evdev.c 20.0 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
/*
 * Event char devices, giving access to raw input device events.
 *
 * Copyright (c) 1999-2002 Vojtech Pavlik
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License version 2 as published by
 * the Free Software Foundation.
 */

#define EVDEV_MINOR_BASE	64
#define EVDEV_MINORS		32
#define EVDEV_BUFFER_SIZE	64

#include <linux/poll.h>
#include <linux/slab.h>
#include <linux/module.h>
#include <linux/init.h>
#include <linux/input.h>
#include <linux/major.h>
#include <linux/device.h>
22
#include "input-compat.h"
L
Linus Torvalds 已提交
23 24 25 26 27 28 29 30

struct evdev {
	int exist;
	int open;
	int minor;
	char name[16];
	struct input_handle handle;
	wait_queue_head_t wait;
31 32
	struct evdev_client *grab;
	struct list_head client_list;
33 34
	spinlock_t client_lock; /* protects client_list */
	struct mutex mutex;
35
	struct device dev;
L
Linus Torvalds 已提交
36 37
};

38
struct evdev_client {
L
Linus Torvalds 已提交
39 40 41
	struct input_event buffer[EVDEV_BUFFER_SIZE];
	int head;
	int tail;
42
	spinlock_t buffer_lock; /* protects access to buffer, head and tail */
L
Linus Torvalds 已提交
43 44 45 46 47 48
	struct fasync_struct *fasync;
	struct evdev *evdev;
	struct list_head node;
};

static struct evdev *evdev_table[EVDEV_MINORS];
49
static DEFINE_MUTEX(evdev_table_mutex);
L
Linus Torvalds 已提交
50

51 52 53 54 55 56 57 58 59 60 61 62 63 64 65
static void evdev_pass_event(struct evdev_client *client,
			     struct input_event *event)
{
	/*
	 * Interrupts are disabled, just acquire the lock
	 */
	spin_lock(&client->buffer_lock);
	client->buffer[client->head++] = *event;
	client->head &= EVDEV_BUFFER_SIZE - 1;
	spin_unlock(&client->buffer_lock);

	kill_fasync(&client->fasync, SIGIO, POLL_IN);
}

/*
D
Dmitry Torokhov 已提交
66
 * Pass incoming event to all connected clients.
67 68 69
 */
static void evdev_event(struct input_handle *handle,
			unsigned int type, unsigned int code, int value)
L
Linus Torvalds 已提交
70 71
{
	struct evdev *evdev = handle->private;
72
	struct evdev_client *client;
73
	struct input_event event;
L
Linus Torvalds 已提交
74

75 76 77 78
	do_gettimeofday(&event.time);
	event.type = type;
	event.code = code;
	event.value = value;
L
Linus Torvalds 已提交
79

D
Dmitry Torokhov 已提交
80 81
	rcu_read_lock();

82 83 84 85 86 87
	client = rcu_dereference(evdev->grab);
	if (client)
		evdev_pass_event(client, &event);
	else
		list_for_each_entry_rcu(client, &evdev->client_list, node)
			evdev_pass_event(client, &event);
L
Linus Torvalds 已提交
88

D
Dmitry Torokhov 已提交
89 90
	rcu_read_unlock();

L
Linus Torvalds 已提交
91 92 93 94 95
	wake_up_interruptible(&evdev->wait);
}

static int evdev_fasync(int fd, struct file *file, int on)
{
96
	struct evdev_client *client = file->private_data;
L
Linus Torvalds 已提交
97
	int retval;
98

99
	retval = fasync_helper(fd, file, on, &client->fasync);
100

L
Linus Torvalds 已提交
101 102 103
	return retval < 0 ? retval : 0;
}

104
static int evdev_flush(struct file *file, fl_owner_t id)
L
Linus Torvalds 已提交
105
{
106 107
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
108 109 110 111 112
	int retval;

	retval = mutex_lock_interruptible(&evdev->mutex);
	if (retval)
		return retval;
113

114
	if (!evdev->exist)
115 116 117
		retval = -ENODEV;
	else
		retval = input_flush_device(&evdev->handle, file);
118

119 120
	mutex_unlock(&evdev->mutex);
	return retval;
L
Linus Torvalds 已提交
121 122
}

123
static void evdev_free(struct device *dev)
L
Linus Torvalds 已提交
124
{
125 126
	struct evdev *evdev = container_of(dev, struct evdev, dev);

127
	input_put_device(evdev->handle.dev);
L
Linus Torvalds 已提交
128 129 130
	kfree(evdev);
}

131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146
/*
 * Grabs an event device (along with underlying input device).
 * This function is called with evdev->mutex taken.
 */
static int evdev_grab(struct evdev *evdev, struct evdev_client *client)
{
	int error;

	if (evdev->grab)
		return -EBUSY;

	error = input_grab_device(&evdev->handle);
	if (error)
		return error;

	rcu_assign_pointer(evdev->grab, client);
D
Dmitry Torokhov 已提交
147
	synchronize_rcu();
148 149 150 151 152 153 154 155 156 157

	return 0;
}

static int evdev_ungrab(struct evdev *evdev, struct evdev_client *client)
{
	if (evdev->grab != client)
		return  -EINVAL;

	rcu_assign_pointer(evdev->grab, NULL);
D
Dmitry Torokhov 已提交
158
	synchronize_rcu();
159 160 161 162 163 164 165 166 167 168 169
	input_release_device(&evdev->handle);

	return 0;
}

static void evdev_attach_client(struct evdev *evdev,
				struct evdev_client *client)
{
	spin_lock(&evdev->client_lock);
	list_add_tail_rcu(&client->node, &evdev->client_list);
	spin_unlock(&evdev->client_lock);
D
Dmitry Torokhov 已提交
170
	synchronize_rcu();
171 172 173 174 175 176 177 178
}

static void evdev_detach_client(struct evdev *evdev,
				struct evdev_client *client)
{
	spin_lock(&evdev->client_lock);
	list_del_rcu(&client->node);
	spin_unlock(&evdev->client_lock);
D
Dmitry Torokhov 已提交
179
	synchronize_rcu();
180 181 182 183 184 185 186 187 188 189 190 191
}

static int evdev_open_device(struct evdev *evdev)
{
	int retval;

	retval = mutex_lock_interruptible(&evdev->mutex);
	if (retval)
		return retval;

	if (!evdev->exist)
		retval = -ENODEV;
192
	else if (!evdev->open++) {
193
		retval = input_open_device(&evdev->handle);
194 195 196
		if (retval)
			evdev->open--;
	}
197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227

	mutex_unlock(&evdev->mutex);
	return retval;
}

static void evdev_close_device(struct evdev *evdev)
{
	mutex_lock(&evdev->mutex);

	if (evdev->exist && !--evdev->open)
		input_close_device(&evdev->handle);

	mutex_unlock(&evdev->mutex);
}

/*
 * Wake up users waiting for IO so they can disconnect from
 * dead device.
 */
static void evdev_hangup(struct evdev *evdev)
{
	struct evdev_client *client;

	spin_lock(&evdev->client_lock);
	list_for_each_entry(client, &evdev->client_list, node)
		kill_fasync(&client->fasync, SIGIO, POLL_HUP);
	spin_unlock(&evdev->client_lock);

	wake_up_interruptible(&evdev->wait);
}

228
static int evdev_release(struct inode *inode, struct file *file)
L
Linus Torvalds 已提交
229
{
230 231
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
L
Linus Torvalds 已提交
232

233 234 235 236
	mutex_lock(&evdev->mutex);
	if (evdev->grab == client)
		evdev_ungrab(evdev, client);
	mutex_unlock(&evdev->mutex);
L
Linus Torvalds 已提交
237

238
	evdev_detach_client(evdev, client);
239
	kfree(client);
L
Linus Torvalds 已提交
240

241
	evdev_close_device(evdev);
242
	put_device(&evdev->dev);
L
Linus Torvalds 已提交
243 244 245 246

	return 0;
}

247
static int evdev_open(struct inode *inode, struct file *file)
L
Linus Torvalds 已提交
248
{
249
	struct evdev *evdev;
250
	struct evdev_client *client;
L
Linus Torvalds 已提交
251
	int i = iminor(inode) - EVDEV_MINOR_BASE;
252
	int error;
L
Linus Torvalds 已提交
253

254
	if (i >= EVDEV_MINORS)
L
Linus Torvalds 已提交
255 256
		return -ENODEV;

257 258 259
	error = mutex_lock_interruptible(&evdev_table_mutex);
	if (error)
		return error;
260
	evdev = evdev_table[i];
261 262 263
	if (evdev)
		get_device(&evdev->dev);
	mutex_unlock(&evdev_table_mutex);
264

265
	if (!evdev)
L
Linus Torvalds 已提交
266 267
		return -ENODEV;

268
	client = kzalloc(sizeof(struct evdev_client), GFP_KERNEL);
269 270 271 272
	if (!client) {
		error = -ENOMEM;
		goto err_put_evdev;
	}
L
Linus Torvalds 已提交
273

274
	spin_lock_init(&client->buffer_lock);
275
	client->evdev = evdev;
276
	evdev_attach_client(evdev, client);
L
Linus Torvalds 已提交
277

278 279 280
	error = evdev_open_device(evdev);
	if (error)
		goto err_free_client;
L
Linus Torvalds 已提交
281

282
	file->private_data = client;
L
Linus Torvalds 已提交
283
	return 0;
284 285

 err_free_client:
286
	evdev_detach_client(evdev, client);
287 288 289 290
	kfree(client);
 err_put_evdev:
	put_device(&evdev->dev);
	return error;
L
Linus Torvalds 已提交
291 292
}

293 294
static ssize_t evdev_write(struct file *file, const char __user *buffer,
			   size_t count, loff_t *ppos)
295
{
296 297
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
298
	struct input_event event;
299
	int retval;
300

301 302 303 304 305 306 307 308
	retval = mutex_lock_interruptible(&evdev->mutex);
	if (retval)
		return retval;

	if (!evdev->exist) {
		retval = -ENODEV;
		goto out;
	}
309

310 311
	while (retval < count) {

312
		if (input_event_from_user(buffer + retval, &event)) {
313 314 315 316 317 318
			retval = -EFAULT;
			goto out;
		}

		input_inject_event(&evdev->handle,
				   event.type, event.code, event.value);
319
		retval += input_event_size();
320 321
	}

322 323
 out:
	mutex_unlock(&evdev->mutex);
324 325 326
	return retval;
}

327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346
static int evdev_fetch_next_event(struct evdev_client *client,
				  struct input_event *event)
{
	int have_event;

	spin_lock_irq(&client->buffer_lock);

	have_event = client->head != client->tail;
	if (have_event) {
		*event = client->buffer[client->tail++];
		client->tail &= EVDEV_BUFFER_SIZE - 1;
	}

	spin_unlock_irq(&client->buffer_lock);

	return have_event;
}

static ssize_t evdev_read(struct file *file, char __user *buffer,
			  size_t count, loff_t *ppos)
L
Linus Torvalds 已提交
347
{
348 349
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
350
	struct input_event event;
L
Linus Torvalds 已提交
351 352
	int retval;

353
	if (count < input_event_size())
L
Linus Torvalds 已提交
354 355
		return -EINVAL;

356 357
	if (client->head == client->tail && evdev->exist &&
	    (file->f_flags & O_NONBLOCK))
L
Linus Torvalds 已提交
358 359
		return -EAGAIN;

360 361
	retval = wait_event_interruptible(evdev->wait,
		client->head != client->tail || !evdev->exist);
L
Linus Torvalds 已提交
362 363 364
	if (retval)
		return retval;

365
	if (!evdev->exist)
L
Linus Torvalds 已提交
366 367
		return -ENODEV;

368
	while (retval + input_event_size() <= count &&
369
	       evdev_fetch_next_event(client, &event)) {
370

371
		if (input_event_to_user(buffer + retval, &event))
372 373
			return -EFAULT;

374
		retval += input_event_size();
L
Linus Torvalds 已提交
375 376 377 378 379 380 381 382
	}

	return retval;
}

/* No kernel lock - fine */
static unsigned int evdev_poll(struct file *file, poll_table *wait)
{
383 384
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
385

386 387 388
	poll_wait(file, &evdev->wait, wait);
	return ((client->head == client->tail) ? 0 : (POLLIN | POLLRDNORM)) |
		(evdev->exist ? 0 : (POLLHUP | POLLERR));
L
Linus Torvalds 已提交
389 390
}

391 392 393
#ifdef CONFIG_COMPAT

#define BITS_PER_LONG_COMPAT (sizeof(compat_long_t) * 8)
394
#define BITS_TO_LONGS_COMPAT(x) ((((x) - 1) / BITS_PER_LONG_COMPAT) + 1)
395 396 397 398 399 400 401 402

#ifdef __BIG_ENDIAN
static int bits_to_user(unsigned long *bits, unsigned int maxbit,
			unsigned int maxlen, void __user *p, int compat)
{
	int len, i;

	if (compat) {
403
		len = BITS_TO_LONGS_COMPAT(maxbit) * sizeof(compat_long_t);
404
		if (len > maxlen)
405 406 407 408 409 410 411 412 413
			len = maxlen;

		for (i = 0; i < len / sizeof(compat_long_t); i++)
			if (copy_to_user((compat_long_t __user *) p + i,
					 (compat_long_t *) bits +
						i + 1 - ((i % 2) << 1),
					 sizeof(compat_long_t)))
				return -EFAULT;
	} else {
414
		len = BITS_TO_LONGS(maxbit) * sizeof(long);
415 416 417 418 419 420 421 422 423 424 425 426 427 428
		if (len > maxlen)
			len = maxlen;

		if (copy_to_user(p, bits, len))
			return -EFAULT;
	}

	return len;
}
#else
static int bits_to_user(unsigned long *bits, unsigned int maxbit,
			unsigned int maxlen, void __user *p, int compat)
{
	int len = compat ?
429 430
			BITS_TO_LONGS_COMPAT(maxbit) * sizeof(compat_long_t) :
			BITS_TO_LONGS(maxbit) * sizeof(long);
431 432 433 434 435 436 437 438 439 440 441 442 443

	if (len > maxlen)
		len = maxlen;

	return copy_to_user(p, bits, len) ? -EFAULT : len;
}
#endif /* __BIG_ENDIAN */

#else

static int bits_to_user(unsigned long *bits, unsigned int maxbit,
			unsigned int maxlen, void __user *p, int compat)
{
444
	int len = BITS_TO_LONGS(maxbit) * sizeof(long);
445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467

	if (len > maxlen)
		len = maxlen;

	return copy_to_user(p, bits, len) ? -EFAULT : len;
}

#endif /* CONFIG_COMPAT */

static int str_to_user(const char *str, unsigned int maxlen, void __user *p)
{
	int len;

	if (!str)
		return -ENOENT;

	len = strlen(str) + 1;
	if (len > maxlen)
		len = maxlen;

	return copy_to_user(p, str, len) ? -EFAULT : len;
}

468
#define OLD_KEY_MAX	0x1ff
469 470
static int handle_eviocgbit(struct input_dev *dev, unsigned int cmd, void __user *p, int compat_mode)
{
471
	static unsigned long keymax_warn_time;
472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487
	unsigned long *bits;
	int len;

	switch (_IOC_NR(cmd) & EV_MAX) {

	case      0: bits = dev->evbit;  len = EV_MAX;  break;
	case EV_KEY: bits = dev->keybit; len = KEY_MAX; break;
	case EV_REL: bits = dev->relbit; len = REL_MAX; break;
	case EV_ABS: bits = dev->absbit; len = ABS_MAX; break;
	case EV_MSC: bits = dev->mscbit; len = MSC_MAX; break;
	case EV_LED: bits = dev->ledbit; len = LED_MAX; break;
	case EV_SND: bits = dev->sndbit; len = SND_MAX; break;
	case EV_FF:  bits = dev->ffbit;  len = FF_MAX;  break;
	case EV_SW:  bits = dev->swbit;  len = SW_MAX;  break;
	default: return -EINVAL;
	}
488 489 490 491 492 493 494 495 496 497

	/*
	 * Work around bugs in userspace programs that like to do
	 * EVIOCGBIT(EV_KEY, KEY_MAX) and not realize that 'len'
	 * should be in bytes, not in bits.
	 */
	if ((_IOC_NR(cmd) & EV_MAX) == EV_KEY && _IOC_SIZE(cmd) == OLD_KEY_MAX) {
		len = OLD_KEY_MAX;
		if (printk_timed_ratelimit(&keymax_warn_time, 10 * 1000))
			printk(KERN_WARNING
498 499
				"evdev.c(EVIOCGBIT): Suspicious buffer size %u, "
				"limiting output to %zu bytes. See "
500 501 502 503 504
				"http://userweb.kernel.org/~dtor/eviocgbit-bug.html\n",
				OLD_KEY_MAX,
				BITS_TO_LONGS(OLD_KEY_MAX) * sizeof(long));
	}

505 506
	return bits_to_user(bits, len, _IOC_SIZE(cmd), p, compat_mode);
}
507
#undef OLD_KEY_MAX
508

509 510
static long evdev_do_ioctl(struct file *file, unsigned int cmd,
			   void __user *p, int compat_mode)
L
Linus Torvalds 已提交
511
{
512 513
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
L
Linus Torvalds 已提交
514 515
	struct input_dev *dev = evdev->handle.dev;
	struct input_absinfo abs;
516
	struct ff_effect effect;
517
	int __user *ip = (int __user *)p;
L
Linus Torvalds 已提交
518
	int i, t, u, v;
519
	int error;
L
Linus Torvalds 已提交
520 521 522

	switch (cmd) {

523 524
	case EVIOCGVERSION:
		return put_user(EV_VERSION, ip);
L
Linus Torvalds 已提交
525

526 527 528 529
	case EVIOCGID:
		if (copy_to_user(p, &dev->id, sizeof(struct input_id)))
			return -EFAULT;
		return 0;
530

531 532 533 534 535 536 537 538
	case EVIOCGREP:
		if (!test_bit(EV_REP, dev->evbit))
			return -ENOSYS;
		if (put_user(dev->rep[REP_DELAY], ip))
			return -EFAULT;
		if (put_user(dev->rep[REP_PERIOD], ip + 1))
			return -EFAULT;
		return 0;
539

540 541 542 543 544 545 546
	case EVIOCSREP:
		if (!test_bit(EV_REP, dev->evbit))
			return -ENOSYS;
		if (get_user(u, ip))
			return -EFAULT;
		if (get_user(v, ip + 1))
			return -EFAULT;
547

548 549
		input_inject_event(&evdev->handle, EV_REP, REP_DELAY, u);
		input_inject_event(&evdev->handle, EV_REP, REP_PERIOD, v);
550

551
		return 0;
L
Linus Torvalds 已提交
552

553 554 555
	case EVIOCGKEYCODE:
		if (get_user(t, ip))
			return -EFAULT;
556

557
		error = input_get_keycode(dev, t, &v);
558 559
		if (error)
			return error;
560

561 562
		if (put_user(v, ip + 1))
			return -EFAULT;
563

564
		return 0;
L
Linus Torvalds 已提交
565

566 567 568
	case EVIOCSKEYCODE:
		if (get_user(t, ip) || get_user(v, ip + 1))
			return -EFAULT;
569

570
		return input_set_keycode(dev, t, v);
L
Linus Torvalds 已提交
571

572 573
	case EVIOCRMFF:
		return input_ff_erase(dev, (int)(unsigned long) p, file);
L
Linus Torvalds 已提交
574

575 576 577 578 579 580 581 582 583 584 585 586
	case EVIOCGEFFECTS:
		i = test_bit(EV_FF, dev->evbit) ?
				dev->ff->max_effects : 0;
		if (put_user(i, ip))
			return -EFAULT;
		return 0;

	case EVIOCGRAB:
		if (p)
			return evdev_grab(evdev, client);
		else
			return evdev_ungrab(evdev, client);
L
Linus Torvalds 已提交
587

588
	default:
L
Linus Torvalds 已提交
589

590 591
		if (_IOC_TYPE(cmd) != 'E')
			return -EINVAL;
L
Linus Torvalds 已提交
592

593
		if (_IOC_DIR(cmd) == _IOC_READ) {
594

595 596
			if ((_IOC_NR(cmd) & ~EV_MAX) == _IOC_NR(EVIOCGBIT(0, 0)))
				return handle_eviocgbit(dev, cmd, p, compat_mode);
L
Linus Torvalds 已提交
597

598 599 600
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGKEY(0)))
				return bits_to_user(dev->key, KEY_MAX, _IOC_SIZE(cmd),
						    p, compat_mode);
L
Linus Torvalds 已提交
601

602 603 604
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGLED(0)))
				return bits_to_user(dev->led, LED_MAX, _IOC_SIZE(cmd),
						    p, compat_mode);
L
Linus Torvalds 已提交
605

606 607 608
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGSND(0)))
				return bits_to_user(dev->snd, SND_MAX, _IOC_SIZE(cmd),
						    p, compat_mode);
609

610 611 612
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGSW(0)))
				return bits_to_user(dev->sw, SW_MAX, _IOC_SIZE(cmd),
						    p, compat_mode);
L
Linus Torvalds 已提交
613

614 615
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGNAME(0)))
				return str_to_user(dev->name, _IOC_SIZE(cmd), p);
L
Linus Torvalds 已提交
616

617 618
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGPHYS(0)))
				return str_to_user(dev->phys, _IOC_SIZE(cmd), p);
L
Linus Torvalds 已提交
619

620 621
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCGUNIQ(0)))
				return str_to_user(dev->uniq, _IOC_SIZE(cmd), p);
L
Linus Torvalds 已提交
622

623
			if ((_IOC_NR(cmd) & ~ABS_MAX) == _IOC_NR(EVIOCGABS(0))) {
L
Linus Torvalds 已提交
624

625
				t = _IOC_NR(cmd) & ABS_MAX;
L
Linus Torvalds 已提交
626

627 628 629 630 631
				abs.value = dev->abs[t];
				abs.minimum = dev->absmin[t];
				abs.maximum = dev->absmax[t];
				abs.fuzz = dev->absfuzz[t];
				abs.flat = dev->absflat[t];
632

633 634
				if (copy_to_user(p, &abs, sizeof(struct input_absinfo)))
					return -EFAULT;
L
Linus Torvalds 已提交
635

636
				return 0;
L
Linus Torvalds 已提交
637 638
			}

639 640 641
		}

		if (_IOC_DIR(cmd) == _IOC_WRITE) {
L
Linus Torvalds 已提交
642

643 644
			if (_IOC_NR(cmd) == _IOC_NR(EVIOCSFF)) {

645
				if (input_ff_effect_from_user(p, _IOC_SIZE(cmd), &effect))
646 647 648 649 650 651 652 653 654 655
					return -EFAULT;

				error = input_ff_upload(dev, &effect, file);

				if (put_user(effect.id, &(((struct ff_effect __user *)p)->id)))
					return -EFAULT;

				return error;
			}

656
			if ((_IOC_NR(cmd) & ~ABS_MAX) == _IOC_NR(EVIOCSABS(0))) {
L
Linus Torvalds 已提交
657

658
				t = _IOC_NR(cmd) & ABS_MAX;
659

660 661 662
				if (copy_from_user(&abs, p,
						sizeof(struct input_absinfo)))
					return -EFAULT;
L
Linus Torvalds 已提交
663

664 665 666 667 668 669
				/*
				 * Take event lock to ensure that we are not
				 * changing device parameters in the middle
				 * of event.
				 */
				spin_lock_irq(&dev->event_lock);
L
Linus Torvalds 已提交
670

671 672 673 674 675 676 677 678 679
				dev->abs[t] = abs.value;
				dev->absmin[t] = abs.minimum;
				dev->absmax[t] = abs.maximum;
				dev->absfuzz[t] = abs.fuzz;
				dev->absflat[t] = abs.flat;

				spin_unlock_irq(&dev->event_lock);

				return 0;
L
Linus Torvalds 已提交
680
			}
681
		}
L
Linus Torvalds 已提交
682 683 684 685
	}
	return -EINVAL;
}

686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708
static long evdev_ioctl_handler(struct file *file, unsigned int cmd,
				void __user *p, int compat_mode)
{
	struct evdev_client *client = file->private_data;
	struct evdev *evdev = client->evdev;
	int retval;

	retval = mutex_lock_interruptible(&evdev->mutex);
	if (retval)
		return retval;

	if (!evdev->exist) {
		retval = -ENODEV;
		goto out;
	}

	retval = evdev_do_ioctl(file, cmd, p, compat_mode);

 out:
	mutex_unlock(&evdev->mutex);
	return retval;
}

709 710 711 712
static long evdev_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
{
	return evdev_ioctl_handler(file, cmd, (void __user *)arg, 0);
}
713

714
#ifdef CONFIG_COMPAT
715 716
static long evdev_ioctl_compat(struct file *file,
				unsigned int cmd, unsigned long arg)
717
{
718
	return evdev_ioctl_handler(file, cmd, compat_ptr(arg), 1);
L
Linus Torvalds 已提交
719
}
720
#endif
L
Linus Torvalds 已提交
721

D
Dmitry Torokhov 已提交
722
static const struct file_operations evdev_fops = {
723 724 725 726 727 728 729
	.owner		= THIS_MODULE,
	.read		= evdev_read,
	.write		= evdev_write,
	.poll		= evdev_poll,
	.open		= evdev_open,
	.release	= evdev_release,
	.unlocked_ioctl	= evdev_ioctl,
730
#ifdef CONFIG_COMPAT
731
	.compat_ioctl	= evdev_ioctl_compat,
732
#endif
733 734
	.fasync		= evdev_fasync,
	.flush		= evdev_flush
L
Linus Torvalds 已提交
735 736
};

737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787
static int evdev_install_chrdev(struct evdev *evdev)
{
	/*
	 * No need to do any locking here as calls to connect and
	 * disconnect are serialized by the input core
	 */
	evdev_table[evdev->minor] = evdev;
	return 0;
}

static void evdev_remove_chrdev(struct evdev *evdev)
{
	/*
	 * Lock evdev table to prevent race with evdev_open()
	 */
	mutex_lock(&evdev_table_mutex);
	evdev_table[evdev->minor] = NULL;
	mutex_unlock(&evdev_table_mutex);
}

/*
 * Mark device non-existent. This disables writes, ioctls and
 * prevents new users from opening the device. Already posted
 * blocking reads will stay, however new ones will fail.
 */
static void evdev_mark_dead(struct evdev *evdev)
{
	mutex_lock(&evdev->mutex);
	evdev->exist = 0;
	mutex_unlock(&evdev->mutex);
}

static void evdev_cleanup(struct evdev *evdev)
{
	struct input_handle *handle = &evdev->handle;

	evdev_mark_dead(evdev);
	evdev_hangup(evdev);
	evdev_remove_chrdev(evdev);

	/* evdev is marked dead so no one else accesses evdev->open */
	if (evdev->open) {
		input_flush_device(handle, NULL);
		input_close_device(handle);
	}
}

/*
 * Create new evdev device. Note that input core serializes calls
 * to connect and disconnect so we don't need to lock evdev_table here.
 */
788 789
static int evdev_connect(struct input_handler *handler, struct input_dev *dev,
			 const struct input_device_id *id)
L
Linus Torvalds 已提交
790 791 792
{
	struct evdev *evdev;
	int minor;
793
	int error;
L
Linus Torvalds 已提交
794

795 796 797 798
	for (minor = 0; minor < EVDEV_MINORS; minor++)
		if (!evdev_table[minor])
			break;

L
Linus Torvalds 已提交
799 800
	if (minor == EVDEV_MINORS) {
		printk(KERN_ERR "evdev: no more free evdev devices\n");
801
		return -ENFILE;
L
Linus Torvalds 已提交
802 803
	}

804 805 806
	evdev = kzalloc(sizeof(struct evdev), GFP_KERNEL);
	if (!evdev)
		return -ENOMEM;
L
Linus Torvalds 已提交
807

808
	INIT_LIST_HEAD(&evdev->client_list);
809 810
	spin_lock_init(&evdev->client_lock);
	mutex_init(&evdev->mutex);
L
Linus Torvalds 已提交
811 812
	init_waitqueue_head(&evdev->wait);

813
	snprintf(evdev->name, sizeof(evdev->name), "event%d", minor);
L
Linus Torvalds 已提交
814 815
	evdev->exist = 1;
	evdev->minor = minor;
816

817
	evdev->handle.dev = input_get_device(dev);
L
Linus Torvalds 已提交
818 819 820 821
	evdev->handle.name = evdev->name;
	evdev->handle.handler = handler;
	evdev->handle.private = evdev;

822
	dev_set_name(&evdev->dev, evdev->name);
823
	evdev->dev.devt = MKDEV(INPUT_MAJOR, EVDEV_MINOR_BASE + minor);
824 825 826 827
	evdev->dev.class = &input_class;
	evdev->dev.parent = &dev->dev;
	evdev->dev.release = evdev_free;
	device_initialize(&evdev->dev);
828

829
	error = input_register_handle(&evdev->handle);
830
	if (error)
831
		goto err_free_evdev;
832

833 834 835 836 837
	error = evdev_install_chrdev(evdev);
	if (error)
		goto err_unregister_handle;

	error = device_add(&evdev->dev);
838
	if (error)
839
		goto err_cleanup_evdev;
L
Linus Torvalds 已提交
840

841
	return 0;
L
Linus Torvalds 已提交
842

843 844 845 846
 err_cleanup_evdev:
	evdev_cleanup(evdev);
 err_unregister_handle:
	input_unregister_handle(&evdev->handle);
847
 err_free_evdev:
848
	put_device(&evdev->dev);
849
	return error;
L
Linus Torvalds 已提交
850 851 852 853 854 855
}

static void evdev_disconnect(struct input_handle *handle)
{
	struct evdev *evdev = handle->private;

856
	device_del(&evdev->dev);
857 858
	evdev_cleanup(evdev);
	input_unregister_handle(handle);
859
	put_device(&evdev->dev);
L
Linus Torvalds 已提交
860 861
}

D
Dmitry Torokhov 已提交
862
static const struct input_device_id evdev_ids[] = {
L
Linus Torvalds 已提交
863 864 865 866 867 868 869
	{ .driver_info = 1 },	/* Matches all devices */
	{ },			/* Terminating zero entry */
};

MODULE_DEVICE_TABLE(input, evdev_ids);

static struct input_handler evdev_handler = {
870 871 872 873 874 875 876
	.event		= evdev_event,
	.connect	= evdev_connect,
	.disconnect	= evdev_disconnect,
	.fops		= &evdev_fops,
	.minor		= EVDEV_MINOR_BASE,
	.name		= "evdev",
	.id_table	= evdev_ids,
L
Linus Torvalds 已提交
877 878 879 880
};

static int __init evdev_init(void)
{
881
	return input_register_handler(&evdev_handler);
L
Linus Torvalds 已提交
882 883 884 885 886 887 888 889 890 891 892 893 894
}

static void __exit evdev_exit(void)
{
	input_unregister_handler(&evdev_handler);
}

module_init(evdev_init);
module_exit(evdev_exit);

MODULE_AUTHOR("Vojtech Pavlik <vojtech@ucw.cz>");
MODULE_DESCRIPTION("Input driver event char devices");
MODULE_LICENSE("GPL");