evdev.c 20.1 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
/*
 * Event char devices, giving access to raw input device events.
 *
 * Copyright (c) 1999-2002 Vojtech Pavlik
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License version 2 as published by
 * the Free Software Foundation.
 */

#define EVDEV_MINOR_BASE	64
#define EVDEV_MINORS		32
#define EVDEV_BUFFER_SIZE	64

#include <linux/poll.h>
#include <linux/slab.h>
#include <linux/module.h>
#include <linux/init.h>
#include <linux/input.h>
#include <linux/major.h>
#include <linux/device.h>
22
#include "input-compat.h"
L
Linus Torvalds 已提交
23 24 25 26 27 28 29

struct evdev {
	int exist;
	int open;
	int minor;
	struct input_handle handle;
	wait_queue_head_t wait;
30 31
	struct evdev_client *grab;
	struct list_head client_list;
32 33
	spinlock_t client_lock; /* protects client_list */
	struct mutex mutex;
34
	struct device dev;
L
Linus Torvalds 已提交
35 36
};

37
struct evdev_client {
L
Linus Torvalds 已提交
38 39 40
	struct input_event buffer[EVDEV_BUFFER_SIZE];
	int head;
	int tail;
41
	spinlock_t buffer_lock; /* protects access to buffer, head and tail */
L
Linus Torvalds 已提交
42 43 44 45 46 47
	struct fasync_struct *fasync;
	struct evdev *evdev;
	struct list_head node;
};

static struct evdev *evdev_table[EVDEV_MINORS];
48
static DEFINE_MUTEX(evdev_table_mutex);
L
Linus Torvalds 已提交
49

50 51 52 53 54 55 56 57 58 59 60 61 62 63 64
static void evdev_pass_event(struct evdev_client *client,
			     struct input_event *event)
{
	/*
	 * Interrupts are disabled, just acquire the lock
	 */
	spin_lock(&client->buffer_lock);
	client->buffer[client->head++] = *event;
	client->head &= EVDEV_BUFFER_SIZE - 1;
	spin_unlock(&client->buffer_lock);

	kill_fasync(&client->fasync, SIGIO, POLL_IN);
}

/*
D
Dmitry Torokhov 已提交
65
 * Pass incoming event to all connected clients.
66 67 68
 */
static void evdev_event(struct input_handle *handle,
			unsigned int type, unsigned int code, int value)
L
Linus Torvalds 已提交
69 70
{
	struct evdev *evdev = handle->private;
71
	struct evdev_client *client;
72
	struct input_event event;
L
Linus Torvalds 已提交
73

74 75 76 77
	do_gettimeofday(&event.time);
	event.type = type;
	event.code = code;
	event.value = value;
L
Linus Torvalds 已提交
78

D
Dmitry Torokhov 已提交
79 80
	rcu_read_lock();

81 82 83 84 85 86
	client = rcu_dereference(evdev->grab);
	if (client)
		evdev_pass_event(client, &event);
	else
		list_for_each_entry_rcu(client, &evdev->client_list, node)
			evdev_pass_event(client, &event);
L
Linus Torvalds 已提交
87

D
Dmitry Torokhov 已提交
88 89
	rcu_read_unlock();

L
Linus Torvalds 已提交
90 91 92 93 94
	wake_up_interruptible(&evdev->wait);
}

static int evdev_fasync(int fd, struct file *file, int on)
{
95
	struct evdev_client *client = file->private_data;
96

97
	return fasync_helper(fd, file, on, &client->fasync);
L
Linus Torvalds 已提交
98 99
}

100
static int evdev_flush(struct file *file, fl_owner_t id)
L
Linus Torvalds 已提交
101
{
102 103
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
104 105 106 107 108
	int retval;

	retval = mutex_lock_interruptible(&evdev->mutex);
	if (retval)
		return retval;
109

110
	if (!evdev->exist)
111 112 113
		retval = -ENODEV;
	else
		retval = input_flush_device(&evdev->handle, file);
114

115 116
	mutex_unlock(&evdev->mutex);
	return retval;
L
Linus Torvalds 已提交
117 118
}

119
static void evdev_free(struct device *dev)
L
Linus Torvalds 已提交
120
{
121 122
	struct evdev *evdev = container_of(dev, struct evdev, dev);

123
	input_put_device(evdev->handle.dev);
L
Linus Torvalds 已提交
124 125 126
	kfree(evdev);
}

127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142
/*
 * Grabs an event device (along with underlying input device).
 * This function is called with evdev->mutex taken.
 */
static int evdev_grab(struct evdev *evdev, struct evdev_client *client)
{
	int error;

	if (evdev->grab)
		return -EBUSY;

	error = input_grab_device(&evdev->handle);
	if (error)
		return error;

	rcu_assign_pointer(evdev->grab, client);
D
Dmitry Torokhov 已提交
143
	synchronize_rcu();
144 145 146 147 148 149 150 151 152 153

	return 0;
}

static int evdev_ungrab(struct evdev *evdev, struct evdev_client *client)
{
	if (evdev->grab != client)
		return  -EINVAL;

	rcu_assign_pointer(evdev->grab, NULL);
D
Dmitry Torokhov 已提交
154
	synchronize_rcu();
155 156 157 158 159 160 161 162 163 164 165
	input_release_device(&evdev->handle);

	return 0;
}

static void evdev_attach_client(struct evdev *evdev,
				struct evdev_client *client)
{
	spin_lock(&evdev->client_lock);
	list_add_tail_rcu(&client->node, &evdev->client_list);
	spin_unlock(&evdev->client_lock);
D
Dmitry Torokhov 已提交
166
	synchronize_rcu();
167 168 169 170 171 172 173 174
}

static void evdev_detach_client(struct evdev *evdev,
				struct evdev_client *client)
{
	spin_lock(&evdev->client_lock);
	list_del_rcu(&client->node);
	spin_unlock(&evdev->client_lock);
D
Dmitry Torokhov 已提交
175
	synchronize_rcu();
176 177 178 179 180 181 182 183 184 185 186 187
}

static int evdev_open_device(struct evdev *evdev)
{
	int retval;

	retval = mutex_lock_interruptible(&evdev->mutex);
	if (retval)
		return retval;

	if (!evdev->exist)
		retval = -ENODEV;
188
	else if (!evdev->open++) {
189
		retval = input_open_device(&evdev->handle);
190 191 192
		if (retval)
			evdev->open--;
	}
193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223

	mutex_unlock(&evdev->mutex);
	return retval;
}

static void evdev_close_device(struct evdev *evdev)
{
	mutex_lock(&evdev->mutex);

	if (evdev->exist && !--evdev->open)
		input_close_device(&evdev->handle);

	mutex_unlock(&evdev->mutex);
}

/*
 * Wake up users waiting for IO so they can disconnect from
 * dead device.
 */
static void evdev_hangup(struct evdev *evdev)
{
	struct evdev_client *client;

	spin_lock(&evdev->client_lock);
	list_for_each_entry(client, &evdev->client_list, node)
		kill_fasync(&client->fasync, SIGIO, POLL_HUP);
	spin_unlock(&evdev->client_lock);

	wake_up_interruptible(&evdev->wait);
}

224
static int evdev_release(struct inode *inode, struct file *file)
L
Linus Torvalds 已提交
225
{
226 227
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
L
Linus Torvalds 已提交
228

229 230 231 232
	mutex_lock(&evdev->mutex);
	if (evdev->grab == client)
		evdev_ungrab(evdev, client);
	mutex_unlock(&evdev->mutex);
L
Linus Torvalds 已提交
233

234
	evdev_detach_client(evdev, client);
235
	kfree(client);
L
Linus Torvalds 已提交
236

237
	evdev_close_device(evdev);
238
	put_device(&evdev->dev);
L
Linus Torvalds 已提交
239 240 241 242

	return 0;
}

243
static int evdev_open(struct inode *inode, struct file *file)
L
Linus Torvalds 已提交
244
{
245
	struct evdev *evdev;
246
	struct evdev_client *client;
L
Linus Torvalds 已提交
247
	int i = iminor(inode) - EVDEV_MINOR_BASE;
248
	int error;
L
Linus Torvalds 已提交
249

250
	if (i >= EVDEV_MINORS)
L
Linus Torvalds 已提交
251 252
		return -ENODEV;

253 254 255
	error = mutex_lock_interruptible(&evdev_table_mutex);
	if (error)
		return error;
256
	evdev = evdev_table[i];
257 258 259
	if (evdev)
		get_device(&evdev->dev);
	mutex_unlock(&evdev_table_mutex);
260

261
	if (!evdev)
L
Linus Torvalds 已提交
262 263
		return -ENODEV;

264
	client = kzalloc(sizeof(struct evdev_client), GFP_KERNEL);
265 266 267 268
	if (!client) {
		error = -ENOMEM;
		goto err_put_evdev;
	}
L
Linus Torvalds 已提交
269

270
	spin_lock_init(&client->buffer_lock);
271
	client->evdev = evdev;
272
	evdev_attach_client(evdev, client);
L
Linus Torvalds 已提交
273

274 275 276
	error = evdev_open_device(evdev);
	if (error)
		goto err_free_client;
L
Linus Torvalds 已提交
277

278
	file->private_data = client;
L
Linus Torvalds 已提交
279
	return 0;
280 281

 err_free_client:
282
	evdev_detach_client(evdev, client);
283 284 285 286
	kfree(client);
 err_put_evdev:
	put_device(&evdev->dev);
	return error;
L
Linus Torvalds 已提交
287 288
}

289 290
static ssize_t evdev_write(struct file *file, const char __user *buffer,
			   size_t count, loff_t *ppos)
291
{
292 293
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
294
	struct input_event event;
295
	int retval;
296

297 298 299 300 301 302 303 304
	retval = mutex_lock_interruptible(&evdev->mutex);
	if (retval)
		return retval;

	if (!evdev->exist) {
		retval = -ENODEV;
		goto out;
	}
305

306 307
	while (retval < count) {

308
		if (input_event_from_user(buffer + retval, &event)) {
309 310 311 312 313 314
			retval = -EFAULT;
			goto out;
		}

		input_inject_event(&evdev->handle,
				   event.type, event.code, event.value);
315
		retval += input_event_size();
316 317
	}

318 319
 out:
	mutex_unlock(&evdev->mutex);
320 321 322
	return retval;
}

323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342
static int evdev_fetch_next_event(struct evdev_client *client,
				  struct input_event *event)
{
	int have_event;

	spin_lock_irq(&client->buffer_lock);

	have_event = client->head != client->tail;
	if (have_event) {
		*event = client->buffer[client->tail++];
		client->tail &= EVDEV_BUFFER_SIZE - 1;
	}

	spin_unlock_irq(&client->buffer_lock);

	return have_event;
}

static ssize_t evdev_read(struct file *file, char __user *buffer,
			  size_t count, loff_t *ppos)
L
Linus Torvalds 已提交
343
{
344 345
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
346
	struct input_event event;
L
Linus Torvalds 已提交
347 348
	int retval;

349
	if (count < input_event_size())
L
Linus Torvalds 已提交
350 351
		return -EINVAL;

352 353
	if (client->head == client->tail && evdev->exist &&
	    (file->f_flags & O_NONBLOCK))
L
Linus Torvalds 已提交
354 355
		return -EAGAIN;

356 357
	retval = wait_event_interruptible(evdev->wait,
		client->head != client->tail || !evdev->exist);
L
Linus Torvalds 已提交
358 359 360
	if (retval)
		return retval;

361
	if (!evdev->exist)
L
Linus Torvalds 已提交
362 363
		return -ENODEV;

364
	while (retval + input_event_size() <= count &&
365
	       evdev_fetch_next_event(client, &event)) {
366

367
		if (input_event_to_user(buffer + retval, &event))
368 369
			return -EFAULT;

370
		retval += input_event_size();
L
Linus Torvalds 已提交
371 372 373 374 375 376 377 378
	}

	return retval;
}

/* No kernel lock - fine */
static unsigned int evdev_poll(struct file *file, poll_table *wait)
{
379 380
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
381

382 383 384
	poll_wait(file, &evdev->wait, wait);
	return ((client->head == client->tail) ? 0 : (POLLIN | POLLRDNORM)) |
		(evdev->exist ? 0 : (POLLHUP | POLLERR));
L
Linus Torvalds 已提交
385 386
}

387 388 389
#ifdef CONFIG_COMPAT

#define BITS_PER_LONG_COMPAT (sizeof(compat_long_t) * 8)
390
#define BITS_TO_LONGS_COMPAT(x) ((((x) - 1) / BITS_PER_LONG_COMPAT) + 1)
391 392 393 394 395 396 397 398

#ifdef __BIG_ENDIAN
static int bits_to_user(unsigned long *bits, unsigned int maxbit,
			unsigned int maxlen, void __user *p, int compat)
{
	int len, i;

	if (compat) {
399
		len = BITS_TO_LONGS_COMPAT(maxbit) * sizeof(compat_long_t);
400
		if (len > maxlen)
401 402 403 404 405 406 407 408 409
			len = maxlen;

		for (i = 0; i < len / sizeof(compat_long_t); i++)
			if (copy_to_user((compat_long_t __user *) p + i,
					 (compat_long_t *) bits +
						i + 1 - ((i % 2) << 1),
					 sizeof(compat_long_t)))
				return -EFAULT;
	} else {
410
		len = BITS_TO_LONGS(maxbit) * sizeof(long);
411 412 413 414 415 416 417 418 419 420 421 422 423 424
		if (len > maxlen)
			len = maxlen;

		if (copy_to_user(p, bits, len))
			return -EFAULT;
	}

	return len;
}
#else
static int bits_to_user(unsigned long *bits, unsigned int maxbit,
			unsigned int maxlen, void __user *p, int compat)
{
	int len = compat ?
425 426
			BITS_TO_LONGS_COMPAT(maxbit) * sizeof(compat_long_t) :
			BITS_TO_LONGS(maxbit) * sizeof(long);
427 428 429 430 431 432 433 434 435 436 437 438 439

	if (len > maxlen)
		len = maxlen;

	return copy_to_user(p, bits, len) ? -EFAULT : len;
}
#endif /* __BIG_ENDIAN */

#else

static int bits_to_user(unsigned long *bits, unsigned int maxbit,
			unsigned int maxlen, void __user *p, int compat)
{
440
	int len = BITS_TO_LONGS(maxbit) * sizeof(long);
441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463

	if (len > maxlen)
		len = maxlen;

	return copy_to_user(p, bits, len) ? -EFAULT : len;
}

#endif /* CONFIG_COMPAT */

static int str_to_user(const char *str, unsigned int maxlen, void __user *p)
{
	int len;

	if (!str)
		return -ENOENT;

	len = strlen(str) + 1;
	if (len > maxlen)
		len = maxlen;

	return copy_to_user(p, str, len) ? -EFAULT : len;
}

464
#define OLD_KEY_MAX	0x1ff
465 466
static int handle_eviocgbit(struct input_dev *dev, unsigned int cmd, void __user *p, int compat_mode)
{
467
	static unsigned long keymax_warn_time;
468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483
	unsigned long *bits;
	int len;

	switch (_IOC_NR(cmd) & EV_MAX) {

	case      0: bits = dev->evbit;  len = EV_MAX;  break;
	case EV_KEY: bits = dev->keybit; len = KEY_MAX; break;
	case EV_REL: bits = dev->relbit; len = REL_MAX; break;
	case EV_ABS: bits = dev->absbit; len = ABS_MAX; break;
	case EV_MSC: bits = dev->mscbit; len = MSC_MAX; break;
	case EV_LED: bits = dev->ledbit; len = LED_MAX; break;
	case EV_SND: bits = dev->sndbit; len = SND_MAX; break;
	case EV_FF:  bits = dev->ffbit;  len = FF_MAX;  break;
	case EV_SW:  bits = dev->swbit;  len = SW_MAX;  break;
	default: return -EINVAL;
	}
484 485 486 487 488 489 490 491 492 493

	/*
	 * Work around bugs in userspace programs that like to do
	 * EVIOCGBIT(EV_KEY, KEY_MAX) and not realize that 'len'
	 * should be in bytes, not in bits.
	 */
	if ((_IOC_NR(cmd) & EV_MAX) == EV_KEY && _IOC_SIZE(cmd) == OLD_KEY_MAX) {
		len = OLD_KEY_MAX;
		if (printk_timed_ratelimit(&keymax_warn_time, 10 * 1000))
			printk(KERN_WARNING
494 495
				"evdev.c(EVIOCGBIT): Suspicious buffer size %u, "
				"limiting output to %zu bytes. See "
496 497 498 499 500
				"http://userweb.kernel.org/~dtor/eviocgbit-bug.html\n",
				OLD_KEY_MAX,
				BITS_TO_LONGS(OLD_KEY_MAX) * sizeof(long));
	}

501 502
	return bits_to_user(bits, len, _IOC_SIZE(cmd), p, compat_mode);
}
503
#undef OLD_KEY_MAX
504

505 506
static long evdev_do_ioctl(struct file *file, unsigned int cmd,
			   void __user *p, int compat_mode)
L
Linus Torvalds 已提交
507
{
508 509
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
L
Linus Torvalds 已提交
510 511
	struct input_dev *dev = evdev->handle.dev;
	struct input_absinfo abs;
512
	struct ff_effect effect;
513
	int __user *ip = (int __user *)p;
L
Linus Torvalds 已提交
514
	int i, t, u, v;
515
	int error;
L
Linus Torvalds 已提交
516 517 518

	switch (cmd) {

519 520
	case EVIOCGVERSION:
		return put_user(EV_VERSION, ip);
L
Linus Torvalds 已提交
521

522 523 524 525
	case EVIOCGID:
		if (copy_to_user(p, &dev->id, sizeof(struct input_id)))
			return -EFAULT;
		return 0;
526

527 528 529 530 531 532 533 534
	case EVIOCGREP:
		if (!test_bit(EV_REP, dev->evbit))
			return -ENOSYS;
		if (put_user(dev->rep[REP_DELAY], ip))
			return -EFAULT;
		if (put_user(dev->rep[REP_PERIOD], ip + 1))
			return -EFAULT;
		return 0;
535

536 537 538 539 540 541 542
	case EVIOCSREP:
		if (!test_bit(EV_REP, dev->evbit))
			return -ENOSYS;
		if (get_user(u, ip))
			return -EFAULT;
		if (get_user(v, ip + 1))
			return -EFAULT;
543

544 545
		input_inject_event(&evdev->handle, EV_REP, REP_DELAY, u);
		input_inject_event(&evdev->handle, EV_REP, REP_PERIOD, v);
546

547
		return 0;
L
Linus Torvalds 已提交
548

549 550 551
	case EVIOCGKEYCODE:
		if (get_user(t, ip))
			return -EFAULT;
552

553
		error = input_get_keycode(dev, t, &v);
554 555
		if (error)
			return error;
556

557 558
		if (put_user(v, ip + 1))
			return -EFAULT;
559

560
		return 0;
L
Linus Torvalds 已提交
561

562 563 564
	case EVIOCSKEYCODE:
		if (get_user(t, ip) || get_user(v, ip + 1))
			return -EFAULT;
565

566
		return input_set_keycode(dev, t, v);
L
Linus Torvalds 已提交
567

568 569
	case EVIOCRMFF:
		return input_ff_erase(dev, (int)(unsigned long) p, file);
L
Linus Torvalds 已提交
570

571 572 573 574 575 576 577 578 579 580 581 582
	case EVIOCGEFFECTS:
		i = test_bit(EV_FF, dev->evbit) ?
				dev->ff->max_effects : 0;
		if (put_user(i, ip))
			return -EFAULT;
		return 0;

	case EVIOCGRAB:
		if (p)
			return evdev_grab(evdev, client);
		else
			return evdev_ungrab(evdev, client);
L
Linus Torvalds 已提交
583

584
	default:
L
Linus Torvalds 已提交
585

586 587
		if (_IOC_TYPE(cmd) != 'E')
			return -EINVAL;
L
Linus Torvalds 已提交
588

589
		if (_IOC_DIR(cmd) == _IOC_READ) {
590

591 592
			if ((_IOC_NR(cmd) & ~EV_MAX) == _IOC_NR(EVIOCGBIT(0, 0)))
				return handle_eviocgbit(dev, cmd, p, compat_mode);
L
Linus Torvalds 已提交
593

594 595 596
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGKEY(0)))
				return bits_to_user(dev->key, KEY_MAX, _IOC_SIZE(cmd),
						    p, compat_mode);
L
Linus Torvalds 已提交
597

598 599 600
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGLED(0)))
				return bits_to_user(dev->led, LED_MAX, _IOC_SIZE(cmd),
						    p, compat_mode);
L
Linus Torvalds 已提交
601

602 603 604
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGSND(0)))
				return bits_to_user(dev->snd, SND_MAX, _IOC_SIZE(cmd),
						    p, compat_mode);
605

606 607 608
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGSW(0)))
				return bits_to_user(dev->sw, SW_MAX, _IOC_SIZE(cmd),
						    p, compat_mode);
L
Linus Torvalds 已提交
609

610
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGNAME(0)))
611 612
				return str_to_user(dev_name(&evdev->dev),
						   _IOC_SIZE(cmd), p);
L
Linus Torvalds 已提交
613

614 615
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGPHYS(0)))
				return str_to_user(dev->phys, _IOC_SIZE(cmd), p);
L
Linus Torvalds 已提交
616

617 618
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGUNIQ(0)))
				return str_to_user(dev->uniq, _IOC_SIZE(cmd), p);
L
Linus Torvalds 已提交
619

620
			if ((_IOC_NR(cmd) & ~ABS_MAX) == _IOC_NR(EVIOCGABS(0))) {
L
Linus Torvalds 已提交
621

622
				t = _IOC_NR(cmd) & ABS_MAX;
L
Linus Torvalds 已提交
623

624 625 626 627 628
				abs.value = dev->abs[t];
				abs.minimum = dev->absmin[t];
				abs.maximum = dev->absmax[t];
				abs.fuzz = dev->absfuzz[t];
				abs.flat = dev->absflat[t];
629
				abs.resolution = dev->absres[t];
630

631 632 633
				if (copy_to_user(p, &abs, min_t(size_t,
								_IOC_SIZE(cmd),
								sizeof(struct input_absinfo))))
634
					return -EFAULT;
L
Linus Torvalds 已提交
635

636
				return 0;
L
Linus Torvalds 已提交
637 638
			}

639 640 641
		}

		if (_IOC_DIR(cmd) == _IOC_WRITE) {
L
Linus Torvalds 已提交
642

643 644
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCSFF)) {

645
				if (input_ff_effect_from_user(p, _IOC_SIZE(cmd), &effect))
646 647 648 649 650 651 652 653 654 655
					return -EFAULT;

				error = input_ff_upload(dev, &effect, file);

				if (put_user(effect.id, &(((struct ff_effect __user *)p)->id)))
					return -EFAULT;

				return error;
			}

656
			if ((_IOC_NR(cmd) & ~ABS_MAX) == _IOC_NR(EVIOCSABS(0))) {
L
Linus Torvalds 已提交
657

658
				t = _IOC_NR(cmd) & ABS_MAX;
659

660 661 662
				if (copy_from_user(&abs, p, min_t(size_t,
								  _IOC_SIZE(cmd),
								  sizeof(struct input_absinfo))))
663
					return -EFAULT;
L
Linus Torvalds 已提交
664

665 666 667 668 669 670
				/*
				 * Take event lock to ensure that we are not
				 * changing device parameters in the middle
				 * of event.
				 */
				spin_lock_irq(&dev->event_lock);
L
Linus Torvalds 已提交
671

672 673 674 675 676
				dev->abs[t] = abs.value;
				dev->absmin[t] = abs.minimum;
				dev->absmax[t] = abs.maximum;
				dev->absfuzz[t] = abs.fuzz;
				dev->absflat[t] = abs.flat;
677 678
				dev->absres[t] = _IOC_SIZE(cmd) < sizeof(struct input_absinfo) ?
							0 : abs.resolution;
679 680 681 682

				spin_unlock_irq(&dev->event_lock);

				return 0;
L
Linus Torvalds 已提交
683
			}
684
		}
L
Linus Torvalds 已提交
685 686 687 688
	}
	return -EINVAL;
}

689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711
static long evdev_ioctl_handler(struct file *file, unsigned int cmd,
				void __user *p, int compat_mode)
{
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
	int retval;

	retval = mutex_lock_interruptible(&evdev->mutex);
	if (retval)
		return retval;

	if (!evdev->exist) {
		retval = -ENODEV;
		goto out;
	}

	retval = evdev_do_ioctl(file, cmd, p, compat_mode);

 out:
	mutex_unlock(&evdev->mutex);
	return retval;
}

712 713 714 715
static long evdev_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
{
	return evdev_ioctl_handler(file, cmd, (void __user *)arg, 0);
}
716

717
#ifdef CONFIG_COMPAT
718 719
static long evdev_ioctl_compat(struct file *file,
				unsigned int cmd, unsigned long arg)
720
{
721
	return evdev_ioctl_handler(file, cmd, compat_ptr(arg), 1);
L
Linus Torvalds 已提交
722
}
723
#endif
L
Linus Torvalds 已提交
724

D
Dmitry Torokhov 已提交
725
static const struct file_operations evdev_fops = {
726 727 728 729 730 731 732
	.owner		= THIS_MODULE,
	.read		= evdev_read,
	.write		= evdev_write,
	.poll		= evdev_poll,
	.open		= evdev_open,
	.release	= evdev_release,
	.unlocked_ioctl	= evdev_ioctl,
733
#ifdef CONFIG_COMPAT
734
	.compat_ioctl	= evdev_ioctl_compat,
735
#endif
736 737
	.fasync		= evdev_fasync,
	.flush		= evdev_flush
L
Linus Torvalds 已提交
738 739
};

740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790
static int evdev_install_chrdev(struct evdev *evdev)
{
	/*
	 * No need to do any locking here as calls to connect and
	 * disconnect are serialized by the input core
	 */
	evdev_table[evdev->minor] = evdev;
	return 0;
}

static void evdev_remove_chrdev(struct evdev *evdev)
{
	/*
	 * Lock evdev table to prevent race with evdev_open()
	 */
	mutex_lock(&evdev_table_mutex);
	evdev_table[evdev->minor] = NULL;
	mutex_unlock(&evdev_table_mutex);
}

/*
 * Mark device non-existent. This disables writes, ioctls and
 * prevents new users from opening the device. Already posted
 * blocking reads will stay, however new ones will fail.
 */
static void evdev_mark_dead(struct evdev *evdev)
{
	mutex_lock(&evdev->mutex);
	evdev->exist = 0;
	mutex_unlock(&evdev->mutex);
}

static void evdev_cleanup(struct evdev *evdev)
{
	struct input_handle *handle = &evdev->handle;

	evdev_mark_dead(evdev);
	evdev_hangup(evdev);
	evdev_remove_chrdev(evdev);

	/* evdev is marked dead so no one else accesses evdev->open */
	if (evdev->open) {
		input_flush_device(handle, NULL);
		input_close_device(handle);
	}
}

/*
 * Create new evdev device. Note that input core serializes calls
 * to connect and disconnect so we don't need to lock evdev_table here.
 */
791 792
static int evdev_connect(struct input_handler *handler, struct input_dev *dev,
			 const struct input_device_id *id)
L
Linus Torvalds 已提交
793 794 795
{
	struct evdev *evdev;
	int minor;
796
	int error;
L
Linus Torvalds 已提交
797

798 799 800 801
	for (minor = 0; minor < EVDEV_MINORS; minor++)
		if (!evdev_table[minor])
			break;

L
Linus Torvalds 已提交
802 803
	if (minor == EVDEV_MINORS) {
		printk(KERN_ERR "evdev: no more free evdev devices\n");
804
		return -ENFILE;
L
Linus Torvalds 已提交
805 806
	}

807 808 809
	evdev = kzalloc(sizeof(struct evdev), GFP_KERNEL);
	if (!evdev)
		return -ENOMEM;
L
Linus Torvalds 已提交
810

811
	INIT_LIST_HEAD(&evdev->client_list);
812 813
	spin_lock_init(&evdev->client_lock);
	mutex_init(&evdev->mutex);
L
Linus Torvalds 已提交
814 815
	init_waitqueue_head(&evdev->wait);

816
	dev_set_name(&evdev->dev, "event%d", minor);
L
Linus Torvalds 已提交
817 818
	evdev->exist = 1;
	evdev->minor = minor;
819

820
	evdev->handle.dev = input_get_device(dev);
821
	evdev->handle.name = dev_name(&evdev->dev);
L
Linus Torvalds 已提交
822 823 824
	evdev->handle.handler = handler;
	evdev->handle.private = evdev;

825
	evdev->dev.devt = MKDEV(INPUT_MAJOR, EVDEV_MINOR_BASE + minor);
826 827 828 829
	evdev->dev.class = &input_class;
	evdev->dev.parent = &dev->dev;
	evdev->dev.release = evdev_free;
	device_initialize(&evdev->dev);
830

831
	error = input_register_handle(&evdev->handle);
832
	if (error)
833
		goto err_free_evdev;
834

835 836 837 838 839
	error = evdev_install_chrdev(evdev);
	if (error)
		goto err_unregister_handle;

	error = device_add(&evdev->dev);
840
	if (error)
841
		goto err_cleanup_evdev;
L
Linus Torvalds 已提交
842

843
	return 0;
L
Linus Torvalds 已提交
844

845 846 847 848
 err_cleanup_evdev:
	evdev_cleanup(evdev);
 err_unregister_handle:
	input_unregister_handle(&evdev->handle);
849
 err_free_evdev:
850
	put_device(&evdev->dev);
851
	return error;
L
Linus Torvalds 已提交
852 853 854 855 856 857
}

static void evdev_disconnect(struct input_handle *handle)
{
	struct evdev *evdev = handle->private;

858
	device_del(&evdev->dev);
859 860
	evdev_cleanup(evdev);
	input_unregister_handle(handle);
861
	put_device(&evdev->dev);
L
Linus Torvalds 已提交
862 863
}

D
Dmitry Torokhov 已提交
864
static const struct input_device_id evdev_ids[] = {
L
Linus Torvalds 已提交
865 866 867 868 869 870 871
	{ .driver_info = 1 },	/* Matches all devices */
	{ },			/* Terminating zero entry */
};

MODULE_DEVICE_TABLE(input, evdev_ids);

static struct input_handler evdev_handler = {
872 873 874 875 876 877 878
	.event		= evdev_event,
	.connect	= evdev_connect,
	.disconnect	= evdev_disconnect,
	.fops		= &evdev_fops,
	.minor		= EVDEV_MINOR_BASE,
	.name		= "evdev",
	.id_table	= evdev_ids,
L
Linus Torvalds 已提交
879 880 881 882
};

static int __init evdev_init(void)
{
883
	return input_register_handler(&evdev_handler);
L
Linus Torvalds 已提交
884 885 886 887 888 889 890 891 892 893 894 895 896
}

static void __exit evdev_exit(void)
{
	input_unregister_handler(&evdev_handler);
}

module_init(evdev_init);
module_exit(evdev_exit);

MODULE_AUTHOR("Vojtech Pavlik <vojtech@ucw.cz>");
MODULE_DESCRIPTION("Input driver event char devices");
MODULE_LICENSE("GPL");