Pull altix-fpga-reset into release branch
[linux-2.6] / drivers / usb / input / hid-core.c
1 /*
2  *  USB HID support for Linux
3  *
4  *  Copyright (c) 1999 Andreas Gal
5  *  Copyright (c) 2000-2005 Vojtech Pavlik <vojtech@suse.cz>
6  *  Copyright (c) 2005 Michael Haboustak <mike-@cinci.rr.com> for Concept2, Inc
7  */
8
9 /*
10  * This program is free software; you can redistribute it and/or modify it
11  * under the terms of the GNU General Public License as published by the Free
12  * Software Foundation; either version 2 of the License, or (at your option)
13  * any later version.
14  */
15
16 #include <linux/module.h>
17 #include <linux/slab.h>
18 #include <linux/init.h>
19 #include <linux/kernel.h>
20 #include <linux/sched.h>
21 #include <linux/list.h>
22 #include <linux/mm.h>
23 #include <linux/smp_lock.h>
24 #include <linux/spinlock.h>
25 #include <asm/unaligned.h>
26 #include <asm/byteorder.h>
27 #include <linux/input.h>
28 #include <linux/wait.h>
29
30 #undef DEBUG
31 #undef DEBUG_DATA
32
33 #include <linux/usb.h>
34
35 #include "hid.h"
36 #include <linux/hiddev.h>
37
38 /*
39  * Version Information
40  */
41
42 #define DRIVER_VERSION "v2.6"
43 #define DRIVER_AUTHOR "Andreas Gal, Vojtech Pavlik"
44 #define DRIVER_DESC "USB HID core driver"
45 #define DRIVER_LICENSE "GPL"
46
47 static char *hid_types[] = {"Device", "Pointer", "Mouse", "Device", "Joystick",
48                                 "Gamepad", "Keyboard", "Keypad", "Multi-Axis Controller"};
49 /*
50  * Module parameters.
51  */
52
53 static unsigned int hid_mousepoll_interval;
54 module_param_named(mousepoll, hid_mousepoll_interval, uint, 0644);
55 MODULE_PARM_DESC(mousepoll, "Polling interval of mice");
56
57 /*
58  * Register a new report for a device.
59  */
60
61 static struct hid_report *hid_register_report(struct hid_device *device, unsigned type, unsigned id)
62 {
63         struct hid_report_enum *report_enum = device->report_enum + type;
64         struct hid_report *report;
65
66         if (report_enum->report_id_hash[id])
67                 return report_enum->report_id_hash[id];
68
69         if (!(report = kmalloc(sizeof(struct hid_report), GFP_KERNEL)))
70                 return NULL;
71         memset(report, 0, sizeof(struct hid_report));
72
73         if (id != 0)
74                 report_enum->numbered = 1;
75
76         report->id = id;
77         report->type = type;
78         report->size = 0;
79         report->device = device;
80         report_enum->report_id_hash[id] = report;
81
82         list_add_tail(&report->list, &report_enum->report_list);
83
84         return report;
85 }
86
87 /*
88  * Register a new field for this report.
89  */
90
91 static struct hid_field *hid_register_field(struct hid_report *report, unsigned usages, unsigned values)
92 {
93         struct hid_field *field;
94
95         if (report->maxfield == HID_MAX_FIELDS) {
96                 dbg("too many fields in report");
97                 return NULL;
98         }
99
100         if (!(field = kmalloc(sizeof(struct hid_field) + usages * sizeof(struct hid_usage)
101                 + values * sizeof(unsigned), GFP_KERNEL))) return NULL;
102
103         memset(field, 0, sizeof(struct hid_field) + usages * sizeof(struct hid_usage)
104                 + values * sizeof(unsigned));
105
106         field->index = report->maxfield++;
107         report->field[field->index] = field;
108         field->usage = (struct hid_usage *)(field + 1);
109         field->value = (unsigned *)(field->usage + usages);
110         field->report = report;
111
112         return field;
113 }
114
115 /*
116  * Open a collection. The type/usage is pushed on the stack.
117  */
118
119 static int open_collection(struct hid_parser *parser, unsigned type)
120 {
121         struct hid_collection *collection;
122         unsigned usage;
123
124         usage = parser->local.usage[0];
125
126         if (parser->collection_stack_ptr == HID_COLLECTION_STACK_SIZE) {
127                 dbg("collection stack overflow");
128                 return -1;
129         }
130
131         if (parser->device->maxcollection == parser->device->collection_size) {
132                 collection = kmalloc(sizeof(struct hid_collection) *
133                                 parser->device->collection_size * 2, GFP_KERNEL);
134                 if (collection == NULL) {
135                         dbg("failed to reallocate collection array");
136                         return -1;
137                 }
138                 memcpy(collection, parser->device->collection,
139                         sizeof(struct hid_collection) *
140                         parser->device->collection_size);
141                 memset(collection + parser->device->collection_size, 0,
142                         sizeof(struct hid_collection) *
143                         parser->device->collection_size);
144                 kfree(parser->device->collection);
145                 parser->device->collection = collection;
146                 parser->device->collection_size *= 2;
147         }
148
149         parser->collection_stack[parser->collection_stack_ptr++] =
150                 parser->device->maxcollection;
151
152         collection = parser->device->collection +
153                 parser->device->maxcollection++;
154         collection->type = type;
155         collection->usage = usage;
156         collection->level = parser->collection_stack_ptr - 1;
157
158         if (type == HID_COLLECTION_APPLICATION)
159                 parser->device->maxapplication++;
160
161         return 0;
162 }
163
164 /*
165  * Close a collection.
166  */
167
168 static int close_collection(struct hid_parser *parser)
169 {
170         if (!parser->collection_stack_ptr) {
171                 dbg("collection stack underflow");
172                 return -1;
173         }
174         parser->collection_stack_ptr--;
175         return 0;
176 }
177
178 /*
179  * Climb up the stack, search for the specified collection type
180  * and return the usage.
181  */
182
183 static unsigned hid_lookup_collection(struct hid_parser *parser, unsigned type)
184 {
185         int n;
186         for (n = parser->collection_stack_ptr - 1; n >= 0; n--)
187                 if (parser->device->collection[parser->collection_stack[n]].type == type)
188                         return parser->device->collection[parser->collection_stack[n]].usage;
189         return 0; /* we know nothing about this usage type */
190 }
191
192 /*
193  * Add a usage to the temporary parser table.
194  */
195
196 static int hid_add_usage(struct hid_parser *parser, unsigned usage)
197 {
198         if (parser->local.usage_index >= HID_MAX_USAGES) {
199                 dbg("usage index exceeded");
200                 return -1;
201         }
202         parser->local.usage[parser->local.usage_index] = usage;
203         parser->local.collection_index[parser->local.usage_index] =
204                 parser->collection_stack_ptr ?
205                 parser->collection_stack[parser->collection_stack_ptr - 1] : 0;
206         parser->local.usage_index++;
207         return 0;
208 }
209
210 /*
211  * Register a new field for this report.
212  */
213
214 static int hid_add_field(struct hid_parser *parser, unsigned report_type, unsigned flags)
215 {
216         struct hid_report *report;
217         struct hid_field *field;
218         int usages;
219         unsigned offset;
220         int i;
221
222         if (!(report = hid_register_report(parser->device, report_type, parser->global.report_id))) {
223                 dbg("hid_register_report failed");
224                 return -1;
225         }
226
227         if (parser->global.logical_maximum < parser->global.logical_minimum) {
228                 dbg("logical range invalid %d %d", parser->global.logical_minimum, parser->global.logical_maximum);
229                 return -1;
230         }
231
232         offset = report->size;
233         report->size += parser->global.report_size * parser->global.report_count;
234
235         if (!parser->local.usage_index) /* Ignore padding fields */
236                 return 0;
237
238         usages = max_t(int, parser->local.usage_index, parser->global.report_count);
239
240         if ((field = hid_register_field(report, usages, parser->global.report_count)) == NULL)
241                 return 0;
242
243         field->physical = hid_lookup_collection(parser, HID_COLLECTION_PHYSICAL);
244         field->logical = hid_lookup_collection(parser, HID_COLLECTION_LOGICAL);
245         field->application = hid_lookup_collection(parser, HID_COLLECTION_APPLICATION);
246
247         for (i = 0; i < usages; i++) {
248                 int j = i;
249                 /* Duplicate the last usage we parsed if we have excess values */
250                 if (i >= parser->local.usage_index)
251                         j = parser->local.usage_index - 1;
252                 field->usage[i].hid = parser->local.usage[j];
253                 field->usage[i].collection_index =
254                         parser->local.collection_index[j];
255         }
256
257         field->maxusage = usages;
258         field->flags = flags;
259         field->report_offset = offset;
260         field->report_type = report_type;
261         field->report_size = parser->global.report_size;
262         field->report_count = parser->global.report_count;
263         field->logical_minimum = parser->global.logical_minimum;
264         field->logical_maximum = parser->global.logical_maximum;
265         field->physical_minimum = parser->global.physical_minimum;
266         field->physical_maximum = parser->global.physical_maximum;
267         field->unit_exponent = parser->global.unit_exponent;
268         field->unit = parser->global.unit;
269
270         return 0;
271 }
272
273 /*
274  * Read data value from item.
275  */
276
277 static __inline__ __u32 item_udata(struct hid_item *item)
278 {
279         switch (item->size) {
280                 case 1: return item->data.u8;
281                 case 2: return item->data.u16;
282                 case 4: return item->data.u32;
283         }
284         return 0;
285 }
286
287 static __inline__ __s32 item_sdata(struct hid_item *item)
288 {
289         switch (item->size) {
290                 case 1: return item->data.s8;
291                 case 2: return item->data.s16;
292                 case 4: return item->data.s32;
293         }
294         return 0;
295 }
296
297 /*
298  * Process a global item.
299  */
300
301 static int hid_parser_global(struct hid_parser *parser, struct hid_item *item)
302 {
303         switch (item->tag) {
304
305                 case HID_GLOBAL_ITEM_TAG_PUSH:
306
307                         if (parser->global_stack_ptr == HID_GLOBAL_STACK_SIZE) {
308                                 dbg("global enviroment stack overflow");
309                                 return -1;
310                         }
311
312                         memcpy(parser->global_stack + parser->global_stack_ptr++,
313                                 &parser->global, sizeof(struct hid_global));
314                         return 0;
315
316                 case HID_GLOBAL_ITEM_TAG_POP:
317
318                         if (!parser->global_stack_ptr) {
319                                 dbg("global enviroment stack underflow");
320                                 return -1;
321                         }
322
323                         memcpy(&parser->global, parser->global_stack + --parser->global_stack_ptr,
324                                 sizeof(struct hid_global));
325                         return 0;
326
327                 case HID_GLOBAL_ITEM_TAG_USAGE_PAGE:
328                         parser->global.usage_page = item_udata(item);
329                         return 0;
330
331                 case HID_GLOBAL_ITEM_TAG_LOGICAL_MINIMUM:
332                         parser->global.logical_minimum = item_sdata(item);
333                         return 0;
334
335                 case HID_GLOBAL_ITEM_TAG_LOGICAL_MAXIMUM:
336                         if (parser->global.logical_minimum < 0)
337                                 parser->global.logical_maximum = item_sdata(item);
338                         else
339                                 parser->global.logical_maximum = item_udata(item);
340                         return 0;
341
342                 case HID_GLOBAL_ITEM_TAG_PHYSICAL_MINIMUM:
343                         parser->global.physical_minimum = item_sdata(item);
344                         return 0;
345
346                 case HID_GLOBAL_ITEM_TAG_PHYSICAL_MAXIMUM:
347                         if (parser->global.physical_minimum < 0)
348                                 parser->global.physical_maximum = item_sdata(item);
349                         else
350                                 parser->global.physical_maximum = item_udata(item);
351                         return 0;
352
353                 case HID_GLOBAL_ITEM_TAG_UNIT_EXPONENT:
354                         parser->global.unit_exponent = item_sdata(item);
355                         return 0;
356
357                 case HID_GLOBAL_ITEM_TAG_UNIT:
358                         parser->global.unit = item_udata(item);
359                         return 0;
360
361                 case HID_GLOBAL_ITEM_TAG_REPORT_SIZE:
362                         if ((parser->global.report_size = item_udata(item)) > 32) {
363                                 dbg("invalid report_size %d", parser->global.report_size);
364                                 return -1;
365                         }
366                         return 0;
367
368                 case HID_GLOBAL_ITEM_TAG_REPORT_COUNT:
369                         if ((parser->global.report_count = item_udata(item)) > HID_MAX_USAGES) {
370                                 dbg("invalid report_count %d", parser->global.report_count);
371                                 return -1;
372                         }
373                         return 0;
374
375                 case HID_GLOBAL_ITEM_TAG_REPORT_ID:
376                         if ((parser->global.report_id = item_udata(item)) == 0) {
377                                 dbg("report_id 0 is invalid");
378                                 return -1;
379                         }
380                         return 0;
381
382                 default:
383                         dbg("unknown global tag 0x%x", item->tag);
384                         return -1;
385         }
386 }
387
388 /*
389  * Process a local item.
390  */
391
392 static int hid_parser_local(struct hid_parser *parser, struct hid_item *item)
393 {
394         __u32 data;
395         unsigned n;
396
397         if (item->size == 0) {
398                 dbg("item data expected for local item");
399                 return -1;
400         }
401
402         data = item_udata(item);
403
404         switch (item->tag) {
405
406                 case HID_LOCAL_ITEM_TAG_DELIMITER:
407
408                         if (data) {
409                                 /*
410                                  * We treat items before the first delimiter
411                                  * as global to all usage sets (branch 0).
412                                  * In the moment we process only these global
413                                  * items and the first delimiter set.
414                                  */
415                                 if (parser->local.delimiter_depth != 0) {
416                                         dbg("nested delimiters");
417                                         return -1;
418                                 }
419                                 parser->local.delimiter_depth++;
420                                 parser->local.delimiter_branch++;
421                         } else {
422                                 if (parser->local.delimiter_depth < 1) {
423                                         dbg("bogus close delimiter");
424                                         return -1;
425                                 }
426                                 parser->local.delimiter_depth--;
427                         }
428                         return 1;
429
430                 case HID_LOCAL_ITEM_TAG_USAGE:
431
432                         if (parser->local.delimiter_branch > 1) {
433                                 dbg("alternative usage ignored");
434                                 return 0;
435                         }
436
437                         if (item->size <= 2)
438                                 data = (parser->global.usage_page << 16) + data;
439
440                         return hid_add_usage(parser, data);
441
442                 case HID_LOCAL_ITEM_TAG_USAGE_MINIMUM:
443
444                         if (parser->local.delimiter_branch > 1) {
445                                 dbg("alternative usage ignored");
446                                 return 0;
447                         }
448
449                         if (item->size <= 2)
450                                 data = (parser->global.usage_page << 16) + data;
451
452                         parser->local.usage_minimum = data;
453                         return 0;
454
455                 case HID_LOCAL_ITEM_TAG_USAGE_MAXIMUM:
456
457                         if (parser->local.delimiter_branch > 1) {
458                                 dbg("alternative usage ignored");
459                                 return 0;
460                         }
461
462                         if (item->size <= 2)
463                                 data = (parser->global.usage_page << 16) + data;
464
465                         for (n = parser->local.usage_minimum; n <= data; n++)
466                                 if (hid_add_usage(parser, n)) {
467                                         dbg("hid_add_usage failed\n");
468                                         return -1;
469                                 }
470                         return 0;
471
472                 default:
473
474                         dbg("unknown local item tag 0x%x", item->tag);
475                         return 0;
476         }
477         return 0;
478 }
479
480 /*
481  * Process a main item.
482  */
483
484 static int hid_parser_main(struct hid_parser *parser, struct hid_item *item)
485 {
486         __u32 data;
487         int ret;
488
489         data = item_udata(item);
490
491         switch (item->tag) {
492                 case HID_MAIN_ITEM_TAG_BEGIN_COLLECTION:
493                         ret = open_collection(parser, data & 0xff);
494                         break;
495                 case HID_MAIN_ITEM_TAG_END_COLLECTION:
496                         ret = close_collection(parser);
497                         break;
498                 case HID_MAIN_ITEM_TAG_INPUT:
499                         ret = hid_add_field(parser, HID_INPUT_REPORT, data);
500                         break;
501                 case HID_MAIN_ITEM_TAG_OUTPUT:
502                         ret = hid_add_field(parser, HID_OUTPUT_REPORT, data);
503                         break;
504                 case HID_MAIN_ITEM_TAG_FEATURE:
505                         ret = hid_add_field(parser, HID_FEATURE_REPORT, data);
506                         break;
507                 default:
508                         dbg("unknown main item tag 0x%x", item->tag);
509                         ret = 0;
510         }
511
512         memset(&parser->local, 0, sizeof(parser->local));       /* Reset the local parser environment */
513
514         return ret;
515 }
516
517 /*
518  * Process a reserved item.
519  */
520
521 static int hid_parser_reserved(struct hid_parser *parser, struct hid_item *item)
522 {
523         dbg("reserved item type, tag 0x%x", item->tag);
524         return 0;
525 }
526
527 /*
528  * Free a report and all registered fields. The field->usage and
529  * field->value table's are allocated behind the field, so we need
530  * only to free(field) itself.
531  */
532
533 static void hid_free_report(struct hid_report *report)
534 {
535         unsigned n;
536
537         for (n = 0; n < report->maxfield; n++)
538                 kfree(report->field[n]);
539         kfree(report);
540 }
541
542 /*
543  * Free a device structure, all reports, and all fields.
544  */
545
546 static void hid_free_device(struct hid_device *device)
547 {
548         unsigned i,j;
549
550         hid_ff_exit(device);
551
552         for (i = 0; i < HID_REPORT_TYPES; i++) {
553                 struct hid_report_enum *report_enum = device->report_enum + i;
554
555                 for (j = 0; j < 256; j++) {
556                         struct hid_report *report = report_enum->report_id_hash[j];
557                         if (report)
558                                 hid_free_report(report);
559                 }
560         }
561
562         kfree(device->rdesc);
563         kfree(device);
564 }
565
566 /*
567  * Fetch a report description item from the data stream. We support long
568  * items, though they are not used yet.
569  */
570
571 static u8 *fetch_item(__u8 *start, __u8 *end, struct hid_item *item)
572 {
573         u8 b;
574
575         if ((end - start) <= 0)
576                 return NULL;
577
578         b = *start++;
579
580         item->type = (b >> 2) & 3;
581         item->tag  = (b >> 4) & 15;
582
583         if (item->tag == HID_ITEM_TAG_LONG) {
584
585                 item->format = HID_ITEM_FORMAT_LONG;
586
587                 if ((end - start) < 2)
588                         return NULL;
589
590                 item->size = *start++;
591                 item->tag  = *start++;
592
593                 if ((end - start) < item->size)
594                         return NULL;
595
596                 item->data.longdata = start;
597                 start += item->size;
598                 return start;
599         }
600
601         item->format = HID_ITEM_FORMAT_SHORT;
602         item->size = b & 3;
603
604         switch (item->size) {
605
606                 case 0:
607                         return start;
608
609                 case 1:
610                         if ((end - start) < 1)
611                                 return NULL;
612                         item->data.u8 = *start++;
613                         return start;
614
615                 case 2:
616                         if ((end - start) < 2)
617                                 return NULL;
618                         item->data.u16 = le16_to_cpu(get_unaligned((__le16*)start));
619                         start = (__u8 *)((__le16 *)start + 1);
620                         return start;
621
622                 case 3:
623                         item->size++;
624                         if ((end - start) < 4)
625                                 return NULL;
626                         item->data.u32 = le32_to_cpu(get_unaligned((__le32*)start));
627                         start = (__u8 *)((__le32 *)start + 1);
628                         return start;
629         }
630
631         return NULL;
632 }
633
634 /*
635  * Parse a report description into a hid_device structure. Reports are
636  * enumerated, fields are attached to these reports.
637  */
638
639 static struct hid_device *hid_parse_report(__u8 *start, unsigned size)
640 {
641         struct hid_device *device;
642         struct hid_parser *parser;
643         struct hid_item item;
644         __u8 *end;
645         unsigned i;
646         static int (*dispatch_type[])(struct hid_parser *parser,
647                                       struct hid_item *item) = {
648                 hid_parser_main,
649                 hid_parser_global,
650                 hid_parser_local,
651                 hid_parser_reserved
652         };
653
654         if (!(device = kmalloc(sizeof(struct hid_device), GFP_KERNEL)))
655                 return NULL;
656         memset(device, 0, sizeof(struct hid_device));
657
658         if (!(device->collection = kmalloc(sizeof(struct hid_collection) *
659                                    HID_DEFAULT_NUM_COLLECTIONS, GFP_KERNEL))) {
660                 kfree(device);
661                 return NULL;
662         }
663         memset(device->collection, 0, sizeof(struct hid_collection) *
664                 HID_DEFAULT_NUM_COLLECTIONS);
665         device->collection_size = HID_DEFAULT_NUM_COLLECTIONS;
666
667         for (i = 0; i < HID_REPORT_TYPES; i++)
668                 INIT_LIST_HEAD(&device->report_enum[i].report_list);
669
670         if (!(device->rdesc = (__u8 *)kmalloc(size, GFP_KERNEL))) {
671                 kfree(device->collection);
672                 kfree(device);
673                 return NULL;
674         }
675         memcpy(device->rdesc, start, size);
676         device->rsize = size;
677
678         if (!(parser = kmalloc(sizeof(struct hid_parser), GFP_KERNEL))) {
679                 kfree(device->rdesc);
680                 kfree(device->collection);
681                 kfree(device);
682                 return NULL;
683         }
684         memset(parser, 0, sizeof(struct hid_parser));
685         parser->device = device;
686
687         end = start + size;
688         while ((start = fetch_item(start, end, &item)) != NULL) {
689
690                 if (item.format != HID_ITEM_FORMAT_SHORT) {
691                         dbg("unexpected long global item");
692                         kfree(device->collection);
693                         hid_free_device(device);
694                         kfree(parser);
695                         return NULL;
696                 }
697
698                 if (dispatch_type[item.type](parser, &item)) {
699                         dbg("item %u %u %u %u parsing failed\n",
700                                 item.format, (unsigned)item.size, (unsigned)item.type, (unsigned)item.tag);
701                         kfree(device->collection);
702                         hid_free_device(device);
703                         kfree(parser);
704                         return NULL;
705                 }
706
707                 if (start == end) {
708                         if (parser->collection_stack_ptr) {
709                                 dbg("unbalanced collection at end of report description");
710                                 kfree(device->collection);
711                                 hid_free_device(device);
712                                 kfree(parser);
713                                 return NULL;
714                         }
715                         if (parser->local.delimiter_depth) {
716                                 dbg("unbalanced delimiter at end of report description");
717                                 kfree(device->collection);
718                                 hid_free_device(device);
719                                 kfree(parser);
720                                 return NULL;
721                         }
722                         kfree(parser);
723                         return device;
724                 }
725         }
726
727         dbg("item fetching failed at offset %d\n", (int)(end - start));
728         kfree(device->collection);
729         hid_free_device(device);
730         kfree(parser);
731         return NULL;
732 }
733
734 /*
735  * Convert a signed n-bit integer to signed 32-bit integer. Common
736  * cases are done through the compiler, the screwed things has to be
737  * done by hand.
738  */
739
740 static __inline__ __s32 snto32(__u32 value, unsigned n)
741 {
742         switch (n) {
743                 case 8:  return ((__s8)value);
744                 case 16: return ((__s16)value);
745                 case 32: return ((__s32)value);
746         }
747         return value & (1 << (n - 1)) ? value | (-1 << n) : value;
748 }
749
750 /*
751  * Convert a signed 32-bit integer to a signed n-bit integer.
752  */
753
754 static __inline__ __u32 s32ton(__s32 value, unsigned n)
755 {
756         __s32 a = value >> (n - 1);
757         if (a && a != -1)
758                 return value < 0 ? 1 << (n - 1) : (1 << (n - 1)) - 1;
759         return value & ((1 << n) - 1);
760 }
761
762 /*
763  * Extract/implement a data field from/to a report.
764  */
765
766 static __inline__ __u32 extract(__u8 *report, unsigned offset, unsigned n)
767 {
768         report += (offset >> 5) << 2; offset &= 31;
769         return (le64_to_cpu(get_unaligned((__le64*)report)) >> offset) & ((1ULL << n) - 1);
770 }
771
772 static __inline__ void implement(__u8 *report, unsigned offset, unsigned n, __u32 value)
773 {
774         report += (offset >> 5) << 2; offset &= 31;
775         put_unaligned((get_unaligned((__le64*)report)
776                 & cpu_to_le64(~((((__u64) 1 << n) - 1) << offset)))
777                 | cpu_to_le64((__u64)value << offset), (__le64*)report);
778 }
779
780 /*
781  * Search an array for a value.
782  */
783
784 static __inline__ int search(__s32 *array, __s32 value, unsigned n)
785 {
786         while (n--) {
787                 if (*array++ == value)
788                         return 0;
789         }
790         return -1;
791 }
792
793 static void hid_process_event(struct hid_device *hid, struct hid_field *field, struct hid_usage *usage, __s32 value, int interrupt, struct pt_regs *regs)
794 {
795         hid_dump_input(usage, value);
796         if (hid->claimed & HID_CLAIMED_INPUT)
797                 hidinput_hid_event(hid, field, usage, value, regs);
798         if (hid->claimed & HID_CLAIMED_HIDDEV && interrupt)
799                 hiddev_hid_event(hid, field, usage, value, regs);
800 }
801
802 /*
803  * Analyse a received field, and fetch the data from it. The field
804  * content is stored for next report processing (we do differential
805  * reporting to the layer).
806  */
807
808 static void hid_input_field(struct hid_device *hid, struct hid_field *field, __u8 *data, int interrupt, struct pt_regs *regs)
809 {
810         unsigned n;
811         unsigned count = field->report_count;
812         unsigned offset = field->report_offset;
813         unsigned size = field->report_size;
814         __s32 min = field->logical_minimum;
815         __s32 max = field->logical_maximum;
816         __s32 *value;
817
818         if (!(value = kmalloc(sizeof(__s32) * count, GFP_ATOMIC)))
819                 return;
820
821         for (n = 0; n < count; n++) {
822
823                         value[n] = min < 0 ? snto32(extract(data, offset + n * size, size), size) :
824                                                     extract(data, offset + n * size, size);
825
826                         if (!(field->flags & HID_MAIN_ITEM_VARIABLE) /* Ignore report if ErrorRollOver */
827                             && value[n] >= min && value[n] <= max
828                             && field->usage[value[n] - min].hid == HID_UP_KEYBOARD + 1)
829                                 goto exit;
830         }
831
832         for (n = 0; n < count; n++) {
833
834                 if (HID_MAIN_ITEM_VARIABLE & field->flags) {
835                         hid_process_event(hid, field, &field->usage[n], value[n], interrupt, regs);
836                         continue;
837                 }
838
839                 if (field->value[n] >= min && field->value[n] <= max
840                         && field->usage[field->value[n] - min].hid
841                         && search(value, field->value[n], count))
842                                 hid_process_event(hid, field, &field->usage[field->value[n] - min], 0, interrupt, regs);
843
844                 if (value[n] >= min && value[n] <= max
845                         && field->usage[value[n] - min].hid
846                         && search(field->value, value[n], count))
847                                 hid_process_event(hid, field, &field->usage[value[n] - min], 1, interrupt, regs);
848         }
849
850         memcpy(field->value, value, count * sizeof(__s32));
851 exit:
852         kfree(value);
853 }
854
855 static int hid_input_report(int type, struct urb *urb, int interrupt, struct pt_regs *regs)
856 {
857         struct hid_device *hid = urb->context;
858         struct hid_report_enum *report_enum = hid->report_enum + type;
859         u8 *data = urb->transfer_buffer;
860         int len = urb->actual_length;
861         struct hid_report *report;
862         int n, size;
863
864         if (!len) {
865                 dbg("empty report");
866                 return -1;
867         }
868
869 #ifdef DEBUG_DATA
870         printk(KERN_DEBUG __FILE__ ": report (size %u) (%snumbered)\n", len, report_enum->numbered ? "" : "un");
871 #endif
872
873         n = 0;                          /* Normally report number is 0 */
874         if (report_enum->numbered) {    /* Device uses numbered reports, data[0] is report number */
875                 n = *data++;
876                 len--;
877         }
878
879 #ifdef DEBUG_DATA
880         {
881                 int i;
882                 printk(KERN_DEBUG __FILE__ ": report %d (size %u) = ", n, len);
883                 for (i = 0; i < len; i++)
884                         printk(" %02x", data[i]);
885                 printk("\n");
886         }
887 #endif
888
889         if (!(report = report_enum->report_id_hash[n])) {
890                 dbg("undefined report_id %d received", n);
891                 return -1;
892         }
893
894         size = ((report->size - 1) >> 3) + 1;
895
896         if (len < size)
897                 dbg("report %d is too short, (%d < %d)", report->id, len, size);
898
899         if (hid->claimed & HID_CLAIMED_HIDDEV)
900                 hiddev_report_event(hid, report);
901
902         for (n = 0; n < report->maxfield; n++)
903                 hid_input_field(hid, report->field[n], data, interrupt, regs);
904
905         if (hid->claimed & HID_CLAIMED_INPUT)
906                 hidinput_report_event(hid, report);
907
908         return 0;
909 }
910
911 /*
912  * Input interrupt completion handler.
913  */
914
915 static void hid_irq_in(struct urb *urb, struct pt_regs *regs)
916 {
917         struct hid_device       *hid = urb->context;
918         int                     status;
919
920         switch (urb->status) {
921                 case 0:                 /* success */
922                         hid_input_report(HID_INPUT_REPORT, urb, 1, regs);
923                         break;
924                 case -ECONNRESET:       /* unlink */
925                 case -ENOENT:
926                 case -EPERM:
927                 case -ESHUTDOWN:        /* unplug */
928                 case -EILSEQ:           /* unplug timeout on uhci */
929                         return;
930                 case -ETIMEDOUT:        /* NAK */
931                         break;
932                 default:                /* error */
933                         warn("input irq status %d received", urb->status);
934         }
935
936         status = usb_submit_urb(urb, SLAB_ATOMIC);
937         if (status)
938                 err("can't resubmit intr, %s-%s/input%d, status %d",
939                                 hid->dev->bus->bus_name, hid->dev->devpath,
940                                 hid->ifnum, status);
941 }
942
943 /*
944  * Output the field into the report.
945  */
946
947 static void hid_output_field(struct hid_field *field, __u8 *data)
948 {
949         unsigned count = field->report_count;
950         unsigned offset = field->report_offset;
951         unsigned size = field->report_size;
952         unsigned n;
953
954         for (n = 0; n < count; n++) {
955                 if (field->logical_minimum < 0) /* signed values */
956                         implement(data, offset + n * size, size, s32ton(field->value[n], size));
957                 else                            /* unsigned values */
958                         implement(data, offset + n * size, size, field->value[n]);
959         }
960 }
961
962 /*
963  * Create a report.
964  */
965
966 static void hid_output_report(struct hid_report *report, __u8 *data)
967 {
968         unsigned n;
969
970         if (report->id > 0)
971                 *data++ = report->id;
972
973         for (n = 0; n < report->maxfield; n++)
974                 hid_output_field(report->field[n], data);
975 }
976
977 /*
978  * Set a field value. The report this field belongs to has to be
979  * created and transferred to the device, to set this value in the
980  * device.
981  */
982
983 int hid_set_field(struct hid_field *field, unsigned offset, __s32 value)
984 {
985         unsigned size = field->report_size;
986
987         hid_dump_input(field->usage + offset, value);
988
989         if (offset >= field->report_count) {
990                 dbg("offset (%d) exceeds report_count (%d)", offset, field->report_count);
991                 hid_dump_field(field, 8);
992                 return -1;
993         }
994         if (field->logical_minimum < 0) {
995                 if (value != snto32(s32ton(value, size), size)) {
996                         dbg("value %d is out of range", value);
997                         return -1;
998                 }
999         }
1000         field->value[offset] = value;
1001         return 0;
1002 }
1003
1004 /*
1005  * Find a report field with a specified HID usage.
1006  */
1007
1008 struct hid_field *hid_find_field_by_usage(struct hid_device *hid, __u32 wanted_usage, int type)
1009 {
1010         struct hid_report *report;
1011         int i;
1012
1013         list_for_each_entry(report, &hid->report_enum[type].report_list, list)
1014                 for (i = 0; i < report->maxfield; i++)
1015                         if (report->field[i]->logical == wanted_usage)
1016                                 return report->field[i];
1017         return NULL;
1018 }
1019
1020 static int hid_submit_out(struct hid_device *hid)
1021 {
1022         struct hid_report *report;
1023
1024         report = hid->out[hid->outtail];
1025
1026         hid_output_report(report, hid->outbuf);
1027         hid->urbout->transfer_buffer_length = ((report->size - 1) >> 3) + 1 + (report->id > 0);
1028         hid->urbout->dev = hid->dev;
1029
1030         dbg("submitting out urb");
1031
1032         if (usb_submit_urb(hid->urbout, GFP_ATOMIC)) {
1033                 err("usb_submit_urb(out) failed");
1034                 return -1;
1035         }
1036
1037         return 0;
1038 }
1039
1040 static int hid_submit_ctrl(struct hid_device *hid)
1041 {
1042         struct hid_report *report;
1043         unsigned char dir;
1044         int len;
1045
1046         report = hid->ctrl[hid->ctrltail].report;
1047         dir = hid->ctrl[hid->ctrltail].dir;
1048
1049         len = ((report->size - 1) >> 3) + 1 + (report->id > 0);
1050         if (dir == USB_DIR_OUT) {
1051                 hid_output_report(report, hid->ctrlbuf);
1052                 hid->urbctrl->pipe = usb_sndctrlpipe(hid->dev, 0);
1053                 hid->urbctrl->transfer_buffer_length = len;
1054         } else {
1055                 int maxpacket, padlen;
1056
1057                 hid->urbctrl->pipe = usb_rcvctrlpipe(hid->dev, 0);
1058                 maxpacket = usb_maxpacket(hid->dev, hid->urbctrl->pipe, 0);
1059                 if (maxpacket > 0) {
1060                         padlen = (len + maxpacket - 1) / maxpacket;
1061                         padlen *= maxpacket;
1062                         if (padlen > hid->bufsize)
1063                                 padlen = hid->bufsize;
1064                 } else
1065                         padlen = 0;
1066                 hid->urbctrl->transfer_buffer_length = padlen;
1067         }
1068         hid->urbctrl->dev = hid->dev;
1069
1070         hid->cr->bRequestType = USB_TYPE_CLASS | USB_RECIP_INTERFACE | dir;
1071         hid->cr->bRequest = (dir == USB_DIR_OUT) ? HID_REQ_SET_REPORT : HID_REQ_GET_REPORT;
1072         hid->cr->wValue = cpu_to_le16(((report->type + 1) << 8) | report->id);
1073         hid->cr->wIndex = cpu_to_le16(hid->ifnum);
1074         hid->cr->wLength = cpu_to_le16(len);
1075
1076         dbg("submitting ctrl urb: %s wValue=0x%04x wIndex=0x%04x wLength=%u",
1077                 hid->cr->bRequest == HID_REQ_SET_REPORT ? "Set_Report" : "Get_Report",
1078                 hid->cr->wValue, hid->cr->wIndex, hid->cr->wLength);
1079
1080         if (usb_submit_urb(hid->urbctrl, GFP_ATOMIC)) {
1081                 err("usb_submit_urb(ctrl) failed");
1082                 return -1;
1083         }
1084
1085         return 0;
1086 }
1087
1088 /*
1089  * Output interrupt completion handler.
1090  */
1091
1092 static void hid_irq_out(struct urb *urb, struct pt_regs *regs)
1093 {
1094         struct hid_device *hid = urb->context;
1095         unsigned long flags;
1096         int unplug = 0;
1097
1098         switch (urb->status) {
1099                 case 0:                 /* success */
1100                         break;
1101                 case -ESHUTDOWN:        /* unplug */
1102                 case -EILSEQ:           /* unplug timeout on uhci */
1103                         unplug = 1;
1104                 case -ECONNRESET:       /* unlink */
1105                 case -ENOENT:
1106                         break;
1107                 default:                /* error */
1108                         warn("output irq status %d received", urb->status);
1109         }
1110
1111         spin_lock_irqsave(&hid->outlock, flags);
1112
1113         if (unplug)
1114                 hid->outtail = hid->outhead;
1115         else
1116                 hid->outtail = (hid->outtail + 1) & (HID_OUTPUT_FIFO_SIZE - 1);
1117
1118         if (hid->outhead != hid->outtail) {
1119                 if (hid_submit_out(hid)) {
1120                         clear_bit(HID_OUT_RUNNING, &hid->iofl);;
1121                         wake_up(&hid->wait);
1122                 }
1123                 spin_unlock_irqrestore(&hid->outlock, flags);
1124                 return;
1125         }
1126
1127         clear_bit(HID_OUT_RUNNING, &hid->iofl);
1128         spin_unlock_irqrestore(&hid->outlock, flags);
1129         wake_up(&hid->wait);
1130 }
1131
1132 /*
1133  * Control pipe completion handler.
1134  */
1135
1136 static void hid_ctrl(struct urb *urb, struct pt_regs *regs)
1137 {
1138         struct hid_device *hid = urb->context;
1139         unsigned long flags;
1140         int unplug = 0;
1141
1142         spin_lock_irqsave(&hid->ctrllock, flags);
1143
1144         switch (urb->status) {
1145                 case 0:                 /* success */
1146                         if (hid->ctrl[hid->ctrltail].dir == USB_DIR_IN)
1147                                 hid_input_report(hid->ctrl[hid->ctrltail].report->type, urb, 0, regs);
1148                         break;
1149                 case -ESHUTDOWN:        /* unplug */
1150                 case -EILSEQ:           /* unplug timectrl on uhci */
1151                         unplug = 1;
1152                 case -ECONNRESET:       /* unlink */
1153                 case -ENOENT:
1154                 case -EPIPE:            /* report not available */
1155                         break;
1156                 default:                /* error */
1157                         warn("ctrl urb status %d received", urb->status);
1158         }
1159
1160         if (unplug)
1161                 hid->ctrltail = hid->ctrlhead;
1162         else
1163                 hid->ctrltail = (hid->ctrltail + 1) & (HID_CONTROL_FIFO_SIZE - 1);
1164
1165         if (hid->ctrlhead != hid->ctrltail) {
1166                 if (hid_submit_ctrl(hid)) {
1167                         clear_bit(HID_CTRL_RUNNING, &hid->iofl);
1168                         wake_up(&hid->wait);
1169                 }
1170                 spin_unlock_irqrestore(&hid->ctrllock, flags);
1171                 return;
1172         }
1173
1174         clear_bit(HID_CTRL_RUNNING, &hid->iofl);
1175         spin_unlock_irqrestore(&hid->ctrllock, flags);
1176         wake_up(&hid->wait);
1177 }
1178
1179 void hid_submit_report(struct hid_device *hid, struct hid_report *report, unsigned char dir)
1180 {
1181         int head;
1182         unsigned long flags;
1183
1184         if ((hid->quirks & HID_QUIRK_NOGET) && dir == USB_DIR_IN)
1185                 return;
1186
1187         if (hid->urbout && dir == USB_DIR_OUT && report->type == HID_OUTPUT_REPORT) {
1188
1189                 spin_lock_irqsave(&hid->outlock, flags);
1190
1191                 if ((head = (hid->outhead + 1) & (HID_OUTPUT_FIFO_SIZE - 1)) == hid->outtail) {
1192                         spin_unlock_irqrestore(&hid->outlock, flags);
1193                         warn("output queue full");
1194                         return;
1195                 }
1196
1197                 hid->out[hid->outhead] = report;
1198                 hid->outhead = head;
1199
1200                 if (!test_and_set_bit(HID_OUT_RUNNING, &hid->iofl))
1201                         if (hid_submit_out(hid))
1202                                 clear_bit(HID_OUT_RUNNING, &hid->iofl);
1203
1204                 spin_unlock_irqrestore(&hid->outlock, flags);
1205                 return;
1206         }
1207
1208         spin_lock_irqsave(&hid->ctrllock, flags);
1209
1210         if ((head = (hid->ctrlhead + 1) & (HID_CONTROL_FIFO_SIZE - 1)) == hid->ctrltail) {
1211                 spin_unlock_irqrestore(&hid->ctrllock, flags);
1212                 warn("control queue full");
1213                 return;
1214         }
1215
1216         hid->ctrl[hid->ctrlhead].report = report;
1217         hid->ctrl[hid->ctrlhead].dir = dir;
1218         hid->ctrlhead = head;
1219
1220         if (!test_and_set_bit(HID_CTRL_RUNNING, &hid->iofl))
1221                 if (hid_submit_ctrl(hid))
1222                         clear_bit(HID_CTRL_RUNNING, &hid->iofl);
1223
1224         spin_unlock_irqrestore(&hid->ctrllock, flags);
1225 }
1226
1227 int hid_wait_io(struct hid_device *hid)
1228 {
1229         if (!wait_event_timeout(hid->wait, (!test_bit(HID_CTRL_RUNNING, &hid->iofl) &&
1230                                         !test_bit(HID_OUT_RUNNING, &hid->iofl)),
1231                                         10*HZ)) {
1232                 dbg("timeout waiting for ctrl or out queue to clear");
1233                 return -1;
1234         }
1235
1236         return 0;
1237 }
1238
1239 static int hid_set_idle(struct usb_device *dev, int ifnum, int report, int idle)
1240 {
1241         return usb_control_msg(dev, usb_sndctrlpipe(dev, 0),
1242                 HID_REQ_SET_IDLE, USB_TYPE_CLASS | USB_RECIP_INTERFACE, (idle << 8) | report,
1243                 ifnum, NULL, 0, USB_CTRL_SET_TIMEOUT);
1244 }
1245
1246 static int hid_get_class_descriptor(struct usb_device *dev, int ifnum,
1247                 unsigned char type, void *buf, int size)
1248 {
1249         int result, retries = 4;
1250
1251         memset(buf,0,size);     // Make sure we parse really received data
1252
1253         do {
1254                 result = usb_control_msg(dev, usb_rcvctrlpipe(dev, 0),
1255                                 USB_REQ_GET_DESCRIPTOR, USB_RECIP_INTERFACE | USB_DIR_IN,
1256                                 (type << 8), ifnum, buf, size, USB_CTRL_GET_TIMEOUT);
1257                 retries--;
1258         } while (result < size && retries);
1259         return result;
1260 }
1261
1262 int hid_open(struct hid_device *hid)
1263 {
1264         if (hid->open++)
1265                 return 0;
1266
1267         hid->urbin->dev = hid->dev;
1268
1269         if (usb_submit_urb(hid->urbin, GFP_KERNEL))
1270                 return -EIO;
1271
1272         return 0;
1273 }
1274
1275 void hid_close(struct hid_device *hid)
1276 {
1277         if (!--hid->open)
1278                 usb_kill_urb(hid->urbin);
1279 }
1280
1281 /*
1282  * Initialize all reports
1283  */
1284
1285 void hid_init_reports(struct hid_device *hid)
1286 {
1287         struct hid_report *report;
1288         int err, ret;
1289
1290         list_for_each_entry(report, &hid->report_enum[HID_INPUT_REPORT].report_list, list)
1291                 hid_submit_report(hid, report, USB_DIR_IN);
1292
1293         list_for_each_entry(report, &hid->report_enum[HID_FEATURE_REPORT].report_list, list)
1294                 hid_submit_report(hid, report, USB_DIR_IN);
1295
1296         err = 0;
1297         ret = hid_wait_io(hid);
1298         while (ret) {
1299                 err |= ret;
1300                 if (test_bit(HID_CTRL_RUNNING, &hid->iofl))
1301                         usb_kill_urb(hid->urbctrl);
1302                 if (test_bit(HID_OUT_RUNNING, &hid->iofl))
1303                         usb_kill_urb(hid->urbout);
1304                 ret = hid_wait_io(hid);
1305         }
1306
1307         if (err)
1308                 warn("timeout initializing reports\n");
1309 }
1310
1311 #define USB_VENDOR_ID_WACOM             0x056a
1312 #define USB_DEVICE_ID_WACOM_PENPARTNER  0x0000
1313 #define USB_DEVICE_ID_WACOM_GRAPHIRE    0x0010
1314 #define USB_DEVICE_ID_WACOM_INTUOS      0x0020
1315 #define USB_DEVICE_ID_WACOM_PL          0x0030
1316 #define USB_DEVICE_ID_WACOM_INTUOS2     0x0040
1317 #define USB_DEVICE_ID_WACOM_VOLITO      0x0060
1318 #define USB_DEVICE_ID_WACOM_PTU         0x0003
1319 #define USB_DEVICE_ID_WACOM_INTUOS3     0x00B0
1320 #define USB_DEVICE_ID_WACOM_CINTIQ      0x003F
1321
1322 #define USB_VENDOR_ID_ACECAD            0x0460
1323 #define USB_DEVICE_ID_ACECAD_FLAIR      0x0004
1324 #define USB_DEVICE_ID_ACECAD_302        0x0008
1325
1326 #define USB_VENDOR_ID_KBGEAR            0x084e
1327 #define USB_DEVICE_ID_KBGEAR_JAMSTUDIO  0x1001
1328
1329 #define USB_VENDOR_ID_AIPTEK            0x08ca
1330 #define USB_DEVICE_ID_AIPTEK_01         0x0001
1331 #define USB_DEVICE_ID_AIPTEK_10         0x0010
1332 #define USB_DEVICE_ID_AIPTEK_20         0x0020
1333 #define USB_DEVICE_ID_AIPTEK_21         0x0021
1334 #define USB_DEVICE_ID_AIPTEK_22         0x0022
1335 #define USB_DEVICE_ID_AIPTEK_23         0x0023
1336 #define USB_DEVICE_ID_AIPTEK_24         0x0024
1337
1338 #define USB_VENDOR_ID_GRIFFIN           0x077d
1339 #define USB_DEVICE_ID_POWERMATE         0x0410
1340 #define USB_DEVICE_ID_SOUNDKNOB         0x04AA
1341
1342 #define USB_VENDOR_ID_ATEN              0x0557
1343 #define USB_DEVICE_ID_ATEN_UC100KM      0x2004
1344 #define USB_DEVICE_ID_ATEN_CS124U       0x2202
1345 #define USB_DEVICE_ID_ATEN_2PORTKVM     0x2204
1346 #define USB_DEVICE_ID_ATEN_4PORTKVM     0x2205
1347 #define USB_DEVICE_ID_ATEN_4PORTKVMC    0x2208
1348
1349 #define USB_VENDOR_ID_TOPMAX            0x0663
1350 #define USB_DEVICE_ID_TOPMAX_COBRAPAD   0x0103
1351
1352 #define USB_VENDOR_ID_HAPP              0x078b
1353 #define USB_DEVICE_ID_UGCI_DRIVING      0x0010
1354 #define USB_DEVICE_ID_UGCI_FLYING       0x0020
1355 #define USB_DEVICE_ID_UGCI_FIGHTING     0x0030
1356
1357 #define USB_VENDOR_ID_MGE               0x0463
1358 #define USB_DEVICE_ID_MGE_UPS           0xffff
1359 #define USB_DEVICE_ID_MGE_UPS1          0x0001
1360
1361 #define USB_VENDOR_ID_ONTRAK            0x0a07
1362 #define USB_DEVICE_ID_ONTRAK_ADU100     0x0064
1363
1364 #define USB_VENDOR_ID_TANGTOP           0x0d3d
1365 #define USB_DEVICE_ID_TANGTOP_USBPS2    0x0001
1366
1367 #define USB_VENDOR_ID_ESSENTIAL_REALITY 0x0d7f
1368 #define USB_DEVICE_ID_ESSENTIAL_REALITY_P5 0x0100
1369
1370 #define USB_VENDOR_ID_A4TECH            0x09da
1371 #define USB_DEVICE_ID_A4TECH_WCP32PU    0x0006
1372
1373 #define USB_VENDOR_ID_AASHIMA           0x06d6
1374 #define USB_DEVICE_ID_AASHIMA_GAMEPAD   0x0025
1375 #define USB_DEVICE_ID_AASHIMA_PREDATOR  0x0026
1376
1377 #define USB_VENDOR_ID_CYPRESS           0x04b4
1378 #define USB_DEVICE_ID_CYPRESS_MOUSE     0x0001
1379 #define USB_DEVICE_ID_CYPRESS_HIDCOM    0x5500
1380 #define USB_DEVICE_ID_CYPRESS_ULTRAMOUSE        0x7417
1381
1382 #define USB_VENDOR_ID_BERKSHIRE         0x0c98
1383 #define USB_DEVICE_ID_BERKSHIRE_PCWD    0x1140
1384
1385 #define USB_VENDOR_ID_ALPS              0x0433
1386 #define USB_DEVICE_ID_IBM_GAMEPAD       0x1101
1387
1388 #define USB_VENDOR_ID_SAITEK            0x06a3
1389 #define USB_DEVICE_ID_SAITEK_RUMBLEPAD  0xff17
1390
1391 #define USB_VENDOR_ID_NEC               0x073e
1392 #define USB_DEVICE_ID_NEC_USB_GAME_PAD  0x0301
1393
1394 #define USB_VENDOR_ID_CHIC              0x05fe
1395 #define USB_DEVICE_ID_CHIC_GAMEPAD      0x0014
1396
1397 #define USB_VENDOR_ID_GLAB              0x06c2
1398 #define USB_DEVICE_ID_4_PHIDGETSERVO_30 0x0038
1399 #define USB_DEVICE_ID_1_PHIDGETSERVO_30 0x0039
1400 #define USB_DEVICE_ID_8_8_8_IF_KIT      0x0045
1401 #define USB_DEVICE_ID_0_0_4_IF_KIT      0x0040
1402 #define USB_DEVICE_ID_0_8_8_IF_KIT      0x0053
1403
1404 #define USB_VENDOR_ID_WISEGROUP         0x0925
1405 #define USB_DEVICE_ID_1_PHIDGETSERVO_20 0x8101
1406 #define USB_DEVICE_ID_4_PHIDGETSERVO_20 0x8104
1407
1408 #define USB_VENDOR_ID_CODEMERCS         0x07c0
1409 #define USB_DEVICE_ID_CODEMERCS_IOW40   0x1500
1410 #define USB_DEVICE_ID_CODEMERCS_IOW24   0x1501
1411 #define USB_DEVICE_ID_CODEMERCS_IOW48   0x1502
1412 #define USB_DEVICE_ID_CODEMERCS_IOW28   0x1503
1413
1414 #define USB_VENDOR_ID_DELORME           0x1163
1415 #define USB_DEVICE_ID_DELORME_EARTHMATE 0x0100
1416 #define USB_DEVICE_ID_DELORME_EM_LT20   0x0200
1417
1418 #define USB_VENDOR_ID_MCC               0x09db
1419 #define USB_DEVICE_ID_MCC_PMD1024LS     0x0076
1420 #define USB_DEVICE_ID_MCC_PMD1208LS     0x007a
1421
1422 #define USB_VENDOR_ID_CHICONY           0x04f2
1423 #define USB_DEVICE_ID_CHICONY_USBHUB_KB 0x0100
1424
1425 #define USB_VENDOR_ID_BTC               0x046e
1426 #define USB_DEVICE_ID_BTC_KEYBOARD      0x5303
1427
1428 #define USB_VENDOR_ID_VERNIER           0x08f7
1429 #define USB_DEVICE_ID_VERNIER_LABPRO    0x0001
1430 #define USB_DEVICE_ID_VERNIER_GOTEMP    0x0002
1431 #define USB_DEVICE_ID_VERNIER_SKIP      0x0003
1432 #define USB_DEVICE_ID_VERNIER_CYCLOPS   0x0004
1433
1434 #define USB_VENDOR_ID_LD                0x0f11
1435 #define USB_DEVICE_ID_CASSY             0x1000
1436 #define USB_DEVICE_ID_POCKETCASSY       0x1010
1437 #define USB_DEVICE_ID_MOBILECASSY       0x1020
1438 #define USB_DEVICE_ID_JWM               0x1080
1439 #define USB_DEVICE_ID_DMMP              0x1081
1440 #define USB_DEVICE_ID_UMIP              0x1090
1441 #define USB_DEVICE_ID_VIDEOCOM          0x1200
1442 #define USB_DEVICE_ID_COM3LAB           0x2000
1443 #define USB_DEVICE_ID_TELEPORT          0x2010
1444 #define USB_DEVICE_ID_NETWORKANALYSER   0x2020
1445 #define USB_DEVICE_ID_POWERCONTROL      0x2030
1446
1447 #define USB_VENDOR_ID_APPLE             0x05ac
1448 #define USB_DEVICE_ID_APPLE_POWERMOUSE  0x0304
1449
1450 /*
1451  * Alphabetically sorted blacklist by quirk type.
1452  */
1453
1454 static struct hid_blacklist {
1455         __u16 idVendor;
1456         __u16 idProduct;
1457         unsigned quirks;
1458 } hid_blacklist[] = {
1459
1460         { USB_VENDOR_ID_AIPTEK, USB_DEVICE_ID_AIPTEK_01, HID_QUIRK_IGNORE },
1461         { USB_VENDOR_ID_AIPTEK, USB_DEVICE_ID_AIPTEK_10, HID_QUIRK_IGNORE },
1462         { USB_VENDOR_ID_AIPTEK, USB_DEVICE_ID_AIPTEK_20, HID_QUIRK_IGNORE },
1463         { USB_VENDOR_ID_AIPTEK, USB_DEVICE_ID_AIPTEK_21, HID_QUIRK_IGNORE },
1464         { USB_VENDOR_ID_AIPTEK, USB_DEVICE_ID_AIPTEK_22, HID_QUIRK_IGNORE },
1465         { USB_VENDOR_ID_AIPTEK, USB_DEVICE_ID_AIPTEK_23, HID_QUIRK_IGNORE },
1466         { USB_VENDOR_ID_AIPTEK, USB_DEVICE_ID_AIPTEK_24, HID_QUIRK_IGNORE },
1467         { USB_VENDOR_ID_BERKSHIRE, USB_DEVICE_ID_BERKSHIRE_PCWD, HID_QUIRK_IGNORE },
1468         { USB_VENDOR_ID_CODEMERCS, USB_DEVICE_ID_CODEMERCS_IOW40, HID_QUIRK_IGNORE },
1469         { USB_VENDOR_ID_CODEMERCS, USB_DEVICE_ID_CODEMERCS_IOW24, HID_QUIRK_IGNORE },
1470         { USB_VENDOR_ID_CODEMERCS, USB_DEVICE_ID_CODEMERCS_IOW48, HID_QUIRK_IGNORE },
1471         { USB_VENDOR_ID_CODEMERCS, USB_DEVICE_ID_CODEMERCS_IOW28, HID_QUIRK_IGNORE },
1472         { USB_VENDOR_ID_CYPRESS, USB_DEVICE_ID_CYPRESS_HIDCOM, HID_QUIRK_IGNORE },
1473         { USB_VENDOR_ID_CYPRESS, USB_DEVICE_ID_CYPRESS_ULTRAMOUSE, HID_QUIRK_IGNORE },
1474         { USB_VENDOR_ID_DELORME, USB_DEVICE_ID_DELORME_EARTHMATE, HID_QUIRK_IGNORE },
1475         { USB_VENDOR_ID_DELORME, USB_DEVICE_ID_DELORME_EM_LT20, HID_QUIRK_IGNORE },
1476         { USB_VENDOR_ID_ESSENTIAL_REALITY, USB_DEVICE_ID_ESSENTIAL_REALITY_P5, HID_QUIRK_IGNORE },
1477         { USB_VENDOR_ID_GLAB, USB_DEVICE_ID_4_PHIDGETSERVO_30, HID_QUIRK_IGNORE },
1478         { USB_VENDOR_ID_GLAB, USB_DEVICE_ID_1_PHIDGETSERVO_30, HID_QUIRK_IGNORE },
1479         { USB_VENDOR_ID_GLAB, USB_DEVICE_ID_8_8_8_IF_KIT, HID_QUIRK_IGNORE },
1480         { USB_VENDOR_ID_GLAB, USB_DEVICE_ID_0_0_4_IF_KIT, HID_QUIRK_IGNORE },
1481         { USB_VENDOR_ID_GLAB, USB_DEVICE_ID_0_8_8_IF_KIT, HID_QUIRK_IGNORE },
1482         { USB_VENDOR_ID_GRIFFIN, USB_DEVICE_ID_POWERMATE, HID_QUIRK_IGNORE },
1483         { USB_VENDOR_ID_GRIFFIN, USB_DEVICE_ID_SOUNDKNOB, HID_QUIRK_IGNORE },
1484         { USB_VENDOR_ID_KBGEAR, USB_DEVICE_ID_KBGEAR_JAMSTUDIO, HID_QUIRK_IGNORE },
1485         { USB_VENDOR_ID_LD, USB_DEVICE_ID_CASSY, HID_QUIRK_IGNORE },
1486         { USB_VENDOR_ID_LD, USB_DEVICE_ID_POCKETCASSY, HID_QUIRK_IGNORE },
1487         { USB_VENDOR_ID_LD, USB_DEVICE_ID_MOBILECASSY, HID_QUIRK_IGNORE },
1488         { USB_VENDOR_ID_LD, USB_DEVICE_ID_JWM, HID_QUIRK_IGNORE },
1489         { USB_VENDOR_ID_LD, USB_DEVICE_ID_DMMP, HID_QUIRK_IGNORE },
1490         { USB_VENDOR_ID_LD, USB_DEVICE_ID_UMIP, HID_QUIRK_IGNORE },
1491         { USB_VENDOR_ID_LD, USB_DEVICE_ID_VIDEOCOM, HID_QUIRK_IGNORE },
1492         { USB_VENDOR_ID_LD, USB_DEVICE_ID_COM3LAB, HID_QUIRK_IGNORE },
1493         { USB_VENDOR_ID_LD, USB_DEVICE_ID_TELEPORT, HID_QUIRK_IGNORE },
1494         { USB_VENDOR_ID_LD, USB_DEVICE_ID_NETWORKANALYSER, HID_QUIRK_IGNORE },
1495         { USB_VENDOR_ID_LD, USB_DEVICE_ID_POWERCONTROL, HID_QUIRK_IGNORE },
1496         { USB_VENDOR_ID_MCC, USB_DEVICE_ID_MCC_PMD1024LS, HID_QUIRK_IGNORE },
1497         { USB_VENDOR_ID_MCC, USB_DEVICE_ID_MCC_PMD1208LS, HID_QUIRK_IGNORE },
1498         { USB_VENDOR_ID_MGE, USB_DEVICE_ID_MGE_UPS, HID_QUIRK_IGNORE },
1499         { USB_VENDOR_ID_MGE, USB_DEVICE_ID_MGE_UPS1, HID_QUIRK_IGNORE },
1500         { USB_VENDOR_ID_ONTRAK, USB_DEVICE_ID_ONTRAK_ADU100, HID_QUIRK_IGNORE },
1501         { USB_VENDOR_ID_ONTRAK, USB_DEVICE_ID_ONTRAK_ADU100 + 100, HID_QUIRK_IGNORE },
1502         { USB_VENDOR_ID_ONTRAK, USB_DEVICE_ID_ONTRAK_ADU100 + 200, HID_QUIRK_IGNORE },
1503         { USB_VENDOR_ID_ONTRAK, USB_DEVICE_ID_ONTRAK_ADU100 + 300, HID_QUIRK_IGNORE },
1504         { USB_VENDOR_ID_ONTRAK, USB_DEVICE_ID_ONTRAK_ADU100 + 400, HID_QUIRK_IGNORE },
1505         { USB_VENDOR_ID_ONTRAK, USB_DEVICE_ID_ONTRAK_ADU100 + 500, HID_QUIRK_IGNORE },
1506         { USB_VENDOR_ID_VERNIER, USB_DEVICE_ID_VERNIER_LABPRO, HID_QUIRK_IGNORE },
1507         { USB_VENDOR_ID_VERNIER, USB_DEVICE_ID_VERNIER_GOTEMP, HID_QUIRK_IGNORE },
1508         { USB_VENDOR_ID_VERNIER, USB_DEVICE_ID_VERNIER_SKIP, HID_QUIRK_IGNORE },
1509         { USB_VENDOR_ID_VERNIER, USB_DEVICE_ID_VERNIER_CYCLOPS, HID_QUIRK_IGNORE },
1510         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_PENPARTNER, HID_QUIRK_IGNORE },
1511         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_GRAPHIRE, HID_QUIRK_IGNORE },
1512         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_GRAPHIRE + 1, HID_QUIRK_IGNORE },
1513         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_GRAPHIRE + 2, HID_QUIRK_IGNORE },
1514         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_GRAPHIRE + 3, HID_QUIRK_IGNORE },
1515         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_GRAPHIRE + 4, HID_QUIRK_IGNORE },
1516         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS, HID_QUIRK_IGNORE },
1517         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS + 1, HID_QUIRK_IGNORE },
1518         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS + 2, HID_QUIRK_IGNORE },
1519         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS + 3, HID_QUIRK_IGNORE },
1520         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS + 4, HID_QUIRK_IGNORE },
1521         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_PL, HID_QUIRK_IGNORE },
1522         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_PL + 1, HID_QUIRK_IGNORE },
1523         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_PL + 2, HID_QUIRK_IGNORE },
1524         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_PL + 3, HID_QUIRK_IGNORE },
1525         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_PL + 4, HID_QUIRK_IGNORE },
1526         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_PL + 5, HID_QUIRK_IGNORE },
1527         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS2 + 1, HID_QUIRK_IGNORE },
1528         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS2 + 2, HID_QUIRK_IGNORE },
1529         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS2 + 3, HID_QUIRK_IGNORE },
1530         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS2 + 4, HID_QUIRK_IGNORE },
1531         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS2 + 5, HID_QUIRK_IGNORE },
1532         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS2 + 7, HID_QUIRK_IGNORE },
1533         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_VOLITO, HID_QUIRK_IGNORE },
1534         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_PTU, HID_QUIRK_IGNORE },
1535         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS3, HID_QUIRK_IGNORE },
1536         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS3 + 1, HID_QUIRK_IGNORE },
1537         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS3 + 2, HID_QUIRK_IGNORE },
1538         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_CINTIQ, HID_QUIRK_IGNORE },
1539         { USB_VENDOR_ID_WISEGROUP, USB_DEVICE_ID_4_PHIDGETSERVO_20, HID_QUIRK_IGNORE },
1540         { USB_VENDOR_ID_WISEGROUP, USB_DEVICE_ID_1_PHIDGETSERVO_20, HID_QUIRK_IGNORE },
1541
1542         { USB_VENDOR_ID_ACECAD, USB_DEVICE_ID_ACECAD_FLAIR, HID_QUIRK_IGNORE },
1543         { USB_VENDOR_ID_ACECAD, USB_DEVICE_ID_ACECAD_302, HID_QUIRK_IGNORE },
1544
1545         { USB_VENDOR_ID_ATEN, USB_DEVICE_ID_ATEN_UC100KM, HID_QUIRK_NOGET },
1546         { USB_VENDOR_ID_ATEN, USB_DEVICE_ID_ATEN_CS124U, HID_QUIRK_NOGET },
1547         { USB_VENDOR_ID_ATEN, USB_DEVICE_ID_ATEN_2PORTKVM, HID_QUIRK_NOGET },
1548         { USB_VENDOR_ID_ATEN, USB_DEVICE_ID_ATEN_4PORTKVM, HID_QUIRK_NOGET },
1549         { USB_VENDOR_ID_ATEN, USB_DEVICE_ID_ATEN_4PORTKVMC, HID_QUIRK_NOGET },
1550         { USB_VENDOR_ID_BTC, USB_DEVICE_ID_BTC_KEYBOARD, HID_QUIRK_NOGET},
1551         { USB_VENDOR_ID_CHICONY, USB_DEVICE_ID_CHICONY_USBHUB_KB, HID_QUIRK_NOGET},
1552         { USB_VENDOR_ID_TANGTOP, USB_DEVICE_ID_TANGTOP_USBPS2, HID_QUIRK_NOGET },
1553
1554         { USB_VENDOR_ID_APPLE, USB_DEVICE_ID_APPLE_POWERMOUSE, HID_QUIRK_2WHEEL_POWERMOUSE },
1555         { USB_VENDOR_ID_A4TECH, USB_DEVICE_ID_A4TECH_WCP32PU, HID_QUIRK_2WHEEL_MOUSE_HACK_7 },
1556         { USB_VENDOR_ID_CYPRESS, USB_DEVICE_ID_CYPRESS_MOUSE, HID_QUIRK_2WHEEL_MOUSE_HACK_5 },
1557
1558         { USB_VENDOR_ID_AASHIMA, USB_DEVICE_ID_AASHIMA_GAMEPAD, HID_QUIRK_BADPAD },
1559         { USB_VENDOR_ID_AASHIMA, USB_DEVICE_ID_AASHIMA_PREDATOR, HID_QUIRK_BADPAD },
1560         { USB_VENDOR_ID_ALPS, USB_DEVICE_ID_IBM_GAMEPAD, HID_QUIRK_BADPAD },
1561         { USB_VENDOR_ID_CHIC, USB_DEVICE_ID_CHIC_GAMEPAD, HID_QUIRK_BADPAD },
1562         { USB_VENDOR_ID_HAPP, USB_DEVICE_ID_UGCI_DRIVING, HID_QUIRK_BADPAD | HID_QUIRK_MULTI_INPUT },
1563         { USB_VENDOR_ID_HAPP, USB_DEVICE_ID_UGCI_FLYING, HID_QUIRK_BADPAD | HID_QUIRK_MULTI_INPUT },
1564         { USB_VENDOR_ID_HAPP, USB_DEVICE_ID_UGCI_FIGHTING, HID_QUIRK_BADPAD | HID_QUIRK_MULTI_INPUT },
1565         { USB_VENDOR_ID_NEC, USB_DEVICE_ID_NEC_USB_GAME_PAD, HID_QUIRK_BADPAD },
1566         { USB_VENDOR_ID_SAITEK, USB_DEVICE_ID_SAITEK_RUMBLEPAD, HID_QUIRK_BADPAD },
1567         { USB_VENDOR_ID_TOPMAX, USB_DEVICE_ID_TOPMAX_COBRAPAD, HID_QUIRK_BADPAD },
1568
1569         { 0, 0 }
1570 };
1571
1572 /*
1573  * Traverse the supplied list of reports and find the longest
1574  */
1575 static void hid_find_max_report(struct hid_device *hid, unsigned int type, int *max)
1576 {
1577         struct hid_report *report;
1578         int size;
1579
1580         list_for_each_entry(report, &hid->report_enum[type].report_list, list) {
1581                 size = ((report->size - 1) >> 3) + 1;
1582                 if (type == HID_INPUT_REPORT && hid->report_enum[type].numbered)
1583                         size++;
1584                 if (*max < size)
1585                         *max = size;
1586         }
1587 }
1588
1589 static int hid_alloc_buffers(struct usb_device *dev, struct hid_device *hid)
1590 {
1591         if (!(hid->inbuf = usb_buffer_alloc(dev, hid->bufsize, SLAB_ATOMIC, &hid->inbuf_dma)))
1592                 return -1;
1593         if (!(hid->outbuf = usb_buffer_alloc(dev, hid->bufsize, SLAB_ATOMIC, &hid->outbuf_dma)))
1594                 return -1;
1595         if (!(hid->cr = usb_buffer_alloc(dev, sizeof(*(hid->cr)), SLAB_ATOMIC, &hid->cr_dma)))
1596                 return -1;
1597         if (!(hid->ctrlbuf = usb_buffer_alloc(dev, hid->bufsize, SLAB_ATOMIC, &hid->ctrlbuf_dma)))
1598                 return -1;
1599
1600         return 0;
1601 }
1602
1603 static void hid_free_buffers(struct usb_device *dev, struct hid_device *hid)
1604 {
1605         if (hid->inbuf)
1606                 usb_buffer_free(dev, hid->bufsize, hid->inbuf, hid->inbuf_dma);
1607         if (hid->outbuf)
1608                 usb_buffer_free(dev, hid->bufsize, hid->outbuf, hid->outbuf_dma);
1609         if (hid->cr)
1610                 usb_buffer_free(dev, sizeof(*(hid->cr)), hid->cr, hid->cr_dma);
1611         if (hid->ctrlbuf)
1612                 usb_buffer_free(dev, hid->bufsize, hid->ctrlbuf, hid->ctrlbuf_dma);
1613 }
1614
1615 static struct hid_device *usb_hid_configure(struct usb_interface *intf)
1616 {
1617         struct usb_host_interface *interface = intf->cur_altsetting;
1618         struct usb_device *dev = interface_to_usbdev (intf);
1619         struct hid_descriptor *hdesc;
1620         struct hid_device *hid;
1621         unsigned quirks = 0, rsize = 0;
1622         char *buf, *rdesc;
1623         int n, insize = 0;
1624
1625         for (n = 0; hid_blacklist[n].idVendor; n++)
1626                 if ((hid_blacklist[n].idVendor == le16_to_cpu(dev->descriptor.idVendor)) &&
1627                         (hid_blacklist[n].idProduct == le16_to_cpu(dev->descriptor.idProduct)))
1628                                 quirks = hid_blacklist[n].quirks;
1629
1630         if (quirks & HID_QUIRK_IGNORE)
1631                 return NULL;
1632
1633         if (usb_get_extra_descriptor(interface, HID_DT_HID, &hdesc) && ((!interface->desc.bNumEndpoints) ||
1634                 usb_get_extra_descriptor(&interface->endpoint[0], HID_DT_HID, &hdesc))) {
1635                         dbg("class descriptor not present\n");
1636                         return NULL;
1637         }
1638
1639         for (n = 0; n < hdesc->bNumDescriptors; n++)
1640                 if (hdesc->desc[n].bDescriptorType == HID_DT_REPORT)
1641                         rsize = le16_to_cpu(hdesc->desc[n].wDescriptorLength);
1642
1643         if (!rsize || rsize > HID_MAX_DESCRIPTOR_SIZE) {
1644                 dbg("weird size of report descriptor (%u)", rsize);
1645                 return NULL;
1646         }
1647
1648         if (!(rdesc = kmalloc(rsize, GFP_KERNEL))) {
1649                 dbg("couldn't allocate rdesc memory");
1650                 return NULL;
1651         }
1652
1653         hid_set_idle(dev, interface->desc.bInterfaceNumber, 0, 0);
1654
1655         if ((n = hid_get_class_descriptor(dev, interface->desc.bInterfaceNumber, HID_DT_REPORT, rdesc, rsize)) < 0) {
1656                 dbg("reading report descriptor failed");
1657                 kfree(rdesc);
1658                 return NULL;
1659         }
1660
1661 #ifdef DEBUG_DATA
1662         printk(KERN_DEBUG __FILE__ ": report descriptor (size %u, read %d) = ", rsize, n);
1663         for (n = 0; n < rsize; n++)
1664                 printk(" %02x", (unsigned char) rdesc[n]);
1665         printk("\n");
1666 #endif
1667
1668         if (!(hid = hid_parse_report(rdesc, n))) {
1669                 dbg("parsing report descriptor failed");
1670                 kfree(rdesc);
1671                 return NULL;
1672         }
1673
1674         kfree(rdesc);
1675         hid->quirks = quirks;
1676
1677         hid->bufsize = HID_MIN_BUFFER_SIZE;
1678         hid_find_max_report(hid, HID_INPUT_REPORT, &hid->bufsize);
1679         hid_find_max_report(hid, HID_OUTPUT_REPORT, &hid->bufsize);
1680         hid_find_max_report(hid, HID_FEATURE_REPORT, &hid->bufsize);
1681
1682         if (hid->bufsize > HID_MAX_BUFFER_SIZE)
1683                 hid->bufsize = HID_MAX_BUFFER_SIZE;
1684
1685         hid_find_max_report(hid, HID_INPUT_REPORT, &insize);
1686
1687         if (insize > HID_MAX_BUFFER_SIZE)
1688                 insize = HID_MAX_BUFFER_SIZE;
1689
1690         if (hid_alloc_buffers(dev, hid)) {
1691                 hid_free_buffers(dev, hid);
1692                 goto fail;
1693         }
1694
1695         for (n = 0; n < interface->desc.bNumEndpoints; n++) {
1696
1697                 struct usb_endpoint_descriptor *endpoint;
1698                 int pipe;
1699                 int interval;
1700
1701                 endpoint = &interface->endpoint[n].desc;
1702                 if ((endpoint->bmAttributes & 3) != 3)          /* Not an interrupt endpoint */
1703                         continue;
1704
1705                 interval = endpoint->bInterval;
1706
1707                 /* Change the polling interval of mice. */
1708                 if (hid->collection->usage == HID_GD_MOUSE && hid_mousepoll_interval > 0)
1709                         interval = hid_mousepoll_interval;
1710
1711                 if (endpoint->bEndpointAddress & USB_DIR_IN) {
1712                         if (hid->urbin)
1713                                 continue;
1714                         if (!(hid->urbin = usb_alloc_urb(0, GFP_KERNEL)))
1715                                 goto fail;
1716                         pipe = usb_rcvintpipe(dev, endpoint->bEndpointAddress);
1717                         usb_fill_int_urb(hid->urbin, dev, pipe, hid->inbuf, insize,
1718                                          hid_irq_in, hid, interval);
1719                         hid->urbin->transfer_dma = hid->inbuf_dma;
1720                         hid->urbin->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
1721                 } else {
1722                         if (hid->urbout)
1723                                 continue;
1724                         if (!(hid->urbout = usb_alloc_urb(0, GFP_KERNEL)))
1725                                 goto fail;
1726                         pipe = usb_sndintpipe(dev, endpoint->bEndpointAddress);
1727                         usb_fill_int_urb(hid->urbout, dev, pipe, hid->outbuf, 0,
1728                                          hid_irq_out, hid, interval);
1729                         hid->urbout->transfer_dma = hid->outbuf_dma;
1730                         hid->urbout->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
1731                 }
1732         }
1733
1734         if (!hid->urbin) {
1735                 err("couldn't find an input interrupt endpoint");
1736                 goto fail;
1737         }
1738
1739         init_waitqueue_head(&hid->wait);
1740
1741         spin_lock_init(&hid->outlock);
1742         spin_lock_init(&hid->ctrllock);
1743
1744         hid->version = le16_to_cpu(hdesc->bcdHID);
1745         hid->country = hdesc->bCountryCode;
1746         hid->dev = dev;
1747         hid->intf = intf;
1748         hid->ifnum = interface->desc.bInterfaceNumber;
1749
1750         hid->name[0] = 0;
1751
1752         if (!(buf = kmalloc(64, GFP_KERNEL)))
1753                 goto fail;
1754
1755         if (dev->manufacturer) {
1756                 strcat(hid->name, dev->manufacturer);
1757                 if (dev->product)
1758                         snprintf(hid->name, 64, "%s %s", hid->name, dev->product);
1759         } else if (dev->product) {
1760                         snprintf(hid->name, 128, "%s", dev->product);
1761         } else
1762                 snprintf(hid->name, 128, "%04x:%04x",
1763                         le16_to_cpu(dev->descriptor.idVendor),
1764                         le16_to_cpu(dev->descriptor.idProduct));
1765
1766         usb_make_path(dev, buf, 64);
1767         snprintf(hid->phys, 64, "%s/input%d", buf,
1768                         intf->altsetting[0].desc.bInterfaceNumber);
1769
1770         if (usb_string(dev, dev->descriptor.iSerialNumber, hid->uniq, 64) <= 0)
1771                 hid->uniq[0] = 0;
1772
1773         kfree(buf);
1774
1775         hid->urbctrl = usb_alloc_urb(0, GFP_KERNEL);
1776         if (!hid->urbctrl)
1777                 goto fail;
1778         usb_fill_control_urb(hid->urbctrl, dev, 0, (void *) hid->cr,
1779                              hid->ctrlbuf, 1, hid_ctrl, hid);
1780         hid->urbctrl->setup_dma = hid->cr_dma;
1781         hid->urbctrl->transfer_dma = hid->ctrlbuf_dma;
1782         hid->urbctrl->transfer_flags |= (URB_NO_TRANSFER_DMA_MAP | URB_NO_SETUP_DMA_MAP);
1783
1784         return hid;
1785
1786 fail:
1787
1788         if (hid->urbin)
1789                 usb_free_urb(hid->urbin);
1790         if (hid->urbout)
1791                 usb_free_urb(hid->urbout);
1792         if (hid->urbctrl)
1793                 usb_free_urb(hid->urbctrl);
1794         hid_free_buffers(dev, hid);
1795         hid_free_device(hid);
1796
1797         return NULL;
1798 }
1799
1800 static void hid_disconnect(struct usb_interface *intf)
1801 {
1802         struct hid_device *hid = usb_get_intfdata (intf);
1803
1804         if (!hid)
1805                 return;
1806
1807         usb_set_intfdata(intf, NULL);
1808         usb_kill_urb(hid->urbin);
1809         usb_kill_urb(hid->urbout);
1810         usb_kill_urb(hid->urbctrl);
1811
1812         if (hid->claimed & HID_CLAIMED_INPUT)
1813                 hidinput_disconnect(hid);
1814         if (hid->claimed & HID_CLAIMED_HIDDEV)
1815                 hiddev_disconnect(hid);
1816
1817         usb_free_urb(hid->urbin);
1818         usb_free_urb(hid->urbctrl);
1819         if (hid->urbout)
1820                 usb_free_urb(hid->urbout);
1821
1822         hid_free_buffers(hid->dev, hid);
1823         hid_free_device(hid);
1824 }
1825
1826 static int hid_probe(struct usb_interface *intf, const struct usb_device_id *id)
1827 {
1828         struct hid_device *hid;
1829         char path[64];
1830         int i;
1831         char *c;
1832
1833         dbg("HID probe called for ifnum %d",
1834                         intf->altsetting->desc.bInterfaceNumber);
1835
1836         if (!(hid = usb_hid_configure(intf)))
1837                 return -ENODEV;
1838
1839         hid_init_reports(hid);
1840         hid_dump_device(hid);
1841
1842         if (!hidinput_connect(hid))
1843                 hid->claimed |= HID_CLAIMED_INPUT;
1844         if (!hiddev_connect(hid))
1845                 hid->claimed |= HID_CLAIMED_HIDDEV;
1846
1847         usb_set_intfdata(intf, hid);
1848
1849         if (!hid->claimed) {
1850                 printk ("HID device not claimed by input or hiddev\n");
1851                 hid_disconnect(intf);
1852                 return -ENODEV;
1853         }
1854
1855         printk(KERN_INFO);
1856
1857         if (hid->claimed & HID_CLAIMED_INPUT)
1858                 printk("input");
1859         if (hid->claimed == (HID_CLAIMED_INPUT | HID_CLAIMED_HIDDEV))
1860                 printk(",");
1861         if (hid->claimed & HID_CLAIMED_HIDDEV)
1862                 printk("hiddev%d", hid->minor);
1863
1864         c = "Device";
1865         for (i = 0; i < hid->maxcollection; i++) {
1866                 if (hid->collection[i].type == HID_COLLECTION_APPLICATION &&
1867                     (hid->collection[i].usage & HID_USAGE_PAGE) == HID_UP_GENDESK &&
1868                     (hid->collection[i].usage & 0xffff) < ARRAY_SIZE(hid_types)) {
1869                         c = hid_types[hid->collection[i].usage & 0xffff];
1870                         break;
1871                 }
1872         }
1873
1874         usb_make_path(interface_to_usbdev(intf), path, 63);
1875
1876         printk(": USB HID v%x.%02x %s [%s] on %s\n",
1877                 hid->version >> 8, hid->version & 0xff, c, hid->name, path);
1878
1879         return 0;
1880 }
1881
1882 static int hid_suspend(struct usb_interface *intf, pm_message_t message)
1883 {
1884         struct hid_device *hid = usb_get_intfdata (intf);
1885
1886         usb_kill_urb(hid->urbin);
1887         intf->dev.power.power_state = PMSG_SUSPEND;
1888         dev_dbg(&intf->dev, "suspend\n");
1889         return 0;
1890 }
1891
1892 static int hid_resume(struct usb_interface *intf)
1893 {
1894         struct hid_device *hid = usb_get_intfdata (intf);
1895         int status;
1896
1897         intf->dev.power.power_state = PMSG_ON;
1898         if (hid->open)
1899                 status = usb_submit_urb(hid->urbin, GFP_NOIO);
1900         else
1901                 status = 0;
1902         dev_dbg(&intf->dev, "resume status %d\n", status);
1903         return status;
1904 }
1905
1906 static struct usb_device_id hid_usb_ids [] = {
1907         { .match_flags = USB_DEVICE_ID_MATCH_INT_CLASS,
1908                 .bInterfaceClass = USB_INTERFACE_CLASS_HID },
1909         { }                                             /* Terminating entry */
1910 };
1911
1912 MODULE_DEVICE_TABLE (usb, hid_usb_ids);
1913
1914 static struct usb_driver hid_driver = {
1915         .owner =        THIS_MODULE,
1916         .name =         "usbhid",
1917         .probe =        hid_probe,
1918         .disconnect =   hid_disconnect,
1919         .suspend =      hid_suspend,
1920         .resume =       hid_resume,
1921         .id_table =     hid_usb_ids,
1922 };
1923
1924 static int __init hid_init(void)
1925 {
1926         int retval;
1927         retval = hiddev_init();
1928         if (retval)
1929                 goto hiddev_init_fail;
1930         retval = usb_register(&hid_driver);
1931         if (retval)
1932                 goto usb_register_fail;
1933         info(DRIVER_VERSION ":" DRIVER_DESC);
1934
1935         return 0;
1936 usb_register_fail:
1937         hiddev_exit();
1938 hiddev_init_fail:
1939         return retval;
1940 }
1941
1942 static void __exit hid_exit(void)
1943 {
1944         usb_deregister(&hid_driver);
1945         hiddev_exit();
1946 }
1947
1948 module_init(hid_init);
1949 module_exit(hid_exit);
1950
1951 MODULE_AUTHOR(DRIVER_AUTHOR);
1952 MODULE_DESCRIPTION(DRIVER_DESC);
1953 MODULE_LICENSE(DRIVER_LICENSE);