mbochs.c 36 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485
  1. // SPDX-License-Identifier: GPL-2.0
  2. /*
  3. * Mediated virtual PCI display host device driver
  4. *
  5. * Emulate enough of qemu stdvga to make bochs-drm.ko happy. That is
  6. * basically the vram memory bar and the bochs dispi interface vbe
  7. * registers in the mmio register bar. Specifically it does *not*
  8. * include any legacy vga stuff. Device looks a lot like "qemu -device
  9. * secondary-vga".
  10. *
  11. * (c) Gerd Hoffmann <kraxel@redhat.com>
  12. *
  13. * based on mtty driver which is:
  14. * Copyright (c) 2016, NVIDIA CORPORATION. All rights reserved.
  15. * Author: Neo Jia <cjia@nvidia.com>
  16. * Kirti Wankhede <kwankhede@nvidia.com>
  17. *
  18. * This program is free software; you can redistribute it and/or modify
  19. * it under the terms of the GNU General Public License version 2 as
  20. * published by the Free Software Foundation.
  21. */
  22. #include <linux/init.h>
  23. #include <linux/module.h>
  24. #include <linux/device.h>
  25. #include <linux/kernel.h>
  26. #include <linux/slab.h>
  27. #include <linux/vmalloc.h>
  28. #include <linux/cdev.h>
  29. #include <linux/vfio.h>
  30. #include <linux/iommu.h>
  31. #include <linux/sysfs.h>
  32. #include <linux/mdev.h>
  33. #include <linux/pci.h>
  34. #include <linux/dma-buf.h>
  35. #include <linux/highmem.h>
  36. #include <drm/drm_fourcc.h>
  37. #include <drm/drm_rect.h>
  38. #include <drm/drm_modeset_lock.h>
  39. #include <drm/drm_property.h>
  40. #include <drm/drm_plane.h>
  41. #define VBE_DISPI_INDEX_ID 0x0
  42. #define VBE_DISPI_INDEX_XRES 0x1
  43. #define VBE_DISPI_INDEX_YRES 0x2
  44. #define VBE_DISPI_INDEX_BPP 0x3
  45. #define VBE_DISPI_INDEX_ENABLE 0x4
  46. #define VBE_DISPI_INDEX_BANK 0x5
  47. #define VBE_DISPI_INDEX_VIRT_WIDTH 0x6
  48. #define VBE_DISPI_INDEX_VIRT_HEIGHT 0x7
  49. #define VBE_DISPI_INDEX_X_OFFSET 0x8
  50. #define VBE_DISPI_INDEX_Y_OFFSET 0x9
  51. #define VBE_DISPI_INDEX_VIDEO_MEMORY_64K 0xa
  52. #define VBE_DISPI_INDEX_COUNT 0xb
  53. #define VBE_DISPI_ID0 0xB0C0
  54. #define VBE_DISPI_ID1 0xB0C1
  55. #define VBE_DISPI_ID2 0xB0C2
  56. #define VBE_DISPI_ID3 0xB0C3
  57. #define VBE_DISPI_ID4 0xB0C4
  58. #define VBE_DISPI_ID5 0xB0C5
  59. #define VBE_DISPI_DISABLED 0x00
  60. #define VBE_DISPI_ENABLED 0x01
  61. #define VBE_DISPI_GETCAPS 0x02
  62. #define VBE_DISPI_8BIT_DAC 0x20
  63. #define VBE_DISPI_LFB_ENABLED 0x40
  64. #define VBE_DISPI_NOCLEARMEM 0x80
  65. #define MBOCHS_NAME "mbochs"
  66. #define MBOCHS_CLASS_NAME "mbochs"
  67. #define MBOCHS_EDID_REGION_INDEX VFIO_PCI_NUM_REGIONS
  68. #define MBOCHS_NUM_REGIONS (MBOCHS_EDID_REGION_INDEX+1)
  69. #define MBOCHS_CONFIG_SPACE_SIZE 0xff
  70. #define MBOCHS_MMIO_BAR_OFFSET PAGE_SIZE
  71. #define MBOCHS_MMIO_BAR_SIZE PAGE_SIZE
  72. #define MBOCHS_EDID_OFFSET (MBOCHS_MMIO_BAR_OFFSET + \
  73. MBOCHS_MMIO_BAR_SIZE)
  74. #define MBOCHS_EDID_SIZE PAGE_SIZE
  75. #define MBOCHS_MEMORY_BAR_OFFSET (MBOCHS_EDID_OFFSET + \
  76. MBOCHS_EDID_SIZE)
  77. #define MBOCHS_EDID_BLOB_OFFSET (MBOCHS_EDID_SIZE/2)
  78. #define STORE_LE16(addr, val) (*(u16 *)addr = val)
  79. #define STORE_LE32(addr, val) (*(u32 *)addr = val)
  80. MODULE_LICENSE("GPL v2");
  81. static int max_mbytes = 256;
  82. module_param_named(count, max_mbytes, int, 0444);
  83. MODULE_PARM_DESC(mem, "megabytes available to " MBOCHS_NAME " devices");
  84. #define MBOCHS_TYPE_1 "small"
  85. #define MBOCHS_TYPE_2 "medium"
  86. #define MBOCHS_TYPE_3 "large"
  87. static const struct mbochs_type {
  88. const char *name;
  89. u32 mbytes;
  90. u32 max_x;
  91. u32 max_y;
  92. } mbochs_types[] = {
  93. {
  94. .name = MBOCHS_CLASS_NAME "-" MBOCHS_TYPE_1,
  95. .mbytes = 4,
  96. .max_x = 800,
  97. .max_y = 600,
  98. }, {
  99. .name = MBOCHS_CLASS_NAME "-" MBOCHS_TYPE_2,
  100. .mbytes = 16,
  101. .max_x = 1920,
  102. .max_y = 1440,
  103. }, {
  104. .name = MBOCHS_CLASS_NAME "-" MBOCHS_TYPE_3,
  105. .mbytes = 64,
  106. .max_x = 0,
  107. .max_y = 0,
  108. },
  109. };
  110. static dev_t mbochs_devt;
  111. static struct class *mbochs_class;
  112. static struct cdev mbochs_cdev;
  113. static struct device mbochs_dev;
  114. static int mbochs_used_mbytes;
  115. struct vfio_region_info_ext {
  116. struct vfio_region_info base;
  117. struct vfio_region_info_cap_type type;
  118. };
  119. struct mbochs_mode {
  120. u32 drm_format;
  121. u32 bytepp;
  122. u32 width;
  123. u32 height;
  124. u32 stride;
  125. u32 __pad;
  126. u64 offset;
  127. u64 size;
  128. };
  129. struct mbochs_dmabuf {
  130. struct mbochs_mode mode;
  131. u32 id;
  132. struct page **pages;
  133. pgoff_t pagecount;
  134. struct dma_buf *buf;
  135. struct mdev_state *mdev_state;
  136. struct list_head next;
  137. bool unlinked;
  138. };
  139. /* State of each mdev device */
  140. struct mdev_state {
  141. u8 *vconfig;
  142. u64 bar_mask[3];
  143. u32 memory_bar_mask;
  144. struct mutex ops_lock;
  145. struct mdev_device *mdev;
  146. const struct mbochs_type *type;
  147. u16 vbe[VBE_DISPI_INDEX_COUNT];
  148. u64 memsize;
  149. struct page **pages;
  150. pgoff_t pagecount;
  151. struct vfio_region_gfx_edid edid_regs;
  152. u8 edid_blob[0x400];
  153. struct list_head dmabufs;
  154. u32 active_id;
  155. u32 next_id;
  156. };
  157. static const char *vbe_name_list[VBE_DISPI_INDEX_COUNT] = {
  158. [VBE_DISPI_INDEX_ID] = "id",
  159. [VBE_DISPI_INDEX_XRES] = "xres",
  160. [VBE_DISPI_INDEX_YRES] = "yres",
  161. [VBE_DISPI_INDEX_BPP] = "bpp",
  162. [VBE_DISPI_INDEX_ENABLE] = "enable",
  163. [VBE_DISPI_INDEX_BANK] = "bank",
  164. [VBE_DISPI_INDEX_VIRT_WIDTH] = "virt-width",
  165. [VBE_DISPI_INDEX_VIRT_HEIGHT] = "virt-height",
  166. [VBE_DISPI_INDEX_X_OFFSET] = "x-offset",
  167. [VBE_DISPI_INDEX_Y_OFFSET] = "y-offset",
  168. [VBE_DISPI_INDEX_VIDEO_MEMORY_64K] = "video-mem",
  169. };
  170. static const char *vbe_name(u32 index)
  171. {
  172. if (index < ARRAY_SIZE(vbe_name_list))
  173. return vbe_name_list[index];
  174. return "(invalid)";
  175. }
  176. static struct page *__mbochs_get_page(struct mdev_state *mdev_state,
  177. pgoff_t pgoff);
  178. static struct page *mbochs_get_page(struct mdev_state *mdev_state,
  179. pgoff_t pgoff);
  180. static const struct mbochs_type *mbochs_find_type(struct kobject *kobj)
  181. {
  182. int i;
  183. for (i = 0; i < ARRAY_SIZE(mbochs_types); i++)
  184. if (strcmp(mbochs_types[i].name, kobj->name) == 0)
  185. return mbochs_types + i;
  186. return NULL;
  187. }
  188. static void mbochs_create_config_space(struct mdev_state *mdev_state)
  189. {
  190. STORE_LE16((u16 *) &mdev_state->vconfig[PCI_VENDOR_ID],
  191. 0x1234);
  192. STORE_LE16((u16 *) &mdev_state->vconfig[PCI_DEVICE_ID],
  193. 0x1111);
  194. STORE_LE16((u16 *) &mdev_state->vconfig[PCI_SUBSYSTEM_VENDOR_ID],
  195. PCI_SUBVENDOR_ID_REDHAT_QUMRANET);
  196. STORE_LE16((u16 *) &mdev_state->vconfig[PCI_SUBSYSTEM_ID],
  197. PCI_SUBDEVICE_ID_QEMU);
  198. STORE_LE16((u16 *) &mdev_state->vconfig[PCI_COMMAND],
  199. PCI_COMMAND_IO | PCI_COMMAND_MEMORY);
  200. STORE_LE16((u16 *) &mdev_state->vconfig[PCI_CLASS_DEVICE],
  201. PCI_CLASS_DISPLAY_OTHER);
  202. mdev_state->vconfig[PCI_CLASS_REVISION] = 0x01;
  203. STORE_LE32((u32 *) &mdev_state->vconfig[PCI_BASE_ADDRESS_0],
  204. PCI_BASE_ADDRESS_SPACE_MEMORY |
  205. PCI_BASE_ADDRESS_MEM_TYPE_32 |
  206. PCI_BASE_ADDRESS_MEM_PREFETCH);
  207. mdev_state->bar_mask[0] = ~(mdev_state->memsize) + 1;
  208. STORE_LE32((u32 *) &mdev_state->vconfig[PCI_BASE_ADDRESS_2],
  209. PCI_BASE_ADDRESS_SPACE_MEMORY |
  210. PCI_BASE_ADDRESS_MEM_TYPE_32);
  211. mdev_state->bar_mask[2] = ~(MBOCHS_MMIO_BAR_SIZE) + 1;
  212. }
  213. static int mbochs_check_framebuffer(struct mdev_state *mdev_state,
  214. struct mbochs_mode *mode)
  215. {
  216. struct device *dev = mdev_dev(mdev_state->mdev);
  217. u16 *vbe = mdev_state->vbe;
  218. u32 virt_width;
  219. WARN_ON(!mutex_is_locked(&mdev_state->ops_lock));
  220. if (!(vbe[VBE_DISPI_INDEX_ENABLE] & VBE_DISPI_ENABLED))
  221. goto nofb;
  222. memset(mode, 0, sizeof(*mode));
  223. switch (vbe[VBE_DISPI_INDEX_BPP]) {
  224. case 32:
  225. mode->drm_format = DRM_FORMAT_XRGB8888;
  226. mode->bytepp = 4;
  227. break;
  228. default:
  229. dev_info_ratelimited(dev, "%s: bpp %d not supported\n",
  230. __func__, vbe[VBE_DISPI_INDEX_BPP]);
  231. goto nofb;
  232. }
  233. mode->width = vbe[VBE_DISPI_INDEX_XRES];
  234. mode->height = vbe[VBE_DISPI_INDEX_YRES];
  235. virt_width = vbe[VBE_DISPI_INDEX_VIRT_WIDTH];
  236. if (virt_width < mode->width)
  237. virt_width = mode->width;
  238. mode->stride = virt_width * mode->bytepp;
  239. mode->size = (u64)mode->stride * mode->height;
  240. mode->offset = ((u64)vbe[VBE_DISPI_INDEX_X_OFFSET] * mode->bytepp +
  241. (u64)vbe[VBE_DISPI_INDEX_Y_OFFSET] * mode->stride);
  242. if (mode->width < 64 || mode->height < 64) {
  243. dev_info_ratelimited(dev, "%s: invalid resolution %dx%d\n",
  244. __func__, mode->width, mode->height);
  245. goto nofb;
  246. }
  247. if (mode->offset + mode->size > mdev_state->memsize) {
  248. dev_info_ratelimited(dev, "%s: framebuffer memory overflow\n",
  249. __func__);
  250. goto nofb;
  251. }
  252. return 0;
  253. nofb:
  254. memset(mode, 0, sizeof(*mode));
  255. return -EINVAL;
  256. }
  257. static bool mbochs_modes_equal(struct mbochs_mode *mode1,
  258. struct mbochs_mode *mode2)
  259. {
  260. return memcmp(mode1, mode2, sizeof(struct mbochs_mode)) == 0;
  261. }
  262. static void handle_pci_cfg_write(struct mdev_state *mdev_state, u16 offset,
  263. char *buf, u32 count)
  264. {
  265. struct device *dev = mdev_dev(mdev_state->mdev);
  266. int index = (offset - PCI_BASE_ADDRESS_0) / 0x04;
  267. u32 cfg_addr;
  268. switch (offset) {
  269. case PCI_BASE_ADDRESS_0:
  270. case PCI_BASE_ADDRESS_2:
  271. cfg_addr = *(u32 *)buf;
  272. if (cfg_addr == 0xffffffff) {
  273. cfg_addr = (cfg_addr & mdev_state->bar_mask[index]);
  274. } else {
  275. cfg_addr &= PCI_BASE_ADDRESS_MEM_MASK;
  276. if (cfg_addr)
  277. dev_info(dev, "BAR #%d @ 0x%x\n",
  278. index, cfg_addr);
  279. }
  280. cfg_addr |= (mdev_state->vconfig[offset] &
  281. ~PCI_BASE_ADDRESS_MEM_MASK);
  282. STORE_LE32(&mdev_state->vconfig[offset], cfg_addr);
  283. break;
  284. }
  285. }
  286. static void handle_mmio_write(struct mdev_state *mdev_state, u16 offset,
  287. char *buf, u32 count)
  288. {
  289. struct device *dev = mdev_dev(mdev_state->mdev);
  290. int index;
  291. u16 reg16;
  292. switch (offset) {
  293. case 0x400 ... 0x41f: /* vga ioports remapped */
  294. goto unhandled;
  295. case 0x500 ... 0x515: /* bochs dispi interface */
  296. if (count != 2)
  297. goto unhandled;
  298. index = (offset - 0x500) / 2;
  299. reg16 = *(u16 *)buf;
  300. if (index < ARRAY_SIZE(mdev_state->vbe))
  301. mdev_state->vbe[index] = reg16;
  302. dev_dbg(dev, "%s: vbe write %d = %d (%s)\n",
  303. __func__, index, reg16, vbe_name(index));
  304. break;
  305. case 0x600 ... 0x607: /* qemu extended regs */
  306. goto unhandled;
  307. default:
  308. unhandled:
  309. dev_dbg(dev, "%s: @0x%03x, count %d (unhandled)\n",
  310. __func__, offset, count);
  311. break;
  312. }
  313. }
  314. static void handle_mmio_read(struct mdev_state *mdev_state, u16 offset,
  315. char *buf, u32 count)
  316. {
  317. struct device *dev = mdev_dev(mdev_state->mdev);
  318. struct vfio_region_gfx_edid *edid;
  319. u16 reg16 = 0;
  320. int index;
  321. switch (offset) {
  322. case 0x000 ... 0x3ff: /* edid block */
  323. edid = &mdev_state->edid_regs;
  324. if (edid->link_state != VFIO_DEVICE_GFX_LINK_STATE_UP ||
  325. offset >= edid->edid_size) {
  326. memset(buf, 0, count);
  327. break;
  328. }
  329. memcpy(buf, mdev_state->edid_blob + offset, count);
  330. break;
  331. case 0x500 ... 0x515: /* bochs dispi interface */
  332. if (count != 2)
  333. goto unhandled;
  334. index = (offset - 0x500) / 2;
  335. if (index < ARRAY_SIZE(mdev_state->vbe))
  336. reg16 = mdev_state->vbe[index];
  337. dev_dbg(dev, "%s: vbe read %d = %d (%s)\n",
  338. __func__, index, reg16, vbe_name(index));
  339. *(u16 *)buf = reg16;
  340. break;
  341. default:
  342. unhandled:
  343. dev_dbg(dev, "%s: @0x%03x, count %d (unhandled)\n",
  344. __func__, offset, count);
  345. memset(buf, 0, count);
  346. break;
  347. }
  348. }
  349. static void handle_edid_regs(struct mdev_state *mdev_state, u16 offset,
  350. char *buf, u32 count, bool is_write)
  351. {
  352. char *regs = (void *)&mdev_state->edid_regs;
  353. if (offset + count > sizeof(mdev_state->edid_regs))
  354. return;
  355. if (count != 4)
  356. return;
  357. if (offset % 4)
  358. return;
  359. if (is_write) {
  360. switch (offset) {
  361. case offsetof(struct vfio_region_gfx_edid, link_state):
  362. case offsetof(struct vfio_region_gfx_edid, edid_size):
  363. memcpy(regs + offset, buf, count);
  364. break;
  365. default:
  366. /* read-only regs */
  367. break;
  368. }
  369. } else {
  370. memcpy(buf, regs + offset, count);
  371. }
  372. }
  373. static void handle_edid_blob(struct mdev_state *mdev_state, u16 offset,
  374. char *buf, u32 count, bool is_write)
  375. {
  376. if (offset + count > mdev_state->edid_regs.edid_max_size)
  377. return;
  378. if (is_write)
  379. memcpy(mdev_state->edid_blob + offset, buf, count);
  380. else
  381. memcpy(buf, mdev_state->edid_blob + offset, count);
  382. }
  383. static ssize_t mdev_access(struct mdev_device *mdev, char *buf, size_t count,
  384. loff_t pos, bool is_write)
  385. {
  386. struct mdev_state *mdev_state = mdev_get_drvdata(mdev);
  387. struct device *dev = mdev_dev(mdev);
  388. struct page *pg;
  389. loff_t poff;
  390. char *map;
  391. int ret = 0;
  392. mutex_lock(&mdev_state->ops_lock);
  393. if (pos < MBOCHS_CONFIG_SPACE_SIZE) {
  394. if (is_write)
  395. handle_pci_cfg_write(mdev_state, pos, buf, count);
  396. else
  397. memcpy(buf, (mdev_state->vconfig + pos), count);
  398. } else if (pos >= MBOCHS_MMIO_BAR_OFFSET &&
  399. pos + count <= (MBOCHS_MMIO_BAR_OFFSET +
  400. MBOCHS_MMIO_BAR_SIZE)) {
  401. pos -= MBOCHS_MMIO_BAR_OFFSET;
  402. if (is_write)
  403. handle_mmio_write(mdev_state, pos, buf, count);
  404. else
  405. handle_mmio_read(mdev_state, pos, buf, count);
  406. } else if (pos >= MBOCHS_EDID_OFFSET &&
  407. pos + count <= (MBOCHS_EDID_OFFSET +
  408. MBOCHS_EDID_SIZE)) {
  409. pos -= MBOCHS_EDID_OFFSET;
  410. if (pos < MBOCHS_EDID_BLOB_OFFSET) {
  411. handle_edid_regs(mdev_state, pos, buf, count, is_write);
  412. } else {
  413. pos -= MBOCHS_EDID_BLOB_OFFSET;
  414. handle_edid_blob(mdev_state, pos, buf, count, is_write);
  415. }
  416. } else if (pos >= MBOCHS_MEMORY_BAR_OFFSET &&
  417. pos + count <=
  418. MBOCHS_MEMORY_BAR_OFFSET + mdev_state->memsize) {
  419. pos -= MBOCHS_MMIO_BAR_OFFSET;
  420. poff = pos & ~PAGE_MASK;
  421. pg = __mbochs_get_page(mdev_state, pos >> PAGE_SHIFT);
  422. map = kmap(pg);
  423. if (is_write)
  424. memcpy(map + poff, buf, count);
  425. else
  426. memcpy(buf, map + poff, count);
  427. kunmap(pg);
  428. put_page(pg);
  429. } else {
  430. dev_dbg(dev, "%s: %s @0x%llx (unhandled)\n",
  431. __func__, is_write ? "WR" : "RD", pos);
  432. ret = -1;
  433. goto accessfailed;
  434. }
  435. ret = count;
  436. accessfailed:
  437. mutex_unlock(&mdev_state->ops_lock);
  438. return ret;
  439. }
  440. static int mbochs_reset(struct mdev_device *mdev)
  441. {
  442. struct mdev_state *mdev_state = mdev_get_drvdata(mdev);
  443. u32 size64k = mdev_state->memsize / (64 * 1024);
  444. int i;
  445. for (i = 0; i < ARRAY_SIZE(mdev_state->vbe); i++)
  446. mdev_state->vbe[i] = 0;
  447. mdev_state->vbe[VBE_DISPI_INDEX_ID] = VBE_DISPI_ID5;
  448. mdev_state->vbe[VBE_DISPI_INDEX_VIDEO_MEMORY_64K] = size64k;
  449. return 0;
  450. }
  451. static int mbochs_create(struct kobject *kobj, struct mdev_device *mdev)
  452. {
  453. const struct mbochs_type *type = mbochs_find_type(kobj);
  454. struct device *dev = mdev_dev(mdev);
  455. struct mdev_state *mdev_state;
  456. if (!type)
  457. type = &mbochs_types[0];
  458. if (type->mbytes + mbochs_used_mbytes > max_mbytes)
  459. return -ENOMEM;
  460. mdev_state = kzalloc(sizeof(struct mdev_state), GFP_KERNEL);
  461. if (mdev_state == NULL)
  462. return -ENOMEM;
  463. mdev_state->vconfig = kzalloc(MBOCHS_CONFIG_SPACE_SIZE, GFP_KERNEL);
  464. if (mdev_state->vconfig == NULL)
  465. goto err_mem;
  466. mdev_state->memsize = type->mbytes * 1024 * 1024;
  467. mdev_state->pagecount = mdev_state->memsize >> PAGE_SHIFT;
  468. mdev_state->pages = kcalloc(mdev_state->pagecount,
  469. sizeof(struct page *),
  470. GFP_KERNEL);
  471. if (!mdev_state->pages)
  472. goto err_mem;
  473. dev_info(dev, "%s: %s, %d MB, %ld pages\n", __func__,
  474. kobj->name, type->mbytes, mdev_state->pagecount);
  475. mutex_init(&mdev_state->ops_lock);
  476. mdev_state->mdev = mdev;
  477. mdev_set_drvdata(mdev, mdev_state);
  478. INIT_LIST_HEAD(&mdev_state->dmabufs);
  479. mdev_state->next_id = 1;
  480. mdev_state->type = type;
  481. mdev_state->edid_regs.max_xres = type->max_x;
  482. mdev_state->edid_regs.max_yres = type->max_y;
  483. mdev_state->edid_regs.edid_offset = MBOCHS_EDID_BLOB_OFFSET;
  484. mdev_state->edid_regs.edid_max_size = sizeof(mdev_state->edid_blob);
  485. mbochs_create_config_space(mdev_state);
  486. mbochs_reset(mdev);
  487. mbochs_used_mbytes += type->mbytes;
  488. return 0;
  489. err_mem:
  490. kfree(mdev_state->vconfig);
  491. kfree(mdev_state);
  492. return -ENOMEM;
  493. }
  494. static int mbochs_remove(struct mdev_device *mdev)
  495. {
  496. struct mdev_state *mdev_state = mdev_get_drvdata(mdev);
  497. mbochs_used_mbytes -= mdev_state->type->mbytes;
  498. mdev_set_drvdata(mdev, NULL);
  499. kfree(mdev_state->pages);
  500. kfree(mdev_state->vconfig);
  501. kfree(mdev_state);
  502. return 0;
  503. }
  504. static ssize_t mbochs_read(struct mdev_device *mdev, char __user *buf,
  505. size_t count, loff_t *ppos)
  506. {
  507. unsigned int done = 0;
  508. int ret;
  509. while (count) {
  510. size_t filled;
  511. if (count >= 4 && !(*ppos % 4)) {
  512. u32 val;
  513. ret = mdev_access(mdev, (char *)&val, sizeof(val),
  514. *ppos, false);
  515. if (ret <= 0)
  516. goto read_err;
  517. if (copy_to_user(buf, &val, sizeof(val)))
  518. goto read_err;
  519. filled = 4;
  520. } else if (count >= 2 && !(*ppos % 2)) {
  521. u16 val;
  522. ret = mdev_access(mdev, (char *)&val, sizeof(val),
  523. *ppos, false);
  524. if (ret <= 0)
  525. goto read_err;
  526. if (copy_to_user(buf, &val, sizeof(val)))
  527. goto read_err;
  528. filled = 2;
  529. } else {
  530. u8 val;
  531. ret = mdev_access(mdev, (char *)&val, sizeof(val),
  532. *ppos, false);
  533. if (ret <= 0)
  534. goto read_err;
  535. if (copy_to_user(buf, &val, sizeof(val)))
  536. goto read_err;
  537. filled = 1;
  538. }
  539. count -= filled;
  540. done += filled;
  541. *ppos += filled;
  542. buf += filled;
  543. }
  544. return done;
  545. read_err:
  546. return -EFAULT;
  547. }
  548. static ssize_t mbochs_write(struct mdev_device *mdev, const char __user *buf,
  549. size_t count, loff_t *ppos)
  550. {
  551. unsigned int done = 0;
  552. int ret;
  553. while (count) {
  554. size_t filled;
  555. if (count >= 4 && !(*ppos % 4)) {
  556. u32 val;
  557. if (copy_from_user(&val, buf, sizeof(val)))
  558. goto write_err;
  559. ret = mdev_access(mdev, (char *)&val, sizeof(val),
  560. *ppos, true);
  561. if (ret <= 0)
  562. goto write_err;
  563. filled = 4;
  564. } else if (count >= 2 && !(*ppos % 2)) {
  565. u16 val;
  566. if (copy_from_user(&val, buf, sizeof(val)))
  567. goto write_err;
  568. ret = mdev_access(mdev, (char *)&val, sizeof(val),
  569. *ppos, true);
  570. if (ret <= 0)
  571. goto write_err;
  572. filled = 2;
  573. } else {
  574. u8 val;
  575. if (copy_from_user(&val, buf, sizeof(val)))
  576. goto write_err;
  577. ret = mdev_access(mdev, (char *)&val, sizeof(val),
  578. *ppos, true);
  579. if (ret <= 0)
  580. goto write_err;
  581. filled = 1;
  582. }
  583. count -= filled;
  584. done += filled;
  585. *ppos += filled;
  586. buf += filled;
  587. }
  588. return done;
  589. write_err:
  590. return -EFAULT;
  591. }
  592. static struct page *__mbochs_get_page(struct mdev_state *mdev_state,
  593. pgoff_t pgoff)
  594. {
  595. WARN_ON(!mutex_is_locked(&mdev_state->ops_lock));
  596. if (!mdev_state->pages[pgoff]) {
  597. mdev_state->pages[pgoff] =
  598. alloc_pages(GFP_HIGHUSER | __GFP_ZERO, 0);
  599. if (!mdev_state->pages[pgoff])
  600. return NULL;
  601. }
  602. get_page(mdev_state->pages[pgoff]);
  603. return mdev_state->pages[pgoff];
  604. }
  605. static struct page *mbochs_get_page(struct mdev_state *mdev_state,
  606. pgoff_t pgoff)
  607. {
  608. struct page *page;
  609. if (WARN_ON(pgoff >= mdev_state->pagecount))
  610. return NULL;
  611. mutex_lock(&mdev_state->ops_lock);
  612. page = __mbochs_get_page(mdev_state, pgoff);
  613. mutex_unlock(&mdev_state->ops_lock);
  614. return page;
  615. }
  616. static void mbochs_put_pages(struct mdev_state *mdev_state)
  617. {
  618. struct device *dev = mdev_dev(mdev_state->mdev);
  619. int i, count = 0;
  620. WARN_ON(!mutex_is_locked(&mdev_state->ops_lock));
  621. for (i = 0; i < mdev_state->pagecount; i++) {
  622. if (!mdev_state->pages[i])
  623. continue;
  624. put_page(mdev_state->pages[i]);
  625. mdev_state->pages[i] = NULL;
  626. count++;
  627. }
  628. dev_dbg(dev, "%s: %d pages released\n", __func__, count);
  629. }
  630. static vm_fault_t mbochs_region_vm_fault(struct vm_fault *vmf)
  631. {
  632. struct vm_area_struct *vma = vmf->vma;
  633. struct mdev_state *mdev_state = vma->vm_private_data;
  634. pgoff_t page_offset = (vmf->address - vma->vm_start) >> PAGE_SHIFT;
  635. if (page_offset >= mdev_state->pagecount)
  636. return VM_FAULT_SIGBUS;
  637. vmf->page = mbochs_get_page(mdev_state, page_offset);
  638. if (!vmf->page)
  639. return VM_FAULT_SIGBUS;
  640. return 0;
  641. }
  642. static const struct vm_operations_struct mbochs_region_vm_ops = {
  643. .fault = mbochs_region_vm_fault,
  644. };
  645. static int mbochs_mmap(struct mdev_device *mdev, struct vm_area_struct *vma)
  646. {
  647. struct mdev_state *mdev_state = mdev_get_drvdata(mdev);
  648. if (vma->vm_pgoff != MBOCHS_MEMORY_BAR_OFFSET >> PAGE_SHIFT)
  649. return -EINVAL;
  650. if (vma->vm_end < vma->vm_start)
  651. return -EINVAL;
  652. if (vma->vm_end - vma->vm_start > mdev_state->memsize)
  653. return -EINVAL;
  654. if ((vma->vm_flags & VM_SHARED) == 0)
  655. return -EINVAL;
  656. vma->vm_ops = &mbochs_region_vm_ops;
  657. vma->vm_private_data = mdev_state;
  658. return 0;
  659. }
  660. static vm_fault_t mbochs_dmabuf_vm_fault(struct vm_fault *vmf)
  661. {
  662. struct vm_area_struct *vma = vmf->vma;
  663. struct mbochs_dmabuf *dmabuf = vma->vm_private_data;
  664. if (WARN_ON(vmf->pgoff >= dmabuf->pagecount))
  665. return VM_FAULT_SIGBUS;
  666. vmf->page = dmabuf->pages[vmf->pgoff];
  667. get_page(vmf->page);
  668. return 0;
  669. }
  670. static const struct vm_operations_struct mbochs_dmabuf_vm_ops = {
  671. .fault = mbochs_dmabuf_vm_fault,
  672. };
  673. static int mbochs_mmap_dmabuf(struct dma_buf *buf, struct vm_area_struct *vma)
  674. {
  675. struct mbochs_dmabuf *dmabuf = buf->priv;
  676. struct device *dev = mdev_dev(dmabuf->mdev_state->mdev);
  677. dev_dbg(dev, "%s: %d\n", __func__, dmabuf->id);
  678. if ((vma->vm_flags & VM_SHARED) == 0)
  679. return -EINVAL;
  680. vma->vm_ops = &mbochs_dmabuf_vm_ops;
  681. vma->vm_private_data = dmabuf;
  682. return 0;
  683. }
  684. static void mbochs_print_dmabuf(struct mbochs_dmabuf *dmabuf,
  685. const char *prefix)
  686. {
  687. struct device *dev = mdev_dev(dmabuf->mdev_state->mdev);
  688. u32 fourcc = dmabuf->mode.drm_format;
  689. dev_dbg(dev, "%s/%d: %c%c%c%c, %dx%d, stride %d, off 0x%llx, size 0x%llx, pages %ld\n",
  690. prefix, dmabuf->id,
  691. fourcc ? ((fourcc >> 0) & 0xff) : '-',
  692. fourcc ? ((fourcc >> 8) & 0xff) : '-',
  693. fourcc ? ((fourcc >> 16) & 0xff) : '-',
  694. fourcc ? ((fourcc >> 24) & 0xff) : '-',
  695. dmabuf->mode.width, dmabuf->mode.height, dmabuf->mode.stride,
  696. dmabuf->mode.offset, dmabuf->mode.size, dmabuf->pagecount);
  697. }
  698. static struct sg_table *mbochs_map_dmabuf(struct dma_buf_attachment *at,
  699. enum dma_data_direction direction)
  700. {
  701. struct mbochs_dmabuf *dmabuf = at->dmabuf->priv;
  702. struct device *dev = mdev_dev(dmabuf->mdev_state->mdev);
  703. struct sg_table *sg;
  704. dev_dbg(dev, "%s: %d\n", __func__, dmabuf->id);
  705. sg = kzalloc(sizeof(*sg), GFP_KERNEL);
  706. if (!sg)
  707. goto err1;
  708. if (sg_alloc_table_from_pages(sg, dmabuf->pages, dmabuf->pagecount,
  709. 0, dmabuf->mode.size, GFP_KERNEL) < 0)
  710. goto err2;
  711. if (dma_map_sgtable(at->dev, sg, direction, 0))
  712. goto err3;
  713. return sg;
  714. err3:
  715. sg_free_table(sg);
  716. err2:
  717. kfree(sg);
  718. err1:
  719. return ERR_PTR(-ENOMEM);
  720. }
  721. static void mbochs_unmap_dmabuf(struct dma_buf_attachment *at,
  722. struct sg_table *sg,
  723. enum dma_data_direction direction)
  724. {
  725. struct mbochs_dmabuf *dmabuf = at->dmabuf->priv;
  726. struct device *dev = mdev_dev(dmabuf->mdev_state->mdev);
  727. dev_dbg(dev, "%s: %d\n", __func__, dmabuf->id);
  728. dma_unmap_sgtable(at->dev, sg, direction, 0);
  729. sg_free_table(sg);
  730. kfree(sg);
  731. }
  732. static void mbochs_release_dmabuf(struct dma_buf *buf)
  733. {
  734. struct mbochs_dmabuf *dmabuf = buf->priv;
  735. struct mdev_state *mdev_state = dmabuf->mdev_state;
  736. struct device *dev = mdev_dev(mdev_state->mdev);
  737. pgoff_t pg;
  738. dev_dbg(dev, "%s: %d\n", __func__, dmabuf->id);
  739. for (pg = 0; pg < dmabuf->pagecount; pg++)
  740. put_page(dmabuf->pages[pg]);
  741. mutex_lock(&mdev_state->ops_lock);
  742. dmabuf->buf = NULL;
  743. if (dmabuf->unlinked)
  744. kfree(dmabuf);
  745. mutex_unlock(&mdev_state->ops_lock);
  746. }
  747. static struct dma_buf_ops mbochs_dmabuf_ops = {
  748. .map_dma_buf = mbochs_map_dmabuf,
  749. .unmap_dma_buf = mbochs_unmap_dmabuf,
  750. .release = mbochs_release_dmabuf,
  751. .mmap = mbochs_mmap_dmabuf,
  752. };
  753. static struct mbochs_dmabuf *mbochs_dmabuf_alloc(struct mdev_state *mdev_state,
  754. struct mbochs_mode *mode)
  755. {
  756. struct mbochs_dmabuf *dmabuf;
  757. pgoff_t page_offset, pg;
  758. WARN_ON(!mutex_is_locked(&mdev_state->ops_lock));
  759. dmabuf = kzalloc(sizeof(struct mbochs_dmabuf), GFP_KERNEL);
  760. if (!dmabuf)
  761. return NULL;
  762. dmabuf->mode = *mode;
  763. dmabuf->id = mdev_state->next_id++;
  764. dmabuf->pagecount = DIV_ROUND_UP(mode->size, PAGE_SIZE);
  765. dmabuf->pages = kcalloc(dmabuf->pagecount, sizeof(struct page *),
  766. GFP_KERNEL);
  767. if (!dmabuf->pages)
  768. goto err_free_dmabuf;
  769. page_offset = dmabuf->mode.offset >> PAGE_SHIFT;
  770. for (pg = 0; pg < dmabuf->pagecount; pg++) {
  771. dmabuf->pages[pg] = __mbochs_get_page(mdev_state,
  772. page_offset + pg);
  773. if (!dmabuf->pages[pg])
  774. goto err_free_pages;
  775. }
  776. dmabuf->mdev_state = mdev_state;
  777. list_add(&dmabuf->next, &mdev_state->dmabufs);
  778. mbochs_print_dmabuf(dmabuf, __func__);
  779. return dmabuf;
  780. err_free_pages:
  781. while (pg > 0)
  782. put_page(dmabuf->pages[--pg]);
  783. kfree(dmabuf->pages);
  784. err_free_dmabuf:
  785. kfree(dmabuf);
  786. return NULL;
  787. }
  788. static struct mbochs_dmabuf *
  789. mbochs_dmabuf_find_by_mode(struct mdev_state *mdev_state,
  790. struct mbochs_mode *mode)
  791. {
  792. struct mbochs_dmabuf *dmabuf;
  793. WARN_ON(!mutex_is_locked(&mdev_state->ops_lock));
  794. list_for_each_entry(dmabuf, &mdev_state->dmabufs, next)
  795. if (mbochs_modes_equal(&dmabuf->mode, mode))
  796. return dmabuf;
  797. return NULL;
  798. }
  799. static struct mbochs_dmabuf *
  800. mbochs_dmabuf_find_by_id(struct mdev_state *mdev_state, u32 id)
  801. {
  802. struct mbochs_dmabuf *dmabuf;
  803. WARN_ON(!mutex_is_locked(&mdev_state->ops_lock));
  804. list_for_each_entry(dmabuf, &mdev_state->dmabufs, next)
  805. if (dmabuf->id == id)
  806. return dmabuf;
  807. return NULL;
  808. }
  809. static int mbochs_dmabuf_export(struct mbochs_dmabuf *dmabuf)
  810. {
  811. struct mdev_state *mdev_state = dmabuf->mdev_state;
  812. struct device *dev = mdev_dev(mdev_state->mdev);
  813. DEFINE_DMA_BUF_EXPORT_INFO(exp_info);
  814. struct dma_buf *buf;
  815. WARN_ON(!mutex_is_locked(&mdev_state->ops_lock));
  816. if (!IS_ALIGNED(dmabuf->mode.offset, PAGE_SIZE)) {
  817. dev_info_ratelimited(dev, "%s: framebuffer not page-aligned\n",
  818. __func__);
  819. return -EINVAL;
  820. }
  821. exp_info.ops = &mbochs_dmabuf_ops;
  822. exp_info.size = dmabuf->mode.size;
  823. exp_info.priv = dmabuf;
  824. buf = dma_buf_export(&exp_info);
  825. if (IS_ERR(buf)) {
  826. dev_info_ratelimited(dev, "%s: dma_buf_export failed: %ld\n",
  827. __func__, PTR_ERR(buf));
  828. return PTR_ERR(buf);
  829. }
  830. dmabuf->buf = buf;
  831. dev_dbg(dev, "%s: %d\n", __func__, dmabuf->id);
  832. return 0;
  833. }
  834. static int mbochs_get_region_info(struct mdev_device *mdev,
  835. struct vfio_region_info_ext *ext)
  836. {
  837. struct vfio_region_info *region_info = &ext->base;
  838. struct mdev_state *mdev_state;
  839. mdev_state = mdev_get_drvdata(mdev);
  840. if (!mdev_state)
  841. return -EINVAL;
  842. if (region_info->index >= MBOCHS_NUM_REGIONS)
  843. return -EINVAL;
  844. switch (region_info->index) {
  845. case VFIO_PCI_CONFIG_REGION_INDEX:
  846. region_info->offset = 0;
  847. region_info->size = MBOCHS_CONFIG_SPACE_SIZE;
  848. region_info->flags = (VFIO_REGION_INFO_FLAG_READ |
  849. VFIO_REGION_INFO_FLAG_WRITE);
  850. break;
  851. case VFIO_PCI_BAR0_REGION_INDEX:
  852. region_info->offset = MBOCHS_MEMORY_BAR_OFFSET;
  853. region_info->size = mdev_state->memsize;
  854. region_info->flags = (VFIO_REGION_INFO_FLAG_READ |
  855. VFIO_REGION_INFO_FLAG_WRITE |
  856. VFIO_REGION_INFO_FLAG_MMAP);
  857. break;
  858. case VFIO_PCI_BAR2_REGION_INDEX:
  859. region_info->offset = MBOCHS_MMIO_BAR_OFFSET;
  860. region_info->size = MBOCHS_MMIO_BAR_SIZE;
  861. region_info->flags = (VFIO_REGION_INFO_FLAG_READ |
  862. VFIO_REGION_INFO_FLAG_WRITE);
  863. break;
  864. case MBOCHS_EDID_REGION_INDEX:
  865. ext->base.argsz = sizeof(*ext);
  866. ext->base.offset = MBOCHS_EDID_OFFSET;
  867. ext->base.size = MBOCHS_EDID_SIZE;
  868. ext->base.flags = (VFIO_REGION_INFO_FLAG_READ |
  869. VFIO_REGION_INFO_FLAG_WRITE |
  870. VFIO_REGION_INFO_FLAG_CAPS);
  871. ext->base.cap_offset = offsetof(typeof(*ext), type);
  872. ext->type.header.id = VFIO_REGION_INFO_CAP_TYPE;
  873. ext->type.header.version = 1;
  874. ext->type.header.next = 0;
  875. ext->type.type = VFIO_REGION_TYPE_GFX;
  876. ext->type.subtype = VFIO_REGION_SUBTYPE_GFX_EDID;
  877. break;
  878. default:
  879. region_info->size = 0;
  880. region_info->offset = 0;
  881. region_info->flags = 0;
  882. }
  883. return 0;
  884. }
  885. static int mbochs_get_irq_info(struct mdev_device *mdev,
  886. struct vfio_irq_info *irq_info)
  887. {
  888. irq_info->count = 0;
  889. return 0;
  890. }
  891. static int mbochs_get_device_info(struct mdev_device *mdev,
  892. struct vfio_device_info *dev_info)
  893. {
  894. dev_info->flags = VFIO_DEVICE_FLAGS_PCI;
  895. dev_info->num_regions = MBOCHS_NUM_REGIONS;
  896. dev_info->num_irqs = VFIO_PCI_NUM_IRQS;
  897. return 0;
  898. }
  899. static int mbochs_query_gfx_plane(struct mdev_device *mdev,
  900. struct vfio_device_gfx_plane_info *plane)
  901. {
  902. struct mdev_state *mdev_state = mdev_get_drvdata(mdev);
  903. struct device *dev = mdev_dev(mdev);
  904. struct mbochs_dmabuf *dmabuf;
  905. struct mbochs_mode mode;
  906. int ret;
  907. if (plane->flags & VFIO_GFX_PLANE_TYPE_PROBE) {
  908. if (plane->flags == (VFIO_GFX_PLANE_TYPE_PROBE |
  909. VFIO_GFX_PLANE_TYPE_DMABUF))
  910. return 0;
  911. return -EINVAL;
  912. }
  913. if (plane->flags != VFIO_GFX_PLANE_TYPE_DMABUF)
  914. return -EINVAL;
  915. plane->drm_format_mod = 0;
  916. plane->x_pos = 0;
  917. plane->y_pos = 0;
  918. plane->x_hot = 0;
  919. plane->y_hot = 0;
  920. mutex_lock(&mdev_state->ops_lock);
  921. ret = -EINVAL;
  922. if (plane->drm_plane_type == DRM_PLANE_TYPE_PRIMARY)
  923. ret = mbochs_check_framebuffer(mdev_state, &mode);
  924. if (ret < 0) {
  925. plane->drm_format = 0;
  926. plane->width = 0;
  927. plane->height = 0;
  928. plane->stride = 0;
  929. plane->size = 0;
  930. plane->dmabuf_id = 0;
  931. goto done;
  932. }
  933. dmabuf = mbochs_dmabuf_find_by_mode(mdev_state, &mode);
  934. if (!dmabuf)
  935. mbochs_dmabuf_alloc(mdev_state, &mode);
  936. if (!dmabuf) {
  937. mutex_unlock(&mdev_state->ops_lock);
  938. return -ENOMEM;
  939. }
  940. plane->drm_format = dmabuf->mode.drm_format;
  941. plane->width = dmabuf->mode.width;
  942. plane->height = dmabuf->mode.height;
  943. plane->stride = dmabuf->mode.stride;
  944. plane->size = dmabuf->mode.size;
  945. plane->dmabuf_id = dmabuf->id;
  946. done:
  947. if (plane->drm_plane_type == DRM_PLANE_TYPE_PRIMARY &&
  948. mdev_state->active_id != plane->dmabuf_id) {
  949. dev_dbg(dev, "%s: primary: %d => %d\n", __func__,
  950. mdev_state->active_id, plane->dmabuf_id);
  951. mdev_state->active_id = plane->dmabuf_id;
  952. }
  953. mutex_unlock(&mdev_state->ops_lock);
  954. return 0;
  955. }
  956. static int mbochs_get_gfx_dmabuf(struct mdev_device *mdev,
  957. u32 id)
  958. {
  959. struct mdev_state *mdev_state = mdev_get_drvdata(mdev);
  960. struct mbochs_dmabuf *dmabuf;
  961. mutex_lock(&mdev_state->ops_lock);
  962. dmabuf = mbochs_dmabuf_find_by_id(mdev_state, id);
  963. if (!dmabuf) {
  964. mutex_unlock(&mdev_state->ops_lock);
  965. return -ENOENT;
  966. }
  967. if (!dmabuf->buf)
  968. mbochs_dmabuf_export(dmabuf);
  969. mutex_unlock(&mdev_state->ops_lock);
  970. if (!dmabuf->buf)
  971. return -EINVAL;
  972. return dma_buf_fd(dmabuf->buf, 0);
  973. }
  974. static long mbochs_ioctl(struct mdev_device *mdev, unsigned int cmd,
  975. unsigned long arg)
  976. {
  977. int ret = 0;
  978. unsigned long minsz, outsz;
  979. switch (cmd) {
  980. case VFIO_DEVICE_GET_INFO:
  981. {
  982. struct vfio_device_info info;
  983. minsz = offsetofend(struct vfio_device_info, num_irqs);
  984. if (copy_from_user(&info, (void __user *)arg, minsz))
  985. return -EFAULT;
  986. if (info.argsz < minsz)
  987. return -EINVAL;
  988. ret = mbochs_get_device_info(mdev, &info);
  989. if (ret)
  990. return ret;
  991. if (copy_to_user((void __user *)arg, &info, minsz))
  992. return -EFAULT;
  993. return 0;
  994. }
  995. case VFIO_DEVICE_GET_REGION_INFO:
  996. {
  997. struct vfio_region_info_ext info;
  998. minsz = offsetofend(typeof(info), base.offset);
  999. if (copy_from_user(&info, (void __user *)arg, minsz))
  1000. return -EFAULT;
  1001. outsz = info.base.argsz;
  1002. if (outsz < minsz)
  1003. return -EINVAL;
  1004. if (outsz > sizeof(info))
  1005. return -EINVAL;
  1006. ret = mbochs_get_region_info(mdev, &info);
  1007. if (ret)
  1008. return ret;
  1009. if (copy_to_user((void __user *)arg, &info, outsz))
  1010. return -EFAULT;
  1011. return 0;
  1012. }
  1013. case VFIO_DEVICE_GET_IRQ_INFO:
  1014. {
  1015. struct vfio_irq_info info;
  1016. minsz = offsetofend(struct vfio_irq_info, count);
  1017. if (copy_from_user(&info, (void __user *)arg, minsz))
  1018. return -EFAULT;
  1019. if ((info.argsz < minsz) ||
  1020. (info.index >= VFIO_PCI_NUM_IRQS))
  1021. return -EINVAL;
  1022. ret = mbochs_get_irq_info(mdev, &info);
  1023. if (ret)
  1024. return ret;
  1025. if (copy_to_user((void __user *)arg, &info, minsz))
  1026. return -EFAULT;
  1027. return 0;
  1028. }
  1029. case VFIO_DEVICE_QUERY_GFX_PLANE:
  1030. {
  1031. struct vfio_device_gfx_plane_info plane;
  1032. minsz = offsetofend(struct vfio_device_gfx_plane_info,
  1033. region_index);
  1034. if (copy_from_user(&plane, (void __user *)arg, minsz))
  1035. return -EFAULT;
  1036. if (plane.argsz < minsz)
  1037. return -EINVAL;
  1038. ret = mbochs_query_gfx_plane(mdev, &plane);
  1039. if (ret)
  1040. return ret;
  1041. if (copy_to_user((void __user *)arg, &plane, minsz))
  1042. return -EFAULT;
  1043. return 0;
  1044. }
  1045. case VFIO_DEVICE_GET_GFX_DMABUF:
  1046. {
  1047. u32 dmabuf_id;
  1048. if (get_user(dmabuf_id, (__u32 __user *)arg))
  1049. return -EFAULT;
  1050. return mbochs_get_gfx_dmabuf(mdev, dmabuf_id);
  1051. }
  1052. case VFIO_DEVICE_SET_IRQS:
  1053. return -EINVAL;
  1054. case VFIO_DEVICE_RESET:
  1055. return mbochs_reset(mdev);
  1056. }
  1057. return -ENOTTY;
  1058. }
  1059. static int mbochs_open(struct mdev_device *mdev)
  1060. {
  1061. if (!try_module_get(THIS_MODULE))
  1062. return -ENODEV;
  1063. return 0;
  1064. }
  1065. static void mbochs_close(struct mdev_device *mdev)
  1066. {
  1067. struct mdev_state *mdev_state = mdev_get_drvdata(mdev);
  1068. struct mbochs_dmabuf *dmabuf, *tmp;
  1069. mutex_lock(&mdev_state->ops_lock);
  1070. list_for_each_entry_safe(dmabuf, tmp, &mdev_state->dmabufs, next) {
  1071. list_del(&dmabuf->next);
  1072. if (dmabuf->buf) {
  1073. /* free in mbochs_release_dmabuf() */
  1074. dmabuf->unlinked = true;
  1075. } else {
  1076. kfree(dmabuf);
  1077. }
  1078. }
  1079. mbochs_put_pages(mdev_state);
  1080. mutex_unlock(&mdev_state->ops_lock);
  1081. module_put(THIS_MODULE);
  1082. }
  1083. static ssize_t
  1084. memory_show(struct device *dev, struct device_attribute *attr,
  1085. char *buf)
  1086. {
  1087. struct mdev_device *mdev = mdev_from_dev(dev);
  1088. struct mdev_state *mdev_state = mdev_get_drvdata(mdev);
  1089. return sprintf(buf, "%d MB\n", mdev_state->type->mbytes);
  1090. }
  1091. static DEVICE_ATTR_RO(memory);
  1092. static struct attribute *mdev_dev_attrs[] = {
  1093. &dev_attr_memory.attr,
  1094. NULL,
  1095. };
  1096. static const struct attribute_group mdev_dev_group = {
  1097. .name = "vendor",
  1098. .attrs = mdev_dev_attrs,
  1099. };
  1100. const struct attribute_group *mdev_dev_groups[] = {
  1101. &mdev_dev_group,
  1102. NULL,
  1103. };
  1104. static ssize_t
  1105. name_show(struct kobject *kobj, struct device *dev, char *buf)
  1106. {
  1107. return sprintf(buf, "%s\n", kobj->name);
  1108. }
  1109. MDEV_TYPE_ATTR_RO(name);
  1110. static ssize_t
  1111. description_show(struct kobject *kobj, struct device *dev, char *buf)
  1112. {
  1113. const struct mbochs_type *type = mbochs_find_type(kobj);
  1114. return sprintf(buf, "virtual display, %d MB video memory\n",
  1115. type ? type->mbytes : 0);
  1116. }
  1117. MDEV_TYPE_ATTR_RO(description);
  1118. static ssize_t
  1119. available_instances_show(struct kobject *kobj, struct device *dev, char *buf)
  1120. {
  1121. const struct mbochs_type *type = mbochs_find_type(kobj);
  1122. int count = (max_mbytes - mbochs_used_mbytes) / type->mbytes;
  1123. return sprintf(buf, "%d\n", count);
  1124. }
  1125. MDEV_TYPE_ATTR_RO(available_instances);
  1126. static ssize_t device_api_show(struct kobject *kobj, struct device *dev,
  1127. char *buf)
  1128. {
  1129. return sprintf(buf, "%s\n", VFIO_DEVICE_API_PCI_STRING);
  1130. }
  1131. MDEV_TYPE_ATTR_RO(device_api);
  1132. static struct attribute *mdev_types_attrs[] = {
  1133. &mdev_type_attr_name.attr,
  1134. &mdev_type_attr_description.attr,
  1135. &mdev_type_attr_device_api.attr,
  1136. &mdev_type_attr_available_instances.attr,
  1137. NULL,
  1138. };
  1139. static struct attribute_group mdev_type_group1 = {
  1140. .name = MBOCHS_TYPE_1,
  1141. .attrs = mdev_types_attrs,
  1142. };
  1143. static struct attribute_group mdev_type_group2 = {
  1144. .name = MBOCHS_TYPE_2,
  1145. .attrs = mdev_types_attrs,
  1146. };
  1147. static struct attribute_group mdev_type_group3 = {
  1148. .name = MBOCHS_TYPE_3,
  1149. .attrs = mdev_types_attrs,
  1150. };
  1151. static struct attribute_group *mdev_type_groups[] = {
  1152. &mdev_type_group1,
  1153. &mdev_type_group2,
  1154. &mdev_type_group3,
  1155. NULL,
  1156. };
  1157. static const struct mdev_parent_ops mdev_fops = {
  1158. .owner = THIS_MODULE,
  1159. .mdev_attr_groups = mdev_dev_groups,
  1160. .supported_type_groups = mdev_type_groups,
  1161. .create = mbochs_create,
  1162. .remove = mbochs_remove,
  1163. .open = mbochs_open,
  1164. .release = mbochs_close,
  1165. .read = mbochs_read,
  1166. .write = mbochs_write,
  1167. .ioctl = mbochs_ioctl,
  1168. .mmap = mbochs_mmap,
  1169. };
  1170. static const struct file_operations vd_fops = {
  1171. .owner = THIS_MODULE,
  1172. };
  1173. static void mbochs_device_release(struct device *dev)
  1174. {
  1175. /* nothing */
  1176. }
  1177. static int __init mbochs_dev_init(void)
  1178. {
  1179. int ret = 0;
  1180. ret = alloc_chrdev_region(&mbochs_devt, 0, MINORMASK + 1, MBOCHS_NAME);
  1181. if (ret < 0) {
  1182. pr_err("Error: failed to register mbochs_dev, err: %d\n", ret);
  1183. return ret;
  1184. }
  1185. cdev_init(&mbochs_cdev, &vd_fops);
  1186. cdev_add(&mbochs_cdev, mbochs_devt, MINORMASK + 1);
  1187. pr_info("%s: major %d\n", __func__, MAJOR(mbochs_devt));
  1188. mbochs_class = class_create(THIS_MODULE, MBOCHS_CLASS_NAME);
  1189. if (IS_ERR(mbochs_class)) {
  1190. pr_err("Error: failed to register mbochs_dev class\n");
  1191. ret = PTR_ERR(mbochs_class);
  1192. goto failed1;
  1193. }
  1194. mbochs_dev.class = mbochs_class;
  1195. mbochs_dev.release = mbochs_device_release;
  1196. dev_set_name(&mbochs_dev, "%s", MBOCHS_NAME);
  1197. ret = device_register(&mbochs_dev);
  1198. if (ret)
  1199. goto failed2;
  1200. ret = mdev_register_device(&mbochs_dev, &mdev_fops);
  1201. if (ret)
  1202. goto failed3;
  1203. return 0;
  1204. failed3:
  1205. device_unregister(&mbochs_dev);
  1206. failed2:
  1207. class_destroy(mbochs_class);
  1208. failed1:
  1209. cdev_del(&mbochs_cdev);
  1210. unregister_chrdev_region(mbochs_devt, MINORMASK + 1);
  1211. return ret;
  1212. }
  1213. static void __exit mbochs_dev_exit(void)
  1214. {
  1215. mbochs_dev.bus = NULL;
  1216. mdev_unregister_device(&mbochs_dev);
  1217. device_unregister(&mbochs_dev);
  1218. cdev_del(&mbochs_cdev);
  1219. unregister_chrdev_region(mbochs_devt, MINORMASK + 1);
  1220. class_destroy(mbochs_class);
  1221. mbochs_class = NULL;
  1222. }
  1223. module_init(mbochs_dev_init)
  1224. module_exit(mbochs_dev_exit)