HID: roccat: potential out of bounds in pyra_sysfs_write_settings()
[pandora-kernel.git] / drivers / hid / hid-input.c
1 /*
2  *  Copyright (c) 2000-2001 Vojtech Pavlik
3  *  Copyright (c) 2006-2010 Jiri Kosina
4  *
5  *  HID to Linux Input mapping
6  */
7
8 /*
9  * This program is free software; you can redistribute it and/or modify
10  * it under the terms of the GNU General Public License as published by
11  * the Free Software Foundation; either version 2 of the License, or
12  * (at your option) any later version.
13  *
14  * This program is distributed in the hope that it will be useful,
15  * but WITHOUT ANY WARRANTY; without even the implied warranty of
16  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
17  * GNU General Public License for more details.
18  *
19  * You should have received a copy of the GNU General Public License
20  * along with this program; if not, write to the Free Software
21  * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
22  *
23  * Should you need to contact me, the author, you can do so either by
24  * e-mail - mail your message to <vojtech@ucw.cz>, or by paper mail:
25  * Vojtech Pavlik, Simunkova 1594, Prague 8, 182 00 Czech Republic
26  */
27
28 #include <linux/module.h>
29 #include <linux/slab.h>
30 #include <linux/kernel.h>
31
32 #include <linux/hid.h>
33 #include <linux/hid-debug.h>
34
35 #include "hid-ids.h"
36
37 #define unk     KEY_UNKNOWN
38
39 static const unsigned char hid_keyboard[256] = {
40           0,  0,  0,  0, 30, 48, 46, 32, 18, 33, 34, 35, 23, 36, 37, 38,
41          50, 49, 24, 25, 16, 19, 31, 20, 22, 47, 17, 45, 21, 44,  2,  3,
42           4,  5,  6,  7,  8,  9, 10, 11, 28,  1, 14, 15, 57, 12, 13, 26,
43          27, 43, 43, 39, 40, 41, 51, 52, 53, 58, 59, 60, 61, 62, 63, 64,
44          65, 66, 67, 68, 87, 88, 99, 70,119,110,102,104,111,107,109,106,
45         105,108,103, 69, 98, 55, 74, 78, 96, 79, 80, 81, 75, 76, 77, 71,
46          72, 73, 82, 83, 86,127,116,117,183,184,185,186,187,188,189,190,
47         191,192,193,194,134,138,130,132,128,129,131,137,133,135,136,113,
48         115,114,unk,unk,unk,121,unk, 89, 93,124, 92, 94, 95,unk,unk,unk,
49         122,123, 90, 91, 85,unk,unk,unk,unk,unk,unk,unk,111,unk,unk,unk,
50         unk,unk,unk,unk,unk,unk,unk,unk,unk,unk,unk,unk,unk,unk,unk,unk,
51         unk,unk,unk,unk,unk,unk,179,180,unk,unk,unk,unk,unk,unk,unk,unk,
52         unk,unk,unk,unk,unk,unk,unk,unk,unk,unk,unk,unk,unk,unk,unk,unk,
53         unk,unk,unk,unk,unk,unk,unk,unk,111,unk,unk,unk,unk,unk,unk,unk,
54          29, 42, 56,125, 97, 54,100,126,164,166,165,163,161,115,114,113,
55         150,158,159,128,136,177,178,176,142,152,173,140,unk,unk,unk,unk
56 };
57
58 static const struct {
59         __s32 x;
60         __s32 y;
61 }  hid_hat_to_axis[] = {{ 0, 0}, { 0,-1}, { 1,-1}, { 1, 0}, { 1, 1}, { 0, 1}, {-1, 1}, {-1, 0}, {-1,-1}};
62
63 #define map_abs(c)      hid_map_usage(hidinput, usage, &bit, &max, EV_ABS, (c))
64 #define map_rel(c)      hid_map_usage(hidinput, usage, &bit, &max, EV_REL, (c))
65 #define map_key(c)      hid_map_usage(hidinput, usage, &bit, &max, EV_KEY, (c))
66 #define map_led(c)      hid_map_usage(hidinput, usage, &bit, &max, EV_LED, (c))
67
68 #define map_abs_clear(c)        hid_map_usage_clear(hidinput, usage, &bit, \
69                 &max, EV_ABS, (c))
70 #define map_key_clear(c)        hid_map_usage_clear(hidinput, usage, &bit, \
71                 &max, EV_KEY, (c))
72
73 static bool match_scancode(struct hid_usage *usage,
74                            unsigned int cur_idx, unsigned int scancode)
75 {
76         return (usage->hid & (HID_USAGE_PAGE | HID_USAGE)) == scancode;
77 }
78
79 static bool match_keycode(struct hid_usage *usage,
80                           unsigned int cur_idx, unsigned int keycode)
81 {
82         /*
83          * We should exclude unmapped usages when doing lookup by keycode.
84          */
85         return (usage->type == EV_KEY && usage->code == keycode);
86 }
87
88 static bool match_index(struct hid_usage *usage,
89                         unsigned int cur_idx, unsigned int idx)
90 {
91         return cur_idx == idx;
92 }
93
94 typedef bool (*hid_usage_cmp_t)(struct hid_usage *usage,
95                                 unsigned int cur_idx, unsigned int val);
96
97 static struct hid_usage *hidinput_find_key(struct hid_device *hid,
98                                            hid_usage_cmp_t match,
99                                            unsigned int value,
100                                            unsigned int *usage_idx)
101 {
102         unsigned int i, j, k, cur_idx = 0;
103         struct hid_report *report;
104         struct hid_usage *usage;
105
106         for (k = HID_INPUT_REPORT; k <= HID_OUTPUT_REPORT; k++) {
107                 list_for_each_entry(report, &hid->report_enum[k].report_list, list) {
108                         for (i = 0; i < report->maxfield; i++) {
109                                 for (j = 0; j < report->field[i]->maxusage; j++) {
110                                         usage = report->field[i]->usage + j;
111                                         if (usage->type == EV_KEY || usage->type == 0) {
112                                                 if (match(usage, cur_idx, value)) {
113                                                         if (usage_idx)
114                                                                 *usage_idx = cur_idx;
115                                                         return usage;
116                                                 }
117                                                 cur_idx++;
118                                         }
119                                 }
120                         }
121                 }
122         }
123         return NULL;
124 }
125
126 static struct hid_usage *hidinput_locate_usage(struct hid_device *hid,
127                                         const struct input_keymap_entry *ke,
128                                         unsigned int *index)
129 {
130         struct hid_usage *usage;
131         unsigned int scancode;
132
133         if (ke->flags & INPUT_KEYMAP_BY_INDEX)
134                 usage = hidinput_find_key(hid, match_index, ke->index, index);
135         else if (input_scancode_to_scalar(ke, &scancode) == 0)
136                 usage = hidinput_find_key(hid, match_scancode, scancode, index);
137         else
138                 usage = NULL;
139
140         return usage;
141 }
142
143 static int hidinput_getkeycode(struct input_dev *dev,
144                                struct input_keymap_entry *ke)
145 {
146         struct hid_device *hid = input_get_drvdata(dev);
147         struct hid_usage *usage;
148         unsigned int scancode, index;
149
150         usage = hidinput_locate_usage(hid, ke, &index);
151         if (usage) {
152                 ke->keycode = usage->type == EV_KEY ?
153                                 usage->code : KEY_RESERVED;
154                 ke->index = index;
155                 scancode = usage->hid & (HID_USAGE_PAGE | HID_USAGE);
156                 ke->len = sizeof(scancode);
157                 memcpy(ke->scancode, &scancode, sizeof(scancode));
158                 return 0;
159         }
160
161         return -EINVAL;
162 }
163
164 static int hidinput_setkeycode(struct input_dev *dev,
165                                const struct input_keymap_entry *ke,
166                                unsigned int *old_keycode)
167 {
168         struct hid_device *hid = input_get_drvdata(dev);
169         struct hid_usage *usage;
170
171         usage = hidinput_locate_usage(hid, ke, NULL);
172         if (usage) {
173                 *old_keycode = usage->type == EV_KEY ?
174                                 usage->code : KEY_RESERVED;
175                 usage->code = ke->keycode;
176
177                 clear_bit(*old_keycode, dev->keybit);
178                 set_bit(usage->code, dev->keybit);
179                 dbg_hid("Assigned keycode %d to HID usage code %x\n",
180                         usage->code, usage->hid);
181
182                 /*
183                  * Set the keybit for the old keycode if the old keycode is used
184                  * by another key
185                  */
186                 if (hidinput_find_key(hid, match_keycode, *old_keycode, NULL))
187                         set_bit(*old_keycode, dev->keybit);
188
189                 return 0;
190         }
191
192         return -EINVAL;
193 }
194
195
196 /**
197  * hidinput_calc_abs_res - calculate an absolute axis resolution
198  * @field: the HID report field to calculate resolution for
199  * @code: axis code
200  *
201  * The formula is:
202  *                         (logical_maximum - logical_minimum)
203  * resolution = ----------------------------------------------------------
204  *              (physical_maximum - physical_minimum) * 10 ^ unit_exponent
205  *
206  * as seen in the HID specification v1.11 6.2.2.7 Global Items.
207  *
208  * Only exponent 1 length units are processed. Centimeters and inches are
209  * converted to millimeters. Degrees are converted to radians.
210  */
211 __s32 hidinput_calc_abs_res(const struct hid_field *field, __u16 code)
212 {
213         __s32 unit_exponent = field->unit_exponent;
214         __s32 logical_extents = field->logical_maximum -
215                                         field->logical_minimum;
216         __s32 physical_extents = field->physical_maximum -
217                                         field->physical_minimum;
218         __s32 prev;
219
220         /* Check if the extents are sane */
221         if (logical_extents <= 0 || physical_extents <= 0)
222                 return 0;
223
224         /*
225          * Verify and convert units.
226          * See HID specification v1.11 6.2.2.7 Global Items for unit decoding
227          */
228         switch (code) {
229         case ABS_X:
230         case ABS_Y:
231         case ABS_Z:
232         case ABS_MT_POSITION_X:
233         case ABS_MT_POSITION_Y:
234         case ABS_MT_TOOL_X:
235         case ABS_MT_TOOL_Y:
236         case ABS_MT_TOUCH_MAJOR:
237         case ABS_MT_TOUCH_MINOR:
238                 if (field->unit == 0x11) {              /* If centimeters */
239                         /* Convert to millimeters */
240                         unit_exponent += 1;
241                 } else if (field->unit == 0x13) {       /* If inches */
242                         /* Convert to millimeters */
243                         prev = physical_extents;
244                         physical_extents *= 254;
245                         if (physical_extents < prev)
246                                 return 0;
247                         unit_exponent -= 1;
248                 } else {
249                         return 0;
250                 }
251                 break;
252
253         case ABS_RX:
254         case ABS_RY:
255         case ABS_RZ:
256         case ABS_TILT_X:
257         case ABS_TILT_Y:
258                 if (field->unit == 0x14) {              /* If degrees */
259                         /* Convert to radians */
260                         prev = logical_extents;
261                         logical_extents *= 573;
262                         if (logical_extents < prev)
263                                 return 0;
264                         unit_exponent += 1;
265                 } else if (field->unit != 0x12) {       /* If not radians */
266                         return 0;
267                 }
268                 break;
269
270         default:
271                 return 0;
272         }
273
274         /* Apply negative unit exponent */
275         for (; unit_exponent < 0; unit_exponent++) {
276                 prev = logical_extents;
277                 logical_extents *= 10;
278                 if (logical_extents < prev)
279                         return 0;
280         }
281         /* Apply positive unit exponent */
282         for (; unit_exponent > 0; unit_exponent--) {
283                 prev = physical_extents;
284                 physical_extents *= 10;
285                 if (physical_extents < prev)
286                         return 0;
287         }
288
289         /* Calculate resolution */
290         return DIV_ROUND_CLOSEST(logical_extents, physical_extents);
291 }
292 EXPORT_SYMBOL_GPL(hidinput_calc_abs_res);
293
294 #ifdef CONFIG_HID_BATTERY_STRENGTH
295 static enum power_supply_property hidinput_battery_props[] = {
296         POWER_SUPPLY_PROP_PRESENT,
297         POWER_SUPPLY_PROP_ONLINE,
298         POWER_SUPPLY_PROP_CAPACITY,
299         POWER_SUPPLY_PROP_MODEL_NAME,
300         POWER_SUPPLY_PROP_STATUS,
301         POWER_SUPPLY_PROP_SCOPE,
302 };
303
304 #define HID_BATTERY_QUIRK_PERCENT       (1 << 0) /* always reports percent */
305 #define HID_BATTERY_QUIRK_FEATURE       (1 << 1) /* ask for feature report */
306
307 static const struct hid_device_id hid_battery_quirks[] = {
308         { HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_APPLE,
309                         USB_DEVICE_ID_APPLE_ALU_WIRELESS_2009_ISO),
310         HID_BATTERY_QUIRK_PERCENT | HID_BATTERY_QUIRK_FEATURE },
311         { HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_APPLE,
312                                USB_DEVICE_ID_APPLE_ALU_WIRELESS_2011_ANSI),
313           HID_BATTERY_QUIRK_PERCENT | HID_BATTERY_QUIRK_FEATURE },
314         { HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_APPLE,
315                                USB_DEVICE_ID_APPLE_ALU_WIRELESS_2011_ISO),
316           HID_BATTERY_QUIRK_PERCENT | HID_BATTERY_QUIRK_FEATURE },
317         { HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_APPLE,
318                 USB_DEVICE_ID_APPLE_ALU_WIRELESS_ANSI),
319           HID_BATTERY_QUIRK_PERCENT | HID_BATTERY_QUIRK_FEATURE },
320         {}
321 };
322
323 static unsigned find_battery_quirk(struct hid_device *hdev)
324 {
325         unsigned quirks = 0;
326         const struct hid_device_id *match;
327
328         match = hid_match_id(hdev, hid_battery_quirks);
329         if (match != NULL)
330                 quirks = match->driver_data;
331
332         return quirks;
333 }
334
335 static int hidinput_get_battery_property(struct power_supply *psy,
336                                          enum power_supply_property prop,
337                                          union power_supply_propval *val)
338 {
339         struct hid_device *dev = container_of(psy, struct hid_device, battery);
340         int ret = 0;
341         __u8 *buf;
342
343         switch (prop) {
344         case POWER_SUPPLY_PROP_PRESENT:
345         case POWER_SUPPLY_PROP_ONLINE:
346                 val->intval = 1;
347                 break;
348
349         case POWER_SUPPLY_PROP_CAPACITY:
350
351                 buf = kmalloc(2 * sizeof(__u8), GFP_KERNEL);
352                 if (!buf) {
353                         ret = -ENOMEM;
354                         break;
355                 }
356                 ret = hid_hw_raw_request(dev, dev->battery_report_id, buf, 2,
357                                          dev->battery_report_type,
358                                          HID_REQ_GET_REPORT);
359
360                 if (ret != 2) {
361                         ret = -ENODATA;
362                         kfree(buf);
363                         break;
364                 }
365                 ret = 0;
366
367                 if (dev->battery_min < dev->battery_max &&
368                     buf[1] >= dev->battery_min &&
369                     buf[1] <= dev->battery_max)
370                         val->intval = (100 * (buf[1] - dev->battery_min)) /
371                                 (dev->battery_max - dev->battery_min);
372                 kfree(buf);
373                 break;
374
375         case POWER_SUPPLY_PROP_MODEL_NAME:
376                 val->strval = dev->name;
377                 break;
378
379         case POWER_SUPPLY_PROP_STATUS:
380                 val->intval = POWER_SUPPLY_STATUS_DISCHARGING;
381                 break;
382
383         case POWER_SUPPLY_PROP_SCOPE:
384                 val->intval = POWER_SUPPLY_SCOPE_DEVICE;
385                 break;
386
387         default:
388                 ret = -EINVAL;
389                 break;
390         }
391
392         return ret;
393 }
394
395 static bool hidinput_setup_battery(struct hid_device *dev, unsigned report_type, struct hid_field *field)
396 {
397         struct power_supply *battery = &dev->battery;
398         int ret;
399         unsigned quirks;
400         s32 min, max;
401
402         if (field->usage->hid != HID_DC_BATTERYSTRENGTH)
403                 return false;   /* no match */
404
405         if (battery->name != NULL)
406                 goto out;       /* already initialized? */
407
408         battery->name = kasprintf(GFP_KERNEL, "hid-%s-battery", dev->uniq);
409         if (battery->name == NULL)
410                 goto out;
411
412         battery->type = POWER_SUPPLY_TYPE_BATTERY;
413         battery->properties = hidinput_battery_props;
414         battery->num_properties = ARRAY_SIZE(hidinput_battery_props);
415         battery->use_for_apm = 0;
416         battery->get_property = hidinput_get_battery_property;
417
418         quirks = find_battery_quirk(dev);
419
420         hid_dbg(dev, "device %x:%x:%x %d quirks %d\n",
421                 dev->bus, dev->vendor, dev->product, dev->version, quirks);
422
423         min = field->logical_minimum;
424         max = field->logical_maximum;
425
426         if (quirks & HID_BATTERY_QUIRK_PERCENT) {
427                 min = 0;
428                 max = 100;
429         }
430
431         if (quirks & HID_BATTERY_QUIRK_FEATURE)
432                 report_type = HID_FEATURE_REPORT;
433
434         dev->battery_min = min;
435         dev->battery_max = max;
436         dev->battery_report_type = report_type;
437         dev->battery_report_id = field->report->id;
438
439         ret = power_supply_register(&dev->dev, battery);
440         if (ret != 0) {
441                 hid_warn(dev, "can't register power supply: %d\n", ret);
442                 kfree(battery->name);
443                 battery->name = NULL;
444         }
445
446         power_supply_powers(battery, &dev->dev);
447
448 out:
449         return true;
450 }
451
452 static void hidinput_cleanup_battery(struct hid_device *dev)
453 {
454         if (!dev->battery.name)
455                 return;
456
457         power_supply_unregister(&dev->battery);
458         kfree(dev->battery.name);
459         dev->battery.name = NULL;
460 }
461 #else  /* !CONFIG_HID_BATTERY_STRENGTH */
462 static bool hidinput_setup_battery(struct hid_device *dev, unsigned report_type,
463                                    struct hid_field *field)
464 {
465         return false;
466 }
467
468 static void hidinput_cleanup_battery(struct hid_device *dev)
469 {
470 }
471 #endif  /* CONFIG_HID_BATTERY_STRENGTH */
472
473 static void hidinput_configure_usage(struct hid_input *hidinput, struct hid_field *field,
474                                      struct hid_usage *usage)
475 {
476         struct input_dev *input = hidinput->input;
477         struct hid_device *device = input_get_drvdata(input);
478         int max = 0, code;
479         unsigned long *bit = NULL;
480
481         field->hidinput = hidinput;
482
483         if (field->flags & HID_MAIN_ITEM_CONSTANT)
484                 goto ignore;
485
486         /* Ignore if report count is out of bounds. */
487         if (field->report_count < 1)
488                 goto ignore;
489
490         /* only LED usages are supported in output fields */
491         if (field->report_type == HID_OUTPUT_REPORT &&
492                         (usage->hid & HID_USAGE_PAGE) != HID_UP_LED) {
493                 goto ignore;
494         }
495
496         if (device->driver->input_mapping) {
497                 int ret = device->driver->input_mapping(device, hidinput, field,
498                                 usage, &bit, &max);
499                 if (ret > 0)
500                         goto mapped;
501                 if (ret < 0)
502                         goto ignore;
503         }
504
505         switch (usage->hid & HID_USAGE_PAGE) {
506         case HID_UP_UNDEFINED:
507                 goto ignore;
508
509         case HID_UP_KEYBOARD:
510                 set_bit(EV_REP, input->evbit);
511
512                 if ((usage->hid & HID_USAGE) < 256) {
513                         if (!hid_keyboard[usage->hid & HID_USAGE]) goto ignore;
514                         map_key_clear(hid_keyboard[usage->hid & HID_USAGE]);
515                 } else
516                         map_key(KEY_UNKNOWN);
517
518                 break;
519
520         case HID_UP_BUTTON:
521                 code = ((usage->hid - 1) & HID_USAGE);
522
523                 switch (field->application) {
524                 case HID_GD_MOUSE:
525                 case HID_GD_POINTER:  code += BTN_MOUSE; break;
526                 case HID_GD_JOYSTICK:
527                                 if (code <= 0xf)
528                                         code += BTN_JOYSTICK;
529                                 else
530                                         code += BTN_TRIGGER_HAPPY - 0x10;
531                                 break;
532                 case HID_GD_GAMEPAD:
533                                 if (code <= 0xf)
534                                         code += BTN_GAMEPAD;
535                                 else
536                                         code += BTN_TRIGGER_HAPPY - 0x10;
537                                 break;
538                 default:
539                         switch (field->physical) {
540                         case HID_GD_MOUSE:
541                         case HID_GD_POINTER:  code += BTN_MOUSE; break;
542                         case HID_GD_JOYSTICK: code += BTN_JOYSTICK; break;
543                         case HID_GD_GAMEPAD:  code += BTN_GAMEPAD; break;
544                         default:              code += BTN_MISC;
545                         }
546                 }
547
548                 map_key(code);
549                 break;
550
551         case HID_UP_SIMULATION:
552                 switch (usage->hid & 0xffff) {
553                 case 0xba: map_abs(ABS_RUDDER);   break;
554                 case 0xbb: map_abs(ABS_THROTTLE); break;
555                 case 0xc4: map_abs(ABS_GAS);      break;
556                 case 0xc5: map_abs(ABS_BRAKE);    break;
557                 case 0xc8: map_abs(ABS_WHEEL);    break;
558                 default:   goto ignore;
559                 }
560                 break;
561
562         case HID_UP_GENDESK:
563                 if ((usage->hid & 0xf0) == 0x80) {      /* SystemControl */
564                         switch (usage->hid & 0xf) {
565                         case 0x1: map_key_clear(KEY_POWER);  break;
566                         case 0x2: map_key_clear(KEY_SLEEP);  break;
567                         case 0x3: map_key_clear(KEY_WAKEUP); break;
568                         case 0x4: map_key_clear(KEY_CONTEXT_MENU); break;
569                         case 0x5: map_key_clear(KEY_MENU); break;
570                         case 0x6: map_key_clear(KEY_PROG1); break;
571                         case 0x7: map_key_clear(KEY_HELP); break;
572                         case 0x8: map_key_clear(KEY_EXIT); break;
573                         case 0x9: map_key_clear(KEY_SELECT); break;
574                         case 0xa: map_key_clear(KEY_RIGHT); break;
575                         case 0xb: map_key_clear(KEY_LEFT); break;
576                         case 0xc: map_key_clear(KEY_UP); break;
577                         case 0xd: map_key_clear(KEY_DOWN); break;
578                         case 0xe: map_key_clear(KEY_POWER2); break;
579                         case 0xf: map_key_clear(KEY_RESTART); break;
580                         default: goto unknown;
581                         }
582                         break;
583                 }
584
585                 if ((usage->hid & 0xf0) == 0x90) {      /* D-pad */
586                         switch (usage->hid) {
587                         case HID_GD_UP:    usage->hat_dir = 1; break;
588                         case HID_GD_DOWN:  usage->hat_dir = 5; break;
589                         case HID_GD_RIGHT: usage->hat_dir = 3; break;
590                         case HID_GD_LEFT:  usage->hat_dir = 7; break;
591                         default: goto unknown;
592                         }
593                         if (field->dpad) {
594                                 map_abs(field->dpad);
595                                 goto ignore;
596                         }
597                         map_abs(ABS_HAT0X);
598                         break;
599                 }
600
601                 switch (usage->hid) {
602                 /* These usage IDs map directly to the usage codes. */
603                 case HID_GD_X: case HID_GD_Y: case HID_GD_Z:
604                 case HID_GD_RX: case HID_GD_RY: case HID_GD_RZ:
605                         if (field->flags & HID_MAIN_ITEM_RELATIVE)
606                                 map_rel(usage->hid & 0xf);
607                         else
608                                 map_abs_clear(usage->hid & 0xf);
609                         break;
610
611                 case HID_GD_SLIDER: case HID_GD_DIAL: case HID_GD_WHEEL:
612                         if (field->flags & HID_MAIN_ITEM_RELATIVE)
613                                 map_rel(usage->hid & 0xf);
614                         else
615                                 map_abs(usage->hid & 0xf);
616                         break;
617
618                 case HID_GD_HATSWITCH:
619                         usage->hat_min = field->logical_minimum;
620                         usage->hat_max = field->logical_maximum;
621                         map_abs(ABS_HAT0X);
622                         break;
623
624                 case HID_GD_START:      map_key_clear(BTN_START);       break;
625                 case HID_GD_SELECT:     map_key_clear(BTN_SELECT);      break;
626
627                 default: goto unknown;
628                 }
629
630                 break;
631
632         case HID_UP_LED:
633                 switch (usage->hid & 0xffff) {                /* HID-Value:                   */
634                 case 0x01:  map_led (LED_NUML);     break;    /*   "Num Lock"                 */
635                 case 0x02:  map_led (LED_CAPSL);    break;    /*   "Caps Lock"                */
636                 case 0x03:  map_led (LED_SCROLLL);  break;    /*   "Scroll Lock"              */
637                 case 0x04:  map_led (LED_COMPOSE);  break;    /*   "Compose"                  */
638                 case 0x05:  map_led (LED_KANA);     break;    /*   "Kana"                     */
639                 case 0x27:  map_led (LED_SLEEP);    break;    /*   "Stand-By"                 */
640                 case 0x4c:  map_led (LED_SUSPEND);  break;    /*   "System Suspend"           */
641                 case 0x09:  map_led (LED_MUTE);     break;    /*   "Mute"                     */
642                 case 0x4b:  map_led (LED_MISC);     break;    /*   "Generic Indicator"        */
643                 case 0x19:  map_led (LED_MAIL);     break;    /*   "Message Waiting"          */
644                 case 0x4d:  map_led (LED_CHARGING); break;    /*   "External Power Connected" */
645
646                 default: goto ignore;
647                 }
648                 break;
649
650         case HID_UP_DIGITIZER:
651                 switch (usage->hid & 0xff) {
652                 case 0x00: /* Undefined */
653                         goto ignore;
654
655                 case 0x30: /* TipPressure */
656                         if (!test_bit(BTN_TOUCH, input->keybit)) {
657                                 device->quirks |= HID_QUIRK_NOTOUCH;
658                                 set_bit(EV_KEY, input->evbit);
659                                 set_bit(BTN_TOUCH, input->keybit);
660                         }
661                         map_abs_clear(ABS_PRESSURE);
662                         break;
663
664                 case 0x32: /* InRange */
665                         switch (field->physical & 0xff) {
666                         case 0x21: map_key(BTN_TOOL_MOUSE); break;
667                         case 0x22: map_key(BTN_TOOL_FINGER); break;
668                         default: map_key(BTN_TOOL_PEN); break;
669                         }
670                         break;
671
672                 case 0x3c: /* Invert */
673                         map_key_clear(BTN_TOOL_RUBBER);
674                         break;
675
676                 case 0x3d: /* X Tilt */
677                         map_abs_clear(ABS_TILT_X);
678                         break;
679
680                 case 0x3e: /* Y Tilt */
681                         map_abs_clear(ABS_TILT_Y);
682                         break;
683
684                 case 0x33: /* Touch */
685                 case 0x42: /* TipSwitch */
686                 case 0x43: /* TipSwitch2 */
687                         device->quirks &= ~HID_QUIRK_NOTOUCH;
688                         map_key_clear(BTN_TOUCH);
689                         break;
690
691                 case 0x44: /* BarrelSwitch */
692                         map_key_clear(BTN_STYLUS);
693                         break;
694
695                 case 0x46: /* TabletPick */
696                 case 0x5a: /* SecondaryBarrelSwitch */
697                         map_key_clear(BTN_STYLUS2);
698                         break;
699
700                 case 0x5b: /* TransducerSerialNumber */
701                         usage->type = EV_MSC;
702                         usage->code = MSC_SERIAL;
703                         bit = input->mscbit;
704                         max = MSC_MAX;
705                         break;
706
707                 default:  goto unknown;
708                 }
709                 break;
710
711         case HID_UP_CONSUMER:   /* USB HUT v1.12, pages 75-84 */
712                 switch (usage->hid & HID_USAGE) {
713                 case 0x000: goto ignore;
714                 case 0x030: map_key_clear(KEY_POWER);           break;
715                 case 0x031: map_key_clear(KEY_RESTART);         break;
716                 case 0x032: map_key_clear(KEY_SLEEP);           break;
717                 case 0x034: map_key_clear(KEY_SLEEP);           break;
718                 case 0x035: map_key_clear(KEY_KBDILLUMTOGGLE);  break;
719                 case 0x036: map_key_clear(BTN_MISC);            break;
720
721                 case 0x040: map_key_clear(KEY_MENU);            break; /* Menu */
722                 case 0x041: map_key_clear(KEY_SELECT);          break; /* Menu Pick */
723                 case 0x042: map_key_clear(KEY_UP);              break; /* Menu Up */
724                 case 0x043: map_key_clear(KEY_DOWN);            break; /* Menu Down */
725                 case 0x044: map_key_clear(KEY_LEFT);            break; /* Menu Left */
726                 case 0x045: map_key_clear(KEY_RIGHT);           break; /* Menu Right */
727                 case 0x046: map_key_clear(KEY_ESC);             break; /* Menu Escape */
728                 case 0x047: map_key_clear(KEY_KPPLUS);          break; /* Menu Value Increase */
729                 case 0x048: map_key_clear(KEY_KPMINUS);         break; /* Menu Value Decrease */
730
731                 case 0x060: map_key_clear(KEY_INFO);            break; /* Data On Screen */
732                 case 0x061: map_key_clear(KEY_SUBTITLE);        break; /* Closed Caption */
733                 case 0x063: map_key_clear(KEY_VCR);             break; /* VCR/TV */
734                 case 0x065: map_key_clear(KEY_CAMERA);          break; /* Snapshot */
735                 case 0x069: map_key_clear(KEY_RED);             break;
736                 case 0x06a: map_key_clear(KEY_GREEN);           break;
737                 case 0x06b: map_key_clear(KEY_BLUE);            break;
738                 case 0x06c: map_key_clear(KEY_YELLOW);          break;
739                 case 0x06d: map_key_clear(KEY_ZOOM);            break;
740
741                 case 0x06f: map_key_clear(KEY_BRIGHTNESSUP);            break;
742                 case 0x070: map_key_clear(KEY_BRIGHTNESSDOWN);          break;
743                 case 0x072: map_key_clear(KEY_BRIGHTNESS_TOGGLE);       break;
744                 case 0x073: map_key_clear(KEY_BRIGHTNESS_MIN);          break;
745                 case 0x074: map_key_clear(KEY_BRIGHTNESS_MAX);          break;
746                 case 0x075: map_key_clear(KEY_BRIGHTNESS_AUTO);         break;
747
748                 case 0x082: map_key_clear(KEY_VIDEO_NEXT);      break;
749                 case 0x083: map_key_clear(KEY_LAST);            break;
750                 case 0x084: map_key_clear(KEY_ENTER);           break;
751                 case 0x088: map_key_clear(KEY_PC);              break;
752                 case 0x089: map_key_clear(KEY_TV);              break;
753                 case 0x08a: map_key_clear(KEY_WWW);             break;
754                 case 0x08b: map_key_clear(KEY_DVD);             break;
755                 case 0x08c: map_key_clear(KEY_PHONE);           break;
756                 case 0x08d: map_key_clear(KEY_PROGRAM);         break;
757                 case 0x08e: map_key_clear(KEY_VIDEOPHONE);      break;
758                 case 0x08f: map_key_clear(KEY_GAMES);           break;
759                 case 0x090: map_key_clear(KEY_MEMO);            break;
760                 case 0x091: map_key_clear(KEY_CD);              break;
761                 case 0x092: map_key_clear(KEY_VCR);             break;
762                 case 0x093: map_key_clear(KEY_TUNER);           break;
763                 case 0x094: map_key_clear(KEY_EXIT);            break;
764                 case 0x095: map_key_clear(KEY_HELP);            break;
765                 case 0x096: map_key_clear(KEY_TAPE);            break;
766                 case 0x097: map_key_clear(KEY_TV2);             break;
767                 case 0x098: map_key_clear(KEY_SAT);             break;
768                 case 0x09a: map_key_clear(KEY_PVR);             break;
769
770                 case 0x09c: map_key_clear(KEY_CHANNELUP);       break;
771                 case 0x09d: map_key_clear(KEY_CHANNELDOWN);     break;
772                 case 0x0a0: map_key_clear(KEY_VCR2);            break;
773
774                 case 0x0b0: map_key_clear(KEY_PLAY);            break;
775                 case 0x0b1: map_key_clear(KEY_PAUSE);           break;
776                 case 0x0b2: map_key_clear(KEY_RECORD);          break;
777                 case 0x0b3: map_key_clear(KEY_FASTFORWARD);     break;
778                 case 0x0b4: map_key_clear(KEY_REWIND);          break;
779                 case 0x0b5: map_key_clear(KEY_NEXTSONG);        break;
780                 case 0x0b6: map_key_clear(KEY_PREVIOUSSONG);    break;
781                 case 0x0b7: map_key_clear(KEY_STOPCD);          break;
782                 case 0x0b8: map_key_clear(KEY_EJECTCD);         break;
783                 case 0x0bc: map_key_clear(KEY_MEDIA_REPEAT);    break;
784                 case 0x0b9: map_key_clear(KEY_SHUFFLE);         break;
785                 case 0x0bf: map_key_clear(KEY_SLOW);            break;
786
787                 case 0x0cd: map_key_clear(KEY_PLAYPAUSE);       break;
788                 case 0x0cf: map_key_clear(KEY_VOICECOMMAND);    break;
789                 case 0x0e0: map_abs_clear(ABS_VOLUME);          break;
790                 case 0x0e2: map_key_clear(KEY_MUTE);            break;
791                 case 0x0e5: map_key_clear(KEY_BASSBOOST);       break;
792                 case 0x0e9: map_key_clear(KEY_VOLUMEUP);        break;
793                 case 0x0ea: map_key_clear(KEY_VOLUMEDOWN);      break;
794                 case 0x0f5: map_key_clear(KEY_SLOW);            break;
795
796                 case 0x181: map_key_clear(KEY_BUTTONCONFIG);    break;
797                 case 0x182: map_key_clear(KEY_BOOKMARKS);       break;
798                 case 0x183: map_key_clear(KEY_CONFIG);          break;
799                 case 0x184: map_key_clear(KEY_WORDPROCESSOR);   break;
800                 case 0x185: map_key_clear(KEY_EDITOR);          break;
801                 case 0x186: map_key_clear(KEY_SPREADSHEET);     break;
802                 case 0x187: map_key_clear(KEY_GRAPHICSEDITOR);  break;
803                 case 0x188: map_key_clear(KEY_PRESENTATION);    break;
804                 case 0x189: map_key_clear(KEY_DATABASE);        break;
805                 case 0x18a: map_key_clear(KEY_MAIL);            break;
806                 case 0x18b: map_key_clear(KEY_NEWS);            break;
807                 case 0x18c: map_key_clear(KEY_VOICEMAIL);       break;
808                 case 0x18d: map_key_clear(KEY_ADDRESSBOOK);     break;
809                 case 0x18e: map_key_clear(KEY_CALENDAR);        break;
810                 case 0x18f: map_key_clear(KEY_TASKMANAGER);     break;
811                 case 0x190: map_key_clear(KEY_JOURNAL);         break;
812                 case 0x191: map_key_clear(KEY_FINANCE);         break;
813                 case 0x192: map_key_clear(KEY_CALC);            break;
814                 case 0x193: map_key_clear(KEY_PLAYER);          break;
815                 case 0x194: map_key_clear(KEY_FILE);            break;
816                 case 0x196: map_key_clear(KEY_WWW);             break;
817                 case 0x199: map_key_clear(KEY_CHAT);            break;
818                 case 0x19c: map_key_clear(KEY_LOGOFF);          break;
819                 case 0x19e: map_key_clear(KEY_COFFEE);          break;
820                 case 0x19f: map_key_clear(KEY_CONTROLPANEL);            break;
821                 case 0x1a2: map_key_clear(KEY_APPSELECT);               break;
822                 case 0x1a3: map_key_clear(KEY_NEXT);            break;
823                 case 0x1a4: map_key_clear(KEY_PREVIOUS);        break;
824                 case 0x1a6: map_key_clear(KEY_HELP);            break;
825                 case 0x1a7: map_key_clear(KEY_DOCUMENTS);       break;
826                 case 0x1ab: map_key_clear(KEY_SPELLCHECK);      break;
827                 case 0x1ae: map_key_clear(KEY_KEYBOARD);        break;
828                 case 0x1b1: map_key_clear(KEY_SCREENSAVER);             break;
829                 case 0x1b4: map_key_clear(KEY_FILE);            break;
830                 case 0x1b6: map_key_clear(KEY_IMAGES);          break;
831                 case 0x1b7: map_key_clear(KEY_AUDIO);           break;
832                 case 0x1b8: map_key_clear(KEY_VIDEO);           break;
833                 case 0x1bc: map_key_clear(KEY_MESSENGER);       break;
834                 case 0x1bd: map_key_clear(KEY_INFO);            break;
835                 case 0x201: map_key_clear(KEY_NEW);             break;
836                 case 0x202: map_key_clear(KEY_OPEN);            break;
837                 case 0x203: map_key_clear(KEY_CLOSE);           break;
838                 case 0x204: map_key_clear(KEY_EXIT);            break;
839                 case 0x207: map_key_clear(KEY_SAVE);            break;
840                 case 0x208: map_key_clear(KEY_PRINT);           break;
841                 case 0x209: map_key_clear(KEY_PROPS);           break;
842                 case 0x21a: map_key_clear(KEY_UNDO);            break;
843                 case 0x21b: map_key_clear(KEY_COPY);            break;
844                 case 0x21c: map_key_clear(KEY_CUT);             break;
845                 case 0x21d: map_key_clear(KEY_PASTE);           break;
846                 case 0x21f: map_key_clear(KEY_FIND);            break;
847                 case 0x221: map_key_clear(KEY_SEARCH);          break;
848                 case 0x222: map_key_clear(KEY_GOTO);            break;
849                 case 0x223: map_key_clear(KEY_HOMEPAGE);        break;
850                 case 0x224: map_key_clear(KEY_BACK);            break;
851                 case 0x225: map_key_clear(KEY_FORWARD);         break;
852                 case 0x226: map_key_clear(KEY_STOP);            break;
853                 case 0x227: map_key_clear(KEY_REFRESH);         break;
854                 case 0x22a: map_key_clear(KEY_BOOKMARKS);       break;
855                 case 0x22d: map_key_clear(KEY_ZOOMIN);          break;
856                 case 0x22e: map_key_clear(KEY_ZOOMOUT);         break;
857                 case 0x22f: map_key_clear(KEY_ZOOMRESET);       break;
858                 case 0x233: map_key_clear(KEY_SCROLLUP);        break;
859                 case 0x234: map_key_clear(KEY_SCROLLDOWN);      break;
860                 case 0x238: map_rel(REL_HWHEEL);                break;
861                 case 0x23d: map_key_clear(KEY_EDIT);            break;
862                 case 0x25f: map_key_clear(KEY_CANCEL);          break;
863                 case 0x269: map_key_clear(KEY_INSERT);          break;
864                 case 0x26a: map_key_clear(KEY_DELETE);          break;
865                 case 0x279: map_key_clear(KEY_REDO);            break;
866
867                 case 0x289: map_key_clear(KEY_REPLY);           break;
868                 case 0x28b: map_key_clear(KEY_FORWARDMAIL);     break;
869                 case 0x28c: map_key_clear(KEY_SEND);            break;
870
871                 case 0x2c7: map_key_clear(KEY_KBDINPUTASSIST_PREV);             break;
872                 case 0x2c8: map_key_clear(KEY_KBDINPUTASSIST_NEXT);             break;
873                 case 0x2c9: map_key_clear(KEY_KBDINPUTASSIST_PREVGROUP);                break;
874                 case 0x2ca: map_key_clear(KEY_KBDINPUTASSIST_NEXTGROUP);                break;
875                 case 0x2cb: map_key_clear(KEY_KBDINPUTASSIST_ACCEPT);   break;
876                 case 0x2cc: map_key_clear(KEY_KBDINPUTASSIST_CANCEL);   break;
877
878                 default: map_key_clear(KEY_UNKNOWN);
879                 }
880                 break;
881
882         case HID_UP_GENDEVCTRLS:
883                 if (hidinput_setup_battery(device, HID_INPUT_REPORT, field))
884                         goto ignore;
885                 else
886                         goto unknown;
887                 break;
888
889         case HID_UP_HPVENDOR:   /* Reported on a Dutch layout HP5308 */
890                 set_bit(EV_REP, input->evbit);
891                 switch (usage->hid & HID_USAGE) {
892                 case 0x021: map_key_clear(KEY_PRINT);           break;
893                 case 0x070: map_key_clear(KEY_HP);              break;
894                 case 0x071: map_key_clear(KEY_CAMERA);          break;
895                 case 0x072: map_key_clear(KEY_SOUND);           break;
896                 case 0x073: map_key_clear(KEY_QUESTION);        break;
897                 case 0x080: map_key_clear(KEY_EMAIL);           break;
898                 case 0x081: map_key_clear(KEY_CHAT);            break;
899                 case 0x082: map_key_clear(KEY_SEARCH);          break;
900                 case 0x083: map_key_clear(KEY_CONNECT);         break;
901                 case 0x084: map_key_clear(KEY_FINANCE);         break;
902                 case 0x085: map_key_clear(KEY_SPORT);           break;
903                 case 0x086: map_key_clear(KEY_SHOP);            break;
904                 default:    goto ignore;
905                 }
906                 break;
907
908         case HID_UP_HPVENDOR2:
909                 set_bit(EV_REP, input->evbit);
910                 switch (usage->hid & HID_USAGE) {
911                 case 0x003: map_key_clear(KEY_BRIGHTNESSDOWN);  break;
912                 case 0x004: map_key_clear(KEY_BRIGHTNESSUP);    break;
913                 default:    goto ignore;
914                 }
915                 break;
916
917         case HID_UP_MSVENDOR:
918                 goto ignore;
919
920         case HID_UP_CUSTOM: /* Reported on Logitech and Apple USB keyboards */
921                 set_bit(EV_REP, input->evbit);
922                 goto ignore;
923
924         case HID_UP_LOGIVENDOR:
925                 goto ignore;
926
927         case HID_UP_PID:
928                 switch (usage->hid & HID_USAGE) {
929                 case 0xa4: map_key_clear(BTN_DEAD);     break;
930                 default: goto ignore;
931                 }
932                 break;
933
934         default:
935         unknown:
936                 if (field->report_size == 1) {
937                         if (field->report->type == HID_OUTPUT_REPORT) {
938                                 map_led(LED_MISC);
939                                 break;
940                         }
941                         map_key(BTN_MISC);
942                         break;
943                 }
944                 if (field->flags & HID_MAIN_ITEM_RELATIVE) {
945                         map_rel(REL_MISC);
946                         break;
947                 }
948                 map_abs(ABS_MISC);
949                 break;
950         }
951
952 mapped:
953         if (device->driver->input_mapped && device->driver->input_mapped(device,
954                                 hidinput, field, usage, &bit, &max) < 0)
955                 goto ignore;
956
957         set_bit(usage->type, input->evbit);
958
959         while (usage->code <= max && test_and_set_bit(usage->code, bit))
960                 usage->code = find_next_zero_bit(bit, max + 1, usage->code);
961
962         if (usage->code > max)
963                 goto ignore;
964
965
966         if (usage->type == EV_ABS) {
967
968                 int a = field->logical_minimum;
969                 int b = field->logical_maximum;
970
971                 if ((device->quirks & HID_QUIRK_BADPAD) && (usage->code == ABS_X || usage->code == ABS_Y)) {
972                         a = field->logical_minimum = 0;
973                         b = field->logical_maximum = 255;
974                 }
975
976                 if (field->application == HID_GD_GAMEPAD || field->application == HID_GD_JOYSTICK)
977                         input_set_abs_params(input, usage->code, a, b, (b - a) >> 8, (b - a) >> 4);
978                 else    input_set_abs_params(input, usage->code, a, b, 0, 0);
979
980                 input_abs_set_res(input, usage->code,
981                                   hidinput_calc_abs_res(field, usage->code));
982
983                 /* use a larger default input buffer for MT devices */
984                 if (usage->code == ABS_MT_POSITION_X && input->hint_events_per_packet == 0)
985                         input_set_events_per_packet(input, 60);
986         }
987
988         if (usage->type == EV_ABS &&
989             (usage->hat_min < usage->hat_max || usage->hat_dir)) {
990                 int i;
991                 for (i = usage->code; i < usage->code + 2 && i <= max; i++) {
992                         input_set_abs_params(input, i, -1, 1, 0, 0);
993                         set_bit(i, input->absbit);
994                 }
995                 if (usage->hat_dir && !field->dpad)
996                         field->dpad = usage->code;
997         }
998
999         /* for those devices which produce Consumer volume usage as relative,
1000          * we emulate pressing volumeup/volumedown appropriate number of times
1001          * in hidinput_hid_event()
1002          */
1003         if ((usage->type == EV_ABS) && (field->flags & HID_MAIN_ITEM_RELATIVE) &&
1004                         (usage->code == ABS_VOLUME)) {
1005                 set_bit(KEY_VOLUMEUP, input->keybit);
1006                 set_bit(KEY_VOLUMEDOWN, input->keybit);
1007         }
1008
1009         if (usage->type == EV_KEY) {
1010                 set_bit(EV_MSC, input->evbit);
1011                 set_bit(MSC_SCAN, input->mscbit);
1012         }
1013
1014 ignore:
1015         return;
1016
1017 }
1018
1019 void hidinput_hid_event(struct hid_device *hid, struct hid_field *field, struct hid_usage *usage, __s32 value)
1020 {
1021         struct input_dev *input;
1022         unsigned *quirks = &hid->quirks;
1023
1024         if (!field->hidinput)
1025                 return;
1026
1027         input = field->hidinput->input;
1028
1029         if (!usage->type)
1030                 return;
1031
1032         if (usage->hat_min < usage->hat_max || usage->hat_dir) {
1033                 int hat_dir = usage->hat_dir;
1034                 if (!hat_dir)
1035                         hat_dir = (value - usage->hat_min) * 8 / (usage->hat_max - usage->hat_min + 1) + 1;
1036                 if (hat_dir < 0 || hat_dir > 8) hat_dir = 0;
1037                 input_event(input, usage->type, usage->code    , hid_hat_to_axis[hat_dir].x);
1038                 input_event(input, usage->type, usage->code + 1, hid_hat_to_axis[hat_dir].y);
1039                 return;
1040         }
1041
1042         if (usage->hid == (HID_UP_DIGITIZER | 0x003c)) { /* Invert */
1043                 *quirks = value ? (*quirks | HID_QUIRK_INVERT) : (*quirks & ~HID_QUIRK_INVERT);
1044                 return;
1045         }
1046
1047         if (usage->hid == (HID_UP_DIGITIZER | 0x0032)) { /* InRange */
1048                 if (value) {
1049                         input_event(input, usage->type, (*quirks & HID_QUIRK_INVERT) ? BTN_TOOL_RUBBER : usage->code, 1);
1050                         return;
1051                 }
1052                 input_event(input, usage->type, usage->code, 0);
1053                 input_event(input, usage->type, BTN_TOOL_RUBBER, 0);
1054                 return;
1055         }
1056
1057         if (usage->hid == (HID_UP_DIGITIZER | 0x0030) && (*quirks & HID_QUIRK_NOTOUCH)) { /* Pressure */
1058                 int a = field->logical_minimum;
1059                 int b = field->logical_maximum;
1060                 input_event(input, EV_KEY, BTN_TOUCH, value > a + ((b - a) >> 3));
1061         }
1062
1063         if (usage->hid == (HID_UP_PID | 0x83UL)) { /* Simultaneous Effects Max */
1064                 dbg_hid("Maximum Effects - %d\n",value);
1065                 return;
1066         }
1067
1068         if (usage->hid == (HID_UP_PID | 0x7fUL)) {
1069                 dbg_hid("PID Pool Report\n");
1070                 return;
1071         }
1072
1073         if ((usage->type == EV_KEY) && (usage->code == 0)) /* Key 0 is "unassigned", not KEY_UNKNOWN */
1074                 return;
1075
1076         if ((usage->type == EV_ABS) && (field->flags & HID_MAIN_ITEM_RELATIVE) &&
1077                         (usage->code == ABS_VOLUME)) {
1078                 int count = abs(value);
1079                 int direction = value > 0 ? KEY_VOLUMEUP : KEY_VOLUMEDOWN;
1080                 int i;
1081
1082                 for (i = 0; i < count; i++) {
1083                         input_event(input, EV_KEY, direction, 1);
1084                         input_sync(input);
1085                         input_event(input, EV_KEY, direction, 0);
1086                         input_sync(input);
1087                 }
1088                 return;
1089         }
1090
1091         /*
1092          * Ignore out-of-range values as per HID specification,
1093          * section 5.10 and 6.2.25.
1094          *
1095          * The logical_minimum < logical_maximum check is done so that we
1096          * don't unintentionally discard values sent by devices which
1097          * don't specify logical min and max.
1098          */
1099         if ((field->flags & HID_MAIN_ITEM_VARIABLE) &&
1100             (field->logical_minimum < field->logical_maximum) &&
1101             (value < field->logical_minimum ||
1102              value > field->logical_maximum)) {
1103                 dbg_hid("Ignoring out-of-range value %x\n", value);
1104                 return;
1105         }
1106
1107         /* report the usage code as scancode if the key status has changed */
1108         if (usage->type == EV_KEY && !!test_bit(usage->code, input->key) != value)
1109                 input_event(input, EV_MSC, MSC_SCAN, usage->hid);
1110
1111         input_event(input, usage->type, usage->code, value);
1112
1113         if ((field->flags & HID_MAIN_ITEM_RELATIVE) && (usage->type == EV_KEY))
1114                 input_event(input, usage->type, usage->code, 0);
1115 }
1116
1117 void hidinput_report_event(struct hid_device *hid, struct hid_report *report)
1118 {
1119         struct hid_input *hidinput;
1120
1121         if (hid->quirks & HID_QUIRK_NO_INPUT_SYNC)
1122                 return;
1123
1124         list_for_each_entry(hidinput, &hid->inputs, list)
1125                 input_sync(hidinput->input);
1126 }
1127 EXPORT_SYMBOL_GPL(hidinput_report_event);
1128
1129 int hidinput_find_field(struct hid_device *hid, unsigned int type, unsigned int code, struct hid_field **field)
1130 {
1131         struct hid_report *report;
1132         int i, j;
1133
1134         list_for_each_entry(report, &hid->report_enum[HID_OUTPUT_REPORT].report_list, list) {
1135                 for (i = 0; i < report->maxfield; i++) {
1136                         *field = report->field[i];
1137                         for (j = 0; j < (*field)->maxusage; j++)
1138                                 if ((*field)->usage[j].type == type && (*field)->usage[j].code == code)
1139                                         return j;
1140                 }
1141         }
1142         return -1;
1143 }
1144 EXPORT_SYMBOL_GPL(hidinput_find_field);
1145
1146 struct hid_field *hidinput_get_led_field(struct hid_device *hid)
1147 {
1148         struct hid_report *report;
1149         struct hid_field *field;
1150         int i, j;
1151
1152         list_for_each_entry(report,
1153                             &hid->report_enum[HID_OUTPUT_REPORT].report_list,
1154                             list) {
1155                 for (i = 0; i < report->maxfield; i++) {
1156                         field = report->field[i];
1157                         for (j = 0; j < field->maxusage; j++)
1158                                 if (field->usage[j].type == EV_LED)
1159                                         return field;
1160                 }
1161         }
1162         return NULL;
1163 }
1164 EXPORT_SYMBOL_GPL(hidinput_get_led_field);
1165
1166 unsigned int hidinput_count_leds(struct hid_device *hid)
1167 {
1168         struct hid_report *report;
1169         struct hid_field *field;
1170         int i, j;
1171         unsigned int count = 0;
1172
1173         list_for_each_entry(report,
1174                             &hid->report_enum[HID_OUTPUT_REPORT].report_list,
1175                             list) {
1176                 for (i = 0; i < report->maxfield; i++) {
1177                         field = report->field[i];
1178                         for (j = 0; j < field->maxusage; j++)
1179                                 if (field->usage[j].type == EV_LED &&
1180                                     field->value[j])
1181                                         count += 1;
1182                 }
1183         }
1184         return count;
1185 }
1186 EXPORT_SYMBOL_GPL(hidinput_count_leds);
1187
1188 static void hidinput_led_worker(struct work_struct *work)
1189 {
1190         struct hid_device *hid = container_of(work, struct hid_device,
1191                                               led_work);
1192         struct hid_field *field;
1193         struct hid_report *report;
1194         int len, ret;
1195         __u8 *buf;
1196
1197         field = hidinput_get_led_field(hid);
1198         if (!field)
1199                 return;
1200
1201         /*
1202          * field->report is accessed unlocked regarding HID core. So there might
1203          * be another incoming SET-LED request from user-space, which changes
1204          * the LED state while we assemble our outgoing buffer. However, this
1205          * doesn't matter as hid_output_report() correctly converts it into a
1206          * boolean value no matter what information is currently set on the LED
1207          * field (even garbage). So the remote device will always get a valid
1208          * request.
1209          * And in case we send a wrong value, a next led worker is spawned
1210          * for every SET-LED request so the following worker will send the
1211          * correct value, guaranteed!
1212          */
1213
1214         report = field->report;
1215
1216         /* use custom SET_REPORT request if possible (asynchronous) */
1217         if (hid->ll_driver->request)
1218                 return hid->ll_driver->request(hid, report, HID_REQ_SET_REPORT);
1219
1220         /* fall back to generic raw-output-report */
1221         len = hid_report_len(report);
1222         buf = hid_alloc_report_buf(report, GFP_KERNEL);
1223         if (!buf)
1224                 return;
1225
1226         hid_output_report(report, buf);
1227         /* synchronous output report */
1228         ret = hid_hw_output_report(hid, buf, len);
1229         if (ret == -ENOSYS)
1230                 hid_hw_raw_request(hid, report->id, buf, len, HID_OUTPUT_REPORT,
1231                                 HID_REQ_SET_REPORT);
1232         kfree(buf);
1233 }
1234
1235 static int hidinput_input_event(struct input_dev *dev, unsigned int type,
1236                                 unsigned int code, int value)
1237 {
1238         struct hid_device *hid = input_get_drvdata(dev);
1239         struct hid_field *field;
1240         int offset;
1241
1242         if (type == EV_FF)
1243                 return input_ff_event(dev, type, code, value);
1244
1245         if (type != EV_LED)
1246                 return -1;
1247
1248         if ((offset = hidinput_find_field(hid, type, code, &field)) == -1) {
1249                 hid_warn(dev, "event field not found\n");
1250                 return -1;
1251         }
1252
1253         hid_set_field(field, offset, value);
1254
1255         schedule_work(&hid->led_work);
1256         return 0;
1257 }
1258
1259 static int hidinput_open(struct input_dev *dev)
1260 {
1261         struct hid_device *hid = input_get_drvdata(dev);
1262
1263         return hid_hw_open(hid);
1264 }
1265
1266 static void hidinput_close(struct input_dev *dev)
1267 {
1268         struct hid_device *hid = input_get_drvdata(dev);
1269
1270         hid_hw_close(hid);
1271 }
1272
1273 static void report_features(struct hid_device *hid)
1274 {
1275         struct hid_driver *drv = hid->driver;
1276         struct hid_report_enum *rep_enum;
1277         struct hid_report *rep;
1278         int i, j;
1279
1280         rep_enum = &hid->report_enum[HID_FEATURE_REPORT];
1281         list_for_each_entry(rep, &rep_enum->report_list, list)
1282                 for (i = 0; i < rep->maxfield; i++) {
1283                         /* Ignore if report count is out of bounds. */
1284                         if (rep->field[i]->report_count < 1)
1285                                 continue;
1286
1287                         for (j = 0; j < rep->field[i]->maxusage; j++) {
1288                                 /* Verify if Battery Strength feature is available */
1289                                 hidinput_setup_battery(hid, HID_FEATURE_REPORT, rep->field[i]);
1290
1291                                 if (drv->feature_mapping)
1292                                         drv->feature_mapping(hid, rep->field[i],
1293                                                              rep->field[i]->usage + j);
1294                         }
1295                 }
1296 }
1297
1298 static struct hid_input *hidinput_allocate(struct hid_device *hid)
1299 {
1300         struct hid_input *hidinput = kzalloc(sizeof(*hidinput), GFP_KERNEL);
1301         struct input_dev *input_dev = input_allocate_device();
1302         if (!hidinput || !input_dev) {
1303                 kfree(hidinput);
1304                 input_free_device(input_dev);
1305                 hid_err(hid, "Out of memory during hid input probe\n");
1306                 return NULL;
1307         }
1308
1309         input_set_drvdata(input_dev, hid);
1310         input_dev->event = hidinput_input_event;
1311         input_dev->open = hidinput_open;
1312         input_dev->close = hidinput_close;
1313         input_dev->setkeycode = hidinput_setkeycode;
1314         input_dev->getkeycode = hidinput_getkeycode;
1315
1316         input_dev->name = hid->name;
1317         input_dev->phys = hid->phys;
1318         input_dev->uniq = hid->uniq;
1319         input_dev->id.bustype = hid->bus;
1320         input_dev->id.vendor  = hid->vendor;
1321         input_dev->id.product = hid->product;
1322         input_dev->id.version = hid->version;
1323         input_dev->dev.parent = &hid->dev;
1324         hidinput->input = input_dev;
1325         list_add_tail(&hidinput->list, &hid->inputs);
1326
1327         return hidinput;
1328 }
1329
1330 static bool hidinput_has_been_populated(struct hid_input *hidinput)
1331 {
1332         int i;
1333         unsigned long r = 0;
1334
1335         for (i = 0; i < BITS_TO_LONGS(EV_CNT); i++)
1336                 r |= hidinput->input->evbit[i];
1337
1338         for (i = 0; i < BITS_TO_LONGS(KEY_CNT); i++)
1339                 r |= hidinput->input->keybit[i];
1340
1341         for (i = 0; i < BITS_TO_LONGS(REL_CNT); i++)
1342                 r |= hidinput->input->relbit[i];
1343
1344         for (i = 0; i < BITS_TO_LONGS(ABS_CNT); i++)
1345                 r |= hidinput->input->absbit[i];
1346
1347         for (i = 0; i < BITS_TO_LONGS(MSC_CNT); i++)
1348                 r |= hidinput->input->mscbit[i];
1349
1350         for (i = 0; i < BITS_TO_LONGS(LED_CNT); i++)
1351                 r |= hidinput->input->ledbit[i];
1352
1353         for (i = 0; i < BITS_TO_LONGS(SND_CNT); i++)
1354                 r |= hidinput->input->sndbit[i];
1355
1356         for (i = 0; i < BITS_TO_LONGS(FF_CNT); i++)
1357                 r |= hidinput->input->ffbit[i];
1358
1359         for (i = 0; i < BITS_TO_LONGS(SW_CNT); i++)
1360                 r |= hidinput->input->swbit[i];
1361
1362         return !!r;
1363 }
1364
1365 static void hidinput_cleanup_hidinput(struct hid_device *hid,
1366                 struct hid_input *hidinput)
1367 {
1368         struct hid_report *report;
1369         int i, k;
1370
1371         list_del(&hidinput->list);
1372         input_free_device(hidinput->input);
1373
1374         for (k = HID_INPUT_REPORT; k <= HID_OUTPUT_REPORT; k++) {
1375                 if (k == HID_OUTPUT_REPORT &&
1376                         hid->quirks & HID_QUIRK_SKIP_OUTPUT_REPORTS)
1377                         continue;
1378
1379                 list_for_each_entry(report, &hid->report_enum[k].report_list,
1380                                     list) {
1381
1382                         for (i = 0; i < report->maxfield; i++)
1383                                 if (report->field[i]->hidinput == hidinput)
1384                                         report->field[i]->hidinput = NULL;
1385                 }
1386         }
1387
1388         kfree(hidinput);
1389 }
1390
1391 /*
1392  * Register the input device; print a message.
1393  * Configure the input layer interface
1394  * Read all reports and initialize the absolute field values.
1395  */
1396
1397 int hidinput_connect(struct hid_device *hid, unsigned int force)
1398 {
1399         struct hid_driver *drv = hid->driver;
1400         struct hid_report *report;
1401         struct hid_input *hidinput = NULL;
1402         int i, j, k;
1403
1404         INIT_LIST_HEAD(&hid->inputs);
1405         INIT_WORK(&hid->led_work, hidinput_led_worker);
1406
1407         if (!force) {
1408                 for (i = 0; i < hid->maxcollection; i++) {
1409                         struct hid_collection *col = &hid->collection[i];
1410                         if (col->type == HID_COLLECTION_APPLICATION ||
1411                                         col->type == HID_COLLECTION_PHYSICAL)
1412                                 if (IS_INPUT_APPLICATION(col->usage))
1413                                         break;
1414                 }
1415
1416                 if (i == hid->maxcollection)
1417                         return -1;
1418         }
1419
1420         report_features(hid);
1421
1422         for (k = HID_INPUT_REPORT; k <= HID_OUTPUT_REPORT; k++) {
1423                 if (k == HID_OUTPUT_REPORT &&
1424                         hid->quirks & HID_QUIRK_SKIP_OUTPUT_REPORTS)
1425                         continue;
1426
1427                 list_for_each_entry(report, &hid->report_enum[k].report_list, list) {
1428
1429                         if (!report->maxfield)
1430                                 continue;
1431
1432                         if (!hidinput) {
1433                                 hidinput = hidinput_allocate(hid);
1434                                 if (!hidinput)
1435                                         goto out_unwind;
1436                         }
1437
1438                         for (i = 0; i < report->maxfield; i++)
1439                                 for (j = 0; j < report->field[i]->maxusage; j++)
1440                                         hidinput_configure_usage(hidinput, report->field[i],
1441                                                                  report->field[i]->usage + j);
1442
1443                         if ((hid->quirks & HID_QUIRK_NO_EMPTY_INPUT) &&
1444                             !hidinput_has_been_populated(hidinput))
1445                                 continue;
1446
1447                         if (hid->quirks & HID_QUIRK_MULTI_INPUT) {
1448                                 /* This will leave hidinput NULL, so that it
1449                                  * allocates another one if we have more inputs on
1450                                  * the same interface. Some devices (e.g. Happ's
1451                                  * UGCI) cram a lot of unrelated inputs into the
1452                                  * same interface. */
1453                                 hidinput->report = report;
1454                                 if (drv->input_configured)
1455                                         drv->input_configured(hid, hidinput);
1456                                 if (input_register_device(hidinput->input))
1457                                         goto out_cleanup;
1458                                 hidinput = NULL;
1459                         }
1460                 }
1461         }
1462
1463         if (hidinput && (hid->quirks & HID_QUIRK_NO_EMPTY_INPUT) &&
1464             !hidinput_has_been_populated(hidinput)) {
1465                 /* no need to register an input device not populated */
1466                 hidinput_cleanup_hidinput(hid, hidinput);
1467                 hidinput = NULL;
1468         }
1469
1470         if (list_empty(&hid->inputs)) {
1471                 hid_err(hid, "No inputs registered, leaving\n");
1472                 goto out_unwind;
1473         }
1474
1475         if (hidinput) {
1476                 if (drv->input_configured)
1477                         drv->input_configured(hid, hidinput);
1478                 if (input_register_device(hidinput->input))
1479                         goto out_cleanup;
1480         }
1481
1482         return 0;
1483
1484 out_cleanup:
1485         list_del(&hidinput->list);
1486         input_free_device(hidinput->input);
1487         kfree(hidinput);
1488 out_unwind:
1489         /* unwind the ones we already registered */
1490         hidinput_disconnect(hid);
1491
1492         return -1;
1493 }
1494 EXPORT_SYMBOL_GPL(hidinput_connect);
1495
1496 void hidinput_disconnect(struct hid_device *hid)
1497 {
1498         struct hid_input *hidinput, *next;
1499
1500         hidinput_cleanup_battery(hid);
1501
1502         list_for_each_entry_safe(hidinput, next, &hid->inputs, list) {
1503                 list_del(&hidinput->list);
1504                 input_unregister_device(hidinput->input);
1505                 kfree(hidinput);
1506         }
1507
1508         /* led_work is spawned by input_dev callbacks, but doesn't access the
1509          * parent input_dev at all. Once all input devices are removed, we
1510          * know that led_work will never get restarted, so we can cancel it
1511          * synchronously and are safe. */
1512         cancel_work_sync(&hid->led_work);
1513 }
1514 EXPORT_SYMBOL_GPL(hidinput_disconnect);
1515