evdev.c 21.6 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
/*
 * Event char devices, giving access to raw input device events.
 *
 * Copyright (c) 1999-2002 Vojtech Pavlik
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License version 2 as published by
 * the Free Software Foundation.
 */

#define EVDEV_MINOR_BASE	64
#define EVDEV_MINORS		32
#define EVDEV_BUFFER_SIZE	64

#include <linux/poll.h>
#include <linux/slab.h>
#include <linux/module.h>
#include <linux/init.h>
#include <linux/input.h>
#include <linux/major.h>
#include <linux/device.h>
22
#include <linux/compat.h>
L
Linus Torvalds 已提交
23 24 25 26 27 28 29 30

struct evdev {
	int exist;
	int open;
	int minor;
	char name[16];
	struct input_handle handle;
	wait_queue_head_t wait;
31 32
	struct evdev_client *grab;
	struct list_head client_list;
33 34
	spinlock_t client_lock; /* protects client_list */
	struct mutex mutex;
35
	struct device dev;
L
Linus Torvalds 已提交
36 37
};

38
struct evdev_client {
L
Linus Torvalds 已提交
39 40 41
	struct input_event buffer[EVDEV_BUFFER_SIZE];
	int head;
	int tail;
42
	spinlock_t buffer_lock; /* protects access to buffer, head and tail */
L
Linus Torvalds 已提交
43 44 45 46 47 48
	struct fasync_struct *fasync;
	struct evdev *evdev;
	struct list_head node;
};

static struct evdev *evdev_table[EVDEV_MINORS];
49
static DEFINE_MUTEX(evdev_table_mutex);
L
Linus Torvalds 已提交
50

51 52 53 54 55 56 57 58 59 60 61 62 63 64 65
static void evdev_pass_event(struct evdev_client *client,
			     struct input_event *event)
{
	/*
	 * Interrupts are disabled, just acquire the lock
	 */
	spin_lock(&client->buffer_lock);
	client->buffer[client->head++] = *event;
	client->head &= EVDEV_BUFFER_SIZE - 1;
	spin_unlock(&client->buffer_lock);

	kill_fasync(&client->fasync, SIGIO, POLL_IN);
}

/*
D
Dmitry Torokhov 已提交
66
 * Pass incoming event to all connected clients.
67 68 69
 */
static void evdev_event(struct input_handle *handle,
			unsigned int type, unsigned int code, int value)
L
Linus Torvalds 已提交
70 71
{
	struct evdev *evdev = handle->private;
72
	struct evdev_client *client;
73
	struct input_event event;
L
Linus Torvalds 已提交
74

75 76 77 78
	do_gettimeofday(&event.time);
	event.type = type;
	event.code = code;
	event.value = value;
L
Linus Torvalds 已提交
79

D
Dmitry Torokhov 已提交
80 81
	rcu_read_lock();

82 83 84 85 86 87
	client = rcu_dereference(evdev->grab);
	if (client)
		evdev_pass_event(client, &event);
	else
		list_for_each_entry_rcu(client, &evdev->client_list, node)
			evdev_pass_event(client, &event);
L
Linus Torvalds 已提交
88

D
Dmitry Torokhov 已提交
89 90
	rcu_read_unlock();

L
Linus Torvalds 已提交
91 92 93 94 95
	wake_up_interruptible(&evdev->wait);
}

static int evdev_fasync(int fd, struct file *file, int on)
{
96
	struct evdev_client *client = file->private_data;
L
Linus Torvalds 已提交
97
	int retval;
98

99
	retval = fasync_helper(fd, file, on, &client->fasync);
100

L
Linus Torvalds 已提交
101 102 103
	return retval < 0 ? retval : 0;
}

104
static int evdev_flush(struct file *file, fl_owner_t id)
L
Linus Torvalds 已提交
105
{
106 107
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
108 109 110 111 112
	int retval;

	retval = mutex_lock_interruptible(&evdev->mutex);
	if (retval)
		return retval;
113

114
	if (!evdev->exist)
115 116 117
		retval = -ENODEV;
	else
		retval = input_flush_device(&evdev->handle, file);
118

119 120
	mutex_unlock(&evdev->mutex);
	return retval;
L
Linus Torvalds 已提交
121 122
}

123
static void evdev_free(struct device *dev)
L
Linus Torvalds 已提交
124
{
125 126
	struct evdev *evdev = container_of(dev, struct evdev, dev);

127
	input_put_device(evdev->handle.dev);
L
Linus Torvalds 已提交
128 129 130
	kfree(evdev);
}

131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146
/*
 * Grabs an event device (along with underlying input device).
 * This function is called with evdev->mutex taken.
 */
static int evdev_grab(struct evdev *evdev, struct evdev_client *client)
{
	int error;

	if (evdev->grab)
		return -EBUSY;

	error = input_grab_device(&evdev->handle);
	if (error)
		return error;

	rcu_assign_pointer(evdev->grab, client);
D
Dmitry Torokhov 已提交
147
	synchronize_rcu();
148 149 150 151 152 153 154 155 156 157

	return 0;
}

static int evdev_ungrab(struct evdev *evdev, struct evdev_client *client)
{
	if (evdev->grab != client)
		return  -EINVAL;

	rcu_assign_pointer(evdev->grab, NULL);
D
Dmitry Torokhov 已提交
158
	synchronize_rcu();
159 160 161 162 163 164 165 166 167 168 169
	input_release_device(&evdev->handle);

	return 0;
}

static void evdev_attach_client(struct evdev *evdev,
				struct evdev_client *client)
{
	spin_lock(&evdev->client_lock);
	list_add_tail_rcu(&client->node, &evdev->client_list);
	spin_unlock(&evdev->client_lock);
D
Dmitry Torokhov 已提交
170
	synchronize_rcu();
171 172 173 174 175 176 177 178
}

static void evdev_detach_client(struct evdev *evdev,
				struct evdev_client *client)
{
	spin_lock(&evdev->client_lock);
	list_del_rcu(&client->node);
	spin_unlock(&evdev->client_lock);
D
Dmitry Torokhov 已提交
179
	synchronize_rcu();
180 181 182 183 184 185 186 187 188 189 190 191
}

static int evdev_open_device(struct evdev *evdev)
{
	int retval;

	retval = mutex_lock_interruptible(&evdev->mutex);
	if (retval)
		return retval;

	if (!evdev->exist)
		retval = -ENODEV;
192
	else if (!evdev->open++) {
193
		retval = input_open_device(&evdev->handle);
194 195 196
		if (retval)
			evdev->open--;
	}
197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227

	mutex_unlock(&evdev->mutex);
	return retval;
}

static void evdev_close_device(struct evdev *evdev)
{
	mutex_lock(&evdev->mutex);

	if (evdev->exist && !--evdev->open)
		input_close_device(&evdev->handle);

	mutex_unlock(&evdev->mutex);
}

/*
 * Wake up users waiting for IO so they can disconnect from
 * dead device.
 */
static void evdev_hangup(struct evdev *evdev)
{
	struct evdev_client *client;

	spin_lock(&evdev->client_lock);
	list_for_each_entry(client, &evdev->client_list, node)
		kill_fasync(&client->fasync, SIGIO, POLL_HUP);
	spin_unlock(&evdev->client_lock);

	wake_up_interruptible(&evdev->wait);
}

228
static int evdev_release(struct inode *inode, struct file *file)
L
Linus Torvalds 已提交
229
{
230 231
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
L
Linus Torvalds 已提交
232

233 234 235 236
	mutex_lock(&evdev->mutex);
	if (evdev->grab == client)
		evdev_ungrab(evdev, client);
	mutex_unlock(&evdev->mutex);
L
Linus Torvalds 已提交
237 238

	evdev_fasync(-1, file, 0);
239
	evdev_detach_client(evdev, client);
240
	kfree(client);
L
Linus Torvalds 已提交
241

242
	evdev_close_device(evdev);
243
	put_device(&evdev->dev);
L
Linus Torvalds 已提交
244 245 246 247

	return 0;
}

248
static int evdev_open(struct inode *inode, struct file *file)
L
Linus Torvalds 已提交
249
{
250
	struct evdev *evdev;
251
	struct evdev_client *client;
L
Linus Torvalds 已提交
252
	int i = iminor(inode) - EVDEV_MINOR_BASE;
253
	int error;
L
Linus Torvalds 已提交
254

255
	if (i >= EVDEV_MINORS)
L
Linus Torvalds 已提交
256 257
		return -ENODEV;

258 259 260
	error = mutex_lock_interruptible(&evdev_table_mutex);
	if (error)
		return error;
261
	evdev = evdev_table[i];
262 263 264
	if (evdev)
		get_device(&evdev->dev);
	mutex_unlock(&evdev_table_mutex);
265

266
	if (!evdev)
L
Linus Torvalds 已提交
267 268
		return -ENODEV;

269
	client = kzalloc(sizeof(struct evdev_client), GFP_KERNEL);
270 271 272 273
	if (!client) {
		error = -ENOMEM;
		goto err_put_evdev;
	}
L
Linus Torvalds 已提交
274

275
	spin_lock_init(&client->buffer_lock);
276
	client->evdev = evdev;
277
	evdev_attach_client(evdev, client);
L
Linus Torvalds 已提交
278

279 280 281
	error = evdev_open_device(evdev);
	if (error)
		goto err_free_client;
L
Linus Torvalds 已提交
282

283
	file->private_data = client;
L
Linus Torvalds 已提交
284
	return 0;
285 286

 err_free_client:
287
	evdev_detach_client(evdev, client);
288 289 290 291
	kfree(client);
 err_put_evdev:
	put_device(&evdev->dev);
	return error;
L
Linus Torvalds 已提交
292 293
}

294
#ifdef CONFIG_COMPAT
295

296 297 298 299 300 301 302
struct input_event_compat {
	struct compat_timeval time;
	__u16 type;
	__u16 code;
	__s32 value;
};

303 304
/* Note to the author of this code: did it ever occur to
   you why the ifdefs are needed? Think about it again. -AK */
305
#ifdef CONFIG_X86_64
306
#  define COMPAT_TEST is_compat_task()
307
#elif defined(CONFIG_IA64)
A
Al Viro 已提交
308
#  define COMPAT_TEST IS_IA32_PROCESS(task_pt_regs(current))
309
#elif defined(CONFIG_S390)
310
#  define COMPAT_TEST test_thread_flag(TIF_31BIT)
311
#elif defined(CONFIG_MIPS)
312
#  define COMPAT_TEST test_thread_flag(TIF_32BIT_ADDR)
313 314 315 316
#else
#  define COMPAT_TEST test_thread_flag(TIF_32BIT)
#endif

317
static inline size_t evdev_event_size(void)
318
{
319 320 321
	return COMPAT_TEST ?
		sizeof(struct input_event_compat) : sizeof(struct input_event);
}
322

323 324
static int evdev_event_from_user(const char __user *buffer,
				 struct input_event *event)
325 326 327 328
{
	if (COMPAT_TEST) {
		struct input_event_compat compat_event;

329 330
		if (copy_from_user(&compat_event, buffer,
				   sizeof(struct input_event_compat)))
331 332 333 334 335 336 337 338 339 340
			return -EFAULT;

		event->time.tv_sec = compat_event.time.tv_sec;
		event->time.tv_usec = compat_event.time.tv_usec;
		event->type = compat_event.type;
		event->code = compat_event.code;
		event->value = compat_event.value;

	} else {
		if (copy_from_user(event, buffer, sizeof(struct input_event)))
341 342 343
			return -EFAULT;
	}

344
	return 0;
345 346
}

347 348
static int evdev_event_to_user(char __user *buffer,
				const struct input_event *event)
L
Linus Torvalds 已提交
349
{
350 351
	if (COMPAT_TEST) {
		struct input_event_compat compat_event;
L
Linus Torvalds 已提交
352

353 354 355 356 357
		compat_event.time.tv_sec = event->time.tv_sec;
		compat_event.time.tv_usec = event->time.tv_usec;
		compat_event.type = event->type;
		compat_event.code = event->code;
		compat_event.value = event->value;
358

359 360
		if (copy_to_user(buffer, &compat_event,
				 sizeof(struct input_event_compat)))
361
			return -EFAULT;
L
Linus Torvalds 已提交
362

363 364
	} else {
		if (copy_to_user(buffer, event, sizeof(struct input_event)))
L
Linus Torvalds 已提交
365 366 367
			return -EFAULT;
	}

368
	return 0;
L
Linus Torvalds 已提交
369 370
}

371 372 373
#else

static inline size_t evdev_event_size(void)
374
{
375 376
	return sizeof(struct input_event);
}
377

378 379
static int evdev_event_from_user(const char __user *buffer,
				 struct input_event *event)
380 381 382
{
	if (copy_from_user(event, buffer, sizeof(struct input_event)))
		return -EFAULT;
383

384 385
	return 0;
}
386

387 388
static int evdev_event_to_user(char __user *buffer,
				const struct input_event *event)
389 390 391
{
	if (copy_to_user(buffer, event, sizeof(struct input_event)))
		return -EFAULT;
392

393 394 395 396 397
	return 0;
}

#endif /* CONFIG_COMPAT */

398 399
static ssize_t evdev_write(struct file *file, const char __user *buffer,
			   size_t count, loff_t *ppos)
400
{
401 402
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
403
	struct input_event event;
404
	int retval;
405

406 407 408 409 410 411 412 413
	retval = mutex_lock_interruptible(&evdev->mutex);
	if (retval)
		return retval;

	if (!evdev->exist) {
		retval = -ENODEV;
		goto out;
	}
414

415 416
	while (retval < count) {

417 418 419 420 421 422 423
		if (evdev_event_from_user(buffer + retval, &event)) {
			retval = -EFAULT;
			goto out;
		}

		input_inject_event(&evdev->handle,
				   event.type, event.code, event.value);
424
		retval += evdev_event_size();
425 426
	}

427 428
 out:
	mutex_unlock(&evdev->mutex);
429 430 431
	return retval;
}

432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451
static int evdev_fetch_next_event(struct evdev_client *client,
				  struct input_event *event)
{
	int have_event;

	spin_lock_irq(&client->buffer_lock);

	have_event = client->head != client->tail;
	if (have_event) {
		*event = client->buffer[client->tail++];
		client->tail &= EVDEV_BUFFER_SIZE - 1;
	}

	spin_unlock_irq(&client->buffer_lock);

	return have_event;
}

static ssize_t evdev_read(struct file *file, char __user *buffer,
			  size_t count, loff_t *ppos)
L
Linus Torvalds 已提交
452
{
453 454
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
455
	struct input_event event;
L
Linus Torvalds 已提交
456 457
	int retval;

458
	if (count < evdev_event_size())
L
Linus Torvalds 已提交
459 460
		return -EINVAL;

461 462
	if (client->head == client->tail && evdev->exist &&
	    (file->f_flags & O_NONBLOCK))
L
Linus Torvalds 已提交
463 464
		return -EAGAIN;

465 466
	retval = wait_event_interruptible(evdev->wait,
		client->head != client->tail || !evdev->exist);
L
Linus Torvalds 已提交
467 468 469
	if (retval)
		return retval;

470
	if (!evdev->exist)
L
Linus Torvalds 已提交
471 472
		return -ENODEV;

473 474
	while (retval + evdev_event_size() <= count &&
	       evdev_fetch_next_event(client, &event)) {
475

476
		if (evdev_event_to_user(buffer + retval, &event))
477 478 479
			return -EFAULT;

		retval += evdev_event_size();
L
Linus Torvalds 已提交
480 481 482 483 484 485 486 487
	}

	return retval;
}

/* No kernel lock - fine */
static unsigned int evdev_poll(struct file *file, poll_table *wait)
{
488 489
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
490

491 492 493
	poll_wait(file, &evdev->wait, wait);
	return ((client->head == client->tail) ? 0 : (POLLIN | POLLRDNORM)) |
		(evdev->exist ? 0 : (POLLHUP | POLLERR));
L
Linus Torvalds 已提交
494 495
}

496 497 498
#ifdef CONFIG_COMPAT

#define BITS_PER_LONG_COMPAT (sizeof(compat_long_t) * 8)
499
#define BITS_TO_LONGS_COMPAT(x) ((((x) - 1) / BITS_PER_LONG_COMPAT) + 1)
500 501 502 503 504 505 506 507

#ifdef __BIG_ENDIAN
static int bits_to_user(unsigned long *bits, unsigned int maxbit,
			unsigned int maxlen, void __user *p, int compat)
{
	int len, i;

	if (compat) {
508
		len = BITS_TO_LONGS_COMPAT(maxbit) * sizeof(compat_long_t);
509
		if (len > maxlen)
510 511 512 513 514 515 516 517 518
			len = maxlen;

		for (i = 0; i < len / sizeof(compat_long_t); i++)
			if (copy_to_user((compat_long_t __user *) p + i,
					 (compat_long_t *) bits +
						i + 1 - ((i % 2) << 1),
					 sizeof(compat_long_t)))
				return -EFAULT;
	} else {
519
		len = BITS_TO_LONGS(maxbit) * sizeof(long);
520 521 522 523 524 525 526 527 528 529 530 531 532 533
		if (len > maxlen)
			len = maxlen;

		if (copy_to_user(p, bits, len))
			return -EFAULT;
	}

	return len;
}
#else
static int bits_to_user(unsigned long *bits, unsigned int maxbit,
			unsigned int maxlen, void __user *p, int compat)
{
	int len = compat ?
534 535
			BITS_TO_LONGS_COMPAT(maxbit) * sizeof(compat_long_t) :
			BITS_TO_LONGS(maxbit) * sizeof(long);
536 537 538 539 540 541 542 543 544 545 546 547 548

	if (len > maxlen)
		len = maxlen;

	return copy_to_user(p, bits, len) ? -EFAULT : len;
}
#endif /* __BIG_ENDIAN */

#else

static int bits_to_user(unsigned long *bits, unsigned int maxbit,
			unsigned int maxlen, void __user *p, int compat)
{
549
	int len = BITS_TO_LONGS(maxbit) * sizeof(long);
550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572

	if (len > maxlen)
		len = maxlen;

	return copy_to_user(p, bits, len) ? -EFAULT : len;
}

#endif /* CONFIG_COMPAT */

static int str_to_user(const char *str, unsigned int maxlen, void __user *p)
{
	int len;

	if (!str)
		return -ENOENT;

	len = strlen(str) + 1;
	if (len > maxlen)
		len = maxlen;

	return copy_to_user(p, str, len) ? -EFAULT : len;
}

573 574
static long evdev_do_ioctl(struct file *file, unsigned int cmd,
			   void __user *p, int compat_mode)
L
Linus Torvalds 已提交
575
{
576 577
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
L
Linus Torvalds 已提交
578 579
	struct input_dev *dev = evdev->handle.dev;
	struct input_absinfo abs;
580
	struct ff_effect effect;
581
	int __user *ip = (int __user *)p;
L
Linus Torvalds 已提交
582
	int i, t, u, v;
583
	int error;
L
Linus Torvalds 已提交
584 585 586

	switch (cmd) {

587 588
	case EVIOCGVERSION:
		return put_user(EV_VERSION, ip);
L
Linus Torvalds 已提交
589

590 591 592 593
	case EVIOCGID:
		if (copy_to_user(p, &dev->id, sizeof(struct input_id)))
			return -EFAULT;
		return 0;
594

595 596 597 598 599 600 601 602
	case EVIOCGREP:
		if (!test_bit(EV_REP, dev->evbit))
			return -ENOSYS;
		if (put_user(dev->rep[REP_DELAY], ip))
			return -EFAULT;
		if (put_user(dev->rep[REP_PERIOD], ip + 1))
			return -EFAULT;
		return 0;
603

604 605 606 607 608 609 610
	case EVIOCSREP:
		if (!test_bit(EV_REP, dev->evbit))
			return -ENOSYS;
		if (get_user(u, ip))
			return -EFAULT;
		if (get_user(v, ip + 1))
			return -EFAULT;
611

612 613
		input_inject_event(&evdev->handle, EV_REP, REP_DELAY, u);
		input_inject_event(&evdev->handle, EV_REP, REP_PERIOD, v);
614

615
		return 0;
L
Linus Torvalds 已提交
616

617 618 619
	case EVIOCGKEYCODE:
		if (get_user(t, ip))
			return -EFAULT;
620

621
		error = input_get_keycode(dev, t, &v);
622 623
		if (error)
			return error;
624

625 626
		if (put_user(v, ip + 1))
			return -EFAULT;
627

628
		return 0;
L
Linus Torvalds 已提交
629

630 631 632
	case EVIOCSKEYCODE:
		if (get_user(t, ip) || get_user(v, ip + 1))
			return -EFAULT;
633

634
		return input_set_keycode(dev, t, v);
L
Linus Torvalds 已提交
635

636 637 638
	case EVIOCSFF:
		if (copy_from_user(&effect, p, sizeof(effect)))
			return -EFAULT;
L
Linus Torvalds 已提交
639

640
		error = input_ff_upload(dev, &effect, file);
641

642 643
		if (put_user(effect.id, &(((struct ff_effect __user *)p)->id)))
			return -EFAULT;
644

645
		return error;
646

647 648
	case EVIOCRMFF:
		return input_ff_erase(dev, (int)(unsigned long) p, file);
L
Linus Torvalds 已提交
649

650 651 652 653 654 655 656 657 658 659 660 661
	case EVIOCGEFFECTS:
		i = test_bit(EV_FF, dev->evbit) ?
				dev->ff->max_effects : 0;
		if (put_user(i, ip))
			return -EFAULT;
		return 0;

	case EVIOCGRAB:
		if (p)
			return evdev_grab(evdev, client);
		else
			return evdev_ungrab(evdev, client);
L
Linus Torvalds 已提交
662

663
	default:
L
Linus Torvalds 已提交
664

665 666
		if (_IOC_TYPE(cmd) != 'E')
			return -EINVAL;
L
Linus Torvalds 已提交
667

668
		if (_IOC_DIR(cmd) == _IOC_READ) {
669

670
			if ((_IOC_NR(cmd) & ~EV_MAX) == _IOC_NR(EVIOCGBIT(0, 0))) {
671

672 673
				unsigned long *bits;
				int len;
674

675
				switch (_IOC_NR(cmd) & EV_MAX) {
L
Linus Torvalds 已提交
676

677 678 679 680 681 682 683 684 685 686
				case      0: bits = dev->evbit;  len = EV_MAX;  break;
				case EV_KEY: bits = dev->keybit; len = KEY_MAX; break;
				case EV_REL: bits = dev->relbit; len = REL_MAX; break;
				case EV_ABS: bits = dev->absbit; len = ABS_MAX; break;
				case EV_MSC: bits = dev->mscbit; len = MSC_MAX; break;
				case EV_LED: bits = dev->ledbit; len = LED_MAX; break;
				case EV_SND: bits = dev->sndbit; len = SND_MAX; break;
				case EV_FF:  bits = dev->ffbit;  len = FF_MAX;  break;
				case EV_SW:  bits = dev->swbit;  len = SW_MAX;  break;
				default: return -EINVAL;
687
				}
688 689
				return bits_to_user(bits, len, _IOC_SIZE(cmd), p, compat_mode);
			}
L
Linus Torvalds 已提交
690

691 692 693
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGKEY(0)))
				return bits_to_user(dev->key, KEY_MAX, _IOC_SIZE(cmd),
						    p, compat_mode);
L
Linus Torvalds 已提交
694

695 696 697
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGLED(0)))
				return bits_to_user(dev->led, LED_MAX, _IOC_SIZE(cmd),
						    p, compat_mode);
L
Linus Torvalds 已提交
698

699 700 701
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGSND(0)))
				return bits_to_user(dev->snd, SND_MAX, _IOC_SIZE(cmd),
						    p, compat_mode);
702

703 704 705
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGSW(0)))
				return bits_to_user(dev->sw, SW_MAX, _IOC_SIZE(cmd),
						    p, compat_mode);
L
Linus Torvalds 已提交
706

707 708
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGNAME(0)))
				return str_to_user(dev->name, _IOC_SIZE(cmd), p);
L
Linus Torvalds 已提交
709

710 711
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGPHYS(0)))
				return str_to_user(dev->phys, _IOC_SIZE(cmd), p);
L
Linus Torvalds 已提交
712

713 714
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGUNIQ(0)))
				return str_to_user(dev->uniq, _IOC_SIZE(cmd), p);
L
Linus Torvalds 已提交
715

716
			if ((_IOC_NR(cmd) & ~ABS_MAX) == _IOC_NR(EVIOCGABS(0))) {
L
Linus Torvalds 已提交
717

718
				t = _IOC_NR(cmd) & ABS_MAX;
L
Linus Torvalds 已提交
719

720 721 722 723 724
				abs.value = dev->abs[t];
				abs.minimum = dev->absmin[t];
				abs.maximum = dev->absmax[t];
				abs.fuzz = dev->absfuzz[t];
				abs.flat = dev->absflat[t];
725

726 727
				if (copy_to_user(p, &abs, sizeof(struct input_absinfo)))
					return -EFAULT;
L
Linus Torvalds 已提交
728

729
				return 0;
L
Linus Torvalds 已提交
730 731
			}

732 733 734
		}

		if (_IOC_DIR(cmd) == _IOC_WRITE) {
L
Linus Torvalds 已提交
735

736
			if ((_IOC_NR(cmd) & ~ABS_MAX) == _IOC_NR(EVIOCSABS(0))) {
L
Linus Torvalds 已提交
737

738
				t = _IOC_NR(cmd) & ABS_MAX;
739

740 741 742
				if (copy_from_user(&abs, p,
						sizeof(struct input_absinfo)))
					return -EFAULT;
L
Linus Torvalds 已提交
743

744 745 746 747 748 749
				/*
				 * Take event lock to ensure that we are not
				 * changing device parameters in the middle
				 * of event.
				 */
				spin_lock_irq(&dev->event_lock);
L
Linus Torvalds 已提交
750

751 752 753 754 755 756 757 758 759
				dev->abs[t] = abs.value;
				dev->absmin[t] = abs.minimum;
				dev->absmax[t] = abs.maximum;
				dev->absfuzz[t] = abs.fuzz;
				dev->absflat[t] = abs.flat;

				spin_unlock_irq(&dev->event_lock);

				return 0;
L
Linus Torvalds 已提交
760
			}
761
		}
L
Linus Torvalds 已提交
762 763 764 765
	}
	return -EINVAL;
}

766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788
static long evdev_ioctl_handler(struct file *file, unsigned int cmd,
				void __user *p, int compat_mode)
{
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
	int retval;

	retval = mutex_lock_interruptible(&evdev->mutex);
	if (retval)
		return retval;

	if (!evdev->exist) {
		retval = -ENODEV;
		goto out;
	}

	retval = evdev_do_ioctl(file, cmd, p, compat_mode);

 out:
	mutex_unlock(&evdev->mutex);
	return retval;
}

789 790 791 792
static long evdev_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
{
	return evdev_ioctl_handler(file, cmd, (void __user *)arg, 0);
}
793

794
#ifdef CONFIG_COMPAT
795 796
static long evdev_ioctl_compat(struct file *file,
				unsigned int cmd, unsigned long arg)
797
{
798
	return evdev_ioctl_handler(file, cmd, compat_ptr(arg), 1);
L
Linus Torvalds 已提交
799
}
800
#endif
L
Linus Torvalds 已提交
801

D
Dmitry Torokhov 已提交
802
static const struct file_operations evdev_fops = {
803 804 805 806 807 808 809
	.owner		= THIS_MODULE,
	.read		= evdev_read,
	.write		= evdev_write,
	.poll		= evdev_poll,
	.open		= evdev_open,
	.release	= evdev_release,
	.unlocked_ioctl	= evdev_ioctl,
810
#ifdef CONFIG_COMPAT
811
	.compat_ioctl	= evdev_ioctl_compat,
812
#endif
813 814
	.fasync		= evdev_fasync,
	.flush		= evdev_flush
L
Linus Torvalds 已提交
815 816
};

817 818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850 851 852 853 854 855 856 857 858 859 860 861 862 863 864 865 866 867
static int evdev_install_chrdev(struct evdev *evdev)
{
	/*
	 * No need to do any locking here as calls to connect and
	 * disconnect are serialized by the input core
	 */
	evdev_table[evdev->minor] = evdev;
	return 0;
}

static void evdev_remove_chrdev(struct evdev *evdev)
{
	/*
	 * Lock evdev table to prevent race with evdev_open()
	 */
	mutex_lock(&evdev_table_mutex);
	evdev_table[evdev->minor] = NULL;
	mutex_unlock(&evdev_table_mutex);
}

/*
 * Mark device non-existent. This disables writes, ioctls and
 * prevents new users from opening the device. Already posted
 * blocking reads will stay, however new ones will fail.
 */
static void evdev_mark_dead(struct evdev *evdev)
{
	mutex_lock(&evdev->mutex);
	evdev->exist = 0;
	mutex_unlock(&evdev->mutex);
}

static void evdev_cleanup(struct evdev *evdev)
{
	struct input_handle *handle = &evdev->handle;

	evdev_mark_dead(evdev);
	evdev_hangup(evdev);
	evdev_remove_chrdev(evdev);

	/* evdev is marked dead so no one else accesses evdev->open */
	if (evdev->open) {
		input_flush_device(handle, NULL);
		input_close_device(handle);
	}
}

/*
 * Create new evdev device. Note that input core serializes calls
 * to connect and disconnect so we don't need to lock evdev_table here.
 */
868 869
static int evdev_connect(struct input_handler *handler, struct input_dev *dev,
			 const struct input_device_id *id)
L
Linus Torvalds 已提交
870 871 872
{
	struct evdev *evdev;
	int minor;
873
	int error;
L
Linus Torvalds 已提交
874

875 876 877 878
	for (minor = 0; minor < EVDEV_MINORS; minor++)
		if (!evdev_table[minor])
			break;

L
Linus Torvalds 已提交
879 880
	if (minor == EVDEV_MINORS) {
		printk(KERN_ERR "evdev: no more free evdev devices\n");
881
		return -ENFILE;
L
Linus Torvalds 已提交
882 883
	}

884 885 886
	evdev = kzalloc(sizeof(struct evdev), GFP_KERNEL);
	if (!evdev)
		return -ENOMEM;
L
Linus Torvalds 已提交
887

888
	INIT_LIST_HEAD(&evdev->client_list);
889 890
	spin_lock_init(&evdev->client_lock);
	mutex_init(&evdev->mutex);
L
Linus Torvalds 已提交
891 892
	init_waitqueue_head(&evdev->wait);

893
	snprintf(evdev->name, sizeof(evdev->name), "event%d", minor);
L
Linus Torvalds 已提交
894 895
	evdev->exist = 1;
	evdev->minor = minor;
896

897
	evdev->handle.dev = input_get_device(dev);
L
Linus Torvalds 已提交
898 899 900 901
	evdev->handle.name = evdev->name;
	evdev->handle.handler = handler;
	evdev->handle.private = evdev;

902 903
	strlcpy(evdev->dev.bus_id, evdev->name, sizeof(evdev->dev.bus_id));
	evdev->dev.devt = MKDEV(INPUT_MAJOR, EVDEV_MINOR_BASE + minor);
904 905 906 907
	evdev->dev.class = &input_class;
	evdev->dev.parent = &dev->dev;
	evdev->dev.release = evdev_free;
	device_initialize(&evdev->dev);
908

909
	error = input_register_handle(&evdev->handle);
910
	if (error)
911
		goto err_free_evdev;
912

913 914 915 916 917
	error = evdev_install_chrdev(evdev);
	if (error)
		goto err_unregister_handle;

	error = device_add(&evdev->dev);
918
	if (error)
919
		goto err_cleanup_evdev;
L
Linus Torvalds 已提交
920

921
	return 0;
L
Linus Torvalds 已提交
922

923 924 925 926
 err_cleanup_evdev:
	evdev_cleanup(evdev);
 err_unregister_handle:
	input_unregister_handle(&evdev->handle);
927
 err_free_evdev:
928
	put_device(&evdev->dev);
929
	return error;
L
Linus Torvalds 已提交
930 931 932 933 934 935
}

static void evdev_disconnect(struct input_handle *handle)
{
	struct evdev *evdev = handle->private;

936
	device_del(&evdev->dev);
937 938
	evdev_cleanup(evdev);
	input_unregister_handle(handle);
939
	put_device(&evdev->dev);
L
Linus Torvalds 已提交
940 941
}

D
Dmitry Torokhov 已提交
942
static const struct input_device_id evdev_ids[] = {
L
Linus Torvalds 已提交
943 944 945 946 947 948 949
	{ .driver_info = 1 },	/* Matches all devices */
	{ },			/* Terminating zero entry */
};

MODULE_DEVICE_TABLE(input, evdev_ids);

static struct input_handler evdev_handler = {
950 951 952 953 954 955 956
	.event		= evdev_event,
	.connect	= evdev_connect,
	.disconnect	= evdev_disconnect,
	.fops		= &evdev_fops,
	.minor		= EVDEV_MINOR_BASE,
	.name		= "evdev",
	.id_table	= evdev_ids,
L
Linus Torvalds 已提交
957 958 959 960
};

static int __init evdev_init(void)
{
961
	return input_register_handler(&evdev_handler);
L
Linus Torvalds 已提交
962 963 964 965 966 967 968 969 970 971 972 973 974
}

static void __exit evdev_exit(void)
{
	input_unregister_handler(&evdev_handler);
}

module_init(evdev_init);
module_exit(evdev_exit);

MODULE_AUTHOR("Vojtech Pavlik <vojtech@ucw.cz>");
MODULE_DESCRIPTION("Input driver event char devices");
MODULE_LICENSE("GPL");