1 /* 2 * Copyright (C) 2015 Etnaviv Project 3 * 4 * This program is free software; you can redistribute it and/or modify it 5 * under the terms of the GNU General Public License version 2 as published by 6 * the Free Software Foundation. 7 * 8 * This program is distributed in the hope that it will be useful, but WITHOUT 9 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or 10 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for 11 * more details. 12 * 13 * You should have received a copy of the GNU General Public License along with 14 * this program. If not, see <http://www.gnu.org/licenses/>. 15 */ 16 17 #include <linux/kernel.h> 18 19 #include "etnaviv_gem.h" 20 #include "etnaviv_gpu.h" 21 22 #include "cmdstream.xml.h" 23 24 #define EXTRACT(val, field) (((val) & field##__MASK) >> field##__SHIFT) 25 26 struct etna_validation_state { 27 struct etnaviv_gpu *gpu; 28 const struct drm_etnaviv_gem_submit_reloc *relocs; 29 unsigned int num_relocs; 30 u32 *start; 31 }; 32 33 static const struct { 34 u16 offset; 35 u16 size; 36 } etnaviv_sensitive_states[] __initconst = { 37 #define ST(start, num) { (start) >> 2, (num) } 38 /* 2D */ 39 ST(0x1200, 1), 40 ST(0x1228, 1), 41 ST(0x1238, 1), 42 ST(0x1284, 1), 43 ST(0x128c, 1), 44 ST(0x1304, 1), 45 ST(0x1310, 1), 46 ST(0x1318, 1), 47 ST(0x12800, 4), 48 ST(0x128a0, 4), 49 ST(0x128c0, 4), 50 ST(0x12970, 4), 51 ST(0x12a00, 8), 52 ST(0x12b40, 8), 53 ST(0x12b80, 8), 54 ST(0x12ce0, 8), 55 /* 3D */ 56 ST(0x0644, 1), 57 ST(0x064c, 1), 58 ST(0x0680, 8), 59 ST(0x086c, 1), 60 ST(0x1028, 1), 61 ST(0x1410, 1), 62 ST(0x1430, 1), 63 ST(0x1458, 1), 64 ST(0x1460, 8), 65 ST(0x1480, 8), 66 ST(0x1500, 8), 67 ST(0x1520, 8), 68 ST(0x1608, 1), 69 ST(0x1610, 1), 70 ST(0x1658, 1), 71 ST(0x165c, 1), 72 ST(0x1664, 1), 73 ST(0x1668, 1), 74 ST(0x16a4, 1), 75 ST(0x16c0, 8), 76 ST(0x16e0, 8), 77 ST(0x1740, 8), 78 ST(0x17c0, 8), 79 ST(0x17e0, 8), 80 ST(0x2400, 14 * 16), 81 ST(0x3824, 1), 82 ST(0x10800, 32 * 16), 83 ST(0x14600, 16), 84 ST(0x14800, 8 * 8), 85 #undef ST 86 }; 87 88 #define ETNAVIV_STATES_SIZE (VIV_FE_LOAD_STATE_HEADER_OFFSET__MASK + 1u) 89 static DECLARE_BITMAP(etnaviv_states, ETNAVIV_STATES_SIZE); 90 91 void __init etnaviv_validate_init(void) 92 { 93 unsigned int i; 94 95 for (i = 0; i < ARRAY_SIZE(etnaviv_sensitive_states); i++) 96 bitmap_set(etnaviv_states, etnaviv_sensitive_states[i].offset, 97 etnaviv_sensitive_states[i].size); 98 } 99 100 static void etnaviv_warn_if_non_sensitive(struct etna_validation_state *state, 101 unsigned int buf_offset, unsigned int state_addr) 102 { 103 if (state->num_relocs && state->relocs->submit_offset < buf_offset) { 104 dev_warn_once(state->gpu->dev, 105 "%s: relocation for non-sensitive state 0x%x at offset %u\n", 106 __func__, state_addr, 107 state->relocs->submit_offset); 108 while (state->num_relocs && 109 state->relocs->submit_offset < buf_offset) { 110 state->relocs++; 111 state->num_relocs--; 112 } 113 } 114 } 115 116 static bool etnaviv_validate_load_state(struct etna_validation_state *state, 117 u32 *ptr, unsigned int state_offset, unsigned int num) 118 { 119 unsigned int size = min(ETNAVIV_STATES_SIZE, state_offset + num); 120 unsigned int st_offset = state_offset, buf_offset; 121 122 for_each_set_bit_from(st_offset, etnaviv_states, size) { 123 buf_offset = (ptr - state->start + 124 st_offset - state_offset) * 4; 125 126 etnaviv_warn_if_non_sensitive(state, buf_offset, st_offset * 4); 127 if (state->num_relocs && 128 state->relocs->submit_offset == buf_offset) { 129 state->relocs++; 130 state->num_relocs--; 131 continue; 132 } 133 134 dev_warn_ratelimited(state->gpu->dev, 135 "%s: load state touches restricted state 0x%x at offset %u\n", 136 __func__, st_offset * 4, buf_offset); 137 return false; 138 } 139 140 if (state->num_relocs) { 141 buf_offset = (ptr - state->start + num) * 4; 142 etnaviv_warn_if_non_sensitive(state, buf_offset, st_offset * 4 + 143 state->relocs->submit_offset - 144 buf_offset); 145 } 146 147 return true; 148 } 149 150 static uint8_t cmd_length[32] = { 151 [FE_OPCODE_DRAW_PRIMITIVES] = 4, 152 [FE_OPCODE_DRAW_INDEXED_PRIMITIVES] = 6, 153 [FE_OPCODE_DRAW_INSTANCED] = 4, 154 [FE_OPCODE_NOP] = 2, 155 [FE_OPCODE_STALL] = 2, 156 }; 157 158 bool etnaviv_cmd_validate_one(struct etnaviv_gpu *gpu, u32 *stream, 159 unsigned int size, 160 struct drm_etnaviv_gem_submit_reloc *relocs, 161 unsigned int reloc_size) 162 { 163 struct etna_validation_state state; 164 u32 *buf = stream; 165 u32 *end = buf + size; 166 167 state.gpu = gpu; 168 state.relocs = relocs; 169 state.num_relocs = reloc_size; 170 state.start = stream; 171 172 while (buf < end) { 173 u32 cmd = *buf; 174 unsigned int len, n, off; 175 unsigned int op = cmd >> 27; 176 177 switch (op) { 178 case FE_OPCODE_LOAD_STATE: 179 n = EXTRACT(cmd, VIV_FE_LOAD_STATE_HEADER_COUNT); 180 len = ALIGN(1 + n, 2); 181 if (buf + len > end) 182 break; 183 184 off = EXTRACT(cmd, VIV_FE_LOAD_STATE_HEADER_OFFSET); 185 if (!etnaviv_validate_load_state(&state, buf + 1, 186 off, n)) 187 return false; 188 break; 189 190 case FE_OPCODE_DRAW_2D: 191 n = EXTRACT(cmd, VIV_FE_DRAW_2D_HEADER_COUNT); 192 if (n == 0) 193 n = 256; 194 len = 2 + n * 2; 195 break; 196 197 default: 198 len = cmd_length[op]; 199 if (len == 0) { 200 dev_err(gpu->dev, "%s: op %u not permitted at offset %tu\n", 201 __func__, op, buf - state.start); 202 return false; 203 } 204 break; 205 } 206 207 buf += len; 208 } 209 210 if (buf > end) { 211 dev_err(gpu->dev, "%s: commands overflow end of buffer: %tu > %u\n", 212 __func__, buf - state.start, size); 213 return false; 214 } 215 216 return true; 217 } 218