evdev.c 21.5 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
/*
 * Event char devices, giving access to raw input device events.
 *
 * Copyright (c) 1999-2002 Vojtech Pavlik
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License version 2 as published by
 * the Free Software Foundation.
 */

#define EVDEV_MINOR_BASE	64
#define EVDEV_MINORS		32
#define EVDEV_BUFFER_SIZE	64

#include <linux/poll.h>
#include <linux/slab.h>
#include <linux/module.h>
#include <linux/init.h>
#include <linux/input.h>
#include <linux/major.h>
#include <linux/device.h>
22
#include <linux/compat.h>
L
Linus Torvalds 已提交
23 24 25 26 27 28 29 30

struct evdev {
	int exist;
	int open;
	int minor;
	char name[16];
	struct input_handle handle;
	wait_queue_head_t wait;
31 32
	struct evdev_client *grab;
	struct list_head client_list;
33 34
	spinlock_t client_lock; /* protects client_list */
	struct mutex mutex;
35
	struct device dev;
L
Linus Torvalds 已提交
36 37
};

38
struct evdev_client {
L
Linus Torvalds 已提交
39 40 41
	struct input_event buffer[EVDEV_BUFFER_SIZE];
	int head;
	int tail;
42
	spinlock_t buffer_lock; /* protects access to buffer, head and tail */
L
Linus Torvalds 已提交
43 44 45 46 47 48
	struct fasync_struct *fasync;
	struct evdev *evdev;
	struct list_head node;
};

static struct evdev *evdev_table[EVDEV_MINORS];
49
static DEFINE_MUTEX(evdev_table_mutex);
L
Linus Torvalds 已提交
50

51 52 53 54 55 56 57 58 59 60 61 62 63 64 65
static void evdev_pass_event(struct evdev_client *client,
			     struct input_event *event)
{
	/*
	 * Interrupts are disabled, just acquire the lock
	 */
	spin_lock(&client->buffer_lock);
	client->buffer[client->head++] = *event;
	client->head &= EVDEV_BUFFER_SIZE - 1;
	spin_unlock(&client->buffer_lock);

	kill_fasync(&client->fasync, SIGIO, POLL_IN);
}

/*
D
Dmitry Torokhov 已提交
66
 * Pass incoming event to all connected clients.
67 68 69
 */
static void evdev_event(struct input_handle *handle,
			unsigned int type, unsigned int code, int value)
L
Linus Torvalds 已提交
70 71
{
	struct evdev *evdev = handle->private;
72
	struct evdev_client *client;
73
	struct input_event event;
L
Linus Torvalds 已提交
74

75 76 77 78
	do_gettimeofday(&event.time);
	event.type = type;
	event.code = code;
	event.value = value;
L
Linus Torvalds 已提交
79

D
Dmitry Torokhov 已提交
80 81
	rcu_read_lock();

82 83 84 85 86 87
	client = rcu_dereference(evdev->grab);
	if (client)
		evdev_pass_event(client, &event);
	else
		list_for_each_entry_rcu(client, &evdev->client_list, node)
			evdev_pass_event(client, &event);
L
Linus Torvalds 已提交
88

D
Dmitry Torokhov 已提交
89 90
	rcu_read_unlock();

L
Linus Torvalds 已提交
91 92 93 94 95
	wake_up_interruptible(&evdev->wait);
}

static int evdev_fasync(int fd, struct file *file, int on)
{
96
	struct evdev_client *client = file->private_data;
L
Linus Torvalds 已提交
97
	int retval;
98

99
	retval = fasync_helper(fd, file, on, &client->fasync);
100

L
Linus Torvalds 已提交
101 102 103
	return retval < 0 ? retval : 0;
}

104
static int evdev_flush(struct file *file, fl_owner_t id)
L
Linus Torvalds 已提交
105
{
106 107
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
108 109 110 111 112
	int retval;

	retval = mutex_lock_interruptible(&evdev->mutex);
	if (retval)
		return retval;
113

114
	if (!evdev->exist)
115 116 117
		retval = -ENODEV;
	else
		retval = input_flush_device(&evdev->handle, file);
118

119 120
	mutex_unlock(&evdev->mutex);
	return retval;
L
Linus Torvalds 已提交
121 122
}

123
static void evdev_free(struct device *dev)
L
Linus Torvalds 已提交
124
{
125 126
	struct evdev *evdev = container_of(dev, struct evdev, dev);

L
Linus Torvalds 已提交
127 128 129
	kfree(evdev);
}

130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145
/*
 * Grabs an event device (along with underlying input device).
 * This function is called with evdev->mutex taken.
 */
static int evdev_grab(struct evdev *evdev, struct evdev_client *client)
{
	int error;

	if (evdev->grab)
		return -EBUSY;

	error = input_grab_device(&evdev->handle);
	if (error)
		return error;

	rcu_assign_pointer(evdev->grab, client);
D
Dmitry Torokhov 已提交
146
	synchronize_rcu();
147 148 149 150 151 152 153 154 155 156

	return 0;
}

static int evdev_ungrab(struct evdev *evdev, struct evdev_client *client)
{
	if (evdev->grab != client)
		return  -EINVAL;

	rcu_assign_pointer(evdev->grab, NULL);
D
Dmitry Torokhov 已提交
157
	synchronize_rcu();
158 159 160 161 162 163 164 165 166 167 168
	input_release_device(&evdev->handle);

	return 0;
}

static void evdev_attach_client(struct evdev *evdev,
				struct evdev_client *client)
{
	spin_lock(&evdev->client_lock);
	list_add_tail_rcu(&client->node, &evdev->client_list);
	spin_unlock(&evdev->client_lock);
D
Dmitry Torokhov 已提交
169
	synchronize_rcu();
170 171 172 173 174 175 176 177
}

static void evdev_detach_client(struct evdev *evdev,
				struct evdev_client *client)
{
	spin_lock(&evdev->client_lock);
	list_del_rcu(&client->node);
	spin_unlock(&evdev->client_lock);
D
Dmitry Torokhov 已提交
178
	synchronize_rcu();
179 180 181 182 183 184 185 186 187 188 189 190
}

static int evdev_open_device(struct evdev *evdev)
{
	int retval;

	retval = mutex_lock_interruptible(&evdev->mutex);
	if (retval)
		return retval;

	if (!evdev->exist)
		retval = -ENODEV;
191
	else if (!evdev->open++) {
192
		retval = input_open_device(&evdev->handle);
193 194 195
		if (retval)
			evdev->open--;
	}
196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226

	mutex_unlock(&evdev->mutex);
	return retval;
}

static void evdev_close_device(struct evdev *evdev)
{
	mutex_lock(&evdev->mutex);

	if (evdev->exist && !--evdev->open)
		input_close_device(&evdev->handle);

	mutex_unlock(&evdev->mutex);
}

/*
 * Wake up users waiting for IO so they can disconnect from
 * dead device.
 */
static void evdev_hangup(struct evdev *evdev)
{
	struct evdev_client *client;

	spin_lock(&evdev->client_lock);
	list_for_each_entry(client, &evdev->client_list, node)
		kill_fasync(&client->fasync, SIGIO, POLL_HUP);
	spin_unlock(&evdev->client_lock);

	wake_up_interruptible(&evdev->wait);
}

227
static int evdev_release(struct inode *inode, struct file *file)
L
Linus Torvalds 已提交
228
{
229 230
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
L
Linus Torvalds 已提交
231

232 233 234 235
	mutex_lock(&evdev->mutex);
	if (evdev->grab == client)
		evdev_ungrab(evdev, client);
	mutex_unlock(&evdev->mutex);
L
Linus Torvalds 已提交
236 237

	evdev_fasync(-1, file, 0);
238
	evdev_detach_client(evdev, client);
239
	kfree(client);
L
Linus Torvalds 已提交
240

241
	evdev_close_device(evdev);
242
	put_device(&evdev->dev);
L
Linus Torvalds 已提交
243 244 245 246

	return 0;
}

247
static int evdev_open(struct inode *inode, struct file *file)
L
Linus Torvalds 已提交
248
{
249
	struct evdev *evdev;
250
	struct evdev_client *client;
L
Linus Torvalds 已提交
251
	int i = iminor(inode) - EVDEV_MINOR_BASE;
252
	int error;
L
Linus Torvalds 已提交
253

254
	if (i >= EVDEV_MINORS)
L
Linus Torvalds 已提交
255 256
		return -ENODEV;

257 258 259
	error = mutex_lock_interruptible(&evdev_table_mutex);
	if (error)
		return error;
260
	evdev = evdev_table[i];
261 262 263
	if (evdev)
		get_device(&evdev->dev);
	mutex_unlock(&evdev_table_mutex);
264

265
	if (!evdev)
L
Linus Torvalds 已提交
266 267
		return -ENODEV;

268
	client = kzalloc(sizeof(struct evdev_client), GFP_KERNEL);
269 270 271 272
	if (!client) {
		error = -ENOMEM;
		goto err_put_evdev;
	}
L
Linus Torvalds 已提交
273

274
	spin_lock_init(&client->buffer_lock);
275
	client->evdev = evdev;
276
	evdev_attach_client(evdev, client);
L
Linus Torvalds 已提交
277

278 279 280
	error = evdev_open_device(evdev);
	if (error)
		goto err_free_client;
L
Linus Torvalds 已提交
281

282
	file->private_data = client;
L
Linus Torvalds 已提交
283
	return 0;
284 285

 err_free_client:
286
	evdev_detach_client(evdev, client);
287 288 289 290
	kfree(client);
 err_put_evdev:
	put_device(&evdev->dev);
	return error;
L
Linus Torvalds 已提交
291 292
}

293
#ifdef CONFIG_COMPAT
294

295 296 297 298 299 300 301
struct input_event_compat {
	struct compat_timeval time;
	__u16 type;
	__u16 code;
	__s32 value;
};

302 303
/* Note to the author of this code: did it ever occur to
   you why the ifdefs are needed? Think about it again. -AK */
304
#ifdef CONFIG_X86_64
305
#  define COMPAT_TEST is_compat_task()
306
#elif defined(CONFIG_IA64)
A
Al Viro 已提交
307
#  define COMPAT_TEST IS_IA32_PROCESS(task_pt_regs(current))
308
#elif defined(CONFIG_S390)
309
#  define COMPAT_TEST test_thread_flag(TIF_31BIT)
310
#elif defined(CONFIG_MIPS)
311
#  define COMPAT_TEST test_thread_flag(TIF_32BIT_ADDR)
312 313 314 315
#else
#  define COMPAT_TEST test_thread_flag(TIF_32BIT)
#endif

316
static inline size_t evdev_event_size(void)
317
{
318 319 320
	return COMPAT_TEST ?
		sizeof(struct input_event_compat) : sizeof(struct input_event);
}
321

322 323
static int evdev_event_from_user(const char __user *buffer,
				 struct input_event *event)
324 325 326 327
{
	if (COMPAT_TEST) {
		struct input_event_compat compat_event;

328 329
		if (copy_from_user(&compat_event, buffer,
				   sizeof(struct input_event_compat)))
330 331 332 333 334 335 336 337 338 339
			return -EFAULT;

		event->time.tv_sec = compat_event.time.tv_sec;
		event->time.tv_usec = compat_event.time.tv_usec;
		event->type = compat_event.type;
		event->code = compat_event.code;
		event->value = compat_event.value;

	} else {
		if (copy_from_user(event, buffer, sizeof(struct input_event)))
340 341 342
			return -EFAULT;
	}

343
	return 0;
344 345
}

346 347
static int evdev_event_to_user(char __user *buffer,
				const struct input_event *event)
L
Linus Torvalds 已提交
348
{
349 350
	if (COMPAT_TEST) {
		struct input_event_compat compat_event;
L
Linus Torvalds 已提交
351

352 353 354 355 356
		compat_event.time.tv_sec = event->time.tv_sec;
		compat_event.time.tv_usec = event->time.tv_usec;
		compat_event.type = event->type;
		compat_event.code = event->code;
		compat_event.value = event->value;
357

358 359
		if (copy_to_user(buffer, &compat_event,
				 sizeof(struct input_event_compat)))
360
			return -EFAULT;
L
Linus Torvalds 已提交
361

362 363
	} else {
		if (copy_to_user(buffer, event, sizeof(struct input_event)))
L
Linus Torvalds 已提交
364 365 366
			return -EFAULT;
	}

367
	return 0;
L
Linus Torvalds 已提交
368 369
}

370 371 372
#else

static inline size_t evdev_event_size(void)
373
{
374 375
	return sizeof(struct input_event);
}
376

377 378
static int evdev_event_from_user(const char __user *buffer,
				 struct input_event *event)
379 380 381
{
	if (copy_from_user(event, buffer, sizeof(struct input_event)))
		return -EFAULT;
382

383 384
	return 0;
}
385

386 387
static int evdev_event_to_user(char __user *buffer,
				const struct input_event *event)
388 389 390
{
	if (copy_to_user(buffer, event, sizeof(struct input_event)))
		return -EFAULT;
391

392 393 394 395 396
	return 0;
}

#endif /* CONFIG_COMPAT */

397 398
static ssize_t evdev_write(struct file *file, const char __user *buffer,
			   size_t count, loff_t *ppos)
399
{
400 401
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
402
	struct input_event event;
403
	int retval;
404

405 406 407 408 409 410 411 412
	retval = mutex_lock_interruptible(&evdev->mutex);
	if (retval)
		return retval;

	if (!evdev->exist) {
		retval = -ENODEV;
		goto out;
	}
413

414 415
	while (retval < count) {

416 417 418 419 420 421 422
		if (evdev_event_from_user(buffer + retval, &event)) {
			retval = -EFAULT;
			goto out;
		}

		input_inject_event(&evdev->handle,
				   event.type, event.code, event.value);
423
		retval += evdev_event_size();
424 425
	}

426 427
 out:
	mutex_unlock(&evdev->mutex);
428 429 430
	return retval;
}

431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450
static int evdev_fetch_next_event(struct evdev_client *client,
				  struct input_event *event)
{
	int have_event;

	spin_lock_irq(&client->buffer_lock);

	have_event = client->head != client->tail;
	if (have_event) {
		*event = client->buffer[client->tail++];
		client->tail &= EVDEV_BUFFER_SIZE - 1;
	}

	spin_unlock_irq(&client->buffer_lock);

	return have_event;
}

static ssize_t evdev_read(struct file *file, char __user *buffer,
			  size_t count, loff_t *ppos)
L
Linus Torvalds 已提交
451
{
452 453
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
454
	struct input_event event;
L
Linus Torvalds 已提交
455 456
	int retval;

457
	if (count < evdev_event_size())
L
Linus Torvalds 已提交
458 459
		return -EINVAL;

460 461
	if (client->head == client->tail && evdev->exist &&
	    (file->f_flags & O_NONBLOCK))
L
Linus Torvalds 已提交
462 463
		return -EAGAIN;

464 465
	retval = wait_event_interruptible(evdev->wait,
		client->head != client->tail || !evdev->exist);
L
Linus Torvalds 已提交
466 467 468
	if (retval)
		return retval;

469
	if (!evdev->exist)
L
Linus Torvalds 已提交
470 471
		return -ENODEV;

472 473
	while (retval + evdev_event_size() <= count &&
	       evdev_fetch_next_event(client, &event)) {
474

475
		if (evdev_event_to_user(buffer + retval, &event))
476 477 478
			return -EFAULT;

		retval += evdev_event_size();
L
Linus Torvalds 已提交
479 480 481 482 483 484 485 486
	}

	return retval;
}

/* No kernel lock - fine */
static unsigned int evdev_poll(struct file *file, poll_table *wait)
{
487 488
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
489

490 491 492
	poll_wait(file, &evdev->wait, wait);
	return ((client->head == client->tail) ? 0 : (POLLIN | POLLRDNORM)) |
		(evdev->exist ? 0 : (POLLHUP | POLLERR));
L
Linus Torvalds 已提交
493 494
}

495 496 497
#ifdef CONFIG_COMPAT

#define BITS_PER_LONG_COMPAT (sizeof(compat_long_t) * 8)
498
#define BITS_TO_LONGS_COMPAT(x) ((((x) - 1) / BITS_PER_LONG_COMPAT) + 1)
499 500 501 502 503 504 505 506

#ifdef __BIG_ENDIAN
static int bits_to_user(unsigned long *bits, unsigned int maxbit,
			unsigned int maxlen, void __user *p, int compat)
{
	int len, i;

	if (compat) {
507
		len = BITS_TO_LONGS_COMPAT(maxbit) * sizeof(compat_long_t);
508
		if (len > maxlen)
509 510 511 512 513 514 515 516 517
			len = maxlen;

		for (i = 0; i < len / sizeof(compat_long_t); i++)
			if (copy_to_user((compat_long_t __user *) p + i,
					 (compat_long_t *) bits +
						i + 1 - ((i % 2) << 1),
					 sizeof(compat_long_t)))
				return -EFAULT;
	} else {
518
		len = BITS_TO_LONGS(maxbit) * sizeof(long);
519 520 521 522 523 524 525 526 527 528 529 530 531 532
		if (len > maxlen)
			len = maxlen;

		if (copy_to_user(p, bits, len))
			return -EFAULT;
	}

	return len;
}
#else
static int bits_to_user(unsigned long *bits, unsigned int maxbit,
			unsigned int maxlen, void __user *p, int compat)
{
	int len = compat ?
533 534
			BITS_TO_LONGS_COMPAT(maxbit) * sizeof(compat_long_t) :
			BITS_TO_LONGS(maxbit) * sizeof(long);
535 536 537 538 539 540 541 542 543 544 545 546 547

	if (len > maxlen)
		len = maxlen;

	return copy_to_user(p, bits, len) ? -EFAULT : len;
}
#endif /* __BIG_ENDIAN */

#else

static int bits_to_user(unsigned long *bits, unsigned int maxbit,
			unsigned int maxlen, void __user *p, int compat)
{
548
	int len = BITS_TO_LONGS(maxbit) * sizeof(long);
549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571

	if (len > maxlen)
		len = maxlen;

	return copy_to_user(p, bits, len) ? -EFAULT : len;
}

#endif /* CONFIG_COMPAT */

static int str_to_user(const char *str, unsigned int maxlen, void __user *p)
{
	int len;

	if (!str)
		return -ENOENT;

	len = strlen(str) + 1;
	if (len > maxlen)
		len = maxlen;

	return copy_to_user(p, str, len) ? -EFAULT : len;
}

572 573
static long evdev_do_ioctl(struct file *file, unsigned int cmd,
			   void __user *p, int compat_mode)
L
Linus Torvalds 已提交
574
{
575 576
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
L
Linus Torvalds 已提交
577 578
	struct input_dev *dev = evdev->handle.dev;
	struct input_absinfo abs;
579
	struct ff_effect effect;
580
	int __user *ip = (int __user *)p;
L
Linus Torvalds 已提交
581
	int i, t, u, v;
582
	int error;
L
Linus Torvalds 已提交
583 584 585

	switch (cmd) {

586 587
	case EVIOCGVERSION:
		return put_user(EV_VERSION, ip);
L
Linus Torvalds 已提交
588

589 590 591 592
	case EVIOCGID:
		if (copy_to_user(p, &dev->id, sizeof(struct input_id)))
			return -EFAULT;
		return 0;
593

594 595 596 597 598 599 600 601
	case EVIOCGREP:
		if (!test_bit(EV_REP, dev->evbit))
			return -ENOSYS;
		if (put_user(dev->rep[REP_DELAY], ip))
			return -EFAULT;
		if (put_user(dev->rep[REP_PERIOD], ip + 1))
			return -EFAULT;
		return 0;
602

603 604 605 606 607 608 609
	case EVIOCSREP:
		if (!test_bit(EV_REP, dev->evbit))
			return -ENOSYS;
		if (get_user(u, ip))
			return -EFAULT;
		if (get_user(v, ip + 1))
			return -EFAULT;
610

611 612
		input_inject_event(&evdev->handle, EV_REP, REP_DELAY, u);
		input_inject_event(&evdev->handle, EV_REP, REP_PERIOD, v);
613

614
		return 0;
L
Linus Torvalds 已提交
615

616 617 618
	case EVIOCGKEYCODE:
		if (get_user(t, ip))
			return -EFAULT;
619

620 621 622
		error = dev->getkeycode(dev, t, &v);
		if (error)
			return error;
623

624 625
		if (put_user(v, ip + 1))
			return -EFAULT;
626

627
		return 0;
L
Linus Torvalds 已提交
628

629 630 631
	case EVIOCSKEYCODE:
		if (get_user(t, ip) || get_user(v, ip + 1))
			return -EFAULT;
632

633
		return dev->setkeycode(dev, t, v);
L
Linus Torvalds 已提交
634

635 636 637
	case EVIOCSFF:
		if (copy_from_user(&effect, p, sizeof(effect)))
			return -EFAULT;
L
Linus Torvalds 已提交
638

639
		error = input_ff_upload(dev, &effect, file);
640

641 642
		if (put_user(effect.id, &(((struct ff_effect __user *)p)->id)))
			return -EFAULT;
643

644
		return error;
645

646 647
	case EVIOCRMFF:
		return input_ff_erase(dev, (int)(unsigned long) p, file);
L
Linus Torvalds 已提交
648

649 650 651 652 653 654 655 656 657 658 659 660
	case EVIOCGEFFECTS:
		i = test_bit(EV_FF, dev->evbit) ?
				dev->ff->max_effects : 0;
		if (put_user(i, ip))
			return -EFAULT;
		return 0;

	case EVIOCGRAB:
		if (p)
			return evdev_grab(evdev, client);
		else
			return evdev_ungrab(evdev, client);
L
Linus Torvalds 已提交
661

662
	default:
L
Linus Torvalds 已提交
663

664 665
		if (_IOC_TYPE(cmd) != 'E')
			return -EINVAL;
L
Linus Torvalds 已提交
666

667
		if (_IOC_DIR(cmd) == _IOC_READ) {
668

669
			if ((_IOC_NR(cmd) & ~EV_MAX) == _IOC_NR(EVIOCGBIT(0, 0))) {
670

671 672
				unsigned long *bits;
				int len;
673

674
				switch (_IOC_NR(cmd) & EV_MAX) {
L
Linus Torvalds 已提交
675

676 677 678 679 680 681 682 683 684 685 686 687 688
				case      0: bits = dev->evbit;  len = EV_MAX;  break;
				case EV_KEY: bits = dev->keybit; len = KEY_MAX; break;
				case EV_REL: bits = dev->relbit; len = REL_MAX; break;
				case EV_ABS: bits = dev->absbit; len = ABS_MAX; break;
				case EV_MSC: bits = dev->mscbit; len = MSC_MAX; break;
				case EV_LED: bits = dev->ledbit; len = LED_MAX; break;
				case EV_SND: bits = dev->sndbit; len = SND_MAX; break;
				case EV_FF:  bits = dev->ffbit;  len = FF_MAX;  break;
				case EV_SW:  bits = dev->swbit;  len = SW_MAX;  break;
				default: return -EINVAL;
			}
				return bits_to_user(bits, len, _IOC_SIZE(cmd), p, compat_mode);
			}
L
Linus Torvalds 已提交
689

690 691 692
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGKEY(0)))
				return bits_to_user(dev->key, KEY_MAX, _IOC_SIZE(cmd),
						    p, compat_mode);
L
Linus Torvalds 已提交
693

694 695 696
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGLED(0)))
				return bits_to_user(dev->led, LED_MAX, _IOC_SIZE(cmd),
						    p, compat_mode);
L
Linus Torvalds 已提交
697

698 699 700
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGSND(0)))
				return bits_to_user(dev->snd, SND_MAX, _IOC_SIZE(cmd),
						    p, compat_mode);
701

702 703 704
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGSW(0)))
				return bits_to_user(dev->sw, SW_MAX, _IOC_SIZE(cmd),
						    p, compat_mode);
L
Linus Torvalds 已提交
705

706 707
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGNAME(0)))
				return str_to_user(dev->name, _IOC_SIZE(cmd), p);
L
Linus Torvalds 已提交
708

709 710
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGPHYS(0)))
				return str_to_user(dev->phys, _IOC_SIZE(cmd), p);
L
Linus Torvalds 已提交
711

712 713
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGUNIQ(0)))
				return str_to_user(dev->uniq, _IOC_SIZE(cmd), p);
L
Linus Torvalds 已提交
714

715
			if ((_IOC_NR(cmd) & ~ABS_MAX) == _IOC_NR(EVIOCGABS(0))) {
L
Linus Torvalds 已提交
716

717
				t = _IOC_NR(cmd) & ABS_MAX;
L
Linus Torvalds 已提交
718

719 720 721 722 723
				abs.value = dev->abs[t];
				abs.minimum = dev->absmin[t];
				abs.maximum = dev->absmax[t];
				abs.fuzz = dev->absfuzz[t];
				abs.flat = dev->absflat[t];
724

725 726
				if (copy_to_user(p, &abs, sizeof(struct input_absinfo)))
					return -EFAULT;
L
Linus Torvalds 已提交
727

728
				return 0;
L
Linus Torvalds 已提交
729 730
			}

731 732 733
		}

		if (_IOC_DIR(cmd) == _IOC_WRITE) {
L
Linus Torvalds 已提交
734

735
			if ((_IOC_NR(cmd) & ~ABS_MAX) == _IOC_NR(EVIOCSABS(0))) {
L
Linus Torvalds 已提交
736

737
				t = _IOC_NR(cmd) & ABS_MAX;
738

739 740 741
				if (copy_from_user(&abs, p,
						sizeof(struct input_absinfo)))
					return -EFAULT;
L
Linus Torvalds 已提交
742

743 744 745 746 747 748
				/*
				 * Take event lock to ensure that we are not
				 * changing device parameters in the middle
				 * of event.
				 */
				spin_lock_irq(&dev->event_lock);
L
Linus Torvalds 已提交
749

750 751 752 753 754 755 756 757 758
				dev->abs[t] = abs.value;
				dev->absmin[t] = abs.minimum;
				dev->absmax[t] = abs.maximum;
				dev->absfuzz[t] = abs.fuzz;
				dev->absflat[t] = abs.flat;

				spin_unlock_irq(&dev->event_lock);

				return 0;
L
Linus Torvalds 已提交
759
			}
760
		}
L
Linus Torvalds 已提交
761 762 763 764
	}
	return -EINVAL;
}

765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787
static long evdev_ioctl_handler(struct file *file, unsigned int cmd,
				void __user *p, int compat_mode)
{
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
	int retval;

	retval = mutex_lock_interruptible(&evdev->mutex);
	if (retval)
		return retval;

	if (!evdev->exist) {
		retval = -ENODEV;
		goto out;
	}

	retval = evdev_do_ioctl(file, cmd, p, compat_mode);

 out:
	mutex_unlock(&evdev->mutex);
	return retval;
}

788 789 790 791
static long evdev_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
{
	return evdev_ioctl_handler(file, cmd, (void __user *)arg, 0);
}
792

793
#ifdef CONFIG_COMPAT
794 795
static long evdev_ioctl_compat(struct file *file,
				unsigned int cmd, unsigned long arg)
796
{
797
	return evdev_ioctl_handler(file, cmd, compat_ptr(arg), 1);
L
Linus Torvalds 已提交
798
}
799
#endif
L
Linus Torvalds 已提交
800

D
Dmitry Torokhov 已提交
801
static const struct file_operations evdev_fops = {
802 803 804 805 806 807 808
	.owner		= THIS_MODULE,
	.read		= evdev_read,
	.write		= evdev_write,
	.poll		= evdev_poll,
	.open		= evdev_open,
	.release	= evdev_release,
	.unlocked_ioctl	= evdev_ioctl,
809
#ifdef CONFIG_COMPAT
810
	.compat_ioctl	= evdev_ioctl_compat,
811
#endif
812 813
	.fasync		= evdev_fasync,
	.flush		= evdev_flush
L
Linus Torvalds 已提交
814 815
};

816 817 818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850 851 852 853 854 855 856 857 858 859 860 861 862 863 864 865 866
static int evdev_install_chrdev(struct evdev *evdev)
{
	/*
	 * No need to do any locking here as calls to connect and
	 * disconnect are serialized by the input core
	 */
	evdev_table[evdev->minor] = evdev;
	return 0;
}

static void evdev_remove_chrdev(struct evdev *evdev)
{
	/*
	 * Lock evdev table to prevent race with evdev_open()
	 */
	mutex_lock(&evdev_table_mutex);
	evdev_table[evdev->minor] = NULL;
	mutex_unlock(&evdev_table_mutex);
}

/*
 * Mark device non-existent. This disables writes, ioctls and
 * prevents new users from opening the device. Already posted
 * blocking reads will stay, however new ones will fail.
 */
static void evdev_mark_dead(struct evdev *evdev)
{
	mutex_lock(&evdev->mutex);
	evdev->exist = 0;
	mutex_unlock(&evdev->mutex);
}

static void evdev_cleanup(struct evdev *evdev)
{
	struct input_handle *handle = &evdev->handle;

	evdev_mark_dead(evdev);
	evdev_hangup(evdev);
	evdev_remove_chrdev(evdev);

	/* evdev is marked dead so no one else accesses evdev->open */
	if (evdev->open) {
		input_flush_device(handle, NULL);
		input_close_device(handle);
	}
}

/*
 * Create new evdev device. Note that input core serializes calls
 * to connect and disconnect so we don't need to lock evdev_table here.
 */
867 868
static int evdev_connect(struct input_handler *handler, struct input_dev *dev,
			 const struct input_device_id *id)
L
Linus Torvalds 已提交
869 870 871
{
	struct evdev *evdev;
	int minor;
872
	int error;
L
Linus Torvalds 已提交
873

874 875 876 877
	for (minor = 0; minor < EVDEV_MINORS; minor++)
		if (!evdev_table[minor])
			break;

L
Linus Torvalds 已提交
878 879
	if (minor == EVDEV_MINORS) {
		printk(KERN_ERR "evdev: no more free evdev devices\n");
880
		return -ENFILE;
L
Linus Torvalds 已提交
881 882
	}

883 884 885
	evdev = kzalloc(sizeof(struct evdev), GFP_KERNEL);
	if (!evdev)
		return -ENOMEM;
L
Linus Torvalds 已提交
886

887
	INIT_LIST_HEAD(&evdev->client_list);
888 889
	spin_lock_init(&evdev->client_lock);
	mutex_init(&evdev->mutex);
L
Linus Torvalds 已提交
890 891
	init_waitqueue_head(&evdev->wait);

892
	snprintf(evdev->name, sizeof(evdev->name), "event%d", minor);
L
Linus Torvalds 已提交
893 894
	evdev->exist = 1;
	evdev->minor = minor;
895

L
Linus Torvalds 已提交
896 897 898 899 900
	evdev->handle.dev = dev;
	evdev->handle.name = evdev->name;
	evdev->handle.handler = handler;
	evdev->handle.private = evdev;

901 902
	strlcpy(evdev->dev.bus_id, evdev->name, sizeof(evdev->dev.bus_id));
	evdev->dev.devt = MKDEV(INPUT_MAJOR, EVDEV_MINOR_BASE + minor);
903 904 905 906
	evdev->dev.class = &input_class;
	evdev->dev.parent = &dev->dev;
	evdev->dev.release = evdev_free;
	device_initialize(&evdev->dev);
907

908
	error = input_register_handle(&evdev->handle);
909
	if (error)
910
		goto err_free_evdev;
911

912 913 914 915 916
	error = evdev_install_chrdev(evdev);
	if (error)
		goto err_unregister_handle;

	error = device_add(&evdev->dev);
917
	if (error)
918
		goto err_cleanup_evdev;
L
Linus Torvalds 已提交
919

920
	return 0;
L
Linus Torvalds 已提交
921

922 923 924 925
 err_cleanup_evdev:
	evdev_cleanup(evdev);
 err_unregister_handle:
	input_unregister_handle(&evdev->handle);
926
 err_free_evdev:
927
	put_device(&evdev->dev);
928
	return error;
L
Linus Torvalds 已提交
929 930 931 932 933 934
}

static void evdev_disconnect(struct input_handle *handle)
{
	struct evdev *evdev = handle->private;

935
	device_del(&evdev->dev);
936 937
	evdev_cleanup(evdev);
	input_unregister_handle(handle);
938
	put_device(&evdev->dev);
L
Linus Torvalds 已提交
939 940
}

D
Dmitry Torokhov 已提交
941
static const struct input_device_id evdev_ids[] = {
L
Linus Torvalds 已提交
942 943 944 945 946 947 948
	{ .driver_info = 1 },	/* Matches all devices */
	{ },			/* Terminating zero entry */
};

MODULE_DEVICE_TABLE(input, evdev_ids);

static struct input_handler evdev_handler = {
949 950 951 952 953 954 955
	.event		= evdev_event,
	.connect	= evdev_connect,
	.disconnect	= evdev_disconnect,
	.fops		= &evdev_fops,
	.minor		= EVDEV_MINOR_BASE,
	.name		= "evdev",
	.id_table	= evdev_ids,
L
Linus Torvalds 已提交
956 957 958 959
};

static int __init evdev_init(void)
{
960
	return input_register_handler(&evdev_handler);
L
Linus Torvalds 已提交
961 962 963 964 965 966 967 968 969 970 971 972 973
}

static void __exit evdev_exit(void)
{
	input_unregister_handler(&evdev_handler);
}

module_init(evdev_init);
module_exit(evdev_exit);

MODULE_AUTHOR("Vojtech Pavlik <vojtech@ucw.cz>");
MODULE_DESCRIPTION("Input driver event char devices");
MODULE_LICENSE("GPL");