]> bbs.cooldavid.org Git - net-next-2.6.git/blame - drivers/gpu/drm/drm_stub.c
drm: fix leak of uninitialized data to userspace
[net-next-2.6.git] / drivers / gpu / drm / drm_stub.c
CommitLineData
1da177e4
LT
1/**
2 * \file drm_stub.h
3 * Stub support
4 *
5 * \author Rickard E. (Rik) Faith <faith@valinux.com>
6 */
7
8/*
9 * Created: Fri Jan 19 10:48:35 2001 by faith@acm.org
10 *
11 * Copyright 2001 VA Linux Systems, Inc., Sunnyvale, California.
12 * All Rights Reserved.
13 *
14 * Permission is hereby granted, free of charge, to any person obtaining a
15 * copy of this software and associated documentation files (the "Software"),
16 * to deal in the Software without restriction, including without limitation
17 * the rights to use, copy, modify, merge, publish, distribute, sublicense,
18 * and/or sell copies of the Software, and to permit persons to whom the
19 * Software is furnished to do so, subject to the following conditions:
20 *
21 * The above copyright notice and this permission notice (including the next
22 * paragraph) shall be included in all copies or substantial portions of the
23 * Software.
24 *
25 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
26 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
27 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
28 * PRECISION INSIGHT AND/OR ITS SUPPLIERS BE LIABLE FOR ANY CLAIM, DAMAGES OR
29 * OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
30 * ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
31 * DEALINGS IN THE SOFTWARE.
32 */
33
34#include <linux/module.h>
35#include <linux/moduleparam.h>
36#include "drmP.h"
37#include "drm_core.h"
38
b5e89ed5 39unsigned int drm_debug = 0; /* 1 to enable debug output */
1da177e4
LT
40EXPORT_SYMBOL(drm_debug);
41
b5e89ed5
DA
42MODULE_AUTHOR(CORE_AUTHOR);
43MODULE_DESCRIPTION(CORE_DESC);
1da177e4 44MODULE_LICENSE("GPL and additional rights");
1da177e4
LT
45MODULE_PARM_DESC(debug, "Enable debug output");
46
c0758146 47module_param_named(debug, drm_debug, int, 0600);
1da177e4 48
2c14f28b
DA
49struct idr drm_minors_idr;
50
0650fd58 51struct class *drm_class;
1da177e4
LT
52struct proc_dir_entry *drm_proc_root;
53
2c14f28b
DA
54static int drm_minor_get_id(struct drm_device *dev, int type)
55{
56 int new_id;
57 int ret;
58 int base = 0, limit = 63;
59
60again:
61 if (idr_pre_get(&drm_minors_idr, GFP_KERNEL) == 0) {
62 DRM_ERROR("Out of memory expanding drawable idr\n");
63 return -ENOMEM;
64 }
65 mutex_lock(&dev->struct_mutex);
66 ret = idr_get_new_above(&drm_minors_idr, NULL,
67 base, &new_id);
68 mutex_unlock(&dev->struct_mutex);
69 if (ret == -EAGAIN) {
70 goto again;
71 } else if (ret) {
72 return ret;
73 }
74
75 if (new_id >= limit) {
76 idr_remove(&drm_minors_idr, new_id);
77 return -EINVAL;
78 }
79 return new_id;
80}
81
7c1c2871
DA
82struct drm_master *drm_master_create(struct drm_minor *minor)
83{
84 struct drm_master *master;
85
86 master = drm_calloc(1, sizeof(*master), DRM_MEM_DRIVER);
87 if (!master)
88 return NULL;
89
90 kref_init(&master->refcount);
91 spin_lock_init(&master->lock.spinlock);
92 init_waitqueue_head(&master->lock.lock_queue);
93 drm_ht_create(&master->magiclist, DRM_MAGIC_HASH_ORDER);
94 INIT_LIST_HEAD(&master->magicfree);
95 master->minor = minor;
96
97 list_add_tail(&master->head, &minor->master_list);
98
99 return master;
100}
101
102struct drm_master *drm_master_get(struct drm_master *master)
103{
104 kref_get(&master->refcount);
105 return master;
106}
107
108static void drm_master_destroy(struct kref *kref)
109{
110 struct drm_master *master = container_of(kref, struct drm_master, refcount);
111 struct drm_magic_entry *pt, *next;
112 struct drm_device *dev = master->minor->dev;
113
114 list_del(&master->head);
115
116 if (dev->driver->master_destroy)
117 dev->driver->master_destroy(dev, master);
118
119 if (master->unique) {
1147c9cd 120 drm_free(master->unique, master->unique_size, DRM_MEM_DRIVER);
7c1c2871
DA
121 master->unique = NULL;
122 master->unique_len = 0;
123 }
124
125 list_for_each_entry_safe(pt, next, &master->magicfree, head) {
126 list_del(&pt->head);
127 drm_ht_remove_item(&master->magiclist, &pt->hash_item);
128 drm_free(pt, sizeof(*pt), DRM_MEM_MAGIC);
129 }
130
131 drm_ht_remove(&master->magiclist);
132
133 if (master->lock.hw_lock) {
134 if (dev->sigdata.lock == master->lock.hw_lock)
135 dev->sigdata.lock = NULL;
136 master->lock.hw_lock = NULL;
137 master->lock.file_priv = NULL;
138 wake_up_interruptible(&master->lock.lock_queue);
139 }
140
141 drm_free(master, sizeof(*master), DRM_MEM_DRIVER);
142}
143
144void drm_master_put(struct drm_master **master)
145{
146 kref_put(&(*master)->refcount, drm_master_destroy);
147 *master = NULL;
148}
149
150int drm_setmaster_ioctl(struct drm_device *dev, void *data,
151 struct drm_file *file_priv)
152{
153 if (file_priv->minor->master && file_priv->minor->master != file_priv->master)
154 return -EINVAL;
155
156 if (!file_priv->master)
157 return -EINVAL;
158
159 if (!file_priv->minor->master &&
160 file_priv->minor->master != file_priv->master) {
161 mutex_lock(&dev->struct_mutex);
162 file_priv->minor->master = drm_master_get(file_priv->master);
163 mutex_lock(&dev->struct_mutex);
164 }
165
166 return 0;
167}
168
169int drm_dropmaster_ioctl(struct drm_device *dev, void *data,
170 struct drm_file *file_priv)
171{
172 if (!file_priv->master)
173 return -EINVAL;
174 mutex_lock(&dev->struct_mutex);
175 drm_master_put(&file_priv->minor->master);
176 mutex_unlock(&dev->struct_mutex);
177 return 0;
178}
179
84b1fd10 180static int drm_fill_in_dev(struct drm_device * dev, struct pci_dev *pdev,
b5e89ed5
DA
181 const struct pci_device_id *ent,
182 struct drm_driver *driver)
1da177e4
LT
183{
184 int retcode;
185
bd1b331f 186 INIT_LIST_HEAD(&dev->filelist);
7c158ace
DA
187 INIT_LIST_HEAD(&dev->ctxlist);
188 INIT_LIST_HEAD(&dev->vmalist);
189 INIT_LIST_HEAD(&dev->maplist);
190
1da177e4 191 spin_lock_init(&dev->count_lock);
bea5679f 192 spin_lock_init(&dev->drw_lock);
b5e89ed5 193 init_timer(&dev->timer);
30e2fb18
DA
194 mutex_init(&dev->struct_mutex);
195 mutex_init(&dev->ctxlist_mutex);
1da177e4 196
45ea5dcd
DA
197 idr_init(&dev->drw_idr);
198
b5e89ed5 199 dev->pdev = pdev;
2f02cc3f
EA
200 dev->pci_device = pdev->device;
201 dev->pci_vendor = pdev->vendor;
1da177e4
LT
202
203#ifdef __alpha__
b5e89ed5 204 dev->hose = pdev->sysdata;
1da177e4 205#endif
1da177e4 206
8d153f71 207 if (drm_ht_create(&dev->map_hash, 12)) {
8d153f71
TH
208 return -ENOMEM;
209 }
836cf046 210
1da177e4
LT
211 /* the DRM has 6 basic counters */
212 dev->counters = 6;
b5e89ed5
DA
213 dev->types[0] = _DRM_STAT_LOCK;
214 dev->types[1] = _DRM_STAT_OPENS;
215 dev->types[2] = _DRM_STAT_CLOSES;
216 dev->types[3] = _DRM_STAT_IOCTLS;
217 dev->types[4] = _DRM_STAT_LOCKS;
218 dev->types[5] = _DRM_STAT_UNLOCKS;
1da177e4
LT
219
220 dev->driver = driver;
b5e89ed5 221
1da177e4 222 if (drm_core_has_AGP(dev)) {
cda17380
DA
223 if (drm_device_is_agp(dev))
224 dev->agp = drm_agp_init(dev);
b5e89ed5
DA
225 if (drm_core_check_feature(dev, DRIVER_REQUIRE_AGP)
226 && (dev->agp == NULL)) {
227 DRM_ERROR("Cannot initialize the agpgart module.\n");
1da177e4
LT
228 retcode = -EINVAL;
229 goto error_out_unreg;
230 }
231 if (drm_core_has_MTRR(dev)) {
232 if (dev->agp)
b5e89ed5
DA
233 dev->agp->agp_mtrr =
234 mtrr_add(dev->agp->agp_info.aper_base,
235 dev->agp->agp_info.aper_size *
236 1024 * 1024, MTRR_TYPE_WRCOMB, 1);
1da177e4
LT
237 }
238 }
239
2716a02f
DA
240 if (dev->driver->load)
241 if ((retcode = dev->driver->load(dev, ent->driver_data)))
242 goto error_out_unreg;
243
b5e89ed5
DA
244 retcode = drm_ctxbitmap_init(dev);
245 if (retcode) {
246 DRM_ERROR("Cannot allocate memory for context bitmap.\n");
1da177e4
LT
247 goto error_out_unreg;
248 }
249
673a394b
EA
250 if (driver->driver_features & DRIVER_GEM) {
251 retcode = drm_gem_init(dev);
252 if (retcode) {
253 DRM_ERROR("Cannot initialize graphics execution "
254 "manager (GEM)\n");
255 goto error_out_unreg;
256 }
257 }
258
1da177e4 259 return 0;
b5e89ed5
DA
260
261 error_out_unreg:
22eae947 262 drm_lastclose(dev);
1da177e4
LT
263 return retcode;
264}
265
1da177e4 266
1da177e4
LT
267/**
268 * Get a secondary minor number.
269 *
270 * \param dev device data structure
271 * \param sec-minor structure to hold the assigned minor
272 * \return negative number on failure.
273 *
274 * Search an empty entry and initialize it to the given parameters, and
275 * create the proc init entry via proc_init(). This routines assigns
276 * minor numbers to secondary heads of multi-headed cards
277 */
2c14f28b 278static int drm_get_minor(struct drm_device *dev, struct drm_minor **minor, int type)
1da177e4 279{
2c14f28b 280 struct drm_minor *new_minor;
1da177e4 281 int ret;
2c14f28b 282 int minor_id;
1da177e4
LT
283
284 DRM_DEBUG("\n");
285
2c14f28b
DA
286 minor_id = drm_minor_get_id(dev, type);
287 if (minor_id < 0)
288 return minor_id;
289
290 new_minor = kzalloc(sizeof(struct drm_minor), GFP_KERNEL);
291 if (!new_minor) {
292 ret = -ENOMEM;
293 goto err_idr;
294 }
295
296 new_minor->type = type;
297 new_minor->device = MKDEV(DRM_MAJOR, minor_id);
298 new_minor->dev = dev;
299 new_minor->index = minor_id;
7c1c2871 300 INIT_LIST_HEAD(&new_minor->master_list);
2c14f28b
DA
301
302 idr_replace(&drm_minors_idr, new_minor, minor_id);
303
304 if (type == DRM_MINOR_LEGACY) {
305 ret = drm_proc_init(new_minor, minor_id, drm_proc_root);
306 if (ret) {
307 DRM_ERROR("DRM: Failed to initialize /proc/dri.\n");
308 goto err_mem;
1da177e4 309 }
2c14f28b
DA
310 } else
311 new_minor->dev_root = NULL;
312
313 ret = drm_sysfs_device_add(new_minor);
314 if (ret) {
315 printk(KERN_ERR
316 "DRM: Error sysfs_device_add.\n");
317 goto err_g2;
1da177e4 318 }
2c14f28b
DA
319 *minor = new_minor;
320
321 DRM_DEBUG("new minor assigned %d\n", minor_id);
322 return 0;
323
324
325err_g2:
326 if (new_minor->type == DRM_MINOR_LEGACY)
327 drm_proc_cleanup(new_minor, drm_proc_root);
328err_mem:
329 kfree(new_minor);
330err_idr:
331 idr_remove(&drm_minors_idr, minor_id);
332 *minor = NULL;
1da177e4
LT
333 return ret;
334}
b5e89ed5 335
c94f7029
DA
336/**
337 * Register.
338 *
339 * \param pdev - PCI device structure
340 * \param ent entry from the PCI ID table with device type flags
341 * \return zero on success or a negative number on failure.
342 *
343 * Attempt to gets inter module "drm" information. If we are first
344 * then register the character device and inter module information.
345 * Try and register, if we fail to register, backout previous work.
346 */
347int drm_get_dev(struct pci_dev *pdev, const struct pci_device_id *ent,
b5e89ed5 348 struct drm_driver *driver)
c94f7029 349{
84b1fd10 350 struct drm_device *dev;
c94f7029
DA
351 int ret;
352
353 DRM_DEBUG("\n");
354
355 dev = drm_calloc(1, sizeof(*dev), DRM_MEM_STUB);
356 if (!dev)
357 return -ENOMEM;
358
2c3f0edd
JG
359 ret = pci_enable_device(pdev);
360 if (ret)
361 goto err_g1;
c94f7029 362
19a8f59a 363 pci_set_master(pdev);
c94f7029
DA
364 if ((ret = drm_fill_in_dev(dev, pdev, ent, driver))) {
365 printk(KERN_ERR "DRM: Fill_in_dev failed.\n");
2c3f0edd 366 goto err_g2;
c94f7029 367 }
2c14f28b 368 if ((ret = drm_get_minor(dev, &dev->primary, DRM_MINOR_LEGACY)))
2c3f0edd 369 goto err_g2;
bc5f4523 370
e7f7ab45
DA
371 list_add_tail(&dev->driver_item, &driver->device_list);
372
22eae947
DA
373 DRM_INFO("Initialized %s %d.%d.%d %s on minor %d\n",
374 driver->name, driver->major, driver->minor, driver->patchlevel,
2c14f28b 375 driver->date, dev->primary->index);
c94f7029
DA
376
377 return 0;
378
2c3f0edd
JG
379err_g2:
380 pci_disable_device(pdev);
381err_g1:
c94f7029
DA
382 drm_free(dev, sizeof(*dev), DRM_MEM_STUB);
383 return ret;
384}
b5e89ed5 385
1da177e4
LT
386/**
387 * Put a device minor number.
388 *
389 * \param dev device data structure
390 * \return always zero
391 *
392 * Cleans up the proc resources. If it is the last minor then release the foreign
393 * "drm" data, otherwise unregisters the "drm" data, frees the dev list and
394 * unregisters the character device.
395 */
84b1fd10 396int drm_put_dev(struct drm_device * dev)
1da177e4
LT
397{
398 DRM_DEBUG("release primary %s\n", dev->driver->pci_driver.name);
399
1da177e4
LT
400 if (dev->devname) {
401 drm_free(dev->devname, strlen(dev->devname) + 1,
402 DRM_MEM_DRIVER);
403 dev->devname = NULL;
404 }
405 drm_free(dev, sizeof(*dev), DRM_MEM_STUB);
406 return 0;
407}
408
409/**
410 * Put a secondary minor number.
411 *
412 * \param sec_minor - structure to be released
413 * \return always zero
414 *
415 * Cleans up the proc resources. Not legal for this to be the
416 * last minor released.
417 *
418 */
2c14f28b 419int drm_put_minor(struct drm_minor **minor_p)
1da177e4 420{
2c14f28b 421 struct drm_minor *minor = *minor_p;
673a394b 422
2c14f28b 423 DRM_DEBUG("release secondary minor %d\n", minor->index);
b5e89ed5 424
2c14f28b
DA
425 if (minor->type == DRM_MINOR_LEGACY)
426 drm_proc_cleanup(minor, drm_proc_root);
427 drm_sysfs_device_remove(minor);
1da177e4 428
2c14f28b 429 idr_remove(&drm_minors_idr, minor->index);
b5e89ed5 430
2c14f28b
DA
431 kfree(minor);
432 *minor_p = NULL;
1da177e4
LT
433 return 0;
434}