mirror of
https://github.com/AuxXxilium/linux_dsm_epyc7002.git
synced 2024-12-21 10:06:00 +07:00
85d898bf8f
The following commit [0] fixed a use-after-free, but left the subdrv open
in the error path.
[0] commit 6ca605f7c7
drm/exynos: Fix freeing issues in exynos_drm_drv.c
Signed-off-by: Daniel Kurtz <djkurtz@chromium.org>
Acked-by: Sachin Kamat <sachin.kamat@linaro.org>
Signed-off-by: Inki Dae <inki.dae@samsung.com>
535 lines
13 KiB
C
535 lines
13 KiB
C
/*
|
|
* Copyright (c) 2011 Samsung Electronics Co., Ltd.
|
|
* Authors:
|
|
* Inki Dae <inki.dae@samsung.com>
|
|
* Joonyoung Shim <jy0922.shim@samsung.com>
|
|
* Seung-Woo Kim <sw0312.kim@samsung.com>
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License as published by the
|
|
* Free Software Foundation; either version 2 of the License, or (at your
|
|
* option) any later version.
|
|
*/
|
|
|
|
#include <drm/drmP.h>
|
|
#include <drm/drm_crtc_helper.h>
|
|
|
|
#include <linux/anon_inodes.h>
|
|
|
|
#include <drm/exynos_drm.h>
|
|
|
|
#include "exynos_drm_drv.h"
|
|
#include "exynos_drm_crtc.h"
|
|
#include "exynos_drm_encoder.h"
|
|
#include "exynos_drm_fbdev.h"
|
|
#include "exynos_drm_fb.h"
|
|
#include "exynos_drm_gem.h"
|
|
#include "exynos_drm_plane.h"
|
|
#include "exynos_drm_vidi.h"
|
|
#include "exynos_drm_dmabuf.h"
|
|
#include "exynos_drm_g2d.h"
|
|
#include "exynos_drm_ipp.h"
|
|
#include "exynos_drm_iommu.h"
|
|
|
|
#define DRIVER_NAME "exynos"
|
|
#define DRIVER_DESC "Samsung SoC DRM"
|
|
#define DRIVER_DATE "20110530"
|
|
#define DRIVER_MAJOR 1
|
|
#define DRIVER_MINOR 0
|
|
|
|
#define VBLANK_OFF_DELAY 50000
|
|
|
|
/* platform device pointer for eynos drm device. */
|
|
static struct platform_device *exynos_drm_pdev;
|
|
|
|
static int exynos_drm_load(struct drm_device *dev, unsigned long flags)
|
|
{
|
|
struct exynos_drm_private *private;
|
|
int ret;
|
|
int nr;
|
|
|
|
private = kzalloc(sizeof(struct exynos_drm_private), GFP_KERNEL);
|
|
if (!private)
|
|
return -ENOMEM;
|
|
|
|
INIT_LIST_HEAD(&private->pageflip_event_list);
|
|
dev->dev_private = (void *)private;
|
|
|
|
/*
|
|
* create mapping to manage iommu table and set a pointer to iommu
|
|
* mapping structure to iommu_mapping of private data.
|
|
* also this iommu_mapping can be used to check if iommu is supported
|
|
* or not.
|
|
*/
|
|
ret = drm_create_iommu_mapping(dev);
|
|
if (ret < 0) {
|
|
DRM_ERROR("failed to create iommu mapping.\n");
|
|
goto err_crtc;
|
|
}
|
|
|
|
drm_mode_config_init(dev);
|
|
|
|
/* init kms poll for handling hpd */
|
|
drm_kms_helper_poll_init(dev);
|
|
|
|
exynos_drm_mode_config_init(dev);
|
|
|
|
/*
|
|
* EXYNOS4 is enough to have two CRTCs and each crtc would be used
|
|
* without dependency of hardware.
|
|
*/
|
|
for (nr = 0; nr < MAX_CRTC; nr++) {
|
|
ret = exynos_drm_crtc_create(dev, nr);
|
|
if (ret)
|
|
goto err_release_iommu_mapping;
|
|
}
|
|
|
|
for (nr = 0; nr < MAX_PLANE; nr++) {
|
|
struct drm_plane *plane;
|
|
unsigned int possible_crtcs = (1 << MAX_CRTC) - 1;
|
|
|
|
plane = exynos_plane_init(dev, possible_crtcs, false);
|
|
if (!plane)
|
|
goto err_release_iommu_mapping;
|
|
}
|
|
|
|
ret = drm_vblank_init(dev, MAX_CRTC);
|
|
if (ret)
|
|
goto err_release_iommu_mapping;
|
|
|
|
/*
|
|
* probe sub drivers such as display controller and hdmi driver,
|
|
* that were registered at probe() of platform driver
|
|
* to the sub driver and create encoder and connector for them.
|
|
*/
|
|
ret = exynos_drm_device_register(dev);
|
|
if (ret)
|
|
goto err_vblank;
|
|
|
|
/* setup possible_clones. */
|
|
exynos_drm_encoder_setup(dev);
|
|
|
|
/*
|
|
* create and configure fb helper and also exynos specific
|
|
* fbdev object.
|
|
*/
|
|
ret = exynos_drm_fbdev_init(dev);
|
|
if (ret) {
|
|
DRM_ERROR("failed to initialize drm fbdev\n");
|
|
goto err_drm_device;
|
|
}
|
|
|
|
drm_vblank_offdelay = VBLANK_OFF_DELAY;
|
|
|
|
platform_set_drvdata(dev->platformdev, dev);
|
|
|
|
return 0;
|
|
|
|
err_drm_device:
|
|
exynos_drm_device_unregister(dev);
|
|
err_vblank:
|
|
drm_vblank_cleanup(dev);
|
|
err_release_iommu_mapping:
|
|
drm_release_iommu_mapping(dev);
|
|
err_crtc:
|
|
drm_mode_config_cleanup(dev);
|
|
kfree(private);
|
|
|
|
return ret;
|
|
}
|
|
|
|
static int exynos_drm_unload(struct drm_device *dev)
|
|
{
|
|
exynos_drm_fbdev_fini(dev);
|
|
exynos_drm_device_unregister(dev);
|
|
drm_vblank_cleanup(dev);
|
|
drm_kms_helper_poll_fini(dev);
|
|
drm_mode_config_cleanup(dev);
|
|
|
|
drm_release_iommu_mapping(dev);
|
|
kfree(dev->dev_private);
|
|
|
|
dev->dev_private = NULL;
|
|
|
|
return 0;
|
|
}
|
|
|
|
static const struct file_operations exynos_drm_gem_fops = {
|
|
.mmap = exynos_drm_gem_mmap_buffer,
|
|
};
|
|
|
|
static int exynos_drm_open(struct drm_device *dev, struct drm_file *file)
|
|
{
|
|
struct drm_exynos_file_private *file_priv;
|
|
struct file *anon_filp;
|
|
int ret;
|
|
|
|
file_priv = kzalloc(sizeof(*file_priv), GFP_KERNEL);
|
|
if (!file_priv)
|
|
return -ENOMEM;
|
|
|
|
file->driver_priv = file_priv;
|
|
|
|
ret = exynos_drm_subdrv_open(dev, file);
|
|
if (ret)
|
|
goto err_file_priv_free;
|
|
|
|
anon_filp = anon_inode_getfile("exynos_gem", &exynos_drm_gem_fops,
|
|
NULL, 0);
|
|
if (IS_ERR(anon_filp)) {
|
|
ret = PTR_ERR(anon_filp);
|
|
goto err_subdrv_close;
|
|
}
|
|
|
|
anon_filp->f_mode = FMODE_READ | FMODE_WRITE;
|
|
file_priv->anon_filp = anon_filp;
|
|
|
|
return ret;
|
|
|
|
err_subdrv_close:
|
|
exynos_drm_subdrv_close(dev, file);
|
|
|
|
err_file_priv_free:
|
|
kfree(file_priv);
|
|
file->driver_priv = NULL;
|
|
return ret;
|
|
}
|
|
|
|
static void exynos_drm_preclose(struct drm_device *dev,
|
|
struct drm_file *file)
|
|
{
|
|
exynos_drm_subdrv_close(dev, file);
|
|
}
|
|
|
|
static void exynos_drm_postclose(struct drm_device *dev, struct drm_file *file)
|
|
{
|
|
struct exynos_drm_private *private = dev->dev_private;
|
|
struct drm_exynos_file_private *file_priv;
|
|
struct drm_pending_vblank_event *v, *vt;
|
|
struct drm_pending_event *e, *et;
|
|
unsigned long flags;
|
|
|
|
if (!file->driver_priv)
|
|
return;
|
|
|
|
/* Release all events not unhandled by page flip handler. */
|
|
spin_lock_irqsave(&dev->event_lock, flags);
|
|
list_for_each_entry_safe(v, vt, &private->pageflip_event_list,
|
|
base.link) {
|
|
if (v->base.file_priv == file) {
|
|
list_del(&v->base.link);
|
|
drm_vblank_put(dev, v->pipe);
|
|
v->base.destroy(&v->base);
|
|
}
|
|
}
|
|
|
|
/* Release all events handled by page flip handler but not freed. */
|
|
list_for_each_entry_safe(e, et, &file->event_list, link) {
|
|
list_del(&e->link);
|
|
e->destroy(e);
|
|
}
|
|
spin_unlock_irqrestore(&dev->event_lock, flags);
|
|
|
|
file_priv = file->driver_priv;
|
|
if (file_priv->anon_filp)
|
|
fput(file_priv->anon_filp);
|
|
|
|
kfree(file->driver_priv);
|
|
file->driver_priv = NULL;
|
|
}
|
|
|
|
static void exynos_drm_lastclose(struct drm_device *dev)
|
|
{
|
|
exynos_drm_fbdev_restore_mode(dev);
|
|
}
|
|
|
|
static const struct vm_operations_struct exynos_drm_gem_vm_ops = {
|
|
.fault = exynos_drm_gem_fault,
|
|
.open = drm_gem_vm_open,
|
|
.close = drm_gem_vm_close,
|
|
};
|
|
|
|
static const struct drm_ioctl_desc exynos_ioctls[] = {
|
|
DRM_IOCTL_DEF_DRV(EXYNOS_GEM_CREATE, exynos_drm_gem_create_ioctl,
|
|
DRM_UNLOCKED | DRM_AUTH),
|
|
DRM_IOCTL_DEF_DRV(EXYNOS_GEM_MAP_OFFSET,
|
|
exynos_drm_gem_map_offset_ioctl, DRM_UNLOCKED |
|
|
DRM_AUTH),
|
|
DRM_IOCTL_DEF_DRV(EXYNOS_GEM_MMAP,
|
|
exynos_drm_gem_mmap_ioctl, DRM_UNLOCKED | DRM_AUTH),
|
|
DRM_IOCTL_DEF_DRV(EXYNOS_GEM_GET,
|
|
exynos_drm_gem_get_ioctl, DRM_UNLOCKED),
|
|
DRM_IOCTL_DEF_DRV(EXYNOS_VIDI_CONNECTION,
|
|
vidi_connection_ioctl, DRM_UNLOCKED | DRM_AUTH),
|
|
DRM_IOCTL_DEF_DRV(EXYNOS_G2D_GET_VER,
|
|
exynos_g2d_get_ver_ioctl, DRM_UNLOCKED | DRM_AUTH),
|
|
DRM_IOCTL_DEF_DRV(EXYNOS_G2D_SET_CMDLIST,
|
|
exynos_g2d_set_cmdlist_ioctl, DRM_UNLOCKED | DRM_AUTH),
|
|
DRM_IOCTL_DEF_DRV(EXYNOS_G2D_EXEC,
|
|
exynos_g2d_exec_ioctl, DRM_UNLOCKED | DRM_AUTH),
|
|
DRM_IOCTL_DEF_DRV(EXYNOS_IPP_GET_PROPERTY,
|
|
exynos_drm_ipp_get_property, DRM_UNLOCKED | DRM_AUTH),
|
|
DRM_IOCTL_DEF_DRV(EXYNOS_IPP_SET_PROPERTY,
|
|
exynos_drm_ipp_set_property, DRM_UNLOCKED | DRM_AUTH),
|
|
DRM_IOCTL_DEF_DRV(EXYNOS_IPP_QUEUE_BUF,
|
|
exynos_drm_ipp_queue_buf, DRM_UNLOCKED | DRM_AUTH),
|
|
DRM_IOCTL_DEF_DRV(EXYNOS_IPP_CMD_CTRL,
|
|
exynos_drm_ipp_cmd_ctrl, DRM_UNLOCKED | DRM_AUTH),
|
|
};
|
|
|
|
static const struct file_operations exynos_drm_driver_fops = {
|
|
.owner = THIS_MODULE,
|
|
.open = drm_open,
|
|
.mmap = exynos_drm_gem_mmap,
|
|
.poll = drm_poll,
|
|
.read = drm_read,
|
|
.unlocked_ioctl = drm_ioctl,
|
|
#ifdef CONFIG_COMPAT
|
|
.compat_ioctl = drm_compat_ioctl,
|
|
#endif
|
|
.release = drm_release,
|
|
};
|
|
|
|
static struct drm_driver exynos_drm_driver = {
|
|
.driver_features = DRIVER_HAVE_IRQ | DRIVER_MODESET |
|
|
DRIVER_GEM | DRIVER_PRIME,
|
|
.load = exynos_drm_load,
|
|
.unload = exynos_drm_unload,
|
|
.open = exynos_drm_open,
|
|
.preclose = exynos_drm_preclose,
|
|
.lastclose = exynos_drm_lastclose,
|
|
.postclose = exynos_drm_postclose,
|
|
.get_vblank_counter = drm_vblank_count,
|
|
.enable_vblank = exynos_drm_crtc_enable_vblank,
|
|
.disable_vblank = exynos_drm_crtc_disable_vblank,
|
|
.gem_free_object = exynos_drm_gem_free_object,
|
|
.gem_vm_ops = &exynos_drm_gem_vm_ops,
|
|
.dumb_create = exynos_drm_gem_dumb_create,
|
|
.dumb_map_offset = exynos_drm_gem_dumb_map_offset,
|
|
.dumb_destroy = drm_gem_dumb_destroy,
|
|
.prime_handle_to_fd = drm_gem_prime_handle_to_fd,
|
|
.prime_fd_to_handle = drm_gem_prime_fd_to_handle,
|
|
.gem_prime_export = exynos_dmabuf_prime_export,
|
|
.gem_prime_import = exynos_dmabuf_prime_import,
|
|
.ioctls = exynos_ioctls,
|
|
.num_ioctls = ARRAY_SIZE(exynos_ioctls),
|
|
.fops = &exynos_drm_driver_fops,
|
|
.name = DRIVER_NAME,
|
|
.desc = DRIVER_DESC,
|
|
.date = DRIVER_DATE,
|
|
.major = DRIVER_MAJOR,
|
|
.minor = DRIVER_MINOR,
|
|
};
|
|
|
|
static int exynos_drm_platform_probe(struct platform_device *pdev)
|
|
{
|
|
int ret;
|
|
|
|
ret = dma_set_coherent_mask(&pdev->dev, DMA_BIT_MASK(32));
|
|
if (ret)
|
|
return ret;
|
|
|
|
return drm_platform_init(&exynos_drm_driver, pdev);
|
|
}
|
|
|
|
static int exynos_drm_platform_remove(struct platform_device *pdev)
|
|
{
|
|
drm_put_dev(platform_get_drvdata(pdev));
|
|
|
|
return 0;
|
|
}
|
|
|
|
static struct platform_driver exynos_drm_platform_driver = {
|
|
.probe = exynos_drm_platform_probe,
|
|
.remove = exynos_drm_platform_remove,
|
|
.driver = {
|
|
.owner = THIS_MODULE,
|
|
.name = "exynos-drm",
|
|
},
|
|
};
|
|
|
|
static int __init exynos_drm_init(void)
|
|
{
|
|
int ret;
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_FIMD
|
|
ret = platform_driver_register(&fimd_driver);
|
|
if (ret < 0)
|
|
goto out_fimd;
|
|
#endif
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_HDMI
|
|
ret = platform_driver_register(&hdmi_driver);
|
|
if (ret < 0)
|
|
goto out_hdmi;
|
|
ret = platform_driver_register(&mixer_driver);
|
|
if (ret < 0)
|
|
goto out_mixer;
|
|
ret = platform_driver_register(&exynos_drm_common_hdmi_driver);
|
|
if (ret < 0)
|
|
goto out_common_hdmi;
|
|
|
|
ret = exynos_platform_device_hdmi_register();
|
|
if (ret < 0)
|
|
goto out_common_hdmi_dev;
|
|
#endif
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_VIDI
|
|
ret = platform_driver_register(&vidi_driver);
|
|
if (ret < 0)
|
|
goto out_vidi;
|
|
#endif
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_G2D
|
|
ret = platform_driver_register(&g2d_driver);
|
|
if (ret < 0)
|
|
goto out_g2d;
|
|
#endif
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_FIMC
|
|
ret = platform_driver_register(&fimc_driver);
|
|
if (ret < 0)
|
|
goto out_fimc;
|
|
#endif
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_ROTATOR
|
|
ret = platform_driver_register(&rotator_driver);
|
|
if (ret < 0)
|
|
goto out_rotator;
|
|
#endif
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_GSC
|
|
ret = platform_driver_register(&gsc_driver);
|
|
if (ret < 0)
|
|
goto out_gsc;
|
|
#endif
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_IPP
|
|
ret = platform_driver_register(&ipp_driver);
|
|
if (ret < 0)
|
|
goto out_ipp;
|
|
|
|
ret = exynos_platform_device_ipp_register();
|
|
if (ret < 0)
|
|
goto out_ipp_dev;
|
|
#endif
|
|
|
|
ret = platform_driver_register(&exynos_drm_platform_driver);
|
|
if (ret < 0)
|
|
goto out_drm;
|
|
|
|
exynos_drm_pdev = platform_device_register_simple("exynos-drm", -1,
|
|
NULL, 0);
|
|
if (IS_ERR(exynos_drm_pdev)) {
|
|
ret = PTR_ERR(exynos_drm_pdev);
|
|
goto out;
|
|
}
|
|
|
|
return 0;
|
|
|
|
out:
|
|
platform_driver_unregister(&exynos_drm_platform_driver);
|
|
|
|
out_drm:
|
|
#ifdef CONFIG_DRM_EXYNOS_IPP
|
|
exynos_platform_device_ipp_unregister();
|
|
out_ipp_dev:
|
|
platform_driver_unregister(&ipp_driver);
|
|
out_ipp:
|
|
#endif
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_GSC
|
|
platform_driver_unregister(&gsc_driver);
|
|
out_gsc:
|
|
#endif
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_ROTATOR
|
|
platform_driver_unregister(&rotator_driver);
|
|
out_rotator:
|
|
#endif
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_FIMC
|
|
platform_driver_unregister(&fimc_driver);
|
|
out_fimc:
|
|
#endif
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_G2D
|
|
platform_driver_unregister(&g2d_driver);
|
|
out_g2d:
|
|
#endif
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_VIDI
|
|
platform_driver_unregister(&vidi_driver);
|
|
out_vidi:
|
|
#endif
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_HDMI
|
|
exynos_platform_device_hdmi_unregister();
|
|
out_common_hdmi_dev:
|
|
platform_driver_unregister(&exynos_drm_common_hdmi_driver);
|
|
out_common_hdmi:
|
|
platform_driver_unregister(&mixer_driver);
|
|
out_mixer:
|
|
platform_driver_unregister(&hdmi_driver);
|
|
out_hdmi:
|
|
#endif
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_FIMD
|
|
platform_driver_unregister(&fimd_driver);
|
|
out_fimd:
|
|
#endif
|
|
return ret;
|
|
}
|
|
|
|
static void __exit exynos_drm_exit(void)
|
|
{
|
|
platform_device_unregister(exynos_drm_pdev);
|
|
|
|
platform_driver_unregister(&exynos_drm_platform_driver);
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_IPP
|
|
exynos_platform_device_ipp_unregister();
|
|
platform_driver_unregister(&ipp_driver);
|
|
#endif
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_GSC
|
|
platform_driver_unregister(&gsc_driver);
|
|
#endif
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_ROTATOR
|
|
platform_driver_unregister(&rotator_driver);
|
|
#endif
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_FIMC
|
|
platform_driver_unregister(&fimc_driver);
|
|
#endif
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_G2D
|
|
platform_driver_unregister(&g2d_driver);
|
|
#endif
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_HDMI
|
|
exynos_platform_device_hdmi_unregister();
|
|
platform_driver_unregister(&exynos_drm_common_hdmi_driver);
|
|
platform_driver_unregister(&mixer_driver);
|
|
platform_driver_unregister(&hdmi_driver);
|
|
#endif
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_VIDI
|
|
platform_driver_unregister(&vidi_driver);
|
|
#endif
|
|
|
|
#ifdef CONFIG_DRM_EXYNOS_FIMD
|
|
platform_driver_unregister(&fimd_driver);
|
|
#endif
|
|
}
|
|
|
|
module_init(exynos_drm_init);
|
|
module_exit(exynos_drm_exit);
|
|
|
|
MODULE_AUTHOR("Inki Dae <inki.dae@samsung.com>");
|
|
MODULE_AUTHOR("Joonyoung Shim <jy0922.shim@samsung.com>");
|
|
MODULE_AUTHOR("Seung-Woo Kim <sw0312.kim@samsung.com>");
|
|
MODULE_DESCRIPTION("Samsung SoC DRM Driver");
|
|
MODULE_LICENSE("GPL");
|