]>
Commit | Line | Data |
---|---|---|
a19cbfb3 GH |
1 | /* |
2 | * Copyright (C) 2010 Red Hat, Inc. | |
3 | * | |
4 | * written by Yaniv Kamay, Izik Eidus, Gerd Hoffmann | |
5 | * maintained by Gerd Hoffmann <kraxel@redhat.com> | |
6 | * | |
7 | * This program is free software; you can redistribute it and/or | |
8 | * modify it under the terms of the GNU General Public License as | |
9 | * published by the Free Software Foundation; either version 2 or | |
10 | * (at your option) version 3 of the License. | |
11 | * | |
12 | * This program is distributed in the hope that it will be useful, | |
13 | * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
14 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
15 | * GNU General Public License for more details. | |
16 | * | |
17 | * You should have received a copy of the GNU General Public License | |
18 | * along with this program; if not, see <http://www.gnu.org/licenses/>. | |
19 | */ | |
20 | ||
a19cbfb3 GH |
21 | #include "qemu-common.h" |
22 | #include "qemu-timer.h" | |
23 | #include "qemu-queue.h" | |
24 | #include "monitor.h" | |
25 | #include "sysemu.h" | |
c480bb7d | 26 | #include "trace.h" |
a19cbfb3 GH |
27 | |
28 | #include "qxl.h" | |
29 | ||
0b81c478 AL |
30 | /* |
31 | * NOTE: SPICE_RING_PROD_ITEM accesses memory on the pci bar and as | |
32 | * such can be changed by the guest, so to avoid a guest trigerrable | |
0a530548 | 33 | * abort we just qxl_set_guest_bug and set the return to NULL. Still |
0b81c478 AL |
34 | * it may happen as a result of emulator bug as well. |
35 | */ | |
a19cbfb3 | 36 | #undef SPICE_RING_PROD_ITEM |
0b81c478 | 37 | #define SPICE_RING_PROD_ITEM(qxl, r, ret) { \ |
a19cbfb3 GH |
38 | typeof(r) start = r; \ |
39 | typeof(r) end = r + 1; \ | |
40 | uint32_t prod = (r)->prod & SPICE_RING_INDEX_MASK(r); \ | |
41 | typeof(&(r)->items[prod]) m_item = &(r)->items[prod]; \ | |
42 | if (!((uint8_t*)m_item >= (uint8_t*)(start) && (uint8_t*)(m_item + 1) <= (uint8_t*)(end))) { \ | |
0a530548 | 43 | qxl_set_guest_bug(qxl, "SPICE_RING_PROD_ITEM indices mismatch " \ |
0b81c478 AL |
44 | "! %p <= %p < %p", (uint8_t *)start, \ |
45 | (uint8_t *)m_item, (uint8_t *)end); \ | |
46 | ret = NULL; \ | |
47 | } else { \ | |
48 | ret = &m_item->el; \ | |
a19cbfb3 | 49 | } \ |
a19cbfb3 GH |
50 | } |
51 | ||
52 | #undef SPICE_RING_CONS_ITEM | |
0b81c478 | 53 | #define SPICE_RING_CONS_ITEM(qxl, r, ret) { \ |
a19cbfb3 GH |
54 | typeof(r) start = r; \ |
55 | typeof(r) end = r + 1; \ | |
56 | uint32_t cons = (r)->cons & SPICE_RING_INDEX_MASK(r); \ | |
57 | typeof(&(r)->items[cons]) m_item = &(r)->items[cons]; \ | |
58 | if (!((uint8_t*)m_item >= (uint8_t*)(start) && (uint8_t*)(m_item + 1) <= (uint8_t*)(end))) { \ | |
0a530548 | 59 | qxl_set_guest_bug(qxl, "SPICE_RING_CONS_ITEM indices mismatch " \ |
0b81c478 AL |
60 | "! %p <= %p < %p", (uint8_t *)start, \ |
61 | (uint8_t *)m_item, (uint8_t *)end); \ | |
62 | ret = NULL; \ | |
63 | } else { \ | |
64 | ret = &m_item->el; \ | |
a19cbfb3 | 65 | } \ |
a19cbfb3 GH |
66 | } |
67 | ||
68 | #undef ALIGN | |
69 | #define ALIGN(a, b) (((a) + ((b) - 1)) & ~((b) - 1)) | |
70 | ||
71 | #define PIXEL_SIZE 0.2936875 //1280x1024 is 14.8" x 11.9" | |
72 | ||
73 | #define QXL_MODE(_x, _y, _b, _o) \ | |
74 | { .x_res = _x, \ | |
75 | .y_res = _y, \ | |
76 | .bits = _b, \ | |
77 | .stride = (_x) * (_b) / 8, \ | |
78 | .x_mili = PIXEL_SIZE * (_x), \ | |
79 | .y_mili = PIXEL_SIZE * (_y), \ | |
80 | .orientation = _o, \ | |
81 | } | |
82 | ||
83 | #define QXL_MODE_16_32(x_res, y_res, orientation) \ | |
84 | QXL_MODE(x_res, y_res, 16, orientation), \ | |
85 | QXL_MODE(x_res, y_res, 32, orientation) | |
86 | ||
87 | #define QXL_MODE_EX(x_res, y_res) \ | |
88 | QXL_MODE_16_32(x_res, y_res, 0), \ | |
89 | QXL_MODE_16_32(y_res, x_res, 1), \ | |
90 | QXL_MODE_16_32(x_res, y_res, 2), \ | |
91 | QXL_MODE_16_32(y_res, x_res, 3) | |
92 | ||
93 | static QXLMode qxl_modes[] = { | |
94 | QXL_MODE_EX(640, 480), | |
95 | QXL_MODE_EX(800, 480), | |
96 | QXL_MODE_EX(800, 600), | |
97 | QXL_MODE_EX(832, 624), | |
98 | QXL_MODE_EX(960, 640), | |
99 | QXL_MODE_EX(1024, 600), | |
100 | QXL_MODE_EX(1024, 768), | |
101 | QXL_MODE_EX(1152, 864), | |
102 | QXL_MODE_EX(1152, 870), | |
103 | QXL_MODE_EX(1280, 720), | |
104 | QXL_MODE_EX(1280, 760), | |
105 | QXL_MODE_EX(1280, 768), | |
106 | QXL_MODE_EX(1280, 800), | |
107 | QXL_MODE_EX(1280, 960), | |
108 | QXL_MODE_EX(1280, 1024), | |
109 | QXL_MODE_EX(1360, 768), | |
110 | QXL_MODE_EX(1366, 768), | |
111 | QXL_MODE_EX(1400, 1050), | |
112 | QXL_MODE_EX(1440, 900), | |
113 | QXL_MODE_EX(1600, 900), | |
114 | QXL_MODE_EX(1600, 1200), | |
115 | QXL_MODE_EX(1680, 1050), | |
116 | QXL_MODE_EX(1920, 1080), | |
a19cbfb3 GH |
117 | /* these modes need more than 8 MB video memory */ |
118 | QXL_MODE_EX(1920, 1200), | |
119 | QXL_MODE_EX(1920, 1440), | |
120 | QXL_MODE_EX(2048, 1536), | |
121 | QXL_MODE_EX(2560, 1440), | |
122 | QXL_MODE_EX(2560, 1600), | |
a19cbfb3 GH |
123 | /* these modes need more than 16 MB video memory */ |
124 | QXL_MODE_EX(2560, 2048), | |
125 | QXL_MODE_EX(2800, 2100), | |
126 | QXL_MODE_EX(3200, 2400), | |
a19cbfb3 GH |
127 | }; |
128 | ||
129 | static PCIQXLDevice *qxl0; | |
130 | ||
131 | static void qxl_send_events(PCIQXLDevice *d, uint32_t events); | |
5ff4e36c | 132 | static int qxl_destroy_primary(PCIQXLDevice *d, qxl_async_io async); |
a19cbfb3 GH |
133 | static void qxl_reset_memslots(PCIQXLDevice *d); |
134 | static void qxl_reset_surfaces(PCIQXLDevice *d); | |
135 | static void qxl_ring_set_dirty(PCIQXLDevice *qxl); | |
136 | ||
0a530548 | 137 | void qxl_set_guest_bug(PCIQXLDevice *qxl, const char *msg, ...) |
2bce0400 | 138 | { |
2bce0400 | 139 | qxl_send_events(qxl, QXL_INTERRUPT_ERROR); |
087e6a42 | 140 | qxl->guest_bug = 1; |
2bce0400 | 141 | if (qxl->guestdebug) { |
7635392c AL |
142 | va_list ap; |
143 | va_start(ap, msg); | |
144 | fprintf(stderr, "qxl-%d: guest bug: ", qxl->id); | |
145 | vfprintf(stderr, msg, ap); | |
146 | fprintf(stderr, "\n"); | |
147 | va_end(ap); | |
2bce0400 GH |
148 | } |
149 | } | |
150 | ||
087e6a42 AL |
151 | static void qxl_clear_guest_bug(PCIQXLDevice *qxl) |
152 | { | |
153 | qxl->guest_bug = 0; | |
154 | } | |
aee32bf3 GH |
155 | |
156 | void qxl_spice_update_area(PCIQXLDevice *qxl, uint32_t surface_id, | |
157 | struct QXLRect *area, struct QXLRect *dirty_rects, | |
158 | uint32_t num_dirty_rects, | |
5ff4e36c | 159 | uint32_t clear_dirty_region, |
2e1a98c9 | 160 | qxl_async_io async, struct QXLCookie *cookie) |
aee32bf3 | 161 | { |
c480bb7d AL |
162 | trace_qxl_spice_update_area(qxl->id, surface_id, area->left, area->right, |
163 | area->top, area->bottom); | |
164 | trace_qxl_spice_update_area_rest(qxl->id, num_dirty_rects, | |
165 | clear_dirty_region); | |
5ff4e36c AL |
166 | if (async == QXL_SYNC) { |
167 | qxl->ssd.worker->update_area(qxl->ssd.worker, surface_id, area, | |
168 | dirty_rects, num_dirty_rects, clear_dirty_region); | |
169 | } else { | |
2e1a98c9 | 170 | assert(cookie != NULL); |
5ff4e36c | 171 | spice_qxl_update_area_async(&qxl->ssd.qxl, surface_id, area, |
5dba0d45 | 172 | clear_dirty_region, (uintptr_t)cookie); |
5ff4e36c | 173 | } |
aee32bf3 GH |
174 | } |
175 | ||
5ff4e36c AL |
176 | static void qxl_spice_destroy_surface_wait_complete(PCIQXLDevice *qxl, |
177 | uint32_t id) | |
aee32bf3 | 178 | { |
c480bb7d | 179 | trace_qxl_spice_destroy_surface_wait_complete(qxl->id, id); |
14898cf6 | 180 | qemu_mutex_lock(&qxl->track_lock); |
14898cf6 GH |
181 | qxl->guest_surfaces.cmds[id] = 0; |
182 | qxl->guest_surfaces.count--; | |
183 | qemu_mutex_unlock(&qxl->track_lock); | |
aee32bf3 GH |
184 | } |
185 | ||
5ff4e36c AL |
186 | static void qxl_spice_destroy_surface_wait(PCIQXLDevice *qxl, uint32_t id, |
187 | qxl_async_io async) | |
188 | { | |
2e1a98c9 AL |
189 | QXLCookie *cookie; |
190 | ||
c480bb7d | 191 | trace_qxl_spice_destroy_surface_wait(qxl->id, id, async); |
5ff4e36c | 192 | if (async) { |
2e1a98c9 AL |
193 | cookie = qxl_cookie_new(QXL_COOKIE_TYPE_IO, |
194 | QXL_IO_DESTROY_SURFACE_ASYNC); | |
195 | cookie->u.surface_id = id; | |
5dba0d45 | 196 | spice_qxl_destroy_surface_async(&qxl->ssd.qxl, id, (uintptr_t)cookie); |
5ff4e36c AL |
197 | } else { |
198 | qxl->ssd.worker->destroy_surface_wait(qxl->ssd.worker, id); | |
5ff4e36c AL |
199 | } |
200 | } | |
201 | ||
3e16b9c5 AL |
202 | static void qxl_spice_flush_surfaces_async(PCIQXLDevice *qxl) |
203 | { | |
c480bb7d AL |
204 | trace_qxl_spice_flush_surfaces_async(qxl->id, qxl->guest_surfaces.count, |
205 | qxl->num_free_res); | |
2e1a98c9 | 206 | spice_qxl_flush_surfaces_async(&qxl->ssd.qxl, |
5dba0d45 PM |
207 | (uintptr_t)qxl_cookie_new(QXL_COOKIE_TYPE_IO, |
208 | QXL_IO_FLUSH_SURFACES_ASYNC)); | |
3e16b9c5 | 209 | } |
3e16b9c5 | 210 | |
aee32bf3 GH |
211 | void qxl_spice_loadvm_commands(PCIQXLDevice *qxl, struct QXLCommandExt *ext, |
212 | uint32_t count) | |
213 | { | |
c480bb7d | 214 | trace_qxl_spice_loadvm_commands(qxl->id, ext, count); |
aee32bf3 GH |
215 | qxl->ssd.worker->loadvm_commands(qxl->ssd.worker, ext, count); |
216 | } | |
217 | ||
218 | void qxl_spice_oom(PCIQXLDevice *qxl) | |
219 | { | |
c480bb7d | 220 | trace_qxl_spice_oom(qxl->id); |
aee32bf3 GH |
221 | qxl->ssd.worker->oom(qxl->ssd.worker); |
222 | } | |
223 | ||
224 | void qxl_spice_reset_memslots(PCIQXLDevice *qxl) | |
225 | { | |
c480bb7d | 226 | trace_qxl_spice_reset_memslots(qxl->id); |
aee32bf3 GH |
227 | qxl->ssd.worker->reset_memslots(qxl->ssd.worker); |
228 | } | |
229 | ||
5ff4e36c | 230 | static void qxl_spice_destroy_surfaces_complete(PCIQXLDevice *qxl) |
aee32bf3 | 231 | { |
c480bb7d | 232 | trace_qxl_spice_destroy_surfaces_complete(qxl->id); |
14898cf6 | 233 | qemu_mutex_lock(&qxl->track_lock); |
14898cf6 GH |
234 | memset(&qxl->guest_surfaces.cmds, 0, sizeof(qxl->guest_surfaces.cmds)); |
235 | qxl->guest_surfaces.count = 0; | |
236 | qemu_mutex_unlock(&qxl->track_lock); | |
aee32bf3 GH |
237 | } |
238 | ||
5ff4e36c AL |
239 | static void qxl_spice_destroy_surfaces(PCIQXLDevice *qxl, qxl_async_io async) |
240 | { | |
c480bb7d | 241 | trace_qxl_spice_destroy_surfaces(qxl->id, async); |
5ff4e36c | 242 | if (async) { |
2e1a98c9 | 243 | spice_qxl_destroy_surfaces_async(&qxl->ssd.qxl, |
5dba0d45 PM |
244 | (uintptr_t)qxl_cookie_new(QXL_COOKIE_TYPE_IO, |
245 | QXL_IO_DESTROY_ALL_SURFACES_ASYNC)); | |
5ff4e36c AL |
246 | } else { |
247 | qxl->ssd.worker->destroy_surfaces(qxl->ssd.worker); | |
248 | qxl_spice_destroy_surfaces_complete(qxl); | |
249 | } | |
250 | } | |
251 | ||
aee32bf3 GH |
252 | void qxl_spice_reset_image_cache(PCIQXLDevice *qxl) |
253 | { | |
c480bb7d | 254 | trace_qxl_spice_reset_image_cache(qxl->id); |
aee32bf3 GH |
255 | qxl->ssd.worker->reset_image_cache(qxl->ssd.worker); |
256 | } | |
257 | ||
258 | void qxl_spice_reset_cursor(PCIQXLDevice *qxl) | |
259 | { | |
c480bb7d | 260 | trace_qxl_spice_reset_cursor(qxl->id); |
aee32bf3 | 261 | qxl->ssd.worker->reset_cursor(qxl->ssd.worker); |
30f6da66 YH |
262 | qemu_mutex_lock(&qxl->track_lock); |
263 | qxl->guest_cursor = 0; | |
264 | qemu_mutex_unlock(&qxl->track_lock); | |
aee32bf3 GH |
265 | } |
266 | ||
267 | ||
a19cbfb3 GH |
268 | static inline uint32_t msb_mask(uint32_t val) |
269 | { | |
270 | uint32_t mask; | |
271 | ||
272 | do { | |
273 | mask = ~(val - 1) & val; | |
274 | val &= ~mask; | |
275 | } while (mask < val); | |
276 | ||
277 | return mask; | |
278 | } | |
279 | ||
280 | static ram_addr_t qxl_rom_size(void) | |
281 | { | |
282 | uint32_t rom_size = sizeof(QXLRom) + sizeof(QXLModes) + sizeof(qxl_modes); | |
13d1fd44 | 283 | |
a19cbfb3 GH |
284 | rom_size = MAX(rom_size, TARGET_PAGE_SIZE); |
285 | rom_size = msb_mask(rom_size * 2 - 1); | |
286 | return rom_size; | |
287 | } | |
288 | ||
289 | static void init_qxl_rom(PCIQXLDevice *d) | |
290 | { | |
b1950430 | 291 | QXLRom *rom = memory_region_get_ram_ptr(&d->rom_bar); |
a19cbfb3 GH |
292 | QXLModes *modes = (QXLModes *)(rom + 1); |
293 | uint32_t ram_header_size; | |
294 | uint32_t surface0_area_size; | |
295 | uint32_t num_pages; | |
13d1fd44 AL |
296 | uint32_t fb; |
297 | int i, n; | |
a19cbfb3 GH |
298 | |
299 | memset(rom, 0, d->rom_size); | |
300 | ||
301 | rom->magic = cpu_to_le32(QXL_ROM_MAGIC); | |
302 | rom->id = cpu_to_le32(d->id); | |
303 | rom->log_level = cpu_to_le32(d->guestdebug); | |
304 | rom->modes_offset = cpu_to_le32(sizeof(QXLRom)); | |
305 | ||
306 | rom->slot_gen_bits = MEMSLOT_GENERATION_BITS; | |
307 | rom->slot_id_bits = MEMSLOT_SLOT_BITS; | |
308 | rom->slots_start = 1; | |
309 | rom->slots_end = NUM_MEMSLOTS - 1; | |
310 | rom->n_surfaces = cpu_to_le32(NUM_SURFACES); | |
311 | ||
13d1fd44 | 312 | for (i = 0, n = 0; i < ARRAY_SIZE(qxl_modes); i++) { |
a19cbfb3 | 313 | fb = qxl_modes[i].y_res * qxl_modes[i].stride; |
13d1fd44 AL |
314 | if (fb > d->vgamem_size) { |
315 | continue; | |
a19cbfb3 | 316 | } |
13d1fd44 AL |
317 | modes->modes[n].id = cpu_to_le32(i); |
318 | modes->modes[n].x_res = cpu_to_le32(qxl_modes[i].x_res); | |
319 | modes->modes[n].y_res = cpu_to_le32(qxl_modes[i].y_res); | |
320 | modes->modes[n].bits = cpu_to_le32(qxl_modes[i].bits); | |
321 | modes->modes[n].stride = cpu_to_le32(qxl_modes[i].stride); | |
322 | modes->modes[n].x_mili = cpu_to_le32(qxl_modes[i].x_mili); | |
323 | modes->modes[n].y_mili = cpu_to_le32(qxl_modes[i].y_mili); | |
324 | modes->modes[n].orientation = cpu_to_le32(qxl_modes[i].orientation); | |
325 | n++; | |
326 | } | |
327 | modes->n_modes = cpu_to_le32(n); | |
a19cbfb3 GH |
328 | |
329 | ram_header_size = ALIGN(sizeof(QXLRam), 4096); | |
13d1fd44 | 330 | surface0_area_size = ALIGN(d->vgamem_size, 4096); |
a19cbfb3 GH |
331 | num_pages = d->vga.vram_size; |
332 | num_pages -= ram_header_size; | |
333 | num_pages -= surface0_area_size; | |
334 | num_pages = num_pages / TARGET_PAGE_SIZE; | |
335 | ||
336 | rom->draw_area_offset = cpu_to_le32(0); | |
337 | rom->surface0_area_size = cpu_to_le32(surface0_area_size); | |
338 | rom->pages_offset = cpu_to_le32(surface0_area_size); | |
339 | rom->num_pages = cpu_to_le32(num_pages); | |
340 | rom->ram_header_offset = cpu_to_le32(d->vga.vram_size - ram_header_size); | |
341 | ||
342 | d->shadow_rom = *rom; | |
343 | d->rom = rom; | |
344 | d->modes = modes; | |
345 | } | |
346 | ||
347 | static void init_qxl_ram(PCIQXLDevice *d) | |
348 | { | |
349 | uint8_t *buf; | |
350 | uint64_t *item; | |
351 | ||
352 | buf = d->vga.vram_ptr; | |
353 | d->ram = (QXLRam *)(buf + le32_to_cpu(d->shadow_rom.ram_header_offset)); | |
354 | d->ram->magic = cpu_to_le32(QXL_RAM_MAGIC); | |
355 | d->ram->int_pending = cpu_to_le32(0); | |
356 | d->ram->int_mask = cpu_to_le32(0); | |
9f0f352d | 357 | d->ram->update_surface = 0; |
a19cbfb3 GH |
358 | SPICE_RING_INIT(&d->ram->cmd_ring); |
359 | SPICE_RING_INIT(&d->ram->cursor_ring); | |
360 | SPICE_RING_INIT(&d->ram->release_ring); | |
0b81c478 AL |
361 | SPICE_RING_PROD_ITEM(d, &d->ram->release_ring, item); |
362 | assert(item); | |
a19cbfb3 GH |
363 | *item = 0; |
364 | qxl_ring_set_dirty(d); | |
365 | } | |
366 | ||
367 | /* can be called from spice server thread context */ | |
b1950430 | 368 | static void qxl_set_dirty(MemoryRegion *mr, ram_addr_t addr, ram_addr_t end) |
a19cbfb3 | 369 | { |
fd4aa979 | 370 | memory_region_set_dirty(mr, addr, end - addr); |
a19cbfb3 GH |
371 | } |
372 | ||
373 | static void qxl_rom_set_dirty(PCIQXLDevice *qxl) | |
374 | { | |
b1950430 | 375 | qxl_set_dirty(&qxl->rom_bar, 0, qxl->rom_size); |
a19cbfb3 GH |
376 | } |
377 | ||
378 | /* called from spice server thread context only */ | |
379 | static void qxl_ram_set_dirty(PCIQXLDevice *qxl, void *ptr) | |
380 | { | |
a19cbfb3 GH |
381 | void *base = qxl->vga.vram_ptr; |
382 | intptr_t offset; | |
383 | ||
384 | offset = ptr - base; | |
385 | offset &= ~(TARGET_PAGE_SIZE-1); | |
386 | assert(offset < qxl->vga.vram_size); | |
b1950430 | 387 | qxl_set_dirty(&qxl->vga.vram, offset, offset + TARGET_PAGE_SIZE); |
a19cbfb3 GH |
388 | } |
389 | ||
390 | /* can be called from spice server thread context */ | |
391 | static void qxl_ring_set_dirty(PCIQXLDevice *qxl) | |
392 | { | |
b1950430 AK |
393 | ram_addr_t addr = qxl->shadow_rom.ram_header_offset; |
394 | ram_addr_t end = qxl->vga.vram_size; | |
395 | qxl_set_dirty(&qxl->vga.vram, addr, end); | |
a19cbfb3 GH |
396 | } |
397 | ||
398 | /* | |
399 | * keep track of some command state, for savevm/loadvm. | |
400 | * called from spice server thread context only | |
401 | */ | |
fae2afb1 | 402 | static int qxl_track_command(PCIQXLDevice *qxl, struct QXLCommandExt *ext) |
a19cbfb3 GH |
403 | { |
404 | switch (le32_to_cpu(ext->cmd.type)) { | |
405 | case QXL_CMD_SURFACE: | |
406 | { | |
407 | QXLSurfaceCmd *cmd = qxl_phys2virt(qxl, ext->cmd.data, ext->group_id); | |
fae2afb1 AL |
408 | |
409 | if (!cmd) { | |
410 | return 1; | |
411 | } | |
a19cbfb3 | 412 | uint32_t id = le32_to_cpu(cmd->surface_id); |
47eddfbf AL |
413 | |
414 | if (id >= NUM_SURFACES) { | |
0a530548 AL |
415 | qxl_set_guest_bug(qxl, "QXL_CMD_SURFACE id %d >= %d", id, |
416 | NUM_SURFACES); | |
47eddfbf AL |
417 | return 1; |
418 | } | |
14898cf6 | 419 | qemu_mutex_lock(&qxl->track_lock); |
a19cbfb3 GH |
420 | if (cmd->type == QXL_SURFACE_CMD_CREATE) { |
421 | qxl->guest_surfaces.cmds[id] = ext->cmd.data; | |
422 | qxl->guest_surfaces.count++; | |
423 | if (qxl->guest_surfaces.max < qxl->guest_surfaces.count) | |
424 | qxl->guest_surfaces.max = qxl->guest_surfaces.count; | |
425 | } | |
426 | if (cmd->type == QXL_SURFACE_CMD_DESTROY) { | |
427 | qxl->guest_surfaces.cmds[id] = 0; | |
428 | qxl->guest_surfaces.count--; | |
429 | } | |
14898cf6 | 430 | qemu_mutex_unlock(&qxl->track_lock); |
a19cbfb3 GH |
431 | break; |
432 | } | |
433 | case QXL_CMD_CURSOR: | |
434 | { | |
435 | QXLCursorCmd *cmd = qxl_phys2virt(qxl, ext->cmd.data, ext->group_id); | |
fae2afb1 AL |
436 | |
437 | if (!cmd) { | |
438 | return 1; | |
439 | } | |
a19cbfb3 | 440 | if (cmd->type == QXL_CURSOR_SET) { |
30f6da66 | 441 | qemu_mutex_lock(&qxl->track_lock); |
a19cbfb3 | 442 | qxl->guest_cursor = ext->cmd.data; |
30f6da66 | 443 | qemu_mutex_unlock(&qxl->track_lock); |
a19cbfb3 GH |
444 | } |
445 | break; | |
446 | } | |
447 | } | |
fae2afb1 | 448 | return 0; |
a19cbfb3 GH |
449 | } |
450 | ||
451 | /* spice display interface callbacks */ | |
452 | ||
453 | static void interface_attach_worker(QXLInstance *sin, QXLWorker *qxl_worker) | |
454 | { | |
455 | PCIQXLDevice *qxl = container_of(sin, PCIQXLDevice, ssd.qxl); | |
456 | ||
c480bb7d | 457 | trace_qxl_interface_attach_worker(qxl->id); |
a19cbfb3 GH |
458 | qxl->ssd.worker = qxl_worker; |
459 | } | |
460 | ||
461 | static void interface_set_compression_level(QXLInstance *sin, int level) | |
462 | { | |
463 | PCIQXLDevice *qxl = container_of(sin, PCIQXLDevice, ssd.qxl); | |
464 | ||
c480bb7d | 465 | trace_qxl_interface_set_compression_level(qxl->id, level); |
a19cbfb3 GH |
466 | qxl->shadow_rom.compression_level = cpu_to_le32(level); |
467 | qxl->rom->compression_level = cpu_to_le32(level); | |
468 | qxl_rom_set_dirty(qxl); | |
469 | } | |
470 | ||
471 | static void interface_set_mm_time(QXLInstance *sin, uint32_t mm_time) | |
472 | { | |
473 | PCIQXLDevice *qxl = container_of(sin, PCIQXLDevice, ssd.qxl); | |
474 | ||
c480bb7d | 475 | trace_qxl_interface_set_mm_time(qxl->id, mm_time); |
a19cbfb3 GH |
476 | qxl->shadow_rom.mm_clock = cpu_to_le32(mm_time); |
477 | qxl->rom->mm_clock = cpu_to_le32(mm_time); | |
478 | qxl_rom_set_dirty(qxl); | |
479 | } | |
480 | ||
481 | static void interface_get_init_info(QXLInstance *sin, QXLDevInitInfo *info) | |
482 | { | |
483 | PCIQXLDevice *qxl = container_of(sin, PCIQXLDevice, ssd.qxl); | |
484 | ||
c480bb7d | 485 | trace_qxl_interface_get_init_info(qxl->id); |
a19cbfb3 GH |
486 | info->memslot_gen_bits = MEMSLOT_GENERATION_BITS; |
487 | info->memslot_id_bits = MEMSLOT_SLOT_BITS; | |
488 | info->num_memslots = NUM_MEMSLOTS; | |
489 | info->num_memslots_groups = NUM_MEMSLOTS_GROUPS; | |
490 | info->internal_groupslot_id = 0; | |
491 | info->qxl_ram_size = le32_to_cpu(qxl->shadow_rom.num_pages) << TARGET_PAGE_BITS; | |
492 | info->n_surfaces = NUM_SURFACES; | |
493 | } | |
494 | ||
5b77870c AL |
495 | static const char *qxl_mode_to_string(int mode) |
496 | { | |
497 | switch (mode) { | |
498 | case QXL_MODE_COMPAT: | |
499 | return "compat"; | |
500 | case QXL_MODE_NATIVE: | |
501 | return "native"; | |
502 | case QXL_MODE_UNDEFINED: | |
503 | return "undefined"; | |
504 | case QXL_MODE_VGA: | |
505 | return "vga"; | |
506 | } | |
507 | return "INVALID"; | |
508 | } | |
509 | ||
8b92e298 AL |
510 | static const char *io_port_to_string(uint32_t io_port) |
511 | { | |
512 | if (io_port >= QXL_IO_RANGE_SIZE) { | |
513 | return "out of range"; | |
514 | } | |
515 | static const char *io_port_to_string[QXL_IO_RANGE_SIZE + 1] = { | |
516 | [QXL_IO_NOTIFY_CMD] = "QXL_IO_NOTIFY_CMD", | |
517 | [QXL_IO_NOTIFY_CURSOR] = "QXL_IO_NOTIFY_CURSOR", | |
518 | [QXL_IO_UPDATE_AREA] = "QXL_IO_UPDATE_AREA", | |
519 | [QXL_IO_UPDATE_IRQ] = "QXL_IO_UPDATE_IRQ", | |
520 | [QXL_IO_NOTIFY_OOM] = "QXL_IO_NOTIFY_OOM", | |
521 | [QXL_IO_RESET] = "QXL_IO_RESET", | |
522 | [QXL_IO_SET_MODE] = "QXL_IO_SET_MODE", | |
523 | [QXL_IO_LOG] = "QXL_IO_LOG", | |
524 | [QXL_IO_MEMSLOT_ADD] = "QXL_IO_MEMSLOT_ADD", | |
525 | [QXL_IO_MEMSLOT_DEL] = "QXL_IO_MEMSLOT_DEL", | |
526 | [QXL_IO_DETACH_PRIMARY] = "QXL_IO_DETACH_PRIMARY", | |
527 | [QXL_IO_ATTACH_PRIMARY] = "QXL_IO_ATTACH_PRIMARY", | |
528 | [QXL_IO_CREATE_PRIMARY] = "QXL_IO_CREATE_PRIMARY", | |
529 | [QXL_IO_DESTROY_PRIMARY] = "QXL_IO_DESTROY_PRIMARY", | |
530 | [QXL_IO_DESTROY_SURFACE_WAIT] = "QXL_IO_DESTROY_SURFACE_WAIT", | |
531 | [QXL_IO_DESTROY_ALL_SURFACES] = "QXL_IO_DESTROY_ALL_SURFACES", | |
8b92e298 AL |
532 | [QXL_IO_UPDATE_AREA_ASYNC] = "QXL_IO_UPDATE_AREA_ASYNC", |
533 | [QXL_IO_MEMSLOT_ADD_ASYNC] = "QXL_IO_MEMSLOT_ADD_ASYNC", | |
534 | [QXL_IO_CREATE_PRIMARY_ASYNC] = "QXL_IO_CREATE_PRIMARY_ASYNC", | |
535 | [QXL_IO_DESTROY_PRIMARY_ASYNC] = "QXL_IO_DESTROY_PRIMARY_ASYNC", | |
536 | [QXL_IO_DESTROY_SURFACE_ASYNC] = "QXL_IO_DESTROY_SURFACE_ASYNC", | |
537 | [QXL_IO_DESTROY_ALL_SURFACES_ASYNC] | |
538 | = "QXL_IO_DESTROY_ALL_SURFACES_ASYNC", | |
539 | [QXL_IO_FLUSH_SURFACES_ASYNC] = "QXL_IO_FLUSH_SURFACES_ASYNC", | |
540 | [QXL_IO_FLUSH_RELEASE] = "QXL_IO_FLUSH_RELEASE", | |
8b92e298 AL |
541 | }; |
542 | return io_port_to_string[io_port]; | |
543 | } | |
544 | ||
a19cbfb3 GH |
545 | /* called from spice server thread context only */ |
546 | static int interface_get_command(QXLInstance *sin, struct QXLCommandExt *ext) | |
547 | { | |
548 | PCIQXLDevice *qxl = container_of(sin, PCIQXLDevice, ssd.qxl); | |
549 | SimpleSpiceUpdate *update; | |
550 | QXLCommandRing *ring; | |
551 | QXLCommand *cmd; | |
e0c64d08 | 552 | int notify, ret; |
a19cbfb3 | 553 | |
c480bb7d AL |
554 | trace_qxl_ring_command_check(qxl->id, qxl_mode_to_string(qxl->mode)); |
555 | ||
a19cbfb3 GH |
556 | switch (qxl->mode) { |
557 | case QXL_MODE_VGA: | |
e0c64d08 GH |
558 | ret = false; |
559 | qemu_mutex_lock(&qxl->ssd.lock); | |
560 | if (qxl->ssd.update != NULL) { | |
561 | update = qxl->ssd.update; | |
562 | qxl->ssd.update = NULL; | |
563 | *ext = update->ext; | |
564 | ret = true; | |
a19cbfb3 | 565 | } |
e0c64d08 | 566 | qemu_mutex_unlock(&qxl->ssd.lock); |
212496c9 | 567 | if (ret) { |
c480bb7d | 568 | trace_qxl_ring_command_get(qxl->id, qxl_mode_to_string(qxl->mode)); |
212496c9 AL |
569 | qxl_log_command(qxl, "vga", ext); |
570 | } | |
e0c64d08 | 571 | return ret; |
a19cbfb3 GH |
572 | case QXL_MODE_COMPAT: |
573 | case QXL_MODE_NATIVE: | |
574 | case QXL_MODE_UNDEFINED: | |
a19cbfb3 | 575 | ring = &qxl->ram->cmd_ring; |
087e6a42 | 576 | if (qxl->guest_bug || SPICE_RING_IS_EMPTY(ring)) { |
a19cbfb3 GH |
577 | return false; |
578 | } | |
0b81c478 AL |
579 | SPICE_RING_CONS_ITEM(qxl, ring, cmd); |
580 | if (!cmd) { | |
581 | return false; | |
582 | } | |
a19cbfb3 GH |
583 | ext->cmd = *cmd; |
584 | ext->group_id = MEMSLOT_GROUP_GUEST; | |
585 | ext->flags = qxl->cmdflags; | |
586 | SPICE_RING_POP(ring, notify); | |
587 | qxl_ring_set_dirty(qxl); | |
588 | if (notify) { | |
589 | qxl_send_events(qxl, QXL_INTERRUPT_DISPLAY); | |
590 | } | |
591 | qxl->guest_primary.commands++; | |
592 | qxl_track_command(qxl, ext); | |
593 | qxl_log_command(qxl, "cmd", ext); | |
0b81c478 | 594 | trace_qxl_ring_command_get(qxl->id, qxl_mode_to_string(qxl->mode)); |
a19cbfb3 GH |
595 | return true; |
596 | default: | |
597 | return false; | |
598 | } | |
599 | } | |
600 | ||
601 | /* called from spice server thread context only */ | |
602 | static int interface_req_cmd_notification(QXLInstance *sin) | |
603 | { | |
604 | PCIQXLDevice *qxl = container_of(sin, PCIQXLDevice, ssd.qxl); | |
605 | int wait = 1; | |
606 | ||
c480bb7d | 607 | trace_qxl_ring_command_req_notification(qxl->id); |
a19cbfb3 GH |
608 | switch (qxl->mode) { |
609 | case QXL_MODE_COMPAT: | |
610 | case QXL_MODE_NATIVE: | |
611 | case QXL_MODE_UNDEFINED: | |
612 | SPICE_RING_CONS_WAIT(&qxl->ram->cmd_ring, wait); | |
613 | qxl_ring_set_dirty(qxl); | |
614 | break; | |
615 | default: | |
616 | /* nothing */ | |
617 | break; | |
618 | } | |
619 | return wait; | |
620 | } | |
621 | ||
622 | /* called from spice server thread context only */ | |
623 | static inline void qxl_push_free_res(PCIQXLDevice *d, int flush) | |
624 | { | |
625 | QXLReleaseRing *ring = &d->ram->release_ring; | |
626 | uint64_t *item; | |
627 | int notify; | |
628 | ||
629 | #define QXL_FREE_BUNCH_SIZE 32 | |
630 | ||
631 | if (ring->prod - ring->cons + 1 == ring->num_items) { | |
632 | /* ring full -- can't push */ | |
633 | return; | |
634 | } | |
635 | if (!flush && d->oom_running) { | |
636 | /* collect everything from oom handler before pushing */ | |
637 | return; | |
638 | } | |
639 | if (!flush && d->num_free_res < QXL_FREE_BUNCH_SIZE) { | |
640 | /* collect a bit more before pushing */ | |
641 | return; | |
642 | } | |
643 | ||
644 | SPICE_RING_PUSH(ring, notify); | |
c480bb7d AL |
645 | trace_qxl_ring_res_push(d->id, qxl_mode_to_string(d->mode), |
646 | d->guest_surfaces.count, d->num_free_res, | |
647 | d->last_release, notify ? "yes" : "no"); | |
648 | trace_qxl_ring_res_push_rest(d->id, ring->prod - ring->cons, | |
649 | ring->num_items, ring->prod, ring->cons); | |
a19cbfb3 GH |
650 | if (notify) { |
651 | qxl_send_events(d, QXL_INTERRUPT_DISPLAY); | |
652 | } | |
0b81c478 AL |
653 | SPICE_RING_PROD_ITEM(d, ring, item); |
654 | if (!item) { | |
655 | return; | |
656 | } | |
a19cbfb3 GH |
657 | *item = 0; |
658 | d->num_free_res = 0; | |
659 | d->last_release = NULL; | |
660 | qxl_ring_set_dirty(d); | |
661 | } | |
662 | ||
663 | /* called from spice server thread context only */ | |
664 | static void interface_release_resource(QXLInstance *sin, | |
665 | struct QXLReleaseInfoExt ext) | |
666 | { | |
667 | PCIQXLDevice *qxl = container_of(sin, PCIQXLDevice, ssd.qxl); | |
668 | QXLReleaseRing *ring; | |
669 | uint64_t *item, id; | |
670 | ||
671 | if (ext.group_id == MEMSLOT_GROUP_HOST) { | |
672 | /* host group -> vga mode update request */ | |
f4a8a424 | 673 | qemu_spice_destroy_update(&qxl->ssd, (void *)(intptr_t)ext.info->id); |
a19cbfb3 GH |
674 | return; |
675 | } | |
676 | ||
677 | /* | |
678 | * ext->info points into guest-visible memory | |
679 | * pci bar 0, $command.release_info | |
680 | */ | |
681 | ring = &qxl->ram->release_ring; | |
0b81c478 AL |
682 | SPICE_RING_PROD_ITEM(qxl, ring, item); |
683 | if (!item) { | |
684 | return; | |
685 | } | |
a19cbfb3 GH |
686 | if (*item == 0) { |
687 | /* stick head into the ring */ | |
688 | id = ext.info->id; | |
689 | ext.info->next = 0; | |
690 | qxl_ram_set_dirty(qxl, &ext.info->next); | |
691 | *item = id; | |
692 | qxl_ring_set_dirty(qxl); | |
693 | } else { | |
694 | /* append item to the list */ | |
695 | qxl->last_release->next = ext.info->id; | |
696 | qxl_ram_set_dirty(qxl, &qxl->last_release->next); | |
697 | ext.info->next = 0; | |
698 | qxl_ram_set_dirty(qxl, &ext.info->next); | |
699 | } | |
700 | qxl->last_release = ext.info; | |
701 | qxl->num_free_res++; | |
c480bb7d | 702 | trace_qxl_ring_res_put(qxl->id, qxl->num_free_res); |
a19cbfb3 GH |
703 | qxl_push_free_res(qxl, 0); |
704 | } | |
705 | ||
706 | /* called from spice server thread context only */ | |
707 | static int interface_get_cursor_command(QXLInstance *sin, struct QXLCommandExt *ext) | |
708 | { | |
709 | PCIQXLDevice *qxl = container_of(sin, PCIQXLDevice, ssd.qxl); | |
710 | QXLCursorRing *ring; | |
711 | QXLCommand *cmd; | |
712 | int notify; | |
713 | ||
c480bb7d AL |
714 | trace_qxl_ring_cursor_check(qxl->id, qxl_mode_to_string(qxl->mode)); |
715 | ||
a19cbfb3 GH |
716 | switch (qxl->mode) { |
717 | case QXL_MODE_COMPAT: | |
718 | case QXL_MODE_NATIVE: | |
719 | case QXL_MODE_UNDEFINED: | |
720 | ring = &qxl->ram->cursor_ring; | |
721 | if (SPICE_RING_IS_EMPTY(ring)) { | |
722 | return false; | |
723 | } | |
0b81c478 AL |
724 | SPICE_RING_CONS_ITEM(qxl, ring, cmd); |
725 | if (!cmd) { | |
726 | return false; | |
727 | } | |
a19cbfb3 GH |
728 | ext->cmd = *cmd; |
729 | ext->group_id = MEMSLOT_GROUP_GUEST; | |
730 | ext->flags = qxl->cmdflags; | |
731 | SPICE_RING_POP(ring, notify); | |
732 | qxl_ring_set_dirty(qxl); | |
733 | if (notify) { | |
734 | qxl_send_events(qxl, QXL_INTERRUPT_CURSOR); | |
735 | } | |
736 | qxl->guest_primary.commands++; | |
737 | qxl_track_command(qxl, ext); | |
738 | qxl_log_command(qxl, "csr", ext); | |
739 | if (qxl->id == 0) { | |
740 | qxl_render_cursor(qxl, ext); | |
741 | } | |
c480bb7d | 742 | trace_qxl_ring_cursor_get(qxl->id, qxl_mode_to_string(qxl->mode)); |
a19cbfb3 GH |
743 | return true; |
744 | default: | |
745 | return false; | |
746 | } | |
747 | } | |
748 | ||
749 | /* called from spice server thread context only */ | |
750 | static int interface_req_cursor_notification(QXLInstance *sin) | |
751 | { | |
752 | PCIQXLDevice *qxl = container_of(sin, PCIQXLDevice, ssd.qxl); | |
753 | int wait = 1; | |
754 | ||
c480bb7d | 755 | trace_qxl_ring_cursor_req_notification(qxl->id); |
a19cbfb3 GH |
756 | switch (qxl->mode) { |
757 | case QXL_MODE_COMPAT: | |
758 | case QXL_MODE_NATIVE: | |
759 | case QXL_MODE_UNDEFINED: | |
760 | SPICE_RING_CONS_WAIT(&qxl->ram->cursor_ring, wait); | |
761 | qxl_ring_set_dirty(qxl); | |
762 | break; | |
763 | default: | |
764 | /* nothing */ | |
765 | break; | |
766 | } | |
767 | return wait; | |
768 | } | |
769 | ||
770 | /* called from spice server thread context */ | |
771 | static void interface_notify_update(QXLInstance *sin, uint32_t update_id) | |
772 | { | |
baeae407 AL |
773 | /* |
774 | * Called by spice-server as a result of a QXL_CMD_UPDATE which is not in | |
775 | * use by xf86-video-qxl and is defined out in the qxl windows driver. | |
776 | * Probably was at some earlier version that is prior to git start (2009), | |
777 | * and is still guest trigerrable. | |
778 | */ | |
779 | fprintf(stderr, "%s: deprecated\n", __func__); | |
a19cbfb3 GH |
780 | } |
781 | ||
782 | /* called from spice server thread context only */ | |
783 | static int interface_flush_resources(QXLInstance *sin) | |
784 | { | |
785 | PCIQXLDevice *qxl = container_of(sin, PCIQXLDevice, ssd.qxl); | |
786 | int ret; | |
787 | ||
a19cbfb3 GH |
788 | ret = qxl->num_free_res; |
789 | if (ret) { | |
790 | qxl_push_free_res(qxl, 1); | |
791 | } | |
792 | return ret; | |
793 | } | |
794 | ||
5ff4e36c AL |
795 | static void qxl_create_guest_primary_complete(PCIQXLDevice *d); |
796 | ||
5ff4e36c | 797 | /* called from spice server thread context only */ |
2e1a98c9 | 798 | static void interface_async_complete_io(PCIQXLDevice *qxl, QXLCookie *cookie) |
5ff4e36c | 799 | { |
5ff4e36c AL |
800 | uint32_t current_async; |
801 | ||
802 | qemu_mutex_lock(&qxl->async_lock); | |
803 | current_async = qxl->current_async; | |
804 | qxl->current_async = QXL_UNDEFINED_IO; | |
805 | qemu_mutex_unlock(&qxl->async_lock); | |
806 | ||
c480bb7d | 807 | trace_qxl_interface_async_complete_io(qxl->id, current_async, cookie); |
2e1a98c9 AL |
808 | if (!cookie) { |
809 | fprintf(stderr, "qxl: %s: error, cookie is NULL\n", __func__); | |
810 | return; | |
811 | } | |
812 | if (cookie && current_async != cookie->io) { | |
813 | fprintf(stderr, | |
2fce7edf AL |
814 | "qxl: %s: error: current_async = %d != %" |
815 | PRId64 " = cookie->io\n", __func__, current_async, cookie->io); | |
2e1a98c9 | 816 | } |
5ff4e36c | 817 | switch (current_async) { |
81fb6f15 AL |
818 | case QXL_IO_MEMSLOT_ADD_ASYNC: |
819 | case QXL_IO_DESTROY_PRIMARY_ASYNC: | |
820 | case QXL_IO_UPDATE_AREA_ASYNC: | |
821 | case QXL_IO_FLUSH_SURFACES_ASYNC: | |
822 | break; | |
5ff4e36c AL |
823 | case QXL_IO_CREATE_PRIMARY_ASYNC: |
824 | qxl_create_guest_primary_complete(qxl); | |
825 | break; | |
826 | case QXL_IO_DESTROY_ALL_SURFACES_ASYNC: | |
827 | qxl_spice_destroy_surfaces_complete(qxl); | |
828 | break; | |
829 | case QXL_IO_DESTROY_SURFACE_ASYNC: | |
2e1a98c9 | 830 | qxl_spice_destroy_surface_wait_complete(qxl, cookie->u.surface_id); |
5ff4e36c | 831 | break; |
81fb6f15 AL |
832 | default: |
833 | fprintf(stderr, "qxl: %s: unexpected current_async %d\n", __func__, | |
834 | current_async); | |
5ff4e36c AL |
835 | } |
836 | qxl_send_events(qxl, QXL_INTERRUPT_IO_CMD); | |
837 | } | |
838 | ||
81fb6f15 AL |
839 | /* called from spice server thread context only */ |
840 | static void interface_update_area_complete(QXLInstance *sin, | |
841 | uint32_t surface_id, | |
842 | QXLRect *dirty, uint32_t num_updated_rects) | |
843 | { | |
844 | PCIQXLDevice *qxl = container_of(sin, PCIQXLDevice, ssd.qxl); | |
845 | int i; | |
846 | int qxl_i; | |
847 | ||
848 | qemu_mutex_lock(&qxl->ssd.lock); | |
849 | if (surface_id != 0 || !qxl->render_update_cookie_num) { | |
850 | qemu_mutex_unlock(&qxl->ssd.lock); | |
851 | return; | |
852 | } | |
c480bb7d AL |
853 | trace_qxl_interface_update_area_complete(qxl->id, surface_id, dirty->left, |
854 | dirty->right, dirty->top, dirty->bottom); | |
855 | trace_qxl_interface_update_area_complete_rest(qxl->id, num_updated_rects); | |
81fb6f15 AL |
856 | if (qxl->num_dirty_rects + num_updated_rects > QXL_NUM_DIRTY_RECTS) { |
857 | /* | |
858 | * overflow - treat this as a full update. Not expected to be common. | |
859 | */ | |
c480bb7d AL |
860 | trace_qxl_interface_update_area_complete_overflow(qxl->id, |
861 | QXL_NUM_DIRTY_RECTS); | |
81fb6f15 AL |
862 | qxl->guest_primary.resized = 1; |
863 | } | |
864 | if (qxl->guest_primary.resized) { | |
865 | /* | |
866 | * Don't bother copying or scheduling the bh since we will flip | |
867 | * the whole area anyway on completion of the update_area async call | |
868 | */ | |
869 | qemu_mutex_unlock(&qxl->ssd.lock); | |
870 | return; | |
871 | } | |
872 | qxl_i = qxl->num_dirty_rects; | |
873 | for (i = 0; i < num_updated_rects; i++) { | |
874 | qxl->dirty[qxl_i++] = dirty[i]; | |
875 | } | |
876 | qxl->num_dirty_rects += num_updated_rects; | |
c480bb7d AL |
877 | trace_qxl_interface_update_area_complete_schedule_bh(qxl->id, |
878 | qxl->num_dirty_rects); | |
81fb6f15 AL |
879 | qemu_bh_schedule(qxl->update_area_bh); |
880 | qemu_mutex_unlock(&qxl->ssd.lock); | |
881 | } | |
882 | ||
2e1a98c9 AL |
883 | /* called from spice server thread context only */ |
884 | static void interface_async_complete(QXLInstance *sin, uint64_t cookie_token) | |
885 | { | |
886 | PCIQXLDevice *qxl = container_of(sin, PCIQXLDevice, ssd.qxl); | |
5dba0d45 | 887 | QXLCookie *cookie = (QXLCookie *)(uintptr_t)cookie_token; |
2e1a98c9 AL |
888 | |
889 | switch (cookie->type) { | |
890 | case QXL_COOKIE_TYPE_IO: | |
891 | interface_async_complete_io(qxl, cookie); | |
81fb6f15 AL |
892 | g_free(cookie); |
893 | break; | |
894 | case QXL_COOKIE_TYPE_RENDER_UPDATE_AREA: | |
895 | qxl_render_update_area_done(qxl, cookie); | |
2e1a98c9 AL |
896 | break; |
897 | default: | |
898 | fprintf(stderr, "qxl: %s: unexpected cookie type %d\n", | |
899 | __func__, cookie->type); | |
81fb6f15 | 900 | g_free(cookie); |
2e1a98c9 | 901 | } |
2e1a98c9 AL |
902 | } |
903 | ||
a19cbfb3 GH |
904 | static const QXLInterface qxl_interface = { |
905 | .base.type = SPICE_INTERFACE_QXL, | |
906 | .base.description = "qxl gpu", | |
907 | .base.major_version = SPICE_INTERFACE_QXL_MAJOR, | |
908 | .base.minor_version = SPICE_INTERFACE_QXL_MINOR, | |
909 | ||
910 | .attache_worker = interface_attach_worker, | |
911 | .set_compression_level = interface_set_compression_level, | |
912 | .set_mm_time = interface_set_mm_time, | |
913 | .get_init_info = interface_get_init_info, | |
914 | ||
915 | /* the callbacks below are called from spice server thread context */ | |
916 | .get_command = interface_get_command, | |
917 | .req_cmd_notification = interface_req_cmd_notification, | |
918 | .release_resource = interface_release_resource, | |
919 | .get_cursor_command = interface_get_cursor_command, | |
920 | .req_cursor_notification = interface_req_cursor_notification, | |
921 | .notify_update = interface_notify_update, | |
922 | .flush_resources = interface_flush_resources, | |
5ff4e36c | 923 | .async_complete = interface_async_complete, |
81fb6f15 | 924 | .update_area_complete = interface_update_area_complete, |
a19cbfb3 GH |
925 | }; |
926 | ||
927 | static void qxl_enter_vga_mode(PCIQXLDevice *d) | |
928 | { | |
929 | if (d->mode == QXL_MODE_VGA) { | |
930 | return; | |
931 | } | |
c480bb7d | 932 | trace_qxl_enter_vga_mode(d->id); |
a19cbfb3 GH |
933 | qemu_spice_create_host_primary(&d->ssd); |
934 | d->mode = QXL_MODE_VGA; | |
935 | memset(&d->ssd.dirty, 0, sizeof(d->ssd.dirty)); | |
0f7bfd81 | 936 | vga_dirty_log_start(&d->vga); |
a19cbfb3 GH |
937 | } |
938 | ||
939 | static void qxl_exit_vga_mode(PCIQXLDevice *d) | |
940 | { | |
941 | if (d->mode != QXL_MODE_VGA) { | |
942 | return; | |
943 | } | |
c480bb7d | 944 | trace_qxl_exit_vga_mode(d->id); |
0f7bfd81 | 945 | vga_dirty_log_stop(&d->vga); |
5ff4e36c | 946 | qxl_destroy_primary(d, QXL_SYNC); |
a19cbfb3 GH |
947 | } |
948 | ||
40010aea | 949 | static void qxl_update_irq(PCIQXLDevice *d) |
a19cbfb3 GH |
950 | { |
951 | uint32_t pending = le32_to_cpu(d->ram->int_pending); | |
952 | uint32_t mask = le32_to_cpu(d->ram->int_mask); | |
953 | int level = !!(pending & mask); | |
954 | qemu_set_irq(d->pci.irq[0], level); | |
955 | qxl_ring_set_dirty(d); | |
956 | } | |
957 | ||
a19cbfb3 GH |
958 | static void qxl_check_state(PCIQXLDevice *d) |
959 | { | |
960 | QXLRam *ram = d->ram; | |
71d388d4 | 961 | int spice_display_running = qemu_spice_display_is_running(&d->ssd); |
a19cbfb3 | 962 | |
71d388d4 YH |
963 | assert(!spice_display_running || SPICE_RING_IS_EMPTY(&ram->cmd_ring)); |
964 | assert(!spice_display_running || SPICE_RING_IS_EMPTY(&ram->cursor_ring)); | |
a19cbfb3 GH |
965 | } |
966 | ||
967 | static void qxl_reset_state(PCIQXLDevice *d) | |
968 | { | |
a19cbfb3 GH |
969 | QXLRom *rom = d->rom; |
970 | ||
be48e995 | 971 | qxl_check_state(d); |
a19cbfb3 GH |
972 | d->shadow_rom.update_id = cpu_to_le32(0); |
973 | *rom = d->shadow_rom; | |
974 | qxl_rom_set_dirty(d); | |
975 | init_qxl_ram(d); | |
976 | d->num_free_res = 0; | |
977 | d->last_release = NULL; | |
978 | memset(&d->ssd.dirty, 0, sizeof(d->ssd.dirty)); | |
979 | } | |
980 | ||
981 | static void qxl_soft_reset(PCIQXLDevice *d) | |
982 | { | |
c480bb7d | 983 | trace_qxl_soft_reset(d->id); |
a19cbfb3 | 984 | qxl_check_state(d); |
087e6a42 | 985 | qxl_clear_guest_bug(d); |
a5f68c22 | 986 | d->current_async = QXL_UNDEFINED_IO; |
a19cbfb3 GH |
987 | |
988 | if (d->id == 0) { | |
989 | qxl_enter_vga_mode(d); | |
990 | } else { | |
991 | d->mode = QXL_MODE_UNDEFINED; | |
992 | } | |
993 | } | |
994 | ||
995 | static void qxl_hard_reset(PCIQXLDevice *d, int loadvm) | |
996 | { | |
c480bb7d | 997 | trace_qxl_hard_reset(d->id, loadvm); |
a19cbfb3 | 998 | |
aee32bf3 GH |
999 | qxl_spice_reset_cursor(d); |
1000 | qxl_spice_reset_image_cache(d); | |
a19cbfb3 GH |
1001 | qxl_reset_surfaces(d); |
1002 | qxl_reset_memslots(d); | |
1003 | ||
1004 | /* pre loadvm reset must not touch QXLRam. This lives in | |
1005 | * device memory, is migrated together with RAM and thus | |
1006 | * already loaded at this point */ | |
1007 | if (!loadvm) { | |
1008 | qxl_reset_state(d); | |
1009 | } | |
1010 | qemu_spice_create_host_memslot(&d->ssd); | |
1011 | qxl_soft_reset(d); | |
a19cbfb3 GH |
1012 | } |
1013 | ||
1014 | static void qxl_reset_handler(DeviceState *dev) | |
1015 | { | |
1016 | PCIQXLDevice *d = DO_UPCAST(PCIQXLDevice, pci.qdev, dev); | |
c480bb7d | 1017 | |
a19cbfb3 GH |
1018 | qxl_hard_reset(d, 0); |
1019 | } | |
1020 | ||
1021 | static void qxl_vga_ioport_write(void *opaque, uint32_t addr, uint32_t val) | |
1022 | { | |
1023 | VGACommonState *vga = opaque; | |
1024 | PCIQXLDevice *qxl = container_of(vga, PCIQXLDevice, vga); | |
1025 | ||
c480bb7d | 1026 | trace_qxl_io_write_vga(qxl->id, qxl_mode_to_string(qxl->mode), addr, val); |
a19cbfb3 | 1027 | if (qxl->mode != QXL_MODE_VGA) { |
5ff4e36c | 1028 | qxl_destroy_primary(qxl, QXL_SYNC); |
a19cbfb3 GH |
1029 | qxl_soft_reset(qxl); |
1030 | } | |
1031 | vga_ioport_write(opaque, addr, val); | |
1032 | } | |
1033 | ||
f67ab77a GH |
1034 | static const MemoryRegionPortio qxl_vga_portio_list[] = { |
1035 | { 0x04, 2, 1, .read = vga_ioport_read, | |
1036 | .write = qxl_vga_ioport_write }, /* 3b4 */ | |
1037 | { 0x0a, 1, 1, .read = vga_ioport_read, | |
1038 | .write = qxl_vga_ioport_write }, /* 3ba */ | |
1039 | { 0x10, 16, 1, .read = vga_ioport_read, | |
1040 | .write = qxl_vga_ioport_write }, /* 3c0 */ | |
1041 | { 0x24, 2, 1, .read = vga_ioport_read, | |
1042 | .write = qxl_vga_ioport_write }, /* 3d4 */ | |
1043 | { 0x2a, 1, 1, .read = vga_ioport_read, | |
1044 | .write = qxl_vga_ioport_write }, /* 3da */ | |
1045 | PORTIO_END_OF_LIST(), | |
1046 | }; | |
1047 | ||
e954ea28 AL |
1048 | static int qxl_add_memslot(PCIQXLDevice *d, uint32_t slot_id, uint64_t delta, |
1049 | qxl_async_io async) | |
a19cbfb3 GH |
1050 | { |
1051 | static const int regions[] = { | |
1052 | QXL_RAM_RANGE_INDEX, | |
1053 | QXL_VRAM_RANGE_INDEX, | |
6f2b175a | 1054 | QXL_VRAM64_RANGE_INDEX, |
a19cbfb3 GH |
1055 | }; |
1056 | uint64_t guest_start; | |
1057 | uint64_t guest_end; | |
1058 | int pci_region; | |
1059 | pcibus_t pci_start; | |
1060 | pcibus_t pci_end; | |
1061 | intptr_t virt_start; | |
1062 | QXLDevMemSlot memslot; | |
1063 | int i; | |
1064 | ||
1065 | guest_start = le64_to_cpu(d->guest_slots[slot_id].slot.mem_start); | |
1066 | guest_end = le64_to_cpu(d->guest_slots[slot_id].slot.mem_end); | |
1067 | ||
c480bb7d | 1068 | trace_qxl_memslot_add_guest(d->id, slot_id, guest_start, guest_end); |
a19cbfb3 | 1069 | |
e954ea28 | 1070 | if (slot_id >= NUM_MEMSLOTS) { |
0a530548 | 1071 | qxl_set_guest_bug(d, "%s: slot_id >= NUM_MEMSLOTS %d >= %d", __func__, |
e954ea28 AL |
1072 | slot_id, NUM_MEMSLOTS); |
1073 | return 1; | |
1074 | } | |
1075 | if (guest_start > guest_end) { | |
0a530548 | 1076 | qxl_set_guest_bug(d, "%s: guest_start > guest_end 0x%" PRIx64 |
e954ea28 AL |
1077 | " > 0x%" PRIx64, __func__, guest_start, guest_end); |
1078 | return 1; | |
1079 | } | |
a19cbfb3 GH |
1080 | |
1081 | for (i = 0; i < ARRAY_SIZE(regions); i++) { | |
1082 | pci_region = regions[i]; | |
1083 | pci_start = d->pci.io_regions[pci_region].addr; | |
1084 | pci_end = pci_start + d->pci.io_regions[pci_region].size; | |
1085 | /* mapped? */ | |
1086 | if (pci_start == -1) { | |
1087 | continue; | |
1088 | } | |
1089 | /* start address in range ? */ | |
1090 | if (guest_start < pci_start || guest_start > pci_end) { | |
1091 | continue; | |
1092 | } | |
1093 | /* end address in range ? */ | |
1094 | if (guest_end > pci_end) { | |
1095 | continue; | |
1096 | } | |
1097 | /* passed */ | |
1098 | break; | |
1099 | } | |
e954ea28 | 1100 | if (i == ARRAY_SIZE(regions)) { |
0a530548 | 1101 | qxl_set_guest_bug(d, "%s: finished loop without match", __func__); |
e954ea28 AL |
1102 | return 1; |
1103 | } | |
a19cbfb3 GH |
1104 | |
1105 | switch (pci_region) { | |
1106 | case QXL_RAM_RANGE_INDEX: | |
b1950430 | 1107 | virt_start = (intptr_t)memory_region_get_ram_ptr(&d->vga.vram); |
a19cbfb3 GH |
1108 | break; |
1109 | case QXL_VRAM_RANGE_INDEX: | |
6f2b175a | 1110 | case 4 /* vram 64bit */: |
b1950430 | 1111 | virt_start = (intptr_t)memory_region_get_ram_ptr(&d->vram_bar); |
a19cbfb3 GH |
1112 | break; |
1113 | default: | |
1114 | /* should not happen */ | |
0a530548 | 1115 | qxl_set_guest_bug(d, "%s: pci_region = %d", __func__, pci_region); |
e954ea28 | 1116 | return 1; |
a19cbfb3 GH |
1117 | } |
1118 | ||
1119 | memslot.slot_id = slot_id; | |
1120 | memslot.slot_group_id = MEMSLOT_GROUP_GUEST; /* guest group */ | |
1121 | memslot.virt_start = virt_start + (guest_start - pci_start); | |
1122 | memslot.virt_end = virt_start + (guest_end - pci_start); | |
1123 | memslot.addr_delta = memslot.virt_start - delta; | |
1124 | memslot.generation = d->rom->slot_generation = 0; | |
1125 | qxl_rom_set_dirty(d); | |
1126 | ||
5ff4e36c | 1127 | qemu_spice_add_memslot(&d->ssd, &memslot, async); |
a19cbfb3 GH |
1128 | d->guest_slots[slot_id].ptr = (void*)memslot.virt_start; |
1129 | d->guest_slots[slot_id].size = memslot.virt_end - memslot.virt_start; | |
1130 | d->guest_slots[slot_id].delta = delta; | |
1131 | d->guest_slots[slot_id].active = 1; | |
e954ea28 | 1132 | return 0; |
a19cbfb3 GH |
1133 | } |
1134 | ||
1135 | static void qxl_del_memslot(PCIQXLDevice *d, uint32_t slot_id) | |
1136 | { | |
5c59d118 | 1137 | qemu_spice_del_memslot(&d->ssd, MEMSLOT_GROUP_HOST, slot_id); |
a19cbfb3 GH |
1138 | d->guest_slots[slot_id].active = 0; |
1139 | } | |
1140 | ||
1141 | static void qxl_reset_memslots(PCIQXLDevice *d) | |
1142 | { | |
aee32bf3 | 1143 | qxl_spice_reset_memslots(d); |
a19cbfb3 GH |
1144 | memset(&d->guest_slots, 0, sizeof(d->guest_slots)); |
1145 | } | |
1146 | ||
1147 | static void qxl_reset_surfaces(PCIQXLDevice *d) | |
1148 | { | |
c480bb7d | 1149 | trace_qxl_reset_surfaces(d->id); |
a19cbfb3 | 1150 | d->mode = QXL_MODE_UNDEFINED; |
5ff4e36c | 1151 | qxl_spice_destroy_surfaces(d, QXL_SYNC); |
a19cbfb3 GH |
1152 | } |
1153 | ||
e25139b3 | 1154 | /* can be also called from spice server thread context */ |
a19cbfb3 GH |
1155 | void *qxl_phys2virt(PCIQXLDevice *qxl, QXLPHYSICAL pqxl, int group_id) |
1156 | { | |
1157 | uint64_t phys = le64_to_cpu(pqxl); | |
1158 | uint32_t slot = (phys >> (64 - 8)) & 0xff; | |
1159 | uint64_t offset = phys & 0xffffffffffff; | |
1160 | ||
1161 | switch (group_id) { | |
1162 | case MEMSLOT_GROUP_HOST: | |
f4a8a424 | 1163 | return (void *)(intptr_t)offset; |
a19cbfb3 | 1164 | case MEMSLOT_GROUP_GUEST: |
4b635c59 | 1165 | if (slot >= NUM_MEMSLOTS) { |
0a530548 AL |
1166 | qxl_set_guest_bug(qxl, "slot too large %d >= %d", slot, |
1167 | NUM_MEMSLOTS); | |
4b635c59 AL |
1168 | return NULL; |
1169 | } | |
1170 | if (!qxl->guest_slots[slot].active) { | |
0a530548 | 1171 | qxl_set_guest_bug(qxl, "inactive slot %d\n", slot); |
4b635c59 AL |
1172 | return NULL; |
1173 | } | |
1174 | if (offset < qxl->guest_slots[slot].delta) { | |
0a530548 AL |
1175 | qxl_set_guest_bug(qxl, |
1176 | "slot %d offset %"PRIu64" < delta %"PRIu64"\n", | |
4b635c59 AL |
1177 | slot, offset, qxl->guest_slots[slot].delta); |
1178 | return NULL; | |
1179 | } | |
a19cbfb3 | 1180 | offset -= qxl->guest_slots[slot].delta; |
4b635c59 | 1181 | if (offset > qxl->guest_slots[slot].size) { |
0a530548 AL |
1182 | qxl_set_guest_bug(qxl, |
1183 | "slot %d offset %"PRIu64" > size %"PRIu64"\n", | |
4b635c59 AL |
1184 | slot, offset, qxl->guest_slots[slot].size); |
1185 | return NULL; | |
1186 | } | |
a19cbfb3 | 1187 | return qxl->guest_slots[slot].ptr + offset; |
a19cbfb3 | 1188 | } |
4b635c59 | 1189 | return NULL; |
a19cbfb3 GH |
1190 | } |
1191 | ||
5ff4e36c AL |
1192 | static void qxl_create_guest_primary_complete(PCIQXLDevice *qxl) |
1193 | { | |
1194 | /* for local rendering */ | |
1195 | qxl_render_resize(qxl); | |
1196 | } | |
1197 | ||
1198 | static void qxl_create_guest_primary(PCIQXLDevice *qxl, int loadvm, | |
1199 | qxl_async_io async) | |
a19cbfb3 GH |
1200 | { |
1201 | QXLDevSurfaceCreate surface; | |
1202 | QXLSurfaceCreate *sc = &qxl->guest_primary.surface; | |
13d1fd44 AL |
1203 | int size; |
1204 | int requested_height = le32_to_cpu(sc->height); | |
1205 | int requested_stride = le32_to_cpu(sc->stride); | |
1206 | ||
1207 | size = abs(requested_stride) * requested_height; | |
1208 | if (size > qxl->vgamem_size) { | |
1209 | qxl_set_guest_bug(qxl, "%s: requested primary larger then framebuffer" | |
1210 | " size", __func__); | |
1211 | return; | |
1212 | } | |
a19cbfb3 | 1213 | |
ddf9f4b7 | 1214 | if (qxl->mode == QXL_MODE_NATIVE) { |
0a530548 | 1215 | qxl_set_guest_bug(qxl, "%s: nop since already in QXL_MODE_NATIVE", |
ddf9f4b7 AL |
1216 | __func__); |
1217 | } | |
a19cbfb3 GH |
1218 | qxl_exit_vga_mode(qxl); |
1219 | ||
a19cbfb3 GH |
1220 | surface.format = le32_to_cpu(sc->format); |
1221 | surface.height = le32_to_cpu(sc->height); | |
1222 | surface.mem = le64_to_cpu(sc->mem); | |
1223 | surface.position = le32_to_cpu(sc->position); | |
1224 | surface.stride = le32_to_cpu(sc->stride); | |
1225 | surface.width = le32_to_cpu(sc->width); | |
1226 | surface.type = le32_to_cpu(sc->type); | |
1227 | surface.flags = le32_to_cpu(sc->flags); | |
c480bb7d AL |
1228 | trace_qxl_create_guest_primary(qxl->id, sc->width, sc->height, sc->mem, |
1229 | sc->format, sc->position); | |
1230 | trace_qxl_create_guest_primary_rest(qxl->id, sc->stride, sc->type, | |
1231 | sc->flags); | |
a19cbfb3 GH |
1232 | |
1233 | surface.mouse_mode = true; | |
1234 | surface.group_id = MEMSLOT_GROUP_GUEST; | |
1235 | if (loadvm) { | |
1236 | surface.flags |= QXL_SURF_FLAG_KEEP_DATA; | |
1237 | } | |
1238 | ||
1239 | qxl->mode = QXL_MODE_NATIVE; | |
1240 | qxl->cmdflags = 0; | |
5ff4e36c | 1241 | qemu_spice_create_primary_surface(&qxl->ssd, 0, &surface, async); |
a19cbfb3 | 1242 | |
5ff4e36c AL |
1243 | if (async == QXL_SYNC) { |
1244 | qxl_create_guest_primary_complete(qxl); | |
1245 | } | |
a19cbfb3 GH |
1246 | } |
1247 | ||
5ff4e36c AL |
1248 | /* return 1 if surface destoy was initiated (in QXL_ASYNC case) or |
1249 | * done (in QXL_SYNC case), 0 otherwise. */ | |
1250 | static int qxl_destroy_primary(PCIQXLDevice *d, qxl_async_io async) | |
a19cbfb3 GH |
1251 | { |
1252 | if (d->mode == QXL_MODE_UNDEFINED) { | |
5ff4e36c | 1253 | return 0; |
a19cbfb3 | 1254 | } |
c480bb7d | 1255 | trace_qxl_destroy_primary(d->id); |
a19cbfb3 | 1256 | d->mode = QXL_MODE_UNDEFINED; |
5ff4e36c | 1257 | qemu_spice_destroy_primary_surface(&d->ssd, 0, async); |
30f6da66 | 1258 | qxl_spice_reset_cursor(d); |
5ff4e36c | 1259 | return 1; |
a19cbfb3 GH |
1260 | } |
1261 | ||
1262 | static void qxl_set_mode(PCIQXLDevice *d, int modenr, int loadvm) | |
1263 | { | |
1264 | pcibus_t start = d->pci.io_regions[QXL_RAM_RANGE_INDEX].addr; | |
1265 | pcibus_t end = d->pci.io_regions[QXL_RAM_RANGE_INDEX].size + start; | |
1266 | QXLMode *mode = d->modes->modes + modenr; | |
1267 | uint64_t devmem = d->pci.io_regions[QXL_RAM_RANGE_INDEX].addr; | |
1268 | QXLMemSlot slot = { | |
1269 | .mem_start = start, | |
1270 | .mem_end = end | |
1271 | }; | |
1272 | QXLSurfaceCreate surface = { | |
1273 | .width = mode->x_res, | |
1274 | .height = mode->y_res, | |
1275 | .stride = -mode->x_res * 4, | |
1276 | .format = SPICE_SURFACE_FMT_32_xRGB, | |
1277 | .flags = loadvm ? QXL_SURF_FLAG_KEEP_DATA : 0, | |
1278 | .mouse_mode = true, | |
1279 | .mem = devmem + d->shadow_rom.draw_area_offset, | |
1280 | }; | |
1281 | ||
c480bb7d AL |
1282 | trace_qxl_set_mode(d->id, modenr, mode->x_res, mode->y_res, mode->bits, |
1283 | devmem); | |
a19cbfb3 GH |
1284 | if (!loadvm) { |
1285 | qxl_hard_reset(d, 0); | |
1286 | } | |
1287 | ||
1288 | d->guest_slots[0].slot = slot; | |
e954ea28 | 1289 | assert(qxl_add_memslot(d, 0, devmem, QXL_SYNC) == 0); |
a19cbfb3 GH |
1290 | |
1291 | d->guest_primary.surface = surface; | |
5ff4e36c | 1292 | qxl_create_guest_primary(d, 0, QXL_SYNC); |
a19cbfb3 GH |
1293 | |
1294 | d->mode = QXL_MODE_COMPAT; | |
1295 | d->cmdflags = QXL_COMMAND_FLAG_COMPAT; | |
1296 | #ifdef QXL_COMMAND_FLAG_COMPAT_16BPP /* new in spice 0.6.1 */ | |
1297 | if (mode->bits == 16) { | |
1298 | d->cmdflags |= QXL_COMMAND_FLAG_COMPAT_16BPP; | |
1299 | } | |
1300 | #endif | |
1301 | d->shadow_rom.mode = cpu_to_le32(modenr); | |
1302 | d->rom->mode = cpu_to_le32(modenr); | |
1303 | qxl_rom_set_dirty(d); | |
1304 | } | |
1305 | ||
b1950430 AK |
1306 | static void ioport_write(void *opaque, target_phys_addr_t addr, |
1307 | uint64_t val, unsigned size) | |
a19cbfb3 GH |
1308 | { |
1309 | PCIQXLDevice *d = opaque; | |
b1950430 | 1310 | uint32_t io_port = addr; |
5ff4e36c | 1311 | qxl_async_io async = QXL_SYNC; |
5ff4e36c | 1312 | uint32_t orig_io_port = io_port; |
a19cbfb3 | 1313 | |
087e6a42 AL |
1314 | if (d->guest_bug && !io_port == QXL_IO_RESET) { |
1315 | return; | |
1316 | } | |
1317 | ||
a19cbfb3 GH |
1318 | switch (io_port) { |
1319 | case QXL_IO_RESET: | |
1320 | case QXL_IO_SET_MODE: | |
1321 | case QXL_IO_MEMSLOT_ADD: | |
1322 | case QXL_IO_MEMSLOT_DEL: | |
1323 | case QXL_IO_CREATE_PRIMARY: | |
81144d1a | 1324 | case QXL_IO_UPDATE_IRQ: |
a3d14054 | 1325 | case QXL_IO_LOG: |
5ff4e36c AL |
1326 | case QXL_IO_MEMSLOT_ADD_ASYNC: |
1327 | case QXL_IO_CREATE_PRIMARY_ASYNC: | |
a19cbfb3 GH |
1328 | break; |
1329 | default: | |
e21a298a | 1330 | if (d->mode != QXL_MODE_VGA) { |
a19cbfb3 | 1331 | break; |
e21a298a | 1332 | } |
c480bb7d AL |
1333 | trace_qxl_io_unexpected_vga_mode(d->id, |
1334 | io_port, io_port_to_string(io_port)); | |
5ff4e36c AL |
1335 | /* be nice to buggy guest drivers */ |
1336 | if (io_port >= QXL_IO_UPDATE_AREA_ASYNC && | |
1337 | io_port <= QXL_IO_DESTROY_ALL_SURFACES_ASYNC) { | |
1338 | qxl_send_events(d, QXL_INTERRUPT_IO_CMD); | |
1339 | } | |
a19cbfb3 GH |
1340 | return; |
1341 | } | |
1342 | ||
5ff4e36c AL |
1343 | /* we change the io_port to avoid ifdeffery in the main switch */ |
1344 | orig_io_port = io_port; | |
1345 | switch (io_port) { | |
1346 | case QXL_IO_UPDATE_AREA_ASYNC: | |
1347 | io_port = QXL_IO_UPDATE_AREA; | |
1348 | goto async_common; | |
1349 | case QXL_IO_MEMSLOT_ADD_ASYNC: | |
1350 | io_port = QXL_IO_MEMSLOT_ADD; | |
1351 | goto async_common; | |
1352 | case QXL_IO_CREATE_PRIMARY_ASYNC: | |
1353 | io_port = QXL_IO_CREATE_PRIMARY; | |
1354 | goto async_common; | |
1355 | case QXL_IO_DESTROY_PRIMARY_ASYNC: | |
1356 | io_port = QXL_IO_DESTROY_PRIMARY; | |
1357 | goto async_common; | |
1358 | case QXL_IO_DESTROY_SURFACE_ASYNC: | |
1359 | io_port = QXL_IO_DESTROY_SURFACE_WAIT; | |
1360 | goto async_common; | |
1361 | case QXL_IO_DESTROY_ALL_SURFACES_ASYNC: | |
1362 | io_port = QXL_IO_DESTROY_ALL_SURFACES; | |
3e16b9c5 AL |
1363 | goto async_common; |
1364 | case QXL_IO_FLUSH_SURFACES_ASYNC: | |
5ff4e36c AL |
1365 | async_common: |
1366 | async = QXL_ASYNC; | |
1367 | qemu_mutex_lock(&d->async_lock); | |
1368 | if (d->current_async != QXL_UNDEFINED_IO) { | |
0a530548 | 1369 | qxl_set_guest_bug(d, "%d async started before last (%d) complete", |
5ff4e36c AL |
1370 | io_port, d->current_async); |
1371 | qemu_mutex_unlock(&d->async_lock); | |
1372 | return; | |
1373 | } | |
1374 | d->current_async = orig_io_port; | |
1375 | qemu_mutex_unlock(&d->async_lock); | |
5ff4e36c AL |
1376 | break; |
1377 | default: | |
1378 | break; | |
1379 | } | |
c480bb7d AL |
1380 | trace_qxl_io_write(d->id, qxl_mode_to_string(d->mode), addr, val, size, |
1381 | async); | |
5ff4e36c | 1382 | |
a19cbfb3 GH |
1383 | switch (io_port) { |
1384 | case QXL_IO_UPDATE_AREA: | |
1385 | { | |
81fb6f15 | 1386 | QXLCookie *cookie = NULL; |
a19cbfb3 | 1387 | QXLRect update = d->ram->update_area; |
81fb6f15 AL |
1388 | |
1389 | if (async == QXL_ASYNC) { | |
1390 | cookie = qxl_cookie_new(QXL_COOKIE_TYPE_IO, | |
1391 | QXL_IO_UPDATE_AREA_ASYNC); | |
1392 | cookie->u.area = update; | |
1393 | } | |
aee32bf3 | 1394 | qxl_spice_update_area(d, d->ram->update_surface, |
81fb6f15 AL |
1395 | cookie ? &cookie->u.area : &update, |
1396 | NULL, 0, 0, async, cookie); | |
a19cbfb3 GH |
1397 | break; |
1398 | } | |
1399 | case QXL_IO_NOTIFY_CMD: | |
5c59d118 | 1400 | qemu_spice_wakeup(&d->ssd); |
a19cbfb3 GH |
1401 | break; |
1402 | case QXL_IO_NOTIFY_CURSOR: | |
5c59d118 | 1403 | qemu_spice_wakeup(&d->ssd); |
a19cbfb3 GH |
1404 | break; |
1405 | case QXL_IO_UPDATE_IRQ: | |
40010aea | 1406 | qxl_update_irq(d); |
a19cbfb3 GH |
1407 | break; |
1408 | case QXL_IO_NOTIFY_OOM: | |
a19cbfb3 GH |
1409 | if (!SPICE_RING_IS_EMPTY(&d->ram->release_ring)) { |
1410 | break; | |
1411 | } | |
1412 | d->oom_running = 1; | |
aee32bf3 | 1413 | qxl_spice_oom(d); |
a19cbfb3 GH |
1414 | d->oom_running = 0; |
1415 | break; | |
1416 | case QXL_IO_SET_MODE: | |
a19cbfb3 GH |
1417 | qxl_set_mode(d, val, 0); |
1418 | break; | |
1419 | case QXL_IO_LOG: | |
1420 | if (d->guestdebug) { | |
a680f7e7 | 1421 | fprintf(stderr, "qxl/guest-%d: %" PRId64 ": %s", d->id, |
6ebebb55 | 1422 | qemu_get_clock_ns(vm_clock), d->ram->log_buf); |
a19cbfb3 GH |
1423 | } |
1424 | break; | |
1425 | case QXL_IO_RESET: | |
a19cbfb3 GH |
1426 | qxl_hard_reset(d, 0); |
1427 | break; | |
1428 | case QXL_IO_MEMSLOT_ADD: | |
2bce0400 | 1429 | if (val >= NUM_MEMSLOTS) { |
0a530548 | 1430 | qxl_set_guest_bug(d, "QXL_IO_MEMSLOT_ADD: val out of range"); |
2bce0400 GH |
1431 | break; |
1432 | } | |
1433 | if (d->guest_slots[val].active) { | |
0a530548 AL |
1434 | qxl_set_guest_bug(d, |
1435 | "QXL_IO_MEMSLOT_ADD: memory slot already active"); | |
2bce0400 GH |
1436 | break; |
1437 | } | |
a19cbfb3 | 1438 | d->guest_slots[val].slot = d->ram->mem_slot; |
5ff4e36c | 1439 | qxl_add_memslot(d, val, 0, async); |
a19cbfb3 GH |
1440 | break; |
1441 | case QXL_IO_MEMSLOT_DEL: | |
2bce0400 | 1442 | if (val >= NUM_MEMSLOTS) { |
0a530548 | 1443 | qxl_set_guest_bug(d, "QXL_IO_MEMSLOT_DEL: val out of range"); |
2bce0400 GH |
1444 | break; |
1445 | } | |
a19cbfb3 GH |
1446 | qxl_del_memslot(d, val); |
1447 | break; | |
1448 | case QXL_IO_CREATE_PRIMARY: | |
2bce0400 | 1449 | if (val != 0) { |
0a530548 | 1450 | qxl_set_guest_bug(d, "QXL_IO_CREATE_PRIMARY (async=%d): val != 0", |
5ff4e36c AL |
1451 | async); |
1452 | goto cancel_async; | |
2bce0400 | 1453 | } |
a19cbfb3 | 1454 | d->guest_primary.surface = d->ram->create_surface; |
5ff4e36c | 1455 | qxl_create_guest_primary(d, 0, async); |
a19cbfb3 GH |
1456 | break; |
1457 | case QXL_IO_DESTROY_PRIMARY: | |
2bce0400 | 1458 | if (val != 0) { |
0a530548 | 1459 | qxl_set_guest_bug(d, "QXL_IO_DESTROY_PRIMARY (async=%d): val != 0", |
5ff4e36c AL |
1460 | async); |
1461 | goto cancel_async; | |
1462 | } | |
5ff4e36c | 1463 | if (!qxl_destroy_primary(d, async)) { |
c480bb7d AL |
1464 | trace_qxl_io_destroy_primary_ignored(d->id, |
1465 | qxl_mode_to_string(d->mode)); | |
5ff4e36c | 1466 | goto cancel_async; |
2bce0400 | 1467 | } |
a19cbfb3 GH |
1468 | break; |
1469 | case QXL_IO_DESTROY_SURFACE_WAIT: | |
5ff4e36c | 1470 | if (val >= NUM_SURFACES) { |
0a530548 | 1471 | qxl_set_guest_bug(d, "QXL_IO_DESTROY_SURFACE (async=%d):" |
5f8daf2e | 1472 | "%" PRIu64 " >= NUM_SURFACES", async, val); |
5ff4e36c AL |
1473 | goto cancel_async; |
1474 | } | |
1475 | qxl_spice_destroy_surface_wait(d, val, async); | |
a19cbfb3 | 1476 | break; |
3e16b9c5 AL |
1477 | case QXL_IO_FLUSH_RELEASE: { |
1478 | QXLReleaseRing *ring = &d->ram->release_ring; | |
1479 | if (ring->prod - ring->cons + 1 == ring->num_items) { | |
1480 | fprintf(stderr, | |
1481 | "ERROR: no flush, full release ring [p%d,%dc]\n", | |
1482 | ring->prod, ring->cons); | |
1483 | } | |
1484 | qxl_push_free_res(d, 1 /* flush */); | |
3e16b9c5 AL |
1485 | break; |
1486 | } | |
1487 | case QXL_IO_FLUSH_SURFACES_ASYNC: | |
3e16b9c5 AL |
1488 | qxl_spice_flush_surfaces_async(d); |
1489 | break; | |
a19cbfb3 | 1490 | case QXL_IO_DESTROY_ALL_SURFACES: |
5ff4e36c AL |
1491 | d->mode = QXL_MODE_UNDEFINED; |
1492 | qxl_spice_destroy_surfaces(d, async); | |
a19cbfb3 GH |
1493 | break; |
1494 | default: | |
0a530548 | 1495 | qxl_set_guest_bug(d, "%s: unexpected ioport=0x%x\n", __func__, io_port); |
a19cbfb3 | 1496 | } |
5ff4e36c AL |
1497 | return; |
1498 | cancel_async: | |
5ff4e36c AL |
1499 | if (async) { |
1500 | qxl_send_events(d, QXL_INTERRUPT_IO_CMD); | |
1501 | qemu_mutex_lock(&d->async_lock); | |
1502 | d->current_async = QXL_UNDEFINED_IO; | |
1503 | qemu_mutex_unlock(&d->async_lock); | |
1504 | } | |
a19cbfb3 GH |
1505 | } |
1506 | ||
b1950430 AK |
1507 | static uint64_t ioport_read(void *opaque, target_phys_addr_t addr, |
1508 | unsigned size) | |
a19cbfb3 GH |
1509 | { |
1510 | PCIQXLDevice *d = opaque; | |
1511 | ||
c480bb7d | 1512 | trace_qxl_io_read_unexpected(d->id); |
a19cbfb3 GH |
1513 | return 0xff; |
1514 | } | |
1515 | ||
b1950430 AK |
1516 | static const MemoryRegionOps qxl_io_ops = { |
1517 | .read = ioport_read, | |
1518 | .write = ioport_write, | |
1519 | .valid = { | |
1520 | .min_access_size = 1, | |
1521 | .max_access_size = 1, | |
1522 | }, | |
1523 | }; | |
a19cbfb3 GH |
1524 | |
1525 | static void pipe_read(void *opaque) | |
1526 | { | |
1527 | PCIQXLDevice *d = opaque; | |
1528 | char dummy; | |
1529 | int len; | |
1530 | ||
1531 | do { | |
1532 | len = read(d->pipe[0], &dummy, sizeof(dummy)); | |
1533 | } while (len == sizeof(dummy)); | |
40010aea | 1534 | qxl_update_irq(d); |
a19cbfb3 GH |
1535 | } |
1536 | ||
a19cbfb3 GH |
1537 | static void qxl_send_events(PCIQXLDevice *d, uint32_t events) |
1538 | { | |
1539 | uint32_t old_pending; | |
1540 | uint32_t le_events = cpu_to_le32(events); | |
1541 | ||
71d388d4 | 1542 | assert(qemu_spice_display_is_running(&d->ssd)); |
a19cbfb3 GH |
1543 | old_pending = __sync_fetch_and_or(&d->ram->int_pending, le_events); |
1544 | if ((old_pending & le_events) == le_events) { | |
1545 | return; | |
1546 | } | |
691f5c7b | 1547 | if (qemu_thread_is_self(&d->main)) { |
40010aea | 1548 | qxl_update_irq(d); |
a19cbfb3 GH |
1549 | } else { |
1550 | if (write(d->pipe[1], d, 1) != 1) { | |
75fe0d7b | 1551 | dprint(d, 1, "%s: write to pipe failed\n", __func__); |
a19cbfb3 GH |
1552 | } |
1553 | } | |
1554 | } | |
1555 | ||
1556 | static void init_pipe_signaling(PCIQXLDevice *d) | |
1557 | { | |
aa3db423 AL |
1558 | if (pipe(d->pipe) < 0) { |
1559 | fprintf(stderr, "%s:%s: qxl pipe creation failed\n", | |
1560 | __FILE__, __func__); | |
1561 | exit(1); | |
1562 | } | |
1563 | fcntl(d->pipe[0], F_SETFL, O_NONBLOCK); | |
1564 | fcntl(d->pipe[1], F_SETFL, O_NONBLOCK); | |
1565 | fcntl(d->pipe[0], F_SETOWN, getpid()); | |
1566 | ||
1567 | qemu_thread_get_self(&d->main); | |
1568 | qemu_set_fd_handler(d->pipe[0], pipe_read, NULL, d); | |
a19cbfb3 GH |
1569 | } |
1570 | ||
1571 | /* graphics console */ | |
1572 | ||
1573 | static void qxl_hw_update(void *opaque) | |
1574 | { | |
1575 | PCIQXLDevice *qxl = opaque; | |
1576 | VGACommonState *vga = &qxl->vga; | |
1577 | ||
1578 | switch (qxl->mode) { | |
1579 | case QXL_MODE_VGA: | |
1580 | vga->update(vga); | |
1581 | break; | |
1582 | case QXL_MODE_COMPAT: | |
1583 | case QXL_MODE_NATIVE: | |
1584 | qxl_render_update(qxl); | |
1585 | break; | |
1586 | default: | |
1587 | break; | |
1588 | } | |
1589 | } | |
1590 | ||
1591 | static void qxl_hw_invalidate(void *opaque) | |
1592 | { | |
1593 | PCIQXLDevice *qxl = opaque; | |
1594 | VGACommonState *vga = &qxl->vga; | |
1595 | ||
1596 | vga->invalidate(vga); | |
1597 | } | |
1598 | ||
45efb161 | 1599 | static void qxl_hw_screen_dump(void *opaque, const char *filename, bool cswitch) |
a19cbfb3 GH |
1600 | { |
1601 | PCIQXLDevice *qxl = opaque; | |
1602 | VGACommonState *vga = &qxl->vga; | |
1603 | ||
1604 | switch (qxl->mode) { | |
1605 | case QXL_MODE_COMPAT: | |
1606 | case QXL_MODE_NATIVE: | |
1607 | qxl_render_update(qxl); | |
1608 | ppm_save(filename, qxl->ssd.ds->surface); | |
1609 | break; | |
1610 | case QXL_MODE_VGA: | |
45efb161 | 1611 | vga->screen_dump(vga, filename, cswitch); |
a19cbfb3 GH |
1612 | break; |
1613 | default: | |
1614 | break; | |
1615 | } | |
1616 | } | |
1617 | ||
1618 | static void qxl_hw_text_update(void *opaque, console_ch_t *chardata) | |
1619 | { | |
1620 | PCIQXLDevice *qxl = opaque; | |
1621 | VGACommonState *vga = &qxl->vga; | |
1622 | ||
1623 | if (qxl->mode == QXL_MODE_VGA) { | |
1624 | vga->text_update(vga, chardata); | |
1625 | return; | |
1626 | } | |
1627 | } | |
1628 | ||
e25139b3 YH |
1629 | static void qxl_dirty_surfaces(PCIQXLDevice *qxl) |
1630 | { | |
1631 | intptr_t vram_start; | |
1632 | int i; | |
1633 | ||
2aa9e85c | 1634 | if (qxl->mode != QXL_MODE_NATIVE && qxl->mode != QXL_MODE_COMPAT) { |
e25139b3 YH |
1635 | return; |
1636 | } | |
1637 | ||
1638 | /* dirty the primary surface */ | |
1639 | qxl_set_dirty(&qxl->vga.vram, qxl->shadow_rom.draw_area_offset, | |
1640 | qxl->shadow_rom.surface0_area_size); | |
1641 | ||
1642 | vram_start = (intptr_t)memory_region_get_ram_ptr(&qxl->vram_bar); | |
1643 | ||
1644 | /* dirty the off-screen surfaces */ | |
1645 | for (i = 0; i < NUM_SURFACES; i++) { | |
1646 | QXLSurfaceCmd *cmd; | |
1647 | intptr_t surface_offset; | |
1648 | int surface_size; | |
1649 | ||
1650 | if (qxl->guest_surfaces.cmds[i] == 0) { | |
1651 | continue; | |
1652 | } | |
1653 | ||
1654 | cmd = qxl_phys2virt(qxl, qxl->guest_surfaces.cmds[i], | |
1655 | MEMSLOT_GROUP_GUEST); | |
fae2afb1 | 1656 | assert(cmd); |
e25139b3 YH |
1657 | assert(cmd->type == QXL_SURFACE_CMD_CREATE); |
1658 | surface_offset = (intptr_t)qxl_phys2virt(qxl, | |
1659 | cmd->u.surface_create.data, | |
1660 | MEMSLOT_GROUP_GUEST); | |
fae2afb1 | 1661 | assert(surface_offset); |
e25139b3 YH |
1662 | surface_offset -= vram_start; |
1663 | surface_size = cmd->u.surface_create.height * | |
1664 | abs(cmd->u.surface_create.stride); | |
c480bb7d | 1665 | trace_qxl_surfaces_dirty(qxl->id, i, (int)surface_offset, surface_size); |
e25139b3 YH |
1666 | qxl_set_dirty(&qxl->vram_bar, surface_offset, surface_size); |
1667 | } | |
1668 | } | |
1669 | ||
1dfb4dd9 LC |
1670 | static void qxl_vm_change_state_handler(void *opaque, int running, |
1671 | RunState state) | |
a19cbfb3 GH |
1672 | { |
1673 | PCIQXLDevice *qxl = opaque; | |
1dfb4dd9 | 1674 | qemu_spice_vm_change_state_handler(&qxl->ssd, running, state); |
a19cbfb3 | 1675 | |
efbf2950 YH |
1676 | if (running) { |
1677 | /* | |
1678 | * if qxl_send_events was called from spice server context before | |
40010aea | 1679 | * migration ended, qxl_update_irq for these events might not have been |
efbf2950 YH |
1680 | * called |
1681 | */ | |
40010aea | 1682 | qxl_update_irq(qxl); |
e25139b3 YH |
1683 | } else { |
1684 | /* make sure surfaces are saved before migration */ | |
1685 | qxl_dirty_surfaces(qxl); | |
a19cbfb3 GH |
1686 | } |
1687 | } | |
1688 | ||
1689 | /* display change listener */ | |
1690 | ||
1691 | static void display_update(struct DisplayState *ds, int x, int y, int w, int h) | |
1692 | { | |
1693 | if (qxl0->mode == QXL_MODE_VGA) { | |
1694 | qemu_spice_display_update(&qxl0->ssd, x, y, w, h); | |
1695 | } | |
1696 | } | |
1697 | ||
1698 | static void display_resize(struct DisplayState *ds) | |
1699 | { | |
1700 | if (qxl0->mode == QXL_MODE_VGA) { | |
1701 | qemu_spice_display_resize(&qxl0->ssd); | |
1702 | } | |
1703 | } | |
1704 | ||
1705 | static void display_refresh(struct DisplayState *ds) | |
1706 | { | |
1707 | if (qxl0->mode == QXL_MODE_VGA) { | |
1708 | qemu_spice_display_refresh(&qxl0->ssd); | |
bb5a8cd5 AL |
1709 | } else { |
1710 | qemu_mutex_lock(&qxl0->ssd.lock); | |
1711 | qemu_spice_cursor_refresh_unlocked(&qxl0->ssd); | |
1712 | qemu_mutex_unlock(&qxl0->ssd.lock); | |
a19cbfb3 GH |
1713 | } |
1714 | } | |
1715 | ||
1716 | static DisplayChangeListener display_listener = { | |
1717 | .dpy_update = display_update, | |
1718 | .dpy_resize = display_resize, | |
1719 | .dpy_refresh = display_refresh, | |
1720 | }; | |
1721 | ||
13d1fd44 | 1722 | static void qxl_init_ramsize(PCIQXLDevice *qxl) |
a974192c | 1723 | { |
13d1fd44 AL |
1724 | /* vga mode framebuffer / primary surface (bar 0, first part) */ |
1725 | if (qxl->vgamem_size_mb < 8) { | |
1726 | qxl->vgamem_size_mb = 8; | |
1727 | } | |
1728 | qxl->vgamem_size = qxl->vgamem_size_mb * 1024 * 1024; | |
1729 | ||
1730 | /* vga ram (bar 0, total) */ | |
017438ee GH |
1731 | if (qxl->ram_size_mb != -1) { |
1732 | qxl->vga.vram_size = qxl->ram_size_mb * 1024 * 1024; | |
1733 | } | |
13d1fd44 AL |
1734 | if (qxl->vga.vram_size < qxl->vgamem_size * 2) { |
1735 | qxl->vga.vram_size = qxl->vgamem_size * 2; | |
a974192c GH |
1736 | } |
1737 | ||
6f2b175a GH |
1738 | /* vram32 (surfaces, 32bit, bar 1) */ |
1739 | if (qxl->vram32_size_mb != -1) { | |
1740 | qxl->vram32_size = qxl->vram32_size_mb * 1024 * 1024; | |
1741 | } | |
1742 | if (qxl->vram32_size < 4096) { | |
1743 | qxl->vram32_size = 4096; | |
1744 | } | |
1745 | ||
1746 | /* vram (surfaces, 64bit, bar 4+5) */ | |
017438ee GH |
1747 | if (qxl->vram_size_mb != -1) { |
1748 | qxl->vram_size = qxl->vram_size_mb * 1024 * 1024; | |
1749 | } | |
6f2b175a GH |
1750 | if (qxl->vram_size < qxl->vram32_size) { |
1751 | qxl->vram_size = qxl->vram32_size; | |
a974192c | 1752 | } |
6f2b175a | 1753 | |
a974192c | 1754 | if (qxl->revision == 1) { |
6f2b175a | 1755 | qxl->vram32_size = 4096; |
a974192c GH |
1756 | qxl->vram_size = 4096; |
1757 | } | |
13d1fd44 | 1758 | qxl->vgamem_size = msb_mask(qxl->vgamem_size * 2 - 1); |
a974192c | 1759 | qxl->vga.vram_size = msb_mask(qxl->vga.vram_size * 2 - 1); |
6f2b175a | 1760 | qxl->vram32_size = msb_mask(qxl->vram32_size * 2 - 1); |
a974192c GH |
1761 | qxl->vram_size = msb_mask(qxl->vram_size * 2 - 1); |
1762 | } | |
1763 | ||
a19cbfb3 GH |
1764 | static int qxl_init_common(PCIQXLDevice *qxl) |
1765 | { | |
1766 | uint8_t* config = qxl->pci.config; | |
a19cbfb3 GH |
1767 | uint32_t pci_device_rev; |
1768 | uint32_t io_size; | |
1769 | ||
1770 | qxl->mode = QXL_MODE_UNDEFINED; | |
1771 | qxl->generation = 1; | |
1772 | qxl->num_memslots = NUM_MEMSLOTS; | |
1773 | qxl->num_surfaces = NUM_SURFACES; | |
14898cf6 | 1774 | qemu_mutex_init(&qxl->track_lock); |
5ff4e36c AL |
1775 | qemu_mutex_init(&qxl->async_lock); |
1776 | qxl->current_async = QXL_UNDEFINED_IO; | |
087e6a42 | 1777 | qxl->guest_bug = 0; |
a19cbfb3 GH |
1778 | |
1779 | switch (qxl->revision) { | |
1780 | case 1: /* spice 0.4 -- qxl-1 */ | |
a19cbfb3 | 1781 | pci_device_rev = QXL_REVISION_STABLE_V04; |
3f6297b9 | 1782 | io_size = 8; |
a19cbfb3 GH |
1783 | break; |
1784 | case 2: /* spice 0.6 -- qxl-2 */ | |
a19cbfb3 | 1785 | pci_device_rev = QXL_REVISION_STABLE_V06; |
3f6297b9 | 1786 | io_size = 16; |
a19cbfb3 | 1787 | break; |
9197a7c8 | 1788 | case 3: /* qxl-3 */ |
9197a7c8 GH |
1789 | default: |
1790 | pci_device_rev = QXL_DEFAULT_REVISION; | |
3f6297b9 | 1791 | io_size = msb_mask(QXL_IO_RANGE_SIZE * 2 - 1); |
9197a7c8 | 1792 | break; |
a19cbfb3 GH |
1793 | } |
1794 | ||
a19cbfb3 GH |
1795 | pci_set_byte(&config[PCI_REVISION_ID], pci_device_rev); |
1796 | pci_set_byte(&config[PCI_INTERRUPT_PIN], 1); | |
1797 | ||
1798 | qxl->rom_size = qxl_rom_size(); | |
c5705a77 AK |
1799 | memory_region_init_ram(&qxl->rom_bar, "qxl.vrom", qxl->rom_size); |
1800 | vmstate_register_ram(&qxl->rom_bar, &qxl->pci.qdev); | |
a19cbfb3 GH |
1801 | init_qxl_rom(qxl); |
1802 | init_qxl_ram(qxl); | |
1803 | ||
c5705a77 AK |
1804 | memory_region_init_ram(&qxl->vram_bar, "qxl.vram", qxl->vram_size); |
1805 | vmstate_register_ram(&qxl->vram_bar, &qxl->pci.qdev); | |
6f2b175a GH |
1806 | memory_region_init_alias(&qxl->vram32_bar, "qxl.vram32", &qxl->vram_bar, |
1807 | 0, qxl->vram32_size); | |
a19cbfb3 | 1808 | |
b1950430 AK |
1809 | memory_region_init_io(&qxl->io_bar, &qxl_io_ops, qxl, |
1810 | "qxl-ioports", io_size); | |
1811 | if (qxl->id == 0) { | |
1812 | vga_dirty_log_start(&qxl->vga); | |
1813 | } | |
1814 | ||
1815 | ||
e824b2cc AK |
1816 | pci_register_bar(&qxl->pci, QXL_IO_RANGE_INDEX, |
1817 | PCI_BASE_ADDRESS_SPACE_IO, &qxl->io_bar); | |
a19cbfb3 | 1818 | |
e824b2cc AK |
1819 | pci_register_bar(&qxl->pci, QXL_ROM_RANGE_INDEX, |
1820 | PCI_BASE_ADDRESS_SPACE_MEMORY, &qxl->rom_bar); | |
a19cbfb3 | 1821 | |
e824b2cc AK |
1822 | pci_register_bar(&qxl->pci, QXL_RAM_RANGE_INDEX, |
1823 | PCI_BASE_ADDRESS_SPACE_MEMORY, &qxl->vga.vram); | |
a19cbfb3 | 1824 | |
e824b2cc | 1825 | pci_register_bar(&qxl->pci, QXL_VRAM_RANGE_INDEX, |
6f2b175a GH |
1826 | PCI_BASE_ADDRESS_SPACE_MEMORY, &qxl->vram32_bar); |
1827 | ||
1828 | if (qxl->vram32_size < qxl->vram_size) { | |
1829 | /* | |
1830 | * Make the 64bit vram bar show up only in case it is | |
1831 | * configured to be larger than the 32bit vram bar. | |
1832 | */ | |
1833 | pci_register_bar(&qxl->pci, QXL_VRAM64_RANGE_INDEX, | |
1834 | PCI_BASE_ADDRESS_SPACE_MEMORY | | |
1835 | PCI_BASE_ADDRESS_MEM_TYPE_64 | | |
1836 | PCI_BASE_ADDRESS_MEM_PREFETCH, | |
1837 | &qxl->vram_bar); | |
1838 | } | |
1839 | ||
1840 | /* print pci bar details */ | |
1841 | dprint(qxl, 1, "ram/%s: %d MB [region 0]\n", | |
1842 | qxl->id == 0 ? "pri" : "sec", | |
1843 | qxl->vga.vram_size / (1024*1024)); | |
1844 | dprint(qxl, 1, "vram/32: %d MB [region 1]\n", | |
1845 | qxl->vram32_size / (1024*1024)); | |
1846 | dprint(qxl, 1, "vram/64: %d MB %s\n", | |
1847 | qxl->vram_size / (1024*1024), | |
1848 | qxl->vram32_size < qxl->vram_size ? "[region 4]" : "[unmapped]"); | |
a19cbfb3 GH |
1849 | |
1850 | qxl->ssd.qxl.base.sif = &qxl_interface.base; | |
1851 | qxl->ssd.qxl.id = qxl->id; | |
1852 | qemu_spice_add_interface(&qxl->ssd.qxl.base); | |
1853 | qemu_add_vm_change_state_handler(qxl_vm_change_state_handler, qxl); | |
1854 | ||
1855 | init_pipe_signaling(qxl); | |
1856 | qxl_reset_state(qxl); | |
1857 | ||
81fb6f15 AL |
1858 | qxl->update_area_bh = qemu_bh_new(qxl_render_update_area_bh, qxl); |
1859 | ||
a19cbfb3 GH |
1860 | return 0; |
1861 | } | |
1862 | ||
1863 | static int qxl_init_primary(PCIDevice *dev) | |
1864 | { | |
1865 | PCIQXLDevice *qxl = DO_UPCAST(PCIQXLDevice, pci, dev); | |
1866 | VGACommonState *vga = &qxl->vga; | |
f67ab77a | 1867 | PortioList *qxl_vga_port_list = g_new(PortioList, 1); |
a19cbfb3 GH |
1868 | |
1869 | qxl->id = 0; | |
13d1fd44 | 1870 | qxl_init_ramsize(qxl); |
4a1e244e GH |
1871 | vga->vram_size_mb = qxl->vga.vram_size >> 20; |
1872 | vga_common_init(vga); | |
0a039dc7 | 1873 | vga_init(vga, pci_address_space(dev), pci_address_space_io(dev), false); |
f67ab77a GH |
1874 | portio_list_init(qxl_vga_port_list, qxl_vga_portio_list, vga, "vga"); |
1875 | portio_list_add(qxl_vga_port_list, pci_address_space_io(dev), 0x3b0); | |
a19cbfb3 GH |
1876 | |
1877 | vga->ds = graphic_console_init(qxl_hw_update, qxl_hw_invalidate, | |
1878 | qxl_hw_screen_dump, qxl_hw_text_update, qxl); | |
a963f876 | 1879 | qemu_spice_display_init_common(&qxl->ssd, vga->ds); |
a19cbfb3 GH |
1880 | |
1881 | qxl0 = qxl; | |
1882 | register_displaychangelistener(vga->ds, &display_listener); | |
1883 | ||
a19cbfb3 GH |
1884 | return qxl_init_common(qxl); |
1885 | } | |
1886 | ||
1887 | static int qxl_init_secondary(PCIDevice *dev) | |
1888 | { | |
1889 | static int device_id = 1; | |
1890 | PCIQXLDevice *qxl = DO_UPCAST(PCIQXLDevice, pci, dev); | |
a19cbfb3 GH |
1891 | |
1892 | qxl->id = device_id++; | |
13d1fd44 | 1893 | qxl_init_ramsize(qxl); |
c5705a77 AK |
1894 | memory_region_init_ram(&qxl->vga.vram, "qxl.vgavram", qxl->vga.vram_size); |
1895 | vmstate_register_ram(&qxl->vga.vram, &qxl->pci.qdev); | |
b1950430 | 1896 | qxl->vga.vram_ptr = memory_region_get_ram_ptr(&qxl->vga.vram); |
a19cbfb3 | 1897 | |
a19cbfb3 GH |
1898 | return qxl_init_common(qxl); |
1899 | } | |
1900 | ||
1901 | static void qxl_pre_save(void *opaque) | |
1902 | { | |
1903 | PCIQXLDevice* d = opaque; | |
1904 | uint8_t *ram_start = d->vga.vram_ptr; | |
1905 | ||
c480bb7d | 1906 | trace_qxl_pre_save(d->id); |
a19cbfb3 GH |
1907 | if (d->last_release == NULL) { |
1908 | d->last_release_offset = 0; | |
1909 | } else { | |
1910 | d->last_release_offset = (uint8_t *)d->last_release - ram_start; | |
1911 | } | |
1912 | assert(d->last_release_offset < d->vga.vram_size); | |
1913 | } | |
1914 | ||
1915 | static int qxl_pre_load(void *opaque) | |
1916 | { | |
1917 | PCIQXLDevice* d = opaque; | |
1918 | ||
c480bb7d | 1919 | trace_qxl_pre_load(d->id); |
a19cbfb3 GH |
1920 | qxl_hard_reset(d, 1); |
1921 | qxl_exit_vga_mode(d); | |
a19cbfb3 GH |
1922 | return 0; |
1923 | } | |
1924 | ||
54825d2e AL |
1925 | static void qxl_create_memslots(PCIQXLDevice *d) |
1926 | { | |
1927 | int i; | |
1928 | ||
1929 | for (i = 0; i < NUM_MEMSLOTS; i++) { | |
1930 | if (!d->guest_slots[i].active) { | |
1931 | continue; | |
1932 | } | |
54825d2e AL |
1933 | qxl_add_memslot(d, i, 0, QXL_SYNC); |
1934 | } | |
1935 | } | |
1936 | ||
a19cbfb3 GH |
1937 | static int qxl_post_load(void *opaque, int version) |
1938 | { | |
1939 | PCIQXLDevice* d = opaque; | |
1940 | uint8_t *ram_start = d->vga.vram_ptr; | |
1941 | QXLCommandExt *cmds; | |
54825d2e | 1942 | int in, out, newmode; |
a19cbfb3 | 1943 | |
a19cbfb3 GH |
1944 | assert(d->last_release_offset < d->vga.vram_size); |
1945 | if (d->last_release_offset == 0) { | |
1946 | d->last_release = NULL; | |
1947 | } else { | |
1948 | d->last_release = (QXLReleaseInfo *)(ram_start + d->last_release_offset); | |
1949 | } | |
1950 | ||
1951 | d->modes = (QXLModes*)((uint8_t*)d->rom + d->rom->modes_offset); | |
1952 | ||
c480bb7d | 1953 | trace_qxl_post_load(d->id, qxl_mode_to_string(d->mode)); |
a19cbfb3 GH |
1954 | newmode = d->mode; |
1955 | d->mode = QXL_MODE_UNDEFINED; | |
54825d2e | 1956 | |
a19cbfb3 GH |
1957 | switch (newmode) { |
1958 | case QXL_MODE_UNDEFINED: | |
1959 | break; | |
1960 | case QXL_MODE_VGA: | |
54825d2e | 1961 | qxl_create_memslots(d); |
a19cbfb3 GH |
1962 | qxl_enter_vga_mode(d); |
1963 | break; | |
1964 | case QXL_MODE_NATIVE: | |
54825d2e | 1965 | qxl_create_memslots(d); |
5ff4e36c | 1966 | qxl_create_guest_primary(d, 1, QXL_SYNC); |
a19cbfb3 GH |
1967 | |
1968 | /* replay surface-create and cursor-set commands */ | |
7267c094 | 1969 | cmds = g_malloc0(sizeof(QXLCommandExt) * (NUM_SURFACES + 1)); |
a19cbfb3 GH |
1970 | for (in = 0, out = 0; in < NUM_SURFACES; in++) { |
1971 | if (d->guest_surfaces.cmds[in] == 0) { | |
1972 | continue; | |
1973 | } | |
1974 | cmds[out].cmd.data = d->guest_surfaces.cmds[in]; | |
1975 | cmds[out].cmd.type = QXL_CMD_SURFACE; | |
1976 | cmds[out].group_id = MEMSLOT_GROUP_GUEST; | |
1977 | out++; | |
1978 | } | |
30f6da66 YH |
1979 | if (d->guest_cursor) { |
1980 | cmds[out].cmd.data = d->guest_cursor; | |
1981 | cmds[out].cmd.type = QXL_CMD_CURSOR; | |
1982 | cmds[out].group_id = MEMSLOT_GROUP_GUEST; | |
1983 | out++; | |
1984 | } | |
aee32bf3 | 1985 | qxl_spice_loadvm_commands(d, cmds, out); |
7267c094 | 1986 | g_free(cmds); |
a19cbfb3 GH |
1987 | |
1988 | break; | |
1989 | case QXL_MODE_COMPAT: | |
54825d2e AL |
1990 | /* note: no need to call qxl_create_memslots, qxl_set_mode |
1991 | * creates the mem slot. */ | |
a19cbfb3 GH |
1992 | qxl_set_mode(d, d->shadow_rom.mode, 1); |
1993 | break; | |
1994 | } | |
a19cbfb3 GH |
1995 | return 0; |
1996 | } | |
1997 | ||
b67737a6 | 1998 | #define QXL_SAVE_VERSION 21 |
a19cbfb3 GH |
1999 | |
2000 | static VMStateDescription qxl_memslot = { | |
2001 | .name = "qxl-memslot", | |
2002 | .version_id = QXL_SAVE_VERSION, | |
2003 | .minimum_version_id = QXL_SAVE_VERSION, | |
2004 | .fields = (VMStateField[]) { | |
2005 | VMSTATE_UINT64(slot.mem_start, struct guest_slots), | |
2006 | VMSTATE_UINT64(slot.mem_end, struct guest_slots), | |
2007 | VMSTATE_UINT32(active, struct guest_slots), | |
2008 | VMSTATE_END_OF_LIST() | |
2009 | } | |
2010 | }; | |
2011 | ||
2012 | static VMStateDescription qxl_surface = { | |
2013 | .name = "qxl-surface", | |
2014 | .version_id = QXL_SAVE_VERSION, | |
2015 | .minimum_version_id = QXL_SAVE_VERSION, | |
2016 | .fields = (VMStateField[]) { | |
2017 | VMSTATE_UINT32(width, QXLSurfaceCreate), | |
2018 | VMSTATE_UINT32(height, QXLSurfaceCreate), | |
2019 | VMSTATE_INT32(stride, QXLSurfaceCreate), | |
2020 | VMSTATE_UINT32(format, QXLSurfaceCreate), | |
2021 | VMSTATE_UINT32(position, QXLSurfaceCreate), | |
2022 | VMSTATE_UINT32(mouse_mode, QXLSurfaceCreate), | |
2023 | VMSTATE_UINT32(flags, QXLSurfaceCreate), | |
2024 | VMSTATE_UINT32(type, QXLSurfaceCreate), | |
2025 | VMSTATE_UINT64(mem, QXLSurfaceCreate), | |
2026 | VMSTATE_END_OF_LIST() | |
2027 | } | |
2028 | }; | |
2029 | ||
a19cbfb3 GH |
2030 | static VMStateDescription qxl_vmstate = { |
2031 | .name = "qxl", | |
2032 | .version_id = QXL_SAVE_VERSION, | |
2033 | .minimum_version_id = QXL_SAVE_VERSION, | |
2034 | .pre_save = qxl_pre_save, | |
2035 | .pre_load = qxl_pre_load, | |
2036 | .post_load = qxl_post_load, | |
2037 | .fields = (VMStateField []) { | |
2038 | VMSTATE_PCI_DEVICE(pci, PCIQXLDevice), | |
2039 | VMSTATE_STRUCT(vga, PCIQXLDevice, 0, vmstate_vga_common, VGACommonState), | |
2040 | VMSTATE_UINT32(shadow_rom.mode, PCIQXLDevice), | |
2041 | VMSTATE_UINT32(num_free_res, PCIQXLDevice), | |
2042 | VMSTATE_UINT32(last_release_offset, PCIQXLDevice), | |
2043 | VMSTATE_UINT32(mode, PCIQXLDevice), | |
2044 | VMSTATE_UINT32(ssd.unique, PCIQXLDevice), | |
b67737a6 GH |
2045 | VMSTATE_INT32_EQUAL(num_memslots, PCIQXLDevice), |
2046 | VMSTATE_STRUCT_ARRAY(guest_slots, PCIQXLDevice, NUM_MEMSLOTS, 0, | |
2047 | qxl_memslot, struct guest_slots), | |
2048 | VMSTATE_STRUCT(guest_primary.surface, PCIQXLDevice, 0, | |
2049 | qxl_surface, QXLSurfaceCreate), | |
2050 | VMSTATE_INT32_EQUAL(num_surfaces, PCIQXLDevice), | |
2051 | VMSTATE_ARRAY(guest_surfaces.cmds, PCIQXLDevice, NUM_SURFACES, 0, | |
2052 | vmstate_info_uint64, uint64_t), | |
2053 | VMSTATE_UINT64(guest_cursor, PCIQXLDevice), | |
a19cbfb3 GH |
2054 | VMSTATE_END_OF_LIST() |
2055 | }, | |
a19cbfb3 GH |
2056 | }; |
2057 | ||
78e60ba5 GH |
2058 | static Property qxl_properties[] = { |
2059 | DEFINE_PROP_UINT32("ram_size", PCIQXLDevice, vga.vram_size, | |
2060 | 64 * 1024 * 1024), | |
6f2b175a | 2061 | DEFINE_PROP_UINT32("vram_size", PCIQXLDevice, vram32_size, |
78e60ba5 GH |
2062 | 64 * 1024 * 1024), |
2063 | DEFINE_PROP_UINT32("revision", PCIQXLDevice, revision, | |
2064 | QXL_DEFAULT_REVISION), | |
2065 | DEFINE_PROP_UINT32("debug", PCIQXLDevice, debug, 0), | |
2066 | DEFINE_PROP_UINT32("guestdebug", PCIQXLDevice, guestdebug, 0), | |
2067 | DEFINE_PROP_UINT32("cmdlog", PCIQXLDevice, cmdlog, 0), | |
017438ee | 2068 | DEFINE_PROP_UINT32("ram_size_mb", PCIQXLDevice, ram_size_mb, -1), |
79ce3567 AL |
2069 | DEFINE_PROP_UINT32("vram_size_mb", PCIQXLDevice, vram32_size_mb, -1), |
2070 | DEFINE_PROP_UINT32("vram64_size_mb", PCIQXLDevice, vram_size_mb, -1), | |
9e56edcf | 2071 | DEFINE_PROP_UINT32("vgamem_mb", PCIQXLDevice, vgamem_size_mb, 16), |
78e60ba5 GH |
2072 | DEFINE_PROP_END_OF_LIST(), |
2073 | }; | |
2074 | ||
40021f08 AL |
2075 | static void qxl_primary_class_init(ObjectClass *klass, void *data) |
2076 | { | |
39bffca2 | 2077 | DeviceClass *dc = DEVICE_CLASS(klass); |
40021f08 AL |
2078 | PCIDeviceClass *k = PCI_DEVICE_CLASS(klass); |
2079 | ||
2080 | k->no_hotplug = 1; | |
2081 | k->init = qxl_init_primary; | |
2082 | k->romfile = "vgabios-qxl.bin"; | |
2083 | k->vendor_id = REDHAT_PCI_VENDOR_ID; | |
2084 | k->device_id = QXL_DEVICE_ID_STABLE; | |
2085 | k->class_id = PCI_CLASS_DISPLAY_VGA; | |
39bffca2 AL |
2086 | dc->desc = "Spice QXL GPU (primary, vga compatible)"; |
2087 | dc->reset = qxl_reset_handler; | |
2088 | dc->vmsd = &qxl_vmstate; | |
2089 | dc->props = qxl_properties; | |
40021f08 AL |
2090 | } |
2091 | ||
39bffca2 AL |
2092 | static TypeInfo qxl_primary_info = { |
2093 | .name = "qxl-vga", | |
2094 | .parent = TYPE_PCI_DEVICE, | |
2095 | .instance_size = sizeof(PCIQXLDevice), | |
2096 | .class_init = qxl_primary_class_init, | |
a19cbfb3 GH |
2097 | }; |
2098 | ||
40021f08 AL |
2099 | static void qxl_secondary_class_init(ObjectClass *klass, void *data) |
2100 | { | |
39bffca2 | 2101 | DeviceClass *dc = DEVICE_CLASS(klass); |
40021f08 AL |
2102 | PCIDeviceClass *k = PCI_DEVICE_CLASS(klass); |
2103 | ||
2104 | k->init = qxl_init_secondary; | |
2105 | k->vendor_id = REDHAT_PCI_VENDOR_ID; | |
2106 | k->device_id = QXL_DEVICE_ID_STABLE; | |
2107 | k->class_id = PCI_CLASS_DISPLAY_OTHER; | |
39bffca2 AL |
2108 | dc->desc = "Spice QXL GPU (secondary)"; |
2109 | dc->reset = qxl_reset_handler; | |
2110 | dc->vmsd = &qxl_vmstate; | |
2111 | dc->props = qxl_properties; | |
40021f08 AL |
2112 | } |
2113 | ||
39bffca2 AL |
2114 | static TypeInfo qxl_secondary_info = { |
2115 | .name = "qxl", | |
2116 | .parent = TYPE_PCI_DEVICE, | |
2117 | .instance_size = sizeof(PCIQXLDevice), | |
2118 | .class_init = qxl_secondary_class_init, | |
a19cbfb3 GH |
2119 | }; |
2120 | ||
83f7d43a | 2121 | static void qxl_register_types(void) |
a19cbfb3 | 2122 | { |
39bffca2 AL |
2123 | type_register_static(&qxl_primary_info); |
2124 | type_register_static(&qxl_secondary_info); | |
a19cbfb3 GH |
2125 | } |
2126 | ||
83f7d43a | 2127 | type_init(qxl_register_types) |