HID: rmi: check sanity of the incoming report
[sfrench/cifs-2.6.git] / drivers / hid / hid-holtek-mouse.c
1 /*
2  * HID driver for Holtek gaming mice
3  * Copyright (c) 2013 Christian Ohm
4  * Heavily inspired by various other HID drivers that adjust the report
5  * descriptor.
6 */
7
8 /*
9  * This program is free software; you can redistribute it and/or modify it
10  * under the terms of the GNU General Public License as published by the Free
11  * Software Foundation; either version 2 of the License, or (at your option)
12  * any later version.
13  */
14
15 #include <linux/hid.h>
16 #include <linux/module.h>
17 #include <linux/usb.h>
18
19 #include "hid-ids.h"
20
21 /*
22  * The report descriptor of some Holtek based gaming mice specifies an
23  * excessively large number of consumer usages (2^15), which is more than
24  * HID_MAX_USAGES. This prevents proper parsing of the report descriptor.
25  *
26  * This driver fixes the report descriptor for:
27  * - USB ID 04d9:a067, sold as Sharkoon Drakonia and Perixx MX-2000
28  * - USB ID 04d9:a04a, sold as Tracer Sniper TRM-503, NOVA Gaming Slider X200
29  *   and Zalman ZM-GM1
30  * - USB ID 04d9:a081, sold as SHARKOON DarkGlider Gaming mouse
31  * - USB ID 04d9:a072, sold as LEETGION Hellion Gaming Mouse
32  */
33
34 static __u8 *holtek_mouse_report_fixup(struct hid_device *hdev, __u8 *rdesc,
35                 unsigned int *rsize)
36 {
37         struct usb_interface *intf = to_usb_interface(hdev->dev.parent);
38
39         if (intf->cur_altsetting->desc.bInterfaceNumber == 1) {
40                 /* Change usage maximum and logical maximum from 0x7fff to
41                  * 0x2fff, so they don't exceed HID_MAX_USAGES */
42                 switch (hdev->product) {
43                 case USB_DEVICE_ID_HOLTEK_ALT_MOUSE_A067:
44                 case USB_DEVICE_ID_HOLTEK_ALT_MOUSE_A072:
45                         if (*rsize >= 122 && rdesc[115] == 0xff && rdesc[116] == 0x7f
46                                         && rdesc[120] == 0xff && rdesc[121] == 0x7f) {
47                                 hid_info(hdev, "Fixing up report descriptor\n");
48                                 rdesc[116] = rdesc[121] = 0x2f;
49                         }
50                         break;
51                 case USB_DEVICE_ID_HOLTEK_ALT_MOUSE_A04A:
52                 case USB_DEVICE_ID_HOLTEK_ALT_MOUSE_A070:
53                 case USB_DEVICE_ID_HOLTEK_ALT_MOUSE_A081:
54                         if (*rsize >= 113 && rdesc[106] == 0xff && rdesc[107] == 0x7f
55                                         && rdesc[111] == 0xff && rdesc[112] == 0x7f) {
56                                 hid_info(hdev, "Fixing up report descriptor\n");
57                                 rdesc[107] = rdesc[112] = 0x2f;
58                         }
59                         break;
60                 }
61
62         }
63         return rdesc;
64 }
65
66 static const struct hid_device_id holtek_mouse_devices[] = {
67         { HID_USB_DEVICE(USB_VENDOR_ID_HOLTEK_ALT,
68                         USB_DEVICE_ID_HOLTEK_ALT_MOUSE_A067) },
69         { HID_USB_DEVICE(USB_VENDOR_ID_HOLTEK_ALT,
70                         USB_DEVICE_ID_HOLTEK_ALT_MOUSE_A070) },
71         { HID_USB_DEVICE(USB_VENDOR_ID_HOLTEK_ALT,
72                         USB_DEVICE_ID_HOLTEK_ALT_MOUSE_A04A) },
73         { HID_USB_DEVICE(USB_VENDOR_ID_HOLTEK_ALT,
74                         USB_DEVICE_ID_HOLTEK_ALT_MOUSE_A072) },
75         { HID_USB_DEVICE(USB_VENDOR_ID_HOLTEK_ALT,
76                         USB_DEVICE_ID_HOLTEK_ALT_MOUSE_A081) },
77         { }
78 };
79 MODULE_DEVICE_TABLE(hid, holtek_mouse_devices);
80
81 static struct hid_driver holtek_mouse_driver = {
82         .name = "holtek_mouse",
83         .id_table = holtek_mouse_devices,
84         .report_fixup = holtek_mouse_report_fixup,
85 };
86
87 module_hid_driver(holtek_mouse_driver);
88 MODULE_LICENSE("GPL");