cachepc-linux

Fork of AMDESE/linux with modifications for CachePC side-channel attack
git clone https://git.sinitax.com/sinitax/cachepc-linux
Log | Files | Refs | README | LICENSE | sfeed.txt

fbmem.c (48098B)


      1/*
      2 *  linux/drivers/video/fbmem.c
      3 *
      4 *  Copyright (C) 1994 Martin Schaller
      5 *
      6 *	2001 - Documented with DocBook
      7 *	- Brad Douglas <brad@neruo.com>
      8 *
      9 * This file is subject to the terms and conditions of the GNU General Public
     10 * License.  See the file COPYING in the main directory of this archive
     11 * for more details.
     12 */
     13
     14#include <linux/module.h>
     15
     16#include <linux/compat.h>
     17#include <linux/types.h>
     18#include <linux/errno.h>
     19#include <linux/kernel.h>
     20#include <linux/major.h>
     21#include <linux/slab.h>
     22#include <linux/sysfb.h>
     23#include <linux/mm.h>
     24#include <linux/mman.h>
     25#include <linux/vt.h>
     26#include <linux/init.h>
     27#include <linux/linux_logo.h>
     28#include <linux/proc_fs.h>
     29#include <linux/platform_device.h>
     30#include <linux/seq_file.h>
     31#include <linux/console.h>
     32#include <linux/kmod.h>
     33#include <linux/err.h>
     34#include <linux/device.h>
     35#include <linux/efi.h>
     36#include <linux/fb.h>
     37#include <linux/fbcon.h>
     38#include <linux/mem_encrypt.h>
     39#include <linux/pci.h>
     40
     41#include <asm/fb.h>
     42
     43
     44    /*
     45     *  Frame buffer device initialization and setup routines
     46     */
     47
     48#define FBPIXMAPSIZE	(1024 * 8)
     49
     50static DEFINE_MUTEX(registration_lock);
     51
     52struct fb_info *registered_fb[FB_MAX] __read_mostly;
     53EXPORT_SYMBOL(registered_fb);
     54
     55int num_registered_fb __read_mostly;
     56EXPORT_SYMBOL(num_registered_fb);
     57
     58bool fb_center_logo __read_mostly;
     59
     60int fb_logo_count __read_mostly = -1;
     61
     62static struct fb_info *get_fb_info(unsigned int idx)
     63{
     64	struct fb_info *fb_info;
     65
     66	if (idx >= FB_MAX)
     67		return ERR_PTR(-ENODEV);
     68
     69	mutex_lock(&registration_lock);
     70	fb_info = registered_fb[idx];
     71	if (fb_info)
     72		refcount_inc(&fb_info->count);
     73	mutex_unlock(&registration_lock);
     74
     75	return fb_info;
     76}
     77
     78static void put_fb_info(struct fb_info *fb_info)
     79{
     80	if (!refcount_dec_and_test(&fb_info->count))
     81		return;
     82	if (fb_info->fbops->fb_destroy)
     83		fb_info->fbops->fb_destroy(fb_info);
     84}
     85
     86/*
     87 * Helpers
     88 */
     89
     90int fb_get_color_depth(struct fb_var_screeninfo *var,
     91		       struct fb_fix_screeninfo *fix)
     92{
     93	int depth = 0;
     94
     95	if (fix->visual == FB_VISUAL_MONO01 ||
     96	    fix->visual == FB_VISUAL_MONO10)
     97		depth = 1;
     98	else {
     99		if (var->green.length == var->blue.length &&
    100		    var->green.length == var->red.length &&
    101		    var->green.offset == var->blue.offset &&
    102		    var->green.offset == var->red.offset)
    103			depth = var->green.length;
    104		else
    105			depth = var->green.length + var->red.length +
    106				var->blue.length;
    107	}
    108
    109	return depth;
    110}
    111EXPORT_SYMBOL(fb_get_color_depth);
    112
    113/*
    114 * Data padding functions.
    115 */
    116void fb_pad_aligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 s_pitch, u32 height)
    117{
    118	__fb_pad_aligned_buffer(dst, d_pitch, src, s_pitch, height);
    119}
    120EXPORT_SYMBOL(fb_pad_aligned_buffer);
    121
    122void fb_pad_unaligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 idx, u32 height,
    123				u32 shift_high, u32 shift_low, u32 mod)
    124{
    125	u8 mask = (u8) (0xfff << shift_high), tmp;
    126	int i, j;
    127
    128	for (i = height; i--; ) {
    129		for (j = 0; j < idx; j++) {
    130			tmp = dst[j];
    131			tmp &= mask;
    132			tmp |= *src >> shift_low;
    133			dst[j] = tmp;
    134			tmp = *src << shift_high;
    135			dst[j+1] = tmp;
    136			src++;
    137		}
    138		tmp = dst[idx];
    139		tmp &= mask;
    140		tmp |= *src >> shift_low;
    141		dst[idx] = tmp;
    142		if (shift_high < mod) {
    143			tmp = *src << shift_high;
    144			dst[idx+1] = tmp;
    145		}
    146		src++;
    147		dst += d_pitch;
    148	}
    149}
    150EXPORT_SYMBOL(fb_pad_unaligned_buffer);
    151
    152/*
    153 * we need to lock this section since fb_cursor
    154 * may use fb_imageblit()
    155 */
    156char* fb_get_buffer_offset(struct fb_info *info, struct fb_pixmap *buf, u32 size)
    157{
    158	u32 align = buf->buf_align - 1, offset;
    159	char *addr = buf->addr;
    160
    161	/* If IO mapped, we need to sync before access, no sharing of
    162	 * the pixmap is done
    163	 */
    164	if (buf->flags & FB_PIXMAP_IO) {
    165		if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
    166			info->fbops->fb_sync(info);
    167		return addr;
    168	}
    169
    170	/* See if we fit in the remaining pixmap space */
    171	offset = buf->offset + align;
    172	offset &= ~align;
    173	if (offset + size > buf->size) {
    174		/* We do not fit. In order to be able to re-use the buffer,
    175		 * we must ensure no asynchronous DMA'ing or whatever operation
    176		 * is in progress, we sync for that.
    177		 */
    178		if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
    179			info->fbops->fb_sync(info);
    180		offset = 0;
    181	}
    182	buf->offset = offset + size;
    183	addr += offset;
    184
    185	return addr;
    186}
    187EXPORT_SYMBOL(fb_get_buffer_offset);
    188
    189#ifdef CONFIG_LOGO
    190
    191static inline unsigned safe_shift(unsigned d, int n)
    192{
    193	return n < 0 ? d >> -n : d << n;
    194}
    195
    196static void fb_set_logocmap(struct fb_info *info,
    197				   const struct linux_logo *logo)
    198{
    199	struct fb_cmap palette_cmap;
    200	u16 palette_green[16];
    201	u16 palette_blue[16];
    202	u16 palette_red[16];
    203	int i, j, n;
    204	const unsigned char *clut = logo->clut;
    205
    206	palette_cmap.start = 0;
    207	palette_cmap.len = 16;
    208	palette_cmap.red = palette_red;
    209	palette_cmap.green = palette_green;
    210	palette_cmap.blue = palette_blue;
    211	palette_cmap.transp = NULL;
    212
    213	for (i = 0; i < logo->clutsize; i += n) {
    214		n = logo->clutsize - i;
    215		/* palette_cmap provides space for only 16 colors at once */
    216		if (n > 16)
    217			n = 16;
    218		palette_cmap.start = 32 + i;
    219		palette_cmap.len = n;
    220		for (j = 0; j < n; ++j) {
    221			palette_cmap.red[j] = clut[0] << 8 | clut[0];
    222			palette_cmap.green[j] = clut[1] << 8 | clut[1];
    223			palette_cmap.blue[j] = clut[2] << 8 | clut[2];
    224			clut += 3;
    225		}
    226		fb_set_cmap(&palette_cmap, info);
    227	}
    228}
    229
    230static void  fb_set_logo_truepalette(struct fb_info *info,
    231					    const struct linux_logo *logo,
    232					    u32 *palette)
    233{
    234	static const unsigned char mask[] = { 0,0x80,0xc0,0xe0,0xf0,0xf8,0xfc,0xfe,0xff };
    235	unsigned char redmask, greenmask, bluemask;
    236	int redshift, greenshift, blueshift;
    237	int i;
    238	const unsigned char *clut = logo->clut;
    239
    240	/*
    241	 * We have to create a temporary palette since console palette is only
    242	 * 16 colors long.
    243	 */
    244	/* Bug: Doesn't obey msb_right ... (who needs that?) */
    245	redmask   = mask[info->var.red.length   < 8 ? info->var.red.length   : 8];
    246	greenmask = mask[info->var.green.length < 8 ? info->var.green.length : 8];
    247	bluemask  = mask[info->var.blue.length  < 8 ? info->var.blue.length  : 8];
    248	redshift   = info->var.red.offset   - (8 - info->var.red.length);
    249	greenshift = info->var.green.offset - (8 - info->var.green.length);
    250	blueshift  = info->var.blue.offset  - (8 - info->var.blue.length);
    251
    252	for ( i = 0; i < logo->clutsize; i++) {
    253		palette[i+32] = (safe_shift((clut[0] & redmask), redshift) |
    254				 safe_shift((clut[1] & greenmask), greenshift) |
    255				 safe_shift((clut[2] & bluemask), blueshift));
    256		clut += 3;
    257	}
    258}
    259
    260static void fb_set_logo_directpalette(struct fb_info *info,
    261					     const struct linux_logo *logo,
    262					     u32 *palette)
    263{
    264	int redshift, greenshift, blueshift;
    265	int i;
    266
    267	redshift = info->var.red.offset;
    268	greenshift = info->var.green.offset;
    269	blueshift = info->var.blue.offset;
    270
    271	for (i = 32; i < 32 + logo->clutsize; i++)
    272		palette[i] = i << redshift | i << greenshift | i << blueshift;
    273}
    274
    275static void fb_set_logo(struct fb_info *info,
    276			       const struct linux_logo *logo, u8 *dst,
    277			       int depth)
    278{
    279	int i, j, k;
    280	const u8 *src = logo->data;
    281	u8 xor = (info->fix.visual == FB_VISUAL_MONO01) ? 0xff : 0;
    282	u8 fg = 1, d;
    283
    284	switch (fb_get_color_depth(&info->var, &info->fix)) {
    285	case 1:
    286		fg = 1;
    287		break;
    288	case 2:
    289		fg = 3;
    290		break;
    291	default:
    292		fg = 7;
    293		break;
    294	}
    295
    296	if (info->fix.visual == FB_VISUAL_MONO01 ||
    297	    info->fix.visual == FB_VISUAL_MONO10)
    298		fg = ~((u8) (0xfff << info->var.green.length));
    299
    300	switch (depth) {
    301	case 4:
    302		for (i = 0; i < logo->height; i++)
    303			for (j = 0; j < logo->width; src++) {
    304				*dst++ = *src >> 4;
    305				j++;
    306				if (j < logo->width) {
    307					*dst++ = *src & 0x0f;
    308					j++;
    309				}
    310			}
    311		break;
    312	case 1:
    313		for (i = 0; i < logo->height; i++) {
    314			for (j = 0; j < logo->width; src++) {
    315				d = *src ^ xor;
    316				for (k = 7; k >= 0 && j < logo->width; k--) {
    317					*dst++ = ((d >> k) & 1) ? fg : 0;
    318					j++;
    319				}
    320			}
    321		}
    322		break;
    323	}
    324}
    325
    326/*
    327 * Three (3) kinds of logo maps exist.  linux_logo_clut224 (>16 colors),
    328 * linux_logo_vga16 (16 colors) and linux_logo_mono (2 colors).  Depending on
    329 * the visual format and color depth of the framebuffer, the DAC, the
    330 * pseudo_palette, and the logo data will be adjusted accordingly.
    331 *
    332 * Case 1 - linux_logo_clut224:
    333 * Color exceeds the number of console colors (16), thus we set the hardware DAC
    334 * using fb_set_cmap() appropriately.  The "needs_cmapreset"  flag will be set.
    335 *
    336 * For visuals that require color info from the pseudo_palette, we also construct
    337 * one for temporary use. The "needs_directpalette" or "needs_truepalette" flags
    338 * will be set.
    339 *
    340 * Case 2 - linux_logo_vga16:
    341 * The number of colors just matches the console colors, thus there is no need
    342 * to set the DAC or the pseudo_palette.  However, the bitmap is packed, ie,
    343 * each byte contains color information for two pixels (upper and lower nibble).
    344 * To be consistent with fb_imageblit() usage, we therefore separate the two
    345 * nibbles into separate bytes. The "depth" flag will be set to 4.
    346 *
    347 * Case 3 - linux_logo_mono:
    348 * This is similar with Case 2.  Each byte contains information for 8 pixels.
    349 * We isolate each bit and expand each into a byte. The "depth" flag will
    350 * be set to 1.
    351 */
    352static struct logo_data {
    353	int depth;
    354	int needs_directpalette;
    355	int needs_truepalette;
    356	int needs_cmapreset;
    357	const struct linux_logo *logo;
    358} fb_logo __read_mostly;
    359
    360static void fb_rotate_logo_ud(const u8 *in, u8 *out, u32 width, u32 height)
    361{
    362	u32 size = width * height, i;
    363
    364	out += size - 1;
    365
    366	for (i = size; i--; )
    367		*out-- = *in++;
    368}
    369
    370static void fb_rotate_logo_cw(const u8 *in, u8 *out, u32 width, u32 height)
    371{
    372	int i, j, h = height - 1;
    373
    374	for (i = 0; i < height; i++)
    375		for (j = 0; j < width; j++)
    376				out[height * j + h - i] = *in++;
    377}
    378
    379static void fb_rotate_logo_ccw(const u8 *in, u8 *out, u32 width, u32 height)
    380{
    381	int i, j, w = width - 1;
    382
    383	for (i = 0; i < height; i++)
    384		for (j = 0; j < width; j++)
    385			out[height * (w - j) + i] = *in++;
    386}
    387
    388static void fb_rotate_logo(struct fb_info *info, u8 *dst,
    389			   struct fb_image *image, int rotate)
    390{
    391	u32 tmp;
    392
    393	if (rotate == FB_ROTATE_UD) {
    394		fb_rotate_logo_ud(image->data, dst, image->width,
    395				  image->height);
    396		image->dx = info->var.xres - image->width - image->dx;
    397		image->dy = info->var.yres - image->height - image->dy;
    398	} else if (rotate == FB_ROTATE_CW) {
    399		fb_rotate_logo_cw(image->data, dst, image->width,
    400				  image->height);
    401		swap(image->width, image->height);
    402		tmp = image->dy;
    403		image->dy = image->dx;
    404		image->dx = info->var.xres - image->width - tmp;
    405	} else if (rotate == FB_ROTATE_CCW) {
    406		fb_rotate_logo_ccw(image->data, dst, image->width,
    407				   image->height);
    408		swap(image->width, image->height);
    409		tmp = image->dx;
    410		image->dx = image->dy;
    411		image->dy = info->var.yres - image->height - tmp;
    412	}
    413
    414	image->data = dst;
    415}
    416
    417static void fb_do_show_logo(struct fb_info *info, struct fb_image *image,
    418			    int rotate, unsigned int num)
    419{
    420	unsigned int x;
    421
    422	if (image->width > info->var.xres || image->height > info->var.yres)
    423		return;
    424
    425	if (rotate == FB_ROTATE_UR) {
    426		for (x = 0;
    427		     x < num && image->dx + image->width <= info->var.xres;
    428		     x++) {
    429			info->fbops->fb_imageblit(info, image);
    430			image->dx += image->width + 8;
    431		}
    432	} else if (rotate == FB_ROTATE_UD) {
    433		u32 dx = image->dx;
    434
    435		for (x = 0; x < num && image->dx <= dx; x++) {
    436			info->fbops->fb_imageblit(info, image);
    437			image->dx -= image->width + 8;
    438		}
    439	} else if (rotate == FB_ROTATE_CW) {
    440		for (x = 0;
    441		     x < num && image->dy + image->height <= info->var.yres;
    442		     x++) {
    443			info->fbops->fb_imageblit(info, image);
    444			image->dy += image->height + 8;
    445		}
    446	} else if (rotate == FB_ROTATE_CCW) {
    447		u32 dy = image->dy;
    448
    449		for (x = 0; x < num && image->dy <= dy; x++) {
    450			info->fbops->fb_imageblit(info, image);
    451			image->dy -= image->height + 8;
    452		}
    453	}
    454}
    455
    456static int fb_show_logo_line(struct fb_info *info, int rotate,
    457			     const struct linux_logo *logo, int y,
    458			     unsigned int n)
    459{
    460	u32 *palette = NULL, *saved_pseudo_palette = NULL;
    461	unsigned char *logo_new = NULL, *logo_rotate = NULL;
    462	struct fb_image image;
    463
    464	/* Return if the frame buffer is not mapped or suspended */
    465	if (logo == NULL || info->state != FBINFO_STATE_RUNNING ||
    466	    info->fbops->owner)
    467		return 0;
    468
    469	image.depth = 8;
    470	image.data = logo->data;
    471
    472	if (fb_logo.needs_cmapreset)
    473		fb_set_logocmap(info, logo);
    474
    475	if (fb_logo.needs_truepalette ||
    476	    fb_logo.needs_directpalette) {
    477		palette = kmalloc(256 * 4, GFP_KERNEL);
    478		if (palette == NULL)
    479			return 0;
    480
    481		if (fb_logo.needs_truepalette)
    482			fb_set_logo_truepalette(info, logo, palette);
    483		else
    484			fb_set_logo_directpalette(info, logo, palette);
    485
    486		saved_pseudo_palette = info->pseudo_palette;
    487		info->pseudo_palette = palette;
    488	}
    489
    490	if (fb_logo.depth <= 4) {
    491		logo_new = kmalloc_array(logo->width, logo->height,
    492					 GFP_KERNEL);
    493		if (logo_new == NULL) {
    494			kfree(palette);
    495			if (saved_pseudo_palette)
    496				info->pseudo_palette = saved_pseudo_palette;
    497			return 0;
    498		}
    499		image.data = logo_new;
    500		fb_set_logo(info, logo, logo_new, fb_logo.depth);
    501	}
    502
    503	if (fb_center_logo) {
    504		int xres = info->var.xres;
    505		int yres = info->var.yres;
    506
    507		if (rotate == FB_ROTATE_CW || rotate == FB_ROTATE_CCW) {
    508			xres = info->var.yres;
    509			yres = info->var.xres;
    510		}
    511
    512		while (n && (n * (logo->width + 8) - 8 > xres))
    513			--n;
    514		image.dx = (xres - (n * (logo->width + 8) - 8)) / 2;
    515		image.dy = y ?: (yres - logo->height) / 2;
    516	} else {
    517		image.dx = 0;
    518		image.dy = y;
    519	}
    520
    521	image.width = logo->width;
    522	image.height = logo->height;
    523
    524	if (rotate) {
    525		logo_rotate = kmalloc_array(logo->width, logo->height,
    526					    GFP_KERNEL);
    527		if (logo_rotate)
    528			fb_rotate_logo(info, logo_rotate, &image, rotate);
    529	}
    530
    531	fb_do_show_logo(info, &image, rotate, n);
    532
    533	kfree(palette);
    534	if (saved_pseudo_palette != NULL)
    535		info->pseudo_palette = saved_pseudo_palette;
    536	kfree(logo_new);
    537	kfree(logo_rotate);
    538	return image.dy + logo->height;
    539}
    540
    541
    542#ifdef CONFIG_FB_LOGO_EXTRA
    543
    544#define FB_LOGO_EX_NUM_MAX 10
    545static struct logo_data_extra {
    546	const struct linux_logo *logo;
    547	unsigned int n;
    548} fb_logo_ex[FB_LOGO_EX_NUM_MAX];
    549static unsigned int fb_logo_ex_num;
    550
    551void fb_append_extra_logo(const struct linux_logo *logo, unsigned int n)
    552{
    553	if (!n || fb_logo_ex_num == FB_LOGO_EX_NUM_MAX)
    554		return;
    555
    556	fb_logo_ex[fb_logo_ex_num].logo = logo;
    557	fb_logo_ex[fb_logo_ex_num].n = n;
    558	fb_logo_ex_num++;
    559}
    560
    561static int fb_prepare_extra_logos(struct fb_info *info, unsigned int height,
    562				  unsigned int yres)
    563{
    564	unsigned int i;
    565
    566	/* FIXME: logo_ex supports only truecolor fb. */
    567	if (info->fix.visual != FB_VISUAL_TRUECOLOR)
    568		fb_logo_ex_num = 0;
    569
    570	for (i = 0; i < fb_logo_ex_num; i++) {
    571		if (fb_logo_ex[i].logo->type != fb_logo.logo->type) {
    572			fb_logo_ex[i].logo = NULL;
    573			continue;
    574		}
    575		height += fb_logo_ex[i].logo->height;
    576		if (height > yres) {
    577			height -= fb_logo_ex[i].logo->height;
    578			fb_logo_ex_num = i;
    579			break;
    580		}
    581	}
    582	return height;
    583}
    584
    585static int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
    586{
    587	unsigned int i;
    588
    589	for (i = 0; i < fb_logo_ex_num; i++)
    590		y = fb_show_logo_line(info, rotate,
    591				      fb_logo_ex[i].logo, y, fb_logo_ex[i].n);
    592
    593	return y;
    594}
    595
    596#else /* !CONFIG_FB_LOGO_EXTRA */
    597
    598static inline int fb_prepare_extra_logos(struct fb_info *info,
    599					 unsigned int height,
    600					 unsigned int yres)
    601{
    602	return height;
    603}
    604
    605static inline int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
    606{
    607	return y;
    608}
    609
    610#endif /* CONFIG_FB_LOGO_EXTRA */
    611
    612
    613int fb_prepare_logo(struct fb_info *info, int rotate)
    614{
    615	int depth = fb_get_color_depth(&info->var, &info->fix);
    616	unsigned int yres;
    617	int height;
    618
    619	memset(&fb_logo, 0, sizeof(struct logo_data));
    620
    621	if (info->flags & FBINFO_MISC_TILEBLITTING ||
    622	    info->fbops->owner || !fb_logo_count)
    623		return 0;
    624
    625	if (info->fix.visual == FB_VISUAL_DIRECTCOLOR) {
    626		depth = info->var.blue.length;
    627		if (info->var.red.length < depth)
    628			depth = info->var.red.length;
    629		if (info->var.green.length < depth)
    630			depth = info->var.green.length;
    631	}
    632
    633	if (info->fix.visual == FB_VISUAL_STATIC_PSEUDOCOLOR && depth > 4) {
    634		/* assume console colormap */
    635		depth = 4;
    636	}
    637
    638	/* Return if no suitable logo was found */
    639	fb_logo.logo = fb_find_logo(depth);
    640
    641	if (!fb_logo.logo) {
    642		return 0;
    643	}
    644
    645	if (rotate == FB_ROTATE_UR || rotate == FB_ROTATE_UD)
    646		yres = info->var.yres;
    647	else
    648		yres = info->var.xres;
    649
    650	if (fb_logo.logo->height > yres) {
    651		fb_logo.logo = NULL;
    652		return 0;
    653	}
    654
    655	/* What depth we asked for might be different from what we get */
    656	if (fb_logo.logo->type == LINUX_LOGO_CLUT224)
    657		fb_logo.depth = 8;
    658	else if (fb_logo.logo->type == LINUX_LOGO_VGA16)
    659		fb_logo.depth = 4;
    660	else
    661		fb_logo.depth = 1;
    662
    663
    664	if (fb_logo.depth > 4 && depth > 4) {
    665		switch (info->fix.visual) {
    666		case FB_VISUAL_TRUECOLOR:
    667			fb_logo.needs_truepalette = 1;
    668			break;
    669		case FB_VISUAL_DIRECTCOLOR:
    670			fb_logo.needs_directpalette = 1;
    671			fb_logo.needs_cmapreset = 1;
    672			break;
    673		case FB_VISUAL_PSEUDOCOLOR:
    674			fb_logo.needs_cmapreset = 1;
    675			break;
    676		}
    677	}
    678
    679	height = fb_logo.logo->height;
    680	if (fb_center_logo)
    681		height += (yres - fb_logo.logo->height) / 2;
    682
    683	return fb_prepare_extra_logos(info, height, yres);
    684}
    685
    686int fb_show_logo(struct fb_info *info, int rotate)
    687{
    688	unsigned int count;
    689	int y;
    690
    691	if (!fb_logo_count)
    692		return 0;
    693
    694	count = fb_logo_count < 0 ? num_online_cpus() : fb_logo_count;
    695	y = fb_show_logo_line(info, rotate, fb_logo.logo, 0, count);
    696	y = fb_show_extra_logos(info, y, rotate);
    697
    698	return y;
    699}
    700#else
    701int fb_prepare_logo(struct fb_info *info, int rotate) { return 0; }
    702int fb_show_logo(struct fb_info *info, int rotate) { return 0; }
    703#endif /* CONFIG_LOGO */
    704EXPORT_SYMBOL(fb_prepare_logo);
    705EXPORT_SYMBOL(fb_show_logo);
    706
    707static void *fb_seq_start(struct seq_file *m, loff_t *pos)
    708{
    709	mutex_lock(&registration_lock);
    710	return (*pos < FB_MAX) ? pos : NULL;
    711}
    712
    713static void *fb_seq_next(struct seq_file *m, void *v, loff_t *pos)
    714{
    715	(*pos)++;
    716	return (*pos < FB_MAX) ? pos : NULL;
    717}
    718
    719static void fb_seq_stop(struct seq_file *m, void *v)
    720{
    721	mutex_unlock(&registration_lock);
    722}
    723
    724static int fb_seq_show(struct seq_file *m, void *v)
    725{
    726	int i = *(loff_t *)v;
    727	struct fb_info *fi = registered_fb[i];
    728
    729	if (fi)
    730		seq_printf(m, "%d %s\n", fi->node, fi->fix.id);
    731	return 0;
    732}
    733
    734static const struct seq_operations __maybe_unused proc_fb_seq_ops = {
    735	.start	= fb_seq_start,
    736	.next	= fb_seq_next,
    737	.stop	= fb_seq_stop,
    738	.show	= fb_seq_show,
    739};
    740
    741/*
    742 * We hold a reference to the fb_info in file->private_data,
    743 * but if the current registered fb has changed, we don't
    744 * actually want to use it.
    745 *
    746 * So look up the fb_info using the inode minor number,
    747 * and just verify it against the reference we have.
    748 */
    749static struct fb_info *file_fb_info(struct file *file)
    750{
    751	struct inode *inode = file_inode(file);
    752	int fbidx = iminor(inode);
    753	struct fb_info *info = registered_fb[fbidx];
    754
    755	if (info != file->private_data)
    756		info = NULL;
    757	return info;
    758}
    759
    760static ssize_t
    761fb_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)
    762{
    763	unsigned long p = *ppos;
    764	struct fb_info *info = file_fb_info(file);
    765	u8 *buffer, *dst;
    766	u8 __iomem *src;
    767	int c, cnt = 0, err = 0;
    768	unsigned long total_size;
    769
    770	if (!info || ! info->screen_base)
    771		return -ENODEV;
    772
    773	if (info->state != FBINFO_STATE_RUNNING)
    774		return -EPERM;
    775
    776	if (info->fbops->fb_read)
    777		return info->fbops->fb_read(info, buf, count, ppos);
    778
    779	total_size = info->screen_size;
    780
    781	if (total_size == 0)
    782		total_size = info->fix.smem_len;
    783
    784	if (p >= total_size)
    785		return 0;
    786
    787	if (count >= total_size)
    788		count = total_size;
    789
    790	if (count + p > total_size)
    791		count = total_size - p;
    792
    793	buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
    794			 GFP_KERNEL);
    795	if (!buffer)
    796		return -ENOMEM;
    797
    798	src = (u8 __iomem *) (info->screen_base + p);
    799
    800	if (info->fbops->fb_sync)
    801		info->fbops->fb_sync(info);
    802
    803	while (count) {
    804		c  = (count > PAGE_SIZE) ? PAGE_SIZE : count;
    805		dst = buffer;
    806		fb_memcpy_fromfb(dst, src, c);
    807		dst += c;
    808		src += c;
    809
    810		if (copy_to_user(buf, buffer, c)) {
    811			err = -EFAULT;
    812			break;
    813		}
    814		*ppos += c;
    815		buf += c;
    816		cnt += c;
    817		count -= c;
    818	}
    819
    820	kfree(buffer);
    821
    822	return (err) ? err : cnt;
    823}
    824
    825static ssize_t
    826fb_write(struct file *file, const char __user *buf, size_t count, loff_t *ppos)
    827{
    828	unsigned long p = *ppos;
    829	struct fb_info *info = file_fb_info(file);
    830	u8 *buffer, *src;
    831	u8 __iomem *dst;
    832	int c, cnt = 0, err = 0;
    833	unsigned long total_size;
    834
    835	if (!info || !info->screen_base)
    836		return -ENODEV;
    837
    838	if (info->state != FBINFO_STATE_RUNNING)
    839		return -EPERM;
    840
    841	if (info->fbops->fb_write)
    842		return info->fbops->fb_write(info, buf, count, ppos);
    843
    844	total_size = info->screen_size;
    845
    846	if (total_size == 0)
    847		total_size = info->fix.smem_len;
    848
    849	if (p > total_size)
    850		return -EFBIG;
    851
    852	if (count > total_size) {
    853		err = -EFBIG;
    854		count = total_size;
    855	}
    856
    857	if (count + p > total_size) {
    858		if (!err)
    859			err = -ENOSPC;
    860
    861		count = total_size - p;
    862	}
    863
    864	buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
    865			 GFP_KERNEL);
    866	if (!buffer)
    867		return -ENOMEM;
    868
    869	dst = (u8 __iomem *) (info->screen_base + p);
    870
    871	if (info->fbops->fb_sync)
    872		info->fbops->fb_sync(info);
    873
    874	while (count) {
    875		c = (count > PAGE_SIZE) ? PAGE_SIZE : count;
    876		src = buffer;
    877
    878		if (copy_from_user(src, buf, c)) {
    879			err = -EFAULT;
    880			break;
    881		}
    882
    883		fb_memcpy_tofb(dst, src, c);
    884		dst += c;
    885		src += c;
    886		*ppos += c;
    887		buf += c;
    888		cnt += c;
    889		count -= c;
    890	}
    891
    892	kfree(buffer);
    893
    894	return (cnt) ? cnt : err;
    895}
    896
    897int
    898fb_pan_display(struct fb_info *info, struct fb_var_screeninfo *var)
    899{
    900	struct fb_fix_screeninfo *fix = &info->fix;
    901	unsigned int yres = info->var.yres;
    902	int err = 0;
    903
    904	if (var->yoffset > 0) {
    905		if (var->vmode & FB_VMODE_YWRAP) {
    906			if (!fix->ywrapstep || (var->yoffset % fix->ywrapstep))
    907				err = -EINVAL;
    908			else
    909				yres = 0;
    910		} else if (!fix->ypanstep || (var->yoffset % fix->ypanstep))
    911			err = -EINVAL;
    912	}
    913
    914	if (var->xoffset > 0 && (!fix->xpanstep ||
    915				 (var->xoffset % fix->xpanstep)))
    916		err = -EINVAL;
    917
    918	if (err || !info->fbops->fb_pan_display ||
    919	    var->yoffset > info->var.yres_virtual - yres ||
    920	    var->xoffset > info->var.xres_virtual - info->var.xres)
    921		return -EINVAL;
    922
    923	if ((err = info->fbops->fb_pan_display(var, info)))
    924		return err;
    925	info->var.xoffset = var->xoffset;
    926	info->var.yoffset = var->yoffset;
    927	if (var->vmode & FB_VMODE_YWRAP)
    928		info->var.vmode |= FB_VMODE_YWRAP;
    929	else
    930		info->var.vmode &= ~FB_VMODE_YWRAP;
    931	return 0;
    932}
    933EXPORT_SYMBOL(fb_pan_display);
    934
    935static int fb_check_caps(struct fb_info *info, struct fb_var_screeninfo *var,
    936			 u32 activate)
    937{
    938	struct fb_blit_caps caps, fbcaps;
    939	int err = 0;
    940
    941	memset(&caps, 0, sizeof(caps));
    942	memset(&fbcaps, 0, sizeof(fbcaps));
    943	caps.flags = (activate & FB_ACTIVATE_ALL) ? 1 : 0;
    944	fbcon_get_requirement(info, &caps);
    945	info->fbops->fb_get_caps(info, &fbcaps, var);
    946
    947	if (((fbcaps.x ^ caps.x) & caps.x) ||
    948	    ((fbcaps.y ^ caps.y) & caps.y) ||
    949	    (fbcaps.len < caps.len))
    950		err = -EINVAL;
    951
    952	return err;
    953}
    954
    955int
    956fb_set_var(struct fb_info *info, struct fb_var_screeninfo *var)
    957{
    958	int ret = 0;
    959	u32 activate;
    960	struct fb_var_screeninfo old_var;
    961	struct fb_videomode mode;
    962	struct fb_event event;
    963	u32 unused;
    964
    965	if (var->activate & FB_ACTIVATE_INV_MODE) {
    966		struct fb_videomode mode1, mode2;
    967
    968		fb_var_to_videomode(&mode1, var);
    969		fb_var_to_videomode(&mode2, &info->var);
    970		/* make sure we don't delete the videomode of current var */
    971		ret = fb_mode_is_equal(&mode1, &mode2);
    972		if (!ret) {
    973			ret = fbcon_mode_deleted(info, &mode1);
    974			if (!ret)
    975				fb_delete_videomode(&mode1, &info->modelist);
    976		}
    977
    978		return ret ? -EINVAL : 0;
    979	}
    980
    981	if (!(var->activate & FB_ACTIVATE_FORCE) &&
    982	    !memcmp(&info->var, var, sizeof(struct fb_var_screeninfo)))
    983		return 0;
    984
    985	activate = var->activate;
    986
    987	/* When using FOURCC mode, make sure the red, green, blue and
    988	 * transp fields are set to 0.
    989	 */
    990	if ((info->fix.capabilities & FB_CAP_FOURCC) &&
    991	    var->grayscale > 1) {
    992		if (var->red.offset     || var->green.offset    ||
    993		    var->blue.offset    || var->transp.offset   ||
    994		    var->red.length     || var->green.length    ||
    995		    var->blue.length    || var->transp.length   ||
    996		    var->red.msb_right  || var->green.msb_right ||
    997		    var->blue.msb_right || var->transp.msb_right)
    998			return -EINVAL;
    999	}
   1000
   1001	if (!info->fbops->fb_check_var) {
   1002		*var = info->var;
   1003		return 0;
   1004	}
   1005
   1006	/* bitfill_aligned() assumes that it's at least 8x8 */
   1007	if (var->xres < 8 || var->yres < 8)
   1008		return -EINVAL;
   1009
   1010	/* Too huge resolution causes multiplication overflow. */
   1011	if (check_mul_overflow(var->xres, var->yres, &unused) ||
   1012	    check_mul_overflow(var->xres_virtual, var->yres_virtual, &unused))
   1013		return -EINVAL;
   1014
   1015	ret = info->fbops->fb_check_var(var, info);
   1016
   1017	if (ret)
   1018		return ret;
   1019
   1020	/* verify that virtual resolution >= physical resolution */
   1021	if (var->xres_virtual < var->xres ||
   1022	    var->yres_virtual < var->yres) {
   1023		pr_warn("WARNING: fbcon: Driver '%s' missed to adjust virtual screen size (%ux%u vs. %ux%u)\n",
   1024			info->fix.id,
   1025			var->xres_virtual, var->yres_virtual,
   1026			var->xres, var->yres);
   1027		return -EINVAL;
   1028	}
   1029
   1030	if ((var->activate & FB_ACTIVATE_MASK) != FB_ACTIVATE_NOW)
   1031		return 0;
   1032
   1033	if (info->fbops->fb_get_caps) {
   1034		ret = fb_check_caps(info, var, activate);
   1035
   1036		if (ret)
   1037			return ret;
   1038	}
   1039
   1040	old_var = info->var;
   1041	info->var = *var;
   1042
   1043	if (info->fbops->fb_set_par) {
   1044		ret = info->fbops->fb_set_par(info);
   1045
   1046		if (ret) {
   1047			info->var = old_var;
   1048			printk(KERN_WARNING "detected "
   1049				"fb_set_par error, "
   1050				"error code: %d\n", ret);
   1051			return ret;
   1052		}
   1053	}
   1054
   1055	fb_pan_display(info, &info->var);
   1056	fb_set_cmap(&info->cmap, info);
   1057	fb_var_to_videomode(&mode, &info->var);
   1058
   1059	if (info->modelist.prev && info->modelist.next &&
   1060	    !list_empty(&info->modelist))
   1061		ret = fb_add_videomode(&mode, &info->modelist);
   1062
   1063	if (ret)
   1064		return ret;
   1065
   1066	event.info = info;
   1067	event.data = &mode;
   1068	fb_notifier_call_chain(FB_EVENT_MODE_CHANGE, &event);
   1069
   1070	return 0;
   1071}
   1072EXPORT_SYMBOL(fb_set_var);
   1073
   1074int
   1075fb_blank(struct fb_info *info, int blank)
   1076{
   1077	struct fb_event event;
   1078	int ret = -EINVAL;
   1079
   1080	if (blank > FB_BLANK_POWERDOWN)
   1081		blank = FB_BLANK_POWERDOWN;
   1082
   1083	event.info = info;
   1084	event.data = &blank;
   1085
   1086	if (info->fbops->fb_blank)
   1087		ret = info->fbops->fb_blank(blank, info);
   1088
   1089	if (!ret)
   1090		fb_notifier_call_chain(FB_EVENT_BLANK, &event);
   1091
   1092	return ret;
   1093}
   1094EXPORT_SYMBOL(fb_blank);
   1095
   1096static long do_fb_ioctl(struct fb_info *info, unsigned int cmd,
   1097			unsigned long arg)
   1098{
   1099	const struct fb_ops *fb;
   1100	struct fb_var_screeninfo var;
   1101	struct fb_fix_screeninfo fix;
   1102	struct fb_cmap cmap_from;
   1103	struct fb_cmap_user cmap;
   1104	void __user *argp = (void __user *)arg;
   1105	long ret = 0;
   1106
   1107	switch (cmd) {
   1108	case FBIOGET_VSCREENINFO:
   1109		lock_fb_info(info);
   1110		var = info->var;
   1111		unlock_fb_info(info);
   1112
   1113		ret = copy_to_user(argp, &var, sizeof(var)) ? -EFAULT : 0;
   1114		break;
   1115	case FBIOPUT_VSCREENINFO:
   1116		if (copy_from_user(&var, argp, sizeof(var)))
   1117			return -EFAULT;
   1118		console_lock();
   1119		lock_fb_info(info);
   1120		ret = fbcon_modechange_possible(info, &var);
   1121		if (!ret)
   1122			ret = fb_set_var(info, &var);
   1123		if (!ret)
   1124			fbcon_update_vcs(info, var.activate & FB_ACTIVATE_ALL);
   1125		unlock_fb_info(info);
   1126		console_unlock();
   1127		if (!ret && copy_to_user(argp, &var, sizeof(var)))
   1128			ret = -EFAULT;
   1129		break;
   1130	case FBIOGET_FSCREENINFO:
   1131		lock_fb_info(info);
   1132		memcpy(&fix, &info->fix, sizeof(fix));
   1133		if (info->flags & FBINFO_HIDE_SMEM_START)
   1134			fix.smem_start = 0;
   1135		unlock_fb_info(info);
   1136
   1137		ret = copy_to_user(argp, &fix, sizeof(fix)) ? -EFAULT : 0;
   1138		break;
   1139	case FBIOPUTCMAP:
   1140		if (copy_from_user(&cmap, argp, sizeof(cmap)))
   1141			return -EFAULT;
   1142		ret = fb_set_user_cmap(&cmap, info);
   1143		break;
   1144	case FBIOGETCMAP:
   1145		if (copy_from_user(&cmap, argp, sizeof(cmap)))
   1146			return -EFAULT;
   1147		lock_fb_info(info);
   1148		cmap_from = info->cmap;
   1149		unlock_fb_info(info);
   1150		ret = fb_cmap_to_user(&cmap_from, &cmap);
   1151		break;
   1152	case FBIOPAN_DISPLAY:
   1153		if (copy_from_user(&var, argp, sizeof(var)))
   1154			return -EFAULT;
   1155		console_lock();
   1156		lock_fb_info(info);
   1157		ret = fb_pan_display(info, &var);
   1158		unlock_fb_info(info);
   1159		console_unlock();
   1160		if (ret == 0 && copy_to_user(argp, &var, sizeof(var)))
   1161			return -EFAULT;
   1162		break;
   1163	case FBIO_CURSOR:
   1164		ret = -EINVAL;
   1165		break;
   1166	case FBIOGET_CON2FBMAP:
   1167		ret = fbcon_get_con2fb_map_ioctl(argp);
   1168		break;
   1169	case FBIOPUT_CON2FBMAP:
   1170		ret = fbcon_set_con2fb_map_ioctl(argp);
   1171		break;
   1172	case FBIOBLANK:
   1173		if (arg > FB_BLANK_POWERDOWN)
   1174			return -EINVAL;
   1175		console_lock();
   1176		lock_fb_info(info);
   1177		ret = fb_blank(info, arg);
   1178		/* might again call into fb_blank */
   1179		fbcon_fb_blanked(info, arg);
   1180		unlock_fb_info(info);
   1181		console_unlock();
   1182		break;
   1183	default:
   1184		lock_fb_info(info);
   1185		fb = info->fbops;
   1186		if (fb->fb_ioctl)
   1187			ret = fb->fb_ioctl(info, cmd, arg);
   1188		else
   1189			ret = -ENOTTY;
   1190		unlock_fb_info(info);
   1191	}
   1192	return ret;
   1193}
   1194
   1195static long fb_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
   1196{
   1197	struct fb_info *info = file_fb_info(file);
   1198
   1199	if (!info)
   1200		return -ENODEV;
   1201	return do_fb_ioctl(info, cmd, arg);
   1202}
   1203
   1204#ifdef CONFIG_COMPAT
   1205struct fb_fix_screeninfo32 {
   1206	char			id[16];
   1207	compat_caddr_t		smem_start;
   1208	u32			smem_len;
   1209	u32			type;
   1210	u32			type_aux;
   1211	u32			visual;
   1212	u16			xpanstep;
   1213	u16			ypanstep;
   1214	u16			ywrapstep;
   1215	u32			line_length;
   1216	compat_caddr_t		mmio_start;
   1217	u32			mmio_len;
   1218	u32			accel;
   1219	u16			reserved[3];
   1220};
   1221
   1222struct fb_cmap32 {
   1223	u32			start;
   1224	u32			len;
   1225	compat_caddr_t	red;
   1226	compat_caddr_t	green;
   1227	compat_caddr_t	blue;
   1228	compat_caddr_t	transp;
   1229};
   1230
   1231static int fb_getput_cmap(struct fb_info *info, unsigned int cmd,
   1232			  unsigned long arg)
   1233{
   1234	struct fb_cmap32 cmap32;
   1235	struct fb_cmap cmap_from;
   1236	struct fb_cmap_user cmap;
   1237
   1238	if (copy_from_user(&cmap32, compat_ptr(arg), sizeof(cmap32)))
   1239		return -EFAULT;
   1240
   1241	cmap = (struct fb_cmap_user) {
   1242		.start	= cmap32.start,
   1243		.len	= cmap32.len,
   1244		.red	= compat_ptr(cmap32.red),
   1245		.green	= compat_ptr(cmap32.green),
   1246		.blue	= compat_ptr(cmap32.blue),
   1247		.transp	= compat_ptr(cmap32.transp),
   1248	};
   1249
   1250	if (cmd == FBIOPUTCMAP)
   1251		return fb_set_user_cmap(&cmap, info);
   1252
   1253	lock_fb_info(info);
   1254	cmap_from = info->cmap;
   1255	unlock_fb_info(info);
   1256
   1257	return fb_cmap_to_user(&cmap_from, &cmap);
   1258}
   1259
   1260static int do_fscreeninfo_to_user(struct fb_fix_screeninfo *fix,
   1261				  struct fb_fix_screeninfo32 __user *fix32)
   1262{
   1263	__u32 data;
   1264	int err;
   1265
   1266	err = copy_to_user(&fix32->id, &fix->id, sizeof(fix32->id));
   1267
   1268	data = (__u32) (unsigned long) fix->smem_start;
   1269	err |= put_user(data, &fix32->smem_start);
   1270
   1271	err |= put_user(fix->smem_len, &fix32->smem_len);
   1272	err |= put_user(fix->type, &fix32->type);
   1273	err |= put_user(fix->type_aux, &fix32->type_aux);
   1274	err |= put_user(fix->visual, &fix32->visual);
   1275	err |= put_user(fix->xpanstep, &fix32->xpanstep);
   1276	err |= put_user(fix->ypanstep, &fix32->ypanstep);
   1277	err |= put_user(fix->ywrapstep, &fix32->ywrapstep);
   1278	err |= put_user(fix->line_length, &fix32->line_length);
   1279
   1280	data = (__u32) (unsigned long) fix->mmio_start;
   1281	err |= put_user(data, &fix32->mmio_start);
   1282
   1283	err |= put_user(fix->mmio_len, &fix32->mmio_len);
   1284	err |= put_user(fix->accel, &fix32->accel);
   1285	err |= copy_to_user(fix32->reserved, fix->reserved,
   1286			    sizeof(fix->reserved));
   1287
   1288	if (err)
   1289		return -EFAULT;
   1290	return 0;
   1291}
   1292
   1293static int fb_get_fscreeninfo(struct fb_info *info, unsigned int cmd,
   1294			      unsigned long arg)
   1295{
   1296	struct fb_fix_screeninfo fix;
   1297
   1298	lock_fb_info(info);
   1299	fix = info->fix;
   1300	if (info->flags & FBINFO_HIDE_SMEM_START)
   1301		fix.smem_start = 0;
   1302	unlock_fb_info(info);
   1303	return do_fscreeninfo_to_user(&fix, compat_ptr(arg));
   1304}
   1305
   1306static long fb_compat_ioctl(struct file *file, unsigned int cmd,
   1307			    unsigned long arg)
   1308{
   1309	struct fb_info *info = file_fb_info(file);
   1310	const struct fb_ops *fb;
   1311	long ret = -ENOIOCTLCMD;
   1312
   1313	if (!info)
   1314		return -ENODEV;
   1315	fb = info->fbops;
   1316	switch(cmd) {
   1317	case FBIOGET_VSCREENINFO:
   1318	case FBIOPUT_VSCREENINFO:
   1319	case FBIOPAN_DISPLAY:
   1320	case FBIOGET_CON2FBMAP:
   1321	case FBIOPUT_CON2FBMAP:
   1322		arg = (unsigned long) compat_ptr(arg);
   1323		fallthrough;
   1324	case FBIOBLANK:
   1325		ret = do_fb_ioctl(info, cmd, arg);
   1326		break;
   1327
   1328	case FBIOGET_FSCREENINFO:
   1329		ret = fb_get_fscreeninfo(info, cmd, arg);
   1330		break;
   1331
   1332	case FBIOGETCMAP:
   1333	case FBIOPUTCMAP:
   1334		ret = fb_getput_cmap(info, cmd, arg);
   1335		break;
   1336
   1337	default:
   1338		if (fb->fb_compat_ioctl)
   1339			ret = fb->fb_compat_ioctl(info, cmd, arg);
   1340		break;
   1341	}
   1342	return ret;
   1343}
   1344#endif
   1345
   1346static int
   1347fb_mmap(struct file *file, struct vm_area_struct * vma)
   1348{
   1349	struct fb_info *info = file_fb_info(file);
   1350	unsigned long mmio_pgoff;
   1351	unsigned long start;
   1352	u32 len;
   1353
   1354	if (!info)
   1355		return -ENODEV;
   1356	mutex_lock(&info->mm_lock);
   1357
   1358	if (info->fbops->fb_mmap) {
   1359		int res;
   1360
   1361		/*
   1362		 * The framebuffer needs to be accessed decrypted, be sure
   1363		 * SME protection is removed ahead of the call
   1364		 */
   1365		vma->vm_page_prot = pgprot_decrypted(vma->vm_page_prot);
   1366		res = info->fbops->fb_mmap(info, vma);
   1367		mutex_unlock(&info->mm_lock);
   1368		return res;
   1369#if IS_ENABLED(CONFIG_FB_DEFERRED_IO)
   1370	} else if (info->fbdefio) {
   1371		/*
   1372		 * FB deferred I/O wants you to handle mmap in your drivers. At a
   1373		 * minimum, point struct fb_ops.fb_mmap to fb_deferred_io_mmap().
   1374		 */
   1375		dev_warn_once(info->dev, "fbdev mmap not set up for deferred I/O.\n");
   1376		mutex_unlock(&info->mm_lock);
   1377		return -ENODEV;
   1378#endif
   1379	}
   1380
   1381	/*
   1382	 * Ugh. This can be either the frame buffer mapping, or
   1383	 * if pgoff points past it, the mmio mapping.
   1384	 */
   1385	start = info->fix.smem_start;
   1386	len = info->fix.smem_len;
   1387	mmio_pgoff = PAGE_ALIGN((start & ~PAGE_MASK) + len) >> PAGE_SHIFT;
   1388	if (vma->vm_pgoff >= mmio_pgoff) {
   1389		if (info->var.accel_flags) {
   1390			mutex_unlock(&info->mm_lock);
   1391			return -EINVAL;
   1392		}
   1393
   1394		vma->vm_pgoff -= mmio_pgoff;
   1395		start = info->fix.mmio_start;
   1396		len = info->fix.mmio_len;
   1397	}
   1398	mutex_unlock(&info->mm_lock);
   1399
   1400	vma->vm_page_prot = vm_get_page_prot(vma->vm_flags);
   1401	fb_pgprotect(file, vma, start);
   1402
   1403	return vm_iomap_memory(vma, start, len);
   1404}
   1405
   1406static int
   1407fb_open(struct inode *inode, struct file *file)
   1408__acquires(&info->lock)
   1409__releases(&info->lock)
   1410{
   1411	int fbidx = iminor(inode);
   1412	struct fb_info *info;
   1413	int res = 0;
   1414
   1415	info = get_fb_info(fbidx);
   1416	if (!info) {
   1417		request_module("fb%d", fbidx);
   1418		info = get_fb_info(fbidx);
   1419		if (!info)
   1420			return -ENODEV;
   1421	}
   1422	if (IS_ERR(info))
   1423		return PTR_ERR(info);
   1424
   1425	lock_fb_info(info);
   1426	if (!try_module_get(info->fbops->owner)) {
   1427		res = -ENODEV;
   1428		goto out;
   1429	}
   1430	file->private_data = info;
   1431	if (info->fbops->fb_open) {
   1432		res = info->fbops->fb_open(info,1);
   1433		if (res)
   1434			module_put(info->fbops->owner);
   1435	}
   1436#ifdef CONFIG_FB_DEFERRED_IO
   1437	if (info->fbdefio)
   1438		fb_deferred_io_open(info, inode, file);
   1439#endif
   1440out:
   1441	unlock_fb_info(info);
   1442	if (res)
   1443		put_fb_info(info);
   1444	return res;
   1445}
   1446
   1447static int
   1448fb_release(struct inode *inode, struct file *file)
   1449__acquires(&info->lock)
   1450__releases(&info->lock)
   1451{
   1452	struct fb_info * const info = file->private_data;
   1453
   1454	lock_fb_info(info);
   1455	if (info->fbops->fb_release)
   1456		info->fbops->fb_release(info,1);
   1457	module_put(info->fbops->owner);
   1458	unlock_fb_info(info);
   1459	put_fb_info(info);
   1460	return 0;
   1461}
   1462
   1463#if defined(CONFIG_FB_PROVIDE_GET_FB_UNMAPPED_AREA) && !defined(CONFIG_MMU)
   1464unsigned long get_fb_unmapped_area(struct file *filp,
   1465				   unsigned long addr, unsigned long len,
   1466				   unsigned long pgoff, unsigned long flags)
   1467{
   1468	struct fb_info * const info = filp->private_data;
   1469	unsigned long fb_size = PAGE_ALIGN(info->fix.smem_len);
   1470
   1471	if (pgoff > fb_size || len > fb_size - pgoff)
   1472		return -EINVAL;
   1473
   1474	return (unsigned long)info->screen_base + pgoff;
   1475}
   1476#endif
   1477
   1478static const struct file_operations fb_fops = {
   1479	.owner =	THIS_MODULE,
   1480	.read =		fb_read,
   1481	.write =	fb_write,
   1482	.unlocked_ioctl = fb_ioctl,
   1483#ifdef CONFIG_COMPAT
   1484	.compat_ioctl = fb_compat_ioctl,
   1485#endif
   1486	.mmap =		fb_mmap,
   1487	.open =		fb_open,
   1488	.release =	fb_release,
   1489#if defined(HAVE_ARCH_FB_UNMAPPED_AREA) || \
   1490	(defined(CONFIG_FB_PROVIDE_GET_FB_UNMAPPED_AREA) && \
   1491	 !defined(CONFIG_MMU))
   1492	.get_unmapped_area = get_fb_unmapped_area,
   1493#endif
   1494#ifdef CONFIG_FB_DEFERRED_IO
   1495	.fsync =	fb_deferred_io_fsync,
   1496#endif
   1497	.llseek =	default_llseek,
   1498};
   1499
   1500struct class *fb_class;
   1501EXPORT_SYMBOL(fb_class);
   1502
   1503static int fb_check_foreignness(struct fb_info *fi)
   1504{
   1505	const bool foreign_endian = fi->flags & FBINFO_FOREIGN_ENDIAN;
   1506
   1507	fi->flags &= ~FBINFO_FOREIGN_ENDIAN;
   1508
   1509#ifdef __BIG_ENDIAN
   1510	fi->flags |= foreign_endian ? 0 : FBINFO_BE_MATH;
   1511#else
   1512	fi->flags |= foreign_endian ? FBINFO_BE_MATH : 0;
   1513#endif /* __BIG_ENDIAN */
   1514
   1515	if (fi->flags & FBINFO_BE_MATH && !fb_be_math(fi)) {
   1516		pr_err("%s: enable CONFIG_FB_BIG_ENDIAN to "
   1517		       "support this framebuffer\n", fi->fix.id);
   1518		return -ENOSYS;
   1519	} else if (!(fi->flags & FBINFO_BE_MATH) && fb_be_math(fi)) {
   1520		pr_err("%s: enable CONFIG_FB_LITTLE_ENDIAN to "
   1521		       "support this framebuffer\n", fi->fix.id);
   1522		return -ENOSYS;
   1523	}
   1524
   1525	return 0;
   1526}
   1527
   1528static bool apertures_overlap(struct aperture *gen, struct aperture *hw)
   1529{
   1530	/* is the generic aperture base the same as the HW one */
   1531	if (gen->base == hw->base)
   1532		return true;
   1533	/* is the generic aperture base inside the hw base->hw base+size */
   1534	if (gen->base > hw->base && gen->base < hw->base + hw->size)
   1535		return true;
   1536	return false;
   1537}
   1538
   1539static bool fb_do_apertures_overlap(struct apertures_struct *gena,
   1540				    struct apertures_struct *hwa)
   1541{
   1542	int i, j;
   1543	if (!hwa || !gena)
   1544		return false;
   1545
   1546	for (i = 0; i < hwa->count; ++i) {
   1547		struct aperture *h = &hwa->ranges[i];
   1548		for (j = 0; j < gena->count; ++j) {
   1549			struct aperture *g = &gena->ranges[j];
   1550			printk(KERN_DEBUG "checking generic (%llx %llx) vs hw (%llx %llx)\n",
   1551				(unsigned long long)g->base,
   1552				(unsigned long long)g->size,
   1553				(unsigned long long)h->base,
   1554				(unsigned long long)h->size);
   1555			if (apertures_overlap(g, h))
   1556				return true;
   1557		}
   1558	}
   1559
   1560	return false;
   1561}
   1562
   1563static void do_unregister_framebuffer(struct fb_info *fb_info);
   1564
   1565#define VGA_FB_PHYS 0xA0000
   1566static void do_remove_conflicting_framebuffers(struct apertures_struct *a,
   1567					       const char *name, bool primary)
   1568{
   1569	int i;
   1570
   1571	/* check all firmware fbs and kick off if the base addr overlaps */
   1572	for_each_registered_fb(i) {
   1573		struct apertures_struct *gen_aper;
   1574		struct device *device;
   1575
   1576		if (!(registered_fb[i]->flags & FBINFO_MISC_FIRMWARE))
   1577			continue;
   1578
   1579		gen_aper = registered_fb[i]->apertures;
   1580		device = registered_fb[i]->device;
   1581		if (fb_do_apertures_overlap(gen_aper, a) ||
   1582			(primary && gen_aper && gen_aper->count &&
   1583			 gen_aper->ranges[0].base == VGA_FB_PHYS)) {
   1584
   1585			printk(KERN_INFO "fb%d: switching to %s from %s\n",
   1586			       i, name, registered_fb[i]->fix.id);
   1587
   1588			/*
   1589			 * If we kick-out a firmware driver, we also want to remove
   1590			 * the underlying platform device, such as simple-framebuffer,
   1591			 * VESA, EFI, etc. A native driver will then be able to
   1592			 * allocate the memory range.
   1593			 *
   1594			 * If it's not a platform device, at least print a warning. A
   1595			 * fix would add code to remove the device from the system. For
   1596			 * framebuffers without any Linux device, print a warning as
   1597			 * well.
   1598			 */
   1599			if (!device) {
   1600				pr_warn("fb%d: no device set\n", i);
   1601				do_unregister_framebuffer(registered_fb[i]);
   1602			} else if (dev_is_platform(device)) {
   1603				registered_fb[i]->forced_out = true;
   1604				platform_device_unregister(to_platform_device(device));
   1605			} else {
   1606				pr_warn("fb%d: cannot remove device\n", i);
   1607				do_unregister_framebuffer(registered_fb[i]);
   1608			}
   1609		}
   1610	}
   1611}
   1612
   1613static int do_register_framebuffer(struct fb_info *fb_info)
   1614{
   1615	int i;
   1616	struct fb_videomode mode;
   1617
   1618	if (fb_check_foreignness(fb_info))
   1619		return -ENOSYS;
   1620
   1621	do_remove_conflicting_framebuffers(fb_info->apertures,
   1622					   fb_info->fix.id,
   1623					   fb_is_primary_device(fb_info));
   1624
   1625	if (num_registered_fb == FB_MAX)
   1626		return -ENXIO;
   1627
   1628	num_registered_fb++;
   1629	for (i = 0 ; i < FB_MAX; i++)
   1630		if (!registered_fb[i])
   1631			break;
   1632	fb_info->node = i;
   1633	refcount_set(&fb_info->count, 1);
   1634	mutex_init(&fb_info->lock);
   1635	mutex_init(&fb_info->mm_lock);
   1636
   1637	fb_info->dev = device_create(fb_class, fb_info->device,
   1638				     MKDEV(FB_MAJOR, i), NULL, "fb%d", i);
   1639	if (IS_ERR(fb_info->dev)) {
   1640		/* Not fatal */
   1641		printk(KERN_WARNING "Unable to create device for framebuffer %d; errno = %ld\n", i, PTR_ERR(fb_info->dev));
   1642		fb_info->dev = NULL;
   1643	} else
   1644		fb_init_device(fb_info);
   1645
   1646	if (fb_info->pixmap.addr == NULL) {
   1647		fb_info->pixmap.addr = kmalloc(FBPIXMAPSIZE, GFP_KERNEL);
   1648		if (fb_info->pixmap.addr) {
   1649			fb_info->pixmap.size = FBPIXMAPSIZE;
   1650			fb_info->pixmap.buf_align = 1;
   1651			fb_info->pixmap.scan_align = 1;
   1652			fb_info->pixmap.access_align = 32;
   1653			fb_info->pixmap.flags = FB_PIXMAP_DEFAULT;
   1654		}
   1655	}
   1656	fb_info->pixmap.offset = 0;
   1657
   1658	if (!fb_info->pixmap.blit_x)
   1659		fb_info->pixmap.blit_x = ~(u32)0;
   1660
   1661	if (!fb_info->pixmap.blit_y)
   1662		fb_info->pixmap.blit_y = ~(u32)0;
   1663
   1664	if (!fb_info->modelist.prev || !fb_info->modelist.next)
   1665		INIT_LIST_HEAD(&fb_info->modelist);
   1666
   1667	if (fb_info->skip_vt_switch)
   1668		pm_vt_switch_required(fb_info->dev, false);
   1669	else
   1670		pm_vt_switch_required(fb_info->dev, true);
   1671
   1672	fb_var_to_videomode(&mode, &fb_info->var);
   1673	fb_add_videomode(&mode, &fb_info->modelist);
   1674	registered_fb[i] = fb_info;
   1675
   1676#ifdef CONFIG_GUMSTIX_AM200EPD
   1677	{
   1678		struct fb_event event;
   1679		event.info = fb_info;
   1680		fb_notifier_call_chain(FB_EVENT_FB_REGISTERED, &event);
   1681	}
   1682#endif
   1683
   1684	return fbcon_fb_registered(fb_info);
   1685}
   1686
   1687static void unbind_console(struct fb_info *fb_info)
   1688{
   1689	int i = fb_info->node;
   1690
   1691	if (WARN_ON(i < 0 || i >= FB_MAX || registered_fb[i] != fb_info))
   1692		return;
   1693
   1694	fbcon_fb_unbind(fb_info);
   1695}
   1696
   1697static void unlink_framebuffer(struct fb_info *fb_info)
   1698{
   1699	int i;
   1700
   1701	i = fb_info->node;
   1702	if (WARN_ON(i < 0 || i >= FB_MAX || registered_fb[i] != fb_info))
   1703		return;
   1704
   1705	if (!fb_info->dev)
   1706		return;
   1707
   1708	device_destroy(fb_class, MKDEV(FB_MAJOR, i));
   1709
   1710	pm_vt_switch_unregister(fb_info->dev);
   1711
   1712	unbind_console(fb_info);
   1713
   1714	fb_info->dev = NULL;
   1715}
   1716
   1717static void do_unregister_framebuffer(struct fb_info *fb_info)
   1718{
   1719	unlink_framebuffer(fb_info);
   1720	if (fb_info->pixmap.addr &&
   1721	    (fb_info->pixmap.flags & FB_PIXMAP_DEFAULT)) {
   1722		kfree(fb_info->pixmap.addr);
   1723		fb_info->pixmap.addr = NULL;
   1724	}
   1725
   1726	fb_destroy_modelist(&fb_info->modelist);
   1727	registered_fb[fb_info->node] = NULL;
   1728	num_registered_fb--;
   1729	fb_cleanup_device(fb_info);
   1730#ifdef CONFIG_GUMSTIX_AM200EPD
   1731	{
   1732		struct fb_event event;
   1733		event.info = fb_info;
   1734		fb_notifier_call_chain(FB_EVENT_FB_UNREGISTERED, &event);
   1735	}
   1736#endif
   1737	fbcon_fb_unregistered(fb_info);
   1738
   1739	/* this may free fb info */
   1740	put_fb_info(fb_info);
   1741}
   1742
   1743/**
   1744 * remove_conflicting_framebuffers - remove firmware-configured framebuffers
   1745 * @a: memory range, users of which are to be removed
   1746 * @name: requesting driver name
   1747 * @primary: also kick vga16fb if present
   1748 *
   1749 * This function removes framebuffer devices (initialized by firmware/bootloader)
   1750 * which use memory range described by @a. If @a is NULL all such devices are
   1751 * removed.
   1752 */
   1753int remove_conflicting_framebuffers(struct apertures_struct *a,
   1754				    const char *name, bool primary)
   1755{
   1756	bool do_free = false;
   1757
   1758	if (!a) {
   1759		a = alloc_apertures(1);
   1760		if (!a)
   1761			return -ENOMEM;
   1762
   1763		a->ranges[0].base = 0;
   1764		a->ranges[0].size = ~0;
   1765		do_free = true;
   1766	}
   1767
   1768	/*
   1769	 * If a driver asked to unregister a platform device registered by
   1770	 * sysfb, then can be assumed that this is a driver for a display
   1771	 * that is set up by the system firmware and has a generic driver.
   1772	 *
   1773	 * Drivers for devices that don't have a generic driver will never
   1774	 * ask for this, so let's assume that a real driver for the display
   1775	 * was already probed and prevent sysfb to register devices later.
   1776	 */
   1777	sysfb_disable();
   1778
   1779	mutex_lock(&registration_lock);
   1780	do_remove_conflicting_framebuffers(a, name, primary);
   1781	mutex_unlock(&registration_lock);
   1782
   1783	if (do_free)
   1784		kfree(a);
   1785
   1786	return 0;
   1787}
   1788EXPORT_SYMBOL(remove_conflicting_framebuffers);
   1789
   1790/**
   1791 * remove_conflicting_pci_framebuffers - remove firmware-configured framebuffers for PCI devices
   1792 * @pdev: PCI device
   1793 * @name: requesting driver name
   1794 *
   1795 * This function removes framebuffer devices (eg. initialized by firmware)
   1796 * using memory range configured for any of @pdev's memory bars.
   1797 *
   1798 * The function assumes that PCI device with shadowed ROM drives a primary
   1799 * display and so kicks out vga16fb.
   1800 */
   1801int remove_conflicting_pci_framebuffers(struct pci_dev *pdev, const char *name)
   1802{
   1803	struct apertures_struct *ap;
   1804	bool primary = false;
   1805	int err, idx, bar;
   1806
   1807	for (idx = 0, bar = 0; bar < PCI_STD_NUM_BARS; bar++) {
   1808		if (!(pci_resource_flags(pdev, bar) & IORESOURCE_MEM))
   1809			continue;
   1810		idx++;
   1811	}
   1812
   1813	ap = alloc_apertures(idx);
   1814	if (!ap)
   1815		return -ENOMEM;
   1816
   1817	for (idx = 0, bar = 0; bar < PCI_STD_NUM_BARS; bar++) {
   1818		if (!(pci_resource_flags(pdev, bar) & IORESOURCE_MEM))
   1819			continue;
   1820		ap->ranges[idx].base = pci_resource_start(pdev, bar);
   1821		ap->ranges[idx].size = pci_resource_len(pdev, bar);
   1822		pci_dbg(pdev, "%s: bar %d: 0x%lx -> 0x%lx\n", __func__, bar,
   1823			(unsigned long)pci_resource_start(pdev, bar),
   1824			(unsigned long)pci_resource_end(pdev, bar));
   1825		idx++;
   1826	}
   1827
   1828#ifdef CONFIG_X86
   1829	primary = pdev->resource[PCI_ROM_RESOURCE].flags &
   1830					IORESOURCE_ROM_SHADOW;
   1831#endif
   1832	err = remove_conflicting_framebuffers(ap, name, primary);
   1833	kfree(ap);
   1834	return err;
   1835}
   1836EXPORT_SYMBOL(remove_conflicting_pci_framebuffers);
   1837
   1838/**
   1839 *	register_framebuffer - registers a frame buffer device
   1840 *	@fb_info: frame buffer info structure
   1841 *
   1842 *	Registers a frame buffer device @fb_info.
   1843 *
   1844 *	Returns negative errno on error, or zero for success.
   1845 *
   1846 */
   1847int
   1848register_framebuffer(struct fb_info *fb_info)
   1849{
   1850	int ret;
   1851
   1852	mutex_lock(&registration_lock);
   1853	ret = do_register_framebuffer(fb_info);
   1854	mutex_unlock(&registration_lock);
   1855
   1856	return ret;
   1857}
   1858EXPORT_SYMBOL(register_framebuffer);
   1859
   1860/**
   1861 *	unregister_framebuffer - releases a frame buffer device
   1862 *	@fb_info: frame buffer info structure
   1863 *
   1864 *	Unregisters a frame buffer device @fb_info.
   1865 *
   1866 *	Returns negative errno on error, or zero for success.
   1867 *
   1868 *      This function will also notify the framebuffer console
   1869 *      to release the driver.
   1870 *
   1871 *      This is meant to be called within a driver's module_exit()
   1872 *      function. If this is called outside module_exit(), ensure
   1873 *      that the driver implements fb_open() and fb_release() to
   1874 *      check that no processes are using the device.
   1875 */
   1876void
   1877unregister_framebuffer(struct fb_info *fb_info)
   1878{
   1879	bool forced_out = fb_info->forced_out;
   1880
   1881	if (!forced_out)
   1882		mutex_lock(&registration_lock);
   1883	do_unregister_framebuffer(fb_info);
   1884	if (!forced_out)
   1885		mutex_unlock(&registration_lock);
   1886}
   1887EXPORT_SYMBOL(unregister_framebuffer);
   1888
   1889/**
   1890 *	fb_set_suspend - low level driver signals suspend
   1891 *	@info: framebuffer affected
   1892 *	@state: 0 = resuming, !=0 = suspending
   1893 *
   1894 *	This is meant to be used by low level drivers to
   1895 * 	signal suspend/resume to the core & clients.
   1896 *	It must be called with the console semaphore held
   1897 */
   1898void fb_set_suspend(struct fb_info *info, int state)
   1899{
   1900	WARN_CONSOLE_UNLOCKED();
   1901
   1902	if (state) {
   1903		fbcon_suspended(info);
   1904		info->state = FBINFO_STATE_SUSPENDED;
   1905	} else {
   1906		info->state = FBINFO_STATE_RUNNING;
   1907		fbcon_resumed(info);
   1908	}
   1909}
   1910EXPORT_SYMBOL(fb_set_suspend);
   1911
   1912/**
   1913 *	fbmem_init - init frame buffer subsystem
   1914 *
   1915 *	Initialize the frame buffer subsystem.
   1916 *
   1917 *	NOTE: This function is _only_ to be called by drivers/char/mem.c.
   1918 *
   1919 */
   1920
   1921static int __init
   1922fbmem_init(void)
   1923{
   1924	int ret;
   1925
   1926	if (!proc_create_seq("fb", 0, NULL, &proc_fb_seq_ops))
   1927		return -ENOMEM;
   1928
   1929	ret = register_chrdev(FB_MAJOR, "fb", &fb_fops);
   1930	if (ret) {
   1931		printk("unable to get major %d for fb devs\n", FB_MAJOR);
   1932		goto err_chrdev;
   1933	}
   1934
   1935	fb_class = class_create(THIS_MODULE, "graphics");
   1936	if (IS_ERR(fb_class)) {
   1937		ret = PTR_ERR(fb_class);
   1938		pr_warn("Unable to create fb class; errno = %d\n", ret);
   1939		fb_class = NULL;
   1940		goto err_class;
   1941	}
   1942
   1943	fb_console_init();
   1944
   1945	return 0;
   1946
   1947err_class:
   1948	unregister_chrdev(FB_MAJOR, "fb");
   1949err_chrdev:
   1950	remove_proc_entry("fb", NULL);
   1951	return ret;
   1952}
   1953
   1954#ifdef MODULE
   1955module_init(fbmem_init);
   1956static void __exit
   1957fbmem_exit(void)
   1958{
   1959	fb_console_exit();
   1960
   1961	remove_proc_entry("fb", NULL);
   1962	class_destroy(fb_class);
   1963	unregister_chrdev(FB_MAJOR, "fb");
   1964}
   1965
   1966module_exit(fbmem_exit);
   1967MODULE_LICENSE("GPL");
   1968MODULE_DESCRIPTION("Framebuffer base");
   1969#else
   1970subsys_initcall(fbmem_init);
   1971#endif
   1972
   1973int fb_new_modelist(struct fb_info *info)
   1974{
   1975	struct fb_var_screeninfo var = info->var;
   1976	struct list_head *pos, *n;
   1977	struct fb_modelist *modelist;
   1978	struct fb_videomode *m, mode;
   1979	int err;
   1980
   1981	list_for_each_safe(pos, n, &info->modelist) {
   1982		modelist = list_entry(pos, struct fb_modelist, list);
   1983		m = &modelist->mode;
   1984		fb_videomode_to_var(&var, m);
   1985		var.activate = FB_ACTIVATE_TEST;
   1986		err = fb_set_var(info, &var);
   1987		fb_var_to_videomode(&mode, &var);
   1988		if (err || !fb_mode_is_equal(m, &mode)) {
   1989			list_del(pos);
   1990			kfree(pos);
   1991		}
   1992	}
   1993
   1994	if (list_empty(&info->modelist))
   1995		return 1;
   1996
   1997	fbcon_new_modelist(info);
   1998
   1999	return 0;
   2000}
   2001
   2002MODULE_LICENSE("GPL");