Input: fix potential overflows in driver/input/keyboard
[linux-2.6/linux-acpi-2.6/ibm-acpi-2.6.git] / drivers / input / keyboard / xtkbd.c
blob0821d53cf0c1d8d9d9538fa0af73f051e14b5d68
1 /*
2 * $Id: xtkbd.c,v 1.11 2001/09/25 10:12:07 vojtech Exp $
4 * Copyright (c) 1999-2001 Vojtech Pavlik
5 */
7 /*
8 * XT keyboard driver for Linux
9 */
12 * This program is free software; you can redistribute it and/or modify
13 * it under the terms of the GNU General Public License as published by
14 * the Free Software Foundation; either version 2 of the License, or
15 * (at your option) any later version.
17 * This program is distributed in the hope that it will be useful,
18 * but WITHOUT ANY WARRANTY; without even the implied warranty of
19 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
20 * GNU General Public License for more details.
22 * You should have received a copy of the GNU General Public License
23 * along with this program; if not, write to the Free Software
24 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
26 * Should you need to contact me, the author, you can do so either by
27 * e-mail - mail your message to <vojtech@ucw.cz>, or by paper mail:
28 * Vojtech Pavlik, Simunkova 1594, Prague 8, 182 00 Czech Republic
31 #include <linux/slab.h>
32 #include <linux/module.h>
33 #include <linux/input.h>
34 #include <linux/init.h>
35 #include <linux/serio.h>
37 #define DRIVER_DESC "XT keyboard driver"
39 MODULE_AUTHOR("Vojtech Pavlik <vojtech@ucw.cz>");
40 MODULE_DESCRIPTION(DRIVER_DESC);
41 MODULE_LICENSE("GPL");
43 #define XTKBD_EMUL0 0xe0
44 #define XTKBD_EMUL1 0xe1
45 #define XTKBD_KEY 0x7f
46 #define XTKBD_RELEASE 0x80
48 static unsigned char xtkbd_keycode[256] = {
49 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15,
50 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31,
51 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47,
52 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63,
53 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78, 79,
54 80, 81, 82, 83, 0, 0, 0, 87, 88, 0, 0, 0, 0, 0, 0, 0,
55 0, 0, 0, 0, 0, 87, 88, 0, 0, 0, 0,110,111,103,108,105,
56 106
59 struct xtkbd {
60 unsigned char keycode[256];
61 struct input_dev *dev;
62 struct serio *serio;
63 char phys[32];
66 static irqreturn_t xtkbd_interrupt(struct serio *serio,
67 unsigned char data, unsigned int flags, struct pt_regs *regs)
69 struct xtkbd *xtkbd = serio_get_drvdata(serio);
71 switch (data) {
72 case XTKBD_EMUL0:
73 case XTKBD_EMUL1:
74 break;
75 default:
77 if (xtkbd->keycode[data & XTKBD_KEY]) {
78 input_regs(xtkbd->dev, regs);
79 input_report_key(xtkbd->dev, xtkbd->keycode[data & XTKBD_KEY], !(data & XTKBD_RELEASE));
80 input_sync(xtkbd->dev);
81 } else {
82 printk(KERN_WARNING "xtkbd.c: Unknown key (scancode %#x) %s.\n",
83 data & XTKBD_KEY, data & XTKBD_RELEASE ? "released" : "pressed");
86 return IRQ_HANDLED;
89 static int xtkbd_connect(struct serio *serio, struct serio_driver *drv)
91 struct xtkbd *xtkbd;
92 struct input_dev *input_dev;
93 int err = -ENOMEM;
94 int i;
96 xtkbd = kmalloc(sizeof(struct xtkbd), GFP_KERNEL);
97 input_dev = input_allocate_device();
98 if (!xtkbd || !input_dev)
99 goto fail;
101 xtkbd->serio = serio;
102 xtkbd->dev = input_dev;
103 snprintf(xtkbd->phys, sizeof(xtkbd->phys), "%s/input0", serio->phys);
104 memcpy(xtkbd->keycode, xtkbd_keycode, sizeof(xtkbd->keycode));
106 input_dev->name = "XT Keyboard";
107 input_dev->phys = xtkbd->phys;
108 input_dev->id.bustype = BUS_XTKBD;
109 input_dev->id.vendor = 0x0001;
110 input_dev->id.product = 0x0001;
111 input_dev->id.version = 0x0100;
112 input_dev->cdev.dev = &serio->dev;
113 input_dev->private = xtkbd;
115 input_dev->evbit[0] = BIT(EV_KEY) | BIT(EV_REP);
116 input_dev->keycode = xtkbd->keycode;
117 input_dev->keycodesize = sizeof(unsigned char);
118 input_dev->keycodemax = ARRAY_SIZE(xtkbd_keycode);
120 for (i = 0; i < 255; i++)
121 set_bit(xtkbd->keycode[i], input_dev->keybit);
122 clear_bit(0, input_dev->keybit);
124 serio_set_drvdata(serio, xtkbd);
126 err = serio_open(serio, drv);
127 if (err)
128 goto fail;
130 input_register_device(xtkbd->dev);
131 return 0;
133 fail: serio_set_drvdata(serio, NULL);
134 input_free_device(input_dev);
135 kfree(xtkbd);
136 return err;
139 static void xtkbd_disconnect(struct serio *serio)
141 struct xtkbd *xtkbd = serio_get_drvdata(serio);
143 serio_close(serio);
144 serio_set_drvdata(serio, NULL);
145 input_unregister_device(xtkbd->dev);
146 kfree(xtkbd);
149 static struct serio_device_id xtkbd_serio_ids[] = {
151 .type = SERIO_XT,
152 .proto = SERIO_ANY,
153 .id = SERIO_ANY,
154 .extra = SERIO_ANY,
156 { 0 }
159 MODULE_DEVICE_TABLE(serio, xtkbd_serio_ids);
161 static struct serio_driver xtkbd_drv = {
162 .driver = {
163 .name = "xtkbd",
165 .description = DRIVER_DESC,
166 .id_table = xtkbd_serio_ids,
167 .interrupt = xtkbd_interrupt,
168 .connect = xtkbd_connect,
169 .disconnect = xtkbd_disconnect,
172 static int __init xtkbd_init(void)
174 serio_register_driver(&xtkbd_drv);
175 return 0;
178 static void __exit xtkbd_exit(void)
180 serio_unregister_driver(&xtkbd_drv);
183 module_init(xtkbd_init);
184 module_exit(xtkbd_exit);