/usr/src/sys/dev/pci/drm/drm

Bug Summary

File:	dev/pci/drm/drm_crtc.c
Warning:	line 746, column 8 Branch condition evaluates to a garbage value

Annotated Source Code

Press '?' to see keyboard shortcuts

Show analyzer invocation

clang -cc1 -cc1 -triple amd64-unknown-openbsd7.0 -analyze -disable-free -disable-llvm-verifier -discard-value-names -main-file-name drm_crtc.c -analyzer-store=region -analyzer-opt-analyze-nested-blocks -analyzer-checker=core -analyzer-checker=apiModeling -analyzer-checker=unix -analyzer-checker=deadcode -analyzer-checker=security.insecureAPI.UncheckedReturn -analyzer-checker=security.insecureAPI.getpw -analyzer-checker=security.insecureAPI.gets -analyzer-checker=security.insecureAPI.mktemp -analyzer-checker=security.insecureAPI.mkstemp -analyzer-checker=security.insecureAPI.vfork -analyzer-checker=nullability.NullPassedToNonnull -analyzer-checker=nullability.NullReturnedFromNonnull -analyzer-output plist -w -setup-static-analyzer -mrelocation-model static -mframe-pointer=all -relaxed-aliasing -fno-rounding-math -mconstructor-aliases -ffreestanding -mcmodel=kernel -target-cpu x86-64 -target-feature +retpoline-indirect-calls -target-feature +retpoline-indirect-branches -target-feature -sse2 -target-feature -sse -target-feature -3dnow -target-feature -mmx -target-feature +save-args -disable-red-zone -no-implicit-float -tune-cpu generic -debugger-tuning=gdb -fcoverage-compilation-dir=/usr/src/sys/arch/amd64/compile/GENERIC.MP/obj -nostdsysteminc -nobuiltininc -resource-dir /usr/local/lib/clang/13.0.0 -I /usr/src/sys -I /usr/src/sys/arch/amd64/compile/GENERIC.MP/obj -I /usr/src/sys/arch -I /usr/src/sys/dev/pci/drm/include -I /usr/src/sys/dev/pci/drm/include/uapi -I /usr/src/sys/dev/pci/drm/amd/include/asic_reg -I /usr/src/sys/dev/pci/drm/amd/include -I /usr/src/sys/dev/pci/drm/amd/amdgpu -I /usr/src/sys/dev/pci/drm/amd/display -I /usr/src/sys/dev/pci/drm/amd/display/include -I /usr/src/sys/dev/pci/drm/amd/display/dc -I /usr/src/sys/dev/pci/drm/amd/display/amdgpu_dm -I /usr/src/sys/dev/pci/drm/amd/pm/inc -I /usr/src/sys/dev/pci/drm/amd/pm/swsmu -I /usr/src/sys/dev/pci/drm/amd/pm/swsmu/smu11 -I /usr/src/sys/dev/pci/drm/amd/pm/swsmu/smu12 -I /usr/src/sys/dev/pci/drm/amd/pm/powerplay -I /usr/src/sys/dev/pci/drm/amd/pm/powerplay/hwmgr -I /usr/src/sys/dev/pci/drm/amd/pm/powerplay/smumgr -I /usr/src/sys/dev/pci/drm/amd/display/dc/inc -I /usr/src/sys/dev/pci/drm/amd/display/dc/inc/hw -I /usr/src/sys/dev/pci/drm/amd/display/dc/clk_mgr -I /usr/src/sys/dev/pci/drm/amd/display/modules/inc -I /usr/src/sys/dev/pci/drm/amd/display/modules/hdcp -I /usr/src/sys/dev/pci/drm/amd/display/dmub/inc -I /usr/src/sys/dev/pci/drm/i915 -D DDB -D DIAGNOSTIC -D KTRACE -D ACCOUNTING -D KMEMSTATS -D PTRACE -D POOL_DEBUG -D CRYPTO -D SYSVMSG -D SYSVSEM -D SYSVSHM -D UVM_SWAP_ENCRYPT -D FFS -D FFS2 -D FFS_SOFTUPDATES -D UFS_DIRHASH -D QUOTA -D EXT2FS -D MFS -D NFSCLIENT -D NFSSERVER -D CD9660 -D UDF -D MSDOSFS -D FIFO -D FUSE -D SOCKET_SPLICE -D TCP_ECN -D TCP_SIGNATURE -D INET6 -D IPSEC -D PPP_BSDCOMP -D PPP_DEFLATE -D PIPEX -D MROUTING -D MPLS -D BOOT_CONFIG -D USER_PCICONF -D APERTURE -D MTRR -D NTFS -D HIBERNATE -D PCIVERBOSE -D USBVERBOSE -D WSDISPLAY_COMPAT_USL -D WSDISPLAY_COMPAT_RAWKBD -D WSDISPLAY_DEFAULTSCREENS=6 -D X86EMU -D ONEWIREVERBOSE -D MULTIPROCESSOR -D MAXUSERS=80 -D _KERNEL -D CONFIG_DRM_AMD_DC_DCN3_0 -O2 -Wno-pointer-sign -Wno-address-of-packed-member -Wno-constant-conversion -Wno-unused-but-set-variable -Wno-gnu-folding-constant -fdebug-compilation-dir=/usr/src/sys/arch/amd64/compile/GENERIC.MP/obj -ferror-limit 19 -fwrapv -D_RET_PROTECTOR -ret-protector -fgnuc-version=4.2.1 -vectorize-loops -vectorize-slp -fno-builtin-malloc -fno-builtin-calloc -fno-builtin-realloc -fno-builtin-valloc -fno-builtin-free -fno-builtin-strdup -fno-builtin-strndup -analyzer-output=html -faddrsig -o /usr/obj/sys/arch/amd64/compile/GENERIC.MP/scan-build/2022-01-12-131800-47421-1 -x c /usr/src/sys/dev/pci/drm/drm_crtc.c

/usr/src/sys/dev/pci/drm/drm_crtc.c

→

1/*
2 * Copyright (c) 2006-2008 Intel Corporation
3 * Copyright (c) 2007 Dave Airlie <airlied@linux.ie>
4 * Copyright (c) 2008 Red Hat Inc.
5 *
6 * DRM core CRTC related functions
7 *
8 * Permission to use, copy, modify, distribute, and sell this software and its
9 * documentation for any purpose is hereby granted without fee, provided that
10 * the above copyright notice appear in all copies and that both that copyright
11 * notice and this permission notice appear in supporting documentation, and
12 * that the name of the copyright holders not be used in advertising or
13 * publicity pertaining to distribution of the software without specific,
14 * written prior permission.  The copyright holders make no representations
15 * about the suitability of this software for any purpose.  It is provided "as
16 * is" without express or implied warranty.
17 *
18 * THE COPYRIGHT HOLDERS DISCLAIM ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
19 * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
20 * EVENT SHALL THE COPYRIGHT HOLDERS BE LIABLE FOR ANY SPECIAL, INDIRECT OR
21 * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
22 * DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
23 * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
24 * OF THIS SOFTWARE.
25 *
26 * Authors:
27 *      Keith Packard
28 *	Eric Anholt <eric@anholt.net>
29 *      Dave Airlie <airlied@linux.ie>
30 *      Jesse Barnes <jesse.barnes@intel.com>
31 */
32#include <linux/ctype.h>
33#include <linux/list.h>
34#include <linux/slab.h>
35#include <linux/export.h>
36#include <linux/dma-fence.h>
37#include <linux/uaccess.h>
38#include <drm/drm_crtc.h>
39#include <drm/drm_edid.h>
40#include <drm/drm_fourcc.h>
41#include <drm/drm_modeset_lock.h>
42#include <drm/drm_atomic.h>
43#include <drm/drm_auth.h>
44#include <drm/drm_debugfs_crc.h>
45#include <drm/drm_drv.h>
46#include <drm/drm_print.h>
47#include <drm/drm_file.h>
48 
49#include "drm_crtc_internal.h"
50#include "drm_internal.h"
51 
52/**
53 * DOC: overview
54 *
55 * A CRTC represents the overall display pipeline. It receives pixel data from
56 * &drm_plane and blends them together. The &drm_display_mode is also attached
57 * to the CRTC, specifying display timings. On the output side the data is fed
58 * to one or more &drm_encoder, which are then each connected to one
59 * &drm_connector.
60 *
61 * To create a CRTC, a KMS drivers allocates and zeroes an instances of
62 * &struct drm_crtc (possibly as part of a larger structure) and registers it
63 * with a call to drm_crtc_init_with_planes().
64 *
65 * The CRTC is also the entry point for legacy modeset operations, see
66 * &drm_crtc_funcs.set_config, legacy plane operations, see
67 * &drm_crtc_funcs.page_flip and &drm_crtc_funcs.cursor_set2, and other legacy
68 * operations like &drm_crtc_funcs.gamma_set. For atomic drivers all these
69 * features are controlled through &drm_property and
70 * &drm_mode_config_funcs.atomic_check and &drm_mode_config_funcs.atomic_check.
71 */
72 
73/**
74 * drm_crtc_from_index - find the registered CRTC at an index
75 * @dev: DRM device
76 * @idx: index of registered CRTC to find for
77 *
78 * Given a CRTC index, return the registered CRTC from DRM device's
79 * list of CRTCs with matching index. This is the inverse of drm_crtc_index().
80 * It's useful in the vblank callbacks (like &drm_driver.enable_vblank or
81 * &drm_driver.disable_vblank), since that still deals with indices instead
82 * of pointers to &struct drm_crtc."
83 */
84struct drm_crtc *drm_crtc_from_index(struct drm_device *dev, int idx)
85{
86	struct drm_crtc *crtc;
87 
88	drm_for_each_crtc(crtc, dev)for (crtc = ({ const __typeof( ((__typeof(*crtc) *)0)->head
 ) *__mptr = ((&(dev)->mode_config.crtc_list)->next
); (__typeof(*crtc) *)( (char *)__mptr - __builtin_offsetof(__typeof
(*crtc), head) );}); &crtc->head != (&(dev)->mode_config
.crtc_list); crtc = ({ const __typeof( ((__typeof(*crtc) *)0)
->head ) *__mptr = (crtc->head.next); (__typeof(*crtc) *
)( (char *)__mptr - __builtin_offsetof(__typeof(*crtc), head)
 );}))
89		if (idx == crtc->index)
90			return crtc;
91 
92	return NULL((void *)0);
93}
94EXPORT_SYMBOL(drm_crtc_from_index);
95 
96int drm_crtc_force_disable(struct drm_crtc *crtc)
97{
98	struct drm_mode_set set = {
99		.crtc = crtc,
100	};
101 
102	WARN_ON(drm_drv_uses_atomic_modeset(crtc->dev))({ int __ret = !!(drm_drv_uses_atomic_modeset(crtc->dev));
 if (__ret) printf("WARNING %s failed at %s:%d\n", "drm_drv_uses_atomic_modeset(crtc->dev)"
, "/usr/src/sys/dev/pci/drm/drm_crtc.c", 102); __builtin_expect
(!!(__ret), 0); });
103 
104	return drm_mode_set_config_internal(&set);
105}
106 
107static unsigned int drm_num_crtcs(struct drm_device *dev)
108{
109	unsigned int num = 0;
110	struct drm_crtc *tmp;
111 
112	drm_for_each_crtc(tmp, dev)for (tmp = ({ const __typeof( ((__typeof(*tmp) *)0)->head )
 *__mptr = ((&(dev)->mode_config.crtc_list)->next);
 (__typeof(*tmp) *)( (char *)__mptr - __builtin_offsetof(__typeof
(*tmp), head) );}); &tmp->head != (&(dev)->mode_config
.crtc_list); tmp = ({ const __typeof( ((__typeof(*tmp) *)0)->
head ) *__mptr = (tmp->head.next); (__typeof(*tmp) *)( (char
 *)__mptr - __builtin_offsetof(__typeof(*tmp), head) );})) {
113		num++;
114	}
115 
116	return num;
117}
118 
119int drm_crtc_register_all(struct drm_device *dev)
120{
121	struct drm_crtc *crtc;
122	int ret = 0;
123 
124	drm_for_each_crtc(crtc, dev)for (crtc = ({ const __typeof( ((__typeof(*crtc) *)0)->head
 ) *__mptr = ((&(dev)->mode_config.crtc_list)->next
); (__typeof(*crtc) *)( (char *)__mptr - __builtin_offsetof(__typeof
(*crtc), head) );}); &crtc->head != (&(dev)->mode_config
.crtc_list); crtc = ({ const __typeof( ((__typeof(*crtc) *)0)
->head ) *__mptr = (crtc->head.next); (__typeof(*crtc) *
)( (char *)__mptr - __builtin_offsetof(__typeof(*crtc), head)
 );})) {
125		drm_debugfs_crtc_add(crtc);
126 
127		if (crtc->funcs->late_register)
128			ret = crtc->funcs->late_register(crtc);
129		if (ret)
130			return ret;
131	}
132 
133	return 0;
134}
135 
136void drm_crtc_unregister_all(struct drm_device *dev)
137{
138	struct drm_crtc *crtc;
139 
140	drm_for_each_crtc(crtc, dev)for (crtc = ({ const __typeof( ((__typeof(*crtc) *)0)->head
 ) *__mptr = ((&(dev)->mode_config.crtc_list)->next
); (__typeof(*crtc) *)( (char *)__mptr - __builtin_offsetof(__typeof
(*crtc), head) );}); &crtc->head != (&(dev)->mode_config
.crtc_list); crtc = ({ const __typeof( ((__typeof(*crtc) *)0)
->head ) *__mptr = (crtc->head.next); (__typeof(*crtc) *
)( (char *)__mptr - __builtin_offsetof(__typeof(*crtc), head)
 );})) {
141		if (crtc->funcs->early_unregister)
142			crtc->funcs->early_unregister(crtc);
143		drm_debugfs_crtc_remove(crtc);
144	}
145}
146 
147static int drm_crtc_crc_init(struct drm_crtc *crtc)
148{
149#ifdef CONFIG_DEBUG_FS
150	mtx_init(&crtc->crc.lock, IPL_NONE)do { (void)(((void *)0)); (void)(0); __mtx_init((&crtc->
crc.lock), ((((0x0)) > 0x0 && ((0x0)) < 0x9) ? 0x9
 : ((0x0)))); } while (0);
151	init_waitqueue_head(&crtc->crc.wq);
152	crtc->crc.source = kstrdup("auto", GFP_KERNEL(0x0001 | 0x0004));
153	if (!crtc->crc.source)
154		return -ENOMEM12;
155#endif
156	return 0;
157}
158 
159static void drm_crtc_crc_fini(struct drm_crtc *crtc)
160{
161#ifdef CONFIG_DEBUG_FS
162	kfree(crtc->crc.source);
163#endif
164}
165 
166static const struct dma_fence_ops drm_crtc_fence_ops;
167 
168static struct drm_crtc *fence_to_crtc(struct dma_fence *fence)
169{
170	BUG_ON(fence->ops != &drm_crtc_fence_ops)((!(fence->ops != &drm_crtc_fence_ops)) ? (void)0 : __assert
("diagnostic ", "/usr/src/sys/dev/pci/drm/drm_crtc.c", 170, "!(fence->ops != &drm_crtc_fence_ops)"
));
171	return container_of(fence->lock, struct drm_crtc, fence_lock)({ const __typeof( ((struct drm_crtc *)0)->fence_lock ) *__mptr
 = (fence->lock); (struct drm_crtc *)( (char *)__mptr - __builtin_offsetof
(struct drm_crtc, fence_lock) );});
172}
173 
174static const char *drm_crtc_fence_get_driver_name(struct dma_fence *fence)
175{
176	struct drm_crtc *crtc = fence_to_crtc(fence);
177 
178	return crtc->dev->driver->name;
179}
180 
181static const char *drm_crtc_fence_get_timeline_name(struct dma_fence *fence)
182{
183	struct drm_crtc *crtc = fence_to_crtc(fence);
184 
185	return crtc->timeline_name;
186}
187 
188static const struct dma_fence_ops drm_crtc_fence_ops = {
189	.get_driver_name = drm_crtc_fence_get_driver_name,
190	.get_timeline_name = drm_crtc_fence_get_timeline_name,
191};
192 
193struct dma_fence *drm_crtc_create_fence(struct drm_crtc *crtc)
194{
195	struct dma_fence *fence;
196 
197	fence = kzalloc(sizeof(*fence), GFP_KERNEL(0x0001 | 0x0004));
198	if (!fence)
199		return NULL((void *)0);
200 
201	dma_fence_init(fence, &drm_crtc_fence_ops, &crtc->fence_lock,
202		       crtc->fence_context, ++crtc->fence_seqno);
203 
204	return fence;
205}
206 
207/**
208 * DOC: standard CRTC properties
209 *
210 * DRM CRTCs have a few standardized properties:
211 *
212 * ACTIVE:
213 * 	Atomic property for setting the power state of the CRTC. When set to 1
214 * 	the CRTC will actively display content. When set to 0 the CRTC will be
215 * 	powered off. There is no expectation that user-space will reset CRTC
216 * 	resources like the mode and planes when setting ACTIVE to 0.
217 *
218 * 	User-space can rely on an ACTIVE change to 1 to never fail an atomic
219 * 	test as long as no other property has changed. If a change to ACTIVE
220 * 	fails an atomic test, this is a driver bug. For this reason setting
221 * 	ACTIVE to 0 must not release internal resources (like reserved memory
222 * 	bandwidth or clock generators).
223 *
224 * 	Note that the legacy DPMS property on connectors is internally routed
225 * 	to control this property for atomic drivers.
226 * MODE_ID:
227 * 	Atomic property for setting the CRTC display timings. The value is the
228 * 	ID of a blob containing the DRM mode info. To disable the CRTC,
229 * 	user-space must set this property to 0.
230 *
231 * 	Setting MODE_ID to 0 will release reserved resources for the CRTC.
232 */
233 
234/**
235 * drm_crtc_init_with_planes - Initialise a new CRTC object with
236 *    specified primary and cursor planes.
237 * @dev: DRM device
238 * @crtc: CRTC object to init
239 * @primary: Primary plane for CRTC
240 * @cursor: Cursor plane for CRTC
241 * @funcs: callbacks for the new CRTC
242 * @name: printf style format string for the CRTC name, or NULL for default name
243 *
244 * Inits a new object created as base part of a driver crtc object. Drivers
245 * should use this function instead of drm_crtc_init(), which is only provided
246 * for backwards compatibility with drivers which do not yet support universal
247 * planes). For really simple hardware which has only 1 plane look at
248 * drm_simple_display_pipe_init() instead.
249 *
250 * Returns:
251 * Zero on success, error code on failure.
252 */
253int drm_crtc_init_with_planes(struct drm_device *dev, struct drm_crtc *crtc,
254			      struct drm_plane *primary,
255			      struct drm_plane *cursor,
256			      const struct drm_crtc_funcs *funcs,
257			      const char *name, ...)
258{
259	struct drm_mode_config *config = &dev->mode_config;
260	int ret;
261 
262	WARN_ON(primary && primary->type != DRM_PLANE_TYPE_PRIMARY)({ int __ret = !!(primary && primary->type != DRM_PLANE_TYPE_PRIMARY
); if (__ret) printf("WARNING %s failed at %s:%d\n", "primary && primary->type != DRM_PLANE_TYPE_PRIMARY"
, "/usr/src/sys/dev/pci/drm/drm_crtc.c", 262); __builtin_expect
(!!(__ret), 0); });
263	WARN_ON(cursor && cursor->type != DRM_PLANE_TYPE_CURSOR)({ int __ret = !!(cursor && cursor->type != DRM_PLANE_TYPE_CURSOR
); if (__ret) printf("WARNING %s failed at %s:%d\n", "cursor && cursor->type != DRM_PLANE_TYPE_CURSOR"
, "/usr/src/sys/dev/pci/drm/drm_crtc.c", 263); __builtin_expect
(!!(__ret), 0); });
264 
265	/* crtc index is used with 32bit bitmasks */
266	if (WARN_ON(config->num_crtc >= 32)({ int __ret = !!(config->num_crtc >= 32); if (__ret) printf
("WARNING %s failed at %s:%d\n", "config->num_crtc >= 32"
, "/usr/src/sys/dev/pci/drm/drm_crtc.c", 266); __builtin_expect
(!!(__ret), 0); }))
267		return -EINVAL22;
268 
269	WARN_ON(drm_drv_uses_atomic_modeset(dev) &&({ int __ret = !!(drm_drv_uses_atomic_modeset(dev) &&
 (!funcs->atomic_destroy_state || !funcs->atomic_duplicate_state
)); if (__ret) printf("WARNING %s failed at %s:%d\n", "drm_drv_uses_atomic_modeset(dev) && (!funcs->atomic_destroy_state || !funcs->atomic_duplicate_state)"
, "/usr/src/sys/dev/pci/drm/drm_crtc.c", 271); __builtin_expect
(!!(__ret), 0); })
270		(!funcs->atomic_destroy_state ||({ int __ret = !!(drm_drv_uses_atomic_modeset(dev) &&
 (!funcs->atomic_destroy_state || !funcs->atomic_duplicate_state
)); if (__ret) printf("WARNING %s failed at %s:%d\n", "drm_drv_uses_atomic_modeset(dev) && (!funcs->atomic_destroy_state || !funcs->atomic_duplicate_state)"
, "/usr/src/sys/dev/pci/drm/drm_crtc.c", 271); __builtin_expect
(!!(__ret), 0); })
271		 !funcs->atomic_duplicate_state))({ int __ret = !!(drm_drv_uses_atomic_modeset(dev) &&
 (!funcs->atomic_destroy_state || !funcs->atomic_duplicate_state
)); if (__ret) printf("WARNING %s failed at %s:%d\n", "drm_drv_uses_atomic_modeset(dev) && (!funcs->atomic_destroy_state || !funcs->atomic_duplicate_state)"
, "/usr/src/sys/dev/pci/drm/drm_crtc.c", 271); __builtin_expect
(!!(__ret), 0); });
272 
273	crtc->dev = dev;
274	crtc->funcs = funcs;
275 
276	INIT_LIST_HEAD(&crtc->commit_list);
277	mtx_init(&crtc->commit_lock, IPL_NONE)do { (void)(((void *)0)); (void)(0); __mtx_init((&crtc->
commit_lock), ((((0x0)) > 0x0 && ((0x0)) < 0x9)
 ? 0x9 : ((0x0)))); } while (0);
278 
279	drm_modeset_lock_init(&crtc->mutex);
280	ret = drm_mode_object_add(dev, &crtc->base, DRM_MODE_OBJECT_CRTC0xcccccccc);
281	if (ret)
282		return ret;
283 
284	if (name) {
285		va_list ap;
286 
287		va_start(ap, name)__builtin_va_start((ap), name);
288		crtc->name = kvasprintf(GFP_KERNEL(0x0001 | 0x0004), name, ap);
289		va_end(ap)__builtin_va_end((ap));
290	} else {
291		crtc->name = kasprintf(GFP_KERNEL(0x0001 | 0x0004), "crtc-%d",
292				       drm_num_crtcs(dev));
293	}
294	if (!crtc->name) {
295		drm_mode_object_unregister(dev, &crtc->base);
296		return -ENOMEM12;
297	}
298 
299	crtc->fence_context = dma_fence_context_alloc(1);
300	mtx_init(&crtc->fence_lock, IPL_TTY)do { (void)(((void *)0)); (void)(0); __mtx_init((&crtc->
fence_lock), ((((0x9)) > 0x0 && ((0x9)) < 0x9) ?
 0x9 : ((0x9)))); } while (0);
301	snprintf(crtc->timeline_name, sizeof(crtc->timeline_name),
302		 "CRTC:%d-%s", crtc->base.id, crtc->name);
303 
304	crtc->base.properties = &crtc->properties;
305 
306	list_add_tail(&crtc->head, &config->crtc_list);
307	crtc->index = config->num_crtc++;
308 
309	crtc->primary = primary;
310	crtc->cursor = cursor;
311	if (primary && !primary->possible_crtcs)
312		primary->possible_crtcs = drm_crtc_mask(crtc);
313	if (cursor && !cursor->possible_crtcs)
314		cursor->possible_crtcs = drm_crtc_mask(crtc);
315 
316	ret = drm_crtc_crc_init(crtc);
317	if (ret) {
318		drm_mode_object_unregister(dev, &crtc->base);
319		return ret;
320	}
321 
322	if (drm_core_check_feature(dev, DRIVER_ATOMIC)) {
323		drm_object_attach_property(&crtc->base, config->prop_active, 0);
324		drm_object_attach_property(&crtc->base, config->prop_mode_id, 0);
325		drm_object_attach_property(&crtc->base,
326					   config->prop_out_fence_ptr, 0);
327		drm_object_attach_property(&crtc->base,
328					   config->prop_vrr_enabled, 0);
329	}
330 
331	return 0;
332}
333EXPORT_SYMBOL(drm_crtc_init_with_planes);
334 
335/**
336 * drm_crtc_cleanup - Clean up the core crtc usage
337 * @crtc: CRTC to cleanup
338 *
339 * This function cleans up @crtc and removes it from the DRM mode setting
340 * core. Note that the function does *not* free the crtc structure itself,
341 * this is the responsibility of the caller.
342 */
343void drm_crtc_cleanup(struct drm_crtc *crtc)
344{
345	struct drm_device *dev = crtc->dev;
346 
347	/* Note that the crtc_list is considered to be static; should we
348	 * remove the drm_crtc at runtime we would have to decrement all
349	 * the indices on the drm_crtc after us in the crtc_list.
350	 */
351 
352	drm_crtc_crc_fini(crtc);
353 
354	kfree(crtc->gamma_store);
355	crtc->gamma_store = NULL((void *)0);
356 
357	drm_modeset_lock_fini(&crtc->mutex);
358 
359	drm_mode_object_unregister(dev, &crtc->base);
360	list_del(&crtc->head);
361	dev->mode_config.num_crtc--;
362 
363	WARN_ON(crtc->state && !crtc->funcs->atomic_destroy_state)({ int __ret = !!(crtc->state && !crtc->funcs->
atomic_destroy_state); if (__ret) printf("WARNING %s failed at %s:%d\n"
, "crtc->state && !crtc->funcs->atomic_destroy_state"
, "/usr/src/sys/dev/pci/drm/drm_crtc.c", 363); __builtin_expect
(!!(__ret), 0); });
364	if (crtc->state && crtc->funcs->atomic_destroy_state)
365		crtc->funcs->atomic_destroy_state(crtc, crtc->state);
366 
367	kfree(crtc->name);
368 
369	memset(crtc, 0, sizeof(*crtc))__builtin_memset((crtc), (0), (sizeof(*crtc)));
370}
371EXPORT_SYMBOL(drm_crtc_cleanup);
372 
373/**
374 * drm_mode_getcrtc - get CRTC configuration
375 * @dev: drm device for the ioctl
376 * @data: data pointer for the ioctl
377 * @file_priv: drm file for the ioctl call
378 *
379 * Construct a CRTC configuration structure to return to the user.
380 *
381 * Called by the user via ioctl.
382 *
383 * Returns:
384 * Zero on success, negative errno on failure.
385 */
386int drm_mode_getcrtc(struct drm_device *dev,
387		     void *data, struct drm_file *file_priv)
388{
389	struct drm_mode_crtc *crtc_resp = data;
390	struct drm_crtc *crtc;
391	struct drm_plane *plane;
392 
393	if (!drm_core_check_feature(dev, DRIVER_MODESET))
394		return -EOPNOTSUPP45;
395 
396	crtc = drm_crtc_find(dev, file_priv, crtc_resp->crtc_id);
397	if (!crtc)
398		return -ENOENT2;
399 
400	plane = crtc->primary;
401 
402	crtc_resp->gamma_size = crtc->gamma_size;
403 
404	drm_modeset_lock(&plane->mutex, NULL((void *)0));
405	if (plane->state && plane->state->fb)
406		crtc_resp->fb_id = plane->state->fb->base.id;
407	else if (!plane->state && plane->fb)
408		crtc_resp->fb_id = plane->fb->base.id;
409	else
410		crtc_resp->fb_id = 0;
411 
412	if (plane->state) {
413		crtc_resp->x = plane->state->src_x >> 16;
414		crtc_resp->y = plane->state->src_y >> 16;
415	}
416	drm_modeset_unlock(&plane->mutex);
417 
418	drm_modeset_lock(&crtc->mutex, NULL((void *)0));
419	if (crtc->state) {
420		if (crtc->state->enable) {
421			drm_mode_convert_to_umode(&crtc_resp->mode, &crtc->state->mode);
422			crtc_resp->mode_valid = 1;
423		} else {
424			crtc_resp->mode_valid = 0;
425		}
426	} else {
427		crtc_resp->x = crtc->x;
428		crtc_resp->y = crtc->y;
429 
430		if (crtc->enabled) {
431			drm_mode_convert_to_umode(&crtc_resp->mode, &crtc->mode);
432			crtc_resp->mode_valid = 1;
433 
434		} else {
435			crtc_resp->mode_valid = 0;
436		}
437	}
438	if (!file_priv->aspect_ratio_allowed)
439		crtc_resp->mode.flags &= ~DRM_MODE_FLAG_PIC_AR_MASK(0x0F<<19);
440	drm_modeset_unlock(&crtc->mutex);
441 
442	return 0;
443}
444 
445static int __drm_mode_set_config_internal(struct drm_mode_set *set,
446					  struct drm_modeset_acquire_ctx *ctx)
447{
448	struct drm_crtc *crtc = set->crtc;
449	struct drm_framebuffer *fb;
450	struct drm_crtc *tmp;
451	int ret;
452 
453	WARN_ON(drm_drv_uses_atomic_modeset(crtc->dev))({ int __ret = !!(drm_drv_uses_atomic_modeset(crtc->dev));
 if (__ret) printf("WARNING %s failed at %s:%d\n", "drm_drv_uses_atomic_modeset(crtc->dev)"
, "/usr/src/sys/dev/pci/drm/drm_crtc.c", 453); __builtin_expect
(!!(__ret), 0); });
454 
455	/*
456	 * NOTE: ->set_config can also disable other crtcs (if we steal all
457	 * connectors from it), hence we need to refcount the fbs across all
458	 * crtcs. Atomic modeset will have saner semantics ...
459	 */
460	drm_for_each_crtc(tmp, crtc->dev)for (tmp = ({ const __typeof( ((__typeof(*tmp) *)0)->head )
 *__mptr = ((&(crtc->dev)->mode_config.crtc_list)->
next); (__typeof(*tmp) *)( (char *)__mptr - __builtin_offsetof
(__typeof(*tmp), head) );}); &tmp->head != (&(crtc
->dev)->mode_config.crtc_list); tmp = ({ const __typeof
( ((__typeof(*tmp) *)0)->head ) *__mptr = (tmp->head.next
); (__typeof(*tmp) *)( (char *)__mptr - __builtin_offsetof(__typeof
(*tmp), head) );})) {
461		struct drm_plane *plane = tmp->primary;
462 
463		plane->old_fb = plane->fb;
464	}
465 
466	fb = set->fb;
467 
468	ret = crtc->funcs->set_config(set, ctx);
469	if (ret == 0) {
470		struct drm_plane *plane = crtc->primary;
471 
472		plane->crtc = fb ? crtc : NULL((void *)0);
473		plane->fb = fb;
474	}
475 
476	drm_for_each_crtc(tmp, crtc->dev)for (tmp = ({ const __typeof( ((__typeof(*tmp) *)0)->head )
 *__mptr = ((&(crtc->dev)->mode_config.crtc_list)->
next); (__typeof(*tmp) *)( (char *)__mptr - __builtin_offsetof
(__typeof(*tmp), head) );}); &tmp->head != (&(crtc
->dev)->mode_config.crtc_list); tmp = ({ const __typeof
( ((__typeof(*tmp) *)0)->head ) *__mptr = (tmp->head.next
); (__typeof(*tmp) *)( (char *)__mptr - __builtin_offsetof(__typeof
(*tmp), head) );})) {
477		struct drm_plane *plane = tmp->primary;
478 
479		if (plane->fb)
480			drm_framebuffer_get(plane->fb);
481		if (plane->old_fb)
482			drm_framebuffer_put(plane->old_fb);
483		plane->old_fb = NULL((void *)0);
484	}
485 
486	return ret;
487}
488 
489/**
490 * drm_mode_set_config_internal - helper to call &drm_mode_config_funcs.set_config
491 * @set: modeset config to set
492 *
493 * This is a little helper to wrap internal calls to the
494 * &drm_mode_config_funcs.set_config driver interface. The only thing it adds is
495 * correct refcounting dance.
496 *
497 * This should only be used by non-atomic legacy drivers.
498 *
499 * Returns:
500 * Zero on success, negative errno on failure.
501 */
502int drm_mode_set_config_internal(struct drm_mode_set *set)
503{
504	WARN_ON(drm_drv_uses_atomic_modeset(set->crtc->dev))({ int __ret = !!(drm_drv_uses_atomic_modeset(set->crtc->
dev)); if (__ret) printf("WARNING %s failed at %s:%d\n", "drm_drv_uses_atomic_modeset(set->crtc->dev)"
, "/usr/src/sys/dev/pci/drm/drm_crtc.c", 504); __builtin_expect
(!!(__ret), 0); });
505 
506	return __drm_mode_set_config_internal(set, NULL((void *)0));
507}
508EXPORT_SYMBOL(drm_mode_set_config_internal);
509 
510/**
511 * drm_crtc_check_viewport - Checks that a framebuffer is big enough for the
512 *     CRTC viewport
513 * @crtc: CRTC that framebuffer will be displayed on
514 * @x: x panning
515 * @y: y panning
516 * @mode: mode that framebuffer will be displayed under
517 * @fb: framebuffer to check size of
518 */
519int drm_crtc_check_viewport(const struct drm_crtc *crtc,
520			    int x, int y,
521			    const struct drm_display_mode *mode,
522			    const struct drm_framebuffer *fb)
523 
524{
525	int hdisplay, vdisplay;
526 
527	drm_mode_get_hv_timing(mode, &hdisplay, &vdisplay);
528 
529	if (crtc->state &&
36
←
Assuming field 'state' is null→
530	    drm_rotation_90_or_270(crtc->primary->state->rotation))
531		swap(hdisplay, vdisplay)do { __typeof(hdisplay) __tmp = (hdisplay); (hdisplay) = (vdisplay
); (vdisplay) = __tmp; } while(0);
532 
533	return drm_framebuffer_check_src_coords(x << 16, y << 16,
37
←
Returning value, which participates in a condition later→
534						hdisplay << 16, vdisplay << 16,
535						fb);
536}
537EXPORT_SYMBOL(drm_crtc_check_viewport);
538 
539/**
540 * drm_mode_setcrtc - set CRTC configuration
541 * @dev: drm device for the ioctl
542 * @data: data pointer for the ioctl
543 * @file_priv: drm file for the ioctl call
544 *
545 * Build a new CRTC configuration based on user request.
546 *
547 * Called by the user via ioctl.
548 *
549 * Returns:
550 * Zero on success, negative errno on failure.
551 */
552int drm_mode_setcrtc(struct drm_device *dev, void *data,
553		     struct drm_file *file_priv)
554{
555	struct drm_mode_config *config = &dev->mode_config;
556	struct drm_mode_crtc *crtc_req = data;
557	struct drm_crtc *crtc;
558	struct drm_plane *plane;
559	struct drm_connector **connector_set = NULL((void *)0), *connector;
560	struct drm_framebuffer *fb = NULL((void *)0);
561	struct drm_display_mode *mode = NULL((void *)0);
562	struct drm_mode_set set;
563	uint32_t __user *set_connectors_ptr;
564	struct drm_modeset_acquire_ctx ctx;
565	int ret;
566	int i;
567 
568	if (!drm_core_check_feature(dev, DRIVER_MODESET))
1
Calling 'drm_core_check_feature'→
7
←
Returning from 'drm_core_check_feature'→
8
←
Taking false branch→
569		return -EOPNOTSUPP45;
570 
571	/*
572	 * Universal plane src offsets are only 16.16, prevent havoc for
573	 * drivers using universal plane code internally.
574	 */
575	if (crtc_req->x & 0xffff0000 || crtc_req->y & 0xffff0000)
9
←
Assuming the condition is false→
10
←
Assuming the condition is false→
11
←
Taking false branch→
576		return -ERANGE34;
577 
578	crtc = drm_crtc_find(dev, file_priv, crtc_req->crtc_id);
12
←
Calling 'drm_crtc_find'→
16
←
Returning from 'drm_crtc_find'→
579	if (!crtc16.1
'crtc' is non-null
16.1
'crtc' is non-null
16.1
'crtc' is non-null
16.1
'crtc' is non-null
) {
17
←
Taking false branch→
580		DRM_DEBUG_KMS("Unknown CRTC ID %d\n", crtc_req->crtc_id)__drm_dbg(DRM_UT_KMS, "Unknown CRTC ID %d\n", crtc_req->crtc_id
);
581		return -ENOENT2;
582	}
583	DRM_DEBUG_KMS("[CRTC:%d:%s]\n", crtc->base.id, crtc->name)__drm_dbg(DRM_UT_KMS, "[CRTC:%d:%s]\n", crtc->base.id, crtc
->name);
584 
585	plane = crtc->primary;
586 
587	/* allow disabling with the primary plane leased */
588	if (crtc_req->mode_valid && !drm_lease_held(file_priv, plane->base.id)(1))
18
←
Assuming field 'mode_valid' is not equal to 0→
19
←
Taking false branch→
589		return -EACCES13;
590 
591	DRM_MODESET_LOCK_ALL_BEGIN(dev, ctx,if (!drm_drv_uses_atomic_modeset(dev)) rw_enter_write(&dev
->mode_config.mutex); drm_modeset_acquire_init(&ctx, (
1UL << (0))); modeset_lock_retry: ret = drm_modeset_lock_all_ctx
(dev, &ctx); if (ret) goto modeset_lock_fail;
20
←
Taking false branch→
21
←
Assuming 'ret' is 0→
22
←
Taking false branch→
592				   DRM_MODESET_ACQUIRE_INTERRUPTIBLE, ret)if (!drm_drv_uses_atomic_modeset(dev)) rw_enter_write(&dev
->mode_config.mutex); drm_modeset_acquire_init(&ctx, (
1UL << (0))); modeset_lock_retry: ret = drm_modeset_lock_all_ctx
(dev, &ctx); if (ret) goto modeset_lock_fail;;
593 
594	if (crtc_req->mode_valid22.1
Field 'mode_valid' is not equal to 0
22.1
Field 'mode_valid' is not equal to 0
22.1
Field 'mode_valid' is not equal to 0
22.1
Field 'mode_valid' is not equal to 0
) {
23
←
Taking true branch→
595		/* If we have a mode we need a framebuffer. */
596		/* If we pass -1, set the mode with the currently bound fb */
597		if (crtc_req->fb_id == -1) {
24
←
Assuming the condition is false→
25
←
Taking false branch→
598			struct drm_framebuffer *old_fb;
599 
600			if (plane->state)
601				old_fb = plane->state->fb;
602			else
603				old_fb = plane->fb;
604 
605			if (!old_fb) {
606				DRM_DEBUG_KMS("CRTC doesn't have current FB\n")__drm_dbg(DRM_UT_KMS, "CRTC doesn't have current FB\n");
607				ret = -EINVAL22;
608				goto out;
609			}
610 
611			fb = old_fb;
612			/* Make refcounting symmetric with the lookup path. */
613			drm_framebuffer_get(fb);
614		} else {
615			fb = drm_framebuffer_lookup(dev, file_priv, crtc_req->fb_id);
616			if (!fb) {
26
←
Assuming 'fb' is non-null→
27
←
Taking false branch→
617				DRM_DEBUG_KMS("Unknown FB ID%d\n",__drm_dbg(DRM_UT_KMS, "Unknown FB ID%d\n", crtc_req->fb_id
)
618						crtc_req->fb_id)__drm_dbg(DRM_UT_KMS, "Unknown FB ID%d\n", crtc_req->fb_id
);
619				ret = -ENOENT2;
620				goto out;
621			}
622		}
623 
624		mode = drm_mode_create(dev);
625		if (!mode) {
28
←
Assuming 'mode' is non-null→
29
←
Taking false branch→
626			ret = -ENOMEM12;
627			goto out;
628		}
629		if (!file_priv->aspect_ratio_allowed &&
30
←
Assuming field 'aspect_ratio_allowed' is true→
630		    (crtc_req->mode.flags & DRM_MODE_FLAG_PIC_AR_MASK(0x0F<<19)) != DRM_MODE_FLAG_PIC_AR_NONE(0<<19)) {
631			DRM_DEBUG_KMS("Unexpected aspect-ratio flag bits\n")__drm_dbg(DRM_UT_KMS, "Unexpected aspect-ratio flag bits\n");
632			ret = -EINVAL22;
633			goto out;
634		}
635 
636 
637		ret = drm_mode_convert_umode(dev, mode, &crtc_req->mode);
638		if (ret) {
31
←
Assuming 'ret' is 0→
32
←
Taking false branch→
639			DRM_DEBUG_KMS("Invalid mode (ret=%d, status=%s)\n",__drm_dbg(DRM_UT_KMS, "Invalid mode (ret=%d, status=%s)\n", ret
, drm_get_mode_status_name(mode->status))
640				      ret, drm_get_mode_status_name(mode->status))__drm_dbg(DRM_UT_KMS, "Invalid mode (ret=%d, status=%s)\n", ret
, drm_get_mode_status_name(mode->status));
641			drm_mode_debug_printmodeline(mode);
642			goto out;
643		}
644 
645		/*
646		 * Check whether the primary plane supports the fb pixel format.
647		 * Drivers not implementing the universal planes API use a
648		 * default formats list provided by the DRM core which doesn't
649		 * match real hardware capabilities. Skip the check in that
650		 * case.
651		 */
652		if (!plane->format_default) {
33
←
Assuming field 'format_default' is true→
34
←
Taking false branch→
653			ret = drm_plane_check_pixel_format(plane,
654							   fb->format->format,
655							   fb->modifier);
656			if (ret) {
657				struct drm_format_name_buf format_name;
658 
659				DRM_DEBUG_KMS("Invalid pixel format %s, modifier 0x%llx\n",__drm_dbg(DRM_UT_KMS, "Invalid pixel format %s, modifier 0x%llx\n"
, drm_get_format_name(fb->format->format, &format_name
), fb->modifier)
660					      drm_get_format_name(fb->format->format,__drm_dbg(DRM_UT_KMS, "Invalid pixel format %s, modifier 0x%llx\n"
, drm_get_format_name(fb->format->format, &format_name
), fb->modifier)
661								  &format_name),__drm_dbg(DRM_UT_KMS, "Invalid pixel format %s, modifier 0x%llx\n"
, drm_get_format_name(fb->format->format, &format_name
), fb->modifier)
662					      fb->modifier)__drm_dbg(DRM_UT_KMS, "Invalid pixel format %s, modifier 0x%llx\n"
, drm_get_format_name(fb->format->format, &format_name
), fb->modifier);
663				goto out;
664			}
665		}
666 
667		ret = drm_crtc_check_viewport(crtc, crtc_req->x, crtc_req->y,
35
←
Calling 'drm_crtc_check_viewport'→
38
←
Returning from 'drm_crtc_check_viewport'→
668					      mode, fb);
669		if (ret)
39
←
Assuming 'ret' is 0→
40
←
Taking false branch→
670			goto out;
671 
672	}
673 
674	if (crtc_req->count_connectors == 0 && mode) {
41
←
Assuming field 'count_connectors' is not equal to 0→
675		DRM_DEBUG_KMS("Count connectors is 0 but mode set\n")__drm_dbg(DRM_UT_KMS, "Count connectors is 0 but mode set\n");
676		ret = -EINVAL22;
677		goto out;
678	}
679 
680	if (crtc_req->count_connectors41.1
Field 'count_connectors' is > 0
41.1
Field 'count_connectors' is > 0
41.1
Field 'count_connectors' is > 0
41.1
Field 'count_connectors' is > 0
 > 0 && (!mode41.2
'mode' is non-null
41.2
'mode' is non-null
41.2
'mode' is non-null
41.2
'mode' is non-null
 || !fb41.3
'fb' is non-null
41.3
'fb' is non-null
41.3
'fb' is non-null
41.3
'fb' is non-null
)) {
42
←
Taking false branch→
681		DRM_DEBUG_KMS("Count connectors is %d but no mode or fb set\n",__drm_dbg(DRM_UT_KMS, "Count connectors is %d but no mode or fb set\n"
, crtc_req->count_connectors)
682			  crtc_req->count_connectors)__drm_dbg(DRM_UT_KMS, "Count connectors is %d but no mode or fb set\n"
, crtc_req->count_connectors);
683		ret = -EINVAL22;
684		goto out;
685	}
686 
687	if (crtc_req->count_connectors42.1
Field 'count_connectors' is > 0
42.1
Field 'count_connectors' is > 0
42.1
Field 'count_connectors' is > 0
42.1
Field 'count_connectors' is > 0
 > 0) {
43
←
Taking true branch→
688		u32 out_id;
689 
690		/* Avoid unbounded kernel memory allocation */
691		if (crtc_req->count_connectors > config->num_connector) {
44
←
Assuming field 'count_connectors' is <= field 'num_connector'→
45
←
Taking false branch→
692			ret = -EINVAL22;
693			goto out;
694		}
695 
696		connector_set = kmalloc_array(crtc_req->count_connectors,
46
←
Calling 'kmalloc_array'→
51
←
Returning from 'kmalloc_array'→
697					      sizeof(struct drm_connector *),
698					      GFP_KERNEL(0x0001 | 0x0004));
699		if (!connector_set) {
52
←
Assuming 'connector_set' is non-null→
53
←
Taking false branch→
700			ret = -ENOMEM12;
701			goto out;
702		}
703 
704		for (i = 0; i53.1
'i' is < field 'count_connectors'
53.1
'i' is < field 'count_connectors'
53.1
'i' is < field 'count_connectors'
53.1
'i' is < field 'count_connectors'
 < crtc_req->count_connectors; i++) {
54
←
Loop condition is true.  Entering loop body→
705			connector_set[i] = NULL((void *)0);
706			set_connectors_ptr = (uint32_t __user *)(unsigned long)crtc_req->set_connectors_ptr;
707			if (get_user(out_id, &set_connectors_ptr[i])-copyin(&set_connectors_ptr[i], &(out_id), sizeof(out_id
))) {
55
←
Assuming the condition is true→
56
←
Taking true branch→
708				ret = -EFAULT14;
709				goto out;
57
←
Control jumps to line 741→
710			}
711 
712			connector = drm_connector_lookup(dev, file_priv, out_id);
713			if (!connector) {
714				DRM_DEBUG_KMS("Connector id %d unknown\n",__drm_dbg(DRM_UT_KMS, "Connector id %d unknown\n", out_id)
715						out_id)__drm_dbg(DRM_UT_KMS, "Connector id %d unknown\n", out_id);
716				ret = -ENOENT2;
717				goto out;
718			}
719			DRM_DEBUG_KMS("[CONNECTOR:%d:%s]\n",__drm_dbg(DRM_UT_KMS, "[CONNECTOR:%d:%s]\n", connector->base
.id, connector->name)
720					connector->base.id,__drm_dbg(DRM_UT_KMS, "[CONNECTOR:%d:%s]\n", connector->base
.id, connector->name)
721					connector->name)__drm_dbg(DRM_UT_KMS, "[CONNECTOR:%d:%s]\n", connector->base
.id, connector->name);
722 
723			connector_set[i] = connector;
724		}
725	}
726 
727	set.crtc = crtc;
728	set.x = crtc_req->x;
729	set.y = crtc_req->y;
730	set.mode = mode;
731	set.connectors = connector_set;
732	set.num_connectors = crtc_req->count_connectors;
733	set.fb = fb;
734 
735	if (drm_drv_uses_atomic_modeset(dev))
736		ret = crtc->funcs->set_config(&set, &ctx);
737	else
738		ret = __drm_mode_set_config_internal(&set, &ctx);
739 
740out:
741	if (fb57.1
'fb' is non-null
57.1
'fb' is non-null
57.1
'fb' is non-null
57.1
'fb' is non-null
)
58
←
Taking true branch→
742		drm_framebuffer_put(fb);
743 
744	if (connector_set58.1
'connector_set' is non-null
58.1
'connector_set' is non-null
58.1
'connector_set' is non-null
58.1
'connector_set' is non-null
) {
59
←
Taking true branch→
745		for (i = 0; i59.1
'i' is < field 'count_connectors'
59.1
'i' is < field 'count_connectors'
59.1
'i' is < field 'count_connectors'
59.1
'i' is < field 'count_connectors'
 < crtc_req->count_connectors; i++) {
60
←
Loop condition is true.  Entering loop body→
62
←
The value 1 is assigned to 'i'→
63
←
Assuming 'i' is < field 'count_connectors'→
64
←
Loop condition is true.  Entering loop body→
746			if (connector_set[i])
61
←
Taking false branch→
65
←
Branch condition evaluates to a garbage value
747				drm_connector_put(connector_set[i]);
748		}
749	}
750	kfree(connector_set);
751	drm_mode_destroy(dev, mode);
752 
753	/* In case we need to retry... */
754	connector_set = NULL((void *)0);
755	fb = NULL((void *)0);
756	mode = NULL((void *)0);
757 
758	DRM_MODESET_LOCK_ALL_END(dev, ctx, ret)modeset_lock_fail: if (ret == -11) { ret = drm_modeset_backoff
(&ctx); if (!ret) goto modeset_lock_retry; } drm_modeset_drop_locks
(&ctx); drm_modeset_acquire_fini(&ctx); if (!drm_drv_uses_atomic_modeset
(dev)) rw_exit_write(&dev->mode_config.mutex);;
759 
760	return ret;
761}
762 
763int drm_mode_crtc_set_obj_prop(struct drm_mode_object *obj,
764			       struct drm_property *property,
765			       uint64_t value)
766{
767	int ret = -EINVAL22;
768	struct drm_crtc *crtc = obj_to_crtc(obj)({ const __typeof( ((struct drm_crtc *)0)->base ) *__mptr =
 (obj); (struct drm_crtc *)( (char *)__mptr - __builtin_offsetof
(struct drm_crtc, base) );});
769 
770	if (crtc->funcs->set_property)
771		ret = crtc->funcs->set_property(crtc, property, value);
772	if (!ret)
773		drm_object_property_set_value(obj, property, value);
774 
775	return ret;
776}

←

/usr/src/sys/dev/pci/drm/include/drm/drm_drv.h

→

1/*
* Copyright 1999 Precision Insight, Inc., Cedar Park, Texas.
* Copyright 2000 VA Linux Systems, Inc., Sunnyvale, California.
* Copyright (c) 2009-2010, Code Aurora Forum.
* Copyright 2016 Intel Corp.
*
* Permission is hereby granted, free of charge, to any person obtaining a
* copy of this software and associated documentation files (the "Software"),
* to deal in the Software without restriction, including without limitation
* the rights to use, copy, modify, merge, publish, distribute, sublicense,
* and/or sell copies of the Software, and to permit persons to whom the
* Software is furnished to do so, subject to the following conditions:
*
* The above copyright notice and this permission notice (including the next
* paragraph) shall be included in all copies or substantial portions of the
* Software.
*
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
* VA LINUX SYSTEMS AND/OR ITS SUPPLIERS BE LIABLE FOR ANY CLAIM, DAMAGES OR
* OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
* ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
* OTHER DEALINGS IN THE SOFTWARE.
*/

27#ifndef _DRM_DRV_H_
28#define _DRM_DRV_H_

30#include <linux/list.h>
31#include <linux/irqreturn.h>

33#include <drm/drm_device.h>

35#include <uvm/uvm_extern.h>

37struct drm_file;
38struct drm_gem_object;
39struct drm_master;
40struct drm_minor;
41struct dma_buf_attachment;
42struct drm_display_mode;
43struct drm_mode_create_dumb;
44struct drm_printer;

46/**
* enum drm_driver_feature - feature flags
*
* See &drm_driver.driver_features, drm_device.driver_features and
* drm_core_check_feature().
*/
52enum drm_driver_feature {
/**
* @DRIVER_GEM:
*
* Driver use the GEM memory manager. This should be set for all modern
* drivers.
*/
DRIVER_GEM			= BIT(0)(1UL << (0)),
/**
* @DRIVER_MODESET:
*
* Driver supports mode setting interfaces (KMS).
*/
DRIVER_MODESET			= BIT(1)(1UL << (1)),
/**
* @DRIVER_RENDER:
*
* Driver supports dedicated render nodes. See also the :ref:`section on
* render nodes <drm_render_node>` for details.
*/
DRIVER_RENDER			= BIT(3)(1UL << (3)),
/**
* @DRIVER_ATOMIC:
*
* Driver supports the full atomic modesetting userspace API. Drivers
* which only use atomic internally, but do not the support the full
* userspace API (e.g. not all properties converted to atomic, or
* multi-plane updates are not guaranteed to be tear-free) should not
* set this flag.
*/
DRIVER_ATOMIC			= BIT(4)(1UL << (4)),
/**
* @DRIVER_SYNCOBJ:
*
* Driver supports &drm_syncobj for explicit synchronization of command
* submission.
*/
DRIVER_SYNCOBJ                  = BIT(5)(1UL << (5)),
/**
* @DRIVER_SYNCOBJ_TIMELINE:
*
* Driver supports the timeline flavor of &drm_syncobj for explicit
* synchronization of command submission.
*/
DRIVER_SYNCOBJ_TIMELINE         = BIT(6)(1UL << (6)),

/* IMPORTANT: Below are all the legacy flags, add new ones above. */

/**
* @DRIVER_USE_AGP:
*
* Set up DRM AGP support, see drm_agp_init(), the DRM core will manage
* AGP resources. New drivers don't need this.
*/
DRIVER_USE_AGP			= BIT(25)(1UL << (25)),
/**
* @DRIVER_LEGACY:
*
* Denote a legacy driver using shadow attach. Do not use.
*/
DRIVER_LEGACY			= BIT(26)(1UL << (26)),
/**
* @DRIVER_PCI_DMA:
*
* Driver is capable of PCI DMA, mapping of PCI DMA buffers to userspace
* will be enabled. Only for legacy drivers. Do not use.
*/
DRIVER_PCI_DMA			= BIT(27)(1UL << (27)),
/**
* @DRIVER_SG:
*
* Driver can perform scatter/gather DMA, allocation and mapping of
* scatter/gather buffers will be enabled. Only for legacy drivers. Do
* not use.
*/
DRIVER_SG			= BIT(28)(1UL << (28)),

/**
* @DRIVER_HAVE_DMA:
*
* Driver supports DMA, the userspace DMA API will be supported. Only
* for legacy drivers. Do not use.
*/
DRIVER_HAVE_DMA			= BIT(29)(1UL << (29)),
/**
* @DRIVER_HAVE_IRQ:
*
* Legacy irq support. Only for legacy drivers. Do not use.
*
* New drivers can either use the drm_irq_install() and
* drm_irq_uninstall() helper functions, or roll their own irq support
* code by calling request_irq() directly.
*/
DRIVER_HAVE_IRQ			= BIT(30)(1UL << (30)),
/**
* @DRIVER_KMS_LEGACY_CONTEXT:
*
* Used only by nouveau for backwards compatibility with existing
* userspace.  Do not use.
*/
DRIVER_KMS_LEGACY_CONTEXT	= BIT(31)(1UL << (31)),
153};

155/**
* struct drm_driver - DRM driver structure
*
* This structure represent the common code for a family of cards. There will be
* one &struct drm_device for each card present in this family. It contains lots
* of vfunc entries, and a pile of those probably should be moved to more
* appropriate places like &drm_mode_config_funcs or into a new operations
* structure for GEM drivers.
*/
164struct drm_driver {
/**
* @load:
*
* Backward-compatible driver callback to complete initialization steps
* after the driver is registered.  For this reason, may suffer from
* race conditions and its use is deprecated for new drivers.  It is
* therefore only supported for existing drivers not yet converted to
* the new scheme.  See devm_drm_dev_alloc() and drm_dev_register() for
* proper and race-free way to set up a &struct drm_device.
*
* This is deprecated, do not use!
*
* Returns:
*
* Zero on success, non-zero value on failure.
*/
int (*load) (struct drm_device *, unsigned long flags);

/**
* @open:
*
* Driver callback when a new &struct drm_file is opened. Useful for
* setting up driver-private data structures like buffer allocators,
* execution contexts or similar things. Such driver-private resources
* must be released again in @postclose.
*
* Since the display/modeset side of DRM can only be owned by exactly
* one &struct drm_file (see &drm_file.is_master and &drm_device.master)
* there should never be a need to set up any modeset related resources
* in this callback. Doing so would be a driver design bug.
*
* Returns:
*
* 0 on success, a negative error code on failure, which will be
* promoted to userspace as the result of the open() system call.
*/
int (*open) (struct drm_device *, struct drm_file *);

/**
* @postclose:
*
* One of the driver callbacks when a new &struct drm_file is closed.
* Useful for tearing down driver-private data structures allocated in
* @open like buffer allocators, execution contexts or similar things.
*
* Since the display/modeset side of DRM can only be owned by exactly
* one &struct drm_file (see &drm_file.is_master and &drm_device.master)
* there should never be a need to tear down any modeset related
* resources in this callback. Doing so would be a driver design bug.
*/
void (*postclose) (struct drm_device *, struct drm_file *);

/**
* @lastclose:
*
* Called when the last &struct drm_file has been closed and there's
* currently no userspace client for the &struct drm_device.
*
* Modern drivers should only use this to force-restore the fbdev
* framebuffer using drm_fb_helper_restore_fbdev_mode_unlocked().
* Anything else would indicate there's something seriously wrong.
* Modern drivers can also use this to execute delayed power switching
* state changes, e.g. in conjunction with the :ref:`vga_switcheroo`
* infrastructure.
*
* This is called after @postclose hook has been called.
*
* NOTE:
*
* All legacy drivers use this callback to de-initialize the hardware.
* This is purely because of the shadow-attach model, where the DRM
* kernel driver does not really own the hardware. Instead ownershipe is
* handled with the help of userspace through an inheritedly racy dance
* to set/unset the VT into raw mode.
*
* Legacy drivers initialize the hardware in the @firstopen callback,
* which isn't even called for modern drivers.
*/
void (*lastclose) (struct drm_device *);

/**
* @unload:
*
* Reverse the effects of the driver load callback.  Ideally,
* the clean up performed by the driver should happen in the
* reverse order of the initialization.  Similarly to the load
* hook, this handler is deprecated and its usage should be
* dropped in favor of an open-coded teardown function at the
* driver layer.  See drm_dev_unregister() and drm_dev_put()
* for the proper way to remove a &struct drm_device.
*
* The unload() hook is called right after unregistering
* the device.
*
*/
void (*unload) (struct drm_device *);

/**
* @release:
*
* Optional callback for destroying device data after the final
* reference is released, i.e. the device is being destroyed.
*
* This is deprecated, clean up all memory allocations associated with a
* &drm_device using drmm_add_action(), drmm_kmalloc() and related
* managed resources functions.
*/
void (*release) (struct drm_device *);

/**
* @irq_handler:
*
* Interrupt handler called when using drm_irq_install(). Not used by
* drivers which implement their own interrupt handling.
*/
irqreturn_t(*irq_handler) (int irq, void *arg);

/**
* @irq_preinstall:
*
* Optional callback used by drm_irq_install() which is called before
* the interrupt handler is registered. This should be used to clear out
* any pending interrupts (from e.g. firmware based drives) and reset
* the interrupt handling registers.
*/
void (*irq_preinstall) (struct drm_device *dev);

/**
* @irq_postinstall:
*
* Optional callback used by drm_irq_install() which is called after
* the interrupt handler is registered. This should be used to enable
* interrupt generation in the hardware.
*/
int (*irq_postinstall) (struct drm_device *dev);

/**
* @irq_uninstall:
*
* Optional callback used by drm_irq_uninstall() which is called before
* the interrupt handler is unregistered. This should be used to disable
* interrupt generation in the hardware.
*/
void (*irq_uninstall) (struct drm_device *dev);

/**
* @master_set:
*
* Called whenever the minor master is set. Only used by vmwgfx.
*/
void (*master_set)(struct drm_device *dev, struct drm_file *file_priv,
	   bool_Bool from_open);
/**
* @master_drop:
*
* Called whenever the minor master is dropped. Only used by vmwgfx.
*/
void (*master_drop)(struct drm_device *dev, struct drm_file *file_priv);

/**
* @debugfs_init:
*
* Allows drivers to create driver-specific debugfs files.
*/
void (*debugfs_init)(struct drm_minor *minor);

/**
* @gem_free_object_unlocked: deconstructor for drm_gem_objects
*
* This is deprecated and should not be used by new drivers. Use
* &drm_gem_object_funcs.free instead.
*/
void (*gem_free_object_unlocked) (struct drm_gem_object *obj);

/**
* @gem_open_object:
*
* This callback is deprecated in favour of &drm_gem_object_funcs.open.
*
* Driver hook called upon gem handle creation
*/
int (*gem_open_object) (struct drm_gem_object *, struct drm_file *);

/**
* @gem_close_object:
*
* This callback is deprecated in favour of &drm_gem_object_funcs.close.
*
* Driver hook called upon gem handle release
*/
void (*gem_close_object) (struct drm_gem_object *, struct drm_file *);

/**
* @gem_create_object: constructor for gem objects
*
* Hook for allocating the GEM object struct, for use by the CMA and
* SHMEM GEM helpers.
*/
struct drm_gem_object *(*gem_create_object)(struct drm_device *dev,
				    size_t size);
/**
* @prime_handle_to_fd:
*
* Main PRIME export function. Should be implemented with
* drm_gem_prime_handle_to_fd() for GEM based drivers.
*
* For an in-depth discussion see :ref:`PRIME buffer sharing
* documentation <prime_buffer_sharing>`.
*/
int (*prime_handle_to_fd)(struct drm_device *dev, struct drm_file *file_priv,
		uint32_t handle, uint32_t flags, int *prime_fd);
/**
* @prime_fd_to_handle:
*
* Main PRIME import function. Should be implemented with
* drm_gem_prime_fd_to_handle() for GEM based drivers.
*
* For an in-depth discussion see :ref:`PRIME buffer sharing
* documentation <prime_buffer_sharing>`.
*/
int (*prime_fd_to_handle)(struct drm_device *dev, struct drm_file *file_priv,
		int prime_fd, uint32_t *handle);
/**
* @gem_prime_export:
*
* Export hook for GEM drivers. Deprecated in favour of
* &drm_gem_object_funcs.export.
*/
struct dma_buf * (*gem_prime_export)(struct drm_gem_object *obj,
			     int flags);
/**
* @gem_prime_import:
*
* Import hook for GEM drivers.
*
* This defaults to drm_gem_prime_import() if not set.
*/
struct drm_gem_object * (*gem_prime_import)(struct drm_device *dev,
		struct dma_buf *dma_buf);

/**
* @gem_prime_pin:
*
* Deprecated hook in favour of &drm_gem_object_funcs.pin.
*/
int (*gem_prime_pin)(struct drm_gem_object *obj);

/**
* @gem_prime_unpin:
*
* Deprecated hook in favour of &drm_gem_object_funcs.unpin.
*/
void (*gem_prime_unpin)(struct drm_gem_object *obj);


/**
* @gem_prime_get_sg_table:
*
* Deprecated hook in favour of &drm_gem_object_funcs.get_sg_table.
*/
struct sg_table *(*gem_prime_get_sg_table)(struct drm_gem_object *obj);

/**
* @gem_prime_import_sg_table:
*
* Optional hook used by the PRIME helper functions
* drm_gem_prime_import() respectively drm_gem_prime_import_dev().
*/
struct drm_gem_object *(*gem_prime_import_sg_table)(
		struct drm_device *dev,
		struct dma_buf_attachment *attach,
		struct sg_table *sgt);
/**
* @gem_prime_vmap:
*
* Deprecated vmap hook for GEM drivers. Please use
* &drm_gem_object_funcs.vmap instead.
*/
void *(*gem_prime_vmap)(struct drm_gem_object *obj);

/**
* @gem_prime_vunmap:
*
* Deprecated vunmap hook for GEM drivers. Please use
* &drm_gem_object_funcs.vunmap instead.
*/
void (*gem_prime_vunmap)(struct drm_gem_object *obj, void *vaddr);

/**
* @gem_prime_mmap:
*
* mmap hook for GEM drivers, used to implement dma-buf mmap in the
* PRIME helpers.
*
* FIXME: There's way too much duplication going on here, and also moved
* to &drm_gem_object_funcs.
*/
462#ifdef __linux__
int (*gem_prime_mmap)(struct drm_gem_object *obj,
		struct vm_area_struct *vma);
465#endif

467#ifdef __OpenBSD__1
struct uvm_object *(*mmap)(struct file *, vm_prot_t, voff_t, vsize_t);
size_t gem_size;
470#endif

/**
* @dumb_create:
*
* This creates a new dumb buffer in the driver's backing storage manager (GEM,
* TTM or something else entirely) and returns the resulting buffer handle. This
* handle can then be wrapped up into a framebuffer modeset object.
*
* Note that userspace is not allowed to use such objects for render
* acceleration - drivers must create their own private ioctls for such a use
* case.
*
* Width, height and depth are specified in the &drm_mode_create_dumb
* argument. The callback needs to fill the handle, pitch and size for
* the created buffer.
*
* Called by the user via ioctl.
*
* Returns:
*
* Zero on success, negative errno on failure.
*/
int (*dumb_create)(struct drm_file *file_priv,
	   struct drm_device *dev,
	   struct drm_mode_create_dumb *args);
/**
* @dumb_map_offset:
*
* Allocate an offset in the drm device node's address space to be able to
* memory map a dumb buffer.
*
* The default implementation is drm_gem_create_mmap_offset(). GEM based
* drivers must not overwrite this.
*
* Called by the user via ioctl.
*
* Returns:
*
* Zero on success, negative errno on failure.
*/
int (*dumb_map_offset)(struct drm_file *file_priv,
	       struct drm_device *dev, uint32_t handle,
	       uint64_t *offset);
/**
* @dumb_destroy:
*
* This destroys the userspace handle for the given dumb backing storage buffer.
* Since buffer objects must be reference counted in the kernel a buffer object
* won't be immediately freed if a framebuffer modeset object still uses it.
*
* Called by the user via ioctl.
*
* The default implementation is drm_gem_dumb_destroy(). GEM based drivers
* must not overwrite this.
*
* Returns:
*
* Zero on success, negative errno on failure.
*/
int (*dumb_destroy)(struct drm_file *file_priv,
	    struct drm_device *dev,
	    uint32_t handle);

/**
* @gem_vm_ops: Driver private ops for this object
*
* For GEM drivers this is deprecated in favour of
* &drm_gem_object_funcs.vm_ops.
*/
const struct vm_operations_struct *gem_vm_ops;

542#ifdef __OpenBSD__1
int (*gem_fault)(struct drm_gem_object *,
	 struct uvm_faultinfo *, off_t, vaddr_t,
	 vm_page_t *, int, int, vm_prot_t, int);
546#endif

/** @major: driver major number */
int major;
/** @minor: driver minor number */
int minor;
/** @patchlevel: driver patch level */
int patchlevel;
/** @name: driver name */
char *name;
/** @desc: driver description */
char *desc;
/** @date: driver date */
char *date;

/**
* @driver_features:
* Driver features, see &enum drm_driver_feature. Drivers can disable
* some features on a per-instance basis using
* &drm_device.driver_features.
*/
u32 driver_features;

/**
* @ioctls:
*
* Array of driver-private IOCTL description entries. See the chapter on
* :ref:`IOCTL support in the userland interfaces
* chapter<drm_driver_ioctl>` for the full details.
*/

const struct drm_ioctl_desc *ioctls;
/** @num_ioctls: Number of entries in @ioctls. */
int num_ioctls;

/**
* @fops:
*
* File operations for the DRM device node. See the discussion in
* :ref:`file operations<drm_driver_fops>` for in-depth coverage and
* some examples.
*/
const struct file_operations *fops;

/* Everything below here is for legacy driver, never use! */
/* private: */

/* List of devices hanging off this driver with stealth attach. */
struct list_head legacy_dev_list;
int (*firstopen) (struct drm_device *);
void (*preclose) (struct drm_device *, struct drm_file *file_priv);
int (*dma_ioctl) (struct drm_device *dev, void *data, struct drm_file *file_priv);
int (*dma_quiescent) (struct drm_device *);
int (*context_dtor) (struct drm_device *dev, int context);
u32 (*get_vblank_counter)(struct drm_device *dev, unsigned int pipe);
int (*enable_vblank)(struct drm_device *dev, unsigned int pipe);
void (*disable_vblank)(struct drm_device *dev, unsigned int pipe);
int dev_priv_size;
604};

606void *__devm_drm_dev_alloc(struct device *parent, struct drm_driver *driver,
	   size_t size, size_t offset);

609/**
* devm_drm_dev_alloc - Resource managed allocation of a &drm_device instance
* @parent: Parent device object
* @driver: DRM driver
* @type: the type of the struct which contains struct &drm_device
* @member: the name of the &drm_device within @type.
*
* This allocates and initialize a new DRM device. No device registration is done.
* Call drm_dev_register() to advertice the device to user space and register it
* with other core subsystems. This should be done last in the device
* initialization sequence to make sure userspace can't access an inconsistent
* state.
*
* The initial ref-count of the object is 1. Use drm_dev_get() and
* drm_dev_put() to take and drop further ref-counts.
*
* It is recommended that drivers embed &struct drm_device into their own device
* structure.
*
* Note that this manages the lifetime of the resulting &drm_device
* automatically using devres. The DRM device initialized with this function is
* automatically put on driver detach using drm_dev_put().
*
* RETURNS:
* Pointer to new DRM device, or ERR_PTR on failure.
*/
635#define devm_drm_dev_alloc(parent, driver, type, member)((type *) __devm_drm_dev_alloc(parent, driver, sizeof(type), __builtin_offsetof
(type, member))) \
((type *) __devm_drm_dev_alloc(parent, driver, sizeof(type), \
		       offsetof(type, member)__builtin_offsetof(type, member)))

639struct drm_device *drm_dev_alloc(struct drm_driver *driver,
		 struct device *parent);
641int drm_dev_register(struct drm_device *dev, unsigned long flags);
642void drm_dev_unregister(struct drm_device *dev);

644void drm_dev_get(struct drm_device *dev);
645void drm_dev_put(struct drm_device *dev);
646void drm_put_dev(struct drm_device *dev);
647bool_Bool drm_dev_enter(struct drm_device *dev, int *idx);
648void drm_dev_exit(int idx);
649void drm_dev_unplug(struct drm_device *dev);

651/**
* drm_dev_is_unplugged - is a DRM device unplugged
* @dev: DRM device
*
* This function can be called to check whether a hotpluggable is unplugged.
* Unplugging itself is singalled through drm_dev_unplug(). If a device is
* unplugged, these two functions guarantee that any store before calling
* drm_dev_unplug() is visible to callers of this function after it completes
*
* WARNING: This function fundamentally races against drm_dev_unplug(). It is
* recommended that drivers instead use the underlying drm_dev_enter() and
* drm_dev_exit() function pairs.
*/
664static inline bool_Bool drm_dev_is_unplugged(struct drm_device *dev)
665{
int idx;

if (drm_dev_enter(dev, &idx)) {
drm_dev_exit(idx);
return false0;
}

return true1;
674}

676/**
* drm_core_check_all_features - check driver feature flags mask
* @dev: DRM device to check
* @features: feature flag(s) mask
*
* This checks @dev for driver features, see &drm_driver.driver_features,
* &drm_device.driver_features, and the various &enum drm_driver_feature flags.
*
* Returns true if all features in the @features mask are supported, false
* otherwise.
*/
687static inline bool_Bool drm_core_check_all_features(const struct drm_device *dev,
			       u32 features)
689{
u32 supported = dev->driver->driver_features & dev->driver_features;

return features2.1
'features' is 2
1
'features' is 2
1
'features' is 2
1
'features' is 2
 && (supported & features) == features;
3
←
Assuming the condition is true→
4
←
Returning the value 1, which participates in a condition later→
693}

695/**
* drm_core_check_feature - check driver feature flags
* @dev: DRM device to check
* @feature: feature flag
*
* This checks @dev for driver features, see &drm_driver.driver_features,
* &drm_device.driver_features, and the various &enum drm_driver_feature flags.
*
* Returns true if the @feature is supported, false otherwise.
*/
705static inline bool_Bool drm_core_check_feature(const struct drm_device *dev,
			  enum drm_driver_feature feature)
707{
return drm_core_check_all_features(dev, feature);
2
←
Calling 'drm_core_check_all_features'→
5
←
Returning from 'drm_core_check_all_features'→
6
←
Returning the value 1, which participates in a condition later→
709}

711/**
* drm_drv_uses_atomic_modeset - check if the driver implements
* atomic_commit()
* @dev: DRM device
*
* This check is useful if drivers do not have DRIVER_ATOMIC set but
* have atomic modesetting internally implemented.
*/
719static inline bool_Bool drm_drv_uses_atomic_modeset(struct drm_device *dev)
720{
return drm_core_check_feature(dev, DRIVER_ATOMIC) ||
(dev->mode_config.funcs && dev->mode_config.funcs->atomic_commit != NULL((void *)0));
723}


726int drm_dev_set_unique(struct drm_device *dev, const char *name);

728struct drm_file *drm_find_file_by_minor(struct drm_device *, int);
729struct drm_device *drm_get_device_from_kdev(dev_t);

731#ifdef __OpenBSD__1

733void drm_attach_platform(struct drm_driver *, bus_space_tag_t, bus_dma_tag_t,
  struct device *, struct drm_device *);
735struct drm_device *drm_attach_pci(struct drm_driver *,
  struct pci_attach_args *, int, int, struct device *, struct drm_device *);

738int drm_pciprobe(struct pci_attach_args *, const struct pci_device_id * );
739const struct pci_device_id *drm_find_description(int, int,
  const struct pci_device_id *);

742int drm_getpciinfo(struct drm_device *, void *, struct drm_file *);

744#endif

746#endif

←

/usr/src/sys/dev/pci/drm/include/drm/drm_crtc.h

→

1/*
* Copyright © 2006 Keith Packard
* Copyright © 2007-2008 Dave Airlie
* Copyright © 2007-2008 Intel Corporation
*   Jesse Barnes <jesse.barnes@intel.com>
*
* Permission is hereby granted, free of charge, to any person obtaining a
* copy of this software and associated documentation files (the "Software"),
* to deal in the Software without restriction, including without limitation
* the rights to use, copy, modify, merge, publish, distribute, sublicense,
* and/or sell copies of the Software, and to permit persons to whom the
* Software is furnished to do so, subject to the following conditions:
*
* The above copyright notice and this permission notice shall be included in
* all copies or substantial portions of the Software.
*
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
* THE COPYRIGHT HOLDER(S) OR AUTHOR(S) BE LIABLE FOR ANY CLAIM, DAMAGES OR
* OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
* ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
* OTHER DEALINGS IN THE SOFTWARE.
*/
25#ifndef __DRM_CRTC_H__
26#define __DRM_CRTC_H__

28#include <linux/i2c.h>
29#include <linux/spinlock.h>
30#include <linux/types.h>
31#include <linux/fb.h>
32#include <linux/hdmi.h>
33#include <linux/media-bus-format.h>
34#include <uapi/drm/drm_mode.h>
35#include <uapi/drm/drm_fourcc.h>
36#include <drm/drm_modeset_lock.h>
37#include <drm/drm_rect.h>
38#include <drm/drm_mode_object.h>
39#include <drm/drm_framebuffer.h>
40#include <drm/drm_modes.h>
41#include <drm/drm_connector.h>
42#include <drm/drm_device.h>
43#include <drm/drm_property.h>
44#include <drm/drm_edid.h>
45#include <drm/drm_plane.h>
46#include <drm/drm_blend.h>
47#include <drm/drm_color_mgmt.h>
48#include <drm/drm_debugfs_crc.h>
49#include <drm/drm_mode_config.h>

51struct drm_device;
52struct drm_mode_set;
53struct drm_file;
54struct drm_clip_rect;
55struct drm_printer;
56struct drm_self_refresh_data;
57struct device_node;
58struct dma_fence;
59struct edid;

61static inline int64_t U642I64(uint64_t val)
62{
return (int64_t)*((int64_t *)&val);
64}
65static inline uint64_t I642U64(int64_t val)
66{
return (uint64_t)*((uint64_t *)&val);
68}

70struct drm_crtc;
71struct drm_pending_vblank_event;
72struct drm_plane;
73struct drm_bridge;
74struct drm_atomic_state;

76struct drm_crtc_helper_funcs;
77struct drm_plane_helper_funcs;

79/**
* struct drm_crtc_state - mutable CRTC state
*
* Note that the distinction between @enable and @active is rather subtle:
* Flipping @active while @enable is set without changing anything else may
* never return in a failure from the &drm_mode_config_funcs.atomic_check
* callback. Userspace assumes that a DPMS On will always succeed. In other
* words: @enable controls resource assignment, @active controls the actual
* hardware state.
*
* The three booleans active_changed, connectors_changed and mode_changed are
* intended to indicate whether a full modeset is needed, rather than strictly
* describing what has changed in a commit. See also:
* drm_atomic_crtc_needs_modeset()
*
* WARNING: Transitional helpers (like drm_helper_crtc_mode_set() or
* drm_helper_crtc_mode_set_base()) do not maintain many of the derived control
* state like @plane_mask so drivers not converted over to atomic helpers should
* not rely on these being accurate!
*/
99struct drm_crtc_state {
/** @crtc: backpointer to the CRTC */
struct drm_crtc *crtc;

/**
* @enable: Whether the CRTC should be enabled, gates all other state.
* This controls reservations of shared resources. Actual hardware state
* is controlled by @active.
*/
bool_Bool enable;

/**
* @active: Whether the CRTC is actively displaying (used for DPMS).
* Implies that @enable is set. The driver must not release any shared
* resources if @active is set to false but @enable still true, because
* userspace expects that a DPMS ON always succeeds.
*
* Hence drivers must not consult @active in their various
* &drm_mode_config_funcs.atomic_check callback to reject an atomic
* commit. They can consult it to aid in the computation of derived
* hardware state, since even in the DPMS OFF state the display hardware
* should be as much powered down as when the CRTC is completely
* disabled through setting @enable to false.
*/
bool_Bool active;

/**
* @planes_changed: Planes on this crtc are updated. Used by the atomic
* helpers and drivers to steer the atomic commit control flow.
*/
bool_Bool planes_changed : 1;

/**
* @mode_changed: @mode or @enable has been changed. Used by the atomic
* helpers and drivers to steer the atomic commit control flow. See also
* drm_atomic_crtc_needs_modeset().
*
* Drivers are supposed to set this for any CRTC state changes that
* require a full modeset. They can also reset it to false if e.g. a
* @mode change can be done without a full modeset by only changing
* scaler settings.
*/
bool_Bool mode_changed : 1;

/**
* @active_changed: @active has been toggled. Used by the atomic
* helpers and drivers to steer the atomic commit control flow. See also
* drm_atomic_crtc_needs_modeset().
*/
bool_Bool active_changed : 1;

/**
* @connectors_changed: Connectors to this crtc have been updated,
* either in their state or routing. Used by the atomic
* helpers and drivers to steer the atomic commit control flow. See also
* drm_atomic_crtc_needs_modeset().
*
* Drivers are supposed to set this as-needed from their own atomic
* check code, e.g. from &drm_encoder_helper_funcs.atomic_check
*/
bool_Bool connectors_changed : 1;
/**
* @zpos_changed: zpos values of planes on this crtc have been updated.
* Used by the atomic helpers and drivers to steer the atomic commit
* control flow.
*/
bool_Bool zpos_changed : 1;
/**
* @color_mgmt_changed: Color management properties have changed
* (@gamma_lut, @degamma_lut or @ctm). Used by the atomic helpers and
* drivers to steer the atomic commit control flow.
*/
bool_Bool color_mgmt_changed : 1;

/**
* @no_vblank:
*
* Reflects the ability of a CRTC to send VBLANK events. This state
* usually depends on the pipeline configuration. If set to true, DRM
* atomic helpers will send out a fake VBLANK event during display
* updates after all hardware changes have been committed. This is
* implemented in drm_atomic_helper_fake_vblank().
*
* One usage is for drivers and/or hardware without support for VBLANK
* interrupts. Such drivers typically do not initialize vblanking
* (i.e., call drm_vblank_init() with the number of CRTCs). For CRTCs
* without initialized vblanking, this field is set to true in
* drm_atomic_helper_check_modeset(), and a fake VBLANK event will be
* send out on each update of the display pipeline by
* drm_atomic_helper_fake_vblank().
*
* Another usage is CRTCs feeding a writeback connector operating in
* oneshot mode. In this case the fake VBLANK event is only generated
* when a job is queued to the writeback connector, and we want the
* core to fake VBLANK events when this part of the pipeline hasn't
* changed but others had or when the CRTC and connectors are being
* disabled.
*
* __drm_atomic_helper_crtc_duplicate_state() will not reset the value
* from the current state, the CRTC driver is then responsible for
* updating this field when needed.
*
* Note that the combination of &drm_crtc_state.event == NULL and
* &drm_crtc_state.no_blank == true is valid and usually used when the
* writeback connector attached to the CRTC has a new job queued. In
* this case the driver will send the VBLANK event on its own when the
* writeback job is complete.
*/
bool_Bool no_vblank : 1;

/**
* @plane_mask: Bitmask of drm_plane_mask(plane) of planes attached to
* this CRTC.
*/
u32 plane_mask;

/**
* @connector_mask: Bitmask of drm_connector_mask(connector) of
* connectors attached to this CRTC.
*/
u32 connector_mask;

/**
* @encoder_mask: Bitmask of drm_encoder_mask(encoder) of encoders
* attached to this CRTC.
*/
u32 encoder_mask;

/**
* @adjusted_mode:
*
* Internal display timings which can be used by the driver to handle
* differences between the mode requested by userspace in @mode and what
* is actually programmed into the hardware.
*
* For drivers using &drm_bridge, this stores hardware display timings
* used between the CRTC and the first bridge. For other drivers, the
* meaning of the adjusted_mode field is purely driver implementation
* defined information, and will usually be used to store the hardware
* display timings used between the CRTC and encoder blocks.
*/
struct drm_display_mode adjusted_mode;

/**
* @mode:
*
* Display timings requested by userspace. The driver should try to
* match the refresh rate as close as possible (but note that it's
* undefined what exactly is close enough, e.g. some of the HDMI modes
* only differ in less than 1% of the refresh rate). The active width
* and height as observed by userspace for positioning planes must match
* exactly.
*
* For external connectors where the sink isn't fixed (like with a
* built-in panel), this mode here should match the physical mode on the
* wire to the last details (i.e. including sync polarities and
* everything).
*/
struct drm_display_mode mode;

/**
* @mode_blob: &drm_property_blob for @mode, for exposing the mode to
* atomic userspace.
*/
struct drm_property_blob *mode_blob;

/**
* @degamma_lut:
*
* Lookup table for converting framebuffer pixel data before apply the
* color conversion matrix @ctm. See drm_crtc_enable_color_mgmt(). The
* blob (if not NULL) is an array of &struct drm_color_lut.
*/
struct drm_property_blob *degamma_lut;

/**
* @ctm:
*
* Color transformation matrix. See drm_crtc_enable_color_mgmt(). The
* blob (if not NULL) is a &struct drm_color_ctm.
*/
struct drm_property_blob *ctm;

/**
* @gamma_lut:
*
* Lookup table for converting pixel data after the color conversion
* matrix @ctm.  See drm_crtc_enable_color_mgmt(). The blob (if not
* NULL) is an array of &struct drm_color_lut.
*/
struct drm_property_blob *gamma_lut;

/**
* @target_vblank:
*
* Target vertical blank period when a page flip
* should take effect.
*/
u32 target_vblank;

/**
* @async_flip:
*
* This is set when DRM_MODE_PAGE_FLIP_ASYNC is set in the legacy
* PAGE_FLIP IOCTL. It's not wired up for the atomic IOCTL itself yet.
*/
bool_Bool async_flip;

/**
* @vrr_enabled:
*
* Indicates if variable refresh rate should be enabled for the CRTC.
* Support for the requested vrr state will depend on driver and
* hardware capabiltiy - lacking support is not treated as failure.
*/
bool_Bool vrr_enabled;

/**
* @self_refresh_active:
*
* Used by the self refresh helpers to denote when a self refresh
* transition is occurring. This will be set on enable/disable callbacks
* when self refresh is being enabled or disabled. In some cases, it may
* not be desirable to fully shut off the crtc during self refresh.
* CRTC's can inspect this flag and determine the best course of action.
*/
bool_Bool self_refresh_active;

/**
* @event:
*
* Optional pointer to a DRM event to signal upon completion of the
* state update. The driver must send out the event when the atomic
* commit operation completes. There are two cases:
*
*  - The event is for a CRTC which is being disabled through this
*    atomic commit. In that case the event can be send out any time
*    after the hardware has stopped scanning out the current
*    framebuffers. It should contain the timestamp and counter for the
*    last vblank before the display pipeline was shut off. The simplest
*    way to achieve that is calling drm_crtc_send_vblank_event()
*    somewhen after drm_crtc_vblank_off() has been called.
*
*  - For a CRTC which is enabled at the end of the commit (even when it
*    undergoes an full modeset) the vblank timestamp and counter must
*    be for the vblank right before the first frame that scans out the
*    new set of buffers. Again the event can only be sent out after the
*    hardware has stopped scanning out the old buffers.
*
*  - Events for disabled CRTCs are not allowed, and drivers can ignore
*    that case.
*
* For very simple hardware without VBLANK interrupt, enabling
* &struct drm_crtc_state.no_vblank makes DRM's atomic commit helpers
* send a fake VBLANK event at the end of the display update after all
* hardware changes have been applied. See
* drm_atomic_helper_fake_vblank().
*
* For more complex hardware this
* can be handled by the drm_crtc_send_vblank_event() function,
* which the driver should call on the provided event upon completion of
* the atomic commit. Note that if the driver supports vblank signalling
* and timestamping the vblank counters and timestamps must agree with
* the ones returned from page flip events. With the current vblank
* helper infrastructure this can be achieved by holding a vblank
* reference while the page flip is pending, acquired through
* drm_crtc_vblank_get() and released with drm_crtc_vblank_put().
* Drivers are free to implement their own vblank counter and timestamp
* tracking though, e.g. if they have accurate timestamp registers in
* hardware.
*
* For hardware which supports some means to synchronize vblank
* interrupt delivery with committing display state there's also
* drm_crtc_arm_vblank_event(). See the documentation of that function
* for a detailed discussion of the constraints it needs to be used
* safely.
*
* If the device can't notify of flip completion in a race-free way
* at all, then the event should be armed just after the page flip is
* committed. In the worst case the driver will send the event to
* userspace one frame too late. This doesn't allow for a real atomic
* update, but it should avoid tearing.
*/
struct drm_pending_vblank_event *event;

/**
* @commit:
*
* This tracks how the commit for this update proceeds through the
* various phases. This is never cleared, except when we destroy the
* state, so that subsequent commits can synchronize with previous ones.
*/
struct drm_crtc_commit *commit;

/** @state: backpointer to global drm_atomic_state */
struct drm_atomic_state *state;
395};

397/**
* struct drm_crtc_funcs - control CRTCs for a given device
*
* The drm_crtc_funcs structure is the central CRTC management structure
* in the DRM.  Each CRTC controls one or more connectors (note that the name
* CRTC is simply historical, a CRTC may control LVDS, VGA, DVI, TV out, etc.
* connectors, not just CRTs).
*
* Each driver is responsible for filling out this structure at startup time,
* in addition to providing other modesetting features, like i2c and DDC
* bus accessors.
*/
409struct drm_crtc_funcs {
/**
* @reset:
*
* Reset CRTC hardware and software state to off. This function isn't
* called by the core directly, only through drm_mode_config_reset().
* It's not a helper hook only for historical reasons.
*
* Atomic drivers can use drm_atomic_helper_crtc_reset() to reset
* atomic state using this hook.
*/
void (*reset)(struct drm_crtc *crtc);

/**
* @cursor_set:
*
* Update the cursor image. The cursor position is relative to the CRTC
* and can be partially or fully outside of the visible area.
*
* Note that contrary to all other KMS functions the legacy cursor entry
* points don't take a framebuffer object, but instead take directly a
* raw buffer object id from the driver's buffer manager (which is
* either GEM or TTM for current drivers).
*
* This entry point is deprecated, drivers should instead implement
* universal plane support and register a proper cursor plane using
* drm_crtc_init_with_planes().
*
* This callback is optional
*
* RETURNS:
*
* 0 on success or a negative error code on failure.
*/
int (*cursor_set)(struct drm_crtc *crtc, struct drm_file *file_priv,
	  uint32_t handle, uint32_t width, uint32_t height);

/**
* @cursor_set2:
*
* Update the cursor image, including hotspot information. The hotspot
* must not affect the cursor position in CRTC coordinates, but is only
* meant as a hint for virtualized display hardware to coordinate the
* guests and hosts cursor position. The cursor hotspot is relative to
* the cursor image. Otherwise this works exactly like @cursor_set.
*
* This entry point is deprecated, drivers should instead implement
* universal plane support and register a proper cursor plane using
* drm_crtc_init_with_planes().
*
* This callback is optional.
*
* RETURNS:
*
* 0 on success or a negative error code on failure.
*/
int (*cursor_set2)(struct drm_crtc *crtc, struct drm_file *file_priv,
	   uint32_t handle, uint32_t width, uint32_t height,
	   int32_t hot_x, int32_t hot_y);

/**
* @cursor_move:
*
* Update the cursor position. The cursor does not need to be visible
* when this hook is called.
*
* This entry point is deprecated, drivers should instead implement
* universal plane support and register a proper cursor plane using
* drm_crtc_init_with_planes().
*
* This callback is optional.
*
* RETURNS:
*
* 0 on success or a negative error code on failure.
*/
int (*cursor_move)(struct drm_crtc *crtc, int x, int y);

/**
* @gamma_set:
*
* Set gamma on the CRTC.
*
* This callback is optional.
*
* Atomic drivers who want to support gamma tables should implement the
* atomic color management support, enabled by calling
* drm_crtc_enable_color_mgmt(), which then supports the legacy gamma
* interface through the drm_atomic_helper_legacy_gamma_set()
* compatibility implementation.
*/
int (*gamma_set)(struct drm_crtc *crtc, u16 *r, u16 *g, u16 *b,
	 uint32_t size,
	 struct drm_modeset_acquire_ctx *ctx);

/**
* @destroy:
*
* Clean up CRTC resources. This is only called at driver unload time
* through drm_mode_config_cleanup() since a CRTC cannot be hotplugged
* in DRM.
*/
void (*destroy)(struct drm_crtc *crtc);

/**
* @set_config:
*
* This is the main legacy entry point to change the modeset state on a
* CRTC. All the details of the desired configuration are passed in a
* &struct drm_mode_set - see there for details.
*
* Drivers implementing atomic modeset should use
* drm_atomic_helper_set_config() to implement this hook.
*
* RETURNS:
*
* 0 on success or a negative error code on failure.
*/
int (*set_config)(struct drm_mode_set *set,
	  struct drm_modeset_acquire_ctx *ctx);

/**
* @page_flip:
*
* Legacy entry point to schedule a flip to the given framebuffer.
*
* Page flipping is a synchronization mechanism that replaces the frame
* buffer being scanned out by the CRTC with a new frame buffer during
* vertical blanking, avoiding tearing (except when requested otherwise
* through the DRM_MODE_PAGE_FLIP_ASYNC flag). When an application
* requests a page flip the DRM core verifies that the new frame buffer
* is large enough to be scanned out by the CRTC in the currently
* configured mode and then calls this hook with a pointer to the new
* frame buffer.
*
* The driver must wait for any pending rendering to the new framebuffer
* to complete before executing the flip. It should also wait for any
* pending rendering from other drivers if the underlying buffer is a
* shared dma-buf.
*
* An application can request to be notified when the page flip has
* completed. The drm core will supply a &struct drm_event in the event
* parameter in this case. This can be handled by the
* drm_crtc_send_vblank_event() function, which the driver should call on
* the provided event upon completion of the flip. Note that if
* the driver supports vblank signalling and timestamping the vblank
* counters and timestamps must agree with the ones returned from page
* flip events. With the current vblank helper infrastructure this can
* be achieved by holding a vblank reference while the page flip is
* pending, acquired through drm_crtc_vblank_get() and released with
* drm_crtc_vblank_put(). Drivers are free to implement their own vblank
* counter and timestamp tracking though, e.g. if they have accurate
* timestamp registers in hardware.
*
* This callback is optional.
*
* NOTE:
*
* Very early versions of the KMS ABI mandated that the driver must
* block (but not reject) any rendering to the old framebuffer until the
* flip operation has completed and the old framebuffer is no longer
* visible. This requirement has been lifted, and userspace is instead
* expected to request delivery of an event and wait with recycling old
* buffers until such has been received.
*
* RETURNS:
*
* 0 on success or a negative error code on failure. Note that if a
* page flip operation is already pending the callback should return
* -EBUSY. Pageflips on a disabled CRTC (either by setting a NULL mode
* or just runtime disabled through DPMS respectively the new atomic
* "ACTIVE" state) should result in an -EINVAL error code. Note that
* drm_atomic_helper_page_flip() checks this already for atomic drivers.
*/
int (*page_flip)(struct drm_crtc *crtc,
	 struct drm_framebuffer *fb,
	 struct drm_pending_vblank_event *event,
	 uint32_t flags,
	 struct drm_modeset_acquire_ctx *ctx);

/**
* @page_flip_target:
*
* Same as @page_flip but with an additional parameter specifying the
* absolute target vertical blank period (as reported by
* drm_crtc_vblank_count()) when the flip should take effect.
*
* Note that the core code calls drm_crtc_vblank_get before this entry
* point, and will call drm_crtc_vblank_put if this entry point returns
* any non-0 error code. It's the driver's responsibility to call
* drm_crtc_vblank_put after this entry point returns 0, typically when
* the flip completes.
*/
int (*page_flip_target)(struct drm_crtc *crtc,
		struct drm_framebuffer *fb,
		struct drm_pending_vblank_event *event,
		uint32_t flags, uint32_t target,
		struct drm_modeset_acquire_ctx *ctx);

/**
* @set_property:
*
* This is the legacy entry point to update a property attached to the
* CRTC.
*
* This callback is optional if the driver does not support any legacy
* driver-private properties. For atomic drivers it is not used because
* property handling is done entirely in the DRM core.
*
* RETURNS:
*
* 0 on success or a negative error code on failure.
*/
int (*set_property)(struct drm_crtc *crtc,
	    struct drm_property *property, uint64_t val);

/**
* @atomic_duplicate_state:
*
* Duplicate the current atomic state for this CRTC and return it.
* The core and helpers guarantee that any atomic state duplicated with
* this hook and still owned by the caller (i.e. not transferred to the
* driver by calling &drm_mode_config_funcs.atomic_commit) will be
* cleaned up by calling the @atomic_destroy_state hook in this
* structure.
*
* This callback is mandatory for atomic drivers.
*
* Atomic drivers which don't subclass &struct drm_crtc_state should use
* drm_atomic_helper_crtc_duplicate_state(). Drivers that subclass the
* state structure to extend it with driver-private state should use
* __drm_atomic_helper_crtc_duplicate_state() to make sure shared state is
* duplicated in a consistent fashion across drivers.
*
* It is an error to call this hook before &drm_crtc.state has been
* initialized correctly.
*
* NOTE:
*
* If the duplicate state references refcounted resources this hook must
* acquire a reference for each of them. The driver must release these
* references again in @atomic_destroy_state.
*
* RETURNS:
*
* Duplicated atomic state or NULL when the allocation failed.
*/
struct drm_crtc_state *(*atomic_duplicate_state)(struct drm_crtc *crtc);

/**
* @atomic_destroy_state:
*
* Destroy a state duplicated with @atomic_duplicate_state and release
* or unreference all resources it references
*
* This callback is mandatory for atomic drivers.
*/
void (*atomic_destroy_state)(struct drm_crtc *crtc,
		     struct drm_crtc_state *state);

/**
* @atomic_set_property:
*
* Decode a driver-private property value and store the decoded value
* into the passed-in state structure. Since the atomic core decodes all
* standardized properties (even for extensions beyond the core set of
* properties which might not be implemented by all drivers) this
* requires drivers to subclass the state structure.
*
* Such driver-private properties should really only be implemented for
* truly hardware/vendor specific state. Instead it is preferred to
* standardize atomic extension and decode the properties used to expose
* such an extension in the core.
*
* Do not call this function directly, use
* drm_atomic_crtc_set_property() instead.
*
* This callback is optional if the driver does not support any
* driver-private atomic properties.
*
* NOTE:
*
* This function is called in the state assembly phase of atomic
* modesets, which can be aborted for any reason (including on
* userspace's request to just check whether a configuration would be
* possible). Drivers MUST NOT touch any persistent state (hardware or
* software) or data structures except the passed in @state parameter.
*
* Also since userspace controls in which order properties are set this
* function must not do any input validation (since the state update is
* incomplete and hence likely inconsistent). Instead any such input
* validation must be done in the various atomic_check callbacks.
*
* RETURNS:
*
* 0 if the property has been found, -EINVAL if the property isn't
* implemented by the driver (which should never happen, the core only
* asks for properties attached to this CRTC). No other validation is
* allowed by the driver. The core already checks that the property
* value is within the range (integer, valid enum value, ...) the driver
* set when registering the property.
*/
int (*atomic_set_property)(struct drm_crtc *crtc,
		   struct drm_crtc_state *state,
		   struct drm_property *property,
		   uint64_t val);
/**
* @atomic_get_property:
*
* Reads out the decoded driver-private property. This is used to
* implement the GETCRTC IOCTL.
*
* Do not call this function directly, use
* drm_atomic_crtc_get_property() instead.
*
* This callback is optional if the driver does not support any
* driver-private atomic properties.
*
* RETURNS:
*
* 0 on success, -EINVAL if the property isn't implemented by the
* driver (which should never happen, the core only asks for
* properties attached to this CRTC).
*/
int (*atomic_get_property)(struct drm_crtc *crtc,
		   const struct drm_crtc_state *state,
		   struct drm_property *property,
		   uint64_t *val);

/**
* @late_register:
*
* This optional hook can be used to register additional userspace
* interfaces attached to the crtc like debugfs interfaces.
* It is called late in the driver load sequence from drm_dev_register().
* Everything added from this callback should be unregistered in
* the early_unregister callback.
*
* Returns:
*
* 0 on success, or a negative error code on failure.
*/
int (*late_register)(struct drm_crtc *crtc);

/**
* @early_unregister:
*
* This optional hook should be used to unregister the additional
* userspace interfaces attached to the crtc from
* @late_register. It is called from drm_dev_unregister(),
* early in the driver unload sequence to disable userspace access
* before data structures are torndown.
*/
void (*early_unregister)(struct drm_crtc *crtc);

/**
* @set_crc_source:
*
* Changes the source of CRC checksums of frames at the request of
* userspace, typically for testing purposes. The sources available are
* specific of each driver and a %NULL value indicates that CRC
* generation is to be switched off.
*
* When CRC generation is enabled, the driver should call
* drm_crtc_add_crc_entry() at each frame, providing any information
* that characterizes the frame contents in the crcN arguments, as
* provided from the configured source. Drivers must accept an "auto"
* source name that will select a default source for this CRTC.
*
* This may trigger an atomic modeset commit if necessary, to enable CRC
* generation.
*
* Note that "auto" can depend upon the current modeset configuration,
* e.g. it could pick an encoder or output specific CRC sampling point.
*
* This callback is optional if the driver does not support any CRC
* generation functionality.
*
* RETURNS:
*
* 0 on success or a negative error code on failure.
*/
int (*set_crc_source)(struct drm_crtc *crtc, const char *source);

/**
* @verify_crc_source:
*
* verifies the source of CRC checksums of frames before setting the
* source for CRC and during crc open. Source parameter can be NULL
* while disabling crc source.
*
* This callback is optional if the driver does not support any CRC
* generation functionality.
*
* RETURNS:
*
* 0 on success or a negative error code on failure.
*/
int (*verify_crc_source)(struct drm_crtc *crtc, const char *source,
		 size_t *values_cnt);
/**
* @get_crc_sources:
*
* Driver callback for getting a list of all the available sources for
* CRC generation. This callback depends upon verify_crc_source, So
* verify_crc_source callback should be implemented before implementing
* this. Driver can pass full list of available crc sources, this
* callback does the verification on each crc-source before passing it
* to userspace.
*
* This callback is optional if the driver does not support exporting of
* possible CRC sources list.
*
* RETURNS:
*
* a constant character pointer to the list of all the available CRC
* sources. On failure driver should return NULL. count should be
* updated with number of sources in list. if zero we don't process any
* source from the list.
*/
const char *const *(*get_crc_sources)(struct drm_crtc *crtc,
			      size_t *count);

/**
* @atomic_print_state:
*
* If driver subclasses &struct drm_crtc_state, it should implement
* this optional hook for printing additional driver specific state.
*
* Do not call this directly, use drm_atomic_crtc_print_state()
* instead.
*/
void (*atomic_print_state)(struct drm_printer *p,
		   const struct drm_crtc_state *state);

/**
* @get_vblank_counter:
*
* Driver callback for fetching a raw hardware vblank counter for the
* CRTC. It's meant to be used by new drivers as the replacement of
* &drm_driver.get_vblank_counter hook.
*
* This callback is optional. If a device doesn't have a hardware
* counter, the driver can simply leave the hook as NULL. The DRM core
* will account for missed vblank events while interrupts where disabled
* based on system timestamps.
*
* Wraparound handling and loss of events due to modesetting is dealt
* with in the DRM core code, as long as drivers call
* drm_crtc_vblank_off() and drm_crtc_vblank_on() when disabling or
* enabling a CRTC.
*
* See also &drm_device.vblank_disable_immediate and
* &drm_device.max_vblank_count.
*
* Returns:
*
* Raw vblank counter value.
*/
u32 (*get_vblank_counter)(struct drm_crtc *crtc);

/**
* @enable_vblank:
*
* Enable vblank interrupts for the CRTC. It's meant to be used by
* new drivers as the replacement of &drm_driver.enable_vblank hook.
*
* Returns:
*
* Zero on success, appropriate errno if the vblank interrupt cannot
* be enabled.
*/
int (*enable_vblank)(struct drm_crtc *crtc);

/**
* @disable_vblank:
*
* Disable vblank interrupts for the CRTC. It's meant to be used by
* new drivers as the replacement of &drm_driver.disable_vblank hook.
*/
void (*disable_vblank)(struct drm_crtc *crtc);

/**
* @get_vblank_timestamp:
*
* Called by drm_get_last_vbltimestamp(). Should return a precise
* timestamp when the most recent vblank interval ended or will end.
*
* Specifically, the timestamp in @vblank_time should correspond as
* closely as possible to the time when the first video scanline of
* the video frame after the end of vblank will start scanning out,
* the time immediately after end of the vblank interval. If the
* @crtc is currently inside vblank, this will be a time in the future.
* If the @crtc is currently scanning out a frame, this will be the
* past start time of the current scanout. This is meant to adhere
* to the OpenML OML_sync_control extension specification.
*
* Parameters:
*
* crtc:
*     CRTC for which timestamp should be returned.
* max_error:
*     Maximum allowable timestamp error in nanoseconds.
*     Implementation should strive to provide timestamp
*     with an error of at most max_error nanoseconds.
*     Returns true upper bound on error for timestamp.
* vblank_time:
*     Target location for returned vblank timestamp.
* in_vblank_irq:
*     True when called from drm_crtc_handle_vblank().  Some drivers
*     need to apply some workarounds for gpu-specific vblank irq quirks
*     if flag is set.
*
* Returns:
*
* True on success, false on failure, which means the core should
* fallback to a simple timestamp taken in drm_crtc_handle_vblank().
*/
bool_Bool (*get_vblank_timestamp)(struct drm_crtc *crtc,
		     int *max_error,
		     ktime_t *vblank_time,
		     bool_Bool in_vblank_irq);
931};

933/**
* struct drm_crtc - central CRTC control structure
*
* Each CRTC may have one or more connectors associated with it.  This structure
* allows the CRTC to be controlled.
*/
939struct drm_crtc {
/** @dev: parent DRM device */
struct drm_device *dev;
/** @port: OF node used by drm_of_find_possible_crtcs(). */
struct device_node *port;
/**
* @head:
*
* List of all CRTCs on @dev, linked from &drm_mode_config.crtc_list.
* Invariant over the lifetime of @dev and therefore does not need
* locking.
*/
struct list_head head;

/** @name: human readable name, can be overwritten by the driver */
char *name;

/**
* @mutex:
*
* This provides a read lock for the overall CRTC state (mode, dpms
* state, ...) and a write lock for everything which can be update
* without a full modeset (fb, cursor data, CRTC properties ...). A full
* modeset also need to grab &drm_mode_config.connection_mutex.
*
* For atomic drivers specifically this protects @state.
*/
struct drm_modeset_lock mutex;

/** @base: base KMS object for ID tracking etc. */
struct drm_mode_object base;

/**
* @primary:
* Primary plane for this CRTC. Note that this is only
* relevant for legacy IOCTL, it specifies the plane implicitly used by
* the SETCRTC and PAGE_FLIP IOCTLs. It does not have any significance
* beyond that.
*/
struct drm_plane *primary;

/**
* @cursor:
* Cursor plane for this CRTC. Note that this is only relevant for
* legacy IOCTL, it specifies the plane implicitly used by the SETCURSOR
* and SETCURSOR2 IOCTLs. It does not have any significance
* beyond that.
*/
struct drm_plane *cursor;

/**
* @index: Position inside the mode_config.list, can be used as an array
* index. It is invariant over the lifetime of the CRTC.
*/
unsigned index;

/**
* @cursor_x: Current x position of the cursor, used for universal
* cursor planes because the SETCURSOR IOCTL only can update the
* framebuffer without supplying the coordinates. Drivers should not use
* this directly, atomic drivers should look at &drm_plane_state.crtc_x
* of the cursor plane instead.
*/
int cursor_x;
/**
* @cursor_y: Current y position of the cursor, used for universal
* cursor planes because the SETCURSOR IOCTL only can update the
* framebuffer without supplying the coordinates. Drivers should not use
* this directly, atomic drivers should look at &drm_plane_state.crtc_y
* of the cursor plane instead.
*/
int cursor_y;

/**
* @enabled:
*
* Is this CRTC enabled? Should only be used by legacy drivers, atomic
* drivers should instead consult &drm_crtc_state.enable and
* &drm_crtc_state.active. Atomic drivers can update this by calling
* drm_atomic_helper_update_legacy_modeset_state().
*/
bool_Bool enabled;

/**
* @mode:
*
* Current mode timings. Should only be used by legacy drivers, atomic
* drivers should instead consult &drm_crtc_state.mode. Atomic drivers
* can update this by calling
* drm_atomic_helper_update_legacy_modeset_state().
*/
struct drm_display_mode mode;

/**
* @hwmode:
*
* Programmed mode in hw, after adjustments for encoders, crtc, panel
* scaling etc. Should only be used by legacy drivers, for high
* precision vblank timestamps in
* drm_crtc_vblank_helper_get_vblank_timestamp().
*
* Note that atomic drivers should not use this, but instead use
* &drm_crtc_state.adjusted_mode. And for high-precision timestamps
* drm_crtc_vblank_helper_get_vblank_timestamp() used
* &drm_vblank_crtc.hwmode,
* which is filled out by calling drm_calc_timestamping_constants().
*/
struct drm_display_mode hwmode;

/**
* @x:
* x position on screen. Should only be used by legacy drivers, atomic
* drivers should look at &drm_plane_state.crtc_x of the primary plane
* instead. Updated by calling
* drm_atomic_helper_update_legacy_modeset_state().
*/
int x;
/**
* @y:
* y position on screen. Should only be used by legacy drivers, atomic
* drivers should look at &drm_plane_state.crtc_y of the primary plane
* instead. Updated by calling
* drm_atomic_helper_update_legacy_modeset_state().
*/
int y;

/** @funcs: CRTC control functions */
const struct drm_crtc_funcs *funcs;

/**
* @gamma_size: Size of legacy gamma ramp reported to userspace. Set up
* by calling drm_mode_crtc_set_gamma_size().
*/
uint32_t gamma_size;

/**
* @gamma_store: Gamma ramp values used by the legacy SETGAMMA and
* GETGAMMA IOCTls. Set up by calling drm_mode_crtc_set_gamma_size().
*/
uint16_t *gamma_store;

/** @helper_private: mid-layer private data */
const struct drm_crtc_helper_funcs *helper_private;

/** @properties: property tracking for this CRTC */
struct drm_object_properties properties;

/**
* @state:
*
* Current atomic state for this CRTC.
*
* This is protected by @mutex. Note that nonblocking atomic commits
* access the current CRTC state without taking locks. Either by going
* through the &struct drm_atomic_state pointers, see
* for_each_oldnew_crtc_in_state(), for_each_old_crtc_in_state() and
* for_each_new_crtc_in_state(). Or through careful ordering of atomic
* commit operations as implemented in the atomic helpers, see
* &struct drm_crtc_commit.
*/
struct drm_crtc_state *state;

/**
* @commit_list:
*
* List of &drm_crtc_commit structures tracking pending commits.
* Protected by @commit_lock. This list holds its own full reference,
* as does the ongoing commit.
*
* "Note that the commit for a state change is also tracked in
* &drm_crtc_state.commit. For accessing the immediately preceding
* commit in an atomic update it is recommended to just use that
* pointer in the old CRTC state, since accessing that doesn't need
* any locking or list-walking. @commit_list should only be used to
* stall for framebuffer cleanup that's signalled through
* &drm_crtc_commit.cleanup_done."
*/
struct list_head commit_list;

/**
* @commit_lock:
*
* Spinlock to protect @commit_list.
*/
spinlock_t commit_lock;

1125#ifdef CONFIG_DEBUG_FS
/**
* @debugfs_entry:
*
* Debugfs directory for this CRTC.
*/
struct dentry *debugfs_entry;
1132#endif

/**
* @crc:
*
* Configuration settings of CRC capture.
*/
struct drm_crtc_crc crc;

/**
* @fence_context:
*
* timeline context used for fence operations.
*/
unsigned int fence_context;

/**
* @fence_lock:
*
* spinlock to protect the fences in the fence_context.
*/
spinlock_t fence_lock;
/**
* @fence_seqno:
*
* Seqno variable used as monotonic counter for the fences
* created on the CRTC's timeline.
*/
unsigned long fence_seqno;

/**
* @timeline_name:
*
* The name of the CRTC's fence timeline.
*/
char timeline_name[32];

/**
* @self_refresh_data: Holds the state for the self refresh helpers
*
* Initialized via drm_self_refresh_helper_init().
*/
struct drm_self_refresh_data *self_refresh_data;
1175};

1177/**
* struct drm_mode_set - new values for a CRTC config change
* @fb: framebuffer to use for new config
* @crtc: CRTC whose configuration we're about to change
* @mode: mode timings to use
* @x: position of this CRTC relative to @fb
* @y: position of this CRTC relative to @fb
* @connectors: array of connectors to drive with this CRTC if possible
* @num_connectors: size of @connectors array
*
* This represents a modeset configuration for the legacy SETCRTC ioctl and is
* also used internally. Atomic drivers instead use &drm_atomic_state.
*/
1190struct drm_mode_set {
struct drm_framebuffer *fb;
struct drm_crtc *crtc;
struct drm_display_mode *mode;

uint32_t x;
uint32_t y;

struct drm_connector **connectors;
size_t num_connectors;
1200};

1202#define obj_to_crtc(x)({ const __typeof( ((struct drm_crtc *)0)->base ) *__mptr =
 (x); (struct drm_crtc *)( (char *)__mptr - __builtin_offsetof
(struct drm_crtc, base) );}) container_of(x, struct drm_crtc, base)({ const __typeof( ((struct drm_crtc *)0)->base ) *__mptr =
 (x); (struct drm_crtc *)( (char *)__mptr - __builtin_offsetof
(struct drm_crtc, base) );})

1204__printf(6, 7)__attribute__((__format__(__kprintf__,6,7)))
1205int drm_crtc_init_with_planes(struct drm_device *dev,
	      struct drm_crtc *crtc,
	      struct drm_plane *primary,
	      struct drm_plane *cursor,
	      const struct drm_crtc_funcs *funcs,
	      const char *name, ...);
1211void drm_crtc_cleanup(struct drm_crtc *crtc);

1213/**
* drm_crtc_index - find the index of a registered CRTC
* @crtc: CRTC to find index for
*
* Given a registered CRTC, return the index of that CRTC within a DRM
* device's list of CRTCs.
*/
1220static inline unsigned int drm_crtc_index(const struct drm_crtc *crtc)
1221{
return crtc->index;
1223}

1225/**
* drm_crtc_mask - find the mask of a registered CRTC
* @crtc: CRTC to find mask for
*
* Given a registered CRTC, return the mask bit of that CRTC for the
* &drm_encoder.possible_crtcs and &drm_plane.possible_crtcs fields.
*/
1232static inline uint32_t drm_crtc_mask(const struct drm_crtc *crtc)
1233{
return 1 << drm_crtc_index(crtc);
1235}

1237int drm_mode_set_config_internal(struct drm_mode_set *set);
1238struct drm_crtc *drm_crtc_from_index(struct drm_device *dev, int idx);

1240/**
* drm_crtc_find - look up a CRTC object from its ID
* @dev: DRM device
* @file_priv: drm file to check for lease against.
* @id: &drm_mode_object ID
*
* This can be used to look up a CRTC from its userspace ID. Only used by
* drivers for legacy IOCTLs and interface, nowadays extensions to the KMS
* userspace interface should be done using &drm_property.
*/
1250static inline struct drm_crtc *drm_crtc_find(struct drm_device *dev,
struct drm_file *file_priv,
uint32_t id)
1253{
struct drm_mode_object *mo;
mo = drm_mode_object_find(dev, file_priv, id, DRM_MODE_OBJECT_CRTC0xcccccccc);
return mo ? obj_to_crtc(mo)({ const __typeof( ((struct drm_crtc *)0)->base ) *__mptr =
 (mo); (struct drm_crtc *)( (char *)__mptr - __builtin_offsetof
(struct drm_crtc, base) );}) : NULL((void *)0);
13
←
Assuming 'mo' is non-null, which participates in a condition later→
14
←
'?' condition is true→
15
←
Returning pointer, which participates in a condition later→
1257}

1259/**
* drm_for_each_crtc - iterate over all CRTCs
* @crtc: a &struct drm_crtc as the loop cursor
* @dev: the &struct drm_device
*
* Iterate over all CRTCs of @dev.
*/
1266#define drm_for_each_crtc(crtc, dev)for (crtc = ({ const __typeof( ((__typeof(*crtc) *)0)->head
 ) *__mptr = ((&(dev)->mode_config.crtc_list)->next
); (__typeof(*crtc) *)( (char *)__mptr - __builtin_offsetof(__typeof
(*crtc), head) );}); &crtc->head != (&(dev)->mode_config
.crtc_list); crtc = ({ const __typeof( ((__typeof(*crtc) *)0)
->head ) *__mptr = (crtc->head.next); (__typeof(*crtc) *
)( (char *)__mptr - __builtin_offsetof(__typeof(*crtc), head)
 );})) \
list_for_each_entry(crtc, &(dev)->mode_config.crtc_list, head)for (crtc = ({ const __typeof( ((__typeof(*crtc) *)0)->head
 ) *__mptr = ((&(dev)->mode_config.crtc_list)->next
); (__typeof(*crtc) *)( (char *)__mptr - __builtin_offsetof(__typeof
(*crtc), head) );}); &crtc->head != (&(dev)->mode_config
.crtc_list); crtc = ({ const __typeof( ((__typeof(*crtc) *)0)
->head ) *__mptr = (crtc->head.next); (__typeof(*crtc) *
)( (char *)__mptr - __builtin_offsetof(__typeof(*crtc), head)
 );}))

1269#endif /* __DRM_CRTC_H__ */

←

/usr/src/sys/dev/pci/drm/include/linux/slab.h

1/* Public domain. */
2 
3#ifndef _LINUX_SLAB_H
4#define _LINUX_SLAB_H
5 
6#include <sys/types.h>
7#include <sys/malloc.h>
8 
9#include <linux/types.h>
10#include <linux/workqueue.h>
11#include <linux/gfp.h>
12 
13#include <linux/processor.h>	/* for CACHELINESIZE */
14 
15static inline void *
16kmalloc(size_t size, int flags)
17{
18	return malloc(size, M_DRM145, flags);
19}
20 
21static inline void *
22kmalloc_array(size_t n, size_t size, int flags)
23{
24	if (n46.1
'n' is not equal to 0
46.1
'n' is not equal to 0
46.1
'n' is not equal to 0
46.1
'n' is not equal to 0
 != 0 && SIZE_MAX0xffffffffffffffffUL / n < size)
47
←
Assuming the condition is false→
48
←
Taking false branch→
25		return NULL((void *)0);
26	return malloc(n * size, M_DRM145, flags);
49
←
Storing uninitialized value→
50
←
Returning pointer, which participates in a condition later→
27}
28 
29static inline void *
30kcalloc(size_t n, size_t size, int flags)
31{
32	if (n != 0 && SIZE_MAX0xffffffffffffffffUL / n < size)
33		return NULL((void *)0);
34	return malloc(n * size, M_DRM145, flags | M_ZERO0x0008);
35}
36 
37static inline void *
38kzalloc(size_t size, int flags)
39{
40	return malloc(size, M_DRM145, flags | M_ZERO0x0008);
41}
42 
43static inline void
44kfree(const void *objp)
45{
46	free((void *)objp, M_DRM145, 0);
47}
48 
49#endif