1/*
2 * Copyright (c) 2006-2008 Intel Corporation
3 * Copyright (c) 2007 Dave Airlie <airlied@linux.ie>
4 * Copyright (c) 2008 Red Hat Inc.
5 *
6 * DRM core CRTC related functions
7 *
8 * Permission to use, copy, modify, distribute, and sell this software and its
9 * documentation for any purpose is hereby granted without fee, provided that
10 * the above copyright notice appear in all copies and that both that copyright
11 * notice and this permission notice appear in supporting documentation, and
12 * that the name of the copyright holders not be used in advertising or
13 * publicity pertaining to distribution of the software without specific,
14 * written prior permission.  The copyright holders make no representations
15 * about the suitability of this software for any purpose.  It is provided "as
16 * is" without express or implied warranty.
17 *
18 * THE COPYRIGHT HOLDERS DISCLAIM ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
19 * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
20 * EVENT SHALL THE COPYRIGHT HOLDERS BE LIABLE FOR ANY SPECIAL, INDIRECT OR
21 * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
22 * DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
23 * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
24 * OF THIS SOFTWARE.
25 *
26 * Authors:
27 *      Keith Packard
28 *	Eric Anholt <eric@anholt.net>
29 *      Dave Airlie <airlied@linux.ie>
30 *      Jesse Barnes <jesse.barnes@intel.com>
31 */
32#include <sys/cdefs.h>
33__FBSDID("$FreeBSD$");
34
35#include <dev/drm2/drmP.h>
36#include <dev/drm2/drm_crtc.h>
37#include <dev/drm2/drm_edid.h>
38#include <dev/drm2/drm_fourcc.h>
39
40static void drm_property_destroy_blob(struct drm_device *dev,
41    struct drm_property_blob *blob);
42
43/* Avoid boilerplate.  I'm tired of typing. */
44#define DRM_ENUM_NAME_FN(fnname, list)				\
45	char *fnname(int val)					\
46	{							\
47		int i;						\
48		for (i = 0; i < ARRAY_SIZE(list); i++) {	\
49			if (list[i].type == val)		\
50				return list[i].name;		\
51		}						\
52		return "(unknown)";				\
53	}
54
55/*
56 * Global properties
57 */
58static struct drm_prop_enum_list drm_dpms_enum_list[] =
59{	{ DRM_MODE_DPMS_ON, "On" },
60	{ DRM_MODE_DPMS_STANDBY, "Standby" },
61	{ DRM_MODE_DPMS_SUSPEND, "Suspend" },
62	{ DRM_MODE_DPMS_OFF, "Off" }
63};
64
65DRM_ENUM_NAME_FN(drm_get_dpms_name, drm_dpms_enum_list)
66
67/*
68 * Optional properties
69 */
70static struct drm_prop_enum_list drm_scaling_mode_enum_list[] =
71{
72	{ DRM_MODE_SCALE_NONE, "None" },
73	{ DRM_MODE_SCALE_FULLSCREEN, "Full" },
74	{ DRM_MODE_SCALE_CENTER, "Center" },
75	{ DRM_MODE_SCALE_ASPECT, "Full aspect" },
76};
77
78static struct drm_prop_enum_list drm_dithering_mode_enum_list[] =
79{
80	{ DRM_MODE_DITHERING_OFF, "Off" },
81	{ DRM_MODE_DITHERING_ON, "On" },
82	{ DRM_MODE_DITHERING_AUTO, "Automatic" },
83};
84
85/*
86 * Non-global properties, but "required" for certain connectors.
87 */
88static struct drm_prop_enum_list drm_dvi_i_select_enum_list[] =
89{
90	{ DRM_MODE_SUBCONNECTOR_Automatic, "Automatic" }, /* DVI-I and TV-out */
91	{ DRM_MODE_SUBCONNECTOR_DVID,      "DVI-D"     }, /* DVI-I  */
92	{ DRM_MODE_SUBCONNECTOR_DVIA,      "DVI-A"     }, /* DVI-I  */
93};
94
95DRM_ENUM_NAME_FN(drm_get_dvi_i_select_name, drm_dvi_i_select_enum_list)
96
97static struct drm_prop_enum_list drm_dvi_i_subconnector_enum_list[] =
98{
99	{ DRM_MODE_SUBCONNECTOR_Unknown,   "Unknown"   }, /* DVI-I and TV-out */
100	{ DRM_MODE_SUBCONNECTOR_DVID,      "DVI-D"     }, /* DVI-I  */
101	{ DRM_MODE_SUBCONNECTOR_DVIA,      "DVI-A"     }, /* DVI-I  */
102};
103
104DRM_ENUM_NAME_FN(drm_get_dvi_i_subconnector_name,
105		 drm_dvi_i_subconnector_enum_list)
106
107static struct drm_prop_enum_list drm_tv_select_enum_list[] =
108{
109	{ DRM_MODE_SUBCONNECTOR_Automatic, "Automatic" }, /* DVI-I and TV-out */
110	{ DRM_MODE_SUBCONNECTOR_Composite, "Composite" }, /* TV-out */
111	{ DRM_MODE_SUBCONNECTOR_SVIDEO,    "SVIDEO"    }, /* TV-out */
112	{ DRM_MODE_SUBCONNECTOR_Component, "Component" }, /* TV-out */
113	{ DRM_MODE_SUBCONNECTOR_SCART,     "SCART"     }, /* TV-out */
114};
115
116DRM_ENUM_NAME_FN(drm_get_tv_select_name, drm_tv_select_enum_list)
117
118static struct drm_prop_enum_list drm_tv_subconnector_enum_list[] =
119{
120	{ DRM_MODE_SUBCONNECTOR_Unknown,   "Unknown"   }, /* DVI-I and TV-out */
121	{ DRM_MODE_SUBCONNECTOR_Composite, "Composite" }, /* TV-out */
122	{ DRM_MODE_SUBCONNECTOR_SVIDEO,    "SVIDEO"    }, /* TV-out */
123	{ DRM_MODE_SUBCONNECTOR_Component, "Component" }, /* TV-out */
124	{ DRM_MODE_SUBCONNECTOR_SCART,     "SCART"     }, /* TV-out */
125};
126
127DRM_ENUM_NAME_FN(drm_get_tv_subconnector_name,
128		 drm_tv_subconnector_enum_list)
129
130static struct drm_prop_enum_list drm_dirty_info_enum_list[] = {
131	{ DRM_MODE_DIRTY_OFF,      "Off"      },
132	{ DRM_MODE_DIRTY_ON,       "On"       },
133	{ DRM_MODE_DIRTY_ANNOTATE, "Annotate" },
134};
135
136DRM_ENUM_NAME_FN(drm_get_dirty_info_name,
137		 drm_dirty_info_enum_list)
138
139struct drm_conn_prop_enum_list {
140	int type;
141	char *name;
142	int count;
143};
144
145/*
146 * Connector and encoder types.
147 */
148static struct drm_conn_prop_enum_list drm_connector_enum_list[] =
149{	{ DRM_MODE_CONNECTOR_Unknown, "Unknown", 0 },
150	{ DRM_MODE_CONNECTOR_VGA, "VGA", 0 },
151	{ DRM_MODE_CONNECTOR_DVII, "DVI-I", 0 },
152	{ DRM_MODE_CONNECTOR_DVID, "DVI-D", 0 },
153	{ DRM_MODE_CONNECTOR_DVIA, "DVI-A", 0 },
154	{ DRM_MODE_CONNECTOR_Composite, "Composite", 0 },
155	{ DRM_MODE_CONNECTOR_SVIDEO, "SVIDEO", 0 },
156	{ DRM_MODE_CONNECTOR_LVDS, "LVDS", 0 },
157	{ DRM_MODE_CONNECTOR_Component, "Component", 0 },
158	{ DRM_MODE_CONNECTOR_9PinDIN, "DIN", 0 },
159	{ DRM_MODE_CONNECTOR_DisplayPort, "DP", 0 },
160	{ DRM_MODE_CONNECTOR_HDMIA, "HDMI-A", 0 },
161	{ DRM_MODE_CONNECTOR_HDMIB, "HDMI-B", 0 },
162	{ DRM_MODE_CONNECTOR_TV, "TV", 0 },
163	{ DRM_MODE_CONNECTOR_eDP, "eDP", 0 },
164	{ DRM_MODE_CONNECTOR_VIRTUAL, "Virtual", 0},
165};
166
167static struct drm_prop_enum_list drm_encoder_enum_list[] =
168{	{ DRM_MODE_ENCODER_NONE, "None" },
169	{ DRM_MODE_ENCODER_DAC, "DAC" },
170	{ DRM_MODE_ENCODER_TMDS, "TMDS" },
171	{ DRM_MODE_ENCODER_LVDS, "LVDS" },
172	{ DRM_MODE_ENCODER_TVDAC, "TV" },
173	{ DRM_MODE_ENCODER_VIRTUAL, "Virtual" },
174};
175
176char *drm_get_encoder_name(struct drm_encoder *encoder)
177{
178	static char buf[32];
179
180	snprintf(buf, 32, "%s-%d",
181		 drm_encoder_enum_list[encoder->encoder_type].name,
182		 encoder->base.id);
183	return buf;
184}
185EXPORT_SYMBOL(drm_get_encoder_name);
186
187char *drm_get_connector_name(struct drm_connector *connector)
188{
189	static char buf[32];
190
191	snprintf(buf, 32, "%s-%d",
192		 drm_connector_enum_list[connector->connector_type].name,
193		 connector->connector_type_id);
194	return buf;
195}
196EXPORT_SYMBOL(drm_get_connector_name);
197
198char *drm_get_connector_status_name(enum drm_connector_status status)
199{
200	if (status == connector_status_connected)
201		return "connected";
202	else if (status == connector_status_disconnected)
203		return "disconnected";
204	else
205		return "unknown";
206}
207
208/**
209 * drm_mode_object_get - allocate a new identifier
210 * @dev: DRM device
211 * @ptr: object pointer, used to generate unique ID
212 * @type: object type
213 *
214 * LOCKING:
215 *
216 * Create a unique identifier based on @ptr in @dev's identifier space.  Used
217 * for tracking modes, CRTCs and connectors.
218 *
219 * RETURNS:
220 * New unique (relative to other objects in @dev) integer identifier for the
221 * object.
222 */
223static int drm_mode_object_get(struct drm_device *dev,
224			       struct drm_mode_object *obj, uint32_t obj_type)
225{
226	int new_id = 0;
227	int ret;
228
229	ret = drm_gem_name_create(&dev->mode_config.crtc_names, obj, &new_id);
230	if (ret)
231		return ret;
232
233	obj->id = new_id;
234	obj->type = obj_type;
235	return 0;
236}
237
238/**
239 * drm_mode_object_put - free an identifer
240 * @dev: DRM device
241 * @id: ID to free
242 *
243 * LOCKING:
244 * Caller must hold DRM mode_config lock.
245 *
246 * Free @id from @dev's unique identifier pool.
247 */
248static void drm_mode_object_put(struct drm_device *dev,
249				struct drm_mode_object *object)
250{
251
252	drm_gem_names_remove(&dev->mode_config.crtc_names, object->id);
253}
254
255struct drm_mode_object *drm_mode_object_find(struct drm_device *dev,
256		uint32_t id, uint32_t type)
257{
258	struct drm_mode_object *obj = NULL;
259
260	obj = drm_gem_name_ref(&dev->mode_config.crtc_names, id, NULL);
261	if (!obj || (obj->type != type) || (obj->id != id))
262		obj = NULL;
263
264	return obj;
265}
266EXPORT_SYMBOL(drm_mode_object_find);
267
268/**
269 * drm_framebuffer_init - initialize a framebuffer
270 * @dev: DRM device
271 *
272 * LOCKING:
273 * Caller must hold mode config lock.
274 *
275 * Allocates an ID for the framebuffer's parent mode object, sets its mode
276 * functions & device file and adds it to the master fd list.
277 *
278 * RETURNS:
279 * Zero on success, error code on failure.
280 */
281int drm_framebuffer_init(struct drm_device *dev, struct drm_framebuffer *fb,
282			 const struct drm_framebuffer_funcs *funcs)
283{
284	int ret;
285
286	refcount_init(&fb->refcount, 1);
287
288	ret = drm_mode_object_get(dev, &fb->base, DRM_MODE_OBJECT_FB);
289	if (ret)
290		return ret;
291
292	fb->dev = dev;
293	fb->funcs = funcs;
294	dev->mode_config.num_fb++;
295	list_add(&fb->head, &dev->mode_config.fb_list);
296
297	return 0;
298}
299EXPORT_SYMBOL(drm_framebuffer_init);
300
301static void drm_framebuffer_free(struct drm_framebuffer *fb)
302{
303	fb->funcs->destroy(fb);
304}
305
306/**
307 * drm_framebuffer_unreference - unref a framebuffer
308 *
309 * LOCKING:
310 * Caller must hold mode config lock.
311 */
312void drm_framebuffer_unreference(struct drm_framebuffer *fb)
313{
314	struct drm_device *dev = fb->dev;
315	DRM_DEBUG("FB ID: %d\n", fb->base.id);
316	if (!sx_xlocked(&dev->mode_config.mutex))
317		DRM_WARNING("%s: dev->mode_config.mutex not locked\n", __func__);
318	if (refcount_release(&fb->refcount))
319		drm_framebuffer_free(fb);
320}
321EXPORT_SYMBOL(drm_framebuffer_unreference);
322
323/**
324 * drm_framebuffer_reference - incr the fb refcnt
325 */
326void drm_framebuffer_reference(struct drm_framebuffer *fb)
327{
328	DRM_DEBUG("FB ID: %d\n", fb->base.id);
329	refcount_acquire(&fb->refcount);
330}
331EXPORT_SYMBOL(drm_framebuffer_reference);
332
333/**
334 * drm_framebuffer_cleanup - remove a framebuffer object
335 * @fb: framebuffer to remove
336 *
337 * LOCKING:
338 * Caller must hold mode config lock.
339 *
340 * Scans all the CRTCs in @dev's mode_config.  If they're using @fb, removes
341 * it, setting it to NULL.
342 */
343void drm_framebuffer_cleanup(struct drm_framebuffer *fb)
344{
345	struct drm_device *dev = fb->dev;
346	/*
347	 * This could be moved to drm_framebuffer_remove(), but for
348	 * debugging is nice to keep around the list of fb's that are
349	 * no longer associated w/ a drm_file but are not unreferenced
350	 * yet.  (i915 and omapdrm have debugfs files which will show
351	 * this.)
352	 */
353	drm_mode_object_put(dev, &fb->base);
354	list_del(&fb->head);
355	dev->mode_config.num_fb--;
356}
357EXPORT_SYMBOL(drm_framebuffer_cleanup);
358
359/**
360 * drm_framebuffer_remove - remove and unreference a framebuffer object
361 * @fb: framebuffer to remove
362 *
363 * LOCKING:
364 * Caller must hold mode config lock.
365 *
366 * Scans all the CRTCs and planes in @dev's mode_config.  If they're
367 * using @fb, removes it, setting it to NULL.
368 */
369void drm_framebuffer_remove(struct drm_framebuffer *fb)
370{
371	struct drm_device *dev = fb->dev;
372	struct drm_crtc *crtc;
373	struct drm_plane *plane;
374	struct drm_mode_set set;
375	int ret;
376
377	/* remove from any CRTC */
378	list_for_each_entry(crtc, &dev->mode_config.crtc_list, head) {
379		if (crtc->fb == fb) {
380			/* should turn off the crtc */
381			memset(&set, 0, sizeof(struct drm_mode_set));
382			set.crtc = crtc;
383			set.fb = NULL;
384			ret = crtc->funcs->set_config(&set);
385			if (ret)
386				DRM_ERROR("failed to reset crtc %p when fb was deleted\n", crtc);
387		}
388	}
389
390	list_for_each_entry(plane, &dev->mode_config.plane_list, head) {
391		if (plane->fb == fb) {
392			/* should turn off the crtc */
393			ret = plane->funcs->disable_plane(plane);
394			if (ret)
395				DRM_ERROR("failed to disable plane with busy fb\n");
396			/* disconnect the plane from the fb and crtc: */
397			plane->fb = NULL;
398			plane->crtc = NULL;
399		}
400	}
401
402	list_del(&fb->filp_head);
403
404	drm_framebuffer_unreference(fb);
405}
406EXPORT_SYMBOL(drm_framebuffer_remove);
407
408/**
409 * drm_crtc_init - Initialise a new CRTC object
410 * @dev: DRM device
411 * @crtc: CRTC object to init
412 * @funcs: callbacks for the new CRTC
413 *
414 * LOCKING:
415 * Takes mode_config lock.
416 *
417 * Inits a new object created as base part of an driver crtc object.
418 *
419 * RETURNS:
420 * Zero on success, error code on failure.
421 */
422int drm_crtc_init(struct drm_device *dev, struct drm_crtc *crtc,
423		   const struct drm_crtc_funcs *funcs)
424{
425	int ret;
426
427	crtc->dev = dev;
428	crtc->funcs = funcs;
429	crtc->invert_dimensions = false;
430
431	sx_xlock(&dev->mode_config.mutex);
432
433	ret = drm_mode_object_get(dev, &crtc->base, DRM_MODE_OBJECT_CRTC);
434	if (ret)
435		goto out;
436
437	crtc->base.properties = &crtc->properties;
438
439	list_add_tail(&crtc->head, &dev->mode_config.crtc_list);
440	dev->mode_config.num_crtc++;
441
442 out:
443	sx_xunlock(&dev->mode_config.mutex);
444
445	return ret;
446}
447EXPORT_SYMBOL(drm_crtc_init);
448
449/**
450 * drm_crtc_cleanup - Cleans up the core crtc usage.
451 * @crtc: CRTC to cleanup
452 *
453 * LOCKING:
454 * Caller must hold mode config lock.
455 *
456 * Cleanup @crtc. Removes from drm modesetting space
457 * does NOT free object, caller does that.
458 */
459void drm_crtc_cleanup(struct drm_crtc *crtc)
460{
461	struct drm_device *dev = crtc->dev;
462
463	free(crtc->gamma_store, DRM_MEM_KMS);
464	crtc->gamma_store = NULL;
465
466	drm_mode_object_put(dev, &crtc->base);
467	list_del(&crtc->head);
468	dev->mode_config.num_crtc--;
469}
470EXPORT_SYMBOL(drm_crtc_cleanup);
471
472/**
473 * drm_mode_probed_add - add a mode to a connector's probed mode list
474 * @connector: connector the new mode
475 * @mode: mode data
476 *
477 * LOCKING:
478 * Caller must hold mode config lock.
479 *
480 * Add @mode to @connector's mode list for later use.
481 */
482void drm_mode_probed_add(struct drm_connector *connector,
483			 struct drm_display_mode *mode)
484{
485	list_add(&mode->head, &connector->probed_modes);
486}
487EXPORT_SYMBOL(drm_mode_probed_add);
488
489/**
490 * drm_mode_remove - remove and free a mode
491 * @connector: connector list to modify
492 * @mode: mode to remove
493 *
494 * LOCKING:
495 * Caller must hold mode config lock.
496 *
497 * Remove @mode from @connector's mode list, then free it.
498 */
499void drm_mode_remove(struct drm_connector *connector,
500		     struct drm_display_mode *mode)
501{
502	list_del(&mode->head);
503	drm_mode_destroy(connector->dev, mode);
504}
505EXPORT_SYMBOL(drm_mode_remove);
506
507/**
508 * drm_connector_init - Init a preallocated connector
509 * @dev: DRM device
510 * @connector: the connector to init
511 * @funcs: callbacks for this connector
512 * @name: user visible name of the connector
513 *
514 * LOCKING:
515 * Takes mode config lock.
516 *
517 * Initialises a preallocated connector. Connectors should be
518 * subclassed as part of driver connector objects.
519 *
520 * RETURNS:
521 * Zero on success, error code on failure.
522 */
523int drm_connector_init(struct drm_device *dev,
524		       struct drm_connector *connector,
525		       const struct drm_connector_funcs *funcs,
526		       int connector_type)
527{
528	int ret;
529
530	sx_xlock(&dev->mode_config.mutex);
531
532	ret = drm_mode_object_get(dev, &connector->base, DRM_MODE_OBJECT_CONNECTOR);
533	if (ret)
534		goto out;
535
536	connector->base.properties = &connector->properties;
537	connector->dev = dev;
538	connector->funcs = funcs;
539	connector->connector_type = connector_type;
540	connector->connector_type_id =
541		++drm_connector_enum_list[connector_type].count; /* TODO */
542	INIT_LIST_HEAD(&connector->user_modes);
543	INIT_LIST_HEAD(&connector->probed_modes);
544	INIT_LIST_HEAD(&connector->modes);
545	connector->edid_blob_ptr = NULL;
546	connector->status = connector_status_unknown;
547
548	list_add_tail(&connector->head, &dev->mode_config.connector_list);
549	dev->mode_config.num_connector++;
550
551	if (connector_type != DRM_MODE_CONNECTOR_VIRTUAL)
552		drm_object_attach_property(&connector->base,
553					      dev->mode_config.edid_property,
554					      0);
555
556	drm_object_attach_property(&connector->base,
557				      dev->mode_config.dpms_property, 0);
558
559 out:
560	sx_xunlock(&dev->mode_config.mutex);
561
562	return ret;
563}
564EXPORT_SYMBOL(drm_connector_init);
565
566/**
567 * drm_connector_cleanup - cleans up an initialised connector
568 * @connector: connector to cleanup
569 *
570 * LOCKING:
571 * Takes mode config lock.
572 *
573 * Cleans up the connector but doesn't free the object.
574 */
575void drm_connector_cleanup(struct drm_connector *connector)
576{
577	struct drm_device *dev = connector->dev;
578	struct drm_display_mode *mode, *t;
579
580	list_for_each_entry_safe(mode, t, &connector->probed_modes, head)
581		drm_mode_remove(connector, mode);
582
583	list_for_each_entry_safe(mode, t, &connector->modes, head)
584		drm_mode_remove(connector, mode);
585
586	list_for_each_entry_safe(mode, t, &connector->user_modes, head)
587		drm_mode_remove(connector, mode);
588
589	sx_xlock(&dev->mode_config.mutex);
590	drm_mode_object_put(dev, &connector->base);
591	list_del(&connector->head);
592	dev->mode_config.num_connector--;
593	sx_xunlock(&dev->mode_config.mutex);
594}
595EXPORT_SYMBOL(drm_connector_cleanup);
596
597void drm_connector_unplug_all(struct drm_device *dev)
598{
599#ifdef FREEBSD_NOTYET
600	struct drm_connector *connector;
601
602	/* taking the mode config mutex ends up in a clash with sysfs */
603	list_for_each_entry(connector, &dev->mode_config.connector_list, head)
604		drm_sysfs_connector_remove(connector);
605#endif /* FREEBSD_NOTYET */
606
607}
608EXPORT_SYMBOL(drm_connector_unplug_all);
609
610int drm_encoder_init(struct drm_device *dev,
611		      struct drm_encoder *encoder,
612		      const struct drm_encoder_funcs *funcs,
613		      int encoder_type)
614{
615	int ret;
616
617	sx_xlock(&dev->mode_config.mutex);
618
619	ret = drm_mode_object_get(dev, &encoder->base, DRM_MODE_OBJECT_ENCODER);
620	if (ret)
621		goto out;
622
623	encoder->dev = dev;
624	encoder->encoder_type = encoder_type;
625	encoder->funcs = funcs;
626
627	list_add_tail(&encoder->head, &dev->mode_config.encoder_list);
628	dev->mode_config.num_encoder++;
629
630 out:
631	sx_xunlock(&dev->mode_config.mutex);
632
633	return ret;
634}
635EXPORT_SYMBOL(drm_encoder_init);
636
637void drm_encoder_cleanup(struct drm_encoder *encoder)
638{
639	struct drm_device *dev = encoder->dev;
640	sx_xlock(&dev->mode_config.mutex);
641	drm_mode_object_put(dev, &encoder->base);
642	list_del(&encoder->head);
643	dev->mode_config.num_encoder--;
644	sx_xunlock(&dev->mode_config.mutex);
645}
646EXPORT_SYMBOL(drm_encoder_cleanup);
647
648int drm_plane_init(struct drm_device *dev, struct drm_plane *plane,
649		   unsigned long possible_crtcs,
650		   const struct drm_plane_funcs *funcs,
651		   const uint32_t *formats, uint32_t format_count,
652		   bool priv)
653{
654	int ret;
655
656	sx_xlock(&dev->mode_config.mutex);
657
658	ret = drm_mode_object_get(dev, &plane->base, DRM_MODE_OBJECT_PLANE);
659	if (ret)
660		goto out;
661
662	plane->base.properties = &plane->properties;
663	plane->dev = dev;
664	plane->funcs = funcs;
665	plane->format_types = malloc(sizeof(uint32_t) * format_count,
666	    DRM_MEM_KMS, M_WAITOK);
667	if (!plane->format_types) {
668		DRM_DEBUG_KMS("out of memory when allocating plane\n");
669		drm_mode_object_put(dev, &plane->base);
670		ret = -ENOMEM;
671		goto out;
672	}
673
674	memcpy(plane->format_types, formats, format_count * sizeof(uint32_t));
675	plane->format_count = format_count;
676	plane->possible_crtcs = possible_crtcs;
677
678	/* private planes are not exposed to userspace, but depending on
679	 * display hardware, might be convenient to allow sharing programming
680	 * for the scanout engine with the crtc implementation.
681	 */
682	if (!priv) {
683		list_add_tail(&plane->head, &dev->mode_config.plane_list);
684		dev->mode_config.num_plane++;
685	} else {
686		INIT_LIST_HEAD(&plane->head);
687	}
688
689 out:
690	sx_xunlock(&dev->mode_config.mutex);
691
692	return ret;
693}
694EXPORT_SYMBOL(drm_plane_init);
695
696void drm_plane_cleanup(struct drm_plane *plane)
697{
698	struct drm_device *dev = plane->dev;
699
700	sx_xlock(&dev->mode_config.mutex);
701	free(plane->format_types, DRM_MEM_KMS);
702	drm_mode_object_put(dev, &plane->base);
703	/* if not added to a list, it must be a private plane */
704	if (!list_empty(&plane->head)) {
705		list_del(&plane->head);
706		dev->mode_config.num_plane--;
707	}
708	sx_xunlock(&dev->mode_config.mutex);
709}
710EXPORT_SYMBOL(drm_plane_cleanup);
711
712/**
713 * drm_mode_create - create a new display mode
714 * @dev: DRM device
715 *
716 * LOCKING:
717 * Caller must hold DRM mode_config lock.
718 *
719 * Create a new drm_display_mode, give it an ID, and return it.
720 *
721 * RETURNS:
722 * Pointer to new mode on success, NULL on error.
723 */
724struct drm_display_mode *drm_mode_create(struct drm_device *dev)
725{
726	struct drm_display_mode *nmode;
727
728	nmode = malloc(sizeof(struct drm_display_mode), DRM_MEM_KMS,
729	    M_WAITOK | M_ZERO);
730	if (!nmode)
731		return NULL;
732
733	if (drm_mode_object_get(dev, &nmode->base, DRM_MODE_OBJECT_MODE)) {
734		free(nmode, DRM_MEM_KMS);
735		return NULL;
736	}
737
738	return nmode;
739}
740EXPORT_SYMBOL(drm_mode_create);
741
742/**
743 * drm_mode_destroy - remove a mode
744 * @dev: DRM device
745 * @mode: mode to remove
746 *
747 * LOCKING:
748 * Caller must hold mode config lock.
749 *
750 * Free @mode's unique identifier, then free it.
751 */
752void drm_mode_destroy(struct drm_device *dev, struct drm_display_mode *mode)
753{
754	if (!mode)
755		return;
756
757	drm_mode_object_put(dev, &mode->base);
758
759	free(mode, DRM_MEM_KMS);
760}
761EXPORT_SYMBOL(drm_mode_destroy);
762
763static int drm_mode_create_standard_connector_properties(struct drm_device *dev)
764{
765	struct drm_property *edid;
766	struct drm_property *dpms;
767
768	/*
769	 * Standard properties (apply to all connectors)
770	 */
771	edid = drm_property_create(dev, DRM_MODE_PROP_BLOB |
772				   DRM_MODE_PROP_IMMUTABLE,
773				   "EDID", 0);
774	dev->mode_config.edid_property = edid;
775
776	dpms = drm_property_create_enum(dev, 0,
777				   "DPMS", drm_dpms_enum_list,
778				   ARRAY_SIZE(drm_dpms_enum_list));
779	dev->mode_config.dpms_property = dpms;
780
781	return 0;
782}
783
784/**
785 * drm_mode_create_dvi_i_properties - create DVI-I specific connector properties
786 * @dev: DRM device
787 *
788 * Called by a driver the first time a DVI-I connector is made.
789 */
790int drm_mode_create_dvi_i_properties(struct drm_device *dev)
791{
792	struct drm_property *dvi_i_selector;
793	struct drm_property *dvi_i_subconnector;
794
795	if (dev->mode_config.dvi_i_select_subconnector_property)
796		return 0;
797
798	dvi_i_selector =
799		drm_property_create_enum(dev, 0,
800				    "select subconnector",
801				    drm_dvi_i_select_enum_list,
802				    ARRAY_SIZE(drm_dvi_i_select_enum_list));
803	dev->mode_config.dvi_i_select_subconnector_property = dvi_i_selector;
804
805	dvi_i_subconnector = drm_property_create_enum(dev, DRM_MODE_PROP_IMMUTABLE,
806				    "subconnector",
807				    drm_dvi_i_subconnector_enum_list,
808				    ARRAY_SIZE(drm_dvi_i_subconnector_enum_list));
809	dev->mode_config.dvi_i_subconnector_property = dvi_i_subconnector;
810
811	return 0;
812}
813EXPORT_SYMBOL(drm_mode_create_dvi_i_properties);
814
815/**
816 * drm_create_tv_properties - create TV specific connector properties
817 * @dev: DRM device
818 * @num_modes: number of different TV formats (modes) supported
819 * @modes: array of pointers to strings containing name of each format
820 *
821 * Called by a driver's TV initialization routine, this function creates
822 * the TV specific connector properties for a given device.  Caller is
823 * responsible for allocating a list of format names and passing them to
824 * this routine.
825 */
826int drm_mode_create_tv_properties(struct drm_device *dev, int num_modes,
827				  char *modes[])
828{
829	struct drm_property *tv_selector;
830	struct drm_property *tv_subconnector;
831	int i;
832
833	if (dev->mode_config.tv_select_subconnector_property)
834		return 0;
835
836	/*
837	 * Basic connector properties
838	 */
839	tv_selector = drm_property_create_enum(dev, 0,
840					  "select subconnector",
841					  drm_tv_select_enum_list,
842					  ARRAY_SIZE(drm_tv_select_enum_list));
843	dev->mode_config.tv_select_subconnector_property = tv_selector;
844
845	tv_subconnector =
846		drm_property_create_enum(dev, DRM_MODE_PROP_IMMUTABLE,
847				    "subconnector",
848				    drm_tv_subconnector_enum_list,
849				    ARRAY_SIZE(drm_tv_subconnector_enum_list));
850	dev->mode_config.tv_subconnector_property = tv_subconnector;
851
852	/*
853	 * Other, TV specific properties: margins & TV modes.
854	 */
855	dev->mode_config.tv_left_margin_property =
856		drm_property_create_range(dev, 0, "left margin", 0, 100);
857
858	dev->mode_config.tv_right_margin_property =
859		drm_property_create_range(dev, 0, "right margin", 0, 100);
860
861	dev->mode_config.tv_top_margin_property =
862		drm_property_create_range(dev, 0, "top margin", 0, 100);
863
864	dev->mode_config.tv_bottom_margin_property =
865		drm_property_create_range(dev, 0, "bottom margin", 0, 100);
866
867	dev->mode_config.tv_mode_property =
868		drm_property_create(dev, DRM_MODE_PROP_ENUM,
869				    "mode", num_modes);
870	for (i = 0; i < num_modes; i++)
871		drm_property_add_enum(dev->mode_config.tv_mode_property, i,
872				      i, modes[i]);
873
874	dev->mode_config.tv_brightness_property =
875		drm_property_create_range(dev, 0, "brightness", 0, 100);
876
877	dev->mode_config.tv_contrast_property =
878		drm_property_create_range(dev, 0, "contrast", 0, 100);
879
880	dev->mode_config.tv_flicker_reduction_property =
881		drm_property_create_range(dev, 0, "flicker reduction", 0, 100);
882
883	dev->mode_config.tv_overscan_property =
884		drm_property_create_range(dev, 0, "overscan", 0, 100);
885
886	dev->mode_config.tv_saturation_property =
887		drm_property_create_range(dev, 0, "saturation", 0, 100);
888
889	dev->mode_config.tv_hue_property =
890		drm_property_create_range(dev, 0, "hue", 0, 100);
891
892	return 0;
893}
894EXPORT_SYMBOL(drm_mode_create_tv_properties);
895
896/**
897 * drm_mode_create_scaling_mode_property - create scaling mode property
898 * @dev: DRM device
899 *
900 * Called by a driver the first time it's needed, must be attached to desired
901 * connectors.
902 */
903int drm_mode_create_scaling_mode_property(struct drm_device *dev)
904{
905	struct drm_property *scaling_mode;
906
907	if (dev->mode_config.scaling_mode_property)
908		return 0;
909
910	scaling_mode =
911		drm_property_create_enum(dev, 0, "scaling mode",
912				drm_scaling_mode_enum_list,
913				    ARRAY_SIZE(drm_scaling_mode_enum_list));
914
915	dev->mode_config.scaling_mode_property = scaling_mode;
916
917	return 0;
918}
919EXPORT_SYMBOL(drm_mode_create_scaling_mode_property);
920
921/**
922 * drm_mode_create_dithering_property - create dithering property
923 * @dev: DRM device
924 *
925 * Called by a driver the first time it's needed, must be attached to desired
926 * connectors.
927 */
928int drm_mode_create_dithering_property(struct drm_device *dev)
929{
930	struct drm_property *dithering_mode;
931
932	if (dev->mode_config.dithering_mode_property)
933		return 0;
934
935	dithering_mode =
936		drm_property_create_enum(dev, 0, "dithering",
937				drm_dithering_mode_enum_list,
938				    ARRAY_SIZE(drm_dithering_mode_enum_list));
939	dev->mode_config.dithering_mode_property = dithering_mode;
940
941	return 0;
942}
943EXPORT_SYMBOL(drm_mode_create_dithering_property);
944
945/**
946 * drm_mode_create_dirty_property - create dirty property
947 * @dev: DRM device
948 *
949 * Called by a driver the first time it's needed, must be attached to desired
950 * connectors.
951 */
952int drm_mode_create_dirty_info_property(struct drm_device *dev)
953{
954	struct drm_property *dirty_info;
955
956	if (dev->mode_config.dirty_info_property)
957		return 0;
958
959	dirty_info =
960		drm_property_create_enum(dev, DRM_MODE_PROP_IMMUTABLE,
961				    "dirty",
962				    drm_dirty_info_enum_list,
963				    ARRAY_SIZE(drm_dirty_info_enum_list));
964	dev->mode_config.dirty_info_property = dirty_info;
965
966	return 0;
967}
968EXPORT_SYMBOL(drm_mode_create_dirty_info_property);
969
970/**
971 * drm_mode_config_init - initialize DRM mode_configuration structure
972 * @dev: DRM device
973 *
974 * LOCKING:
975 * None, should happen single threaded at init time.
976 *
977 * Initialize @dev's mode_config structure, used for tracking the graphics
978 * configuration of @dev.
979 */
980void drm_mode_config_init(struct drm_device *dev)
981{
982	sx_init(&dev->mode_config.mutex, "kmslk");
983	INIT_LIST_HEAD(&dev->mode_config.fb_list);
984	INIT_LIST_HEAD(&dev->mode_config.crtc_list);
985	INIT_LIST_HEAD(&dev->mode_config.connector_list);
986	INIT_LIST_HEAD(&dev->mode_config.encoder_list);
987	INIT_LIST_HEAD(&dev->mode_config.property_list);
988	INIT_LIST_HEAD(&dev->mode_config.property_blob_list);
989	INIT_LIST_HEAD(&dev->mode_config.plane_list);
990	drm_gem_names_init(&dev->mode_config.crtc_names);
991
992	sx_xlock(&dev->mode_config.mutex);
993	drm_mode_create_standard_connector_properties(dev);
994	sx_xunlock(&dev->mode_config.mutex);
995
996	/* Just to be sure */
997	dev->mode_config.num_fb = 0;
998	dev->mode_config.num_connector = 0;
999	dev->mode_config.num_crtc = 0;
1000	dev->mode_config.num_encoder = 0;
1001}
1002EXPORT_SYMBOL(drm_mode_config_init);
1003
1004int drm_mode_group_init(struct drm_device *dev, struct drm_mode_group *group)
1005{
1006	uint32_t total_objects = 0;
1007
1008	total_objects += dev->mode_config.num_crtc;
1009	total_objects += dev->mode_config.num_connector;
1010	total_objects += dev->mode_config.num_encoder;
1011
1012	group->id_list = malloc(total_objects * sizeof(uint32_t),
1013	    DRM_MEM_KMS, M_WAITOK | M_ZERO);
1014	if (!group->id_list)
1015		return -ENOMEM;
1016
1017	group->num_crtcs = 0;
1018	group->num_connectors = 0;
1019	group->num_encoders = 0;
1020	return 0;
1021}
1022
1023void drm_mode_group_free(struct drm_mode_group *group)
1024{
1025	free(group->id_list, DRM_MEM_KMS);
1026	group->id_list = NULL;
1027}
1028
1029int drm_mode_group_init_legacy_group(struct drm_device *dev,
1030				     struct drm_mode_group *group)
1031{
1032	struct drm_crtc *crtc;
1033	struct drm_encoder *encoder;
1034	struct drm_connector *connector;
1035	int ret;
1036
1037	if ((ret = drm_mode_group_init(dev, group)))
1038		return ret;
1039
1040	list_for_each_entry(crtc, &dev->mode_config.crtc_list, head)
1041		group->id_list[group->num_crtcs++] = crtc->base.id;
1042
1043	list_for_each_entry(encoder, &dev->mode_config.encoder_list, head)
1044		group->id_list[group->num_crtcs + group->num_encoders++] =
1045		encoder->base.id;
1046
1047	list_for_each_entry(connector, &dev->mode_config.connector_list, head)
1048		group->id_list[group->num_crtcs + group->num_encoders +
1049			       group->num_connectors++] = connector->base.id;
1050
1051	return 0;
1052}
1053EXPORT_SYMBOL(drm_mode_group_init_legacy_group);
1054
1055/**
1056 * drm_mode_config_cleanup - free up DRM mode_config info
1057 * @dev: DRM device
1058 *
1059 * LOCKING:
1060 * Caller must hold mode config lock.
1061 *
1062 * Free up all the connectors and CRTCs associated with this DRM device, then
1063 * free up the framebuffers and associated buffer objects.
1064 *
1065 * FIXME: cleanup any dangling user buffer objects too
1066 */
1067void drm_mode_config_cleanup(struct drm_device *dev)
1068{
1069	struct drm_connector *connector, *ot;
1070	struct drm_crtc *crtc, *ct;
1071	struct drm_encoder *encoder, *enct;
1072	struct drm_framebuffer *fb, *fbt;
1073	struct drm_property *property, *pt;
1074	struct drm_property_blob *blob, *bt;
1075	struct drm_plane *plane, *plt;
1076
1077	list_for_each_entry_safe(encoder, enct, &dev->mode_config.encoder_list,
1078				 head) {
1079		encoder->funcs->destroy(encoder);
1080	}
1081
1082	list_for_each_entry_safe(connector, ot,
1083				 &dev->mode_config.connector_list, head) {
1084		connector->funcs->destroy(connector);
1085	}
1086
1087	list_for_each_entry_safe(property, pt, &dev->mode_config.property_list,
1088				 head) {
1089		drm_property_destroy(dev, property);
1090	}
1091
1092        list_for_each_entry_safe(blob, bt, &dev->mode_config.property_blob_list,
1093				 head) {
1094		drm_property_destroy_blob(dev, blob);
1095	}
1096
1097	list_for_each_entry_safe(fb, fbt, &dev->mode_config.fb_list, head) {
1098		drm_framebuffer_remove(fb);
1099	}
1100
1101	list_for_each_entry_safe(plane, plt, &dev->mode_config.plane_list,
1102				 head) {
1103		plane->funcs->destroy(plane);
1104	}
1105
1106	list_for_each_entry_safe(crtc, ct, &dev->mode_config.crtc_list, head) {
1107		crtc->funcs->destroy(crtc);
1108	}
1109
1110	drm_gem_names_fini(&dev->mode_config.crtc_names);
1111}
1112EXPORT_SYMBOL(drm_mode_config_cleanup);
1113
1114/**
1115 * drm_crtc_convert_to_umode - convert a drm_display_mode into a modeinfo
1116 * @out: drm_mode_modeinfo struct to return to the user
1117 * @in: drm_display_mode to use
1118 *
1119 * LOCKING:
1120 * None.
1121 *
1122 * Convert a drm_display_mode into a drm_mode_modeinfo structure to return to
1123 * the user.
1124 */
1125static void drm_crtc_convert_to_umode(struct drm_mode_modeinfo *out,
1126				      const struct drm_display_mode *in)
1127{
1128	if (in->hdisplay > USHRT_MAX || in->hsync_start > USHRT_MAX ||
1129	     in->hsync_end > USHRT_MAX || in->htotal > USHRT_MAX ||
1130	     in->hskew > USHRT_MAX || in->vdisplay > USHRT_MAX ||
1131	     in->vsync_start > USHRT_MAX || in->vsync_end > USHRT_MAX ||
1132	     in->vtotal > USHRT_MAX || in->vscan > USHRT_MAX)
1133		DRM_WARNING("timing values too large for mode info\n");
1134
1135	out->clock = in->clock;
1136	out->hdisplay = in->hdisplay;
1137	out->hsync_start = in->hsync_start;
1138	out->hsync_end = in->hsync_end;
1139	out->htotal = in->htotal;
1140	out->hskew = in->hskew;
1141	out->vdisplay = in->vdisplay;
1142	out->vsync_start = in->vsync_start;
1143	out->vsync_end = in->vsync_end;
1144	out->vtotal = in->vtotal;
1145	out->vscan = in->vscan;
1146	out->vrefresh = in->vrefresh;
1147	out->flags = in->flags;
1148	out->type = in->type;
1149	strncpy(out->name, in->name, DRM_DISPLAY_MODE_LEN);
1150	out->name[DRM_DISPLAY_MODE_LEN-1] = 0;
1151}
1152
1153/**
1154 * drm_crtc_convert_to_umode - convert a modeinfo into a drm_display_mode
1155 * @out: drm_display_mode to return to the user
1156 * @in: drm_mode_modeinfo to use
1157 *
1158 * LOCKING:
1159 * None.
1160 *
1161 * Convert a drm_mode_modeinfo into a drm_display_mode structure to return to
1162 * the caller.
1163 *
1164 * RETURNS:
1165 * Zero on success, errno on failure.
1166 */
1167static int drm_crtc_convert_umode(struct drm_display_mode *out,
1168				  const struct drm_mode_modeinfo *in)
1169{
1170	if (in->clock > INT_MAX || in->vrefresh > INT_MAX)
1171		return -ERANGE;
1172
1173	out->clock = in->clock;
1174	out->hdisplay = in->hdisplay;
1175	out->hsync_start = in->hsync_start;
1176	out->hsync_end = in->hsync_end;
1177	out->htotal = in->htotal;
1178	out->hskew = in->hskew;
1179	out->vdisplay = in->vdisplay;
1180	out->vsync_start = in->vsync_start;
1181	out->vsync_end = in->vsync_end;
1182	out->vtotal = in->vtotal;
1183	out->vscan = in->vscan;
1184	out->vrefresh = in->vrefresh;
1185	out->flags = in->flags;
1186	out->type = in->type;
1187	strncpy(out->name, in->name, DRM_DISPLAY_MODE_LEN);
1188	out->name[DRM_DISPLAY_MODE_LEN-1] = 0;
1189
1190	return 0;
1191}
1192
1193/**
1194 * drm_mode_getresources - get graphics configuration
1195 * @inode: inode from the ioctl
1196 * @filp: file * from the ioctl
1197 * @cmd: cmd from ioctl
1198 * @arg: arg from ioctl
1199 *
1200 * LOCKING:
1201 * Takes mode config lock.
1202 *
1203 * Construct a set of configuration description structures and return
1204 * them to the user, including CRTC, connector and framebuffer configuration.
1205 *
1206 * Called by the user via ioctl.
1207 *
1208 * RETURNS:
1209 * Zero on success, errno on failure.
1210 */
1211int drm_mode_getresources(struct drm_device *dev, void *data,
1212			  struct drm_file *file_priv)
1213{
1214	struct drm_mode_card_res *card_res = data;
1215	struct list_head *lh;
1216	struct drm_framebuffer *fb;
1217	struct drm_connector *connector;
1218	struct drm_crtc *crtc;
1219	struct drm_encoder *encoder;
1220	int ret = 0;
1221	int connector_count = 0;
1222	int crtc_count = 0;
1223	int fb_count = 0;
1224	int encoder_count = 0;
1225	int copied = 0, i;
1226	uint32_t __user *fb_id;
1227	uint32_t __user *crtc_id;
1228	uint32_t __user *connector_id;
1229	uint32_t __user *encoder_id;
1230	struct drm_mode_group *mode_group;
1231
1232	if (!drm_core_check_feature(dev, DRIVER_MODESET))
1233		return -EINVAL;
1234
1235	sx_xlock(&dev->mode_config.mutex);
1236
1237	/*
1238	 * For the non-control nodes we need to limit the list of resources
1239	 * by IDs in the group list for this node
1240	 */
1241	list_for_each(lh, &file_priv->fbs)
1242		fb_count++;
1243
1244	mode_group = &file_priv->master->minor->mode_group;
1245	if (file_priv->master->minor->type == DRM_MINOR_CONTROL) {
1246
1247		list_for_each(lh, &dev->mode_config.crtc_list)
1248			crtc_count++;
1249
1250		list_for_each(lh, &dev->mode_config.connector_list)
1251			connector_count++;
1252
1253		list_for_each(lh, &dev->mode_config.encoder_list)
1254			encoder_count++;
1255	} else {
1256
1257		crtc_count = mode_group->num_crtcs;
1258		connector_count = mode_group->num_connectors;
1259		encoder_count = mode_group->num_encoders;
1260	}
1261
1262	card_res->max_height = dev->mode_config.max_height;
1263	card_res->min_height = dev->mode_config.min_height;
1264	card_res->max_width = dev->mode_config.max_width;
1265	card_res->min_width = dev->mode_config.min_width;
1266
1267	/* handle this in 4 parts */
1268	/* FBs */
1269	if (card_res->count_fbs >= fb_count) {
1270		copied = 0;
1271		fb_id = (uint32_t __user *)(unsigned long)card_res->fb_id_ptr;
1272		list_for_each_entry(fb, &file_priv->fbs, filp_head) {
1273			if (put_user(fb->base.id, fb_id + copied)) {
1274				ret = -EFAULT;
1275				goto out;
1276			}
1277			copied++;
1278		}
1279	}
1280	card_res->count_fbs = fb_count;
1281
1282	/* CRTCs */
1283	if (card_res->count_crtcs >= crtc_count) {
1284		copied = 0;
1285		crtc_id = (uint32_t __user *)(unsigned long)card_res->crtc_id_ptr;
1286		if (file_priv->master->minor->type == DRM_MINOR_CONTROL) {
1287			list_for_each_entry(crtc, &dev->mode_config.crtc_list,
1288					    head) {
1289				DRM_DEBUG_KMS("[CRTC:%d]\n", crtc->base.id);
1290				if (put_user(crtc->base.id, crtc_id + copied)) {
1291					ret = -EFAULT;
1292					goto out;
1293				}
1294				copied++;
1295			}
1296		} else {
1297			for (i = 0; i < mode_group->num_crtcs; i++) {
1298				if (put_user(mode_group->id_list[i],
1299					     crtc_id + copied)) {
1300					ret = -EFAULT;
1301					goto out;
1302				}
1303				copied++;
1304			}
1305		}
1306	}
1307	card_res->count_crtcs = crtc_count;
1308
1309	/* Encoders */
1310	if (card_res->count_encoders >= encoder_count) {
1311		copied = 0;
1312		encoder_id = (uint32_t __user *)(unsigned long)card_res->encoder_id_ptr;
1313		if (file_priv->master->minor->type == DRM_MINOR_CONTROL) {
1314			list_for_each_entry(encoder,
1315					    &dev->mode_config.encoder_list,
1316					    head) {
1317				DRM_DEBUG_KMS("[ENCODER:%d:%s]\n", encoder->base.id,
1318						drm_get_encoder_name(encoder));
1319				if (put_user(encoder->base.id, encoder_id +
1320					     copied)) {
1321					ret = -EFAULT;
1322					goto out;
1323				}
1324				copied++;
1325			}
1326		} else {
1327			for (i = mode_group->num_crtcs; i < mode_group->num_crtcs + mode_group->num_encoders; i++) {
1328				if (put_user(mode_group->id_list[i],
1329					     encoder_id + copied)) {
1330					ret = -EFAULT;
1331					goto out;
1332				}
1333				copied++;
1334			}
1335
1336		}
1337	}
1338	card_res->count_encoders = encoder_count;
1339
1340	/* Connectors */
1341	if (card_res->count_connectors >= connector_count) {
1342		copied = 0;
1343		connector_id = (uint32_t __user *)(unsigned long)card_res->connector_id_ptr;
1344		if (file_priv->master->minor->type == DRM_MINOR_CONTROL) {
1345			list_for_each_entry(connector,
1346					    &dev->mode_config.connector_list,
1347					    head) {
1348				DRM_DEBUG_KMS("[CONNECTOR:%d:%s]\n",
1349					connector->base.id,
1350					drm_get_connector_name(connector));
1351				if (put_user(connector->base.id,
1352					     connector_id + copied)) {
1353					ret = -EFAULT;
1354					goto out;
1355				}
1356				copied++;
1357			}
1358		} else {
1359			int start = mode_group->num_crtcs +
1360				mode_group->num_encoders;
1361			for (i = start; i < start + mode_group->num_connectors; i++) {
1362				if (put_user(mode_group->id_list[i],
1363					     connector_id + copied)) {
1364					ret = -EFAULT;
1365					goto out;
1366				}
1367				copied++;
1368			}
1369		}
1370	}
1371	card_res->count_connectors = connector_count;
1372
1373	DRM_DEBUG_KMS("CRTC[%d] CONNECTORS[%d] ENCODERS[%d]\n", card_res->count_crtcs,
1374		  card_res->count_connectors, card_res->count_encoders);
1375
1376out:
1377	sx_xunlock(&dev->mode_config.mutex);
1378	return ret;
1379}
1380
1381/**
1382 * drm_mode_getcrtc - get CRTC configuration
1383 * @inode: inode from the ioctl
1384 * @filp: file * from the ioctl
1385 * @cmd: cmd from ioctl
1386 * @arg: arg from ioctl
1387 *
1388 * LOCKING:
1389 * Takes mode config lock.
1390 *
1391 * Construct a CRTC configuration structure to return to the user.
1392 *
1393 * Called by the user via ioctl.
1394 *
1395 * RETURNS:
1396 * Zero on success, errno on failure.
1397 */
1398int drm_mode_getcrtc(struct drm_device *dev,
1399		     void *data, struct drm_file *file_priv)
1400{
1401	struct drm_mode_crtc *crtc_resp = data;
1402	struct drm_crtc *crtc;
1403	struct drm_mode_object *obj;
1404	int ret = 0;
1405
1406	if (!drm_core_check_feature(dev, DRIVER_MODESET))
1407		return -EINVAL;
1408
1409	sx_xlock(&dev->mode_config.mutex);
1410
1411	obj = drm_mode_object_find(dev, crtc_resp->crtc_id,
1412				   DRM_MODE_OBJECT_CRTC);
1413	if (!obj) {
1414		ret = -EINVAL;
1415		goto out;
1416	}
1417	crtc = obj_to_crtc(obj);
1418
1419	crtc_resp->x = crtc->x;
1420	crtc_resp->y = crtc->y;
1421	crtc_resp->gamma_size = crtc->gamma_size;
1422	if (crtc->fb)
1423		crtc_resp->fb_id = crtc->fb->base.id;
1424	else
1425		crtc_resp->fb_id = 0;
1426
1427	if (crtc->enabled) {
1428
1429		drm_crtc_convert_to_umode(&crtc_resp->mode, &crtc->mode);
1430		crtc_resp->mode_valid = 1;
1431
1432	} else {
1433		crtc_resp->mode_valid = 0;
1434	}
1435
1436out:
1437	sx_xunlock(&dev->mode_config.mutex);
1438	return ret;
1439}
1440
1441/**
1442 * drm_mode_getconnector - get connector configuration
1443 * @inode: inode from the ioctl
1444 * @filp: file * from the ioctl
1445 * @cmd: cmd from ioctl
1446 * @arg: arg from ioctl
1447 *
1448 * LOCKING:
1449 * Takes mode config lock.
1450 *
1451 * Construct a connector configuration structure to return to the user.
1452 *
1453 * Called by the user via ioctl.
1454 *
1455 * RETURNS:
1456 * Zero on success, errno on failure.
1457 */
1458int drm_mode_getconnector(struct drm_device *dev, void *data,
1459			  struct drm_file *file_priv)
1460{
1461	struct drm_mode_get_connector *out_resp = data;
1462	struct drm_mode_object *obj;
1463	struct drm_connector *connector;
1464	struct drm_display_mode *mode;
1465	int mode_count = 0;
1466	int props_count = 0;
1467	int encoders_count = 0;
1468	int ret = 0;
1469	int copied = 0;
1470	int i;
1471	struct drm_mode_modeinfo u_mode;
1472	struct drm_mode_modeinfo __user *mode_ptr;
1473	uint32_t __user *prop_ptr;
1474	uint64_t __user *prop_values;
1475	uint32_t __user *encoder_ptr;
1476
1477	if (!drm_core_check_feature(dev, DRIVER_MODESET))
1478		return -EINVAL;
1479
1480	memset(&u_mode, 0, sizeof(struct drm_mode_modeinfo));
1481
1482	DRM_DEBUG_KMS("[CONNECTOR:%d:?]\n", out_resp->connector_id);
1483
1484	sx_xlock(&dev->mode_config.mutex);
1485
1486	obj = drm_mode_object_find(dev, out_resp->connector_id,
1487				   DRM_MODE_OBJECT_CONNECTOR);
1488	if (!obj) {
1489		ret = -EINVAL;
1490		goto out;
1491	}
1492	connector = obj_to_connector(obj);
1493
1494	props_count = connector->properties.count;
1495
1496	for (i = 0; i < DRM_CONNECTOR_MAX_ENCODER; i++) {
1497		if (connector->encoder_ids[i] != 0) {
1498			encoders_count++;
1499		}
1500	}
1501
1502	if (out_resp->count_modes == 0) {
1503		connector->funcs->fill_modes(connector,
1504					     dev->mode_config.max_width,
1505					     dev->mode_config.max_height);
1506	}
1507
1508	/* delayed so we get modes regardless of pre-fill_modes state */
1509	list_for_each_entry(mode, &connector->modes, head)
1510		mode_count++;
1511
1512	out_resp->connector_id = connector->base.id;
1513	out_resp->connector_type = connector->connector_type;
1514	out_resp->connector_type_id = connector->connector_type_id;
1515	out_resp->mm_width = connector->display_info.width_mm;
1516	out_resp->mm_height = connector->display_info.height_mm;
1517	out_resp->subpixel = connector->display_info.subpixel_order;
1518	out_resp->connection = connector->status;
1519	if (connector->encoder)
1520		out_resp->encoder_id = connector->encoder->base.id;
1521	else
1522		out_resp->encoder_id = 0;
1523
1524	/*
1525	 * This ioctl is called twice, once to determine how much space is
1526	 * needed, and the 2nd time to fill it.
1527	 */
1528	if ((out_resp->count_modes >= mode_count) && mode_count) {
1529		copied = 0;
1530		mode_ptr = (struct drm_mode_modeinfo __user *)(unsigned long)out_resp->modes_ptr;
1531		list_for_each_entry(mode, &connector->modes, head) {
1532			drm_crtc_convert_to_umode(&u_mode, mode);
1533			if (copy_to_user(mode_ptr + copied,
1534					 &u_mode, sizeof(u_mode))) {
1535				ret = -EFAULT;
1536				goto out;
1537			}
1538			copied++;
1539		}
1540	}
1541	out_resp->count_modes = mode_count;
1542
1543	if ((out_resp->count_props >= props_count) && props_count) {
1544		copied = 0;
1545		prop_ptr = (uint32_t __user *)(unsigned long)(out_resp->props_ptr);
1546		prop_values = (uint64_t __user *)(unsigned long)(out_resp->prop_values_ptr);
1547		for (i = 0; i < connector->properties.count; i++) {
1548			if (put_user(connector->properties.ids[i],
1549				     prop_ptr + copied)) {
1550				ret = -EFAULT;
1551				goto out;
1552			}
1553
1554			if (put_user(connector->properties.values[i],
1555				     prop_values + copied)) {
1556				ret = -EFAULT;
1557				goto out;
1558			}
1559			copied++;
1560		}
1561	}
1562	out_resp->count_props = props_count;
1563
1564	if ((out_resp->count_encoders >= encoders_count) && encoders_count) {
1565		copied = 0;
1566		encoder_ptr = (uint32_t __user *)(unsigned long)(out_resp->encoders_ptr);
1567		for (i = 0; i < DRM_CONNECTOR_MAX_ENCODER; i++) {
1568			if (connector->encoder_ids[i] != 0) {
1569				if (put_user(connector->encoder_ids[i],
1570					     encoder_ptr + copied)) {
1571					ret = -EFAULT;
1572					goto out;
1573				}
1574				copied++;
1575			}
1576		}
1577	}
1578	out_resp->count_encoders = encoders_count;
1579
1580out:
1581	sx_xunlock(&dev->mode_config.mutex);
1582	return ret;
1583}
1584
1585int drm_mode_getencoder(struct drm_device *dev, void *data,
1586			struct drm_file *file_priv)
1587{
1588	struct drm_mode_get_encoder *enc_resp = data;
1589	struct drm_mode_object *obj;
1590	struct drm_encoder *encoder;
1591	int ret = 0;
1592
1593	if (!drm_core_check_feature(dev, DRIVER_MODESET))
1594		return -EINVAL;
1595
1596	sx_xlock(&dev->mode_config.mutex);
1597	obj = drm_mode_object_find(dev, enc_resp->encoder_id,
1598				   DRM_MODE_OBJECT_ENCODER);
1599	if (!obj) {
1600		ret = -EINVAL;
1601		goto out;
1602	}
1603	encoder = obj_to_encoder(obj);
1604
1605	if (encoder->crtc)
1606		enc_resp->crtc_id = encoder->crtc->base.id;
1607	else
1608		enc_resp->crtc_id = 0;
1609	enc_resp->encoder_type = encoder->encoder_type;
1610	enc_resp->encoder_id = encoder->base.id;
1611	enc_resp->possible_crtcs = encoder->possible_crtcs;
1612	enc_resp->possible_clones = encoder->possible_clones;
1613
1614out:
1615	sx_xunlock(&dev->mode_config.mutex);
1616	return ret;
1617}
1618
1619/**
1620 * drm_mode_getplane_res - get plane info
1621 * @dev: DRM device
1622 * @data: ioctl data
1623 * @file_priv: DRM file info
1624 *
1625 * LOCKING:
1626 * Takes mode config lock.
1627 *
1628 * Return an plane count and set of IDs.
1629 */
1630int drm_mode_getplane_res(struct drm_device *dev, void *data,
1631			    struct drm_file *file_priv)
1632{
1633	struct drm_mode_get_plane_res *plane_resp = data;
1634	struct drm_mode_config *config;
1635	struct drm_plane *plane;
1636	uint32_t __user *plane_ptr;
1637	int copied = 0, ret = 0;
1638
1639	if (!drm_core_check_feature(dev, DRIVER_MODESET))
1640		return -EINVAL;
1641
1642	sx_xlock(&dev->mode_config.mutex);
1643	config = &dev->mode_config;
1644
1645	/*
1646	 * This ioctl is called twice, once to determine how much space is
1647	 * needed, and the 2nd time to fill it.
1648	 */
1649	if (config->num_plane &&
1650	    (plane_resp->count_planes >= config->num_plane)) {
1651		plane_ptr = (uint32_t __user *)(unsigned long)plane_resp->plane_id_ptr;
1652
1653		list_for_each_entry(plane, &config->plane_list, head) {
1654			if (put_user(plane->base.id, plane_ptr + copied)) {
1655				ret = -EFAULT;
1656				goto out;
1657			}
1658			copied++;
1659		}
1660	}
1661	plane_resp->count_planes = config->num_plane;
1662
1663out:
1664	sx_xunlock(&dev->mode_config.mutex);
1665	return ret;
1666}
1667
1668/**
1669 * drm_mode_getplane - get plane info
1670 * @dev: DRM device
1671 * @data: ioctl data
1672 * @file_priv: DRM file info
1673 *
1674 * LOCKING:
1675 * Takes mode config lock.
1676 *
1677 * Return plane info, including formats supported, gamma size, any
1678 * current fb, etc.
1679 */
1680int drm_mode_getplane(struct drm_device *dev, void *data,
1681			struct drm_file *file_priv)
1682{
1683	struct drm_mode_get_plane *plane_resp = data;
1684	struct drm_mode_object *obj;
1685	struct drm_plane *plane;
1686	uint32_t __user *format_ptr;
1687	int ret = 0;
1688
1689	if (!drm_core_check_feature(dev, DRIVER_MODESET))
1690		return -EINVAL;
1691
1692	sx_xlock(&dev->mode_config.mutex);
1693	obj = drm_mode_object_find(dev, plane_resp->plane_id,
1694				   DRM_MODE_OBJECT_PLANE);
1695	if (!obj) {
1696		ret = -ENOENT;
1697		goto out;
1698	}
1699	plane = obj_to_plane(obj);
1700
1701	if (plane->crtc)
1702		plane_resp->crtc_id = plane->crtc->base.id;
1703	else
1704		plane_resp->crtc_id = 0;
1705
1706	if (plane->fb)
1707		plane_resp->fb_id = plane->fb->base.id;
1708	else
1709		plane_resp->fb_id = 0;
1710
1711	plane_resp->plane_id = plane->base.id;
1712	plane_resp->possible_crtcs = plane->possible_crtcs;
1713	plane_resp->gamma_size = plane->gamma_size;
1714
1715	/*
1716	 * This ioctl is called twice, once to determine how much space is
1717	 * needed, and the 2nd time to fill it.
1718	 */
1719	if (plane->format_count &&
1720	    (plane_resp->count_format_types >= plane->format_count)) {
1721		format_ptr = (uint32_t __user *)(unsigned long)plane_resp->format_type_ptr;
1722		if (copy_to_user(format_ptr,
1723				 plane->format_types,
1724				 sizeof(uint32_t) * plane->format_count)) {
1725			ret = -EFAULT;
1726			goto out;
1727		}
1728	}
1729	plane_resp->count_format_types = plane->format_count;
1730
1731out:
1732	sx_xunlock(&dev->mode_config.mutex);
1733	return ret;
1734}
1735
1736/**
1737 * drm_mode_setplane - set up or tear down an plane
1738 * @dev: DRM device
1739 * @data: ioctl data*
1740 * @file_prive: DRM file info
1741 *
1742 * LOCKING:
1743 * Takes mode config lock.
1744 *
1745 * Set plane info, including placement, fb, scaling, and other factors.
1746 * Or pass a NULL fb to disable.
1747 */
1748int drm_mode_setplane(struct drm_device *dev, void *data,
1749			struct drm_file *file_priv)
1750{
1751	struct drm_mode_set_plane *plane_req = data;
1752	struct drm_mode_object *obj;
1753	struct drm_plane *plane;
1754	struct drm_crtc *crtc;
1755	struct drm_framebuffer *fb;
1756	int ret = 0;
1757	unsigned int fb_width, fb_height;
1758	int i;
1759
1760	if (!drm_core_check_feature(dev, DRIVER_MODESET))
1761		return -EINVAL;
1762
1763	sx_xlock(&dev->mode_config.mutex);
1764
1765	/*
1766	 * First, find the plane, crtc, and fb objects.  If not available,
1767	 * we don't bother to call the driver.
1768	 */
1769	obj = drm_mode_object_find(dev, plane_req->plane_id,
1770				   DRM_MODE_OBJECT_PLANE);
1771	if (!obj) {
1772		DRM_DEBUG_KMS("Unknown plane ID %d\n",
1773			      plane_req->plane_id);
1774		ret = -ENOENT;
1775		goto out;
1776	}
1777	plane = obj_to_plane(obj);
1778
1779	/* No fb means shut it down */
1780	if (!plane_req->fb_id) {
1781		plane->funcs->disable_plane(plane);
1782		plane->crtc = NULL;
1783		plane->fb = NULL;
1784		goto out;
1785	}
1786
1787	obj = drm_mode_object_find(dev, plane_req->crtc_id,
1788				   DRM_MODE_OBJECT_CRTC);
1789	if (!obj) {
1790		DRM_DEBUG_KMS("Unknown crtc ID %d\n",
1791			      plane_req->crtc_id);
1792		ret = -ENOENT;
1793		goto out;
1794	}
1795	crtc = obj_to_crtc(obj);
1796
1797	obj = drm_mode_object_find(dev, plane_req->fb_id,
1798				   DRM_MODE_OBJECT_FB);
1799	if (!obj) {
1800		DRM_DEBUG_KMS("Unknown framebuffer ID %d\n",
1801			      plane_req->fb_id);
1802		ret = -ENOENT;
1803		goto out;
1804	}
1805	fb = obj_to_fb(obj);
1806
1807	/* Check whether this plane supports the fb pixel format. */
1808	for (i = 0; i < plane->format_count; i++)
1809		if (fb->pixel_format == plane->format_types[i])
1810			break;
1811	if (i == plane->format_count) {
1812		DRM_DEBUG_KMS("Invalid pixel format 0x%08x\n", fb->pixel_format);
1813		ret = -EINVAL;
1814		goto out;
1815	}
1816
1817	fb_width = fb->width << 16;
1818	fb_height = fb->height << 16;
1819
1820	/* Make sure source coordinates are inside the fb. */
1821	if (plane_req->src_w > fb_width ||
1822	    plane_req->src_x > fb_width - plane_req->src_w ||
1823	    plane_req->src_h > fb_height ||
1824	    plane_req->src_y > fb_height - plane_req->src_h) {
1825		DRM_DEBUG_KMS("Invalid source coordinates "
1826			      "%u.%06ux%u.%06u+%u.%06u+%u.%06u\n",
1827			      plane_req->src_w >> 16,
1828			      ((plane_req->src_w & 0xffff) * 15625) >> 10,
1829			      plane_req->src_h >> 16,
1830			      ((plane_req->src_h & 0xffff) * 15625) >> 10,
1831			      plane_req->src_x >> 16,
1832			      ((plane_req->src_x & 0xffff) * 15625) >> 10,
1833			      plane_req->src_y >> 16,
1834			      ((plane_req->src_y & 0xffff) * 15625) >> 10);
1835		ret = -ENOSPC;
1836		goto out;
1837	}
1838
1839	/* Give drivers some help against integer overflows */
1840	if (plane_req->crtc_w > INT_MAX ||
1841	    plane_req->crtc_x > INT_MAX - (int32_t) plane_req->crtc_w ||
1842	    plane_req->crtc_h > INT_MAX ||
1843	    plane_req->crtc_y > INT_MAX - (int32_t) plane_req->crtc_h) {
1844		DRM_DEBUG_KMS("Invalid CRTC coordinates %ux%u+%d+%d\n",
1845			      plane_req->crtc_w, plane_req->crtc_h,
1846			      plane_req->crtc_x, plane_req->crtc_y);
1847		ret = -ERANGE;
1848		goto out;
1849	}
1850
1851	ret = plane->funcs->update_plane(plane, crtc, fb,
1852					 plane_req->crtc_x, plane_req->crtc_y,
1853					 plane_req->crtc_w, plane_req->crtc_h,
1854					 plane_req->src_x, plane_req->src_y,
1855					 plane_req->src_w, plane_req->src_h);
1856	if (!ret) {
1857		plane->crtc = crtc;
1858		plane->fb = fb;
1859	}
1860
1861out:
1862	sx_xunlock(&dev->mode_config.mutex);
1863
1864	return ret;
1865}
1866
1867/**
1868 * drm_mode_setcrtc - set CRTC configuration
1869 * @inode: inode from the ioctl
1870 * @filp: file * from the ioctl
1871 * @cmd: cmd from ioctl
1872 * @arg: arg from ioctl
1873 *
1874 * LOCKING:
1875 * Takes mode config lock.
1876 *
1877 * Build a new CRTC configuration based on user request.
1878 *
1879 * Called by the user via ioctl.
1880 *
1881 * RETURNS:
1882 * Zero on success, errno on failure.
1883 */
1884int drm_mode_setcrtc(struct drm_device *dev, void *data,
1885		     struct drm_file *file_priv)
1886{
1887	struct drm_mode_config *config = &dev->mode_config;
1888	struct drm_mode_crtc *crtc_req = data;
1889	struct drm_mode_object *obj;
1890	struct drm_crtc *crtc;
1891	struct drm_connector **connector_set = NULL, *connector;
1892	struct drm_framebuffer *fb = NULL;
1893	struct drm_display_mode *mode = NULL;
1894	struct drm_mode_set set;
1895	uint32_t __user *set_connectors_ptr;
1896	int ret;
1897	int i;
1898
1899	if (!drm_core_check_feature(dev, DRIVER_MODESET))
1900		return -EINVAL;
1901
1902	/* For some reason crtc x/y offsets are signed internally. */
1903	if (crtc_req->x > INT_MAX || crtc_req->y > INT_MAX)
1904		return -ERANGE;
1905
1906	sx_xlock(&dev->mode_config.mutex);
1907	obj = drm_mode_object_find(dev, crtc_req->crtc_id,
1908				   DRM_MODE_OBJECT_CRTC);
1909	if (!obj) {
1910		DRM_DEBUG_KMS("Unknown CRTC ID %d\n", crtc_req->crtc_id);
1911		ret = -EINVAL;
1912		goto out;
1913	}
1914	crtc = obj_to_crtc(obj);
1915	DRM_DEBUG_KMS("[CRTC:%d]\n", crtc->base.id);
1916
1917	if (crtc_req->mode_valid) {
1918		int hdisplay, vdisplay;
1919		/* If we have a mode we need a framebuffer. */
1920		/* If we pass -1, set the mode with the currently bound fb */
1921		if (crtc_req->fb_id == -1) {
1922			if (!crtc->fb) {
1923				DRM_DEBUG_KMS("CRTC doesn't have current FB\n");
1924				ret = -EINVAL;
1925				goto out;
1926			}
1927			fb = crtc->fb;
1928		} else {
1929			obj = drm_mode_object_find(dev, crtc_req->fb_id,
1930						   DRM_MODE_OBJECT_FB);
1931			if (!obj) {
1932				DRM_DEBUG_KMS("Unknown FB ID%d\n",
1933						crtc_req->fb_id);
1934				ret = -EINVAL;
1935				goto out;
1936			}
1937			fb = obj_to_fb(obj);
1938		}
1939
1940		mode = drm_mode_create(dev);
1941		if (!mode) {
1942			ret = -ENOMEM;
1943			goto out;
1944		}
1945
1946		ret = drm_crtc_convert_umode(mode, &crtc_req->mode);
1947		if (ret) {
1948			DRM_DEBUG_KMS("Invalid mode\n");
1949			goto out;
1950		}
1951
1952		drm_mode_set_crtcinfo(mode, CRTC_INTERLACE_HALVE_V);
1953
1954		hdisplay = mode->hdisplay;
1955		vdisplay = mode->vdisplay;
1956
1957		if (crtc->invert_dimensions) {
1958			int tmp;
1959			tmp = vdisplay;
1960			vdisplay = hdisplay;
1961			hdisplay = tmp;
1962		}
1963
1964		if (hdisplay > fb->width ||
1965		    vdisplay > fb->height ||
1966		    crtc_req->x > fb->width - hdisplay ||
1967		    crtc_req->y > fb->height - vdisplay) {
1968			DRM_DEBUG_KMS("Invalid fb size %ux%u for CRTC viewport %ux%u+%d+%d%s.\n",
1969				      fb->width, fb->height,
1970				      hdisplay, vdisplay, crtc_req->x, crtc_req->y,
1971				      crtc->invert_dimensions ? " (inverted)" : "");
1972			ret = -ENOSPC;
1973			goto out;
1974		}
1975	}
1976
1977	if (crtc_req->count_connectors == 0 && mode) {
1978		DRM_DEBUG_KMS("Count connectors is 0 but mode set\n");
1979		ret = -EINVAL;
1980		goto out;
1981	}
1982
1983	if (crtc_req->count_connectors > 0 && (!mode || !fb)) {
1984		DRM_DEBUG_KMS("Count connectors is %d but no mode or fb set\n",
1985			  crtc_req->count_connectors);
1986		ret = -EINVAL;
1987		goto out;
1988	}
1989
1990	if (crtc_req->count_connectors > 0) {
1991		u32 out_id;
1992
1993		/* Avoid unbounded kernel memory allocation */
1994		if (crtc_req->count_connectors > config->num_connector) {
1995			ret = -EINVAL;
1996			goto out;
1997		}
1998
1999		connector_set = malloc(crtc_req->count_connectors *
2000					sizeof(struct drm_connector *),
2001					DRM_MEM_KMS, M_WAITOK);
2002		if (!connector_set) {
2003			ret = -ENOMEM;
2004			goto out;
2005		}
2006
2007		for (i = 0; i < crtc_req->count_connectors; i++) {
2008			set_connectors_ptr = (uint32_t __user *)(unsigned long)crtc_req->set_connectors_ptr;
2009			if (get_user(out_id, &set_connectors_ptr[i])) {
2010				ret = -EFAULT;
2011				goto out;
2012			}
2013
2014			obj = drm_mode_object_find(dev, out_id,
2015						   DRM_MODE_OBJECT_CONNECTOR);
2016			if (!obj) {
2017				DRM_DEBUG_KMS("Connector id %d unknown\n",
2018						out_id);
2019				ret = -EINVAL;
2020				goto out;
2021			}
2022			connector = obj_to_connector(obj);
2023			DRM_DEBUG_KMS("[CONNECTOR:%d:%s]\n",
2024					connector->base.id,
2025					drm_get_connector_name(connector));
2026
2027			connector_set[i] = connector;
2028		}
2029	}
2030
2031	set.crtc = crtc;
2032	set.x = crtc_req->x;
2033	set.y = crtc_req->y;
2034	set.mode = mode;
2035	set.connectors = connector_set;
2036	set.num_connectors = crtc_req->count_connectors;
2037	set.fb = fb;
2038	ret = crtc->funcs->set_config(&set);
2039
2040out:
2041	free(connector_set, DRM_MEM_KMS);
2042	drm_mode_destroy(dev, mode);
2043	sx_xunlock(&dev->mode_config.mutex);
2044	return ret;
2045}
2046
2047int drm_mode_cursor_ioctl(struct drm_device *dev,
2048			void *data, struct drm_file *file_priv)
2049{
2050	struct drm_mode_cursor *req = data;
2051	struct drm_mode_object *obj;
2052	struct drm_crtc *crtc;
2053	int ret = 0;
2054
2055	if (!drm_core_check_feature(dev, DRIVER_MODESET))
2056		return -EINVAL;
2057
2058	if (!req->flags || (~DRM_MODE_CURSOR_FLAGS & req->flags))
2059		return -EINVAL;
2060
2061	sx_xlock(&dev->mode_config.mutex);
2062	obj = drm_mode_object_find(dev, req->crtc_id, DRM_MODE_OBJECT_CRTC);
2063	if (!obj) {
2064		DRM_DEBUG_KMS("Unknown CRTC ID %d\n", req->crtc_id);
2065		ret = -EINVAL;
2066		goto out;
2067	}
2068	crtc = obj_to_crtc(obj);
2069
2070	if (req->flags & DRM_MODE_CURSOR_BO) {
2071		if (!crtc->funcs->cursor_set) {
2072			ret = -ENXIO;
2073			goto out;
2074		}
2075		/* Turns off the cursor if handle is 0 */
2076		ret = crtc->funcs->cursor_set(crtc, file_priv, req->handle,
2077					      req->width, req->height);
2078	}
2079
2080	if (req->flags & DRM_MODE_CURSOR_MOVE) {
2081		if (crtc->funcs->cursor_move) {
2082			ret = crtc->funcs->cursor_move(crtc, req->x, req->y);
2083		} else {
2084			ret = -EFAULT;
2085			goto out;
2086		}
2087	}
2088out:
2089	sx_xunlock(&dev->mode_config.mutex);
2090	return ret;
2091}
2092
2093/* Original addfb only supported RGB formats, so figure out which one */
2094uint32_t drm_mode_legacy_fb_format(uint32_t bpp, uint32_t depth)
2095{
2096	uint32_t fmt;
2097
2098	switch (bpp) {
2099	case 8:
2100		fmt = DRM_FORMAT_C8;
2101		break;
2102	case 16:
2103		if (depth == 15)
2104			fmt = DRM_FORMAT_XRGB1555;
2105		else
2106			fmt = DRM_FORMAT_RGB565;
2107		break;
2108	case 24:
2109		fmt = DRM_FORMAT_RGB888;
2110		break;
2111	case 32:
2112		if (depth == 24)
2113			fmt = DRM_FORMAT_XRGB8888;
2114		else if (depth == 30)
2115			fmt = DRM_FORMAT_XRGB2101010;
2116		else
2117			fmt = DRM_FORMAT_ARGB8888;
2118		break;
2119	default:
2120		DRM_ERROR("bad bpp, assuming x8r8g8b8 pixel format\n");
2121		fmt = DRM_FORMAT_XRGB8888;
2122		break;
2123	}
2124
2125	return fmt;
2126}
2127EXPORT_SYMBOL(drm_mode_legacy_fb_format);
2128
2129/**
2130 * drm_mode_addfb - add an FB to the graphics configuration
2131 * @inode: inode from the ioctl
2132 * @filp: file * from the ioctl
2133 * @cmd: cmd from ioctl
2134 * @arg: arg from ioctl
2135 *
2136 * LOCKING:
2137 * Takes mode config lock.
2138 *
2139 * Add a new FB to the specified CRTC, given a user request.
2140 *
2141 * Called by the user via ioctl.
2142 *
2143 * RETURNS:
2144 * Zero on success, errno on failure.
2145 */
2146int drm_mode_addfb(struct drm_device *dev,
2147		   void *data, struct drm_file *file_priv)
2148{
2149	struct drm_mode_fb_cmd *or = data;
2150	struct drm_mode_fb_cmd2 r = {};
2151	struct drm_mode_config *config = &dev->mode_config;
2152	struct drm_framebuffer *fb;
2153	int ret = 0;
2154
2155	/* Use new struct with format internally */
2156	r.fb_id = or->fb_id;
2157	r.width = or->width;
2158	r.height = or->height;
2159	r.pitches[0] = or->pitch;
2160	r.pixel_format = drm_mode_legacy_fb_format(or->bpp, or->depth);
2161	r.handles[0] = or->handle;
2162
2163	if (!drm_core_check_feature(dev, DRIVER_MODESET))
2164		return -EINVAL;
2165
2166	if ((config->min_width > r.width) || (r.width > config->max_width))
2167		return -EINVAL;
2168
2169	if ((config->min_height > r.height) || (r.height > config->max_height))
2170		return -EINVAL;
2171
2172	sx_xlock(&dev->mode_config.mutex);
2173
2174	/* TODO check buffer is sufficiently large */
2175	/* TODO setup destructor callback */
2176
2177	ret = dev->mode_config.funcs->fb_create(dev, file_priv, &r, &fb);
2178	if (ret != 0) {
2179		DRM_DEBUG_KMS("could not create framebuffer\n");
2180		goto out;
2181	}
2182
2183	or->fb_id = fb->base.id;
2184	list_add(&fb->filp_head, &file_priv->fbs);
2185	DRM_DEBUG_KMS("[FB:%d]\n", fb->base.id);
2186
2187out:
2188	sx_xunlock(&dev->mode_config.mutex);
2189	return ret;
2190}
2191
2192static int format_check(const struct drm_mode_fb_cmd2 *r)
2193{
2194	uint32_t format = r->pixel_format & ~DRM_FORMAT_BIG_ENDIAN;
2195
2196	switch (format) {
2197	case DRM_FORMAT_C8:
2198	case DRM_FORMAT_RGB332:
2199	case DRM_FORMAT_BGR233:
2200	case DRM_FORMAT_XRGB4444:
2201	case DRM_FORMAT_XBGR4444:
2202	case DRM_FORMAT_RGBX4444:
2203	case DRM_FORMAT_BGRX4444:
2204	case DRM_FORMAT_ARGB4444:
2205	case DRM_FORMAT_ABGR4444:
2206	case DRM_FORMAT_RGBA4444:
2207	case DRM_FORMAT_BGRA4444:
2208	case DRM_FORMAT_XRGB1555:
2209	case DRM_FORMAT_XBGR1555:
2210	case DRM_FORMAT_RGBX5551:
2211	case DRM_FORMAT_BGRX5551:
2212	case DRM_FORMAT_ARGB1555:
2213	case DRM_FORMAT_ABGR1555:
2214	case DRM_FORMAT_RGBA5551:
2215	case DRM_FORMAT_BGRA5551:
2216	case DRM_FORMAT_RGB565:
2217	case DRM_FORMAT_BGR565:
2218	case DRM_FORMAT_RGB888:
2219	case DRM_FORMAT_BGR888:
2220	case DRM_FORMAT_XRGB8888:
2221	case DRM_FORMAT_XBGR8888:
2222	case DRM_FORMAT_RGBX8888:
2223	case DRM_FORMAT_BGRX8888:
2224	case DRM_FORMAT_ARGB8888:
2225	case DRM_FORMAT_ABGR8888:
2226	case DRM_FORMAT_RGBA8888:
2227	case DRM_FORMAT_BGRA8888:
2228	case DRM_FORMAT_XRGB2101010:
2229	case DRM_FORMAT_XBGR2101010:
2230	case DRM_FORMAT_RGBX1010102:
2231	case DRM_FORMAT_BGRX1010102:
2232	case DRM_FORMAT_ARGB2101010:
2233	case DRM_FORMAT_ABGR2101010:
2234	case DRM_FORMAT_RGBA1010102:
2235	case DRM_FORMAT_BGRA1010102:
2236	case DRM_FORMAT_YUYV:
2237	case DRM_FORMAT_YVYU:
2238	case DRM_FORMAT_UYVY:
2239	case DRM_FORMAT_VYUY:
2240	case DRM_FORMAT_AYUV:
2241	case DRM_FORMAT_NV12:
2242	case DRM_FORMAT_NV21:
2243	case DRM_FORMAT_NV16:
2244	case DRM_FORMAT_NV61:
2245	case DRM_FORMAT_NV24:
2246	case DRM_FORMAT_NV42:
2247	case DRM_FORMAT_YUV410:
2248	case DRM_FORMAT_YVU410:
2249	case DRM_FORMAT_YUV411:
2250	case DRM_FORMAT_YVU411:
2251	case DRM_FORMAT_YUV420:
2252	case DRM_FORMAT_YVU420:
2253	case DRM_FORMAT_YUV422:
2254	case DRM_FORMAT_YVU422:
2255	case DRM_FORMAT_YUV444:
2256	case DRM_FORMAT_YVU444:
2257		return 0;
2258	default:
2259		return -EINVAL;
2260	}
2261}
2262
2263static int framebuffer_check(const struct drm_mode_fb_cmd2 *r)
2264{
2265	int ret, hsub, vsub, num_planes, i;
2266
2267	ret = format_check(r);
2268	if (ret) {
2269		DRM_DEBUG_KMS("bad framebuffer format 0x%08x\n", r->pixel_format);
2270		return ret;
2271	}
2272
2273	hsub = drm_format_horz_chroma_subsampling(r->pixel_format);
2274	vsub = drm_format_vert_chroma_subsampling(r->pixel_format);
2275	num_planes = drm_format_num_planes(r->pixel_format);
2276
2277	if (r->width == 0 || r->width % hsub) {
2278		DRM_DEBUG_KMS("bad framebuffer width %u\n", r->height);
2279		return -EINVAL;
2280	}
2281
2282	if (r->height == 0 || r->height % vsub) {
2283		DRM_DEBUG_KMS("bad framebuffer height %u\n", r->height);
2284		return -EINVAL;
2285	}
2286
2287	for (i = 0; i < num_planes; i++) {
2288		unsigned int width = r->width / (i != 0 ? hsub : 1);
2289		unsigned int height = r->height / (i != 0 ? vsub : 1);
2290		unsigned int cpp = drm_format_plane_cpp(r->pixel_format, i);
2291
2292		if (!r->handles[i]) {
2293			DRM_DEBUG_KMS("no buffer object handle for plane %d\n", i);
2294			return -EINVAL;
2295		}
2296
2297		if ((uint64_t) width * cpp > UINT_MAX)
2298			return -ERANGE;
2299
2300		if ((uint64_t) height * r->pitches[i] + r->offsets[i] > UINT_MAX)
2301			return -ERANGE;
2302
2303		if (r->pitches[i] < width * cpp) {
2304			DRM_DEBUG_KMS("bad pitch %u for plane %d\n", r->pitches[i], i);
2305			return -EINVAL;
2306		}
2307	}
2308
2309	return 0;
2310}
2311
2312/**
2313 * drm_mode_addfb2 - add an FB to the graphics configuration
2314 * @inode: inode from the ioctl
2315 * @filp: file * from the ioctl
2316 * @cmd: cmd from ioctl
2317 * @arg: arg from ioctl
2318 *
2319 * LOCKING:
2320 * Takes mode config lock.
2321 *
2322 * Add a new FB to the specified CRTC, given a user request with format.
2323 *
2324 * Called by the user via ioctl.
2325 *
2326 * RETURNS:
2327 * Zero on success, errno on failure.
2328 */
2329int drm_mode_addfb2(struct drm_device *dev,
2330		    void *data, struct drm_file *file_priv)
2331{
2332	struct drm_mode_fb_cmd2 *r = data;
2333	struct drm_mode_config *config = &dev->mode_config;
2334	struct drm_framebuffer *fb;
2335	int ret;
2336
2337	if (!drm_core_check_feature(dev, DRIVER_MODESET))
2338		return -EINVAL;
2339
2340	if (r->flags & ~DRM_MODE_FB_INTERLACED) {
2341		DRM_DEBUG_KMS("bad framebuffer flags 0x%08x\n", r->flags);
2342		return -EINVAL;
2343	}
2344
2345	if ((config->min_width > r->width) || (r->width > config->max_width)) {
2346		DRM_DEBUG_KMS("bad framebuffer width %d, should be >= %d && <= %d\n",
2347			  r->width, config->min_width, config->max_width);
2348		return -EINVAL;
2349	}
2350	if ((config->min_height > r->height) || (r->height > config->max_height)) {
2351		DRM_DEBUG_KMS("bad framebuffer height %d, should be >= %d && <= %d\n",
2352			  r->height, config->min_height, config->max_height);
2353		return -EINVAL;
2354	}
2355
2356	ret = framebuffer_check(r);
2357	if (ret)
2358		return ret;
2359
2360	sx_xlock(&dev->mode_config.mutex);
2361
2362	ret = dev->mode_config.funcs->fb_create(dev, file_priv, r, &fb);
2363	if (ret != 0) {
2364		DRM_DEBUG_KMS("could not create framebuffer\n");
2365		goto out;
2366	}
2367
2368	r->fb_id = fb->base.id;
2369	list_add(&fb->filp_head, &file_priv->fbs);
2370	DRM_DEBUG_KMS("[FB:%d]\n", fb->base.id);
2371
2372out:
2373	sx_xunlock(&dev->mode_config.mutex);
2374	return ret;
2375}
2376
2377/**
2378 * drm_mode_rmfb - remove an FB from the configuration
2379 * @inode: inode from the ioctl
2380 * @filp: file * from the ioctl
2381 * @cmd: cmd from ioctl
2382 * @arg: arg from ioctl
2383 *
2384 * LOCKING:
2385 * Takes mode config lock.
2386 *
2387 * Remove the FB specified by the user.
2388 *
2389 * Called by the user via ioctl.
2390 *
2391 * RETURNS:
2392 * Zero on success, errno on failure.
2393 */
2394int drm_mode_rmfb(struct drm_device *dev,
2395		   void *data, struct drm_file *file_priv)
2396{
2397	struct drm_mode_object *obj;
2398	struct drm_framebuffer *fb = NULL;
2399	struct drm_framebuffer *fbl = NULL;
2400	uint32_t *id = data;
2401	int ret = 0;
2402	int found = 0;
2403
2404	if (!drm_core_check_feature(dev, DRIVER_MODESET))
2405		return -EINVAL;
2406
2407	sx_xlock(&dev->mode_config.mutex);
2408	obj = drm_mode_object_find(dev, *id, DRM_MODE_OBJECT_FB);
2409	/* TODO check that we really get a framebuffer back. */
2410	if (!obj) {
2411		ret = -EINVAL;
2412		goto out;
2413	}
2414	fb = obj_to_fb(obj);
2415
2416	list_for_each_entry(fbl, &file_priv->fbs, filp_head)
2417		if (fb == fbl)
2418			found = 1;
2419
2420	if (!found) {
2421		ret = -EINVAL;
2422		goto out;
2423	}
2424
2425	drm_framebuffer_remove(fb);
2426
2427out:
2428	sx_xunlock(&dev->mode_config.mutex);
2429	return ret;
2430}
2431
2432/**
2433 * drm_mode_getfb - get FB info
2434 * @inode: inode from the ioctl
2435 * @filp: file * from the ioctl
2436 * @cmd: cmd from ioctl
2437 * @arg: arg from ioctl
2438 *
2439 * LOCKING:
2440 * Takes mode config lock.
2441 *
2442 * Lookup the FB given its ID and return info about it.
2443 *
2444 * Called by the user via ioctl.
2445 *
2446 * RETURNS:
2447 * Zero on success, errno on failure.
2448 */
2449int drm_mode_getfb(struct drm_device *dev,
2450		   void *data, struct drm_file *file_priv)
2451{
2452	struct drm_mode_fb_cmd *r = data;
2453	struct drm_mode_object *obj;
2454	struct drm_framebuffer *fb;
2455	int ret = 0;
2456
2457	if (!drm_core_check_feature(dev, DRIVER_MODESET))
2458		return -EINVAL;
2459
2460	sx_xlock(&dev->mode_config.mutex);
2461	obj = drm_mode_object_find(dev, r->fb_id, DRM_MODE_OBJECT_FB);
2462	if (!obj) {
2463		ret = -EINVAL;
2464		goto out;
2465	}
2466	fb = obj_to_fb(obj);
2467
2468	r->height = fb->height;
2469	r->width = fb->width;
2470	r->depth = fb->depth;
2471	r->bpp = fb->bits_per_pixel;
2472	r->pitch = fb->pitches[0];
2473	r->handle = 0;
2474	fb->funcs->create_handle(fb, file_priv, &r->handle);
2475
2476out:
2477	sx_xunlock(&dev->mode_config.mutex);
2478	return ret;
2479}
2480
2481int drm_mode_dirtyfb_ioctl(struct drm_device *dev,
2482			   void *data, struct drm_file *file_priv)
2483{
2484	struct drm_clip_rect __user *clips_ptr;
2485	struct drm_clip_rect *clips = NULL;
2486	struct drm_mode_fb_dirty_cmd *r = data;
2487	struct drm_mode_object *obj;
2488	struct drm_framebuffer *fb;
2489	unsigned flags;
2490	int num_clips;
2491	int ret;
2492
2493	if (!drm_core_check_feature(dev, DRIVER_MODESET))
2494		return -EINVAL;
2495
2496	sx_xlock(&dev->mode_config.mutex);
2497	obj = drm_mode_object_find(dev, r->fb_id, DRM_MODE_OBJECT_FB);
2498	if (!obj) {
2499		ret = -EINVAL;
2500		goto out_err1;
2501	}
2502	fb = obj_to_fb(obj);
2503
2504	num_clips = r->num_clips;
2505	clips_ptr = (struct drm_clip_rect __user *)(unsigned long)r->clips_ptr;
2506
2507	if (!num_clips != !clips_ptr) {
2508		ret = -EINVAL;
2509		goto out_err1;
2510	}
2511
2512	flags = DRM_MODE_FB_DIRTY_FLAGS & r->flags;
2513
2514	/* If userspace annotates copy, clips must come in pairs */
2515	if (flags & DRM_MODE_FB_DIRTY_ANNOTATE_COPY && (num_clips % 2)) {
2516		ret = -EINVAL;
2517		goto out_err1;
2518	}
2519
2520	if (num_clips && clips_ptr) {
2521		if (num_clips < 0 || num_clips > DRM_MODE_FB_DIRTY_MAX_CLIPS) {
2522			ret = -EINVAL;
2523			goto out_err1;
2524		}
2525		clips = malloc(num_clips * sizeof(*clips), DRM_MEM_KMS,
2526		    M_WAITOK | M_ZERO);
2527		if (!clips) {
2528			ret = -ENOMEM;
2529			goto out_err1;
2530		}
2531
2532		ret = copy_from_user(clips, clips_ptr,
2533				     num_clips * sizeof(*clips));
2534		if (ret) {
2535			ret = -EFAULT;
2536			goto out_err2;
2537		}
2538	}
2539
2540	if (fb->funcs->dirty) {
2541		ret = fb->funcs->dirty(fb, file_priv, flags, r->color,
2542				       clips, num_clips);
2543	} else {
2544		ret = -ENOSYS;
2545		goto out_err2;
2546	}
2547
2548out_err2:
2549	free(clips, DRM_MEM_KMS);
2550out_err1:
2551	sx_xunlock(&dev->mode_config.mutex);
2552	return ret;
2553}
2554
2555
2556/**
2557 * drm_fb_release - remove and free the FBs on this file
2558 * @filp: file * from the ioctl
2559 *
2560 * LOCKING:
2561 * Takes mode config lock.
2562 *
2563 * Destroy all the FBs associated with @filp.
2564 *
2565 * Called by the user via ioctl.
2566 *
2567 * RETURNS:
2568 * Zero on success, errno on failure.
2569 */
2570void drm_fb_release(struct drm_file *priv)
2571{
2572	struct drm_device *dev = priv->minor->dev;
2573	struct drm_framebuffer *fb, *tfb;
2574
2575	sx_xlock(&dev->mode_config.mutex);
2576	list_for_each_entry_safe(fb, tfb, &priv->fbs, filp_head) {
2577		drm_framebuffer_remove(fb);
2578	}
2579	sx_xunlock(&dev->mode_config.mutex);
2580}
2581
2582/**
2583 * drm_mode_attachmode - add a mode to the user mode list
2584 * @dev: DRM device
2585 * @connector: connector to add the mode to
2586 * @mode: mode to add
2587 *
2588 * Add @mode to @connector's user mode list.
2589 */
2590static void drm_mode_attachmode(struct drm_device *dev,
2591				struct drm_connector *connector,
2592				struct drm_display_mode *mode)
2593{
2594	list_add_tail(&mode->head, &connector->user_modes);
2595}
2596
2597int drm_mode_attachmode_crtc(struct drm_device *dev, struct drm_crtc *crtc,
2598			     const struct drm_display_mode *mode)
2599{
2600	struct drm_connector *connector;
2601	int ret = 0;
2602	struct drm_display_mode *dup_mode, *next;
2603	DRM_LIST_HEAD(list);
2604
2605	list_for_each_entry(connector, &dev->mode_config.connector_list, head) {
2606		if (!connector->encoder)
2607			continue;
2608		if (connector->encoder->crtc == crtc) {
2609			dup_mode = drm_mode_duplicate(dev, mode);
2610			if (!dup_mode) {
2611				ret = -ENOMEM;
2612				goto out;
2613			}
2614			list_add_tail(&dup_mode->head, &list);
2615		}
2616	}
2617
2618	list_for_each_entry(connector, &dev->mode_config.connector_list, head) {
2619		if (!connector->encoder)
2620			continue;
2621		if (connector->encoder->crtc == crtc)
2622			list_move_tail(list.next, &connector->user_modes);
2623	}
2624
2625	MPASS(!list_empty(&list));
2626
2627 out:
2628	list_for_each_entry_safe(dup_mode, next, &list, head)
2629		drm_mode_destroy(dev, dup_mode);
2630
2631	return ret;
2632}
2633EXPORT_SYMBOL(drm_mode_attachmode_crtc);
2634
2635static int drm_mode_detachmode(struct drm_device *dev,
2636			       struct drm_connector *connector,
2637			       struct drm_display_mode *mode)
2638{
2639	int found = 0;
2640	int ret = 0;
2641	struct drm_display_mode *match_mode, *t;
2642
2643	list_for_each_entry_safe(match_mode, t, &connector->user_modes, head) {
2644		if (drm_mode_equal(match_mode, mode)) {
2645			list_del(&match_mode->head);
2646			drm_mode_destroy(dev, match_mode);
2647			found = 1;
2648			break;
2649		}
2650	}
2651
2652	if (!found)
2653		ret = -EINVAL;
2654
2655	return ret;
2656}
2657
2658int drm_mode_detachmode_crtc(struct drm_device *dev, struct drm_display_mode *mode)
2659{
2660	struct drm_connector *connector;
2661
2662	list_for_each_entry(connector, &dev->mode_config.connector_list, head) {
2663		drm_mode_detachmode(dev, connector, mode);
2664	}
2665	return 0;
2666}
2667EXPORT_SYMBOL(drm_mode_detachmode_crtc);
2668
2669/**
2670 * drm_fb_attachmode - Attach a user mode to an connector
2671 * @inode: inode from the ioctl
2672 * @filp: file * from the ioctl
2673 * @cmd: cmd from ioctl
2674 * @arg: arg from ioctl
2675 *
2676 * This attaches a user specified mode to an connector.
2677 * Called by the user via ioctl.
2678 *
2679 * RETURNS:
2680 * Zero on success, errno on failure.
2681 */
2682int drm_mode_attachmode_ioctl(struct drm_device *dev,
2683			      void *data, struct drm_file *file_priv)
2684{
2685	struct drm_mode_mode_cmd *mode_cmd = data;
2686	struct drm_connector *connector;
2687	struct drm_display_mode *mode;
2688	struct drm_mode_object *obj;
2689	struct drm_mode_modeinfo *umode = &mode_cmd->mode;
2690	int ret;
2691
2692	if (!drm_core_check_feature(dev, DRIVER_MODESET))
2693		return -EINVAL;
2694
2695	sx_xlock(&dev->mode_config.mutex);
2696
2697	obj = drm_mode_object_find(dev, mode_cmd->connector_id, DRM_MODE_OBJECT_CONNECTOR);
2698	if (!obj) {
2699		ret = -EINVAL;
2700		goto out;
2701	}
2702	connector = obj_to_connector(obj);
2703
2704	mode = drm_mode_create(dev);
2705	if (!mode) {
2706		ret = -ENOMEM;
2707		goto out;
2708	}
2709
2710	ret = drm_crtc_convert_umode(mode, umode);
2711	if (ret) {
2712		DRM_DEBUG_KMS("Invalid mode\n");
2713		drm_mode_destroy(dev, mode);
2714		goto out;
2715	}
2716
2717	drm_mode_attachmode(dev, connector, mode);
2718out:
2719	sx_xunlock(&dev->mode_config.mutex);
2720	return ret;
2721}
2722
2723
2724/**
2725 * drm_fb_detachmode - Detach a user specified mode from an connector
2726 * @inode: inode from the ioctl
2727 * @filp: file * from the ioctl
2728 * @cmd: cmd from ioctl
2729 * @arg: arg from ioctl
2730 *
2731 * Called by the user via ioctl.
2732 *
2733 * RETURNS:
2734 * Zero on success, errno on failure.
2735 */
2736int drm_mode_detachmode_ioctl(struct drm_device *dev,
2737			      void *data, struct drm_file *file_priv)
2738{
2739	struct drm_mode_object *obj;
2740	struct drm_mode_mode_cmd *mode_cmd = data;
2741	struct drm_connector *connector;
2742	struct drm_display_mode mode;
2743	struct drm_mode_modeinfo *umode = &mode_cmd->mode;
2744	int ret;
2745
2746	if (!drm_core_check_feature(dev, DRIVER_MODESET))
2747		return -EINVAL;
2748
2749	sx_xlock(&dev->mode_config.mutex);
2750
2751	obj = drm_mode_object_find(dev, mode_cmd->connector_id, DRM_MODE_OBJECT_CONNECTOR);
2752	if (!obj) {
2753		ret = -EINVAL;
2754		goto out;
2755	}
2756	connector = obj_to_connector(obj);
2757
2758	ret = drm_crtc_convert_umode(&mode, umode);
2759	if (ret) {
2760		DRM_DEBUG_KMS("Invalid mode\n");
2761		goto out;
2762	}
2763
2764	ret = drm_mode_detachmode(dev, connector, &mode);
2765out:
2766	sx_xunlock(&dev->mode_config.mutex);
2767	return ret;
2768}
2769
2770struct drm_property *drm_property_create(struct drm_device *dev, int flags,
2771					 const char *name, int num_values)
2772{
2773	struct drm_property *property = NULL;
2774	int ret;
2775
2776	property = malloc(sizeof(struct drm_property), DRM_MEM_KMS,
2777	    M_WAITOK | M_ZERO);
2778	if (!property)
2779		return NULL;
2780
2781	if (num_values) {
2782		property->values = malloc(sizeof(uint64_t)*num_values, DRM_MEM_KMS,
2783		    M_WAITOK | M_ZERO);
2784		if (!property->values)
2785			goto fail;
2786	}
2787
2788	ret = drm_mode_object_get(dev, &property->base, DRM_MODE_OBJECT_PROPERTY);
2789	if (ret)
2790		goto fail;
2791
2792	property->flags = flags;
2793	property->num_values = num_values;
2794	INIT_LIST_HEAD(&property->enum_blob_list);
2795
2796	if (name) {
2797		strncpy(property->name, name, DRM_PROP_NAME_LEN);
2798		property->name[DRM_PROP_NAME_LEN-1] = '\0';
2799	}
2800
2801	list_add_tail(&property->head, &dev->mode_config.property_list);
2802	return property;
2803fail:
2804	free(property->values, DRM_MEM_KMS);
2805	free(property, DRM_MEM_KMS);
2806	return NULL;
2807}
2808EXPORT_SYMBOL(drm_property_create);
2809
2810struct drm_property *drm_property_create_enum(struct drm_device *dev, int flags,
2811					 const char *name,
2812					 const struct drm_prop_enum_list *props,
2813					 int num_values)
2814{
2815	struct drm_property *property;
2816	int i, ret;
2817
2818	flags |= DRM_MODE_PROP_ENUM;
2819
2820	property = drm_property_create(dev, flags, name, num_values);
2821	if (!property)
2822		return NULL;
2823
2824	for (i = 0; i < num_values; i++) {
2825		ret = drm_property_add_enum(property, i,
2826				      props[i].type,
2827				      props[i].name);
2828		if (ret) {
2829			drm_property_destroy(dev, property);
2830			return NULL;
2831		}
2832	}
2833
2834	return property;
2835}
2836EXPORT_SYMBOL(drm_property_create_enum);
2837
2838struct drm_property *drm_property_create_bitmask(struct drm_device *dev,
2839					 int flags, const char *name,
2840					 const struct drm_prop_enum_list *props,
2841					 int num_values)
2842{
2843	struct drm_property *property;
2844	int i, ret;
2845
2846	flags |= DRM_MODE_PROP_BITMASK;
2847
2848	property = drm_property_create(dev, flags, name, num_values);
2849	if (!property)
2850		return NULL;
2851
2852	for (i = 0; i < num_values; i++) {
2853		ret = drm_property_add_enum(property, i,
2854				      props[i].type,
2855				      props[i].name);
2856		if (ret) {
2857			drm_property_destroy(dev, property);
2858			return NULL;
2859		}
2860	}
2861
2862	return property;
2863}
2864EXPORT_SYMBOL(drm_property_create_bitmask);
2865
2866struct drm_property *drm_property_create_range(struct drm_device *dev, int flags,
2867					 const char *name,
2868					 uint64_t min, uint64_t max)
2869{
2870	struct drm_property *property;
2871
2872	flags |= DRM_MODE_PROP_RANGE;
2873
2874	property = drm_property_create(dev, flags, name, 2);
2875	if (!property)
2876		return NULL;
2877
2878	property->values[0] = min;
2879	property->values[1] = max;
2880
2881	return property;
2882}
2883EXPORT_SYMBOL(drm_property_create_range);
2884
2885int drm_property_add_enum(struct drm_property *property, int index,
2886			  uint64_t value, const char *name)
2887{
2888	struct drm_property_enum *prop_enum;
2889
2890	if (!(property->flags & (DRM_MODE_PROP_ENUM | DRM_MODE_PROP_BITMASK)))
2891		return -EINVAL;
2892
2893	/*
2894	 * Bitmask enum properties have the additional constraint of values
2895	 * from 0 to 63
2896	 */
2897	if ((property->flags & DRM_MODE_PROP_BITMASK) && (value > 63))
2898		return -EINVAL;
2899
2900	if (!list_empty(&property->enum_blob_list)) {
2901		list_for_each_entry(prop_enum, &property->enum_blob_list, head) {
2902			if (prop_enum->value == value) {
2903				strncpy(prop_enum->name, name, DRM_PROP_NAME_LEN);
2904				prop_enum->name[DRM_PROP_NAME_LEN-1] = '\0';
2905				return 0;
2906			}
2907		}
2908	}
2909
2910	prop_enum = malloc(sizeof(struct drm_property_enum), DRM_MEM_KMS,
2911	    M_WAITOK | M_ZERO);
2912	if (!prop_enum)
2913		return -ENOMEM;
2914
2915	strncpy(prop_enum->name, name, DRM_PROP_NAME_LEN);
2916	prop_enum->name[DRM_PROP_NAME_LEN-1] = '\0';
2917	prop_enum->value = value;
2918
2919	property->values[index] = value;
2920	list_add_tail(&prop_enum->head, &property->enum_blob_list);
2921	return 0;
2922}
2923EXPORT_SYMBOL(drm_property_add_enum);
2924
2925void drm_property_destroy(struct drm_device *dev, struct drm_property *property)
2926{
2927	struct drm_property_enum *prop_enum, *pt;
2928
2929	list_for_each_entry_safe(prop_enum, pt, &property->enum_blob_list, head) {
2930		list_del(&prop_enum->head);
2931		free(prop_enum, DRM_MEM_KMS);
2932	}
2933
2934	if (property->num_values)
2935		free(property->values, DRM_MEM_KMS);
2936	drm_mode_object_put(dev, &property->base);
2937	list_del(&property->head);
2938	free(property, DRM_MEM_KMS);
2939}
2940EXPORT_SYMBOL(drm_property_destroy);
2941
2942void drm_object_attach_property(struct drm_mode_object *obj,
2943				struct drm_property *property,
2944				uint64_t init_val)
2945{
2946	int count = obj->properties->count;
2947
2948	if (count == DRM_OBJECT_MAX_PROPERTY) {
2949		DRM_WARNING("Failed to attach object property (type: 0x%x). Please "
2950			"increase DRM_OBJECT_MAX_PROPERTY by 1 for each time "
2951			"you see this message on the same object type.\n",
2952			obj->type);
2953		return;
2954	}
2955
2956	obj->properties->ids[count] = property->base.id;
2957	obj->properties->values[count] = init_val;
2958	obj->properties->count++;
2959}
2960EXPORT_SYMBOL(drm_object_attach_property);
2961
2962int drm_object_property_set_value(struct drm_mode_object *obj,
2963				  struct drm_property *property, uint64_t val)
2964{
2965	int i;
2966
2967	for (i = 0; i < obj->properties->count; i++) {
2968		if (obj->properties->ids[i] == property->base.id) {
2969			obj->properties->values[i] = val;
2970			return 0;
2971		}
2972	}
2973
2974	return -EINVAL;
2975}
2976EXPORT_SYMBOL(drm_object_property_set_value);
2977
2978int drm_object_property_get_value(struct drm_mode_object *obj,
2979				  struct drm_property *property, uint64_t *val)
2980{
2981	int i;
2982
2983	for (i = 0; i < obj->properties->count; i++) {
2984		if (obj->properties->ids[i] == property->base.id) {
2985			*val = obj->properties->values[i];
2986			return 0;
2987		}
2988	}
2989
2990	return -EINVAL;
2991}
2992EXPORT_SYMBOL(drm_object_property_get_value);
2993
2994int drm_mode_getproperty_ioctl(struct drm_device *dev,
2995			       void *data, struct drm_file *file_priv)
2996{
2997	struct drm_mode_object *obj;
2998	struct drm_mode_get_property *out_resp = data;
2999	struct drm_property *property;
3000	int enum_count = 0;
3001	int blob_count = 0;
3002	int value_count = 0;
3003	int ret = 0, i;
3004	int copied;
3005	struct drm_property_enum *prop_enum;
3006	struct drm_mode_property_enum __user *enum_ptr;
3007	struct drm_property_blob *prop_blob;
3008	uint32_t __user *blob_id_ptr;
3009	uint64_t __user *values_ptr;
3010	uint32_t __user *blob_length_ptr;
3011
3012	if (!drm_core_check_feature(dev, DRIVER_MODESET))
3013		return -EINVAL;
3014
3015	sx_xlock(&dev->mode_config.mutex);
3016	obj = drm_mode_object_find(dev, out_resp->prop_id, DRM_MODE_OBJECT_PROPERTY);
3017	if (!obj) {
3018		ret = -EINVAL;
3019		goto done;
3020	}
3021	property = obj_to_property(obj);
3022
3023	if (property->flags & (DRM_MODE_PROP_ENUM | DRM_MODE_PROP_BITMASK)) {
3024		list_for_each_entry(prop_enum, &property->enum_blob_list, head)
3025			enum_count++;
3026	} else if (property->flags & DRM_MODE_PROP_BLOB) {
3027		list_for_each_entry(prop_blob, &property->enum_blob_list, head)
3028			blob_count++;
3029	}
3030
3031	value_count = property->num_values;
3032
3033	strncpy(out_resp->name, property->name, DRM_PROP_NAME_LEN);
3034	out_resp->name[DRM_PROP_NAME_LEN-1] = 0;
3035	out_resp->flags = property->flags;
3036
3037	if ((out_resp->count_values >= value_count) && value_count) {
3038		values_ptr = (uint64_t __user *)(unsigned long)out_resp->values_ptr;
3039		for (i = 0; i < value_count; i++) {
3040			if (copy_to_user(values_ptr + i, &property->values[i], sizeof(uint64_t))) {
3041				ret = -EFAULT;
3042				goto done;
3043			}
3044		}
3045	}
3046	out_resp->count_values = value_count;
3047
3048	if (property->flags & (DRM_MODE_PROP_ENUM | DRM_MODE_PROP_BITMASK)) {
3049		if ((out_resp->count_enum_blobs >= enum_count) && enum_count) {
3050			copied = 0;
3051			enum_ptr = (struct drm_mode_property_enum __user *)(unsigned long)out_resp->enum_blob_ptr;
3052			list_for_each_entry(prop_enum, &property->enum_blob_list, head) {
3053
3054				if (copy_to_user(&enum_ptr[copied].value, &prop_enum->value, sizeof(uint64_t))) {
3055					ret = -EFAULT;
3056					goto done;
3057				}
3058
3059				if (copy_to_user(&enum_ptr[copied].name,
3060						 &prop_enum->name, DRM_PROP_NAME_LEN)) {
3061					ret = -EFAULT;
3062					goto done;
3063				}
3064				copied++;
3065			}
3066		}
3067		out_resp->count_enum_blobs = enum_count;
3068	}
3069
3070	if (property->flags & DRM_MODE_PROP_BLOB) {
3071		if ((out_resp->count_enum_blobs >= blob_count) && blob_count) {
3072			copied = 0;
3073			blob_id_ptr = (uint32_t __user *)(unsigned long)out_resp->enum_blob_ptr;
3074			blob_length_ptr = (uint32_t __user *)(unsigned long)out_resp->values_ptr;
3075
3076			list_for_each_entry(prop_blob, &property->enum_blob_list, head) {
3077				if (put_user(prop_blob->base.id, blob_id_ptr + copied)) {
3078					ret = -EFAULT;
3079					goto done;
3080				}
3081
3082				if (put_user(prop_blob->length, blob_length_ptr + copied)) {
3083					ret = -EFAULT;
3084					goto done;
3085				}
3086
3087				copied++;
3088			}
3089		}
3090		out_resp->count_enum_blobs = blob_count;
3091	}
3092done:
3093	sx_xunlock(&dev->mode_config.mutex);
3094	return ret;
3095}
3096
3097static struct drm_property_blob *drm_property_create_blob(struct drm_device *dev, int length,
3098							  void *data)
3099{
3100	struct drm_property_blob *blob;
3101	int ret;
3102
3103	if (!length || !data)
3104		return NULL;
3105
3106	blob = malloc(sizeof(struct drm_property_blob)+length, DRM_MEM_KMS,
3107	    M_WAITOK | M_ZERO);
3108	if (!blob)
3109		return NULL;
3110
3111	ret = drm_mode_object_get(dev, &blob->base, DRM_MODE_OBJECT_BLOB);
3112	if (ret) {
3113		free(blob, DRM_MEM_KMS);
3114		return NULL;
3115	}
3116
3117	blob->length = length;
3118
3119	memcpy(blob->data, data, length);
3120
3121	list_add_tail(&blob->head, &dev->mode_config.property_blob_list);
3122	return blob;
3123}
3124
3125static void drm_property_destroy_blob(struct drm_device *dev,
3126			       struct drm_property_blob *blob)
3127{
3128	drm_mode_object_put(dev, &blob->base);
3129	list_del(&blob->head);
3130	free(blob, DRM_MEM_KMS);
3131}
3132
3133int drm_mode_getblob_ioctl(struct drm_device *dev,
3134			   void *data, struct drm_file *file_priv)
3135{
3136	struct drm_mode_object *obj;
3137	struct drm_mode_get_blob *out_resp = data;
3138	struct drm_property_blob *blob;
3139	int ret = 0;
3140	void __user *blob_ptr;
3141
3142	if (!drm_core_check_feature(dev, DRIVER_MODESET))
3143		return -EINVAL;
3144
3145	sx_xlock(&dev->mode_config.mutex);
3146	obj = drm_mode_object_find(dev, out_resp->blob_id, DRM_MODE_OBJECT_BLOB);
3147	if (!obj) {
3148		ret = -EINVAL;
3149		goto done;
3150	}
3151	blob = obj_to_blob(obj);
3152
3153	if (out_resp->length == blob->length) {
3154		blob_ptr = (void __user *)(unsigned long)out_resp->data;
3155		if (copy_to_user(blob_ptr, blob->data, blob->length)){
3156			ret = -EFAULT;
3157			goto done;
3158		}
3159	}
3160	out_resp->length = blob->length;
3161
3162done:
3163	sx_xunlock(&dev->mode_config.mutex);
3164	return ret;
3165}
3166
3167int drm_mode_connector_update_edid_property(struct drm_connector *connector,
3168					    struct edid *edid)
3169{
3170	struct drm_device *dev = connector->dev;
3171	int ret, size;
3172
3173	if (connector->edid_blob_ptr)
3174		drm_property_destroy_blob(dev, connector->edid_blob_ptr);
3175
3176	/* Delete edid, when there is none. */
3177	if (!edid) {
3178		connector->edid_blob_ptr = NULL;
3179		ret = drm_object_property_set_value(&connector->base, dev->mode_config.edid_property, 0);
3180		return ret;
3181	}
3182
3183	size = EDID_LENGTH * (1 + edid->extensions);
3184	connector->edid_blob_ptr = drm_property_create_blob(connector->dev,
3185							    size, edid);
3186	if (!connector->edid_blob_ptr)
3187		return -EINVAL;
3188
3189	ret = drm_object_property_set_value(&connector->base,
3190					       dev->mode_config.edid_property,
3191					       connector->edid_blob_ptr->base.id);
3192
3193	return ret;
3194}
3195EXPORT_SYMBOL(drm_mode_connector_update_edid_property);
3196
3197static bool drm_property_change_is_valid(struct drm_property *property,
3198					 uint64_t value)
3199{
3200	if (property->flags & DRM_MODE_PROP_IMMUTABLE)
3201		return false;
3202	if (property->flags & DRM_MODE_PROP_RANGE) {
3203		if (value < property->values[0] || value > property->values[1])
3204			return false;
3205		return true;
3206	} else if (property->flags & DRM_MODE_PROP_BITMASK) {
3207		int i;
3208		uint64_t valid_mask = 0;
3209		for (i = 0; i < property->num_values; i++)
3210			valid_mask |= (1ULL << property->values[i]);
3211		return !(value & ~valid_mask);
3212	} else if (property->flags & DRM_MODE_PROP_BLOB) {
3213		/* Only the driver knows */
3214		return true;
3215	} else {
3216		int i;
3217		for (i = 0; i < property->num_values; i++)
3218			if (property->values[i] == value)
3219				return true;
3220		return false;
3221	}
3222}
3223
3224int drm_mode_connector_property_set_ioctl(struct drm_device *dev,
3225				       void *data, struct drm_file *file_priv)
3226{
3227	struct drm_mode_connector_set_property *conn_set_prop = data;
3228	struct drm_mode_obj_set_property obj_set_prop = {
3229		.value = conn_set_prop->value,
3230		.prop_id = conn_set_prop->prop_id,
3231		.obj_id = conn_set_prop->connector_id,
3232		.obj_type = DRM_MODE_OBJECT_CONNECTOR
3233	};
3234
3235	/* It does all the locking and checking we need */
3236	return drm_mode_obj_set_property_ioctl(dev, &obj_set_prop, file_priv);
3237}
3238
3239static int drm_mode_connector_set_obj_prop(struct drm_mode_object *obj,
3240					   struct drm_property *property,
3241					   uint64_t value)
3242{
3243	int ret = -EINVAL;
3244	struct drm_connector *connector = obj_to_connector(obj);
3245
3246	/* Do DPMS ourselves */
3247	if (property == connector->dev->mode_config.dpms_property) {
3248		if (connector->funcs->dpms)
3249			(*connector->funcs->dpms)(connector, (int)value);
3250		ret = 0;
3251	} else if (connector->funcs->set_property)
3252		ret = connector->funcs->set_property(connector, property, value);
3253
3254	/* store the property value if successful */
3255	if (!ret)
3256		drm_object_property_set_value(&connector->base, property, value);
3257	return ret;
3258}
3259
3260static int drm_mode_crtc_set_obj_prop(struct drm_mode_object *obj,
3261				      struct drm_property *property,
3262				      uint64_t value)
3263{
3264	int ret = -EINVAL;
3265	struct drm_crtc *crtc = obj_to_crtc(obj);
3266
3267	if (crtc->funcs->set_property)
3268		ret = crtc->funcs->set_property(crtc, property, value);
3269	if (!ret)
3270		drm_object_property_set_value(obj, property, value);
3271
3272	return ret;
3273}
3274
3275static int drm_mode_plane_set_obj_prop(struct drm_mode_object *obj,
3276				      struct drm_property *property,
3277				      uint64_t value)
3278{
3279	int ret = -EINVAL;
3280	struct drm_plane *plane = obj_to_plane(obj);
3281
3282	if (plane->funcs->set_property)
3283		ret = plane->funcs->set_property(plane, property, value);
3284	if (!ret)
3285		drm_object_property_set_value(obj, property, value);
3286
3287	return ret;
3288}
3289
3290int drm_mode_obj_get_properties_ioctl(struct drm_device *dev, void *data,
3291				      struct drm_file *file_priv)
3292{
3293	struct drm_mode_obj_get_properties *arg = data;
3294	struct drm_mode_object *obj;
3295	int ret = 0;
3296	int i;
3297	int copied = 0;
3298	int props_count = 0;
3299	uint32_t __user *props_ptr;
3300	uint64_t __user *prop_values_ptr;
3301
3302	if (!drm_core_check_feature(dev, DRIVER_MODESET))
3303		return -EINVAL;
3304
3305	sx_xlock(&dev->mode_config.mutex);
3306
3307	obj = drm_mode_object_find(dev, arg->obj_id, arg->obj_type);
3308	if (!obj) {
3309		ret = -EINVAL;
3310		goto out;
3311	}
3312	if (!obj->properties) {
3313		ret = -EINVAL;
3314		goto out;
3315	}
3316
3317	props_count = obj->properties->count;
3318
3319	/* This ioctl is called twice, once to determine how much space is
3320	 * needed, and the 2nd time to fill it. */
3321	if ((arg->count_props >= props_count) && props_count) {
3322		copied = 0;
3323		props_ptr = (uint32_t __user *)(unsigned long)(arg->props_ptr);
3324		prop_values_ptr = (uint64_t __user *)(unsigned long)
3325				  (arg->prop_values_ptr);
3326		for (i = 0; i < props_count; i++) {
3327			if (put_user(obj->properties->ids[i],
3328				     props_ptr + copied)) {
3329				ret = -EFAULT;
3330				goto out;
3331			}
3332			if (put_user(obj->properties->values[i],
3333				     prop_values_ptr + copied)) {
3334				ret = -EFAULT;
3335				goto out;
3336			}
3337			copied++;
3338		}
3339	}
3340	arg->count_props = props_count;
3341out:
3342	sx_xunlock(&dev->mode_config.mutex);
3343	return ret;
3344}
3345
3346int drm_mode_obj_set_property_ioctl(struct drm_device *dev, void *data,
3347				    struct drm_file *file_priv)
3348{
3349	struct drm_mode_obj_set_property *arg = data;
3350	struct drm_mode_object *arg_obj;
3351	struct drm_mode_object *prop_obj;
3352	struct drm_property *property;
3353	int ret = -EINVAL;
3354	int i;
3355
3356	if (!drm_core_check_feature(dev, DRIVER_MODESET))
3357		return -EINVAL;
3358
3359	sx_xlock(&dev->mode_config.mutex);
3360
3361	arg_obj = drm_mode_object_find(dev, arg->obj_id, arg->obj_type);
3362	if (!arg_obj)
3363		goto out;
3364	if (!arg_obj->properties)
3365		goto out;
3366
3367	for (i = 0; i < arg_obj->properties->count; i++)
3368		if (arg_obj->properties->ids[i] == arg->prop_id)
3369			break;
3370
3371	if (i == arg_obj->properties->count)
3372		goto out;
3373
3374	prop_obj = drm_mode_object_find(dev, arg->prop_id,
3375					DRM_MODE_OBJECT_PROPERTY);
3376	if (!prop_obj)
3377		goto out;
3378	property = obj_to_property(prop_obj);
3379
3380	if (!drm_property_change_is_valid(property, arg->value))
3381		goto out;
3382
3383	switch (arg_obj->type) {
3384	case DRM_MODE_OBJECT_CONNECTOR:
3385		ret = drm_mode_connector_set_obj_prop(arg_obj, property,
3386						      arg->value);
3387		break;
3388	case DRM_MODE_OBJECT_CRTC:
3389		ret = drm_mode_crtc_set_obj_prop(arg_obj, property, arg->value);
3390		break;
3391	case DRM_MODE_OBJECT_PLANE:
3392		ret = drm_mode_plane_set_obj_prop(arg_obj, property, arg->value);
3393		break;
3394	}
3395
3396out:
3397	sx_xunlock(&dev->mode_config.mutex);
3398	return ret;
3399}
3400
3401int drm_mode_connector_attach_encoder(struct drm_connector *connector,
3402				      struct drm_encoder *encoder)
3403{
3404	int i;
3405
3406	for (i = 0; i < DRM_CONNECTOR_MAX_ENCODER; i++) {
3407		if (connector->encoder_ids[i] == 0) {
3408			connector->encoder_ids[i] = encoder->base.id;
3409			return 0;
3410		}
3411	}
3412	return -ENOMEM;
3413}
3414EXPORT_SYMBOL(drm_mode_connector_attach_encoder);
3415
3416void drm_mode_connector_detach_encoder(struct drm_connector *connector,
3417				    struct drm_encoder *encoder)
3418{
3419	int i;
3420	for (i = 0; i < DRM_CONNECTOR_MAX_ENCODER; i++) {
3421		if (connector->encoder_ids[i] == encoder->base.id) {
3422			connector->encoder_ids[i] = 0;
3423			if (connector->encoder == encoder)
3424				connector->encoder = NULL;
3425			break;
3426		}
3427	}
3428}
3429EXPORT_SYMBOL(drm_mode_connector_detach_encoder);
3430
3431int drm_mode_crtc_set_gamma_size(struct drm_crtc *crtc,
3432				  int gamma_size)
3433{
3434	crtc->gamma_size = gamma_size;
3435
3436	crtc->gamma_store = malloc(gamma_size * sizeof(uint16_t) * 3,
3437	    DRM_MEM_KMS, M_WAITOK | M_ZERO);
3438	if (!crtc->gamma_store) {
3439		crtc->gamma_size = 0;
3440		return -ENOMEM;
3441	}
3442
3443	return 0;
3444}
3445EXPORT_SYMBOL(drm_mode_crtc_set_gamma_size);
3446
3447int drm_mode_gamma_set_ioctl(struct drm_device *dev,
3448			     void *data, struct drm_file *file_priv)
3449{
3450	struct drm_mode_crtc_lut *crtc_lut = data;
3451	struct drm_mode_object *obj;
3452	struct drm_crtc *crtc;
3453	void *r_base, *g_base, *b_base;
3454	int size;
3455	int ret = 0;
3456
3457	if (!drm_core_check_feature(dev, DRIVER_MODESET))
3458		return -EINVAL;
3459
3460	sx_xlock(&dev->mode_config.mutex);
3461	obj = drm_mode_object_find(dev, crtc_lut->crtc_id, DRM_MODE_OBJECT_CRTC);
3462	if (!obj) {
3463		ret = -EINVAL;
3464		goto out;
3465	}
3466	crtc = obj_to_crtc(obj);
3467
3468	if (crtc->funcs->gamma_set == NULL) {
3469		ret = -ENOSYS;
3470		goto out;
3471	}
3472
3473	/* memcpy into gamma store */
3474	if (crtc_lut->gamma_size != crtc->gamma_size) {
3475		ret = -EINVAL;
3476		goto out;
3477	}
3478
3479	size = crtc_lut->gamma_size * (sizeof(uint16_t));
3480	r_base = crtc->gamma_store;
3481	if (copy_from_user(r_base, (void __user *)(unsigned long)crtc_lut->red, size)) {
3482		ret = -EFAULT;
3483		goto out;
3484	}
3485
3486	g_base = (char *)r_base + size;
3487	if (copy_from_user(g_base, (void __user *)(unsigned long)crtc_lut->green, size)) {
3488		ret = -EFAULT;
3489		goto out;
3490	}
3491
3492	b_base = (char *)g_base + size;
3493	if (copy_from_user(b_base, (void __user *)(unsigned long)crtc_lut->blue, size)) {
3494		ret = -EFAULT;
3495		goto out;
3496	}
3497
3498	crtc->funcs->gamma_set(crtc, r_base, g_base, b_base, 0, crtc->gamma_size);
3499
3500out:
3501	sx_xunlock(&dev->mode_config.mutex);
3502	return ret;
3503
3504}
3505
3506int drm_mode_gamma_get_ioctl(struct drm_device *dev,
3507			     void *data, struct drm_file *file_priv)
3508{
3509	struct drm_mode_crtc_lut *crtc_lut = data;
3510	struct drm_mode_object *obj;
3511	struct drm_crtc *crtc;
3512	void *r_base, *g_base, *b_base;
3513	int size;
3514	int ret = 0;
3515
3516	if (!drm_core_check_feature(dev, DRIVER_MODESET))
3517		return -EINVAL;
3518
3519	sx_xlock(&dev->mode_config.mutex);
3520	obj = drm_mode_object_find(dev, crtc_lut->crtc_id, DRM_MODE_OBJECT_CRTC);
3521	if (!obj) {
3522		ret = -EINVAL;
3523		goto out;
3524	}
3525	crtc = obj_to_crtc(obj);
3526
3527	/* memcpy into gamma store */
3528	if (crtc_lut->gamma_size != crtc->gamma_size) {
3529		ret = -EINVAL;
3530		goto out;
3531	}
3532
3533	size = crtc_lut->gamma_size * (sizeof(uint16_t));
3534	r_base = crtc->gamma_store;
3535	if (copy_to_user((void __user *)(unsigned long)crtc_lut->red, r_base, size)) {
3536		ret = -EFAULT;
3537		goto out;
3538	}
3539
3540	g_base = (char *)r_base + size;
3541	if (copy_to_user((void __user *)(unsigned long)crtc_lut->green, g_base, size)) {
3542		ret = -EFAULT;
3543		goto out;
3544	}
3545
3546	b_base = (char *)g_base + size;
3547	if (copy_to_user((void __user *)(unsigned long)crtc_lut->blue, b_base, size)) {
3548		ret = -EFAULT;
3549		goto out;
3550	}
3551out:
3552	sx_xunlock(&dev->mode_config.mutex);
3553	return ret;
3554}
3555
3556static void
3557free_vblank_event(void *arg)
3558{
3559
3560	free(arg, DRM_MEM_KMS);
3561}
3562
3563int drm_mode_page_flip_ioctl(struct drm_device *dev,
3564			     void *data, struct drm_file *file_priv)
3565{
3566	struct drm_mode_crtc_page_flip *page_flip = data;
3567	struct drm_mode_object *obj;
3568	struct drm_crtc *crtc;
3569	struct drm_framebuffer *fb;
3570	struct drm_pending_vblank_event *e = NULL;
3571#ifdef __linux__
3572	unsigned long flags;
3573#endif
3574	int hdisplay, vdisplay;
3575	int ret = -EINVAL;
3576
3577	if (page_flip->flags & ~DRM_MODE_PAGE_FLIP_FLAGS ||
3578	    page_flip->reserved != 0)
3579		return -EINVAL;
3580
3581	sx_xlock(&dev->mode_config.mutex);
3582	obj = drm_mode_object_find(dev, page_flip->crtc_id, DRM_MODE_OBJECT_CRTC);
3583	if (!obj)
3584		goto out;
3585	crtc = obj_to_crtc(obj);
3586
3587	if (crtc->fb == NULL) {
3588		/* The framebuffer is currently unbound, presumably
3589		 * due to a hotplug event, that userspace has not
3590		 * yet discovered.
3591		 */
3592		ret = -EBUSY;
3593		goto out;
3594	}
3595
3596	if (crtc->funcs->page_flip == NULL)
3597		goto out;
3598
3599	obj = drm_mode_object_find(dev, page_flip->fb_id, DRM_MODE_OBJECT_FB);
3600	if (!obj)
3601		goto out;
3602	fb = obj_to_fb(obj);
3603
3604	hdisplay = crtc->mode.hdisplay;
3605	vdisplay = crtc->mode.vdisplay;
3606
3607	if (crtc->invert_dimensions) {
3608		int tmp;
3609		tmp = vdisplay;
3610		vdisplay = hdisplay;
3611		hdisplay = tmp;
3612	}
3613
3614	if (hdisplay > fb->width ||
3615	    vdisplay > fb->height ||
3616	    crtc->x > fb->width - hdisplay ||
3617	    crtc->y > fb->height - vdisplay) {
3618		DRM_DEBUG_KMS("Invalid fb size %ux%u for CRTC viewport %ux%u+%d+%d%s.\n",
3619			      fb->width, fb->height, hdisplay, vdisplay, crtc->x, crtc->y,
3620			      crtc->invert_dimensions ? " (inverted)" : "");
3621		ret = -ENOSPC;
3622		goto out;
3623	}
3624
3625	if (page_flip->flags & DRM_MODE_PAGE_FLIP_EVENT) {
3626		ret = -ENOMEM;
3627		mtx_lock(&dev->event_lock);
3628		if (file_priv->event_space < sizeof e->event) {
3629			mtx_unlock(&dev->event_lock);
3630			goto out;
3631		}
3632		file_priv->event_space -= sizeof e->event;
3633		mtx_unlock(&dev->event_lock);
3634
3635		e = malloc(sizeof *e, DRM_MEM_KMS, M_WAITOK | M_ZERO);
3636		if (e == NULL) {
3637			mtx_lock(&dev->event_lock);
3638			file_priv->event_space += sizeof e->event;
3639			mtx_unlock(&dev->event_lock);
3640			goto out;
3641		}
3642
3643		e->event.base.type = DRM_EVENT_FLIP_COMPLETE;
3644		e->event.base.length = sizeof e->event;
3645		e->event.user_data = page_flip->user_data;
3646		e->base.event = &e->event.base;
3647		e->base.file_priv = file_priv;
3648		e->base.destroy =
3649			(void (*) (struct drm_pending_event *)) free_vblank_event;
3650	}
3651
3652	ret = crtc->funcs->page_flip(crtc, fb, e);
3653	if (ret) {
3654		if (page_flip->flags & DRM_MODE_PAGE_FLIP_EVENT) {
3655			mtx_lock(&dev->event_lock);
3656			file_priv->event_space += sizeof e->event;
3657			mtx_unlock(&dev->event_lock);
3658			free(e, DRM_MEM_KMS);
3659		}
3660	}
3661
3662out:
3663	sx_xunlock(&dev->mode_config.mutex);
3664	return ret;
3665}
3666
3667void drm_mode_config_reset(struct drm_device *dev)
3668{
3669	struct drm_crtc *crtc;
3670	struct drm_encoder *encoder;
3671	struct drm_connector *connector;
3672
3673	list_for_each_entry(crtc, &dev->mode_config.crtc_list, head)
3674		if (crtc->funcs->reset)
3675			crtc->funcs->reset(crtc);
3676
3677	list_for_each_entry(encoder, &dev->mode_config.encoder_list, head)
3678		if (encoder->funcs->reset)
3679			encoder->funcs->reset(encoder);
3680
3681	list_for_each_entry(connector, &dev->mode_config.connector_list, head) {
3682		connector->status = connector_status_unknown;
3683
3684		if (connector->funcs->reset)
3685			connector->funcs->reset(connector);
3686	}
3687}
3688EXPORT_SYMBOL(drm_mode_config_reset);
3689
3690int drm_mode_create_dumb_ioctl(struct drm_device *dev,
3691			       void *data, struct drm_file *file_priv)
3692{
3693	struct drm_mode_create_dumb *args = data;
3694
3695	if (!dev->driver->dumb_create)
3696		return -ENOSYS;
3697	return dev->driver->dumb_create(file_priv, dev, args);
3698}
3699
3700int drm_mode_mmap_dumb_ioctl(struct drm_device *dev,
3701			     void *data, struct drm_file *file_priv)
3702{
3703	struct drm_mode_map_dumb *args = data;
3704
3705	/* call driver ioctl to get mmap offset */
3706	if (!dev->driver->dumb_map_offset)
3707		return -ENOSYS;
3708
3709	return dev->driver->dumb_map_offset(file_priv, dev, args->handle, &args->offset);
3710}
3711
3712int drm_mode_destroy_dumb_ioctl(struct drm_device *dev,
3713				void *data, struct drm_file *file_priv)
3714{
3715	struct drm_mode_destroy_dumb *args = data;
3716
3717	if (!dev->driver->dumb_destroy)
3718		return -ENOSYS;
3719
3720	return dev->driver->dumb_destroy(file_priv, dev, args->handle);
3721}
3722
3723/*
3724 * Just need to support RGB formats here for compat with code that doesn't
3725 * use pixel formats directly yet.
3726 */
3727void drm_fb_get_bpp_depth(uint32_t format, unsigned int *depth,
3728			  int *bpp)
3729{
3730	switch (format) {
3731	case DRM_FORMAT_C8:
3732	case DRM_FORMAT_RGB332:
3733	case DRM_FORMAT_BGR233:
3734		*depth = 8;
3735		*bpp = 8;
3736		break;
3737	case DRM_FORMAT_XRGB1555:
3738	case DRM_FORMAT_XBGR1555:
3739	case DRM_FORMAT_RGBX5551:
3740	case DRM_FORMAT_BGRX5551:
3741	case DRM_FORMAT_ARGB1555:
3742	case DRM_FORMAT_ABGR1555:
3743	case DRM_FORMAT_RGBA5551:
3744	case DRM_FORMAT_BGRA5551:
3745		*depth = 15;
3746		*bpp = 16;
3747		break;
3748	case DRM_FORMAT_RGB565:
3749	case DRM_FORMAT_BGR565:
3750		*depth = 16;
3751		*bpp = 16;
3752		break;
3753	case DRM_FORMAT_RGB888:
3754	case DRM_FORMAT_BGR888:
3755		*depth = 24;
3756		*bpp = 24;
3757		break;
3758	case DRM_FORMAT_XRGB8888:
3759	case DRM_FORMAT_XBGR8888:
3760	case DRM_FORMAT_RGBX8888:
3761	case DRM_FORMAT_BGRX8888:
3762		*depth = 24;
3763		*bpp = 32;
3764		break;
3765	case DRM_FORMAT_XRGB2101010:
3766	case DRM_FORMAT_XBGR2101010:
3767	case DRM_FORMAT_RGBX1010102:
3768	case DRM_FORMAT_BGRX1010102:
3769	case DRM_FORMAT_ARGB2101010:
3770	case DRM_FORMAT_ABGR2101010:
3771	case DRM_FORMAT_RGBA1010102:
3772	case DRM_FORMAT_BGRA1010102:
3773		*depth = 30;
3774		*bpp = 32;
3775		break;
3776	case DRM_FORMAT_ARGB8888:
3777	case DRM_FORMAT_ABGR8888:
3778	case DRM_FORMAT_RGBA8888:
3779	case DRM_FORMAT_BGRA8888:
3780		*depth = 32;
3781		*bpp = 32;
3782		break;
3783	default:
3784		DRM_DEBUG_KMS("unsupported pixel format\n");
3785		*depth = 0;
3786		*bpp = 0;
3787		break;
3788	}
3789}
3790EXPORT_SYMBOL(drm_fb_get_bpp_depth);
3791
3792/**
3793 * drm_format_num_planes - get the number of planes for format
3794 * @format: pixel format (DRM_FORMAT_*)
3795 *
3796 * RETURNS:
3797 * The number of planes used by the specified pixel format.
3798 */
3799int drm_format_num_planes(uint32_t format)
3800{
3801	switch (format) {
3802	case DRM_FORMAT_YUV410:
3803	case DRM_FORMAT_YVU410:
3804	case DRM_FORMAT_YUV411:
3805	case DRM_FORMAT_YVU411:
3806	case DRM_FORMAT_YUV420:
3807	case DRM_FORMAT_YVU420:
3808	case DRM_FORMAT_YUV422:
3809	case DRM_FORMAT_YVU422:
3810	case DRM_FORMAT_YUV444:
3811	case DRM_FORMAT_YVU444:
3812		return 3;
3813	case DRM_FORMAT_NV12:
3814	case DRM_FORMAT_NV21:
3815	case DRM_FORMAT_NV16:
3816	case DRM_FORMAT_NV61:
3817	case DRM_FORMAT_NV24:
3818	case DRM_FORMAT_NV42:
3819		return 2;
3820	default:
3821		return 1;
3822	}
3823}
3824EXPORT_SYMBOL(drm_format_num_planes);
3825
3826/**
3827 * drm_format_plane_cpp - determine the bytes per pixel value
3828 * @format: pixel format (DRM_FORMAT_*)
3829 * @plane: plane index
3830 *
3831 * RETURNS:
3832 * The bytes per pixel value for the specified plane.
3833 */
3834int drm_format_plane_cpp(uint32_t format, int plane)
3835{
3836	unsigned int depth;
3837	int bpp;
3838
3839	if (plane >= drm_format_num_planes(format))
3840		return 0;
3841
3842	switch (format) {
3843	case DRM_FORMAT_YUYV:
3844	case DRM_FORMAT_YVYU:
3845	case DRM_FORMAT_UYVY:
3846	case DRM_FORMAT_VYUY:
3847		return 2;
3848	case DRM_FORMAT_NV12:
3849	case DRM_FORMAT_NV21:
3850	case DRM_FORMAT_NV16:
3851	case DRM_FORMAT_NV61:
3852	case DRM_FORMAT_NV24:
3853	case DRM_FORMAT_NV42:
3854		return plane ? 2 : 1;
3855	case DRM_FORMAT_YUV410:
3856	case DRM_FORMAT_YVU410:
3857	case DRM_FORMAT_YUV411:
3858	case DRM_FORMAT_YVU411:
3859	case DRM_FORMAT_YUV420:
3860	case DRM_FORMAT_YVU420:
3861	case DRM_FORMAT_YUV422:
3862	case DRM_FORMAT_YVU422:
3863	case DRM_FORMAT_YUV444:
3864	case DRM_FORMAT_YVU444:
3865		return 1;
3866	default:
3867		drm_fb_get_bpp_depth(format, &depth, &bpp);
3868		return bpp >> 3;
3869	}
3870}
3871EXPORT_SYMBOL(drm_format_plane_cpp);
3872
3873/**
3874 * drm_format_horz_chroma_subsampling - get the horizontal chroma subsampling factor
3875 * @format: pixel format (DRM_FORMAT_*)
3876 *
3877 * RETURNS:
3878 * The horizontal chroma subsampling factor for the
3879 * specified pixel format.
3880 */
3881int drm_format_horz_chroma_subsampling(uint32_t format)
3882{
3883	switch (format) {
3884	case DRM_FORMAT_YUV411:
3885	case DRM_FORMAT_YVU411:
3886	case DRM_FORMAT_YUV410:
3887	case DRM_FORMAT_YVU410:
3888		return 4;
3889	case DRM_FORMAT_YUYV:
3890	case DRM_FORMAT_YVYU:
3891	case DRM_FORMAT_UYVY:
3892	case DRM_FORMAT_VYUY:
3893	case DRM_FORMAT_NV12:
3894	case DRM_FORMAT_NV21:
3895	case DRM_FORMAT_NV16:
3896	case DRM_FORMAT_NV61:
3897	case DRM_FORMAT_YUV422:
3898	case DRM_FORMAT_YVU422:
3899	case DRM_FORMAT_YUV420:
3900	case DRM_FORMAT_YVU420:
3901		return 2;
3902	default:
3903		return 1;
3904	}
3905}
3906EXPORT_SYMBOL(drm_format_horz_chroma_subsampling);
3907
3908/**
3909 * drm_format_vert_chroma_subsampling - get the vertical chroma subsampling factor
3910 * @format: pixel format (DRM_FORMAT_*)
3911 *
3912 * RETURNS:
3913 * The vertical chroma subsampling factor for the
3914 * specified pixel format.
3915 */
3916int drm_format_vert_chroma_subsampling(uint32_t format)
3917{
3918	switch (format) {
3919	case DRM_FORMAT_YUV410:
3920	case DRM_FORMAT_YVU410:
3921		return 4;
3922	case DRM_FORMAT_YUV420:
3923	case DRM_FORMAT_YVU420:
3924	case DRM_FORMAT_NV12:
3925	case DRM_FORMAT_NV21:
3926		return 2;
3927	default:
3928		return 1;
3929	}
3930}
3931EXPORT_SYMBOL(drm_format_vert_chroma_subsampling);
3932