Loading...
1// SPDX-License-Identifier: GPL-2.0
2/*
3 * Provide access to virtual console memory.
4 * /dev/vcs: the screen as it is being viewed right now (possibly scrolled)
5 * /dev/vcsN: the screen of /dev/ttyN (1 <= N <= 63)
6 * [minor: N]
7 *
8 * /dev/vcsaN: idem, but including attributes, and prefixed with
9 * the 4 bytes lines,columns,x,y (as screendump used to give).
10 * Attribute/character pair is in native endianity.
11 * [minor: N+128]
12 *
13 * /dev/vcsuN: similar to /dev/vcsaN but using 4-byte unicode values
14 * instead of 1-byte screen glyph values.
15 * [minor: N+64]
16 *
17 * /dev/vcsuaN: same idea as /dev/vcsaN for unicode (not yet implemented).
18 *
19 * This replaces screendump and part of selection, so that the system
20 * administrator can control access using file system permissions.
21 *
22 * aeb@cwi.nl - efter Friedas begravelse - 950211
23 *
24 * machek@k332.feld.cvut.cz - modified not to send characters to wrong console
25 * - fixed some fatal off-by-one bugs (0-- no longer == -1 -> looping and looping and looping...)
26 * - making it shorter - scr_readw are macros which expand in PRETTY long code
27 */
28
29#include <linux/kernel.h>
30#include <linux/major.h>
31#include <linux/errno.h>
32#include <linux/export.h>
33#include <linux/tty.h>
34#include <linux/interrupt.h>
35#include <linux/mm.h>
36#include <linux/init.h>
37#include <linux/vt_kern.h>
38#include <linux/selection.h>
39#include <linux/kbd_kern.h>
40#include <linux/console.h>
41#include <linux/device.h>
42#include <linux/sched.h>
43#include <linux/fs.h>
44#include <linux/poll.h>
45#include <linux/signal.h>
46#include <linux/slab.h>
47#include <linux/notifier.h>
48
49#include <linux/uaccess.h>
50#include <asm/byteorder.h>
51#include <asm/unaligned.h>
52
53#define HEADER_SIZE 4u
54#define CON_BUF_SIZE (CONFIG_BASE_SMALL ? 256 : PAGE_SIZE)
55
56/*
57 * Our minor space:
58 *
59 * 0 ... 63 glyph mode without attributes
60 * 64 ... 127 unicode mode without attributes
61 * 128 ... 191 glyph mode with attributes
62 * 192 ... 255 unused (reserved for unicode with attributes)
63 *
64 * This relies on MAX_NR_CONSOLES being <= 63, meaning 63 actual consoles
65 * with minors 0, 64, 128 and 192 being proxies for the foreground console.
66 */
67#if MAX_NR_CONSOLES > 63
68#warning "/dev/vcs* devices may not accommodate more than 63 consoles"
69#endif
70
71#define console(inode) (iminor(inode) & 63)
72#define use_unicode(inode) (iminor(inode) & 64)
73#define use_attributes(inode) (iminor(inode) & 128)
74
75
76struct vcs_poll_data {
77 struct notifier_block notifier;
78 unsigned int cons_num;
79 int event;
80 wait_queue_head_t waitq;
81 struct fasync_struct *fasync;
82};
83
84static int
85vcs_notifier(struct notifier_block *nb, unsigned long code, void *_param)
86{
87 struct vt_notifier_param *param = _param;
88 struct vc_data *vc = param->vc;
89 struct vcs_poll_data *poll =
90 container_of(nb, struct vcs_poll_data, notifier);
91 int currcons = poll->cons_num;
92 int fa_band;
93
94 switch (code) {
95 case VT_UPDATE:
96 fa_band = POLL_PRI;
97 break;
98 case VT_DEALLOCATE:
99 fa_band = POLL_HUP;
100 break;
101 default:
102 return NOTIFY_DONE;
103 }
104
105 if (currcons == 0)
106 currcons = fg_console;
107 else
108 currcons--;
109 if (currcons != vc->vc_num)
110 return NOTIFY_DONE;
111
112 poll->event = code;
113 wake_up_interruptible(&poll->waitq);
114 kill_fasync(&poll->fasync, SIGIO, fa_band);
115 return NOTIFY_OK;
116}
117
118static void
119vcs_poll_data_free(struct vcs_poll_data *poll)
120{
121 unregister_vt_notifier(&poll->notifier);
122 kfree(poll);
123}
124
125static struct vcs_poll_data *
126vcs_poll_data_get(struct file *file)
127{
128 struct vcs_poll_data *poll = file->private_data, *kill = NULL;
129
130 if (poll)
131 return poll;
132
133 poll = kzalloc(sizeof(*poll), GFP_KERNEL);
134 if (!poll)
135 return NULL;
136 poll->cons_num = console(file_inode(file));
137 init_waitqueue_head(&poll->waitq);
138 poll->notifier.notifier_call = vcs_notifier;
139 /*
140 * In order not to lose any update event, we must pretend one might
141 * have occurred before we have a chance to register our notifier.
142 * This is also how user space has come to detect which kernels
143 * support POLLPRI on /dev/vcs* devices i.e. using poll() with
144 * POLLPRI and a zero timeout.
145 */
146 poll->event = VT_UPDATE;
147
148 if (register_vt_notifier(&poll->notifier) != 0) {
149 kfree(poll);
150 return NULL;
151 }
152
153 /*
154 * This code may be called either through ->poll() or ->fasync().
155 * If we have two threads using the same file descriptor, they could
156 * both enter this function, both notice that the structure hasn't
157 * been allocated yet and go ahead allocating it in parallel, but
158 * only one of them must survive and be shared otherwise we'd leak
159 * memory with a dangling notifier callback.
160 */
161 spin_lock(&file->f_lock);
162 if (!file->private_data) {
163 file->private_data = poll;
164 } else {
165 /* someone else raced ahead of us */
166 kill = poll;
167 poll = file->private_data;
168 }
169 spin_unlock(&file->f_lock);
170 if (kill)
171 vcs_poll_data_free(kill);
172
173 return poll;
174}
175
176/**
177 * vcs_vc -- return VC for @inode
178 * @inode: inode for which to return a VC
179 * @viewed: returns whether this console is currently foreground (viewed)
180 *
181 * Must be called with console_lock.
182 */
183static struct vc_data *vcs_vc(struct inode *inode, bool *viewed)
184{
185 unsigned int currcons = console(inode);
186
187 WARN_CONSOLE_UNLOCKED();
188
189 if (currcons == 0) {
190 currcons = fg_console;
191 if (viewed)
192 *viewed = true;
193 } else {
194 currcons--;
195 if (viewed)
196 *viewed = false;
197 }
198 return vc_cons[currcons].d;
199}
200
201/**
202 * vcs_size -- return size for a VC in @vc
203 * @vc: which VC
204 * @attr: does it use attributes?
205 * @unicode: is it unicode?
206 *
207 * Must be called with console_lock.
208 */
209static int vcs_size(const struct vc_data *vc, bool attr, bool unicode)
210{
211 int size;
212
213 WARN_CONSOLE_UNLOCKED();
214
215 size = vc->vc_rows * vc->vc_cols;
216
217 if (attr) {
218 if (unicode)
219 return -EOPNOTSUPP;
220
221 size = 2 * size + HEADER_SIZE;
222 } else if (unicode)
223 size *= 4;
224
225 return size;
226}
227
228static loff_t vcs_lseek(struct file *file, loff_t offset, int orig)
229{
230 struct inode *inode = file_inode(file);
231 struct vc_data *vc;
232 int size;
233
234 console_lock();
235 vc = vcs_vc(inode, NULL);
236 if (!vc) {
237 console_unlock();
238 return -ENXIO;
239 }
240
241 size = vcs_size(vc, use_attributes(inode), use_unicode(inode));
242 console_unlock();
243 if (size < 0)
244 return size;
245 return fixed_size_llseek(file, offset, orig, size);
246}
247
248static int vcs_read_buf_uni(struct vc_data *vc, char *con_buf,
249 unsigned int pos, unsigned int count, bool viewed)
250{
251 unsigned int nr, row, col, maxcol = vc->vc_cols;
252 int ret;
253
254 ret = vc_uniscr_check(vc);
255 if (ret)
256 return ret;
257
258 pos /= 4;
259 row = pos / maxcol;
260 col = pos % maxcol;
261 nr = maxcol - col;
262 do {
263 if (nr > count / 4)
264 nr = count / 4;
265 vc_uniscr_copy_line(vc, con_buf, viewed, row, col, nr);
266 con_buf += nr * 4;
267 count -= nr * 4;
268 row++;
269 col = 0;
270 nr = maxcol;
271 } while (count);
272
273 return 0;
274}
275
276static void vcs_read_buf_noattr(const struct vc_data *vc, char *con_buf,
277 unsigned int pos, unsigned int count, bool viewed)
278{
279 u16 *org;
280 unsigned int col, maxcol = vc->vc_cols;
281
282 org = screen_pos(vc, pos, viewed);
283 col = pos % maxcol;
284 pos += maxcol - col;
285
286 while (count-- > 0) {
287 *con_buf++ = (vcs_scr_readw(vc, org++) & 0xff);
288 if (++col == maxcol) {
289 org = screen_pos(vc, pos, viewed);
290 col = 0;
291 pos += maxcol;
292 }
293 }
294}
295
296static unsigned int vcs_read_buf(const struct vc_data *vc, char *con_buf,
297 unsigned int pos, unsigned int count, bool viewed,
298 unsigned int *skip)
299{
300 u16 *org, *con_buf16;
301 unsigned int col, maxcol = vc->vc_cols;
302 unsigned int filled = count;
303
304 if (pos < HEADER_SIZE) {
305 /* clamp header values if they don't fit */
306 con_buf[0] = min(vc->vc_rows, 0xFFu);
307 con_buf[1] = min(vc->vc_cols, 0xFFu);
308 getconsxy(vc, con_buf + 2);
309
310 *skip += pos;
311 count += pos;
312 if (count > CON_BUF_SIZE) {
313 count = CON_BUF_SIZE;
314 filled = count - pos;
315 }
316
317 /* Advance state pointers and move on. */
318 count -= min(HEADER_SIZE, count);
319 pos = HEADER_SIZE;
320 con_buf += HEADER_SIZE;
321 /* If count >= 0, then pos is even... */
322 } else if (pos & 1) {
323 /*
324 * Skip first byte for output if start address is odd. Update
325 * region sizes up/down depending on free space in buffer.
326 */
327 (*skip)++;
328 if (count < CON_BUF_SIZE)
329 count++;
330 else
331 filled--;
332 }
333
334 if (!count)
335 return filled;
336
337 pos -= HEADER_SIZE;
338 pos /= 2;
339 col = pos % maxcol;
340
341 org = screen_pos(vc, pos, viewed);
342 pos += maxcol - col;
343
344 /*
345 * Buffer has even length, so we can always copy character + attribute.
346 * We do not copy last byte to userspace if count is odd.
347 */
348 count = (count + 1) / 2;
349 con_buf16 = (u16 *)con_buf;
350
351 while (count) {
352 *con_buf16++ = vcs_scr_readw(vc, org++);
353 count--;
354 if (++col == maxcol) {
355 org = screen_pos(vc, pos, viewed);
356 col = 0;
357 pos += maxcol;
358 }
359 }
360
361 return filled;
362}
363
364static ssize_t
365vcs_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)
366{
367 struct inode *inode = file_inode(file);
368 struct vc_data *vc;
369 struct vcs_poll_data *poll;
370 unsigned int read;
371 ssize_t ret;
372 char *con_buf;
373 loff_t pos;
374 bool viewed, attr, uni_mode;
375
376 con_buf = (char *) __get_free_page(GFP_KERNEL);
377 if (!con_buf)
378 return -ENOMEM;
379
380 pos = *ppos;
381
382 /* Select the proper current console and verify
383 * sanity of the situation under the console lock.
384 */
385 console_lock();
386
387 uni_mode = use_unicode(inode);
388 attr = use_attributes(inode);
389
390 ret = -EINVAL;
391 if (pos < 0)
392 goto unlock_out;
393 /* we enforce 32-bit alignment for pos and count in unicode mode */
394 if (uni_mode && (pos | count) & 3)
395 goto unlock_out;
396
397 poll = file->private_data;
398 if (count && poll)
399 poll->event = 0;
400 read = 0;
401 ret = 0;
402 while (count) {
403 unsigned int this_round, skip = 0;
404 int size;
405
406 ret = -ENXIO;
407 vc = vcs_vc(inode, &viewed);
408 if (!vc)
409 goto unlock_out;
410
411 /* Check whether we are above size each round,
412 * as copy_to_user at the end of this loop
413 * could sleep.
414 */
415 size = vcs_size(vc, attr, uni_mode);
416 if (size < 0) {
417 if (read)
418 break;
419 ret = size;
420 goto unlock_out;
421 }
422 if (pos >= size)
423 break;
424 if (count > size - pos)
425 count = size - pos;
426
427 this_round = count;
428 if (this_round > CON_BUF_SIZE)
429 this_round = CON_BUF_SIZE;
430
431 /* Perform the whole read into the local con_buf.
432 * Then we can drop the console spinlock and safely
433 * attempt to move it to userspace.
434 */
435
436 if (uni_mode) {
437 ret = vcs_read_buf_uni(vc, con_buf, pos, this_round,
438 viewed);
439 if (ret)
440 break;
441 } else if (!attr) {
442 vcs_read_buf_noattr(vc, con_buf, pos, this_round,
443 viewed);
444 } else {
445 this_round = vcs_read_buf(vc, con_buf, pos, this_round,
446 viewed, &skip);
447 }
448
449 /* Finally, release the console semaphore while we push
450 * all the data to userspace from our temporary buffer.
451 *
452 * AKPM: Even though it's a semaphore, we should drop it because
453 * the pagefault handling code may want to call printk().
454 */
455
456 console_unlock();
457 ret = copy_to_user(buf, con_buf + skip, this_round);
458 console_lock();
459
460 if (ret) {
461 read += this_round - ret;
462 ret = -EFAULT;
463 break;
464 }
465 buf += this_round;
466 pos += this_round;
467 read += this_round;
468 count -= this_round;
469 }
470 *ppos += read;
471 if (read)
472 ret = read;
473unlock_out:
474 console_unlock();
475 free_page((unsigned long) con_buf);
476 return ret;
477}
478
479static u16 *vcs_write_buf_noattr(struct vc_data *vc, const char *con_buf,
480 unsigned int pos, unsigned int count, bool viewed, u16 **org0)
481{
482 u16 *org;
483 unsigned int col, maxcol = vc->vc_cols;
484
485 *org0 = org = screen_pos(vc, pos, viewed);
486 col = pos % maxcol;
487 pos += maxcol - col;
488
489 while (count > 0) {
490 unsigned char c = *con_buf++;
491
492 count--;
493 vcs_scr_writew(vc,
494 (vcs_scr_readw(vc, org) & 0xff00) | c, org);
495 org++;
496 if (++col == maxcol) {
497 org = screen_pos(vc, pos, viewed);
498 col = 0;
499 pos += maxcol;
500 }
501 }
502
503 return org;
504}
505
506/*
507 * Compilers (gcc 10) are unable to optimize the swap in cpu_to_le16. So do it
508 * the poor man way.
509 */
510static inline u16 vc_compile_le16(u8 hi, u8 lo)
511{
512#ifdef __BIG_ENDIAN
513 return (lo << 8u) | hi;
514#else
515 return (hi << 8u) | lo;
516#endif
517}
518
519static u16 *vcs_write_buf(struct vc_data *vc, const char *con_buf,
520 unsigned int pos, unsigned int count, bool viewed, u16 **org0)
521{
522 u16 *org;
523 unsigned int col, maxcol = vc->vc_cols;
524 unsigned char c;
525
526 /* header */
527 if (pos < HEADER_SIZE) {
528 char header[HEADER_SIZE];
529
530 getconsxy(vc, header + 2);
531 while (pos < HEADER_SIZE && count > 0) {
532 count--;
533 header[pos++] = *con_buf++;
534 }
535 if (!viewed)
536 putconsxy(vc, header + 2);
537 }
538
539 if (!count)
540 return NULL;
541
542 pos -= HEADER_SIZE;
543 col = (pos/2) % maxcol;
544
545 *org0 = org = screen_pos(vc, pos/2, viewed);
546
547 /* odd pos -- the first single character */
548 if (pos & 1) {
549 count--;
550 c = *con_buf++;
551 vcs_scr_writew(vc, vc_compile_le16(c, vcs_scr_readw(vc, org)),
552 org);
553 org++;
554 pos++;
555 if (++col == maxcol) {
556 org = screen_pos(vc, pos/2, viewed);
557 col = 0;
558 }
559 }
560
561 pos /= 2;
562 pos += maxcol - col;
563
564 /* even pos -- handle attr+character pairs */
565 while (count > 1) {
566 unsigned short w;
567
568 w = get_unaligned(((unsigned short *)con_buf));
569 vcs_scr_writew(vc, w, org++);
570 con_buf += 2;
571 count -= 2;
572 if (++col == maxcol) {
573 org = screen_pos(vc, pos, viewed);
574 col = 0;
575 pos += maxcol;
576 }
577 }
578
579 if (!count)
580 return org;
581
582 /* odd pos -- the remaining character */
583 c = *con_buf++;
584 vcs_scr_writew(vc, vc_compile_le16(vcs_scr_readw(vc, org) >> 8, c),
585 org);
586
587 return org;
588}
589
590static ssize_t
591vcs_write(struct file *file, const char __user *buf, size_t count, loff_t *ppos)
592{
593 struct inode *inode = file_inode(file);
594 struct vc_data *vc;
595 char *con_buf;
596 u16 *org0, *org;
597 unsigned int written;
598 int size;
599 ssize_t ret;
600 loff_t pos;
601 bool viewed, attr;
602
603 if (use_unicode(inode))
604 return -EOPNOTSUPP;
605
606 con_buf = (char *) __get_free_page(GFP_KERNEL);
607 if (!con_buf)
608 return -ENOMEM;
609
610 pos = *ppos;
611
612 /* Select the proper current console and verify
613 * sanity of the situation under the console lock.
614 */
615 console_lock();
616
617 attr = use_attributes(inode);
618 ret = -ENXIO;
619 vc = vcs_vc(inode, &viewed);
620 if (!vc)
621 goto unlock_out;
622
623 size = vcs_size(vc, attr, false);
624 if (size < 0) {
625 ret = size;
626 goto unlock_out;
627 }
628 ret = -EINVAL;
629 if (pos < 0 || pos > size)
630 goto unlock_out;
631 if (count > size - pos)
632 count = size - pos;
633 written = 0;
634 while (count) {
635 unsigned int this_round = count;
636
637 if (this_round > CON_BUF_SIZE)
638 this_round = CON_BUF_SIZE;
639
640 /* Temporarily drop the console lock so that we can read
641 * in the write data from userspace safely.
642 */
643 console_unlock();
644 ret = copy_from_user(con_buf, buf, this_round);
645 console_lock();
646
647 if (ret) {
648 this_round -= ret;
649 if (!this_round) {
650 /* Abort loop if no data were copied. Otherwise
651 * fail with -EFAULT.
652 */
653 if (written)
654 break;
655 ret = -EFAULT;
656 goto unlock_out;
657 }
658 }
659
660 /* The vcs_size might have changed while we slept to grab
661 * the user buffer, so recheck.
662 * Return data written up to now on failure.
663 */
664 size = vcs_size(vc, attr, false);
665 if (size < 0) {
666 if (written)
667 break;
668 ret = size;
669 goto unlock_out;
670 }
671 if (pos >= size)
672 break;
673 if (this_round > size - pos)
674 this_round = size - pos;
675
676 /* OK, now actually push the write to the console
677 * under the lock using the local kernel buffer.
678 */
679
680 if (attr)
681 org = vcs_write_buf(vc, con_buf, pos, this_round,
682 viewed, &org0);
683 else
684 org = vcs_write_buf_noattr(vc, con_buf, pos, this_round,
685 viewed, &org0);
686
687 count -= this_round;
688 written += this_round;
689 buf += this_round;
690 pos += this_round;
691 if (org)
692 update_region(vc, (unsigned long)(org0), org - org0);
693 }
694 *ppos += written;
695 ret = written;
696 if (written)
697 vcs_scr_updated(vc);
698
699unlock_out:
700 console_unlock();
701 free_page((unsigned long) con_buf);
702 return ret;
703}
704
705static __poll_t
706vcs_poll(struct file *file, poll_table *wait)
707{
708 struct vcs_poll_data *poll = vcs_poll_data_get(file);
709 __poll_t ret = DEFAULT_POLLMASK|EPOLLERR;
710
711 if (poll) {
712 poll_wait(file, &poll->waitq, wait);
713 switch (poll->event) {
714 case VT_UPDATE:
715 ret = DEFAULT_POLLMASK|EPOLLPRI;
716 break;
717 case VT_DEALLOCATE:
718 ret = DEFAULT_POLLMASK|EPOLLHUP|EPOLLERR;
719 break;
720 case 0:
721 ret = DEFAULT_POLLMASK;
722 break;
723 }
724 }
725 return ret;
726}
727
728static int
729vcs_fasync(int fd, struct file *file, int on)
730{
731 struct vcs_poll_data *poll = file->private_data;
732
733 if (!poll) {
734 /* don't allocate anything if all we want is disable fasync */
735 if (!on)
736 return 0;
737 poll = vcs_poll_data_get(file);
738 if (!poll)
739 return -ENOMEM;
740 }
741
742 return fasync_helper(fd, file, on, &poll->fasync);
743}
744
745static int
746vcs_open(struct inode *inode, struct file *filp)
747{
748 unsigned int currcons = console(inode);
749 bool attr = use_attributes(inode);
750 bool uni_mode = use_unicode(inode);
751 int ret = 0;
752
753 /* we currently don't support attributes in unicode mode */
754 if (attr && uni_mode)
755 return -EOPNOTSUPP;
756
757 console_lock();
758 if(currcons && !vc_cons_allocated(currcons-1))
759 ret = -ENXIO;
760 console_unlock();
761 return ret;
762}
763
764static int vcs_release(struct inode *inode, struct file *file)
765{
766 struct vcs_poll_data *poll = file->private_data;
767
768 if (poll)
769 vcs_poll_data_free(poll);
770 return 0;
771}
772
773static const struct file_operations vcs_fops = {
774 .llseek = vcs_lseek,
775 .read = vcs_read,
776 .write = vcs_write,
777 .poll = vcs_poll,
778 .fasync = vcs_fasync,
779 .open = vcs_open,
780 .release = vcs_release,
781};
782
783static struct class *vc_class;
784
785void vcs_make_sysfs(int index)
786{
787 device_create(vc_class, NULL, MKDEV(VCS_MAJOR, index + 1), NULL,
788 "vcs%u", index + 1);
789 device_create(vc_class, NULL, MKDEV(VCS_MAJOR, index + 65), NULL,
790 "vcsu%u", index + 1);
791 device_create(vc_class, NULL, MKDEV(VCS_MAJOR, index + 129), NULL,
792 "vcsa%u", index + 1);
793}
794
795void vcs_remove_sysfs(int index)
796{
797 device_destroy(vc_class, MKDEV(VCS_MAJOR, index + 1));
798 device_destroy(vc_class, MKDEV(VCS_MAJOR, index + 65));
799 device_destroy(vc_class, MKDEV(VCS_MAJOR, index + 129));
800}
801
802int __init vcs_init(void)
803{
804 unsigned int i;
805
806 if (register_chrdev(VCS_MAJOR, "vcs", &vcs_fops))
807 panic("unable to get major %d for vcs device", VCS_MAJOR);
808 vc_class = class_create(THIS_MODULE, "vc");
809
810 device_create(vc_class, NULL, MKDEV(VCS_MAJOR, 0), NULL, "vcs");
811 device_create(vc_class, NULL, MKDEV(VCS_MAJOR, 64), NULL, "vcsu");
812 device_create(vc_class, NULL, MKDEV(VCS_MAJOR, 128), NULL, "vcsa");
813 for (i = 0; i < MIN_NR_CONSOLES; i++)
814 vcs_make_sysfs(i);
815 return 0;
816}
1// SPDX-License-Identifier: GPL-2.0
2/*
3 * Provide access to virtual console memory.
4 * /dev/vcs0: the screen as it is being viewed right now (possibly scrolled)
5 * /dev/vcsN: the screen of /dev/ttyN (1 <= N <= 63)
6 * [minor: N]
7 *
8 * /dev/vcsaN: idem, but including attributes, and prefixed with
9 * the 4 bytes lines,columns,x,y (as screendump used to give).
10 * Attribute/character pair is in native endianity.
11 * [minor: N+128]
12 *
13 * This replaces screendump and part of selection, so that the system
14 * administrator can control access using file system permissions.
15 *
16 * aeb@cwi.nl - efter Friedas begravelse - 950211
17 *
18 * machek@k332.feld.cvut.cz - modified not to send characters to wrong console
19 * - fixed some fatal off-by-one bugs (0-- no longer == -1 -> looping and looping and looping...)
20 * - making it shorter - scr_readw are macros which expand in PRETTY long code
21 */
22
23#include <linux/kernel.h>
24#include <linux/major.h>
25#include <linux/errno.h>
26#include <linux/export.h>
27#include <linux/tty.h>
28#include <linux/interrupt.h>
29#include <linux/mm.h>
30#include <linux/init.h>
31#include <linux/vt_kern.h>
32#include <linux/selection.h>
33#include <linux/kbd_kern.h>
34#include <linux/console.h>
35#include <linux/device.h>
36#include <linux/sched.h>
37#include <linux/fs.h>
38#include <linux/poll.h>
39#include <linux/signal.h>
40#include <linux/slab.h>
41#include <linux/notifier.h>
42
43#include <linux/uaccess.h>
44#include <asm/byteorder.h>
45#include <asm/unaligned.h>
46
47#undef attr
48#undef org
49#undef addr
50#define HEADER_SIZE 4
51
52#define CON_BUF_SIZE (CONFIG_BASE_SMALL ? 256 : PAGE_SIZE)
53
54struct vcs_poll_data {
55 struct notifier_block notifier;
56 unsigned int cons_num;
57 bool seen_last_update;
58 wait_queue_head_t waitq;
59 struct fasync_struct *fasync;
60};
61
62static int
63vcs_notifier(struct notifier_block *nb, unsigned long code, void *_param)
64{
65 struct vt_notifier_param *param = _param;
66 struct vc_data *vc = param->vc;
67 struct vcs_poll_data *poll =
68 container_of(nb, struct vcs_poll_data, notifier);
69 int currcons = poll->cons_num;
70
71 if (code != VT_UPDATE)
72 return NOTIFY_DONE;
73
74 if (currcons == 0)
75 currcons = fg_console;
76 else
77 currcons--;
78 if (currcons != vc->vc_num)
79 return NOTIFY_DONE;
80
81 poll->seen_last_update = false;
82 wake_up_interruptible(&poll->waitq);
83 kill_fasync(&poll->fasync, SIGIO, POLL_IN);
84 return NOTIFY_OK;
85}
86
87static void
88vcs_poll_data_free(struct vcs_poll_data *poll)
89{
90 unregister_vt_notifier(&poll->notifier);
91 kfree(poll);
92}
93
94static struct vcs_poll_data *
95vcs_poll_data_get(struct file *file)
96{
97 struct vcs_poll_data *poll = file->private_data, *kill = NULL;
98
99 if (poll)
100 return poll;
101
102 poll = kzalloc(sizeof(*poll), GFP_KERNEL);
103 if (!poll)
104 return NULL;
105 poll->cons_num = iminor(file_inode(file)) & 127;
106 init_waitqueue_head(&poll->waitq);
107 poll->notifier.notifier_call = vcs_notifier;
108 if (register_vt_notifier(&poll->notifier) != 0) {
109 kfree(poll);
110 return NULL;
111 }
112
113 /*
114 * This code may be called either through ->poll() or ->fasync().
115 * If we have two threads using the same file descriptor, they could
116 * both enter this function, both notice that the structure hasn't
117 * been allocated yet and go ahead allocating it in parallel, but
118 * only one of them must survive and be shared otherwise we'd leak
119 * memory with a dangling notifier callback.
120 */
121 spin_lock(&file->f_lock);
122 if (!file->private_data) {
123 file->private_data = poll;
124 } else {
125 /* someone else raced ahead of us */
126 kill = poll;
127 poll = file->private_data;
128 }
129 spin_unlock(&file->f_lock);
130 if (kill)
131 vcs_poll_data_free(kill);
132
133 return poll;
134}
135
136/*
137 * Returns VC for inode.
138 * Must be called with console_lock.
139 */
140static struct vc_data*
141vcs_vc(struct inode *inode, int *viewed)
142{
143 unsigned int currcons = iminor(inode) & 127;
144
145 WARN_CONSOLE_UNLOCKED();
146
147 if (currcons == 0) {
148 currcons = fg_console;
149 if (viewed)
150 *viewed = 1;
151 } else {
152 currcons--;
153 if (viewed)
154 *viewed = 0;
155 }
156 return vc_cons[currcons].d;
157}
158
159/*
160 * Returns size for VC carried by inode.
161 * Must be called with console_lock.
162 */
163static int
164vcs_size(struct inode *inode)
165{
166 int size;
167 int minor = iminor(inode);
168 struct vc_data *vc;
169
170 WARN_CONSOLE_UNLOCKED();
171
172 vc = vcs_vc(inode, NULL);
173 if (!vc)
174 return -ENXIO;
175
176 size = vc->vc_rows * vc->vc_cols;
177
178 if (minor & 128)
179 size = 2*size + HEADER_SIZE;
180 return size;
181}
182
183static loff_t vcs_lseek(struct file *file, loff_t offset, int orig)
184{
185 int size;
186
187 console_lock();
188 size = vcs_size(file_inode(file));
189 console_unlock();
190 if (size < 0)
191 return size;
192 return fixed_size_llseek(file, offset, orig, size);
193}
194
195
196static ssize_t
197vcs_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)
198{
199 struct inode *inode = file_inode(file);
200 unsigned int currcons = iminor(inode);
201 struct vc_data *vc;
202 struct vcs_poll_data *poll;
203 long pos;
204 long attr, read;
205 int col, maxcol, viewed;
206 unsigned short *org = NULL;
207 ssize_t ret;
208 char *con_buf;
209
210 con_buf = (char *) __get_free_page(GFP_KERNEL);
211 if (!con_buf)
212 return -ENOMEM;
213
214 pos = *ppos;
215
216 /* Select the proper current console and verify
217 * sanity of the situation under the console lock.
218 */
219 console_lock();
220
221 attr = (currcons & 128);
222 ret = -ENXIO;
223 vc = vcs_vc(inode, &viewed);
224 if (!vc)
225 goto unlock_out;
226
227 ret = -EINVAL;
228 if (pos < 0)
229 goto unlock_out;
230 poll = file->private_data;
231 if (count && poll)
232 poll->seen_last_update = true;
233 read = 0;
234 ret = 0;
235 while (count) {
236 char *con_buf0, *con_buf_start;
237 long this_round, size;
238 ssize_t orig_count;
239 long p = pos;
240
241 /* Check whether we are above size each round,
242 * as copy_to_user at the end of this loop
243 * could sleep.
244 */
245 size = vcs_size(inode);
246 if (size < 0) {
247 if (read)
248 break;
249 ret = size;
250 goto unlock_out;
251 }
252 if (pos >= size)
253 break;
254 if (count > size - pos)
255 count = size - pos;
256
257 this_round = count;
258 if (this_round > CON_BUF_SIZE)
259 this_round = CON_BUF_SIZE;
260
261 /* Perform the whole read into the local con_buf.
262 * Then we can drop the console spinlock and safely
263 * attempt to move it to userspace.
264 */
265
266 con_buf_start = con_buf0 = con_buf;
267 orig_count = this_round;
268 maxcol = vc->vc_cols;
269 if (!attr) {
270 org = screen_pos(vc, p, viewed);
271 col = p % maxcol;
272 p += maxcol - col;
273 while (this_round-- > 0) {
274 *con_buf0++ = (vcs_scr_readw(vc, org++) & 0xff);
275 if (++col == maxcol) {
276 org = screen_pos(vc, p, viewed);
277 col = 0;
278 p += maxcol;
279 }
280 }
281 } else {
282 if (p < HEADER_SIZE) {
283 size_t tmp_count;
284
285 con_buf0[0] = (char)vc->vc_rows;
286 con_buf0[1] = (char)vc->vc_cols;
287 getconsxy(vc, con_buf0 + 2);
288
289 con_buf_start += p;
290 this_round += p;
291 if (this_round > CON_BUF_SIZE) {
292 this_round = CON_BUF_SIZE;
293 orig_count = this_round - p;
294 }
295
296 tmp_count = HEADER_SIZE;
297 if (tmp_count > this_round)
298 tmp_count = this_round;
299
300 /* Advance state pointers and move on. */
301 this_round -= tmp_count;
302 p = HEADER_SIZE;
303 con_buf0 = con_buf + HEADER_SIZE;
304 /* If this_round >= 0, then p is even... */
305 } else if (p & 1) {
306 /* Skip first byte for output if start address is odd
307 * Update region sizes up/down depending on free
308 * space in buffer.
309 */
310 con_buf_start++;
311 if (this_round < CON_BUF_SIZE)
312 this_round++;
313 else
314 orig_count--;
315 }
316 if (this_round > 0) {
317 unsigned short *tmp_buf = (unsigned short *)con_buf0;
318
319 p -= HEADER_SIZE;
320 p /= 2;
321 col = p % maxcol;
322
323 org = screen_pos(vc, p, viewed);
324 p += maxcol - col;
325
326 /* Buffer has even length, so we can always copy
327 * character + attribute. We do not copy last byte
328 * to userspace if this_round is odd.
329 */
330 this_round = (this_round + 1) >> 1;
331
332 while (this_round) {
333 *tmp_buf++ = vcs_scr_readw(vc, org++);
334 this_round --;
335 if (++col == maxcol) {
336 org = screen_pos(vc, p, viewed);
337 col = 0;
338 p += maxcol;
339 }
340 }
341 }
342 }
343
344 /* Finally, release the console semaphore while we push
345 * all the data to userspace from our temporary buffer.
346 *
347 * AKPM: Even though it's a semaphore, we should drop it because
348 * the pagefault handling code may want to call printk().
349 */
350
351 console_unlock();
352 ret = copy_to_user(buf, con_buf_start, orig_count);
353 console_lock();
354
355 if (ret) {
356 read += (orig_count - ret);
357 ret = -EFAULT;
358 break;
359 }
360 buf += orig_count;
361 pos += orig_count;
362 read += orig_count;
363 count -= orig_count;
364 }
365 *ppos += read;
366 if (read)
367 ret = read;
368unlock_out:
369 console_unlock();
370 free_page((unsigned long) con_buf);
371 return ret;
372}
373
374static ssize_t
375vcs_write(struct file *file, const char __user *buf, size_t count, loff_t *ppos)
376{
377 struct inode *inode = file_inode(file);
378 unsigned int currcons = iminor(inode);
379 struct vc_data *vc;
380 long pos;
381 long attr, size, written;
382 char *con_buf0;
383 int col, maxcol, viewed;
384 u16 *org0 = NULL, *org = NULL;
385 size_t ret;
386 char *con_buf;
387
388 con_buf = (char *) __get_free_page(GFP_KERNEL);
389 if (!con_buf)
390 return -ENOMEM;
391
392 pos = *ppos;
393
394 /* Select the proper current console and verify
395 * sanity of the situation under the console lock.
396 */
397 console_lock();
398
399 attr = (currcons & 128);
400 ret = -ENXIO;
401 vc = vcs_vc(inode, &viewed);
402 if (!vc)
403 goto unlock_out;
404
405 size = vcs_size(inode);
406 ret = -EINVAL;
407 if (pos < 0 || pos > size)
408 goto unlock_out;
409 if (count > size - pos)
410 count = size - pos;
411 written = 0;
412 while (count) {
413 long this_round = count;
414 size_t orig_count;
415 long p;
416
417 if (this_round > CON_BUF_SIZE)
418 this_round = CON_BUF_SIZE;
419
420 /* Temporarily drop the console lock so that we can read
421 * in the write data from userspace safely.
422 */
423 console_unlock();
424 ret = copy_from_user(con_buf, buf, this_round);
425 console_lock();
426
427 if (ret) {
428 this_round -= ret;
429 if (!this_round) {
430 /* Abort loop if no data were copied. Otherwise
431 * fail with -EFAULT.
432 */
433 if (written)
434 break;
435 ret = -EFAULT;
436 goto unlock_out;
437 }
438 }
439
440 /* The vcs_size might have changed while we slept to grab
441 * the user buffer, so recheck.
442 * Return data written up to now on failure.
443 */
444 size = vcs_size(inode);
445 if (size < 0) {
446 if (written)
447 break;
448 ret = size;
449 goto unlock_out;
450 }
451 if (pos >= size)
452 break;
453 if (this_round > size - pos)
454 this_round = size - pos;
455
456 /* OK, now actually push the write to the console
457 * under the lock using the local kernel buffer.
458 */
459
460 con_buf0 = con_buf;
461 orig_count = this_round;
462 maxcol = vc->vc_cols;
463 p = pos;
464 if (!attr) {
465 org0 = org = screen_pos(vc, p, viewed);
466 col = p % maxcol;
467 p += maxcol - col;
468
469 while (this_round > 0) {
470 unsigned char c = *con_buf0++;
471
472 this_round--;
473 vcs_scr_writew(vc,
474 (vcs_scr_readw(vc, org) & 0xff00) | c, org);
475 org++;
476 if (++col == maxcol) {
477 org = screen_pos(vc, p, viewed);
478 col = 0;
479 p += maxcol;
480 }
481 }
482 } else {
483 if (p < HEADER_SIZE) {
484 char header[HEADER_SIZE];
485
486 getconsxy(vc, header + 2);
487 while (p < HEADER_SIZE && this_round > 0) {
488 this_round--;
489 header[p++] = *con_buf0++;
490 }
491 if (!viewed)
492 putconsxy(vc, header + 2);
493 }
494 p -= HEADER_SIZE;
495 col = (p/2) % maxcol;
496 if (this_round > 0) {
497 org0 = org = screen_pos(vc, p/2, viewed);
498 if ((p & 1) && this_round > 0) {
499 char c;
500
501 this_round--;
502 c = *con_buf0++;
503#ifdef __BIG_ENDIAN
504 vcs_scr_writew(vc, c |
505 (vcs_scr_readw(vc, org) & 0xff00), org);
506#else
507 vcs_scr_writew(vc, (c << 8) |
508 (vcs_scr_readw(vc, org) & 0xff), org);
509#endif
510 org++;
511 p++;
512 if (++col == maxcol) {
513 org = screen_pos(vc, p/2, viewed);
514 col = 0;
515 }
516 }
517 p /= 2;
518 p += maxcol - col;
519 }
520 while (this_round > 1) {
521 unsigned short w;
522
523 w = get_unaligned(((unsigned short *)con_buf0));
524 vcs_scr_writew(vc, w, org++);
525 con_buf0 += 2;
526 this_round -= 2;
527 if (++col == maxcol) {
528 org = screen_pos(vc, p, viewed);
529 col = 0;
530 p += maxcol;
531 }
532 }
533 if (this_round > 0) {
534 unsigned char c;
535
536 c = *con_buf0++;
537#ifdef __BIG_ENDIAN
538 vcs_scr_writew(vc, (vcs_scr_readw(vc, org) & 0xff) | (c << 8), org);
539#else
540 vcs_scr_writew(vc, (vcs_scr_readw(vc, org) & 0xff00) | c, org);
541#endif
542 }
543 }
544 count -= orig_count;
545 written += orig_count;
546 buf += orig_count;
547 pos += orig_count;
548 if (org0)
549 update_region(vc, (unsigned long)(org0), org - org0);
550 }
551 *ppos += written;
552 ret = written;
553 if (written)
554 vcs_scr_updated(vc);
555
556unlock_out:
557 console_unlock();
558 free_page((unsigned long) con_buf);
559 return ret;
560}
561
562static __poll_t
563vcs_poll(struct file *file, poll_table *wait)
564{
565 struct vcs_poll_data *poll = vcs_poll_data_get(file);
566 __poll_t ret = DEFAULT_POLLMASK|EPOLLERR|EPOLLPRI;
567
568 if (poll) {
569 poll_wait(file, &poll->waitq, wait);
570 if (poll->seen_last_update)
571 ret = DEFAULT_POLLMASK;
572 }
573 return ret;
574}
575
576static int
577vcs_fasync(int fd, struct file *file, int on)
578{
579 struct vcs_poll_data *poll = file->private_data;
580
581 if (!poll) {
582 /* don't allocate anything if all we want is disable fasync */
583 if (!on)
584 return 0;
585 poll = vcs_poll_data_get(file);
586 if (!poll)
587 return -ENOMEM;
588 }
589
590 return fasync_helper(fd, file, on, &poll->fasync);
591}
592
593static int
594vcs_open(struct inode *inode, struct file *filp)
595{
596 unsigned int currcons = iminor(inode) & 127;
597 int ret = 0;
598
599 console_lock();
600 if(currcons && !vc_cons_allocated(currcons-1))
601 ret = -ENXIO;
602 console_unlock();
603 return ret;
604}
605
606static int vcs_release(struct inode *inode, struct file *file)
607{
608 struct vcs_poll_data *poll = file->private_data;
609
610 if (poll)
611 vcs_poll_data_free(poll);
612 return 0;
613}
614
615static const struct file_operations vcs_fops = {
616 .llseek = vcs_lseek,
617 .read = vcs_read,
618 .write = vcs_write,
619 .poll = vcs_poll,
620 .fasync = vcs_fasync,
621 .open = vcs_open,
622 .release = vcs_release,
623};
624
625static struct class *vc_class;
626
627void vcs_make_sysfs(int index)
628{
629 device_create(vc_class, NULL, MKDEV(VCS_MAJOR, index + 1), NULL,
630 "vcs%u", index + 1);
631 device_create(vc_class, NULL, MKDEV(VCS_MAJOR, index + 129), NULL,
632 "vcsa%u", index + 1);
633}
634
635void vcs_remove_sysfs(int index)
636{
637 device_destroy(vc_class, MKDEV(VCS_MAJOR, index + 1));
638 device_destroy(vc_class, MKDEV(VCS_MAJOR, index + 129));
639}
640
641int __init vcs_init(void)
642{
643 unsigned int i;
644
645 if (register_chrdev(VCS_MAJOR, "vcs", &vcs_fops))
646 panic("unable to get major %d for vcs device", VCS_MAJOR);
647 vc_class = class_create(THIS_MODULE, "vc");
648
649 device_create(vc_class, NULL, MKDEV(VCS_MAJOR, 0), NULL, "vcs");
650 device_create(vc_class, NULL, MKDEV(VCS_MAJOR, 128), NULL, "vcsa");
651 for (i = 0; i < MIN_NR_CONSOLES; i++)
652 vcs_make_sysfs(i);
653 return 0;
654}