linux-input.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Benjamin Tissoires <bentiss@kernel.org>
To: Jiri Kosina <jikos@kernel.org>,
	 Peter Hutterer <peter.hutterer@who-t.net>,
	Vicki Pfau <vi@endrift.com>,  Shuah Khan <shuah@kernel.org>
Cc: linux-input@vger.kernel.org, linux-kselftest@vger.kernel.org,
	 linux-kernel@vger.kernel.org, bpf@vger.kernel.org,
	 Benjamin Tissoires <bentiss@kernel.org>
Subject: [PATCH HID v3 0/9] HID: bpf: add a new hook to control hid-generic
Date: Tue, 01 Oct 2024 16:30:04 +0200	[thread overview]
Message-ID: <20241001-hid-bpf-hid-generic-v3-0-2ef1019468df@kernel.org> (raw)

This is a slight change from the fundamentals of HID-BPF.
In theory, HID-BPF is abstract to the kernel itself, and makes
only changes at the HID level (through report descriptors or
events emitted to/from the device).

However, we have seen a few use cases where HID-BPF might interact with
the running kernel when the target device is already handled by a
specific device.

For example, the XP-Pen/Huion/UC-Logic tablets are handled by
hid-uclogic but this driver is also doing a report descriptor fixup
without checking if the device has already been fixed by HID-BPF.

In the same way, another recent example[0] was when a cheap foot pedal is
used and tricks iPhones and Windows machines by presenting itself as a
known Apple wireless keyboard. The problem is that this fake keyboard is
not presenting a compatible report descriptor and hid-core merges all
device nodes together making libinput ignore the keyboard part for
historical reasons.

This series aims at tackling this problem:
- first, we promote hid_bpf_report_descriptor_fixup to be called before
  any driver is even matched for the device
- then we allow hdev->quirks to be written during report_fixup and add a
  new quirk to force hid-core to ignore any non hid-generic driver.

Basically, it means that when we insert a BPF program to fix a device,
we can force hid-generic to handle the device, and thus preventing
any other kernel driver to tamper with our device.

This branch is on top of the for-6.12/upstream-fixes branch of hid.git.

[0] https://gitlab.freedesktop.org/libinput/libinput/-/issues/1014

Signed-off-by: Benjamin Tissoires <bentiss@kernel.org>
---
Changes in v3:
- dropped the last 2 patches with hid-input control, as I'm not 100%
  sure of it
- changed the first patch to avoid a double free on cleanup of a device
  when a HID-BPF program was attached
- kept Peter's rev-by for all but patches 1 and 6
- Link to v2: https://lore.kernel.org/r/20240910-hid-bpf-hid-generic-v2-0-083dfc189e97@kernel.org

Changes in v2:
- Refactored the API to not use a new hook but hid_bpf_rdesc_fixup
  instead
- Some cleanups in hid-core.c probe() device to not kmemdup multiple
  time the report descriptor when it's not required
- I'm still not 100% sure the HID_QUIRK_IGNORE_HIDINPUT is that
  required, but I can not think of anything else at the moment to
  temporary disable any driver input device.
- Link to v1: https://lore.kernel.org/r/20240903-hid-bpf-hid-generic-v1-0-9511a565b2da@kernel.org

---
Benjamin Tissoires (9):
      HID: bpf: move HID-BPF report descriptor fixup earlier
      HID: core: save one kmemdup during .probe()
      HID: core: remove one more kmemdup on .probe()
      HID: bpf: allow write access to quirks field in struct hid_device
      selftests/hid: add dependency on hid_common.h
      selftests/hid: cleanup C tests by adding a common struct uhid_device
      selftests/hid: allow to parametrize bus/vid/pid/rdesc on the test device
      HID: add per device quirk to force bind to hid-generic
      selftests/hid: add test for assigning a given device to hid-generic

 drivers/hid/bpf/hid_bpf_dispatch.c                 |   9 +-
 drivers/hid/bpf/hid_bpf_struct_ops.c               |   1 +
 drivers/hid/hid-core.c                             |  84 +++++++++---
 drivers/hid/hid-generic.c                          |   3 +
 include/linux/hid.h                                |  20 +--
 include/linux/hid_bpf.h                            |  11 +-
 tools/testing/selftests/hid/Makefile               |   2 +-
 tools/testing/selftests/hid/hid_bpf.c              | 151 ++++++++++++++-------
 tools/testing/selftests/hid/hid_common.h           | 112 ++++++++++-----
 tools/testing/selftests/hid/hidraw.c               |  36 ++---
 tools/testing/selftests/hid/progs/hid.c            |  12 ++
 .../testing/selftests/hid/progs/hid_bpf_helpers.h  |   6 +-
 12 files changed, 296 insertions(+), 151 deletions(-)
---
base-commit: acd5f76fd5292c91628e04da83e8b78c986cfa2b
change-id: 20240829-hid-bpf-hid-generic-61579f5b5945

Best regards,
-- 
Benjamin Tissoires <bentiss@kernel.org>


             reply	other threads:[~2024-10-01 14:30 UTC|newest]

Thread overview: 12+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2024-10-01 14:30 Benjamin Tissoires [this message]
2024-10-01 14:30 ` [PATCH HID v3 1/9] HID: bpf: move HID-BPF report descriptor fixup earlier Benjamin Tissoires
2024-10-01 14:30 ` [PATCH HID v3 2/9] HID: core: save one kmemdup during .probe() Benjamin Tissoires
2024-10-01 14:30 ` [PATCH HID v3 3/9] HID: core: remove one more kmemdup on .probe() Benjamin Tissoires
2024-10-01 14:30 ` [PATCH HID v3 4/9] HID: bpf: allow write access to quirks field in struct hid_device Benjamin Tissoires
2024-10-01 14:30 ` [PATCH HID v3 5/9] selftests/hid: add dependency on hid_common.h Benjamin Tissoires
2024-10-01 14:30 ` [PATCH HID v3 6/9] selftests/hid: cleanup C tests by adding a common struct uhid_device Benjamin Tissoires
2024-10-01 14:30 ` [PATCH HID v3 7/9] selftests/hid: allow to parametrize bus/vid/pid/rdesc on the test device Benjamin Tissoires
2024-10-01 14:30 ` [PATCH HID v3 8/9] HID: add per device quirk to force bind to hid-generic Benjamin Tissoires
2024-10-01 14:30 ` [PATCH HID v3 9/9] selftests/hid: add test for assigning a given device " Benjamin Tissoires
2024-10-02 22:43 ` [PATCH HID v3 0/9] HID: bpf: add a new hook to control hid-generic Shuah Khan
2024-10-04 14:12 ` Benjamin Tissoires

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20241001-hid-bpf-hid-generic-v3-0-2ef1019468df@kernel.org \
    --to=bentiss@kernel.org \
    --cc=bpf@vger.kernel.org \
    --cc=jikos@kernel.org \
    --cc=linux-input@vger.kernel.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=linux-kselftest@vger.kernel.org \
    --cc=peter.hutterer@who-t.net \
    --cc=shuah@kernel.org \
    --cc=vi@endrift.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).