drivers/video/fbdev/core/fbmem.c

   1 /*
   2  *  linux/drivers/video/fbmem.c
   3  *
   4  *  Copyright (C) 1994 Martin Schaller
   5  *
   6  *      2001 - Documented with DocBook
   7  *      - Brad Douglas <brad@neruo.com>
   8  *
   9  * This file is subject to the terms and conditions of the GNU General Public
  10  * License.  See the file COPYING in the main directory of this archive
  11  * for more details.
  12  */
  13
  14 #include <linux/module.h>
  15
  16 #include <linux/compat.h>
  17 #include <linux/types.h>
  18 #include <linux/errno.h>
  19 #include <linux/kernel.h>
  20 #include <linux/major.h>
  21 #include <linux/slab.h>
  22 #include <linux/mm.h>
  23 #include <linux/mman.h>
  24 #include <linux/vt.h>
  25 #include <linux/init.h>
  26 #include <linux/linux_logo.h>
  27 #include <linux/proc_fs.h>
  28 #include <linux/seq_file.h>
  29 #include <linux/console.h>
  30 #include <linux/kmod.h>
  31 #include <linux/err.h>
  32 #include <linux/device.h>
  33 #include <linux/efi.h>
  34 #include <linux/fb.h>
  35 #include <linux/fbcon.h>
  36 #include <linux/mem_encrypt.h>
  37 #include <linux/pci.h>
  38
  39 #include <asm/fb.h>
  40
  41
  42     /*
  43      *  Frame buffer device initialization and setup routines
  44      */
  45
  46 #define FBPIXMAPSIZE    (1024 * 8)
  47
  48 static DEFINE_MUTEX(registration_lock);
  49
  50 struct fb_info *registered_fb[FB_MAX] __read_mostly;
  51 EXPORT_SYMBOL(registered_fb);
  52
  53 int num_registered_fb __read_mostly;
  54 EXPORT_SYMBOL(num_registered_fb);
  55
  56 bool fb_center_logo __read_mostly;
  57
  58 int fb_logo_count __read_mostly = -1;
  59
  60 static struct fb_info *get_fb_info(unsigned int idx)
  61 {
  62         struct fb_info *fb_info;
  63
  64         if (idx >= FB_MAX)
  65                 return ERR_PTR(-ENODEV);
  66
  67         mutex_lock(&registration_lock);
  68         fb_info = registered_fb[idx];
  69         if (fb_info)
  70                 refcount_inc(&fb_info->count);
  71         mutex_unlock(&registration_lock);
  72
  73         return fb_info;
  74 }
  75
  76 static void put_fb_info(struct fb_info *fb_info)
  77 {
  78         if (!refcount_dec_and_test(&fb_info->count))
  79                 return;
  80         if (fb_info->fbops->fb_destroy)
  81                 fb_info->fbops->fb_destroy(fb_info);
  82 }
  83
  84 /*
  85  * Helpers
  86  */
  87
  88 int fb_get_color_depth(struct fb_var_screeninfo *var,
  89                        struct fb_fix_screeninfo *fix)
  90 {
  91         int depth = 0;
  92
  93         if (fix->visual == FB_VISUAL_MONO01 ||
  94             fix->visual == FB_VISUAL_MONO10)
  95                 depth = 1;
  96         else {
  97                 if (var->green.length == var->blue.length &&
  98                     var->green.length == var->red.length &&
  99                     var->green.offset == var->blue.offset &&
 100                     var->green.offset == var->red.offset)
 101                         depth = var->green.length;
 102                 else
 103                         depth = var->green.length + var->red.length +
 104                                 var->blue.length;
 105         }
 106
 107         return depth;
 108 }
 109 EXPORT_SYMBOL(fb_get_color_depth);
 110
 111 /*
 112  * Data padding functions.
 113  */
 114 void fb_pad_aligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 s_pitch, u32 height)
 115 {
 116         __fb_pad_aligned_buffer(dst, d_pitch, src, s_pitch, height);
 117 }
 118 EXPORT_SYMBOL(fb_pad_aligned_buffer);
 119
 120 void fb_pad_unaligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 idx, u32 height,
 121                                 u32 shift_high, u32 shift_low, u32 mod)
 122 {
 123         u8 mask = (u8) (0xfff << shift_high), tmp;
 124         int i, j;
 125
 126         for (i = height; i--; ) {
 127                 for (j = 0; j < idx; j++) {
 128                         tmp = dst[j];
 129                         tmp &= mask;
 130                         tmp |= *src >> shift_low;
 131                         dst[j] = tmp;
 132                         tmp = *src << shift_high;
 133                         dst[j+1] = tmp;
 134                         src++;
 135                 }
 136                 tmp = dst[idx];
 137                 tmp &= mask;
 138                 tmp |= *src >> shift_low;
 139                 dst[idx] = tmp;
 140                 if (shift_high < mod) {
 141                         tmp = *src << shift_high;
 142                         dst[idx+1] = tmp;
 143                 }
 144                 src++;
 145                 dst += d_pitch;
 146         }
 147 }
 148 EXPORT_SYMBOL(fb_pad_unaligned_buffer);
 149
 150 /*
 151  * we need to lock this section since fb_cursor
 152  * may use fb_imageblit()
 153  */
 154 char* fb_get_buffer_offset(struct fb_info *info, struct fb_pixmap *buf, u32 size)
 155 {
 156         u32 align = buf->buf_align - 1, offset;
 157         char *addr = buf->addr;
 158
 159         /* If IO mapped, we need to sync before access, no sharing of
 160          * the pixmap is done
 161          */
 162         if (buf->flags & FB_PIXMAP_IO) {
 163                 if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
 164                         info->fbops->fb_sync(info);
 165                 return addr;
 166         }
 167
 168         /* See if we fit in the remaining pixmap space */
 169         offset = buf->offset + align;
 170         offset &= ~align;
 171         if (offset + size > buf->size) {
 172                 /* We do not fit. In order to be able to re-use the buffer,
 173                  * we must ensure no asynchronous DMA'ing or whatever operation
 174                  * is in progress, we sync for that.
 175                  */
 176                 if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
 177                         info->fbops->fb_sync(info);
 178                 offset = 0;
 179         }
 180         buf->offset = offset + size;
 181         addr += offset;
 182
 183         return addr;
 184 }
 185 EXPORT_SYMBOL(fb_get_buffer_offset);
 186
 187 #ifdef CONFIG_LOGO
 188
 189 static inline unsigned safe_shift(unsigned d, int n)
 190 {
 191         return n < 0 ? d >> -n : d << n;
 192 }
 193
 194 static void fb_set_logocmap(struct fb_info *info,
 195                                    const struct linux_logo *logo)
 196 {
 197         struct fb_cmap palette_cmap;
 198         u16 palette_green[16];
 199         u16 palette_blue[16];
 200         u16 palette_red[16];
 201         int i, j, n;
 202         const unsigned char *clut = logo->clut;
 203
 204         palette_cmap.start = 0;
 205         palette_cmap.len = 16;
 206         palette_cmap.red = palette_red;
 207         palette_cmap.green = palette_green;
 208         palette_cmap.blue = palette_blue;
 209         palette_cmap.transp = NULL;
 210
 211         for (i = 0; i < logo->clutsize; i += n) {
 212                 n = logo->clutsize - i;
 213                 /* palette_cmap provides space for only 16 colors at once */
 214                 if (n > 16)
 215                         n = 16;
 216                 palette_cmap.start = 32 + i;
 217                 palette_cmap.len = n;
 218                 for (j = 0; j < n; ++j) {
 219                         palette_cmap.red[j] = clut[0] << 8 | clut[0];
 220                         palette_cmap.green[j] = clut[1] << 8 | clut[1];
 221                         palette_cmap.blue[j] = clut[2] << 8 | clut[2];
 222                         clut += 3;
 223                 }
 224                 fb_set_cmap(&palette_cmap, info);
 225         }
 226 }
 227
 228 static void  fb_set_logo_truepalette(struct fb_info *info,
 229                                             const struct linux_logo *logo,
 230                                             u32 *palette)
 231 {
 232         static const unsigned char mask[] = { 0,0x80,0xc0,0xe0,0xf0,0xf8,0xfc,0xfe,0xff };
 233         unsigned char redmask, greenmask, bluemask;
 234         int redshift, greenshift, blueshift;
 235         int i;
 236         const unsigned char *clut = logo->clut;
 237
 238         /*
 239          * We have to create a temporary palette since console palette is only
 240          * 16 colors long.
 241          */
 242         /* Bug: Doesn't obey msb_right ... (who needs that?) */
 243         redmask   = mask[info->var.red.length   < 8 ? info->var.red.length   : 8];
 244         greenmask = mask[info->var.green.length < 8 ? info->var.green.length : 8];
 245         bluemask  = mask[info->var.blue.length  < 8 ? info->var.blue.length  : 8];
 246         redshift   = info->var.red.offset   - (8 - info->var.red.length);
 247         greenshift = info->var.green.offset - (8 - info->var.green.length);
 248         blueshift  = info->var.blue.offset  - (8 - info->var.blue.length);
 249
 250         for ( i = 0; i < logo->clutsize; i++) {
 251                 palette[i+32] = (safe_shift((clut[0] & redmask), redshift) |
 252                                  safe_shift((clut[1] & greenmask), greenshift) |
 253                                  safe_shift((clut[2] & bluemask), blueshift));
 254                 clut += 3;
 255         }
 256 }
 257
 258 static void fb_set_logo_directpalette(struct fb_info *info,
 259                                              const struct linux_logo *logo,
 260                                              u32 *palette)
 261 {
 262         int redshift, greenshift, blueshift;
 263         int i;
 264
 265         redshift = info->var.red.offset;
 266         greenshift = info->var.green.offset;
 267         blueshift = info->var.blue.offset;
 268
 269         for (i = 32; i < 32 + logo->clutsize; i++)
 270                 palette[i] = i << redshift | i << greenshift | i << blueshift;
 271 }
 272
 273 static void fb_set_logo(struct fb_info *info,
 274                                const struct linux_logo *logo, u8 *dst,
 275                                int depth)
 276 {
 277         int i, j, k;
 278         const u8 *src = logo->data;
 279         u8 xor = (info->fix.visual == FB_VISUAL_MONO01) ? 0xff : 0;
 280         u8 fg = 1, d;
 281
 282         switch (fb_get_color_depth(&info->var, &info->fix)) {
 283         case 1:
 284                 fg = 1;
 285                 break;
 286         case 2:
 287                 fg = 3;
 288                 break;
 289         default:
 290                 fg = 7;
 291                 break;
 292         }
 293
 294         if (info->fix.visual == FB_VISUAL_MONO01 ||
 295             info->fix.visual == FB_VISUAL_MONO10)
 296                 fg = ~((u8) (0xfff << info->var.green.length));
 297
 298         switch (depth) {
 299         case 4:
 300                 for (i = 0; i < logo->height; i++)
 301                         for (j = 0; j < logo->width; src++) {
 302                                 *dst++ = *src >> 4;
 303                                 j++;
 304                                 if (j < logo->width) {
 305                                         *dst++ = *src & 0x0f;
 306                                         j++;
 307                                 }
 308                         }
 309                 break;
 310         case 1:
 311                 for (i = 0; i < logo->height; i++) {
 312                         for (j = 0; j < logo->width; src++) {
 313                                 d = *src ^ xor;
 314                                 for (k = 7; k >= 0 && j < logo->width; k--) {
 315                                         *dst++ = ((d >> k) & 1) ? fg : 0;
 316                                         j++;
 317                                 }
 318                         }
 319                 }
 320                 break;
 321         }
 322 }
 323
 324 /*
 325  * Three (3) kinds of logo maps exist.  linux_logo_clut224 (>16 colors),
 326  * linux_logo_vga16 (16 colors) and linux_logo_mono (2 colors).  Depending on
 327  * the visual format and color depth of the framebuffer, the DAC, the
 328  * pseudo_palette, and the logo data will be adjusted accordingly.
 329  *
 330  * Case 1 - linux_logo_clut224:
 331  * Color exceeds the number of console colors (16), thus we set the hardware DAC
 332  * using fb_set_cmap() appropriately.  The "needs_cmapreset"  flag will be set.
 333  *
 334  * For visuals that require color info from the pseudo_palette, we also construct
 335  * one for temporary use. The "needs_directpalette" or "needs_truepalette" flags
 336  * will be set.
 337  *
 338  * Case 2 - linux_logo_vga16:
 339  * The number of colors just matches the console colors, thus there is no need
 340  * to set the DAC or the pseudo_palette.  However, the bitmap is packed, ie,
 341  * each byte contains color information for two pixels (upper and lower nibble).
 342  * To be consistent with fb_imageblit() usage, we therefore separate the two
 343  * nibbles into separate bytes. The "depth" flag will be set to 4.
 344  *
 345  * Case 3 - linux_logo_mono:
 346  * This is similar with Case 2.  Each byte contains information for 8 pixels.
 347  * We isolate each bit and expand each into a byte. The "depth" flag will
 348  * be set to 1.
 349  */
 350 static struct logo_data {
 351         int depth;
 352         int needs_directpalette;
 353         int needs_truepalette;
 354         int needs_cmapreset;
 355         const struct linux_logo *logo;
 356 } fb_logo __read_mostly;
 357
 358 static void fb_rotate_logo_ud(const u8 *in, u8 *out, u32 width, u32 height)
 359 {
 360         u32 size = width * height, i;
 361
 362         out += size - 1;
 363
 364         for (i = size; i--; )
 365                 *out-- = *in++;
 366 }
 367
 368 static void fb_rotate_logo_cw(const u8 *in, u8 *out, u32 width, u32 height)
 369 {
 370         int i, j, h = height - 1;
 371
 372         for (i = 0; i < height; i++)
 373                 for (j = 0; j < width; j++)
 374                                 out[height * j + h - i] = *in++;
 375 }
 376
 377 static void fb_rotate_logo_ccw(const u8 *in, u8 *out, u32 width, u32 height)
 378 {
 379         int i, j, w = width - 1;
 380
 381         for (i = 0; i < height; i++)
 382                 for (j = 0; j < width; j++)
 383                         out[height * (w - j) + i] = *in++;
 384 }
 385
 386 static void fb_rotate_logo(struct fb_info *info, u8 *dst,
 387                            struct fb_image *image, int rotate)
 388 {
 389         u32 tmp;
 390
 391         if (rotate == FB_ROTATE_UD) {
 392                 fb_rotate_logo_ud(image->data, dst, image->width,
 393                                   image->height);
 394                 image->dx = info->var.xres - image->width - image->dx;
 395                 image->dy = info->var.yres - image->height - image->dy;
 396         } else if (rotate == FB_ROTATE_CW) {
 397                 fb_rotate_logo_cw(image->data, dst, image->width,
 398                                   image->height);
 399                 tmp = image->width;
 400                 image->width = image->height;
 401                 image->height = tmp;
 402                 tmp = image->dy;
 403                 image->dy = image->dx;
 404                 image->dx = info->var.xres - image->width - tmp;
 405         } else if (rotate == FB_ROTATE_CCW) {
 406                 fb_rotate_logo_ccw(image->data, dst, image->width,
 407                                    image->height);
 408                 tmp = image->width;
 409                 image->width = image->height;
 410                 image->height = tmp;
 411                 tmp = image->dx;
 412                 image->dx = image->dy;
 413                 image->dy = info->var.yres - image->height - tmp;
 414         }
 415
 416         image->data = dst;
 417 }
 418
 419 static void fb_do_show_logo(struct fb_info *info, struct fb_image *image,
 420                             int rotate, unsigned int num)
 421 {
 422         unsigned int x;
 423
 424         if (image->width > info->var.xres || image->height > info->var.yres)
 425                 return;
 426
 427         if (rotate == FB_ROTATE_UR) {
 428                 for (x = 0;
 429                      x < num && image->dx + image->width <= info->var.xres;
 430                      x++) {
 431                         info->fbops->fb_imageblit(info, image);
 432                         image->dx += image->width + 8;
 433                 }
 434         } else if (rotate == FB_ROTATE_UD) {
 435                 u32 dx = image->dx;
 436
 437                 for (x = 0; x < num && image->dx <= dx; x++) {
 438                         info->fbops->fb_imageblit(info, image);
 439                         image->dx -= image->width + 8;
 440                 }
 441         } else if (rotate == FB_ROTATE_CW) {
 442                 for (x = 0;
 443                      x < num && image->dy + image->height <= info->var.yres;
 444                      x++) {
 445                         info->fbops->fb_imageblit(info, image);
 446                         image->dy += image->height + 8;
 447                 }
 448         } else if (rotate == FB_ROTATE_CCW) {
 449                 u32 dy = image->dy;
 450
 451                 for (x = 0; x < num && image->dy <= dy; x++) {
 452                         info->fbops->fb_imageblit(info, image);
 453                         image->dy -= image->height + 8;
 454                 }
 455         }
 456 }
 457
 458 static int fb_show_logo_line(struct fb_info *info, int rotate,
 459                              const struct linux_logo *logo, int y,
 460                              unsigned int n)
 461 {
 462         u32 *palette = NULL, *saved_pseudo_palette = NULL;
 463         unsigned char *logo_new = NULL, *logo_rotate = NULL;
 464         struct fb_image image;
 465
 466         /* Return if the frame buffer is not mapped or suspended */
 467         if (logo == NULL || info->state != FBINFO_STATE_RUNNING ||
 468             info->fbops->owner)
 469                 return 0;
 470
 471         image.depth = 8;
 472         image.data = logo->data;
 473
 474         if (fb_logo.needs_cmapreset)
 475                 fb_set_logocmap(info, logo);
 476
 477         if (fb_logo.needs_truepalette ||
 478             fb_logo.needs_directpalette) {
 479                 palette = kmalloc(256 * 4, GFP_KERNEL);
 480                 if (palette == NULL)
 481                         return 0;
 482
 483                 if (fb_logo.needs_truepalette)
 484                         fb_set_logo_truepalette(info, logo, palette);
 485                 else
 486                         fb_set_logo_directpalette(info, logo, palette);
 487
 488                 saved_pseudo_palette = info->pseudo_palette;
 489                 info->pseudo_palette = palette;
 490         }
 491
 492         if (fb_logo.depth <= 4) {
 493                 logo_new = kmalloc_array(logo->width, logo->height,
 494                                          GFP_KERNEL);
 495                 if (logo_new == NULL) {
 496                         kfree(palette);
 497                         if (saved_pseudo_palette)
 498                                 info->pseudo_palette = saved_pseudo_palette;
 499                         return 0;
 500                 }
 501                 image.data = logo_new;
 502                 fb_set_logo(info, logo, logo_new, fb_logo.depth);
 503         }
 504
 505         if (fb_center_logo) {
 506                 int xres = info->var.xres;
 507                 int yres = info->var.yres;
 508
 509                 if (rotate == FB_ROTATE_CW || rotate == FB_ROTATE_CCW) {
 510                         xres = info->var.yres;
 511                         yres = info->var.xres;
 512                 }
 513
 514                 while (n && (n * (logo->width + 8) - 8 > xres))
 515                         --n;
 516                 image.dx = (xres - n * (logo->width + 8) - 8) / 2;
 517                 image.dy = y ?: (yres - logo->height) / 2;
 518         } else {
 519                 image.dx = 0;
 520                 image.dy = y;
 521         }
 522
 523         image.width = logo->width;
 524         image.height = logo->height;
 525
 526         if (rotate) {
 527                 logo_rotate = kmalloc_array(logo->width, logo->height,
 528                                             GFP_KERNEL);
 529                 if (logo_rotate)
 530                         fb_rotate_logo(info, logo_rotate, &image, rotate);
 531         }
 532
 533         fb_do_show_logo(info, &image, rotate, n);
 534
 535         kfree(palette);
 536         if (saved_pseudo_palette != NULL)
 537                 info->pseudo_palette = saved_pseudo_palette;
 538         kfree(logo_new);
 539         kfree(logo_rotate);
 540         return image.dy + logo->height;
 541 }
 542
 543
 544 #ifdef CONFIG_FB_LOGO_EXTRA
 545
 546 #define FB_LOGO_EX_NUM_MAX 10
 547 static struct logo_data_extra {
 548         const struct linux_logo *logo;
 549         unsigned int n;
 550 } fb_logo_ex[FB_LOGO_EX_NUM_MAX];
 551 static unsigned int fb_logo_ex_num;
 552
 553 void fb_append_extra_logo(const struct linux_logo *logo, unsigned int n)
 554 {
 555         if (!n || fb_logo_ex_num == FB_LOGO_EX_NUM_MAX)
 556                 return;
 557
 558         fb_logo_ex[fb_logo_ex_num].logo = logo;
 559         fb_logo_ex[fb_logo_ex_num].n = n;
 560         fb_logo_ex_num++;
 561 }
 562
 563 static int fb_prepare_extra_logos(struct fb_info *info, unsigned int height,
 564                                   unsigned int yres)
 565 {
 566         unsigned int i;
 567
 568         /* FIXME: logo_ex supports only truecolor fb. */
 569         if (info->fix.visual != FB_VISUAL_TRUECOLOR)
 570                 fb_logo_ex_num = 0;
 571
 572         for (i = 0; i < fb_logo_ex_num; i++) {
 573                 if (fb_logo_ex[i].logo->type != fb_logo.logo->type) {
 574                         fb_logo_ex[i].logo = NULL;
 575                         continue;
 576                 }
 577                 height += fb_logo_ex[i].logo->height;
 578                 if (height > yres) {
 579                         height -= fb_logo_ex[i].logo->height;
 580                         fb_logo_ex_num = i;
 581                         break;
 582                 }
 583         }
 584         return height;
 585 }
 586
 587 static int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
 588 {
 589         unsigned int i;
 590
 591         for (i = 0; i < fb_logo_ex_num; i++)
 592                 y = fb_show_logo_line(info, rotate,
 593                                       fb_logo_ex[i].logo, y, fb_logo_ex[i].n);
 594
 595         return y;
 596 }
 597
 598 #else /* !CONFIG_FB_LOGO_EXTRA */
 599
 600 static inline int fb_prepare_extra_logos(struct fb_info *info,
 601                                          unsigned int height,
 602                                          unsigned int yres)
 603 {
 604         return height;
 605 }
 606
 607 static inline int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
 608 {
 609         return y;
 610 }
 611
 612 #endif /* CONFIG_FB_LOGO_EXTRA */
 613
 614
 615 int fb_prepare_logo(struct fb_info *info, int rotate)
 616 {
 617         int depth = fb_get_color_depth(&info->var, &info->fix);
 618         unsigned int yres;
 619         int height;
 620
 621         memset(&fb_logo, 0, sizeof(struct logo_data));
 622
 623         if (info->flags & FBINFO_MISC_TILEBLITTING ||
 624             info->fbops->owner || !fb_logo_count)
 625                 return 0;
 626
 627         if (info->fix.visual == FB_VISUAL_DIRECTCOLOR) {
 628                 depth = info->var.blue.length;
 629                 if (info->var.red.length < depth)
 630                         depth = info->var.red.length;
 631                 if (info->var.green.length < depth)
 632                         depth = info->var.green.length;
 633         }
 634
 635         if (info->fix.visual == FB_VISUAL_STATIC_PSEUDOCOLOR && depth > 4) {
 636                 /* assume console colormap */
 637                 depth = 4;
 638         }
 639
 640         /* Return if no suitable logo was found */
 641         fb_logo.logo = fb_find_logo(depth);
 642
 643         if (!fb_logo.logo) {
 644                 return 0;
 645         }
 646
 647         if (rotate == FB_ROTATE_UR || rotate == FB_ROTATE_UD)
 648                 yres = info->var.yres;
 649         else
 650                 yres = info->var.xres;
 651
 652         if (fb_logo.logo->height > yres) {
 653                 fb_logo.logo = NULL;
 654                 return 0;
 655         }
 656
 657         /* What depth we asked for might be different from what we get */
 658         if (fb_logo.logo->type == LINUX_LOGO_CLUT224)
 659                 fb_logo.depth = 8;
 660         else if (fb_logo.logo->type == LINUX_LOGO_VGA16)
 661                 fb_logo.depth = 4;
 662         else
 663                 fb_logo.depth = 1;
 664
 665
 666         if (fb_logo.depth > 4 && depth > 4) {
 667                 switch (info->fix.visual) {
 668                 case FB_VISUAL_TRUECOLOR:
 669                         fb_logo.needs_truepalette = 1;
 670                         break;
 671                 case FB_VISUAL_DIRECTCOLOR:
 672                         fb_logo.needs_directpalette = 1;
 673                         fb_logo.needs_cmapreset = 1;
 674                         break;
 675                 case FB_VISUAL_PSEUDOCOLOR:
 676                         fb_logo.needs_cmapreset = 1;
 677                         break;
 678                 }
 679         }
 680
 681         height = fb_logo.logo->height;
 682         if (fb_center_logo)
 683                 height += (yres - fb_logo.logo->height) / 2;
 684
 685         return fb_prepare_extra_logos(info, height, yres);
 686 }
 687
 688 int fb_show_logo(struct fb_info *info, int rotate)
 689 {
 690         unsigned int count;
 691         int y;
 692
 693         if (!fb_logo_count)
 694                 return 0;
 695
 696         count = fb_logo_count < 0 ? num_online_cpus() : fb_logo_count;
 697         y = fb_show_logo_line(info, rotate, fb_logo.logo, 0, count);
 698         y = fb_show_extra_logos(info, y, rotate);
 699
 700         return y;
 701 }
 702 #else
 703 int fb_prepare_logo(struct fb_info *info, int rotate) { return 0; }
 704 int fb_show_logo(struct fb_info *info, int rotate) { return 0; }
 705 #endif /* CONFIG_LOGO */
 706 EXPORT_SYMBOL(fb_prepare_logo);
 707 EXPORT_SYMBOL(fb_show_logo);
 708
 709 static void *fb_seq_start(struct seq_file *m, loff_t *pos)
 710 {
 711         mutex_lock(&registration_lock);
 712         return (*pos < FB_MAX) ? pos : NULL;
 713 }
 714
 715 static void *fb_seq_next(struct seq_file *m, void *v, loff_t *pos)
 716 {
 717         (*pos)++;
 718         return (*pos < FB_MAX) ? pos : NULL;
 719 }
 720
 721 static void fb_seq_stop(struct seq_file *m, void *v)
 722 {
 723         mutex_unlock(&registration_lock);
 724 }
 725
 726 static int fb_seq_show(struct seq_file *m, void *v)
 727 {
 728         int i = *(loff_t *)v;
 729         struct fb_info *fi = registered_fb[i];
 730
 731         if (fi)
 732                 seq_printf(m, "%d %s\n", fi->node, fi->fix.id);
 733         return 0;
 734 }
 735
 736 static const struct seq_operations __maybe_unused proc_fb_seq_ops = {
 737         .start  = fb_seq_start,
 738         .next   = fb_seq_next,
 739         .stop   = fb_seq_stop,
 740         .show   = fb_seq_show,
 741 };
 742
 743 /*
 744  * We hold a reference to the fb_info in file->private_data,
 745  * but if the current registered fb has changed, we don't
 746  * actually want to use it.
 747  *
 748  * So look up the fb_info using the inode minor number,
 749  * and just verify it against the reference we have.
 750  */
 751 static struct fb_info *file_fb_info(struct file *file)
 752 {
 753         struct inode *inode = file_inode(file);
 754         int fbidx = iminor(inode);
 755         struct fb_info *info = registered_fb[fbidx];
 756
 757         if (info != file->private_data)
 758                 info = NULL;
 759         return info;
 760 }
 761
 762 static ssize_t
 763 fb_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)
 764 {
 765         unsigned long p = *ppos;
 766         struct fb_info *info = file_fb_info(file);
 767         u8 *buffer, *dst;
 768         u8 __iomem *src;
 769         int c, cnt = 0, err = 0;
 770         unsigned long total_size;
 771
 772         if (!info || ! info->screen_base)
 773                 return -ENODEV;
 774
 775         if (info->state != FBINFO_STATE_RUNNING)
 776                 return -EPERM;
 777
 778         if (info->fbops->fb_read)
 779                 return info->fbops->fb_read(info, buf, count, ppos);
 780
 781         total_size = info->screen_size;
 782
 783         if (total_size == 0)
 784                 total_size = info->fix.smem_len;
 785
 786         if (p >= total_size)
 787                 return 0;
 788
 789         if (count >= total_size)
 790                 count = total_size;
 791
 792         if (count + p > total_size)
 793                 count = total_size - p;
 794
 795         buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
 796                          GFP_KERNEL);
 797         if (!buffer)
 798                 return -ENOMEM;
 799
 800         src = (u8 __iomem *) (info->screen_base + p);
 801
 802         if (info->fbops->fb_sync)
 803                 info->fbops->fb_sync(info);
 804
 805         while (count) {
 806                 c  = (count > PAGE_SIZE) ? PAGE_SIZE : count;
 807                 dst = buffer;
 808                 fb_memcpy_fromfb(dst, src, c);
 809                 dst += c;
 810                 src += c;
 811
 812                 if (copy_to_user(buf, buffer, c)) {
 813                         err = -EFAULT;
 814                         break;
 815                 }
 816                 *ppos += c;
 817                 buf += c;
 818                 cnt += c;
 819                 count -= c;
 820         }
 821
 822         kfree(buffer);
 823
 824         return (err) ? err : cnt;
 825 }
 826
 827 static ssize_t
 828 fb_write(struct file *file, const char __user *buf, size_t count, loff_t *ppos)
 829 {
 830         unsigned long p = *ppos;
 831         struct fb_info *info = file_fb_info(file);
 832         u8 *buffer, *src;
 833         u8 __iomem *dst;
 834         int c, cnt = 0, err = 0;
 835         unsigned long total_size;
 836
 837         if (!info || !info->screen_base)
 838                 return -ENODEV;
 839
 840         if (info->state != FBINFO_STATE_RUNNING)
 841                 return -EPERM;
 842
 843         if (info->fbops->fb_write)
 844                 return info->fbops->fb_write(info, buf, count, ppos);
 845
 846         total_size = info->screen_size;
 847
 848         if (total_size == 0)
 849                 total_size = info->fix.smem_len;
 850
 851         if (p > total_size)
 852                 return -EFBIG;
 853
 854         if (count > total_size) {
 855                 err = -EFBIG;
 856                 count = total_size;
 857         }
 858
 859         if (count + p > total_size) {
 860                 if (!err)
 861                         err = -ENOSPC;
 862
 863                 count = total_size - p;
 864         }
 865
 866         buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
 867                          GFP_KERNEL);
 868         if (!buffer)
 869                 return -ENOMEM;
 870
 871         dst = (u8 __iomem *) (info->screen_base + p);
 872
 873         if (info->fbops->fb_sync)
 874                 info->fbops->fb_sync(info);
 875
 876         while (count) {
 877                 c = (count > PAGE_SIZE) ? PAGE_SIZE : count;
 878                 src = buffer;
 879
 880                 if (copy_from_user(src, buf, c)) {
 881                         err = -EFAULT;
 882                         break;
 883                 }
 884
 885                 fb_memcpy_tofb(dst, src, c);
 886                 dst += c;
 887                 src += c;
 888                 *ppos += c;
 889                 buf += c;
 890                 cnt += c;
 891                 count -= c;
 892         }
 893
 894         kfree(buffer);
 895
 896         return (cnt) ? cnt : err;
 897 }
 898
 899 int
 900 fb_pan_display(struct fb_info *info, struct fb_var_screeninfo *var)
 901 {
 902         struct fb_fix_screeninfo *fix = &info->fix;
 903         unsigned int yres = info->var.yres;
 904         int err = 0;
 905
 906         if (var->yoffset > 0) {
 907                 if (var->vmode & FB_VMODE_YWRAP) {
 908                         if (!fix->ywrapstep || (var->yoffset % fix->ywrapstep))
 909                                 err = -EINVAL;
 910                         else
 911                                 yres = 0;
 912                 } else if (!fix->ypanstep || (var->yoffset % fix->ypanstep))
 913                         err = -EINVAL;
 914         }
 915
 916         if (var->xoffset > 0 && (!fix->xpanstep ||
 917                                  (var->xoffset % fix->xpanstep)))
 918                 err = -EINVAL;
 919
 920         if (err || !info->fbops->fb_pan_display ||
 921             var->yoffset > info->var.yres_virtual - yres ||
 922             var->xoffset > info->var.xres_virtual - info->var.xres)
 923                 return -EINVAL;
 924
 925         if ((err = info->fbops->fb_pan_display(var, info)))
 926                 return err;
 927         info->var.xoffset = var->xoffset;
 928         info->var.yoffset = var->yoffset;
 929         if (var->vmode & FB_VMODE_YWRAP)
 930                 info->var.vmode |= FB_VMODE_YWRAP;
 931         else
 932                 info->var.vmode &= ~FB_VMODE_YWRAP;
 933         return 0;
 934 }
 935 EXPORT_SYMBOL(fb_pan_display);
 936
 937 static int fb_check_caps(struct fb_info *info, struct fb_var_screeninfo *var,
 938                          u32 activate)
 939 {
 940         struct fb_blit_caps caps, fbcaps;
 941         int err = 0;
 942
 943         memset(&caps, 0, sizeof(caps));
 944         memset(&fbcaps, 0, sizeof(fbcaps));
 945         caps.flags = (activate & FB_ACTIVATE_ALL) ? 1 : 0;
 946         fbcon_get_requirement(info, &caps);
 947         info->fbops->fb_get_caps(info, &fbcaps, var);
 948
 949         if (((fbcaps.x ^ caps.x) & caps.x) ||
 950             ((fbcaps.y ^ caps.y) & caps.y) ||
 951             (fbcaps.len < caps.len))
 952                 err = -EINVAL;
 953
 954         return err;
 955 }
 956
 957 int
 958 fb_set_var(struct fb_info *info, struct fb_var_screeninfo *var)
 959 {
 960         int ret = 0;
 961         u32 activate;
 962         struct fb_var_screeninfo old_var;
 963         struct fb_videomode mode;
 964         struct fb_event event;
 965         u32 unused;
 966
 967         if (var->activate & FB_ACTIVATE_INV_MODE) {
 968                 struct fb_videomode mode1, mode2;
 969
 970                 fb_var_to_videomode(&mode1, var);
 971                 fb_var_to_videomode(&mode2, &info->var);
 972                 /* make sure we don't delete the videomode of current var */
 973                 ret = fb_mode_is_equal(&mode1, &mode2);
 974                 if (!ret) {
 975                         ret = fbcon_mode_deleted(info, &mode1);
 976                         if (!ret)
 977                                 fb_delete_videomode(&mode1, &info->modelist);
 978                 }
 979
 980                 return ret ? -EINVAL : 0;
 981         }
 982
 983         if (!(var->activate & FB_ACTIVATE_FORCE) &&
 984             !memcmp(&info->var, var, sizeof(struct fb_var_screeninfo)))
 985                 return 0;
 986
 987         activate = var->activate;
 988
 989         /* When using FOURCC mode, make sure the red, green, blue and
 990          * transp fields are set to 0.
 991          */
 992         if ((info->fix.capabilities & FB_CAP_FOURCC) &&
 993             var->grayscale > 1) {
 994                 if (var->red.offset     || var->green.offset    ||
 995                     var->blue.offset    || var->transp.offset   ||
 996                     var->red.length     || var->green.length    ||
 997                     var->blue.length    || var->transp.length   ||
 998                     var->red.msb_right  || var->green.msb_right ||
 999                     var->blue.msb_right || var->transp.msb_right)
1000                         return -EINVAL;
1001         }
1002
1003         if (!info->fbops->fb_check_var) {
1004                 *var = info->var;
1005                 return 0;
1006         }
1007
1008         /* bitfill_aligned() assumes that it's at least 8x8 */
1009         if (var->xres < 8 || var->yres < 8)
1010                 return -EINVAL;
1011
1012         /* Too huge resolution causes multiplication overflow. */
1013         if (check_mul_overflow(var->xres, var->yres, &unused) ||
1014             check_mul_overflow(var->xres_virtual, var->yres_virtual, &unused))
1015                 return -EINVAL;
1016
1017         ret = info->fbops->fb_check_var(var, info);
1018
1019         if (ret)
1020                 return ret;
1021
1022         if ((var->activate & FB_ACTIVATE_MASK) != FB_ACTIVATE_NOW)
1023                 return 0;
1024
1025         if (info->fbops->fb_get_caps) {
1026                 ret = fb_check_caps(info, var, activate);
1027
1028                 if (ret)
1029                         return ret;
1030         }
1031
1032         old_var = info->var;
1033         info->var = *var;
1034
1035         if (info->fbops->fb_set_par) {
1036                 ret = info->fbops->fb_set_par(info);
1037
1038                 if (ret) {
1039                         info->var = old_var;
1040                         printk(KERN_WARNING "detected "
1041                                 "fb_set_par error, "
1042                                 "error code: %d\n", ret);
1043                         return ret;
1044                 }
1045         }
1046
1047         fb_pan_display(info, &info->var);
1048         fb_set_cmap(&info->cmap, info);
1049         fb_var_to_videomode(&mode, &info->var);
1050
1051         if (info->modelist.prev && info->modelist.next &&
1052             !list_empty(&info->modelist))
1053                 ret = fb_add_videomode(&mode, &info->modelist);
1054
1055         if (ret)
1056                 return ret;
1057
1058         event.info = info;
1059         event.data = &mode;
1060         fb_notifier_call_chain(FB_EVENT_MODE_CHANGE, &event);
1061
1062         return 0;
1063 }
1064 EXPORT_SYMBOL(fb_set_var);
1065
1066 int
1067 fb_blank(struct fb_info *info, int blank)
1068 {
1069         struct fb_event event;
1070         int ret = -EINVAL;
1071
1072         if (blank > FB_BLANK_POWERDOWN)
1073                 blank = FB_BLANK_POWERDOWN;
1074
1075         event.info = info;
1076         event.data = &blank;
1077
1078         if (info->fbops->fb_blank)
1079                 ret = info->fbops->fb_blank(blank, info);
1080
1081         if (!ret)
1082                 fb_notifier_call_chain(FB_EVENT_BLANK, &event);
1083
1084         return ret;
1085 }
1086 EXPORT_SYMBOL(fb_blank);
1087
1088 static long do_fb_ioctl(struct fb_info *info, unsigned int cmd,
1089                         unsigned long arg)
1090 {
1091         const struct fb_ops *fb;
1092         struct fb_var_screeninfo var;
1093         struct fb_fix_screeninfo fix;
1094         struct fb_cmap cmap_from;
1095         struct fb_cmap_user cmap;
1096         void __user *argp = (void __user *)arg;
1097         long ret = 0;
1098
1099         switch (cmd) {
1100         case FBIOGET_VSCREENINFO:
1101                 lock_fb_info(info);
1102                 var = info->var;
1103                 unlock_fb_info(info);
1104
1105                 ret = copy_to_user(argp, &var, sizeof(var)) ? -EFAULT : 0;
1106                 break;
1107         case FBIOPUT_VSCREENINFO:
1108                 if (copy_from_user(&var, argp, sizeof(var)))
1109                         return -EFAULT;
1110                 console_lock();
1111                 lock_fb_info(info);
1112                 ret = fb_set_var(info, &var);
1113                 if (!ret)
1114                         fbcon_update_vcs(info, var.activate & FB_ACTIVATE_ALL);
1115                 unlock_fb_info(info);
1116                 console_unlock();
1117                 if (!ret && copy_to_user(argp, &var, sizeof(var)))
1118                         ret = -EFAULT;
1119                 break;
1120         case FBIOGET_FSCREENINFO:
1121                 lock_fb_info(info);
1122                 memcpy(&fix, &info->fix, sizeof(fix));
1123                 if (info->flags & FBINFO_HIDE_SMEM_START)
1124                         fix.smem_start = 0;
1125                 unlock_fb_info(info);
1126
1127                 ret = copy_to_user(argp, &fix, sizeof(fix)) ? -EFAULT : 0;
1128                 break;
1129         case FBIOPUTCMAP:
1130                 if (copy_from_user(&cmap, argp, sizeof(cmap)))
1131                         return -EFAULT;
1132                 ret = fb_set_user_cmap(&cmap, info);
1133                 break;
1134         case FBIOGETCMAP:
1135                 if (copy_from_user(&cmap, argp, sizeof(cmap)))
1136                         return -EFAULT;
1137                 lock_fb_info(info);
1138                 cmap_from = info->cmap;
1139                 unlock_fb_info(info);
1140                 ret = fb_cmap_to_user(&cmap_from, &cmap);
1141                 break;
1142         case FBIOPAN_DISPLAY:
1143                 if (copy_from_user(&var, argp, sizeof(var)))
1144                         return -EFAULT;
1145                 console_lock();
1146                 lock_fb_info(info);
1147                 ret = fb_pan_display(info, &var);
1148                 unlock_fb_info(info);
1149                 console_unlock();
1150                 if (ret == 0 && copy_to_user(argp, &var, sizeof(var)))
1151                         return -EFAULT;
1152                 break;
1153         case FBIO_CURSOR:
1154                 ret = -EINVAL;
1155                 break;
1156         case FBIOGET_CON2FBMAP:
1157                 ret = fbcon_get_con2fb_map_ioctl(argp);
1158                 break;
1159         case FBIOPUT_CON2FBMAP:
1160                 ret = fbcon_set_con2fb_map_ioctl(argp);
1161                 break;
1162         case FBIOBLANK:
1163                 console_lock();
1164                 lock_fb_info(info);
1165                 ret = fb_blank(info, arg);
1166                 /* might again call into fb_blank */
1167                 fbcon_fb_blanked(info, arg);
1168                 unlock_fb_info(info);
1169                 console_unlock();
1170                 break;
1171         default:
1172                 lock_fb_info(info);
1173                 fb = info->fbops;
1174                 if (fb->fb_ioctl)
1175                         ret = fb->fb_ioctl(info, cmd, arg);
1176                 else
1177                         ret = -ENOTTY;
1178                 unlock_fb_info(info);
1179         }
1180         return ret;
1181 }
1182
1183 static long fb_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
1184 {
1185         struct fb_info *info = file_fb_info(file);
1186
1187         if (!info)
1188                 return -ENODEV;
1189         return do_fb_ioctl(info, cmd, arg);
1190 }
1191
1192 #ifdef CONFIG_COMPAT
1193 struct fb_fix_screeninfo32 {
1194         char                    id[16];
1195         compat_caddr_t          smem_start;
1196         u32                     smem_len;
1197         u32                     type;
1198         u32                     type_aux;
1199         u32                     visual;
1200         u16                     xpanstep;
1201         u16                     ypanstep;
1202         u16                     ywrapstep;
1203         u32                     line_length;
1204         compat_caddr_t          mmio_start;
1205         u32                     mmio_len;
1206         u32                     accel;
1207         u16                     reserved[3];
1208 };
1209
1210 struct fb_cmap32 {
1211         u32                     start;
1212         u32                     len;
1213         compat_caddr_t  red;
1214         compat_caddr_t  green;
1215         compat_caddr_t  blue;
1216         compat_caddr_t  transp;
1217 };
1218
1219 static int fb_getput_cmap(struct fb_info *info, unsigned int cmd,
1220                           unsigned long arg)
1221 {
1222         struct fb_cmap32 cmap32;
1223         struct fb_cmap cmap_from;
1224         struct fb_cmap_user cmap;
1225
1226         if (copy_from_user(&cmap32, compat_ptr(arg), sizeof(cmap32)))
1227                 return -EFAULT;
1228
1229         cmap = (struct fb_cmap_user) {
1230                 .start  = cmap32.start,
1231                 .len    = cmap32.len,
1232                 .red    = compat_ptr(cmap32.red),
1233                 .green  = compat_ptr(cmap32.green),
1234                 .blue   = compat_ptr(cmap32.blue),
1235                 .transp = compat_ptr(cmap32.transp),
1236         };
1237
1238         if (cmd == FBIOPUTCMAP)
1239                 return fb_set_user_cmap(&cmap, info);
1240
1241         lock_fb_info(info);
1242         cmap_from = info->cmap;
1243         unlock_fb_info(info);
1244
1245         return fb_cmap_to_user(&cmap_from, &cmap);
1246 }
1247
1248 static int do_fscreeninfo_to_user(struct fb_fix_screeninfo *fix,
1249                                   struct fb_fix_screeninfo32 __user *fix32)
1250 {
1251         __u32 data;
1252         int err;
1253
1254         err = copy_to_user(&fix32->id, &fix->id, sizeof(fix32->id));
1255
1256         data = (__u32) (unsigned long) fix->smem_start;
1257         err |= put_user(data, &fix32->smem_start);
1258
1259         err |= put_user(fix->smem_len, &fix32->smem_len);
1260         err |= put_user(fix->type, &fix32->type);
1261         err |= put_user(fix->type_aux, &fix32->type_aux);
1262         err |= put_user(fix->visual, &fix32->visual);
1263         err |= put_user(fix->xpanstep, &fix32->xpanstep);
1264         err |= put_user(fix->ypanstep, &fix32->ypanstep);
1265         err |= put_user(fix->ywrapstep, &fix32->ywrapstep);
1266         err |= put_user(fix->line_length, &fix32->line_length);
1267
1268         data = (__u32) (unsigned long) fix->mmio_start;
1269         err |= put_user(data, &fix32->mmio_start);
1270
1271         err |= put_user(fix->mmio_len, &fix32->mmio_len);
1272         err |= put_user(fix->accel, &fix32->accel);
1273         err |= copy_to_user(fix32->reserved, fix->reserved,
1274                             sizeof(fix->reserved));
1275
1276         if (err)
1277                 return -EFAULT;
1278         return 0;
1279 }
1280
1281 static int fb_get_fscreeninfo(struct fb_info *info, unsigned int cmd,
1282                               unsigned long arg)
1283 {
1284         struct fb_fix_screeninfo fix;
1285
1286         lock_fb_info(info);
1287         fix = info->fix;
1288         if (info->flags & FBINFO_HIDE_SMEM_START)
1289                 fix.smem_start = 0;
1290         unlock_fb_info(info);
1291         return do_fscreeninfo_to_user(&fix, compat_ptr(arg));
1292 }
1293
1294 static long fb_compat_ioctl(struct file *file, unsigned int cmd,
1295                             unsigned long arg)
1296 {
1297         struct fb_info *info = file_fb_info(file);
1298         const struct fb_ops *fb;
1299         long ret = -ENOIOCTLCMD;
1300
1301         if (!info)
1302                 return -ENODEV;
1303         fb = info->fbops;
1304         switch(cmd) {
1305         case FBIOGET_VSCREENINFO:
1306         case FBIOPUT_VSCREENINFO:
1307         case FBIOPAN_DISPLAY:
1308         case FBIOGET_CON2FBMAP:
1309         case FBIOPUT_CON2FBMAP:
1310                 arg = (unsigned long) compat_ptr(arg);
1311                 fallthrough;
1312         case FBIOBLANK:
1313                 ret = do_fb_ioctl(info, cmd, arg);
1314                 break;
1315
1316         case FBIOGET_FSCREENINFO:
1317                 ret = fb_get_fscreeninfo(info, cmd, arg);
1318                 break;
1319
1320         case FBIOGETCMAP:
1321         case FBIOPUTCMAP:
1322                 ret = fb_getput_cmap(info, cmd, arg);
1323                 break;
1324
1325         default:
1326                 if (fb->fb_compat_ioctl)
1327                         ret = fb->fb_compat_ioctl(info, cmd, arg);
1328                 break;
1329         }
1330         return ret;
1331 }
1332 #endif
1333
1334 static int
1335 fb_mmap(struct file *file, struct vm_area_struct * vma)
1336 {
1337         struct fb_info *info = file_fb_info(file);
1338         int (*fb_mmap_fn)(struct fb_info *info, struct vm_area_struct *vma);
1339         unsigned long mmio_pgoff;
1340         unsigned long start;
1341         u32 len;
1342
1343         if (!info)
1344                 return -ENODEV;
1345         mutex_lock(&info->mm_lock);
1346
1347         fb_mmap_fn = info->fbops->fb_mmap;
1348
1349 #if IS_ENABLED(CONFIG_FB_DEFERRED_IO)
1350         if (info->fbdefio)
1351                 fb_mmap_fn = fb_deferred_io_mmap;
1352 #endif
1353
1354         if (fb_mmap_fn) {
1355                 int res;
1356
1357                 /*
1358                  * The framebuffer needs to be accessed decrypted, be sure
1359                  * SME protection is removed ahead of the call
1360                  */
1361                 vma->vm_page_prot = pgprot_decrypted(vma->vm_page_prot);
1362                 res = fb_mmap_fn(info, vma);
1363                 mutex_unlock(&info->mm_lock);
1364                 return res;
1365         }
1366
1367         /*
1368          * Ugh. This can be either the frame buffer mapping, or
1369          * if pgoff points past it, the mmio mapping.
1370          */
1371         start = info->fix.smem_start;
1372         len = info->fix.smem_len;
1373         mmio_pgoff = PAGE_ALIGN((start & ~PAGE_MASK) + len) >> PAGE_SHIFT;
1374         if (vma->vm_pgoff >= mmio_pgoff) {
1375                 if (info->var.accel_flags) {
1376                         mutex_unlock(&info->mm_lock);
1377                         return -EINVAL;
1378                 }
1379
1380                 vma->vm_pgoff -= mmio_pgoff;
1381                 start = info->fix.mmio_start;
1382                 len = info->fix.mmio_len;
1383         }
1384         mutex_unlock(&info->mm_lock);
1385
1386         vma->vm_page_prot = vm_get_page_prot(vma->vm_flags);
1387         fb_pgprotect(file, vma, start);
1388
1389         return vm_iomap_memory(vma, start, len);
1390 }
1391
1392 static int
1393 fb_open(struct inode *inode, struct file *file)
1394 __acquires(&info->lock)
1395 __releases(&info->lock)
1396 {
1397         int fbidx = iminor(inode);
1398         struct fb_info *info;
1399         int res = 0;
1400
1401         info = get_fb_info(fbidx);
1402         if (!info) {
1403                 request_module("fb%d", fbidx);
1404                 info = get_fb_info(fbidx);
1405                 if (!info)
1406                         return -ENODEV;
1407         }
1408         if (IS_ERR(info))
1409                 return PTR_ERR(info);
1410
1411         lock_fb_info(info);
1412         if (!try_module_get(info->fbops->owner)) {
1413                 res = -ENODEV;
1414                 goto out;
1415         }
1416         file->private_data = info;
1417         if (info->fbops->fb_open) {
1418                 res = info->fbops->fb_open(info,1);
1419                 if (res)
1420                         module_put(info->fbops->owner);
1421         }
1422 #ifdef CONFIG_FB_DEFERRED_IO
1423         if (info->fbdefio)
1424                 fb_deferred_io_open(info, inode, file);
1425 #endif
1426 out:
1427         unlock_fb_info(info);
1428         if (res)
1429                 put_fb_info(info);
1430         return res;
1431 }
1432
1433 static int
1434 fb_release(struct inode *inode, struct file *file)
1435 __acquires(&info->lock)
1436 __releases(&info->lock)
1437 {
1438         struct fb_info * const info = file->private_data;
1439
1440         lock_fb_info(info);
1441         if (info->fbops->fb_release)
1442                 info->fbops->fb_release(info,1);
1443         module_put(info->fbops->owner);
1444         unlock_fb_info(info);
1445         put_fb_info(info);
1446         return 0;
1447 }
1448
1449 #if defined(CONFIG_FB_PROVIDE_GET_FB_UNMAPPED_AREA) && !defined(CONFIG_MMU)
1450 unsigned long get_fb_unmapped_area(struct file *filp,
1451                                    unsigned long addr, unsigned long len,
1452                                    unsigned long pgoff, unsigned long flags)
1453 {
1454         struct fb_info * const info = filp->private_data;
1455         unsigned long fb_size = PAGE_ALIGN(info->fix.smem_len);
1456
1457         if (pgoff > fb_size || len > fb_size - pgoff)
1458                 return -EINVAL;
1459
1460         return (unsigned long)info->screen_base + pgoff;
1461 }
1462 #endif
1463
1464 static const struct file_operations fb_fops = {
1465         .owner =        THIS_MODULE,
1466         .read =         fb_read,
1467         .write =        fb_write,
1468         .unlocked_ioctl = fb_ioctl,
1469 #ifdef CONFIG_COMPAT
1470         .compat_ioctl = fb_compat_ioctl,
1471 #endif
1472         .mmap =         fb_mmap,
1473         .open =         fb_open,
1474         .release =      fb_release,
1475 #if defined(HAVE_ARCH_FB_UNMAPPED_AREA) || \
1476         (defined(CONFIG_FB_PROVIDE_GET_FB_UNMAPPED_AREA) && \
1477          !defined(CONFIG_MMU))
1478         .get_unmapped_area = get_fb_unmapped_area,
1479 #endif
1480 #ifdef CONFIG_FB_DEFERRED_IO
1481         .fsync =        fb_deferred_io_fsync,
1482 #endif
1483         .llseek =       default_llseek,
1484 };
1485
1486 struct class *fb_class;
1487 EXPORT_SYMBOL(fb_class);
1488
1489 static int fb_check_foreignness(struct fb_info *fi)
1490 {
1491         const bool foreign_endian = fi->flags & FBINFO_FOREIGN_ENDIAN;
1492
1493         fi->flags &= ~FBINFO_FOREIGN_ENDIAN;
1494
1495 #ifdef __BIG_ENDIAN
1496         fi->flags |= foreign_endian ? 0 : FBINFO_BE_MATH;
1497 #else
1498         fi->flags |= foreign_endian ? FBINFO_BE_MATH : 0;
1499 #endif /* __BIG_ENDIAN */
1500
1501         if (fi->flags & FBINFO_BE_MATH && !fb_be_math(fi)) {
1502                 pr_err("%s: enable CONFIG_FB_BIG_ENDIAN to "
1503                        "support this framebuffer\n", fi->fix.id);
1504                 return -ENOSYS;
1505         } else if (!(fi->flags & FBINFO_BE_MATH) && fb_be_math(fi)) {
1506                 pr_err("%s: enable CONFIG_FB_LITTLE_ENDIAN to "
1507                        "support this framebuffer\n", fi->fix.id);
1508                 return -ENOSYS;
1509         }
1510
1511         return 0;
1512 }
1513
1514 static bool apertures_overlap(struct aperture *gen, struct aperture *hw)
1515 {
1516         /* is the generic aperture base the same as the HW one */
1517         if (gen->base == hw->base)
1518                 return true;
1519         /* is the generic aperture base inside the hw base->hw base+size */
1520         if (gen->base > hw->base && gen->base < hw->base + hw->size)
1521                 return true;
1522         return false;
1523 }
1524
1525 static bool fb_do_apertures_overlap(struct apertures_struct *gena,
1526                                     struct apertures_struct *hwa)
1527 {
1528         int i, j;
1529         if (!hwa || !gena)
1530                 return false;
1531
1532         for (i = 0; i < hwa->count; ++i) {
1533                 struct aperture *h = &hwa->ranges[i];
1534                 for (j = 0; j < gena->count; ++j) {
1535                         struct aperture *g = &gena->ranges[j];
1536                         printk(KERN_DEBUG "checking generic (%llx %llx) vs hw (%llx %llx)\n",
1537                                 (unsigned long long)g->base,
1538                                 (unsigned long long)g->size,
1539                                 (unsigned long long)h->base,
1540                                 (unsigned long long)h->size);
1541                         if (apertures_overlap(g, h))
1542                                 return true;
1543                 }
1544         }
1545
1546         return false;
1547 }
1548
1549 static void do_unregister_framebuffer(struct fb_info *fb_info);
1550
1551 #define VGA_FB_PHYS 0xA0000
1552 static void do_remove_conflicting_framebuffers(struct apertures_struct *a,
1553                                                const char *name, bool primary)
1554 {
1555         int i;
1556
1557         /* check all firmware fbs and kick off if the base addr overlaps */
1558         for_each_registered_fb(i) {
1559                 struct apertures_struct *gen_aper;
1560
1561                 if (!(registered_fb[i]->flags & FBINFO_MISC_FIRMWARE))
1562                         continue;
1563
1564                 gen_aper = registered_fb[i]->apertures;
1565                 if (fb_do_apertures_overlap(gen_aper, a) ||
1566                         (primary && gen_aper && gen_aper->count &&
1567                          gen_aper->ranges[0].base == VGA_FB_PHYS)) {
1568
1569                         printk(KERN_INFO "fb%d: switching to %s from %s\n",
1570                                i, name, registered_fb[i]->fix.id);
1571                         do_unregister_framebuffer(registered_fb[i]);
1572                 }
1573         }
1574 }
1575
1576 static bool lockless_register_fb;
1577 module_param_named_unsafe(lockless_register_fb, lockless_register_fb, bool, 0400);
1578 MODULE_PARM_DESC(lockless_register_fb,
1579         "Lockless framebuffer registration for debugging [default=off]");
1580
1581 static int do_register_framebuffer(struct fb_info *fb_info)
1582 {
1583         int i, ret;
1584         struct fb_videomode mode;
1585
1586         if (fb_check_foreignness(fb_info))
1587                 return -ENOSYS;
1588
1589         do_remove_conflicting_framebuffers(fb_info->apertures,
1590                                            fb_info->fix.id,
1591                                            fb_is_primary_device(fb_info));
1592
1593         if (num_registered_fb == FB_MAX)
1594                 return -ENXIO;
1595
1596         num_registered_fb++;
1597         for (i = 0 ; i < FB_MAX; i++)
1598                 if (!registered_fb[i])
1599                         break;
1600         fb_info->node = i;
1601         refcount_set(&fb_info->count, 1);
1602         mutex_init(&fb_info->lock);
1603         mutex_init(&fb_info->mm_lock);
1604
1605         fb_info->dev = device_create(fb_class, fb_info->device,
1606                                      MKDEV(FB_MAJOR, i), NULL, "fb%d", i);
1607         if (IS_ERR(fb_info->dev)) {
1608                 /* Not fatal */
1609                 printk(KERN_WARNING "Unable to create device for framebuffer %d; errno = %ld\n", i, PTR_ERR(fb_info->dev));
1610                 fb_info->dev = NULL;
1611         } else
1612                 fb_init_device(fb_info);
1613
1614         if (fb_info->pixmap.addr == NULL) {
1615                 fb_info->pixmap.addr = kmalloc(FBPIXMAPSIZE, GFP_KERNEL);
1616                 if (fb_info->pixmap.addr) {
1617                         fb_info->pixmap.size = FBPIXMAPSIZE;
1618                         fb_info->pixmap.buf_align = 1;
1619                         fb_info->pixmap.scan_align = 1;
1620                         fb_info->pixmap.access_align = 32;
1621                         fb_info->pixmap.flags = FB_PIXMAP_DEFAULT;
1622                 }
1623         }
1624         fb_info->pixmap.offset = 0;
1625
1626         if (!fb_info->pixmap.blit_x)
1627                 fb_info->pixmap.blit_x = ~(u32)0;
1628
1629         if (!fb_info->pixmap.blit_y)
1630                 fb_info->pixmap.blit_y = ~(u32)0;
1631
1632         if (!fb_info->modelist.prev || !fb_info->modelist.next)
1633                 INIT_LIST_HEAD(&fb_info->modelist);
1634
1635         if (fb_info->skip_vt_switch)
1636                 pm_vt_switch_required(fb_info->dev, false);
1637         else
1638                 pm_vt_switch_required(fb_info->dev, true);
1639
1640         fb_var_to_videomode(&mode, &fb_info->var);
1641         fb_add_videomode(&mode, &fb_info->modelist);
1642         registered_fb[i] = fb_info;
1643
1644 #ifdef CONFIG_GUMSTIX_AM200EPD
1645         {
1646                 struct fb_event event;
1647                 event.info = fb_info;
1648                 fb_notifier_call_chain(FB_EVENT_FB_REGISTERED, &event);
1649         }
1650 #endif
1651
1652         if (!lockless_register_fb)
1653                 console_lock();
1654         else
1655                 atomic_inc(&ignore_console_lock_warning);
1656         lock_fb_info(fb_info);
1657         ret = fbcon_fb_registered(fb_info);
1658         unlock_fb_info(fb_info);
1659
1660         if (!lockless_register_fb)
1661                 console_unlock();
1662         else
1663                 atomic_dec(&ignore_console_lock_warning);
1664         return ret;
1665 }
1666
1667 static void unbind_console(struct fb_info *fb_info)
1668 {
1669         int i = fb_info->node;
1670
1671         if (WARN_ON(i < 0 || i >= FB_MAX || registered_fb[i] != fb_info))
1672                 return;
1673
1674         console_lock();
1675         lock_fb_info(fb_info);
1676         fbcon_fb_unbind(fb_info);
1677         unlock_fb_info(fb_info);
1678         console_unlock();
1679 }
1680
1681 static void unlink_framebuffer(struct fb_info *fb_info)
1682 {
1683         int i;
1684
1685         i = fb_info->node;
1686         if (WARN_ON(i < 0 || i >= FB_MAX || registered_fb[i] != fb_info))
1687                 return;
1688
1689         if (!fb_info->dev)
1690                 return;
1691
1692         device_destroy(fb_class, MKDEV(FB_MAJOR, i));
1693
1694         pm_vt_switch_unregister(fb_info->dev);
1695
1696         unbind_console(fb_info);
1697
1698         fb_info->dev = NULL;
1699 }
1700
1701 static void do_unregister_framebuffer(struct fb_info *fb_info)
1702 {
1703         unlink_framebuffer(fb_info);
1704         if (fb_info->pixmap.addr &&
1705             (fb_info->pixmap.flags & FB_PIXMAP_DEFAULT))
1706                 kfree(fb_info->pixmap.addr);
1707         fb_destroy_modelist(&fb_info->modelist);
1708         registered_fb[fb_info->node] = NULL;
1709         num_registered_fb--;
1710         fb_cleanup_device(fb_info);
1711 #ifdef CONFIG_GUMSTIX_AM200EPD
1712         {
1713                 struct fb_event event;
1714                 event.info = fb_info;
1715                 fb_notifier_call_chain(FB_EVENT_FB_UNREGISTERED, &event);
1716         }
1717 #endif
1718         console_lock();
1719         fbcon_fb_unregistered(fb_info);
1720         console_unlock();
1721
1722         /* this may free fb info */
1723         put_fb_info(fb_info);
1724 }
1725
1726 /**
1727  * remove_conflicting_framebuffers - remove firmware-configured framebuffers
1728  * @a: memory range, users of which are to be removed
1729  * @name: requesting driver name
1730  * @primary: also kick vga16fb if present
1731  *
1732  * This function removes framebuffer devices (initialized by firmware/bootloader)
1733  * which use memory range described by @a. If @a is NULL all such devices are
1734  * removed.
1735  */
1736 int remove_conflicting_framebuffers(struct apertures_struct *a,
1737                                     const char *name, bool primary)
1738 {
1739         bool do_free = false;
1740
1741         if (!a) {
1742                 a = alloc_apertures(1);
1743                 if (!a)
1744                         return -ENOMEM;
1745
1746                 a->ranges[0].base = 0;
1747                 a->ranges[0].size = ~0;
1748                 do_free = true;
1749         }
1750
1751         mutex_lock(&registration_lock);
1752         do_remove_conflicting_framebuffers(a, name, primary);
1753         mutex_unlock(&registration_lock);
1754
1755         if (do_free)
1756                 kfree(a);
1757
1758         return 0;
1759 }
1760 EXPORT_SYMBOL(remove_conflicting_framebuffers);
1761
1762 /**
1763  * remove_conflicting_pci_framebuffers - remove firmware-configured framebuffers for PCI devices
1764  * @pdev: PCI device
1765  * @name: requesting driver name
1766  *
1767  * This function removes framebuffer devices (eg. initialized by firmware)
1768  * using memory range configured for any of @pdev's memory bars.
1769  *
1770  * The function assumes that PCI device with shadowed ROM drives a primary
1771  * display and so kicks out vga16fb.
1772  */
1773 int remove_conflicting_pci_framebuffers(struct pci_dev *pdev, const char *name)
1774 {
1775         struct apertures_struct *ap;
1776         bool primary = false;
1777         int err, idx, bar;
1778
1779         for (idx = 0, bar = 0; bar < PCI_STD_NUM_BARS; bar++) {
1780                 if (!(pci_resource_flags(pdev, bar) & IORESOURCE_MEM))
1781                         continue;
1782                 idx++;
1783         }
1784
1785         ap = alloc_apertures(idx);
1786         if (!ap)
1787                 return -ENOMEM;
1788
1789         for (idx = 0, bar = 0; bar < PCI_STD_NUM_BARS; bar++) {
1790                 if (!(pci_resource_flags(pdev, bar) & IORESOURCE_MEM))
1791                         continue;
1792                 ap->ranges[idx].base = pci_resource_start(pdev, bar);
1793                 ap->ranges[idx].size = pci_resource_len(pdev, bar);
1794                 pci_dbg(pdev, "%s: bar %d: 0x%lx -> 0x%lx\n", __func__, bar,
1795                         (unsigned long)pci_resource_start(pdev, bar),
1796                         (unsigned long)pci_resource_end(pdev, bar));
1797                 idx++;
1798         }
1799
1800 #ifdef CONFIG_X86
1801         primary = pdev->resource[PCI_ROM_RESOURCE].flags &
1802                                         IORESOURCE_ROM_SHADOW;
1803 #endif
1804         err = remove_conflicting_framebuffers(ap, name, primary);
1805         kfree(ap);
1806         return err;
1807 }
1808 EXPORT_SYMBOL(remove_conflicting_pci_framebuffers);
1809
1810 /**
1811  *      register_framebuffer - registers a frame buffer device
1812  *      @fb_info: frame buffer info structure
1813  *
1814  *      Registers a frame buffer device @fb_info.
1815  *
1816  *      Returns negative errno on error, or zero for success.
1817  *
1818  */
1819 int
1820 register_framebuffer(struct fb_info *fb_info)
1821 {
1822         int ret;
1823
1824         mutex_lock(&registration_lock);
1825         ret = do_register_framebuffer(fb_info);
1826         mutex_unlock(&registration_lock);
1827
1828         return ret;
1829 }
1830 EXPORT_SYMBOL(register_framebuffer);
1831
1832 /**
1833  *      unregister_framebuffer - releases a frame buffer device
1834  *      @fb_info: frame buffer info structure
1835  *
1836  *      Unregisters a frame buffer device @fb_info.
1837  *
1838  *      Returns negative errno on error, or zero for success.
1839  *
1840  *      This function will also notify the framebuffer console
1841  *      to release the driver.
1842  *
1843  *      This is meant to be called within a driver's module_exit()
1844  *      function. If this is called outside module_exit(), ensure
1845  *      that the driver implements fb_open() and fb_release() to
1846  *      check that no processes are using the device.
1847  */
1848 void
1849 unregister_framebuffer(struct fb_info *fb_info)
1850 {
1851         mutex_lock(&registration_lock);
1852         do_unregister_framebuffer(fb_info);
1853         mutex_unlock(&registration_lock);
1854 }
1855 EXPORT_SYMBOL(unregister_framebuffer);
1856
1857 /**
1858  *      fb_set_suspend - low level driver signals suspend
1859  *      @info: framebuffer affected
1860  *      @state: 0 = resuming, !=0 = suspending
1861  *
1862  *      This is meant to be used by low level drivers to
1863  *      signal suspend/resume to the core & clients.
1864  *      It must be called with the console semaphore held
1865  */
1866 void fb_set_suspend(struct fb_info *info, int state)
1867 {
1868         WARN_CONSOLE_UNLOCKED();
1869
1870         if (state) {
1871                 fbcon_suspended(info);
1872                 info->state = FBINFO_STATE_SUSPENDED;
1873         } else {
1874                 info->state = FBINFO_STATE_RUNNING;
1875                 fbcon_resumed(info);
1876         }
1877 }
1878 EXPORT_SYMBOL(fb_set_suspend);
1879
1880 /**
1881  *      fbmem_init - init frame buffer subsystem
1882  *
1883  *      Initialize the frame buffer subsystem.
1884  *
1885  *      NOTE: This function is _only_ to be called by drivers/char/mem.c.
1886  *
1887  */
1888
1889 static int __init
1890 fbmem_init(void)
1891 {
1892         int ret;
1893
1894         if (!proc_create_seq("fb", 0, NULL, &proc_fb_seq_ops))
1895                 return -ENOMEM;
1896
1897         ret = register_chrdev(FB_MAJOR, "fb", &fb_fops);
1898         if (ret) {
1899                 printk("unable to get major %d for fb devs\n", FB_MAJOR);
1900                 goto err_chrdev;
1901         }
1902
1903         fb_class = class_create(THIS_MODULE, "graphics");
1904         if (IS_ERR(fb_class)) {
1905                 ret = PTR_ERR(fb_class);
1906                 pr_warn("Unable to create fb class; errno = %d\n", ret);
1907                 fb_class = NULL;
1908                 goto err_class;
1909         }
1910
1911         fb_console_init();
1912
1913         return 0;
1914
1915 err_class:
1916         unregister_chrdev(FB_MAJOR, "fb");
1917 err_chrdev:
1918         remove_proc_entry("fb", NULL);
1919         return ret;
1920 }
1921
1922 #ifdef MODULE
1923 module_init(fbmem_init);
1924 static void __exit
1925 fbmem_exit(void)
1926 {
1927         fb_console_exit();
1928
1929         remove_proc_entry("fb", NULL);
1930         class_destroy(fb_class);
1931         unregister_chrdev(FB_MAJOR, "fb");
1932 }
1933
1934 module_exit(fbmem_exit);
1935 MODULE_LICENSE("GPL");
1936 MODULE_DESCRIPTION("Framebuffer base");
1937 #else
1938 subsys_initcall(fbmem_init);
1939 #endif
1940
1941 int fb_new_modelist(struct fb_info *info)
1942 {
1943         struct fb_var_screeninfo var = info->var;
1944         struct list_head *pos, *n;
1945         struct fb_modelist *modelist;
1946         struct fb_videomode *m, mode;
1947         int err;
1948
1949         list_for_each_safe(pos, n, &info->modelist) {
1950                 modelist = list_entry(pos, struct fb_modelist, list);
1951                 m = &modelist->mode;
1952                 fb_videomode_to_var(&var, m);
1953                 var.activate = FB_ACTIVATE_TEST;
1954                 err = fb_set_var(info, &var);
1955                 fb_var_to_videomode(&mode, &var);
1956                 if (err || !fb_mode_is_equal(m, &mode)) {
1957                         list_del(pos);
1958                         kfree(pos);
1959                 }
1960         }
1961
1962         if (list_empty(&info->modelist))
1963                 return 1;
1964
1965         fbcon_new_modelist(info);
1966
1967         return 0;
1968 }
1969
1970 MODULE_LICENSE("GPL");