]> bbs.cooldavid.org Git - net-next-2.6.git/blame - drivers/char/agp/ati-agp.c
[AGPGART] Prevent (unlikely) memory leak in amd_create_gatt_pages()
[net-next-2.6.git] / drivers / char / agp / ati-agp.c
CommitLineData
1da177e4
LT
1/*
2 * ATi AGPGART routines.
3 */
4
5#include <linux/types.h>
6#include <linux/module.h>
7#include <linux/pci.h>
8#include <linux/init.h>
4e57b681
TS
9#include <linux/string.h>
10#include <linux/slab.h>
1da177e4
LT
11#include <linux/agp_backend.h>
12#include <asm/agp.h>
13#include "agp.h"
14
15#define ATI_GART_MMBASE_ADDR 0x14
16#define ATI_RS100_APSIZE 0xac
17#define ATI_RS100_IG_AGPMODE 0xb0
18#define ATI_RS300_APSIZE 0xf8
19#define ATI_RS300_IG_AGPMODE 0xfc
20#define ATI_GART_FEATURE_ID 0x00
21#define ATI_GART_BASE 0x04
22#define ATI_GART_CACHE_SZBASE 0x08
23#define ATI_GART_CACHE_CNTRL 0x0c
24#define ATI_GART_CACHE_ENTRY_CNTRL 0x10
25
26
27static struct aper_size_info_lvl2 ati_generic_sizes[7] =
28{
29 {2048, 524288, 0x0000000c},
30 {1024, 262144, 0x0000000a},
31 {512, 131072, 0x00000008},
32 {256, 65536, 0x00000006},
33 {128, 32768, 0x00000004},
34 {64, 16384, 0x00000002},
35 {32, 8192, 0x00000000}
36};
37
38static struct gatt_mask ati_generic_masks[] =
39{
40 { .mask = 1, .type = 0}
41};
42
43
1da177e4
LT
44typedef struct _ati_page_map {
45 unsigned long *real;
46 unsigned long __iomem *remapped;
47} ati_page_map;
48
49static struct _ati_generic_private {
50 volatile u8 __iomem *registers;
51 ati_page_map **gatt_pages;
52 int num_tables;
53} ati_generic_private;
54
55static int ati_create_page_map(ati_page_map *page_map)
56{
57 int i, err = 0;
58
59 page_map->real = (unsigned long *) __get_free_page(GFP_KERNEL);
60 if (page_map->real == NULL)
61 return -ENOMEM;
62
63 SetPageReserved(virt_to_page(page_map->real));
64 err = map_page_into_agp(virt_to_page(page_map->real));
07eee78e 65 page_map->remapped = ioremap_nocache(virt_to_gart(page_map->real),
1da177e4
LT
66 PAGE_SIZE);
67 if (page_map->remapped == NULL || err) {
68 ClearPageReserved(virt_to_page(page_map->real));
69 free_page((unsigned long) page_map->real);
70 page_map->real = NULL;
71 return -ENOMEM;
72 }
73 /*CACHE_FLUSH();*/
74 global_cache_flush();
75
6a92a4e0 76 for (i = 0; i < PAGE_SIZE / sizeof(unsigned long); i++) {
1da177e4
LT
77 writel(agp_bridge->scratch_page, page_map->remapped+i);
78 readl(page_map->remapped+i); /* PCI Posting. */
79 }
80
81 return 0;
82}
83
84
85static void ati_free_page_map(ati_page_map *page_map)
86{
87 unmap_page_from_agp(virt_to_page(page_map->real));
88 iounmap(page_map->remapped);
89 ClearPageReserved(virt_to_page(page_map->real));
90 free_page((unsigned long) page_map->real);
91}
92
93
94static void ati_free_gatt_pages(void)
95{
96 int i;
97 ati_page_map **tables;
98 ati_page_map *entry;
99
100 tables = ati_generic_private.gatt_pages;
6a92a4e0 101 for (i = 0; i < ati_generic_private.num_tables; i++) {
1da177e4
LT
102 entry = tables[i];
103 if (entry != NULL) {
104 if (entry->real != NULL)
105 ati_free_page_map(entry);
106 kfree(entry);
107 }
108 }
109 kfree(tables);
110}
111
112
113static int ati_create_gatt_pages(int nr_tables)
114{
115 ati_page_map **tables;
116 ati_page_map *entry;
117 int retval = 0;
118 int i;
119
0ea27d9f 120 tables = kzalloc((nr_tables + 1) * sizeof(ati_page_map *),GFP_KERNEL);
1da177e4
LT
121 if (tables == NULL)
122 return -ENOMEM;
123
1da177e4 124 for (i = 0; i < nr_tables; i++) {
0ea27d9f 125 entry = kzalloc(sizeof(ati_page_map), GFP_KERNEL);
1da177e4
LT
126 if (entry == NULL) {
127 while (i>0) {
128 kfree (tables[i-1]);
129 i--;
130 }
131 kfree (tables);
132 tables = NULL;
133 retval = -ENOMEM;
134 break;
135 }
1da177e4
LT
136 tables[i] = entry;
137 retval = ati_create_page_map(entry);
138 if (retval != 0) break;
139 }
140 ati_generic_private.num_tables = nr_tables;
141 ati_generic_private.gatt_pages = tables;
142
89d17b96
DJ
143 if (retval != 0)
144 ati_free_gatt_pages();
1da177e4
LT
145
146 return retval;
147}
148
149static int is_r200(void)
150{
151 if ((agp_bridge->dev->device == PCI_DEVICE_ID_ATI_RS100) ||
152 (agp_bridge->dev->device == PCI_DEVICE_ID_ATI_RS200) ||
153 (agp_bridge->dev->device == PCI_DEVICE_ID_ATI_RS200_B) ||
154 (agp_bridge->dev->device == PCI_DEVICE_ID_ATI_RS250))
155 return 1;
156 return 0;
157}
158
159static int ati_fetch_size(void)
160{
161 int i;
162 u32 temp;
163 struct aper_size_info_lvl2 *values;
164
165 if (is_r200())
166 pci_read_config_dword(agp_bridge->dev, ATI_RS100_APSIZE, &temp);
167 else
168 pci_read_config_dword(agp_bridge->dev, ATI_RS300_APSIZE, &temp);
169
170 temp = (temp & 0x0000000e);
171 values = A_SIZE_LVL2(agp_bridge->driver->aperture_sizes);
172 for (i = 0; i < agp_bridge->driver->num_aperture_sizes; i++) {
173 if (temp == values[i].size_value) {
174 agp_bridge->previous_size =
175 agp_bridge->current_size = (void *) (values + i);
176
177 agp_bridge->aperture_size_idx = i;
178 return values[i].size;
179 }
180 }
181
182 return 0;
183}
184
185static void ati_tlbflush(struct agp_memory * mem)
186{
187 writel(1, ati_generic_private.registers+ATI_GART_CACHE_CNTRL);
188 readl(ati_generic_private.registers+ATI_GART_CACHE_CNTRL); /* PCI Posting. */
189}
190
191static void ati_cleanup(void)
192{
193 struct aper_size_info_lvl2 *previous_size;
194 u32 temp;
195
196 previous_size = A_SIZE_LVL2(agp_bridge->previous_size);
197
198 /* Write back the previous size and disable gart translation */
199 if (is_r200()) {
200 pci_read_config_dword(agp_bridge->dev, ATI_RS100_APSIZE, &temp);
201 temp = ((temp & ~(0x0000000f)) | previous_size->size_value);
202 pci_write_config_dword(agp_bridge->dev, ATI_RS100_APSIZE, temp);
203 } else {
204 pci_read_config_dword(agp_bridge->dev, ATI_RS300_APSIZE, &temp);
205 temp = ((temp & ~(0x0000000f)) | previous_size->size_value);
206 pci_write_config_dword(agp_bridge->dev, ATI_RS300_APSIZE, temp);
207 }
208 iounmap((volatile u8 __iomem *)ati_generic_private.registers);
209}
210
211
212static int ati_configure(void)
213{
214 u32 temp;
215
216 /* Get the memory mapped registers */
217 pci_read_config_dword(agp_bridge->dev, ATI_GART_MMBASE_ADDR, &temp);
218 temp = (temp & 0xfffff000);
219 ati_generic_private.registers = (volatile u8 __iomem *) ioremap(temp, 4096);
220
221 if (is_r200())
89d17b96 222 pci_write_config_dword(agp_bridge->dev, ATI_RS100_IG_AGPMODE, 0x20000);
1da177e4
LT
223 else
224 pci_write_config_dword(agp_bridge->dev, ATI_RS300_IG_AGPMODE, 0x20000);
225
226 /* address to map too */
89d17b96 227 /*
1da177e4
LT
228 pci_read_config_dword(agp_bridge.dev, AGP_APBASE, &temp);
229 agp_bridge.gart_bus_addr = (temp & PCI_BASE_ADDRESS_MEM_MASK);
230 printk(KERN_INFO PFX "IGP320 gart_bus_addr: %x\n", agp_bridge.gart_bus_addr);
89d17b96 231 */
1da177e4
LT
232 writel(0x60000, ati_generic_private.registers+ATI_GART_FEATURE_ID);
233 readl(ati_generic_private.registers+ATI_GART_FEATURE_ID); /* PCI Posting.*/
234
235 /* SIGNALED_SYSTEM_ERROR @ NB_STATUS */
236 pci_read_config_dword(agp_bridge->dev, 4, &temp);
237 pci_write_config_dword(agp_bridge->dev, 4, temp | (1<<14));
238
239 /* Write out the address of the gatt table */
240 writel(agp_bridge->gatt_bus_addr, ati_generic_private.registers+ATI_GART_BASE);
241 readl(ati_generic_private.registers+ATI_GART_BASE); /* PCI Posting. */
242
243 return 0;
244}
245
246
5dda4986 247#ifdef CONFIG_PM
a4aec262 248static int agp_ati_suspend(struct pci_dev *dev, pm_message_t state)
5dda4986 249{
a4aec262 250 pci_save_state(dev);
b3818ed4 251 pci_set_power_state(dev, 3);
5dda4986 252
a4aec262 253 return 0;
5dda4986
AM
254}
255
a4aec262 256static int agp_ati_resume(struct pci_dev *dev)
5dda4986 257{
b3818ed4 258 pci_set_power_state(dev, 0);
a4aec262 259 pci_restore_state(dev);
5dda4986 260
a4aec262 261 return ati_configure();
5dda4986
AM
262}
263#endif
264
1da177e4 265/*
d6e05edc 266 *Since we don't need contiguous memory we just try
1da177e4
LT
267 * to get the gatt table once
268 */
269
270#define GET_PAGE_DIR_OFF(addr) (addr >> 22)
271#define GET_PAGE_DIR_IDX(addr) (GET_PAGE_DIR_OFF(addr) - \
272 GET_PAGE_DIR_OFF(agp_bridge->gart_bus_addr))
273#define GET_GATT_OFF(addr) ((addr & 0x003ff000) >> 12)
274#undef GET_GATT
275#define GET_GATT(addr) (ati_generic_private.gatt_pages[\
276 GET_PAGE_DIR_IDX(addr)]->remapped)
277
278static int ati_insert_memory(struct agp_memory * mem,
279 off_t pg_start, int type)
280{
281 int i, j, num_entries;
282 unsigned long __iomem *cur_gatt;
283 unsigned long addr;
284
285 num_entries = A_SIZE_LVL2(agp_bridge->current_size)->num_entries;
286
287 if (type != 0 || mem->type != 0)
288 return -EINVAL;
289
290 if ((pg_start + mem->page_count) > num_entries)
291 return -EINVAL;
292
293 j = pg_start;
294 while (j < (pg_start + mem->page_count)) {
295 addr = (j * PAGE_SIZE) + agp_bridge->gart_bus_addr;
296 cur_gatt = GET_GATT(addr);
297 if (!PGE_EMPTY(agp_bridge,readl(cur_gatt+GET_GATT_OFF(addr))))
298 return -EBUSY;
299 j++;
300 }
301
302 if (mem->is_flushed == FALSE) {
303 /*CACHE_FLUSH(); */
304 global_cache_flush();
305 mem->is_flushed = TRUE;
306 }
307
308 for (i = 0, j = pg_start; i < mem->page_count; i++, j++) {
309 addr = (j * PAGE_SIZE) + agp_bridge->gart_bus_addr;
310 cur_gatt = GET_GATT(addr);
311 writel(agp_bridge->driver->mask_memory(agp_bridge,
312 mem->memory[i], mem->type), cur_gatt+GET_GATT_OFF(addr));
313 readl(cur_gatt+GET_GATT_OFF(addr)); /* PCI Posting. */
314 }
315 agp_bridge->driver->tlb_flush(mem);
316 return 0;
317}
318
319static int ati_remove_memory(struct agp_memory * mem, off_t pg_start,
320 int type)
321{
322 int i;
323 unsigned long __iomem *cur_gatt;
324 unsigned long addr;
325
89d17b96 326 if (type != 0 || mem->type != 0)
1da177e4 327 return -EINVAL;
89d17b96 328
1da177e4
LT
329 for (i = pg_start; i < (mem->page_count + pg_start); i++) {
330 addr = (i * PAGE_SIZE) + agp_bridge->gart_bus_addr;
331 cur_gatt = GET_GATT(addr);
332 writel(agp_bridge->scratch_page, cur_gatt+GET_GATT_OFF(addr));
333 readl(cur_gatt+GET_GATT_OFF(addr)); /* PCI Posting. */
334 }
335
336 agp_bridge->driver->tlb_flush(mem);
337 return 0;
338}
339
340static int ati_create_gatt_table(struct agp_bridge_data *bridge)
341{
342 struct aper_size_info_lvl2 *value;
343 ati_page_map page_dir;
344 unsigned long addr;
345 int retval;
346 u32 temp;
347 int i;
348 struct aper_size_info_lvl2 *current_size;
349
350 value = A_SIZE_LVL2(agp_bridge->current_size);
351 retval = ati_create_page_map(&page_dir);
352 if (retval != 0)
353 return retval;
354
355 retval = ati_create_gatt_pages(value->num_entries / 1024);
356 if (retval != 0) {
357 ati_free_page_map(&page_dir);
358 return retval;
359 }
360
361 agp_bridge->gatt_table_real = (u32 *)page_dir.real;
362 agp_bridge->gatt_table = (u32 __iomem *) page_dir.remapped;
07eee78e 363 agp_bridge->gatt_bus_addr = virt_to_gart(page_dir.real);
1da177e4
LT
364
365 /* Write out the size register */
366 current_size = A_SIZE_LVL2(agp_bridge->current_size);
367
368 if (is_r200()) {
369 pci_read_config_dword(agp_bridge->dev, ATI_RS100_APSIZE, &temp);
370 temp = (((temp & ~(0x0000000e)) | current_size->size_value)
371 | 0x00000001);
372 pci_write_config_dword(agp_bridge->dev, ATI_RS100_APSIZE, temp);
373 pci_read_config_dword(agp_bridge->dev, ATI_RS100_APSIZE, &temp);
374 } else {
375 pci_read_config_dword(agp_bridge->dev, ATI_RS300_APSIZE, &temp);
376 temp = (((temp & ~(0x0000000e)) | current_size->size_value)
377 | 0x00000001);
378 pci_write_config_dword(agp_bridge->dev, ATI_RS300_APSIZE, temp);
379 pci_read_config_dword(agp_bridge->dev, ATI_RS300_APSIZE, &temp);
380 }
381
382 /*
383 * Get the address for the gart region.
384 * This is a bus address even on the alpha, b/c its
385 * used to program the agp master not the cpu
386 */
387 pci_read_config_dword(agp_bridge->dev, AGP_APBASE, &temp);
388 addr = (temp & PCI_BASE_ADDRESS_MEM_MASK);
389 agp_bridge->gart_bus_addr = addr;
390
391 /* Calculate the agp offset */
6a92a4e0 392 for (i = 0; i < value->num_entries / 1024; i++, addr += 0x00400000) {
07eee78e 393 writel(virt_to_gart(ati_generic_private.gatt_pages[i]->real) | 1,
1da177e4
LT
394 page_dir.remapped+GET_PAGE_DIR_OFF(addr));
395 readl(page_dir.remapped+GET_PAGE_DIR_OFF(addr)); /* PCI Posting. */
396 }
397
398 return 0;
399}
400
401static int ati_free_gatt_table(struct agp_bridge_data *bridge)
402{
403 ati_page_map page_dir;
404
405 page_dir.real = (unsigned long *)agp_bridge->gatt_table_real;
406 page_dir.remapped = (unsigned long __iomem *)agp_bridge->gatt_table;
407
408 ati_free_gatt_pages();
409 ati_free_page_map(&page_dir);
410 return 0;
411}
412
408b664a 413static struct agp_bridge_driver ati_generic_bridge = {
1da177e4
LT
414 .owner = THIS_MODULE,
415 .aperture_sizes = ati_generic_sizes,
416 .size_type = LVL2_APER_SIZE,
417 .num_aperture_sizes = 7,
418 .configure = ati_configure,
419 .fetch_size = ati_fetch_size,
420 .cleanup = ati_cleanup,
421 .tlb_flush = ati_tlbflush,
422 .mask_memory = agp_generic_mask_memory,
423 .masks = ati_generic_masks,
424 .agp_enable = agp_generic_enable,
425 .cache_flush = global_cache_flush,
426 .create_gatt_table = ati_create_gatt_table,
427 .free_gatt_table = ati_free_gatt_table,
428 .insert_memory = ati_insert_memory,
429 .remove_memory = ati_remove_memory,
430 .alloc_by_type = agp_generic_alloc_by_type,
431 .free_by_type = agp_generic_free_by_type,
432 .agp_alloc_page = agp_generic_alloc_page,
433 .agp_destroy_page = agp_generic_destroy_page,
434};
435
436
437static struct agp_device_ids ati_agp_device_ids[] __devinitdata =
438{
439 {
440 .device_id = PCI_DEVICE_ID_ATI_RS100,
441 .chipset_name = "IGP320/M",
442 },
443 {
444 .device_id = PCI_DEVICE_ID_ATI_RS200,
445 .chipset_name = "IGP330/340/345/350/M",
446 },
447 {
448 .device_id = PCI_DEVICE_ID_ATI_RS200_B,
449 .chipset_name = "IGP345M",
450 },
451 {
452 .device_id = PCI_DEVICE_ID_ATI_RS250,
453 .chipset_name = "IGP7000/M",
454 },
455 {
456 .device_id = PCI_DEVICE_ID_ATI_RS300_100,
457 .chipset_name = "IGP9100/M",
458 },
459 {
460 .device_id = PCI_DEVICE_ID_ATI_RS300_133,
461 .chipset_name = "IGP9100/M",
462 },
463 {
464 .device_id = PCI_DEVICE_ID_ATI_RS300_166,
465 .chipset_name = "IGP9100/M",
466 },
467 {
468 .device_id = PCI_DEVICE_ID_ATI_RS300_200,
469 .chipset_name = "IGP9100/M",
470 },
9d1ef8a6
DJ
471 {
472 .device_id = PCI_DEVICE_ID_ATI_RS350_200,
473 .chipset_name = "IGP9100/M",
474 },
1da177e4
LT
475 { }, /* dummy final entry, always present */
476};
477
478static int __devinit agp_ati_probe(struct pci_dev *pdev,
479 const struct pci_device_id *ent)
480{
481 struct agp_device_ids *devs = ati_agp_device_ids;
482 struct agp_bridge_data *bridge;
483 u8 cap_ptr;
484 int j;
485
486 cap_ptr = pci_find_capability(pdev, PCI_CAP_ID_AGP);
487 if (!cap_ptr)
488 return -ENODEV;
489
490 /* probe for known chipsets */
491 for (j = 0; devs[j].chipset_name; j++) {
492 if (pdev->device == devs[j].device_id)
493 goto found;
494 }
495
496 printk(KERN_ERR PFX
497 "Unsupported Ati chipset (device id: %04x)\n", pdev->device);
498 return -ENODEV;
499
500found:
501 bridge = agp_alloc_bridge();
502 if (!bridge)
503 return -ENOMEM;
504
505 bridge->dev = pdev;
506 bridge->capndx = cap_ptr;
1da177e4 507
89d17b96 508 bridge->driver = &ati_generic_bridge;
1da177e4
LT
509
510 printk(KERN_INFO PFX "Detected Ati %s chipset\n",
511 devs[j].chipset_name);
512
513 /* Fill in the mode register */
514 pci_read_config_dword(pdev,
515 bridge->capndx+PCI_AGP_STATUS,
516 &bridge->mode);
517
518 pci_set_drvdata(pdev, bridge);
519 return agp_add_bridge(bridge);
520}
521
522static void __devexit agp_ati_remove(struct pci_dev *pdev)
523{
524 struct agp_bridge_data *bridge = pci_get_drvdata(pdev);
525
526 agp_remove_bridge(bridge);
527 agp_put_bridge(bridge);
528}
529
530static struct pci_device_id agp_ati_pci_table[] = {
531 {
532 .class = (PCI_CLASS_BRIDGE_HOST << 8),
533 .class_mask = ~0,
534 .vendor = PCI_VENDOR_ID_ATI,
535 .device = PCI_ANY_ID,
536 .subvendor = PCI_ANY_ID,
537 .subdevice = PCI_ANY_ID,
538 },
539 { }
540};
541
542MODULE_DEVICE_TABLE(pci, agp_ati_pci_table);
543
544static struct pci_driver agp_ati_pci_driver = {
545 .name = "agpgart-ati",
546 .id_table = agp_ati_pci_table,
547 .probe = agp_ati_probe,
548 .remove = agp_ati_remove,
5dda4986 549#ifdef CONFIG_PM
5dda4986 550 .suspend = agp_ati_suspend,
a4aec262 551 .resume = agp_ati_resume,
5dda4986 552#endif
1da177e4
LT
553};
554
555static int __init agp_ati_init(void)
556{
557 if (agp_off)
558 return -EINVAL;
559 return pci_register_driver(&agp_ati_pci_driver);
560}
561
562static void __exit agp_ati_cleanup(void)
563{
564 pci_unregister_driver(&agp_ati_pci_driver);
565}
566
567module_init(agp_ati_init);
568module_exit(agp_ati_cleanup);
569
570MODULE_AUTHOR("Dave Jones <davej@codemonkey.org.uk>");
571MODULE_LICENSE("GPL and additional rights");
572