1 // SPDX-License-Identifier: GPL-2.0-or-later 2 /* 3 * Copyright (C) 2011 Intel Corporation. All rights reserved. 4 */ 5 6 #define pr_fmt(fmt) "llcp: %s: " fmt, __func__ 7 8 #include <linux/init.h> 9 #include <linux/kernel.h> 10 #include <linux/module.h> 11 #include <linux/nfc.h> 12 #include <linux/sched/signal.h> 13 14 #include "nfc.h" 15 #include "llcp.h" 16 17 static int sock_wait_state(struct sock *sk, int state, unsigned long timeo) 18 { 19 DECLARE_WAITQUEUE(wait, current); 20 int err = 0; 21 22 pr_debug("sk %p", sk); 23 24 add_wait_queue(sk_sleep(sk), &wait); 25 set_current_state(TASK_INTERRUPTIBLE); 26 27 while (sk->sk_state != state) { 28 if (!timeo) { 29 err = -EINPROGRESS; 30 break; 31 } 32 33 if (signal_pending(current)) { 34 err = sock_intr_errno(timeo); 35 break; 36 } 37 38 release_sock(sk); 39 timeo = schedule_timeout(timeo); 40 lock_sock(sk); 41 set_current_state(TASK_INTERRUPTIBLE); 42 43 err = sock_error(sk); 44 if (err) 45 break; 46 } 47 48 __set_current_state(TASK_RUNNING); 49 remove_wait_queue(sk_sleep(sk), &wait); 50 return err; 51 } 52 53 static struct proto llcp_sock_proto = { 54 .name = "NFC_LLCP", 55 .owner = THIS_MODULE, 56 .obj_size = sizeof(struct nfc_llcp_sock), 57 }; 58 59 static int llcp_sock_bind(struct socket *sock, struct sockaddr *addr, int alen) 60 { 61 struct sock *sk = sock->sk; 62 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk); 63 struct nfc_llcp_local *local; 64 struct nfc_dev *dev; 65 struct sockaddr_nfc_llcp llcp_addr; 66 int len, ret = 0; 67 68 if (!addr || alen < offsetofend(struct sockaddr, sa_family) || 69 addr->sa_family != AF_NFC) 70 return -EINVAL; 71 72 pr_debug("sk %p addr %p family %d\n", sk, addr, addr->sa_family); 73 74 memset(&llcp_addr, 0, sizeof(llcp_addr)); 75 len = min_t(unsigned int, sizeof(llcp_addr), alen); 76 memcpy(&llcp_addr, addr, len); 77 78 /* This is going to be a listening socket, dsap must be 0 */ 79 if (llcp_addr.dsap != 0) 80 return -EINVAL; 81 82 lock_sock(sk); 83 84 if (sk->sk_state != LLCP_CLOSED) { 85 ret = -EBADFD; 86 goto error; 87 } 88 89 dev = nfc_get_device(llcp_addr.dev_idx); 90 if (dev == NULL) { 91 ret = -ENODEV; 92 goto error; 93 } 94 95 local = nfc_llcp_find_local(dev); 96 if (local == NULL) { 97 ret = -ENODEV; 98 goto put_dev; 99 } 100 101 llcp_sock->dev = dev; 102 llcp_sock->local = nfc_llcp_local_get(local); 103 llcp_sock->nfc_protocol = llcp_addr.nfc_protocol; 104 llcp_sock->service_name_len = min_t(unsigned int, 105 llcp_addr.service_name_len, 106 NFC_LLCP_MAX_SERVICE_NAME); 107 llcp_sock->service_name = kmemdup(llcp_addr.service_name, 108 llcp_sock->service_name_len, 109 GFP_KERNEL); 110 if (!llcp_sock->service_name) { 111 ret = -ENOMEM; 112 goto put_dev; 113 } 114 llcp_sock->ssap = nfc_llcp_get_sdp_ssap(local, llcp_sock); 115 if (llcp_sock->ssap == LLCP_SAP_MAX) { 116 kfree(llcp_sock->service_name); 117 llcp_sock->service_name = NULL; 118 ret = -EADDRINUSE; 119 goto put_dev; 120 } 121 122 llcp_sock->reserved_ssap = llcp_sock->ssap; 123 124 nfc_llcp_sock_link(&local->sockets, sk); 125 126 pr_debug("Socket bound to SAP %d\n", llcp_sock->ssap); 127 128 sk->sk_state = LLCP_BOUND; 129 130 put_dev: 131 nfc_put_device(dev); 132 133 error: 134 release_sock(sk); 135 return ret; 136 } 137 138 static int llcp_raw_sock_bind(struct socket *sock, struct sockaddr *addr, 139 int alen) 140 { 141 struct sock *sk = sock->sk; 142 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk); 143 struct nfc_llcp_local *local; 144 struct nfc_dev *dev; 145 struct sockaddr_nfc_llcp llcp_addr; 146 int len, ret = 0; 147 148 if (!addr || alen < offsetofend(struct sockaddr, sa_family) || 149 addr->sa_family != AF_NFC) 150 return -EINVAL; 151 152 pr_debug("sk %p addr %p family %d\n", sk, addr, addr->sa_family); 153 154 memset(&llcp_addr, 0, sizeof(llcp_addr)); 155 len = min_t(unsigned int, sizeof(llcp_addr), alen); 156 memcpy(&llcp_addr, addr, len); 157 158 lock_sock(sk); 159 160 if (sk->sk_state != LLCP_CLOSED) { 161 ret = -EBADFD; 162 goto error; 163 } 164 165 dev = nfc_get_device(llcp_addr.dev_idx); 166 if (dev == NULL) { 167 ret = -ENODEV; 168 goto error; 169 } 170 171 local = nfc_llcp_find_local(dev); 172 if (local == NULL) { 173 ret = -ENODEV; 174 goto put_dev; 175 } 176 177 llcp_sock->dev = dev; 178 llcp_sock->local = nfc_llcp_local_get(local); 179 llcp_sock->nfc_protocol = llcp_addr.nfc_protocol; 180 181 nfc_llcp_sock_link(&local->raw_sockets, sk); 182 183 sk->sk_state = LLCP_BOUND; 184 185 put_dev: 186 nfc_put_device(dev); 187 188 error: 189 release_sock(sk); 190 return ret; 191 } 192 193 static int llcp_sock_listen(struct socket *sock, int backlog) 194 { 195 struct sock *sk = sock->sk; 196 int ret = 0; 197 198 pr_debug("sk %p backlog %d\n", sk, backlog); 199 200 lock_sock(sk); 201 202 if ((sock->type != SOCK_SEQPACKET && sock->type != SOCK_STREAM) || 203 sk->sk_state != LLCP_BOUND) { 204 ret = -EBADFD; 205 goto error; 206 } 207 208 sk->sk_max_ack_backlog = backlog; 209 sk->sk_ack_backlog = 0; 210 211 pr_debug("Socket listening\n"); 212 sk->sk_state = LLCP_LISTEN; 213 214 error: 215 release_sock(sk); 216 217 return ret; 218 } 219 220 static int nfc_llcp_setsockopt(struct socket *sock, int level, int optname, 221 char __user *optval, unsigned int optlen) 222 { 223 struct sock *sk = sock->sk; 224 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk); 225 u32 opt; 226 int err = 0; 227 228 pr_debug("%p optname %d\n", sk, optname); 229 230 if (level != SOL_NFC) 231 return -ENOPROTOOPT; 232 233 lock_sock(sk); 234 235 switch (optname) { 236 case NFC_LLCP_RW: 237 if (sk->sk_state == LLCP_CONNECTED || 238 sk->sk_state == LLCP_BOUND || 239 sk->sk_state == LLCP_LISTEN) { 240 err = -EINVAL; 241 break; 242 } 243 244 if (get_user(opt, (u32 __user *) optval)) { 245 err = -EFAULT; 246 break; 247 } 248 249 if (opt > LLCP_MAX_RW) { 250 err = -EINVAL; 251 break; 252 } 253 254 llcp_sock->rw = (u8) opt; 255 256 break; 257 258 case NFC_LLCP_MIUX: 259 if (sk->sk_state == LLCP_CONNECTED || 260 sk->sk_state == LLCP_BOUND || 261 sk->sk_state == LLCP_LISTEN) { 262 err = -EINVAL; 263 break; 264 } 265 266 if (get_user(opt, (u32 __user *) optval)) { 267 err = -EFAULT; 268 break; 269 } 270 271 if (opt > LLCP_MAX_MIUX) { 272 err = -EINVAL; 273 break; 274 } 275 276 llcp_sock->miux = cpu_to_be16((u16) opt); 277 278 break; 279 280 default: 281 err = -ENOPROTOOPT; 282 break; 283 } 284 285 release_sock(sk); 286 287 pr_debug("%p rw %d miux %d\n", llcp_sock, 288 llcp_sock->rw, llcp_sock->miux); 289 290 return err; 291 } 292 293 static int nfc_llcp_getsockopt(struct socket *sock, int level, int optname, 294 char __user *optval, int __user *optlen) 295 { 296 struct nfc_llcp_local *local; 297 struct sock *sk = sock->sk; 298 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk); 299 int len, err = 0; 300 u16 miux, remote_miu; 301 u8 rw; 302 303 pr_debug("%p optname %d\n", sk, optname); 304 305 if (level != SOL_NFC) 306 return -ENOPROTOOPT; 307 308 if (get_user(len, optlen)) 309 return -EFAULT; 310 311 local = llcp_sock->local; 312 if (!local) 313 return -ENODEV; 314 315 len = min_t(u32, len, sizeof(u32)); 316 317 lock_sock(sk); 318 319 switch (optname) { 320 case NFC_LLCP_RW: 321 rw = llcp_sock->rw > LLCP_MAX_RW ? local->rw : llcp_sock->rw; 322 if (put_user(rw, (u32 __user *) optval)) 323 err = -EFAULT; 324 325 break; 326 327 case NFC_LLCP_MIUX: 328 miux = be16_to_cpu(llcp_sock->miux) > LLCP_MAX_MIUX ? 329 be16_to_cpu(local->miux) : be16_to_cpu(llcp_sock->miux); 330 331 if (put_user(miux, (u32 __user *) optval)) 332 err = -EFAULT; 333 334 break; 335 336 case NFC_LLCP_REMOTE_MIU: 337 remote_miu = llcp_sock->remote_miu > LLCP_MAX_MIU ? 338 local->remote_miu : llcp_sock->remote_miu; 339 340 if (put_user(remote_miu, (u32 __user *) optval)) 341 err = -EFAULT; 342 343 break; 344 345 case NFC_LLCP_REMOTE_LTO: 346 if (put_user(local->remote_lto / 10, (u32 __user *) optval)) 347 err = -EFAULT; 348 349 break; 350 351 case NFC_LLCP_REMOTE_RW: 352 if (put_user(llcp_sock->remote_rw, (u32 __user *) optval)) 353 err = -EFAULT; 354 355 break; 356 357 default: 358 err = -ENOPROTOOPT; 359 break; 360 } 361 362 release_sock(sk); 363 364 if (put_user(len, optlen)) 365 return -EFAULT; 366 367 return err; 368 } 369 370 void nfc_llcp_accept_unlink(struct sock *sk) 371 { 372 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk); 373 374 pr_debug("state %d\n", sk->sk_state); 375 376 list_del_init(&llcp_sock->accept_queue); 377 sk_acceptq_removed(llcp_sock->parent); 378 llcp_sock->parent = NULL; 379 380 sock_put(sk); 381 } 382 383 void nfc_llcp_accept_enqueue(struct sock *parent, struct sock *sk) 384 { 385 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk); 386 struct nfc_llcp_sock *llcp_sock_parent = nfc_llcp_sock(parent); 387 388 /* Lock will be free from unlink */ 389 sock_hold(sk); 390 391 list_add_tail(&llcp_sock->accept_queue, 392 &llcp_sock_parent->accept_queue); 393 llcp_sock->parent = parent; 394 sk_acceptq_added(parent); 395 } 396 397 struct sock *nfc_llcp_accept_dequeue(struct sock *parent, 398 struct socket *newsock) 399 { 400 struct nfc_llcp_sock *lsk, *n, *llcp_parent; 401 struct sock *sk; 402 403 llcp_parent = nfc_llcp_sock(parent); 404 405 list_for_each_entry_safe(lsk, n, &llcp_parent->accept_queue, 406 accept_queue) { 407 sk = &lsk->sk; 408 lock_sock(sk); 409 410 if (sk->sk_state == LLCP_CLOSED) { 411 release_sock(sk); 412 nfc_llcp_accept_unlink(sk); 413 continue; 414 } 415 416 if (sk->sk_state == LLCP_CONNECTED || !newsock) { 417 list_del_init(&lsk->accept_queue); 418 sock_put(sk); 419 420 if (newsock) 421 sock_graft(sk, newsock); 422 423 release_sock(sk); 424 425 pr_debug("Returning sk state %d\n", sk->sk_state); 426 427 sk_acceptq_removed(parent); 428 429 return sk; 430 } 431 432 release_sock(sk); 433 } 434 435 return NULL; 436 } 437 438 static int llcp_sock_accept(struct socket *sock, struct socket *newsock, 439 int flags, bool kern) 440 { 441 DECLARE_WAITQUEUE(wait, current); 442 struct sock *sk = sock->sk, *new_sk; 443 long timeo; 444 int ret = 0; 445 446 pr_debug("parent %p\n", sk); 447 448 lock_sock_nested(sk, SINGLE_DEPTH_NESTING); 449 450 if (sk->sk_state != LLCP_LISTEN) { 451 ret = -EBADFD; 452 goto error; 453 } 454 455 timeo = sock_rcvtimeo(sk, flags & O_NONBLOCK); 456 457 /* Wait for an incoming connection. */ 458 add_wait_queue_exclusive(sk_sleep(sk), &wait); 459 while (!(new_sk = nfc_llcp_accept_dequeue(sk, newsock))) { 460 set_current_state(TASK_INTERRUPTIBLE); 461 462 if (!timeo) { 463 ret = -EAGAIN; 464 break; 465 } 466 467 if (signal_pending(current)) { 468 ret = sock_intr_errno(timeo); 469 break; 470 } 471 472 release_sock(sk); 473 timeo = schedule_timeout(timeo); 474 lock_sock_nested(sk, SINGLE_DEPTH_NESTING); 475 } 476 __set_current_state(TASK_RUNNING); 477 remove_wait_queue(sk_sleep(sk), &wait); 478 479 if (ret) 480 goto error; 481 482 newsock->state = SS_CONNECTED; 483 484 pr_debug("new socket %p\n", new_sk); 485 486 error: 487 release_sock(sk); 488 489 return ret; 490 } 491 492 static int llcp_sock_getname(struct socket *sock, struct sockaddr *uaddr, 493 int peer) 494 { 495 struct sock *sk = sock->sk; 496 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk); 497 DECLARE_SOCKADDR(struct sockaddr_nfc_llcp *, llcp_addr, uaddr); 498 499 if (llcp_sock == NULL || llcp_sock->dev == NULL) 500 return -EBADFD; 501 502 pr_debug("%p %d %d %d\n", sk, llcp_sock->target_idx, 503 llcp_sock->dsap, llcp_sock->ssap); 504 505 memset(llcp_addr, 0, sizeof(*llcp_addr)); 506 507 lock_sock(sk); 508 if (!llcp_sock->dev) { 509 release_sock(sk); 510 return -EBADFD; 511 } 512 llcp_addr->sa_family = AF_NFC; 513 llcp_addr->dev_idx = llcp_sock->dev->idx; 514 llcp_addr->target_idx = llcp_sock->target_idx; 515 llcp_addr->nfc_protocol = llcp_sock->nfc_protocol; 516 llcp_addr->dsap = llcp_sock->dsap; 517 llcp_addr->ssap = llcp_sock->ssap; 518 llcp_addr->service_name_len = llcp_sock->service_name_len; 519 memcpy(llcp_addr->service_name, llcp_sock->service_name, 520 llcp_addr->service_name_len); 521 release_sock(sk); 522 523 return sizeof(struct sockaddr_nfc_llcp); 524 } 525 526 static inline __poll_t llcp_accept_poll(struct sock *parent) 527 { 528 struct nfc_llcp_sock *llcp_sock, *parent_sock; 529 struct sock *sk; 530 531 parent_sock = nfc_llcp_sock(parent); 532 533 list_for_each_entry(llcp_sock, &parent_sock->accept_queue, 534 accept_queue) { 535 sk = &llcp_sock->sk; 536 537 if (sk->sk_state == LLCP_CONNECTED) 538 return EPOLLIN | EPOLLRDNORM; 539 } 540 541 return 0; 542 } 543 544 static __poll_t llcp_sock_poll(struct file *file, struct socket *sock, 545 poll_table *wait) 546 { 547 struct sock *sk = sock->sk; 548 __poll_t mask = 0; 549 550 pr_debug("%p\n", sk); 551 552 sock_poll_wait(file, sock, wait); 553 554 if (sk->sk_state == LLCP_LISTEN) 555 return llcp_accept_poll(sk); 556 557 if (sk->sk_err || !skb_queue_empty_lockless(&sk->sk_error_queue)) 558 mask |= EPOLLERR | 559 (sock_flag(sk, SOCK_SELECT_ERR_QUEUE) ? EPOLLPRI : 0); 560 561 if (!skb_queue_empty_lockless(&sk->sk_receive_queue)) 562 mask |= EPOLLIN | EPOLLRDNORM; 563 564 if (sk->sk_state == LLCP_CLOSED) 565 mask |= EPOLLHUP; 566 567 if (sk->sk_shutdown & RCV_SHUTDOWN) 568 mask |= EPOLLRDHUP | EPOLLIN | EPOLLRDNORM; 569 570 if (sk->sk_shutdown == SHUTDOWN_MASK) 571 mask |= EPOLLHUP; 572 573 if (sock_writeable(sk) && sk->sk_state == LLCP_CONNECTED) 574 mask |= EPOLLOUT | EPOLLWRNORM | EPOLLWRBAND; 575 else 576 sk_set_bit(SOCKWQ_ASYNC_NOSPACE, sk); 577 578 pr_debug("mask 0x%x\n", mask); 579 580 return mask; 581 } 582 583 static int llcp_sock_release(struct socket *sock) 584 { 585 struct sock *sk = sock->sk; 586 struct nfc_llcp_local *local; 587 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk); 588 int err = 0; 589 590 if (!sk) 591 return 0; 592 593 pr_debug("%p\n", sk); 594 595 local = llcp_sock->local; 596 if (local == NULL) { 597 err = -ENODEV; 598 goto out; 599 } 600 601 lock_sock(sk); 602 603 /* Send a DISC */ 604 if (sk->sk_state == LLCP_CONNECTED) 605 nfc_llcp_send_disconnect(llcp_sock); 606 607 if (sk->sk_state == LLCP_LISTEN) { 608 struct nfc_llcp_sock *lsk, *n; 609 struct sock *accept_sk; 610 611 list_for_each_entry_safe(lsk, n, &llcp_sock->accept_queue, 612 accept_queue) { 613 accept_sk = &lsk->sk; 614 lock_sock(accept_sk); 615 616 nfc_llcp_send_disconnect(lsk); 617 nfc_llcp_accept_unlink(accept_sk); 618 619 release_sock(accept_sk); 620 } 621 } 622 623 if (llcp_sock->reserved_ssap < LLCP_SAP_MAX) 624 nfc_llcp_put_ssap(llcp_sock->local, llcp_sock->ssap); 625 626 release_sock(sk); 627 628 /* Keep this sock alive and therefore do not remove it from the sockets 629 * list until the DISC PDU has been actually sent. Otherwise we would 630 * reply with DM PDUs before sending the DISC one. 631 */ 632 if (sk->sk_state == LLCP_DISCONNECTING) 633 return err; 634 635 if (sock->type == SOCK_RAW) 636 nfc_llcp_sock_unlink(&local->raw_sockets, sk); 637 else 638 nfc_llcp_sock_unlink(&local->sockets, sk); 639 640 out: 641 sock_orphan(sk); 642 sock_put(sk); 643 644 return err; 645 } 646 647 static int llcp_sock_connect(struct socket *sock, struct sockaddr *_addr, 648 int len, int flags) 649 { 650 struct sock *sk = sock->sk; 651 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk); 652 struct sockaddr_nfc_llcp *addr = (struct sockaddr_nfc_llcp *)_addr; 653 struct nfc_dev *dev; 654 struct nfc_llcp_local *local; 655 int ret = 0; 656 657 pr_debug("sock %p sk %p flags 0x%x\n", sock, sk, flags); 658 659 if (!addr || len < sizeof(*addr) || addr->sa_family != AF_NFC) 660 return -EINVAL; 661 662 if (addr->service_name_len == 0 && addr->dsap == 0) 663 return -EINVAL; 664 665 pr_debug("addr dev_idx=%u target_idx=%u protocol=%u\n", addr->dev_idx, 666 addr->target_idx, addr->nfc_protocol); 667 668 lock_sock(sk); 669 670 if (sk->sk_state == LLCP_CONNECTED) { 671 ret = -EISCONN; 672 goto error; 673 } 674 675 dev = nfc_get_device(addr->dev_idx); 676 if (dev == NULL) { 677 ret = -ENODEV; 678 goto error; 679 } 680 681 local = nfc_llcp_find_local(dev); 682 if (local == NULL) { 683 ret = -ENODEV; 684 goto put_dev; 685 } 686 687 device_lock(&dev->dev); 688 if (dev->dep_link_up == false) { 689 ret = -ENOLINK; 690 device_unlock(&dev->dev); 691 goto put_dev; 692 } 693 device_unlock(&dev->dev); 694 695 if (local->rf_mode == NFC_RF_INITIATOR && 696 addr->target_idx != local->target_idx) { 697 ret = -ENOLINK; 698 goto put_dev; 699 } 700 701 llcp_sock->dev = dev; 702 llcp_sock->local = nfc_llcp_local_get(local); 703 llcp_sock->ssap = nfc_llcp_get_local_ssap(local); 704 if (llcp_sock->ssap == LLCP_SAP_MAX) { 705 ret = -ENOMEM; 706 goto put_dev; 707 } 708 709 llcp_sock->reserved_ssap = llcp_sock->ssap; 710 711 if (addr->service_name_len == 0) 712 llcp_sock->dsap = addr->dsap; 713 else 714 llcp_sock->dsap = LLCP_SAP_SDP; 715 llcp_sock->nfc_protocol = addr->nfc_protocol; 716 llcp_sock->service_name_len = min_t(unsigned int, 717 addr->service_name_len, 718 NFC_LLCP_MAX_SERVICE_NAME); 719 llcp_sock->service_name = kmemdup(addr->service_name, 720 llcp_sock->service_name_len, 721 GFP_KERNEL); 722 if (!llcp_sock->service_name) { 723 ret = -ENOMEM; 724 goto sock_llcp_release; 725 } 726 727 nfc_llcp_sock_link(&local->connecting_sockets, sk); 728 729 ret = nfc_llcp_send_connect(llcp_sock); 730 if (ret) 731 goto sock_unlink; 732 733 sk->sk_state = LLCP_CONNECTING; 734 735 ret = sock_wait_state(sk, LLCP_CONNECTED, 736 sock_sndtimeo(sk, flags & O_NONBLOCK)); 737 if (ret && ret != -EINPROGRESS) 738 goto sock_unlink; 739 740 release_sock(sk); 741 742 return ret; 743 744 sock_unlink: 745 nfc_llcp_sock_unlink(&local->connecting_sockets, sk); 746 747 sock_llcp_release: 748 nfc_llcp_put_ssap(local, llcp_sock->ssap); 749 750 put_dev: 751 nfc_put_device(dev); 752 753 error: 754 release_sock(sk); 755 return ret; 756 } 757 758 static int llcp_sock_sendmsg(struct socket *sock, struct msghdr *msg, 759 size_t len) 760 { 761 struct sock *sk = sock->sk; 762 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk); 763 int ret; 764 765 pr_debug("sock %p sk %p", sock, sk); 766 767 ret = sock_error(sk); 768 if (ret) 769 return ret; 770 771 if (msg->msg_flags & MSG_OOB) 772 return -EOPNOTSUPP; 773 774 lock_sock(sk); 775 776 if (sk->sk_type == SOCK_DGRAM) { 777 DECLARE_SOCKADDR(struct sockaddr_nfc_llcp *, addr, 778 msg->msg_name); 779 780 if (msg->msg_namelen < sizeof(*addr)) { 781 release_sock(sk); 782 return -EINVAL; 783 } 784 785 release_sock(sk); 786 787 return nfc_llcp_send_ui_frame(llcp_sock, addr->dsap, addr->ssap, 788 msg, len); 789 } 790 791 if (sk->sk_state != LLCP_CONNECTED) { 792 release_sock(sk); 793 return -ENOTCONN; 794 } 795 796 release_sock(sk); 797 798 return nfc_llcp_send_i_frame(llcp_sock, msg, len); 799 } 800 801 static int llcp_sock_recvmsg(struct socket *sock, struct msghdr *msg, 802 size_t len, int flags) 803 { 804 int noblock = flags & MSG_DONTWAIT; 805 struct sock *sk = sock->sk; 806 unsigned int copied, rlen; 807 struct sk_buff *skb, *cskb; 808 int err = 0; 809 810 pr_debug("%p %zu\n", sk, len); 811 812 lock_sock(sk); 813 814 if (sk->sk_state == LLCP_CLOSED && 815 skb_queue_empty(&sk->sk_receive_queue)) { 816 release_sock(sk); 817 return 0; 818 } 819 820 release_sock(sk); 821 822 if (flags & (MSG_OOB)) 823 return -EOPNOTSUPP; 824 825 skb = skb_recv_datagram(sk, flags, noblock, &err); 826 if (!skb) { 827 pr_err("Recv datagram failed state %d %d %d", 828 sk->sk_state, err, sock_error(sk)); 829 830 if (sk->sk_shutdown & RCV_SHUTDOWN) 831 return 0; 832 833 return err; 834 } 835 836 rlen = skb->len; /* real length of skb */ 837 copied = min_t(unsigned int, rlen, len); 838 839 cskb = skb; 840 if (skb_copy_datagram_msg(cskb, 0, msg, copied)) { 841 if (!(flags & MSG_PEEK)) 842 skb_queue_head(&sk->sk_receive_queue, skb); 843 return -EFAULT; 844 } 845 846 sock_recv_timestamp(msg, sk, skb); 847 848 if (sk->sk_type == SOCK_DGRAM && msg->msg_name) { 849 struct nfc_llcp_ui_cb *ui_cb = nfc_llcp_ui_skb_cb(skb); 850 DECLARE_SOCKADDR(struct sockaddr_nfc_llcp *, sockaddr, 851 msg->msg_name); 852 853 msg->msg_namelen = sizeof(struct sockaddr_nfc_llcp); 854 855 pr_debug("Datagram socket %d %d\n", ui_cb->dsap, ui_cb->ssap); 856 857 memset(sockaddr, 0, sizeof(*sockaddr)); 858 sockaddr->sa_family = AF_NFC; 859 sockaddr->nfc_protocol = NFC_PROTO_NFC_DEP; 860 sockaddr->dsap = ui_cb->dsap; 861 sockaddr->ssap = ui_cb->ssap; 862 } 863 864 /* Mark read part of skb as used */ 865 if (!(flags & MSG_PEEK)) { 866 867 /* SOCK_STREAM: re-queue skb if it contains unreceived data */ 868 if (sk->sk_type == SOCK_STREAM || 869 sk->sk_type == SOCK_DGRAM || 870 sk->sk_type == SOCK_RAW) { 871 skb_pull(skb, copied); 872 if (skb->len) { 873 skb_queue_head(&sk->sk_receive_queue, skb); 874 goto done; 875 } 876 } 877 878 kfree_skb(skb); 879 } 880 881 /* XXX Queue backlogged skbs */ 882 883 done: 884 /* SOCK_SEQPACKET: return real length if MSG_TRUNC is set */ 885 if (sk->sk_type == SOCK_SEQPACKET && (flags & MSG_TRUNC)) 886 copied = rlen; 887 888 return copied; 889 } 890 891 static const struct proto_ops llcp_sock_ops = { 892 .family = PF_NFC, 893 .owner = THIS_MODULE, 894 .bind = llcp_sock_bind, 895 .connect = llcp_sock_connect, 896 .release = llcp_sock_release, 897 .socketpair = sock_no_socketpair, 898 .accept = llcp_sock_accept, 899 .getname = llcp_sock_getname, 900 .poll = llcp_sock_poll, 901 .ioctl = sock_no_ioctl, 902 .listen = llcp_sock_listen, 903 .shutdown = sock_no_shutdown, 904 .setsockopt = nfc_llcp_setsockopt, 905 .getsockopt = nfc_llcp_getsockopt, 906 .sendmsg = llcp_sock_sendmsg, 907 .recvmsg = llcp_sock_recvmsg, 908 .mmap = sock_no_mmap, 909 }; 910 911 static const struct proto_ops llcp_rawsock_ops = { 912 .family = PF_NFC, 913 .owner = THIS_MODULE, 914 .bind = llcp_raw_sock_bind, 915 .connect = sock_no_connect, 916 .release = llcp_sock_release, 917 .socketpair = sock_no_socketpair, 918 .accept = sock_no_accept, 919 .getname = llcp_sock_getname, 920 .poll = llcp_sock_poll, 921 .ioctl = sock_no_ioctl, 922 .listen = sock_no_listen, 923 .shutdown = sock_no_shutdown, 924 .setsockopt = sock_no_setsockopt, 925 .getsockopt = sock_no_getsockopt, 926 .sendmsg = sock_no_sendmsg, 927 .recvmsg = llcp_sock_recvmsg, 928 .mmap = sock_no_mmap, 929 }; 930 931 static void llcp_sock_destruct(struct sock *sk) 932 { 933 struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk); 934 935 pr_debug("%p\n", sk); 936 937 if (sk->sk_state == LLCP_CONNECTED) 938 nfc_put_device(llcp_sock->dev); 939 940 skb_queue_purge(&sk->sk_receive_queue); 941 942 nfc_llcp_sock_free(llcp_sock); 943 944 if (!sock_flag(sk, SOCK_DEAD)) { 945 pr_err("Freeing alive NFC LLCP socket %p\n", sk); 946 return; 947 } 948 } 949 950 struct sock *nfc_llcp_sock_alloc(struct socket *sock, int type, gfp_t gfp, int kern) 951 { 952 struct sock *sk; 953 struct nfc_llcp_sock *llcp_sock; 954 955 sk = sk_alloc(&init_net, PF_NFC, gfp, &llcp_sock_proto, kern); 956 if (!sk) 957 return NULL; 958 959 llcp_sock = nfc_llcp_sock(sk); 960 961 sock_init_data(sock, sk); 962 sk->sk_state = LLCP_CLOSED; 963 sk->sk_protocol = NFC_SOCKPROTO_LLCP; 964 sk->sk_type = type; 965 sk->sk_destruct = llcp_sock_destruct; 966 967 llcp_sock->ssap = 0; 968 llcp_sock->dsap = LLCP_SAP_SDP; 969 llcp_sock->rw = LLCP_MAX_RW + 1; 970 llcp_sock->miux = cpu_to_be16(LLCP_MAX_MIUX + 1); 971 llcp_sock->send_n = llcp_sock->send_ack_n = 0; 972 llcp_sock->recv_n = llcp_sock->recv_ack_n = 0; 973 llcp_sock->remote_ready = 1; 974 llcp_sock->reserved_ssap = LLCP_SAP_MAX; 975 nfc_llcp_socket_remote_param_init(llcp_sock); 976 skb_queue_head_init(&llcp_sock->tx_queue); 977 skb_queue_head_init(&llcp_sock->tx_pending_queue); 978 INIT_LIST_HEAD(&llcp_sock->accept_queue); 979 980 if (sock != NULL) 981 sock->state = SS_UNCONNECTED; 982 983 return sk; 984 } 985 986 void nfc_llcp_sock_free(struct nfc_llcp_sock *sock) 987 { 988 kfree(sock->service_name); 989 990 skb_queue_purge(&sock->tx_queue); 991 skb_queue_purge(&sock->tx_pending_queue); 992 993 list_del_init(&sock->accept_queue); 994 995 sock->parent = NULL; 996 997 nfc_llcp_local_put(sock->local); 998 } 999 1000 static int llcp_sock_create(struct net *net, struct socket *sock, 1001 const struct nfc_protocol *nfc_proto, int kern) 1002 { 1003 struct sock *sk; 1004 1005 pr_debug("%p\n", sock); 1006 1007 if (sock->type != SOCK_STREAM && 1008 sock->type != SOCK_DGRAM && 1009 sock->type != SOCK_RAW) 1010 return -ESOCKTNOSUPPORT; 1011 1012 if (sock->type == SOCK_RAW) { 1013 if (!capable(CAP_NET_RAW)) 1014 return -EPERM; 1015 sock->ops = &llcp_rawsock_ops; 1016 } else { 1017 sock->ops = &llcp_sock_ops; 1018 } 1019 1020 sk = nfc_llcp_sock_alloc(sock, sock->type, GFP_ATOMIC, kern); 1021 if (sk == NULL) 1022 return -ENOMEM; 1023 1024 return 0; 1025 } 1026 1027 static const struct nfc_protocol llcp_nfc_proto = { 1028 .id = NFC_SOCKPROTO_LLCP, 1029 .proto = &llcp_sock_proto, 1030 .owner = THIS_MODULE, 1031 .create = llcp_sock_create 1032 }; 1033 1034 int __init nfc_llcp_sock_init(void) 1035 { 1036 return nfc_proto_register(&llcp_nfc_proto); 1037 } 1038 1039 void nfc_llcp_sock_exit(void) 1040 { 1041 nfc_proto_unregister(&llcp_nfc_proto); 1042 } 1043