4 * Copyright (c) 2005 Fabrice Bellard
7 * Permission is hereby granted, free of charge, to any person obtaining a copy
8 * of this software and associated documentation files (the "Software"), to deal
9 * in the Software without restriction, including without limitation the rights
10 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
11 * copies of the Software, and to permit persons to whom the Software is
12 * furnished to do so, subject to the following conditions:
14 * The above copyright notice and this permission notice shall be included in
15 * all copies or substantial portions of the Software.
17 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
18 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
19 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
20 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
21 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
22 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
26 #include "ui/console.h"
27 #include "qemu/timer.h"
28 #include "hw/input/hid.h"
30 #define HID_USAGE_ERROR_ROLLOVER 0x01
31 #define HID_USAGE_POSTFAIL 0x02
32 #define HID_USAGE_ERROR_UNDEFINED 0x03
34 /* Indices are QEMU keycodes, values are from HID Usage Table. Indices
35 * above 0x80 are for keys that come after 0xe0 or 0xe1+0x1d or 0xe1+0x9d. */
36 static const uint8_t hid_usage_keys[0x100] = {
37 0x00, 0x29, 0x1e, 0x1f, 0x20, 0x21, 0x22, 0x23,
38 0x24, 0x25, 0x26, 0x27, 0x2d, 0x2e, 0x2a, 0x2b,
39 0x14, 0x1a, 0x08, 0x15, 0x17, 0x1c, 0x18, 0x0c,
40 0x12, 0x13, 0x2f, 0x30, 0x28, 0xe0, 0x04, 0x16,
41 0x07, 0x09, 0x0a, 0x0b, 0x0d, 0x0e, 0x0f, 0x33,
42 0x34, 0x35, 0xe1, 0x31, 0x1d, 0x1b, 0x06, 0x19,
43 0x05, 0x11, 0x10, 0x36, 0x37, 0x38, 0xe5, 0x55,
44 0xe2, 0x2c, 0x32, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e,
45 0x3f, 0x40, 0x41, 0x42, 0x43, 0x53, 0x47, 0x5f,
46 0x60, 0x61, 0x56, 0x5c, 0x5d, 0x5e, 0x57, 0x59,
47 0x5a, 0x5b, 0x62, 0x63, 0x00, 0x00, 0x00, 0x44,
48 0x45, 0x68, 0x69, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e,
49 0xe8, 0xe9, 0x71, 0x72, 0x73, 0x00, 0x00, 0x00,
50 0x00, 0x00, 0x00, 0x85, 0x00, 0x00, 0x00, 0x00,
51 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
52 0x00, 0x00, 0x00, 0x00, 0x00, 0xe3, 0xe7, 0x65,
54 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
55 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
56 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
57 0x00, 0x00, 0x00, 0x00, 0x58, 0xe4, 0x00, 0x00,
58 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
59 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
60 0x00, 0x00, 0x00, 0x00, 0x00, 0x54, 0x00, 0x46,
61 0xe6, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
62 0x00, 0x00, 0x00, 0x00, 0x00, 0x48, 0x00, 0x4a,
63 0x52, 0x4b, 0x00, 0x50, 0x00, 0x4f, 0x00, 0x4d,
64 0x51, 0x4e, 0x49, 0x4c, 0x00, 0x00, 0x00, 0x00,
65 0x00, 0x00, 0x00, 0xe3, 0xe7, 0x65, 0x00, 0x00,
66 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
67 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
68 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
69 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
72 bool hid_has_events(HIDState *hs)
74 return hs->n > 0 || hs->idle_pending;
77 static void hid_idle_timer(void *opaque)
79 HIDState *hs = opaque;
81 hs->idle_pending = true;
85 static void hid_del_idle_timer(HIDState *hs)
88 timer_del(hs->idle_timer);
89 timer_free(hs->idle_timer);
90 hs->idle_timer = NULL;
94 void hid_set_next_idle(HIDState *hs)
97 uint64_t expire_time = qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL) +
98 get_ticks_per_sec() * hs->idle * 4 / 1000;
99 if (!hs->idle_timer) {
100 hs->idle_timer = timer_new_ns(QEMU_CLOCK_VIRTUAL, hid_idle_timer, hs);
102 timer_mod_ns(hs->idle_timer, expire_time);
104 hid_del_idle_timer(hs);
108 static void hid_pointer_event(DeviceState *dev, QemuConsole *src,
111 static const int bmap[INPUT_BUTTON_MAX] = {
112 [INPUT_BUTTON_LEFT] = 0x01,
113 [INPUT_BUTTON_RIGHT] = 0x02,
114 [INPUT_BUTTON_MIDDLE] = 0x04,
116 HIDState *hs = (HIDState *)dev;
119 assert(hs->n < QUEUE_LENGTH);
120 e = &hs->ptr.queue[(hs->head + hs->n) & QUEUE_MASK];
123 case INPUT_EVENT_KIND_REL:
124 if (evt->rel->axis == INPUT_AXIS_X) {
125 e->xdx += evt->rel->value;
126 } else if (evt->rel->axis == INPUT_AXIS_Y) {
127 e->ydy += evt->rel->value;
131 case INPUT_EVENT_KIND_ABS:
132 if (evt->rel->axis == INPUT_AXIS_X) {
133 e->xdx = evt->rel->value;
134 } else if (evt->rel->axis == INPUT_AXIS_Y) {
135 e->ydy = evt->rel->value;
139 case INPUT_EVENT_KIND_BTN:
140 if (evt->btn->down) {
141 e->buttons_state |= bmap[evt->btn->button];
142 if (evt->btn->button == INPUT_BUTTON_WHEEL_UP) {
144 } else if (evt->btn->button == INPUT_BUTTON_WHEEL_DOWN) {
148 e->buttons_state &= ~bmap[evt->btn->button];
159 static void hid_pointer_sync(DeviceState *dev)
161 HIDState *hs = (HIDState *)dev;
162 HIDPointerEvent *prev, *curr, *next;
163 bool event_compression = false;
165 if (hs->n == QUEUE_LENGTH-1) {
167 * Queue full. We are losing information, but we at least
168 * keep track of most recent button state.
173 prev = &hs->ptr.queue[(hs->head + hs->n - 1) & QUEUE_MASK];
174 curr = &hs->ptr.queue[(hs->head + hs->n) & QUEUE_MASK];
175 next = &hs->ptr.queue[(hs->head + hs->n + 1) & QUEUE_MASK];
179 * No button state change between previous and current event
180 * (and previous wasn't seen by the guest yet), so there is
181 * motion information only and we can combine the two event
184 if (curr->buttons_state == prev->buttons_state) {
185 event_compression = true;
189 if (event_compression) {
190 /* add current motion to previous, clear current */
191 if (hs->kind == HID_MOUSE) {
192 prev->xdx += curr->xdx;
194 prev->ydy += curr->ydy;
197 prev->xdx = curr->xdx;
198 prev->ydy = curr->ydy;
200 prev->dz += curr->dz;
203 /* prepate next (clear rel, copy abs + btns) */
204 if (hs->kind == HID_MOUSE) {
208 next->xdx = curr->xdx;
209 next->ydy = curr->ydy;
212 next->buttons_state = curr->buttons_state;
213 /* make current guest visible, notify guest */
219 static void hid_keyboard_event(DeviceState *dev, QemuConsole *src,
222 HIDState *hs = (HIDState *)dev;
223 int scancodes[3], i, count;
226 count = qemu_input_key_value_to_scancode(evt->key->key,
229 if (hs->n + count > QUEUE_LENGTH) {
230 fprintf(stderr, "usb-kbd: warning: key event queue full\n");
233 for (i = 0; i < count; i++) {
234 slot = (hs->head + hs->n) & QUEUE_MASK; hs->n++;
235 hs->kbd.keycodes[slot] = scancodes[i];
240 static void hid_keyboard_process_keycode(HIDState *hs)
242 uint8_t hid_code, key;
243 int i, keycode, slot;
248 slot = hs->head & QUEUE_MASK; QUEUE_INCR(hs->head); hs->n--;
249 keycode = hs->kbd.keycodes[slot];
251 key = keycode & 0x7f;
252 hid_code = hid_usage_keys[key | ((hs->kbd.modifiers >> 1) & (1 << 7))];
253 hs->kbd.modifiers &= ~(1 << 8);
260 if (hs->kbd.modifiers & (1 << 9)) {
261 hs->kbd.modifiers ^= 3 << 8;
265 if (keycode & (1 << 7)) {
266 hs->kbd.modifiers &= ~(1 << (hid_code & 0x0f));
270 hs->kbd.modifiers |= 1 << (hid_code & 0x0f);
274 if (keycode & (1 << 7)) {
275 for (i = hs->kbd.keys - 1; i >= 0; i--) {
276 if (hs->kbd.key[i] == hid_code) {
277 hs->kbd.key[i] = hs->kbd.key[-- hs->kbd.keys];
278 hs->kbd.key[hs->kbd.keys] = 0x00;
286 for (i = hs->kbd.keys - 1; i >= 0; i--) {
287 if (hs->kbd.key[i] == hid_code) {
292 if (hs->kbd.keys < sizeof(hs->kbd.key)) {
293 hs->kbd.key[hs->kbd.keys++] = hid_code;
301 static inline int int_clamp(int val, int vmin, int vmax)
305 } else if (val > vmax) {
312 void hid_pointer_activate(HIDState *hs)
314 if (!hs->ptr.mouse_grabbed) {
315 qemu_input_handler_activate(hs->s);
316 hs->ptr.mouse_grabbed = 1;
320 int hid_pointer_poll(HIDState *hs, uint8_t *buf, int len)
326 hs->idle_pending = false;
328 hid_pointer_activate(hs);
330 /* When the buffer is empty, return the last event. Relative
331 movements will all be zero. */
332 index = (hs->n ? hs->head : hs->head - 1);
333 e = &hs->ptr.queue[index & QUEUE_MASK];
335 if (hs->kind == HID_MOUSE) {
336 dx = int_clamp(e->xdx, -127, 127);
337 dy = int_clamp(e->ydy, -127, 127);
344 dz = int_clamp(e->dz, -127, 127);
349 (hs->kind == HID_TABLET || (!e->xdx && !e->ydy))) {
350 /* that deals with this event */
351 QUEUE_INCR(hs->head);
355 /* Appears we have to invert the wheel direction */
361 buf[l++] = e->buttons_state;
376 buf[l++] = e->buttons_state;
379 buf[l++] = dx & 0xff;
385 buf[l++] = dy & 0xff;
402 int hid_keyboard_poll(HIDState *hs, uint8_t *buf, int len)
404 hs->idle_pending = false;
410 hid_keyboard_process_keycode(hs);
412 buf[0] = hs->kbd.modifiers & 0xff;
414 if (hs->kbd.keys > 6) {
415 memset(buf + 2, HID_USAGE_ERROR_ROLLOVER, MIN(8, len) - 2);
417 memcpy(buf + 2, hs->kbd.key, MIN(8, len) - 2);
423 int hid_keyboard_write(HIDState *hs, uint8_t *buf, int len)
427 /* 0x01: Num Lock LED
428 * 0x02: Caps Lock LED
429 * 0x04: Scroll Lock LED
432 hs->kbd.leds = buf[0];
433 if (hs->kbd.leds & 0x04) {
434 ledstate |= QEMU_SCROLL_LOCK_LED;
436 if (hs->kbd.leds & 0x01) {
437 ledstate |= QEMU_NUM_LOCK_LED;
439 if (hs->kbd.leds & 0x02) {
440 ledstate |= QEMU_CAPS_LOCK_LED;
442 kbd_put_ledstate(ledstate);
447 void hid_reset(HIDState *hs)
451 memset(hs->kbd.keycodes, 0, sizeof(hs->kbd.keycodes));
452 memset(hs->kbd.key, 0, sizeof(hs->kbd.key));
457 memset(hs->ptr.queue, 0, sizeof(hs->ptr.queue));
464 hs->idle_pending = false;
465 hid_del_idle_timer(hs);
468 void hid_free(HIDState *hs)
470 qemu_input_handler_unregister(hs->s);
471 hid_del_idle_timer(hs);
474 static QemuInputHandler hid_keyboard_handler = {
475 .name = "QEMU HID Keyboard",
476 .mask = INPUT_EVENT_MASK_KEY,
477 .event = hid_keyboard_event,
480 static QemuInputHandler hid_mouse_handler = {
481 .name = "QEMU HID Mouse",
482 .mask = INPUT_EVENT_MASK_BTN | INPUT_EVENT_MASK_REL,
483 .event = hid_pointer_event,
484 .sync = hid_pointer_sync,
487 static QemuInputHandler hid_tablet_handler = {
488 .name = "QEMU HID Tablet",
489 .mask = INPUT_EVENT_MASK_BTN | INPUT_EVENT_MASK_ABS,
490 .event = hid_pointer_event,
491 .sync = hid_pointer_sync,
494 void hid_init(HIDState *hs, int kind, HIDEventFunc event)
499 if (hs->kind == HID_KEYBOARD) {
500 hs->s = qemu_input_handler_register((DeviceState *)hs,
501 &hid_keyboard_handler);
502 qemu_input_handler_activate(hs->s);
503 } else if (hs->kind == HID_MOUSE) {
504 hs->s = qemu_input_handler_register((DeviceState *)hs,
506 } else if (hs->kind == HID_TABLET) {
507 hs->s = qemu_input_handler_register((DeviceState *)hs,
508 &hid_tablet_handler);
512 static int hid_post_load(void *opaque, int version_id)
514 HIDState *s = opaque;
516 hid_set_next_idle(s);
520 static const VMStateDescription vmstate_hid_ptr_queue = {
521 .name = "HIDPointerEventQueue",
523 .minimum_version_id = 1,
524 .fields = (VMStateField[]) {
525 VMSTATE_INT32(xdx, HIDPointerEvent),
526 VMSTATE_INT32(ydy, HIDPointerEvent),
527 VMSTATE_INT32(dz, HIDPointerEvent),
528 VMSTATE_INT32(buttons_state, HIDPointerEvent),
529 VMSTATE_END_OF_LIST()
533 const VMStateDescription vmstate_hid_ptr_device = {
534 .name = "HIDPointerDevice",
536 .minimum_version_id = 1,
537 .post_load = hid_post_load,
538 .fields = (VMStateField[]) {
539 VMSTATE_STRUCT_ARRAY(ptr.queue, HIDState, QUEUE_LENGTH, 0,
540 vmstate_hid_ptr_queue, HIDPointerEvent),
541 VMSTATE_UINT32(head, HIDState),
542 VMSTATE_UINT32(n, HIDState),
543 VMSTATE_INT32(protocol, HIDState),
544 VMSTATE_UINT8(idle, HIDState),
545 VMSTATE_END_OF_LIST(),
549 const VMStateDescription vmstate_hid_keyboard_device = {
550 .name = "HIDKeyboardDevice",
552 .minimum_version_id = 1,
553 .post_load = hid_post_load,
554 .fields = (VMStateField[]) {
555 VMSTATE_UINT32_ARRAY(kbd.keycodes, HIDState, QUEUE_LENGTH),
556 VMSTATE_UINT32(head, HIDState),
557 VMSTATE_UINT32(n, HIDState),
558 VMSTATE_UINT16(kbd.modifiers, HIDState),
559 VMSTATE_UINT8(kbd.leds, HIDState),
560 VMSTATE_UINT8_ARRAY(kbd.key, HIDState, 16),
561 VMSTATE_INT32(kbd.keys, HIDState),
562 VMSTATE_INT32(protocol, HIDState),
563 VMSTATE_UINT8(idle, HIDState),
564 VMSTATE_END_OF_LIST(),