Now that we're getting close to reaching the finish line for upstreaming the rust gem shmem bindings, we've got another batch of patches that have been reviewed and can be safely pushed to drm-rust-next independently of the rest of the series.
These patches of course apply against the drm-rust-next branch, and are part of the gem shmem series, the latest version of which can be found here:
https://patchwork.freedesktop.org/series/146465/
Lyude Paul (3): drm/gem/shmem: Extract drm_gem_shmem_init() from drm_gem_shmem_create() drm/gem/shmem: Extract drm_gem_shmem_release() from drm_gem_shmem_free() rust: Add dma_buf stub bindings
drivers/gpu/drm/drm_gem_shmem_helper.c | 98 ++++++++++++++++++-------- include/drm/drm_gem_shmem_helper.h | 2 + rust/kernel/dma_buf.rs | 40 +++++++++++ rust/kernel/lib.rs | 1 + 4 files changed, 111 insertions(+), 30 deletions(-) create mode 100644 rust/kernel/dma_buf.rs
base-commit: cf4fd52e323604ccfa8390917593e1fb965653ee
In order to implement the gem export callback, we need a type to represent struct dma_buf. So - this commit introduces a set of stub bindings for dma_buf. These bindings provide a ref-counted DmaBuf object, but don't currently implement any functionality for using the DmaBuf.
Signed-off-by: Lyude Paul lyude@redhat.com Reviewed-by: Daniel Almeida daniel.almeida@collabora.com
--- V3: * Rename as_ref() to from_raw() V4: * Add missing period to rustdoc at top of file
rust/kernel/dma_buf.rs | 40 ++++++++++++++++++++++++++++++++++++++++ rust/kernel/lib.rs | 1 + 2 files changed, 41 insertions(+) create mode 100644 rust/kernel/dma_buf.rs
diff --git a/rust/kernel/dma_buf.rs b/rust/kernel/dma_buf.rs new file mode 100644 index 0000000000000..50be3e4dd4098 --- /dev/null +++ b/rust/kernel/dma_buf.rs @@ -0,0 +1,40 @@ +// SPDX-License-Identifier: GPL-2.0 + +//! DMA buffer API. +//! +//! C header: [`include/linux/dma-buf.h`](srctree/include/linux/dma-buf.h) + +use bindings; +use kernel::types::*; + +/// A DMA buffer object. +/// +/// # Invariants +/// +/// The data layout of this type is equivalent to that of `struct dma_buf`. +#[repr(transparent)] +pub struct DmaBuf(Opaquebindings::dma_buf); + +// SAFETY: `struct dma_buf` is thread-safe +unsafe impl Send for DmaBuf {} +// SAFETY: `struct dma_buf` is thread-safe +unsafe impl Sync for DmaBuf {} + +#[expect(unused)] +impl DmaBuf { + /// Convert from a `*mut bindings::dma_buf` to a [`DmaBuf`]. + /// + /// # Safety + /// + /// The caller guarantees that `self_ptr` points to a valid initialized `struct dma_buf` for the + /// duration of the lifetime of `'a`, and promises to not violate rust's data aliasing rules + /// using the reference provided by this function. + pub(crate) unsafe fn from_raw<'a>(self_ptr: *mut bindings::dma_buf) -> &'a Self { + // SAFETY: Our data layout is equivalent to `dma_buf` . + unsafe { &*self_ptr.cast() } + } + + pub(crate) fn as_raw(&self) -> *mut bindings::dma_buf { + self.0.get() + } +} diff --git a/rust/kernel/lib.rs b/rust/kernel/lib.rs index fcffc3988a903..59242d83efe21 100644 --- a/rust/kernel/lib.rs +++ b/rust/kernel/lib.rs @@ -81,6 +81,7 @@ pub mod device_id; pub mod devres; pub mod dma; +pub mod dma_buf; pub mod driver; #[cfg(CONFIG_DRM = "y")] pub mod drm;
On 12.09.25 00:57, Lyude Paul wrote:
In order to implement the gem export callback, we need a type to represent struct dma_buf. So - this commit introduces a set of stub bindings for dma_buf. These bindings provide a ref-counted DmaBuf object, but don't currently implement any functionality for using the DmaBuf.
Especially the last sentence is a bit problematic.
Wrapping a DMA-buf object should be pretty easy, the hard part is the operations on the DMA-buf object.
E.g. how are locking and sg_table creation handled?
Regards, Christian.
Signed-off-by: Lyude Paul lyude@redhat.com Reviewed-by: Daniel Almeida daniel.almeida@collabora.com
V3:
- Rename as_ref() to from_raw()
V4:
- Add missing period to rustdoc at top of file
rust/kernel/dma_buf.rs | 40 ++++++++++++++++++++++++++++++++++++++++ rust/kernel/lib.rs | 1 + 2 files changed, 41 insertions(+) create mode 100644 rust/kernel/dma_buf.rs
diff --git a/rust/kernel/dma_buf.rs b/rust/kernel/dma_buf.rs new file mode 100644 index 0000000000000..50be3e4dd4098 --- /dev/null +++ b/rust/kernel/dma_buf.rs @@ -0,0 +1,40 @@ +// SPDX-License-Identifier: GPL-2.0
+//! DMA buffer API. +//! +//! C header: [`include/linux/dma-buf.h`](srctree/include/linux/dma-buf.h)
+use bindings; +use kernel::types::*;
+/// A DMA buffer object. +/// +/// # Invariants +/// +/// The data layout of this type is equivalent to that of `struct dma_buf`. +#[repr(transparent)] +pub struct DmaBuf(Opaquebindings::dma_buf);
+// SAFETY: `struct dma_buf` is thread-safe +unsafe impl Send for DmaBuf {} +// SAFETY: `struct dma_buf` is thread-safe +unsafe impl Sync for DmaBuf {}
+#[expect(unused)] +impl DmaBuf {
- /// Convert from a `*mut bindings::dma_buf` to a [`DmaBuf`].
- ///
- /// # Safety
- ///
- /// The caller guarantees that `self_ptr` points to a valid initialized `struct dma_buf` for the
- /// duration of the lifetime of `'a`, and promises to not violate rust's data aliasing rules
- /// using the reference provided by this function.
- pub(crate) unsafe fn from_raw<'a>(self_ptr: *mut bindings::dma_buf) -> &'a Self {
// SAFETY: Our data layout is equivalent to `dma_buf` .unsafe { &*self_ptr.cast() }- }
- pub(crate) fn as_raw(&self) -> *mut bindings::dma_buf {
self.0.get()- }
+} diff --git a/rust/kernel/lib.rs b/rust/kernel/lib.rs index fcffc3988a903..59242d83efe21 100644 --- a/rust/kernel/lib.rs +++ b/rust/kernel/lib.rs @@ -81,6 +81,7 @@ pub mod device_id; pub mod devres; pub mod dma; +pub mod dma_buf; pub mod driver; #[cfg(CONFIG_DRM = "y")] pub mod drm;
On Fri, 2025-09-12 at 10:25 +0200, Christian König wrote:
On 12.09.25 00:57, Lyude Paul wrote:
In order to implement the gem export callback, we need a type to represent struct dma_buf. So - this commit introduces a set of stub bindings for dma_buf. These bindings provide a ref-counted DmaBuf object, but don't currently implement any functionality for using the DmaBuf.
Especially the last sentence is a bit problematic.
Wrapping a DMA-buf object should be pretty easy, the hard part is the operations on the DMA-buf object.
E.g. how are locking and sg_table creation handled?
Mind clarifying a bit what you're talking about here?
FWIW: regarding sg_table creation, we currently have two ways of doing this in rust:
* Manually, using the scatterlist rust bindings that were recently merged into drm-rust-next * Through a DRM helper provided by gem shmem, ATM this would be either - `gem::shmem::BaseObject::<T: DriverObject>::sg_table()` - `gem::shmem::BaseObject::<T: DriverObject>::owned_sg_table()` (both of these just use drm_gem_shmem_get_pages_sgt())
However, I don't think we currently have any interactions in the bindings we've written so far between SGTable and DmaBuf and I don't currently have any plans for this on my roadmap.
Regarding locking: I'm not totally sure what locking you're referring to here? To be clear - I'm explicitly /not/ trying to deal with the issue of solving how operations on the DmaBuf object work in rust, and instead simply come up with the bare minimum interface needed so that we can return a DmaBuf created from the drm_gem_prime_export() helper (e.g. gem::BaseObject::prime_export()) from a driver's gem::DriverObject::export() callback. Or alternatively, destroy it in the event that said callback fails.
Unless there's some locking interaction I missed that we need to solve to fulfill those two goals, I'm not aware of any rust driver that needs anything beyond that just yet. As such, I assumed this interface would touch a small enough surface of the dma-buf API that it shouldn't set any concrete requirements on how a fully-fledged dma-buf api in rust would work in the future. And at the same time, still allow us to move forward with the shmem bindings, and make sure that the surface area of the stub API is small enough that adding the rest of the functionality to it later doesn't require any non- trivial changes to current users.
Regards, Christian.
Signed-off-by: Lyude Paul lyude@redhat.com Reviewed-by: Daniel Almeida daniel.almeida@collabora.com
V3:
- Rename as_ref() to from_raw()
V4:
- Add missing period to rustdoc at top of file
rust/kernel/dma_buf.rs | 40 ++++++++++++++++++++++++++++++++++++++++ rust/kernel/lib.rs | 1 + 2 files changed, 41 insertions(+) create mode 100644 rust/kernel/dma_buf.rs
diff --git a/rust/kernel/dma_buf.rs b/rust/kernel/dma_buf.rs new file mode 100644 index 0000000000000..50be3e4dd4098 --- /dev/null +++ b/rust/kernel/dma_buf.rs @@ -0,0 +1,40 @@ +// SPDX-License-Identifier: GPL-2.0
+//! DMA buffer API. +//! +//! C header: [`include/linux/dma-buf.h`](srctree/include/linux/dma-buf.h)
+use bindings; +use kernel::types::*;
+/// A DMA buffer object. +/// +/// # Invariants +/// +/// The data layout of this type is equivalent to that of `struct dma_buf`. +#[repr(transparent)] +pub struct DmaBuf(Opaquebindings::dma_buf);
+// SAFETY: `struct dma_buf` is thread-safe +unsafe impl Send for DmaBuf {} +// SAFETY: `struct dma_buf` is thread-safe +unsafe impl Sync for DmaBuf {}
+#[expect(unused)] +impl DmaBuf {
- /// Convert from a `*mut bindings::dma_buf` to a [`DmaBuf`].
- ///
- /// # Safety
- ///
- /// The caller guarantees that `self_ptr` points to a valid initialized `struct dma_buf` for the
- /// duration of the lifetime of `'a`, and promises to not violate rust's data aliasing rules
- /// using the reference provided by this function.
- pub(crate) unsafe fn from_raw<'a>(self_ptr: *mut bindings::dma_buf) -> &'a Self {
// SAFETY: Our data layout is equivalent to `dma_buf` .unsafe { &*self_ptr.cast() }- }
- pub(crate) fn as_raw(&self) -> *mut bindings::dma_buf {
self.0.get()- }
+} diff --git a/rust/kernel/lib.rs b/rust/kernel/lib.rs index fcffc3988a903..59242d83efe21 100644 --- a/rust/kernel/lib.rs +++ b/rust/kernel/lib.rs @@ -81,6 +81,7 @@ pub mod device_id; pub mod devres; pub mod dma; +pub mod dma_buf; pub mod driver; #[cfg(CONFIG_DRM = "y")] pub mod drm;
…though, I just realized immediately after sending that response to you that I mentioned that this type is reference counted in the commit message - but I never actually added an implementation for AlwaysRefCounted. So, that's at least one additional thing I will make sure to add. Similarly though, I don't think doing that would require us to interact with any locking or sg_tables since we're not yet exposing any actual operations on DmaBuf.
On Fri, 2025-09-12 at 18:29 -0400, Lyude Paul wrote:
On Fri, 2025-09-12 at 10:25 +0200, Christian König wrote:
On 12.09.25 00:57, Lyude Paul wrote:
In order to implement the gem export callback, we need a type to represent struct dma_buf. So - this commit introduces a set of stub bindings for dma_buf. These bindings provide a ref-counted DmaBuf object, but don't currently implement any functionality for using the DmaBuf.
Especially the last sentence is a bit problematic.
Wrapping a DMA-buf object should be pretty easy, the hard part is the operations on the DMA-buf object.
E.g. how are locking and sg_table creation handled?
Mind clarifying a bit what you're talking about here?
FWIW: regarding sg_table creation, we currently have two ways of doing this in rust:
- Manually, using the scatterlist rust bindings that were recently merged into drm-rust-next
- Through a DRM helper provided by gem shmem, ATM this would be either
- `gem::shmem::BaseObject::<T: DriverObject>::sg_table()`
- `gem::shmem::BaseObject::<T: DriverObject>::owned_sg_table()` (both of these just use drm_gem_shmem_get_pages_sgt())
However, I don't think we currently have any interactions in the bindings we've written so far between SGTable and DmaBuf and I don't currently have any plans for this on my roadmap.
Regarding locking: I'm not totally sure what locking you're referring to here? To be clear - I'm explicitly /not/ trying to deal with the issue of solving how operations on the DmaBuf object work in rust, and instead simply come up with the bare minimum interface needed so that we can return a DmaBuf created from the drm_gem_prime_export() helper (e.g. gem::BaseObject::prime_export()) from a driver's gem::DriverObject::export() callback. Or alternatively, destroy it in the event that said callback fails.
Unless there's some locking interaction I missed that we need to solve to fulfill those two goals, I'm not aware of any rust driver that needs anything beyond that just yet. As such, I assumed this interface would touch a small enough surface of the dma-buf API that it shouldn't set any concrete requirements on how a fully-fledged dma-buf api in rust would work in the future. And at the same time, still allow us to move forward with the shmem bindings, and make sure that the surface area of the stub API is small enough that adding the rest of the functionality to it later doesn't require any non- trivial changes to current users.
Regards, Christian.
Signed-off-by: Lyude Paul lyude@redhat.com Reviewed-by: Daniel Almeida daniel.almeida@collabora.com
V3:
- Rename as_ref() to from_raw()
V4:
- Add missing period to rustdoc at top of file
rust/kernel/dma_buf.rs | 40 ++++++++++++++++++++++++++++++++++++++++ rust/kernel/lib.rs | 1 + 2 files changed, 41 insertions(+) create mode 100644 rust/kernel/dma_buf.rs
diff --git a/rust/kernel/dma_buf.rs b/rust/kernel/dma_buf.rs new file mode 100644 index 0000000000000..50be3e4dd4098 --- /dev/null +++ b/rust/kernel/dma_buf.rs @@ -0,0 +1,40 @@ +// SPDX-License-Identifier: GPL-2.0
+//! DMA buffer API. +//! +//! C header: [`include/linux/dma-buf.h`](srctree/include/linux/dma-buf.h)
+use bindings; +use kernel::types::*;
+/// A DMA buffer object. +/// +/// # Invariants +/// +/// The data layout of this type is equivalent to that of `struct dma_buf`. +#[repr(transparent)] +pub struct DmaBuf(Opaquebindings::dma_buf);
+// SAFETY: `struct dma_buf` is thread-safe +unsafe impl Send for DmaBuf {} +// SAFETY: `struct dma_buf` is thread-safe +unsafe impl Sync for DmaBuf {}
+#[expect(unused)] +impl DmaBuf {
- /// Convert from a `*mut bindings::dma_buf` to a [`DmaBuf`].
- ///
- /// # Safety
- ///
- /// The caller guarantees that `self_ptr` points to a valid initialized `struct dma_buf` for the
- /// duration of the lifetime of `'a`, and promises to not violate rust's data aliasing rules
- /// using the reference provided by this function.
- pub(crate) unsafe fn from_raw<'a>(self_ptr: *mut bindings::dma_buf) -> &'a Self {
// SAFETY: Our data layout is equivalent to `dma_buf` .unsafe { &*self_ptr.cast() }- }
- pub(crate) fn as_raw(&self) -> *mut bindings::dma_buf {
self.0.get()- }
+} diff --git a/rust/kernel/lib.rs b/rust/kernel/lib.rs index fcffc3988a903..59242d83efe21 100644 --- a/rust/kernel/lib.rs +++ b/rust/kernel/lib.rs @@ -81,6 +81,7 @@ pub mod device_id; pub mod devres; pub mod dma; +pub mod dma_buf; pub mod driver; #[cfg(CONFIG_DRM = "y")] pub mod drm;
Agh! Sorry for the spam, I should have double checked the code before writing this as I realized the reason I didn't implement this. Correct me if I'm wrong here since it's the first time I've interacted very much with this API in the kernel but: it seems like the reference counting for dma_buf objects is intended to be used for keeping a dma_buf's fd around while userspace is still accessing it and not for use internally by drivers themselves, correct?
On Fri, 2025-09-12 at 18:32 -0400, Lyude Paul wrote:
…though, I just realized immediately after sending that response to you that I mentioned that this type is reference counted in the commit message - but I never actually added an implementation for AlwaysRefCounted. So, that's at least one additional thing I will make sure to add. Similarly though, I don't think doing that would require us to interact with any locking or sg_tables since we're not yet exposing any actual operations on DmaBuf.
On Fri, 2025-09-12 at 18:29 -0400, Lyude Paul wrote:
On Fri, 2025-09-12 at 10:25 +0200, Christian König wrote:
On 12.09.25 00:57, Lyude Paul wrote:
In order to implement the gem export callback, we need a type to represent struct dma_buf. So - this commit introduces a set of stub bindings for dma_buf. These bindings provide a ref-counted DmaBuf object, but don't currently implement any functionality for using the DmaBuf.
Especially the last sentence is a bit problematic.
Wrapping a DMA-buf object should be pretty easy, the hard part is the operations on the DMA-buf object.
E.g. how are locking and sg_table creation handled?
Mind clarifying a bit what you're talking about here?
FWIW: regarding sg_table creation, we currently have two ways of doing this in rust:
- Manually, using the scatterlist rust bindings that were recently merged into drm-rust-next
- Through a DRM helper provided by gem shmem, ATM this would be either
- `gem::shmem::BaseObject::<T: DriverObject>::sg_table()`
- `gem::shmem::BaseObject::<T: DriverObject>::owned_sg_table()` (both of these just use drm_gem_shmem_get_pages_sgt())
However, I don't think we currently have any interactions in the bindings we've written so far between SGTable and DmaBuf and I don't currently have any plans for this on my roadmap.
Regarding locking: I'm not totally sure what locking you're referring to here? To be clear - I'm explicitly /not/ trying to deal with the issue of solving how operations on the DmaBuf object work in rust, and instead simply come up with the bare minimum interface needed so that we can return a DmaBuf created from the drm_gem_prime_export() helper (e.g. gem::BaseObject::prime_export()) from a driver's gem::DriverObject::export() callback. Or alternatively, destroy it in the event that said callback fails.
Unless there's some locking interaction I missed that we need to solve to fulfill those two goals, I'm not aware of any rust driver that needs anything beyond that just yet. As such, I assumed this interface would touch a small enough surface of the dma-buf API that it shouldn't set any concrete requirements on how a fully-fledged dma-buf api in rust would work in the future. And at the same time, still allow us to move forward with the shmem bindings, and make sure that the surface area of the stub API is small enough that adding the rest of the functionality to it later doesn't require any non- trivial changes to current users.
Regards, Christian.
Signed-off-by: Lyude Paul lyude@redhat.com Reviewed-by: Daniel Almeida daniel.almeida@collabora.com
V3:
- Rename as_ref() to from_raw()
V4:
- Add missing period to rustdoc at top of file
rust/kernel/dma_buf.rs | 40 ++++++++++++++++++++++++++++++++++++++++ rust/kernel/lib.rs | 1 + 2 files changed, 41 insertions(+) create mode 100644 rust/kernel/dma_buf.rs
diff --git a/rust/kernel/dma_buf.rs b/rust/kernel/dma_buf.rs new file mode 100644 index 0000000000000..50be3e4dd4098 --- /dev/null +++ b/rust/kernel/dma_buf.rs @@ -0,0 +1,40 @@ +// SPDX-License-Identifier: GPL-2.0
+//! DMA buffer API. +//! +//! C header: [`include/linux/dma-buf.h`](srctree/include/linux/dma-buf.h)
+use bindings; +use kernel::types::*;
+/// A DMA buffer object. +/// +/// # Invariants +/// +/// The data layout of this type is equivalent to that of `struct dma_buf`. +#[repr(transparent)] +pub struct DmaBuf(Opaquebindings::dma_buf);
+// SAFETY: `struct dma_buf` is thread-safe +unsafe impl Send for DmaBuf {} +// SAFETY: `struct dma_buf` is thread-safe +unsafe impl Sync for DmaBuf {}
+#[expect(unused)] +impl DmaBuf {
- /// Convert from a `*mut bindings::dma_buf` to a [`DmaBuf`].
- ///
- /// # Safety
- ///
- /// The caller guarantees that `self_ptr` points to a valid initialized `struct dma_buf` for the
- /// duration of the lifetime of `'a`, and promises to not violate rust's data aliasing rules
- /// using the reference provided by this function.
- pub(crate) unsafe fn from_raw<'a>(self_ptr: *mut bindings::dma_buf) -> &'a Self {
// SAFETY: Our data layout is equivalent to `dma_buf` .unsafe { &*self_ptr.cast() }- }
- pub(crate) fn as_raw(&self) -> *mut bindings::dma_buf {
self.0.get()- }
+} diff --git a/rust/kernel/lib.rs b/rust/kernel/lib.rs index fcffc3988a903..59242d83efe21 100644 --- a/rust/kernel/lib.rs +++ b/rust/kernel/lib.rs @@ -81,6 +81,7 @@ pub mod device_id; pub mod devres; pub mod dma; +pub mod dma_buf; pub mod driver; #[cfg(CONFIG_DRM = "y")] pub mod drm;
Hi Lyude,
On 13.09.25 00:43, Lyude Paul wrote:
Agh! Sorry for the spam, I should have double checked the code before writing this as I realized the reason I didn't implement this. Correct me if I'm wrong here since it's the first time I've interacted very much with this API in the kernel but: it seems like the reference counting for dma_buf objects is intended to be used for keeping a dma_buf's fd around while userspace is still accessing it and not for use internally by drivers themselves, correct?
Yes that is more or less correct.
The DMA-buf references are handled by the DRM layer, in other words as long as you have a GEM handle the DRM layer keeps a reference to the DMA-buf providing the backing store for this GEM handle.
So you should not mess with this reference count if not absolutely necessary.
On Fri, 2025-09-12 at 18:32 -0400, Lyude Paul wrote:
…though, I just realized immediately after sending that response to you that I mentioned that this type is reference counted in the commit message - but I never actually added an implementation for AlwaysRefCounted. So, that's at least one additional thing I will make sure to add. Similarly though, I don't think doing that would require us to interact with any locking or sg_tables since we're not yet exposing any actual operations on DmaBuf.
Well exporting the buffers is trivial, but that is not really useful on its own.
So when you exported a DMA-buf you should potentially also use it in some way, e.g. command submission, rendering, scanout etc...
How do you do this without grabbing the lock on the buffer?
The usually semantics for a command submission is for example:
1. Lock all involved buffers. 2. Make sure prerequisites are meet. 3. Allocate a slot for a dma_fence on the dma_resv object. 4. Push the work to the HW. 5. Remember the work in the dma_fence slot on the dma_resv object of your DMA-buf. 6. Unlock all involved buffers.
Regards, Christian.
On Fri, 2025-09-12 at 18:29 -0400, Lyude Paul wrote:
On Fri, 2025-09-12 at 10:25 +0200, Christian König wrote:
On 12.09.25 00:57, Lyude Paul wrote:
In order to implement the gem export callback, we need a type to represent struct dma_buf. So - this commit introduces a set of stub bindings for dma_buf. These bindings provide a ref-counted DmaBuf object, but don't currently implement any functionality for using the DmaBuf.
Especially the last sentence is a bit problematic.
Wrapping a DMA-buf object should be pretty easy, the hard part is the operations on the DMA-buf object.
E.g. how are locking and sg_table creation handled?
Mind clarifying a bit what you're talking about here?
FWIW: regarding sg_table creation, we currently have two ways of doing this in rust:
- Manually, using the scatterlist rust bindings that were recently merged into drm-rust-next
- Through a DRM helper provided by gem shmem, ATM this would be either
- `gem::shmem::BaseObject::<T: DriverObject>::sg_table()`
- `gem::shmem::BaseObject::<T: DriverObject>::owned_sg_table()` (both of these just use drm_gem_shmem_get_pages_sgt())
However, I don't think we currently have any interactions in the bindings we've written so far between SGTable and DmaBuf and I don't currently have any plans for this on my roadmap.
Regarding locking: I'm not totally sure what locking you're referring to here? To be clear - I'm explicitly /not/ trying to deal with the issue of solving how operations on the DmaBuf object work in rust, and instead simply come up with the bare minimum interface needed so that we can return a DmaBuf created from the drm_gem_prime_export() helper (e.g. gem::BaseObject::prime_export()) from a driver's gem::DriverObject::export() callback. Or alternatively, destroy it in the event that said callback fails.
Unless there's some locking interaction I missed that we need to solve to fulfill those two goals, I'm not aware of any rust driver that needs anything beyond that just yet. As such, I assumed this interface would touch a small enough surface of the dma-buf API that it shouldn't set any concrete requirements on how a fully-fledged dma-buf api in rust would work in the future. And at the same time, still allow us to move forward with the shmem bindings, and make sure that the surface area of the stub API is small enough that adding the rest of the functionality to it later doesn't require any non- trivial changes to current users.
Regards, Christian.
Signed-off-by: Lyude Paul lyude@redhat.com Reviewed-by: Daniel Almeida daniel.almeida@collabora.com
V3:
- Rename as_ref() to from_raw()
V4:
- Add missing period to rustdoc at top of file
rust/kernel/dma_buf.rs | 40 ++++++++++++++++++++++++++++++++++++++++ rust/kernel/lib.rs | 1 + 2 files changed, 41 insertions(+) create mode 100644 rust/kernel/dma_buf.rs
diff --git a/rust/kernel/dma_buf.rs b/rust/kernel/dma_buf.rs new file mode 100644 index 0000000000000..50be3e4dd4098 --- /dev/null +++ b/rust/kernel/dma_buf.rs @@ -0,0 +1,40 @@ +// SPDX-License-Identifier: GPL-2.0
+//! DMA buffer API. +//! +//! C header: [`include/linux/dma-buf.h`](srctree/include/linux/dma-buf.h)
+use bindings; +use kernel::types::*;
+/// A DMA buffer object. +/// +/// # Invariants +/// +/// The data layout of this type is equivalent to that of `struct dma_buf`. +#[repr(transparent)] +pub struct DmaBuf(Opaquebindings::dma_buf);
+// SAFETY: `struct dma_buf` is thread-safe +unsafe impl Send for DmaBuf {} +// SAFETY: `struct dma_buf` is thread-safe +unsafe impl Sync for DmaBuf {}
+#[expect(unused)] +impl DmaBuf {
- /// Convert from a `*mut bindings::dma_buf` to a [`DmaBuf`].
- ///
- /// # Safety
- ///
- /// The caller guarantees that `self_ptr` points to a valid initialized `struct dma_buf` for the
- /// duration of the lifetime of `'a`, and promises to not violate rust's data aliasing rules
- /// using the reference provided by this function.
- pub(crate) unsafe fn from_raw<'a>(self_ptr: *mut bindings::dma_buf) -> &'a Self {
// SAFETY: Our data layout is equivalent to `dma_buf` .unsafe { &*self_ptr.cast() }- }
- pub(crate) fn as_raw(&self) -> *mut bindings::dma_buf {
self.0.get()- }
+} diff --git a/rust/kernel/lib.rs b/rust/kernel/lib.rs index fcffc3988a903..59242d83efe21 100644 --- a/rust/kernel/lib.rs +++ b/rust/kernel/lib.rs @@ -81,6 +81,7 @@ pub mod device_id; pub mod devres; pub mod dma; +pub mod dma_buf; pub mod driver; #[cfg(CONFIG_DRM = "y")] pub mod drm;
JFYI - After talking a bit to the Asahi folks, it seems like that we're actually a ways off from Asahi having any actual usecase for the export() callback - so I'm going to just drop the dma_buf bits here for the next version of the patch series
On Mon, 2025-09-15 at 10:59 +0200, Christian König wrote:
Well exporting the buffers is trivial, but that is not really useful on its own.
So when you exported a DMA-buf you should potentially also use it in some way, e.g. command submission, rendering, scanout etc...
How do you do this without grabbing the lock on the buffer?
The usually semantics for a command submission is for example:
- Lock all involved buffers.
- Make sure prerequisites are meet.
- Allocate a slot for a dma_fence on the dma_resv object.
- Push the work to the HW.
- Remember the work in the dma_fence slot on the dma_resv object of your DMA-buf.
- Unlock all involved buffers.
Regards, Christian.
JFYI, after talking with Alice Rhyl we figured since we're not going to be getting a user of these bindings into the kernel in time for rc6 that it made more sense to just merge the two C-side patches into drm-misc-next instead of drm-rust-next.
I've pushed those two patches to drm-misc-next, and am going to wait until we've addressed Christian's concerns before looking into pushing the dma_buf stub bindings.
On Thu, 2025-09-11 at 18:57 -0400, Lyude Paul wrote:
Now that we're getting close to reaching the finish line for upstreaming the rust gem shmem bindings, we've got another batch of patches that have been reviewed and can be safely pushed to drm-rust-next independently of the rest of the series.
These patches of course apply against the drm-rust-next branch, and are part of the gem shmem series, the latest version of which can be found here:
https://patchwork.freedesktop.org/series/146465/
Lyude Paul (3): drm/gem/shmem: Extract drm_gem_shmem_init() from drm_gem_shmem_create() drm/gem/shmem: Extract drm_gem_shmem_release() from drm_gem_shmem_free() rust: Add dma_buf stub bindings
drivers/gpu/drm/drm_gem_shmem_helper.c | 98 ++++++++++++++++++-------- include/drm/drm_gem_shmem_helper.h | 2 + rust/kernel/dma_buf.rs | 40 +++++++++++ rust/kernel/lib.rs | 1 + 4 files changed, 111 insertions(+), 30 deletions(-) create mode 100644 rust/kernel/dma_buf.rs
base-commit: cf4fd52e323604ccfa8390917593e1fb965653ee
linaro-mm-sig@lists.linaro.org
-
Christian König -
Lyude Paul