bus: mhi: core: Add helper API to return number of free TREs
[linux-2.6-microblaze.git] / drivers / gpu / drm / drm_syncobj.c
1 /*
2  * Copyright 2017 Red Hat
3  * Parts ported from amdgpu (fence wait code).
4  * Copyright 2016 Advanced Micro Devices, Inc.
5  *
6  * Permission is hereby granted, free of charge, to any person obtaining a
7  * copy of this software and associated documentation files (the "Software"),
8  * to deal in the Software without restriction, including without limitation
9  * the rights to use, copy, modify, merge, publish, distribute, sublicense,
10  * and/or sell copies of the Software, and to permit persons to whom the
11  * Software is furnished to do so, subject to the following conditions:
12  *
13  * The above copyright notice and this permission notice (including the next
14  * paragraph) shall be included in all copies or substantial portions of the
15  * Software.
16  *
17  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
18  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
19  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
20  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
21  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
22  * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
23  * IN THE SOFTWARE.
24  *
25  * Authors:
26  *
27  */
28
29 /**
30  * DOC: Overview
31  *
32  * DRM synchronisation objects (syncobj, see struct &drm_syncobj) provide a
33  * container for a synchronization primitive which can be used by userspace
34  * to explicitly synchronize GPU commands, can be shared between userspace
35  * processes, and can be shared between different DRM drivers.
36  * Their primary use-case is to implement Vulkan fences and semaphores.
37  * The syncobj userspace API provides ioctls for several operations:
38  *
39  *  - Creation and destruction of syncobjs
40  *  - Import and export of syncobjs to/from a syncobj file descriptor
41  *  - Import and export a syncobj's underlying fence to/from a sync file
42  *  - Reset a syncobj (set its fence to NULL)
43  *  - Signal a syncobj (set a trivially signaled fence)
44  *  - Wait for a syncobj's fence to appear and be signaled
45  *
46  * The syncobj userspace API also provides operations to manipulate a syncobj
47  * in terms of a timeline of struct &dma_fence_chain rather than a single
48  * struct &dma_fence, through the following operations:
49  *
50  *   - Signal a given point on the timeline
51  *   - Wait for a given point to appear and/or be signaled
52  *   - Import and export from/to a given point of a timeline
53  *
54  * At it's core, a syncobj is simply a wrapper around a pointer to a struct
55  * &dma_fence which may be NULL.
56  * When a syncobj is first created, its pointer is either NULL or a pointer
57  * to an already signaled fence depending on whether the
58  * &DRM_SYNCOBJ_CREATE_SIGNALED flag is passed to
59  * &DRM_IOCTL_SYNCOBJ_CREATE.
60  *
61  * If the syncobj is considered as a binary (its state is either signaled or
62  * unsignaled) primitive, when GPU work is enqueued in a DRM driver to signal
63  * the syncobj, the syncobj's fence is replaced with a fence which will be
64  * signaled by the completion of that work.
65  * If the syncobj is considered as a timeline primitive, when GPU work is
66  * enqueued in a DRM driver to signal the a given point of the syncobj, a new
67  * struct &dma_fence_chain pointing to the DRM driver's fence and also
68  * pointing to the previous fence that was in the syncobj. The new struct
69  * &dma_fence_chain fence replace the syncobj's fence and will be signaled by
70  * completion of the DRM driver's work and also any work associated with the
71  * fence previously in the syncobj.
72  *
73  * When GPU work which waits on a syncobj is enqueued in a DRM driver, at the
74  * time the work is enqueued, it waits on the syncobj's fence before
75  * submitting the work to hardware. That fence is either :
76  *
77  *    - The syncobj's current fence if the syncobj is considered as a binary
78  *      primitive.
79  *    - The struct &dma_fence associated with a given point if the syncobj is
80  *      considered as a timeline primitive.
81  *
82  * If the syncobj's fence is NULL or not present in the syncobj's timeline,
83  * the enqueue operation is expected to fail.
84  *
85  * With binary syncobj, all manipulation of the syncobjs's fence happens in
86  * terms of the current fence at the time the ioctl is called by userspace
87  * regardless of whether that operation is an immediate host-side operation
88  * (signal or reset) or or an operation which is enqueued in some driver
89  * queue. &DRM_IOCTL_SYNCOBJ_RESET and &DRM_IOCTL_SYNCOBJ_SIGNAL can be used
90  * to manipulate a syncobj from the host by resetting its pointer to NULL or
91  * setting its pointer to a fence which is already signaled.
92  *
93  * With a timeline syncobj, all manipulation of the synobj's fence happens in
94  * terms of a u64 value referring to point in the timeline. See
95  * dma_fence_chain_find_seqno() to see how a given point is found in the
96  * timeline.
97  *
98  * Note that applications should be careful to always use timeline set of
99  * ioctl() when dealing with syncobj considered as timeline. Using a binary
100  * set of ioctl() with a syncobj considered as timeline could result incorrect
101  * synchronization. The use of binary syncobj is supported through the
102  * timeline set of ioctl() by using a point value of 0, this will reproduce
103  * the behavior of the binary set of ioctl() (for example replace the
104  * syncobj's fence when signaling).
105  *
106  *
107  * Host-side wait on syncobjs
108  * --------------------------
109  *
110  * &DRM_IOCTL_SYNCOBJ_WAIT takes an array of syncobj handles and does a
111  * host-side wait on all of the syncobj fences simultaneously.
112  * If &DRM_SYNCOBJ_WAIT_FLAGS_WAIT_ALL is set, the wait ioctl will wait on
113  * all of the syncobj fences to be signaled before it returns.
114  * Otherwise, it returns once at least one syncobj fence has been signaled
115  * and the index of a signaled fence is written back to the client.
116  *
117  * Unlike the enqueued GPU work dependencies which fail if they see a NULL
118  * fence in a syncobj, if &DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT is set,
119  * the host-side wait will first wait for the syncobj to receive a non-NULL
120  * fence and then wait on that fence.
121  * If &DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT is not set and any one of the
122  * syncobjs in the array has a NULL fence, -EINVAL will be returned.
123  * Assuming the syncobj starts off with a NULL fence, this allows a client
124  * to do a host wait in one thread (or process) which waits on GPU work
125  * submitted in another thread (or process) without having to manually
126  * synchronize between the two.
127  * This requirement is inherited from the Vulkan fence API.
128  *
129  * Similarly, &DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT takes an array of syncobj
130  * handles as well as an array of u64 points and does a host-side wait on all
131  * of syncobj fences at the given points simultaneously.
132  *
133  * &DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT also adds the ability to wait for a given
134  * fence to materialize on the timeline without waiting for the fence to be
135  * signaled by using the &DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE flag. This
136  * requirement is inherited from the wait-before-signal behavior required by
137  * the Vulkan timeline semaphore API.
138  *
139  *
140  * Import/export of syncobjs
141  * -------------------------
142  *
143  * &DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE and &DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD
144  * provide two mechanisms for import/export of syncobjs.
145  *
146  * The first lets the client import or export an entire syncobj to a file
147  * descriptor.
148  * These fd's are opaque and have no other use case, except passing the
149  * syncobj between processes.
150  * All exported file descriptors and any syncobj handles created as a
151  * result of importing those file descriptors own a reference to the
152  * same underlying struct &drm_syncobj and the syncobj can be used
153  * persistently across all the processes with which it is shared.
154  * The syncobj is freed only once the last reference is dropped.
155  * Unlike dma-buf, importing a syncobj creates a new handle (with its own
156  * reference) for every import instead of de-duplicating.
157  * The primary use-case of this persistent import/export is for shared
158  * Vulkan fences and semaphores.
159  *
160  * The second import/export mechanism, which is indicated by
161  * &DRM_SYNCOBJ_FD_TO_HANDLE_FLAGS_IMPORT_SYNC_FILE or
162  * &DRM_SYNCOBJ_HANDLE_TO_FD_FLAGS_EXPORT_SYNC_FILE lets the client
163  * import/export the syncobj's current fence from/to a &sync_file.
164  * When a syncobj is exported to a sync file, that sync file wraps the
165  * sycnobj's fence at the time of export and any later signal or reset
166  * operations on the syncobj will not affect the exported sync file.
167  * When a sync file is imported into a syncobj, the syncobj's fence is set
168  * to the fence wrapped by that sync file.
169  * Because sync files are immutable, resetting or signaling the syncobj
170  * will not affect any sync files whose fences have been imported into the
171  * syncobj.
172  *
173  *
174  * Import/export of timeline points in timeline syncobjs
175  * -----------------------------------------------------
176  *
177  * &DRM_IOCTL_SYNCOBJ_TRANSFER provides a mechanism to transfer a struct
178  * &dma_fence_chain of a syncobj at a given u64 point to another u64 point
179  * into another syncobj.
180  *
181  * Note that if you want to transfer a struct &dma_fence_chain from a given
182  * point on a timeline syncobj from/into a binary syncobj, you can use the
183  * point 0 to mean take/replace the fence in the syncobj.
184  */
185
186 #include <linux/anon_inodes.h>
187 #include <linux/file.h>
188 #include <linux/fs.h>
189 #include <linux/sched/signal.h>
190 #include <linux/sync_file.h>
191 #include <linux/uaccess.h>
192
193 #include <drm/drm.h>
194 #include <drm/drm_drv.h>
195 #include <drm/drm_file.h>
196 #include <drm/drm_gem.h>
197 #include <drm/drm_print.h>
198 #include <drm/drm_syncobj.h>
199 #include <drm/drm_utils.h>
200
201 #include "drm_internal.h"
202
203 struct syncobj_wait_entry {
204         struct list_head node;
205         struct task_struct *task;
206         struct dma_fence *fence;
207         struct dma_fence_cb fence_cb;
208         u64    point;
209 };
210
211 static void syncobj_wait_syncobj_func(struct drm_syncobj *syncobj,
212                                       struct syncobj_wait_entry *wait);
213
214 /**
215  * drm_syncobj_find - lookup and reference a sync object.
216  * @file_private: drm file private pointer
217  * @handle: sync object handle to lookup.
218  *
219  * Returns a reference to the syncobj pointed to by handle or NULL. The
220  * reference must be released by calling drm_syncobj_put().
221  */
222 struct drm_syncobj *drm_syncobj_find(struct drm_file *file_private,
223                                      u32 handle)
224 {
225         struct drm_syncobj *syncobj;
226
227         spin_lock(&file_private->syncobj_table_lock);
228
229         /* Check if we currently have a reference on the object */
230         syncobj = idr_find(&file_private->syncobj_idr, handle);
231         if (syncobj)
232                 drm_syncobj_get(syncobj);
233
234         spin_unlock(&file_private->syncobj_table_lock);
235
236         return syncobj;
237 }
238 EXPORT_SYMBOL(drm_syncobj_find);
239
240 static void drm_syncobj_fence_add_wait(struct drm_syncobj *syncobj,
241                                        struct syncobj_wait_entry *wait)
242 {
243         struct dma_fence *fence;
244
245         if (wait->fence)
246                 return;
247
248         spin_lock(&syncobj->lock);
249         /* We've already tried once to get a fence and failed.  Now that we
250          * have the lock, try one more time just to be sure we don't add a
251          * callback when a fence has already been set.
252          */
253         fence = dma_fence_get(rcu_dereference_protected(syncobj->fence, 1));
254         if (!fence || dma_fence_chain_find_seqno(&fence, wait->point)) {
255                 dma_fence_put(fence);
256                 list_add_tail(&wait->node, &syncobj->cb_list);
257         } else if (!fence) {
258                 wait->fence = dma_fence_get_stub();
259         } else {
260                 wait->fence = fence;
261         }
262         spin_unlock(&syncobj->lock);
263 }
264
265 static void drm_syncobj_remove_wait(struct drm_syncobj *syncobj,
266                                     struct syncobj_wait_entry *wait)
267 {
268         if (!wait->node.next)
269                 return;
270
271         spin_lock(&syncobj->lock);
272         list_del_init(&wait->node);
273         spin_unlock(&syncobj->lock);
274 }
275
276 /**
277  * drm_syncobj_add_point - add new timeline point to the syncobj
278  * @syncobj: sync object to add timeline point do
279  * @chain: chain node to use to add the point
280  * @fence: fence to encapsulate in the chain node
281  * @point: sequence number to use for the point
282  *
283  * Add the chain node as new timeline point to the syncobj.
284  */
285 void drm_syncobj_add_point(struct drm_syncobj *syncobj,
286                            struct dma_fence_chain *chain,
287                            struct dma_fence *fence,
288                            uint64_t point)
289 {
290         struct syncobj_wait_entry *cur, *tmp;
291         struct dma_fence *prev;
292
293         dma_fence_get(fence);
294
295         spin_lock(&syncobj->lock);
296
297         prev = drm_syncobj_fence_get(syncobj);
298         /* You are adding an unorder point to timeline, which could cause payload returned from query_ioctl is 0! */
299         if (prev && prev->seqno >= point)
300                 DRM_DEBUG("You are adding an unorder point to timeline!\n");
301         dma_fence_chain_init(chain, prev, fence, point);
302         rcu_assign_pointer(syncobj->fence, &chain->base);
303
304         list_for_each_entry_safe(cur, tmp, &syncobj->cb_list, node)
305                 syncobj_wait_syncobj_func(syncobj, cur);
306         spin_unlock(&syncobj->lock);
307
308         /* Walk the chain once to trigger garbage collection */
309         dma_fence_chain_for_each(fence, prev);
310         dma_fence_put(prev);
311 }
312 EXPORT_SYMBOL(drm_syncobj_add_point);
313
314 /**
315  * drm_syncobj_replace_fence - replace fence in a sync object.
316  * @syncobj: Sync object to replace fence in
317  * @fence: fence to install in sync file.
318  *
319  * This replaces the fence on a sync object.
320  */
321 void drm_syncobj_replace_fence(struct drm_syncobj *syncobj,
322                                struct dma_fence *fence)
323 {
324         struct dma_fence *old_fence;
325         struct syncobj_wait_entry *cur, *tmp;
326
327         if (fence)
328                 dma_fence_get(fence);
329
330         spin_lock(&syncobj->lock);
331
332         old_fence = rcu_dereference_protected(syncobj->fence,
333                                               lockdep_is_held(&syncobj->lock));
334         rcu_assign_pointer(syncobj->fence, fence);
335
336         if (fence != old_fence) {
337                 list_for_each_entry_safe(cur, tmp, &syncobj->cb_list, node)
338                         syncobj_wait_syncobj_func(syncobj, cur);
339         }
340
341         spin_unlock(&syncobj->lock);
342
343         dma_fence_put(old_fence);
344 }
345 EXPORT_SYMBOL(drm_syncobj_replace_fence);
346
347 /**
348  * drm_syncobj_assign_null_handle - assign a stub fence to the sync object
349  * @syncobj: sync object to assign the fence on
350  *
351  * Assign a already signaled stub fence to the sync object.
352  */
353 static void drm_syncobj_assign_null_handle(struct drm_syncobj *syncobj)
354 {
355         struct dma_fence *fence = dma_fence_get_stub();
356
357         drm_syncobj_replace_fence(syncobj, fence);
358         dma_fence_put(fence);
359 }
360
361 /* 5s default for wait submission */
362 #define DRM_SYNCOBJ_WAIT_FOR_SUBMIT_TIMEOUT 5000000000ULL
363 /**
364  * drm_syncobj_find_fence - lookup and reference the fence in a sync object
365  * @file_private: drm file private pointer
366  * @handle: sync object handle to lookup.
367  * @point: timeline point
368  * @flags: DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT or not
369  * @fence: out parameter for the fence
370  *
371  * This is just a convenience function that combines drm_syncobj_find() and
372  * drm_syncobj_fence_get().
373  *
374  * Returns 0 on success or a negative error value on failure. On success @fence
375  * contains a reference to the fence, which must be released by calling
376  * dma_fence_put().
377  */
378 int drm_syncobj_find_fence(struct drm_file *file_private,
379                            u32 handle, u64 point, u64 flags,
380                            struct dma_fence **fence)
381 {
382         struct drm_syncobj *syncobj = drm_syncobj_find(file_private, handle);
383         struct syncobj_wait_entry wait;
384         u64 timeout = nsecs_to_jiffies64(DRM_SYNCOBJ_WAIT_FOR_SUBMIT_TIMEOUT);
385         int ret;
386
387         if (!syncobj)
388                 return -ENOENT;
389
390         *fence = drm_syncobj_fence_get(syncobj);
391         drm_syncobj_put(syncobj);
392
393         if (*fence) {
394                 ret = dma_fence_chain_find_seqno(fence, point);
395                 if (!ret)
396                         return 0;
397                 dma_fence_put(*fence);
398         } else {
399                 ret = -EINVAL;
400         }
401
402         if (!(flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT))
403                 return ret;
404
405         memset(&wait, 0, sizeof(wait));
406         wait.task = current;
407         wait.point = point;
408         drm_syncobj_fence_add_wait(syncobj, &wait);
409
410         do {
411                 set_current_state(TASK_INTERRUPTIBLE);
412                 if (wait.fence) {
413                         ret = 0;
414                         break;
415                 }
416                 if (timeout == 0) {
417                         ret = -ETIME;
418                         break;
419                 }
420
421                 if (signal_pending(current)) {
422                         ret = -ERESTARTSYS;
423                         break;
424                 }
425
426                 timeout = schedule_timeout(timeout);
427         } while (1);
428
429         __set_current_state(TASK_RUNNING);
430         *fence = wait.fence;
431
432         if (wait.node.next)
433                 drm_syncobj_remove_wait(syncobj, &wait);
434
435         return ret;
436 }
437 EXPORT_SYMBOL(drm_syncobj_find_fence);
438
439 /**
440  * drm_syncobj_free - free a sync object.
441  * @kref: kref to free.
442  *
443  * Only to be called from kref_put in drm_syncobj_put.
444  */
445 void drm_syncobj_free(struct kref *kref)
446 {
447         struct drm_syncobj *syncobj = container_of(kref,
448                                                    struct drm_syncobj,
449                                                    refcount);
450         drm_syncobj_replace_fence(syncobj, NULL);
451         kfree(syncobj);
452 }
453 EXPORT_SYMBOL(drm_syncobj_free);
454
455 /**
456  * drm_syncobj_create - create a new syncobj
457  * @out_syncobj: returned syncobj
458  * @flags: DRM_SYNCOBJ_* flags
459  * @fence: if non-NULL, the syncobj will represent this fence
460  *
461  * This is the first function to create a sync object. After creating, drivers
462  * probably want to make it available to userspace, either through
463  * drm_syncobj_get_handle() or drm_syncobj_get_fd().
464  *
465  * Returns 0 on success or a negative error value on failure.
466  */
467 int drm_syncobj_create(struct drm_syncobj **out_syncobj, uint32_t flags,
468                        struct dma_fence *fence)
469 {
470         struct drm_syncobj *syncobj;
471
472         syncobj = kzalloc(sizeof(struct drm_syncobj), GFP_KERNEL);
473         if (!syncobj)
474                 return -ENOMEM;
475
476         kref_init(&syncobj->refcount);
477         INIT_LIST_HEAD(&syncobj->cb_list);
478         spin_lock_init(&syncobj->lock);
479
480         if (flags & DRM_SYNCOBJ_CREATE_SIGNALED)
481                 drm_syncobj_assign_null_handle(syncobj);
482
483         if (fence)
484                 drm_syncobj_replace_fence(syncobj, fence);
485
486         *out_syncobj = syncobj;
487         return 0;
488 }
489 EXPORT_SYMBOL(drm_syncobj_create);
490
491 /**
492  * drm_syncobj_get_handle - get a handle from a syncobj
493  * @file_private: drm file private pointer
494  * @syncobj: Sync object to export
495  * @handle: out parameter with the new handle
496  *
497  * Exports a sync object created with drm_syncobj_create() as a handle on
498  * @file_private to userspace.
499  *
500  * Returns 0 on success or a negative error value on failure.
501  */
502 int drm_syncobj_get_handle(struct drm_file *file_private,
503                            struct drm_syncobj *syncobj, u32 *handle)
504 {
505         int ret;
506
507         /* take a reference to put in the idr */
508         drm_syncobj_get(syncobj);
509
510         idr_preload(GFP_KERNEL);
511         spin_lock(&file_private->syncobj_table_lock);
512         ret = idr_alloc(&file_private->syncobj_idr, syncobj, 1, 0, GFP_NOWAIT);
513         spin_unlock(&file_private->syncobj_table_lock);
514
515         idr_preload_end();
516
517         if (ret < 0) {
518                 drm_syncobj_put(syncobj);
519                 return ret;
520         }
521
522         *handle = ret;
523         return 0;
524 }
525 EXPORT_SYMBOL(drm_syncobj_get_handle);
526
527 static int drm_syncobj_create_as_handle(struct drm_file *file_private,
528                                         u32 *handle, uint32_t flags)
529 {
530         int ret;
531         struct drm_syncobj *syncobj;
532
533         ret = drm_syncobj_create(&syncobj, flags, NULL);
534         if (ret)
535                 return ret;
536
537         ret = drm_syncobj_get_handle(file_private, syncobj, handle);
538         drm_syncobj_put(syncobj);
539         return ret;
540 }
541
542 static int drm_syncobj_destroy(struct drm_file *file_private,
543                                u32 handle)
544 {
545         struct drm_syncobj *syncobj;
546
547         spin_lock(&file_private->syncobj_table_lock);
548         syncobj = idr_remove(&file_private->syncobj_idr, handle);
549         spin_unlock(&file_private->syncobj_table_lock);
550
551         if (!syncobj)
552                 return -EINVAL;
553
554         drm_syncobj_put(syncobj);
555         return 0;
556 }
557
558 static int drm_syncobj_file_release(struct inode *inode, struct file *file)
559 {
560         struct drm_syncobj *syncobj = file->private_data;
561
562         drm_syncobj_put(syncobj);
563         return 0;
564 }
565
566 static const struct file_operations drm_syncobj_file_fops = {
567         .release = drm_syncobj_file_release,
568 };
569
570 /**
571  * drm_syncobj_get_fd - get a file descriptor from a syncobj
572  * @syncobj: Sync object to export
573  * @p_fd: out parameter with the new file descriptor
574  *
575  * Exports a sync object created with drm_syncobj_create() as a file descriptor.
576  *
577  * Returns 0 on success or a negative error value on failure.
578  */
579 int drm_syncobj_get_fd(struct drm_syncobj *syncobj, int *p_fd)
580 {
581         struct file *file;
582         int fd;
583
584         fd = get_unused_fd_flags(O_CLOEXEC);
585         if (fd < 0)
586                 return fd;
587
588         file = anon_inode_getfile("syncobj_file",
589                                   &drm_syncobj_file_fops,
590                                   syncobj, 0);
591         if (IS_ERR(file)) {
592                 put_unused_fd(fd);
593                 return PTR_ERR(file);
594         }
595
596         drm_syncobj_get(syncobj);
597         fd_install(fd, file);
598
599         *p_fd = fd;
600         return 0;
601 }
602 EXPORT_SYMBOL(drm_syncobj_get_fd);
603
604 static int drm_syncobj_handle_to_fd(struct drm_file *file_private,
605                                     u32 handle, int *p_fd)
606 {
607         struct drm_syncobj *syncobj = drm_syncobj_find(file_private, handle);
608         int ret;
609
610         if (!syncobj)
611                 return -EINVAL;
612
613         ret = drm_syncobj_get_fd(syncobj, p_fd);
614         drm_syncobj_put(syncobj);
615         return ret;
616 }
617
618 static int drm_syncobj_fd_to_handle(struct drm_file *file_private,
619                                     int fd, u32 *handle)
620 {
621         struct drm_syncobj *syncobj;
622         struct fd f = fdget(fd);
623         int ret;
624
625         if (!f.file)
626                 return -EINVAL;
627
628         if (f.file->f_op != &drm_syncobj_file_fops) {
629                 fdput(f);
630                 return -EINVAL;
631         }
632
633         /* take a reference to put in the idr */
634         syncobj = f.file->private_data;
635         drm_syncobj_get(syncobj);
636
637         idr_preload(GFP_KERNEL);
638         spin_lock(&file_private->syncobj_table_lock);
639         ret = idr_alloc(&file_private->syncobj_idr, syncobj, 1, 0, GFP_NOWAIT);
640         spin_unlock(&file_private->syncobj_table_lock);
641         idr_preload_end();
642
643         if (ret > 0) {
644                 *handle = ret;
645                 ret = 0;
646         } else
647                 drm_syncobj_put(syncobj);
648
649         fdput(f);
650         return ret;
651 }
652
653 static int drm_syncobj_import_sync_file_fence(struct drm_file *file_private,
654                                               int fd, int handle)
655 {
656         struct dma_fence *fence = sync_file_get_fence(fd);
657         struct drm_syncobj *syncobj;
658
659         if (!fence)
660                 return -EINVAL;
661
662         syncobj = drm_syncobj_find(file_private, handle);
663         if (!syncobj) {
664                 dma_fence_put(fence);
665                 return -ENOENT;
666         }
667
668         drm_syncobj_replace_fence(syncobj, fence);
669         dma_fence_put(fence);
670         drm_syncobj_put(syncobj);
671         return 0;
672 }
673
674 static int drm_syncobj_export_sync_file(struct drm_file *file_private,
675                                         int handle, int *p_fd)
676 {
677         int ret;
678         struct dma_fence *fence;
679         struct sync_file *sync_file;
680         int fd = get_unused_fd_flags(O_CLOEXEC);
681
682         if (fd < 0)
683                 return fd;
684
685         ret = drm_syncobj_find_fence(file_private, handle, 0, 0, &fence);
686         if (ret)
687                 goto err_put_fd;
688
689         sync_file = sync_file_create(fence);
690
691         dma_fence_put(fence);
692
693         if (!sync_file) {
694                 ret = -EINVAL;
695                 goto err_put_fd;
696         }
697
698         fd_install(fd, sync_file->file);
699
700         *p_fd = fd;
701         return 0;
702 err_put_fd:
703         put_unused_fd(fd);
704         return ret;
705 }
706 /**
707  * drm_syncobj_open - initalizes syncobj file-private structures at devnode open time
708  * @file_private: drm file-private structure to set up
709  *
710  * Called at device open time, sets up the structure for handling refcounting
711  * of sync objects.
712  */
713 void
714 drm_syncobj_open(struct drm_file *file_private)
715 {
716         idr_init_base(&file_private->syncobj_idr, 1);
717         spin_lock_init(&file_private->syncobj_table_lock);
718 }
719
720 static int
721 drm_syncobj_release_handle(int id, void *ptr, void *data)
722 {
723         struct drm_syncobj *syncobj = ptr;
724
725         drm_syncobj_put(syncobj);
726         return 0;
727 }
728
729 /**
730  * drm_syncobj_release - release file-private sync object resources
731  * @file_private: drm file-private structure to clean up
732  *
733  * Called at close time when the filp is going away.
734  *
735  * Releases any remaining references on objects by this filp.
736  */
737 void
738 drm_syncobj_release(struct drm_file *file_private)
739 {
740         idr_for_each(&file_private->syncobj_idr,
741                      &drm_syncobj_release_handle, file_private);
742         idr_destroy(&file_private->syncobj_idr);
743 }
744
745 int
746 drm_syncobj_create_ioctl(struct drm_device *dev, void *data,
747                          struct drm_file *file_private)
748 {
749         struct drm_syncobj_create *args = data;
750
751         if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ))
752                 return -EOPNOTSUPP;
753
754         /* no valid flags yet */
755         if (args->flags & ~DRM_SYNCOBJ_CREATE_SIGNALED)
756                 return -EINVAL;
757
758         return drm_syncobj_create_as_handle(file_private,
759                                             &args->handle, args->flags);
760 }
761
762 int
763 drm_syncobj_destroy_ioctl(struct drm_device *dev, void *data,
764                           struct drm_file *file_private)
765 {
766         struct drm_syncobj_destroy *args = data;
767
768         if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ))
769                 return -EOPNOTSUPP;
770
771         /* make sure padding is empty */
772         if (args->pad)
773                 return -EINVAL;
774         return drm_syncobj_destroy(file_private, args->handle);
775 }
776
777 int
778 drm_syncobj_handle_to_fd_ioctl(struct drm_device *dev, void *data,
779                                    struct drm_file *file_private)
780 {
781         struct drm_syncobj_handle *args = data;
782
783         if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ))
784                 return -EOPNOTSUPP;
785
786         if (args->pad)
787                 return -EINVAL;
788
789         if (args->flags != 0 &&
790             args->flags != DRM_SYNCOBJ_HANDLE_TO_FD_FLAGS_EXPORT_SYNC_FILE)
791                 return -EINVAL;
792
793         if (args->flags & DRM_SYNCOBJ_HANDLE_TO_FD_FLAGS_EXPORT_SYNC_FILE)
794                 return drm_syncobj_export_sync_file(file_private, args->handle,
795                                                     &args->fd);
796
797         return drm_syncobj_handle_to_fd(file_private, args->handle,
798                                         &args->fd);
799 }
800
801 int
802 drm_syncobj_fd_to_handle_ioctl(struct drm_device *dev, void *data,
803                                    struct drm_file *file_private)
804 {
805         struct drm_syncobj_handle *args = data;
806
807         if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ))
808                 return -EOPNOTSUPP;
809
810         if (args->pad)
811                 return -EINVAL;
812
813         if (args->flags != 0 &&
814             args->flags != DRM_SYNCOBJ_FD_TO_HANDLE_FLAGS_IMPORT_SYNC_FILE)
815                 return -EINVAL;
816
817         if (args->flags & DRM_SYNCOBJ_FD_TO_HANDLE_FLAGS_IMPORT_SYNC_FILE)
818                 return drm_syncobj_import_sync_file_fence(file_private,
819                                                           args->fd,
820                                                           args->handle);
821
822         return drm_syncobj_fd_to_handle(file_private, args->fd,
823                                         &args->handle);
824 }
825
826 static int drm_syncobj_transfer_to_timeline(struct drm_file *file_private,
827                                             struct drm_syncobj_transfer *args)
828 {
829         struct drm_syncobj *timeline_syncobj = NULL;
830         struct dma_fence *fence;
831         struct dma_fence_chain *chain;
832         int ret;
833
834         timeline_syncobj = drm_syncobj_find(file_private, args->dst_handle);
835         if (!timeline_syncobj) {
836                 return -ENOENT;
837         }
838         ret = drm_syncobj_find_fence(file_private, args->src_handle,
839                                      args->src_point, args->flags,
840                                      &fence);
841         if (ret)
842                 goto err;
843         chain = kzalloc(sizeof(struct dma_fence_chain), GFP_KERNEL);
844         if (!chain) {
845                 ret = -ENOMEM;
846                 goto err1;
847         }
848         drm_syncobj_add_point(timeline_syncobj, chain, fence, args->dst_point);
849 err1:
850         dma_fence_put(fence);
851 err:
852         drm_syncobj_put(timeline_syncobj);
853
854         return ret;
855 }
856
857 static int
858 drm_syncobj_transfer_to_binary(struct drm_file *file_private,
859                                struct drm_syncobj_transfer *args)
860 {
861         struct drm_syncobj *binary_syncobj = NULL;
862         struct dma_fence *fence;
863         int ret;
864
865         binary_syncobj = drm_syncobj_find(file_private, args->dst_handle);
866         if (!binary_syncobj)
867                 return -ENOENT;
868         ret = drm_syncobj_find_fence(file_private, args->src_handle,
869                                      args->src_point, args->flags, &fence);
870         if (ret)
871                 goto err;
872         drm_syncobj_replace_fence(binary_syncobj, fence);
873         dma_fence_put(fence);
874 err:
875         drm_syncobj_put(binary_syncobj);
876
877         return ret;
878 }
879 int
880 drm_syncobj_transfer_ioctl(struct drm_device *dev, void *data,
881                            struct drm_file *file_private)
882 {
883         struct drm_syncobj_transfer *args = data;
884         int ret;
885
886         if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ_TIMELINE))
887                 return -EOPNOTSUPP;
888
889         if (args->pad)
890                 return -EINVAL;
891
892         if (args->dst_point)
893                 ret = drm_syncobj_transfer_to_timeline(file_private, args);
894         else
895                 ret = drm_syncobj_transfer_to_binary(file_private, args);
896
897         return ret;
898 }
899
900 static void syncobj_wait_fence_func(struct dma_fence *fence,
901                                     struct dma_fence_cb *cb)
902 {
903         struct syncobj_wait_entry *wait =
904                 container_of(cb, struct syncobj_wait_entry, fence_cb);
905
906         wake_up_process(wait->task);
907 }
908
909 static void syncobj_wait_syncobj_func(struct drm_syncobj *syncobj,
910                                       struct syncobj_wait_entry *wait)
911 {
912         struct dma_fence *fence;
913
914         /* This happens inside the syncobj lock */
915         fence = rcu_dereference_protected(syncobj->fence,
916                                           lockdep_is_held(&syncobj->lock));
917         dma_fence_get(fence);
918         if (!fence || dma_fence_chain_find_seqno(&fence, wait->point)) {
919                 dma_fence_put(fence);
920                 return;
921         } else if (!fence) {
922                 wait->fence = dma_fence_get_stub();
923         } else {
924                 wait->fence = fence;
925         }
926
927         wake_up_process(wait->task);
928         list_del_init(&wait->node);
929 }
930
931 static signed long drm_syncobj_array_wait_timeout(struct drm_syncobj **syncobjs,
932                                                   void __user *user_points,
933                                                   uint32_t count,
934                                                   uint32_t flags,
935                                                   signed long timeout,
936                                                   uint32_t *idx)
937 {
938         struct syncobj_wait_entry *entries;
939         struct dma_fence *fence;
940         uint64_t *points;
941         uint32_t signaled_count, i;
942
943         points = kmalloc_array(count, sizeof(*points), GFP_KERNEL);
944         if (points == NULL)
945                 return -ENOMEM;
946
947         if (!user_points) {
948                 memset(points, 0, count * sizeof(uint64_t));
949
950         } else if (copy_from_user(points, user_points,
951                                   sizeof(uint64_t) * count)) {
952                 timeout = -EFAULT;
953                 goto err_free_points;
954         }
955
956         entries = kcalloc(count, sizeof(*entries), GFP_KERNEL);
957         if (!entries) {
958                 timeout = -ENOMEM;
959                 goto err_free_points;
960         }
961         /* Walk the list of sync objects and initialize entries.  We do
962          * this up-front so that we can properly return -EINVAL if there is
963          * a syncobj with a missing fence and then never have the chance of
964          * returning -EINVAL again.
965          */
966         signaled_count = 0;
967         for (i = 0; i < count; ++i) {
968                 struct dma_fence *fence;
969
970                 entries[i].task = current;
971                 entries[i].point = points[i];
972                 fence = drm_syncobj_fence_get(syncobjs[i]);
973                 if (!fence || dma_fence_chain_find_seqno(&fence, points[i])) {
974                         dma_fence_put(fence);
975                         if (flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT) {
976                                 continue;
977                         } else {
978                                 timeout = -EINVAL;
979                                 goto cleanup_entries;
980                         }
981                 }
982
983                 if (fence)
984                         entries[i].fence = fence;
985                 else
986                         entries[i].fence = dma_fence_get_stub();
987
988                 if ((flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE) ||
989                     dma_fence_is_signaled(entries[i].fence)) {
990                         if (signaled_count == 0 && idx)
991                                 *idx = i;
992                         signaled_count++;
993                 }
994         }
995
996         if (signaled_count == count ||
997             (signaled_count > 0 &&
998              !(flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_ALL)))
999                 goto cleanup_entries;
1000
1001         /* There's a very annoying laxness in the dma_fence API here, in
1002          * that backends are not required to automatically report when a
1003          * fence is signaled prior to fence->ops->enable_signaling() being
1004          * called.  So here if we fail to match signaled_count, we need to
1005          * fallthough and try a 0 timeout wait!
1006          */
1007
1008         if (flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT) {
1009                 for (i = 0; i < count; ++i)
1010                         drm_syncobj_fence_add_wait(syncobjs[i], &entries[i]);
1011         }
1012
1013         do {
1014                 set_current_state(TASK_INTERRUPTIBLE);
1015
1016                 signaled_count = 0;
1017                 for (i = 0; i < count; ++i) {
1018                         fence = entries[i].fence;
1019                         if (!fence)
1020                                 continue;
1021
1022                         if ((flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE) ||
1023                             dma_fence_is_signaled(fence) ||
1024                             (!entries[i].fence_cb.func &&
1025                              dma_fence_add_callback(fence,
1026                                                     &entries[i].fence_cb,
1027                                                     syncobj_wait_fence_func))) {
1028                                 /* The fence has been signaled */
1029                                 if (flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_ALL) {
1030                                         signaled_count++;
1031                                 } else {
1032                                         if (idx)
1033                                                 *idx = i;
1034                                         goto done_waiting;
1035                                 }
1036                         }
1037                 }
1038
1039                 if (signaled_count == count)
1040                         goto done_waiting;
1041
1042                 if (timeout == 0) {
1043                         timeout = -ETIME;
1044                         goto done_waiting;
1045                 }
1046
1047                 if (signal_pending(current)) {
1048                         timeout = -ERESTARTSYS;
1049                         goto done_waiting;
1050                 }
1051
1052                 timeout = schedule_timeout(timeout);
1053         } while (1);
1054
1055 done_waiting:
1056         __set_current_state(TASK_RUNNING);
1057
1058 cleanup_entries:
1059         for (i = 0; i < count; ++i) {
1060                 drm_syncobj_remove_wait(syncobjs[i], &entries[i]);
1061                 if (entries[i].fence_cb.func)
1062                         dma_fence_remove_callback(entries[i].fence,
1063                                                   &entries[i].fence_cb);
1064                 dma_fence_put(entries[i].fence);
1065         }
1066         kfree(entries);
1067
1068 err_free_points:
1069         kfree(points);
1070
1071         return timeout;
1072 }
1073
1074 /**
1075  * drm_timeout_abs_to_jiffies - calculate jiffies timeout from absolute value
1076  *
1077  * @timeout_nsec: timeout nsec component in ns, 0 for poll
1078  *
1079  * Calculate the timeout in jiffies from an absolute time in sec/nsec.
1080  */
1081 signed long drm_timeout_abs_to_jiffies(int64_t timeout_nsec)
1082 {
1083         ktime_t abs_timeout, now;
1084         u64 timeout_ns, timeout_jiffies64;
1085
1086         /* make 0 timeout means poll - absolute 0 doesn't seem valid */
1087         if (timeout_nsec == 0)
1088                 return 0;
1089
1090         abs_timeout = ns_to_ktime(timeout_nsec);
1091         now = ktime_get();
1092
1093         if (!ktime_after(abs_timeout, now))
1094                 return 0;
1095
1096         timeout_ns = ktime_to_ns(ktime_sub(abs_timeout, now));
1097
1098         timeout_jiffies64 = nsecs_to_jiffies64(timeout_ns);
1099         /*  clamp timeout to avoid infinite timeout */
1100         if (timeout_jiffies64 >= MAX_SCHEDULE_TIMEOUT - 1)
1101                 return MAX_SCHEDULE_TIMEOUT - 1;
1102
1103         return timeout_jiffies64 + 1;
1104 }
1105 EXPORT_SYMBOL(drm_timeout_abs_to_jiffies);
1106
1107 static int drm_syncobj_array_wait(struct drm_device *dev,
1108                                   struct drm_file *file_private,
1109                                   struct drm_syncobj_wait *wait,
1110                                   struct drm_syncobj_timeline_wait *timeline_wait,
1111                                   struct drm_syncobj **syncobjs, bool timeline)
1112 {
1113         signed long timeout = 0;
1114         uint32_t first = ~0;
1115
1116         if (!timeline) {
1117                 timeout = drm_timeout_abs_to_jiffies(wait->timeout_nsec);
1118                 timeout = drm_syncobj_array_wait_timeout(syncobjs,
1119                                                          NULL,
1120                                                          wait->count_handles,
1121                                                          wait->flags,
1122                                                          timeout, &first);
1123                 if (timeout < 0)
1124                         return timeout;
1125                 wait->first_signaled = first;
1126         } else {
1127                 timeout = drm_timeout_abs_to_jiffies(timeline_wait->timeout_nsec);
1128                 timeout = drm_syncobj_array_wait_timeout(syncobjs,
1129                                                          u64_to_user_ptr(timeline_wait->points),
1130                                                          timeline_wait->count_handles,
1131                                                          timeline_wait->flags,
1132                                                          timeout, &first);
1133                 if (timeout < 0)
1134                         return timeout;
1135                 timeline_wait->first_signaled = first;
1136         }
1137         return 0;
1138 }
1139
1140 static int drm_syncobj_array_find(struct drm_file *file_private,
1141                                   void __user *user_handles,
1142                                   uint32_t count_handles,
1143                                   struct drm_syncobj ***syncobjs_out)
1144 {
1145         uint32_t i, *handles;
1146         struct drm_syncobj **syncobjs;
1147         int ret;
1148
1149         handles = kmalloc_array(count_handles, sizeof(*handles), GFP_KERNEL);
1150         if (handles == NULL)
1151                 return -ENOMEM;
1152
1153         if (copy_from_user(handles, user_handles,
1154                            sizeof(uint32_t) * count_handles)) {
1155                 ret = -EFAULT;
1156                 goto err_free_handles;
1157         }
1158
1159         syncobjs = kmalloc_array(count_handles, sizeof(*syncobjs), GFP_KERNEL);
1160         if (syncobjs == NULL) {
1161                 ret = -ENOMEM;
1162                 goto err_free_handles;
1163         }
1164
1165         for (i = 0; i < count_handles; i++) {
1166                 syncobjs[i] = drm_syncobj_find(file_private, handles[i]);
1167                 if (!syncobjs[i]) {
1168                         ret = -ENOENT;
1169                         goto err_put_syncobjs;
1170                 }
1171         }
1172
1173         kfree(handles);
1174         *syncobjs_out = syncobjs;
1175         return 0;
1176
1177 err_put_syncobjs:
1178         while (i-- > 0)
1179                 drm_syncobj_put(syncobjs[i]);
1180         kfree(syncobjs);
1181 err_free_handles:
1182         kfree(handles);
1183
1184         return ret;
1185 }
1186
1187 static void drm_syncobj_array_free(struct drm_syncobj **syncobjs,
1188                                    uint32_t count)
1189 {
1190         uint32_t i;
1191
1192         for (i = 0; i < count; i++)
1193                 drm_syncobj_put(syncobjs[i]);
1194         kfree(syncobjs);
1195 }
1196
1197 int
1198 drm_syncobj_wait_ioctl(struct drm_device *dev, void *data,
1199                        struct drm_file *file_private)
1200 {
1201         struct drm_syncobj_wait *args = data;
1202         struct drm_syncobj **syncobjs;
1203         int ret = 0;
1204
1205         if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ))
1206                 return -EOPNOTSUPP;
1207
1208         if (args->flags & ~(DRM_SYNCOBJ_WAIT_FLAGS_WAIT_ALL |
1209                             DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT))
1210                 return -EINVAL;
1211
1212         if (args->count_handles == 0)
1213                 return -EINVAL;
1214
1215         ret = drm_syncobj_array_find(file_private,
1216                                      u64_to_user_ptr(args->handles),
1217                                      args->count_handles,
1218                                      &syncobjs);
1219         if (ret < 0)
1220                 return ret;
1221
1222         ret = drm_syncobj_array_wait(dev, file_private,
1223                                      args, NULL, syncobjs, false);
1224
1225         drm_syncobj_array_free(syncobjs, args->count_handles);
1226
1227         return ret;
1228 }
1229
1230 int
1231 drm_syncobj_timeline_wait_ioctl(struct drm_device *dev, void *data,
1232                                 struct drm_file *file_private)
1233 {
1234         struct drm_syncobj_timeline_wait *args = data;
1235         struct drm_syncobj **syncobjs;
1236         int ret = 0;
1237
1238         if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ_TIMELINE))
1239                 return -EOPNOTSUPP;
1240
1241         if (args->flags & ~(DRM_SYNCOBJ_WAIT_FLAGS_WAIT_ALL |
1242                             DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT |
1243                             DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE))
1244                 return -EINVAL;
1245
1246         if (args->count_handles == 0)
1247                 return -EINVAL;
1248
1249         ret = drm_syncobj_array_find(file_private,
1250                                      u64_to_user_ptr(args->handles),
1251                                      args->count_handles,
1252                                      &syncobjs);
1253         if (ret < 0)
1254                 return ret;
1255
1256         ret = drm_syncobj_array_wait(dev, file_private,
1257                                      NULL, args, syncobjs, true);
1258
1259         drm_syncobj_array_free(syncobjs, args->count_handles);
1260
1261         return ret;
1262 }
1263
1264
1265 int
1266 drm_syncobj_reset_ioctl(struct drm_device *dev, void *data,
1267                         struct drm_file *file_private)
1268 {
1269         struct drm_syncobj_array *args = data;
1270         struct drm_syncobj **syncobjs;
1271         uint32_t i;
1272         int ret;
1273
1274         if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ))
1275                 return -EOPNOTSUPP;
1276
1277         if (args->pad != 0)
1278                 return -EINVAL;
1279
1280         if (args->count_handles == 0)
1281                 return -EINVAL;
1282
1283         ret = drm_syncobj_array_find(file_private,
1284                                      u64_to_user_ptr(args->handles),
1285                                      args->count_handles,
1286                                      &syncobjs);
1287         if (ret < 0)
1288                 return ret;
1289
1290         for (i = 0; i < args->count_handles; i++)
1291                 drm_syncobj_replace_fence(syncobjs[i], NULL);
1292
1293         drm_syncobj_array_free(syncobjs, args->count_handles);
1294
1295         return 0;
1296 }
1297
1298 int
1299 drm_syncobj_signal_ioctl(struct drm_device *dev, void *data,
1300                          struct drm_file *file_private)
1301 {
1302         struct drm_syncobj_array *args = data;
1303         struct drm_syncobj **syncobjs;
1304         uint32_t i;
1305         int ret;
1306
1307         if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ))
1308                 return -EOPNOTSUPP;
1309
1310         if (args->pad != 0)
1311                 return -EINVAL;
1312
1313         if (args->count_handles == 0)
1314                 return -EINVAL;
1315
1316         ret = drm_syncobj_array_find(file_private,
1317                                      u64_to_user_ptr(args->handles),
1318                                      args->count_handles,
1319                                      &syncobjs);
1320         if (ret < 0)
1321                 return ret;
1322
1323         for (i = 0; i < args->count_handles; i++)
1324                 drm_syncobj_assign_null_handle(syncobjs[i]);
1325
1326         drm_syncobj_array_free(syncobjs, args->count_handles);
1327
1328         return ret;
1329 }
1330
1331 int
1332 drm_syncobj_timeline_signal_ioctl(struct drm_device *dev, void *data,
1333                                   struct drm_file *file_private)
1334 {
1335         struct drm_syncobj_timeline_array *args = data;
1336         struct drm_syncobj **syncobjs;
1337         struct dma_fence_chain **chains;
1338         uint64_t *points;
1339         uint32_t i, j;
1340         int ret;
1341
1342         if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ_TIMELINE))
1343                 return -EOPNOTSUPP;
1344
1345         if (args->flags != 0)
1346                 return -EINVAL;
1347
1348         if (args->count_handles == 0)
1349                 return -EINVAL;
1350
1351         ret = drm_syncobj_array_find(file_private,
1352                                      u64_to_user_ptr(args->handles),
1353                                      args->count_handles,
1354                                      &syncobjs);
1355         if (ret < 0)
1356                 return ret;
1357
1358         points = kmalloc_array(args->count_handles, sizeof(*points),
1359                                GFP_KERNEL);
1360         if (!points) {
1361                 ret = -ENOMEM;
1362                 goto out;
1363         }
1364         if (!u64_to_user_ptr(args->points)) {
1365                 memset(points, 0, args->count_handles * sizeof(uint64_t));
1366         } else if (copy_from_user(points, u64_to_user_ptr(args->points),
1367                                   sizeof(uint64_t) * args->count_handles)) {
1368                 ret = -EFAULT;
1369                 goto err_points;
1370         }
1371
1372         chains = kmalloc_array(args->count_handles, sizeof(void *), GFP_KERNEL);
1373         if (!chains) {
1374                 ret = -ENOMEM;
1375                 goto err_points;
1376         }
1377         for (i = 0; i < args->count_handles; i++) {
1378                 chains[i] = kzalloc(sizeof(struct dma_fence_chain), GFP_KERNEL);
1379                 if (!chains[i]) {
1380                         for (j = 0; j < i; j++)
1381                                 kfree(chains[j]);
1382                         ret = -ENOMEM;
1383                         goto err_chains;
1384                 }
1385         }
1386
1387         for (i = 0; i < args->count_handles; i++) {
1388                 struct dma_fence *fence = dma_fence_get_stub();
1389
1390                 drm_syncobj_add_point(syncobjs[i], chains[i],
1391                                       fence, points[i]);
1392                 dma_fence_put(fence);
1393         }
1394 err_chains:
1395         kfree(chains);
1396 err_points:
1397         kfree(points);
1398 out:
1399         drm_syncobj_array_free(syncobjs, args->count_handles);
1400
1401         return ret;
1402 }
1403
1404 int drm_syncobj_query_ioctl(struct drm_device *dev, void *data,
1405                             struct drm_file *file_private)
1406 {
1407         struct drm_syncobj_timeline_array *args = data;
1408         struct drm_syncobj **syncobjs;
1409         uint64_t __user *points = u64_to_user_ptr(args->points);
1410         uint32_t i;
1411         int ret;
1412
1413         if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ_TIMELINE))
1414                 return -EOPNOTSUPP;
1415
1416         if (args->flags & ~DRM_SYNCOBJ_QUERY_FLAGS_LAST_SUBMITTED)
1417                 return -EINVAL;
1418
1419         if (args->count_handles == 0)
1420                 return -EINVAL;
1421
1422         ret = drm_syncobj_array_find(file_private,
1423                                      u64_to_user_ptr(args->handles),
1424                                      args->count_handles,
1425                                      &syncobjs);
1426         if (ret < 0)
1427                 return ret;
1428
1429         for (i = 0; i < args->count_handles; i++) {
1430                 struct dma_fence_chain *chain;
1431                 struct dma_fence *fence;
1432                 uint64_t point;
1433
1434                 fence = drm_syncobj_fence_get(syncobjs[i]);
1435                 chain = to_dma_fence_chain(fence);
1436                 if (chain) {
1437                         struct dma_fence *iter, *last_signaled =
1438                                 dma_fence_get(fence);
1439
1440                         if (args->flags &
1441                             DRM_SYNCOBJ_QUERY_FLAGS_LAST_SUBMITTED) {
1442                                 point = fence->seqno;
1443                         } else {
1444                                 dma_fence_chain_for_each(iter, fence) {
1445                                         if (iter->context != fence->context) {
1446                                                 dma_fence_put(iter);
1447                                                 /* It is most likely that timeline has
1448                                                 * unorder points. */
1449                                                 break;
1450                                         }
1451                                         dma_fence_put(last_signaled);
1452                                         last_signaled = dma_fence_get(iter);
1453                                 }
1454                                 point = dma_fence_is_signaled(last_signaled) ?
1455                                         last_signaled->seqno :
1456                                         to_dma_fence_chain(last_signaled)->prev_seqno;
1457                         }
1458                         dma_fence_put(last_signaled);
1459                 } else {
1460                         point = 0;
1461                 }
1462                 dma_fence_put(fence);
1463                 ret = copy_to_user(&points[i], &point, sizeof(uint64_t));
1464                 ret = ret ? -EFAULT : 0;
1465                 if (ret)
1466                         break;
1467         }
1468         drm_syncobj_array_free(syncobjs, args->count_handles);
1469
1470         return ret;
1471 }