Loading...
1// SPDX-License-Identifier: GPL-2.0-or-later
2/*
3 * Copyright (C) 2011 Intel Corporation. All rights reserved.
4 */
5
6#define pr_fmt(fmt) "llcp: %s: " fmt, __func__
7
8#include <linux/init.h>
9#include <linux/kernel.h>
10#include <linux/module.h>
11#include <linux/nfc.h>
12#include <linux/sched/signal.h>
13
14#include "nfc.h"
15#include "llcp.h"
16
17static int sock_wait_state(struct sock *sk, int state, unsigned long timeo)
18{
19 DECLARE_WAITQUEUE(wait, current);
20 int err = 0;
21
22 pr_debug("sk %p", sk);
23
24 add_wait_queue(sk_sleep(sk), &wait);
25 set_current_state(TASK_INTERRUPTIBLE);
26
27 while (sk->sk_state != state) {
28 if (!timeo) {
29 err = -EINPROGRESS;
30 break;
31 }
32
33 if (signal_pending(current)) {
34 err = sock_intr_errno(timeo);
35 break;
36 }
37
38 release_sock(sk);
39 timeo = schedule_timeout(timeo);
40 lock_sock(sk);
41 set_current_state(TASK_INTERRUPTIBLE);
42
43 err = sock_error(sk);
44 if (err)
45 break;
46 }
47
48 __set_current_state(TASK_RUNNING);
49 remove_wait_queue(sk_sleep(sk), &wait);
50 return err;
51}
52
53static struct proto llcp_sock_proto = {
54 .name = "NFC_LLCP",
55 .owner = THIS_MODULE,
56 .obj_size = sizeof(struct nfc_llcp_sock),
57};
58
59static int llcp_sock_bind(struct socket *sock, struct sockaddr *addr, int alen)
60{
61 struct sock *sk = sock->sk;
62 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
63 struct nfc_llcp_local *local;
64 struct nfc_dev *dev;
65 struct sockaddr_nfc_llcp llcp_addr;
66 int len, ret = 0;
67
68 if (!addr || alen < offsetofend(struct sockaddr, sa_family) ||
69 addr->sa_family != AF_NFC)
70 return -EINVAL;
71
72 pr_debug("sk %p addr %p family %d\n", sk, addr, addr->sa_family);
73
74 memset(&llcp_addr, 0, sizeof(llcp_addr));
75 len = min_t(unsigned int, sizeof(llcp_addr), alen);
76 memcpy(&llcp_addr, addr, len);
77
78 /* This is going to be a listening socket, dsap must be 0 */
79 if (llcp_addr.dsap != 0)
80 return -EINVAL;
81
82 lock_sock(sk);
83
84 if (sk->sk_state != LLCP_CLOSED) {
85 ret = -EBADFD;
86 goto error;
87 }
88
89 dev = nfc_get_device(llcp_addr.dev_idx);
90 if (dev == NULL) {
91 ret = -ENODEV;
92 goto error;
93 }
94
95 local = nfc_llcp_find_local(dev);
96 if (local == NULL) {
97 ret = -ENODEV;
98 goto put_dev;
99 }
100
101 llcp_sock->dev = dev;
102 llcp_sock->local = nfc_llcp_local_get(local);
103 llcp_sock->nfc_protocol = llcp_addr.nfc_protocol;
104 llcp_sock->service_name_len = min_t(unsigned int,
105 llcp_addr.service_name_len,
106 NFC_LLCP_MAX_SERVICE_NAME);
107 llcp_sock->service_name = kmemdup(llcp_addr.service_name,
108 llcp_sock->service_name_len,
109 GFP_KERNEL);
110 if (!llcp_sock->service_name) {
111 nfc_llcp_local_put(llcp_sock->local);
112 llcp_sock->local = NULL;
113 llcp_sock->dev = NULL;
114 ret = -ENOMEM;
115 goto put_dev;
116 }
117 llcp_sock->ssap = nfc_llcp_get_sdp_ssap(local, llcp_sock);
118 if (llcp_sock->ssap == LLCP_SAP_MAX) {
119 nfc_llcp_local_put(llcp_sock->local);
120 llcp_sock->local = NULL;
121 kfree(llcp_sock->service_name);
122 llcp_sock->service_name = NULL;
123 llcp_sock->dev = NULL;
124 ret = -EADDRINUSE;
125 goto put_dev;
126 }
127
128 llcp_sock->reserved_ssap = llcp_sock->ssap;
129
130 nfc_llcp_sock_link(&local->sockets, sk);
131
132 pr_debug("Socket bound to SAP %d\n", llcp_sock->ssap);
133
134 sk->sk_state = LLCP_BOUND;
135
136put_dev:
137 nfc_put_device(dev);
138
139error:
140 release_sock(sk);
141 return ret;
142}
143
144static int llcp_raw_sock_bind(struct socket *sock, struct sockaddr *addr,
145 int alen)
146{
147 struct sock *sk = sock->sk;
148 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
149 struct nfc_llcp_local *local;
150 struct nfc_dev *dev;
151 struct sockaddr_nfc_llcp llcp_addr;
152 int len, ret = 0;
153
154 if (!addr || alen < offsetofend(struct sockaddr, sa_family) ||
155 addr->sa_family != AF_NFC)
156 return -EINVAL;
157
158 pr_debug("sk %p addr %p family %d\n", sk, addr, addr->sa_family);
159
160 memset(&llcp_addr, 0, sizeof(llcp_addr));
161 len = min_t(unsigned int, sizeof(llcp_addr), alen);
162 memcpy(&llcp_addr, addr, len);
163
164 lock_sock(sk);
165
166 if (sk->sk_state != LLCP_CLOSED) {
167 ret = -EBADFD;
168 goto error;
169 }
170
171 dev = nfc_get_device(llcp_addr.dev_idx);
172 if (dev == NULL) {
173 ret = -ENODEV;
174 goto error;
175 }
176
177 local = nfc_llcp_find_local(dev);
178 if (local == NULL) {
179 ret = -ENODEV;
180 goto put_dev;
181 }
182
183 llcp_sock->dev = dev;
184 llcp_sock->local = nfc_llcp_local_get(local);
185 llcp_sock->nfc_protocol = llcp_addr.nfc_protocol;
186
187 nfc_llcp_sock_link(&local->raw_sockets, sk);
188
189 sk->sk_state = LLCP_BOUND;
190
191put_dev:
192 nfc_put_device(dev);
193
194error:
195 release_sock(sk);
196 return ret;
197}
198
199static int llcp_sock_listen(struct socket *sock, int backlog)
200{
201 struct sock *sk = sock->sk;
202 int ret = 0;
203
204 pr_debug("sk %p backlog %d\n", sk, backlog);
205
206 lock_sock(sk);
207
208 if ((sock->type != SOCK_SEQPACKET && sock->type != SOCK_STREAM) ||
209 sk->sk_state != LLCP_BOUND) {
210 ret = -EBADFD;
211 goto error;
212 }
213
214 sk->sk_max_ack_backlog = backlog;
215 sk->sk_ack_backlog = 0;
216
217 pr_debug("Socket listening\n");
218 sk->sk_state = LLCP_LISTEN;
219
220error:
221 release_sock(sk);
222
223 return ret;
224}
225
226static int nfc_llcp_setsockopt(struct socket *sock, int level, int optname,
227 sockptr_t optval, unsigned int optlen)
228{
229 struct sock *sk = sock->sk;
230 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
231 u32 opt;
232 int err = 0;
233
234 pr_debug("%p optname %d\n", sk, optname);
235
236 if (level != SOL_NFC)
237 return -ENOPROTOOPT;
238
239 lock_sock(sk);
240
241 switch (optname) {
242 case NFC_LLCP_RW:
243 if (sk->sk_state == LLCP_CONNECTED ||
244 sk->sk_state == LLCP_BOUND ||
245 sk->sk_state == LLCP_LISTEN) {
246 err = -EINVAL;
247 break;
248 }
249
250 if (copy_from_sockptr(&opt, optval, sizeof(u32))) {
251 err = -EFAULT;
252 break;
253 }
254
255 if (opt > LLCP_MAX_RW) {
256 err = -EINVAL;
257 break;
258 }
259
260 llcp_sock->rw = (u8) opt;
261
262 break;
263
264 case NFC_LLCP_MIUX:
265 if (sk->sk_state == LLCP_CONNECTED ||
266 sk->sk_state == LLCP_BOUND ||
267 sk->sk_state == LLCP_LISTEN) {
268 err = -EINVAL;
269 break;
270 }
271
272 if (copy_from_sockptr(&opt, optval, sizeof(u32))) {
273 err = -EFAULT;
274 break;
275 }
276
277 if (opt > LLCP_MAX_MIUX) {
278 err = -EINVAL;
279 break;
280 }
281
282 llcp_sock->miux = cpu_to_be16((u16) opt);
283
284 break;
285
286 default:
287 err = -ENOPROTOOPT;
288 break;
289 }
290
291 release_sock(sk);
292
293 pr_debug("%p rw %d miux %d\n", llcp_sock,
294 llcp_sock->rw, llcp_sock->miux);
295
296 return err;
297}
298
299static int nfc_llcp_getsockopt(struct socket *sock, int level, int optname,
300 char __user *optval, int __user *optlen)
301{
302 struct nfc_llcp_local *local;
303 struct sock *sk = sock->sk;
304 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
305 int len, err = 0;
306 u16 miux, remote_miu;
307 u8 rw;
308
309 pr_debug("%p optname %d\n", sk, optname);
310
311 if (level != SOL_NFC)
312 return -ENOPROTOOPT;
313
314 if (get_user(len, optlen))
315 return -EFAULT;
316
317 local = llcp_sock->local;
318 if (!local)
319 return -ENODEV;
320
321 len = min_t(u32, len, sizeof(u32));
322
323 lock_sock(sk);
324
325 switch (optname) {
326 case NFC_LLCP_RW:
327 rw = llcp_sock->rw > LLCP_MAX_RW ? local->rw : llcp_sock->rw;
328 if (put_user(rw, (u32 __user *) optval))
329 err = -EFAULT;
330
331 break;
332
333 case NFC_LLCP_MIUX:
334 miux = be16_to_cpu(llcp_sock->miux) > LLCP_MAX_MIUX ?
335 be16_to_cpu(local->miux) : be16_to_cpu(llcp_sock->miux);
336
337 if (put_user(miux, (u32 __user *) optval))
338 err = -EFAULT;
339
340 break;
341
342 case NFC_LLCP_REMOTE_MIU:
343 remote_miu = llcp_sock->remote_miu > LLCP_MAX_MIU ?
344 local->remote_miu : llcp_sock->remote_miu;
345
346 if (put_user(remote_miu, (u32 __user *) optval))
347 err = -EFAULT;
348
349 break;
350
351 case NFC_LLCP_REMOTE_LTO:
352 if (put_user(local->remote_lto / 10, (u32 __user *) optval))
353 err = -EFAULT;
354
355 break;
356
357 case NFC_LLCP_REMOTE_RW:
358 if (put_user(llcp_sock->remote_rw, (u32 __user *) optval))
359 err = -EFAULT;
360
361 break;
362
363 default:
364 err = -ENOPROTOOPT;
365 break;
366 }
367
368 release_sock(sk);
369
370 if (put_user(len, optlen))
371 return -EFAULT;
372
373 return err;
374}
375
376void nfc_llcp_accept_unlink(struct sock *sk)
377{
378 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
379
380 pr_debug("state %d\n", sk->sk_state);
381
382 list_del_init(&llcp_sock->accept_queue);
383 sk_acceptq_removed(llcp_sock->parent);
384 llcp_sock->parent = NULL;
385
386 sock_put(sk);
387}
388
389void nfc_llcp_accept_enqueue(struct sock *parent, struct sock *sk)
390{
391 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
392 struct nfc_llcp_sock *llcp_sock_parent = nfc_llcp_sock(parent);
393
394 /* Lock will be free from unlink */
395 sock_hold(sk);
396
397 list_add_tail(&llcp_sock->accept_queue,
398 &llcp_sock_parent->accept_queue);
399 llcp_sock->parent = parent;
400 sk_acceptq_added(parent);
401}
402
403struct sock *nfc_llcp_accept_dequeue(struct sock *parent,
404 struct socket *newsock)
405{
406 struct nfc_llcp_sock *lsk, *n, *llcp_parent;
407 struct sock *sk;
408
409 llcp_parent = nfc_llcp_sock(parent);
410
411 list_for_each_entry_safe(lsk, n, &llcp_parent->accept_queue,
412 accept_queue) {
413 sk = &lsk->sk;
414 lock_sock(sk);
415
416 if (sk->sk_state == LLCP_CLOSED) {
417 release_sock(sk);
418 nfc_llcp_accept_unlink(sk);
419 continue;
420 }
421
422 if (sk->sk_state == LLCP_CONNECTED || !newsock) {
423 list_del_init(&lsk->accept_queue);
424 sock_put(sk);
425
426 if (newsock)
427 sock_graft(sk, newsock);
428
429 release_sock(sk);
430
431 pr_debug("Returning sk state %d\n", sk->sk_state);
432
433 sk_acceptq_removed(parent);
434
435 return sk;
436 }
437
438 release_sock(sk);
439 }
440
441 return NULL;
442}
443
444static int llcp_sock_accept(struct socket *sock, struct socket *newsock,
445 int flags, bool kern)
446{
447 DECLARE_WAITQUEUE(wait, current);
448 struct sock *sk = sock->sk, *new_sk;
449 long timeo;
450 int ret = 0;
451
452 pr_debug("parent %p\n", sk);
453
454 lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
455
456 if (sk->sk_state != LLCP_LISTEN) {
457 ret = -EBADFD;
458 goto error;
459 }
460
461 timeo = sock_rcvtimeo(sk, flags & O_NONBLOCK);
462
463 /* Wait for an incoming connection. */
464 add_wait_queue_exclusive(sk_sleep(sk), &wait);
465 while (!(new_sk = nfc_llcp_accept_dequeue(sk, newsock))) {
466 set_current_state(TASK_INTERRUPTIBLE);
467
468 if (!timeo) {
469 ret = -EAGAIN;
470 break;
471 }
472
473 if (signal_pending(current)) {
474 ret = sock_intr_errno(timeo);
475 break;
476 }
477
478 release_sock(sk);
479 timeo = schedule_timeout(timeo);
480 lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
481 }
482 __set_current_state(TASK_RUNNING);
483 remove_wait_queue(sk_sleep(sk), &wait);
484
485 if (ret)
486 goto error;
487
488 newsock->state = SS_CONNECTED;
489
490 pr_debug("new socket %p\n", new_sk);
491
492error:
493 release_sock(sk);
494
495 return ret;
496}
497
498static int llcp_sock_getname(struct socket *sock, struct sockaddr *uaddr,
499 int peer)
500{
501 struct sock *sk = sock->sk;
502 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
503 DECLARE_SOCKADDR(struct sockaddr_nfc_llcp *, llcp_addr, uaddr);
504
505 if (llcp_sock == NULL || llcp_sock->dev == NULL)
506 return -EBADFD;
507
508 pr_debug("%p %d %d %d\n", sk, llcp_sock->target_idx,
509 llcp_sock->dsap, llcp_sock->ssap);
510
511 memset(llcp_addr, 0, sizeof(*llcp_addr));
512
513 lock_sock(sk);
514 if (!llcp_sock->dev) {
515 release_sock(sk);
516 return -EBADFD;
517 }
518 llcp_addr->sa_family = AF_NFC;
519 llcp_addr->dev_idx = llcp_sock->dev->idx;
520 llcp_addr->target_idx = llcp_sock->target_idx;
521 llcp_addr->nfc_protocol = llcp_sock->nfc_protocol;
522 llcp_addr->dsap = llcp_sock->dsap;
523 llcp_addr->ssap = llcp_sock->ssap;
524 llcp_addr->service_name_len = llcp_sock->service_name_len;
525 memcpy(llcp_addr->service_name, llcp_sock->service_name,
526 llcp_addr->service_name_len);
527 release_sock(sk);
528
529 return sizeof(struct sockaddr_nfc_llcp);
530}
531
532static inline __poll_t llcp_accept_poll(struct sock *parent)
533{
534 struct nfc_llcp_sock *llcp_sock, *parent_sock;
535 struct sock *sk;
536
537 parent_sock = nfc_llcp_sock(parent);
538
539 list_for_each_entry(llcp_sock, &parent_sock->accept_queue,
540 accept_queue) {
541 sk = &llcp_sock->sk;
542
543 if (sk->sk_state == LLCP_CONNECTED)
544 return EPOLLIN | EPOLLRDNORM;
545 }
546
547 return 0;
548}
549
550static __poll_t llcp_sock_poll(struct file *file, struct socket *sock,
551 poll_table *wait)
552{
553 struct sock *sk = sock->sk;
554 __poll_t mask = 0;
555
556 pr_debug("%p\n", sk);
557
558 sock_poll_wait(file, sock, wait);
559
560 if (sk->sk_state == LLCP_LISTEN)
561 return llcp_accept_poll(sk);
562
563 if (sk->sk_err || !skb_queue_empty_lockless(&sk->sk_error_queue))
564 mask |= EPOLLERR |
565 (sock_flag(sk, SOCK_SELECT_ERR_QUEUE) ? EPOLLPRI : 0);
566
567 if (!skb_queue_empty_lockless(&sk->sk_receive_queue))
568 mask |= EPOLLIN | EPOLLRDNORM;
569
570 if (sk->sk_state == LLCP_CLOSED)
571 mask |= EPOLLHUP;
572
573 if (sk->sk_shutdown & RCV_SHUTDOWN)
574 mask |= EPOLLRDHUP | EPOLLIN | EPOLLRDNORM;
575
576 if (sk->sk_shutdown == SHUTDOWN_MASK)
577 mask |= EPOLLHUP;
578
579 if (sock_writeable(sk) && sk->sk_state == LLCP_CONNECTED)
580 mask |= EPOLLOUT | EPOLLWRNORM | EPOLLWRBAND;
581 else
582 sk_set_bit(SOCKWQ_ASYNC_NOSPACE, sk);
583
584 pr_debug("mask 0x%x\n", mask);
585
586 return mask;
587}
588
589static int llcp_sock_release(struct socket *sock)
590{
591 struct sock *sk = sock->sk;
592 struct nfc_llcp_local *local;
593 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
594 int err = 0;
595
596 if (!sk)
597 return 0;
598
599 pr_debug("%p\n", sk);
600
601 local = llcp_sock->local;
602 if (local == NULL) {
603 err = -ENODEV;
604 goto out;
605 }
606
607 lock_sock(sk);
608
609 /* Send a DISC */
610 if (sk->sk_state == LLCP_CONNECTED)
611 nfc_llcp_send_disconnect(llcp_sock);
612
613 if (sk->sk_state == LLCP_LISTEN) {
614 struct nfc_llcp_sock *lsk, *n;
615 struct sock *accept_sk;
616
617 list_for_each_entry_safe(lsk, n, &llcp_sock->accept_queue,
618 accept_queue) {
619 accept_sk = &lsk->sk;
620 lock_sock(accept_sk);
621
622 nfc_llcp_send_disconnect(lsk);
623 nfc_llcp_accept_unlink(accept_sk);
624
625 release_sock(accept_sk);
626 }
627 }
628
629 if (llcp_sock->reserved_ssap < LLCP_SAP_MAX)
630 nfc_llcp_put_ssap(llcp_sock->local, llcp_sock->ssap);
631
632 release_sock(sk);
633
634 /* Keep this sock alive and therefore do not remove it from the sockets
635 * list until the DISC PDU has been actually sent. Otherwise we would
636 * reply with DM PDUs before sending the DISC one.
637 */
638 if (sk->sk_state == LLCP_DISCONNECTING)
639 return err;
640
641 if (sock->type == SOCK_RAW)
642 nfc_llcp_sock_unlink(&local->raw_sockets, sk);
643 else
644 nfc_llcp_sock_unlink(&local->sockets, sk);
645
646out:
647 sock_orphan(sk);
648 sock_put(sk);
649
650 return err;
651}
652
653static int llcp_sock_connect(struct socket *sock, struct sockaddr *_addr,
654 int len, int flags)
655{
656 struct sock *sk = sock->sk;
657 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
658 struct sockaddr_nfc_llcp *addr = (struct sockaddr_nfc_llcp *)_addr;
659 struct nfc_dev *dev;
660 struct nfc_llcp_local *local;
661 int ret = 0;
662
663 pr_debug("sock %p sk %p flags 0x%x\n", sock, sk, flags);
664
665 if (!addr || len < sizeof(*addr) || addr->sa_family != AF_NFC)
666 return -EINVAL;
667
668 if (addr->service_name_len == 0 && addr->dsap == 0)
669 return -EINVAL;
670
671 pr_debug("addr dev_idx=%u target_idx=%u protocol=%u\n", addr->dev_idx,
672 addr->target_idx, addr->nfc_protocol);
673
674 lock_sock(sk);
675
676 if (sk->sk_state == LLCP_CONNECTED) {
677 ret = -EISCONN;
678 goto error;
679 }
680 if (sk->sk_state == LLCP_CONNECTING) {
681 ret = -EINPROGRESS;
682 goto error;
683 }
684
685 dev = nfc_get_device(addr->dev_idx);
686 if (dev == NULL) {
687 ret = -ENODEV;
688 goto error;
689 }
690
691 local = nfc_llcp_find_local(dev);
692 if (local == NULL) {
693 ret = -ENODEV;
694 goto put_dev;
695 }
696
697 device_lock(&dev->dev);
698 if (dev->dep_link_up == false) {
699 ret = -ENOLINK;
700 device_unlock(&dev->dev);
701 goto put_dev;
702 }
703 device_unlock(&dev->dev);
704
705 if (local->rf_mode == NFC_RF_INITIATOR &&
706 addr->target_idx != local->target_idx) {
707 ret = -ENOLINK;
708 goto put_dev;
709 }
710
711 llcp_sock->dev = dev;
712 llcp_sock->local = nfc_llcp_local_get(local);
713 llcp_sock->ssap = nfc_llcp_get_local_ssap(local);
714 if (llcp_sock->ssap == LLCP_SAP_MAX) {
715 nfc_llcp_local_put(llcp_sock->local);
716 llcp_sock->local = NULL;
717 ret = -ENOMEM;
718 goto put_dev;
719 }
720
721 llcp_sock->reserved_ssap = llcp_sock->ssap;
722
723 if (addr->service_name_len == 0)
724 llcp_sock->dsap = addr->dsap;
725 else
726 llcp_sock->dsap = LLCP_SAP_SDP;
727 llcp_sock->nfc_protocol = addr->nfc_protocol;
728 llcp_sock->service_name_len = min_t(unsigned int,
729 addr->service_name_len,
730 NFC_LLCP_MAX_SERVICE_NAME);
731 llcp_sock->service_name = kmemdup(addr->service_name,
732 llcp_sock->service_name_len,
733 GFP_KERNEL);
734 if (!llcp_sock->service_name) {
735 ret = -ENOMEM;
736 goto sock_llcp_release;
737 }
738
739 nfc_llcp_sock_link(&local->connecting_sockets, sk);
740
741 ret = nfc_llcp_send_connect(llcp_sock);
742 if (ret)
743 goto sock_unlink;
744
745 sk->sk_state = LLCP_CONNECTING;
746
747 ret = sock_wait_state(sk, LLCP_CONNECTED,
748 sock_sndtimeo(sk, flags & O_NONBLOCK));
749 if (ret && ret != -EINPROGRESS)
750 goto sock_unlink;
751
752 release_sock(sk);
753
754 return ret;
755
756sock_unlink:
757 nfc_llcp_sock_unlink(&local->connecting_sockets, sk);
758 kfree(llcp_sock->service_name);
759 llcp_sock->service_name = NULL;
760
761sock_llcp_release:
762 nfc_llcp_put_ssap(local, llcp_sock->ssap);
763 nfc_llcp_local_put(llcp_sock->local);
764 llcp_sock->local = NULL;
765
766put_dev:
767 nfc_put_device(dev);
768
769error:
770 release_sock(sk);
771 return ret;
772}
773
774static int llcp_sock_sendmsg(struct socket *sock, struct msghdr *msg,
775 size_t len)
776{
777 struct sock *sk = sock->sk;
778 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
779 int ret;
780
781 pr_debug("sock %p sk %p", sock, sk);
782
783 ret = sock_error(sk);
784 if (ret)
785 return ret;
786
787 if (msg->msg_flags & MSG_OOB)
788 return -EOPNOTSUPP;
789
790 lock_sock(sk);
791
792 if (sk->sk_type == SOCK_DGRAM) {
793 DECLARE_SOCKADDR(struct sockaddr_nfc_llcp *, addr,
794 msg->msg_name);
795
796 if (msg->msg_namelen < sizeof(*addr)) {
797 release_sock(sk);
798 return -EINVAL;
799 }
800
801 release_sock(sk);
802
803 return nfc_llcp_send_ui_frame(llcp_sock, addr->dsap, addr->ssap,
804 msg, len);
805 }
806
807 if (sk->sk_state != LLCP_CONNECTED) {
808 release_sock(sk);
809 return -ENOTCONN;
810 }
811
812 release_sock(sk);
813
814 return nfc_llcp_send_i_frame(llcp_sock, msg, len);
815}
816
817static int llcp_sock_recvmsg(struct socket *sock, struct msghdr *msg,
818 size_t len, int flags)
819{
820 int noblock = flags & MSG_DONTWAIT;
821 struct sock *sk = sock->sk;
822 unsigned int copied, rlen;
823 struct sk_buff *skb, *cskb;
824 int err = 0;
825
826 pr_debug("%p %zu\n", sk, len);
827
828 lock_sock(sk);
829
830 if (sk->sk_state == LLCP_CLOSED &&
831 skb_queue_empty(&sk->sk_receive_queue)) {
832 release_sock(sk);
833 return 0;
834 }
835
836 release_sock(sk);
837
838 if (flags & (MSG_OOB))
839 return -EOPNOTSUPP;
840
841 skb = skb_recv_datagram(sk, flags, noblock, &err);
842 if (!skb) {
843 pr_err("Recv datagram failed state %d %d %d",
844 sk->sk_state, err, sock_error(sk));
845
846 if (sk->sk_shutdown & RCV_SHUTDOWN)
847 return 0;
848
849 return err;
850 }
851
852 rlen = skb->len; /* real length of skb */
853 copied = min_t(unsigned int, rlen, len);
854
855 cskb = skb;
856 if (skb_copy_datagram_msg(cskb, 0, msg, copied)) {
857 if (!(flags & MSG_PEEK))
858 skb_queue_head(&sk->sk_receive_queue, skb);
859 return -EFAULT;
860 }
861
862 sock_recv_timestamp(msg, sk, skb);
863
864 if (sk->sk_type == SOCK_DGRAM && msg->msg_name) {
865 struct nfc_llcp_ui_cb *ui_cb = nfc_llcp_ui_skb_cb(skb);
866 DECLARE_SOCKADDR(struct sockaddr_nfc_llcp *, sockaddr,
867 msg->msg_name);
868
869 msg->msg_namelen = sizeof(struct sockaddr_nfc_llcp);
870
871 pr_debug("Datagram socket %d %d\n", ui_cb->dsap, ui_cb->ssap);
872
873 memset(sockaddr, 0, sizeof(*sockaddr));
874 sockaddr->sa_family = AF_NFC;
875 sockaddr->nfc_protocol = NFC_PROTO_NFC_DEP;
876 sockaddr->dsap = ui_cb->dsap;
877 sockaddr->ssap = ui_cb->ssap;
878 }
879
880 /* Mark read part of skb as used */
881 if (!(flags & MSG_PEEK)) {
882
883 /* SOCK_STREAM: re-queue skb if it contains unreceived data */
884 if (sk->sk_type == SOCK_STREAM ||
885 sk->sk_type == SOCK_DGRAM ||
886 sk->sk_type == SOCK_RAW) {
887 skb_pull(skb, copied);
888 if (skb->len) {
889 skb_queue_head(&sk->sk_receive_queue, skb);
890 goto done;
891 }
892 }
893
894 kfree_skb(skb);
895 }
896
897 /* XXX Queue backlogged skbs */
898
899done:
900 /* SOCK_SEQPACKET: return real length if MSG_TRUNC is set */
901 if (sk->sk_type == SOCK_SEQPACKET && (flags & MSG_TRUNC))
902 copied = rlen;
903
904 return copied;
905}
906
907static const struct proto_ops llcp_sock_ops = {
908 .family = PF_NFC,
909 .owner = THIS_MODULE,
910 .bind = llcp_sock_bind,
911 .connect = llcp_sock_connect,
912 .release = llcp_sock_release,
913 .socketpair = sock_no_socketpair,
914 .accept = llcp_sock_accept,
915 .getname = llcp_sock_getname,
916 .poll = llcp_sock_poll,
917 .ioctl = sock_no_ioctl,
918 .listen = llcp_sock_listen,
919 .shutdown = sock_no_shutdown,
920 .setsockopt = nfc_llcp_setsockopt,
921 .getsockopt = nfc_llcp_getsockopt,
922 .sendmsg = llcp_sock_sendmsg,
923 .recvmsg = llcp_sock_recvmsg,
924 .mmap = sock_no_mmap,
925};
926
927static const struct proto_ops llcp_rawsock_ops = {
928 .family = PF_NFC,
929 .owner = THIS_MODULE,
930 .bind = llcp_raw_sock_bind,
931 .connect = sock_no_connect,
932 .release = llcp_sock_release,
933 .socketpair = sock_no_socketpair,
934 .accept = sock_no_accept,
935 .getname = llcp_sock_getname,
936 .poll = llcp_sock_poll,
937 .ioctl = sock_no_ioctl,
938 .listen = sock_no_listen,
939 .shutdown = sock_no_shutdown,
940 .sendmsg = sock_no_sendmsg,
941 .recvmsg = llcp_sock_recvmsg,
942 .mmap = sock_no_mmap,
943};
944
945static void llcp_sock_destruct(struct sock *sk)
946{
947 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
948
949 pr_debug("%p\n", sk);
950
951 if (sk->sk_state == LLCP_CONNECTED)
952 nfc_put_device(llcp_sock->dev);
953
954 skb_queue_purge(&sk->sk_receive_queue);
955
956 nfc_llcp_sock_free(llcp_sock);
957
958 if (!sock_flag(sk, SOCK_DEAD)) {
959 pr_err("Freeing alive NFC LLCP socket %p\n", sk);
960 return;
961 }
962}
963
964struct sock *nfc_llcp_sock_alloc(struct socket *sock, int type, gfp_t gfp, int kern)
965{
966 struct sock *sk;
967 struct nfc_llcp_sock *llcp_sock;
968
969 sk = sk_alloc(&init_net, PF_NFC, gfp, &llcp_sock_proto, kern);
970 if (!sk)
971 return NULL;
972
973 llcp_sock = nfc_llcp_sock(sk);
974
975 sock_init_data(sock, sk);
976 sk->sk_state = LLCP_CLOSED;
977 sk->sk_protocol = NFC_SOCKPROTO_LLCP;
978 sk->sk_type = type;
979 sk->sk_destruct = llcp_sock_destruct;
980
981 llcp_sock->ssap = 0;
982 llcp_sock->dsap = LLCP_SAP_SDP;
983 llcp_sock->rw = LLCP_MAX_RW + 1;
984 llcp_sock->miux = cpu_to_be16(LLCP_MAX_MIUX + 1);
985 llcp_sock->send_n = llcp_sock->send_ack_n = 0;
986 llcp_sock->recv_n = llcp_sock->recv_ack_n = 0;
987 llcp_sock->remote_ready = 1;
988 llcp_sock->reserved_ssap = LLCP_SAP_MAX;
989 nfc_llcp_socket_remote_param_init(llcp_sock);
990 skb_queue_head_init(&llcp_sock->tx_queue);
991 skb_queue_head_init(&llcp_sock->tx_pending_queue);
992 INIT_LIST_HEAD(&llcp_sock->accept_queue);
993
994 if (sock != NULL)
995 sock->state = SS_UNCONNECTED;
996
997 return sk;
998}
999
1000void nfc_llcp_sock_free(struct nfc_llcp_sock *sock)
1001{
1002 kfree(sock->service_name);
1003
1004 skb_queue_purge(&sock->tx_queue);
1005 skb_queue_purge(&sock->tx_pending_queue);
1006
1007 list_del_init(&sock->accept_queue);
1008
1009 sock->parent = NULL;
1010
1011 nfc_llcp_local_put(sock->local);
1012}
1013
1014static int llcp_sock_create(struct net *net, struct socket *sock,
1015 const struct nfc_protocol *nfc_proto, int kern)
1016{
1017 struct sock *sk;
1018
1019 pr_debug("%p\n", sock);
1020
1021 if (sock->type != SOCK_STREAM &&
1022 sock->type != SOCK_DGRAM &&
1023 sock->type != SOCK_RAW)
1024 return -ESOCKTNOSUPPORT;
1025
1026 if (sock->type == SOCK_RAW) {
1027 if (!capable(CAP_NET_RAW))
1028 return -EPERM;
1029 sock->ops = &llcp_rawsock_ops;
1030 } else {
1031 sock->ops = &llcp_sock_ops;
1032 }
1033
1034 sk = nfc_llcp_sock_alloc(sock, sock->type, GFP_ATOMIC, kern);
1035 if (sk == NULL)
1036 return -ENOMEM;
1037
1038 return 0;
1039}
1040
1041static const struct nfc_protocol llcp_nfc_proto = {
1042 .id = NFC_SOCKPROTO_LLCP,
1043 .proto = &llcp_sock_proto,
1044 .owner = THIS_MODULE,
1045 .create = llcp_sock_create
1046};
1047
1048int __init nfc_llcp_sock_init(void)
1049{
1050 return nfc_proto_register(&llcp_nfc_proto);
1051}
1052
1053void nfc_llcp_sock_exit(void)
1054{
1055 nfc_proto_unregister(&llcp_nfc_proto);
1056}
1/*
2 * Copyright (C) 2011 Intel Corporation. All rights reserved.
3 *
4 * This program is free software; you can redistribute it and/or modify
5 * it under the terms of the GNU General Public License as published by
6 * the Free Software Foundation; either version 2 of the License, or
7 * (at your option) any later version.
8 *
9 * This program is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
13 *
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, see <http://www.gnu.org/licenses/>.
16 */
17
18#define pr_fmt(fmt) "llcp: %s: " fmt, __func__
19
20#include <linux/init.h>
21#include <linux/kernel.h>
22#include <linux/module.h>
23#include <linux/nfc.h>
24#include <linux/sched/signal.h>
25
26#include "nfc.h"
27#include "llcp.h"
28
29static int sock_wait_state(struct sock *sk, int state, unsigned long timeo)
30{
31 DECLARE_WAITQUEUE(wait, current);
32 int err = 0;
33
34 pr_debug("sk %p", sk);
35
36 add_wait_queue(sk_sleep(sk), &wait);
37 set_current_state(TASK_INTERRUPTIBLE);
38
39 while (sk->sk_state != state) {
40 if (!timeo) {
41 err = -EINPROGRESS;
42 break;
43 }
44
45 if (signal_pending(current)) {
46 err = sock_intr_errno(timeo);
47 break;
48 }
49
50 release_sock(sk);
51 timeo = schedule_timeout(timeo);
52 lock_sock(sk);
53 set_current_state(TASK_INTERRUPTIBLE);
54
55 err = sock_error(sk);
56 if (err)
57 break;
58 }
59
60 __set_current_state(TASK_RUNNING);
61 remove_wait_queue(sk_sleep(sk), &wait);
62 return err;
63}
64
65static struct proto llcp_sock_proto = {
66 .name = "NFC_LLCP",
67 .owner = THIS_MODULE,
68 .obj_size = sizeof(struct nfc_llcp_sock),
69};
70
71static int llcp_sock_bind(struct socket *sock, struct sockaddr *addr, int alen)
72{
73 struct sock *sk = sock->sk;
74 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
75 struct nfc_llcp_local *local;
76 struct nfc_dev *dev;
77 struct sockaddr_nfc_llcp llcp_addr;
78 int len, ret = 0;
79
80 if (!addr || alen < offsetofend(struct sockaddr, sa_family) ||
81 addr->sa_family != AF_NFC)
82 return -EINVAL;
83
84 pr_debug("sk %p addr %p family %d\n", sk, addr, addr->sa_family);
85
86 memset(&llcp_addr, 0, sizeof(llcp_addr));
87 len = min_t(unsigned int, sizeof(llcp_addr), alen);
88 memcpy(&llcp_addr, addr, len);
89
90 /* This is going to be a listening socket, dsap must be 0 */
91 if (llcp_addr.dsap != 0)
92 return -EINVAL;
93
94 lock_sock(sk);
95
96 if (sk->sk_state != LLCP_CLOSED) {
97 ret = -EBADFD;
98 goto error;
99 }
100
101 dev = nfc_get_device(llcp_addr.dev_idx);
102 if (dev == NULL) {
103 ret = -ENODEV;
104 goto error;
105 }
106
107 local = nfc_llcp_find_local(dev);
108 if (local == NULL) {
109 ret = -ENODEV;
110 goto put_dev;
111 }
112
113 llcp_sock->dev = dev;
114 llcp_sock->local = nfc_llcp_local_get(local);
115 llcp_sock->nfc_protocol = llcp_addr.nfc_protocol;
116 llcp_sock->service_name_len = min_t(unsigned int,
117 llcp_addr.service_name_len,
118 NFC_LLCP_MAX_SERVICE_NAME);
119 llcp_sock->service_name = kmemdup(llcp_addr.service_name,
120 llcp_sock->service_name_len,
121 GFP_KERNEL);
122
123 llcp_sock->ssap = nfc_llcp_get_sdp_ssap(local, llcp_sock);
124 if (llcp_sock->ssap == LLCP_SAP_MAX) {
125 ret = -EADDRINUSE;
126 goto put_dev;
127 }
128
129 llcp_sock->reserved_ssap = llcp_sock->ssap;
130
131 nfc_llcp_sock_link(&local->sockets, sk);
132
133 pr_debug("Socket bound to SAP %d\n", llcp_sock->ssap);
134
135 sk->sk_state = LLCP_BOUND;
136
137put_dev:
138 nfc_put_device(dev);
139
140error:
141 release_sock(sk);
142 return ret;
143}
144
145static int llcp_raw_sock_bind(struct socket *sock, struct sockaddr *addr,
146 int alen)
147{
148 struct sock *sk = sock->sk;
149 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
150 struct nfc_llcp_local *local;
151 struct nfc_dev *dev;
152 struct sockaddr_nfc_llcp llcp_addr;
153 int len, ret = 0;
154
155 if (!addr || alen < offsetofend(struct sockaddr, sa_family) ||
156 addr->sa_family != AF_NFC)
157 return -EINVAL;
158
159 pr_debug("sk %p addr %p family %d\n", sk, addr, addr->sa_family);
160
161 memset(&llcp_addr, 0, sizeof(llcp_addr));
162 len = min_t(unsigned int, sizeof(llcp_addr), alen);
163 memcpy(&llcp_addr, addr, len);
164
165 lock_sock(sk);
166
167 if (sk->sk_state != LLCP_CLOSED) {
168 ret = -EBADFD;
169 goto error;
170 }
171
172 dev = nfc_get_device(llcp_addr.dev_idx);
173 if (dev == NULL) {
174 ret = -ENODEV;
175 goto error;
176 }
177
178 local = nfc_llcp_find_local(dev);
179 if (local == NULL) {
180 ret = -ENODEV;
181 goto put_dev;
182 }
183
184 llcp_sock->dev = dev;
185 llcp_sock->local = nfc_llcp_local_get(local);
186 llcp_sock->nfc_protocol = llcp_addr.nfc_protocol;
187
188 nfc_llcp_sock_link(&local->raw_sockets, sk);
189
190 sk->sk_state = LLCP_BOUND;
191
192put_dev:
193 nfc_put_device(dev);
194
195error:
196 release_sock(sk);
197 return ret;
198}
199
200static int llcp_sock_listen(struct socket *sock, int backlog)
201{
202 struct sock *sk = sock->sk;
203 int ret = 0;
204
205 pr_debug("sk %p backlog %d\n", sk, backlog);
206
207 lock_sock(sk);
208
209 if ((sock->type != SOCK_SEQPACKET && sock->type != SOCK_STREAM) ||
210 sk->sk_state != LLCP_BOUND) {
211 ret = -EBADFD;
212 goto error;
213 }
214
215 sk->sk_max_ack_backlog = backlog;
216 sk->sk_ack_backlog = 0;
217
218 pr_debug("Socket listening\n");
219 sk->sk_state = LLCP_LISTEN;
220
221error:
222 release_sock(sk);
223
224 return ret;
225}
226
227static int nfc_llcp_setsockopt(struct socket *sock, int level, int optname,
228 char __user *optval, unsigned int optlen)
229{
230 struct sock *sk = sock->sk;
231 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
232 u32 opt;
233 int err = 0;
234
235 pr_debug("%p optname %d\n", sk, optname);
236
237 if (level != SOL_NFC)
238 return -ENOPROTOOPT;
239
240 lock_sock(sk);
241
242 switch (optname) {
243 case NFC_LLCP_RW:
244 if (sk->sk_state == LLCP_CONNECTED ||
245 sk->sk_state == LLCP_BOUND ||
246 sk->sk_state == LLCP_LISTEN) {
247 err = -EINVAL;
248 break;
249 }
250
251 if (get_user(opt, (u32 __user *) optval)) {
252 err = -EFAULT;
253 break;
254 }
255
256 if (opt > LLCP_MAX_RW) {
257 err = -EINVAL;
258 break;
259 }
260
261 llcp_sock->rw = (u8) opt;
262
263 break;
264
265 case NFC_LLCP_MIUX:
266 if (sk->sk_state == LLCP_CONNECTED ||
267 sk->sk_state == LLCP_BOUND ||
268 sk->sk_state == LLCP_LISTEN) {
269 err = -EINVAL;
270 break;
271 }
272
273 if (get_user(opt, (u32 __user *) optval)) {
274 err = -EFAULT;
275 break;
276 }
277
278 if (opt > LLCP_MAX_MIUX) {
279 err = -EINVAL;
280 break;
281 }
282
283 llcp_sock->miux = cpu_to_be16((u16) opt);
284
285 break;
286
287 default:
288 err = -ENOPROTOOPT;
289 break;
290 }
291
292 release_sock(sk);
293
294 pr_debug("%p rw %d miux %d\n", llcp_sock,
295 llcp_sock->rw, llcp_sock->miux);
296
297 return err;
298}
299
300static int nfc_llcp_getsockopt(struct socket *sock, int level, int optname,
301 char __user *optval, int __user *optlen)
302{
303 struct nfc_llcp_local *local;
304 struct sock *sk = sock->sk;
305 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
306 int len, err = 0;
307 u16 miux, remote_miu;
308 u8 rw;
309
310 pr_debug("%p optname %d\n", sk, optname);
311
312 if (level != SOL_NFC)
313 return -ENOPROTOOPT;
314
315 if (get_user(len, optlen))
316 return -EFAULT;
317
318 local = llcp_sock->local;
319 if (!local)
320 return -ENODEV;
321
322 len = min_t(u32, len, sizeof(u32));
323
324 lock_sock(sk);
325
326 switch (optname) {
327 case NFC_LLCP_RW:
328 rw = llcp_sock->rw > LLCP_MAX_RW ? local->rw : llcp_sock->rw;
329 if (put_user(rw, (u32 __user *) optval))
330 err = -EFAULT;
331
332 break;
333
334 case NFC_LLCP_MIUX:
335 miux = be16_to_cpu(llcp_sock->miux) > LLCP_MAX_MIUX ?
336 be16_to_cpu(local->miux) : be16_to_cpu(llcp_sock->miux);
337
338 if (put_user(miux, (u32 __user *) optval))
339 err = -EFAULT;
340
341 break;
342
343 case NFC_LLCP_REMOTE_MIU:
344 remote_miu = llcp_sock->remote_miu > LLCP_MAX_MIU ?
345 local->remote_miu : llcp_sock->remote_miu;
346
347 if (put_user(remote_miu, (u32 __user *) optval))
348 err = -EFAULT;
349
350 break;
351
352 case NFC_LLCP_REMOTE_LTO:
353 if (put_user(local->remote_lto / 10, (u32 __user *) optval))
354 err = -EFAULT;
355
356 break;
357
358 case NFC_LLCP_REMOTE_RW:
359 if (put_user(llcp_sock->remote_rw, (u32 __user *) optval))
360 err = -EFAULT;
361
362 break;
363
364 default:
365 err = -ENOPROTOOPT;
366 break;
367 }
368
369 release_sock(sk);
370
371 if (put_user(len, optlen))
372 return -EFAULT;
373
374 return err;
375}
376
377void nfc_llcp_accept_unlink(struct sock *sk)
378{
379 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
380
381 pr_debug("state %d\n", sk->sk_state);
382
383 list_del_init(&llcp_sock->accept_queue);
384 sk_acceptq_removed(llcp_sock->parent);
385 llcp_sock->parent = NULL;
386
387 sock_put(sk);
388}
389
390void nfc_llcp_accept_enqueue(struct sock *parent, struct sock *sk)
391{
392 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
393 struct nfc_llcp_sock *llcp_sock_parent = nfc_llcp_sock(parent);
394
395 /* Lock will be free from unlink */
396 sock_hold(sk);
397
398 list_add_tail(&llcp_sock->accept_queue,
399 &llcp_sock_parent->accept_queue);
400 llcp_sock->parent = parent;
401 sk_acceptq_added(parent);
402}
403
404struct sock *nfc_llcp_accept_dequeue(struct sock *parent,
405 struct socket *newsock)
406{
407 struct nfc_llcp_sock *lsk, *n, *llcp_parent;
408 struct sock *sk;
409
410 llcp_parent = nfc_llcp_sock(parent);
411
412 list_for_each_entry_safe(lsk, n, &llcp_parent->accept_queue,
413 accept_queue) {
414 sk = &lsk->sk;
415 lock_sock(sk);
416
417 if (sk->sk_state == LLCP_CLOSED) {
418 release_sock(sk);
419 nfc_llcp_accept_unlink(sk);
420 continue;
421 }
422
423 if (sk->sk_state == LLCP_CONNECTED || !newsock) {
424 list_del_init(&lsk->accept_queue);
425 sock_put(sk);
426
427 if (newsock)
428 sock_graft(sk, newsock);
429
430 release_sock(sk);
431
432 pr_debug("Returning sk state %d\n", sk->sk_state);
433
434 sk_acceptq_removed(parent);
435
436 return sk;
437 }
438
439 release_sock(sk);
440 }
441
442 return NULL;
443}
444
445static int llcp_sock_accept(struct socket *sock, struct socket *newsock,
446 int flags, bool kern)
447{
448 DECLARE_WAITQUEUE(wait, current);
449 struct sock *sk = sock->sk, *new_sk;
450 long timeo;
451 int ret = 0;
452
453 pr_debug("parent %p\n", sk);
454
455 lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
456
457 if (sk->sk_state != LLCP_LISTEN) {
458 ret = -EBADFD;
459 goto error;
460 }
461
462 timeo = sock_rcvtimeo(sk, flags & O_NONBLOCK);
463
464 /* Wait for an incoming connection. */
465 add_wait_queue_exclusive(sk_sleep(sk), &wait);
466 while (!(new_sk = nfc_llcp_accept_dequeue(sk, newsock))) {
467 set_current_state(TASK_INTERRUPTIBLE);
468
469 if (!timeo) {
470 ret = -EAGAIN;
471 break;
472 }
473
474 if (signal_pending(current)) {
475 ret = sock_intr_errno(timeo);
476 break;
477 }
478
479 release_sock(sk);
480 timeo = schedule_timeout(timeo);
481 lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
482 }
483 __set_current_state(TASK_RUNNING);
484 remove_wait_queue(sk_sleep(sk), &wait);
485
486 if (ret)
487 goto error;
488
489 newsock->state = SS_CONNECTED;
490
491 pr_debug("new socket %p\n", new_sk);
492
493error:
494 release_sock(sk);
495
496 return ret;
497}
498
499static int llcp_sock_getname(struct socket *sock, struct sockaddr *uaddr,
500 int peer)
501{
502 struct sock *sk = sock->sk;
503 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
504 DECLARE_SOCKADDR(struct sockaddr_nfc_llcp *, llcp_addr, uaddr);
505
506 if (llcp_sock == NULL || llcp_sock->dev == NULL)
507 return -EBADFD;
508
509 pr_debug("%p %d %d %d\n", sk, llcp_sock->target_idx,
510 llcp_sock->dsap, llcp_sock->ssap);
511
512 memset(llcp_addr, 0, sizeof(*llcp_addr));
513
514 lock_sock(sk);
515 if (!llcp_sock->dev) {
516 release_sock(sk);
517 return -EBADFD;
518 }
519 llcp_addr->sa_family = AF_NFC;
520 llcp_addr->dev_idx = llcp_sock->dev->idx;
521 llcp_addr->target_idx = llcp_sock->target_idx;
522 llcp_addr->nfc_protocol = llcp_sock->nfc_protocol;
523 llcp_addr->dsap = llcp_sock->dsap;
524 llcp_addr->ssap = llcp_sock->ssap;
525 llcp_addr->service_name_len = llcp_sock->service_name_len;
526 memcpy(llcp_addr->service_name, llcp_sock->service_name,
527 llcp_addr->service_name_len);
528 release_sock(sk);
529
530 return sizeof(struct sockaddr_nfc_llcp);
531}
532
533static inline __poll_t llcp_accept_poll(struct sock *parent)
534{
535 struct nfc_llcp_sock *llcp_sock, *parent_sock;
536 struct sock *sk;
537
538 parent_sock = nfc_llcp_sock(parent);
539
540 list_for_each_entry(llcp_sock, &parent_sock->accept_queue,
541 accept_queue) {
542 sk = &llcp_sock->sk;
543
544 if (sk->sk_state == LLCP_CONNECTED)
545 return EPOLLIN | EPOLLRDNORM;
546 }
547
548 return 0;
549}
550
551static __poll_t llcp_sock_poll(struct file *file, struct socket *sock,
552 poll_table *wait)
553{
554 struct sock *sk = sock->sk;
555 __poll_t mask = 0;
556
557 pr_debug("%p\n", sk);
558
559 sock_poll_wait(file, sk_sleep(sk), wait);
560
561 if (sk->sk_state == LLCP_LISTEN)
562 return llcp_accept_poll(sk);
563
564 if (sk->sk_err || !skb_queue_empty(&sk->sk_error_queue))
565 mask |= EPOLLERR |
566 (sock_flag(sk, SOCK_SELECT_ERR_QUEUE) ? EPOLLPRI : 0);
567
568 if (!skb_queue_empty(&sk->sk_receive_queue))
569 mask |= EPOLLIN | EPOLLRDNORM;
570
571 if (sk->sk_state == LLCP_CLOSED)
572 mask |= EPOLLHUP;
573
574 if (sk->sk_shutdown & RCV_SHUTDOWN)
575 mask |= EPOLLRDHUP | EPOLLIN | EPOLLRDNORM;
576
577 if (sk->sk_shutdown == SHUTDOWN_MASK)
578 mask |= EPOLLHUP;
579
580 if (sock_writeable(sk) && sk->sk_state == LLCP_CONNECTED)
581 mask |= EPOLLOUT | EPOLLWRNORM | EPOLLWRBAND;
582 else
583 sk_set_bit(SOCKWQ_ASYNC_NOSPACE, sk);
584
585 pr_debug("mask 0x%x\n", mask);
586
587 return mask;
588}
589
590static int llcp_sock_release(struct socket *sock)
591{
592 struct sock *sk = sock->sk;
593 struct nfc_llcp_local *local;
594 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
595 int err = 0;
596
597 if (!sk)
598 return 0;
599
600 pr_debug("%p\n", sk);
601
602 local = llcp_sock->local;
603 if (local == NULL) {
604 err = -ENODEV;
605 goto out;
606 }
607
608 lock_sock(sk);
609
610 /* Send a DISC */
611 if (sk->sk_state == LLCP_CONNECTED)
612 nfc_llcp_send_disconnect(llcp_sock);
613
614 if (sk->sk_state == LLCP_LISTEN) {
615 struct nfc_llcp_sock *lsk, *n;
616 struct sock *accept_sk;
617
618 list_for_each_entry_safe(lsk, n, &llcp_sock->accept_queue,
619 accept_queue) {
620 accept_sk = &lsk->sk;
621 lock_sock(accept_sk);
622
623 nfc_llcp_send_disconnect(lsk);
624 nfc_llcp_accept_unlink(accept_sk);
625
626 release_sock(accept_sk);
627 }
628 }
629
630 if (llcp_sock->reserved_ssap < LLCP_SAP_MAX)
631 nfc_llcp_put_ssap(llcp_sock->local, llcp_sock->ssap);
632
633 release_sock(sk);
634
635 /* Keep this sock alive and therefore do not remove it from the sockets
636 * list until the DISC PDU has been actually sent. Otherwise we would
637 * reply with DM PDUs before sending the DISC one.
638 */
639 if (sk->sk_state == LLCP_DISCONNECTING)
640 return err;
641
642 if (sock->type == SOCK_RAW)
643 nfc_llcp_sock_unlink(&local->raw_sockets, sk);
644 else
645 nfc_llcp_sock_unlink(&local->sockets, sk);
646
647out:
648 sock_orphan(sk);
649 sock_put(sk);
650
651 return err;
652}
653
654static int llcp_sock_connect(struct socket *sock, struct sockaddr *_addr,
655 int len, int flags)
656{
657 struct sock *sk = sock->sk;
658 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
659 struct sockaddr_nfc_llcp *addr = (struct sockaddr_nfc_llcp *)_addr;
660 struct nfc_dev *dev;
661 struct nfc_llcp_local *local;
662 int ret = 0;
663
664 pr_debug("sock %p sk %p flags 0x%x\n", sock, sk, flags);
665
666 if (!addr || len < sizeof(*addr) || addr->sa_family != AF_NFC)
667 return -EINVAL;
668
669 if (addr->service_name_len == 0 && addr->dsap == 0)
670 return -EINVAL;
671
672 pr_debug("addr dev_idx=%u target_idx=%u protocol=%u\n", addr->dev_idx,
673 addr->target_idx, addr->nfc_protocol);
674
675 lock_sock(sk);
676
677 if (sk->sk_state == LLCP_CONNECTED) {
678 ret = -EISCONN;
679 goto error;
680 }
681
682 dev = nfc_get_device(addr->dev_idx);
683 if (dev == NULL) {
684 ret = -ENODEV;
685 goto error;
686 }
687
688 local = nfc_llcp_find_local(dev);
689 if (local == NULL) {
690 ret = -ENODEV;
691 goto put_dev;
692 }
693
694 device_lock(&dev->dev);
695 if (dev->dep_link_up == false) {
696 ret = -ENOLINK;
697 device_unlock(&dev->dev);
698 goto put_dev;
699 }
700 device_unlock(&dev->dev);
701
702 if (local->rf_mode == NFC_RF_INITIATOR &&
703 addr->target_idx != local->target_idx) {
704 ret = -ENOLINK;
705 goto put_dev;
706 }
707
708 llcp_sock->dev = dev;
709 llcp_sock->local = nfc_llcp_local_get(local);
710 llcp_sock->ssap = nfc_llcp_get_local_ssap(local);
711 if (llcp_sock->ssap == LLCP_SAP_MAX) {
712 ret = -ENOMEM;
713 goto put_dev;
714 }
715
716 llcp_sock->reserved_ssap = llcp_sock->ssap;
717
718 if (addr->service_name_len == 0)
719 llcp_sock->dsap = addr->dsap;
720 else
721 llcp_sock->dsap = LLCP_SAP_SDP;
722 llcp_sock->nfc_protocol = addr->nfc_protocol;
723 llcp_sock->service_name_len = min_t(unsigned int,
724 addr->service_name_len,
725 NFC_LLCP_MAX_SERVICE_NAME);
726 llcp_sock->service_name = kmemdup(addr->service_name,
727 llcp_sock->service_name_len,
728 GFP_KERNEL);
729
730 nfc_llcp_sock_link(&local->connecting_sockets, sk);
731
732 ret = nfc_llcp_send_connect(llcp_sock);
733 if (ret)
734 goto sock_unlink;
735
736 sk->sk_state = LLCP_CONNECTING;
737
738 ret = sock_wait_state(sk, LLCP_CONNECTED,
739 sock_sndtimeo(sk, flags & O_NONBLOCK));
740 if (ret && ret != -EINPROGRESS)
741 goto sock_unlink;
742
743 release_sock(sk);
744
745 return ret;
746
747sock_unlink:
748 nfc_llcp_put_ssap(local, llcp_sock->ssap);
749
750 nfc_llcp_sock_unlink(&local->connecting_sockets, sk);
751
752put_dev:
753 nfc_put_device(dev);
754
755error:
756 release_sock(sk);
757 return ret;
758}
759
760static int llcp_sock_sendmsg(struct socket *sock, struct msghdr *msg,
761 size_t len)
762{
763 struct sock *sk = sock->sk;
764 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
765 int ret;
766
767 pr_debug("sock %p sk %p", sock, sk);
768
769 ret = sock_error(sk);
770 if (ret)
771 return ret;
772
773 if (msg->msg_flags & MSG_OOB)
774 return -EOPNOTSUPP;
775
776 lock_sock(sk);
777
778 if (sk->sk_type == SOCK_DGRAM) {
779 DECLARE_SOCKADDR(struct sockaddr_nfc_llcp *, addr,
780 msg->msg_name);
781
782 if (msg->msg_namelen < sizeof(*addr)) {
783 release_sock(sk);
784 return -EINVAL;
785 }
786
787 release_sock(sk);
788
789 return nfc_llcp_send_ui_frame(llcp_sock, addr->dsap, addr->ssap,
790 msg, len);
791 }
792
793 if (sk->sk_state != LLCP_CONNECTED) {
794 release_sock(sk);
795 return -ENOTCONN;
796 }
797
798 release_sock(sk);
799
800 return nfc_llcp_send_i_frame(llcp_sock, msg, len);
801}
802
803static int llcp_sock_recvmsg(struct socket *sock, struct msghdr *msg,
804 size_t len, int flags)
805{
806 int noblock = flags & MSG_DONTWAIT;
807 struct sock *sk = sock->sk;
808 unsigned int copied, rlen;
809 struct sk_buff *skb, *cskb;
810 int err = 0;
811
812 pr_debug("%p %zu\n", sk, len);
813
814 lock_sock(sk);
815
816 if (sk->sk_state == LLCP_CLOSED &&
817 skb_queue_empty(&sk->sk_receive_queue)) {
818 release_sock(sk);
819 return 0;
820 }
821
822 release_sock(sk);
823
824 if (flags & (MSG_OOB))
825 return -EOPNOTSUPP;
826
827 skb = skb_recv_datagram(sk, flags, noblock, &err);
828 if (!skb) {
829 pr_err("Recv datagram failed state %d %d %d",
830 sk->sk_state, err, sock_error(sk));
831
832 if (sk->sk_shutdown & RCV_SHUTDOWN)
833 return 0;
834
835 return err;
836 }
837
838 rlen = skb->len; /* real length of skb */
839 copied = min_t(unsigned int, rlen, len);
840
841 cskb = skb;
842 if (skb_copy_datagram_msg(cskb, 0, msg, copied)) {
843 if (!(flags & MSG_PEEK))
844 skb_queue_head(&sk->sk_receive_queue, skb);
845 return -EFAULT;
846 }
847
848 sock_recv_timestamp(msg, sk, skb);
849
850 if (sk->sk_type == SOCK_DGRAM && msg->msg_name) {
851 struct nfc_llcp_ui_cb *ui_cb = nfc_llcp_ui_skb_cb(skb);
852 DECLARE_SOCKADDR(struct sockaddr_nfc_llcp *, sockaddr,
853 msg->msg_name);
854
855 msg->msg_namelen = sizeof(struct sockaddr_nfc_llcp);
856
857 pr_debug("Datagram socket %d %d\n", ui_cb->dsap, ui_cb->ssap);
858
859 memset(sockaddr, 0, sizeof(*sockaddr));
860 sockaddr->sa_family = AF_NFC;
861 sockaddr->nfc_protocol = NFC_PROTO_NFC_DEP;
862 sockaddr->dsap = ui_cb->dsap;
863 sockaddr->ssap = ui_cb->ssap;
864 }
865
866 /* Mark read part of skb as used */
867 if (!(flags & MSG_PEEK)) {
868
869 /* SOCK_STREAM: re-queue skb if it contains unreceived data */
870 if (sk->sk_type == SOCK_STREAM ||
871 sk->sk_type == SOCK_DGRAM ||
872 sk->sk_type == SOCK_RAW) {
873 skb_pull(skb, copied);
874 if (skb->len) {
875 skb_queue_head(&sk->sk_receive_queue, skb);
876 goto done;
877 }
878 }
879
880 kfree_skb(skb);
881 }
882
883 /* XXX Queue backlogged skbs */
884
885done:
886 /* SOCK_SEQPACKET: return real length if MSG_TRUNC is set */
887 if (sk->sk_type == SOCK_SEQPACKET && (flags & MSG_TRUNC))
888 copied = rlen;
889
890 return copied;
891}
892
893static const struct proto_ops llcp_sock_ops = {
894 .family = PF_NFC,
895 .owner = THIS_MODULE,
896 .bind = llcp_sock_bind,
897 .connect = llcp_sock_connect,
898 .release = llcp_sock_release,
899 .socketpair = sock_no_socketpair,
900 .accept = llcp_sock_accept,
901 .getname = llcp_sock_getname,
902 .poll = llcp_sock_poll,
903 .ioctl = sock_no_ioctl,
904 .listen = llcp_sock_listen,
905 .shutdown = sock_no_shutdown,
906 .setsockopt = nfc_llcp_setsockopt,
907 .getsockopt = nfc_llcp_getsockopt,
908 .sendmsg = llcp_sock_sendmsg,
909 .recvmsg = llcp_sock_recvmsg,
910 .mmap = sock_no_mmap,
911};
912
913static const struct proto_ops llcp_rawsock_ops = {
914 .family = PF_NFC,
915 .owner = THIS_MODULE,
916 .bind = llcp_raw_sock_bind,
917 .connect = sock_no_connect,
918 .release = llcp_sock_release,
919 .socketpair = sock_no_socketpair,
920 .accept = sock_no_accept,
921 .getname = llcp_sock_getname,
922 .poll = llcp_sock_poll,
923 .ioctl = sock_no_ioctl,
924 .listen = sock_no_listen,
925 .shutdown = sock_no_shutdown,
926 .setsockopt = sock_no_setsockopt,
927 .getsockopt = sock_no_getsockopt,
928 .sendmsg = sock_no_sendmsg,
929 .recvmsg = llcp_sock_recvmsg,
930 .mmap = sock_no_mmap,
931};
932
933static void llcp_sock_destruct(struct sock *sk)
934{
935 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
936
937 pr_debug("%p\n", sk);
938
939 if (sk->sk_state == LLCP_CONNECTED)
940 nfc_put_device(llcp_sock->dev);
941
942 skb_queue_purge(&sk->sk_receive_queue);
943
944 nfc_llcp_sock_free(llcp_sock);
945
946 if (!sock_flag(sk, SOCK_DEAD)) {
947 pr_err("Freeing alive NFC LLCP socket %p\n", sk);
948 return;
949 }
950}
951
952struct sock *nfc_llcp_sock_alloc(struct socket *sock, int type, gfp_t gfp, int kern)
953{
954 struct sock *sk;
955 struct nfc_llcp_sock *llcp_sock;
956
957 sk = sk_alloc(&init_net, PF_NFC, gfp, &llcp_sock_proto, kern);
958 if (!sk)
959 return NULL;
960
961 llcp_sock = nfc_llcp_sock(sk);
962
963 sock_init_data(sock, sk);
964 sk->sk_state = LLCP_CLOSED;
965 sk->sk_protocol = NFC_SOCKPROTO_LLCP;
966 sk->sk_type = type;
967 sk->sk_destruct = llcp_sock_destruct;
968
969 llcp_sock->ssap = 0;
970 llcp_sock->dsap = LLCP_SAP_SDP;
971 llcp_sock->rw = LLCP_MAX_RW + 1;
972 llcp_sock->miux = cpu_to_be16(LLCP_MAX_MIUX + 1);
973 llcp_sock->send_n = llcp_sock->send_ack_n = 0;
974 llcp_sock->recv_n = llcp_sock->recv_ack_n = 0;
975 llcp_sock->remote_ready = 1;
976 llcp_sock->reserved_ssap = LLCP_SAP_MAX;
977 nfc_llcp_socket_remote_param_init(llcp_sock);
978 skb_queue_head_init(&llcp_sock->tx_queue);
979 skb_queue_head_init(&llcp_sock->tx_pending_queue);
980 INIT_LIST_HEAD(&llcp_sock->accept_queue);
981
982 if (sock != NULL)
983 sock->state = SS_UNCONNECTED;
984
985 return sk;
986}
987
988void nfc_llcp_sock_free(struct nfc_llcp_sock *sock)
989{
990 kfree(sock->service_name);
991
992 skb_queue_purge(&sock->tx_queue);
993 skb_queue_purge(&sock->tx_pending_queue);
994
995 list_del_init(&sock->accept_queue);
996
997 sock->parent = NULL;
998
999 nfc_llcp_local_put(sock->local);
1000}
1001
1002static int llcp_sock_create(struct net *net, struct socket *sock,
1003 const struct nfc_protocol *nfc_proto, int kern)
1004{
1005 struct sock *sk;
1006
1007 pr_debug("%p\n", sock);
1008
1009 if (sock->type != SOCK_STREAM &&
1010 sock->type != SOCK_DGRAM &&
1011 sock->type != SOCK_RAW)
1012 return -ESOCKTNOSUPPORT;
1013
1014 if (sock->type == SOCK_RAW)
1015 sock->ops = &llcp_rawsock_ops;
1016 else
1017 sock->ops = &llcp_sock_ops;
1018
1019 sk = nfc_llcp_sock_alloc(sock, sock->type, GFP_ATOMIC, kern);
1020 if (sk == NULL)
1021 return -ENOMEM;
1022
1023 return 0;
1024}
1025
1026static const struct nfc_protocol llcp_nfc_proto = {
1027 .id = NFC_SOCKPROTO_LLCP,
1028 .proto = &llcp_sock_proto,
1029 .owner = THIS_MODULE,
1030 .create = llcp_sock_create
1031};
1032
1033int __init nfc_llcp_sock_init(void)
1034{
1035 return nfc_proto_register(&llcp_nfc_proto);
1036}
1037
1038void nfc_llcp_sock_exit(void)
1039{
1040 nfc_proto_unregister(&llcp_nfc_proto);
1041}