n_tty.c 60.6 KB
Newer Older
1
// SPDX-License-Identifier: GPL-1.0+
L
Linus Torvalds 已提交
2 3
/*
 * n_tty.c --- implements the N_TTY line discipline.
4
 *
L
Linus Torvalds 已提交
5 6 7 8 9 10 11
 * This code used to be in tty_io.c, but things are getting hairy
 * enough that it made sense to split things off.  (The N_TTY
 * processing has changed so much that it's hardly recognizable,
 * anyway...)
 *
 * Note that the open routine for N_TTY is guaranteed never to return
 * an error.  This is because Linux will fall back to setting a line
12
 * to N_TTY if it can not switch to any other line discipline.
L
Linus Torvalds 已提交
13 14
 *
 * Written by Theodore Ts'o, Copyright 1994.
15
 *
L
Linus Torvalds 已提交
16 17
 * This file also contains code originally written by Linus Torvalds,
 * Copyright 1991, 1992, 1993, and by Julian Cowley, Copyright 1994.
18
 *
L
Linus Torvalds 已提交
19 20
 * Reduced memory usage for older ARM systems  - Russell King.
 *
21
 * 2000/01/20   Fixed SMP locking on put_tty_queue using bits of
L
Linus Torvalds 已提交
22 23 24 25 26
 *		the patch by Andrew J. Kroll <ag784@freenet.buffalo.edu>
 *		who actually finally proved there really was a race.
 *
 * 2002/03/18   Implemented n_tty_wakeup to send SIGIO POLL_OUTs to
 *		waiting writing processes-Sapan Bhatia <sapan@corewars.org>.
27
 *		Also fixed a bug in BLOCKING mode where n_tty_write returns
L
Linus Torvalds 已提交
28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45
 *		EAGAIN
 */

#include <linux/types.h>
#include <linux/major.h>
#include <linux/errno.h>
#include <linux/signal.h>
#include <linux/fcntl.h>
#include <linux/sched.h>
#include <linux/interrupt.h>
#include <linux/tty.h>
#include <linux/timer.h>
#include <linux/ctype.h>
#include <linux/mm.h>
#include <linux/string.h>
#include <linux/slab.h>
#include <linux/poll.h>
#include <linux/bitops.h>
M
Miloslav Trmac 已提交
46 47
#include <linux/audit.h>
#include <linux/file.h>
A
Alan Cox 已提交
48
#include <linux/uaccess.h>
49
#include <linux/module.h>
50
#include <linux/ratelimit.h>
51
#include <linux/vmalloc.h>
L
Linus Torvalds 已提交
52 53 54 55 56 57 58 59 60 61 62


/* number of characters left in xmit buffer before select has we have room */
#define WAKEUP_CHARS 256

/*
 * This defines the low- and high-watermarks for throttling and
 * unthrottling the TTY driver.  These watermarks are used for
 * controlling the space in the read buffer.
 */
#define TTY_THRESHOLD_THROTTLE		128 /* now based on remaining room */
63
#define TTY_THRESHOLD_UNTHROTTLE	128
L
Linus Torvalds 已提交
64

65 66 67 68 69 70 71 72 73 74 75
/*
 * Special byte codes used in the echo buffer to represent operations
 * or special handling of characters.  Bytes in the echo buffer that
 * are not part of such special blocks are treated as normal character
 * codes.
 */
#define ECHO_OP_START 0xff
#define ECHO_OP_MOVE_BACK_COL 0x80
#define ECHO_OP_SET_CANON_COL 0x81
#define ECHO_OP_ERASE_TAB 0x82

P
Peter Hurley 已提交
76 77 78 79 80
#define ECHO_COMMIT_WATERMARK	256
#define ECHO_BLOCK		256
#define ECHO_DISCARD_WATERMARK	N_TTY_BUF_SIZE - (ECHO_BLOCK + 32)


81 82 83 84 85 86 87
#undef N_TTY_TRACE
#ifdef N_TTY_TRACE
# define n_tty_trace(f, args...)	trace_printk(f, ##args)
#else
# define n_tty_trace(f, args...)
#endif

J
Jiri Slaby 已提交
88
struct n_tty_data {
89 90
	/* producer-published */
	size_t read_head;
91
	size_t commit_head;
92
	size_t canon_head;
93 94
	size_t echo_head;
	size_t echo_commit;
95
	size_t echo_mark;
96
	DECLARE_BITMAP(char_map, 256);
97 98

	/* private to n_tty_receive_overrun (single-threaded) */
99 100 101
	unsigned long overrun_time;
	int num_overrun;

102 103 104
	/* non-atomic */
	bool no_room;

105
	/* must hold exclusive termios_rwsem to reset these */
106
	unsigned char lnext:1, erasing:1, raw:1, real_raw:1, icanon:1;
107
	unsigned char push:1;
108

109
	/* shared by producer and consumer */
110
	char read_buf[N_TTY_BUF_SIZE];
111
	DECLARE_BITMAP(read_flags, N_TTY_BUF_SIZE);
112
	unsigned char echo_buf[N_TTY_BUF_SIZE];
113

114 115
	/* consumer-published */
	size_t read_tail;
P
Peter Hurley 已提交
116
	size_t line_start;
117 118 119

	/* protected by output lock */
	unsigned int column;
120
	unsigned int canon_column;
121
	size_t echo_tail;
122 123 124

	struct mutex atomic_read_lock;
	struct mutex output_lock;
J
Jiri Slaby 已提交
125 126
};

127 128
static inline size_t read_cnt(struct n_tty_data *ldata)
{
P
Peter Hurley 已提交
129
	return ldata->read_head - ldata->read_tail;
130 131
}

132 133 134 135 136 137 138 139 140 141
static inline unsigned char read_buf(struct n_tty_data *ldata, size_t i)
{
	return ldata->read_buf[i & (N_TTY_BUF_SIZE - 1)];
}

static inline unsigned char *read_buf_addr(struct n_tty_data *ldata, size_t i)
{
	return &ldata->read_buf[i & (N_TTY_BUF_SIZE - 1)];
}

142 143 144 145 146 147 148 149 150 151
static inline unsigned char echo_buf(struct n_tty_data *ldata, size_t i)
{
	return ldata->echo_buf[i & (N_TTY_BUF_SIZE - 1)];
}

static inline unsigned char *echo_buf_addr(struct n_tty_data *ldata, size_t i)
{
	return &ldata->echo_buf[i & (N_TTY_BUF_SIZE - 1)];
}

P
Peter Hurley 已提交
152 153
static int tty_copy_to_user(struct tty_struct *tty, void __user *to,
			    size_t tail, size_t n)
154 155
{
	struct n_tty_data *ldata = tty->disc_data;
P
Peter Hurley 已提交
156 157 158 159 160
	size_t size = N_TTY_BUF_SIZE - tail;
	const void *from = read_buf_addr(ldata, tail);
	int uncopied;

	if (n > size) {
161
		tty_audit_add_data(tty, from, size);
P
Peter Hurley 已提交
162 163 164 165 166 167 168
		uncopied = copy_to_user(to, from, size);
		if (uncopied)
			return uncopied;
		to += size;
		n -= size;
		from = ldata->read_buf;
	}
169

170
	tty_audit_add_data(tty, from, n);
171 172 173
	return copy_to_user(to, from, n);
}

174
/**
175
 *	n_tty_kick_worker - start input worker (if required)
176 177
 *	@tty: terminal
 *
178
 *	Re-schedules the flip buffer work if it may have stopped
179
 *
180 181 182 183
 *	Caller holds exclusive termios_rwsem
 *	   or
 *	n_tty_read()/consumer path:
 *		holds non-exclusive termios_rwsem
184 185
 */

186
static void n_tty_kick_worker(struct tty_struct *tty)
187
{
188 189
	struct n_tty_data *ldata = tty->disc_data;

190 191
	/* Did the input worker stop? Restart it */
	if (unlikely(ldata->no_room)) {
192 193
		ldata->no_room = 0;

J
Jiri Slaby 已提交
194
		WARN_RATELIMIT(tty->port->itty == NULL,
195
				"scheduling with invalid itty\n");
196 197 198 199 200 201
		/* see if ldisc has been killed - if so, this means that
		 * even though the ldisc has been halted and ->buf.work
		 * cancelled, ->buf.work is about to be rescheduled
		 */
		WARN_RATELIMIT(test_bit(TTY_LDISC_HALTED, &tty->flags),
			       "scheduling buffer work for halted ldisc\n");
P
Peter Hurley 已提交
202
		tty_buffer_restart_work(tty->port);
J
Jiri Slaby 已提交
203
	}
204 205
}

206 207 208 209 210 211
static ssize_t chars_in_buffer(struct tty_struct *tty)
{
	struct n_tty_data *ldata = tty->disc_data;
	ssize_t n = 0;

	if (!ldata->icanon)
212
		n = ldata->commit_head - ldata->read_tail;
213 214 215 216 217
	else
		n = ldata->canon_head - ldata->read_tail;
	return n;
}

218 219 220 221 222 223 224 225 226 227 228
/**
 *	n_tty_write_wakeup	-	asynchronous I/O notifier
 *	@tty: tty device
 *
 *	Required for the ptys, serial driver etc. since processes
 *	that attach themselves to the master and rely on ASYNC
 *	IO must be woken up
 */

static void n_tty_write_wakeup(struct tty_struct *tty)
{
P
Peter Hurley 已提交
229 230
	clear_bit(TTY_DO_WRITE_WAKEUP, &tty->flags);
	kill_fasync(&tty->fasync, SIGIO, POLL_OUT);
231 232
}

233
static void n_tty_check_throttle(struct tty_struct *tty)
234
{
235 236
	struct n_tty_data *ldata = tty->disc_data;

237 238 239 240 241
	/*
	 * Check the remaining room for the input canonicalization
	 * mode.  We don't want to throttle the driver if we're in
	 * canonical mode and don't have a newline yet!
	 */
242 243 244
	if (ldata->icanon && ldata->canon_head == ldata->read_tail)
		return;

245 246 247
	while (1) {
		int throttled;
		tty_set_flow_change(tty, TTY_THROTTLE_SAFE);
248
		if (N_TTY_BUF_SIZE - read_cnt(ldata) >= TTY_THRESHOLD_THROTTLE)
249 250 251 252 253 254 255 256
			break;
		throttled = tty_throttle_safe(tty);
		if (!throttled)
			break;
	}
	__tty_set_flow_change(tty, 0);
}

257
static void n_tty_check_unthrottle(struct tty_struct *tty)
258
{
259
	if (tty->driver->type == TTY_DRIVER_TYPE_PTY) {
260 261
		if (chars_in_buffer(tty) > TTY_THRESHOLD_UNTHROTTLE)
			return;
262
		n_tty_kick_worker(tty);
263
		tty_wakeup(tty->link);
264 265 266
		return;
	}

267 268 269 270 271 272 273 274 275 276 277 278 279
	/* If there is enough space in the read buffer now, let the
	 * low-level driver know. We use chars_in_buffer() to
	 * check the buffer, as it now knows about canonical mode.
	 * Otherwise, if the driver is throttled and the line is
	 * longer than TTY_THRESHOLD_UNTHROTTLE in canonical mode,
	 * we won't get any more characters.
	 */

	while (1) {
		int unthrottled;
		tty_set_flow_change(tty, TTY_UNTHROTTLE_SAFE);
		if (chars_in_buffer(tty) > TTY_THRESHOLD_UNTHROTTLE)
			break;
280
		n_tty_kick_worker(tty);
281 282 283 284 285 286 287
		unthrottled = tty_unthrottle_safe(tty);
		if (!unthrottled)
			break;
	}
	__tty_set_flow_change(tty, 0);
}

288 289 290
/**
 *	put_tty_queue		-	add character to tty
 *	@c: character
J
Jiri Slaby 已提交
291
 *	@ldata: n_tty data
292
 *
293 294 295 296
 *	Add a character to the tty read_buf queue.
 *
 *	n_tty_receive_buf()/producer path:
 *		caller holds non-exclusive termios_rwsem
297 298
 */

299
static inline void put_tty_queue(unsigned char c, struct n_tty_data *ldata)
L
Linus Torvalds 已提交
300
{
301 302
	*read_buf_addr(ldata, ldata->read_head) = c;
	ldata->read_head++;
L
Linus Torvalds 已提交
303 304 305 306 307 308
}

/**
 *	reset_buffer_flags	-	reset buffer state
 *	@tty: terminal to reset
 *
309 310
 *	Reset the read buffer counters and clear the flags.
 *	Called from n_tty_open() and n_tty_flush_buffer().
311
 *
312 313
 *	Locking: caller holds exclusive termios_rwsem
 *		 (or locking is not required)
L
Linus Torvalds 已提交
314
 */
315

316
static void reset_buffer_flags(struct n_tty_data *ldata)
L
Linus Torvalds 已提交
317
{
318
	ldata->read_head = ldata->canon_head = ldata->read_tail = 0;
P
Peter Hurley 已提交
319
	ldata->echo_head = ldata->echo_tail = ldata->echo_commit = 0;
320
	ldata->commit_head = 0;
321
	ldata->echo_mark = 0;
P
Peter Hurley 已提交
322
	ldata->line_start = 0;
323

324
	ldata->erasing = 0;
325
	bitmap_zero(ldata->read_flags, N_TTY_BUF_SIZE);
326
	ldata->push = 0;
L
Linus Torvalds 已提交
327 328
}

329 330 331 332 333
static void n_tty_packet_mode_flush(struct tty_struct *tty)
{
	unsigned long flags;

	if (tty->link->packet) {
334
		spin_lock_irqsave(&tty->ctrl_lock, flags);
335
		tty->ctrl_status |= TIOCPKT_FLUSHREAD;
336
		spin_unlock_irqrestore(&tty->ctrl_lock, flags);
337
		wake_up_interruptible(&tty->link->read_wait);
338 339 340
	}
}

L
Linus Torvalds 已提交
341 342 343 344
/**
 *	n_tty_flush_buffer	-	clean input queue
 *	@tty:	terminal device
 *
345 346 347
 *	Flush the input buffer. Called when the tty layer wants the
 *	buffer flushed (eg at hangup) or when the N_TTY line discipline
 *	internally has to clean the pending queue (for example some signals).
L
Linus Torvalds 已提交
348
 *
349 350 351 352
 *	Holds termios_rwsem to exclude producer/consumer while
 *	buffer indices are reset.
 *
 *	Locking: ctrl_lock, exclusive termios_rwsem
L
Linus Torvalds 已提交
353
 */
354 355

static void n_tty_flush_buffer(struct tty_struct *tty)
L
Linus Torvalds 已提交
356
{
357
	down_write(&tty->termios_rwsem);
358
	reset_buffer_flags(tty->disc_data);
359
	n_tty_kick_worker(tty);
360

361 362
	if (tty->link)
		n_tty_packet_mode_flush(tty);
363
	up_write(&tty->termios_rwsem);
L
Linus Torvalds 已提交
364 365 366 367 368 369 370 371 372 373
}

/**
 *	is_utf8_continuation	-	utf8 multibyte check
 *	@c: byte to check
 *
 *	Returns true if the utf8 character 'c' is a multibyte continuation
 *	character. We use this to correctly compute the on screen size
 *	of the character when printing
 */
374

L
Linus Torvalds 已提交
375 376 377 378 379 380 381 382 383 384 385 386
static inline int is_utf8_continuation(unsigned char c)
{
	return (c & 0xc0) == 0x80;
}

/**
 *	is_continuation		-	multibyte check
 *	@c: byte to check
 *
 *	Returns true if the utf8 character 'c' is a multibyte continuation
 *	character and the terminal is in unicode mode.
 */
387

L
Linus Torvalds 已提交
388 389 390 391 392 393
static inline int is_continuation(unsigned char c, struct tty_struct *tty)
{
	return I_IUTF8(tty) && is_utf8_continuation(c);
}

/**
394
 *	do_output_char			-	output one character
L
Linus Torvalds 已提交
395 396
 *	@c: character (or partial unicode symbol)
 *	@tty: terminal device
397
 *	@space: space available in tty driver write buffer
L
Linus Torvalds 已提交
398
 *
399 400
 *	This is a helper function that handles one output character
 *	(including special characters like TAB, CR, LF, etc.),
401 402
 *	doing OPOST processing and putting the results in the
 *	tty driver's write buffer.
403 404 405 406
 *
 *	Note that Linux currently ignores TABDLY, CRDLY, VTDLY, FFDLY
 *	and NLDLY.  They simply aren't relevant in the world today.
 *	If you ever need them, add them here.
L
Linus Torvalds 已提交
407
 *
408 409 410 411 412
 *	Returns the number of bytes of buffer space used or -1 if
 *	no space left.
 *
 *	Locking: should be called under the output_lock to protect
 *		 the column state and space left in the buffer
L
Linus Torvalds 已提交
413
 */
414

415
static int do_output_char(unsigned char c, struct tty_struct *tty, int space)
L
Linus Torvalds 已提交
416
{
417
	struct n_tty_data *ldata = tty->disc_data;
418
	int	spaces;
L
Linus Torvalds 已提交
419 420 421

	if (!space)
		return -1;
A
Alan Cox 已提交
422

423 424 425
	switch (c) {
	case '\n':
		if (O_ONLRET(tty))
426
			ldata->column = 0;
427 428 429
		if (O_ONLCR(tty)) {
			if (space < 2)
				return -1;
430
			ldata->canon_column = ldata->column = 0;
431
			tty->ops->write(tty, "\r\n", 2);
432 433
			return 2;
		}
434
		ldata->canon_column = ldata->column;
435 436
		break;
	case '\r':
437
		if (O_ONOCR(tty) && ldata->column == 0)
438 439 440 441
			return 0;
		if (O_OCRNL(tty)) {
			c = '\n';
			if (O_ONLRET(tty))
442
				ldata->canon_column = ldata->column = 0;
L
Linus Torvalds 已提交
443
			break;
444
		}
445
		ldata->canon_column = ldata->column = 0;
446 447
		break;
	case '\t':
448
		spaces = 8 - (ldata->column & 7);
449 450 451
		if (O_TABDLY(tty) == XTABS) {
			if (space < spaces)
				return -1;
452
			ldata->column += spaces;
453 454
			tty->ops->write(tty, "        ", spaces);
			return spaces;
L
Linus Torvalds 已提交
455
		}
456
		ldata->column += spaces;
457 458
		break;
	case '\b':
459 460
		if (ldata->column > 0)
			ldata->column--;
461 462
		break;
	default:
463 464 465 466
		if (!iscntrl(c)) {
			if (O_OLCUC(tty))
				c = toupper(c);
			if (!is_continuation(c, tty))
467
				ldata->column++;
468
		}
469
		break;
L
Linus Torvalds 已提交
470
	}
471

A
Alan Cox 已提交
472
	tty_put_char(tty, c);
473 474 475 476 477 478 479 480
	return 1;
}

/**
 *	process_output			-	output post processor
 *	@c: character (or partial unicode symbol)
 *	@tty: terminal device
 *
481 482 483
 *	Output one character with OPOST processing.
 *	Returns -1 when the output device is full and the character
 *	must be retried.
484 485 486 487 488 489 490 491
 *
 *	Locking: output_lock to protect column state and space left
 *		 (also, this is called from n_tty_write under the
 *		  tty layer write lock)
 */

static int process_output(unsigned char c, struct tty_struct *tty)
{
492
	struct n_tty_data *ldata = tty->disc_data;
493 494
	int	space, retval;

495
	mutex_lock(&ldata->output_lock);
496 497 498 499

	space = tty_write_room(tty);
	retval = do_output_char(c, tty, space);

500
	mutex_unlock(&ldata->output_lock);
501 502 503 504
	if (retval < 0)
		return -1;
	else
		return 0;
L
Linus Torvalds 已提交
505 506 507
}

/**
508
 *	process_output_block		-	block post processor
L
Linus Torvalds 已提交
509
 *	@tty: terminal device
510 511 512 513 514
 *	@buf: character buffer
 *	@nr: number of bytes to output
 *
 *	Output a block of characters with OPOST processing.
 *	Returns the number of characters output.
L
Linus Torvalds 已提交
515 516 517 518 519 520
 *
 *	This path is used to speed up block console writes, among other
 *	things when processing blocks of output data. It handles only
 *	the simple cases normally found and helps to generate blocks of
 *	symbols for the console driver and thus improve performance.
 *
521 522 523
 *	Locking: output_lock to protect column state and space left
 *		 (also, this is called from n_tty_write under the
 *		  tty layer write lock)
L
Linus Torvalds 已提交
524
 */
525

526 527
static ssize_t process_output_block(struct tty_struct *tty,
				    const unsigned char *buf, unsigned int nr)
L
Linus Torvalds 已提交
528
{
529
	struct n_tty_data *ldata = tty->disc_data;
L
Linus Torvalds 已提交
530
	int	space;
531
	int	i;
L
Linus Torvalds 已提交
532 533
	const unsigned char *cp;

534
	mutex_lock(&ldata->output_lock);
535

A
Alan Cox 已提交
536
	space = tty_write_room(tty);
A
Alan Cox 已提交
537
	if (!space) {
538
		mutex_unlock(&ldata->output_lock);
L
Linus Torvalds 已提交
539
		return 0;
540
	}
L
Linus Torvalds 已提交
541 542 543 544
	if (nr > space)
		nr = space;

	for (i = 0, cp = buf; i < nr; i++, cp++) {
545 546 547
		unsigned char c = *cp;

		switch (c) {
L
Linus Torvalds 已提交
548 549
		case '\n':
			if (O_ONLRET(tty))
550
				ldata->column = 0;
L
Linus Torvalds 已提交
551 552
			if (O_ONLCR(tty))
				goto break_out;
553
			ldata->canon_column = ldata->column;
L
Linus Torvalds 已提交
554 555
			break;
		case '\r':
556
			if (O_ONOCR(tty) && ldata->column == 0)
L
Linus Torvalds 已提交
557 558 559
				goto break_out;
			if (O_OCRNL(tty))
				goto break_out;
560
			ldata->canon_column = ldata->column = 0;
L
Linus Torvalds 已提交
561 562 563 564
			break;
		case '\t':
			goto break_out;
		case '\b':
565 566
			if (ldata->column > 0)
				ldata->column--;
L
Linus Torvalds 已提交
567 568
			break;
		default:
569 570 571 572
			if (!iscntrl(c)) {
				if (O_OLCUC(tty))
					goto break_out;
				if (!is_continuation(c, tty))
573
					ldata->column++;
574
			}
L
Linus Torvalds 已提交
575 576 577 578
			break;
		}
	}
break_out:
A
Alan Cox 已提交
579
	i = tty->ops->write(tty, buf, i);
580

581
	mutex_unlock(&ldata->output_lock);
L
Linus Torvalds 已提交
582 583 584
	return i;
}

585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606
/**
 *	process_echoes	-	write pending echo characters
 *	@tty: terminal device
 *
 *	Write previously buffered echo (and other ldisc-generated)
 *	characters to the tty.
 *
 *	Characters generated by the ldisc (including echoes) need to
 *	be buffered because the driver's write buffer can fill during
 *	heavy program output.  Echoing straight to the driver will
 *	often fail under these conditions, causing lost characters and
 *	resulting mismatches of ldisc state information.
 *
 *	Since the ldisc state must represent the characters actually sent
 *	to the driver at the time of the write, operations like certain
 *	changes in column state are also saved in the buffer and executed
 *	here.
 *
 *	A circular fifo buffer is used so that the most recent characters
 *	are prioritized.  Also, when control characters are echoed with a
 *	prefixed "^", the pair is treated atomically and thus not separated.
 *
607
 *	Locking: callers must hold output_lock
608 609
 */

610
static size_t __process_echoes(struct tty_struct *tty)
611
{
612
	struct n_tty_data *ldata = tty->disc_data;
613
	int	space, old_space;
614
	size_t tail;
615 616
	unsigned char c;

617
	old_space = space = tty_write_room(tty);
618

619
	tail = ldata->echo_tail;
620
	while (ldata->echo_commit != tail) {
621
		c = echo_buf(ldata, tail);
622 623 624 625 626 627 628 629 630
		if (c == ECHO_OP_START) {
			unsigned char op;
			int no_space_left = 0;

			/*
			 * If the buffer byte is the start of a multi-byte
			 * operation, get the next byte, which is either the
			 * op code or a control character value.
			 */
631
			op = echo_buf(ldata, tail + 1);
A
Alan Cox 已提交
632

633 634 635 636
			switch (op) {
				unsigned int num_chars, num_bs;

			case ECHO_OP_ERASE_TAB:
637
				num_chars = echo_buf(ldata, tail + 2);
638 639 640 641 642 643 644 645 646 647 648 649

				/*
				 * Determine how many columns to go back
				 * in order to erase the tab.
				 * This depends on the number of columns
				 * used by other characters within the tab
				 * area.  If this (modulo 8) count is from
				 * the start of input rather than from a
				 * previous tab, we offset by canon column.
				 * Otherwise, tab spacing is normal.
				 */
				if (!(num_chars & 0x80))
650
					num_chars += ldata->canon_column;
651 652 653 654 655 656 657 658 659
				num_bs = 8 - (num_chars & 7);

				if (num_bs > space) {
					no_space_left = 1;
					break;
				}
				space -= num_bs;
				while (num_bs--) {
					tty_put_char(tty, '\b');
660 661
					if (ldata->column > 0)
						ldata->column--;
662
				}
663
				tail += 3;
664 665 666
				break;

			case ECHO_OP_SET_CANON_COL:
667
				ldata->canon_column = ldata->column;
668
				tail += 2;
669 670 671
				break;

			case ECHO_OP_MOVE_BACK_COL:
672 673
				if (ldata->column > 0)
					ldata->column--;
674
				tail += 2;
675 676 677 678 679 680 681 682 683
				break;

			case ECHO_OP_START:
				/* This is an escaped echo op start code */
				if (!space) {
					no_space_left = 1;
					break;
				}
				tty_put_char(tty, ECHO_OP_START);
684
				ldata->column++;
685
				space--;
686
				tail += 2;
687 688 689 690
				break;

			default:
				/*
691 692 693 694 695 696 697
				 * If the op is not a special byte code,
				 * it is a ctrl char tagged to be echoed
				 * as "^X" (where X is the letter
				 * representing the control char).
				 * Note that we must ensure there is
				 * enough space for the whole ctrl pair.
				 *
698
				 */
699 700 701 702 703 704
				if (space < 2) {
					no_space_left = 1;
					break;
				}
				tty_put_char(tty, '^');
				tty_put_char(tty, op ^ 0100);
705
				ldata->column += 2;
706
				space -= 2;
707
				tail += 2;
708 709 710 711 712
			}

			if (no_space_left)
				break;
		} else {
P
Peter Hurley 已提交
713
			if (O_OPOST(tty)) {
714 715 716 717 718 719 720 721 722 723
				int retval = do_output_char(c, tty, space);
				if (retval < 0)
					break;
				space -= retval;
			} else {
				if (!space)
					break;
				tty_put_char(tty, c);
				space -= 1;
			}
724
			tail += 1;
725 726 727
		}
	}

P
Peter Hurley 已提交
728 729 730 731
	/* If the echo buffer is nearly full (so that the possibility exists
	 * of echo overrun before the next commit), then discard enough
	 * data at the tail to prevent a subsequent overrun */
	while (ldata->echo_commit - tail >= ECHO_DISCARD_WATERMARK) {
732
		if (echo_buf(ldata, tail) == ECHO_OP_START) {
733
			if (echo_buf(ldata, tail + 1) == ECHO_OP_ERASE_TAB)
P
Peter Hurley 已提交
734 735 736 737 738 739 740
				tail += 3;
			else
				tail += 2;
		} else
			tail++;
	}

741
	ldata->echo_tail = tail;
742
	return old_space - space;
743 744 745 746 747
}

static void commit_echoes(struct tty_struct *tty)
{
	struct n_tty_data *ldata = tty->disc_data;
748
	size_t nr, old, echoed;
P
Peter Hurley 已提交
749 750 751
	size_t head;

	head = ldata->echo_head;
752
	ldata->echo_mark = head;
P
Peter Hurley 已提交
753 754 755 756 757 758 759 760
	old = ldata->echo_commit - ldata->echo_tail;

	/* Process committed echoes if the accumulated # of bytes
	 * is over the threshold (and try again each time another
	 * block is accumulated) */
	nr = head - ldata->echo_tail;
	if (nr < ECHO_COMMIT_WATERMARK || (nr % ECHO_BLOCK > old % ECHO_BLOCK))
		return;
761

762
	mutex_lock(&ldata->output_lock);
P
Peter Hurley 已提交
763
	ldata->echo_commit = head;
764
	echoed = __process_echoes(tty);
765
	mutex_unlock(&ldata->output_lock);
766

767
	if (echoed && tty->ops->flush_chars)
768 769 770
		tty->ops->flush_chars(tty);
}

771
static void process_echoes(struct tty_struct *tty)
P
Peter Hurley 已提交
772 773
{
	struct n_tty_data *ldata = tty->disc_data;
774
	size_t echoed;
P
Peter Hurley 已提交
775

P
Peter Hurley 已提交
776
	if (ldata->echo_mark == ldata->echo_tail)
777 778 779
		return;

	mutex_lock(&ldata->output_lock);
780
	ldata->echo_commit = ldata->echo_mark;
781
	echoed = __process_echoes(tty);
782 783
	mutex_unlock(&ldata->output_lock);

784
	if (echoed && tty->ops->flush_chars)
785
		tty->ops->flush_chars(tty);
P
Peter Hurley 已提交
786 787
}

788
/* NB: echo_mark and echo_head should be equivalent here */
P
Peter Hurley 已提交
789 790 791 792
static void flush_echoes(struct tty_struct *tty)
{
	struct n_tty_data *ldata = tty->disc_data;

P
Peter Hurley 已提交
793 794
	if ((!L_ECHO(tty) && !L_ECHONL(tty)) ||
	    ldata->echo_commit == ldata->echo_head)
P
Peter Hurley 已提交
795 796 797 798 799 800 801 802
		return;

	mutex_lock(&ldata->output_lock);
	ldata->echo_commit = ldata->echo_head;
	__process_echoes(tty);
	mutex_unlock(&ldata->output_lock);
}

803 804 805
/**
 *	add_echo_byte	-	add a byte to the echo buffer
 *	@c: unicode byte to echo
J
Jiri Slaby 已提交
806
 *	@ldata: n_tty data
807 808 809 810
 *
 *	Add a character or operation byte to the echo buffer.
 */

P
Peter Hurley 已提交
811
static inline void add_echo_byte(unsigned char c, struct n_tty_data *ldata)
812
{
813
	*echo_buf_addr(ldata, ldata->echo_head++) = c;
814 815 816 817
}

/**
 *	echo_move_back_col	-	add operation to move back a column
J
Jiri Slaby 已提交
818
 *	@ldata: n_tty data
819 820 821 822
 *
 *	Add an operation to the echo buffer to move back one column.
 */

J
Jiri Slaby 已提交
823
static void echo_move_back_col(struct n_tty_data *ldata)
824
{
J
Jiri Slaby 已提交
825 826
	add_echo_byte(ECHO_OP_START, ldata);
	add_echo_byte(ECHO_OP_MOVE_BACK_COL, ldata);
827 828 829 830
}

/**
 *	echo_set_canon_col	-	add operation to set the canon column
J
Jiri Slaby 已提交
831
 *	@ldata: n_tty data
832 833 834 835 836
 *
 *	Add an operation to the echo buffer to set the canon column
 *	to the current column.
 */

J
Jiri Slaby 已提交
837
static void echo_set_canon_col(struct n_tty_data *ldata)
838
{
J
Jiri Slaby 已提交
839 840
	add_echo_byte(ECHO_OP_START, ldata);
	add_echo_byte(ECHO_OP_SET_CANON_COL, ldata);
841 842 843 844 845 846
}

/**
 *	echo_erase_tab	-	add operation to erase a tab
 *	@num_chars: number of character columns already used
 *	@after_tab: true if num_chars starts after a previous tab
J
Jiri Slaby 已提交
847
 *	@ldata: n_tty data
848 849 850 851 852 853 854 855 856 857 858
 *
 *	Add an operation to the echo buffer to erase a tab.
 *
 *	Called by the eraser function, which knows how many character
 *	columns have been used since either a previous tab or the start
 *	of input.  This information will be used later, along with
 *	canon column (if applicable), to go back the correct number
 *	of columns.
 */

static void echo_erase_tab(unsigned int num_chars, int after_tab,
J
Jiri Slaby 已提交
859
			   struct n_tty_data *ldata)
860
{
J
Jiri Slaby 已提交
861 862
	add_echo_byte(ECHO_OP_START, ldata);
	add_echo_byte(ECHO_OP_ERASE_TAB, ldata);
863 864 865 866 867 868 869

	/* We only need to know this modulo 8 (tab spacing) */
	num_chars &= 7;

	/* Set the high bit as a flag if num_chars is after a previous tab */
	if (after_tab)
		num_chars |= 0x80;
A
Alan Cox 已提交
870

J
Jiri Slaby 已提交
871
	add_echo_byte(num_chars, ldata);
872 873 874 875 876 877 878 879 880 881 882 883 884
}

/**
 *	echo_char_raw	-	echo a character raw
 *	@c: unicode byte to echo
 *	@tty: terminal device
 *
 *	Echo user input back onto the screen. This must be called only when
 *	L_ECHO(tty) is true. Called from the driver receive_buf path.
 *
 *	This variant does not treat control characters specially.
 */

J
Jiri Slaby 已提交
885
static void echo_char_raw(unsigned char c, struct n_tty_data *ldata)
886 887
{
	if (c == ECHO_OP_START) {
J
Jiri Slaby 已提交
888 889
		add_echo_byte(ECHO_OP_START, ldata);
		add_echo_byte(ECHO_OP_START, ldata);
890
	} else {
J
Jiri Slaby 已提交
891
		add_echo_byte(c, ldata);
892 893
	}
}
L
Linus Torvalds 已提交
894 895

/**
896
 *	echo_char	-	echo a character
L
Linus Torvalds 已提交
897 898 899
 *	@c: unicode byte to echo
 *	@tty: terminal device
 *
900
 *	Echo user input back onto the screen. This must be called only when
L
Linus Torvalds 已提交
901
 *	L_ECHO(tty) is true. Called from the driver receive_buf path.
902
 *
903 904
 *	This variant tags control characters to be echoed as "^X"
 *	(where X is the letter representing the control char).
L
Linus Torvalds 已提交
905 906 907 908
 */

static void echo_char(unsigned char c, struct tty_struct *tty)
{
909 910
	struct n_tty_data *ldata = tty->disc_data;

911
	if (c == ECHO_OP_START) {
J
Jiri Slaby 已提交
912 913
		add_echo_byte(ECHO_OP_START, ldata);
		add_echo_byte(ECHO_OP_START, ldata);
914
	} else {
915
		if (L_ECHOCTL(tty) && iscntrl(c) && c != '\t')
J
Jiri Slaby 已提交
916 917
			add_echo_byte(ECHO_OP_START, ldata);
		add_echo_byte(c, ldata);
918
	}
L
Linus Torvalds 已提交
919 920
}

921
/**
922
 *	finish_erasing		-	complete erase
J
Jiri Slaby 已提交
923
 *	@ldata: n_tty data
924
 */
925

J
Jiri Slaby 已提交
926
static inline void finish_erasing(struct n_tty_data *ldata)
L
Linus Torvalds 已提交
927
{
928
	if (ldata->erasing) {
J
Jiri Slaby 已提交
929
		echo_char_raw('/', ldata);
930
		ldata->erasing = 0;
L
Linus Torvalds 已提交
931 932 933 934 935 936 937 938
	}
}

/**
 *	eraser		-	handle erase function
 *	@c: character input
 *	@tty: terminal device
 *
939
 *	Perform erase and necessary output when an erase character is
L
Linus Torvalds 已提交
940 941
 *	present in the stream from the driver layer. Handles the complexities
 *	of UTF-8 multibyte symbols.
942
 *
943 944
 *	n_tty_receive_buf()/producer path:
 *		caller holds non-exclusive termios_rwsem
L
Linus Torvalds 已提交
945
 */
946

L
Linus Torvalds 已提交
947 948
static void eraser(unsigned char c, struct tty_struct *tty)
{
949
	struct n_tty_data *ldata = tty->disc_data;
L
Linus Torvalds 已提交
950
	enum { ERASE, WERASE, KILL } kill_type;
951 952 953
	size_t head;
	size_t cnt;
	int seen_alnums;
L
Linus Torvalds 已提交
954

955
	if (ldata->read_head == ldata->canon_head) {
956
		/* process_output('\a', tty); */ /* what do you think? */
L
Linus Torvalds 已提交
957 958 959 960 961 962 963 964
		return;
	}
	if (c == ERASE_CHAR(tty))
		kill_type = ERASE;
	else if (c == WERASE_CHAR(tty))
		kill_type = WERASE;
	else {
		if (!L_ECHO(tty)) {
965
			ldata->read_head = ldata->canon_head;
L
Linus Torvalds 已提交
966 967 968
			return;
		}
		if (!L_ECHOK(tty) || !L_ECHOKE(tty) || !L_ECHOE(tty)) {
969
			ldata->read_head = ldata->canon_head;
J
Jiri Slaby 已提交
970
			finish_erasing(ldata);
L
Linus Torvalds 已提交
971 972 973
			echo_char(KILL_CHAR(tty), tty);
			/* Add a newline if ECHOK is on and ECHOKE is off. */
			if (L_ECHOK(tty))
J
Jiri Slaby 已提交
974
				echo_char_raw('\n', ldata);
L
Linus Torvalds 已提交
975 976 977 978 979 980
			return;
		}
		kill_type = KILL;
	}

	seen_alnums = 0;
981 982
	while (ldata->read_head != ldata->canon_head) {
		head = ldata->read_head;
L
Linus Torvalds 已提交
983 984 985

		/* erase a single possibly multibyte character */
		do {
986 987
			head--;
			c = read_buf(ldata, head);
988
		} while (is_continuation(c, tty) && head != ldata->canon_head);
L
Linus Torvalds 已提交
989 990 991 992 993 994 995 996 997 998 999 1000

		/* do not partially erase */
		if (is_continuation(c, tty))
			break;

		if (kill_type == WERASE) {
			/* Equivalent to BSD's ALTWERASE. */
			if (isalnum(c) || c == '_')
				seen_alnums++;
			else if (seen_alnums)
				break;
		}
1001
		cnt = ldata->read_head - head;
1002
		ldata->read_head = head;
L
Linus Torvalds 已提交
1003 1004
		if (L_ECHO(tty)) {
			if (L_ECHOPRT(tty)) {
1005
				if (!ldata->erasing) {
J
Jiri Slaby 已提交
1006
					echo_char_raw('\\', ldata);
1007
					ldata->erasing = 1;
L
Linus Torvalds 已提交
1008 1009 1010 1011
				}
				/* if cnt > 1, output a multi-byte character */
				echo_char(c, tty);
				while (--cnt > 0) {
1012 1013
					head++;
					echo_char_raw(read_buf(ldata, head), ldata);
J
Jiri Slaby 已提交
1014
					echo_move_back_col(ldata);
L
Linus Torvalds 已提交
1015 1016 1017 1018
				}
			} else if (kill_type == ERASE && !L_ECHOE(tty)) {
				echo_char(ERASE_CHAR(tty), tty);
			} else if (c == '\t') {
1019 1020
				unsigned int num_chars = 0;
				int after_tab = 0;
1021
				size_t tail = ldata->read_head;
1022 1023 1024 1025 1026 1027 1028 1029

				/*
				 * Count the columns used for characters
				 * since the start of input or after a
				 * previous tab.
				 * This info is used to go back the correct
				 * number of columns.
				 */
1030
				while (tail != ldata->canon_head) {
1031 1032
					tail--;
					c = read_buf(ldata, tail);
1033 1034 1035
					if (c == '\t') {
						after_tab = 1;
						break;
A
Alan Cox 已提交
1036
					} else if (iscntrl(c)) {
L
Linus Torvalds 已提交
1037
						if (L_ECHOCTL(tty))
1038 1039 1040 1041
							num_chars += 2;
					} else if (!is_continuation(c, tty)) {
						num_chars++;
					}
L
Linus Torvalds 已提交
1042
				}
J
Jiri Slaby 已提交
1043
				echo_erase_tab(num_chars, after_tab, ldata);
L
Linus Torvalds 已提交
1044 1045
			} else {
				if (iscntrl(c) && L_ECHOCTL(tty)) {
J
Jiri Slaby 已提交
1046 1047 1048
					echo_char_raw('\b', ldata);
					echo_char_raw(' ', ldata);
					echo_char_raw('\b', ldata);
L
Linus Torvalds 已提交
1049 1050
				}
				if (!iscntrl(c) || L_ECHOCTL(tty)) {
J
Jiri Slaby 已提交
1051 1052 1053
					echo_char_raw('\b', ldata);
					echo_char_raw(' ', ldata);
					echo_char_raw('\b', ldata);
L
Linus Torvalds 已提交
1054 1055 1056 1057 1058 1059
				}
			}
		}
		if (kill_type == ERASE)
			break;
	}
1060
	if (ldata->read_head == ldata->canon_head && L_ECHO(tty))
J
Jiri Slaby 已提交
1061
		finish_erasing(ldata);
L
Linus Torvalds 已提交
1062 1063 1064 1065 1066 1067 1068
}

/**
 *	isig		-	handle the ISIG optio
 *	@sig: signal
 *	@tty: terminal
 *
1069 1070
 *	Called when a signal is being sent due to terminal input.
 *	Called from the driver receive_buf path so serialized.
1071
 *
1072 1073 1074 1075
 *	Performs input and output flush if !NOFLSH. In this context, the echo
 *	buffer is 'output'. The signal is processed first to alert any current
 *	readers or writers to discontinue and exit their i/o loops.
 *
1076
 *	Locking: ctrl_lock
L
Linus Torvalds 已提交
1077
 */
1078

1079
static void __isig(int sig, struct tty_struct *tty)
L
Linus Torvalds 已提交
1080
{
1081 1082 1083 1084
	struct pid *tty_pgrp = tty_get_pgrp(tty);
	if (tty_pgrp) {
		kill_pgrp(tty_pgrp, sig, 1);
		put_pid(tty_pgrp);
L
Linus Torvalds 已提交
1085
	}
1086
}
1087

1088 1089 1090 1091 1092 1093 1094 1095 1096
static void isig(int sig, struct tty_struct *tty)
{
	struct n_tty_data *ldata = tty->disc_data;

	if (L_NOFLSH(tty)) {
		/* signal only */
		__isig(sig, tty);

	} else { /* signal and flush */
1097 1098 1099
		up_read(&tty->termios_rwsem);
		down_write(&tty->termios_rwsem);

1100 1101
		__isig(sig, tty);

1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120
		/* clear echo buffer */
		mutex_lock(&ldata->output_lock);
		ldata->echo_head = ldata->echo_tail = 0;
		ldata->echo_mark = ldata->echo_commit = 0;
		mutex_unlock(&ldata->output_lock);

		/* clear output buffer */
		tty_driver_flush_buffer(tty);

		/* clear input buffer */
		reset_buffer_flags(tty->disc_data);

		/* notify pty master of flush */
		if (tty->link)
			n_tty_packet_mode_flush(tty);

		up_write(&tty->termios_rwsem);
		down_read(&tty->termios_rwsem);
	}
L
Linus Torvalds 已提交
1121 1122 1123 1124 1125 1126 1127 1128 1129
}

/**
 *	n_tty_receive_break	-	handle break
 *	@tty: terminal
 *
 *	An RS232 break event has been hit in the incoming bitstream. This
 *	can cause a variety of events depending upon the termios settings.
 *
1130 1131 1132 1133
 *	n_tty_receive_buf()/producer path:
 *		caller holds non-exclusive termios_rwsem
 *
 *	Note: may get exclusive termios_rwsem if flushing input buffer
L
Linus Torvalds 已提交
1134
 */
1135

1136
static void n_tty_receive_break(struct tty_struct *tty)
L
Linus Torvalds 已提交
1137
{
J
Jiri Slaby 已提交
1138 1139
	struct n_tty_data *ldata = tty->disc_data;

L
Linus Torvalds 已提交
1140 1141 1142
	if (I_IGNBRK(tty))
		return;
	if (I_BRKINT(tty)) {
1143
		isig(SIGINT, tty);
L
Linus Torvalds 已提交
1144 1145 1146
		return;
	}
	if (I_PARMRK(tty)) {
J
Jiri Slaby 已提交
1147 1148
		put_tty_queue('\377', ldata);
		put_tty_queue('\0', ldata);
L
Linus Torvalds 已提交
1149
	}
J
Jiri Slaby 已提交
1150
	put_tty_queue('\0', ldata);
L
Linus Torvalds 已提交
1151 1152 1153 1154 1155 1156 1157 1158 1159 1160 1161 1162 1163 1164
}

/**
 *	n_tty_receive_overrun	-	handle overrun reporting
 *	@tty: terminal
 *
 *	Data arrived faster than we could process it. While the tty
 *	driver has flagged this the bits that were missed are gone
 *	forever.
 *
 *	Called from the receive_buf path so single threaded. Does not
 *	need locking as num_overrun and overrun_time are function
 *	private.
 */
1165

1166
static void n_tty_receive_overrun(struct tty_struct *tty)
L
Linus Torvalds 已提交
1167
{
1168
	struct n_tty_data *ldata = tty->disc_data;
L
Linus Torvalds 已提交
1169

1170 1171 1172
	ldata->num_overrun++;
	if (time_after(jiffies, ldata->overrun_time + HZ) ||
			time_after(ldata->overrun_time, jiffies)) {
P
Peter Hurley 已提交
1173
		tty_warn(tty, "%d input overrun(s)\n", ldata->num_overrun);
1174 1175
		ldata->overrun_time = jiffies;
		ldata->num_overrun = 0;
L
Linus Torvalds 已提交
1176 1177 1178 1179 1180 1181 1182 1183 1184
	}
}

/**
 *	n_tty_receive_parity_error	-	error notifier
 *	@tty: terminal device
 *	@c: character
 *
 *	Process a parity error and queue the right data to indicate
1185 1186 1187 1188
 *	the error case if necessary.
 *
 *	n_tty_receive_buf()/producer path:
 *		caller holds non-exclusive termios_rwsem
L
Linus Torvalds 已提交
1189
 */
1190
static void n_tty_receive_parity_error(struct tty_struct *tty, unsigned char c)
L
Linus Torvalds 已提交
1191
{
J
Jiri Slaby 已提交
1192 1193
	struct n_tty_data *ldata = tty->disc_data;

P
Peter Hurley 已提交
1194 1195 1196 1197 1198 1199 1200 1201 1202 1203
	if (I_INPCK(tty)) {
		if (I_IGNPAR(tty))
			return;
		if (I_PARMRK(tty)) {
			put_tty_queue('\377', ldata);
			put_tty_queue('\0', ldata);
			put_tty_queue(c, ldata);
		} else
			put_tty_queue('\0', ldata);
	} else
J
Jiri Slaby 已提交
1204
		put_tty_queue(c, ldata);
L
Linus Torvalds 已提交
1205 1206
}

1207 1208 1209
static void
n_tty_receive_signal_char(struct tty_struct *tty, int signal, unsigned char c)
{
1210
	isig(signal, tty);
1211 1212 1213 1214 1215
	if (I_IXON(tty))
		start_tty(tty);
	if (L_ECHO(tty)) {
		echo_char(c, tty);
		commit_echoes(tty);
P
Peter Hurley 已提交
1216 1217
	} else
		process_echoes(tty);
1218 1219 1220
	return;
}

L
Linus Torvalds 已提交
1221 1222 1223 1224 1225 1226
/**
 *	n_tty_receive_char	-	perform processing
 *	@tty: terminal device
 *	@c: character
 *
 *	Process an individual character of input received from the driver.
1227
 *	This is serialized with respect to itself by the rules for the
L
Linus Torvalds 已提交
1228
 *	driver above.
1229 1230 1231 1232
 *
 *	n_tty_receive_buf()/producer path:
 *		caller holds non-exclusive termios_rwsem
 *		publishes canon_head if canonical mode is active
1233 1234
 *
 *	Returns 1 if LNEXT was received, else returns 0
L
Linus Torvalds 已提交
1235 1236
 */

1237
static int
P
Peter Hurley 已提交
1238
n_tty_receive_char_special(struct tty_struct *tty, unsigned char c)
L
Linus Torvalds 已提交
1239
{
1240
	struct n_tty_data *ldata = tty->disc_data;
L
Linus Torvalds 已提交
1241 1242 1243 1244

	if (I_IXON(tty)) {
		if (c == START_CHAR(tty)) {
			start_tty(tty);
P
Peter Hurley 已提交
1245
			process_echoes(tty);
1246
			return 0;
L
Linus Torvalds 已提交
1247 1248 1249
		}
		if (c == STOP_CHAR(tty)) {
			stop_tty(tty);
1250
			return 0;
L
Linus Torvalds 已提交
1251 1252
		}
	}
1253

L
Linus Torvalds 已提交
1254
	if (L_ISIG(tty)) {
1255 1256
		if (c == INTR_CHAR(tty)) {
			n_tty_receive_signal_char(tty, SIGINT, c);
1257
			return 0;
1258 1259
		} else if (c == QUIT_CHAR(tty)) {
			n_tty_receive_signal_char(tty, SIGQUIT, c);
1260
			return 0;
1261 1262
		} else if (c == SUSP_CHAR(tty)) {
			n_tty_receive_signal_char(tty, SIGTSTP, c);
1263
			return 0;
L
Linus Torvalds 已提交
1264 1265
		}
	}
1266

1267 1268 1269 1270 1271
	if (tty->stopped && !tty->flow_stopped && I_IXON(tty) && I_IXANY(tty)) {
		start_tty(tty);
		process_echoes(tty);
	}

1272 1273
	if (c == '\r') {
		if (I_IGNCR(tty))
1274
			return 0;
1275 1276 1277 1278 1279
		if (I_ICRNL(tty))
			c = '\n';
	} else if (c == '\n' && I_INLCR(tty))
		c = '\r';

1280
	if (ldata->icanon) {
L
Linus Torvalds 已提交
1281 1282 1283
		if (c == ERASE_CHAR(tty) || c == KILL_CHAR(tty) ||
		    (c == WERASE_CHAR(tty) && L_IEXTEN(tty))) {
			eraser(c, tty);
P
Peter Hurley 已提交
1284
			commit_echoes(tty);
1285
			return 0;
L
Linus Torvalds 已提交
1286 1287
		}
		if (c == LNEXT_CHAR(tty) && L_IEXTEN(tty)) {
1288
			ldata->lnext = 1;
L
Linus Torvalds 已提交
1289
			if (L_ECHO(tty)) {
J
Jiri Slaby 已提交
1290
				finish_erasing(ldata);
L
Linus Torvalds 已提交
1291
				if (L_ECHOCTL(tty)) {
J
Jiri Slaby 已提交
1292 1293
					echo_char_raw('^', ldata);
					echo_char_raw('\b', ldata);
P
Peter Hurley 已提交
1294
					commit_echoes(tty);
L
Linus Torvalds 已提交
1295 1296
				}
			}
1297
			return 1;
L
Linus Torvalds 已提交
1298
		}
1299
		if (c == REPRINT_CHAR(tty) && L_ECHO(tty) && L_IEXTEN(tty)) {
1300
			size_t tail = ldata->canon_head;
L
Linus Torvalds 已提交
1301

J
Jiri Slaby 已提交
1302
			finish_erasing(ldata);
L
Linus Torvalds 已提交
1303
			echo_char(c, tty);
J
Jiri Slaby 已提交
1304
			echo_char_raw('\n', ldata);
1305
			while (tail != ldata->read_head) {
1306 1307
				echo_char(read_buf(ldata, tail), tty);
				tail++;
L
Linus Torvalds 已提交
1308
			}
P
Peter Hurley 已提交
1309
			commit_echoes(tty);
1310
			return 0;
L
Linus Torvalds 已提交
1311 1312
		}
		if (c == '\n') {
1313
			if (L_ECHO(tty) || L_ECHONL(tty)) {
J
Jiri Slaby 已提交
1314
				echo_char_raw('\n', ldata);
P
Peter Hurley 已提交
1315
				commit_echoes(tty);
L
Linus Torvalds 已提交
1316 1317 1318 1319 1320 1321 1322 1323 1324 1325 1326 1327 1328 1329
			}
			goto handle_newline;
		}
		if (c == EOF_CHAR(tty)) {
			c = __DISABLED_CHAR;
			goto handle_newline;
		}
		if ((c == EOL_CHAR(tty)) ||
		    (c == EOL2_CHAR(tty) && L_IEXTEN(tty))) {
			/*
			 * XXX are EOL_CHAR and EOL2_CHAR echoed?!?
			 */
			if (L_ECHO(tty)) {
				/* Record the column of first canon char. */
1330
				if (ldata->canon_head == ldata->read_head)
J
Jiri Slaby 已提交
1331
					echo_set_canon_col(ldata);
L
Linus Torvalds 已提交
1332
				echo_char(c, tty);
P
Peter Hurley 已提交
1333
				commit_echoes(tty);
L
Linus Torvalds 已提交
1334 1335 1336 1337 1338
			}
			/*
			 * XXX does PARMRK doubling happen for
			 * EOL_CHAR and EOL2_CHAR?
			 */
1339
			if (c == (unsigned char) '\377' && I_PARMRK(tty))
J
Jiri Slaby 已提交
1340
				put_tty_queue(c, ldata);
L
Linus Torvalds 已提交
1341

1342
handle_newline:
1343
			set_bit(ldata->read_head & (N_TTY_BUF_SIZE - 1), ldata->read_flags);
1344
			put_tty_queue(c, ldata);
1345
			smp_store_release(&ldata->canon_head, ldata->read_head);
L
Linus Torvalds 已提交
1346
			kill_fasync(&tty->fasync, SIGIO, POLL_IN);
1347
			wake_up_interruptible_poll(&tty->read_wait, EPOLLIN);
1348
			return 0;
L
Linus Torvalds 已提交
1349 1350
		}
	}
1351

1352
	if (L_ECHO(tty)) {
J
Jiri Slaby 已提交
1353
		finish_erasing(ldata);
L
Linus Torvalds 已提交
1354
		if (c == '\n')
J
Jiri Slaby 已提交
1355
			echo_char_raw('\n', ldata);
L
Linus Torvalds 已提交
1356 1357
		else {
			/* Record the column of first canon char. */
1358
			if (ldata->canon_head == ldata->read_head)
J
Jiri Slaby 已提交
1359
				echo_set_canon_col(ldata);
L
Linus Torvalds 已提交
1360 1361
			echo_char(c, tty);
		}
P
Peter Hurley 已提交
1362
		commit_echoes(tty);
L
Linus Torvalds 已提交
1363 1364
	}

1365 1366
	/* PARMRK doubling check */
	if (c == (unsigned char) '\377' && I_PARMRK(tty))
J
Jiri Slaby 已提交
1367
		put_tty_queue(c, ldata);
L
Linus Torvalds 已提交
1368

J
Jiri Slaby 已提交
1369
	put_tty_queue(c, ldata);
1370
	return 0;
1371
}
L
Linus Torvalds 已提交
1372

1373 1374
static inline void
n_tty_receive_char_inline(struct tty_struct *tty, unsigned char c)
P
Peter Hurley 已提交
1375 1376 1377
{
	struct n_tty_data *ldata = tty->disc_data;

1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388
	if (tty->stopped && !tty->flow_stopped && I_IXON(tty) && I_IXANY(tty)) {
		start_tty(tty);
		process_echoes(tty);
	}
	if (L_ECHO(tty)) {
		finish_erasing(ldata);
		/* Record the column of first canon char. */
		if (ldata->canon_head == ldata->read_head)
			echo_set_canon_col(ldata);
		echo_char(c, tty);
		commit_echoes(tty);
P
Peter Hurley 已提交
1389
	}
1390 1391
	/* PARMRK doubling check */
	if (c == (unsigned char) '\377' && I_PARMRK(tty))
1392 1393 1394
		put_tty_queue(c, ldata);
	put_tty_queue(c, ldata);
}
P
Peter Hurley 已提交
1395

1396
static void n_tty_receive_char(struct tty_struct *tty, unsigned char c)
1397 1398
{
	n_tty_receive_char_inline(tty, c);
P
Peter Hurley 已提交
1399 1400
}

1401 1402 1403 1404 1405
static inline void
n_tty_receive_char_fast(struct tty_struct *tty, unsigned char c)
{
	struct n_tty_data *ldata = tty->disc_data;

1406 1407 1408
	if (tty->stopped && !tty->flow_stopped && I_IXON(tty) && I_IXANY(tty)) {
		start_tty(tty);
		process_echoes(tty);
1409
	}
1410 1411 1412 1413 1414 1415 1416 1417 1418
	if (L_ECHO(tty)) {
		finish_erasing(ldata);
		/* Record the column of first canon char. */
		if (ldata->canon_head == ldata->read_head)
			echo_set_canon_col(ldata);
		echo_char(c, tty);
		commit_echoes(tty);
	}
	put_tty_queue(c, ldata);
1419 1420
}

1421
static void n_tty_receive_char_closing(struct tty_struct *tty, unsigned char c)
1422 1423 1424 1425 1426 1427 1428 1429 1430 1431 1432 1433 1434 1435 1436 1437 1438 1439 1440
{
	if (I_ISTRIP(tty))
		c &= 0x7f;
	if (I_IUCLC(tty) && L_IEXTEN(tty))
		c = tolower(c);

	if (I_IXON(tty)) {
		if (c == STOP_CHAR(tty))
			stop_tty(tty);
		else if (c == START_CHAR(tty) ||
			 (tty->stopped && !tty->flow_stopped && I_IXANY(tty) &&
			  c != INTR_CHAR(tty) && c != QUIT_CHAR(tty) &&
			  c != SUSP_CHAR(tty))) {
			start_tty(tty);
			process_echoes(tty);
		}
	}
}

1441 1442 1443 1444 1445 1446 1447 1448 1449 1450 1451 1452 1453 1454 1455
static void
n_tty_receive_char_flagged(struct tty_struct *tty, unsigned char c, char flag)
{
	switch (flag) {
	case TTY_BREAK:
		n_tty_receive_break(tty);
		break;
	case TTY_PARITY:
	case TTY_FRAME:
		n_tty_receive_parity_error(tty, c);
		break;
	case TTY_OVERRUN:
		n_tty_receive_overrun(tty);
		break;
	default:
P
Peter Hurley 已提交
1456
		tty_err(tty, "unknown flag %d\n", flag);
1457 1458 1459 1460
		break;
	}
}

1461 1462 1463 1464 1465 1466 1467 1468 1469 1470 1471 1472 1473 1474 1475 1476
static void
n_tty_receive_char_lnext(struct tty_struct *tty, unsigned char c, char flag)
{
	struct n_tty_data *ldata = tty->disc_data;

	ldata->lnext = 0;
	if (likely(flag == TTY_NORMAL)) {
		if (I_ISTRIP(tty))
			c &= 0x7f;
		if (I_IUCLC(tty) && L_IEXTEN(tty))
			c = tolower(c);
		n_tty_receive_char(tty, c);
	} else
		n_tty_receive_char_flagged(tty, c, flag);
}

1477 1478 1479 1480 1481 1482 1483 1484
static void
n_tty_receive_buf_real_raw(struct tty_struct *tty, const unsigned char *cp,
			   char *fp, int count)
{
	struct n_tty_data *ldata = tty->disc_data;
	size_t n, head;

	head = ldata->read_head & (N_TTY_BUF_SIZE - 1);
1485
	n = min_t(size_t, count, N_TTY_BUF_SIZE - head);
1486 1487 1488 1489 1490 1491
	memcpy(read_buf_addr(ldata, head), cp, n);
	ldata->read_head += n;
	cp += n;
	count -= n;

	head = ldata->read_head & (N_TTY_BUF_SIZE - 1);
1492
	n = min_t(size_t, count, N_TTY_BUF_SIZE - head);
1493 1494 1495 1496
	memcpy(read_buf_addr(ldata, head), cp, n);
	ldata->read_head += n;
}

1497 1498 1499 1500 1501 1502 1503 1504 1505 1506 1507 1508 1509 1510 1511 1512 1513
static void
n_tty_receive_buf_raw(struct tty_struct *tty, const unsigned char *cp,
		      char *fp, int count)
{
	struct n_tty_data *ldata = tty->disc_data;
	char flag = TTY_NORMAL;

	while (count--) {
		if (fp)
			flag = *fp++;
		if (likely(flag == TTY_NORMAL))
			put_tty_queue(*cp++, ldata);
		else
			n_tty_receive_char_flagged(tty, *cp++, flag);
	}
}

1514 1515 1516 1517 1518 1519 1520 1521 1522 1523 1524 1525 1526 1527
static void
n_tty_receive_buf_closing(struct tty_struct *tty, const unsigned char *cp,
			  char *fp, int count)
{
	char flag = TTY_NORMAL;

	while (count--) {
		if (fp)
			flag = *fp++;
		if (likely(flag == TTY_NORMAL))
			n_tty_receive_char_closing(tty, *cp++);
	}
}

1528 1529
static void
n_tty_receive_buf_standard(struct tty_struct *tty, const unsigned char *cp,
1530 1531 1532 1533 1534 1535 1536 1537 1538 1539 1540 1541 1542 1543 1544 1545 1546 1547 1548
			  char *fp, int count)
{
	struct n_tty_data *ldata = tty->disc_data;
	char flag = TTY_NORMAL;

	while (count--) {
		if (fp)
			flag = *fp++;
		if (likely(flag == TTY_NORMAL)) {
			unsigned char c = *cp++;

			if (I_ISTRIP(tty))
				c &= 0x7f;
			if (I_IUCLC(tty) && L_IEXTEN(tty))
				c = tolower(c);
			if (L_EXTPROC(tty)) {
				put_tty_queue(c, ldata);
				continue;
			}
1549 1550 1551 1552 1553 1554 1555 1556
			if (!test_bit(c, ldata->char_map))
				n_tty_receive_char_inline(tty, c);
			else if (n_tty_receive_char_special(tty, c) && count) {
				if (fp)
					flag = *fp++;
				n_tty_receive_char_lnext(tty, *cp++, flag);
				count--;
			}
1557 1558 1559 1560 1561 1562 1563 1564
		} else
			n_tty_receive_char_flagged(tty, *cp++, flag);
	}
}

static void
n_tty_receive_buf_fast(struct tty_struct *tty, const unsigned char *cp,
		       char *fp, int count)
1565
{
1566
	struct n_tty_data *ldata = tty->disc_data;
1567 1568 1569 1570 1571
	char flag = TTY_NORMAL;

	while (count--) {
		if (fp)
			flag = *fp++;
1572 1573 1574 1575 1576 1577 1578 1579 1580 1581 1582 1583
		if (likely(flag == TTY_NORMAL)) {
			unsigned char c = *cp++;

			if (!test_bit(c, ldata->char_map))
				n_tty_receive_char_fast(tty, c);
			else if (n_tty_receive_char_special(tty, c) && count) {
				if (fp)
					flag = *fp++;
				n_tty_receive_char_lnext(tty, *cp++, flag);
				count--;
			}
		} else
1584 1585 1586 1587
			n_tty_receive_char_flagged(tty, *cp++, flag);
	}
}

1588 1589
static void __receive_buf(struct tty_struct *tty, const unsigned char *cp,
			  char *fp, int count)
L
Linus Torvalds 已提交
1590
{
1591
	struct n_tty_data *ldata = tty->disc_data;
1592
	bool preops = I_ISTRIP(tty) || (I_IUCLC(tty) && L_IEXTEN(tty));
L
Linus Torvalds 已提交
1593

1594 1595
	if (ldata->real_raw)
		n_tty_receive_buf_real_raw(tty, cp, fp, count);
1596
	else if (ldata->raw || (L_EXTPROC(tty) && !preops))
1597
		n_tty_receive_buf_raw(tty, cp, fp, count);
1598 1599
	else if (tty->closing && !L_EXTPROC(tty))
		n_tty_receive_buf_closing(tty, cp, fp, count);
1600
	else {
1601 1602 1603 1604 1605 1606 1607 1608 1609
		if (ldata->lnext) {
			char flag = TTY_NORMAL;

			if (fp)
				flag = *fp++;
			n_tty_receive_char_lnext(tty, *cp++, flag);
			count--;
		}

1610
		if (!preops && !I_PARMRK(tty))
1611 1612 1613
			n_tty_receive_buf_fast(tty, cp, fp, count);
		else
			n_tty_receive_buf_standard(tty, cp, fp, count);
P
Peter Hurley 已提交
1614 1615

		flush_echoes(tty);
A
Alan Cox 已提交
1616 1617
		if (tty->ops->flush_chars)
			tty->ops->flush_chars(tty);
L
Linus Torvalds 已提交
1618 1619
	}

1620 1621 1622 1623 1624 1625
	if (ldata->icanon && !L_EXTPROC(tty))
		return;

	/* publish read_head to consumer */
	smp_store_release(&ldata->commit_head, ldata->read_head);

1626
	if (read_cnt(ldata)) {
L
Linus Torvalds 已提交
1627
		kill_fasync(&tty->fasync, SIGIO, POLL_IN);
1628
		wake_up_interruptible_poll(&tty->read_wait, EPOLLIN);
L
Linus Torvalds 已提交
1629 1630 1631
	}
}

1632 1633 1634 1635 1636 1637 1638 1639 1640 1641 1642 1643 1644 1645 1646 1647 1648 1649 1650 1651 1652 1653 1654 1655 1656 1657 1658 1659 1660 1661 1662 1663 1664
/**
 *	n_tty_receive_buf_common	-	process input
 *	@tty: device to receive input
 *	@cp: input chars
 *	@fp: flags for each char (if NULL, all chars are TTY_NORMAL)
 *	@count: number of input chars in @cp
 *
 *	Called by the terminal driver when a block of characters has
 *	been received. This function must be called from soft contexts
 *	not from interrupt context. The driver is responsible for making
 *	calls one at a time and in order (or using flush_to_ldisc)
 *
 *	Returns the # of input chars from @cp which were processed.
 *
 *	In canonical mode, the maximum line length is 4096 chars (including
 *	the line termination char); lines longer than 4096 chars are
 *	truncated. After 4095 chars, input data is still processed but
 *	not stored. Overflow processing ensures the tty can always
 *	receive more input until at least one line can be read.
 *
 *	In non-canonical mode, the read buffer will only accept 4095 chars;
 *	this provides the necessary space for a newline char if the input
 *	mode is switched to canonical.
 *
 *	Note it is possible for the read buffer to _contain_ 4096 chars
 *	in non-canonical mode: the read buffer could already contain the
 *	maximum canon line of 4096 chars when the mode is switched to
 *	non-canonical.
 *
 *	n_tty_receive_buf()/producer path:
 *		claims non-exclusive termios_rwsem
 *		publishes commit_head or canon_head
 */
P
Peter Hurley 已提交
1665 1666 1667
static int
n_tty_receive_buf_common(struct tty_struct *tty, const unsigned char *cp,
			 char *fp, int count, int flow)
1668 1669
{
	struct n_tty_data *ldata = tty->disc_data;
1670
	int room, n, rcvd = 0, overflow;
1671

1672 1673
	down_read(&tty->termios_rwsem);

1674
	while (1) {
1675
		/*
P
Peter Hurley 已提交
1676 1677
		 * When PARMRK is set, each input char may take up to 3 chars
		 * in the read buf; reduce the buffer space avail by 3x
1678 1679 1680 1681 1682 1683 1684 1685 1686 1687 1688 1689
		 *
		 * If we are doing input canonicalization, and there are no
		 * pending newlines, let characters through without limit, so
		 * that erase characters will be handled.  Other excess
		 * characters will be beeped.
		 *
		 * paired with store in *_copy_from_read_buf() -- guarantees
		 * the consumer has loaded the data in read_buf up to the new
		 * read_tail (so this producer will not overwrite unread data)
		 */
		size_t tail = smp_load_acquire(&ldata->read_tail);

1690
		room = N_TTY_BUF_SIZE - (ldata->read_head - tail);
1691
		if (I_PARMRK(tty))
1692 1693 1694 1695 1696 1697 1698 1699 1700 1701
			room = (room + 2) / 3;
		room--;
		if (room <= 0) {
			overflow = ldata->icanon && ldata->canon_head == tail;
			if (overflow && room < 0)
				ldata->read_head--;
			room = overflow;
			ldata->no_room = flow && !room;
		} else
			overflow = 0;
1702

1703
		n = min(count, room);
1704
		if (!n)
1705
			break;
1706 1707 1708 1709 1710

		/* ignore parity errors if handling overflow */
		if (!overflow || !fp || *fp != TTY_PARITY)
			__receive_buf(tty, cp, fp, n);

1711 1712 1713 1714 1715
		cp += n;
		if (fp)
			fp += n;
		count -= n;
		rcvd += n;
1716
	}
1717

1718
	tty->receive_room = room;
1719 1720 1721 1722 1723 1724 1725 1726 1727 1728 1729

	/* Unthrottle if handling overflow on pty */
	if (tty->driver->type == TTY_DRIVER_TYPE_PTY) {
		if (overflow) {
			tty_set_flow_change(tty, TTY_UNTHROTTLE_SAFE);
			tty_unthrottle_safe(tty);
			__tty_set_flow_change(tty, 0);
		}
	} else
		n_tty_check_throttle(tty);

1730 1731
	up_read(&tty->termios_rwsem);

1732
	return rcvd;
1733 1734
}

P
Peter Hurley 已提交
1735 1736 1737 1738 1739 1740 1741 1742 1743 1744 1745 1746
static void n_tty_receive_buf(struct tty_struct *tty, const unsigned char *cp,
			      char *fp, int count)
{
	n_tty_receive_buf_common(tty, cp, fp, count, 0);
}

static int n_tty_receive_buf2(struct tty_struct *tty, const unsigned char *cp,
			      char *fp, int count)
{
	return n_tty_receive_buf_common(tty, cp, fp, count, 1);
}

L
Linus Torvalds 已提交
1747 1748 1749 1750 1751 1752 1753
/**
 *	n_tty_set_termios	-	termios data changed
 *	@tty: terminal
 *	@old: previous data
 *
 *	Called by the tty layer when the user changes termios flags so
 *	that the line discipline can plan ahead. This function cannot sleep
1754
 *	and is protected from re-entry by the tty layer. The user is
L
Linus Torvalds 已提交
1755 1756
 *	guaranteed that this function will not be re-entered or in progress
 *	when the ldisc is closed.
1757
 *
1758
 *	Locking: Caller holds tty->termios_rwsem
L
Linus Torvalds 已提交
1759
 */
1760 1761

static void n_tty_set_termios(struct tty_struct *tty, struct ktermios *old)
L
Linus Torvalds 已提交
1762
{
1763
	struct n_tty_data *ldata = tty->disc_data;
1764

1765
	if (!old || (old->c_lflag ^ tty->termios.c_lflag) & (ICANON | EXTPROC)) {
1766
		bitmap_zero(ldata->read_flags, N_TTY_BUF_SIZE);
1767 1768 1769 1770 1771 1772 1773 1774 1775 1776
		ldata->line_start = ldata->read_tail;
		if (!L_ICANON(tty) || !read_cnt(ldata)) {
			ldata->canon_head = ldata->read_tail;
			ldata->push = 0;
		} else {
			set_bit((ldata->read_head - 1) & (N_TTY_BUF_SIZE - 1),
				ldata->read_flags);
			ldata->canon_head = ldata->read_head;
			ldata->push = 1;
		}
1777
		ldata->commit_head = ldata->read_head;
1778
		ldata->erasing = 0;
1779
		ldata->lnext = 0;
1780 1781
	}

1782
	ldata->icanon = (L_ICANON(tty) != 0);
P
Peter Hurley 已提交
1783

L
Linus Torvalds 已提交
1784 1785 1786 1787
	if (I_ISTRIP(tty) || I_IUCLC(tty) || I_IGNCR(tty) ||
	    I_ICRNL(tty) || I_INLCR(tty) || L_ICANON(tty) ||
	    I_IXON(tty) || L_ISIG(tty) || L_ECHO(tty) ||
	    I_PARMRK(tty)) {
1788
		bitmap_zero(ldata->char_map, 256);
L
Linus Torvalds 已提交
1789 1790

		if (I_IGNCR(tty) || I_ICRNL(tty))
1791
			set_bit('\r', ldata->char_map);
L
Linus Torvalds 已提交
1792
		if (I_INLCR(tty))
1793
			set_bit('\n', ldata->char_map);
L
Linus Torvalds 已提交
1794 1795

		if (L_ICANON(tty)) {
1796 1797 1798 1799 1800
			set_bit(ERASE_CHAR(tty), ldata->char_map);
			set_bit(KILL_CHAR(tty), ldata->char_map);
			set_bit(EOF_CHAR(tty), ldata->char_map);
			set_bit('\n', ldata->char_map);
			set_bit(EOL_CHAR(tty), ldata->char_map);
L
Linus Torvalds 已提交
1801
			if (L_IEXTEN(tty)) {
1802 1803 1804
				set_bit(WERASE_CHAR(tty), ldata->char_map);
				set_bit(LNEXT_CHAR(tty), ldata->char_map);
				set_bit(EOL2_CHAR(tty), ldata->char_map);
L
Linus Torvalds 已提交
1805 1806
				if (L_ECHO(tty))
					set_bit(REPRINT_CHAR(tty),
1807
						ldata->char_map);
L
Linus Torvalds 已提交
1808 1809 1810
			}
		}
		if (I_IXON(tty)) {
1811 1812
			set_bit(START_CHAR(tty), ldata->char_map);
			set_bit(STOP_CHAR(tty), ldata->char_map);
L
Linus Torvalds 已提交
1813 1814
		}
		if (L_ISIG(tty)) {
1815 1816 1817
			set_bit(INTR_CHAR(tty), ldata->char_map);
			set_bit(QUIT_CHAR(tty), ldata->char_map);
			set_bit(SUSP_CHAR(tty), ldata->char_map);
L
Linus Torvalds 已提交
1818
		}
1819
		clear_bit(__DISABLED_CHAR, ldata->char_map);
1820 1821
		ldata->raw = 0;
		ldata->real_raw = 0;
L
Linus Torvalds 已提交
1822
	} else {
1823
		ldata->raw = 1;
L
Linus Torvalds 已提交
1824 1825 1826
		if ((I_IGNBRK(tty) || (!I_BRKINT(tty) && !I_PARMRK(tty))) &&
		    (I_IGNPAR(tty) || !I_INPCK(tty)) &&
		    (tty->driver->flags & TTY_DRIVER_REAL_RAW))
1827
			ldata->real_raw = 1;
L
Linus Torvalds 已提交
1828
		else
1829
			ldata->real_raw = 0;
L
Linus Torvalds 已提交
1830
	}
1831 1832 1833 1834
	/*
	 * Fix tty hang when I_IXON(tty) is cleared, but the tty
	 * been stopped by STOP_CHAR(tty) before it.
	 */
P
Peter Hurley 已提交
1835
	if (!I_IXON(tty) && old && (old->c_iflag & IXON) && !tty->flow_stopped) {
1836
		start_tty(tty);
P
Peter Hurley 已提交
1837 1838
		process_echoes(tty);
	}
1839

A
Alan Cox 已提交
1840
	/* The termios change make the tty ready for I/O */
1841 1842
	wake_up_interruptible(&tty->write_wait);
	wake_up_interruptible(&tty->read_wait);
L
Linus Torvalds 已提交
1843 1844 1845 1846 1847 1848
}

/**
 *	n_tty_close		-	close the ldisc for this tty
 *	@tty: device
 *
1849 1850
 *	Called from the terminal layer when this line discipline is
 *	being shut down, either because of a close or becsuse of a
L
Linus Torvalds 已提交
1851 1852 1853
 *	discipline change. The function will not be called while other
 *	ldisc methods are in progress.
 */
1854

L
Linus Torvalds 已提交
1855 1856
static void n_tty_close(struct tty_struct *tty)
{
J
Jiri Slaby 已提交
1857 1858
	struct n_tty_data *ldata = tty->disc_data;

1859 1860 1861
	if (tty->link)
		n_tty_packet_mode_flush(tty);

1862
	vfree(ldata);
J
Jiri Slaby 已提交
1863
	tty->disc_data = NULL;
L
Linus Torvalds 已提交
1864 1865 1866 1867 1868 1869
}

/**
 *	n_tty_open		-	open an ldisc
 *	@tty: terminal to open
 *
1870
 *	Called when this line discipline is being attached to the
L
Linus Torvalds 已提交
1871 1872 1873 1874 1875 1876 1877
 *	terminal device. Can sleep. Called serialized so that no
 *	other events will occur in parallel. No further open will occur
 *	until a close.
 */

static int n_tty_open(struct tty_struct *tty)
{
J
Jiri Slaby 已提交
1878 1879
	struct n_tty_data *ldata;

1880 1881
	/* Currently a malloc failure here can panic */
	ldata = vmalloc(sizeof(*ldata));
J
Jiri Slaby 已提交
1882 1883 1884
	if (!ldata)
		goto err;

1885
	ldata->overrun_time = jiffies;
1886 1887
	mutex_init(&ldata->atomic_read_lock);
	mutex_init(&ldata->output_lock);
1888

J
Jiri Slaby 已提交
1889
	tty->disc_data = ldata;
1890
	reset_buffer_flags(tty->disc_data);
1891
	ldata->column = 0;
1892 1893 1894 1895
	ldata->canon_column = 0;
	ldata->num_overrun = 0;
	ldata->no_room = 0;
	ldata->lnext = 0;
L
Linus Torvalds 已提交
1896
	tty->closing = 0;
1897 1898 1899 1900
	/* indicate buffer work may resume */
	clear_bit(TTY_LDISC_HALTED, &tty->flags);
	n_tty_set_termios(tty, NULL);
	tty_unthrottle(tty);
J
Jiri Slaby 已提交
1901

L
Linus Torvalds 已提交
1902
	return 0;
J
Jiri Slaby 已提交
1903
err:
1904
	return -ENOMEM;
L
Linus Torvalds 已提交
1905 1906
}

1907
static inline int input_available_p(struct tty_struct *tty, int poll)
L
Linus Torvalds 已提交
1908
{
1909
	struct n_tty_data *ldata = tty->disc_data;
1910
	int amt = poll && !TIME_CHAR(tty) && MIN_CHAR(tty) ? MIN_CHAR(tty) : 1;
1911

1912 1913 1914
	if (ldata->icanon && !L_EXTPROC(tty))
		return ldata->canon_head != ldata->read_tail;
	else
1915
		return ldata->commit_head - ldata->read_tail >= amt;
L
Linus Torvalds 已提交
1916 1917 1918
}

/**
1919
 *	copy_from_read_buf	-	copy read data directly
L
Linus Torvalds 已提交
1920 1921 1922 1923
 *	@tty: terminal device
 *	@b: user data
 *	@nr: size of data
 *
1924
 *	Helper function to speed up n_tty_read.  It is only called when
L
Linus Torvalds 已提交
1925 1926 1927 1928 1929 1930
 *	ICANON is off; it copies characters straight from the tty queue to
 *	user space directly.  It can be profitably called twice; once to
 *	drain the space from the tail pointer to the (physical) end of the
 *	buffer, and once to drain the space from the (physical) beginning of
 *	the buffer to head pointer.
 *
1931
 *	Called under the ldata->atomic_read_lock sem
L
Linus Torvalds 已提交
1932
 *
1933 1934 1935
 *	n_tty_read()/consumer path:
 *		caller holds non-exclusive termios_rwsem
 *		read_tail published
L
Linus Torvalds 已提交
1936
 */
1937

A
Alan Cox 已提交
1938
static int copy_from_read_buf(struct tty_struct *tty,
L
Linus Torvalds 已提交
1939 1940 1941 1942
				      unsigned char __user **b,
				      size_t *nr)

{
1943
	struct n_tty_data *ldata = tty->disc_data;
L
Linus Torvalds 已提交
1944 1945
	int retval;
	size_t n;
1946
	bool is_eof;
1947
	size_t head = smp_load_acquire(&ldata->commit_head);
1948
	size_t tail = ldata->read_tail & (N_TTY_BUF_SIZE - 1);
L
Linus Torvalds 已提交
1949 1950

	retval = 0;
1951
	n = min(head - ldata->read_tail, N_TTY_BUF_SIZE - tail);
L
Linus Torvalds 已提交
1952 1953
	n = min(*nr, n);
	if (n) {
P
Peter Hurley 已提交
1954 1955
		const unsigned char *from = read_buf_addr(ldata, tail);
		retval = copy_to_user(*b, from, n);
L
Linus Torvalds 已提交
1956
		n -= retval;
P
Peter Hurley 已提交
1957
		is_eof = n == 1 && *from == EOF_CHAR(tty);
1958
		tty_audit_add_data(tty, from, n);
1959
		smp_store_release(&ldata->read_tail, ldata->read_tail + n);
1960
		/* Turn single EOF into zero-length read */
1961 1962
		if (L_EXTPROC(tty) && ldata->icanon && is_eof &&
		    (head == ldata->read_tail))
1963
			n = 0;
L
Linus Torvalds 已提交
1964 1965 1966 1967 1968 1969
		*b += n;
		*nr -= n;
	}
	return retval;
}

1970
/**
1971
 *	canon_copy_from_read_buf	-	copy read data in canonical mode
1972 1973 1974 1975 1976
 *	@tty: terminal device
 *	@b: user data
 *	@nr: size of data
 *
 *	Helper function for n_tty_read.  It is only called when ICANON is on;
1977 1978
 *	it copies one line of input up to and including the line-delimiting
 *	character into the user-space buffer.
1979
 *
1980 1981 1982 1983 1984 1985
 *	NB: When termios is changed from non-canonical to canonical mode and
 *	the read buffer contains data, n_tty_set_termios() simulates an EOF
 *	push (as if C-d were input) _without_ the DISABLED_CHAR in the buffer.
 *	This causes data already processed as input to be immediately available
 *	as input although a newline has not been received.
 *
1986
 *	Called under the atomic_read_lock mutex
1987 1988 1989 1990
 *
 *	n_tty_read()/consumer path:
 *		caller holds non-exclusive termios_rwsem
 *		read_tail published
1991 1992
 */

1993 1994 1995
static int canon_copy_from_read_buf(struct tty_struct *tty,
				    unsigned char __user **b,
				    size_t *nr)
1996 1997
{
	struct n_tty_data *ldata = tty->disc_data;
1998
	size_t n, size, more, c;
1999 2000 2001
	size_t eol;
	size_t tail;
	int ret, found = 0;
2002 2003

	/* N.B. avoid overrun if nr == 0 */
2004
	if (!*nr)
2005
		return 0;
2006

2007 2008
	n = min(*nr + 1, smp_load_acquire(&ldata->canon_head) - ldata->read_tail);

2009
	tail = ldata->read_tail & (N_TTY_BUF_SIZE - 1);
2010 2011
	size = min_t(size_t, tail + n, N_TTY_BUF_SIZE);

2012
	n_tty_trace("%s: nr:%zu tail:%zu n:%zu size:%zu\n",
2013 2014 2015 2016 2017 2018 2019
		    __func__, *nr, tail, n, size);

	eol = find_next_bit(ldata->read_flags, size, tail);
	more = n - (size - tail);
	if (eol == N_TTY_BUF_SIZE && more) {
		/* scan wrapped without finding set bit */
		eol = find_next_bit(ldata->read_flags, more, 0);
2020 2021 2022
		found = eol != more;
	} else
		found = eol != size;
2023

2024
	n = eol - tail;
2025 2026
	if (n > N_TTY_BUF_SIZE)
		n += N_TTY_BUF_SIZE;
2027
	c = n + found;
2028

2029 2030 2031
	if (!found || read_buf(ldata, eol) != __DISABLED_CHAR) {
		c = min(*nr, c);
		n = c;
P
Peter Hurley 已提交
2032
	}
2033

P
Peter Hurley 已提交
2034 2035
	n_tty_trace("%s: eol:%zu found:%d n:%zu c:%zu tail:%zu more:%zu\n",
		    __func__, eol, found, n, c, tail, more);
2036

P
Peter Hurley 已提交
2037
	ret = tty_copy_to_user(tty, *b, tail, n);
2038 2039 2040 2041 2042
	if (ret)
		return -EFAULT;
	*b += n;
	*nr -= n;

2043
	if (found)
2044
		clear_bit(eol, ldata->read_flags);
2045
	smp_store_release(&ldata->read_tail, ldata->read_tail + c);
2046

P
Peter Hurley 已提交
2047
	if (found) {
2048 2049 2050 2051
		if (!ldata->push)
			ldata->line_start = ldata->read_tail;
		else
			ldata->push = 0;
2052
		tty_audit_push();
P
Peter Hurley 已提交
2053
	}
2054
	return 0;
2055 2056
}

2057
extern ssize_t redirected_tty_write(struct file *, const char __user *,
2058
							size_t, loff_t *);
L
Linus Torvalds 已提交
2059 2060 2061 2062 2063 2064 2065

/**
 *	job_control		-	check job control
 *	@tty: tty
 *	@file: file handle
 *
 *	Perform job control management checks on this file/tty descriptor
2066
 *	and if appropriate send any needed signals and return a negative
L
Linus Torvalds 已提交
2067
 *	error code if action should be taken.
A
Alan Cox 已提交
2068
 *
2069 2070 2071
 *	Locking: redirected write test is safe
 *		 current->signal->tty check is safe
 *		 ctrl_lock to safely reference tty->pgrp
L
Linus Torvalds 已提交
2072
 */
2073

L
Linus Torvalds 已提交
2074 2075 2076 2077 2078 2079 2080
static int job_control(struct tty_struct *tty, struct file *file)
{
	/* Job control check -- must be done at start and after
	   every sleep (POSIX.1 7.1.1.4). */
	/* NOTE: not yet done after every sleep pending a thorough
	   check of the logic of this change. -- jlc */
	/* don't stop on /dev/console */
2081
	if (file->f_op->write == redirected_tty_write)
2082 2083
		return 0;

2084
	return __tty_check_change(tty, SIGTTIN);
L
Linus Torvalds 已提交
2085
}
2086

L
Linus Torvalds 已提交
2087 2088

/**
2089
 *	n_tty_read		-	read function for tty
L
Linus Torvalds 已提交
2090 2091 2092 2093 2094 2095 2096 2097 2098 2099 2100
 *	@tty: tty device
 *	@file: file object
 *	@buf: userspace buffer pointer
 *	@nr: size of I/O
 *
 *	Perform reads for the line discipline. We are guaranteed that the
 *	line discipline will not be closed under us but we may get multiple
 *	parallel readers and must handle this ourselves. We may also get
 *	a hangup. Always called in user context, may sleep.
 *
 *	This code must be sure never to sleep through a hangup.
2101 2102 2103 2104
 *
 *	n_tty_read()/consumer path:
 *		claims non-exclusive termios_rwsem
 *		publishes read_tail
L
Linus Torvalds 已提交
2105
 */
2106

2107
static ssize_t n_tty_read(struct tty_struct *tty, struct file *file,
L
Linus Torvalds 已提交
2108 2109
			 unsigned char __user *buf, size_t nr)
{
2110
	struct n_tty_data *ldata = tty->disc_data;
L
Linus Torvalds 已提交
2111
	unsigned char __user *b = buf;
2112
	DEFINE_WAIT_FUNC(wait, woken_wake_function);
2113
	int c;
L
Linus Torvalds 已提交
2114 2115 2116
	int minimum, time;
	ssize_t retval = 0;
	long timeout;
A
Alan Cox 已提交
2117
	int packet;
2118
	size_t tail;
L
Linus Torvalds 已提交
2119 2120

	c = job_control(tty, file);
2121
	if (c < 0)
L
Linus Torvalds 已提交
2122
		return c;
2123

2124 2125 2126 2127 2128 2129 2130 2131 2132 2133 2134
	/*
	 *	Internal serialization of reads.
	 */
	if (file->f_flags & O_NONBLOCK) {
		if (!mutex_trylock(&ldata->atomic_read_lock))
			return -EAGAIN;
	} else {
		if (mutex_lock_interruptible(&ldata->atomic_read_lock))
			return -ERESTARTSYS;
	}

2135 2136
	down_read(&tty->termios_rwsem);

L
Linus Torvalds 已提交
2137 2138
	minimum = time = 0;
	timeout = MAX_SCHEDULE_TIMEOUT;
2139
	if (!ldata->icanon) {
L
Linus Torvalds 已提交
2140 2141
		minimum = MIN_CHAR(tty);
		if (minimum) {
2142
			time = (HZ / 10) * TIME_CHAR(tty);
L
Linus Torvalds 已提交
2143
		} else {
2144
			timeout = (HZ / 10) * TIME_CHAR(tty);
2145
			minimum = 1;
L
Linus Torvalds 已提交
2146 2147 2148
		}
	}

A
Alan Cox 已提交
2149
	packet = tty->packet;
2150
	tail = ldata->read_tail;
L
Linus Torvalds 已提交
2151 2152 2153 2154

	add_wait_queue(&tty->read_wait, &wait);
	while (nr) {
		/* First test for status change. */
A
Alan Cox 已提交
2155
		if (packet && tty->link->ctrl_status) {
L
Linus Torvalds 已提交
2156 2157 2158
			unsigned char cs;
			if (b != buf)
				break;
2159
			spin_lock_irq(&tty->link->ctrl_lock);
L
Linus Torvalds 已提交
2160 2161
			cs = tty->link->ctrl_status;
			tty->link->ctrl_status = 0;
2162
			spin_unlock_irq(&tty->link->ctrl_lock);
2163
			if (put_user(cs, b)) {
L
Linus Torvalds 已提交
2164 2165 2166
				retval = -EFAULT;
				break;
			}
2167
			b++;
L
Linus Torvalds 已提交
2168 2169 2170
			nr--;
			break;
		}
2171

L
Linus Torvalds 已提交
2172
		if (!input_available_p(tty, 0)) {
2173
			up_read(&tty->termios_rwsem);
2174 2175 2176 2177 2178 2179 2180 2181 2182 2183 2184 2185 2186 2187 2188 2189 2190 2191 2192 2193
			tty_buffer_flush_work(tty->port);
			down_read(&tty->termios_rwsem);
			if (!input_available_p(tty, 0)) {
				if (test_bit(TTY_OTHER_CLOSED, &tty->flags)) {
					retval = -EIO;
					break;
				}
				if (tty_hung_up_p(file))
					break;
				if (!timeout)
					break;
				if (file->f_flags & O_NONBLOCK) {
					retval = -EAGAIN;
					break;
				}
				if (signal_pending(current)) {
					retval = -ERESTARTSYS;
					break;
				}
				up_read(&tty->termios_rwsem);
2194

2195 2196
				timeout = wait_woken(&wait, TASK_INTERRUPTIBLE,
						timeout);
2197

2198 2199 2200
				down_read(&tty->termios_rwsem);
				continue;
			}
L
Linus Torvalds 已提交
2201 2202
		}

2203
		if (ldata->icanon && !L_EXTPROC(tty)) {
2204
			retval = canon_copy_from_read_buf(tty, &b, &nr);
2205
			if (retval)
L
Linus Torvalds 已提交
2206 2207 2208
				break;
		} else {
			int uncopied;
2209 2210 2211

			/* Deal with packet mode. */
			if (packet && b == buf) {
2212
				if (put_user(TIOCPKT_DATA, b)) {
2213 2214 2215
					retval = -EFAULT;
					break;
				}
2216
				b++;
2217 2218 2219
				nr--;
			}

L
Linus Torvalds 已提交
2220 2221 2222 2223 2224 2225 2226 2227
			uncopied = copy_from_read_buf(tty, &b, &nr);
			uncopied += copy_from_read_buf(tty, &b, &nr);
			if (uncopied) {
				retval = -EFAULT;
				break;
			}
		}

2228
		n_tty_check_unthrottle(tty);
L
Linus Torvalds 已提交
2229 2230 2231 2232 2233 2234

		if (b - buf >= minimum)
			break;
		if (time)
			timeout = time;
	}
2235 2236
	if (tail != ldata->read_tail)
		n_tty_kick_worker(tty);
2237 2238
	up_read(&tty->termios_rwsem);

L
Linus Torvalds 已提交
2239
	remove_wait_queue(&tty->read_wait, &wait);
2240 2241
	mutex_unlock(&ldata->atomic_read_lock);

P
Peter Hurley 已提交
2242 2243
	if (b - buf)
		retval = b - buf;
L
Linus Torvalds 已提交
2244 2245 2246 2247 2248

	return retval;
}

/**
2249
 *	n_tty_write		-	write function for tty
L
Linus Torvalds 已提交
2250 2251 2252 2253 2254
 *	@tty: tty device
 *	@file: file object
 *	@buf: userspace buffer pointer
 *	@nr: size of I/O
 *
2255
 *	Write function of the terminal device.  This is serialized with
L
Linus Torvalds 已提交
2256
 *	respect to other write callers but not to termios changes, reads
2257 2258 2259 2260 2261
 *	and other such events.  Since the receive code will echo characters,
 *	thus calling driver write methods, the output_lock is used in
 *	the output processing functions called here as well as in the
 *	echo processing function to protect the column state and space
 *	left in the buffer.
L
Linus Torvalds 已提交
2262 2263
 *
 *	This code must be sure never to sleep through a hangup.
2264 2265 2266 2267
 *
 *	Locking: output_lock to protect column state and space left
 *		 (note that the process_output*() functions take this
 *		  lock themselves)
L
Linus Torvalds 已提交
2268
 */
2269

2270
static ssize_t n_tty_write(struct tty_struct *tty, struct file *file,
2271
			   const unsigned char *buf, size_t nr)
L
Linus Torvalds 已提交
2272 2273
{
	const unsigned char *b = buf;
2274
	DEFINE_WAIT_FUNC(wait, woken_wake_function);
L
Linus Torvalds 已提交
2275 2276 2277 2278 2279 2280 2281 2282 2283 2284
	int c;
	ssize_t retval = 0;

	/* Job control check -- must be done at start (POSIX.1 7.1.1.4). */
	if (L_TOSTOP(tty) && file->f_op->write != redirected_tty_write) {
		retval = tty_check_change(tty);
		if (retval)
			return retval;
	}

2285 2286
	down_read(&tty->termios_rwsem);

2287 2288
	/* Write out any echoed characters that are still pending */
	process_echoes(tty);
A
Alan Cox 已提交
2289

L
Linus Torvalds 已提交
2290 2291 2292 2293 2294 2295 2296 2297 2298 2299
	add_wait_queue(&tty->write_wait, &wait);
	while (1) {
		if (signal_pending(current)) {
			retval = -ERESTARTSYS;
			break;
		}
		if (tty_hung_up_p(file) || (tty->link && !tty->link->count)) {
			retval = -EIO;
			break;
		}
P
Peter Hurley 已提交
2300
		if (O_OPOST(tty)) {
L
Linus Torvalds 已提交
2301
			while (nr > 0) {
2302
				ssize_t num = process_output_block(tty, b, nr);
L
Linus Torvalds 已提交
2303 2304 2305 2306 2307 2308 2309 2310 2311 2312 2313
				if (num < 0) {
					if (num == -EAGAIN)
						break;
					retval = num;
					goto break_out;
				}
				b += num;
				nr -= num;
				if (nr == 0)
					break;
				c = *b;
2314
				if (process_output(c, tty) < 0)
L
Linus Torvalds 已提交
2315 2316 2317
					break;
				b++; nr--;
			}
A
Alan Cox 已提交
2318 2319
			if (tty->ops->flush_chars)
				tty->ops->flush_chars(tty);
L
Linus Torvalds 已提交
2320
		} else {
2321 2322
			struct n_tty_data *ldata = tty->disc_data;

R
Roman Zippel 已提交
2323
			while (nr > 0) {
2324
				mutex_lock(&ldata->output_lock);
A
Alan Cox 已提交
2325
				c = tty->ops->write(tty, b, nr);
2326
				mutex_unlock(&ldata->output_lock);
R
Roman Zippel 已提交
2327 2328 2329 2330 2331 2332 2333 2334
				if (c < 0) {
					retval = c;
					goto break_out;
				}
				if (!c)
					break;
				b += c;
				nr -= c;
L
Linus Torvalds 已提交
2335 2336 2337 2338 2339 2340 2341 2342
			}
		}
		if (!nr)
			break;
		if (file->f_flags & O_NONBLOCK) {
			retval = -EAGAIN;
			break;
		}
2343 2344
		up_read(&tty->termios_rwsem);

2345
		wait_woken(&wait, TASK_INTERRUPTIBLE, MAX_SCHEDULE_TIMEOUT);
2346 2347

		down_read(&tty->termios_rwsem);
L
Linus Torvalds 已提交
2348 2349 2350
	}
break_out:
	remove_wait_queue(&tty->write_wait, &wait);
P
Peter Hurley 已提交
2351
	if (nr && tty->fasync)
2352
		set_bit(TTY_DO_WRITE_WAKEUP, &tty->flags);
2353
	up_read(&tty->termios_rwsem);
L
Linus Torvalds 已提交
2354 2355 2356 2357
	return (b - buf) ? b - buf : retval;
}

/**
2358
 *	n_tty_poll		-	poll method for N_TTY
L
Linus Torvalds 已提交
2359 2360 2361 2362 2363 2364 2365 2366 2367 2368 2369
 *	@tty: terminal device
 *	@file: file accessing it
 *	@wait: poll table
 *
 *	Called when the line discipline is asked to poll() for data or
 *	for special events. This code is not serialized with respect to
 *	other events save open/close.
 *
 *	This code must be sure never to sleep through a hangup.
 *	Called without the kernel lock held - fine
 */
2370

2371
static __poll_t n_tty_poll(struct tty_struct *tty, struct file *file,
2372
							poll_table *wait)
L
Linus Torvalds 已提交
2373
{
2374
	__poll_t mask = 0;
L
Linus Torvalds 已提交
2375 2376 2377

	poll_wait(file, &tty->read_wait, wait);
	poll_wait(file, &tty->write_wait, wait);
2378
	if (input_available_p(tty, 1))
2379
		mask |= EPOLLIN | EPOLLRDNORM;
2380 2381 2382
	else {
		tty_buffer_flush_work(tty->port);
		if (input_available_p(tty, 1))
2383
			mask |= EPOLLIN | EPOLLRDNORM;
2384
	}
L
Linus Torvalds 已提交
2385
	if (tty->packet && tty->link->ctrl_status)
2386
		mask |= EPOLLPRI | EPOLLIN | EPOLLRDNORM;
2387
	if (test_bit(TTY_OTHER_CLOSED, &tty->flags))
2388
		mask |= EPOLLHUP;
L
Linus Torvalds 已提交
2389
	if (tty_hung_up_p(file))
2390
		mask |= EPOLLHUP;
A
Alan Cox 已提交
2391 2392 2393
	if (tty->ops->write && !tty_is_writelocked(tty) &&
			tty_chars_in_buffer(tty) < WAKEUP_CHARS &&
			tty_write_room(tty) > 0)
2394
		mask |= EPOLLOUT | EPOLLWRNORM;
L
Linus Torvalds 已提交
2395 2396 2397
	return mask;
}

J
Jiri Slaby 已提交
2398
static unsigned long inq_canon(struct n_tty_data *ldata)
2399
{
2400
	size_t nr, head, tail;
2401

2402
	if (ldata->canon_head == ldata->read_tail)
2403
		return 0;
2404 2405
	head = ldata->canon_head;
	tail = ldata->read_tail;
2406
	nr = head - tail;
2407 2408
	/* Skip EOF-chars.. */
	while (head != tail) {
2409 2410
		if (test_bit(tail & (N_TTY_BUF_SIZE - 1), ldata->read_flags) &&
		    read_buf(ldata, tail) == __DISABLED_CHAR)
2411
			nr--;
2412
		tail++;
2413 2414 2415 2416 2417 2418 2419
	}
	return nr;
}

static int n_tty_ioctl(struct tty_struct *tty, struct file *file,
		       unsigned int cmd, unsigned long arg)
{
2420
	struct n_tty_data *ldata = tty->disc_data;
2421 2422 2423 2424 2425 2426
	int retval;

	switch (cmd) {
	case TIOCOUTQ:
		return put_user(tty_chars_in_buffer(tty), (int __user *) arg);
	case TIOCINQ:
2427
		down_write(&tty->termios_rwsem);
2428
		if (L_ICANON(tty) && !L_EXTPROC(tty))
J
Jiri Slaby 已提交
2429
			retval = inq_canon(ldata);
2430 2431 2432
		else
			retval = read_cnt(ldata);
		up_write(&tty->termios_rwsem);
2433 2434 2435 2436 2437 2438
		return put_user(retval, (unsigned int __user *) arg);
	default:
		return n_tty_ioctl_helper(tty, file, cmd, arg);
	}
}

2439
static struct tty_ldisc_ops n_tty_ops = {
P
Paul Fulghum 已提交
2440 2441 2442 2443 2444
	.magic           = TTY_LDISC_MAGIC,
	.name            = "n_tty",
	.open            = n_tty_open,
	.close           = n_tty_close,
	.flush_buffer    = n_tty_flush_buffer,
2445 2446
	.read            = n_tty_read,
	.write           = n_tty_write,
P
Paul Fulghum 已提交
2447 2448
	.ioctl           = n_tty_ioctl,
	.set_termios     = n_tty_set_termios,
2449
	.poll            = n_tty_poll,
P
Paul Fulghum 已提交
2450
	.receive_buf     = n_tty_receive_buf,
2451
	.write_wakeup    = n_tty_write_wakeup,
2452
	.receive_buf2	 = n_tty_receive_buf2,
L
Linus Torvalds 已提交
2453
};
2454 2455 2456 2457 2458

/**
 *	n_tty_inherit_ops	-	inherit N_TTY methods
 *	@ops: struct tty_ldisc_ops where to save N_TTY methods
 *
2459
 *	Enables a 'subclass' line discipline to 'inherit' N_TTY methods.
2460 2461 2462 2463
 */

void n_tty_inherit_ops(struct tty_ldisc_ops *ops)
{
2464
	*ops = n_tty_ops;
2465 2466 2467 2468
	ops->owner = NULL;
	ops->refcount = ops->flags = 0;
}
EXPORT_SYMBOL_GPL(n_tty_inherit_ops);
2469 2470 2471 2472 2473

void __init n_tty_init(void)
{
	tty_register_ldisc(N_TTY, &n_tty_ops);
}