Input: kbtab - validate number of endpoints before using them
[pandora-kernel.git] / drivers / input / tablet / kbtab.c
1 #include <linux/kernel.h>
2 #include <linux/slab.h>
3 #include <linux/module.h>
4 #include <linux/init.h>
5 #include <linux/usb/input.h>
6 #include <asm/unaligned.h>
7
8 /*
9  * Version Information
10  * v0.0.1 - Original, extremely basic version, 2.4.xx only
11  * v0.0.2 - Updated, works with 2.5.62 and 2.4.20;
12  *           - added pressure-threshold modules param code from
13  *              Alex Perry <alex.perry@ieee.org>
14  */
15
16 #define DRIVER_VERSION "v0.0.2"
17 #define DRIVER_AUTHOR "Josh Myer <josh@joshisanerd.com>"
18 #define DRIVER_DESC "USB KB Gear JamStudio Tablet driver"
19 #define DRIVER_LICENSE "GPL"
20
21 MODULE_AUTHOR(DRIVER_AUTHOR);
22 MODULE_DESCRIPTION(DRIVER_DESC);
23 MODULE_LICENSE(DRIVER_LICENSE);
24
25 #define USB_VENDOR_ID_KBGEAR    0x084e
26
27 static int kb_pressure_click = 0x10;
28 module_param(kb_pressure_click, int, 0);
29 MODULE_PARM_DESC(kb_pressure_click, "pressure threshold for clicks");
30
31 struct kbtab {
32         unsigned char *data;
33         dma_addr_t data_dma;
34         struct input_dev *dev;
35         struct usb_device *usbdev;
36         struct urb *irq;
37         char phys[32];
38 };
39
40 static void kbtab_irq(struct urb *urb)
41 {
42         struct kbtab *kbtab = urb->context;
43         unsigned char *data = kbtab->data;
44         struct input_dev *dev = kbtab->dev;
45         int pressure;
46         int retval;
47
48         switch (urb->status) {
49         case 0:
50                 /* success */
51                 break;
52         case -ECONNRESET:
53         case -ENOENT:
54         case -ESHUTDOWN:
55                 /* this urb is terminated, clean up */
56                 dbg("%s - urb shutting down with status: %d", __func__, urb->status);
57                 return;
58         default:
59                 dbg("%s - nonzero urb status received: %d", __func__, urb->status);
60                 goto exit;
61         }
62
63
64         input_report_key(dev, BTN_TOOL_PEN, 1);
65
66         input_report_abs(dev, ABS_X, get_unaligned_le16(&data[1]));
67         input_report_abs(dev, ABS_Y, get_unaligned_le16(&data[3]));
68
69         /*input_report_key(dev, BTN_TOUCH , data[0] & 0x01);*/
70         input_report_key(dev, BTN_RIGHT, data[0] & 0x02);
71
72         pressure = data[5];
73         if (kb_pressure_click == -1)
74                 input_report_abs(dev, ABS_PRESSURE, pressure);
75         else
76                 input_report_key(dev, BTN_LEFT, pressure > kb_pressure_click ? 1 : 0);
77
78         input_sync(dev);
79
80  exit:
81         retval = usb_submit_urb(urb, GFP_ATOMIC);
82         if (retval)
83                 err("%s - usb_submit_urb failed with result %d",
84                      __func__, retval);
85 }
86
87 static struct usb_device_id kbtab_ids[] = {
88         { USB_DEVICE(USB_VENDOR_ID_KBGEAR, 0x1001), .driver_info = 0 },
89         { }
90 };
91
92 MODULE_DEVICE_TABLE(usb, kbtab_ids);
93
94 static int kbtab_open(struct input_dev *dev)
95 {
96         struct kbtab *kbtab = input_get_drvdata(dev);
97
98         kbtab->irq->dev = kbtab->usbdev;
99         if (usb_submit_urb(kbtab->irq, GFP_KERNEL))
100                 return -EIO;
101
102         return 0;
103 }
104
105 static void kbtab_close(struct input_dev *dev)
106 {
107         struct kbtab *kbtab = input_get_drvdata(dev);
108
109         usb_kill_urb(kbtab->irq);
110 }
111
112 static int kbtab_probe(struct usb_interface *intf, const struct usb_device_id *id)
113 {
114         struct usb_device *dev = interface_to_usbdev(intf);
115         struct usb_endpoint_descriptor *endpoint;
116         struct kbtab *kbtab;
117         struct input_dev *input_dev;
118         int error = -ENOMEM;
119
120         if (intf->cur_altsetting->desc.bNumEndpoints < 1)
121                 return -ENODEV;
122
123         kbtab = kzalloc(sizeof(struct kbtab), GFP_KERNEL);
124         input_dev = input_allocate_device();
125         if (!kbtab || !input_dev)
126                 goto fail1;
127
128         kbtab->data = usb_alloc_coherent(dev, 8, GFP_KERNEL, &kbtab->data_dma);
129         if (!kbtab->data)
130                 goto fail1;
131
132         kbtab->irq = usb_alloc_urb(0, GFP_KERNEL);
133         if (!kbtab->irq)
134                 goto fail2;
135
136         kbtab->usbdev = dev;
137         kbtab->dev = input_dev;
138
139         usb_make_path(dev, kbtab->phys, sizeof(kbtab->phys));
140         strlcat(kbtab->phys, "/input0", sizeof(kbtab->phys));
141
142         input_dev->name = "KB Gear Tablet";
143         input_dev->phys = kbtab->phys;
144         usb_to_input_id(dev, &input_dev->id);
145         input_dev->dev.parent = &intf->dev;
146
147         input_set_drvdata(input_dev, kbtab);
148
149         input_dev->open = kbtab_open;
150         input_dev->close = kbtab_close;
151
152         input_dev->evbit[0] |= BIT_MASK(EV_KEY) | BIT_MASK(EV_ABS);
153         input_dev->keybit[BIT_WORD(BTN_LEFT)] |=
154                 BIT_MASK(BTN_LEFT) | BIT_MASK(BTN_RIGHT);
155         input_dev->keybit[BIT_WORD(BTN_DIGI)] |=
156                 BIT_MASK(BTN_TOOL_PEN) | BIT_MASK(BTN_TOUCH);
157         input_set_abs_params(input_dev, ABS_X, 0, 0x2000, 4, 0);
158         input_set_abs_params(input_dev, ABS_Y, 0, 0x1750, 4, 0);
159         input_set_abs_params(input_dev, ABS_PRESSURE, 0, 0xff, 0, 0);
160
161         endpoint = &intf->cur_altsetting->endpoint[0].desc;
162
163         usb_fill_int_urb(kbtab->irq, dev,
164                          usb_rcvintpipe(dev, endpoint->bEndpointAddress),
165                          kbtab->data, 8,
166                          kbtab_irq, kbtab, endpoint->bInterval);
167         kbtab->irq->transfer_dma = kbtab->data_dma;
168         kbtab->irq->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
169
170         error = input_register_device(kbtab->dev);
171         if (error)
172                 goto fail3;
173
174         usb_set_intfdata(intf, kbtab);
175
176         return 0;
177
178  fail3: usb_free_urb(kbtab->irq);
179  fail2: usb_free_coherent(dev, 8, kbtab->data, kbtab->data_dma);
180  fail1: input_free_device(input_dev);
181         kfree(kbtab);
182         return error;
183 }
184
185 static void kbtab_disconnect(struct usb_interface *intf)
186 {
187         struct kbtab *kbtab = usb_get_intfdata(intf);
188
189         usb_set_intfdata(intf, NULL);
190
191         input_unregister_device(kbtab->dev);
192         usb_free_urb(kbtab->irq);
193         usb_free_coherent(kbtab->usbdev, 8, kbtab->data, kbtab->data_dma);
194         kfree(kbtab);
195 }
196
197 static struct usb_driver kbtab_driver = {
198         .name =         "kbtab",
199         .probe =        kbtab_probe,
200         .disconnect =   kbtab_disconnect,
201         .id_table =     kbtab_ids,
202 };
203
204 static int __init kbtab_init(void)
205 {
206         int retval;
207         retval = usb_register(&kbtab_driver);
208         if (retval)
209                 goto out;
210         printk(KERN_INFO KBUILD_MODNAME ": " DRIVER_VERSION ":"
211                DRIVER_DESC "\n");
212 out:
213         return retval;
214 }
215
216 static void __exit kbtab_exit(void)
217 {
218         usb_deregister(&kbtab_driver);
219 }
220
221 module_init(kbtab_init);
222 module_exit(kbtab_exit);