Home | History | Annotate | Line # | Download | only in usb
uhid.c revision 1.101.2.3
      1 /*	$NetBSD: uhid.c,v 1.101.2.3 2018/09/18 01:15:58 pgoyette Exp $	*/
      2 
      3 /*
      4  * Copyright (c) 1998, 2004, 2008, 2012 The NetBSD Foundation, Inc.
      5  * All rights reserved.
      6  *
      7  * This code is derived from software contributed to The NetBSD Foundation
      8  * by Lennart Augustsson (lennart (at) augustsson.net) at
      9  * Carlstedt Research & Technology and Matthew R. Green (mrg (at) eterna.com.au).
     10  *
     11  * Redistribution and use in source and binary forms, with or without
     12  * modification, are permitted provided that the following conditions
     13  * are met:
     14  * 1. Redistributions of source code must retain the above copyright
     15  *    notice, this list of conditions and the following disclaimer.
     16  * 2. Redistributions in binary form must reproduce the above copyright
     17  *    notice, this list of conditions and the following disclaimer in the
     18  *    documentation and/or other materials provided with the distribution.
     19  *
     20  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
     21  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
     22  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
     23  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
     24  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
     25  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
     26  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
     27  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
     28  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
     29  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
     30  * POSSIBILITY OF SUCH DAMAGE.
     31  */
     32 
     33 /*
     34  * HID spec: http://www.usb.org/developers/devclass_docs/HID1_11.pdf
     35  */
     36 
     37 #include <sys/cdefs.h>
     38 __KERNEL_RCSID(0, "$NetBSD: uhid.c,v 1.101.2.3 2018/09/18 01:15:58 pgoyette Exp $");
     39 
     40 #ifdef _KERNEL_OPT
     41 #include "opt_compat_netbsd.h"
     42 #include "opt_usb.h"
     43 #endif
     44 
     45 #include <sys/param.h>
     46 #include <sys/systm.h>
     47 #include <sys/kernel.h>
     48 #include <sys/kmem.h>
     49 #include <sys/signalvar.h>
     50 #include <sys/device.h>
     51 #include <sys/ioctl.h>
     52 #include <sys/conf.h>
     53 #include <sys/tty.h>
     54 #include <sys/file.h>
     55 #include <sys/select.h>
     56 #include <sys/proc.h>
     57 #include <sys/vnode.h>
     58 #include <sys/poll.h>
     59 #include <sys/intr.h>
     60 #include <sys/compat_stub.h>
     61 
     62 #include <dev/usb/usb.h>
     63 #include <dev/usb/usbhid.h>
     64 
     65 #include <dev/usb/usbdevs.h>
     66 #include <dev/usb/usbdi.h>
     67 #include <dev/usb/usbdi_util.h>
     68 #include <dev/usb/usb_quirks.h>
     69 #include <dev/hid/hid.h>
     70 
     71 #include <dev/usb/uhidev.h>
     72 
     73 #ifdef UHID_DEBUG
     74 #define DPRINTF(x)	if (uhiddebug) printf x
     75 #define DPRINTFN(n,x)	if (uhiddebug>(n)) printf x
     76 int	uhiddebug = 0;
     77 #else
     78 #define DPRINTF(x)
     79 #define DPRINTFN(n,x)
     80 #endif
     81 
     82 struct uhid_softc {
     83 	struct uhidev sc_hdev;
     84 
     85 	kmutex_t sc_access_lock; /* serialises syscall accesses */
     86 	kmutex_t sc_lock;	/* protects refcnt, others */
     87 	kcondvar_t sc_cv;
     88 	kcondvar_t sc_detach_cv;
     89 
     90 	int sc_isize;
     91 	int sc_osize;
     92 	int sc_fsize;
     93 
     94 	u_char *sc_obuf;
     95 
     96 	struct clist sc_q;	/* protected by sc_lock */
     97 	struct selinfo sc_rsel;
     98 	proc_t *sc_async;	/* process that wants SIGIO */
     99 	void *sc_sih;
    100 	u_char sc_state;	/* driver state */
    101 #define	UHID_ASLP	0x01	/* waiting for device data */
    102 #define UHID_IMMED	0x02	/* return read data immediately */
    103 
    104 	int sc_refcnt;
    105 	u_char sc_dying;
    106 };
    107 
    108 #define	UHIDUNIT(dev)	(minor(dev))
    109 #define	UHID_CHUNK	128	/* chunk size for read */
    110 #define	UHID_BSIZE	1020	/* buffer size */
    111 
    112 dev_type_open(uhidopen);
    113 dev_type_close(uhidclose);
    114 dev_type_read(uhidread);
    115 dev_type_write(uhidwrite);
    116 dev_type_ioctl(uhidioctl);
    117 dev_type_poll(uhidpoll);
    118 dev_type_kqfilter(uhidkqfilter);
    119 
    120 const struct cdevsw uhid_cdevsw = {
    121 	.d_open = uhidopen,
    122 	.d_close = uhidclose,
    123 	.d_read = uhidread,
    124 	.d_write = uhidwrite,
    125 	.d_ioctl = uhidioctl,
    126 	.d_stop = nostop,
    127 	.d_tty = notty,
    128 	.d_poll = uhidpoll,
    129 	.d_mmap = nommap,
    130 	.d_kqfilter = uhidkqfilter,
    131 	.d_discard = nodiscard,
    132 	.d_flag = D_OTHER
    133 };
    134 
    135 Static void uhid_intr(struct uhidev *, void *, u_int);
    136 Static void uhid_softintr(void *);
    137 
    138 Static int uhid_do_read(struct uhid_softc *, struct uio *, int);
    139 Static int uhid_do_write(struct uhid_softc *, struct uio *, int);
    140 Static int uhid_do_ioctl(struct uhid_softc*, u_long, void *, int, struct lwp *);
    141 
    142 int	uhid_match(device_t, cfdata_t, void *);
    143 void	uhid_attach(device_t, device_t, void *);
    144 int	uhid_detach(device_t, int);
    145 int	uhid_activate(device_t, enum devact);
    146 extern struct cfdriver uhid_cd;
    147 CFATTACH_DECL_NEW(uhid, sizeof(struct uhid_softc), uhid_match, uhid_attach,
    148     uhid_detach, uhid_activate);
    149 
    150 int
    151 uhid_match(device_t parent, cfdata_t match, void *aux)
    152 {
    153 #ifdef UHID_DEBUG
    154 	struct uhidev_attach_arg *uha = aux;
    155 #endif
    156 
    157 	DPRINTF(("uhid_match: report=%d\n", uha->reportid));
    158 
    159 	if (match->cf_flags & 1)
    160 		return UMATCH_HIGHEST;
    161 	else
    162 		return UMATCH_IFACECLASS_GENERIC;
    163 }
    164 
    165 void
    166 uhid_attach(device_t parent, device_t self, void *aux)
    167 {
    168 	struct uhid_softc *sc = device_private(self);
    169 	struct uhidev_attach_arg *uha = aux;
    170 	int size, repid;
    171 	void *desc;
    172 
    173 	sc->sc_hdev.sc_dev = self;
    174 	selinit(&sc->sc_rsel);
    175 	sc->sc_hdev.sc_intr = uhid_intr;
    176 	sc->sc_hdev.sc_parent = uha->parent;
    177 	sc->sc_hdev.sc_report_id = uha->reportid;
    178 	sc->sc_sih = softint_establish(SOFTINT_CLOCK, uhid_softintr, sc);
    179 
    180 	uhidev_get_report_desc(uha->parent, &desc, &size);
    181 	repid = uha->reportid;
    182 	sc->sc_isize = hid_report_size(desc, size, hid_input,   repid);
    183 	sc->sc_osize = hid_report_size(desc, size, hid_output,  repid);
    184 	sc->sc_fsize = hid_report_size(desc, size, hid_feature, repid);
    185 
    186 	aprint_naive("\n");
    187 	aprint_normal(": input=%d, output=%d, feature=%d\n",
    188 	       sc->sc_isize, sc->sc_osize, sc->sc_fsize);
    189 
    190 	mutex_init(&sc->sc_access_lock, MUTEX_DEFAULT, IPL_NONE);
    191 	mutex_init(&sc->sc_lock, MUTEX_DEFAULT, IPL_SOFTUSB);
    192 	cv_init(&sc->sc_cv, "uhidrea");
    193 	cv_init(&sc->sc_detach_cv, "uhiddet");
    194 
    195 	if (!pmf_device_register(self, NULL, NULL))
    196 		aprint_error_dev(self, "couldn't establish power handler\n");
    197 
    198 	return;
    199 }
    200 
    201 int
    202 uhid_activate(device_t self, enum devact act)
    203 {
    204 	struct uhid_softc *sc = device_private(self);
    205 
    206 	switch (act) {
    207 	case DVACT_DEACTIVATE:
    208 		sc->sc_dying = 1;
    209 		return 0;
    210 	default:
    211 		return EOPNOTSUPP;
    212 	}
    213 }
    214 
    215 int
    216 uhid_detach(device_t self, int flags)
    217 {
    218 	struct uhid_softc *sc = device_private(self);
    219 	int maj, mn;
    220 
    221 	DPRINTF(("uhid_detach: sc=%p flags=%d\n", sc, flags));
    222 
    223 	sc->sc_dying = 1;
    224 
    225 	pmf_device_deregister(self);
    226 
    227 	mutex_enter(&sc->sc_lock);
    228 	if (sc->sc_hdev.sc_state & UHIDEV_OPEN) {
    229 		if (--sc->sc_refcnt >= 0) {
    230 			/* Wake everyone */
    231 			cv_broadcast(&sc->sc_cv);
    232 			/* Wait for processes to go away. */
    233 			usb_detach_wait(sc->sc_hdev.sc_dev,
    234 			    &sc->sc_detach_cv, &sc->sc_lock);
    235 		}
    236 	}
    237 	mutex_exit(&sc->sc_lock);
    238 
    239 	/* locate the major number */
    240 	maj = cdevsw_lookup_major(&uhid_cdevsw);
    241 
    242 	/* Nuke the vnodes for any open instances (calls close). */
    243 	mn = device_unit(self);
    244 	vdevgone(maj, mn, mn, VCHR);
    245 
    246 #if 0
    247 	usbd_add_drv_event(USB_EVENT_DRIVER_DETACH,
    248 	    sc->sc_hdev.sc_parent->sc_udev, sc->sc_hdev.sc_dev);
    249 #endif
    250 	cv_destroy(&sc->sc_cv);
    251 	cv_destroy(&sc->sc_detach_cv);
    252 	mutex_destroy(&sc->sc_lock);
    253 	mutex_destroy(&sc->sc_access_lock);
    254 	seldestroy(&sc->sc_rsel);
    255 	softint_disestablish(sc->sc_sih);
    256 
    257 	return 0;
    258 }
    259 
    260 void
    261 uhid_intr(struct uhidev *addr, void *data, u_int len)
    262 {
    263 	struct uhid_softc *sc = (struct uhid_softc *)addr;
    264 
    265 #ifdef UHID_DEBUG
    266 	if (uhiddebug > 5) {
    267 		uint32_t i;
    268 
    269 		DPRINTF(("uhid_intr: data ="));
    270 		for (i = 0; i < len; i++)
    271 			DPRINTF((" %02x", ((u_char *)data)[i]));
    272 		DPRINTF(("\n"));
    273 	}
    274 #endif
    275 
    276 	mutex_enter(&sc->sc_lock);
    277 	(void)b_to_q(data, len, &sc->sc_q);
    278 
    279 	if (sc->sc_state & UHID_ASLP) {
    280 		sc->sc_state &= ~UHID_ASLP;
    281 		DPRINTFN(5, ("uhid_intr: waking %p\n", &sc->sc_q));
    282 		cv_broadcast(&sc->sc_cv);
    283 	}
    284 	selnotify(&sc->sc_rsel, 0, 0);
    285 	if (sc->sc_async != NULL) {
    286 		DPRINTFN(3, ("uhid_intr: sending SIGIO %p\n", sc->sc_async));
    287 		softint_schedule(sc->sc_sih);
    288 	}
    289 	mutex_exit(&sc->sc_lock);
    290 }
    291 
    292 void
    293 uhid_softintr(void *cookie)
    294 {
    295 	struct uhid_softc *sc;
    296 
    297 	sc = cookie;
    298 
    299 	mutex_enter(proc_lock);
    300 	if (sc->sc_async != NULL)
    301 		 psignal(sc->sc_async, SIGIO);
    302 	mutex_exit(proc_lock);
    303 }
    304 
    305 int
    306 uhidopen(dev_t dev, int flag, int mode, struct lwp *l)
    307 {
    308 	struct uhid_softc *sc;
    309 	int error;
    310 
    311 	sc = device_lookup_private(&uhid_cd, UHIDUNIT(dev));
    312 	if (sc == NULL)
    313 		return ENXIO;
    314 
    315 	DPRINTF(("uhidopen: sc=%p\n", sc));
    316 
    317 	if (sc->sc_dying)
    318 		return ENXIO;
    319 
    320 	mutex_enter(&sc->sc_access_lock);
    321 
    322 	/*
    323 	 * uhid interrupts aren't enabled yet, so setup sc_q now, as
    324 	 * long as they're not already allocated.
    325 	 */
    326 	if (sc->sc_hdev.sc_state & UHIDEV_OPEN) {
    327 		mutex_exit(&sc->sc_access_lock);
    328 		return EBUSY;
    329 	}
    330 	if (clalloc(&sc->sc_q, UHID_BSIZE, 0) == -1) {
    331 		mutex_exit(&sc->sc_access_lock);
    332 		return ENOMEM;
    333 	}
    334 
    335 	error = uhidev_open(&sc->sc_hdev);
    336 	if (error) {
    337 		clfree(&sc->sc_q);
    338 		mutex_exit(&sc->sc_access_lock);
    339 		return error;
    340 	}
    341 	mutex_exit(&sc->sc_access_lock);
    342 
    343 	if (sc->sc_osize > 0)
    344 		sc->sc_obuf = kmem_alloc(sc->sc_osize, KM_SLEEP);
    345 	else
    346 		sc->sc_obuf = NULL;
    347 	sc->sc_state &= ~UHID_IMMED;
    348 
    349 	mutex_enter(proc_lock);
    350 	sc->sc_async = NULL;
    351 	mutex_exit(proc_lock);
    352 
    353 	return 0;
    354 }
    355 
    356 int
    357 uhidclose(dev_t dev, int flag, int mode, struct lwp *l)
    358 {
    359 	struct uhid_softc *sc;
    360 
    361 	sc = device_lookup_private(&uhid_cd, UHIDUNIT(dev));
    362 
    363 	DPRINTF(("uhidclose: sc=%p\n", sc));
    364 
    365 	mutex_enter(proc_lock);
    366 	sc->sc_async = NULL;
    367 	mutex_exit(proc_lock);
    368 
    369 	mutex_enter(&sc->sc_access_lock);
    370 
    371 	uhidev_stop(&sc->sc_hdev);
    372 
    373 	clfree(&sc->sc_q);
    374 	if (sc->sc_osize > 0)
    375 		kmem_free(sc->sc_obuf, sc->sc_osize);
    376 
    377 	uhidev_close(&sc->sc_hdev);
    378 
    379 	mutex_exit(&sc->sc_access_lock);
    380 
    381 	return 0;
    382 }
    383 
    384 int
    385 uhid_do_read(struct uhid_softc *sc, struct uio *uio, int flag)
    386 {
    387 	int error = 0;
    388 	int extra;
    389 	size_t length;
    390 	u_char buffer[UHID_CHUNK];
    391 	usbd_status err;
    392 
    393 	DPRINTFN(1, ("uhidread\n"));
    394 	if (sc->sc_state & UHID_IMMED) {
    395 		DPRINTFN(1, ("uhidread immed\n"));
    396 		extra = sc->sc_hdev.sc_report_id != 0;
    397 		err = uhidev_get_report(&sc->sc_hdev, UHID_INPUT_REPORT,
    398 					buffer, sc->sc_isize + extra);
    399 		if (err)
    400 			return EIO;
    401 		return uiomove(buffer+extra, sc->sc_isize, uio);
    402 	}
    403 
    404 	mutex_enter(&sc->sc_lock);
    405 	while (sc->sc_q.c_cc == 0) {
    406 		if (flag & IO_NDELAY) {
    407 			mutex_exit(&sc->sc_lock);
    408 			return EWOULDBLOCK;
    409 		}
    410 		sc->sc_state |= UHID_ASLP;
    411 		DPRINTFN(5, ("uhidread: sleep on %p\n", &sc->sc_q));
    412 		error = cv_wait_sig(&sc->sc_cv, &sc->sc_lock);
    413 		DPRINTFN(5, ("uhidread: woke, error=%d\n", error));
    414 		if (sc->sc_dying)
    415 			error = EIO;
    416 		if (error) {
    417 			sc->sc_state &= ~UHID_ASLP;
    418 			break;
    419 		}
    420 	}
    421 
    422 	/* Transfer as many chunks as possible. */
    423 	while (sc->sc_q.c_cc > 0 && uio->uio_resid > 0 && !error) {
    424 		length = uimin(sc->sc_q.c_cc, uio->uio_resid);
    425 		if (length > sizeof(buffer))
    426 			length = sizeof(buffer);
    427 
    428 		/* Remove a small chunk from the input queue. */
    429 		(void) q_to_b(&sc->sc_q, buffer, length);
    430 		DPRINTFN(5, ("uhidread: got %lu chars\n", (u_long)length));
    431 
    432 		/* Copy the data to the user process. */
    433 		mutex_exit(&sc->sc_lock);
    434 		if ((error = uiomove(buffer, length, uio)) != 0)
    435 			return error;
    436 		mutex_enter(&sc->sc_lock);
    437 	}
    438 
    439 	mutex_exit(&sc->sc_lock);
    440 	return error;
    441 }
    442 
    443 int
    444 uhidread(dev_t dev, struct uio *uio, int flag)
    445 {
    446 	struct uhid_softc *sc;
    447 	int error;
    448 
    449 	sc = device_lookup_private(&uhid_cd, UHIDUNIT(dev));
    450 
    451 	mutex_enter(&sc->sc_lock);
    452 	sc->sc_refcnt++;
    453 	mutex_exit(&sc->sc_lock);
    454 
    455 	mutex_enter(&sc->sc_access_lock);
    456 	error = uhid_do_read(sc, uio, flag);
    457 	mutex_exit(&sc->sc_access_lock);
    458 
    459 	mutex_enter(&sc->sc_lock);
    460 	if (--sc->sc_refcnt < 0)
    461 		usb_detach_broadcast(sc->sc_hdev.sc_dev, &sc->sc_detach_cv);
    462 	mutex_exit(&sc->sc_lock);
    463 	return error;
    464 }
    465 
    466 int
    467 uhid_do_write(struct uhid_softc *sc, struct uio *uio, int flag)
    468 {
    469 	int error;
    470 	int size;
    471 	usbd_status err;
    472 
    473 	DPRINTFN(1, ("uhidwrite\n"));
    474 
    475 	if (sc->sc_dying)
    476 		return EIO;
    477 
    478 	size = sc->sc_osize;
    479 	error = 0;
    480 	if (uio->uio_resid != size || size == 0)
    481 		return EINVAL;
    482 	error = uiomove(sc->sc_obuf, size, uio);
    483 	if (!error) {
    484 		err = uhidev_set_report(&sc->sc_hdev, UHID_OUTPUT_REPORT,
    485 					sc->sc_obuf, size);
    486 		if (err)
    487 			error = EIO;
    488 	}
    489 
    490 	return error;
    491 }
    492 
    493 int
    494 uhidwrite(dev_t dev, struct uio *uio, int flag)
    495 {
    496 	struct uhid_softc *sc;
    497 	int error;
    498 
    499 	sc = device_lookup_private(&uhid_cd, UHIDUNIT(dev));
    500 
    501 	mutex_enter(&sc->sc_lock);
    502 	sc->sc_refcnt++;
    503 	mutex_exit(&sc->sc_lock);
    504 
    505 	mutex_enter(&sc->sc_access_lock);
    506 	error = uhid_do_write(sc, uio, flag);
    507 	mutex_exit(&sc->sc_access_lock);
    508 
    509 	mutex_enter(&sc->sc_lock);
    510 	if (--sc->sc_refcnt < 0)
    511 		usb_detach_broadcast(sc->sc_hdev.sc_dev, &sc->sc_detach_cv);
    512 	mutex_exit(&sc->sc_lock);
    513 	return error;
    514 }
    515 
    516 COMPAT_CALL_HOOK_DECL(usb_subr_30_hook, f1,
    517     (struct usbd_device *udev, struct usb_device_info_old * addr, int usedev,
    518       void (*fill_devinfo_vp)(struct usbd_device *, char *, size_t, char *,
    519 	size_t, int, int), int (*printBCD)(char *, size_t, int)),
    520     (udev, addr, usedev, fill_devinfo_vp, printBCD),
    521     enosys());
    522 
    523 int
    524 uhid_do_ioctl(struct uhid_softc *sc, u_long cmd, void *addr,
    525     int flag, struct lwp *l)
    526 {
    527 	struct usb_ctl_report_desc *rd;
    528 	struct usb_ctl_report *re;
    529 	u_char buffer[UHID_CHUNK];
    530 	int size, extra;
    531 	usbd_status err;
    532 	void *desc;
    533 
    534 	DPRINTFN(2, ("uhidioctl: cmd=%lx\n", cmd));
    535 
    536 	if (sc->sc_dying)
    537 		return EIO;
    538 
    539 	switch (cmd) {
    540 	case FIONBIO:
    541 		/* All handled in the upper FS layer. */
    542 		break;
    543 
    544 	case FIOASYNC:
    545 		mutex_enter(proc_lock);
    546 		if (*(int *)addr) {
    547 			if (sc->sc_async != NULL)
    548 				return EBUSY;
    549 			sc->sc_async = l->l_proc;
    550 			DPRINTF(("uhid_do_ioctl: FIOASYNC %p\n", l->l_proc));
    551 		} else
    552 			sc->sc_async = NULL;
    553 		mutex_exit(proc_lock);
    554 		break;
    555 
    556 	/* XXX this is not the most general solution. */
    557 	case TIOCSPGRP:
    558 		mutex_enter(proc_lock);
    559 		if (sc->sc_async == NULL) {
    560 			mutex_exit(proc_lock);
    561 			return EINVAL;
    562 		}
    563 		if (*(int *)addr != sc->sc_async->p_pgid) {
    564 			mutex_exit(proc_lock);
    565 			return EPERM;
    566 		}
    567 		mutex_exit(proc_lock);
    568 		break;
    569 
    570 	case FIOSETOWN:
    571 		mutex_enter(proc_lock);
    572 		if (sc->sc_async == NULL) {
    573 			mutex_exit(proc_lock);
    574 			return EINVAL;
    575 		}
    576 		if (-*(int *)addr != sc->sc_async->p_pgid
    577 		    && *(int *)addr != sc->sc_async->p_pid) {
    578 			mutex_exit(proc_lock);
    579 			return EPERM;
    580 		}
    581 		mutex_exit(proc_lock);
    582 		break;
    583 
    584 	case USB_GET_REPORT_DESC:
    585 		uhidev_get_report_desc(sc->sc_hdev.sc_parent, &desc, &size);
    586 		rd = (struct usb_ctl_report_desc *)addr;
    587 		size = uimin(size, sizeof(rd->ucrd_data));
    588 		rd->ucrd_size = size;
    589 		memcpy(rd->ucrd_data, desc, size);
    590 		break;
    591 
    592 	case USB_SET_IMMED:
    593 		if (*(int *)addr) {
    594 			extra = sc->sc_hdev.sc_report_id != 0;
    595 			err = uhidev_get_report(&sc->sc_hdev, UHID_INPUT_REPORT,
    596 						buffer, sc->sc_isize + extra);
    597 			if (err)
    598 				return EOPNOTSUPP;
    599 
    600 			sc->sc_state |=  UHID_IMMED;
    601 		} else
    602 			sc->sc_state &= ~UHID_IMMED;
    603 		break;
    604 
    605 	case USB_GET_REPORT:
    606 		re = (struct usb_ctl_report *)addr;
    607 		switch (re->ucr_report) {
    608 		case UHID_INPUT_REPORT:
    609 			size = sc->sc_isize;
    610 			break;
    611 		case UHID_OUTPUT_REPORT:
    612 			size = sc->sc_osize;
    613 			break;
    614 		case UHID_FEATURE_REPORT:
    615 			size = sc->sc_fsize;
    616 			break;
    617 		default:
    618 			return EINVAL;
    619 		}
    620 		extra = sc->sc_hdev.sc_report_id != 0;
    621 		err = uhidev_get_report(&sc->sc_hdev, re->ucr_report,
    622 		    re->ucr_data, size + extra);
    623 		if (extra)
    624 			memmove(re->ucr_data, re->ucr_data+1, size);
    625 		if (err)
    626 			return EIO;
    627 		break;
    628 
    629 	case USB_SET_REPORT:
    630 		re = (struct usb_ctl_report *)addr;
    631 		switch (re->ucr_report) {
    632 		case UHID_INPUT_REPORT:
    633 			size = sc->sc_isize;
    634 			break;
    635 		case UHID_OUTPUT_REPORT:
    636 			size = sc->sc_osize;
    637 			break;
    638 		case UHID_FEATURE_REPORT:
    639 			size = sc->sc_fsize;
    640 			break;
    641 		default:
    642 			return EINVAL;
    643 		}
    644 		err = uhidev_set_report(&sc->sc_hdev, re->ucr_report,
    645 		    re->ucr_data, size);
    646 		if (err)
    647 			return EIO;
    648 		break;
    649 
    650 	case USB_GET_REPORT_ID:
    651 		*(int *)addr = sc->sc_hdev.sc_report_id;
    652 		break;
    653 
    654 	case USB_GET_DEVICE_DESC:
    655 		*(usb_device_descriptor_t *)addr =
    656 			*usbd_get_device_descriptor(sc->sc_hdev.sc_parent->sc_udev);
    657 		break;
    658 
    659 	case USB_GET_DEVICEINFO:
    660 		usbd_fill_deviceinfo(sc->sc_hdev.sc_parent->sc_udev,
    661 				     (struct usb_device_info *)addr, 0);
    662 		break;
    663 	case USB_GET_DEVICEINFO_OLD:
    664 		err = usb_subr_30_hook_f1_call( sc->sc_hdev.sc_parent->sc_udev,
    665 			    (struct usb_device_info_old *)addr, 0,
    666 			    usbd_devinfo_vp, usbd_printBCD);
    667 		if (err == 0)
    668 			return 0;
    669 		break;
    670 	case USB_GET_STRING_DESC:
    671 	    {
    672 		struct usb_string_desc *si = (struct usb_string_desc *)addr;
    673 		err = usbd_get_string_desc(sc->sc_hdev.sc_parent->sc_udev,
    674 			si->usd_string_index,
    675 			si->usd_language_id, &si->usd_desc, &size);
    676 		if (err)
    677 			return EINVAL;
    678 		break;
    679 	    }
    680 
    681 	default:
    682 		return EINVAL;
    683 	}
    684 	return 0;
    685 }
    686 
    687 int
    688 uhidioctl(dev_t dev, u_long cmd, void *addr, int flag, struct lwp *l)
    689 {
    690 	struct uhid_softc *sc;
    691 	int error;
    692 
    693 	sc = device_lookup_private(&uhid_cd, UHIDUNIT(dev));
    694 	if (sc == NULL)
    695 		return ENXIO;
    696 
    697 	if (sc->sc_dying)
    698 		return EIO;
    699 
    700 	mutex_enter(&sc->sc_lock);
    701 	sc->sc_refcnt++;
    702 	mutex_exit(&sc->sc_lock);
    703 
    704 	mutex_enter(&sc->sc_access_lock);
    705 	error = uhid_do_ioctl(sc, cmd, addr, flag, l);
    706 	mutex_exit(&sc->sc_access_lock);
    707 
    708 	mutex_enter(&sc->sc_lock);
    709 	if (--sc->sc_refcnt < 0)
    710 		usb_detach_broadcast(sc->sc_hdev.sc_dev, &sc->sc_detach_cv);
    711 	mutex_exit(&sc->sc_lock);
    712 	return error;
    713 }
    714 
    715 int
    716 uhidpoll(dev_t dev, int events, struct lwp *l)
    717 {
    718 	struct uhid_softc *sc;
    719 	int revents = 0;
    720 
    721 	sc = device_lookup_private(&uhid_cd, UHIDUNIT(dev));
    722 	if (sc == NULL)
    723 		return ENXIO;
    724 
    725 	if (sc->sc_dying)
    726 		return EIO;
    727 
    728 	mutex_enter(&sc->sc_lock);
    729 	if (events & (POLLOUT | POLLWRNORM))
    730 		revents |= events & (POLLOUT | POLLWRNORM);
    731 	if (events & (POLLIN | POLLRDNORM)) {
    732 		if (sc->sc_q.c_cc > 0)
    733 			revents |= events & (POLLIN | POLLRDNORM);
    734 		else
    735 			selrecord(l, &sc->sc_rsel);
    736 	}
    737 	mutex_exit(&sc->sc_lock);
    738 
    739 	return revents;
    740 }
    741 
    742 static void
    743 filt_uhidrdetach(struct knote *kn)
    744 {
    745 	struct uhid_softc *sc = kn->kn_hook;
    746 
    747 	mutex_enter(&sc->sc_lock);
    748 	SLIST_REMOVE(&sc->sc_rsel.sel_klist, kn, knote, kn_selnext);
    749 	mutex_exit(&sc->sc_lock);
    750 }
    751 
    752 static int
    753 filt_uhidread(struct knote *kn, long hint)
    754 {
    755 	struct uhid_softc *sc = kn->kn_hook;
    756 
    757 	kn->kn_data = sc->sc_q.c_cc;
    758 	return kn->kn_data > 0;
    759 }
    760 
    761 static const struct filterops uhidread_filtops = {
    762 	.f_isfd = 1,
    763 	.f_attach = NULL,
    764 	.f_detach = filt_uhidrdetach,
    765 	.f_event = filt_uhidread,
    766 };
    767 
    768 static const struct filterops uhid_seltrue_filtops = {
    769 	.f_isfd = 1,
    770 	.f_attach = NULL,
    771 	.f_detach = filt_uhidrdetach,
    772 	.f_event = filt_seltrue,
    773 };
    774 
    775 int
    776 uhidkqfilter(dev_t dev, struct knote *kn)
    777 {
    778 	struct uhid_softc *sc;
    779 	struct klist *klist;
    780 
    781 	sc = device_lookup_private(&uhid_cd, UHIDUNIT(dev));
    782 
    783 	if (sc->sc_dying)
    784 		return ENXIO;
    785 
    786 	switch (kn->kn_filter) {
    787 	case EVFILT_READ:
    788 		klist = &sc->sc_rsel.sel_klist;
    789 		kn->kn_fop = &uhidread_filtops;
    790 		break;
    791 
    792 	case EVFILT_WRITE:
    793 		klist = &sc->sc_rsel.sel_klist;
    794 		kn->kn_fop = &uhid_seltrue_filtops;
    795 		break;
    796 
    797 	default:
    798 		return EINVAL;
    799 	}
    800 
    801 	kn->kn_hook = sc;
    802 
    803 	mutex_enter(&sc->sc_lock);
    804 	SLIST_INSERT_HEAD(klist, kn, kn_selnext);
    805 	mutex_exit(&sc->sc_lock);
    806 
    807 	return 0;
    808 }
    809