1 files changed, 50 insertions, 0 deletions

diff --git a/kernel/gsp_sema_service.c b/kernel/gsp_sema_service.c
index ce008d6..ac6f392 100644
--- a/kernel/gsp_sema_service.c
+++ b/kernel/gsp_sema_service.c
@@ -12689,6 +12689,56 @@ static void svc_decode_stream(struct nv_vgpu_device *vgpu, const u8 *buf,
 		}
 	}
 
+	/*
+	 * SESSION 153-CONTINUED-12: attach on the draw marker itself.
+	 *
+	 * The section recogniser below needs the sticky C597 bind
+	 * (svc_gl_att_h) that the boot-class GLX init push carries. On a
+	 * boot where the class is bound channel-side (inside the emulated
+	 * RM channel setup) and no decoded push re-emits SET_OBJECT C597,
+	 * every draw-shaped push is dropped and no 3D replay ever runs.
+	 * Adopt the first trusted push that carries an NVC597_BEGIN IMMD
+	 * (op 4, addr 0x1618, subchannel 0) as the attached channel; the
+	 * per-pass gl_win_start tracker then runs over that same push from
+	 * its start, exactly as it does after an explicit bind, so the
+	 * window keeps the pre-BEGIN state methods (vertex stream bases,
+	 * colour target, constant-buffer selectors).
+	 */
+	if (gsp_sema_gl_xlate && !ch->engine_type && trusted &&
+	    !svc_gl_att_h) {
+		u32 o2 = 0;
+
+		while (o2 + 4 <= len) {
+			u32 h2, op2, cnt2, sc2, ad2;
+
+			memcpy(&h2, buf + o2, 4);
+			op2 = (h2 >> 29) & 0x7;
+			cnt2 = (h2 >> 16) & 0xfff;
+			sc2 = (h2 >> 13) & 0x7;
+			ad2 = (h2 & 0x1fff) << 2;
+			if (op2 == 4 && ad2 == 0x1618 && sc2 == 0) {
+				svc_gl_att_h = ch->h_object;
+				svc_gl_att_subch = 0;
+				if (gsp_sema_dbg && svc_gl_draw_log < 64) {
+					svc_gl_draw_log++;
+					pr_info("sema-gl: attach-on-BEGIN h=0x%x push=0x%llx off=0x%x (no explicit C597 bind seen)\n",
+						ch->h_object, push_va, o2);
+				}
+				break;
+			}
+			if (op2 == 4 || op2 == 7) {
+				o2 += 4;
+				continue;
+			}
+			if ((op2 == 1 || op2 == 3 || op2 == 5) && cnt2 &&
+			    cnt2 <= 0xfff && o2 + 4 + cnt2 * 4 <= len) {
+				o2 += 4 + cnt2 * 4;
+				continue;
+			}
+			o2 += 4;
+		}
+	}
+
 	while (off + 4 <= len) {
 		u32 hdr = 0, op, count, subch, addr;
 		u32 v0 = 0, v1 = 0, v2 = 0, v3 = 0, v4 = 0;