drivers/hid/hid-logitech-hidpp.c

   1 /*
   2  *  HIDPP protocol for Logitech Unifying receivers
   3  *
   4  *  Copyright (c) 2011 Logitech (c)
   5  *  Copyright (c) 2012-2013 Google (c)
   6  *  Copyright (c) 2013-2014 Red Hat Inc.
   7  */
   8
   9 /*
  10  * This program is free software; you can redistribute it and/or modify it
  11  * under the terms of the GNU General Public License as published by the Free
  12  * Software Foundation; version 2 of the License.
  13  */
  14
  15 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
  16
  17 #include <linux/device.h>
  18 #include <linux/hid.h>
  19 #include <linux/module.h>
  20 #include <linux/slab.h>
  21 #include <linux/sched.h>
  22 #include <linux/kfifo.h>
  23 #include <linux/input/mt.h>
  24 #include <asm/unaligned.h>
  25 #include "hid-ids.h"
  26
  27 MODULE_LICENSE("GPL");
  28 MODULE_AUTHOR("Benjamin Tissoires <benjamin.tissoires@gmail.com>");
  29 MODULE_AUTHOR("Nestor Lopez Casado <nlopezcasad@logitech.com>");
  30
  31 #define REPORT_ID_HIDPP_SHORT                   0x10
  32 #define REPORT_ID_HIDPP_LONG                    0x11
  33
  34 #define HIDPP_REPORT_SHORT_LENGTH               7
  35 #define HIDPP_REPORT_LONG_LENGTH                20
  36
  37 #define HIDPP_QUIRK_CLASS_WTP                   BIT(0)
  38
  39 /* bits 1..20 are reserved for classes */
  40 #define HIDPP_QUIRK_DELAYED_INIT                BIT(21)
  41 #define HIDPP_QUIRK_WTP_PHYSICAL_BUTTONS        BIT(22)
  42 #define HIDPP_QUIRK_MULTI_INPUT                 BIT(23)
  43
  44 /*
  45  * There are two hidpp protocols in use, the first version hidpp10 is known
  46  * as register access protocol or RAP, the second version hidpp20 is known as
  47  * feature access protocol or FAP
  48  *
  49  * Most older devices (including the Unifying usb receiver) use the RAP protocol
  50  * where as most newer devices use the FAP protocol. Both protocols are
  51  * compatible with the underlying transport, which could be usb, Unifiying, or
  52  * bluetooth. The message lengths are defined by the hid vendor specific report
  53  * descriptor for the HIDPP_SHORT report type (total message lenth 7 bytes) and
  54  * the HIDPP_LONG report type (total message length 20 bytes)
  55  *
  56  * The RAP protocol uses both report types, whereas the FAP only uses HIDPP_LONG
  57  * messages. The Unifying receiver itself responds to RAP messages (device index
  58  * is 0xFF for the receiver), and all messages (short or long) with a device
  59  * index between 1 and 6 are passed untouched to the corresponding paired
  60  * Unifying device.
  61  *
  62  * The paired device can be RAP or FAP, it will receive the message untouched
  63  * from the Unifiying receiver.
  64  */
  65
  66 struct fap {
  67         u8 feature_index;
  68         u8 funcindex_clientid;
  69         u8 params[HIDPP_REPORT_LONG_LENGTH - 4U];
  70 };
  71
  72 struct rap {
  73         u8 sub_id;
  74         u8 reg_address;
  75         u8 params[HIDPP_REPORT_LONG_LENGTH - 4U];
  76 };
  77
  78 struct hidpp_report {
  79         u8 report_id;
  80         u8 device_index;
  81         union {
  82                 struct fap fap;
  83                 struct rap rap;
  84                 u8 rawbytes[sizeof(struct fap)];
  85         };
  86 } __packed;
  87
  88 struct hidpp_device {
  89         struct hid_device *hid_dev;
  90         struct mutex send_mutex;
  91         void *send_receive_buf;
  92         wait_queue_head_t wait;
  93         bool answer_available;
  94         u8 protocol_major;
  95         u8 protocol_minor;
  96
  97         void *private_data;
  98
  99         struct work_struct work;
 100         struct kfifo delayed_work_fifo;
 101         atomic_t connected;
 102         struct input_dev *delayed_input;
 103
 104         unsigned long quirks;
 105 };
 106
 107
 108 #define HIDPP_ERROR                             0x8f
 109 #define HIDPP_ERROR_SUCCESS                     0x00
 110 #define HIDPP_ERROR_INVALID_SUBID               0x01
 111 #define HIDPP_ERROR_INVALID_ADRESS              0x02
 112 #define HIDPP_ERROR_INVALID_VALUE               0x03
 113 #define HIDPP_ERROR_CONNECT_FAIL                0x04
 114 #define HIDPP_ERROR_TOO_MANY_DEVICES            0x05
 115 #define HIDPP_ERROR_ALREADY_EXISTS              0x06
 116 #define HIDPP_ERROR_BUSY                        0x07
 117 #define HIDPP_ERROR_UNKNOWN_DEVICE              0x08
 118 #define HIDPP_ERROR_RESOURCE_ERROR              0x09
 119 #define HIDPP_ERROR_REQUEST_UNAVAILABLE         0x0a
 120 #define HIDPP_ERROR_INVALID_PARAM_VALUE         0x0b
 121 #define HIDPP_ERROR_WRONG_PIN_CODE              0x0c
 122
 123 static void hidpp_connect_event(struct hidpp_device *hidpp_dev);
 124
 125 static int __hidpp_send_report(struct hid_device *hdev,
 126                                 struct hidpp_report *hidpp_report)
 127 {
 128         int fields_count, ret;
 129
 130         switch (hidpp_report->report_id) {
 131         case REPORT_ID_HIDPP_SHORT:
 132                 fields_count = HIDPP_REPORT_SHORT_LENGTH;
 133                 break;
 134         case REPORT_ID_HIDPP_LONG:
 135                 fields_count = HIDPP_REPORT_LONG_LENGTH;
 136                 break;
 137         default:
 138                 return -ENODEV;
 139         }
 140
 141         /*
 142          * set the device_index as the receiver, it will be overwritten by
 143          * hid_hw_request if needed
 144          */
 145         hidpp_report->device_index = 0xff;
 146
 147         ret = hid_hw_raw_request(hdev, hidpp_report->report_id,
 148                 (u8 *)hidpp_report, fields_count, HID_OUTPUT_REPORT,
 149                 HID_REQ_SET_REPORT);
 150
 151         return ret == fields_count ? 0 : -1;
 152 }
 153
 154 /**
 155  * hidpp_send_message_sync() returns 0 in case of success, and something else
 156  * in case of a failure.
 157  * - If ' something else' is positive, that means that an error has been raised
 158  *   by the protocol itself.
 159  * - If ' something else' is negative, that means that we had a classic error
 160  *   (-ENOMEM, -EPIPE, etc...)
 161  */
 162 static int hidpp_send_message_sync(struct hidpp_device *hidpp,
 163         struct hidpp_report *message,
 164         struct hidpp_report *response)
 165 {
 166         int ret;
 167
 168         mutex_lock(&hidpp->send_mutex);
 169
 170         hidpp->send_receive_buf = response;
 171         hidpp->answer_available = false;
 172
 173         /*
 174          * So that we can later validate the answer when it arrives
 175          * in hidpp_raw_event
 176          */
 177         *response = *message;
 178
 179         ret = __hidpp_send_report(hidpp->hid_dev, message);
 180
 181         if (ret) {
 182                 dbg_hid("__hidpp_send_report returned err: %d\n", ret);
 183                 memset(response, 0, sizeof(struct hidpp_report));
 184                 goto exit;
 185         }
 186
 187         if (!wait_event_timeout(hidpp->wait, hidpp->answer_available,
 188                                 5*HZ)) {
 189                 dbg_hid("%s:timeout waiting for response\n", __func__);
 190                 memset(response, 0, sizeof(struct hidpp_report));
 191                 ret = -ETIMEDOUT;
 192         }
 193
 194         if (response->report_id == REPORT_ID_HIDPP_SHORT &&
 195             response->fap.feature_index == HIDPP_ERROR) {
 196                 ret = response->fap.params[1];
 197                 dbg_hid("__hidpp_send_report got hidpp error %02X\n", ret);
 198                 goto exit;
 199         }
 200
 201 exit:
 202         mutex_unlock(&hidpp->send_mutex);
 203         return ret;
 204
 205 }
 206
 207 static int hidpp_send_fap_command_sync(struct hidpp_device *hidpp,
 208         u8 feat_index, u8 funcindex_clientid, u8 *params, int param_count,
 209         struct hidpp_report *response)
 210 {
 211         struct hidpp_report *message;
 212         int ret;
 213
 214         if (param_count > sizeof(message->fap.params))
 215                 return -EINVAL;
 216
 217         message = kzalloc(sizeof(struct hidpp_report), GFP_KERNEL);
 218         if (!message)
 219                 return -ENOMEM;
 220         message->report_id = REPORT_ID_HIDPP_LONG;
 221         message->fap.feature_index = feat_index;
 222         message->fap.funcindex_clientid = funcindex_clientid;
 223         memcpy(&message->fap.params, params, param_count);
 224
 225         ret = hidpp_send_message_sync(hidpp, message, response);
 226         kfree(message);
 227         return ret;
 228 }
 229
 230 static int hidpp_send_rap_command_sync(struct hidpp_device *hidpp_dev,
 231         u8 report_id, u8 sub_id, u8 reg_address, u8 *params, int param_count,
 232         struct hidpp_report *response)
 233 {
 234         struct hidpp_report *message;
 235         int ret;
 236
 237         if ((report_id != REPORT_ID_HIDPP_SHORT) &&
 238             (report_id != REPORT_ID_HIDPP_LONG))
 239                 return -EINVAL;
 240
 241         if (param_count > sizeof(message->rap.params))
 242                 return -EINVAL;
 243
 244         message = kzalloc(sizeof(struct hidpp_report), GFP_KERNEL);
 245         if (!message)
 246                 return -ENOMEM;
 247         message->report_id = report_id;
 248         message->rap.sub_id = sub_id;
 249         message->rap.reg_address = reg_address;
 250         memcpy(&message->rap.params, params, param_count);
 251
 252         ret = hidpp_send_message_sync(hidpp_dev, message, response);
 253         kfree(message);
 254         return ret;
 255 }
 256
 257 static void delayed_work_cb(struct work_struct *work)
 258 {
 259         struct hidpp_device *hidpp = container_of(work, struct hidpp_device,
 260                                                         work);
 261         hidpp_connect_event(hidpp);
 262 }
 263
 264 static inline bool hidpp_match_answer(struct hidpp_report *question,
 265                 struct hidpp_report *answer)
 266 {
 267         return (answer->fap.feature_index == question->fap.feature_index) &&
 268            (answer->fap.funcindex_clientid == question->fap.funcindex_clientid);
 269 }
 270
 271 static inline bool hidpp_match_error(struct hidpp_report *question,
 272                 struct hidpp_report *answer)
 273 {
 274         return (answer->fap.feature_index == HIDPP_ERROR) &&
 275             (answer->fap.funcindex_clientid == question->fap.feature_index) &&
 276             (answer->fap.params[0] == question->fap.funcindex_clientid);
 277 }
 278
 279 static inline bool hidpp_report_is_connect_event(struct hidpp_report *report)
 280 {
 281         return (report->report_id == REPORT_ID_HIDPP_SHORT) &&
 282                 (report->rap.sub_id == 0x41);
 283 }
 284
 285 /* -------------------------------------------------------------------------- */
 286 /* HIDP++ 1.0 commands                                                        */
 287 /* -------------------------------------------------------------------------- */
 288
 289 #define HIDPP_SET_REGISTER                              0x80
 290 #define HIDPP_GET_REGISTER                              0x81
 291 #define HIDPP_SET_LONG_REGISTER                         0x82
 292 #define HIDPP_GET_LONG_REGISTER                         0x83
 293
 294 #define HIDPP_REG_PAIRING_INFORMATION                   0xB5
 295 #define DEVICE_NAME                                     0x40
 296
 297 static char *hidpp_get_unifying_name(struct hidpp_device *hidpp_dev)
 298 {
 299         struct hidpp_report response;
 300         int ret;
 301         /* hid-logitech-dj is in charge of setting the right device index */
 302         u8 params[1] = { DEVICE_NAME };
 303         char *name;
 304         int len;
 305
 306         ret = hidpp_send_rap_command_sync(hidpp_dev,
 307                                         REPORT_ID_HIDPP_SHORT,
 308                                         HIDPP_GET_LONG_REGISTER,
 309                                         HIDPP_REG_PAIRING_INFORMATION,
 310                                         params, 1, &response);
 311         if (ret)
 312                 return NULL;
 313
 314         len = response.rap.params[1];
 315
 316         if (2 + len > sizeof(response.rap.params))
 317                 return NULL;
 318
 319         name = kzalloc(len + 1, GFP_KERNEL);
 320         if (!name)
 321                 return NULL;
 322
 323         memcpy(name, &response.rap.params[2], len);
 324         return name;
 325 }
 326
 327 /* -------------------------------------------------------------------------- */
 328 /* 0x0000: Root                                                               */
 329 /* -------------------------------------------------------------------------- */
 330
 331 #define HIDPP_PAGE_ROOT                                 0x0000
 332 #define HIDPP_PAGE_ROOT_IDX                             0x00
 333
 334 #define CMD_ROOT_GET_FEATURE                            0x01
 335 #define CMD_ROOT_GET_PROTOCOL_VERSION                   0x11
 336
 337 static int hidpp_root_get_feature(struct hidpp_device *hidpp, u16 feature,
 338         u8 *feature_index, u8 *feature_type)
 339 {
 340         struct hidpp_report response;
 341         int ret;
 342         u8 params[2] = { feature >> 8, feature & 0x00FF };
 343
 344         ret = hidpp_send_fap_command_sync(hidpp,
 345                         HIDPP_PAGE_ROOT_IDX,
 346                         CMD_ROOT_GET_FEATURE,
 347                         params, 2, &response);
 348         if (ret)
 349                 return ret;
 350
 351         *feature_index = response.fap.params[0];
 352         *feature_type = response.fap.params[1];
 353
 354         return ret;
 355 }
 356
 357 static int hidpp_root_get_protocol_version(struct hidpp_device *hidpp)
 358 {
 359         struct hidpp_report response;
 360         int ret;
 361
 362         ret = hidpp_send_fap_command_sync(hidpp,
 363                         HIDPP_PAGE_ROOT_IDX,
 364                         CMD_ROOT_GET_PROTOCOL_VERSION,
 365                         NULL, 0, &response);
 366
 367         if (ret == HIDPP_ERROR_INVALID_SUBID) {
 368                 hidpp->protocol_major = 1;
 369                 hidpp->protocol_minor = 0;
 370                 return 0;
 371         }
 372
 373         /* the device might not be connected */
 374         if (ret == HIDPP_ERROR_RESOURCE_ERROR)
 375                 return -EIO;
 376
 377         if (ret > 0) {
 378                 hid_err(hidpp->hid_dev, "%s: received protocol error 0x%02x\n",
 379                         __func__, ret);
 380                 return -EPROTO;
 381         }
 382         if (ret)
 383                 return ret;
 384
 385         hidpp->protocol_major = response.fap.params[0];
 386         hidpp->protocol_minor = response.fap.params[1];
 387
 388         return ret;
 389 }
 390
 391 static bool hidpp_is_connected(struct hidpp_device *hidpp)
 392 {
 393         int ret;
 394
 395         ret = hidpp_root_get_protocol_version(hidpp);
 396         if (!ret)
 397                 hid_dbg(hidpp->hid_dev, "HID++ %u.%u device connected.\n",
 398                         hidpp->protocol_major, hidpp->protocol_minor);
 399         return ret == 0;
 400 }
 401
 402 /* -------------------------------------------------------------------------- */
 403 /* 0x0005: GetDeviceNameType                                                  */
 404 /* -------------------------------------------------------------------------- */
 405
 406 #define HIDPP_PAGE_GET_DEVICE_NAME_TYPE                 0x0005
 407
 408 #define CMD_GET_DEVICE_NAME_TYPE_GET_COUNT              0x01
 409 #define CMD_GET_DEVICE_NAME_TYPE_GET_DEVICE_NAME        0x11
 410 #define CMD_GET_DEVICE_NAME_TYPE_GET_TYPE               0x21
 411
 412 static int hidpp_devicenametype_get_count(struct hidpp_device *hidpp,
 413         u8 feature_index, u8 *nameLength)
 414 {
 415         struct hidpp_report response;
 416         int ret;
 417
 418         ret = hidpp_send_fap_command_sync(hidpp, feature_index,
 419                 CMD_GET_DEVICE_NAME_TYPE_GET_COUNT, NULL, 0, &response);
 420
 421         if (ret > 0) {
 422                 hid_err(hidpp->hid_dev, "%s: received protocol error 0x%02x\n",
 423                         __func__, ret);
 424                 return -EPROTO;
 425         }
 426         if (ret)
 427                 return ret;
 428
 429         *nameLength = response.fap.params[0];
 430
 431         return ret;
 432 }
 433
 434 static int hidpp_devicenametype_get_device_name(struct hidpp_device *hidpp,
 435         u8 feature_index, u8 char_index, char *device_name, int len_buf)
 436 {
 437         struct hidpp_report response;
 438         int ret, i;
 439         int count;
 440
 441         ret = hidpp_send_fap_command_sync(hidpp, feature_index,
 442                 CMD_GET_DEVICE_NAME_TYPE_GET_DEVICE_NAME, &char_index, 1,
 443                 &response);
 444
 445         if (ret > 0) {
 446                 hid_err(hidpp->hid_dev, "%s: received protocol error 0x%02x\n",
 447                         __func__, ret);
 448                 return -EPROTO;
 449         }
 450         if (ret)
 451                 return ret;
 452
 453         if (response.report_id == REPORT_ID_HIDPP_LONG)
 454                 count = HIDPP_REPORT_LONG_LENGTH - 4;
 455         else
 456                 count = HIDPP_REPORT_SHORT_LENGTH - 4;
 457
 458         if (len_buf < count)
 459                 count = len_buf;
 460
 461         for (i = 0; i < count; i++)
 462                 device_name[i] = response.fap.params[i];
 463
 464         return count;
 465 }
 466
 467 static char *hidpp_get_device_name(struct hidpp_device *hidpp)
 468 {
 469         u8 feature_type;
 470         u8 feature_index;
 471         u8 __name_length;
 472         char *name;
 473         unsigned index = 0;
 474         int ret;
 475
 476         ret = hidpp_root_get_feature(hidpp, HIDPP_PAGE_GET_DEVICE_NAME_TYPE,
 477                 &feature_index, &feature_type);
 478         if (ret)
 479                 return NULL;
 480
 481         ret = hidpp_devicenametype_get_count(hidpp, feature_index,
 482                 &__name_length);
 483         if (ret)
 484                 return NULL;
 485
 486         name = kzalloc(__name_length + 1, GFP_KERNEL);
 487         if (!name)
 488                 return NULL;
 489
 490         while (index < __name_length) {
 491                 ret = hidpp_devicenametype_get_device_name(hidpp,
 492                         feature_index, index, name + index,
 493                         __name_length - index);
 494                 if (ret <= 0) {
 495                         kfree(name);
 496                         return NULL;
 497                 }
 498                 index += ret;
 499         }
 500
 501         return name;
 502 }
 503
 504 /* -------------------------------------------------------------------------- */
 505 /* 0x6100: TouchPadRawXY                                                      */
 506 /* -------------------------------------------------------------------------- */
 507
 508 #define HIDPP_PAGE_TOUCHPAD_RAW_XY                      0x6100
 509
 510 #define CMD_TOUCHPAD_GET_RAW_INFO                       0x01
 511 #define CMD_TOUCHPAD_SET_RAW_REPORT_STATE               0x21
 512
 513 #define EVENT_TOUCHPAD_RAW_XY                           0x00
 514
 515 #define TOUCHPAD_RAW_XY_ORIGIN_LOWER_LEFT               0x01
 516 #define TOUCHPAD_RAW_XY_ORIGIN_UPPER_LEFT               0x03
 517
 518 struct hidpp_touchpad_raw_info {
 519         u16 x_size;
 520         u16 y_size;
 521         u8 z_range;
 522         u8 area_range;
 523         u8 timestamp_unit;
 524         u8 maxcontacts;
 525         u8 origin;
 526         u16 res;
 527 };
 528
 529 struct hidpp_touchpad_raw_xy_finger {
 530         u8 contact_type;
 531         u8 contact_status;
 532         u16 x;
 533         u16 y;
 534         u8 z;
 535         u8 area;
 536         u8 finger_id;
 537 };
 538
 539 struct hidpp_touchpad_raw_xy {
 540         u16 timestamp;
 541         struct hidpp_touchpad_raw_xy_finger fingers[2];
 542         u8 spurious_flag;
 543         u8 end_of_frame;
 544         u8 finger_count;
 545         u8 button;
 546 };
 547
 548 static int hidpp_touchpad_get_raw_info(struct hidpp_device *hidpp,
 549         u8 feature_index, struct hidpp_touchpad_raw_info *raw_info)
 550 {
 551         struct hidpp_report response;
 552         int ret;
 553         u8 *params = (u8 *)response.fap.params;
 554
 555         ret = hidpp_send_fap_command_sync(hidpp, feature_index,
 556                 CMD_TOUCHPAD_GET_RAW_INFO, NULL, 0, &response);
 557
 558         if (ret > 0) {
 559                 hid_err(hidpp->hid_dev, "%s: received protocol error 0x%02x\n",
 560                         __func__, ret);
 561                 return -EPROTO;
 562         }
 563         if (ret)
 564                 return ret;
 565
 566         raw_info->x_size = get_unaligned_be16(&params[0]);
 567         raw_info->y_size = get_unaligned_be16(&params[2]);
 568         raw_info->z_range = params[4];
 569         raw_info->area_range = params[5];
 570         raw_info->maxcontacts = params[7];
 571         raw_info->origin = params[8];
 572         /* res is given in unit per inch */
 573         raw_info->res = get_unaligned_be16(&params[13]) * 2 / 51;
 574
 575         return ret;
 576 }
 577
 578 static int hidpp_touchpad_set_raw_report_state(struct hidpp_device *hidpp_dev,
 579                 u8 feature_index, bool send_raw_reports,
 580                 bool sensor_enhanced_settings)
 581 {
 582         struct hidpp_report response;
 583
 584         /*
 585          * Params:
 586          *   bit 0 - enable raw
 587          *   bit 1 - 16bit Z, no area
 588          *   bit 2 - enhanced sensitivity
 589          *   bit 3 - width, height (4 bits each) instead of area
 590          *   bit 4 - send raw + gestures (degrades smoothness)
 591          *   remaining bits - reserved
 592          */
 593         u8 params = send_raw_reports | (sensor_enhanced_settings << 2);
 594
 595         return hidpp_send_fap_command_sync(hidpp_dev, feature_index,
 596                 CMD_TOUCHPAD_SET_RAW_REPORT_STATE, &params, 1, &response);
 597 }
 598
 599 static void hidpp_touchpad_touch_event(u8 *data,
 600         struct hidpp_touchpad_raw_xy_finger *finger)
 601 {
 602         u8 x_m = data[0] << 2;
 603         u8 y_m = data[2] << 2;
 604
 605         finger->x = x_m << 6 | data[1];
 606         finger->y = y_m << 6 | data[3];
 607
 608         finger->contact_type = data[0] >> 6;
 609         finger->contact_status = data[2] >> 6;
 610
 611         finger->z = data[4];
 612         finger->area = data[5];
 613         finger->finger_id = data[6] >> 4;
 614 }
 615
 616 static void hidpp_touchpad_raw_xy_event(struct hidpp_device *hidpp_dev,
 617                 u8 *data, struct hidpp_touchpad_raw_xy *raw_xy)
 618 {
 619         memset(raw_xy, 0, sizeof(struct hidpp_touchpad_raw_xy));
 620         raw_xy->end_of_frame = data[8] & 0x01;
 621         raw_xy->spurious_flag = (data[8] >> 1) & 0x01;
 622         raw_xy->finger_count = data[15] & 0x0f;
 623         raw_xy->button = (data[8] >> 2) & 0x01;
 624
 625         if (raw_xy->finger_count) {
 626                 hidpp_touchpad_touch_event(&data[2], &raw_xy->fingers[0]);
 627                 hidpp_touchpad_touch_event(&data[9], &raw_xy->fingers[1]);
 628         }
 629 }
 630
 631 /* ************************************************************************** */
 632 /*                                                                            */
 633 /* Device Support                                                             */
 634 /*                                                                            */
 635 /* ************************************************************************** */
 636
 637 /* -------------------------------------------------------------------------- */
 638 /* Touchpad HID++ devices                                                     */
 639 /* -------------------------------------------------------------------------- */
 640
 641 #define WTP_MANUAL_RESOLUTION                           39
 642
 643 struct wtp_data {
 644         struct input_dev *input;
 645         u16 x_size, y_size;
 646         u8 finger_count;
 647         u8 mt_feature_index;
 648         u8 button_feature_index;
 649         u8 maxcontacts;
 650         bool flip_y;
 651         unsigned int resolution;
 652 };
 653
 654 static int wtp_input_mapping(struct hid_device *hdev, struct hid_input *hi,
 655                 struct hid_field *field, struct hid_usage *usage,
 656                 unsigned long **bit, int *max)
 657 {
 658         struct hidpp_device *hidpp = hid_get_drvdata(hdev);
 659
 660         if ((hidpp->quirks & HIDPP_QUIRK_MULTI_INPUT) &&
 661             (field->application == HID_GD_KEYBOARD))
 662                 return 0;
 663
 664         return -1;
 665 }
 666
 667 static void wtp_populate_input(struct hidpp_device *hidpp,
 668                 struct input_dev *input_dev, bool origin_is_hid_core)
 669 {
 670         struct wtp_data *wd = hidpp->private_data;
 671
 672         if ((hidpp->quirks & HIDPP_QUIRK_MULTI_INPUT) && origin_is_hid_core)
 673                 /* this is the generic hid-input call */
 674                 return;
 675
 676         __set_bit(EV_ABS, input_dev->evbit);
 677         __set_bit(EV_KEY, input_dev->evbit);
 678         __clear_bit(EV_REL, input_dev->evbit);
 679         __clear_bit(EV_LED, input_dev->evbit);
 680
 681         input_set_abs_params(input_dev, ABS_MT_POSITION_X, 0, wd->x_size, 0, 0);
 682         input_abs_set_res(input_dev, ABS_MT_POSITION_X, wd->resolution);
 683         input_set_abs_params(input_dev, ABS_MT_POSITION_Y, 0, wd->y_size, 0, 0);
 684         input_abs_set_res(input_dev, ABS_MT_POSITION_Y, wd->resolution);
 685
 686         /* Max pressure is not given by the devices, pick one */
 687         input_set_abs_params(input_dev, ABS_MT_PRESSURE, 0, 50, 0, 0);
 688
 689         input_set_capability(input_dev, EV_KEY, BTN_LEFT);
 690
 691         if (hidpp->quirks & HIDPP_QUIRK_WTP_PHYSICAL_BUTTONS)
 692                 input_set_capability(input_dev, EV_KEY, BTN_RIGHT);
 693         else
 694                 __set_bit(INPUT_PROP_BUTTONPAD, input_dev->propbit);
 695
 696         input_mt_init_slots(input_dev, wd->maxcontacts, INPUT_MT_POINTER |
 697                 INPUT_MT_DROP_UNUSED);
 698
 699         wd->input = input_dev;
 700 }
 701
 702 static void wtp_touch_event(struct wtp_data *wd,
 703         struct hidpp_touchpad_raw_xy_finger *touch_report)
 704 {
 705         int slot;
 706
 707         if (!touch_report->finger_id || touch_report->contact_type)
 708                 /* no actual data */
 709                 return;
 710
 711         slot = input_mt_get_slot_by_key(wd->input, touch_report->finger_id);
 712
 713         input_mt_slot(wd->input, slot);
 714         input_mt_report_slot_state(wd->input, MT_TOOL_FINGER,
 715                                         touch_report->contact_status);
 716         if (touch_report->contact_status) {
 717                 input_event(wd->input, EV_ABS, ABS_MT_POSITION_X,
 718                                 touch_report->x);
 719                 input_event(wd->input, EV_ABS, ABS_MT_POSITION_Y,
 720                                 wd->flip_y ? wd->y_size - touch_report->y :
 721                                              touch_report->y);
 722                 input_event(wd->input, EV_ABS, ABS_MT_PRESSURE,
 723                                 touch_report->area);
 724         }
 725 }
 726
 727 static void wtp_send_raw_xy_event(struct hidpp_device *hidpp,
 728                 struct hidpp_touchpad_raw_xy *raw)
 729 {
 730         struct wtp_data *wd = hidpp->private_data;
 731         int i;
 732
 733         for (i = 0; i < 2; i++)
 734                 wtp_touch_event(wd, &(raw->fingers[i]));
 735
 736         if (raw->end_of_frame &&
 737             !(hidpp->quirks & HIDPP_QUIRK_WTP_PHYSICAL_BUTTONS))
 738                 input_event(wd->input, EV_KEY, BTN_LEFT, raw->button);
 739
 740         if (raw->end_of_frame || raw->finger_count <= 2) {
 741                 input_mt_sync_frame(wd->input);
 742                 input_sync(wd->input);
 743         }
 744 }
 745
 746 static int wtp_mouse_raw_xy_event(struct hidpp_device *hidpp, u8 *data)
 747 {
 748         struct wtp_data *wd = hidpp->private_data;
 749         u8 c1_area = ((data[7] & 0xf) * (data[7] & 0xf) +
 750                       (data[7] >> 4) * (data[7] >> 4)) / 2;
 751         u8 c2_area = ((data[13] & 0xf) * (data[13] & 0xf) +
 752                       (data[13] >> 4) * (data[13] >> 4)) / 2;
 753         struct hidpp_touchpad_raw_xy raw = {
 754                 .timestamp = data[1],
 755                 .fingers = {
 756                         {
 757                                 .contact_type = 0,
 758                                 .contact_status = !!data[7],
 759                                 .x = get_unaligned_le16(&data[3]),
 760                                 .y = get_unaligned_le16(&data[5]),
 761                                 .z = c1_area,
 762                                 .area = c1_area,
 763                                 .finger_id = data[2],
 764                         }, {
 765                                 .contact_type = 0,
 766                                 .contact_status = !!data[13],
 767                                 .x = get_unaligned_le16(&data[9]),
 768                                 .y = get_unaligned_le16(&data[11]),
 769                                 .z = c2_area,
 770                                 .area = c2_area,
 771                                 .finger_id = data[8],
 772                         }
 773                 },
 774                 .finger_count = wd->maxcontacts,
 775                 .spurious_flag = 0,
 776                 .end_of_frame = (data[0] >> 7) == 0,
 777                 .button = data[0] & 0x01,
 778         };
 779
 780         wtp_send_raw_xy_event(hidpp, &raw);
 781
 782         return 1;
 783 }
 784
 785 static int wtp_raw_event(struct hid_device *hdev, u8 *data, int size)
 786 {
 787         struct hidpp_device *hidpp = hid_get_drvdata(hdev);
 788         struct wtp_data *wd = hidpp->private_data;
 789         struct hidpp_report *report = (struct hidpp_report *)data;
 790         struct hidpp_touchpad_raw_xy raw;
 791
 792         if (!wd || !wd->input)
 793                 return 1;
 794
 795         switch (data[0]) {
 796         case 0x02:
 797                 if (size < 2) {
 798                         hid_err(hdev, "Received HID report of bad size (%d)",
 799                                 size);
 800                         return 1;
 801                 }
 802                 if (hidpp->quirks & HIDPP_QUIRK_WTP_PHYSICAL_BUTTONS) {
 803                         input_event(wd->input, EV_KEY, BTN_LEFT,
 804                                         !!(data[1] & 0x01));
 805                         input_event(wd->input, EV_KEY, BTN_RIGHT,
 806                                         !!(data[1] & 0x02));
 807                         input_sync(wd->input);
 808                         return 0;
 809                 } else {
 810                         if (size < 21)
 811                                 return 1;
 812                         return wtp_mouse_raw_xy_event(hidpp, &data[7]);
 813                 }
 814         case REPORT_ID_HIDPP_LONG:
 815                 /* size is already checked in hidpp_raw_event. */
 816                 if ((report->fap.feature_index != wd->mt_feature_index) ||
 817                     (report->fap.funcindex_clientid != EVENT_TOUCHPAD_RAW_XY))
 818                         return 1;
 819                 hidpp_touchpad_raw_xy_event(hidpp, data + 4, &raw);
 820
 821                 wtp_send_raw_xy_event(hidpp, &raw);
 822                 return 0;
 823         }
 824
 825         return 0;
 826 }
 827
 828 static int wtp_get_config(struct hidpp_device *hidpp)
 829 {
 830         struct wtp_data *wd = hidpp->private_data;
 831         struct hidpp_touchpad_raw_info raw_info = {0};
 832         u8 feature_type;
 833         int ret;
 834
 835         ret = hidpp_root_get_feature(hidpp, HIDPP_PAGE_TOUCHPAD_RAW_XY,
 836                 &wd->mt_feature_index, &feature_type);
 837         if (ret)
 838                 /* means that the device is not powered up */
 839                 return ret;
 840
 841         ret = hidpp_touchpad_get_raw_info(hidpp, wd->mt_feature_index,
 842                 &raw_info);
 843         if (ret)
 844                 return ret;
 845
 846         wd->x_size = raw_info.x_size;
 847         wd->y_size = raw_info.y_size;
 848         wd->maxcontacts = raw_info.maxcontacts;
 849         wd->flip_y = raw_info.origin == TOUCHPAD_RAW_XY_ORIGIN_LOWER_LEFT;
 850         wd->resolution = raw_info.res;
 851         if (!wd->resolution)
 852                 wd->resolution = WTP_MANUAL_RESOLUTION;
 853
 854         return 0;
 855 }
 856
 857 static int wtp_allocate(struct hid_device *hdev, const struct hid_device_id *id)
 858 {
 859         struct hidpp_device *hidpp = hid_get_drvdata(hdev);
 860         struct wtp_data *wd;
 861
 862         wd = devm_kzalloc(&hdev->dev, sizeof(struct wtp_data),
 863                         GFP_KERNEL);
 864         if (!wd)
 865                 return -ENOMEM;
 866
 867         hidpp->private_data = wd;
 868
 869         return 0;
 870 };
 871
 872 static void wtp_connect(struct hid_device *hdev, bool connected)
 873 {
 874         struct hidpp_device *hidpp = hid_get_drvdata(hdev);
 875         struct wtp_data *wd = hidpp->private_data;
 876         int ret;
 877
 878         if (!connected)
 879                 return;
 880
 881         if (!wd->x_size) {
 882                 ret = wtp_get_config(hidpp);
 883                 if (ret) {
 884                         hid_err(hdev, "Can not get wtp config: %d\n", ret);
 885                         return;
 886                 }
 887         }
 888
 889         hidpp_touchpad_set_raw_report_state(hidpp, wd->mt_feature_index,
 890                         true, true);
 891 }
 892
 893 /* -------------------------------------------------------------------------- */
 894 /* Generic HID++ devices                                                      */
 895 /* -------------------------------------------------------------------------- */
 896
 897 static int hidpp_input_mapping(struct hid_device *hdev, struct hid_input *hi,
 898                 struct hid_field *field, struct hid_usage *usage,
 899                 unsigned long **bit, int *max)
 900 {
 901         struct hidpp_device *hidpp = hid_get_drvdata(hdev);
 902
 903         if (hidpp->quirks & HIDPP_QUIRK_CLASS_WTP)
 904                 return wtp_input_mapping(hdev, hi, field, usage, bit, max);
 905
 906         return 0;
 907 }
 908
 909 static void hidpp_populate_input(struct hidpp_device *hidpp,
 910                 struct input_dev *input, bool origin_is_hid_core)
 911 {
 912         if (hidpp->quirks & HIDPP_QUIRK_CLASS_WTP)
 913                 wtp_populate_input(hidpp, input, origin_is_hid_core);
 914 }
 915
 916 static void hidpp_input_configured(struct hid_device *hdev,
 917                                 struct hid_input *hidinput)
 918 {
 919         struct hidpp_device *hidpp = hid_get_drvdata(hdev);
 920         struct input_dev *input = hidinput->input;
 921
 922         hidpp_populate_input(hidpp, input, true);
 923 }
 924
 925 static int hidpp_raw_hidpp_event(struct hidpp_device *hidpp, u8 *data,
 926                 int size)
 927 {
 928         struct hidpp_report *question = hidpp->send_receive_buf;
 929         struct hidpp_report *answer = hidpp->send_receive_buf;
 930         struct hidpp_report *report = (struct hidpp_report *)data;
 931
 932         /*
 933          * If the mutex is locked then we have a pending answer from a
 934          * previoulsly sent command
 935          */
 936         if (unlikely(mutex_is_locked(&hidpp->send_mutex))) {
 937                 /*
 938                  * Check for a correct hidpp20 answer or the corresponding
 939                  * error
 940                  */
 941                 if (hidpp_match_answer(question, report) ||
 942                                 hidpp_match_error(question, report)) {
 943                         *answer = *report;
 944                         hidpp->answer_available = true;
 945                         wake_up(&hidpp->wait);
 946                         /*
 947                          * This was an answer to a command that this driver sent
 948                          * We return 1 to hid-core to avoid forwarding the
 949                          * command upstream as it has been treated by the driver
 950                          */
 951
 952                         return 1;
 953                 }
 954         }
 955
 956         if (unlikely(hidpp_report_is_connect_event(report))) {
 957                 atomic_set(&hidpp->connected,
 958                                 !(report->rap.params[0] & (1 << 6)));
 959                 if ((hidpp->quirks & HIDPP_QUIRK_DELAYED_INIT) &&
 960                     (schedule_work(&hidpp->work) == 0))
 961                         dbg_hid("%s: connect event already queued\n", __func__);
 962                 return 1;
 963         }
 964
 965         if (hidpp->quirks & HIDPP_QUIRK_CLASS_WTP)
 966                 return wtp_raw_event(hidpp->hid_dev, data, size);
 967
 968         return 0;
 969 }
 970
 971 static int hidpp_raw_event(struct hid_device *hdev, struct hid_report *report,
 972                 u8 *data, int size)
 973 {
 974         struct hidpp_device *hidpp = hid_get_drvdata(hdev);
 975
 976         switch (data[0]) {
 977         case REPORT_ID_HIDPP_LONG:
 978                 if (size != HIDPP_REPORT_LONG_LENGTH) {
 979                         hid_err(hdev, "received hid++ report of bad size (%d)",
 980                                 size);
 981                         return 1;
 982                 }
 983                 return hidpp_raw_hidpp_event(hidpp, data, size);
 984         case REPORT_ID_HIDPP_SHORT:
 985                 if (size != HIDPP_REPORT_SHORT_LENGTH) {
 986                         hid_err(hdev, "received hid++ report of bad size (%d)",
 987                                 size);
 988                         return 1;
 989                 }
 990                 return hidpp_raw_hidpp_event(hidpp, data, size);
 991         }
 992
 993         if (hidpp->quirks & HIDPP_QUIRK_CLASS_WTP)
 994                 return wtp_raw_event(hdev, data, size);
 995
 996         return 0;
 997 }
 998
 999 static void hidpp_overwrite_name(struct hid_device *hdev, bool use_unifying)
1000 {
1001         struct hidpp_device *hidpp = hid_get_drvdata(hdev);
1002         char *name;
1003
1004         if (use_unifying)
1005                 /*
1006                  * the device is connected through an Unifying receiver, and
1007                  * might not be already connected.
1008                  * Ask the receiver for its name.
1009                  */
1010                 name = hidpp_get_unifying_name(hidpp);
1011         else
1012                 name = hidpp_get_device_name(hidpp);
1013
1014         if (!name)
1015                 hid_err(hdev, "unable to retrieve the name of the device");
1016         else
1017                 snprintf(hdev->name, sizeof(hdev->name), "%s", name);
1018
1019         kfree(name);
1020 }
1021
1022 static int hidpp_input_open(struct input_dev *dev)
1023 {
1024         struct hid_device *hid = input_get_drvdata(dev);
1025
1026         return hid_hw_open(hid);
1027 }
1028
1029 static void hidpp_input_close(struct input_dev *dev)
1030 {
1031         struct hid_device *hid = input_get_drvdata(dev);
1032
1033         hid_hw_close(hid);
1034 }
1035
1036 static struct input_dev *hidpp_allocate_input(struct hid_device *hdev)
1037 {
1038         struct input_dev *input_dev = devm_input_allocate_device(&hdev->dev);
1039
1040         if (!input_dev)
1041                 return NULL;
1042
1043         input_set_drvdata(input_dev, hdev);
1044         input_dev->open = hidpp_input_open;
1045         input_dev->close = hidpp_input_close;
1046
1047         input_dev->name = hdev->name;
1048         input_dev->phys = hdev->phys;
1049         input_dev->uniq = hdev->uniq;
1050         input_dev->id.bustype = hdev->bus;
1051         input_dev->id.vendor  = hdev->vendor;
1052         input_dev->id.product = hdev->product;
1053         input_dev->id.version = hdev->version;
1054         input_dev->dev.parent = &hdev->dev;
1055
1056         return input_dev;
1057 }
1058
1059 static void hidpp_connect_event(struct hidpp_device *hidpp)
1060 {
1061         struct hid_device *hdev = hidpp->hid_dev;
1062         int ret = 0;
1063         bool connected = atomic_read(&hidpp->connected);
1064         struct input_dev *input;
1065         char *name, *devm_name;
1066
1067         if (hidpp->quirks & HIDPP_QUIRK_CLASS_WTP)
1068                 wtp_connect(hdev, connected);
1069
1070         if (!connected || hidpp->delayed_input)
1071                 return;
1072
1073         if (!hidpp->protocol_major) {
1074                 ret = !hidpp_is_connected(hidpp);
1075                 if (ret) {
1076                         hid_err(hdev, "Can not get the protocol version.\n");
1077                         return;
1078                 }
1079         }
1080
1081         /* the device is already connected, we can ask for its name and
1082          * protocol */
1083         hid_info(hdev, "HID++ %u.%u device connected.\n",
1084                  hidpp->protocol_major, hidpp->protocol_minor);
1085
1086         input = hidpp_allocate_input(hdev);
1087         if (!input) {
1088                 hid_err(hdev, "cannot allocate new input device: %d\n", ret);
1089                 return;
1090         }
1091
1092         name = hidpp_get_device_name(hidpp);
1093         if (!name) {
1094                 hid_err(hdev, "unable to retrieve the name of the device");
1095         } else {
1096                 devm_name = devm_kasprintf(&hdev->dev, GFP_KERNEL, "%s", name);
1097                 if (devm_name)
1098                         input->name = devm_name;
1099                 kfree(name);
1100         }
1101
1102         hidpp_populate_input(hidpp, input, false);
1103
1104         ret = input_register_device(input);
1105         if (ret)
1106                 input_free_device(input);
1107
1108         hidpp->delayed_input = input;
1109 }
1110
1111 static int hidpp_probe(struct hid_device *hdev, const struct hid_device_id *id)
1112 {
1113         struct hidpp_device *hidpp;
1114         int ret;
1115         bool connected;
1116         unsigned int connect_mask = HID_CONNECT_DEFAULT;
1117
1118         hidpp = devm_kzalloc(&hdev->dev, sizeof(struct hidpp_device),
1119                         GFP_KERNEL);
1120         if (!hidpp)
1121                 return -ENOMEM;
1122
1123         hidpp->hid_dev = hdev;
1124         hid_set_drvdata(hdev, hidpp);
1125
1126         hidpp->quirks = id->driver_data;
1127
1128         if (hidpp->quirks & HIDPP_QUIRK_CLASS_WTP) {
1129                 ret = wtp_allocate(hdev, id);
1130                 if (ret)
1131                         goto wtp_allocate_fail;
1132         }
1133
1134         INIT_WORK(&hidpp->work, delayed_work_cb);
1135         mutex_init(&hidpp->send_mutex);
1136         init_waitqueue_head(&hidpp->wait);
1137
1138         ret = hid_parse(hdev);
1139         if (ret) {
1140                 hid_err(hdev, "%s:parse failed\n", __func__);
1141                 goto hid_parse_fail;
1142         }
1143
1144         /* Allow incoming packets */
1145         hid_device_io_start(hdev);
1146
1147         connected = hidpp_is_connected(hidpp);
1148         if (id->group != HID_GROUP_LOGITECH_DJ_DEVICE) {
1149                 if (!connected) {
1150                         hid_err(hdev, "Device not connected");
1151                         hid_device_io_stop(hdev);
1152                         goto hid_parse_fail;
1153                 }
1154
1155                 hid_info(hdev, "HID++ %u.%u device connected.\n",
1156                          hidpp->protocol_major, hidpp->protocol_minor);
1157         }
1158
1159         hidpp_overwrite_name(hdev, id->group == HID_GROUP_LOGITECH_DJ_DEVICE);
1160         atomic_set(&hidpp->connected, connected);
1161
1162         if (connected && (hidpp->quirks & HIDPP_QUIRK_CLASS_WTP)) {
1163                 ret = wtp_get_config(hidpp);
1164                 if (ret)
1165                         goto hid_parse_fail;
1166         }
1167
1168         /* Block incoming packets */
1169         hid_device_io_stop(hdev);
1170
1171         if (hidpp->quirks & HIDPP_QUIRK_DELAYED_INIT)
1172                 connect_mask &= ~HID_CONNECT_HIDINPUT;
1173
1174         /* Re-enable hidinput for multi-input devices */
1175         if (hidpp->quirks & HIDPP_QUIRK_MULTI_INPUT)
1176                 connect_mask |= HID_CONNECT_HIDINPUT;
1177
1178         ret = hid_hw_start(hdev, connect_mask);
1179         if (ret) {
1180                 hid_err(hdev, "%s:hid_hw_start returned error\n", __func__);
1181                 goto hid_hw_start_fail;
1182         }
1183
1184         if (hidpp->quirks & HIDPP_QUIRK_DELAYED_INIT) {
1185                 /* Allow incoming packets */
1186                 hid_device_io_start(hdev);
1187
1188                 hidpp_connect_event(hidpp);
1189         }
1190
1191         return ret;
1192
1193 hid_hw_start_fail:
1194 hid_parse_fail:
1195         cancel_work_sync(&hidpp->work);
1196         mutex_destroy(&hidpp->send_mutex);
1197 wtp_allocate_fail:
1198         hid_set_drvdata(hdev, NULL);
1199         return ret;
1200 }
1201
1202 static void hidpp_remove(struct hid_device *hdev)
1203 {
1204         struct hidpp_device *hidpp = hid_get_drvdata(hdev);
1205
1206         cancel_work_sync(&hidpp->work);
1207         mutex_destroy(&hidpp->send_mutex);
1208         hid_hw_stop(hdev);
1209 }
1210
1211 static const struct hid_device_id hidpp_devices[] = {
1212         { /* wireless touchpad */
1213           HID_DEVICE(BUS_USB, HID_GROUP_LOGITECH_DJ_DEVICE,
1214                 USB_VENDOR_ID_LOGITECH, 0x4011),
1215           .driver_data = HIDPP_QUIRK_CLASS_WTP | HIDPP_QUIRK_DELAYED_INIT |
1216                          HIDPP_QUIRK_WTP_PHYSICAL_BUTTONS },
1217         { /* wireless touchpad T650 */
1218           HID_DEVICE(BUS_USB, HID_GROUP_LOGITECH_DJ_DEVICE,
1219                 USB_VENDOR_ID_LOGITECH, 0x4101),
1220           .driver_data = HIDPP_QUIRK_CLASS_WTP | HIDPP_QUIRK_DELAYED_INIT },
1221         { /* wireless touchpad T651 */
1222           HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_LOGITECH,
1223                 USB_DEVICE_ID_LOGITECH_T651),
1224           .driver_data = HIDPP_QUIRK_CLASS_WTP },
1225         { /* Keyboard TK820 */
1226           HID_DEVICE(BUS_USB, HID_GROUP_LOGITECH_DJ_DEVICE,
1227                 USB_VENDOR_ID_LOGITECH, 0x4102),
1228           .driver_data = HIDPP_QUIRK_DELAYED_INIT | HIDPP_QUIRK_MULTI_INPUT |
1229                          HIDPP_QUIRK_CLASS_WTP },
1230
1231         { HID_DEVICE(BUS_USB, HID_GROUP_LOGITECH_DJ_DEVICE,
1232                 USB_VENDOR_ID_LOGITECH, HID_ANY_ID)},
1233         {}
1234 };
1235
1236 MODULE_DEVICE_TABLE(hid, hidpp_devices);
1237
1238 static struct hid_driver hidpp_driver = {
1239         .name = "logitech-hidpp-device",
1240         .id_table = hidpp_devices,
1241         .probe = hidpp_probe,
1242         .remove = hidpp_remove,
1243         .raw_event = hidpp_raw_event,
1244         .input_configured = hidpp_input_configured,
1245         .input_mapping = hidpp_input_mapping,
1246 };
1247
1248 module_hid_driver(hidpp_driver);