Loading...
1// SPDX-License-Identifier: GPL-2.0-or-later
2/*
3 * Copyright (C) 2011 Intel Corporation. All rights reserved.
4 */
5
6#define pr_fmt(fmt) "llcp: %s: " fmt, __func__
7
8#include <linux/init.h>
9#include <linux/kernel.h>
10#include <linux/module.h>
11#include <linux/nfc.h>
12#include <linux/sched/signal.h>
13
14#include "nfc.h"
15#include "llcp.h"
16
17static int sock_wait_state(struct sock *sk, int state, unsigned long timeo)
18{
19 DECLARE_WAITQUEUE(wait, current);
20 int err = 0;
21
22 pr_debug("sk %p", sk);
23
24 add_wait_queue(sk_sleep(sk), &wait);
25 set_current_state(TASK_INTERRUPTIBLE);
26
27 while (sk->sk_state != state) {
28 if (!timeo) {
29 err = -EINPROGRESS;
30 break;
31 }
32
33 if (signal_pending(current)) {
34 err = sock_intr_errno(timeo);
35 break;
36 }
37
38 release_sock(sk);
39 timeo = schedule_timeout(timeo);
40 lock_sock(sk);
41 set_current_state(TASK_INTERRUPTIBLE);
42
43 err = sock_error(sk);
44 if (err)
45 break;
46 }
47
48 __set_current_state(TASK_RUNNING);
49 remove_wait_queue(sk_sleep(sk), &wait);
50 return err;
51}
52
53static struct proto llcp_sock_proto = {
54 .name = "NFC_LLCP",
55 .owner = THIS_MODULE,
56 .obj_size = sizeof(struct nfc_llcp_sock),
57};
58
59static int llcp_sock_bind(struct socket *sock, struct sockaddr *addr, int alen)
60{
61 struct sock *sk = sock->sk;
62 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
63 struct nfc_llcp_local *local;
64 struct nfc_dev *dev;
65 struct sockaddr_nfc_llcp llcp_addr;
66 int len, ret = 0;
67
68 if (!addr || alen < offsetofend(struct sockaddr, sa_family) ||
69 addr->sa_family != AF_NFC)
70 return -EINVAL;
71
72 pr_debug("sk %p addr %p family %d\n", sk, addr, addr->sa_family);
73
74 memset(&llcp_addr, 0, sizeof(llcp_addr));
75 len = min_t(unsigned int, sizeof(llcp_addr), alen);
76 memcpy(&llcp_addr, addr, len);
77
78 /* This is going to be a listening socket, dsap must be 0 */
79 if (llcp_addr.dsap != 0)
80 return -EINVAL;
81
82 lock_sock(sk);
83
84 if (sk->sk_state != LLCP_CLOSED) {
85 ret = -EBADFD;
86 goto error;
87 }
88
89 dev = nfc_get_device(llcp_addr.dev_idx);
90 if (dev == NULL) {
91 ret = -ENODEV;
92 goto error;
93 }
94
95 local = nfc_llcp_find_local(dev);
96 if (local == NULL) {
97 ret = -ENODEV;
98 goto put_dev;
99 }
100
101 llcp_sock->dev = dev;
102 llcp_sock->local = nfc_llcp_local_get(local);
103 llcp_sock->nfc_protocol = llcp_addr.nfc_protocol;
104 llcp_sock->service_name_len = min_t(unsigned int,
105 llcp_addr.service_name_len,
106 NFC_LLCP_MAX_SERVICE_NAME);
107 llcp_sock->service_name = kmemdup(llcp_addr.service_name,
108 llcp_sock->service_name_len,
109 GFP_KERNEL);
110 if (!llcp_sock->service_name) {
111 ret = -ENOMEM;
112 goto put_dev;
113 }
114 llcp_sock->ssap = nfc_llcp_get_sdp_ssap(local, llcp_sock);
115 if (llcp_sock->ssap == LLCP_SAP_MAX) {
116 kfree(llcp_sock->service_name);
117 llcp_sock->service_name = NULL;
118 ret = -EADDRINUSE;
119 goto put_dev;
120 }
121
122 llcp_sock->reserved_ssap = llcp_sock->ssap;
123
124 nfc_llcp_sock_link(&local->sockets, sk);
125
126 pr_debug("Socket bound to SAP %d\n", llcp_sock->ssap);
127
128 sk->sk_state = LLCP_BOUND;
129
130put_dev:
131 nfc_put_device(dev);
132
133error:
134 release_sock(sk);
135 return ret;
136}
137
138static int llcp_raw_sock_bind(struct socket *sock, struct sockaddr *addr,
139 int alen)
140{
141 struct sock *sk = sock->sk;
142 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
143 struct nfc_llcp_local *local;
144 struct nfc_dev *dev;
145 struct sockaddr_nfc_llcp llcp_addr;
146 int len, ret = 0;
147
148 if (!addr || alen < offsetofend(struct sockaddr, sa_family) ||
149 addr->sa_family != AF_NFC)
150 return -EINVAL;
151
152 pr_debug("sk %p addr %p family %d\n", sk, addr, addr->sa_family);
153
154 memset(&llcp_addr, 0, sizeof(llcp_addr));
155 len = min_t(unsigned int, sizeof(llcp_addr), alen);
156 memcpy(&llcp_addr, addr, len);
157
158 lock_sock(sk);
159
160 if (sk->sk_state != LLCP_CLOSED) {
161 ret = -EBADFD;
162 goto error;
163 }
164
165 dev = nfc_get_device(llcp_addr.dev_idx);
166 if (dev == NULL) {
167 ret = -ENODEV;
168 goto error;
169 }
170
171 local = nfc_llcp_find_local(dev);
172 if (local == NULL) {
173 ret = -ENODEV;
174 goto put_dev;
175 }
176
177 llcp_sock->dev = dev;
178 llcp_sock->local = nfc_llcp_local_get(local);
179 llcp_sock->nfc_protocol = llcp_addr.nfc_protocol;
180
181 nfc_llcp_sock_link(&local->raw_sockets, sk);
182
183 sk->sk_state = LLCP_BOUND;
184
185put_dev:
186 nfc_put_device(dev);
187
188error:
189 release_sock(sk);
190 return ret;
191}
192
193static int llcp_sock_listen(struct socket *sock, int backlog)
194{
195 struct sock *sk = sock->sk;
196 int ret = 0;
197
198 pr_debug("sk %p backlog %d\n", sk, backlog);
199
200 lock_sock(sk);
201
202 if ((sock->type != SOCK_SEQPACKET && sock->type != SOCK_STREAM) ||
203 sk->sk_state != LLCP_BOUND) {
204 ret = -EBADFD;
205 goto error;
206 }
207
208 sk->sk_max_ack_backlog = backlog;
209 sk->sk_ack_backlog = 0;
210
211 pr_debug("Socket listening\n");
212 sk->sk_state = LLCP_LISTEN;
213
214error:
215 release_sock(sk);
216
217 return ret;
218}
219
220static int nfc_llcp_setsockopt(struct socket *sock, int level, int optname,
221 char __user *optval, unsigned int optlen)
222{
223 struct sock *sk = sock->sk;
224 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
225 u32 opt;
226 int err = 0;
227
228 pr_debug("%p optname %d\n", sk, optname);
229
230 if (level != SOL_NFC)
231 return -ENOPROTOOPT;
232
233 lock_sock(sk);
234
235 switch (optname) {
236 case NFC_LLCP_RW:
237 if (sk->sk_state == LLCP_CONNECTED ||
238 sk->sk_state == LLCP_BOUND ||
239 sk->sk_state == LLCP_LISTEN) {
240 err = -EINVAL;
241 break;
242 }
243
244 if (get_user(opt, (u32 __user *) optval)) {
245 err = -EFAULT;
246 break;
247 }
248
249 if (opt > LLCP_MAX_RW) {
250 err = -EINVAL;
251 break;
252 }
253
254 llcp_sock->rw = (u8) opt;
255
256 break;
257
258 case NFC_LLCP_MIUX:
259 if (sk->sk_state == LLCP_CONNECTED ||
260 sk->sk_state == LLCP_BOUND ||
261 sk->sk_state == LLCP_LISTEN) {
262 err = -EINVAL;
263 break;
264 }
265
266 if (get_user(opt, (u32 __user *) optval)) {
267 err = -EFAULT;
268 break;
269 }
270
271 if (opt > LLCP_MAX_MIUX) {
272 err = -EINVAL;
273 break;
274 }
275
276 llcp_sock->miux = cpu_to_be16((u16) opt);
277
278 break;
279
280 default:
281 err = -ENOPROTOOPT;
282 break;
283 }
284
285 release_sock(sk);
286
287 pr_debug("%p rw %d miux %d\n", llcp_sock,
288 llcp_sock->rw, llcp_sock->miux);
289
290 return err;
291}
292
293static int nfc_llcp_getsockopt(struct socket *sock, int level, int optname,
294 char __user *optval, int __user *optlen)
295{
296 struct nfc_llcp_local *local;
297 struct sock *sk = sock->sk;
298 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
299 int len, err = 0;
300 u16 miux, remote_miu;
301 u8 rw;
302
303 pr_debug("%p optname %d\n", sk, optname);
304
305 if (level != SOL_NFC)
306 return -ENOPROTOOPT;
307
308 if (get_user(len, optlen))
309 return -EFAULT;
310
311 local = llcp_sock->local;
312 if (!local)
313 return -ENODEV;
314
315 len = min_t(u32, len, sizeof(u32));
316
317 lock_sock(sk);
318
319 switch (optname) {
320 case NFC_LLCP_RW:
321 rw = llcp_sock->rw > LLCP_MAX_RW ? local->rw : llcp_sock->rw;
322 if (put_user(rw, (u32 __user *) optval))
323 err = -EFAULT;
324
325 break;
326
327 case NFC_LLCP_MIUX:
328 miux = be16_to_cpu(llcp_sock->miux) > LLCP_MAX_MIUX ?
329 be16_to_cpu(local->miux) : be16_to_cpu(llcp_sock->miux);
330
331 if (put_user(miux, (u32 __user *) optval))
332 err = -EFAULT;
333
334 break;
335
336 case NFC_LLCP_REMOTE_MIU:
337 remote_miu = llcp_sock->remote_miu > LLCP_MAX_MIU ?
338 local->remote_miu : llcp_sock->remote_miu;
339
340 if (put_user(remote_miu, (u32 __user *) optval))
341 err = -EFAULT;
342
343 break;
344
345 case NFC_LLCP_REMOTE_LTO:
346 if (put_user(local->remote_lto / 10, (u32 __user *) optval))
347 err = -EFAULT;
348
349 break;
350
351 case NFC_LLCP_REMOTE_RW:
352 if (put_user(llcp_sock->remote_rw, (u32 __user *) optval))
353 err = -EFAULT;
354
355 break;
356
357 default:
358 err = -ENOPROTOOPT;
359 break;
360 }
361
362 release_sock(sk);
363
364 if (put_user(len, optlen))
365 return -EFAULT;
366
367 return err;
368}
369
370void nfc_llcp_accept_unlink(struct sock *sk)
371{
372 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
373
374 pr_debug("state %d\n", sk->sk_state);
375
376 list_del_init(&llcp_sock->accept_queue);
377 sk_acceptq_removed(llcp_sock->parent);
378 llcp_sock->parent = NULL;
379
380 sock_put(sk);
381}
382
383void nfc_llcp_accept_enqueue(struct sock *parent, struct sock *sk)
384{
385 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
386 struct nfc_llcp_sock *llcp_sock_parent = nfc_llcp_sock(parent);
387
388 /* Lock will be free from unlink */
389 sock_hold(sk);
390
391 list_add_tail(&llcp_sock->accept_queue,
392 &llcp_sock_parent->accept_queue);
393 llcp_sock->parent = parent;
394 sk_acceptq_added(parent);
395}
396
397struct sock *nfc_llcp_accept_dequeue(struct sock *parent,
398 struct socket *newsock)
399{
400 struct nfc_llcp_sock *lsk, *n, *llcp_parent;
401 struct sock *sk;
402
403 llcp_parent = nfc_llcp_sock(parent);
404
405 list_for_each_entry_safe(lsk, n, &llcp_parent->accept_queue,
406 accept_queue) {
407 sk = &lsk->sk;
408 lock_sock(sk);
409
410 if (sk->sk_state == LLCP_CLOSED) {
411 release_sock(sk);
412 nfc_llcp_accept_unlink(sk);
413 continue;
414 }
415
416 if (sk->sk_state == LLCP_CONNECTED || !newsock) {
417 list_del_init(&lsk->accept_queue);
418 sock_put(sk);
419
420 if (newsock)
421 sock_graft(sk, newsock);
422
423 release_sock(sk);
424
425 pr_debug("Returning sk state %d\n", sk->sk_state);
426
427 sk_acceptq_removed(parent);
428
429 return sk;
430 }
431
432 release_sock(sk);
433 }
434
435 return NULL;
436}
437
438static int llcp_sock_accept(struct socket *sock, struct socket *newsock,
439 int flags, bool kern)
440{
441 DECLARE_WAITQUEUE(wait, current);
442 struct sock *sk = sock->sk, *new_sk;
443 long timeo;
444 int ret = 0;
445
446 pr_debug("parent %p\n", sk);
447
448 lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
449
450 if (sk->sk_state != LLCP_LISTEN) {
451 ret = -EBADFD;
452 goto error;
453 }
454
455 timeo = sock_rcvtimeo(sk, flags & O_NONBLOCK);
456
457 /* Wait for an incoming connection. */
458 add_wait_queue_exclusive(sk_sleep(sk), &wait);
459 while (!(new_sk = nfc_llcp_accept_dequeue(sk, newsock))) {
460 set_current_state(TASK_INTERRUPTIBLE);
461
462 if (!timeo) {
463 ret = -EAGAIN;
464 break;
465 }
466
467 if (signal_pending(current)) {
468 ret = sock_intr_errno(timeo);
469 break;
470 }
471
472 release_sock(sk);
473 timeo = schedule_timeout(timeo);
474 lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
475 }
476 __set_current_state(TASK_RUNNING);
477 remove_wait_queue(sk_sleep(sk), &wait);
478
479 if (ret)
480 goto error;
481
482 newsock->state = SS_CONNECTED;
483
484 pr_debug("new socket %p\n", new_sk);
485
486error:
487 release_sock(sk);
488
489 return ret;
490}
491
492static int llcp_sock_getname(struct socket *sock, struct sockaddr *uaddr,
493 int peer)
494{
495 struct sock *sk = sock->sk;
496 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
497 DECLARE_SOCKADDR(struct sockaddr_nfc_llcp *, llcp_addr, uaddr);
498
499 if (llcp_sock == NULL || llcp_sock->dev == NULL)
500 return -EBADFD;
501
502 pr_debug("%p %d %d %d\n", sk, llcp_sock->target_idx,
503 llcp_sock->dsap, llcp_sock->ssap);
504
505 memset(llcp_addr, 0, sizeof(*llcp_addr));
506
507 lock_sock(sk);
508 if (!llcp_sock->dev) {
509 release_sock(sk);
510 return -EBADFD;
511 }
512 llcp_addr->sa_family = AF_NFC;
513 llcp_addr->dev_idx = llcp_sock->dev->idx;
514 llcp_addr->target_idx = llcp_sock->target_idx;
515 llcp_addr->nfc_protocol = llcp_sock->nfc_protocol;
516 llcp_addr->dsap = llcp_sock->dsap;
517 llcp_addr->ssap = llcp_sock->ssap;
518 llcp_addr->service_name_len = llcp_sock->service_name_len;
519 memcpy(llcp_addr->service_name, llcp_sock->service_name,
520 llcp_addr->service_name_len);
521 release_sock(sk);
522
523 return sizeof(struct sockaddr_nfc_llcp);
524}
525
526static inline __poll_t llcp_accept_poll(struct sock *parent)
527{
528 struct nfc_llcp_sock *llcp_sock, *parent_sock;
529 struct sock *sk;
530
531 parent_sock = nfc_llcp_sock(parent);
532
533 list_for_each_entry(llcp_sock, &parent_sock->accept_queue,
534 accept_queue) {
535 sk = &llcp_sock->sk;
536
537 if (sk->sk_state == LLCP_CONNECTED)
538 return EPOLLIN | EPOLLRDNORM;
539 }
540
541 return 0;
542}
543
544static __poll_t llcp_sock_poll(struct file *file, struct socket *sock,
545 poll_table *wait)
546{
547 struct sock *sk = sock->sk;
548 __poll_t mask = 0;
549
550 pr_debug("%p\n", sk);
551
552 sock_poll_wait(file, sock, wait);
553
554 if (sk->sk_state == LLCP_LISTEN)
555 return llcp_accept_poll(sk);
556
557 if (sk->sk_err || !skb_queue_empty_lockless(&sk->sk_error_queue))
558 mask |= EPOLLERR |
559 (sock_flag(sk, SOCK_SELECT_ERR_QUEUE) ? EPOLLPRI : 0);
560
561 if (!skb_queue_empty_lockless(&sk->sk_receive_queue))
562 mask |= EPOLLIN | EPOLLRDNORM;
563
564 if (sk->sk_state == LLCP_CLOSED)
565 mask |= EPOLLHUP;
566
567 if (sk->sk_shutdown & RCV_SHUTDOWN)
568 mask |= EPOLLRDHUP | EPOLLIN | EPOLLRDNORM;
569
570 if (sk->sk_shutdown == SHUTDOWN_MASK)
571 mask |= EPOLLHUP;
572
573 if (sock_writeable(sk) && sk->sk_state == LLCP_CONNECTED)
574 mask |= EPOLLOUT | EPOLLWRNORM | EPOLLWRBAND;
575 else
576 sk_set_bit(SOCKWQ_ASYNC_NOSPACE, sk);
577
578 pr_debug("mask 0x%x\n", mask);
579
580 return mask;
581}
582
583static int llcp_sock_release(struct socket *sock)
584{
585 struct sock *sk = sock->sk;
586 struct nfc_llcp_local *local;
587 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
588 int err = 0;
589
590 if (!sk)
591 return 0;
592
593 pr_debug("%p\n", sk);
594
595 local = llcp_sock->local;
596 if (local == NULL) {
597 err = -ENODEV;
598 goto out;
599 }
600
601 lock_sock(sk);
602
603 /* Send a DISC */
604 if (sk->sk_state == LLCP_CONNECTED)
605 nfc_llcp_send_disconnect(llcp_sock);
606
607 if (sk->sk_state == LLCP_LISTEN) {
608 struct nfc_llcp_sock *lsk, *n;
609 struct sock *accept_sk;
610
611 list_for_each_entry_safe(lsk, n, &llcp_sock->accept_queue,
612 accept_queue) {
613 accept_sk = &lsk->sk;
614 lock_sock(accept_sk);
615
616 nfc_llcp_send_disconnect(lsk);
617 nfc_llcp_accept_unlink(accept_sk);
618
619 release_sock(accept_sk);
620 }
621 }
622
623 if (llcp_sock->reserved_ssap < LLCP_SAP_MAX)
624 nfc_llcp_put_ssap(llcp_sock->local, llcp_sock->ssap);
625
626 release_sock(sk);
627
628 /* Keep this sock alive and therefore do not remove it from the sockets
629 * list until the DISC PDU has been actually sent. Otherwise we would
630 * reply with DM PDUs before sending the DISC one.
631 */
632 if (sk->sk_state == LLCP_DISCONNECTING)
633 return err;
634
635 if (sock->type == SOCK_RAW)
636 nfc_llcp_sock_unlink(&local->raw_sockets, sk);
637 else
638 nfc_llcp_sock_unlink(&local->sockets, sk);
639
640out:
641 sock_orphan(sk);
642 sock_put(sk);
643
644 return err;
645}
646
647static int llcp_sock_connect(struct socket *sock, struct sockaddr *_addr,
648 int len, int flags)
649{
650 struct sock *sk = sock->sk;
651 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
652 struct sockaddr_nfc_llcp *addr = (struct sockaddr_nfc_llcp *)_addr;
653 struct nfc_dev *dev;
654 struct nfc_llcp_local *local;
655 int ret = 0;
656
657 pr_debug("sock %p sk %p flags 0x%x\n", sock, sk, flags);
658
659 if (!addr || len < sizeof(*addr) || addr->sa_family != AF_NFC)
660 return -EINVAL;
661
662 if (addr->service_name_len == 0 && addr->dsap == 0)
663 return -EINVAL;
664
665 pr_debug("addr dev_idx=%u target_idx=%u protocol=%u\n", addr->dev_idx,
666 addr->target_idx, addr->nfc_protocol);
667
668 lock_sock(sk);
669
670 if (sk->sk_state == LLCP_CONNECTED) {
671 ret = -EISCONN;
672 goto error;
673 }
674
675 dev = nfc_get_device(addr->dev_idx);
676 if (dev == NULL) {
677 ret = -ENODEV;
678 goto error;
679 }
680
681 local = nfc_llcp_find_local(dev);
682 if (local == NULL) {
683 ret = -ENODEV;
684 goto put_dev;
685 }
686
687 device_lock(&dev->dev);
688 if (dev->dep_link_up == false) {
689 ret = -ENOLINK;
690 device_unlock(&dev->dev);
691 goto put_dev;
692 }
693 device_unlock(&dev->dev);
694
695 if (local->rf_mode == NFC_RF_INITIATOR &&
696 addr->target_idx != local->target_idx) {
697 ret = -ENOLINK;
698 goto put_dev;
699 }
700
701 llcp_sock->dev = dev;
702 llcp_sock->local = nfc_llcp_local_get(local);
703 llcp_sock->ssap = nfc_llcp_get_local_ssap(local);
704 if (llcp_sock->ssap == LLCP_SAP_MAX) {
705 ret = -ENOMEM;
706 goto put_dev;
707 }
708
709 llcp_sock->reserved_ssap = llcp_sock->ssap;
710
711 if (addr->service_name_len == 0)
712 llcp_sock->dsap = addr->dsap;
713 else
714 llcp_sock->dsap = LLCP_SAP_SDP;
715 llcp_sock->nfc_protocol = addr->nfc_protocol;
716 llcp_sock->service_name_len = min_t(unsigned int,
717 addr->service_name_len,
718 NFC_LLCP_MAX_SERVICE_NAME);
719 llcp_sock->service_name = kmemdup(addr->service_name,
720 llcp_sock->service_name_len,
721 GFP_KERNEL);
722 if (!llcp_sock->service_name) {
723 ret = -ENOMEM;
724 goto sock_llcp_release;
725 }
726
727 nfc_llcp_sock_link(&local->connecting_sockets, sk);
728
729 ret = nfc_llcp_send_connect(llcp_sock);
730 if (ret)
731 goto sock_unlink;
732
733 sk->sk_state = LLCP_CONNECTING;
734
735 ret = sock_wait_state(sk, LLCP_CONNECTED,
736 sock_sndtimeo(sk, flags & O_NONBLOCK));
737 if (ret && ret != -EINPROGRESS)
738 goto sock_unlink;
739
740 release_sock(sk);
741
742 return ret;
743
744sock_unlink:
745 nfc_llcp_sock_unlink(&local->connecting_sockets, sk);
746
747sock_llcp_release:
748 nfc_llcp_put_ssap(local, llcp_sock->ssap);
749
750put_dev:
751 nfc_put_device(dev);
752
753error:
754 release_sock(sk);
755 return ret;
756}
757
758static int llcp_sock_sendmsg(struct socket *sock, struct msghdr *msg,
759 size_t len)
760{
761 struct sock *sk = sock->sk;
762 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
763 int ret;
764
765 pr_debug("sock %p sk %p", sock, sk);
766
767 ret = sock_error(sk);
768 if (ret)
769 return ret;
770
771 if (msg->msg_flags & MSG_OOB)
772 return -EOPNOTSUPP;
773
774 lock_sock(sk);
775
776 if (sk->sk_type == SOCK_DGRAM) {
777 DECLARE_SOCKADDR(struct sockaddr_nfc_llcp *, addr,
778 msg->msg_name);
779
780 if (msg->msg_namelen < sizeof(*addr)) {
781 release_sock(sk);
782 return -EINVAL;
783 }
784
785 release_sock(sk);
786
787 return nfc_llcp_send_ui_frame(llcp_sock, addr->dsap, addr->ssap,
788 msg, len);
789 }
790
791 if (sk->sk_state != LLCP_CONNECTED) {
792 release_sock(sk);
793 return -ENOTCONN;
794 }
795
796 release_sock(sk);
797
798 return nfc_llcp_send_i_frame(llcp_sock, msg, len);
799}
800
801static int llcp_sock_recvmsg(struct socket *sock, struct msghdr *msg,
802 size_t len, int flags)
803{
804 int noblock = flags & MSG_DONTWAIT;
805 struct sock *sk = sock->sk;
806 unsigned int copied, rlen;
807 struct sk_buff *skb, *cskb;
808 int err = 0;
809
810 pr_debug("%p %zu\n", sk, len);
811
812 lock_sock(sk);
813
814 if (sk->sk_state == LLCP_CLOSED &&
815 skb_queue_empty(&sk->sk_receive_queue)) {
816 release_sock(sk);
817 return 0;
818 }
819
820 release_sock(sk);
821
822 if (flags & (MSG_OOB))
823 return -EOPNOTSUPP;
824
825 skb = skb_recv_datagram(sk, flags, noblock, &err);
826 if (!skb) {
827 pr_err("Recv datagram failed state %d %d %d",
828 sk->sk_state, err, sock_error(sk));
829
830 if (sk->sk_shutdown & RCV_SHUTDOWN)
831 return 0;
832
833 return err;
834 }
835
836 rlen = skb->len; /* real length of skb */
837 copied = min_t(unsigned int, rlen, len);
838
839 cskb = skb;
840 if (skb_copy_datagram_msg(cskb, 0, msg, copied)) {
841 if (!(flags & MSG_PEEK))
842 skb_queue_head(&sk->sk_receive_queue, skb);
843 return -EFAULT;
844 }
845
846 sock_recv_timestamp(msg, sk, skb);
847
848 if (sk->sk_type == SOCK_DGRAM && msg->msg_name) {
849 struct nfc_llcp_ui_cb *ui_cb = nfc_llcp_ui_skb_cb(skb);
850 DECLARE_SOCKADDR(struct sockaddr_nfc_llcp *, sockaddr,
851 msg->msg_name);
852
853 msg->msg_namelen = sizeof(struct sockaddr_nfc_llcp);
854
855 pr_debug("Datagram socket %d %d\n", ui_cb->dsap, ui_cb->ssap);
856
857 memset(sockaddr, 0, sizeof(*sockaddr));
858 sockaddr->sa_family = AF_NFC;
859 sockaddr->nfc_protocol = NFC_PROTO_NFC_DEP;
860 sockaddr->dsap = ui_cb->dsap;
861 sockaddr->ssap = ui_cb->ssap;
862 }
863
864 /* Mark read part of skb as used */
865 if (!(flags & MSG_PEEK)) {
866
867 /* SOCK_STREAM: re-queue skb if it contains unreceived data */
868 if (sk->sk_type == SOCK_STREAM ||
869 sk->sk_type == SOCK_DGRAM ||
870 sk->sk_type == SOCK_RAW) {
871 skb_pull(skb, copied);
872 if (skb->len) {
873 skb_queue_head(&sk->sk_receive_queue, skb);
874 goto done;
875 }
876 }
877
878 kfree_skb(skb);
879 }
880
881 /* XXX Queue backlogged skbs */
882
883done:
884 /* SOCK_SEQPACKET: return real length if MSG_TRUNC is set */
885 if (sk->sk_type == SOCK_SEQPACKET && (flags & MSG_TRUNC))
886 copied = rlen;
887
888 return copied;
889}
890
891static const struct proto_ops llcp_sock_ops = {
892 .family = PF_NFC,
893 .owner = THIS_MODULE,
894 .bind = llcp_sock_bind,
895 .connect = llcp_sock_connect,
896 .release = llcp_sock_release,
897 .socketpair = sock_no_socketpair,
898 .accept = llcp_sock_accept,
899 .getname = llcp_sock_getname,
900 .poll = llcp_sock_poll,
901 .ioctl = sock_no_ioctl,
902 .listen = llcp_sock_listen,
903 .shutdown = sock_no_shutdown,
904 .setsockopt = nfc_llcp_setsockopt,
905 .getsockopt = nfc_llcp_getsockopt,
906 .sendmsg = llcp_sock_sendmsg,
907 .recvmsg = llcp_sock_recvmsg,
908 .mmap = sock_no_mmap,
909};
910
911static const struct proto_ops llcp_rawsock_ops = {
912 .family = PF_NFC,
913 .owner = THIS_MODULE,
914 .bind = llcp_raw_sock_bind,
915 .connect = sock_no_connect,
916 .release = llcp_sock_release,
917 .socketpair = sock_no_socketpair,
918 .accept = sock_no_accept,
919 .getname = llcp_sock_getname,
920 .poll = llcp_sock_poll,
921 .ioctl = sock_no_ioctl,
922 .listen = sock_no_listen,
923 .shutdown = sock_no_shutdown,
924 .setsockopt = sock_no_setsockopt,
925 .getsockopt = sock_no_getsockopt,
926 .sendmsg = sock_no_sendmsg,
927 .recvmsg = llcp_sock_recvmsg,
928 .mmap = sock_no_mmap,
929};
930
931static void llcp_sock_destruct(struct sock *sk)
932{
933 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
934
935 pr_debug("%p\n", sk);
936
937 if (sk->sk_state == LLCP_CONNECTED)
938 nfc_put_device(llcp_sock->dev);
939
940 skb_queue_purge(&sk->sk_receive_queue);
941
942 nfc_llcp_sock_free(llcp_sock);
943
944 if (!sock_flag(sk, SOCK_DEAD)) {
945 pr_err("Freeing alive NFC LLCP socket %p\n", sk);
946 return;
947 }
948}
949
950struct sock *nfc_llcp_sock_alloc(struct socket *sock, int type, gfp_t gfp, int kern)
951{
952 struct sock *sk;
953 struct nfc_llcp_sock *llcp_sock;
954
955 sk = sk_alloc(&init_net, PF_NFC, gfp, &llcp_sock_proto, kern);
956 if (!sk)
957 return NULL;
958
959 llcp_sock = nfc_llcp_sock(sk);
960
961 sock_init_data(sock, sk);
962 sk->sk_state = LLCP_CLOSED;
963 sk->sk_protocol = NFC_SOCKPROTO_LLCP;
964 sk->sk_type = type;
965 sk->sk_destruct = llcp_sock_destruct;
966
967 llcp_sock->ssap = 0;
968 llcp_sock->dsap = LLCP_SAP_SDP;
969 llcp_sock->rw = LLCP_MAX_RW + 1;
970 llcp_sock->miux = cpu_to_be16(LLCP_MAX_MIUX + 1);
971 llcp_sock->send_n = llcp_sock->send_ack_n = 0;
972 llcp_sock->recv_n = llcp_sock->recv_ack_n = 0;
973 llcp_sock->remote_ready = 1;
974 llcp_sock->reserved_ssap = LLCP_SAP_MAX;
975 nfc_llcp_socket_remote_param_init(llcp_sock);
976 skb_queue_head_init(&llcp_sock->tx_queue);
977 skb_queue_head_init(&llcp_sock->tx_pending_queue);
978 INIT_LIST_HEAD(&llcp_sock->accept_queue);
979
980 if (sock != NULL)
981 sock->state = SS_UNCONNECTED;
982
983 return sk;
984}
985
986void nfc_llcp_sock_free(struct nfc_llcp_sock *sock)
987{
988 kfree(sock->service_name);
989
990 skb_queue_purge(&sock->tx_queue);
991 skb_queue_purge(&sock->tx_pending_queue);
992
993 list_del_init(&sock->accept_queue);
994
995 sock->parent = NULL;
996
997 nfc_llcp_local_put(sock->local);
998}
999
1000static int llcp_sock_create(struct net *net, struct socket *sock,
1001 const struct nfc_protocol *nfc_proto, int kern)
1002{
1003 struct sock *sk;
1004
1005 pr_debug("%p\n", sock);
1006
1007 if (sock->type != SOCK_STREAM &&
1008 sock->type != SOCK_DGRAM &&
1009 sock->type != SOCK_RAW)
1010 return -ESOCKTNOSUPPORT;
1011
1012 if (sock->type == SOCK_RAW) {
1013 if (!capable(CAP_NET_RAW))
1014 return -EPERM;
1015 sock->ops = &llcp_rawsock_ops;
1016 } else {
1017 sock->ops = &llcp_sock_ops;
1018 }
1019
1020 sk = nfc_llcp_sock_alloc(sock, sock->type, GFP_ATOMIC, kern);
1021 if (sk == NULL)
1022 return -ENOMEM;
1023
1024 return 0;
1025}
1026
1027static const struct nfc_protocol llcp_nfc_proto = {
1028 .id = NFC_SOCKPROTO_LLCP,
1029 .proto = &llcp_sock_proto,
1030 .owner = THIS_MODULE,
1031 .create = llcp_sock_create
1032};
1033
1034int __init nfc_llcp_sock_init(void)
1035{
1036 return nfc_proto_register(&llcp_nfc_proto);
1037}
1038
1039void nfc_llcp_sock_exit(void)
1040{
1041 nfc_proto_unregister(&llcp_nfc_proto);
1042}
1/*
2 * Copyright (C) 2011 Intel Corporation. All rights reserved.
3 *
4 * This program is free software; you can redistribute it and/or modify
5 * it under the terms of the GNU General Public License as published by
6 * the Free Software Foundation; either version 2 of the License, or
7 * (at your option) any later version.
8 *
9 * This program is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
13 *
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, see <http://www.gnu.org/licenses/>.
16 */
17
18#define pr_fmt(fmt) "llcp: %s: " fmt, __func__
19
20#include <linux/init.h>
21#include <linux/kernel.h>
22#include <linux/module.h>
23#include <linux/nfc.h>
24
25#include "nfc.h"
26#include "llcp.h"
27
28static int sock_wait_state(struct sock *sk, int state, unsigned long timeo)
29{
30 DECLARE_WAITQUEUE(wait, current);
31 int err = 0;
32
33 pr_debug("sk %p", sk);
34
35 add_wait_queue(sk_sleep(sk), &wait);
36 set_current_state(TASK_INTERRUPTIBLE);
37
38 while (sk->sk_state != state) {
39 if (!timeo) {
40 err = -EINPROGRESS;
41 break;
42 }
43
44 if (signal_pending(current)) {
45 err = sock_intr_errno(timeo);
46 break;
47 }
48
49 release_sock(sk);
50 timeo = schedule_timeout(timeo);
51 lock_sock(sk);
52 set_current_state(TASK_INTERRUPTIBLE);
53
54 err = sock_error(sk);
55 if (err)
56 break;
57 }
58
59 __set_current_state(TASK_RUNNING);
60 remove_wait_queue(sk_sleep(sk), &wait);
61 return err;
62}
63
64static struct proto llcp_sock_proto = {
65 .name = "NFC_LLCP",
66 .owner = THIS_MODULE,
67 .obj_size = sizeof(struct nfc_llcp_sock),
68};
69
70static int llcp_sock_bind(struct socket *sock, struct sockaddr *addr, int alen)
71{
72 struct sock *sk = sock->sk;
73 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
74 struct nfc_llcp_local *local;
75 struct nfc_dev *dev;
76 struct sockaddr_nfc_llcp llcp_addr;
77 int len, ret = 0;
78
79 if (!addr || addr->sa_family != AF_NFC)
80 return -EINVAL;
81
82 pr_debug("sk %p addr %p family %d\n", sk, addr, addr->sa_family);
83
84 memset(&llcp_addr, 0, sizeof(llcp_addr));
85 len = min_t(unsigned int, sizeof(llcp_addr), alen);
86 memcpy(&llcp_addr, addr, len);
87
88 /* This is going to be a listening socket, dsap must be 0 */
89 if (llcp_addr.dsap != 0)
90 return -EINVAL;
91
92 lock_sock(sk);
93
94 if (sk->sk_state != LLCP_CLOSED) {
95 ret = -EBADFD;
96 goto error;
97 }
98
99 dev = nfc_get_device(llcp_addr.dev_idx);
100 if (dev == NULL) {
101 ret = -ENODEV;
102 goto error;
103 }
104
105 local = nfc_llcp_find_local(dev);
106 if (local == NULL) {
107 ret = -ENODEV;
108 goto put_dev;
109 }
110
111 llcp_sock->dev = dev;
112 llcp_sock->local = nfc_llcp_local_get(local);
113 llcp_sock->nfc_protocol = llcp_addr.nfc_protocol;
114 llcp_sock->service_name_len = min_t(unsigned int,
115 llcp_addr.service_name_len,
116 NFC_LLCP_MAX_SERVICE_NAME);
117 llcp_sock->service_name = kmemdup(llcp_addr.service_name,
118 llcp_sock->service_name_len,
119 GFP_KERNEL);
120
121 llcp_sock->ssap = nfc_llcp_get_sdp_ssap(local, llcp_sock);
122 if (llcp_sock->ssap == LLCP_SAP_MAX) {
123 ret = -EADDRINUSE;
124 goto put_dev;
125 }
126
127 llcp_sock->reserved_ssap = llcp_sock->ssap;
128
129 nfc_llcp_sock_link(&local->sockets, sk);
130
131 pr_debug("Socket bound to SAP %d\n", llcp_sock->ssap);
132
133 sk->sk_state = LLCP_BOUND;
134
135put_dev:
136 nfc_put_device(dev);
137
138error:
139 release_sock(sk);
140 return ret;
141}
142
143static int llcp_raw_sock_bind(struct socket *sock, struct sockaddr *addr,
144 int alen)
145{
146 struct sock *sk = sock->sk;
147 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
148 struct nfc_llcp_local *local;
149 struct nfc_dev *dev;
150 struct sockaddr_nfc_llcp llcp_addr;
151 int len, ret = 0;
152
153 if (!addr || addr->sa_family != AF_NFC)
154 return -EINVAL;
155
156 pr_debug("sk %p addr %p family %d\n", sk, addr, addr->sa_family);
157
158 memset(&llcp_addr, 0, sizeof(llcp_addr));
159 len = min_t(unsigned int, sizeof(llcp_addr), alen);
160 memcpy(&llcp_addr, addr, len);
161
162 lock_sock(sk);
163
164 if (sk->sk_state != LLCP_CLOSED) {
165 ret = -EBADFD;
166 goto error;
167 }
168
169 dev = nfc_get_device(llcp_addr.dev_idx);
170 if (dev == NULL) {
171 ret = -ENODEV;
172 goto error;
173 }
174
175 local = nfc_llcp_find_local(dev);
176 if (local == NULL) {
177 ret = -ENODEV;
178 goto put_dev;
179 }
180
181 llcp_sock->dev = dev;
182 llcp_sock->local = nfc_llcp_local_get(local);
183 llcp_sock->nfc_protocol = llcp_addr.nfc_protocol;
184
185 nfc_llcp_sock_link(&local->raw_sockets, sk);
186
187 sk->sk_state = LLCP_BOUND;
188
189put_dev:
190 nfc_put_device(dev);
191
192error:
193 release_sock(sk);
194 return ret;
195}
196
197static int llcp_sock_listen(struct socket *sock, int backlog)
198{
199 struct sock *sk = sock->sk;
200 int ret = 0;
201
202 pr_debug("sk %p backlog %d\n", sk, backlog);
203
204 lock_sock(sk);
205
206 if ((sock->type != SOCK_SEQPACKET && sock->type != SOCK_STREAM) ||
207 sk->sk_state != LLCP_BOUND) {
208 ret = -EBADFD;
209 goto error;
210 }
211
212 sk->sk_max_ack_backlog = backlog;
213 sk->sk_ack_backlog = 0;
214
215 pr_debug("Socket listening\n");
216 sk->sk_state = LLCP_LISTEN;
217
218error:
219 release_sock(sk);
220
221 return ret;
222}
223
224static int nfc_llcp_setsockopt(struct socket *sock, int level, int optname,
225 char __user *optval, unsigned int optlen)
226{
227 struct sock *sk = sock->sk;
228 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
229 u32 opt;
230 int err = 0;
231
232 pr_debug("%p optname %d\n", sk, optname);
233
234 if (level != SOL_NFC)
235 return -ENOPROTOOPT;
236
237 lock_sock(sk);
238
239 switch (optname) {
240 case NFC_LLCP_RW:
241 if (sk->sk_state == LLCP_CONNECTED ||
242 sk->sk_state == LLCP_BOUND ||
243 sk->sk_state == LLCP_LISTEN) {
244 err = -EINVAL;
245 break;
246 }
247
248 if (get_user(opt, (u32 __user *) optval)) {
249 err = -EFAULT;
250 break;
251 }
252
253 if (opt > LLCP_MAX_RW) {
254 err = -EINVAL;
255 break;
256 }
257
258 llcp_sock->rw = (u8) opt;
259
260 break;
261
262 case NFC_LLCP_MIUX:
263 if (sk->sk_state == LLCP_CONNECTED ||
264 sk->sk_state == LLCP_BOUND ||
265 sk->sk_state == LLCP_LISTEN) {
266 err = -EINVAL;
267 break;
268 }
269
270 if (get_user(opt, (u32 __user *) optval)) {
271 err = -EFAULT;
272 break;
273 }
274
275 if (opt > LLCP_MAX_MIUX) {
276 err = -EINVAL;
277 break;
278 }
279
280 llcp_sock->miux = cpu_to_be16((u16) opt);
281
282 break;
283
284 default:
285 err = -ENOPROTOOPT;
286 break;
287 }
288
289 release_sock(sk);
290
291 pr_debug("%p rw %d miux %d\n", llcp_sock,
292 llcp_sock->rw, llcp_sock->miux);
293
294 return err;
295}
296
297static int nfc_llcp_getsockopt(struct socket *sock, int level, int optname,
298 char __user *optval, int __user *optlen)
299{
300 struct nfc_llcp_local *local;
301 struct sock *sk = sock->sk;
302 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
303 int len, err = 0;
304 u16 miux, remote_miu;
305 u8 rw;
306
307 pr_debug("%p optname %d\n", sk, optname);
308
309 if (level != SOL_NFC)
310 return -ENOPROTOOPT;
311
312 if (get_user(len, optlen))
313 return -EFAULT;
314
315 local = llcp_sock->local;
316 if (!local)
317 return -ENODEV;
318
319 len = min_t(u32, len, sizeof(u32));
320
321 lock_sock(sk);
322
323 switch (optname) {
324 case NFC_LLCP_RW:
325 rw = llcp_sock->rw > LLCP_MAX_RW ? local->rw : llcp_sock->rw;
326 if (put_user(rw, (u32 __user *) optval))
327 err = -EFAULT;
328
329 break;
330
331 case NFC_LLCP_MIUX:
332 miux = be16_to_cpu(llcp_sock->miux) > LLCP_MAX_MIUX ?
333 be16_to_cpu(local->miux) : be16_to_cpu(llcp_sock->miux);
334
335 if (put_user(miux, (u32 __user *) optval))
336 err = -EFAULT;
337
338 break;
339
340 case NFC_LLCP_REMOTE_MIU:
341 remote_miu = llcp_sock->remote_miu > LLCP_MAX_MIU ?
342 local->remote_miu : llcp_sock->remote_miu;
343
344 if (put_user(remote_miu, (u32 __user *) optval))
345 err = -EFAULT;
346
347 break;
348
349 case NFC_LLCP_REMOTE_LTO:
350 if (put_user(local->remote_lto / 10, (u32 __user *) optval))
351 err = -EFAULT;
352
353 break;
354
355 case NFC_LLCP_REMOTE_RW:
356 if (put_user(llcp_sock->remote_rw, (u32 __user *) optval))
357 err = -EFAULT;
358
359 break;
360
361 default:
362 err = -ENOPROTOOPT;
363 break;
364 }
365
366 release_sock(sk);
367
368 if (put_user(len, optlen))
369 return -EFAULT;
370
371 return err;
372}
373
374void nfc_llcp_accept_unlink(struct sock *sk)
375{
376 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
377
378 pr_debug("state %d\n", sk->sk_state);
379
380 list_del_init(&llcp_sock->accept_queue);
381 sk_acceptq_removed(llcp_sock->parent);
382 llcp_sock->parent = NULL;
383
384 sock_put(sk);
385}
386
387void nfc_llcp_accept_enqueue(struct sock *parent, struct sock *sk)
388{
389 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
390 struct nfc_llcp_sock *llcp_sock_parent = nfc_llcp_sock(parent);
391
392 /* Lock will be free from unlink */
393 sock_hold(sk);
394
395 list_add_tail(&llcp_sock->accept_queue,
396 &llcp_sock_parent->accept_queue);
397 llcp_sock->parent = parent;
398 sk_acceptq_added(parent);
399}
400
401struct sock *nfc_llcp_accept_dequeue(struct sock *parent,
402 struct socket *newsock)
403{
404 struct nfc_llcp_sock *lsk, *n, *llcp_parent;
405 struct sock *sk;
406
407 llcp_parent = nfc_llcp_sock(parent);
408
409 list_for_each_entry_safe(lsk, n, &llcp_parent->accept_queue,
410 accept_queue) {
411 sk = &lsk->sk;
412 lock_sock(sk);
413
414 if (sk->sk_state == LLCP_CLOSED) {
415 release_sock(sk);
416 nfc_llcp_accept_unlink(sk);
417 continue;
418 }
419
420 if (sk->sk_state == LLCP_CONNECTED || !newsock) {
421 list_del_init(&lsk->accept_queue);
422 sock_put(sk);
423
424 if (newsock)
425 sock_graft(sk, newsock);
426
427 release_sock(sk);
428
429 pr_debug("Returning sk state %d\n", sk->sk_state);
430
431 sk_acceptq_removed(parent);
432
433 return sk;
434 }
435
436 release_sock(sk);
437 }
438
439 return NULL;
440}
441
442static int llcp_sock_accept(struct socket *sock, struct socket *newsock,
443 int flags)
444{
445 DECLARE_WAITQUEUE(wait, current);
446 struct sock *sk = sock->sk, *new_sk;
447 long timeo;
448 int ret = 0;
449
450 pr_debug("parent %p\n", sk);
451
452 lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
453
454 if (sk->sk_state != LLCP_LISTEN) {
455 ret = -EBADFD;
456 goto error;
457 }
458
459 timeo = sock_rcvtimeo(sk, flags & O_NONBLOCK);
460
461 /* Wait for an incoming connection. */
462 add_wait_queue_exclusive(sk_sleep(sk), &wait);
463 while (!(new_sk = nfc_llcp_accept_dequeue(sk, newsock))) {
464 set_current_state(TASK_INTERRUPTIBLE);
465
466 if (!timeo) {
467 ret = -EAGAIN;
468 break;
469 }
470
471 if (signal_pending(current)) {
472 ret = sock_intr_errno(timeo);
473 break;
474 }
475
476 release_sock(sk);
477 timeo = schedule_timeout(timeo);
478 lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
479 }
480 __set_current_state(TASK_RUNNING);
481 remove_wait_queue(sk_sleep(sk), &wait);
482
483 if (ret)
484 goto error;
485
486 newsock->state = SS_CONNECTED;
487
488 pr_debug("new socket %p\n", new_sk);
489
490error:
491 release_sock(sk);
492
493 return ret;
494}
495
496static int llcp_sock_getname(struct socket *sock, struct sockaddr *uaddr,
497 int *len, int peer)
498{
499 struct sock *sk = sock->sk;
500 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
501 DECLARE_SOCKADDR(struct sockaddr_nfc_llcp *, llcp_addr, uaddr);
502
503 if (llcp_sock == NULL || llcp_sock->dev == NULL)
504 return -EBADFD;
505
506 pr_debug("%p %d %d %d\n", sk, llcp_sock->target_idx,
507 llcp_sock->dsap, llcp_sock->ssap);
508
509 memset(llcp_addr, 0, sizeof(*llcp_addr));
510 *len = sizeof(struct sockaddr_nfc_llcp);
511
512 lock_sock(sk);
513 if (!llcp_sock->dev) {
514 release_sock(sk);
515 return -EBADFD;
516 }
517 llcp_addr->sa_family = AF_NFC;
518 llcp_addr->dev_idx = llcp_sock->dev->idx;
519 llcp_addr->target_idx = llcp_sock->target_idx;
520 llcp_addr->nfc_protocol = llcp_sock->nfc_protocol;
521 llcp_addr->dsap = llcp_sock->dsap;
522 llcp_addr->ssap = llcp_sock->ssap;
523 llcp_addr->service_name_len = llcp_sock->service_name_len;
524 memcpy(llcp_addr->service_name, llcp_sock->service_name,
525 llcp_addr->service_name_len);
526 release_sock(sk);
527
528 return 0;
529}
530
531static inline unsigned int llcp_accept_poll(struct sock *parent)
532{
533 struct nfc_llcp_sock *llcp_sock, *parent_sock;
534 struct sock *sk;
535
536 parent_sock = nfc_llcp_sock(parent);
537
538 list_for_each_entry(llcp_sock, &parent_sock->accept_queue,
539 accept_queue) {
540 sk = &llcp_sock->sk;
541
542 if (sk->sk_state == LLCP_CONNECTED)
543 return POLLIN | POLLRDNORM;
544 }
545
546 return 0;
547}
548
549static unsigned int llcp_sock_poll(struct file *file, struct socket *sock,
550 poll_table *wait)
551{
552 struct sock *sk = sock->sk;
553 unsigned int mask = 0;
554
555 pr_debug("%p\n", sk);
556
557 sock_poll_wait(file, sk_sleep(sk), wait);
558
559 if (sk->sk_state == LLCP_LISTEN)
560 return llcp_accept_poll(sk);
561
562 if (sk->sk_err || !skb_queue_empty(&sk->sk_error_queue))
563 mask |= POLLERR |
564 (sock_flag(sk, SOCK_SELECT_ERR_QUEUE) ? POLLPRI : 0);
565
566 if (!skb_queue_empty(&sk->sk_receive_queue))
567 mask |= POLLIN | POLLRDNORM;
568
569 if (sk->sk_state == LLCP_CLOSED)
570 mask |= POLLHUP;
571
572 if (sk->sk_shutdown & RCV_SHUTDOWN)
573 mask |= POLLRDHUP | POLLIN | POLLRDNORM;
574
575 if (sk->sk_shutdown == SHUTDOWN_MASK)
576 mask |= POLLHUP;
577
578 if (sock_writeable(sk) && sk->sk_state == LLCP_CONNECTED)
579 mask |= POLLOUT | POLLWRNORM | POLLWRBAND;
580 else
581 sk_set_bit(SOCKWQ_ASYNC_NOSPACE, sk);
582
583 pr_debug("mask 0x%x\n", mask);
584
585 return mask;
586}
587
588static int llcp_sock_release(struct socket *sock)
589{
590 struct sock *sk = sock->sk;
591 struct nfc_llcp_local *local;
592 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
593 int err = 0;
594
595 if (!sk)
596 return 0;
597
598 pr_debug("%p\n", sk);
599
600 local = llcp_sock->local;
601 if (local == NULL) {
602 err = -ENODEV;
603 goto out;
604 }
605
606 lock_sock(sk);
607
608 /* Send a DISC */
609 if (sk->sk_state == LLCP_CONNECTED)
610 nfc_llcp_send_disconnect(llcp_sock);
611
612 if (sk->sk_state == LLCP_LISTEN) {
613 struct nfc_llcp_sock *lsk, *n;
614 struct sock *accept_sk;
615
616 list_for_each_entry_safe(lsk, n, &llcp_sock->accept_queue,
617 accept_queue) {
618 accept_sk = &lsk->sk;
619 lock_sock(accept_sk);
620
621 nfc_llcp_send_disconnect(lsk);
622 nfc_llcp_accept_unlink(accept_sk);
623
624 release_sock(accept_sk);
625 }
626 }
627
628 if (llcp_sock->reserved_ssap < LLCP_SAP_MAX)
629 nfc_llcp_put_ssap(llcp_sock->local, llcp_sock->ssap);
630
631 release_sock(sk);
632
633 /* Keep this sock alive and therefore do not remove it from the sockets
634 * list until the DISC PDU has been actually sent. Otherwise we would
635 * reply with DM PDUs before sending the DISC one.
636 */
637 if (sk->sk_state == LLCP_DISCONNECTING)
638 return err;
639
640 if (sock->type == SOCK_RAW)
641 nfc_llcp_sock_unlink(&local->raw_sockets, sk);
642 else
643 nfc_llcp_sock_unlink(&local->sockets, sk);
644
645out:
646 sock_orphan(sk);
647 sock_put(sk);
648
649 return err;
650}
651
652static int llcp_sock_connect(struct socket *sock, struct sockaddr *_addr,
653 int len, int flags)
654{
655 struct sock *sk = sock->sk;
656 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
657 struct sockaddr_nfc_llcp *addr = (struct sockaddr_nfc_llcp *)_addr;
658 struct nfc_dev *dev;
659 struct nfc_llcp_local *local;
660 int ret = 0;
661
662 pr_debug("sock %p sk %p flags 0x%x\n", sock, sk, flags);
663
664 if (!addr || len < sizeof(struct sockaddr_nfc) ||
665 addr->sa_family != AF_NFC)
666 return -EINVAL;
667
668 if (addr->service_name_len == 0 && addr->dsap == 0)
669 return -EINVAL;
670
671 pr_debug("addr dev_idx=%u target_idx=%u protocol=%u\n", addr->dev_idx,
672 addr->target_idx, addr->nfc_protocol);
673
674 lock_sock(sk);
675
676 if (sk->sk_state == LLCP_CONNECTED) {
677 ret = -EISCONN;
678 goto error;
679 }
680
681 dev = nfc_get_device(addr->dev_idx);
682 if (dev == NULL) {
683 ret = -ENODEV;
684 goto error;
685 }
686
687 local = nfc_llcp_find_local(dev);
688 if (local == NULL) {
689 ret = -ENODEV;
690 goto put_dev;
691 }
692
693 device_lock(&dev->dev);
694 if (dev->dep_link_up == false) {
695 ret = -ENOLINK;
696 device_unlock(&dev->dev);
697 goto put_dev;
698 }
699 device_unlock(&dev->dev);
700
701 if (local->rf_mode == NFC_RF_INITIATOR &&
702 addr->target_idx != local->target_idx) {
703 ret = -ENOLINK;
704 goto put_dev;
705 }
706
707 llcp_sock->dev = dev;
708 llcp_sock->local = nfc_llcp_local_get(local);
709 llcp_sock->ssap = nfc_llcp_get_local_ssap(local);
710 if (llcp_sock->ssap == LLCP_SAP_MAX) {
711 ret = -ENOMEM;
712 goto put_dev;
713 }
714
715 llcp_sock->reserved_ssap = llcp_sock->ssap;
716
717 if (addr->service_name_len == 0)
718 llcp_sock->dsap = addr->dsap;
719 else
720 llcp_sock->dsap = LLCP_SAP_SDP;
721 llcp_sock->nfc_protocol = addr->nfc_protocol;
722 llcp_sock->service_name_len = min_t(unsigned int,
723 addr->service_name_len,
724 NFC_LLCP_MAX_SERVICE_NAME);
725 llcp_sock->service_name = kmemdup(addr->service_name,
726 llcp_sock->service_name_len,
727 GFP_KERNEL);
728
729 nfc_llcp_sock_link(&local->connecting_sockets, sk);
730
731 ret = nfc_llcp_send_connect(llcp_sock);
732 if (ret)
733 goto sock_unlink;
734
735 sk->sk_state = LLCP_CONNECTING;
736
737 ret = sock_wait_state(sk, LLCP_CONNECTED,
738 sock_sndtimeo(sk, flags & O_NONBLOCK));
739 if (ret && ret != -EINPROGRESS)
740 goto sock_unlink;
741
742 release_sock(sk);
743
744 return ret;
745
746sock_unlink:
747 nfc_llcp_put_ssap(local, llcp_sock->ssap);
748
749 nfc_llcp_sock_unlink(&local->connecting_sockets, sk);
750
751put_dev:
752 nfc_put_device(dev);
753
754error:
755 release_sock(sk);
756 return ret;
757}
758
759static int llcp_sock_sendmsg(struct socket *sock, struct msghdr *msg,
760 size_t len)
761{
762 struct sock *sk = sock->sk;
763 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
764 int ret;
765
766 pr_debug("sock %p sk %p", sock, sk);
767
768 ret = sock_error(sk);
769 if (ret)
770 return ret;
771
772 if (msg->msg_flags & MSG_OOB)
773 return -EOPNOTSUPP;
774
775 lock_sock(sk);
776
777 if (sk->sk_type == SOCK_DGRAM) {
778 DECLARE_SOCKADDR(struct sockaddr_nfc_llcp *, addr,
779 msg->msg_name);
780
781 if (msg->msg_namelen < sizeof(*addr)) {
782 release_sock(sk);
783 return -EINVAL;
784 }
785
786 release_sock(sk);
787
788 return nfc_llcp_send_ui_frame(llcp_sock, addr->dsap, addr->ssap,
789 msg, len);
790 }
791
792 if (sk->sk_state != LLCP_CONNECTED) {
793 release_sock(sk);
794 return -ENOTCONN;
795 }
796
797 release_sock(sk);
798
799 return nfc_llcp_send_i_frame(llcp_sock, msg, len);
800}
801
802static int llcp_sock_recvmsg(struct socket *sock, struct msghdr *msg,
803 size_t len, int flags)
804{
805 int noblock = flags & MSG_DONTWAIT;
806 struct sock *sk = sock->sk;
807 unsigned int copied, rlen;
808 struct sk_buff *skb, *cskb;
809 int err = 0;
810
811 pr_debug("%p %zu\n", sk, len);
812
813 lock_sock(sk);
814
815 if (sk->sk_state == LLCP_CLOSED &&
816 skb_queue_empty(&sk->sk_receive_queue)) {
817 release_sock(sk);
818 return 0;
819 }
820
821 release_sock(sk);
822
823 if (flags & (MSG_OOB))
824 return -EOPNOTSUPP;
825
826 skb = skb_recv_datagram(sk, flags, noblock, &err);
827 if (!skb) {
828 pr_err("Recv datagram failed state %d %d %d",
829 sk->sk_state, err, sock_error(sk));
830
831 if (sk->sk_shutdown & RCV_SHUTDOWN)
832 return 0;
833
834 return err;
835 }
836
837 rlen = skb->len; /* real length of skb */
838 copied = min_t(unsigned int, rlen, len);
839
840 cskb = skb;
841 if (skb_copy_datagram_msg(cskb, 0, msg, copied)) {
842 if (!(flags & MSG_PEEK))
843 skb_queue_head(&sk->sk_receive_queue, skb);
844 return -EFAULT;
845 }
846
847 sock_recv_timestamp(msg, sk, skb);
848
849 if (sk->sk_type == SOCK_DGRAM && msg->msg_name) {
850 struct nfc_llcp_ui_cb *ui_cb = nfc_llcp_ui_skb_cb(skb);
851 DECLARE_SOCKADDR(struct sockaddr_nfc_llcp *, sockaddr,
852 msg->msg_name);
853
854 msg->msg_namelen = sizeof(struct sockaddr_nfc_llcp);
855
856 pr_debug("Datagram socket %d %d\n", ui_cb->dsap, ui_cb->ssap);
857
858 memset(sockaddr, 0, sizeof(*sockaddr));
859 sockaddr->sa_family = AF_NFC;
860 sockaddr->nfc_protocol = NFC_PROTO_NFC_DEP;
861 sockaddr->dsap = ui_cb->dsap;
862 sockaddr->ssap = ui_cb->ssap;
863 }
864
865 /* Mark read part of skb as used */
866 if (!(flags & MSG_PEEK)) {
867
868 /* SOCK_STREAM: re-queue skb if it contains unreceived data */
869 if (sk->sk_type == SOCK_STREAM ||
870 sk->sk_type == SOCK_DGRAM ||
871 sk->sk_type == SOCK_RAW) {
872 skb_pull(skb, copied);
873 if (skb->len) {
874 skb_queue_head(&sk->sk_receive_queue, skb);
875 goto done;
876 }
877 }
878
879 kfree_skb(skb);
880 }
881
882 /* XXX Queue backlogged skbs */
883
884done:
885 /* SOCK_SEQPACKET: return real length if MSG_TRUNC is set */
886 if (sk->sk_type == SOCK_SEQPACKET && (flags & MSG_TRUNC))
887 copied = rlen;
888
889 return copied;
890}
891
892static const struct proto_ops llcp_sock_ops = {
893 .family = PF_NFC,
894 .owner = THIS_MODULE,
895 .bind = llcp_sock_bind,
896 .connect = llcp_sock_connect,
897 .release = llcp_sock_release,
898 .socketpair = sock_no_socketpair,
899 .accept = llcp_sock_accept,
900 .getname = llcp_sock_getname,
901 .poll = llcp_sock_poll,
902 .ioctl = sock_no_ioctl,
903 .listen = llcp_sock_listen,
904 .shutdown = sock_no_shutdown,
905 .setsockopt = nfc_llcp_setsockopt,
906 .getsockopt = nfc_llcp_getsockopt,
907 .sendmsg = llcp_sock_sendmsg,
908 .recvmsg = llcp_sock_recvmsg,
909 .mmap = sock_no_mmap,
910};
911
912static const struct proto_ops llcp_rawsock_ops = {
913 .family = PF_NFC,
914 .owner = THIS_MODULE,
915 .bind = llcp_raw_sock_bind,
916 .connect = sock_no_connect,
917 .release = llcp_sock_release,
918 .socketpair = sock_no_socketpair,
919 .accept = sock_no_accept,
920 .getname = llcp_sock_getname,
921 .poll = llcp_sock_poll,
922 .ioctl = sock_no_ioctl,
923 .listen = sock_no_listen,
924 .shutdown = sock_no_shutdown,
925 .setsockopt = sock_no_setsockopt,
926 .getsockopt = sock_no_getsockopt,
927 .sendmsg = sock_no_sendmsg,
928 .recvmsg = llcp_sock_recvmsg,
929 .mmap = sock_no_mmap,
930};
931
932static void llcp_sock_destruct(struct sock *sk)
933{
934 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
935
936 pr_debug("%p\n", sk);
937
938 if (sk->sk_state == LLCP_CONNECTED)
939 nfc_put_device(llcp_sock->dev);
940
941 skb_queue_purge(&sk->sk_receive_queue);
942
943 nfc_llcp_sock_free(llcp_sock);
944
945 if (!sock_flag(sk, SOCK_DEAD)) {
946 pr_err("Freeing alive NFC LLCP socket %p\n", sk);
947 return;
948 }
949}
950
951struct sock *nfc_llcp_sock_alloc(struct socket *sock, int type, gfp_t gfp, int kern)
952{
953 struct sock *sk;
954 struct nfc_llcp_sock *llcp_sock;
955
956 sk = sk_alloc(&init_net, PF_NFC, gfp, &llcp_sock_proto, kern);
957 if (!sk)
958 return NULL;
959
960 llcp_sock = nfc_llcp_sock(sk);
961
962 sock_init_data(sock, sk);
963 sk->sk_state = LLCP_CLOSED;
964 sk->sk_protocol = NFC_SOCKPROTO_LLCP;
965 sk->sk_type = type;
966 sk->sk_destruct = llcp_sock_destruct;
967
968 llcp_sock->ssap = 0;
969 llcp_sock->dsap = LLCP_SAP_SDP;
970 llcp_sock->rw = LLCP_MAX_RW + 1;
971 llcp_sock->miux = cpu_to_be16(LLCP_MAX_MIUX + 1);
972 llcp_sock->send_n = llcp_sock->send_ack_n = 0;
973 llcp_sock->recv_n = llcp_sock->recv_ack_n = 0;
974 llcp_sock->remote_ready = 1;
975 llcp_sock->reserved_ssap = LLCP_SAP_MAX;
976 nfc_llcp_socket_remote_param_init(llcp_sock);
977 skb_queue_head_init(&llcp_sock->tx_queue);
978 skb_queue_head_init(&llcp_sock->tx_pending_queue);
979 INIT_LIST_HEAD(&llcp_sock->accept_queue);
980
981 if (sock != NULL)
982 sock->state = SS_UNCONNECTED;
983
984 return sk;
985}
986
987void nfc_llcp_sock_free(struct nfc_llcp_sock *sock)
988{
989 kfree(sock->service_name);
990
991 skb_queue_purge(&sock->tx_queue);
992 skb_queue_purge(&sock->tx_pending_queue);
993
994 list_del_init(&sock->accept_queue);
995
996 sock->parent = NULL;
997
998 nfc_llcp_local_put(sock->local);
999}
1000
1001static int llcp_sock_create(struct net *net, struct socket *sock,
1002 const struct nfc_protocol *nfc_proto, int kern)
1003{
1004 struct sock *sk;
1005
1006 pr_debug("%p\n", sock);
1007
1008 if (sock->type != SOCK_STREAM &&
1009 sock->type != SOCK_DGRAM &&
1010 sock->type != SOCK_RAW)
1011 return -ESOCKTNOSUPPORT;
1012
1013 if (sock->type == SOCK_RAW)
1014 sock->ops = &llcp_rawsock_ops;
1015 else
1016 sock->ops = &llcp_sock_ops;
1017
1018 sk = nfc_llcp_sock_alloc(sock, sock->type, GFP_ATOMIC, kern);
1019 if (sk == NULL)
1020 return -ENOMEM;
1021
1022 return 0;
1023}
1024
1025static const struct nfc_protocol llcp_nfc_proto = {
1026 .id = NFC_SOCKPROTO_LLCP,
1027 .proto = &llcp_sock_proto,
1028 .owner = THIS_MODULE,
1029 .create = llcp_sock_create
1030};
1031
1032int __init nfc_llcp_sock_init(void)
1033{
1034 return nfc_proto_register(&llcp_nfc_proto);
1035}
1036
1037void nfc_llcp_sock_exit(void)
1038{
1039 nfc_proto_unregister(&llcp_nfc_proto);
1040}