xref: /linux/drivers/gpu/drm/vmwgfx/vmwgfx_blit.c (revision 570f7e331f5febb30f1384817463c7e42b65ca7d)
1 // SPDX-License-Identifier: GPL-2.0 OR MIT
2 /**************************************************************************
3  *
4  * Copyright 2017 VMware, Inc., Palo Alto, CA., USA
5  * All Rights Reserved.
6  *
7  * Permission is hereby granted, free of charge, to any person obtaining a
8  * copy of this software and associated documentation files (the
9  * "Software"), to deal in the Software without restriction, including
10  * without limitation the rights to use, copy, modify, merge, publish,
11  * distribute, sub license, and/or sell copies of the Software, and to
12  * permit persons to whom the Software is furnished to do so, subject to
13  * the following conditions:
14  *
15  * The above copyright notice and this permission notice (including the
16  * next paragraph) shall be included in all copies or substantial portions
17  * of the Software.
18  *
19  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
20  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
21  * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL
22  * THE COPYRIGHT HOLDERS, AUTHORS AND/OR ITS SUPPLIERS BE LIABLE FOR ANY CLAIM,
23  * DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
24  * OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
25  * USE OR OTHER DEALINGS IN THE SOFTWARE.
26  *
27  **************************************************************************/
28 
29 #include "vmwgfx_drv.h"
30 
31 #include "vmwgfx_bo.h"
32 #include <linux/highmem.h>
33 #include <linux/overflow.h>
34 
35 /*
36  * Template that implements find_first_diff() for a generic
37  * unsigned integer type. @size and return value are in bytes.
38  */
39 #define VMW_FIND_FIRST_DIFF(_type)			 \
40 static size_t vmw_find_first_diff_ ## _type		 \
41 	(const _type * dst, const _type * src, size_t size)\
42 {							 \
43 	size_t i;					 \
44 							 \
45 	for (i = 0; i < size; i += sizeof(_type)) {	 \
46 		if (*dst++ != *src++)			 \
47 			break;				 \
48 	}						 \
49 							 \
50 	return i;					 \
51 }
52 
53 
54 /*
55  * Template that implements find_last_diff() for a generic
56  * unsigned integer type. Pointers point to the item following the
57  * *end* of the area to be examined. @size and return value are in
58  * bytes.
59  */
60 #define VMW_FIND_LAST_DIFF(_type)					\
61 static ssize_t vmw_find_last_diff_ ## _type(				\
62 	const _type * dst, const _type * src, size_t size)		\
63 {									\
64 	while (size) {							\
65 		if (*--dst != *--src)					\
66 			break;						\
67 									\
68 		size -= sizeof(_type);					\
69 	}								\
70 	return size;							\
71 }
72 
73 
74 /*
75  * Instantiate find diff functions for relevant unsigned integer sizes,
76  * assuming that wider integers are faster (including aligning) up to the
77  * architecture native width, which is assumed to be 32 bit unless
78  * CONFIG_64BIT is defined.
79  */
80 VMW_FIND_FIRST_DIFF(u8);
81 VMW_FIND_LAST_DIFF(u8);
82 
83 VMW_FIND_FIRST_DIFF(u16);
84 VMW_FIND_LAST_DIFF(u16);
85 
86 VMW_FIND_FIRST_DIFF(u32);
87 VMW_FIND_LAST_DIFF(u32);
88 
89 #ifdef CONFIG_64BIT
90 VMW_FIND_FIRST_DIFF(u64);
91 VMW_FIND_LAST_DIFF(u64);
92 #endif
93 
94 
95 /* We use size aligned copies. This computes (addr - align(addr)) */
96 #define SPILL(_var, _type) ((unsigned long) _var & (sizeof(_type) - 1))
97 
98 
99 /*
100  * Template to compute find_first_diff() for a certain integer type
101  * including a head copy for alignment, and adjustment of parameters
102  * for tail find or increased resolution find using an unsigned integer find
103  * of smaller width. If finding is complete, and resolution is sufficient,
104  * the macro executes a return statement. Otherwise it falls through.
105  */
106 #define VMW_TRY_FIND_FIRST_DIFF(_type)					\
107 do {									\
108 	unsigned int spill = SPILL(dst, _type);				\
109 	size_t diff_offs;						\
110 									\
111 	if (spill && spill == SPILL(src, _type) &&			\
112 	    sizeof(_type) - spill <= size) {				\
113 		spill = sizeof(_type) - spill;				\
114 		diff_offs = vmw_find_first_diff_u8(dst, src, spill);	\
115 		if (diff_offs < spill)					\
116 			return round_down(offset + diff_offs, granularity); \
117 									\
118 		dst += spill;						\
119 		src += spill;						\
120 		size -= spill;						\
121 		offset += spill;					\
122 		spill = 0;						\
123 	}								\
124 	if (!spill && !SPILL(src, _type)) {				\
125 		size_t to_copy = size &	 ~(sizeof(_type) - 1);		\
126 									\
127 		diff_offs = vmw_find_first_diff_ ## _type		\
128 			((_type *) dst, (_type *) src, to_copy);	\
129 		if (diff_offs >= size || granularity == sizeof(_type))	\
130 			return (offset + diff_offs);			\
131 									\
132 		dst += diff_offs;					\
133 		src += diff_offs;					\
134 		size -= diff_offs;					\
135 		offset += diff_offs;					\
136 	}								\
137 } while (0)								\
138 
139 
140 /**
141  * vmw_find_first_diff - find the first difference between dst and src
142  *
143  * @dst: The destination address
144  * @src: The source address
145  * @size: Number of bytes to compare
146  * @granularity: The granularity needed for the return value in bytes.
147  * return: The offset from find start where the first difference was
148  * encountered in bytes. If no difference was found, the function returns
149  * a value >= @size.
150  */
151 static size_t vmw_find_first_diff(const u8 *dst, const u8 *src, size_t size,
152 				  size_t granularity)
153 {
154 	size_t offset = 0;
155 
156 	/*
157 	 * Try finding with large integers if alignment allows, or we can
158 	 * fix it. Fall through if we need better resolution or alignment
159 	 * was bad.
160 	 */
161 #ifdef CONFIG_64BIT
162 	VMW_TRY_FIND_FIRST_DIFF(u64);
163 #endif
164 	VMW_TRY_FIND_FIRST_DIFF(u32);
165 	VMW_TRY_FIND_FIRST_DIFF(u16);
166 
167 	return round_down(offset + vmw_find_first_diff_u8(dst, src, size),
168 			  granularity);
169 }
170 
171 
172 /*
173  * Template to compute find_last_diff() for a certain integer type
174  * including a tail copy for alignment, and adjustment of parameters
175  * for head find or increased resolution find using an unsigned integer find
176  * of smaller width. If finding is complete, and resolution is sufficient,
177  * the macro executes a return statement. Otherwise it falls through.
178  */
179 #define VMW_TRY_FIND_LAST_DIFF(_type)					\
180 do {									\
181 	unsigned int spill = SPILL(dst, _type);				\
182 	ssize_t location;						\
183 	ssize_t diff_offs;						\
184 									\
185 	if (spill && spill <= size && spill == SPILL(src, _type)) {	\
186 		diff_offs = vmw_find_last_diff_u8(dst, src, spill);	\
187 		if (diff_offs) {					\
188 			location = size - spill + diff_offs - 1;	\
189 			return round_down(location, granularity);	\
190 		}							\
191 									\
192 		dst -= spill;						\
193 		src -= spill;						\
194 		size -= spill;						\
195 		spill = 0;						\
196 	}								\
197 	if (!spill && !SPILL(src, _type)) {				\
198 		size_t to_copy = round_down(size, sizeof(_type));	\
199 									\
200 		diff_offs = vmw_find_last_diff_ ## _type		\
201 			((_type *) dst, (_type *) src, to_copy);	\
202 		location = size - to_copy + diff_offs - sizeof(_type);	\
203 		if (location < 0 || granularity == sizeof(_type))	\
204 			return location;				\
205 									\
206 		dst -= to_copy - diff_offs;				\
207 		src -= to_copy - diff_offs;				\
208 		size -= to_copy - diff_offs;				\
209 	}								\
210 } while (0)
211 
212 
213 /**
214  * vmw_find_last_diff - find the last difference between dst and src
215  *
216  * @dst: The destination address
217  * @src: The source address
218  * @size: Number of bytes to compare
219  * @granularity: The granularity needed for the return value in bytes.
220  * return: The offset from find start where the last difference was
221  * encountered in bytes, or a negative value if no difference was found.
222  */
223 static ssize_t vmw_find_last_diff(const u8 *dst, const u8 *src, size_t size,
224 				  size_t granularity)
225 {
226 	dst += size;
227 	src += size;
228 
229 #ifdef CONFIG_64BIT
230 	VMW_TRY_FIND_LAST_DIFF(u64);
231 #endif
232 	VMW_TRY_FIND_LAST_DIFF(u32);
233 	VMW_TRY_FIND_LAST_DIFF(u16);
234 
235 	return round_down(vmw_find_last_diff_u8(dst, src, size) - 1,
236 			  granularity);
237 }
238 
239 
240 /**
241  * vmw_memcpy - A wrapper around kernel memcpy with allowing to plug it into a
242  * struct vmw_diff_cpy.
243  *
244  * @diff: The struct vmw_diff_cpy closure argument (unused).
245  * @dest: The copy destination.
246  * @src: The copy source.
247  * @n: Number of bytes to copy.
248  */
249 void vmw_memcpy(struct vmw_diff_cpy *diff, u8 *dest, const u8 *src, size_t n)
250 {
251 	memcpy(dest, src, n);
252 }
253 
254 
255 /**
256  * vmw_adjust_rect - Adjust rectangle coordinates for newly found difference
257  *
258  * @diff: The struct vmw_diff_cpy used to track the modified bounding box.
259  * @diff_offs: The offset from @diff->line_offset where the difference was
260  * found.
261  */
262 static void vmw_adjust_rect(struct vmw_diff_cpy *diff, size_t diff_offs)
263 {
264 	size_t offs = (diff_offs + diff->line_offset) / diff->cpp;
265 	struct drm_rect *rect = &diff->rect;
266 
267 	rect->x1 = min_t(int, rect->x1, offs);
268 	rect->x2 = max_t(int, rect->x2, offs + 1);
269 	rect->y1 = min_t(int, rect->y1, diff->line);
270 	rect->y2 = max_t(int, rect->y2, diff->line + 1);
271 }
272 
273 /**
274  * vmw_diff_memcpy - memcpy that creates a bounding box of modified content.
275  *
276  * @diff: The struct vmw_diff_cpy used to track the modified bounding box.
277  * @dest: The copy destination.
278  * @src: The copy source.
279  * @n: Number of bytes to copy.
280  *
281  * In order to correctly track the modified content, the field @diff->line must
282  * be pre-loaded with the current line number, the field @diff->line_offset must
283  * be pre-loaded with the line offset in bytes where the copy starts, and
284  * finally the field @diff->cpp need to be preloaded with the number of bytes
285  * per unit in the horizontal direction of the area we're examining.
286  * Typically bytes per pixel.
287  * This is needed to know the needed granularity of the difference computing
288  * operations. A higher cpp generally leads to faster execution at the cost of
289  * bounding box width precision.
290  */
291 void vmw_diff_memcpy(struct vmw_diff_cpy *diff, u8 *dest, const u8 *src,
292 		     size_t n)
293 {
294 	ssize_t csize, byte_len;
295 
296 	if (WARN_ON_ONCE(round_down(n, diff->cpp) != n))
297 		return;
298 
299 	/* TODO: Possibly use a single vmw_find_first_diff per line? */
300 	csize = vmw_find_first_diff(dest, src, n, diff->cpp);
301 	if (csize < n) {
302 		vmw_adjust_rect(diff, csize);
303 		byte_len = diff->cpp;
304 
305 		/*
306 		 * Starting from where first difference was found, find
307 		 * location of last difference, and then copy.
308 		 */
309 		diff->line_offset += csize;
310 		dest += csize;
311 		src += csize;
312 		n -= csize;
313 		csize = vmw_find_last_diff(dest, src, n, diff->cpp);
314 		if (csize >= 0) {
315 			byte_len += csize;
316 			vmw_adjust_rect(diff, csize);
317 		}
318 		memcpy(dest, src, byte_len);
319 	}
320 	diff->line_offset += n;
321 }
322 
323 /**
324  * struct vmw_bo_blit_line_data - Convenience argument to vmw_bo_cpu_blit_line
325  *
326  * @mapped_dst: Already mapped destination page index in @dst_pages.
327  * @dst_addr: Kernel virtual address of mapped destination page.
328  * @dst_pages: Array of destination bo pages.
329  * @dst_num_pages: Number of destination bo pages.
330  * @dst_prot: Destination bo page protection.
331  * @mapped_src: Already mapped source page index in @dst_pages.
332  * @src_addr: Kernel virtual address of mapped source page.
333  * @src_pages: Array of source bo pages.
334  * @src_num_pages: Number of source bo pages.
335  * @src_prot: Source bo page protection.
336  * @diff: Struct vmw_diff_cpy, in the end forwarded to the memcpy routine.
337  */
338 struct vmw_bo_blit_line_data {
339 	u32 mapped_dst;
340 	u8 *dst_addr;
341 	struct page **dst_pages;
342 	u32 dst_num_pages;
343 	pgprot_t dst_prot;
344 	u32 mapped_src;
345 	u8 *src_addr;
346 	struct page **src_pages;
347 	u32 src_num_pages;
348 	pgprot_t src_prot;
349 	struct vmw_diff_cpy *diff;
350 };
351 
352 /**
353  * vmw_bo_cpu_blit_line - Blit part of a line from one bo to another.
354  *
355  * @d: Blit data as described above.
356  * @dst_offset: Destination copy start offset from start of bo.
357  * @src_offset: Source copy start offset from start of bo.
358  * @bytes_to_copy: Number of bytes to copy in this line.
359  */
360 static int vmw_bo_cpu_blit_line(struct vmw_bo_blit_line_data *d,
361 				u32 dst_offset,
362 				u32 src_offset,
363 				u32 bytes_to_copy)
364 {
365 	struct vmw_diff_cpy *diff = d->diff;
366 
367 	while (bytes_to_copy) {
368 		u32 copy_size = bytes_to_copy;
369 		u32 dst_page = dst_offset >> PAGE_SHIFT;
370 		u32 src_page = src_offset >> PAGE_SHIFT;
371 		u32 dst_page_offset = dst_offset & ~PAGE_MASK;
372 		u32 src_page_offset = src_offset & ~PAGE_MASK;
373 		bool unmap_dst = d->dst_addr && dst_page != d->mapped_dst;
374 		bool unmap_src = d->src_addr && (src_page != d->mapped_src ||
375 						 unmap_dst);
376 
377 		copy_size = min_t(u32, copy_size, PAGE_SIZE - dst_page_offset);
378 		copy_size = min_t(u32, copy_size, PAGE_SIZE - src_page_offset);
379 
380 		if (unmap_src) {
381 			kunmap_atomic(d->src_addr);
382 			d->src_addr = NULL;
383 		}
384 
385 		if (unmap_dst) {
386 			kunmap_atomic(d->dst_addr);
387 			d->dst_addr = NULL;
388 		}
389 
390 		if (!d->dst_addr) {
391 			if (WARN_ON_ONCE(dst_page >= d->dst_num_pages))
392 				return -EINVAL;
393 
394 			d->dst_addr =
395 				kmap_atomic_prot(d->dst_pages[dst_page],
396 						 d->dst_prot);
397 			if (!d->dst_addr)
398 				return -ENOMEM;
399 
400 			d->mapped_dst = dst_page;
401 		}
402 
403 		if (!d->src_addr) {
404 			if (WARN_ON_ONCE(src_page >= d->src_num_pages))
405 				return -EINVAL;
406 
407 			d->src_addr =
408 				kmap_atomic_prot(d->src_pages[src_page],
409 						 d->src_prot);
410 			if (!d->src_addr)
411 				return -ENOMEM;
412 
413 			d->mapped_src = src_page;
414 		}
415 		diff->do_cpy(diff, d->dst_addr + dst_page_offset,
416 			     d->src_addr + src_page_offset, copy_size);
417 
418 		bytes_to_copy -= copy_size;
419 		dst_offset += copy_size;
420 		src_offset += copy_size;
421 	}
422 
423 	return 0;
424 }
425 
426 static void *map_external(struct vmw_bo *bo, struct iosys_map *map)
427 {
428 	struct vmw_private *vmw =
429 		container_of(bo->tbo.bdev, struct vmw_private, bdev);
430 	void *ptr = NULL;
431 	int ret;
432 
433 	if (drm_gem_is_imported(&bo->tbo.base)) {
434 		ret = dma_buf_vmap(bo->tbo.base.dma_buf, map);
435 		if (ret) {
436 			drm_dbg_driver(&vmw->drm,
437 				       "Wasn't able to map external bo!\n");
438 			goto out;
439 		}
440 		ptr = map->vaddr;
441 	} else {
442 		ptr = vmw_bo_map_and_cache(bo);
443 	}
444 
445 out:
446 	return ptr;
447 }
448 
449 static void unmap_external(struct vmw_bo *bo, struct iosys_map *map)
450 {
451 	if (drm_gem_is_imported(&bo->tbo.base))
452 		dma_buf_vunmap(bo->tbo.base.dma_buf, map);
453 	else
454 		vmw_bo_unmap(bo);
455 }
456 
457 static int vmw_external_bo_copy(struct vmw_bo *dst, u32 dst_offset,
458 				u32 dst_stride, struct vmw_bo *src,
459 				u32 src_offset, u32 src_stride,
460 				u32 width_in_bytes, u32 height,
461 				struct vmw_diff_cpy *diff)
462 {
463 	struct vmw_private *vmw =
464 		container_of(dst->tbo.bdev, struct vmw_private, bdev);
465 	size_t dst_size = dst->tbo.resource->size;
466 	size_t src_size = src->tbo.resource->size;
467 	size_t dst_end, src_end;
468 	struct iosys_map dst_map = {0};
469 	struct iosys_map src_map = {0};
470 	bool dst_mapped = false;
471 	bool src_mapped = false;
472 	int ret, i;
473 	int x_in_bytes;
474 	u8 *vsrc;
475 	u8 *vdst;
476 
477 	if (!height || !width_in_bytes)
478 		return 0;
479 
480 	if (!dst_stride || !src_stride)
481 		return -EINVAL;
482 	if (dst_stride < width_in_bytes || src_stride < width_in_bytes)
483 		return -EINVAL;
484 	if (check_mul_overflow((size_t)dst_stride, (size_t)height - 1, &dst_end) ||
485 	    check_add_overflow(dst_end, (size_t)width_in_bytes, &dst_end) ||
486 	    check_add_overflow((size_t)dst_offset, dst_end, &dst_end) ||
487 	    dst_end > dst_size ||
488 	    check_mul_overflow((size_t)src_stride, (size_t)height - 1, &src_end) ||
489 	    check_add_overflow(src_end, (size_t)width_in_bytes, &src_end) ||
490 	    check_add_overflow((size_t)src_offset, src_end, &src_end) ||
491 	    src_end > src_size) {
492 		drm_dbg_driver(&vmw->drm, "Out-of-bounds external BO copy\n");
493 		return -EINVAL;
494 	}
495 
496 	vsrc = map_external(src, &src_map);
497 	if (!vsrc) {
498 		drm_dbg_driver(&vmw->drm, "Wasn't able to map src\n");
499 		ret = -ENOMEM;
500 		goto out;
501 	}
502 	src_mapped = true;
503 
504 	vdst = map_external(dst, &dst_map);
505 	if (!vdst) {
506 		drm_dbg_driver(&vmw->drm, "Wasn't able to map dst\n");
507 		ret = -ENOMEM;
508 		goto out;
509 	}
510 	dst_mapped = true;
511 
512 	vsrc += src_offset;
513 	vdst += dst_offset;
514 	if (src_stride == dst_stride && width_in_bytes == dst_stride) {
515 		memcpy(vdst, vsrc, dst_stride * (size_t)height);
516 	} else {
517 		for (i = 0; i < height; ++i) {
518 			memcpy(vdst, vsrc, width_in_bytes);
519 			vsrc += src_stride;
520 			vdst += dst_stride;
521 		}
522 	}
523 
524 	x_in_bytes = (dst_offset % dst_stride);
525 	diff->rect.x1 =  x_in_bytes / diff->cpp;
526 	diff->rect.y1 = ((dst_offset - x_in_bytes) / dst_stride);
527 	diff->rect.x2 = diff->rect.x1 + width_in_bytes / diff->cpp;
528 	diff->rect.y2 = diff->rect.y1 + height;
529 
530 	ret = 0;
531 out:
532 	if (src_mapped)
533 		unmap_external(src, &src_map);
534 	if (dst_mapped)
535 		unmap_external(dst, &dst_map);
536 
537 	return ret;
538 }
539 
540 /**
541  * vmw_bo_cpu_blit - in-kernel cpu blit.
542  *
543  * @vmw_dst: Destination buffer object.
544  * @dst_offset: Destination offset of blit start in bytes.
545  * @dst_stride: Destination stride in bytes.
546  * @vmw_src: Source buffer object.
547  * @src_offset: Source offset of blit start in bytes.
548  * @src_stride: Source stride in bytes.
549  * @w: Width of blit.
550  * @h: Height of blit.
551  * @diff: The struct vmw_diff_cpy used to track the modified bounding box.
552  * return: Zero on success. Negative error value on failure. Will print out
553  * kernel warnings on caller bugs.
554  *
555  * Performs a CPU blit from one buffer object to another avoiding a full
556  * bo vmap which may exhaust- or fragment vmalloc space.
557  * On supported architectures (x86), we're using kmap_atomic which avoids
558  * cross-processor TLB- and cache flushes and may, on non-HIGHMEM systems
559  * reference already set-up mappings.
560  *
561  * Neither of the buffer objects may be placed in PCI memory
562  * (Fixed memory in TTM terminology) when using this function.
563  */
564 int vmw_bo_cpu_blit(struct vmw_bo *vmw_dst,
565 		    u32 dst_offset, u32 dst_stride,
566 		    struct vmw_bo *vmw_src,
567 		    u32 src_offset, u32 src_stride,
568 		    u32 w, u32 h,
569 		    struct vmw_diff_cpy *diff)
570 {
571 	struct ttm_buffer_object *src = &vmw_src->tbo;
572 	struct ttm_buffer_object *dst = &vmw_dst->tbo;
573 	struct ttm_operation_ctx ctx = {
574 		.interruptible = false,
575 		.no_wait_gpu = false
576 	};
577 	u32 j, initial_line = dst_offset / dst_stride;
578 	struct vmw_bo_blit_line_data d = {0};
579 	int ret = 0;
580 	struct page **dst_pages = NULL;
581 	struct page **src_pages = NULL;
582 	bool src_external = (src->ttm->page_flags & TTM_TT_FLAG_EXTERNAL) != 0;
583 	bool dst_external = (dst->ttm->page_flags & TTM_TT_FLAG_EXTERNAL) != 0;
584 
585 	if (WARN_ON(dst == src))
586 		return -EINVAL;
587 
588 	/* Buffer objects need to be either pinned or reserved: */
589 	if (!(dst->pin_count))
590 		dma_resv_assert_held(dst->base.resv);
591 	if (!(src->pin_count))
592 		dma_resv_assert_held(src->base.resv);
593 
594 	if (!ttm_tt_is_populated(dst->ttm)) {
595 		ret = dst->bdev->funcs->ttm_tt_populate(dst->bdev, dst->ttm, &ctx);
596 		if (ret)
597 			return ret;
598 	}
599 
600 	if (!ttm_tt_is_populated(src->ttm)) {
601 		ret = src->bdev->funcs->ttm_tt_populate(src->bdev, src->ttm, &ctx);
602 		if (ret)
603 			return ret;
604 	}
605 
606 	if (src_external || dst_external)
607 		return vmw_external_bo_copy(vmw_dst, dst_offset, dst_stride,
608 					    vmw_src, src_offset, src_stride,
609 					    w, h, diff);
610 
611 	if (!src->ttm->pages && src->ttm->sg) {
612 		src_pages = kvmalloc_objs(struct page *, src->ttm->num_pages);
613 		if (!src_pages)
614 			return -ENOMEM;
615 		ret = drm_prime_sg_to_page_array(src->ttm->sg, src_pages,
616 						 src->ttm->num_pages);
617 		if (ret)
618 			goto out;
619 	}
620 	if (!dst->ttm->pages && dst->ttm->sg) {
621 		dst_pages = kvmalloc_objs(struct page *, dst->ttm->num_pages);
622 		if (!dst_pages) {
623 			ret = -ENOMEM;
624 			goto out;
625 		}
626 		ret = drm_prime_sg_to_page_array(dst->ttm->sg, dst_pages,
627 						 dst->ttm->num_pages);
628 		if (ret)
629 			goto out;
630 	}
631 
632 	d.mapped_dst = 0;
633 	d.mapped_src = 0;
634 	d.dst_addr = NULL;
635 	d.src_addr = NULL;
636 	d.dst_pages = dst->ttm->pages ? dst->ttm->pages : dst_pages;
637 	d.src_pages = src->ttm->pages ? src->ttm->pages : src_pages;
638 	d.dst_num_pages = PFN_UP(dst->resource->size);
639 	d.src_num_pages = PFN_UP(src->resource->size);
640 	d.dst_prot = ttm_io_prot(dst, dst->resource, PAGE_KERNEL);
641 	d.src_prot = ttm_io_prot(src, src->resource, PAGE_KERNEL);
642 	d.diff = diff;
643 
644 	for (j = 0; j < h; ++j) {
645 		diff->line = j + initial_line;
646 		diff->line_offset = dst_offset % dst_stride;
647 		ret = vmw_bo_cpu_blit_line(&d, dst_offset, src_offset, w);
648 		if (ret)
649 			goto out;
650 
651 		dst_offset += dst_stride;
652 		src_offset += src_stride;
653 	}
654 out:
655 	if (d.src_addr)
656 		kunmap_atomic(d.src_addr);
657 	if (d.dst_addr)
658 		kunmap_atomic(d.dst_addr);
659 	kvfree(src_pages);
660 	kvfree(dst_pages);
661 
662 	return ret;
663 }
664