xref: /linux/drivers/video/fbdev/core/fbmem.c (revision 6a61b70b43c9c4cbc7314bf6c8b5ba8b0d6e1e7b)
1 /*
2  *  linux/drivers/video/fbmem.c
3  *
4  *  Copyright (C) 1994 Martin Schaller
5  *
6  *	2001 - Documented with DocBook
7  *	- Brad Douglas <brad@neruo.com>
8  *
9  * This file is subject to the terms and conditions of the GNU General Public
10  * License.  See the file COPYING in the main directory of this archive
11  * for more details.
12  */
13 
14 #include <linux/module.h>
15 
16 #include <linux/compat.h>
17 #include <linux/types.h>
18 #include <linux/errno.h>
19 #include <linux/kernel.h>
20 #include <linux/major.h>
21 #include <linux/slab.h>
22 #include <linux/mm.h>
23 #include <linux/mman.h>
24 #include <linux/vt.h>
25 #include <linux/init.h>
26 #include <linux/linux_logo.h>
27 #include <linux/proc_fs.h>
28 #include <linux/seq_file.h>
29 #include <linux/console.h>
30 #include <linux/kmod.h>
31 #include <linux/err.h>
32 #include <linux/device.h>
33 #include <linux/efi.h>
34 #include <linux/fb.h>
35 #include <linux/fbcon.h>
36 #include <linux/mem_encrypt.h>
37 
38 #include <asm/fb.h>
39 
40 
41     /*
42      *  Frame buffer device initialization and setup routines
43      */
44 
45 #define FBPIXMAPSIZE	(1024 * 8)
46 
47 static DEFINE_MUTEX(registration_lock);
48 
49 struct fb_info *registered_fb[FB_MAX] __read_mostly;
50 EXPORT_SYMBOL(registered_fb);
51 
52 int num_registered_fb __read_mostly;
53 EXPORT_SYMBOL(num_registered_fb);
54 
55 static struct fb_info *get_fb_info(unsigned int idx)
56 {
57 	struct fb_info *fb_info;
58 
59 	if (idx >= FB_MAX)
60 		return ERR_PTR(-ENODEV);
61 
62 	mutex_lock(&registration_lock);
63 	fb_info = registered_fb[idx];
64 	if (fb_info)
65 		atomic_inc(&fb_info->count);
66 	mutex_unlock(&registration_lock);
67 
68 	return fb_info;
69 }
70 
71 static void put_fb_info(struct fb_info *fb_info)
72 {
73 	if (!atomic_dec_and_test(&fb_info->count))
74 		return;
75 	if (fb_info->fbops->fb_destroy)
76 		fb_info->fbops->fb_destroy(fb_info);
77 }
78 
79 int lock_fb_info(struct fb_info *info)
80 {
81 	mutex_lock(&info->lock);
82 	if (!info->fbops) {
83 		mutex_unlock(&info->lock);
84 		return 0;
85 	}
86 	return 1;
87 }
88 EXPORT_SYMBOL(lock_fb_info);
89 
90 /*
91  * Helpers
92  */
93 
94 int fb_get_color_depth(struct fb_var_screeninfo *var,
95 		       struct fb_fix_screeninfo *fix)
96 {
97 	int depth = 0;
98 
99 	if (fix->visual == FB_VISUAL_MONO01 ||
100 	    fix->visual == FB_VISUAL_MONO10)
101 		depth = 1;
102 	else {
103 		if (var->green.length == var->blue.length &&
104 		    var->green.length == var->red.length &&
105 		    var->green.offset == var->blue.offset &&
106 		    var->green.offset == var->red.offset)
107 			depth = var->green.length;
108 		else
109 			depth = var->green.length + var->red.length +
110 				var->blue.length;
111 	}
112 
113 	return depth;
114 }
115 EXPORT_SYMBOL(fb_get_color_depth);
116 
117 /*
118  * Data padding functions.
119  */
120 void fb_pad_aligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 s_pitch, u32 height)
121 {
122 	__fb_pad_aligned_buffer(dst, d_pitch, src, s_pitch, height);
123 }
124 EXPORT_SYMBOL(fb_pad_aligned_buffer);
125 
126 void fb_pad_unaligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 idx, u32 height,
127 				u32 shift_high, u32 shift_low, u32 mod)
128 {
129 	u8 mask = (u8) (0xfff << shift_high), tmp;
130 	int i, j;
131 
132 	for (i = height; i--; ) {
133 		for (j = 0; j < idx; j++) {
134 			tmp = dst[j];
135 			tmp &= mask;
136 			tmp |= *src >> shift_low;
137 			dst[j] = tmp;
138 			tmp = *src << shift_high;
139 			dst[j+1] = tmp;
140 			src++;
141 		}
142 		tmp = dst[idx];
143 		tmp &= mask;
144 		tmp |= *src >> shift_low;
145 		dst[idx] = tmp;
146 		if (shift_high < mod) {
147 			tmp = *src << shift_high;
148 			dst[idx+1] = tmp;
149 		}
150 		src++;
151 		dst += d_pitch;
152 	}
153 }
154 EXPORT_SYMBOL(fb_pad_unaligned_buffer);
155 
156 /*
157  * we need to lock this section since fb_cursor
158  * may use fb_imageblit()
159  */
160 char* fb_get_buffer_offset(struct fb_info *info, struct fb_pixmap *buf, u32 size)
161 {
162 	u32 align = buf->buf_align - 1, offset;
163 	char *addr = buf->addr;
164 
165 	/* If IO mapped, we need to sync before access, no sharing of
166 	 * the pixmap is done
167 	 */
168 	if (buf->flags & FB_PIXMAP_IO) {
169 		if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
170 			info->fbops->fb_sync(info);
171 		return addr;
172 	}
173 
174 	/* See if we fit in the remaining pixmap space */
175 	offset = buf->offset + align;
176 	offset &= ~align;
177 	if (offset + size > buf->size) {
178 		/* We do not fit. In order to be able to re-use the buffer,
179 		 * we must ensure no asynchronous DMA'ing or whatever operation
180 		 * is in progress, we sync for that.
181 		 */
182 		if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
183 			info->fbops->fb_sync(info);
184 		offset = 0;
185 	}
186 	buf->offset = offset + size;
187 	addr += offset;
188 
189 	return addr;
190 }
191 EXPORT_SYMBOL(fb_get_buffer_offset);
192 
193 #ifdef CONFIG_LOGO
194 
195 static inline unsigned safe_shift(unsigned d, int n)
196 {
197 	return n < 0 ? d >> -n : d << n;
198 }
199 
200 static void fb_set_logocmap(struct fb_info *info,
201 				   const struct linux_logo *logo)
202 {
203 	struct fb_cmap palette_cmap;
204 	u16 palette_green[16];
205 	u16 palette_blue[16];
206 	u16 palette_red[16];
207 	int i, j, n;
208 	const unsigned char *clut = logo->clut;
209 
210 	palette_cmap.start = 0;
211 	palette_cmap.len = 16;
212 	palette_cmap.red = palette_red;
213 	palette_cmap.green = palette_green;
214 	palette_cmap.blue = palette_blue;
215 	palette_cmap.transp = NULL;
216 
217 	for (i = 0; i < logo->clutsize; i += n) {
218 		n = logo->clutsize - i;
219 		/* palette_cmap provides space for only 16 colors at once */
220 		if (n > 16)
221 			n = 16;
222 		palette_cmap.start = 32 + i;
223 		palette_cmap.len = n;
224 		for (j = 0; j < n; ++j) {
225 			palette_cmap.red[j] = clut[0] << 8 | clut[0];
226 			palette_cmap.green[j] = clut[1] << 8 | clut[1];
227 			palette_cmap.blue[j] = clut[2] << 8 | clut[2];
228 			clut += 3;
229 		}
230 		fb_set_cmap(&palette_cmap, info);
231 	}
232 }
233 
234 static void  fb_set_logo_truepalette(struct fb_info *info,
235 					    const struct linux_logo *logo,
236 					    u32 *palette)
237 {
238 	static const unsigned char mask[] = { 0,0x80,0xc0,0xe0,0xf0,0xf8,0xfc,0xfe,0xff };
239 	unsigned char redmask, greenmask, bluemask;
240 	int redshift, greenshift, blueshift;
241 	int i;
242 	const unsigned char *clut = logo->clut;
243 
244 	/*
245 	 * We have to create a temporary palette since console palette is only
246 	 * 16 colors long.
247 	 */
248 	/* Bug: Doesn't obey msb_right ... (who needs that?) */
249 	redmask   = mask[info->var.red.length   < 8 ? info->var.red.length   : 8];
250 	greenmask = mask[info->var.green.length < 8 ? info->var.green.length : 8];
251 	bluemask  = mask[info->var.blue.length  < 8 ? info->var.blue.length  : 8];
252 	redshift   = info->var.red.offset   - (8 - info->var.red.length);
253 	greenshift = info->var.green.offset - (8 - info->var.green.length);
254 	blueshift  = info->var.blue.offset  - (8 - info->var.blue.length);
255 
256 	for ( i = 0; i < logo->clutsize; i++) {
257 		palette[i+32] = (safe_shift((clut[0] & redmask), redshift) |
258 				 safe_shift((clut[1] & greenmask), greenshift) |
259 				 safe_shift((clut[2] & bluemask), blueshift));
260 		clut += 3;
261 	}
262 }
263 
264 static void fb_set_logo_directpalette(struct fb_info *info,
265 					     const struct linux_logo *logo,
266 					     u32 *palette)
267 {
268 	int redshift, greenshift, blueshift;
269 	int i;
270 
271 	redshift = info->var.red.offset;
272 	greenshift = info->var.green.offset;
273 	blueshift = info->var.blue.offset;
274 
275 	for (i = 32; i < 32 + logo->clutsize; i++)
276 		palette[i] = i << redshift | i << greenshift | i << blueshift;
277 }
278 
279 static void fb_set_logo(struct fb_info *info,
280 			       const struct linux_logo *logo, u8 *dst,
281 			       int depth)
282 {
283 	int i, j, k;
284 	const u8 *src = logo->data;
285 	u8 xor = (info->fix.visual == FB_VISUAL_MONO01) ? 0xff : 0;
286 	u8 fg = 1, d;
287 
288 	switch (fb_get_color_depth(&info->var, &info->fix)) {
289 	case 1:
290 		fg = 1;
291 		break;
292 	case 2:
293 		fg = 3;
294 		break;
295 	default:
296 		fg = 7;
297 		break;
298 	}
299 
300 	if (info->fix.visual == FB_VISUAL_MONO01 ||
301 	    info->fix.visual == FB_VISUAL_MONO10)
302 		fg = ~((u8) (0xfff << info->var.green.length));
303 
304 	switch (depth) {
305 	case 4:
306 		for (i = 0; i < logo->height; i++)
307 			for (j = 0; j < logo->width; src++) {
308 				*dst++ = *src >> 4;
309 				j++;
310 				if (j < logo->width) {
311 					*dst++ = *src & 0x0f;
312 					j++;
313 				}
314 			}
315 		break;
316 	case 1:
317 		for (i = 0; i < logo->height; i++) {
318 			for (j = 0; j < logo->width; src++) {
319 				d = *src ^ xor;
320 				for (k = 7; k >= 0 && j < logo->width; k--) {
321 					*dst++ = ((d >> k) & 1) ? fg : 0;
322 					j++;
323 				}
324 			}
325 		}
326 		break;
327 	}
328 }
329 
330 /*
331  * Three (3) kinds of logo maps exist.  linux_logo_clut224 (>16 colors),
332  * linux_logo_vga16 (16 colors) and linux_logo_mono (2 colors).  Depending on
333  * the visual format and color depth of the framebuffer, the DAC, the
334  * pseudo_palette, and the logo data will be adjusted accordingly.
335  *
336  * Case 1 - linux_logo_clut224:
337  * Color exceeds the number of console colors (16), thus we set the hardware DAC
338  * using fb_set_cmap() appropriately.  The "needs_cmapreset"  flag will be set.
339  *
340  * For visuals that require color info from the pseudo_palette, we also construct
341  * one for temporary use. The "needs_directpalette" or "needs_truepalette" flags
342  * will be set.
343  *
344  * Case 2 - linux_logo_vga16:
345  * The number of colors just matches the console colors, thus there is no need
346  * to set the DAC or the pseudo_palette.  However, the bitmap is packed, ie,
347  * each byte contains color information for two pixels (upper and lower nibble).
348  * To be consistent with fb_imageblit() usage, we therefore separate the two
349  * nibbles into separate bytes. The "depth" flag will be set to 4.
350  *
351  * Case 3 - linux_logo_mono:
352  * This is similar with Case 2.  Each byte contains information for 8 pixels.
353  * We isolate each bit and expand each into a byte. The "depth" flag will
354  * be set to 1.
355  */
356 static struct logo_data {
357 	int depth;
358 	int needs_directpalette;
359 	int needs_truepalette;
360 	int needs_cmapreset;
361 	const struct linux_logo *logo;
362 } fb_logo __read_mostly;
363 
364 static void fb_rotate_logo_ud(const u8 *in, u8 *out, u32 width, u32 height)
365 {
366 	u32 size = width * height, i;
367 
368 	out += size - 1;
369 
370 	for (i = size; i--; )
371 		*out-- = *in++;
372 }
373 
374 static void fb_rotate_logo_cw(const u8 *in, u8 *out, u32 width, u32 height)
375 {
376 	int i, j, h = height - 1;
377 
378 	for (i = 0; i < height; i++)
379 		for (j = 0; j < width; j++)
380 				out[height * j + h - i] = *in++;
381 }
382 
383 static void fb_rotate_logo_ccw(const u8 *in, u8 *out, u32 width, u32 height)
384 {
385 	int i, j, w = width - 1;
386 
387 	for (i = 0; i < height; i++)
388 		for (j = 0; j < width; j++)
389 			out[height * (w - j) + i] = *in++;
390 }
391 
392 static void fb_rotate_logo(struct fb_info *info, u8 *dst,
393 			   struct fb_image *image, int rotate)
394 {
395 	u32 tmp;
396 
397 	if (rotate == FB_ROTATE_UD) {
398 		fb_rotate_logo_ud(image->data, dst, image->width,
399 				  image->height);
400 		image->dx = info->var.xres - image->width - image->dx;
401 		image->dy = info->var.yres - image->height - image->dy;
402 	} else if (rotate == FB_ROTATE_CW) {
403 		fb_rotate_logo_cw(image->data, dst, image->width,
404 				  image->height);
405 		tmp = image->width;
406 		image->width = image->height;
407 		image->height = tmp;
408 		tmp = image->dy;
409 		image->dy = image->dx;
410 		image->dx = info->var.xres - image->width - tmp;
411 	} else if (rotate == FB_ROTATE_CCW) {
412 		fb_rotate_logo_ccw(image->data, dst, image->width,
413 				   image->height);
414 		tmp = image->width;
415 		image->width = image->height;
416 		image->height = tmp;
417 		tmp = image->dx;
418 		image->dx = image->dy;
419 		image->dy = info->var.yres - image->height - tmp;
420 	}
421 
422 	image->data = dst;
423 }
424 
425 static void fb_do_show_logo(struct fb_info *info, struct fb_image *image,
426 			    int rotate, unsigned int num)
427 {
428 	unsigned int x;
429 
430 	if (rotate == FB_ROTATE_UR) {
431 		for (x = 0;
432 		     x < num && image->dx + image->width <= info->var.xres;
433 		     x++) {
434 			info->fbops->fb_imageblit(info, image);
435 			image->dx += image->width + 8;
436 		}
437 	} else if (rotate == FB_ROTATE_UD) {
438 		for (x = 0; x < num; x++) {
439 			info->fbops->fb_imageblit(info, image);
440 			image->dx -= image->width + 8;
441 		}
442 	} else if (rotate == FB_ROTATE_CW) {
443 		for (x = 0;
444 		     x < num && image->dy + image->height <= info->var.yres;
445 		     x++) {
446 			info->fbops->fb_imageblit(info, image);
447 			image->dy += image->height + 8;
448 		}
449 	} else if (rotate == FB_ROTATE_CCW) {
450 		for (x = 0; x < num; x++) {
451 			info->fbops->fb_imageblit(info, image);
452 			image->dy -= image->height + 8;
453 		}
454 	}
455 }
456 
457 static int fb_show_logo_line(struct fb_info *info, int rotate,
458 			     const struct linux_logo *logo, int y,
459 			     unsigned int n)
460 {
461 	u32 *palette = NULL, *saved_pseudo_palette = NULL;
462 	unsigned char *logo_new = NULL, *logo_rotate = NULL;
463 	struct fb_image image;
464 
465 	/* Return if the frame buffer is not mapped or suspended */
466 	if (logo == NULL || info->state != FBINFO_STATE_RUNNING ||
467 	    info->fbops->owner)
468 		return 0;
469 
470 	image.depth = 8;
471 	image.data = logo->data;
472 
473 	if (fb_logo.needs_cmapreset)
474 		fb_set_logocmap(info, logo);
475 
476 	if (fb_logo.needs_truepalette ||
477 	    fb_logo.needs_directpalette) {
478 		palette = kmalloc(256 * 4, GFP_KERNEL);
479 		if (palette == NULL)
480 			return 0;
481 
482 		if (fb_logo.needs_truepalette)
483 			fb_set_logo_truepalette(info, logo, palette);
484 		else
485 			fb_set_logo_directpalette(info, logo, palette);
486 
487 		saved_pseudo_palette = info->pseudo_palette;
488 		info->pseudo_palette = palette;
489 	}
490 
491 	if (fb_logo.depth <= 4) {
492 		logo_new = kmalloc(logo->width * logo->height, GFP_KERNEL);
493 		if (logo_new == NULL) {
494 			kfree(palette);
495 			if (saved_pseudo_palette)
496 				info->pseudo_palette = saved_pseudo_palette;
497 			return 0;
498 		}
499 		image.data = logo_new;
500 		fb_set_logo(info, logo, logo_new, fb_logo.depth);
501 	}
502 
503 	image.dx = 0;
504 	image.dy = y;
505 	image.width = logo->width;
506 	image.height = logo->height;
507 
508 	if (rotate) {
509 		logo_rotate = kmalloc(logo->width *
510 				      logo->height, GFP_KERNEL);
511 		if (logo_rotate)
512 			fb_rotate_logo(info, logo_rotate, &image, rotate);
513 	}
514 
515 	fb_do_show_logo(info, &image, rotate, n);
516 
517 	kfree(palette);
518 	if (saved_pseudo_palette != NULL)
519 		info->pseudo_palette = saved_pseudo_palette;
520 	kfree(logo_new);
521 	kfree(logo_rotate);
522 	return logo->height;
523 }
524 
525 
526 #ifdef CONFIG_FB_LOGO_EXTRA
527 
528 #define FB_LOGO_EX_NUM_MAX 10
529 static struct logo_data_extra {
530 	const struct linux_logo *logo;
531 	unsigned int n;
532 } fb_logo_ex[FB_LOGO_EX_NUM_MAX];
533 static unsigned int fb_logo_ex_num;
534 
535 void fb_append_extra_logo(const struct linux_logo *logo, unsigned int n)
536 {
537 	if (!n || fb_logo_ex_num == FB_LOGO_EX_NUM_MAX)
538 		return;
539 
540 	fb_logo_ex[fb_logo_ex_num].logo = logo;
541 	fb_logo_ex[fb_logo_ex_num].n = n;
542 	fb_logo_ex_num++;
543 }
544 
545 static int fb_prepare_extra_logos(struct fb_info *info, unsigned int height,
546 				  unsigned int yres)
547 {
548 	unsigned int i;
549 
550 	/* FIXME: logo_ex supports only truecolor fb. */
551 	if (info->fix.visual != FB_VISUAL_TRUECOLOR)
552 		fb_logo_ex_num = 0;
553 
554 	for (i = 0; i < fb_logo_ex_num; i++) {
555 		if (fb_logo_ex[i].logo->type != fb_logo.logo->type) {
556 			fb_logo_ex[i].logo = NULL;
557 			continue;
558 		}
559 		height += fb_logo_ex[i].logo->height;
560 		if (height > yres) {
561 			height -= fb_logo_ex[i].logo->height;
562 			fb_logo_ex_num = i;
563 			break;
564 		}
565 	}
566 	return height;
567 }
568 
569 static int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
570 {
571 	unsigned int i;
572 
573 	for (i = 0; i < fb_logo_ex_num; i++)
574 		y += fb_show_logo_line(info, rotate,
575 				       fb_logo_ex[i].logo, y, fb_logo_ex[i].n);
576 
577 	return y;
578 }
579 
580 #else /* !CONFIG_FB_LOGO_EXTRA */
581 
582 static inline int fb_prepare_extra_logos(struct fb_info *info,
583 					 unsigned int height,
584 					 unsigned int yres)
585 {
586 	return height;
587 }
588 
589 static inline int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
590 {
591 	return y;
592 }
593 
594 #endif /* CONFIG_FB_LOGO_EXTRA */
595 
596 
597 int fb_prepare_logo(struct fb_info *info, int rotate)
598 {
599 	int depth = fb_get_color_depth(&info->var, &info->fix);
600 	unsigned int yres;
601 
602 	memset(&fb_logo, 0, sizeof(struct logo_data));
603 
604 	if (info->flags & FBINFO_MISC_TILEBLITTING ||
605 	    info->fbops->owner)
606 		return 0;
607 
608 	if (info->fix.visual == FB_VISUAL_DIRECTCOLOR) {
609 		depth = info->var.blue.length;
610 		if (info->var.red.length < depth)
611 			depth = info->var.red.length;
612 		if (info->var.green.length < depth)
613 			depth = info->var.green.length;
614 	}
615 
616 	if (info->fix.visual == FB_VISUAL_STATIC_PSEUDOCOLOR && depth > 4) {
617 		/* assume console colormap */
618 		depth = 4;
619 	}
620 
621 	/* Return if no suitable logo was found */
622 	fb_logo.logo = fb_find_logo(depth);
623 
624 	if (!fb_logo.logo) {
625 		return 0;
626 	}
627 
628 	if (rotate == FB_ROTATE_UR || rotate == FB_ROTATE_UD)
629 		yres = info->var.yres;
630 	else
631 		yres = info->var.xres;
632 
633 	if (fb_logo.logo->height > yres) {
634 		fb_logo.logo = NULL;
635 		return 0;
636 	}
637 
638 	/* What depth we asked for might be different from what we get */
639 	if (fb_logo.logo->type == LINUX_LOGO_CLUT224)
640 		fb_logo.depth = 8;
641 	else if (fb_logo.logo->type == LINUX_LOGO_VGA16)
642 		fb_logo.depth = 4;
643 	else
644 		fb_logo.depth = 1;
645 
646 
647  	if (fb_logo.depth > 4 && depth > 4) {
648  		switch (info->fix.visual) {
649  		case FB_VISUAL_TRUECOLOR:
650  			fb_logo.needs_truepalette = 1;
651  			break;
652  		case FB_VISUAL_DIRECTCOLOR:
653  			fb_logo.needs_directpalette = 1;
654  			fb_logo.needs_cmapreset = 1;
655  			break;
656  		case FB_VISUAL_PSEUDOCOLOR:
657  			fb_logo.needs_cmapreset = 1;
658  			break;
659  		}
660  	}
661 
662 	return fb_prepare_extra_logos(info, fb_logo.logo->height, yres);
663 }
664 
665 int fb_show_logo(struct fb_info *info, int rotate)
666 {
667 	int y;
668 
669 	y = fb_show_logo_line(info, rotate, fb_logo.logo, 0,
670 			      num_online_cpus());
671 	y = fb_show_extra_logos(info, y, rotate);
672 
673 	return y;
674 }
675 #else
676 int fb_prepare_logo(struct fb_info *info, int rotate) { return 0; }
677 int fb_show_logo(struct fb_info *info, int rotate) { return 0; }
678 #endif /* CONFIG_LOGO */
679 EXPORT_SYMBOL(fb_prepare_logo);
680 EXPORT_SYMBOL(fb_show_logo);
681 
682 static void *fb_seq_start(struct seq_file *m, loff_t *pos)
683 {
684 	mutex_lock(&registration_lock);
685 	return (*pos < FB_MAX) ? pos : NULL;
686 }
687 
688 static void *fb_seq_next(struct seq_file *m, void *v, loff_t *pos)
689 {
690 	(*pos)++;
691 	return (*pos < FB_MAX) ? pos : NULL;
692 }
693 
694 static void fb_seq_stop(struct seq_file *m, void *v)
695 {
696 	mutex_unlock(&registration_lock);
697 }
698 
699 static int fb_seq_show(struct seq_file *m, void *v)
700 {
701 	int i = *(loff_t *)v;
702 	struct fb_info *fi = registered_fb[i];
703 
704 	if (fi)
705 		seq_printf(m, "%d %s\n", fi->node, fi->fix.id);
706 	return 0;
707 }
708 
709 static const struct seq_operations proc_fb_seq_ops = {
710 	.start	= fb_seq_start,
711 	.next	= fb_seq_next,
712 	.stop	= fb_seq_stop,
713 	.show	= fb_seq_show,
714 };
715 
716 /*
717  * We hold a reference to the fb_info in file->private_data,
718  * but if the current registered fb has changed, we don't
719  * actually want to use it.
720  *
721  * So look up the fb_info using the inode minor number,
722  * and just verify it against the reference we have.
723  */
724 static struct fb_info *file_fb_info(struct file *file)
725 {
726 	struct inode *inode = file_inode(file);
727 	int fbidx = iminor(inode);
728 	struct fb_info *info = registered_fb[fbidx];
729 
730 	if (info != file->private_data)
731 		info = NULL;
732 	return info;
733 }
734 
735 static ssize_t
736 fb_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)
737 {
738 	unsigned long p = *ppos;
739 	struct fb_info *info = file_fb_info(file);
740 	u8 *buffer, *dst;
741 	u8 __iomem *src;
742 	int c, cnt = 0, err = 0;
743 	unsigned long total_size;
744 
745 	if (!info || ! info->screen_base)
746 		return -ENODEV;
747 
748 	if (info->state != FBINFO_STATE_RUNNING)
749 		return -EPERM;
750 
751 	if (info->fbops->fb_read)
752 		return info->fbops->fb_read(info, buf, count, ppos);
753 
754 	total_size = info->screen_size;
755 
756 	if (total_size == 0)
757 		total_size = info->fix.smem_len;
758 
759 	if (p >= total_size)
760 		return 0;
761 
762 	if (count >= total_size)
763 		count = total_size;
764 
765 	if (count + p > total_size)
766 		count = total_size - p;
767 
768 	buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
769 			 GFP_KERNEL);
770 	if (!buffer)
771 		return -ENOMEM;
772 
773 	src = (u8 __iomem *) (info->screen_base + p);
774 
775 	if (info->fbops->fb_sync)
776 		info->fbops->fb_sync(info);
777 
778 	while (count) {
779 		c  = (count > PAGE_SIZE) ? PAGE_SIZE : count;
780 		dst = buffer;
781 		fb_memcpy_fromfb(dst, src, c);
782 		dst += c;
783 		src += c;
784 
785 		if (copy_to_user(buf, buffer, c)) {
786 			err = -EFAULT;
787 			break;
788 		}
789 		*ppos += c;
790 		buf += c;
791 		cnt += c;
792 		count -= c;
793 	}
794 
795 	kfree(buffer);
796 
797 	return (err) ? err : cnt;
798 }
799 
800 static ssize_t
801 fb_write(struct file *file, const char __user *buf, size_t count, loff_t *ppos)
802 {
803 	unsigned long p = *ppos;
804 	struct fb_info *info = file_fb_info(file);
805 	u8 *buffer, *src;
806 	u8 __iomem *dst;
807 	int c, cnt = 0, err = 0;
808 	unsigned long total_size;
809 
810 	if (!info || !info->screen_base)
811 		return -ENODEV;
812 
813 	if (info->state != FBINFO_STATE_RUNNING)
814 		return -EPERM;
815 
816 	if (info->fbops->fb_write)
817 		return info->fbops->fb_write(info, buf, count, ppos);
818 
819 	total_size = info->screen_size;
820 
821 	if (total_size == 0)
822 		total_size = info->fix.smem_len;
823 
824 	if (p > total_size)
825 		return -EFBIG;
826 
827 	if (count > total_size) {
828 		err = -EFBIG;
829 		count = total_size;
830 	}
831 
832 	if (count + p > total_size) {
833 		if (!err)
834 			err = -ENOSPC;
835 
836 		count = total_size - p;
837 	}
838 
839 	buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
840 			 GFP_KERNEL);
841 	if (!buffer)
842 		return -ENOMEM;
843 
844 	dst = (u8 __iomem *) (info->screen_base + p);
845 
846 	if (info->fbops->fb_sync)
847 		info->fbops->fb_sync(info);
848 
849 	while (count) {
850 		c = (count > PAGE_SIZE) ? PAGE_SIZE : count;
851 		src = buffer;
852 
853 		if (copy_from_user(src, buf, c)) {
854 			err = -EFAULT;
855 			break;
856 		}
857 
858 		fb_memcpy_tofb(dst, src, c);
859 		dst += c;
860 		src += c;
861 		*ppos += c;
862 		buf += c;
863 		cnt += c;
864 		count -= c;
865 	}
866 
867 	kfree(buffer);
868 
869 	return (cnt) ? cnt : err;
870 }
871 
872 int
873 fb_pan_display(struct fb_info *info, struct fb_var_screeninfo *var)
874 {
875 	struct fb_fix_screeninfo *fix = &info->fix;
876 	unsigned int yres = info->var.yres;
877 	int err = 0;
878 
879 	if (var->yoffset > 0) {
880 		if (var->vmode & FB_VMODE_YWRAP) {
881 			if (!fix->ywrapstep || (var->yoffset % fix->ywrapstep))
882 				err = -EINVAL;
883 			else
884 				yres = 0;
885 		} else if (!fix->ypanstep || (var->yoffset % fix->ypanstep))
886 			err = -EINVAL;
887 	}
888 
889 	if (var->xoffset > 0 && (!fix->xpanstep ||
890 				 (var->xoffset % fix->xpanstep)))
891 		err = -EINVAL;
892 
893 	if (err || !info->fbops->fb_pan_display ||
894 	    var->yoffset > info->var.yres_virtual - yres ||
895 	    var->xoffset > info->var.xres_virtual - info->var.xres)
896 		return -EINVAL;
897 
898 	if ((err = info->fbops->fb_pan_display(var, info)))
899 		return err;
900 	info->var.xoffset = var->xoffset;
901 	info->var.yoffset = var->yoffset;
902 	if (var->vmode & FB_VMODE_YWRAP)
903 		info->var.vmode |= FB_VMODE_YWRAP;
904 	else
905 		info->var.vmode &= ~FB_VMODE_YWRAP;
906 	return 0;
907 }
908 EXPORT_SYMBOL(fb_pan_display);
909 
910 static int fb_check_caps(struct fb_info *info, struct fb_var_screeninfo *var,
911 			 u32 activate)
912 {
913 	struct fb_event event;
914 	struct fb_blit_caps caps, fbcaps;
915 	int err = 0;
916 
917 	memset(&caps, 0, sizeof(caps));
918 	memset(&fbcaps, 0, sizeof(fbcaps));
919 	caps.flags = (activate & FB_ACTIVATE_ALL) ? 1 : 0;
920 	event.info = info;
921 	event.data = &caps;
922 	fb_notifier_call_chain(FB_EVENT_GET_REQ, &event);
923 	info->fbops->fb_get_caps(info, &fbcaps, var);
924 
925 	if (((fbcaps.x ^ caps.x) & caps.x) ||
926 	    ((fbcaps.y ^ caps.y) & caps.y) ||
927 	    (fbcaps.len < caps.len))
928 		err = -EINVAL;
929 
930 	return err;
931 }
932 
933 int
934 fb_set_var(struct fb_info *info, struct fb_var_screeninfo *var)
935 {
936 	int flags = info->flags;
937 	int ret = 0;
938 
939 	if (var->activate & FB_ACTIVATE_INV_MODE) {
940 		struct fb_videomode mode1, mode2;
941 
942 		fb_var_to_videomode(&mode1, var);
943 		fb_var_to_videomode(&mode2, &info->var);
944 		/* make sure we don't delete the videomode of current var */
945 		ret = fb_mode_is_equal(&mode1, &mode2);
946 
947 		if (!ret) {
948 		    struct fb_event event;
949 
950 		    event.info = info;
951 		    event.data = &mode1;
952 		    ret = fb_notifier_call_chain(FB_EVENT_MODE_DELETE, &event);
953 		}
954 
955 		if (!ret)
956 		    fb_delete_videomode(&mode1, &info->modelist);
957 
958 
959 		ret = (ret) ? -EINVAL : 0;
960 		goto done;
961 	}
962 
963 	if ((var->activate & FB_ACTIVATE_FORCE) ||
964 	    memcmp(&info->var, var, sizeof(struct fb_var_screeninfo))) {
965 		u32 activate = var->activate;
966 
967 		/* When using FOURCC mode, make sure the red, green, blue and
968 		 * transp fields are set to 0.
969 		 */
970 		if ((info->fix.capabilities & FB_CAP_FOURCC) &&
971 		    var->grayscale > 1) {
972 			if (var->red.offset     || var->green.offset    ||
973 			    var->blue.offset    || var->transp.offset   ||
974 			    var->red.length     || var->green.length    ||
975 			    var->blue.length    || var->transp.length   ||
976 			    var->red.msb_right  || var->green.msb_right ||
977 			    var->blue.msb_right || var->transp.msb_right)
978 				return -EINVAL;
979 		}
980 
981 		if (!info->fbops->fb_check_var) {
982 			*var = info->var;
983 			goto done;
984 		}
985 
986 		ret = info->fbops->fb_check_var(var, info);
987 
988 		if (ret)
989 			goto done;
990 
991 		if ((var->activate & FB_ACTIVATE_MASK) == FB_ACTIVATE_NOW) {
992 			struct fb_var_screeninfo old_var;
993 			struct fb_videomode mode;
994 
995 			if (info->fbops->fb_get_caps) {
996 				ret = fb_check_caps(info, var, activate);
997 
998 				if (ret)
999 					goto done;
1000 			}
1001 
1002 			old_var = info->var;
1003 			info->var = *var;
1004 
1005 			if (info->fbops->fb_set_par) {
1006 				ret = info->fbops->fb_set_par(info);
1007 
1008 				if (ret) {
1009 					info->var = old_var;
1010 					printk(KERN_WARNING "detected "
1011 						"fb_set_par error, "
1012 						"error code: %d\n", ret);
1013 					goto done;
1014 				}
1015 			}
1016 
1017 			fb_pan_display(info, &info->var);
1018 			fb_set_cmap(&info->cmap, info);
1019 			fb_var_to_videomode(&mode, &info->var);
1020 
1021 			if (info->modelist.prev && info->modelist.next &&
1022 			    !list_empty(&info->modelist))
1023 				ret = fb_add_videomode(&mode, &info->modelist);
1024 
1025 			if (!ret && (flags & FBINFO_MISC_USEREVENT)) {
1026 				struct fb_event event;
1027 				int evnt = (activate & FB_ACTIVATE_ALL) ?
1028 					FB_EVENT_MODE_CHANGE_ALL :
1029 					FB_EVENT_MODE_CHANGE;
1030 
1031 				info->flags &= ~FBINFO_MISC_USEREVENT;
1032 				event.info = info;
1033 				event.data = &mode;
1034 				fb_notifier_call_chain(evnt, &event);
1035 			}
1036 		}
1037 	}
1038 
1039  done:
1040 	return ret;
1041 }
1042 EXPORT_SYMBOL(fb_set_var);
1043 
1044 int
1045 fb_blank(struct fb_info *info, int blank)
1046 {
1047 	struct fb_event event;
1048 	int ret = -EINVAL, early_ret;
1049 
1050  	if (blank > FB_BLANK_POWERDOWN)
1051  		blank = FB_BLANK_POWERDOWN;
1052 
1053 	event.info = info;
1054 	event.data = &blank;
1055 
1056 	early_ret = fb_notifier_call_chain(FB_EARLY_EVENT_BLANK, &event);
1057 
1058 	if (info->fbops->fb_blank)
1059  		ret = info->fbops->fb_blank(blank, info);
1060 
1061 	if (!ret)
1062 		fb_notifier_call_chain(FB_EVENT_BLANK, &event);
1063 	else {
1064 		/*
1065 		 * if fb_blank is failed then revert effects of
1066 		 * the early blank event.
1067 		 */
1068 		if (!early_ret)
1069 			fb_notifier_call_chain(FB_R_EARLY_EVENT_BLANK, &event);
1070 	}
1071 
1072  	return ret;
1073 }
1074 EXPORT_SYMBOL(fb_blank);
1075 
1076 static long do_fb_ioctl(struct fb_info *info, unsigned int cmd,
1077 			unsigned long arg)
1078 {
1079 	struct fb_ops *fb;
1080 	struct fb_var_screeninfo var;
1081 	struct fb_fix_screeninfo fix;
1082 	struct fb_con2fbmap con2fb;
1083 	struct fb_cmap cmap_from;
1084 	struct fb_cmap_user cmap;
1085 	struct fb_event event;
1086 	void __user *argp = (void __user *)arg;
1087 	long ret = 0;
1088 
1089 	switch (cmd) {
1090 	case FBIOGET_VSCREENINFO:
1091 		if (!lock_fb_info(info))
1092 			return -ENODEV;
1093 		var = info->var;
1094 		unlock_fb_info(info);
1095 
1096 		ret = copy_to_user(argp, &var, sizeof(var)) ? -EFAULT : 0;
1097 		break;
1098 	case FBIOPUT_VSCREENINFO:
1099 		if (copy_from_user(&var, argp, sizeof(var)))
1100 			return -EFAULT;
1101 		console_lock();
1102 		if (!lock_fb_info(info)) {
1103 			console_unlock();
1104 			return -ENODEV;
1105 		}
1106 		info->flags |= FBINFO_MISC_USEREVENT;
1107 		ret = fb_set_var(info, &var);
1108 		info->flags &= ~FBINFO_MISC_USEREVENT;
1109 		unlock_fb_info(info);
1110 		console_unlock();
1111 		if (!ret && copy_to_user(argp, &var, sizeof(var)))
1112 			ret = -EFAULT;
1113 		break;
1114 	case FBIOGET_FSCREENINFO:
1115 		if (!lock_fb_info(info))
1116 			return -ENODEV;
1117 		fix = info->fix;
1118 		unlock_fb_info(info);
1119 
1120 		ret = copy_to_user(argp, &fix, sizeof(fix)) ? -EFAULT : 0;
1121 		break;
1122 	case FBIOPUTCMAP:
1123 		if (copy_from_user(&cmap, argp, sizeof(cmap)))
1124 			return -EFAULT;
1125 		ret = fb_set_user_cmap(&cmap, info);
1126 		break;
1127 	case FBIOGETCMAP:
1128 		if (copy_from_user(&cmap, argp, sizeof(cmap)))
1129 			return -EFAULT;
1130 		if (!lock_fb_info(info))
1131 			return -ENODEV;
1132 		cmap_from = info->cmap;
1133 		unlock_fb_info(info);
1134 		ret = fb_cmap_to_user(&cmap_from, &cmap);
1135 		break;
1136 	case FBIOPAN_DISPLAY:
1137 		if (copy_from_user(&var, argp, sizeof(var)))
1138 			return -EFAULT;
1139 		console_lock();
1140 		if (!lock_fb_info(info)) {
1141 			console_unlock();
1142 			return -ENODEV;
1143 		}
1144 		ret = fb_pan_display(info, &var);
1145 		unlock_fb_info(info);
1146 		console_unlock();
1147 		if (ret == 0 && copy_to_user(argp, &var, sizeof(var)))
1148 			return -EFAULT;
1149 		break;
1150 	case FBIO_CURSOR:
1151 		ret = -EINVAL;
1152 		break;
1153 	case FBIOGET_CON2FBMAP:
1154 		if (copy_from_user(&con2fb, argp, sizeof(con2fb)))
1155 			return -EFAULT;
1156 		if (con2fb.console < 1 || con2fb.console > MAX_NR_CONSOLES)
1157 			return -EINVAL;
1158 		con2fb.framebuffer = -1;
1159 		event.data = &con2fb;
1160 		if (!lock_fb_info(info))
1161 			return -ENODEV;
1162 		event.info = info;
1163 		fb_notifier_call_chain(FB_EVENT_GET_CONSOLE_MAP, &event);
1164 		unlock_fb_info(info);
1165 		ret = copy_to_user(argp, &con2fb, sizeof(con2fb)) ? -EFAULT : 0;
1166 		break;
1167 	case FBIOPUT_CON2FBMAP:
1168 		if (copy_from_user(&con2fb, argp, sizeof(con2fb)))
1169 			return -EFAULT;
1170 		if (con2fb.console < 1 || con2fb.console > MAX_NR_CONSOLES)
1171 			return -EINVAL;
1172 		if (con2fb.framebuffer >= FB_MAX)
1173 			return -EINVAL;
1174 		if (!registered_fb[con2fb.framebuffer])
1175 			request_module("fb%d", con2fb.framebuffer);
1176 		if (!registered_fb[con2fb.framebuffer]) {
1177 			ret = -EINVAL;
1178 			break;
1179 		}
1180 		event.data = &con2fb;
1181 		console_lock();
1182 		if (!lock_fb_info(info)) {
1183 			console_unlock();
1184 			return -ENODEV;
1185 		}
1186 		event.info = info;
1187 		ret = fb_notifier_call_chain(FB_EVENT_SET_CONSOLE_MAP, &event);
1188 		unlock_fb_info(info);
1189 		console_unlock();
1190 		break;
1191 	case FBIOBLANK:
1192 		console_lock();
1193 		if (!lock_fb_info(info)) {
1194 			console_unlock();
1195 			return -ENODEV;
1196 		}
1197 		info->flags |= FBINFO_MISC_USEREVENT;
1198 		ret = fb_blank(info, arg);
1199 		info->flags &= ~FBINFO_MISC_USEREVENT;
1200 		unlock_fb_info(info);
1201 		console_unlock();
1202 		break;
1203 	default:
1204 		if (!lock_fb_info(info))
1205 			return -ENODEV;
1206 		fb = info->fbops;
1207 		if (fb->fb_ioctl)
1208 			ret = fb->fb_ioctl(info, cmd, arg);
1209 		else
1210 			ret = -ENOTTY;
1211 		unlock_fb_info(info);
1212 	}
1213 	return ret;
1214 }
1215 
1216 static long fb_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
1217 {
1218 	struct fb_info *info = file_fb_info(file);
1219 
1220 	if (!info)
1221 		return -ENODEV;
1222 	return do_fb_ioctl(info, cmd, arg);
1223 }
1224 
1225 #ifdef CONFIG_COMPAT
1226 struct fb_fix_screeninfo32 {
1227 	char			id[16];
1228 	compat_caddr_t		smem_start;
1229 	u32			smem_len;
1230 	u32			type;
1231 	u32			type_aux;
1232 	u32			visual;
1233 	u16			xpanstep;
1234 	u16			ypanstep;
1235 	u16			ywrapstep;
1236 	u32			line_length;
1237 	compat_caddr_t		mmio_start;
1238 	u32			mmio_len;
1239 	u32			accel;
1240 	u16			reserved[3];
1241 };
1242 
1243 struct fb_cmap32 {
1244 	u32			start;
1245 	u32			len;
1246 	compat_caddr_t	red;
1247 	compat_caddr_t	green;
1248 	compat_caddr_t	blue;
1249 	compat_caddr_t	transp;
1250 };
1251 
1252 static int fb_getput_cmap(struct fb_info *info, unsigned int cmd,
1253 			  unsigned long arg)
1254 {
1255 	struct fb_cmap_user __user *cmap;
1256 	struct fb_cmap32 __user *cmap32;
1257 	__u32 data;
1258 	int err;
1259 
1260 	cmap = compat_alloc_user_space(sizeof(*cmap));
1261 	cmap32 = compat_ptr(arg);
1262 
1263 	if (copy_in_user(&cmap->start, &cmap32->start, 2 * sizeof(__u32)))
1264 		return -EFAULT;
1265 
1266 	if (get_user(data, &cmap32->red) ||
1267 	    put_user(compat_ptr(data), &cmap->red) ||
1268 	    get_user(data, &cmap32->green) ||
1269 	    put_user(compat_ptr(data), &cmap->green) ||
1270 	    get_user(data, &cmap32->blue) ||
1271 	    put_user(compat_ptr(data), &cmap->blue) ||
1272 	    get_user(data, &cmap32->transp) ||
1273 	    put_user(compat_ptr(data), &cmap->transp))
1274 		return -EFAULT;
1275 
1276 	err = do_fb_ioctl(info, cmd, (unsigned long) cmap);
1277 
1278 	if (!err) {
1279 		if (copy_in_user(&cmap32->start,
1280 				 &cmap->start,
1281 				 2 * sizeof(__u32)))
1282 			err = -EFAULT;
1283 	}
1284 	return err;
1285 }
1286 
1287 static int do_fscreeninfo_to_user(struct fb_fix_screeninfo *fix,
1288 				  struct fb_fix_screeninfo32 __user *fix32)
1289 {
1290 	__u32 data;
1291 	int err;
1292 
1293 	err = copy_to_user(&fix32->id, &fix->id, sizeof(fix32->id));
1294 
1295 	data = (__u32) (unsigned long) fix->smem_start;
1296 	err |= put_user(data, &fix32->smem_start);
1297 
1298 	err |= put_user(fix->smem_len, &fix32->smem_len);
1299 	err |= put_user(fix->type, &fix32->type);
1300 	err |= put_user(fix->type_aux, &fix32->type_aux);
1301 	err |= put_user(fix->visual, &fix32->visual);
1302 	err |= put_user(fix->xpanstep, &fix32->xpanstep);
1303 	err |= put_user(fix->ypanstep, &fix32->ypanstep);
1304 	err |= put_user(fix->ywrapstep, &fix32->ywrapstep);
1305 	err |= put_user(fix->line_length, &fix32->line_length);
1306 
1307 	data = (__u32) (unsigned long) fix->mmio_start;
1308 	err |= put_user(data, &fix32->mmio_start);
1309 
1310 	err |= put_user(fix->mmio_len, &fix32->mmio_len);
1311 	err |= put_user(fix->accel, &fix32->accel);
1312 	err |= copy_to_user(fix32->reserved, fix->reserved,
1313 			    sizeof(fix->reserved));
1314 
1315 	if (err)
1316 		return -EFAULT;
1317 	return 0;
1318 }
1319 
1320 static int fb_get_fscreeninfo(struct fb_info *info, unsigned int cmd,
1321 			      unsigned long arg)
1322 {
1323 	struct fb_fix_screeninfo fix;
1324 
1325 	if (!lock_fb_info(info))
1326 		return -ENODEV;
1327 	fix = info->fix;
1328 	unlock_fb_info(info);
1329 	return do_fscreeninfo_to_user(&fix, compat_ptr(arg));
1330 }
1331 
1332 static long fb_compat_ioctl(struct file *file, unsigned int cmd,
1333 			    unsigned long arg)
1334 {
1335 	struct fb_info *info = file_fb_info(file);
1336 	struct fb_ops *fb;
1337 	long ret = -ENOIOCTLCMD;
1338 
1339 	if (!info)
1340 		return -ENODEV;
1341 	fb = info->fbops;
1342 	switch(cmd) {
1343 	case FBIOGET_VSCREENINFO:
1344 	case FBIOPUT_VSCREENINFO:
1345 	case FBIOPAN_DISPLAY:
1346 	case FBIOGET_CON2FBMAP:
1347 	case FBIOPUT_CON2FBMAP:
1348 		arg = (unsigned long) compat_ptr(arg);
1349 	case FBIOBLANK:
1350 		ret = do_fb_ioctl(info, cmd, arg);
1351 		break;
1352 
1353 	case FBIOGET_FSCREENINFO:
1354 		ret = fb_get_fscreeninfo(info, cmd, arg);
1355 		break;
1356 
1357 	case FBIOGETCMAP:
1358 	case FBIOPUTCMAP:
1359 		ret = fb_getput_cmap(info, cmd, arg);
1360 		break;
1361 
1362 	default:
1363 		if (fb->fb_compat_ioctl)
1364 			ret = fb->fb_compat_ioctl(info, cmd, arg);
1365 		break;
1366 	}
1367 	return ret;
1368 }
1369 #endif
1370 
1371 static int
1372 fb_mmap(struct file *file, struct vm_area_struct * vma)
1373 {
1374 	struct fb_info *info = file_fb_info(file);
1375 	struct fb_ops *fb;
1376 	unsigned long mmio_pgoff;
1377 	unsigned long start;
1378 	u32 len;
1379 
1380 	if (!info)
1381 		return -ENODEV;
1382 	fb = info->fbops;
1383 	if (!fb)
1384 		return -ENODEV;
1385 	mutex_lock(&info->mm_lock);
1386 	if (fb->fb_mmap) {
1387 		int res;
1388 
1389 		/*
1390 		 * The framebuffer needs to be accessed decrypted, be sure
1391 		 * SME protection is removed ahead of the call
1392 		 */
1393 		vma->vm_page_prot = pgprot_decrypted(vma->vm_page_prot);
1394 		res = fb->fb_mmap(info, vma);
1395 		mutex_unlock(&info->mm_lock);
1396 		return res;
1397 	}
1398 
1399 	/*
1400 	 * Ugh. This can be either the frame buffer mapping, or
1401 	 * if pgoff points past it, the mmio mapping.
1402 	 */
1403 	start = info->fix.smem_start;
1404 	len = info->fix.smem_len;
1405 	mmio_pgoff = PAGE_ALIGN((start & ~PAGE_MASK) + len) >> PAGE_SHIFT;
1406 	if (vma->vm_pgoff >= mmio_pgoff) {
1407 		if (info->var.accel_flags) {
1408 			mutex_unlock(&info->mm_lock);
1409 			return -EINVAL;
1410 		}
1411 
1412 		vma->vm_pgoff -= mmio_pgoff;
1413 		start = info->fix.mmio_start;
1414 		len = info->fix.mmio_len;
1415 	}
1416 	mutex_unlock(&info->mm_lock);
1417 
1418 	vma->vm_page_prot = vm_get_page_prot(vma->vm_flags);
1419 	/*
1420 	 * The framebuffer needs to be accessed decrypted, be sure
1421 	 * SME protection is removed
1422 	 */
1423 	vma->vm_page_prot = pgprot_decrypted(vma->vm_page_prot);
1424 	fb_pgprotect(file, vma, start);
1425 
1426 	return vm_iomap_memory(vma, start, len);
1427 }
1428 
1429 static int
1430 fb_open(struct inode *inode, struct file *file)
1431 __acquires(&info->lock)
1432 __releases(&info->lock)
1433 {
1434 	int fbidx = iminor(inode);
1435 	struct fb_info *info;
1436 	int res = 0;
1437 
1438 	info = get_fb_info(fbidx);
1439 	if (!info) {
1440 		request_module("fb%d", fbidx);
1441 		info = get_fb_info(fbidx);
1442 		if (!info)
1443 			return -ENODEV;
1444 	}
1445 	if (IS_ERR(info))
1446 		return PTR_ERR(info);
1447 
1448 	mutex_lock(&info->lock);
1449 	if (!try_module_get(info->fbops->owner)) {
1450 		res = -ENODEV;
1451 		goto out;
1452 	}
1453 	file->private_data = info;
1454 	if (info->fbops->fb_open) {
1455 		res = info->fbops->fb_open(info,1);
1456 		if (res)
1457 			module_put(info->fbops->owner);
1458 	}
1459 #ifdef CONFIG_FB_DEFERRED_IO
1460 	if (info->fbdefio)
1461 		fb_deferred_io_open(info, inode, file);
1462 #endif
1463 out:
1464 	mutex_unlock(&info->lock);
1465 	if (res)
1466 		put_fb_info(info);
1467 	return res;
1468 }
1469 
1470 static int
1471 fb_release(struct inode *inode, struct file *file)
1472 __acquires(&info->lock)
1473 __releases(&info->lock)
1474 {
1475 	struct fb_info * const info = file->private_data;
1476 
1477 	mutex_lock(&info->lock);
1478 	if (info->fbops->fb_release)
1479 		info->fbops->fb_release(info,1);
1480 	module_put(info->fbops->owner);
1481 	mutex_unlock(&info->lock);
1482 	put_fb_info(info);
1483 	return 0;
1484 }
1485 
1486 #if defined(CONFIG_FB_PROVIDE_GET_FB_UNMAPPED_AREA) && !defined(CONFIG_MMU)
1487 unsigned long get_fb_unmapped_area(struct file *filp,
1488 				   unsigned long addr, unsigned long len,
1489 				   unsigned long pgoff, unsigned long flags)
1490 {
1491 	struct fb_info * const info = filp->private_data;
1492 	unsigned long fb_size = PAGE_ALIGN(info->fix.smem_len);
1493 
1494 	if (pgoff > fb_size || len > fb_size - pgoff)
1495 		return -EINVAL;
1496 
1497 	return (unsigned long)info->screen_base + pgoff;
1498 }
1499 #endif
1500 
1501 static const struct file_operations fb_fops = {
1502 	.owner =	THIS_MODULE,
1503 	.read =		fb_read,
1504 	.write =	fb_write,
1505 	.unlocked_ioctl = fb_ioctl,
1506 #ifdef CONFIG_COMPAT
1507 	.compat_ioctl = fb_compat_ioctl,
1508 #endif
1509 	.mmap =		fb_mmap,
1510 	.open =		fb_open,
1511 	.release =	fb_release,
1512 #if defined(HAVE_ARCH_FB_UNMAPPED_AREA) || \
1513 	(defined(CONFIG_FB_PROVIDE_GET_FB_UNMAPPED_AREA) && \
1514 	 !defined(CONFIG_MMU))
1515 	.get_unmapped_area = get_fb_unmapped_area,
1516 #endif
1517 #ifdef CONFIG_FB_DEFERRED_IO
1518 	.fsync =	fb_deferred_io_fsync,
1519 #endif
1520 	.llseek =	default_llseek,
1521 };
1522 
1523 struct class *fb_class;
1524 EXPORT_SYMBOL(fb_class);
1525 
1526 static int fb_check_foreignness(struct fb_info *fi)
1527 {
1528 	const bool foreign_endian = fi->flags & FBINFO_FOREIGN_ENDIAN;
1529 
1530 	fi->flags &= ~FBINFO_FOREIGN_ENDIAN;
1531 
1532 #ifdef __BIG_ENDIAN
1533 	fi->flags |= foreign_endian ? 0 : FBINFO_BE_MATH;
1534 #else
1535 	fi->flags |= foreign_endian ? FBINFO_BE_MATH : 0;
1536 #endif /* __BIG_ENDIAN */
1537 
1538 	if (fi->flags & FBINFO_BE_MATH && !fb_be_math(fi)) {
1539 		pr_err("%s: enable CONFIG_FB_BIG_ENDIAN to "
1540 		       "support this framebuffer\n", fi->fix.id);
1541 		return -ENOSYS;
1542 	} else if (!(fi->flags & FBINFO_BE_MATH) && fb_be_math(fi)) {
1543 		pr_err("%s: enable CONFIG_FB_LITTLE_ENDIAN to "
1544 		       "support this framebuffer\n", fi->fix.id);
1545 		return -ENOSYS;
1546 	}
1547 
1548 	return 0;
1549 }
1550 
1551 static bool apertures_overlap(struct aperture *gen, struct aperture *hw)
1552 {
1553 	/* is the generic aperture base the same as the HW one */
1554 	if (gen->base == hw->base)
1555 		return true;
1556 	/* is the generic aperture base inside the hw base->hw base+size */
1557 	if (gen->base > hw->base && gen->base < hw->base + hw->size)
1558 		return true;
1559 	return false;
1560 }
1561 
1562 static bool fb_do_apertures_overlap(struct apertures_struct *gena,
1563 				    struct apertures_struct *hwa)
1564 {
1565 	int i, j;
1566 	if (!hwa || !gena)
1567 		return false;
1568 
1569 	for (i = 0; i < hwa->count; ++i) {
1570 		struct aperture *h = &hwa->ranges[i];
1571 		for (j = 0; j < gena->count; ++j) {
1572 			struct aperture *g = &gena->ranges[j];
1573 			printk(KERN_DEBUG "checking generic (%llx %llx) vs hw (%llx %llx)\n",
1574 				(unsigned long long)g->base,
1575 				(unsigned long long)g->size,
1576 				(unsigned long long)h->base,
1577 				(unsigned long long)h->size);
1578 			if (apertures_overlap(g, h))
1579 				return true;
1580 		}
1581 	}
1582 
1583 	return false;
1584 }
1585 
1586 static int do_unregister_framebuffer(struct fb_info *fb_info);
1587 
1588 #define VGA_FB_PHYS 0xA0000
1589 static int do_remove_conflicting_framebuffers(struct apertures_struct *a,
1590 					      const char *name, bool primary)
1591 {
1592 	int i, ret;
1593 
1594 	/* check all firmware fbs and kick off if the base addr overlaps */
1595 	for (i = 0 ; i < FB_MAX; i++) {
1596 		struct apertures_struct *gen_aper;
1597 		if (!registered_fb[i])
1598 			continue;
1599 
1600 		if (!(registered_fb[i]->flags & FBINFO_MISC_FIRMWARE))
1601 			continue;
1602 
1603 		gen_aper = registered_fb[i]->apertures;
1604 		if (fb_do_apertures_overlap(gen_aper, a) ||
1605 			(primary && gen_aper && gen_aper->count &&
1606 			 gen_aper->ranges[0].base == VGA_FB_PHYS)) {
1607 
1608 			printk(KERN_INFO "fb: switching to %s from %s\n",
1609 			       name, registered_fb[i]->fix.id);
1610 			ret = do_unregister_framebuffer(registered_fb[i]);
1611 			if (ret)
1612 				return ret;
1613 		}
1614 	}
1615 
1616 	return 0;
1617 }
1618 
1619 static bool lockless_register_fb;
1620 module_param_named_unsafe(lockless_register_fb, lockless_register_fb, bool, 0400);
1621 MODULE_PARM_DESC(lockless_register_fb,
1622 	"Lockless framebuffer registration for debugging [default=off]");
1623 
1624 static int do_register_framebuffer(struct fb_info *fb_info)
1625 {
1626 	int i, ret;
1627 	struct fb_event event;
1628 	struct fb_videomode mode;
1629 
1630 	if (fb_check_foreignness(fb_info))
1631 		return -ENOSYS;
1632 
1633 	ret = do_remove_conflicting_framebuffers(fb_info->apertures,
1634 						 fb_info->fix.id,
1635 						 fb_is_primary_device(fb_info));
1636 	if (ret)
1637 		return ret;
1638 
1639 	if (num_registered_fb == FB_MAX)
1640 		return -ENXIO;
1641 
1642 	num_registered_fb++;
1643 	for (i = 0 ; i < FB_MAX; i++)
1644 		if (!registered_fb[i])
1645 			break;
1646 	fb_info->node = i;
1647 	atomic_set(&fb_info->count, 1);
1648 	mutex_init(&fb_info->lock);
1649 	mutex_init(&fb_info->mm_lock);
1650 
1651 	fb_info->dev = device_create(fb_class, fb_info->device,
1652 				     MKDEV(FB_MAJOR, i), NULL, "fb%d", i);
1653 	if (IS_ERR(fb_info->dev)) {
1654 		/* Not fatal */
1655 		printk(KERN_WARNING "Unable to create device for framebuffer %d; errno = %ld\n", i, PTR_ERR(fb_info->dev));
1656 		fb_info->dev = NULL;
1657 	} else
1658 		fb_init_device(fb_info);
1659 
1660 	if (fb_info->pixmap.addr == NULL) {
1661 		fb_info->pixmap.addr = kmalloc(FBPIXMAPSIZE, GFP_KERNEL);
1662 		if (fb_info->pixmap.addr) {
1663 			fb_info->pixmap.size = FBPIXMAPSIZE;
1664 			fb_info->pixmap.buf_align = 1;
1665 			fb_info->pixmap.scan_align = 1;
1666 			fb_info->pixmap.access_align = 32;
1667 			fb_info->pixmap.flags = FB_PIXMAP_DEFAULT;
1668 		}
1669 	}
1670 	fb_info->pixmap.offset = 0;
1671 
1672 	if (!fb_info->pixmap.blit_x)
1673 		fb_info->pixmap.blit_x = ~(u32)0;
1674 
1675 	if (!fb_info->pixmap.blit_y)
1676 		fb_info->pixmap.blit_y = ~(u32)0;
1677 
1678 	if (!fb_info->modelist.prev || !fb_info->modelist.next)
1679 		INIT_LIST_HEAD(&fb_info->modelist);
1680 
1681 	if (fb_info->skip_vt_switch)
1682 		pm_vt_switch_required(fb_info->dev, false);
1683 	else
1684 		pm_vt_switch_required(fb_info->dev, true);
1685 
1686 	fb_var_to_videomode(&mode, &fb_info->var);
1687 	fb_add_videomode(&mode, &fb_info->modelist);
1688 	registered_fb[i] = fb_info;
1689 
1690 	event.info = fb_info;
1691 	if (!lockless_register_fb)
1692 		console_lock();
1693 	if (!lock_fb_info(fb_info)) {
1694 		if (!lockless_register_fb)
1695 			console_unlock();
1696 		return -ENODEV;
1697 	}
1698 
1699 	fb_notifier_call_chain(FB_EVENT_FB_REGISTERED, &event);
1700 	unlock_fb_info(fb_info);
1701 	if (!lockless_register_fb)
1702 		console_unlock();
1703 	return 0;
1704 }
1705 
1706 static int do_unregister_framebuffer(struct fb_info *fb_info)
1707 {
1708 	struct fb_event event;
1709 	int i, ret = 0;
1710 
1711 	i = fb_info->node;
1712 	if (i < 0 || i >= FB_MAX || registered_fb[i] != fb_info)
1713 		return -EINVAL;
1714 
1715 	console_lock();
1716 	if (!lock_fb_info(fb_info)) {
1717 		console_unlock();
1718 		return -ENODEV;
1719 	}
1720 
1721 	event.info = fb_info;
1722 	ret = fb_notifier_call_chain(FB_EVENT_FB_UNBIND, &event);
1723 	unlock_fb_info(fb_info);
1724 	console_unlock();
1725 
1726 	if (ret)
1727 		return -EINVAL;
1728 
1729 	pm_vt_switch_unregister(fb_info->dev);
1730 
1731 	unlink_framebuffer(fb_info);
1732 	if (fb_info->pixmap.addr &&
1733 	    (fb_info->pixmap.flags & FB_PIXMAP_DEFAULT))
1734 		kfree(fb_info->pixmap.addr);
1735 	fb_destroy_modelist(&fb_info->modelist);
1736 	registered_fb[i] = NULL;
1737 	num_registered_fb--;
1738 	fb_cleanup_device(fb_info);
1739 	event.info = fb_info;
1740 	console_lock();
1741 	fb_notifier_call_chain(FB_EVENT_FB_UNREGISTERED, &event);
1742 	console_unlock();
1743 
1744 	/* this may free fb info */
1745 	put_fb_info(fb_info);
1746 	return 0;
1747 }
1748 
1749 int unlink_framebuffer(struct fb_info *fb_info)
1750 {
1751 	int i;
1752 
1753 	i = fb_info->node;
1754 	if (i < 0 || i >= FB_MAX || registered_fb[i] != fb_info)
1755 		return -EINVAL;
1756 
1757 	if (fb_info->dev) {
1758 		device_destroy(fb_class, MKDEV(FB_MAJOR, i));
1759 		fb_info->dev = NULL;
1760 	}
1761 	return 0;
1762 }
1763 EXPORT_SYMBOL(unlink_framebuffer);
1764 
1765 int remove_conflicting_framebuffers(struct apertures_struct *a,
1766 				    const char *name, bool primary)
1767 {
1768 	int ret;
1769 
1770 	mutex_lock(&registration_lock);
1771 	ret = do_remove_conflicting_framebuffers(a, name, primary);
1772 	mutex_unlock(&registration_lock);
1773 
1774 	return ret;
1775 }
1776 EXPORT_SYMBOL(remove_conflicting_framebuffers);
1777 
1778 /**
1779  *	register_framebuffer - registers a frame buffer device
1780  *	@fb_info: frame buffer info structure
1781  *
1782  *	Registers a frame buffer device @fb_info.
1783  *
1784  *	Returns negative errno on error, or zero for success.
1785  *
1786  */
1787 int
1788 register_framebuffer(struct fb_info *fb_info)
1789 {
1790 	int ret;
1791 
1792 	mutex_lock(&registration_lock);
1793 	ret = do_register_framebuffer(fb_info);
1794 	mutex_unlock(&registration_lock);
1795 
1796 	return ret;
1797 }
1798 EXPORT_SYMBOL(register_framebuffer);
1799 
1800 /**
1801  *	unregister_framebuffer - releases a frame buffer device
1802  *	@fb_info: frame buffer info structure
1803  *
1804  *	Unregisters a frame buffer device @fb_info.
1805  *
1806  *	Returns negative errno on error, or zero for success.
1807  *
1808  *      This function will also notify the framebuffer console
1809  *      to release the driver.
1810  *
1811  *      This is meant to be called within a driver's module_exit()
1812  *      function. If this is called outside module_exit(), ensure
1813  *      that the driver implements fb_open() and fb_release() to
1814  *      check that no processes are using the device.
1815  */
1816 int
1817 unregister_framebuffer(struct fb_info *fb_info)
1818 {
1819 	int ret;
1820 
1821 	mutex_lock(&registration_lock);
1822 	ret = do_unregister_framebuffer(fb_info);
1823 	mutex_unlock(&registration_lock);
1824 
1825 	return ret;
1826 }
1827 EXPORT_SYMBOL(unregister_framebuffer);
1828 
1829 /**
1830  *	fb_set_suspend - low level driver signals suspend
1831  *	@info: framebuffer affected
1832  *	@state: 0 = resuming, !=0 = suspending
1833  *
1834  *	This is meant to be used by low level drivers to
1835  * 	signal suspend/resume to the core & clients.
1836  *	It must be called with the console semaphore held
1837  */
1838 void fb_set_suspend(struct fb_info *info, int state)
1839 {
1840 	struct fb_event event;
1841 
1842 	event.info = info;
1843 	if (state) {
1844 		fb_notifier_call_chain(FB_EVENT_SUSPEND, &event);
1845 		info->state = FBINFO_STATE_SUSPENDED;
1846 	} else {
1847 		info->state = FBINFO_STATE_RUNNING;
1848 		fb_notifier_call_chain(FB_EVENT_RESUME, &event);
1849 	}
1850 }
1851 EXPORT_SYMBOL(fb_set_suspend);
1852 
1853 /**
1854  *	fbmem_init - init frame buffer subsystem
1855  *
1856  *	Initialize the frame buffer subsystem.
1857  *
1858  *	NOTE: This function is _only_ to be called by drivers/char/mem.c.
1859  *
1860  */
1861 
1862 static int __init
1863 fbmem_init(void)
1864 {
1865 	int ret;
1866 
1867 	if (!proc_create_seq("fb", 0, NULL, &proc_fb_seq_ops))
1868 		return -ENOMEM;
1869 
1870 	ret = register_chrdev(FB_MAJOR, "fb", &fb_fops);
1871 	if (ret) {
1872 		printk("unable to get major %d for fb devs\n", FB_MAJOR);
1873 		goto err_chrdev;
1874 	}
1875 
1876 	fb_class = class_create(THIS_MODULE, "graphics");
1877 	if (IS_ERR(fb_class)) {
1878 		ret = PTR_ERR(fb_class);
1879 		pr_warn("Unable to create fb class; errno = %d\n", ret);
1880 		fb_class = NULL;
1881 		goto err_class;
1882 	}
1883 
1884 	fb_console_init();
1885 
1886 	return 0;
1887 
1888 err_class:
1889 	unregister_chrdev(FB_MAJOR, "fb");
1890 err_chrdev:
1891 	remove_proc_entry("fb", NULL);
1892 	return ret;
1893 }
1894 
1895 #ifdef MODULE
1896 module_init(fbmem_init);
1897 static void __exit
1898 fbmem_exit(void)
1899 {
1900 	fb_console_exit();
1901 
1902 	remove_proc_entry("fb", NULL);
1903 	class_destroy(fb_class);
1904 	unregister_chrdev(FB_MAJOR, "fb");
1905 }
1906 
1907 module_exit(fbmem_exit);
1908 MODULE_LICENSE("GPL");
1909 MODULE_DESCRIPTION("Framebuffer base");
1910 #else
1911 subsys_initcall(fbmem_init);
1912 #endif
1913 
1914 int fb_new_modelist(struct fb_info *info)
1915 {
1916 	struct fb_event event;
1917 	struct fb_var_screeninfo var = info->var;
1918 	struct list_head *pos, *n;
1919 	struct fb_modelist *modelist;
1920 	struct fb_videomode *m, mode;
1921 	int err = 1;
1922 
1923 	list_for_each_safe(pos, n, &info->modelist) {
1924 		modelist = list_entry(pos, struct fb_modelist, list);
1925 		m = &modelist->mode;
1926 		fb_videomode_to_var(&var, m);
1927 		var.activate = FB_ACTIVATE_TEST;
1928 		err = fb_set_var(info, &var);
1929 		fb_var_to_videomode(&mode, &var);
1930 		if (err || !fb_mode_is_equal(m, &mode)) {
1931 			list_del(pos);
1932 			kfree(pos);
1933 		}
1934 	}
1935 
1936 	err = 1;
1937 
1938 	if (!list_empty(&info->modelist)) {
1939 		event.info = info;
1940 		err = fb_notifier_call_chain(FB_EVENT_NEW_MODELIST, &event);
1941 	}
1942 
1943 	return err;
1944 }
1945 
1946 MODULE_LICENSE("GPL");
1947