xref: /linux-6.15/drivers/input/input.c (revision b898cc70)
1 /*
2  * The input core
3  *
4  * Copyright (c) 1999-2002 Vojtech Pavlik
5  */
6 
7 /*
8  * This program is free software; you can redistribute it and/or modify it
9  * under the terms of the GNU General Public License version 2 as published by
10  * the Free Software Foundation.
11  */
12 
13 #include <linux/init.h>
14 #include <linux/types.h>
15 #include <linux/input.h>
16 #include <linux/module.h>
17 #include <linux/slab.h>
18 #include <linux/random.h>
19 #include <linux/major.h>
20 #include <linux/proc_fs.h>
21 #include <linux/sched.h>
22 #include <linux/seq_file.h>
23 #include <linux/poll.h>
24 #include <linux/device.h>
25 #include <linux/mutex.h>
26 #include <linux/rcupdate.h>
27 #include <linux/smp_lock.h>
28 #include "input-compat.h"
29 
30 MODULE_AUTHOR("Vojtech Pavlik <[email protected]>");
31 MODULE_DESCRIPTION("Input core");
32 MODULE_LICENSE("GPL");
33 
34 #define INPUT_DEVICES	256
35 
36 static LIST_HEAD(input_dev_list);
37 static LIST_HEAD(input_handler_list);
38 
39 /*
40  * input_mutex protects access to both input_dev_list and input_handler_list.
41  * This also causes input_[un]register_device and input_[un]register_handler
42  * be mutually exclusive which simplifies locking in drivers implementing
43  * input handlers.
44  */
45 static DEFINE_MUTEX(input_mutex);
46 
47 static struct input_handler *input_table[8];
48 
49 static inline int is_event_supported(unsigned int code,
50 				     unsigned long *bm, unsigned int max)
51 {
52 	return code <= max && test_bit(code, bm);
53 }
54 
55 static int input_defuzz_abs_event(int value, int old_val, int fuzz)
56 {
57 	if (fuzz) {
58 		if (value > old_val - fuzz / 2 && value < old_val + fuzz / 2)
59 			return old_val;
60 
61 		if (value > old_val - fuzz && value < old_val + fuzz)
62 			return (old_val * 3 + value) / 4;
63 
64 		if (value > old_val - fuzz * 2 && value < old_val + fuzz * 2)
65 			return (old_val + value) / 2;
66 	}
67 
68 	return value;
69 }
70 
71 /*
72  * Pass event first through all filters and then, if event has not been
73  * filtered out, through all open handles. This function is called with
74  * dev->event_lock held and interrupts disabled.
75  */
76 static void input_pass_event(struct input_dev *dev,
77 			     unsigned int type, unsigned int code, int value)
78 {
79 	struct input_handler *handler;
80 	struct input_handle *handle;
81 
82 	rcu_read_lock();
83 
84 	handle = rcu_dereference(dev->grab);
85 	if (handle)
86 		handle->handler->event(handle, type, code, value);
87 	else {
88 		bool filtered = false;
89 
90 		list_for_each_entry_rcu(handle, &dev->h_list, d_node) {
91 			if (!handle->open)
92 				continue;
93 
94 			handler = handle->handler;
95 			if (!handler->filter) {
96 				if (filtered)
97 					break;
98 
99 				handler->event(handle, type, code, value);
100 
101 			} else if (handler->filter(handle, type, code, value))
102 				filtered = true;
103 		}
104 	}
105 
106 	rcu_read_unlock();
107 }
108 
109 /*
110  * Generate software autorepeat event. Note that we take
111  * dev->event_lock here to avoid racing with input_event
112  * which may cause keys get "stuck".
113  */
114 static void input_repeat_key(unsigned long data)
115 {
116 	struct input_dev *dev = (void *) data;
117 	unsigned long flags;
118 
119 	spin_lock_irqsave(&dev->event_lock, flags);
120 
121 	if (test_bit(dev->repeat_key, dev->key) &&
122 	    is_event_supported(dev->repeat_key, dev->keybit, KEY_MAX)) {
123 
124 		input_pass_event(dev, EV_KEY, dev->repeat_key, 2);
125 
126 		if (dev->sync) {
127 			/*
128 			 * Only send SYN_REPORT if we are not in a middle
129 			 * of driver parsing a new hardware packet.
130 			 * Otherwise assume that the driver will send
131 			 * SYN_REPORT once it's done.
132 			 */
133 			input_pass_event(dev, EV_SYN, SYN_REPORT, 1);
134 		}
135 
136 		if (dev->rep[REP_PERIOD])
137 			mod_timer(&dev->timer, jiffies +
138 					msecs_to_jiffies(dev->rep[REP_PERIOD]));
139 	}
140 
141 	spin_unlock_irqrestore(&dev->event_lock, flags);
142 }
143 
144 static void input_start_autorepeat(struct input_dev *dev, int code)
145 {
146 	if (test_bit(EV_REP, dev->evbit) &&
147 	    dev->rep[REP_PERIOD] && dev->rep[REP_DELAY] &&
148 	    dev->timer.data) {
149 		dev->repeat_key = code;
150 		mod_timer(&dev->timer,
151 			  jiffies + msecs_to_jiffies(dev->rep[REP_DELAY]));
152 	}
153 }
154 
155 static void input_stop_autorepeat(struct input_dev *dev)
156 {
157 	del_timer(&dev->timer);
158 }
159 
160 #define INPUT_IGNORE_EVENT	0
161 #define INPUT_PASS_TO_HANDLERS	1
162 #define INPUT_PASS_TO_DEVICE	2
163 #define INPUT_PASS_TO_ALL	(INPUT_PASS_TO_HANDLERS | INPUT_PASS_TO_DEVICE)
164 
165 static int input_handle_abs_event(struct input_dev *dev,
166 				  unsigned int code, int *pval)
167 {
168 	bool is_mt_event;
169 	int *pold;
170 
171 	if (code == ABS_MT_SLOT) {
172 		/*
173 		 * "Stage" the event; we'll flush it later, when we
174 		 * get actiual touch data.
175 		 */
176 		if (*pval >= 0 && *pval < dev->mtsize)
177 			dev->slot = *pval;
178 
179 		return INPUT_IGNORE_EVENT;
180 	}
181 
182 	is_mt_event = code >= ABS_MT_FIRST && code <= ABS_MT_LAST;
183 
184 	if (!is_mt_event) {
185 		pold = &dev->abs[code];
186 	} else if (dev->mt) {
187 		struct input_mt_slot *mtslot = &dev->mt[dev->slot];
188 		pold = &mtslot->abs[code - ABS_MT_FIRST];
189 	} else {
190 		/*
191 		 * Bypass filtering for multitouch events when
192 		 * not employing slots.
193 		 */
194 		pold = NULL;
195 	}
196 
197 	if (pold) {
198 		*pval = input_defuzz_abs_event(*pval, *pold,
199 						dev->absfuzz[code]);
200 		if (*pold == *pval)
201 			return INPUT_IGNORE_EVENT;
202 
203 		*pold = *pval;
204 	}
205 
206 	/* Flush pending "slot" event */
207 	if (is_mt_event && dev->slot != dev->abs[ABS_MT_SLOT]) {
208 		dev->abs[ABS_MT_SLOT] = dev->slot;
209 		input_pass_event(dev, EV_ABS, ABS_MT_SLOT, dev->slot);
210 	}
211 
212 	return INPUT_PASS_TO_HANDLERS;
213 }
214 
215 static void input_handle_event(struct input_dev *dev,
216 			       unsigned int type, unsigned int code, int value)
217 {
218 	int disposition = INPUT_IGNORE_EVENT;
219 
220 	switch (type) {
221 
222 	case EV_SYN:
223 		switch (code) {
224 		case SYN_CONFIG:
225 			disposition = INPUT_PASS_TO_ALL;
226 			break;
227 
228 		case SYN_REPORT:
229 			if (!dev->sync) {
230 				dev->sync = true;
231 				disposition = INPUT_PASS_TO_HANDLERS;
232 			}
233 			break;
234 		case SYN_MT_REPORT:
235 			dev->sync = false;
236 			disposition = INPUT_PASS_TO_HANDLERS;
237 			break;
238 		}
239 		break;
240 
241 	case EV_KEY:
242 		if (is_event_supported(code, dev->keybit, KEY_MAX) &&
243 		    !!test_bit(code, dev->key) != value) {
244 
245 			if (value != 2) {
246 				__change_bit(code, dev->key);
247 				if (value)
248 					input_start_autorepeat(dev, code);
249 				else
250 					input_stop_autorepeat(dev);
251 			}
252 
253 			disposition = INPUT_PASS_TO_HANDLERS;
254 		}
255 		break;
256 
257 	case EV_SW:
258 		if (is_event_supported(code, dev->swbit, SW_MAX) &&
259 		    !!test_bit(code, dev->sw) != value) {
260 
261 			__change_bit(code, dev->sw);
262 			disposition = INPUT_PASS_TO_HANDLERS;
263 		}
264 		break;
265 
266 	case EV_ABS:
267 		if (is_event_supported(code, dev->absbit, ABS_MAX))
268 			disposition = input_handle_abs_event(dev, code, &value);
269 
270 		break;
271 
272 	case EV_REL:
273 		if (is_event_supported(code, dev->relbit, REL_MAX) && value)
274 			disposition = INPUT_PASS_TO_HANDLERS;
275 
276 		break;
277 
278 	case EV_MSC:
279 		if (is_event_supported(code, dev->mscbit, MSC_MAX))
280 			disposition = INPUT_PASS_TO_ALL;
281 
282 		break;
283 
284 	case EV_LED:
285 		if (is_event_supported(code, dev->ledbit, LED_MAX) &&
286 		    !!test_bit(code, dev->led) != value) {
287 
288 			__change_bit(code, dev->led);
289 			disposition = INPUT_PASS_TO_ALL;
290 		}
291 		break;
292 
293 	case EV_SND:
294 		if (is_event_supported(code, dev->sndbit, SND_MAX)) {
295 
296 			if (!!test_bit(code, dev->snd) != !!value)
297 				__change_bit(code, dev->snd);
298 			disposition = INPUT_PASS_TO_ALL;
299 		}
300 		break;
301 
302 	case EV_REP:
303 		if (code <= REP_MAX && value >= 0 && dev->rep[code] != value) {
304 			dev->rep[code] = value;
305 			disposition = INPUT_PASS_TO_ALL;
306 		}
307 		break;
308 
309 	case EV_FF:
310 		if (value >= 0)
311 			disposition = INPUT_PASS_TO_ALL;
312 		break;
313 
314 	case EV_PWR:
315 		disposition = INPUT_PASS_TO_ALL;
316 		break;
317 	}
318 
319 	if (disposition != INPUT_IGNORE_EVENT && type != EV_SYN)
320 		dev->sync = false;
321 
322 	if ((disposition & INPUT_PASS_TO_DEVICE) && dev->event)
323 		dev->event(dev, type, code, value);
324 
325 	if (disposition & INPUT_PASS_TO_HANDLERS)
326 		input_pass_event(dev, type, code, value);
327 }
328 
329 /**
330  * input_event() - report new input event
331  * @dev: device that generated the event
332  * @type: type of the event
333  * @code: event code
334  * @value: value of the event
335  *
336  * This function should be used by drivers implementing various input
337  * devices to report input events. See also input_inject_event().
338  *
339  * NOTE: input_event() may be safely used right after input device was
340  * allocated with input_allocate_device(), even before it is registered
341  * with input_register_device(), but the event will not reach any of the
342  * input handlers. Such early invocation of input_event() may be used
343  * to 'seed' initial state of a switch or initial position of absolute
344  * axis, etc.
345  */
346 void input_event(struct input_dev *dev,
347 		 unsigned int type, unsigned int code, int value)
348 {
349 	unsigned long flags;
350 
351 	if (is_event_supported(type, dev->evbit, EV_MAX)) {
352 
353 		spin_lock_irqsave(&dev->event_lock, flags);
354 		add_input_randomness(type, code, value);
355 		input_handle_event(dev, type, code, value);
356 		spin_unlock_irqrestore(&dev->event_lock, flags);
357 	}
358 }
359 EXPORT_SYMBOL(input_event);
360 
361 /**
362  * input_inject_event() - send input event from input handler
363  * @handle: input handle to send event through
364  * @type: type of the event
365  * @code: event code
366  * @value: value of the event
367  *
368  * Similar to input_event() but will ignore event if device is
369  * "grabbed" and handle injecting event is not the one that owns
370  * the device.
371  */
372 void input_inject_event(struct input_handle *handle,
373 			unsigned int type, unsigned int code, int value)
374 {
375 	struct input_dev *dev = handle->dev;
376 	struct input_handle *grab;
377 	unsigned long flags;
378 
379 	if (is_event_supported(type, dev->evbit, EV_MAX)) {
380 		spin_lock_irqsave(&dev->event_lock, flags);
381 
382 		rcu_read_lock();
383 		grab = rcu_dereference(dev->grab);
384 		if (!grab || grab == handle)
385 			input_handle_event(dev, type, code, value);
386 		rcu_read_unlock();
387 
388 		spin_unlock_irqrestore(&dev->event_lock, flags);
389 	}
390 }
391 EXPORT_SYMBOL(input_inject_event);
392 
393 /**
394  * input_grab_device - grabs device for exclusive use
395  * @handle: input handle that wants to own the device
396  *
397  * When a device is grabbed by an input handle all events generated by
398  * the device are delivered only to this handle. Also events injected
399  * by other input handles are ignored while device is grabbed.
400  */
401 int input_grab_device(struct input_handle *handle)
402 {
403 	struct input_dev *dev = handle->dev;
404 	int retval;
405 
406 	retval = mutex_lock_interruptible(&dev->mutex);
407 	if (retval)
408 		return retval;
409 
410 	if (dev->grab) {
411 		retval = -EBUSY;
412 		goto out;
413 	}
414 
415 	rcu_assign_pointer(dev->grab, handle);
416 	synchronize_rcu();
417 
418  out:
419 	mutex_unlock(&dev->mutex);
420 	return retval;
421 }
422 EXPORT_SYMBOL(input_grab_device);
423 
424 static void __input_release_device(struct input_handle *handle)
425 {
426 	struct input_dev *dev = handle->dev;
427 
428 	if (dev->grab == handle) {
429 		rcu_assign_pointer(dev->grab, NULL);
430 		/* Make sure input_pass_event() notices that grab is gone */
431 		synchronize_rcu();
432 
433 		list_for_each_entry(handle, &dev->h_list, d_node)
434 			if (handle->open && handle->handler->start)
435 				handle->handler->start(handle);
436 	}
437 }
438 
439 /**
440  * input_release_device - release previously grabbed device
441  * @handle: input handle that owns the device
442  *
443  * Releases previously grabbed device so that other input handles can
444  * start receiving input events. Upon release all handlers attached
445  * to the device have their start() method called so they have a change
446  * to synchronize device state with the rest of the system.
447  */
448 void input_release_device(struct input_handle *handle)
449 {
450 	struct input_dev *dev = handle->dev;
451 
452 	mutex_lock(&dev->mutex);
453 	__input_release_device(handle);
454 	mutex_unlock(&dev->mutex);
455 }
456 EXPORT_SYMBOL(input_release_device);
457 
458 /**
459  * input_open_device - open input device
460  * @handle: handle through which device is being accessed
461  *
462  * This function should be called by input handlers when they
463  * want to start receive events from given input device.
464  */
465 int input_open_device(struct input_handle *handle)
466 {
467 	struct input_dev *dev = handle->dev;
468 	int retval;
469 
470 	retval = mutex_lock_interruptible(&dev->mutex);
471 	if (retval)
472 		return retval;
473 
474 	if (dev->going_away) {
475 		retval = -ENODEV;
476 		goto out;
477 	}
478 
479 	handle->open++;
480 
481 	if (!dev->users++ && dev->open)
482 		retval = dev->open(dev);
483 
484 	if (retval) {
485 		dev->users--;
486 		if (!--handle->open) {
487 			/*
488 			 * Make sure we are not delivering any more events
489 			 * through this handle
490 			 */
491 			synchronize_rcu();
492 		}
493 	}
494 
495  out:
496 	mutex_unlock(&dev->mutex);
497 	return retval;
498 }
499 EXPORT_SYMBOL(input_open_device);
500 
501 int input_flush_device(struct input_handle *handle, struct file *file)
502 {
503 	struct input_dev *dev = handle->dev;
504 	int retval;
505 
506 	retval = mutex_lock_interruptible(&dev->mutex);
507 	if (retval)
508 		return retval;
509 
510 	if (dev->flush)
511 		retval = dev->flush(dev, file);
512 
513 	mutex_unlock(&dev->mutex);
514 	return retval;
515 }
516 EXPORT_SYMBOL(input_flush_device);
517 
518 /**
519  * input_close_device - close input device
520  * @handle: handle through which device is being accessed
521  *
522  * This function should be called by input handlers when they
523  * want to stop receive events from given input device.
524  */
525 void input_close_device(struct input_handle *handle)
526 {
527 	struct input_dev *dev = handle->dev;
528 
529 	mutex_lock(&dev->mutex);
530 
531 	__input_release_device(handle);
532 
533 	if (!--dev->users && dev->close)
534 		dev->close(dev);
535 
536 	if (!--handle->open) {
537 		/*
538 		 * synchronize_rcu() makes sure that input_pass_event()
539 		 * completed and that no more input events are delivered
540 		 * through this handle
541 		 */
542 		synchronize_rcu();
543 	}
544 
545 	mutex_unlock(&dev->mutex);
546 }
547 EXPORT_SYMBOL(input_close_device);
548 
549 /*
550  * Simulate keyup events for all keys that are marked as pressed.
551  * The function must be called with dev->event_lock held.
552  */
553 static void input_dev_release_keys(struct input_dev *dev)
554 {
555 	int code;
556 
557 	if (is_event_supported(EV_KEY, dev->evbit, EV_MAX)) {
558 		for (code = 0; code <= KEY_MAX; code++) {
559 			if (is_event_supported(code, dev->keybit, KEY_MAX) &&
560 			    __test_and_clear_bit(code, dev->key)) {
561 				input_pass_event(dev, EV_KEY, code, 0);
562 			}
563 		}
564 		input_pass_event(dev, EV_SYN, SYN_REPORT, 1);
565 	}
566 }
567 
568 /*
569  * Prepare device for unregistering
570  */
571 static void input_disconnect_device(struct input_dev *dev)
572 {
573 	struct input_handle *handle;
574 
575 	/*
576 	 * Mark device as going away. Note that we take dev->mutex here
577 	 * not to protect access to dev->going_away but rather to ensure
578 	 * that there are no threads in the middle of input_open_device()
579 	 */
580 	mutex_lock(&dev->mutex);
581 	dev->going_away = true;
582 	mutex_unlock(&dev->mutex);
583 
584 	spin_lock_irq(&dev->event_lock);
585 
586 	/*
587 	 * Simulate keyup events for all pressed keys so that handlers
588 	 * are not left with "stuck" keys. The driver may continue
589 	 * generate events even after we done here but they will not
590 	 * reach any handlers.
591 	 */
592 	input_dev_release_keys(dev);
593 
594 	list_for_each_entry(handle, &dev->h_list, d_node)
595 		handle->open = 0;
596 
597 	spin_unlock_irq(&dev->event_lock);
598 }
599 
600 static int input_fetch_keycode(struct input_dev *dev, int scancode)
601 {
602 	switch (dev->keycodesize) {
603 		case 1:
604 			return ((u8 *)dev->keycode)[scancode];
605 
606 		case 2:
607 			return ((u16 *)dev->keycode)[scancode];
608 
609 		default:
610 			return ((u32 *)dev->keycode)[scancode];
611 	}
612 }
613 
614 static int input_default_getkeycode(struct input_dev *dev,
615 				    unsigned int scancode,
616 				    unsigned int *keycode)
617 {
618 	if (!dev->keycodesize)
619 		return -EINVAL;
620 
621 	if (scancode >= dev->keycodemax)
622 		return -EINVAL;
623 
624 	*keycode = input_fetch_keycode(dev, scancode);
625 
626 	return 0;
627 }
628 
629 static int input_default_setkeycode(struct input_dev *dev,
630 				    unsigned int scancode,
631 				    unsigned int keycode)
632 {
633 	int old_keycode;
634 	int i;
635 
636 	if (scancode >= dev->keycodemax)
637 		return -EINVAL;
638 
639 	if (!dev->keycodesize)
640 		return -EINVAL;
641 
642 	if (dev->keycodesize < sizeof(keycode) && (keycode >> (dev->keycodesize * 8)))
643 		return -EINVAL;
644 
645 	switch (dev->keycodesize) {
646 		case 1: {
647 			u8 *k = (u8 *)dev->keycode;
648 			old_keycode = k[scancode];
649 			k[scancode] = keycode;
650 			break;
651 		}
652 		case 2: {
653 			u16 *k = (u16 *)dev->keycode;
654 			old_keycode = k[scancode];
655 			k[scancode] = keycode;
656 			break;
657 		}
658 		default: {
659 			u32 *k = (u32 *)dev->keycode;
660 			old_keycode = k[scancode];
661 			k[scancode] = keycode;
662 			break;
663 		}
664 	}
665 
666 	__clear_bit(old_keycode, dev->keybit);
667 	__set_bit(keycode, dev->keybit);
668 
669 	for (i = 0; i < dev->keycodemax; i++) {
670 		if (input_fetch_keycode(dev, i) == old_keycode) {
671 			__set_bit(old_keycode, dev->keybit);
672 			break; /* Setting the bit twice is useless, so break */
673 		}
674 	}
675 
676 	return 0;
677 }
678 
679 /**
680  * input_get_keycode - retrieve keycode currently mapped to a given scancode
681  * @dev: input device which keymap is being queried
682  * @scancode: scancode (or its equivalent for device in question) for which
683  *	keycode is needed
684  * @keycode: result
685  *
686  * This function should be called by anyone interested in retrieving current
687  * keymap. Presently keyboard and evdev handlers use it.
688  */
689 int input_get_keycode(struct input_dev *dev,
690 		      unsigned int scancode, unsigned int *keycode)
691 {
692 	unsigned long flags;
693 	int retval;
694 
695 	spin_lock_irqsave(&dev->event_lock, flags);
696 	retval = dev->getkeycode(dev, scancode, keycode);
697 	spin_unlock_irqrestore(&dev->event_lock, flags);
698 
699 	return retval;
700 }
701 EXPORT_SYMBOL(input_get_keycode);
702 
703 /**
704  * input_get_keycode - assign new keycode to a given scancode
705  * @dev: input device which keymap is being updated
706  * @scancode: scancode (or its equivalent for device in question)
707  * @keycode: new keycode to be assigned to the scancode
708  *
709  * This function should be called by anyone needing to update current
710  * keymap. Presently keyboard and evdev handlers use it.
711  */
712 int input_set_keycode(struct input_dev *dev,
713 		      unsigned int scancode, unsigned int keycode)
714 {
715 	unsigned long flags;
716 	unsigned int old_keycode;
717 	int retval;
718 
719 	if (keycode > KEY_MAX)
720 		return -EINVAL;
721 
722 	spin_lock_irqsave(&dev->event_lock, flags);
723 
724 	retval = dev->getkeycode(dev, scancode, &old_keycode);
725 	if (retval)
726 		goto out;
727 
728 	retval = dev->setkeycode(dev, scancode, keycode);
729 	if (retval)
730 		goto out;
731 
732 	/* Make sure KEY_RESERVED did not get enabled. */
733 	__clear_bit(KEY_RESERVED, dev->keybit);
734 
735 	/*
736 	 * Simulate keyup event if keycode is not present
737 	 * in the keymap anymore
738 	 */
739 	if (test_bit(EV_KEY, dev->evbit) &&
740 	    !is_event_supported(old_keycode, dev->keybit, KEY_MAX) &&
741 	    __test_and_clear_bit(old_keycode, dev->key)) {
742 
743 		input_pass_event(dev, EV_KEY, old_keycode, 0);
744 		if (dev->sync)
745 			input_pass_event(dev, EV_SYN, SYN_REPORT, 1);
746 	}
747 
748  out:
749 	spin_unlock_irqrestore(&dev->event_lock, flags);
750 
751 	return retval;
752 }
753 EXPORT_SYMBOL(input_set_keycode);
754 
755 #define MATCH_BIT(bit, max) \
756 		for (i = 0; i < BITS_TO_LONGS(max); i++) \
757 			if ((id->bit[i] & dev->bit[i]) != id->bit[i]) \
758 				break; \
759 		if (i != BITS_TO_LONGS(max)) \
760 			continue;
761 
762 static const struct input_device_id *input_match_device(struct input_handler *handler,
763 							struct input_dev *dev)
764 {
765 	const struct input_device_id *id;
766 	int i;
767 
768 	for (id = handler->id_table; id->flags || id->driver_info; id++) {
769 
770 		if (id->flags & INPUT_DEVICE_ID_MATCH_BUS)
771 			if (id->bustype != dev->id.bustype)
772 				continue;
773 
774 		if (id->flags & INPUT_DEVICE_ID_MATCH_VENDOR)
775 			if (id->vendor != dev->id.vendor)
776 				continue;
777 
778 		if (id->flags & INPUT_DEVICE_ID_MATCH_PRODUCT)
779 			if (id->product != dev->id.product)
780 				continue;
781 
782 		if (id->flags & INPUT_DEVICE_ID_MATCH_VERSION)
783 			if (id->version != dev->id.version)
784 				continue;
785 
786 		MATCH_BIT(evbit,  EV_MAX);
787 		MATCH_BIT(keybit, KEY_MAX);
788 		MATCH_BIT(relbit, REL_MAX);
789 		MATCH_BIT(absbit, ABS_MAX);
790 		MATCH_BIT(mscbit, MSC_MAX);
791 		MATCH_BIT(ledbit, LED_MAX);
792 		MATCH_BIT(sndbit, SND_MAX);
793 		MATCH_BIT(ffbit,  FF_MAX);
794 		MATCH_BIT(swbit,  SW_MAX);
795 
796 		if (!handler->match || handler->match(handler, dev))
797 			return id;
798 	}
799 
800 	return NULL;
801 }
802 
803 static int input_attach_handler(struct input_dev *dev, struct input_handler *handler)
804 {
805 	const struct input_device_id *id;
806 	int error;
807 
808 	id = input_match_device(handler, dev);
809 	if (!id)
810 		return -ENODEV;
811 
812 	error = handler->connect(handler, dev, id);
813 	if (error && error != -ENODEV)
814 		printk(KERN_ERR
815 			"input: failed to attach handler %s to device %s, "
816 			"error: %d\n",
817 			handler->name, kobject_name(&dev->dev.kobj), error);
818 
819 	return error;
820 }
821 
822 #ifdef CONFIG_COMPAT
823 
824 static int input_bits_to_string(char *buf, int buf_size,
825 				unsigned long bits, bool skip_empty)
826 {
827 	int len = 0;
828 
829 	if (INPUT_COMPAT_TEST) {
830 		u32 dword = bits >> 32;
831 		if (dword || !skip_empty)
832 			len += snprintf(buf, buf_size, "%x ", dword);
833 
834 		dword = bits & 0xffffffffUL;
835 		if (dword || !skip_empty || len)
836 			len += snprintf(buf + len, max(buf_size - len, 0),
837 					"%x", dword);
838 	} else {
839 		if (bits || !skip_empty)
840 			len += snprintf(buf, buf_size, "%lx", bits);
841 	}
842 
843 	return len;
844 }
845 
846 #else /* !CONFIG_COMPAT */
847 
848 static int input_bits_to_string(char *buf, int buf_size,
849 				unsigned long bits, bool skip_empty)
850 {
851 	return bits || !skip_empty ?
852 		snprintf(buf, buf_size, "%lx", bits) : 0;
853 }
854 
855 #endif
856 
857 #ifdef CONFIG_PROC_FS
858 
859 static struct proc_dir_entry *proc_bus_input_dir;
860 static DECLARE_WAIT_QUEUE_HEAD(input_devices_poll_wait);
861 static int input_devices_state;
862 
863 static inline void input_wakeup_procfs_readers(void)
864 {
865 	input_devices_state++;
866 	wake_up(&input_devices_poll_wait);
867 }
868 
869 static unsigned int input_proc_devices_poll(struct file *file, poll_table *wait)
870 {
871 	poll_wait(file, &input_devices_poll_wait, wait);
872 	if (file->f_version != input_devices_state) {
873 		file->f_version = input_devices_state;
874 		return POLLIN | POLLRDNORM;
875 	}
876 
877 	return 0;
878 }
879 
880 union input_seq_state {
881 	struct {
882 		unsigned short pos;
883 		bool mutex_acquired;
884 	};
885 	void *p;
886 };
887 
888 static void *input_devices_seq_start(struct seq_file *seq, loff_t *pos)
889 {
890 	union input_seq_state *state = (union input_seq_state *)&seq->private;
891 	int error;
892 
893 	/* We need to fit into seq->private pointer */
894 	BUILD_BUG_ON(sizeof(union input_seq_state) != sizeof(seq->private));
895 
896 	error = mutex_lock_interruptible(&input_mutex);
897 	if (error) {
898 		state->mutex_acquired = false;
899 		return ERR_PTR(error);
900 	}
901 
902 	state->mutex_acquired = true;
903 
904 	return seq_list_start(&input_dev_list, *pos);
905 }
906 
907 static void *input_devices_seq_next(struct seq_file *seq, void *v, loff_t *pos)
908 {
909 	return seq_list_next(v, &input_dev_list, pos);
910 }
911 
912 static void input_seq_stop(struct seq_file *seq, void *v)
913 {
914 	union input_seq_state *state = (union input_seq_state *)&seq->private;
915 
916 	if (state->mutex_acquired)
917 		mutex_unlock(&input_mutex);
918 }
919 
920 static void input_seq_print_bitmap(struct seq_file *seq, const char *name,
921 				   unsigned long *bitmap, int max)
922 {
923 	int i;
924 	bool skip_empty = true;
925 	char buf[18];
926 
927 	seq_printf(seq, "B: %s=", name);
928 
929 	for (i = BITS_TO_LONGS(max) - 1; i >= 0; i--) {
930 		if (input_bits_to_string(buf, sizeof(buf),
931 					 bitmap[i], skip_empty)) {
932 			skip_empty = false;
933 			seq_printf(seq, "%s%s", buf, i > 0 ? " " : "");
934 		}
935 	}
936 
937 	/*
938 	 * If no output was produced print a single 0.
939 	 */
940 	if (skip_empty)
941 		seq_puts(seq, "0");
942 
943 	seq_putc(seq, '\n');
944 }
945 
946 static int input_devices_seq_show(struct seq_file *seq, void *v)
947 {
948 	struct input_dev *dev = container_of(v, struct input_dev, node);
949 	const char *path = kobject_get_path(&dev->dev.kobj, GFP_KERNEL);
950 	struct input_handle *handle;
951 
952 	seq_printf(seq, "I: Bus=%04x Vendor=%04x Product=%04x Version=%04x\n",
953 		   dev->id.bustype, dev->id.vendor, dev->id.product, dev->id.version);
954 
955 	seq_printf(seq, "N: Name=\"%s\"\n", dev->name ? dev->name : "");
956 	seq_printf(seq, "P: Phys=%s\n", dev->phys ? dev->phys : "");
957 	seq_printf(seq, "S: Sysfs=%s\n", path ? path : "");
958 	seq_printf(seq, "U: Uniq=%s\n", dev->uniq ? dev->uniq : "");
959 	seq_printf(seq, "H: Handlers=");
960 
961 	list_for_each_entry(handle, &dev->h_list, d_node)
962 		seq_printf(seq, "%s ", handle->name);
963 	seq_putc(seq, '\n');
964 
965 	input_seq_print_bitmap(seq, "EV", dev->evbit, EV_MAX);
966 	if (test_bit(EV_KEY, dev->evbit))
967 		input_seq_print_bitmap(seq, "KEY", dev->keybit, KEY_MAX);
968 	if (test_bit(EV_REL, dev->evbit))
969 		input_seq_print_bitmap(seq, "REL", dev->relbit, REL_MAX);
970 	if (test_bit(EV_ABS, dev->evbit))
971 		input_seq_print_bitmap(seq, "ABS", dev->absbit, ABS_MAX);
972 	if (test_bit(EV_MSC, dev->evbit))
973 		input_seq_print_bitmap(seq, "MSC", dev->mscbit, MSC_MAX);
974 	if (test_bit(EV_LED, dev->evbit))
975 		input_seq_print_bitmap(seq, "LED", dev->ledbit, LED_MAX);
976 	if (test_bit(EV_SND, dev->evbit))
977 		input_seq_print_bitmap(seq, "SND", dev->sndbit, SND_MAX);
978 	if (test_bit(EV_FF, dev->evbit))
979 		input_seq_print_bitmap(seq, "FF", dev->ffbit, FF_MAX);
980 	if (test_bit(EV_SW, dev->evbit))
981 		input_seq_print_bitmap(seq, "SW", dev->swbit, SW_MAX);
982 
983 	seq_putc(seq, '\n');
984 
985 	kfree(path);
986 	return 0;
987 }
988 
989 static const struct seq_operations input_devices_seq_ops = {
990 	.start	= input_devices_seq_start,
991 	.next	= input_devices_seq_next,
992 	.stop	= input_seq_stop,
993 	.show	= input_devices_seq_show,
994 };
995 
996 static int input_proc_devices_open(struct inode *inode, struct file *file)
997 {
998 	return seq_open(file, &input_devices_seq_ops);
999 }
1000 
1001 static const struct file_operations input_devices_fileops = {
1002 	.owner		= THIS_MODULE,
1003 	.open		= input_proc_devices_open,
1004 	.poll		= input_proc_devices_poll,
1005 	.read		= seq_read,
1006 	.llseek		= seq_lseek,
1007 	.release	= seq_release,
1008 };
1009 
1010 static void *input_handlers_seq_start(struct seq_file *seq, loff_t *pos)
1011 {
1012 	union input_seq_state *state = (union input_seq_state *)&seq->private;
1013 	int error;
1014 
1015 	/* We need to fit into seq->private pointer */
1016 	BUILD_BUG_ON(sizeof(union input_seq_state) != sizeof(seq->private));
1017 
1018 	error = mutex_lock_interruptible(&input_mutex);
1019 	if (error) {
1020 		state->mutex_acquired = false;
1021 		return ERR_PTR(error);
1022 	}
1023 
1024 	state->mutex_acquired = true;
1025 	state->pos = *pos;
1026 
1027 	return seq_list_start(&input_handler_list, *pos);
1028 }
1029 
1030 static void *input_handlers_seq_next(struct seq_file *seq, void *v, loff_t *pos)
1031 {
1032 	union input_seq_state *state = (union input_seq_state *)&seq->private;
1033 
1034 	state->pos = *pos + 1;
1035 	return seq_list_next(v, &input_handler_list, pos);
1036 }
1037 
1038 static int input_handlers_seq_show(struct seq_file *seq, void *v)
1039 {
1040 	struct input_handler *handler = container_of(v, struct input_handler, node);
1041 	union input_seq_state *state = (union input_seq_state *)&seq->private;
1042 
1043 	seq_printf(seq, "N: Number=%u Name=%s", state->pos, handler->name);
1044 	if (handler->filter)
1045 		seq_puts(seq, " (filter)");
1046 	if (handler->fops)
1047 		seq_printf(seq, " Minor=%d", handler->minor);
1048 	seq_putc(seq, '\n');
1049 
1050 	return 0;
1051 }
1052 
1053 static const struct seq_operations input_handlers_seq_ops = {
1054 	.start	= input_handlers_seq_start,
1055 	.next	= input_handlers_seq_next,
1056 	.stop	= input_seq_stop,
1057 	.show	= input_handlers_seq_show,
1058 };
1059 
1060 static int input_proc_handlers_open(struct inode *inode, struct file *file)
1061 {
1062 	return seq_open(file, &input_handlers_seq_ops);
1063 }
1064 
1065 static const struct file_operations input_handlers_fileops = {
1066 	.owner		= THIS_MODULE,
1067 	.open		= input_proc_handlers_open,
1068 	.read		= seq_read,
1069 	.llseek		= seq_lseek,
1070 	.release	= seq_release,
1071 };
1072 
1073 static int __init input_proc_init(void)
1074 {
1075 	struct proc_dir_entry *entry;
1076 
1077 	proc_bus_input_dir = proc_mkdir("bus/input", NULL);
1078 	if (!proc_bus_input_dir)
1079 		return -ENOMEM;
1080 
1081 	entry = proc_create("devices", 0, proc_bus_input_dir,
1082 			    &input_devices_fileops);
1083 	if (!entry)
1084 		goto fail1;
1085 
1086 	entry = proc_create("handlers", 0, proc_bus_input_dir,
1087 			    &input_handlers_fileops);
1088 	if (!entry)
1089 		goto fail2;
1090 
1091 	return 0;
1092 
1093  fail2:	remove_proc_entry("devices", proc_bus_input_dir);
1094  fail1: remove_proc_entry("bus/input", NULL);
1095 	return -ENOMEM;
1096 }
1097 
1098 static void input_proc_exit(void)
1099 {
1100 	remove_proc_entry("devices", proc_bus_input_dir);
1101 	remove_proc_entry("handlers", proc_bus_input_dir);
1102 	remove_proc_entry("bus/input", NULL);
1103 }
1104 
1105 #else /* !CONFIG_PROC_FS */
1106 static inline void input_wakeup_procfs_readers(void) { }
1107 static inline int input_proc_init(void) { return 0; }
1108 static inline void input_proc_exit(void) { }
1109 #endif
1110 
1111 #define INPUT_DEV_STRING_ATTR_SHOW(name)				\
1112 static ssize_t input_dev_show_##name(struct device *dev,		\
1113 				     struct device_attribute *attr,	\
1114 				     char *buf)				\
1115 {									\
1116 	struct input_dev *input_dev = to_input_dev(dev);		\
1117 									\
1118 	return scnprintf(buf, PAGE_SIZE, "%s\n",			\
1119 			 input_dev->name ? input_dev->name : "");	\
1120 }									\
1121 static DEVICE_ATTR(name, S_IRUGO, input_dev_show_##name, NULL)
1122 
1123 INPUT_DEV_STRING_ATTR_SHOW(name);
1124 INPUT_DEV_STRING_ATTR_SHOW(phys);
1125 INPUT_DEV_STRING_ATTR_SHOW(uniq);
1126 
1127 static int input_print_modalias_bits(char *buf, int size,
1128 				     char name, unsigned long *bm,
1129 				     unsigned int min_bit, unsigned int max_bit)
1130 {
1131 	int len = 0, i;
1132 
1133 	len += snprintf(buf, max(size, 0), "%c", name);
1134 	for (i = min_bit; i < max_bit; i++)
1135 		if (bm[BIT_WORD(i)] & BIT_MASK(i))
1136 			len += snprintf(buf + len, max(size - len, 0), "%X,", i);
1137 	return len;
1138 }
1139 
1140 static int input_print_modalias(char *buf, int size, struct input_dev *id,
1141 				int add_cr)
1142 {
1143 	int len;
1144 
1145 	len = snprintf(buf, max(size, 0),
1146 		       "input:b%04Xv%04Xp%04Xe%04X-",
1147 		       id->id.bustype, id->id.vendor,
1148 		       id->id.product, id->id.version);
1149 
1150 	len += input_print_modalias_bits(buf + len, size - len,
1151 				'e', id->evbit, 0, EV_MAX);
1152 	len += input_print_modalias_bits(buf + len, size - len,
1153 				'k', id->keybit, KEY_MIN_INTERESTING, KEY_MAX);
1154 	len += input_print_modalias_bits(buf + len, size - len,
1155 				'r', id->relbit, 0, REL_MAX);
1156 	len += input_print_modalias_bits(buf + len, size - len,
1157 				'a', id->absbit, 0, ABS_MAX);
1158 	len += input_print_modalias_bits(buf + len, size - len,
1159 				'm', id->mscbit, 0, MSC_MAX);
1160 	len += input_print_modalias_bits(buf + len, size - len,
1161 				'l', id->ledbit, 0, LED_MAX);
1162 	len += input_print_modalias_bits(buf + len, size - len,
1163 				's', id->sndbit, 0, SND_MAX);
1164 	len += input_print_modalias_bits(buf + len, size - len,
1165 				'f', id->ffbit, 0, FF_MAX);
1166 	len += input_print_modalias_bits(buf + len, size - len,
1167 				'w', id->swbit, 0, SW_MAX);
1168 
1169 	if (add_cr)
1170 		len += snprintf(buf + len, max(size - len, 0), "\n");
1171 
1172 	return len;
1173 }
1174 
1175 static ssize_t input_dev_show_modalias(struct device *dev,
1176 				       struct device_attribute *attr,
1177 				       char *buf)
1178 {
1179 	struct input_dev *id = to_input_dev(dev);
1180 	ssize_t len;
1181 
1182 	len = input_print_modalias(buf, PAGE_SIZE, id, 1);
1183 
1184 	return min_t(int, len, PAGE_SIZE);
1185 }
1186 static DEVICE_ATTR(modalias, S_IRUGO, input_dev_show_modalias, NULL);
1187 
1188 static struct attribute *input_dev_attrs[] = {
1189 	&dev_attr_name.attr,
1190 	&dev_attr_phys.attr,
1191 	&dev_attr_uniq.attr,
1192 	&dev_attr_modalias.attr,
1193 	NULL
1194 };
1195 
1196 static struct attribute_group input_dev_attr_group = {
1197 	.attrs	= input_dev_attrs,
1198 };
1199 
1200 #define INPUT_DEV_ID_ATTR(name)						\
1201 static ssize_t input_dev_show_id_##name(struct device *dev,		\
1202 					struct device_attribute *attr,	\
1203 					char *buf)			\
1204 {									\
1205 	struct input_dev *input_dev = to_input_dev(dev);		\
1206 	return scnprintf(buf, PAGE_SIZE, "%04x\n", input_dev->id.name);	\
1207 }									\
1208 static DEVICE_ATTR(name, S_IRUGO, input_dev_show_id_##name, NULL)
1209 
1210 INPUT_DEV_ID_ATTR(bustype);
1211 INPUT_DEV_ID_ATTR(vendor);
1212 INPUT_DEV_ID_ATTR(product);
1213 INPUT_DEV_ID_ATTR(version);
1214 
1215 static struct attribute *input_dev_id_attrs[] = {
1216 	&dev_attr_bustype.attr,
1217 	&dev_attr_vendor.attr,
1218 	&dev_attr_product.attr,
1219 	&dev_attr_version.attr,
1220 	NULL
1221 };
1222 
1223 static struct attribute_group input_dev_id_attr_group = {
1224 	.name	= "id",
1225 	.attrs	= input_dev_id_attrs,
1226 };
1227 
1228 static int input_print_bitmap(char *buf, int buf_size, unsigned long *bitmap,
1229 			      int max, int add_cr)
1230 {
1231 	int i;
1232 	int len = 0;
1233 	bool skip_empty = true;
1234 
1235 	for (i = BITS_TO_LONGS(max) - 1; i >= 0; i--) {
1236 		len += input_bits_to_string(buf + len, max(buf_size - len, 0),
1237 					    bitmap[i], skip_empty);
1238 		if (len) {
1239 			skip_empty = false;
1240 			if (i > 0)
1241 				len += snprintf(buf + len, max(buf_size - len, 0), " ");
1242 		}
1243 	}
1244 
1245 	/*
1246 	 * If no output was produced print a single 0.
1247 	 */
1248 	if (len == 0)
1249 		len = snprintf(buf, buf_size, "%d", 0);
1250 
1251 	if (add_cr)
1252 		len += snprintf(buf + len, max(buf_size - len, 0), "\n");
1253 
1254 	return len;
1255 }
1256 
1257 #define INPUT_DEV_CAP_ATTR(ev, bm)					\
1258 static ssize_t input_dev_show_cap_##bm(struct device *dev,		\
1259 				       struct device_attribute *attr,	\
1260 				       char *buf)			\
1261 {									\
1262 	struct input_dev *input_dev = to_input_dev(dev);		\
1263 	int len = input_print_bitmap(buf, PAGE_SIZE,			\
1264 				     input_dev->bm##bit, ev##_MAX,	\
1265 				     true);				\
1266 	return min_t(int, len, PAGE_SIZE);				\
1267 }									\
1268 static DEVICE_ATTR(bm, S_IRUGO, input_dev_show_cap_##bm, NULL)
1269 
1270 INPUT_DEV_CAP_ATTR(EV, ev);
1271 INPUT_DEV_CAP_ATTR(KEY, key);
1272 INPUT_DEV_CAP_ATTR(REL, rel);
1273 INPUT_DEV_CAP_ATTR(ABS, abs);
1274 INPUT_DEV_CAP_ATTR(MSC, msc);
1275 INPUT_DEV_CAP_ATTR(LED, led);
1276 INPUT_DEV_CAP_ATTR(SND, snd);
1277 INPUT_DEV_CAP_ATTR(FF, ff);
1278 INPUT_DEV_CAP_ATTR(SW, sw);
1279 
1280 static struct attribute *input_dev_caps_attrs[] = {
1281 	&dev_attr_ev.attr,
1282 	&dev_attr_key.attr,
1283 	&dev_attr_rel.attr,
1284 	&dev_attr_abs.attr,
1285 	&dev_attr_msc.attr,
1286 	&dev_attr_led.attr,
1287 	&dev_attr_snd.attr,
1288 	&dev_attr_ff.attr,
1289 	&dev_attr_sw.attr,
1290 	NULL
1291 };
1292 
1293 static struct attribute_group input_dev_caps_attr_group = {
1294 	.name	= "capabilities",
1295 	.attrs	= input_dev_caps_attrs,
1296 };
1297 
1298 static const struct attribute_group *input_dev_attr_groups[] = {
1299 	&input_dev_attr_group,
1300 	&input_dev_id_attr_group,
1301 	&input_dev_caps_attr_group,
1302 	NULL
1303 };
1304 
1305 static void input_dev_release(struct device *device)
1306 {
1307 	struct input_dev *dev = to_input_dev(device);
1308 
1309 	input_ff_destroy(dev);
1310 	input_mt_destroy_slots(dev);
1311 	kfree(dev);
1312 
1313 	module_put(THIS_MODULE);
1314 }
1315 
1316 /*
1317  * Input uevent interface - loading event handlers based on
1318  * device bitfields.
1319  */
1320 static int input_add_uevent_bm_var(struct kobj_uevent_env *env,
1321 				   const char *name, unsigned long *bitmap, int max)
1322 {
1323 	int len;
1324 
1325 	if (add_uevent_var(env, "%s=", name))
1326 		return -ENOMEM;
1327 
1328 	len = input_print_bitmap(&env->buf[env->buflen - 1],
1329 				 sizeof(env->buf) - env->buflen,
1330 				 bitmap, max, false);
1331 	if (len >= (sizeof(env->buf) - env->buflen))
1332 		return -ENOMEM;
1333 
1334 	env->buflen += len;
1335 	return 0;
1336 }
1337 
1338 static int input_add_uevent_modalias_var(struct kobj_uevent_env *env,
1339 					 struct input_dev *dev)
1340 {
1341 	int len;
1342 
1343 	if (add_uevent_var(env, "MODALIAS="))
1344 		return -ENOMEM;
1345 
1346 	len = input_print_modalias(&env->buf[env->buflen - 1],
1347 				   sizeof(env->buf) - env->buflen,
1348 				   dev, 0);
1349 	if (len >= (sizeof(env->buf) - env->buflen))
1350 		return -ENOMEM;
1351 
1352 	env->buflen += len;
1353 	return 0;
1354 }
1355 
1356 #define INPUT_ADD_HOTPLUG_VAR(fmt, val...)				\
1357 	do {								\
1358 		int err = add_uevent_var(env, fmt, val);		\
1359 		if (err)						\
1360 			return err;					\
1361 	} while (0)
1362 
1363 #define INPUT_ADD_HOTPLUG_BM_VAR(name, bm, max)				\
1364 	do {								\
1365 		int err = input_add_uevent_bm_var(env, name, bm, max);	\
1366 		if (err)						\
1367 			return err;					\
1368 	} while (0)
1369 
1370 #define INPUT_ADD_HOTPLUG_MODALIAS_VAR(dev)				\
1371 	do {								\
1372 		int err = input_add_uevent_modalias_var(env, dev);	\
1373 		if (err)						\
1374 			return err;					\
1375 	} while (0)
1376 
1377 static int input_dev_uevent(struct device *device, struct kobj_uevent_env *env)
1378 {
1379 	struct input_dev *dev = to_input_dev(device);
1380 
1381 	INPUT_ADD_HOTPLUG_VAR("PRODUCT=%x/%x/%x/%x",
1382 				dev->id.bustype, dev->id.vendor,
1383 				dev->id.product, dev->id.version);
1384 	if (dev->name)
1385 		INPUT_ADD_HOTPLUG_VAR("NAME=\"%s\"", dev->name);
1386 	if (dev->phys)
1387 		INPUT_ADD_HOTPLUG_VAR("PHYS=\"%s\"", dev->phys);
1388 	if (dev->uniq)
1389 		INPUT_ADD_HOTPLUG_VAR("UNIQ=\"%s\"", dev->uniq);
1390 
1391 	INPUT_ADD_HOTPLUG_BM_VAR("EV=", dev->evbit, EV_MAX);
1392 	if (test_bit(EV_KEY, dev->evbit))
1393 		INPUT_ADD_HOTPLUG_BM_VAR("KEY=", dev->keybit, KEY_MAX);
1394 	if (test_bit(EV_REL, dev->evbit))
1395 		INPUT_ADD_HOTPLUG_BM_VAR("REL=", dev->relbit, REL_MAX);
1396 	if (test_bit(EV_ABS, dev->evbit))
1397 		INPUT_ADD_HOTPLUG_BM_VAR("ABS=", dev->absbit, ABS_MAX);
1398 	if (test_bit(EV_MSC, dev->evbit))
1399 		INPUT_ADD_HOTPLUG_BM_VAR("MSC=", dev->mscbit, MSC_MAX);
1400 	if (test_bit(EV_LED, dev->evbit))
1401 		INPUT_ADD_HOTPLUG_BM_VAR("LED=", dev->ledbit, LED_MAX);
1402 	if (test_bit(EV_SND, dev->evbit))
1403 		INPUT_ADD_HOTPLUG_BM_VAR("SND=", dev->sndbit, SND_MAX);
1404 	if (test_bit(EV_FF, dev->evbit))
1405 		INPUT_ADD_HOTPLUG_BM_VAR("FF=", dev->ffbit, FF_MAX);
1406 	if (test_bit(EV_SW, dev->evbit))
1407 		INPUT_ADD_HOTPLUG_BM_VAR("SW=", dev->swbit, SW_MAX);
1408 
1409 	INPUT_ADD_HOTPLUG_MODALIAS_VAR(dev);
1410 
1411 	return 0;
1412 }
1413 
1414 #define INPUT_DO_TOGGLE(dev, type, bits, on)				\
1415 	do {								\
1416 		int i;							\
1417 		bool active;						\
1418 									\
1419 		if (!test_bit(EV_##type, dev->evbit))			\
1420 			break;						\
1421 									\
1422 		for (i = 0; i < type##_MAX; i++) {			\
1423 			if (!test_bit(i, dev->bits##bit))		\
1424 				continue;				\
1425 									\
1426 			active = test_bit(i, dev->bits);		\
1427 			if (!active && !on)				\
1428 				continue;				\
1429 									\
1430 			dev->event(dev, EV_##type, i, on ? active : 0);	\
1431 		}							\
1432 	} while (0)
1433 
1434 #ifdef CONFIG_PM
1435 static void input_dev_reset(struct input_dev *dev, bool activate)
1436 {
1437 	if (!dev->event)
1438 		return;
1439 
1440 	INPUT_DO_TOGGLE(dev, LED, led, activate);
1441 	INPUT_DO_TOGGLE(dev, SND, snd, activate);
1442 
1443 	if (activate && test_bit(EV_REP, dev->evbit)) {
1444 		dev->event(dev, EV_REP, REP_PERIOD, dev->rep[REP_PERIOD]);
1445 		dev->event(dev, EV_REP, REP_DELAY, dev->rep[REP_DELAY]);
1446 	}
1447 }
1448 
1449 static int input_dev_suspend(struct device *dev)
1450 {
1451 	struct input_dev *input_dev = to_input_dev(dev);
1452 
1453 	mutex_lock(&input_dev->mutex);
1454 	input_dev_reset(input_dev, false);
1455 	mutex_unlock(&input_dev->mutex);
1456 
1457 	return 0;
1458 }
1459 
1460 static int input_dev_resume(struct device *dev)
1461 {
1462 	struct input_dev *input_dev = to_input_dev(dev);
1463 
1464 	mutex_lock(&input_dev->mutex);
1465 	input_dev_reset(input_dev, true);
1466 
1467 	/*
1468 	 * Keys that have been pressed at suspend time are unlikely
1469 	 * to be still pressed when we resume.
1470 	 */
1471 	spin_lock_irq(&input_dev->event_lock);
1472 	input_dev_release_keys(input_dev);
1473 	spin_unlock_irq(&input_dev->event_lock);
1474 
1475 	mutex_unlock(&input_dev->mutex);
1476 
1477 	return 0;
1478 }
1479 
1480 static const struct dev_pm_ops input_dev_pm_ops = {
1481 	.suspend	= input_dev_suspend,
1482 	.resume		= input_dev_resume,
1483 	.poweroff	= input_dev_suspend,
1484 	.restore	= input_dev_resume,
1485 };
1486 #endif /* CONFIG_PM */
1487 
1488 static struct device_type input_dev_type = {
1489 	.groups		= input_dev_attr_groups,
1490 	.release	= input_dev_release,
1491 	.uevent		= input_dev_uevent,
1492 #ifdef CONFIG_PM
1493 	.pm		= &input_dev_pm_ops,
1494 #endif
1495 };
1496 
1497 static char *input_devnode(struct device *dev, mode_t *mode)
1498 {
1499 	return kasprintf(GFP_KERNEL, "input/%s", dev_name(dev));
1500 }
1501 
1502 struct class input_class = {
1503 	.name		= "input",
1504 	.devnode	= input_devnode,
1505 };
1506 EXPORT_SYMBOL_GPL(input_class);
1507 
1508 /**
1509  * input_allocate_device - allocate memory for new input device
1510  *
1511  * Returns prepared struct input_dev or NULL.
1512  *
1513  * NOTE: Use input_free_device() to free devices that have not been
1514  * registered; input_unregister_device() should be used for already
1515  * registered devices.
1516  */
1517 struct input_dev *input_allocate_device(void)
1518 {
1519 	struct input_dev *dev;
1520 
1521 	dev = kzalloc(sizeof(struct input_dev), GFP_KERNEL);
1522 	if (dev) {
1523 		dev->dev.type = &input_dev_type;
1524 		dev->dev.class = &input_class;
1525 		device_initialize(&dev->dev);
1526 		mutex_init(&dev->mutex);
1527 		spin_lock_init(&dev->event_lock);
1528 		INIT_LIST_HEAD(&dev->h_list);
1529 		INIT_LIST_HEAD(&dev->node);
1530 
1531 		__module_get(THIS_MODULE);
1532 	}
1533 
1534 	return dev;
1535 }
1536 EXPORT_SYMBOL(input_allocate_device);
1537 
1538 /**
1539  * input_free_device - free memory occupied by input_dev structure
1540  * @dev: input device to free
1541  *
1542  * This function should only be used if input_register_device()
1543  * was not called yet or if it failed. Once device was registered
1544  * use input_unregister_device() and memory will be freed once last
1545  * reference to the device is dropped.
1546  *
1547  * Device should be allocated by input_allocate_device().
1548  *
1549  * NOTE: If there are references to the input device then memory
1550  * will not be freed until last reference is dropped.
1551  */
1552 void input_free_device(struct input_dev *dev)
1553 {
1554 	if (dev)
1555 		input_put_device(dev);
1556 }
1557 EXPORT_SYMBOL(input_free_device);
1558 
1559 /**
1560  * input_mt_create_slots() - create MT input slots
1561  * @dev: input device supporting MT events and finger tracking
1562  * @num_slots: number of slots used by the device
1563  *
1564  * This function allocates all necessary memory for MT slot handling
1565  * in the input device, and adds ABS_MT_SLOT to the device capabilities.
1566  */
1567 int input_mt_create_slots(struct input_dev *dev, unsigned int num_slots)
1568 {
1569 	if (!num_slots)
1570 		return 0;
1571 
1572 	dev->mt = kcalloc(num_slots, sizeof(struct input_mt_slot), GFP_KERNEL);
1573 	if (!dev->mt)
1574 		return -ENOMEM;
1575 
1576 	dev->mtsize = num_slots;
1577 	input_set_abs_params(dev, ABS_MT_SLOT, 0, num_slots - 1, 0, 0);
1578 
1579 	return 0;
1580 }
1581 EXPORT_SYMBOL(input_mt_create_slots);
1582 
1583 /**
1584  * input_mt_destroy_slots() - frees the MT slots of the input device
1585  * @dev: input device with allocated MT slots
1586  *
1587  * This function is only needed in error path as the input core will
1588  * automatically free the MT slots when the device is destroyed.
1589  */
1590 void input_mt_destroy_slots(struct input_dev *dev)
1591 {
1592 	kfree(dev->mt);
1593 	dev->mt = NULL;
1594 	dev->mtsize = 0;
1595 }
1596 EXPORT_SYMBOL(input_mt_destroy_slots);
1597 
1598 /**
1599  * input_set_capability - mark device as capable of a certain event
1600  * @dev: device that is capable of emitting or accepting event
1601  * @type: type of the event (EV_KEY, EV_REL, etc...)
1602  * @code: event code
1603  *
1604  * In addition to setting up corresponding bit in appropriate capability
1605  * bitmap the function also adjusts dev->evbit.
1606  */
1607 void input_set_capability(struct input_dev *dev, unsigned int type, unsigned int code)
1608 {
1609 	switch (type) {
1610 	case EV_KEY:
1611 		__set_bit(code, dev->keybit);
1612 		break;
1613 
1614 	case EV_REL:
1615 		__set_bit(code, dev->relbit);
1616 		break;
1617 
1618 	case EV_ABS:
1619 		__set_bit(code, dev->absbit);
1620 		break;
1621 
1622 	case EV_MSC:
1623 		__set_bit(code, dev->mscbit);
1624 		break;
1625 
1626 	case EV_SW:
1627 		__set_bit(code, dev->swbit);
1628 		break;
1629 
1630 	case EV_LED:
1631 		__set_bit(code, dev->ledbit);
1632 		break;
1633 
1634 	case EV_SND:
1635 		__set_bit(code, dev->sndbit);
1636 		break;
1637 
1638 	case EV_FF:
1639 		__set_bit(code, dev->ffbit);
1640 		break;
1641 
1642 	case EV_PWR:
1643 		/* do nothing */
1644 		break;
1645 
1646 	default:
1647 		printk(KERN_ERR
1648 			"input_set_capability: unknown type %u (code %u)\n",
1649 			type, code);
1650 		dump_stack();
1651 		return;
1652 	}
1653 
1654 	__set_bit(type, dev->evbit);
1655 }
1656 EXPORT_SYMBOL(input_set_capability);
1657 
1658 #define INPUT_CLEANSE_BITMASK(dev, type, bits)				\
1659 	do {								\
1660 		if (!test_bit(EV_##type, dev->evbit))			\
1661 			memset(dev->bits##bit, 0,			\
1662 				sizeof(dev->bits##bit));		\
1663 	} while (0)
1664 
1665 static void input_cleanse_bitmasks(struct input_dev *dev)
1666 {
1667 	INPUT_CLEANSE_BITMASK(dev, KEY, key);
1668 	INPUT_CLEANSE_BITMASK(dev, REL, rel);
1669 	INPUT_CLEANSE_BITMASK(dev, ABS, abs);
1670 	INPUT_CLEANSE_BITMASK(dev, MSC, msc);
1671 	INPUT_CLEANSE_BITMASK(dev, LED, led);
1672 	INPUT_CLEANSE_BITMASK(dev, SND, snd);
1673 	INPUT_CLEANSE_BITMASK(dev, FF, ff);
1674 	INPUT_CLEANSE_BITMASK(dev, SW, sw);
1675 }
1676 
1677 /**
1678  * input_register_device - register device with input core
1679  * @dev: device to be registered
1680  *
1681  * This function registers device with input core. The device must be
1682  * allocated with input_allocate_device() and all it's capabilities
1683  * set up before registering.
1684  * If function fails the device must be freed with input_free_device().
1685  * Once device has been successfully registered it can be unregistered
1686  * with input_unregister_device(); input_free_device() should not be
1687  * called in this case.
1688  */
1689 int input_register_device(struct input_dev *dev)
1690 {
1691 	static atomic_t input_no = ATOMIC_INIT(0);
1692 	struct input_handler *handler;
1693 	const char *path;
1694 	int error;
1695 
1696 	/* Every input device generates EV_SYN/SYN_REPORT events. */
1697 	__set_bit(EV_SYN, dev->evbit);
1698 
1699 	/* KEY_RESERVED is not supposed to be transmitted to userspace. */
1700 	__clear_bit(KEY_RESERVED, dev->keybit);
1701 
1702 	/* Make sure that bitmasks not mentioned in dev->evbit are clean. */
1703 	input_cleanse_bitmasks(dev);
1704 
1705 	/*
1706 	 * If delay and period are pre-set by the driver, then autorepeating
1707 	 * is handled by the driver itself and we don't do it in input.c.
1708 	 */
1709 	init_timer(&dev->timer);
1710 	if (!dev->rep[REP_DELAY] && !dev->rep[REP_PERIOD]) {
1711 		dev->timer.data = (long) dev;
1712 		dev->timer.function = input_repeat_key;
1713 		dev->rep[REP_DELAY] = 250;
1714 		dev->rep[REP_PERIOD] = 33;
1715 	}
1716 
1717 	if (!dev->getkeycode)
1718 		dev->getkeycode = input_default_getkeycode;
1719 
1720 	if (!dev->setkeycode)
1721 		dev->setkeycode = input_default_setkeycode;
1722 
1723 	dev_set_name(&dev->dev, "input%ld",
1724 		     (unsigned long) atomic_inc_return(&input_no) - 1);
1725 
1726 	error = device_add(&dev->dev);
1727 	if (error)
1728 		return error;
1729 
1730 	path = kobject_get_path(&dev->dev.kobj, GFP_KERNEL);
1731 	printk(KERN_INFO "input: %s as %s\n",
1732 		dev->name ? dev->name : "Unspecified device", path ? path : "N/A");
1733 	kfree(path);
1734 
1735 	error = mutex_lock_interruptible(&input_mutex);
1736 	if (error) {
1737 		device_del(&dev->dev);
1738 		return error;
1739 	}
1740 
1741 	list_add_tail(&dev->node, &input_dev_list);
1742 
1743 	list_for_each_entry(handler, &input_handler_list, node)
1744 		input_attach_handler(dev, handler);
1745 
1746 	input_wakeup_procfs_readers();
1747 
1748 	mutex_unlock(&input_mutex);
1749 
1750 	return 0;
1751 }
1752 EXPORT_SYMBOL(input_register_device);
1753 
1754 /**
1755  * input_unregister_device - unregister previously registered device
1756  * @dev: device to be unregistered
1757  *
1758  * This function unregisters an input device. Once device is unregistered
1759  * the caller should not try to access it as it may get freed at any moment.
1760  */
1761 void input_unregister_device(struct input_dev *dev)
1762 {
1763 	struct input_handle *handle, *next;
1764 
1765 	input_disconnect_device(dev);
1766 
1767 	mutex_lock(&input_mutex);
1768 
1769 	list_for_each_entry_safe(handle, next, &dev->h_list, d_node)
1770 		handle->handler->disconnect(handle);
1771 	WARN_ON(!list_empty(&dev->h_list));
1772 
1773 	del_timer_sync(&dev->timer);
1774 	list_del_init(&dev->node);
1775 
1776 	input_wakeup_procfs_readers();
1777 
1778 	mutex_unlock(&input_mutex);
1779 
1780 	device_unregister(&dev->dev);
1781 }
1782 EXPORT_SYMBOL(input_unregister_device);
1783 
1784 /**
1785  * input_register_handler - register a new input handler
1786  * @handler: handler to be registered
1787  *
1788  * This function registers a new input handler (interface) for input
1789  * devices in the system and attaches it to all input devices that
1790  * are compatible with the handler.
1791  */
1792 int input_register_handler(struct input_handler *handler)
1793 {
1794 	struct input_dev *dev;
1795 	int retval;
1796 
1797 	retval = mutex_lock_interruptible(&input_mutex);
1798 	if (retval)
1799 		return retval;
1800 
1801 	INIT_LIST_HEAD(&handler->h_list);
1802 
1803 	if (handler->fops != NULL) {
1804 		if (input_table[handler->minor >> 5]) {
1805 			retval = -EBUSY;
1806 			goto out;
1807 		}
1808 		input_table[handler->minor >> 5] = handler;
1809 	}
1810 
1811 	list_add_tail(&handler->node, &input_handler_list);
1812 
1813 	list_for_each_entry(dev, &input_dev_list, node)
1814 		input_attach_handler(dev, handler);
1815 
1816 	input_wakeup_procfs_readers();
1817 
1818  out:
1819 	mutex_unlock(&input_mutex);
1820 	return retval;
1821 }
1822 EXPORT_SYMBOL(input_register_handler);
1823 
1824 /**
1825  * input_unregister_handler - unregisters an input handler
1826  * @handler: handler to be unregistered
1827  *
1828  * This function disconnects a handler from its input devices and
1829  * removes it from lists of known handlers.
1830  */
1831 void input_unregister_handler(struct input_handler *handler)
1832 {
1833 	struct input_handle *handle, *next;
1834 
1835 	mutex_lock(&input_mutex);
1836 
1837 	list_for_each_entry_safe(handle, next, &handler->h_list, h_node)
1838 		handler->disconnect(handle);
1839 	WARN_ON(!list_empty(&handler->h_list));
1840 
1841 	list_del_init(&handler->node);
1842 
1843 	if (handler->fops != NULL)
1844 		input_table[handler->minor >> 5] = NULL;
1845 
1846 	input_wakeup_procfs_readers();
1847 
1848 	mutex_unlock(&input_mutex);
1849 }
1850 EXPORT_SYMBOL(input_unregister_handler);
1851 
1852 /**
1853  * input_handler_for_each_handle - handle iterator
1854  * @handler: input handler to iterate
1855  * @data: data for the callback
1856  * @fn: function to be called for each handle
1857  *
1858  * Iterate over @bus's list of devices, and call @fn for each, passing
1859  * it @data and stop when @fn returns a non-zero value. The function is
1860  * using RCU to traverse the list and therefore may be usind in atonic
1861  * contexts. The @fn callback is invoked from RCU critical section and
1862  * thus must not sleep.
1863  */
1864 int input_handler_for_each_handle(struct input_handler *handler, void *data,
1865 				  int (*fn)(struct input_handle *, void *))
1866 {
1867 	struct input_handle *handle;
1868 	int retval = 0;
1869 
1870 	rcu_read_lock();
1871 
1872 	list_for_each_entry_rcu(handle, &handler->h_list, h_node) {
1873 		retval = fn(handle, data);
1874 		if (retval)
1875 			break;
1876 	}
1877 
1878 	rcu_read_unlock();
1879 
1880 	return retval;
1881 }
1882 EXPORT_SYMBOL(input_handler_for_each_handle);
1883 
1884 /**
1885  * input_register_handle - register a new input handle
1886  * @handle: handle to register
1887  *
1888  * This function puts a new input handle onto device's
1889  * and handler's lists so that events can flow through
1890  * it once it is opened using input_open_device().
1891  *
1892  * This function is supposed to be called from handler's
1893  * connect() method.
1894  */
1895 int input_register_handle(struct input_handle *handle)
1896 {
1897 	struct input_handler *handler = handle->handler;
1898 	struct input_dev *dev = handle->dev;
1899 	int error;
1900 
1901 	/*
1902 	 * We take dev->mutex here to prevent race with
1903 	 * input_release_device().
1904 	 */
1905 	error = mutex_lock_interruptible(&dev->mutex);
1906 	if (error)
1907 		return error;
1908 
1909 	/*
1910 	 * Filters go to the head of the list, normal handlers
1911 	 * to the tail.
1912 	 */
1913 	if (handler->filter)
1914 		list_add_rcu(&handle->d_node, &dev->h_list);
1915 	else
1916 		list_add_tail_rcu(&handle->d_node, &dev->h_list);
1917 
1918 	mutex_unlock(&dev->mutex);
1919 
1920 	/*
1921 	 * Since we are supposed to be called from ->connect()
1922 	 * which is mutually exclusive with ->disconnect()
1923 	 * we can't be racing with input_unregister_handle()
1924 	 * and so separate lock is not needed here.
1925 	 */
1926 	list_add_tail_rcu(&handle->h_node, &handler->h_list);
1927 
1928 	if (handler->start)
1929 		handler->start(handle);
1930 
1931 	return 0;
1932 }
1933 EXPORT_SYMBOL(input_register_handle);
1934 
1935 /**
1936  * input_unregister_handle - unregister an input handle
1937  * @handle: handle to unregister
1938  *
1939  * This function removes input handle from device's
1940  * and handler's lists.
1941  *
1942  * This function is supposed to be called from handler's
1943  * disconnect() method.
1944  */
1945 void input_unregister_handle(struct input_handle *handle)
1946 {
1947 	struct input_dev *dev = handle->dev;
1948 
1949 	list_del_rcu(&handle->h_node);
1950 
1951 	/*
1952 	 * Take dev->mutex to prevent race with input_release_device().
1953 	 */
1954 	mutex_lock(&dev->mutex);
1955 	list_del_rcu(&handle->d_node);
1956 	mutex_unlock(&dev->mutex);
1957 
1958 	synchronize_rcu();
1959 }
1960 EXPORT_SYMBOL(input_unregister_handle);
1961 
1962 static int input_open_file(struct inode *inode, struct file *file)
1963 {
1964 	struct input_handler *handler;
1965 	const struct file_operations *old_fops, *new_fops = NULL;
1966 	int err;
1967 
1968 	err = mutex_lock_interruptible(&input_mutex);
1969 	if (err)
1970 		return err;
1971 
1972 	/* No load-on-demand here? */
1973 	handler = input_table[iminor(inode) >> 5];
1974 	if (handler)
1975 		new_fops = fops_get(handler->fops);
1976 
1977 	mutex_unlock(&input_mutex);
1978 
1979 	/*
1980 	 * That's _really_ odd. Usually NULL ->open means "nothing special",
1981 	 * not "no device". Oh, well...
1982 	 */
1983 	if (!new_fops || !new_fops->open) {
1984 		fops_put(new_fops);
1985 		err = -ENODEV;
1986 		goto out;
1987 	}
1988 
1989 	old_fops = file->f_op;
1990 	file->f_op = new_fops;
1991 
1992 	err = new_fops->open(inode, file);
1993 	if (err) {
1994 		fops_put(file->f_op);
1995 		file->f_op = fops_get(old_fops);
1996 	}
1997 	fops_put(old_fops);
1998 out:
1999 	return err;
2000 }
2001 
2002 static const struct file_operations input_fops = {
2003 	.owner = THIS_MODULE,
2004 	.open = input_open_file,
2005 };
2006 
2007 static int __init input_init(void)
2008 {
2009 	int err;
2010 
2011 	err = class_register(&input_class);
2012 	if (err) {
2013 		printk(KERN_ERR "input: unable to register input_dev class\n");
2014 		return err;
2015 	}
2016 
2017 	err = input_proc_init();
2018 	if (err)
2019 		goto fail1;
2020 
2021 	err = register_chrdev(INPUT_MAJOR, "input", &input_fops);
2022 	if (err) {
2023 		printk(KERN_ERR "input: unable to register char major %d", INPUT_MAJOR);
2024 		goto fail2;
2025 	}
2026 
2027 	return 0;
2028 
2029  fail2:	input_proc_exit();
2030  fail1:	class_unregister(&input_class);
2031 	return err;
2032 }
2033 
2034 static void __exit input_exit(void)
2035 {
2036 	input_proc_exit();
2037 	unregister_chrdev(INPUT_MAJOR, "input");
2038 	class_unregister(&input_class);
2039 }
2040 
2041 subsys_initcall(input_init);
2042 module_exit(input_exit);
2043