xref: /openbsd-src/sys/dev/pci/drm/drm_syncobj.c (revision 198f0b5dccae76a18ee7603263e9fb6884a167ec)
1 /*
2  * Copyright 2017 Red Hat
3  * Parts ported from amdgpu (fence wait code).
4  * Copyright 2016 Advanced Micro Devices, Inc.
5  *
6  * Permission is hereby granted, free of charge, to any person obtaining a
7  * copy of this software and associated documentation files (the "Software"),
8  * to deal in the Software without restriction, including without limitation
9  * the rights to use, copy, modify, merge, publish, distribute, sublicense,
10  * and/or sell copies of the Software, and to permit persons to whom the
11  * Software is furnished to do so, subject to the following conditions:
12  *
13  * The above copyright notice and this permission notice (including the next
14  * paragraph) shall be included in all copies or substantial portions of the
15  * Software.
16  *
17  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
18  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
19  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
20  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
21  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
22  * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
23  * IN THE SOFTWARE.
24  *
25  * Authors:
26  *
27  */
28 
29 /**
30  * DOC: Overview
31  *
32  * DRM synchronisation objects (syncobj, see struct &drm_syncobj) provide a
33  * container for a synchronization primitive which can be used by userspace
34  * to explicitly synchronize GPU commands, can be shared between userspace
35  * processes, and can be shared between different DRM drivers.
36  * Their primary use-case is to implement Vulkan fences and semaphores.
37  * The syncobj userspace API provides ioctls for several operations:
38  *
39  *  - Creation and destruction of syncobjs
40  *  - Import and export of syncobjs to/from a syncobj file descriptor
41  *  - Import and export a syncobj's underlying fence to/from a sync file
42  *  - Reset a syncobj (set its fence to NULL)
43  *  - Signal a syncobj (set a trivially signaled fence)
44  *  - Wait for a syncobj's fence to appear and be signaled
45  *
46  * The syncobj userspace API also provides operations to manipulate a syncobj
47  * in terms of a timeline of struct &dma_fence_chain rather than a single
48  * struct &dma_fence, through the following operations:
49  *
50  *   - Signal a given point on the timeline
51  *   - Wait for a given point to appear and/or be signaled
52  *   - Import and export from/to a given point of a timeline
53  *
54  * At it's core, a syncobj is simply a wrapper around a pointer to a struct
55  * &dma_fence which may be NULL.
56  * When a syncobj is first created, its pointer is either NULL or a pointer
57  * to an already signaled fence depending on whether the
58  * &DRM_SYNCOBJ_CREATE_SIGNALED flag is passed to
59  * &DRM_IOCTL_SYNCOBJ_CREATE.
60  *
61  * If the syncobj is considered as a binary (its state is either signaled or
62  * unsignaled) primitive, when GPU work is enqueued in a DRM driver to signal
63  * the syncobj, the syncobj's fence is replaced with a fence which will be
64  * signaled by the completion of that work.
65  * If the syncobj is considered as a timeline primitive, when GPU work is
66  * enqueued in a DRM driver to signal the a given point of the syncobj, a new
67  * struct &dma_fence_chain pointing to the DRM driver's fence and also
68  * pointing to the previous fence that was in the syncobj. The new struct
69  * &dma_fence_chain fence replace the syncobj's fence and will be signaled by
70  * completion of the DRM driver's work and also any work associated with the
71  * fence previously in the syncobj.
72  *
73  * When GPU work which waits on a syncobj is enqueued in a DRM driver, at the
74  * time the work is enqueued, it waits on the syncobj's fence before
75  * submitting the work to hardware. That fence is either :
76  *
77  *    - The syncobj's current fence if the syncobj is considered as a binary
78  *      primitive.
79  *    - The struct &dma_fence associated with a given point if the syncobj is
80  *      considered as a timeline primitive.
81  *
82  * If the syncobj's fence is NULL or not present in the syncobj's timeline,
83  * the enqueue operation is expected to fail.
84  *
85  * With binary syncobj, all manipulation of the syncobjs's fence happens in
86  * terms of the current fence at the time the ioctl is called by userspace
87  * regardless of whether that operation is an immediate host-side operation
88  * (signal or reset) or or an operation which is enqueued in some driver
89  * queue. &DRM_IOCTL_SYNCOBJ_RESET and &DRM_IOCTL_SYNCOBJ_SIGNAL can be used
90  * to manipulate a syncobj from the host by resetting its pointer to NULL or
91  * setting its pointer to a fence which is already signaled.
92  *
93  * With a timeline syncobj, all manipulation of the synobj's fence happens in
94  * terms of a u64 value referring to point in the timeline. See
95  * dma_fence_chain_find_seqno() to see how a given point is found in the
96  * timeline.
97  *
98  * Note that applications should be careful to always use timeline set of
99  * ioctl() when dealing with syncobj considered as timeline. Using a binary
100  * set of ioctl() with a syncobj considered as timeline could result incorrect
101  * synchronization. The use of binary syncobj is supported through the
102  * timeline set of ioctl() by using a point value of 0, this will reproduce
103  * the behavior of the binary set of ioctl() (for example replace the
104  * syncobj's fence when signaling).
105  *
106  *
107  * Host-side wait on syncobjs
108  * --------------------------
109  *
110  * &DRM_IOCTL_SYNCOBJ_WAIT takes an array of syncobj handles and does a
111  * host-side wait on all of the syncobj fences simultaneously.
112  * If &DRM_SYNCOBJ_WAIT_FLAGS_WAIT_ALL is set, the wait ioctl will wait on
113  * all of the syncobj fences to be signaled before it returns.
114  * Otherwise, it returns once at least one syncobj fence has been signaled
115  * and the index of a signaled fence is written back to the client.
116  *
117  * Unlike the enqueued GPU work dependencies which fail if they see a NULL
118  * fence in a syncobj, if &DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT is set,
119  * the host-side wait will first wait for the syncobj to receive a non-NULL
120  * fence and then wait on that fence.
121  * If &DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT is not set and any one of the
122  * syncobjs in the array has a NULL fence, -EINVAL will be returned.
123  * Assuming the syncobj starts off with a NULL fence, this allows a client
124  * to do a host wait in one thread (or process) which waits on GPU work
125  * submitted in another thread (or process) without having to manually
126  * synchronize between the two.
127  * This requirement is inherited from the Vulkan fence API.
128  *
129  * Similarly, &DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT takes an array of syncobj
130  * handles as well as an array of u64 points and does a host-side wait on all
131  * of syncobj fences at the given points simultaneously.
132  *
133  * &DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT also adds the ability to wait for a given
134  * fence to materialize on the timeline without waiting for the fence to be
135  * signaled by using the &DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE flag. This
136  * requirement is inherited from the wait-before-signal behavior required by
137  * the Vulkan timeline semaphore API.
138  *
139  *
140  * Import/export of syncobjs
141  * -------------------------
142  *
143  * &DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE and &DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD
144  * provide two mechanisms for import/export of syncobjs.
145  *
146  * The first lets the client import or export an entire syncobj to a file
147  * descriptor.
148  * These fd's are opaque and have no other use case, except passing the
149  * syncobj between processes.
150  * All exported file descriptors and any syncobj handles created as a
151  * result of importing those file descriptors own a reference to the
152  * same underlying struct &drm_syncobj and the syncobj can be used
153  * persistently across all the processes with which it is shared.
154  * The syncobj is freed only once the last reference is dropped.
155  * Unlike dma-buf, importing a syncobj creates a new handle (with its own
156  * reference) for every import instead of de-duplicating.
157  * The primary use-case of this persistent import/export is for shared
158  * Vulkan fences and semaphores.
159  *
160  * The second import/export mechanism, which is indicated by
161  * &DRM_SYNCOBJ_FD_TO_HANDLE_FLAGS_IMPORT_SYNC_FILE or
162  * &DRM_SYNCOBJ_HANDLE_TO_FD_FLAGS_EXPORT_SYNC_FILE lets the client
163  * import/export the syncobj's current fence from/to a &sync_file.
164  * When a syncobj is exported to a sync file, that sync file wraps the
165  * sycnobj's fence at the time of export and any later signal or reset
166  * operations on the syncobj will not affect the exported sync file.
167  * When a sync file is imported into a syncobj, the syncobj's fence is set
168  * to the fence wrapped by that sync file.
169  * Because sync files are immutable, resetting or signaling the syncobj
170  * will not affect any sync files whose fences have been imported into the
171  * syncobj.
172  *
173  *
174  * Import/export of timeline points in timeline syncobjs
175  * -----------------------------------------------------
176  *
177  * &DRM_IOCTL_SYNCOBJ_TRANSFER provides a mechanism to transfer a struct
178  * &dma_fence_chain of a syncobj at a given u64 point to another u64 point
179  * into another syncobj.
180  *
181  * Note that if you want to transfer a struct &dma_fence_chain from a given
182  * point on a timeline syncobj from/into a binary syncobj, you can use the
183  * point 0 to mean take/replace the fence in the syncobj.
184  */
185 
186 #include <linux/anon_inodes.h>
187 #include <linux/file.h>
188 #include <linux/fs.h>
189 #include <linux/sched/signal.h>
190 #include <linux/sync_file.h>
191 #include <linux/uaccess.h>
192 
193 #include <drm/drm.h>
194 #include <drm/drm_drv.h>
195 #include <drm/drm_file.h>
196 #include <drm/drm_gem.h>
197 #include <drm/drm_print.h>
198 #include <drm/drm_syncobj.h>
199 #include <drm/drm_utils.h>
200 
201 #include "drm_internal.h"
202 
203 struct syncobj_wait_entry {
204 	struct list_head node;
205 #ifdef __linux__
206 	struct task_struct *task;
207 #else
208 	struct proc *task;
209 #endif
210 	struct dma_fence *fence;
211 	struct dma_fence_cb fence_cb;
212 	u64    point;
213 };
214 
215 static void syncobj_wait_syncobj_func(struct drm_syncobj *syncobj,
216 				      struct syncobj_wait_entry *wait);
217 
218 /**
219  * drm_syncobj_find - lookup and reference a sync object.
220  * @file_private: drm file private pointer
221  * @handle: sync object handle to lookup.
222  *
223  * Returns a reference to the syncobj pointed to by handle or NULL. The
224  * reference must be released by calling drm_syncobj_put().
225  */
226 struct drm_syncobj *drm_syncobj_find(struct drm_file *file_private,
227 				     u32 handle)
228 {
229 	struct drm_syncobj *syncobj;
230 
231 	spin_lock(&file_private->syncobj_table_lock);
232 
233 	/* Check if we currently have a reference on the object */
234 	syncobj = idr_find(&file_private->syncobj_idr, handle);
235 	if (syncobj)
236 		drm_syncobj_get(syncobj);
237 
238 	spin_unlock(&file_private->syncobj_table_lock);
239 
240 	return syncobj;
241 }
242 EXPORT_SYMBOL(drm_syncobj_find);
243 
244 static void drm_syncobj_fence_add_wait(struct drm_syncobj *syncobj,
245 				       struct syncobj_wait_entry *wait)
246 {
247 	struct dma_fence *fence;
248 
249 	if (wait->fence)
250 		return;
251 
252 	spin_lock(&syncobj->lock);
253 	/* We've already tried once to get a fence and failed.  Now that we
254 	 * have the lock, try one more time just to be sure we don't add a
255 	 * callback when a fence has already been set.
256 	 */
257 	fence = dma_fence_get(rcu_dereference_protected(syncobj->fence, 1));
258 	if (!fence || dma_fence_chain_find_seqno(&fence, wait->point)) {
259 		dma_fence_put(fence);
260 		list_add_tail(&wait->node, &syncobj->cb_list);
261 	} else if (!fence) {
262 		wait->fence = dma_fence_get_stub();
263 	} else {
264 		wait->fence = fence;
265 	}
266 	spin_unlock(&syncobj->lock);
267 }
268 
269 static void drm_syncobj_remove_wait(struct drm_syncobj *syncobj,
270 				    struct syncobj_wait_entry *wait)
271 {
272 	if (!wait->node.next)
273 		return;
274 
275 	spin_lock(&syncobj->lock);
276 	list_del_init(&wait->node);
277 	spin_unlock(&syncobj->lock);
278 }
279 
280 /**
281  * drm_syncobj_add_point - add new timeline point to the syncobj
282  * @syncobj: sync object to add timeline point do
283  * @chain: chain node to use to add the point
284  * @fence: fence to encapsulate in the chain node
285  * @point: sequence number to use for the point
286  *
287  * Add the chain node as new timeline point to the syncobj.
288  */
289 void drm_syncobj_add_point(struct drm_syncobj *syncobj,
290 			   struct dma_fence_chain *chain,
291 			   struct dma_fence *fence,
292 			   uint64_t point)
293 {
294 	struct syncobj_wait_entry *cur, *tmp;
295 	struct dma_fence *prev;
296 
297 	dma_fence_get(fence);
298 
299 	spin_lock(&syncobj->lock);
300 
301 	prev = drm_syncobj_fence_get(syncobj);
302 	/* You are adding an unorder point to timeline, which could cause payload returned from query_ioctl is 0! */
303 	if (prev && prev->seqno >= point)
304 		DRM_DEBUG("You are adding an unorder point to timeline!\n");
305 	dma_fence_chain_init(chain, prev, fence, point);
306 	rcu_assign_pointer(syncobj->fence, &chain->base);
307 
308 	list_for_each_entry_safe(cur, tmp, &syncobj->cb_list, node)
309 		syncobj_wait_syncobj_func(syncobj, cur);
310 	spin_unlock(&syncobj->lock);
311 
312 	/* Walk the chain once to trigger garbage collection */
313 	dma_fence_chain_for_each(fence, prev);
314 	dma_fence_put(prev);
315 }
316 EXPORT_SYMBOL(drm_syncobj_add_point);
317 
318 /**
319  * drm_syncobj_replace_fence - replace fence in a sync object.
320  * @syncobj: Sync object to replace fence in
321  * @fence: fence to install in sync file.
322  *
323  * This replaces the fence on a sync object.
324  */
325 void drm_syncobj_replace_fence(struct drm_syncobj *syncobj,
326 			       struct dma_fence *fence)
327 {
328 	struct dma_fence *old_fence;
329 	struct syncobj_wait_entry *cur, *tmp;
330 
331 	if (fence)
332 		dma_fence_get(fence);
333 
334 	spin_lock(&syncobj->lock);
335 
336 	old_fence = rcu_dereference_protected(syncobj->fence,
337 					      lockdep_is_held(&syncobj->lock));
338 	rcu_assign_pointer(syncobj->fence, fence);
339 
340 	if (fence != old_fence) {
341 		list_for_each_entry_safe(cur, tmp, &syncobj->cb_list, node)
342 			syncobj_wait_syncobj_func(syncobj, cur);
343 	}
344 
345 	spin_unlock(&syncobj->lock);
346 
347 	dma_fence_put(old_fence);
348 }
349 EXPORT_SYMBOL(drm_syncobj_replace_fence);
350 
351 /**
352  * drm_syncobj_assign_null_handle - assign a stub fence to the sync object
353  * @syncobj: sync object to assign the fence on
354  *
355  * Assign a already signaled stub fence to the sync object.
356  */
357 static int drm_syncobj_assign_null_handle(struct drm_syncobj *syncobj)
358 {
359 	struct dma_fence *fence = dma_fence_allocate_private_stub();
360 
361 	if (IS_ERR(fence))
362 		return PTR_ERR(fence);
363 
364 	drm_syncobj_replace_fence(syncobj, fence);
365 	dma_fence_put(fence);
366 	return 0;
367 }
368 
369 /* 5s default for wait submission */
370 #define DRM_SYNCOBJ_WAIT_FOR_SUBMIT_TIMEOUT 5000000000ULL
371 /**
372  * drm_syncobj_find_fence - lookup and reference the fence in a sync object
373  * @file_private: drm file private pointer
374  * @handle: sync object handle to lookup.
375  * @point: timeline point
376  * @flags: DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT or not
377  * @fence: out parameter for the fence
378  *
379  * This is just a convenience function that combines drm_syncobj_find() and
380  * drm_syncobj_fence_get().
381  *
382  * Returns 0 on success or a negative error value on failure. On success @fence
383  * contains a reference to the fence, which must be released by calling
384  * dma_fence_put().
385  */
386 int drm_syncobj_find_fence(struct drm_file *file_private,
387 			   u32 handle, u64 point, u64 flags,
388 			   struct dma_fence **fence)
389 {
390 	struct drm_syncobj *syncobj = drm_syncobj_find(file_private, handle);
391 	struct syncobj_wait_entry wait;
392 	u64 timeout = nsecs_to_jiffies64(DRM_SYNCOBJ_WAIT_FOR_SUBMIT_TIMEOUT);
393 	int ret;
394 
395 	if (!syncobj)
396 		return -ENOENT;
397 
398 	/* Waiting for userspace with locks help is illegal cause that can
399 	 * trivial deadlock with page faults for example. Make lockdep complain
400 	 * about it early on.
401 	 */
402 	if (flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT) {
403 		might_sleep();
404 		lockdep_assert_none_held_once();
405 	}
406 
407 	*fence = drm_syncobj_fence_get(syncobj);
408 
409 	if (*fence) {
410 		ret = dma_fence_chain_find_seqno(fence, point);
411 		if (!ret) {
412 			/* If the requested seqno is already signaled
413 			 * drm_syncobj_find_fence may return a NULL
414 			 * fence. To make sure the recipient gets
415 			 * signalled, use a new fence instead.
416 			 */
417 			if (!*fence)
418 				*fence = dma_fence_get_stub();
419 
420 			goto out;
421 		}
422 		dma_fence_put(*fence);
423 	} else {
424 		ret = -EINVAL;
425 	}
426 
427 	if (!(flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT))
428 		goto out;
429 
430 	memset(&wait, 0, sizeof(wait));
431 #ifdef __linux__
432 	wait.task = current;
433 #else
434 	wait.task = curproc;
435 #endif
436 	wait.point = point;
437 	drm_syncobj_fence_add_wait(syncobj, &wait);
438 
439 	do {
440 		set_current_state(TASK_INTERRUPTIBLE);
441 		if (wait.fence) {
442 			ret = 0;
443 			break;
444 		}
445                 if (timeout == 0) {
446                         ret = -ETIME;
447                         break;
448                 }
449 
450 		if (signal_pending(current)) {
451 			ret = -ERESTARTSYS;
452 			break;
453 		}
454 
455                 timeout = schedule_timeout(timeout);
456 	} while (1);
457 
458 	__set_current_state(TASK_RUNNING);
459 	*fence = wait.fence;
460 
461 	if (wait.node.next)
462 		drm_syncobj_remove_wait(syncobj, &wait);
463 
464 out:
465 	drm_syncobj_put(syncobj);
466 
467 	return ret;
468 }
469 EXPORT_SYMBOL(drm_syncobj_find_fence);
470 
471 /**
472  * drm_syncobj_free - free a sync object.
473  * @kref: kref to free.
474  *
475  * Only to be called from kref_put in drm_syncobj_put.
476  */
477 void drm_syncobj_free(struct kref *kref)
478 {
479 	struct drm_syncobj *syncobj = container_of(kref,
480 						   struct drm_syncobj,
481 						   refcount);
482 	drm_syncobj_replace_fence(syncobj, NULL);
483 	kfree(syncobj);
484 }
485 EXPORT_SYMBOL(drm_syncobj_free);
486 
487 /**
488  * drm_syncobj_create - create a new syncobj
489  * @out_syncobj: returned syncobj
490  * @flags: DRM_SYNCOBJ_* flags
491  * @fence: if non-NULL, the syncobj will represent this fence
492  *
493  * This is the first function to create a sync object. After creating, drivers
494  * probably want to make it available to userspace, either through
495  * drm_syncobj_get_handle() or drm_syncobj_get_fd().
496  *
497  * Returns 0 on success or a negative error value on failure.
498  */
499 int drm_syncobj_create(struct drm_syncobj **out_syncobj, uint32_t flags,
500 		       struct dma_fence *fence)
501 {
502 	int ret;
503 	struct drm_syncobj *syncobj;
504 
505 	syncobj = kzalloc(sizeof(struct drm_syncobj), GFP_KERNEL);
506 	if (!syncobj)
507 		return -ENOMEM;
508 
509 	kref_init(&syncobj->refcount);
510 	INIT_LIST_HEAD(&syncobj->cb_list);
511 	mtx_init(&syncobj->lock, IPL_NONE);
512 
513 	if (flags & DRM_SYNCOBJ_CREATE_SIGNALED) {
514 		ret = drm_syncobj_assign_null_handle(syncobj);
515 		if (ret < 0) {
516 			drm_syncobj_put(syncobj);
517 			return ret;
518 		}
519 	}
520 
521 	if (fence)
522 		drm_syncobj_replace_fence(syncobj, fence);
523 
524 	*out_syncobj = syncobj;
525 	return 0;
526 }
527 EXPORT_SYMBOL(drm_syncobj_create);
528 
529 /**
530  * drm_syncobj_get_handle - get a handle from a syncobj
531  * @file_private: drm file private pointer
532  * @syncobj: Sync object to export
533  * @handle: out parameter with the new handle
534  *
535  * Exports a sync object created with drm_syncobj_create() as a handle on
536  * @file_private to userspace.
537  *
538  * Returns 0 on success or a negative error value on failure.
539  */
540 int drm_syncobj_get_handle(struct drm_file *file_private,
541 			   struct drm_syncobj *syncobj, u32 *handle)
542 {
543 	int ret;
544 
545 	/* take a reference to put in the idr */
546 	drm_syncobj_get(syncobj);
547 
548 	idr_preload(GFP_KERNEL);
549 	spin_lock(&file_private->syncobj_table_lock);
550 	ret = idr_alloc(&file_private->syncobj_idr, syncobj, 1, 0, GFP_NOWAIT);
551 	spin_unlock(&file_private->syncobj_table_lock);
552 
553 	idr_preload_end();
554 
555 	if (ret < 0) {
556 		drm_syncobj_put(syncobj);
557 		return ret;
558 	}
559 
560 	*handle = ret;
561 	return 0;
562 }
563 EXPORT_SYMBOL(drm_syncobj_get_handle);
564 
565 static int drm_syncobj_create_as_handle(struct drm_file *file_private,
566 					u32 *handle, uint32_t flags)
567 {
568 	int ret;
569 	struct drm_syncobj *syncobj;
570 
571 	ret = drm_syncobj_create(&syncobj, flags, NULL);
572 	if (ret)
573 		return ret;
574 
575 	ret = drm_syncobj_get_handle(file_private, syncobj, handle);
576 	drm_syncobj_put(syncobj);
577 	return ret;
578 }
579 
580 static int drm_syncobj_destroy(struct drm_file *file_private,
581 			       u32 handle)
582 {
583 	struct drm_syncobj *syncobj;
584 
585 	spin_lock(&file_private->syncobj_table_lock);
586 	syncobj = idr_remove(&file_private->syncobj_idr, handle);
587 	spin_unlock(&file_private->syncobj_table_lock);
588 
589 	if (!syncobj)
590 		return -EINVAL;
591 
592 	drm_syncobj_put(syncobj);
593 	return 0;
594 }
595 
596 #ifdef notyet
597 static int drm_syncobj_file_release(struct inode *inode, struct file *file)
598 {
599 	struct drm_syncobj *syncobj = file->private_data;
600 
601 	drm_syncobj_put(syncobj);
602 	return 0;
603 }
604 
605 static const struct file_operations drm_syncobj_file_fops = {
606 	.release = drm_syncobj_file_release,
607 };
608 #endif
609 
610 /**
611  * drm_syncobj_get_fd - get a file descriptor from a syncobj
612  * @syncobj: Sync object to export
613  * @p_fd: out parameter with the new file descriptor
614  *
615  * Exports a sync object created with drm_syncobj_create() as a file descriptor.
616  *
617  * Returns 0 on success or a negative error value on failure.
618  */
619 int drm_syncobj_get_fd(struct drm_syncobj *syncobj, int *p_fd)
620 {
621 	STUB();
622 	return -ENOSYS;
623 #ifdef notyet
624 	struct file *file;
625 	int fd;
626 
627 	fd = get_unused_fd_flags(O_CLOEXEC);
628 	if (fd < 0)
629 		return fd;
630 
631 	file = anon_inode_getfile("syncobj_file",
632 				  &drm_syncobj_file_fops,
633 				  syncobj, 0);
634 	if (IS_ERR(file)) {
635 		put_unused_fd(fd);
636 		return PTR_ERR(file);
637 	}
638 
639 	drm_syncobj_get(syncobj);
640 	fd_install(fd, file);
641 
642 	*p_fd = fd;
643 	return 0;
644 #endif
645 }
646 EXPORT_SYMBOL(drm_syncobj_get_fd);
647 
648 static int drm_syncobj_handle_to_fd(struct drm_file *file_private,
649 				    u32 handle, int *p_fd)
650 {
651 	struct drm_syncobj *syncobj = drm_syncobj_find(file_private, handle);
652 	int ret;
653 
654 	if (!syncobj)
655 		return -EINVAL;
656 
657 	ret = drm_syncobj_get_fd(syncobj, p_fd);
658 	drm_syncobj_put(syncobj);
659 	return ret;
660 }
661 
662 static int drm_syncobj_fd_to_handle(struct drm_file *file_private,
663 				    int fd, u32 *handle)
664 {
665 	STUB();
666 	return -ENOSYS;
667 #ifdef notyet
668 	struct drm_syncobj *syncobj;
669 	struct fd f = fdget(fd);
670 	int ret;
671 
672 	if (!f.file)
673 		return -EINVAL;
674 
675 	if (f.file->f_op != &drm_syncobj_file_fops) {
676 		fdput(f);
677 		return -EINVAL;
678 	}
679 
680 	/* take a reference to put in the idr */
681 	syncobj = f.file->private_data;
682 	drm_syncobj_get(syncobj);
683 
684 	idr_preload(GFP_KERNEL);
685 	spin_lock(&file_private->syncobj_table_lock);
686 	ret = idr_alloc(&file_private->syncobj_idr, syncobj, 1, 0, GFP_NOWAIT);
687 	spin_unlock(&file_private->syncobj_table_lock);
688 	idr_preload_end();
689 
690 	if (ret > 0) {
691 		*handle = ret;
692 		ret = 0;
693 	} else
694 		drm_syncobj_put(syncobj);
695 
696 	fdput(f);
697 	return ret;
698 #endif
699 }
700 
701 static int drm_syncobj_import_sync_file_fence(struct drm_file *file_private,
702 					      int fd, int handle)
703 {
704 	struct dma_fence *fence = sync_file_get_fence(fd);
705 	struct drm_syncobj *syncobj;
706 
707 	if (!fence)
708 		return -EINVAL;
709 
710 	syncobj = drm_syncobj_find(file_private, handle);
711 	if (!syncobj) {
712 		dma_fence_put(fence);
713 		return -ENOENT;
714 	}
715 
716 	drm_syncobj_replace_fence(syncobj, fence);
717 	dma_fence_put(fence);
718 	drm_syncobj_put(syncobj);
719 	return 0;
720 }
721 
722 static int drm_syncobj_export_sync_file(struct drm_file *file_private,
723 					int handle, int *p_fd)
724 {
725 	int ret;
726 	struct dma_fence *fence;
727 	struct sync_file *sync_file;
728 	int fd = get_unused_fd_flags(O_CLOEXEC);
729 
730 	if (fd < 0)
731 		return fd;
732 
733 	ret = drm_syncobj_find_fence(file_private, handle, 0, 0, &fence);
734 	if (ret)
735 		goto err_put_fd;
736 
737 	sync_file = sync_file_create(fence);
738 
739 	dma_fence_put(fence);
740 
741 	if (!sync_file) {
742 		ret = -EINVAL;
743 		goto err_put_fd;
744 	}
745 
746 	fd_install(fd, sync_file->file);
747 
748 	*p_fd = fd;
749 	return 0;
750 err_put_fd:
751 	put_unused_fd(fd);
752 	return ret;
753 }
754 /**
755  * drm_syncobj_open - initializes syncobj file-private structures at devnode open time
756  * @file_private: drm file-private structure to set up
757  *
758  * Called at device open time, sets up the structure for handling refcounting
759  * of sync objects.
760  */
761 void
762 drm_syncobj_open(struct drm_file *file_private)
763 {
764 	idr_init_base(&file_private->syncobj_idr, 1);
765 	mtx_init(&file_private->syncobj_table_lock, IPL_NONE);
766 }
767 
768 static int
769 drm_syncobj_release_handle(int id, void *ptr, void *data)
770 {
771 	struct drm_syncobj *syncobj = ptr;
772 
773 	drm_syncobj_put(syncobj);
774 	return 0;
775 }
776 
777 /**
778  * drm_syncobj_release - release file-private sync object resources
779  * @file_private: drm file-private structure to clean up
780  *
781  * Called at close time when the filp is going away.
782  *
783  * Releases any remaining references on objects by this filp.
784  */
785 void
786 drm_syncobj_release(struct drm_file *file_private)
787 {
788 	idr_for_each(&file_private->syncobj_idr,
789 		     &drm_syncobj_release_handle, file_private);
790 	idr_destroy(&file_private->syncobj_idr);
791 }
792 
793 int
794 drm_syncobj_create_ioctl(struct drm_device *dev, void *data,
795 			 struct drm_file *file_private)
796 {
797 	struct drm_syncobj_create *args = data;
798 
799 	if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ))
800 		return -EOPNOTSUPP;
801 
802 	/* no valid flags yet */
803 	if (args->flags & ~DRM_SYNCOBJ_CREATE_SIGNALED)
804 		return -EINVAL;
805 
806 	return drm_syncobj_create_as_handle(file_private,
807 					    &args->handle, args->flags);
808 }
809 
810 int
811 drm_syncobj_destroy_ioctl(struct drm_device *dev, void *data,
812 			  struct drm_file *file_private)
813 {
814 	struct drm_syncobj_destroy *args = data;
815 
816 	if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ))
817 		return -EOPNOTSUPP;
818 
819 	/* make sure padding is empty */
820 	if (args->pad)
821 		return -EINVAL;
822 	return drm_syncobj_destroy(file_private, args->handle);
823 }
824 
825 int
826 drm_syncobj_handle_to_fd_ioctl(struct drm_device *dev, void *data,
827 				   struct drm_file *file_private)
828 {
829 	struct drm_syncobj_handle *args = data;
830 
831 	if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ))
832 		return -EOPNOTSUPP;
833 
834 	if (args->pad)
835 		return -EINVAL;
836 
837 	if (args->flags != 0 &&
838 	    args->flags != DRM_SYNCOBJ_HANDLE_TO_FD_FLAGS_EXPORT_SYNC_FILE)
839 		return -EINVAL;
840 
841 	if (args->flags & DRM_SYNCOBJ_HANDLE_TO_FD_FLAGS_EXPORT_SYNC_FILE)
842 		return drm_syncobj_export_sync_file(file_private, args->handle,
843 						    &args->fd);
844 
845 	return drm_syncobj_handle_to_fd(file_private, args->handle,
846 					&args->fd);
847 }
848 
849 int
850 drm_syncobj_fd_to_handle_ioctl(struct drm_device *dev, void *data,
851 				   struct drm_file *file_private)
852 {
853 	struct drm_syncobj_handle *args = data;
854 
855 	if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ))
856 		return -EOPNOTSUPP;
857 
858 	if (args->pad)
859 		return -EINVAL;
860 
861 	if (args->flags != 0 &&
862 	    args->flags != DRM_SYNCOBJ_FD_TO_HANDLE_FLAGS_IMPORT_SYNC_FILE)
863 		return -EINVAL;
864 
865 	if (args->flags & DRM_SYNCOBJ_FD_TO_HANDLE_FLAGS_IMPORT_SYNC_FILE)
866 		return drm_syncobj_import_sync_file_fence(file_private,
867 							  args->fd,
868 							  args->handle);
869 
870 	return drm_syncobj_fd_to_handle(file_private, args->fd,
871 					&args->handle);
872 }
873 
874 static int drm_syncobj_transfer_to_timeline(struct drm_file *file_private,
875 					    struct drm_syncobj_transfer *args)
876 {
877 	struct drm_syncobj *timeline_syncobj = NULL;
878 	struct dma_fence *fence;
879 	struct dma_fence_chain *chain;
880 	int ret;
881 
882 	timeline_syncobj = drm_syncobj_find(file_private, args->dst_handle);
883 	if (!timeline_syncobj) {
884 		return -ENOENT;
885 	}
886 	ret = drm_syncobj_find_fence(file_private, args->src_handle,
887 				     args->src_point, args->flags,
888 				     &fence);
889 	if (ret)
890 		goto err;
891 	chain = dma_fence_chain_alloc();
892 	if (!chain) {
893 		ret = -ENOMEM;
894 		goto err1;
895 	}
896 	drm_syncobj_add_point(timeline_syncobj, chain, fence, args->dst_point);
897 err1:
898 	dma_fence_put(fence);
899 err:
900 	drm_syncobj_put(timeline_syncobj);
901 
902 	return ret;
903 }
904 
905 static int
906 drm_syncobj_transfer_to_binary(struct drm_file *file_private,
907 			       struct drm_syncobj_transfer *args)
908 {
909 	struct drm_syncobj *binary_syncobj = NULL;
910 	struct dma_fence *fence;
911 	int ret;
912 
913 	binary_syncobj = drm_syncobj_find(file_private, args->dst_handle);
914 	if (!binary_syncobj)
915 		return -ENOENT;
916 	ret = drm_syncobj_find_fence(file_private, args->src_handle,
917 				     args->src_point, args->flags, &fence);
918 	if (ret)
919 		goto err;
920 	drm_syncobj_replace_fence(binary_syncobj, fence);
921 	dma_fence_put(fence);
922 err:
923 	drm_syncobj_put(binary_syncobj);
924 
925 	return ret;
926 }
927 int
928 drm_syncobj_transfer_ioctl(struct drm_device *dev, void *data,
929 			   struct drm_file *file_private)
930 {
931 	struct drm_syncobj_transfer *args = data;
932 	int ret;
933 
934 	if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ_TIMELINE))
935 		return -EOPNOTSUPP;
936 
937 	if (args->pad)
938 		return -EINVAL;
939 
940 	if (args->dst_point)
941 		ret = drm_syncobj_transfer_to_timeline(file_private, args);
942 	else
943 		ret = drm_syncobj_transfer_to_binary(file_private, args);
944 
945 	return ret;
946 }
947 
948 static void syncobj_wait_fence_func(struct dma_fence *fence,
949 				    struct dma_fence_cb *cb)
950 {
951 	struct syncobj_wait_entry *wait =
952 		container_of(cb, struct syncobj_wait_entry, fence_cb);
953 
954 	wake_up_process(wait->task);
955 }
956 
957 static void syncobj_wait_syncobj_func(struct drm_syncobj *syncobj,
958 				      struct syncobj_wait_entry *wait)
959 {
960 	struct dma_fence *fence;
961 
962 	/* This happens inside the syncobj lock */
963 	fence = rcu_dereference_protected(syncobj->fence,
964 					  lockdep_is_held(&syncobj->lock));
965 	dma_fence_get(fence);
966 	if (!fence || dma_fence_chain_find_seqno(&fence, wait->point)) {
967 		dma_fence_put(fence);
968 		return;
969 	} else if (!fence) {
970 		wait->fence = dma_fence_get_stub();
971 	} else {
972 		wait->fence = fence;
973 	}
974 
975 	wake_up_process(wait->task);
976 	list_del_init(&wait->node);
977 }
978 
979 static signed long drm_syncobj_array_wait_timeout(struct drm_syncobj **syncobjs,
980 						  void __user *user_points,
981 						  uint32_t count,
982 						  uint32_t flags,
983 						  signed long timeout,
984 						  uint32_t *idx)
985 {
986 	struct syncobj_wait_entry *entries;
987 	struct dma_fence *fence;
988 	uint64_t *points;
989 	uint32_t signaled_count, i;
990 
991 	if (flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT)
992 		lockdep_assert_none_held_once();
993 
994 	points = kmalloc_array(count, sizeof(*points), GFP_KERNEL);
995 	if (points == NULL)
996 		return -ENOMEM;
997 
998 	if (!user_points) {
999 		memset(points, 0, count * sizeof(uint64_t));
1000 
1001 	} else if (copy_from_user(points, user_points,
1002 				  sizeof(uint64_t) * count)) {
1003 		timeout = -EFAULT;
1004 		goto err_free_points;
1005 	}
1006 
1007 	entries = kcalloc(count, sizeof(*entries), GFP_KERNEL);
1008 	if (!entries) {
1009 		timeout = -ENOMEM;
1010 		goto err_free_points;
1011 	}
1012 	/* Walk the list of sync objects and initialize entries.  We do
1013 	 * this up-front so that we can properly return -EINVAL if there is
1014 	 * a syncobj with a missing fence and then never have the chance of
1015 	 * returning -EINVAL again.
1016 	 */
1017 	signaled_count = 0;
1018 	for (i = 0; i < count; ++i) {
1019 		struct dma_fence *fence;
1020 
1021 #ifdef __linux__
1022 		entries[i].task = current;
1023 #else
1024 		entries[i].task = curproc;
1025 #endif
1026 		entries[i].point = points[i];
1027 		fence = drm_syncobj_fence_get(syncobjs[i]);
1028 		if (!fence || dma_fence_chain_find_seqno(&fence, points[i])) {
1029 			dma_fence_put(fence);
1030 			if (flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT) {
1031 				continue;
1032 			} else {
1033 				timeout = -EINVAL;
1034 				goto cleanup_entries;
1035 			}
1036 		}
1037 
1038 		if (fence)
1039 			entries[i].fence = fence;
1040 		else
1041 			entries[i].fence = dma_fence_get_stub();
1042 
1043 		if ((flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE) ||
1044 		    dma_fence_is_signaled(entries[i].fence)) {
1045 			if (signaled_count == 0 && idx)
1046 				*idx = i;
1047 			signaled_count++;
1048 		}
1049 	}
1050 
1051 	if (signaled_count == count ||
1052 	    (signaled_count > 0 &&
1053 	     !(flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_ALL)))
1054 		goto cleanup_entries;
1055 
1056 	/* There's a very annoying laxness in the dma_fence API here, in
1057 	 * that backends are not required to automatically report when a
1058 	 * fence is signaled prior to fence->ops->enable_signaling() being
1059 	 * called.  So here if we fail to match signaled_count, we need to
1060 	 * fallthough and try a 0 timeout wait!
1061 	 */
1062 
1063 	if (flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT) {
1064 		for (i = 0; i < count; ++i)
1065 			drm_syncobj_fence_add_wait(syncobjs[i], &entries[i]);
1066 	}
1067 
1068 	do {
1069 		set_current_state(TASK_INTERRUPTIBLE);
1070 
1071 		signaled_count = 0;
1072 		for (i = 0; i < count; ++i) {
1073 			fence = entries[i].fence;
1074 			if (!fence)
1075 				continue;
1076 
1077 			if ((flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE) ||
1078 			    dma_fence_is_signaled(fence) ||
1079 			    (!entries[i].fence_cb.func &&
1080 			     dma_fence_add_callback(fence,
1081 						    &entries[i].fence_cb,
1082 						    syncobj_wait_fence_func))) {
1083 				/* The fence has been signaled */
1084 				if (flags & DRM_SYNCOBJ_WAIT_FLAGS_WAIT_ALL) {
1085 					signaled_count++;
1086 				} else {
1087 					if (idx)
1088 						*idx = i;
1089 					goto done_waiting;
1090 				}
1091 			}
1092 		}
1093 
1094 		if (signaled_count == count)
1095 			goto done_waiting;
1096 
1097 		if (timeout == 0) {
1098 			timeout = -ETIME;
1099 			goto done_waiting;
1100 		}
1101 
1102 		if (signal_pending(current)) {
1103 			timeout = -ERESTARTSYS;
1104 			goto done_waiting;
1105 		}
1106 
1107 		timeout = schedule_timeout(timeout);
1108 	} while (1);
1109 
1110 done_waiting:
1111 	__set_current_state(TASK_RUNNING);
1112 
1113 cleanup_entries:
1114 	for (i = 0; i < count; ++i) {
1115 		drm_syncobj_remove_wait(syncobjs[i], &entries[i]);
1116 		if (entries[i].fence_cb.func)
1117 			dma_fence_remove_callback(entries[i].fence,
1118 						  &entries[i].fence_cb);
1119 		dma_fence_put(entries[i].fence);
1120 	}
1121 	kfree(entries);
1122 
1123 err_free_points:
1124 	kfree(points);
1125 
1126 	return timeout;
1127 }
1128 
1129 /**
1130  * drm_timeout_abs_to_jiffies - calculate jiffies timeout from absolute value
1131  *
1132  * @timeout_nsec: timeout nsec component in ns, 0 for poll
1133  *
1134  * Calculate the timeout in jiffies from an absolute time in sec/nsec.
1135  */
1136 signed long drm_timeout_abs_to_jiffies(int64_t timeout_nsec)
1137 {
1138 	ktime_t abs_timeout, now;
1139 	u64 timeout_ns, timeout_jiffies64;
1140 
1141 	/* make 0 timeout means poll - absolute 0 doesn't seem valid */
1142 	if (timeout_nsec == 0)
1143 		return 0;
1144 
1145 	abs_timeout = ns_to_ktime(timeout_nsec);
1146 	now = ktime_get();
1147 
1148 	if (!ktime_after(abs_timeout, now))
1149 		return 0;
1150 
1151 	timeout_ns = ktime_to_ns(ktime_sub(abs_timeout, now));
1152 
1153 	timeout_jiffies64 = nsecs_to_jiffies64(timeout_ns);
1154 	/*  clamp timeout to avoid infinite timeout */
1155 	if (timeout_jiffies64 >= MAX_SCHEDULE_TIMEOUT - 1)
1156 		return MAX_SCHEDULE_TIMEOUT - 1;
1157 
1158 	return timeout_jiffies64 + 1;
1159 }
1160 EXPORT_SYMBOL(drm_timeout_abs_to_jiffies);
1161 
1162 static int drm_syncobj_array_wait(struct drm_device *dev,
1163 				  struct drm_file *file_private,
1164 				  struct drm_syncobj_wait *wait,
1165 				  struct drm_syncobj_timeline_wait *timeline_wait,
1166 				  struct drm_syncobj **syncobjs, bool timeline)
1167 {
1168 	signed long timeout = 0;
1169 	uint32_t first = ~0;
1170 
1171 	if (!timeline) {
1172 		timeout = drm_timeout_abs_to_jiffies(wait->timeout_nsec);
1173 		timeout = drm_syncobj_array_wait_timeout(syncobjs,
1174 							 NULL,
1175 							 wait->count_handles,
1176 							 wait->flags,
1177 							 timeout, &first);
1178 		if (timeout < 0)
1179 			return timeout;
1180 		wait->first_signaled = first;
1181 	} else {
1182 		timeout = drm_timeout_abs_to_jiffies(timeline_wait->timeout_nsec);
1183 		timeout = drm_syncobj_array_wait_timeout(syncobjs,
1184 							 u64_to_user_ptr(timeline_wait->points),
1185 							 timeline_wait->count_handles,
1186 							 timeline_wait->flags,
1187 							 timeout, &first);
1188 		if (timeout < 0)
1189 			return timeout;
1190 		timeline_wait->first_signaled = first;
1191 	}
1192 	return 0;
1193 }
1194 
1195 static int drm_syncobj_array_find(struct drm_file *file_private,
1196 				  void __user *user_handles,
1197 				  uint32_t count_handles,
1198 				  struct drm_syncobj ***syncobjs_out)
1199 {
1200 	uint32_t i, *handles;
1201 	struct drm_syncobj **syncobjs;
1202 	int ret;
1203 
1204 	handles = kmalloc_array(count_handles, sizeof(*handles), GFP_KERNEL);
1205 	if (handles == NULL)
1206 		return -ENOMEM;
1207 
1208 	if (copy_from_user(handles, user_handles,
1209 			   sizeof(uint32_t) * count_handles)) {
1210 		ret = -EFAULT;
1211 		goto err_free_handles;
1212 	}
1213 
1214 	syncobjs = kmalloc_array(count_handles, sizeof(*syncobjs), GFP_KERNEL);
1215 	if (syncobjs == NULL) {
1216 		ret = -ENOMEM;
1217 		goto err_free_handles;
1218 	}
1219 
1220 	for (i = 0; i < count_handles; i++) {
1221 		syncobjs[i] = drm_syncobj_find(file_private, handles[i]);
1222 		if (!syncobjs[i]) {
1223 			ret = -ENOENT;
1224 			goto err_put_syncobjs;
1225 		}
1226 	}
1227 
1228 	kfree(handles);
1229 	*syncobjs_out = syncobjs;
1230 	return 0;
1231 
1232 err_put_syncobjs:
1233 	while (i-- > 0)
1234 		drm_syncobj_put(syncobjs[i]);
1235 	kfree(syncobjs);
1236 err_free_handles:
1237 	kfree(handles);
1238 
1239 	return ret;
1240 }
1241 
1242 static void drm_syncobj_array_free(struct drm_syncobj **syncobjs,
1243 				   uint32_t count)
1244 {
1245 	uint32_t i;
1246 
1247 	for (i = 0; i < count; i++)
1248 		drm_syncobj_put(syncobjs[i]);
1249 	kfree(syncobjs);
1250 }
1251 
1252 int
1253 drm_syncobj_wait_ioctl(struct drm_device *dev, void *data,
1254 		       struct drm_file *file_private)
1255 {
1256 	struct drm_syncobj_wait *args = data;
1257 	struct drm_syncobj **syncobjs;
1258 	int ret = 0;
1259 
1260 	if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ))
1261 		return -EOPNOTSUPP;
1262 
1263 	if (args->flags & ~(DRM_SYNCOBJ_WAIT_FLAGS_WAIT_ALL |
1264 			    DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT))
1265 		return -EINVAL;
1266 
1267 	if (args->count_handles == 0)
1268 		return -EINVAL;
1269 
1270 	ret = drm_syncobj_array_find(file_private,
1271 				     u64_to_user_ptr(args->handles),
1272 				     args->count_handles,
1273 				     &syncobjs);
1274 	if (ret < 0)
1275 		return ret;
1276 
1277 	ret = drm_syncobj_array_wait(dev, file_private,
1278 				     args, NULL, syncobjs, false);
1279 
1280 	drm_syncobj_array_free(syncobjs, args->count_handles);
1281 
1282 	return ret;
1283 }
1284 
1285 int
1286 drm_syncobj_timeline_wait_ioctl(struct drm_device *dev, void *data,
1287 				struct drm_file *file_private)
1288 {
1289 	struct drm_syncobj_timeline_wait *args = data;
1290 	struct drm_syncobj **syncobjs;
1291 	int ret = 0;
1292 
1293 	if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ_TIMELINE))
1294 		return -EOPNOTSUPP;
1295 
1296 	if (args->flags & ~(DRM_SYNCOBJ_WAIT_FLAGS_WAIT_ALL |
1297 			    DRM_SYNCOBJ_WAIT_FLAGS_WAIT_FOR_SUBMIT |
1298 			    DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE))
1299 		return -EINVAL;
1300 
1301 	if (args->count_handles == 0)
1302 		return -EINVAL;
1303 
1304 	ret = drm_syncobj_array_find(file_private,
1305 				     u64_to_user_ptr(args->handles),
1306 				     args->count_handles,
1307 				     &syncobjs);
1308 	if (ret < 0)
1309 		return ret;
1310 
1311 	ret = drm_syncobj_array_wait(dev, file_private,
1312 				     NULL, args, syncobjs, true);
1313 
1314 	drm_syncobj_array_free(syncobjs, args->count_handles);
1315 
1316 	return ret;
1317 }
1318 
1319 
1320 int
1321 drm_syncobj_reset_ioctl(struct drm_device *dev, void *data,
1322 			struct drm_file *file_private)
1323 {
1324 	struct drm_syncobj_array *args = data;
1325 	struct drm_syncobj **syncobjs;
1326 	uint32_t i;
1327 	int ret;
1328 
1329 	if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ))
1330 		return -EOPNOTSUPP;
1331 
1332 	if (args->pad != 0)
1333 		return -EINVAL;
1334 
1335 	if (args->count_handles == 0)
1336 		return -EINVAL;
1337 
1338 	ret = drm_syncobj_array_find(file_private,
1339 				     u64_to_user_ptr(args->handles),
1340 				     args->count_handles,
1341 				     &syncobjs);
1342 	if (ret < 0)
1343 		return ret;
1344 
1345 	for (i = 0; i < args->count_handles; i++)
1346 		drm_syncobj_replace_fence(syncobjs[i], NULL);
1347 
1348 	drm_syncobj_array_free(syncobjs, args->count_handles);
1349 
1350 	return 0;
1351 }
1352 
1353 int
1354 drm_syncobj_signal_ioctl(struct drm_device *dev, void *data,
1355 			 struct drm_file *file_private)
1356 {
1357 	struct drm_syncobj_array *args = data;
1358 	struct drm_syncobj **syncobjs;
1359 	uint32_t i;
1360 	int ret;
1361 
1362 	if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ))
1363 		return -EOPNOTSUPP;
1364 
1365 	if (args->pad != 0)
1366 		return -EINVAL;
1367 
1368 	if (args->count_handles == 0)
1369 		return -EINVAL;
1370 
1371 	ret = drm_syncobj_array_find(file_private,
1372 				     u64_to_user_ptr(args->handles),
1373 				     args->count_handles,
1374 				     &syncobjs);
1375 	if (ret < 0)
1376 		return ret;
1377 
1378 	for (i = 0; i < args->count_handles; i++) {
1379 		ret = drm_syncobj_assign_null_handle(syncobjs[i]);
1380 		if (ret < 0)
1381 			break;
1382 	}
1383 
1384 	drm_syncobj_array_free(syncobjs, args->count_handles);
1385 
1386 	return ret;
1387 }
1388 
1389 int
1390 drm_syncobj_timeline_signal_ioctl(struct drm_device *dev, void *data,
1391 				  struct drm_file *file_private)
1392 {
1393 	struct drm_syncobj_timeline_array *args = data;
1394 	struct drm_syncobj **syncobjs;
1395 	struct dma_fence_chain **chains;
1396 	uint64_t *points;
1397 	uint32_t i, j;
1398 	int ret;
1399 
1400 	if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ_TIMELINE))
1401 		return -EOPNOTSUPP;
1402 
1403 	if (args->flags != 0)
1404 		return -EINVAL;
1405 
1406 	if (args->count_handles == 0)
1407 		return -EINVAL;
1408 
1409 	ret = drm_syncobj_array_find(file_private,
1410 				     u64_to_user_ptr(args->handles),
1411 				     args->count_handles,
1412 				     &syncobjs);
1413 	if (ret < 0)
1414 		return ret;
1415 
1416 	points = kmalloc_array(args->count_handles, sizeof(*points),
1417 			       GFP_KERNEL);
1418 	if (!points) {
1419 		ret = -ENOMEM;
1420 		goto out;
1421 	}
1422 	if (!u64_to_user_ptr(args->points)) {
1423 		memset(points, 0, args->count_handles * sizeof(uint64_t));
1424 	} else if (copy_from_user(points, u64_to_user_ptr(args->points),
1425 				  sizeof(uint64_t) * args->count_handles)) {
1426 		ret = -EFAULT;
1427 		goto err_points;
1428 	}
1429 
1430 	chains = kmalloc_array(args->count_handles, sizeof(void *), GFP_KERNEL);
1431 	if (!chains) {
1432 		ret = -ENOMEM;
1433 		goto err_points;
1434 	}
1435 	for (i = 0; i < args->count_handles; i++) {
1436 		chains[i] = dma_fence_chain_alloc();
1437 		if (!chains[i]) {
1438 			for (j = 0; j < i; j++)
1439 				dma_fence_chain_free(chains[j]);
1440 			ret = -ENOMEM;
1441 			goto err_chains;
1442 		}
1443 	}
1444 
1445 	for (i = 0; i < args->count_handles; i++) {
1446 		struct dma_fence *fence = dma_fence_get_stub();
1447 
1448 		drm_syncobj_add_point(syncobjs[i], chains[i],
1449 				      fence, points[i]);
1450 		dma_fence_put(fence);
1451 	}
1452 err_chains:
1453 	kfree(chains);
1454 err_points:
1455 	kfree(points);
1456 out:
1457 	drm_syncobj_array_free(syncobjs, args->count_handles);
1458 
1459 	return ret;
1460 }
1461 
1462 int drm_syncobj_query_ioctl(struct drm_device *dev, void *data,
1463 			    struct drm_file *file_private)
1464 {
1465 	struct drm_syncobj_timeline_array *args = data;
1466 	struct drm_syncobj **syncobjs;
1467 	uint64_t __user *points = u64_to_user_ptr(args->points);
1468 	uint32_t i;
1469 	int ret;
1470 
1471 	if (!drm_core_check_feature(dev, DRIVER_SYNCOBJ_TIMELINE))
1472 		return -EOPNOTSUPP;
1473 
1474 	if (args->flags & ~DRM_SYNCOBJ_QUERY_FLAGS_LAST_SUBMITTED)
1475 		return -EINVAL;
1476 
1477 	if (args->count_handles == 0)
1478 		return -EINVAL;
1479 
1480 	ret = drm_syncobj_array_find(file_private,
1481 				     u64_to_user_ptr(args->handles),
1482 				     args->count_handles,
1483 				     &syncobjs);
1484 	if (ret < 0)
1485 		return ret;
1486 
1487 	for (i = 0; i < args->count_handles; i++) {
1488 		struct dma_fence_chain *chain;
1489 		struct dma_fence *fence;
1490 		uint64_t point;
1491 
1492 		fence = drm_syncobj_fence_get(syncobjs[i]);
1493 		chain = to_dma_fence_chain(fence);
1494 		if (chain) {
1495 			struct dma_fence *iter, *last_signaled =
1496 				dma_fence_get(fence);
1497 
1498 			if (args->flags &
1499 			    DRM_SYNCOBJ_QUERY_FLAGS_LAST_SUBMITTED) {
1500 				point = fence->seqno;
1501 			} else {
1502 				dma_fence_chain_for_each(iter, fence) {
1503 					if (iter->context != fence->context) {
1504 						dma_fence_put(iter);
1505 						/* It is most likely that timeline has
1506 						* unorder points. */
1507 						break;
1508 					}
1509 					dma_fence_put(last_signaled);
1510 					last_signaled = dma_fence_get(iter);
1511 				}
1512 				point = dma_fence_is_signaled(last_signaled) ?
1513 					last_signaled->seqno :
1514 					to_dma_fence_chain(last_signaled)->prev_seqno;
1515 			}
1516 			dma_fence_put(last_signaled);
1517 		} else {
1518 			point = 0;
1519 		}
1520 		dma_fence_put(fence);
1521 		ret = copy_to_user(&points[i], &point, sizeof(uint64_t));
1522 		ret = ret ? -EFAULT : 0;
1523 		if (ret)
1524 			break;
1525 	}
1526 	drm_syncobj_array_free(syncobjs, args->count_handles);
1527 
1528 	return ret;
1529 }
1530