mirror of
https://github.com/raspberrypi/linux.git
synced 2025-12-18 15:54:25 +00:00
41a97c4a12
The driver needs to know if a BO is encrypted with PXP to enable the
display decryption at flip time.
Furthermore, we want to keep track of the status of the encryption and
reject any operation that involves a BO that is encrypted using an old
key. There are two points in time where such checks can kick in:
1 - at VM bind time, all operations except for unmapping will be
rejected if the key used to encrypt the BO is no longer valid. This
check is opt-in via a new VM_BIND flag, to avoid a scenario where a
malicious app purposely shares an invalid BO with a non-PXP aware
app (such as a compositor). If the VM_BIND was failed, the
compositor would be unable to display anything at all. Allowing the
bind to go through means that output still works, it just displays
garbage data within the bounds of the illegal BO.
2 - at job submission time, if the queue is marked as using PXP, all
objects bound to the VM will be checked and the submission will be
rejected if any of them was encrypted with a key that is no longer
valid.
Note that there is no risk of leaking the encrypted data if a user does
not opt-in to those checks; the only consequence is that the user will
not realize that the encryption key is changed and that the data is no
longer valid.
v2: Better commnnts and descriptions (John), rebase
v3: Properly return the result of key_assign up the stack, do not use
xe_bo in display headers (Jani)
v4: improve key_instance variable documentation (John)
Signed-off-by: Daniele Ceraolo Spurio <daniele.ceraolospurio@intel.com>
Cc: Matthew Brost <matthew.brost@intel.com>
Cc: Thomas Hellström <thomas.hellstrom@linux.intel.com>
Cc: John Harrison <John.C.Harrison@Intel.com>
Cc: Jani Nikula <jani.nikula@intel.com>
Reviewed-by: John Harrison <John.C.Harrison@Intel.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20250129174140.948829-11-daniele.ceraolospurio@intel.com
62 lines
1.2 KiB
C
62 lines
1.2 KiB
C
// SPDX-License-Identifier: MIT
|
|
/* Copyright © 2024 Intel Corporation */
|
|
|
|
#include <drm/drm_gem.h>
|
|
|
|
#include "xe_bo.h"
|
|
#include "intel_bo.h"
|
|
|
|
bool intel_bo_is_tiled(struct drm_gem_object *obj)
|
|
{
|
|
/* legacy tiling is unused */
|
|
return false;
|
|
}
|
|
|
|
bool intel_bo_is_userptr(struct drm_gem_object *obj)
|
|
{
|
|
/* xe does not have userptr bos */
|
|
return false;
|
|
}
|
|
|
|
bool intel_bo_is_shmem(struct drm_gem_object *obj)
|
|
{
|
|
return false;
|
|
}
|
|
|
|
bool intel_bo_is_protected(struct drm_gem_object *obj)
|
|
{
|
|
return xe_bo_is_protected(gem_to_xe_bo(obj));
|
|
}
|
|
|
|
void intel_bo_flush_if_display(struct drm_gem_object *obj)
|
|
{
|
|
}
|
|
|
|
int intel_bo_fb_mmap(struct drm_gem_object *obj, struct vm_area_struct *vma)
|
|
{
|
|
return drm_gem_prime_mmap(obj, vma);
|
|
}
|
|
|
|
int intel_bo_read_from_page(struct drm_gem_object *obj, u64 offset, void *dst, int size)
|
|
{
|
|
struct xe_bo *bo = gem_to_xe_bo(obj);
|
|
|
|
return xe_bo_read(bo, offset, dst, size);
|
|
}
|
|
|
|
struct intel_frontbuffer *intel_bo_get_frontbuffer(struct drm_gem_object *obj)
|
|
{
|
|
return NULL;
|
|
}
|
|
|
|
struct intel_frontbuffer *intel_bo_set_frontbuffer(struct drm_gem_object *obj,
|
|
struct intel_frontbuffer *front)
|
|
{
|
|
return front;
|
|
}
|
|
|
|
void intel_bo_describe(struct seq_file *m, struct drm_gem_object *obj)
|
|
{
|
|
/* FIXME */
|
|
}
|