!C99Shell v. 1.0 pre-release build #13!

Software: Apache/2.0.54 (Unix) mod_perl/1.99_09 Perl/v5.8.0 mod_ssl/2.0.54 OpenSSL/0.9.7l DAV/2 FrontPage/5.0.2.2635 PHP/4.4.0 mod_gzip/2.0.26.1a 

uname -a: Linux snow.he.net 4.4.276-v2-mono-1 #1 SMP Wed Jul 21 11:21:17 PDT 2021 i686 

uid=99(nobody) gid=98(nobody) groups=98(nobody) 

Safe-mode: OFF (not secure)

/usr/src/linux-2.4.18-xfs-1.1/drivers/char/drm-4.0/   drwxr-xr-x
Free 318.37 GB of 458.09 GB (69.5%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     radeon_bufs.c (8.73 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
/* radeon_bufs.c -- IOCTLs to manage buffers -*- linux-c -*-
 *
 * Copyright 2000 Precision Insight, Inc., Cedar Park, Texas.
 * Copyright 2000 VA Linux Systems, Inc., Fremont, California.
 * All Rights Reserved.
 *
 * Permission is hereby granted, free of charge, to any person obtaining a
 * copy of this software and associated documentation files (the "Software"),
 * to deal in the Software without restriction, including without limitation
 * the rights to use, copy, modify, merge, publish, distribute, sublicense,
 * and/or sell copies of the Software, and to permit persons to whom the
 * Software is furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice (including the next
 * paragraph) shall be included in all copies or substantial portions of the
 * Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
 * PRECISION INSIGHT AND/OR ITS SUPPLIERS BE LIABLE FOR ANY CLAIM, DAMAGES OR
 * OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
 * ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
 * DEALINGS IN THE SOFTWARE.
 *
 * Authors: Kevin E. Martin <martin@valinux.com>
 *          Rickard E. (Rik) Faith <faith@valinux.com>
 *        Jeff Hartmann <jhartmann@valinux.com>
 *
 */

#define __NO_VERSION__
#include <linux/config.h>
#include "drmP.h"
#include "radeon_drv.h"
#include "linux/un.h"


#if defined(CONFIG_AGP) || defined(CONFIG_AGP_MODULE)
int radeon_addbufs_agp(struct inode *inode, struct file *filp,
               unsigned int cmd, unsigned long arg)
{
    drm_file_t       *priv = filp->private_data;
    drm_device_t     *dev  = priv->dev;
    drm_device_dma_t *dma  = dev->dma;
    drm_buf_desc_t    request;
    drm_buf_entry_t  *entry;
    drm_buf_t        *buf;
    unsigned long     offset;
    unsigned long     agp_offset;
    int               count;
    int               order;
    int               size;
    int               alignment;
    int               page_order;
    int               total;
    int               byte_count;
    int               i;

    if (!dma) return -EINVAL;

    if (copy_from_user(&request, (drm_buf_desc_t *)arg, sizeof(request)))
        return -EFAULT;

    count      = request.count;
    order      = drm_order(request.size);
    size       = 1 << order;

    alignment  = (request.flags & _DRM_PAGE_ALIGN) ? PAGE_ALIGN(size):size;
    page_order = order - PAGE_SHIFT > 0 ? order - PAGE_SHIFT : 0;
    total      = PAGE_SIZE << page_order;

    byte_count = 0;
    agp_offset = dev->agp->base + request.agp_start;

    DRM_DEBUG("count:      %d\n",  count);
    DRM_DEBUG("order:      %d\n",  order);
    DRM_DEBUG("size:       %d\n",  size);
    DRM_DEBUG("agp_offset: %ld\n", agp_offset);
    DRM_DEBUG("alignment:  %d\n",  alignment);
    DRM_DEBUG("page_order: %d\n",  page_order);
    DRM_DEBUG("total:      %d\n",  total);

    if (order < DRM_MIN_ORDER || order > DRM_MAX_ORDER) return -EINVAL;
    if (dev->queue_count) return -EBUSY; /* Not while in use */

    spin_lock(&dev->count_lock);
    if (dev->buf_use) {
        spin_unlock(&dev->count_lock);
        return -EBUSY;
    }
    atomic_inc(&dev->buf_alloc);
    spin_unlock(&dev->count_lock);

    down(&dev->struct_sem);
    entry = &dma->bufs[order];
    if (entry->buf_count) {
        up(&dev->struct_sem);
        atomic_dec(&dev->buf_alloc);
        return -ENOMEM; /* May only call once for each order */
    }

    /* Might be too low a limit. XFree folks need to fix this properly */
    
    if(count < 0 || count > 4096)
    {
        up(&dev->struct_sem);
        atomic_dec(&dev->buf_alloc);
        return -EINVAL;
    }
        
    entry->buflist = drm_alloc(count * sizeof(*entry->buflist),
                   DRM_MEM_BUFS);
    if (!entry->buflist) {
        up(&dev->struct_sem);
        atomic_dec(&dev->buf_alloc);
        return -ENOMEM;
    }
    memset(entry->buflist, 0, count * sizeof(*entry->buflist));

    entry->buf_size   = size;
    entry->page_order = page_order;
    offset            = 0;

    for (offset = 0;
         entry->buf_count < count;
         offset += alignment, ++entry->buf_count) {
        buf          = &entry->buflist[entry->buf_count];
        buf->idx     = dma->buf_count + entry->buf_count;
        buf->total   = alignment;
        buf->order   = order;
        buf->used    = 0;
        buf->offset  = (dma->byte_count + offset);
        buf->address = (void *)(agp_offset + offset);
        buf->next    = NULL;
        buf->waiting = 0;
        buf->pending = 0;
        init_waitqueue_head(&buf->dma_wait);
        buf->pid     = 0;

        buf->dev_priv_size = sizeof(drm_radeon_buf_priv_t);
        buf->dev_private   = drm_alloc(sizeof(drm_radeon_buf_priv_t),
                           DRM_MEM_BUFS);
                if (!buf->dev_private) {
                        up(&dev->struct_sem);
                        atomic_dec(&dev->buf_alloc);
                        return -ENOMEM;
                }
        memset(buf->dev_private, 0, buf->dev_priv_size);

#if DRM_DMA_HISTOGRAM
        buf->time_queued     = 0;
        buf->time_dispatched = 0;
        buf->time_completed  = 0;
        buf->time_freed      = 0;
#endif

        byte_count += PAGE_SIZE << page_order;

        DRM_DEBUG("buffer %d @ %p\n",
              entry->buf_count, buf->address);
    }

    DRM_DEBUG("byte_count: %d\n", byte_count);

    dma->buflist = drm_realloc(dma->buflist,
                   dma->buf_count * sizeof(*dma->buflist),
                   (dma->buf_count + entry->buf_count)
                   * sizeof(*dma->buflist),
                   DRM_MEM_BUFS);
    for (i = dma->buf_count; i < dma->buf_count + entry->buf_count; i++)
        dma->buflist[i] = &entry->buflist[i - dma->buf_count];

    dma->buf_count  += entry->buf_count;
    dma->byte_count += byte_count;

    drm_freelist_create(&entry->freelist, entry->buf_count);
    for (i = 0; i < entry->buf_count; i++) {
        drm_freelist_put(dev, &entry->freelist, &entry->buflist[i]);
    }

    up(&dev->struct_sem);

    request.count = entry->buf_count;
    request.size  = size;

    if (copy_to_user((drm_buf_desc_t *)arg, &request, sizeof(request)))
        return -EFAULT;

    dma->flags = _DRM_DMA_USE_AGP;

    atomic_dec(&dev->buf_alloc);
    return 0;
}
#endif

int radeon_addbufs(struct inode *inode, struct file *filp, unsigned int cmd,
           unsigned long arg)
{
    drm_file_t        *priv        = filp->private_data;
    drm_device_t        *dev        = priv->dev;
    drm_radeon_private_t    *dev_priv    = dev->dev_private;
    drm_buf_desc_t        request;

    if (!dev_priv || dev_priv->is_pci) return -EINVAL;

    if (copy_from_user(&request, (drm_buf_desc_t *)arg, sizeof(request)))
        return -EFAULT;

#if defined(CONFIG_AGP) || defined(CONFIG_AGP_MODULE)
    if (request.flags & _DRM_AGP_BUFFER)
        return radeon_addbufs_agp(inode, filp, cmd, arg);
    else
#endif
        return -EINVAL;
}

int radeon_mapbufs(struct inode *inode, struct file *filp, unsigned int cmd,
           unsigned long arg)
{
    drm_file_t        *priv        = filp->private_data;
    drm_device_t        *dev        = priv->dev;
    drm_radeon_private_t    *dev_priv    = dev->dev_private;
    drm_device_dma_t    *dma        = dev->dma;
    int             retcode    = 0;
    const int         zero        = 0;
    unsigned long         virtual;
    unsigned long         address;
    drm_buf_map_t         request;
    int             i;

    if (!dma || !dev_priv || dev_priv->is_pci) return -EINVAL;

    DRM_DEBUG("\n");

    spin_lock(&dev->count_lock);
    if (atomic_read(&dev->buf_alloc)) {
        spin_unlock(&dev->count_lock);
        return -EBUSY;
    }
    ++dev->buf_use;        /* Can't allocate more after this call */
    spin_unlock(&dev->count_lock);

    if (copy_from_user(&request, (drm_buf_map_t *)arg, sizeof(request)))
        return -EFAULT;

    if (request.count >= dma->buf_count) {
        if (dma->flags & _DRM_DMA_USE_AGP) {
            drm_map_t *map;

            map = dev_priv->buffers;
            if (!map) {
                retcode = -EINVAL;
                goto done;
            }

            down_write(&current->mm->mmap_sem);
            virtual = do_mmap(filp, 0, map->size,
                      PROT_READ|PROT_WRITE,
                      MAP_SHARED,
                      (unsigned long)map->offset);
            up_write(&current->mm->mmap_sem);
        } else {
            down_write(&current->mm->mmap_sem);
            virtual = do_mmap(filp, 0, dma->byte_count,
                      PROT_READ|PROT_WRITE, MAP_SHARED, 0);
            up_write(&current->mm->mmap_sem);
        }
        if (virtual > -1024UL) {
            /* Real error */
            retcode = (signed long)virtual;
            goto done;
        }
        request.virtual = (void *)virtual;

        for (i = 0; i < dma->buf_count; i++) {
            if (copy_to_user(&request.list[i].idx,
                     &dma->buflist[i]->idx,
                     sizeof(request.list[0].idx))) {
                retcode = -EFAULT;
                goto done;
            }
            if (copy_to_user(&request.list[i].total,
                     &dma->buflist[i]->total,
                     sizeof(request.list[0].total))) {
                retcode = -EFAULT;
                goto done;
            }
            if (copy_to_user(&request.list[i].used,
                     &zero,
                     sizeof(zero))) {
                retcode = -EFAULT;
                goto done;
            }
            address = virtual + dma->buflist[i]->offset;
            if (copy_to_user(&request.list[i].address,
                     &address,
                     sizeof(address))) {
                retcode = -EFAULT;
                goto done;
            }
        }
    }
 done:
    request.count = dma->buf_count;
    DRM_DEBUG("%d buffers, retcode = %d\n", request.count, retcode);

    if (copy_to_user((drm_buf_map_t *)arg, &request, sizeof(request)))
        return -EFAULT;

    return retcode;
}

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0282 ]--