[mirror_ubuntu-jammy-kernel.git] / drivers / gpu / host1x / job.c

/*
 * Tegra host1x Job
 *
 * Copyright (c) 2010-2015, NVIDIA Corporation.
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms and conditions of the GNU General Public License,
 * version 2, as published by the Free Software Foundation.
 *
 * This program is distributed in the hope it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
 * more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */

#include <linux/dma-mapping.h>
#include <linux/err.h>
#include <linux/host1x.h>
#include <linux/kref.h>
#include <linux/module.h>
#include <linux/scatterlist.h>
#include <linux/slab.h>
#include <linux/vmalloc.h>
#include <trace/events/host1x.h>

#include "channel.h"
#include "dev.h"
#include "job.h"
#include "syncpt.h"

#define HOST1X_WAIT_SYNCPT_OFFSET 0x8

struct host1x_job *host1x_job_alloc(struct host1x_channel *ch,
				    u32 num_cmdbufs, u32 num_relocs)
{
	struct host1x_job *job = NULL;
	unsigned int num_unpins = num_cmdbufs + num_relocs;
	u64 total;
	void *mem;

	/* Check that we're not going to overflow */
	total = sizeof(struct host1x_job) +
		(u64)num_relocs * sizeof(struct host1x_reloc) +
		(u64)num_unpins * sizeof(struct host1x_job_unpin_data) +
		(u64)num_cmdbufs * sizeof(struct host1x_job_gather) +
		(u64)num_unpins * sizeof(dma_addr_t) +
		(u64)num_unpins * sizeof(u32 *);
	if (total > ULONG_MAX)
		return NULL;

	mem = job = kzalloc(total, GFP_KERNEL);
	if (!job)
		return NULL;

	kref_init(&job->ref);
	job->channel = ch;

	/* Redistribute memory to the structs  */
	mem += sizeof(struct host1x_job);
	job->relocarray = num_relocs ? mem : NULL;
	mem += num_relocs * sizeof(struct host1x_reloc);
	job->unpins = num_unpins ? mem : NULL;
	mem += num_unpins * sizeof(struct host1x_job_unpin_data);
	job->gathers = num_cmdbufs ? mem : NULL;
	mem += num_cmdbufs * sizeof(struct host1x_job_gather);
	job->addr_phys = num_unpins ? mem : NULL;

	job->reloc_addr_phys = job->addr_phys;
	job->gather_addr_phys = &job->addr_phys[num_relocs];

	return job;
}
EXPORT_SYMBOL(host1x_job_alloc);

struct host1x_job *host1x_job_get(struct host1x_job *job)
{
	kref_get(&job->ref);
	return job;
}
EXPORT_SYMBOL(host1x_job_get);

static void job_free(struct kref *ref)
{
	struct host1x_job *job = container_of(ref, struct host1x_job, ref);

	kfree(job);
}

void host1x_job_put(struct host1x_job *job)
{
	kref_put(&job->ref, job_free);
}
EXPORT_SYMBOL(host1x_job_put);

void host1x_job_add_gather(struct host1x_job *job, struct host1x_bo *bo,
			   u32 words, u32 offset)
{
	struct host1x_job_gather *cur_gather = &job->gathers[job->num_gathers];

	cur_gather->words = words;
	cur_gather->bo = bo;
	cur_gather->offset = offset;
	job->num_gathers++;
}
EXPORT_SYMBOL(host1x_job_add_gather);

static unsigned int pin_job(struct host1x *host, struct host1x_job *job)
{
	unsigned int i;
	int err;

	job->num_unpins = 0;

	for (i = 0; i < job->num_relocs; i++) {
		struct host1x_reloc *reloc = &job->relocarray[i];
		struct sg_table *sgt;
		dma_addr_t phys_addr;

		reloc->target.bo = host1x_bo_get(reloc->target.bo);
		if (!reloc->target.bo) {
			err = -EINVAL;
			goto unpin;
		}

		phys_addr = host1x_bo_pin(reloc->target.bo, &sgt);

		job->addr_phys[job->num_unpins] = phys_addr;
		job->unpins[job->num_unpins].bo = reloc->target.bo;
		job->unpins[job->num_unpins].sgt = sgt;
		job->num_unpins++;
	}

	for (i = 0; i < job->num_gathers; i++) {
		struct host1x_job_gather *g = &job->gathers[i];
		size_t gather_size = 0;
		struct scatterlist *sg;
		struct sg_table *sgt;
		dma_addr_t phys_addr;
		unsigned long shift;
		struct iova *alloc;
		unsigned int j;

		g->bo = host1x_bo_get(g->bo);
		if (!g->bo) {
			err = -EINVAL;
			goto unpin;
		}

		phys_addr = host1x_bo_pin(g->bo, &sgt);

		if (!IS_ENABLED(CONFIG_TEGRA_HOST1X_FIREWALL) && host->domain) {
			for_each_sg(sgt->sgl, sg, sgt->nents, j)
				gather_size += sg->length;
			gather_size = iova_align(&host->iova, gather_size);

			shift = iova_shift(&host->iova);
			alloc = alloc_iova(&host->iova, gather_size >> shift,
					   host->iova_end >> shift, true);
			if (!alloc) {
				err = -ENOMEM;
				goto unpin;
			}

			err = iommu_map_sg(host->domain,
					iova_dma_addr(&host->iova, alloc),
					sgt->sgl, sgt->nents, IOMMU_READ);
			if (err == 0) {
				__free_iova(&host->iova, alloc);
				err = -EINVAL;
				goto unpin;
			}

			job->addr_phys[job->num_unpins] =
				iova_dma_addr(&host->iova, alloc);
			job->unpins[job->num_unpins].size = gather_size;
		} else {
			job->addr_phys[job->num_unpins] = phys_addr;
		}

		job->gather_addr_phys[i] = job->addr_phys[job->num_unpins];

		job->unpins[job->num_unpins].bo = g->bo;
		job->unpins[job->num_unpins].sgt = sgt;
		job->num_unpins++;
	}

	return 0;

unpin:
	host1x_job_unpin(job);
	return err;
}

static int do_relocs(struct host1x_job *job, struct host1x_job_gather *g)
{
	u32 last_page = ~0;
	void *cmdbuf_page_addr = NULL;
	struct host1x_bo *cmdbuf = g->bo;
	unsigned int i;

	/* pin & patch the relocs for one gather */
	for (i = 0; i < job->num_relocs; i++) {
		struct host1x_reloc *reloc = &job->relocarray[i];
		u32 reloc_addr = (job->reloc_addr_phys[i] +
				  reloc->target.offset) >> reloc->shift;
		u32 *target;

		/* skip all other gathers */
		if (cmdbuf != reloc->cmdbuf.bo)
			continue;

		if (IS_ENABLED(CONFIG_TEGRA_HOST1X_FIREWALL)) {
			target = (u32 *)job->gather_copy_mapped +
					reloc->cmdbuf.offset / sizeof(u32) +
						g->offset / sizeof(u32);
			goto patch_reloc;
		}

		if (last_page != reloc->cmdbuf.offset >> PAGE_SHIFT) {
			if (cmdbuf_page_addr)
				host1x_bo_kunmap(cmdbuf, last_page,
						 cmdbuf_page_addr);

			cmdbuf_page_addr = host1x_bo_kmap(cmdbuf,
					reloc->cmdbuf.offset >> PAGE_SHIFT);
			last_page = reloc->cmdbuf.offset >> PAGE_SHIFT;

			if (unlikely(!cmdbuf_page_addr)) {
				pr_err("Could not map cmdbuf for relocation\n");
				return -ENOMEM;
			}
		}

		target = cmdbuf_page_addr + (reloc->cmdbuf.offset & ~PAGE_MASK);
patch_reloc:
		*target = reloc_addr;
	}

	if (cmdbuf_page_addr)
		host1x_bo_kunmap(cmdbuf, last_page, cmdbuf_page_addr);

	return 0;
}

static bool check_reloc(struct host1x_reloc *reloc, struct host1x_bo *cmdbuf,
			unsigned int offset)
{
	offset *= sizeof(u32);

	if (reloc->cmdbuf.bo != cmdbuf || reloc->cmdbuf.offset != offset)
		return false;

	/* relocation shift value validation isn't implemented yet */
	if (reloc->shift)
		return false;

	return true;
}

struct host1x_firewall {
	struct host1x_job *job;
	struct device *dev;

	unsigned int num_relocs;
	struct host1x_reloc *reloc;

	struct host1x_bo *cmdbuf;
	unsigned int offset;

	u32 words;
	u32 class;
	u32 reg;
	u32 mask;
	u32 count;
};

static int check_register(struct host1x_firewall *fw, unsigned long offset)
{
	if (!fw->job->is_addr_reg)
		return 0;

	if (fw->job->is_addr_reg(fw->dev, fw->class, offset)) {
		if (!fw->num_relocs)
			return -EINVAL;

		if (!check_reloc(fw->reloc, fw->cmdbuf, fw->offset))
			return -EINVAL;

		fw->num_relocs--;
		fw->reloc++;
	}

	return 0;
}

static int check_class(struct host1x_firewall *fw, u32 class)
{
	if (!fw->job->is_valid_class) {
		if (fw->class != class)
			return -EINVAL;
	} else {
		if (!fw->job->is_valid_class(fw->class))
			return -EINVAL;
	}

	return 0;
}

static int check_mask(struct host1x_firewall *fw)
{
	u32 mask = fw->mask;
	u32 reg = fw->reg;
	int ret;

	while (mask) {
		if (fw->words == 0)
			return -EINVAL;

		if (mask & 1) {
			ret = check_register(fw, reg);
			if (ret < 0)
				return ret;

			fw->words--;
			fw->offset++;
		}
		mask >>= 1;
		reg++;
	}

	return 0;
}

static int check_incr(struct host1x_firewall *fw)
{
	u32 count = fw->count;
	u32 reg = fw->reg;
	int ret;

	while (count) {
		if (fw->words == 0)
			return -EINVAL;

		ret = check_register(fw, reg);
		if (ret < 0)
			return ret;

		reg++;
		fw->words--;
		fw->offset++;
		count--;
	}

	return 0;
}

static int check_nonincr(struct host1x_firewall *fw)
{
	u32 count = fw->count;
	int ret;

	while (count) {
		if (fw->words == 0)
			return -EINVAL;

		ret = check_register(fw, fw->reg);
		if (ret < 0)
			return ret;

		fw->words--;
		fw->offset++;
		count--;
	}

	return 0;
}

static int validate(struct host1x_firewall *fw, struct host1x_job_gather *g)
{
	u32 *cmdbuf_base = (u32 *)fw->job->gather_copy_mapped +
		(g->offset / sizeof(u32));
	u32 job_class = fw->class;
	int err = 0;

	fw->words = g->words;
	fw->cmdbuf = g->bo;
	fw->offset = 0;

	while (fw->words && !err) {
		u32 word = cmdbuf_base[fw->offset];
		u32 opcode = (word & 0xf0000000) >> 28;

		fw->mask = 0;
		fw->reg = 0;
		fw->count = 0;
		fw->words--;
		fw->offset++;

		switch (opcode) {
		case 0:
			fw->class = word >> 6 & 0x3ff;
			fw->mask = word & 0x3f;
			fw->reg = word >> 16 & 0xfff;
			err = check_class(fw, job_class);
			if (!err)
				err = check_mask(fw);
			if (err)
				goto out;
			break;
		case 1:
			fw->reg = word >> 16 & 0xfff;
			fw->count = word & 0xffff;
			err = check_incr(fw);
			if (err)
				goto out;
			break;

		case 2:
			fw->reg = word >> 16 & 0xfff;
			fw->count = word & 0xffff;
			err = check_nonincr(fw);
			if (err)
				goto out;
			break;

		case 3:
			fw->mask = word & 0xffff;
			fw->reg = word >> 16 & 0xfff;
			err = check_mask(fw);
			if (err)
				goto out;
			break;
		case 4:
		case 14:
			break;
		default:
			err = -EINVAL;
			break;
		}
	}

out:
	return err;
}

static inline int copy_gathers(struct host1x_job *job, struct device *dev)
{
	struct host1x_firewall fw;
	size_t size = 0;
	size_t offset = 0;
	unsigned int i;

	fw.job = job;
	fw.dev = dev;
	fw.reloc = job->relocarray;
	fw.num_relocs = job->num_relocs;
	fw.class = job->class;

	for (i = 0; i < job->num_gathers; i++) {
		struct host1x_job_gather *g = &job->gathers[i];

		size += g->words * sizeof(u32);
	}

	/*
	 * Try a non-blocking allocation from a higher priority pools first,
	 * as awaiting for the allocation here is a major performance hit.
	 */
	job->gather_copy_mapped = dma_alloc_wc(dev, size, &job->gather_copy,
					       GFP_NOWAIT);

	/* the higher priority allocation failed, try the generic-blocking */
	if (!job->gather_copy_mapped)
		job->gather_copy_mapped = dma_alloc_wc(dev, size,
						       &job->gather_copy,
						       GFP_KERNEL);
	if (!job->gather_copy_mapped)
		return -ENOMEM;

	job->gather_copy_size = size;

	for (i = 0; i < job->num_gathers; i++) {
		struct host1x_job_gather *g = &job->gathers[i];
		void *gather;

		/* Copy the gather */
		gather = host1x_bo_mmap(g->bo);
		memcpy(job->gather_copy_mapped + offset, gather + g->offset,
		       g->words * sizeof(u32));
		host1x_bo_munmap(g->bo, gather);

		/* Store the location in the buffer */
		g->base = job->gather_copy;
		g->offset = offset;

		/* Validate the job */
		if (validate(&fw, g))
			return -EINVAL;

		offset += g->words * sizeof(u32);
	}

	/* No relocs should remain at this point */
	if (fw.num_relocs)
		return -EINVAL;

	return 0;
}

int host1x_job_pin(struct host1x_job *job, struct device *dev)
{
	int err;
	unsigned int i, j;
	struct host1x *host = dev_get_drvdata(dev->parent);

	/* pin memory */
	err = pin_job(host, job);
	if (err)
		goto out;

	if (IS_ENABLED(CONFIG_TEGRA_HOST1X_FIREWALL)) {
		err = copy_gathers(job, dev);
		if (err)
			goto out;
	}

	/* patch gathers */
	for (i = 0; i < job->num_gathers; i++) {
		struct host1x_job_gather *g = &job->gathers[i];

		/* process each gather mem only once */
		if (g->handled)
			continue;

		/* copy_gathers() sets gathers base if firewall is enabled */
		if (!IS_ENABLED(CONFIG_TEGRA_HOST1X_FIREWALL))
			g->base = job->gather_addr_phys[i];

		for (j = i + 1; j < job->num_gathers; j++) {
			if (job->gathers[j].bo == g->bo) {
				job->gathers[j].handled = true;
				job->gathers[j].base = g->base;
			}
		}

		err = do_relocs(job, g);
		if (err)
			break;
	}

out:
	if (err)
		host1x_job_unpin(job);
	wmb();

	return err;
}
EXPORT_SYMBOL(host1x_job_pin);

void host1x_job_unpin(struct host1x_job *job)
{
	struct host1x *host = dev_get_drvdata(job->channel->dev->parent);
	unsigned int i;

	for (i = 0; i < job->num_unpins; i++) {
		struct host1x_job_unpin_data *unpin = &job->unpins[i];

		if (!IS_ENABLED(CONFIG_TEGRA_HOST1X_FIREWALL) && host->domain) {
			iommu_unmap(host->domain, job->addr_phys[i],
				    unpin->size);
			free_iova(&host->iova,
				iova_pfn(&host->iova, job->addr_phys[i]));
		}

		host1x_bo_unpin(unpin->bo, unpin->sgt);
		host1x_bo_put(unpin->bo);
	}

	job->num_unpins = 0;

	if (job->gather_copy_size)
		dma_free_wc(job->channel->dev, job->gather_copy_size,
			    job->gather_copy_mapped, job->gather_copy);
}
EXPORT_SYMBOL(host1x_job_unpin);

/*
 * Debug routine used to dump job entries
 */
void host1x_job_dump(struct device *dev, struct host1x_job *job)
{
	dev_dbg(dev, "    SYNCPT_ID   %d\n", job->syncpt_id);
	dev_dbg(dev, "    SYNCPT_VAL  %d\n", job->syncpt_end);
	dev_dbg(dev, "    FIRST_GET   0x%x\n", job->first_get);
	dev_dbg(dev, "    TIMEOUT     %d\n", job->timeout);
	dev_dbg(dev, "    NUM_SLOTS   %d\n", job->num_slots);
	dev_dbg(dev, "    NUM_HANDLES %d\n", job->num_unpins);
}
Commit	Line	Data
6579324a TB	1	/*
	2	* Tegra host1x Job
	3	*
f08ef2d1	4	* Copyright (c) 2010-2015, NVIDIA Corporation.
6579324a TB	5	*
	6	* This program is free software; you can redistribute it and/or modify it
	7	* under the terms and conditions of the GNU General Public License,
	8	* version 2, as published by the Free Software Foundation.
	9	*
	10	* This program is distributed in the hope it will be useful, but WITHOUT
	11	* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
	12	* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
	13	* more details.
	14	*
	15	* You should have received a copy of the GNU General Public License
	16	* along with this program. If not, see <http://www.gnu.org/licenses/>.
	17	*/
	18
	19	#include <linux/dma-mapping.h>
	20	#include <linux/err.h>
35d747a8	21	#include <linux/host1x.h>
6579324a TB	22	#include <linux/kref.h>
	23	#include <linux/module.h>
	24	#include <linux/scatterlist.h>
	25	#include <linux/slab.h>
	26	#include <linux/vmalloc.h>
	27	#include <trace/events/host1x.h>
	28
	29	#include "channel.h"
	30	#include "dev.h"
6579324a TB	31	#include "job.h"
	32	#include "syncpt.h"
	33
a47ac10e DO	34	#define HOST1X_WAIT_SYNCPT_OFFSET 0x8
a47ac10e DO	35
6579324a	36	struct host1x_job host1x_job_alloc(struct host1x_channel ch,
24c94e16	37	u32 num_cmdbufs, u32 num_relocs)
6579324a TB	38	{
	39	struct host1x_job *job = NULL;
	40	unsigned int num_unpins = num_cmdbufs + num_relocs;
	41	u64 total;
	42	void *mem;
	43
	44	/* Check that we're not going to overflow */
	45	total = sizeof(struct host1x_job) +
f5fda676 DC	46	(u64)num_relocs * sizeof(struct host1x_reloc) +
f5fda676 DC	47	(u64)num_unpins * sizeof(struct host1x_job_unpin_data) +
f5fda676 DC	48	(u64)num_cmdbufs * sizeof(struct host1x_job_gather) +
	49	(u64)num_unpins * sizeof(dma_addr_t) +
	50	(u64)num_unpins * sizeof(u32 *);
6579324a TB	51	if (total > ULONG_MAX)
	52	return NULL;
	53
	54	mem = job = kzalloc(total, GFP_KERNEL);
	55	if (!job)
	56	return NULL;
	57
	58	kref_init(&job->ref);
	59	job->channel = ch;
	60
	61	/* Redistribute memory to the structs */
	62	mem += sizeof(struct host1x_job);
	63	job->relocarray = num_relocs ? mem : NULL;
	64	mem += num_relocs * sizeof(struct host1x_reloc);
	65	job->unpins = num_unpins ? mem : NULL;
	66	mem += num_unpins * sizeof(struct host1x_job_unpin_data);
6579324a TB	67	job->gathers = num_cmdbufs ? mem : NULL;
	68	mem += num_cmdbufs * sizeof(struct host1x_job_gather);
	69	job->addr_phys = num_unpins ? mem : NULL;
	70
	71	job->reloc_addr_phys = job->addr_phys;
	72	job->gather_addr_phys = &job->addr_phys[num_relocs];
	73
	74	return job;
	75	}
fae798a1	76	EXPORT_SYMBOL(host1x_job_alloc);
6579324a TB	77
	78	struct host1x_job host1x_job_get(struct host1x_job job)
	79	{
	80	kref_get(&job->ref);
	81	return job;
	82	}
fae798a1	83	EXPORT_SYMBOL(host1x_job_get);
6579324a TB	84
	85	static void job_free(struct kref *ref)
	86	{
	87	struct host1x_job *job = container_of(ref, struct host1x_job, ref);
	88
	89	kfree(job);
	90	}
	91
	92	void host1x_job_put(struct host1x_job *job)
	93	{
	94	kref_put(&job->ref, job_free);
	95	}
fae798a1	96	EXPORT_SYMBOL(host1x_job_put);
6579324a TB	97
	98	void host1x_job_add_gather(struct host1x_job job, struct host1x_bo bo,
	99	u32 words, u32 offset)
	100	{
	101	struct host1x_job_gather *cur_gather = &job->gathers[job->num_gathers];
	102
	103	cur_gather->words = words;
	104	cur_gather->bo = bo;
	105	cur_gather->offset = offset;
	106	job->num_gathers++;
	107	}
fae798a1	108	EXPORT_SYMBOL(host1x_job_add_gather);
6579324a	109
404bfb78	110	static unsigned int pin_job(struct host1x host, struct host1x_job job)
6579324a TB	111	{
6579324a TB	112	unsigned int i;
404bfb78	113	int err;
6579324a TB	114
	115	job->num_unpins = 0;
	116
	117	for (i = 0; i < job->num_relocs; i++) {
	118	struct host1x_reloc *reloc = &job->relocarray[i];
	119	struct sg_table *sgt;
	120	dma_addr_t phys_addr;
	121
961e3bea	122	reloc->target.bo = host1x_bo_get(reloc->target.bo);
404bfb78 MP	123	if (!reloc->target.bo) {
404bfb78 MP	124	err = -EINVAL;
6579324a	125	goto unpin;
404bfb78	126	}
6579324a	127
961e3bea	128	phys_addr = host1x_bo_pin(reloc->target.bo, &sgt);
6579324a TB	129
6579324a TB	130	job->addr_phys[job->num_unpins] = phys_addr;
961e3bea	131	job->unpins[job->num_unpins].bo = reloc->target.bo;
6579324a TB	132	job->unpins[job->num_unpins].sgt = sgt;
	133	job->num_unpins++;
	134	}
	135
	136	for (i = 0; i < job->num_gathers; i++) {
	137	struct host1x_job_gather *g = &job->gathers[i];
404bfb78 MP	138	size_t gather_size = 0;
404bfb78 MP	139	struct scatterlist *sg;
6579324a TB	140	struct sg_table *sgt;
6579324a TB	141	dma_addr_t phys_addr;
404bfb78 MP	142	unsigned long shift;
	143	struct iova *alloc;
	144	unsigned int j;
6579324a TB	145
6579324a TB	146	g->bo = host1x_bo_get(g->bo);
404bfb78 MP	147	if (!g->bo) {
404bfb78 MP	148	err = -EINVAL;
6579324a	149	goto unpin;
404bfb78	150	}
6579324a TB	151
6579324a TB	152	phys_addr = host1x_bo_pin(g->bo, &sgt);
404bfb78 MP	153
	154	if (!IS_ENABLED(CONFIG_TEGRA_HOST1X_FIREWALL) && host->domain) {
	155	for_each_sg(sgt->sgl, sg, sgt->nents, j)
	156	gather_size += sg->length;
	157	gather_size = iova_align(&host->iova, gather_size);
	158
	159	shift = iova_shift(&host->iova);
	160	alloc = alloc_iova(&host->iova, gather_size >> shift,
	161	host->iova_end >> shift, true);
	162	if (!alloc) {
	163	err = -ENOMEM;
	164	goto unpin;
	165	}
	166
	167	err = iommu_map_sg(host->domain,
	168	iova_dma_addr(&host->iova, alloc),
	169	sgt->sgl, sgt->nents, IOMMU_READ);
	170	if (err == 0) {
	171	__free_iova(&host->iova, alloc);
	172	err = -EINVAL;
	173	goto unpin;
	174	}
	175
	176	job->addr_phys[job->num_unpins] =
	177	iova_dma_addr(&host->iova, alloc);
	178	job->unpins[job->num_unpins].size = gather_size;
	179	} else {
	180	job->addr_phys[job->num_unpins] = phys_addr;
	181	}
	182
	183	job->gather_addr_phys[i] = job->addr_phys[job->num_unpins];
6579324a	184
6579324a TB	185	job->unpins[job->num_unpins].bo = g->bo;
	186	job->unpins[job->num_unpins].sgt = sgt;
	187	job->num_unpins++;
	188	}
	189
404bfb78	190	return 0;
6579324a TB	191
	192	unpin:
	193	host1x_job_unpin(job);
404bfb78	194	return err;
6579324a TB	195	}
6579324a TB	196
47f89c10	197	static int do_relocs(struct host1x_job job, struct host1x_job_gather g)
6579324a	198	{
6579324a TB	199	u32 last_page = ~0;
6579324a TB	200	void *cmdbuf_page_addr = NULL;
47f89c10	201	struct host1x_bo *cmdbuf = g->bo;
d4ad3ad9	202	unsigned int i;
6579324a TB	203
6579324a TB	204	/* pin & patch the relocs for one gather */
3364cd28	205	for (i = 0; i < job->num_relocs; i++) {
6579324a TB	206	struct host1x_reloc *reloc = &job->relocarray[i];
6579324a TB	207	u32 reloc_addr = (job->reloc_addr_phys[i] +
961e3bea	208	reloc->target.offset) >> reloc->shift;
6579324a TB	209	u32 *target;
	210
	211	/* skip all other gathers */
961e3bea	212	if (cmdbuf != reloc->cmdbuf.bo)
6579324a	213	continue;
6579324a	214
47f89c10 DO	215	if (IS_ENABLED(CONFIG_TEGRA_HOST1X_FIREWALL)) {
	216	target = (u32 *)job->gather_copy_mapped +
	217	reloc->cmdbuf.offset / sizeof(u32) +
	218	g->offset / sizeof(u32);
	219	goto patch_reloc;
	220	}
	221
961e3bea	222	if (last_page != reloc->cmdbuf.offset >> PAGE_SHIFT) {
6579324a TB	223	if (cmdbuf_page_addr)
	224	host1x_bo_kunmap(cmdbuf, last_page,
	225	cmdbuf_page_addr);
	226
	227	cmdbuf_page_addr = host1x_bo_kmap(cmdbuf,
961e3bea TR	228	reloc->cmdbuf.offset >> PAGE_SHIFT);
961e3bea TR	229	last_page = reloc->cmdbuf.offset >> PAGE_SHIFT;
6579324a TB	230
	231	if (unlikely(!cmdbuf_page_addr)) {
	232	pr_err("Could not map cmdbuf for relocation\n");
	233	return -ENOMEM;
	234	}
	235	}
	236
961e3bea	237	target = cmdbuf_page_addr + (reloc->cmdbuf.offset & ~PAGE_MASK);
47f89c10	238	patch_reloc:
6579324a	239	*target = reloc_addr;
6579324a TB	240	}
	241
	242	if (cmdbuf_page_addr)
	243	host1x_bo_kunmap(cmdbuf, last_page, cmdbuf_page_addr);
	244
	245	return 0;
	246	}
	247
5060d8ec	248	static bool check_reloc(struct host1x_reloc reloc, struct host1x_bo cmdbuf,
37857cd2	249	unsigned int offset)
6579324a TB	250	{
	251	offset *= sizeof(u32);
	252
961e3bea	253	if (reloc->cmdbuf.bo != cmdbuf \|\| reloc->cmdbuf.offset != offset)
5060d8ec	254	return false;
6579324a	255
571cbf70 DO	256	/* relocation shift value validation isn't implemented yet */
	257	if (reloc->shift)
	258	return false;
	259
5060d8ec	260	return true;
6579324a TB	261	}
	262
	263	struct host1x_firewall {
	264	struct host1x_job *job;
	265	struct device *dev;
	266
	267	unsigned int num_relocs;
	268	struct host1x_reloc *reloc;
	269
d7fbcf47	270	struct host1x_bo *cmdbuf;
6579324a TB	271	unsigned int offset;
	272
	273	u32 words;
	274	u32 class;
	275	u32 reg;
	276	u32 mask;
	277	u32 count;
	278	};
	279
d77563ff TR	280	static int check_register(struct host1x_firewall *fw, unsigned long offset)
d77563ff TR	281	{
0f563a4b DO	282	if (!fw->job->is_addr_reg)
	283	return 0;
	284
d77563ff TR	285	if (fw->job->is_addr_reg(fw->dev, fw->class, offset)) {
	286	if (!fw->num_relocs)
	287	return -EINVAL;
	288
	289	if (!check_reloc(fw->reloc, fw->cmdbuf, fw->offset))
	290	return -EINVAL;
	291
	292	fw->num_relocs--;
	293	fw->reloc++;
	294	}
	295
	296	return 0;
	297	}
	298
0f563a4b DO	299	static int check_class(struct host1x_firewall *fw, u32 class)
	300	{
	301	if (!fw->job->is_valid_class) {
	302	if (fw->class != class)
	303	return -EINVAL;
	304	} else {
	305	if (!fw->job->is_valid_class(fw->class))
	306	return -EINVAL;
	307	}
	308
	309	return 0;
	310	}
	311
6579324a TB	312	static int check_mask(struct host1x_firewall *fw)
	313	{
	314	u32 mask = fw->mask;
	315	u32 reg = fw->reg;
d77563ff	316	int ret;
6579324a TB	317
	318	while (mask) {
	319	if (fw->words == 0)
	320	return -EINVAL;
	321
	322	if (mask & 1) {
d77563ff TR	323	ret = check_register(fw, reg);
	324	if (ret < 0)
	325	return ret;
	326
6579324a TB	327	fw->words--;
	328	fw->offset++;
	329	}
	330	mask >>= 1;
	331	reg++;
	332	}
	333
	334	return 0;
	335	}
	336
	337	static int check_incr(struct host1x_firewall *fw)
	338	{
	339	u32 count = fw->count;
	340	u32 reg = fw->reg;
d77563ff	341	int ret;
6579324a	342
64c173d3	343	while (count) {
6579324a TB	344	if (fw->words == 0)
	345	return -EINVAL;
	346
d77563ff TR	347	ret = check_register(fw, reg);
	348	if (ret < 0)
	349	return ret;
	350
6579324a TB	351	reg++;
	352	fw->words--;
	353	fw->offset++;
	354	count--;
	355	}
	356
	357	return 0;
	358	}
	359
	360	static int check_nonincr(struct host1x_firewall *fw)
	361	{
6579324a	362	u32 count = fw->count;
d77563ff	363	int ret;
6579324a TB	364
	365	while (count) {
	366	if (fw->words == 0)
	367	return -EINVAL;
	368
d77563ff TR	369	ret = check_register(fw, fw->reg);
	370	if (ret < 0)
	371	return ret;
	372
6579324a TB	373	fw->words--;
	374	fw->offset++;
	375	count--;
	376	}
	377
	378	return 0;
	379	}
	380
afac0e43	381	static int validate(struct host1x_firewall fw, struct host1x_job_gather g)
6579324a	382	{
3364cd28 AM	383	u32 cmdbuf_base = (u32 )fw->job->gather_copy_mapped +
3364cd28 AM	384	(g->offset / sizeof(u32));
0f563a4b	385	u32 job_class = fw->class;
6579324a	386	int err = 0;
6579324a	387
afac0e43	388	fw->words = g->words;
d7fbcf47	389	fw->cmdbuf = g->bo;
afac0e43	390	fw->offset = 0;
6579324a	391
afac0e43 TB	392	while (fw->words && !err) {
afac0e43 TB	393	u32 word = cmdbuf_base[fw->offset];
6579324a TB	394	u32 opcode = (word & 0xf0000000) >> 28;
6579324a TB	395
afac0e43 TB	396	fw->mask = 0;
	397	fw->reg = 0;
	398	fw->count = 0;
	399	fw->words--;
	400	fw->offset++;
6579324a TB	401
	402	switch (opcode) {
	403	case 0:
afac0e43 TB	404	fw->class = word >> 6 & 0x3ff;
	405	fw->mask = word & 0x3f;
	406	fw->reg = word >> 16 & 0xfff;
0f563a4b DO	407	err = check_class(fw, job_class);
	408	if (!err)
	409	err = check_mask(fw);
6579324a TB	410	if (err)
	411	goto out;
	412	break;
	413	case 1:
afac0e43 TB	414	fw->reg = word >> 16 & 0xfff;
	415	fw->count = word & 0xffff;
	416	err = check_incr(fw);
6579324a TB	417	if (err)
	418	goto out;
	419	break;
	420
	421	case 2:
afac0e43 TB	422	fw->reg = word >> 16 & 0xfff;
	423	fw->count = word & 0xffff;
	424	err = check_nonincr(fw);
6579324a TB	425	if (err)
	426	goto out;
	427	break;
	428
	429	case 3:
afac0e43 TB	430	fw->mask = word & 0xffff;
	431	fw->reg = word >> 16 & 0xfff;
	432	err = check_mask(fw);
6579324a TB	433	if (err)
	434	goto out;
	435	break;
	436	case 4:
6579324a TB	437	case 14:
	438	break;
	439	default:
	440	err = -EINVAL;
	441	break;
	442	}
	443	}
	444
6579324a	445	out:
6579324a TB	446	return err;
	447	}
	448
	449	static inline int copy_gathers(struct host1x_job job, struct device dev)
	450	{
3364cd28	451	struct host1x_firewall fw;
6579324a TB	452	size_t size = 0;
6579324a TB	453	size_t offset = 0;
d4ad3ad9	454	unsigned int i;
6579324a	455
3364cd28 AM	456	fw.job = job;
	457	fw.dev = dev;
	458	fw.reloc = job->relocarray;
	459	fw.num_relocs = job->num_relocs;
3833d16f	460	fw.class = job->class;
3364cd28	461
6579324a TB	462	for (i = 0; i < job->num_gathers; i++) {
6579324a TB	463	struct host1x_job_gather *g = &job->gathers[i];
6df633d0	464
6579324a TB	465	size += g->words * sizeof(u32);
	466	}
	467
43240bbd DO	468	/*
	469	* Try a non-blocking allocation from a higher priority pools first,
	470	* as awaiting for the allocation here is a major performance hit.
	471	*/
f6e45661	472	job->gather_copy_mapped = dma_alloc_wc(dev, size, &job->gather_copy,
43240bbd DO	473	GFP_NOWAIT);
	474
	475	/* the higher priority allocation failed, try the generic-blocking */
	476	if (!job->gather_copy_mapped)
	477	job->gather_copy_mapped = dma_alloc_wc(dev, size,
	478	&job->gather_copy,
	479	GFP_KERNEL);
	480	if (!job->gather_copy_mapped)
745cecc0	481	return -ENOMEM;
6579324a TB	482
	483	job->gather_copy_size = size;
	484
	485	for (i = 0; i < job->num_gathers; i++) {
	486	struct host1x_job_gather *g = &job->gathers[i];
	487	void *gather;
	488
3364cd28	489	/* Copy the gather */
6579324a TB	490	gather = host1x_bo_mmap(g->bo);
	491	memcpy(job->gather_copy_mapped + offset, gather + g->offset,
	492	g->words * sizeof(u32));
	493	host1x_bo_munmap(g->bo, gather);
	494
3364cd28	495	/* Store the location in the buffer */
6579324a TB	496	g->base = job->gather_copy;
6579324a TB	497	g->offset = offset;
3364cd28 AM	498
	499	/* Validate the job */
	500	if (validate(&fw, g))
	501	return -EINVAL;
6579324a TB	502
	503	offset += g->words * sizeof(u32);
	504	}
	505
24c94e16 TR	506	/* No relocs should remain at this point */
24c94e16 TR	507	if (fw.num_relocs)
a9ff9995 EFL	508	return -EINVAL;
a9ff9995 EFL	509
6579324a TB	510	return 0;
	511	}
	512
	513	int host1x_job_pin(struct host1x_job job, struct device dev)
	514	{
	515	int err;
	516	unsigned int i, j;
	517	struct host1x *host = dev_get_drvdata(dev->parent);
6579324a TB	518
6579324a TB	519	/* pin memory */
404bfb78 MP	520	err = pin_job(host, job);
404bfb78 MP	521	if (err)
6579324a TB	522	goto out;
6579324a TB	523
47f89c10 DO	524	if (IS_ENABLED(CONFIG_TEGRA_HOST1X_FIREWALL)) {
	525	err = copy_gathers(job, dev);
	526	if (err)
	527	goto out;
	528	}
	529
6579324a TB	530	/* patch gathers */
	531	for (i = 0; i < job->num_gathers; i++) {
	532	struct host1x_job_gather *g = &job->gathers[i];
	533
	534	/* process each gather mem only once */
	535	if (g->handled)
	536	continue;
	537
47f89c10 DO	538	/* copy_gathers() sets gathers base if firewall is enabled */
	539	if (!IS_ENABLED(CONFIG_TEGRA_HOST1X_FIREWALL))
	540	g->base = job->gather_addr_phys[i];
6579324a	541
f08ef2d1 AM	542	for (j = i + 1; j < job->num_gathers; j++) {
f08ef2d1 AM	543	if (job->gathers[j].bo == g->bo) {
6579324a	544	job->gathers[j].handled = true;
f08ef2d1 AM	545	job->gathers[j].base = g->base;
	546	}
	547	}
6579324a	548
47f89c10	549	err = do_relocs(job, g);
6579324a	550	if (err)
47f89c10	551	break;
6579324a TB	552	}
6579324a TB	553
6579324a	554	out:
e5855aa3 DO	555	if (err)
e5855aa3 DO	556	host1x_job_unpin(job);
6579324a TB	557	wmb();
	558
	559	return err;
	560	}
fae798a1	561	EXPORT_SYMBOL(host1x_job_pin);
6579324a TB	562
	563	void host1x_job_unpin(struct host1x_job *job)
	564	{
404bfb78	565	struct host1x *host = dev_get_drvdata(job->channel->dev->parent);
6579324a TB	566	unsigned int i;
	567
	568	for (i = 0; i < job->num_unpins; i++) {
	569	struct host1x_job_unpin_data *unpin = &job->unpins[i];
6df633d0	570
404bfb78 MP	571	if (!IS_ENABLED(CONFIG_TEGRA_HOST1X_FIREWALL) && host->domain) {
	572	iommu_unmap(host->domain, job->addr_phys[i],
	573	unpin->size);
	574	free_iova(&host->iova,
	575	iova_pfn(&host->iova, job->addr_phys[i]));
	576	}
	577
6579324a TB	578	host1x_bo_unpin(unpin->bo, unpin->sgt);
	579	host1x_bo_put(unpin->bo);
	580	}
0b8070d1	581
6579324a TB	582	job->num_unpins = 0;
	583
	584	if (job->gather_copy_size)
f6e45661	585	dma_free_wc(job->channel->dev, job->gather_copy_size,
0b8070d1	586	job->gather_copy_mapped, job->gather_copy);
6579324a	587	}
fae798a1	588	EXPORT_SYMBOL(host1x_job_unpin);
6579324a TB	589
	590	/*
	591	* Debug routine used to dump job entries
	592	*/
	593	void host1x_job_dump(struct device dev, struct host1x_job job)
	594	{
	595	dev_dbg(dev, " SYNCPT_ID %d\n", job->syncpt_id);
	596	dev_dbg(dev, " SYNCPT_VAL %d\n", job->syncpt_end);
	597	dev_dbg(dev, " FIRST_GET 0x%x\n", job->first_get);
	598	dev_dbg(dev, " TIMEOUT %d\n", job->timeout);
	599	dev_dbg(dev, " NUM_SLOTS %d\n", job->num_slots);
	600	dev_dbg(dev, " NUM_HANDLES %d\n", job->num_unpins);
	601	}