• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /*
2  * The input core
3  *
4  * Copyright (c) 1999-2002 Vojtech Pavlik
5  */
6 
7 /*
8  * This program is free software; you can redistribute it and/or modify it
9  * under the terms of the GNU General Public License version 2 as published by
10  * the Free Software Foundation.
11  */
12 
13 #define pr_fmt(fmt) KBUILD_BASENAME ": " fmt
14 
15 #include <linux/init.h>
16 #include <linux/types.h>
17 #include <linux/idr.h>
18 #include <linux/input/mt.h>
19 #include <linux/module.h>
20 #include <linux/slab.h>
21 #include <linux/random.h>
22 #include <linux/major.h>
23 #include <linux/proc_fs.h>
24 #include <linux/sched.h>
25 #include <linux/seq_file.h>
26 #include <linux/poll.h>
27 #include <linux/device.h>
28 #include <linux/mutex.h>
29 #include <linux/rcupdate.h>
30 #include "input-compat.h"
31 
32 MODULE_AUTHOR("Vojtech Pavlik <vojtech@suse.cz>");
33 MODULE_DESCRIPTION("Input core");
34 MODULE_LICENSE("GPL");
35 
36 #define INPUT_MAX_CHAR_DEVICES		1024
37 #define INPUT_FIRST_DYNAMIC_DEV		256
38 static DEFINE_IDA(input_ida);
39 
40 static LIST_HEAD(input_dev_list);
41 static LIST_HEAD(input_handler_list);
42 
43 /*
44  * input_mutex protects access to both input_dev_list and input_handler_list.
45  * This also causes input_[un]register_device and input_[un]register_handler
46  * be mutually exclusive which simplifies locking in drivers implementing
47  * input handlers.
48  */
49 static DEFINE_MUTEX(input_mutex);
50 
51 static const struct input_value input_value_sync = { EV_SYN, SYN_REPORT, 1 };
52 
is_event_supported(unsigned int code,unsigned long * bm,unsigned int max)53 static inline int is_event_supported(unsigned int code,
54 				     unsigned long *bm, unsigned int max)
55 {
56 	return code <= max && test_bit(code, bm);
57 }
58 
input_defuzz_abs_event(int value,int old_val,int fuzz)59 static int input_defuzz_abs_event(int value, int old_val, int fuzz)
60 {
61 	if (fuzz) {
62 		if (value > old_val - fuzz / 2 && value < old_val + fuzz / 2)
63 			return old_val;
64 
65 		if (value > old_val - fuzz && value < old_val + fuzz)
66 			return (old_val * 3 + value) / 4;
67 
68 		if (value > old_val - fuzz * 2 && value < old_val + fuzz * 2)
69 			return (old_val + value) / 2;
70 	}
71 
72 	return value;
73 }
74 
input_start_autorepeat(struct input_dev * dev,int code)75 static void input_start_autorepeat(struct input_dev *dev, int code)
76 {
77 	if (test_bit(EV_REP, dev->evbit) &&
78 	    dev->rep[REP_PERIOD] && dev->rep[REP_DELAY] &&
79 	    dev->timer.data) {
80 		dev->repeat_key = code;
81 		mod_timer(&dev->timer,
82 			  jiffies + msecs_to_jiffies(dev->rep[REP_DELAY]));
83 	}
84 }
85 
input_stop_autorepeat(struct input_dev * dev)86 static void input_stop_autorepeat(struct input_dev *dev)
87 {
88 	del_timer(&dev->timer);
89 }
90 
91 /*
92  * Pass event first through all filters and then, if event has not been
93  * filtered out, through all open handles. This function is called with
94  * dev->event_lock held and interrupts disabled.
95  */
input_to_handler(struct input_handle * handle,struct input_value * vals,unsigned int count)96 static unsigned int input_to_handler(struct input_handle *handle,
97 			struct input_value *vals, unsigned int count)
98 {
99 	struct input_handler *handler = handle->handler;
100 	struct input_value *end = vals;
101 	struct input_value *v;
102 
103 	for (v = vals; v != vals + count; v++) {
104 		if (handler->filter &&
105 		    handler->filter(handle, v->type, v->code, v->value))
106 			continue;
107 		if (end != v)
108 			*end = *v;
109 		end++;
110 	}
111 
112 	count = end - vals;
113 	if (!count)
114 		return 0;
115 
116 	if (handler->events)
117 		handler->events(handle, vals, count);
118 	else if (handler->event)
119 		for (v = vals; v != end; v++)
120 			handler->event(handle, v->type, v->code, v->value);
121 
122 	return count;
123 }
124 
125 /*
126  * Pass values first through all filters and then, if event has not been
127  * filtered out, through all open handles. This function is called with
128  * dev->event_lock held and interrupts disabled.
129  */
input_pass_values(struct input_dev * dev,struct input_value * vals,unsigned int count)130 static void input_pass_values(struct input_dev *dev,
131 			      struct input_value *vals, unsigned int count)
132 {
133 	struct input_handle *handle;
134 	struct input_value *v;
135 
136 	if (!count)
137 		return;
138 
139 	rcu_read_lock();
140 
141 	handle = rcu_dereference(dev->grab);
142 	if (handle) {
143 		count = input_to_handler(handle, vals, count);
144 	} else {
145 		list_for_each_entry_rcu(handle, &dev->h_list, d_node)
146 			if (handle->open)
147 				count = input_to_handler(handle, vals, count);
148 	}
149 
150 	rcu_read_unlock();
151 
152 	add_input_randomness(vals->type, vals->code, vals->value);
153 
154 	/* trigger auto repeat for key events */
155 	for (v = vals; v != vals + count; v++) {
156 		if (v->type == EV_KEY && v->value != 2) {
157 			if (v->value)
158 				input_start_autorepeat(dev, v->code);
159 			else
160 				input_stop_autorepeat(dev);
161 		}
162 	}
163 }
164 
input_pass_event(struct input_dev * dev,unsigned int type,unsigned int code,int value)165 static void input_pass_event(struct input_dev *dev,
166 			     unsigned int type, unsigned int code, int value)
167 {
168 	struct input_value vals[] = { { type, code, value } };
169 
170 	input_pass_values(dev, vals, ARRAY_SIZE(vals));
171 }
172 
173 /*
174  * Generate software autorepeat event. Note that we take
175  * dev->event_lock here to avoid racing with input_event
176  * which may cause keys get "stuck".
177  */
input_repeat_key(unsigned long data)178 static void input_repeat_key(unsigned long data)
179 {
180 	struct input_dev *dev = (void *) data;
181 	unsigned long flags;
182 
183 	spin_lock_irqsave(&dev->event_lock, flags);
184 
185 	if (test_bit(dev->repeat_key, dev->key) &&
186 	    is_event_supported(dev->repeat_key, dev->keybit, KEY_MAX)) {
187 		struct input_value vals[] =  {
188 			{ EV_KEY, dev->repeat_key, 2 },
189 			input_value_sync
190 		};
191 
192 		input_pass_values(dev, vals, ARRAY_SIZE(vals));
193 
194 		if (dev->rep[REP_PERIOD])
195 			mod_timer(&dev->timer, jiffies +
196 					msecs_to_jiffies(dev->rep[REP_PERIOD]));
197 	}
198 
199 	spin_unlock_irqrestore(&dev->event_lock, flags);
200 }
201 
202 #define INPUT_IGNORE_EVENT	0
203 #define INPUT_PASS_TO_HANDLERS	1
204 #define INPUT_PASS_TO_DEVICE	2
205 #define INPUT_SLOT		4
206 #define INPUT_FLUSH		8
207 #define INPUT_PASS_TO_ALL	(INPUT_PASS_TO_HANDLERS | INPUT_PASS_TO_DEVICE)
208 
input_handle_abs_event(struct input_dev * dev,unsigned int code,int * pval)209 static int input_handle_abs_event(struct input_dev *dev,
210 				  unsigned int code, int *pval)
211 {
212 	struct input_mt *mt = dev->mt;
213 	bool is_mt_event;
214 	int *pold;
215 
216 	if (code == ABS_MT_SLOT) {
217 		/*
218 		 * "Stage" the event; we'll flush it later, when we
219 		 * get actual touch data.
220 		 */
221 		if (mt && *pval >= 0 && *pval < mt->num_slots)
222 			mt->slot = *pval;
223 
224 		return INPUT_IGNORE_EVENT;
225 	}
226 
227 	is_mt_event = input_is_mt_value(code);
228 
229 	if (!is_mt_event) {
230 		pold = &dev->absinfo[code].value;
231 	} else if (mt) {
232 		pold = &mt->slots[mt->slot].abs[code - ABS_MT_FIRST];
233 	} else {
234 		/*
235 		 * Bypass filtering for multi-touch events when
236 		 * not employing slots.
237 		 */
238 		pold = NULL;
239 	}
240 
241 	if (pold) {
242 		*pval = input_defuzz_abs_event(*pval, *pold,
243 						dev->absinfo[code].fuzz);
244 		if (*pold == *pval)
245 			return INPUT_IGNORE_EVENT;
246 
247 		*pold = *pval;
248 	}
249 
250 	/* Flush pending "slot" event */
251 	if (is_mt_event && mt && mt->slot != input_abs_get_val(dev, ABS_MT_SLOT)) {
252 		input_abs_set_val(dev, ABS_MT_SLOT, mt->slot);
253 		return INPUT_PASS_TO_HANDLERS | INPUT_SLOT;
254 	}
255 
256 	return INPUT_PASS_TO_HANDLERS;
257 }
258 
input_get_disposition(struct input_dev * dev,unsigned int type,unsigned int code,int * pval)259 static int input_get_disposition(struct input_dev *dev,
260 			  unsigned int type, unsigned int code, int *pval)
261 {
262 	int disposition = INPUT_IGNORE_EVENT;
263 	int value = *pval;
264 
265 	switch (type) {
266 
267 	case EV_SYN:
268 		switch (code) {
269 		case SYN_CONFIG:
270 			disposition = INPUT_PASS_TO_ALL;
271 			break;
272 
273 		case SYN_REPORT:
274 			disposition = INPUT_PASS_TO_HANDLERS | INPUT_FLUSH;
275 			break;
276 		case SYN_MT_REPORT:
277 			disposition = INPUT_PASS_TO_HANDLERS;
278 			break;
279 		}
280 		break;
281 
282 	case EV_KEY:
283 		if (is_event_supported(code, dev->keybit, KEY_MAX)) {
284 
285 			/* auto-repeat bypasses state updates */
286 			if (value == 2) {
287 				disposition = INPUT_PASS_TO_HANDLERS;
288 				break;
289 			}
290 
291 			if (!!test_bit(code, dev->key) != !!value) {
292 
293 				__change_bit(code, dev->key);
294 				disposition = INPUT_PASS_TO_HANDLERS;
295 			}
296 		}
297 		break;
298 
299 	case EV_SW:
300 		if (is_event_supported(code, dev->swbit, SW_MAX) &&
301 		    !!test_bit(code, dev->sw) != !!value) {
302 
303 			__change_bit(code, dev->sw);
304 			disposition = INPUT_PASS_TO_HANDLERS;
305 		}
306 		break;
307 
308 	case EV_ABS:
309 		if (is_event_supported(code, dev->absbit, ABS_MAX))
310 			disposition = input_handle_abs_event(dev, code, &value);
311 
312 		break;
313 
314 	case EV_REL:
315 		if (is_event_supported(code, dev->relbit, REL_MAX) && value)
316 			disposition = INPUT_PASS_TO_HANDLERS;
317 
318 		break;
319 
320 	case EV_MSC:
321 		if (is_event_supported(code, dev->mscbit, MSC_MAX))
322 			disposition = INPUT_PASS_TO_ALL;
323 
324 		break;
325 
326 	case EV_LED:
327 		if (is_event_supported(code, dev->ledbit, LED_MAX) &&
328 		    !!test_bit(code, dev->led) != !!value) {
329 
330 			__change_bit(code, dev->led);
331 			disposition = INPUT_PASS_TO_ALL;
332 		}
333 		break;
334 
335 	case EV_SND:
336 		if (is_event_supported(code, dev->sndbit, SND_MAX)) {
337 
338 			if (!!test_bit(code, dev->snd) != !!value)
339 				__change_bit(code, dev->snd);
340 			disposition = INPUT_PASS_TO_ALL;
341 		}
342 		break;
343 
344 	case EV_REP:
345 		if (code <= REP_MAX && value >= 0 && dev->rep[code] != value) {
346 			dev->rep[code] = value;
347 			disposition = INPUT_PASS_TO_ALL;
348 		}
349 		break;
350 
351 	case EV_FF:
352 		if (value >= 0)
353 			disposition = INPUT_PASS_TO_ALL;
354 		break;
355 
356 	case EV_PWR:
357 		disposition = INPUT_PASS_TO_ALL;
358 		break;
359 	}
360 
361 	*pval = value;
362 	return disposition;
363 }
364 
input_handle_event(struct input_dev * dev,unsigned int type,unsigned int code,int value)365 static void input_handle_event(struct input_dev *dev,
366 			       unsigned int type, unsigned int code, int value)
367 {
368 	int disposition;
369 
370 	disposition = input_get_disposition(dev, type, code, &value);
371 
372 	if ((disposition & INPUT_PASS_TO_DEVICE) && dev->event)
373 		dev->event(dev, type, code, value);
374 
375 	if (!dev->vals)
376 		return;
377 
378 	if (disposition & INPUT_PASS_TO_HANDLERS) {
379 		struct input_value *v;
380 
381 		if (disposition & INPUT_SLOT) {
382 			v = &dev->vals[dev->num_vals++];
383 			v->type = EV_ABS;
384 			v->code = ABS_MT_SLOT;
385 			v->value = dev->mt->slot;
386 		}
387 
388 		v = &dev->vals[dev->num_vals++];
389 		v->type = type;
390 		v->code = code;
391 		v->value = value;
392 	}
393 
394 	if (disposition & INPUT_FLUSH) {
395 		if (dev->num_vals >= 2)
396 			input_pass_values(dev, dev->vals, dev->num_vals);
397 		dev->num_vals = 0;
398 	} else if (dev->num_vals >= dev->max_vals - 2) {
399 		dev->vals[dev->num_vals++] = input_value_sync;
400 		input_pass_values(dev, dev->vals, dev->num_vals);
401 		dev->num_vals = 0;
402 	}
403 
404 }
405 
406 /**
407  * input_event() - report new input event
408  * @dev: device that generated the event
409  * @type: type of the event
410  * @code: event code
411  * @value: value of the event
412  *
413  * This function should be used by drivers implementing various input
414  * devices to report input events. See also input_inject_event().
415  *
416  * NOTE: input_event() may be safely used right after input device was
417  * allocated with input_allocate_device(), even before it is registered
418  * with input_register_device(), but the event will not reach any of the
419  * input handlers. Such early invocation of input_event() may be used
420  * to 'seed' initial state of a switch or initial position of absolute
421  * axis, etc.
422  */
input_event(struct input_dev * dev,unsigned int type,unsigned int code,int value)423 void input_event(struct input_dev *dev,
424 		 unsigned int type, unsigned int code, int value)
425 {
426 	unsigned long flags;
427 
428 	if (is_event_supported(type, dev->evbit, EV_MAX)) {
429 
430 		spin_lock_irqsave(&dev->event_lock, flags);
431 		input_handle_event(dev, type, code, value);
432 		spin_unlock_irqrestore(&dev->event_lock, flags);
433 	}
434 }
435 EXPORT_SYMBOL(input_event);
436 
437 /**
438  * input_inject_event() - send input event from input handler
439  * @handle: input handle to send event through
440  * @type: type of the event
441  * @code: event code
442  * @value: value of the event
443  *
444  * Similar to input_event() but will ignore event if device is
445  * "grabbed" and handle injecting event is not the one that owns
446  * the device.
447  */
input_inject_event(struct input_handle * handle,unsigned int type,unsigned int code,int value)448 void input_inject_event(struct input_handle *handle,
449 			unsigned int type, unsigned int code, int value)
450 {
451 	struct input_dev *dev = handle->dev;
452 	struct input_handle *grab;
453 	unsigned long flags;
454 
455 	if (is_event_supported(type, dev->evbit, EV_MAX)) {
456 		spin_lock_irqsave(&dev->event_lock, flags);
457 
458 		rcu_read_lock();
459 		grab = rcu_dereference(dev->grab);
460 		if (!grab || grab == handle)
461 			input_handle_event(dev, type, code, value);
462 		rcu_read_unlock();
463 
464 		spin_unlock_irqrestore(&dev->event_lock, flags);
465 	}
466 }
467 EXPORT_SYMBOL(input_inject_event);
468 
469 /**
470  * input_alloc_absinfo - allocates array of input_absinfo structs
471  * @dev: the input device emitting absolute events
472  *
473  * If the absinfo struct the caller asked for is already allocated, this
474  * functions will not do anything.
475  */
input_alloc_absinfo(struct input_dev * dev)476 void input_alloc_absinfo(struct input_dev *dev)
477 {
478 	if (!dev->absinfo)
479 		dev->absinfo = kcalloc(ABS_CNT, sizeof(struct input_absinfo),
480 					GFP_KERNEL);
481 
482 	WARN(!dev->absinfo, "%s(): kcalloc() failed?\n", __func__);
483 }
484 EXPORT_SYMBOL(input_alloc_absinfo);
485 
input_set_abs_params(struct input_dev * dev,unsigned int axis,int min,int max,int fuzz,int flat)486 void input_set_abs_params(struct input_dev *dev, unsigned int axis,
487 			  int min, int max, int fuzz, int flat)
488 {
489 	struct input_absinfo *absinfo;
490 
491 	input_alloc_absinfo(dev);
492 	if (!dev->absinfo)
493 		return;
494 
495 	absinfo = &dev->absinfo[axis];
496 	absinfo->minimum = min;
497 	absinfo->maximum = max;
498 	absinfo->fuzz = fuzz;
499 	absinfo->flat = flat;
500 
501 	__set_bit(EV_ABS, dev->evbit);
502 	__set_bit(axis, dev->absbit);
503 }
504 EXPORT_SYMBOL(input_set_abs_params);
505 
506 
507 /**
508  * input_grab_device - grabs device for exclusive use
509  * @handle: input handle that wants to own the device
510  *
511  * When a device is grabbed by an input handle all events generated by
512  * the device are delivered only to this handle. Also events injected
513  * by other input handles are ignored while device is grabbed.
514  */
input_grab_device(struct input_handle * handle)515 int input_grab_device(struct input_handle *handle)
516 {
517 	struct input_dev *dev = handle->dev;
518 	int retval;
519 
520 	retval = mutex_lock_interruptible(&dev->mutex);
521 	if (retval)
522 		return retval;
523 
524 	if (dev->grab) {
525 		retval = -EBUSY;
526 		goto out;
527 	}
528 
529 	rcu_assign_pointer(dev->grab, handle);
530 
531  out:
532 	mutex_unlock(&dev->mutex);
533 	return retval;
534 }
535 EXPORT_SYMBOL(input_grab_device);
536 
__input_release_device(struct input_handle * handle)537 static void __input_release_device(struct input_handle *handle)
538 {
539 	struct input_dev *dev = handle->dev;
540 	struct input_handle *grabber;
541 
542 	grabber = rcu_dereference_protected(dev->grab,
543 					    lockdep_is_held(&dev->mutex));
544 	if (grabber == handle) {
545 		rcu_assign_pointer(dev->grab, NULL);
546 		/* Make sure input_pass_event() notices that grab is gone */
547 		synchronize_rcu();
548 
549 		list_for_each_entry(handle, &dev->h_list, d_node)
550 			if (handle->open && handle->handler->start)
551 				handle->handler->start(handle);
552 	}
553 }
554 
555 /**
556  * input_release_device - release previously grabbed device
557  * @handle: input handle that owns the device
558  *
559  * Releases previously grabbed device so that other input handles can
560  * start receiving input events. Upon release all handlers attached
561  * to the device have their start() method called so they have a change
562  * to synchronize device state with the rest of the system.
563  */
input_release_device(struct input_handle * handle)564 void input_release_device(struct input_handle *handle)
565 {
566 	struct input_dev *dev = handle->dev;
567 
568 	mutex_lock(&dev->mutex);
569 	__input_release_device(handle);
570 	mutex_unlock(&dev->mutex);
571 }
572 EXPORT_SYMBOL(input_release_device);
573 
574 /**
575  * input_open_device - open input device
576  * @handle: handle through which device is being accessed
577  *
578  * This function should be called by input handlers when they
579  * want to start receive events from given input device.
580  */
input_open_device(struct input_handle * handle)581 int input_open_device(struct input_handle *handle)
582 {
583 	struct input_dev *dev = handle->dev;
584 	int retval;
585 
586 	retval = mutex_lock_interruptible(&dev->mutex);
587 	if (retval)
588 		return retval;
589 
590 	if (dev->going_away) {
591 		retval = -ENODEV;
592 		goto out;
593 	}
594 
595 	handle->open++;
596 
597 	if (!dev->users++ && dev->open)
598 		retval = dev->open(dev);
599 
600 	if (retval) {
601 		dev->users--;
602 		if (!--handle->open) {
603 			/*
604 			 * Make sure we are not delivering any more events
605 			 * through this handle
606 			 */
607 			synchronize_rcu();
608 		}
609 	}
610 
611  out:
612 	mutex_unlock(&dev->mutex);
613 	return retval;
614 }
615 EXPORT_SYMBOL(input_open_device);
616 
input_flush_device(struct input_handle * handle,struct file * file)617 int input_flush_device(struct input_handle *handle, struct file *file)
618 {
619 	struct input_dev *dev = handle->dev;
620 	int retval;
621 
622 	retval = mutex_lock_interruptible(&dev->mutex);
623 	if (retval)
624 		return retval;
625 
626 	if (dev->flush)
627 		retval = dev->flush(dev, file);
628 
629 	mutex_unlock(&dev->mutex);
630 	return retval;
631 }
632 EXPORT_SYMBOL(input_flush_device);
633 
634 /**
635  * input_close_device - close input device
636  * @handle: handle through which device is being accessed
637  *
638  * This function should be called by input handlers when they
639  * want to stop receive events from given input device.
640  */
input_close_device(struct input_handle * handle)641 void input_close_device(struct input_handle *handle)
642 {
643 	struct input_dev *dev = handle->dev;
644 
645 	mutex_lock(&dev->mutex);
646 
647 	__input_release_device(handle);
648 
649 	if (!--dev->users && dev->close)
650 		dev->close(dev);
651 
652 	if (!--handle->open) {
653 		/*
654 		 * synchronize_rcu() makes sure that input_pass_event()
655 		 * completed and that no more input events are delivered
656 		 * through this handle
657 		 */
658 		synchronize_rcu();
659 	}
660 
661 	mutex_unlock(&dev->mutex);
662 }
663 EXPORT_SYMBOL(input_close_device);
664 
665 /*
666  * Simulate keyup events for all keys that are marked as pressed.
667  * The function must be called with dev->event_lock held.
668  */
input_dev_release_keys(struct input_dev * dev)669 static void input_dev_release_keys(struct input_dev *dev)
670 {
671 	bool need_sync = false;
672 	int code;
673 
674 	if (is_event_supported(EV_KEY, dev->evbit, EV_MAX)) {
675 		for (code = 0; code <= KEY_MAX; code++) {
676 			if (is_event_supported(code, dev->keybit, KEY_MAX) &&
677 			    __test_and_clear_bit(code, dev->key)) {
678 				input_pass_event(dev, EV_KEY, code, 0);
679 				need_sync = true;
680 			}
681 		}
682 		if (need_sync)
683 			input_pass_event(dev, EV_SYN, SYN_REPORT, 1);
684 	}
685 }
686 
687 /*
688  * Prepare device for unregistering
689  */
input_disconnect_device(struct input_dev * dev)690 static void input_disconnect_device(struct input_dev *dev)
691 {
692 	struct input_handle *handle;
693 
694 	/*
695 	 * Mark device as going away. Note that we take dev->mutex here
696 	 * not to protect access to dev->going_away but rather to ensure
697 	 * that there are no threads in the middle of input_open_device()
698 	 */
699 	mutex_lock(&dev->mutex);
700 	dev->going_away = true;
701 	mutex_unlock(&dev->mutex);
702 
703 	spin_lock_irq(&dev->event_lock);
704 
705 	/*
706 	 * Simulate keyup events for all pressed keys so that handlers
707 	 * are not left with "stuck" keys. The driver may continue
708 	 * generate events even after we done here but they will not
709 	 * reach any handlers.
710 	 */
711 	input_dev_release_keys(dev);
712 
713 	list_for_each_entry(handle, &dev->h_list, d_node)
714 		handle->open = 0;
715 
716 	spin_unlock_irq(&dev->event_lock);
717 }
718 
719 /**
720  * input_scancode_to_scalar() - converts scancode in &struct input_keymap_entry
721  * @ke: keymap entry containing scancode to be converted.
722  * @scancode: pointer to the location where converted scancode should
723  *	be stored.
724  *
725  * This function is used to convert scancode stored in &struct keymap_entry
726  * into scalar form understood by legacy keymap handling methods. These
727  * methods expect scancodes to be represented as 'unsigned int'.
728  */
input_scancode_to_scalar(const struct input_keymap_entry * ke,unsigned int * scancode)729 int input_scancode_to_scalar(const struct input_keymap_entry *ke,
730 			     unsigned int *scancode)
731 {
732 	switch (ke->len) {
733 	case 1:
734 		*scancode = *((u8 *)ke->scancode);
735 		break;
736 
737 	case 2:
738 		*scancode = *((u16 *)ke->scancode);
739 		break;
740 
741 	case 4:
742 		*scancode = *((u32 *)ke->scancode);
743 		break;
744 
745 	default:
746 		return -EINVAL;
747 	}
748 
749 	return 0;
750 }
751 EXPORT_SYMBOL(input_scancode_to_scalar);
752 
753 /*
754  * Those routines handle the default case where no [gs]etkeycode() is
755  * defined. In this case, an array indexed by the scancode is used.
756  */
757 
input_fetch_keycode(struct input_dev * dev,unsigned int index)758 static unsigned int input_fetch_keycode(struct input_dev *dev,
759 					unsigned int index)
760 {
761 	switch (dev->keycodesize) {
762 	case 1:
763 		return ((u8 *)dev->keycode)[index];
764 
765 	case 2:
766 		return ((u16 *)dev->keycode)[index];
767 
768 	default:
769 		return ((u32 *)dev->keycode)[index];
770 	}
771 }
772 
input_default_getkeycode(struct input_dev * dev,struct input_keymap_entry * ke)773 static int input_default_getkeycode(struct input_dev *dev,
774 				    struct input_keymap_entry *ke)
775 {
776 	unsigned int index;
777 	int error;
778 
779 	if (!dev->keycodesize)
780 		return -EINVAL;
781 
782 	if (ke->flags & INPUT_KEYMAP_BY_INDEX)
783 		index = ke->index;
784 	else {
785 		error = input_scancode_to_scalar(ke, &index);
786 		if (error)
787 			return error;
788 	}
789 
790 	if (index >= dev->keycodemax)
791 		return -EINVAL;
792 
793 	ke->keycode = input_fetch_keycode(dev, index);
794 	ke->index = index;
795 	ke->len = sizeof(index);
796 	memcpy(ke->scancode, &index, sizeof(index));
797 
798 	return 0;
799 }
800 
input_default_setkeycode(struct input_dev * dev,const struct input_keymap_entry * ke,unsigned int * old_keycode)801 static int input_default_setkeycode(struct input_dev *dev,
802 				    const struct input_keymap_entry *ke,
803 				    unsigned int *old_keycode)
804 {
805 	unsigned int index;
806 	int error;
807 	int i;
808 
809 	if (!dev->keycodesize)
810 		return -EINVAL;
811 
812 	if (ke->flags & INPUT_KEYMAP_BY_INDEX) {
813 		index = ke->index;
814 	} else {
815 		error = input_scancode_to_scalar(ke, &index);
816 		if (error)
817 			return error;
818 	}
819 
820 	if (index >= dev->keycodemax)
821 		return -EINVAL;
822 
823 	if (dev->keycodesize < sizeof(ke->keycode) &&
824 			(ke->keycode >> (dev->keycodesize * 8)))
825 		return -EINVAL;
826 
827 	switch (dev->keycodesize) {
828 		case 1: {
829 			u8 *k = (u8 *)dev->keycode;
830 			*old_keycode = k[index];
831 			k[index] = ke->keycode;
832 			break;
833 		}
834 		case 2: {
835 			u16 *k = (u16 *)dev->keycode;
836 			*old_keycode = k[index];
837 			k[index] = ke->keycode;
838 			break;
839 		}
840 		default: {
841 			u32 *k = (u32 *)dev->keycode;
842 			*old_keycode = k[index];
843 			k[index] = ke->keycode;
844 			break;
845 		}
846 	}
847 
848 	__clear_bit(*old_keycode, dev->keybit);
849 	__set_bit(ke->keycode, dev->keybit);
850 
851 	for (i = 0; i < dev->keycodemax; i++) {
852 		if (input_fetch_keycode(dev, i) == *old_keycode) {
853 			__set_bit(*old_keycode, dev->keybit);
854 			break; /* Setting the bit twice is useless, so break */
855 		}
856 	}
857 
858 	return 0;
859 }
860 
861 /**
862  * input_get_keycode - retrieve keycode currently mapped to a given scancode
863  * @dev: input device which keymap is being queried
864  * @ke: keymap entry
865  *
866  * This function should be called by anyone interested in retrieving current
867  * keymap. Presently evdev handlers use it.
868  */
input_get_keycode(struct input_dev * dev,struct input_keymap_entry * ke)869 int input_get_keycode(struct input_dev *dev, struct input_keymap_entry *ke)
870 {
871 	unsigned long flags;
872 	int retval;
873 
874 	spin_lock_irqsave(&dev->event_lock, flags);
875 	retval = dev->getkeycode(dev, ke);
876 	spin_unlock_irqrestore(&dev->event_lock, flags);
877 
878 	return retval;
879 }
880 EXPORT_SYMBOL(input_get_keycode);
881 
882 /**
883  * input_set_keycode - attribute a keycode to a given scancode
884  * @dev: input device which keymap is being updated
885  * @ke: new keymap entry
886  *
887  * This function should be called by anyone needing to update current
888  * keymap. Presently keyboard and evdev handlers use it.
889  */
input_set_keycode(struct input_dev * dev,const struct input_keymap_entry * ke)890 int input_set_keycode(struct input_dev *dev,
891 		      const struct input_keymap_entry *ke)
892 {
893 	unsigned long flags;
894 	unsigned int old_keycode;
895 	int retval;
896 
897 	if (ke->keycode > KEY_MAX)
898 		return -EINVAL;
899 
900 	spin_lock_irqsave(&dev->event_lock, flags);
901 
902 	retval = dev->setkeycode(dev, ke, &old_keycode);
903 	if (retval)
904 		goto out;
905 
906 	/* Make sure KEY_RESERVED did not get enabled. */
907 	__clear_bit(KEY_RESERVED, dev->keybit);
908 
909 	/*
910 	 * Simulate keyup event if keycode is not present
911 	 * in the keymap anymore
912 	 */
913 	if (test_bit(EV_KEY, dev->evbit) &&
914 	    !is_event_supported(old_keycode, dev->keybit, KEY_MAX) &&
915 	    __test_and_clear_bit(old_keycode, dev->key)) {
916 		struct input_value vals[] =  {
917 			{ EV_KEY, old_keycode, 0 },
918 			input_value_sync
919 		};
920 
921 		input_pass_values(dev, vals, ARRAY_SIZE(vals));
922 	}
923 
924  out:
925 	spin_unlock_irqrestore(&dev->event_lock, flags);
926 
927 	return retval;
928 }
929 EXPORT_SYMBOL(input_set_keycode);
930 
input_match_device(struct input_handler * handler,struct input_dev * dev)931 static const struct input_device_id *input_match_device(struct input_handler *handler,
932 							struct input_dev *dev)
933 {
934 	const struct input_device_id *id;
935 
936 	for (id = handler->id_table; id->flags || id->driver_info; id++) {
937 
938 		if (id->flags & INPUT_DEVICE_ID_MATCH_BUS)
939 			if (id->bustype != dev->id.bustype)
940 				continue;
941 
942 		if (id->flags & INPUT_DEVICE_ID_MATCH_VENDOR)
943 			if (id->vendor != dev->id.vendor)
944 				continue;
945 
946 		if (id->flags & INPUT_DEVICE_ID_MATCH_PRODUCT)
947 			if (id->product != dev->id.product)
948 				continue;
949 
950 		if (id->flags & INPUT_DEVICE_ID_MATCH_VERSION)
951 			if (id->version != dev->id.version)
952 				continue;
953 
954 		if (!bitmap_subset(id->evbit, dev->evbit, EV_MAX))
955 			continue;
956 
957 		if (!bitmap_subset(id->keybit, dev->keybit, KEY_MAX))
958 			continue;
959 
960 		if (!bitmap_subset(id->relbit, dev->relbit, REL_MAX))
961 			continue;
962 
963 		if (!bitmap_subset(id->absbit, dev->absbit, ABS_MAX))
964 			continue;
965 
966 		if (!bitmap_subset(id->mscbit, dev->mscbit, MSC_MAX))
967 			continue;
968 
969 		if (!bitmap_subset(id->ledbit, dev->ledbit, LED_MAX))
970 			continue;
971 
972 		if (!bitmap_subset(id->sndbit, dev->sndbit, SND_MAX))
973 			continue;
974 
975 		if (!bitmap_subset(id->ffbit, dev->ffbit, FF_MAX))
976 			continue;
977 
978 		if (!bitmap_subset(id->swbit, dev->swbit, SW_MAX))
979 			continue;
980 
981 		if (!handler->match || handler->match(handler, dev))
982 			return id;
983 	}
984 
985 	return NULL;
986 }
987 
input_attach_handler(struct input_dev * dev,struct input_handler * handler)988 static int input_attach_handler(struct input_dev *dev, struct input_handler *handler)
989 {
990 	const struct input_device_id *id;
991 	int error;
992 
993 	id = input_match_device(handler, dev);
994 	if (!id)
995 		return -ENODEV;
996 
997 	error = handler->connect(handler, dev, id);
998 	if (error && error != -ENODEV)
999 		pr_err("failed to attach handler %s to device %s, error: %d\n",
1000 		       handler->name, kobject_name(&dev->dev.kobj), error);
1001 
1002 	return error;
1003 }
1004 
1005 #ifdef CONFIG_COMPAT
1006 
input_bits_to_string(char * buf,int buf_size,unsigned long bits,bool skip_empty)1007 static int input_bits_to_string(char *buf, int buf_size,
1008 				unsigned long bits, bool skip_empty)
1009 {
1010 	int len = 0;
1011 
1012 	if (INPUT_COMPAT_TEST) {
1013 		u32 dword = bits >> 32;
1014 		if (dword || !skip_empty)
1015 			len += snprintf(buf, buf_size, "%x ", dword);
1016 
1017 		dword = bits & 0xffffffffUL;
1018 		if (dword || !skip_empty || len)
1019 			len += snprintf(buf + len, max(buf_size - len, 0),
1020 					"%x", dword);
1021 	} else {
1022 		if (bits || !skip_empty)
1023 			len += snprintf(buf, buf_size, "%lx", bits);
1024 	}
1025 
1026 	return len;
1027 }
1028 
1029 #else /* !CONFIG_COMPAT */
1030 
input_bits_to_string(char * buf,int buf_size,unsigned long bits,bool skip_empty)1031 static int input_bits_to_string(char *buf, int buf_size,
1032 				unsigned long bits, bool skip_empty)
1033 {
1034 	return bits || !skip_empty ?
1035 		snprintf(buf, buf_size, "%lx", bits) : 0;
1036 }
1037 
1038 #endif
1039 
1040 #ifdef CONFIG_PROC_FS
1041 
1042 static struct proc_dir_entry *proc_bus_input_dir;
1043 static DECLARE_WAIT_QUEUE_HEAD(input_devices_poll_wait);
1044 static int input_devices_state;
1045 
input_wakeup_procfs_readers(void)1046 static inline void input_wakeup_procfs_readers(void)
1047 {
1048 	input_devices_state++;
1049 	wake_up(&input_devices_poll_wait);
1050 }
1051 
input_proc_devices_poll(struct file * file,poll_table * wait)1052 static unsigned int input_proc_devices_poll(struct file *file, poll_table *wait)
1053 {
1054 	poll_wait(file, &input_devices_poll_wait, wait);
1055 	if (file->f_version != input_devices_state) {
1056 		file->f_version = input_devices_state;
1057 		return POLLIN | POLLRDNORM;
1058 	}
1059 
1060 	return 0;
1061 }
1062 
1063 union input_seq_state {
1064 	struct {
1065 		unsigned short pos;
1066 		bool mutex_acquired;
1067 	};
1068 	void *p;
1069 };
1070 
input_devices_seq_start(struct seq_file * seq,loff_t * pos)1071 static void *input_devices_seq_start(struct seq_file *seq, loff_t *pos)
1072 {
1073 	union input_seq_state *state = (union input_seq_state *)&seq->private;
1074 	int error;
1075 
1076 	/* We need to fit into seq->private pointer */
1077 	BUILD_BUG_ON(sizeof(union input_seq_state) != sizeof(seq->private));
1078 
1079 	error = mutex_lock_interruptible(&input_mutex);
1080 	if (error) {
1081 		state->mutex_acquired = false;
1082 		return ERR_PTR(error);
1083 	}
1084 
1085 	state->mutex_acquired = true;
1086 
1087 	return seq_list_start(&input_dev_list, *pos);
1088 }
1089 
input_devices_seq_next(struct seq_file * seq,void * v,loff_t * pos)1090 static void *input_devices_seq_next(struct seq_file *seq, void *v, loff_t *pos)
1091 {
1092 	return seq_list_next(v, &input_dev_list, pos);
1093 }
1094 
input_seq_stop(struct seq_file * seq,void * v)1095 static void input_seq_stop(struct seq_file *seq, void *v)
1096 {
1097 	union input_seq_state *state = (union input_seq_state *)&seq->private;
1098 
1099 	if (state->mutex_acquired)
1100 		mutex_unlock(&input_mutex);
1101 }
1102 
input_seq_print_bitmap(struct seq_file * seq,const char * name,unsigned long * bitmap,int max)1103 static void input_seq_print_bitmap(struct seq_file *seq, const char *name,
1104 				   unsigned long *bitmap, int max)
1105 {
1106 	int i;
1107 	bool skip_empty = true;
1108 	char buf[18];
1109 
1110 	seq_printf(seq, "B: %s=", name);
1111 
1112 	for (i = BITS_TO_LONGS(max) - 1; i >= 0; i--) {
1113 		if (input_bits_to_string(buf, sizeof(buf),
1114 					 bitmap[i], skip_empty)) {
1115 			skip_empty = false;
1116 			seq_printf(seq, "%s%s", buf, i > 0 ? " " : "");
1117 		}
1118 	}
1119 
1120 	/*
1121 	 * If no output was produced print a single 0.
1122 	 */
1123 	if (skip_empty)
1124 		seq_puts(seq, "0");
1125 
1126 	seq_putc(seq, '\n');
1127 }
1128 
input_devices_seq_show(struct seq_file * seq,void * v)1129 static int input_devices_seq_show(struct seq_file *seq, void *v)
1130 {
1131 	struct input_dev *dev = container_of(v, struct input_dev, node);
1132 	const char *path = kobject_get_path(&dev->dev.kobj, GFP_KERNEL);
1133 	struct input_handle *handle;
1134 
1135 	seq_printf(seq, "I: Bus=%04x Vendor=%04x Product=%04x Version=%04x\n",
1136 		   dev->id.bustype, dev->id.vendor, dev->id.product, dev->id.version);
1137 
1138 	seq_printf(seq, "N: Name=\"%s\"\n", dev->name ? dev->name : "");
1139 	seq_printf(seq, "P: Phys=%s\n", dev->phys ? dev->phys : "");
1140 	seq_printf(seq, "S: Sysfs=%s\n", path ? path : "");
1141 	seq_printf(seq, "U: Uniq=%s\n", dev->uniq ? dev->uniq : "");
1142 	seq_printf(seq, "H: Handlers=");
1143 
1144 	list_for_each_entry(handle, &dev->h_list, d_node)
1145 		seq_printf(seq, "%s ", handle->name);
1146 	seq_putc(seq, '\n');
1147 
1148 	input_seq_print_bitmap(seq, "PROP", dev->propbit, INPUT_PROP_MAX);
1149 
1150 	input_seq_print_bitmap(seq, "EV", dev->evbit, EV_MAX);
1151 	if (test_bit(EV_KEY, dev->evbit))
1152 		input_seq_print_bitmap(seq, "KEY", dev->keybit, KEY_MAX);
1153 	if (test_bit(EV_REL, dev->evbit))
1154 		input_seq_print_bitmap(seq, "REL", dev->relbit, REL_MAX);
1155 	if (test_bit(EV_ABS, dev->evbit))
1156 		input_seq_print_bitmap(seq, "ABS", dev->absbit, ABS_MAX);
1157 	if (test_bit(EV_MSC, dev->evbit))
1158 		input_seq_print_bitmap(seq, "MSC", dev->mscbit, MSC_MAX);
1159 	if (test_bit(EV_LED, dev->evbit))
1160 		input_seq_print_bitmap(seq, "LED", dev->ledbit, LED_MAX);
1161 	if (test_bit(EV_SND, dev->evbit))
1162 		input_seq_print_bitmap(seq, "SND", dev->sndbit, SND_MAX);
1163 	if (test_bit(EV_FF, dev->evbit))
1164 		input_seq_print_bitmap(seq, "FF", dev->ffbit, FF_MAX);
1165 	if (test_bit(EV_SW, dev->evbit))
1166 		input_seq_print_bitmap(seq, "SW", dev->swbit, SW_MAX);
1167 
1168 	seq_putc(seq, '\n');
1169 
1170 	kfree(path);
1171 	return 0;
1172 }
1173 
1174 static const struct seq_operations input_devices_seq_ops = {
1175 	.start	= input_devices_seq_start,
1176 	.next	= input_devices_seq_next,
1177 	.stop	= input_seq_stop,
1178 	.show	= input_devices_seq_show,
1179 };
1180 
input_proc_devices_open(struct inode * inode,struct file * file)1181 static int input_proc_devices_open(struct inode *inode, struct file *file)
1182 {
1183 	return seq_open(file, &input_devices_seq_ops);
1184 }
1185 
1186 static const struct file_operations input_devices_fileops = {
1187 	.owner		= THIS_MODULE,
1188 	.open		= input_proc_devices_open,
1189 	.poll		= input_proc_devices_poll,
1190 	.read		= seq_read,
1191 	.llseek		= seq_lseek,
1192 	.release	= seq_release,
1193 };
1194 
input_handlers_seq_start(struct seq_file * seq,loff_t * pos)1195 static void *input_handlers_seq_start(struct seq_file *seq, loff_t *pos)
1196 {
1197 	union input_seq_state *state = (union input_seq_state *)&seq->private;
1198 	int error;
1199 
1200 	/* We need to fit into seq->private pointer */
1201 	BUILD_BUG_ON(sizeof(union input_seq_state) != sizeof(seq->private));
1202 
1203 	error = mutex_lock_interruptible(&input_mutex);
1204 	if (error) {
1205 		state->mutex_acquired = false;
1206 		return ERR_PTR(error);
1207 	}
1208 
1209 	state->mutex_acquired = true;
1210 	state->pos = *pos;
1211 
1212 	return seq_list_start(&input_handler_list, *pos);
1213 }
1214 
input_handlers_seq_next(struct seq_file * seq,void * v,loff_t * pos)1215 static void *input_handlers_seq_next(struct seq_file *seq, void *v, loff_t *pos)
1216 {
1217 	union input_seq_state *state = (union input_seq_state *)&seq->private;
1218 
1219 	state->pos = *pos + 1;
1220 	return seq_list_next(v, &input_handler_list, pos);
1221 }
1222 
input_handlers_seq_show(struct seq_file * seq,void * v)1223 static int input_handlers_seq_show(struct seq_file *seq, void *v)
1224 {
1225 	struct input_handler *handler = container_of(v, struct input_handler, node);
1226 	union input_seq_state *state = (union input_seq_state *)&seq->private;
1227 
1228 	seq_printf(seq, "N: Number=%u Name=%s", state->pos, handler->name);
1229 	if (handler->filter)
1230 		seq_puts(seq, " (filter)");
1231 	if (handler->legacy_minors)
1232 		seq_printf(seq, " Minor=%d", handler->minor);
1233 	seq_putc(seq, '\n');
1234 
1235 	return 0;
1236 }
1237 
1238 static const struct seq_operations input_handlers_seq_ops = {
1239 	.start	= input_handlers_seq_start,
1240 	.next	= input_handlers_seq_next,
1241 	.stop	= input_seq_stop,
1242 	.show	= input_handlers_seq_show,
1243 };
1244 
input_proc_handlers_open(struct inode * inode,struct file * file)1245 static int input_proc_handlers_open(struct inode *inode, struct file *file)
1246 {
1247 	return seq_open(file, &input_handlers_seq_ops);
1248 }
1249 
1250 static const struct file_operations input_handlers_fileops = {
1251 	.owner		= THIS_MODULE,
1252 	.open		= input_proc_handlers_open,
1253 	.read		= seq_read,
1254 	.llseek		= seq_lseek,
1255 	.release	= seq_release,
1256 };
1257 
input_proc_init(void)1258 static int __init input_proc_init(void)
1259 {
1260 	struct proc_dir_entry *entry;
1261 
1262 	proc_bus_input_dir = proc_mkdir("bus/input", NULL);
1263 	if (!proc_bus_input_dir)
1264 		return -ENOMEM;
1265 
1266 	entry = proc_create("devices", 0, proc_bus_input_dir,
1267 			    &input_devices_fileops);
1268 	if (!entry)
1269 		goto fail1;
1270 
1271 	entry = proc_create("handlers", 0, proc_bus_input_dir,
1272 			    &input_handlers_fileops);
1273 	if (!entry)
1274 		goto fail2;
1275 
1276 	return 0;
1277 
1278  fail2:	remove_proc_entry("devices", proc_bus_input_dir);
1279  fail1: remove_proc_entry("bus/input", NULL);
1280 	return -ENOMEM;
1281 }
1282 
input_proc_exit(void)1283 static void input_proc_exit(void)
1284 {
1285 	remove_proc_entry("devices", proc_bus_input_dir);
1286 	remove_proc_entry("handlers", proc_bus_input_dir);
1287 	remove_proc_entry("bus/input", NULL);
1288 }
1289 
1290 #else /* !CONFIG_PROC_FS */
input_wakeup_procfs_readers(void)1291 static inline void input_wakeup_procfs_readers(void) { }
input_proc_init(void)1292 static inline int input_proc_init(void) { return 0; }
input_proc_exit(void)1293 static inline void input_proc_exit(void) { }
1294 #endif
1295 
1296 #define INPUT_DEV_STRING_ATTR_SHOW(name)				\
1297 static ssize_t input_dev_show_##name(struct device *dev,		\
1298 				     struct device_attribute *attr,	\
1299 				     char *buf)				\
1300 {									\
1301 	struct input_dev *input_dev = to_input_dev(dev);		\
1302 									\
1303 	return scnprintf(buf, PAGE_SIZE, "%s\n",			\
1304 			 input_dev->name ? input_dev->name : "");	\
1305 }									\
1306 static DEVICE_ATTR(name, S_IRUGO, input_dev_show_##name, NULL)
1307 
1308 INPUT_DEV_STRING_ATTR_SHOW(name);
1309 INPUT_DEV_STRING_ATTR_SHOW(phys);
1310 INPUT_DEV_STRING_ATTR_SHOW(uniq);
1311 
input_print_modalias_bits(char * buf,int size,char name,unsigned long * bm,unsigned int min_bit,unsigned int max_bit)1312 static int input_print_modalias_bits(char *buf, int size,
1313 				     char name, unsigned long *bm,
1314 				     unsigned int min_bit, unsigned int max_bit)
1315 {
1316 	int len = 0, i;
1317 
1318 	len += snprintf(buf, max(size, 0), "%c", name);
1319 	for (i = min_bit; i < max_bit; i++)
1320 		if (bm[BIT_WORD(i)] & BIT_MASK(i))
1321 			len += snprintf(buf + len, max(size - len, 0), "%X,", i);
1322 	return len;
1323 }
1324 
input_print_modalias(char * buf,int size,struct input_dev * id,int add_cr)1325 static int input_print_modalias(char *buf, int size, struct input_dev *id,
1326 				int add_cr)
1327 {
1328 	int len;
1329 
1330 	len = snprintf(buf, max(size, 0),
1331 		       "input:b%04Xv%04Xp%04Xe%04X-",
1332 		       id->id.bustype, id->id.vendor,
1333 		       id->id.product, id->id.version);
1334 
1335 	len += input_print_modalias_bits(buf + len, size - len,
1336 				'e', id->evbit, 0, EV_MAX);
1337 	len += input_print_modalias_bits(buf + len, size - len,
1338 				'k', id->keybit, KEY_MIN_INTERESTING, KEY_MAX);
1339 	len += input_print_modalias_bits(buf + len, size - len,
1340 				'r', id->relbit, 0, REL_MAX);
1341 	len += input_print_modalias_bits(buf + len, size - len,
1342 				'a', id->absbit, 0, ABS_MAX);
1343 	len += input_print_modalias_bits(buf + len, size - len,
1344 				'm', id->mscbit, 0, MSC_MAX);
1345 	len += input_print_modalias_bits(buf + len, size - len,
1346 				'l', id->ledbit, 0, LED_MAX);
1347 	len += input_print_modalias_bits(buf + len, size - len,
1348 				's', id->sndbit, 0, SND_MAX);
1349 	len += input_print_modalias_bits(buf + len, size - len,
1350 				'f', id->ffbit, 0, FF_MAX);
1351 	len += input_print_modalias_bits(buf + len, size - len,
1352 				'w', id->swbit, 0, SW_MAX);
1353 
1354 	if (add_cr)
1355 		len += snprintf(buf + len, max(size - len, 0), "\n");
1356 
1357 	return len;
1358 }
1359 
input_dev_show_modalias(struct device * dev,struct device_attribute * attr,char * buf)1360 static ssize_t input_dev_show_modalias(struct device *dev,
1361 				       struct device_attribute *attr,
1362 				       char *buf)
1363 {
1364 	struct input_dev *id = to_input_dev(dev);
1365 	ssize_t len;
1366 
1367 	len = input_print_modalias(buf, PAGE_SIZE, id, 1);
1368 
1369 	return min_t(int, len, PAGE_SIZE);
1370 }
1371 static DEVICE_ATTR(modalias, S_IRUGO, input_dev_show_modalias, NULL);
1372 
1373 static int input_print_bitmap(char *buf, int buf_size, unsigned long *bitmap,
1374 			      int max, int add_cr);
1375 
input_dev_show_properties(struct device * dev,struct device_attribute * attr,char * buf)1376 static ssize_t input_dev_show_properties(struct device *dev,
1377 					 struct device_attribute *attr,
1378 					 char *buf)
1379 {
1380 	struct input_dev *input_dev = to_input_dev(dev);
1381 	int len = input_print_bitmap(buf, PAGE_SIZE, input_dev->propbit,
1382 				     INPUT_PROP_MAX, true);
1383 	return min_t(int, len, PAGE_SIZE);
1384 }
1385 static DEVICE_ATTR(properties, S_IRUGO, input_dev_show_properties, NULL);
1386 
1387 static struct attribute *input_dev_attrs[] = {
1388 	&dev_attr_name.attr,
1389 	&dev_attr_phys.attr,
1390 	&dev_attr_uniq.attr,
1391 	&dev_attr_modalias.attr,
1392 	&dev_attr_properties.attr,
1393 	NULL
1394 };
1395 
1396 static struct attribute_group input_dev_attr_group = {
1397 	.attrs	= input_dev_attrs,
1398 };
1399 
1400 #define INPUT_DEV_ID_ATTR(name)						\
1401 static ssize_t input_dev_show_id_##name(struct device *dev,		\
1402 					struct device_attribute *attr,	\
1403 					char *buf)			\
1404 {									\
1405 	struct input_dev *input_dev = to_input_dev(dev);		\
1406 	return scnprintf(buf, PAGE_SIZE, "%04x\n", input_dev->id.name);	\
1407 }									\
1408 static DEVICE_ATTR(name, S_IRUGO, input_dev_show_id_##name, NULL)
1409 
1410 INPUT_DEV_ID_ATTR(bustype);
1411 INPUT_DEV_ID_ATTR(vendor);
1412 INPUT_DEV_ID_ATTR(product);
1413 INPUT_DEV_ID_ATTR(version);
1414 
1415 static struct attribute *input_dev_id_attrs[] = {
1416 	&dev_attr_bustype.attr,
1417 	&dev_attr_vendor.attr,
1418 	&dev_attr_product.attr,
1419 	&dev_attr_version.attr,
1420 	NULL
1421 };
1422 
1423 static struct attribute_group input_dev_id_attr_group = {
1424 	.name	= "id",
1425 	.attrs	= input_dev_id_attrs,
1426 };
1427 
input_print_bitmap(char * buf,int buf_size,unsigned long * bitmap,int max,int add_cr)1428 static int input_print_bitmap(char *buf, int buf_size, unsigned long *bitmap,
1429 			      int max, int add_cr)
1430 {
1431 	int i;
1432 	int len = 0;
1433 	bool skip_empty = true;
1434 
1435 	for (i = BITS_TO_LONGS(max) - 1; i >= 0; i--) {
1436 		len += input_bits_to_string(buf + len, max(buf_size - len, 0),
1437 					    bitmap[i], skip_empty);
1438 		if (len) {
1439 			skip_empty = false;
1440 			if (i > 0)
1441 				len += snprintf(buf + len, max(buf_size - len, 0), " ");
1442 		}
1443 	}
1444 
1445 	/*
1446 	 * If no output was produced print a single 0.
1447 	 */
1448 	if (len == 0)
1449 		len = snprintf(buf, buf_size, "%d", 0);
1450 
1451 	if (add_cr)
1452 		len += snprintf(buf + len, max(buf_size - len, 0), "\n");
1453 
1454 	return len;
1455 }
1456 
1457 #define INPUT_DEV_CAP_ATTR(ev, bm)					\
1458 static ssize_t input_dev_show_cap_##bm(struct device *dev,		\
1459 				       struct device_attribute *attr,	\
1460 				       char *buf)			\
1461 {									\
1462 	struct input_dev *input_dev = to_input_dev(dev);		\
1463 	int len = input_print_bitmap(buf, PAGE_SIZE,			\
1464 				     input_dev->bm##bit, ev##_MAX,	\
1465 				     true);				\
1466 	return min_t(int, len, PAGE_SIZE);				\
1467 }									\
1468 static DEVICE_ATTR(bm, S_IRUGO, input_dev_show_cap_##bm, NULL)
1469 
1470 INPUT_DEV_CAP_ATTR(EV, ev);
1471 INPUT_DEV_CAP_ATTR(KEY, key);
1472 INPUT_DEV_CAP_ATTR(REL, rel);
1473 INPUT_DEV_CAP_ATTR(ABS, abs);
1474 INPUT_DEV_CAP_ATTR(MSC, msc);
1475 INPUT_DEV_CAP_ATTR(LED, led);
1476 INPUT_DEV_CAP_ATTR(SND, snd);
1477 INPUT_DEV_CAP_ATTR(FF, ff);
1478 INPUT_DEV_CAP_ATTR(SW, sw);
1479 
1480 static struct attribute *input_dev_caps_attrs[] = {
1481 	&dev_attr_ev.attr,
1482 	&dev_attr_key.attr,
1483 	&dev_attr_rel.attr,
1484 	&dev_attr_abs.attr,
1485 	&dev_attr_msc.attr,
1486 	&dev_attr_led.attr,
1487 	&dev_attr_snd.attr,
1488 	&dev_attr_ff.attr,
1489 	&dev_attr_sw.attr,
1490 	NULL
1491 };
1492 
1493 static struct attribute_group input_dev_caps_attr_group = {
1494 	.name	= "capabilities",
1495 	.attrs	= input_dev_caps_attrs,
1496 };
1497 
1498 static const struct attribute_group *input_dev_attr_groups[] = {
1499 	&input_dev_attr_group,
1500 	&input_dev_id_attr_group,
1501 	&input_dev_caps_attr_group,
1502 	NULL
1503 };
1504 
input_dev_release(struct device * device)1505 static void input_dev_release(struct device *device)
1506 {
1507 	struct input_dev *dev = to_input_dev(device);
1508 
1509 	input_ff_destroy(dev);
1510 	input_mt_destroy_slots(dev);
1511 	kfree(dev->absinfo);
1512 	kfree(dev->vals);
1513 	kfree(dev);
1514 
1515 	module_put(THIS_MODULE);
1516 }
1517 
1518 /*
1519  * Input uevent interface - loading event handlers based on
1520  * device bitfields.
1521  */
input_add_uevent_bm_var(struct kobj_uevent_env * env,const char * name,unsigned long * bitmap,int max)1522 static int input_add_uevent_bm_var(struct kobj_uevent_env *env,
1523 				   const char *name, unsigned long *bitmap, int max)
1524 {
1525 	int len;
1526 
1527 	if (add_uevent_var(env, "%s", name))
1528 		return -ENOMEM;
1529 
1530 	len = input_print_bitmap(&env->buf[env->buflen - 1],
1531 				 sizeof(env->buf) - env->buflen,
1532 				 bitmap, max, false);
1533 	if (len >= (sizeof(env->buf) - env->buflen))
1534 		return -ENOMEM;
1535 
1536 	env->buflen += len;
1537 	return 0;
1538 }
1539 
input_add_uevent_modalias_var(struct kobj_uevent_env * env,struct input_dev * dev)1540 static int input_add_uevent_modalias_var(struct kobj_uevent_env *env,
1541 					 struct input_dev *dev)
1542 {
1543 	int len;
1544 
1545 	if (add_uevent_var(env, "MODALIAS="))
1546 		return -ENOMEM;
1547 
1548 	len = input_print_modalias(&env->buf[env->buflen - 1],
1549 				   sizeof(env->buf) - env->buflen,
1550 				   dev, 0);
1551 	if (len >= (sizeof(env->buf) - env->buflen))
1552 		return -ENOMEM;
1553 
1554 	env->buflen += len;
1555 	return 0;
1556 }
1557 
1558 #define INPUT_ADD_HOTPLUG_VAR(fmt, val...)				\
1559 	do {								\
1560 		int err = add_uevent_var(env, fmt, val);		\
1561 		if (err)						\
1562 			return err;					\
1563 	} while (0)
1564 
1565 #define INPUT_ADD_HOTPLUG_BM_VAR(name, bm, max)				\
1566 	do {								\
1567 		int err = input_add_uevent_bm_var(env, name, bm, max);	\
1568 		if (err)						\
1569 			return err;					\
1570 	} while (0)
1571 
1572 #define INPUT_ADD_HOTPLUG_MODALIAS_VAR(dev)				\
1573 	do {								\
1574 		int err = input_add_uevent_modalias_var(env, dev);	\
1575 		if (err)						\
1576 			return err;					\
1577 	} while (0)
1578 
input_dev_uevent(struct device * device,struct kobj_uevent_env * env)1579 static int input_dev_uevent(struct device *device, struct kobj_uevent_env *env)
1580 {
1581 	struct input_dev *dev = to_input_dev(device);
1582 
1583 	INPUT_ADD_HOTPLUG_VAR("PRODUCT=%x/%x/%x/%x",
1584 				dev->id.bustype, dev->id.vendor,
1585 				dev->id.product, dev->id.version);
1586 	if (dev->name)
1587 		INPUT_ADD_HOTPLUG_VAR("NAME=\"%s\"", dev->name);
1588 	if (dev->phys)
1589 		INPUT_ADD_HOTPLUG_VAR("PHYS=\"%s\"", dev->phys);
1590 	if (dev->uniq)
1591 		INPUT_ADD_HOTPLUG_VAR("UNIQ=\"%s\"", dev->uniq);
1592 
1593 	INPUT_ADD_HOTPLUG_BM_VAR("PROP=", dev->propbit, INPUT_PROP_MAX);
1594 
1595 	INPUT_ADD_HOTPLUG_BM_VAR("EV=", dev->evbit, EV_MAX);
1596 	if (test_bit(EV_KEY, dev->evbit))
1597 		INPUT_ADD_HOTPLUG_BM_VAR("KEY=", dev->keybit, KEY_MAX);
1598 	if (test_bit(EV_REL, dev->evbit))
1599 		INPUT_ADD_HOTPLUG_BM_VAR("REL=", dev->relbit, REL_MAX);
1600 	if (test_bit(EV_ABS, dev->evbit))
1601 		INPUT_ADD_HOTPLUG_BM_VAR("ABS=", dev->absbit, ABS_MAX);
1602 	if (test_bit(EV_MSC, dev->evbit))
1603 		INPUT_ADD_HOTPLUG_BM_VAR("MSC=", dev->mscbit, MSC_MAX);
1604 	if (test_bit(EV_LED, dev->evbit))
1605 		INPUT_ADD_HOTPLUG_BM_VAR("LED=", dev->ledbit, LED_MAX);
1606 	if (test_bit(EV_SND, dev->evbit))
1607 		INPUT_ADD_HOTPLUG_BM_VAR("SND=", dev->sndbit, SND_MAX);
1608 	if (test_bit(EV_FF, dev->evbit))
1609 		INPUT_ADD_HOTPLUG_BM_VAR("FF=", dev->ffbit, FF_MAX);
1610 	if (test_bit(EV_SW, dev->evbit))
1611 		INPUT_ADD_HOTPLUG_BM_VAR("SW=", dev->swbit, SW_MAX);
1612 
1613 	INPUT_ADD_HOTPLUG_MODALIAS_VAR(dev);
1614 
1615 	return 0;
1616 }
1617 
1618 #define INPUT_DO_TOGGLE(dev, type, bits, on)				\
1619 	do {								\
1620 		int i;							\
1621 		bool active;						\
1622 									\
1623 		if (!test_bit(EV_##type, dev->evbit))			\
1624 			break;						\
1625 									\
1626 		for (i = 0; i < type##_MAX; i++) {			\
1627 			if (!test_bit(i, dev->bits##bit))		\
1628 				continue;				\
1629 									\
1630 			active = test_bit(i, dev->bits);		\
1631 			if (!active && !on)				\
1632 				continue;				\
1633 									\
1634 			dev->event(dev, EV_##type, i, on ? active : 0);	\
1635 		}							\
1636 	} while (0)
1637 
input_dev_toggle(struct input_dev * dev,bool activate)1638 static void input_dev_toggle(struct input_dev *dev, bool activate)
1639 {
1640 	if (!dev->event)
1641 		return;
1642 
1643 	INPUT_DO_TOGGLE(dev, LED, led, activate);
1644 	INPUT_DO_TOGGLE(dev, SND, snd, activate);
1645 
1646 	if (activate && test_bit(EV_REP, dev->evbit)) {
1647 		dev->event(dev, EV_REP, REP_PERIOD, dev->rep[REP_PERIOD]);
1648 		dev->event(dev, EV_REP, REP_DELAY, dev->rep[REP_DELAY]);
1649 	}
1650 }
1651 
1652 /**
1653  * input_reset_device() - reset/restore the state of input device
1654  * @dev: input device whose state needs to be reset
1655  *
1656  * This function tries to reset the state of an opened input device and
1657  * bring internal state and state if the hardware in sync with each other.
1658  * We mark all keys as released, restore LED state, repeat rate, etc.
1659  */
input_reset_device(struct input_dev * dev)1660 void input_reset_device(struct input_dev *dev)
1661 {
1662 	unsigned long flags;
1663 
1664 	mutex_lock(&dev->mutex);
1665 	spin_lock_irqsave(&dev->event_lock, flags);
1666 
1667 	input_dev_toggle(dev, true);
1668 	input_dev_release_keys(dev);
1669 
1670 	spin_unlock_irqrestore(&dev->event_lock, flags);
1671 	mutex_unlock(&dev->mutex);
1672 }
1673 EXPORT_SYMBOL(input_reset_device);
1674 
1675 #ifdef CONFIG_PM_SLEEP
input_dev_suspend(struct device * dev)1676 static int input_dev_suspend(struct device *dev)
1677 {
1678 	struct input_dev *input_dev = to_input_dev(dev);
1679 
1680 	spin_lock_irq(&input_dev->event_lock);
1681 
1682 	/*
1683 	 * Keys that are pressed now are unlikely to be
1684 	 * still pressed when we resume.
1685 	 */
1686 	input_dev_release_keys(input_dev);
1687 
1688 	/* Turn off LEDs and sounds, if any are active. */
1689 	input_dev_toggle(input_dev, false);
1690 
1691 	spin_unlock_irq(&input_dev->event_lock);
1692 
1693 	return 0;
1694 }
1695 
input_dev_resume(struct device * dev)1696 static int input_dev_resume(struct device *dev)
1697 {
1698 	struct input_dev *input_dev = to_input_dev(dev);
1699 
1700 	spin_lock_irq(&input_dev->event_lock);
1701 
1702 	/* Restore state of LEDs and sounds, if any were active. */
1703 	input_dev_toggle(input_dev, true);
1704 
1705 	spin_unlock_irq(&input_dev->event_lock);
1706 
1707 	return 0;
1708 }
1709 
input_dev_freeze(struct device * dev)1710 static int input_dev_freeze(struct device *dev)
1711 {
1712 	struct input_dev *input_dev = to_input_dev(dev);
1713 
1714 	spin_lock_irq(&input_dev->event_lock);
1715 
1716 	/*
1717 	 * Keys that are pressed now are unlikely to be
1718 	 * still pressed when we resume.
1719 	 */
1720 	input_dev_release_keys(input_dev);
1721 
1722 	spin_unlock_irq(&input_dev->event_lock);
1723 
1724 	return 0;
1725 }
1726 
input_dev_poweroff(struct device * dev)1727 static int input_dev_poweroff(struct device *dev)
1728 {
1729 	struct input_dev *input_dev = to_input_dev(dev);
1730 
1731 	spin_lock_irq(&input_dev->event_lock);
1732 
1733 	/* Turn off LEDs and sounds, if any are active. */
1734 	input_dev_toggle(input_dev, false);
1735 
1736 	spin_unlock_irq(&input_dev->event_lock);
1737 
1738 	return 0;
1739 }
1740 
1741 static const struct dev_pm_ops input_dev_pm_ops = {
1742 	.suspend	= input_dev_suspend,
1743 	.resume		= input_dev_resume,
1744 	.freeze		= input_dev_freeze,
1745 	.poweroff	= input_dev_poweroff,
1746 	.restore	= input_dev_resume,
1747 };
1748 #endif /* CONFIG_PM */
1749 
1750 static struct device_type input_dev_type = {
1751 	.groups		= input_dev_attr_groups,
1752 	.release	= input_dev_release,
1753 	.uevent		= input_dev_uevent,
1754 #ifdef CONFIG_PM_SLEEP
1755 	.pm		= &input_dev_pm_ops,
1756 #endif
1757 };
1758 
input_devnode(struct device * dev,umode_t * mode)1759 static char *input_devnode(struct device *dev, umode_t *mode)
1760 {
1761 	return kasprintf(GFP_KERNEL, "input/%s", dev_name(dev));
1762 }
1763 
1764 struct class input_class = {
1765 	.name		= "input",
1766 	.devnode	= input_devnode,
1767 };
1768 EXPORT_SYMBOL_GPL(input_class);
1769 
1770 /**
1771  * input_allocate_device - allocate memory for new input device
1772  *
1773  * Returns prepared struct input_dev or %NULL.
1774  *
1775  * NOTE: Use input_free_device() to free devices that have not been
1776  * registered; input_unregister_device() should be used for already
1777  * registered devices.
1778  */
input_allocate_device(void)1779 struct input_dev *input_allocate_device(void)
1780 {
1781 	static atomic_t input_no = ATOMIC_INIT(0);
1782 	struct input_dev *dev;
1783 
1784 	dev = kzalloc(sizeof(struct input_dev), GFP_KERNEL);
1785 	if (dev) {
1786 		dev->dev.type = &input_dev_type;
1787 		dev->dev.class = &input_class;
1788 		device_initialize(&dev->dev);
1789 		mutex_init(&dev->mutex);
1790 		spin_lock_init(&dev->event_lock);
1791 		init_timer(&dev->timer);
1792 		INIT_LIST_HEAD(&dev->h_list);
1793 		INIT_LIST_HEAD(&dev->node);
1794 
1795 		dev_set_name(&dev->dev, "input%lu",
1796 			     (unsigned long) atomic_inc_return(&input_no) - 1);
1797 
1798 		__module_get(THIS_MODULE);
1799 	}
1800 
1801 	return dev;
1802 }
1803 EXPORT_SYMBOL(input_allocate_device);
1804 
1805 struct input_devres {
1806 	struct input_dev *input;
1807 };
1808 
devm_input_device_match(struct device * dev,void * res,void * data)1809 static int devm_input_device_match(struct device *dev, void *res, void *data)
1810 {
1811 	struct input_devres *devres = res;
1812 
1813 	return devres->input == data;
1814 }
1815 
devm_input_device_release(struct device * dev,void * res)1816 static void devm_input_device_release(struct device *dev, void *res)
1817 {
1818 	struct input_devres *devres = res;
1819 	struct input_dev *input = devres->input;
1820 
1821 	dev_dbg(dev, "%s: dropping reference to %s\n",
1822 		__func__, dev_name(&input->dev));
1823 	input_put_device(input);
1824 }
1825 
1826 /**
1827  * devm_input_allocate_device - allocate managed input device
1828  * @dev: device owning the input device being created
1829  *
1830  * Returns prepared struct input_dev or %NULL.
1831  *
1832  * Managed input devices do not need to be explicitly unregistered or
1833  * freed as it will be done automatically when owner device unbinds from
1834  * its driver (or binding fails). Once managed input device is allocated,
1835  * it is ready to be set up and registered in the same fashion as regular
1836  * input device. There are no special devm_input_device_[un]register()
1837  * variants, regular ones work with both managed and unmanaged devices,
1838  * should you need them. In most cases however, managed input device need
1839  * not be explicitly unregistered or freed.
1840  *
1841  * NOTE: the owner device is set up as parent of input device and users
1842  * should not override it.
1843  */
devm_input_allocate_device(struct device * dev)1844 struct input_dev *devm_input_allocate_device(struct device *dev)
1845 {
1846 	struct input_dev *input;
1847 	struct input_devres *devres;
1848 
1849 	devres = devres_alloc(devm_input_device_release,
1850 			      sizeof(struct input_devres), GFP_KERNEL);
1851 	if (!devres)
1852 		return NULL;
1853 
1854 	input = input_allocate_device();
1855 	if (!input) {
1856 		devres_free(devres);
1857 		return NULL;
1858 	}
1859 
1860 	input->dev.parent = dev;
1861 	input->devres_managed = true;
1862 
1863 	devres->input = input;
1864 	devres_add(dev, devres);
1865 
1866 	return input;
1867 }
1868 EXPORT_SYMBOL(devm_input_allocate_device);
1869 
1870 /**
1871  * input_free_device - free memory occupied by input_dev structure
1872  * @dev: input device to free
1873  *
1874  * This function should only be used if input_register_device()
1875  * was not called yet or if it failed. Once device was registered
1876  * use input_unregister_device() and memory will be freed once last
1877  * reference to the device is dropped.
1878  *
1879  * Device should be allocated by input_allocate_device().
1880  *
1881  * NOTE: If there are references to the input device then memory
1882  * will not be freed until last reference is dropped.
1883  */
input_free_device(struct input_dev * dev)1884 void input_free_device(struct input_dev *dev)
1885 {
1886 	if (dev) {
1887 		if (dev->devres_managed)
1888 			WARN_ON(devres_destroy(dev->dev.parent,
1889 						devm_input_device_release,
1890 						devm_input_device_match,
1891 						dev));
1892 		input_put_device(dev);
1893 	}
1894 }
1895 EXPORT_SYMBOL(input_free_device);
1896 
1897 /**
1898  * input_set_capability - mark device as capable of a certain event
1899  * @dev: device that is capable of emitting or accepting event
1900  * @type: type of the event (EV_KEY, EV_REL, etc...)
1901  * @code: event code
1902  *
1903  * In addition to setting up corresponding bit in appropriate capability
1904  * bitmap the function also adjusts dev->evbit.
1905  */
input_set_capability(struct input_dev * dev,unsigned int type,unsigned int code)1906 void input_set_capability(struct input_dev *dev, unsigned int type, unsigned int code)
1907 {
1908 	switch (type) {
1909 	case EV_KEY:
1910 		__set_bit(code, dev->keybit);
1911 		break;
1912 
1913 	case EV_REL:
1914 		__set_bit(code, dev->relbit);
1915 		break;
1916 
1917 	case EV_ABS:
1918 		input_alloc_absinfo(dev);
1919 		if (!dev->absinfo)
1920 			return;
1921 
1922 		__set_bit(code, dev->absbit);
1923 		break;
1924 
1925 	case EV_MSC:
1926 		__set_bit(code, dev->mscbit);
1927 		break;
1928 
1929 	case EV_SW:
1930 		__set_bit(code, dev->swbit);
1931 		break;
1932 
1933 	case EV_LED:
1934 		__set_bit(code, dev->ledbit);
1935 		break;
1936 
1937 	case EV_SND:
1938 		__set_bit(code, dev->sndbit);
1939 		break;
1940 
1941 	case EV_FF:
1942 		__set_bit(code, dev->ffbit);
1943 		break;
1944 
1945 	case EV_PWR:
1946 		/* do nothing */
1947 		break;
1948 
1949 	default:
1950 		pr_err("input_set_capability: unknown type %u (code %u)\n",
1951 		       type, code);
1952 		dump_stack();
1953 		return;
1954 	}
1955 
1956 	__set_bit(type, dev->evbit);
1957 }
1958 EXPORT_SYMBOL(input_set_capability);
1959 
input_estimate_events_per_packet(struct input_dev * dev)1960 static unsigned int input_estimate_events_per_packet(struct input_dev *dev)
1961 {
1962 	int mt_slots;
1963 	int i;
1964 	unsigned int events;
1965 
1966 	if (dev->mt) {
1967 		mt_slots = dev->mt->num_slots;
1968 	} else if (test_bit(ABS_MT_TRACKING_ID, dev->absbit)) {
1969 		mt_slots = dev->absinfo[ABS_MT_TRACKING_ID].maximum -
1970 			   dev->absinfo[ABS_MT_TRACKING_ID].minimum + 1,
1971 		mt_slots = clamp(mt_slots, 2, 32);
1972 	} else if (test_bit(ABS_MT_POSITION_X, dev->absbit)) {
1973 		mt_slots = 2;
1974 	} else {
1975 		mt_slots = 0;
1976 	}
1977 
1978 	events = mt_slots + 1; /* count SYN_MT_REPORT and SYN_REPORT */
1979 
1980 	for (i = 0; i < ABS_CNT; i++) {
1981 		if (test_bit(i, dev->absbit)) {
1982 			if (input_is_mt_axis(i))
1983 				events += mt_slots;
1984 			else
1985 				events++;
1986 		}
1987 	}
1988 
1989 	for (i = 0; i < REL_CNT; i++)
1990 		if (test_bit(i, dev->relbit))
1991 			events++;
1992 
1993 	/* Make room for KEY and MSC events */
1994 	events += 7;
1995 
1996 	return events;
1997 }
1998 
1999 #define INPUT_CLEANSE_BITMASK(dev, type, bits)				\
2000 	do {								\
2001 		if (!test_bit(EV_##type, dev->evbit))			\
2002 			memset(dev->bits##bit, 0,			\
2003 				sizeof(dev->bits##bit));		\
2004 	} while (0)
2005 
input_cleanse_bitmasks(struct input_dev * dev)2006 static void input_cleanse_bitmasks(struct input_dev *dev)
2007 {
2008 	INPUT_CLEANSE_BITMASK(dev, KEY, key);
2009 	INPUT_CLEANSE_BITMASK(dev, REL, rel);
2010 	INPUT_CLEANSE_BITMASK(dev, ABS, abs);
2011 	INPUT_CLEANSE_BITMASK(dev, MSC, msc);
2012 	INPUT_CLEANSE_BITMASK(dev, LED, led);
2013 	INPUT_CLEANSE_BITMASK(dev, SND, snd);
2014 	INPUT_CLEANSE_BITMASK(dev, FF, ff);
2015 	INPUT_CLEANSE_BITMASK(dev, SW, sw);
2016 }
2017 
__input_unregister_device(struct input_dev * dev)2018 static void __input_unregister_device(struct input_dev *dev)
2019 {
2020 	struct input_handle *handle, *next;
2021 
2022 	input_disconnect_device(dev);
2023 
2024 	mutex_lock(&input_mutex);
2025 
2026 	list_for_each_entry_safe(handle, next, &dev->h_list, d_node)
2027 		handle->handler->disconnect(handle);
2028 	WARN_ON(!list_empty(&dev->h_list));
2029 
2030 	del_timer_sync(&dev->timer);
2031 	list_del_init(&dev->node);
2032 
2033 	input_wakeup_procfs_readers();
2034 
2035 	mutex_unlock(&input_mutex);
2036 
2037 	device_del(&dev->dev);
2038 }
2039 
devm_input_device_unregister(struct device * dev,void * res)2040 static void devm_input_device_unregister(struct device *dev, void *res)
2041 {
2042 	struct input_devres *devres = res;
2043 	struct input_dev *input = devres->input;
2044 
2045 	dev_dbg(dev, "%s: unregistering device %s\n",
2046 		__func__, dev_name(&input->dev));
2047 	__input_unregister_device(input);
2048 }
2049 
2050 /**
2051  * input_register_device - register device with input core
2052  * @dev: device to be registered
2053  *
2054  * This function registers device with input core. The device must be
2055  * allocated with input_allocate_device() and all it's capabilities
2056  * set up before registering.
2057  * If function fails the device must be freed with input_free_device().
2058  * Once device has been successfully registered it can be unregistered
2059  * with input_unregister_device(); input_free_device() should not be
2060  * called in this case.
2061  *
2062  * Note that this function is also used to register managed input devices
2063  * (ones allocated with devm_input_allocate_device()). Such managed input
2064  * devices need not be explicitly unregistered or freed, their tear down
2065  * is controlled by the devres infrastructure. It is also worth noting
2066  * that tear down of managed input devices is internally a 2-step process:
2067  * registered managed input device is first unregistered, but stays in
2068  * memory and can still handle input_event() calls (although events will
2069  * not be delivered anywhere). The freeing of managed input device will
2070  * happen later, when devres stack is unwound to the point where device
2071  * allocation was made.
2072  */
input_register_device(struct input_dev * dev)2073 int input_register_device(struct input_dev *dev)
2074 {
2075 	struct input_devres *devres = NULL;
2076 	struct input_handler *handler;
2077 	unsigned int packet_size;
2078 	const char *path;
2079 	int error;
2080 
2081 	if (dev->devres_managed) {
2082 		devres = devres_alloc(devm_input_device_unregister,
2083 				      sizeof(struct input_devres), GFP_KERNEL);
2084 		if (!devres)
2085 			return -ENOMEM;
2086 
2087 		devres->input = dev;
2088 	}
2089 
2090 	/* Every input device generates EV_SYN/SYN_REPORT events. */
2091 	__set_bit(EV_SYN, dev->evbit);
2092 
2093 	/* KEY_RESERVED is not supposed to be transmitted to userspace. */
2094 	__clear_bit(KEY_RESERVED, dev->keybit);
2095 
2096 	/* Make sure that bitmasks not mentioned in dev->evbit are clean. */
2097 	input_cleanse_bitmasks(dev);
2098 
2099 	packet_size = input_estimate_events_per_packet(dev);
2100 	if (dev->hint_events_per_packet < packet_size)
2101 		dev->hint_events_per_packet = packet_size;
2102 
2103 	dev->max_vals = dev->hint_events_per_packet + 2;
2104 	dev->vals = kcalloc(dev->max_vals, sizeof(*dev->vals), GFP_KERNEL);
2105 	if (!dev->vals) {
2106 		error = -ENOMEM;
2107 		goto err_devres_free;
2108 	}
2109 
2110 	/*
2111 	 * If delay and period are pre-set by the driver, then autorepeating
2112 	 * is handled by the driver itself and we don't do it in input.c.
2113 	 */
2114 	if (!dev->rep[REP_DELAY] && !dev->rep[REP_PERIOD]) {
2115 		dev->timer.data = (long) dev;
2116 		dev->timer.function = input_repeat_key;
2117 		dev->rep[REP_DELAY] = 250;
2118 		dev->rep[REP_PERIOD] = 33;
2119 	}
2120 
2121 	if (!dev->getkeycode)
2122 		dev->getkeycode = input_default_getkeycode;
2123 
2124 	if (!dev->setkeycode)
2125 		dev->setkeycode = input_default_setkeycode;
2126 
2127 	error = device_add(&dev->dev);
2128 	if (error)
2129 		goto err_free_vals;
2130 
2131 	path = kobject_get_path(&dev->dev.kobj, GFP_KERNEL);
2132 	pr_info("%s as %s\n",
2133 		dev->name ? dev->name : "Unspecified device",
2134 		path ? path : "N/A");
2135 	kfree(path);
2136 
2137 	error = mutex_lock_interruptible(&input_mutex);
2138 	if (error)
2139 		goto err_device_del;
2140 
2141 	list_add_tail(&dev->node, &input_dev_list);
2142 
2143 	list_for_each_entry(handler, &input_handler_list, node)
2144 		input_attach_handler(dev, handler);
2145 
2146 	input_wakeup_procfs_readers();
2147 
2148 	mutex_unlock(&input_mutex);
2149 
2150 	if (dev->devres_managed) {
2151 		dev_dbg(dev->dev.parent, "%s: registering %s with devres.\n",
2152 			__func__, dev_name(&dev->dev));
2153 		devres_add(dev->dev.parent, devres);
2154 	}
2155 	return 0;
2156 
2157 err_device_del:
2158 	device_del(&dev->dev);
2159 err_free_vals:
2160 	kfree(dev->vals);
2161 	dev->vals = NULL;
2162 err_devres_free:
2163 	devres_free(devres);
2164 	return error;
2165 }
2166 EXPORT_SYMBOL(input_register_device);
2167 
2168 /**
2169  * input_unregister_device - unregister previously registered device
2170  * @dev: device to be unregistered
2171  *
2172  * This function unregisters an input device. Once device is unregistered
2173  * the caller should not try to access it as it may get freed at any moment.
2174  */
input_unregister_device(struct input_dev * dev)2175 void input_unregister_device(struct input_dev *dev)
2176 {
2177 	if (dev->devres_managed) {
2178 		WARN_ON(devres_destroy(dev->dev.parent,
2179 					devm_input_device_unregister,
2180 					devm_input_device_match,
2181 					dev));
2182 		__input_unregister_device(dev);
2183 		/*
2184 		 * We do not do input_put_device() here because it will be done
2185 		 * when 2nd devres fires up.
2186 		 */
2187 	} else {
2188 		__input_unregister_device(dev);
2189 		input_put_device(dev);
2190 	}
2191 }
2192 EXPORT_SYMBOL(input_unregister_device);
2193 
2194 /**
2195  * input_register_handler - register a new input handler
2196  * @handler: handler to be registered
2197  *
2198  * This function registers a new input handler (interface) for input
2199  * devices in the system and attaches it to all input devices that
2200  * are compatible with the handler.
2201  */
input_register_handler(struct input_handler * handler)2202 int input_register_handler(struct input_handler *handler)
2203 {
2204 	struct input_dev *dev;
2205 	int error;
2206 
2207 	error = mutex_lock_interruptible(&input_mutex);
2208 	if (error)
2209 		return error;
2210 
2211 	INIT_LIST_HEAD(&handler->h_list);
2212 
2213 	list_add_tail(&handler->node, &input_handler_list);
2214 
2215 	list_for_each_entry(dev, &input_dev_list, node)
2216 		input_attach_handler(dev, handler);
2217 
2218 	input_wakeup_procfs_readers();
2219 
2220 	mutex_unlock(&input_mutex);
2221 	return 0;
2222 }
2223 EXPORT_SYMBOL(input_register_handler);
2224 
2225 /**
2226  * input_unregister_handler - unregisters an input handler
2227  * @handler: handler to be unregistered
2228  *
2229  * This function disconnects a handler from its input devices and
2230  * removes it from lists of known handlers.
2231  */
input_unregister_handler(struct input_handler * handler)2232 void input_unregister_handler(struct input_handler *handler)
2233 {
2234 	struct input_handle *handle, *next;
2235 
2236 	mutex_lock(&input_mutex);
2237 
2238 	list_for_each_entry_safe(handle, next, &handler->h_list, h_node)
2239 		handler->disconnect(handle);
2240 	WARN_ON(!list_empty(&handler->h_list));
2241 
2242 	list_del_init(&handler->node);
2243 
2244 	input_wakeup_procfs_readers();
2245 
2246 	mutex_unlock(&input_mutex);
2247 }
2248 EXPORT_SYMBOL(input_unregister_handler);
2249 
2250 /**
2251  * input_handler_for_each_handle - handle iterator
2252  * @handler: input handler to iterate
2253  * @data: data for the callback
2254  * @fn: function to be called for each handle
2255  *
2256  * Iterate over @bus's list of devices, and call @fn for each, passing
2257  * it @data and stop when @fn returns a non-zero value. The function is
2258  * using RCU to traverse the list and therefore may be usind in atonic
2259  * contexts. The @fn callback is invoked from RCU critical section and
2260  * thus must not sleep.
2261  */
input_handler_for_each_handle(struct input_handler * handler,void * data,int (* fn)(struct input_handle *,void *))2262 int input_handler_for_each_handle(struct input_handler *handler, void *data,
2263 				  int (*fn)(struct input_handle *, void *))
2264 {
2265 	struct input_handle *handle;
2266 	int retval = 0;
2267 
2268 	rcu_read_lock();
2269 
2270 	list_for_each_entry_rcu(handle, &handler->h_list, h_node) {
2271 		retval = fn(handle, data);
2272 		if (retval)
2273 			break;
2274 	}
2275 
2276 	rcu_read_unlock();
2277 
2278 	return retval;
2279 }
2280 EXPORT_SYMBOL(input_handler_for_each_handle);
2281 
2282 /**
2283  * input_register_handle - register a new input handle
2284  * @handle: handle to register
2285  *
2286  * This function puts a new input handle onto device's
2287  * and handler's lists so that events can flow through
2288  * it once it is opened using input_open_device().
2289  *
2290  * This function is supposed to be called from handler's
2291  * connect() method.
2292  */
input_register_handle(struct input_handle * handle)2293 int input_register_handle(struct input_handle *handle)
2294 {
2295 	struct input_handler *handler = handle->handler;
2296 	struct input_dev *dev = handle->dev;
2297 	int error;
2298 
2299 	/*
2300 	 * We take dev->mutex here to prevent race with
2301 	 * input_release_device().
2302 	 */
2303 	error = mutex_lock_interruptible(&dev->mutex);
2304 	if (error)
2305 		return error;
2306 
2307 	/*
2308 	 * Filters go to the head of the list, normal handlers
2309 	 * to the tail.
2310 	 */
2311 	if (handler->filter)
2312 		list_add_rcu(&handle->d_node, &dev->h_list);
2313 	else
2314 		list_add_tail_rcu(&handle->d_node, &dev->h_list);
2315 
2316 	mutex_unlock(&dev->mutex);
2317 
2318 	/*
2319 	 * Since we are supposed to be called from ->connect()
2320 	 * which is mutually exclusive with ->disconnect()
2321 	 * we can't be racing with input_unregister_handle()
2322 	 * and so separate lock is not needed here.
2323 	 */
2324 	list_add_tail_rcu(&handle->h_node, &handler->h_list);
2325 
2326 	if (handler->start)
2327 		handler->start(handle);
2328 
2329 	return 0;
2330 }
2331 EXPORT_SYMBOL(input_register_handle);
2332 
2333 /**
2334  * input_unregister_handle - unregister an input handle
2335  * @handle: handle to unregister
2336  *
2337  * This function removes input handle from device's
2338  * and handler's lists.
2339  *
2340  * This function is supposed to be called from handler's
2341  * disconnect() method.
2342  */
input_unregister_handle(struct input_handle * handle)2343 void input_unregister_handle(struct input_handle *handle)
2344 {
2345 	struct input_dev *dev = handle->dev;
2346 
2347 	list_del_rcu(&handle->h_node);
2348 
2349 	/*
2350 	 * Take dev->mutex to prevent race with input_release_device().
2351 	 */
2352 	mutex_lock(&dev->mutex);
2353 	list_del_rcu(&handle->d_node);
2354 	mutex_unlock(&dev->mutex);
2355 
2356 	synchronize_rcu();
2357 }
2358 EXPORT_SYMBOL(input_unregister_handle);
2359 
2360 /**
2361  * input_get_new_minor - allocates a new input minor number
2362  * @legacy_base: beginning or the legacy range to be searched
2363  * @legacy_num: size of legacy range
2364  * @allow_dynamic: whether we can also take ID from the dynamic range
2365  *
2366  * This function allocates a new device minor for from input major namespace.
2367  * Caller can request legacy minor by specifying @legacy_base and @legacy_num
2368  * parameters and whether ID can be allocated from dynamic range if there are
2369  * no free IDs in legacy range.
2370  */
input_get_new_minor(int legacy_base,unsigned int legacy_num,bool allow_dynamic)2371 int input_get_new_minor(int legacy_base, unsigned int legacy_num,
2372 			bool allow_dynamic)
2373 {
2374 	/*
2375 	 * This function should be called from input handler's ->connect()
2376 	 * methods, which are serialized with input_mutex, so no additional
2377 	 * locking is needed here.
2378 	 */
2379 	if (legacy_base >= 0) {
2380 		int minor = ida_simple_get(&input_ida,
2381 					   legacy_base,
2382 					   legacy_base + legacy_num,
2383 					   GFP_KERNEL);
2384 		if (minor >= 0 || !allow_dynamic)
2385 			return minor;
2386 	}
2387 
2388 	return ida_simple_get(&input_ida,
2389 			      INPUT_FIRST_DYNAMIC_DEV, INPUT_MAX_CHAR_DEVICES,
2390 			      GFP_KERNEL);
2391 }
2392 EXPORT_SYMBOL(input_get_new_minor);
2393 
2394 /**
2395  * input_free_minor - release previously allocated minor
2396  * @minor: minor to be released
2397  *
2398  * This function releases previously allocated input minor so that it can be
2399  * reused later.
2400  */
input_free_minor(unsigned int minor)2401 void input_free_minor(unsigned int minor)
2402 {
2403 	ida_simple_remove(&input_ida, minor);
2404 }
2405 EXPORT_SYMBOL(input_free_minor);
2406 
input_init(void)2407 static int __init input_init(void)
2408 {
2409 	int err;
2410 
2411 	err = class_register(&input_class);
2412 	if (err) {
2413 		pr_err("unable to register input_dev class\n");
2414 		return err;
2415 	}
2416 
2417 	err = input_proc_init();
2418 	if (err)
2419 		goto fail1;
2420 
2421 	err = register_chrdev_region(MKDEV(INPUT_MAJOR, 0),
2422 				     INPUT_MAX_CHAR_DEVICES, "input");
2423 	if (err) {
2424 		pr_err("unable to register char major %d", INPUT_MAJOR);
2425 		goto fail2;
2426 	}
2427 
2428 	return 0;
2429 
2430  fail2:	input_proc_exit();
2431  fail1:	class_unregister(&input_class);
2432 	return err;
2433 }
2434 
input_exit(void)2435 static void __exit input_exit(void)
2436 {
2437 	input_proc_exit();
2438 	unregister_chrdev_region(MKDEV(INPUT_MAJOR, 0),
2439 				 INPUT_MAX_CHAR_DEVICES);
2440 	class_unregister(&input_class);
2441 }
2442 
2443 subsys_initcall(input_init);
2444 module_exit(input_exit);
2445