Linux Audio

Check our new training course

Loading...
   1// SPDX-License-Identifier: GPL-2.0-or-later
   2/*
   3 * Copyright (C) 2011 Instituto Nokia de Tecnologia
   4 *
   5 * Authors:
   6 *    Lauro Ramos Venancio <lauro.venancio@openbossa.org>
   7 *    Aloisio Almeida Jr <aloisio.almeida@openbossa.org>
   8 *
   9 * Vendor commands implementation based on net/wireless/nl80211.c
  10 * which is:
  11 *
  12 * Copyright 2006-2010	Johannes Berg <johannes@sipsolutions.net>
  13 * Copyright 2013-2014  Intel Mobile Communications GmbH
  14 */
  15
  16#define pr_fmt(fmt) KBUILD_MODNAME ": %s: " fmt, __func__
  17
  18#include <net/genetlink.h>
  19#include <linux/nfc.h>
  20#include <linux/slab.h>
  21
  22#include "nfc.h"
  23#include "llcp.h"
  24
  25static const struct genl_multicast_group nfc_genl_mcgrps[] = {
  26	{ .name = NFC_GENL_MCAST_EVENT_NAME, },
  27};
  28
  29static struct genl_family nfc_genl_family;
  30static const struct nla_policy nfc_genl_policy[NFC_ATTR_MAX + 1] = {
  31	[NFC_ATTR_DEVICE_INDEX] = { .type = NLA_U32 },
  32	[NFC_ATTR_DEVICE_NAME] = { .type = NLA_STRING,
  33				.len = NFC_DEVICE_NAME_MAXSIZE },
  34	[NFC_ATTR_PROTOCOLS] = { .type = NLA_U32 },
  35	[NFC_ATTR_TARGET_INDEX] = { .type = NLA_U32 },
  36	[NFC_ATTR_COMM_MODE] = { .type = NLA_U8 },
  37	[NFC_ATTR_RF_MODE] = { .type = NLA_U8 },
  38	[NFC_ATTR_DEVICE_POWERED] = { .type = NLA_U8 },
  39	[NFC_ATTR_IM_PROTOCOLS] = { .type = NLA_U32 },
  40	[NFC_ATTR_TM_PROTOCOLS] = { .type = NLA_U32 },
  41	[NFC_ATTR_LLC_PARAM_LTO] = { .type = NLA_U8 },
  42	[NFC_ATTR_LLC_PARAM_RW] = { .type = NLA_U8 },
  43	[NFC_ATTR_LLC_PARAM_MIUX] = { .type = NLA_U16 },
  44	[NFC_ATTR_LLC_SDP] = { .type = NLA_NESTED },
  45	[NFC_ATTR_FIRMWARE_NAME] = { .type = NLA_STRING,
  46				     .len = NFC_FIRMWARE_NAME_MAXSIZE },
  47	[NFC_ATTR_SE_INDEX] = { .type = NLA_U32 },
  48	[NFC_ATTR_SE_APDU] = { .type = NLA_BINARY },
  49	[NFC_ATTR_VENDOR_ID] = { .type = NLA_U32 },
  50	[NFC_ATTR_VENDOR_SUBCMD] = { .type = NLA_U32 },
  51	[NFC_ATTR_VENDOR_DATA] = { .type = NLA_BINARY },
  52
  53};
  54
  55static const struct nla_policy nfc_sdp_genl_policy[NFC_SDP_ATTR_MAX + 1] = {
  56	[NFC_SDP_ATTR_URI] = { .type = NLA_STRING,
  57			       .len = U8_MAX - 4 },
  58	[NFC_SDP_ATTR_SAP] = { .type = NLA_U8 },
  59};
  60
  61static int nfc_genl_send_target(struct sk_buff *msg, struct nfc_target *target,
  62				struct netlink_callback *cb, int flags)
  63{
  64	void *hdr;
  65
  66	hdr = genlmsg_put(msg, NETLINK_CB(cb->skb).portid, cb->nlh->nlmsg_seq,
  67			  &nfc_genl_family, flags, NFC_CMD_GET_TARGET);
  68	if (!hdr)
  69		return -EMSGSIZE;
  70
  71	genl_dump_check_consistent(cb, hdr);
  72
  73	if (nla_put_u32(msg, NFC_ATTR_TARGET_INDEX, target->idx) ||
  74	    nla_put_u32(msg, NFC_ATTR_PROTOCOLS, target->supported_protocols) ||
  75	    nla_put_u16(msg, NFC_ATTR_TARGET_SENS_RES, target->sens_res) ||
  76	    nla_put_u8(msg, NFC_ATTR_TARGET_SEL_RES, target->sel_res))
  77		goto nla_put_failure;
  78	if (target->nfcid1_len > 0 &&
  79	    nla_put(msg, NFC_ATTR_TARGET_NFCID1, target->nfcid1_len,
  80		    target->nfcid1))
  81		goto nla_put_failure;
  82	if (target->sensb_res_len > 0 &&
  83	    nla_put(msg, NFC_ATTR_TARGET_SENSB_RES, target->sensb_res_len,
  84		    target->sensb_res))
  85		goto nla_put_failure;
  86	if (target->sensf_res_len > 0 &&
  87	    nla_put(msg, NFC_ATTR_TARGET_SENSF_RES, target->sensf_res_len,
  88		    target->sensf_res))
  89		goto nla_put_failure;
  90
  91	if (target->is_iso15693) {
  92		if (nla_put_u8(msg, NFC_ATTR_TARGET_ISO15693_DSFID,
  93			       target->iso15693_dsfid) ||
  94		    nla_put(msg, NFC_ATTR_TARGET_ISO15693_UID,
  95			    sizeof(target->iso15693_uid), target->iso15693_uid))
  96			goto nla_put_failure;
  97	}
  98
  99	genlmsg_end(msg, hdr);
 100	return 0;
 101
 102nla_put_failure:
 103	genlmsg_cancel(msg, hdr);
 104	return -EMSGSIZE;
 105}
 106
 107static struct nfc_dev *__get_device_from_cb(struct netlink_callback *cb)
 108{
 109	const struct genl_dumpit_info *info = genl_dumpit_info(cb);
 110	struct nfc_dev *dev;
 111	u32 idx;
 112
 113	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
 114		return ERR_PTR(-EINVAL);
 115
 116	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 117
 118	dev = nfc_get_device(idx);
 119	if (!dev)
 120		return ERR_PTR(-ENODEV);
 121
 122	return dev;
 123}
 124
 125static int nfc_genl_dump_targets(struct sk_buff *skb,
 126				 struct netlink_callback *cb)
 127{
 128	int i = cb->args[0];
 129	struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
 130	int rc;
 131
 132	if (!dev) {
 133		dev = __get_device_from_cb(cb);
 134		if (IS_ERR(dev))
 135			return PTR_ERR(dev);
 136
 137		cb->args[1] = (long) dev;
 138	}
 139
 140	device_lock(&dev->dev);
 141
 142	cb->seq = dev->targets_generation;
 143
 144	while (i < dev->n_targets) {
 145		rc = nfc_genl_send_target(skb, &dev->targets[i], cb,
 146					  NLM_F_MULTI);
 147		if (rc < 0)
 148			break;
 149
 150		i++;
 151	}
 152
 153	device_unlock(&dev->dev);
 154
 155	cb->args[0] = i;
 156
 157	return skb->len;
 158}
 159
 160static int nfc_genl_dump_targets_done(struct netlink_callback *cb)
 161{
 162	struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
 163
 164	if (dev)
 165		nfc_put_device(dev);
 166
 167	return 0;
 168}
 169
 170int nfc_genl_targets_found(struct nfc_dev *dev)
 171{
 172	struct sk_buff *msg;
 173	void *hdr;
 174
 175	dev->genl_data.poll_req_portid = 0;
 176
 177	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
 178	if (!msg)
 179		return -ENOMEM;
 180
 181	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 182			  NFC_EVENT_TARGETS_FOUND);
 183	if (!hdr)
 184		goto free_msg;
 185
 186	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 187		goto nla_put_failure;
 188
 189	genlmsg_end(msg, hdr);
 190
 191	return genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
 192
 193nla_put_failure:
 194free_msg:
 195	nlmsg_free(msg);
 196	return -EMSGSIZE;
 197}
 198
 199int nfc_genl_target_lost(struct nfc_dev *dev, u32 target_idx)
 200{
 201	struct sk_buff *msg;
 202	void *hdr;
 203
 204	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 205	if (!msg)
 206		return -ENOMEM;
 207
 208	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 209			  NFC_EVENT_TARGET_LOST);
 210	if (!hdr)
 211		goto free_msg;
 212
 213	if (nla_put_string(msg, NFC_ATTR_DEVICE_NAME, nfc_device_name(dev)) ||
 214	    nla_put_u32(msg, NFC_ATTR_TARGET_INDEX, target_idx))
 215		goto nla_put_failure;
 216
 217	genlmsg_end(msg, hdr);
 218
 219	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 220
 221	return 0;
 222
 223nla_put_failure:
 224free_msg:
 225	nlmsg_free(msg);
 226	return -EMSGSIZE;
 227}
 228
 229int nfc_genl_tm_activated(struct nfc_dev *dev, u32 protocol)
 230{
 231	struct sk_buff *msg;
 232	void *hdr;
 233
 234	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 235	if (!msg)
 236		return -ENOMEM;
 237
 238	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 239			  NFC_EVENT_TM_ACTIVATED);
 240	if (!hdr)
 241		goto free_msg;
 242
 243	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 244		goto nla_put_failure;
 245	if (nla_put_u32(msg, NFC_ATTR_TM_PROTOCOLS, protocol))
 246		goto nla_put_failure;
 247
 248	genlmsg_end(msg, hdr);
 249
 250	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 251
 252	return 0;
 253
 254nla_put_failure:
 255free_msg:
 256	nlmsg_free(msg);
 257	return -EMSGSIZE;
 258}
 259
 260int nfc_genl_tm_deactivated(struct nfc_dev *dev)
 261{
 262	struct sk_buff *msg;
 263	void *hdr;
 264
 265	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 266	if (!msg)
 267		return -ENOMEM;
 268
 269	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 270			  NFC_EVENT_TM_DEACTIVATED);
 271	if (!hdr)
 272		goto free_msg;
 273
 274	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 275		goto nla_put_failure;
 276
 277	genlmsg_end(msg, hdr);
 278
 279	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 280
 281	return 0;
 282
 283nla_put_failure:
 284free_msg:
 285	nlmsg_free(msg);
 286	return -EMSGSIZE;
 287}
 288
 289static int nfc_genl_setup_device_added(struct nfc_dev *dev, struct sk_buff *msg)
 290{
 291	if (nla_put_string(msg, NFC_ATTR_DEVICE_NAME, nfc_device_name(dev)) ||
 292	    nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
 293	    nla_put_u32(msg, NFC_ATTR_PROTOCOLS, dev->supported_protocols) ||
 294	    nla_put_u8(msg, NFC_ATTR_DEVICE_POWERED, dev->dev_up) ||
 295	    nla_put_u8(msg, NFC_ATTR_RF_MODE, dev->rf_mode))
 296		return -1;
 297	return 0;
 298}
 299
 300int nfc_genl_device_added(struct nfc_dev *dev)
 301{
 302	struct sk_buff *msg;
 303	void *hdr;
 304
 305	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 306	if (!msg)
 307		return -ENOMEM;
 308
 309	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 310			  NFC_EVENT_DEVICE_ADDED);
 311	if (!hdr)
 312		goto free_msg;
 313
 314	if (nfc_genl_setup_device_added(dev, msg))
 315		goto nla_put_failure;
 316
 317	genlmsg_end(msg, hdr);
 318
 319	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 320
 321	return 0;
 322
 323nla_put_failure:
 324free_msg:
 325	nlmsg_free(msg);
 326	return -EMSGSIZE;
 327}
 328
 329int nfc_genl_device_removed(struct nfc_dev *dev)
 330{
 331	struct sk_buff *msg;
 332	void *hdr;
 333
 334	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 335	if (!msg)
 336		return -ENOMEM;
 337
 338	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 339			  NFC_EVENT_DEVICE_REMOVED);
 340	if (!hdr)
 341		goto free_msg;
 342
 343	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 344		goto nla_put_failure;
 345
 346	genlmsg_end(msg, hdr);
 347
 348	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 349
 350	return 0;
 351
 352nla_put_failure:
 353free_msg:
 354	nlmsg_free(msg);
 355	return -EMSGSIZE;
 356}
 357
 358int nfc_genl_llc_send_sdres(struct nfc_dev *dev, struct hlist_head *sdres_list)
 359{
 360	struct sk_buff *msg;
 361	struct nlattr *sdp_attr, *uri_attr;
 362	struct nfc_llcp_sdp_tlv *sdres;
 363	struct hlist_node *n;
 364	void *hdr;
 365	int rc = -EMSGSIZE;
 366	int i;
 367
 368	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 369	if (!msg)
 370		return -ENOMEM;
 371
 372	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 373			  NFC_EVENT_LLC_SDRES);
 374	if (!hdr)
 375		goto free_msg;
 376
 377	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 378		goto nla_put_failure;
 379
 380	sdp_attr = nla_nest_start_noflag(msg, NFC_ATTR_LLC_SDP);
 381	if (sdp_attr == NULL) {
 382		rc = -ENOMEM;
 383		goto nla_put_failure;
 384	}
 385
 386	i = 1;
 387	hlist_for_each_entry_safe(sdres, n, sdres_list, node) {
 388		pr_debug("uri: %s, sap: %d\n", sdres->uri, sdres->sap);
 389
 390		uri_attr = nla_nest_start_noflag(msg, i++);
 391		if (uri_attr == NULL) {
 392			rc = -ENOMEM;
 393			goto nla_put_failure;
 394		}
 395
 396		if (nla_put_u8(msg, NFC_SDP_ATTR_SAP, sdres->sap))
 397			goto nla_put_failure;
 398
 399		if (nla_put_string(msg, NFC_SDP_ATTR_URI, sdres->uri))
 400			goto nla_put_failure;
 401
 402		nla_nest_end(msg, uri_attr);
 403
 404		hlist_del(&sdres->node);
 405
 406		nfc_llcp_free_sdp_tlv(sdres);
 407	}
 408
 409	nla_nest_end(msg, sdp_attr);
 410
 411	genlmsg_end(msg, hdr);
 412
 413	return genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
 414
 415nla_put_failure:
 416free_msg:
 417	nlmsg_free(msg);
 418
 419	nfc_llcp_free_sdp_tlv_list(sdres_list);
 420
 421	return rc;
 422}
 423
 424int nfc_genl_se_added(struct nfc_dev *dev, u32 se_idx, u16 type)
 425{
 426	struct sk_buff *msg;
 427	void *hdr;
 428
 429	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 430	if (!msg)
 431		return -ENOMEM;
 432
 433	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 434			  NFC_EVENT_SE_ADDED);
 435	if (!hdr)
 436		goto free_msg;
 437
 438	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
 439	    nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx) ||
 440	    nla_put_u8(msg, NFC_ATTR_SE_TYPE, type))
 441		goto nla_put_failure;
 442
 443	genlmsg_end(msg, hdr);
 444
 445	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 446
 447	return 0;
 448
 449nla_put_failure:
 450free_msg:
 451	nlmsg_free(msg);
 452	return -EMSGSIZE;
 453}
 454
 455int nfc_genl_se_removed(struct nfc_dev *dev, u32 se_idx)
 456{
 457	struct sk_buff *msg;
 458	void *hdr;
 459
 460	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 461	if (!msg)
 462		return -ENOMEM;
 463
 464	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 465			  NFC_EVENT_SE_REMOVED);
 466	if (!hdr)
 467		goto free_msg;
 468
 469	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
 470	    nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx))
 471		goto nla_put_failure;
 472
 473	genlmsg_end(msg, hdr);
 474
 475	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 476
 477	return 0;
 478
 479nla_put_failure:
 480free_msg:
 481	nlmsg_free(msg);
 482	return -EMSGSIZE;
 483}
 484
 485int nfc_genl_se_transaction(struct nfc_dev *dev, u8 se_idx,
 486			    struct nfc_evt_transaction *evt_transaction)
 487{
 488	struct nfc_se *se;
 489	struct sk_buff *msg;
 490	void *hdr;
 491
 492	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 493	if (!msg)
 494		return -ENOMEM;
 495
 496	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 497			  NFC_EVENT_SE_TRANSACTION);
 498	if (!hdr)
 499		goto free_msg;
 500
 501	se = nfc_find_se(dev, se_idx);
 502	if (!se)
 503		goto free_msg;
 504
 505	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
 506	    nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx) ||
 507	    nla_put_u8(msg, NFC_ATTR_SE_TYPE, se->type) ||
 508	    nla_put(msg, NFC_ATTR_SE_AID, evt_transaction->aid_len,
 509		    evt_transaction->aid) ||
 510	    nla_put(msg, NFC_ATTR_SE_PARAMS, evt_transaction->params_len,
 511		    evt_transaction->params))
 512		goto nla_put_failure;
 513
 514	/* evt_transaction is no more used */
 515	devm_kfree(&dev->dev, evt_transaction);
 516
 517	genlmsg_end(msg, hdr);
 518
 519	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 520
 521	return 0;
 522
 523nla_put_failure:
 524free_msg:
 525	/* evt_transaction is no more used */
 526	devm_kfree(&dev->dev, evt_transaction);
 527	nlmsg_free(msg);
 528	return -EMSGSIZE;
 529}
 530
 531int nfc_genl_se_connectivity(struct nfc_dev *dev, u8 se_idx)
 532{
 533	struct nfc_se *se;
 534	struct sk_buff *msg;
 535	void *hdr;
 536
 537	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 538	if (!msg)
 539		return -ENOMEM;
 540
 541	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 542			  NFC_EVENT_SE_CONNECTIVITY);
 543	if (!hdr)
 544		goto free_msg;
 545
 546	se = nfc_find_se(dev, se_idx);
 547	if (!se)
 548		goto free_msg;
 549
 550	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
 551	    nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx) ||
 552	    nla_put_u8(msg, NFC_ATTR_SE_TYPE, se->type))
 553		goto nla_put_failure;
 554
 555	genlmsg_end(msg, hdr);
 556
 557	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 558
 559	return 0;
 560
 561nla_put_failure:
 562free_msg:
 563	nlmsg_free(msg);
 564	return -EMSGSIZE;
 565}
 566
 567static int nfc_genl_send_device(struct sk_buff *msg, struct nfc_dev *dev,
 568				u32 portid, u32 seq,
 569				struct netlink_callback *cb,
 570				int flags)
 571{
 572	void *hdr;
 573
 574	hdr = genlmsg_put(msg, portid, seq, &nfc_genl_family, flags,
 575			  NFC_CMD_GET_DEVICE);
 576	if (!hdr)
 577		return -EMSGSIZE;
 578
 579	if (cb)
 580		genl_dump_check_consistent(cb, hdr);
 581
 582	if (nfc_genl_setup_device_added(dev, msg))
 583		goto nla_put_failure;
 584
 585	genlmsg_end(msg, hdr);
 586	return 0;
 587
 588nla_put_failure:
 589	genlmsg_cancel(msg, hdr);
 590	return -EMSGSIZE;
 591}
 592
 593static int nfc_genl_dump_devices(struct sk_buff *skb,
 594				 struct netlink_callback *cb)
 595{
 596	struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
 597	struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
 598	bool first_call = false;
 599
 600	if (!iter) {
 601		first_call = true;
 602		iter = kmalloc(sizeof(struct class_dev_iter), GFP_KERNEL);
 603		if (!iter)
 604			return -ENOMEM;
 605		cb->args[0] = (long) iter;
 606	}
 607
 608	mutex_lock(&nfc_devlist_mutex);
 609
 610	cb->seq = nfc_devlist_generation;
 611
 612	if (first_call) {
 613		nfc_device_iter_init(iter);
 614		dev = nfc_device_iter_next(iter);
 615	}
 616
 617	while (dev) {
 618		int rc;
 619
 620		rc = nfc_genl_send_device(skb, dev, NETLINK_CB(cb->skb).portid,
 621					  cb->nlh->nlmsg_seq, cb, NLM_F_MULTI);
 622		if (rc < 0)
 623			break;
 624
 625		dev = nfc_device_iter_next(iter);
 626	}
 627
 628	mutex_unlock(&nfc_devlist_mutex);
 629
 630	cb->args[1] = (long) dev;
 631
 632	return skb->len;
 633}
 634
 635static int nfc_genl_dump_devices_done(struct netlink_callback *cb)
 636{
 637	struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
 638
 639	nfc_device_iter_exit(iter);
 640	kfree(iter);
 641
 642	return 0;
 643}
 644
 645int nfc_genl_dep_link_up_event(struct nfc_dev *dev, u32 target_idx,
 646			       u8 comm_mode, u8 rf_mode)
 647{
 648	struct sk_buff *msg;
 649	void *hdr;
 650
 651	pr_debug("DEP link is up\n");
 652
 653	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
 654	if (!msg)
 655		return -ENOMEM;
 656
 657	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0, NFC_CMD_DEP_LINK_UP);
 658	if (!hdr)
 659		goto free_msg;
 660
 661	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 662		goto nla_put_failure;
 663	if (rf_mode == NFC_RF_INITIATOR &&
 664	    nla_put_u32(msg, NFC_ATTR_TARGET_INDEX, target_idx))
 665		goto nla_put_failure;
 666	if (nla_put_u8(msg, NFC_ATTR_COMM_MODE, comm_mode) ||
 667	    nla_put_u8(msg, NFC_ATTR_RF_MODE, rf_mode))
 668		goto nla_put_failure;
 669
 670	genlmsg_end(msg, hdr);
 671
 672	dev->dep_link_up = true;
 673
 674	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
 675
 676	return 0;
 677
 678nla_put_failure:
 679free_msg:
 680	nlmsg_free(msg);
 681	return -EMSGSIZE;
 682}
 683
 684int nfc_genl_dep_link_down_event(struct nfc_dev *dev)
 685{
 686	struct sk_buff *msg;
 687	void *hdr;
 688
 689	pr_debug("DEP link is down\n");
 690
 691	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
 692	if (!msg)
 693		return -ENOMEM;
 694
 695	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 696			  NFC_CMD_DEP_LINK_DOWN);
 697	if (!hdr)
 698		goto free_msg;
 699
 700	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 701		goto nla_put_failure;
 702
 703	genlmsg_end(msg, hdr);
 704
 705	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
 706
 707	return 0;
 708
 709nla_put_failure:
 710free_msg:
 711	nlmsg_free(msg);
 712	return -EMSGSIZE;
 713}
 714
 715static int nfc_genl_get_device(struct sk_buff *skb, struct genl_info *info)
 716{
 717	struct sk_buff *msg;
 718	struct nfc_dev *dev;
 719	u32 idx;
 720	int rc = -ENOBUFS;
 721
 722	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
 723		return -EINVAL;
 724
 725	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 726
 727	dev = nfc_get_device(idx);
 728	if (!dev)
 729		return -ENODEV;
 730
 731	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 732	if (!msg) {
 733		rc = -ENOMEM;
 734		goto out_putdev;
 735	}
 736
 737	rc = nfc_genl_send_device(msg, dev, info->snd_portid, info->snd_seq,
 738				  NULL, 0);
 739	if (rc < 0)
 740		goto out_free;
 741
 742	nfc_put_device(dev);
 743
 744	return genlmsg_reply(msg, info);
 745
 746out_free:
 747	nlmsg_free(msg);
 748out_putdev:
 749	nfc_put_device(dev);
 750	return rc;
 751}
 752
 753static int nfc_genl_dev_up(struct sk_buff *skb, struct genl_info *info)
 754{
 755	struct nfc_dev *dev;
 756	int rc;
 757	u32 idx;
 758
 759	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
 760		return -EINVAL;
 761
 762	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 763
 764	dev = nfc_get_device(idx);
 765	if (!dev)
 766		return -ENODEV;
 767
 768	rc = nfc_dev_up(dev);
 769
 770	nfc_put_device(dev);
 771	return rc;
 772}
 773
 774static int nfc_genl_dev_down(struct sk_buff *skb, struct genl_info *info)
 775{
 776	struct nfc_dev *dev;
 777	int rc;
 778	u32 idx;
 779
 780	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
 781		return -EINVAL;
 782
 783	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 784
 785	dev = nfc_get_device(idx);
 786	if (!dev)
 787		return -ENODEV;
 788
 789	rc = nfc_dev_down(dev);
 790
 791	nfc_put_device(dev);
 792	return rc;
 793}
 794
 795static int nfc_genl_start_poll(struct sk_buff *skb, struct genl_info *info)
 796{
 797	struct nfc_dev *dev;
 798	int rc;
 799	u32 idx;
 800	u32 im_protocols = 0, tm_protocols = 0;
 801
 802	pr_debug("Poll start\n");
 803
 804	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
 805	    ((!info->attrs[NFC_ATTR_IM_PROTOCOLS] &&
 806	      !info->attrs[NFC_ATTR_PROTOCOLS]) &&
 807	      !info->attrs[NFC_ATTR_TM_PROTOCOLS]))
 808		return -EINVAL;
 809
 810	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 811
 812	if (info->attrs[NFC_ATTR_TM_PROTOCOLS])
 813		tm_protocols = nla_get_u32(info->attrs[NFC_ATTR_TM_PROTOCOLS]);
 814
 815	if (info->attrs[NFC_ATTR_IM_PROTOCOLS])
 816		im_protocols = nla_get_u32(info->attrs[NFC_ATTR_IM_PROTOCOLS]);
 817	else if (info->attrs[NFC_ATTR_PROTOCOLS])
 818		im_protocols = nla_get_u32(info->attrs[NFC_ATTR_PROTOCOLS]);
 819
 820	dev = nfc_get_device(idx);
 821	if (!dev)
 822		return -ENODEV;
 823
 824	mutex_lock(&dev->genl_data.genl_data_mutex);
 825
 826	rc = nfc_start_poll(dev, im_protocols, tm_protocols);
 827	if (!rc)
 828		dev->genl_data.poll_req_portid = info->snd_portid;
 829
 830	mutex_unlock(&dev->genl_data.genl_data_mutex);
 831
 832	nfc_put_device(dev);
 833	return rc;
 834}
 835
 836static int nfc_genl_stop_poll(struct sk_buff *skb, struct genl_info *info)
 837{
 838	struct nfc_dev *dev;
 839	int rc;
 840	u32 idx;
 841
 842	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
 843		return -EINVAL;
 844
 845	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 846
 847	dev = nfc_get_device(idx);
 848	if (!dev)
 849		return -ENODEV;
 850
 851	device_lock(&dev->dev);
 852
 853	if (!dev->polling) {
 854		device_unlock(&dev->dev);
 855		return -EINVAL;
 856	}
 857
 858	device_unlock(&dev->dev);
 859
 860	mutex_lock(&dev->genl_data.genl_data_mutex);
 861
 862	if (dev->genl_data.poll_req_portid != info->snd_portid) {
 863		rc = -EBUSY;
 864		goto out;
 865	}
 866
 867	rc = nfc_stop_poll(dev);
 868	dev->genl_data.poll_req_portid = 0;
 869
 870out:
 871	mutex_unlock(&dev->genl_data.genl_data_mutex);
 872	nfc_put_device(dev);
 873	return rc;
 874}
 875
 876static int nfc_genl_activate_target(struct sk_buff *skb, struct genl_info *info)
 877{
 878	struct nfc_dev *dev;
 879	u32 device_idx, target_idx, protocol;
 880	int rc;
 881
 882	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
 883	    !info->attrs[NFC_ATTR_TARGET_INDEX] ||
 884	    !info->attrs[NFC_ATTR_PROTOCOLS])
 885		return -EINVAL;
 886
 887	device_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 888
 889	dev = nfc_get_device(device_idx);
 890	if (!dev)
 891		return -ENODEV;
 892
 893	target_idx = nla_get_u32(info->attrs[NFC_ATTR_TARGET_INDEX]);
 894	protocol = nla_get_u32(info->attrs[NFC_ATTR_PROTOCOLS]);
 895
 896	nfc_deactivate_target(dev, target_idx, NFC_TARGET_MODE_SLEEP);
 897	rc = nfc_activate_target(dev, target_idx, protocol);
 898
 899	nfc_put_device(dev);
 900	return rc;
 901}
 902
 903static int nfc_genl_deactivate_target(struct sk_buff *skb,
 904				      struct genl_info *info)
 905{
 906	struct nfc_dev *dev;
 907	u32 device_idx, target_idx;
 908	int rc;
 909
 910	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
 911	    !info->attrs[NFC_ATTR_TARGET_INDEX])
 912		return -EINVAL;
 913
 914	device_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 915
 916	dev = nfc_get_device(device_idx);
 917	if (!dev)
 918		return -ENODEV;
 919
 920	target_idx = nla_get_u32(info->attrs[NFC_ATTR_TARGET_INDEX]);
 921
 922	rc = nfc_deactivate_target(dev, target_idx, NFC_TARGET_MODE_SLEEP);
 923
 924	nfc_put_device(dev);
 925	return rc;
 926}
 927
 928static int nfc_genl_dep_link_up(struct sk_buff *skb, struct genl_info *info)
 929{
 930	struct nfc_dev *dev;
 931	int rc, tgt_idx;
 932	u32 idx;
 933	u8 comm;
 934
 935	pr_debug("DEP link up\n");
 936
 937	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
 938	    !info->attrs[NFC_ATTR_COMM_MODE])
 939		return -EINVAL;
 940
 941	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 942	if (!info->attrs[NFC_ATTR_TARGET_INDEX])
 943		tgt_idx = NFC_TARGET_IDX_ANY;
 944	else
 945		tgt_idx = nla_get_u32(info->attrs[NFC_ATTR_TARGET_INDEX]);
 946
 947	comm = nla_get_u8(info->attrs[NFC_ATTR_COMM_MODE]);
 948
 949	if (comm != NFC_COMM_ACTIVE && comm != NFC_COMM_PASSIVE)
 950		return -EINVAL;
 951
 952	dev = nfc_get_device(idx);
 953	if (!dev)
 954		return -ENODEV;
 955
 956	rc = nfc_dep_link_up(dev, tgt_idx, comm);
 957
 958	nfc_put_device(dev);
 959
 960	return rc;
 961}
 962
 963static int nfc_genl_dep_link_down(struct sk_buff *skb, struct genl_info *info)
 964{
 965	struct nfc_dev *dev;
 966	int rc;
 967	u32 idx;
 968
 969	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
 970	    !info->attrs[NFC_ATTR_TARGET_INDEX])
 971		return -EINVAL;
 972
 973	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 974
 975	dev = nfc_get_device(idx);
 976	if (!dev)
 977		return -ENODEV;
 978
 979	rc = nfc_dep_link_down(dev);
 980
 981	nfc_put_device(dev);
 982	return rc;
 983}
 984
 985static int nfc_genl_send_params(struct sk_buff *msg,
 986				struct nfc_llcp_local *local,
 987				u32 portid, u32 seq)
 988{
 989	void *hdr;
 990
 991	hdr = genlmsg_put(msg, portid, seq, &nfc_genl_family, 0,
 992			  NFC_CMD_LLC_GET_PARAMS);
 993	if (!hdr)
 994		return -EMSGSIZE;
 995
 996	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, local->dev->idx) ||
 997	    nla_put_u8(msg, NFC_ATTR_LLC_PARAM_LTO, local->lto) ||
 998	    nla_put_u8(msg, NFC_ATTR_LLC_PARAM_RW, local->rw) ||
 999	    nla_put_u16(msg, NFC_ATTR_LLC_PARAM_MIUX, be16_to_cpu(local->miux)))
1000		goto nla_put_failure;
1001
1002	genlmsg_end(msg, hdr);
1003	return 0;
1004
1005nla_put_failure:
1006	genlmsg_cancel(msg, hdr);
1007	return -EMSGSIZE;
1008}
1009
1010static int nfc_genl_llc_get_params(struct sk_buff *skb, struct genl_info *info)
1011{
1012	struct nfc_dev *dev;
1013	struct nfc_llcp_local *local;
1014	int rc = 0;
1015	struct sk_buff *msg = NULL;
1016	u32 idx;
1017
1018	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1019	    !info->attrs[NFC_ATTR_FIRMWARE_NAME])
1020		return -EINVAL;
1021
1022	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1023
1024	dev = nfc_get_device(idx);
1025	if (!dev)
1026		return -ENODEV;
1027
1028	device_lock(&dev->dev);
1029
1030	local = nfc_llcp_find_local(dev);
1031	if (!local) {
1032		rc = -ENODEV;
1033		goto exit;
1034	}
1035
1036	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
1037	if (!msg) {
1038		rc = -ENOMEM;
1039		goto exit;
1040	}
1041
1042	rc = nfc_genl_send_params(msg, local, info->snd_portid, info->snd_seq);
1043
1044exit:
1045	device_unlock(&dev->dev);
1046
1047	nfc_put_device(dev);
1048
1049	if (rc < 0) {
1050		if (msg)
1051			nlmsg_free(msg);
1052
1053		return rc;
1054	}
1055
1056	return genlmsg_reply(msg, info);
1057}
1058
1059static int nfc_genl_llc_set_params(struct sk_buff *skb, struct genl_info *info)
1060{
1061	struct nfc_dev *dev;
1062	struct nfc_llcp_local *local;
1063	u8 rw = 0;
1064	u16 miux = 0;
1065	u32 idx;
1066	int rc = 0;
1067
1068	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1069	    (!info->attrs[NFC_ATTR_LLC_PARAM_LTO] &&
1070	     !info->attrs[NFC_ATTR_LLC_PARAM_RW] &&
1071	     !info->attrs[NFC_ATTR_LLC_PARAM_MIUX]))
1072		return -EINVAL;
1073
1074	if (info->attrs[NFC_ATTR_LLC_PARAM_RW]) {
1075		rw = nla_get_u8(info->attrs[NFC_ATTR_LLC_PARAM_RW]);
1076
1077		if (rw > LLCP_MAX_RW)
1078			return -EINVAL;
1079	}
1080
1081	if (info->attrs[NFC_ATTR_LLC_PARAM_MIUX]) {
1082		miux = nla_get_u16(info->attrs[NFC_ATTR_LLC_PARAM_MIUX]);
1083
1084		if (miux > LLCP_MAX_MIUX)
1085			return -EINVAL;
1086	}
1087
1088	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1089
1090	dev = nfc_get_device(idx);
1091	if (!dev)
1092		return -ENODEV;
1093
1094	device_lock(&dev->dev);
1095
1096	local = nfc_llcp_find_local(dev);
1097	if (!local) {
1098		rc = -ENODEV;
1099		goto exit;
1100	}
1101
1102	if (info->attrs[NFC_ATTR_LLC_PARAM_LTO]) {
1103		if (dev->dep_link_up) {
1104			rc = -EINPROGRESS;
1105			goto exit;
1106		}
1107
1108		local->lto = nla_get_u8(info->attrs[NFC_ATTR_LLC_PARAM_LTO]);
1109	}
1110
1111	if (info->attrs[NFC_ATTR_LLC_PARAM_RW])
1112		local->rw = rw;
1113
1114	if (info->attrs[NFC_ATTR_LLC_PARAM_MIUX])
1115		local->miux = cpu_to_be16(miux);
1116
1117exit:
1118	device_unlock(&dev->dev);
1119
1120	nfc_put_device(dev);
1121
1122	return rc;
1123}
1124
1125static int nfc_genl_llc_sdreq(struct sk_buff *skb, struct genl_info *info)
1126{
1127	struct nfc_dev *dev;
1128	struct nfc_llcp_local *local;
1129	struct nlattr *attr, *sdp_attrs[NFC_SDP_ATTR_MAX+1];
1130	u32 idx;
1131	u8 tid;
1132	char *uri;
1133	int rc = 0, rem;
1134	size_t uri_len, tlvs_len;
1135	struct hlist_head sdreq_list;
1136	struct nfc_llcp_sdp_tlv *sdreq;
1137
1138	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1139	    !info->attrs[NFC_ATTR_LLC_SDP])
1140		return -EINVAL;
1141
1142	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1143
1144	dev = nfc_get_device(idx);
1145	if (!dev)
1146		return -ENODEV;
1147
1148	device_lock(&dev->dev);
1149
1150	if (dev->dep_link_up == false) {
1151		rc = -ENOLINK;
1152		goto exit;
1153	}
1154
1155	local = nfc_llcp_find_local(dev);
1156	if (!local) {
1157		rc = -ENODEV;
1158		goto exit;
1159	}
1160
1161	INIT_HLIST_HEAD(&sdreq_list);
1162
1163	tlvs_len = 0;
1164
1165	nla_for_each_nested(attr, info->attrs[NFC_ATTR_LLC_SDP], rem) {
1166		rc = nla_parse_nested_deprecated(sdp_attrs, NFC_SDP_ATTR_MAX,
1167						 attr, nfc_sdp_genl_policy,
1168						 info->extack);
1169
1170		if (rc != 0) {
1171			rc = -EINVAL;
1172			goto exit;
1173		}
1174
1175		if (!sdp_attrs[NFC_SDP_ATTR_URI])
1176			continue;
1177
1178		uri_len = nla_len(sdp_attrs[NFC_SDP_ATTR_URI]);
1179		if (uri_len == 0)
1180			continue;
1181
1182		uri = nla_data(sdp_attrs[NFC_SDP_ATTR_URI]);
1183		if (uri == NULL || *uri == 0)
1184			continue;
1185
1186		tid = local->sdreq_next_tid++;
1187
1188		sdreq = nfc_llcp_build_sdreq_tlv(tid, uri, uri_len);
1189		if (sdreq == NULL) {
1190			rc = -ENOMEM;
1191			goto exit;
1192		}
1193
1194		tlvs_len += sdreq->tlv_len;
1195
1196		hlist_add_head(&sdreq->node, &sdreq_list);
1197	}
1198
1199	if (hlist_empty(&sdreq_list)) {
1200		rc = -EINVAL;
1201		goto exit;
1202	}
1203
1204	rc = nfc_llcp_send_snl_sdreq(local, &sdreq_list, tlvs_len);
1205exit:
1206	device_unlock(&dev->dev);
1207
1208	nfc_put_device(dev);
1209
1210	return rc;
1211}
1212
1213static int nfc_genl_fw_download(struct sk_buff *skb, struct genl_info *info)
1214{
1215	struct nfc_dev *dev;
1216	int rc;
1217	u32 idx;
1218	char firmware_name[NFC_FIRMWARE_NAME_MAXSIZE + 1];
1219
1220	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
1221		return -EINVAL;
1222
1223	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1224
1225	dev = nfc_get_device(idx);
1226	if (!dev)
1227		return -ENODEV;
1228
1229	nla_strlcpy(firmware_name, info->attrs[NFC_ATTR_FIRMWARE_NAME],
1230		    sizeof(firmware_name));
1231
1232	rc = nfc_fw_download(dev, firmware_name);
1233
1234	nfc_put_device(dev);
1235	return rc;
1236}
1237
1238int nfc_genl_fw_download_done(struct nfc_dev *dev, const char *firmware_name,
1239			      u32 result)
1240{
1241	struct sk_buff *msg;
1242	void *hdr;
1243
1244	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
1245	if (!msg)
1246		return -ENOMEM;
1247
1248	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
1249			  NFC_CMD_FW_DOWNLOAD);
1250	if (!hdr)
1251		goto free_msg;
1252
1253	if (nla_put_string(msg, NFC_ATTR_FIRMWARE_NAME, firmware_name) ||
1254	    nla_put_u32(msg, NFC_ATTR_FIRMWARE_DOWNLOAD_STATUS, result) ||
1255	    nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
1256		goto nla_put_failure;
1257
1258	genlmsg_end(msg, hdr);
1259
1260	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
1261
1262	return 0;
1263
1264nla_put_failure:
1265free_msg:
1266	nlmsg_free(msg);
1267	return -EMSGSIZE;
1268}
1269
1270static int nfc_genl_enable_se(struct sk_buff *skb, struct genl_info *info)
1271{
1272	struct nfc_dev *dev;
1273	int rc;
1274	u32 idx, se_idx;
1275
1276	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1277	    !info->attrs[NFC_ATTR_SE_INDEX])
1278		return -EINVAL;
1279
1280	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1281	se_idx = nla_get_u32(info->attrs[NFC_ATTR_SE_INDEX]);
1282
1283	dev = nfc_get_device(idx);
1284	if (!dev)
1285		return -ENODEV;
1286
1287	rc = nfc_enable_se(dev, se_idx);
1288
1289	nfc_put_device(dev);
1290	return rc;
1291}
1292
1293static int nfc_genl_disable_se(struct sk_buff *skb, struct genl_info *info)
1294{
1295	struct nfc_dev *dev;
1296	int rc;
1297	u32 idx, se_idx;
1298
1299	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1300	    !info->attrs[NFC_ATTR_SE_INDEX])
1301		return -EINVAL;
1302
1303	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1304	se_idx = nla_get_u32(info->attrs[NFC_ATTR_SE_INDEX]);
1305
1306	dev = nfc_get_device(idx);
1307	if (!dev)
1308		return -ENODEV;
1309
1310	rc = nfc_disable_se(dev, se_idx);
1311
1312	nfc_put_device(dev);
1313	return rc;
1314}
1315
1316static int nfc_genl_send_se(struct sk_buff *msg, struct nfc_dev *dev,
1317				u32 portid, u32 seq,
1318				struct netlink_callback *cb,
1319				int flags)
1320{
1321	void *hdr;
1322	struct nfc_se *se, *n;
1323
1324	list_for_each_entry_safe(se, n, &dev->secure_elements, list) {
1325		hdr = genlmsg_put(msg, portid, seq, &nfc_genl_family, flags,
1326				  NFC_CMD_GET_SE);
1327		if (!hdr)
1328			goto nla_put_failure;
1329
1330		if (cb)
1331			genl_dump_check_consistent(cb, hdr);
1332
1333		if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
1334		    nla_put_u32(msg, NFC_ATTR_SE_INDEX, se->idx) ||
1335		    nla_put_u8(msg, NFC_ATTR_SE_TYPE, se->type))
1336			goto nla_put_failure;
1337
1338		genlmsg_end(msg, hdr);
1339	}
1340
1341	return 0;
1342
1343nla_put_failure:
1344	genlmsg_cancel(msg, hdr);
1345	return -EMSGSIZE;
1346}
1347
1348static int nfc_genl_dump_ses(struct sk_buff *skb,
1349				 struct netlink_callback *cb)
1350{
1351	struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
1352	struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
1353	bool first_call = false;
1354
1355	if (!iter) {
1356		first_call = true;
1357		iter = kmalloc(sizeof(struct class_dev_iter), GFP_KERNEL);
1358		if (!iter)
1359			return -ENOMEM;
1360		cb->args[0] = (long) iter;
1361	}
1362
1363	mutex_lock(&nfc_devlist_mutex);
1364
1365	cb->seq = nfc_devlist_generation;
1366
1367	if (first_call) {
1368		nfc_device_iter_init(iter);
1369		dev = nfc_device_iter_next(iter);
1370	}
1371
1372	while (dev) {
1373		int rc;
1374
1375		rc = nfc_genl_send_se(skb, dev, NETLINK_CB(cb->skb).portid,
1376					  cb->nlh->nlmsg_seq, cb, NLM_F_MULTI);
1377		if (rc < 0)
1378			break;
1379
1380		dev = nfc_device_iter_next(iter);
1381	}
1382
1383	mutex_unlock(&nfc_devlist_mutex);
1384
1385	cb->args[1] = (long) dev;
1386
1387	return skb->len;
1388}
1389
1390static int nfc_genl_dump_ses_done(struct netlink_callback *cb)
1391{
1392	struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
1393
1394	nfc_device_iter_exit(iter);
1395	kfree(iter);
1396
1397	return 0;
1398}
1399
1400static int nfc_se_io(struct nfc_dev *dev, u32 se_idx,
1401		     u8 *apdu, size_t apdu_length,
1402		     se_io_cb_t cb, void *cb_context)
1403{
1404	struct nfc_se *se;
1405	int rc;
1406
1407	pr_debug("%s se index %d\n", dev_name(&dev->dev), se_idx);
1408
1409	device_lock(&dev->dev);
1410
1411	if (!device_is_registered(&dev->dev)) {
1412		rc = -ENODEV;
1413		goto error;
1414	}
1415
1416	if (!dev->dev_up) {
1417		rc = -ENODEV;
1418		goto error;
1419	}
1420
1421	if (!dev->ops->se_io) {
1422		rc = -EOPNOTSUPP;
1423		goto error;
1424	}
1425
1426	se = nfc_find_se(dev, se_idx);
1427	if (!se) {
1428		rc = -EINVAL;
1429		goto error;
1430	}
1431
1432	if (se->state != NFC_SE_ENABLED) {
1433		rc = -ENODEV;
1434		goto error;
1435	}
1436
1437	rc = dev->ops->se_io(dev, se_idx, apdu,
1438			apdu_length, cb, cb_context);
1439
1440error:
1441	device_unlock(&dev->dev);
1442	return rc;
1443}
1444
1445struct se_io_ctx {
1446	u32 dev_idx;
1447	u32 se_idx;
1448};
1449
1450static void se_io_cb(void *context, u8 *apdu, size_t apdu_len, int err)
1451{
1452	struct se_io_ctx *ctx = context;
1453	struct sk_buff *msg;
1454	void *hdr;
1455
1456	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
1457	if (!msg) {
1458		kfree(ctx);
1459		return;
1460	}
1461
1462	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
1463			  NFC_CMD_SE_IO);
1464	if (!hdr)
1465		goto free_msg;
1466
1467	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, ctx->dev_idx) ||
1468	    nla_put_u32(msg, NFC_ATTR_SE_INDEX, ctx->se_idx) ||
1469	    nla_put(msg, NFC_ATTR_SE_APDU, apdu_len, apdu))
1470		goto nla_put_failure;
1471
1472	genlmsg_end(msg, hdr);
1473
1474	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
1475
1476	kfree(ctx);
1477
1478	return;
1479
1480nla_put_failure:
1481free_msg:
1482	nlmsg_free(msg);
1483	kfree(ctx);
1484
1485	return;
1486}
1487
1488static int nfc_genl_se_io(struct sk_buff *skb, struct genl_info *info)
1489{
1490	struct nfc_dev *dev;
1491	struct se_io_ctx *ctx;
1492	u32 dev_idx, se_idx;
1493	u8 *apdu;
1494	size_t apdu_len;
1495
1496	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1497	    !info->attrs[NFC_ATTR_SE_INDEX] ||
1498	    !info->attrs[NFC_ATTR_SE_APDU])
1499		return -EINVAL;
1500
1501	dev_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1502	se_idx = nla_get_u32(info->attrs[NFC_ATTR_SE_INDEX]);
1503
1504	dev = nfc_get_device(dev_idx);
1505	if (!dev)
1506		return -ENODEV;
1507
1508	if (!dev->ops || !dev->ops->se_io)
1509		return -ENOTSUPP;
1510
1511	apdu_len = nla_len(info->attrs[NFC_ATTR_SE_APDU]);
1512	if (apdu_len == 0)
1513		return -EINVAL;
1514
1515	apdu = nla_data(info->attrs[NFC_ATTR_SE_APDU]);
1516	if (!apdu)
1517		return -EINVAL;
1518
1519	ctx = kzalloc(sizeof(struct se_io_ctx), GFP_KERNEL);
1520	if (!ctx)
1521		return -ENOMEM;
1522
1523	ctx->dev_idx = dev_idx;
1524	ctx->se_idx = se_idx;
1525
1526	return nfc_se_io(dev, se_idx, apdu, apdu_len, se_io_cb, ctx);
1527}
1528
1529static int nfc_genl_vendor_cmd(struct sk_buff *skb,
1530			       struct genl_info *info)
1531{
1532	struct nfc_dev *dev;
1533	struct nfc_vendor_cmd *cmd;
1534	u32 dev_idx, vid, subcmd;
1535	u8 *data;
1536	size_t data_len;
1537	int i, err;
1538
1539	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1540	    !info->attrs[NFC_ATTR_VENDOR_ID] ||
1541	    !info->attrs[NFC_ATTR_VENDOR_SUBCMD])
1542		return -EINVAL;
1543
1544	dev_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1545	vid = nla_get_u32(info->attrs[NFC_ATTR_VENDOR_ID]);
1546	subcmd = nla_get_u32(info->attrs[NFC_ATTR_VENDOR_SUBCMD]);
1547
1548	dev = nfc_get_device(dev_idx);
1549	if (!dev || !dev->vendor_cmds || !dev->n_vendor_cmds)
1550		return -ENODEV;
1551
1552	if (info->attrs[NFC_ATTR_VENDOR_DATA]) {
1553		data = nla_data(info->attrs[NFC_ATTR_VENDOR_DATA]);
1554		data_len = nla_len(info->attrs[NFC_ATTR_VENDOR_DATA]);
1555		if (data_len == 0)
1556			return -EINVAL;
1557	} else {
1558		data = NULL;
1559		data_len = 0;
1560	}
1561
1562	for (i = 0; i < dev->n_vendor_cmds; i++) {
1563		cmd = &dev->vendor_cmds[i];
1564
1565		if (cmd->vendor_id != vid || cmd->subcmd != subcmd)
1566			continue;
1567
1568		dev->cur_cmd_info = info;
1569		err = cmd->doit(dev, data, data_len);
1570		dev->cur_cmd_info = NULL;
1571		return err;
1572	}
1573
1574	return -EOPNOTSUPP;
1575}
1576
1577/* message building helper */
1578static inline void *nfc_hdr_put(struct sk_buff *skb, u32 portid, u32 seq,
1579				int flags, u8 cmd)
1580{
1581	/* since there is no private header just add the generic one */
1582	return genlmsg_put(skb, portid, seq, &nfc_genl_family, flags, cmd);
1583}
1584
1585static struct sk_buff *
1586__nfc_alloc_vendor_cmd_skb(struct nfc_dev *dev, int approxlen,
1587			   u32 portid, u32 seq,
1588			   enum nfc_attrs attr,
1589			   u32 oui, u32 subcmd, gfp_t gfp)
1590{
1591	struct sk_buff *skb;
1592	void *hdr;
1593
1594	skb = nlmsg_new(approxlen + 100, gfp);
1595	if (!skb)
1596		return NULL;
1597
1598	hdr = nfc_hdr_put(skb, portid, seq, 0, NFC_CMD_VENDOR);
1599	if (!hdr) {
1600		kfree_skb(skb);
1601		return NULL;
1602	}
1603
1604	if (nla_put_u32(skb, NFC_ATTR_DEVICE_INDEX, dev->idx))
1605		goto nla_put_failure;
1606	if (nla_put_u32(skb, NFC_ATTR_VENDOR_ID, oui))
1607		goto nla_put_failure;
1608	if (nla_put_u32(skb, NFC_ATTR_VENDOR_SUBCMD, subcmd))
1609		goto nla_put_failure;
1610
1611	((void **)skb->cb)[0] = dev;
1612	((void **)skb->cb)[1] = hdr;
1613
1614	return skb;
1615
1616nla_put_failure:
1617	kfree_skb(skb);
1618	return NULL;
1619}
1620
1621struct sk_buff *__nfc_alloc_vendor_cmd_reply_skb(struct nfc_dev *dev,
1622						 enum nfc_attrs attr,
1623						 u32 oui, u32 subcmd,
1624						 int approxlen)
1625{
1626	if (WARN_ON(!dev->cur_cmd_info))
1627		return NULL;
1628
1629	return __nfc_alloc_vendor_cmd_skb(dev, approxlen,
1630					  dev->cur_cmd_info->snd_portid,
1631					  dev->cur_cmd_info->snd_seq, attr,
1632					  oui, subcmd, GFP_KERNEL);
1633}
1634EXPORT_SYMBOL(__nfc_alloc_vendor_cmd_reply_skb);
1635
1636int nfc_vendor_cmd_reply(struct sk_buff *skb)
1637{
1638	struct nfc_dev *dev = ((void **)skb->cb)[0];
1639	void *hdr = ((void **)skb->cb)[1];
1640
1641	/* clear CB data for netlink core to own from now on */
1642	memset(skb->cb, 0, sizeof(skb->cb));
1643
1644	if (WARN_ON(!dev->cur_cmd_info)) {
1645		kfree_skb(skb);
1646		return -EINVAL;
1647	}
1648
1649	genlmsg_end(skb, hdr);
1650	return genlmsg_reply(skb, dev->cur_cmd_info);
1651}
1652EXPORT_SYMBOL(nfc_vendor_cmd_reply);
1653
1654static const struct genl_ops nfc_genl_ops[] = {
1655	{
1656		.cmd = NFC_CMD_GET_DEVICE,
1657		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1658		.doit = nfc_genl_get_device,
1659		.dumpit = nfc_genl_dump_devices,
1660		.done = nfc_genl_dump_devices_done,
1661	},
1662	{
1663		.cmd = NFC_CMD_DEV_UP,
1664		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1665		.doit = nfc_genl_dev_up,
1666	},
1667	{
1668		.cmd = NFC_CMD_DEV_DOWN,
1669		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1670		.doit = nfc_genl_dev_down,
1671	},
1672	{
1673		.cmd = NFC_CMD_START_POLL,
1674		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1675		.doit = nfc_genl_start_poll,
1676	},
1677	{
1678		.cmd = NFC_CMD_STOP_POLL,
1679		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1680		.doit = nfc_genl_stop_poll,
1681	},
1682	{
1683		.cmd = NFC_CMD_DEP_LINK_UP,
1684		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1685		.doit = nfc_genl_dep_link_up,
1686	},
1687	{
1688		.cmd = NFC_CMD_DEP_LINK_DOWN,
1689		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1690		.doit = nfc_genl_dep_link_down,
1691	},
1692	{
1693		.cmd = NFC_CMD_GET_TARGET,
1694		.validate = GENL_DONT_VALIDATE_STRICT |
1695			    GENL_DONT_VALIDATE_DUMP_STRICT,
1696		.dumpit = nfc_genl_dump_targets,
1697		.done = nfc_genl_dump_targets_done,
1698	},
1699	{
1700		.cmd = NFC_CMD_LLC_GET_PARAMS,
1701		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1702		.doit = nfc_genl_llc_get_params,
1703	},
1704	{
1705		.cmd = NFC_CMD_LLC_SET_PARAMS,
1706		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1707		.doit = nfc_genl_llc_set_params,
1708	},
1709	{
1710		.cmd = NFC_CMD_LLC_SDREQ,
1711		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1712		.doit = nfc_genl_llc_sdreq,
1713	},
1714	{
1715		.cmd = NFC_CMD_FW_DOWNLOAD,
1716		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1717		.doit = nfc_genl_fw_download,
1718	},
1719	{
1720		.cmd = NFC_CMD_ENABLE_SE,
1721		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1722		.doit = nfc_genl_enable_se,
1723	},
1724	{
1725		.cmd = NFC_CMD_DISABLE_SE,
1726		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1727		.doit = nfc_genl_disable_se,
1728	},
1729	{
1730		.cmd = NFC_CMD_GET_SE,
1731		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1732		.dumpit = nfc_genl_dump_ses,
1733		.done = nfc_genl_dump_ses_done,
1734	},
1735	{
1736		.cmd = NFC_CMD_SE_IO,
1737		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1738		.doit = nfc_genl_se_io,
1739	},
1740	{
1741		.cmd = NFC_CMD_ACTIVATE_TARGET,
1742		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1743		.doit = nfc_genl_activate_target,
1744	},
1745	{
1746		.cmd = NFC_CMD_VENDOR,
1747		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1748		.doit = nfc_genl_vendor_cmd,
1749	},
1750	{
1751		.cmd = NFC_CMD_DEACTIVATE_TARGET,
1752		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1753		.doit = nfc_genl_deactivate_target,
1754	},
1755};
1756
1757static struct genl_family nfc_genl_family __ro_after_init = {
1758	.hdrsize = 0,
1759	.name = NFC_GENL_NAME,
1760	.version = NFC_GENL_VERSION,
1761	.maxattr = NFC_ATTR_MAX,
1762	.policy = nfc_genl_policy,
1763	.module = THIS_MODULE,
1764	.ops = nfc_genl_ops,
1765	.n_ops = ARRAY_SIZE(nfc_genl_ops),
1766	.mcgrps = nfc_genl_mcgrps,
1767	.n_mcgrps = ARRAY_SIZE(nfc_genl_mcgrps),
1768};
1769
1770
1771struct urelease_work {
1772	struct	work_struct w;
1773	u32	portid;
1774};
1775
1776static void nfc_urelease_event_work(struct work_struct *work)
1777{
1778	struct urelease_work *w = container_of(work, struct urelease_work, w);
1779	struct class_dev_iter iter;
1780	struct nfc_dev *dev;
1781
1782	pr_debug("portid %d\n", w->portid);
1783
1784	mutex_lock(&nfc_devlist_mutex);
1785
1786	nfc_device_iter_init(&iter);
1787	dev = nfc_device_iter_next(&iter);
1788
1789	while (dev) {
1790		mutex_lock(&dev->genl_data.genl_data_mutex);
1791
1792		if (dev->genl_data.poll_req_portid == w->portid) {
1793			nfc_stop_poll(dev);
1794			dev->genl_data.poll_req_portid = 0;
1795		}
1796
1797		mutex_unlock(&dev->genl_data.genl_data_mutex);
1798
1799		dev = nfc_device_iter_next(&iter);
1800	}
1801
1802	nfc_device_iter_exit(&iter);
1803
1804	mutex_unlock(&nfc_devlist_mutex);
1805
1806	kfree(w);
1807}
1808
1809static int nfc_genl_rcv_nl_event(struct notifier_block *this,
1810				 unsigned long event, void *ptr)
1811{
1812	struct netlink_notify *n = ptr;
1813	struct urelease_work *w;
1814
1815	if (event != NETLINK_URELEASE || n->protocol != NETLINK_GENERIC)
1816		goto out;
1817
1818	pr_debug("NETLINK_URELEASE event from id %d\n", n->portid);
1819
1820	w = kmalloc(sizeof(*w), GFP_ATOMIC);
1821	if (w) {
1822		INIT_WORK((struct work_struct *) w, nfc_urelease_event_work);
1823		w->portid = n->portid;
1824		schedule_work((struct work_struct *) w);
1825	}
1826
1827out:
1828	return NOTIFY_DONE;
1829}
1830
1831void nfc_genl_data_init(struct nfc_genl_data *genl_data)
1832{
1833	genl_data->poll_req_portid = 0;
1834	mutex_init(&genl_data->genl_data_mutex);
1835}
1836
1837void nfc_genl_data_exit(struct nfc_genl_data *genl_data)
1838{
1839	mutex_destroy(&genl_data->genl_data_mutex);
1840}
1841
1842static struct notifier_block nl_notifier = {
1843	.notifier_call  = nfc_genl_rcv_nl_event,
1844};
1845
1846/**
1847 * nfc_genl_init() - Initialize netlink interface
1848 *
1849 * This initialization function registers the nfc netlink family.
1850 */
1851int __init nfc_genl_init(void)
1852{
1853	int rc;
1854
1855	rc = genl_register_family(&nfc_genl_family);
1856	if (rc)
1857		return rc;
1858
1859	netlink_register_notifier(&nl_notifier);
1860
1861	return 0;
1862}
1863
1864/**
1865 * nfc_genl_exit() - Deinitialize netlink interface
1866 *
1867 * This exit function unregisters the nfc netlink family.
1868 */
1869void nfc_genl_exit(void)
1870{
1871	netlink_unregister_notifier(&nl_notifier);
1872	genl_unregister_family(&nfc_genl_family);
1873}
   1/*
   2 * Copyright (C) 2011 Instituto Nokia de Tecnologia
   3 *
   4 * Authors:
   5 *    Lauro Ramos Venancio <lauro.venancio@openbossa.org>
   6 *    Aloisio Almeida Jr <aloisio.almeida@openbossa.org>
   7 *
   8 * Vendor commands implementation based on net/wireless/nl80211.c
   9 * which is:
  10 *
  11 * Copyright 2006-2010	Johannes Berg <johannes@sipsolutions.net>
  12 * Copyright 2013-2014  Intel Mobile Communications GmbH
  13 *
  14 * This program is free software; you can redistribute it and/or modify
  15 * it under the terms of the GNU General Public License as published by
  16 * the Free Software Foundation; either version 2 of the License, or
  17 * (at your option) any later version.
  18 *
  19 * This program is distributed in the hope that it will be useful,
  20 * but WITHOUT ANY WARRANTY; without even the implied warranty of
  21 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  22 * GNU General Public License for more details.
  23 *
  24 * You should have received a copy of the GNU General Public License
  25 * along with this program; if not, see <http://www.gnu.org/licenses/>.
  26 */
  27
  28#define pr_fmt(fmt) KBUILD_MODNAME ": %s: " fmt, __func__
  29
  30#include <net/genetlink.h>
  31#include <linux/nfc.h>
  32#include <linux/slab.h>
  33
  34#include "nfc.h"
  35#include "llcp.h"
  36
  37static const struct genl_multicast_group nfc_genl_mcgrps[] = {
  38	{ .name = NFC_GENL_MCAST_EVENT_NAME, },
  39};
  40
  41static struct genl_family nfc_genl_family;
  42static const struct nla_policy nfc_genl_policy[NFC_ATTR_MAX + 1] = {
  43	[NFC_ATTR_DEVICE_INDEX] = { .type = NLA_U32 },
  44	[NFC_ATTR_DEVICE_NAME] = { .type = NLA_STRING,
  45				.len = NFC_DEVICE_NAME_MAXSIZE },
  46	[NFC_ATTR_PROTOCOLS] = { .type = NLA_U32 },
  47	[NFC_ATTR_COMM_MODE] = { .type = NLA_U8 },
  48	[NFC_ATTR_RF_MODE] = { .type = NLA_U8 },
  49	[NFC_ATTR_DEVICE_POWERED] = { .type = NLA_U8 },
  50	[NFC_ATTR_IM_PROTOCOLS] = { .type = NLA_U32 },
  51	[NFC_ATTR_TM_PROTOCOLS] = { .type = NLA_U32 },
  52	[NFC_ATTR_LLC_PARAM_LTO] = { .type = NLA_U8 },
  53	[NFC_ATTR_LLC_PARAM_RW] = { .type = NLA_U8 },
  54	[NFC_ATTR_LLC_PARAM_MIUX] = { .type = NLA_U16 },
  55	[NFC_ATTR_LLC_SDP] = { .type = NLA_NESTED },
  56	[NFC_ATTR_FIRMWARE_NAME] = { .type = NLA_STRING,
  57				     .len = NFC_FIRMWARE_NAME_MAXSIZE },
  58	[NFC_ATTR_SE_APDU] = { .type = NLA_BINARY },
  59	[NFC_ATTR_VENDOR_DATA] = { .type = NLA_BINARY },
  60
  61};
  62
  63static const struct nla_policy nfc_sdp_genl_policy[NFC_SDP_ATTR_MAX + 1] = {
  64	[NFC_SDP_ATTR_URI] = { .type = NLA_STRING,
  65			       .len = U8_MAX - 4 },
  66	[NFC_SDP_ATTR_SAP] = { .type = NLA_U8 },
  67};
  68
  69static int nfc_genl_send_target(struct sk_buff *msg, struct nfc_target *target,
  70				struct netlink_callback *cb, int flags)
  71{
  72	void *hdr;
  73
  74	hdr = genlmsg_put(msg, NETLINK_CB(cb->skb).portid, cb->nlh->nlmsg_seq,
  75			  &nfc_genl_family, flags, NFC_CMD_GET_TARGET);
  76	if (!hdr)
  77		return -EMSGSIZE;
  78
  79	genl_dump_check_consistent(cb, hdr);
  80
  81	if (nla_put_u32(msg, NFC_ATTR_TARGET_INDEX, target->idx) ||
  82	    nla_put_u32(msg, NFC_ATTR_PROTOCOLS, target->supported_protocols) ||
  83	    nla_put_u16(msg, NFC_ATTR_TARGET_SENS_RES, target->sens_res) ||
  84	    nla_put_u8(msg, NFC_ATTR_TARGET_SEL_RES, target->sel_res))
  85		goto nla_put_failure;
  86	if (target->nfcid1_len > 0 &&
  87	    nla_put(msg, NFC_ATTR_TARGET_NFCID1, target->nfcid1_len,
  88		    target->nfcid1))
  89		goto nla_put_failure;
  90	if (target->sensb_res_len > 0 &&
  91	    nla_put(msg, NFC_ATTR_TARGET_SENSB_RES, target->sensb_res_len,
  92		    target->sensb_res))
  93		goto nla_put_failure;
  94	if (target->sensf_res_len > 0 &&
  95	    nla_put(msg, NFC_ATTR_TARGET_SENSF_RES, target->sensf_res_len,
  96		    target->sensf_res))
  97		goto nla_put_failure;
  98
  99	if (target->is_iso15693) {
 100		if (nla_put_u8(msg, NFC_ATTR_TARGET_ISO15693_DSFID,
 101			       target->iso15693_dsfid) ||
 102		    nla_put(msg, NFC_ATTR_TARGET_ISO15693_UID,
 103			    sizeof(target->iso15693_uid), target->iso15693_uid))
 104			goto nla_put_failure;
 105	}
 106
 107	genlmsg_end(msg, hdr);
 108	return 0;
 109
 110nla_put_failure:
 111	genlmsg_cancel(msg, hdr);
 112	return -EMSGSIZE;
 113}
 114
 115static struct nfc_dev *__get_device_from_cb(struct netlink_callback *cb)
 116{
 117	struct nlattr **attrbuf = genl_family_attrbuf(&nfc_genl_family);
 118	struct nfc_dev *dev;
 119	int rc;
 120	u32 idx;
 121
 122	rc = nlmsg_parse(cb->nlh, GENL_HDRLEN + nfc_genl_family.hdrsize,
 123			 attrbuf, nfc_genl_family.maxattr, nfc_genl_policy,
 124			 NULL);
 125	if (rc < 0)
 126		return ERR_PTR(rc);
 127
 128	if (!attrbuf[NFC_ATTR_DEVICE_INDEX])
 129		return ERR_PTR(-EINVAL);
 130
 131	idx = nla_get_u32(attrbuf[NFC_ATTR_DEVICE_INDEX]);
 132
 133	dev = nfc_get_device(idx);
 134	if (!dev)
 135		return ERR_PTR(-ENODEV);
 136
 137	return dev;
 138}
 139
 140static int nfc_genl_dump_targets(struct sk_buff *skb,
 141				 struct netlink_callback *cb)
 142{
 143	int i = cb->args[0];
 144	struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
 145	int rc;
 146
 147	if (!dev) {
 148		dev = __get_device_from_cb(cb);
 149		if (IS_ERR(dev))
 150			return PTR_ERR(dev);
 151
 152		cb->args[1] = (long) dev;
 153	}
 154
 155	device_lock(&dev->dev);
 156
 157	cb->seq = dev->targets_generation;
 158
 159	while (i < dev->n_targets) {
 160		rc = nfc_genl_send_target(skb, &dev->targets[i], cb,
 161					  NLM_F_MULTI);
 162		if (rc < 0)
 163			break;
 164
 165		i++;
 166	}
 167
 168	device_unlock(&dev->dev);
 169
 170	cb->args[0] = i;
 171
 172	return skb->len;
 173}
 174
 175static int nfc_genl_dump_targets_done(struct netlink_callback *cb)
 176{
 177	struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
 178
 179	if (dev)
 180		nfc_put_device(dev);
 181
 182	return 0;
 183}
 184
 185int nfc_genl_targets_found(struct nfc_dev *dev)
 186{
 187	struct sk_buff *msg;
 188	void *hdr;
 189
 190	dev->genl_data.poll_req_portid = 0;
 191
 192	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
 193	if (!msg)
 194		return -ENOMEM;
 195
 196	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 197			  NFC_EVENT_TARGETS_FOUND);
 198	if (!hdr)
 199		goto free_msg;
 200
 201	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 202		goto nla_put_failure;
 203
 204	genlmsg_end(msg, hdr);
 205
 206	return genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
 207
 208nla_put_failure:
 209	genlmsg_cancel(msg, hdr);
 210free_msg:
 211	nlmsg_free(msg);
 212	return -EMSGSIZE;
 213}
 214
 215int nfc_genl_target_lost(struct nfc_dev *dev, u32 target_idx)
 216{
 217	struct sk_buff *msg;
 218	void *hdr;
 219
 220	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 221	if (!msg)
 222		return -ENOMEM;
 223
 224	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 225			  NFC_EVENT_TARGET_LOST);
 226	if (!hdr)
 227		goto free_msg;
 228
 229	if (nla_put_string(msg, NFC_ATTR_DEVICE_NAME, nfc_device_name(dev)) ||
 230	    nla_put_u32(msg, NFC_ATTR_TARGET_INDEX, target_idx))
 231		goto nla_put_failure;
 232
 233	genlmsg_end(msg, hdr);
 234
 235	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 236
 237	return 0;
 238
 239nla_put_failure:
 240	genlmsg_cancel(msg, hdr);
 241free_msg:
 242	nlmsg_free(msg);
 243	return -EMSGSIZE;
 244}
 245
 246int nfc_genl_tm_activated(struct nfc_dev *dev, u32 protocol)
 247{
 248	struct sk_buff *msg;
 249	void *hdr;
 250
 251	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 252	if (!msg)
 253		return -ENOMEM;
 254
 255	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 256			  NFC_EVENT_TM_ACTIVATED);
 257	if (!hdr)
 258		goto free_msg;
 259
 260	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 261		goto nla_put_failure;
 262	if (nla_put_u32(msg, NFC_ATTR_TM_PROTOCOLS, protocol))
 263		goto nla_put_failure;
 264
 265	genlmsg_end(msg, hdr);
 266
 267	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 268
 269	return 0;
 270
 271nla_put_failure:
 272	genlmsg_cancel(msg, hdr);
 273free_msg:
 274	nlmsg_free(msg);
 275	return -EMSGSIZE;
 276}
 277
 278int nfc_genl_tm_deactivated(struct nfc_dev *dev)
 279{
 280	struct sk_buff *msg;
 281	void *hdr;
 282
 283	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 284	if (!msg)
 285		return -ENOMEM;
 286
 287	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 288			  NFC_EVENT_TM_DEACTIVATED);
 289	if (!hdr)
 290		goto free_msg;
 291
 292	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 293		goto nla_put_failure;
 294
 295	genlmsg_end(msg, hdr);
 296
 297	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 298
 299	return 0;
 300
 301nla_put_failure:
 302	genlmsg_cancel(msg, hdr);
 303free_msg:
 304	nlmsg_free(msg);
 305	return -EMSGSIZE;
 306}
 307
 308static int nfc_genl_setup_device_added(struct nfc_dev *dev, struct sk_buff *msg)
 309{
 310	if (nla_put_string(msg, NFC_ATTR_DEVICE_NAME, nfc_device_name(dev)) ||
 311	    nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
 312	    nla_put_u32(msg, NFC_ATTR_PROTOCOLS, dev->supported_protocols) ||
 313	    nla_put_u8(msg, NFC_ATTR_DEVICE_POWERED, dev->dev_up) ||
 314	    nla_put_u8(msg, NFC_ATTR_RF_MODE, dev->rf_mode))
 315		return -1;
 316	return 0;
 317}
 318
 319int nfc_genl_device_added(struct nfc_dev *dev)
 320{
 321	struct sk_buff *msg;
 322	void *hdr;
 323
 324	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 325	if (!msg)
 326		return -ENOMEM;
 327
 328	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 329			  NFC_EVENT_DEVICE_ADDED);
 330	if (!hdr)
 331		goto free_msg;
 332
 333	if (nfc_genl_setup_device_added(dev, msg))
 334		goto nla_put_failure;
 335
 336	genlmsg_end(msg, hdr);
 337
 338	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 339
 340	return 0;
 341
 342nla_put_failure:
 343	genlmsg_cancel(msg, hdr);
 344free_msg:
 345	nlmsg_free(msg);
 346	return -EMSGSIZE;
 347}
 348
 349int nfc_genl_device_removed(struct nfc_dev *dev)
 350{
 351	struct sk_buff *msg;
 352	void *hdr;
 353
 354	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 355	if (!msg)
 356		return -ENOMEM;
 357
 358	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 359			  NFC_EVENT_DEVICE_REMOVED);
 360	if (!hdr)
 361		goto free_msg;
 362
 363	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 364		goto nla_put_failure;
 365
 366	genlmsg_end(msg, hdr);
 367
 368	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 369
 370	return 0;
 371
 372nla_put_failure:
 373	genlmsg_cancel(msg, hdr);
 374free_msg:
 375	nlmsg_free(msg);
 376	return -EMSGSIZE;
 377}
 378
 379int nfc_genl_llc_send_sdres(struct nfc_dev *dev, struct hlist_head *sdres_list)
 380{
 381	struct sk_buff *msg;
 382	struct nlattr *sdp_attr, *uri_attr;
 383	struct nfc_llcp_sdp_tlv *sdres;
 384	struct hlist_node *n;
 385	void *hdr;
 386	int rc = -EMSGSIZE;
 387	int i;
 388
 389	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 390	if (!msg)
 391		return -ENOMEM;
 392
 393	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 394			  NFC_EVENT_LLC_SDRES);
 395	if (!hdr)
 396		goto free_msg;
 397
 398	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 399		goto nla_put_failure;
 400
 401	sdp_attr = nla_nest_start(msg, NFC_ATTR_LLC_SDP);
 402	if (sdp_attr == NULL) {
 403		rc = -ENOMEM;
 404		goto nla_put_failure;
 405	}
 406
 407	i = 1;
 408	hlist_for_each_entry_safe(sdres, n, sdres_list, node) {
 409		pr_debug("uri: %s, sap: %d\n", sdres->uri, sdres->sap);
 410
 411		uri_attr = nla_nest_start(msg, i++);
 412		if (uri_attr == NULL) {
 413			rc = -ENOMEM;
 414			goto nla_put_failure;
 415		}
 416
 417		if (nla_put_u8(msg, NFC_SDP_ATTR_SAP, sdres->sap))
 418			goto nla_put_failure;
 419
 420		if (nla_put_string(msg, NFC_SDP_ATTR_URI, sdres->uri))
 421			goto nla_put_failure;
 422
 423		nla_nest_end(msg, uri_attr);
 424
 425		hlist_del(&sdres->node);
 426
 427		nfc_llcp_free_sdp_tlv(sdres);
 428	}
 429
 430	nla_nest_end(msg, sdp_attr);
 431
 432	genlmsg_end(msg, hdr);
 433
 434	return genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
 435
 436nla_put_failure:
 437	genlmsg_cancel(msg, hdr);
 438
 439free_msg:
 440	nlmsg_free(msg);
 441
 442	nfc_llcp_free_sdp_tlv_list(sdres_list);
 443
 444	return rc;
 445}
 446
 447int nfc_genl_se_added(struct nfc_dev *dev, u32 se_idx, u16 type)
 448{
 449	struct sk_buff *msg;
 450	void *hdr;
 451
 452	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 453	if (!msg)
 454		return -ENOMEM;
 455
 456	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 457			  NFC_EVENT_SE_ADDED);
 458	if (!hdr)
 459		goto free_msg;
 460
 461	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
 462	    nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx) ||
 463	    nla_put_u8(msg, NFC_ATTR_SE_TYPE, type))
 464		goto nla_put_failure;
 465
 466	genlmsg_end(msg, hdr);
 467
 468	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 469
 470	return 0;
 471
 472nla_put_failure:
 473	genlmsg_cancel(msg, hdr);
 474free_msg:
 475	nlmsg_free(msg);
 476	return -EMSGSIZE;
 477}
 478
 479int nfc_genl_se_removed(struct nfc_dev *dev, u32 se_idx)
 480{
 481	struct sk_buff *msg;
 482	void *hdr;
 483
 484	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 485	if (!msg)
 486		return -ENOMEM;
 487
 488	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 489			  NFC_EVENT_SE_REMOVED);
 490	if (!hdr)
 491		goto free_msg;
 492
 493	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
 494	    nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx))
 495		goto nla_put_failure;
 496
 497	genlmsg_end(msg, hdr);
 498
 499	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 500
 501	return 0;
 502
 503nla_put_failure:
 504	genlmsg_cancel(msg, hdr);
 505free_msg:
 506	nlmsg_free(msg);
 507	return -EMSGSIZE;
 508}
 509
 510int nfc_genl_se_transaction(struct nfc_dev *dev, u8 se_idx,
 511			    struct nfc_evt_transaction *evt_transaction)
 512{
 513	struct nfc_se *se;
 514	struct sk_buff *msg;
 515	void *hdr;
 516
 517	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 518	if (!msg)
 519		return -ENOMEM;
 520
 521	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 522			  NFC_EVENT_SE_TRANSACTION);
 523	if (!hdr)
 524		goto free_msg;
 525
 526	se = nfc_find_se(dev, se_idx);
 527	if (!se)
 528		goto free_msg;
 529
 530	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
 531	    nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx) ||
 532	    nla_put_u8(msg, NFC_ATTR_SE_TYPE, se->type) ||
 533	    nla_put(msg, NFC_ATTR_SE_AID, evt_transaction->aid_len,
 534		    evt_transaction->aid) ||
 535	    nla_put(msg, NFC_ATTR_SE_PARAMS, evt_transaction->params_len,
 536		    evt_transaction->params))
 537		goto nla_put_failure;
 538
 539	/* evt_transaction is no more used */
 540	devm_kfree(&dev->dev, evt_transaction);
 541
 542	genlmsg_end(msg, hdr);
 543
 544	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 545
 546	return 0;
 547
 548nla_put_failure:
 549	genlmsg_cancel(msg, hdr);
 550free_msg:
 551	/* evt_transaction is no more used */
 552	devm_kfree(&dev->dev, evt_transaction);
 553	nlmsg_free(msg);
 554	return -EMSGSIZE;
 555}
 556
 557int nfc_genl_se_connectivity(struct nfc_dev *dev, u8 se_idx)
 558{
 559	struct nfc_se *se;
 560	struct sk_buff *msg;
 561	void *hdr;
 562
 563	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 564	if (!msg)
 565		return -ENOMEM;
 566
 567	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 568			  NFC_EVENT_SE_CONNECTIVITY);
 569	if (!hdr)
 570		goto free_msg;
 571
 572	se = nfc_find_se(dev, se_idx);
 573	if (!se)
 574		goto free_msg;
 575
 576	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
 577	    nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx) ||
 578	    nla_put_u8(msg, NFC_ATTR_SE_TYPE, se->type))
 579		goto nla_put_failure;
 580
 581	genlmsg_end(msg, hdr);
 582
 583	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 584
 585	return 0;
 586
 587nla_put_failure:
 588	genlmsg_cancel(msg, hdr);
 589free_msg:
 590	nlmsg_free(msg);
 591	return -EMSGSIZE;
 592}
 593
 594static int nfc_genl_send_device(struct sk_buff *msg, struct nfc_dev *dev,
 595				u32 portid, u32 seq,
 596				struct netlink_callback *cb,
 597				int flags)
 598{
 599	void *hdr;
 600
 601	hdr = genlmsg_put(msg, portid, seq, &nfc_genl_family, flags,
 602			  NFC_CMD_GET_DEVICE);
 603	if (!hdr)
 604		return -EMSGSIZE;
 605
 606	if (cb)
 607		genl_dump_check_consistent(cb, hdr);
 608
 609	if (nfc_genl_setup_device_added(dev, msg))
 610		goto nla_put_failure;
 611
 612	genlmsg_end(msg, hdr);
 613	return 0;
 614
 615nla_put_failure:
 616	genlmsg_cancel(msg, hdr);
 617	return -EMSGSIZE;
 618}
 619
 620static int nfc_genl_dump_devices(struct sk_buff *skb,
 621				 struct netlink_callback *cb)
 622{
 623	struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
 624	struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
 625	bool first_call = false;
 626
 627	if (!iter) {
 628		first_call = true;
 629		iter = kmalloc(sizeof(struct class_dev_iter), GFP_KERNEL);
 630		if (!iter)
 631			return -ENOMEM;
 632		cb->args[0] = (long) iter;
 633	}
 634
 635	mutex_lock(&nfc_devlist_mutex);
 636
 637	cb->seq = nfc_devlist_generation;
 638
 639	if (first_call) {
 640		nfc_device_iter_init(iter);
 641		dev = nfc_device_iter_next(iter);
 642	}
 643
 644	while (dev) {
 645		int rc;
 646
 647		rc = nfc_genl_send_device(skb, dev, NETLINK_CB(cb->skb).portid,
 648					  cb->nlh->nlmsg_seq, cb, NLM_F_MULTI);
 649		if (rc < 0)
 650			break;
 651
 652		dev = nfc_device_iter_next(iter);
 653	}
 654
 655	mutex_unlock(&nfc_devlist_mutex);
 656
 657	cb->args[1] = (long) dev;
 658
 659	return skb->len;
 660}
 661
 662static int nfc_genl_dump_devices_done(struct netlink_callback *cb)
 663{
 664	struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
 665
 666	nfc_device_iter_exit(iter);
 667	kfree(iter);
 668
 669	return 0;
 670}
 671
 672int nfc_genl_dep_link_up_event(struct nfc_dev *dev, u32 target_idx,
 673			       u8 comm_mode, u8 rf_mode)
 674{
 675	struct sk_buff *msg;
 676	void *hdr;
 677
 678	pr_debug("DEP link is up\n");
 679
 680	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
 681	if (!msg)
 682		return -ENOMEM;
 683
 684	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0, NFC_CMD_DEP_LINK_UP);
 685	if (!hdr)
 686		goto free_msg;
 687
 688	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 689		goto nla_put_failure;
 690	if (rf_mode == NFC_RF_INITIATOR &&
 691	    nla_put_u32(msg, NFC_ATTR_TARGET_INDEX, target_idx))
 692		goto nla_put_failure;
 693	if (nla_put_u8(msg, NFC_ATTR_COMM_MODE, comm_mode) ||
 694	    nla_put_u8(msg, NFC_ATTR_RF_MODE, rf_mode))
 695		goto nla_put_failure;
 696
 697	genlmsg_end(msg, hdr);
 698
 699	dev->dep_link_up = true;
 700
 701	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
 702
 703	return 0;
 704
 705nla_put_failure:
 706	genlmsg_cancel(msg, hdr);
 707free_msg:
 708	nlmsg_free(msg);
 709	return -EMSGSIZE;
 710}
 711
 712int nfc_genl_dep_link_down_event(struct nfc_dev *dev)
 713{
 714	struct sk_buff *msg;
 715	void *hdr;
 716
 717	pr_debug("DEP link is down\n");
 718
 719	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
 720	if (!msg)
 721		return -ENOMEM;
 722
 723	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 724			  NFC_CMD_DEP_LINK_DOWN);
 725	if (!hdr)
 726		goto free_msg;
 727
 728	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 729		goto nla_put_failure;
 730
 731	genlmsg_end(msg, hdr);
 732
 733	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
 734
 735	return 0;
 736
 737nla_put_failure:
 738	genlmsg_cancel(msg, hdr);
 739free_msg:
 740	nlmsg_free(msg);
 741	return -EMSGSIZE;
 742}
 743
 744static int nfc_genl_get_device(struct sk_buff *skb, struct genl_info *info)
 745{
 746	struct sk_buff *msg;
 747	struct nfc_dev *dev;
 748	u32 idx;
 749	int rc = -ENOBUFS;
 750
 751	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
 752		return -EINVAL;
 753
 754	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 755
 756	dev = nfc_get_device(idx);
 757	if (!dev)
 758		return -ENODEV;
 759
 760	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 761	if (!msg) {
 762		rc = -ENOMEM;
 763		goto out_putdev;
 764	}
 765
 766	rc = nfc_genl_send_device(msg, dev, info->snd_portid, info->snd_seq,
 767				  NULL, 0);
 768	if (rc < 0)
 769		goto out_free;
 770
 771	nfc_put_device(dev);
 772
 773	return genlmsg_reply(msg, info);
 774
 775out_free:
 776	nlmsg_free(msg);
 777out_putdev:
 778	nfc_put_device(dev);
 779	return rc;
 780}
 781
 782static int nfc_genl_dev_up(struct sk_buff *skb, struct genl_info *info)
 783{
 784	struct nfc_dev *dev;
 785	int rc;
 786	u32 idx;
 787
 788	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
 789		return -EINVAL;
 790
 791	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 792
 793	dev = nfc_get_device(idx);
 794	if (!dev)
 795		return -ENODEV;
 796
 797	rc = nfc_dev_up(dev);
 798
 799	nfc_put_device(dev);
 800	return rc;
 801}
 802
 803static int nfc_genl_dev_down(struct sk_buff *skb, struct genl_info *info)
 804{
 805	struct nfc_dev *dev;
 806	int rc;
 807	u32 idx;
 808
 809	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
 810		return -EINVAL;
 811
 812	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 813
 814	dev = nfc_get_device(idx);
 815	if (!dev)
 816		return -ENODEV;
 817
 818	rc = nfc_dev_down(dev);
 819
 820	nfc_put_device(dev);
 821	return rc;
 822}
 823
 824static int nfc_genl_start_poll(struct sk_buff *skb, struct genl_info *info)
 825{
 826	struct nfc_dev *dev;
 827	int rc;
 828	u32 idx;
 829	u32 im_protocols = 0, tm_protocols = 0;
 830
 831	pr_debug("Poll start\n");
 832
 833	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
 834	    ((!info->attrs[NFC_ATTR_IM_PROTOCOLS] &&
 835	      !info->attrs[NFC_ATTR_PROTOCOLS]) &&
 836	      !info->attrs[NFC_ATTR_TM_PROTOCOLS]))
 837		return -EINVAL;
 838
 839	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 840
 841	if (info->attrs[NFC_ATTR_TM_PROTOCOLS])
 842		tm_protocols = nla_get_u32(info->attrs[NFC_ATTR_TM_PROTOCOLS]);
 843
 844	if (info->attrs[NFC_ATTR_IM_PROTOCOLS])
 845		im_protocols = nla_get_u32(info->attrs[NFC_ATTR_IM_PROTOCOLS]);
 846	else if (info->attrs[NFC_ATTR_PROTOCOLS])
 847		im_protocols = nla_get_u32(info->attrs[NFC_ATTR_PROTOCOLS]);
 848
 849	dev = nfc_get_device(idx);
 850	if (!dev)
 851		return -ENODEV;
 852
 853	mutex_lock(&dev->genl_data.genl_data_mutex);
 854
 855	rc = nfc_start_poll(dev, im_protocols, tm_protocols);
 856	if (!rc)
 857		dev->genl_data.poll_req_portid = info->snd_portid;
 858
 859	mutex_unlock(&dev->genl_data.genl_data_mutex);
 860
 861	nfc_put_device(dev);
 862	return rc;
 863}
 864
 865static int nfc_genl_stop_poll(struct sk_buff *skb, struct genl_info *info)
 866{
 867	struct nfc_dev *dev;
 868	int rc;
 869	u32 idx;
 870
 871	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
 872		return -EINVAL;
 873
 874	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 875
 876	dev = nfc_get_device(idx);
 877	if (!dev)
 878		return -ENODEV;
 879
 880	device_lock(&dev->dev);
 881
 882	if (!dev->polling) {
 883		device_unlock(&dev->dev);
 884		return -EINVAL;
 885	}
 886
 887	device_unlock(&dev->dev);
 888
 889	mutex_lock(&dev->genl_data.genl_data_mutex);
 890
 891	if (dev->genl_data.poll_req_portid != info->snd_portid) {
 892		rc = -EBUSY;
 893		goto out;
 894	}
 895
 896	rc = nfc_stop_poll(dev);
 897	dev->genl_data.poll_req_portid = 0;
 898
 899out:
 900	mutex_unlock(&dev->genl_data.genl_data_mutex);
 901	nfc_put_device(dev);
 902	return rc;
 903}
 904
 905static int nfc_genl_activate_target(struct sk_buff *skb, struct genl_info *info)
 906{
 907	struct nfc_dev *dev;
 908	u32 device_idx, target_idx, protocol;
 909	int rc;
 910
 911	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
 912	    !info->attrs[NFC_ATTR_TARGET_INDEX] ||
 913	    !info->attrs[NFC_ATTR_PROTOCOLS])
 914		return -EINVAL;
 915
 916	device_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 917
 918	dev = nfc_get_device(device_idx);
 919	if (!dev)
 920		return -ENODEV;
 921
 922	target_idx = nla_get_u32(info->attrs[NFC_ATTR_TARGET_INDEX]);
 923	protocol = nla_get_u32(info->attrs[NFC_ATTR_PROTOCOLS]);
 924
 925	nfc_deactivate_target(dev, target_idx, NFC_TARGET_MODE_SLEEP);
 926	rc = nfc_activate_target(dev, target_idx, protocol);
 927
 928	nfc_put_device(dev);
 929	return rc;
 930}
 931
 932static int nfc_genl_deactivate_target(struct sk_buff *skb,
 933				      struct genl_info *info)
 934{
 935	struct nfc_dev *dev;
 936	u32 device_idx, target_idx;
 937	int rc;
 938
 939	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
 940		return -EINVAL;
 941
 942	device_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 943
 944	dev = nfc_get_device(device_idx);
 945	if (!dev)
 946		return -ENODEV;
 947
 948	target_idx = nla_get_u32(info->attrs[NFC_ATTR_TARGET_INDEX]);
 949
 950	rc = nfc_deactivate_target(dev, target_idx, NFC_TARGET_MODE_SLEEP);
 951
 952	nfc_put_device(dev);
 953	return rc;
 954}
 955
 956static int nfc_genl_dep_link_up(struct sk_buff *skb, struct genl_info *info)
 957{
 958	struct nfc_dev *dev;
 959	int rc, tgt_idx;
 960	u32 idx;
 961	u8 comm;
 962
 963	pr_debug("DEP link up\n");
 964
 965	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
 966	    !info->attrs[NFC_ATTR_COMM_MODE])
 967		return -EINVAL;
 968
 969	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 970	if (!info->attrs[NFC_ATTR_TARGET_INDEX])
 971		tgt_idx = NFC_TARGET_IDX_ANY;
 972	else
 973		tgt_idx = nla_get_u32(info->attrs[NFC_ATTR_TARGET_INDEX]);
 974
 975	comm = nla_get_u8(info->attrs[NFC_ATTR_COMM_MODE]);
 976
 977	if (comm != NFC_COMM_ACTIVE && comm != NFC_COMM_PASSIVE)
 978		return -EINVAL;
 979
 980	dev = nfc_get_device(idx);
 981	if (!dev)
 982		return -ENODEV;
 983
 984	rc = nfc_dep_link_up(dev, tgt_idx, comm);
 985
 986	nfc_put_device(dev);
 987
 988	return rc;
 989}
 990
 991static int nfc_genl_dep_link_down(struct sk_buff *skb, struct genl_info *info)
 992{
 993	struct nfc_dev *dev;
 994	int rc;
 995	u32 idx;
 996
 997	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
 998		return -EINVAL;
 999
1000	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1001
1002	dev = nfc_get_device(idx);
1003	if (!dev)
1004		return -ENODEV;
1005
1006	rc = nfc_dep_link_down(dev);
1007
1008	nfc_put_device(dev);
1009	return rc;
1010}
1011
1012static int nfc_genl_send_params(struct sk_buff *msg,
1013				struct nfc_llcp_local *local,
1014				u32 portid, u32 seq)
1015{
1016	void *hdr;
1017
1018	hdr = genlmsg_put(msg, portid, seq, &nfc_genl_family, 0,
1019			  NFC_CMD_LLC_GET_PARAMS);
1020	if (!hdr)
1021		return -EMSGSIZE;
1022
1023	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, local->dev->idx) ||
1024	    nla_put_u8(msg, NFC_ATTR_LLC_PARAM_LTO, local->lto) ||
1025	    nla_put_u8(msg, NFC_ATTR_LLC_PARAM_RW, local->rw) ||
1026	    nla_put_u16(msg, NFC_ATTR_LLC_PARAM_MIUX, be16_to_cpu(local->miux)))
1027		goto nla_put_failure;
1028
1029	genlmsg_end(msg, hdr);
1030	return 0;
1031
1032nla_put_failure:
1033
1034	genlmsg_cancel(msg, hdr);
1035	return -EMSGSIZE;
1036}
1037
1038static int nfc_genl_llc_get_params(struct sk_buff *skb, struct genl_info *info)
1039{
1040	struct nfc_dev *dev;
1041	struct nfc_llcp_local *local;
1042	int rc = 0;
1043	struct sk_buff *msg = NULL;
1044	u32 idx;
1045
1046	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
1047		return -EINVAL;
1048
1049	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1050
1051	dev = nfc_get_device(idx);
1052	if (!dev)
1053		return -ENODEV;
1054
1055	device_lock(&dev->dev);
1056
1057	local = nfc_llcp_find_local(dev);
1058	if (!local) {
1059		rc = -ENODEV;
1060		goto exit;
1061	}
1062
1063	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
1064	if (!msg) {
1065		rc = -ENOMEM;
1066		goto exit;
1067	}
1068
1069	rc = nfc_genl_send_params(msg, local, info->snd_portid, info->snd_seq);
1070
1071exit:
1072	device_unlock(&dev->dev);
1073
1074	nfc_put_device(dev);
1075
1076	if (rc < 0) {
1077		if (msg)
1078			nlmsg_free(msg);
1079
1080		return rc;
1081	}
1082
1083	return genlmsg_reply(msg, info);
1084}
1085
1086static int nfc_genl_llc_set_params(struct sk_buff *skb, struct genl_info *info)
1087{
1088	struct nfc_dev *dev;
1089	struct nfc_llcp_local *local;
1090	u8 rw = 0;
1091	u16 miux = 0;
1092	u32 idx;
1093	int rc = 0;
1094
1095	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1096	    (!info->attrs[NFC_ATTR_LLC_PARAM_LTO] &&
1097	     !info->attrs[NFC_ATTR_LLC_PARAM_RW] &&
1098	     !info->attrs[NFC_ATTR_LLC_PARAM_MIUX]))
1099		return -EINVAL;
1100
1101	if (info->attrs[NFC_ATTR_LLC_PARAM_RW]) {
1102		rw = nla_get_u8(info->attrs[NFC_ATTR_LLC_PARAM_RW]);
1103
1104		if (rw > LLCP_MAX_RW)
1105			return -EINVAL;
1106	}
1107
1108	if (info->attrs[NFC_ATTR_LLC_PARAM_MIUX]) {
1109		miux = nla_get_u16(info->attrs[NFC_ATTR_LLC_PARAM_MIUX]);
1110
1111		if (miux > LLCP_MAX_MIUX)
1112			return -EINVAL;
1113	}
1114
1115	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1116
1117	dev = nfc_get_device(idx);
1118	if (!dev)
1119		return -ENODEV;
1120
1121	device_lock(&dev->dev);
1122
1123	local = nfc_llcp_find_local(dev);
1124	if (!local) {
1125		nfc_put_device(dev);
1126		rc = -ENODEV;
1127		goto exit;
1128	}
1129
1130	if (info->attrs[NFC_ATTR_LLC_PARAM_LTO]) {
1131		if (dev->dep_link_up) {
1132			rc = -EINPROGRESS;
1133			goto exit;
1134		}
1135
1136		local->lto = nla_get_u8(info->attrs[NFC_ATTR_LLC_PARAM_LTO]);
1137	}
1138
1139	if (info->attrs[NFC_ATTR_LLC_PARAM_RW])
1140		local->rw = rw;
1141
1142	if (info->attrs[NFC_ATTR_LLC_PARAM_MIUX])
1143		local->miux = cpu_to_be16(miux);
1144
1145exit:
1146	device_unlock(&dev->dev);
1147
1148	nfc_put_device(dev);
1149
1150	return rc;
1151}
1152
1153static int nfc_genl_llc_sdreq(struct sk_buff *skb, struct genl_info *info)
1154{
1155	struct nfc_dev *dev;
1156	struct nfc_llcp_local *local;
1157	struct nlattr *attr, *sdp_attrs[NFC_SDP_ATTR_MAX+1];
1158	u32 idx;
1159	u8 tid;
1160	char *uri;
1161	int rc = 0, rem;
1162	size_t uri_len, tlvs_len;
1163	struct hlist_head sdreq_list;
1164	struct nfc_llcp_sdp_tlv *sdreq;
1165
1166	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1167	    !info->attrs[NFC_ATTR_LLC_SDP])
1168		return -EINVAL;
1169
1170	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1171
1172	dev = nfc_get_device(idx);
1173	if (!dev)
1174		return -ENODEV;
1175
1176	device_lock(&dev->dev);
1177
1178	if (dev->dep_link_up == false) {
1179		rc = -ENOLINK;
1180		goto exit;
1181	}
1182
1183	local = nfc_llcp_find_local(dev);
1184	if (!local) {
1185		nfc_put_device(dev);
1186		rc = -ENODEV;
1187		goto exit;
1188	}
1189
1190	INIT_HLIST_HEAD(&sdreq_list);
1191
1192	tlvs_len = 0;
1193
1194	nla_for_each_nested(attr, info->attrs[NFC_ATTR_LLC_SDP], rem) {
1195		rc = nla_parse_nested(sdp_attrs, NFC_SDP_ATTR_MAX, attr,
1196				      nfc_sdp_genl_policy, info->extack);
1197
1198		if (rc != 0) {
1199			rc = -EINVAL;
1200			goto exit;
1201		}
1202
1203		if (!sdp_attrs[NFC_SDP_ATTR_URI])
1204			continue;
1205
1206		uri_len = nla_len(sdp_attrs[NFC_SDP_ATTR_URI]);
1207		if (uri_len == 0)
1208			continue;
1209
1210		uri = nla_data(sdp_attrs[NFC_SDP_ATTR_URI]);
1211		if (uri == NULL || *uri == 0)
1212			continue;
1213
1214		tid = local->sdreq_next_tid++;
1215
1216		sdreq = nfc_llcp_build_sdreq_tlv(tid, uri, uri_len);
1217		if (sdreq == NULL) {
1218			rc = -ENOMEM;
1219			goto exit;
1220		}
1221
1222		tlvs_len += sdreq->tlv_len;
1223
1224		hlist_add_head(&sdreq->node, &sdreq_list);
1225	}
1226
1227	if (hlist_empty(&sdreq_list)) {
1228		rc = -EINVAL;
1229		goto exit;
1230	}
1231
1232	rc = nfc_llcp_send_snl_sdreq(local, &sdreq_list, tlvs_len);
1233exit:
1234	device_unlock(&dev->dev);
1235
1236	nfc_put_device(dev);
1237
1238	return rc;
1239}
1240
1241static int nfc_genl_fw_download(struct sk_buff *skb, struct genl_info *info)
1242{
1243	struct nfc_dev *dev;
1244	int rc;
1245	u32 idx;
1246	char firmware_name[NFC_FIRMWARE_NAME_MAXSIZE + 1];
1247
1248	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
1249		return -EINVAL;
1250
1251	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1252
1253	dev = nfc_get_device(idx);
1254	if (!dev)
1255		return -ENODEV;
1256
1257	nla_strlcpy(firmware_name, info->attrs[NFC_ATTR_FIRMWARE_NAME],
1258		    sizeof(firmware_name));
1259
1260	rc = nfc_fw_download(dev, firmware_name);
1261
1262	nfc_put_device(dev);
1263	return rc;
1264}
1265
1266int nfc_genl_fw_download_done(struct nfc_dev *dev, const char *firmware_name,
1267			      u32 result)
1268{
1269	struct sk_buff *msg;
1270	void *hdr;
1271
1272	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
1273	if (!msg)
1274		return -ENOMEM;
1275
1276	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
1277			  NFC_CMD_FW_DOWNLOAD);
1278	if (!hdr)
1279		goto free_msg;
1280
1281	if (nla_put_string(msg, NFC_ATTR_FIRMWARE_NAME, firmware_name) ||
1282	    nla_put_u32(msg, NFC_ATTR_FIRMWARE_DOWNLOAD_STATUS, result) ||
1283	    nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
1284		goto nla_put_failure;
1285
1286	genlmsg_end(msg, hdr);
1287
1288	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
1289
1290	return 0;
1291
1292nla_put_failure:
1293	genlmsg_cancel(msg, hdr);
1294free_msg:
1295	nlmsg_free(msg);
1296	return -EMSGSIZE;
1297}
1298
1299static int nfc_genl_enable_se(struct sk_buff *skb, struct genl_info *info)
1300{
1301	struct nfc_dev *dev;
1302	int rc;
1303	u32 idx, se_idx;
1304
1305	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1306	    !info->attrs[NFC_ATTR_SE_INDEX])
1307		return -EINVAL;
1308
1309	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1310	se_idx = nla_get_u32(info->attrs[NFC_ATTR_SE_INDEX]);
1311
1312	dev = nfc_get_device(idx);
1313	if (!dev)
1314		return -ENODEV;
1315
1316	rc = nfc_enable_se(dev, se_idx);
1317
1318	nfc_put_device(dev);
1319	return rc;
1320}
1321
1322static int nfc_genl_disable_se(struct sk_buff *skb, struct genl_info *info)
1323{
1324	struct nfc_dev *dev;
1325	int rc;
1326	u32 idx, se_idx;
1327
1328	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1329	    !info->attrs[NFC_ATTR_SE_INDEX])
1330		return -EINVAL;
1331
1332	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1333	se_idx = nla_get_u32(info->attrs[NFC_ATTR_SE_INDEX]);
1334
1335	dev = nfc_get_device(idx);
1336	if (!dev)
1337		return -ENODEV;
1338
1339	rc = nfc_disable_se(dev, se_idx);
1340
1341	nfc_put_device(dev);
1342	return rc;
1343}
1344
1345static int nfc_genl_send_se(struct sk_buff *msg, struct nfc_dev *dev,
1346				u32 portid, u32 seq,
1347				struct netlink_callback *cb,
1348				int flags)
1349{
1350	void *hdr;
1351	struct nfc_se *se, *n;
1352
1353	list_for_each_entry_safe(se, n, &dev->secure_elements, list) {
1354		hdr = genlmsg_put(msg, portid, seq, &nfc_genl_family, flags,
1355				  NFC_CMD_GET_SE);
1356		if (!hdr)
1357			goto nla_put_failure;
1358
1359		if (cb)
1360			genl_dump_check_consistent(cb, hdr);
1361
1362		if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
1363		    nla_put_u32(msg, NFC_ATTR_SE_INDEX, se->idx) ||
1364		    nla_put_u8(msg, NFC_ATTR_SE_TYPE, se->type))
1365			goto nla_put_failure;
1366
1367		genlmsg_end(msg, hdr);
1368	}
1369
1370	return 0;
1371
1372nla_put_failure:
1373	genlmsg_cancel(msg, hdr);
1374	return -EMSGSIZE;
1375}
1376
1377static int nfc_genl_dump_ses(struct sk_buff *skb,
1378				 struct netlink_callback *cb)
1379{
1380	struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
1381	struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
1382	bool first_call = false;
1383
1384	if (!iter) {
1385		first_call = true;
1386		iter = kmalloc(sizeof(struct class_dev_iter), GFP_KERNEL);
1387		if (!iter)
1388			return -ENOMEM;
1389		cb->args[0] = (long) iter;
1390	}
1391
1392	mutex_lock(&nfc_devlist_mutex);
1393
1394	cb->seq = nfc_devlist_generation;
1395
1396	if (first_call) {
1397		nfc_device_iter_init(iter);
1398		dev = nfc_device_iter_next(iter);
1399	}
1400
1401	while (dev) {
1402		int rc;
1403
1404		rc = nfc_genl_send_se(skb, dev, NETLINK_CB(cb->skb).portid,
1405					  cb->nlh->nlmsg_seq, cb, NLM_F_MULTI);
1406		if (rc < 0)
1407			break;
1408
1409		dev = nfc_device_iter_next(iter);
1410	}
1411
1412	mutex_unlock(&nfc_devlist_mutex);
1413
1414	cb->args[1] = (long) dev;
1415
1416	return skb->len;
1417}
1418
1419static int nfc_genl_dump_ses_done(struct netlink_callback *cb)
1420{
1421	struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
1422
1423	nfc_device_iter_exit(iter);
1424	kfree(iter);
1425
1426	return 0;
1427}
1428
1429static int nfc_se_io(struct nfc_dev *dev, u32 se_idx,
1430		     u8 *apdu, size_t apdu_length,
1431		     se_io_cb_t cb, void *cb_context)
1432{
1433	struct nfc_se *se;
1434	int rc;
1435
1436	pr_debug("%s se index %d\n", dev_name(&dev->dev), se_idx);
1437
1438	device_lock(&dev->dev);
1439
1440	if (!device_is_registered(&dev->dev)) {
1441		rc = -ENODEV;
1442		goto error;
1443	}
1444
1445	if (!dev->dev_up) {
1446		rc = -ENODEV;
1447		goto error;
1448	}
1449
1450	if (!dev->ops->se_io) {
1451		rc = -EOPNOTSUPP;
1452		goto error;
1453	}
1454
1455	se = nfc_find_se(dev, se_idx);
1456	if (!se) {
1457		rc = -EINVAL;
1458		goto error;
1459	}
1460
1461	if (se->state != NFC_SE_ENABLED) {
1462		rc = -ENODEV;
1463		goto error;
1464	}
1465
1466	rc = dev->ops->se_io(dev, se_idx, apdu,
1467			apdu_length, cb, cb_context);
1468
1469error:
1470	device_unlock(&dev->dev);
1471	return rc;
1472}
1473
1474struct se_io_ctx {
1475	u32 dev_idx;
1476	u32 se_idx;
1477};
1478
1479static void se_io_cb(void *context, u8 *apdu, size_t apdu_len, int err)
1480{
1481	struct se_io_ctx *ctx = context;
1482	struct sk_buff *msg;
1483	void *hdr;
1484
1485	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
1486	if (!msg) {
1487		kfree(ctx);
1488		return;
1489	}
1490
1491	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
1492			  NFC_CMD_SE_IO);
1493	if (!hdr)
1494		goto free_msg;
1495
1496	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, ctx->dev_idx) ||
1497	    nla_put_u32(msg, NFC_ATTR_SE_INDEX, ctx->se_idx) ||
1498	    nla_put(msg, NFC_ATTR_SE_APDU, apdu_len, apdu))
1499		goto nla_put_failure;
1500
1501	genlmsg_end(msg, hdr);
1502
1503	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
1504
1505	kfree(ctx);
1506
1507	return;
1508
1509nla_put_failure:
1510	genlmsg_cancel(msg, hdr);
1511free_msg:
1512	nlmsg_free(msg);
1513	kfree(ctx);
1514
1515	return;
1516}
1517
1518static int nfc_genl_se_io(struct sk_buff *skb, struct genl_info *info)
1519{
1520	struct nfc_dev *dev;
1521	struct se_io_ctx *ctx;
1522	u32 dev_idx, se_idx;
1523	u8 *apdu;
1524	size_t apdu_len;
1525
1526	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1527	    !info->attrs[NFC_ATTR_SE_INDEX] ||
1528	    !info->attrs[NFC_ATTR_SE_APDU])
1529		return -EINVAL;
1530
1531	dev_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1532	se_idx = nla_get_u32(info->attrs[NFC_ATTR_SE_INDEX]);
1533
1534	dev = nfc_get_device(dev_idx);
1535	if (!dev)
1536		return -ENODEV;
1537
1538	if (!dev->ops || !dev->ops->se_io)
1539		return -ENOTSUPP;
1540
1541	apdu_len = nla_len(info->attrs[NFC_ATTR_SE_APDU]);
1542	if (apdu_len == 0)
1543		return -EINVAL;
1544
1545	apdu = nla_data(info->attrs[NFC_ATTR_SE_APDU]);
1546	if (!apdu)
1547		return -EINVAL;
1548
1549	ctx = kzalloc(sizeof(struct se_io_ctx), GFP_KERNEL);
1550	if (!ctx)
1551		return -ENOMEM;
1552
1553	ctx->dev_idx = dev_idx;
1554	ctx->se_idx = se_idx;
1555
1556	return nfc_se_io(dev, se_idx, apdu, apdu_len, se_io_cb, ctx);
1557}
1558
1559static int nfc_genl_vendor_cmd(struct sk_buff *skb,
1560			       struct genl_info *info)
1561{
1562	struct nfc_dev *dev;
1563	struct nfc_vendor_cmd *cmd;
1564	u32 dev_idx, vid, subcmd;
1565	u8 *data;
1566	size_t data_len;
1567	int i, err;
1568
1569	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1570	    !info->attrs[NFC_ATTR_VENDOR_ID] ||
1571	    !info->attrs[NFC_ATTR_VENDOR_SUBCMD])
1572		return -EINVAL;
1573
1574	dev_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1575	vid = nla_get_u32(info->attrs[NFC_ATTR_VENDOR_ID]);
1576	subcmd = nla_get_u32(info->attrs[NFC_ATTR_VENDOR_SUBCMD]);
1577
1578	dev = nfc_get_device(dev_idx);
1579	if (!dev || !dev->vendor_cmds || !dev->n_vendor_cmds)
1580		return -ENODEV;
1581
1582	if (info->attrs[NFC_ATTR_VENDOR_DATA]) {
1583		data = nla_data(info->attrs[NFC_ATTR_VENDOR_DATA]);
1584		data_len = nla_len(info->attrs[NFC_ATTR_VENDOR_DATA]);
1585		if (data_len == 0)
1586			return -EINVAL;
1587	} else {
1588		data = NULL;
1589		data_len = 0;
1590	}
1591
1592	for (i = 0; i < dev->n_vendor_cmds; i++) {
1593		cmd = &dev->vendor_cmds[i];
1594
1595		if (cmd->vendor_id != vid || cmd->subcmd != subcmd)
1596			continue;
1597
1598		dev->cur_cmd_info = info;
1599		err = cmd->doit(dev, data, data_len);
1600		dev->cur_cmd_info = NULL;
1601		return err;
1602	}
1603
1604	return -EOPNOTSUPP;
1605}
1606
1607/* message building helper */
1608static inline void *nfc_hdr_put(struct sk_buff *skb, u32 portid, u32 seq,
1609				int flags, u8 cmd)
1610{
1611	/* since there is no private header just add the generic one */
1612	return genlmsg_put(skb, portid, seq, &nfc_genl_family, flags, cmd);
1613}
1614
1615static struct sk_buff *
1616__nfc_alloc_vendor_cmd_skb(struct nfc_dev *dev, int approxlen,
1617			   u32 portid, u32 seq,
1618			   enum nfc_attrs attr,
1619			   u32 oui, u32 subcmd, gfp_t gfp)
1620{
1621	struct sk_buff *skb;
1622	void *hdr;
1623
1624	skb = nlmsg_new(approxlen + 100, gfp);
1625	if (!skb)
1626		return NULL;
1627
1628	hdr = nfc_hdr_put(skb, portid, seq, 0, NFC_CMD_VENDOR);
1629	if (!hdr) {
1630		kfree_skb(skb);
1631		return NULL;
1632	}
1633
1634	if (nla_put_u32(skb, NFC_ATTR_DEVICE_INDEX, dev->idx))
1635		goto nla_put_failure;
1636	if (nla_put_u32(skb, NFC_ATTR_VENDOR_ID, oui))
1637		goto nla_put_failure;
1638	if (nla_put_u32(skb, NFC_ATTR_VENDOR_SUBCMD, subcmd))
1639		goto nla_put_failure;
1640
1641	((void **)skb->cb)[0] = dev;
1642	((void **)skb->cb)[1] = hdr;
1643
1644	return skb;
1645
1646nla_put_failure:
1647	kfree_skb(skb);
1648	return NULL;
1649}
1650
1651struct sk_buff *__nfc_alloc_vendor_cmd_reply_skb(struct nfc_dev *dev,
1652						 enum nfc_attrs attr,
1653						 u32 oui, u32 subcmd,
1654						 int approxlen)
1655{
1656	if (WARN_ON(!dev->cur_cmd_info))
1657		return NULL;
1658
1659	return __nfc_alloc_vendor_cmd_skb(dev, approxlen,
1660					  dev->cur_cmd_info->snd_portid,
1661					  dev->cur_cmd_info->snd_seq, attr,
1662					  oui, subcmd, GFP_KERNEL);
1663}
1664EXPORT_SYMBOL(__nfc_alloc_vendor_cmd_reply_skb);
1665
1666int nfc_vendor_cmd_reply(struct sk_buff *skb)
1667{
1668	struct nfc_dev *dev = ((void **)skb->cb)[0];
1669	void *hdr = ((void **)skb->cb)[1];
1670
1671	/* clear CB data for netlink core to own from now on */
1672	memset(skb->cb, 0, sizeof(skb->cb));
1673
1674	if (WARN_ON(!dev->cur_cmd_info)) {
1675		kfree_skb(skb);
1676		return -EINVAL;
1677	}
1678
1679	genlmsg_end(skb, hdr);
1680	return genlmsg_reply(skb, dev->cur_cmd_info);
1681}
1682EXPORT_SYMBOL(nfc_vendor_cmd_reply);
1683
1684static const struct genl_ops nfc_genl_ops[] = {
1685	{
1686		.cmd = NFC_CMD_GET_DEVICE,
1687		.doit = nfc_genl_get_device,
1688		.dumpit = nfc_genl_dump_devices,
1689		.done = nfc_genl_dump_devices_done,
1690		.policy = nfc_genl_policy,
1691	},
1692	{
1693		.cmd = NFC_CMD_DEV_UP,
1694		.doit = nfc_genl_dev_up,
1695		.policy = nfc_genl_policy,
1696	},
1697	{
1698		.cmd = NFC_CMD_DEV_DOWN,
1699		.doit = nfc_genl_dev_down,
1700		.policy = nfc_genl_policy,
1701	},
1702	{
1703		.cmd = NFC_CMD_START_POLL,
1704		.doit = nfc_genl_start_poll,
1705		.policy = nfc_genl_policy,
1706	},
1707	{
1708		.cmd = NFC_CMD_STOP_POLL,
1709		.doit = nfc_genl_stop_poll,
1710		.policy = nfc_genl_policy,
1711	},
1712	{
1713		.cmd = NFC_CMD_DEP_LINK_UP,
1714		.doit = nfc_genl_dep_link_up,
1715		.policy = nfc_genl_policy,
1716	},
1717	{
1718		.cmd = NFC_CMD_DEP_LINK_DOWN,
1719		.doit = nfc_genl_dep_link_down,
1720		.policy = nfc_genl_policy,
1721	},
1722	{
1723		.cmd = NFC_CMD_GET_TARGET,
1724		.dumpit = nfc_genl_dump_targets,
1725		.done = nfc_genl_dump_targets_done,
1726		.policy = nfc_genl_policy,
1727	},
1728	{
1729		.cmd = NFC_CMD_LLC_GET_PARAMS,
1730		.doit = nfc_genl_llc_get_params,
1731		.policy = nfc_genl_policy,
1732	},
1733	{
1734		.cmd = NFC_CMD_LLC_SET_PARAMS,
1735		.doit = nfc_genl_llc_set_params,
1736		.policy = nfc_genl_policy,
1737	},
1738	{
1739		.cmd = NFC_CMD_LLC_SDREQ,
1740		.doit = nfc_genl_llc_sdreq,
1741		.policy = nfc_genl_policy,
1742	},
1743	{
1744		.cmd = NFC_CMD_FW_DOWNLOAD,
1745		.doit = nfc_genl_fw_download,
1746		.policy = nfc_genl_policy,
1747	},
1748	{
1749		.cmd = NFC_CMD_ENABLE_SE,
1750		.doit = nfc_genl_enable_se,
1751		.policy = nfc_genl_policy,
1752	},
1753	{
1754		.cmd = NFC_CMD_DISABLE_SE,
1755		.doit = nfc_genl_disable_se,
1756		.policy = nfc_genl_policy,
1757	},
1758	{
1759		.cmd = NFC_CMD_GET_SE,
1760		.dumpit = nfc_genl_dump_ses,
1761		.done = nfc_genl_dump_ses_done,
1762		.policy = nfc_genl_policy,
1763	},
1764	{
1765		.cmd = NFC_CMD_SE_IO,
1766		.doit = nfc_genl_se_io,
1767		.policy = nfc_genl_policy,
1768	},
1769	{
1770		.cmd = NFC_CMD_ACTIVATE_TARGET,
1771		.doit = nfc_genl_activate_target,
1772		.policy = nfc_genl_policy,
1773	},
1774	{
1775		.cmd = NFC_CMD_VENDOR,
1776		.doit = nfc_genl_vendor_cmd,
1777		.policy = nfc_genl_policy,
1778	},
1779	{
1780		.cmd = NFC_CMD_DEACTIVATE_TARGET,
1781		.doit = nfc_genl_deactivate_target,
1782		.policy = nfc_genl_policy,
1783	},
1784};
1785
1786static struct genl_family nfc_genl_family __ro_after_init = {
1787	.hdrsize = 0,
1788	.name = NFC_GENL_NAME,
1789	.version = NFC_GENL_VERSION,
1790	.maxattr = NFC_ATTR_MAX,
1791	.module = THIS_MODULE,
1792	.ops = nfc_genl_ops,
1793	.n_ops = ARRAY_SIZE(nfc_genl_ops),
1794	.mcgrps = nfc_genl_mcgrps,
1795	.n_mcgrps = ARRAY_SIZE(nfc_genl_mcgrps),
1796};
1797
1798
1799struct urelease_work {
1800	struct	work_struct w;
1801	u32	portid;
1802};
1803
1804static void nfc_urelease_event_work(struct work_struct *work)
1805{
1806	struct urelease_work *w = container_of(work, struct urelease_work, w);
1807	struct class_dev_iter iter;
1808	struct nfc_dev *dev;
1809
1810	pr_debug("portid %d\n", w->portid);
1811
1812	mutex_lock(&nfc_devlist_mutex);
1813
1814	nfc_device_iter_init(&iter);
1815	dev = nfc_device_iter_next(&iter);
1816
1817	while (dev) {
1818		mutex_lock(&dev->genl_data.genl_data_mutex);
1819
1820		if (dev->genl_data.poll_req_portid == w->portid) {
1821			nfc_stop_poll(dev);
1822			dev->genl_data.poll_req_portid = 0;
1823		}
1824
1825		mutex_unlock(&dev->genl_data.genl_data_mutex);
1826
1827		dev = nfc_device_iter_next(&iter);
1828	}
1829
1830	nfc_device_iter_exit(&iter);
1831
1832	mutex_unlock(&nfc_devlist_mutex);
1833
1834	kfree(w);
1835}
1836
1837static int nfc_genl_rcv_nl_event(struct notifier_block *this,
1838				 unsigned long event, void *ptr)
1839{
1840	struct netlink_notify *n = ptr;
1841	struct urelease_work *w;
1842
1843	if (event != NETLINK_URELEASE || n->protocol != NETLINK_GENERIC)
1844		goto out;
1845
1846	pr_debug("NETLINK_URELEASE event from id %d\n", n->portid);
1847
1848	w = kmalloc(sizeof(*w), GFP_ATOMIC);
1849	if (w) {
1850		INIT_WORK((struct work_struct *) w, nfc_urelease_event_work);
1851		w->portid = n->portid;
1852		schedule_work((struct work_struct *) w);
1853	}
1854
1855out:
1856	return NOTIFY_DONE;
1857}
1858
1859void nfc_genl_data_init(struct nfc_genl_data *genl_data)
1860{
1861	genl_data->poll_req_portid = 0;
1862	mutex_init(&genl_data->genl_data_mutex);
1863}
1864
1865void nfc_genl_data_exit(struct nfc_genl_data *genl_data)
1866{
1867	mutex_destroy(&genl_data->genl_data_mutex);
1868}
1869
1870static struct notifier_block nl_notifier = {
1871	.notifier_call  = nfc_genl_rcv_nl_event,
1872};
1873
1874/**
1875 * nfc_genl_init() - Initialize netlink interface
1876 *
1877 * This initialization function registers the nfc netlink family.
1878 */
1879int __init nfc_genl_init(void)
1880{
1881	int rc;
1882
1883	rc = genl_register_family(&nfc_genl_family);
1884	if (rc)
1885		return rc;
1886
1887	netlink_register_notifier(&nl_notifier);
1888
1889	return 0;
1890}
1891
1892/**
1893 * nfc_genl_exit() - Deinitialize netlink interface
1894 *
1895 * This exit function unregisters the nfc netlink family.
1896 */
1897void nfc_genl_exit(void)
1898{
1899	netlink_unregister_notifier(&nl_notifier);
1900	genl_unregister_family(&nfc_genl_family);
1901}