Merge master.kernel.org:/pub/scm/linux/kernel/git/davem/sparc-2.6
[linux-2.6] / drivers / usb / input / hid-core.c
1 /*
2  *  USB HID support for Linux
3  *
4  *  Copyright (c) 1999 Andreas Gal
5  *  Copyright (c) 2000-2005 Vojtech Pavlik <vojtech@suse.cz>
6  *  Copyright (c) 2005 Michael Haboustak <mike-@cinci.rr.com> for Concept2, Inc
7  */
8
9 /*
10  * This program is free software; you can redistribute it and/or modify it
11  * under the terms of the GNU General Public License as published by the Free
12  * Software Foundation; either version 2 of the License, or (at your option)
13  * any later version.
14  */
15
16 #include <linux/module.h>
17 #include <linux/slab.h>
18 #include <linux/init.h>
19 #include <linux/kernel.h>
20 #include <linux/sched.h>
21 #include <linux/list.h>
22 #include <linux/mm.h>
23 #include <linux/smp_lock.h>
24 #include <linux/spinlock.h>
25 #include <asm/unaligned.h>
26 #include <asm/byteorder.h>
27 #include <linux/input.h>
28 #include <linux/wait.h>
29
30 #undef DEBUG
31 #undef DEBUG_DATA
32
33 #include <linux/usb.h>
34
35 #include "hid.h"
36 #include <linux/hiddev.h>
37
38 /*
39  * Version Information
40  */
41
42 #define DRIVER_VERSION "v2.6"
43 #define DRIVER_AUTHOR "Andreas Gal, Vojtech Pavlik"
44 #define DRIVER_DESC "USB HID core driver"
45 #define DRIVER_LICENSE "GPL"
46
47 static char *hid_types[] = {"Device", "Pointer", "Mouse", "Device", "Joystick",
48                                 "Gamepad", "Keyboard", "Keypad", "Multi-Axis Controller"};
49 /*
50  * Module parameters.
51  */
52
53 static unsigned int hid_mousepoll_interval;
54 module_param_named(mousepoll, hid_mousepoll_interval, uint, 0644);
55 MODULE_PARM_DESC(mousepoll, "Polling interval of mice");
56
57 /*
58  * Register a new report for a device.
59  */
60
61 static struct hid_report *hid_register_report(struct hid_device *device, unsigned type, unsigned id)
62 {
63         struct hid_report_enum *report_enum = device->report_enum + type;
64         struct hid_report *report;
65
66         if (report_enum->report_id_hash[id])
67                 return report_enum->report_id_hash[id];
68
69         if (!(report = kzalloc(sizeof(struct hid_report), GFP_KERNEL)))
70                 return NULL;
71
72         if (id != 0)
73                 report_enum->numbered = 1;
74
75         report->id = id;
76         report->type = type;
77         report->size = 0;
78         report->device = device;
79         report_enum->report_id_hash[id] = report;
80
81         list_add_tail(&report->list, &report_enum->report_list);
82
83         return report;
84 }
85
86 /*
87  * Register a new field for this report.
88  */
89
90 static struct hid_field *hid_register_field(struct hid_report *report, unsigned usages, unsigned values)
91 {
92         struct hid_field *field;
93
94         if (report->maxfield == HID_MAX_FIELDS) {
95                 dbg("too many fields in report");
96                 return NULL;
97         }
98
99         if (!(field = kzalloc(sizeof(struct hid_field) + usages * sizeof(struct hid_usage)
100                 + values * sizeof(unsigned), GFP_KERNEL))) return NULL;
101
102         field->index = report->maxfield++;
103         report->field[field->index] = field;
104         field->usage = (struct hid_usage *)(field + 1);
105         field->value = (unsigned *)(field->usage + usages);
106         field->report = report;
107
108         return field;
109 }
110
111 /*
112  * Open a collection. The type/usage is pushed on the stack.
113  */
114
115 static int open_collection(struct hid_parser *parser, unsigned type)
116 {
117         struct hid_collection *collection;
118         unsigned usage;
119
120         usage = parser->local.usage[0];
121
122         if (parser->collection_stack_ptr == HID_COLLECTION_STACK_SIZE) {
123                 dbg("collection stack overflow");
124                 return -1;
125         }
126
127         if (parser->device->maxcollection == parser->device->collection_size) {
128                 collection = kmalloc(sizeof(struct hid_collection) *
129                                 parser->device->collection_size * 2, GFP_KERNEL);
130                 if (collection == NULL) {
131                         dbg("failed to reallocate collection array");
132                         return -1;
133                 }
134                 memcpy(collection, parser->device->collection,
135                         sizeof(struct hid_collection) *
136                         parser->device->collection_size);
137                 memset(collection + parser->device->collection_size, 0,
138                         sizeof(struct hid_collection) *
139                         parser->device->collection_size);
140                 kfree(parser->device->collection);
141                 parser->device->collection = collection;
142                 parser->device->collection_size *= 2;
143         }
144
145         parser->collection_stack[parser->collection_stack_ptr++] =
146                 parser->device->maxcollection;
147
148         collection = parser->device->collection +
149                 parser->device->maxcollection++;
150         collection->type = type;
151         collection->usage = usage;
152         collection->level = parser->collection_stack_ptr - 1;
153
154         if (type == HID_COLLECTION_APPLICATION)
155                 parser->device->maxapplication++;
156
157         return 0;
158 }
159
160 /*
161  * Close a collection.
162  */
163
164 static int close_collection(struct hid_parser *parser)
165 {
166         if (!parser->collection_stack_ptr) {
167                 dbg("collection stack underflow");
168                 return -1;
169         }
170         parser->collection_stack_ptr--;
171         return 0;
172 }
173
174 /*
175  * Climb up the stack, search for the specified collection type
176  * and return the usage.
177  */
178
179 static unsigned hid_lookup_collection(struct hid_parser *parser, unsigned type)
180 {
181         int n;
182         for (n = parser->collection_stack_ptr - 1; n >= 0; n--)
183                 if (parser->device->collection[parser->collection_stack[n]].type == type)
184                         return parser->device->collection[parser->collection_stack[n]].usage;
185         return 0; /* we know nothing about this usage type */
186 }
187
188 /*
189  * Add a usage to the temporary parser table.
190  */
191
192 static int hid_add_usage(struct hid_parser *parser, unsigned usage)
193 {
194         if (parser->local.usage_index >= HID_MAX_USAGES) {
195                 dbg("usage index exceeded");
196                 return -1;
197         }
198         parser->local.usage[parser->local.usage_index] = usage;
199         parser->local.collection_index[parser->local.usage_index] =
200                 parser->collection_stack_ptr ?
201                 parser->collection_stack[parser->collection_stack_ptr - 1] : 0;
202         parser->local.usage_index++;
203         return 0;
204 }
205
206 /*
207  * Register a new field for this report.
208  */
209
210 static int hid_add_field(struct hid_parser *parser, unsigned report_type, unsigned flags)
211 {
212         struct hid_report *report;
213         struct hid_field *field;
214         int usages;
215         unsigned offset;
216         int i;
217
218         if (!(report = hid_register_report(parser->device, report_type, parser->global.report_id))) {
219                 dbg("hid_register_report failed");
220                 return -1;
221         }
222
223         if (parser->global.logical_maximum < parser->global.logical_minimum) {
224                 dbg("logical range invalid %d %d", parser->global.logical_minimum, parser->global.logical_maximum);
225                 return -1;
226         }
227
228         offset = report->size;
229         report->size += parser->global.report_size * parser->global.report_count;
230
231         if (!parser->local.usage_index) /* Ignore padding fields */
232                 return 0;
233
234         usages = max_t(int, parser->local.usage_index, parser->global.report_count);
235
236         if ((field = hid_register_field(report, usages, parser->global.report_count)) == NULL)
237                 return 0;
238
239         field->physical = hid_lookup_collection(parser, HID_COLLECTION_PHYSICAL);
240         field->logical = hid_lookup_collection(parser, HID_COLLECTION_LOGICAL);
241         field->application = hid_lookup_collection(parser, HID_COLLECTION_APPLICATION);
242
243         for (i = 0; i < usages; i++) {
244                 int j = i;
245                 /* Duplicate the last usage we parsed if we have excess values */
246                 if (i >= parser->local.usage_index)
247                         j = parser->local.usage_index - 1;
248                 field->usage[i].hid = parser->local.usage[j];
249                 field->usage[i].collection_index =
250                         parser->local.collection_index[j];
251         }
252
253         field->maxusage = usages;
254         field->flags = flags;
255         field->report_offset = offset;
256         field->report_type = report_type;
257         field->report_size = parser->global.report_size;
258         field->report_count = parser->global.report_count;
259         field->logical_minimum = parser->global.logical_minimum;
260         field->logical_maximum = parser->global.logical_maximum;
261         field->physical_minimum = parser->global.physical_minimum;
262         field->physical_maximum = parser->global.physical_maximum;
263         field->unit_exponent = parser->global.unit_exponent;
264         field->unit = parser->global.unit;
265
266         return 0;
267 }
268
269 /*
270  * Read data value from item.
271  */
272
273 static __inline__ __u32 item_udata(struct hid_item *item)
274 {
275         switch (item->size) {
276                 case 1: return item->data.u8;
277                 case 2: return item->data.u16;
278                 case 4: return item->data.u32;
279         }
280         return 0;
281 }
282
283 static __inline__ __s32 item_sdata(struct hid_item *item)
284 {
285         switch (item->size) {
286                 case 1: return item->data.s8;
287                 case 2: return item->data.s16;
288                 case 4: return item->data.s32;
289         }
290         return 0;
291 }
292
293 /*
294  * Process a global item.
295  */
296
297 static int hid_parser_global(struct hid_parser *parser, struct hid_item *item)
298 {
299         switch (item->tag) {
300
301                 case HID_GLOBAL_ITEM_TAG_PUSH:
302
303                         if (parser->global_stack_ptr == HID_GLOBAL_STACK_SIZE) {
304                                 dbg("global enviroment stack overflow");
305                                 return -1;
306                         }
307
308                         memcpy(parser->global_stack + parser->global_stack_ptr++,
309                                 &parser->global, sizeof(struct hid_global));
310                         return 0;
311
312                 case HID_GLOBAL_ITEM_TAG_POP:
313
314                         if (!parser->global_stack_ptr) {
315                                 dbg("global enviroment stack underflow");
316                                 return -1;
317                         }
318
319                         memcpy(&parser->global, parser->global_stack + --parser->global_stack_ptr,
320                                 sizeof(struct hid_global));
321                         return 0;
322
323                 case HID_GLOBAL_ITEM_TAG_USAGE_PAGE:
324                         parser->global.usage_page = item_udata(item);
325                         return 0;
326
327                 case HID_GLOBAL_ITEM_TAG_LOGICAL_MINIMUM:
328                         parser->global.logical_minimum = item_sdata(item);
329                         return 0;
330
331                 case HID_GLOBAL_ITEM_TAG_LOGICAL_MAXIMUM:
332                         if (parser->global.logical_minimum < 0)
333                                 parser->global.logical_maximum = item_sdata(item);
334                         else
335                                 parser->global.logical_maximum = item_udata(item);
336                         return 0;
337
338                 case HID_GLOBAL_ITEM_TAG_PHYSICAL_MINIMUM:
339                         parser->global.physical_minimum = item_sdata(item);
340                         return 0;
341
342                 case HID_GLOBAL_ITEM_TAG_PHYSICAL_MAXIMUM:
343                         if (parser->global.physical_minimum < 0)
344                                 parser->global.physical_maximum = item_sdata(item);
345                         else
346                                 parser->global.physical_maximum = item_udata(item);
347                         return 0;
348
349                 case HID_GLOBAL_ITEM_TAG_UNIT_EXPONENT:
350                         parser->global.unit_exponent = item_sdata(item);
351                         return 0;
352
353                 case HID_GLOBAL_ITEM_TAG_UNIT:
354                         parser->global.unit = item_udata(item);
355                         return 0;
356
357                 case HID_GLOBAL_ITEM_TAG_REPORT_SIZE:
358                         if ((parser->global.report_size = item_udata(item)) > 32) {
359                                 dbg("invalid report_size %d", parser->global.report_size);
360                                 return -1;
361                         }
362                         return 0;
363
364                 case HID_GLOBAL_ITEM_TAG_REPORT_COUNT:
365                         if ((parser->global.report_count = item_udata(item)) > HID_MAX_USAGES) {
366                                 dbg("invalid report_count %d", parser->global.report_count);
367                                 return -1;
368                         }
369                         return 0;
370
371                 case HID_GLOBAL_ITEM_TAG_REPORT_ID:
372                         if ((parser->global.report_id = item_udata(item)) == 0) {
373                                 dbg("report_id 0 is invalid");
374                                 return -1;
375                         }
376                         return 0;
377
378                 default:
379                         dbg("unknown global tag 0x%x", item->tag);
380                         return -1;
381         }
382 }
383
384 /*
385  * Process a local item.
386  */
387
388 static int hid_parser_local(struct hid_parser *parser, struct hid_item *item)
389 {
390         __u32 data;
391         unsigned n;
392
393         if (item->size == 0) {
394                 dbg("item data expected for local item");
395                 return -1;
396         }
397
398         data = item_udata(item);
399
400         switch (item->tag) {
401
402                 case HID_LOCAL_ITEM_TAG_DELIMITER:
403
404                         if (data) {
405                                 /*
406                                  * We treat items before the first delimiter
407                                  * as global to all usage sets (branch 0).
408                                  * In the moment we process only these global
409                                  * items and the first delimiter set.
410                                  */
411                                 if (parser->local.delimiter_depth != 0) {
412                                         dbg("nested delimiters");
413                                         return -1;
414                                 }
415                                 parser->local.delimiter_depth++;
416                                 parser->local.delimiter_branch++;
417                         } else {
418                                 if (parser->local.delimiter_depth < 1) {
419                                         dbg("bogus close delimiter");
420                                         return -1;
421                                 }
422                                 parser->local.delimiter_depth--;
423                         }
424                         return 1;
425
426                 case HID_LOCAL_ITEM_TAG_USAGE:
427
428                         if (parser->local.delimiter_branch > 1) {
429                                 dbg("alternative usage ignored");
430                                 return 0;
431                         }
432
433                         if (item->size <= 2)
434                                 data = (parser->global.usage_page << 16) + data;
435
436                         return hid_add_usage(parser, data);
437
438                 case HID_LOCAL_ITEM_TAG_USAGE_MINIMUM:
439
440                         if (parser->local.delimiter_branch > 1) {
441                                 dbg("alternative usage ignored");
442                                 return 0;
443                         }
444
445                         if (item->size <= 2)
446                                 data = (parser->global.usage_page << 16) + data;
447
448                         parser->local.usage_minimum = data;
449                         return 0;
450
451                 case HID_LOCAL_ITEM_TAG_USAGE_MAXIMUM:
452
453                         if (parser->local.delimiter_branch > 1) {
454                                 dbg("alternative usage ignored");
455                                 return 0;
456                         }
457
458                         if (item->size <= 2)
459                                 data = (parser->global.usage_page << 16) + data;
460
461                         for (n = parser->local.usage_minimum; n <= data; n++)
462                                 if (hid_add_usage(parser, n)) {
463                                         dbg("hid_add_usage failed\n");
464                                         return -1;
465                                 }
466                         return 0;
467
468                 default:
469
470                         dbg("unknown local item tag 0x%x", item->tag);
471                         return 0;
472         }
473         return 0;
474 }
475
476 /*
477  * Process a main item.
478  */
479
480 static int hid_parser_main(struct hid_parser *parser, struct hid_item *item)
481 {
482         __u32 data;
483         int ret;
484
485         data = item_udata(item);
486
487         switch (item->tag) {
488                 case HID_MAIN_ITEM_TAG_BEGIN_COLLECTION:
489                         ret = open_collection(parser, data & 0xff);
490                         break;
491                 case HID_MAIN_ITEM_TAG_END_COLLECTION:
492                         ret = close_collection(parser);
493                         break;
494                 case HID_MAIN_ITEM_TAG_INPUT:
495                         ret = hid_add_field(parser, HID_INPUT_REPORT, data);
496                         break;
497                 case HID_MAIN_ITEM_TAG_OUTPUT:
498                         ret = hid_add_field(parser, HID_OUTPUT_REPORT, data);
499                         break;
500                 case HID_MAIN_ITEM_TAG_FEATURE:
501                         ret = hid_add_field(parser, HID_FEATURE_REPORT, data);
502                         break;
503                 default:
504                         dbg("unknown main item tag 0x%x", item->tag);
505                         ret = 0;
506         }
507
508         memset(&parser->local, 0, sizeof(parser->local));       /* Reset the local parser environment */
509
510         return ret;
511 }
512
513 /*
514  * Process a reserved item.
515  */
516
517 static int hid_parser_reserved(struct hid_parser *parser, struct hid_item *item)
518 {
519         dbg("reserved item type, tag 0x%x", item->tag);
520         return 0;
521 }
522
523 /*
524  * Free a report and all registered fields. The field->usage and
525  * field->value table's are allocated behind the field, so we need
526  * only to free(field) itself.
527  */
528
529 static void hid_free_report(struct hid_report *report)
530 {
531         unsigned n;
532
533         for (n = 0; n < report->maxfield; n++)
534                 kfree(report->field[n]);
535         kfree(report);
536 }
537
538 /*
539  * Free a device structure, all reports, and all fields.
540  */
541
542 static void hid_free_device(struct hid_device *device)
543 {
544         unsigned i,j;
545
546         hid_ff_exit(device);
547
548         for (i = 0; i < HID_REPORT_TYPES; i++) {
549                 struct hid_report_enum *report_enum = device->report_enum + i;
550
551                 for (j = 0; j < 256; j++) {
552                         struct hid_report *report = report_enum->report_id_hash[j];
553                         if (report)
554                                 hid_free_report(report);
555                 }
556         }
557
558         kfree(device->rdesc);
559         kfree(device);
560 }
561
562 /*
563  * Fetch a report description item from the data stream. We support long
564  * items, though they are not used yet.
565  */
566
567 static u8 *fetch_item(__u8 *start, __u8 *end, struct hid_item *item)
568 {
569         u8 b;
570
571         if ((end - start) <= 0)
572                 return NULL;
573
574         b = *start++;
575
576         item->type = (b >> 2) & 3;
577         item->tag  = (b >> 4) & 15;
578
579         if (item->tag == HID_ITEM_TAG_LONG) {
580
581                 item->format = HID_ITEM_FORMAT_LONG;
582
583                 if ((end - start) < 2)
584                         return NULL;
585
586                 item->size = *start++;
587                 item->tag  = *start++;
588
589                 if ((end - start) < item->size)
590                         return NULL;
591
592                 item->data.longdata = start;
593                 start += item->size;
594                 return start;
595         }
596
597         item->format = HID_ITEM_FORMAT_SHORT;
598         item->size = b & 3;
599
600         switch (item->size) {
601
602                 case 0:
603                         return start;
604
605                 case 1:
606                         if ((end - start) < 1)
607                                 return NULL;
608                         item->data.u8 = *start++;
609                         return start;
610
611                 case 2:
612                         if ((end - start) < 2)
613                                 return NULL;
614                         item->data.u16 = le16_to_cpu(get_unaligned((__le16*)start));
615                         start = (__u8 *)((__le16 *)start + 1);
616                         return start;
617
618                 case 3:
619                         item->size++;
620                         if ((end - start) < 4)
621                                 return NULL;
622                         item->data.u32 = le32_to_cpu(get_unaligned((__le32*)start));
623                         start = (__u8 *)((__le32 *)start + 1);
624                         return start;
625         }
626
627         return NULL;
628 }
629
630 /*
631  * Parse a report description into a hid_device structure. Reports are
632  * enumerated, fields are attached to these reports.
633  */
634
635 static struct hid_device *hid_parse_report(__u8 *start, unsigned size)
636 {
637         struct hid_device *device;
638         struct hid_parser *parser;
639         struct hid_item item;
640         __u8 *end;
641         unsigned i;
642         static int (*dispatch_type[])(struct hid_parser *parser,
643                                       struct hid_item *item) = {
644                 hid_parser_main,
645                 hid_parser_global,
646                 hid_parser_local,
647                 hid_parser_reserved
648         };
649
650         if (!(device = kzalloc(sizeof(struct hid_device), GFP_KERNEL)))
651                 return NULL;
652
653         if (!(device->collection = kzalloc(sizeof(struct hid_collection) *
654                                    HID_DEFAULT_NUM_COLLECTIONS, GFP_KERNEL))) {
655                 kfree(device);
656                 return NULL;
657         }
658         device->collection_size = HID_DEFAULT_NUM_COLLECTIONS;
659
660         for (i = 0; i < HID_REPORT_TYPES; i++)
661                 INIT_LIST_HEAD(&device->report_enum[i].report_list);
662
663         if (!(device->rdesc = (__u8 *)kmalloc(size, GFP_KERNEL))) {
664                 kfree(device->collection);
665                 kfree(device);
666                 return NULL;
667         }
668         memcpy(device->rdesc, start, size);
669         device->rsize = size;
670
671         if (!(parser = kzalloc(sizeof(struct hid_parser), GFP_KERNEL))) {
672                 kfree(device->rdesc);
673                 kfree(device->collection);
674                 kfree(device);
675                 return NULL;
676         }
677         parser->device = device;
678
679         end = start + size;
680         while ((start = fetch_item(start, end, &item)) != NULL) {
681
682                 if (item.format != HID_ITEM_FORMAT_SHORT) {
683                         dbg("unexpected long global item");
684                         kfree(device->collection);
685                         hid_free_device(device);
686                         kfree(parser);
687                         return NULL;
688                 }
689
690                 if (dispatch_type[item.type](parser, &item)) {
691                         dbg("item %u %u %u %u parsing failed\n",
692                                 item.format, (unsigned)item.size, (unsigned)item.type, (unsigned)item.tag);
693                         kfree(device->collection);
694                         hid_free_device(device);
695                         kfree(parser);
696                         return NULL;
697                 }
698
699                 if (start == end) {
700                         if (parser->collection_stack_ptr) {
701                                 dbg("unbalanced collection at end of report description");
702                                 kfree(device->collection);
703                                 hid_free_device(device);
704                                 kfree(parser);
705                                 return NULL;
706                         }
707                         if (parser->local.delimiter_depth) {
708                                 dbg("unbalanced delimiter at end of report description");
709                                 kfree(device->collection);
710                                 hid_free_device(device);
711                                 kfree(parser);
712                                 return NULL;
713                         }
714                         kfree(parser);
715                         return device;
716                 }
717         }
718
719         dbg("item fetching failed at offset %d\n", (int)(end - start));
720         kfree(device->collection);
721         hid_free_device(device);
722         kfree(parser);
723         return NULL;
724 }
725
726 /*
727  * Convert a signed n-bit integer to signed 32-bit integer. Common
728  * cases are done through the compiler, the screwed things has to be
729  * done by hand.
730  */
731
732 static __inline__ __s32 snto32(__u32 value, unsigned n)
733 {
734         switch (n) {
735                 case 8:  return ((__s8)value);
736                 case 16: return ((__s16)value);
737                 case 32: return ((__s32)value);
738         }
739         return value & (1 << (n - 1)) ? value | (-1 << n) : value;
740 }
741
742 /*
743  * Convert a signed 32-bit integer to a signed n-bit integer.
744  */
745
746 static __inline__ __u32 s32ton(__s32 value, unsigned n)
747 {
748         __s32 a = value >> (n - 1);
749         if (a && a != -1)
750                 return value < 0 ? 1 << (n - 1) : (1 << (n - 1)) - 1;
751         return value & ((1 << n) - 1);
752 }
753
754 /*
755  * Extract/implement a data field from/to a report.
756  */
757
758 static __inline__ __u32 extract(__u8 *report, unsigned offset, unsigned n)
759 {
760         report += (offset >> 5) << 2; offset &= 31;
761         return (le64_to_cpu(get_unaligned((__le64*)report)) >> offset) & ((1ULL << n) - 1);
762 }
763
764 static __inline__ void implement(__u8 *report, unsigned offset, unsigned n, __u32 value)
765 {
766         report += (offset >> 5) << 2; offset &= 31;
767         put_unaligned((get_unaligned((__le64*)report)
768                 & cpu_to_le64(~((((__u64) 1 << n) - 1) << offset)))
769                 | cpu_to_le64((__u64)value << offset), (__le64*)report);
770 }
771
772 /*
773  * Search an array for a value.
774  */
775
776 static __inline__ int search(__s32 *array, __s32 value, unsigned n)
777 {
778         while (n--) {
779                 if (*array++ == value)
780                         return 0;
781         }
782         return -1;
783 }
784
785 static void hid_process_event(struct hid_device *hid, struct hid_field *field, struct hid_usage *usage, __s32 value, int interrupt, struct pt_regs *regs)
786 {
787         hid_dump_input(usage, value);
788         if (hid->claimed & HID_CLAIMED_INPUT)
789                 hidinput_hid_event(hid, field, usage, value, regs);
790         if (hid->claimed & HID_CLAIMED_HIDDEV && interrupt)
791                 hiddev_hid_event(hid, field, usage, value, regs);
792 }
793
794 /*
795  * Analyse a received field, and fetch the data from it. The field
796  * content is stored for next report processing (we do differential
797  * reporting to the layer).
798  */
799
800 static void hid_input_field(struct hid_device *hid, struct hid_field *field, __u8 *data, int interrupt, struct pt_regs *regs)
801 {
802         unsigned n;
803         unsigned count = field->report_count;
804         unsigned offset = field->report_offset;
805         unsigned size = field->report_size;
806         __s32 min = field->logical_minimum;
807         __s32 max = field->logical_maximum;
808         __s32 *value;
809
810         if (!(value = kmalloc(sizeof(__s32) * count, GFP_ATOMIC)))
811                 return;
812
813         for (n = 0; n < count; n++) {
814
815                         value[n] = min < 0 ? snto32(extract(data, offset + n * size, size), size) :
816                                                     extract(data, offset + n * size, size);
817
818                         if (!(field->flags & HID_MAIN_ITEM_VARIABLE) /* Ignore report if ErrorRollOver */
819                             && value[n] >= min && value[n] <= max
820                             && field->usage[value[n] - min].hid == HID_UP_KEYBOARD + 1)
821                                 goto exit;
822         }
823
824         for (n = 0; n < count; n++) {
825
826                 if (HID_MAIN_ITEM_VARIABLE & field->flags) {
827                         hid_process_event(hid, field, &field->usage[n], value[n], interrupt, regs);
828                         continue;
829                 }
830
831                 if (field->value[n] >= min && field->value[n] <= max
832                         && field->usage[field->value[n] - min].hid
833                         && search(value, field->value[n], count))
834                                 hid_process_event(hid, field, &field->usage[field->value[n] - min], 0, interrupt, regs);
835
836                 if (value[n] >= min && value[n] <= max
837                         && field->usage[value[n] - min].hid
838                         && search(field->value, value[n], count))
839                                 hid_process_event(hid, field, &field->usage[value[n] - min], 1, interrupt, regs);
840         }
841
842         memcpy(field->value, value, count * sizeof(__s32));
843 exit:
844         kfree(value);
845 }
846
847 static int hid_input_report(int type, struct urb *urb, int interrupt, struct pt_regs *regs)
848 {
849         struct hid_device *hid = urb->context;
850         struct hid_report_enum *report_enum = hid->report_enum + type;
851         u8 *data = urb->transfer_buffer;
852         int len = urb->actual_length;
853         struct hid_report *report;
854         int n, size;
855
856         if (!len) {
857                 dbg("empty report");
858                 return -1;
859         }
860
861 #ifdef DEBUG_DATA
862         printk(KERN_DEBUG __FILE__ ": report (size %u) (%snumbered)\n", len, report_enum->numbered ? "" : "un");
863 #endif
864
865         n = 0;                          /* Normally report number is 0 */
866         if (report_enum->numbered) {    /* Device uses numbered reports, data[0] is report number */
867                 n = *data++;
868                 len--;
869         }
870
871 #ifdef DEBUG_DATA
872         {
873                 int i;
874                 printk(KERN_DEBUG __FILE__ ": report %d (size %u) = ", n, len);
875                 for (i = 0; i < len; i++)
876                         printk(" %02x", data[i]);
877                 printk("\n");
878         }
879 #endif
880
881         if (!(report = report_enum->report_id_hash[n])) {
882                 dbg("undefined report_id %d received", n);
883                 return -1;
884         }
885
886         size = ((report->size - 1) >> 3) + 1;
887
888         if (len < size) {
889                 dbg("report %d is too short, (%d < %d)", report->id, len, size);
890                 memset(data + len, 0, size - len);
891         }
892
893         if (hid->claimed & HID_CLAIMED_HIDDEV)
894                 hiddev_report_event(hid, report);
895
896         for (n = 0; n < report->maxfield; n++)
897                 hid_input_field(hid, report->field[n], data, interrupt, regs);
898
899         if (hid->claimed & HID_CLAIMED_INPUT)
900                 hidinput_report_event(hid, report);
901
902         return 0;
903 }
904
905 /*
906  * Input submission and I/O error handler.
907  */
908
909 static void hid_io_error(struct hid_device *hid);
910
911 /* Start up the input URB */
912 static int hid_start_in(struct hid_device *hid)
913 {
914         unsigned long flags;
915         int rc = 0;
916
917         spin_lock_irqsave(&hid->inlock, flags);
918         if (hid->open > 0 && !test_bit(HID_SUSPENDED, &hid->iofl) &&
919                         !test_and_set_bit(HID_IN_RUNNING, &hid->iofl)) {
920                 rc = usb_submit_urb(hid->urbin, GFP_ATOMIC);
921                 if (rc != 0)
922                         clear_bit(HID_IN_RUNNING, &hid->iofl);
923         }
924         spin_unlock_irqrestore(&hid->inlock, flags);
925         return rc;
926 }
927
928 /* I/O retry timer routine */
929 static void hid_retry_timeout(unsigned long _hid)
930 {
931         struct hid_device *hid = (struct hid_device *) _hid;
932
933         dev_dbg(&hid->intf->dev, "retrying intr urb\n");
934         if (hid_start_in(hid))
935                 hid_io_error(hid);
936 }
937
938 /* Workqueue routine to reset the device */
939 static void hid_reset(void *_hid)
940 {
941         struct hid_device *hid = (struct hid_device *) _hid;
942         int rc_lock, rc;
943
944         dev_dbg(&hid->intf->dev, "resetting device\n");
945         rc = rc_lock = usb_lock_device_for_reset(hid->dev, hid->intf);
946         if (rc_lock >= 0) {
947                 rc = usb_reset_device(hid->dev);
948                 if (rc_lock)
949                         usb_unlock_device(hid->dev);
950         }
951         clear_bit(HID_RESET_PENDING, &hid->iofl);
952
953         if (rc == 0) {
954                 hid->retry_delay = 0;
955                 if (hid_start_in(hid))
956                         hid_io_error(hid);
957         } else if (!(rc == -ENODEV || rc == -EHOSTUNREACH || rc == -EINTR))
958                 err("can't reset device, %s-%s/input%d, status %d",
959                                 hid->dev->bus->bus_name,
960                                 hid->dev->devpath,
961                                 hid->ifnum, rc);
962 }
963
964 /* Main I/O error handler */
965 static void hid_io_error(struct hid_device *hid)
966 {
967         unsigned long flags;
968
969         spin_lock_irqsave(&hid->inlock, flags);
970
971         /* Stop when disconnected */
972         if (usb_get_intfdata(hid->intf) == NULL)
973                 goto done;
974
975         /* When an error occurs, retry at increasing intervals */
976         if (hid->retry_delay == 0) {
977                 hid->retry_delay = 13;  /* Then 26, 52, 104, 104, ... */
978                 hid->stop_retry = jiffies + msecs_to_jiffies(1000);
979         } else if (hid->retry_delay < 100)
980                 hid->retry_delay *= 2;
981
982         if (time_after(jiffies, hid->stop_retry)) {
983
984                 /* Retries failed, so do a port reset */
985                 if (!test_and_set_bit(HID_RESET_PENDING, &hid->iofl)) {
986                         if (schedule_work(&hid->reset_work))
987                                 goto done;
988                         clear_bit(HID_RESET_PENDING, &hid->iofl);
989                 }
990         }
991
992         mod_timer(&hid->io_retry,
993                         jiffies + msecs_to_jiffies(hid->retry_delay));
994 done:
995         spin_unlock_irqrestore(&hid->inlock, flags);
996 }
997
998 /*
999  * Input interrupt completion handler.
1000  */
1001
1002 static void hid_irq_in(struct urb *urb, struct pt_regs *regs)
1003 {
1004         struct hid_device       *hid = urb->context;
1005         int                     status;
1006
1007         switch (urb->status) {
1008                 case 0:                 /* success */
1009                         hid->retry_delay = 0;
1010                         hid_input_report(HID_INPUT_REPORT, urb, 1, regs);
1011                         break;
1012                 case -ECONNRESET:       /* unlink */
1013                 case -ENOENT:
1014                 case -ESHUTDOWN:        /* unplug */
1015                         clear_bit(HID_IN_RUNNING, &hid->iofl);
1016                         return;
1017                 case -EILSEQ:           /* protocol error or unplug */
1018                 case -EPROTO:           /* protocol error or unplug */
1019                 case -ETIMEDOUT:        /* NAK */
1020                         clear_bit(HID_IN_RUNNING, &hid->iofl);
1021                         hid_io_error(hid);
1022                         return;
1023                 default:                /* error */
1024                         warn("input irq status %d received", urb->status);
1025         }
1026
1027         status = usb_submit_urb(urb, SLAB_ATOMIC);
1028         if (status) {
1029                 clear_bit(HID_IN_RUNNING, &hid->iofl);
1030                 if (status != -EPERM) {
1031                         err("can't resubmit intr, %s-%s/input%d, status %d",
1032                                         hid->dev->bus->bus_name,
1033                                         hid->dev->devpath,
1034                                         hid->ifnum, status);
1035                         hid_io_error(hid);
1036                 }
1037         }
1038 }
1039
1040 /*
1041  * Output the field into the report.
1042  */
1043
1044 static void hid_output_field(struct hid_field *field, __u8 *data)
1045 {
1046         unsigned count = field->report_count;
1047         unsigned offset = field->report_offset;
1048         unsigned size = field->report_size;
1049         unsigned n;
1050
1051         for (n = 0; n < count; n++) {
1052                 if (field->logical_minimum < 0) /* signed values */
1053                         implement(data, offset + n * size, size, s32ton(field->value[n], size));
1054                 else                            /* unsigned values */
1055                         implement(data, offset + n * size, size, field->value[n]);
1056         }
1057 }
1058
1059 /*
1060  * Create a report.
1061  */
1062
1063 static void hid_output_report(struct hid_report *report, __u8 *data)
1064 {
1065         unsigned n;
1066
1067         if (report->id > 0)
1068                 *data++ = report->id;
1069
1070         for (n = 0; n < report->maxfield; n++)
1071                 hid_output_field(report->field[n], data);
1072 }
1073
1074 /*
1075  * Set a field value. The report this field belongs to has to be
1076  * created and transferred to the device, to set this value in the
1077  * device.
1078  */
1079
1080 int hid_set_field(struct hid_field *field, unsigned offset, __s32 value)
1081 {
1082         unsigned size = field->report_size;
1083
1084         hid_dump_input(field->usage + offset, value);
1085
1086         if (offset >= field->report_count) {
1087                 dbg("offset (%d) exceeds report_count (%d)", offset, field->report_count);
1088                 hid_dump_field(field, 8);
1089                 return -1;
1090         }
1091         if (field->logical_minimum < 0) {
1092                 if (value != snto32(s32ton(value, size), size)) {
1093                         dbg("value %d is out of range", value);
1094                         return -1;
1095                 }
1096         }
1097         field->value[offset] = value;
1098         return 0;
1099 }
1100
1101 /*
1102  * Find a report field with a specified HID usage.
1103  */
1104
1105 struct hid_field *hid_find_field_by_usage(struct hid_device *hid, __u32 wanted_usage, int type)
1106 {
1107         struct hid_report *report;
1108         int i;
1109
1110         list_for_each_entry(report, &hid->report_enum[type].report_list, list)
1111                 for (i = 0; i < report->maxfield; i++)
1112                         if (report->field[i]->logical == wanted_usage)
1113                                 return report->field[i];
1114         return NULL;
1115 }
1116
1117 static int hid_submit_out(struct hid_device *hid)
1118 {
1119         struct hid_report *report;
1120
1121         report = hid->out[hid->outtail];
1122
1123         hid_output_report(report, hid->outbuf);
1124         hid->urbout->transfer_buffer_length = ((report->size - 1) >> 3) + 1 + (report->id > 0);
1125         hid->urbout->dev = hid->dev;
1126
1127         dbg("submitting out urb");
1128
1129         if (usb_submit_urb(hid->urbout, GFP_ATOMIC)) {
1130                 err("usb_submit_urb(out) failed");
1131                 return -1;
1132         }
1133
1134         return 0;
1135 }
1136
1137 static int hid_submit_ctrl(struct hid_device *hid)
1138 {
1139         struct hid_report *report;
1140         unsigned char dir;
1141         int len;
1142
1143         report = hid->ctrl[hid->ctrltail].report;
1144         dir = hid->ctrl[hid->ctrltail].dir;
1145
1146         len = ((report->size - 1) >> 3) + 1 + (report->id > 0);
1147         if (dir == USB_DIR_OUT) {
1148                 hid_output_report(report, hid->ctrlbuf);
1149                 hid->urbctrl->pipe = usb_sndctrlpipe(hid->dev, 0);
1150                 hid->urbctrl->transfer_buffer_length = len;
1151         } else {
1152                 int maxpacket, padlen;
1153
1154                 hid->urbctrl->pipe = usb_rcvctrlpipe(hid->dev, 0);
1155                 maxpacket = usb_maxpacket(hid->dev, hid->urbctrl->pipe, 0);
1156                 if (maxpacket > 0) {
1157                         padlen = (len + maxpacket - 1) / maxpacket;
1158                         padlen *= maxpacket;
1159                         if (padlen > hid->bufsize)
1160                                 padlen = hid->bufsize;
1161                 } else
1162                         padlen = 0;
1163                 hid->urbctrl->transfer_buffer_length = padlen;
1164         }
1165         hid->urbctrl->dev = hid->dev;
1166
1167         hid->cr->bRequestType = USB_TYPE_CLASS | USB_RECIP_INTERFACE | dir;
1168         hid->cr->bRequest = (dir == USB_DIR_OUT) ? HID_REQ_SET_REPORT : HID_REQ_GET_REPORT;
1169         hid->cr->wValue = cpu_to_le16(((report->type + 1) << 8) | report->id);
1170         hid->cr->wIndex = cpu_to_le16(hid->ifnum);
1171         hid->cr->wLength = cpu_to_le16(len);
1172
1173         dbg("submitting ctrl urb: %s wValue=0x%04x wIndex=0x%04x wLength=%u",
1174                 hid->cr->bRequest == HID_REQ_SET_REPORT ? "Set_Report" : "Get_Report",
1175                 hid->cr->wValue, hid->cr->wIndex, hid->cr->wLength);
1176
1177         if (usb_submit_urb(hid->urbctrl, GFP_ATOMIC)) {
1178                 err("usb_submit_urb(ctrl) failed");
1179                 return -1;
1180         }
1181
1182         return 0;
1183 }
1184
1185 /*
1186  * Output interrupt completion handler.
1187  */
1188
1189 static void hid_irq_out(struct urb *urb, struct pt_regs *regs)
1190 {
1191         struct hid_device *hid = urb->context;
1192         unsigned long flags;
1193         int unplug = 0;
1194
1195         switch (urb->status) {
1196                 case 0:                 /* success */
1197                         break;
1198                 case -ESHUTDOWN:        /* unplug */
1199                         unplug = 1;
1200                 case -EILSEQ:           /* protocol error or unplug */
1201                 case -EPROTO:           /* protocol error or unplug */
1202                 case -ECONNRESET:       /* unlink */
1203                 case -ENOENT:
1204                         break;
1205                 default:                /* error */
1206                         warn("output irq status %d received", urb->status);
1207         }
1208
1209         spin_lock_irqsave(&hid->outlock, flags);
1210
1211         if (unplug)
1212                 hid->outtail = hid->outhead;
1213         else
1214                 hid->outtail = (hid->outtail + 1) & (HID_OUTPUT_FIFO_SIZE - 1);
1215
1216         if (hid->outhead != hid->outtail) {
1217                 if (hid_submit_out(hid)) {
1218                         clear_bit(HID_OUT_RUNNING, &hid->iofl);
1219                         wake_up(&hid->wait);
1220                 }
1221                 spin_unlock_irqrestore(&hid->outlock, flags);
1222                 return;
1223         }
1224
1225         clear_bit(HID_OUT_RUNNING, &hid->iofl);
1226         spin_unlock_irqrestore(&hid->outlock, flags);
1227         wake_up(&hid->wait);
1228 }
1229
1230 /*
1231  * Control pipe completion handler.
1232  */
1233
1234 static void hid_ctrl(struct urb *urb, struct pt_regs *regs)
1235 {
1236         struct hid_device *hid = urb->context;
1237         unsigned long flags;
1238         int unplug = 0;
1239
1240         spin_lock_irqsave(&hid->ctrllock, flags);
1241
1242         switch (urb->status) {
1243                 case 0:                 /* success */
1244                         if (hid->ctrl[hid->ctrltail].dir == USB_DIR_IN)
1245                                 hid_input_report(hid->ctrl[hid->ctrltail].report->type, urb, 0, regs);
1246                         break;
1247                 case -ESHUTDOWN:        /* unplug */
1248                         unplug = 1;
1249                 case -EILSEQ:           /* protocol error or unplug */
1250                 case -EPROTO:           /* protocol error or unplug */
1251                 case -ECONNRESET:       /* unlink */
1252                 case -ENOENT:
1253                 case -EPIPE:            /* report not available */
1254                         break;
1255                 default:                /* error */
1256                         warn("ctrl urb status %d received", urb->status);
1257         }
1258
1259         if (unplug)
1260                 hid->ctrltail = hid->ctrlhead;
1261         else
1262                 hid->ctrltail = (hid->ctrltail + 1) & (HID_CONTROL_FIFO_SIZE - 1);
1263
1264         if (hid->ctrlhead != hid->ctrltail) {
1265                 if (hid_submit_ctrl(hid)) {
1266                         clear_bit(HID_CTRL_RUNNING, &hid->iofl);
1267                         wake_up(&hid->wait);
1268                 }
1269                 spin_unlock_irqrestore(&hid->ctrllock, flags);
1270                 return;
1271         }
1272
1273         clear_bit(HID_CTRL_RUNNING, &hid->iofl);
1274         spin_unlock_irqrestore(&hid->ctrllock, flags);
1275         wake_up(&hid->wait);
1276 }
1277
1278 void hid_submit_report(struct hid_device *hid, struct hid_report *report, unsigned char dir)
1279 {
1280         int head;
1281         unsigned long flags;
1282
1283         if ((hid->quirks & HID_QUIRK_NOGET) && dir == USB_DIR_IN)
1284                 return;
1285
1286         if (hid->urbout && dir == USB_DIR_OUT && report->type == HID_OUTPUT_REPORT) {
1287
1288                 spin_lock_irqsave(&hid->outlock, flags);
1289
1290                 if ((head = (hid->outhead + 1) & (HID_OUTPUT_FIFO_SIZE - 1)) == hid->outtail) {
1291                         spin_unlock_irqrestore(&hid->outlock, flags);
1292                         warn("output queue full");
1293                         return;
1294                 }
1295
1296                 hid->out[hid->outhead] = report;
1297                 hid->outhead = head;
1298
1299                 if (!test_and_set_bit(HID_OUT_RUNNING, &hid->iofl))
1300                         if (hid_submit_out(hid))
1301                                 clear_bit(HID_OUT_RUNNING, &hid->iofl);
1302
1303                 spin_unlock_irqrestore(&hid->outlock, flags);
1304                 return;
1305         }
1306
1307         spin_lock_irqsave(&hid->ctrllock, flags);
1308
1309         if ((head = (hid->ctrlhead + 1) & (HID_CONTROL_FIFO_SIZE - 1)) == hid->ctrltail) {
1310                 spin_unlock_irqrestore(&hid->ctrllock, flags);
1311                 warn("control queue full");
1312                 return;
1313         }
1314
1315         hid->ctrl[hid->ctrlhead].report = report;
1316         hid->ctrl[hid->ctrlhead].dir = dir;
1317         hid->ctrlhead = head;
1318
1319         if (!test_and_set_bit(HID_CTRL_RUNNING, &hid->iofl))
1320                 if (hid_submit_ctrl(hid))
1321                         clear_bit(HID_CTRL_RUNNING, &hid->iofl);
1322
1323         spin_unlock_irqrestore(&hid->ctrllock, flags);
1324 }
1325
1326 int hid_wait_io(struct hid_device *hid)
1327 {
1328         if (!wait_event_timeout(hid->wait, (!test_bit(HID_CTRL_RUNNING, &hid->iofl) &&
1329                                         !test_bit(HID_OUT_RUNNING, &hid->iofl)),
1330                                         10*HZ)) {
1331                 dbg("timeout waiting for ctrl or out queue to clear");
1332                 return -1;
1333         }
1334
1335         return 0;
1336 }
1337
1338 static int hid_set_idle(struct usb_device *dev, int ifnum, int report, int idle)
1339 {
1340         return usb_control_msg(dev, usb_sndctrlpipe(dev, 0),
1341                 HID_REQ_SET_IDLE, USB_TYPE_CLASS | USB_RECIP_INTERFACE, (idle << 8) | report,
1342                 ifnum, NULL, 0, USB_CTRL_SET_TIMEOUT);
1343 }
1344
1345 static int hid_get_class_descriptor(struct usb_device *dev, int ifnum,
1346                 unsigned char type, void *buf, int size)
1347 {
1348         int result, retries = 4;
1349
1350         memset(buf,0,size);     // Make sure we parse really received data
1351
1352         do {
1353                 result = usb_control_msg(dev, usb_rcvctrlpipe(dev, 0),
1354                                 USB_REQ_GET_DESCRIPTOR, USB_RECIP_INTERFACE | USB_DIR_IN,
1355                                 (type << 8), ifnum, buf, size, USB_CTRL_GET_TIMEOUT);
1356                 retries--;
1357         } while (result < size && retries);
1358         return result;
1359 }
1360
1361 int hid_open(struct hid_device *hid)
1362 {
1363         ++hid->open;
1364         if (hid_start_in(hid))
1365                 hid_io_error(hid);
1366         return 0;
1367 }
1368
1369 void hid_close(struct hid_device *hid)
1370 {
1371         if (!--hid->open)
1372                 usb_kill_urb(hid->urbin);
1373 }
1374
1375 #define USB_VENDOR_ID_PANJIT            0x134c
1376
1377 #define USB_VENDOR_ID_SILVERCREST       0x062a
1378 #define USB_DEVICE_ID_SILVERCREST_KB    0x0201
1379
1380 /*
1381  * Initialize all reports
1382  */
1383
1384 void hid_init_reports(struct hid_device *hid)
1385 {
1386         struct hid_report *report;
1387         int err, ret;
1388
1389         list_for_each_entry(report, &hid->report_enum[HID_INPUT_REPORT].report_list, list)
1390                 hid_submit_report(hid, report, USB_DIR_IN);
1391
1392         list_for_each_entry(report, &hid->report_enum[HID_FEATURE_REPORT].report_list, list)
1393                 hid_submit_report(hid, report, USB_DIR_IN);
1394
1395         err = 0;
1396         ret = hid_wait_io(hid);
1397         while (ret) {
1398                 err |= ret;
1399                 if (test_bit(HID_CTRL_RUNNING, &hid->iofl))
1400                         usb_kill_urb(hid->urbctrl);
1401                 if (test_bit(HID_OUT_RUNNING, &hid->iofl))
1402                         usb_kill_urb(hid->urbout);
1403                 ret = hid_wait_io(hid);
1404         }
1405
1406         if (err)
1407                 warn("timeout initializing reports");
1408 }
1409
1410 #define USB_VENDOR_ID_WACOM             0x056a
1411 #define USB_DEVICE_ID_WACOM_PENPARTNER  0x0000
1412 #define USB_DEVICE_ID_WACOM_GRAPHIRE    0x0010
1413 #define USB_DEVICE_ID_WACOM_INTUOS      0x0020
1414 #define USB_DEVICE_ID_WACOM_PL          0x0030
1415 #define USB_DEVICE_ID_WACOM_INTUOS2     0x0040
1416 #define USB_DEVICE_ID_WACOM_VOLITO      0x0060
1417 #define USB_DEVICE_ID_WACOM_PTU         0x0003
1418 #define USB_DEVICE_ID_WACOM_INTUOS3     0x00B0
1419 #define USB_DEVICE_ID_WACOM_CINTIQ      0x003F
1420 #define USB_DEVICE_ID_WACOM_DTF         0x00C0
1421
1422 #define USB_VENDOR_ID_ACECAD            0x0460
1423 #define USB_DEVICE_ID_ACECAD_FLAIR      0x0004
1424 #define USB_DEVICE_ID_ACECAD_302        0x0008
1425
1426 #define USB_VENDOR_ID_KBGEAR            0x084e
1427 #define USB_DEVICE_ID_KBGEAR_JAMSTUDIO  0x1001
1428
1429 #define USB_VENDOR_ID_AIPTEK            0x08ca
1430 #define USB_DEVICE_ID_AIPTEK_01         0x0001
1431 #define USB_DEVICE_ID_AIPTEK_10         0x0010
1432 #define USB_DEVICE_ID_AIPTEK_20         0x0020
1433 #define USB_DEVICE_ID_AIPTEK_21         0x0021
1434 #define USB_DEVICE_ID_AIPTEK_22         0x0022
1435 #define USB_DEVICE_ID_AIPTEK_23         0x0023
1436 #define USB_DEVICE_ID_AIPTEK_24         0x0024
1437
1438 #define USB_VENDOR_ID_GRIFFIN           0x077d
1439 #define USB_DEVICE_ID_POWERMATE         0x0410
1440 #define USB_DEVICE_ID_SOUNDKNOB         0x04AA
1441
1442 #define USB_VENDOR_ID_ATEN              0x0557
1443 #define USB_DEVICE_ID_ATEN_UC100KM      0x2004
1444 #define USB_DEVICE_ID_ATEN_CS124U       0x2202
1445 #define USB_DEVICE_ID_ATEN_2PORTKVM     0x2204
1446 #define USB_DEVICE_ID_ATEN_4PORTKVM     0x2205
1447 #define USB_DEVICE_ID_ATEN_4PORTKVMC    0x2208
1448
1449 #define USB_VENDOR_ID_TOPMAX            0x0663
1450 #define USB_DEVICE_ID_TOPMAX_COBRAPAD   0x0103
1451
1452 #define USB_VENDOR_ID_HAPP              0x078b
1453 #define USB_DEVICE_ID_UGCI_DRIVING      0x0010
1454 #define USB_DEVICE_ID_UGCI_FLYING       0x0020
1455 #define USB_DEVICE_ID_UGCI_FIGHTING     0x0030
1456
1457 #define USB_VENDOR_ID_MGE               0x0463
1458 #define USB_DEVICE_ID_MGE_UPS           0xffff
1459 #define USB_DEVICE_ID_MGE_UPS1          0x0001
1460
1461 #define USB_VENDOR_ID_ONTRAK            0x0a07
1462 #define USB_DEVICE_ID_ONTRAK_ADU100     0x0064
1463
1464 #define USB_VENDOR_ID_TANGTOP           0x0d3d
1465 #define USB_DEVICE_ID_TANGTOP_USBPS2    0x0001
1466
1467 #define USB_VENDOR_ID_ESSENTIAL_REALITY 0x0d7f
1468 #define USB_DEVICE_ID_ESSENTIAL_REALITY_P5 0x0100
1469
1470 #define USB_VENDOR_ID_A4TECH            0x09da
1471 #define USB_DEVICE_ID_A4TECH_WCP32PU    0x0006
1472
1473 #define USB_VENDOR_ID_AASHIMA           0x06d6
1474 #define USB_DEVICE_ID_AASHIMA_GAMEPAD   0x0025
1475 #define USB_DEVICE_ID_AASHIMA_PREDATOR  0x0026
1476
1477 #define USB_VENDOR_ID_CYPRESS           0x04b4
1478 #define USB_DEVICE_ID_CYPRESS_MOUSE     0x0001
1479 #define USB_DEVICE_ID_CYPRESS_HIDCOM    0x5500
1480 #define USB_DEVICE_ID_CYPRESS_ULTRAMOUSE        0x7417
1481
1482 #define USB_VENDOR_ID_BERKSHIRE         0x0c98
1483 #define USB_DEVICE_ID_BERKSHIRE_PCWD    0x1140
1484
1485 #define USB_VENDOR_ID_ALPS              0x0433
1486 #define USB_DEVICE_ID_IBM_GAMEPAD       0x1101
1487
1488 #define USB_VENDOR_ID_SAITEK            0x06a3
1489 #define USB_DEVICE_ID_SAITEK_RUMBLEPAD  0xff17
1490
1491 #define USB_VENDOR_ID_NEC               0x073e
1492 #define USB_DEVICE_ID_NEC_USB_GAME_PAD  0x0301
1493
1494 #define USB_VENDOR_ID_CHIC              0x05fe
1495 #define USB_DEVICE_ID_CHIC_GAMEPAD      0x0014
1496
1497 #define USB_VENDOR_ID_GLAB              0x06c2
1498 #define USB_DEVICE_ID_4_PHIDGETSERVO_30 0x0038
1499 #define USB_DEVICE_ID_1_PHIDGETSERVO_30 0x0039
1500 #define USB_DEVICE_ID_8_8_8_IF_KIT      0x0045
1501 #define USB_DEVICE_ID_0_0_4_IF_KIT      0x0040
1502 #define USB_DEVICE_ID_0_8_8_IF_KIT      0x0053
1503
1504 #define USB_VENDOR_ID_WISEGROUP         0x0925
1505 #define USB_DEVICE_ID_1_PHIDGETSERVO_20 0x8101
1506 #define USB_DEVICE_ID_4_PHIDGETSERVO_20 0x8104
1507 #define USB_DEVICE_ID_DUAL_USB_JOYPAD   0x8866
1508
1509 #define USB_VENDOR_ID_CODEMERCS         0x07c0
1510 #define USB_DEVICE_ID_CODEMERCS_IOW40   0x1500
1511 #define USB_DEVICE_ID_CODEMERCS_IOW24   0x1501
1512 #define USB_DEVICE_ID_CODEMERCS_IOW48   0x1502
1513 #define USB_DEVICE_ID_CODEMERCS_IOW28   0x1503
1514
1515 #define USB_VENDOR_ID_DELORME           0x1163
1516 #define USB_DEVICE_ID_DELORME_EARTHMATE 0x0100
1517 #define USB_DEVICE_ID_DELORME_EM_LT20   0x0200
1518
1519 #define USB_VENDOR_ID_MCC               0x09db
1520 #define USB_DEVICE_ID_MCC_PMD1024LS     0x0076
1521 #define USB_DEVICE_ID_MCC_PMD1208LS     0x007a
1522
1523 #define USB_VENDOR_ID_CHICONY           0x04f2
1524 #define USB_DEVICE_ID_CHICONY_USBHUB_KB 0x0100
1525
1526 #define USB_VENDOR_ID_BTC               0x046e
1527 #define USB_DEVICE_ID_BTC_KEYBOARD      0x5303
1528
1529 #define USB_VENDOR_ID_VERNIER           0x08f7
1530 #define USB_DEVICE_ID_VERNIER_LABPRO    0x0001
1531 #define USB_DEVICE_ID_VERNIER_GOTEMP    0x0002
1532 #define USB_DEVICE_ID_VERNIER_SKIP      0x0003
1533 #define USB_DEVICE_ID_VERNIER_CYCLOPS   0x0004
1534
1535 #define USB_VENDOR_ID_LD                0x0f11
1536 #define USB_DEVICE_ID_LD_CASSY          0x1000
1537 #define USB_DEVICE_ID_LD_POCKETCASSY    0x1010
1538 #define USB_DEVICE_ID_LD_MOBILECASSY    0x1020
1539 #define USB_DEVICE_ID_LD_JWM            0x1080
1540 #define USB_DEVICE_ID_LD_DMMP           0x1081
1541 #define USB_DEVICE_ID_LD_UMIP           0x1090
1542 #define USB_DEVICE_ID_LD_XRAY1          0x1100
1543 #define USB_DEVICE_ID_LD_XRAY2          0x1101
1544 #define USB_DEVICE_ID_LD_VIDEOCOM       0x1200
1545 #define USB_DEVICE_ID_LD_COM3LAB        0x2000
1546 #define USB_DEVICE_ID_LD_TELEPORT       0x2010
1547 #define USB_DEVICE_ID_LD_NETWORKANALYSER 0x2020
1548 #define USB_DEVICE_ID_LD_POWERCONTROL   0x2030
1549 #define USB_DEVICE_ID_LD_MACHINETEST    0x2040
1550
1551 #define USB_VENDOR_ID_APPLE             0x05ac
1552 #define USB_DEVICE_ID_APPLE_POWERMOUSE  0x0304
1553
1554 #define USB_VENDOR_ID_CHERRY            0x046a
1555 #define USB_DEVICE_ID_CHERRY_CYMOTION   0x0023
1556
1557 #define USB_VENDOR_ID_HP                0x03f0
1558 #define USB_DEVICE_ID_HP_USBHUB_KB      0x020c
1559
1560 #define USB_VENDOR_ID_CREATIVELABS      0x062a
1561 #define USB_DEVICE_ID_CREATIVELABS_SILVERCREST  0x0201
1562
1563 /*
1564  * Alphabetically sorted blacklist by quirk type.
1565  */
1566
1567 static const struct hid_blacklist {
1568         __u16 idVendor;
1569         __u16 idProduct;
1570         unsigned quirks;
1571 } hid_blacklist[] = {
1572
1573         { USB_VENDOR_ID_AIPTEK, USB_DEVICE_ID_AIPTEK_01, HID_QUIRK_IGNORE },
1574         { USB_VENDOR_ID_AIPTEK, USB_DEVICE_ID_AIPTEK_10, HID_QUIRK_IGNORE },
1575         { USB_VENDOR_ID_AIPTEK, USB_DEVICE_ID_AIPTEK_20, HID_QUIRK_IGNORE },
1576         { USB_VENDOR_ID_AIPTEK, USB_DEVICE_ID_AIPTEK_21, HID_QUIRK_IGNORE },
1577         { USB_VENDOR_ID_AIPTEK, USB_DEVICE_ID_AIPTEK_22, HID_QUIRK_IGNORE },
1578         { USB_VENDOR_ID_AIPTEK, USB_DEVICE_ID_AIPTEK_23, HID_QUIRK_IGNORE },
1579         { USB_VENDOR_ID_AIPTEK, USB_DEVICE_ID_AIPTEK_24, HID_QUIRK_IGNORE },
1580         { USB_VENDOR_ID_BERKSHIRE, USB_DEVICE_ID_BERKSHIRE_PCWD, HID_QUIRK_IGNORE },
1581         { USB_VENDOR_ID_CODEMERCS, USB_DEVICE_ID_CODEMERCS_IOW40, HID_QUIRK_IGNORE },
1582         { USB_VENDOR_ID_CODEMERCS, USB_DEVICE_ID_CODEMERCS_IOW24, HID_QUIRK_IGNORE },
1583         { USB_VENDOR_ID_CODEMERCS, USB_DEVICE_ID_CODEMERCS_IOW48, HID_QUIRK_IGNORE },
1584         { USB_VENDOR_ID_CODEMERCS, USB_DEVICE_ID_CODEMERCS_IOW28, HID_QUIRK_IGNORE },
1585         { USB_VENDOR_ID_CYPRESS, USB_DEVICE_ID_CYPRESS_HIDCOM, HID_QUIRK_IGNORE },
1586         { USB_VENDOR_ID_CYPRESS, USB_DEVICE_ID_CYPRESS_ULTRAMOUSE, HID_QUIRK_IGNORE },
1587         { USB_VENDOR_ID_DELORME, USB_DEVICE_ID_DELORME_EARTHMATE, HID_QUIRK_IGNORE },
1588         { USB_VENDOR_ID_DELORME, USB_DEVICE_ID_DELORME_EM_LT20, HID_QUIRK_IGNORE },
1589         { USB_VENDOR_ID_ESSENTIAL_REALITY, USB_DEVICE_ID_ESSENTIAL_REALITY_P5, HID_QUIRK_IGNORE },
1590         { USB_VENDOR_ID_GLAB, USB_DEVICE_ID_4_PHIDGETSERVO_30, HID_QUIRK_IGNORE },
1591         { USB_VENDOR_ID_GLAB, USB_DEVICE_ID_1_PHIDGETSERVO_30, HID_QUIRK_IGNORE },
1592         { USB_VENDOR_ID_GLAB, USB_DEVICE_ID_8_8_8_IF_KIT, HID_QUIRK_IGNORE },
1593         { USB_VENDOR_ID_GLAB, USB_DEVICE_ID_0_0_4_IF_KIT, HID_QUIRK_IGNORE },
1594         { USB_VENDOR_ID_GLAB, USB_DEVICE_ID_0_8_8_IF_KIT, HID_QUIRK_IGNORE },
1595         { USB_VENDOR_ID_GRIFFIN, USB_DEVICE_ID_POWERMATE, HID_QUIRK_IGNORE },
1596         { USB_VENDOR_ID_GRIFFIN, USB_DEVICE_ID_SOUNDKNOB, HID_QUIRK_IGNORE },
1597         { USB_VENDOR_ID_KBGEAR, USB_DEVICE_ID_KBGEAR_JAMSTUDIO, HID_QUIRK_IGNORE },
1598         { USB_VENDOR_ID_LD, USB_DEVICE_ID_LD_CASSY, HID_QUIRK_IGNORE },
1599         { USB_VENDOR_ID_LD, USB_DEVICE_ID_LD_POCKETCASSY, HID_QUIRK_IGNORE },
1600         { USB_VENDOR_ID_LD, USB_DEVICE_ID_LD_MOBILECASSY, HID_QUIRK_IGNORE },
1601         { USB_VENDOR_ID_LD, USB_DEVICE_ID_LD_JWM, HID_QUIRK_IGNORE },
1602         { USB_VENDOR_ID_LD, USB_DEVICE_ID_LD_DMMP, HID_QUIRK_IGNORE },
1603         { USB_VENDOR_ID_LD, USB_DEVICE_ID_LD_UMIP, HID_QUIRK_IGNORE },
1604         { USB_VENDOR_ID_LD, USB_DEVICE_ID_LD_XRAY1, HID_QUIRK_IGNORE },
1605         { USB_VENDOR_ID_LD, USB_DEVICE_ID_LD_XRAY2, HID_QUIRK_IGNORE },
1606         { USB_VENDOR_ID_LD, USB_DEVICE_ID_LD_VIDEOCOM, HID_QUIRK_IGNORE },
1607         { USB_VENDOR_ID_LD, USB_DEVICE_ID_LD_COM3LAB, HID_QUIRK_IGNORE },
1608         { USB_VENDOR_ID_LD, USB_DEVICE_ID_LD_TELEPORT, HID_QUIRK_IGNORE },
1609         { USB_VENDOR_ID_LD, USB_DEVICE_ID_LD_NETWORKANALYSER, HID_QUIRK_IGNORE },
1610         { USB_VENDOR_ID_LD, USB_DEVICE_ID_LD_POWERCONTROL, HID_QUIRK_IGNORE },
1611         { USB_VENDOR_ID_LD, USB_DEVICE_ID_LD_MACHINETEST, HID_QUIRK_IGNORE },
1612         { USB_VENDOR_ID_MCC, USB_DEVICE_ID_MCC_PMD1024LS, HID_QUIRK_IGNORE },
1613         { USB_VENDOR_ID_MCC, USB_DEVICE_ID_MCC_PMD1208LS, HID_QUIRK_IGNORE },
1614         { USB_VENDOR_ID_MGE, USB_DEVICE_ID_MGE_UPS, HID_QUIRK_IGNORE },
1615         { USB_VENDOR_ID_MGE, USB_DEVICE_ID_MGE_UPS1, HID_QUIRK_IGNORE },
1616         { USB_VENDOR_ID_ONTRAK, USB_DEVICE_ID_ONTRAK_ADU100, HID_QUIRK_IGNORE },
1617         { USB_VENDOR_ID_ONTRAK, USB_DEVICE_ID_ONTRAK_ADU100 + 100, HID_QUIRK_IGNORE },
1618         { USB_VENDOR_ID_ONTRAK, USB_DEVICE_ID_ONTRAK_ADU100 + 200, HID_QUIRK_IGNORE },
1619         { USB_VENDOR_ID_ONTRAK, USB_DEVICE_ID_ONTRAK_ADU100 + 300, HID_QUIRK_IGNORE },
1620         { USB_VENDOR_ID_ONTRAK, USB_DEVICE_ID_ONTRAK_ADU100 + 400, HID_QUIRK_IGNORE },
1621         { USB_VENDOR_ID_ONTRAK, USB_DEVICE_ID_ONTRAK_ADU100 + 500, HID_QUIRK_IGNORE },
1622         { USB_VENDOR_ID_VERNIER, USB_DEVICE_ID_VERNIER_LABPRO, HID_QUIRK_IGNORE },
1623         { USB_VENDOR_ID_VERNIER, USB_DEVICE_ID_VERNIER_GOTEMP, HID_QUIRK_IGNORE },
1624         { USB_VENDOR_ID_VERNIER, USB_DEVICE_ID_VERNIER_SKIP, HID_QUIRK_IGNORE },
1625         { USB_VENDOR_ID_VERNIER, USB_DEVICE_ID_VERNIER_CYCLOPS, HID_QUIRK_IGNORE },
1626         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_PENPARTNER, HID_QUIRK_IGNORE },
1627         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_GRAPHIRE, HID_QUIRK_IGNORE },
1628         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_GRAPHIRE + 1, HID_QUIRK_IGNORE },
1629         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_GRAPHIRE + 2, HID_QUIRK_IGNORE },
1630         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_GRAPHIRE + 3, HID_QUIRK_IGNORE },
1631         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_GRAPHIRE + 4, HID_QUIRK_IGNORE },
1632         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS, HID_QUIRK_IGNORE },
1633         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS + 1, HID_QUIRK_IGNORE },
1634         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS + 2, HID_QUIRK_IGNORE },
1635         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS + 3, HID_QUIRK_IGNORE },
1636         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS + 4, HID_QUIRK_IGNORE },
1637         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_PL, HID_QUIRK_IGNORE },
1638         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_PL + 1, HID_QUIRK_IGNORE },
1639         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_PL + 2, HID_QUIRK_IGNORE },
1640         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_PL + 3, HID_QUIRK_IGNORE },
1641         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_PL + 4, HID_QUIRK_IGNORE },
1642         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_PL + 5, HID_QUIRK_IGNORE },
1643         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_PL + 7, HID_QUIRK_IGNORE },
1644         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_PL + 8, HID_QUIRK_IGNORE },
1645         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_PL + 9, HID_QUIRK_IGNORE },
1646         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS2 + 1, HID_QUIRK_IGNORE },
1647         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS2 + 2, HID_QUIRK_IGNORE },
1648         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS2 + 3, HID_QUIRK_IGNORE },
1649         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS2 + 4, HID_QUIRK_IGNORE },
1650         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS2 + 5, HID_QUIRK_IGNORE },
1651         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS2 + 7, HID_QUIRK_IGNORE },
1652         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_VOLITO, HID_QUIRK_IGNORE },
1653         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_VOLITO + 1, HID_QUIRK_IGNORE },
1654         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_VOLITO + 2, HID_QUIRK_IGNORE },
1655         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_VOLITO + 3, HID_QUIRK_IGNORE },
1656         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_VOLITO + 4, HID_QUIRK_IGNORE },
1657         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_GRAPHIRE + 5, HID_QUIRK_IGNORE },
1658         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_GRAPHIRE + 6, HID_QUIRK_IGNORE },
1659         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_PTU, HID_QUIRK_IGNORE },
1660         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS3, HID_QUIRK_IGNORE },
1661         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS3 + 1, HID_QUIRK_IGNORE },
1662         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS3 + 2, HID_QUIRK_IGNORE },
1663         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS3 + 3, HID_QUIRK_IGNORE },
1664         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS3 + 4, HID_QUIRK_IGNORE },
1665         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_INTUOS3 + 5, HID_QUIRK_IGNORE },
1666         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_CINTIQ, HID_QUIRK_IGNORE },
1667         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_DTF, HID_QUIRK_IGNORE },
1668         { USB_VENDOR_ID_WACOM, USB_DEVICE_ID_WACOM_DTF + 3, HID_QUIRK_IGNORE },
1669         { USB_VENDOR_ID_WISEGROUP, USB_DEVICE_ID_4_PHIDGETSERVO_20, HID_QUIRK_IGNORE },
1670         { USB_VENDOR_ID_WISEGROUP, USB_DEVICE_ID_1_PHIDGETSERVO_20, HID_QUIRK_IGNORE },
1671
1672         { USB_VENDOR_ID_ACECAD, USB_DEVICE_ID_ACECAD_FLAIR, HID_QUIRK_IGNORE },
1673         { USB_VENDOR_ID_ACECAD, USB_DEVICE_ID_ACECAD_302, HID_QUIRK_IGNORE },
1674
1675         { USB_VENDOR_ID_ATEN, USB_DEVICE_ID_ATEN_UC100KM, HID_QUIRK_NOGET },
1676         { USB_VENDOR_ID_ATEN, USB_DEVICE_ID_ATEN_CS124U, HID_QUIRK_NOGET },
1677         { USB_VENDOR_ID_ATEN, USB_DEVICE_ID_ATEN_2PORTKVM, HID_QUIRK_NOGET },
1678         { USB_VENDOR_ID_ATEN, USB_DEVICE_ID_ATEN_4PORTKVM, HID_QUIRK_NOGET },
1679         { USB_VENDOR_ID_ATEN, USB_DEVICE_ID_ATEN_4PORTKVMC, HID_QUIRK_NOGET },
1680         { USB_VENDOR_ID_BTC, USB_DEVICE_ID_BTC_KEYBOARD, HID_QUIRK_NOGET},
1681         { USB_VENDOR_ID_CHICONY, USB_DEVICE_ID_CHICONY_USBHUB_KB, HID_QUIRK_NOGET},
1682         { USB_VENDOR_ID_CREATIVELABS, USB_DEVICE_ID_CREATIVELABS_SILVERCREST, HID_QUIRK_NOGET },
1683         { USB_VENDOR_ID_HP, USB_DEVICE_ID_HP_USBHUB_KB, HID_QUIRK_NOGET },
1684         { USB_VENDOR_ID_TANGTOP, USB_DEVICE_ID_TANGTOP_USBPS2, HID_QUIRK_NOGET },
1685         { USB_VENDOR_ID_WISEGROUP, USB_DEVICE_ID_DUAL_USB_JOYPAD, HID_QUIRK_NOGET | HID_QUIRK_MULTI_INPUT },
1686         { USB_VENDOR_ID_SILVERCREST, USB_DEVICE_ID_SILVERCREST_KB, HID_QUIRK_NOGET },
1687
1688         { USB_VENDOR_ID_APPLE, USB_DEVICE_ID_APPLE_POWERMOUSE, HID_QUIRK_2WHEEL_POWERMOUSE },
1689         { USB_VENDOR_ID_A4TECH, USB_DEVICE_ID_A4TECH_WCP32PU, HID_QUIRK_2WHEEL_MOUSE_HACK_7 },
1690         { USB_VENDOR_ID_CYPRESS, USB_DEVICE_ID_CYPRESS_MOUSE, HID_QUIRK_2WHEEL_MOUSE_HACK_5 },
1691
1692         { USB_VENDOR_ID_AASHIMA, USB_DEVICE_ID_AASHIMA_GAMEPAD, HID_QUIRK_BADPAD },
1693         { USB_VENDOR_ID_AASHIMA, USB_DEVICE_ID_AASHIMA_PREDATOR, HID_QUIRK_BADPAD },
1694         { USB_VENDOR_ID_ALPS, USB_DEVICE_ID_IBM_GAMEPAD, HID_QUIRK_BADPAD },
1695         { USB_VENDOR_ID_CHIC, USB_DEVICE_ID_CHIC_GAMEPAD, HID_QUIRK_BADPAD },
1696         { USB_VENDOR_ID_HAPP, USB_DEVICE_ID_UGCI_DRIVING, HID_QUIRK_BADPAD | HID_QUIRK_MULTI_INPUT },
1697         { USB_VENDOR_ID_HAPP, USB_DEVICE_ID_UGCI_FLYING, HID_QUIRK_BADPAD | HID_QUIRK_MULTI_INPUT },
1698         { USB_VENDOR_ID_HAPP, USB_DEVICE_ID_UGCI_FIGHTING, HID_QUIRK_BADPAD | HID_QUIRK_MULTI_INPUT },
1699         { USB_VENDOR_ID_NEC, USB_DEVICE_ID_NEC_USB_GAME_PAD, HID_QUIRK_BADPAD },
1700         { USB_VENDOR_ID_SAITEK, USB_DEVICE_ID_SAITEK_RUMBLEPAD, HID_QUIRK_BADPAD },
1701         { USB_VENDOR_ID_TOPMAX, USB_DEVICE_ID_TOPMAX_COBRAPAD, HID_QUIRK_BADPAD },
1702
1703         { USB_VENDOR_ID_CHERRY, USB_DEVICE_ID_CHERRY_CYMOTION, HID_QUIRK_CYMOTION },
1704
1705         { USB_VENDOR_ID_APPLE, 0x020E, HID_QUIRK_POWERBOOK_HAS_FN },
1706         { USB_VENDOR_ID_APPLE, 0x020F, HID_QUIRK_POWERBOOK_HAS_FN },
1707         { USB_VENDOR_ID_APPLE, 0x0214, HID_QUIRK_POWERBOOK_HAS_FN },
1708         { USB_VENDOR_ID_APPLE, 0x0215, HID_QUIRK_POWERBOOK_HAS_FN },
1709         { USB_VENDOR_ID_APPLE, 0x0216, HID_QUIRK_POWERBOOK_HAS_FN },
1710         { USB_VENDOR_ID_APPLE, 0x030A, HID_QUIRK_POWERBOOK_HAS_FN },
1711         { USB_VENDOR_ID_APPLE, 0x030B, HID_QUIRK_POWERBOOK_HAS_FN },
1712
1713         { USB_VENDOR_ID_PANJIT, 0x0001, HID_QUIRK_IGNORE },
1714         { USB_VENDOR_ID_PANJIT, 0x0002, HID_QUIRK_IGNORE },
1715         { USB_VENDOR_ID_PANJIT, 0x0003, HID_QUIRK_IGNORE },
1716         { USB_VENDOR_ID_PANJIT, 0x0004, HID_QUIRK_IGNORE },
1717
1718         { 0, 0 }
1719 };
1720
1721 /*
1722  * Traverse the supplied list of reports and find the longest
1723  */
1724 static void hid_find_max_report(struct hid_device *hid, unsigned int type, int *max)
1725 {
1726         struct hid_report *report;
1727         int size;
1728
1729         list_for_each_entry(report, &hid->report_enum[type].report_list, list) {
1730                 size = ((report->size - 1) >> 3) + 1;
1731                 if (type == HID_INPUT_REPORT && hid->report_enum[type].numbered)
1732                         size++;
1733                 if (*max < size)
1734                         *max = size;
1735         }
1736 }
1737
1738 static int hid_alloc_buffers(struct usb_device *dev, struct hid_device *hid)
1739 {
1740         if (!(hid->inbuf = usb_buffer_alloc(dev, hid->bufsize, SLAB_ATOMIC, &hid->inbuf_dma)))
1741                 return -1;
1742         if (!(hid->outbuf = usb_buffer_alloc(dev, hid->bufsize, SLAB_ATOMIC, &hid->outbuf_dma)))
1743                 return -1;
1744         if (!(hid->cr = usb_buffer_alloc(dev, sizeof(*(hid->cr)), SLAB_ATOMIC, &hid->cr_dma)))
1745                 return -1;
1746         if (!(hid->ctrlbuf = usb_buffer_alloc(dev, hid->bufsize, SLAB_ATOMIC, &hid->ctrlbuf_dma)))
1747                 return -1;
1748
1749         return 0;
1750 }
1751
1752 static void hid_free_buffers(struct usb_device *dev, struct hid_device *hid)
1753 {
1754         if (hid->inbuf)
1755                 usb_buffer_free(dev, hid->bufsize, hid->inbuf, hid->inbuf_dma);
1756         if (hid->outbuf)
1757                 usb_buffer_free(dev, hid->bufsize, hid->outbuf, hid->outbuf_dma);
1758         if (hid->cr)
1759                 usb_buffer_free(dev, sizeof(*(hid->cr)), hid->cr, hid->cr_dma);
1760         if (hid->ctrlbuf)
1761                 usb_buffer_free(dev, hid->bufsize, hid->ctrlbuf, hid->ctrlbuf_dma);
1762 }
1763
1764 /*
1765  * Cherry Cymotion keyboard have an invalid HID report descriptor,
1766  * that needs fixing before we can parse it.
1767  */
1768
1769 static void hid_fixup_cymotion_descriptor(char *rdesc, int rsize)
1770 {
1771         if (rsize >= 17 && rdesc[11] == 0x3c && rdesc[12] == 0x02) {
1772                 info("Fixing up Cherry Cymotion report descriptor");
1773                 rdesc[11] = rdesc[16] = 0xff;
1774                 rdesc[12] = rdesc[17] = 0x03;
1775         }
1776 }
1777
1778 static struct hid_device *usb_hid_configure(struct usb_interface *intf)
1779 {
1780         struct usb_host_interface *interface = intf->cur_altsetting;
1781         struct usb_device *dev = interface_to_usbdev (intf);
1782         struct hid_descriptor *hdesc;
1783         struct hid_device *hid;
1784         unsigned quirks = 0, rsize = 0;
1785         char *rdesc;
1786         int n, len, insize = 0;
1787
1788         for (n = 0; hid_blacklist[n].idVendor; n++)
1789                 if ((hid_blacklist[n].idVendor == le16_to_cpu(dev->descriptor.idVendor)) &&
1790                         (hid_blacklist[n].idProduct == le16_to_cpu(dev->descriptor.idProduct)))
1791                                 quirks = hid_blacklist[n].quirks;
1792
1793         if (quirks & HID_QUIRK_IGNORE)
1794                 return NULL;
1795
1796         if (usb_get_extra_descriptor(interface, HID_DT_HID, &hdesc) &&
1797             (!interface->desc.bNumEndpoints ||
1798              usb_get_extra_descriptor(&interface->endpoint[0], HID_DT_HID, &hdesc))) {
1799                 dbg("class descriptor not present\n");
1800                 return NULL;
1801         }
1802
1803         for (n = 0; n < hdesc->bNumDescriptors; n++)
1804                 if (hdesc->desc[n].bDescriptorType == HID_DT_REPORT)
1805                         rsize = le16_to_cpu(hdesc->desc[n].wDescriptorLength);
1806
1807         if (!rsize || rsize > HID_MAX_DESCRIPTOR_SIZE) {
1808                 dbg("weird size of report descriptor (%u)", rsize);
1809                 return NULL;
1810         }
1811
1812         if (!(rdesc = kmalloc(rsize, GFP_KERNEL))) {
1813                 dbg("couldn't allocate rdesc memory");
1814                 return NULL;
1815         }
1816
1817         hid_set_idle(dev, interface->desc.bInterfaceNumber, 0, 0);
1818
1819         if ((n = hid_get_class_descriptor(dev, interface->desc.bInterfaceNumber, HID_DT_REPORT, rdesc, rsize)) < 0) {
1820                 dbg("reading report descriptor failed");
1821                 kfree(rdesc);
1822                 return NULL;
1823         }
1824
1825         if ((quirks & HID_QUIRK_CYMOTION))
1826                 hid_fixup_cymotion_descriptor(rdesc, rsize);
1827
1828 #ifdef DEBUG_DATA
1829         printk(KERN_DEBUG __FILE__ ": report descriptor (size %u, read %d) = ", rsize, n);
1830         for (n = 0; n < rsize; n++)
1831                 printk(" %02x", (unsigned char) rdesc[n]);
1832         printk("\n");
1833 #endif
1834
1835         if (!(hid = hid_parse_report(rdesc, n))) {
1836                 dbg("parsing report descriptor failed");
1837                 kfree(rdesc);
1838                 return NULL;
1839         }
1840
1841         kfree(rdesc);
1842         hid->quirks = quirks;
1843
1844         hid->bufsize = HID_MIN_BUFFER_SIZE;
1845         hid_find_max_report(hid, HID_INPUT_REPORT, &hid->bufsize);
1846         hid_find_max_report(hid, HID_OUTPUT_REPORT, &hid->bufsize);
1847         hid_find_max_report(hid, HID_FEATURE_REPORT, &hid->bufsize);
1848
1849         if (hid->bufsize > HID_MAX_BUFFER_SIZE)
1850                 hid->bufsize = HID_MAX_BUFFER_SIZE;
1851
1852         hid_find_max_report(hid, HID_INPUT_REPORT, &insize);
1853
1854         if (insize > HID_MAX_BUFFER_SIZE)
1855                 insize = HID_MAX_BUFFER_SIZE;
1856
1857         if (hid_alloc_buffers(dev, hid)) {
1858                 hid_free_buffers(dev, hid);
1859                 goto fail;
1860         }
1861
1862         for (n = 0; n < interface->desc.bNumEndpoints; n++) {
1863
1864                 struct usb_endpoint_descriptor *endpoint;
1865                 int pipe;
1866                 int interval;
1867
1868                 endpoint = &interface->endpoint[n].desc;
1869                 if ((endpoint->bmAttributes & 3) != 3)          /* Not an interrupt endpoint */
1870                         continue;
1871
1872                 interval = endpoint->bInterval;
1873
1874                 /* Change the polling interval of mice. */
1875                 if (hid->collection->usage == HID_GD_MOUSE && hid_mousepoll_interval > 0)
1876                         interval = hid_mousepoll_interval;
1877
1878                 if (endpoint->bEndpointAddress & USB_DIR_IN) {
1879                         if (hid->urbin)
1880                                 continue;
1881                         if (!(hid->urbin = usb_alloc_urb(0, GFP_KERNEL)))
1882                                 goto fail;
1883                         pipe = usb_rcvintpipe(dev, endpoint->bEndpointAddress);
1884                         usb_fill_int_urb(hid->urbin, dev, pipe, hid->inbuf, insize,
1885                                          hid_irq_in, hid, interval);
1886                         hid->urbin->transfer_dma = hid->inbuf_dma;
1887                         hid->urbin->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
1888                 } else {
1889                         if (hid->urbout)
1890                                 continue;
1891                         if (!(hid->urbout = usb_alloc_urb(0, GFP_KERNEL)))
1892                                 goto fail;
1893                         pipe = usb_sndintpipe(dev, endpoint->bEndpointAddress);
1894                         usb_fill_int_urb(hid->urbout, dev, pipe, hid->outbuf, 0,
1895                                          hid_irq_out, hid, interval);
1896                         hid->urbout->transfer_dma = hid->outbuf_dma;
1897                         hid->urbout->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
1898                 }
1899         }
1900
1901         if (!hid->urbin) {
1902                 err("couldn't find an input interrupt endpoint");
1903                 goto fail;
1904         }
1905
1906         init_waitqueue_head(&hid->wait);
1907
1908         INIT_WORK(&hid->reset_work, hid_reset, hid);
1909         setup_timer(&hid->io_retry, hid_retry_timeout, (unsigned long) hid);
1910
1911         spin_lock_init(&hid->inlock);
1912         spin_lock_init(&hid->outlock);
1913         spin_lock_init(&hid->ctrllock);
1914
1915         hid->version = le16_to_cpu(hdesc->bcdHID);
1916         hid->country = hdesc->bCountryCode;
1917         hid->dev = dev;
1918         hid->intf = intf;
1919         hid->ifnum = interface->desc.bInterfaceNumber;
1920
1921         hid->name[0] = 0;
1922
1923         if (dev->manufacturer)
1924                 strlcpy(hid->name, dev->manufacturer, sizeof(hid->name));
1925
1926         if (dev->product) {
1927                 if (dev->manufacturer)
1928                         strlcat(hid->name, " ", sizeof(hid->name));
1929                 strlcat(hid->name, dev->product, sizeof(hid->name));
1930         }
1931
1932         if (!strlen(hid->name))
1933                 snprintf(hid->name, sizeof(hid->name), "HID %04x:%04x",
1934                          le16_to_cpu(dev->descriptor.idVendor),
1935                          le16_to_cpu(dev->descriptor.idProduct));
1936
1937         usb_make_path(dev, hid->phys, sizeof(hid->phys));
1938         strlcat(hid->phys, "/input", sizeof(hid->phys));
1939         len = strlen(hid->phys);
1940         if (len < sizeof(hid->phys) - 1)
1941                 snprintf(hid->phys + len, sizeof(hid->phys) - len,
1942                          "%d", intf->altsetting[0].desc.bInterfaceNumber);
1943
1944         if (usb_string(dev, dev->descriptor.iSerialNumber, hid->uniq, 64) <= 0)
1945                 hid->uniq[0] = 0;
1946
1947         hid->urbctrl = usb_alloc_urb(0, GFP_KERNEL);
1948         if (!hid->urbctrl)
1949                 goto fail;
1950
1951         usb_fill_control_urb(hid->urbctrl, dev, 0, (void *) hid->cr,
1952                              hid->ctrlbuf, 1, hid_ctrl, hid);
1953         hid->urbctrl->setup_dma = hid->cr_dma;
1954         hid->urbctrl->transfer_dma = hid->ctrlbuf_dma;
1955         hid->urbctrl->transfer_flags |= (URB_NO_TRANSFER_DMA_MAP | URB_NO_SETUP_DMA_MAP);
1956
1957         return hid;
1958
1959 fail:
1960
1961         if (hid->urbin)
1962                 usb_free_urb(hid->urbin);
1963         if (hid->urbout)
1964                 usb_free_urb(hid->urbout);
1965         if (hid->urbctrl)
1966                 usb_free_urb(hid->urbctrl);
1967         hid_free_buffers(dev, hid);
1968         hid_free_device(hid);
1969
1970         return NULL;
1971 }
1972
1973 static void hid_disconnect(struct usb_interface *intf)
1974 {
1975         struct hid_device *hid = usb_get_intfdata (intf);
1976
1977         if (!hid)
1978                 return;
1979
1980         spin_lock_irq(&hid->inlock);    /* Sync with error handler */
1981         usb_set_intfdata(intf, NULL);
1982         spin_unlock_irq(&hid->inlock);
1983         usb_kill_urb(hid->urbin);
1984         usb_kill_urb(hid->urbout);
1985         usb_kill_urb(hid->urbctrl);
1986
1987         del_timer_sync(&hid->io_retry);
1988         flush_scheduled_work();
1989
1990         if (hid->claimed & HID_CLAIMED_INPUT)
1991                 hidinput_disconnect(hid);
1992         if (hid->claimed & HID_CLAIMED_HIDDEV)
1993                 hiddev_disconnect(hid);
1994
1995         usb_free_urb(hid->urbin);
1996         usb_free_urb(hid->urbctrl);
1997         if (hid->urbout)
1998                 usb_free_urb(hid->urbout);
1999
2000         hid_free_buffers(hid->dev, hid);
2001         hid_free_device(hid);
2002 }
2003
2004 static int hid_probe(struct usb_interface *intf, const struct usb_device_id *id)
2005 {
2006         struct hid_device *hid;
2007         char path[64];
2008         int i;
2009         char *c;
2010
2011         dbg("HID probe called for ifnum %d",
2012                         intf->altsetting->desc.bInterfaceNumber);
2013
2014         if (!(hid = usb_hid_configure(intf)))
2015                 return -ENODEV;
2016
2017         hid_init_reports(hid);
2018         hid_dump_device(hid);
2019
2020         if (!hidinput_connect(hid))
2021                 hid->claimed |= HID_CLAIMED_INPUT;
2022         if (!hiddev_connect(hid))
2023                 hid->claimed |= HID_CLAIMED_HIDDEV;
2024
2025         usb_set_intfdata(intf, hid);
2026
2027         if (!hid->claimed) {
2028                 printk ("HID device not claimed by input or hiddev\n");
2029                 hid_disconnect(intf);
2030                 return -ENODEV;
2031         }
2032
2033         printk(KERN_INFO);
2034
2035         if (hid->claimed & HID_CLAIMED_INPUT)
2036                 printk("input");
2037         if (hid->claimed == (HID_CLAIMED_INPUT | HID_CLAIMED_HIDDEV))
2038                 printk(",");
2039         if (hid->claimed & HID_CLAIMED_HIDDEV)
2040                 printk("hiddev%d", hid->minor);
2041
2042         c = "Device";
2043         for (i = 0; i < hid->maxcollection; i++) {
2044                 if (hid->collection[i].type == HID_COLLECTION_APPLICATION &&
2045                     (hid->collection[i].usage & HID_USAGE_PAGE) == HID_UP_GENDESK &&
2046                     (hid->collection[i].usage & 0xffff) < ARRAY_SIZE(hid_types)) {
2047                         c = hid_types[hid->collection[i].usage & 0xffff];
2048                         break;
2049                 }
2050         }
2051
2052         usb_make_path(interface_to_usbdev(intf), path, 63);
2053
2054         printk(": USB HID v%x.%02x %s [%s] on %s\n",
2055                 hid->version >> 8, hid->version & 0xff, c, hid->name, path);
2056
2057         return 0;
2058 }
2059
2060 static int hid_suspend(struct usb_interface *intf, pm_message_t message)
2061 {
2062         struct hid_device *hid = usb_get_intfdata (intf);
2063
2064         spin_lock_irq(&hid->inlock);    /* Sync with error handler */
2065         set_bit(HID_SUSPENDED, &hid->iofl);
2066         spin_unlock_irq(&hid->inlock);
2067         del_timer(&hid->io_retry);
2068         usb_kill_urb(hid->urbin);
2069         dev_dbg(&intf->dev, "suspend\n");
2070         return 0;
2071 }
2072
2073 static int hid_resume(struct usb_interface *intf)
2074 {
2075         struct hid_device *hid = usb_get_intfdata (intf);
2076         int status;
2077
2078         clear_bit(HID_SUSPENDED, &hid->iofl);
2079         status = hid_start_in(hid);
2080         dev_dbg(&intf->dev, "resume status %d\n", status);
2081         return status;
2082 }
2083
2084 static struct usb_device_id hid_usb_ids [] = {
2085         { .match_flags = USB_DEVICE_ID_MATCH_INT_CLASS,
2086                 .bInterfaceClass = USB_INTERFACE_CLASS_HID },
2087         { }                                             /* Terminating entry */
2088 };
2089
2090 MODULE_DEVICE_TABLE (usb, hid_usb_ids);
2091
2092 static struct usb_driver hid_driver = {
2093         .name =         "usbhid",
2094         .probe =        hid_probe,
2095         .disconnect =   hid_disconnect,
2096         .suspend =      hid_suspend,
2097         .resume =       hid_resume,
2098         .id_table =     hid_usb_ids,
2099 };
2100
2101 static int __init hid_init(void)
2102 {
2103         int retval;
2104         retval = hiddev_init();
2105         if (retval)
2106                 goto hiddev_init_fail;
2107         retval = usb_register(&hid_driver);
2108         if (retval)
2109                 goto usb_register_fail;
2110         info(DRIVER_VERSION ":" DRIVER_DESC);
2111
2112         return 0;
2113 usb_register_fail:
2114         hiddev_exit();
2115 hiddev_init_fail:
2116         return retval;
2117 }
2118
2119 static void __exit hid_exit(void)
2120 {
2121         usb_deregister(&hid_driver);
2122         hiddev_exit();
2123 }
2124
2125 module_init(hid_init);
2126 module_exit(hid_exit);
2127
2128 MODULE_AUTHOR(DRIVER_AUTHOR);
2129 MODULE_DESCRIPTION(DRIVER_DESC);
2130 MODULE_LICENSE(DRIVER_LICENSE);