Loading...
1// SPDX-License-Identifier: GPL-2.0
2/*
3 * Provide access to virtual console memory.
4 * /dev/vcs: the screen as it is being viewed right now (possibly scrolled)
5 * /dev/vcsN: the screen of /dev/ttyN (1 <= N <= 63)
6 * [minor: N]
7 *
8 * /dev/vcsaN: idem, but including attributes, and prefixed with
9 * the 4 bytes lines,columns,x,y (as screendump used to give).
10 * Attribute/character pair is in native endianity.
11 * [minor: N+128]
12 *
13 * /dev/vcsuN: similar to /dev/vcsaN but using 4-byte unicode values
14 * instead of 1-byte screen glyph values.
15 * [minor: N+64]
16 *
17 * /dev/vcsuaN: same idea as /dev/vcsaN for unicode (not yet implemented).
18 *
19 * This replaces screendump and part of selection, so that the system
20 * administrator can control access using file system permissions.
21 *
22 * aeb@cwi.nl - efter Friedas begravelse - 950211
23 *
24 * machek@k332.feld.cvut.cz - modified not to send characters to wrong console
25 * - fixed some fatal off-by-one bugs (0-- no longer == -1 -> looping and looping and looping...)
26 * - making it shorter - scr_readw are macros which expand in PRETTY long code
27 */
28
29#include <linux/kernel.h>
30#include <linux/major.h>
31#include <linux/errno.h>
32#include <linux/export.h>
33#include <linux/tty.h>
34#include <linux/interrupt.h>
35#include <linux/mm.h>
36#include <linux/init.h>
37#include <linux/vt_kern.h>
38#include <linux/selection.h>
39#include <linux/kbd_kern.h>
40#include <linux/console.h>
41#include <linux/device.h>
42#include <linux/sched.h>
43#include <linux/fs.h>
44#include <linux/poll.h>
45#include <linux/signal.h>
46#include <linux/slab.h>
47#include <linux/notifier.h>
48
49#include <linux/uaccess.h>
50#include <asm/byteorder.h>
51#include <asm/unaligned.h>
52
53#define HEADER_SIZE 4u
54#define CON_BUF_SIZE (CONFIG_BASE_SMALL ? 256 : PAGE_SIZE)
55
56/*
57 * Our minor space:
58 *
59 * 0 ... 63 glyph mode without attributes
60 * 64 ... 127 unicode mode without attributes
61 * 128 ... 191 glyph mode with attributes
62 * 192 ... 255 unused (reserved for unicode with attributes)
63 *
64 * This relies on MAX_NR_CONSOLES being <= 63, meaning 63 actual consoles
65 * with minors 0, 64, 128 and 192 being proxies for the foreground console.
66 */
67#if MAX_NR_CONSOLES > 63
68#warning "/dev/vcs* devices may not accommodate more than 63 consoles"
69#endif
70
71#define console(inode) (iminor(inode) & 63)
72#define use_unicode(inode) (iminor(inode) & 64)
73#define use_attributes(inode) (iminor(inode) & 128)
74
75
76struct vcs_poll_data {
77 struct notifier_block notifier;
78 unsigned int cons_num;
79 int event;
80 wait_queue_head_t waitq;
81 struct fasync_struct *fasync;
82};
83
84static int
85vcs_notifier(struct notifier_block *nb, unsigned long code, void *_param)
86{
87 struct vt_notifier_param *param = _param;
88 struct vc_data *vc = param->vc;
89 struct vcs_poll_data *poll =
90 container_of(nb, struct vcs_poll_data, notifier);
91 int currcons = poll->cons_num;
92 int fa_band;
93
94 switch (code) {
95 case VT_UPDATE:
96 fa_band = POLL_PRI;
97 break;
98 case VT_DEALLOCATE:
99 fa_band = POLL_HUP;
100 break;
101 default:
102 return NOTIFY_DONE;
103 }
104
105 if (currcons == 0)
106 currcons = fg_console;
107 else
108 currcons--;
109 if (currcons != vc->vc_num)
110 return NOTIFY_DONE;
111
112 poll->event = code;
113 wake_up_interruptible(&poll->waitq);
114 kill_fasync(&poll->fasync, SIGIO, fa_band);
115 return NOTIFY_OK;
116}
117
118static void
119vcs_poll_data_free(struct vcs_poll_data *poll)
120{
121 unregister_vt_notifier(&poll->notifier);
122 kfree(poll);
123}
124
125static struct vcs_poll_data *
126vcs_poll_data_get(struct file *file)
127{
128 struct vcs_poll_data *poll = file->private_data, *kill = NULL;
129
130 if (poll)
131 return poll;
132
133 poll = kzalloc(sizeof(*poll), GFP_KERNEL);
134 if (!poll)
135 return NULL;
136 poll->cons_num = console(file_inode(file));
137 init_waitqueue_head(&poll->waitq);
138 poll->notifier.notifier_call = vcs_notifier;
139 /*
140 * In order not to lose any update event, we must pretend one might
141 * have occurred before we have a chance to register our notifier.
142 * This is also how user space has come to detect which kernels
143 * support POLLPRI on /dev/vcs* devices i.e. using poll() with
144 * POLLPRI and a zero timeout.
145 */
146 poll->event = VT_UPDATE;
147
148 if (register_vt_notifier(&poll->notifier) != 0) {
149 kfree(poll);
150 return NULL;
151 }
152
153 /*
154 * This code may be called either through ->poll() or ->fasync().
155 * If we have two threads using the same file descriptor, they could
156 * both enter this function, both notice that the structure hasn't
157 * been allocated yet and go ahead allocating it in parallel, but
158 * only one of them must survive and be shared otherwise we'd leak
159 * memory with a dangling notifier callback.
160 */
161 spin_lock(&file->f_lock);
162 if (!file->private_data) {
163 file->private_data = poll;
164 } else {
165 /* someone else raced ahead of us */
166 kill = poll;
167 poll = file->private_data;
168 }
169 spin_unlock(&file->f_lock);
170 if (kill)
171 vcs_poll_data_free(kill);
172
173 return poll;
174}
175
176/**
177 * vcs_vc - return VC for @inode
178 * @inode: inode for which to return a VC
179 * @viewed: returns whether this console is currently foreground (viewed)
180 *
181 * Must be called with console_lock.
182 */
183static struct vc_data *vcs_vc(struct inode *inode, bool *viewed)
184{
185 unsigned int currcons = console(inode);
186
187 WARN_CONSOLE_UNLOCKED();
188
189 if (currcons == 0) {
190 currcons = fg_console;
191 if (viewed)
192 *viewed = true;
193 } else {
194 currcons--;
195 if (viewed)
196 *viewed = false;
197 }
198 return vc_cons[currcons].d;
199}
200
201/**
202 * vcs_size - return size for a VC in @vc
203 * @vc: which VC
204 * @attr: does it use attributes?
205 * @unicode: is it unicode?
206 *
207 * Must be called with console_lock.
208 */
209static int vcs_size(const struct vc_data *vc, bool attr, bool unicode)
210{
211 int size;
212
213 WARN_CONSOLE_UNLOCKED();
214
215 size = vc->vc_rows * vc->vc_cols;
216
217 if (attr) {
218 if (unicode)
219 return -EOPNOTSUPP;
220
221 size = 2 * size + HEADER_SIZE;
222 } else if (unicode)
223 size *= 4;
224
225 return size;
226}
227
228static loff_t vcs_lseek(struct file *file, loff_t offset, int orig)
229{
230 struct inode *inode = file_inode(file);
231 struct vc_data *vc;
232 int size;
233
234 console_lock();
235 vc = vcs_vc(inode, NULL);
236 if (!vc) {
237 console_unlock();
238 return -ENXIO;
239 }
240
241 size = vcs_size(vc, use_attributes(inode), use_unicode(inode));
242 console_unlock();
243 if (size < 0)
244 return size;
245 return fixed_size_llseek(file, offset, orig, size);
246}
247
248static int vcs_read_buf_uni(struct vc_data *vc, char *con_buf,
249 unsigned int pos, unsigned int count, bool viewed)
250{
251 unsigned int nr, row, col, maxcol = vc->vc_cols;
252 int ret;
253
254 ret = vc_uniscr_check(vc);
255 if (ret)
256 return ret;
257
258 pos /= 4;
259 row = pos / maxcol;
260 col = pos % maxcol;
261 nr = maxcol - col;
262 do {
263 if (nr > count / 4)
264 nr = count / 4;
265 vc_uniscr_copy_line(vc, con_buf, viewed, row, col, nr);
266 con_buf += nr * 4;
267 count -= nr * 4;
268 row++;
269 col = 0;
270 nr = maxcol;
271 } while (count);
272
273 return 0;
274}
275
276static void vcs_read_buf_noattr(const struct vc_data *vc, char *con_buf,
277 unsigned int pos, unsigned int count, bool viewed)
278{
279 u16 *org;
280 unsigned int col, maxcol = vc->vc_cols;
281
282 org = screen_pos(vc, pos, viewed);
283 col = pos % maxcol;
284 pos += maxcol - col;
285
286 while (count-- > 0) {
287 *con_buf++ = (vcs_scr_readw(vc, org++) & 0xff);
288 if (++col == maxcol) {
289 org = screen_pos(vc, pos, viewed);
290 col = 0;
291 pos += maxcol;
292 }
293 }
294}
295
296static unsigned int vcs_read_buf(const struct vc_data *vc, char *con_buf,
297 unsigned int pos, unsigned int count, bool viewed,
298 unsigned int *skip)
299{
300 u16 *org, *con_buf16;
301 unsigned int col, maxcol = vc->vc_cols;
302 unsigned int filled = count;
303
304 if (pos < HEADER_SIZE) {
305 /* clamp header values if they don't fit */
306 con_buf[0] = min(vc->vc_rows, 0xFFu);
307 con_buf[1] = min(vc->vc_cols, 0xFFu);
308 getconsxy(vc, con_buf + 2);
309
310 *skip += pos;
311 count += pos;
312 if (count > CON_BUF_SIZE) {
313 count = CON_BUF_SIZE;
314 filled = count - pos;
315 }
316
317 /* Advance state pointers and move on. */
318 count -= min(HEADER_SIZE, count);
319 pos = HEADER_SIZE;
320 con_buf += HEADER_SIZE;
321 /* If count >= 0, then pos is even... */
322 } else if (pos & 1) {
323 /*
324 * Skip first byte for output if start address is odd. Update
325 * region sizes up/down depending on free space in buffer.
326 */
327 (*skip)++;
328 if (count < CON_BUF_SIZE)
329 count++;
330 else
331 filled--;
332 }
333
334 if (!count)
335 return filled;
336
337 pos -= HEADER_SIZE;
338 pos /= 2;
339 col = pos % maxcol;
340
341 org = screen_pos(vc, pos, viewed);
342 pos += maxcol - col;
343
344 /*
345 * Buffer has even length, so we can always copy character + attribute.
346 * We do not copy last byte to userspace if count is odd.
347 */
348 count = (count + 1) / 2;
349 con_buf16 = (u16 *)con_buf;
350
351 while (count) {
352 *con_buf16++ = vcs_scr_readw(vc, org++);
353 count--;
354 if (++col == maxcol) {
355 org = screen_pos(vc, pos, viewed);
356 col = 0;
357 pos += maxcol;
358 }
359 }
360
361 return filled;
362}
363
364static ssize_t
365vcs_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)
366{
367 struct inode *inode = file_inode(file);
368 struct vc_data *vc;
369 struct vcs_poll_data *poll;
370 unsigned int read;
371 ssize_t ret;
372 char *con_buf;
373 loff_t pos;
374 bool viewed, attr, uni_mode;
375
376 con_buf = (char *) __get_free_page(GFP_KERNEL);
377 if (!con_buf)
378 return -ENOMEM;
379
380 pos = *ppos;
381
382 /* Select the proper current console and verify
383 * sanity of the situation under the console lock.
384 */
385 console_lock();
386
387 uni_mode = use_unicode(inode);
388 attr = use_attributes(inode);
389
390 ret = -EINVAL;
391 if (pos < 0)
392 goto unlock_out;
393 /* we enforce 32-bit alignment for pos and count in unicode mode */
394 if (uni_mode && (pos | count) & 3)
395 goto unlock_out;
396
397 poll = file->private_data;
398 if (count && poll)
399 poll->event = 0;
400 read = 0;
401 ret = 0;
402 while (count) {
403 unsigned int this_round, skip = 0;
404 int size;
405
406 vc = vcs_vc(inode, &viewed);
407 if (!vc) {
408 ret = -ENXIO;
409 break;
410 }
411
412 /* Check whether we are above size each round,
413 * as copy_to_user at the end of this loop
414 * could sleep.
415 */
416 size = vcs_size(vc, attr, uni_mode);
417 if (size < 0) {
418 ret = size;
419 break;
420 }
421 if (pos >= size)
422 break;
423 if (count > size - pos)
424 count = size - pos;
425
426 this_round = count;
427 if (this_round > CON_BUF_SIZE)
428 this_round = CON_BUF_SIZE;
429
430 /* Perform the whole read into the local con_buf.
431 * Then we can drop the console spinlock and safely
432 * attempt to move it to userspace.
433 */
434
435 if (uni_mode) {
436 ret = vcs_read_buf_uni(vc, con_buf, pos, this_round,
437 viewed);
438 if (ret)
439 break;
440 } else if (!attr) {
441 vcs_read_buf_noattr(vc, con_buf, pos, this_round,
442 viewed);
443 } else {
444 this_round = vcs_read_buf(vc, con_buf, pos, this_round,
445 viewed, &skip);
446 }
447
448 /* Finally, release the console semaphore while we push
449 * all the data to userspace from our temporary buffer.
450 *
451 * AKPM: Even though it's a semaphore, we should drop it because
452 * the pagefault handling code may want to call printk().
453 */
454
455 console_unlock();
456 ret = copy_to_user(buf, con_buf + skip, this_round);
457 console_lock();
458
459 if (ret) {
460 read += this_round - ret;
461 ret = -EFAULT;
462 break;
463 }
464 buf += this_round;
465 pos += this_round;
466 read += this_round;
467 count -= this_round;
468 }
469 *ppos += read;
470 if (read)
471 ret = read;
472unlock_out:
473 console_unlock();
474 free_page((unsigned long) con_buf);
475 return ret;
476}
477
478static u16 *vcs_write_buf_noattr(struct vc_data *vc, const char *con_buf,
479 unsigned int pos, unsigned int count, bool viewed, u16 **org0)
480{
481 u16 *org;
482 unsigned int col, maxcol = vc->vc_cols;
483
484 *org0 = org = screen_pos(vc, pos, viewed);
485 col = pos % maxcol;
486 pos += maxcol - col;
487
488 while (count > 0) {
489 unsigned char c = *con_buf++;
490
491 count--;
492 vcs_scr_writew(vc,
493 (vcs_scr_readw(vc, org) & 0xff00) | c, org);
494 org++;
495 if (++col == maxcol) {
496 org = screen_pos(vc, pos, viewed);
497 col = 0;
498 pos += maxcol;
499 }
500 }
501
502 return org;
503}
504
505/*
506 * Compilers (gcc 10) are unable to optimize the swap in cpu_to_le16. So do it
507 * the poor man way.
508 */
509static inline u16 vc_compile_le16(u8 hi, u8 lo)
510{
511#ifdef __BIG_ENDIAN
512 return (lo << 8u) | hi;
513#else
514 return (hi << 8u) | lo;
515#endif
516}
517
518static u16 *vcs_write_buf(struct vc_data *vc, const char *con_buf,
519 unsigned int pos, unsigned int count, bool viewed, u16 **org0)
520{
521 u16 *org;
522 unsigned int col, maxcol = vc->vc_cols;
523 unsigned char c;
524
525 /* header */
526 if (pos < HEADER_SIZE) {
527 char header[HEADER_SIZE];
528
529 getconsxy(vc, header + 2);
530 while (pos < HEADER_SIZE && count > 0) {
531 count--;
532 header[pos++] = *con_buf++;
533 }
534 if (!viewed)
535 putconsxy(vc, header + 2);
536 }
537
538 if (!count)
539 return NULL;
540
541 pos -= HEADER_SIZE;
542 col = (pos/2) % maxcol;
543
544 *org0 = org = screen_pos(vc, pos/2, viewed);
545
546 /* odd pos -- the first single character */
547 if (pos & 1) {
548 count--;
549 c = *con_buf++;
550 vcs_scr_writew(vc, vc_compile_le16(c, vcs_scr_readw(vc, org)),
551 org);
552 org++;
553 pos++;
554 if (++col == maxcol) {
555 org = screen_pos(vc, pos/2, viewed);
556 col = 0;
557 }
558 }
559
560 pos /= 2;
561 pos += maxcol - col;
562
563 /* even pos -- handle attr+character pairs */
564 while (count > 1) {
565 unsigned short w;
566
567 w = get_unaligned(((unsigned short *)con_buf));
568 vcs_scr_writew(vc, w, org++);
569 con_buf += 2;
570 count -= 2;
571 if (++col == maxcol) {
572 org = screen_pos(vc, pos, viewed);
573 col = 0;
574 pos += maxcol;
575 }
576 }
577
578 if (!count)
579 return org;
580
581 /* odd pos -- the remaining character */
582 c = *con_buf++;
583 vcs_scr_writew(vc, vc_compile_le16(vcs_scr_readw(vc, org) >> 8, c),
584 org);
585
586 return org;
587}
588
589static ssize_t
590vcs_write(struct file *file, const char __user *buf, size_t count, loff_t *ppos)
591{
592 struct inode *inode = file_inode(file);
593 struct vc_data *vc;
594 char *con_buf;
595 u16 *org0, *org;
596 unsigned int written;
597 int size;
598 ssize_t ret;
599 loff_t pos;
600 bool viewed, attr;
601
602 if (use_unicode(inode))
603 return -EOPNOTSUPP;
604
605 con_buf = (char *) __get_free_page(GFP_KERNEL);
606 if (!con_buf)
607 return -ENOMEM;
608
609 pos = *ppos;
610
611 /* Select the proper current console and verify
612 * sanity of the situation under the console lock.
613 */
614 console_lock();
615
616 attr = use_attributes(inode);
617 ret = -ENXIO;
618 vc = vcs_vc(inode, &viewed);
619 if (!vc)
620 goto unlock_out;
621
622 size = vcs_size(vc, attr, false);
623 if (size < 0) {
624 ret = size;
625 goto unlock_out;
626 }
627 ret = -EINVAL;
628 if (pos < 0 || pos > size)
629 goto unlock_out;
630 if (count > size - pos)
631 count = size - pos;
632 written = 0;
633 while (count) {
634 unsigned int this_round = count;
635
636 if (this_round > CON_BUF_SIZE)
637 this_round = CON_BUF_SIZE;
638
639 /* Temporarily drop the console lock so that we can read
640 * in the write data from userspace safely.
641 */
642 console_unlock();
643 ret = copy_from_user(con_buf, buf, this_round);
644 console_lock();
645
646 if (ret) {
647 this_round -= ret;
648 if (!this_round) {
649 /* Abort loop if no data were copied. Otherwise
650 * fail with -EFAULT.
651 */
652 if (written)
653 break;
654 ret = -EFAULT;
655 goto unlock_out;
656 }
657 }
658
659 /* The vc might have been freed or vcs_size might have changed
660 * while we slept to grab the user buffer, so recheck.
661 * Return data written up to now on failure.
662 */
663 vc = vcs_vc(inode, &viewed);
664 if (!vc) {
665 if (written)
666 break;
667 ret = -ENXIO;
668 goto unlock_out;
669 }
670 size = vcs_size(vc, attr, false);
671 if (size < 0) {
672 if (written)
673 break;
674 ret = size;
675 goto unlock_out;
676 }
677 if (pos >= size)
678 break;
679 if (this_round > size - pos)
680 this_round = size - pos;
681
682 /* OK, now actually push the write to the console
683 * under the lock using the local kernel buffer.
684 */
685
686 if (attr)
687 org = vcs_write_buf(vc, con_buf, pos, this_round,
688 viewed, &org0);
689 else
690 org = vcs_write_buf_noattr(vc, con_buf, pos, this_round,
691 viewed, &org0);
692
693 count -= this_round;
694 written += this_round;
695 buf += this_round;
696 pos += this_round;
697 if (org)
698 update_region(vc, (unsigned long)(org0), org - org0);
699 }
700 *ppos += written;
701 ret = written;
702 if (written)
703 vcs_scr_updated(vc);
704
705unlock_out:
706 console_unlock();
707 free_page((unsigned long) con_buf);
708 return ret;
709}
710
711static __poll_t
712vcs_poll(struct file *file, poll_table *wait)
713{
714 struct vcs_poll_data *poll = vcs_poll_data_get(file);
715 __poll_t ret = DEFAULT_POLLMASK|EPOLLERR;
716
717 if (poll) {
718 poll_wait(file, &poll->waitq, wait);
719 switch (poll->event) {
720 case VT_UPDATE:
721 ret = DEFAULT_POLLMASK|EPOLLPRI;
722 break;
723 case VT_DEALLOCATE:
724 ret = DEFAULT_POLLMASK|EPOLLHUP|EPOLLERR;
725 break;
726 case 0:
727 ret = DEFAULT_POLLMASK;
728 break;
729 }
730 }
731 return ret;
732}
733
734static int
735vcs_fasync(int fd, struct file *file, int on)
736{
737 struct vcs_poll_data *poll = file->private_data;
738
739 if (!poll) {
740 /* don't allocate anything if all we want is disable fasync */
741 if (!on)
742 return 0;
743 poll = vcs_poll_data_get(file);
744 if (!poll)
745 return -ENOMEM;
746 }
747
748 return fasync_helper(fd, file, on, &poll->fasync);
749}
750
751static int
752vcs_open(struct inode *inode, struct file *filp)
753{
754 unsigned int currcons = console(inode);
755 bool attr = use_attributes(inode);
756 bool uni_mode = use_unicode(inode);
757 int ret = 0;
758
759 /* we currently don't support attributes in unicode mode */
760 if (attr && uni_mode)
761 return -EOPNOTSUPP;
762
763 console_lock();
764 if(currcons && !vc_cons_allocated(currcons-1))
765 ret = -ENXIO;
766 console_unlock();
767 return ret;
768}
769
770static int vcs_release(struct inode *inode, struct file *file)
771{
772 struct vcs_poll_data *poll = file->private_data;
773
774 if (poll)
775 vcs_poll_data_free(poll);
776 return 0;
777}
778
779static const struct file_operations vcs_fops = {
780 .llseek = vcs_lseek,
781 .read = vcs_read,
782 .write = vcs_write,
783 .poll = vcs_poll,
784 .fasync = vcs_fasync,
785 .open = vcs_open,
786 .release = vcs_release,
787};
788
789static const struct class vc_class = {
790 .name = "vc",
791};
792
793void vcs_make_sysfs(int index)
794{
795 device_create(&vc_class, NULL, MKDEV(VCS_MAJOR, index + 1), NULL, "vcs%u", index + 1);
796 device_create(&vc_class, NULL, MKDEV(VCS_MAJOR, index + 65), NULL, "vcsu%u", index + 1);
797 device_create(&vc_class, NULL, MKDEV(VCS_MAJOR, index + 129), NULL, "vcsa%u", index + 1);
798}
799
800void vcs_remove_sysfs(int index)
801{
802 device_destroy(&vc_class, MKDEV(VCS_MAJOR, index + 1));
803 device_destroy(&vc_class, MKDEV(VCS_MAJOR, index + 65));
804 device_destroy(&vc_class, MKDEV(VCS_MAJOR, index + 129));
805}
806
807int __init vcs_init(void)
808{
809 unsigned int i;
810
811 if (register_chrdev(VCS_MAJOR, "vcs", &vcs_fops))
812 panic("unable to get major %d for vcs device", VCS_MAJOR);
813 if (class_register(&vc_class))
814 panic("unable to create vc_class");
815
816 device_create(&vc_class, NULL, MKDEV(VCS_MAJOR, 0), NULL, "vcs");
817 device_create(&vc_class, NULL, MKDEV(VCS_MAJOR, 64), NULL, "vcsu");
818 device_create(&vc_class, NULL, MKDEV(VCS_MAJOR, 128), NULL, "vcsa");
819 for (i = 0; i < MIN_NR_CONSOLES; i++)
820 vcs_make_sysfs(i);
821 return 0;
822}
1/*
2 * Provide access to virtual console memory.
3 * /dev/vcs0: the screen as it is being viewed right now (possibly scrolled)
4 * /dev/vcsN: the screen of /dev/ttyN (1 <= N <= 63)
5 * [minor: N]
6 *
7 * /dev/vcsaN: idem, but including attributes, and prefixed with
8 * the 4 bytes lines,columns,x,y (as screendump used to give).
9 * Attribute/character pair is in native endianity.
10 * [minor: N+128]
11 *
12 * This replaces screendump and part of selection, so that the system
13 * administrator can control access using file system permissions.
14 *
15 * aeb@cwi.nl - efter Friedas begravelse - 950211
16 *
17 * machek@k332.feld.cvut.cz - modified not to send characters to wrong console
18 * - fixed some fatal off-by-one bugs (0-- no longer == -1 -> looping and looping and looping...)
19 * - making it shorter - scr_readw are macros which expand in PRETTY long code
20 */
21
22#include <linux/kernel.h>
23#include <linux/major.h>
24#include <linux/errno.h>
25#include <linux/tty.h>
26#include <linux/interrupt.h>
27#include <linux/mm.h>
28#include <linux/init.h>
29#include <linux/vt_kern.h>
30#include <linux/selection.h>
31#include <linux/kbd_kern.h>
32#include <linux/console.h>
33#include <linux/device.h>
34#include <linux/sched.h>
35#include <linux/fs.h>
36#include <linux/poll.h>
37#include <linux/signal.h>
38#include <linux/slab.h>
39#include <linux/notifier.h>
40
41#include <asm/uaccess.h>
42#include <asm/byteorder.h>
43#include <asm/unaligned.h>
44
45#undef attr
46#undef org
47#undef addr
48#define HEADER_SIZE 4
49
50#define CON_BUF_SIZE (CONFIG_BASE_SMALL ? 256 : PAGE_SIZE)
51
52struct vcs_poll_data {
53 struct notifier_block notifier;
54 unsigned int cons_num;
55 bool seen_last_update;
56 wait_queue_head_t waitq;
57 struct fasync_struct *fasync;
58};
59
60static int
61vcs_notifier(struct notifier_block *nb, unsigned long code, void *_param)
62{
63 struct vt_notifier_param *param = _param;
64 struct vc_data *vc = param->vc;
65 struct vcs_poll_data *poll =
66 container_of(nb, struct vcs_poll_data, notifier);
67 int currcons = poll->cons_num;
68
69 if (code != VT_UPDATE)
70 return NOTIFY_DONE;
71
72 if (currcons == 0)
73 currcons = fg_console;
74 else
75 currcons--;
76 if (currcons != vc->vc_num)
77 return NOTIFY_DONE;
78
79 poll->seen_last_update = false;
80 wake_up_interruptible(&poll->waitq);
81 kill_fasync(&poll->fasync, SIGIO, POLL_IN);
82 return NOTIFY_OK;
83}
84
85static void
86vcs_poll_data_free(struct vcs_poll_data *poll)
87{
88 unregister_vt_notifier(&poll->notifier);
89 kfree(poll);
90}
91
92static struct vcs_poll_data *
93vcs_poll_data_get(struct file *file)
94{
95 struct vcs_poll_data *poll = file->private_data;
96
97 if (poll)
98 return poll;
99
100 poll = kzalloc(sizeof(*poll), GFP_KERNEL);
101 if (!poll)
102 return NULL;
103 poll->cons_num = iminor(file->f_path.dentry->d_inode) & 127;
104 init_waitqueue_head(&poll->waitq);
105 poll->notifier.notifier_call = vcs_notifier;
106 if (register_vt_notifier(&poll->notifier) != 0) {
107 kfree(poll);
108 return NULL;
109 }
110
111 /*
112 * This code may be called either through ->poll() or ->fasync().
113 * If we have two threads using the same file descriptor, they could
114 * both enter this function, both notice that the structure hasn't
115 * been allocated yet and go ahead allocating it in parallel, but
116 * only one of them must survive and be shared otherwise we'd leak
117 * memory with a dangling notifier callback.
118 */
119 spin_lock(&file->f_lock);
120 if (!file->private_data) {
121 file->private_data = poll;
122 } else {
123 /* someone else raced ahead of us */
124 vcs_poll_data_free(poll);
125 poll = file->private_data;
126 }
127 spin_unlock(&file->f_lock);
128
129 return poll;
130}
131
132/*
133 * Returns VC for inode.
134 * Must be called with console_lock.
135 */
136static struct vc_data*
137vcs_vc(struct inode *inode, int *viewed)
138{
139 unsigned int currcons = iminor(inode) & 127;
140
141 WARN_CONSOLE_UNLOCKED();
142
143 if (currcons == 0) {
144 currcons = fg_console;
145 if (viewed)
146 *viewed = 1;
147 } else {
148 currcons--;
149 if (viewed)
150 *viewed = 0;
151 }
152 return vc_cons[currcons].d;
153}
154
155/*
156 * Returns size for VC carried by inode.
157 * Must be called with console_lock.
158 */
159static int
160vcs_size(struct inode *inode)
161{
162 int size;
163 int minor = iminor(inode);
164 struct vc_data *vc;
165
166 WARN_CONSOLE_UNLOCKED();
167
168 vc = vcs_vc(inode, NULL);
169 if (!vc)
170 return -ENXIO;
171
172 size = vc->vc_rows * vc->vc_cols;
173
174 if (minor & 128)
175 size = 2*size + HEADER_SIZE;
176 return size;
177}
178
179static loff_t vcs_lseek(struct file *file, loff_t offset, int orig)
180{
181 int size;
182
183 console_lock();
184 size = vcs_size(file->f_path.dentry->d_inode);
185 console_unlock();
186 if (size < 0)
187 return size;
188 switch (orig) {
189 default:
190 return -EINVAL;
191 case 2:
192 offset += size;
193 break;
194 case 1:
195 offset += file->f_pos;
196 case 0:
197 break;
198 }
199 if (offset < 0 || offset > size) {
200 return -EINVAL;
201 }
202 file->f_pos = offset;
203 return file->f_pos;
204}
205
206
207static ssize_t
208vcs_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)
209{
210 struct inode *inode = file->f_path.dentry->d_inode;
211 unsigned int currcons = iminor(inode);
212 struct vc_data *vc;
213 struct vcs_poll_data *poll;
214 long pos;
215 long attr, read;
216 int col, maxcol, viewed;
217 unsigned short *org = NULL;
218 ssize_t ret;
219 char *con_buf;
220
221 con_buf = (char *) __get_free_page(GFP_KERNEL);
222 if (!con_buf)
223 return -ENOMEM;
224
225 pos = *ppos;
226
227 /* Select the proper current console and verify
228 * sanity of the situation under the console lock.
229 */
230 console_lock();
231
232 attr = (currcons & 128);
233 ret = -ENXIO;
234 vc = vcs_vc(inode, &viewed);
235 if (!vc)
236 goto unlock_out;
237
238 ret = -EINVAL;
239 if (pos < 0)
240 goto unlock_out;
241 poll = file->private_data;
242 if (count && poll)
243 poll->seen_last_update = true;
244 read = 0;
245 ret = 0;
246 while (count) {
247 char *con_buf0, *con_buf_start;
248 long this_round, size;
249 ssize_t orig_count;
250 long p = pos;
251
252 /* Check whether we are above size each round,
253 * as copy_to_user at the end of this loop
254 * could sleep.
255 */
256 size = vcs_size(inode);
257 if (size < 0) {
258 if (read)
259 break;
260 ret = size;
261 goto unlock_out;
262 }
263 if (pos >= size)
264 break;
265 if (count > size - pos)
266 count = size - pos;
267
268 this_round = count;
269 if (this_round > CON_BUF_SIZE)
270 this_round = CON_BUF_SIZE;
271
272 /* Perform the whole read into the local con_buf.
273 * Then we can drop the console spinlock and safely
274 * attempt to move it to userspace.
275 */
276
277 con_buf_start = con_buf0 = con_buf;
278 orig_count = this_round;
279 maxcol = vc->vc_cols;
280 if (!attr) {
281 org = screen_pos(vc, p, viewed);
282 col = p % maxcol;
283 p += maxcol - col;
284 while (this_round-- > 0) {
285 *con_buf0++ = (vcs_scr_readw(vc, org++) & 0xff);
286 if (++col == maxcol) {
287 org = screen_pos(vc, p, viewed);
288 col = 0;
289 p += maxcol;
290 }
291 }
292 } else {
293 if (p < HEADER_SIZE) {
294 size_t tmp_count;
295
296 con_buf0[0] = (char)vc->vc_rows;
297 con_buf0[1] = (char)vc->vc_cols;
298 getconsxy(vc, con_buf0 + 2);
299
300 con_buf_start += p;
301 this_round += p;
302 if (this_round > CON_BUF_SIZE) {
303 this_round = CON_BUF_SIZE;
304 orig_count = this_round - p;
305 }
306
307 tmp_count = HEADER_SIZE;
308 if (tmp_count > this_round)
309 tmp_count = this_round;
310
311 /* Advance state pointers and move on. */
312 this_round -= tmp_count;
313 p = HEADER_SIZE;
314 con_buf0 = con_buf + HEADER_SIZE;
315 /* If this_round >= 0, then p is even... */
316 } else if (p & 1) {
317 /* Skip first byte for output if start address is odd
318 * Update region sizes up/down depending on free
319 * space in buffer.
320 */
321 con_buf_start++;
322 if (this_round < CON_BUF_SIZE)
323 this_round++;
324 else
325 orig_count--;
326 }
327 if (this_round > 0) {
328 unsigned short *tmp_buf = (unsigned short *)con_buf0;
329
330 p -= HEADER_SIZE;
331 p /= 2;
332 col = p % maxcol;
333
334 org = screen_pos(vc, p, viewed);
335 p += maxcol - col;
336
337 /* Buffer has even length, so we can always copy
338 * character + attribute. We do not copy last byte
339 * to userspace if this_round is odd.
340 */
341 this_round = (this_round + 1) >> 1;
342
343 while (this_round) {
344 *tmp_buf++ = vcs_scr_readw(vc, org++);
345 this_round --;
346 if (++col == maxcol) {
347 org = screen_pos(vc, p, viewed);
348 col = 0;
349 p += maxcol;
350 }
351 }
352 }
353 }
354
355 /* Finally, release the console semaphore while we push
356 * all the data to userspace from our temporary buffer.
357 *
358 * AKPM: Even though it's a semaphore, we should drop it because
359 * the pagefault handling code may want to call printk().
360 */
361
362 console_unlock();
363 ret = copy_to_user(buf, con_buf_start, orig_count);
364 console_lock();
365
366 if (ret) {
367 read += (orig_count - ret);
368 ret = -EFAULT;
369 break;
370 }
371 buf += orig_count;
372 pos += orig_count;
373 read += orig_count;
374 count -= orig_count;
375 }
376 *ppos += read;
377 if (read)
378 ret = read;
379unlock_out:
380 console_unlock();
381 free_page((unsigned long) con_buf);
382 return ret;
383}
384
385static ssize_t
386vcs_write(struct file *file, const char __user *buf, size_t count, loff_t *ppos)
387{
388 struct inode *inode = file->f_path.dentry->d_inode;
389 unsigned int currcons = iminor(inode);
390 struct vc_data *vc;
391 long pos;
392 long attr, size, written;
393 char *con_buf0;
394 int col, maxcol, viewed;
395 u16 *org0 = NULL, *org = NULL;
396 size_t ret;
397 char *con_buf;
398
399 con_buf = (char *) __get_free_page(GFP_KERNEL);
400 if (!con_buf)
401 return -ENOMEM;
402
403 pos = *ppos;
404
405 /* Select the proper current console and verify
406 * sanity of the situation under the console lock.
407 */
408 console_lock();
409
410 attr = (currcons & 128);
411 ret = -ENXIO;
412 vc = vcs_vc(inode, &viewed);
413 if (!vc)
414 goto unlock_out;
415
416 size = vcs_size(inode);
417 ret = -EINVAL;
418 if (pos < 0 || pos > size)
419 goto unlock_out;
420 if (count > size - pos)
421 count = size - pos;
422 written = 0;
423 while (count) {
424 long this_round = count;
425 size_t orig_count;
426 long p;
427
428 if (this_round > CON_BUF_SIZE)
429 this_round = CON_BUF_SIZE;
430
431 /* Temporarily drop the console lock so that we can read
432 * in the write data from userspace safely.
433 */
434 console_unlock();
435 ret = copy_from_user(con_buf, buf, this_round);
436 console_lock();
437
438 if (ret) {
439 this_round -= ret;
440 if (!this_round) {
441 /* Abort loop if no data were copied. Otherwise
442 * fail with -EFAULT.
443 */
444 if (written)
445 break;
446 ret = -EFAULT;
447 goto unlock_out;
448 }
449 }
450
451 /* The vcs_size might have changed while we slept to grab
452 * the user buffer, so recheck.
453 * Return data written up to now on failure.
454 */
455 size = vcs_size(inode);
456 if (size < 0) {
457 if (written)
458 break;
459 ret = size;
460 goto unlock_out;
461 }
462 if (pos >= size)
463 break;
464 if (this_round > size - pos)
465 this_round = size - pos;
466
467 /* OK, now actually push the write to the console
468 * under the lock using the local kernel buffer.
469 */
470
471 con_buf0 = con_buf;
472 orig_count = this_round;
473 maxcol = vc->vc_cols;
474 p = pos;
475 if (!attr) {
476 org0 = org = screen_pos(vc, p, viewed);
477 col = p % maxcol;
478 p += maxcol - col;
479
480 while (this_round > 0) {
481 unsigned char c = *con_buf0++;
482
483 this_round--;
484 vcs_scr_writew(vc,
485 (vcs_scr_readw(vc, org) & 0xff00) | c, org);
486 org++;
487 if (++col == maxcol) {
488 org = screen_pos(vc, p, viewed);
489 col = 0;
490 p += maxcol;
491 }
492 }
493 } else {
494 if (p < HEADER_SIZE) {
495 char header[HEADER_SIZE];
496
497 getconsxy(vc, header + 2);
498 while (p < HEADER_SIZE && this_round > 0) {
499 this_round--;
500 header[p++] = *con_buf0++;
501 }
502 if (!viewed)
503 putconsxy(vc, header + 2);
504 }
505 p -= HEADER_SIZE;
506 col = (p/2) % maxcol;
507 if (this_round > 0) {
508 org0 = org = screen_pos(vc, p/2, viewed);
509 if ((p & 1) && this_round > 0) {
510 char c;
511
512 this_round--;
513 c = *con_buf0++;
514#ifdef __BIG_ENDIAN
515 vcs_scr_writew(vc, c |
516 (vcs_scr_readw(vc, org) & 0xff00), org);
517#else
518 vcs_scr_writew(vc, (c << 8) |
519 (vcs_scr_readw(vc, org) & 0xff), org);
520#endif
521 org++;
522 p++;
523 if (++col == maxcol) {
524 org = screen_pos(vc, p/2, viewed);
525 col = 0;
526 }
527 }
528 p /= 2;
529 p += maxcol - col;
530 }
531 while (this_round > 1) {
532 unsigned short w;
533
534 w = get_unaligned(((unsigned short *)con_buf0));
535 vcs_scr_writew(vc, w, org++);
536 con_buf0 += 2;
537 this_round -= 2;
538 if (++col == maxcol) {
539 org = screen_pos(vc, p, viewed);
540 col = 0;
541 p += maxcol;
542 }
543 }
544 if (this_round > 0) {
545 unsigned char c;
546
547 c = *con_buf0++;
548#ifdef __BIG_ENDIAN
549 vcs_scr_writew(vc, (vcs_scr_readw(vc, org) & 0xff) | (c << 8), org);
550#else
551 vcs_scr_writew(vc, (vcs_scr_readw(vc, org) & 0xff00) | c, org);
552#endif
553 }
554 }
555 count -= orig_count;
556 written += orig_count;
557 buf += orig_count;
558 pos += orig_count;
559 if (org0)
560 update_region(vc, (unsigned long)(org0), org - org0);
561 }
562 *ppos += written;
563 ret = written;
564 if (written)
565 vcs_scr_updated(vc);
566
567unlock_out:
568 console_unlock();
569 free_page((unsigned long) con_buf);
570 return ret;
571}
572
573static unsigned int
574vcs_poll(struct file *file, poll_table *wait)
575{
576 struct vcs_poll_data *poll = vcs_poll_data_get(file);
577 int ret = DEFAULT_POLLMASK|POLLERR|POLLPRI;
578
579 if (poll) {
580 poll_wait(file, &poll->waitq, wait);
581 if (poll->seen_last_update)
582 ret = DEFAULT_POLLMASK;
583 }
584 return ret;
585}
586
587static int
588vcs_fasync(int fd, struct file *file, int on)
589{
590 struct vcs_poll_data *poll = file->private_data;
591
592 if (!poll) {
593 /* don't allocate anything if all we want is disable fasync */
594 if (!on)
595 return 0;
596 poll = vcs_poll_data_get(file);
597 if (!poll)
598 return -ENOMEM;
599 }
600
601 return fasync_helper(fd, file, on, &poll->fasync);
602}
603
604static int
605vcs_open(struct inode *inode, struct file *filp)
606{
607 unsigned int currcons = iminor(inode) & 127;
608 int ret = 0;
609
610 tty_lock();
611 if(currcons && !vc_cons_allocated(currcons-1))
612 ret = -ENXIO;
613 tty_unlock();
614 return ret;
615}
616
617static int vcs_release(struct inode *inode, struct file *file)
618{
619 struct vcs_poll_data *poll = file->private_data;
620
621 if (poll)
622 vcs_poll_data_free(poll);
623 return 0;
624}
625
626static const struct file_operations vcs_fops = {
627 .llseek = vcs_lseek,
628 .read = vcs_read,
629 .write = vcs_write,
630 .poll = vcs_poll,
631 .fasync = vcs_fasync,
632 .open = vcs_open,
633 .release = vcs_release,
634};
635
636static struct class *vc_class;
637
638void vcs_make_sysfs(int index)
639{
640 device_create(vc_class, NULL, MKDEV(VCS_MAJOR, index + 1), NULL,
641 "vcs%u", index + 1);
642 device_create(vc_class, NULL, MKDEV(VCS_MAJOR, index + 129), NULL,
643 "vcsa%u", index + 1);
644}
645
646void vcs_remove_sysfs(int index)
647{
648 device_destroy(vc_class, MKDEV(VCS_MAJOR, index + 1));
649 device_destroy(vc_class, MKDEV(VCS_MAJOR, index + 129));
650}
651
652int __init vcs_init(void)
653{
654 unsigned int i;
655
656 if (register_chrdev(VCS_MAJOR, "vcs", &vcs_fops))
657 panic("unable to get major %d for vcs device", VCS_MAJOR);
658 vc_class = class_create(THIS_MODULE, "vc");
659
660 device_create(vc_class, NULL, MKDEV(VCS_MAJOR, 0), NULL, "vcs");
661 device_create(vc_class, NULL, MKDEV(VCS_MAJOR, 128), NULL, "vcsa");
662 for (i = 0; i < MIN_NR_CONSOLES; i++)
663 vcs_make_sysfs(i);
664 return 0;
665}