From patchwork Wed Dec 18 10:17:23 2013 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Takashi Iwai X-Patchwork-Id: 3369181 Return-Path: X-Original-To: patchwork-linux-fbdev@patchwork.kernel.org Delivered-To: patchwork-parsemail@patchwork1.web.kernel.org Received: from mail.kernel.org (mail.kernel.org [198.145.19.201]) by patchwork1.web.kernel.org (Postfix) with ESMTP id 8889A9F32E for ; Wed, 18 Dec 2013 10:17:31 +0000 (UTC) Received: from mail.kernel.org (localhost [127.0.0.1]) by mail.kernel.org (Postfix) with ESMTP id DC27A2045B for ; Wed, 18 Dec 2013 10:17:29 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 2619F20465 for ; Wed, 18 Dec 2013 10:17:28 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752642Ab3LRKR1 (ORCPT ); Wed, 18 Dec 2013 05:17:27 -0500 Received: from cantor2.suse.de ([195.135.220.15]:47883 "EHLO mx2.suse.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752529Ab3LRKRY (ORCPT ); Wed, 18 Dec 2013 05:17:24 -0500 Received: from relay1.suse.de (charybdis-ext.suse.de [195.135.220.254]) by mx2.suse.de (Postfix) with ESMTP id 80F1FABE4; Wed, 18 Dec 2013 10:17:23 +0000 (UTC) Date: Wed, 18 Dec 2013 11:17:23 +0100 Message-ID: From: Takashi Iwai To: David Herrmann Cc: Stephen Warren , "linux-fbdev@vger.kernel.org" , "the arch/x86 maintainers" , linux-kernel Subject: Re: cirrusdrmfb broken with simplefb In-Reply-To: References: User-Agent: Wanderlust/2.15.9 (Almost Unreal) SEMI/1.14.6 (Maruoka) FLIM/1.14.9 (=?UTF-8?B?R29qxY0=?=) APEL/10.8 Emacs/24.3 (x86_64-suse-linux-gnu) MULE/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka") Sender: linux-fbdev-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-fbdev@vger.kernel.org X-Spam-Status: No, score=-7.4 required=5.0 tests=BAYES_00, RCVD_IN_DNSWL_HI, RP_MATCHES_RCVD, UNPARSEABLE_RELAY autolearn=unavailable version=3.3.1 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on mail.kernel.org X-Virus-Scanned: ClamAV using ClamSMTP At Wed, 18 Dec 2013 09:44:35 +0100, Takashi Iwai wrote: > > At Wed, 18 Dec 2013 09:21:28 +0100, > David Herrmann wrote: > > > > Hi > > > > On Wed, Dec 18, 2013 at 8:42 AM, Takashi Iwai wrote: > > > Hi, > > > > > > with the recent enablement of simplefb on x86, cirrusdrmfb on QEMU/KVM > > > gets broken now, as reported at: > > > https://bugzilla.novell.com/show_bug.cgi?id=855821 > > > > > > The cirrus VGA resource is reserved at first as "BOOTFB" in > > > arch/x86/kernel/sysfb_simplefb.c, which is taken by simplefb platform > > > device. This resource is, however, never released until the platform > > > device is destroyed, and the framebuffer switching doesn't trigger > > > it. It calls fb's destroy callback, at most. Then, cirrus driver > > > tries to assign the resource, fails and gives up, resulting in a > > > complete blank screen. > > > > > > The same problem should exist on other KMS drivers like mgag200 or > > > ast, not only cirrus. Intel graphics doesn't hit this problem just > > > because the reserved iomem by BOOTFB isn't required by i915 driver. > > > > > > The patch below is a quick attempt to solve the issue. It adds a new > > > API function for releasing resources of platform_device, and call it > > > in destroy op of simplefb. But, forcibly releasing resources of a > > > parent device doesn't sound like a correct design. We may take such > > > as a band aid, but definitely need a more fundamental fix. > > > > > > Any thoughts? > > > > That bug always existed, simplefb is just the first driver to hit it > > (vesafb/efifb didn't use resources). > > Heh, the bug didn't "exist" because no other grabbed the resource > before. The way the cirrus driver allocates the resource is no bug, > per se. But the proper resource takeover is missing. > > > I'm aware of the issue but as a > > workaround you can simply disable CONFIG_X86_SYSFB. That restores the > > old behavior. > > Yes, but CONFIG_X86_SYSFB breaks things as of now. Shouldn't it be > mentioned or give some kconfig hints instead of silently giving a > broken output, if any quick fix isn't possible? > > > As a proper fix, I'd propose something like: > > dev = platform_find_device("platform-framebuffer"); > > platform_remove_device(dev); > > > > And we wrap this as: > > sysfb_remove_framebuffers() > > in arch/x86/kernel/sysfb.c > > > > This should cause a ->remove() event for the platform-driver and > > correctly release the resources. Comments? > > Who will call this? From destroy callback? > Or can we simply do put_device() the bound platform device instead? Just tested, put_device() doesn't work since the refcount isn't 1, so if any, we need to call platform_device_unregister() to release forcibly. The patch below seems working at a quick test. But I still have some bad feeling for unregistering the parent device from the child's destroy callback... thanks, Takashi --- -- To unsubscribe from this list: send the line "unsubscribe linux-fbdev" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html diff --git a/drivers/video/simplefb.c b/drivers/video/simplefb.c index 210f3a02121a..196360c54157 100644 --- a/drivers/video/simplefb.c +++ b/drivers/video/simplefb.c @@ -41,6 +41,11 @@ static struct fb_var_screeninfo simplefb_var = { .vmode = FB_VMODE_NONINTERLACED, }; +struct simplefb_priv { + u32 pseudo_palette[16]; + struct platform_device *pdev; +}; + static int simplefb_setcolreg(u_int regno, u_int red, u_int green, u_int blue, u_int transp, struct fb_info *info) { @@ -68,8 +73,19 @@ static int simplefb_setcolreg(u_int regno, u_int red, u_int green, u_int blue, static void simplefb_destroy(struct fb_info *info) { + struct simplefb_priv *priv = info->par; + struct platform_device *pdev = priv->pdev; + if (info->screen_base) iounmap(info->screen_base); + + /* release the bound platform device when called from + * remove_conflicting_framebuffers() + */ + if (pdev) { + priv->pdev = NULL; /* to avoid double-free */ + platform_device_unregister(pdev); + } } static struct fb_ops simplefb_ops = { @@ -169,6 +185,7 @@ static int simplefb_probe(struct platform_device *pdev) struct simplefb_params params; struct fb_info *info; struct resource *mem; + struct simplefb_priv *priv; if (fb_get_options("simplefb", NULL)) return -ENODEV; @@ -188,7 +205,7 @@ static int simplefb_probe(struct platform_device *pdev) return -EINVAL; } - info = framebuffer_alloc(sizeof(u32) * 16, &pdev->dev); + info = framebuffer_alloc(sizeof(struct simplefb_priv), &pdev->dev); if (!info) return -ENOMEM; platform_set_drvdata(pdev, info); @@ -225,7 +242,9 @@ static int simplefb_probe(struct platform_device *pdev) framebuffer_release(info); return -ENODEV; } - info->pseudo_palette = (void *)(info + 1); + + priv = info->par; + info->pseudo_palette = priv->pseudo_palette; dev_info(&pdev->dev, "framebuffer at 0x%lx, 0x%x bytes, mapped to 0x%p\n", info->fix.smem_start, info->fix.smem_len, @@ -243,6 +262,7 @@ static int simplefb_probe(struct platform_device *pdev) return ret; } + priv->pdev = pdev; dev_info(&pdev->dev, "fb%d: simplefb registered!\n", info->node); return 0; @@ -251,8 +271,13 @@ static int simplefb_probe(struct platform_device *pdev) static int simplefb_remove(struct platform_device *pdev) { struct fb_info *info = platform_get_drvdata(pdev); + struct simplefb_priv *priv = info->par; + + if (priv->pdev) { + priv->pdev = NULL; /* to avoid double-free */ + unregister_framebuffer(info); + } - unregister_framebuffer(info); framebuffer_release(info); return 0;