xref: /linux-6.15/drivers/gpu/drm/drm_atomic.c (revision 0a80eb4c)
1 /*
2  * Copyright (C) 2014 Red Hat
3  * Copyright (C) 2014 Intel Corp.
4  *
5  * Permission is hereby granted, free of charge, to any person obtaining a
6  * copy of this software and associated documentation files (the "Software"),
7  * to deal in the Software without restriction, including without limitation
8  * the rights to use, copy, modify, merge, publish, distribute, sublicense,
9  * and/or sell copies of the Software, and to permit persons to whom the
10  * Software is furnished to do so, subject to the following conditions:
11  *
12  * The above copyright notice and this permission notice shall be included in
13  * all copies or substantial portions of the Software.
14  *
15  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
18  * THE COPYRIGHT HOLDER(S) OR AUTHOR(S) BE LIABLE FOR ANY CLAIM, DAMAGES OR
19  * OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
20  * ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
21  * OTHER DEALINGS IN THE SOFTWARE.
22  *
23  * Authors:
24  * Rob Clark <[email protected]>
25  * Daniel Vetter <[email protected]>
26  */
27 
28 
29 #include <drm/drmP.h>
30 #include <drm/drm_atomic.h>
31 #include <drm/drm_mode.h>
32 #include <drm/drm_print.h>
33 #include <drm/drm_writeback.h>
34 #include <linux/sync_file.h>
35 
36 #include "drm_crtc_internal.h"
37 #include "drm_internal.h"
38 
39 void __drm_crtc_commit_free(struct kref *kref)
40 {
41 	struct drm_crtc_commit *commit =
42 		container_of(kref, struct drm_crtc_commit, ref);
43 
44 	kfree(commit);
45 }
46 EXPORT_SYMBOL(__drm_crtc_commit_free);
47 
48 /**
49  * drm_atomic_state_default_release -
50  * release memory initialized by drm_atomic_state_init
51  * @state: atomic state
52  *
53  * Free all the memory allocated by drm_atomic_state_init.
54  * This should only be used by drivers which are still subclassing
55  * &drm_atomic_state and haven't switched to &drm_private_state yet.
56  */
57 void drm_atomic_state_default_release(struct drm_atomic_state *state)
58 {
59 	kfree(state->connectors);
60 	kfree(state->crtcs);
61 	kfree(state->planes);
62 	kfree(state->private_objs);
63 }
64 EXPORT_SYMBOL(drm_atomic_state_default_release);
65 
66 /**
67  * drm_atomic_state_init - init new atomic state
68  * @dev: DRM device
69  * @state: atomic state
70  *
71  * Default implementation for filling in a new atomic state.
72  * This should only be used by drivers which are still subclassing
73  * &drm_atomic_state and haven't switched to &drm_private_state yet.
74  */
75 int
76 drm_atomic_state_init(struct drm_device *dev, struct drm_atomic_state *state)
77 {
78 	kref_init(&state->ref);
79 
80 	/* TODO legacy paths should maybe do a better job about
81 	 * setting this appropriately?
82 	 */
83 	state->allow_modeset = true;
84 
85 	state->crtcs = kcalloc(dev->mode_config.num_crtc,
86 			       sizeof(*state->crtcs), GFP_KERNEL);
87 	if (!state->crtcs)
88 		goto fail;
89 	state->planes = kcalloc(dev->mode_config.num_total_plane,
90 				sizeof(*state->planes), GFP_KERNEL);
91 	if (!state->planes)
92 		goto fail;
93 
94 	state->dev = dev;
95 
96 	DRM_DEBUG_ATOMIC("Allocated atomic state %p\n", state);
97 
98 	return 0;
99 fail:
100 	drm_atomic_state_default_release(state);
101 	return -ENOMEM;
102 }
103 EXPORT_SYMBOL(drm_atomic_state_init);
104 
105 /**
106  * drm_atomic_state_alloc - allocate atomic state
107  * @dev: DRM device
108  *
109  * This allocates an empty atomic state to track updates.
110  */
111 struct drm_atomic_state *
112 drm_atomic_state_alloc(struct drm_device *dev)
113 {
114 	struct drm_mode_config *config = &dev->mode_config;
115 
116 	if (!config->funcs->atomic_state_alloc) {
117 		struct drm_atomic_state *state;
118 
119 		state = kzalloc(sizeof(*state), GFP_KERNEL);
120 		if (!state)
121 			return NULL;
122 		if (drm_atomic_state_init(dev, state) < 0) {
123 			kfree(state);
124 			return NULL;
125 		}
126 		return state;
127 	}
128 
129 	return config->funcs->atomic_state_alloc(dev);
130 }
131 EXPORT_SYMBOL(drm_atomic_state_alloc);
132 
133 /**
134  * drm_atomic_state_default_clear - clear base atomic state
135  * @state: atomic state
136  *
137  * Default implementation for clearing atomic state.
138  * This should only be used by drivers which are still subclassing
139  * &drm_atomic_state and haven't switched to &drm_private_state yet.
140  */
141 void drm_atomic_state_default_clear(struct drm_atomic_state *state)
142 {
143 	struct drm_device *dev = state->dev;
144 	struct drm_mode_config *config = &dev->mode_config;
145 	int i;
146 
147 	DRM_DEBUG_ATOMIC("Clearing atomic state %p\n", state);
148 
149 	for (i = 0; i < state->num_connector; i++) {
150 		struct drm_connector *connector = state->connectors[i].ptr;
151 
152 		if (!connector)
153 			continue;
154 
155 		connector->funcs->atomic_destroy_state(connector,
156 						       state->connectors[i].state);
157 		state->connectors[i].ptr = NULL;
158 		state->connectors[i].state = NULL;
159 		state->connectors[i].old_state = NULL;
160 		state->connectors[i].new_state = NULL;
161 		drm_connector_put(connector);
162 	}
163 
164 	for (i = 0; i < config->num_crtc; i++) {
165 		struct drm_crtc *crtc = state->crtcs[i].ptr;
166 
167 		if (!crtc)
168 			continue;
169 
170 		crtc->funcs->atomic_destroy_state(crtc,
171 						  state->crtcs[i].state);
172 
173 		state->crtcs[i].ptr = NULL;
174 		state->crtcs[i].state = NULL;
175 		state->crtcs[i].old_state = NULL;
176 		state->crtcs[i].new_state = NULL;
177 	}
178 
179 	for (i = 0; i < config->num_total_plane; i++) {
180 		struct drm_plane *plane = state->planes[i].ptr;
181 
182 		if (!plane)
183 			continue;
184 
185 		plane->funcs->atomic_destroy_state(plane,
186 						   state->planes[i].state);
187 		state->planes[i].ptr = NULL;
188 		state->planes[i].state = NULL;
189 		state->planes[i].old_state = NULL;
190 		state->planes[i].new_state = NULL;
191 	}
192 
193 	for (i = 0; i < state->num_private_objs; i++) {
194 		struct drm_private_obj *obj = state->private_objs[i].ptr;
195 
196 		obj->funcs->atomic_destroy_state(obj,
197 						 state->private_objs[i].state);
198 		state->private_objs[i].ptr = NULL;
199 		state->private_objs[i].state = NULL;
200 		state->private_objs[i].old_state = NULL;
201 		state->private_objs[i].new_state = NULL;
202 	}
203 	state->num_private_objs = 0;
204 
205 	if (state->fake_commit) {
206 		drm_crtc_commit_put(state->fake_commit);
207 		state->fake_commit = NULL;
208 	}
209 }
210 EXPORT_SYMBOL(drm_atomic_state_default_clear);
211 
212 /**
213  * drm_atomic_state_clear - clear state object
214  * @state: atomic state
215  *
216  * When the w/w mutex algorithm detects a deadlock we need to back off and drop
217  * all locks. So someone else could sneak in and change the current modeset
218  * configuration. Which means that all the state assembled in @state is no
219  * longer an atomic update to the current state, but to some arbitrary earlier
220  * state. Which could break assumptions the driver's
221  * &drm_mode_config_funcs.atomic_check likely relies on.
222  *
223  * Hence we must clear all cached state and completely start over, using this
224  * function.
225  */
226 void drm_atomic_state_clear(struct drm_atomic_state *state)
227 {
228 	struct drm_device *dev = state->dev;
229 	struct drm_mode_config *config = &dev->mode_config;
230 
231 	if (config->funcs->atomic_state_clear)
232 		config->funcs->atomic_state_clear(state);
233 	else
234 		drm_atomic_state_default_clear(state);
235 }
236 EXPORT_SYMBOL(drm_atomic_state_clear);
237 
238 /**
239  * __drm_atomic_state_free - free all memory for an atomic state
240  * @ref: This atomic state to deallocate
241  *
242  * This frees all memory associated with an atomic state, including all the
243  * per-object state for planes, crtcs and connectors.
244  */
245 void __drm_atomic_state_free(struct kref *ref)
246 {
247 	struct drm_atomic_state *state = container_of(ref, typeof(*state), ref);
248 	struct drm_mode_config *config = &state->dev->mode_config;
249 
250 	drm_atomic_state_clear(state);
251 
252 	DRM_DEBUG_ATOMIC("Freeing atomic state %p\n", state);
253 
254 	if (config->funcs->atomic_state_free) {
255 		config->funcs->atomic_state_free(state);
256 	} else {
257 		drm_atomic_state_default_release(state);
258 		kfree(state);
259 	}
260 }
261 EXPORT_SYMBOL(__drm_atomic_state_free);
262 
263 /**
264  * drm_atomic_get_crtc_state - get crtc state
265  * @state: global atomic state object
266  * @crtc: crtc to get state object for
267  *
268  * This function returns the crtc state for the given crtc, allocating it if
269  * needed. It will also grab the relevant crtc lock to make sure that the state
270  * is consistent.
271  *
272  * Returns:
273  *
274  * Either the allocated state or the error code encoded into the pointer. When
275  * the error is EDEADLK then the w/w mutex code has detected a deadlock and the
276  * entire atomic sequence must be restarted. All other errors are fatal.
277  */
278 struct drm_crtc_state *
279 drm_atomic_get_crtc_state(struct drm_atomic_state *state,
280 			  struct drm_crtc *crtc)
281 {
282 	int ret, index = drm_crtc_index(crtc);
283 	struct drm_crtc_state *crtc_state;
284 
285 	WARN_ON(!state->acquire_ctx);
286 
287 	crtc_state = drm_atomic_get_existing_crtc_state(state, crtc);
288 	if (crtc_state)
289 		return crtc_state;
290 
291 	ret = drm_modeset_lock(&crtc->mutex, state->acquire_ctx);
292 	if (ret)
293 		return ERR_PTR(ret);
294 
295 	crtc_state = crtc->funcs->atomic_duplicate_state(crtc);
296 	if (!crtc_state)
297 		return ERR_PTR(-ENOMEM);
298 
299 	state->crtcs[index].state = crtc_state;
300 	state->crtcs[index].old_state = crtc->state;
301 	state->crtcs[index].new_state = crtc_state;
302 	state->crtcs[index].ptr = crtc;
303 	crtc_state->state = state;
304 
305 	DRM_DEBUG_ATOMIC("Added [CRTC:%d:%s] %p state to %p\n",
306 			 crtc->base.id, crtc->name, crtc_state, state);
307 
308 	return crtc_state;
309 }
310 EXPORT_SYMBOL(drm_atomic_get_crtc_state);
311 
312 static void set_out_fence_for_crtc(struct drm_atomic_state *state,
313 				   struct drm_crtc *crtc, s32 __user *fence_ptr)
314 {
315 	state->crtcs[drm_crtc_index(crtc)].out_fence_ptr = fence_ptr;
316 }
317 
318 static s32 __user *get_out_fence_for_crtc(struct drm_atomic_state *state,
319 					  struct drm_crtc *crtc)
320 {
321 	s32 __user *fence_ptr;
322 
323 	fence_ptr = state->crtcs[drm_crtc_index(crtc)].out_fence_ptr;
324 	state->crtcs[drm_crtc_index(crtc)].out_fence_ptr = NULL;
325 
326 	return fence_ptr;
327 }
328 
329 static int set_out_fence_for_connector(struct drm_atomic_state *state,
330 					struct drm_connector *connector,
331 					s32 __user *fence_ptr)
332 {
333 	unsigned int index = drm_connector_index(connector);
334 
335 	if (!fence_ptr)
336 		return 0;
337 
338 	if (put_user(-1, fence_ptr))
339 		return -EFAULT;
340 
341 	state->connectors[index].out_fence_ptr = fence_ptr;
342 
343 	return 0;
344 }
345 
346 static s32 __user *get_out_fence_for_connector(struct drm_atomic_state *state,
347 					       struct drm_connector *connector)
348 {
349 	unsigned int index = drm_connector_index(connector);
350 	s32 __user *fence_ptr;
351 
352 	fence_ptr = state->connectors[index].out_fence_ptr;
353 	state->connectors[index].out_fence_ptr = NULL;
354 
355 	return fence_ptr;
356 }
357 
358 /**
359  * drm_atomic_set_mode_for_crtc - set mode for CRTC
360  * @state: the CRTC whose incoming state to update
361  * @mode: kernel-internal mode to use for the CRTC, or NULL to disable
362  *
363  * Set a mode (originating from the kernel) on the desired CRTC state and update
364  * the enable property.
365  *
366  * RETURNS:
367  * Zero on success, error code on failure. Cannot return -EDEADLK.
368  */
369 int drm_atomic_set_mode_for_crtc(struct drm_crtc_state *state,
370 				 const struct drm_display_mode *mode)
371 {
372 	struct drm_crtc *crtc = state->crtc;
373 	struct drm_mode_modeinfo umode;
374 
375 	/* Early return for no change. */
376 	if (mode && memcmp(&state->mode, mode, sizeof(*mode)) == 0)
377 		return 0;
378 
379 	drm_property_blob_put(state->mode_blob);
380 	state->mode_blob = NULL;
381 
382 	if (mode) {
383 		drm_mode_convert_to_umode(&umode, mode);
384 		state->mode_blob =
385 			drm_property_create_blob(state->crtc->dev,
386 		                                 sizeof(umode),
387 		                                 &umode);
388 		if (IS_ERR(state->mode_blob))
389 			return PTR_ERR(state->mode_blob);
390 
391 		drm_mode_copy(&state->mode, mode);
392 		state->enable = true;
393 		DRM_DEBUG_ATOMIC("Set [MODE:%s] for [CRTC:%d:%s] state %p\n",
394 				 mode->name, crtc->base.id, crtc->name, state);
395 	} else {
396 		memset(&state->mode, 0, sizeof(state->mode));
397 		state->enable = false;
398 		DRM_DEBUG_ATOMIC("Set [NOMODE] for [CRTC:%d:%s] state %p\n",
399 				 crtc->base.id, crtc->name, state);
400 	}
401 
402 	return 0;
403 }
404 EXPORT_SYMBOL(drm_atomic_set_mode_for_crtc);
405 
406 /**
407  * drm_atomic_set_mode_prop_for_crtc - set mode for CRTC
408  * @state: the CRTC whose incoming state to update
409  * @blob: pointer to blob property to use for mode
410  *
411  * Set a mode (originating from a blob property) on the desired CRTC state.
412  * This function will take a reference on the blob property for the CRTC state,
413  * and release the reference held on the state's existing mode property, if any
414  * was set.
415  *
416  * RETURNS:
417  * Zero on success, error code on failure. Cannot return -EDEADLK.
418  */
419 int drm_atomic_set_mode_prop_for_crtc(struct drm_crtc_state *state,
420                                       struct drm_property_blob *blob)
421 {
422 	struct drm_crtc *crtc = state->crtc;
423 
424 	if (blob == state->mode_blob)
425 		return 0;
426 
427 	drm_property_blob_put(state->mode_blob);
428 	state->mode_blob = NULL;
429 
430 	memset(&state->mode, 0, sizeof(state->mode));
431 
432 	if (blob) {
433 		int ret;
434 
435 		if (blob->length != sizeof(struct drm_mode_modeinfo)) {
436 			DRM_DEBUG_ATOMIC("[CRTC:%d:%s] bad mode blob length: %zu\n",
437 					 crtc->base.id, crtc->name,
438 					 blob->length);
439 			return -EINVAL;
440 		}
441 
442 		ret = drm_mode_convert_umode(crtc->dev,
443 					     &state->mode, blob->data);
444 		if (ret) {
445 			DRM_DEBUG_ATOMIC("[CRTC:%d:%s] invalid mode (ret=%d, status=%s):\n",
446 					 crtc->base.id, crtc->name,
447 					 ret, drm_get_mode_status_name(state->mode.status));
448 			drm_mode_debug_printmodeline(&state->mode);
449 			return -EINVAL;
450 		}
451 
452 		state->mode_blob = drm_property_blob_get(blob);
453 		state->enable = true;
454 		DRM_DEBUG_ATOMIC("Set [MODE:%s] for [CRTC:%d:%s] state %p\n",
455 				 state->mode.name, crtc->base.id, crtc->name,
456 				 state);
457 	} else {
458 		state->enable = false;
459 		DRM_DEBUG_ATOMIC("Set [NOMODE] for [CRTC:%d:%s] state %p\n",
460 				 crtc->base.id, crtc->name, state);
461 	}
462 
463 	return 0;
464 }
465 EXPORT_SYMBOL(drm_atomic_set_mode_prop_for_crtc);
466 
467 /**
468  * drm_atomic_replace_property_blob_from_id - lookup the new blob and replace the old one with it
469  * @dev: DRM device
470  * @blob: a pointer to the member blob to be replaced
471  * @blob_id: ID of the new blob
472  * @expected_size: total expected size of the blob data (in bytes)
473  * @expected_elem_size: expected element size of the blob data (in bytes)
474  * @replaced: did the blob get replaced?
475  *
476  * Replace @blob with another blob with the ID @blob_id. If @blob_id is zero
477  * @blob becomes NULL.
478  *
479  * If @expected_size is positive the new blob length is expected to be equal
480  * to @expected_size bytes. If @expected_elem_size is positive the new blob
481  * length is expected to be a multiple of @expected_elem_size bytes. Otherwise
482  * an error is returned.
483  *
484  * @replaced will indicate to the caller whether the blob was replaced or not.
485  * If the old and new blobs were in fact the same blob @replaced will be false
486  * otherwise it will be true.
487  *
488  * RETURNS:
489  * Zero on success, error code on failure.
490  */
491 static int
492 drm_atomic_replace_property_blob_from_id(struct drm_device *dev,
493 					 struct drm_property_blob **blob,
494 					 uint64_t blob_id,
495 					 ssize_t expected_size,
496 					 ssize_t expected_elem_size,
497 					 bool *replaced)
498 {
499 	struct drm_property_blob *new_blob = NULL;
500 
501 	if (blob_id != 0) {
502 		new_blob = drm_property_lookup_blob(dev, blob_id);
503 		if (new_blob == NULL)
504 			return -EINVAL;
505 
506 		if (expected_size > 0 &&
507 		    new_blob->length != expected_size) {
508 			drm_property_blob_put(new_blob);
509 			return -EINVAL;
510 		}
511 		if (expected_elem_size > 0 &&
512 		    new_blob->length % expected_elem_size != 0) {
513 			drm_property_blob_put(new_blob);
514 			return -EINVAL;
515 		}
516 	}
517 
518 	*replaced |= drm_property_replace_blob(blob, new_blob);
519 	drm_property_blob_put(new_blob);
520 
521 	return 0;
522 }
523 
524 /**
525  * drm_atomic_crtc_set_property - set property on CRTC
526  * @crtc: the drm CRTC to set a property on
527  * @state: the state object to update with the new property value
528  * @property: the property to set
529  * @val: the new property value
530  *
531  * This function handles generic/core properties and calls out to driver's
532  * &drm_crtc_funcs.atomic_set_property for driver properties. To ensure
533  * consistent behavior you must call this function rather than the driver hook
534  * directly.
535  *
536  * RETURNS:
537  * Zero on success, error code on failure
538  */
539 int drm_atomic_crtc_set_property(struct drm_crtc *crtc,
540 		struct drm_crtc_state *state, struct drm_property *property,
541 		uint64_t val)
542 {
543 	struct drm_device *dev = crtc->dev;
544 	struct drm_mode_config *config = &dev->mode_config;
545 	bool replaced = false;
546 	int ret;
547 
548 	if (property == config->prop_active)
549 		state->active = val;
550 	else if (property == config->prop_mode_id) {
551 		struct drm_property_blob *mode =
552 			drm_property_lookup_blob(dev, val);
553 		ret = drm_atomic_set_mode_prop_for_crtc(state, mode);
554 		drm_property_blob_put(mode);
555 		return ret;
556 	} else if (property == config->degamma_lut_property) {
557 		ret = drm_atomic_replace_property_blob_from_id(dev,
558 					&state->degamma_lut,
559 					val,
560 					-1, sizeof(struct drm_color_lut),
561 					&replaced);
562 		state->color_mgmt_changed |= replaced;
563 		return ret;
564 	} else if (property == config->ctm_property) {
565 		ret = drm_atomic_replace_property_blob_from_id(dev,
566 					&state->ctm,
567 					val,
568 					sizeof(struct drm_color_ctm), -1,
569 					&replaced);
570 		state->color_mgmt_changed |= replaced;
571 		return ret;
572 	} else if (property == config->gamma_lut_property) {
573 		ret = drm_atomic_replace_property_blob_from_id(dev,
574 					&state->gamma_lut,
575 					val,
576 					-1, sizeof(struct drm_color_lut),
577 					&replaced);
578 		state->color_mgmt_changed |= replaced;
579 		return ret;
580 	} else if (property == config->prop_out_fence_ptr) {
581 		s32 __user *fence_ptr = u64_to_user_ptr(val);
582 
583 		if (!fence_ptr)
584 			return 0;
585 
586 		if (put_user(-1, fence_ptr))
587 			return -EFAULT;
588 
589 		set_out_fence_for_crtc(state->state, crtc, fence_ptr);
590 	} else if (crtc->funcs->atomic_set_property) {
591 		return crtc->funcs->atomic_set_property(crtc, state, property, val);
592 	} else {
593 		DRM_DEBUG_ATOMIC("[CRTC:%d:%s] unknown property [PROP:%d:%s]]\n",
594 				 crtc->base.id, crtc->name,
595 				 property->base.id, property->name);
596 		return -EINVAL;
597 	}
598 
599 	return 0;
600 }
601 EXPORT_SYMBOL(drm_atomic_crtc_set_property);
602 
603 /**
604  * drm_atomic_crtc_get_property - get property value from CRTC state
605  * @crtc: the drm CRTC to set a property on
606  * @state: the state object to get the property value from
607  * @property: the property to set
608  * @val: return location for the property value
609  *
610  * This function handles generic/core properties and calls out to driver's
611  * &drm_crtc_funcs.atomic_get_property for driver properties. To ensure
612  * consistent behavior you must call this function rather than the driver hook
613  * directly.
614  *
615  * RETURNS:
616  * Zero on success, error code on failure
617  */
618 static int
619 drm_atomic_crtc_get_property(struct drm_crtc *crtc,
620 		const struct drm_crtc_state *state,
621 		struct drm_property *property, uint64_t *val)
622 {
623 	struct drm_device *dev = crtc->dev;
624 	struct drm_mode_config *config = &dev->mode_config;
625 
626 	if (property == config->prop_active)
627 		*val = state->active;
628 	else if (property == config->prop_mode_id)
629 		*val = (state->mode_blob) ? state->mode_blob->base.id : 0;
630 	else if (property == config->degamma_lut_property)
631 		*val = (state->degamma_lut) ? state->degamma_lut->base.id : 0;
632 	else if (property == config->ctm_property)
633 		*val = (state->ctm) ? state->ctm->base.id : 0;
634 	else if (property == config->gamma_lut_property)
635 		*val = (state->gamma_lut) ? state->gamma_lut->base.id : 0;
636 	else if (property == config->prop_out_fence_ptr)
637 		*val = 0;
638 	else if (crtc->funcs->atomic_get_property)
639 		return crtc->funcs->atomic_get_property(crtc, state, property, val);
640 	else
641 		return -EINVAL;
642 
643 	return 0;
644 }
645 
646 /**
647  * drm_atomic_crtc_check - check crtc state
648  * @crtc: crtc to check
649  * @state: crtc state to check
650  *
651  * Provides core sanity checks for crtc state.
652  *
653  * RETURNS:
654  * Zero on success, error code on failure
655  */
656 static int drm_atomic_crtc_check(struct drm_crtc *crtc,
657 		struct drm_crtc_state *state)
658 {
659 	/* NOTE: we explicitly don't enforce constraints such as primary
660 	 * layer covering entire screen, since that is something we want
661 	 * to allow (on hw that supports it).  For hw that does not, it
662 	 * should be checked in driver's crtc->atomic_check() vfunc.
663 	 *
664 	 * TODO: Add generic modeset state checks once we support those.
665 	 */
666 
667 	if (state->active && !state->enable) {
668 		DRM_DEBUG_ATOMIC("[CRTC:%d:%s] active without enabled\n",
669 				 crtc->base.id, crtc->name);
670 		return -EINVAL;
671 	}
672 
673 	/* The state->enable vs. state->mode_blob checks can be WARN_ON,
674 	 * as this is a kernel-internal detail that userspace should never
675 	 * be able to trigger. */
676 	if (drm_core_check_feature(crtc->dev, DRIVER_ATOMIC) &&
677 	    WARN_ON(state->enable && !state->mode_blob)) {
678 		DRM_DEBUG_ATOMIC("[CRTC:%d:%s] enabled without mode blob\n",
679 				 crtc->base.id, crtc->name);
680 		return -EINVAL;
681 	}
682 
683 	if (drm_core_check_feature(crtc->dev, DRIVER_ATOMIC) &&
684 	    WARN_ON(!state->enable && state->mode_blob)) {
685 		DRM_DEBUG_ATOMIC("[CRTC:%d:%s] disabled with mode blob\n",
686 				 crtc->base.id, crtc->name);
687 		return -EINVAL;
688 	}
689 
690 	/*
691 	 * Reject event generation for when a CRTC is off and stays off.
692 	 * It wouldn't be hard to implement this, but userspace has a track
693 	 * record of happily burning through 100% cpu (or worse, crash) when the
694 	 * display pipe is suspended. To avoid all that fun just reject updates
695 	 * that ask for events since likely that indicates a bug in the
696 	 * compositor's drawing loop. This is consistent with the vblank IOCTL
697 	 * and legacy page_flip IOCTL which also reject service on a disabled
698 	 * pipe.
699 	 */
700 	if (state->event && !state->active && !crtc->state->active) {
701 		DRM_DEBUG_ATOMIC("[CRTC:%d:%s] requesting event but off\n",
702 				 crtc->base.id, crtc->name);
703 		return -EINVAL;
704 	}
705 
706 	return 0;
707 }
708 
709 static void drm_atomic_crtc_print_state(struct drm_printer *p,
710 		const struct drm_crtc_state *state)
711 {
712 	struct drm_crtc *crtc = state->crtc;
713 
714 	drm_printf(p, "crtc[%u]: %s\n", crtc->base.id, crtc->name);
715 	drm_printf(p, "\tenable=%d\n", state->enable);
716 	drm_printf(p, "\tactive=%d\n", state->active);
717 	drm_printf(p, "\tplanes_changed=%d\n", state->planes_changed);
718 	drm_printf(p, "\tmode_changed=%d\n", state->mode_changed);
719 	drm_printf(p, "\tactive_changed=%d\n", state->active_changed);
720 	drm_printf(p, "\tconnectors_changed=%d\n", state->connectors_changed);
721 	drm_printf(p, "\tcolor_mgmt_changed=%d\n", state->color_mgmt_changed);
722 	drm_printf(p, "\tplane_mask=%x\n", state->plane_mask);
723 	drm_printf(p, "\tconnector_mask=%x\n", state->connector_mask);
724 	drm_printf(p, "\tencoder_mask=%x\n", state->encoder_mask);
725 	drm_printf(p, "\tmode: " DRM_MODE_FMT "\n", DRM_MODE_ARG(&state->mode));
726 
727 	if (crtc->funcs->atomic_print_state)
728 		crtc->funcs->atomic_print_state(p, state);
729 }
730 
731 /**
732  * drm_atomic_connector_check - check connector state
733  * @connector: connector to check
734  * @state: connector state to check
735  *
736  * Provides core sanity checks for connector state.
737  *
738  * RETURNS:
739  * Zero on success, error code on failure
740  */
741 static int drm_atomic_connector_check(struct drm_connector *connector,
742 		struct drm_connector_state *state)
743 {
744 	struct drm_crtc_state *crtc_state;
745 	struct drm_writeback_job *writeback_job = state->writeback_job;
746 
747 	if ((connector->connector_type != DRM_MODE_CONNECTOR_WRITEBACK) || !writeback_job)
748 		return 0;
749 
750 	if (writeback_job->fb && !state->crtc) {
751 		DRM_DEBUG_ATOMIC("[CONNECTOR:%d:%s] framebuffer without CRTC\n",
752 				 connector->base.id, connector->name);
753 		return -EINVAL;
754 	}
755 
756 	if (state->crtc)
757 		crtc_state = drm_atomic_get_existing_crtc_state(state->state,
758 								state->crtc);
759 
760 	if (writeback_job->fb && !crtc_state->active) {
761 		DRM_DEBUG_ATOMIC("[CONNECTOR:%d:%s] has framebuffer, but [CRTC:%d] is off\n",
762 				 connector->base.id, connector->name,
763 				 state->crtc->base.id);
764 		return -EINVAL;
765 	}
766 
767 	if (writeback_job->out_fence && !writeback_job->fb) {
768 		DRM_DEBUG_ATOMIC("[CONNECTOR:%d:%s] requesting out-fence without framebuffer\n",
769 				 connector->base.id, connector->name);
770 		return -EINVAL;
771 	}
772 
773 	return 0;
774 }
775 
776 /**
777  * drm_atomic_get_plane_state - get plane state
778  * @state: global atomic state object
779  * @plane: plane to get state object for
780  *
781  * This function returns the plane state for the given plane, allocating it if
782  * needed. It will also grab the relevant plane lock to make sure that the state
783  * is consistent.
784  *
785  * Returns:
786  *
787  * Either the allocated state or the error code encoded into the pointer. When
788  * the error is EDEADLK then the w/w mutex code has detected a deadlock and the
789  * entire atomic sequence must be restarted. All other errors are fatal.
790  */
791 struct drm_plane_state *
792 drm_atomic_get_plane_state(struct drm_atomic_state *state,
793 			  struct drm_plane *plane)
794 {
795 	int ret, index = drm_plane_index(plane);
796 	struct drm_plane_state *plane_state;
797 
798 	WARN_ON(!state->acquire_ctx);
799 
800 	/* the legacy pointers should never be set */
801 	WARN_ON(plane->fb);
802 	WARN_ON(plane->old_fb);
803 	WARN_ON(plane->crtc);
804 
805 	plane_state = drm_atomic_get_existing_plane_state(state, plane);
806 	if (plane_state)
807 		return plane_state;
808 
809 	ret = drm_modeset_lock(&plane->mutex, state->acquire_ctx);
810 	if (ret)
811 		return ERR_PTR(ret);
812 
813 	plane_state = plane->funcs->atomic_duplicate_state(plane);
814 	if (!plane_state)
815 		return ERR_PTR(-ENOMEM);
816 
817 	state->planes[index].state = plane_state;
818 	state->planes[index].ptr = plane;
819 	state->planes[index].old_state = plane->state;
820 	state->planes[index].new_state = plane_state;
821 	plane_state->state = state;
822 
823 	DRM_DEBUG_ATOMIC("Added [PLANE:%d:%s] %p state to %p\n",
824 			 plane->base.id, plane->name, plane_state, state);
825 
826 	if (plane_state->crtc) {
827 		struct drm_crtc_state *crtc_state;
828 
829 		crtc_state = drm_atomic_get_crtc_state(state,
830 						       plane_state->crtc);
831 		if (IS_ERR(crtc_state))
832 			return ERR_CAST(crtc_state);
833 	}
834 
835 	return plane_state;
836 }
837 EXPORT_SYMBOL(drm_atomic_get_plane_state);
838 
839 /**
840  * drm_atomic_plane_set_property - set property on plane
841  * @plane: the drm plane to set a property on
842  * @state: the state object to update with the new property value
843  * @property: the property to set
844  * @val: the new property value
845  *
846  * This function handles generic/core properties and calls out to driver's
847  * &drm_plane_funcs.atomic_set_property for driver properties.  To ensure
848  * consistent behavior you must call this function rather than the driver hook
849  * directly.
850  *
851  * RETURNS:
852  * Zero on success, error code on failure
853  */
854 static int drm_atomic_plane_set_property(struct drm_plane *plane,
855 		struct drm_plane_state *state, struct drm_property *property,
856 		uint64_t val)
857 {
858 	struct drm_device *dev = plane->dev;
859 	struct drm_mode_config *config = &dev->mode_config;
860 
861 	if (property == config->prop_fb_id) {
862 		struct drm_framebuffer *fb = drm_framebuffer_lookup(dev, NULL, val);
863 		drm_atomic_set_fb_for_plane(state, fb);
864 		if (fb)
865 			drm_framebuffer_put(fb);
866 	} else if (property == config->prop_in_fence_fd) {
867 		if (state->fence)
868 			return -EINVAL;
869 
870 		if (U642I64(val) == -1)
871 			return 0;
872 
873 		state->fence = sync_file_get_fence(val);
874 		if (!state->fence)
875 			return -EINVAL;
876 
877 	} else if (property == config->prop_crtc_id) {
878 		struct drm_crtc *crtc = drm_crtc_find(dev, NULL, val);
879 		return drm_atomic_set_crtc_for_plane(state, crtc);
880 	} else if (property == config->prop_crtc_x) {
881 		state->crtc_x = U642I64(val);
882 	} else if (property == config->prop_crtc_y) {
883 		state->crtc_y = U642I64(val);
884 	} else if (property == config->prop_crtc_w) {
885 		state->crtc_w = val;
886 	} else if (property == config->prop_crtc_h) {
887 		state->crtc_h = val;
888 	} else if (property == config->prop_src_x) {
889 		state->src_x = val;
890 	} else if (property == config->prop_src_y) {
891 		state->src_y = val;
892 	} else if (property == config->prop_src_w) {
893 		state->src_w = val;
894 	} else if (property == config->prop_src_h) {
895 		state->src_h = val;
896 	} else if (property == plane->alpha_property) {
897 		state->alpha = val;
898 	} else if (property == plane->rotation_property) {
899 		if (!is_power_of_2(val & DRM_MODE_ROTATE_MASK)) {
900 			DRM_DEBUG_ATOMIC("[PLANE:%d:%s] bad rotation bitmask: 0x%llx\n",
901 					 plane->base.id, plane->name, val);
902 			return -EINVAL;
903 		}
904 		state->rotation = val;
905 	} else if (property == plane->zpos_property) {
906 		state->zpos = val;
907 	} else if (property == plane->color_encoding_property) {
908 		state->color_encoding = val;
909 	} else if (property == plane->color_range_property) {
910 		state->color_range = val;
911 	} else if (plane->funcs->atomic_set_property) {
912 		return plane->funcs->atomic_set_property(plane, state,
913 				property, val);
914 	} else {
915 		DRM_DEBUG_ATOMIC("[PLANE:%d:%s] unknown property [PROP:%d:%s]]\n",
916 				 plane->base.id, plane->name,
917 				 property->base.id, property->name);
918 		return -EINVAL;
919 	}
920 
921 	return 0;
922 }
923 
924 /**
925  * drm_atomic_plane_get_property - get property value from plane state
926  * @plane: the drm plane to set a property on
927  * @state: the state object to get the property value from
928  * @property: the property to set
929  * @val: return location for the property value
930  *
931  * This function handles generic/core properties and calls out to driver's
932  * &drm_plane_funcs.atomic_get_property for driver properties.  To ensure
933  * consistent behavior you must call this function rather than the driver hook
934  * directly.
935  *
936  * RETURNS:
937  * Zero on success, error code on failure
938  */
939 static int
940 drm_atomic_plane_get_property(struct drm_plane *plane,
941 		const struct drm_plane_state *state,
942 		struct drm_property *property, uint64_t *val)
943 {
944 	struct drm_device *dev = plane->dev;
945 	struct drm_mode_config *config = &dev->mode_config;
946 
947 	if (property == config->prop_fb_id) {
948 		*val = (state->fb) ? state->fb->base.id : 0;
949 	} else if (property == config->prop_in_fence_fd) {
950 		*val = -1;
951 	} else if (property == config->prop_crtc_id) {
952 		*val = (state->crtc) ? state->crtc->base.id : 0;
953 	} else if (property == config->prop_crtc_x) {
954 		*val = I642U64(state->crtc_x);
955 	} else if (property == config->prop_crtc_y) {
956 		*val = I642U64(state->crtc_y);
957 	} else if (property == config->prop_crtc_w) {
958 		*val = state->crtc_w;
959 	} else if (property == config->prop_crtc_h) {
960 		*val = state->crtc_h;
961 	} else if (property == config->prop_src_x) {
962 		*val = state->src_x;
963 	} else if (property == config->prop_src_y) {
964 		*val = state->src_y;
965 	} else if (property == config->prop_src_w) {
966 		*val = state->src_w;
967 	} else if (property == config->prop_src_h) {
968 		*val = state->src_h;
969 	} else if (property == plane->alpha_property) {
970 		*val = state->alpha;
971 	} else if (property == plane->rotation_property) {
972 		*val = state->rotation;
973 	} else if (property == plane->zpos_property) {
974 		*val = state->zpos;
975 	} else if (property == plane->color_encoding_property) {
976 		*val = state->color_encoding;
977 	} else if (property == plane->color_range_property) {
978 		*val = state->color_range;
979 	} else if (plane->funcs->atomic_get_property) {
980 		return plane->funcs->atomic_get_property(plane, state, property, val);
981 	} else {
982 		return -EINVAL;
983 	}
984 
985 	return 0;
986 }
987 
988 static bool
989 plane_switching_crtc(struct drm_atomic_state *state,
990 		     struct drm_plane *plane,
991 		     struct drm_plane_state *plane_state)
992 {
993 	if (!plane->state->crtc || !plane_state->crtc)
994 		return false;
995 
996 	if (plane->state->crtc == plane_state->crtc)
997 		return false;
998 
999 	/* This could be refined, but currently there's no helper or driver code
1000 	 * to implement direct switching of active planes nor userspace to take
1001 	 * advantage of more direct plane switching without the intermediate
1002 	 * full OFF state.
1003 	 */
1004 	return true;
1005 }
1006 
1007 /**
1008  * drm_atomic_plane_check - check plane state
1009  * @plane: plane to check
1010  * @state: plane state to check
1011  *
1012  * Provides core sanity checks for plane state.
1013  *
1014  * RETURNS:
1015  * Zero on success, error code on failure
1016  */
1017 static int drm_atomic_plane_check(struct drm_plane *plane,
1018 		struct drm_plane_state *state)
1019 {
1020 	unsigned int fb_width, fb_height;
1021 	int ret;
1022 
1023 	/* either *both* CRTC and FB must be set, or neither */
1024 	if (state->crtc && !state->fb) {
1025 		DRM_DEBUG_ATOMIC("[PLANE:%d:%s] CRTC set but no FB\n",
1026 				 plane->base.id, plane->name);
1027 		return -EINVAL;
1028 	} else if (state->fb && !state->crtc) {
1029 		DRM_DEBUG_ATOMIC("[PLANE:%d:%s] FB set but no CRTC\n",
1030 				 plane->base.id, plane->name);
1031 		return -EINVAL;
1032 	}
1033 
1034 	/* if disabled, we don't care about the rest of the state: */
1035 	if (!state->crtc)
1036 		return 0;
1037 
1038 	/* Check whether this plane is usable on this CRTC */
1039 	if (!(plane->possible_crtcs & drm_crtc_mask(state->crtc))) {
1040 		DRM_DEBUG_ATOMIC("Invalid [CRTC:%d:%s] for [PLANE:%d:%s]\n",
1041 				 state->crtc->base.id, state->crtc->name,
1042 				 plane->base.id, plane->name);
1043 		return -EINVAL;
1044 	}
1045 
1046 	/* Check whether this plane supports the fb pixel format. */
1047 	ret = drm_plane_check_pixel_format(plane, state->fb->format->format,
1048 					   state->fb->modifier);
1049 	if (ret) {
1050 		struct drm_format_name_buf format_name;
1051 		DRM_DEBUG_ATOMIC("[PLANE:%d:%s] invalid pixel format %s, modifier 0x%llx\n",
1052 				 plane->base.id, plane->name,
1053 				 drm_get_format_name(state->fb->format->format,
1054 						     &format_name),
1055 				 state->fb->modifier);
1056 		return ret;
1057 	}
1058 
1059 	/* Give drivers some help against integer overflows */
1060 	if (state->crtc_w > INT_MAX ||
1061 	    state->crtc_x > INT_MAX - (int32_t) state->crtc_w ||
1062 	    state->crtc_h > INT_MAX ||
1063 	    state->crtc_y > INT_MAX - (int32_t) state->crtc_h) {
1064 		DRM_DEBUG_ATOMIC("[PLANE:%d:%s] invalid CRTC coordinates %ux%u+%d+%d\n",
1065 				 plane->base.id, plane->name,
1066 				 state->crtc_w, state->crtc_h,
1067 				 state->crtc_x, state->crtc_y);
1068 		return -ERANGE;
1069 	}
1070 
1071 	fb_width = state->fb->width << 16;
1072 	fb_height = state->fb->height << 16;
1073 
1074 	/* Make sure source coordinates are inside the fb. */
1075 	if (state->src_w > fb_width ||
1076 	    state->src_x > fb_width - state->src_w ||
1077 	    state->src_h > fb_height ||
1078 	    state->src_y > fb_height - state->src_h) {
1079 		DRM_DEBUG_ATOMIC("[PLANE:%d:%s] invalid source coordinates "
1080 				 "%u.%06ux%u.%06u+%u.%06u+%u.%06u (fb %ux%u)\n",
1081 				 plane->base.id, plane->name,
1082 				 state->src_w >> 16, ((state->src_w & 0xffff) * 15625) >> 10,
1083 				 state->src_h >> 16, ((state->src_h & 0xffff) * 15625) >> 10,
1084 				 state->src_x >> 16, ((state->src_x & 0xffff) * 15625) >> 10,
1085 				 state->src_y >> 16, ((state->src_y & 0xffff) * 15625) >> 10,
1086 				 state->fb->width, state->fb->height);
1087 		return -ENOSPC;
1088 	}
1089 
1090 	if (plane_switching_crtc(state->state, plane, state)) {
1091 		DRM_DEBUG_ATOMIC("[PLANE:%d:%s] switching CRTC directly\n",
1092 				 plane->base.id, plane->name);
1093 		return -EINVAL;
1094 	}
1095 
1096 	return 0;
1097 }
1098 
1099 static void drm_atomic_plane_print_state(struct drm_printer *p,
1100 		const struct drm_plane_state *state)
1101 {
1102 	struct drm_plane *plane = state->plane;
1103 	struct drm_rect src  = drm_plane_state_src(state);
1104 	struct drm_rect dest = drm_plane_state_dest(state);
1105 
1106 	drm_printf(p, "plane[%u]: %s\n", plane->base.id, plane->name);
1107 	drm_printf(p, "\tcrtc=%s\n", state->crtc ? state->crtc->name : "(null)");
1108 	drm_printf(p, "\tfb=%u\n", state->fb ? state->fb->base.id : 0);
1109 	if (state->fb)
1110 		drm_framebuffer_print_info(p, 2, state->fb);
1111 	drm_printf(p, "\tcrtc-pos=" DRM_RECT_FMT "\n", DRM_RECT_ARG(&dest));
1112 	drm_printf(p, "\tsrc-pos=" DRM_RECT_FP_FMT "\n", DRM_RECT_FP_ARG(&src));
1113 	drm_printf(p, "\trotation=%x\n", state->rotation);
1114 	drm_printf(p, "\tcolor-encoding=%s\n",
1115 		   drm_get_color_encoding_name(state->color_encoding));
1116 	drm_printf(p, "\tcolor-range=%s\n",
1117 		   drm_get_color_range_name(state->color_range));
1118 
1119 	if (plane->funcs->atomic_print_state)
1120 		plane->funcs->atomic_print_state(p, state);
1121 }
1122 
1123 /**
1124  * DOC: handling driver private state
1125  *
1126  * Very often the DRM objects exposed to userspace in the atomic modeset api
1127  * (&drm_connector, &drm_crtc and &drm_plane) do not map neatly to the
1128  * underlying hardware. Especially for any kind of shared resources (e.g. shared
1129  * clocks, scaler units, bandwidth and fifo limits shared among a group of
1130  * planes or CRTCs, and so on) it makes sense to model these as independent
1131  * objects. Drivers then need to do similar state tracking and commit ordering for
1132  * such private (since not exposed to userpace) objects as the atomic core and
1133  * helpers already provide for connectors, planes and CRTCs.
1134  *
1135  * To make this easier on drivers the atomic core provides some support to track
1136  * driver private state objects using struct &drm_private_obj, with the
1137  * associated state struct &drm_private_state.
1138  *
1139  * Similar to userspace-exposed objects, private state structures can be
1140  * acquired by calling drm_atomic_get_private_obj_state(). Since this function
1141  * does not take care of locking, drivers should wrap it for each type of
1142  * private state object they have with the required call to drm_modeset_lock()
1143  * for the corresponding &drm_modeset_lock.
1144  *
1145  * All private state structures contained in a &drm_atomic_state update can be
1146  * iterated using for_each_oldnew_private_obj_in_state(),
1147  * for_each_new_private_obj_in_state() and for_each_old_private_obj_in_state().
1148  * Drivers are recommended to wrap these for each type of driver private state
1149  * object they have, filtering on &drm_private_obj.funcs using for_each_if(), at
1150  * least if they want to iterate over all objects of a given type.
1151  *
1152  * An earlier way to handle driver private state was by subclassing struct
1153  * &drm_atomic_state. But since that encourages non-standard ways to implement
1154  * the check/commit split atomic requires (by using e.g. "check and rollback or
1155  * commit instead" of "duplicate state, check, then either commit or release
1156  * duplicated state) it is deprecated in favour of using &drm_private_state.
1157  */
1158 
1159 /**
1160  * drm_atomic_private_obj_init - initialize private object
1161  * @obj: private object
1162  * @state: initial private object state
1163  * @funcs: pointer to the struct of function pointers that identify the object
1164  * type
1165  *
1166  * Initialize the private object, which can be embedded into any
1167  * driver private object that needs its own atomic state.
1168  */
1169 void
1170 drm_atomic_private_obj_init(struct drm_private_obj *obj,
1171 			    struct drm_private_state *state,
1172 			    const struct drm_private_state_funcs *funcs)
1173 {
1174 	memset(obj, 0, sizeof(*obj));
1175 
1176 	obj->state = state;
1177 	obj->funcs = funcs;
1178 }
1179 EXPORT_SYMBOL(drm_atomic_private_obj_init);
1180 
1181 /**
1182  * drm_atomic_private_obj_fini - finalize private object
1183  * @obj: private object
1184  *
1185  * Finalize the private object.
1186  */
1187 void
1188 drm_atomic_private_obj_fini(struct drm_private_obj *obj)
1189 {
1190 	obj->funcs->atomic_destroy_state(obj, obj->state);
1191 }
1192 EXPORT_SYMBOL(drm_atomic_private_obj_fini);
1193 
1194 /**
1195  * drm_atomic_get_private_obj_state - get private object state
1196  * @state: global atomic state
1197  * @obj: private object to get the state for
1198  *
1199  * This function returns the private object state for the given private object,
1200  * allocating the state if needed. It does not grab any locks as the caller is
1201  * expected to care of any required locking.
1202  *
1203  * RETURNS:
1204  *
1205  * Either the allocated state or the error code encoded into a pointer.
1206  */
1207 struct drm_private_state *
1208 drm_atomic_get_private_obj_state(struct drm_atomic_state *state,
1209 				 struct drm_private_obj *obj)
1210 {
1211 	int index, num_objs, i;
1212 	size_t size;
1213 	struct __drm_private_objs_state *arr;
1214 	struct drm_private_state *obj_state;
1215 
1216 	for (i = 0; i < state->num_private_objs; i++)
1217 		if (obj == state->private_objs[i].ptr)
1218 			return state->private_objs[i].state;
1219 
1220 	num_objs = state->num_private_objs + 1;
1221 	size = sizeof(*state->private_objs) * num_objs;
1222 	arr = krealloc(state->private_objs, size, GFP_KERNEL);
1223 	if (!arr)
1224 		return ERR_PTR(-ENOMEM);
1225 
1226 	state->private_objs = arr;
1227 	index = state->num_private_objs;
1228 	memset(&state->private_objs[index], 0, sizeof(*state->private_objs));
1229 
1230 	obj_state = obj->funcs->atomic_duplicate_state(obj);
1231 	if (!obj_state)
1232 		return ERR_PTR(-ENOMEM);
1233 
1234 	state->private_objs[index].state = obj_state;
1235 	state->private_objs[index].old_state = obj->state;
1236 	state->private_objs[index].new_state = obj_state;
1237 	state->private_objs[index].ptr = obj;
1238 	obj_state->state = state;
1239 
1240 	state->num_private_objs = num_objs;
1241 
1242 	DRM_DEBUG_ATOMIC("Added new private object %p state %p to %p\n",
1243 			 obj, obj_state, state);
1244 
1245 	return obj_state;
1246 }
1247 EXPORT_SYMBOL(drm_atomic_get_private_obj_state);
1248 
1249 /**
1250  * drm_atomic_get_connector_state - get connector state
1251  * @state: global atomic state object
1252  * @connector: connector to get state object for
1253  *
1254  * This function returns the connector state for the given connector,
1255  * allocating it if needed. It will also grab the relevant connector lock to
1256  * make sure that the state is consistent.
1257  *
1258  * Returns:
1259  *
1260  * Either the allocated state or the error code encoded into the pointer. When
1261  * the error is EDEADLK then the w/w mutex code has detected a deadlock and the
1262  * entire atomic sequence must be restarted. All other errors are fatal.
1263  */
1264 struct drm_connector_state *
1265 drm_atomic_get_connector_state(struct drm_atomic_state *state,
1266 			  struct drm_connector *connector)
1267 {
1268 	int ret, index;
1269 	struct drm_mode_config *config = &connector->dev->mode_config;
1270 	struct drm_connector_state *connector_state;
1271 
1272 	WARN_ON(!state->acquire_ctx);
1273 
1274 	ret = drm_modeset_lock(&config->connection_mutex, state->acquire_ctx);
1275 	if (ret)
1276 		return ERR_PTR(ret);
1277 
1278 	index = drm_connector_index(connector);
1279 
1280 	if (index >= state->num_connector) {
1281 		struct __drm_connnectors_state *c;
1282 		int alloc = max(index + 1, config->num_connector);
1283 
1284 		c = krealloc(state->connectors, alloc * sizeof(*state->connectors), GFP_KERNEL);
1285 		if (!c)
1286 			return ERR_PTR(-ENOMEM);
1287 
1288 		state->connectors = c;
1289 		memset(&state->connectors[state->num_connector], 0,
1290 		       sizeof(*state->connectors) * (alloc - state->num_connector));
1291 
1292 		state->num_connector = alloc;
1293 	}
1294 
1295 	if (state->connectors[index].state)
1296 		return state->connectors[index].state;
1297 
1298 	connector_state = connector->funcs->atomic_duplicate_state(connector);
1299 	if (!connector_state)
1300 		return ERR_PTR(-ENOMEM);
1301 
1302 	drm_connector_get(connector);
1303 	state->connectors[index].state = connector_state;
1304 	state->connectors[index].old_state = connector->state;
1305 	state->connectors[index].new_state = connector_state;
1306 	state->connectors[index].ptr = connector;
1307 	connector_state->state = state;
1308 
1309 	DRM_DEBUG_ATOMIC("Added [CONNECTOR:%d:%s] %p state to %p\n",
1310 			 connector->base.id, connector->name,
1311 			 connector_state, state);
1312 
1313 	if (connector_state->crtc) {
1314 		struct drm_crtc_state *crtc_state;
1315 
1316 		crtc_state = drm_atomic_get_crtc_state(state,
1317 						       connector_state->crtc);
1318 		if (IS_ERR(crtc_state))
1319 			return ERR_CAST(crtc_state);
1320 	}
1321 
1322 	return connector_state;
1323 }
1324 EXPORT_SYMBOL(drm_atomic_get_connector_state);
1325 
1326 /**
1327  * drm_atomic_connector_set_property - set property on connector.
1328  * @connector: the drm connector to set a property on
1329  * @state: the state object to update with the new property value
1330  * @property: the property to set
1331  * @val: the new property value
1332  *
1333  * This function handles generic/core properties and calls out to driver's
1334  * &drm_connector_funcs.atomic_set_property for driver properties.  To ensure
1335  * consistent behavior you must call this function rather than the driver hook
1336  * directly.
1337  *
1338  * RETURNS:
1339  * Zero on success, error code on failure
1340  */
1341 static int drm_atomic_connector_set_property(struct drm_connector *connector,
1342 		struct drm_connector_state *state, struct drm_property *property,
1343 		uint64_t val)
1344 {
1345 	struct drm_device *dev = connector->dev;
1346 	struct drm_mode_config *config = &dev->mode_config;
1347 
1348 	if (property == config->prop_crtc_id) {
1349 		struct drm_crtc *crtc = drm_crtc_find(dev, NULL, val);
1350 		return drm_atomic_set_crtc_for_connector(state, crtc);
1351 	} else if (property == config->dpms_property) {
1352 		/* setting DPMS property requires special handling, which
1353 		 * is done in legacy setprop path for us.  Disallow (for
1354 		 * now?) atomic writes to DPMS property:
1355 		 */
1356 		return -EINVAL;
1357 	} else if (property == config->tv_select_subconnector_property) {
1358 		state->tv.subconnector = val;
1359 	} else if (property == config->tv_left_margin_property) {
1360 		state->tv.margins.left = val;
1361 	} else if (property == config->tv_right_margin_property) {
1362 		state->tv.margins.right = val;
1363 	} else if (property == config->tv_top_margin_property) {
1364 		state->tv.margins.top = val;
1365 	} else if (property == config->tv_bottom_margin_property) {
1366 		state->tv.margins.bottom = val;
1367 	} else if (property == config->tv_mode_property) {
1368 		state->tv.mode = val;
1369 	} else if (property == config->tv_brightness_property) {
1370 		state->tv.brightness = val;
1371 	} else if (property == config->tv_contrast_property) {
1372 		state->tv.contrast = val;
1373 	} else if (property == config->tv_flicker_reduction_property) {
1374 		state->tv.flicker_reduction = val;
1375 	} else if (property == config->tv_overscan_property) {
1376 		state->tv.overscan = val;
1377 	} else if (property == config->tv_saturation_property) {
1378 		state->tv.saturation = val;
1379 	} else if (property == config->tv_hue_property) {
1380 		state->tv.hue = val;
1381 	} else if (property == config->link_status_property) {
1382 		/* Never downgrade from GOOD to BAD on userspace's request here,
1383 		 * only hw issues can do that.
1384 		 *
1385 		 * For an atomic property the userspace doesn't need to be able
1386 		 * to understand all the properties, but needs to be able to
1387 		 * restore the state it wants on VT switch. So if the userspace
1388 		 * tries to change the link_status from GOOD to BAD, driver
1389 		 * silently rejects it and returns a 0. This prevents userspace
1390 		 * from accidently breaking  the display when it restores the
1391 		 * state.
1392 		 */
1393 		if (state->link_status != DRM_LINK_STATUS_GOOD)
1394 			state->link_status = val;
1395 	} else if (property == config->aspect_ratio_property) {
1396 		state->picture_aspect_ratio = val;
1397 	} else if (property == config->content_type_property) {
1398 		state->content_type = val;
1399 	} else if (property == connector->scaling_mode_property) {
1400 		state->scaling_mode = val;
1401 	} else if (property == connector->content_protection_property) {
1402 		if (val == DRM_MODE_CONTENT_PROTECTION_ENABLED) {
1403 			DRM_DEBUG_KMS("only drivers can set CP Enabled\n");
1404 			return -EINVAL;
1405 		}
1406 		state->content_protection = val;
1407 	} else if (property == config->writeback_fb_id_property) {
1408 		struct drm_framebuffer *fb = drm_framebuffer_lookup(dev, NULL, val);
1409 		int ret = drm_atomic_set_writeback_fb_for_connector(state, fb);
1410 		if (fb)
1411 			drm_framebuffer_put(fb);
1412 		return ret;
1413 	} else if (property == config->writeback_out_fence_ptr_property) {
1414 		s32 __user *fence_ptr = u64_to_user_ptr(val);
1415 
1416 		return set_out_fence_for_connector(state->state, connector,
1417 						   fence_ptr);
1418 	} else if (connector->funcs->atomic_set_property) {
1419 		return connector->funcs->atomic_set_property(connector,
1420 				state, property, val);
1421 	} else {
1422 		DRM_DEBUG_ATOMIC("[CONNECTOR:%d:%s] unknown property [PROP:%d:%s]]\n",
1423 				 connector->base.id, connector->name,
1424 				 property->base.id, property->name);
1425 		return -EINVAL;
1426 	}
1427 
1428 	return 0;
1429 }
1430 
1431 static void drm_atomic_connector_print_state(struct drm_printer *p,
1432 		const struct drm_connector_state *state)
1433 {
1434 	struct drm_connector *connector = state->connector;
1435 
1436 	drm_printf(p, "connector[%u]: %s\n", connector->base.id, connector->name);
1437 	drm_printf(p, "\tcrtc=%s\n", state->crtc ? state->crtc->name : "(null)");
1438 
1439 	if (connector->funcs->atomic_print_state)
1440 		connector->funcs->atomic_print_state(p, state);
1441 }
1442 
1443 /**
1444  * drm_atomic_connector_get_property - get property value from connector state
1445  * @connector: the drm connector to set a property on
1446  * @state: the state object to get the property value from
1447  * @property: the property to set
1448  * @val: return location for the property value
1449  *
1450  * This function handles generic/core properties and calls out to driver's
1451  * &drm_connector_funcs.atomic_get_property for driver properties.  To ensure
1452  * consistent behavior you must call this function rather than the driver hook
1453  * directly.
1454  *
1455  * RETURNS:
1456  * Zero on success, error code on failure
1457  */
1458 static int
1459 drm_atomic_connector_get_property(struct drm_connector *connector,
1460 		const struct drm_connector_state *state,
1461 		struct drm_property *property, uint64_t *val)
1462 {
1463 	struct drm_device *dev = connector->dev;
1464 	struct drm_mode_config *config = &dev->mode_config;
1465 
1466 	if (property == config->prop_crtc_id) {
1467 		*val = (state->crtc) ? state->crtc->base.id : 0;
1468 	} else if (property == config->dpms_property) {
1469 		*val = connector->dpms;
1470 	} else if (property == config->tv_select_subconnector_property) {
1471 		*val = state->tv.subconnector;
1472 	} else if (property == config->tv_left_margin_property) {
1473 		*val = state->tv.margins.left;
1474 	} else if (property == config->tv_right_margin_property) {
1475 		*val = state->tv.margins.right;
1476 	} else if (property == config->tv_top_margin_property) {
1477 		*val = state->tv.margins.top;
1478 	} else if (property == config->tv_bottom_margin_property) {
1479 		*val = state->tv.margins.bottom;
1480 	} else if (property == config->tv_mode_property) {
1481 		*val = state->tv.mode;
1482 	} else if (property == config->tv_brightness_property) {
1483 		*val = state->tv.brightness;
1484 	} else if (property == config->tv_contrast_property) {
1485 		*val = state->tv.contrast;
1486 	} else if (property == config->tv_flicker_reduction_property) {
1487 		*val = state->tv.flicker_reduction;
1488 	} else if (property == config->tv_overscan_property) {
1489 		*val = state->tv.overscan;
1490 	} else if (property == config->tv_saturation_property) {
1491 		*val = state->tv.saturation;
1492 	} else if (property == config->tv_hue_property) {
1493 		*val = state->tv.hue;
1494 	} else if (property == config->link_status_property) {
1495 		*val = state->link_status;
1496 	} else if (property == config->aspect_ratio_property) {
1497 		*val = state->picture_aspect_ratio;
1498 	} else if (property == config->content_type_property) {
1499 		*val = state->content_type;
1500 	} else if (property == connector->scaling_mode_property) {
1501 		*val = state->scaling_mode;
1502 	} else if (property == connector->content_protection_property) {
1503 		*val = state->content_protection;
1504 	} else if (property == config->writeback_fb_id_property) {
1505 		/* Writeback framebuffer is one-shot, write and forget */
1506 		*val = 0;
1507 	} else if (property == config->writeback_out_fence_ptr_property) {
1508 		*val = 0;
1509 	} else if (connector->funcs->atomic_get_property) {
1510 		return connector->funcs->atomic_get_property(connector,
1511 				state, property, val);
1512 	} else {
1513 		return -EINVAL;
1514 	}
1515 
1516 	return 0;
1517 }
1518 
1519 int drm_atomic_get_property(struct drm_mode_object *obj,
1520 		struct drm_property *property, uint64_t *val)
1521 {
1522 	struct drm_device *dev = property->dev;
1523 	int ret;
1524 
1525 	switch (obj->type) {
1526 	case DRM_MODE_OBJECT_CONNECTOR: {
1527 		struct drm_connector *connector = obj_to_connector(obj);
1528 		WARN_ON(!drm_modeset_is_locked(&dev->mode_config.connection_mutex));
1529 		ret = drm_atomic_connector_get_property(connector,
1530 				connector->state, property, val);
1531 		break;
1532 	}
1533 	case DRM_MODE_OBJECT_CRTC: {
1534 		struct drm_crtc *crtc = obj_to_crtc(obj);
1535 		WARN_ON(!drm_modeset_is_locked(&crtc->mutex));
1536 		ret = drm_atomic_crtc_get_property(crtc,
1537 				crtc->state, property, val);
1538 		break;
1539 	}
1540 	case DRM_MODE_OBJECT_PLANE: {
1541 		struct drm_plane *plane = obj_to_plane(obj);
1542 		WARN_ON(!drm_modeset_is_locked(&plane->mutex));
1543 		ret = drm_atomic_plane_get_property(plane,
1544 				plane->state, property, val);
1545 		break;
1546 	}
1547 	default:
1548 		ret = -EINVAL;
1549 		break;
1550 	}
1551 
1552 	return ret;
1553 }
1554 
1555 /**
1556  * drm_atomic_set_crtc_for_plane - set crtc for plane
1557  * @plane_state: the plane whose incoming state to update
1558  * @crtc: crtc to use for the plane
1559  *
1560  * Changing the assigned crtc for a plane requires us to grab the lock and state
1561  * for the new crtc, as needed. This function takes care of all these details
1562  * besides updating the pointer in the state object itself.
1563  *
1564  * Returns:
1565  * 0 on success or can fail with -EDEADLK or -ENOMEM. When the error is EDEADLK
1566  * then the w/w mutex code has detected a deadlock and the entire atomic
1567  * sequence must be restarted. All other errors are fatal.
1568  */
1569 int
1570 drm_atomic_set_crtc_for_plane(struct drm_plane_state *plane_state,
1571 			      struct drm_crtc *crtc)
1572 {
1573 	struct drm_plane *plane = plane_state->plane;
1574 	struct drm_crtc_state *crtc_state;
1575 	/* Nothing to do for same crtc*/
1576 	if (plane_state->crtc == crtc)
1577 		return 0;
1578 	if (plane_state->crtc) {
1579 		crtc_state = drm_atomic_get_crtc_state(plane_state->state,
1580 						       plane_state->crtc);
1581 		if (WARN_ON(IS_ERR(crtc_state)))
1582 			return PTR_ERR(crtc_state);
1583 
1584 		crtc_state->plane_mask &= ~(1 << drm_plane_index(plane));
1585 	}
1586 
1587 	plane_state->crtc = crtc;
1588 
1589 	if (crtc) {
1590 		crtc_state = drm_atomic_get_crtc_state(plane_state->state,
1591 						       crtc);
1592 		if (IS_ERR(crtc_state))
1593 			return PTR_ERR(crtc_state);
1594 		crtc_state->plane_mask |= (1 << drm_plane_index(plane));
1595 	}
1596 
1597 	if (crtc)
1598 		DRM_DEBUG_ATOMIC("Link [PLANE:%d:%s] state %p to [CRTC:%d:%s]\n",
1599 				 plane->base.id, plane->name, plane_state,
1600 				 crtc->base.id, crtc->name);
1601 	else
1602 		DRM_DEBUG_ATOMIC("Link [PLANE:%d:%s] state %p to [NOCRTC]\n",
1603 				 plane->base.id, plane->name, plane_state);
1604 
1605 	return 0;
1606 }
1607 EXPORT_SYMBOL(drm_atomic_set_crtc_for_plane);
1608 
1609 /**
1610  * drm_atomic_set_fb_for_plane - set framebuffer for plane
1611  * @plane_state: atomic state object for the plane
1612  * @fb: fb to use for the plane
1613  *
1614  * Changing the assigned framebuffer for a plane requires us to grab a reference
1615  * to the new fb and drop the reference to the old fb, if there is one. This
1616  * function takes care of all these details besides updating the pointer in the
1617  * state object itself.
1618  */
1619 void
1620 drm_atomic_set_fb_for_plane(struct drm_plane_state *plane_state,
1621 			    struct drm_framebuffer *fb)
1622 {
1623 	struct drm_plane *plane = plane_state->plane;
1624 
1625 	if (fb)
1626 		DRM_DEBUG_ATOMIC("Set [FB:%d] for [PLANE:%d:%s] state %p\n",
1627 				 fb->base.id, plane->base.id, plane->name,
1628 				 plane_state);
1629 	else
1630 		DRM_DEBUG_ATOMIC("Set [NOFB] for [PLANE:%d:%s] state %p\n",
1631 				 plane->base.id, plane->name, plane_state);
1632 
1633 	drm_framebuffer_assign(&plane_state->fb, fb);
1634 }
1635 EXPORT_SYMBOL(drm_atomic_set_fb_for_plane);
1636 
1637 /**
1638  * drm_atomic_set_fence_for_plane - set fence for plane
1639  * @plane_state: atomic state object for the plane
1640  * @fence: dma_fence to use for the plane
1641  *
1642  * Helper to setup the plane_state fence in case it is not set yet.
1643  * By using this drivers doesn't need to worry if the user choose
1644  * implicit or explicit fencing.
1645  *
1646  * This function will not set the fence to the state if it was set
1647  * via explicit fencing interfaces on the atomic ioctl. In that case it will
1648  * drop the reference to the fence as we are not storing it anywhere.
1649  * Otherwise, if &drm_plane_state.fence is not set this function we just set it
1650  * with the received implicit fence. In both cases this function consumes a
1651  * reference for @fence.
1652  *
1653  * This way explicit fencing can be used to overrule implicit fencing, which is
1654  * important to make explicit fencing use-cases work: One example is using one
1655  * buffer for 2 screens with different refresh rates. Implicit fencing will
1656  * clamp rendering to the refresh rate of the slower screen, whereas explicit
1657  * fence allows 2 independent render and display loops on a single buffer. If a
1658  * driver allows obeys both implicit and explicit fences for plane updates, then
1659  * it will break all the benefits of explicit fencing.
1660  */
1661 void
1662 drm_atomic_set_fence_for_plane(struct drm_plane_state *plane_state,
1663 			       struct dma_fence *fence)
1664 {
1665 	if (plane_state->fence) {
1666 		dma_fence_put(fence);
1667 		return;
1668 	}
1669 
1670 	plane_state->fence = fence;
1671 }
1672 EXPORT_SYMBOL(drm_atomic_set_fence_for_plane);
1673 
1674 /**
1675  * drm_atomic_set_crtc_for_connector - set crtc for connector
1676  * @conn_state: atomic state object for the connector
1677  * @crtc: crtc to use for the connector
1678  *
1679  * Changing the assigned crtc for a connector requires us to grab the lock and
1680  * state for the new crtc, as needed. This function takes care of all these
1681  * details besides updating the pointer in the state object itself.
1682  *
1683  * Returns:
1684  * 0 on success or can fail with -EDEADLK or -ENOMEM. When the error is EDEADLK
1685  * then the w/w mutex code has detected a deadlock and the entire atomic
1686  * sequence must be restarted. All other errors are fatal.
1687  */
1688 int
1689 drm_atomic_set_crtc_for_connector(struct drm_connector_state *conn_state,
1690 				  struct drm_crtc *crtc)
1691 {
1692 	struct drm_connector *connector = conn_state->connector;
1693 	struct drm_crtc_state *crtc_state;
1694 
1695 	if (conn_state->crtc == crtc)
1696 		return 0;
1697 
1698 	if (conn_state->crtc) {
1699 		crtc_state = drm_atomic_get_new_crtc_state(conn_state->state,
1700 							   conn_state->crtc);
1701 
1702 		crtc_state->connector_mask &=
1703 			~(1 << drm_connector_index(conn_state->connector));
1704 
1705 		drm_connector_put(conn_state->connector);
1706 		conn_state->crtc = NULL;
1707 	}
1708 
1709 	if (crtc) {
1710 		crtc_state = drm_atomic_get_crtc_state(conn_state->state, crtc);
1711 		if (IS_ERR(crtc_state))
1712 			return PTR_ERR(crtc_state);
1713 
1714 		crtc_state->connector_mask |=
1715 			1 << drm_connector_index(conn_state->connector);
1716 
1717 		drm_connector_get(conn_state->connector);
1718 		conn_state->crtc = crtc;
1719 
1720 		DRM_DEBUG_ATOMIC("Link [CONNECTOR:%d:%s] state %p to [CRTC:%d:%s]\n",
1721 				 connector->base.id, connector->name,
1722 				 conn_state, crtc->base.id, crtc->name);
1723 	} else {
1724 		DRM_DEBUG_ATOMIC("Link [CONNECTOR:%d:%s] state %p to [NOCRTC]\n",
1725 				 connector->base.id, connector->name,
1726 				 conn_state);
1727 	}
1728 
1729 	return 0;
1730 }
1731 EXPORT_SYMBOL(drm_atomic_set_crtc_for_connector);
1732 
1733 /*
1734  * drm_atomic_get_writeback_job - return or allocate a writeback job
1735  * @conn_state: Connector state to get the job for
1736  *
1737  * Writeback jobs have a different lifetime to the atomic state they are
1738  * associated with. This convenience function takes care of allocating a job
1739  * if there isn't yet one associated with the connector state, otherwise
1740  * it just returns the existing job.
1741  *
1742  * Returns: The writeback job for the given connector state
1743  */
1744 static struct drm_writeback_job *
1745 drm_atomic_get_writeback_job(struct drm_connector_state *conn_state)
1746 {
1747 	WARN_ON(conn_state->connector->connector_type != DRM_MODE_CONNECTOR_WRITEBACK);
1748 
1749 	if (!conn_state->writeback_job)
1750 		conn_state->writeback_job =
1751 			kzalloc(sizeof(*conn_state->writeback_job), GFP_KERNEL);
1752 
1753 	return conn_state->writeback_job;
1754 }
1755 
1756 /**
1757  * drm_atomic_set_writeback_fb_for_connector - set writeback framebuffer
1758  * @conn_state: atomic state object for the connector
1759  * @fb: fb to use for the connector
1760  *
1761  * This is used to set the framebuffer for a writeback connector, which outputs
1762  * to a buffer instead of an actual physical connector.
1763  * Changing the assigned framebuffer requires us to grab a reference to the new
1764  * fb and drop the reference to the old fb, if there is one. This function
1765  * takes care of all these details besides updating the pointer in the
1766  * state object itself.
1767  *
1768  * Note: The only way conn_state can already have an fb set is if the commit
1769  * sets the property more than once.
1770  *
1771  * See also: drm_writeback_connector_init()
1772  *
1773  * Returns: 0 on success
1774  */
1775 int drm_atomic_set_writeback_fb_for_connector(
1776 		struct drm_connector_state *conn_state,
1777 		struct drm_framebuffer *fb)
1778 {
1779 	struct drm_writeback_job *job =
1780 		drm_atomic_get_writeback_job(conn_state);
1781 	if (!job)
1782 		return -ENOMEM;
1783 
1784 	drm_framebuffer_assign(&job->fb, fb);
1785 
1786 	if (fb)
1787 		DRM_DEBUG_ATOMIC("Set [FB:%d] for connector state %p\n",
1788 				 fb->base.id, conn_state);
1789 	else
1790 		DRM_DEBUG_ATOMIC("Set [NOFB] for connector state %p\n",
1791 				 conn_state);
1792 
1793 	return 0;
1794 }
1795 EXPORT_SYMBOL(drm_atomic_set_writeback_fb_for_connector);
1796 
1797 /**
1798  * drm_atomic_add_affected_connectors - add connectors for crtc
1799  * @state: atomic state
1800  * @crtc: DRM crtc
1801  *
1802  * This function walks the current configuration and adds all connectors
1803  * currently using @crtc to the atomic configuration @state. Note that this
1804  * function must acquire the connection mutex. This can potentially cause
1805  * unneeded seralization if the update is just for the planes on one crtc. Hence
1806  * drivers and helpers should only call this when really needed (e.g. when a
1807  * full modeset needs to happen due to some change).
1808  *
1809  * Returns:
1810  * 0 on success or can fail with -EDEADLK or -ENOMEM. When the error is EDEADLK
1811  * then the w/w mutex code has detected a deadlock and the entire atomic
1812  * sequence must be restarted. All other errors are fatal.
1813  */
1814 int
1815 drm_atomic_add_affected_connectors(struct drm_atomic_state *state,
1816 				   struct drm_crtc *crtc)
1817 {
1818 	struct drm_mode_config *config = &state->dev->mode_config;
1819 	struct drm_connector *connector;
1820 	struct drm_connector_state *conn_state;
1821 	struct drm_connector_list_iter conn_iter;
1822 	struct drm_crtc_state *crtc_state;
1823 	int ret;
1824 
1825 	crtc_state = drm_atomic_get_crtc_state(state, crtc);
1826 	if (IS_ERR(crtc_state))
1827 		return PTR_ERR(crtc_state);
1828 
1829 	ret = drm_modeset_lock(&config->connection_mutex, state->acquire_ctx);
1830 	if (ret)
1831 		return ret;
1832 
1833 	DRM_DEBUG_ATOMIC("Adding all current connectors for [CRTC:%d:%s] to %p\n",
1834 			 crtc->base.id, crtc->name, state);
1835 
1836 	/*
1837 	 * Changed connectors are already in @state, so only need to look
1838 	 * at the connector_mask in crtc_state.
1839 	 */
1840 	drm_connector_list_iter_begin(state->dev, &conn_iter);
1841 	drm_for_each_connector_iter(connector, &conn_iter) {
1842 		if (!(crtc_state->connector_mask & (1 << drm_connector_index(connector))))
1843 			continue;
1844 
1845 		conn_state = drm_atomic_get_connector_state(state, connector);
1846 		if (IS_ERR(conn_state)) {
1847 			drm_connector_list_iter_end(&conn_iter);
1848 			return PTR_ERR(conn_state);
1849 		}
1850 	}
1851 	drm_connector_list_iter_end(&conn_iter);
1852 
1853 	return 0;
1854 }
1855 EXPORT_SYMBOL(drm_atomic_add_affected_connectors);
1856 
1857 /**
1858  * drm_atomic_add_affected_planes - add planes for crtc
1859  * @state: atomic state
1860  * @crtc: DRM crtc
1861  *
1862  * This function walks the current configuration and adds all planes
1863  * currently used by @crtc to the atomic configuration @state. This is useful
1864  * when an atomic commit also needs to check all currently enabled plane on
1865  * @crtc, e.g. when changing the mode. It's also useful when re-enabling a CRTC
1866  * to avoid special code to force-enable all planes.
1867  *
1868  * Since acquiring a plane state will always also acquire the w/w mutex of the
1869  * current CRTC for that plane (if there is any) adding all the plane states for
1870  * a CRTC will not reduce parallism of atomic updates.
1871  *
1872  * Returns:
1873  * 0 on success or can fail with -EDEADLK or -ENOMEM. When the error is EDEADLK
1874  * then the w/w mutex code has detected a deadlock and the entire atomic
1875  * sequence must be restarted. All other errors are fatal.
1876  */
1877 int
1878 drm_atomic_add_affected_planes(struct drm_atomic_state *state,
1879 			       struct drm_crtc *crtc)
1880 {
1881 	struct drm_plane *plane;
1882 
1883 	WARN_ON(!drm_atomic_get_new_crtc_state(state, crtc));
1884 
1885 	DRM_DEBUG_ATOMIC("Adding all current planes for [CRTC:%d:%s] to %p\n",
1886 			 crtc->base.id, crtc->name, state);
1887 
1888 	drm_for_each_plane_mask(plane, state->dev, crtc->state->plane_mask) {
1889 		struct drm_plane_state *plane_state =
1890 			drm_atomic_get_plane_state(state, plane);
1891 
1892 		if (IS_ERR(plane_state))
1893 			return PTR_ERR(plane_state);
1894 	}
1895 	return 0;
1896 }
1897 EXPORT_SYMBOL(drm_atomic_add_affected_planes);
1898 
1899 /**
1900  * drm_atomic_check_only - check whether a given config would work
1901  * @state: atomic configuration to check
1902  *
1903  * Note that this function can return -EDEADLK if the driver needed to acquire
1904  * more locks but encountered a deadlock. The caller must then do the usual w/w
1905  * backoff dance and restart. All other errors are fatal.
1906  *
1907  * Returns:
1908  * 0 on success, negative error code on failure.
1909  */
1910 int drm_atomic_check_only(struct drm_atomic_state *state)
1911 {
1912 	struct drm_device *dev = state->dev;
1913 	struct drm_mode_config *config = &dev->mode_config;
1914 	struct drm_plane *plane;
1915 	struct drm_plane_state *plane_state;
1916 	struct drm_crtc *crtc;
1917 	struct drm_crtc_state *crtc_state;
1918 	struct drm_connector *conn;
1919 	struct drm_connector_state *conn_state;
1920 	int i, ret = 0;
1921 
1922 	DRM_DEBUG_ATOMIC("checking %p\n", state);
1923 
1924 	for_each_new_plane_in_state(state, plane, plane_state, i) {
1925 		ret = drm_atomic_plane_check(plane, plane_state);
1926 		if (ret) {
1927 			DRM_DEBUG_ATOMIC("[PLANE:%d:%s] atomic core check failed\n",
1928 					 plane->base.id, plane->name);
1929 			return ret;
1930 		}
1931 	}
1932 
1933 	for_each_new_crtc_in_state(state, crtc, crtc_state, i) {
1934 		ret = drm_atomic_crtc_check(crtc, crtc_state);
1935 		if (ret) {
1936 			DRM_DEBUG_ATOMIC("[CRTC:%d:%s] atomic core check failed\n",
1937 					 crtc->base.id, crtc->name);
1938 			return ret;
1939 		}
1940 	}
1941 
1942 	for_each_new_connector_in_state(state, conn, conn_state, i) {
1943 		ret = drm_atomic_connector_check(conn, conn_state);
1944 		if (ret) {
1945 			DRM_DEBUG_ATOMIC("[CONNECTOR:%d:%s] atomic core check failed\n",
1946 					 conn->base.id, conn->name);
1947 			return ret;
1948 		}
1949 	}
1950 
1951 	if (config->funcs->atomic_check) {
1952 		ret = config->funcs->atomic_check(state->dev, state);
1953 
1954 		if (ret) {
1955 			DRM_DEBUG_ATOMIC("atomic driver check for %p failed: %d\n",
1956 					 state, ret);
1957 			return ret;
1958 		}
1959 	}
1960 
1961 	if (!state->allow_modeset) {
1962 		for_each_new_crtc_in_state(state, crtc, crtc_state, i) {
1963 			if (drm_atomic_crtc_needs_modeset(crtc_state)) {
1964 				DRM_DEBUG_ATOMIC("[CRTC:%d:%s] requires full modeset\n",
1965 						 crtc->base.id, crtc->name);
1966 				return -EINVAL;
1967 			}
1968 		}
1969 	}
1970 
1971 	return 0;
1972 }
1973 EXPORT_SYMBOL(drm_atomic_check_only);
1974 
1975 /**
1976  * drm_atomic_commit - commit configuration atomically
1977  * @state: atomic configuration to check
1978  *
1979  * Note that this function can return -EDEADLK if the driver needed to acquire
1980  * more locks but encountered a deadlock. The caller must then do the usual w/w
1981  * backoff dance and restart. All other errors are fatal.
1982  *
1983  * This function will take its own reference on @state.
1984  * Callers should always release their reference with drm_atomic_state_put().
1985  *
1986  * Returns:
1987  * 0 on success, negative error code on failure.
1988  */
1989 int drm_atomic_commit(struct drm_atomic_state *state)
1990 {
1991 	struct drm_mode_config *config = &state->dev->mode_config;
1992 	int ret;
1993 
1994 	ret = drm_atomic_check_only(state);
1995 	if (ret)
1996 		return ret;
1997 
1998 	DRM_DEBUG_ATOMIC("committing %p\n", state);
1999 
2000 	return config->funcs->atomic_commit(state->dev, state, false);
2001 }
2002 EXPORT_SYMBOL(drm_atomic_commit);
2003 
2004 /**
2005  * drm_atomic_nonblocking_commit - atomic nonblocking commit
2006  * @state: atomic configuration to check
2007  *
2008  * Note that this function can return -EDEADLK if the driver needed to acquire
2009  * more locks but encountered a deadlock. The caller must then do the usual w/w
2010  * backoff dance and restart. All other errors are fatal.
2011  *
2012  * This function will take its own reference on @state.
2013  * Callers should always release their reference with drm_atomic_state_put().
2014  *
2015  * Returns:
2016  * 0 on success, negative error code on failure.
2017  */
2018 int drm_atomic_nonblocking_commit(struct drm_atomic_state *state)
2019 {
2020 	struct drm_mode_config *config = &state->dev->mode_config;
2021 	int ret;
2022 
2023 	ret = drm_atomic_check_only(state);
2024 	if (ret)
2025 		return ret;
2026 
2027 	DRM_DEBUG_ATOMIC("committing %p nonblocking\n", state);
2028 
2029 	return config->funcs->atomic_commit(state->dev, state, true);
2030 }
2031 EXPORT_SYMBOL(drm_atomic_nonblocking_commit);
2032 
2033 static void drm_atomic_print_state(const struct drm_atomic_state *state)
2034 {
2035 	struct drm_printer p = drm_info_printer(state->dev->dev);
2036 	struct drm_plane *plane;
2037 	struct drm_plane_state *plane_state;
2038 	struct drm_crtc *crtc;
2039 	struct drm_crtc_state *crtc_state;
2040 	struct drm_connector *connector;
2041 	struct drm_connector_state *connector_state;
2042 	int i;
2043 
2044 	DRM_DEBUG_ATOMIC("checking %p\n", state);
2045 
2046 	for_each_new_plane_in_state(state, plane, plane_state, i)
2047 		drm_atomic_plane_print_state(&p, plane_state);
2048 
2049 	for_each_new_crtc_in_state(state, crtc, crtc_state, i)
2050 		drm_atomic_crtc_print_state(&p, crtc_state);
2051 
2052 	for_each_new_connector_in_state(state, connector, connector_state, i)
2053 		drm_atomic_connector_print_state(&p, connector_state);
2054 }
2055 
2056 static void __drm_state_dump(struct drm_device *dev, struct drm_printer *p,
2057 			     bool take_locks)
2058 {
2059 	struct drm_mode_config *config = &dev->mode_config;
2060 	struct drm_plane *plane;
2061 	struct drm_crtc *crtc;
2062 	struct drm_connector *connector;
2063 	struct drm_connector_list_iter conn_iter;
2064 
2065 	if (!drm_core_check_feature(dev, DRIVER_ATOMIC))
2066 		return;
2067 
2068 	list_for_each_entry(plane, &config->plane_list, head) {
2069 		if (take_locks)
2070 			drm_modeset_lock(&plane->mutex, NULL);
2071 		drm_atomic_plane_print_state(p, plane->state);
2072 		if (take_locks)
2073 			drm_modeset_unlock(&plane->mutex);
2074 	}
2075 
2076 	list_for_each_entry(crtc, &config->crtc_list, head) {
2077 		if (take_locks)
2078 			drm_modeset_lock(&crtc->mutex, NULL);
2079 		drm_atomic_crtc_print_state(p, crtc->state);
2080 		if (take_locks)
2081 			drm_modeset_unlock(&crtc->mutex);
2082 	}
2083 
2084 	drm_connector_list_iter_begin(dev, &conn_iter);
2085 	if (take_locks)
2086 		drm_modeset_lock(&dev->mode_config.connection_mutex, NULL);
2087 	drm_for_each_connector_iter(connector, &conn_iter)
2088 		drm_atomic_connector_print_state(p, connector->state);
2089 	if (take_locks)
2090 		drm_modeset_unlock(&dev->mode_config.connection_mutex);
2091 	drm_connector_list_iter_end(&conn_iter);
2092 }
2093 
2094 /**
2095  * drm_state_dump - dump entire device atomic state
2096  * @dev: the drm device
2097  * @p: where to print the state to
2098  *
2099  * Just for debugging.  Drivers might want an option to dump state
2100  * to dmesg in case of error irq's.  (Hint, you probably want to
2101  * ratelimit this!)
2102  *
2103  * The caller must drm_modeset_lock_all(), or if this is called
2104  * from error irq handler, it should not be enabled by default.
2105  * (Ie. if you are debugging errors you might not care that this
2106  * is racey.  But calling this without all modeset locks held is
2107  * not inherently safe.)
2108  */
2109 void drm_state_dump(struct drm_device *dev, struct drm_printer *p)
2110 {
2111 	__drm_state_dump(dev, p, false);
2112 }
2113 EXPORT_SYMBOL(drm_state_dump);
2114 
2115 #ifdef CONFIG_DEBUG_FS
2116 static int drm_state_info(struct seq_file *m, void *data)
2117 {
2118 	struct drm_info_node *node = (struct drm_info_node *) m->private;
2119 	struct drm_device *dev = node->minor->dev;
2120 	struct drm_printer p = drm_seq_file_printer(m);
2121 
2122 	__drm_state_dump(dev, &p, true);
2123 
2124 	return 0;
2125 }
2126 
2127 /* any use in debugfs files to dump individual planes/crtc/etc? */
2128 static const struct drm_info_list drm_atomic_debugfs_list[] = {
2129 	{"state", drm_state_info, 0},
2130 };
2131 
2132 int drm_atomic_debugfs_init(struct drm_minor *minor)
2133 {
2134 	return drm_debugfs_create_files(drm_atomic_debugfs_list,
2135 			ARRAY_SIZE(drm_atomic_debugfs_list),
2136 			minor->debugfs_root, minor);
2137 }
2138 #endif
2139 
2140 /*
2141  * The big monster ioctl
2142  */
2143 
2144 static struct drm_pending_vblank_event *create_vblank_event(
2145 		struct drm_crtc *crtc, uint64_t user_data)
2146 {
2147 	struct drm_pending_vblank_event *e = NULL;
2148 
2149 	e = kzalloc(sizeof *e, GFP_KERNEL);
2150 	if (!e)
2151 		return NULL;
2152 
2153 	e->event.base.type = DRM_EVENT_FLIP_COMPLETE;
2154 	e->event.base.length = sizeof(e->event);
2155 	e->event.vbl.crtc_id = crtc->base.id;
2156 	e->event.vbl.user_data = user_data;
2157 
2158 	return e;
2159 }
2160 
2161 int drm_atomic_connector_commit_dpms(struct drm_atomic_state *state,
2162 				     struct drm_connector *connector,
2163 				     int mode)
2164 {
2165 	struct drm_connector *tmp_connector;
2166 	struct drm_connector_state *new_conn_state;
2167 	struct drm_crtc *crtc;
2168 	struct drm_crtc_state *crtc_state;
2169 	int i, ret, old_mode = connector->dpms;
2170 	bool active = false;
2171 
2172 	ret = drm_modeset_lock(&state->dev->mode_config.connection_mutex,
2173 			       state->acquire_ctx);
2174 	if (ret)
2175 		return ret;
2176 
2177 	if (mode != DRM_MODE_DPMS_ON)
2178 		mode = DRM_MODE_DPMS_OFF;
2179 	connector->dpms = mode;
2180 
2181 	crtc = connector->state->crtc;
2182 	if (!crtc)
2183 		goto out;
2184 	ret = drm_atomic_add_affected_connectors(state, crtc);
2185 	if (ret)
2186 		goto out;
2187 
2188 	crtc_state = drm_atomic_get_crtc_state(state, crtc);
2189 	if (IS_ERR(crtc_state)) {
2190 		ret = PTR_ERR(crtc_state);
2191 		goto out;
2192 	}
2193 
2194 	for_each_new_connector_in_state(state, tmp_connector, new_conn_state, i) {
2195 		if (new_conn_state->crtc != crtc)
2196 			continue;
2197 		if (tmp_connector->dpms == DRM_MODE_DPMS_ON) {
2198 			active = true;
2199 			break;
2200 		}
2201 	}
2202 
2203 	crtc_state->active = active;
2204 	ret = drm_atomic_commit(state);
2205 out:
2206 	if (ret != 0)
2207 		connector->dpms = old_mode;
2208 	return ret;
2209 }
2210 
2211 int drm_atomic_set_property(struct drm_atomic_state *state,
2212 			    struct drm_mode_object *obj,
2213 			    struct drm_property *prop,
2214 			    uint64_t prop_value)
2215 {
2216 	struct drm_mode_object *ref;
2217 	int ret;
2218 
2219 	if (!drm_property_change_valid_get(prop, prop_value, &ref))
2220 		return -EINVAL;
2221 
2222 	switch (obj->type) {
2223 	case DRM_MODE_OBJECT_CONNECTOR: {
2224 		struct drm_connector *connector = obj_to_connector(obj);
2225 		struct drm_connector_state *connector_state;
2226 
2227 		connector_state = drm_atomic_get_connector_state(state, connector);
2228 		if (IS_ERR(connector_state)) {
2229 			ret = PTR_ERR(connector_state);
2230 			break;
2231 		}
2232 
2233 		ret = drm_atomic_connector_set_property(connector,
2234 				connector_state, prop, prop_value);
2235 		break;
2236 	}
2237 	case DRM_MODE_OBJECT_CRTC: {
2238 		struct drm_crtc *crtc = obj_to_crtc(obj);
2239 		struct drm_crtc_state *crtc_state;
2240 
2241 		crtc_state = drm_atomic_get_crtc_state(state, crtc);
2242 		if (IS_ERR(crtc_state)) {
2243 			ret = PTR_ERR(crtc_state);
2244 			break;
2245 		}
2246 
2247 		ret = drm_atomic_crtc_set_property(crtc,
2248 				crtc_state, prop, prop_value);
2249 		break;
2250 	}
2251 	case DRM_MODE_OBJECT_PLANE: {
2252 		struct drm_plane *plane = obj_to_plane(obj);
2253 		struct drm_plane_state *plane_state;
2254 
2255 		plane_state = drm_atomic_get_plane_state(state, plane);
2256 		if (IS_ERR(plane_state)) {
2257 			ret = PTR_ERR(plane_state);
2258 			break;
2259 		}
2260 
2261 		ret = drm_atomic_plane_set_property(plane,
2262 				plane_state, prop, prop_value);
2263 		break;
2264 	}
2265 	default:
2266 		ret = -EINVAL;
2267 		break;
2268 	}
2269 
2270 	drm_property_change_valid_put(prop, ref);
2271 	return ret;
2272 }
2273 
2274 /**
2275  * DOC: explicit fencing properties
2276  *
2277  * Explicit fencing allows userspace to control the buffer synchronization
2278  * between devices. A Fence or a group of fences are transfered to/from
2279  * userspace using Sync File fds and there are two DRM properties for that.
2280  * IN_FENCE_FD on each DRM Plane to send fences to the kernel and
2281  * OUT_FENCE_PTR on each DRM CRTC to receive fences from the kernel.
2282  *
2283  * As a contrast, with implicit fencing the kernel keeps track of any
2284  * ongoing rendering, and automatically ensures that the atomic update waits
2285  * for any pending rendering to complete. For shared buffers represented with
2286  * a &struct dma_buf this is tracked in &struct reservation_object.
2287  * Implicit syncing is how Linux traditionally worked (e.g. DRI2/3 on X.org),
2288  * whereas explicit fencing is what Android wants.
2289  *
2290  * "IN_FENCE_FD”:
2291  *	Use this property to pass a fence that DRM should wait on before
2292  *	proceeding with the Atomic Commit request and show the framebuffer for
2293  *	the plane on the screen. The fence can be either a normal fence or a
2294  *	merged one, the sync_file framework will handle both cases and use a
2295  *	fence_array if a merged fence is received. Passing -1 here means no
2296  *	fences to wait on.
2297  *
2298  *	If the Atomic Commit request has the DRM_MODE_ATOMIC_TEST_ONLY flag
2299  *	it will only check if the Sync File is a valid one.
2300  *
2301  *	On the driver side the fence is stored on the @fence parameter of
2302  *	&struct drm_plane_state. Drivers which also support implicit fencing
2303  *	should set the implicit fence using drm_atomic_set_fence_for_plane(),
2304  *	to make sure there's consistent behaviour between drivers in precedence
2305  *	of implicit vs. explicit fencing.
2306  *
2307  * "OUT_FENCE_PTR”:
2308  *	Use this property to pass a file descriptor pointer to DRM. Once the
2309  *	Atomic Commit request call returns OUT_FENCE_PTR will be filled with
2310  *	the file descriptor number of a Sync File. This Sync File contains the
2311  *	CRTC fence that will be signaled when all framebuffers present on the
2312  *	Atomic Commit * request for that given CRTC are scanned out on the
2313  *	screen.
2314  *
2315  *	The Atomic Commit request fails if a invalid pointer is passed. If the
2316  *	Atomic Commit request fails for any other reason the out fence fd
2317  *	returned will be -1. On a Atomic Commit with the
2318  *	DRM_MODE_ATOMIC_TEST_ONLY flag the out fence will also be set to -1.
2319  *
2320  *	Note that out-fences don't have a special interface to drivers and are
2321  *	internally represented by a &struct drm_pending_vblank_event in struct
2322  *	&drm_crtc_state, which is also used by the nonblocking atomic commit
2323  *	helpers and for the DRM event handling for existing userspace.
2324  */
2325 
2326 struct drm_out_fence_state {
2327 	s32 __user *out_fence_ptr;
2328 	struct sync_file *sync_file;
2329 	int fd;
2330 };
2331 
2332 static int setup_out_fence(struct drm_out_fence_state *fence_state,
2333 			   struct dma_fence *fence)
2334 {
2335 	fence_state->fd = get_unused_fd_flags(O_CLOEXEC);
2336 	if (fence_state->fd < 0)
2337 		return fence_state->fd;
2338 
2339 	if (put_user(fence_state->fd, fence_state->out_fence_ptr))
2340 		return -EFAULT;
2341 
2342 	fence_state->sync_file = sync_file_create(fence);
2343 	if (!fence_state->sync_file)
2344 		return -ENOMEM;
2345 
2346 	return 0;
2347 }
2348 
2349 static int prepare_signaling(struct drm_device *dev,
2350 				  struct drm_atomic_state *state,
2351 				  struct drm_mode_atomic *arg,
2352 				  struct drm_file *file_priv,
2353 				  struct drm_out_fence_state **fence_state,
2354 				  unsigned int *num_fences)
2355 {
2356 	struct drm_crtc *crtc;
2357 	struct drm_crtc_state *crtc_state;
2358 	struct drm_connector *conn;
2359 	struct drm_connector_state *conn_state;
2360 	int i, c = 0, ret;
2361 
2362 	if (arg->flags & DRM_MODE_ATOMIC_TEST_ONLY)
2363 		return 0;
2364 
2365 	for_each_new_crtc_in_state(state, crtc, crtc_state, i) {
2366 		s32 __user *fence_ptr;
2367 
2368 		fence_ptr = get_out_fence_for_crtc(crtc_state->state, crtc);
2369 
2370 		if (arg->flags & DRM_MODE_PAGE_FLIP_EVENT || fence_ptr) {
2371 			struct drm_pending_vblank_event *e;
2372 
2373 			e = create_vblank_event(crtc, arg->user_data);
2374 			if (!e)
2375 				return -ENOMEM;
2376 
2377 			crtc_state->event = e;
2378 		}
2379 
2380 		if (arg->flags & DRM_MODE_PAGE_FLIP_EVENT) {
2381 			struct drm_pending_vblank_event *e = crtc_state->event;
2382 
2383 			if (!file_priv)
2384 				continue;
2385 
2386 			ret = drm_event_reserve_init(dev, file_priv, &e->base,
2387 						     &e->event.base);
2388 			if (ret) {
2389 				kfree(e);
2390 				crtc_state->event = NULL;
2391 				return ret;
2392 			}
2393 		}
2394 
2395 		if (fence_ptr) {
2396 			struct dma_fence *fence;
2397 			struct drm_out_fence_state *f;
2398 
2399 			f = krealloc(*fence_state, sizeof(**fence_state) *
2400 				     (*num_fences + 1), GFP_KERNEL);
2401 			if (!f)
2402 				return -ENOMEM;
2403 
2404 			memset(&f[*num_fences], 0, sizeof(*f));
2405 
2406 			f[*num_fences].out_fence_ptr = fence_ptr;
2407 			*fence_state = f;
2408 
2409 			fence = drm_crtc_create_fence(crtc);
2410 			if (!fence)
2411 				return -ENOMEM;
2412 
2413 			ret = setup_out_fence(&f[(*num_fences)++], fence);
2414 			if (ret) {
2415 				dma_fence_put(fence);
2416 				return ret;
2417 			}
2418 
2419 			crtc_state->event->base.fence = fence;
2420 		}
2421 
2422 		c++;
2423 	}
2424 
2425 	for_each_new_connector_in_state(state, conn, conn_state, i) {
2426 		struct drm_writeback_job *job;
2427 		struct drm_out_fence_state *f;
2428 		struct dma_fence *fence;
2429 		s32 __user *fence_ptr;
2430 
2431 		fence_ptr = get_out_fence_for_connector(state, conn);
2432 		if (!fence_ptr)
2433 			continue;
2434 
2435 		job = drm_atomic_get_writeback_job(conn_state);
2436 		if (!job)
2437 			return -ENOMEM;
2438 
2439 		f = krealloc(*fence_state, sizeof(**fence_state) *
2440 			     (*num_fences + 1), GFP_KERNEL);
2441 		if (!f)
2442 			return -ENOMEM;
2443 
2444 		memset(&f[*num_fences], 0, sizeof(*f));
2445 
2446 		f[*num_fences].out_fence_ptr = fence_ptr;
2447 		*fence_state = f;
2448 
2449 		fence = drm_writeback_get_out_fence((struct drm_writeback_connector *)conn);
2450 		if (!fence)
2451 			return -ENOMEM;
2452 
2453 		ret = setup_out_fence(&f[(*num_fences)++], fence);
2454 		if (ret) {
2455 			dma_fence_put(fence);
2456 			return ret;
2457 		}
2458 
2459 		job->out_fence = fence;
2460 	}
2461 
2462 	/*
2463 	 * Having this flag means user mode pends on event which will never
2464 	 * reach due to lack of at least one CRTC for signaling
2465 	 */
2466 	if (c == 0 && (arg->flags & DRM_MODE_PAGE_FLIP_EVENT))
2467 		return -EINVAL;
2468 
2469 	return 0;
2470 }
2471 
2472 static void complete_signaling(struct drm_device *dev,
2473 			       struct drm_atomic_state *state,
2474 			       struct drm_out_fence_state *fence_state,
2475 			       unsigned int num_fences,
2476 			       bool install_fds)
2477 {
2478 	struct drm_crtc *crtc;
2479 	struct drm_crtc_state *crtc_state;
2480 	int i;
2481 
2482 	if (install_fds) {
2483 		for (i = 0; i < num_fences; i++)
2484 			fd_install(fence_state[i].fd,
2485 				   fence_state[i].sync_file->file);
2486 
2487 		kfree(fence_state);
2488 		return;
2489 	}
2490 
2491 	for_each_new_crtc_in_state(state, crtc, crtc_state, i) {
2492 		struct drm_pending_vblank_event *event = crtc_state->event;
2493 		/*
2494 		 * Free the allocated event. drm_atomic_helper_setup_commit
2495 		 * can allocate an event too, so only free it if it's ours
2496 		 * to prevent a double free in drm_atomic_state_clear.
2497 		 */
2498 		if (event && (event->base.fence || event->base.file_priv)) {
2499 			drm_event_cancel_free(dev, &event->base);
2500 			crtc_state->event = NULL;
2501 		}
2502 	}
2503 
2504 	if (!fence_state)
2505 		return;
2506 
2507 	for (i = 0; i < num_fences; i++) {
2508 		if (fence_state[i].sync_file)
2509 			fput(fence_state[i].sync_file->file);
2510 		if (fence_state[i].fd >= 0)
2511 			put_unused_fd(fence_state[i].fd);
2512 
2513 		/* If this fails log error to the user */
2514 		if (fence_state[i].out_fence_ptr &&
2515 		    put_user(-1, fence_state[i].out_fence_ptr))
2516 			DRM_DEBUG_ATOMIC("Couldn't clear out_fence_ptr\n");
2517 	}
2518 
2519 	kfree(fence_state);
2520 }
2521 
2522 int drm_mode_atomic_ioctl(struct drm_device *dev,
2523 			  void *data, struct drm_file *file_priv)
2524 {
2525 	struct drm_mode_atomic *arg = data;
2526 	uint32_t __user *objs_ptr = (uint32_t __user *)(unsigned long)(arg->objs_ptr);
2527 	uint32_t __user *count_props_ptr = (uint32_t __user *)(unsigned long)(arg->count_props_ptr);
2528 	uint32_t __user *props_ptr = (uint32_t __user *)(unsigned long)(arg->props_ptr);
2529 	uint64_t __user *prop_values_ptr = (uint64_t __user *)(unsigned long)(arg->prop_values_ptr);
2530 	unsigned int copied_objs, copied_props;
2531 	struct drm_atomic_state *state;
2532 	struct drm_modeset_acquire_ctx ctx;
2533 	struct drm_out_fence_state *fence_state;
2534 	int ret = 0;
2535 	unsigned int i, j, num_fences;
2536 
2537 	/* disallow for drivers not supporting atomic: */
2538 	if (!drm_core_check_feature(dev, DRIVER_ATOMIC))
2539 		return -EINVAL;
2540 
2541 	/* disallow for userspace that has not enabled atomic cap (even
2542 	 * though this may be a bit overkill, since legacy userspace
2543 	 * wouldn't know how to call this ioctl)
2544 	 */
2545 	if (!file_priv->atomic)
2546 		return -EINVAL;
2547 
2548 	if (arg->flags & ~DRM_MODE_ATOMIC_FLAGS)
2549 		return -EINVAL;
2550 
2551 	if (arg->reserved)
2552 		return -EINVAL;
2553 
2554 	if ((arg->flags & DRM_MODE_PAGE_FLIP_ASYNC) &&
2555 			!dev->mode_config.async_page_flip)
2556 		return -EINVAL;
2557 
2558 	/* can't test and expect an event at the same time. */
2559 	if ((arg->flags & DRM_MODE_ATOMIC_TEST_ONLY) &&
2560 			(arg->flags & DRM_MODE_PAGE_FLIP_EVENT))
2561 		return -EINVAL;
2562 
2563 	drm_modeset_acquire_init(&ctx, DRM_MODESET_ACQUIRE_INTERRUPTIBLE);
2564 
2565 	state = drm_atomic_state_alloc(dev);
2566 	if (!state)
2567 		return -ENOMEM;
2568 
2569 	state->acquire_ctx = &ctx;
2570 	state->allow_modeset = !!(arg->flags & DRM_MODE_ATOMIC_ALLOW_MODESET);
2571 
2572 retry:
2573 	copied_objs = 0;
2574 	copied_props = 0;
2575 	fence_state = NULL;
2576 	num_fences = 0;
2577 
2578 	for (i = 0; i < arg->count_objs; i++) {
2579 		uint32_t obj_id, count_props;
2580 		struct drm_mode_object *obj;
2581 
2582 		if (get_user(obj_id, objs_ptr + copied_objs)) {
2583 			ret = -EFAULT;
2584 			goto out;
2585 		}
2586 
2587 		obj = drm_mode_object_find(dev, file_priv, obj_id, DRM_MODE_OBJECT_ANY);
2588 		if (!obj) {
2589 			ret = -ENOENT;
2590 			goto out;
2591 		}
2592 
2593 		if (!obj->properties) {
2594 			drm_mode_object_put(obj);
2595 			ret = -ENOENT;
2596 			goto out;
2597 		}
2598 
2599 		if (get_user(count_props, count_props_ptr + copied_objs)) {
2600 			drm_mode_object_put(obj);
2601 			ret = -EFAULT;
2602 			goto out;
2603 		}
2604 
2605 		copied_objs++;
2606 
2607 		for (j = 0; j < count_props; j++) {
2608 			uint32_t prop_id;
2609 			uint64_t prop_value;
2610 			struct drm_property *prop;
2611 
2612 			if (get_user(prop_id, props_ptr + copied_props)) {
2613 				drm_mode_object_put(obj);
2614 				ret = -EFAULT;
2615 				goto out;
2616 			}
2617 
2618 			prop = drm_mode_obj_find_prop_id(obj, prop_id);
2619 			if (!prop) {
2620 				drm_mode_object_put(obj);
2621 				ret = -ENOENT;
2622 				goto out;
2623 			}
2624 
2625 			if (copy_from_user(&prop_value,
2626 					   prop_values_ptr + copied_props,
2627 					   sizeof(prop_value))) {
2628 				drm_mode_object_put(obj);
2629 				ret = -EFAULT;
2630 				goto out;
2631 			}
2632 
2633 			ret = drm_atomic_set_property(state, obj, prop,
2634 						      prop_value);
2635 			if (ret) {
2636 				drm_mode_object_put(obj);
2637 				goto out;
2638 			}
2639 
2640 			copied_props++;
2641 		}
2642 
2643 		drm_mode_object_put(obj);
2644 	}
2645 
2646 	ret = prepare_signaling(dev, state, arg, file_priv, &fence_state,
2647 				&num_fences);
2648 	if (ret)
2649 		goto out;
2650 
2651 	if (arg->flags & DRM_MODE_ATOMIC_TEST_ONLY) {
2652 		ret = drm_atomic_check_only(state);
2653 	} else if (arg->flags & DRM_MODE_ATOMIC_NONBLOCK) {
2654 		ret = drm_atomic_nonblocking_commit(state);
2655 	} else {
2656 		if (unlikely(drm_debug & DRM_UT_STATE))
2657 			drm_atomic_print_state(state);
2658 
2659 		ret = drm_atomic_commit(state);
2660 	}
2661 
2662 out:
2663 	complete_signaling(dev, state, fence_state, num_fences, !ret);
2664 
2665 	if (ret == -EDEADLK) {
2666 		drm_atomic_state_clear(state);
2667 		ret = drm_modeset_backoff(&ctx);
2668 		if (!ret)
2669 			goto retry;
2670 	}
2671 
2672 	drm_atomic_state_put(state);
2673 
2674 	drm_modeset_drop_locks(&ctx);
2675 	drm_modeset_acquire_fini(&ctx);
2676 
2677 	return ret;
2678 }
2679