2 * SPDX-License-Identifier: BSD-2-Clause-FreeBSD
4 * Copyright (c) 2008 Ed Schouten <ed@FreeBSD.org>
7 * Portions of this software were developed under sponsorship from Snow
8 * B.V., the Netherlands.
10 * Redistribution and use in source and binary forms, with or without
11 * modification, are permitted provided that the following conditions
13 * 1. Redistributions of source code must retain the above copyright
14 * notice, this list of conditions and the following disclaimer.
15 * 2. Redistributions in binary form must reproduce the above copyright
16 * notice, this list of conditions and the following disclaimer in the
17 * documentation and/or other materials provided with the distribution.
19 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
20 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
21 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
22 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
23 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
24 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
25 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
26 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
27 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
28 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
32 #include <sys/cdefs.h>
33 __FBSDID("$FreeBSD$");
35 #include "opt_capsicum.h"
36 #include "opt_printf.h"
38 #include <sys/param.h>
39 #include <sys/capsicum.h>
42 #include <sys/fcntl.h>
44 #include <sys/filedesc.h>
45 #include <sys/filio.h>
47 #include <sys/ioctl_compat.h>
48 #endif /* COMPAT_43TTY */
49 #include <sys/kernel.h>
50 #include <sys/limits.h>
51 #include <sys/malloc.h>
52 #include <sys/mount.h>
56 #include <sys/serial.h>
57 #include <sys/signal.h>
60 #include <sys/sysctl.h>
61 #include <sys/systm.h>
63 #include <sys/ttycom.h>
65 #include <sys/ttydefaults.h>
67 #include <sys/ucred.h>
68 #include <sys/vnode.h>
70 #include <fs/devfs/devfs.h>
72 #include <machine/stdarg.h>
74 static MALLOC_DEFINE(M_TTY, "tty", "tty device");
76 static void tty_rel_free(struct tty *tp);
78 static TAILQ_HEAD(, tty) tty_list = TAILQ_HEAD_INITIALIZER(tty_list);
79 static struct sx tty_list_sx;
80 SX_SYSINIT(tty_list, &tty_list_sx, "tty list");
81 static unsigned int tty_list_count = 0;
83 /* Character device of /dev/console. */
84 static struct cdev *dev_console;
85 static const char *dev_console_filename;
88 * Flags that are supported and stored by this implementation.
90 #define TTYSUP_IFLAG (IGNBRK|BRKINT|IGNPAR|PARMRK|INPCK|ISTRIP|\
91 INLCR|IGNCR|ICRNL|IXON|IXOFF|IXANY|IMAXBEL)
92 #define TTYSUP_OFLAG (OPOST|ONLCR|TAB3|ONOEOT|OCRNL|ONOCR|ONLRET)
93 #define TTYSUP_LFLAG (ECHOKE|ECHOE|ECHOK|ECHO|ECHONL|ECHOPRT|\
94 ECHOCTL|ISIG|ICANON|ALTWERASE|IEXTEN|TOSTOP|\
95 FLUSHO|NOKERNINFO|NOFLSH)
96 #define TTYSUP_CFLAG (CIGNORE|CSIZE|CSTOPB|CREAD|PARENB|PARODD|\
97 HUPCL|CLOCAL|CCTS_OFLOW|CRTS_IFLOW|CDTR_IFLOW|\
98 CDSR_OFLOW|CCAR_OFLOW|CNO_RTSDTR)
100 #define TTY_CALLOUT(tp,d) (dev2unit(d) & TTYUNIT_CALLOUT)
102 static int tty_drainwait = 5 * 60;
103 SYSCTL_INT(_kern, OID_AUTO, tty_drainwait, CTLFLAG_RWTUN,
104 &tty_drainwait, 0, "Default output drain timeout in seconds");
107 * Set TTY buffer sizes.
110 #define TTYBUF_MAX 65536
112 #ifdef PRINTF_BUFR_SIZE
113 #define TTY_PRBUF_SIZE PRINTF_BUFR_SIZE
115 #define TTY_PRBUF_SIZE 256
119 * Allocate buffer space if necessary, and set low watermarks, based on speed.
120 * Note that the ttyxxxq_setsize() functions may drop and then reacquire the tty
121 * lock during memory allocation. They will return ENXIO if the tty disappears
125 tty_watermarks(struct tty *tp)
130 /* Provide an input buffer for 2 seconds of data. */
131 if (tp->t_termios.c_cflag & CREAD)
132 bs = MIN(tp->t_termios.c_ispeed / 5, TTYBUF_MAX);
133 error = ttyinq_setsize(&tp->t_inq, tp, bs);
137 /* Set low watermark at 10% (when 90% is available). */
138 tp->t_inlow = (ttyinq_getallocatedsize(&tp->t_inq) * 9) / 10;
140 /* Provide an output buffer for 2 seconds of data. */
141 bs = MIN(tp->t_termios.c_ospeed / 5, TTYBUF_MAX);
142 error = ttyoutq_setsize(&tp->t_outq, tp, bs);
146 /* Set low watermark at 10% (when 90% is available). */
147 tp->t_outlow = (ttyoutq_getallocatedsize(&tp->t_outq) * 9) / 10;
153 tty_drain(struct tty *tp, int leaving)
155 sbintime_t timeout_at;
159 if (ttyhook_hashook(tp, getc_inject))
160 /* buffer is inaccessible */
164 * For close(), use the recent historic timeout of "1 second without
165 * making progress". For tcdrain(), use t_drainwait as the timeout,
166 * with zero meaning "no timeout" which gives POSIX behavior.
169 timeout_at = getsbinuptime() + SBT_1S;
170 else if (tp->t_drainwait != 0)
171 timeout_at = getsbinuptime() + SBT_1S * tp->t_drainwait;
176 * Poll the output buffer and the hardware for completion, at 10 Hz.
177 * Polling is required for devices which are not able to signal an
178 * interrupt when the transmitter becomes idle (most USB serial devs).
179 * The unusual structure of this loop ensures we check for busy one more
180 * time after tty_timedwait() returns EWOULDBLOCK, so that success has
181 * higher priority than timeout if the IO completed in the last 100mS.
184 bytes = ttyoutq_bytesused(&tp->t_outq);
186 if (ttyoutq_bytesused(&tp->t_outq) == 0 && !ttydevsw_busy(tp))
190 ttydevsw_outwakeup(tp);
191 error = tty_timedwait(tp, &tp->t_outwait, hz / 10);
192 if (error != 0 && error != EWOULDBLOCK)
194 else if (timeout_at == 0 || getsbinuptime() < timeout_at)
196 else if (leaving && ttyoutq_bytesused(&tp->t_outq) < bytes) {
197 /* In close, making progress, grant an extra second. */
199 timeout_at += SBT_1S;
200 bytes = ttyoutq_bytesused(&tp->t_outq);
206 * Though ttydev_enter() and ttydev_leave() seem to be related, they
207 * don't have to be used together. ttydev_enter() is used by the cdev
208 * operations to prevent an actual operation from being processed when
209 * the TTY has been abandoned. ttydev_leave() is used by ttydev_open()
210 * and ttydev_close() to determine whether per-TTY data should be
215 ttydev_enter(struct tty *tp)
220 if (tty_gone(tp) || !tty_opened(tp)) {
221 /* Device is already gone. */
230 ttydev_leave(struct tty *tp)
233 tty_assert_locked(tp);
235 if (tty_opened(tp) || tp->t_flags & TF_OPENCLOSE) {
236 /* Device is still opened somewhere. */
241 tp->t_flags |= TF_OPENCLOSE;
243 /* Remove console TTY. */
247 /* Drain any output. */
253 /* Free i/o queues now since they might be large. */
254 ttyinq_free(&tp->t_inq);
256 ttyoutq_free(&tp->t_outq);
259 knlist_clear(&tp->t_inpoll.si_note, 1);
260 knlist_clear(&tp->t_outpoll.si_note, 1);
265 tp->t_flags &= ~TF_OPENCLOSE;
266 cv_broadcast(&tp->t_dcdwait);
271 * Operations that are exposed through the character device in /dev.
274 ttydev_open(struct cdev *dev, int oflags, int devtype __unused,
284 /* Device is already gone. */
290 * Block when other processes are currently opening or closing
293 while (tp->t_flags & TF_OPENCLOSE) {
294 error = tty_wait(tp, &tp->t_dcdwait);
300 tp->t_flags |= TF_OPENCLOSE;
303 * Make sure the "tty" and "cua" device cannot be opened at the
304 * same time. The console is a "tty" device.
306 if (TTY_CALLOUT(tp, dev)) {
307 if (tp->t_flags & (TF_OPENED_CONS | TF_OPENED_IN)) {
312 if (tp->t_flags & TF_OPENED_OUT) {
318 if (tp->t_flags & TF_EXCLUDE && priv_check(td, PRIV_TTY_EXCLUSIVE)) {
323 if (!tty_opened(tp)) {
324 /* Set proper termios flags. */
325 if (TTY_CALLOUT(tp, dev))
326 tp->t_termios = tp->t_termios_init_out;
328 tp->t_termios = tp->t_termios_init_in;
329 ttydevsw_param(tp, &tp->t_termios);
330 /* Prevent modem control on callout devices and /dev/console. */
331 if (TTY_CALLOUT(tp, dev) || dev == dev_console)
332 tp->t_termios.c_cflag |= CLOCAL;
334 if ((tp->t_termios.c_cflag & CNO_RTSDTR) == 0)
335 ttydevsw_modem(tp, SER_DTR|SER_RTS, 0);
337 error = ttydevsw_open(tp);
342 error = tty_watermarks(tp);
347 /* Wait for Carrier Detect. */
348 if ((oflags & O_NONBLOCK) == 0 &&
349 (tp->t_termios.c_cflag & CLOCAL) == 0) {
350 while ((ttydevsw_modem(tp, 0, 0) & SER_DCD) == 0) {
351 error = tty_wait(tp, &tp->t_dcdwait);
357 if (dev == dev_console)
358 tp->t_flags |= TF_OPENED_CONS;
359 else if (TTY_CALLOUT(tp, dev))
360 tp->t_flags |= TF_OPENED_OUT;
362 tp->t_flags |= TF_OPENED_IN;
363 MPASS((tp->t_flags & (TF_OPENED_CONS | TF_OPENED_IN)) == 0 ||
364 (tp->t_flags & TF_OPENED_OUT) == 0);
366 done: tp->t_flags &= ~TF_OPENCLOSE;
367 cv_broadcast(&tp->t_dcdwait);
374 ttydev_close(struct cdev *dev, int fflag, int devtype __unused,
375 struct thread *td __unused)
377 struct tty *tp = dev->si_drv1;
382 * Don't actually close the device if it is being used as the
385 MPASS((tp->t_flags & (TF_OPENED_CONS | TF_OPENED_IN)) == 0 ||
386 (tp->t_flags & TF_OPENED_OUT) == 0);
387 if (dev == dev_console)
388 tp->t_flags &= ~TF_OPENED_CONS;
390 tp->t_flags &= ~(TF_OPENED_IN|TF_OPENED_OUT);
392 if (tp->t_flags & TF_OPENED) {
397 /* If revoking, flush output now to avoid draining it later. */
399 tty_flush(tp, FWRITE);
401 tp->t_flags &= ~TF_EXCLUDE;
403 /* Properly wake up threads that are stuck - revoke(). */
405 tty_wakeup(tp, FREAD|FWRITE);
406 cv_broadcast(&tp->t_bgwait);
407 cv_broadcast(&tp->t_dcdwait);
415 tty_is_ctty(struct tty *tp, struct proc *p)
418 tty_assert_locked(tp);
420 return (p->p_session == tp->t_session && p->p_flag & P_CONTROLT);
424 tty_wait_background(struct tty *tp, struct thread *td, int sig)
431 MPASS(sig == SIGTTIN || sig == SIGTTOU);
432 tty_assert_locked(tp);
441 * pg may no longer be our process group.
442 * Re-check after locking.
444 if (p->p_pgrp != pg) {
451 * The process should only sleep, when:
452 * - This terminal is the controlling terminal
453 * - Its process group is not the foreground process
455 * - The parent process isn't waiting for the child to
457 * - the signal to send to the process isn't masked
459 if (!tty_is_ctty(tp, p) || p->p_pgrp == tp->t_pgrp) {
460 /* Allow the action to happen. */
466 if (SIGISMEMBER(p->p_sigacts->ps_sigignore, sig) ||
467 SIGISMEMBER(td->td_sigmask, sig)) {
468 /* Only allow them in write()/ioctl(). */
471 return (sig == SIGTTOU ? 0 : EIO);
474 if ((p->p_flag & P_PPWAIT) != 0 ||
475 (pg->pg_flags & PGRP_ORPHANED) != 0) {
476 /* Don't allow the action to happen. */
484 * Send the signal and sleep until we're the new
485 * foreground process group.
489 ksi.ksi_code = SI_KERNEL;
494 pgsignal(pg, ksi.ksi_signo, 1, &ksi);
497 error = tty_wait(tp, &tp->t_bgwait);
504 ttydev_read(struct cdev *dev, struct uio *uio, int ioflag)
506 struct tty *tp = dev->si_drv1;
509 error = ttydev_enter(tp);
512 error = ttydisc_read(tp, uio, ioflag);
516 * The read() call should not throw an error when the device is
517 * being destroyed. Silently convert it to an EOF.
519 done: if (error == ENXIO)
525 ttydev_write(struct cdev *dev, struct uio *uio, int ioflag)
527 struct tty *tp = dev->si_drv1;
530 error = ttydev_enter(tp);
534 if (tp->t_termios.c_lflag & TOSTOP) {
535 error = tty_wait_background(tp, curthread, SIGTTOU);
540 if (ioflag & IO_NDELAY && tp->t_flags & TF_BUSY_OUT) {
541 /* Allow non-blocking writes to bypass serialization. */
542 error = ttydisc_write(tp, uio, ioflag);
544 /* Serialize write() calls. */
545 while (tp->t_flags & TF_BUSY_OUT) {
546 error = tty_wait(tp, &tp->t_outserwait);
551 tp->t_flags |= TF_BUSY_OUT;
552 defer = sigdeferstop(SIGDEFERSTOP_ERESTART);
553 error = ttydisc_write(tp, uio, ioflag);
555 tp->t_flags &= ~TF_BUSY_OUT;
556 cv_signal(&tp->t_outserwait);
559 done: tty_unlock(tp);
564 ttydev_ioctl(struct cdev *dev, u_long cmd, caddr_t data, int fflag,
567 struct tty *tp = dev->si_drv1;
570 error = ttydev_enter(tp);
605 #endif /* COMPAT_43TTY */
607 * If the ioctl() causes the TTY to be modified, let it
608 * wait in the background.
610 error = tty_wait_background(tp, curthread, SIGTTOU);
615 if (cmd == TIOCSETA || cmd == TIOCSETAW || cmd == TIOCSETAF) {
616 struct termios *old = &tp->t_termios;
617 struct termios *new = (struct termios *)data;
618 struct termios *lock = TTY_CALLOUT(tp, dev) ?
619 &tp->t_termios_lock_out : &tp->t_termios_lock_in;
623 * Lock state devices. Just overwrite the values of the
624 * commands that are currently in use.
626 new->c_iflag = (old->c_iflag & lock->c_iflag) |
627 (new->c_iflag & ~lock->c_iflag);
628 new->c_oflag = (old->c_oflag & lock->c_oflag) |
629 (new->c_oflag & ~lock->c_oflag);
630 new->c_cflag = (old->c_cflag & lock->c_cflag) |
631 (new->c_cflag & ~lock->c_cflag);
632 new->c_lflag = (old->c_lflag & lock->c_lflag) |
633 (new->c_lflag & ~lock->c_lflag);
634 for (cc = 0; cc < NCCS; ++cc)
636 new->c_cc[cc] = old->c_cc[cc];
638 new->c_ispeed = old->c_ispeed;
640 new->c_ospeed = old->c_ospeed;
643 error = tty_ioctl(tp, cmd, data, fflag, td);
644 done: tty_unlock(tp);
650 ttydev_poll(struct cdev *dev, int events, struct thread *td)
652 struct tty *tp = dev->si_drv1;
653 int error, revents = 0;
655 error = ttydev_enter(tp);
657 return ((events & (POLLIN|POLLRDNORM)) | POLLHUP);
659 if (events & (POLLIN|POLLRDNORM)) {
660 /* See if we can read something. */
661 if (ttydisc_read_poll(tp) > 0)
662 revents |= events & (POLLIN|POLLRDNORM);
665 if (tp->t_flags & TF_ZOMBIE) {
666 /* Hangup flag on zombie state. */
668 } else if (events & (POLLOUT|POLLWRNORM)) {
669 /* See if we can write something. */
670 if (ttydisc_write_poll(tp) > 0)
671 revents |= events & (POLLOUT|POLLWRNORM);
675 if (events & (POLLIN|POLLRDNORM))
676 selrecord(td, &tp->t_inpoll);
677 if (events & (POLLOUT|POLLWRNORM))
678 selrecord(td, &tp->t_outpoll);
687 ttydev_mmap(struct cdev *dev, vm_ooffset_t offset, vm_paddr_t *paddr,
688 int nprot, vm_memattr_t *memattr)
690 struct tty *tp = dev->si_drv1;
693 /* Handle mmap() through the driver. */
695 error = ttydev_enter(tp);
698 error = ttydevsw_mmap(tp, offset, paddr, nprot, memattr);
709 tty_kqops_read_detach(struct knote *kn)
711 struct tty *tp = kn->kn_hook;
713 knlist_remove(&tp->t_inpoll.si_note, kn, 0);
717 tty_kqops_read_event(struct knote *kn, long hint __unused)
719 struct tty *tp = kn->kn_hook;
721 tty_assert_locked(tp);
723 if (tty_gone(tp) || tp->t_flags & TF_ZOMBIE) {
724 kn->kn_flags |= EV_EOF;
727 kn->kn_data = ttydisc_read_poll(tp);
728 return (kn->kn_data > 0);
733 tty_kqops_write_detach(struct knote *kn)
735 struct tty *tp = kn->kn_hook;
737 knlist_remove(&tp->t_outpoll.si_note, kn, 0);
741 tty_kqops_write_event(struct knote *kn, long hint __unused)
743 struct tty *tp = kn->kn_hook;
745 tty_assert_locked(tp);
748 kn->kn_flags |= EV_EOF;
751 kn->kn_data = ttydisc_write_poll(tp);
752 return (kn->kn_data > 0);
756 static struct filterops tty_kqops_read = {
758 .f_detach = tty_kqops_read_detach,
759 .f_event = tty_kqops_read_event,
762 static struct filterops tty_kqops_write = {
764 .f_detach = tty_kqops_write_detach,
765 .f_event = tty_kqops_write_event,
769 ttydev_kqfilter(struct cdev *dev, struct knote *kn)
771 struct tty *tp = dev->si_drv1;
774 error = ttydev_enter(tp);
778 switch (kn->kn_filter) {
781 kn->kn_fop = &tty_kqops_read;
782 knlist_add(&tp->t_inpoll.si_note, kn, 1);
786 kn->kn_fop = &tty_kqops_write;
787 knlist_add(&tp->t_outpoll.si_note, kn, 1);
798 static struct cdevsw ttydev_cdevsw = {
799 .d_version = D_VERSION,
800 .d_open = ttydev_open,
801 .d_close = ttydev_close,
802 .d_read = ttydev_read,
803 .d_write = ttydev_write,
804 .d_ioctl = ttydev_ioctl,
805 .d_kqfilter = ttydev_kqfilter,
806 .d_poll = ttydev_poll,
807 .d_mmap = ttydev_mmap,
813 * Init/lock-state devices
817 ttyil_open(struct cdev *dev, int oflags __unused, int devtype __unused,
834 ttyil_close(struct cdev *dev __unused, int flag __unused, int mode __unused,
835 struct thread *td __unused)
842 ttyil_rdwr(struct cdev *dev __unused, struct uio *uio __unused,
850 ttyil_ioctl(struct cdev *dev, u_long cmd, caddr_t data, int fflag,
853 struct tty *tp = dev->si_drv1;
862 error = ttydevsw_cioctl(tp, dev2unit(dev), cmd, data, td);
863 if (error != ENOIOCTL)
869 /* Obtain terminal flags through tcgetattr(). */
870 *(struct termios*)data = *(struct termios*)dev->si_drv2;
873 /* Set terminal flags through tcsetattr(). */
874 error = priv_check(td, PRIV_TTY_SETA);
877 *(struct termios*)dev->si_drv2 = *(struct termios*)data;
880 *(int *)data = TTYDISC;
883 bzero(data, sizeof(struct winsize));
889 done: tty_unlock(tp);
893 static struct cdevsw ttyil_cdevsw = {
894 .d_version = D_VERSION,
895 .d_open = ttyil_open,
896 .d_close = ttyil_close,
897 .d_read = ttyil_rdwr,
898 .d_write = ttyil_rdwr,
899 .d_ioctl = ttyil_ioctl,
905 tty_init_termios(struct tty *tp)
907 struct termios *t = &tp->t_termios_init_in;
909 t->c_cflag = TTYDEF_CFLAG;
910 t->c_iflag = TTYDEF_IFLAG;
911 t->c_lflag = TTYDEF_LFLAG;
912 t->c_oflag = TTYDEF_OFLAG;
913 t->c_ispeed = TTYDEF_SPEED;
914 t->c_ospeed = TTYDEF_SPEED;
915 memcpy(&t->c_cc, ttydefchars, sizeof ttydefchars);
917 tp->t_termios_init_out = *t;
921 tty_init_console(struct tty *tp, speed_t s)
923 struct termios *ti = &tp->t_termios_init_in;
924 struct termios *to = &tp->t_termios_init_out;
927 ti->c_ispeed = ti->c_ospeed = s;
928 to->c_ispeed = to->c_ospeed = s;
931 ti->c_cflag |= CLOCAL;
932 to->c_cflag |= CLOCAL;
936 * Standard device routine implementations, mostly meant for
937 * pseudo-terminal device drivers. When a driver creates a new terminal
938 * device class, missing routines are patched.
942 ttydevsw_defopen(struct tty *tp __unused)
949 ttydevsw_defclose(struct tty *tp __unused)
955 ttydevsw_defoutwakeup(struct tty *tp __unused)
958 panic("Terminal device has output, while not implemented");
962 ttydevsw_definwakeup(struct tty *tp __unused)
968 ttydevsw_defioctl(struct tty *tp __unused, u_long cmd __unused,
969 caddr_t data __unused, struct thread *td __unused)
976 ttydevsw_defcioctl(struct tty *tp __unused, int unit __unused,
977 u_long cmd __unused, caddr_t data __unused, struct thread *td __unused)
984 ttydevsw_defparam(struct tty *tp __unused, struct termios *t)
988 * Allow the baud rate to be adjusted for pseudo-devices, but at
989 * least restrict it to 115200 to prevent excessive buffer
990 * usage. Also disallow 0, to prevent foot shooting.
992 if (t->c_ispeed < B50)
994 else if (t->c_ispeed > B115200)
995 t->c_ispeed = B115200;
996 if (t->c_ospeed < B50)
998 else if (t->c_ospeed > B115200)
999 t->c_ospeed = B115200;
1000 t->c_cflag |= CREAD;
1006 ttydevsw_defmodem(struct tty *tp __unused, int sigon __unused,
1007 int sigoff __unused)
1010 /* Simulate a carrier to make the TTY layer happy. */
1015 ttydevsw_defmmap(struct tty *tp __unused, vm_ooffset_t offset __unused,
1016 vm_paddr_t *paddr __unused, int nprot __unused,
1017 vm_memattr_t *memattr __unused)
1024 ttydevsw_defpktnotify(struct tty *tp __unused, char event __unused)
1030 ttydevsw_deffree(void *softc __unused)
1033 panic("Terminal device freed without a free-handler");
1037 ttydevsw_defbusy(struct tty *tp __unused)
1044 * TTY allocation and deallocation. TTY devices can be deallocated when
1045 * the driver doesn't use it anymore, when the TTY isn't a session's
1046 * controlling TTY and when the device node isn't opened through devfs.
1050 tty_alloc(struct ttydevsw *tsw, void *sc)
1053 return (tty_alloc_mutex(tsw, sc, NULL));
1057 tty_alloc_mutex(struct ttydevsw *tsw, void *sc, struct mtx *mutex)
1061 /* Make sure the driver defines all routines. */
1062 #define PATCH_FUNC(x) do { \
1063 if (tsw->tsw_ ## x == NULL) \
1064 tsw->tsw_ ## x = ttydevsw_def ## x; \
1068 PATCH_FUNC(outwakeup);
1069 PATCH_FUNC(inwakeup);
1075 PATCH_FUNC(pktnotify);
1080 tp = malloc(sizeof(struct tty) + TTY_PRBUF_SIZE, M_TTY,
1082 tp->t_prbufsz = TTY_PRBUF_SIZE;
1084 tp->t_devswsoftc = sc;
1085 tp->t_flags = tsw->tsw_flags;
1086 tp->t_drainwait = tty_drainwait;
1088 tty_init_termios(tp);
1090 cv_init(&tp->t_inwait, "ttyin");
1091 cv_init(&tp->t_outwait, "ttyout");
1092 cv_init(&tp->t_outserwait, "ttyosr");
1093 cv_init(&tp->t_bgwait, "ttybg");
1094 cv_init(&tp->t_dcdwait, "ttydcd");
1096 /* Allow drivers to use a custom mutex to lock the TTY. */
1097 if (mutex != NULL) {
1100 tp->t_mtx = &tp->t_mtxobj;
1101 mtx_init(&tp->t_mtxobj, "ttymtx", NULL, MTX_DEF);
1104 knlist_init_mtx(&tp->t_inpoll.si_note, tp->t_mtx);
1105 knlist_init_mtx(&tp->t_outpoll.si_note, tp->t_mtx);
1111 tty_dealloc(void *arg)
1113 struct tty *tp = arg;
1116 * ttyydev_leave() usually frees the i/o queues earlier, but it is
1117 * not always called between queue allocation and here. The queues
1118 * may be allocated by ioctls on a pty control device without the
1119 * corresponding pty slave device ever being open, or after it is
1122 ttyinq_free(&tp->t_inq);
1123 ttyoutq_free(&tp->t_outq);
1124 seldrain(&tp->t_inpoll);
1125 seldrain(&tp->t_outpoll);
1126 knlist_destroy(&tp->t_inpoll.si_note);
1127 knlist_destroy(&tp->t_outpoll.si_note);
1129 cv_destroy(&tp->t_inwait);
1130 cv_destroy(&tp->t_outwait);
1131 cv_destroy(&tp->t_bgwait);
1132 cv_destroy(&tp->t_dcdwait);
1133 cv_destroy(&tp->t_outserwait);
1135 if (tp->t_mtx == &tp->t_mtxobj)
1136 mtx_destroy(&tp->t_mtxobj);
1142 tty_rel_free(struct tty *tp)
1146 tty_assert_locked(tp);
1148 #define TF_ACTIVITY (TF_GONE|TF_OPENED|TF_HOOK|TF_OPENCLOSE)
1149 if (tp->t_sessioncnt != 0 || (tp->t_flags & TF_ACTIVITY) != TF_GONE) {
1150 /* TTY is still in use. */
1155 /* Stop asynchronous I/O. */
1156 funsetown(&tp->t_sigio);
1158 /* TTY can be deallocated. */
1164 sx_xlock(&tty_list_sx);
1165 TAILQ_REMOVE(&tty_list, tp, t_list);
1167 sx_xunlock(&tty_list_sx);
1168 destroy_dev_sched_cb(dev, tty_dealloc, tp);
1173 tty_rel_pgrp(struct tty *tp, struct pgrp *pg)
1176 MPASS(tp->t_sessioncnt > 0);
1177 tty_assert_locked(tp);
1179 if (tp->t_pgrp == pg)
1186 tty_rel_sess(struct tty *tp, struct session *sess)
1189 MPASS(tp->t_sessioncnt > 0);
1191 /* Current session has left. */
1192 if (tp->t_session == sess) {
1193 tp->t_session = NULL;
1194 MPASS(tp->t_pgrp == NULL);
1201 tty_rel_gone(struct tty *tp)
1204 tty_assert_locked(tp);
1205 MPASS(!tty_gone(tp));
1207 /* Simulate carrier removal. */
1208 ttydisc_modem(tp, 0);
1210 /* Wake up all blocked threads. */
1211 tty_wakeup(tp, FREAD|FWRITE);
1212 cv_broadcast(&tp->t_bgwait);
1213 cv_broadcast(&tp->t_dcdwait);
1215 tp->t_flags |= TF_GONE;
1220 tty_drop_ctty(struct tty *tp, struct proc *p)
1222 struct session *session;
1226 * This looks terrible, but it's generally safe as long as the tty
1227 * hasn't gone away while we had the lock dropped. All of our sanity
1228 * checking that this operation is OK happens after we've picked it back
1229 * up, so other state changes are generally not fatal and the potential
1230 * for this particular operation to happen out-of-order in a
1231 * multithreaded scenario is likely a non-issue.
1234 sx_xlock(&proctree_lock);
1237 sx_xunlock(&proctree_lock);
1242 * If the session doesn't have a controlling TTY, or if we weren't
1243 * invoked on the controlling TTY, we'll return ENOIOCTL as we've
1244 * historically done.
1246 session = p->p_session;
1247 if (session->s_ttyp == NULL || session->s_ttyp != tp) {
1248 sx_xunlock(&proctree_lock);
1252 if (!SESS_LEADER(p)) {
1253 sx_xunlock(&proctree_lock);
1259 vp = session->s_ttyvp;
1260 session->s_ttyp = NULL;
1261 session->s_ttyvp = NULL;
1262 session->s_ttydp = NULL;
1263 SESS_UNLOCK(session);
1266 p->p_flag &= ~P_CONTROLT;
1268 sx_xunlock(&proctree_lock);
1271 * If we did have a vnode, release our reference. Ordinarily we manage
1272 * these at the devfs layer, but we can't necessarily know that we were
1273 * invoked on the vnode referenced in the session (i.e. the vnode we
1274 * hold a reference to). We explicitly don't check VBAD/VIRF_DOOMED here
1275 * to avoid a vnode leak -- in circumstances elsewhere where we'd hit a
1276 * VIRF_DOOMED vnode, release has been deferred until the controlling TTY
1277 * is either changed or released.
1280 devfs_ctty_unref(vp);
1285 * Exposing information about current TTY's through sysctl
1289 tty_to_xtty(struct tty *tp, struct xtty *xt)
1292 tty_assert_locked(tp);
1294 xt->xt_size = sizeof(struct xtty);
1295 xt->xt_insize = ttyinq_getsize(&tp->t_inq);
1296 xt->xt_incc = ttyinq_bytescanonicalized(&tp->t_inq);
1297 xt->xt_inlc = ttyinq_bytesline(&tp->t_inq);
1298 xt->xt_inlow = tp->t_inlow;
1299 xt->xt_outsize = ttyoutq_getsize(&tp->t_outq);
1300 xt->xt_outcc = ttyoutq_bytesused(&tp->t_outq);
1301 xt->xt_outlow = tp->t_outlow;
1302 xt->xt_column = tp->t_column;
1303 xt->xt_pgid = tp->t_pgrp ? tp->t_pgrp->pg_id : 0;
1304 xt->xt_sid = tp->t_session ? tp->t_session->s_sid : 0;
1305 xt->xt_flags = tp->t_flags;
1306 xt->xt_dev = tp->t_dev ? dev2udev(tp->t_dev) : (uint32_t)NODEV;
1310 sysctl_kern_ttys(SYSCTL_HANDLER_ARGS)
1312 unsigned long lsize;
1313 struct xtty *xtlist, *xt;
1317 sx_slock(&tty_list_sx);
1318 lsize = tty_list_count * sizeof(struct xtty);
1320 sx_sunlock(&tty_list_sx);
1324 xtlist = xt = malloc(lsize, M_TTY, M_WAITOK);
1326 TAILQ_FOREACH(tp, &tty_list, t_list) {
1328 tty_to_xtty(tp, xt);
1332 sx_sunlock(&tty_list_sx);
1334 error = SYSCTL_OUT(req, xtlist, lsize);
1335 free(xtlist, M_TTY);
1339 SYSCTL_PROC(_kern, OID_AUTO, ttys, CTLTYPE_OPAQUE|CTLFLAG_RD|CTLFLAG_MPSAFE,
1340 0, 0, sysctl_kern_ttys, "S,xtty", "List of TTYs");
1343 * Device node creation. Device has been set up, now we can expose it to
1348 tty_makedevf(struct tty *tp, struct ucred *cred, int flags,
1349 const char *fmt, ...)
1352 struct make_dev_args args;
1353 struct cdev *dev, *init, *lock, *cua, *cinit, *clock;
1354 const char *prefix = "tty";
1355 char name[SPECNAMELEN - 3]; /* for "tty" and "cua". */
1361 /* Remove "tty" prefix from devices like PTY's. */
1362 if (tp->t_flags & TF_NOPREFIX)
1366 vsnrprintf(name, sizeof name, 32, fmt, ap);
1370 /* System device. */
1373 mode = S_IRUSR|S_IWUSR;
1376 uid = cred->cr_ruid;
1378 mode = S_IRUSR|S_IWUSR|S_IWGRP;
1381 flags = flags & TTYMK_CLONING ? MAKEDEV_REF : 0;
1382 flags |= MAKEDEV_CHECKNAME;
1384 /* Master call-in device. */
1385 make_dev_args_init(&args);
1386 args.mda_flags = flags;
1387 args.mda_devsw = &ttydev_cdevsw;
1391 args.mda_mode = mode;
1392 args.mda_si_drv1 = tp;
1393 error = make_dev_s(&args, &dev, "%s%s", prefix, name);
1398 init = lock = cua = cinit = clock = NULL;
1400 /* Slave call-in devices. */
1401 if (tp->t_flags & TF_INITLOCK) {
1402 args.mda_devsw = &ttyil_cdevsw;
1403 args.mda_unit = TTYUNIT_INIT;
1404 args.mda_si_drv1 = tp;
1405 args.mda_si_drv2 = &tp->t_termios_init_in;
1406 error = make_dev_s(&args, &init, "%s%s.init", prefix, name);
1409 dev_depends(dev, init);
1411 args.mda_unit = TTYUNIT_LOCK;
1412 args.mda_si_drv2 = &tp->t_termios_lock_in;
1413 error = make_dev_s(&args, &lock, "%s%s.lock", prefix, name);
1416 dev_depends(dev, lock);
1419 /* Call-out devices. */
1420 if (tp->t_flags & TF_CALLOUT) {
1421 make_dev_args_init(&args);
1422 args.mda_flags = flags;
1423 args.mda_devsw = &ttydev_cdevsw;
1425 args.mda_uid = UID_UUCP;
1426 args.mda_gid = GID_DIALER;
1427 args.mda_mode = 0660;
1428 args.mda_unit = TTYUNIT_CALLOUT;
1429 args.mda_si_drv1 = tp;
1430 error = make_dev_s(&args, &cua, "cua%s", name);
1433 dev_depends(dev, cua);
1435 /* Slave call-out devices. */
1436 if (tp->t_flags & TF_INITLOCK) {
1437 args.mda_devsw = &ttyil_cdevsw;
1438 args.mda_unit = TTYUNIT_CALLOUT | TTYUNIT_INIT;
1439 args.mda_si_drv2 = &tp->t_termios_init_out;
1440 error = make_dev_s(&args, &cinit, "cua%s.init", name);
1443 dev_depends(dev, cinit);
1445 args.mda_unit = TTYUNIT_CALLOUT | TTYUNIT_LOCK;
1446 args.mda_si_drv2 = &tp->t_termios_lock_out;
1447 error = make_dev_s(&args, &clock, "cua%s.lock", name);
1450 dev_depends(dev, clock);
1454 sx_xlock(&tty_list_sx);
1455 TAILQ_INSERT_TAIL(&tty_list, tp, t_list);
1457 sx_xunlock(&tty_list_sx);
1476 * Signalling processes.
1480 tty_signal_sessleader(struct tty *tp, int sig)
1485 tty_assert_locked(tp);
1486 MPASS(sig >= 1 && sig < NSIG);
1488 /* Make signals start output again. */
1489 tp->t_flags &= ~TF_STOPPED;
1490 tp->t_termios.c_lflag &= ~FLUSHO;
1493 * Load s_leader exactly once to avoid race where s_leader is
1494 * set to NULL by a concurrent invocation of killjobc() by the
1495 * session leader. Note that we are not holding t_session's
1496 * lock for the read.
1498 if ((s = tp->t_session) != NULL &&
1499 (p = atomic_load_ptr(&s->s_leader)) != NULL) {
1501 kern_psignal(p, sig);
1507 tty_signal_pgrp(struct tty *tp, int sig)
1511 tty_assert_locked(tp);
1512 MPASS(sig >= 1 && sig < NSIG);
1514 /* Make signals start output again. */
1515 tp->t_flags &= ~TF_STOPPED;
1516 tp->t_termios.c_lflag &= ~FLUSHO;
1518 if (sig == SIGINFO && !(tp->t_termios.c_lflag & NOKERNINFO))
1520 if (tp->t_pgrp != NULL) {
1521 ksiginfo_init(&ksi);
1522 ksi.ksi_signo = sig;
1523 ksi.ksi_code = SI_KERNEL;
1524 PGRP_LOCK(tp->t_pgrp);
1525 pgsignal(tp->t_pgrp, sig, 1, &ksi);
1526 PGRP_UNLOCK(tp->t_pgrp);
1531 tty_wakeup(struct tty *tp, int flags)
1534 if (tp->t_flags & TF_ASYNC && tp->t_sigio != NULL)
1535 pgsigio(&tp->t_sigio, SIGIO, (tp->t_session != NULL));
1537 if (flags & FWRITE) {
1538 cv_broadcast(&tp->t_outwait);
1539 selwakeup(&tp->t_outpoll);
1540 KNOTE_LOCKED(&tp->t_outpoll.si_note, 0);
1542 if (flags & FREAD) {
1543 cv_broadcast(&tp->t_inwait);
1544 selwakeup(&tp->t_inpoll);
1545 KNOTE_LOCKED(&tp->t_inpoll.si_note, 0);
1550 tty_wait(struct tty *tp, struct cv *cv)
1553 int revokecnt = tp->t_revokecnt;
1555 tty_lock_assert(tp, MA_OWNED|MA_NOTRECURSED);
1556 MPASS(!tty_gone(tp));
1558 error = cv_wait_sig(cv, tp->t_mtx);
1560 /* Bail out when the device slipped away. */
1564 /* Restart the system call when we may have been revoked. */
1565 if (tp->t_revokecnt != revokecnt)
1572 tty_timedwait(struct tty *tp, struct cv *cv, int hz)
1575 int revokecnt = tp->t_revokecnt;
1577 tty_lock_assert(tp, MA_OWNED|MA_NOTRECURSED);
1578 MPASS(!tty_gone(tp));
1580 error = cv_timedwait_sig(cv, tp->t_mtx, hz);
1582 /* Bail out when the device slipped away. */
1586 /* Restart the system call when we may have been revoked. */
1587 if (tp->t_revokecnt != revokecnt)
1594 tty_flush(struct tty *tp, int flags)
1597 if (flags & FWRITE) {
1598 tp->t_flags &= ~TF_HIWAT_OUT;
1599 ttyoutq_flush(&tp->t_outq);
1600 tty_wakeup(tp, FWRITE);
1601 if (!tty_gone(tp)) {
1602 ttydevsw_outwakeup(tp);
1603 ttydevsw_pktnotify(tp, TIOCPKT_FLUSHWRITE);
1606 if (flags & FREAD) {
1607 tty_hiwat_in_unblock(tp);
1608 ttyinq_flush(&tp->t_inq);
1609 tty_wakeup(tp, FREAD);
1610 if (!tty_gone(tp)) {
1611 ttydevsw_inwakeup(tp);
1612 ttydevsw_pktnotify(tp, TIOCPKT_FLUSHREAD);
1618 tty_set_winsize(struct tty *tp, const struct winsize *wsz)
1621 if (memcmp(&tp->t_winsize, wsz, sizeof(*wsz)) == 0)
1623 tp->t_winsize = *wsz;
1624 tty_signal_pgrp(tp, SIGWINCH);
1628 tty_generic_ioctl(struct tty *tp, u_long cmd, void *data, int fflag,
1636 * The SER_* and TIOCM_* flags are the same, but one bit
1637 * shifted. I don't know why.
1640 ttydevsw_modem(tp, SER_DTR, 0);
1643 ttydevsw_modem(tp, 0, SER_DTR);
1646 int bits = *(int *)data;
1648 (bits & (TIOCM_DTR | TIOCM_RTS)) >> 1,
1649 ((~bits) & (TIOCM_DTR | TIOCM_RTS)) >> 1);
1653 int bits = *(int *)data;
1654 ttydevsw_modem(tp, (bits & (TIOCM_DTR | TIOCM_RTS)) >> 1, 0);
1658 int bits = *(int *)data;
1659 ttydevsw_modem(tp, 0, (bits & (TIOCM_DTR | TIOCM_RTS)) >> 1);
1663 *(int *)data = TIOCM_LE + (ttydevsw_modem(tp, 0, 0) << 1);
1668 tp->t_flags |= TF_ASYNC;
1670 tp->t_flags &= ~TF_ASYNC;
1673 /* This device supports non-blocking operation. */
1676 *(int *)data = ttyinq_bytescanonicalized(&tp->t_inq);
1680 *(int *)data = ttyoutq_bytesused(&tp->t_outq);
1683 if (tp->t_session != NULL && !tty_is_ctty(tp, td->td_proc))
1684 /* Not allowed to set ownership. */
1687 /* Temporarily unlock the TTY to set ownership. */
1689 error = fsetown(*(int *)data, &tp->t_sigio);
1693 if (tp->t_session != NULL && !tty_is_ctty(tp, td->td_proc))
1694 /* Not allowed to set ownership. */
1697 /* Get ownership. */
1698 *(int *)data = fgetown(&tp->t_sigio);
1701 /* Obtain terminal flags through tcgetattr(). */
1702 *(struct termios*)data = tp->t_termios;
1707 struct termios *t = data;
1710 * Who makes up these funny rules? According to POSIX,
1711 * input baud rate is set equal to the output baud rate
1714 if (t->c_ispeed == 0)
1715 t->c_ispeed = t->c_ospeed;
1717 /* Discard any unsupported bits. */
1718 t->c_iflag &= TTYSUP_IFLAG;
1719 t->c_oflag &= TTYSUP_OFLAG;
1720 t->c_lflag &= TTYSUP_LFLAG;
1721 t->c_cflag &= TTYSUP_CFLAG;
1723 /* Set terminal flags through tcsetattr(). */
1724 if (cmd == TIOCSETAW || cmd == TIOCSETAF) {
1725 error = tty_drain(tp, 0);
1728 if (cmd == TIOCSETAF)
1729 tty_flush(tp, FREAD);
1733 * Only call param() when the flags really change.
1735 if ((t->c_cflag & CIGNORE) == 0 &&
1736 (tp->t_termios.c_cflag != t->c_cflag ||
1737 ((tp->t_termios.c_iflag ^ t->c_iflag) &
1738 (IXON|IXOFF|IXANY)) ||
1739 tp->t_termios.c_ispeed != t->c_ispeed ||
1740 tp->t_termios.c_ospeed != t->c_ospeed)) {
1741 error = ttydevsw_param(tp, t);
1747 tp->t_termios.c_cflag = t->c_cflag & ~CIGNORE;
1748 tp->t_termios.c_ispeed = t->c_ispeed;
1749 tp->t_termios.c_ospeed = t->c_ospeed;
1751 /* Baud rate has changed - update watermarks. */
1752 error = tty_watermarks(tp);
1757 /* Copy new non-device driver parameters. */
1758 tp->t_termios.c_iflag = t->c_iflag;
1759 tp->t_termios.c_oflag = t->c_oflag;
1760 tp->t_termios.c_lflag = t->c_lflag;
1761 memcpy(&tp->t_termios.c_cc, t->c_cc, sizeof t->c_cc);
1763 ttydisc_optimize(tp);
1765 if ((t->c_lflag & ICANON) == 0) {
1767 * When in non-canonical mode, wake up all
1768 * readers. Canonicalize any partial input. VMIN
1769 * and VTIME could also be adjusted.
1771 ttyinq_canonicalize(&tp->t_inq);
1772 tty_wakeup(tp, FREAD);
1776 * For packet mode: notify the PTY consumer that VSTOP
1777 * and VSTART may have been changed.
1779 if (tp->t_termios.c_iflag & IXON &&
1780 tp->t_termios.c_cc[VSTOP] == CTRL('S') &&
1781 tp->t_termios.c_cc[VSTART] == CTRL('Q'))
1782 ttydevsw_pktnotify(tp, TIOCPKT_DOSTOP);
1784 ttydevsw_pktnotify(tp, TIOCPKT_NOSTOP);
1788 /* For compatibility - we only support TTYDISC. */
1789 *(int *)data = TTYDISC;
1792 if (!tty_is_ctty(tp, td->td_proc))
1795 if (tp->t_pgrp != NULL)
1796 *(int *)data = tp->t_pgrp->pg_id;
1798 *(int *)data = NO_PID;
1801 if (!tty_is_ctty(tp, td->td_proc))
1804 MPASS(tp->t_session);
1805 *(int *)data = tp->t_session->s_sid;
1808 return (tty_drop_ctty(tp, td->td_proc));
1810 struct proc *p = td->td_proc;
1812 /* XXX: This looks awful. */
1814 sx_xlock(&proctree_lock);
1817 if (!SESS_LEADER(p)) {
1818 /* Only the session leader may do this. */
1819 sx_xunlock(&proctree_lock);
1823 if (tp->t_session != NULL && tp->t_session == p->p_session) {
1824 /* This is already our controlling TTY. */
1825 sx_xunlock(&proctree_lock);
1829 if (p->p_session->s_ttyp != NULL ||
1830 (tp->t_session != NULL && tp->t_session->s_ttyvp != NULL &&
1831 tp->t_session->s_ttyvp->v_type != VBAD)) {
1833 * There is already a relation between a TTY and
1834 * a session, or the caller is not the session
1837 * Allow the TTY to be stolen when the vnode is
1838 * invalid, but the reference to the TTY is
1839 * still active. This allows immediate reuse of
1840 * TTYs of which the session leader has been
1841 * killed or the TTY revoked.
1843 sx_xunlock(&proctree_lock);
1847 /* Connect the session to the TTY. */
1848 tp->t_session = p->p_session;
1849 tp->t_session->s_ttyp = tp;
1852 /* Assign foreground process group. */
1853 tp->t_pgrp = p->p_pgrp;
1855 p->p_flag |= P_CONTROLT;
1858 sx_xunlock(&proctree_lock);
1865 * XXX: Temporarily unlock the TTY to locate the process
1866 * group. This code would be lot nicer if we would ever
1867 * decompose proctree_lock.
1870 sx_slock(&proctree_lock);
1871 pg = pgfind(*(int *)data);
1874 if (pg == NULL || pg->pg_session != td->td_proc->p_session) {
1875 sx_sunlock(&proctree_lock);
1882 * Determine if this TTY is the controlling TTY after
1883 * relocking the TTY.
1885 if (!tty_is_ctty(tp, td->td_proc)) {
1886 sx_sunlock(&proctree_lock);
1890 sx_sunlock(&proctree_lock);
1892 /* Wake up the background process groups. */
1893 cv_broadcast(&tp->t_bgwait);
1897 int flags = *(int *)data;
1900 flags = (FREAD|FWRITE);
1902 flags &= (FREAD|FWRITE);
1903 tty_flush(tp, flags);
1907 /* Drain TTY output. */
1908 return tty_drain(tp, 0);
1909 case TIOCGDRAINWAIT:
1910 *(int *)data = tp->t_drainwait;
1912 case TIOCSDRAINWAIT:
1913 error = priv_check(td, PRIV_TTY_DRAINWAIT);
1915 tp->t_drainwait = *(int *)data;
1918 /* Set terminal as console TTY. */
1920 error = priv_check(td, PRIV_TTY_CONSOLE);
1925 * XXX: constty should really need to be locked!
1926 * XXX: allow disconnected constty's to be stolen!
1931 if (constty != NULL)
1937 } else if (constty == tp) {
1942 /* Obtain window size. */
1943 *(struct winsize*)data = tp->t_winsize;
1946 /* Set window size. */
1947 tty_set_winsize(tp, data);
1950 tp->t_flags |= TF_EXCLUDE;
1953 tp->t_flags &= ~TF_EXCLUDE;
1956 tp->t_flags |= TF_STOPPED;
1957 ttydevsw_pktnotify(tp, TIOCPKT_STOP);
1960 tp->t_flags &= ~TF_STOPPED;
1961 tp->t_termios.c_lflag &= ~FLUSHO;
1962 ttydevsw_outwakeup(tp);
1963 ttydevsw_pktnotify(tp, TIOCPKT_START);
1969 if ((fflag & FREAD) == 0 && priv_check(td, PRIV_TTY_STI))
1971 if (!tty_is_ctty(tp, td->td_proc) &&
1972 priv_check(td, PRIV_TTY_STI))
1974 ttydisc_rint(tp, *(char *)data, 0);
1975 ttydisc_rint_done(tp);
1980 return tty_ioctl_compat(tp, cmd, data, fflag, td);
1981 #else /* !COMPAT_43TTY */
1983 #endif /* COMPAT_43TTY */
1987 tty_ioctl(struct tty *tp, u_long cmd, void *data, int fflag, struct thread *td)
1991 tty_assert_locked(tp);
1996 error = ttydevsw_ioctl(tp, cmd, data, td);
1997 if (error == ENOIOCTL)
1998 error = tty_generic_ioctl(tp, cmd, data, fflag, td);
2004 tty_udev(struct tty *tp)
2008 return (dev2udev(tp->t_dev));
2014 tty_checkoutq(struct tty *tp)
2017 /* 256 bytes should be enough to print a log message. */
2018 return (ttyoutq_bytesleft(&tp->t_outq) >= 256);
2022 tty_hiwat_in_block(struct tty *tp)
2025 if ((tp->t_flags & TF_HIWAT_IN) == 0 &&
2026 tp->t_termios.c_iflag & IXOFF &&
2027 tp->t_termios.c_cc[VSTOP] != _POSIX_VDISABLE) {
2029 * Input flow control. Only enter the high watermark when we
2030 * can successfully store the VSTOP character.
2032 if (ttyoutq_write_nofrag(&tp->t_outq,
2033 &tp->t_termios.c_cc[VSTOP], 1) == 0)
2034 tp->t_flags |= TF_HIWAT_IN;
2036 /* No input flow control. */
2037 tp->t_flags |= TF_HIWAT_IN;
2042 tty_hiwat_in_unblock(struct tty *tp)
2045 if (tp->t_flags & TF_HIWAT_IN &&
2046 tp->t_termios.c_iflag & IXOFF &&
2047 tp->t_termios.c_cc[VSTART] != _POSIX_VDISABLE) {
2049 * Input flow control. Only leave the high watermark when we
2050 * can successfully store the VSTART character.
2052 if (ttyoutq_write_nofrag(&tp->t_outq,
2053 &tp->t_termios.c_cc[VSTART], 1) == 0)
2054 tp->t_flags &= ~TF_HIWAT_IN;
2056 /* No input flow control. */
2057 tp->t_flags &= ~TF_HIWAT_IN;
2061 ttydevsw_inwakeup(tp);
2065 * TTY hooks interface.
2069 ttyhook_defrint(struct tty *tp, char c, int flags)
2072 if (ttyhook_rint_bypass(tp, &c, 1) != 1)
2079 ttyhook_register(struct tty **rtp, struct proc *p, int fd, struct ttyhook *th,
2086 struct filedesc *fdp;
2087 cap_rights_t rights;
2090 /* Validate the file descriptor. */
2092 error = fget_unlocked(fdp, fd, cap_rights_init_one(&rights, CAP_TTYHOOK),
2096 if (fp->f_ops == &badfileops) {
2102 * Make sure the vnode is bound to a character device.
2103 * Unlocked check for the vnode type is ok there, because we
2104 * only shall prevent calling devvn_refthread on the file that
2105 * never has been opened over a character device.
2107 if (fp->f_type != DTYPE_VNODE || fp->f_vnode->v_type != VCHR) {
2112 /* Make sure it is a TTY. */
2113 cdp = devvn_refthread(fp->f_vnode, &dev, &ref);
2118 if (dev != fp->f_data) {
2122 if (cdp != &ttydev_cdevsw) {
2128 /* Try to attach the hook to the TTY. */
2131 MPASS((tp->t_hook == NULL) == ((tp->t_flags & TF_HOOK) == 0));
2132 if (tp->t_flags & TF_HOOK)
2135 tp->t_flags |= TF_HOOK;
2137 tp->t_hooksoftc = softc;
2141 /* Maybe we can switch into bypass mode now. */
2142 ttydisc_optimize(tp);
2144 /* Silently convert rint() calls to rint_bypass() when possible. */
2145 if (!ttyhook_hashook(tp, rint) && ttyhook_hashook(tp, rint_bypass))
2146 th->th_rint = ttyhook_defrint;
2148 done3: tty_unlock(tp);
2149 done2: dev_relthread(dev, ref);
2150 done1: fdrop(fp, curthread);
2155 ttyhook_unregister(struct tty *tp)
2158 tty_assert_locked(tp);
2159 MPASS(tp->t_flags & TF_HOOK);
2161 /* Disconnect the hook. */
2162 tp->t_flags &= ~TF_HOOK;
2165 /* Maybe we need to leave bypass mode. */
2166 ttydisc_optimize(tp);
2168 /* Maybe deallocate the TTY as well. */
2173 * /dev/console handling.
2177 ttyconsdev_open(struct cdev *dev, int oflags, int devtype, struct thread *td)
2181 /* System has no console device. */
2182 if (dev_console_filename == NULL)
2185 /* Look up corresponding TTY by device name. */
2186 sx_slock(&tty_list_sx);
2187 TAILQ_FOREACH(tp, &tty_list, t_list) {
2188 if (strcmp(dev_console_filename, tty_devname(tp)) == 0) {
2189 dev_console->si_drv1 = tp;
2193 sx_sunlock(&tty_list_sx);
2195 /* System console has no TTY associated. */
2196 if (dev_console->si_drv1 == NULL)
2199 return (ttydev_open(dev, oflags, devtype, td));
2203 ttyconsdev_write(struct cdev *dev, struct uio *uio, int ioflag)
2208 return (ttydev_write(dev, uio, ioflag));
2212 * /dev/console is a little different than normal TTY's. When opened,
2213 * it determines which TTY to use. When data gets written to it, it
2214 * will be logged in the kernel message buffer.
2216 static struct cdevsw ttyconsdev_cdevsw = {
2217 .d_version = D_VERSION,
2218 .d_open = ttyconsdev_open,
2219 .d_close = ttydev_close,
2220 .d_read = ttydev_read,
2221 .d_write = ttyconsdev_write,
2222 .d_ioctl = ttydev_ioctl,
2223 .d_kqfilter = ttydev_kqfilter,
2224 .d_poll = ttydev_poll,
2225 .d_mmap = ttydev_mmap,
2226 .d_name = "ttyconsdev",
2231 ttyconsdev_init(void *unused __unused)
2234 dev_console = make_dev_credf(MAKEDEV_ETERNAL, &ttyconsdev_cdevsw, 0,
2235 NULL, UID_ROOT, GID_WHEEL, 0600, "console");
2238 SYSINIT(tty, SI_SUB_DRIVERS, SI_ORDER_FIRST, ttyconsdev_init, NULL);
2241 ttyconsdev_select(const char *name)
2244 dev_console_filename = name;
2248 * Debugging routines.
2251 #include "opt_ddb.h"
2253 #include <ddb/ddb.h>
2254 #include <ddb/db_sym.h>
2256 static const struct {
2261 { TF_NOPREFIX, 'N' },
2263 { TF_INITLOCK, 'I' },
2264 { TF_CALLOUT, 'C' },
2266 /* Keep these together -> 'Oi' and 'Oo'. */
2268 { TF_OPENED_IN, 'i' },
2269 { TF_OPENED_OUT, 'o' },
2270 { TF_OPENED_CONS, 'c' },
2273 { TF_OPENCLOSE, 'B' },
2275 { TF_LITERAL, 'L' },
2277 /* Keep these together -> 'Hi' and 'Ho'. */
2279 { TF_HIWAT_IN, 'i' },
2280 { TF_HIWAT_OUT, 'o' },
2282 { TF_STOPPED, 'S' },
2283 { TF_EXCLUDE, 'X' },
2288 /* Keep these together -> 'bi' and 'bo'. */
2290 { TF_BUSY_IN, 'i' },
2291 { TF_BUSY_OUT, 'o' },
2296 #define TTY_FLAG_BITS \
2297 "\20\1NOPREFIX\2INITLOCK\3CALLOUT\4OPENED_IN" \
2298 "\5OPENED_OUT\6OPENED_CONS\7GONE\10OPENCLOSE" \
2299 "\11ASYNC\12LITERAL\13HIWAT_IN\14HIWAT_OUT" \
2300 "\15STOPPED\16EXCLUDE\17BYPASS\20ZOMBIE" \
2301 "\21HOOK\22BUSY_IN\23BUSY_OUT"
2303 #define DB_PRINTSYM(name, addr) \
2304 db_printf("%s " #name ": ", sep); \
2305 db_printsym((db_addr_t) addr, DB_STGY_ANY); \
2309 _db_show_devsw(const char *sep, const struct ttydevsw *tsw)
2312 db_printf("%sdevsw: ", sep);
2313 db_printsym((db_addr_t)tsw, DB_STGY_ANY);
2314 db_printf(" (%p)\n", tsw);
2315 DB_PRINTSYM(open, tsw->tsw_open);
2316 DB_PRINTSYM(close, tsw->tsw_close);
2317 DB_PRINTSYM(outwakeup, tsw->tsw_outwakeup);
2318 DB_PRINTSYM(inwakeup, tsw->tsw_inwakeup);
2319 DB_PRINTSYM(ioctl, tsw->tsw_ioctl);
2320 DB_PRINTSYM(param, tsw->tsw_param);
2321 DB_PRINTSYM(modem, tsw->tsw_modem);
2322 DB_PRINTSYM(mmap, tsw->tsw_mmap);
2323 DB_PRINTSYM(pktnotify, tsw->tsw_pktnotify);
2324 DB_PRINTSYM(free, tsw->tsw_free);
2328 _db_show_hooks(const char *sep, const struct ttyhook *th)
2331 db_printf("%shook: ", sep);
2332 db_printsym((db_addr_t)th, DB_STGY_ANY);
2333 db_printf(" (%p)\n", th);
2336 DB_PRINTSYM(rint, th->th_rint);
2337 DB_PRINTSYM(rint_bypass, th->th_rint_bypass);
2338 DB_PRINTSYM(rint_done, th->th_rint_done);
2339 DB_PRINTSYM(rint_poll, th->th_rint_poll);
2340 DB_PRINTSYM(getc_inject, th->th_getc_inject);
2341 DB_PRINTSYM(getc_capture, th->th_getc_capture);
2342 DB_PRINTSYM(getc_poll, th->th_getc_poll);
2343 DB_PRINTSYM(close, th->th_close);
2347 _db_show_termios(const char *name, const struct termios *t)
2350 db_printf("%s: iflag 0x%x oflag 0x%x cflag 0x%x "
2351 "lflag 0x%x ispeed %u ospeed %u\n", name,
2352 t->c_iflag, t->c_oflag, t->c_cflag, t->c_lflag,
2353 t->c_ispeed, t->c_ospeed);
2356 /* DDB command to show TTY statistics. */
2357 DB_SHOW_COMMAND(tty, db_show_tty)
2362 db_printf("usage: show tty <addr>\n");
2365 tp = (struct tty *)addr;
2367 db_printf("%p: %s\n", tp, tty_devname(tp));
2368 db_printf("\tmtx: %p\n", tp->t_mtx);
2369 db_printf("\tflags: 0x%b\n", tp->t_flags, TTY_FLAG_BITS);
2370 db_printf("\trevokecnt: %u\n", tp->t_revokecnt);
2372 /* Buffering mechanisms. */
2373 db_printf("\tinq: %p begin %u linestart %u reprint %u end %u "
2374 "nblocks %u quota %u\n", &tp->t_inq, tp->t_inq.ti_begin,
2375 tp->t_inq.ti_linestart, tp->t_inq.ti_reprint, tp->t_inq.ti_end,
2376 tp->t_inq.ti_nblocks, tp->t_inq.ti_quota);
2377 db_printf("\toutq: %p begin %u end %u nblocks %u quota %u\n",
2378 &tp->t_outq, tp->t_outq.to_begin, tp->t_outq.to_end,
2379 tp->t_outq.to_nblocks, tp->t_outq.to_quota);
2380 db_printf("\tinlow: %zu\n", tp->t_inlow);
2381 db_printf("\toutlow: %zu\n", tp->t_outlow);
2382 _db_show_termios("\ttermios", &tp->t_termios);
2383 db_printf("\twinsize: row %u col %u xpixel %u ypixel %u\n",
2384 tp->t_winsize.ws_row, tp->t_winsize.ws_col,
2385 tp->t_winsize.ws_xpixel, tp->t_winsize.ws_ypixel);
2386 db_printf("\tcolumn: %u\n", tp->t_column);
2387 db_printf("\twritepos: %u\n", tp->t_writepos);
2388 db_printf("\tcompatflags: 0x%x\n", tp->t_compatflags);
2390 /* Init/lock-state devices. */
2391 _db_show_termios("\ttermios_init_in", &tp->t_termios_init_in);
2392 _db_show_termios("\ttermios_init_out", &tp->t_termios_init_out);
2393 _db_show_termios("\ttermios_lock_in", &tp->t_termios_lock_in);
2394 _db_show_termios("\ttermios_lock_out", &tp->t_termios_lock_out);
2397 _db_show_devsw("\t", tp->t_devsw);
2398 _db_show_hooks("\t", tp->t_hook);
2401 db_printf("\tpgrp: %p gid %d\n", tp->t_pgrp,
2402 tp->t_pgrp ? tp->t_pgrp->pg_id : 0);
2403 db_printf("\tsession: %p", tp->t_session);
2404 if (tp->t_session != NULL)
2405 db_printf(" count %u leader %p tty %p sid %d login %s",
2406 tp->t_session->s_count, tp->t_session->s_leader,
2407 tp->t_session->s_ttyp, tp->t_session->s_sid,
2408 tp->t_session->s_login);
2410 db_printf("\tsessioncnt: %u\n", tp->t_sessioncnt);
2411 db_printf("\tdevswsoftc: %p\n", tp->t_devswsoftc);
2412 db_printf("\thooksoftc: %p\n", tp->t_hooksoftc);
2413 db_printf("\tdev: %p\n", tp->t_dev);
2416 /* DDB command to list TTYs. */
2417 DB_SHOW_ALL_COMMAND(ttys, db_show_all_ttys)
2423 /* Make the output look like `pstat -t'. */
2425 #if defined(__LP64__)
2428 db_printf(" LINE INQ CAN LIN LOW OUTQ USE LOW "
2429 "COL SESS PGID STATE\n");
2431 TAILQ_FOREACH(tp, &tty_list, t_list) {
2432 isiz = tp->t_inq.ti_nblocks * TTYINQ_DATASIZE;
2433 osiz = tp->t_outq.to_nblocks * TTYOUTQ_DATASIZE;
2435 db_printf("%p %10s %5zu %4u %4u %4zu %5zu %4u %4zu %5u %5d "
2436 "%5d ", tp, tty_devname(tp), isiz,
2437 tp->t_inq.ti_linestart - tp->t_inq.ti_begin,
2438 tp->t_inq.ti_end - tp->t_inq.ti_linestart,
2439 isiz - tp->t_inlow, osiz,
2440 tp->t_outq.to_end - tp->t_outq.to_begin,
2441 osiz - tp->t_outlow, MIN(tp->t_column, 99999),
2442 tp->t_session ? tp->t_session->s_sid : 0,
2443 tp->t_pgrp ? tp->t_pgrp->pg_id : 0);
2446 for (i = j = 0; ttystates[i].flag; i++)
2447 if (tp->t_flags & ttystates[i].flag) {
2448 db_printf("%c", ttystates[i].val);