mic: vop: Fix use-after-free on remove
[linux/fpc-iii.git] / drivers / media / rc / lirc_dev.c
blobf862f1b7f99657c6cff3a816a68bc853d2d01033
1 /*
2 * LIRC base driver
4 * by Artur Lipowski <alipowski@interia.pl>
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 2 of the License, or
9 * (at your option) any later version.
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
18 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
20 #include <linux/module.h>
21 #include <linux/mutex.h>
22 #include <linux/device.h>
23 #include <linux/file.h>
24 #include <linux/idr.h>
25 #include <linux/poll.h>
26 #include <linux/sched.h>
27 #include <linux/wait.h>
29 #include "rc-core-priv.h"
30 #include <uapi/linux/lirc.h>
32 #define LIRCBUF_SIZE 256
34 static dev_t lirc_base_dev;
36 /* Used to keep track of allocated lirc devices */
37 static DEFINE_IDA(lirc_ida);
39 /* Only used for sysfs but defined to void otherwise */
40 static struct class *lirc_class;
42 /**
43 * ir_lirc_raw_event() - Send raw IR data to lirc to be relayed to userspace
45 * @dev: the struct rc_dev descriptor of the device
46 * @ev: the struct ir_raw_event descriptor of the pulse/space
48 void ir_lirc_raw_event(struct rc_dev *dev, struct ir_raw_event ev)
50 unsigned long flags;
51 struct lirc_fh *fh;
52 int sample;
54 /* Packet start */
55 if (ev.reset) {
57 * Userspace expects a long space event before the start of
58 * the signal to use as a sync. This may be done with repeat
59 * packets and normal samples. But if a reset has been sent
60 * then we assume that a long time has passed, so we send a
61 * space with the maximum time value.
63 sample = LIRC_SPACE(LIRC_VALUE_MASK);
64 dev_dbg(&dev->dev, "delivering reset sync space to lirc_dev\n");
66 /* Carrier reports */
67 } else if (ev.carrier_report) {
68 sample = LIRC_FREQUENCY(ev.carrier);
69 dev_dbg(&dev->dev, "carrier report (freq: %d)\n", sample);
71 /* Packet end */
72 } else if (ev.timeout) {
73 if (dev->gap)
74 return;
76 dev->gap_start = ktime_get();
77 dev->gap = true;
78 dev->gap_duration = ev.duration;
80 sample = LIRC_TIMEOUT(ev.duration / 1000);
81 dev_dbg(&dev->dev, "timeout report (duration: %d)\n", sample);
83 /* Normal sample */
84 } else {
85 if (dev->gap) {
86 dev->gap_duration += ktime_to_ns(ktime_sub(ktime_get(),
87 dev->gap_start));
89 /* Convert to ms and cap by LIRC_VALUE_MASK */
90 do_div(dev->gap_duration, 1000);
91 dev->gap_duration = min_t(u64, dev->gap_duration,
92 LIRC_VALUE_MASK);
94 spin_lock_irqsave(&dev->lirc_fh_lock, flags);
95 list_for_each_entry(fh, &dev->lirc_fh, list)
96 kfifo_put(&fh->rawir,
97 LIRC_SPACE(dev->gap_duration));
98 spin_unlock_irqrestore(&dev->lirc_fh_lock, flags);
99 dev->gap = false;
102 sample = ev.pulse ? LIRC_PULSE(ev.duration / 1000) :
103 LIRC_SPACE(ev.duration / 1000);
104 dev_dbg(&dev->dev, "delivering %uus %s to lirc_dev\n",
105 TO_US(ev.duration), TO_STR(ev.pulse));
109 * bpf does not care about the gap generated above; that exists
110 * for backwards compatibility
112 lirc_bpf_run(dev, sample);
114 spin_lock_irqsave(&dev->lirc_fh_lock, flags);
115 list_for_each_entry(fh, &dev->lirc_fh, list) {
116 if (LIRC_IS_TIMEOUT(sample) && !fh->send_timeout_reports)
117 continue;
118 if (kfifo_put(&fh->rawir, sample))
119 wake_up_poll(&fh->wait_poll, EPOLLIN | EPOLLRDNORM);
121 spin_unlock_irqrestore(&dev->lirc_fh_lock, flags);
125 * ir_lirc_scancode_event() - Send scancode data to lirc to be relayed to
126 * userspace. This can be called in atomic context.
127 * @dev: the struct rc_dev descriptor of the device
128 * @lsc: the struct lirc_scancode describing the decoded scancode
130 void ir_lirc_scancode_event(struct rc_dev *dev, struct lirc_scancode *lsc)
132 unsigned long flags;
133 struct lirc_fh *fh;
135 lsc->timestamp = ktime_get_ns();
137 spin_lock_irqsave(&dev->lirc_fh_lock, flags);
138 list_for_each_entry(fh, &dev->lirc_fh, list) {
139 if (kfifo_put(&fh->scancodes, *lsc))
140 wake_up_poll(&fh->wait_poll, EPOLLIN | EPOLLRDNORM);
142 spin_unlock_irqrestore(&dev->lirc_fh_lock, flags);
144 EXPORT_SYMBOL_GPL(ir_lirc_scancode_event);
146 static int ir_lirc_open(struct inode *inode, struct file *file)
148 struct rc_dev *dev = container_of(inode->i_cdev, struct rc_dev,
149 lirc_cdev);
150 struct lirc_fh *fh = kzalloc(sizeof(*fh), GFP_KERNEL);
151 unsigned long flags;
152 int retval;
154 if (!fh)
155 return -ENOMEM;
157 get_device(&dev->dev);
159 if (!dev->registered) {
160 retval = -ENODEV;
161 goto out_fh;
164 if (dev->driver_type == RC_DRIVER_IR_RAW) {
165 if (kfifo_alloc(&fh->rawir, MAX_IR_EVENT_SIZE, GFP_KERNEL)) {
166 retval = -ENOMEM;
167 goto out_fh;
171 if (dev->driver_type != RC_DRIVER_IR_RAW_TX) {
172 if (kfifo_alloc(&fh->scancodes, 32, GFP_KERNEL)) {
173 retval = -ENOMEM;
174 goto out_rawir;
178 fh->send_mode = LIRC_MODE_PULSE;
179 fh->rc = dev;
180 fh->send_timeout_reports = true;
182 if (dev->driver_type == RC_DRIVER_SCANCODE)
183 fh->rec_mode = LIRC_MODE_SCANCODE;
184 else
185 fh->rec_mode = LIRC_MODE_MODE2;
187 retval = rc_open(dev);
188 if (retval)
189 goto out_kfifo;
191 init_waitqueue_head(&fh->wait_poll);
193 file->private_data = fh;
194 spin_lock_irqsave(&dev->lirc_fh_lock, flags);
195 list_add(&fh->list, &dev->lirc_fh);
196 spin_unlock_irqrestore(&dev->lirc_fh_lock, flags);
198 nonseekable_open(inode, file);
200 return 0;
201 out_kfifo:
202 if (dev->driver_type != RC_DRIVER_IR_RAW_TX)
203 kfifo_free(&fh->scancodes);
204 out_rawir:
205 if (dev->driver_type == RC_DRIVER_IR_RAW)
206 kfifo_free(&fh->rawir);
207 out_fh:
208 kfree(fh);
209 put_device(&dev->dev);
211 return retval;
214 static int ir_lirc_close(struct inode *inode, struct file *file)
216 struct lirc_fh *fh = file->private_data;
217 struct rc_dev *dev = fh->rc;
218 unsigned long flags;
220 spin_lock_irqsave(&dev->lirc_fh_lock, flags);
221 list_del(&fh->list);
222 spin_unlock_irqrestore(&dev->lirc_fh_lock, flags);
224 if (dev->driver_type == RC_DRIVER_IR_RAW)
225 kfifo_free(&fh->rawir);
226 if (dev->driver_type != RC_DRIVER_IR_RAW_TX)
227 kfifo_free(&fh->scancodes);
228 kfree(fh);
230 rc_close(dev);
231 put_device(&dev->dev);
233 return 0;
236 static ssize_t ir_lirc_transmit_ir(struct file *file, const char __user *buf,
237 size_t n, loff_t *ppos)
239 struct lirc_fh *fh = file->private_data;
240 struct rc_dev *dev = fh->rc;
241 unsigned int *txbuf;
242 struct ir_raw_event *raw = NULL;
243 ssize_t ret;
244 size_t count;
245 ktime_t start;
246 s64 towait;
247 unsigned int duration = 0; /* signal duration in us */
248 int i;
250 ret = mutex_lock_interruptible(&dev->lock);
251 if (ret)
252 return ret;
254 if (!dev->registered) {
255 ret = -ENODEV;
256 goto out_unlock;
259 if (!dev->tx_ir) {
260 ret = -EINVAL;
261 goto out_unlock;
264 if (fh->send_mode == LIRC_MODE_SCANCODE) {
265 struct lirc_scancode scan;
267 if (n != sizeof(scan)) {
268 ret = -EINVAL;
269 goto out_unlock;
272 if (copy_from_user(&scan, buf, sizeof(scan))) {
273 ret = -EFAULT;
274 goto out_unlock;
277 if (scan.flags || scan.keycode || scan.timestamp) {
278 ret = -EINVAL;
279 goto out_unlock;
283 * The scancode field in lirc_scancode is 64-bit simply
284 * to future-proof it, since there are IR protocols encode
285 * use more than 32 bits. For now only 32-bit protocols
286 * are supported.
288 if (scan.scancode > U32_MAX ||
289 !rc_validate_scancode(scan.rc_proto, scan.scancode)) {
290 ret = -EINVAL;
291 goto out_unlock;
294 raw = kmalloc_array(LIRCBUF_SIZE, sizeof(*raw), GFP_KERNEL);
295 if (!raw) {
296 ret = -ENOMEM;
297 goto out_unlock;
300 ret = ir_raw_encode_scancode(scan.rc_proto, scan.scancode,
301 raw, LIRCBUF_SIZE);
302 if (ret < 0)
303 goto out_kfree_raw;
305 count = ret;
307 txbuf = kmalloc_array(count, sizeof(unsigned int), GFP_KERNEL);
308 if (!txbuf) {
309 ret = -ENOMEM;
310 goto out_kfree_raw;
313 for (i = 0; i < count; i++)
314 /* Convert from NS to US */
315 txbuf[i] = DIV_ROUND_UP(raw[i].duration, 1000);
317 if (dev->s_tx_carrier) {
318 int carrier = ir_raw_encode_carrier(scan.rc_proto);
320 if (carrier > 0)
321 dev->s_tx_carrier(dev, carrier);
323 } else {
324 if (n < sizeof(unsigned int) || n % sizeof(unsigned int)) {
325 ret = -EINVAL;
326 goto out_unlock;
329 count = n / sizeof(unsigned int);
330 if (count > LIRCBUF_SIZE || count % 2 == 0) {
331 ret = -EINVAL;
332 goto out_unlock;
335 txbuf = memdup_user(buf, n);
336 if (IS_ERR(txbuf)) {
337 ret = PTR_ERR(txbuf);
338 goto out_unlock;
342 for (i = 0; i < count; i++) {
343 if (txbuf[i] > IR_MAX_DURATION / 1000 - duration || !txbuf[i]) {
344 ret = -EINVAL;
345 goto out_kfree;
348 duration += txbuf[i];
351 start = ktime_get();
353 ret = dev->tx_ir(dev, txbuf, count);
354 if (ret < 0)
355 goto out_kfree;
357 kfree(txbuf);
358 kfree(raw);
359 mutex_unlock(&dev->lock);
362 * The lircd gap calculation expects the write function to
363 * wait for the actual IR signal to be transmitted before
364 * returning.
366 towait = ktime_us_delta(ktime_add_us(start, duration),
367 ktime_get());
368 if (towait > 0) {
369 set_current_state(TASK_INTERRUPTIBLE);
370 schedule_timeout(usecs_to_jiffies(towait));
373 return n;
374 out_kfree:
375 kfree(txbuf);
376 out_kfree_raw:
377 kfree(raw);
378 out_unlock:
379 mutex_unlock(&dev->lock);
380 return ret;
383 static long ir_lirc_ioctl(struct file *file, unsigned int cmd,
384 unsigned long arg)
386 struct lirc_fh *fh = file->private_data;
387 struct rc_dev *dev = fh->rc;
388 u32 __user *argp = (u32 __user *)(arg);
389 u32 val = 0;
390 int ret;
392 if (_IOC_DIR(cmd) & _IOC_WRITE) {
393 ret = get_user(val, argp);
394 if (ret)
395 return ret;
398 ret = mutex_lock_interruptible(&dev->lock);
399 if (ret)
400 return ret;
402 if (!dev->registered) {
403 ret = -ENODEV;
404 goto out;
407 switch (cmd) {
408 case LIRC_GET_FEATURES:
409 if (dev->driver_type == RC_DRIVER_SCANCODE)
410 val |= LIRC_CAN_REC_SCANCODE;
412 if (dev->driver_type == RC_DRIVER_IR_RAW) {
413 val |= LIRC_CAN_REC_MODE2;
414 if (dev->rx_resolution)
415 val |= LIRC_CAN_GET_REC_RESOLUTION;
418 if (dev->tx_ir) {
419 val |= LIRC_CAN_SEND_PULSE;
420 if (dev->s_tx_mask)
421 val |= LIRC_CAN_SET_TRANSMITTER_MASK;
422 if (dev->s_tx_carrier)
423 val |= LIRC_CAN_SET_SEND_CARRIER;
424 if (dev->s_tx_duty_cycle)
425 val |= LIRC_CAN_SET_SEND_DUTY_CYCLE;
428 if (dev->s_rx_carrier_range)
429 val |= LIRC_CAN_SET_REC_CARRIER |
430 LIRC_CAN_SET_REC_CARRIER_RANGE;
432 if (dev->s_learning_mode)
433 val |= LIRC_CAN_USE_WIDEBAND_RECEIVER;
435 if (dev->s_carrier_report)
436 val |= LIRC_CAN_MEASURE_CARRIER;
438 if (dev->max_timeout)
439 val |= LIRC_CAN_SET_REC_TIMEOUT;
441 break;
443 /* mode support */
444 case LIRC_GET_REC_MODE:
445 if (dev->driver_type == RC_DRIVER_IR_RAW_TX)
446 ret = -ENOTTY;
447 else
448 val = fh->rec_mode;
449 break;
451 case LIRC_SET_REC_MODE:
452 switch (dev->driver_type) {
453 case RC_DRIVER_IR_RAW_TX:
454 ret = -ENOTTY;
455 break;
456 case RC_DRIVER_SCANCODE:
457 if (val != LIRC_MODE_SCANCODE)
458 ret = -EINVAL;
459 break;
460 case RC_DRIVER_IR_RAW:
461 if (!(val == LIRC_MODE_MODE2 ||
462 val == LIRC_MODE_SCANCODE))
463 ret = -EINVAL;
464 break;
467 if (!ret)
468 fh->rec_mode = val;
469 break;
471 case LIRC_GET_SEND_MODE:
472 if (!dev->tx_ir)
473 ret = -ENOTTY;
474 else
475 val = fh->send_mode;
476 break;
478 case LIRC_SET_SEND_MODE:
479 if (!dev->tx_ir)
480 ret = -ENOTTY;
481 else if (!(val == LIRC_MODE_PULSE || val == LIRC_MODE_SCANCODE))
482 ret = -EINVAL;
483 else
484 fh->send_mode = val;
485 break;
487 /* TX settings */
488 case LIRC_SET_TRANSMITTER_MASK:
489 if (!dev->s_tx_mask)
490 ret = -ENOTTY;
491 else
492 ret = dev->s_tx_mask(dev, val);
493 break;
495 case LIRC_SET_SEND_CARRIER:
496 if (!dev->s_tx_carrier)
497 ret = -ENOTTY;
498 else
499 ret = dev->s_tx_carrier(dev, val);
500 break;
502 case LIRC_SET_SEND_DUTY_CYCLE:
503 if (!dev->s_tx_duty_cycle)
504 ret = -ENOTTY;
505 else if (val <= 0 || val >= 100)
506 ret = -EINVAL;
507 else
508 ret = dev->s_tx_duty_cycle(dev, val);
509 break;
511 /* RX settings */
512 case LIRC_SET_REC_CARRIER:
513 if (!dev->s_rx_carrier_range)
514 ret = -ENOTTY;
515 else if (val <= 0)
516 ret = -EINVAL;
517 else
518 ret = dev->s_rx_carrier_range(dev, fh->carrier_low,
519 val);
520 break;
522 case LIRC_SET_REC_CARRIER_RANGE:
523 if (!dev->s_rx_carrier_range)
524 ret = -ENOTTY;
525 else if (val <= 0)
526 ret = -EINVAL;
527 else
528 fh->carrier_low = val;
529 break;
531 case LIRC_GET_REC_RESOLUTION:
532 if (!dev->rx_resolution)
533 ret = -ENOTTY;
534 else
535 val = dev->rx_resolution / 1000;
536 break;
538 case LIRC_SET_WIDEBAND_RECEIVER:
539 if (!dev->s_learning_mode)
540 ret = -ENOTTY;
541 else
542 ret = dev->s_learning_mode(dev, !!val);
543 break;
545 case LIRC_SET_MEASURE_CARRIER_MODE:
546 if (!dev->s_carrier_report)
547 ret = -ENOTTY;
548 else
549 ret = dev->s_carrier_report(dev, !!val);
550 break;
552 /* Generic timeout support */
553 case LIRC_GET_MIN_TIMEOUT:
554 if (!dev->max_timeout)
555 ret = -ENOTTY;
556 else
557 val = DIV_ROUND_UP(dev->min_timeout, 1000);
558 break;
560 case LIRC_GET_MAX_TIMEOUT:
561 if (!dev->max_timeout)
562 ret = -ENOTTY;
563 else
564 val = dev->max_timeout / 1000;
565 break;
567 case LIRC_SET_REC_TIMEOUT:
568 if (!dev->max_timeout) {
569 ret = -ENOTTY;
570 } else if (val > U32_MAX / 1000) {
571 /* Check for multiply overflow */
572 ret = -EINVAL;
573 } else {
574 u32 tmp = val * 1000;
576 if (tmp < dev->min_timeout || tmp > dev->max_timeout)
577 ret = -EINVAL;
578 else if (dev->s_timeout)
579 ret = dev->s_timeout(dev, tmp);
580 else
581 dev->timeout = tmp;
583 break;
585 case LIRC_GET_REC_TIMEOUT:
586 if (!dev->timeout)
587 ret = -ENOTTY;
588 else
589 val = DIV_ROUND_UP(dev->timeout, 1000);
590 break;
592 case LIRC_SET_REC_TIMEOUT_REPORTS:
593 if (dev->driver_type != RC_DRIVER_IR_RAW)
594 ret = -ENOTTY;
595 else
596 fh->send_timeout_reports = !!val;
597 break;
599 default:
600 ret = -ENOTTY;
603 if (!ret && _IOC_DIR(cmd) & _IOC_READ)
604 ret = put_user(val, argp);
606 out:
607 mutex_unlock(&dev->lock);
608 return ret;
611 static __poll_t ir_lirc_poll(struct file *file, struct poll_table_struct *wait)
613 struct lirc_fh *fh = file->private_data;
614 struct rc_dev *rcdev = fh->rc;
615 __poll_t events = 0;
617 poll_wait(file, &fh->wait_poll, wait);
619 if (!rcdev->registered) {
620 events = EPOLLHUP | EPOLLERR;
621 } else if (rcdev->driver_type != RC_DRIVER_IR_RAW_TX) {
622 if (fh->rec_mode == LIRC_MODE_SCANCODE &&
623 !kfifo_is_empty(&fh->scancodes))
624 events = EPOLLIN | EPOLLRDNORM;
626 if (fh->rec_mode == LIRC_MODE_MODE2 &&
627 !kfifo_is_empty(&fh->rawir))
628 events = EPOLLIN | EPOLLRDNORM;
631 return events;
634 static ssize_t ir_lirc_read_mode2(struct file *file, char __user *buffer,
635 size_t length)
637 struct lirc_fh *fh = file->private_data;
638 struct rc_dev *rcdev = fh->rc;
639 unsigned int copied;
640 int ret;
642 if (length < sizeof(unsigned int) || length % sizeof(unsigned int))
643 return -EINVAL;
645 do {
646 if (kfifo_is_empty(&fh->rawir)) {
647 if (file->f_flags & O_NONBLOCK)
648 return -EAGAIN;
650 ret = wait_event_interruptible(fh->wait_poll,
651 !kfifo_is_empty(&fh->rawir) ||
652 !rcdev->registered);
653 if (ret)
654 return ret;
657 if (!rcdev->registered)
658 return -ENODEV;
660 ret = mutex_lock_interruptible(&rcdev->lock);
661 if (ret)
662 return ret;
663 ret = kfifo_to_user(&fh->rawir, buffer, length, &copied);
664 mutex_unlock(&rcdev->lock);
665 if (ret)
666 return ret;
667 } while (copied == 0);
669 return copied;
672 static ssize_t ir_lirc_read_scancode(struct file *file, char __user *buffer,
673 size_t length)
675 struct lirc_fh *fh = file->private_data;
676 struct rc_dev *rcdev = fh->rc;
677 unsigned int copied;
678 int ret;
680 if (length < sizeof(struct lirc_scancode) ||
681 length % sizeof(struct lirc_scancode))
682 return -EINVAL;
684 do {
685 if (kfifo_is_empty(&fh->scancodes)) {
686 if (file->f_flags & O_NONBLOCK)
687 return -EAGAIN;
689 ret = wait_event_interruptible(fh->wait_poll,
690 !kfifo_is_empty(&fh->scancodes) ||
691 !rcdev->registered);
692 if (ret)
693 return ret;
696 if (!rcdev->registered)
697 return -ENODEV;
699 ret = mutex_lock_interruptible(&rcdev->lock);
700 if (ret)
701 return ret;
702 ret = kfifo_to_user(&fh->scancodes, buffer, length, &copied);
703 mutex_unlock(&rcdev->lock);
704 if (ret)
705 return ret;
706 } while (copied == 0);
708 return copied;
711 static ssize_t ir_lirc_read(struct file *file, char __user *buffer,
712 size_t length, loff_t *ppos)
714 struct lirc_fh *fh = file->private_data;
715 struct rc_dev *rcdev = fh->rc;
717 if (rcdev->driver_type == RC_DRIVER_IR_RAW_TX)
718 return -EINVAL;
720 if (!rcdev->registered)
721 return -ENODEV;
723 if (fh->rec_mode == LIRC_MODE_MODE2)
724 return ir_lirc_read_mode2(file, buffer, length);
725 else /* LIRC_MODE_SCANCODE */
726 return ir_lirc_read_scancode(file, buffer, length);
729 static const struct file_operations lirc_fops = {
730 .owner = THIS_MODULE,
731 .write = ir_lirc_transmit_ir,
732 .unlocked_ioctl = ir_lirc_ioctl,
733 #ifdef CONFIG_COMPAT
734 .compat_ioctl = ir_lirc_ioctl,
735 #endif
736 .read = ir_lirc_read,
737 .poll = ir_lirc_poll,
738 .open = ir_lirc_open,
739 .release = ir_lirc_close,
740 .llseek = no_llseek,
743 static void lirc_release_device(struct device *ld)
745 struct rc_dev *rcdev = container_of(ld, struct rc_dev, lirc_dev);
747 put_device(&rcdev->dev);
750 int ir_lirc_register(struct rc_dev *dev)
752 const char *rx_type, *tx_type;
753 int err, minor;
755 minor = ida_simple_get(&lirc_ida, 0, RC_DEV_MAX, GFP_KERNEL);
756 if (minor < 0)
757 return minor;
759 device_initialize(&dev->lirc_dev);
760 dev->lirc_dev.class = lirc_class;
761 dev->lirc_dev.parent = &dev->dev;
762 dev->lirc_dev.release = lirc_release_device;
763 dev->lirc_dev.devt = MKDEV(MAJOR(lirc_base_dev), minor);
764 dev_set_name(&dev->lirc_dev, "lirc%d", minor);
766 INIT_LIST_HEAD(&dev->lirc_fh);
767 spin_lock_init(&dev->lirc_fh_lock);
769 cdev_init(&dev->lirc_cdev, &lirc_fops);
771 err = cdev_device_add(&dev->lirc_cdev, &dev->lirc_dev);
772 if (err)
773 goto out_ida;
775 get_device(&dev->dev);
777 switch (dev->driver_type) {
778 case RC_DRIVER_SCANCODE:
779 rx_type = "scancode";
780 break;
781 case RC_DRIVER_IR_RAW:
782 rx_type = "raw IR";
783 break;
784 default:
785 rx_type = "no";
786 break;
789 if (dev->tx_ir)
790 tx_type = "raw IR";
791 else
792 tx_type = "no";
794 dev_info(&dev->dev, "lirc_dev: driver %s registered at minor = %d, %s receiver, %s transmitter",
795 dev->driver_name, minor, rx_type, tx_type);
797 return 0;
799 out_ida:
800 ida_simple_remove(&lirc_ida, minor);
801 return err;
804 void ir_lirc_unregister(struct rc_dev *dev)
806 unsigned long flags;
807 struct lirc_fh *fh;
809 dev_dbg(&dev->dev, "lirc_dev: driver %s unregistered from minor = %d\n",
810 dev->driver_name, MINOR(dev->lirc_dev.devt));
812 spin_lock_irqsave(&dev->lirc_fh_lock, flags);
813 list_for_each_entry(fh, &dev->lirc_fh, list)
814 wake_up_poll(&fh->wait_poll, EPOLLHUP | EPOLLERR);
815 spin_unlock_irqrestore(&dev->lirc_fh_lock, flags);
817 cdev_device_del(&dev->lirc_cdev, &dev->lirc_dev);
818 ida_simple_remove(&lirc_ida, MINOR(dev->lirc_dev.devt));
821 int __init lirc_dev_init(void)
823 int retval;
825 lirc_class = class_create(THIS_MODULE, "lirc");
826 if (IS_ERR(lirc_class)) {
827 pr_err("class_create failed\n");
828 return PTR_ERR(lirc_class);
831 retval = alloc_chrdev_region(&lirc_base_dev, 0, RC_DEV_MAX,
832 "BaseRemoteCtl");
833 if (retval) {
834 class_destroy(lirc_class);
835 pr_err("alloc_chrdev_region failed\n");
836 return retval;
839 pr_debug("IR Remote Control driver registered, major %d\n",
840 MAJOR(lirc_base_dev));
842 return 0;
845 void __exit lirc_dev_exit(void)
847 class_destroy(lirc_class);
848 unregister_chrdev_region(lirc_base_dev, RC_DEV_MAX);
851 struct rc_dev *rc_dev_get_from_fd(int fd)
853 struct fd f = fdget(fd);
854 struct lirc_fh *fh;
855 struct rc_dev *dev;
857 if (!f.file)
858 return ERR_PTR(-EBADF);
860 if (f.file->f_op != &lirc_fops) {
861 fdput(f);
862 return ERR_PTR(-EINVAL);
865 fh = f.file->private_data;
866 dev = fh->rc;
868 get_device(&dev->dev);
869 fdput(f);
871 return dev;
874 MODULE_ALIAS("lirc_dev");