drm/exynos: Fix potential NULL pointer dereference
[deliverable/linux.git] / drivers / gpu / drm / exynos / exynos_drm_fbdev.c
CommitLineData
1c248b7d
ID
1/* exynos_drm_fbdev.c
2 *
3 * Copyright (c) 2011 Samsung Electronics Co., Ltd.
4 * Authors:
5 * Inki Dae <inki.dae@samsung.com>
6 * Joonyoung Shim <jy0922.shim@samsung.com>
7 * Seung-Woo Kim <sw0312.kim@samsung.com>
8 *
9 * Permission is hereby granted, free of charge, to any person obtaining a
10 * copy of this software and associated documentation files (the "Software"),
11 * to deal in the Software without restriction, including without limitation
12 * the rights to use, copy, modify, merge, publish, distribute, sublicense,
13 * and/or sell copies of the Software, and to permit persons to whom the
14 * Software is furnished to do so, subject to the following conditions:
15 *
16 * The above copyright notice and this permission notice (including the next
17 * paragraph) shall be included in all copies or substantial portions of the
18 * Software.
19 *
20 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
21 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
22 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
23 * VA LINUX SYSTEMS AND/OR ITS SUPPLIERS BE LIABLE FOR ANY CLAIM, DAMAGES OR
24 * OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
25 * ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
26 * OTHER DEALINGS IN THE SOFTWARE.
27 */
28
29#include "drmP.h"
30#include "drm_crtc.h"
31#include "drm_fb_helper.h"
32#include "drm_crtc_helper.h"
33
34#include "exynos_drm_drv.h"
35#include "exynos_drm_fb.h"
2c871127 36#include "exynos_drm_gem.h"
1c248b7d
ID
37
38#define MAX_CONNECTOR 4
39#define PREFERRED_BPP 32
40
41#define to_exynos_fbdev(x) container_of(x, struct exynos_drm_fbdev,\
42 drm_fb_helper)
43
44struct exynos_drm_fbdev {
e1533c08
JS
45 struct drm_fb_helper drm_fb_helper;
46 struct exynos_drm_gem_obj *exynos_gem_obj;
1c248b7d
ID
47};
48
1c248b7d
ID
49static struct fb_ops exynos_drm_fb_ops = {
50 .owner = THIS_MODULE,
51 .fb_fillrect = cfb_fillrect,
52 .fb_copyarea = cfb_copyarea,
53 .fb_imageblit = cfb_imageblit,
54 .fb_check_var = drm_fb_helper_check_var,
83b316fd 55 .fb_set_par = drm_fb_helper_set_par,
1c248b7d
ID
56 .fb_blank = drm_fb_helper_blank,
57 .fb_pan_display = drm_fb_helper_pan_display,
58 .fb_setcmap = drm_fb_helper_setcmap,
59};
60
19c8b834 61static int exynos_drm_fbdev_update(struct drm_fb_helper *helper,
aa6b2b6c 62 struct drm_framebuffer *fb)
1c248b7d
ID
63{
64 struct fb_info *fbi = helper->fbdev;
65 struct drm_device *dev = helper->dev;
2c871127 66 struct exynos_drm_gem_buf *buffer;
aa6b2b6c 67 unsigned int size = fb->width * fb->height * (fb->bits_per_pixel >> 3);
19c8b834 68 unsigned long offset;
1c248b7d
ID
69
70 DRM_DEBUG_KMS("%s\n", __FILE__);
71
01f2c773 72 drm_fb_helper_fill_fix(fbi, fb->pitches[0], fb->depth);
aa6b2b6c 73 drm_fb_helper_fill_var(fbi, helper, fb->width, fb->height);
1c248b7d 74
229d3534
SWK
75 /* RGB formats use only one buffer */
76 buffer = exynos_drm_fb_buffer(fb, 0);
2c871127
ID
77 if (!buffer) {
78 DRM_LOG_KMS("buffer is null.\n");
19c8b834
ID
79 return -EFAULT;
80 }
1c248b7d 81
01ed8126
ID
82 /* buffer count to framebuffer always is 1 at booting time. */
83 exynos_drm_fb_set_buf_cnt(fb, 1);
84
19c8b834 85 offset = fbi->var.xoffset * (fb->bits_per_pixel >> 3);
01f2c773 86 offset += fbi->var.yoffset * fb->pitches[0];
1c248b7d 87
2c871127
ID
88 dev->mode_config.fb_base = (resource_size_t)buffer->dma_addr;
89 fbi->screen_base = buffer->kvaddr + offset;
90 fbi->fix.smem_start = (unsigned long)(buffer->dma_addr + offset);
1c248b7d 91 fbi->screen_size = size;
1c248b7d 92 fbi->fix.smem_len = size;
19c8b834
ID
93
94 return 0;
1c248b7d
ID
95}
96
97static int exynos_drm_fbdev_create(struct drm_fb_helper *helper,
98 struct drm_fb_helper_surface_size *sizes)
99{
100 struct exynos_drm_fbdev *exynos_fbdev = to_exynos_fbdev(helper);
e1533c08 101 struct exynos_drm_gem_obj *exynos_gem_obj;
1c248b7d
ID
102 struct drm_device *dev = helper->dev;
103 struct fb_info *fbi;
a794d57d 104 struct drm_mode_fb_cmd2 mode_cmd = { 0 };
1c248b7d 105 struct platform_device *pdev = dev->platformdev;
e1533c08 106 unsigned long size;
1c248b7d
ID
107 int ret;
108
109 DRM_DEBUG_KMS("%s\n", __FILE__);
110
111 DRM_DEBUG_KMS("surface width(%d), height(%d) and bpp(%d\n",
112 sizes->surface_width, sizes->surface_height,
113 sizes->surface_bpp);
114
115 mode_cmd.width = sizes->surface_width;
116 mode_cmd.height = sizes->surface_height;
a794d57d
JS
117 mode_cmd.pitches[0] = sizes->surface_width * (sizes->surface_bpp >> 3);
118 mode_cmd.pixel_format = drm_mode_legacy_fb_format(sizes->surface_bpp,
119 sizes->surface_depth);
1c248b7d
ID
120
121 mutex_lock(&dev->struct_mutex);
122
123 fbi = framebuffer_alloc(0, &pdev->dev);
124 if (!fbi) {
125 DRM_ERROR("failed to allocate fb info.\n");
126 ret = -ENOMEM;
127 goto out;
128 }
129
e1533c08 130 size = mode_cmd.pitches[0] * mode_cmd.height;
2b35892e
ID
131
132 /* 0 means to allocate physically continuous memory */
133 exynos_gem_obj = exynos_drm_gem_create(dev, 0, size);
e1533c08
JS
134 if (IS_ERR(exynos_gem_obj)) {
135 ret = PTR_ERR(exynos_gem_obj);
136 goto out;
137 }
138
139 exynos_fbdev->exynos_gem_obj = exynos_gem_obj;
140
141 helper->fb = exynos_drm_framebuffer_init(dev, &mode_cmd,
142 &exynos_gem_obj->base);
143 if (IS_ERR_OR_NULL(helper->fb)) {
1c248b7d 144 DRM_ERROR("failed to create drm framebuffer.\n");
e1533c08 145 ret = PTR_ERR(helper->fb);
1c248b7d
ID
146 goto out;
147 }
148
1c248b7d
ID
149 helper->fbdev = fbi;
150
151 fbi->par = helper;
152 fbi->flags = FBINFO_FLAG_DEFAULT;
153 fbi->fbops = &exynos_drm_fb_ops;
154
155 ret = fb_alloc_cmap(&fbi->cmap, 256, 0);
156 if (ret) {
157 DRM_ERROR("failed to allocate cmap.\n");
158 goto out;
159 }
160
aa6b2b6c 161 ret = exynos_drm_fbdev_update(helper, helper->fb);
e1533c08 162 if (ret < 0) {
19c8b834 163 fb_dealloc_cmap(&fbi->cmap);
e1533c08
JS
164 goto out;
165 }
1c248b7d
ID
166
167/*
168 * if failed, all resources allocated above would be released by
169 * drm_mode_config_cleanup() when drm_load() had been called prior
170 * to any specific driver such as fimd or hdmi driver.
171 */
172out:
173 mutex_unlock(&dev->struct_mutex);
174 return ret;
175}
176
1c248b7d
ID
177static int exynos_drm_fbdev_probe(struct drm_fb_helper *helper,
178 struct drm_fb_helper_surface_size *sizes)
179{
180 int ret = 0;
181
182 DRM_DEBUG_KMS("%s\n", __FILE__);
183
bc41eae2
ID
184 /*
185 * with !helper->fb, it means that this funcion is called first time
186 * and after that, the helper->fb would be used as clone mode.
187 */
1c248b7d
ID
188 if (!helper->fb) {
189 ret = exynos_drm_fbdev_create(helper, sizes);
190 if (ret < 0) {
191 DRM_ERROR("failed to create fbdev.\n");
192 return ret;
193 }
194
195 /*
196 * fb_helper expects a value more than 1 if succeed
197 * because register_framebuffer() should be called.
198 */
199 ret = 1;
1c248b7d
ID
200 }
201
202 return ret;
203}
204
205static struct drm_fb_helper_funcs exynos_drm_fb_helper_funcs = {
206 .fb_probe = exynos_drm_fbdev_probe,
207};
208
209int exynos_drm_fbdev_init(struct drm_device *dev)
210{
211 struct exynos_drm_fbdev *fbdev;
212 struct exynos_drm_private *private = dev->dev_private;
213 struct drm_fb_helper *helper;
214 unsigned int num_crtc;
215 int ret;
216
217 DRM_DEBUG_KMS("%s\n", __FILE__);
218
219 if (!dev->mode_config.num_crtc || !dev->mode_config.num_connector)
220 return 0;
221
222 fbdev = kzalloc(sizeof(*fbdev), GFP_KERNEL);
223 if (!fbdev) {
224 DRM_ERROR("failed to allocate drm fbdev.\n");
225 return -ENOMEM;
226 }
227
228 private->fb_helper = helper = &fbdev->drm_fb_helper;
229 helper->funcs = &exynos_drm_fb_helper_funcs;
230
231 num_crtc = dev->mode_config.num_crtc;
232
233 ret = drm_fb_helper_init(dev, helper, num_crtc, MAX_CONNECTOR);
234 if (ret < 0) {
235 DRM_ERROR("failed to initialize drm fb helper.\n");
236 goto err_init;
237 }
238
239 ret = drm_fb_helper_single_add_all_connectors(helper);
240 if (ret < 0) {
241 DRM_ERROR("failed to register drm_fb_helper_connector.\n");
242 goto err_setup;
243
244 }
245
246 ret = drm_fb_helper_initial_config(helper, PREFERRED_BPP);
247 if (ret < 0) {
248 DRM_ERROR("failed to set up hw configuration.\n");
249 goto err_setup;
250 }
251
252 return 0;
253
254err_setup:
255 drm_fb_helper_fini(helper);
256
257err_init:
258 private->fb_helper = NULL;
259 kfree(fbdev);
260
261 return ret;
262}
263
264static void exynos_drm_fbdev_destroy(struct drm_device *dev,
265 struct drm_fb_helper *fb_helper)
266{
267 struct drm_framebuffer *fb;
268
269 /* release drm framebuffer and real buffer */
270 if (fb_helper->fb && fb_helper->fb->funcs) {
271 fb = fb_helper->fb;
f7eff60e
RC
272 if (fb)
273 drm_framebuffer_remove(fb);
1c248b7d
ID
274 }
275
276 /* release linux framebuffer */
277 if (fb_helper->fbdev) {
278 struct fb_info *info;
279 int ret;
280
281 info = fb_helper->fbdev;
282 ret = unregister_framebuffer(info);
283 if (ret < 0)
284 DRM_DEBUG_KMS("failed unregister_framebuffer()\n");
285
286 if (info->cmap.len)
287 fb_dealloc_cmap(&info->cmap);
288
289 framebuffer_release(info);
290 }
291
292 drm_fb_helper_fini(fb_helper);
293}
294
295void exynos_drm_fbdev_fini(struct drm_device *dev)
296{
297 struct exynos_drm_private *private = dev->dev_private;
298 struct exynos_drm_fbdev *fbdev;
299
300 if (!private || !private->fb_helper)
301 return;
302
303 fbdev = to_exynos_fbdev(private->fb_helper);
304
e1533c08
JS
305 if (fbdev->exynos_gem_obj)
306 exynos_drm_gem_destroy(fbdev->exynos_gem_obj);
307
1c248b7d
ID
308 exynos_drm_fbdev_destroy(dev, private->fb_helper);
309 kfree(fbdev);
310 private->fb_helper = NULL;
311}
312
313void exynos_drm_fbdev_restore_mode(struct drm_device *dev)
314{
315 struct exynos_drm_private *private = dev->dev_private;
316
317 if (!private || !private->fb_helper)
318 return;
319
320 drm_fb_helper_restore_fbdev_mode(private->fb_helper);
321}
This page took 0.10544 seconds and 5 git commands to generate.