1/*
2 * Copyright (C) 2008 Ben Skeggs.
3 * All Rights Reserved.
4 *
5 * Permission is hereby granted, free of charge, to any person obtaining
6 * a copy of this software and associated documentation files (the
7 * "Software"), to deal in the Software without restriction, including
8 * without limitation the rights to use, copy, modify, merge, publish,
9 * distribute, sublicense, and/or sell copies of the Software, and to
10 * permit persons to whom the Software is furnished to do so, subject to
11 * the following conditions:
12 *
13 * The above copyright notice and this permission notice (including the
14 * next paragraph) shall be included in all copies or substantial
15 * portions of the Software.
16 *
17 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
18 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
19 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
20 * IN NO EVENT SHALL THE COPYRIGHT OWNER(S) AND/OR ITS SUPPLIERS BE
21 * LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
22 * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
23 * WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
24 *
25 */
26
27#include "nouveau_drm.h"
28#include "nouveau_dma.h"
29#include "nouveau_fence.h"
30#include "nouveau_abi16.h"
31
32#include "nouveau_ttm.h"
33#include "nouveau_gem.h"
34
35void
36nouveau_gem_object_del(struct drm_gem_object *gem)
37{
38	struct nouveau_bo *nvbo = nouveau_gem_object(gem);
39	struct nouveau_drm *drm = nouveau_bdev(nvbo->bo.bdev);
40	struct ttm_buffer_object *bo = &nvbo->bo;
41	struct device *dev = drm->dev->dev;
42	int ret;
43
44	ret = pm_runtime_get_sync(dev);
45	if (WARN_ON(ret < 0 && ret != -EACCES))
46		return;
47
48	if (gem->import_attach)
49		drm_prime_gem_destroy(gem, nvbo->bo.sg);
50
51	drm_gem_object_release(gem);
52
53	/* reset filp so nouveau_bo_del_ttm() can test for it */
54	gem->filp = NULL;
55	ttm_bo_unref(&bo);
56
57	pm_runtime_mark_last_busy(dev);
58	pm_runtime_put_autosuspend(dev);
59}
60
61int
62nouveau_gem_object_open(struct drm_gem_object *gem, struct drm_file *file_priv)
63{
64	struct nouveau_cli *cli = nouveau_cli(file_priv);
65	struct nouveau_bo *nvbo = nouveau_gem_object(gem);
66	struct nouveau_drm *drm = nouveau_bdev(nvbo->bo.bdev);
67	struct nvkm_vma *vma;
68	struct device *dev = drm->dev->dev;
69	int ret;
70
71	if (!cli->vm)
72		return 0;
73
74	ret = ttm_bo_reserve(&nvbo->bo, false, false, false, NULL);
75	if (ret)
76		return ret;
77
78	vma = nouveau_bo_vma_find(nvbo, cli->vm);
79	if (!vma) {
80		vma = kzalloc(sizeof(*vma), GFP_KERNEL);
81		if (!vma) {
82			ret = -ENOMEM;
83			goto out;
84		}
85
86		ret = pm_runtime_get_sync(dev);
87		if (ret < 0 && ret != -EACCES) {
88			kfree(vma);
89			goto out;
90		}
91
92		ret = nouveau_bo_vma_add(nvbo, cli->vm, vma);
93		if (ret)
94			kfree(vma);
95
96		pm_runtime_mark_last_busy(dev);
97		pm_runtime_put_autosuspend(dev);
98	} else {
99		vma->refcount++;
100	}
101
102out:
103	ttm_bo_unreserve(&nvbo->bo);
104	return ret;
105}
106
107static void
108nouveau_gem_object_delete(void *data)
109{
110	struct nvkm_vma *vma = data;
111	nvkm_vm_unmap(vma);
112	nvkm_vm_put(vma);
113	kfree(vma);
114}
115
116static void
117nouveau_gem_object_unmap(struct nouveau_bo *nvbo, struct nvkm_vma *vma)
118{
119	const bool mapped = nvbo->bo.mem.mem_type != TTM_PL_SYSTEM;
120	struct reservation_object *resv = nvbo->bo.resv;
121	struct reservation_object_list *fobj;
122	struct fence *fence = NULL;
123
124	fobj = reservation_object_get_list(resv);
125
126	list_del(&vma->head);
127
128	if (fobj && fobj->shared_count > 1)
129		ttm_bo_wait(&nvbo->bo, true, false, false);
130	else if (fobj && fobj->shared_count == 1)
131		fence = rcu_dereference_protected(fobj->shared[0],
132						reservation_object_held(resv));
133	else
134		fence = reservation_object_get_excl(nvbo->bo.resv);
135
136	if (fence && mapped) {
137		nouveau_fence_work(fence, nouveau_gem_object_delete, vma);
138	} else {
139		if (mapped)
140			nvkm_vm_unmap(vma);
141		nvkm_vm_put(vma);
142		kfree(vma);
143	}
144}
145
146void
147nouveau_gem_object_close(struct drm_gem_object *gem, struct drm_file *file_priv)
148{
149	struct nouveau_cli *cli = nouveau_cli(file_priv);
150	struct nouveau_bo *nvbo = nouveau_gem_object(gem);
151	struct nouveau_drm *drm = nouveau_bdev(nvbo->bo.bdev);
152	struct device *dev = drm->dev->dev;
153	struct nvkm_vma *vma;
154	int ret;
155
156	if (!cli->vm)
157		return;
158
159	ret = ttm_bo_reserve(&nvbo->bo, false, false, false, NULL);
160	if (ret)
161		return;
162
163	vma = nouveau_bo_vma_find(nvbo, cli->vm);
164	if (vma) {
165		if (--vma->refcount == 0) {
166			ret = pm_runtime_get_sync(dev);
167			if (!WARN_ON(ret < 0 && ret != -EACCES)) {
168				nouveau_gem_object_unmap(nvbo, vma);
169				pm_runtime_mark_last_busy(dev);
170				pm_runtime_put_autosuspend(dev);
171			}
172		}
173	}
174	ttm_bo_unreserve(&nvbo->bo);
175}
176
177int
178nouveau_gem_new(struct drm_device *dev, int size, int align, uint32_t domain,
179		uint32_t tile_mode, uint32_t tile_flags,
180		struct nouveau_bo **pnvbo)
181{
182	struct nouveau_drm *drm = nouveau_drm(dev);
183	struct nouveau_bo *nvbo;
184	u32 flags = 0;
185	int ret;
186
187	if (domain & NOUVEAU_GEM_DOMAIN_VRAM)
188		flags |= TTM_PL_FLAG_VRAM;
189	if (domain & NOUVEAU_GEM_DOMAIN_GART)
190		flags |= TTM_PL_FLAG_TT;
191	if (!flags || domain & NOUVEAU_GEM_DOMAIN_CPU)
192		flags |= TTM_PL_FLAG_SYSTEM;
193
194	if (domain & NOUVEAU_GEM_DOMAIN_COHERENT)
195		flags |= TTM_PL_FLAG_UNCACHED;
196
197	ret = nouveau_bo_new(dev, size, align, flags, tile_mode,
198			     tile_flags, NULL, NULL, pnvbo);
199	if (ret)
200		return ret;
201	nvbo = *pnvbo;
202
203	/* we restrict allowed domains on nv50+ to only the types
204	 * that were requested at creation time.  not possibly on
205	 * earlier chips without busting the ABI.
206	 */
207	nvbo->valid_domains = NOUVEAU_GEM_DOMAIN_VRAM |
208			      NOUVEAU_GEM_DOMAIN_GART;
209	if (drm->device.info.family >= NV_DEVICE_INFO_V0_TESLA)
210		nvbo->valid_domains &= domain;
211
212	/* Initialize the embedded gem-object. We return a single gem-reference
213	 * to the caller, instead of a normal nouveau_bo ttm reference. */
214	ret = drm_gem_object_init(dev, &nvbo->gem, nvbo->bo.mem.size);
215	if (ret) {
216		nouveau_bo_ref(NULL, pnvbo);
217		return -ENOMEM;
218	}
219
220	nvbo->bo.persistent_swap_storage = nvbo->gem.filp;
221	return 0;
222}
223
224static int
225nouveau_gem_info(struct drm_file *file_priv, struct drm_gem_object *gem,
226		 struct drm_nouveau_gem_info *rep)
227{
228	struct nouveau_cli *cli = nouveau_cli(file_priv);
229	struct nouveau_bo *nvbo = nouveau_gem_object(gem);
230	struct nvkm_vma *vma;
231
232	if (is_power_of_2(nvbo->valid_domains))
233		rep->domain = nvbo->valid_domains;
234	else if (nvbo->bo.mem.mem_type == TTM_PL_TT)
235		rep->domain = NOUVEAU_GEM_DOMAIN_GART;
236	else
237		rep->domain = NOUVEAU_GEM_DOMAIN_VRAM;
238	rep->offset = nvbo->bo.offset;
239	if (cli->vm) {
240		vma = nouveau_bo_vma_find(nvbo, cli->vm);
241		if (!vma)
242			return -EINVAL;
243
244		rep->offset = vma->offset;
245	}
246
247	rep->size = nvbo->bo.mem.num_pages << PAGE_SHIFT;
248	rep->map_handle = drm_vma_node_offset_addr(&nvbo->bo.vma_node);
249	rep->tile_mode = nvbo->tile_mode;
250	rep->tile_flags = nvbo->tile_flags;
251	return 0;
252}
253
254int
255nouveau_gem_ioctl_new(struct drm_device *dev, void *data,
256		      struct drm_file *file_priv)
257{
258	struct nouveau_drm *drm = nouveau_drm(dev);
259	struct nouveau_cli *cli = nouveau_cli(file_priv);
260	struct nvkm_fb *fb = nvxx_fb(&drm->device);
261	struct drm_nouveau_gem_new *req = data;
262	struct nouveau_bo *nvbo = NULL;
263	int ret = 0;
264
265	if (!nvkm_fb_memtype_valid(fb, req->info.tile_flags)) {
266		NV_PRINTK(err, cli, "bad page flags: 0x%08x\n", req->info.tile_flags);
267		return -EINVAL;
268	}
269
270	ret = nouveau_gem_new(dev, req->info.size, req->align,
271			      req->info.domain, req->info.tile_mode,
272			      req->info.tile_flags, &nvbo);
273	if (ret)
274		return ret;
275
276	ret = drm_gem_handle_create(file_priv, &nvbo->gem, &req->info.handle);
277	if (ret == 0) {
278		ret = nouveau_gem_info(file_priv, &nvbo->gem, &req->info);
279		if (ret)
280			drm_gem_handle_delete(file_priv, req->info.handle);
281	}
282
283	/* drop reference from allocate - handle holds it now */
284	drm_gem_object_unreference_unlocked(&nvbo->gem);
285	return ret;
286}
287
288static int
289nouveau_gem_set_domain(struct drm_gem_object *gem, uint32_t read_domains,
290		       uint32_t write_domains, uint32_t valid_domains)
291{
292	struct nouveau_bo *nvbo = nouveau_gem_object(gem);
293	struct ttm_buffer_object *bo = &nvbo->bo;
294	uint32_t domains = valid_domains & nvbo->valid_domains &
295		(write_domains ? write_domains : read_domains);
296	uint32_t pref_flags = 0, valid_flags = 0;
297
298	if (!domains)
299		return -EINVAL;
300
301	if (valid_domains & NOUVEAU_GEM_DOMAIN_VRAM)
302		valid_flags |= TTM_PL_FLAG_VRAM;
303
304	if (valid_domains & NOUVEAU_GEM_DOMAIN_GART)
305		valid_flags |= TTM_PL_FLAG_TT;
306
307	if ((domains & NOUVEAU_GEM_DOMAIN_VRAM) &&
308	    bo->mem.mem_type == TTM_PL_VRAM)
309		pref_flags |= TTM_PL_FLAG_VRAM;
310
311	else if ((domains & NOUVEAU_GEM_DOMAIN_GART) &&
312		 bo->mem.mem_type == TTM_PL_TT)
313		pref_flags |= TTM_PL_FLAG_TT;
314
315	else if (domains & NOUVEAU_GEM_DOMAIN_VRAM)
316		pref_flags |= TTM_PL_FLAG_VRAM;
317
318	else
319		pref_flags |= TTM_PL_FLAG_TT;
320
321	nouveau_bo_placement_set(nvbo, pref_flags, valid_flags);
322
323	return 0;
324}
325
326struct validate_op {
327	struct list_head list;
328	struct ww_acquire_ctx ticket;
329};
330
331static void
332validate_fini_no_ticket(struct validate_op *op, struct nouveau_fence *fence,
333			struct drm_nouveau_gem_pushbuf_bo *pbbo)
334{
335	struct nouveau_bo *nvbo;
336	struct drm_nouveau_gem_pushbuf_bo *b;
337
338	while (!list_empty(&op->list)) {
339		nvbo = list_entry(op->list.next, struct nouveau_bo, entry);
340		b = &pbbo[nvbo->pbbo_index];
341
342		if (likely(fence))
343			nouveau_bo_fence(nvbo, fence, !!b->write_domains);
344
345		if (unlikely(nvbo->validate_mapped)) {
346			ttm_bo_kunmap(&nvbo->kmap);
347			nvbo->validate_mapped = false;
348		}
349
350		list_del(&nvbo->entry);
351		nvbo->reserved_by = NULL;
352		ttm_bo_unreserve_ticket(&nvbo->bo, &op->ticket);
353		drm_gem_object_unreference_unlocked(&nvbo->gem);
354	}
355}
356
357static void
358validate_fini(struct validate_op *op, struct nouveau_fence *fence,
359	      struct drm_nouveau_gem_pushbuf_bo *pbbo)
360{
361	validate_fini_no_ticket(op, fence, pbbo);
362	ww_acquire_fini(&op->ticket);
363}
364
365static int
366validate_init(struct nouveau_channel *chan, struct drm_file *file_priv,
367	      struct drm_nouveau_gem_pushbuf_bo *pbbo,
368	      int nr_buffers, struct validate_op *op)
369{
370	struct nouveau_cli *cli = nouveau_cli(file_priv);
371	struct drm_device *dev = chan->drm->dev;
372	int trycnt = 0;
373	int ret, i;
374	struct nouveau_bo *res_bo = NULL;
375	LIST_HEAD(gart_list);
376	LIST_HEAD(vram_list);
377	LIST_HEAD(both_list);
378
379	ww_acquire_init(&op->ticket, &reservation_ww_class);
380retry:
381	if (++trycnt > 100000) {
382		NV_PRINTK(err, cli, "%s failed and gave up.\n", __func__);
383		return -EINVAL;
384	}
385
386	for (i = 0; i < nr_buffers; i++) {
387		struct drm_nouveau_gem_pushbuf_bo *b = &pbbo[i];
388		struct drm_gem_object *gem;
389		struct nouveau_bo *nvbo;
390
391		gem = drm_gem_object_lookup(dev, file_priv, b->handle);
392		if (!gem) {
393			NV_PRINTK(err, cli, "Unknown handle 0x%08x\n", b->handle);
394			ret = -ENOENT;
395			break;
396		}
397		nvbo = nouveau_gem_object(gem);
398		if (nvbo == res_bo) {
399			res_bo = NULL;
400			drm_gem_object_unreference_unlocked(gem);
401			continue;
402		}
403
404		if (nvbo->reserved_by && nvbo->reserved_by == file_priv) {
405			NV_PRINTK(err, cli, "multiple instances of buffer %d on "
406				      "validation list\n", b->handle);
407			drm_gem_object_unreference_unlocked(gem);
408			ret = -EINVAL;
409			break;
410		}
411
412		ret = ttm_bo_reserve(&nvbo->bo, true, false, true, &op->ticket);
413		if (ret) {
414			list_splice_tail_init(&vram_list, &op->list);
415			list_splice_tail_init(&gart_list, &op->list);
416			list_splice_tail_init(&both_list, &op->list);
417			validate_fini_no_ticket(op, NULL, NULL);
418			if (unlikely(ret == -EDEADLK)) {
419				ret = ttm_bo_reserve_slowpath(&nvbo->bo, true,
420							      &op->ticket);
421				if (!ret)
422					res_bo = nvbo;
423			}
424			if (unlikely(ret)) {
425				if (ret != -ERESTARTSYS)
426					NV_PRINTK(err, cli, "fail reserve\n");
427				break;
428			}
429		}
430
431		b->user_priv = (uint64_t)(unsigned long)nvbo;
432		nvbo->reserved_by = file_priv;
433		nvbo->pbbo_index = i;
434		if ((b->valid_domains & NOUVEAU_GEM_DOMAIN_VRAM) &&
435		    (b->valid_domains & NOUVEAU_GEM_DOMAIN_GART))
436			list_add_tail(&nvbo->entry, &both_list);
437		else
438		if (b->valid_domains & NOUVEAU_GEM_DOMAIN_VRAM)
439			list_add_tail(&nvbo->entry, &vram_list);
440		else
441		if (b->valid_domains & NOUVEAU_GEM_DOMAIN_GART)
442			list_add_tail(&nvbo->entry, &gart_list);
443		else {
444			NV_PRINTK(err, cli, "invalid valid domains: 0x%08x\n",
445				 b->valid_domains);
446			list_add_tail(&nvbo->entry, &both_list);
447			ret = -EINVAL;
448			break;
449		}
450		if (nvbo == res_bo)
451			goto retry;
452	}
453
454	ww_acquire_done(&op->ticket);
455	list_splice_tail(&vram_list, &op->list);
456	list_splice_tail(&gart_list, &op->list);
457	list_splice_tail(&both_list, &op->list);
458	if (ret)
459		validate_fini(op, NULL, NULL);
460	return ret;
461
462}
463
464static int
465validate_list(struct nouveau_channel *chan, struct nouveau_cli *cli,
466	      struct list_head *list, struct drm_nouveau_gem_pushbuf_bo *pbbo,
467	      uint64_t user_pbbo_ptr)
468{
469	struct nouveau_drm *drm = chan->drm;
470	struct drm_nouveau_gem_pushbuf_bo __user *upbbo =
471				(void __force __user *)(uintptr_t)user_pbbo_ptr;
472	struct nouveau_bo *nvbo;
473	int ret, relocs = 0;
474
475	list_for_each_entry(nvbo, list, entry) {
476		struct drm_nouveau_gem_pushbuf_bo *b = &pbbo[nvbo->pbbo_index];
477
478		ret = nouveau_gem_set_domain(&nvbo->gem, b->read_domains,
479					     b->write_domains,
480					     b->valid_domains);
481		if (unlikely(ret)) {
482			NV_PRINTK(err, cli, "fail set_domain\n");
483			return ret;
484		}
485
486		ret = nouveau_bo_validate(nvbo, true, false);
487		if (unlikely(ret)) {
488			if (ret != -ERESTARTSYS)
489				NV_PRINTK(err, cli, "fail ttm_validate\n");
490			return ret;
491		}
492
493		ret = nouveau_fence_sync(nvbo, chan, !!b->write_domains, true);
494		if (unlikely(ret)) {
495			if (ret != -ERESTARTSYS)
496				NV_PRINTK(err, cli, "fail post-validate sync\n");
497			return ret;
498		}
499
500		if (drm->device.info.family < NV_DEVICE_INFO_V0_TESLA) {
501			if (nvbo->bo.offset == b->presumed.offset &&
502			    ((nvbo->bo.mem.mem_type == TTM_PL_VRAM &&
503			      b->presumed.domain & NOUVEAU_GEM_DOMAIN_VRAM) ||
504			     (nvbo->bo.mem.mem_type == TTM_PL_TT &&
505			      b->presumed.domain & NOUVEAU_GEM_DOMAIN_GART)))
506				continue;
507
508			if (nvbo->bo.mem.mem_type == TTM_PL_TT)
509				b->presumed.domain = NOUVEAU_GEM_DOMAIN_GART;
510			else
511				b->presumed.domain = NOUVEAU_GEM_DOMAIN_VRAM;
512			b->presumed.offset = nvbo->bo.offset;
513			b->presumed.valid = 0;
514			relocs++;
515
516			if (copy_to_user(&upbbo[nvbo->pbbo_index].presumed,
517					     &b->presumed, sizeof(b->presumed)))
518				return -EFAULT;
519		}
520	}
521
522	return relocs;
523}
524
525static int
526nouveau_gem_pushbuf_validate(struct nouveau_channel *chan,
527			     struct drm_file *file_priv,
528			     struct drm_nouveau_gem_pushbuf_bo *pbbo,
529			     uint64_t user_buffers, int nr_buffers,
530			     struct validate_op *op, int *apply_relocs)
531{
532	struct nouveau_cli *cli = nouveau_cli(file_priv);
533	int ret;
534
535	INIT_LIST_HEAD(&op->list);
536
537	if (nr_buffers == 0)
538		return 0;
539
540	ret = validate_init(chan, file_priv, pbbo, nr_buffers, op);
541	if (unlikely(ret)) {
542		if (ret != -ERESTARTSYS)
543			NV_PRINTK(err, cli, "validate_init\n");
544		return ret;
545	}
546
547	ret = validate_list(chan, cli, &op->list, pbbo, user_buffers);
548	if (unlikely(ret < 0)) {
549		if (ret != -ERESTARTSYS)
550			NV_PRINTK(err, cli, "validating bo list\n");
551		validate_fini(op, NULL, NULL);
552		return ret;
553	}
554	*apply_relocs = ret;
555	return 0;
556}
557
558static inline void
559u_free(void *addr)
560{
561	kvfree(addr);
562}
563
564static inline void *
565u_memcpya(uint64_t user, unsigned nmemb, unsigned size)
566{
567	void *mem;
568	void __user *userptr = (void __force __user *)(uintptr_t)user;
569
570	size *= nmemb;
571
572	mem = kmalloc(size, GFP_KERNEL | __GFP_NOWARN);
573	if (!mem)
574		mem = vmalloc(size);
575	if (!mem)
576		return ERR_PTR(-ENOMEM);
577
578	if (copy_from_user(mem, userptr, size)) {
579		u_free(mem);
580		return ERR_PTR(-EFAULT);
581	}
582
583	return mem;
584}
585
586static int
587nouveau_gem_pushbuf_reloc_apply(struct nouveau_cli *cli,
588				struct drm_nouveau_gem_pushbuf *req,
589				struct drm_nouveau_gem_pushbuf_bo *bo)
590{
591	struct drm_nouveau_gem_pushbuf_reloc *reloc = NULL;
592	int ret = 0;
593	unsigned i;
594
595	reloc = u_memcpya(req->relocs, req->nr_relocs, sizeof(*reloc));
596	if (IS_ERR(reloc))
597		return PTR_ERR(reloc);
598
599	for (i = 0; i < req->nr_relocs; i++) {
600		struct drm_nouveau_gem_pushbuf_reloc *r = &reloc[i];
601		struct drm_nouveau_gem_pushbuf_bo *b;
602		struct nouveau_bo *nvbo;
603		uint32_t data;
604
605		if (unlikely(r->bo_index > req->nr_buffers)) {
606			NV_PRINTK(err, cli, "reloc bo index invalid\n");
607			ret = -EINVAL;
608			break;
609		}
610
611		b = &bo[r->bo_index];
612		if (b->presumed.valid)
613			continue;
614
615		if (unlikely(r->reloc_bo_index > req->nr_buffers)) {
616			NV_PRINTK(err, cli, "reloc container bo index invalid\n");
617			ret = -EINVAL;
618			break;
619		}
620		nvbo = (void *)(unsigned long)bo[r->reloc_bo_index].user_priv;
621
622		if (unlikely(r->reloc_bo_offset + 4 >
623			     nvbo->bo.mem.num_pages << PAGE_SHIFT)) {
624			NV_PRINTK(err, cli, "reloc outside of bo\n");
625			ret = -EINVAL;
626			break;
627		}
628
629		if (!nvbo->kmap.virtual) {
630			ret = ttm_bo_kmap(&nvbo->bo, 0, nvbo->bo.mem.num_pages,
631					  &nvbo->kmap);
632			if (ret) {
633				NV_PRINTK(err, cli, "failed kmap for reloc\n");
634				break;
635			}
636			nvbo->validate_mapped = true;
637		}
638
639		if (r->flags & NOUVEAU_GEM_RELOC_LOW)
640			data = b->presumed.offset + r->data;
641		else
642		if (r->flags & NOUVEAU_GEM_RELOC_HIGH)
643			data = (b->presumed.offset + r->data) >> 32;
644		else
645			data = r->data;
646
647		if (r->flags & NOUVEAU_GEM_RELOC_OR) {
648			if (b->presumed.domain == NOUVEAU_GEM_DOMAIN_GART)
649				data |= r->tor;
650			else
651				data |= r->vor;
652		}
653
654		ret = ttm_bo_wait(&nvbo->bo, true, false, false);
655		if (ret) {
656			NV_PRINTK(err, cli, "reloc wait_idle failed: %d\n", ret);
657			break;
658		}
659
660		nouveau_bo_wr32(nvbo, r->reloc_bo_offset >> 2, data);
661	}
662
663	u_free(reloc);
664	return ret;
665}
666
667int
668nouveau_gem_ioctl_pushbuf(struct drm_device *dev, void *data,
669			  struct drm_file *file_priv)
670{
671	struct nouveau_abi16 *abi16 = nouveau_abi16_get(file_priv);
672	struct nouveau_cli *cli = nouveau_cli(file_priv);
673	struct nouveau_abi16_chan *temp;
674	struct nouveau_drm *drm = nouveau_drm(dev);
675	struct drm_nouveau_gem_pushbuf *req = data;
676	struct drm_nouveau_gem_pushbuf_push *push;
677	struct drm_nouveau_gem_pushbuf_bo *bo;
678	struct nouveau_channel *chan = NULL;
679	struct validate_op op;
680	struct nouveau_fence *fence = NULL;
681	int i, j, ret = 0, do_reloc = 0;
682
683	if (unlikely(!abi16))
684		return -ENOMEM;
685
686	list_for_each_entry(temp, &abi16->channels, head) {
687		if (temp->chan->chid == req->channel) {
688			chan = temp->chan;
689			break;
690		}
691	}
692
693	if (!chan)
694		return nouveau_abi16_put(abi16, -ENOENT);
695
696	req->vram_available = drm->gem.vram_available;
697	req->gart_available = drm->gem.gart_available;
698	if (unlikely(req->nr_push == 0))
699		goto out_next;
700
701	if (unlikely(req->nr_push > NOUVEAU_GEM_MAX_PUSH)) {
702		NV_PRINTK(err, cli, "pushbuf push count exceeds limit: %d max %d\n",
703			 req->nr_push, NOUVEAU_GEM_MAX_PUSH);
704		return nouveau_abi16_put(abi16, -EINVAL);
705	}
706
707	if (unlikely(req->nr_buffers > NOUVEAU_GEM_MAX_BUFFERS)) {
708		NV_PRINTK(err, cli, "pushbuf bo count exceeds limit: %d max %d\n",
709			 req->nr_buffers, NOUVEAU_GEM_MAX_BUFFERS);
710		return nouveau_abi16_put(abi16, -EINVAL);
711	}
712
713	if (unlikely(req->nr_relocs > NOUVEAU_GEM_MAX_RELOCS)) {
714		NV_PRINTK(err, cli, "pushbuf reloc count exceeds limit: %d max %d\n",
715			 req->nr_relocs, NOUVEAU_GEM_MAX_RELOCS);
716		return nouveau_abi16_put(abi16, -EINVAL);
717	}
718
719	push = u_memcpya(req->push, req->nr_push, sizeof(*push));
720	if (IS_ERR(push))
721		return nouveau_abi16_put(abi16, PTR_ERR(push));
722
723	bo = u_memcpya(req->buffers, req->nr_buffers, sizeof(*bo));
724	if (IS_ERR(bo)) {
725		u_free(push);
726		return nouveau_abi16_put(abi16, PTR_ERR(bo));
727	}
728
729	/* Ensure all push buffers are on validate list */
730	for (i = 0; i < req->nr_push; i++) {
731		if (push[i].bo_index >= req->nr_buffers) {
732			NV_PRINTK(err, cli, "push %d buffer not in list\n", i);
733			ret = -EINVAL;
734			goto out_prevalid;
735		}
736	}
737
738	/* Validate buffer list */
739	ret = nouveau_gem_pushbuf_validate(chan, file_priv, bo, req->buffers,
740					   req->nr_buffers, &op, &do_reloc);
741	if (ret) {
742		if (ret != -ERESTARTSYS)
743			NV_PRINTK(err, cli, "validate: %d\n", ret);
744		goto out_prevalid;
745	}
746
747	/* Apply any relocations that are required */
748	if (do_reloc) {
749		ret = nouveau_gem_pushbuf_reloc_apply(cli, req, bo);
750		if (ret) {
751			NV_PRINTK(err, cli, "reloc apply: %d\n", ret);
752			goto out;
753		}
754	}
755
756	if (chan->dma.ib_max) {
757		ret = nouveau_dma_wait(chan, req->nr_push + 1, 16);
758		if (ret) {
759			NV_PRINTK(err, cli, "nv50cal_space: %d\n", ret);
760			goto out;
761		}
762
763		for (i = 0; i < req->nr_push; i++) {
764			struct nouveau_bo *nvbo = (void *)(unsigned long)
765				bo[push[i].bo_index].user_priv;
766
767			nv50_dma_push(chan, nvbo, push[i].offset,
768				      push[i].length);
769		}
770	} else
771	if (drm->device.info.chipset >= 0x25) {
772		ret = RING_SPACE(chan, req->nr_push * 2);
773		if (ret) {
774			NV_PRINTK(err, cli, "cal_space: %d\n", ret);
775			goto out;
776		}
777
778		for (i = 0; i < req->nr_push; i++) {
779			struct nouveau_bo *nvbo = (void *)(unsigned long)
780				bo[push[i].bo_index].user_priv;
781
782			OUT_RING(chan, (nvbo->bo.offset + push[i].offset) | 2);
783			OUT_RING(chan, 0);
784		}
785	} else {
786		ret = RING_SPACE(chan, req->nr_push * (2 + NOUVEAU_DMA_SKIPS));
787		if (ret) {
788			NV_PRINTK(err, cli, "jmp_space: %d\n", ret);
789			goto out;
790		}
791
792		for (i = 0; i < req->nr_push; i++) {
793			struct nouveau_bo *nvbo = (void *)(unsigned long)
794				bo[push[i].bo_index].user_priv;
795			uint32_t cmd;
796
797			cmd = chan->push.vma.offset + ((chan->dma.cur + 2) << 2);
798			cmd |= 0x20000000;
799			if (unlikely(cmd != req->suffix0)) {
800				if (!nvbo->kmap.virtual) {
801					ret = ttm_bo_kmap(&nvbo->bo, 0,
802							  nvbo->bo.mem.
803							  num_pages,
804							  &nvbo->kmap);
805					if (ret) {
806						WIND_RING(chan);
807						goto out;
808					}
809					nvbo->validate_mapped = true;
810				}
811
812				nouveau_bo_wr32(nvbo, (push[i].offset +
813						push[i].length - 8) / 4, cmd);
814			}
815
816			OUT_RING(chan, 0x20000000 |
817				      (nvbo->bo.offset + push[i].offset));
818			OUT_RING(chan, 0);
819			for (j = 0; j < NOUVEAU_DMA_SKIPS; j++)
820				OUT_RING(chan, 0);
821		}
822	}
823
824	ret = nouveau_fence_new(chan, false, &fence);
825	if (ret) {
826		NV_PRINTK(err, cli, "error fencing pushbuf: %d\n", ret);
827		WIND_RING(chan);
828		goto out;
829	}
830
831out:
832	validate_fini(&op, fence, bo);
833	nouveau_fence_unref(&fence);
834
835out_prevalid:
836	u_free(bo);
837	u_free(push);
838
839out_next:
840	if (chan->dma.ib_max) {
841		req->suffix0 = 0x00000000;
842		req->suffix1 = 0x00000000;
843	} else
844	if (drm->device.info.chipset >= 0x25) {
845		req->suffix0 = 0x00020000;
846		req->suffix1 = 0x00000000;
847	} else {
848		req->suffix0 = 0x20000000 |
849			      (chan->push.vma.offset + ((chan->dma.cur + 2) << 2));
850		req->suffix1 = 0x00000000;
851	}
852
853	return nouveau_abi16_put(abi16, ret);
854}
855
856int
857nouveau_gem_ioctl_cpu_prep(struct drm_device *dev, void *data,
858			   struct drm_file *file_priv)
859{
860	struct drm_nouveau_gem_cpu_prep *req = data;
861	struct drm_gem_object *gem;
862	struct nouveau_bo *nvbo;
863	bool no_wait = !!(req->flags & NOUVEAU_GEM_CPU_PREP_NOWAIT);
864	bool write = !!(req->flags & NOUVEAU_GEM_CPU_PREP_WRITE);
865	int ret;
866
867	gem = drm_gem_object_lookup(dev, file_priv, req->handle);
868	if (!gem)
869		return -ENOENT;
870	nvbo = nouveau_gem_object(gem);
871
872	if (no_wait)
873		ret = reservation_object_test_signaled_rcu(nvbo->bo.resv, write) ? 0 : -EBUSY;
874	else {
875		long lret;
876
877		lret = reservation_object_wait_timeout_rcu(nvbo->bo.resv, write, true, 30 * HZ);
878		if (!lret)
879			ret = -EBUSY;
880		else if (lret > 0)
881			ret = 0;
882		else
883			ret = lret;
884	}
885	nouveau_bo_sync_for_cpu(nvbo);
886	drm_gem_object_unreference_unlocked(gem);
887
888	return ret;
889}
890
891int
892nouveau_gem_ioctl_cpu_fini(struct drm_device *dev, void *data,
893			   struct drm_file *file_priv)
894{
895	struct drm_nouveau_gem_cpu_fini *req = data;
896	struct drm_gem_object *gem;
897	struct nouveau_bo *nvbo;
898
899	gem = drm_gem_object_lookup(dev, file_priv, req->handle);
900	if (!gem)
901		return -ENOENT;
902	nvbo = nouveau_gem_object(gem);
903
904	nouveau_bo_sync_for_device(nvbo);
905	drm_gem_object_unreference_unlocked(gem);
906	return 0;
907}
908
909int
910nouveau_gem_ioctl_info(struct drm_device *dev, void *data,
911		       struct drm_file *file_priv)
912{
913	struct drm_nouveau_gem_info *req = data;
914	struct drm_gem_object *gem;
915	int ret;
916
917	gem = drm_gem_object_lookup(dev, file_priv, req->handle);
918	if (!gem)
919		return -ENOENT;
920
921	ret = nouveau_gem_info(file_priv, gem, req);
922	drm_gem_object_unreference_unlocked(gem);
923	return ret;
924}
925
926