vgsp: 3D method-stream replay lane (verbatim C597 window + shadow relocation + release tail; engine retires real 3D methods, no QMD) (SESSION 153 r932)

1 files changed, 21 insertions, 1 deletions

diff --git a/kernel/gsp_phys_booter.h b/kernel/gsp_phys_booter.h
index af74f7c..dfdf1d9 100644
--- a/kernel/gsp_phys_booter.h
+++ b/kernel/gsp_phys_booter.h
@@ -368,7 +368,12 @@ void gsp_phys_backend_relay_counters(u64 *requested, u64 *ok, u64 *verify_fail,
 #define GSP_PHYS_GR_QMD_SENTINEL	0xdeadbeefu
 #define GSP_PHYS_GR_QMD_SENTINEL_WORD	63u
 #define GSP_PHYS_GR_QMD_WORD_NONE	0xffffffffu
-#define GSP_PHYS_GR_RAW_WORDS		256u
+/*
+ * r929: grown 256 -> 512 dwords so a whole GL 3D section push (the observed
+ * X server one-shot is 1524 B = 381 dwords) survives in the captured raw
+ * tail; the raw window is the source of the 3D method-stream replay.
+ */
+#define GSP_PHYS_GR_RAW_WORDS		512u
 
 /*
  * B-2 (large-operand data path): the grown, boot-fixed GR data-bounce region.
@@ -451,6 +456,21 @@ struct gsp_phys_gr_submit {
 	u64 push_va;		/* guest push identity (logging only) */
 	u32 push_len;
 	u32 h_object;		/* guest GR channel handle (logging only) */
+	/*
+	 * r929 (GL 3D path): the captured raw 3D method window - the
+	 * SET_OBJECT C597 section from its class bind through the section
+	 * close (state binds, LINE_LENGTH_IN + LAUNCH_DMA uploads, program/
+	 * tex binds; the prelude before the bind is excluded - its host-sem
+	 * VAs belong to the client's VM and are unmapped in the replay
+	 * channel, r929 v1 FAULT_PDE). When stream_n > 0 and
+	 * gsp_phys_rmcall_gr_3d is on, the launch block replays the window
+	 * verbatim after a SET_OBJECT TURING_A bind instead of the compute
+	 * prelude + QMD; the engine then executes the REAL 3D methods.
+	 * stream points into the caller's raw buffer; it is a separate
+	 * pointer so a caller can pass any window.
+	 */
+	const u32 *stream;
+	u32 stream_n;		/* dwords */
 };
 
 /* True when gsp_phys_gr_forward is set and the ladder is a live GR channel