driver.
1895	 */
1896	obj = drm_mode_object_find(dev, plane_req->plane_id,
1897				   DRM_MODE_OBJECT_PLANE);
1898	if (!obj) {
1899		DRM_DEBUG_KMS("Unknown plane ID %d\n",
1900			      plane_req->plane_id);
1901		return -ENOENT;
1902	}
1903	plane = obj_to_plane(obj);
1904
1905	/* No fb means shut it down */
1906	if (!plane_req->fb_id) {
1907		drm_modeset_lock_all(dev);
1908		old_fb = plane->fb;
1909		plane->funcs->disable_plane(plane);
1910		plane->crtc = NULL;
1911		plane->fb = NULL;
1912		drm_modeset_unlock_all(dev);
1913		goto out;
1914	}
1915
1916	obj = drm_mode_object_find(dev, plane_req->crtc_id,
1917				   DRM_MODE_OBJECT_CRTC);
1918	if (!obj) {
1919		DRM_DEBUG_KMS("Unknown crtc ID %d\n",
1920			      plane_req->crtc_id);
1921		ret = -ENOENT;
1922		goto out;
1923	}
1924	crtc = obj_to_crtc(obj);
1925
1926	fb = drm_framebuffer_lookup(dev, plane_req->fb_id);
1927	if (!fb) {
1928		DRM_DEBUG_KMS("Unknown framebuffer ID %d\n",
1929			      plane_req->fb_id);
1930		ret = -ENOENT;
1931		goto out;
1932	}
1933
1934	/* Check whether this plane supports the fb pixel format. */
1935	for (i = 0; i < plane->format_count; i++)
1936		if (fb->pixel_format == plane->format_types[i])
1937			break;
1938	if (i == plane->format_count) {
1939		DRM_DEBUG_KMS("Invalid pixel format %s\n",
1940			      drm_get_format_name(fb->pixel_format));
1941		ret = -EINVAL;
1942		goto out;
1943	}
1944
1945	fb_width = fb->width << 16;
1946	fb_height = fb->height << 16;
1947
1948	/* Make sure source coordinates are inside the fb. */
1949	if (plane_req->src_w > fb_width ||
1950	    plane_req->src_x > fb_width - plane_req->src_w ||
1951	    plane_req->src_h > fb_height ||
1952	    plane_req->src_y > fb_height - plane_req->src_h) {
1953		DRM_DEBUG_KMS("Invalid source coordinates "
1954			      "%u.%06ux%u.%06u+%u.%06u+%u.%06u\n",
1955			      plane_req->src_w >> 16,
1956			      ((plane_req->src_w & 0xffff) * 15625) >> 10,
1957			      plane_req->src_h >> 16,
1958			      ((plane_req->src_h & 0xffff) * 15625) >> 10,
1959			      plane_req->src_x >> 16,
1960			      ((plane_req->src_x & 0xffff) * 15625) >> 10,
1961			      plane_req->src_y >> 16,
1962			      ((plane_req->src_y & 0xffff) * 15625) >> 10);
1963		ret = -ENOSPC;
1964		goto out;
1965	}
1966
1967	/* Give drivers some help against integer overflows */
1968	if (plane_req->crtc_w > INT_MAX ||
1969	    plane_req->crtc_x > INT_MAX - (int32_t) plane_req->crtc_w ||
1970	    plane_req->crtc_h > INT_MAX ||
1971	    plane_req->crtc_y > INT_MAX - (int32_t) plane_req->crtc_h) {
1972		DRM_DEBUG_KMS("Invalid CRTC coordinates %ux%u+%d+%d\n",
1973			      plane_req->crtc_w, plane_req->crtc_h,
1974			      plane_req->crtc_x, plane_req->crtc_y);
1975		ret = -ERANGE;
1976		goto out;
1977	}
1978
1979	drm_modeset_lock_all(dev);
1980	ret = plane->funcs->update_plane(plane, crtc, fb,
1981					 plane_req->crtc_x, plane_req->crtc_y,
1982					 plane_req->crtc_w, plane_req->crtc_h,
1983					 plane_req->src_x, plane_req->src_y,
1984					 plane_req->src_w, plane_req->src_h);
1985	if (!ret) {
1986		old_fb = plane->fb;
1987		plane->crtc = crtc;
1988		plane->fb = fb;
1989		fb = NULL;
1990	}
1991	drm_modeset_unlock_all(dev);
1992
1993out:
1994	if (fb)
1995		drm_framebuffer_unreference(fb);
1996	if (old_fb)
1997		drm_framebuffer_unreference(old_fb);
1998
1999	return ret;
2000}
2001
2002/**
2003 * drm_mode_set_config_internal - helper to call ->set_config
2004 * @set: modeset config to set
2005 *
2006 * This is a little helper to wrap internal calls to the ->set_config driver
2007 * interface. The only thing it adds is correct refcounting dance.
2008 */
2009int drm_mode_set_config_internal(struct drm_mode_set *set)
2010{
2011	struct drm_crtc *crtc = set->crtc;
2012	struct drm_framebuffer *fb;
2013	struct drm_crtc *tmp;
2014	int ret;
2015
2016	/*
2017	 * NOTE: ->set_config can also disable other crtcs (if we steal all
2018	 * connectors from it), hence we need to refcount the fbs across all
2019	 * crtcs. Atomic modeset will have saner semantics ...
2020	 */
2021	list_for_each_entry(tmp, &crtc->dev->mode_config.crtc_list, head)
2022		tmp->old_fb = tmp->fb;
2023
2024	fb = set->fb;
2025
2026	ret = crtc->funcs->set_config(set);
2027	if (ret == 0) {
2028		/* crtc->fb must be updated by ->set_config, enforces this. */
2029		WARN_ON(fb != crtc->fb);
2030	}
2031
2032	list_for_each_entry(tmp, &crtc->dev->mode_config.crtc_list, head) {
2033		if (tmp->fb)
2034			drm_framebuffer_reference(tmp->fb);
2035		if (tmp->old_fb)
2036			drm_framebuffer_unreference(tmp->old_fb);
2037	}
2038
2039	return ret;
2040}
2041EXPORT_SYMBOL(drm_mode_set_config_internal);
2042
2043/**
2044 * drm_mode_setcrtc - set CRTC configuration
2045 * @dev: drm device for the ioctl
2046 * @data: data pointer for the ioctl
2047 * @file_priv: drm file for the ioctl call
2048 *
2049 * Build a new CRTC configuration based on user request.
2050 *
2051 * Called by the user via ioctl.
2052 *
2053 * RETURNS:
2054 * Zero on success, errno on failure.
2055 */
2056int drm_mode_setcrtc(struct drm_device *dev, void *data,
2057		     struct drm_file *file_priv)
2058{
2059	struct drm_mode_config *config = &dev->mode_config;
2060	struct drm_mode_crtc *crtc_req = data;
2061	struct drm_mode_object *obj;
2062	struct drm_crtc *crtc;
2063	struct drm_connector **connector_set = NULL, *connector;
2064	struct drm_framebuffer *fb = NULL;
2065	struct drm_display_mode *mode = NULL;
2066	struct drm_mode_set set;
2067	uint32_t __user *set_connectors_ptr;
2068	int ret;
2069	int i;
2070
2071	if (!drm_core_check_feature(dev, DRIVER_MODESET))
2072		return -EINVAL;
2073
2074	/* For some reason crtc x/y offsets are signed internally. */
2075	if (crtc_req->x > INT_MAX || crtc_req->y > INT_MAX)
2076		return -ERANGE;
2077
2078	drm_modeset_lock_all(dev);
2079	obj = drm_mode_object_find(dev, crtc_req->crtc_id,
2080				   DRM_MODE_OBJECT_CRTC);
2081	if (!obj) {
2082		DRM_DEBUG_KMS("Unknown CRTC ID %d\n", crtc_req->crtc_id);
2083		ret = -EINVAL;
2084		goto out;
2085	}
2086	crtc = obj_to_crtc(obj);
2087	DRM_DEBUG_KMS("[CRTC:%d]\n", crtc->base.id);
2088
2089	if (crtc_req->mode_valid) {
2090		int hdisplay, vdisplay;
2091		/* If we have a mode we need a framebuffer. */
2092		/* If we pass -1, set the mode with the currently bound fb */
2093		if (crtc_req->fb_id == -1) {
2094			if (!crtc->fb) {
2095				DRM_DEBUG_KMS("CRTC doesn't have current FB\n");
2096				ret = -EINVAL;
2097				goto out;
2098			}
2099			fb = crtc->fb;
2100			/* Make refcounting symmetric with the lookup path. */
2101			drm_framebuffer_reference(fb);
2102		} else {
2103			fb = drm_framebuffer_lookup(dev, crtc_req->fb_id);
2104			if (!fb) {
2105				DRM_DEBUG_KMS("Unknown FB ID%d\n",
2106						crtc_req->fb_id);
2107				ret = -EINVAL;
2108				goto out;
2109			}
2110		}
2111
2112		mode = drm_mode_create(dev);
2113		if (!mode) {
2114			ret = -ENOMEM;
2115			goto out;
2116		}
2117
2118		ret = drm_crtc_convert_umode(mode, &crtc_req->mode);
2119		if (ret) {
2120			DRM_DEBUG_KMS("Invalid mode\n");
2121			goto out;
2122		}
2123
2124		drm_mode_set_crtcinfo(mode, CRTC_INTERLACE_HALVE_V);
2125
2126		hdisplay = mode->hdisplay;
2127		vdisplay = mode->vdisplay;
2128
2129		if (crtc->invert_dimensions)
2130			swap(hdisplay, vdisplay);
2131
2132		if (hdisplay > fb->width ||
2133		    vdisplay > fb->height ||
2134		    crtc_req->x > fb->width - hdisplay ||
2135		    crtc_req->y > fb->height - vdisplay) {
2136			DRM_DEBUG_KMS("Invalid fb size %ux%u for CRTC viewport %ux%u+%d+%d%s.\n",
2137				      fb->width, fb->height,
2138				      hdisplay, vdisplay, crtc_req->x, crtc_req->y,
2139				      crtc->invert_dimensions ? " (inverted)" : "");
2140			ret = -ENOSPC;
2141			goto out;
2142		}
2143	}
2144
2145	if (crtc_req->count_connectors == 0 && mode) {
2146		DRM_DEBUG_KMS("Count connectors is 0 but mode set\n");
2147		ret = -EINVAL;
2148		goto out;
2149	}
2150
2151	if (crtc_req->count_connectors > 0 && (!mode || !fb)) {
2152		DRM_DEBUG_KMS("Count connectors is %d but no mode or fb set\n",
2153			  crtc_req->count_connectors);
2154		ret = -EINVAL;
2155		goto out;
2156	}
2157
2158	if (crtc_req->count_connectors > 0) {
2159		u32 out_id;
2160
2161		/* Avoid unbounded kernel memory allocation */
2162		if (crtc_req->count_connectors > config->num_connector) {
2163			ret = -EINVAL;
2164			goto out;
2165		}
2166
2167		connector_set = kmalloc(crtc_req->count_connectors *
2168					sizeof(struct drm_connector *),
2169					GFP_KERNEL);
2170		if (!connector_set) {
2171			ret = -ENOMEM;
2172			goto out;
2173		}
2174
2175		for (i = 0; i < crtc_req->count_connectors; i++) {
2176			set_connectors_ptr = (uint32_t __user *)(unsigned long)crtc_req->set_connectors_ptr;
2177			if (get_user(out_id, &set_connectors_ptr[i])) {
2178				ret = -EFAULT;
2179				goto out;
2180			}
2181
2182			obj = drm_mode_object_find(dev, out_id,
2183						   DRM_MODE_OBJECT_CONNECTOR);
2184			if (!obj) {
2185				DRM_DEBUG_KMS("Connector id %d unknown\n",
2186						out_id);
2187				ret = -EINVAL;
2188				goto out;
2189			}
2190			connector = obj_to_connector(obj);
2191			DRM_DEBUG_KMS("[CONNECTOR:%d:%s]\n",
2192					connector->base.id,
2193					drm_get_connector_name(connector));
2194
2195			connector_set[i] = connector;
2196		}
2197	}
2198
2199	set.crtc = crtc;
2200	set.x = crtc_req->x;
2201	set.y = crtc_req->y;
2202	set.mode = mode;
2203	set.connectors = connector_set;
2204	set.num_connectors = crtc_req->count_connectors;
2205	set.fb = fb;
2206	ret = drm_mode_set_config_internal(&set);
2207
2208out:
2209	if (fb)
2210		drm_framebuffer_unreference(fb);
2211
2212	kfree(connector_set);
2213	drm_mode_destroy(dev, mode);
2214	drm_modeset_unlock_all(dev);
2215	return ret;
2216}
2217
2218static int drm_mode_cursor_common(struct drm_device *dev,
2219				  struct drm_mode_cursor2 *req,
2220				  struct drm_file *file_priv)
2221{
2222	struct drm_mode_object *obj;
2223	struct drm_crtc *crtc;
2224	int ret = 0;
2225
2226	if (!drm_core_check_feature(dev, DRIVER_MODESET))
2227		return -EINVAL;
2228
2229	if (!req->flags || (~DRM_MODE_CURSOR_FLAGS & req->flags))
2230		return -EINVAL;
2231
2232	obj = drm_mode_object_find(dev, req->crtc_id, DRM_MODE_OBJECT_CRTC);
2233	if (!obj) {
2234		DRM_DEBUG_KMS("Unknown CRTC ID %d\n", req->crtc_id);
2235		return -EINVAL;
2236	}
2237	crtc = obj_to_crtc(obj);
2238
2239	mutex_lock(&crtc->mutex);
2240	if (req->flags & DRM_MODE_CURSOR_BO) {
2241		if (!crtc->funcs->cursor_set && !crtc->funcs->cursor_set2) {
2242			ret = -ENXIO;
2243			goto out;
2244		}
2245		/* Turns off the cursor if handle is 0 */
2246		if (crtc->funcs->cursor_set2)
2247			ret = crtc->funcs->cursor_set2(crtc, file_priv, req->handle,
2248						      req->width, req->height, req->hot_x, req->hot_y);
2249		else
2250			ret = crtc->funcs->cursor_set(crtc, file_priv, req->handle,
2251						      req->width, req->height);
2252	}
2253
2254	if (req->flags & DRM_MODE_CURSOR_MOVE) {
2255		if (crtc->funcs->cursor_move) {
2256			ret = crtc->funcs->cursor_move(crtc, req->x, req->y);
2257		} else {
2258			ret = -EFAULT;
2259			goto out;
2260		}
2261	}
2262out:
2263	mutex_unlock(&crtc->mutex);
2264
2265	return ret;
2266
2267}
2268int drm_mode_cursor_ioctl(struct drm_device *dev,
2269			void *data, struct drm_file *file_priv)
2270{
2271	struct drm_mode_cursor *req = data;
2272	struct drm_mode_cursor2 new_req;
2273
2274	memcpy(&new_req, req, sizeof(struct drm_mode_cursor));
2275	new_req.hot_x = new_req.hot_y = 0;
2276
2277	return drm_mode_cursor_common(dev, &new_req, file_priv);
2278}
2279
2280int drm_mode_cursor2_ioctl(struct drm_device *dev,
2281			   void *data, struct drm_file *file_priv)
2282{
2283	struct drm_mode_cursor2 *req = data;
2284	return drm_mode_cursor_common(dev, req, file_priv);
2285}
2286
2287/* Original addfb only supported RGB formats, so figure out which one */
2288uint32_t drm_mode_legacy_fb_format(uint32_t bpp, uint32_t depth)
2289{
2290	uint32_t fmt;
2291
2292	switch (bpp) {
2293	case 8:
2294		fmt = DRM_FORMAT_C8;
2295		break;
2296	case 16:
2297		if (depth == 15)
2298			fmt = DRM_FORMAT_XRGB1555;
2299		else
2300			fmt = DRM_FORMAT_RGB565;
2301		break;
2302	case 24:
2303		fmt = DRM_FORMAT_RGB888;
2304		break;
2305	case 32:
2306		if (depth == 24)
2307			fmt = DRM_FORMAT_XRGB8888;
2308		else if (depth == 30)
2309			fmt = DRM_FORMAT_XRGB2101010;
2310		else
2311			fmt = DRM_FORMAT_ARGB8888;
2312		break;
2313	default:
2314		DRM_ERROR("bad bpp, assuming x8r8g8b8 pixel format\n");
2315		fmt = DRM_FORMAT_XRGB8888;
2316		break;
2317	}
2318
2319	return fmt;
2320}
2321EXPORT_SYMBOL(drm_mode_legacy_fb_format);
2322
2323/**
2324 * drm_mode_addfb - add an FB to the graphics configuration
2325 * @dev: drm device for the ioctl
2326 * @data: data pointer for the ioctl
2327 * @file_priv: drm file for the ioctl call
2328 *
2329 * Add a new FB to the specified CRTC, given a user request.
2330 *
2331 * Called by the user via ioctl.
2332 *
2333 * RETURNS:
2334 * Zero on success, errno on failure.
2335 */
2336int drm_mode_addfb(struct drm_device *dev,
2337		   void *data, struct drm_file *file_priv)
2338{
2339	struct drm_mode_fb_cmd *or = data;
2340	struct drm_mode_fb_cmd2 r = {};
2341	struct drm_mode_config *config = &dev->mode_config;
2342	struct drm_framebuffer *fb;
2343	int ret = 0;
2344
2345	/* Use new struct with format internally */
2346	r.fb_id = or->fb_id;
2347	r.width = or->width;
2348	r.height = or->height;
2349	r.pitches[0] = or->pitch;
2350	r.pixel_format = drm_mode_legacy_fb_format(or->bpp, or->depth);
2351	r.handles[0] = or->handle;
2352
2353	if (!drm_core_check_feature(dev, DRIVER_MODESET))
2354		return -EINVAL;
2355
2356	if ((config->min_width > r.width) || (r.width > config->max_width))
2357		return -EINVAL;
2358
2359	if ((config->min_height > r.height) || (r.height > config->max_height))
2360		return -EINVAL;
2361
2362	fb = dev->mode_config.funcs->fb_create(dev, file_priv, &r);
2363	if (IS_ERR(fb)) {
2364		DRM_DEBUG_KMS("could not create framebuffer\n");
2365		return PTR_ERR(fb);
2366	}
2367
2368	mutex_lock(&file_priv->fbs_lock);
2369	or->fb_id = fb->base.id;
2370	list_add(&fb->filp_head, &file_priv->fbs);
2371	DRM_DEBUG_KMS("[FB:%d]\n", fb->base.id);
2372	mutex_unlock(&file_priv->fbs_lock);
2373
2374	return ret;
2375}
2376
2377static int format_check(const struct drm_mode_fb_cmd2 *r)
2378{
2379	uint32_t format = r->pixel_format & ~DRM_FORMAT_BIG_ENDIAN;
2380
2381	switch (format) {
2382	case DRM_FORMAT_C8:
2383	case DRM_FORMAT_RGB332:
2384	case DRM_FORMAT_BGR233:
2385	case DRM_FORMAT_XRGB4444:
2386	case DRM_FORMAT_XBGR4444:
2387	case DRM_FORMAT_RGBX4444:
2388	case DRM_FORMAT_BGRX4444:
2389	case DRM_FORMAT_ARGB4444:
2390	case DRM_FORMAT_ABGR4444:
2391	case DRM_FORMAT_RGBA4444:
2392	case DRM_FORMAT_BGRA4444:
2393	case DRM_FORMAT_XRGB1555:
2394	case DRM_FORMAT_XBGR1555:
2395	case DRM_FORMAT_RGBX5551:
2396	case DRM_FORMAT_BGRX5551:
2397	case DRM_FORMAT_ARGB1555:
2398	case DRM_FORMAT_ABGR1555:
2399	case DRM_FORMAT_RGBA5551:
2400	case DRM_FORMAT_BGRA5551:
2401	case DRM_FORMAT_RGB565:
2402	case DRM_FORMAT_BGR565:
2403	case DRM_FORMAT_RGB888:
2404	case DRM_FORMAT_BGR888:
2405	case DRM_FORMAT_XRGB8888:
2406	case DRM_FORMAT_XBGR8888:
2407	case DRM_FORMAT_RGBX8888:
2408	case DRM_FORMAT_BGRX8888:
2409	case DRM_FORMAT_ARGB8888:
2410	case DRM_FORMAT_ABGR8888:
2411	case DRM_FORMAT_RGBA8888:
2412	case DRM_FORMAT_BGRA8888:
2413	case DRM_FORMAT_XRGB2101010:
2414	case DRM_FORMAT_XBGR2101010:
2415	case DRM_FORMAT_RGBX1010102:
2416	case DRM_FORMAT_BGRX1010102:
2417	case DRM_FORMAT_ARGB2101010:
2418	case DRM_FORMAT_ABGR2101010:
2419	case DRM_FORMAT_RGBA1010102:
2420	case DRM_FORMAT_BGRA1010102:
2421	case DRM_FORMAT_YUYV:
2422	case DRM_FORMAT_YVYU:
2423	case DRM_FORMAT_UYVY:
2424	case DRM_FORMAT_VYUY:
2425	case DRM_FORMAT_AYUV:
2426	case DRM_FORMAT_NV12:
2427	case DRM_FORMAT_NV21:
2428	case DRM_FORMAT_NV16:
2429	case DRM_FORMAT_NV61:
2430	case DRM_FORMAT_NV24:
2431	case DRM_FORMAT_NV42:
2432	case DRM_FORMAT_YUV410:
2433	case DRM_FORMAT_YVU410:
2434	case DRM_FORMAT_YUV411:
2435	case DRM_FORMAT_YVU411:
2436	case DRM_FORMAT_YUV420:
2437	case DRM_FORMAT_YVU420:
2438	case DRM_FORMAT_YUV422:
2439	case DRM_FORMAT_YVU422:
2440	case DRM_FORMAT_YUV444:
2441	case DRM_FORMAT_YVU444:
2442		return 0;
2443	default:
2444		return -EINVAL;
2445	}
2446}
2447
2448static int framebuffer_check(const struct drm_mode_fb_cmd2 *r)
2449{
2450	int ret, hsub, vsub, num_planes, i;
2451
2452	ret = format_check(r);
2453	if (ret) {
2454		DRM_DEBUG_KMS("bad framebuffer format %s\n",
2455			      drm_get_format_name(r->pixel_format));
2456		return ret;
2457	}
2458
2459	hsub = drm_format_horz_chroma_subsampling(r->pixel_format);
2460	vsub = drm_format_vert_chroma_subsampling(r->pixel_format);
2461	num_planes = drm_format_num_planes(r->pixel_format);
2462
2463	if (r->width == 0 || r->width % hsub) {
2464		DRM_DEBUG_KMS("bad framebuffer width %u\n", r->height);
2465		return -EINVAL;
2466	}
2467
2468	if (r->height == 0 || r->height % vsub) {
2469		DRM_DEBUG_KMS("bad framebuffer height %u\n", r->height);
2470		return -EINVAL;
2471	}
2472
2473	for (i = 0; i < num_planes; i++) {
2474		unsigned int width = r->width / (i != 0 ? hsub : 1);
2475		unsigned int height = r->height / (i != 0 ? vsub : 1);
2476		unsigned int cpp = drm_format_plane_cpp(r->pixel_format, i);
2477
2478		if (!r->handles[i]) {
2479			DRM_DEBUG_KMS("no buffer object handle for plane %d\n", i);
2480			return -EINVAL;
2481		}
2482
2483		if ((uint64_t) width * cpp > UINT_MAX)
2484			return -ERANGE;
2485
2486		if ((uint64_t) height * r->pitches[i] + r->offsets[i] > UINT_MAX)
2487			return -ERANGE;
2488
2489		if (r->pitches[i] < width * cpp) {
2490			DRM_DEBUG_KMS("bad pitch %u for plane %d\n", r->pitches[i], i);
2491			return -EINVAL;
2492		}
2493	}
2494
2495	return 0;
2496}
2497
2498/**
2499 * drm_mode_addfb2 - add an FB to the graphics configuration
2500 * @dev: drm device for the ioctl
2501 * @data: data pointer for the ioctl
2502 * @file_priv: drm file for the ioctl call
2503 *
2504 * Add a new FB to the specified CRTC, given a user request with format.
2505 *
2506 * Called by the user via ioctl.
2507 *
2508 * RETURNS:
2509 * Zero on success, errno on failure.
2510 */
2511int drm_mode_addfb2(struct drm_device *dev,
2512		    void *data, struct drm_file *file_priv)
2513{
2514	struct drm_mode_fb_cmd2 *r = data;
2515	struct drm_mode_config *config = &dev->mode_config;
2516	struct drm_framebuffer *fb;
2517	int ret;
2518
2519	if (!drm_core_check_feature(dev, DRIVER_MODESET))
2520		return -EINVAL;
2521
2522	if (r->flags & ~DRM_MODE_FB_INTERLACED) {
2523		DRM_DEBUG_KMS("bad framebuffer flags 0x%08x\n", r->flags);
2524		return -EINVAL;
2525	}
2526
2527	if ((config->min_width > r->width) || (r->width > config->max_width)) {
2528		DRM_DEBUG_KMS("bad framebuffer width %d, should be >= %d && <= %d\n",
2529			  r->width, config->min_width, config->max_width);
2530		return -EINVAL;
2531	}
2532	if ((config->min_height > r->height) || (r->height > config->max_height)) {
2533		DRM_DEBUG_KMS("bad framebuffer height %d, should be >= %d && <= %d\n",
2534			  r->height, config->min_height, config->max_height);
2535		return -EINVAL;
2536	}
2537
2538	ret = framebuffer_check(r);
2539	if (ret)
2540		return ret;
2541
2542	fb = dev->mode_config.funcs->fb_create(dev, file_priv, r);
2543	if (IS_ERR(fb)) {
2544		DRM_DEBUG_KMS("could not create framebuffer\n");
2545		return PTR_ERR(fb);
2546	}
2547
2548	mutex_lock(&file_priv->fbs_lock);
2549	r->fb_id = fb->base.id;
2550	list_add(&fb->filp_head, &file_priv->fbs);
2551	DRM_DEBUG_KMS("[FB:%d]\n", fb->base.id);
2552	mutex_unlock(&file_priv->fbs_lock);
2553
2554
2555	return ret;
2556}
2557
2558/**
2559 * drm_mode_rmfb - remove an FB from the configuration
2560 * @dev: drm device for the ioctl
2561 * @data: data pointer for the ioctl
2562 * @file_priv: drm file for the ioctl call
2563 *
2564 * Remove the FB specified by the user.
2565 *
2566 * Called by the user via ioctl.
2567 *
2568 * RETURNS:
2569 * Zero on success, errno on failure.
2570 */
2571int drm_mode_rmfb(struct drm_device *dev,
2572		   void *data, struct drm_file *file_priv)
2573{
2574	struct drm_framebuffer *fb = NULL;
2575	struct drm_framebuffer *fbl = NULL;
2576	uint32_t *id = data;
2577	int found = 0;
2578
2579	if (!drm_core_check_feature(dev, DRIVER_MODESET))
2580		return -EINVAL;
2581
2582	mutex_lock(&file_priv->fbs_lock);
2583	mutex_lock(&dev->mode_config.fb_lock);
2584	fb = __drm_framebuffer_lookup(dev, *id);
2585	if (!fb)
2586		goto fail_lookup;
2587
2588	list_for_each_entry(fbl, &file_priv->fbs, filp_head)
2589		if (fb == fbl)
2590			found = 1;
2591	if (!found)
2592		goto fail_lookup;
2593
2594	/* Mark fb as reaped, we still have a ref from fpriv->fbs. */
2595	__drm_framebuffer_unregister(dev, fb);
2596
2597	list_del_init(&fb->filp_head);
2598	mutex_unlock(&dev->mode_config.fb_lock);
2599	mutex_unlock(&file_priv->fbs_lock);
2600
2601	drm_framebuffer_remove(fb);
2602
2603	return 0;
2604
2605fail_lookup:
2606	mutex_unlock(&dev->mode_config.fb_lock);
2607	mutex_unlock(&file_priv->fbs_lock);
2608
2609	return -EINVAL;
2610}
2611
2612/**
2613 * drm_mode_getfb - get FB info
2614 * @dev: drm device for the ioctl
2615 * @data: data pointer for the ioctl
2616 * @file_priv: drm file for the ioctl call
2617 *
2618 * Lookup the FB given its ID and return info about it.
2619 *
2620 * Called by the user via ioctl.
2621 *
2622 * RETURNS:
2623 * Zero on success, errno on failure.
2624 */
2625int drm_mode_getfb(struct drm_device *dev,
2626		   void *data, struct drm_file *file_priv)
2627{
2628	struct drm_mode_fb_cmd *r = data;
2629	struct drm_framebuffer *fb;
2630	int ret;
2631
2632	if (!drm_core_check_feature(dev, DRIVER_MODESET))
2633		return -EINVAL;
2634
2635	fb = drm_framebuffer_lookup(dev, r->fb_id);
2636	if (!fb)
2637		return -EINVAL;
2638
2639	r->height = fb->height;
2640	r->width = fb->width;
2641	r->depth = fb->depth;
2642	r->bpp = fb->bits_per_pixel;
2643	r->pitch = fb->pitches[0];
2644	if (fb->funcs->create_handle)
2645		ret = fb->funcs->create_handle(fb, file_priv, &r->handle);
2646	else
2647		ret = -ENODEV;
2648
2649	drm_framebuffer_unreference(fb);
2650
2651	return ret;
2652}
2653
2654int drm_mode_dirtyfb_ioctl(struct drm_device *dev,
2655			   void *data, struct drm_file *file_priv)
2656{
2657	struct drm_clip_rect __user *clips_ptr;
2658	struct drm_clip_rect *clips = NULL;
2659	struct drm_mode_fb_dirty_cmd *r = data;
2660	struct drm_framebuffer *fb;
2661	unsigned flags;
2662	int num_clips;
2663	int ret;
2664
2665	if (!drm_core_check_feature(dev, DRIVER_MODESET))
2666		return -EINVAL;
2667
2668	fb = drm_framebuffer_lookup(dev, r->fb_id);
2669	if (!fb)
2670		return -EINVAL;
2671
2672	num_clips = r->num_clips;
2673	clips_ptr = (struct drm_clip_rect __user *)(unsigned long)r->clips_ptr;
2674
2675	if (!num_clips != !clips_ptr) {
2676		ret = -EINVAL;
2677		goto out_err1;
2678	}
2679
2680	flags = DRM_MODE_FB_DIRTY_FLAGS & r->flags;
2681
2682	/* If userspace annotates copy, clips must come in pairs */
2683	if (flags & DRM_MODE_FB_DIRTY_ANNOTATE_COPY && (num_clips % 2)) {
2684		ret = -EINVAL;
2685		goto out_err1;
2686	}
2687
2688	if (num_clips && clips_ptr) {
2689		if (num_clips < 0 || num_clips > DRM_MODE_FB_DIRTY_MAX_CLIPS) {
2690			ret = -EINVAL;
2691			goto out_err1;
2692		}
2693		clips = kzalloc(num_clips * sizeof(*clips), GFP_KERNEL);
2694		if (!clips) {
2695			ret = -ENOMEM;
2696			goto out_err1;
2697		}
2698
2699		ret = copy_from_user(clips, clips_ptr,
2700				     num_clips * sizeof(*clips));
2701		if (ret) {
2702			ret = -EFAULT;
2703			goto out_err2;
2704		}
2705	}
2706
2707	if (fb->funcs->dirty) {
2708		drm_modeset_lock_all(dev);
2709		ret = fb->funcs->dirty(fb, file_priv, flags, r->color,
2710				       clips, num_clips);
2711		drm_modeset_unlock_all(dev);
2712	} else {
2713		ret = -ENOSYS;
2714	}
2715
2716out_err2:
2717	kfree(clips);
2718out_err1:
2719	drm_framebuffer_unreference(fb);
2720
2721	return ret;
2722}
2723
2724
2725/**
2726 * drm_fb_release - remove and free the FBs on this file
2727 * @priv: drm file for the ioctl
2728 *
2729 * Destroy all the FBs associated with @filp.
2730 *
2731 * Called by the user via ioctl.
2732 *
2733 * RETURNS:
2734 * Zero on success, errno on failure.
2735 */
2736void drm_fb_release(struct drm_file *priv)
2737{
2738	struct drm_device *dev = priv->minor->dev;
2739	struct drm_framebuffer *fb, *tfb;
2740
2741	mutex_lock(&priv->fbs_lock);
2742	list_for_each_entry_safe(fb, tfb, &priv->fbs, filp_head) {
2743
2744		mutex_lock(&dev->mode_config.fb_lock);
2745		/* Mark fb as reaped, we still have a ref from fpriv->fbs. */
2746		__drm_framebuffer_unregister(dev, fb);
2747		mutex_unlock(&dev->mode_config.fb_lock);
2748
2749		list_del_init(&fb->filp_head);
2750
2751		/* This will also drop the fpriv->fbs reference. */
2752		drm_framebuffer_remove(fb);
2753	}
2754	mutex_unlock(&priv->fbs_lock);
2755}
2756
2757struct drm_property *drm_property_create(struct drm_device *dev, int flags,
2758					 const char *name, int num_values)
2759{
2760	struct drm_property *property = NULL;
2761	int ret;
2762
2763	property = kzalloc(sizeof(struct drm_property), GFP_KERNEL);
2764	if (!property)
2765		return NULL;
2766
2767	if (num_values) {
2768		property->values = kzalloc(sizeof(uint64_t)*num_values, GFP_KERNEL);
2769		if (!property->values)
2770			goto fail;
2771	}
2772
2773	ret = drm_mode_object_get(dev, &property->base, DRM_MODE_OBJECT_PROPERTY);
2774	if (ret)
2775		goto fail;
2776
2777	property->flags = flags;
2778	property->num_values = num_values;
2779	INIT_LIST_HEAD(&property->enum_blob_list);
2780
2781	if (name) {
2782		strncpy(property->name, name, DRM_PROP_NAME_LEN);
2783		property->name[DRM_PROP_NAME_LEN-1] = '\0';
2784	}
2785
2786	list_add_tail(&property->head, &dev->mode_config.property_list);
2787	return property;
2788fail:
2789	kfree(property->values);
2790	kfree(property);
2791	return NULL;
2792}
2793EXPORT_SYMBOL(drm_property_create);
2794
2795struct drm_property *drm_property_create_enum(struct drm_device *dev, int flags,
2796					 const char *name,
2797					 const struct drm_prop_enum_list *props,
2798					 int num_values)
2799{
2800	struct drm_property *property;
2801	int i, ret;
2802
2803	flags |= DRM_MODE_PROP_ENUM;
2804
2805	property = drm_property_create(dev, flags, name, num_values);
2806	if (!property)
2807		return NULL;
2808
2809	for (i = 0; i < num_values; i++) {
2810		ret = drm_property_add_enum(property, i,
2811				      props[i].type,
2812				      props[i].name);
2813		if (ret) {
2814			drm_property_destroy(dev, property);
2815			return NULL;
2816		}
2817	}
2818
2819	return property;
2820}
2821EXPORT_SYMBOL(drm_property_create_enum);
2822
2823struct drm_property *drm_property_create_bitmask(struct drm_device *dev,
2824					 int flags, const char *name,
2825					 const struct drm_prop_enum_list *props,
2826					 int num_values)
2827{
2828	struct drm_property *property;
2829	int i, ret;
2830
2831	flags |= DRM_MODE_PROP_BITMASK;
2832
2833	property = drm_property_create(dev, flags, name, num_values);
2834	if (!property)
2835		return NULL;
2836
2837	for (i = 0; i < num_values; i++) {
2838		ret = drm_property_add_enum(property, i,
2839				      props[i].type,
2840				      props[i].name);
2841		if (ret) {
2842			drm_property_destroy(dev, property);
2843			return NULL;
2844		}
2845	}
2846
2847	return property;
2848}
2849EXPORT_SYMBOL(drm_property_create_bitmask);
2850
2851struct drm_property *drm_property_create_range(struct drm_device *dev, int flags,
2852					 const char *name,
2853					 uint64_t min, uint64_t max)
2854{
2855	struct drm_property *property;
2856
2857	flags |= DRM_MODE_PROP_RANGE;
2858
2859	property = drm_property_create(dev, flags, name, 2);
2860	if (!property)
2861		return NULL;
2862
2863	property->values[0] = min;
2864	property->values[1] = max;
2865
2866	return property;
2867}
2868EXPORT_SYMBOL(drm_property_create_range);
2869
2870int drm_property_add_enum(struct drm_property *property, int index,
2871			  uint64_t value, const char *name)
2872{
2873	struct drm_property_enum *prop_enum;
2874
2875	if (!(property->flags & (DRM_MODE_PROP_ENUM | DRM_MODE_PROP_BITMASK)))
2876		return -EINVAL;
2877
2878	/*
2879	 * Bitmask enum properties have the additional constraint of values
2880	 * from 0 to 63
2881	 */
2882	if ((property->flags & DRM_MODE_PROP_BITMASK) && (value > 63))
2883		return -EINVAL;
2884
2885	if (!list_empty(&property->enum_blob_list)) {
2886		list_for_each_entry(prop_enum, &property->enum_blob_list, head) {
2887			if (prop_enum->value == value) {
2888				strncpy(prop_enum->name, name, DRM_PROP_NAME_LEN);
2889				prop_enum->name[DRM_PROP_NAME_LEN-1] = '\0';
2890				return 0;
2891			}
2892		}
2893	}
2894
2895	prop_enum = kzalloc(sizeof(struct drm_property_enum), GFP_KERNEL);
2896	if (!prop_enum)
2897		return -ENOMEM;
2898
2899	strncpy(prop_enum->name, name, DRM_PROP_NAME_LEN);
2900	prop_enum->name[DRM_PROP_NAME_LEN-1] = '\0';
2901	prop_enum->value = value;
2902
2903	property->values[index] = value;
2904	list_add_tail(&prop_enum->head, &property->enum_blob_list);
2905	return 0;
2906}
2907EXPORT_SYMBOL(drm_property_add_enum);
2908
2909void drm_property_destroy(struct drm_device *dev, struct drm_property *property)
2910{
2911	struct drm_property_enum *prop_enum, *pt;
2912
2913	list_for_each_entry_safe(prop_enum, pt, &property->enum_blob_list, head) {
2914		list_del(&prop_enum->head);
2915		kfree(prop_enum);
2916	}
2917
2918	if (property->num_values)
2919		kfree(property->values);
2920	drm_mode_object_put(dev, &property->base);
2921	list_del(&property->head);
2922	kfree(property);
2923}
2924EXPORT_SYMBOL(drm_property_destroy);
2925
2926void drm_object_attach_property(struct drm_mode_object *obj,
2927				struct drm_property *property,
2928				uint64_t init_val)
2929{
2930	int count = obj->properties->count;
2931
2932	if (count == DRM_OBJECT_MAX_PROPERTY) {
2933		WARN(1, "Failed to attach object property (type: 0x%x). Please "
2934			"increase DRM_OBJECT_MAX_PROPERTY by 1 for each time "
2935			"you see this message on the same object type.\n",
2936			obj->type);
2937		return;
2938	}
2939
2940	obj->properties->ids[count] = property->base.id;
2941	obj->properties->values[count] = init_val;
2942	obj->properties->count++;
2943}
2944EXPORT_SYMBOL(drm_object_attach_property);
2945
2946int drm_object_property_set_value(struct drm_mode_object *obj,
2947				  struct drm_property *property, uint64_t val)
2948{
2949	int i;
2950
2951	for (i = 0; i < obj->properties->count; i++) {
2952		if (obj->properties->ids[i] == property->base.id) {
2953			obj->properties->values[i] = val;
2954			return 0;
2955		}
2956	}
2957
2958	return -EINVAL;
2959}
2960EXPORT_SYMBOL(drm_object_property_set_value);
2961
2962int drm_object_property_get_value(struct drm_mode_object *obj,
2963				  struct drm_property *property, uint64_t *val)
2964{
2965	int i;
2966
2967	for (i = 0; i < obj->properties->count; i++) {
2968		if (obj->properties->ids[i] == property->base.id) {
2969			*val = obj->properties->values[i];
2970			return 0;
2971		}
2972	}
2973
2974	return -EINVAL;
2975}
2976EXPORT_SYMBOL(drm_object_property_get_value);
2977
2978int drm_mode_getproperty_ioctl(struct drm_device *dev,
2979			       void *data, struct drm_file *file_priv)
2980{
2981	struct drm_mode_object *obj;
2982	struct drm_mode_get_property *out_resp = data;
2983	struct drm_property *property;
2984	int enum_count = 0;
2985	int blob_count = 0;
2986	int value_count = 0;
2987	int ret = 0, i;
2988	int copied;
2989	struct drm_property_enum *prop_enum;
2990	struct drm_mode_property_enum __user *enum_ptr;
2991	struct drm_property_blob *prop_blob;
2992	uint32_t __user *blob_id_ptr;
2993	uint64_t __user *values_ptr;
2994	uint32_t __user *blob_length_ptr;
2995
2996	if (!drm_core_check_feature(dev, DRIVER_MODESET))
2997		return -EINVAL;
2998
2999	drm_modeset_lock_all(dev);
3000	obj = drm_mode_object_find(dev, out_resp->prop_id, DRM_MODE_OBJECT_PROPERTY);
3001	if (!obj) {
3002		ret = -EINVAL;
3003		goto done;
3004	}
3005	property = obj_to_property(obj);
3006
3007	if (property->flags & (DRM_MODE_PROP_ENUM | DRM_MODE_PROP_BITMASK)) {
3008		list_for_each_entry(prop_enum, &property->enum_blob_list, head)
3009			enum_count++;
3010	} else if (property->flags & DRM_MODE_PROP_BLOB) {
3011		list_for_each_entry(prop_blob, &property->enum_blob_list, head)
3012			blob_count++;
3013	}
3014
3015	value_count = property->num_values;
3016
3017	strncpy(out_resp->name, property->name, DRM_PROP_NAME_LEN);
3018	out_resp->name[DRM_PROP_NAME_LEN-1] = 0;
3019	out_resp->flags = property->flags;
3020
3021	if ((out_resp->count_values >= value_count) && value_count) {
3022		values_ptr = (uint64_t __user *)(unsigned long)out_resp->values_ptr;
3023		for (i = 0; i < value_count; i++) {
3024			if (copy_to_user(values_ptr + i, &property->values[i], sizeof(uint64_t))) {
3025				ret = -EFAULT;
3026				goto done;
3027			}
3028		}
3029	}
3030	out_resp->count_values = value_count;
3031
3032	if (property->flags & (DRM_MODE_PROP_ENUM | DRM_MODE_PROP_BITMASK)) {
3033		if ((out_resp->count_enum_blobs >= enum_count) && enum_count) {
3034			copied = 0;
3035			enum_ptr = (struct drm_mode_property_enum __user *)(unsigned long)out_resp->enum_blob_ptr;
3036			list_for_each_entry(prop_enum, &property->enum_blob_list, head) {
3037
3038				if (copy_to_user(&enum_ptr[copied].value, &prop_enum->value, sizeof(uint64_t))) {
3039					ret = -EFAULT;
3040					goto done;
3041				}
3042
3043				if (copy_to_user(&enum_ptr[copied].name,
3044						 &prop_enum->name, DRM_PROP_NAME_LEN)) {
3045					ret = -EFAULT;
3046					goto done;
3047				}
3048				copied++;
3049			}
3050		}
3051		out_resp->count_enum_blobs = enum_count;
3052	}
3053
3054	if (property->flags & DRM_MODE_PROP_BLOB) {
3055		if ((out_resp->count_enum_blobs >= blob_count) && blob_count) {
3056			copied = 0;
3057			blob_id_ptr = (uint32_t __user *)(unsigned long)out_resp->enum_blob_ptr;
3058			blob_length_ptr = (uint32_t __user *)(unsigned long)out_resp->values_ptr;
3059
3060			list_for_each_entry(prop_blob, &property->enum_blob_list, head) {
3061				if (put_user(prop_blob->base.id, blob_id_ptr + copied)) {
3062					ret = -EFAULT;
3063					goto done;
3064				}
3065
3066				if (put_user(prop_blob->length, blob_length_ptr + copied)) {
3067					ret = -EFAULT;
3068					goto done;
3069				}
3070
3071				copied++;
3072			}
3073		}
3074		out_resp->count_enum_blobs = blob_count;
3075	}
3076done:
3077	drm_modeset_unlock_all(dev);
3078	return ret;
3079}
3080
3081static struct drm_property_blob *drm_property_create_blob(struct drm_device *dev, int length,
3082							  void *data)
3083{
3084	struct drm_property_blob *blob;
3085	int ret;
3086
3087	if (!length || !data)
3088		return NULL;
3089
3090	blob = kzalloc(sizeof(struct drm_property_blob)+length, GFP_KERNEL);
3091	if (!blob)
3092		return NULL;
3093
3094	ret = drm_mode_object_get(dev, &blob->base, DRM_MODE_OBJECT_BLOB);
3095	if (ret) {
3096		kfree(blob);
3097		return NULL;
3098	}
3099
3100	blob->length = length;
3101
3102	memcpy(blob->data, data, length);
3103
3104	list_add_tail(&blob->head, &dev->mode_config.property_blob_list);
3105	return blob;
3106}
3107
3108static void drm_property_destroy_blob(struct drm_device *dev,
3109			       struct drm_property_blob *blob)
3110{
3111	drm_mode_object_put(dev, &blob->base);
3112	list_del(&blob->head);
3113	kfree(blob);
3114}
3115
3116int drm_mode_getblob_ioctl(struct drm_device *dev,
3117			   void *data, struct drm_file *file_priv)
3118{
3119	struct drm_mode_object *obj;
3120	struct drm_mode_get_blob *out_resp = data;
3121	struct drm_property_blob *blob;
3122	int ret = 0;
3123	void __user *blob_ptr;
3124
3125	if (!drm_core_check_feature(dev, DRIVER_MODESET))
3126		return -EINVAL;
3127
3128	drm_modeset_lock_all(dev);
3129	obj = drm_mode_object_find(dev, out_resp->blob_id, DRM_MODE_OBJECT_BLOB);
3130	if (!obj) {
3131		ret = -EINVAL;
3132		goto done;
3133	}
3134	blob = obj_to_blob(obj);
3135
3136	if (out_resp->length == blob->length) {
3137		blob_ptr = (void __user *)(unsigned long)out_resp->data;
3138		if (copy_to_user(blob_ptr, blob->data, blob->length)){
3139			ret = -EFAULT;
3140			goto done;
3141		}
3142	}
3143	out_resp->length = blob->length;
3144
3145done:
3146	drm_modeset_unlock_all(dev);
3147	return ret;
3148}
3149
3150int drm_mode_connector_update_edid_property(struct drm_connector *connector,
3151					    struct edid *edid)
3152{
3153	struct drm_device *dev = connector->dev;
3154	int ret, size;
3155
3156	if (connector->edid_blob_ptr)
3157		drm_property_destroy_blob(dev, connector->edid_blob_ptr);
3158
3159	/* Delete edid, when there is none. */
3160	if (!edid) {
3161		connector->edid_blob_ptr = NULL;
3162		ret = drm_object_property_set_value(&connector->base, dev->mode_config.edid_property, 0);
3163		return ret;
3164	}
3165
3166	size = EDID_LENGTH * (1 + edid->extensions);
3167	connector->edid_blob_ptr = drm_property_create_blob(connector->dev,
3168							    size, edid);
3169	if (!connector->edid_blob_ptr)
3170		return -EINVAL;
3171
3172	ret = drm_object_property_set_value(&connector->base,
3173					       dev->mode_config.edid_property,
3174					       connector->edid_blob_ptr->base.id);
3175
3176	return ret;
3177}
3178EXPORT_SYMBOL(drm_mode_connector_update_edid_property);
3179
3180static bool drm_property_change_is_valid(struct drm_property *property,
3181					 uint64_t value)
3182{
3183	if (property->flags & DRM_MODE_PROP_IMMUTABLE)
3184		return false;
3185	if (property->flags & DRM_MODE_PROP_RANGE) {
3186		if (value < property->values[0] || value > property->values[1])
3187			return false;
3188		return true;
3189	} else if (property->flags & DRM_MODE_PROP_BITMASK) {
3190		int i;
3191		uint64_t valid_mask = 0;
3192		for (i = 0; i < property->num_values; i++)
3193			valid_mask |= (1ULL << property->values[i]);
3194		return !(value & ~valid_mask);
3195	} else if (property->flags & DRM_MODE_PROP_BLOB) {
3196		/* Only the driver knows */
3197		return true;
3198	} else {
3199		int i;
3200		for (i = 0; i < property->num_values; i++)
3201			if (property->values[i] == value)
3202				return true;
3203		return false;
3204	}
3205}
3206
3207int drm_mode_connector_property_set_ioctl(struct drm_device *dev,
3208				       void *data, struct drm_file *file_priv)
3209{
3210	struct drm_mode_connector_set_property *conn_set_prop = data;
3211	struct drm_mode_obj_set_property obj_set_prop = {
3212		.value = conn_set_prop->value,
3213		.prop_id = conn_set_prop->prop_id,
3214		.obj_id = conn_set_prop->connector_id,
3215		.obj_type = DRM_MODE_OBJECT_CONNECTOR
3216	};
3217
3218	/* It does all the locking and checking we need */
3219	return drm_mode_obj_set_property_ioctl(dev, &obj_set_prop, file_priv);
3220}
3221
3222static int drm_mode_connector_set_obj_prop(struct drm_mode_object *obj,
3223					   struct drm_property *property,
3224					   uint64_t value)
3225{
3226	int ret = -EINVAL;
3227	struct drm_connector *connector = obj_to_connector(obj);
3228
3229	/* Do DPMS ourselves */
3230	if (property == connector->dev->mode_config.dpms_property) {
3231		if (connector->funcs->dpms)
3232			(*connector->funcs->dpms)(connector, (int)value);
3233		ret = 0;
3234	} else if (connector->funcs->set_property)
3235		ret = connector->funcs->set_property(connector, property, value);
3236
3237	/* store the property value if successful */
3238	if (!ret)
3239		drm_object_property_set_value(&connector->base, property, value);
3240	return ret;
3241}
3242
3243static int drm_mode_crtc_set_obj_prop(struct drm_mode_object *obj,
3244				      struct drm_property *property,
3245				      uint64_t value)
3246{
3247	int ret = -EINVAL;
3248	struct drm_crtc *crtc = obj_to_crtc(obj);
3249
3250	if (crtc->funcs->set_property)
3251		ret = crtc->funcs->set_property(crtc, property, value);
3252	if (!ret)
3253		drm_object_property_set_value(obj, property, value);
3254
3255	return ret;
3256}
3257
3258static int drm_mode_plane_set_obj_prop(struct drm_mode_object *obj,
3259				      struct drm_property *property,
3260				      uint64_t value)
3261{
3262	int ret = -EINVAL;
3263	struct drm_plane *plane = obj_to_plane(obj);
3264
3265	if (plane->funcs->set_property)
3266		ret = plane->funcs->set_property(plane, property, value);
3267	if (!ret)
3268		drm_object_property_set_value(obj, property, value);
3269
3270	return ret;
3271}
3272
3273int drm_mode_obj_get_properties_ioctl(struct drm_device *dev, void *data,
3274				      struct drm_file *file_priv)
3275{
3276	struct drm_mode_obj_get_properties *arg = data;
3277	struct drm_mode_object *obj;
3278	int ret = 0;
3279	int i;
3280	int copied = 0;
3281	int props_count = 0;
3282	uint32_t __user *props_ptr;
3283	uint64_t __user *prop_values_ptr;
3284
3285	if (!drm_core_check_feature(dev, DRIVER_MODESET))
3286		return -EINVAL;
3287
3288	drm_modeset_lock_all(dev);
3289
3290	obj = drm_mode_object_find(dev, arg->obj_id, arg->obj_type);
3291	if (!obj) {
3292		ret = -EINVAL;
3293		goto out;
3294	}
3295	if (!obj->properties) {
3296		ret = -EINVAL;
3297		goto out;
3298	}
3299
3300	props_count = obj->properties->count;
3301
3302	/* This ioctl is called twice, once to determine how much space is
3303	 * needed, and the 2nd time to fill it. */
3304	if ((arg->count_props >= props_count) && props_count) {
3305		copied = 0;
3306		props_ptr = (uint32_t __user *)(unsigned long)(arg->props_ptr);
3307		prop_values_ptr = (uint64_t __user *)(unsigned long)
3308				  (arg->prop_values_ptr);
3309		for (i = 0; i < props_count; i++) {
3310			if (put_user(obj->properties->ids[i],
3311				     props_ptr + copied)) {
3312				ret = -EFAULT;
3313				goto out;
3314			}
3315			if (put_user(obj->properties->values[i],
3316				     prop_values_ptr + copied)) {
3317				ret = -EFAULT;
3318				goto out;
3319			}
3320			copied++;
3321		}
3322	}
3323	arg->count_props = props_count;
3324out:
3325	drm_modeset_unlock_all(dev);
3326	return ret;
3327}
3328
3329int drm_mode_obj_set_property_ioctl(struct drm_device *dev, void *data,
3330				    struct drm_file *file_priv)
3331{
3332	struct drm_mode_obj_set_property *arg = data;
3333	struct drm_mode_object *arg_obj;
3334	struct drm_mode_object *prop_obj;
3335	struct drm_property *property;
3336	int ret = -EINVAL;
3337	int i;
3338
3339	if (!drm_core_check_feature(dev, DRIVER_MODESET))
3340		return -EINVAL;
3341
3342	drm_modeset_lock_all(dev);
3343
3344	arg_obj = drm_mode_object_find(dev, arg->obj_id, arg->obj_type);
3345	if (!arg_obj)
3346		goto out;
3347	if (!arg_obj->properties)
3348		goto out;
3349
3350	for (i = 0; i < arg_obj->properties->count; i++)
3351		if (arg_obj->properties->ids[i] == arg->prop_id)
3352			break;
3353
3354	if (i == arg_obj->properties->count)
3355		goto out;
3356
3357	prop_obj = drm_mode_object_find(dev, arg->prop_id,
3358					DRM_MODE_OBJECT_PROPERTY);
3359	if (!prop_obj)
3360		goto out;
3361	property = obj_to_property(prop_obj);
3362
3363	if (!drm_property_change_is_valid(property, arg->value))
3364		goto out;
3365
3366	switch (arg_obj->type) {
3367	case DRM_MODE_OBJECT_CONNECTOR:
3368		ret = drm_mode_connector_set_obj_prop(arg_obj, property,
3369						      arg->value);
3370		break;
3371	case DRM_MODE_OBJECT_CRTC:
3372		ret = drm_mode_crtc_set_obj_prop(arg_obj, property, arg->value);
3373		break;
3374	case DRM_MODE_OBJECT_PLANE:
3375		ret = drm_mode_plane_set_obj_prop(arg_obj, property, arg->value);
3376		break;
3377	}
3378
3379out:
3380	drm_modeset_unlock_all(dev);
3381	return ret;
3382}
3383
3384int drm_mode_connector_attach_encoder(struct drm_connector *connector,
3385				      struct drm_encoder *encoder)
3386{
3387	int i;
3388
3389	for (i = 0; i < DRM_CONNECTOR_MAX_ENCODER; i++) {
3390		if (connector->encoder_ids[i] == 0) {
3391			connector->encoder_ids[i] = encoder->base.id;
3392			return 0;
3393		}
3394	}
3395	return -ENOMEM;
3396}
3397EXPORT_SYMBOL(drm_mode_connector_attach_encoder);
3398
3399void drm_mode_connector_detach_encoder(struct drm_connector *connector,
3400				    struct drm_encoder *encoder)
3401{
3402	int i;
3403	for (i = 0; i < DRM_CONNECTOR_MAX_ENCODER; i++) {
3404		if (connector->encoder_ids[i] == encoder->base.id) {
3405			connector->encoder_ids[i] = 0;
3406			if (connector->encoder == encoder)
3407				connector->encoder = NULL;
3408			break;
3409		}
3410	}
3411}
3412EXPORT_SYMBOL(drm_mode_connector_detach_encoder);
3413
3414int drm_mode_crtc_set_gamma_size(struct drm_crtc *crtc,
3415				  int gamma_size)
3416{
3417	crtc->gamma_size = gamma_size;
3418
3419	crtc->gamma_store = kzalloc(gamma_size * sizeof(uint16_t) * 3, GFP_KERNEL);
3420	if (!crtc->gamma_store) {
3421		crtc->gamma_size = 0;
3422		return -ENOMEM;
3423	}
3424
3425	return 0;
3426}
3427EXPORT_SYMBOL(drm_mode_crtc_set_gamma_size);
3428
3429int drm_mode_gamma_set_ioctl(struct drm_device *dev,
3430			     void *data, struct drm_file *file_priv)
3431{
3432	struct drm_mode_crtc_lut *crtc_lut = data;
3433	struct drm_mode_object *obj;
3434	struct drm_crtc *crtc;
3435	void *r_base, *g_base, *b_base;
3436	int size;
3437	int ret = 0;
3438
3439	if (!drm_core_check_feature(dev, DRIVER_MODESET))
3440		return -EINVAL;
3441
3442	drm_modeset_lock_all(dev);
3443	obj = drm_mode_object_find(dev, crtc_lut->crtc_id, DRM_MODE_OBJECT_CRTC);
3444	if (!obj) {
3445		ret = -EINVAL;
3446		goto out;
3447	}
3448	crtc = obj_to_crtc(obj);
3449
3450	if (crtc->funcs->gamma_set == NULL) {
3451		ret = -ENOSYS;
3452		goto out;
3453	}
3454
3455	/* memcpy into gamma store */
3456	if (crtc_lut->gamma_size != crtc->gamma_size) {
3457		ret = -EINVAL;
3458		goto out;
3459	}
3460
3461	size = crtc_lut->gamma_size * (sizeof(uint16_t));
3462	r_base = crtc->gamma_store;
3463	if (copy_from_user(r_base, (void __user *)(unsigned long)crtc_lut->red, size)) {
3464		ret = -EFAULT;
3465		goto out;
3466	}
3467
3468	g_base = r_base + size;
3469	if (copy_from_user(g_base, (void __user *)(unsigned long)crtc_lut->green, size)) {
3470		ret = -EFAULT;
3471		goto out;
3472	}
3473
3474	b_base = g_base + size;
3475	if (copy_from_user(b_base, (void __user *)(unsigned long)crtc_lut->blue, size)) {
3476		ret = -EFAULT;
3477		goto out;
3478	}
3479
3480	crtc->funcs->gamma_set(crtc, r_base, g_base, b_base, 0, crtc->gamma_size);
3481
3482out:
3483	drm_modeset_unlock_all(dev);
3484	return ret;
3485
3486}
3487
3488int drm_mode_gamma_get_ioctl(struct drm_device *dev,
3489			     void *data, struct drm_file *file_priv)
3490{
3491	struct drm_mode_crtc_lut *crtc_lut = data;
3492	struct drm_mode_object *obj;
3493	struct drm_crtc *crtc;
3494	void *r_base, *g_base, *b_base;
3495	int size;
3496	int ret = 0;
3497
3498	if (!drm_core_check_feature(dev, DRIVER_MODESET))
3499		return -EINVAL;
3500
3501	drm_modeset_lock_all(dev);
3502	obj = drm_mode_object_find(dev, crtc_lut->crtc_id, DRM_MODE_OBJECT_CRTC);
3503	if (!obj) {
3504		ret = -EINVAL;
3505		goto out;
3506	}
3507	crtc = obj_to_crtc(obj);
3508
3509	/* memcpy into gamma store */
3510	if (crtc_lut->gamma_size != crtc->gamma_size) {
3511		ret = -EINVAL;
3512		goto out;
3513	}
3514
3515	size = crtc_lut->gamma_size * (sizeof(uint16_t));
3516	r_base = crtc->gamma_store;
3517	if (copy_to_user((void __user *)(unsigned long)crtc_lut->red, r_base, size)) {
3518		ret = -EFAULT;
3519		goto out;
3520	}
3521
3522	g_base = r_base + size;
3523	if (copy_to_user((void __user *)(unsigned long)crtc_lut->green, g_base, size)) {
3524		ret = -EFAULT;
3525		goto out;
3526	}
3527
3528	b_base = g_base + size;
3529	if (copy_to_user((void __user *)(unsigned long)crtc_lut->blue, b_base, size)) {
3530		ret = -EFAULT;
3531		goto out;
3532	}
3533out:
3534	drm_modeset_unlock_all(dev);
3535	return ret;
3536}
3537
3538int drm_mode_page_flip_ioctl(struct drm_device *dev,
3539			     void *data, struct drm_file *file_priv)
3540{
3541	struct drm_mode_crtc_page_flip *page_flip = data;
3542	struct drm_mode_object *obj;
3543	struct drm_crtc *crtc;
3544	struct drm_framebuffer *fb = NULL, *old_fb = NULL;
3545	struct drm_pending_vblank_event *e = NULL;
3546	unsigned long flags;
3547	int hdisplay, vdisplay;
3548	int ret = -EINVAL;
3549
3550	if (page_flip->flags & ~DRM_MODE_PAGE_FLIP_FLAGS ||
3551	    page_flip->reserved != 0)
3552		return -EINVAL;
3553
3554	if ((page_flip->flags & DRM_MODE_PAGE_FLIP_ASYNC) && !dev->mode_config.async_page_flip)
3555		return -EINVAL;
3556
3557	obj = drm_mode_object_find(dev, page_flip->crtc_id, DRM_MODE_OBJECT_CRTC);
3558	if (!obj)
3559		return -EINVAL;
3560	crtc = obj_to_crtc(obj);
3561
3562	mutex_lock(&crtc->mutex);
3563	if (crtc->fb == NULL) {
3564		/* The framebuffer is currently unbound, presumably
3565		 * due to a hotplug event, that userspace has not
3566		 * yet discovered.
3567		 */
3568		ret = -EBUSY;
3569		goto out;
3570	}
3571
3572	if (crtc->funcs->page_flip == NULL)
3573		goto out;
3574
3575	fb = drm_framebuffer_lookup(dev, page_flip->fb_id);
3576	if (!fb)
3577		goto out;
3578
3579	hdisplay = crtc->mode.hdisplay;
3580	vdisplay = crtc->mode.vdisplay;
3581
3582	if (crtc->invert_dimensions)
3583		swap(hdisplay, vdisplay);
3584
3585	if (hdisplay > fb->width ||
3586	    vdisplay > fb->height ||
3587	    crtc->x > fb->width - hdisplay ||
3588	    crtc->y > fb->height - vdisplay) {
3589		DRM_DEBUG_KMS("Invalid fb size %ux%u for CRTC viewport %ux%u+%d+%d%s.\n",
3590			      fb->width, fb->height, hdisplay, vdisplay, crtc->x, crtc->y,
3591			      crtc->invert_dimensions ? " (inverted)" : "");
3592		ret = -ENOSPC;
3593		goto out;
3594	}
3595
3596	if (crtc->fb->pixel_format != fb->pixel_format) {
3597		DRM_DEBUG_KMS("Page flip is not allowed to change frame buffer format.\n");
3598		ret = -EINVAL;
3599		goto out;
3600	}
3601
3602	if (page_flip->flags & DRM_MODE_PAGE_FLIP_EVENT) {
3603		ret = -ENOMEM;
3604		spin_lock_irqsave(&dev->event_lock, flags);
3605		if (file_priv->event_space < sizeof e->event) {
3606			spin_unlock_irqrestore(&dev->event_lock, flags);
3607			goto out;
3608		}
3609		file_priv->event_space -= sizeof e->event;
3610		spin_unlock_irqrestore(&dev->event_lock, flags);
3611
3612		e = kzalloc(sizeof *e, GFP_KERNEL);
3613		if (e == NULL) {
3614			spin_lock_irqsave(&dev->event_lock, flags);
3615			file_priv->event_space += sizeof e->event;
3616			spin_unlock_irqrestore(&dev->event_lock, flags);
3617			goto out;
3618		}
3619
3620		e->event.base.type = DRM_EVENT_FLIP_COMPLETE;
3621		e->event.base.length = sizeof e->event;
3622		e->event.user_data = page_flip->user_data;
3623		e->base.event = &e->event.base;
3624		e->base.file_priv = file_priv;
3625		e->base.destroy =
3626			(void (*) (struct drm_pending_event *)) kfree;
3627	}
3628
3629	old_fb = crtc->fb;
3630	ret = crtc->funcs->page_flip(crtc, fb, e, page_flip->flags);
3631	if (ret) {
3632		if (page_flip->flags & DRM_MODE_PAGE_FLIP_EVENT) {
3633			spin_lock_irqsave(&dev->event_lock, flags);
3634			file_priv->event_space += sizeof e->event;
3635			spin_unlock_irqrestore(&dev->event_lock, flags);
3636			kfree(e);
3637		}
3638		/* Keep the old fb, don't unref it. */
3639		old_fb = NULL;
3640	} else {
3641		/*
3642		 * Warn if the driver hasn't properly updated the crtc->fb
3643		 * field to reflect that the new framebuffer is now used.
3644		 * Failing to do so will screw with the reference counting
3645		 * on framebuffers.
3646		 */
3647		WARN_ON(crtc->fb != fb);
3648		/* Unref only the old framebuffer. */
3649		fb = NULL;
3650	}
3651
3652out:
3653	if (fb)
3654		drm_framebuffer_unreference(fb);
3655	if (old_fb)
3656		drm_framebuffer_unreference(old_fb);
3657	mutex_unlock(&crtc->mutex);
3658
3659	return ret;
3660}
3661
3662void drm_mode_config_reset(struct drm_device *dev)
3663{
3664	struct drm_crtc *crtc;
3665	struct drm_encoder *encoder;
3666	struct drm_connector *connector;
3667
3668	list_for_each_entry(crtc, &dev->mode_config.crtc_list, head)
3669		if (crtc->funcs->reset)
3670			crtc->funcs->reset(crtc);
3671
3672	list_for_each_entry(encoder, &dev->mode_config.encoder_list, head)
3673		if (encoder->funcs->reset)
3674			encoder->funcs->reset(encoder);
3675
3676	list_for_each_entry(connector, &dev->mode_config.connector_list, head) {
3677		connector->status = connector_status_unknown;
3678
3679		if (connector->funcs->reset)
3680			connector->funcs->reset(connector);
3681	}
3682}
3683EXPORT_SYMBOL(drm_mode_config_reset);
3684
3685int drm_mode_create_dumb_ioctl(struct drm_device *dev,
3686			       void *data, struct drm_file *file_priv)
3687{
3688	struct drm_mode_create_dumb *args = data;
3689
3690	if (!dev->driver->dumb_create)
3691		return -ENOSYS;
3692	return dev->driver->dumb_create(file_priv, dev, args);
3693}
3694
3695int drm_mode_mmap_dumb_ioctl(struct drm_device *dev,
3696			     void *data, struct drm_file *file_priv)
3697{
3698	struct drm_mode_map_dumb *args = data;
3699
3700	/* call driver ioctl to get mmap offset */
3701	if (!dev->driver->dumb_map_offset)
3702		return -ENOSYS;
3703
3704	return dev->driver->dumb_map_offset(file_priv, dev, args->handle, &args->offset);
3705}
3706
3707int drm_mode_destroy_dumb_ioctl(struct drm_device *dev,
3708				void *data, struct drm_file *file_priv)
3709{
3710	struct drm_mode_destroy_dumb *args = data;
3711
3712	if (!dev->driver->dumb_destroy)
3713		return -ENOSYS;
3714
3715	return dev->driver->dumb_destroy(file_priv, dev, args->handle);
3716}
3717
3718/*
3719 * Just need to support RGB formats here for compat with code that doesn't
3720 * use pixel formats directly yet.
3721 */
3722void drm_fb_get_bpp_depth(uint32_t format, unsigned int *depth,
3723			  int *bpp)
3724{
3725	switch (format) {
3726	case DRM_FORMAT_C8:
3727	case DRM_FORMAT_RGB332:
3728	case DRM_FORMAT_BGR233:
3729		*depth = 8;
3730		*bpp = 8;
3731		break;
3732	case DRM_FORMAT_XRGB1555:
3733	case DRM_FORMAT_XBGR1555:
3734	case DRM_FORMAT_RGBX5551:
3735	case DRM_FORMAT_BGRX5551:
3736	case DRM_FORMAT_ARGB1555:
3737	case DRM_FORMAT_ABGR1555:
3738	case DRM_FORMAT_RGBA5551:
3739	case DRM_FORMAT_BGRA5551:
3740		*depth = 15;
3741		*bpp = 16;
3742		break;
3743	case DRM_FORMAT_RGB565:
3744	case DRM_FORMAT_BGR565:
3745		*depth = 16;
3746		*bpp = 16;
3747		break;
3748	case DRM_FORMAT_RGB888:
3749	case DRM_FORMAT_BGR888:
3750		*depth = 24;
3751		*bpp = 24;
3752		break;
3753	case DRM_FORMAT_XRGB8888:
3754	case DRM_FORMAT_XBGR8888:
3755	case DRM_FORMAT_RGBX8888:
3756	case DRM_FORMAT_BGRX8888:
3757		*depth = 24;
3758		*bpp = 32;
3759		break;
3760	case DRM_FORMAT_XRGB2101010:
3761	case DRM_FORMAT_XBGR2101010:
3762	case DRM_FORMAT_RGBX1010102:
3763	case DRM_FORMAT_BGRX1010102:
3764	case DRM_FORMAT_ARGB2101010:
3765	case DRM_FORMAT_ABGR2101010:
3766	case DRM_FORMAT_RGBA1010102:
3767	case DRM_FORMAT_BGRA1010102:
3768		*depth = 30;
3769		*bpp = 32;
3770		break;
3771	case DRM_FORMAT_ARGB8888:
3772	case DRM_FORMAT_ABGR8888:
3773	case DRM_FORMAT_RGBA8888:
3774	case DRM_FORMAT_BGRA8888:
3775		*depth = 32;
3776		*bpp = 32;
3777		break;
3778	default:
3779		DRM_DEBUG_KMS("unsupported pixel format\n");
3780		*depth = 0;
3781		*bpp = 0;
3782		break;
3783	}
3784}
3785EXPORT_SYMBOL(drm_fb_get_bpp_depth);
3786
3787/**
3788 * drm_format_num_planes - get the number of planes for format
3789 * @format: pixel format (DRM_FORMAT_*)
3790 *
3791 * RETURNS:
3792 * The number of planes used by the specified pixel format.
3793 */
3794int drm_format_num_planes(uint32_t format)
3795{
3796	switch (format) {
3797	case DRM_FORMAT_YUV410:
3798	case DRM_FORMAT_YVU410:
3799	case DRM_FORMAT_YUV411:
3800	case DRM_FORMAT_YVU411:
3801	case DRM_FORMAT_YUV420:
3802	case DRM_FORMAT_YVU420:
3803	case DRM_FORMAT_YUV422:
3804	case DRM_FORMAT_YVU422:
3805	case DRM_FORMAT_YUV444:
3806	case DRM_FORMAT_YVU444:
3807		return 3;
3808	case DRM_FORMAT_NV12:
3809	case DRM_FORMAT_NV21:
3810	case DRM_FORMAT_NV16:
3811	case DRM_FORMAT_NV61:
3812	case DRM_FORMAT_NV24:
3813	case DRM_FORMAT_NV42:
3814		return 2;
3815	default:
3816		return 1;
3817	}
3818}
3819EXPORT_SYMBOL(drm_format_num_planes);
3820
3821/**
3822 * drm_format_plane_cpp - determine the bytes per pixel value
3823 * @format: pixel format (DRM_FORMAT_*)
3824 * @plane: plane index
3825 *
3826 * RETURNS:
3827 * The bytes per pixel value for the specified plane.
3828 */
3829int drm_format_plane_cpp(uint32_t format, int plane)
3830{
3831	unsigned int depth;
3832	int bpp;
3833
3834	if (plane >= drm_format_num_planes(format))
3835		return 0;
3836
3837	switch (format) {
3838	case DRM_FORMAT_YUYV:
3839	case DRM_FORMAT_YVYU:
3840	case DRM_FORMAT_UYVY:
3841	case DRM_FORMAT_VYUY:
3842		return 2;
3843	case DRM_FORMAT_NV12:
3844	case DRM_FORMAT_NV21:
3845	case DRM_FORMAT_NV16:
3846	case DRM_FORMAT_NV61:
3847	case DRM_FORMAT_NV24:
3848	case DRM_FORMAT_NV42:
3849		return plane ? 2 : 1;
3850	case DRM_FORMAT_YUV410:
3851	case DRM_FORMAT_YVU410:
3852	case DRM_FORMAT_YUV411:
3853	case DRM_FORMAT_YVU411:
3854	case DRM_FORMAT_YUV420:
3855	case DRM_FORMAT_YVU420:
3856	case DRM_FORMAT_YUV422:
3857	case DRM_FORMAT_YVU422:
3858	case DRM_FORMAT_YUV444:
3859	case DRM_FORMAT_YVU444:
3860		return 1;
3861	default:
3862		drm_fb_get_bpp_depth(format, &depth, &bpp);
3863		return bpp >> 3;
3864	}
3865}
3866EXPORT_SYMBOL(drm_format_plane_cpp);
3867
3868/**
3869 * drm_format_horz_chroma_subsampling - get the horizontal chroma subsampling factor
3870 * @format: pixel format (DRM_FORMAT_*)
3871 *
3872 * RETURNS:
3873 * The horizontal chroma subsampling factor for the
3874 * specified pixel format.
3875 */
3876int drm_format_horz_chroma_subsampling(uint32_t format)
3877{
3878	switch (format) {
3879	case DRM_FORMAT_YUV411:
3880	case DRM_FORMAT_YVU411:
3881	case DRM_FORMAT_YUV410:
3882	case DRM_FORMAT_YVU410:
3883		return 4;
3884	case DRM_FORMAT_YUYV:
3885	case DRM_FORMAT_YVYU:
3886	case DRM_FORMAT_UYVY:
3887	case DRM_FORMAT_VYUY:
3888	case DRM_FORMAT_NV12:
3889	case DRM_FORMAT_NV21:
3890	case DRM_FORMAT_NV16:
3891	case DRM_FORMAT_NV61:
3892	case DRM_FORMAT_YUV422:
3893	case DRM_FORMAT_YVU422:
3894	case DRM_FORMAT_YUV420:
3895	case DRM_FORMAT_YVU420:
3896		return 2;
3897	default:
3898		return 1;
3899	}
3900}
3901EXPORT_SYMBOL(drm_format_horz_chroma_subsampling);
3902
3903/**
3904 * drm_format_vert_chroma_subsampling - get the vertical chroma subsampling factor
3905 * @format: pixel format (DRM_FORMAT_*)
3906 *
3907 * RETURNS:
3908 * The vertical chroma subsampling factor for the
3909 * specified pixel format.
3910 */
3911int drm_format_vert_chroma_subsampling(uint32_t format)
3912{
3913	switch (format) {
3914	case DRM_FORMAT_YUV410:
3915	case DRM_FORMAT_YVU410:
3916		return 4;
3917	case DRM_FORMAT_YUV420:
3918	case DRM_FORMAT_YVU420:
3919	case DRM_FORMAT_NV12:
3920	case DRM_FORMAT_NV21:
3921		return 2;
3922	default:
3923		return 1;
3924	}
3925}
3926EXPORT_SYMBOL(drm_format_vert_chroma_subsampling);
3927
3928/**
3929 * drm_mode_config_init - initialize DRM mode_configuration structure
3930 * @dev: DRM device
3931 *
3932 * Initialize @dev's mode_config structure, used for tracking the graphics
3933 * configuration of @dev.
3934 *
3935 * Since this initializes the modeset locks, no locking is possible. Which is no
3936 * problem, since this should happen single threaded at init time. It is the
3937 * driver's problem to ensure this guarantee.
3938 *
3939 */
3940void drm_mode_config_init(struct drm_device *dev)
3941{
3942	mutex_init(&dev->mode_config.mutex);
3943	mutex_init(&dev->mode_config.idr_mutex);
3944	mutex_init(&dev->mode_config.fb_lock);
3945	INIT_LIST_HEAD(&dev->mode_config.fb_list);
3946	INIT_LIST_HEAD(&dev->mode_config.crtc_list);
3947	INIT_LIST_HEAD(&dev->mode_config.connector_list);
3948	INIT_LIST_HEAD(&dev->mode_config.bridge_list);
3949	INIT_LIST_HEAD(&dev->mode_config.encoder_list);
3950	INIT_LIST_HEAD(&dev->mode_config.property_list);
3951	INIT_LIST_HEAD(&dev->mode_config.property_blob_list);
3952	INIT_LIST_HEAD(&dev->mode_config.plane_list);
3953	idr_init(&dev->mode_config.crtc_idr);
3954
3955	drm_modeset_lock_all(dev);
3956	drm_mode_create_standard_connector_properties(dev);
3957	drm_modeset_unlock_all(dev);
3958
3959	/* Just to be sure */
3960	dev->mode_config.num_fb = 0;
3961	dev->mode_config.num_connector = 0;
3962	dev->mode_config.num_crtc = 0;
3963	dev->mode_config.num_encoder = 0;
3964}
3965EXPORT_SYMBOL(drm_mode_config_init);
3966
3967/**
3968 * drm_mode_config_cleanup - free up DRM mode_config info
3969 * @dev: DRM device
3970 *
3971 * Free up all the connectors and CRTCs associated with this DRM device, then
3972 * free up the framebuffers and associated buffer objects.
3973 *
3974 * Note that since this /should/ happen single-threaded at driver/device
3975 * teardown time, no locking is required. It's the driver's job to ensure that
3976 * this guarantee actually holds true.
3977 *
3978 * FIXME: cleanup any dangling user buffer objects too
3979 */
3980void drm_mode_config_cleanup(struct drm_device *dev)
3981{
3982	struct drm_connector *connector, *ot;
3983	struct drm_crtc *crtc, *ct;
3984	struct drm_encoder *encoder, *enct;
3985	struct drm_bridge *bridge, *brt;
3986	struct drm_framebuffer *fb, *fbt;
3987	struct drm_property *property, *pt;
3988	struct drm_property_blob *blob, *bt;
3989	struct drm_plane *plane, *plt;
3990
3991	list_for_each_entry_safe(encoder, enct, &dev->mode_config.encoder_list,
3992				 head) {
3993		encoder->funcs->destroy(encoder);
3994	}
3995
3996	list_for_each_entry_safe(bridge, brt,
3997				 &dev->mode_config.bridge_list, head) {
3998		bridge->funcs->destroy(bridge);
3999	}
4000
4001	list_for_each_entry_safe(connector, ot,
4002				 &dev->mode_config.connector_list, head) {
4003		connector->funcs->destroy(connector);
4004	}
4005
4006	list_for_each_entry_safe(property, pt, &dev->mode_config.property_list,
4007				 head) {
4008		drm_property_destroy(dev, property);
4009	}
4010
4011	list_for_each_entry_safe(blob, bt, &dev->mode_config.property_blob_list,
4012				 head) {
4013		drm_property_destroy_blob(dev, blob);
4014	}
4015
4016	/*
4017	 * Single-threaded teardown context, so it's not required to grab the
4018	 * fb_lock to protect against concurrent fb_list access. Contrary, it
4019	 * would actually deadlock with the drm_framebuffer_cleanup function.
4020	 *
4021	 * Also, if there are any framebuffers left, that's a driver leak now,
4022	 * so politely WARN about this.
4023	 */
4024	WARN_ON(!list_empty(&dev->mode_config.fb_list));
4025	list_for_each_entry_safe(fb, fbt, &dev->mode_config.fb_list, head) {
4026		drm_framebuffer_remove(fb);
4027	}
4028
4029	list_for_each_entry_safe(plane, plt, &dev->mode_config.plane_list,
4030				 head) {
4031		plane->funcs->destroy(plane);
4032	}
4033
4034	list_for_each_entry_safe(crtc, ct, &dev->mode_config.crtc_list, head) {
4035		crtc->funcs->destroy(crtc);
4036	}
4037
4038	idr_destroy(&dev->mode_config.crtc_idr);
4039}
4040EXPORT_SYMBOL(drm_mode_config_cleanup);
4041