]> git.ipfire.org Git - thirdparty/kernel/stable.git/blob - drivers/gpu/drm/nouveau/nvkm/subdev/mmu/vmmtu102.c
KVM: Harden copying of userspace-array against overflow
[thirdparty/kernel/stable.git] / drivers / gpu / drm / nouveau / nvkm / subdev / mmu / vmmtu102.c
1 /*
2 * Copyright 2018 Red Hat Inc.
3 *
4 * Permission is hereby granted, free of charge, to any person obtaining a
5 * copy of this software and associated documentation files (the "Software"),
6 * to deal in the Software without restriction, including without limitation
7 * the rights to use, copy, modify, merge, publish, distribute, sublicense,
8 * and/or sell copies of the Software, and to permit persons to whom the
9 * Software is furnished to do so, subject to the following conditions:
10 *
11 * The above copyright notice and this permission notice shall be included in
12 * all copies or substantial portions of the Software.
13 *
14 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
15 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
16 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
17 * THE COPYRIGHT HOLDER(S) OR AUTHOR(S) BE LIABLE FOR ANY CLAIM, DAMAGES OR
18 * OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
19 * ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
20 * OTHER DEALINGS IN THE SOFTWARE.
21 */
22 #include "vmm.h"
23
24 #include <subdev/timer.h>
25
26 static void
27 tu102_vmm_flush(struct nvkm_vmm *vmm, int depth)
28 {
29 struct nvkm_device *device = vmm->mmu->subdev.device;
30 u32 type = 0;
31
32 type |= 0x00000001; /* PAGE_ALL */
33 if (atomic_read(&vmm->engref[NVKM_SUBDEV_BAR]))
34 type |= 0x00000004; /* HUB_ONLY */
35
36 mutex_lock(&vmm->mmu->mutex);
37
38 if (!vmm->rm.bar2_pdb)
39 nvkm_wr32(device, 0xb830a0, vmm->pd->pt[0]->addr >> 8);
40 else
41 nvkm_wr32(device, 0xb830a0, vmm->rm.bar2_pdb >> 8);
42 nvkm_wr32(device, 0xb830a4, 0x00000000);
43 nvkm_wr32(device, 0xb830b0, 0x80000000 | type);
44
45 nvkm_msec(device, 2000,
46 if (!(nvkm_rd32(device, 0xb830b0) & 0x80000000))
47 break;
48 );
49
50 mutex_unlock(&vmm->mmu->mutex);
51 }
52
53 static const struct nvkm_vmm_func
54 tu102_vmm = {
55 .join = gv100_vmm_join,
56 .part = gf100_vmm_part,
57 .aper = gf100_vmm_aper,
58 .valid = gp100_vmm_valid,
59 .flush = tu102_vmm_flush,
60 .mthd = gp100_vmm_mthd,
61 .page = {
62 { 47, &gp100_vmm_desc_16[4], NVKM_VMM_PAGE_Sxxx },
63 { 38, &gp100_vmm_desc_16[3], NVKM_VMM_PAGE_Sxxx },
64 { 29, &gp100_vmm_desc_16[2], NVKM_VMM_PAGE_Sxxx },
65 { 21, &gp100_vmm_desc_16[1], NVKM_VMM_PAGE_SVxC },
66 { 16, &gp100_vmm_desc_16[0], NVKM_VMM_PAGE_SVxC },
67 { 12, &gp100_vmm_desc_12[0], NVKM_VMM_PAGE_SVHx },
68 {}
69 }
70 };
71
72 int
73 tu102_vmm_new(struct nvkm_mmu *mmu, bool managed, u64 addr, u64 size,
74 void *argv, u32 argc, struct lock_class_key *key,
75 const char *name, struct nvkm_vmm **pvmm)
76 {
77 return gp100_vmm_new_(&tu102_vmm, mmu, managed, addr, size,
78 argv, argc, key, name, pvmm);
79 }