vboxguest_linux.c 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482
  1. /* SPDX-License-Identifier: GPL-2.0 */
  2. /*
  3. * vboxguest linux pci driver, char-dev and input-device code,
  4. *
  5. * Copyright (C) 2006-2016 Oracle Corporation
  6. */
  7. #include <linux/input.h>
  8. #include <linux/kernel.h>
  9. #include <linux/miscdevice.h>
  10. #include <linux/module.h>
  11. #include <linux/pci.h>
  12. #include <linux/poll.h>
  13. #include <linux/vbox_utils.h>
  14. #include "vboxguest_core.h"
  15. /** The device name. */
  16. #define DEVICE_NAME "vboxguest"
  17. /** The device name for the device node open to everyone. */
  18. #define DEVICE_NAME_USER "vboxuser"
  19. /** VirtualBox PCI vendor ID. */
  20. #define VBOX_VENDORID 0x80ee
  21. /** VMMDev PCI card product ID. */
  22. #define VMMDEV_DEVICEID 0xcafe
  23. /** Mutex protecting the global vbg_gdev pointer used by vbg_get/put_gdev. */
  24. static DEFINE_MUTEX(vbg_gdev_mutex);
  25. /** Global vbg_gdev pointer used by vbg_get/put_gdev. */
  26. static struct vbg_dev *vbg_gdev;
  27. static int vbg_misc_device_open(struct inode *inode, struct file *filp)
  28. {
  29. struct vbg_session *session;
  30. struct vbg_dev *gdev;
  31. /* misc_open sets filp->private_data to our misc device */
  32. gdev = container_of(filp->private_data, struct vbg_dev, misc_device);
  33. session = vbg_core_open_session(gdev, false);
  34. if (IS_ERR(session))
  35. return PTR_ERR(session);
  36. filp->private_data = session;
  37. return 0;
  38. }
  39. static int vbg_misc_device_user_open(struct inode *inode, struct file *filp)
  40. {
  41. struct vbg_session *session;
  42. struct vbg_dev *gdev;
  43. /* misc_open sets filp->private_data to our misc device */
  44. gdev = container_of(filp->private_data, struct vbg_dev,
  45. misc_device_user);
  46. session = vbg_core_open_session(gdev, false);
  47. if (IS_ERR(session))
  48. return PTR_ERR(session);
  49. filp->private_data = session;
  50. return 0;
  51. }
  52. /**
  53. * Close device.
  54. * Return: 0 on success, negated errno on failure.
  55. * @inode: Pointer to inode info structure.
  56. * @filp: Associated file pointer.
  57. */
  58. static int vbg_misc_device_close(struct inode *inode, struct file *filp)
  59. {
  60. vbg_core_close_session(filp->private_data);
  61. filp->private_data = NULL;
  62. return 0;
  63. }
  64. /**
  65. * Device I/O Control entry point.
  66. * Return: 0 on success, negated errno on failure.
  67. * @filp: Associated file pointer.
  68. * @req: The request specified to ioctl().
  69. * @arg: The argument specified to ioctl().
  70. */
  71. static long vbg_misc_device_ioctl(struct file *filp, unsigned int req,
  72. unsigned long arg)
  73. {
  74. struct vbg_session *session = filp->private_data;
  75. size_t returned_size, size;
  76. struct vbg_ioctl_hdr hdr;
  77. bool is_vmmdev_req;
  78. int ret = 0;
  79. void *buf;
  80. if (copy_from_user(&hdr, (void *)arg, sizeof(hdr)))
  81. return -EFAULT;
  82. if (hdr.version != VBG_IOCTL_HDR_VERSION)
  83. return -EINVAL;
  84. if (hdr.size_in < sizeof(hdr) ||
  85. (hdr.size_out && hdr.size_out < sizeof(hdr)))
  86. return -EINVAL;
  87. size = max(hdr.size_in, hdr.size_out);
  88. if (_IOC_SIZE(req) && _IOC_SIZE(req) != size)
  89. return -EINVAL;
  90. if (size > SZ_16M)
  91. return -E2BIG;
  92. /*
  93. * IOCTL_VMMDEV_REQUEST needs the buffer to be below 4G to avoid
  94. * the need for a bounce-buffer and another copy later on.
  95. */
  96. is_vmmdev_req = (req & ~IOCSIZE_MASK) == VBG_IOCTL_VMMDEV_REQUEST(0) ||
  97. req == VBG_IOCTL_VMMDEV_REQUEST_BIG ||
  98. req == VBG_IOCTL_VMMDEV_REQUEST_BIG_ALT;
  99. if (is_vmmdev_req)
  100. buf = vbg_req_alloc(size, VBG_IOCTL_HDR_TYPE_DEFAULT);
  101. else
  102. buf = kmalloc(size, GFP_KERNEL);
  103. if (!buf)
  104. return -ENOMEM;
  105. *((struct vbg_ioctl_hdr *)buf) = hdr;
  106. if (copy_from_user(buf + sizeof(hdr), (void *)arg + sizeof(hdr),
  107. hdr.size_in - sizeof(hdr))) {
  108. ret = -EFAULT;
  109. goto out;
  110. }
  111. if (hdr.size_in < size)
  112. memset(buf + hdr.size_in, 0, size - hdr.size_in);
  113. ret = vbg_core_ioctl(session, req, buf);
  114. if (ret)
  115. goto out;
  116. returned_size = ((struct vbg_ioctl_hdr *)buf)->size_out;
  117. if (returned_size > size) {
  118. vbg_debug("%s: too much output data %zu > %zu\n",
  119. __func__, returned_size, size);
  120. returned_size = size;
  121. }
  122. if (copy_to_user((void *)arg, buf, returned_size) != 0)
  123. ret = -EFAULT;
  124. out:
  125. if (is_vmmdev_req)
  126. vbg_req_free(buf, size);
  127. else
  128. kfree(buf);
  129. return ret;
  130. }
  131. /** The file_operations structures. */
  132. static const struct file_operations vbg_misc_device_fops = {
  133. .owner = THIS_MODULE,
  134. .open = vbg_misc_device_open,
  135. .release = vbg_misc_device_close,
  136. .unlocked_ioctl = vbg_misc_device_ioctl,
  137. #ifdef CONFIG_COMPAT
  138. .compat_ioctl = vbg_misc_device_ioctl,
  139. #endif
  140. };
  141. static const struct file_operations vbg_misc_device_user_fops = {
  142. .owner = THIS_MODULE,
  143. .open = vbg_misc_device_user_open,
  144. .release = vbg_misc_device_close,
  145. .unlocked_ioctl = vbg_misc_device_ioctl,
  146. #ifdef CONFIG_COMPAT
  147. .compat_ioctl = vbg_misc_device_ioctl,
  148. #endif
  149. };
  150. /**
  151. * Called when the input device is first opened.
  152. *
  153. * Sets up absolute mouse reporting.
  154. */
  155. static int vbg_input_open(struct input_dev *input)
  156. {
  157. struct vbg_dev *gdev = input_get_drvdata(input);
  158. u32 feat = VMMDEV_MOUSE_GUEST_CAN_ABSOLUTE | VMMDEV_MOUSE_NEW_PROTOCOL;
  159. int ret;
  160. ret = vbg_core_set_mouse_status(gdev, feat);
  161. if (ret)
  162. return ret;
  163. return 0;
  164. }
  165. /**
  166. * Called if all open handles to the input device are closed.
  167. *
  168. * Disables absolute reporting.
  169. */
  170. static void vbg_input_close(struct input_dev *input)
  171. {
  172. struct vbg_dev *gdev = input_get_drvdata(input);
  173. vbg_core_set_mouse_status(gdev, 0);
  174. }
  175. /**
  176. * Creates the kernel input device.
  177. *
  178. * Return: 0 on success, negated errno on failure.
  179. */
  180. static int vbg_create_input_device(struct vbg_dev *gdev)
  181. {
  182. struct input_dev *input;
  183. input = devm_input_allocate_device(gdev->dev);
  184. if (!input)
  185. return -ENOMEM;
  186. input->id.bustype = BUS_PCI;
  187. input->id.vendor = VBOX_VENDORID;
  188. input->id.product = VMMDEV_DEVICEID;
  189. input->open = vbg_input_open;
  190. input->close = vbg_input_close;
  191. input->dev.parent = gdev->dev;
  192. input->name = "VirtualBox mouse integration";
  193. input_set_abs_params(input, ABS_X, VMMDEV_MOUSE_RANGE_MIN,
  194. VMMDEV_MOUSE_RANGE_MAX, 0, 0);
  195. input_set_abs_params(input, ABS_Y, VMMDEV_MOUSE_RANGE_MIN,
  196. VMMDEV_MOUSE_RANGE_MAX, 0, 0);
  197. input_set_capability(input, EV_KEY, BTN_MOUSE);
  198. input_set_drvdata(input, gdev);
  199. gdev->input = input;
  200. return input_register_device(gdev->input);
  201. }
  202. static ssize_t host_version_show(struct device *dev,
  203. struct device_attribute *attr, char *buf)
  204. {
  205. struct vbg_dev *gdev = dev_get_drvdata(dev);
  206. return sprintf(buf, "%s\n", gdev->host_version);
  207. }
  208. static ssize_t host_features_show(struct device *dev,
  209. struct device_attribute *attr, char *buf)
  210. {
  211. struct vbg_dev *gdev = dev_get_drvdata(dev);
  212. return sprintf(buf, "%#x\n", gdev->host_features);
  213. }
  214. static DEVICE_ATTR_RO(host_version);
  215. static DEVICE_ATTR_RO(host_features);
  216. /**
  217. * Does the PCI detection and init of the device.
  218. *
  219. * Return: 0 on success, negated errno on failure.
  220. */
  221. static int vbg_pci_probe(struct pci_dev *pci, const struct pci_device_id *id)
  222. {
  223. struct device *dev = &pci->dev;
  224. resource_size_t io, io_len, mmio, mmio_len;
  225. struct vmmdev_memory *vmmdev;
  226. struct vbg_dev *gdev;
  227. int ret;
  228. gdev = devm_kzalloc(dev, sizeof(*gdev), GFP_KERNEL);
  229. if (!gdev)
  230. return -ENOMEM;
  231. ret = pci_enable_device(pci);
  232. if (ret != 0) {
  233. vbg_err("vboxguest: Error enabling device: %d\n", ret);
  234. return ret;
  235. }
  236. ret = -ENODEV;
  237. io = pci_resource_start(pci, 0);
  238. io_len = pci_resource_len(pci, 0);
  239. if (!io || !io_len) {
  240. vbg_err("vboxguest: Error IO-port resource (0) is missing\n");
  241. goto err_disable_pcidev;
  242. }
  243. if (devm_request_region(dev, io, io_len, DEVICE_NAME) == NULL) {
  244. vbg_err("vboxguest: Error could not claim IO resource\n");
  245. ret = -EBUSY;
  246. goto err_disable_pcidev;
  247. }
  248. mmio = pci_resource_start(pci, 1);
  249. mmio_len = pci_resource_len(pci, 1);
  250. if (!mmio || !mmio_len) {
  251. vbg_err("vboxguest: Error MMIO resource (1) is missing\n");
  252. goto err_disable_pcidev;
  253. }
  254. if (devm_request_mem_region(dev, mmio, mmio_len, DEVICE_NAME) == NULL) {
  255. vbg_err("vboxguest: Error could not claim MMIO resource\n");
  256. ret = -EBUSY;
  257. goto err_disable_pcidev;
  258. }
  259. vmmdev = devm_ioremap(dev, mmio, mmio_len);
  260. if (!vmmdev) {
  261. vbg_err("vboxguest: Error ioremap failed; MMIO addr=%pap size=%pap\n",
  262. &mmio, &mmio_len);
  263. goto err_disable_pcidev;
  264. }
  265. /* Validate MMIO region version and size. */
  266. if (vmmdev->version != VMMDEV_MEMORY_VERSION ||
  267. vmmdev->size < 32 || vmmdev->size > mmio_len) {
  268. vbg_err("vboxguest: Bogus VMMDev memory; version=%08x (expected %08x) size=%d (expected <= %d)\n",
  269. vmmdev->version, VMMDEV_MEMORY_VERSION,
  270. vmmdev->size, (int)mmio_len);
  271. goto err_disable_pcidev;
  272. }
  273. gdev->io_port = io;
  274. gdev->mmio = vmmdev;
  275. gdev->dev = dev;
  276. gdev->misc_device.minor = MISC_DYNAMIC_MINOR;
  277. gdev->misc_device.name = DEVICE_NAME;
  278. gdev->misc_device.fops = &vbg_misc_device_fops;
  279. gdev->misc_device_user.minor = MISC_DYNAMIC_MINOR;
  280. gdev->misc_device_user.name = DEVICE_NAME_USER;
  281. gdev->misc_device_user.fops = &vbg_misc_device_user_fops;
  282. ret = vbg_core_init(gdev, VMMDEV_EVENT_MOUSE_POSITION_CHANGED);
  283. if (ret)
  284. goto err_disable_pcidev;
  285. ret = vbg_create_input_device(gdev);
  286. if (ret) {
  287. vbg_err("vboxguest: Error creating input device: %d\n", ret);
  288. goto err_vbg_core_exit;
  289. }
  290. ret = devm_request_irq(dev, pci->irq, vbg_core_isr, IRQF_SHARED,
  291. DEVICE_NAME, gdev);
  292. if (ret) {
  293. vbg_err("vboxguest: Error requesting irq: %d\n", ret);
  294. goto err_vbg_core_exit;
  295. }
  296. ret = misc_register(&gdev->misc_device);
  297. if (ret) {
  298. vbg_err("vboxguest: Error misc_register %s failed: %d\n",
  299. DEVICE_NAME, ret);
  300. goto err_vbg_core_exit;
  301. }
  302. ret = misc_register(&gdev->misc_device_user);
  303. if (ret) {
  304. vbg_err("vboxguest: Error misc_register %s failed: %d\n",
  305. DEVICE_NAME_USER, ret);
  306. goto err_unregister_misc_device;
  307. }
  308. mutex_lock(&vbg_gdev_mutex);
  309. if (!vbg_gdev)
  310. vbg_gdev = gdev;
  311. else
  312. ret = -EBUSY;
  313. mutex_unlock(&vbg_gdev_mutex);
  314. if (ret) {
  315. vbg_err("vboxguest: Error more then 1 vbox guest pci device\n");
  316. goto err_unregister_misc_device_user;
  317. }
  318. pci_set_drvdata(pci, gdev);
  319. device_create_file(dev, &dev_attr_host_version);
  320. device_create_file(dev, &dev_attr_host_features);
  321. vbg_info("vboxguest: misc device minor %d, IRQ %d, I/O port %x, MMIO at %pap (size %pap)\n",
  322. gdev->misc_device.minor, pci->irq, gdev->io_port,
  323. &mmio, &mmio_len);
  324. return 0;
  325. err_unregister_misc_device_user:
  326. misc_deregister(&gdev->misc_device_user);
  327. err_unregister_misc_device:
  328. misc_deregister(&gdev->misc_device);
  329. err_vbg_core_exit:
  330. vbg_core_exit(gdev);
  331. err_disable_pcidev:
  332. pci_disable_device(pci);
  333. return ret;
  334. }
  335. static void vbg_pci_remove(struct pci_dev *pci)
  336. {
  337. struct vbg_dev *gdev = pci_get_drvdata(pci);
  338. mutex_lock(&vbg_gdev_mutex);
  339. vbg_gdev = NULL;
  340. mutex_unlock(&vbg_gdev_mutex);
  341. device_remove_file(gdev->dev, &dev_attr_host_features);
  342. device_remove_file(gdev->dev, &dev_attr_host_version);
  343. misc_deregister(&gdev->misc_device_user);
  344. misc_deregister(&gdev->misc_device);
  345. vbg_core_exit(gdev);
  346. pci_disable_device(pci);
  347. }
  348. struct vbg_dev *vbg_get_gdev(void)
  349. {
  350. mutex_lock(&vbg_gdev_mutex);
  351. /*
  352. * Note on success we keep the mutex locked until vbg_put_gdev(),
  353. * this stops vbg_pci_remove from removing the device from underneath
  354. * vboxsf. vboxsf will only hold a reference for a short while.
  355. */
  356. if (vbg_gdev)
  357. return vbg_gdev;
  358. mutex_unlock(&vbg_gdev_mutex);
  359. return ERR_PTR(-ENODEV);
  360. }
  361. EXPORT_SYMBOL(vbg_get_gdev);
  362. void vbg_put_gdev(struct vbg_dev *gdev)
  363. {
  364. WARN_ON(gdev != vbg_gdev);
  365. mutex_unlock(&vbg_gdev_mutex);
  366. }
  367. EXPORT_SYMBOL(vbg_put_gdev);
  368. /**
  369. * Callback for mouse events.
  370. *
  371. * This is called at the end of the ISR, after leaving the event spinlock, if
  372. * VMMDEV_EVENT_MOUSE_POSITION_CHANGED was raised by the host.
  373. *
  374. * @gdev: The device extension.
  375. */
  376. void vbg_linux_mouse_event(struct vbg_dev *gdev)
  377. {
  378. int rc;
  379. /* Report events to the kernel input device */
  380. gdev->mouse_status_req->mouse_features = 0;
  381. gdev->mouse_status_req->pointer_pos_x = 0;
  382. gdev->mouse_status_req->pointer_pos_y = 0;
  383. rc = vbg_req_perform(gdev, gdev->mouse_status_req);
  384. if (rc >= 0) {
  385. input_report_abs(gdev->input, ABS_X,
  386. gdev->mouse_status_req->pointer_pos_x);
  387. input_report_abs(gdev->input, ABS_Y,
  388. gdev->mouse_status_req->pointer_pos_y);
  389. input_sync(gdev->input);
  390. }
  391. }
  392. static const struct pci_device_id vbg_pci_ids[] = {
  393. { .vendor = VBOX_VENDORID, .device = VMMDEV_DEVICEID },
  394. {}
  395. };
  396. MODULE_DEVICE_TABLE(pci, vbg_pci_ids);
  397. static struct pci_driver vbg_pci_driver = {
  398. .name = DEVICE_NAME,
  399. .id_table = vbg_pci_ids,
  400. .probe = vbg_pci_probe,
  401. .remove = vbg_pci_remove,
  402. };
  403. module_pci_driver(vbg_pci_driver);
  404. MODULE_AUTHOR("Oracle Corporation");
  405. MODULE_DESCRIPTION("Oracle VM VirtualBox Guest Additions for Linux Module");
  406. MODULE_LICENSE("GPL");