drivers/gpu/drm/etnaviv/etnaviv_cmd_parser.c

   1 /*
   2  * Copyright (C) 2015 Etnaviv Project
   3  *
   4  * This program is free software; you can redistribute it and/or modify it
   5  * under the terms of the GNU General Public License version 2 as published by
   6  * the Free Software Foundation.
   7  *
   8  * This program is distributed in the hope that it will be useful, but WITHOUT
   9  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  10  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
  11  * more details.
  12  *
  13  * You should have received a copy of the GNU General Public License along with
  14  * this program.  If not, see <http://www.gnu.org/licenses/>.
  15  */
  16
  17 #include <linux/kernel.h>
  18
  19 #include "etnaviv_gem.h"
  20 #include "etnaviv_gpu.h"
  21
  22 #include "cmdstream.xml.h"
  23
  24 #define EXTRACT(val, field) (((val) & field##__MASK) >> field##__SHIFT)
  25
  26 struct etna_validation_state {
  27         struct etnaviv_gpu *gpu;
  28         const struct drm_etnaviv_gem_submit_reloc *relocs;
  29         unsigned int num_relocs;
  30         u32 *start;
  31 };
  32
  33 static const struct {
  34         u16 offset;
  35         u16 size;
  36 } etnaviv_sensitive_states[] __initconst = {
  37 #define ST(start, num) { (start) >> 2, (num) }
  38         /* 2D */
  39         ST(0x1200, 1),
  40         ST(0x1228, 1),
  41         ST(0x1238, 1),
  42         ST(0x1284, 1),
  43         ST(0x128c, 1),
  44         ST(0x1304, 1),
  45         ST(0x1310, 1),
  46         ST(0x1318, 1),
  47         ST(0x12800, 4),
  48         ST(0x128a0, 4),
  49         ST(0x128c0, 4),
  50         ST(0x12970, 4),
  51         ST(0x12a00, 8),
  52         ST(0x12b40, 8),
  53         ST(0x12b80, 8),
  54         ST(0x12ce0, 8),
  55         /* 3D */
  56         ST(0x0644, 1),
  57         ST(0x064c, 1),
  58         ST(0x0680, 8),
  59         ST(0x086c, 1),
  60         ST(0x1028, 1),
  61         ST(0x1410, 1),
  62         ST(0x1430, 1),
  63         ST(0x1458, 1),
  64         ST(0x1460, 8),
  65         ST(0x1480, 8),
  66         ST(0x1500, 8),
  67         ST(0x1520, 8),
  68         ST(0x1608, 1),
  69         ST(0x1610, 1),
  70         ST(0x1658, 1),
  71         ST(0x165c, 1),
  72         ST(0x1664, 1),
  73         ST(0x1668, 1),
  74         ST(0x16a4, 1),
  75         ST(0x16c0, 8),
  76         ST(0x16e0, 8),
  77         ST(0x1740, 8),
  78         ST(0x17c0, 8),
  79         ST(0x17e0, 8),
  80         ST(0x2400, 14 * 16),
  81         ST(0x3824, 1),
  82         ST(0x10800, 32 * 16),
  83         ST(0x14600, 16),
  84         ST(0x14800, 8 * 8),
  85 #undef ST
  86 };
  87
  88 #define ETNAVIV_STATES_SIZE (VIV_FE_LOAD_STATE_HEADER_OFFSET__MASK + 1u)
  89 static DECLARE_BITMAP(etnaviv_states, ETNAVIV_STATES_SIZE);
  90
  91 void __init etnaviv_validate_init(void)
  92 {
  93         unsigned int i;
  94
  95         for (i = 0; i < ARRAY_SIZE(etnaviv_sensitive_states); i++)
  96                 bitmap_set(etnaviv_states, etnaviv_sensitive_states[i].offset,
  97                            etnaviv_sensitive_states[i].size);
  98 }
  99
 100 static void etnaviv_warn_if_non_sensitive(struct etna_validation_state *state,
 101         unsigned int buf_offset, unsigned int state_addr)
 102 {
 103         if (state->num_relocs && state->relocs->submit_offset < buf_offset) {
 104                 dev_warn_once(state->gpu->dev,
 105                               "%s: relocation for non-sensitive state 0x%x at offset %u\n",
 106                               __func__, state_addr,
 107                               state->relocs->submit_offset);
 108                 while (state->num_relocs &&
 109                        state->relocs->submit_offset < buf_offset) {
 110                         state->relocs++;
 111                         state->num_relocs--;
 112                 }
 113         }
 114 }
 115
 116 static bool etnaviv_validate_load_state(struct etna_validation_state *state,
 117         u32 *ptr, unsigned int state_offset, unsigned int num)
 118 {
 119         unsigned int size = min(ETNAVIV_STATES_SIZE, state_offset + num);
 120         unsigned int st_offset = state_offset, buf_offset;
 121
 122         for_each_set_bit_from(st_offset, etnaviv_states, size) {
 123                 buf_offset = (ptr - state->start +
 124                               st_offset - state_offset) * 4;
 125
 126                 etnaviv_warn_if_non_sensitive(state, buf_offset, st_offset * 4);
 127                 if (state->num_relocs &&
 128                     state->relocs->submit_offset == buf_offset) {
 129                         state->relocs++;
 130                         state->num_relocs--;
 131                         continue;
 132                 }
 133
 134                 dev_warn_ratelimited(state->gpu->dev,
 135                                      "%s: load state touches restricted state 0x%x at offset %u\n",
 136                                      __func__, st_offset * 4, buf_offset);
 137                 return false;
 138         }
 139
 140         if (state->num_relocs) {
 141                 buf_offset = (ptr - state->start + num) * 4;
 142                 etnaviv_warn_if_non_sensitive(state, buf_offset, st_offset * 4 +
 143                                               state->relocs->submit_offset -
 144                                               buf_offset);
 145         }
 146
 147         return true;
 148 }
 149
 150 static uint8_t cmd_length[32] = {
 151         [FE_OPCODE_DRAW_PRIMITIVES] = 4,
 152         [FE_OPCODE_DRAW_INDEXED_PRIMITIVES] = 6,
 153         [FE_OPCODE_DRAW_INSTANCED] = 4,
 154         [FE_OPCODE_NOP] = 2,
 155         [FE_OPCODE_STALL] = 2,
 156 };
 157
 158 bool etnaviv_cmd_validate_one(struct etnaviv_gpu *gpu, u32 *stream,
 159                               unsigned int size,
 160                               struct drm_etnaviv_gem_submit_reloc *relocs,
 161                               unsigned int reloc_size)
 162 {
 163         struct etna_validation_state state;
 164         u32 *buf = stream;
 165         u32 *end = buf + size;
 166
 167         state.gpu = gpu;
 168         state.relocs = relocs;
 169         state.num_relocs = reloc_size;
 170         state.start = stream;
 171
 172         while (buf < end) {
 173                 u32 cmd = *buf;
 174                 unsigned int len, n, off;
 175                 unsigned int op = cmd >> 27;
 176
 177                 switch (op) {
 178                 case FE_OPCODE_LOAD_STATE:
 179                         n = EXTRACT(cmd, VIV_FE_LOAD_STATE_HEADER_COUNT);
 180                         len = ALIGN(1 + n, 2);
 181                         if (buf + len > end)
 182                                 break;
 183
 184                         off = EXTRACT(cmd, VIV_FE_LOAD_STATE_HEADER_OFFSET);
 185                         if (!etnaviv_validate_load_state(&state, buf + 1,
 186                                                          off, n))
 187                                 return false;
 188                         break;
 189
 190                 case FE_OPCODE_DRAW_2D:
 191                         n = EXTRACT(cmd, VIV_FE_DRAW_2D_HEADER_COUNT);
 192                         if (n == 0)
 193                                 n = 256;
 194                         len = 2 + n * 2;
 195                         break;
 196
 197                 default:
 198                         len = cmd_length[op];
 199                         if (len == 0) {
 200                                 dev_err(gpu->dev, "%s: op %u not permitted at offset %tu\n",
 201                                         __func__, op, buf - state.start);
 202                                 return false;
 203                         }
 204                         break;
 205                 }
 206
 207                 buf += len;
 208         }
 209
 210         if (buf > end) {
 211                 dev_err(gpu->dev, "%s: commands overflow end of buffer: %tu > %u\n",
 212                         __func__, buf - state.start, size);
 213                 return false;
 214         }
 215
 216         return true;
 217 }