1 /*
2 * Driver for Virtual PS/2 Mouse on VMware and QEMU hypervisors.
3 *
4 * Copyright (C) 2014, VMware, Inc. All Rights Reserved.
5 *
6 * This program is free software; you can redistribute it and/or modify it
7 * under the terms of the GNU General Public License version 2 as published by
8 * the Free Software Foundation.
9 *
10 * Twin device code is hugely inspired by the ALPS driver.
11 * Authors:
12 * Dmitry Torokhov <dmitry.torokhov@gmail.com>
13 * Thomas Hellstrom <thellstrom@vmware.com>
14 */
15
16 #include <linux/input.h>
17 #include <linux/serio.h>
18 #include <linux/libps2.h>
19 #include <linux/slab.h>
20 #include <linux/module.h>
21 #include <asm/hypervisor.h>
22
23 #include "psmouse.h"
24 #include "vmmouse.h"
25
26 #define VMMOUSE_PROTO_MAGIC 0x564D5868U
27 #define VMMOUSE_PROTO_PORT 0x5658
28
29 /*
30 * Main commands supported by the vmmouse hypervisor port.
31 */
32 #define VMMOUSE_PROTO_CMD_GETVERSION 10
33 #define VMMOUSE_PROTO_CMD_ABSPOINTER_DATA 39
34 #define VMMOUSE_PROTO_CMD_ABSPOINTER_STATUS 40
35 #define VMMOUSE_PROTO_CMD_ABSPOINTER_COMMAND 41
36 #define VMMOUSE_PROTO_CMD_ABSPOINTER_RESTRICT 86
37
38 /*
39 * Subcommands for VMMOUSE_PROTO_CMD_ABSPOINTER_COMMAND
40 */
41 #define VMMOUSE_CMD_ENABLE 0x45414552U
42 #define VMMOUSE_CMD_DISABLE 0x000000f5U
43 #define VMMOUSE_CMD_REQUEST_RELATIVE 0x4c455252U
44 #define VMMOUSE_CMD_REQUEST_ABSOLUTE 0x53424152U
45
46 #define VMMOUSE_ERROR 0xffff0000U
47
48 #define VMMOUSE_VERSION_ID 0x3442554aU
49
50 #define VMMOUSE_RELATIVE_PACKET 0x00010000U
51
52 #define VMMOUSE_LEFT_BUTTON 0x20
53 #define VMMOUSE_RIGHT_BUTTON 0x10
54 #define VMMOUSE_MIDDLE_BUTTON 0x08
55
56 /*
57 * VMMouse Restrict command
58 */
59 #define VMMOUSE_RESTRICT_ANY 0x00
60 #define VMMOUSE_RESTRICT_CPL0 0x01
61 #define VMMOUSE_RESTRICT_IOPL 0x02
62
63 #define VMMOUSE_MAX_X 0xFFFF
64 #define VMMOUSE_MAX_Y 0xFFFF
65
66 #define VMMOUSE_VENDOR "VMware"
67 #define VMMOUSE_NAME "VMMouse"
68
69 /**
70 * struct vmmouse_data - private data structure for the vmmouse driver
71 *
72 * @abs_dev: "Absolute" device used to report absolute mouse movement.
73 * @phys: Physical path for the absolute device.
74 * @dev_name: Name attribute name for the absolute device.
75 */
76 struct vmmouse_data {
77 struct input_dev *abs_dev;
78 char phys[32];
79 char dev_name[128];
80 };
81
82 /**
83 * Hypervisor-specific bi-directional communication channel
84 * implementing the vmmouse protocol. Should never execute on
85 * bare metal hardware.
86 */
87 #define VMMOUSE_CMD(cmd, in1, out1, out2, out3, out4) \
88 ({ \
89 unsigned long __dummy1, __dummy2; \
90 __asm__ __volatile__ ("inl %%dx" : \
91 "=a"(out1), \
92 "=b"(out2), \
93 "=c"(out3), \
94 "=d"(out4), \
95 "=S"(__dummy1), \
96 "=D"(__dummy2) : \
97 "a"(VMMOUSE_PROTO_MAGIC), \
98 "b"(in1), \
99 "c"(VMMOUSE_PROTO_CMD_##cmd), \
100 "d"(VMMOUSE_PROTO_PORT) : \
101 "memory"); \
102 })
103
104 /**
105 * vmmouse_report_button - report button state on the correct input device
106 *
107 * @psmouse: Pointer to the psmouse struct
108 * @abs_dev: The absolute input device
109 * @rel_dev: The relative input device
110 * @pref_dev: The preferred device for reporting
111 * @code: Button code
112 * @value: Button value
113 *
114 * Report @value and @code on @pref_dev, unless the button is already
115 * pressed on the other device, in which case the state is reported on that
116 * device.
117 */
vmmouse_report_button(struct psmouse * psmouse,struct input_dev * abs_dev,struct input_dev * rel_dev,struct input_dev * pref_dev,unsigned int code,int value)118 static void vmmouse_report_button(struct psmouse *psmouse,
119 struct input_dev *abs_dev,
120 struct input_dev *rel_dev,
121 struct input_dev *pref_dev,
122 unsigned int code, int value)
123 {
124 if (test_bit(code, abs_dev->key))
125 pref_dev = abs_dev;
126 else if (test_bit(code, rel_dev->key))
127 pref_dev = rel_dev;
128
129 input_report_key(pref_dev, code, value);
130 }
131
132 /**
133 * vmmouse_report_events - process events on the vmmouse communications channel
134 *
135 * @psmouse: Pointer to the psmouse struct
136 *
137 * This function pulls events from the vmmouse communications channel and
138 * reports them on the correct (absolute or relative) input device. When the
139 * communications channel is drained, or if we've processed more than 255
140 * psmouse commands, the function returns PSMOUSE_FULL_PACKET. If there is a
141 * host- or synchronization error, the function returns PSMOUSE_BAD_DATA in
142 * the hope that the caller will reset the communications channel.
143 */
vmmouse_report_events(struct psmouse * psmouse)144 static psmouse_ret_t vmmouse_report_events(struct psmouse *psmouse)
145 {
146 struct input_dev *rel_dev = psmouse->dev;
147 struct vmmouse_data *priv = psmouse->private;
148 struct input_dev *abs_dev = priv->abs_dev;
149 struct input_dev *pref_dev;
150 u32 status, x, y, z;
151 u32 dummy1, dummy2, dummy3;
152 unsigned int queue_length;
153 unsigned int count = 255;
154
155 while (count--) {
156 /* See if we have motion data. */
157 VMMOUSE_CMD(ABSPOINTER_STATUS, 0,
158 status, dummy1, dummy2, dummy3);
159 if ((status & VMMOUSE_ERROR) == VMMOUSE_ERROR) {
160 psmouse_err(psmouse, "failed to fetch status data\n");
161 /*
162 * After a few attempts this will result in
163 * reconnect.
164 */
165 return PSMOUSE_BAD_DATA;
166 }
167
168 queue_length = status & 0xffff;
169 if (queue_length == 0)
170 break;
171
172 if (queue_length % 4) {
173 psmouse_err(psmouse, "invalid queue length\n");
174 return PSMOUSE_BAD_DATA;
175 }
176
177 /* Now get it */
178 VMMOUSE_CMD(ABSPOINTER_DATA, 4, status, x, y, z);
179
180 /*
181 * And report what we've got. Prefer to report button
182 * events on the same device where we report motion events.
183 * This doesn't work well with the mouse wheel, though. See
184 * below. Ideally we would want to report that on the
185 * preferred device as well.
186 */
187 if (status & VMMOUSE_RELATIVE_PACKET) {
188 pref_dev = rel_dev;
189 input_report_rel(rel_dev, REL_X, (s32)x);
190 input_report_rel(rel_dev, REL_Y, -(s32)y);
191 } else {
192 pref_dev = abs_dev;
193 input_report_abs(abs_dev, ABS_X, x);
194 input_report_abs(abs_dev, ABS_Y, y);
195 }
196
197 /* Xorg seems to ignore wheel events on absolute devices */
198 input_report_rel(rel_dev, REL_WHEEL, -(s8)((u8) z));
199
200 vmmouse_report_button(psmouse, abs_dev, rel_dev,
201 pref_dev, BTN_LEFT,
202 status & VMMOUSE_LEFT_BUTTON);
203 vmmouse_report_button(psmouse, abs_dev, rel_dev,
204 pref_dev, BTN_RIGHT,
205 status & VMMOUSE_RIGHT_BUTTON);
206 vmmouse_report_button(psmouse, abs_dev, rel_dev,
207 pref_dev, BTN_MIDDLE,
208 status & VMMOUSE_MIDDLE_BUTTON);
209 input_sync(abs_dev);
210 input_sync(rel_dev);
211 }
212
213 return PSMOUSE_FULL_PACKET;
214 }
215
216 /**
217 * vmmouse_process_byte - process data on the ps/2 channel
218 *
219 * @psmouse: Pointer to the psmouse struct
220 *
221 * When the ps/2 channel indicates that there is vmmouse data available,
222 * call vmmouse channel processing. Otherwise, continue to accept bytes. If
223 * there is a synchronization or communication data error, return
224 * PSMOUSE_BAD_DATA in the hope that the caller will reset the mouse.
225 */
vmmouse_process_byte(struct psmouse * psmouse)226 static psmouse_ret_t vmmouse_process_byte(struct psmouse *psmouse)
227 {
228 unsigned char *packet = psmouse->packet;
229
230 switch (psmouse->pktcnt) {
231 case 1:
232 return (packet[0] & 0x8) == 0x8 ?
233 PSMOUSE_GOOD_DATA : PSMOUSE_BAD_DATA;
234
235 case 2:
236 return PSMOUSE_GOOD_DATA;
237
238 default:
239 return vmmouse_report_events(psmouse);
240 }
241 }
242
243 /**
244 * vmmouse_disable - Disable vmmouse
245 *
246 * @psmouse: Pointer to the psmouse struct
247 *
248 * Tries to disable vmmouse mode.
249 */
vmmouse_disable(struct psmouse * psmouse)250 static void vmmouse_disable(struct psmouse *psmouse)
251 {
252 u32 status;
253 u32 dummy1, dummy2, dummy3, dummy4;
254
255 VMMOUSE_CMD(ABSPOINTER_COMMAND, VMMOUSE_CMD_DISABLE,
256 dummy1, dummy2, dummy3, dummy4);
257
258 VMMOUSE_CMD(ABSPOINTER_STATUS, 0,
259 status, dummy1, dummy2, dummy3);
260
261 if ((status & VMMOUSE_ERROR) != VMMOUSE_ERROR)
262 psmouse_warn(psmouse, "failed to disable vmmouse device\n");
263 }
264
265 /**
266 * vmmouse_enable - Enable vmmouse and request absolute mode.
267 *
268 * @psmouse: Pointer to the psmouse struct
269 *
270 * Tries to enable vmmouse mode. Performs basic checks and requests
271 * absolute vmmouse mode.
272 * Returns 0 on success, -ENODEV on failure.
273 */
vmmouse_enable(struct psmouse * psmouse)274 static int vmmouse_enable(struct psmouse *psmouse)
275 {
276 u32 status, version;
277 u32 dummy1, dummy2, dummy3, dummy4;
278
279 /*
280 * Try enabling the device. If successful, we should be able to
281 * read valid version ID back from it.
282 */
283 VMMOUSE_CMD(ABSPOINTER_COMMAND, VMMOUSE_CMD_ENABLE,
284 dummy1, dummy2, dummy3, dummy4);
285
286 /*
287 * See if version ID can be retrieved.
288 */
289 VMMOUSE_CMD(ABSPOINTER_STATUS, 0, status, dummy1, dummy2, dummy3);
290 if ((status & 0x0000ffff) == 0) {
291 psmouse_dbg(psmouse, "empty flags - assuming no device\n");
292 return -ENXIO;
293 }
294
295 VMMOUSE_CMD(ABSPOINTER_DATA, 1 /* single item */,
296 version, dummy1, dummy2, dummy3);
297 if (version != VMMOUSE_VERSION_ID) {
298 psmouse_dbg(psmouse, "Unexpected version value: %u vs %u\n",
299 (unsigned) version, VMMOUSE_VERSION_ID);
300 vmmouse_disable(psmouse);
301 return -ENXIO;
302 }
303
304 /*
305 * Restrict ioport access, if possible.
306 */
307 VMMOUSE_CMD(ABSPOINTER_RESTRICT, VMMOUSE_RESTRICT_CPL0,
308 dummy1, dummy2, dummy3, dummy4);
309
310 VMMOUSE_CMD(ABSPOINTER_COMMAND, VMMOUSE_CMD_REQUEST_ABSOLUTE,
311 dummy1, dummy2, dummy3, dummy4);
312
313 return 0;
314 }
315
316 /*
317 * Array of supported hypervisors.
318 */
319 static const struct hypervisor_x86 *vmmouse_supported_hypervisors[] = {
320 &x86_hyper_vmware,
321 #ifdef CONFIG_KVM_GUEST
322 &x86_hyper_kvm,
323 #endif
324 };
325
326 /**
327 * vmmouse_check_hypervisor - Check if we're running on a supported hypervisor
328 */
vmmouse_check_hypervisor(void)329 static bool vmmouse_check_hypervisor(void)
330 {
331 int i;
332
333 for (i = 0; i < ARRAY_SIZE(vmmouse_supported_hypervisors); i++)
334 if (vmmouse_supported_hypervisors[i] == x86_hyper)
335 return true;
336
337 return false;
338 }
339
340 /**
341 * vmmouse_detect - Probe whether vmmouse is available
342 *
343 * @psmouse: Pointer to the psmouse struct
344 * @set_properties: Whether to set psmouse name and vendor
345 *
346 * Returns 0 if vmmouse channel is available. Negative error code if not.
347 */
vmmouse_detect(struct psmouse * psmouse,bool set_properties)348 int vmmouse_detect(struct psmouse *psmouse, bool set_properties)
349 {
350 u32 response, version, dummy1, dummy2;
351
352 if (!vmmouse_check_hypervisor()) {
353 psmouse_dbg(psmouse,
354 "VMMouse not running on supported hypervisor.\n");
355 return -ENXIO;
356 }
357
358 /* Check if the device is present */
359 response = ~VMMOUSE_PROTO_MAGIC;
360 VMMOUSE_CMD(GETVERSION, 0, version, response, dummy1, dummy2);
361 if (response != VMMOUSE_PROTO_MAGIC || version == 0xffffffffU)
362 return -ENXIO;
363
364 if (set_properties) {
365 psmouse->vendor = VMMOUSE_VENDOR;
366 psmouse->name = VMMOUSE_NAME;
367 psmouse->model = version;
368 }
369
370 return 0;
371 }
372
373 /**
374 * vmmouse_disconnect - Take down vmmouse driver
375 *
376 * @psmouse: Pointer to the psmouse struct
377 *
378 * Takes down vmmouse driver and frees resources set up in vmmouse_init().
379 */
vmmouse_disconnect(struct psmouse * psmouse)380 static void vmmouse_disconnect(struct psmouse *psmouse)
381 {
382 struct vmmouse_data *priv = psmouse->private;
383
384 vmmouse_disable(psmouse);
385 psmouse_reset(psmouse);
386 input_unregister_device(priv->abs_dev);
387 kfree(priv);
388 }
389
390 /**
391 * vmmouse_reconnect - Reset the ps/2 - and vmmouse connections
392 *
393 * @psmouse: Pointer to the psmouse struct
394 *
395 * Attempts to reset the mouse connections. Returns 0 on success and
396 * -1 on failure.
397 */
vmmouse_reconnect(struct psmouse * psmouse)398 static int vmmouse_reconnect(struct psmouse *psmouse)
399 {
400 int error;
401
402 psmouse_reset(psmouse);
403 vmmouse_disable(psmouse);
404 error = vmmouse_enable(psmouse);
405 if (error) {
406 psmouse_err(psmouse,
407 "Unable to re-enable mouse when reconnecting, err: %d\n",
408 error);
409 return error;
410 }
411
412 return 0;
413 }
414
415 /**
416 * vmmouse_init - Initialize the vmmouse driver
417 *
418 * @psmouse: Pointer to the psmouse struct
419 *
420 * Requests the device and tries to enable vmmouse mode.
421 * If successful, sets up the input device for relative movement events.
422 * It also allocates another input device and sets it up for absolute motion
423 * events. Returns 0 on success and -1 on failure.
424 */
vmmouse_init(struct psmouse * psmouse)425 int vmmouse_init(struct psmouse *psmouse)
426 {
427 struct vmmouse_data *priv;
428 struct input_dev *rel_dev = psmouse->dev, *abs_dev;
429 int error;
430
431 psmouse_reset(psmouse);
432 error = vmmouse_enable(psmouse);
433 if (error)
434 return error;
435
436 priv = kzalloc(sizeof(*priv), GFP_KERNEL);
437 abs_dev = input_allocate_device();
438 if (!priv || !abs_dev) {
439 error = -ENOMEM;
440 goto init_fail;
441 }
442
443 priv->abs_dev = abs_dev;
444 psmouse->private = priv;
445
446 /* Set up and register absolute device */
447 snprintf(priv->phys, sizeof(priv->phys), "%s/input1",
448 psmouse->ps2dev.serio->phys);
449
450 /* Mimic name setup for relative device in psmouse-base.c */
451 snprintf(priv->dev_name, sizeof(priv->dev_name), "%s %s %s",
452 VMMOUSE_PSNAME, VMMOUSE_VENDOR, VMMOUSE_NAME);
453 abs_dev->phys = priv->phys;
454 abs_dev->name = priv->dev_name;
455 abs_dev->id.bustype = BUS_I8042;
456 abs_dev->id.vendor = 0x0002;
457 abs_dev->id.product = PSMOUSE_VMMOUSE;
458 abs_dev->id.version = psmouse->model;
459 abs_dev->dev.parent = &psmouse->ps2dev.serio->dev;
460
461 /* Set absolute device capabilities */
462 input_set_capability(abs_dev, EV_KEY, BTN_LEFT);
463 input_set_capability(abs_dev, EV_KEY, BTN_RIGHT);
464 input_set_capability(abs_dev, EV_KEY, BTN_MIDDLE);
465 input_set_capability(abs_dev, EV_ABS, ABS_X);
466 input_set_capability(abs_dev, EV_ABS, ABS_Y);
467 input_set_abs_params(abs_dev, ABS_X, 0, VMMOUSE_MAX_X, 0, 0);
468 input_set_abs_params(abs_dev, ABS_Y, 0, VMMOUSE_MAX_Y, 0, 0);
469
470 error = input_register_device(priv->abs_dev);
471 if (error)
472 goto init_fail;
473
474 /* Add wheel capability to the relative device */
475 input_set_capability(rel_dev, EV_REL, REL_WHEEL);
476
477 psmouse->protocol_handler = vmmouse_process_byte;
478 psmouse->disconnect = vmmouse_disconnect;
479 psmouse->reconnect = vmmouse_reconnect;
480
481 return 0;
482
483 init_fail:
484 vmmouse_disable(psmouse);
485 psmouse_reset(psmouse);
486 input_free_device(abs_dev);
487 kfree(priv);
488 psmouse->private = NULL;
489
490 return error;
491 }
492