1/*
   2 * Copyright 2017 Red Hat
   3 * Parts ported from amdgpu (fence wait code).
   4 * Copyright 2016 Advanced Micro Devices, Inc.
   5 *
   6 * Permission is hereby granted, free of charge, to any person obtaining a
   7 * copy of this software and associated documentation files (the "Software"),
   8 * to deal in the Software without restriction, including without limitation
   9 * the rights to use, copy, modify, merge, publish, distribute, sublicense,
  10 * and/or sell copies of the Software, and to permit persons to whom the
  11 * Software is furnished to do so, subject to the following conditions:
  12 *
  13 * The above copyright notice and this permission notice (including the next
  14 * paragraph) shall be included in all copies or substantial portions of the
  15 * Software.
  16 *
  17 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  18 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  19 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
  20 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  21 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
  22 * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
  23 * IN THE SOFTWARE.
  24 *
  25 * Authors:
  26 *
  27 */
  28
  29/**
  30 * DOC: Overview
  31 *
  32 * DRM synchronisation objects (syncobj, see struct &drm_syncobj) provide a
  33 * container for a synchronization primitive which can be used by userspace
  34 * to explicitly synchronize GPU commands, can be shared between userspace
  35 * processes, and can be shared between different DRM drivers.
  36 * Their primary use-case is to implement Vulkan fences and semaphores.
  37 * The syncobj userspace API provides ioctls for several operations:
  38 *
  39 *  - Creation and destruction of syncobjs
  40 *  - Import and export of syncobjs to/from a syncobj file descriptor
  41 *  - Import and export a syncobj's underlying fence to/from a sync file
  42 *  - Reset a syncobj (set its fence to NULL)
  43 *  - Signal a syncobj (set a trivially signaled fence)
  44 *  - Wait for a syncobj's fence to appear and be signaled
  45 *
  46 * The syncobj userspace API also provides operations to manipulate a syncobj
  47 * in terms of a timeline of struct &dma_fence_chain rather than a single
  48 * struct &dma_fence, through the following operations:
  49 *
  50 *   - Signal a given point on the timeline
  51 *   - Wait for a given point to appear and/or be signaled
  52 *   - Import and export from/to a given point of a timeline
  53 *
  54 * At it's core, a syncobj is simply a wrapper around a pointer to a struct
  55 * &dma_fence which may be NULL.
  56 * When a syncobj is first created, its pointer is either NULL or a pointer
  57 * to an already signaled fence depending on whether the
  58 * &DRM_SYNCOBJ_CREATE_SIGNALED flag is passed to
  59 * &DRM_IOCTL_SYNCOBJ_CREATE.
  60 *
  61 * If the syncobj is considered as a binary (its state is either signaled or
  62 * unsignaled) primitive, when GPU work is enqueued in a DRM driver to signal
  63 * the syncobj, the syncobj's fence is replaced with a fence which will be
  64 * signaled by the completion of that work.
  65 * If the syncobj is considered as a timeline primitive, when GPU work is
  66 * enqueued in a DRM driver to signal the a given point of the syncobj, a new
  67 * struct &dma_fence_chain pointing to the DRM driver's fence and also
  68 * pointing to the previous fence that was in the syncobj. The new struct
  69 * &dma_fence_chain fence replace the syncobj's fence and will be signaled by
  70 * completion of the DRM driver's work and also any work associated with the
  71 * fence previously in the syncobj.
  72 *
  73 * When GPU work which waits on a syncobj is enqueued in a DRM driver, at the
  74 * time the work is enqueued, it waits on the syncobj's fence before
  75 * submitting the work to hardware. That fence is either :
  76 *
  77 *    - The syncobj's current fence if the syncobj is considered as a binary
  78 *      primitive.
  79 *    - The struct &dma_fence associated with a given point if the syncobj is
  80 *      considered as a timeline primitive.
  81 *
  82 * If the syncobj's fence is NULL or not present in the syncobj's timeline,
  83 * the enqueue operation is expected to fail.
  84 *
  85 * With binary syncobj, all manipulation of the syncobjs's fence happens in
  86 * terms of the current fence at the time the ioctl is called by userspace
  87 * regardless of whether that operation is an immediate host-side operation
  88 * (signal or reset) or or an operation which is enqueued in some driver
  89 * queue. &DRM_IOCTL_SYNCOBJ_RESET and &DRM_IOCTL_SYNCOBJ_SIGNAL can be used
  90 * to manipulate a syncobj from the host by resetting its pointer to NULL or
  91 * setting its pointer to a fence which is already signaled.
  92 *
  93 * With a timeline syncobj, all manipulation of the synobj's fence happens in
  94 * terms of a u64 value referring to point in the timeline. See
  95 * dma_fence_chain_find_seqno() to see how a given point is found in the
  96 * timeline.
  97 *
  98 * Note that applications should be careful to always use timeline set of
  99 * ioctl() when dealing with syncobj considered as timeline. Using a binary
 100 * set of ioctl() with a syncobj considered as timeline could result incorrect
 101 * synchronization. The use of binary syncobj is supported through the
 102 * timeline set of ioctl() by using a point value of 0, this will reproduce
 103 * the behavior of the binary set of ioctl() (for example replace the
 104 * syncobj's fence when signaling).
 105 *
 106 *
 107 * Host-side wait on syncobjs
 108 * --------------------------
 109 *
 110 * &DRM_IOCTL_SYNCOBJ_WAIT takes an array of syncobj handles and does a
 111 * host-side wait on all of the syncobj fences simultaneously.
 112 * If &DRM_SYNCOBJ_WAIT_FLAGS_WAIT_ALL is set, the wait ioctl will wait on
 113 * all of the syncobj fences to be signaled before it returns.
 114 * Otherwise, it returns once at least one syncobj fence has been signaled
 115 * and the index of a signaled fence is written back to the client.
 116 *
 117 * Unlike the enqueued GPU work dependencies which fail if they see a NULL
 118 * fence in a syncobj, if &DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT is set,
 119 * the host-side wait will first wait for the syncobj to receive a non-NULL
 120 * fence and then wait on that fence.
 121 * If &DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT is not set and any one of the
 122 * syncobjs in the array has a NULL fence, -EINVAL will be returned.
 123 * Assuming the syncobj starts off with a NULL fence, this allows a client
 124 * to do a host wait in one thread (or process) which waits on GPU work
 125 * submitted in another thread (or process) without having to manually
 126 * synchronize between the two.
 127 * This requirement is inherited from the Vulkan fence API.
 128 *
 129 * Similarly, &DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT takes an array of syncobj
 130 * handles as well as an array of u64 points and does a host-side wait on all
 131 * of syncobj fences at the given points simultaneously.
 132 *
 133 * &DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT also adds the ability to wait for a given
 134 * fence to materialize on the timeline without waiting for the fence to be
 135 * signaled by using the &DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE flag. This
 136 * requirement is inherited from the wait-before-signal behavior required by
 137 * the Vulkan timeline semaphore API.
 138 *
 139 *
 140 * Import/export of syncobjs
 141 * -------------------------
 142 *
 143 * &DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE and &DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD
 144 * provide two mechanisms for import/export of syncobjs.
 145 *
 146 * The first lets the client import or export an entire syncobj to a file
 147 * descriptor.
 148 * These fd's are opaque and have no other use case, except passing the
 149 * syncobj between processes.
 150 * All exported file descriptors and any syncobj handles created as a
 151 * result of importing those file descriptors own a reference to the
 152 * same underlying struct &drm_syncobj and the syncobj can be used
 153 * persistently across all the processes with which it is shared.
 154 * The syncobj is freed only once the last reference is dropped.
 155 * Unlike dma-buf, importing a syncobj creates a new handle (with its own
 156 * reference) for every import instead of de-duplicating.
 157 * The primary use-case of this persistent import/export is for shared
 158 * Vulkan fences and semaphores.
 159 *
 160 * The second import/export mechanism, which is indicated by
 161 * &DRM_SYNCOBJ_FD_TO_HANDLE_FLAGS_IMPORT_SYNC_FILE or
 162 * &DRM_SYNCOBJ_HANDLE_TO_FD_FLAGS_EXPORT_SYNC_FILE lets the client
 163 * import/export the syncobj's current fence from/to a &sync_file.
 164 * When a syncobj is exported to a sync file, that sync file wraps the
 165 * sycnobj's fence at the time of export and any later signal or reset
 166 * operations on the syncobj will not affect the exported sync file.
 167 * When a sync file is imported into a syncobj, the syncobj's fence is set
 168 * to the fence wrapped by that sync file.
 169 * Because sync files are immutable, resetting or signaling the syncobj
 170 * will not affect any sync files whose fences have been imported into the
 171 * syncobj.
 172 *
 173 *
 174 * Import/export of timeline points in timeline syncobjs
 175 * -----------------------------------------------------
 176 *
 177 * &DRM_IOCTL_SYNCOBJ_TRANSFER provides a mechanism to transfer a struct
 178 * &dma_fence_chain of a syncobj at a given u64 point to another u64 point
 179 * into another syncobj.
 180 *
 181 * Note that if you want to transfer a struct &dma_fence_chain from a given
 182 * point on a timeline syncobj from/into a binary syncobj, you can use the
 183 * point 0 to mean take/replace the fence in the syncobj.
 184 */
 185
 186#include <linux/anon_inodes.h>
 187#include <linux/file.h>
 188#include <linux/fs.h>
 189#include <linux/sched/signal.h>
 190#include <linux/sync_file.h>
 191#include <linux/uaccess.h>
 192
 193#include <drm/drm.h>
 194#include <drm/drm_drv.h>
 195#include <drm/drm_file.h>
 196#include <drm/drm_gem.h>
 197#include <drm/drm_print.h>
 198#include <drm/drm_syncobj.h>
 199#include <drm/drm_utils.h>
 200
 201#include "drm_internal.h"
 202
 203struct syncobj_wait_entry {
 204	struct list_head node;
 205	struct task_struct *task;
 206	struct dma_fence *fence;
 207	struct dma_fence_cb fence_cb;
 208	u64    point;
 209};
 210
 211static void syncobj_wait_syncobj_func(struct drm_syncobj *syncobj,
 212				      struct syncobj_wait_entry *wait);
 213
 214/**
 215 * drm_syncobj_find - lookup and reference a sync object.
 216 * @file_private: drm file private pointer
 217 * @handle: sync object handle to lookup.
 218 *
 219 * Returns a reference to the syncobj pointed to by handle or NULL. The
 220 * reference must be released by calling drm_syncobj_put().
 221 */
 222struct drm_syncobj *drm_syncobj_find(struct drm_file *file_private,
 223				     u32 handle)
 224{
 225	struct drm_syncobj *syncobj;
 226
 227	spin_lock(&file_private->syncobj_table_lock);
 228
 229	/* Check if we currently have a reference on the object */
 230	syncobj = idr_find(&file_private->syncobj_idr, handle);
 231	if (syncobj)
 232		drm_syncobj_get(syncobj);
 233
 234	spin_unlock(&file_private->syncobj_table_lock);
 235
 236	return syncobj;
 237}
 238EXPORT_SYMBOL(drm_syncobj_find);
 239
 240static void drm_syncobj_fence_add_wait(struct drm_syncobj *syncobj,
 241				       struct syncobj_wait_entry *wait)
 242{
 243	struct dma_fence *fence;
 244
 245	if (wait->fence)
 246		return;
 247
 248	spin_lock(&syncobj->lock);
 249	/* We've already tried once to get a fence and failed.  Now that we
 250	 * have the lock, try one more time just to be sure we don't add a
 251	 * callback when a fence has already been set.
 252	 */
 253	fence = dma_fence_get(rcu_dereference_protected(syncobj->fence, 1));
 254	if (!fence || dma_fence_chain_find_seqno(&fence, wait->point)) {
 255		dma_fence_put(fence);
 256		list_add_tail(&wait->node, &syncobj->cb_list);
 257	} else if (!fence) {
 258		wait->fence = dma_fence_get_stub();
 259	} else {
 260		wait->fence = fence;
 261	}
 262	spin_unlock(&syncobj->lock);
 263}
 264
 265static void drm_syncobj_remove_wait(struct drm_syncobj *syncobj,
 266				    struct syncobj_wait_entry *wait)
 267{
 268	if (!wait->node.next)
 269		return;
 270
 271	spin_lock(&syncobj->lock);
 272	list_del_init(&wait->node);
 273	spin_unlock(&syncobj->lock);
 274}
 275
 276/**
 277 * drm_syncobj_add_point - add new timeline point to the syncobj
 278 * @syncobj: sync object to add timeline point do
 279 * @chain: chain node to use to add the point
 280 * @fence: fence to encapsulate in the chain node
 281 * @point: sequence number to use for the point
 282 *
 283 * Add the chain node as new timeline point to the syncobj.
 284 */
 285void drm_syncobj_add_point(struct drm_syncobj *syncobj,
 286			   struct dma_fence_chain *chain,
 287			   struct dma_fence *fence,
 288			   uint64_t point)
 289{
 290	struct syncobj_wait_entry *cur, *tmp;
 291	struct dma_fence *prev;
 292
 293	dma_fence_get(fence);
 294
 295	spin_lock(&syncobj->lock);
 296
 297	prev = drm_syncobj_fence_get(syncobj);
 298	/* You are adding an unorder point to timeline, which could cause payload returned from query_ioctl is 0! */
 299	if (prev && prev->seqno >= point)
 300		DRM_ERROR("You are adding an unorder point to timeline!\n");
 301	dma_fence_chain_init(chain, prev, fence, point);
 302	rcu_assign_pointer(syncobj->fence, &chain->base);
 303
 304	list_for_each_entry_safe(cur, tmp, &syncobj->cb_list, node)
 305		syncobj_wait_syncobj_func(syncobj, cur);
 306	spin_unlock(&syncobj->lock);
 307
 308	/* Walk the chain once to trigger garbage collection */
 309	dma_fence_chain_for_each(fence, prev);
 310	dma_fence_put(prev);
 311}
 312EXPORT_SYMBOL(drm_syncobj_add_point);
 313
 314/**
 315 * drm_syncobj_replace_fence - replace fence in a sync object.
 316 * @syncobj: Sync object to replace fence in
 317 * @fence: fence to install in sync file.
 318 *
 319 * This replaces the fence on a sync object.
 320 */
 321void drm_syncobj_replace_fence(struct drm_syncobj *syncobj,
 322			       struct dma_fence *fence)
 323{
 324	struct dma_fence *old_fence;
 325	struct syncobj_wait_entry *cur, *tmp;
 326
 327	if (fence)
 328		dma_fence_get(fence);
 329
 330	spin_lock(&syncobj->lock);
 331
 332	old_fence = rcu_dereference_protected(syncobj->fence,
 333					      lockdep_is_held(&syncobj->lock));
 334	rcu_assign_pointer(syncobj->fence, fence);
 335
 336	if (fence != old_fence) {
 337		list_for_each_entry_safe(cur, tmp, &syncobj->cb_list, node)
 338			syncobj_wait_syncobj_func(syncobj, cur);
 339	}
 340
 341	spin_unlock(&syncobj->lock);
 342
 343	dma_fence_put(old_fence);
 344}
 345EXPORT_SYMBOL(drm_syncobj_replace_fence);
 346
 347/**
 348 * drm_syncobj_assign_null_handle - assign a stub fence to the sync object
 349 * @syncobj: sync object to assign the fence on
 350 *
 351 * Assign a already signaled stub fence to the sync object.
 352 */
 353static void drm_syncobj_assign_null_handle(struct drm_syncobj *syncobj)
 354{
 355	struct dma_fence *fence = dma_fence_get_stub();
 
 
 
 356
 357	drm_syncobj_replace_fence(syncobj, fence);
 358	dma_fence_put(fence);
 
 359}
 360
 361/* 5s default for wait submission */
 362#define DRM_SYNCOBJ_WAIT_FOR_SUBMIT_TIMEOUT 5000000000ULL
 363/**
 364 * drm_syncobj_find_fence - lookup and reference the fence in a sync object
 365 * @file_private: drm file private pointer
 366 * @handle: sync object handle to lookup.
 367 * @point: timeline point
 368 * @flags: DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT or not
 369 * @fence: out parameter for the fence
 370 *
 371 * This is just a convenience function that combines drm_syncobj_find() and
 372 * drm_syncobj_fence_get().
 373 *
 374 * Returns 0 on success or a negative error value on failure. On success @fence
 375 * contains a reference to the fence, which must be released by calling
 376 * dma_fence_put().
 377 */
 378int drm_syncobj_find_fence(struct drm_file *file_private,
 379			   u32 handle, u64 point, u64 flags,
 380			   struct dma_fence **fence)
 381{
 382	struct drm_syncobj *syncobj = drm_syncobj_find(file_private, handle);
 383	struct syncobj_wait_entry wait;
 384	u64 timeout = nsecs_to_jiffies64(DRM_SYNCOBJ_WAIT_FOR_SUBMIT_TIMEOUT);
 385	int ret;
 386
 387	if (!syncobj)
 388		return -ENOENT;
 389
 
 
 
 
 
 
 
 
 
 390	*fence = drm_syncobj_fence_get(syncobj);
 391	drm_syncobj_put(syncobj);
 392
 393	if (*fence) {
 394		ret = dma_fence_chain_find_seqno(fence, point);
 395		if (!ret)
 396			return 0;
 397		dma_fence_put(*fence);
 398	} else {
 399		ret = -EINVAL;
 400	}
 401
 402	if (!(flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT))
 403		return ret;
 404
 405	memset(&wait, 0, sizeof(wait));
 406	wait.task = current;
 407	wait.point = point;
 408	drm_syncobj_fence_add_wait(syncobj, &wait);
 409
 410	do {
 411		set_current_state(TASK_INTERRUPTIBLE);
 412		if (wait.fence) {
 413			ret = 0;
 414			break;
 415		}
 416                if (timeout == 0) {
 417                        ret = -ETIME;
 418                        break;
 419                }
 420
 421		if (signal_pending(current)) {
 422			ret = -ERESTARTSYS;
 423			break;
 424		}
 425
 426                timeout = schedule_timeout(timeout);
 427	} while (1);
 428
 429	__set_current_state(TASK_RUNNING);
 430	*fence = wait.fence;
 431
 432	if (wait.node.next)
 433		drm_syncobj_remove_wait(syncobj, &wait);
 434
 
 
 
 435	return ret;
 436}
 437EXPORT_SYMBOL(drm_syncobj_find_fence);
 438
 439/**
 440 * drm_syncobj_free - free a sync object.
 441 * @kref: kref to free.
 442 *
 443 * Only to be called from kref_put in drm_syncobj_put.
 444 */
 445void drm_syncobj_free(struct kref *kref)
 446{
 447	struct drm_syncobj *syncobj = container_of(kref,
 448						   struct drm_syncobj,
 449						   refcount);
 450	drm_syncobj_replace_fence(syncobj, NULL);
 451	kfree(syncobj);
 452}
 453EXPORT_SYMBOL(drm_syncobj_free);
 454
 455/**
 456 * drm_syncobj_create - create a new syncobj
 457 * @out_syncobj: returned syncobj
 458 * @flags: DRM_SYNCOBJ_* flags
 459 * @fence: if non-NULL, the syncobj will represent this fence
 460 *
 461 * This is the first function to create a sync object. After creating, drivers
 462 * probably want to make it available to userspace, either through
 463 * drm_syncobj_get_handle() or drm_syncobj_get_fd().
 464 *
 465 * Returns 0 on success or a negative error value on failure.
 466 */
 467int drm_syncobj_create(struct drm_syncobj **out_syncobj, uint32_t flags,
 468		       struct dma_fence *fence)
 469{
 
 470	struct drm_syncobj *syncobj;
 471
 472	syncobj = kzalloc(sizeof(struct drm_syncobj), GFP_KERNEL);
 473	if (!syncobj)
 474		return -ENOMEM;
 475
 476	kref_init(&syncobj->refcount);
 477	INIT_LIST_HEAD(&syncobj->cb_list);
 478	spin_lock_init(&syncobj->lock);
 479
 480	if (flags & DRM_SYNCOBJ_CREATE_SIGNALED)
 481		drm_syncobj_assign_null_handle(syncobj);
 
 
 
 
 
 482
 483	if (fence)
 484		drm_syncobj_replace_fence(syncobj, fence);
 485
 486	*out_syncobj = syncobj;
 487	return 0;
 488}
 489EXPORT_SYMBOL(drm_syncobj_create);
 490
 491/**
 492 * drm_syncobj_get_handle - get a handle from a syncobj
 493 * @file_private: drm file private pointer
 494 * @syncobj: Sync object to export
 495 * @handle: out parameter with the new handle
 496 *
 497 * Exports a sync object created with drm_syncobj_create() as a handle on
 498 * @file_private to userspace.
 499 *
 500 * Returns 0 on success or a negative error value on failure.
 501 */
 502int drm_syncobj_get_handle(struct drm_file *file_private,
 503			   struct drm_syncobj *syncobj, u32 *handle)
 504{
 505	int ret;
 506
 507	/* take a reference to put in the idr */
 508	drm_syncobj_get(syncobj);
 509
 510	idr_preload(GFP_KERNEL);
 511	spin_lock(&file_private->syncobj_table_lock);
 512	ret = idr_alloc(&file_private->syncobj_idr, syncobj, 1, 0, GFP_NOWAIT);
 513	spin_unlock(&file_private->syncobj_table_lock);
 514
 515	idr_preload_end();
 516
 517	if (ret < 0) {
 518		drm_syncobj_put(syncobj);
 519		return ret;
 520	}
 521
 522	*handle = ret;
 523	return 0;
 524}
 525EXPORT_SYMBOL(drm_syncobj_get_handle);
 526
 527static int drm_syncobj_create_as_handle(struct drm_file *file_private,
 528					u32 *handle, uint32_t flags)
 529{
 530	int ret;
 531	struct drm_syncobj *syncobj;
 532
 533	ret = drm_syncobj_create(&syncobj, flags, NULL);
 534	if (ret)
 535		return ret;
 536
 537	ret = drm_syncobj_get_handle(file_private, syncobj, handle);
 538	drm_syncobj_put(syncobj);
 539	return ret;
 540}
 541
 542static int drm_syncobj_destroy(struct drm_file *file_private,
 543			       u32 handle)
 544{
 545	struct drm_syncobj *syncobj;
 546
 547	spin_lock(&file_private->syncobj_table_lock);
 548	syncobj = idr_remove(&file_private->syncobj_idr, handle);
 549	spin_unlock(&file_private->syncobj_table_lock);
 550
 551	if (!syncobj)
 552		return -EINVAL;
 553
 554	drm_syncobj_put(syncobj);
 555	return 0;
 556}
 557
 558static int drm_syncobj_file_release(struct inode *inode, struct file *file)
 559{
 560	struct drm_syncobj *syncobj = file->private_data;
 561
 562	drm_syncobj_put(syncobj);
 563	return 0;
 564}
 565
 566static const struct file_operations drm_syncobj_file_fops = {
 567	.release = drm_syncobj_file_release,
 568};
 569
 570/**
 571 * drm_syncobj_get_fd - get a file descriptor from a syncobj
 572 * @syncobj: Sync object to export
 573 * @p_fd: out parameter with the new file descriptor
 574 *
 575 * Exports a sync object created with drm_syncobj_create() as a file descriptor.
 576 *
 577 * Returns 0 on success or a negative error value on failure.
 578 */
 579int drm_syncobj_get_fd(struct drm_syncobj *syncobj, int *p_fd)
 580{
 581	struct file *file;
 582	int fd;
 583
 584	fd = get_unused_fd_flags(O_CLOEXEC);
 585	if (fd < 0)
 586		return fd;
 587
 588	file = anon_inode_getfile("syncobj_file",
 589				  &drm_syncobj_file_fops,
 590				  syncobj, 0);
 591	if (IS_ERR(file)) {
 592		put_unused_fd(fd);
 593		return PTR_ERR(file);
 594	}
 595
 596	drm_syncobj_get(syncobj);
 597	fd_install(fd, file);
 598
 599	*p_fd = fd;
 600	return 0;
 601}
 602EXPORT_SYMBOL(drm_syncobj_get_fd);
 603
 604static int drm_syncobj_handle_to_fd(struct drm_file *file_private,
 605				    u32 handle, int *p_fd)
 606{
 607	struct drm_syncobj *syncobj = drm_syncobj_find(file_private, handle);
 608	int ret;
 609
 610	if (!syncobj)
 611		return -EINVAL;
 612
 613	ret = drm_syncobj_get_fd(syncobj, p_fd);
 614	drm_syncobj_put(syncobj);
 615	return ret;
 616}
 617
 618static int drm_syncobj_fd_to_handle(struct drm_file *file_private,
 619				    int fd, u32 *handle)
 620{
 621	struct drm_syncobj *syncobj;
 622	struct fd f = fdget(fd);
 623	int ret;
 624
 625	if (!f.file)
 626		return -EINVAL;
 627
 628	if (f.file->f_op != &drm_syncobj_file_fops) {
 629		fdput(f);
 630		return -EINVAL;
 631	}
 632
 633	/* take a reference to put in the idr */
 634	syncobj = f.file->private_data;
 635	drm_syncobj_get(syncobj);
 636
 637	idr_preload(GFP_KERNEL);
 638	spin_lock(&file_private->syncobj_table_lock);
 639	ret = idr_alloc(&file_private->syncobj_idr, syncobj, 1, 0, GFP_NOWAIT);
 640	spin_unlock(&file_private->syncobj_table_lock);
 641	idr_preload_end();
 642
 643	if (ret > 0) {
 644		*handle = ret;
 645		ret = 0;
 646	} else
 647		drm_syncobj_put(syncobj);
 648
 649	fdput(f);
 650	return ret;
 651}
 652
 653static int drm_syncobj_import_sync_file_fence(struct drm_file *file_private,
 654					      int fd, int handle)
 655{
 656	struct dma_fence *fence = sync_file_get_fence(fd);
 657	struct drm_syncobj *syncobj;
 658
 659	if (!fence)
 660		return -EINVAL;
 661
 662	syncobj = drm_syncobj_find(file_private, handle);
 663	if (!syncobj) {
 664		dma_fence_put(fence);
 665		return -ENOENT;
 666	}
 667
 668	drm_syncobj_replace_fence(syncobj, fence);
 669	dma_fence_put(fence);
 670	drm_syncobj_put(syncobj);
 671	return 0;
 672}
 673
 674static int drm_syncobj_export_sync_file(struct drm_file *file_private,
 675					int handle, int *p_fd)
 676{
 677	int ret;
 678	struct dma_fence *fence;
 679	struct sync_file *sync_file;
 680	int fd = get_unused_fd_flags(O_CLOEXEC);
 681
 682	if (fd < 0)
 683		return fd;
 684
 685	ret = drm_syncobj_find_fence(file_private, handle, 0, 0, &fence);
 686	if (ret)
 687		goto err_put_fd;
 688
 689	sync_file = sync_file_create(fence);
 690
 691	dma_fence_put(fence);
 692
 693	if (!sync_file) {
 694		ret = -EINVAL;
 695		goto err_put_fd;
 696	}
 697
 698	fd_install(fd, sync_file->file);
 699
 700	*p_fd = fd;
 701	return 0;
 702err_put_fd:
 703	put_unused_fd(fd);
 704	return ret;
 705}
 706/**
 707 * drm_syncobj_open - initalizes syncobj file-private structures at devnode open time
 708 * @file_private: drm file-private structure to set up
 709 *
 710 * Called at device open time, sets up the structure for handling refcounting
 711 * of sync objects.
 712 */
 713void
 714drm_syncobj_open(struct drm_file *file_private)
 715{
 716	idr_init_base(&file_private->syncobj_idr, 1);
 717	spin_lock_init(&file_private->syncobj_table_lock);
 718}
 719
 720static int
 721drm_syncobj_release_handle(int id, void *ptr, void *data)
 722{
 723	struct drm_syncobj *syncobj = ptr;
 724
 725	drm_syncobj_put(syncobj);
 726	return 0;
 727}
 728
 729/**
 730 * drm_syncobj_release - release file-private sync object resources
 731 * @file_private: drm file-private structure to clean up
 732 *
 733 * Called at close time when the filp is going away.
 734 *
 735 * Releases any remaining references on objects by this filp.
 736 */
 737void
 738drm_syncobj_release(struct drm_file *file_private)
 739{
 740	idr_for_each(&file_private->syncobj_idr,
 741		     &drm_syncobj_release_handle, file_private);
 742	idr_destroy(&file_private->syncobj_idr);
 743}
 744
 745int
 746drm_syncobj_create_ioctl(struct drm_device *dev, void *data,
 747			 struct drm_file *file_private)
 748{
 749	struct drm_syncobj_create *args = data;
 750
 751	if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ))
 752		return -EOPNOTSUPP;
 753
 754	/* no valid flags yet */
 755	if (args->flags & ~DRM_SYNCOBJ_CREATE_SIGNALED)
 756		return -EINVAL;
 757
 758	return drm_syncobj_create_as_handle(file_private,
 759					    &args->handle, args->flags);
 760}
 761
 762int
 763drm_syncobj_destroy_ioctl(struct drm_device *dev, void *data,
 764			  struct drm_file *file_private)
 765{
 766	struct drm_syncobj_destroy *args = data;
 767
 768	if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ))
 769		return -EOPNOTSUPP;
 770
 771	/* make sure padding is empty */
 772	if (args->pad)
 773		return -EINVAL;
 774	return drm_syncobj_destroy(file_private, args->handle);
 775}
 776
 777int
 778drm_syncobj_handle_to_fd_ioctl(struct drm_device *dev, void *data,
 779				   struct drm_file *file_private)
 780{
 781	struct drm_syncobj_handle *args = data;
 782
 783	if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ))
 784		return -EOPNOTSUPP;
 785
 786	if (args->pad)
 787		return -EINVAL;
 788
 789	if (args->flags != 0 &&
 790	    args->flags != DRM_SYNCOBJ_HANDLE_TO_FD_FLAGS_EXPORT_SYNC_FILE)
 791		return -EINVAL;
 792
 793	if (args->flags & DRM_SYNCOBJ_HANDLE_TO_FD_FLAGS_EXPORT_SYNC_FILE)
 794		return drm_syncobj_export_sync_file(file_private, args->handle,
 795						    &args->fd);
 796
 797	return drm_syncobj_handle_to_fd(file_private, args->handle,
 798					&args->fd);
 799}
 800
 801int
 802drm_syncobj_fd_to_handle_ioctl(struct drm_device *dev, void *data,
 803				   struct drm_file *file_private)
 804{
 805	struct drm_syncobj_handle *args = data;
 806
 807	if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ))
 808		return -EOPNOTSUPP;
 809
 810	if (args->pad)
 811		return -EINVAL;
 812
 813	if (args->flags != 0 &&
 814	    args->flags != DRM_SYNCOBJ_FD_TO_HANDLE_FLAGS_IMPORT_SYNC_FILE)
 815		return -EINVAL;
 816
 817	if (args->flags & DRM_SYNCOBJ_FD_TO_HANDLE_FLAGS_IMPORT_SYNC_FILE)
 818		return drm_syncobj_import_sync_file_fence(file_private,
 819							  args->fd,
 820							  args->handle);
 821
 822	return drm_syncobj_fd_to_handle(file_private, args->fd,
 823					&args->handle);
 824}
 825
 826static int drm_syncobj_transfer_to_timeline(struct drm_file *file_private,
 827					    struct drm_syncobj_transfer *args)
 828{
 829	struct drm_syncobj *timeline_syncobj = NULL;
 830	struct dma_fence *fence;
 831	struct dma_fence_chain *chain;
 832	int ret;
 833
 834	timeline_syncobj = drm_syncobj_find(file_private, args->dst_handle);
 835	if (!timeline_syncobj) {
 836		return -ENOENT;
 837	}
 838	ret = drm_syncobj_find_fence(file_private, args->src_handle,
 839				     args->src_point, args->flags,
 840				     &fence);
 841	if (ret)
 842		goto err;
 843	chain = kzalloc(sizeof(struct dma_fence_chain), GFP_KERNEL);
 844	if (!chain) {
 845		ret = -ENOMEM;
 846		goto err1;
 847	}
 848	drm_syncobj_add_point(timeline_syncobj, chain, fence, args->dst_point);
 849err1:
 850	dma_fence_put(fence);
 851err:
 852	drm_syncobj_put(timeline_syncobj);
 853
 854	return ret;
 855}
 856
 857static int
 858drm_syncobj_transfer_to_binary(struct drm_file *file_private,
 859			       struct drm_syncobj_transfer *args)
 860{
 861	struct drm_syncobj *binary_syncobj = NULL;
 862	struct dma_fence *fence;
 863	int ret;
 864
 865	binary_syncobj = drm_syncobj_find(file_private, args->dst_handle);
 866	if (!binary_syncobj)
 867		return -ENOENT;
 868	ret = drm_syncobj_find_fence(file_private, args->src_handle,
 869				     args->src_point, args->flags, &fence);
 870	if (ret)
 871		goto err;
 872	drm_syncobj_replace_fence(binary_syncobj, fence);
 873	dma_fence_put(fence);
 874err:
 875	drm_syncobj_put(binary_syncobj);
 876
 877	return ret;
 878}
 879int
 880drm_syncobj_transfer_ioctl(struct drm_device *dev, void *data,
 881			   struct drm_file *file_private)
 882{
 883	struct drm_syncobj_transfer *args = data;
 884	int ret;
 885
 886	if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ_TIMELINE))
 887		return -EOPNOTSUPP;
 888
 889	if (args->pad)
 890		return -EINVAL;
 891
 892	if (args->dst_point)
 893		ret = drm_syncobj_transfer_to_timeline(file_private, args);
 894	else
 895		ret = drm_syncobj_transfer_to_binary(file_private, args);
 896
 897	return ret;
 898}
 899
 900static void syncobj_wait_fence_func(struct dma_fence *fence,
 901				    struct dma_fence_cb *cb)
 902{
 903	struct syncobj_wait_entry *wait =
 904		container_of(cb, struct syncobj_wait_entry, fence_cb);
 905
 906	wake_up_process(wait->task);
 907}
 908
 909static void syncobj_wait_syncobj_func(struct drm_syncobj *syncobj,
 910				      struct syncobj_wait_entry *wait)
 911{
 912	struct dma_fence *fence;
 913
 914	/* This happens inside the syncobj lock */
 915	fence = rcu_dereference_protected(syncobj->fence,
 916					  lockdep_is_held(&syncobj->lock));
 917	dma_fence_get(fence);
 918	if (!fence || dma_fence_chain_find_seqno(&fence, wait->point)) {
 919		dma_fence_put(fence);
 920		return;
 921	} else if (!fence) {
 922		wait->fence = dma_fence_get_stub();
 923	} else {
 924		wait->fence = fence;
 925	}
 926
 927	wake_up_process(wait->task);
 928	list_del_init(&wait->node);
 929}
 930
 931static signed long drm_syncobj_array_wait_timeout(struct drm_syncobj **syncobjs,
 932						  void __user *user_points,
 933						  uint32_t count,
 934						  uint32_t flags,
 935						  signed long timeout,
 936						  uint32_t *idx)
 937{
 938	struct syncobj_wait_entry *entries;
 939	struct dma_fence *fence;
 940	uint64_t *points;
 941	uint32_t signaled_count, i;
 942
 
 
 
 943	points = kmalloc_array(count, sizeof(*points), GFP_KERNEL);
 944	if (points == NULL)
 945		return -ENOMEM;
 946
 947	if (!user_points) {
 948		memset(points, 0, count * sizeof(uint64_t));
 949
 950	} else if (copy_from_user(points, user_points,
 951				  sizeof(uint64_t) * count)) {
 952		timeout = -EFAULT;
 953		goto err_free_points;
 954	}
 955
 956	entries = kcalloc(count, sizeof(*entries), GFP_KERNEL);
 957	if (!entries) {
 958		timeout = -ENOMEM;
 959		goto err_free_points;
 960	}
 961	/* Walk the list of sync objects and initialize entries.  We do
 962	 * this up-front so that we can properly return -EINVAL if there is
 963	 * a syncobj with a missing fence and then never have the chance of
 964	 * returning -EINVAL again.
 965	 */
 966	signaled_count = 0;
 967	for (i = 0; i < count; ++i) {
 968		struct dma_fence *fence;
 969
 970		entries[i].task = current;
 971		entries[i].point = points[i];
 972		fence = drm_syncobj_fence_get(syncobjs[i]);
 973		if (!fence || dma_fence_chain_find_seqno(&fence, points[i])) {
 974			dma_fence_put(fence);
 975			if (flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT) {
 976				continue;
 977			} else {
 978				timeout = -EINVAL;
 979				goto cleanup_entries;
 980			}
 981		}
 982
 983		if (fence)
 984			entries[i].fence = fence;
 985		else
 986			entries[i].fence = dma_fence_get_stub();
 987
 988		if ((flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE) ||
 989		    dma_fence_is_signaled(entries[i].fence)) {
 990			if (signaled_count == 0 && idx)
 991				*idx = i;
 992			signaled_count++;
 993		}
 994	}
 995
 996	if (signaled_count == count ||
 997	    (signaled_count > 0 &&
 998	     !(flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_ALL)))
 999		goto cleanup_entries;
1000
1001	/* There's a very annoying laxness in the dma_fence API here, in
1002	 * that backends are not required to automatically report when a
1003	 * fence is signaled prior to fence->ops->enable_signaling() being
1004	 * called.  So here if we fail to match signaled_count, we need to
1005	 * fallthough and try a 0 timeout wait!
1006	 */
1007
1008	if (flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT) {
1009		for (i = 0; i < count; ++i)
1010			drm_syncobj_fence_add_wait(syncobjs[i], &entries[i]);
1011	}
1012
1013	do {
1014		set_current_state(TASK_INTERRUPTIBLE);
1015
1016		signaled_count = 0;
1017		for (i = 0; i < count; ++i) {
1018			fence = entries[i].fence;
1019			if (!fence)
1020				continue;
1021
1022			if ((flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE) ||
1023			    dma_fence_is_signaled(fence) ||
1024			    (!entries[i].fence_cb.func &&
1025			     dma_fence_add_callback(fence,
1026						    &entries[i].fence_cb,
1027						    syncobj_wait_fence_func))) {
1028				/* The fence has been signaled */
1029				if (flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_ALL) {
1030					signaled_count++;
1031				} else {
1032					if (idx)
1033						*idx = i;
1034					goto done_waiting;
1035				}
1036			}
1037		}
1038
1039		if (signaled_count == count)
1040			goto done_waiting;
1041
1042		if (timeout == 0) {
1043			timeout = -ETIME;
1044			goto done_waiting;
1045		}
1046
1047		if (signal_pending(current)) {
1048			timeout = -ERESTARTSYS;
1049			goto done_waiting;
1050		}
1051
1052		timeout = schedule_timeout(timeout);
1053	} while (1);
1054
1055done_waiting:
1056	__set_current_state(TASK_RUNNING);
1057
1058cleanup_entries:
1059	for (i = 0; i < count; ++i) {
1060		drm_syncobj_remove_wait(syncobjs[i], &entries[i]);
1061		if (entries[i].fence_cb.func)
1062			dma_fence_remove_callback(entries[i].fence,
1063						  &entries[i].fence_cb);
1064		dma_fence_put(entries[i].fence);
1065	}
1066	kfree(entries);
1067
1068err_free_points:
1069	kfree(points);
1070
1071	return timeout;
1072}
1073
1074/**
1075 * drm_timeout_abs_to_jiffies - calculate jiffies timeout from absolute value
1076 *
1077 * @timeout_nsec: timeout nsec component in ns, 0 for poll
1078 *
1079 * Calculate the timeout in jiffies from an absolute time in sec/nsec.
1080 */
1081signed long drm_timeout_abs_to_jiffies(int64_t timeout_nsec)
1082{
1083	ktime_t abs_timeout, now;
1084	u64 timeout_ns, timeout_jiffies64;
1085
1086	/* make 0 timeout means poll - absolute 0 doesn't seem valid */
1087	if (timeout_nsec == 0)
1088		return 0;
1089
1090	abs_timeout = ns_to_ktime(timeout_nsec);
1091	now = ktime_get();
1092
1093	if (!ktime_after(abs_timeout, now))
1094		return 0;
1095
1096	timeout_ns = ktime_to_ns(ktime_sub(abs_timeout, now));
1097
1098	timeout_jiffies64 = nsecs_to_jiffies64(timeout_ns);
1099	/*  clamp timeout to avoid infinite timeout */
1100	if (timeout_jiffies64 >= MAX_SCHEDULE_TIMEOUT - 1)
1101		return MAX_SCHEDULE_TIMEOUT - 1;
1102
1103	return timeout_jiffies64 + 1;
1104}
1105EXPORT_SYMBOL(drm_timeout_abs_to_jiffies);
1106
1107static int drm_syncobj_array_wait(struct drm_device *dev,
1108				  struct drm_file *file_private,
1109				  struct drm_syncobj_wait *wait,
1110				  struct drm_syncobj_timeline_wait *timeline_wait,
1111				  struct drm_syncobj **syncobjs, bool timeline)
1112{
1113	signed long timeout = 0;
1114	uint32_t first = ~0;
1115
1116	if (!timeline) {
1117		timeout = drm_timeout_abs_to_jiffies(wait->timeout_nsec);
1118		timeout = drm_syncobj_array_wait_timeout(syncobjs,
1119							 NULL,
1120							 wait->count_handles,
1121							 wait->flags,
1122							 timeout, &first);
1123		if (timeout < 0)
1124			return timeout;
1125		wait->first_signaled = first;
1126	} else {
1127		timeout = drm_timeout_abs_to_jiffies(timeline_wait->timeout_nsec);
1128		timeout = drm_syncobj_array_wait_timeout(syncobjs,
1129							 u64_to_user_ptr(timeline_wait->points),
1130							 timeline_wait->count_handles,
1131							 timeline_wait->flags,
1132							 timeout, &first);
1133		if (timeout < 0)
1134			return timeout;
1135		timeline_wait->first_signaled = first;
1136	}
1137	return 0;
1138}
1139
1140static int drm_syncobj_array_find(struct drm_file *file_private,
1141				  void __user *user_handles,
1142				  uint32_t count_handles,
1143				  struct drm_syncobj ***syncobjs_out)
1144{
1145	uint32_t i, *handles;
1146	struct drm_syncobj **syncobjs;
1147	int ret;
1148
1149	handles = kmalloc_array(count_handles, sizeof(*handles), GFP_KERNEL);
1150	if (handles == NULL)
1151		return -ENOMEM;
1152
1153	if (copy_from_user(handles, user_handles,
1154			   sizeof(uint32_t) * count_handles)) {
1155		ret = -EFAULT;
1156		goto err_free_handles;
1157	}
1158
1159	syncobjs = kmalloc_array(count_handles, sizeof(*syncobjs), GFP_KERNEL);
1160	if (syncobjs == NULL) {
1161		ret = -ENOMEM;
1162		goto err_free_handles;
1163	}
1164
1165	for (i = 0; i < count_handles; i++) {
1166		syncobjs[i] = drm_syncobj_find(file_private, handles[i]);
1167		if (!syncobjs[i]) {
1168			ret = -ENOENT;
1169			goto err_put_syncobjs;
1170		}
1171	}
1172
1173	kfree(handles);
1174	*syncobjs_out = syncobjs;
1175	return 0;
1176
1177err_put_syncobjs:
1178	while (i-- > 0)
1179		drm_syncobj_put(syncobjs[i]);
1180	kfree(syncobjs);
1181err_free_handles:
1182	kfree(handles);
1183
1184	return ret;
1185}
1186
1187static void drm_syncobj_array_free(struct drm_syncobj **syncobjs,
1188				   uint32_t count)
1189{
1190	uint32_t i;
1191
1192	for (i = 0; i < count; i++)
1193		drm_syncobj_put(syncobjs[i]);
1194	kfree(syncobjs);
1195}
1196
1197int
1198drm_syncobj_wait_ioctl(struct drm_device *dev, void *data,
1199		       struct drm_file *file_private)
1200{
1201	struct drm_syncobj_wait *args = data;
1202	struct drm_syncobj **syncobjs;
1203	int ret = 0;
1204
1205	if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ))
1206		return -EOPNOTSUPP;
1207
1208	if (args->flags & ~(DRM_SYNCOBJ_WAIT_FLAGS_WAIT_ALL |
1209			    DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT))
1210		return -EINVAL;
1211
1212	if (args->count_handles == 0)
1213		return -EINVAL;
1214
1215	ret = drm_syncobj_array_find(file_private,
1216				     u64_to_user_ptr(args->handles),
1217				     args->count_handles,
1218				     &syncobjs);
1219	if (ret < 0)
1220		return ret;
1221
1222	ret = drm_syncobj_array_wait(dev, file_private,
1223				     args, NULL, syncobjs, false);
1224
1225	drm_syncobj_array_free(syncobjs, args->count_handles);
1226
1227	return ret;
1228}
1229
1230int
1231drm_syncobj_timeline_wait_ioctl(struct drm_device *dev, void *data,
1232				struct drm_file *file_private)
1233{
1234	struct drm_syncobj_timeline_wait *args = data;
1235	struct drm_syncobj **syncobjs;
1236	int ret = 0;
1237
1238	if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ_TIMELINE))
1239		return -EOPNOTSUPP;
1240
1241	if (args->flags & ~(DRM_SYNCOBJ_WAIT_FLAGS_WAIT_ALL |
1242			    DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT |
1243			    DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE))
1244		return -EINVAL;
1245
1246	if (args->count_handles == 0)
1247		return -EINVAL;
1248
1249	ret = drm_syncobj_array_find(file_private,
1250				     u64_to_user_ptr(args->handles),
1251				     args->count_handles,
1252				     &syncobjs);
1253	if (ret < 0)
1254		return ret;
1255
1256	ret = drm_syncobj_array_wait(dev, file_private,
1257				     NULL, args, syncobjs, true);
1258
1259	drm_syncobj_array_free(syncobjs, args->count_handles);
1260
1261	return ret;
1262}
1263
1264
1265int
1266drm_syncobj_reset_ioctl(struct drm_device *dev, void *data,
1267			struct drm_file *file_private)
1268{
1269	struct drm_syncobj_array *args = data;
1270	struct drm_syncobj **syncobjs;
1271	uint32_t i;
1272	int ret;
1273
1274	if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ))
1275		return -EOPNOTSUPP;
1276
1277	if (args->pad != 0)
1278		return -EINVAL;
1279
1280	if (args->count_handles == 0)
1281		return -EINVAL;
1282
1283	ret = drm_syncobj_array_find(file_private,
1284				     u64_to_user_ptr(args->handles),
1285				     args->count_handles,
1286				     &syncobjs);
1287	if (ret < 0)
1288		return ret;
1289
1290	for (i = 0; i < args->count_handles; i++)
1291		drm_syncobj_replace_fence(syncobjs[i], NULL);
1292
1293	drm_syncobj_array_free(syncobjs, args->count_handles);
1294
1295	return 0;
1296}
1297
1298int
1299drm_syncobj_signal_ioctl(struct drm_device *dev, void *data,
1300			 struct drm_file *file_private)
1301{
1302	struct drm_syncobj_array *args = data;
1303	struct drm_syncobj **syncobjs;
1304	uint32_t i;
1305	int ret;
1306
1307	if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ))
1308		return -EOPNOTSUPP;
1309
1310	if (args->pad != 0)
1311		return -EINVAL;
1312
1313	if (args->count_handles == 0)
1314		return -EINVAL;
1315
1316	ret = drm_syncobj_array_find(file_private,
1317				     u64_to_user_ptr(args->handles),
1318				     args->count_handles,
1319				     &syncobjs);
1320	if (ret < 0)
1321		return ret;
1322
1323	for (i = 0; i < args->count_handles; i++)
1324		drm_syncobj_assign_null_handle(syncobjs[i]);
 
 
 
1325
1326	drm_syncobj_array_free(syncobjs, args->count_handles);
1327
1328	return ret;
1329}
1330
1331int
1332drm_syncobj_timeline_signal_ioctl(struct drm_device *dev, void *data,
1333				  struct drm_file *file_private)
1334{
1335	struct drm_syncobj_timeline_array *args = data;
1336	struct drm_syncobj **syncobjs;
1337	struct dma_fence_chain **chains;
1338	uint64_t *points;
1339	uint32_t i, j;
1340	int ret;
1341
1342	if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ_TIMELINE))
1343		return -EOPNOTSUPP;
1344
1345	if (args->flags != 0)
1346		return -EINVAL;
1347
1348	if (args->count_handles == 0)
1349		return -EINVAL;
1350
1351	ret = drm_syncobj_array_find(file_private,
1352				     u64_to_user_ptr(args->handles),
1353				     args->count_handles,
1354				     &syncobjs);
1355	if (ret < 0)
1356		return ret;
1357
1358	points = kmalloc_array(args->count_handles, sizeof(*points),
1359			       GFP_KERNEL);
1360	if (!points) {
1361		ret = -ENOMEM;
1362		goto out;
1363	}
1364	if (!u64_to_user_ptr(args->points)) {
1365		memset(points, 0, args->count_handles * sizeof(uint64_t));
1366	} else if (copy_from_user(points, u64_to_user_ptr(args->points),
1367				  sizeof(uint64_t) * args->count_handles)) {
1368		ret = -EFAULT;
1369		goto err_points;
1370	}
1371
1372	chains = kmalloc_array(args->count_handles, sizeof(void *), GFP_KERNEL);
1373	if (!chains) {
1374		ret = -ENOMEM;
1375		goto err_points;
1376	}
1377	for (i = 0; i < args->count_handles; i++) {
1378		chains[i] = kzalloc(sizeof(struct dma_fence_chain), GFP_KERNEL);
1379		if (!chains[i]) {
1380			for (j = 0; j < i; j++)
1381				kfree(chains[j]);
1382			ret = -ENOMEM;
1383			goto err_chains;
1384		}
1385	}
1386
1387	for (i = 0; i < args->count_handles; i++) {
1388		struct dma_fence *fence = dma_fence_get_stub();
1389
1390		drm_syncobj_add_point(syncobjs[i], chains[i],
1391				      fence, points[i]);
1392		dma_fence_put(fence);
1393	}
1394err_chains:
1395	kfree(chains);
1396err_points:
1397	kfree(points);
1398out:
1399	drm_syncobj_array_free(syncobjs, args->count_handles);
1400
1401	return ret;
1402}
1403
1404int drm_syncobj_query_ioctl(struct drm_device *dev, void *data,
1405			    struct drm_file *file_private)
1406{
1407	struct drm_syncobj_timeline_array *args = data;
1408	struct drm_syncobj **syncobjs;
1409	uint64_t __user *points = u64_to_user_ptr(args->points);
1410	uint32_t i;
1411	int ret;
1412
1413	if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ_TIMELINE))
1414		return -EOPNOTSUPP;
1415
1416	if (args->flags & ~DRM_SYNCOBJ_QUERY_FLAGS_LAST_SUBMITTED)
1417		return -EINVAL;
1418
1419	if (args->count_handles == 0)
1420		return -EINVAL;
1421
1422	ret = drm_syncobj_array_find(file_private,
1423				     u64_to_user_ptr(args->handles),
1424				     args->count_handles,
1425				     &syncobjs);
1426	if (ret < 0)
1427		return ret;
1428
1429	for (i = 0; i < args->count_handles; i++) {
1430		struct dma_fence_chain *chain;
1431		struct dma_fence *fence;
1432		uint64_t point;
1433
1434		fence = drm_syncobj_fence_get(syncobjs[i]);
1435		chain = to_dma_fence_chain(fence);
1436		if (chain) {
1437			struct dma_fence *iter, *last_signaled =
1438				dma_fence_get(fence);
1439
1440			if (args->flags &
1441			    DRM_SYNCOBJ_QUERY_FLAGS_LAST_SUBMITTED) {
1442				point = fence->seqno;
1443			} else {
1444				dma_fence_chain_for_each(iter, fence) {
1445					if (iter->context != fence->context) {
1446						dma_fence_put(iter);
1447						/* It is most likely that timeline has
1448						* unorder points. */
1449						break;
1450					}
1451					dma_fence_put(last_signaled);
1452					last_signaled = dma_fence_get(iter);
1453				}
1454				point = dma_fence_is_signaled(last_signaled) ?
1455					last_signaled->seqno :
1456					to_dma_fence_chain(last_signaled)->prev_seqno;
1457			}
1458			dma_fence_put(last_signaled);
1459		} else {
1460			point = 0;
1461		}
1462		dma_fence_put(fence);
1463		ret = copy_to_user(&points[i], &point, sizeof(uint64_t));
1464		ret = ret ? -EFAULT : 0;
1465		if (ret)
1466			break;
1467	}
1468	drm_syncobj_array_free(syncobjs, args->count_handles);
1469
1470	return ret;
1471}