xref: /freebsd/sys/dev/vt/vt_core.c (revision 5fec99caff3ac4f476bb88078ebf85fbecf6afb3)
1 /*-
2  * SPDX-License-Identifier: BSD-2-Clause
3  *
4  * Copyright (c) 2009, 2013 The FreeBSD Foundation
5  *
6  * This software was developed by Ed Schouten under sponsorship from the
7  * FreeBSD Foundation.
8  *
9  * Portions of this software were developed by Oleksandr Rybalko
10  * under sponsorship from the FreeBSD Foundation.
11  *
12  * Redistribution and use in source and binary forms, with or without
13  * modification, are permitted provided that the following conditions
14  * are met:
15  * 1. Redistributions of source code must retain the above copyright
16  *    notice, this list of conditions and the following disclaimer.
17  * 2. Redistributions in binary form must reproduce the above copyright
18  *    notice, this list of conditions and the following disclaimer in the
19  *    documentation and/or other materials provided with the distribution.
20  *
21  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
22  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
25  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31  * SUCH DAMAGE.
32  */
33 
34 #include <sys/param.h>
35 #include <sys/consio.h>
36 #include <sys/devctl.h>
37 #include <sys/eventhandler.h>
38 #include <sys/fbio.h>
39 #include <sys/font.h>
40 #include <sys/kbio.h>
41 #include <sys/kdb.h>
42 #include <sys/kernel.h>
43 #include <sys/linker.h>
44 #include <sys/lock.h>
45 #include <sys/malloc.h>
46 #include <sys/mutex.h>
47 #include <sys/splash.h>
48 #include <sys/power.h>
49 #include <sys/priv.h>
50 #include <sys/proc.h>
51 #include <sys/random.h>
52 #include <sys/reboot.h>
53 #include <sys/sbuf.h>
54 #include <sys/systm.h>
55 #include <sys/terminal.h>
56 
57 #include <dev/kbd/kbdreg.h>
58 #include <dev/vt/vt.h>
59 
60 #if defined(__i386__) || defined(__amd64__)
61 #include <machine/psl.h>
62 #include <machine/frame.h>
63 #endif
64 
65 static int vtterm_cngrab_noswitch(struct vt_device *, struct vt_window *);
66 static int vtterm_cnungrab_noswitch(struct vt_device *, struct vt_window *);
67 
68 static tc_bell_t	vtterm_bell;
69 static tc_cursor_t	vtterm_cursor;
70 static tc_putchar_t	vtterm_putchar;
71 static tc_fill_t	vtterm_fill;
72 static tc_copy_t	vtterm_copy;
73 static tc_pre_input_t	vtterm_pre_input;
74 static tc_post_input_t	vtterm_post_input;
75 static tc_param_t	vtterm_param;
76 static tc_done_t	vtterm_done;
77 
78 static tc_cnprobe_t	vtterm_cnprobe;
79 static tc_cngetc_t	vtterm_cngetc;
80 
81 static tc_cngrab_t	vtterm_cngrab;
82 static tc_cnungrab_t	vtterm_cnungrab;
83 
84 static tc_opened_t	vtterm_opened;
85 static tc_ioctl_t	vtterm_ioctl;
86 static tc_mmap_t	vtterm_mmap;
87 
88 static const struct terminal_class vt_termclass = {
89 	.tc_bell	= vtterm_bell,
90 	.tc_cursor	= vtterm_cursor,
91 	.tc_putchar	= vtterm_putchar,
92 	.tc_fill	= vtterm_fill,
93 	.tc_copy	= vtterm_copy,
94 	.tc_pre_input	= vtterm_pre_input,
95 	.tc_post_input	= vtterm_post_input,
96 	.tc_param	= vtterm_param,
97 	.tc_done	= vtterm_done,
98 
99 	.tc_cnprobe	= vtterm_cnprobe,
100 	.tc_cngetc	= vtterm_cngetc,
101 
102 	.tc_cngrab	= vtterm_cngrab,
103 	.tc_cnungrab	= vtterm_cnungrab,
104 
105 	.tc_opened	= vtterm_opened,
106 	.tc_ioctl	= vtterm_ioctl,
107 	.tc_mmap	= vtterm_mmap,
108 };
109 
110 /*
111  * Use a constant timer of 25 Hz to redraw the screen.
112  *
113  * XXX: In theory we should only fire up the timer when there is really
114  * activity. Unfortunately we cannot always start timers. We really
115  * don't want to process kernel messages synchronously, because it
116  * really slows down the system.
117  */
118 #define	VT_TIMERFREQ	25
119 
120 /* Bell pitch/duration. */
121 #define	VT_BELLDURATION	(SBT_1S / 20)
122 #define	VT_BELLPITCH	800
123 
124 #define	VT_UNIT(vw)	((vw)->vw_device->vd_unit * VT_MAXWINDOWS + \
125 			(vw)->vw_number)
126 
127 static SYSCTL_NODE(_kern, OID_AUTO, vt, CTLFLAG_RD | CTLFLAG_MPSAFE, 0,
128     "vt(4) parameters");
129 static VT_SYSCTL_INT(enable_altgr, 1, "Enable AltGr key (Do not assume R.Alt as Alt)");
130 static VT_SYSCTL_INT(enable_bell, 0, "Enable bell");
131 static VT_SYSCTL_INT(debug, 0, "vt(4) debug level");
132 static VT_SYSCTL_INT(deadtimer, 15, "Time to wait busy process in VT_PROCESS mode");
133 static VT_SYSCTL_INT(suspendswitch, 1, "Switch to VT0 before suspend");
134 
135 /* Slow down and dont rely on timers and interrupts */
136 static VT_SYSCTL_INT(slow_down, 0, "Non-zero make console slower and synchronous.");
137 
138 /* Allow to disable some keyboard combinations. */
139 static VT_SYSCTL_INT(kbd_halt, 1, "Enable halt keyboard combination.  "
140     "See kbdmap(5) to configure.");
141 static VT_SYSCTL_INT(kbd_poweroff, 1, "Enable Power Off keyboard combination.  "
142     "See kbdmap(5) to configure.");
143 static VT_SYSCTL_INT(kbd_reboot, 1, "Enable reboot keyboard combination.  "
144     "See kbdmap(5) to configure (typically Ctrl-Alt-Delete).");
145 static VT_SYSCTL_INT(kbd_debug, 1, "Enable key combination to enter debugger.  "
146     "See kbdmap(5) to configure (typically Ctrl-Alt-Esc).");
147 static VT_SYSCTL_INT(kbd_panic, 0, "Enable request to panic.  "
148     "See kbdmap(5) to configure.");
149 
150 /* Used internally, not a tunable. */
151 int vt_draw_logo_cpus;
152 VT_SYSCTL_INT(splash_cpu, 0, "Show logo CPUs during boot");
153 VT_SYSCTL_INT(splash_ncpu, 0, "Override number of logos displayed "
154     "(0 = do not override)");
155 VT_SYSCTL_INT(splash_cpu_style, 2, "Draw logo style "
156     "(0 = Alternate beastie, 1 = Beastie, 2 = Orb)");
157 VT_SYSCTL_INT(splash_cpu_duration, 10, "Hide logos after (seconds)");
158 
159 static unsigned int vt_unit = 0;
160 static MALLOC_DEFINE(M_VT, "vt", "vt device");
161 struct vt_device *main_vd = &vt_consdev;
162 
163 /* Boot logo. */
164 extern unsigned int vt_logo_width;
165 extern unsigned int vt_logo_height;
166 extern unsigned int vt_logo_depth;
167 extern unsigned char vt_logo_image[];
168 #ifndef DEV_SPLASH
169 #define	vtterm_draw_cpu_logos(...)	do {} while (0)
170 const unsigned int vt_logo_sprite_height;
171 #endif
172 
173 /*
174  * Console font. vt_font_loader will be filled with font data passed
175  * by loader. If there is no font passed by boot loader, we use built in
176  * default.
177  */
178 extern struct vt_font vt_font_default;
179 static struct vt_font vt_font_loader;
180 static struct vt_font *vt_font_assigned = &vt_font_default;
181 
182 #ifndef SC_NO_CUTPASTE
183 extern struct vt_mouse_cursor vt_default_mouse_pointer;
184 #endif
185 
186 static int signal_vt_rel(struct vt_window *);
187 static int signal_vt_acq(struct vt_window *);
188 static int finish_vt_rel(struct vt_window *, int, int *);
189 static int finish_vt_acq(struct vt_window *);
190 static int vt_window_switch(struct vt_window *);
191 static int vt_late_window_switch(struct vt_window *);
192 static int vt_proc_alive(struct vt_window *);
193 static void vt_resize(struct vt_device *);
194 static void vt_update_static(void *);
195 #ifndef SC_NO_CUTPASTE
196 static void vt_mouse_paste(void);
197 #endif
198 static void vt_suspend_handler(void *priv, enum power_stype stype);
199 static void vt_resume_handler(void *priv, enum power_stype stype);
200 
201 SET_DECLARE(vt_drv_set, struct vt_driver);
202 
203 #define	_VTDEFH	MAX(100, PIXEL_HEIGHT(VT_FB_MAX_HEIGHT))
204 #define	_VTDEFW	MAX(200, PIXEL_WIDTH(VT_FB_MAX_WIDTH))
205 
206 static struct terminal	vt_consterm;
207 static struct vt_window	vt_conswindow;
208 static term_char_t vt_consdrawn[PIXEL_HEIGHT(VT_FB_MAX_HEIGHT) * PIXEL_WIDTH(VT_FB_MAX_WIDTH)];
209 static term_color_t vt_consdrawnfg[PIXEL_HEIGHT(VT_FB_MAX_HEIGHT) * PIXEL_WIDTH(VT_FB_MAX_WIDTH)];
210 static term_color_t vt_consdrawnbg[PIXEL_HEIGHT(VT_FB_MAX_HEIGHT) * PIXEL_WIDTH(VT_FB_MAX_WIDTH)];
211 static bool vt_cons_pos_to_flush[PIXEL_HEIGHT(VT_FB_MAX_HEIGHT) * PIXEL_WIDTH(VT_FB_MAX_WIDTH)];
212 struct vt_device	vt_consdev = {
213 	.vd_driver = NULL,
214 	.vd_softc = NULL,
215 	.vd_prev_driver = NULL,
216 	.vd_prev_softc = NULL,
217 	.vd_flags = VDF_INVALID,
218 	.vd_windows = { [VT_CONSWINDOW] =  &vt_conswindow, },
219 	.vd_curwindow = &vt_conswindow,
220 	.vd_kbstate = 0,
221 
222 #ifndef SC_NO_CUTPASTE
223 	.vd_pastebuf = {
224 		.vpb_buf = NULL,
225 		.vpb_bufsz = 0,
226 		.vpb_len = 0
227 	},
228 	.vd_mcursor = &vt_default_mouse_pointer,
229 	.vd_mcursor_fg = TC_WHITE,
230 	.vd_mcursor_bg = TC_BLACK,
231 #endif
232 
233 	.vd_drawn = vt_consdrawn,
234 	.vd_drawnfg = vt_consdrawnfg,
235 	.vd_drawnbg = vt_consdrawnbg,
236 
237 	.vd_pos_to_flush = vt_cons_pos_to_flush,
238 };
239 static term_char_t vt_constextbuf[(_VTDEFW) * (VBF_DEFAULT_HISTORY_SIZE)];
240 static term_char_t *vt_constextbufrows[VBF_DEFAULT_HISTORY_SIZE];
241 static struct vt_window	vt_conswindow = {
242 	.vw_number = VT_CONSWINDOW,
243 	.vw_flags = VWF_CONSOLE,
244 	.vw_buf = {
245 		.vb_buffer = &vt_constextbuf[0],
246 		.vb_rows = &vt_constextbufrows[0],
247 		.vb_history_size = VBF_DEFAULT_HISTORY_SIZE,
248 		.vb_curroffset = 0,
249 		.vb_roffset = 0,
250 		.vb_flags = VBF_STATIC,
251 		.vb_mark_start = {.tp_row = 0, .tp_col = 0,},
252 		.vb_mark_end = {.tp_row = 0, .tp_col = 0,},
253 		.vb_scr_size = {
254 			.tp_row = _VTDEFH,
255 			.tp_col = _VTDEFW,
256 		},
257 	},
258 	.vw_device = &vt_consdev,
259 	.vw_terminal = &vt_consterm,
260 	.vw_kbdmode = K_XLATE,
261 	.vw_grabbed = 0,
262 	.vw_bell_pitch = VT_BELLPITCH,
263 	.vw_bell_duration = VT_BELLDURATION,
264 };
265 
266 /* Add to set of consoles. */
267 TERMINAL_DECLARE_EARLY(vt_consterm, vt_termclass, &vt_conswindow);
268 
269 /*
270  * Right after kmem is done to allow early drivers to use locking and allocate
271  * memory.
272  */
273 SYSINIT(vt_update_static, SI_SUB_KMEM, SI_ORDER_ANY, vt_update_static,
274     &vt_consdev);
275 /* Delay until all devices attached, to not waste time. */
276 SYSINIT(vt_early_cons, SI_SUB_INT_CONFIG_HOOKS, SI_ORDER_ANY, vt_upgrade,
277     &vt_consdev);
278 
279 static bool inside_vt_flush = false;
280 static bool inside_vt_window_switch = false;
281 
282 /* Initialize locks/mem depended members. */
283 static void
284 vt_update_static(void *dummy)
285 {
286 
287 	if (!vty_enabled(VTY_VT))
288 		return;
289 	if (main_vd->vd_driver != NULL)
290 		printf("VT(%s): %s %ux%u\n", main_vd->vd_driver->vd_name,
291 		    (main_vd->vd_flags & VDF_TEXTMODE) ? "text" : "resolution",
292 		    main_vd->vd_width, main_vd->vd_height);
293 	else
294 		printf("VT: init without driver.\n");
295 
296 	mtx_init(&main_vd->vd_lock, "vtdev", NULL, MTX_DEF);
297 	mtx_init(&main_vd->vd_flush_lock, "vtdev flush", NULL, MTX_DEF);
298 	cv_init(&main_vd->vd_winswitch, "vtwswt");
299 }
300 
301 static void
302 vt_schedule_flush(struct vt_device *vd, int ms)
303 {
304 
305 	if (ms <= 0)
306 		/* Default to initial value. */
307 		ms = 1000 / VT_TIMERFREQ;
308 
309 	callout_schedule(&vd->vd_timer, hz / (1000 / ms));
310 }
311 
312 void
313 vt_resume_flush_timer(struct vt_window *vw, int ms)
314 {
315 	struct vt_device *vd = vw->vw_device;
316 
317 	if (vd->vd_curwindow != vw)
318 		return;
319 
320 	if (!(vd->vd_flags & VDF_ASYNC) ||
321 	    !atomic_cmpset_int(&vd->vd_timer_armed, 0, 1))
322 		return;
323 
324 	vt_schedule_flush(vd, ms);
325 }
326 
327 static void
328 vt_suspend_flush_timer(struct vt_device *vd)
329 {
330 	/*
331 	 * As long as this function is called locked, callout_stop()
332 	 * has the same effect like callout_drain() with regard to
333 	 * preventing the callback function from executing.
334 	 */
335 	VT_LOCK_ASSERT(vd, MA_OWNED);
336 
337 	if (!(vd->vd_flags & VDF_ASYNC) ||
338 	    !atomic_cmpset_int(&vd->vd_timer_armed, 1, 0))
339 		return;
340 
341 	callout_stop(&vd->vd_timer);
342 }
343 
344 static void
345 vt_switch_timer(void *arg, int pending)
346 {
347 
348 	(void)vt_late_window_switch((struct vt_window *)arg);
349 }
350 
351 static int
352 vt_save_kbd_mode(struct vt_window *vw, keyboard_t *kbd)
353 {
354 	int mode, ret;
355 
356 	mode = 0;
357 	ret = kbdd_ioctl(kbd, KDGKBMODE, (caddr_t)&mode);
358 	if (ret == ENOIOCTL)
359 		ret = ENODEV;
360 	if (ret != 0)
361 		return (ret);
362 
363 	vw->vw_kbdmode = mode;
364 
365 	return (0);
366 }
367 
368 static int
369 vt_update_kbd_mode(struct vt_window *vw, keyboard_t *kbd)
370 {
371 	int ret;
372 
373 	ret = kbdd_ioctl(kbd, KDSKBMODE, (caddr_t)&vw->vw_kbdmode);
374 	if (ret == ENOIOCTL)
375 		ret = ENODEV;
376 
377 	return (ret);
378 }
379 
380 static int
381 vt_save_kbd_state(struct vt_window *vw, keyboard_t *kbd)
382 {
383 	int state, ret;
384 
385 	state = 0;
386 	ret = kbdd_ioctl(kbd, KDGKBSTATE, (caddr_t)&state);
387 	if (ret == ENOIOCTL)
388 		ret = ENODEV;
389 	if (ret != 0)
390 		return (ret);
391 
392 	vw->vw_kbdstate &= ~LOCK_MASK;
393 	vw->vw_kbdstate |= state & LOCK_MASK;
394 
395 	return (0);
396 }
397 
398 static int
399 vt_update_kbd_state(struct vt_window *vw, keyboard_t *kbd)
400 {
401 	int state, ret;
402 
403 	state = vw->vw_kbdstate & LOCK_MASK;
404 	ret = kbdd_ioctl(kbd, KDSKBSTATE, (caddr_t)&state);
405 	if (ret == ENOIOCTL)
406 		ret = ENODEV;
407 
408 	return (ret);
409 }
410 
411 static int
412 vt_save_kbd_leds(struct vt_window *vw, keyboard_t *kbd)
413 {
414 	int leds, ret;
415 
416 	leds = 0;
417 	ret = kbdd_ioctl(kbd, KDGETLED, (caddr_t)&leds);
418 	if (ret == ENOIOCTL)
419 		ret = ENODEV;
420 	if (ret != 0)
421 		return (ret);
422 
423 	vw->vw_kbdstate &= ~LED_MASK;
424 	vw->vw_kbdstate |= leds & LED_MASK;
425 
426 	return (0);
427 }
428 
429 static int
430 vt_update_kbd_leds(struct vt_window *vw, keyboard_t *kbd)
431 {
432 	int leds, ret;
433 
434 	leds = vw->vw_kbdstate & LED_MASK;
435 	ret = kbdd_ioctl(kbd, KDSETLED, (caddr_t)&leds);
436 	if (ret == ENOIOCTL)
437 		ret = ENODEV;
438 
439 	return (ret);
440 }
441 
442 static int
443 vt_window_preswitch(struct vt_window *vw, struct vt_window *curvw)
444 {
445 
446 	DPRINTF(40, "%s\n", __func__);
447 	curvw->vw_switch_to = vw;
448 	/* Set timer to allow switch in case when process hang. */
449 	taskqueue_enqueue_timeout(taskqueue_thread, &vw->vw_timeout_task_dead, hz * vt_deadtimer);
450 	/* Notify process about vt switch attempt. */
451 	DPRINTF(30, "%s: Notify process.\n", __func__);
452 	signal_vt_rel(curvw);
453 
454 	return (0);
455 }
456 
457 static int
458 vt_window_postswitch(struct vt_window *vw)
459 {
460 
461 	signal_vt_acq(vw);
462 	return (0);
463 }
464 
465 /* vt_late_window_switch will do VT switching for regular case. */
466 static int
467 vt_late_window_switch(struct vt_window *vw)
468 {
469 	struct vt_window *curvw;
470 	int ret;
471 
472 	taskqueue_cancel_timeout(taskqueue_thread, &vw->vw_timeout_task_dead, NULL);
473 
474 	ret = vt_window_switch(vw);
475 	if (ret != 0) {
476 		/*
477 		 * If the switch hasn't happened, then return the VT
478 		 * to the current owner, if any.
479 		 */
480 		curvw = vw->vw_device->vd_curwindow;
481 		if (curvw->vw_smode.mode == VT_PROCESS)
482 			(void)vt_window_postswitch(curvw);
483 		return (ret);
484 	}
485 
486 	/* Notify owner process about terminal availability. */
487 	if (vw->vw_smode.mode == VT_PROCESS) {
488 		ret = vt_window_postswitch(vw);
489 	}
490 	return (ret);
491 }
492 
493 /* Switch window. */
494 static int
495 vt_proc_window_switch(struct vt_window *vw)
496 {
497 	struct vt_window *curvw;
498 	struct vt_device *vd;
499 	int ret;
500 
501 	/* Prevent switching to NULL */
502 	if (vw == NULL) {
503 		DPRINTF(30, "%s: Cannot switch: vw is NULL.", __func__);
504 		return (EINVAL);
505 	}
506 	vd = vw->vw_device;
507 	curvw = vd->vd_curwindow;
508 
509 	/* Check if virtual terminal is locked */
510 	if (curvw->vw_flags & VWF_VTYLOCK)
511 		return (EBUSY);
512 
513 	/* Check if switch already in progress */
514 	if (curvw->vw_flags & VWF_SWWAIT_REL) {
515 		/* Check if switching to same window */
516 		if (curvw->vw_switch_to == vw) {
517 			DPRINTF(30, "%s: Switch in progress to same vw.", __func__);
518 			return (0);	/* success */
519 		}
520 		DPRINTF(30, "%s: Switch in progress to different vw.", __func__);
521 		return (EBUSY);
522 	}
523 
524 	/* Avoid switching to already selected window */
525 	if (vw == curvw) {
526 		DPRINTF(30, "%s: Cannot switch: vw == curvw.", __func__);
527 		return (0);	/* success */
528 	}
529 
530 	/*
531 	 * Early check for an attempt to switch to a non-functional VT.
532 	 * The same check is done in vt_window_switch(), but it's better
533 	 * to fail as early as possible to avoid needless pre-switch
534 	 * actions.
535 	 */
536 	VT_LOCK(vd);
537 	if ((vw->vw_flags & (VWF_OPENED|VWF_CONSOLE)) == 0) {
538 		VT_UNLOCK(vd);
539 		return (EINVAL);
540 	}
541 	VT_UNLOCK(vd);
542 
543 	/* Ask current process permission to switch away. */
544 	if (curvw->vw_smode.mode == VT_PROCESS) {
545 		DPRINTF(30, "%s: VT_PROCESS ", __func__);
546 		if (vt_proc_alive(curvw) == FALSE) {
547 			DPRINTF(30, "Dead. Cleaning.");
548 			/* Dead */
549 		} else {
550 			DPRINTF(30, "%s: Signaling process.\n", __func__);
551 			/* Alive, try to ask him. */
552 			ret = vt_window_preswitch(vw, curvw);
553 			/* Wait for process answer or timeout. */
554 			return (ret);
555 		}
556 		DPRINTF(30, "\n");
557 	}
558 
559 	ret = vt_late_window_switch(vw);
560 	return (ret);
561 }
562 
563 /* Switch window ignoring process locking. */
564 static int
565 vt_window_switch(struct vt_window *vw)
566 {
567 	struct vt_device *vd = vw->vw_device;
568 	struct vt_window *curvw = vd->vd_curwindow;
569 	keyboard_t *kbd;
570 
571 	if (inside_vt_window_switch && KERNEL_PANICKED())
572 		return (0);
573 
574 	inside_vt_window_switch = true;
575 
576 	if (kdb_active) {
577 		/*
578 		 * When grabbing the console for the debugger, avoid
579 		 * locks as that can result in deadlock.  While this
580 		 * could use try locks, that wouldn't really make a
581 		 * difference as there are sufficient barriers in
582 		 * debugger entry/exit to be equivalent to
583 		 * successfully try-locking here.
584 		 */
585 		if (!(vw->vw_flags & (VWF_OPENED|VWF_CONSOLE))) {
586 			inside_vt_window_switch = false;
587 			return (EINVAL);
588 		}
589 
590 		vd->vd_curwindow = vw;
591 		vd->vd_flags |= VDF_INVALID;
592 		if (vd->vd_driver->vd_postswitch)
593 			vd->vd_driver->vd_postswitch(vd);
594 		inside_vt_window_switch = false;
595 		return (0);
596 	}
597 
598 	VT_LOCK(vd);
599 	if (curvw == vw) {
600 		/*
601 		 * Nothing to do, except ensure the driver has the opportunity to
602 		 * switch to console mode when panicking, making sure the panic
603 		 * is readable (even when a GUI was using ttyv0).
604 		 */
605 		if ((kdb_active || KERNEL_PANICKED()) &&
606 		    vd->vd_driver->vd_postswitch)
607 			vd->vd_driver->vd_postswitch(vd);
608 		inside_vt_window_switch = false;
609 		VT_UNLOCK(vd);
610 		return (0);
611 	}
612 	if (!(vw->vw_flags & (VWF_OPENED|VWF_CONSOLE))) {
613 		inside_vt_window_switch = false;
614 		VT_UNLOCK(vd);
615 		return (EINVAL);
616 	}
617 
618 	vt_suspend_flush_timer(vd);
619 
620 	vd->vd_curwindow = vw;
621 	vd->vd_flags |= VDF_INVALID;
622 	cv_broadcast(&vd->vd_winswitch);
623 	VT_UNLOCK(vd);
624 
625 	if (vd->vd_driver->vd_postswitch)
626 		vd->vd_driver->vd_postswitch(vd);
627 
628 	vt_resume_flush_timer(vw, 0);
629 
630 	/* Restore per-window keyboard mode. */
631 	mtx_lock(&Giant);
632 	if ((kbd = vd->vd_keyboard) != NULL) {
633 		if (curvw->vw_kbdmode == K_XLATE)
634 			vt_save_kbd_state(curvw, kbd);
635 
636 		vt_update_kbd_mode(vw, kbd);
637 		vt_update_kbd_state(vw, kbd);
638 	}
639 	mtx_unlock(&Giant);
640 	DPRINTF(10, "%s(ttyv%d) done\n", __func__, vw->vw_number);
641 
642 	inside_vt_window_switch = false;
643 	return (0);
644 }
645 
646 void
647 vt_termsize(struct vt_device *vd, struct vt_font *vf, term_pos_t *size)
648 {
649 
650 	size->tp_row = vd->vd_height;
651 	if (vt_draw_logo_cpus)
652 		size->tp_row -= vt_logo_sprite_height;
653 	size->tp_col = vd->vd_width;
654 	if (vf != NULL) {
655 		size->tp_row = MIN(size->tp_row / vf->vf_height,
656 		    PIXEL_HEIGHT(VT_FB_MAX_HEIGHT));
657 		size->tp_col = MIN(size->tp_col / vf->vf_width,
658 		    PIXEL_WIDTH(VT_FB_MAX_WIDTH));
659 	}
660 }
661 
662 static inline void
663 vt_termrect(struct vt_device *vd, struct vt_font *vf, term_rect_t *rect)
664 {
665 
666 	rect->tr_begin.tp_row = rect->tr_begin.tp_col = 0;
667 	if (vt_draw_logo_cpus)
668 		rect->tr_begin.tp_row = vt_logo_sprite_height;
669 
670 	rect->tr_end.tp_row = vd->vd_height;
671 	rect->tr_end.tp_col = vd->vd_width;
672 
673 	if (vf != NULL) {
674 		rect->tr_begin.tp_row =
675 		    howmany(rect->tr_begin.tp_row, vf->vf_height);
676 
677 		rect->tr_end.tp_row = MIN(rect->tr_end.tp_row / vf->vf_height,
678 		    PIXEL_HEIGHT(VT_FB_MAX_HEIGHT));
679 		rect->tr_end.tp_col = MIN(rect->tr_end.tp_col / vf->vf_width,
680 		    PIXEL_WIDTH(VT_FB_MAX_WIDTH));
681 	}
682 }
683 
684 void
685 vt_winsize(struct vt_device *vd, struct vt_font *vf, struct winsize *size)
686 {
687 
688 	size->ws_ypixel = vd->vd_height;
689 	if (vt_draw_logo_cpus)
690 		size->ws_ypixel -= vt_logo_sprite_height;
691 	size->ws_row = size->ws_ypixel;
692 	size->ws_col = size->ws_xpixel = vd->vd_width;
693 	if (vf != NULL) {
694 		size->ws_row = MIN(size->ws_row / vf->vf_height,
695 		    PIXEL_HEIGHT(VT_FB_MAX_HEIGHT));
696 		size->ws_col = MIN(size->ws_col / vf->vf_width,
697 		    PIXEL_WIDTH(VT_FB_MAX_WIDTH));
698 	}
699 }
700 
701 void
702 vt_compute_drawable_area(struct vt_window *vw)
703 {
704 	struct vt_device *vd;
705 	struct vt_font *vf;
706 	vt_axis_t height;
707 
708 	vd = vw->vw_device;
709 
710 	if (vw->vw_font == NULL) {
711 		vw->vw_draw_area.tr_begin.tp_col = 0;
712 		vw->vw_draw_area.tr_begin.tp_row = 0;
713 		if (vt_draw_logo_cpus)
714 			vw->vw_draw_area.tr_begin.tp_row = vt_logo_sprite_height;
715 		vw->vw_draw_area.tr_end.tp_col = vd->vd_width;
716 		vw->vw_draw_area.tr_end.tp_row = vd->vd_height;
717 		return;
718 	}
719 
720 	vf = vw->vw_font;
721 
722 	/*
723 	 * Compute the drawable area, so that the text is centered on
724 	 * the screen.
725 	 */
726 
727 	height = vd->vd_height;
728 	if (vt_draw_logo_cpus)
729 		height -= vt_logo_sprite_height;
730 	vw->vw_draw_area.tr_begin.tp_col = (vd->vd_width % vf->vf_width) / 2;
731 	vw->vw_draw_area.tr_begin.tp_row = (height % vf->vf_height) / 2;
732 	if (vt_draw_logo_cpus)
733 		vw->vw_draw_area.tr_begin.tp_row += vt_logo_sprite_height;
734 	vw->vw_draw_area.tr_end.tp_col = vw->vw_draw_area.tr_begin.tp_col +
735 	    rounddown(vd->vd_width, vf->vf_width);
736 	vw->vw_draw_area.tr_end.tp_row = vw->vw_draw_area.tr_begin.tp_row +
737 	    rounddown(height, vf->vf_height);
738 }
739 
740 static void
741 vt_scroll(struct vt_window *vw, int offset, int whence)
742 {
743 	int diff;
744 	term_pos_t size;
745 
746 	if ((vw->vw_flags & VWF_SCROLL) == 0)
747 		return;
748 
749 	vt_termsize(vw->vw_device, vw->vw_font, &size);
750 
751 	diff = vthistory_seek(&vw->vw_buf, offset, whence);
752 	if (diff)
753 		vw->vw_device->vd_flags |= VDF_INVALID;
754 	vt_resume_flush_timer(vw, 0);
755 }
756 
757 static int
758 vt_machine_kbdevent(struct vt_device *vd, int c)
759 {
760 
761 	switch (c) {
762 	case SPCLKEY | DBG: /* kbdmap(5) keyword `debug`. */
763 		if (vt_kbd_debug) {
764 			kdb_enter(KDB_WHY_BREAK, "manual escape to debugger");
765 #if VT_ALT_TO_ESC_HACK
766 			/*
767 			 * There's an unfortunate conflict between SPCLKEY|DBG
768 			 * and VT_ALT_TO_ESC_HACK.  Just assume they didn't mean
769 			 * it if we got to here.
770 			 */
771 			vd->vd_kbstate &= ~ALKED;
772 #endif
773 		}
774 		return (1);
775 	case SPCLKEY | HALT: /* kbdmap(5) keyword `halt`. */
776 		if (vt_kbd_halt)
777 			shutdown_nice(RB_HALT);
778 		return (1);
779 	case SPCLKEY | PASTE: /* kbdmap(5) keyword `paste`. */
780 #ifndef SC_NO_CUTPASTE
781 		/* Insert text from cut-paste buffer. */
782 		vt_mouse_paste();
783 #endif
784 		break;
785 	case SPCLKEY | PDWN: /* kbdmap(5) keyword `pdwn`. */
786 		if (vt_kbd_poweroff)
787 			shutdown_nice(RB_HALT|RB_POWEROFF);
788 		return (1);
789 	case SPCLKEY | PNC: /* kbdmap(5) keyword `panic`. */
790 		/*
791 		 * Request to immediate panic if sysctl
792 		 * kern.vt.enable_panic_key allow it.
793 		 */
794 		if (vt_kbd_panic)
795 			panic("Forced by the panic key");
796 		return (1);
797 	case SPCLKEY | RBT: /* kbdmap(5) keyword `boot`. */
798 		if (vt_kbd_reboot)
799 			shutdown_nice(RB_AUTOBOOT);
800 		return (1);
801 	case SPCLKEY | SPSC: /* kbdmap(5) keyword `spsc`. */
802 		/* Force activatation/deactivation of the screen saver. */
803 		/* TODO */
804 		return (1);
805 	case SPCLKEY | STBY: /* XXX Not present in kbdcontrol parser. */
806 		/* Put machine into Stand-By mode. */
807 		power_pm_suspend(POWER_SSTATE_TRANSITION_STANDBY);
808 		return (1);
809 	case SPCLKEY | SUSP: /* kbdmap(5) keyword `susp`. */
810 		/* Suspend machine. */
811 		power_pm_suspend(POWER_SSTATE_TRANSITION_SUSPEND);
812 		return (1);
813 	}
814 
815 	return (0);
816 }
817 
818 static void
819 vt_scrollmode_kbdevent(struct vt_window *vw, int c, int console)
820 {
821 	struct vt_device *vd;
822 	term_pos_t size;
823 
824 	vd = vw->vw_device;
825 	/* Only special keys handled in ScrollLock mode */
826 	if ((c & SPCLKEY) == 0)
827 		return;
828 
829 	c &= ~SPCLKEY;
830 
831 	if (console == 0) {
832 		if (c >= F_SCR && c <= MIN(L_SCR, F_SCR + VT_MAXWINDOWS - 1)) {
833 			vw = vd->vd_windows[c - F_SCR];
834 			vt_proc_window_switch(vw);
835 			return;
836 		}
837 		VT_LOCK(vd);
838 	}
839 
840 	switch (c) {
841 	case SLK: {
842 		/* Turn scrolling off. */
843 		vt_scroll(vw, 0, VHS_END);
844 		VTBUF_SLCK_DISABLE(&vw->vw_buf);
845 		vw->vw_flags &= ~VWF_SCROLL;
846 		break;
847 	}
848 	case FKEY | F(49): /* Home key. */
849 		vt_scroll(vw, 0, VHS_SET);
850 		break;
851 	case FKEY | F(50): /* Arrow up. */
852 		vt_scroll(vw, -1, VHS_CUR);
853 		break;
854 	case FKEY | F(51): /* Page up. */
855 		vt_termsize(vd, vw->vw_font, &size);
856 		vt_scroll(vw, -size.tp_row, VHS_CUR);
857 		break;
858 	case FKEY | F(57): /* End key. */
859 		vt_scroll(vw, 0, VHS_END);
860 		break;
861 	case FKEY | F(58): /* Arrow down. */
862 		vt_scroll(vw, 1, VHS_CUR);
863 		break;
864 	case FKEY | F(59): /* Page down. */
865 		vt_termsize(vd, vw->vw_font, &size);
866 		vt_scroll(vw, size.tp_row, VHS_CUR);
867 		break;
868 	}
869 
870 	if (console == 0)
871 		VT_UNLOCK(vd);
872 }
873 
874 static int
875 vt_processkey(keyboard_t *kbd, struct vt_device *vd, int c)
876 {
877 	struct vt_window *vw = vd->vd_curwindow;
878 
879 #ifdef RANDOM_ENABLE_KBD
880 	random_harvest_queue(&c, sizeof(c), RANDOM_KEYBOARD);
881 #endif
882 #if VT_ALT_TO_ESC_HACK
883 	if (c & RELKEY) {
884 		switch (c & ~RELKEY) {
885 		case (SPCLKEY | RALT):
886 			if (vt_enable_altgr != 0)
887 				break;
888 		case (SPCLKEY | LALT):
889 			vd->vd_kbstate &= ~ALKED;
890 		}
891 		/* Other keys ignored for RELKEY event. */
892 		return (0);
893 	} else {
894 		switch (c & ~RELKEY) {
895 		case (SPCLKEY | RALT):
896 			if (vt_enable_altgr != 0)
897 				break;
898 		case (SPCLKEY | LALT):
899 			vd->vd_kbstate |= ALKED;
900 		}
901 	}
902 #else
903 	if (c & RELKEY)
904 		/* Other keys ignored for RELKEY event. */
905 		return (0);
906 #endif
907 
908 	if (vt_machine_kbdevent(vd, c))
909 		return (0);
910 
911 	if (vw->vw_flags & VWF_SCROLL) {
912 		vt_scrollmode_kbdevent(vw, c, 0/* Not a console */);
913 		/* Scroll mode keys handled, nothing to do more. */
914 		return (0);
915 	}
916 
917 	if (c & SPCLKEY) {
918 		c &= ~SPCLKEY;
919 
920 		if (c >= F_SCR && c <= MIN(L_SCR, F_SCR + VT_MAXWINDOWS - 1)) {
921 			vw = vd->vd_windows[c - F_SCR];
922 			vt_proc_window_switch(vw);
923 			return (0);
924 		}
925 
926 		switch (c) {
927 		case NEXT:
928 			/* Switch to next VT. */
929 			c = (vw->vw_number + 1) % VT_MAXWINDOWS;
930 			vw = vd->vd_windows[c];
931 			vt_proc_window_switch(vw);
932 			return (0);
933 		case PREV:
934 			/* Switch to previous VT. */
935 			c = (vw->vw_number + VT_MAXWINDOWS - 1) % VT_MAXWINDOWS;
936 			vw = vd->vd_windows[c];
937 			vt_proc_window_switch(vw);
938 			return (0);
939 		case SLK: {
940 			vt_save_kbd_state(vw, kbd);
941 			VT_LOCK(vd);
942 			if (vw->vw_kbdstate & SLKED) {
943 				/* Turn scrolling on. */
944 				vw->vw_flags |= VWF_SCROLL;
945 				VTBUF_SLCK_ENABLE(&vw->vw_buf);
946 			} else {
947 				/* Turn scrolling off. */
948 				vw->vw_flags &= ~VWF_SCROLL;
949 				VTBUF_SLCK_DISABLE(&vw->vw_buf);
950 				vt_scroll(vw, 0, VHS_END);
951 			}
952 			VT_UNLOCK(vd);
953 			break;
954 		}
955 		case BKEY | BTAB: /* Back tab (usually, shift+tab). */
956 			terminal_input_special(vw->vw_terminal, TKEY_BTAB);
957 			break;
958 		case FKEY | F(1):  case FKEY | F(2):  case FKEY | F(3):
959 		case FKEY | F(4):  case FKEY | F(5):  case FKEY | F(6):
960 		case FKEY | F(7):  case FKEY | F(8):  case FKEY | F(9):
961 		case FKEY | F(10): case FKEY | F(11): case FKEY | F(12):
962 			/* F1 through F12 keys. */
963 			terminal_input_special(vw->vw_terminal,
964 			    TKEY_F1 + c - (FKEY | F(1)));
965 			break;
966 		case FKEY | F(49): /* Home key. */
967 			terminal_input_special(vw->vw_terminal, TKEY_HOME);
968 			break;
969 		case FKEY | F(50): /* Arrow up. */
970 			terminal_input_special(vw->vw_terminal, TKEY_UP);
971 			break;
972 		case FKEY | F(51): /* Page up. */
973 			terminal_input_special(vw->vw_terminal, TKEY_PAGE_UP);
974 			break;
975 		case FKEY | F(53): /* Arrow left. */
976 			terminal_input_special(vw->vw_terminal, TKEY_LEFT);
977 			break;
978 		case FKEY | F(55): /* Arrow right. */
979 			terminal_input_special(vw->vw_terminal, TKEY_RIGHT);
980 			break;
981 		case FKEY | F(57): /* End key. */
982 			terminal_input_special(vw->vw_terminal, TKEY_END);
983 			break;
984 		case FKEY | F(58): /* Arrow down. */
985 			terminal_input_special(vw->vw_terminal, TKEY_DOWN);
986 			break;
987 		case FKEY | F(59): /* Page down. */
988 			terminal_input_special(vw->vw_terminal, TKEY_PAGE_DOWN);
989 			break;
990 		case FKEY | F(60): /* Insert key. */
991 			terminal_input_special(vw->vw_terminal, TKEY_INSERT);
992 			break;
993 		case FKEY | F(61): /* Delete key. */
994 			terminal_input_special(vw->vw_terminal, TKEY_DELETE);
995 			break;
996 		}
997 	} else if (KEYFLAGS(c) == 0) {
998 		/* Don't do UTF-8 conversion when doing raw mode. */
999 		if (vw->vw_kbdmode == K_XLATE) {
1000 #if VT_ALT_TO_ESC_HACK
1001 			if (vd->vd_kbstate & ALKED) {
1002 				/*
1003 				 * Prepend ESC sequence if one of ALT keys down.
1004 				 */
1005 				terminal_input_char(vw->vw_terminal, 0x1b);
1006 			}
1007 #endif
1008 #if defined(KDB)
1009 			kdb_alt_break(c, &vd->vd_altbrk);
1010 #endif
1011 			terminal_input_char(vw->vw_terminal, KEYCHAR(c));
1012 		} else
1013 			terminal_input_raw(vw->vw_terminal, c);
1014 	}
1015 	return (0);
1016 }
1017 
1018 static int
1019 vt_kbdevent(keyboard_t *kbd, int event, void *arg)
1020 {
1021 	struct vt_device *vd = arg;
1022 	int c;
1023 
1024 	switch (event) {
1025 	case KBDIO_KEYINPUT:
1026 		break;
1027 	case KBDIO_UNLOADING:
1028 		mtx_lock(&Giant);
1029 		vd->vd_keyboard = NULL;
1030 		kbd_release(kbd, (void *)vd);
1031 		mtx_unlock(&Giant);
1032 		return (0);
1033 	default:
1034 		return (EINVAL);
1035 	}
1036 
1037 	while ((c = kbdd_read_char(kbd, 0)) != NOKEY)
1038 		vt_processkey(kbd, vd, c);
1039 
1040 	return (0);
1041 }
1042 
1043 static int
1044 vt_allocate_keyboard(struct vt_device *vd)
1045 {
1046 	int		 grabbed, i, idx0, idx;
1047 	keyboard_t	*k0, *k;
1048 	keyboard_info_t	 ki;
1049 
1050 	/*
1051 	 * If vt_upgrade() happens while the console is grabbed, we are
1052 	 * potentially going to switch keyboard devices while the keyboard is in
1053 	 * use. Unwind the grabbing of the current keyboard first, then we will
1054 	 * re-grab the new keyboard below, before we return.
1055 	 */
1056 	if (vd->vd_curwindow == &vt_conswindow) {
1057 		grabbed = vd->vd_curwindow->vw_grabbed;
1058 		for (i = 0; i < grabbed; ++i)
1059 			vtterm_cnungrab_noswitch(vd, vd->vd_curwindow);
1060 	}
1061 
1062 	idx0 = kbd_allocate("kbdmux", -1, vd, vt_kbdevent, vd);
1063 	if (idx0 >= 0) {
1064 		DPRINTF(20, "%s: kbdmux allocated, idx = %d\n", __func__, idx0);
1065 		k0 = kbd_get_keyboard(idx0);
1066 
1067 		for (idx = kbd_find_keyboard2("*", -1, 0);
1068 		     idx != -1;
1069 		     idx = kbd_find_keyboard2("*", -1, idx + 1)) {
1070 			k = kbd_get_keyboard(idx);
1071 
1072 			if (idx == idx0 || KBD_IS_BUSY(k))
1073 				continue;
1074 
1075 			bzero(&ki, sizeof(ki));
1076 			strncpy(ki.kb_name, k->kb_name, sizeof(ki.kb_name));
1077 			ki.kb_name[sizeof(ki.kb_name) - 1] = '\0';
1078 			ki.kb_unit = k->kb_unit;
1079 
1080 			kbdd_ioctl(k0, KBADDKBD, (caddr_t) &ki);
1081 		}
1082 	} else {
1083 		DPRINTF(20, "%s: no kbdmux allocated\n", __func__);
1084 		idx0 = kbd_allocate("*", -1, vd, vt_kbdevent, vd);
1085 		if (idx0 < 0) {
1086 			DPRINTF(10, "%s: No keyboard found.\n", __func__);
1087 			return (-1);
1088 		}
1089 		k0 = kbd_get_keyboard(idx0);
1090 	}
1091 	vd->vd_keyboard = k0;
1092 	DPRINTF(20, "%s: vd_keyboard = %d\n", __func__,
1093 	    vd->vd_keyboard->kb_index);
1094 
1095 	if (vd->vd_curwindow == &vt_conswindow) {
1096 		for (i = 0; i < grabbed; ++i)
1097 			vtterm_cngrab_noswitch(vd, vd->vd_curwindow);
1098 	}
1099 
1100 	return (idx0);
1101 }
1102 
1103 #define DEVCTL_LEN 64
1104 static void
1105 vtterm_devctl(bool enabled, bool hushed, int hz, sbintime_t duration)
1106 {
1107 	struct sbuf sb;
1108 	char *buf;
1109 
1110 	buf = malloc(DEVCTL_LEN, M_VT, M_NOWAIT);
1111 	if (buf == NULL)
1112 		return;
1113 	sbuf_new(&sb, buf, DEVCTL_LEN, SBUF_FIXEDLEN);
1114 	sbuf_printf(&sb, "enabled=%s hushed=%s hz=%d duration_ms=%d",
1115 	    enabled ? "true" : "false", hushed ? "true" : "false",
1116 	    hz, (int)(duration / SBT_1MS));
1117 	sbuf_finish(&sb);
1118 	if (sbuf_error(&sb) == 0)
1119 		devctl_notify("VT", "BELL", "RING", sbuf_data(&sb));
1120 	sbuf_delete(&sb);
1121 	free(buf, M_VT);
1122 }
1123 
1124 static void
1125 vtterm_bell(struct terminal *tm)
1126 {
1127 	struct vt_window *vw = tm->tm_softc;
1128 	struct vt_device *vd = vw->vw_device;
1129 
1130 	vtterm_devctl(vt_enable_bell, vd->vd_flags & VDF_QUIET_BELL,
1131 	    vw->vw_bell_pitch, vw->vw_bell_duration);
1132 
1133 	if (!vt_enable_bell)
1134 		return;
1135 
1136 	if (vd->vd_flags & VDF_QUIET_BELL)
1137 		return;
1138 
1139 	if (vw->vw_bell_pitch == 0 ||
1140 	    vw->vw_bell_duration == 0)
1141 		return;
1142 
1143 	sysbeep(vw->vw_bell_pitch, vw->vw_bell_duration);
1144 }
1145 
1146 /*
1147  * Beep with user-provided frequency and duration as specified by a KDMKTONE
1148  * ioctl (compatible with Linux).  The frequency is specified as a 8254 PIT
1149  * divisor for a 1.19MHz clock.
1150  *
1151  * See https://tldp.org/LDP/lpg/node83.html.
1152  */
1153 static void
1154 vtterm_beep(struct terminal *tm, u_int param)
1155 {
1156 	u_int freq;
1157 	sbintime_t period;
1158 	struct vt_window *vw = tm->tm_softc;
1159 	struct vt_device *vd = vw->vw_device;
1160 
1161 	if ((param == 0) || ((param & 0xffff) == 0)) {
1162 		vtterm_bell(tm);
1163 		return;
1164 	}
1165 
1166 	/* XXX period unit is supposed to be "timer ticks." */
1167 	period = ((param >> 16) & 0xffff) * SBT_1MS;
1168 	freq = 1193182 / (param & 0xffff);
1169 
1170 	vtterm_devctl(vt_enable_bell, vd->vd_flags & VDF_QUIET_BELL,
1171 	    freq, period);
1172 
1173 	if (!vt_enable_bell)
1174 		return;
1175 
1176 	sysbeep(freq, period);
1177 }
1178 
1179 static void
1180 vtterm_cursor(struct terminal *tm, const term_pos_t *p)
1181 {
1182 	struct vt_window *vw = tm->tm_softc;
1183 
1184 	vtbuf_cursor_position(&vw->vw_buf, p);
1185 }
1186 
1187 static void
1188 vtterm_putchar(struct terminal *tm, const term_pos_t *p, term_char_t c)
1189 {
1190 	struct vt_window *vw = tm->tm_softc;
1191 
1192 	vtbuf_putchar(&vw->vw_buf, p, c);
1193 }
1194 
1195 static void
1196 vtterm_fill(struct terminal *tm, const term_rect_t *r, term_char_t c)
1197 {
1198 	struct vt_window *vw = tm->tm_softc;
1199 
1200 	vtbuf_fill(&vw->vw_buf, r, c);
1201 }
1202 
1203 static void
1204 vtterm_copy(struct terminal *tm, const term_rect_t *r,
1205     const term_pos_t *p)
1206 {
1207 	struct vt_window *vw = tm->tm_softc;
1208 
1209 	vtbuf_copy(&vw->vw_buf, r, p);
1210 }
1211 
1212 static void
1213 vtterm_param(struct terminal *tm, int cmd, unsigned int arg)
1214 {
1215 	struct vt_window *vw = tm->tm_softc;
1216 
1217 	switch (cmd) {
1218 	case TP_SETLOCALCURSOR:
1219 		/*
1220 		 * 0 means normal (usually block), 1 means hidden, and
1221 		 * 2 means blinking (always block) for compatibility with
1222 		 * syscons.  We don't support any changes except hiding,
1223 		 * so must map 2 to 0.
1224 		 */
1225 		arg = (arg == 1) ? 0 : 1;
1226 		/* FALLTHROUGH */
1227 	case TP_SHOWCURSOR:
1228 		vtbuf_cursor_visibility(&vw->vw_buf, arg);
1229 		vt_resume_flush_timer(vw, 0);
1230 		break;
1231 	case TP_MOUSE:
1232 		vw->vw_mouse_level = arg;
1233 		break;
1234 	case TP_SETBELLPD:
1235 		vw->vw_bell_pitch = TP_SETBELLPD_PITCH(arg);
1236 		vw->vw_bell_duration =
1237 		    TICKS_2_MSEC(TP_SETBELLPD_DURATION(arg)) * SBT_1MS;
1238 		break;
1239 	}
1240 }
1241 
1242 void
1243 vt_determine_colors(term_char_t c, int cursor,
1244     term_color_t *fg, term_color_t *bg)
1245 {
1246 	term_color_t tmp;
1247 	int invert;
1248 
1249 	invert = 0;
1250 
1251 	*fg = TCHAR_FGCOLOR(c);
1252 	if (TCHAR_FORMAT(c) & TF_BOLD)
1253 		*fg = TCOLOR_LIGHT(*fg);
1254 	*bg = TCHAR_BGCOLOR(c);
1255 	if (TCHAR_FORMAT(c) & TF_BLINK)
1256 		*bg = TCOLOR_LIGHT(*bg);
1257 
1258 	if (TCHAR_FORMAT(c) & TF_REVERSE)
1259 		invert ^= 1;
1260 	if (cursor)
1261 		invert ^= 1;
1262 
1263 	if (invert) {
1264 		tmp = *fg;
1265 		*fg = *bg;
1266 		*bg = tmp;
1267 	}
1268 }
1269 
1270 #ifndef SC_NO_CUTPASTE
1271 int
1272 vt_is_cursor_in_area(const struct vt_device *vd, const term_rect_t *area)
1273 {
1274 	unsigned int mx, my;
1275 
1276 	/*
1277 	 * We use the cursor position saved during the current refresh,
1278 	 * in case the cursor moved since.
1279 	 */
1280 	mx = vd->vd_mx_drawn + vd->vd_curwindow->vw_draw_area.tr_begin.tp_col;
1281 	my = vd->vd_my_drawn + vd->vd_curwindow->vw_draw_area.tr_begin.tp_row;
1282 
1283 	if (mx >= area->tr_end.tp_col ||
1284 	    mx + vd->vd_mcursor->width <= area->tr_begin.tp_col ||
1285 	    my >= area->tr_end.tp_row ||
1286 	    my + vd->vd_mcursor->height <= area->tr_begin.tp_row)
1287 		return (0);
1288 	return (1);
1289 }
1290 
1291 static void
1292 vt_mark_mouse_position_as_dirty(struct vt_device *vd, int locked)
1293 {
1294 	term_rect_t area;
1295 	struct vt_window *vw;
1296 	struct vt_font *vf;
1297 	int x, y;
1298 
1299 	vw = vd->vd_curwindow;
1300 	vf = vw->vw_font;
1301 
1302 	x = vd->vd_mx_drawn;
1303 	y = vd->vd_my_drawn;
1304 
1305 	if (vf != NULL) {
1306 		area.tr_begin.tp_col = x / vf->vf_width;
1307 		area.tr_begin.tp_row = y / vf->vf_height;
1308 		area.tr_end.tp_col =
1309 		    ((x + vd->vd_mcursor->width) / vf->vf_width) + 1;
1310 		area.tr_end.tp_row =
1311 		    ((y + vd->vd_mcursor->height) / vf->vf_height) + 1;
1312 	} else {
1313 		/*
1314 		 * No font loaded (ie. vt_vga operating in textmode).
1315 		 *
1316 		 * FIXME: This fake area needs to be revisited once the
1317 		 * mouse cursor is supported in vt_vga's textmode.
1318 		 */
1319 		area.tr_begin.tp_col = x;
1320 		area.tr_begin.tp_row = y;
1321 		area.tr_end.tp_col = x + 2;
1322 		area.tr_end.tp_row = y + 2;
1323 	}
1324 
1325 	if (!locked)
1326 		vtbuf_lock(&vw->vw_buf);
1327 	if (vd->vd_driver->vd_invalidate_text)
1328 		vd->vd_driver->vd_invalidate_text(vd, &area);
1329 	vtbuf_dirty(&vw->vw_buf, &area);
1330 	if (!locked)
1331 		vtbuf_unlock(&vw->vw_buf);
1332 }
1333 #endif
1334 
1335 static void
1336 vt_set_border(struct vt_device *vd, const term_rect_t *area,
1337     term_color_t c)
1338 {
1339 	vd_drawrect_t *drawrect = vd->vd_driver->vd_drawrect;
1340 
1341 	if (drawrect == NULL)
1342 		return;
1343 
1344 	/* Top bar */
1345 	if (area->tr_begin.tp_row > 0)
1346 		drawrect(vd, 0, 0, vd->vd_width - 1,
1347 		    area->tr_begin.tp_row - 1, 1, c);
1348 
1349 	/* Left bar */
1350 	if (area->tr_begin.tp_col > 0)
1351 		drawrect(vd, 0, area->tr_begin.tp_row,
1352 		    area->tr_begin.tp_col - 1, area->tr_end.tp_row - 1, 1, c);
1353 
1354 	/* Right bar */
1355 	if (area->tr_end.tp_col < vd->vd_width)
1356 		drawrect(vd, area->tr_end.tp_col, area->tr_begin.tp_row,
1357 		    vd->vd_width - 1, area->tr_end.tp_row - 1, 1, c);
1358 
1359 	/* Bottom bar */
1360 	if (area->tr_end.tp_row < vd->vd_height)
1361 		drawrect(vd, 0, area->tr_end.tp_row, vd->vd_width - 1,
1362 		    vd->vd_height - 1, 1, c);
1363 }
1364 
1365 static void
1366 vt_flush_to_buffer(struct vt_device *vd,
1367     const struct vt_window *vw, const term_rect_t *area)
1368 {
1369 	unsigned int col, row;
1370 	term_char_t c;
1371 	term_color_t fg, bg;
1372 	size_t z;
1373 
1374 	for (row = area->tr_begin.tp_row; row < area->tr_end.tp_row; ++row) {
1375 		for (col = area->tr_begin.tp_col; col < area->tr_end.tp_col;
1376 		    ++col) {
1377 			z = row * PIXEL_WIDTH(VT_FB_MAX_WIDTH) + col;
1378 			if (z >= PIXEL_HEIGHT(VT_FB_MAX_HEIGHT) *
1379 			    PIXEL_WIDTH(VT_FB_MAX_WIDTH))
1380 				continue;
1381 
1382 			c = VTBUF_GET_FIELD(&vw->vw_buf, row, col);
1383 			vt_determine_colors(c,
1384 			    VTBUF_ISCURSOR(&vw->vw_buf, row, col), &fg, &bg);
1385 
1386 			if (vd->vd_drawn && (vd->vd_drawn[z] == c) &&
1387 			    vd->vd_drawnfg && (vd->vd_drawnfg[z] == fg) &&
1388 			    vd->vd_drawnbg && (vd->vd_drawnbg[z] == bg)) {
1389 				vd->vd_pos_to_flush[z] = false;
1390 				continue;
1391 			}
1392 
1393 			vd->vd_pos_to_flush[z] = true;
1394 
1395 			if (vd->vd_drawn)
1396 				vd->vd_drawn[z] = c;
1397 			if (vd->vd_drawnfg)
1398 				vd->vd_drawnfg[z] = fg;
1399 			if (vd->vd_drawnbg)
1400 				vd->vd_drawnbg[z] = bg;
1401 		}
1402 	}
1403 }
1404 
1405 static void
1406 vt_bitblt_buffer(struct vt_device *vd, const struct vt_window *vw,
1407     const term_rect_t *area)
1408 {
1409 	unsigned int col, row, x, y;
1410 	struct vt_font *vf;
1411 	term_char_t c;
1412 	term_color_t fg, bg;
1413 	const uint8_t *pattern;
1414 	size_t z;
1415 
1416 	vf = vw->vw_font;
1417 
1418 	for (row = area->tr_begin.tp_row; row < area->tr_end.tp_row; ++row) {
1419 		for (col = area->tr_begin.tp_col; col < area->tr_end.tp_col;
1420 		    ++col) {
1421 			x = col * vf->vf_width +
1422 			    vw->vw_draw_area.tr_begin.tp_col;
1423 			y = row * vf->vf_height +
1424 			    vw->vw_draw_area.tr_begin.tp_row;
1425 
1426 			z = row * PIXEL_WIDTH(VT_FB_MAX_WIDTH) + col;
1427 			if (z >= PIXEL_HEIGHT(VT_FB_MAX_HEIGHT) *
1428 			    PIXEL_WIDTH(VT_FB_MAX_WIDTH))
1429 				continue;
1430 			if (!vd->vd_pos_to_flush[z])
1431 				continue;
1432 
1433 			c = vd->vd_drawn[z];
1434 			fg = vd->vd_drawnfg[z];
1435 			bg = vd->vd_drawnbg[z];
1436 
1437 			pattern = vtfont_lookup(vf, c);
1438 			vd->vd_driver->vd_bitblt_bmp(vd, vw,
1439 			    pattern, NULL, vf->vf_width, vf->vf_height,
1440 			    x, y, fg, bg);
1441 		}
1442 	}
1443 
1444 #ifndef SC_NO_CUTPASTE
1445 	if (!vd->vd_mshown)
1446 		return;
1447 
1448 	term_rect_t drawn_area;
1449 
1450 	drawn_area.tr_begin.tp_col = area->tr_begin.tp_col * vf->vf_width;
1451 	drawn_area.tr_begin.tp_row = area->tr_begin.tp_row * vf->vf_height;
1452 	drawn_area.tr_end.tp_col = area->tr_end.tp_col * vf->vf_width;
1453 	drawn_area.tr_end.tp_row = area->tr_end.tp_row * vf->vf_height;
1454 
1455 	if (vt_is_cursor_in_area(vd, &drawn_area)) {
1456 		vd->vd_driver->vd_bitblt_bmp(vd, vw,
1457 		    vd->vd_mcursor->map, vd->vd_mcursor->mask,
1458 		    vd->vd_mcursor->width, vd->vd_mcursor->height,
1459 		    vd->vd_mx_drawn + vw->vw_draw_area.tr_begin.tp_col,
1460 		    vd->vd_my_drawn + vw->vw_draw_area.tr_begin.tp_row,
1461 		    vd->vd_mcursor_fg, vd->vd_mcursor_bg);
1462 	}
1463 #endif
1464 }
1465 
1466 static void
1467 vt_draw_decorations(struct vt_device *vd)
1468 {
1469 	struct vt_window *vw;
1470 	const teken_attr_t *a;
1471 
1472 	vw = vd->vd_curwindow;
1473 
1474 	a = teken_get_curattr(&vw->vw_terminal->tm_emulator);
1475 	vt_set_border(vd, &vw->vw_draw_area, a->ta_bgcolor);
1476 
1477 	if (vt_draw_logo_cpus)
1478 		vtterm_draw_cpu_logos(vd);
1479 }
1480 
1481 static int
1482 vt_flush(struct vt_device *vd)
1483 {
1484 	struct vt_window *vw;
1485 	struct vt_font *vf;
1486 	term_rect_t tarea;
1487 #ifndef SC_NO_CUTPASTE
1488 	int cursor_was_shown, cursor_moved;
1489 #endif
1490 	bool needs_refresh;
1491 
1492 	if (inside_vt_flush && KERNEL_PANICKED())
1493 		return (0);
1494 
1495 	vw = vd->vd_curwindow;
1496 	if (vw == NULL)
1497 		return (0);
1498 
1499 	if (vd->vd_flags & VDF_SPLASH || vw->vw_flags & VWF_BUSY)
1500 		return (0);
1501 
1502 	vf = vw->vw_font;
1503 	if (((vd->vd_flags & VDF_TEXTMODE) == 0) && (vf == NULL))
1504 		return (0);
1505 
1506 	VT_FLUSH_LOCK(vd);
1507 
1508 	vtbuf_lock(&vw->vw_buf);
1509 	inside_vt_flush = true;
1510 
1511 #ifndef SC_NO_CUTPASTE
1512 	cursor_was_shown = vd->vd_mshown;
1513 	cursor_moved = (vd->vd_mx != vd->vd_mx_drawn ||
1514 	    vd->vd_my != vd->vd_my_drawn);
1515 
1516 	/* Check if the cursor should be displayed or not. */
1517 	if ((vd->vd_flags & VDF_MOUSECURSOR) && /* Mouse support enabled. */
1518 	    !(vw->vw_flags & VWF_MOUSE_HIDE) && /* Cursor displayed.      */
1519 	    !kdb_active && !KERNEL_PANICKED()) {  /* DDB inactive.          */
1520 		vd->vd_mshown = 1;
1521 	} else {
1522 		vd->vd_mshown = 0;
1523 	}
1524 
1525 	/*
1526 	 * If the cursor changed display state or moved, we must mark
1527 	 * the old position as dirty, so that it's erased.
1528 	 */
1529 	if (cursor_was_shown != vd->vd_mshown ||
1530 	    (vd->vd_mshown && cursor_moved))
1531 		vt_mark_mouse_position_as_dirty(vd, true);
1532 
1533 	/*
1534          * Save position of the mouse cursor. It's used by backends to
1535          * know where to draw the cursor and during the next refresh to
1536          * erase the previous position.
1537 	 */
1538 	vd->vd_mx_drawn = vd->vd_mx;
1539 	vd->vd_my_drawn = vd->vd_my;
1540 
1541 	/*
1542 	 * If the cursor is displayed and has moved since last refresh,
1543 	 * mark the new position as dirty.
1544 	 */
1545 	if (vd->vd_mshown && cursor_moved)
1546 		vt_mark_mouse_position_as_dirty(vd, true);
1547 #endif
1548 
1549 	vtbuf_undirty(&vw->vw_buf, &tarea);
1550 
1551 	/* Force a full redraw when the screen contents might be invalid. */
1552 	needs_refresh = false;
1553 	if (vd->vd_flags & (VDF_INVALID | VDF_SUSPENDED)) {
1554 		needs_refresh = true;
1555 		vd->vd_flags &= ~VDF_INVALID;
1556 
1557 		vt_termrect(vd, vf, &tarea);
1558 		if (vd->vd_driver->vd_invalidate_text)
1559 			vd->vd_driver->vd_invalidate_text(vd, &tarea);
1560 	}
1561 
1562 	if (tarea.tr_begin.tp_col < tarea.tr_end.tp_col) {
1563 		if (vd->vd_driver->vd_bitblt_after_vtbuf_unlock) {
1564 			/*
1565 			 * When `vd_bitblt_after_vtbuf_unlock` is set to true,
1566 			 * we first remember the characters to redraw. They are
1567 			 * already copied to the `vd_drawn` arrays.
1568 			 *
1569 			 * We then unlock vt_buf and proceed with the actual
1570 			 * drawing using the backend driver.
1571 			 */
1572 			vt_flush_to_buffer(vd, vw, &tarea);
1573 			vtbuf_unlock(&vw->vw_buf);
1574 			vt_bitblt_buffer(vd, vw, &tarea);
1575 
1576 			if (needs_refresh)
1577 				vt_draw_decorations(vd);
1578 
1579 			/*
1580 			 * We can reset `inside_vt_flush` after unlocking vtbuf
1581 			 * here because we also hold vt_flush_lock in this code
1582 			 * path.
1583 			 */
1584 			inside_vt_flush = false;
1585 		} else {
1586 			/*
1587 			 * When `vd_bitblt_after_vtbuf_unlock` is false, we use
1588 			 * the backend's `vd_bitblt_text` callback directly.
1589 			 */
1590 			vd->vd_driver->vd_bitblt_text(vd, vw, &tarea);
1591 
1592 			if (needs_refresh)
1593 				vt_draw_decorations(vd);
1594 
1595 			inside_vt_flush = false;
1596 			vtbuf_unlock(&vw->vw_buf);
1597 		}
1598 
1599 		VT_FLUSH_UNLOCK(vd);
1600 
1601 		return (1);
1602 	}
1603 
1604 	inside_vt_flush = false;
1605 	vtbuf_unlock(&vw->vw_buf);
1606 
1607 	VT_FLUSH_UNLOCK(vd);
1608 
1609 	return (0);
1610 }
1611 
1612 static void
1613 vt_timer(void *arg)
1614 {
1615 	struct vt_device *vd;
1616 	int changed;
1617 
1618 	vd = arg;
1619 	/* Update screen if required. */
1620 	changed = vt_flush(vd);
1621 
1622 	/* Schedule for next update. */
1623 	if (changed)
1624 		vt_schedule_flush(vd, 0);
1625 	else
1626 		vd->vd_timer_armed = 0;
1627 }
1628 
1629 static void
1630 vtterm_pre_input(struct terminal *tm)
1631 {
1632 	struct vt_window *vw = tm->tm_softc;
1633 
1634 	if (inside_vt_flush && KERNEL_PANICKED())
1635 		return;
1636 
1637 	vtbuf_lock(&vw->vw_buf);
1638 }
1639 
1640 static void
1641 vtterm_post_input(struct terminal *tm)
1642 {
1643 	struct vt_window *vw = tm->tm_softc;
1644 
1645 	if (inside_vt_flush && KERNEL_PANICKED())
1646 		return;
1647 
1648 	vtbuf_unlock(&vw->vw_buf);
1649 	vt_resume_flush_timer(vw, 0);
1650 }
1651 
1652 static void
1653 vtterm_done(struct terminal *tm)
1654 {
1655 	struct vt_window *vw = tm->tm_softc;
1656 	struct vt_device *vd = vw->vw_device;
1657 
1658 	if (kdb_active || KERNEL_PANICKED()) {
1659 		/* Switch to the debugger. */
1660 		if (vd->vd_curwindow != vw) {
1661 			vd->vd_curwindow = vw;
1662 			vd->vd_flags |= VDF_INVALID;
1663 			if (vd->vd_driver->vd_postswitch)
1664 				vd->vd_driver->vd_postswitch(vd);
1665 		}
1666 		vd->vd_flags &= ~VDF_SPLASH;
1667 		vt_flush(vd);
1668 	} else if (vt_slow_down > 0) {
1669 		int i, j;
1670 		for (i = 0; i < vt_slow_down; i++) {
1671 			for (j = 0; j < 1000; j++)
1672 				vt_flush(vd);
1673 		}
1674 	} else if (!(vd->vd_flags & VDF_ASYNC)) {
1675 		vt_flush(vd);
1676 	}
1677 }
1678 
1679 #ifdef DEV_SPLASH
1680 static void
1681 vtterm_splash(struct vt_device *vd)
1682 {
1683 	struct splash_info *si;
1684 	uintptr_t image;
1685 	vt_axis_t top, left;
1686 
1687 	si = MD_FETCH(preload_kmdp, MODINFOMD_SPLASH, struct splash_info *);
1688 	if (!(vd->vd_flags & VDF_TEXTMODE) && (boothowto & RB_MUTE)) {
1689 		if (si == NULL) {
1690 			top = (vd->vd_height - vt_logo_height) / 2;
1691 			left = (vd->vd_width - vt_logo_width) / 2;
1692 			vd->vd_driver->vd_bitblt_bmp(vd, vd->vd_curwindow,
1693 			    vt_logo_image, NULL, vt_logo_width, vt_logo_height,
1694 			    left, top, TC_WHITE, TC_BLACK);
1695 		} else {
1696 			if (si->si_depth != 4)
1697 				return;
1698 			image = (uintptr_t)si + sizeof(struct splash_info);
1699 			image = roundup2(image, 8);
1700 			top = (vd->vd_height - si->si_height) / 2;
1701 			left = (vd->vd_width - si->si_width) / 2;
1702 			vd->vd_driver->vd_bitblt_argb(vd, vd->vd_curwindow,
1703 			    (unsigned char *)image, si->si_width, si->si_height,
1704 			    left, top);
1705 		}
1706 		vd->vd_flags |= VDF_SPLASH;
1707 	}
1708 }
1709 #endif
1710 
1711 static struct vt_font *
1712 parse_font_info_static(struct font_info *fi)
1713 {
1714 	struct vt_font *vfp;
1715 	uintptr_t ptr;
1716 	uint32_t checksum;
1717 
1718 	if (fi == NULL)
1719 		return (NULL);
1720 
1721 	ptr = (uintptr_t)fi;
1722 	/*
1723 	 * Compute and verify checksum. The total sum of all the fields
1724 	 * must be 0.
1725 	 */
1726 	checksum = fi->fi_width;
1727 	checksum += fi->fi_height;
1728 	checksum += fi->fi_bitmap_size;
1729 	for (unsigned i = 0; i < VFNT_MAPS; i++)
1730 		checksum += fi->fi_map_count[i];
1731 
1732 	if (checksum + fi->fi_checksum != 0)
1733 		return (NULL);
1734 
1735 	ptr += sizeof(struct font_info);
1736 	ptr = roundup2(ptr, 8);
1737 
1738 	vfp = &vt_font_loader;
1739 	vfp->vf_height = fi->fi_height;
1740 	vfp->vf_width = fi->fi_width;
1741 	/* This is default font, set refcount 1 to disable removal. */
1742 	vfp->vf_refcount = 1;
1743 	for (unsigned i = 0; i < VFNT_MAPS; i++) {
1744 		if (fi->fi_map_count[i] == 0)
1745 			continue;
1746 		vfp->vf_map_count[i] = fi->fi_map_count[i];
1747 		vfp->vf_map[i] = (vfnt_map_t *)ptr;
1748 		ptr += (fi->fi_map_count[i] * sizeof(vfnt_map_t));
1749 		ptr = roundup2(ptr, 8);
1750 	}
1751 	vfp->vf_bytes = (uint8_t *)ptr;
1752 	return (vfp);
1753 }
1754 
1755 /*
1756  * Set up default font with allocated data structures.
1757  * However, we can not set refcount here, because it is already set and
1758  * incremented in vtterm_cnprobe() to avoid being released by font load from
1759  * userland.
1760  */
1761 static struct vt_font *
1762 parse_font_info(struct font_info *fi)
1763 {
1764 	struct vt_font *vfp;
1765 	uintptr_t ptr;
1766 	uint32_t checksum;
1767 	size_t size;
1768 
1769 	if (fi == NULL)
1770 		return (NULL);
1771 
1772 	ptr = (uintptr_t)fi;
1773 	/*
1774 	 * Compute and verify checksum. The total sum of all the fields
1775 	 * must be 0.
1776 	 */
1777 	checksum = fi->fi_width;
1778 	checksum += fi->fi_height;
1779 	checksum += fi->fi_bitmap_size;
1780 	for (unsigned i = 0; i < VFNT_MAPS; i++)
1781 		checksum += fi->fi_map_count[i];
1782 
1783 	if (checksum + fi->fi_checksum != 0)
1784 		return (NULL);
1785 
1786 	ptr += sizeof(struct font_info);
1787 	ptr = roundup2(ptr, 8);
1788 
1789 	vfp = &vt_font_loader;
1790 	vfp->vf_height = fi->fi_height;
1791 	vfp->vf_width = fi->fi_width;
1792 	for (unsigned i = 0; i < VFNT_MAPS; i++) {
1793 		if (fi->fi_map_count[i] == 0)
1794 			continue;
1795 		vfp->vf_map_count[i] = fi->fi_map_count[i];
1796 		size = fi->fi_map_count[i] * sizeof(vfnt_map_t);
1797 		vfp->vf_map[i] = malloc(size, M_VT, M_WAITOK | M_ZERO);
1798 		bcopy((vfnt_map_t *)ptr, vfp->vf_map[i], size);
1799 		ptr += size;
1800 		ptr = roundup2(ptr, 8);
1801 	}
1802 	vfp->vf_bytes = malloc(fi->fi_bitmap_size, M_VT, M_WAITOK | M_ZERO);
1803 	bcopy((uint8_t *)ptr, vfp->vf_bytes, fi->fi_bitmap_size);
1804 	return (vfp);
1805 }
1806 
1807 static void
1808 vt_init_font(void *arg)
1809 {
1810 	struct font_info *fi;
1811 	struct vt_font *font;
1812 
1813 	fi = MD_FETCH(preload_kmdp, MODINFOMD_FONT, struct font_info *);
1814 
1815 	font = parse_font_info(fi);
1816 	if (font != NULL)
1817 		vt_font_assigned = font;
1818 }
1819 
1820 SYSINIT(vt_init_font, SI_SUB_KMEM, SI_ORDER_ANY, vt_init_font, &vt_consdev);
1821 
1822 static void
1823 vt_init_font_static(void)
1824 {
1825 	struct font_info *fi;
1826 	struct vt_font *font;
1827 
1828 	fi = MD_FETCH(preload_kmdp, MODINFOMD_FONT, struct font_info *);
1829 
1830 	font = parse_font_info_static(fi);
1831 	if (font != NULL)
1832 		vt_font_assigned = font;
1833 }
1834 
1835 static void
1836 vtterm_cnprobe(struct terminal *tm, struct consdev *cp)
1837 {
1838 	struct vt_driver *vtd, **vtdlist, *vtdbest = NULL;
1839 	struct vt_window *vw = tm->tm_softc;
1840 	struct vt_device *vd = vw->vw_device;
1841 	struct winsize wsz;
1842 	const term_attr_t *a;
1843 
1844 	if (!vty_enabled(VTY_VT))
1845 		return;
1846 
1847 	if (vd->vd_flags & VDF_INITIALIZED)
1848 		/* Initialization already done. */
1849 		return;
1850 
1851 	SET_FOREACH(vtdlist, vt_drv_set) {
1852 		vtd = *vtdlist;
1853 		if (vtd->vd_probe == NULL)
1854 			continue;
1855 		if (vtd->vd_probe(vd) == CN_DEAD)
1856 			continue;
1857 		if ((vtdbest == NULL) ||
1858 		    (vtd->vd_priority > vtdbest->vd_priority))
1859 			vtdbest = vtd;
1860 	}
1861 	if (vtdbest == NULL) {
1862 		cp->cn_pri = CN_DEAD;
1863 		vd->vd_flags |= VDF_DEAD;
1864 	} else {
1865 		vd->vd_driver = vtdbest;
1866 		cp->cn_pri = vd->vd_driver->vd_init(vd);
1867 	}
1868 
1869 	/* Check if driver's vt_init return CN_DEAD. */
1870 	if (cp->cn_pri == CN_DEAD) {
1871 		vd->vd_flags |= VDF_DEAD;
1872 	}
1873 
1874 	/* Initialize any early-boot keyboard drivers */
1875 	kbd_configure(KB_CONF_PROBE_ONLY);
1876 
1877 	vd->vd_unit = atomic_fetchadd_int(&vt_unit, 1);
1878 	vd->vd_windows[VT_CONSWINDOW] = vw;
1879 	sprintf(cp->cn_name, "ttyv%r", VT_UNIT(vw));
1880 
1881 	vt_init_font_static();
1882 
1883 	/* Attach default font if not in TEXTMODE. */
1884 	if ((vd->vd_flags & VDF_TEXTMODE) == 0) {
1885 		vw->vw_font = vtfont_ref(vt_font_assigned);
1886 		vt_compute_drawable_area(vw);
1887 	}
1888 
1889 	/*
1890 	 * The original screen size was faked (_VTDEFW x _VTDEFH). Now
1891 	 * that we have the real viewable size, fix it in the static
1892 	 * buffer.
1893 	 */
1894 	if (vd->vd_width != 0 && vd->vd_height != 0)
1895 		vt_termsize(vd, vw->vw_font, &vw->vw_buf.vb_scr_size);
1896 
1897 	/* We need to access terminal attributes from vtbuf */
1898 	vw->vw_buf.vb_terminal = tm;
1899 	vtbuf_init_early(&vw->vw_buf);
1900 	vt_winsize(vd, vw->vw_font, &wsz);
1901 	a = teken_get_curattr(&tm->tm_emulator);
1902 	terminal_set_winsize_blank(tm, &wsz, 1, a);
1903 
1904 	if (vtdbest != NULL) {
1905 #ifdef DEV_SPLASH
1906 		if (!vt_splash_cpu)
1907 			vtterm_splash(vd);
1908 #endif
1909 		vd->vd_flags |= VDF_INITIALIZED;
1910 	}
1911 }
1912 
1913 static int
1914 vtterm_cngetc(struct terminal *tm)
1915 {
1916 	struct vt_window *vw = tm->tm_softc;
1917 	struct vt_device *vd = vw->vw_device;
1918 	keyboard_t *kbd;
1919 	u_int c;
1920 
1921 	if (vw->vw_kbdsq && *vw->vw_kbdsq)
1922 		return (*vw->vw_kbdsq++);
1923 
1924 	/* Make sure the splash screen is not there. */
1925 	if (vd->vd_flags & VDF_SPLASH) {
1926 		/* Remove splash */
1927 		vd->vd_flags &= ~VDF_SPLASH;
1928 		/* Mark screen as invalid to force update */
1929 		vd->vd_flags |= VDF_INVALID;
1930 		vt_flush(vd);
1931 	}
1932 
1933 	/* Stripped down keyboard handler. */
1934 	if ((kbd = vd->vd_keyboard) == NULL)
1935 		return (-1);
1936 
1937 	/* Force keyboard input mode to K_XLATE */
1938 	vw->vw_kbdmode = K_XLATE;
1939 	vt_update_kbd_mode(vw, kbd);
1940 
1941 	/* Switch the keyboard to polling to make it work here. */
1942 	kbdd_poll(kbd, TRUE);
1943 	c = kbdd_read_char(kbd, 0);
1944 	kbdd_poll(kbd, FALSE);
1945 	if (c & RELKEY)
1946 		return (-1);
1947 
1948 	if (vw->vw_flags & VWF_SCROLL) {
1949 		vt_scrollmode_kbdevent(vw, c, 1/* Console mode */);
1950 		vt_flush(vd);
1951 		return (-1);
1952 	}
1953 
1954 	/* Stripped down handling of vt_kbdevent(), without locking, etc. */
1955 	if (c & SPCLKEY) {
1956 		switch (c) {
1957 		case SPCLKEY | SLK:
1958 			vt_save_kbd_state(vw, kbd);
1959 			if (vw->vw_kbdstate & SLKED) {
1960 				/* Turn scrolling on. */
1961 				vw->vw_flags |= VWF_SCROLL;
1962 				VTBUF_SLCK_ENABLE(&vw->vw_buf);
1963 			} else {
1964 				/* Turn scrolling off. */
1965 				vt_scroll(vw, 0, VHS_END);
1966 				vw->vw_flags &= ~VWF_SCROLL;
1967 				VTBUF_SLCK_DISABLE(&vw->vw_buf);
1968 			}
1969 			break;
1970 		case SPCLKEY | BTAB: /* Back tab (usually, shift+tab). */
1971 			vw->vw_kbdsq = "\x1b[Z";
1972 			break;
1973 		/* XXX: KDB can handle history. */
1974 		case SPCLKEY | FKEY | F(50): /* Arrow up. */
1975 			vw->vw_kbdsq = "\x1b[A";
1976 			break;
1977 		case SPCLKEY | FKEY | F(58): /* Arrow down. */
1978 			vw->vw_kbdsq = "\x1b[B";
1979 			break;
1980 		case SPCLKEY | FKEY | F(55): /* Arrow right. */
1981 			vw->vw_kbdsq = "\x1b[C";
1982 			break;
1983 		case SPCLKEY | FKEY | F(53): /* Arrow left. */
1984 			vw->vw_kbdsq = "\x1b[D";
1985 			break;
1986 		}
1987 
1988 		/* Force refresh to make scrollback work. */
1989 		vt_flush(vd);
1990 	} else if (KEYFLAGS(c) == 0) {
1991 		return (KEYCHAR(c));
1992 	}
1993 
1994 	if (vw->vw_kbdsq && *vw->vw_kbdsq)
1995 		return (*vw->vw_kbdsq++);
1996 
1997 	return (-1);
1998 }
1999 
2000 /*
2001  * These two do most of what we want to do in vtterm_cnungrab, but without
2002  * actually switching windows.  This is necessary for, e.g.,
2003  * vt_allocate_keyboard() to get the current keyboard into the state it needs to
2004  * be in without damaging the device's window state.
2005  *
2006  * Both return the current grab count, though it's only used in vtterm_cnungrab.
2007  */
2008 static int
2009 vtterm_cngrab_noswitch(struct vt_device *vd, struct vt_window *vw)
2010 {
2011 	keyboard_t *kbd;
2012 
2013 	if (vw->vw_grabbed++ > 0)
2014 		return (vw->vw_grabbed);
2015 
2016 	if ((kbd = vd->vd_keyboard) == NULL)
2017 		return (1);
2018 
2019 	/*
2020 	 * Make sure the keyboard is accessible even when the kbd device
2021 	 * driver is disabled.
2022 	 */
2023 	kbdd_enable(kbd);
2024 
2025 	/* We shall always use the keyboard in the XLATE mode here. */
2026 	vw->vw_prev_kbdmode = vw->vw_kbdmode;
2027 	vw->vw_kbdmode = K_XLATE;
2028 	vt_update_kbd_mode(vw, kbd);
2029 
2030 	kbdd_poll(kbd, TRUE);
2031 	return (1);
2032 }
2033 
2034 static int
2035 vtterm_cnungrab_noswitch(struct vt_device *vd, struct vt_window *vw)
2036 {
2037 	keyboard_t *kbd;
2038 
2039 	if (--vw->vw_grabbed > 0)
2040 		return (vw->vw_grabbed);
2041 
2042 	if ((kbd = vd->vd_keyboard) == NULL)
2043 		return (0);
2044 
2045 	kbdd_poll(kbd, FALSE);
2046 
2047 	vw->vw_kbdmode = vw->vw_prev_kbdmode;
2048 	vt_update_kbd_mode(vw, kbd);
2049 	kbdd_disable(kbd);
2050 	return (0);
2051 }
2052 
2053 static void
2054 vtterm_cngrab(struct terminal *tm)
2055 {
2056 	struct vt_device *vd;
2057 	struct vt_window *vw;
2058 
2059 	vw = tm->tm_softc;
2060 	vd = vw->vw_device;
2061 
2062 	/* To be restored after we ungrab. */
2063 	if (vd->vd_grabwindow == NULL)
2064 		vd->vd_grabwindow = vd->vd_curwindow;
2065 
2066 	if (!cold)
2067 		vt_window_switch(vw);
2068 
2069 	vtterm_cngrab_noswitch(vd, vw);
2070 }
2071 
2072 static void
2073 vtterm_cnungrab(struct terminal *tm)
2074 {
2075 	struct vt_device *vd;
2076 	struct vt_window *vw, *grabwindow;
2077 
2078 	vw = tm->tm_softc;
2079 	vd = vw->vw_device;
2080 
2081 	MPASS(vd->vd_grabwindow != NULL);
2082 	if (vtterm_cnungrab_noswitch(vd, vw) != 0)
2083 		return;
2084 
2085 	/*
2086 	 * We set `vd_grabwindow` to NULL before calling vt_window_switch()
2087 	 * because it allows the underlying vt(4) backend to distinguish a
2088 	 * "grab" from an "ungrab" of the console.
2089 	 *
2090 	 * This is used by `vt_drmfb` in drm-kmod to call either
2091 	 * fb_debug_enter() or fb_debug_leave() appropriately.
2092 	 */
2093 	grabwindow = vd->vd_grabwindow;
2094 	vd->vd_grabwindow = NULL;
2095 
2096 	if (!cold)
2097 		vt_window_switch(grabwindow);
2098 }
2099 
2100 static void
2101 vtterm_opened(struct terminal *tm, int opened)
2102 {
2103 	struct vt_window *vw = tm->tm_softc;
2104 	struct vt_device *vd = vw->vw_device;
2105 
2106 	VT_LOCK(vd);
2107 	vd->vd_flags &= ~VDF_SPLASH;
2108 	if (opened)
2109 		vw->vw_flags |= VWF_OPENED;
2110 	else {
2111 		vw->vw_flags &= ~VWF_OPENED;
2112 		/* TODO: finish ACQ/REL */
2113 	}
2114 	VT_UNLOCK(vd);
2115 }
2116 
2117 static int
2118 vt_change_font(struct vt_window *vw, struct vt_font *vf)
2119 {
2120 	struct vt_device *vd = vw->vw_device;
2121 	struct terminal *tm = vw->vw_terminal;
2122 	term_pos_t size;
2123 	struct winsize wsz;
2124 
2125 	/*
2126 	 * Changing fonts.
2127 	 *
2128 	 * Changing fonts is a little tricky.  We must prevent
2129 	 * simultaneous access to the device, so we must stop
2130 	 * the display timer and the terminal from accessing.
2131 	 * We need to switch fonts and grow our screen buffer.
2132 	 *
2133 	 * XXX: Right now the code uses terminal_mute() to
2134 	 * prevent data from reaching the console driver while
2135 	 * resizing the screen buffer.  This isn't elegant...
2136 	 */
2137 
2138 	VT_LOCK(vd);
2139 	if (vw->vw_flags & VWF_BUSY) {
2140 		/* Another process is changing the font. */
2141 		VT_UNLOCK(vd);
2142 		return (EBUSY);
2143 	}
2144 	vw->vw_flags |= VWF_BUSY;
2145 	VT_UNLOCK(vd);
2146 
2147 	vt_termsize(vd, vf, &size);
2148 	vt_winsize(vd, vf, &wsz);
2149 
2150 	/* Grow the screen buffer and terminal. */
2151 	terminal_mute(tm, 1);
2152 	vtbuf_grow(&vw->vw_buf, &size, vw->vw_buf.vb_history_size);
2153 	terminal_set_winsize_blank(tm, &wsz, 0, NULL);
2154 	terminal_set_cursor(tm, &vw->vw_buf.vb_cursor);
2155 	terminal_mute(tm, 0);
2156 
2157 	/* Actually apply the font to the current window. */
2158 	VT_LOCK(vd);
2159 	if (vw->vw_font != vf && vw->vw_font != NULL && vf != NULL) {
2160 		/*
2161 		 * In case vt_change_font called to update size we don't need
2162 		 * to update font link.
2163 		 */
2164 		vtfont_unref(vw->vw_font);
2165 		vw->vw_font = vtfont_ref(vf);
2166 	}
2167 
2168 	/*
2169 	 * Compute the drawable area and move the mouse cursor inside
2170 	 * it, in case the new area is smaller than the previous one.
2171 	 */
2172 	vt_compute_drawable_area(vw);
2173 	vd->vd_mx = min(vd->vd_mx,
2174 	    vw->vw_draw_area.tr_end.tp_col -
2175 	    vw->vw_draw_area.tr_begin.tp_col - 1);
2176 	vd->vd_my = min(vd->vd_my,
2177 	    vw->vw_draw_area.tr_end.tp_row -
2178 	    vw->vw_draw_area.tr_begin.tp_row - 1);
2179 
2180 	/* Force a full redraw the next timer tick. */
2181 	if (vd->vd_curwindow == vw) {
2182 		vd->vd_flags |= VDF_INVALID;
2183 		vt_resume_flush_timer(vw, 0);
2184 	}
2185 	vw->vw_flags &= ~VWF_BUSY;
2186 	VT_UNLOCK(vd);
2187 	return (0);
2188 }
2189 
2190 static int
2191 vt_proc_alive(struct vt_window *vw)
2192 {
2193 	struct proc *p;
2194 
2195 	if (vw->vw_smode.mode != VT_PROCESS)
2196 		return (FALSE);
2197 
2198 	if (vw->vw_proc) {
2199 		if ((p = pfind(vw->vw_pid)) != NULL)
2200 			PROC_UNLOCK(p);
2201 		if (vw->vw_proc == p)
2202 			return (TRUE);
2203 		vw->vw_proc = NULL;
2204 		vw->vw_smode.mode = VT_AUTO;
2205 		DPRINTF(1, "vt controlling process %d died\n", vw->vw_pid);
2206 		vw->vw_pid = 0;
2207 	}
2208 	return (FALSE);
2209 }
2210 
2211 static int
2212 signal_vt_rel(struct vt_window *vw)
2213 {
2214 
2215 	if (vw->vw_smode.mode != VT_PROCESS)
2216 		return (FALSE);
2217 	if (vw->vw_proc == NULL || vt_proc_alive(vw) == FALSE) {
2218 		vw->vw_proc = NULL;
2219 		vw->vw_pid = 0;
2220 		return (TRUE);
2221 	}
2222 	vw->vw_flags |= VWF_SWWAIT_REL;
2223 	PROC_LOCK(vw->vw_proc);
2224 	kern_psignal(vw->vw_proc, vw->vw_smode.relsig);
2225 	PROC_UNLOCK(vw->vw_proc);
2226 	DPRINTF(1, "sending relsig to %d\n", vw->vw_pid);
2227 	return (TRUE);
2228 }
2229 
2230 static int
2231 signal_vt_acq(struct vt_window *vw)
2232 {
2233 
2234 	if (vw->vw_smode.mode != VT_PROCESS)
2235 		return (FALSE);
2236 	if (vw == vw->vw_device->vd_windows[VT_CONSWINDOW])
2237 		cnavailable(vw->vw_terminal->consdev, FALSE);
2238 	if (vw->vw_proc == NULL || vt_proc_alive(vw) == FALSE) {
2239 		vw->vw_proc = NULL;
2240 		vw->vw_pid = 0;
2241 		return (TRUE);
2242 	}
2243 	vw->vw_flags |= VWF_SWWAIT_ACQ;
2244 	PROC_LOCK(vw->vw_proc);
2245 	kern_psignal(vw->vw_proc, vw->vw_smode.acqsig);
2246 	PROC_UNLOCK(vw->vw_proc);
2247 	DPRINTF(1, "sending acqsig to %d\n", vw->vw_pid);
2248 	return (TRUE);
2249 }
2250 
2251 static int
2252 finish_vt_rel(struct vt_window *vw, int release, int *s)
2253 {
2254 
2255 	if (vw->vw_flags & VWF_SWWAIT_REL) {
2256 		vw->vw_flags &= ~VWF_SWWAIT_REL;
2257 		if (release) {
2258 			taskqueue_drain_timeout(taskqueue_thread, &vw->vw_timeout_task_dead);
2259 			(void)vt_late_window_switch(vw->vw_switch_to);
2260 		}
2261 		return (0);
2262 	}
2263 	return (EINVAL);
2264 }
2265 
2266 static int
2267 finish_vt_acq(struct vt_window *vw)
2268 {
2269 
2270 	if (vw->vw_flags & VWF_SWWAIT_ACQ) {
2271 		vw->vw_flags &= ~VWF_SWWAIT_ACQ;
2272 		return (0);
2273 	}
2274 	return (EINVAL);
2275 }
2276 
2277 #ifndef SC_NO_CUTPASTE
2278 static void
2279 vt_mouse_terminput_button(struct vt_device *vd, int button)
2280 {
2281 	struct vt_window *vw;
2282 	struct vt_font *vf;
2283 	char mouseb[6] = "\x1B[M";
2284 	int i, x, y;
2285 
2286 	vw = vd->vd_curwindow;
2287 	vf = vw->vw_font;
2288 
2289 	/* Translate to char position. */
2290 	x = vd->vd_mx / vf->vf_width;
2291 	y = vd->vd_my / vf->vf_height;
2292 	/* Avoid overflow. */
2293 	x = MIN(x, 255 - '!');
2294 	y = MIN(y, 255 - '!');
2295 
2296 	mouseb[3] = ' ' + button;
2297 	mouseb[4] = '!' + x;
2298 	mouseb[5] = '!' + y;
2299 
2300 	for (i = 0; i < sizeof(mouseb); i++)
2301 		terminal_input_char(vw->vw_terminal, mouseb[i]);
2302 }
2303 
2304 static void
2305 vt_mouse_terminput(struct vt_device *vd, int type, int x, int y, int event,
2306     int cnt)
2307 {
2308 
2309 	switch (type) {
2310 	case MOUSE_BUTTON_EVENT:
2311 		if (cnt > 0) {
2312 			/* Mouse button pressed. */
2313 			if (event & MOUSE_BUTTON1DOWN)
2314 				vt_mouse_terminput_button(vd, 0);
2315 			if (event & MOUSE_BUTTON2DOWN)
2316 				vt_mouse_terminput_button(vd, 1);
2317 			if (event & MOUSE_BUTTON3DOWN)
2318 				vt_mouse_terminput_button(vd, 2);
2319 		} else {
2320 			/* Mouse button released. */
2321 			vt_mouse_terminput_button(vd, 3);
2322 		}
2323 		break;
2324 #ifdef notyet
2325 	case MOUSE_MOTION_EVENT:
2326 		if (mouse->u.data.z < 0) {
2327 			/* Scroll up. */
2328 			sc_mouse_input_button(vd, 64);
2329 		} else if (mouse->u.data.z > 0) {
2330 			/* Scroll down. */
2331 			sc_mouse_input_button(vd, 65);
2332 		}
2333 		break;
2334 #endif
2335 	}
2336 }
2337 
2338 static void
2339 vt_mouse_paste(void)
2340 {
2341 	term_char_t *buf;
2342 	int i, len;
2343 
2344 	len = VD_PASTEBUFLEN(main_vd);
2345 	buf = VD_PASTEBUF(main_vd);
2346 	len /= sizeof(term_char_t);
2347 	for (i = 0; i < len; i++) {
2348 		if (TCHAR_CHARACTER(buf[i]) == '\0')
2349 			continue;
2350 		terminal_input_char(main_vd->vd_curwindow->vw_terminal,
2351 		    buf[i]);
2352 	}
2353 }
2354 
2355 void
2356 vt_mouse_event(int type, int x, int y, int event, int cnt, int mlevel)
2357 {
2358 	struct vt_device *vd;
2359 	struct vt_window *vw;
2360 	struct vt_font *vf;
2361 	term_pos_t size;
2362 	int len, mark;
2363 
2364 	vd = main_vd;
2365 	vw = vd->vd_curwindow;
2366 	vf = vw->vw_font;
2367 
2368 	if (vw->vw_flags & (VWF_MOUSE_HIDE | VWF_GRAPHICS))
2369 		/*
2370 		 * Either the mouse is disabled, or the window is in
2371 		 * "graphics mode". The graphics mode is usually set by
2372 		 * an X server, using the KDSETMODE ioctl.
2373 		 */
2374 		return;
2375 
2376 	if (vf == NULL)	/* Text mode. */
2377 		return;
2378 
2379 	/*
2380 	 * TODO: add flag about pointer position changed, to not redraw chars
2381 	 * under mouse pointer when nothing changed.
2382 	 */
2383 
2384 	if (vw->vw_mouse_level > 0)
2385 		vt_mouse_terminput(vd, type, x, y, event, cnt);
2386 
2387 	switch (type) {
2388 	case MOUSE_ACTION:
2389 	case MOUSE_MOTION_EVENT:
2390 		/* Movement */
2391 		x += vd->vd_mx;
2392 		y += vd->vd_my;
2393 
2394 		vt_termsize(vd, vf, &size);
2395 
2396 		/* Apply limits. */
2397 		x = MAX(x, 0);
2398 		y = MAX(y, 0);
2399 		x = MIN(x, (size.tp_col * vf->vf_width) - 1);
2400 		y = MIN(y, (size.tp_row * vf->vf_height) - 1);
2401 
2402 		vd->vd_mx = x;
2403 		vd->vd_my = y;
2404 		if (vd->vd_mstate & (MOUSE_BUTTON1DOWN | VT_MOUSE_EXTENDBUTTON))
2405 			vtbuf_set_mark(&vw->vw_buf, VTB_MARK_MOVE,
2406 			    vd->vd_mx / vf->vf_width,
2407 			    vd->vd_my / vf->vf_height);
2408 
2409 		vt_resume_flush_timer(vw, 0);
2410 		return; /* Done */
2411 	case MOUSE_BUTTON_EVENT:
2412 		/* Buttons */
2413 		break;
2414 	default:
2415 		return; /* Done */
2416 	}
2417 
2418 	switch (event) {
2419 	case MOUSE_BUTTON1DOWN:
2420 		switch (cnt % 4) {
2421 		case 0:	/* up */
2422 			mark = VTB_MARK_END;
2423 			break;
2424 		case 1: /* single click: start cut operation */
2425 			mark = VTB_MARK_START;
2426 			break;
2427 		case 2:	/* double click: cut a word */
2428 			mark = VTB_MARK_WORD;
2429 			break;
2430 		default:	/* triple click: cut a line */
2431 			mark = VTB_MARK_ROW;
2432 			break;
2433 		}
2434 		break;
2435 	case VT_MOUSE_PASTEBUTTON:
2436 		switch (cnt) {
2437 		case 0:	/* up */
2438 			break;
2439 		default:
2440 			vt_mouse_paste();
2441 			/* clear paste buffer selection after paste */
2442 			vtbuf_set_mark(&vw->vw_buf, VTB_MARK_START,
2443 			    vd->vd_mx / vf->vf_width,
2444 			    vd->vd_my / vf->vf_height);
2445 			break;
2446 		}
2447 		return; /* Done */
2448 	case VT_MOUSE_EXTENDBUTTON:
2449 		switch (cnt) {
2450 		case 0:	/* up */
2451 			if (!(vd->vd_mstate & MOUSE_BUTTON1DOWN))
2452 				mark = VTB_MARK_EXTEND;
2453 			else
2454 				mark = VTB_MARK_NONE;
2455 			break;
2456 		default:
2457 			mark = VTB_MARK_EXTEND;
2458 			break;
2459 		}
2460 		break;
2461 	default:
2462 		return; /* Done */
2463 	}
2464 
2465 	/* Save buttons state. */
2466 	if (cnt > 0)
2467 		vd->vd_mstate |= event;
2468 	else
2469 		vd->vd_mstate &= ~event;
2470 
2471 	if (vtbuf_set_mark(&vw->vw_buf, mark, vd->vd_mx / vf->vf_width,
2472 	    vd->vd_my / vf->vf_height) == 1) {
2473 		/*
2474 		 * We have something marked to copy, so update pointer to
2475 		 * window with selection.
2476 		 */
2477 		vt_resume_flush_timer(vw, 0);
2478 
2479 		switch (mark) {
2480 		case VTB_MARK_END:
2481 		case VTB_MARK_WORD:
2482 		case VTB_MARK_ROW:
2483 		case VTB_MARK_EXTEND:
2484 			break;
2485 		default:
2486 			/* Other types of mark do not require to copy data. */
2487 			return;
2488 		}
2489 
2490 		/* Get current selection size in bytes. */
2491 		len = vtbuf_get_marked_len(&vw->vw_buf);
2492 		if (len <= 0)
2493 			return;
2494 
2495 		/* Reallocate buffer only if old one is too small. */
2496 		if (len > VD_PASTEBUFSZ(vd)) {
2497 			VD_PASTEBUF(vd) = realloc(VD_PASTEBUF(vd), len, M_VT,
2498 			    M_WAITOK | M_ZERO);
2499 			/* Update buffer size. */
2500 			VD_PASTEBUFSZ(vd) = len;
2501 		}
2502 		/* Request copy/paste buffer data, no more than `len' */
2503 		vtbuf_extract_marked(&vw->vw_buf, VD_PASTEBUF(vd), len, mark);
2504 
2505 		VD_PASTEBUFLEN(vd) = len;
2506 
2507 		/* XXX VD_PASTEBUF(vd) have to be freed on shutdown/unload. */
2508 	}
2509 }
2510 
2511 void
2512 vt_mouse_state(int show)
2513 {
2514 	struct vt_device *vd;
2515 	struct vt_window *vw;
2516 
2517 	vd = main_vd;
2518 	vw = vd->vd_curwindow;
2519 
2520 	switch (show) {
2521 	case VT_MOUSE_HIDE:
2522 		vw->vw_flags |= VWF_MOUSE_HIDE;
2523 		break;
2524 	case VT_MOUSE_SHOW:
2525 		vw->vw_flags &= ~VWF_MOUSE_HIDE;
2526 		break;
2527 	}
2528 
2529 	/* Mark mouse position as dirty. */
2530 	vt_mark_mouse_position_as_dirty(vd, false);
2531 	vt_resume_flush_timer(vw, 0);
2532 }
2533 #endif
2534 
2535 static int
2536 vtterm_mmap(struct terminal *tm, vm_ooffset_t offset, vm_paddr_t * paddr,
2537     int nprot, vm_memattr_t *memattr)
2538 {
2539 	struct vt_window *vw = tm->tm_softc;
2540 	struct vt_device *vd = vw->vw_device;
2541 
2542 	if (vd->vd_driver->vd_fb_mmap)
2543 		return (vd->vd_driver->vd_fb_mmap(vd, offset, paddr, nprot,
2544 		    memattr));
2545 
2546 	return (ENXIO);
2547 }
2548 
2549 static int
2550 vtterm_ioctl(struct terminal *tm, u_long cmd, caddr_t data,
2551     struct thread *td)
2552 {
2553 	struct vt_window *vw = tm->tm_softc;
2554 	struct vt_device *vd = vw->vw_device;
2555 	keyboard_t *kbd;
2556 	int error, i, s;
2557 #if defined(COMPAT_FREEBSD6) || defined(COMPAT_FREEBSD5) || \
2558     defined(COMPAT_FREEBSD4) || defined(COMPAT_43)
2559 	int ival;
2560 
2561 	switch (cmd) {
2562 	case _IO('v', 4):
2563 		cmd = VT_RELDISP;
2564 		break;
2565 	case _IO('v', 5):
2566 		cmd = VT_ACTIVATE;
2567 		break;
2568 	case _IO('v', 6):
2569 		cmd = VT_WAITACTIVE;
2570 		break;
2571 	case _IO('K', 20):
2572 		cmd = KDSKBSTATE;
2573 		break;
2574 	case _IO('K', 67):
2575 		cmd = KDSETRAD;
2576 		break;
2577 	case _IO('K', 7):
2578 		cmd = KDSKBMODE;
2579 		break;
2580 	case _IO('K', 8):
2581 		cmd = KDMKTONE;
2582 		break;
2583 	case _IO('K', 10):
2584 		cmd = KDSETMODE;
2585 		break;
2586 	case _IO('K', 13):
2587 		cmd = KDSBORDER;
2588 		break;
2589 	case _IO('K', 63):
2590 		cmd = KIOCSOUND;
2591 		break;
2592 	case _IO('K', 66):
2593 		cmd = KDSETLED;
2594 		break;
2595 	case _IO('c', 104):
2596 		cmd = CONS_SETWINORG;
2597 		break;
2598 	case _IO('c', 110):
2599 		cmd = CONS_SETKBD;
2600 		break;
2601 	default:
2602 		goto skip_thunk;
2603 	}
2604 	ival = IOCPARM_IVAL(data);
2605 	data = (caddr_t)&ival;
2606 skip_thunk:
2607 #endif
2608 
2609 	switch (cmd) {
2610 	case KDSETRAD:		/* set keyboard repeat & delay rates (old) */
2611 		if (*(int *)data & ~0x7f)
2612 			return (EINVAL);
2613 		/* FALLTHROUGH */
2614 	case GIO_KEYMAP:
2615 	case PIO_KEYMAP:
2616 	case GIO_DEADKEYMAP:
2617 	case PIO_DEADKEYMAP:
2618 #ifdef COMPAT_FREEBSD13
2619 	case OGIO_DEADKEYMAP:
2620 	case OPIO_DEADKEYMAP:
2621 #endif /* COMPAT_FREEBSD13 */
2622 	case GETFKEY:
2623 	case SETFKEY:
2624 	case KDGKBINFO:
2625 	case KDGKBTYPE:
2626 	case KDGETREPEAT:	/* get keyboard repeat & delay rates */
2627 	case KDSETREPEAT:	/* set keyboard repeat & delay rates (new) */
2628 	case KBADDKBD:		/* add keyboard to mux */
2629 	case KBRELKBD: {	/* release keyboard from mux */
2630 		error = 0;
2631 
2632 		mtx_lock(&Giant);
2633 		if ((kbd = vd->vd_keyboard) != NULL)
2634 			error = kbdd_ioctl(kbd, cmd, data);
2635 		mtx_unlock(&Giant);
2636 		if (error == ENOIOCTL) {
2637 			if (cmd == KDGKBTYPE) {
2638 				/* always return something? XXX */
2639 				*(int *)data = 0;
2640 			} else {
2641 				return (ENODEV);
2642 			}
2643 		}
2644 		return (error);
2645 	}
2646 	case KDGKBSTATE: {	/* get keyboard state (locks) */
2647 		error = 0;
2648 
2649 		if (vw == vd->vd_curwindow) {
2650 			mtx_lock(&Giant);
2651 			if ((kbd = vd->vd_keyboard) != NULL)
2652 				error = vt_save_kbd_state(vw, kbd);
2653 			mtx_unlock(&Giant);
2654 
2655 			if (error != 0)
2656 				return (error);
2657 		}
2658 
2659 		*(int *)data = vw->vw_kbdstate & LOCK_MASK;
2660 
2661 		return (error);
2662 	}
2663 	case KDSKBSTATE: {	/* set keyboard state (locks) */
2664 		int state;
2665 
2666 		state = *(int *)data;
2667 		if (state & ~LOCK_MASK)
2668 			return (EINVAL);
2669 
2670 		vw->vw_kbdstate &= ~LOCK_MASK;
2671 		vw->vw_kbdstate |= state;
2672 
2673 		error = 0;
2674 		if (vw == vd->vd_curwindow) {
2675 			mtx_lock(&Giant);
2676 			if ((kbd = vd->vd_keyboard) != NULL)
2677 				error = vt_update_kbd_state(vw, kbd);
2678 			mtx_unlock(&Giant);
2679 		}
2680 
2681 		return (error);
2682 	}
2683 	case KDGETLED: {	/* get keyboard LED status */
2684 		error = 0;
2685 
2686 		if (vw == vd->vd_curwindow) {
2687 			mtx_lock(&Giant);
2688 			if ((kbd = vd->vd_keyboard) != NULL)
2689 				error = vt_save_kbd_leds(vw, kbd);
2690 			mtx_unlock(&Giant);
2691 
2692 			if (error != 0)
2693 				return (error);
2694 		}
2695 
2696 		*(int *)data = vw->vw_kbdstate & LED_MASK;
2697 
2698 		return (error);
2699 	}
2700 	case KDSETLED: {	/* set keyboard LED status */
2701 		int leds;
2702 
2703 		leds = *(int *)data;
2704 		if (leds & ~LED_MASK)
2705 			return (EINVAL);
2706 
2707 		vw->vw_kbdstate &= ~LED_MASK;
2708 		vw->vw_kbdstate |= leds;
2709 
2710 		error = 0;
2711 		if (vw == vd->vd_curwindow) {
2712 			mtx_lock(&Giant);
2713 			if ((kbd = vd->vd_keyboard) != NULL)
2714 				error = vt_update_kbd_leds(vw, kbd);
2715 			mtx_unlock(&Giant);
2716 		}
2717 
2718 		return (error);
2719 	}
2720 	case KDGETMODE:
2721 		*(int *)data = (vw->vw_flags & VWF_GRAPHICS) ?
2722 		    KD_GRAPHICS : KD_TEXT;
2723 		return (0);
2724 	case KDGKBMODE: {
2725 		error = 0;
2726 
2727 		if (vw == vd->vd_curwindow) {
2728 			mtx_lock(&Giant);
2729 			if ((kbd = vd->vd_keyboard) != NULL)
2730 				error = vt_save_kbd_mode(vw, kbd);
2731 			mtx_unlock(&Giant);
2732 
2733 			if (error != 0)
2734 				return (error);
2735 		}
2736 
2737 		*(int *)data = vw->vw_kbdmode;
2738 
2739 		return (error);
2740 	}
2741 	case KDSKBMODE: {
2742 		int mode;
2743 
2744 		mode = *(int *)data;
2745 		switch (mode) {
2746 		case K_XLATE:
2747 		case K_RAW:
2748 		case K_CODE:
2749 			vw->vw_kbdmode = mode;
2750 
2751 			error = 0;
2752 			if (vw == vd->vd_curwindow) {
2753 				mtx_lock(&Giant);
2754 				if ((kbd = vd->vd_keyboard) != NULL)
2755 					error = vt_update_kbd_mode(vw, kbd);
2756 				mtx_unlock(&Giant);
2757 			}
2758 
2759 			return (error);
2760 		default:
2761 			return (EINVAL);
2762 		}
2763 	}
2764 	case FBIOGTYPE:
2765 	case FBIO_GETWINORG:	/* get frame buffer window origin */
2766 	case FBIO_GETDISPSTART:	/* get display start address */
2767 	case FBIO_GETLINEWIDTH:	/* get scan line width in bytes */
2768 	case FBIO_BLANK:	/* blank display */
2769 	case FBIO_GETRGBOFFS:	/* get RGB offsets */
2770 		if (vd->vd_driver->vd_fb_ioctl)
2771 			return (vd->vd_driver->vd_fb_ioctl(vd, cmd, data, td));
2772 		break;
2773 	case CONS_BLANKTIME:
2774 		/* XXX */
2775 		return (0);
2776 	case CONS_HISTORY:
2777 		if (*(int *)data < 0)
2778 			return EINVAL;
2779 		if (*(int *)data != vw->vw_buf.vb_history_size)
2780 			vtbuf_sethistory_size(&vw->vw_buf, *(int *)data);
2781 		return (0);
2782 	case CONS_CLRHIST:
2783 		vtbuf_clearhistory(&vw->vw_buf);
2784 		/*
2785 		 * Invalidate the entire visible window; it is not guaranteed
2786 		 * that this operation will be immediately followed by a scroll
2787 		 * event, so it would otherwise be possible for prior artifacts
2788 		 * to remain visible.
2789 		 */
2790 		VT_LOCK(vd);
2791 		if (vw == vd->vd_curwindow) {
2792 			vd->vd_flags |= VDF_INVALID;
2793 			vt_resume_flush_timer(vw, 0);
2794 		}
2795 		VT_UNLOCK(vd);
2796 		return (0);
2797 	case CONS_GET:
2798 		/* XXX */
2799 		*(int *)data = M_CG640x480;
2800 		return (0);
2801 	case CONS_BELLTYPE:	/* set bell type sound */
2802 		if ((*(int *)data) & CONS_QUIET_BELL)
2803 			vd->vd_flags |= VDF_QUIET_BELL;
2804 		else
2805 			vd->vd_flags &= ~VDF_QUIET_BELL;
2806 		return (0);
2807 	case CONS_GETINFO: {
2808 		vid_info_t *vi = (vid_info_t *)data;
2809 		if (vi->size != sizeof(struct vid_info))
2810 			return (EINVAL);
2811 
2812 		if (vw == vd->vd_curwindow) {
2813 			mtx_lock(&Giant);
2814 			if ((kbd = vd->vd_keyboard) != NULL)
2815 				vt_save_kbd_state(vw, kbd);
2816 			mtx_unlock(&Giant);
2817 		}
2818 
2819 		vi->m_num = vd->vd_curwindow->vw_number + 1;
2820 		vi->mk_keylock = vw->vw_kbdstate & LOCK_MASK;
2821 		/* XXX: other fields! */
2822 		return (0);
2823 	}
2824 	case CONS_GETVERS:
2825 		*(int *)data = 0x200;
2826 		return (0);
2827 	case CONS_MODEINFO:
2828 		/* XXX */
2829 		return (0);
2830 	case CONS_MOUSECTL: {
2831 		mouse_info_t *mouse = (mouse_info_t*)data;
2832 
2833 		/*
2834 		 * All the commands except MOUSE_SHOW nd MOUSE_HIDE
2835 		 * should not be applied to individual TTYs, but only to
2836 		 * consolectl.
2837 		 */
2838 		switch (mouse->operation) {
2839 		case MOUSE_HIDE:
2840 			if (vd->vd_flags & VDF_MOUSECURSOR) {
2841 				vd->vd_flags &= ~VDF_MOUSECURSOR;
2842 #ifndef SC_NO_CUTPASTE
2843 				vt_mouse_state(VT_MOUSE_HIDE);
2844 #endif
2845 			}
2846 			return (0);
2847 		case MOUSE_SHOW:
2848 			if (!(vd->vd_flags & VDF_MOUSECURSOR)) {
2849 				vd->vd_flags |= VDF_MOUSECURSOR;
2850 				vd->vd_mx = vd->vd_width / 2;
2851 				vd->vd_my = vd->vd_height / 2;
2852 #ifndef SC_NO_CUTPASTE
2853 				vt_mouse_state(VT_MOUSE_SHOW);
2854 #endif
2855 			}
2856 			return (0);
2857 		default:
2858 			return (EINVAL);
2859 		}
2860 	}
2861 	case PIO_VFONT: {
2862 		struct vt_font *vf;
2863 
2864 		if (vd->vd_flags & VDF_TEXTMODE)
2865 			return (ENOTSUP);
2866 
2867 		error = vtfont_load((void *)data, &vf);
2868 		if (error != 0)
2869 			return (error);
2870 
2871 		error = vt_change_font(vw, vf);
2872 		vtfont_unref(vf);
2873 		return (error);
2874 	}
2875 	case PIO_VFONT_DEFAULT: {
2876 		/* Reset to default font. */
2877 		error = vt_change_font(vw, vt_font_assigned);
2878 		return (error);
2879 	}
2880 	case GIO_SCRNMAP: {
2881 		scrmap_t *sm = (scrmap_t *)data;
2882 
2883 		/* We don't have screen maps, so return a handcrafted one. */
2884 		for (i = 0; i < 256; i++)
2885 			sm->scrmap[i] = i;
2886 		return (0);
2887 	}
2888 	case KDSETMODE:
2889 		/*
2890 		 * FIXME: This implementation is incomplete compared to
2891 		 * syscons.
2892 		 */
2893 		switch (*(int *)data) {
2894 		case KD_TEXT:
2895 		case KD_TEXT1:
2896 		case KD_PIXEL:
2897 			vw->vw_flags &= ~VWF_GRAPHICS;
2898 			break;
2899 		case KD_GRAPHICS:
2900 			vw->vw_flags |= VWF_GRAPHICS;
2901 			break;
2902 		}
2903 		return (0);
2904 	case KDENABIO:		/* allow io operations */
2905 		error = priv_check(td, PRIV_IO);
2906 		if (error != 0)
2907 			return (error);
2908 		error = securelevel_gt(td->td_ucred, 0);
2909 		if (error != 0)
2910 			return (error);
2911 #if defined(__i386__)
2912 		td->td_frame->tf_eflags |= PSL_IOPL;
2913 #elif defined(__amd64__)
2914 		td->td_frame->tf_rflags |= PSL_IOPL;
2915 #endif
2916 		return (0);
2917 	case KDDISABIO:		/* disallow io operations (default) */
2918 #if defined(__i386__)
2919 		td->td_frame->tf_eflags &= ~PSL_IOPL;
2920 #elif defined(__amd64__)
2921 		td->td_frame->tf_rflags &= ~PSL_IOPL;
2922 #endif
2923 		return (0);
2924 	case KDMKTONE:		/* sound the bell */
2925 		vtterm_beep(tm, *(u_int *)data);
2926 		return (0);
2927 	case KIOCSOUND:		/* make tone (*data) hz */
2928 		/* TODO */
2929 		return (0);
2930 	case CONS_SETKBD:	/* set the new keyboard */
2931 		mtx_lock(&Giant);
2932 		error = 0;
2933 		if (vd->vd_keyboard == NULL ||
2934 		    vd->vd_keyboard->kb_index != *(int *)data) {
2935 			kbd = kbd_get_keyboard(*(int *)data);
2936 			if (kbd == NULL) {
2937 				mtx_unlock(&Giant);
2938 				return (EINVAL);
2939 			}
2940 			i = kbd_allocate(kbd->kb_name, kbd->kb_unit,
2941 			    (void *)vd, vt_kbdevent, vd);
2942 			if (i >= 0) {
2943 				if ((kbd = vd->vd_keyboard) != NULL) {
2944 					vt_save_kbd_state(vd->vd_curwindow, kbd);
2945 					kbd_release(kbd, (void *)vd);
2946 				}
2947 				kbd = vd->vd_keyboard = kbd_get_keyboard(i);
2948 
2949 				vt_update_kbd_mode(vd->vd_curwindow, kbd);
2950 				vt_update_kbd_state(vd->vd_curwindow, kbd);
2951 			} else {
2952 				error = EPERM;	/* XXX */
2953 			}
2954 		}
2955 		mtx_unlock(&Giant);
2956 		return (error);
2957 	case CONS_RELKBD:	/* release the current keyboard */
2958 		mtx_lock(&Giant);
2959 		error = 0;
2960 		if ((kbd = vd->vd_keyboard) != NULL) {
2961 			vt_save_kbd_state(vd->vd_curwindow, kbd);
2962 			error = kbd_release(kbd, (void *)vd);
2963 			if (error == 0) {
2964 				vd->vd_keyboard = NULL;
2965 			}
2966 		}
2967 		mtx_unlock(&Giant);
2968 		return (error);
2969 	case VT_ACTIVATE: {
2970 		int win;
2971 		win = *(int *)data - 1;
2972 		DPRINTF(5, "%s%d: VT_ACTIVATE ttyv%d ", SC_DRIVER_NAME,
2973 		    VT_UNIT(vw), win);
2974 		if ((win >= VT_MAXWINDOWS) || (win < 0))
2975 			return (EINVAL);
2976 		return (vt_proc_window_switch(vd->vd_windows[win]));
2977 	}
2978 	case VT_GETACTIVE:
2979 		*(int *)data = vd->vd_curwindow->vw_number + 1;
2980 		return (0);
2981 	case VT_GETINDEX:
2982 		*(int *)data = vw->vw_number + 1;
2983 		return (0);
2984 	case VT_LOCKSWITCH:
2985 		/* TODO: Check current state, switching can be in progress. */
2986 		if ((*(int *)data) == 0x01)
2987 			vw->vw_flags |= VWF_VTYLOCK;
2988 		else if ((*(int *)data) == 0x02)
2989 			vw->vw_flags &= ~VWF_VTYLOCK;
2990 		else
2991 			return (EINVAL);
2992 		return (0);
2993 	case VT_OPENQRY:
2994 		VT_LOCK(vd);
2995 		for (i = 0; i < VT_MAXWINDOWS; i++) {
2996 			vw = vd->vd_windows[i];
2997 			if (vw == NULL)
2998 				continue;
2999 			if (!(vw->vw_flags & VWF_OPENED)) {
3000 				*(int *)data = vw->vw_number + 1;
3001 				VT_UNLOCK(vd);
3002 				return (0);
3003 			}
3004 		}
3005 		VT_UNLOCK(vd);
3006 		return (EINVAL);
3007 	case VT_WAITACTIVE: {
3008 		unsigned int idx;
3009 
3010 		error = 0;
3011 
3012 		idx = *(unsigned int *)data;
3013 		if (idx > VT_MAXWINDOWS)
3014 			return (EINVAL);
3015 		if (idx > 0)
3016 			vw = vd->vd_windows[idx - 1];
3017 
3018 		VT_LOCK(vd);
3019 		while (vd->vd_curwindow != vw && error == 0)
3020 			error = cv_wait_sig(&vd->vd_winswitch, &vd->vd_lock);
3021 		VT_UNLOCK(vd);
3022 		return (error);
3023 	}
3024 	case VT_SETMODE: {	/* set screen switcher mode */
3025 		struct vt_mode *mode;
3026 		struct proc *p1;
3027 
3028 		mode = (struct vt_mode *)data;
3029 		DPRINTF(5, "%s%d: VT_SETMODE ", SC_DRIVER_NAME, VT_UNIT(vw));
3030 		if (vw->vw_smode.mode == VT_PROCESS) {
3031 			p1 = pfind(vw->vw_pid);
3032 			if (vw->vw_proc == p1 && vw->vw_proc != td->td_proc) {
3033 				if (p1)
3034 					PROC_UNLOCK(p1);
3035 				DPRINTF(5, "error EPERM\n");
3036 				return (EPERM);
3037 			}
3038 			if (p1)
3039 				PROC_UNLOCK(p1);
3040 		}
3041 		if (mode->mode == VT_AUTO) {
3042 			vw->vw_smode.mode = VT_AUTO;
3043 			vw->vw_proc = NULL;
3044 			vw->vw_pid = 0;
3045 			DPRINTF(5, "VT_AUTO, ");
3046 			if (vw == vw->vw_device->vd_windows[VT_CONSWINDOW])
3047 				cnavailable(vw->vw_terminal->consdev, TRUE);
3048 			/* were we in the middle of the vty switching process? */
3049 			if (finish_vt_rel(vw, TRUE, &s) == 0)
3050 				DPRINTF(5, "reset WAIT_REL, ");
3051 			if (finish_vt_acq(vw) == 0)
3052 				DPRINTF(5, "reset WAIT_ACQ, ");
3053 			return (0);
3054 		} else if (mode->mode == VT_PROCESS) {
3055 			if (!(_SIG_VALID(mode->relsig) &&
3056 			    _SIG_VALID(mode->acqsig) &&
3057 			    (mode->frsig == 0 || _SIG_VALID(mode->frsig)))) {
3058 				DPRINTF(5, "error EINVAL\n");
3059 				return (EINVAL);
3060 			}
3061 			DPRINTF(5, "VT_PROCESS %d, ", td->td_proc->p_pid);
3062 			bcopy(data, &vw->vw_smode, sizeof(struct vt_mode));
3063 			vw->vw_proc = td->td_proc;
3064 			vw->vw_pid = vw->vw_proc->p_pid;
3065 			if (vw == vw->vw_device->vd_windows[VT_CONSWINDOW])
3066 				cnavailable(vw->vw_terminal->consdev, FALSE);
3067 		} else {
3068 			DPRINTF(5, "VT_SETMODE failed, unknown mode %d\n",
3069 			    mode->mode);
3070 			return (EINVAL);
3071 		}
3072 		DPRINTF(5, "\n");
3073 		return (0);
3074 	}
3075 	case VT_GETMODE:	/* get screen switcher mode */
3076 		bcopy(&vw->vw_smode, data, sizeof(struct vt_mode));
3077 		return (0);
3078 
3079 	case VT_RELDISP:	/* screen switcher ioctl */
3080 		/*
3081 		 * This must be the current vty which is in the VT_PROCESS
3082 		 * switching mode...
3083 		 */
3084 		if ((vw != vd->vd_curwindow) || (vw->vw_smode.mode !=
3085 		    VT_PROCESS)) {
3086 			return (EINVAL);
3087 		}
3088 		/* ...and this process is controlling it. */
3089 		if (vw->vw_proc != td->td_proc) {
3090 			return (EPERM);
3091 		}
3092 		error = EINVAL;
3093 		switch(*(int *)data) {
3094 		case VT_FALSE:	/* user refuses to release screen, abort */
3095 			if ((error = finish_vt_rel(vw, FALSE, &s)) == 0)
3096 				DPRINTF(5, "%s%d: VT_RELDISP: VT_FALSE\n",
3097 				    SC_DRIVER_NAME, VT_UNIT(vw));
3098 			break;
3099 		case VT_TRUE:	/* user has released screen, go on */
3100 			/* finish_vt_rel(..., TRUE, ...) should not be locked */
3101 			if (vw->vw_flags & VWF_SWWAIT_REL) {
3102 				if ((error = finish_vt_rel(vw, TRUE, &s)) == 0)
3103 					DPRINTF(5, "%s%d: VT_RELDISP: VT_TRUE\n",
3104 					    SC_DRIVER_NAME, VT_UNIT(vw));
3105 			} else {
3106 				error = EINVAL;
3107 			}
3108 			return (error);
3109 		case VT_ACKACQ:	/* acquire acknowledged, switch completed */
3110 			if ((error = finish_vt_acq(vw)) == 0)
3111 				DPRINTF(5, "%s%d: VT_RELDISP: VT_ACKACQ\n",
3112 				    SC_DRIVER_NAME, VT_UNIT(vw));
3113 			break;
3114 		default:
3115 			break;
3116 		}
3117 		return (error);
3118 	}
3119 
3120 	return (ENOIOCTL);
3121 }
3122 
3123 static struct vt_window *
3124 vt_allocate_window(struct vt_device *vd, unsigned int window)
3125 {
3126 	struct vt_window *vw;
3127 	struct terminal *tm;
3128 	term_pos_t size;
3129 	struct winsize wsz;
3130 
3131 	vw = malloc(sizeof *vw, M_VT, M_WAITOK|M_ZERO);
3132 	vw->vw_device = vd;
3133 	vw->vw_number = window;
3134 	vw->vw_kbdmode = K_XLATE;
3135 
3136 	if ((vd->vd_flags & VDF_TEXTMODE) == 0) {
3137 		vw->vw_font = vtfont_ref(vt_font_assigned);
3138 		vt_compute_drawable_area(vw);
3139 	}
3140 
3141 	vt_termsize(vd, vw->vw_font, &size);
3142 	vt_winsize(vd, vw->vw_font, &wsz);
3143 	tm = vw->vw_terminal = terminal_alloc(&vt_termclass, vw);
3144 	vw->vw_buf.vb_terminal = tm;	/* must be set before vtbuf_init() */
3145 	vtbuf_init(&vw->vw_buf, &size);
3146 
3147 	terminal_set_winsize(tm, &wsz);
3148 	vd->vd_windows[window] = vw;
3149 	TIMEOUT_TASK_INIT(taskqueue_thread, &vw->vw_timeout_task_dead, 0, &vt_switch_timer, vw);
3150 
3151 	return (vw);
3152 }
3153 
3154 void
3155 vt_upgrade(struct vt_device *vd)
3156 {
3157 	struct vt_window *vw;
3158 	unsigned int i;
3159 	int register_handlers;
3160 
3161 	if (!vty_enabled(VTY_VT))
3162 		return;
3163 	if (main_vd->vd_driver == NULL)
3164 		return;
3165 
3166 	for (i = 0; i < VT_MAXWINDOWS; i++) {
3167 		vw = vd->vd_windows[i];
3168 		if (vw == NULL) {
3169 			/* New window. */
3170 			vw = vt_allocate_window(vd, i);
3171 		}
3172 		if (!(vw->vw_flags & VWF_READY)) {
3173 			TIMEOUT_TASK_INIT(taskqueue_thread, &vw->vw_timeout_task_dead, 0, &vt_switch_timer, vw);
3174 			terminal_maketty(vw->vw_terminal, "v%r", VT_UNIT(vw));
3175 			vw->vw_flags |= VWF_READY;
3176 			if (vw->vw_flags & VWF_CONSOLE) {
3177 				/* For existing console window. */
3178 				EVENTHANDLER_REGISTER(shutdown_pre_sync,
3179 				    vt_window_switch, vw, SHUTDOWN_PRI_DEFAULT);
3180 			}
3181 		}
3182 	}
3183 	VT_LOCK(vd);
3184 	if (vd->vd_curwindow == NULL)
3185 		vd->vd_curwindow = vd->vd_windows[VT_CONSWINDOW];
3186 
3187 	register_handlers = 0;
3188 	if (!(vd->vd_flags & VDF_ASYNC)) {
3189 		/* Attach keyboard. */
3190 		vt_allocate_keyboard(vd);
3191 
3192 		/* Init 25 Hz timer. */
3193 		callout_init_mtx(&vd->vd_timer, &vd->vd_lock, 0);
3194 
3195 		/*
3196 		 * Start timer when everything ready.
3197 		 * Note that the operations here are purposefully ordered.
3198 		 * We need to ensure vd_timer_armed is non-zero before we set
3199 		 * the VDF_ASYNC flag. That prevents this function from
3200 		 * racing with vt_resume_flush_timer() to update the
3201 		 * callout structure.
3202 		 */
3203 		atomic_add_acq_int(&vd->vd_timer_armed, 1);
3204 		vd->vd_flags |= VDF_ASYNC;
3205 		callout_reset(&vd->vd_timer, hz / VT_TIMERFREQ, vt_timer, vd);
3206 		register_handlers = 1;
3207 	}
3208 
3209 	VT_UNLOCK(vd);
3210 
3211 	/* Refill settings with new sizes. */
3212 	vt_resize(vd);
3213 
3214 	if (register_handlers) {
3215 		/* Register suspend/resume handlers. */
3216 		EVENTHANDLER_REGISTER(power_suspend_early, vt_suspend_handler,
3217 		    vd, EVENTHANDLER_PRI_ANY);
3218 		EVENTHANDLER_REGISTER(power_resume, vt_resume_handler, vd,
3219 		    EVENTHANDLER_PRI_ANY);
3220 	}
3221 }
3222 
3223 static void
3224 vt_resize(struct vt_device *vd)
3225 {
3226 	struct vt_window *vw;
3227 	int i;
3228 
3229 	for (i = 0; i < VT_MAXWINDOWS; i++) {
3230 		vw = vd->vd_windows[i];
3231 		VT_LOCK(vd);
3232 		/* Assign default font to window, if not textmode. */
3233 		if (!(vd->vd_flags & VDF_TEXTMODE) && vw->vw_font == NULL)
3234 			vw->vw_font = vtfont_ref(vt_font_assigned);
3235 		VT_UNLOCK(vd);
3236 
3237 		/* Resize terminal windows */
3238 		while (vt_change_font(vw, vw->vw_font) == EBUSY) {
3239 			DPRINTF(100, "%s: vt_change_font() is busy, "
3240 			    "window %d\n", __func__, i);
3241 		}
3242 	}
3243 }
3244 
3245 static void
3246 vt_replace_backend(const struct vt_driver *drv, void *softc)
3247 {
3248 	struct vt_device *vd;
3249 
3250 	vd = main_vd;
3251 
3252 	if (vd->vd_flags & VDF_ASYNC) {
3253 		/* Stop vt_flush periodic task. */
3254 		VT_LOCK(vd);
3255 		vt_suspend_flush_timer(vd);
3256 		VT_UNLOCK(vd);
3257 		/*
3258 		 * Mute current terminal until we done. vt_change_font (called
3259 		 * from vt_resize) will unmute it.
3260 		 */
3261 		terminal_mute(vd->vd_curwindow->vw_terminal, 1);
3262 	}
3263 
3264 	/*
3265 	 * Reset VDF_TEXTMODE flag, driver who require that flag (vt_vga) will
3266 	 * set it.
3267 	 */
3268 	VT_LOCK(vd);
3269 	vd->vd_flags &= ~VDF_TEXTMODE;
3270 
3271 	if (drv != NULL) {
3272 		/*
3273 		 * We want to upgrade from the current driver to the
3274 		 * given driver.
3275 		 */
3276 
3277 		vd->vd_prev_driver = vd->vd_driver;
3278 		vd->vd_prev_softc = vd->vd_softc;
3279 		vd->vd_driver = drv;
3280 		vd->vd_softc = softc;
3281 
3282 		vd->vd_driver->vd_init(vd);
3283 	} else if (vd->vd_prev_driver != NULL && vd->vd_prev_softc != NULL) {
3284 		/*
3285 		 * No driver given: we want to downgrade to the previous
3286 		 * driver.
3287 		 */
3288 		const struct vt_driver *old_drv;
3289 		void *old_softc;
3290 
3291 		old_drv = vd->vd_driver;
3292 		old_softc = vd->vd_softc;
3293 
3294 		vd->vd_driver = vd->vd_prev_driver;
3295 		vd->vd_softc = vd->vd_prev_softc;
3296 		vd->vd_prev_driver = NULL;
3297 		vd->vd_prev_softc = NULL;
3298 
3299 		vd->vd_flags |= VDF_DOWNGRADE;
3300 
3301 		vd->vd_driver->vd_init(vd);
3302 
3303 		if (old_drv->vd_fini)
3304 			old_drv->vd_fini(vd, old_softc);
3305 
3306 		vd->vd_flags &= ~VDF_DOWNGRADE;
3307 	}
3308 
3309 	VT_UNLOCK(vd);
3310 
3311 	/* Update windows sizes and initialize last items. */
3312 	vt_upgrade(vd);
3313 
3314 	/*
3315 	 * Give a chance to the new backend to run the post-switch code, for
3316 	 * instance to refresh the screen.
3317 	 */
3318 	if (vd->vd_driver->vd_postswitch)
3319 		vd->vd_driver->vd_postswitch(vd);
3320 
3321 #ifdef DEV_SPLASH
3322 	if (vd->vd_flags & VDF_SPLASH)
3323 		vtterm_splash(vd);
3324 #endif
3325 
3326 	if (vd->vd_flags & VDF_ASYNC) {
3327 		/* Allow to put chars now. */
3328 		terminal_mute(vd->vd_curwindow->vw_terminal, 0);
3329 		/* Rerun timer for screen updates. */
3330 		vt_resume_flush_timer(vd->vd_curwindow, 0);
3331 	}
3332 
3333 	/*
3334 	 * Register as console. If it already registered, cnadd() will ignore
3335 	 * it.
3336 	 */
3337 	termcn_cnregister(vd->vd_windows[VT_CONSWINDOW]->vw_terminal);
3338 }
3339 
3340 static void
3341 vt_suspend_handler(void *priv, enum power_stype stype)
3342 {
3343 	struct vt_device *vd;
3344 
3345 	vd = priv;
3346 	vd->vd_flags |= VDF_SUSPENDED;
3347 	if (vd->vd_driver != NULL && vd->vd_driver->vd_suspend != NULL)
3348 		vd->vd_driver->vd_suspend(vd);
3349 }
3350 
3351 static void
3352 vt_resume_handler(void *priv, enum power_stype stype)
3353 {
3354 	struct vt_device *vd;
3355 
3356 	vd = priv;
3357 	if (vd->vd_driver != NULL && vd->vd_driver->vd_resume != NULL)
3358 		vd->vd_driver->vd_resume(vd);
3359 	vd->vd_flags &= ~VDF_SUSPENDED;
3360 }
3361 
3362 int
3363 vt_allocate(const struct vt_driver *drv, void *softc)
3364 {
3365 
3366 	if (!vty_enabled(VTY_VT))
3367 		return (EINVAL);
3368 
3369 	if (main_vd->vd_driver == NULL) {
3370 		main_vd->vd_driver = drv;
3371 		printf("VT: initialize with new VT driver \"%s\".\n",
3372 		    drv->vd_name);
3373 	} else {
3374 		/*
3375 		 * Check if have rights to replace current driver. For example:
3376 		 * it is bad idea to replace KMS driver with generic VGA one.
3377 		 */
3378 		if (drv->vd_priority <= main_vd->vd_driver->vd_priority) {
3379 			printf("VT: Driver priority %d too low. Current %d\n ",
3380 			    drv->vd_priority, main_vd->vd_driver->vd_priority);
3381 			return (EEXIST);
3382 		}
3383 		printf("VT: Replacing driver \"%s\" with new \"%s\".\n",
3384 		    main_vd->vd_driver->vd_name, drv->vd_name);
3385 	}
3386 
3387 	vt_replace_backend(drv, softc);
3388 
3389 	return (0);
3390 }
3391 
3392 int
3393 vt_deallocate(const struct vt_driver *drv, void *softc)
3394 {
3395 
3396 	if (!vty_enabled(VTY_VT))
3397 		return (EINVAL);
3398 
3399 	if (main_vd->vd_prev_driver == NULL ||
3400 	    main_vd->vd_driver != drv ||
3401 	    main_vd->vd_softc != softc)
3402 		return (EPERM);
3403 
3404 	printf("VT: Switching back from \"%s\" to \"%s\".\n",
3405 	    main_vd->vd_driver->vd_name, main_vd->vd_prev_driver->vd_name);
3406 
3407 	vt_replace_backend(NULL, NULL);
3408 
3409 	return (0);
3410 }
3411 
3412 void
3413 vt_suspend(struct vt_device *vd)
3414 {
3415 	int error;
3416 
3417 	if (vt_suspendswitch == 0)
3418 		return;
3419 	/* Save current window. */
3420 	vd->vd_savedwindow = vd->vd_curwindow;
3421 	/* Ask holding process to free window and switch to console window */
3422 	vt_proc_window_switch(vd->vd_windows[VT_CONSWINDOW]);
3423 
3424 	/* Wait for the window switch to complete. */
3425 	error = 0;
3426 	VT_LOCK(vd);
3427 	while (vd->vd_curwindow != vd->vd_windows[VT_CONSWINDOW] && error == 0)
3428 		error = cv_wait_sig(&vd->vd_winswitch, &vd->vd_lock);
3429 	VT_UNLOCK(vd);
3430 }
3431 
3432 void
3433 vt_resume(struct vt_device *vd)
3434 {
3435 
3436 	if (vt_suspendswitch == 0)
3437 		return;
3438 	/* Switch back to saved window, if any */
3439 	vt_proc_window_switch(vd->vd_savedwindow);
3440 	vd->vd_savedwindow = NULL;
3441 }
3442