Commit | Line | Data |
---|---|---|
1da177e4 LT |
1 | /* |
2 | * User level driver support for input subsystem | |
3 | * | |
4 | * Heavily based on evdev.c by Vojtech Pavlik | |
5 | * | |
6 | * This program is free software; you can redistribute it and/or modify | |
7 | * it under the terms of the GNU General Public License as published by | |
8 | * the Free Software Foundation; either version 2 of the License, or | |
9 | * (at your option) any later version. | |
10 | * | |
11 | * This program is distributed in the hope that it will be useful, | |
12 | * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
13 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
14 | * GNU General Public License for more details. | |
15 | * | |
16 | * You should have received a copy of the GNU General Public License | |
17 | * along with this program; if not, write to the Free Software | |
18 | * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA | |
19 | * | |
20 | * Author: Aristeu Sergio Rozanski Filho <aris@cathedrallabs.org> | |
21 | * | |
22 | * Changes/Revisions: | |
ff462551 AH |
23 | * 0.3 09/04/2006 (Anssi Hannula <anssi.hannula@gmail.com>) |
24 | * - updated ff support for the changes in kernel interface | |
25 | * - added MODULE_VERSION | |
1da177e4 LT |
26 | * 0.2 16/10/2004 (Micah Dowty <micah@navi.cx>) |
27 | * - added force feedback support | |
28 | * - added UI_SET_PHYS | |
29 | * 0.1 20/06/2002 | |
30 | * - first public version | |
31 | */ | |
32 | #include <linux/poll.h> | |
a99bbaf5 | 33 | #include <linux/sched.h> |
1da177e4 LT |
34 | #include <linux/slab.h> |
35 | #include <linux/module.h> | |
36 | #include <linux/init.h> | |
1da177e4 LT |
37 | #include <linux/fs.h> |
38 | #include <linux/miscdevice.h> | |
39 | #include <linux/uinput.h> | |
2d56f3a3 | 40 | #include "../input-compat.h" |
1da177e4 | 41 | |
1da177e4 LT |
42 | static int uinput_dev_event(struct input_dev *dev, unsigned int type, unsigned int code, int value) |
43 | { | |
373f9713 | 44 | struct uinput_device *udev = input_get_drvdata(dev); |
1da177e4 LT |
45 | |
46 | udev->buff[udev->head].type = type; | |
47 | udev->buff[udev->head].code = code; | |
48 | udev->buff[udev->head].value = value; | |
49 | do_gettimeofday(&udev->buff[udev->head].time); | |
50 | udev->head = (udev->head + 1) % UINPUT_BUFFER_SIZE; | |
51 | ||
52 | wake_up_interruptible(&udev->waitq); | |
53 | ||
54 | return 0; | |
55 | } | |
56 | ||
05cebd38 | 57 | /* Atomically allocate an ID for the given request. Returns 0 on success. */ |
0048e603 | 58 | static int uinput_request_alloc_id(struct uinput_device *udev, struct uinput_request *request) |
1da177e4 | 59 | { |
1da177e4 | 60 | int id; |
152c12f5 | 61 | int err = -1; |
1da177e4 | 62 | |
0048e603 | 63 | spin_lock(&udev->requests_lock); |
152c12f5 | 64 | |
05cebd38 | 65 | for (id = 0; id < UINPUT_NUM_REQUESTS; id++) { |
1da177e4 | 66 | if (!udev->requests[id]) { |
1da177e4 | 67 | request->id = id; |
0048e603 | 68 | udev->requests[id] = request; |
152c12f5 DT |
69 | err = 0; |
70 | break; | |
1da177e4 | 71 | } |
05cebd38 | 72 | } |
152c12f5 | 73 | |
0048e603 | 74 | spin_unlock(&udev->requests_lock); |
152c12f5 | 75 | return err; |
1da177e4 LT |
76 | } |
77 | ||
05cebd38 | 78 | static struct uinput_request *uinput_request_find(struct uinput_device *udev, int id) |
1da177e4 LT |
79 | { |
80 | /* Find an input request, by ID. Returns NULL if the ID isn't valid. */ | |
81 | if (id >= UINPUT_NUM_REQUESTS || id < 0) | |
82 | return NULL; | |
2d56f3a3 | 83 | |
1da177e4 LT |
84 | return udev->requests[id]; |
85 | } | |
86 | ||
0048e603 | 87 | static inline int uinput_request_reserve_slot(struct uinput_device *udev, struct uinput_request *request) |
1da177e4 | 88 | { |
0048e603 DT |
89 | /* Allocate slot. If none are available right away, wait. */ |
90 | return wait_event_interruptible(udev->requests_waitq, | |
91 | !uinput_request_alloc_id(udev, request)); | |
92 | } | |
1da177e4 | 93 | |
0048e603 DT |
94 | static void uinput_request_done(struct uinput_device *udev, struct uinput_request *request) |
95 | { | |
0048e603 DT |
96 | /* Mark slot as available */ |
97 | udev->requests[request->id] = NULL; | |
e597f0c8 | 98 | wake_up(&udev->requests_waitq); |
e7507ed9 DT |
99 | |
100 | complete(&request->done); | |
1da177e4 LT |
101 | } |
102 | ||
05cebd38 | 103 | static int uinput_request_submit(struct uinput_device *udev, struct uinput_request *request) |
1da177e4 | 104 | { |
05cebd38 ASRF |
105 | int retval; |
106 | ||
107 | retval = uinput_request_reserve_slot(udev, request); | |
108 | if (retval) | |
109 | return retval; | |
110 | ||
111 | retval = mutex_lock_interruptible(&udev->mutex); | |
112 | if (retval) | |
113 | return retval; | |
114 | ||
115 | if (udev->state != UIST_CREATED) { | |
116 | retval = -ENODEV; | |
117 | goto out; | |
118 | } | |
119 | ||
1da177e4 | 120 | /* Tell our userspace app about this new request by queueing an input event */ |
05cebd38 ASRF |
121 | uinput_dev_event(udev->dev, EV_UINPUT, request->code, request->id); |
122 | ||
123 | out: | |
124 | mutex_unlock(&udev->mutex); | |
125 | return retval; | |
126 | } | |
127 | ||
128 | /* | |
129 | * Fail all ouitstanding requests so handlers don't wait for the userspace | |
130 | * to finish processing them. | |
131 | */ | |
132 | static void uinput_flush_requests(struct uinput_device *udev) | |
133 | { | |
134 | struct uinput_request *request; | |
135 | int i; | |
1da177e4 | 136 | |
05cebd38 ASRF |
137 | spin_lock(&udev->requests_lock); |
138 | ||
139 | for (i = 0; i < UINPUT_NUM_REQUESTS; i++) { | |
140 | request = udev->requests[i]; | |
141 | if (request) { | |
142 | request->retval = -ENODEV; | |
143 | uinput_request_done(udev, request); | |
144 | } | |
145 | } | |
146 | ||
147 | spin_unlock(&udev->requests_lock); | |
1da177e4 LT |
148 | } |
149 | ||
ff462551 AH |
150 | static void uinput_dev_set_gain(struct input_dev *dev, u16 gain) |
151 | { | |
152 | uinput_dev_event(dev, EV_FF, FF_GAIN, gain); | |
153 | } | |
154 | ||
155 | static void uinput_dev_set_autocenter(struct input_dev *dev, u16 magnitude) | |
156 | { | |
157 | uinput_dev_event(dev, EV_FF, FF_AUTOCENTER, magnitude); | |
158 | } | |
159 | ||
160 | static int uinput_dev_playback(struct input_dev *dev, int effect_id, int value) | |
161 | { | |
162 | return uinput_dev_event(dev, EV_FF, effect_id, value); | |
163 | } | |
164 | ||
165 | static int uinput_dev_upload_effect(struct input_dev *dev, struct ff_effect *effect, struct ff_effect *old) | |
1da177e4 | 166 | { |
05cebd38 | 167 | struct uinput_device *udev = input_get_drvdata(dev); |
1da177e4 | 168 | struct uinput_request request; |
0048e603 | 169 | int retval; |
1da177e4 | 170 | |
2d56f3a3 PL |
171 | /* |
172 | * uinput driver does not currently support periodic effects with | |
173 | * custom waveform since it does not have a way to pass buffer of | |
174 | * samples (custom_data) to userspace. If ever there is a device | |
175 | * supporting custom waveforms we would need to define an additional | |
176 | * ioctl (UI_UPLOAD_SAMPLES) but for now we just bail out. | |
177 | */ | |
178 | if (effect->type == FF_PERIODIC && | |
179 | effect->u.periodic.waveform == FF_CUSTOM) | |
180 | return -EINVAL; | |
181 | ||
0048e603 DT |
182 | request.id = -1; |
183 | init_completion(&request.done); | |
184 | request.code = UI_FF_UPLOAD; | |
ff462551 AH |
185 | request.u.upload.effect = effect; |
186 | request.u.upload.old = old; | |
0048e603 | 187 | |
05cebd38 ASRF |
188 | retval = uinput_request_submit(udev, &request); |
189 | if (!retval) { | |
190 | wait_for_completion(&request.done); | |
191 | retval = request.retval; | |
192 | } | |
0048e603 DT |
193 | |
194 | return retval; | |
1da177e4 LT |
195 | } |
196 | ||
197 | static int uinput_dev_erase_effect(struct input_dev *dev, int effect_id) | |
198 | { | |
05cebd38 | 199 | struct uinput_device *udev = input_get_drvdata(dev); |
1da177e4 | 200 | struct uinput_request request; |
0048e603 | 201 | int retval; |
1da177e4 LT |
202 | |
203 | if (!test_bit(EV_FF, dev->evbit)) | |
204 | return -ENOSYS; | |
205 | ||
0048e603 DT |
206 | request.id = -1; |
207 | init_completion(&request.done); | |
208 | request.code = UI_FF_ERASE; | |
1da177e4 | 209 | request.u.effect_id = effect_id; |
0048e603 | 210 | |
05cebd38 ASRF |
211 | retval = uinput_request_submit(udev, &request); |
212 | if (!retval) { | |
213 | wait_for_completion(&request.done); | |
214 | retval = request.retval; | |
215 | } | |
0048e603 DT |
216 | |
217 | return retval; | |
1da177e4 LT |
218 | } |
219 | ||
29506415 | 220 | static void uinput_destroy_device(struct uinput_device *udev) |
1da177e4 | 221 | { |
29506415 | 222 | const char *name, *phys; |
05cebd38 ASRF |
223 | struct input_dev *dev = udev->dev; |
224 | enum uinput_state old_state = udev->state; | |
225 | ||
226 | udev->state = UIST_NEW_DEVICE; | |
29506415 | 227 | |
05cebd38 ASRF |
228 | if (dev) { |
229 | name = dev->name; | |
230 | phys = dev->phys; | |
231 | if (old_state == UIST_CREATED) { | |
232 | uinput_flush_requests(udev); | |
233 | input_unregister_device(dev); | |
234 | } else { | |
235 | input_free_device(dev); | |
236 | } | |
29506415 DT |
237 | kfree(name); |
238 | kfree(phys); | |
239 | udev->dev = NULL; | |
1da177e4 | 240 | } |
1da177e4 LT |
241 | } |
242 | ||
29506415 | 243 | static int uinput_create_device(struct uinput_device *udev) |
1da177e4 | 244 | { |
ff462551 | 245 | struct input_dev *dev = udev->dev; |
29506415 DT |
246 | int error; |
247 | ||
248 | if (udev->state != UIST_SETUP_COMPLETE) { | |
249 | printk(KERN_DEBUG "%s: write device info first\n", UINPUT_NAME); | |
1da177e4 LT |
250 | return -EINVAL; |
251 | } | |
252 | ||
ff462551 AH |
253 | if (udev->ff_effects_max) { |
254 | error = input_ff_create(dev, udev->ff_effects_max); | |
255 | if (error) | |
256 | goto fail1; | |
257 | ||
258 | dev->ff->upload = uinput_dev_upload_effect; | |
259 | dev->ff->erase = uinput_dev_erase_effect; | |
260 | dev->ff->playback = uinput_dev_playback; | |
261 | dev->ff->set_gain = uinput_dev_set_gain; | |
262 | dev->ff->set_autocenter = uinput_dev_set_autocenter; | |
29506415 | 263 | } |
1da177e4 | 264 | |
ff462551 AH |
265 | error = input_register_device(udev->dev); |
266 | if (error) | |
267 | goto fail2; | |
268 | ||
29506415 | 269 | udev->state = UIST_CREATED; |
1da177e4 LT |
270 | |
271 | return 0; | |
ff462551 AH |
272 | |
273 | fail2: input_ff_destroy(dev); | |
274 | fail1: uinput_destroy_device(udev); | |
275 | return error; | |
1da177e4 LT |
276 | } |
277 | ||
278 | static int uinput_open(struct inode *inode, struct file *file) | |
279 | { | |
29506415 | 280 | struct uinput_device *newdev; |
1da177e4 | 281 | |
29506415 | 282 | newdev = kzalloc(sizeof(struct uinput_device), GFP_KERNEL); |
1da177e4 | 283 | if (!newdev) |
29506415 DT |
284 | return -ENOMEM; |
285 | ||
221979aa | 286 | mutex_init(&newdev->mutex); |
0048e603 | 287 | spin_lock_init(&newdev->requests_lock); |
1da177e4 | 288 | init_waitqueue_head(&newdev->requests_waitq); |
29506415 DT |
289 | init_waitqueue_head(&newdev->waitq); |
290 | newdev->state = UIST_NEW_DEVICE; | |
1da177e4 LT |
291 | |
292 | file->private_data = newdev; | |
293 | ||
294 | return 0; | |
1da177e4 LT |
295 | } |
296 | ||
297 | static int uinput_validate_absbits(struct input_dev *dev) | |
298 | { | |
299 | unsigned int cnt; | |
300 | int retval = 0; | |
301 | ||
302 | for (cnt = 0; cnt < ABS_MAX + 1; cnt++) { | |
303 | if (!test_bit(cnt, dev->absbit)) | |
304 | continue; | |
305 | ||
306 | if ((dev->absmax[cnt] <= dev->absmin[cnt])) { | |
307 | printk(KERN_DEBUG | |
308 | "%s: invalid abs[%02x] min:%d max:%d\n", | |
309 | UINPUT_NAME, cnt, | |
310 | dev->absmin[cnt], dev->absmax[cnt]); | |
311 | retval = -EINVAL; | |
312 | break; | |
313 | } | |
314 | ||
315 | if (dev->absflat[cnt] > (dev->absmax[cnt] - dev->absmin[cnt])) { | |
316 | printk(KERN_DEBUG | |
317 | "%s: absflat[%02x] out of range: %d " | |
318 | "(min:%d/max:%d)\n", | |
319 | UINPUT_NAME, cnt, dev->absflat[cnt], | |
320 | dev->absmin[cnt], dev->absmax[cnt]); | |
321 | retval = -EINVAL; | |
322 | break; | |
323 | } | |
324 | } | |
325 | return retval; | |
326 | } | |
327 | ||
29506415 DT |
328 | static int uinput_allocate_device(struct uinput_device *udev) |
329 | { | |
330 | udev->dev = input_allocate_device(); | |
331 | if (!udev->dev) | |
332 | return -ENOMEM; | |
333 | ||
334 | udev->dev->event = uinput_dev_event; | |
373f9713 | 335 | input_set_drvdata(udev->dev, udev); |
29506415 DT |
336 | |
337 | return 0; | |
338 | } | |
339 | ||
340 | static int uinput_setup_device(struct uinput_device *udev, const char __user *buffer, size_t count) | |
1da177e4 LT |
341 | { |
342 | struct uinput_user_dev *user_dev; | |
343 | struct input_dev *dev; | |
5b6271bd | 344 | char *name; |
152c12f5 DT |
345 | int size; |
346 | int retval; | |
1da177e4 | 347 | |
29506415 DT |
348 | if (count != sizeof(struct uinput_user_dev)) |
349 | return -EINVAL; | |
350 | ||
351 | if (!udev->dev) { | |
352 | retval = uinput_allocate_device(udev); | |
353 | if (retval) | |
354 | return retval; | |
355 | } | |
1da177e4 | 356 | |
1da177e4 LT |
357 | dev = udev->dev; |
358 | ||
152c12f5 | 359 | user_dev = kmalloc(sizeof(struct uinput_user_dev), GFP_KERNEL); |
29506415 DT |
360 | if (!user_dev) |
361 | return -ENOMEM; | |
1da177e4 LT |
362 | |
363 | if (copy_from_user(user_dev, buffer, sizeof(struct uinput_user_dev))) { | |
364 | retval = -EFAULT; | |
365 | goto exit; | |
366 | } | |
367 | ||
ff462551 AH |
368 | udev->ff_effects_max = user_dev->ff_effects_max; |
369 | ||
1da177e4 | 370 | size = strnlen(user_dev->name, UINPUT_MAX_NAME_SIZE) + 1; |
29506415 DT |
371 | if (!size) { |
372 | retval = -EINVAL; | |
373 | goto exit; | |
374 | } | |
375 | ||
376 | kfree(dev->name); | |
5b6271bd DT |
377 | dev->name = name = kmalloc(size, GFP_KERNEL); |
378 | if (!name) { | |
1da177e4 LT |
379 | retval = -ENOMEM; |
380 | goto exit; | |
381 | } | |
5b6271bd | 382 | strlcpy(name, user_dev->name, size); |
1da177e4 | 383 | |
1da177e4 LT |
384 | dev->id.bustype = user_dev->id.bustype; |
385 | dev->id.vendor = user_dev->id.vendor; | |
386 | dev->id.product = user_dev->id.product; | |
387 | dev->id.version = user_dev->id.version; | |
1da177e4 LT |
388 | |
389 | size = sizeof(int) * (ABS_MAX + 1); | |
390 | memcpy(dev->absmax, user_dev->absmax, size); | |
391 | memcpy(dev->absmin, user_dev->absmin, size); | |
392 | memcpy(dev->absfuzz, user_dev->absfuzz, size); | |
393 | memcpy(dev->absflat, user_dev->absflat, size); | |
394 | ||
395 | /* check if absmin/absmax/absfuzz/absflat are filled as | |
396 | * told in Documentation/input/input-programming.txt */ | |
397 | if (test_bit(EV_ABS, dev->evbit)) { | |
29506415 DT |
398 | retval = uinput_validate_absbits(dev); |
399 | if (retval < 0) | |
400 | goto exit; | |
1da177e4 LT |
401 | } |
402 | ||
29506415 DT |
403 | udev->state = UIST_SETUP_COMPLETE; |
404 | retval = count; | |
405 | ||
406 | exit: | |
1da177e4 LT |
407 | kfree(user_dev); |
408 | return retval; | |
409 | } | |
410 | ||
29506415 DT |
411 | static inline ssize_t uinput_inject_event(struct uinput_device *udev, const char __user *buffer, size_t count) |
412 | { | |
413 | struct input_event ev; | |
414 | ||
2d56f3a3 | 415 | if (count < input_event_size()) |
29506415 DT |
416 | return -EINVAL; |
417 | ||
2d56f3a3 | 418 | if (input_event_from_user(buffer, &ev)) |
29506415 DT |
419 | return -EFAULT; |
420 | ||
421 | input_event(udev->dev, ev.type, ev.code, ev.value); | |
422 | ||
2d56f3a3 | 423 | return input_event_size(); |
29506415 DT |
424 | } |
425 | ||
1da177e4 LT |
426 | static ssize_t uinput_write(struct file *file, const char __user *buffer, size_t count, loff_t *ppos) |
427 | { | |
428 | struct uinput_device *udev = file->private_data; | |
29506415 | 429 | int retval; |
1da177e4 | 430 | |
221979aa | 431 | retval = mutex_lock_interruptible(&udev->mutex); |
29506415 DT |
432 | if (retval) |
433 | return retval; | |
434 | ||
435 | retval = udev->state == UIST_CREATED ? | |
436 | uinput_inject_event(udev, buffer, count) : | |
437 | uinput_setup_device(udev, buffer, count); | |
1da177e4 | 438 | |
221979aa | 439 | mutex_unlock(&udev->mutex); |
1da177e4 | 440 | |
29506415 | 441 | return retval; |
1da177e4 LT |
442 | } |
443 | ||
444 | static ssize_t uinput_read(struct file *file, char __user *buffer, size_t count, loff_t *ppos) | |
445 | { | |
446 | struct uinput_device *udev = file->private_data; | |
447 | int retval = 0; | |
448 | ||
29506415 | 449 | if (udev->state != UIST_CREATED) |
1da177e4 LT |
450 | return -ENODEV; |
451 | ||
152c12f5 | 452 | if (udev->head == udev->tail && (file->f_flags & O_NONBLOCK)) |
1da177e4 LT |
453 | return -EAGAIN; |
454 | ||
455 | retval = wait_event_interruptible(udev->waitq, | |
29506415 | 456 | udev->head != udev->tail || udev->state != UIST_CREATED); |
1da177e4 LT |
457 | if (retval) |
458 | return retval; | |
459 | ||
221979aa | 460 | retval = mutex_lock_interruptible(&udev->mutex); |
29506415 DT |
461 | if (retval) |
462 | return retval; | |
463 | ||
464 | if (udev->state != UIST_CREATED) { | |
465 | retval = -ENODEV; | |
466 | goto out; | |
467 | } | |
1da177e4 | 468 | |
2d56f3a3 PL |
469 | while (udev->head != udev->tail && retval + input_event_size() <= count) { |
470 | if (input_event_to_user(buffer + retval, &udev->buff[udev->tail])) { | |
29506415 DT |
471 | retval = -EFAULT; |
472 | goto out; | |
473 | } | |
1da177e4 | 474 | udev->tail = (udev->tail + 1) % UINPUT_BUFFER_SIZE; |
2d56f3a3 | 475 | retval += input_event_size(); |
1da177e4 LT |
476 | } |
477 | ||
29506415 | 478 | out: |
221979aa | 479 | mutex_unlock(&udev->mutex); |
29506415 | 480 | |
1da177e4 LT |
481 | return retval; |
482 | } | |
483 | ||
484 | static unsigned int uinput_poll(struct file *file, poll_table *wait) | |
485 | { | |
486 | struct uinput_device *udev = file->private_data; | |
487 | ||
488 | poll_wait(file, &udev->waitq, wait); | |
489 | ||
490 | if (udev->head != udev->tail) | |
491 | return POLLIN | POLLRDNORM; | |
492 | ||
493 | return 0; | |
494 | } | |
495 | ||
29506415 | 496 | static int uinput_release(struct inode *inode, struct file *file) |
1da177e4 | 497 | { |
29506415 | 498 | struct uinput_device *udev = file->private_data; |
1da177e4 | 499 | |
29506415 | 500 | uinput_destroy_device(udev); |
1da177e4 LT |
501 | kfree(udev); |
502 | ||
503 | return 0; | |
504 | } | |
505 | ||
2d56f3a3 PL |
506 | #ifdef CONFIG_COMPAT |
507 | struct uinput_ff_upload_compat { | |
508 | int request_id; | |
509 | int retval; | |
510 | struct ff_effect_compat effect; | |
511 | struct ff_effect_compat old; | |
512 | }; | |
513 | ||
514 | static int uinput_ff_upload_to_user(char __user *buffer, | |
515 | const struct uinput_ff_upload *ff_up) | |
516 | { | |
517 | if (INPUT_COMPAT_TEST) { | |
518 | struct uinput_ff_upload_compat ff_up_compat; | |
519 | ||
520 | ff_up_compat.request_id = ff_up->request_id; | |
521 | ff_up_compat.retval = ff_up->retval; | |
522 | /* | |
523 | * It so happens that the pointer that gives us the trouble | |
524 | * is the last field in the structure. Since we don't support | |
525 | * custom waveforms in uinput anyway we can just copy the whole | |
526 | * thing (to the compat size) and ignore the pointer. | |
527 | */ | |
528 | memcpy(&ff_up_compat.effect, &ff_up->effect, | |
529 | sizeof(struct ff_effect_compat)); | |
530 | memcpy(&ff_up_compat.old, &ff_up->old, | |
531 | sizeof(struct ff_effect_compat)); | |
532 | ||
533 | if (copy_to_user(buffer, &ff_up_compat, | |
534 | sizeof(struct uinput_ff_upload_compat))) | |
535 | return -EFAULT; | |
536 | } else { | |
537 | if (copy_to_user(buffer, ff_up, | |
538 | sizeof(struct uinput_ff_upload))) | |
539 | return -EFAULT; | |
540 | } | |
541 | ||
542 | return 0; | |
543 | } | |
544 | ||
545 | static int uinput_ff_upload_from_user(const char __user *buffer, | |
546 | struct uinput_ff_upload *ff_up) | |
547 | { | |
548 | if (INPUT_COMPAT_TEST) { | |
549 | struct uinput_ff_upload_compat ff_up_compat; | |
550 | ||
551 | if (copy_from_user(&ff_up_compat, buffer, | |
552 | sizeof(struct uinput_ff_upload_compat))) | |
553 | return -EFAULT; | |
554 | ||
555 | ff_up->request_id = ff_up_compat.request_id; | |
556 | ff_up->retval = ff_up_compat.retval; | |
557 | memcpy(&ff_up->effect, &ff_up_compat.effect, | |
558 | sizeof(struct ff_effect_compat)); | |
559 | memcpy(&ff_up->old, &ff_up_compat.old, | |
560 | sizeof(struct ff_effect_compat)); | |
561 | ||
562 | } else { | |
563 | if (copy_from_user(ff_up, buffer, | |
564 | sizeof(struct uinput_ff_upload))) | |
565 | return -EFAULT; | |
566 | } | |
567 | ||
568 | return 0; | |
569 | } | |
570 | ||
571 | #else | |
572 | ||
573 | static int uinput_ff_upload_to_user(char __user *buffer, | |
574 | const struct uinput_ff_upload *ff_up) | |
575 | { | |
576 | if (copy_to_user(buffer, ff_up, sizeof(struct uinput_ff_upload))) | |
577 | return -EFAULT; | |
578 | ||
579 | return 0; | |
580 | } | |
581 | ||
582 | static int uinput_ff_upload_from_user(const char __user *buffer, | |
583 | struct uinput_ff_upload *ff_up) | |
584 | { | |
585 | if (copy_from_user(ff_up, buffer, sizeof(struct uinput_ff_upload))) | |
586 | return -EFAULT; | |
587 | ||
588 | return 0; | |
589 | } | |
590 | ||
591 | #endif | |
592 | ||
29506415 DT |
593 | #define uinput_set_bit(_arg, _bit, _max) \ |
594 | ({ \ | |
595 | int __ret = 0; \ | |
596 | if (udev->state == UIST_CREATED) \ | |
597 | __ret = -EINVAL; \ | |
598 | else if ((_arg) > (_max)) \ | |
599 | __ret = -EINVAL; \ | |
600 | else set_bit((_arg), udev->dev->_bit); \ | |
601 | __ret; \ | |
602 | }) | |
603 | ||
2d56f3a3 PL |
604 | static long uinput_ioctl_handler(struct file *file, unsigned int cmd, |
605 | unsigned long arg, void __user *p) | |
1da177e4 | 606 | { |
29506415 | 607 | int retval; |
2d56f3a3 | 608 | struct uinput_device *udev = file->private_data; |
1da177e4 LT |
609 | struct uinput_ff_upload ff_up; |
610 | struct uinput_ff_erase ff_erase; | |
611 | struct uinput_request *req; | |
612 | int length; | |
5b6271bd | 613 | char *phys; |
1da177e4 | 614 | |
221979aa | 615 | retval = mutex_lock_interruptible(&udev->mutex); |
29506415 DT |
616 | if (retval) |
617 | return retval; | |
618 | ||
619 | if (!udev->dev) { | |
620 | retval = uinput_allocate_device(udev); | |
621 | if (retval) | |
622 | goto out; | |
1da177e4 LT |
623 | } |
624 | ||
625 | switch (cmd) { | |
626 | case UI_DEV_CREATE: | |
627 | retval = uinput_create_device(udev); | |
628 | break; | |
629 | ||
630 | case UI_DEV_DESTROY: | |
29506415 | 631 | uinput_destroy_device(udev); |
1da177e4 LT |
632 | break; |
633 | ||
634 | case UI_SET_EVBIT: | |
29506415 | 635 | retval = uinput_set_bit(arg, evbit, EV_MAX); |
1da177e4 LT |
636 | break; |
637 | ||
638 | case UI_SET_KEYBIT: | |
29506415 | 639 | retval = uinput_set_bit(arg, keybit, KEY_MAX); |
1da177e4 LT |
640 | break; |
641 | ||
642 | case UI_SET_RELBIT: | |
29506415 | 643 | retval = uinput_set_bit(arg, relbit, REL_MAX); |
1da177e4 LT |
644 | break; |
645 | ||
646 | case UI_SET_ABSBIT: | |
29506415 | 647 | retval = uinput_set_bit(arg, absbit, ABS_MAX); |
1da177e4 LT |
648 | break; |
649 | ||
650 | case UI_SET_MSCBIT: | |
29506415 | 651 | retval = uinput_set_bit(arg, mscbit, MSC_MAX); |
1da177e4 LT |
652 | break; |
653 | ||
654 | case UI_SET_LEDBIT: | |
29506415 | 655 | retval = uinput_set_bit(arg, ledbit, LED_MAX); |
1da177e4 LT |
656 | break; |
657 | ||
658 | case UI_SET_SNDBIT: | |
29506415 | 659 | retval = uinput_set_bit(arg, sndbit, SND_MAX); |
1da177e4 LT |
660 | break; |
661 | ||
662 | case UI_SET_FFBIT: | |
29506415 | 663 | retval = uinput_set_bit(arg, ffbit, FF_MAX); |
1da177e4 LT |
664 | break; |
665 | ||
59c7c037 DT |
666 | case UI_SET_SWBIT: |
667 | retval = uinput_set_bit(arg, swbit, SW_MAX); | |
668 | break; | |
669 | ||
1da177e4 | 670 | case UI_SET_PHYS: |
29506415 DT |
671 | if (udev->state == UIST_CREATED) { |
672 | retval = -EINVAL; | |
673 | goto out; | |
674 | } | |
1da177e4 LT |
675 | length = strnlen_user(p, 1024); |
676 | if (length <= 0) { | |
677 | retval = -EFAULT; | |
678 | break; | |
679 | } | |
5b6271bd DT |
680 | kfree(udev->dev->phys); |
681 | udev->dev->phys = phys = kmalloc(length, GFP_KERNEL); | |
682 | if (!phys) { | |
1da177e4 LT |
683 | retval = -ENOMEM; |
684 | break; | |
685 | } | |
5b6271bd | 686 | if (copy_from_user(phys, p, length)) { |
1da177e4 | 687 | udev->dev->phys = NULL; |
5b6271bd DT |
688 | kfree(phys); |
689 | retval = -EFAULT; | |
1da177e4 LT |
690 | break; |
691 | } | |
5b6271bd | 692 | phys[length - 1] = '\0'; |
1da177e4 LT |
693 | break; |
694 | ||
695 | case UI_BEGIN_FF_UPLOAD: | |
2d56f3a3 PL |
696 | retval = uinput_ff_upload_from_user(p, &ff_up); |
697 | if (retval) | |
1da177e4 | 698 | break; |
2d56f3a3 | 699 | |
1da177e4 | 700 | req = uinput_request_find(udev, ff_up.request_id); |
2d56f3a3 | 701 | if (!req || req->code != UI_FF_UPLOAD || !req->u.upload.effect) { |
1da177e4 LT |
702 | retval = -EINVAL; |
703 | break; | |
704 | } | |
2d56f3a3 | 705 | |
1da177e4 | 706 | ff_up.retval = 0; |
2d56f3a3 | 707 | ff_up.effect = *req->u.upload.effect; |
ff462551 | 708 | if (req->u.upload.old) |
2d56f3a3 | 709 | ff_up.old = *req->u.upload.old; |
ff462551 AH |
710 | else |
711 | memset(&ff_up.old, 0, sizeof(struct ff_effect)); | |
712 | ||
2d56f3a3 | 713 | retval = uinput_ff_upload_to_user(p, &ff_up); |
1da177e4 LT |
714 | break; |
715 | ||
716 | case UI_BEGIN_FF_ERASE: | |
717 | if (copy_from_user(&ff_erase, p, sizeof(ff_erase))) { | |
718 | retval = -EFAULT; | |
719 | break; | |
720 | } | |
2d56f3a3 | 721 | |
1da177e4 | 722 | req = uinput_request_find(udev, ff_erase.request_id); |
2d56f3a3 | 723 | if (!req || req->code != UI_FF_ERASE) { |
1da177e4 LT |
724 | retval = -EINVAL; |
725 | break; | |
726 | } | |
2d56f3a3 | 727 | |
1da177e4 LT |
728 | ff_erase.retval = 0; |
729 | ff_erase.effect_id = req->u.effect_id; | |
730 | if (copy_to_user(p, &ff_erase, sizeof(ff_erase))) { | |
731 | retval = -EFAULT; | |
732 | break; | |
733 | } | |
2d56f3a3 | 734 | |
1da177e4 LT |
735 | break; |
736 | ||
737 | case UI_END_FF_UPLOAD: | |
2d56f3a3 PL |
738 | retval = uinput_ff_upload_from_user(p, &ff_up); |
739 | if (retval) | |
1da177e4 | 740 | break; |
2d56f3a3 | 741 | |
1da177e4 | 742 | req = uinput_request_find(udev, ff_up.request_id); |
2d56f3a3 PL |
743 | if (!req || req->code != UI_FF_UPLOAD || |
744 | !req->u.upload.effect) { | |
1da177e4 LT |
745 | retval = -EINVAL; |
746 | break; | |
747 | } | |
2d56f3a3 | 748 | |
1da177e4 | 749 | req->retval = ff_up.retval; |
0048e603 | 750 | uinput_request_done(udev, req); |
1da177e4 LT |
751 | break; |
752 | ||
753 | case UI_END_FF_ERASE: | |
754 | if (copy_from_user(&ff_erase, p, sizeof(ff_erase))) { | |
755 | retval = -EFAULT; | |
756 | break; | |
757 | } | |
2d56f3a3 | 758 | |
1da177e4 | 759 | req = uinput_request_find(udev, ff_erase.request_id); |
2d56f3a3 | 760 | if (!req || req->code != UI_FF_ERASE) { |
1da177e4 LT |
761 | retval = -EINVAL; |
762 | break; | |
763 | } | |
2d56f3a3 | 764 | |
1da177e4 | 765 | req->retval = ff_erase.retval; |
0048e603 | 766 | uinput_request_done(udev, req); |
1da177e4 LT |
767 | break; |
768 | ||
769 | default: | |
770 | retval = -EINVAL; | |
771 | } | |
29506415 DT |
772 | |
773 | out: | |
221979aa | 774 | mutex_unlock(&udev->mutex); |
1da177e4 LT |
775 | return retval; |
776 | } | |
777 | ||
2d56f3a3 PL |
778 | static long uinput_ioctl(struct file *file, unsigned int cmd, unsigned long arg) |
779 | { | |
780 | return uinput_ioctl_handler(file, cmd, arg, (void __user *)arg); | |
781 | } | |
782 | ||
783 | #ifdef CONFIG_COMPAT | |
784 | static long uinput_compat_ioctl(struct file *file, unsigned int cmd, unsigned long arg) | |
785 | { | |
786 | return uinput_ioctl_handler(file, cmd, arg, compat_ptr(arg)); | |
787 | } | |
788 | #endif | |
789 | ||
2b8693c0 | 790 | static const struct file_operations uinput_fops = { |
29506415 DT |
791 | .owner = THIS_MODULE, |
792 | .open = uinput_open, | |
793 | .release = uinput_release, | |
794 | .read = uinput_read, | |
795 | .write = uinput_write, | |
796 | .poll = uinput_poll, | |
797 | .unlocked_ioctl = uinput_ioctl, | |
2d56f3a3 PL |
798 | #ifdef CONFIG_COMPAT |
799 | .compat_ioctl = uinput_compat_ioctl, | |
800 | #endif | |
1da177e4 LT |
801 | }; |
802 | ||
803 | static struct miscdevice uinput_misc = { | |
29506415 DT |
804 | .fops = &uinput_fops, |
805 | .minor = UINPUT_MINOR, | |
806 | .name = UINPUT_NAME, | |
1da177e4 LT |
807 | }; |
808 | ||
809 | static int __init uinput_init(void) | |
810 | { | |
811 | return misc_register(&uinput_misc); | |
812 | } | |
813 | ||
814 | static void __exit uinput_exit(void) | |
815 | { | |
816 | misc_deregister(&uinput_misc); | |
817 | } | |
818 | ||
819 | MODULE_AUTHOR("Aristeu Sergio Rozanski Filho"); | |
820 | MODULE_DESCRIPTION("User level driver support for input subsystem"); | |
821 | MODULE_LICENSE("GPL"); | |
ff462551 | 822 | MODULE_VERSION("0.3"); |
1da177e4 LT |
823 | |
824 | module_init(uinput_init); | |
825 | module_exit(uinput_exit); | |
826 |