]>
Commit | Line | Data |
---|---|---|
1da177e4 LT |
1 | /* |
2 | * User level driver support for input subsystem | |
3 | * | |
4 | * Heavily based on evdev.c by Vojtech Pavlik | |
5 | * | |
6 | * This program is free software; you can redistribute it and/or modify | |
7 | * it under the terms of the GNU General Public License as published by | |
8 | * the Free Software Foundation; either version 2 of the License, or | |
9 | * (at your option) any later version. | |
10 | * | |
11 | * This program is distributed in the hope that it will be useful, | |
12 | * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
13 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
14 | * GNU General Public License for more details. | |
15 | * | |
16 | * You should have received a copy of the GNU General Public License | |
17 | * along with this program; if not, write to the Free Software | |
18 | * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA | |
19 | * | |
20 | * Author: Aristeu Sergio Rozanski Filho <aris@cathedrallabs.org> | |
21 | * | |
22 | * Changes/Revisions: | |
e3480a61 BT |
23 | * 0.4 01/09/2014 (Benjamin Tissoires <benjamin.tissoires@redhat.com>) |
24 | * - add UI_GET_SYSNAME ioctl | |
ff462551 AH |
25 | * 0.3 09/04/2006 (Anssi Hannula <anssi.hannula@gmail.com>) |
26 | * - updated ff support for the changes in kernel interface | |
27 | * - added MODULE_VERSION | |
1da177e4 LT |
28 | * 0.2 16/10/2004 (Micah Dowty <micah@navi.cx>) |
29 | * - added force feedback support | |
30 | * - added UI_SET_PHYS | |
31 | * 0.1 20/06/2002 | |
32 | * - first public version | |
33 | */ | |
34 | #include <linux/poll.h> | |
a99bbaf5 | 35 | #include <linux/sched.h> |
1da177e4 LT |
36 | #include <linux/slab.h> |
37 | #include <linux/module.h> | |
38 | #include <linux/init.h> | |
1da177e4 LT |
39 | #include <linux/fs.h> |
40 | #include <linux/miscdevice.h> | |
41 | #include <linux/uinput.h> | |
47c78e89 | 42 | #include <linux/input/mt.h> |
2d56f3a3 | 43 | #include "../input-compat.h" |
1da177e4 | 44 | |
54ce165e DT |
45 | static int uinput_dev_event(struct input_dev *dev, |
46 | unsigned int type, unsigned int code, int value) | |
1da177e4 | 47 | { |
373f9713 | 48 | struct uinput_device *udev = input_get_drvdata(dev); |
1da177e4 LT |
49 | |
50 | udev->buff[udev->head].type = type; | |
51 | udev->buff[udev->head].code = code; | |
52 | udev->buff[udev->head].value = value; | |
53 | do_gettimeofday(&udev->buff[udev->head].time); | |
54 | udev->head = (udev->head + 1) % UINPUT_BUFFER_SIZE; | |
55 | ||
56 | wake_up_interruptible(&udev->waitq); | |
57 | ||
58 | return 0; | |
59 | } | |
60 | ||
05cebd38 | 61 | /* Atomically allocate an ID for the given request. Returns 0 on success. */ |
00ce756c DT |
62 | static bool uinput_request_alloc_id(struct uinput_device *udev, |
63 | struct uinput_request *request) | |
1da177e4 | 64 | { |
c5b3533a | 65 | unsigned int id; |
00ce756c | 66 | bool reserved = false; |
1da177e4 | 67 | |
0048e603 | 68 | spin_lock(&udev->requests_lock); |
152c12f5 | 69 | |
05cebd38 | 70 | for (id = 0; id < UINPUT_NUM_REQUESTS; id++) { |
1da177e4 | 71 | if (!udev->requests[id]) { |
1da177e4 | 72 | request->id = id; |
0048e603 | 73 | udev->requests[id] = request; |
00ce756c | 74 | reserved = true; |
152c12f5 | 75 | break; |
1da177e4 | 76 | } |
05cebd38 | 77 | } |
152c12f5 | 78 | |
0048e603 | 79 | spin_unlock(&udev->requests_lock); |
00ce756c | 80 | return reserved; |
1da177e4 LT |
81 | } |
82 | ||
c5b3533a DT |
83 | static struct uinput_request *uinput_request_find(struct uinput_device *udev, |
84 | unsigned int id) | |
1da177e4 LT |
85 | { |
86 | /* Find an input request, by ID. Returns NULL if the ID isn't valid. */ | |
c5b3533a | 87 | if (id >= UINPUT_NUM_REQUESTS) |
1da177e4 | 88 | return NULL; |
2d56f3a3 | 89 | |
1da177e4 LT |
90 | return udev->requests[id]; |
91 | } | |
92 | ||
00ce756c DT |
93 | static int uinput_request_reserve_slot(struct uinput_device *udev, |
94 | struct uinput_request *request) | |
1da177e4 | 95 | { |
0048e603 DT |
96 | /* Allocate slot. If none are available right away, wait. */ |
97 | return wait_event_interruptible(udev->requests_waitq, | |
00ce756c | 98 | uinput_request_alloc_id(udev, request)); |
0048e603 | 99 | } |
1da177e4 | 100 | |
54ce165e DT |
101 | static void uinput_request_done(struct uinput_device *udev, |
102 | struct uinput_request *request) | |
0048e603 | 103 | { |
0048e603 DT |
104 | /* Mark slot as available */ |
105 | udev->requests[request->id] = NULL; | |
e597f0c8 | 106 | wake_up(&udev->requests_waitq); |
e7507ed9 DT |
107 | |
108 | complete(&request->done); | |
1da177e4 LT |
109 | } |
110 | ||
00ce756c DT |
111 | static int uinput_request_send(struct uinput_device *udev, |
112 | struct uinput_request *request) | |
1da177e4 | 113 | { |
05cebd38 ASRF |
114 | int retval; |
115 | ||
05cebd38 ASRF |
116 | retval = mutex_lock_interruptible(&udev->mutex); |
117 | if (retval) | |
118 | return retval; | |
119 | ||
120 | if (udev->state != UIST_CREATED) { | |
121 | retval = -ENODEV; | |
122 | goto out; | |
123 | } | |
124 | ||
00ce756c DT |
125 | init_completion(&request->done); |
126 | ||
127 | /* | |
128 | * Tell our userspace application about this new request | |
129 | * by queueing an input event. | |
130 | */ | |
05cebd38 ASRF |
131 | uinput_dev_event(udev->dev, EV_UINPUT, request->code, request->id); |
132 | ||
133 | out: | |
134 | mutex_unlock(&udev->mutex); | |
135 | return retval; | |
136 | } | |
137 | ||
00ce756c DT |
138 | static int uinput_request_submit(struct uinput_device *udev, |
139 | struct uinput_request *request) | |
140 | { | |
141 | int error; | |
142 | ||
143 | error = uinput_request_reserve_slot(udev, request); | |
144 | if (error) | |
145 | return error; | |
146 | ||
147 | error = uinput_request_send(udev, request); | |
148 | if (error) { | |
149 | uinput_request_done(udev, request); | |
150 | return error; | |
151 | } | |
152 | ||
153 | wait_for_completion(&request->done); | |
154 | return request->retval; | |
155 | } | |
156 | ||
05cebd38 | 157 | /* |
54ce165e | 158 | * Fail all outstanding requests so handlers don't wait for the userspace |
05cebd38 ASRF |
159 | * to finish processing them. |
160 | */ | |
161 | static void uinput_flush_requests(struct uinput_device *udev) | |
162 | { | |
163 | struct uinput_request *request; | |
164 | int i; | |
1da177e4 | 165 | |
05cebd38 ASRF |
166 | spin_lock(&udev->requests_lock); |
167 | ||
168 | for (i = 0; i < UINPUT_NUM_REQUESTS; i++) { | |
169 | request = udev->requests[i]; | |
170 | if (request) { | |
171 | request->retval = -ENODEV; | |
172 | uinput_request_done(udev, request); | |
173 | } | |
174 | } | |
175 | ||
176 | spin_unlock(&udev->requests_lock); | |
1da177e4 LT |
177 | } |
178 | ||
ff462551 AH |
179 | static void uinput_dev_set_gain(struct input_dev *dev, u16 gain) |
180 | { | |
181 | uinput_dev_event(dev, EV_FF, FF_GAIN, gain); | |
182 | } | |
183 | ||
184 | static void uinput_dev_set_autocenter(struct input_dev *dev, u16 magnitude) | |
185 | { | |
186 | uinput_dev_event(dev, EV_FF, FF_AUTOCENTER, magnitude); | |
187 | } | |
188 | ||
189 | static int uinput_dev_playback(struct input_dev *dev, int effect_id, int value) | |
190 | { | |
191 | return uinput_dev_event(dev, EV_FF, effect_id, value); | |
192 | } | |
193 | ||
54ce165e DT |
194 | static int uinput_dev_upload_effect(struct input_dev *dev, |
195 | struct ff_effect *effect, | |
196 | struct ff_effect *old) | |
1da177e4 | 197 | { |
05cebd38 | 198 | struct uinput_device *udev = input_get_drvdata(dev); |
1da177e4 LT |
199 | struct uinput_request request; |
200 | ||
2d56f3a3 PL |
201 | /* |
202 | * uinput driver does not currently support periodic effects with | |
203 | * custom waveform since it does not have a way to pass buffer of | |
204 | * samples (custom_data) to userspace. If ever there is a device | |
205 | * supporting custom waveforms we would need to define an additional | |
206 | * ioctl (UI_UPLOAD_SAMPLES) but for now we just bail out. | |
207 | */ | |
208 | if (effect->type == FF_PERIODIC && | |
209 | effect->u.periodic.waveform == FF_CUSTOM) | |
210 | return -EINVAL; | |
211 | ||
0048e603 | 212 | request.code = UI_FF_UPLOAD; |
ff462551 AH |
213 | request.u.upload.effect = effect; |
214 | request.u.upload.old = old; | |
0048e603 | 215 | |
00ce756c | 216 | return uinput_request_submit(udev, &request); |
1da177e4 LT |
217 | } |
218 | ||
219 | static int uinput_dev_erase_effect(struct input_dev *dev, int effect_id) | |
220 | { | |
05cebd38 | 221 | struct uinput_device *udev = input_get_drvdata(dev); |
1da177e4 LT |
222 | struct uinput_request request; |
223 | ||
224 | if (!test_bit(EV_FF, dev->evbit)) | |
225 | return -ENOSYS; | |
226 | ||
0048e603 | 227 | request.code = UI_FF_ERASE; |
1da177e4 | 228 | request.u.effect_id = effect_id; |
0048e603 | 229 | |
00ce756c | 230 | return uinput_request_submit(udev, &request); |
1da177e4 LT |
231 | } |
232 | ||
29506415 | 233 | static void uinput_destroy_device(struct uinput_device *udev) |
1da177e4 | 234 | { |
29506415 | 235 | const char *name, *phys; |
05cebd38 ASRF |
236 | struct input_dev *dev = udev->dev; |
237 | enum uinput_state old_state = udev->state; | |
238 | ||
239 | udev->state = UIST_NEW_DEVICE; | |
29506415 | 240 | |
05cebd38 ASRF |
241 | if (dev) { |
242 | name = dev->name; | |
243 | phys = dev->phys; | |
244 | if (old_state == UIST_CREATED) { | |
245 | uinput_flush_requests(udev); | |
246 | input_unregister_device(dev); | |
247 | } else { | |
248 | input_free_device(dev); | |
249 | } | |
29506415 DT |
250 | kfree(name); |
251 | kfree(phys); | |
252 | udev->dev = NULL; | |
1da177e4 | 253 | } |
1da177e4 LT |
254 | } |
255 | ||
29506415 | 256 | static int uinput_create_device(struct uinput_device *udev) |
1da177e4 | 257 | { |
ff462551 | 258 | struct input_dev *dev = udev->dev; |
fbae10db | 259 | int error, nslot; |
29506415 DT |
260 | |
261 | if (udev->state != UIST_SETUP_COMPLETE) { | |
262 | printk(KERN_DEBUG "%s: write device info first\n", UINPUT_NAME); | |
1da177e4 LT |
263 | return -EINVAL; |
264 | } | |
265 | ||
601bbbe0 DT |
266 | if (test_bit(EV_ABS, dev->evbit)) { |
267 | input_alloc_absinfo(dev); | |
268 | if (!dev->absinfo) { | |
269 | error = -EINVAL; | |
fbae10db | 270 | goto fail1; |
601bbbe0 DT |
271 | } |
272 | ||
273 | if (test_bit(ABS_MT_SLOT, dev->absbit)) { | |
274 | nslot = input_abs_get_max(dev, ABS_MT_SLOT) + 1; | |
275 | error = input_mt_init_slots(dev, nslot, 0); | |
276 | if (error) | |
277 | goto fail1; | |
278 | } else if (test_bit(ABS_MT_POSITION_X, dev->absbit)) { | |
279 | input_set_events_per_packet(dev, 60); | |
280 | } | |
fbae10db DH |
281 | } |
282 | ||
daf6cd0c EV |
283 | if (test_bit(EV_FF, dev->evbit) && !udev->ff_effects_max) { |
284 | printk(KERN_DEBUG "%s: ff_effects_max should be non-zero when FF_BIT is set\n", | |
285 | UINPUT_NAME); | |
286 | error = -EINVAL; | |
287 | goto fail1; | |
288 | } | |
289 | ||
ff462551 AH |
290 | if (udev->ff_effects_max) { |
291 | error = input_ff_create(dev, udev->ff_effects_max); | |
292 | if (error) | |
293 | goto fail1; | |
294 | ||
295 | dev->ff->upload = uinput_dev_upload_effect; | |
296 | dev->ff->erase = uinput_dev_erase_effect; | |
297 | dev->ff->playback = uinput_dev_playback; | |
298 | dev->ff->set_gain = uinput_dev_set_gain; | |
299 | dev->ff->set_autocenter = uinput_dev_set_autocenter; | |
29506415 | 300 | } |
1da177e4 | 301 | |
ff462551 AH |
302 | error = input_register_device(udev->dev); |
303 | if (error) | |
304 | goto fail2; | |
305 | ||
29506415 | 306 | udev->state = UIST_CREATED; |
1da177e4 LT |
307 | |
308 | return 0; | |
ff462551 AH |
309 | |
310 | fail2: input_ff_destroy(dev); | |
311 | fail1: uinput_destroy_device(udev); | |
312 | return error; | |
1da177e4 LT |
313 | } |
314 | ||
315 | static int uinput_open(struct inode *inode, struct file *file) | |
316 | { | |
29506415 | 317 | struct uinput_device *newdev; |
1da177e4 | 318 | |
29506415 | 319 | newdev = kzalloc(sizeof(struct uinput_device), GFP_KERNEL); |
1da177e4 | 320 | if (!newdev) |
29506415 DT |
321 | return -ENOMEM; |
322 | ||
221979aa | 323 | mutex_init(&newdev->mutex); |
0048e603 | 324 | spin_lock_init(&newdev->requests_lock); |
1da177e4 | 325 | init_waitqueue_head(&newdev->requests_waitq); |
29506415 DT |
326 | init_waitqueue_head(&newdev->waitq); |
327 | newdev->state = UIST_NEW_DEVICE; | |
1da177e4 LT |
328 | |
329 | file->private_data = newdev; | |
daf8a96b | 330 | nonseekable_open(inode, file); |
1da177e4 LT |
331 | |
332 | return 0; | |
1da177e4 LT |
333 | } |
334 | ||
fbae10db DH |
335 | static int uinput_validate_absinfo(struct input_dev *dev, unsigned int code, |
336 | const struct input_absinfo *abs) | |
337 | { | |
338 | int min, max; | |
339 | ||
340 | min = abs->minimum; | |
341 | max = abs->maximum; | |
342 | ||
343 | if ((min != 0 || max != 0) && max <= min) { | |
344 | printk(KERN_DEBUG | |
345 | "%s: invalid abs[%02x] min:%d max:%d\n", | |
346 | UINPUT_NAME, code, min, max); | |
347 | return -EINVAL; | |
348 | } | |
349 | ||
350 | if (abs->flat > max - min) { | |
351 | printk(KERN_DEBUG | |
352 | "%s: abs_flat #%02x out of range: %d (min:%d/max:%d)\n", | |
353 | UINPUT_NAME, code, abs->flat, min, max); | |
354 | return -EINVAL; | |
355 | } | |
356 | ||
357 | return 0; | |
358 | } | |
359 | ||
1da177e4 LT |
360 | static int uinput_validate_absbits(struct input_dev *dev) |
361 | { | |
362 | unsigned int cnt; | |
fbae10db | 363 | int error; |
bcb898e5 DH |
364 | |
365 | if (!test_bit(EV_ABS, dev->evbit)) | |
366 | return 0; | |
367 | ||
368 | /* | |
369 | * Check if absmin/absmax/absfuzz/absflat are sane. | |
370 | */ | |
1da177e4 | 371 | |
b6d30968 | 372 | for_each_set_bit(cnt, dev->absbit, ABS_CNT) { |
fbae10db | 373 | if (!dev->absinfo) |
bcb898e5 | 374 | return -EINVAL; |
bcb898e5 | 375 | |
fbae10db DH |
376 | error = uinput_validate_absinfo(dev, cnt, &dev->absinfo[cnt]); |
377 | if (error) | |
378 | return error; | |
bcb898e5 DH |
379 | } |
380 | ||
381 | return 0; | |
1da177e4 LT |
382 | } |
383 | ||
29506415 DT |
384 | static int uinput_allocate_device(struct uinput_device *udev) |
385 | { | |
386 | udev->dev = input_allocate_device(); | |
387 | if (!udev->dev) | |
388 | return -ENOMEM; | |
389 | ||
390 | udev->dev->event = uinput_dev_event; | |
373f9713 | 391 | input_set_drvdata(udev->dev, udev); |
29506415 DT |
392 | |
393 | return 0; | |
394 | } | |
395 | ||
052876f8 BT |
396 | static int uinput_dev_setup(struct uinput_device *udev, |
397 | struct uinput_setup __user *arg) | |
398 | { | |
399 | struct uinput_setup setup; | |
400 | struct input_dev *dev; | |
052876f8 BT |
401 | |
402 | if (udev->state == UIST_CREATED) | |
403 | return -EINVAL; | |
404 | ||
405 | if (copy_from_user(&setup, arg, sizeof(setup))) | |
406 | return -EFAULT; | |
407 | ||
408 | if (!setup.name[0]) | |
409 | return -EINVAL; | |
410 | ||
411 | dev = udev->dev; | |
412 | dev->id = setup.id; | |
413 | udev->ff_effects_max = setup.ff_effects_max; | |
414 | ||
415 | kfree(dev->name); | |
416 | dev->name = kstrndup(setup.name, UINPUT_MAX_NAME_SIZE, GFP_KERNEL); | |
417 | if (!dev->name) | |
418 | return -ENOMEM; | |
419 | ||
052876f8 BT |
420 | udev->state = UIST_SETUP_COMPLETE; |
421 | return 0; | |
422 | } | |
423 | ||
424 | static int uinput_abs_setup(struct uinput_device *udev, | |
425 | struct uinput_setup __user *arg, size_t size) | |
426 | { | |
427 | struct uinput_abs_setup setup = {}; | |
428 | struct input_dev *dev; | |
fbae10db | 429 | int error; |
052876f8 BT |
430 | |
431 | if (size > sizeof(setup)) | |
432 | return -E2BIG; | |
433 | ||
434 | if (udev->state == UIST_CREATED) | |
435 | return -EINVAL; | |
436 | ||
437 | if (copy_from_user(&setup, arg, size)) | |
438 | return -EFAULT; | |
439 | ||
440 | if (setup.code > ABS_MAX) | |
441 | return -ERANGE; | |
442 | ||
443 | dev = udev->dev; | |
444 | ||
fbae10db DH |
445 | error = uinput_validate_absinfo(dev, setup.code, &setup.absinfo); |
446 | if (error) | |
447 | return error; | |
448 | ||
052876f8 BT |
449 | input_alloc_absinfo(dev); |
450 | if (!dev->absinfo) | |
451 | return -ENOMEM; | |
452 | ||
453 | set_bit(setup.code, dev->absbit); | |
454 | dev->absinfo[setup.code] = setup.absinfo; | |
052876f8 BT |
455 | return 0; |
456 | } | |
457 | ||
458 | /* legacy setup via write() */ | |
459 | static int uinput_setup_device_legacy(struct uinput_device *udev, | |
460 | const char __user *buffer, size_t count) | |
1da177e4 LT |
461 | { |
462 | struct uinput_user_dev *user_dev; | |
463 | struct input_dev *dev; | |
5d9d6e91 | 464 | int i; |
152c12f5 | 465 | int retval; |
1da177e4 | 466 | |
29506415 DT |
467 | if (count != sizeof(struct uinput_user_dev)) |
468 | return -EINVAL; | |
469 | ||
470 | if (!udev->dev) { | |
471 | retval = uinput_allocate_device(udev); | |
472 | if (retval) | |
473 | return retval; | |
474 | } | |
1da177e4 | 475 | |
1da177e4 LT |
476 | dev = udev->dev; |
477 | ||
4dfcc271 | 478 | user_dev = memdup_user(buffer, sizeof(struct uinput_user_dev)); |
163d2770 | 479 | if (IS_ERR(user_dev)) |
4dfcc271 | 480 | return PTR_ERR(user_dev); |
1da177e4 | 481 | |
ff462551 AH |
482 | udev->ff_effects_max = user_dev->ff_effects_max; |
483 | ||
5d9d6e91 DH |
484 | /* Ensure name is filled in */ |
485 | if (!user_dev->name[0]) { | |
29506415 DT |
486 | retval = -EINVAL; |
487 | goto exit; | |
488 | } | |
489 | ||
490 | kfree(dev->name); | |
5d9d6e91 DH |
491 | dev->name = kstrndup(user_dev->name, UINPUT_MAX_NAME_SIZE, |
492 | GFP_KERNEL); | |
493 | if (!dev->name) { | |
1da177e4 LT |
494 | retval = -ENOMEM; |
495 | goto exit; | |
496 | } | |
497 | ||
1da177e4 LT |
498 | dev->id.bustype = user_dev->id.bustype; |
499 | dev->id.vendor = user_dev->id.vendor; | |
500 | dev->id.product = user_dev->id.product; | |
501 | dev->id.version = user_dev->id.version; | |
1da177e4 | 502 | |
72d47362 | 503 | for (i = 0; i < ABS_CNT; i++) { |
987a6c02 DM |
504 | input_abs_set_max(dev, i, user_dev->absmax[i]); |
505 | input_abs_set_min(dev, i, user_dev->absmin[i]); | |
506 | input_abs_set_fuzz(dev, i, user_dev->absfuzz[i]); | |
507 | input_abs_set_flat(dev, i, user_dev->absflat[i]); | |
508 | } | |
1da177e4 | 509 | |
bcb898e5 DH |
510 | retval = uinput_validate_absbits(dev); |
511 | if (retval < 0) | |
512 | goto exit; | |
1da177e4 | 513 | |
29506415 DT |
514 | udev->state = UIST_SETUP_COMPLETE; |
515 | retval = count; | |
516 | ||
517 | exit: | |
1da177e4 LT |
518 | kfree(user_dev); |
519 | return retval; | |
520 | } | |
521 | ||
cbf05413 RM |
522 | static ssize_t uinput_inject_events(struct uinput_device *udev, |
523 | const char __user *buffer, size_t count) | |
29506415 DT |
524 | { |
525 | struct input_event ev; | |
cbf05413 | 526 | size_t bytes = 0; |
29506415 | 527 | |
cbf05413 | 528 | if (count != 0 && count < input_event_size()) |
29506415 DT |
529 | return -EINVAL; |
530 | ||
cbf05413 RM |
531 | while (bytes + input_event_size() <= count) { |
532 | /* | |
533 | * Note that even if some events were fetched successfully | |
534 | * we are still going to return EFAULT instead of partial | |
535 | * count to let userspace know that it got it's buffers | |
536 | * all wrong. | |
537 | */ | |
538 | if (input_event_from_user(buffer + bytes, &ev)) | |
539 | return -EFAULT; | |
29506415 | 540 | |
cbf05413 RM |
541 | input_event(udev->dev, ev.type, ev.code, ev.value); |
542 | bytes += input_event_size(); | |
543 | } | |
29506415 | 544 | |
cbf05413 | 545 | return bytes; |
29506415 DT |
546 | } |
547 | ||
54ce165e DT |
548 | static ssize_t uinput_write(struct file *file, const char __user *buffer, |
549 | size_t count, loff_t *ppos) | |
1da177e4 LT |
550 | { |
551 | struct uinput_device *udev = file->private_data; | |
29506415 | 552 | int retval; |
1da177e4 | 553 | |
22ae19c6 DT |
554 | if (count == 0) |
555 | return 0; | |
556 | ||
221979aa | 557 | retval = mutex_lock_interruptible(&udev->mutex); |
29506415 DT |
558 | if (retval) |
559 | return retval; | |
560 | ||
561 | retval = udev->state == UIST_CREATED ? | |
cbf05413 | 562 | uinput_inject_events(udev, buffer, count) : |
052876f8 | 563 | uinput_setup_device_legacy(udev, buffer, count); |
1da177e4 | 564 | |
221979aa | 565 | mutex_unlock(&udev->mutex); |
1da177e4 | 566 | |
29506415 | 567 | return retval; |
1da177e4 LT |
568 | } |
569 | ||
929d1af5 DT |
570 | static bool uinput_fetch_next_event(struct uinput_device *udev, |
571 | struct input_event *event) | |
572 | { | |
573 | bool have_event; | |
574 | ||
575 | spin_lock_irq(&udev->dev->event_lock); | |
576 | ||
577 | have_event = udev->head != udev->tail; | |
578 | if (have_event) { | |
579 | *event = udev->buff[udev->tail]; | |
580 | udev->tail = (udev->tail + 1) % UINPUT_BUFFER_SIZE; | |
581 | } | |
582 | ||
583 | spin_unlock_irq(&udev->dev->event_lock); | |
584 | ||
585 | return have_event; | |
586 | } | |
587 | ||
22ae19c6 DT |
588 | static ssize_t uinput_events_to_user(struct uinput_device *udev, |
589 | char __user *buffer, size_t count) | |
1da177e4 | 590 | { |
929d1af5 | 591 | struct input_event event; |
22ae19c6 | 592 | size_t read = 0; |
1da177e4 | 593 | |
22ae19c6 DT |
594 | while (read + input_event_size() <= count && |
595 | uinput_fetch_next_event(udev, &event)) { | |
f40033ac | 596 | |
00ce756c DT |
597 | if (input_event_to_user(buffer + read, &event)) |
598 | return -EFAULT; | |
1da177e4 | 599 | |
22ae19c6 DT |
600 | read += input_event_size(); |
601 | } | |
1da177e4 | 602 | |
00ce756c | 603 | return read; |
22ae19c6 | 604 | } |
1da177e4 | 605 | |
22ae19c6 DT |
606 | static ssize_t uinput_read(struct file *file, char __user *buffer, |
607 | size_t count, loff_t *ppos) | |
608 | { | |
609 | struct uinput_device *udev = file->private_data; | |
610 | ssize_t retval; | |
29506415 | 611 | |
22ae19c6 DT |
612 | if (count != 0 && count < input_event_size()) |
613 | return -EINVAL; | |
1da177e4 | 614 | |
22ae19c6 DT |
615 | do { |
616 | retval = mutex_lock_interruptible(&udev->mutex); | |
617 | if (retval) | |
618 | return retval; | |
929d1af5 | 619 | |
22ae19c6 DT |
620 | if (udev->state != UIST_CREATED) |
621 | retval = -ENODEV; | |
622 | else if (udev->head == udev->tail && | |
623 | (file->f_flags & O_NONBLOCK)) | |
624 | retval = -EAGAIN; | |
625 | else | |
626 | retval = uinput_events_to_user(udev, buffer, count); | |
929d1af5 | 627 | |
22ae19c6 | 628 | mutex_unlock(&udev->mutex); |
1da177e4 | 629 | |
22ae19c6 DT |
630 | if (retval || count == 0) |
631 | break; | |
632 | ||
633 | if (!(file->f_flags & O_NONBLOCK)) | |
634 | retval = wait_event_interruptible(udev->waitq, | |
635 | udev->head != udev->tail || | |
636 | udev->state != UIST_CREATED); | |
637 | } while (retval == 0); | |
29506415 | 638 | |
1da177e4 LT |
639 | return retval; |
640 | } | |
641 | ||
642 | static unsigned int uinput_poll(struct file *file, poll_table *wait) | |
643 | { | |
644 | struct uinput_device *udev = file->private_data; | |
645 | ||
646 | poll_wait(file, &udev->waitq, wait); | |
647 | ||
648 | if (udev->head != udev->tail) | |
649 | return POLLIN | POLLRDNORM; | |
650 | ||
651 | return 0; | |
652 | } | |
653 | ||
29506415 | 654 | static int uinput_release(struct inode *inode, struct file *file) |
1da177e4 | 655 | { |
29506415 | 656 | struct uinput_device *udev = file->private_data; |
1da177e4 | 657 | |
29506415 | 658 | uinput_destroy_device(udev); |
1da177e4 LT |
659 | kfree(udev); |
660 | ||
661 | return 0; | |
662 | } | |
663 | ||
2d56f3a3 PL |
664 | #ifdef CONFIG_COMPAT |
665 | struct uinput_ff_upload_compat { | |
c5b3533a DT |
666 | __u32 request_id; |
667 | __s32 retval; | |
2d56f3a3 PL |
668 | struct ff_effect_compat effect; |
669 | struct ff_effect_compat old; | |
670 | }; | |
671 | ||
672 | static int uinput_ff_upload_to_user(char __user *buffer, | |
673 | const struct uinput_ff_upload *ff_up) | |
674 | { | |
b8b4ead1 | 675 | if (in_compat_syscall()) { |
2d56f3a3 PL |
676 | struct uinput_ff_upload_compat ff_up_compat; |
677 | ||
678 | ff_up_compat.request_id = ff_up->request_id; | |
679 | ff_up_compat.retval = ff_up->retval; | |
680 | /* | |
681 | * It so happens that the pointer that gives us the trouble | |
682 | * is the last field in the structure. Since we don't support | |
683 | * custom waveforms in uinput anyway we can just copy the whole | |
684 | * thing (to the compat size) and ignore the pointer. | |
685 | */ | |
686 | memcpy(&ff_up_compat.effect, &ff_up->effect, | |
687 | sizeof(struct ff_effect_compat)); | |
688 | memcpy(&ff_up_compat.old, &ff_up->old, | |
689 | sizeof(struct ff_effect_compat)); | |
690 | ||
691 | if (copy_to_user(buffer, &ff_up_compat, | |
692 | sizeof(struct uinput_ff_upload_compat))) | |
693 | return -EFAULT; | |
694 | } else { | |
695 | if (copy_to_user(buffer, ff_up, | |
696 | sizeof(struct uinput_ff_upload))) | |
697 | return -EFAULT; | |
698 | } | |
699 | ||
700 | return 0; | |
701 | } | |
702 | ||
703 | static int uinput_ff_upload_from_user(const char __user *buffer, | |
704 | struct uinput_ff_upload *ff_up) | |
705 | { | |
b8b4ead1 | 706 | if (in_compat_syscall()) { |
2d56f3a3 PL |
707 | struct uinput_ff_upload_compat ff_up_compat; |
708 | ||
709 | if (copy_from_user(&ff_up_compat, buffer, | |
710 | sizeof(struct uinput_ff_upload_compat))) | |
711 | return -EFAULT; | |
712 | ||
713 | ff_up->request_id = ff_up_compat.request_id; | |
714 | ff_up->retval = ff_up_compat.retval; | |
715 | memcpy(&ff_up->effect, &ff_up_compat.effect, | |
716 | sizeof(struct ff_effect_compat)); | |
717 | memcpy(&ff_up->old, &ff_up_compat.old, | |
718 | sizeof(struct ff_effect_compat)); | |
719 | ||
720 | } else { | |
721 | if (copy_from_user(ff_up, buffer, | |
722 | sizeof(struct uinput_ff_upload))) | |
723 | return -EFAULT; | |
724 | } | |
725 | ||
726 | return 0; | |
727 | } | |
728 | ||
729 | #else | |
730 | ||
731 | static int uinput_ff_upload_to_user(char __user *buffer, | |
732 | const struct uinput_ff_upload *ff_up) | |
733 | { | |
734 | if (copy_to_user(buffer, ff_up, sizeof(struct uinput_ff_upload))) | |
735 | return -EFAULT; | |
736 | ||
737 | return 0; | |
738 | } | |
739 | ||
740 | static int uinput_ff_upload_from_user(const char __user *buffer, | |
741 | struct uinput_ff_upload *ff_up) | |
742 | { | |
743 | if (copy_from_user(ff_up, buffer, sizeof(struct uinput_ff_upload))) | |
744 | return -EFAULT; | |
745 | ||
746 | return 0; | |
747 | } | |
748 | ||
749 | #endif | |
750 | ||
29506415 DT |
751 | #define uinput_set_bit(_arg, _bit, _max) \ |
752 | ({ \ | |
753 | int __ret = 0; \ | |
754 | if (udev->state == UIST_CREATED) \ | |
755 | __ret = -EINVAL; \ | |
756 | else if ((_arg) > (_max)) \ | |
757 | __ret = -EINVAL; \ | |
758 | else set_bit((_arg), udev->dev->_bit); \ | |
759 | __ret; \ | |
760 | }) | |
761 | ||
e3480a61 BT |
762 | static int uinput_str_to_user(void __user *dest, const char *str, |
763 | unsigned int maxlen) | |
764 | { | |
765 | char __user *p = dest; | |
766 | int len, ret; | |
767 | ||
768 | if (!str) | |
769 | return -ENOENT; | |
770 | ||
771 | if (maxlen == 0) | |
772 | return -EINVAL; | |
773 | ||
774 | len = strlen(str) + 1; | |
775 | if (len > maxlen) | |
776 | len = maxlen; | |
777 | ||
778 | ret = copy_to_user(p, str, len); | |
779 | if (ret) | |
780 | return -EFAULT; | |
781 | ||
782 | /* force terminating '\0' */ | |
783 | ret = put_user(0, p + len - 1); | |
784 | return ret ? -EFAULT : len; | |
785 | } | |
786 | ||
2d56f3a3 PL |
787 | static long uinput_ioctl_handler(struct file *file, unsigned int cmd, |
788 | unsigned long arg, void __user *p) | |
1da177e4 | 789 | { |
29506415 | 790 | int retval; |
2d56f3a3 | 791 | struct uinput_device *udev = file->private_data; |
1da177e4 LT |
792 | struct uinput_ff_upload ff_up; |
793 | struct uinput_ff_erase ff_erase; | |
794 | struct uinput_request *req; | |
5b6271bd | 795 | char *phys; |
e3480a61 BT |
796 | const char *name; |
797 | unsigned int size; | |
1da177e4 | 798 | |
221979aa | 799 | retval = mutex_lock_interruptible(&udev->mutex); |
29506415 DT |
800 | if (retval) |
801 | return retval; | |
802 | ||
803 | if (!udev->dev) { | |
804 | retval = uinput_allocate_device(udev); | |
805 | if (retval) | |
806 | goto out; | |
1da177e4 LT |
807 | } |
808 | ||
809 | switch (cmd) { | |
ba4e9a61 DH |
810 | case UI_GET_VERSION: |
811 | if (put_user(UINPUT_VERSION, | |
812 | (unsigned int __user *)p)) | |
813 | retval = -EFAULT; | |
814 | goto out; | |
815 | ||
1da177e4 LT |
816 | case UI_DEV_CREATE: |
817 | retval = uinput_create_device(udev); | |
9d51e801 | 818 | goto out; |
1da177e4 LT |
819 | |
820 | case UI_DEV_DESTROY: | |
29506415 | 821 | uinput_destroy_device(udev); |
9d51e801 | 822 | goto out; |
1da177e4 | 823 | |
052876f8 BT |
824 | case UI_DEV_SETUP: |
825 | retval = uinput_dev_setup(udev, p); | |
826 | goto out; | |
827 | ||
828 | /* UI_ABS_SETUP is handled in the variable size ioctls */ | |
829 | ||
1da177e4 | 830 | case UI_SET_EVBIT: |
29506415 | 831 | retval = uinput_set_bit(arg, evbit, EV_MAX); |
9d51e801 | 832 | goto out; |
1da177e4 LT |
833 | |
834 | case UI_SET_KEYBIT: | |
29506415 | 835 | retval = uinput_set_bit(arg, keybit, KEY_MAX); |
9d51e801 | 836 | goto out; |
1da177e4 LT |
837 | |
838 | case UI_SET_RELBIT: | |
29506415 | 839 | retval = uinput_set_bit(arg, relbit, REL_MAX); |
9d51e801 | 840 | goto out; |
1da177e4 LT |
841 | |
842 | case UI_SET_ABSBIT: | |
29506415 | 843 | retval = uinput_set_bit(arg, absbit, ABS_MAX); |
9d51e801 | 844 | goto out; |
1da177e4 LT |
845 | |
846 | case UI_SET_MSCBIT: | |
29506415 | 847 | retval = uinput_set_bit(arg, mscbit, MSC_MAX); |
9d51e801 | 848 | goto out; |
1da177e4 LT |
849 | |
850 | case UI_SET_LEDBIT: | |
29506415 | 851 | retval = uinput_set_bit(arg, ledbit, LED_MAX); |
9d51e801 | 852 | goto out; |
1da177e4 LT |
853 | |
854 | case UI_SET_SNDBIT: | |
29506415 | 855 | retval = uinput_set_bit(arg, sndbit, SND_MAX); |
9d51e801 | 856 | goto out; |
1da177e4 LT |
857 | |
858 | case UI_SET_FFBIT: | |
29506415 | 859 | retval = uinput_set_bit(arg, ffbit, FF_MAX); |
9d51e801 | 860 | goto out; |
1da177e4 | 861 | |
59c7c037 DT |
862 | case UI_SET_SWBIT: |
863 | retval = uinput_set_bit(arg, swbit, SW_MAX); | |
9d51e801 | 864 | goto out; |
59c7c037 | 865 | |
85b77200 HR |
866 | case UI_SET_PROPBIT: |
867 | retval = uinput_set_bit(arg, propbit, INPUT_PROP_MAX); | |
9d51e801 | 868 | goto out; |
85b77200 | 869 | |
1da177e4 | 870 | case UI_SET_PHYS: |
29506415 DT |
871 | if (udev->state == UIST_CREATED) { |
872 | retval = -EINVAL; | |
873 | goto out; | |
874 | } | |
4dfcc271 DT |
875 | |
876 | phys = strndup_user(p, 1024); | |
877 | if (IS_ERR(phys)) { | |
878 | retval = PTR_ERR(phys); | |
879 | goto out; | |
1da177e4 | 880 | } |
4dfcc271 | 881 | |
5b6271bd | 882 | kfree(udev->dev->phys); |
4dfcc271 | 883 | udev->dev->phys = phys; |
9d51e801 | 884 | goto out; |
1da177e4 LT |
885 | |
886 | case UI_BEGIN_FF_UPLOAD: | |
2d56f3a3 PL |
887 | retval = uinput_ff_upload_from_user(p, &ff_up); |
888 | if (retval) | |
9d51e801 | 889 | goto out; |
2d56f3a3 | 890 | |
1da177e4 | 891 | req = uinput_request_find(udev, ff_up.request_id); |
54ce165e DT |
892 | if (!req || req->code != UI_FF_UPLOAD || |
893 | !req->u.upload.effect) { | |
1da177e4 | 894 | retval = -EINVAL; |
9d51e801 | 895 | goto out; |
1da177e4 | 896 | } |
2d56f3a3 | 897 | |
1da177e4 | 898 | ff_up.retval = 0; |
2d56f3a3 | 899 | ff_up.effect = *req->u.upload.effect; |
ff462551 | 900 | if (req->u.upload.old) |
2d56f3a3 | 901 | ff_up.old = *req->u.upload.old; |
ff462551 AH |
902 | else |
903 | memset(&ff_up.old, 0, sizeof(struct ff_effect)); | |
904 | ||
2d56f3a3 | 905 | retval = uinput_ff_upload_to_user(p, &ff_up); |
9d51e801 | 906 | goto out; |
1da177e4 LT |
907 | |
908 | case UI_BEGIN_FF_ERASE: | |
909 | if (copy_from_user(&ff_erase, p, sizeof(ff_erase))) { | |
910 | retval = -EFAULT; | |
9d51e801 | 911 | goto out; |
1da177e4 | 912 | } |
2d56f3a3 | 913 | |
1da177e4 | 914 | req = uinput_request_find(udev, ff_erase.request_id); |
2d56f3a3 | 915 | if (!req || req->code != UI_FF_ERASE) { |
1da177e4 | 916 | retval = -EINVAL; |
9d51e801 | 917 | goto out; |
1da177e4 | 918 | } |
2d56f3a3 | 919 | |
1da177e4 LT |
920 | ff_erase.retval = 0; |
921 | ff_erase.effect_id = req->u.effect_id; | |
922 | if (copy_to_user(p, &ff_erase, sizeof(ff_erase))) { | |
923 | retval = -EFAULT; | |
9d51e801 | 924 | goto out; |
1da177e4 | 925 | } |
2d56f3a3 | 926 | |
9d51e801 | 927 | goto out; |
1da177e4 LT |
928 | |
929 | case UI_END_FF_UPLOAD: | |
2d56f3a3 PL |
930 | retval = uinput_ff_upload_from_user(p, &ff_up); |
931 | if (retval) | |
9d51e801 | 932 | goto out; |
2d56f3a3 | 933 | |
1da177e4 | 934 | req = uinput_request_find(udev, ff_up.request_id); |
2d56f3a3 PL |
935 | if (!req || req->code != UI_FF_UPLOAD || |
936 | !req->u.upload.effect) { | |
1da177e4 | 937 | retval = -EINVAL; |
9d51e801 | 938 | goto out; |
1da177e4 | 939 | } |
2d56f3a3 | 940 | |
1da177e4 | 941 | req->retval = ff_up.retval; |
0048e603 | 942 | uinput_request_done(udev, req); |
9d51e801 | 943 | goto out; |
1da177e4 LT |
944 | |
945 | case UI_END_FF_ERASE: | |
946 | if (copy_from_user(&ff_erase, p, sizeof(ff_erase))) { | |
947 | retval = -EFAULT; | |
9d51e801 | 948 | goto out; |
1da177e4 | 949 | } |
2d56f3a3 | 950 | |
1da177e4 | 951 | req = uinput_request_find(udev, ff_erase.request_id); |
2d56f3a3 | 952 | if (!req || req->code != UI_FF_ERASE) { |
1da177e4 | 953 | retval = -EINVAL; |
9d51e801 | 954 | goto out; |
1da177e4 | 955 | } |
2d56f3a3 | 956 | |
1da177e4 | 957 | req->retval = ff_erase.retval; |
0048e603 | 958 | uinput_request_done(udev, req); |
9d51e801 | 959 | goto out; |
1da177e4 | 960 | } |
29506415 | 961 | |
e3480a61 BT |
962 | size = _IOC_SIZE(cmd); |
963 | ||
964 | /* Now check variable-length commands */ | |
965 | switch (cmd & ~IOCSIZE_MASK) { | |
966 | case UI_GET_SYSNAME(0): | |
967 | if (udev->state != UIST_CREATED) { | |
968 | retval = -ENOENT; | |
969 | goto out; | |
970 | } | |
971 | name = dev_name(&udev->dev->dev); | |
972 | retval = uinput_str_to_user(p, name, size); | |
973 | goto out; | |
052876f8 BT |
974 | |
975 | case UI_ABS_SETUP & ~IOCSIZE_MASK: | |
976 | retval = uinput_abs_setup(udev, p, size); | |
977 | goto out; | |
e3480a61 BT |
978 | } |
979 | ||
9d51e801 | 980 | retval = -EINVAL; |
29506415 | 981 | out: |
221979aa | 982 | mutex_unlock(&udev->mutex); |
1da177e4 LT |
983 | return retval; |
984 | } | |
985 | ||
2d56f3a3 PL |
986 | static long uinput_ioctl(struct file *file, unsigned int cmd, unsigned long arg) |
987 | { | |
988 | return uinput_ioctl_handler(file, cmd, arg, (void __user *)arg); | |
989 | } | |
990 | ||
991 | #ifdef CONFIG_COMPAT | |
affa80bd RL |
992 | |
993 | #define UI_SET_PHYS_COMPAT _IOW(UINPUT_IOCTL_BASE, 108, compat_uptr_t) | |
994 | ||
54ce165e DT |
995 | static long uinput_compat_ioctl(struct file *file, |
996 | unsigned int cmd, unsigned long arg) | |
2d56f3a3 | 997 | { |
affa80bd RL |
998 | if (cmd == UI_SET_PHYS_COMPAT) |
999 | cmd = UI_SET_PHYS; | |
1000 | ||
2d56f3a3 PL |
1001 | return uinput_ioctl_handler(file, cmd, arg, compat_ptr(arg)); |
1002 | } | |
1003 | #endif | |
1004 | ||
2b8693c0 | 1005 | static const struct file_operations uinput_fops = { |
29506415 DT |
1006 | .owner = THIS_MODULE, |
1007 | .open = uinput_open, | |
1008 | .release = uinput_release, | |
1009 | .read = uinput_read, | |
1010 | .write = uinput_write, | |
1011 | .poll = uinput_poll, | |
1012 | .unlocked_ioctl = uinput_ioctl, | |
2d56f3a3 PL |
1013 | #ifdef CONFIG_COMPAT |
1014 | .compat_ioctl = uinput_compat_ioctl, | |
1015 | #endif | |
6038f373 | 1016 | .llseek = no_llseek, |
1da177e4 LT |
1017 | }; |
1018 | ||
1019 | static struct miscdevice uinput_misc = { | |
29506415 DT |
1020 | .fops = &uinput_fops, |
1021 | .minor = UINPUT_MINOR, | |
1022 | .name = UINPUT_NAME, | |
1da177e4 | 1023 | }; |
ca75d601 PM |
1024 | module_misc_device(uinput_misc); |
1025 | ||
8905aaaf KS |
1026 | MODULE_ALIAS_MISCDEV(UINPUT_MINOR); |
1027 | MODULE_ALIAS("devname:" UINPUT_NAME); | |
1da177e4 | 1028 | |
1da177e4 LT |
1029 | MODULE_AUTHOR("Aristeu Sergio Rozanski Filho"); |
1030 | MODULE_DESCRIPTION("User level driver support for input subsystem"); | |
1031 | MODULE_LICENSE("GPL"); | |
ff462551 | 1032 | MODULE_VERSION("0.3"); |