11da177e4SLinus Torvalds /* 21da177e4SLinus Torvalds * User level driver support for input subsystem 31da177e4SLinus Torvalds * 41da177e4SLinus Torvalds * Heavily based on evdev.c by Vojtech Pavlik 51da177e4SLinus Torvalds * 61da177e4SLinus Torvalds * This program is free software; you can redistribute it and/or modify 71da177e4SLinus Torvalds * it under the terms of the GNU General Public License as published by 81da177e4SLinus Torvalds * the Free Software Foundation; either version 2 of the License, or 91da177e4SLinus Torvalds * (at your option) any later version. 101da177e4SLinus Torvalds * 111da177e4SLinus Torvalds * This program is distributed in the hope that it will be useful, 121da177e4SLinus Torvalds * but WITHOUT ANY WARRANTY; without even the implied warranty of 131da177e4SLinus Torvalds * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 141da177e4SLinus Torvalds * GNU General Public License for more details. 151da177e4SLinus Torvalds * 161da177e4SLinus Torvalds * You should have received a copy of the GNU General Public License 171da177e4SLinus Torvalds * along with this program; if not, write to the Free Software 181da177e4SLinus Torvalds * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA 191da177e4SLinus Torvalds * 201da177e4SLinus Torvalds * Author: Aristeu Sergio Rozanski Filho <aris@cathedrallabs.org> 211da177e4SLinus Torvalds * 221da177e4SLinus Torvalds * Changes/Revisions: 23e3480a61SBenjamin Tissoires * 0.4 01/09/2014 (Benjamin Tissoires <benjamin.tissoires@redhat.com>) 24e3480a61SBenjamin Tissoires * - add UI_GET_SYSNAME ioctl 25ff462551SAnssi Hannula * 0.3 09/04/2006 (Anssi Hannula <anssi.hannula@gmail.com>) 26ff462551SAnssi Hannula * - updated ff support for the changes in kernel interface 27ff462551SAnssi Hannula * - added MODULE_VERSION 281da177e4SLinus Torvalds * 0.2 16/10/2004 (Micah Dowty <micah@navi.cx>) 291da177e4SLinus Torvalds * - added force feedback support 301da177e4SLinus Torvalds * - added UI_SET_PHYS 311da177e4SLinus Torvalds * 0.1 20/06/2002 321da177e4SLinus Torvalds * - first public version 331da177e4SLinus Torvalds */ 34a11bc476SDmitry Torokhov #include <uapi/linux/uinput.h> 351da177e4SLinus Torvalds #include <linux/poll.h> 36a99bbaf5SAlexey Dobriyan #include <linux/sched.h> 371da177e4SLinus Torvalds #include <linux/slab.h> 381da177e4SLinus Torvalds #include <linux/module.h> 391da177e4SLinus Torvalds #include <linux/init.h> 401da177e4SLinus Torvalds #include <linux/fs.h> 411da177e4SLinus Torvalds #include <linux/miscdevice.h> 4247c78e89SHenrik Rydberg #include <linux/input/mt.h> 432d56f3a3SPhilip Langdale #include "../input-compat.h" 441da177e4SLinus Torvalds 45a11bc476SDmitry Torokhov #define UINPUT_NAME "uinput" 46a11bc476SDmitry Torokhov #define UINPUT_BUFFER_SIZE 16 47a11bc476SDmitry Torokhov #define UINPUT_NUM_REQUESTS 16 48a11bc476SDmitry Torokhov 49a11bc476SDmitry Torokhov enum uinput_state { UIST_NEW_DEVICE, UIST_SETUP_COMPLETE, UIST_CREATED }; 50a11bc476SDmitry Torokhov 51a11bc476SDmitry Torokhov struct uinput_request { 52a11bc476SDmitry Torokhov unsigned int id; 53a11bc476SDmitry Torokhov unsigned int code; /* UI_FF_UPLOAD, UI_FF_ERASE */ 54a11bc476SDmitry Torokhov 55a11bc476SDmitry Torokhov int retval; 56a11bc476SDmitry Torokhov struct completion done; 57a11bc476SDmitry Torokhov 58a11bc476SDmitry Torokhov union { 59a11bc476SDmitry Torokhov unsigned int effect_id; 60a11bc476SDmitry Torokhov struct { 61a11bc476SDmitry Torokhov struct ff_effect *effect; 62a11bc476SDmitry Torokhov struct ff_effect *old; 63a11bc476SDmitry Torokhov } upload; 64a11bc476SDmitry Torokhov } u; 65a11bc476SDmitry Torokhov }; 66a11bc476SDmitry Torokhov 67a11bc476SDmitry Torokhov struct uinput_device { 68a11bc476SDmitry Torokhov struct input_dev *dev; 69a11bc476SDmitry Torokhov struct mutex mutex; 70a11bc476SDmitry Torokhov enum uinput_state state; 71a11bc476SDmitry Torokhov wait_queue_head_t waitq; 72a11bc476SDmitry Torokhov unsigned char ready; 73a11bc476SDmitry Torokhov unsigned char head; 74a11bc476SDmitry Torokhov unsigned char tail; 75a11bc476SDmitry Torokhov struct input_event buff[UINPUT_BUFFER_SIZE]; 76a11bc476SDmitry Torokhov unsigned int ff_effects_max; 77a11bc476SDmitry Torokhov 78a11bc476SDmitry Torokhov struct uinput_request *requests[UINPUT_NUM_REQUESTS]; 79a11bc476SDmitry Torokhov wait_queue_head_t requests_waitq; 80a11bc476SDmitry Torokhov spinlock_t requests_lock; 81a11bc476SDmitry Torokhov }; 82a11bc476SDmitry Torokhov 8354ce165eSDmitry Torokhov static int uinput_dev_event(struct input_dev *dev, 8454ce165eSDmitry Torokhov unsigned int type, unsigned int code, int value) 851da177e4SLinus Torvalds { 86373f9713SDmitry Torokhov struct uinput_device *udev = input_get_drvdata(dev); 87b3495cecSDeepa Dinamani struct timespec64 ts; 881da177e4SLinus Torvalds 891da177e4SLinus Torvalds udev->buff[udev->head].type = type; 901da177e4SLinus Torvalds udev->buff[udev->head].code = code; 911da177e4SLinus Torvalds udev->buff[udev->head].value = value; 92b3495cecSDeepa Dinamani ktime_get_ts64(&ts); 93152194feSDeepa Dinamani udev->buff[udev->head].input_event_sec = ts.tv_sec; 94152194feSDeepa Dinamani udev->buff[udev->head].input_event_usec = ts.tv_nsec / NSEC_PER_USEC; 951da177e4SLinus Torvalds udev->head = (udev->head + 1) % UINPUT_BUFFER_SIZE; 961da177e4SLinus Torvalds 971da177e4SLinus Torvalds wake_up_interruptible(&udev->waitq); 981da177e4SLinus Torvalds 991da177e4SLinus Torvalds return 0; 1001da177e4SLinus Torvalds } 1011da177e4SLinus Torvalds 10205cebd38SAristeu Sergio Rozanski Filho /* Atomically allocate an ID for the given request. Returns 0 on success. */ 10300ce756cSDmitry Torokhov static bool uinput_request_alloc_id(struct uinput_device *udev, 10400ce756cSDmitry Torokhov struct uinput_request *request) 1051da177e4SLinus Torvalds { 106c5b3533aSDmitry Torokhov unsigned int id; 10700ce756cSDmitry Torokhov bool reserved = false; 1081da177e4SLinus Torvalds 1090048e603SDmitry Torokhov spin_lock(&udev->requests_lock); 110152c12f5SDmitry Torokhov 11105cebd38SAristeu Sergio Rozanski Filho for (id = 0; id < UINPUT_NUM_REQUESTS; id++) { 1121da177e4SLinus Torvalds if (!udev->requests[id]) { 1131da177e4SLinus Torvalds request->id = id; 1140048e603SDmitry Torokhov udev->requests[id] = request; 11500ce756cSDmitry Torokhov reserved = true; 116152c12f5SDmitry Torokhov break; 1171da177e4SLinus Torvalds } 11805cebd38SAristeu Sergio Rozanski Filho } 119152c12f5SDmitry Torokhov 1200048e603SDmitry Torokhov spin_unlock(&udev->requests_lock); 12100ce756cSDmitry Torokhov return reserved; 1221da177e4SLinus Torvalds } 1231da177e4SLinus Torvalds 124c5b3533aSDmitry Torokhov static struct uinput_request *uinput_request_find(struct uinput_device *udev, 125c5b3533aSDmitry Torokhov unsigned int id) 1261da177e4SLinus Torvalds { 1271da177e4SLinus Torvalds /* Find an input request, by ID. Returns NULL if the ID isn't valid. */ 128c5b3533aSDmitry Torokhov if (id >= UINPUT_NUM_REQUESTS) 1291da177e4SLinus Torvalds return NULL; 1302d56f3a3SPhilip Langdale 1311da177e4SLinus Torvalds return udev->requests[id]; 1321da177e4SLinus Torvalds } 1331da177e4SLinus Torvalds 13400ce756cSDmitry Torokhov static int uinput_request_reserve_slot(struct uinput_device *udev, 13500ce756cSDmitry Torokhov struct uinput_request *request) 1361da177e4SLinus Torvalds { 1370048e603SDmitry Torokhov /* Allocate slot. If none are available right away, wait. */ 1380048e603SDmitry Torokhov return wait_event_interruptible(udev->requests_waitq, 13900ce756cSDmitry Torokhov uinput_request_alloc_id(udev, request)); 1401da177e4SLinus Torvalds } 1411da177e4SLinus Torvalds 1426b4877c7SDmitry Torokhov static void uinput_request_release_slot(struct uinput_device *udev, 1436b4877c7SDmitry Torokhov unsigned int id) 1441da177e4SLinus Torvalds { 1450048e603SDmitry Torokhov /* Mark slot as available */ 1466b4877c7SDmitry Torokhov spin_lock(&udev->requests_lock); 1476b4877c7SDmitry Torokhov udev->requests[id] = NULL; 1486b4877c7SDmitry Torokhov spin_unlock(&udev->requests_lock); 149e7507ed9SDmitry Torokhov 1506b4877c7SDmitry Torokhov wake_up(&udev->requests_waitq); 1510048e603SDmitry Torokhov } 1520048e603SDmitry Torokhov 15300ce756cSDmitry Torokhov static int uinput_request_send(struct uinput_device *udev, 15400ce756cSDmitry Torokhov struct uinput_request *request) 1550048e603SDmitry Torokhov { 15605cebd38SAristeu Sergio Rozanski Filho int retval; 1571da177e4SLinus Torvalds 15805cebd38SAristeu Sergio Rozanski Filho retval = mutex_lock_interruptible(&udev->mutex); 15905cebd38SAristeu Sergio Rozanski Filho if (retval) 16005cebd38SAristeu Sergio Rozanski Filho return retval; 16105cebd38SAristeu Sergio Rozanski Filho 16205cebd38SAristeu Sergio Rozanski Filho if (udev->state != UIST_CREATED) { 16305cebd38SAristeu Sergio Rozanski Filho retval = -ENODEV; 16405cebd38SAristeu Sergio Rozanski Filho goto out; 16505cebd38SAristeu Sergio Rozanski Filho } 16605cebd38SAristeu Sergio Rozanski Filho 16700ce756cSDmitry Torokhov init_completion(&request->done); 16800ce756cSDmitry Torokhov 16900ce756cSDmitry Torokhov /* 17000ce756cSDmitry Torokhov * Tell our userspace application about this new request 17100ce756cSDmitry Torokhov * by queueing an input event. 17200ce756cSDmitry Torokhov */ 17305cebd38SAristeu Sergio Rozanski Filho uinput_dev_event(udev->dev, EV_UINPUT, request->code, request->id); 17405cebd38SAristeu Sergio Rozanski Filho 17505cebd38SAristeu Sergio Rozanski Filho out: 17605cebd38SAristeu Sergio Rozanski Filho mutex_unlock(&udev->mutex); 17705cebd38SAristeu Sergio Rozanski Filho return retval; 17805cebd38SAristeu Sergio Rozanski Filho } 17905cebd38SAristeu Sergio Rozanski Filho 18000ce756cSDmitry Torokhov static int uinput_request_submit(struct uinput_device *udev, 18100ce756cSDmitry Torokhov struct uinput_request *request) 18200ce756cSDmitry Torokhov { 1836b4877c7SDmitry Torokhov int retval; 18400ce756cSDmitry Torokhov 1856b4877c7SDmitry Torokhov retval = uinput_request_reserve_slot(udev, request); 1866b4877c7SDmitry Torokhov if (retval) 1876b4877c7SDmitry Torokhov return retval; 18800ce756cSDmitry Torokhov 1896b4877c7SDmitry Torokhov retval = uinput_request_send(udev, request); 1906b4877c7SDmitry Torokhov if (retval) 1916b4877c7SDmitry Torokhov goto out; 19200ce756cSDmitry Torokhov 1938e009118SDmitry Torokhov if (!wait_for_completion_timeout(&request->done, 30 * HZ)) { 1948e009118SDmitry Torokhov retval = -ETIMEDOUT; 1958e009118SDmitry Torokhov goto out; 1968e009118SDmitry Torokhov } 1978e009118SDmitry Torokhov 1986b4877c7SDmitry Torokhov retval = request->retval; 1996b4877c7SDmitry Torokhov 2006b4877c7SDmitry Torokhov out: 2016b4877c7SDmitry Torokhov uinput_request_release_slot(udev, request->id); 2026b4877c7SDmitry Torokhov return retval; 20300ce756cSDmitry Torokhov } 20400ce756cSDmitry Torokhov 20505cebd38SAristeu Sergio Rozanski Filho /* 20654ce165eSDmitry Torokhov * Fail all outstanding requests so handlers don't wait for the userspace 20705cebd38SAristeu Sergio Rozanski Filho * to finish processing them. 20805cebd38SAristeu Sergio Rozanski Filho */ 20905cebd38SAristeu Sergio Rozanski Filho static void uinput_flush_requests(struct uinput_device *udev) 21005cebd38SAristeu Sergio Rozanski Filho { 21105cebd38SAristeu Sergio Rozanski Filho struct uinput_request *request; 21205cebd38SAristeu Sergio Rozanski Filho int i; 21305cebd38SAristeu Sergio Rozanski Filho 21405cebd38SAristeu Sergio Rozanski Filho spin_lock(&udev->requests_lock); 21505cebd38SAristeu Sergio Rozanski Filho 21605cebd38SAristeu Sergio Rozanski Filho for (i = 0; i < UINPUT_NUM_REQUESTS; i++) { 21705cebd38SAristeu Sergio Rozanski Filho request = udev->requests[i]; 21805cebd38SAristeu Sergio Rozanski Filho if (request) { 21905cebd38SAristeu Sergio Rozanski Filho request->retval = -ENODEV; 2206b4877c7SDmitry Torokhov complete(&request->done); 22105cebd38SAristeu Sergio Rozanski Filho } 22205cebd38SAristeu Sergio Rozanski Filho } 22305cebd38SAristeu Sergio Rozanski Filho 22405cebd38SAristeu Sergio Rozanski Filho spin_unlock(&udev->requests_lock); 2251da177e4SLinus Torvalds } 2261da177e4SLinus Torvalds 227ff462551SAnssi Hannula static void uinput_dev_set_gain(struct input_dev *dev, u16 gain) 228ff462551SAnssi Hannula { 229ff462551SAnssi Hannula uinput_dev_event(dev, EV_FF, FF_GAIN, gain); 230ff462551SAnssi Hannula } 231ff462551SAnssi Hannula 232ff462551SAnssi Hannula static void uinput_dev_set_autocenter(struct input_dev *dev, u16 magnitude) 233ff462551SAnssi Hannula { 234ff462551SAnssi Hannula uinput_dev_event(dev, EV_FF, FF_AUTOCENTER, magnitude); 235ff462551SAnssi Hannula } 236ff462551SAnssi Hannula 237ff462551SAnssi Hannula static int uinput_dev_playback(struct input_dev *dev, int effect_id, int value) 238ff462551SAnssi Hannula { 239ff462551SAnssi Hannula return uinput_dev_event(dev, EV_FF, effect_id, value); 240ff462551SAnssi Hannula } 241ff462551SAnssi Hannula 24254ce165eSDmitry Torokhov static int uinput_dev_upload_effect(struct input_dev *dev, 24354ce165eSDmitry Torokhov struct ff_effect *effect, 24454ce165eSDmitry Torokhov struct ff_effect *old) 2451da177e4SLinus Torvalds { 24605cebd38SAristeu Sergio Rozanski Filho struct uinput_device *udev = input_get_drvdata(dev); 2471da177e4SLinus Torvalds struct uinput_request request; 2481da177e4SLinus Torvalds 2492d56f3a3SPhilip Langdale /* 2502d56f3a3SPhilip Langdale * uinput driver does not currently support periodic effects with 2512d56f3a3SPhilip Langdale * custom waveform since it does not have a way to pass buffer of 2522d56f3a3SPhilip Langdale * samples (custom_data) to userspace. If ever there is a device 2532d56f3a3SPhilip Langdale * supporting custom waveforms we would need to define an additional 2542d56f3a3SPhilip Langdale * ioctl (UI_UPLOAD_SAMPLES) but for now we just bail out. 2552d56f3a3SPhilip Langdale */ 2562d56f3a3SPhilip Langdale if (effect->type == FF_PERIODIC && 2572d56f3a3SPhilip Langdale effect->u.periodic.waveform == FF_CUSTOM) 2582d56f3a3SPhilip Langdale return -EINVAL; 2592d56f3a3SPhilip Langdale 2600048e603SDmitry Torokhov request.code = UI_FF_UPLOAD; 261ff462551SAnssi Hannula request.u.upload.effect = effect; 262ff462551SAnssi Hannula request.u.upload.old = old; 2630048e603SDmitry Torokhov 26400ce756cSDmitry Torokhov return uinput_request_submit(udev, &request); 2651da177e4SLinus Torvalds } 2661da177e4SLinus Torvalds 2671da177e4SLinus Torvalds static int uinput_dev_erase_effect(struct input_dev *dev, int effect_id) 2681da177e4SLinus Torvalds { 26905cebd38SAristeu Sergio Rozanski Filho struct uinput_device *udev = input_get_drvdata(dev); 2701da177e4SLinus Torvalds struct uinput_request request; 2711da177e4SLinus Torvalds 2721da177e4SLinus Torvalds if (!test_bit(EV_FF, dev->evbit)) 2731da177e4SLinus Torvalds return -ENOSYS; 2741da177e4SLinus Torvalds 2750048e603SDmitry Torokhov request.code = UI_FF_ERASE; 2761da177e4SLinus Torvalds request.u.effect_id = effect_id; 2770048e603SDmitry Torokhov 27800ce756cSDmitry Torokhov return uinput_request_submit(udev, &request); 2791da177e4SLinus Torvalds } 2801da177e4SLinus Torvalds 281e8b95728SDmitry Torokhov static int uinput_dev_flush(struct input_dev *dev, struct file *file) 282e8b95728SDmitry Torokhov { 283e8b95728SDmitry Torokhov /* 284e8b95728SDmitry Torokhov * If we are called with file == NULL that means we are tearing 285e8b95728SDmitry Torokhov * down the device, and therefore we can not handle FF erase 286e8b95728SDmitry Torokhov * requests: either we are handling UI_DEV_DESTROY (and holding 287e8b95728SDmitry Torokhov * the udev->mutex), or the file descriptor is closed and there is 288e8b95728SDmitry Torokhov * nobody on the other side anymore. 289e8b95728SDmitry Torokhov */ 290e8b95728SDmitry Torokhov return file ? input_ff_flush(dev, file) : 0; 291e8b95728SDmitry Torokhov } 292e8b95728SDmitry Torokhov 29329506415SDmitry Torokhov static void uinput_destroy_device(struct uinput_device *udev) 29429506415SDmitry Torokhov { 29529506415SDmitry Torokhov const char *name, *phys; 29605cebd38SAristeu Sergio Rozanski Filho struct input_dev *dev = udev->dev; 29705cebd38SAristeu Sergio Rozanski Filho enum uinput_state old_state = udev->state; 29829506415SDmitry Torokhov 29905cebd38SAristeu Sergio Rozanski Filho udev->state = UIST_NEW_DEVICE; 30005cebd38SAristeu Sergio Rozanski Filho 30105cebd38SAristeu Sergio Rozanski Filho if (dev) { 30205cebd38SAristeu Sergio Rozanski Filho name = dev->name; 30305cebd38SAristeu Sergio Rozanski Filho phys = dev->phys; 30405cebd38SAristeu Sergio Rozanski Filho if (old_state == UIST_CREATED) { 30505cebd38SAristeu Sergio Rozanski Filho uinput_flush_requests(udev); 30605cebd38SAristeu Sergio Rozanski Filho input_unregister_device(dev); 30705cebd38SAristeu Sergio Rozanski Filho } else { 30805cebd38SAristeu Sergio Rozanski Filho input_free_device(dev); 30905cebd38SAristeu Sergio Rozanski Filho } 31029506415SDmitry Torokhov kfree(name); 31129506415SDmitry Torokhov kfree(phys); 31229506415SDmitry Torokhov udev->dev = NULL; 31329506415SDmitry Torokhov } 31429506415SDmitry Torokhov } 31529506415SDmitry Torokhov 3161da177e4SLinus Torvalds static int uinput_create_device(struct uinput_device *udev) 3171da177e4SLinus Torvalds { 318ff462551SAnssi Hannula struct input_dev *dev = udev->dev; 319fbae10dbSDavid Herrmann int error, nslot; 32029506415SDmitry Torokhov 32129506415SDmitry Torokhov if (udev->state != UIST_SETUP_COMPLETE) { 3221da177e4SLinus Torvalds printk(KERN_DEBUG "%s: write device info first\n", UINPUT_NAME); 3231da177e4SLinus Torvalds return -EINVAL; 3241da177e4SLinus Torvalds } 3251da177e4SLinus Torvalds 326601bbbe0SDmitry Torokhov if (test_bit(EV_ABS, dev->evbit)) { 327601bbbe0SDmitry Torokhov input_alloc_absinfo(dev); 328601bbbe0SDmitry Torokhov if (!dev->absinfo) { 329601bbbe0SDmitry Torokhov error = -EINVAL; 330601bbbe0SDmitry Torokhov goto fail1; 331601bbbe0SDmitry Torokhov } 332601bbbe0SDmitry Torokhov 333fbae10dbSDavid Herrmann if (test_bit(ABS_MT_SLOT, dev->absbit)) { 334fbae10dbSDavid Herrmann nslot = input_abs_get_max(dev, ABS_MT_SLOT) + 1; 335fbae10dbSDavid Herrmann error = input_mt_init_slots(dev, nslot, 0); 336fbae10dbSDavid Herrmann if (error) 337fbae10dbSDavid Herrmann goto fail1; 338fbae10dbSDavid Herrmann } else if (test_bit(ABS_MT_POSITION_X, dev->absbit)) { 339fbae10dbSDavid Herrmann input_set_events_per_packet(dev, 60); 340fbae10dbSDavid Herrmann } 341601bbbe0SDmitry Torokhov } 342fbae10dbSDavid Herrmann 343daf6cd0cSElias Vanderstuyft if (test_bit(EV_FF, dev->evbit) && !udev->ff_effects_max) { 344daf6cd0cSElias Vanderstuyft printk(KERN_DEBUG "%s: ff_effects_max should be non-zero when FF_BIT is set\n", 345daf6cd0cSElias Vanderstuyft UINPUT_NAME); 346daf6cd0cSElias Vanderstuyft error = -EINVAL; 347daf6cd0cSElias Vanderstuyft goto fail1; 348daf6cd0cSElias Vanderstuyft } 349daf6cd0cSElias Vanderstuyft 350ff462551SAnssi Hannula if (udev->ff_effects_max) { 351ff462551SAnssi Hannula error = input_ff_create(dev, udev->ff_effects_max); 352ff462551SAnssi Hannula if (error) 353ff462551SAnssi Hannula goto fail1; 354ff462551SAnssi Hannula 355ff462551SAnssi Hannula dev->ff->upload = uinput_dev_upload_effect; 356ff462551SAnssi Hannula dev->ff->erase = uinput_dev_erase_effect; 357ff462551SAnssi Hannula dev->ff->playback = uinput_dev_playback; 358ff462551SAnssi Hannula dev->ff->set_gain = uinput_dev_set_gain; 359ff462551SAnssi Hannula dev->ff->set_autocenter = uinput_dev_set_autocenter; 360e8b95728SDmitry Torokhov /* 361e8b95728SDmitry Torokhov * The standard input_ff_flush() implementation does 362e8b95728SDmitry Torokhov * not quite work for uinput as we can't reasonably 363e8b95728SDmitry Torokhov * handle FF requests during device teardown. 364e8b95728SDmitry Torokhov */ 365e8b95728SDmitry Torokhov dev->flush = uinput_dev_flush; 3661da177e4SLinus Torvalds } 3671da177e4SLinus Torvalds 36804ce40a6SDmitry Torokhov dev->event = uinput_dev_event; 36904ce40a6SDmitry Torokhov 37004ce40a6SDmitry Torokhov input_set_drvdata(udev->dev, udev); 37104ce40a6SDmitry Torokhov 372ff462551SAnssi Hannula error = input_register_device(udev->dev); 373ff462551SAnssi Hannula if (error) 374ff462551SAnssi Hannula goto fail2; 375ff462551SAnssi Hannula 37629506415SDmitry Torokhov udev->state = UIST_CREATED; 3771da177e4SLinus Torvalds 3781da177e4SLinus Torvalds return 0; 379ff462551SAnssi Hannula 380ff462551SAnssi Hannula fail2: input_ff_destroy(dev); 381ff462551SAnssi Hannula fail1: uinput_destroy_device(udev); 382ff462551SAnssi Hannula return error; 3831da177e4SLinus Torvalds } 3841da177e4SLinus Torvalds 3851da177e4SLinus Torvalds static int uinput_open(struct inode *inode, struct file *file) 3861da177e4SLinus Torvalds { 3871da177e4SLinus Torvalds struct uinput_device *newdev; 3881da177e4SLinus Torvalds 38929506415SDmitry Torokhov newdev = kzalloc(sizeof(struct uinput_device), GFP_KERNEL); 3901da177e4SLinus Torvalds if (!newdev) 39129506415SDmitry Torokhov return -ENOMEM; 39229506415SDmitry Torokhov 393221979aaSDmitry Torokhov mutex_init(&newdev->mutex); 3940048e603SDmitry Torokhov spin_lock_init(&newdev->requests_lock); 3951da177e4SLinus Torvalds init_waitqueue_head(&newdev->requests_waitq); 39629506415SDmitry Torokhov init_waitqueue_head(&newdev->waitq); 39729506415SDmitry Torokhov newdev->state = UIST_NEW_DEVICE; 3981da177e4SLinus Torvalds 3991da177e4SLinus Torvalds file->private_data = newdev; 400daf8a96bSDmitry Torokhov nonseekable_open(inode, file); 4011da177e4SLinus Torvalds 4021da177e4SLinus Torvalds return 0; 4031da177e4SLinus Torvalds } 4041da177e4SLinus Torvalds 405fbae10dbSDavid Herrmann static int uinput_validate_absinfo(struct input_dev *dev, unsigned int code, 406fbae10dbSDavid Herrmann const struct input_absinfo *abs) 407fbae10dbSDavid Herrmann { 408fbae10dbSDavid Herrmann int min, max; 409fbae10dbSDavid Herrmann 410fbae10dbSDavid Herrmann min = abs->minimum; 411fbae10dbSDavid Herrmann max = abs->maximum; 412fbae10dbSDavid Herrmann 4134fef1250SPeter Hutterer if ((min != 0 || max != 0) && max < min) { 414fbae10dbSDavid Herrmann printk(KERN_DEBUG 415fbae10dbSDavid Herrmann "%s: invalid abs[%02x] min:%d max:%d\n", 416fbae10dbSDavid Herrmann UINPUT_NAME, code, min, max); 417fbae10dbSDavid Herrmann return -EINVAL; 418fbae10dbSDavid Herrmann } 419fbae10dbSDavid Herrmann 420fbae10dbSDavid Herrmann if (abs->flat > max - min) { 421fbae10dbSDavid Herrmann printk(KERN_DEBUG 422fbae10dbSDavid Herrmann "%s: abs_flat #%02x out of range: %d (min:%d/max:%d)\n", 423fbae10dbSDavid Herrmann UINPUT_NAME, code, abs->flat, min, max); 424fbae10dbSDavid Herrmann return -EINVAL; 425fbae10dbSDavid Herrmann } 426fbae10dbSDavid Herrmann 427fbae10dbSDavid Herrmann return 0; 428fbae10dbSDavid Herrmann } 429fbae10dbSDavid Herrmann 4301da177e4SLinus Torvalds static int uinput_validate_absbits(struct input_dev *dev) 4311da177e4SLinus Torvalds { 4321da177e4SLinus Torvalds unsigned int cnt; 433fbae10dbSDavid Herrmann int error; 434bcb898e5SDavid Herrmann 435bcb898e5SDavid Herrmann if (!test_bit(EV_ABS, dev->evbit)) 436bcb898e5SDavid Herrmann return 0; 437bcb898e5SDavid Herrmann 438bcb898e5SDavid Herrmann /* 439bcb898e5SDavid Herrmann * Check if absmin/absmax/absfuzz/absflat are sane. 440bcb898e5SDavid Herrmann */ 4411da177e4SLinus Torvalds 442b6d30968SAnshul Garg for_each_set_bit(cnt, dev->absbit, ABS_CNT) { 443fbae10dbSDavid Herrmann if (!dev->absinfo) 444bcb898e5SDavid Herrmann return -EINVAL; 4451da177e4SLinus Torvalds 446fbae10dbSDavid Herrmann error = uinput_validate_absinfo(dev, cnt, &dev->absinfo[cnt]); 447fbae10dbSDavid Herrmann if (error) 448fbae10dbSDavid Herrmann return error; 449bcb898e5SDavid Herrmann } 450bcb898e5SDavid Herrmann 451bcb898e5SDavid Herrmann return 0; 4521da177e4SLinus Torvalds } 4531da177e4SLinus Torvalds 454052876f8SBenjamin Tissoires static int uinput_dev_setup(struct uinput_device *udev, 455052876f8SBenjamin Tissoires struct uinput_setup __user *arg) 456052876f8SBenjamin Tissoires { 457052876f8SBenjamin Tissoires struct uinput_setup setup; 458052876f8SBenjamin Tissoires struct input_dev *dev; 459052876f8SBenjamin Tissoires 460052876f8SBenjamin Tissoires if (udev->state == UIST_CREATED) 461052876f8SBenjamin Tissoires return -EINVAL; 462052876f8SBenjamin Tissoires 463052876f8SBenjamin Tissoires if (copy_from_user(&setup, arg, sizeof(setup))) 464052876f8SBenjamin Tissoires return -EFAULT; 465052876f8SBenjamin Tissoires 466052876f8SBenjamin Tissoires if (!setup.name[0]) 467052876f8SBenjamin Tissoires return -EINVAL; 468052876f8SBenjamin Tissoires 469052876f8SBenjamin Tissoires dev = udev->dev; 470052876f8SBenjamin Tissoires dev->id = setup.id; 471052876f8SBenjamin Tissoires udev->ff_effects_max = setup.ff_effects_max; 472052876f8SBenjamin Tissoires 473052876f8SBenjamin Tissoires kfree(dev->name); 474052876f8SBenjamin Tissoires dev->name = kstrndup(setup.name, UINPUT_MAX_NAME_SIZE, GFP_KERNEL); 475052876f8SBenjamin Tissoires if (!dev->name) 476052876f8SBenjamin Tissoires return -ENOMEM; 477052876f8SBenjamin Tissoires 478052876f8SBenjamin Tissoires udev->state = UIST_SETUP_COMPLETE; 479052876f8SBenjamin Tissoires return 0; 480052876f8SBenjamin Tissoires } 481052876f8SBenjamin Tissoires 482052876f8SBenjamin Tissoires static int uinput_abs_setup(struct uinput_device *udev, 483052876f8SBenjamin Tissoires struct uinput_setup __user *arg, size_t size) 484052876f8SBenjamin Tissoires { 485052876f8SBenjamin Tissoires struct uinput_abs_setup setup = {}; 486052876f8SBenjamin Tissoires struct input_dev *dev; 487fbae10dbSDavid Herrmann int error; 488052876f8SBenjamin Tissoires 489052876f8SBenjamin Tissoires if (size > sizeof(setup)) 490052876f8SBenjamin Tissoires return -E2BIG; 491052876f8SBenjamin Tissoires 492052876f8SBenjamin Tissoires if (udev->state == UIST_CREATED) 493052876f8SBenjamin Tissoires return -EINVAL; 494052876f8SBenjamin Tissoires 495052876f8SBenjamin Tissoires if (copy_from_user(&setup, arg, size)) 496052876f8SBenjamin Tissoires return -EFAULT; 497052876f8SBenjamin Tissoires 498052876f8SBenjamin Tissoires if (setup.code > ABS_MAX) 499052876f8SBenjamin Tissoires return -ERANGE; 500052876f8SBenjamin Tissoires 501052876f8SBenjamin Tissoires dev = udev->dev; 502052876f8SBenjamin Tissoires 503fbae10dbSDavid Herrmann error = uinput_validate_absinfo(dev, setup.code, &setup.absinfo); 504fbae10dbSDavid Herrmann if (error) 505fbae10dbSDavid Herrmann return error; 506fbae10dbSDavid Herrmann 507052876f8SBenjamin Tissoires input_alloc_absinfo(dev); 508052876f8SBenjamin Tissoires if (!dev->absinfo) 509052876f8SBenjamin Tissoires return -ENOMEM; 510052876f8SBenjamin Tissoires 511052876f8SBenjamin Tissoires set_bit(setup.code, dev->absbit); 512052876f8SBenjamin Tissoires dev->absinfo[setup.code] = setup.absinfo; 513052876f8SBenjamin Tissoires return 0; 514052876f8SBenjamin Tissoires } 515052876f8SBenjamin Tissoires 516052876f8SBenjamin Tissoires /* legacy setup via write() */ 517052876f8SBenjamin Tissoires static int uinput_setup_device_legacy(struct uinput_device *udev, 51854ce165eSDmitry Torokhov const char __user *buffer, size_t count) 5191da177e4SLinus Torvalds { 5201da177e4SLinus Torvalds struct uinput_user_dev *user_dev; 5211da177e4SLinus Torvalds struct input_dev *dev; 5225d9d6e91SDavid Herrmann int i; 523152c12f5SDmitry Torokhov int retval; 5241da177e4SLinus Torvalds 52529506415SDmitry Torokhov if (count != sizeof(struct uinput_user_dev)) 52629506415SDmitry Torokhov return -EINVAL; 5271da177e4SLinus Torvalds 52829506415SDmitry Torokhov if (!udev->dev) { 52904ce40a6SDmitry Torokhov udev->dev = input_allocate_device(); 53004ce40a6SDmitry Torokhov if (!udev->dev) 53104ce40a6SDmitry Torokhov return -ENOMEM; 53229506415SDmitry Torokhov } 53329506415SDmitry Torokhov 5341da177e4SLinus Torvalds dev = udev->dev; 5351da177e4SLinus Torvalds 5364dfcc271SDmitry Torokhov user_dev = memdup_user(buffer, sizeof(struct uinput_user_dev)); 537163d2770SDan Carpenter if (IS_ERR(user_dev)) 5384dfcc271SDmitry Torokhov return PTR_ERR(user_dev); 5391da177e4SLinus Torvalds 540ff462551SAnssi Hannula udev->ff_effects_max = user_dev->ff_effects_max; 541ff462551SAnssi Hannula 5425d9d6e91SDavid Herrmann /* Ensure name is filled in */ 5435d9d6e91SDavid Herrmann if (!user_dev->name[0]) { 54429506415SDmitry Torokhov retval = -EINVAL; 54529506415SDmitry Torokhov goto exit; 54629506415SDmitry Torokhov } 54729506415SDmitry Torokhov 54829506415SDmitry Torokhov kfree(dev->name); 5495d9d6e91SDavid Herrmann dev->name = kstrndup(user_dev->name, UINPUT_MAX_NAME_SIZE, 5505d9d6e91SDavid Herrmann GFP_KERNEL); 5515d9d6e91SDavid Herrmann if (!dev->name) { 5521da177e4SLinus Torvalds retval = -ENOMEM; 5531da177e4SLinus Torvalds goto exit; 5541da177e4SLinus Torvalds } 5551da177e4SLinus Torvalds 5561da177e4SLinus Torvalds dev->id.bustype = user_dev->id.bustype; 5571da177e4SLinus Torvalds dev->id.vendor = user_dev->id.vendor; 5581da177e4SLinus Torvalds dev->id.product = user_dev->id.product; 5591da177e4SLinus Torvalds dev->id.version = user_dev->id.version; 5601da177e4SLinus Torvalds 56172d47362SDmitry Torokhov for (i = 0; i < ABS_CNT; i++) { 562987a6c02SDaniel Mack input_abs_set_max(dev, i, user_dev->absmax[i]); 563987a6c02SDaniel Mack input_abs_set_min(dev, i, user_dev->absmin[i]); 564987a6c02SDaniel Mack input_abs_set_fuzz(dev, i, user_dev->absfuzz[i]); 565987a6c02SDaniel Mack input_abs_set_flat(dev, i, user_dev->absflat[i]); 566987a6c02SDaniel Mack } 5671da177e4SLinus Torvalds 56829506415SDmitry Torokhov retval = uinput_validate_absbits(dev); 56929506415SDmitry Torokhov if (retval < 0) 57029506415SDmitry Torokhov goto exit; 57129506415SDmitry Torokhov 57229506415SDmitry Torokhov udev->state = UIST_SETUP_COMPLETE; 57329506415SDmitry Torokhov retval = count; 5741da177e4SLinus Torvalds 5751da177e4SLinus Torvalds exit: 5761da177e4SLinus Torvalds kfree(user_dev); 5771da177e4SLinus Torvalds return retval; 5781da177e4SLinus Torvalds } 5791da177e4SLinus Torvalds 580cbf05413SRyan Mallon static ssize_t uinput_inject_events(struct uinput_device *udev, 58154ce165eSDmitry Torokhov const char __user *buffer, size_t count) 5821da177e4SLinus Torvalds { 5831da177e4SLinus Torvalds struct input_event ev; 584cbf05413SRyan Mallon size_t bytes = 0; 5851da177e4SLinus Torvalds 586cbf05413SRyan Mallon if (count != 0 && count < input_event_size()) 58729506415SDmitry Torokhov return -EINVAL; 58829506415SDmitry Torokhov 589cbf05413SRyan Mallon while (bytes + input_event_size() <= count) { 590cbf05413SRyan Mallon /* 591cbf05413SRyan Mallon * Note that even if some events were fetched successfully 592cbf05413SRyan Mallon * we are still going to return EFAULT instead of partial 593cbf05413SRyan Mallon * count to let userspace know that it got it's buffers 594cbf05413SRyan Mallon * all wrong. 595cbf05413SRyan Mallon */ 596cbf05413SRyan Mallon if (input_event_from_user(buffer + bytes, &ev)) 5971da177e4SLinus Torvalds return -EFAULT; 5981da177e4SLinus Torvalds 59929506415SDmitry Torokhov input_event(udev->dev, ev.type, ev.code, ev.value); 600cbf05413SRyan Mallon bytes += input_event_size(); 601cbf05413SRyan Mallon } 60229506415SDmitry Torokhov 603cbf05413SRyan Mallon return bytes; 60429506415SDmitry Torokhov } 60529506415SDmitry Torokhov 60654ce165eSDmitry Torokhov static ssize_t uinput_write(struct file *file, const char __user *buffer, 60754ce165eSDmitry Torokhov size_t count, loff_t *ppos) 60829506415SDmitry Torokhov { 60929506415SDmitry Torokhov struct uinput_device *udev = file->private_data; 61029506415SDmitry Torokhov int retval; 61129506415SDmitry Torokhov 61222ae19c6SDmitry Torokhov if (count == 0) 61322ae19c6SDmitry Torokhov return 0; 61422ae19c6SDmitry Torokhov 615221979aaSDmitry Torokhov retval = mutex_lock_interruptible(&udev->mutex); 61629506415SDmitry Torokhov if (retval) 61729506415SDmitry Torokhov return retval; 61829506415SDmitry Torokhov 61929506415SDmitry Torokhov retval = udev->state == UIST_CREATED ? 620cbf05413SRyan Mallon uinput_inject_events(udev, buffer, count) : 621052876f8SBenjamin Tissoires uinput_setup_device_legacy(udev, buffer, count); 62229506415SDmitry Torokhov 623221979aaSDmitry Torokhov mutex_unlock(&udev->mutex); 62429506415SDmitry Torokhov 62529506415SDmitry Torokhov return retval; 6261da177e4SLinus Torvalds } 6271da177e4SLinus Torvalds 628929d1af5SDmitry Torokhov static bool uinput_fetch_next_event(struct uinput_device *udev, 629929d1af5SDmitry Torokhov struct input_event *event) 630929d1af5SDmitry Torokhov { 631929d1af5SDmitry Torokhov bool have_event; 632929d1af5SDmitry Torokhov 633929d1af5SDmitry Torokhov spin_lock_irq(&udev->dev->event_lock); 634929d1af5SDmitry Torokhov 635929d1af5SDmitry Torokhov have_event = udev->head != udev->tail; 636929d1af5SDmitry Torokhov if (have_event) { 637929d1af5SDmitry Torokhov *event = udev->buff[udev->tail]; 638929d1af5SDmitry Torokhov udev->tail = (udev->tail + 1) % UINPUT_BUFFER_SIZE; 639929d1af5SDmitry Torokhov } 640929d1af5SDmitry Torokhov 641929d1af5SDmitry Torokhov spin_unlock_irq(&udev->dev->event_lock); 642929d1af5SDmitry Torokhov 643929d1af5SDmitry Torokhov return have_event; 644929d1af5SDmitry Torokhov } 645929d1af5SDmitry Torokhov 64622ae19c6SDmitry Torokhov static ssize_t uinput_events_to_user(struct uinput_device *udev, 64722ae19c6SDmitry Torokhov char __user *buffer, size_t count) 64822ae19c6SDmitry Torokhov { 64922ae19c6SDmitry Torokhov struct input_event event; 65022ae19c6SDmitry Torokhov size_t read = 0; 65122ae19c6SDmitry Torokhov 65222ae19c6SDmitry Torokhov while (read + input_event_size() <= count && 65322ae19c6SDmitry Torokhov uinput_fetch_next_event(udev, &event)) { 65422ae19c6SDmitry Torokhov 65500ce756cSDmitry Torokhov if (input_event_to_user(buffer + read, &event)) 65600ce756cSDmitry Torokhov return -EFAULT; 65722ae19c6SDmitry Torokhov 65822ae19c6SDmitry Torokhov read += input_event_size(); 65922ae19c6SDmitry Torokhov } 66022ae19c6SDmitry Torokhov 66100ce756cSDmitry Torokhov return read; 66222ae19c6SDmitry Torokhov } 66322ae19c6SDmitry Torokhov 66422ae19c6SDmitry Torokhov static ssize_t uinput_read(struct file *file, char __user *buffer, 66522ae19c6SDmitry Torokhov size_t count, loff_t *ppos) 6661da177e4SLinus Torvalds { 6671da177e4SLinus Torvalds struct uinput_device *udev = file->private_data; 66822ae19c6SDmitry Torokhov ssize_t retval; 6691da177e4SLinus Torvalds 670f40033acSDavid Herrmann if (count != 0 && count < input_event_size()) 671f40033acSDavid Herrmann return -EINVAL; 672f40033acSDavid Herrmann 67322ae19c6SDmitry Torokhov do { 674221979aaSDmitry Torokhov retval = mutex_lock_interruptible(&udev->mutex); 67529506415SDmitry Torokhov if (retval) 67629506415SDmitry Torokhov return retval; 6771da177e4SLinus Torvalds 67822ae19c6SDmitry Torokhov if (udev->state != UIST_CREATED) 67929506415SDmitry Torokhov retval = -ENODEV; 68022ae19c6SDmitry Torokhov else if (udev->head == udev->tail && 68122ae19c6SDmitry Torokhov (file->f_flags & O_NONBLOCK)) 68222ae19c6SDmitry Torokhov retval = -EAGAIN; 68322ae19c6SDmitry Torokhov else 68422ae19c6SDmitry Torokhov retval = uinput_events_to_user(udev, buffer, count); 68529506415SDmitry Torokhov 686221979aaSDmitry Torokhov mutex_unlock(&udev->mutex); 68729506415SDmitry Torokhov 68822ae19c6SDmitry Torokhov if (retval || count == 0) 68922ae19c6SDmitry Torokhov break; 69022ae19c6SDmitry Torokhov 69122ae19c6SDmitry Torokhov if (!(file->f_flags & O_NONBLOCK)) 69222ae19c6SDmitry Torokhov retval = wait_event_interruptible(udev->waitq, 69322ae19c6SDmitry Torokhov udev->head != udev->tail || 69422ae19c6SDmitry Torokhov udev->state != UIST_CREATED); 69522ae19c6SDmitry Torokhov } while (retval == 0); 69622ae19c6SDmitry Torokhov 6971da177e4SLinus Torvalds return retval; 6981da177e4SLinus Torvalds } 6991da177e4SLinus Torvalds 700afc9a42bSAl Viro static __poll_t uinput_poll(struct file *file, poll_table *wait) 7011da177e4SLinus Torvalds { 7021da177e4SLinus Torvalds struct uinput_device *udev = file->private_data; 7031da177e4SLinus Torvalds 7041da177e4SLinus Torvalds poll_wait(file, &udev->waitq, wait); 7051da177e4SLinus Torvalds 7061da177e4SLinus Torvalds if (udev->head != udev->tail) 707a9a08845SLinus Torvalds return EPOLLIN | EPOLLRDNORM; 7081da177e4SLinus Torvalds 7091da177e4SLinus Torvalds return 0; 7101da177e4SLinus Torvalds } 7111da177e4SLinus Torvalds 71229506415SDmitry Torokhov static int uinput_release(struct inode *inode, struct file *file) 7131da177e4SLinus Torvalds { 71429506415SDmitry Torokhov struct uinput_device *udev = file->private_data; 7151da177e4SLinus Torvalds 71629506415SDmitry Torokhov uinput_destroy_device(udev); 7171da177e4SLinus Torvalds kfree(udev); 7181da177e4SLinus Torvalds 7191da177e4SLinus Torvalds return 0; 7201da177e4SLinus Torvalds } 7211da177e4SLinus Torvalds 7222d56f3a3SPhilip Langdale #ifdef CONFIG_COMPAT 7232d56f3a3SPhilip Langdale struct uinput_ff_upload_compat { 724c5b3533aSDmitry Torokhov __u32 request_id; 725c5b3533aSDmitry Torokhov __s32 retval; 7262d56f3a3SPhilip Langdale struct ff_effect_compat effect; 7272d56f3a3SPhilip Langdale struct ff_effect_compat old; 7282d56f3a3SPhilip Langdale }; 7292d56f3a3SPhilip Langdale 7302d56f3a3SPhilip Langdale static int uinput_ff_upload_to_user(char __user *buffer, 7312d56f3a3SPhilip Langdale const struct uinput_ff_upload *ff_up) 7322d56f3a3SPhilip Langdale { 733b8b4ead1SAndrew Morton if (in_compat_syscall()) { 7342d56f3a3SPhilip Langdale struct uinput_ff_upload_compat ff_up_compat; 7352d56f3a3SPhilip Langdale 7362d56f3a3SPhilip Langdale ff_up_compat.request_id = ff_up->request_id; 7372d56f3a3SPhilip Langdale ff_up_compat.retval = ff_up->retval; 7382d56f3a3SPhilip Langdale /* 7392d56f3a3SPhilip Langdale * It so happens that the pointer that gives us the trouble 7402d56f3a3SPhilip Langdale * is the last field in the structure. Since we don't support 7412d56f3a3SPhilip Langdale * custom waveforms in uinput anyway we can just copy the whole 7422d56f3a3SPhilip Langdale * thing (to the compat size) and ignore the pointer. 7432d56f3a3SPhilip Langdale */ 7442d56f3a3SPhilip Langdale memcpy(&ff_up_compat.effect, &ff_up->effect, 7452d56f3a3SPhilip Langdale sizeof(struct ff_effect_compat)); 7462d56f3a3SPhilip Langdale memcpy(&ff_up_compat.old, &ff_up->old, 7472d56f3a3SPhilip Langdale sizeof(struct ff_effect_compat)); 7482d56f3a3SPhilip Langdale 7492d56f3a3SPhilip Langdale if (copy_to_user(buffer, &ff_up_compat, 7502d56f3a3SPhilip Langdale sizeof(struct uinput_ff_upload_compat))) 7512d56f3a3SPhilip Langdale return -EFAULT; 7522d56f3a3SPhilip Langdale } else { 7532d56f3a3SPhilip Langdale if (copy_to_user(buffer, ff_up, 7542d56f3a3SPhilip Langdale sizeof(struct uinput_ff_upload))) 7552d56f3a3SPhilip Langdale return -EFAULT; 7562d56f3a3SPhilip Langdale } 7572d56f3a3SPhilip Langdale 7582d56f3a3SPhilip Langdale return 0; 7592d56f3a3SPhilip Langdale } 7602d56f3a3SPhilip Langdale 7612d56f3a3SPhilip Langdale static int uinput_ff_upload_from_user(const char __user *buffer, 7622d56f3a3SPhilip Langdale struct uinput_ff_upload *ff_up) 7632d56f3a3SPhilip Langdale { 764b8b4ead1SAndrew Morton if (in_compat_syscall()) { 7652d56f3a3SPhilip Langdale struct uinput_ff_upload_compat ff_up_compat; 7662d56f3a3SPhilip Langdale 7672d56f3a3SPhilip Langdale if (copy_from_user(&ff_up_compat, buffer, 7682d56f3a3SPhilip Langdale sizeof(struct uinput_ff_upload_compat))) 7692d56f3a3SPhilip Langdale return -EFAULT; 7702d56f3a3SPhilip Langdale 7712d56f3a3SPhilip Langdale ff_up->request_id = ff_up_compat.request_id; 7722d56f3a3SPhilip Langdale ff_up->retval = ff_up_compat.retval; 7732d56f3a3SPhilip Langdale memcpy(&ff_up->effect, &ff_up_compat.effect, 7742d56f3a3SPhilip Langdale sizeof(struct ff_effect_compat)); 7752d56f3a3SPhilip Langdale memcpy(&ff_up->old, &ff_up_compat.old, 7762d56f3a3SPhilip Langdale sizeof(struct ff_effect_compat)); 7772d56f3a3SPhilip Langdale 7782d56f3a3SPhilip Langdale } else { 7792d56f3a3SPhilip Langdale if (copy_from_user(ff_up, buffer, 7802d56f3a3SPhilip Langdale sizeof(struct uinput_ff_upload))) 7812d56f3a3SPhilip Langdale return -EFAULT; 7822d56f3a3SPhilip Langdale } 7832d56f3a3SPhilip Langdale 7842d56f3a3SPhilip Langdale return 0; 7852d56f3a3SPhilip Langdale } 7862d56f3a3SPhilip Langdale 7872d56f3a3SPhilip Langdale #else 7882d56f3a3SPhilip Langdale 7892d56f3a3SPhilip Langdale static int uinput_ff_upload_to_user(char __user *buffer, 7902d56f3a3SPhilip Langdale const struct uinput_ff_upload *ff_up) 7912d56f3a3SPhilip Langdale { 7922d56f3a3SPhilip Langdale if (copy_to_user(buffer, ff_up, sizeof(struct uinput_ff_upload))) 7932d56f3a3SPhilip Langdale return -EFAULT; 7942d56f3a3SPhilip Langdale 7952d56f3a3SPhilip Langdale return 0; 7962d56f3a3SPhilip Langdale } 7972d56f3a3SPhilip Langdale 7982d56f3a3SPhilip Langdale static int uinput_ff_upload_from_user(const char __user *buffer, 7992d56f3a3SPhilip Langdale struct uinput_ff_upload *ff_up) 8002d56f3a3SPhilip Langdale { 8012d56f3a3SPhilip Langdale if (copy_from_user(ff_up, buffer, sizeof(struct uinput_ff_upload))) 8022d56f3a3SPhilip Langdale return -EFAULT; 8032d56f3a3SPhilip Langdale 8042d56f3a3SPhilip Langdale return 0; 8052d56f3a3SPhilip Langdale } 8062d56f3a3SPhilip Langdale 8072d56f3a3SPhilip Langdale #endif 8082d56f3a3SPhilip Langdale 80929506415SDmitry Torokhov #define uinput_set_bit(_arg, _bit, _max) \ 81029506415SDmitry Torokhov ({ \ 81129506415SDmitry Torokhov int __ret = 0; \ 81229506415SDmitry Torokhov if (udev->state == UIST_CREATED) \ 81329506415SDmitry Torokhov __ret = -EINVAL; \ 81429506415SDmitry Torokhov else if ((_arg) > (_max)) \ 81529506415SDmitry Torokhov __ret = -EINVAL; \ 81629506415SDmitry Torokhov else set_bit((_arg), udev->dev->_bit); \ 81729506415SDmitry Torokhov __ret; \ 81829506415SDmitry Torokhov }) 8191da177e4SLinus Torvalds 820e3480a61SBenjamin Tissoires static int uinput_str_to_user(void __user *dest, const char *str, 821e3480a61SBenjamin Tissoires unsigned int maxlen) 822e3480a61SBenjamin Tissoires { 823e3480a61SBenjamin Tissoires char __user *p = dest; 824e3480a61SBenjamin Tissoires int len, ret; 825e3480a61SBenjamin Tissoires 826e3480a61SBenjamin Tissoires if (!str) 827e3480a61SBenjamin Tissoires return -ENOENT; 828e3480a61SBenjamin Tissoires 829e3480a61SBenjamin Tissoires if (maxlen == 0) 830e3480a61SBenjamin Tissoires return -EINVAL; 831e3480a61SBenjamin Tissoires 832e3480a61SBenjamin Tissoires len = strlen(str) + 1; 833e3480a61SBenjamin Tissoires if (len > maxlen) 834e3480a61SBenjamin Tissoires len = maxlen; 835e3480a61SBenjamin Tissoires 836e3480a61SBenjamin Tissoires ret = copy_to_user(p, str, len); 837e3480a61SBenjamin Tissoires if (ret) 838e3480a61SBenjamin Tissoires return -EFAULT; 839e3480a61SBenjamin Tissoires 840e3480a61SBenjamin Tissoires /* force terminating '\0' */ 841e3480a61SBenjamin Tissoires ret = put_user(0, p + len - 1); 842e3480a61SBenjamin Tissoires return ret ? -EFAULT : len; 843e3480a61SBenjamin Tissoires } 844e3480a61SBenjamin Tissoires 8452d56f3a3SPhilip Langdale static long uinput_ioctl_handler(struct file *file, unsigned int cmd, 8462d56f3a3SPhilip Langdale unsigned long arg, void __user *p) 8471da177e4SLinus Torvalds { 84829506415SDmitry Torokhov int retval; 8492d56f3a3SPhilip Langdale struct uinput_device *udev = file->private_data; 8501da177e4SLinus Torvalds struct uinput_ff_upload ff_up; 8511da177e4SLinus Torvalds struct uinput_ff_erase ff_erase; 8521da177e4SLinus Torvalds struct uinput_request *req; 8535b6271bdSDmitry Torokhov char *phys; 854e3480a61SBenjamin Tissoires const char *name; 855e3480a61SBenjamin Tissoires unsigned int size; 8561da177e4SLinus Torvalds 857221979aaSDmitry Torokhov retval = mutex_lock_interruptible(&udev->mutex); 85829506415SDmitry Torokhov if (retval) 85929506415SDmitry Torokhov return retval; 86029506415SDmitry Torokhov 86129506415SDmitry Torokhov if (!udev->dev) { 86204ce40a6SDmitry Torokhov udev->dev = input_allocate_device(); 863781f2dd0SDan Carpenter if (!udev->dev) { 864781f2dd0SDan Carpenter retval = -ENOMEM; 865781f2dd0SDan Carpenter goto out; 866781f2dd0SDan Carpenter } 8671da177e4SLinus Torvalds } 8681da177e4SLinus Torvalds 8691da177e4SLinus Torvalds switch (cmd) { 870ba4e9a61SDavid Herrmann case UI_GET_VERSION: 871c0661652SDmitry Torokhov if (put_user(UINPUT_VERSION, (unsigned int __user *)p)) 872ba4e9a61SDavid Herrmann retval = -EFAULT; 873ba4e9a61SDavid Herrmann goto out; 874ba4e9a61SDavid Herrmann 8751da177e4SLinus Torvalds case UI_DEV_CREATE: 8761da177e4SLinus Torvalds retval = uinput_create_device(udev); 8779d51e801SBenjamin Tisssoires goto out; 8781da177e4SLinus Torvalds 8791da177e4SLinus Torvalds case UI_DEV_DESTROY: 88029506415SDmitry Torokhov uinput_destroy_device(udev); 8819d51e801SBenjamin Tisssoires goto out; 8821da177e4SLinus Torvalds 883052876f8SBenjamin Tissoires case UI_DEV_SETUP: 884052876f8SBenjamin Tissoires retval = uinput_dev_setup(udev, p); 885052876f8SBenjamin Tissoires goto out; 886052876f8SBenjamin Tissoires 887052876f8SBenjamin Tissoires /* UI_ABS_SETUP is handled in the variable size ioctls */ 888052876f8SBenjamin Tissoires 8891da177e4SLinus Torvalds case UI_SET_EVBIT: 89029506415SDmitry Torokhov retval = uinput_set_bit(arg, evbit, EV_MAX); 8919d51e801SBenjamin Tisssoires goto out; 8921da177e4SLinus Torvalds 8931da177e4SLinus Torvalds case UI_SET_KEYBIT: 89429506415SDmitry Torokhov retval = uinput_set_bit(arg, keybit, KEY_MAX); 8959d51e801SBenjamin Tisssoires goto out; 8961da177e4SLinus Torvalds 8971da177e4SLinus Torvalds case UI_SET_RELBIT: 89829506415SDmitry Torokhov retval = uinput_set_bit(arg, relbit, REL_MAX); 8999d51e801SBenjamin Tisssoires goto out; 9001da177e4SLinus Torvalds 9011da177e4SLinus Torvalds case UI_SET_ABSBIT: 90229506415SDmitry Torokhov retval = uinput_set_bit(arg, absbit, ABS_MAX); 9039d51e801SBenjamin Tisssoires goto out; 9041da177e4SLinus Torvalds 9051da177e4SLinus Torvalds case UI_SET_MSCBIT: 90629506415SDmitry Torokhov retval = uinput_set_bit(arg, mscbit, MSC_MAX); 9079d51e801SBenjamin Tisssoires goto out; 9081da177e4SLinus Torvalds 9091da177e4SLinus Torvalds case UI_SET_LEDBIT: 91029506415SDmitry Torokhov retval = uinput_set_bit(arg, ledbit, LED_MAX); 9119d51e801SBenjamin Tisssoires goto out; 9121da177e4SLinus Torvalds 9131da177e4SLinus Torvalds case UI_SET_SNDBIT: 91429506415SDmitry Torokhov retval = uinput_set_bit(arg, sndbit, SND_MAX); 9159d51e801SBenjamin Tisssoires goto out; 9161da177e4SLinus Torvalds 9171da177e4SLinus Torvalds case UI_SET_FFBIT: 91829506415SDmitry Torokhov retval = uinput_set_bit(arg, ffbit, FF_MAX); 9199d51e801SBenjamin Tisssoires goto out; 9201da177e4SLinus Torvalds 92159c7c037SDmitry Torokhov case UI_SET_SWBIT: 92259c7c037SDmitry Torokhov retval = uinput_set_bit(arg, swbit, SW_MAX); 9239d51e801SBenjamin Tisssoires goto out; 92459c7c037SDmitry Torokhov 92585b77200SHenrik Rydberg case UI_SET_PROPBIT: 92685b77200SHenrik Rydberg retval = uinput_set_bit(arg, propbit, INPUT_PROP_MAX); 9279d51e801SBenjamin Tisssoires goto out; 92885b77200SHenrik Rydberg 9291da177e4SLinus Torvalds case UI_SET_PHYS: 93029506415SDmitry Torokhov if (udev->state == UIST_CREATED) { 93129506415SDmitry Torokhov retval = -EINVAL; 93229506415SDmitry Torokhov goto out; 93329506415SDmitry Torokhov } 9344dfcc271SDmitry Torokhov 9354dfcc271SDmitry Torokhov phys = strndup_user(p, 1024); 9364dfcc271SDmitry Torokhov if (IS_ERR(phys)) { 9374dfcc271SDmitry Torokhov retval = PTR_ERR(phys); 9384dfcc271SDmitry Torokhov goto out; 9391da177e4SLinus Torvalds } 9404dfcc271SDmitry Torokhov 9411da177e4SLinus Torvalds kfree(udev->dev->phys); 9424dfcc271SDmitry Torokhov udev->dev->phys = phys; 9439d51e801SBenjamin Tisssoires goto out; 9441da177e4SLinus Torvalds 9451da177e4SLinus Torvalds case UI_BEGIN_FF_UPLOAD: 9462d56f3a3SPhilip Langdale retval = uinput_ff_upload_from_user(p, &ff_up); 9472d56f3a3SPhilip Langdale if (retval) 9489d51e801SBenjamin Tisssoires goto out; 9492d56f3a3SPhilip Langdale 9501da177e4SLinus Torvalds req = uinput_request_find(udev, ff_up.request_id); 95154ce165eSDmitry Torokhov if (!req || req->code != UI_FF_UPLOAD || 95254ce165eSDmitry Torokhov !req->u.upload.effect) { 9531da177e4SLinus Torvalds retval = -EINVAL; 9549d51e801SBenjamin Tisssoires goto out; 9551da177e4SLinus Torvalds } 9562d56f3a3SPhilip Langdale 9571da177e4SLinus Torvalds ff_up.retval = 0; 9582d56f3a3SPhilip Langdale ff_up.effect = *req->u.upload.effect; 959ff462551SAnssi Hannula if (req->u.upload.old) 9602d56f3a3SPhilip Langdale ff_up.old = *req->u.upload.old; 961ff462551SAnssi Hannula else 962ff462551SAnssi Hannula memset(&ff_up.old, 0, sizeof(struct ff_effect)); 963ff462551SAnssi Hannula 9642d56f3a3SPhilip Langdale retval = uinput_ff_upload_to_user(p, &ff_up); 9659d51e801SBenjamin Tisssoires goto out; 9661da177e4SLinus Torvalds 9671da177e4SLinus Torvalds case UI_BEGIN_FF_ERASE: 9681da177e4SLinus Torvalds if (copy_from_user(&ff_erase, p, sizeof(ff_erase))) { 9691da177e4SLinus Torvalds retval = -EFAULT; 9709d51e801SBenjamin Tisssoires goto out; 9711da177e4SLinus Torvalds } 9722d56f3a3SPhilip Langdale 9731da177e4SLinus Torvalds req = uinput_request_find(udev, ff_erase.request_id); 9742d56f3a3SPhilip Langdale if (!req || req->code != UI_FF_ERASE) { 9751da177e4SLinus Torvalds retval = -EINVAL; 9769d51e801SBenjamin Tisssoires goto out; 9771da177e4SLinus Torvalds } 9782d56f3a3SPhilip Langdale 9791da177e4SLinus Torvalds ff_erase.retval = 0; 9801da177e4SLinus Torvalds ff_erase.effect_id = req->u.effect_id; 9811da177e4SLinus Torvalds if (copy_to_user(p, &ff_erase, sizeof(ff_erase))) { 9821da177e4SLinus Torvalds retval = -EFAULT; 9839d51e801SBenjamin Tisssoires goto out; 9841da177e4SLinus Torvalds } 9852d56f3a3SPhilip Langdale 9869d51e801SBenjamin Tisssoires goto out; 9871da177e4SLinus Torvalds 9881da177e4SLinus Torvalds case UI_END_FF_UPLOAD: 9892d56f3a3SPhilip Langdale retval = uinput_ff_upload_from_user(p, &ff_up); 9902d56f3a3SPhilip Langdale if (retval) 9919d51e801SBenjamin Tisssoires goto out; 9922d56f3a3SPhilip Langdale 9931da177e4SLinus Torvalds req = uinput_request_find(udev, ff_up.request_id); 9942d56f3a3SPhilip Langdale if (!req || req->code != UI_FF_UPLOAD || 9952d56f3a3SPhilip Langdale !req->u.upload.effect) { 9961da177e4SLinus Torvalds retval = -EINVAL; 9979d51e801SBenjamin Tisssoires goto out; 9981da177e4SLinus Torvalds } 9992d56f3a3SPhilip Langdale 10001da177e4SLinus Torvalds req->retval = ff_up.retval; 10016b4877c7SDmitry Torokhov complete(&req->done); 10029d51e801SBenjamin Tisssoires goto out; 10031da177e4SLinus Torvalds 10041da177e4SLinus Torvalds case UI_END_FF_ERASE: 10051da177e4SLinus Torvalds if (copy_from_user(&ff_erase, p, sizeof(ff_erase))) { 10061da177e4SLinus Torvalds retval = -EFAULT; 10079d51e801SBenjamin Tisssoires goto out; 10081da177e4SLinus Torvalds } 10092d56f3a3SPhilip Langdale 10101da177e4SLinus Torvalds req = uinput_request_find(udev, ff_erase.request_id); 10112d56f3a3SPhilip Langdale if (!req || req->code != UI_FF_ERASE) { 10121da177e4SLinus Torvalds retval = -EINVAL; 10139d51e801SBenjamin Tisssoires goto out; 10141da177e4SLinus Torvalds } 10152d56f3a3SPhilip Langdale 10161da177e4SLinus Torvalds req->retval = ff_erase.retval; 10176b4877c7SDmitry Torokhov complete(&req->done); 10189d51e801SBenjamin Tisssoires goto out; 10191da177e4SLinus Torvalds } 102029506415SDmitry Torokhov 1021e3480a61SBenjamin Tissoires size = _IOC_SIZE(cmd); 1022e3480a61SBenjamin Tissoires 1023e3480a61SBenjamin Tissoires /* Now check variable-length commands */ 1024e3480a61SBenjamin Tissoires switch (cmd & ~IOCSIZE_MASK) { 1025e3480a61SBenjamin Tissoires case UI_GET_SYSNAME(0): 1026e3480a61SBenjamin Tissoires if (udev->state != UIST_CREATED) { 1027e3480a61SBenjamin Tissoires retval = -ENOENT; 1028e3480a61SBenjamin Tissoires goto out; 1029e3480a61SBenjamin Tissoires } 1030e3480a61SBenjamin Tissoires name = dev_name(&udev->dev->dev); 1031e3480a61SBenjamin Tissoires retval = uinput_str_to_user(p, name, size); 1032e3480a61SBenjamin Tissoires goto out; 1033052876f8SBenjamin Tissoires 1034052876f8SBenjamin Tissoires case UI_ABS_SETUP & ~IOCSIZE_MASK: 1035052876f8SBenjamin Tissoires retval = uinput_abs_setup(udev, p, size); 1036052876f8SBenjamin Tissoires goto out; 1037e3480a61SBenjamin Tissoires } 1038e3480a61SBenjamin Tissoires 10399d51e801SBenjamin Tisssoires retval = -EINVAL; 104029506415SDmitry Torokhov out: 1041221979aaSDmitry Torokhov mutex_unlock(&udev->mutex); 10421da177e4SLinus Torvalds return retval; 10431da177e4SLinus Torvalds } 10441da177e4SLinus Torvalds 10452d56f3a3SPhilip Langdale static long uinput_ioctl(struct file *file, unsigned int cmd, unsigned long arg) 10462d56f3a3SPhilip Langdale { 10472d56f3a3SPhilip Langdale return uinput_ioctl_handler(file, cmd, arg, (void __user *)arg); 10482d56f3a3SPhilip Langdale } 10492d56f3a3SPhilip Langdale 10502d56f3a3SPhilip Langdale #ifdef CONFIG_COMPAT 1051affa80bdSRicky Liang 1052affa80bdSRicky Liang #define UI_SET_PHYS_COMPAT _IOW(UINPUT_IOCTL_BASE, 108, compat_uptr_t) 1053affa80bdSRicky Liang 105454ce165eSDmitry Torokhov static long uinput_compat_ioctl(struct file *file, 105554ce165eSDmitry Torokhov unsigned int cmd, unsigned long arg) 10562d56f3a3SPhilip Langdale { 1057affa80bdSRicky Liang if (cmd == UI_SET_PHYS_COMPAT) 1058affa80bdSRicky Liang cmd = UI_SET_PHYS; 1059affa80bdSRicky Liang 10602d56f3a3SPhilip Langdale return uinput_ioctl_handler(file, cmd, arg, compat_ptr(arg)); 10612d56f3a3SPhilip Langdale } 10622d56f3a3SPhilip Langdale #endif 10632d56f3a3SPhilip Langdale 10642b8693c0SArjan van de Ven static const struct file_operations uinput_fops = { 10651da177e4SLinus Torvalds .owner = THIS_MODULE, 10661da177e4SLinus Torvalds .open = uinput_open, 106729506415SDmitry Torokhov .release = uinput_release, 10681da177e4SLinus Torvalds .read = uinput_read, 10691da177e4SLinus Torvalds .write = uinput_write, 10701da177e4SLinus Torvalds .poll = uinput_poll, 107129506415SDmitry Torokhov .unlocked_ioctl = uinput_ioctl, 10722d56f3a3SPhilip Langdale #ifdef CONFIG_COMPAT 10732d56f3a3SPhilip Langdale .compat_ioctl = uinput_compat_ioctl, 10742d56f3a3SPhilip Langdale #endif 10756038f373SArnd Bergmann .llseek = no_llseek, 10761da177e4SLinus Torvalds }; 10771da177e4SLinus Torvalds 10781da177e4SLinus Torvalds static struct miscdevice uinput_misc = { 10791da177e4SLinus Torvalds .fops = &uinput_fops, 10801da177e4SLinus Torvalds .minor = UINPUT_MINOR, 10811da177e4SLinus Torvalds .name = UINPUT_NAME, 10821da177e4SLinus Torvalds }; 1083ca75d601SPrasannaKumar Muralidharan module_misc_device(uinput_misc); 1084ca75d601SPrasannaKumar Muralidharan 10858905aaafSKay Sievers MODULE_ALIAS_MISCDEV(UINPUT_MINOR); 10868905aaafSKay Sievers MODULE_ALIAS("devname:" UINPUT_NAME); 10871da177e4SLinus Torvalds 10881da177e4SLinus Torvalds MODULE_AUTHOR("Aristeu Sergio Rozanski Filho"); 10891da177e4SLinus Torvalds MODULE_DESCRIPTION("User level driver support for input subsystem"); 10901da177e4SLinus Torvalds MODULE_LICENSE("GPL"); 1091