]> git.proxmox.com Git - mirror_ubuntu-artful-kernel.git/blob - drivers/hid/hidraw.c
Merge commit 'v2.6.37-rc7' into x86/security
[mirror_ubuntu-artful-kernel.git] / drivers / hid / hidraw.c
1 /*
2 * HID raw devices, giving access to raw HID events.
3 *
4 * In comparison to hiddev, this device does not process the
5 * hid events at all (no parsing, no lookups). This lets applications
6 * to work on raw hid events as they want to, and avoids a need to
7 * use a transport-specific userspace libhid/libusb libraries.
8 *
9 * Copyright (c) 2007 Jiri Kosina
10 */
11
12 /*
13 * This program is free software; you can redistribute it and/or modify it
14 * under the terms and conditions of the GNU General Public License,
15 * version 2, as published by the Free Software Foundation.
16 *
17 * You should have received a copy of the GNU General Public License along with
18 * this program; if not, write to the Free Software Foundation, Inc.,
19 * 51 Franklin St - Fifth Floor, Boston, MA 02110-1301 USA.
20 */
21
22 #include <linux/fs.h>
23 #include <linux/module.h>
24 #include <linux/errno.h>
25 #include <linux/kernel.h>
26 #include <linux/init.h>
27 #include <linux/cdev.h>
28 #include <linux/poll.h>
29 #include <linux/device.h>
30 #include <linux/major.h>
31 #include <linux/slab.h>
32 #include <linux/hid.h>
33 #include <linux/mutex.h>
34 #include <linux/sched.h>
35
36 #include <linux/hidraw.h>
37
38 static int hidraw_major;
39 static struct cdev hidraw_cdev;
40 static struct class *hidraw_class;
41 static struct hidraw *hidraw_table[HIDRAW_MAX_DEVICES];
42 static DEFINE_MUTEX(minors_lock);
43
44 static ssize_t hidraw_read(struct file *file, char __user *buffer, size_t count, loff_t *ppos)
45 {
46 struct hidraw_list *list = file->private_data;
47 int ret = 0, len;
48 DECLARE_WAITQUEUE(wait, current);
49
50 mutex_lock(&list->read_mutex);
51
52 while (ret == 0) {
53 if (list->head == list->tail) {
54 add_wait_queue(&list->hidraw->wait, &wait);
55 set_current_state(TASK_INTERRUPTIBLE);
56
57 while (list->head == list->tail) {
58 if (file->f_flags & O_NONBLOCK) {
59 ret = -EAGAIN;
60 break;
61 }
62 if (signal_pending(current)) {
63 ret = -ERESTARTSYS;
64 break;
65 }
66 if (!list->hidraw->exist) {
67 ret = -EIO;
68 break;
69 }
70
71 /* allow O_NONBLOCK to work well from other threads */
72 mutex_unlock(&list->read_mutex);
73 schedule();
74 mutex_lock(&list->read_mutex);
75 set_current_state(TASK_INTERRUPTIBLE);
76 }
77
78 set_current_state(TASK_RUNNING);
79 remove_wait_queue(&list->hidraw->wait, &wait);
80 }
81
82 if (ret)
83 goto out;
84
85 len = list->buffer[list->tail].len > count ?
86 count : list->buffer[list->tail].len;
87
88 if (copy_to_user(buffer, list->buffer[list->tail].value, len)) {
89 ret = -EFAULT;
90 goto out;
91 }
92 ret += len;
93
94 kfree(list->buffer[list->tail].value);
95 list->tail = (list->tail + 1) & (HIDRAW_BUFFER_SIZE - 1);
96 }
97 out:
98 mutex_unlock(&list->read_mutex);
99 return ret;
100 }
101
102 /* the first byte is expected to be a report number */
103 static ssize_t hidraw_write(struct file *file, const char __user *buffer, size_t count, loff_t *ppos)
104 {
105 unsigned int minor = iminor(file->f_path.dentry->d_inode);
106 struct hid_device *dev;
107 __u8 *buf;
108 int ret = 0;
109
110 mutex_lock(&minors_lock);
111
112 if (!hidraw_table[minor]) {
113 ret = -ENODEV;
114 goto out;
115 }
116
117 dev = hidraw_table[minor]->hid;
118
119 if (!dev->hid_output_raw_report) {
120 ret = -ENODEV;
121 goto out;
122 }
123
124 if (count > HID_MAX_BUFFER_SIZE) {
125 printk(KERN_WARNING "hidraw: pid %d passed too large report\n",
126 task_pid_nr(current));
127 ret = -EINVAL;
128 goto out;
129 }
130
131 if (count < 2) {
132 printk(KERN_WARNING "hidraw: pid %d passed too short report\n",
133 task_pid_nr(current));
134 ret = -EINVAL;
135 goto out;
136 }
137
138 buf = kmalloc(count * sizeof(__u8), GFP_KERNEL);
139 if (!buf) {
140 ret = -ENOMEM;
141 goto out;
142 }
143
144 if (copy_from_user(buf, buffer, count)) {
145 ret = -EFAULT;
146 goto out_free;
147 }
148
149 ret = dev->hid_output_raw_report(dev, buf, count, HID_OUTPUT_REPORT);
150 out_free:
151 kfree(buf);
152 out:
153 mutex_unlock(&minors_lock);
154 return ret;
155 }
156
157 static unsigned int hidraw_poll(struct file *file, poll_table *wait)
158 {
159 struct hidraw_list *list = file->private_data;
160
161 poll_wait(file, &list->hidraw->wait, wait);
162 if (list->head != list->tail)
163 return POLLIN | POLLRDNORM;
164 if (!list->hidraw->exist)
165 return POLLERR | POLLHUP;
166 return 0;
167 }
168
169 static int hidraw_open(struct inode *inode, struct file *file)
170 {
171 unsigned int minor = iminor(inode);
172 struct hidraw *dev;
173 struct hidraw_list *list;
174 int err = 0;
175
176 if (!(list = kzalloc(sizeof(struct hidraw_list), GFP_KERNEL))) {
177 err = -ENOMEM;
178 goto out;
179 }
180
181 mutex_lock(&minors_lock);
182 if (!hidraw_table[minor]) {
183 kfree(list);
184 err = -ENODEV;
185 goto out_unlock;
186 }
187
188 list->hidraw = hidraw_table[minor];
189 mutex_init(&list->read_mutex);
190 list_add_tail(&list->node, &hidraw_table[minor]->list);
191 file->private_data = list;
192
193 dev = hidraw_table[minor];
194 if (!dev->open++) {
195 if (dev->hid->ll_driver->power) {
196 err = dev->hid->ll_driver->power(dev->hid, PM_HINT_FULLON);
197 if (err < 0)
198 goto out_unlock;
199 }
200 err = dev->hid->ll_driver->open(dev->hid);
201 if (err < 0) {
202 if (dev->hid->ll_driver->power)
203 dev->hid->ll_driver->power(dev->hid, PM_HINT_NORMAL);
204 dev->open--;
205 }
206 }
207
208 out_unlock:
209 mutex_unlock(&minors_lock);
210 out:
211 return err;
212
213 }
214
215 static int hidraw_release(struct inode * inode, struct file * file)
216 {
217 unsigned int minor = iminor(inode);
218 struct hidraw *dev;
219 struct hidraw_list *list = file->private_data;
220 int ret;
221
222 mutex_lock(&minors_lock);
223 if (!hidraw_table[minor]) {
224 ret = -ENODEV;
225 goto unlock;
226 }
227
228 list_del(&list->node);
229 dev = hidraw_table[minor];
230 if (!--dev->open) {
231 if (list->hidraw->exist) {
232 if (dev->hid->ll_driver->power)
233 dev->hid->ll_driver->power(dev->hid, PM_HINT_NORMAL);
234 dev->hid->ll_driver->close(dev->hid);
235 } else {
236 kfree(list->hidraw);
237 }
238 }
239 kfree(list);
240 ret = 0;
241 unlock:
242 mutex_unlock(&minors_lock);
243
244 return ret;
245 }
246
247 static long hidraw_ioctl(struct file *file, unsigned int cmd,
248 unsigned long arg)
249 {
250 struct inode *inode = file->f_path.dentry->d_inode;
251 unsigned int minor = iminor(inode);
252 long ret = 0;
253 struct hidraw *dev;
254 void __user *user_arg = (void __user*) arg;
255
256 mutex_lock(&minors_lock);
257 dev = hidraw_table[minor];
258 if (!dev) {
259 ret = -ENODEV;
260 goto out;
261 }
262
263 switch (cmd) {
264 case HIDIOCGRDESCSIZE:
265 if (put_user(dev->hid->rsize, (int __user *)arg))
266 ret = -EFAULT;
267 break;
268
269 case HIDIOCGRDESC:
270 {
271 __u32 len;
272
273 if (get_user(len, (int __user *)arg))
274 ret = -EFAULT;
275 else if (len > HID_MAX_DESCRIPTOR_SIZE - 1)
276 ret = -EINVAL;
277 else if (copy_to_user(user_arg + offsetof(
278 struct hidraw_report_descriptor,
279 value[0]),
280 dev->hid->rdesc,
281 min(dev->hid->rsize, len)))
282 ret = -EFAULT;
283 break;
284 }
285 case HIDIOCGRAWINFO:
286 {
287 struct hidraw_devinfo dinfo;
288
289 dinfo.bustype = dev->hid->bus;
290 dinfo.vendor = dev->hid->vendor;
291 dinfo.product = dev->hid->product;
292 if (copy_to_user(user_arg, &dinfo, sizeof(dinfo)))
293 ret = -EFAULT;
294 break;
295 }
296 default:
297 {
298 struct hid_device *hid = dev->hid;
299 if (_IOC_TYPE(cmd) != 'H' || _IOC_DIR(cmd) != _IOC_READ) {
300 ret = -EINVAL;
301 break;
302 }
303
304 if (_IOC_NR(cmd) == _IOC_NR(HIDIOCGRAWNAME(0))) {
305 int len;
306 if (!hid->name) {
307 ret = 0;
308 break;
309 }
310 len = strlen(hid->name) + 1;
311 if (len > _IOC_SIZE(cmd))
312 len = _IOC_SIZE(cmd);
313 ret = copy_to_user(user_arg, hid->name, len) ?
314 -EFAULT : len;
315 break;
316 }
317
318 if (_IOC_NR(cmd) == _IOC_NR(HIDIOCGRAWPHYS(0))) {
319 int len;
320 if (!hid->phys) {
321 ret = 0;
322 break;
323 }
324 len = strlen(hid->phys) + 1;
325 if (len > _IOC_SIZE(cmd))
326 len = _IOC_SIZE(cmd);
327 ret = copy_to_user(user_arg, hid->phys, len) ?
328 -EFAULT : len;
329 break;
330 }
331 }
332
333 ret = -ENOTTY;
334 }
335 out:
336 mutex_unlock(&minors_lock);
337 return ret;
338 }
339
340 static const struct file_operations hidraw_ops = {
341 .owner = THIS_MODULE,
342 .read = hidraw_read,
343 .write = hidraw_write,
344 .poll = hidraw_poll,
345 .open = hidraw_open,
346 .release = hidraw_release,
347 .unlocked_ioctl = hidraw_ioctl,
348 .llseek = noop_llseek,
349 };
350
351 void hidraw_report_event(struct hid_device *hid, u8 *data, int len)
352 {
353 struct hidraw *dev = hid->hidraw;
354 struct hidraw_list *list;
355
356 list_for_each_entry(list, &dev->list, node) {
357 list->buffer[list->head].value = kmemdup(data, len, GFP_ATOMIC);
358 list->buffer[list->head].len = len;
359 list->head = (list->head + 1) & (HIDRAW_BUFFER_SIZE - 1);
360 kill_fasync(&list->fasync, SIGIO, POLL_IN);
361 }
362
363 wake_up_interruptible(&dev->wait);
364 }
365 EXPORT_SYMBOL_GPL(hidraw_report_event);
366
367 int hidraw_connect(struct hid_device *hid)
368 {
369 int minor, result;
370 struct hidraw *dev;
371
372 /* we accept any HID device, no matter the applications */
373
374 dev = kzalloc(sizeof(struct hidraw), GFP_KERNEL);
375 if (!dev)
376 return -ENOMEM;
377
378 result = -EINVAL;
379
380 mutex_lock(&minors_lock);
381
382 for (minor = 0; minor < HIDRAW_MAX_DEVICES; minor++) {
383 if (hidraw_table[minor])
384 continue;
385 hidraw_table[minor] = dev;
386 result = 0;
387 break;
388 }
389
390 if (result) {
391 mutex_unlock(&minors_lock);
392 kfree(dev);
393 goto out;
394 }
395
396 dev->dev = device_create(hidraw_class, &hid->dev, MKDEV(hidraw_major, minor),
397 NULL, "%s%d", "hidraw", minor);
398
399 if (IS_ERR(dev->dev)) {
400 hidraw_table[minor] = NULL;
401 mutex_unlock(&minors_lock);
402 result = PTR_ERR(dev->dev);
403 kfree(dev);
404 goto out;
405 }
406
407 mutex_unlock(&minors_lock);
408 init_waitqueue_head(&dev->wait);
409 INIT_LIST_HEAD(&dev->list);
410
411 dev->hid = hid;
412 dev->minor = minor;
413
414 dev->exist = 1;
415 hid->hidraw = dev;
416
417 out:
418 return result;
419
420 }
421 EXPORT_SYMBOL_GPL(hidraw_connect);
422
423 void hidraw_disconnect(struct hid_device *hid)
424 {
425 struct hidraw *hidraw = hid->hidraw;
426
427 hidraw->exist = 0;
428
429 mutex_lock(&minors_lock);
430 hidraw_table[hidraw->minor] = NULL;
431 mutex_unlock(&minors_lock);
432
433 device_destroy(hidraw_class, MKDEV(hidraw_major, hidraw->minor));
434
435 if (hidraw->open) {
436 hid->ll_driver->close(hid);
437 wake_up_interruptible(&hidraw->wait);
438 } else {
439 kfree(hidraw);
440 }
441 }
442 EXPORT_SYMBOL_GPL(hidraw_disconnect);
443
444 int __init hidraw_init(void)
445 {
446 int result;
447 dev_t dev_id;
448
449 result = alloc_chrdev_region(&dev_id, HIDRAW_FIRST_MINOR,
450 HIDRAW_MAX_DEVICES, "hidraw");
451
452 hidraw_major = MAJOR(dev_id);
453
454 if (result < 0) {
455 printk(KERN_WARNING "hidraw: can't get major number\n");
456 result = 0;
457 goto out;
458 }
459
460 hidraw_class = class_create(THIS_MODULE, "hidraw");
461 if (IS_ERR(hidraw_class)) {
462 result = PTR_ERR(hidraw_class);
463 unregister_chrdev(hidraw_major, "hidraw");
464 goto out;
465 }
466
467 cdev_init(&hidraw_cdev, &hidraw_ops);
468 cdev_add(&hidraw_cdev, dev_id, HIDRAW_MAX_DEVICES);
469 out:
470 return result;
471 }
472
473 void hidraw_exit(void)
474 {
475 dev_t dev_id = MKDEV(hidraw_major, 0);
476
477 cdev_del(&hidraw_cdev);
478 class_destroy(hidraw_class);
479 unregister_chrdev_region(dev_id, HIDRAW_MAX_DEVICES);
480
481 }