evdev.c 23.5 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
/*
 * Event char devices, giving access to raw input device events.
 *
 * Copyright (c) 1999-2002 Vojtech Pavlik
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License version 2 as published by
 * the Free Software Foundation.
 */

#define EVDEV_MINOR_BASE	64
#define EVDEV_MINORS		32
#define EVDEV_BUFFER_SIZE	64

#include <linux/poll.h>
#include <linux/slab.h>
#include <linux/module.h>
#include <linux/init.h>
#include <linux/input.h>
#include <linux/major.h>
#include <linux/device.h>
22
#include <linux/compat.h>
L
Linus Torvalds 已提交
23 24 25 26 27 28 29 30

struct evdev {
	int exist;
	int open;
	int minor;
	char name[16];
	struct input_handle handle;
	wait_queue_head_t wait;
31 32
	struct evdev_client *grab;
	struct list_head client_list;
33 34
	spinlock_t client_lock; /* protects client_list */
	struct mutex mutex;
35
	struct device dev;
L
Linus Torvalds 已提交
36 37
};

38
struct evdev_client {
L
Linus Torvalds 已提交
39 40 41
	struct input_event buffer[EVDEV_BUFFER_SIZE];
	int head;
	int tail;
42
	spinlock_t buffer_lock; /* protects access to buffer, head and tail */
L
Linus Torvalds 已提交
43 44 45 46 47 48
	struct fasync_struct *fasync;
	struct evdev *evdev;
	struct list_head node;
};

static struct evdev *evdev_table[EVDEV_MINORS];
49
static DEFINE_MUTEX(evdev_table_mutex);
L
Linus Torvalds 已提交
50

51 52 53 54 55 56 57 58 59 60 61 62 63 64 65
static void evdev_pass_event(struct evdev_client *client,
			     struct input_event *event)
{
	/*
	 * Interrupts are disabled, just acquire the lock
	 */
	spin_lock(&client->buffer_lock);
	client->buffer[client->head++] = *event;
	client->head &= EVDEV_BUFFER_SIZE - 1;
	spin_unlock(&client->buffer_lock);

	kill_fasync(&client->fasync, SIGIO, POLL_IN);
}

/*
D
Dmitry Torokhov 已提交
66
 * Pass incoming event to all connected clients.
67 68 69
 */
static void evdev_event(struct input_handle *handle,
			unsigned int type, unsigned int code, int value)
L
Linus Torvalds 已提交
70 71
{
	struct evdev *evdev = handle->private;
72
	struct evdev_client *client;
73
	struct input_event event;
L
Linus Torvalds 已提交
74

75 76 77 78
	do_gettimeofday(&event.time);
	event.type = type;
	event.code = code;
	event.value = value;
L
Linus Torvalds 已提交
79

D
Dmitry Torokhov 已提交
80 81
	rcu_read_lock();

82 83 84 85 86 87
	client = rcu_dereference(evdev->grab);
	if (client)
		evdev_pass_event(client, &event);
	else
		list_for_each_entry_rcu(client, &evdev->client_list, node)
			evdev_pass_event(client, &event);
L
Linus Torvalds 已提交
88

D
Dmitry Torokhov 已提交
89 90
	rcu_read_unlock();

L
Linus Torvalds 已提交
91 92 93 94 95
	wake_up_interruptible(&evdev->wait);
}

static int evdev_fasync(int fd, struct file *file, int on)
{
96
	struct evdev_client *client = file->private_data;
L
Linus Torvalds 已提交
97
	int retval;
98

99
	retval = fasync_helper(fd, file, on, &client->fasync);
100

L
Linus Torvalds 已提交
101 102 103
	return retval < 0 ? retval : 0;
}

104
static int evdev_flush(struct file *file, fl_owner_t id)
L
Linus Torvalds 已提交
105
{
106 107
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
108 109 110 111 112
	int retval;

	retval = mutex_lock_interruptible(&evdev->mutex);
	if (retval)
		return retval;
113

114
	if (!evdev->exist)
115 116 117
		retval = -ENODEV;
	else
		retval = input_flush_device(&evdev->handle, file);
118

119 120
	mutex_unlock(&evdev->mutex);
	return retval;
L
Linus Torvalds 已提交
121 122
}

123
static void evdev_free(struct device *dev)
L
Linus Torvalds 已提交
124
{
125 126
	struct evdev *evdev = container_of(dev, struct evdev, dev);

127
	input_put_device(evdev->handle.dev);
L
Linus Torvalds 已提交
128 129 130
	kfree(evdev);
}

131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146
/*
 * Grabs an event device (along with underlying input device).
 * This function is called with evdev->mutex taken.
 */
static int evdev_grab(struct evdev *evdev, struct evdev_client *client)
{
	int error;

	if (evdev->grab)
		return -EBUSY;

	error = input_grab_device(&evdev->handle);
	if (error)
		return error;

	rcu_assign_pointer(evdev->grab, client);
D
Dmitry Torokhov 已提交
147
	synchronize_rcu();
148 149 150 151 152 153 154 155 156 157

	return 0;
}

static int evdev_ungrab(struct evdev *evdev, struct evdev_client *client)
{
	if (evdev->grab != client)
		return  -EINVAL;

	rcu_assign_pointer(evdev->grab, NULL);
D
Dmitry Torokhov 已提交
158
	synchronize_rcu();
159 160 161 162 163 164 165 166 167 168 169
	input_release_device(&evdev->handle);

	return 0;
}

static void evdev_attach_client(struct evdev *evdev,
				struct evdev_client *client)
{
	spin_lock(&evdev->client_lock);
	list_add_tail_rcu(&client->node, &evdev->client_list);
	spin_unlock(&evdev->client_lock);
D
Dmitry Torokhov 已提交
170
	synchronize_rcu();
171 172 173 174 175 176 177 178
}

static void evdev_detach_client(struct evdev *evdev,
				struct evdev_client *client)
{
	spin_lock(&evdev->client_lock);
	list_del_rcu(&client->node);
	spin_unlock(&evdev->client_lock);
D
Dmitry Torokhov 已提交
179
	synchronize_rcu();
180 181 182 183 184 185 186 187 188 189 190 191
}

static int evdev_open_device(struct evdev *evdev)
{
	int retval;

	retval = mutex_lock_interruptible(&evdev->mutex);
	if (retval)
		return retval;

	if (!evdev->exist)
		retval = -ENODEV;
192
	else if (!evdev->open++) {
193
		retval = input_open_device(&evdev->handle);
194 195 196
		if (retval)
			evdev->open--;
	}
197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227

	mutex_unlock(&evdev->mutex);
	return retval;
}

static void evdev_close_device(struct evdev *evdev)
{
	mutex_lock(&evdev->mutex);

	if (evdev->exist && !--evdev->open)
		input_close_device(&evdev->handle);

	mutex_unlock(&evdev->mutex);
}

/*
 * Wake up users waiting for IO so they can disconnect from
 * dead device.
 */
static void evdev_hangup(struct evdev *evdev)
{
	struct evdev_client *client;

	spin_lock(&evdev->client_lock);
	list_for_each_entry(client, &evdev->client_list, node)
		kill_fasync(&client->fasync, SIGIO, POLL_HUP);
	spin_unlock(&evdev->client_lock);

	wake_up_interruptible(&evdev->wait);
}

228
static int evdev_release(struct inode *inode, struct file *file)
L
Linus Torvalds 已提交
229
{
230 231
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
L
Linus Torvalds 已提交
232

233 234 235 236
	mutex_lock(&evdev->mutex);
	if (evdev->grab == client)
		evdev_ungrab(evdev, client);
	mutex_unlock(&evdev->mutex);
L
Linus Torvalds 已提交
237 238

	evdev_fasync(-1, file, 0);
239
	evdev_detach_client(evdev, client);
240
	kfree(client);
L
Linus Torvalds 已提交
241

242
	evdev_close_device(evdev);
243
	put_device(&evdev->dev);
L
Linus Torvalds 已提交
244 245 246 247

	return 0;
}

248
static int evdev_open(struct inode *inode, struct file *file)
L
Linus Torvalds 已提交
249
{
250
	struct evdev *evdev;
251
	struct evdev_client *client;
L
Linus Torvalds 已提交
252
	int i = iminor(inode) - EVDEV_MINOR_BASE;
253
	int error;
L
Linus Torvalds 已提交
254

255
	if (i >= EVDEV_MINORS)
L
Linus Torvalds 已提交
256 257
		return -ENODEV;

258 259 260
	error = mutex_lock_interruptible(&evdev_table_mutex);
	if (error)
		return error;
261
	evdev = evdev_table[i];
262 263 264
	if (evdev)
		get_device(&evdev->dev);
	mutex_unlock(&evdev_table_mutex);
265

266
	if (!evdev)
L
Linus Torvalds 已提交
267 268
		return -ENODEV;

269
	client = kzalloc(sizeof(struct evdev_client), GFP_KERNEL);
270 271 272 273
	if (!client) {
		error = -ENOMEM;
		goto err_put_evdev;
	}
L
Linus Torvalds 已提交
274

275
	spin_lock_init(&client->buffer_lock);
276
	client->evdev = evdev;
277
	evdev_attach_client(evdev, client);
L
Linus Torvalds 已提交
278

279 280 281
	error = evdev_open_device(evdev);
	if (error)
		goto err_free_client;
L
Linus Torvalds 已提交
282

283
	file->private_data = client;
L
Linus Torvalds 已提交
284
	return 0;
285 286

 err_free_client:
287
	evdev_detach_client(evdev, client);
288 289 290 291
	kfree(client);
 err_put_evdev:
	put_device(&evdev->dev);
	return error;
L
Linus Torvalds 已提交
292 293
}

294
#ifdef CONFIG_COMPAT
295

296 297 298 299 300 301 302
struct input_event_compat {
	struct compat_timeval time;
	__u16 type;
	__u16 code;
	__s32 value;
};

303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331
struct ff_periodic_effect_compat {
	__u16 waveform;
	__u16 period;
	__s16 magnitude;
	__s16 offset;
	__u16 phase;

	struct ff_envelope envelope;

	__u32 custom_len;
	compat_uptr_t custom_data;
};

struct ff_effect_compat {
	__u16 type;
	__s16 id;
	__u16 direction;
	struct ff_trigger trigger;
	struct ff_replay replay;

	union {
		struct ff_constant_effect constant;
		struct ff_ramp_effect ramp;
		struct ff_periodic_effect_compat periodic;
		struct ff_condition_effect condition[2]; /* One for each axis */
		struct ff_rumble_effect rumble;
	} u;
};

332 333
/* Note to the author of this code: did it ever occur to
   you why the ifdefs are needed? Think about it again. -AK */
334
#ifdef CONFIG_X86_64
335
#  define COMPAT_TEST is_compat_task()
336
#elif defined(CONFIG_IA64)
A
Al Viro 已提交
337
#  define COMPAT_TEST IS_IA32_PROCESS(task_pt_regs(current))
338
#elif defined(CONFIG_S390)
339
#  define COMPAT_TEST test_thread_flag(TIF_31BIT)
340
#elif defined(CONFIG_MIPS)
341
#  define COMPAT_TEST test_thread_flag(TIF_32BIT_ADDR)
342 343 344 345
#else
#  define COMPAT_TEST test_thread_flag(TIF_32BIT)
#endif

346
static inline size_t evdev_event_size(void)
347
{
348 349 350
	return COMPAT_TEST ?
		sizeof(struct input_event_compat) : sizeof(struct input_event);
}
351

352 353
static int evdev_event_from_user(const char __user *buffer,
				 struct input_event *event)
354 355 356 357
{
	if (COMPAT_TEST) {
		struct input_event_compat compat_event;

358 359
		if (copy_from_user(&compat_event, buffer,
				   sizeof(struct input_event_compat)))
360 361 362 363 364 365 366 367 368 369
			return -EFAULT;

		event->time.tv_sec = compat_event.time.tv_sec;
		event->time.tv_usec = compat_event.time.tv_usec;
		event->type = compat_event.type;
		event->code = compat_event.code;
		event->value = compat_event.value;

	} else {
		if (copy_from_user(event, buffer, sizeof(struct input_event)))
370 371 372
			return -EFAULT;
	}

373
	return 0;
374 375
}

376 377
static int evdev_event_to_user(char __user *buffer,
				const struct input_event *event)
L
Linus Torvalds 已提交
378
{
379 380
	if (COMPAT_TEST) {
		struct input_event_compat compat_event;
L
Linus Torvalds 已提交
381

382 383 384 385 386
		compat_event.time.tv_sec = event->time.tv_sec;
		compat_event.time.tv_usec = event->time.tv_usec;
		compat_event.type = event->type;
		compat_event.code = event->code;
		compat_event.value = event->value;
387

388 389
		if (copy_to_user(buffer, &compat_event,
				 sizeof(struct input_event_compat)))
390
			return -EFAULT;
L
Linus Torvalds 已提交
391

392 393
	} else {
		if (copy_to_user(buffer, event, sizeof(struct input_event)))
L
Linus Torvalds 已提交
394 395 396
			return -EFAULT;
	}

397
	return 0;
L
Linus Torvalds 已提交
398 399
}

400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435
static int evdev_ff_effect_from_user(const char __user *buffer, size_t size,
				     struct ff_effect *effect)
{
	if (COMPAT_TEST) {
		struct ff_effect_compat *compat_effect;

		if (size != sizeof(struct ff_effect_compat))
			return -EINVAL;

		/*
		 * It so happens that the pointer which needs to be changed
		 * is the last field in the structure, so we can copy the
		 * whole thing and replace just the pointer.
		 */

		compat_effect = (struct ff_effect_compat *)effect;

		if (copy_from_user(compat_effect, buffer,
				   sizeof(struct ff_effect_compat)))
			return -EFAULT;

		if (compat_effect->type == FF_PERIODIC &&
		    compat_effect->u.periodic.waveform == FF_CUSTOM)
			effect->u.periodic.custom_data =
				compat_ptr(compat_effect->u.periodic.custom_data);
	} else {
		if (size != sizeof(struct ff_effect))
			return -EINVAL;

		if (copy_from_user(effect, buffer, sizeof(struct ff_effect)))
			return -EFAULT;
	}

	return 0;
}

436 437 438
#else

static inline size_t evdev_event_size(void)
439
{
440 441
	return sizeof(struct input_event);
}
442

443 444
static int evdev_event_from_user(const char __user *buffer,
				 struct input_event *event)
445 446 447
{
	if (copy_from_user(event, buffer, sizeof(struct input_event)))
		return -EFAULT;
448

449 450
	return 0;
}
451

452 453
static int evdev_event_to_user(char __user *buffer,
				const struct input_event *event)
454 455 456
{
	if (copy_to_user(buffer, event, sizeof(struct input_event)))
		return -EFAULT;
457

458 459 460
	return 0;
}

461 462 463 464 465 466 467 468 469 470 471 472
static int evdev_ff_effect_from_user(const char __user *buffer, size_t size,
				     struct ff_effect *effect)
{
	if (size != sizeof(struct ff_effect))
		return -EINVAL;

	if (copy_from_user(effect, buffer, sizeof(struct ff_effect)))
		return -EFAULT;

	return 0;
}

473 474
#endif /* CONFIG_COMPAT */

475 476
static ssize_t evdev_write(struct file *file, const char __user *buffer,
			   size_t count, loff_t *ppos)
477
{
478 479
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
480
	struct input_event event;
481
	int retval;
482

483 484 485 486 487 488 489 490
	retval = mutex_lock_interruptible(&evdev->mutex);
	if (retval)
		return retval;

	if (!evdev->exist) {
		retval = -ENODEV;
		goto out;
	}
491

492 493
	while (retval < count) {

494 495 496 497 498 499 500
		if (evdev_event_from_user(buffer + retval, &event)) {
			retval = -EFAULT;
			goto out;
		}

		input_inject_event(&evdev->handle,
				   event.type, event.code, event.value);
501
		retval += evdev_event_size();
502 503
	}

504 505
 out:
	mutex_unlock(&evdev->mutex);
506 507 508
	return retval;
}

509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527 528
static int evdev_fetch_next_event(struct evdev_client *client,
				  struct input_event *event)
{
	int have_event;

	spin_lock_irq(&client->buffer_lock);

	have_event = client->head != client->tail;
	if (have_event) {
		*event = client->buffer[client->tail++];
		client->tail &= EVDEV_BUFFER_SIZE - 1;
	}

	spin_unlock_irq(&client->buffer_lock);

	return have_event;
}

static ssize_t evdev_read(struct file *file, char __user *buffer,
			  size_t count, loff_t *ppos)
L
Linus Torvalds 已提交
529
{
530 531
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
532
	struct input_event event;
L
Linus Torvalds 已提交
533 534
	int retval;

535
	if (count < evdev_event_size())
L
Linus Torvalds 已提交
536 537
		return -EINVAL;

538 539
	if (client->head == client->tail && evdev->exist &&
	    (file->f_flags & O_NONBLOCK))
L
Linus Torvalds 已提交
540 541
		return -EAGAIN;

542 543
	retval = wait_event_interruptible(evdev->wait,
		client->head != client->tail || !evdev->exist);
L
Linus Torvalds 已提交
544 545 546
	if (retval)
		return retval;

547
	if (!evdev->exist)
L
Linus Torvalds 已提交
548 549
		return -ENODEV;

550 551
	while (retval + evdev_event_size() <= count &&
	       evdev_fetch_next_event(client, &event)) {
552

553
		if (evdev_event_to_user(buffer + retval, &event))
554 555 556
			return -EFAULT;

		retval += evdev_event_size();
L
Linus Torvalds 已提交
557 558 559 560 561 562 563 564
	}

	return retval;
}

/* No kernel lock - fine */
static unsigned int evdev_poll(struct file *file, poll_table *wait)
{
565 566
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
567

568 569 570
	poll_wait(file, &evdev->wait, wait);
	return ((client->head == client->tail) ? 0 : (POLLIN | POLLRDNORM)) |
		(evdev->exist ? 0 : (POLLHUP | POLLERR));
L
Linus Torvalds 已提交
571 572
}

573 574 575
#ifdef CONFIG_COMPAT

#define BITS_PER_LONG_COMPAT (sizeof(compat_long_t) * 8)
576
#define BITS_TO_LONGS_COMPAT(x) ((((x) - 1) / BITS_PER_LONG_COMPAT) + 1)
577 578 579 580 581 582 583 584

#ifdef __BIG_ENDIAN
static int bits_to_user(unsigned long *bits, unsigned int maxbit,
			unsigned int maxlen, void __user *p, int compat)
{
	int len, i;

	if (compat) {
585
		len = BITS_TO_LONGS_COMPAT(maxbit) * sizeof(compat_long_t);
586
		if (len > maxlen)
587 588 589 590 591 592 593 594 595
			len = maxlen;

		for (i = 0; i < len / sizeof(compat_long_t); i++)
			if (copy_to_user((compat_long_t __user *) p + i,
					 (compat_long_t *) bits +
						i + 1 - ((i % 2) << 1),
					 sizeof(compat_long_t)))
				return -EFAULT;
	} else {
596
		len = BITS_TO_LONGS(maxbit) * sizeof(long);
597 598 599 600 601 602 603 604 605 606 607 608 609 610
		if (len > maxlen)
			len = maxlen;

		if (copy_to_user(p, bits, len))
			return -EFAULT;
	}

	return len;
}
#else
static int bits_to_user(unsigned long *bits, unsigned int maxbit,
			unsigned int maxlen, void __user *p, int compat)
{
	int len = compat ?
611 612
			BITS_TO_LONGS_COMPAT(maxbit) * sizeof(compat_long_t) :
			BITS_TO_LONGS(maxbit) * sizeof(long);
613 614 615 616 617 618 619 620 621 622 623 624 625

	if (len > maxlen)
		len = maxlen;

	return copy_to_user(p, bits, len) ? -EFAULT : len;
}
#endif /* __BIG_ENDIAN */

#else

static int bits_to_user(unsigned long *bits, unsigned int maxbit,
			unsigned int maxlen, void __user *p, int compat)
{
626
	int len = BITS_TO_LONGS(maxbit) * sizeof(long);
627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649

	if (len > maxlen)
		len = maxlen;

	return copy_to_user(p, bits, len) ? -EFAULT : len;
}

#endif /* CONFIG_COMPAT */

static int str_to_user(const char *str, unsigned int maxlen, void __user *p)
{
	int len;

	if (!str)
		return -ENOENT;

	len = strlen(str) + 1;
	if (len > maxlen)
		len = maxlen;

	return copy_to_user(p, str, len) ? -EFAULT : len;
}

650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671
static int handle_eviocgbit(struct input_dev *dev, unsigned int cmd, void __user *p, int compat_mode)
{
	unsigned long *bits;
	int len;

	switch (_IOC_NR(cmd) & EV_MAX) {

	case      0: bits = dev->evbit;  len = EV_MAX;  break;
	case EV_KEY: bits = dev->keybit; len = KEY_MAX; break;
	case EV_REL: bits = dev->relbit; len = REL_MAX; break;
	case EV_ABS: bits = dev->absbit; len = ABS_MAX; break;
	case EV_MSC: bits = dev->mscbit; len = MSC_MAX; break;
	case EV_LED: bits = dev->ledbit; len = LED_MAX; break;
	case EV_SND: bits = dev->sndbit; len = SND_MAX; break;
	case EV_FF:  bits = dev->ffbit;  len = FF_MAX;  break;
	case EV_SW:  bits = dev->swbit;  len = SW_MAX;  break;
	default: return -EINVAL;
	}
	return bits_to_user(bits, len, _IOC_SIZE(cmd), p, compat_mode);
}


672 673
static long evdev_do_ioctl(struct file *file, unsigned int cmd,
			   void __user *p, int compat_mode)
L
Linus Torvalds 已提交
674
{
675 676
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
L
Linus Torvalds 已提交
677 678
	struct input_dev *dev = evdev->handle.dev;
	struct input_absinfo abs;
679
	struct ff_effect effect;
680
	int __user *ip = (int __user *)p;
L
Linus Torvalds 已提交
681
	int i, t, u, v;
682
	int error;
L
Linus Torvalds 已提交
683 684 685

	switch (cmd) {

686 687
	case EVIOCGVERSION:
		return put_user(EV_VERSION, ip);
L
Linus Torvalds 已提交
688

689 690 691 692
	case EVIOCGID:
		if (copy_to_user(p, &dev->id, sizeof(struct input_id)))
			return -EFAULT;
		return 0;
693

694 695 696 697 698 699 700 701
	case EVIOCGREP:
		if (!test_bit(EV_REP, dev->evbit))
			return -ENOSYS;
		if (put_user(dev->rep[REP_DELAY], ip))
			return -EFAULT;
		if (put_user(dev->rep[REP_PERIOD], ip + 1))
			return -EFAULT;
		return 0;
702

703 704 705 706 707 708 709
	case EVIOCSREP:
		if (!test_bit(EV_REP, dev->evbit))
			return -ENOSYS;
		if (get_user(u, ip))
			return -EFAULT;
		if (get_user(v, ip + 1))
			return -EFAULT;
710

711 712
		input_inject_event(&evdev->handle, EV_REP, REP_DELAY, u);
		input_inject_event(&evdev->handle, EV_REP, REP_PERIOD, v);
713

714
		return 0;
L
Linus Torvalds 已提交
715

716 717 718
	case EVIOCGKEYCODE:
		if (get_user(t, ip))
			return -EFAULT;
719

720
		error = input_get_keycode(dev, t, &v);
721 722
		if (error)
			return error;
723

724 725
		if (put_user(v, ip + 1))
			return -EFAULT;
726

727
		return 0;
L
Linus Torvalds 已提交
728

729 730 731
	case EVIOCSKEYCODE:
		if (get_user(t, ip) || get_user(v, ip + 1))
			return -EFAULT;
732

733
		return input_set_keycode(dev, t, v);
L
Linus Torvalds 已提交
734

735 736
	case EVIOCRMFF:
		return input_ff_erase(dev, (int)(unsigned long) p, file);
L
Linus Torvalds 已提交
737

738 739 740 741 742 743 744 745 746 747 748 749
	case EVIOCGEFFECTS:
		i = test_bit(EV_FF, dev->evbit) ?
				dev->ff->max_effects : 0;
		if (put_user(i, ip))
			return -EFAULT;
		return 0;

	case EVIOCGRAB:
		if (p)
			return evdev_grab(evdev, client);
		else
			return evdev_ungrab(evdev, client);
L
Linus Torvalds 已提交
750

751
	default:
L
Linus Torvalds 已提交
752

753 754
		if (_IOC_TYPE(cmd) != 'E')
			return -EINVAL;
L
Linus Torvalds 已提交
755

756
		if (_IOC_DIR(cmd) == _IOC_READ) {
757

758 759
			if ((_IOC_NR(cmd) & ~EV_MAX) == _IOC_NR(EVIOCGBIT(0, 0)))
				return handle_eviocgbit(dev, cmd, p, compat_mode);
L
Linus Torvalds 已提交
760

761 762 763
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGKEY(0)))
				return bits_to_user(dev->key, KEY_MAX, _IOC_SIZE(cmd),
						    p, compat_mode);
L
Linus Torvalds 已提交
764

765 766 767
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGLED(0)))
				return bits_to_user(dev->led, LED_MAX, _IOC_SIZE(cmd),
						    p, compat_mode);
L
Linus Torvalds 已提交
768

769 770 771
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGSND(0)))
				return bits_to_user(dev->snd, SND_MAX, _IOC_SIZE(cmd),
						    p, compat_mode);
772

773 774 775
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGSW(0)))
				return bits_to_user(dev->sw, SW_MAX, _IOC_SIZE(cmd),
						    p, compat_mode);
L
Linus Torvalds 已提交
776

777 778
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGNAME(0)))
				return str_to_user(dev->name, _IOC_SIZE(cmd), p);
L
Linus Torvalds 已提交
779

780 781
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGPHYS(0)))
				return str_to_user(dev->phys, _IOC_SIZE(cmd), p);
L
Linus Torvalds 已提交
782

783 784
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGUNIQ(0)))
				return str_to_user(dev->uniq, _IOC_SIZE(cmd), p);
L
Linus Torvalds 已提交
785

786
			if ((_IOC_NR(cmd) & ~ABS_MAX) == _IOC_NR(EVIOCGABS(0))) {
L
Linus Torvalds 已提交
787

788
				t = _IOC_NR(cmd) & ABS_MAX;
L
Linus Torvalds 已提交
789

790 791 792 793 794
				abs.value = dev->abs[t];
				abs.minimum = dev->absmin[t];
				abs.maximum = dev->absmax[t];
				abs.fuzz = dev->absfuzz[t];
				abs.flat = dev->absflat[t];
795

796 797
				if (copy_to_user(p, &abs, sizeof(struct input_absinfo)))
					return -EFAULT;
L
Linus Torvalds 已提交
798

799
				return 0;
L
Linus Torvalds 已提交
800 801
			}

802 803 804
		}

		if (_IOC_DIR(cmd) == _IOC_WRITE) {
L
Linus Torvalds 已提交
805

806 807 808 809 810 811 812 813 814 815 816 817 818
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCSFF)) {

				if (evdev_ff_effect_from_user(p, _IOC_SIZE(cmd), &effect))
					return -EFAULT;

				error = input_ff_upload(dev, &effect, file);

				if (put_user(effect.id, &(((struct ff_effect __user *)p)->id)))
					return -EFAULT;

				return error;
			}

819
			if ((_IOC_NR(cmd) & ~ABS_MAX) == _IOC_NR(EVIOCSABS(0))) {
L
Linus Torvalds 已提交
820

821
				t = _IOC_NR(cmd) & ABS_MAX;
822

823 824 825
				if (copy_from_user(&abs, p,
						sizeof(struct input_absinfo)))
					return -EFAULT;
L
Linus Torvalds 已提交
826

827 828 829 830 831 832
				/*
				 * Take event lock to ensure that we are not
				 * changing device parameters in the middle
				 * of event.
				 */
				spin_lock_irq(&dev->event_lock);
L
Linus Torvalds 已提交
833

834 835 836 837 838 839 840 841 842
				dev->abs[t] = abs.value;
				dev->absmin[t] = abs.minimum;
				dev->absmax[t] = abs.maximum;
				dev->absfuzz[t] = abs.fuzz;
				dev->absflat[t] = abs.flat;

				spin_unlock_irq(&dev->event_lock);

				return 0;
L
Linus Torvalds 已提交
843
			}
844
		}
L
Linus Torvalds 已提交
845 846 847 848
	}
	return -EINVAL;
}

849 850 851 852 853 854 855 856 857 858 859 860 861 862 863 864 865 866 867 868 869 870 871
static long evdev_ioctl_handler(struct file *file, unsigned int cmd,
				void __user *p, int compat_mode)
{
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
	int retval;

	retval = mutex_lock_interruptible(&evdev->mutex);
	if (retval)
		return retval;

	if (!evdev->exist) {
		retval = -ENODEV;
		goto out;
	}

	retval = evdev_do_ioctl(file, cmd, p, compat_mode);

 out:
	mutex_unlock(&evdev->mutex);
	return retval;
}

872 873 874 875
static long evdev_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
{
	return evdev_ioctl_handler(file, cmd, (void __user *)arg, 0);
}
876

877
#ifdef CONFIG_COMPAT
878 879
static long evdev_ioctl_compat(struct file *file,
				unsigned int cmd, unsigned long arg)
880
{
881
	return evdev_ioctl_handler(file, cmd, compat_ptr(arg), 1);
L
Linus Torvalds 已提交
882
}
883
#endif
L
Linus Torvalds 已提交
884

D
Dmitry Torokhov 已提交
885
static const struct file_operations evdev_fops = {
886 887 888 889 890 891 892
	.owner		= THIS_MODULE,
	.read		= evdev_read,
	.write		= evdev_write,
	.poll		= evdev_poll,
	.open		= evdev_open,
	.release	= evdev_release,
	.unlocked_ioctl	= evdev_ioctl,
893
#ifdef CONFIG_COMPAT
894
	.compat_ioctl	= evdev_ioctl_compat,
895
#endif
896 897
	.fasync		= evdev_fasync,
	.flush		= evdev_flush
L
Linus Torvalds 已提交
898 899
};

900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917 918 919 920 921 922 923 924 925 926 927 928 929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945 946 947 948 949 950
static int evdev_install_chrdev(struct evdev *evdev)
{
	/*
	 * No need to do any locking here as calls to connect and
	 * disconnect are serialized by the input core
	 */
	evdev_table[evdev->minor] = evdev;
	return 0;
}

static void evdev_remove_chrdev(struct evdev *evdev)
{
	/*
	 * Lock evdev table to prevent race with evdev_open()
	 */
	mutex_lock(&evdev_table_mutex);
	evdev_table[evdev->minor] = NULL;
	mutex_unlock(&evdev_table_mutex);
}

/*
 * Mark device non-existent. This disables writes, ioctls and
 * prevents new users from opening the device. Already posted
 * blocking reads will stay, however new ones will fail.
 */
static void evdev_mark_dead(struct evdev *evdev)
{
	mutex_lock(&evdev->mutex);
	evdev->exist = 0;
	mutex_unlock(&evdev->mutex);
}

static void evdev_cleanup(struct evdev *evdev)
{
	struct input_handle *handle = &evdev->handle;

	evdev_mark_dead(evdev);
	evdev_hangup(evdev);
	evdev_remove_chrdev(evdev);

	/* evdev is marked dead so no one else accesses evdev->open */
	if (evdev->open) {
		input_flush_device(handle, NULL);
		input_close_device(handle);
	}
}

/*
 * Create new evdev device. Note that input core serializes calls
 * to connect and disconnect so we don't need to lock evdev_table here.
 */
951 952
static int evdev_connect(struct input_handler *handler, struct input_dev *dev,
			 const struct input_device_id *id)
L
Linus Torvalds 已提交
953 954 955
{
	struct evdev *evdev;
	int minor;
956
	int error;
L
Linus Torvalds 已提交
957

958 959 960 961
	for (minor = 0; minor < EVDEV_MINORS; minor++)
		if (!evdev_table[minor])
			break;

L
Linus Torvalds 已提交
962 963
	if (minor == EVDEV_MINORS) {
		printk(KERN_ERR "evdev: no more free evdev devices\n");
964
		return -ENFILE;
L
Linus Torvalds 已提交
965 966
	}

967 968 969
	evdev = kzalloc(sizeof(struct evdev), GFP_KERNEL);
	if (!evdev)
		return -ENOMEM;
L
Linus Torvalds 已提交
970

971
	INIT_LIST_HEAD(&evdev->client_list);
972 973
	spin_lock_init(&evdev->client_lock);
	mutex_init(&evdev->mutex);
L
Linus Torvalds 已提交
974 975
	init_waitqueue_head(&evdev->wait);

976
	snprintf(evdev->name, sizeof(evdev->name), "event%d", minor);
L
Linus Torvalds 已提交
977 978
	evdev->exist = 1;
	evdev->minor = minor;
979

980
	evdev->handle.dev = input_get_device(dev);
L
Linus Torvalds 已提交
981 982 983 984
	evdev->handle.name = evdev->name;
	evdev->handle.handler = handler;
	evdev->handle.private = evdev;

985 986
	strlcpy(evdev->dev.bus_id, evdev->name, sizeof(evdev->dev.bus_id));
	evdev->dev.devt = MKDEV(INPUT_MAJOR, EVDEV_MINOR_BASE + minor);
987 988 989 990
	evdev->dev.class = &input_class;
	evdev->dev.parent = &dev->dev;
	evdev->dev.release = evdev_free;
	device_initialize(&evdev->dev);
991

992
	error = input_register_handle(&evdev->handle);
993
	if (error)
994
		goto err_free_evdev;
995

996 997 998 999 1000
	error = evdev_install_chrdev(evdev);
	if (error)
		goto err_unregister_handle;

	error = device_add(&evdev->dev);
1001
	if (error)
1002
		goto err_cleanup_evdev;
L
Linus Torvalds 已提交
1003

1004
	return 0;
L
Linus Torvalds 已提交
1005

1006 1007 1008 1009
 err_cleanup_evdev:
	evdev_cleanup(evdev);
 err_unregister_handle:
	input_unregister_handle(&evdev->handle);
1010
 err_free_evdev:
1011
	put_device(&evdev->dev);
1012
	return error;
L
Linus Torvalds 已提交
1013 1014 1015 1016 1017 1018
}

static void evdev_disconnect(struct input_handle *handle)
{
	struct evdev *evdev = handle->private;

1019
	device_del(&evdev->dev);
1020 1021
	evdev_cleanup(evdev);
	input_unregister_handle(handle);
1022
	put_device(&evdev->dev);
L
Linus Torvalds 已提交
1023 1024
}

D
Dmitry Torokhov 已提交
1025
static const struct input_device_id evdev_ids[] = {
L
Linus Torvalds 已提交
1026 1027 1028 1029 1030 1031 1032
	{ .driver_info = 1 },	/* Matches all devices */
	{ },			/* Terminating zero entry */
};

MODULE_DEVICE_TABLE(input, evdev_ids);

static struct input_handler evdev_handler = {
1033 1034 1035 1036 1037 1038 1039
	.event		= evdev_event,
	.connect	= evdev_connect,
	.disconnect	= evdev_disconnect,
	.fops		= &evdev_fops,
	.minor		= EVDEV_MINOR_BASE,
	.name		= "evdev",
	.id_table	= evdev_ids,
L
Linus Torvalds 已提交
1040 1041 1042 1043
};

static int __init evdev_init(void)
{
1044
	return input_register_handler(&evdev_handler);
L
Linus Torvalds 已提交
1045 1046 1047 1048 1049 1050 1051 1052 1053 1054 1055 1056 1057
}

static void __exit evdev_exit(void)
{
	input_unregister_handler(&evdev_handler);
}

module_init(evdev_init);
module_exit(evdev_exit);

MODULE_AUTHOR("Vojtech Pavlik <vojtech@ucw.cz>");
MODULE_DESCRIPTION("Input driver event char devices");
MODULE_LICENSE("GPL");