HID: hidraw, fix a NULL pointer dereference in hidraw_ioctl
[linux-2.6.git] / drivers / hid / hid-sjoy.c
1 /*
2  *  Force feedback support for SmartJoy PLUS PS2->USB adapter
3  *
4  *  Copyright (c) 2009 Jussi Kivilinna <jussi.kivilinna@mbnet.fi>
5  *
6  *  Based of hid-pl.c and hid-gaff.c
7  *   Copyright (c) 2007, 2009 Anssi Hannula <anssi.hannula@gmail.com>
8  *   Copyright (c) 2008 Lukasz Lubojanski <lukasz@lubojanski.info>
9  */
10
11 /*
12  * This program is free software; you can redistribute it and/or modify
13  * it under the terms of the GNU General Public License as published by
14  * the Free Software Foundation; either version 2 of the License, or
15  * (at your option) any later version.
16  *
17  * This program is distributed in the hope that it will be useful,
18  * but WITHOUT ANY WARRANTY; without even the implied warranty of
19  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
20  * GNU General Public License for more details.
21  *
22  * You should have received a copy of the GNU General Public License
23  * along with this program; if not, write to the Free Software
24  * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
25  */
26
27 /* #define DEBUG */
28
29 #include <linux/input.h>
30 #include <linux/slab.h>
31 #include <linux/usb.h>
32 #include <linux/hid.h>
33 #include "hid-ids.h"
34
35 #ifdef CONFIG_SMARTJOYPLUS_FF
36 #include "usbhid/usbhid.h"
37
38 struct sjoyff_device {
39         struct hid_report *report;
40 };
41
42 static int hid_sjoyff_play(struct input_dev *dev, void *data,
43                          struct ff_effect *effect)
44 {
45         struct hid_device *hid = input_get_drvdata(dev);
46         struct sjoyff_device *sjoyff = data;
47         u32 left, right;
48
49         left = effect->u.rumble.strong_magnitude;
50         right = effect->u.rumble.weak_magnitude;
51         dev_dbg(&dev->dev, "called with 0x%08x 0x%08x\n", left, right);
52
53         left = left * 0xff / 0xffff;
54         right = (right != 0); /* on/off only */
55
56         sjoyff->report->field[0]->value[1] = right;
57         sjoyff->report->field[0]->value[2] = left;
58         dev_dbg(&dev->dev, "running with 0x%02x 0x%02x\n", left, right);
59         usbhid_submit_report(hid, sjoyff->report, USB_DIR_OUT);
60
61         return 0;
62 }
63
64 static int sjoyff_init(struct hid_device *hid)
65 {
66         struct sjoyff_device *sjoyff;
67         struct hid_report *report;
68         struct hid_input *hidinput = list_entry(hid->inputs.next,
69                                                 struct hid_input, list);
70         struct list_head *report_list =
71                         &hid->report_enum[HID_OUTPUT_REPORT].report_list;
72         struct list_head *report_ptr = report_list;
73         struct input_dev *dev;
74         int error;
75
76         if (list_empty(report_list)) {
77                 dev_err(&hid->dev, "no output reports found\n");
78                 return -ENODEV;
79         }
80
81         report_ptr = report_ptr->next;
82
83         if (report_ptr == report_list) {
84                 dev_err(&hid->dev, "required output report is "
85                                 "missing\n");
86                 return -ENODEV;
87         }
88
89         report = list_entry(report_ptr, struct hid_report, list);
90         if (report->maxfield < 1) {
91                 dev_err(&hid->dev, "no fields in the report\n");
92                 return -ENODEV;
93         }
94
95         if (report->field[0]->report_count < 3) {
96                 dev_err(&hid->dev, "not enough values in the field\n");
97                 return -ENODEV;
98         }
99
100         sjoyff = kzalloc(sizeof(struct sjoyff_device), GFP_KERNEL);
101         if (!sjoyff)
102                 return -ENOMEM;
103
104         dev = hidinput->input;
105
106         set_bit(FF_RUMBLE, dev->ffbit);
107
108         error = input_ff_create_memless(dev, sjoyff, hid_sjoyff_play);
109         if (error) {
110                 kfree(sjoyff);
111                 return error;
112         }
113
114         sjoyff->report = report;
115         sjoyff->report->field[0]->value[0] = 0x01;
116         sjoyff->report->field[0]->value[1] = 0x00;
117         sjoyff->report->field[0]->value[2] = 0x00;
118         usbhid_submit_report(hid, sjoyff->report, USB_DIR_OUT);
119
120         dev_info(&hid->dev,
121                 "Force feedback for SmartJoy PLUS PS2/USB adapter\n");
122
123         return 0;
124 }
125 #else
126 static inline int sjoyff_init(struct hid_device *hid)
127 {
128         return 0;
129 }
130 #endif
131
132 static int sjoy_probe(struct hid_device *hdev, const struct hid_device_id *id)
133 {
134         int ret;
135
136         ret = hid_parse(hdev);
137         if (ret) {
138                 dev_err(&hdev->dev, "parse failed\n");
139                 goto err;
140         }
141
142         ret = hid_hw_start(hdev, HID_CONNECT_DEFAULT & ~HID_CONNECT_FF);
143         if (ret) {
144                 dev_err(&hdev->dev, "hw start failed\n");
145                 goto err;
146         }
147
148         sjoyff_init(hdev);
149
150         return 0;
151 err:
152         return ret;
153 }
154
155 static const struct hid_device_id sjoy_devices[] = {
156         { HID_USB_DEVICE(USB_VENDOR_ID_WISEGROUP, USB_DEVICE_ID_SMARTJOY_PLUS) },
157         { }
158 };
159 MODULE_DEVICE_TABLE(hid, sjoy_devices);
160
161 static struct hid_driver sjoy_driver = {
162         .name = "smartjoyplus",
163         .id_table = sjoy_devices,
164         .probe = sjoy_probe,
165 };
166
167 static int __init sjoy_init(void)
168 {
169         return hid_register_driver(&sjoy_driver);
170 }
171
172 static void __exit sjoy_exit(void)
173 {
174         hid_unregister_driver(&sjoy_driver);
175 }
176
177 module_init(sjoy_init);
178 module_exit(sjoy_exit);
179 MODULE_LICENSE("GPL");
180 MODULE_AUTHOR("Jussi Kivilinna");
181