fuse: fix use-after-free in fuse_direct_IO()
[sfrench/cifs-2.6.git] / drivers / hid / hid-asus.c
1 /*
2  *  HID driver for Asus notebook built-in keyboard.
3  *  Fixes small logical maximum to match usage maximum.
4  *
5  *  Currently supported devices are:
6  *    EeeBook X205TA
7  *    VivoBook E200HA
8  *
9  *  Copyright (c) 2016 Yusuke Fujimaki <usk.fujimaki@gmail.com>
10  *
11  *  This module based on hid-ortek by
12  *  Copyright (c) 2010 Johnathon Harris <jmharris@gmail.com>
13  *  Copyright (c) 2011 Jiri Kosina
14  *
15  *  This module has been updated to add support for Asus i2c touchpad.
16  *
17  *  Copyright (c) 2016 Brendan McGrath <redmcg@redmandi.dyndns.org>
18  *  Copyright (c) 2016 Victor Vlasenko <victor.vlasenko@sysgears.com>
19  *  Copyright (c) 2016 Frederik Wenigwieser <frederik.wenigwieser@gmail.com>
20  */
21
22 /*
23  * This program is free software; you can redistribute it and/or modify it
24  * under the terms of the GNU General Public License as published by the Free
25  * Software Foundation; either version 2 of the License, or (at your option)
26  * any later version.
27  */
28
29 #include <linux/dmi.h>
30 #include <linux/hid.h>
31 #include <linux/module.h>
32 #include <linux/platform_data/x86/asus-wmi.h>
33 #include <linux/input/mt.h>
34 #include <linux/usb.h> /* For to_usb_interface for T100 touchpad intf check */
35
36 #include "hid-ids.h"
37
38 MODULE_AUTHOR("Yusuke Fujimaki <usk.fujimaki@gmail.com>");
39 MODULE_AUTHOR("Brendan McGrath <redmcg@redmandi.dyndns.org>");
40 MODULE_AUTHOR("Victor Vlasenko <victor.vlasenko@sysgears.com>");
41 MODULE_AUTHOR("Frederik Wenigwieser <frederik.wenigwieser@gmail.com>");
42 MODULE_DESCRIPTION("Asus HID Keyboard and TouchPad");
43
44 #define T100_TPAD_INTF 2
45
46 #define T100CHI_MOUSE_REPORT_ID 0x06
47 #define FEATURE_REPORT_ID 0x0d
48 #define INPUT_REPORT_ID 0x5d
49 #define FEATURE_KBD_REPORT_ID 0x5a
50 #define FEATURE_KBD_REPORT_SIZE 16
51
52 #define SUPPORT_KBD_BACKLIGHT BIT(0)
53
54 #define MAX_TOUCH_MAJOR 8
55 #define MAX_PRESSURE 128
56
57 #define BTN_LEFT_MASK 0x01
58 #define CONTACT_TOOL_TYPE_MASK 0x80
59 #define CONTACT_X_MSB_MASK 0xf0
60 #define CONTACT_Y_MSB_MASK 0x0f
61 #define CONTACT_TOUCH_MAJOR_MASK 0x07
62 #define CONTACT_PRESSURE_MASK 0x7f
63
64 #define QUIRK_FIX_NOTEBOOK_REPORT       BIT(0)
65 #define QUIRK_NO_INIT_REPORTS           BIT(1)
66 #define QUIRK_SKIP_INPUT_MAPPING        BIT(2)
67 #define QUIRK_IS_MULTITOUCH             BIT(3)
68 #define QUIRK_NO_CONSUMER_USAGES        BIT(4)
69 #define QUIRK_USE_KBD_BACKLIGHT         BIT(5)
70 #define QUIRK_T100_KEYBOARD             BIT(6)
71 #define QUIRK_T100CHI                   BIT(7)
72 #define QUIRK_G752_KEYBOARD             BIT(8)
73
74 #define I2C_KEYBOARD_QUIRKS                     (QUIRK_FIX_NOTEBOOK_REPORT | \
75                                                  QUIRK_NO_INIT_REPORTS | \
76                                                  QUIRK_NO_CONSUMER_USAGES)
77 #define I2C_TOUCHPAD_QUIRKS                     (QUIRK_NO_INIT_REPORTS | \
78                                                  QUIRK_SKIP_INPUT_MAPPING | \
79                                                  QUIRK_IS_MULTITOUCH)
80
81 #define TRKID_SGN       ((TRKID_MAX + 1) >> 1)
82
83 struct asus_kbd_leds {
84         struct led_classdev cdev;
85         struct hid_device *hdev;
86         struct work_struct work;
87         unsigned int brightness;
88         bool removed;
89 };
90
91 struct asus_touchpad_info {
92         int max_x;
93         int max_y;
94         int res_x;
95         int res_y;
96         int contact_size;
97         int max_contacts;
98 };
99
100 struct asus_drvdata {
101         unsigned long quirks;
102         struct input_dev *input;
103         struct asus_kbd_leds *kbd_backlight;
104         const struct asus_touchpad_info *tp;
105         bool enable_backlight;
106 };
107
108 static const struct asus_touchpad_info asus_i2c_tp = {
109         .max_x = 2794,
110         .max_y = 1758,
111         .contact_size = 5,
112         .max_contacts = 5,
113 };
114
115 static const struct asus_touchpad_info asus_t100ta_tp = {
116         .max_x = 2240,
117         .max_y = 1120,
118         .res_x = 30, /* units/mm */
119         .res_y = 27, /* units/mm */
120         .contact_size = 5,
121         .max_contacts = 5,
122 };
123
124 static const struct asus_touchpad_info asus_t100ha_tp = {
125         .max_x = 2640,
126         .max_y = 1320,
127         .res_x = 30, /* units/mm */
128         .res_y = 29, /* units/mm */
129         .contact_size = 5,
130         .max_contacts = 5,
131 };
132
133 static const struct asus_touchpad_info asus_t200ta_tp = {
134         .max_x = 3120,
135         .max_y = 1716,
136         .res_x = 30, /* units/mm */
137         .res_y = 28, /* units/mm */
138         .contact_size = 5,
139         .max_contacts = 5,
140 };
141
142 static const struct asus_touchpad_info asus_t100chi_tp = {
143         .max_x = 2640,
144         .max_y = 1320,
145         .res_x = 31, /* units/mm */
146         .res_y = 29, /* units/mm */
147         .contact_size = 3,
148         .max_contacts = 4,
149 };
150
151 static void asus_report_contact_down(struct asus_drvdata *drvdat,
152                 int toolType, u8 *data)
153 {
154         struct input_dev *input = drvdat->input;
155         int touch_major, pressure, x, y;
156
157         x = (data[0] & CONTACT_X_MSB_MASK) << 4 | data[1];
158         y = drvdat->tp->max_y - ((data[0] & CONTACT_Y_MSB_MASK) << 8 | data[2]);
159
160         input_report_abs(input, ABS_MT_POSITION_X, x);
161         input_report_abs(input, ABS_MT_POSITION_Y, y);
162
163         if (drvdat->tp->contact_size < 5)
164                 return;
165
166         if (toolType == MT_TOOL_PALM) {
167                 touch_major = MAX_TOUCH_MAJOR;
168                 pressure = MAX_PRESSURE;
169         } else {
170                 touch_major = (data[3] >> 4) & CONTACT_TOUCH_MAJOR_MASK;
171                 pressure = data[4] & CONTACT_PRESSURE_MASK;
172         }
173
174         input_report_abs(input, ABS_MT_TOUCH_MAJOR, touch_major);
175         input_report_abs(input, ABS_MT_PRESSURE, pressure);
176 }
177
178 /* Required for Synaptics Palm Detection */
179 static void asus_report_tool_width(struct asus_drvdata *drvdat)
180 {
181         struct input_mt *mt = drvdat->input->mt;
182         struct input_mt_slot *oldest;
183         int oldid, count, i;
184
185         if (drvdat->tp->contact_size < 5)
186                 return;
187
188         oldest = NULL;
189         oldid = mt->trkid;
190         count = 0;
191
192         for (i = 0; i < mt->num_slots; ++i) {
193                 struct input_mt_slot *ps = &mt->slots[i];
194                 int id = input_mt_get_value(ps, ABS_MT_TRACKING_ID);
195
196                 if (id < 0)
197                         continue;
198                 if ((id - oldid) & TRKID_SGN) {
199                         oldest = ps;
200                         oldid = id;
201                 }
202                 count++;
203         }
204
205         if (oldest) {
206                 input_report_abs(drvdat->input, ABS_TOOL_WIDTH,
207                         input_mt_get_value(oldest, ABS_MT_TOUCH_MAJOR));
208         }
209 }
210
211 static int asus_report_input(struct asus_drvdata *drvdat, u8 *data, int size)
212 {
213         int i, toolType = MT_TOOL_FINGER;
214         u8 *contactData = data + 2;
215
216         if (size != 3 + drvdat->tp->contact_size * drvdat->tp->max_contacts)
217                 return 0;
218
219         for (i = 0; i < drvdat->tp->max_contacts; i++) {
220                 bool down = !!(data[1] & BIT(i+3));
221
222                 if (drvdat->tp->contact_size >= 5)
223                         toolType = contactData[3] & CONTACT_TOOL_TYPE_MASK ?
224                                                 MT_TOOL_PALM : MT_TOOL_FINGER;
225
226                 input_mt_slot(drvdat->input, i);
227                 input_mt_report_slot_state(drvdat->input, toolType, down);
228
229                 if (down) {
230                         asus_report_contact_down(drvdat, toolType, contactData);
231                         contactData += drvdat->tp->contact_size;
232                 }
233         }
234
235         input_report_key(drvdat->input, BTN_LEFT, data[1] & BTN_LEFT_MASK);
236         asus_report_tool_width(drvdat);
237
238         input_mt_sync_frame(drvdat->input);
239         input_sync(drvdat->input);
240
241         return 1;
242 }
243
244 static int asus_raw_event(struct hid_device *hdev,
245                 struct hid_report *report, u8 *data, int size)
246 {
247         struct asus_drvdata *drvdata = hid_get_drvdata(hdev);
248
249         if (drvdata->tp && data[0] == INPUT_REPORT_ID)
250                 return asus_report_input(drvdata, data, size);
251
252         return 0;
253 }
254
255 static int asus_kbd_set_report(struct hid_device *hdev, u8 *buf, size_t buf_size)
256 {
257         unsigned char *dmabuf;
258         int ret;
259
260         dmabuf = kmemdup(buf, buf_size, GFP_KERNEL);
261         if (!dmabuf)
262                 return -ENOMEM;
263
264         ret = hid_hw_raw_request(hdev, FEATURE_KBD_REPORT_ID, dmabuf,
265                                  buf_size, HID_FEATURE_REPORT,
266                                  HID_REQ_SET_REPORT);
267         kfree(dmabuf);
268
269         return ret;
270 }
271
272 static int asus_kbd_init(struct hid_device *hdev)
273 {
274         u8 buf[] = { FEATURE_KBD_REPORT_ID, 0x41, 0x53, 0x55, 0x53, 0x20, 0x54,
275                      0x65, 0x63, 0x68, 0x2e, 0x49, 0x6e, 0x63, 0x2e, 0x00 };
276         int ret;
277
278         ret = asus_kbd_set_report(hdev, buf, sizeof(buf));
279         if (ret < 0)
280                 hid_err(hdev, "Asus failed to send init command: %d\n", ret);
281
282         return ret;
283 }
284
285 static int asus_kbd_get_functions(struct hid_device *hdev,
286                                   unsigned char *kbd_func)
287 {
288         u8 buf[] = { FEATURE_KBD_REPORT_ID, 0x05, 0x20, 0x31, 0x00, 0x08 };
289         u8 *readbuf;
290         int ret;
291
292         ret = asus_kbd_set_report(hdev, buf, sizeof(buf));
293         if (ret < 0) {
294                 hid_err(hdev, "Asus failed to send configuration command: %d\n", ret);
295                 return ret;
296         }
297
298         readbuf = kzalloc(FEATURE_KBD_REPORT_SIZE, GFP_KERNEL);
299         if (!readbuf)
300                 return -ENOMEM;
301
302         ret = hid_hw_raw_request(hdev, FEATURE_KBD_REPORT_ID, readbuf,
303                                  FEATURE_KBD_REPORT_SIZE, HID_FEATURE_REPORT,
304                                  HID_REQ_GET_REPORT);
305         if (ret < 0) {
306                 hid_err(hdev, "Asus failed to request functions: %d\n", ret);
307                 kfree(readbuf);
308                 return ret;
309         }
310
311         *kbd_func = readbuf[6];
312
313         kfree(readbuf);
314         return ret;
315 }
316
317 static void asus_kbd_backlight_set(struct led_classdev *led_cdev,
318                                    enum led_brightness brightness)
319 {
320         struct asus_kbd_leds *led = container_of(led_cdev, struct asus_kbd_leds,
321                                                  cdev);
322         if (led->brightness == brightness)
323                 return;
324
325         led->brightness = brightness;
326         schedule_work(&led->work);
327 }
328
329 static enum led_brightness asus_kbd_backlight_get(struct led_classdev *led_cdev)
330 {
331         struct asus_kbd_leds *led = container_of(led_cdev, struct asus_kbd_leds,
332                                                  cdev);
333
334         return led->brightness;
335 }
336
337 static void asus_kbd_backlight_work(struct work_struct *work)
338 {
339         struct asus_kbd_leds *led = container_of(work, struct asus_kbd_leds, work);
340         u8 buf[] = { FEATURE_KBD_REPORT_ID, 0xba, 0xc5, 0xc4, 0x00 };
341         int ret;
342
343         if (led->removed)
344                 return;
345
346         buf[4] = led->brightness;
347
348         ret = asus_kbd_set_report(led->hdev, buf, sizeof(buf));
349         if (ret < 0)
350                 hid_err(led->hdev, "Asus failed to set keyboard backlight: %d\n", ret);
351 }
352
353 /* WMI-based keyboard backlight LED control (via asus-wmi driver) takes
354  * precedence. We only activate HID-based backlight control when the
355  * WMI control is not available.
356  */
357 static bool asus_kbd_wmi_led_control_present(struct hid_device *hdev)
358 {
359         u32 value;
360         int ret;
361
362         ret = asus_wmi_evaluate_method(ASUS_WMI_METHODID_DSTS2,
363                                        ASUS_WMI_DEVID_KBD_BACKLIGHT, 0, &value);
364         hid_dbg(hdev, "WMI backlight check: rc %d value %x", ret, value);
365         if (ret)
366                 return false;
367
368         return !!(value & ASUS_WMI_DSTS_PRESENCE_BIT);
369 }
370
371 static int asus_kbd_register_leds(struct hid_device *hdev)
372 {
373         struct asus_drvdata *drvdata = hid_get_drvdata(hdev);
374         unsigned char kbd_func;
375         int ret;
376
377         /* Initialize keyboard */
378         ret = asus_kbd_init(hdev);
379         if (ret < 0)
380                 return ret;
381
382         /* Get keyboard functions */
383         ret = asus_kbd_get_functions(hdev, &kbd_func);
384         if (ret < 0)
385                 return ret;
386
387         /* Check for backlight support */
388         if (!(kbd_func & SUPPORT_KBD_BACKLIGHT))
389                 return -ENODEV;
390
391         drvdata->kbd_backlight = devm_kzalloc(&hdev->dev,
392                                               sizeof(struct asus_kbd_leds),
393                                               GFP_KERNEL);
394         if (!drvdata->kbd_backlight)
395                 return -ENOMEM;
396
397         drvdata->kbd_backlight->removed = false;
398         drvdata->kbd_backlight->brightness = 0;
399         drvdata->kbd_backlight->hdev = hdev;
400         drvdata->kbd_backlight->cdev.name = "asus::kbd_backlight";
401         drvdata->kbd_backlight->cdev.max_brightness = 3;
402         drvdata->kbd_backlight->cdev.brightness_set = asus_kbd_backlight_set;
403         drvdata->kbd_backlight->cdev.brightness_get = asus_kbd_backlight_get;
404         INIT_WORK(&drvdata->kbd_backlight->work, asus_kbd_backlight_work);
405
406         ret = devm_led_classdev_register(&hdev->dev, &drvdata->kbd_backlight->cdev);
407         if (ret < 0) {
408                 /* No need to have this still around */
409                 devm_kfree(&hdev->dev, drvdata->kbd_backlight);
410         }
411
412         return ret;
413 }
414
415 static int asus_input_configured(struct hid_device *hdev, struct hid_input *hi)
416 {
417         struct input_dev *input = hi->input;
418         struct asus_drvdata *drvdata = hid_get_drvdata(hdev);
419
420         /* T100CHI uses MULTI_INPUT, bind the touchpad to the mouse hid_input */
421         if (drvdata->quirks & QUIRK_T100CHI &&
422             hi->report->id != T100CHI_MOUSE_REPORT_ID)
423                 return 0;
424
425         if (drvdata->tp) {
426                 int ret;
427
428                 input_set_abs_params(input, ABS_MT_POSITION_X, 0,
429                                      drvdata->tp->max_x, 0, 0);
430                 input_set_abs_params(input, ABS_MT_POSITION_Y, 0,
431                                      drvdata->tp->max_y, 0, 0);
432                 input_abs_set_res(input, ABS_MT_POSITION_X, drvdata->tp->res_x);
433                 input_abs_set_res(input, ABS_MT_POSITION_Y, drvdata->tp->res_y);
434
435                 if (drvdata->tp->contact_size >= 5) {
436                         input_set_abs_params(input, ABS_TOOL_WIDTH, 0,
437                                              MAX_TOUCH_MAJOR, 0, 0);
438                         input_set_abs_params(input, ABS_MT_TOUCH_MAJOR, 0,
439                                              MAX_TOUCH_MAJOR, 0, 0);
440                         input_set_abs_params(input, ABS_MT_PRESSURE, 0,
441                                               MAX_PRESSURE, 0, 0);
442                 }
443
444                 __set_bit(BTN_LEFT, input->keybit);
445                 __set_bit(INPUT_PROP_BUTTONPAD, input->propbit);
446
447                 ret = input_mt_init_slots(input, drvdata->tp->max_contacts,
448                                           INPUT_MT_POINTER);
449
450                 if (ret) {
451                         hid_err(hdev, "Asus input mt init slots failed: %d\n", ret);
452                         return ret;
453                 }
454         }
455
456         drvdata->input = input;
457
458         if (drvdata->enable_backlight &&
459             !asus_kbd_wmi_led_control_present(hdev) &&
460             asus_kbd_register_leds(hdev))
461                 hid_warn(hdev, "Failed to initialize backlight.\n");
462
463         return 0;
464 }
465
466 #define asus_map_key_clear(c)   hid_map_usage_clear(hi, usage, bit, \
467                                                     max, EV_KEY, (c))
468 static int asus_input_mapping(struct hid_device *hdev,
469                 struct hid_input *hi, struct hid_field *field,
470                 struct hid_usage *usage, unsigned long **bit,
471                 int *max)
472 {
473         struct asus_drvdata *drvdata = hid_get_drvdata(hdev);
474
475         if (drvdata->quirks & QUIRK_SKIP_INPUT_MAPPING) {
476                 /* Don't map anything from the HID report.
477                  * We do it all manually in asus_input_configured
478                  */
479                 return -1;
480         }
481
482         /*
483          * Ignore a bunch of bogus collections in the T100CHI descriptor.
484          * This avoids a bunch of non-functional hid_input devices getting
485          * created because of the T100CHI using HID_QUIRK_MULTI_INPUT.
486          */
487         if (drvdata->quirks & QUIRK_T100CHI) {
488                 if (field->application == (HID_UP_GENDESK | 0x0080) ||
489                     usage->hid == (HID_UP_GENDEVCTRLS | 0x0024) ||
490                     usage->hid == (HID_UP_GENDEVCTRLS | 0x0025) ||
491                     usage->hid == (HID_UP_GENDEVCTRLS | 0x0026))
492                         return -1;
493                 /*
494                  * We use the hid_input for the mouse report for the touchpad,
495                  * keep the left button, to avoid the core removing it.
496                  */
497                 if (field->application == HID_GD_MOUSE &&
498                     usage->hid != (HID_UP_BUTTON | 1))
499                         return -1;
500         }
501
502         /* ASUS-specific keyboard hotkeys */
503         if ((usage->hid & HID_USAGE_PAGE) == 0xff310000) {
504                 set_bit(EV_REP, hi->input->evbit);
505                 switch (usage->hid & HID_USAGE) {
506                 case 0x10: asus_map_key_clear(KEY_BRIGHTNESSDOWN);      break;
507                 case 0x20: asus_map_key_clear(KEY_BRIGHTNESSUP);                break;
508                 case 0x35: asus_map_key_clear(KEY_DISPLAY_OFF);         break;
509                 case 0x6c: asus_map_key_clear(KEY_SLEEP);               break;
510                 case 0x82: asus_map_key_clear(KEY_CAMERA);              break;
511                 case 0x88: asus_map_key_clear(KEY_RFKILL);                      break;
512                 case 0xb5: asus_map_key_clear(KEY_CALC);                        break;
513                 case 0xc4: asus_map_key_clear(KEY_KBDILLUMUP);          break;
514                 case 0xc5: asus_map_key_clear(KEY_KBDILLUMDOWN);                break;
515
516                 /* ASUS touchpad toggle */
517                 case 0x6b: asus_map_key_clear(KEY_F21);                 break;
518
519                 /* ROG key */
520                 case 0x38: asus_map_key_clear(KEY_PROG1);               break;
521
522                 /* Fn+C ASUS Splendid */
523                 case 0xba: asus_map_key_clear(KEY_PROG2);               break;
524
525                 /* Fn+Space Power4Gear Hybrid */
526                 case 0x5c: asus_map_key_clear(KEY_PROG3);               break;
527
528                 default:
529                         /* ASUS lazily declares 256 usages, ignore the rest,
530                          * as some make the keyboard appear as a pointer device. */
531                         return -1;
532                 }
533
534                 /*
535                  * Check and enable backlight only on devices with UsagePage ==
536                  * 0xff31 to avoid initializing the keyboard firmware multiple
537                  * times on devices with multiple HID descriptors but same
538                  * PID/VID.
539                  */
540                 if (drvdata->quirks & QUIRK_USE_KBD_BACKLIGHT)
541                         drvdata->enable_backlight = true;
542
543                 return 1;
544         }
545
546         if ((usage->hid & HID_USAGE_PAGE) == HID_UP_MSVENDOR) {
547                 set_bit(EV_REP, hi->input->evbit);
548                 switch (usage->hid & HID_USAGE) {
549                 case 0xff01: asus_map_key_clear(BTN_1); break;
550                 case 0xff02: asus_map_key_clear(BTN_2); break;
551                 case 0xff03: asus_map_key_clear(BTN_3); break;
552                 case 0xff04: asus_map_key_clear(BTN_4); break;
553                 case 0xff05: asus_map_key_clear(BTN_5); break;
554                 case 0xff06: asus_map_key_clear(BTN_6); break;
555                 case 0xff07: asus_map_key_clear(BTN_7); break;
556                 case 0xff08: asus_map_key_clear(BTN_8); break;
557                 case 0xff09: asus_map_key_clear(BTN_9); break;
558                 case 0xff0a: asus_map_key_clear(BTN_A); break;
559                 case 0xff0b: asus_map_key_clear(BTN_B); break;
560                 case 0x00f1: asus_map_key_clear(KEY_WLAN);      break;
561                 case 0x00f2: asus_map_key_clear(KEY_BRIGHTNESSDOWN);    break;
562                 case 0x00f3: asus_map_key_clear(KEY_BRIGHTNESSUP);      break;
563                 case 0x00f4: asus_map_key_clear(KEY_DISPLAY_OFF);       break;
564                 case 0x00f7: asus_map_key_clear(KEY_CAMERA);    break;
565                 case 0x00f8: asus_map_key_clear(KEY_PROG1);     break;
566                 default:
567                         return 0;
568                 }
569
570                 return 1;
571         }
572
573         if (drvdata->quirks & QUIRK_NO_CONSUMER_USAGES &&
574                 (usage->hid & HID_USAGE_PAGE) == HID_UP_CONSUMER) {
575                 switch (usage->hid & HID_USAGE) {
576                 case 0xe2: /* Mute */
577                 case 0xe9: /* Volume up */
578                 case 0xea: /* Volume down */
579                         return 0;
580                 default:
581                         /* Ignore dummy Consumer usages which make the
582                          * keyboard incorrectly appear as a pointer device.
583                          */
584                         return -1;
585                 }
586         }
587
588         return 0;
589 }
590
591 static int asus_start_multitouch(struct hid_device *hdev)
592 {
593         int ret;
594         static const unsigned char buf[] = {
595                 FEATURE_REPORT_ID, 0x00, 0x03, 0x01, 0x00
596         };
597         unsigned char *dmabuf = kmemdup(buf, sizeof(buf), GFP_KERNEL);
598
599         if (!dmabuf) {
600                 ret = -ENOMEM;
601                 hid_err(hdev, "Asus failed to alloc dma buf: %d\n", ret);
602                 return ret;
603         }
604
605         ret = hid_hw_raw_request(hdev, dmabuf[0], dmabuf, sizeof(buf),
606                                         HID_FEATURE_REPORT, HID_REQ_SET_REPORT);
607
608         kfree(dmabuf);
609
610         if (ret != sizeof(buf)) {
611                 hid_err(hdev, "Asus failed to start multitouch: %d\n", ret);
612                 return ret;
613         }
614
615         return 0;
616 }
617
618 static int __maybe_unused asus_reset_resume(struct hid_device *hdev)
619 {
620         struct asus_drvdata *drvdata = hid_get_drvdata(hdev);
621
622         if (drvdata->tp)
623                 return asus_start_multitouch(hdev);
624
625         return 0;
626 }
627
628 static int asus_probe(struct hid_device *hdev, const struct hid_device_id *id)
629 {
630         int ret;
631         struct asus_drvdata *drvdata;
632
633         drvdata = devm_kzalloc(&hdev->dev, sizeof(*drvdata), GFP_KERNEL);
634         if (drvdata == NULL) {
635                 hid_err(hdev, "Can't alloc Asus descriptor\n");
636                 return -ENOMEM;
637         }
638
639         hid_set_drvdata(hdev, drvdata);
640
641         drvdata->quirks = id->driver_data;
642
643         if (drvdata->quirks & QUIRK_IS_MULTITOUCH)
644                 drvdata->tp = &asus_i2c_tp;
645
646         if (drvdata->quirks & QUIRK_T100_KEYBOARD) {
647                 struct usb_interface *intf = to_usb_interface(hdev->dev.parent);
648
649                 if (intf->altsetting->desc.bInterfaceNumber == T100_TPAD_INTF) {
650                         drvdata->quirks = QUIRK_SKIP_INPUT_MAPPING;
651                         /*
652                          * The T100HA uses the same USB-ids as the T100TAF and
653                          * the T200TA uses the same USB-ids as the T100TA, while
654                          * both have different max x/y values as the T100TA[F].
655                          */
656                         if (dmi_match(DMI_PRODUCT_NAME, "T100HAN"))
657                                 drvdata->tp = &asus_t100ha_tp;
658                         else if (dmi_match(DMI_PRODUCT_NAME, "T200TA"))
659                                 drvdata->tp = &asus_t200ta_tp;
660                         else
661                                 drvdata->tp = &asus_t100ta_tp;
662                 }
663         }
664
665         if (drvdata->quirks & QUIRK_T100CHI) {
666                 /*
667                  * All functionality is on a single HID interface and for
668                  * userspace the touchpad must be a separate input_dev.
669                  */
670                 hdev->quirks |= HID_QUIRK_MULTI_INPUT;
671                 drvdata->tp = &asus_t100chi_tp;
672         }
673
674         if (drvdata->quirks & QUIRK_NO_INIT_REPORTS)
675                 hdev->quirks |= HID_QUIRK_NO_INIT_REPORTS;
676
677         ret = hid_parse(hdev);
678         if (ret) {
679                 hid_err(hdev, "Asus hid parse failed: %d\n", ret);
680                 return ret;
681         }
682
683         ret = hid_hw_start(hdev, HID_CONNECT_DEFAULT);
684         if (ret) {
685                 hid_err(hdev, "Asus hw start failed: %d\n", ret);
686                 return ret;
687         }
688
689         if (!drvdata->input) {
690                 hid_err(hdev, "Asus input not registered\n");
691                 ret = -ENOMEM;
692                 goto err_stop_hw;
693         }
694
695         if (drvdata->tp) {
696                 drvdata->input->name = "Asus TouchPad";
697         } else {
698                 drvdata->input->name = "Asus Keyboard";
699         }
700
701         if (drvdata->tp) {
702                 ret = asus_start_multitouch(hdev);
703                 if (ret)
704                         goto err_stop_hw;
705         }
706
707         return 0;
708 err_stop_hw:
709         hid_hw_stop(hdev);
710         return ret;
711 }
712
713 static void asus_remove(struct hid_device *hdev)
714 {
715         struct asus_drvdata *drvdata = hid_get_drvdata(hdev);
716
717         if (drvdata->kbd_backlight) {
718                 drvdata->kbd_backlight->removed = true;
719                 cancel_work_sync(&drvdata->kbd_backlight->work);
720         }
721
722         hid_hw_stop(hdev);
723 }
724
725 static const __u8 asus_g752_fixed_rdesc[] = {
726         0x19, 0x00,                     /*   Usage Minimum (0x00)       */
727         0x2A, 0xFF, 0x00,               /*   Usage Maximum (0xFF)       */
728 };
729
730 static __u8 *asus_report_fixup(struct hid_device *hdev, __u8 *rdesc,
731                 unsigned int *rsize)
732 {
733         struct asus_drvdata *drvdata = hid_get_drvdata(hdev);
734
735         if (drvdata->quirks & QUIRK_FIX_NOTEBOOK_REPORT &&
736                         *rsize >= 56 && rdesc[54] == 0x25 && rdesc[55] == 0x65) {
737                 hid_info(hdev, "Fixing up Asus notebook report descriptor\n");
738                 rdesc[55] = 0xdd;
739         }
740         /* For the T100TA/T200TA keyboard dock */
741         if (drvdata->quirks & QUIRK_T100_KEYBOARD &&
742                  (*rsize == 76 || *rsize == 101) &&
743                  rdesc[73] == 0x81 && rdesc[74] == 0x01) {
744                 hid_info(hdev, "Fixing up Asus T100 keyb report descriptor\n");
745                 rdesc[74] &= ~HID_MAIN_ITEM_CONSTANT;
746         }
747         /* For the T100CHI keyboard dock */
748         if (drvdata->quirks & QUIRK_T100CHI &&
749                  *rsize == 403 && rdesc[388] == 0x09 && rdesc[389] == 0x76) {
750                 /*
751                  * Change Usage (76h) to Usage Minimum (00h), Usage Maximum
752                  * (FFh) and clear the flags in the Input() byte.
753                  * Note the descriptor has a bogus 0 byte at the end so we
754                  * only need 1 extra byte.
755                  */
756                 *rsize = 404;
757                 rdesc = kmemdup(rdesc, *rsize, GFP_KERNEL);
758                 if (!rdesc)
759                         return NULL;
760
761                 hid_info(hdev, "Fixing up T100CHI keyb report descriptor\n");
762                 memmove(rdesc + 392, rdesc + 390, 12);
763                 rdesc[388] = 0x19;
764                 rdesc[389] = 0x00;
765                 rdesc[390] = 0x29;
766                 rdesc[391] = 0xff;
767                 rdesc[402] = 0x00;
768         }
769         if (drvdata->quirks & QUIRK_G752_KEYBOARD &&
770                  *rsize == 75 && rdesc[61] == 0x15 && rdesc[62] == 0x00) {
771                 /* report is missing usage mninum and maximum */
772                 __u8 *new_rdesc;
773                 size_t new_size = *rsize + sizeof(asus_g752_fixed_rdesc);
774
775                 new_rdesc = devm_kzalloc(&hdev->dev, new_size, GFP_KERNEL);
776                 if (new_rdesc == NULL)
777                         return rdesc;
778
779                 hid_info(hdev, "Fixing up Asus G752 keyb report descriptor\n");
780                 /* copy the valid part */
781                 memcpy(new_rdesc, rdesc, 61);
782                 /* insert missing part */
783                 memcpy(new_rdesc + 61, asus_g752_fixed_rdesc, sizeof(asus_g752_fixed_rdesc));
784                 /* copy remaining data */
785                 memcpy(new_rdesc + 61 + sizeof(asus_g752_fixed_rdesc), rdesc + 61, *rsize - 61);
786
787                 *rsize = new_size;
788                 rdesc = new_rdesc;
789         }
790
791         return rdesc;
792 }
793
794 static const struct hid_device_id asus_devices[] = {
795         { HID_I2C_DEVICE(USB_VENDOR_ID_ASUSTEK,
796                 USB_DEVICE_ID_ASUSTEK_I2C_KEYBOARD), I2C_KEYBOARD_QUIRKS},
797         { HID_I2C_DEVICE(USB_VENDOR_ID_ASUSTEK,
798                 USB_DEVICE_ID_ASUSTEK_I2C_TOUCHPAD), I2C_TOUCHPAD_QUIRKS },
799         { HID_USB_DEVICE(USB_VENDOR_ID_ASUSTEK,
800                 USB_DEVICE_ID_ASUSTEK_ROG_KEYBOARD1), QUIRK_USE_KBD_BACKLIGHT },
801         { HID_USB_DEVICE(USB_VENDOR_ID_ASUSTEK,
802                 USB_DEVICE_ID_ASUSTEK_ROG_KEYBOARD2), QUIRK_USE_KBD_BACKLIGHT },
803         { HID_USB_DEVICE(USB_VENDOR_ID_ASUSTEK,
804                 USB_DEVICE_ID_ASUSTEK_ROG_KEYBOARD3), QUIRK_G752_KEYBOARD },
805         { HID_USB_DEVICE(USB_VENDOR_ID_ASUSTEK,
806                 USB_DEVICE_ID_ASUSTEK_T100TA_KEYBOARD),
807           QUIRK_T100_KEYBOARD | QUIRK_NO_CONSUMER_USAGES },
808         { HID_USB_DEVICE(USB_VENDOR_ID_ASUSTEK,
809                 USB_DEVICE_ID_ASUSTEK_T100TAF_KEYBOARD),
810           QUIRK_T100_KEYBOARD | QUIRK_NO_CONSUMER_USAGES },
811         { HID_USB_DEVICE(USB_VENDOR_ID_CHICONY, USB_DEVICE_ID_ASUS_AK1D) },
812         { HID_USB_DEVICE(USB_VENDOR_ID_TURBOX, USB_DEVICE_ID_ASUS_MD_5110) },
813         { HID_USB_DEVICE(USB_VENDOR_ID_JESS, USB_DEVICE_ID_ASUS_MD_5112) },
814         { HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_ASUSTEK,
815                 USB_DEVICE_ID_ASUSTEK_T100CHI_KEYBOARD), QUIRK_T100CHI },
816
817         { }
818 };
819 MODULE_DEVICE_TABLE(hid, asus_devices);
820
821 static struct hid_driver asus_driver = {
822         .name                   = "asus",
823         .id_table               = asus_devices,
824         .report_fixup           = asus_report_fixup,
825         .probe                  = asus_probe,
826         .remove                 = asus_remove,
827         .input_mapping          = asus_input_mapping,
828         .input_configured       = asus_input_configured,
829 #ifdef CONFIG_PM
830         .reset_resume           = asus_reset_resume,
831 #endif
832         .raw_event              = asus_raw_event
833 };
834 module_hid_driver(asus_driver);
835
836 MODULE_LICENSE("GPL");