cachepc-linux

Fork of AMDESE/linux with modifications for CachePC side-channel attack
git clone https://git.sinitax.com/sinitax/cachepc-linux
Log | Files | Refs | README | LICENSE | sfeed.txt

ir-mce_kbd-decoder.c (13564B)


      1// SPDX-License-Identifier: GPL-2.0-only
      2/* ir-mce_kbd-decoder.c - A decoder for the RC6-ish keyboard/mouse IR protocol
      3 * used by the Microsoft Remote Keyboard for Windows Media Center Edition,
      4 * referred to by Microsoft's Windows Media Center remote specification docs
      5 * as "an internal protocol called MCIR-2".
      6 *
      7 * Copyright (C) 2011 by Jarod Wilson <jarod@redhat.com>
      8 */
      9#include <linux/module.h>
     10
     11#include "rc-core-priv.h"
     12
     13/*
     14 * This decoder currently supports:
     15 * - MCIR-2 29-bit IR signals used for mouse movement and buttons
     16 * - MCIR-2 32-bit IR signals used for standard keyboard keys
     17 *
     18 * The media keys on the keyboard send RC-6 signals that are indistinguishable
     19 * from the keys of the same name on the stock MCE remote, and will be handled
     20 * by the standard RC-6 decoder, and be made available to the system via the
     21 * input device for the remote, rather than the keyboard/mouse one.
     22 */
     23
     24#define MCIR2_UNIT		333	/* us */
     25#define MCIR2_HEADER_NBITS	5
     26#define MCIR2_MOUSE_NBITS	29
     27#define MCIR2_KEYBOARD_NBITS	32
     28#define MCIR2_PREFIX_PULSE	(8 * MCIR2_UNIT)
     29#define MCIR2_PREFIX_SPACE	(1 * MCIR2_UNIT)
     30#define MCIR2_MAX_LEN		(3 * MCIR2_UNIT)
     31#define MCIR2_BIT_START		(1 * MCIR2_UNIT)
     32#define MCIR2_BIT_END		(1 * MCIR2_UNIT)
     33#define MCIR2_BIT_0		(1 * MCIR2_UNIT)
     34#define MCIR2_BIT_SET		(2 * MCIR2_UNIT)
     35#define MCIR2_MODE_MASK		0xf	/* for the header bits */
     36#define MCIR2_KEYBOARD_HEADER	0x4
     37#define MCIR2_MOUSE_HEADER	0x1
     38#define MCIR2_MASK_KEYS_START	0xe0
     39
     40enum mce_kbd_mode {
     41	MCIR2_MODE_KEYBOARD,
     42	MCIR2_MODE_MOUSE,
     43	MCIR2_MODE_UNKNOWN,
     44};
     45
     46enum mce_kbd_state {
     47	STATE_INACTIVE,
     48	STATE_HEADER_BIT_START,
     49	STATE_HEADER_BIT_END,
     50	STATE_BODY_BIT_START,
     51	STATE_BODY_BIT_END,
     52	STATE_FINISHED,
     53};
     54
     55static unsigned char kbd_keycodes[256] = {
     56	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_A,
     57	KEY_B,		KEY_C,		KEY_D,		KEY_E,		KEY_F,
     58	KEY_G,		KEY_H,		KEY_I,		KEY_J,		KEY_K,
     59	KEY_L,		KEY_M,		KEY_N,		KEY_O,		KEY_P,
     60	KEY_Q,		KEY_R,		KEY_S,		KEY_T,		KEY_U,
     61	KEY_V,		KEY_W,		KEY_X,		KEY_Y,		KEY_Z,
     62	KEY_1,		KEY_2,		KEY_3,		KEY_4,		KEY_5,
     63	KEY_6,		KEY_7,		KEY_8,		KEY_9,		KEY_0,
     64	KEY_ENTER,	KEY_ESC,	KEY_BACKSPACE,	KEY_TAB,	KEY_SPACE,
     65	KEY_MINUS,	KEY_EQUAL,	KEY_LEFTBRACE,	KEY_RIGHTBRACE,	KEY_BACKSLASH,
     66	KEY_BACKSLASH,	KEY_SEMICOLON,	KEY_APOSTROPHE,	KEY_GRAVE,	KEY_COMMA,
     67	KEY_DOT,	KEY_SLASH,	KEY_CAPSLOCK,	KEY_F1,		KEY_F2,
     68	KEY_F3,		KEY_F4,		KEY_F5,		KEY_F6,		KEY_F7,
     69	KEY_F8,		KEY_F9,		KEY_F10,	KEY_F11,	KEY_F12,
     70	KEY_SYSRQ,	KEY_SCROLLLOCK,	KEY_PAUSE,	KEY_INSERT,	KEY_HOME,
     71	KEY_PAGEUP,	KEY_DELETE,	KEY_END,	KEY_PAGEDOWN,	KEY_RIGHT,
     72	KEY_LEFT,	KEY_DOWN,	KEY_UP,		KEY_NUMLOCK,	KEY_KPSLASH,
     73	KEY_KPASTERISK,	KEY_KPMINUS,	KEY_KPPLUS,	KEY_KPENTER,	KEY_KP1,
     74	KEY_KP2,	KEY_KP3,	KEY_KP4,	KEY_KP5,	KEY_KP6,
     75	KEY_KP7,	KEY_KP8,	KEY_KP9,	KEY_KP0,	KEY_KPDOT,
     76	KEY_102ND,	KEY_COMPOSE,	KEY_POWER,	KEY_KPEQUAL,	KEY_F13,
     77	KEY_F14,	KEY_F15,	KEY_F16,	KEY_F17,	KEY_F18,
     78	KEY_F19,	KEY_F20,	KEY_F21,	KEY_F22,	KEY_F23,
     79	KEY_F24,	KEY_OPEN,	KEY_HELP,	KEY_PROPS,	KEY_FRONT,
     80	KEY_STOP,	KEY_AGAIN,	KEY_UNDO,	KEY_CUT,	KEY_COPY,
     81	KEY_PASTE,	KEY_FIND,	KEY_MUTE,	KEY_VOLUMEUP,	KEY_VOLUMEDOWN,
     82	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_KPCOMMA,	KEY_RESERVED,
     83	KEY_RO,		KEY_KATAKANAHIRAGANA, KEY_YEN,	KEY_HENKAN,	KEY_MUHENKAN,
     84	KEY_KPJPCOMMA,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_HANGUEL,
     85	KEY_HANJA,	KEY_KATAKANA,	KEY_HIRAGANA,	KEY_ZENKAKUHANKAKU, KEY_RESERVED,
     86	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,
     87	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,
     88	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,
     89	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,
     90	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,
     91	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,
     92	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,
     93	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,
     94	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,
     95	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,
     96	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,
     97	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,
     98	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,
     99	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,
    100	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,	KEY_LEFTCTRL,
    101	KEY_LEFTSHIFT,	KEY_LEFTALT,	KEY_LEFTMETA,	KEY_RIGHTCTRL,	KEY_RIGHTSHIFT,
    102	KEY_RIGHTALT,	KEY_RIGHTMETA,	KEY_PLAYPAUSE,	KEY_STOPCD,	KEY_PREVIOUSSONG,
    103	KEY_NEXTSONG,	KEY_EJECTCD,	KEY_VOLUMEUP,	KEY_VOLUMEDOWN,	KEY_MUTE,
    104	KEY_WWW,	KEY_BACK,	KEY_FORWARD,	KEY_STOP,	KEY_FIND,
    105	KEY_SCROLLUP,	KEY_SCROLLDOWN,	KEY_EDIT,	KEY_SLEEP,	KEY_COFFEE,
    106	KEY_REFRESH,	KEY_CALC,	KEY_RESERVED,	KEY_RESERVED,	KEY_RESERVED,
    107	KEY_RESERVED
    108};
    109
    110static void mce_kbd_rx_timeout(struct timer_list *t)
    111{
    112	struct ir_raw_event_ctrl *raw = from_timer(raw, t, mce_kbd.rx_timeout);
    113	unsigned char maskcode;
    114	unsigned long flags;
    115	int i;
    116
    117	dev_dbg(&raw->dev->dev, "timer callback clearing all keys\n");
    118
    119	spin_lock_irqsave(&raw->mce_kbd.keylock, flags);
    120
    121	if (time_is_before_eq_jiffies(raw->mce_kbd.rx_timeout.expires)) {
    122		for (i = 0; i < 7; i++) {
    123			maskcode = kbd_keycodes[MCIR2_MASK_KEYS_START + i];
    124			input_report_key(raw->dev->input_dev, maskcode, 0);
    125		}
    126
    127		for (i = 0; i < MCIR2_MASK_KEYS_START; i++)
    128			input_report_key(raw->dev->input_dev, kbd_keycodes[i],
    129					 0);
    130
    131		input_sync(raw->dev->input_dev);
    132	}
    133	spin_unlock_irqrestore(&raw->mce_kbd.keylock, flags);
    134}
    135
    136static enum mce_kbd_mode mce_kbd_mode(struct mce_kbd_dec *data)
    137{
    138	switch (data->header & MCIR2_MODE_MASK) {
    139	case MCIR2_KEYBOARD_HEADER:
    140		return MCIR2_MODE_KEYBOARD;
    141	case MCIR2_MOUSE_HEADER:
    142		return MCIR2_MODE_MOUSE;
    143	default:
    144		return MCIR2_MODE_UNKNOWN;
    145	}
    146}
    147
    148static void ir_mce_kbd_process_keyboard_data(struct rc_dev *dev, u32 scancode)
    149{
    150	u8 keydata1  = (scancode >> 8) & 0xff;
    151	u8 keydata2  = (scancode >> 16) & 0xff;
    152	u8 shiftmask = scancode & 0xff;
    153	unsigned char maskcode;
    154	int i, keystate;
    155
    156	dev_dbg(&dev->dev, "keyboard: keydata2 = 0x%02x, keydata1 = 0x%02x, shiftmask = 0x%02x\n",
    157		keydata2, keydata1, shiftmask);
    158
    159	for (i = 0; i < 7; i++) {
    160		maskcode = kbd_keycodes[MCIR2_MASK_KEYS_START + i];
    161		if (shiftmask & (1 << i))
    162			keystate = 1;
    163		else
    164			keystate = 0;
    165		input_report_key(dev->input_dev, maskcode, keystate);
    166	}
    167
    168	if (keydata1)
    169		input_report_key(dev->input_dev, kbd_keycodes[keydata1], 1);
    170	if (keydata2)
    171		input_report_key(dev->input_dev, kbd_keycodes[keydata2], 1);
    172
    173	if (!keydata1 && !keydata2) {
    174		for (i = 0; i < MCIR2_MASK_KEYS_START; i++)
    175			input_report_key(dev->input_dev, kbd_keycodes[i], 0);
    176	}
    177}
    178
    179static void ir_mce_kbd_process_mouse_data(struct rc_dev *dev, u32 scancode)
    180{
    181	/* raw mouse coordinates */
    182	u8 xdata = (scancode >> 7) & 0x7f;
    183	u8 ydata = (scancode >> 14) & 0x7f;
    184	int x, y;
    185	/* mouse buttons */
    186	bool right = scancode & 0x40;
    187	bool left  = scancode & 0x20;
    188
    189	if (xdata & 0x40)
    190		x = -((~xdata & 0x7f) + 1);
    191	else
    192		x = xdata;
    193
    194	if (ydata & 0x40)
    195		y = -((~ydata & 0x7f) + 1);
    196	else
    197		y = ydata;
    198
    199	dev_dbg(&dev->dev, "mouse: x = %d, y = %d, btns = %s%s\n",
    200		x, y, left ? "L" : "", right ? "R" : "");
    201
    202	input_report_rel(dev->input_dev, REL_X, x);
    203	input_report_rel(dev->input_dev, REL_Y, y);
    204
    205	input_report_key(dev->input_dev, BTN_LEFT, left);
    206	input_report_key(dev->input_dev, BTN_RIGHT, right);
    207}
    208
    209/**
    210 * ir_mce_kbd_decode() - Decode one mce_kbd pulse or space
    211 * @dev:	the struct rc_dev descriptor of the device
    212 * @ev:		the struct ir_raw_event descriptor of the pulse/space
    213 *
    214 * This function returns -EINVAL if the pulse violates the state machine
    215 */
    216static int ir_mce_kbd_decode(struct rc_dev *dev, struct ir_raw_event ev)
    217{
    218	struct mce_kbd_dec *data = &dev->raw->mce_kbd;
    219	u32 scancode;
    220	unsigned long delay;
    221	struct lirc_scancode lsc = {};
    222
    223	if (!is_timing_event(ev)) {
    224		if (ev.overflow)
    225			data->state = STATE_INACTIVE;
    226		return 0;
    227	}
    228
    229	if (!geq_margin(ev.duration, MCIR2_UNIT, MCIR2_UNIT / 2))
    230		goto out;
    231
    232again:
    233	dev_dbg(&dev->dev, "started at state %i (%uus %s)\n",
    234		data->state, ev.duration, TO_STR(ev.pulse));
    235
    236	if (!geq_margin(ev.duration, MCIR2_UNIT, MCIR2_UNIT / 2))
    237		return 0;
    238
    239	switch (data->state) {
    240
    241	case STATE_INACTIVE:
    242		if (!ev.pulse)
    243			break;
    244
    245		/* Note: larger margin on first pulse since each MCIR2_UNIT
    246		   is quite short and some hardware takes some time to
    247		   adjust to the signal */
    248		if (!eq_margin(ev.duration, MCIR2_PREFIX_PULSE, MCIR2_UNIT))
    249			break;
    250
    251		data->state = STATE_HEADER_BIT_START;
    252		data->count = 0;
    253		data->header = 0;
    254		return 0;
    255
    256	case STATE_HEADER_BIT_START:
    257		if (geq_margin(ev.duration, MCIR2_MAX_LEN, MCIR2_UNIT / 2))
    258			break;
    259
    260		data->header <<= 1;
    261		if (ev.pulse)
    262			data->header |= 1;
    263		data->count++;
    264		data->state = STATE_HEADER_BIT_END;
    265		return 0;
    266
    267	case STATE_HEADER_BIT_END:
    268		decrease_duration(&ev, MCIR2_BIT_END);
    269
    270		if (data->count != MCIR2_HEADER_NBITS) {
    271			data->state = STATE_HEADER_BIT_START;
    272			goto again;
    273		}
    274
    275		switch (mce_kbd_mode(data)) {
    276		case MCIR2_MODE_KEYBOARD:
    277			data->wanted_bits = MCIR2_KEYBOARD_NBITS;
    278			break;
    279		case MCIR2_MODE_MOUSE:
    280			data->wanted_bits = MCIR2_MOUSE_NBITS;
    281			break;
    282		default:
    283			dev_dbg(&dev->dev, "not keyboard or mouse data\n");
    284			goto out;
    285		}
    286
    287		data->count = 0;
    288		data->body = 0;
    289		data->state = STATE_BODY_BIT_START;
    290		goto again;
    291
    292	case STATE_BODY_BIT_START:
    293		if (geq_margin(ev.duration, MCIR2_MAX_LEN, MCIR2_UNIT / 2))
    294			break;
    295
    296		data->body <<= 1;
    297		if (ev.pulse)
    298			data->body |= 1;
    299		data->count++;
    300		data->state = STATE_BODY_BIT_END;
    301		return 0;
    302
    303	case STATE_BODY_BIT_END:
    304		if (data->count == data->wanted_bits)
    305			data->state = STATE_FINISHED;
    306		else
    307			data->state = STATE_BODY_BIT_START;
    308
    309		decrease_duration(&ev, MCIR2_BIT_END);
    310		goto again;
    311
    312	case STATE_FINISHED:
    313		if (ev.pulse)
    314			break;
    315
    316		switch (data->wanted_bits) {
    317		case MCIR2_KEYBOARD_NBITS:
    318			scancode = data->body & 0xffffff;
    319			dev_dbg(&dev->dev, "keyboard data 0x%08x\n",
    320				data->body);
    321			spin_lock(&data->keylock);
    322			if (scancode) {
    323				delay = usecs_to_jiffies(dev->timeout) +
    324					msecs_to_jiffies(100);
    325				mod_timer(&data->rx_timeout, jiffies + delay);
    326			} else {
    327				del_timer(&data->rx_timeout);
    328			}
    329			/* Pass data to keyboard buffer parser */
    330			ir_mce_kbd_process_keyboard_data(dev, scancode);
    331			spin_unlock(&data->keylock);
    332			lsc.rc_proto = RC_PROTO_MCIR2_KBD;
    333			break;
    334		case MCIR2_MOUSE_NBITS:
    335			scancode = data->body & 0x1fffff;
    336			dev_dbg(&dev->dev, "mouse data 0x%06x\n", scancode);
    337			/* Pass data to mouse buffer parser */
    338			ir_mce_kbd_process_mouse_data(dev, scancode);
    339			lsc.rc_proto = RC_PROTO_MCIR2_MSE;
    340			break;
    341		default:
    342			dev_dbg(&dev->dev, "not keyboard or mouse data\n");
    343			goto out;
    344		}
    345
    346		lsc.scancode = scancode;
    347		lirc_scancode_event(dev, &lsc);
    348		data->state = STATE_INACTIVE;
    349		input_event(dev->input_dev, EV_MSC, MSC_SCAN, scancode);
    350		input_sync(dev->input_dev);
    351		return 0;
    352	}
    353
    354out:
    355	dev_dbg(&dev->dev, "failed at state %i (%uus %s)\n",
    356		data->state, ev.duration, TO_STR(ev.pulse));
    357	data->state = STATE_INACTIVE;
    358	return -EINVAL;
    359}
    360
    361static int ir_mce_kbd_register(struct rc_dev *dev)
    362{
    363	struct mce_kbd_dec *mce_kbd = &dev->raw->mce_kbd;
    364
    365	timer_setup(&mce_kbd->rx_timeout, mce_kbd_rx_timeout, 0);
    366	spin_lock_init(&mce_kbd->keylock);
    367
    368	return 0;
    369}
    370
    371static int ir_mce_kbd_unregister(struct rc_dev *dev)
    372{
    373	struct mce_kbd_dec *mce_kbd = &dev->raw->mce_kbd;
    374
    375	del_timer_sync(&mce_kbd->rx_timeout);
    376
    377	return 0;
    378}
    379
    380static const struct ir_raw_timings_manchester ir_mce_kbd_timings = {
    381	.leader_pulse	= MCIR2_PREFIX_PULSE,
    382	.invert		= 1,
    383	.clock		= MCIR2_UNIT,
    384	.trailer_space	= MCIR2_UNIT * 10,
    385};
    386
    387/**
    388 * ir_mce_kbd_encode() - Encode a scancode as a stream of raw events
    389 *
    390 * @protocol:   protocol to encode
    391 * @scancode:   scancode to encode
    392 * @events:     array of raw ir events to write into
    393 * @max:        maximum size of @events
    394 *
    395 * Returns:     The number of events written.
    396 *              -ENOBUFS if there isn't enough space in the array to fit the
    397 *              encoding. In this case all @max events will have been written.
    398 */
    399static int ir_mce_kbd_encode(enum rc_proto protocol, u32 scancode,
    400			     struct ir_raw_event *events, unsigned int max)
    401{
    402	struct ir_raw_event *e = events;
    403	int len, ret;
    404	u64 raw;
    405
    406	if (protocol == RC_PROTO_MCIR2_KBD) {
    407		raw = scancode |
    408		      ((u64)MCIR2_KEYBOARD_HEADER << MCIR2_KEYBOARD_NBITS);
    409		len = MCIR2_KEYBOARD_NBITS + MCIR2_HEADER_NBITS;
    410	} else {
    411		raw = scancode |
    412		      ((u64)MCIR2_MOUSE_HEADER << MCIR2_MOUSE_NBITS);
    413		len = MCIR2_MOUSE_NBITS + MCIR2_HEADER_NBITS;
    414	}
    415
    416	ret = ir_raw_gen_manchester(&e, max, &ir_mce_kbd_timings, len, raw);
    417	if (ret < 0)
    418		return ret;
    419
    420	return e - events;
    421}
    422
    423static struct ir_raw_handler mce_kbd_handler = {
    424	.protocols	= RC_PROTO_BIT_MCIR2_KBD | RC_PROTO_BIT_MCIR2_MSE,
    425	.decode		= ir_mce_kbd_decode,
    426	.encode		= ir_mce_kbd_encode,
    427	.raw_register	= ir_mce_kbd_register,
    428	.raw_unregister	= ir_mce_kbd_unregister,
    429	.carrier	= 36000,
    430	.min_timeout	= MCIR2_MAX_LEN + MCIR2_UNIT / 2,
    431};
    432
    433static int __init ir_mce_kbd_decode_init(void)
    434{
    435	ir_raw_handler_register(&mce_kbd_handler);
    436
    437	printk(KERN_INFO "IR MCE Keyboard/mouse protocol handler initialized\n");
    438	return 0;
    439}
    440
    441static void __exit ir_mce_kbd_decode_exit(void)
    442{
    443	ir_raw_handler_unregister(&mce_kbd_handler);
    444}
    445
    446module_init(ir_mce_kbd_decode_init);
    447module_exit(ir_mce_kbd_decode_exit);
    448
    449MODULE_LICENSE("GPL");
    450MODULE_AUTHOR("Jarod Wilson <jarod@redhat.com>");
    451MODULE_DESCRIPTION("MCE Keyboard/mouse IR protocol decoder");