xref: /dragonfly/sys/dev/drm/drm_ioctl.c (revision 0600465e)
1 /*
2  * Created: Fri Jan  8 09:01:26 1999 by faith@valinux.com
3  *
4  * Copyright 1999 Precision Insight, Inc., Cedar Park, Texas.
5  * Copyright 2000 VA Linux Systems, Inc., Sunnyvale, California.
6  * All Rights Reserved.
7  *
8  * Author Rickard E. (Rik) Faith <faith@valinux.com>
9  * Author Gareth Hughes <gareth@valinux.com>
10  *
11  * Permission is hereby granted, free of charge, to any person obtaining a
12  * copy of this software and associated documentation files (the "Software"),
13  * to deal in the Software without restriction, including without limitation
14  * the rights to use, copy, modify, merge, publish, distribute, sublicense,
15  * and/or sell copies of the Software, and to permit persons to whom the
16  * Software is furnished to do so, subject to the following conditions:
17  *
18  * The above copyright notice and this permission notice (including the next
19  * paragraph) shall be included in all copies or substantial portions of the
20  * Software.
21  *
22  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
23  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
24  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
25  * VA LINUX SYSTEMS AND/OR ITS SUPPLIERS BE LIABLE FOR ANY CLAIM, DAMAGES OR
26  * OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
27  * ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
28  * OTHER DEALINGS IN THE SOFTWARE.
29  */
30 
31 #include <drm/drmP.h>
32 #include <drm/drm_core.h>
33 #include "drm_legacy.h"
34 #include "drm_internal.h"
35 #include "drm_crtc_internal.h"
36 
37 #include <linux/pci.h>
38 #include <linux/export.h>
39 
40 static int drm_version(struct drm_device *dev, void *data,
41 		       struct drm_file *file_priv);
42 
43 /*
44  * Get the bus id.
45  *
46  * \param inode device inode.
47  * \param file_priv DRM file private.
48  * \param cmd command.
49  * \param arg user argument, pointing to a drm_unique structure.
50  * \return zero on success or a negative number on failure.
51  *
52  * Copies the bus id from drm_device::unique into user space.
53  */
54 static int drm_getunique(struct drm_device *dev, void *data,
55 		  struct drm_file *file_priv)
56 {
57 	struct drm_unique *u = data;
58 
59 	if (u->unique_len >= dev->unique_len) {
60 		if (copy_to_user(u->unique, dev->unique, dev->unique_len))
61 			return -EFAULT;
62 	}
63 	u->unique_len = dev->unique_len;
64 
65 	return 0;
66 }
67 
68 /*
69  * Set the bus id.
70  *
71  * \param inode device inode.
72  * \param file_priv DRM file private.
73  * \param cmd command.
74  * \param arg user argument, pointing to a drm_unique structure.
75  * \return zero on success or a negative number on failure.
76  *
77  * Copies the bus id from userspace into drm_device::unique, and verifies that
78  * it matches the device this DRM is attached to (EINVAL otherwise).  Deprecated
79  * in interface version 1.1 and will return EBUSY when setversion has requested
80  * version 1.1 or greater. Also note that KMS is all version 1.1 and later and
81  * UMS was only ever supported on pci devices.
82  */
83 static int drm_setunique(struct drm_device *dev, void *data,
84 		  struct drm_file *file_priv)
85 {
86 	struct drm_unique *u = data;
87 	int ret;
88 	int domain, bus, slot, func;
89 	char *busid;
90 
91 	if (!u->unique_len || u->unique_len > 1024)
92 		return -EINVAL;
93 
94 	if (drm_core_check_feature(dev, DRIVER_MODESET))
95 		return 0;
96 
97 	busid = kmalloc(u->unique_len + 1, M_DRM, M_WAITOK);
98 	if (busid == NULL)
99 		return -ENOMEM;
100 
101 	if (copy_from_user(busid, u->unique, u->unique_len)) {
102 		kfree(busid);
103 		return -EFAULT;
104 	}
105 	busid[u->unique_len] = '\0';
106 
107 	/* Return error if the busid submitted doesn't match the device's actual
108 	 * busid.
109 	 */
110 	ret = ksscanf(busid, "PCI:%d:%d:%d", &bus, &slot, &func);
111 	if (ret != 3) {
112 		kfree(busid);
113 		return -EINVAL;
114 	}
115 	domain = bus >> 8;
116 	bus &= 0xff;
117 
118 	if ((domain != dev->pci_domain) ||
119 	    (bus != dev->pci_bus) ||
120 	    (slot != dev->pci_slot) ||
121 	    (func != dev->pci_func)) {
122 		kfree(busid);
123 		return -EINVAL;
124 	}
125 
126 	/* Actually set the device's busid now. */
127 	DRM_LOCK(dev);
128 	if (dev->unique_len || dev->unique) {
129 		DRM_UNLOCK(dev);
130 		return -EBUSY;
131 	}
132 
133 	dev->unique_len = u->unique_len;
134 	dev->unique = busid;
135 	DRM_UNLOCK(dev);
136 
137 	return 0;
138 }
139 
140 static int drm_set_busid(struct drm_device *dev, struct drm_file *file_priv)
141 {
142 
143 	DRM_LOCK(dev);
144 
145 	dev->unique_len = 20;
146 	dev->unique = kmalloc(dev->unique_len + 1, M_DRM, M_WAITOK | M_NULLOK);
147 	if (dev->unique == NULL) {
148 		DRM_UNLOCK(dev);
149 		return -ENOMEM;
150 	}
151 
152 	ksnprintf(dev->unique, dev->unique_len, "pci:%04x:%02x:%02x.%1x",
153 	    dev->pci_domain, dev->pci_bus, dev->pci_slot, dev->pci_func);
154 
155 	DRM_UNLOCK(dev);
156 
157 	return 0;
158 }
159 
160 /*
161  * Get client information.
162  *
163  * \param inode device inode.
164  * \param file_priv DRM file private.
165  * \param cmd command.
166  * \param arg user argument, pointing to a drm_client structure.
167  *
168  * \return zero on success or a negative number on failure.
169  *
170  * Searches for the client with the specified index and copies its information
171  * into userspace
172  */
173 static int drm_getclient(struct drm_device *dev, void *data,
174 		  struct drm_file *file_priv)
175 {
176 	struct drm_client *client = data;
177 	struct drm_file *pt;
178 	int idx;
179 	int i = 0;
180 
181 	idx = client->idx;
182 	DRM_LOCK(dev);
183 	list_for_each_entry(pt, &dev->filelist, lhead) {
184 		if (i++ >= idx) {
185 			client->auth  = pt->authenticated;
186 			client->pid   = pt->pid;
187 			client->uid   = pt->uid;
188 			client->magic = pt->magic;
189 			client->iocs  = pt->ioctl_count;
190 			DRM_UNLOCK(dev);
191 
192 			return 0;
193 		}
194 	}
195 	DRM_UNLOCK(dev);
196 
197 	return -EINVAL;
198 }
199 
200 /*
201  * Get statistics information.
202  *
203  * \param inode device inode.
204  * \param file_priv DRM file private.
205  * \param cmd command.
206  * \param arg user argument, pointing to a drm_stats structure.
207  *
208  * \return zero on success or a negative number on failure.
209  */
210 static int drm_getstats(struct drm_device *dev, void *data,
211 		 struct drm_file *file_priv)
212 {
213 	struct drm_stats *stats = data;
214 
215 	/* Clear stats to prevent userspace from eating its stack garbage. */
216 	memset(stats, 0, sizeof(*stats));
217 
218 	return 0;
219 }
220 
221 /*
222  * Get device/driver capabilities
223  */
224 static int drm_getcap(struct drm_device *dev, void *data, struct drm_file *file_priv)
225 {
226 	struct drm_get_cap *req = data;
227 
228 	req->value = 0;
229 	switch (req->capability) {
230 	case DRM_CAP_DUMB_BUFFER:
231 		if (dev->driver->dumb_create)
232 			req->value = 1;
233 		break;
234 	case DRM_CAP_VBLANK_HIGH_CRTC:
235 		req->value = 1;
236 		break;
237 	case DRM_CAP_DUMB_PREFERRED_DEPTH:
238 		req->value = dev->mode_config.preferred_depth;
239 		break;
240 	case DRM_CAP_DUMB_PREFER_SHADOW:
241 		req->value = dev->mode_config.prefer_shadow;
242 		break;
243 	case DRM_CAP_PRIME:
244 #ifndef __DragonFly__
245 		req->value |= dev->driver->prime_fd_to_handle ? DRM_PRIME_CAP_IMPORT : 0;
246 		req->value |= dev->driver->prime_handle_to_fd ? DRM_PRIME_CAP_EXPORT : 0;
247 #endif
248 		break;
249 	case DRM_CAP_TIMESTAMP_MONOTONIC:
250 		req->value = drm_timestamp_monotonic;
251 		break;
252 	case DRM_CAP_ASYNC_PAGE_FLIP:
253 		req->value = dev->mode_config.async_page_flip;
254 		break;
255 	case DRM_CAP_CURSOR_WIDTH:
256 		if (dev->mode_config.cursor_width)
257 			req->value = dev->mode_config.cursor_width;
258 		else
259 			req->value = 64;
260 		break;
261 	case DRM_CAP_CURSOR_HEIGHT:
262 		if (dev->mode_config.cursor_height)
263 			req->value = dev->mode_config.cursor_height;
264 		else
265 			req->value = 64;
266 		break;
267 	case DRM_CAP_ADDFB2_MODIFIERS:
268 		req->value = dev->mode_config.allow_fb_modifiers;
269 		break;
270 	default:
271 		return -EINVAL;
272 	}
273 	return 0;
274 }
275 
276 /*
277  * Set device/driver capabilities
278  */
279 static int
280 drm_setclientcap(struct drm_device *dev, void *data, struct drm_file *file_priv)
281 {
282 	struct drm_set_client_cap *req = data;
283 
284 	switch (req->capability) {
285 	case DRM_CLIENT_CAP_STEREO_3D:
286 		if (req->value > 1)
287 			return -EINVAL;
288 		file_priv->stereo_allowed = req->value;
289 		break;
290 	case DRM_CLIENT_CAP_UNIVERSAL_PLANES:
291 		if (req->value > 1)
292 			return -EINVAL;
293 		file_priv->universal_planes = req->value;
294 		break;
295 	case DRM_CLIENT_CAP_ATOMIC:
296 		if (!drm_core_check_feature(dev, DRIVER_ATOMIC))
297 			return -EINVAL;
298 		if (req->value > 1)
299 			return -EINVAL;
300 		file_priv->atomic = req->value;
301 		file_priv->universal_planes = req->value;
302 		break;
303 	default:
304 		return -EINVAL;
305 	}
306 
307 	return 0;
308 }
309 
310 /*
311  * Setversion ioctl.
312  *
313  * \param inode device inode.
314  * \param file_priv DRM file private.
315  * \param cmd command.
316  * \param arg user argument, pointing to a drm_lock structure.
317  * \return zero on success or negative number on failure.
318  *
319  * Sets the requested interface version
320  */
321 static int drm_setversion(struct drm_device *dev, void *data, struct drm_file *file_priv)
322 {
323 	struct drm_set_version *sv = data;
324 	struct drm_set_version ver;
325 	int if_version, retcode = 0;
326 
327 	/* Save the incoming data, and set the response before continuing
328 	 * any further.
329 	 */
330 	ver = *sv;
331 	sv->drm_di_major = DRM_IF_MAJOR;
332 	sv->drm_di_minor = DRM_IF_MINOR;
333 	sv->drm_dd_major = dev->driver->major;
334 	sv->drm_dd_minor = dev->driver->minor;
335 
336 	if (ver.drm_di_major != -1) {
337 		if (ver.drm_di_major != DRM_IF_MAJOR ||
338 		    ver.drm_di_minor < 0 || ver.drm_di_minor > DRM_IF_MINOR) {
339 			return -EINVAL;
340 		}
341 		if_version = DRM_IF_VERSION(ver.drm_di_major,
342 		    ver.drm_dd_minor);
343 		dev->if_version = DRM_MAX(if_version, dev->if_version);
344 		if (ver.drm_di_minor >= 1) {
345 			/*
346 			 * Version 1.1 includes tying of DRM to specific device
347 			 * Version 1.4 has proper PCI domain support
348 			 */
349 			retcode = drm_set_busid(dev, file_priv);
350 			if (retcode)
351 				return retcode;
352 		}
353 	}
354 
355 	if (ver.drm_dd_major != -1) {
356 		if (ver.drm_dd_major != dev->driver->major ||
357 		    ver.drm_dd_minor < 0 ||
358 		    ver.drm_dd_minor > dev->driver->minor)
359 		{
360 			return -EINVAL;
361 		}
362 	}
363 
364 	return 0;
365 }
366 
367 /**
368  * drm_noop - DRM no-op ioctl implemntation
369  * @dev: DRM device for the ioctl
370  * @data: data pointer for the ioctl
371  * @file_priv: DRM file for the ioctl call
372  *
373  * This no-op implementation for drm ioctls is useful for deprecated
374  * functionality where we can't return a failure code because existing userspace
375  * checks the result of the ioctl, but doesn't care about the action.
376  *
377  * Always returns successfully with 0.
378  */
379 int drm_noop(struct drm_device *dev, void *data,
380 	     struct drm_file *file_priv)
381 {
382 	DRM_DEBUG("\n");
383 	return 0;
384 }
385 EXPORT_SYMBOL(drm_noop);
386 
387 /**
388  * drm_invalid_op - DRM invalid ioctl implemntation
389  * @dev: DRM device for the ioctl
390  * @data: data pointer for the ioctl
391  * @file_priv: DRM file for the ioctl call
392  *
393  * This no-op implementation for drm ioctls is useful for deprecated
394  * functionality where we really don't want to allow userspace to call the ioctl
395  * any more. This is the case for old ums interfaces for drivers that
396  * transitioned to kms gradually and so kept the old legacy tables around. This
397  * only applies to radeon and i915 kms drivers, other drivers shouldn't need to
398  * use this function.
399  *
400  * Always fails with a return value of -EINVAL.
401  */
402 int drm_invalid_op(struct drm_device *dev, void *data,
403 		   struct drm_file *file_priv)
404 {
405 	return -EINVAL;
406 }
407 EXPORT_SYMBOL(drm_invalid_op);
408 
409 /*
410  * Copy and IOCTL return string to user space
411  */
412 static int drm_copy_field(char __user *buf, size_t *buf_len, const char *value)
413 {
414 	int len;
415 
416 	/* don't overflow userbuf */
417 	len = strlen(value);
418 	if (len > *buf_len)
419 		len = *buf_len;
420 
421 	/* let userspace know exact length of driver value (which could be
422 	 * larger than the userspace-supplied buffer) */
423 	*buf_len = strlen(value);
424 
425 	/* finally, try filling in the userbuf */
426 	if (len && buf)
427 		if (copy_to_user(buf, value, len))
428 			return -EFAULT;
429 	return 0;
430 }
431 
432 /*
433  * Get version information
434  *
435  * \param inode device inode.
436  * \param filp file pointer.
437  * \param cmd command.
438  * \param arg user argument, pointing to a drm_version structure.
439  * \return zero on success or negative number on failure.
440  *
441  * Fills in the version information in \p arg.
442  */
443 static int drm_version(struct drm_device *dev, void *data,
444 		       struct drm_file *file_priv)
445 {
446 	static int drm_version_initial;
447 	struct drm_version *version = data;
448 	int err;
449 
450 	if (drm_version_initial == 0) {
451 		int dummy;
452 
453 		++drm_version_initial;
454 		tsleep(&dummy, 0, "SDELAY", hz*2);
455 	}
456 
457 	version->version_major = dev->driver->major;
458 	version->version_minor = dev->driver->minor;
459 	version->version_patchlevel = dev->driver->patchlevel;
460 	err = drm_copy_field(version->name, &version->name_len,
461 			dev->driver->name);
462 	if (!err)
463 		err = drm_copy_field(version->date, &version->date_len,
464 				dev->driver->date);
465 	if (!err)
466 		err = drm_copy_field(version->desc, &version->desc_len,
467 				dev->driver->desc);
468 
469 	return err;
470 }
471 
472 /*
473  * drm_ioctl_permit - Check ioctl permissions against caller
474  *
475  * @flags: ioctl permission flags.
476  * @file_priv: Pointer to struct drm_file identifying the caller.
477  *
478  * Checks whether the caller is allowed to run an ioctl with the
479  * indicated permissions. If so, returns zero. Otherwise returns an
480  * error code suitable for ioctl return.
481  */
482 int drm_ioctl_permit(u32 flags, struct drm_file *file_priv)
483 {
484 	/* ROOT_ONLY is only for CAP_SYS_ADMIN */
485 	if (unlikely((flags & DRM_ROOT_ONLY) && !capable(CAP_SYS_ADMIN)))
486 		return -EACCES;
487 
488 	/* AUTH is only for authenticated or render client */
489 	if (unlikely((flags & DRM_AUTH) && !file_priv->authenticated))
490 		return -EACCES;
491 
492 	/* MASTER is only for master or control clients */
493 	if (unlikely((flags & DRM_MASTER) && !file_priv->master))
494 		return -EACCES;
495 
496 	return 0;
497 }
498 EXPORT_SYMBOL(drm_ioctl_permit);
499 
500 #define DRM_IOCTL_DEF(ioctl, _func, _flags)	\
501 	[DRM_IOCTL_NR(ioctl)] = {		\
502 		.cmd = ioctl,			\
503 		.func = _func,			\
504 		.flags = _flags,		\
505 		.name = #ioctl			\
506 	}
507 
508 /* Ioctl table */
509 static const struct drm_ioctl_desc drm_ioctls[] = {
510 	DRM_IOCTL_DEF(DRM_IOCTL_VERSION, drm_version,
511 		      DRM_UNLOCKED|DRM_RENDER_ALLOW|DRM_CONTROL_ALLOW),
512 	DRM_IOCTL_DEF(DRM_IOCTL_GET_UNIQUE, drm_getunique, 0),
513 	DRM_IOCTL_DEF(DRM_IOCTL_GET_MAGIC, drm_getmagic, 0),
514 	DRM_IOCTL_DEF(DRM_IOCTL_IRQ_BUSID, drm_irq_by_busid, DRM_MASTER|DRM_ROOT_ONLY),
515 	DRM_IOCTL_DEF(DRM_IOCTL_GET_MAP, drm_legacy_getmap_ioctl, DRM_UNLOCKED),
516 	DRM_IOCTL_DEF(DRM_IOCTL_GET_CLIENT, drm_getclient, DRM_UNLOCKED),
517 	DRM_IOCTL_DEF(DRM_IOCTL_GET_STATS, drm_getstats, DRM_UNLOCKED),
518 	DRM_IOCTL_DEF(DRM_IOCTL_GET_CAP, drm_getcap, DRM_UNLOCKED|DRM_RENDER_ALLOW),
519 	DRM_IOCTL_DEF(DRM_IOCTL_SET_CLIENT_CAP, drm_setclientcap, 0),
520 	DRM_IOCTL_DEF(DRM_IOCTL_SET_VERSION, drm_setversion, DRM_MASTER),
521 
522 	DRM_IOCTL_DEF(DRM_IOCTL_SET_UNIQUE, drm_setunique, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
523 	DRM_IOCTL_DEF(DRM_IOCTL_BLOCK, drm_noop, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
524 	DRM_IOCTL_DEF(DRM_IOCTL_UNBLOCK, drm_noop, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
525 	DRM_IOCTL_DEF(DRM_IOCTL_AUTH_MAGIC, drm_authmagic, DRM_AUTH|DRM_MASTER),
526 
527 #ifdef __DragonFly__
528 	DRM_IOCTL_DEF(DRM_IOCTL_GET_PCIINFO, drm_getpciinfo, DRM_UNLOCKED|DRM_RENDER_ALLOW),
529 #else
530 	DRM_IOCTL_DEF(DRM_IOCTL_ADD_MAP, drm_legacy_addmap_ioctl, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
531 #endif
532 	DRM_IOCTL_DEF(DRM_IOCTL_RM_MAP, drm_legacy_rmmap_ioctl, DRM_AUTH),
533 
534 	DRM_IOCTL_DEF(DRM_IOCTL_SET_SAREA_CTX, drm_legacy_setsareactx, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
535 	DRM_IOCTL_DEF(DRM_IOCTL_GET_SAREA_CTX, drm_legacy_getsareactx, DRM_AUTH),
536 
537 	DRM_IOCTL_DEF(DRM_IOCTL_SET_MASTER, drm_setmaster_ioctl, DRM_ROOT_ONLY),
538 	DRM_IOCTL_DEF(DRM_IOCTL_DROP_MASTER, drm_dropmaster_ioctl, DRM_ROOT_ONLY),
539 
540 	DRM_IOCTL_DEF(DRM_IOCTL_ADD_CTX, drm_legacy_addctx, DRM_AUTH|DRM_ROOT_ONLY),
541 	DRM_IOCTL_DEF(DRM_IOCTL_RM_CTX, drm_legacy_rmctx, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
542 	DRM_IOCTL_DEF(DRM_IOCTL_MOD_CTX, drm_noop, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
543 	DRM_IOCTL_DEF(DRM_IOCTL_GET_CTX, drm_legacy_getctx, DRM_AUTH),
544 	DRM_IOCTL_DEF(DRM_IOCTL_SWITCH_CTX, drm_legacy_switchctx, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
545 	DRM_IOCTL_DEF(DRM_IOCTL_NEW_CTX, drm_legacy_newctx, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
546 	DRM_IOCTL_DEF(DRM_IOCTL_RES_CTX, drm_legacy_resctx, DRM_AUTH),
547 
548 	DRM_IOCTL_DEF(DRM_IOCTL_ADD_DRAW, drm_noop, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
549 	DRM_IOCTL_DEF(DRM_IOCTL_RM_DRAW, drm_noop, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
550 
551 	DRM_IOCTL_DEF(DRM_IOCTL_LOCK, drm_legacy_lock, DRM_AUTH),
552 	DRM_IOCTL_DEF(DRM_IOCTL_UNLOCK, drm_legacy_unlock, DRM_AUTH),
553 
554 	DRM_IOCTL_DEF(DRM_IOCTL_FINISH, drm_noop, DRM_AUTH),
555 
556 	DRM_IOCTL_DEF(DRM_IOCTL_ADD_BUFS, drm_legacy_addbufs, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
557 	DRM_IOCTL_DEF(DRM_IOCTL_MARK_BUFS, drm_legacy_markbufs, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
558 	DRM_IOCTL_DEF(DRM_IOCTL_INFO_BUFS, drm_legacy_infobufs, DRM_AUTH),
559 	DRM_IOCTL_DEF(DRM_IOCTL_MAP_BUFS, drm_legacy_mapbufs, DRM_AUTH),
560 	DRM_IOCTL_DEF(DRM_IOCTL_FREE_BUFS, drm_legacy_freebufs, DRM_AUTH),
561 	DRM_IOCTL_DEF(DRM_IOCTL_DMA, drm_legacy_dma_ioctl, DRM_AUTH),
562 
563 	DRM_IOCTL_DEF(DRM_IOCTL_CONTROL, drm_control, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
564 
565 #if IS_ENABLED(CONFIG_AGP)
566 	DRM_IOCTL_DEF(DRM_IOCTL_AGP_ACQUIRE, drm_agp_acquire_ioctl, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
567 	DRM_IOCTL_DEF(DRM_IOCTL_AGP_RELEASE, drm_agp_release_ioctl, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
568 	DRM_IOCTL_DEF(DRM_IOCTL_AGP_ENABLE, drm_agp_enable_ioctl, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
569 	DRM_IOCTL_DEF(DRM_IOCTL_AGP_INFO, drm_agp_info_ioctl, DRM_AUTH),
570 	DRM_IOCTL_DEF(DRM_IOCTL_AGP_ALLOC, drm_agp_alloc_ioctl, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
571 	DRM_IOCTL_DEF(DRM_IOCTL_AGP_FREE, drm_agp_free_ioctl, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
572 	DRM_IOCTL_DEF(DRM_IOCTL_AGP_BIND, drm_agp_bind_ioctl, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
573 	DRM_IOCTL_DEF(DRM_IOCTL_AGP_UNBIND, drm_agp_unbind_ioctl, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
574 #endif
575 
576 	DRM_IOCTL_DEF(DRM_IOCTL_SG_ALLOC, drm_legacy_sg_alloc, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
577 	DRM_IOCTL_DEF(DRM_IOCTL_SG_FREE, drm_legacy_sg_free, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
578 
579 	DRM_IOCTL_DEF(DRM_IOCTL_WAIT_VBLANK, drm_wait_vblank, DRM_UNLOCKED),
580 
581 	DRM_IOCTL_DEF(DRM_IOCTL_MODESET_CTL, drm_modeset_ctl, 0),
582 
583 	DRM_IOCTL_DEF(DRM_IOCTL_UPDATE_DRAW, drm_noop, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
584 
585 	DRM_IOCTL_DEF(DRM_IOCTL_GEM_CLOSE, drm_gem_close_ioctl, DRM_UNLOCKED|DRM_RENDER_ALLOW),
586 	DRM_IOCTL_DEF(DRM_IOCTL_GEM_FLINK, drm_gem_flink_ioctl, DRM_AUTH|DRM_UNLOCKED),
587 	DRM_IOCTL_DEF(DRM_IOCTL_GEM_OPEN, drm_gem_open_ioctl, DRM_AUTH|DRM_UNLOCKED),
588 
589 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETRESOURCES, drm_mode_getresources, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
590 
591 	DRM_IOCTL_DEF(DRM_IOCTL_PRIME_HANDLE_TO_FD, drm_prime_handle_to_fd_ioctl, DRM_AUTH|DRM_UNLOCKED|DRM_RENDER_ALLOW),
592 	DRM_IOCTL_DEF(DRM_IOCTL_PRIME_FD_TO_HANDLE, drm_prime_fd_to_handle_ioctl, DRM_AUTH|DRM_UNLOCKED|DRM_RENDER_ALLOW),
593 
594 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETPLANERESOURCES, drm_mode_getplane_res, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
595 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETCRTC, drm_mode_getcrtc, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
596 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_SETCRTC, drm_mode_setcrtc, DRM_MASTER|DRM_CONTROL_ALLOW|DRM_UNLOCKED),
597 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETPLANE, drm_mode_getplane, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
598 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_SETPLANE, drm_mode_setplane, DRM_MASTER|DRM_CONTROL_ALLOW|DRM_UNLOCKED),
599 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_CURSOR, drm_mode_cursor_ioctl, DRM_MASTER|DRM_CONTROL_ALLOW|DRM_UNLOCKED),
600 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETGAMMA, drm_mode_gamma_get_ioctl, DRM_UNLOCKED),
601 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_SETGAMMA, drm_mode_gamma_set_ioctl, DRM_MASTER|DRM_UNLOCKED),
602 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETENCODER, drm_mode_getencoder, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
603 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETCONNECTOR, drm_mode_getconnector, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
604 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_ATTACHMODE, drm_noop, DRM_MASTER|DRM_CONTROL_ALLOW|DRM_UNLOCKED),
605 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_DETACHMODE, drm_noop, DRM_MASTER|DRM_CONTROL_ALLOW|DRM_UNLOCKED),
606 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETPROPERTY, drm_mode_getproperty_ioctl, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
607 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_SETPROPERTY, drm_mode_connector_property_set_ioctl, DRM_MASTER|DRM_CONTROL_ALLOW|DRM_UNLOCKED),
608 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETPROPBLOB, drm_mode_getblob_ioctl, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
609 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETFB, drm_mode_getfb, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
610 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_ADDFB, drm_mode_addfb, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
611 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_ADDFB2, drm_mode_addfb2, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
612 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_RMFB, drm_mode_rmfb, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
613 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_PAGE_FLIP, drm_mode_page_flip_ioctl, DRM_MASTER|DRM_CONTROL_ALLOW|DRM_UNLOCKED),
614 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_DIRTYFB, drm_mode_dirtyfb_ioctl, DRM_MASTER|DRM_CONTROL_ALLOW|DRM_UNLOCKED),
615 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_CREATE_DUMB, drm_mode_create_dumb_ioctl, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
616 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_MAP_DUMB, drm_mode_mmap_dumb_ioctl, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
617 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_DESTROY_DUMB, drm_mode_destroy_dumb_ioctl, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
618 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_OBJ_GETPROPERTIES, drm_mode_obj_get_properties_ioctl, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
619 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_OBJ_SETPROPERTY, drm_mode_obj_set_property_ioctl, DRM_MASTER|DRM_CONTROL_ALLOW|DRM_UNLOCKED),
620 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_CURSOR2, drm_mode_cursor2_ioctl, DRM_MASTER|DRM_CONTROL_ALLOW|DRM_UNLOCKED),
621 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_ATOMIC, drm_mode_atomic_ioctl, DRM_MASTER|DRM_CONTROL_ALLOW|DRM_UNLOCKED),
622 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_CREATEPROPBLOB, drm_mode_createblob_ioctl, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
623 	DRM_IOCTL_DEF(DRM_IOCTL_MODE_DESTROYPROPBLOB, drm_mode_destroyblob_ioctl, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
624 };
625 
626 #define DRM_CORE_IOCTL_COUNT	ARRAY_SIZE( drm_ioctls )
627 
628 /**
629  * drm_ioctl - ioctl callback implementation for DRM drivers
630  * @filp: file this ioctl is called on
631  * @cmd: ioctl cmd number
632  * @arg: user argument
633  *
634  * Looks up the ioctl function in the ::ioctls table, checking for root
635  * previleges if so required, and dispatches to the respective function.
636  *
637  * Returns:
638  * Zero on success, negative error code on failure.
639  */
640 int drm_ioctl(struct dev_ioctl_args *ap)
641 {
642 	struct file *filp = ap->a_fp;
643 	struct drm_file *file_priv = filp->private_data;
644 	struct drm_device *dev;
645 	const struct drm_ioctl_desc *ioctl = NULL;
646 	u_long cmd = ap->a_cmd;
647 	drm_ioctl_t *func;
648 	unsigned int nr = DRM_IOCTL_NR(cmd);
649 	int retcode = 0;
650 	caddr_t data = ap->a_data;
651 	bool is_driver_ioctl;
652 
653 	dev = drm_get_device_from_kdev(ap->a_head.a_dev);
654 
655 	if (drm_device_is_unplugged(dev))
656 		return -ENODEV;
657 
658 	is_driver_ioctl = nr >= DRM_COMMAND_BASE && nr < DRM_COMMAND_END;
659 
660 	if (IOCGROUP(cmd) != DRM_IOCTL_BASE) {
661 		DRM_DEBUG_FIOCTL("Bad ioctl group 0x%x\n", (int)IOCGROUP(cmd));
662 		return EINVAL;
663 	}
664 
665 	ioctl = &drm_ioctls[nr];
666 	/* It's not a core DRM ioctl, try driver-specific. */
667 	if (ioctl->func == NULL && nr >= DRM_COMMAND_BASE) {
668 		/* The array entries begin at DRM_COMMAND_BASE ioctl nr */
669 		nr -= DRM_COMMAND_BASE;
670 		if (nr >= dev->driver->num_ioctls) {
671 			return EINVAL;
672 		}
673 		ioctl = &dev->driver->ioctls[nr];
674 		is_driver_ioctl = 1;
675 	}
676 
677 	DRM_DEBUG_IOCTL("pid=%d, dev=0x%lx, auth=%d, %s\n",
678 		  DRM_CURRENTPID,
679 		  (long)dev->dev,
680 		  file_priv->authenticated, ioctl->name);
681 
682 	/* Do not trust userspace, use our own definition */
683 	func = ioctl->func;
684 
685 	if (unlikely(!func)) {
686 		DRM_DEBUG("no function\n");
687 		retcode = -EINVAL;
688 		goto err_i1;
689 	}
690 
691 	retcode = drm_ioctl_permit(ioctl->flags, file_priv);
692 	if (unlikely(retcode))
693 		goto err_i1;
694 
695 	/* Enforce sane locking for kms driver ioctls. Core ioctls are
696 	 * too messy still. */
697 	if (is_driver_ioctl) {
698 		if ((ioctl->flags & DRM_UNLOCKED) == 0)
699 			mutex_lock(&drm_global_mutex);
700 		/* shared code returns -errno */
701 		retcode = -func(dev, data, file_priv);
702 		if ((ioctl->flags & DRM_UNLOCKED) == 0)
703 			mutex_unlock(&drm_global_mutex);
704 	} else {
705 		retcode = -func(dev, data, file_priv);
706 	}
707 	if (retcode == ERESTARTSYS)
708 			retcode = EINTR;
709 
710       err_i1:
711 	if (!ioctl)
712 		DRM_DEBUG_FIOCTL("invalid ioctl: pid=%d, dev=0x%lx, auth=%d, cmd=0x%02lx, nr=0x%02x\n",
713 			  DRM_CURRENTPID,
714 			  (long)dev->dev,
715 			  file_priv->authenticated, cmd, nr);
716 
717 	if (retcode)
718 		DRM_DEBUG_FIOCTL("ret = %d\n", retcode);
719 	return retcode;
720 }
721 EXPORT_SYMBOL(drm_ioctl);
722 
723 /**
724  * drm_ioctl_flags - Check for core ioctl and return ioctl permission flags
725  * @nr: ioctl number
726  * @flags: where to return the ioctl permission flags
727  *
728  * This ioctl is only used by the vmwgfx driver to augment the access checks
729  * done by the drm core and insofar a pretty decent layering violation. This
730  * shouldn't be used by any drivers.
731  *
732  * Returns:
733  * True if the @nr corresponds to a DRM core ioctl numer, false otherwise.
734  */
735 bool drm_ioctl_flags(unsigned int nr, unsigned int *flags)
736 {
737 	if ((nr >= DRM_COMMAND_END && nr < DRM_CORE_IOCTL_COUNT) ||
738 	    (nr < DRM_COMMAND_BASE)) {
739 		*flags = drm_ioctls[nr].flags;
740 		return true;
741 	}
742 
743 	return false;
744 }
745 EXPORT_SYMBOL(drm_ioctl_flags);
746