xref: /linux/drivers/video/fbdev/core/fbmem.c (revision 6faadbbb7f9da70ce484f98f72223c20125a1009)
1 /*
2  *  linux/drivers/video/fbmem.c
3  *
4  *  Copyright (C) 1994 Martin Schaller
5  *
6  *	2001 - Documented with DocBook
7  *	- Brad Douglas <brad@neruo.com>
8  *
9  * This file is subject to the terms and conditions of the GNU General Public
10  * License.  See the file COPYING in the main directory of this archive
11  * for more details.
12  */
13 
14 #include <linux/module.h>
15 
16 #include <linux/compat.h>
17 #include <linux/types.h>
18 #include <linux/errno.h>
19 #include <linux/kernel.h>
20 #include <linux/major.h>
21 #include <linux/slab.h>
22 #include <linux/mm.h>
23 #include <linux/mman.h>
24 #include <linux/vt.h>
25 #include <linux/init.h>
26 #include <linux/linux_logo.h>
27 #include <linux/proc_fs.h>
28 #include <linux/seq_file.h>
29 #include <linux/console.h>
30 #include <linux/kmod.h>
31 #include <linux/err.h>
32 #include <linux/device.h>
33 #include <linux/efi.h>
34 #include <linux/fb.h>
35 #include <linux/mem_encrypt.h>
36 
37 #include <asm/fb.h>
38 
39 
40     /*
41      *  Frame buffer device initialization and setup routines
42      */
43 
44 #define FBPIXMAPSIZE	(1024 * 8)
45 
46 static DEFINE_MUTEX(registration_lock);
47 
48 struct fb_info *registered_fb[FB_MAX] __read_mostly;
49 EXPORT_SYMBOL(registered_fb);
50 
51 int num_registered_fb __read_mostly;
52 EXPORT_SYMBOL(num_registered_fb);
53 
54 static struct fb_info *get_fb_info(unsigned int idx)
55 {
56 	struct fb_info *fb_info;
57 
58 	if (idx >= FB_MAX)
59 		return ERR_PTR(-ENODEV);
60 
61 	mutex_lock(&registration_lock);
62 	fb_info = registered_fb[idx];
63 	if (fb_info)
64 		atomic_inc(&fb_info->count);
65 	mutex_unlock(&registration_lock);
66 
67 	return fb_info;
68 }
69 
70 static void put_fb_info(struct fb_info *fb_info)
71 {
72 	if (!atomic_dec_and_test(&fb_info->count))
73 		return;
74 	if (fb_info->fbops->fb_destroy)
75 		fb_info->fbops->fb_destroy(fb_info);
76 }
77 
78 int lock_fb_info(struct fb_info *info)
79 {
80 	mutex_lock(&info->lock);
81 	if (!info->fbops) {
82 		mutex_unlock(&info->lock);
83 		return 0;
84 	}
85 	return 1;
86 }
87 EXPORT_SYMBOL(lock_fb_info);
88 
89 /*
90  * Helpers
91  */
92 
93 int fb_get_color_depth(struct fb_var_screeninfo *var,
94 		       struct fb_fix_screeninfo *fix)
95 {
96 	int depth = 0;
97 
98 	if (fix->visual == FB_VISUAL_MONO01 ||
99 	    fix->visual == FB_VISUAL_MONO10)
100 		depth = 1;
101 	else {
102 		if (var->green.length == var->blue.length &&
103 		    var->green.length == var->red.length &&
104 		    var->green.offset == var->blue.offset &&
105 		    var->green.offset == var->red.offset)
106 			depth = var->green.length;
107 		else
108 			depth = var->green.length + var->red.length +
109 				var->blue.length;
110 	}
111 
112 	return depth;
113 }
114 EXPORT_SYMBOL(fb_get_color_depth);
115 
116 /*
117  * Data padding functions.
118  */
119 void fb_pad_aligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 s_pitch, u32 height)
120 {
121 	__fb_pad_aligned_buffer(dst, d_pitch, src, s_pitch, height);
122 }
123 EXPORT_SYMBOL(fb_pad_aligned_buffer);
124 
125 void fb_pad_unaligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 idx, u32 height,
126 				u32 shift_high, u32 shift_low, u32 mod)
127 {
128 	u8 mask = (u8) (0xfff << shift_high), tmp;
129 	int i, j;
130 
131 	for (i = height; i--; ) {
132 		for (j = 0; j < idx; j++) {
133 			tmp = dst[j];
134 			tmp &= mask;
135 			tmp |= *src >> shift_low;
136 			dst[j] = tmp;
137 			tmp = *src << shift_high;
138 			dst[j+1] = tmp;
139 			src++;
140 		}
141 		tmp = dst[idx];
142 		tmp &= mask;
143 		tmp |= *src >> shift_low;
144 		dst[idx] = tmp;
145 		if (shift_high < mod) {
146 			tmp = *src << shift_high;
147 			dst[idx+1] = tmp;
148 		}
149 		src++;
150 		dst += d_pitch;
151 	}
152 }
153 EXPORT_SYMBOL(fb_pad_unaligned_buffer);
154 
155 /*
156  * we need to lock this section since fb_cursor
157  * may use fb_imageblit()
158  */
159 char* fb_get_buffer_offset(struct fb_info *info, struct fb_pixmap *buf, u32 size)
160 {
161 	u32 align = buf->buf_align - 1, offset;
162 	char *addr = buf->addr;
163 
164 	/* If IO mapped, we need to sync before access, no sharing of
165 	 * the pixmap is done
166 	 */
167 	if (buf->flags & FB_PIXMAP_IO) {
168 		if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
169 			info->fbops->fb_sync(info);
170 		return addr;
171 	}
172 
173 	/* See if we fit in the remaining pixmap space */
174 	offset = buf->offset + align;
175 	offset &= ~align;
176 	if (offset + size > buf->size) {
177 		/* We do not fit. In order to be able to re-use the buffer,
178 		 * we must ensure no asynchronous DMA'ing or whatever operation
179 		 * is in progress, we sync for that.
180 		 */
181 		if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
182 			info->fbops->fb_sync(info);
183 		offset = 0;
184 	}
185 	buf->offset = offset + size;
186 	addr += offset;
187 
188 	return addr;
189 }
190 EXPORT_SYMBOL(fb_get_buffer_offset);
191 
192 #ifdef CONFIG_LOGO
193 
194 static inline unsigned safe_shift(unsigned d, int n)
195 {
196 	return n < 0 ? d >> -n : d << n;
197 }
198 
199 static void fb_set_logocmap(struct fb_info *info,
200 				   const struct linux_logo *logo)
201 {
202 	struct fb_cmap palette_cmap;
203 	u16 palette_green[16];
204 	u16 palette_blue[16];
205 	u16 palette_red[16];
206 	int i, j, n;
207 	const unsigned char *clut = logo->clut;
208 
209 	palette_cmap.start = 0;
210 	palette_cmap.len = 16;
211 	palette_cmap.red = palette_red;
212 	palette_cmap.green = palette_green;
213 	palette_cmap.blue = palette_blue;
214 	palette_cmap.transp = NULL;
215 
216 	for (i = 0; i < logo->clutsize; i += n) {
217 		n = logo->clutsize - i;
218 		/* palette_cmap provides space for only 16 colors at once */
219 		if (n > 16)
220 			n = 16;
221 		palette_cmap.start = 32 + i;
222 		palette_cmap.len = n;
223 		for (j = 0; j < n; ++j) {
224 			palette_cmap.red[j] = clut[0] << 8 | clut[0];
225 			palette_cmap.green[j] = clut[1] << 8 | clut[1];
226 			palette_cmap.blue[j] = clut[2] << 8 | clut[2];
227 			clut += 3;
228 		}
229 		fb_set_cmap(&palette_cmap, info);
230 	}
231 }
232 
233 static void  fb_set_logo_truepalette(struct fb_info *info,
234 					    const struct linux_logo *logo,
235 					    u32 *palette)
236 {
237 	static const unsigned char mask[] = { 0,0x80,0xc0,0xe0,0xf0,0xf8,0xfc,0xfe,0xff };
238 	unsigned char redmask, greenmask, bluemask;
239 	int redshift, greenshift, blueshift;
240 	int i;
241 	const unsigned char *clut = logo->clut;
242 
243 	/*
244 	 * We have to create a temporary palette since console palette is only
245 	 * 16 colors long.
246 	 */
247 	/* Bug: Doesn't obey msb_right ... (who needs that?) */
248 	redmask   = mask[info->var.red.length   < 8 ? info->var.red.length   : 8];
249 	greenmask = mask[info->var.green.length < 8 ? info->var.green.length : 8];
250 	bluemask  = mask[info->var.blue.length  < 8 ? info->var.blue.length  : 8];
251 	redshift   = info->var.red.offset   - (8 - info->var.red.length);
252 	greenshift = info->var.green.offset - (8 - info->var.green.length);
253 	blueshift  = info->var.blue.offset  - (8 - info->var.blue.length);
254 
255 	for ( i = 0; i < logo->clutsize; i++) {
256 		palette[i+32] = (safe_shift((clut[0] & redmask), redshift) |
257 				 safe_shift((clut[1] & greenmask), greenshift) |
258 				 safe_shift((clut[2] & bluemask), blueshift));
259 		clut += 3;
260 	}
261 }
262 
263 static void fb_set_logo_directpalette(struct fb_info *info,
264 					     const struct linux_logo *logo,
265 					     u32 *palette)
266 {
267 	int redshift, greenshift, blueshift;
268 	int i;
269 
270 	redshift = info->var.red.offset;
271 	greenshift = info->var.green.offset;
272 	blueshift = info->var.blue.offset;
273 
274 	for (i = 32; i < 32 + logo->clutsize; i++)
275 		palette[i] = i << redshift | i << greenshift | i << blueshift;
276 }
277 
278 static void fb_set_logo(struct fb_info *info,
279 			       const struct linux_logo *logo, u8 *dst,
280 			       int depth)
281 {
282 	int i, j, k;
283 	const u8 *src = logo->data;
284 	u8 xor = (info->fix.visual == FB_VISUAL_MONO01) ? 0xff : 0;
285 	u8 fg = 1, d;
286 
287 	switch (fb_get_color_depth(&info->var, &info->fix)) {
288 	case 1:
289 		fg = 1;
290 		break;
291 	case 2:
292 		fg = 3;
293 		break;
294 	default:
295 		fg = 7;
296 		break;
297 	}
298 
299 	if (info->fix.visual == FB_VISUAL_MONO01 ||
300 	    info->fix.visual == FB_VISUAL_MONO10)
301 		fg = ~((u8) (0xfff << info->var.green.length));
302 
303 	switch (depth) {
304 	case 4:
305 		for (i = 0; i < logo->height; i++)
306 			for (j = 0; j < logo->width; src++) {
307 				*dst++ = *src >> 4;
308 				j++;
309 				if (j < logo->width) {
310 					*dst++ = *src & 0x0f;
311 					j++;
312 				}
313 			}
314 		break;
315 	case 1:
316 		for (i = 0; i < logo->height; i++) {
317 			for (j = 0; j < logo->width; src++) {
318 				d = *src ^ xor;
319 				for (k = 7; k >= 0; k--) {
320 					*dst++ = ((d >> k) & 1) ? fg : 0;
321 					j++;
322 				}
323 			}
324 		}
325 		break;
326 	}
327 }
328 
329 /*
330  * Three (3) kinds of logo maps exist.  linux_logo_clut224 (>16 colors),
331  * linux_logo_vga16 (16 colors) and linux_logo_mono (2 colors).  Depending on
332  * the visual format and color depth of the framebuffer, the DAC, the
333  * pseudo_palette, and the logo data will be adjusted accordingly.
334  *
335  * Case 1 - linux_logo_clut224:
336  * Color exceeds the number of console colors (16), thus we set the hardware DAC
337  * using fb_set_cmap() appropriately.  The "needs_cmapreset"  flag will be set.
338  *
339  * For visuals that require color info from the pseudo_palette, we also construct
340  * one for temporary use. The "needs_directpalette" or "needs_truepalette" flags
341  * will be set.
342  *
343  * Case 2 - linux_logo_vga16:
344  * The number of colors just matches the console colors, thus there is no need
345  * to set the DAC or the pseudo_palette.  However, the bitmap is packed, ie,
346  * each byte contains color information for two pixels (upper and lower nibble).
347  * To be consistent with fb_imageblit() usage, we therefore separate the two
348  * nibbles into separate bytes. The "depth" flag will be set to 4.
349  *
350  * Case 3 - linux_logo_mono:
351  * This is similar with Case 2.  Each byte contains information for 8 pixels.
352  * We isolate each bit and expand each into a byte. The "depth" flag will
353  * be set to 1.
354  */
355 static struct logo_data {
356 	int depth;
357 	int needs_directpalette;
358 	int needs_truepalette;
359 	int needs_cmapreset;
360 	const struct linux_logo *logo;
361 } fb_logo __read_mostly;
362 
363 static void fb_rotate_logo_ud(const u8 *in, u8 *out, u32 width, u32 height)
364 {
365 	u32 size = width * height, i;
366 
367 	out += size - 1;
368 
369 	for (i = size; i--; )
370 		*out-- = *in++;
371 }
372 
373 static void fb_rotate_logo_cw(const u8 *in, u8 *out, u32 width, u32 height)
374 {
375 	int i, j, h = height - 1;
376 
377 	for (i = 0; i < height; i++)
378 		for (j = 0; j < width; j++)
379 				out[height * j + h - i] = *in++;
380 }
381 
382 static void fb_rotate_logo_ccw(const u8 *in, u8 *out, u32 width, u32 height)
383 {
384 	int i, j, w = width - 1;
385 
386 	for (i = 0; i < height; i++)
387 		for (j = 0; j < width; j++)
388 			out[height * (w - j) + i] = *in++;
389 }
390 
391 static void fb_rotate_logo(struct fb_info *info, u8 *dst,
392 			   struct fb_image *image, int rotate)
393 {
394 	u32 tmp;
395 
396 	if (rotate == FB_ROTATE_UD) {
397 		fb_rotate_logo_ud(image->data, dst, image->width,
398 				  image->height);
399 		image->dx = info->var.xres - image->width - image->dx;
400 		image->dy = info->var.yres - image->height - image->dy;
401 	} else if (rotate == FB_ROTATE_CW) {
402 		fb_rotate_logo_cw(image->data, dst, image->width,
403 				  image->height);
404 		tmp = image->width;
405 		image->width = image->height;
406 		image->height = tmp;
407 		tmp = image->dy;
408 		image->dy = image->dx;
409 		image->dx = info->var.xres - image->width - tmp;
410 	} else if (rotate == FB_ROTATE_CCW) {
411 		fb_rotate_logo_ccw(image->data, dst, image->width,
412 				   image->height);
413 		tmp = image->width;
414 		image->width = image->height;
415 		image->height = tmp;
416 		tmp = image->dx;
417 		image->dx = image->dy;
418 		image->dy = info->var.yres - image->height - tmp;
419 	}
420 
421 	image->data = dst;
422 }
423 
424 static void fb_do_show_logo(struct fb_info *info, struct fb_image *image,
425 			    int rotate, unsigned int num)
426 {
427 	unsigned int x;
428 
429 	if (rotate == FB_ROTATE_UR) {
430 		for (x = 0;
431 		     x < num && image->dx + image->width <= info->var.xres;
432 		     x++) {
433 			info->fbops->fb_imageblit(info, image);
434 			image->dx += image->width + 8;
435 		}
436 	} else if (rotate == FB_ROTATE_UD) {
437 		for (x = 0; x < num; x++) {
438 			info->fbops->fb_imageblit(info, image);
439 			image->dx -= image->width + 8;
440 		}
441 	} else if (rotate == FB_ROTATE_CW) {
442 		for (x = 0;
443 		     x < num && image->dy + image->height <= info->var.yres;
444 		     x++) {
445 			info->fbops->fb_imageblit(info, image);
446 			image->dy += image->height + 8;
447 		}
448 	} else if (rotate == FB_ROTATE_CCW) {
449 		for (x = 0; x < num; x++) {
450 			info->fbops->fb_imageblit(info, image);
451 			image->dy -= image->height + 8;
452 		}
453 	}
454 }
455 
456 static int fb_show_logo_line(struct fb_info *info, int rotate,
457 			     const struct linux_logo *logo, int y,
458 			     unsigned int n)
459 {
460 	u32 *palette = NULL, *saved_pseudo_palette = NULL;
461 	unsigned char *logo_new = NULL, *logo_rotate = NULL;
462 	struct fb_image image;
463 
464 	/* Return if the frame buffer is not mapped or suspended */
465 	if (logo == NULL || info->state != FBINFO_STATE_RUNNING ||
466 	    info->flags & FBINFO_MODULE)
467 		return 0;
468 
469 	image.depth = 8;
470 	image.data = logo->data;
471 
472 	if (fb_logo.needs_cmapreset)
473 		fb_set_logocmap(info, logo);
474 
475 	if (fb_logo.needs_truepalette ||
476 	    fb_logo.needs_directpalette) {
477 		palette = kmalloc(256 * 4, GFP_KERNEL);
478 		if (palette == NULL)
479 			return 0;
480 
481 		if (fb_logo.needs_truepalette)
482 			fb_set_logo_truepalette(info, logo, palette);
483 		else
484 			fb_set_logo_directpalette(info, logo, palette);
485 
486 		saved_pseudo_palette = info->pseudo_palette;
487 		info->pseudo_palette = palette;
488 	}
489 
490 	if (fb_logo.depth <= 4) {
491 		logo_new = kmalloc(logo->width * logo->height, GFP_KERNEL);
492 		if (logo_new == NULL) {
493 			kfree(palette);
494 			if (saved_pseudo_palette)
495 				info->pseudo_palette = saved_pseudo_palette;
496 			return 0;
497 		}
498 		image.data = logo_new;
499 		fb_set_logo(info, logo, logo_new, fb_logo.depth);
500 	}
501 
502 	image.dx = 0;
503 	image.dy = y;
504 	image.width = logo->width;
505 	image.height = logo->height;
506 
507 	if (rotate) {
508 		logo_rotate = kmalloc(logo->width *
509 				      logo->height, GFP_KERNEL);
510 		if (logo_rotate)
511 			fb_rotate_logo(info, logo_rotate, &image, rotate);
512 	}
513 
514 	fb_do_show_logo(info, &image, rotate, n);
515 
516 	kfree(palette);
517 	if (saved_pseudo_palette != NULL)
518 		info->pseudo_palette = saved_pseudo_palette;
519 	kfree(logo_new);
520 	kfree(logo_rotate);
521 	return logo->height;
522 }
523 
524 
525 #ifdef CONFIG_FB_LOGO_EXTRA
526 
527 #define FB_LOGO_EX_NUM_MAX 10
528 static struct logo_data_extra {
529 	const struct linux_logo *logo;
530 	unsigned int n;
531 } fb_logo_ex[FB_LOGO_EX_NUM_MAX];
532 static unsigned int fb_logo_ex_num;
533 
534 void fb_append_extra_logo(const struct linux_logo *logo, unsigned int n)
535 {
536 	if (!n || fb_logo_ex_num == FB_LOGO_EX_NUM_MAX)
537 		return;
538 
539 	fb_logo_ex[fb_logo_ex_num].logo = logo;
540 	fb_logo_ex[fb_logo_ex_num].n = n;
541 	fb_logo_ex_num++;
542 }
543 
544 static int fb_prepare_extra_logos(struct fb_info *info, unsigned int height,
545 				  unsigned int yres)
546 {
547 	unsigned int i;
548 
549 	/* FIXME: logo_ex supports only truecolor fb. */
550 	if (info->fix.visual != FB_VISUAL_TRUECOLOR)
551 		fb_logo_ex_num = 0;
552 
553 	for (i = 0; i < fb_logo_ex_num; i++) {
554 		if (fb_logo_ex[i].logo->type != fb_logo.logo->type) {
555 			fb_logo_ex[i].logo = NULL;
556 			continue;
557 		}
558 		height += fb_logo_ex[i].logo->height;
559 		if (height > yres) {
560 			height -= fb_logo_ex[i].logo->height;
561 			fb_logo_ex_num = i;
562 			break;
563 		}
564 	}
565 	return height;
566 }
567 
568 static int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
569 {
570 	unsigned int i;
571 
572 	for (i = 0; i < fb_logo_ex_num; i++)
573 		y += fb_show_logo_line(info, rotate,
574 				       fb_logo_ex[i].logo, y, fb_logo_ex[i].n);
575 
576 	return y;
577 }
578 
579 #else /* !CONFIG_FB_LOGO_EXTRA */
580 
581 static inline int fb_prepare_extra_logos(struct fb_info *info,
582 					 unsigned int height,
583 					 unsigned int yres)
584 {
585 	return height;
586 }
587 
588 static inline int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
589 {
590 	return y;
591 }
592 
593 #endif /* CONFIG_FB_LOGO_EXTRA */
594 
595 
596 int fb_prepare_logo(struct fb_info *info, int rotate)
597 {
598 	int depth = fb_get_color_depth(&info->var, &info->fix);
599 	unsigned int yres;
600 
601 	memset(&fb_logo, 0, sizeof(struct logo_data));
602 
603 	if (info->flags & FBINFO_MISC_TILEBLITTING ||
604 	    info->flags & FBINFO_MODULE)
605 		return 0;
606 
607 	if (info->fix.visual == FB_VISUAL_DIRECTCOLOR) {
608 		depth = info->var.blue.length;
609 		if (info->var.red.length < depth)
610 			depth = info->var.red.length;
611 		if (info->var.green.length < depth)
612 			depth = info->var.green.length;
613 	}
614 
615 	if (info->fix.visual == FB_VISUAL_STATIC_PSEUDOCOLOR && depth > 4) {
616 		/* assume console colormap */
617 		depth = 4;
618 	}
619 
620 	/* Return if no suitable logo was found */
621 	fb_logo.logo = fb_find_logo(depth);
622 
623 	if (!fb_logo.logo) {
624 		return 0;
625 	}
626 
627 	if (rotate == FB_ROTATE_UR || rotate == FB_ROTATE_UD)
628 		yres = info->var.yres;
629 	else
630 		yres = info->var.xres;
631 
632 	if (fb_logo.logo->height > yres) {
633 		fb_logo.logo = NULL;
634 		return 0;
635 	}
636 
637 	/* What depth we asked for might be different from what we get */
638 	if (fb_logo.logo->type == LINUX_LOGO_CLUT224)
639 		fb_logo.depth = 8;
640 	else if (fb_logo.logo->type == LINUX_LOGO_VGA16)
641 		fb_logo.depth = 4;
642 	else
643 		fb_logo.depth = 1;
644 
645 
646  	if (fb_logo.depth > 4 && depth > 4) {
647  		switch (info->fix.visual) {
648  		case FB_VISUAL_TRUECOLOR:
649  			fb_logo.needs_truepalette = 1;
650  			break;
651  		case FB_VISUAL_DIRECTCOLOR:
652  			fb_logo.needs_directpalette = 1;
653  			fb_logo.needs_cmapreset = 1;
654  			break;
655  		case FB_VISUAL_PSEUDOCOLOR:
656  			fb_logo.needs_cmapreset = 1;
657  			break;
658  		}
659  	}
660 
661 	return fb_prepare_extra_logos(info, fb_logo.logo->height, yres);
662 }
663 
664 int fb_show_logo(struct fb_info *info, int rotate)
665 {
666 	int y;
667 
668 	y = fb_show_logo_line(info, rotate, fb_logo.logo, 0,
669 			      num_online_cpus());
670 	y = fb_show_extra_logos(info, y, rotate);
671 
672 	return y;
673 }
674 #else
675 int fb_prepare_logo(struct fb_info *info, int rotate) { return 0; }
676 int fb_show_logo(struct fb_info *info, int rotate) { return 0; }
677 #endif /* CONFIG_LOGO */
678 EXPORT_SYMBOL(fb_prepare_logo);
679 EXPORT_SYMBOL(fb_show_logo);
680 
681 static void *fb_seq_start(struct seq_file *m, loff_t *pos)
682 {
683 	mutex_lock(&registration_lock);
684 	return (*pos < FB_MAX) ? pos : NULL;
685 }
686 
687 static void *fb_seq_next(struct seq_file *m, void *v, loff_t *pos)
688 {
689 	(*pos)++;
690 	return (*pos < FB_MAX) ? pos : NULL;
691 }
692 
693 static void fb_seq_stop(struct seq_file *m, void *v)
694 {
695 	mutex_unlock(&registration_lock);
696 }
697 
698 static int fb_seq_show(struct seq_file *m, void *v)
699 {
700 	int i = *(loff_t *)v;
701 	struct fb_info *fi = registered_fb[i];
702 
703 	if (fi)
704 		seq_printf(m, "%d %s\n", fi->node, fi->fix.id);
705 	return 0;
706 }
707 
708 static const struct seq_operations proc_fb_seq_ops = {
709 	.start	= fb_seq_start,
710 	.next	= fb_seq_next,
711 	.stop	= fb_seq_stop,
712 	.show	= fb_seq_show,
713 };
714 
715 static int proc_fb_open(struct inode *inode, struct file *file)
716 {
717 	return seq_open(file, &proc_fb_seq_ops);
718 }
719 
720 static const struct file_operations fb_proc_fops = {
721 	.owner		= THIS_MODULE,
722 	.open		= proc_fb_open,
723 	.read		= seq_read,
724 	.llseek		= seq_lseek,
725 	.release	= seq_release,
726 };
727 
728 /*
729  * We hold a reference to the fb_info in file->private_data,
730  * but if the current registered fb has changed, we don't
731  * actually want to use it.
732  *
733  * So look up the fb_info using the inode minor number,
734  * and just verify it against the reference we have.
735  */
736 static struct fb_info *file_fb_info(struct file *file)
737 {
738 	struct inode *inode = file_inode(file);
739 	int fbidx = iminor(inode);
740 	struct fb_info *info = registered_fb[fbidx];
741 
742 	if (info != file->private_data)
743 		info = NULL;
744 	return info;
745 }
746 
747 static ssize_t
748 fb_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)
749 {
750 	unsigned long p = *ppos;
751 	struct fb_info *info = file_fb_info(file);
752 	u8 *buffer, *dst;
753 	u8 __iomem *src;
754 	int c, cnt = 0, err = 0;
755 	unsigned long total_size;
756 
757 	if (!info || ! info->screen_base)
758 		return -ENODEV;
759 
760 	if (info->state != FBINFO_STATE_RUNNING)
761 		return -EPERM;
762 
763 	if (info->fbops->fb_read)
764 		return info->fbops->fb_read(info, buf, count, ppos);
765 
766 	total_size = info->screen_size;
767 
768 	if (total_size == 0)
769 		total_size = info->fix.smem_len;
770 
771 	if (p >= total_size)
772 		return 0;
773 
774 	if (count >= total_size)
775 		count = total_size;
776 
777 	if (count + p > total_size)
778 		count = total_size - p;
779 
780 	buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
781 			 GFP_KERNEL);
782 	if (!buffer)
783 		return -ENOMEM;
784 
785 	src = (u8 __iomem *) (info->screen_base + p);
786 
787 	if (info->fbops->fb_sync)
788 		info->fbops->fb_sync(info);
789 
790 	while (count) {
791 		c  = (count > PAGE_SIZE) ? PAGE_SIZE : count;
792 		dst = buffer;
793 		fb_memcpy_fromfb(dst, src, c);
794 		dst += c;
795 		src += c;
796 
797 		if (copy_to_user(buf, buffer, c)) {
798 			err = -EFAULT;
799 			break;
800 		}
801 		*ppos += c;
802 		buf += c;
803 		cnt += c;
804 		count -= c;
805 	}
806 
807 	kfree(buffer);
808 
809 	return (err) ? err : cnt;
810 }
811 
812 static ssize_t
813 fb_write(struct file *file, const char __user *buf, size_t count, loff_t *ppos)
814 {
815 	unsigned long p = *ppos;
816 	struct fb_info *info = file_fb_info(file);
817 	u8 *buffer, *src;
818 	u8 __iomem *dst;
819 	int c, cnt = 0, err = 0;
820 	unsigned long total_size;
821 
822 	if (!info || !info->screen_base)
823 		return -ENODEV;
824 
825 	if (info->state != FBINFO_STATE_RUNNING)
826 		return -EPERM;
827 
828 	if (info->fbops->fb_write)
829 		return info->fbops->fb_write(info, buf, count, ppos);
830 
831 	total_size = info->screen_size;
832 
833 	if (total_size == 0)
834 		total_size = info->fix.smem_len;
835 
836 	if (p > total_size)
837 		return -EFBIG;
838 
839 	if (count > total_size) {
840 		err = -EFBIG;
841 		count = total_size;
842 	}
843 
844 	if (count + p > total_size) {
845 		if (!err)
846 			err = -ENOSPC;
847 
848 		count = total_size - p;
849 	}
850 
851 	buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
852 			 GFP_KERNEL);
853 	if (!buffer)
854 		return -ENOMEM;
855 
856 	dst = (u8 __iomem *) (info->screen_base + p);
857 
858 	if (info->fbops->fb_sync)
859 		info->fbops->fb_sync(info);
860 
861 	while (count) {
862 		c = (count > PAGE_SIZE) ? PAGE_SIZE : count;
863 		src = buffer;
864 
865 		if (copy_from_user(src, buf, c)) {
866 			err = -EFAULT;
867 			break;
868 		}
869 
870 		fb_memcpy_tofb(dst, src, c);
871 		dst += c;
872 		src += c;
873 		*ppos += c;
874 		buf += c;
875 		cnt += c;
876 		count -= c;
877 	}
878 
879 	kfree(buffer);
880 
881 	return (cnt) ? cnt : err;
882 }
883 
884 int
885 fb_pan_display(struct fb_info *info, struct fb_var_screeninfo *var)
886 {
887 	struct fb_fix_screeninfo *fix = &info->fix;
888 	unsigned int yres = info->var.yres;
889 	int err = 0;
890 
891 	if (var->yoffset > 0) {
892 		if (var->vmode & FB_VMODE_YWRAP) {
893 			if (!fix->ywrapstep || (var->yoffset % fix->ywrapstep))
894 				err = -EINVAL;
895 			else
896 				yres = 0;
897 		} else if (!fix->ypanstep || (var->yoffset % fix->ypanstep))
898 			err = -EINVAL;
899 	}
900 
901 	if (var->xoffset > 0 && (!fix->xpanstep ||
902 				 (var->xoffset % fix->xpanstep)))
903 		err = -EINVAL;
904 
905 	if (err || !info->fbops->fb_pan_display ||
906 	    var->yoffset > info->var.yres_virtual - yres ||
907 	    var->xoffset > info->var.xres_virtual - info->var.xres)
908 		return -EINVAL;
909 
910 	if ((err = info->fbops->fb_pan_display(var, info)))
911 		return err;
912 	info->var.xoffset = var->xoffset;
913 	info->var.yoffset = var->yoffset;
914 	if (var->vmode & FB_VMODE_YWRAP)
915 		info->var.vmode |= FB_VMODE_YWRAP;
916 	else
917 		info->var.vmode &= ~FB_VMODE_YWRAP;
918 	return 0;
919 }
920 EXPORT_SYMBOL(fb_pan_display);
921 
922 static int fb_check_caps(struct fb_info *info, struct fb_var_screeninfo *var,
923 			 u32 activate)
924 {
925 	struct fb_event event;
926 	struct fb_blit_caps caps, fbcaps;
927 	int err = 0;
928 
929 	memset(&caps, 0, sizeof(caps));
930 	memset(&fbcaps, 0, sizeof(fbcaps));
931 	caps.flags = (activate & FB_ACTIVATE_ALL) ? 1 : 0;
932 	event.info = info;
933 	event.data = &caps;
934 	fb_notifier_call_chain(FB_EVENT_GET_REQ, &event);
935 	info->fbops->fb_get_caps(info, &fbcaps, var);
936 
937 	if (((fbcaps.x ^ caps.x) & caps.x) ||
938 	    ((fbcaps.y ^ caps.y) & caps.y) ||
939 	    (fbcaps.len < caps.len))
940 		err = -EINVAL;
941 
942 	return err;
943 }
944 
945 int
946 fb_set_var(struct fb_info *info, struct fb_var_screeninfo *var)
947 {
948 	int flags = info->flags;
949 	int ret = 0;
950 
951 	if (var->activate & FB_ACTIVATE_INV_MODE) {
952 		struct fb_videomode mode1, mode2;
953 
954 		fb_var_to_videomode(&mode1, var);
955 		fb_var_to_videomode(&mode2, &info->var);
956 		/* make sure we don't delete the videomode of current var */
957 		ret = fb_mode_is_equal(&mode1, &mode2);
958 
959 		if (!ret) {
960 		    struct fb_event event;
961 
962 		    event.info = info;
963 		    event.data = &mode1;
964 		    ret = fb_notifier_call_chain(FB_EVENT_MODE_DELETE, &event);
965 		}
966 
967 		if (!ret)
968 		    fb_delete_videomode(&mode1, &info->modelist);
969 
970 
971 		ret = (ret) ? -EINVAL : 0;
972 		goto done;
973 	}
974 
975 	if ((var->activate & FB_ACTIVATE_FORCE) ||
976 	    memcmp(&info->var, var, sizeof(struct fb_var_screeninfo))) {
977 		u32 activate = var->activate;
978 
979 		/* When using FOURCC mode, make sure the red, green, blue and
980 		 * transp fields are set to 0.
981 		 */
982 		if ((info->fix.capabilities & FB_CAP_FOURCC) &&
983 		    var->grayscale > 1) {
984 			if (var->red.offset     || var->green.offset    ||
985 			    var->blue.offset    || var->transp.offset   ||
986 			    var->red.length     || var->green.length    ||
987 			    var->blue.length    || var->transp.length   ||
988 			    var->red.msb_right  || var->green.msb_right ||
989 			    var->blue.msb_right || var->transp.msb_right)
990 				return -EINVAL;
991 		}
992 
993 		if (!info->fbops->fb_check_var) {
994 			*var = info->var;
995 			goto done;
996 		}
997 
998 		ret = info->fbops->fb_check_var(var, info);
999 
1000 		if (ret)
1001 			goto done;
1002 
1003 		if ((var->activate & FB_ACTIVATE_MASK) == FB_ACTIVATE_NOW) {
1004 			struct fb_var_screeninfo old_var;
1005 			struct fb_videomode mode;
1006 
1007 			if (info->fbops->fb_get_caps) {
1008 				ret = fb_check_caps(info, var, activate);
1009 
1010 				if (ret)
1011 					goto done;
1012 			}
1013 
1014 			old_var = info->var;
1015 			info->var = *var;
1016 
1017 			if (info->fbops->fb_set_par) {
1018 				ret = info->fbops->fb_set_par(info);
1019 
1020 				if (ret) {
1021 					info->var = old_var;
1022 					printk(KERN_WARNING "detected "
1023 						"fb_set_par error, "
1024 						"error code: %d\n", ret);
1025 					goto done;
1026 				}
1027 			}
1028 
1029 			fb_pan_display(info, &info->var);
1030 			fb_set_cmap(&info->cmap, info);
1031 			fb_var_to_videomode(&mode, &info->var);
1032 
1033 			if (info->modelist.prev && info->modelist.next &&
1034 			    !list_empty(&info->modelist))
1035 				ret = fb_add_videomode(&mode, &info->modelist);
1036 
1037 			if (!ret && (flags & FBINFO_MISC_USEREVENT)) {
1038 				struct fb_event event;
1039 				int evnt = (activate & FB_ACTIVATE_ALL) ?
1040 					FB_EVENT_MODE_CHANGE_ALL :
1041 					FB_EVENT_MODE_CHANGE;
1042 
1043 				info->flags &= ~FBINFO_MISC_USEREVENT;
1044 				event.info = info;
1045 				event.data = &mode;
1046 				fb_notifier_call_chain(evnt, &event);
1047 			}
1048 		}
1049 	}
1050 
1051  done:
1052 	return ret;
1053 }
1054 EXPORT_SYMBOL(fb_set_var);
1055 
1056 int
1057 fb_blank(struct fb_info *info, int blank)
1058 {
1059 	struct fb_event event;
1060 	int ret = -EINVAL, early_ret;
1061 
1062  	if (blank > FB_BLANK_POWERDOWN)
1063  		blank = FB_BLANK_POWERDOWN;
1064 
1065 	event.info = info;
1066 	event.data = &blank;
1067 
1068 	early_ret = fb_notifier_call_chain(FB_EARLY_EVENT_BLANK, &event);
1069 
1070 	if (info->fbops->fb_blank)
1071  		ret = info->fbops->fb_blank(blank, info);
1072 
1073 	if (!ret)
1074 		fb_notifier_call_chain(FB_EVENT_BLANK, &event);
1075 	else {
1076 		/*
1077 		 * if fb_blank is failed then revert effects of
1078 		 * the early blank event.
1079 		 */
1080 		if (!early_ret)
1081 			fb_notifier_call_chain(FB_R_EARLY_EVENT_BLANK, &event);
1082 	}
1083 
1084  	return ret;
1085 }
1086 EXPORT_SYMBOL(fb_blank);
1087 
1088 static long do_fb_ioctl(struct fb_info *info, unsigned int cmd,
1089 			unsigned long arg)
1090 {
1091 	struct fb_ops *fb;
1092 	struct fb_var_screeninfo var;
1093 	struct fb_fix_screeninfo fix;
1094 	struct fb_con2fbmap con2fb;
1095 	struct fb_cmap cmap_from;
1096 	struct fb_cmap_user cmap;
1097 	struct fb_event event;
1098 	void __user *argp = (void __user *)arg;
1099 	long ret = 0;
1100 
1101 	switch (cmd) {
1102 	case FBIOGET_VSCREENINFO:
1103 		if (!lock_fb_info(info))
1104 			return -ENODEV;
1105 		var = info->var;
1106 		unlock_fb_info(info);
1107 
1108 		ret = copy_to_user(argp, &var, sizeof(var)) ? -EFAULT : 0;
1109 		break;
1110 	case FBIOPUT_VSCREENINFO:
1111 		if (copy_from_user(&var, argp, sizeof(var)))
1112 			return -EFAULT;
1113 		console_lock();
1114 		if (!lock_fb_info(info)) {
1115 			console_unlock();
1116 			return -ENODEV;
1117 		}
1118 		info->flags |= FBINFO_MISC_USEREVENT;
1119 		ret = fb_set_var(info, &var);
1120 		info->flags &= ~FBINFO_MISC_USEREVENT;
1121 		unlock_fb_info(info);
1122 		console_unlock();
1123 		if (!ret && copy_to_user(argp, &var, sizeof(var)))
1124 			ret = -EFAULT;
1125 		break;
1126 	case FBIOGET_FSCREENINFO:
1127 		if (!lock_fb_info(info))
1128 			return -ENODEV;
1129 		fix = info->fix;
1130 		unlock_fb_info(info);
1131 
1132 		ret = copy_to_user(argp, &fix, sizeof(fix)) ? -EFAULT : 0;
1133 		break;
1134 	case FBIOPUTCMAP:
1135 		if (copy_from_user(&cmap, argp, sizeof(cmap)))
1136 			return -EFAULT;
1137 		ret = fb_set_user_cmap(&cmap, info);
1138 		break;
1139 	case FBIOGETCMAP:
1140 		if (copy_from_user(&cmap, argp, sizeof(cmap)))
1141 			return -EFAULT;
1142 		if (!lock_fb_info(info))
1143 			return -ENODEV;
1144 		cmap_from = info->cmap;
1145 		unlock_fb_info(info);
1146 		ret = fb_cmap_to_user(&cmap_from, &cmap);
1147 		break;
1148 	case FBIOPAN_DISPLAY:
1149 		if (copy_from_user(&var, argp, sizeof(var)))
1150 			return -EFAULT;
1151 		console_lock();
1152 		if (!lock_fb_info(info)) {
1153 			console_unlock();
1154 			return -ENODEV;
1155 		}
1156 		ret = fb_pan_display(info, &var);
1157 		unlock_fb_info(info);
1158 		console_unlock();
1159 		if (ret == 0 && copy_to_user(argp, &var, sizeof(var)))
1160 			return -EFAULT;
1161 		break;
1162 	case FBIO_CURSOR:
1163 		ret = -EINVAL;
1164 		break;
1165 	case FBIOGET_CON2FBMAP:
1166 		if (copy_from_user(&con2fb, argp, sizeof(con2fb)))
1167 			return -EFAULT;
1168 		if (con2fb.console < 1 || con2fb.console > MAX_NR_CONSOLES)
1169 			return -EINVAL;
1170 		con2fb.framebuffer = -1;
1171 		event.data = &con2fb;
1172 		if (!lock_fb_info(info))
1173 			return -ENODEV;
1174 		event.info = info;
1175 		fb_notifier_call_chain(FB_EVENT_GET_CONSOLE_MAP, &event);
1176 		unlock_fb_info(info);
1177 		ret = copy_to_user(argp, &con2fb, sizeof(con2fb)) ? -EFAULT : 0;
1178 		break;
1179 	case FBIOPUT_CON2FBMAP:
1180 		if (copy_from_user(&con2fb, argp, sizeof(con2fb)))
1181 			return -EFAULT;
1182 		if (con2fb.console < 1 || con2fb.console > MAX_NR_CONSOLES)
1183 			return -EINVAL;
1184 		if (con2fb.framebuffer >= FB_MAX)
1185 			return -EINVAL;
1186 		if (!registered_fb[con2fb.framebuffer])
1187 			request_module("fb%d", con2fb.framebuffer);
1188 		if (!registered_fb[con2fb.framebuffer]) {
1189 			ret = -EINVAL;
1190 			break;
1191 		}
1192 		event.data = &con2fb;
1193 		console_lock();
1194 		if (!lock_fb_info(info)) {
1195 			console_unlock();
1196 			return -ENODEV;
1197 		}
1198 		event.info = info;
1199 		ret = fb_notifier_call_chain(FB_EVENT_SET_CONSOLE_MAP, &event);
1200 		unlock_fb_info(info);
1201 		console_unlock();
1202 		break;
1203 	case FBIOBLANK:
1204 		console_lock();
1205 		if (!lock_fb_info(info)) {
1206 			console_unlock();
1207 			return -ENODEV;
1208 		}
1209 		info->flags |= FBINFO_MISC_USEREVENT;
1210 		ret = fb_blank(info, arg);
1211 		info->flags &= ~FBINFO_MISC_USEREVENT;
1212 		unlock_fb_info(info);
1213 		console_unlock();
1214 		break;
1215 	default:
1216 		if (!lock_fb_info(info))
1217 			return -ENODEV;
1218 		fb = info->fbops;
1219 		if (fb->fb_ioctl)
1220 			ret = fb->fb_ioctl(info, cmd, arg);
1221 		else
1222 			ret = -ENOTTY;
1223 		unlock_fb_info(info);
1224 	}
1225 	return ret;
1226 }
1227 
1228 static long fb_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
1229 {
1230 	struct fb_info *info = file_fb_info(file);
1231 
1232 	if (!info)
1233 		return -ENODEV;
1234 	return do_fb_ioctl(info, cmd, arg);
1235 }
1236 
1237 #ifdef CONFIG_COMPAT
1238 struct fb_fix_screeninfo32 {
1239 	char			id[16];
1240 	compat_caddr_t		smem_start;
1241 	u32			smem_len;
1242 	u32			type;
1243 	u32			type_aux;
1244 	u32			visual;
1245 	u16			xpanstep;
1246 	u16			ypanstep;
1247 	u16			ywrapstep;
1248 	u32			line_length;
1249 	compat_caddr_t		mmio_start;
1250 	u32			mmio_len;
1251 	u32			accel;
1252 	u16			reserved[3];
1253 };
1254 
1255 struct fb_cmap32 {
1256 	u32			start;
1257 	u32			len;
1258 	compat_caddr_t	red;
1259 	compat_caddr_t	green;
1260 	compat_caddr_t	blue;
1261 	compat_caddr_t	transp;
1262 };
1263 
1264 static int fb_getput_cmap(struct fb_info *info, unsigned int cmd,
1265 			  unsigned long arg)
1266 {
1267 	struct fb_cmap_user __user *cmap;
1268 	struct fb_cmap32 __user *cmap32;
1269 	__u32 data;
1270 	int err;
1271 
1272 	cmap = compat_alloc_user_space(sizeof(*cmap));
1273 	cmap32 = compat_ptr(arg);
1274 
1275 	if (copy_in_user(&cmap->start, &cmap32->start, 2 * sizeof(__u32)))
1276 		return -EFAULT;
1277 
1278 	if (get_user(data, &cmap32->red) ||
1279 	    put_user(compat_ptr(data), &cmap->red) ||
1280 	    get_user(data, &cmap32->green) ||
1281 	    put_user(compat_ptr(data), &cmap->green) ||
1282 	    get_user(data, &cmap32->blue) ||
1283 	    put_user(compat_ptr(data), &cmap->blue) ||
1284 	    get_user(data, &cmap32->transp) ||
1285 	    put_user(compat_ptr(data), &cmap->transp))
1286 		return -EFAULT;
1287 
1288 	err = do_fb_ioctl(info, cmd, (unsigned long) cmap);
1289 
1290 	if (!err) {
1291 		if (copy_in_user(&cmap32->start,
1292 				 &cmap->start,
1293 				 2 * sizeof(__u32)))
1294 			err = -EFAULT;
1295 	}
1296 	return err;
1297 }
1298 
1299 static int do_fscreeninfo_to_user(struct fb_fix_screeninfo *fix,
1300 				  struct fb_fix_screeninfo32 __user *fix32)
1301 {
1302 	__u32 data;
1303 	int err;
1304 
1305 	err = copy_to_user(&fix32->id, &fix->id, sizeof(fix32->id));
1306 
1307 	data = (__u32) (unsigned long) fix->smem_start;
1308 	err |= put_user(data, &fix32->smem_start);
1309 
1310 	err |= put_user(fix->smem_len, &fix32->smem_len);
1311 	err |= put_user(fix->type, &fix32->type);
1312 	err |= put_user(fix->type_aux, &fix32->type_aux);
1313 	err |= put_user(fix->visual, &fix32->visual);
1314 	err |= put_user(fix->xpanstep, &fix32->xpanstep);
1315 	err |= put_user(fix->ypanstep, &fix32->ypanstep);
1316 	err |= put_user(fix->ywrapstep, &fix32->ywrapstep);
1317 	err |= put_user(fix->line_length, &fix32->line_length);
1318 
1319 	data = (__u32) (unsigned long) fix->mmio_start;
1320 	err |= put_user(data, &fix32->mmio_start);
1321 
1322 	err |= put_user(fix->mmio_len, &fix32->mmio_len);
1323 	err |= put_user(fix->accel, &fix32->accel);
1324 	err |= copy_to_user(fix32->reserved, fix->reserved,
1325 			    sizeof(fix->reserved));
1326 
1327 	if (err)
1328 		return -EFAULT;
1329 	return 0;
1330 }
1331 
1332 static int fb_get_fscreeninfo(struct fb_info *info, unsigned int cmd,
1333 			      unsigned long arg)
1334 {
1335 	struct fb_fix_screeninfo fix;
1336 
1337 	if (!lock_fb_info(info))
1338 		return -ENODEV;
1339 	fix = info->fix;
1340 	unlock_fb_info(info);
1341 	return do_fscreeninfo_to_user(&fix, compat_ptr(arg));
1342 }
1343 
1344 static long fb_compat_ioctl(struct file *file, unsigned int cmd,
1345 			    unsigned long arg)
1346 {
1347 	struct fb_info *info = file_fb_info(file);
1348 	struct fb_ops *fb;
1349 	long ret = -ENOIOCTLCMD;
1350 
1351 	if (!info)
1352 		return -ENODEV;
1353 	fb = info->fbops;
1354 	switch(cmd) {
1355 	case FBIOGET_VSCREENINFO:
1356 	case FBIOPUT_VSCREENINFO:
1357 	case FBIOPAN_DISPLAY:
1358 	case FBIOGET_CON2FBMAP:
1359 	case FBIOPUT_CON2FBMAP:
1360 		arg = (unsigned long) compat_ptr(arg);
1361 	case FBIOBLANK:
1362 		ret = do_fb_ioctl(info, cmd, arg);
1363 		break;
1364 
1365 	case FBIOGET_FSCREENINFO:
1366 		ret = fb_get_fscreeninfo(info, cmd, arg);
1367 		break;
1368 
1369 	case FBIOGETCMAP:
1370 	case FBIOPUTCMAP:
1371 		ret = fb_getput_cmap(info, cmd, arg);
1372 		break;
1373 
1374 	default:
1375 		if (fb->fb_compat_ioctl)
1376 			ret = fb->fb_compat_ioctl(info, cmd, arg);
1377 		break;
1378 	}
1379 	return ret;
1380 }
1381 #endif
1382 
1383 static int
1384 fb_mmap(struct file *file, struct vm_area_struct * vma)
1385 {
1386 	struct fb_info *info = file_fb_info(file);
1387 	struct fb_ops *fb;
1388 	unsigned long mmio_pgoff;
1389 	unsigned long start;
1390 	u32 len;
1391 
1392 	if (!info)
1393 		return -ENODEV;
1394 	fb = info->fbops;
1395 	if (!fb)
1396 		return -ENODEV;
1397 	mutex_lock(&info->mm_lock);
1398 	if (fb->fb_mmap) {
1399 		int res;
1400 
1401 		/*
1402 		 * The framebuffer needs to be accessed decrypted, be sure
1403 		 * SME protection is removed ahead of the call
1404 		 */
1405 		vma->vm_page_prot = pgprot_decrypted(vma->vm_page_prot);
1406 		res = fb->fb_mmap(info, vma);
1407 		mutex_unlock(&info->mm_lock);
1408 		return res;
1409 	}
1410 
1411 	/*
1412 	 * Ugh. This can be either the frame buffer mapping, or
1413 	 * if pgoff points past it, the mmio mapping.
1414 	 */
1415 	start = info->fix.smem_start;
1416 	len = info->fix.smem_len;
1417 	mmio_pgoff = PAGE_ALIGN((start & ~PAGE_MASK) + len) >> PAGE_SHIFT;
1418 	if (vma->vm_pgoff >= mmio_pgoff) {
1419 		if (info->var.accel_flags) {
1420 			mutex_unlock(&info->mm_lock);
1421 			return -EINVAL;
1422 		}
1423 
1424 		vma->vm_pgoff -= mmio_pgoff;
1425 		start = info->fix.mmio_start;
1426 		len = info->fix.mmio_len;
1427 	}
1428 	mutex_unlock(&info->mm_lock);
1429 
1430 	vma->vm_page_prot = vm_get_page_prot(vma->vm_flags);
1431 	/*
1432 	 * The framebuffer needs to be accessed decrypted, be sure
1433 	 * SME protection is removed
1434 	 */
1435 	vma->vm_page_prot = pgprot_decrypted(vma->vm_page_prot);
1436 	fb_pgprotect(file, vma, start);
1437 
1438 	return vm_iomap_memory(vma, start, len);
1439 }
1440 
1441 static int
1442 fb_open(struct inode *inode, struct file *file)
1443 __acquires(&info->lock)
1444 __releases(&info->lock)
1445 {
1446 	int fbidx = iminor(inode);
1447 	struct fb_info *info;
1448 	int res = 0;
1449 
1450 	info = get_fb_info(fbidx);
1451 	if (!info) {
1452 		request_module("fb%d", fbidx);
1453 		info = get_fb_info(fbidx);
1454 		if (!info)
1455 			return -ENODEV;
1456 	}
1457 	if (IS_ERR(info))
1458 		return PTR_ERR(info);
1459 
1460 	mutex_lock(&info->lock);
1461 	if (!try_module_get(info->fbops->owner)) {
1462 		res = -ENODEV;
1463 		goto out;
1464 	}
1465 	file->private_data = info;
1466 	if (info->fbops->fb_open) {
1467 		res = info->fbops->fb_open(info,1);
1468 		if (res)
1469 			module_put(info->fbops->owner);
1470 	}
1471 #ifdef CONFIG_FB_DEFERRED_IO
1472 	if (info->fbdefio)
1473 		fb_deferred_io_open(info, inode, file);
1474 #endif
1475 out:
1476 	mutex_unlock(&info->lock);
1477 	if (res)
1478 		put_fb_info(info);
1479 	return res;
1480 }
1481 
1482 static int
1483 fb_release(struct inode *inode, struct file *file)
1484 __acquires(&info->lock)
1485 __releases(&info->lock)
1486 {
1487 	struct fb_info * const info = file->private_data;
1488 
1489 	mutex_lock(&info->lock);
1490 	if (info->fbops->fb_release)
1491 		info->fbops->fb_release(info,1);
1492 	module_put(info->fbops->owner);
1493 	mutex_unlock(&info->lock);
1494 	put_fb_info(info);
1495 	return 0;
1496 }
1497 
1498 #if defined(CONFIG_FB_PROVIDE_GET_FB_UNMAPPED_AREA) && !defined(CONFIG_MMU)
1499 unsigned long get_fb_unmapped_area(struct file *filp,
1500 				   unsigned long addr, unsigned long len,
1501 				   unsigned long pgoff, unsigned long flags)
1502 {
1503 	struct fb_info * const info = filp->private_data;
1504 	unsigned long fb_size = PAGE_ALIGN(info->fix.smem_len);
1505 
1506 	if (pgoff > fb_size || len > fb_size - pgoff)
1507 		return -EINVAL;
1508 
1509 	return (unsigned long)info->screen_base + pgoff;
1510 }
1511 #endif
1512 
1513 static const struct file_operations fb_fops = {
1514 	.owner =	THIS_MODULE,
1515 	.read =		fb_read,
1516 	.write =	fb_write,
1517 	.unlocked_ioctl = fb_ioctl,
1518 #ifdef CONFIG_COMPAT
1519 	.compat_ioctl = fb_compat_ioctl,
1520 #endif
1521 	.mmap =		fb_mmap,
1522 	.open =		fb_open,
1523 	.release =	fb_release,
1524 #if defined(HAVE_ARCH_FB_UNMAPPED_AREA) || \
1525 	(defined(CONFIG_FB_PROVIDE_GET_FB_UNMAPPED_AREA) && \
1526 	 !defined(CONFIG_MMU))
1527 	.get_unmapped_area = get_fb_unmapped_area,
1528 #endif
1529 #ifdef CONFIG_FB_DEFERRED_IO
1530 	.fsync =	fb_deferred_io_fsync,
1531 #endif
1532 	.llseek =	default_llseek,
1533 };
1534 
1535 struct class *fb_class;
1536 EXPORT_SYMBOL(fb_class);
1537 
1538 static int fb_check_foreignness(struct fb_info *fi)
1539 {
1540 	const bool foreign_endian = fi->flags & FBINFO_FOREIGN_ENDIAN;
1541 
1542 	fi->flags &= ~FBINFO_FOREIGN_ENDIAN;
1543 
1544 #ifdef __BIG_ENDIAN
1545 	fi->flags |= foreign_endian ? 0 : FBINFO_BE_MATH;
1546 #else
1547 	fi->flags |= foreign_endian ? FBINFO_BE_MATH : 0;
1548 #endif /* __BIG_ENDIAN */
1549 
1550 	if (fi->flags & FBINFO_BE_MATH && !fb_be_math(fi)) {
1551 		pr_err("%s: enable CONFIG_FB_BIG_ENDIAN to "
1552 		       "support this framebuffer\n", fi->fix.id);
1553 		return -ENOSYS;
1554 	} else if (!(fi->flags & FBINFO_BE_MATH) && fb_be_math(fi)) {
1555 		pr_err("%s: enable CONFIG_FB_LITTLE_ENDIAN to "
1556 		       "support this framebuffer\n", fi->fix.id);
1557 		return -ENOSYS;
1558 	}
1559 
1560 	return 0;
1561 }
1562 
1563 static bool apertures_overlap(struct aperture *gen, struct aperture *hw)
1564 {
1565 	/* is the generic aperture base the same as the HW one */
1566 	if (gen->base == hw->base)
1567 		return true;
1568 	/* is the generic aperture base inside the hw base->hw base+size */
1569 	if (gen->base > hw->base && gen->base < hw->base + hw->size)
1570 		return true;
1571 	return false;
1572 }
1573 
1574 static bool fb_do_apertures_overlap(struct apertures_struct *gena,
1575 				    struct apertures_struct *hwa)
1576 {
1577 	int i, j;
1578 	if (!hwa || !gena)
1579 		return false;
1580 
1581 	for (i = 0; i < hwa->count; ++i) {
1582 		struct aperture *h = &hwa->ranges[i];
1583 		for (j = 0; j < gena->count; ++j) {
1584 			struct aperture *g = &gena->ranges[j];
1585 			printk(KERN_DEBUG "checking generic (%llx %llx) vs hw (%llx %llx)\n",
1586 				(unsigned long long)g->base,
1587 				(unsigned long long)g->size,
1588 				(unsigned long long)h->base,
1589 				(unsigned long long)h->size);
1590 			if (apertures_overlap(g, h))
1591 				return true;
1592 		}
1593 	}
1594 
1595 	return false;
1596 }
1597 
1598 static int do_unregister_framebuffer(struct fb_info *fb_info);
1599 
1600 #define VGA_FB_PHYS 0xA0000
1601 static int do_remove_conflicting_framebuffers(struct apertures_struct *a,
1602 					      const char *name, bool primary)
1603 {
1604 	int i, ret;
1605 
1606 	/* check all firmware fbs and kick off if the base addr overlaps */
1607 	for (i = 0 ; i < FB_MAX; i++) {
1608 		struct apertures_struct *gen_aper;
1609 		if (!registered_fb[i])
1610 			continue;
1611 
1612 		if (!(registered_fb[i]->flags & FBINFO_MISC_FIRMWARE))
1613 			continue;
1614 
1615 		gen_aper = registered_fb[i]->apertures;
1616 		if (fb_do_apertures_overlap(gen_aper, a) ||
1617 			(primary && gen_aper && gen_aper->count &&
1618 			 gen_aper->ranges[0].base == VGA_FB_PHYS)) {
1619 
1620 			printk(KERN_INFO "fb: switching to %s from %s\n",
1621 			       name, registered_fb[i]->fix.id);
1622 			ret = do_unregister_framebuffer(registered_fb[i]);
1623 			if (ret)
1624 				return ret;
1625 		}
1626 	}
1627 
1628 	return 0;
1629 }
1630 
1631 static bool lockless_register_fb;
1632 module_param_named_unsafe(lockless_register_fb, lockless_register_fb, bool, 0400);
1633 MODULE_PARM_DESC(lockless_register_fb,
1634 	"Lockless framebuffer registration for debugging [default=off]");
1635 
1636 static int do_register_framebuffer(struct fb_info *fb_info)
1637 {
1638 	int i, ret;
1639 	struct fb_event event;
1640 	struct fb_videomode mode;
1641 
1642 	if (fb_check_foreignness(fb_info))
1643 		return -ENOSYS;
1644 
1645 	ret = do_remove_conflicting_framebuffers(fb_info->apertures,
1646 						 fb_info->fix.id,
1647 						 fb_is_primary_device(fb_info));
1648 	if (ret)
1649 		return ret;
1650 
1651 	if (num_registered_fb == FB_MAX)
1652 		return -ENXIO;
1653 
1654 	num_registered_fb++;
1655 	for (i = 0 ; i < FB_MAX; i++)
1656 		if (!registered_fb[i])
1657 			break;
1658 	fb_info->node = i;
1659 	atomic_set(&fb_info->count, 1);
1660 	mutex_init(&fb_info->lock);
1661 	mutex_init(&fb_info->mm_lock);
1662 
1663 	fb_info->dev = device_create(fb_class, fb_info->device,
1664 				     MKDEV(FB_MAJOR, i), NULL, "fb%d", i);
1665 	if (IS_ERR(fb_info->dev)) {
1666 		/* Not fatal */
1667 		printk(KERN_WARNING "Unable to create device for framebuffer %d; errno = %ld\n", i, PTR_ERR(fb_info->dev));
1668 		fb_info->dev = NULL;
1669 	} else
1670 		fb_init_device(fb_info);
1671 
1672 	if (fb_info->pixmap.addr == NULL) {
1673 		fb_info->pixmap.addr = kmalloc(FBPIXMAPSIZE, GFP_KERNEL);
1674 		if (fb_info->pixmap.addr) {
1675 			fb_info->pixmap.size = FBPIXMAPSIZE;
1676 			fb_info->pixmap.buf_align = 1;
1677 			fb_info->pixmap.scan_align = 1;
1678 			fb_info->pixmap.access_align = 32;
1679 			fb_info->pixmap.flags = FB_PIXMAP_DEFAULT;
1680 		}
1681 	}
1682 	fb_info->pixmap.offset = 0;
1683 
1684 	if (!fb_info->pixmap.blit_x)
1685 		fb_info->pixmap.blit_x = ~(u32)0;
1686 
1687 	if (!fb_info->pixmap.blit_y)
1688 		fb_info->pixmap.blit_y = ~(u32)0;
1689 
1690 	if (!fb_info->modelist.prev || !fb_info->modelist.next)
1691 		INIT_LIST_HEAD(&fb_info->modelist);
1692 
1693 	if (fb_info->skip_vt_switch)
1694 		pm_vt_switch_required(fb_info->dev, false);
1695 	else
1696 		pm_vt_switch_required(fb_info->dev, true);
1697 
1698 	fb_var_to_videomode(&mode, &fb_info->var);
1699 	fb_add_videomode(&mode, &fb_info->modelist);
1700 	registered_fb[i] = fb_info;
1701 
1702 	event.info = fb_info;
1703 	if (!lockless_register_fb)
1704 		console_lock();
1705 	if (!lock_fb_info(fb_info)) {
1706 		if (!lockless_register_fb)
1707 			console_unlock();
1708 		return -ENODEV;
1709 	}
1710 
1711 	fb_notifier_call_chain(FB_EVENT_FB_REGISTERED, &event);
1712 	unlock_fb_info(fb_info);
1713 	if (!lockless_register_fb)
1714 		console_unlock();
1715 	return 0;
1716 }
1717 
1718 static int do_unregister_framebuffer(struct fb_info *fb_info)
1719 {
1720 	struct fb_event event;
1721 	int i, ret = 0;
1722 
1723 	i = fb_info->node;
1724 	if (i < 0 || i >= FB_MAX || registered_fb[i] != fb_info)
1725 		return -EINVAL;
1726 
1727 	console_lock();
1728 	if (!lock_fb_info(fb_info)) {
1729 		console_unlock();
1730 		return -ENODEV;
1731 	}
1732 
1733 	event.info = fb_info;
1734 	ret = fb_notifier_call_chain(FB_EVENT_FB_UNBIND, &event);
1735 	unlock_fb_info(fb_info);
1736 	console_unlock();
1737 
1738 	if (ret)
1739 		return -EINVAL;
1740 
1741 	pm_vt_switch_unregister(fb_info->dev);
1742 
1743 	unlink_framebuffer(fb_info);
1744 	if (fb_info->pixmap.addr &&
1745 	    (fb_info->pixmap.flags & FB_PIXMAP_DEFAULT))
1746 		kfree(fb_info->pixmap.addr);
1747 	fb_destroy_modelist(&fb_info->modelist);
1748 	registered_fb[i] = NULL;
1749 	num_registered_fb--;
1750 	fb_cleanup_device(fb_info);
1751 	event.info = fb_info;
1752 	console_lock();
1753 	fb_notifier_call_chain(FB_EVENT_FB_UNREGISTERED, &event);
1754 	console_unlock();
1755 
1756 	/* this may free fb info */
1757 	put_fb_info(fb_info);
1758 	return 0;
1759 }
1760 
1761 int unlink_framebuffer(struct fb_info *fb_info)
1762 {
1763 	int i;
1764 
1765 	i = fb_info->node;
1766 	if (i < 0 || i >= FB_MAX || registered_fb[i] != fb_info)
1767 		return -EINVAL;
1768 
1769 	if (fb_info->dev) {
1770 		device_destroy(fb_class, MKDEV(FB_MAJOR, i));
1771 		fb_info->dev = NULL;
1772 	}
1773 	return 0;
1774 }
1775 EXPORT_SYMBOL(unlink_framebuffer);
1776 
1777 int remove_conflicting_framebuffers(struct apertures_struct *a,
1778 				    const char *name, bool primary)
1779 {
1780 	int ret;
1781 
1782 	mutex_lock(&registration_lock);
1783 	ret = do_remove_conflicting_framebuffers(a, name, primary);
1784 	mutex_unlock(&registration_lock);
1785 
1786 	return ret;
1787 }
1788 EXPORT_SYMBOL(remove_conflicting_framebuffers);
1789 
1790 /**
1791  *	register_framebuffer - registers a frame buffer device
1792  *	@fb_info: frame buffer info structure
1793  *
1794  *	Registers a frame buffer device @fb_info.
1795  *
1796  *	Returns negative errno on error, or zero for success.
1797  *
1798  */
1799 int
1800 register_framebuffer(struct fb_info *fb_info)
1801 {
1802 	int ret;
1803 
1804 	mutex_lock(&registration_lock);
1805 	ret = do_register_framebuffer(fb_info);
1806 	mutex_unlock(&registration_lock);
1807 
1808 	return ret;
1809 }
1810 EXPORT_SYMBOL(register_framebuffer);
1811 
1812 /**
1813  *	unregister_framebuffer - releases a frame buffer device
1814  *	@fb_info: frame buffer info structure
1815  *
1816  *	Unregisters a frame buffer device @fb_info.
1817  *
1818  *	Returns negative errno on error, or zero for success.
1819  *
1820  *      This function will also notify the framebuffer console
1821  *      to release the driver.
1822  *
1823  *      This is meant to be called within a driver's module_exit()
1824  *      function. If this is called outside module_exit(), ensure
1825  *      that the driver implements fb_open() and fb_release() to
1826  *      check that no processes are using the device.
1827  */
1828 int
1829 unregister_framebuffer(struct fb_info *fb_info)
1830 {
1831 	int ret;
1832 
1833 	mutex_lock(&registration_lock);
1834 	ret = do_unregister_framebuffer(fb_info);
1835 	mutex_unlock(&registration_lock);
1836 
1837 	return ret;
1838 }
1839 EXPORT_SYMBOL(unregister_framebuffer);
1840 
1841 /**
1842  *	fb_set_suspend - low level driver signals suspend
1843  *	@info: framebuffer affected
1844  *	@state: 0 = resuming, !=0 = suspending
1845  *
1846  *	This is meant to be used by low level drivers to
1847  * 	signal suspend/resume to the core & clients.
1848  *	It must be called with the console semaphore held
1849  */
1850 void fb_set_suspend(struct fb_info *info, int state)
1851 {
1852 	struct fb_event event;
1853 
1854 	event.info = info;
1855 	if (state) {
1856 		fb_notifier_call_chain(FB_EVENT_SUSPEND, &event);
1857 		info->state = FBINFO_STATE_SUSPENDED;
1858 	} else {
1859 		info->state = FBINFO_STATE_RUNNING;
1860 		fb_notifier_call_chain(FB_EVENT_RESUME, &event);
1861 	}
1862 }
1863 EXPORT_SYMBOL(fb_set_suspend);
1864 
1865 /**
1866  *	fbmem_init - init frame buffer subsystem
1867  *
1868  *	Initialize the frame buffer subsystem.
1869  *
1870  *	NOTE: This function is _only_ to be called by drivers/char/mem.c.
1871  *
1872  */
1873 
1874 static int __init
1875 fbmem_init(void)
1876 {
1877 	int ret;
1878 
1879 	if (!proc_create("fb", 0, NULL, &fb_proc_fops))
1880 		return -ENOMEM;
1881 
1882 	ret = register_chrdev(FB_MAJOR, "fb", &fb_fops);
1883 	if (ret) {
1884 		printk("unable to get major %d for fb devs\n", FB_MAJOR);
1885 		goto err_chrdev;
1886 	}
1887 
1888 	fb_class = class_create(THIS_MODULE, "graphics");
1889 	if (IS_ERR(fb_class)) {
1890 		ret = PTR_ERR(fb_class);
1891 		pr_warn("Unable to create fb class; errno = %d\n", ret);
1892 		fb_class = NULL;
1893 		goto err_class;
1894 	}
1895 	return 0;
1896 
1897 err_class:
1898 	unregister_chrdev(FB_MAJOR, "fb");
1899 err_chrdev:
1900 	remove_proc_entry("fb", NULL);
1901 	return ret;
1902 }
1903 
1904 #ifdef MODULE
1905 module_init(fbmem_init);
1906 static void __exit
1907 fbmem_exit(void)
1908 {
1909 	remove_proc_entry("fb", NULL);
1910 	class_destroy(fb_class);
1911 	unregister_chrdev(FB_MAJOR, "fb");
1912 }
1913 
1914 module_exit(fbmem_exit);
1915 MODULE_LICENSE("GPL");
1916 MODULE_DESCRIPTION("Framebuffer base");
1917 #else
1918 subsys_initcall(fbmem_init);
1919 #endif
1920 
1921 int fb_new_modelist(struct fb_info *info)
1922 {
1923 	struct fb_event event;
1924 	struct fb_var_screeninfo var = info->var;
1925 	struct list_head *pos, *n;
1926 	struct fb_modelist *modelist;
1927 	struct fb_videomode *m, mode;
1928 	int err = 1;
1929 
1930 	list_for_each_safe(pos, n, &info->modelist) {
1931 		modelist = list_entry(pos, struct fb_modelist, list);
1932 		m = &modelist->mode;
1933 		fb_videomode_to_var(&var, m);
1934 		var.activate = FB_ACTIVATE_TEST;
1935 		err = fb_set_var(info, &var);
1936 		fb_var_to_videomode(&mode, &var);
1937 		if (err || !fb_mode_is_equal(m, &mode)) {
1938 			list_del(pos);
1939 			kfree(pos);
1940 		}
1941 	}
1942 
1943 	err = 1;
1944 
1945 	if (!list_empty(&info->modelist)) {
1946 		event.info = info;
1947 		err = fb_notifier_call_chain(FB_EVENT_NEW_MODELIST, &event);
1948 	}
1949 
1950 	return err;
1951 }
1952 
1953 MODULE_LICENSE("GPL");
1954