xref: /openbmc/linux/net/nfc/netlink.c (revision 71e2f4dd)
1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3  * Copyright (C) 2011 Instituto Nokia de Tecnologia
4  *
5  * Authors:
6  *    Lauro Ramos Venancio <lauro.venancio@openbossa.org>
7  *    Aloisio Almeida Jr <aloisio.almeida@openbossa.org>
8  *
9  * Vendor commands implementation based on net/wireless/nl80211.c
10  * which is:
11  *
12  * Copyright 2006-2010	Johannes Berg <johannes@sipsolutions.net>
13  * Copyright 2013-2014  Intel Mobile Communications GmbH
14  */
15 
16 #define pr_fmt(fmt) KBUILD_MODNAME ": %s: " fmt, __func__
17 
18 #include <net/genetlink.h>
19 #include <linux/nfc.h>
20 #include <linux/slab.h>
21 
22 #include "nfc.h"
23 #include "llcp.h"
24 
25 static const struct genl_multicast_group nfc_genl_mcgrps[] = {
26 	{ .name = NFC_GENL_MCAST_EVENT_NAME, },
27 };
28 
29 static struct genl_family nfc_genl_family;
30 static const struct nla_policy nfc_genl_policy[NFC_ATTR_MAX + 1] = {
31 	[NFC_ATTR_DEVICE_INDEX] = { .type = NLA_U32 },
32 	[NFC_ATTR_DEVICE_NAME] = { .type = NLA_STRING,
33 				.len = NFC_DEVICE_NAME_MAXSIZE },
34 	[NFC_ATTR_PROTOCOLS] = { .type = NLA_U32 },
35 	[NFC_ATTR_COMM_MODE] = { .type = NLA_U8 },
36 	[NFC_ATTR_RF_MODE] = { .type = NLA_U8 },
37 	[NFC_ATTR_DEVICE_POWERED] = { .type = NLA_U8 },
38 	[NFC_ATTR_IM_PROTOCOLS] = { .type = NLA_U32 },
39 	[NFC_ATTR_TM_PROTOCOLS] = { .type = NLA_U32 },
40 	[NFC_ATTR_LLC_PARAM_LTO] = { .type = NLA_U8 },
41 	[NFC_ATTR_LLC_PARAM_RW] = { .type = NLA_U8 },
42 	[NFC_ATTR_LLC_PARAM_MIUX] = { .type = NLA_U16 },
43 	[NFC_ATTR_LLC_SDP] = { .type = NLA_NESTED },
44 	[NFC_ATTR_FIRMWARE_NAME] = { .type = NLA_STRING,
45 				     .len = NFC_FIRMWARE_NAME_MAXSIZE },
46 	[NFC_ATTR_SE_APDU] = { .type = NLA_BINARY },
47 	[NFC_ATTR_VENDOR_DATA] = { .type = NLA_BINARY },
48 
49 };
50 
51 static const struct nla_policy nfc_sdp_genl_policy[NFC_SDP_ATTR_MAX + 1] = {
52 	[NFC_SDP_ATTR_URI] = { .type = NLA_STRING,
53 			       .len = U8_MAX - 4 },
54 	[NFC_SDP_ATTR_SAP] = { .type = NLA_U8 },
55 };
56 
57 static int nfc_genl_send_target(struct sk_buff *msg, struct nfc_target *target,
58 				struct netlink_callback *cb, int flags)
59 {
60 	void *hdr;
61 
62 	hdr = genlmsg_put(msg, NETLINK_CB(cb->skb).portid, cb->nlh->nlmsg_seq,
63 			  &nfc_genl_family, flags, NFC_CMD_GET_TARGET);
64 	if (!hdr)
65 		return -EMSGSIZE;
66 
67 	genl_dump_check_consistent(cb, hdr);
68 
69 	if (nla_put_u32(msg, NFC_ATTR_TARGET_INDEX, target->idx) ||
70 	    nla_put_u32(msg, NFC_ATTR_PROTOCOLS, target->supported_protocols) ||
71 	    nla_put_u16(msg, NFC_ATTR_TARGET_SENS_RES, target->sens_res) ||
72 	    nla_put_u8(msg, NFC_ATTR_TARGET_SEL_RES, target->sel_res))
73 		goto nla_put_failure;
74 	if (target->nfcid1_len > 0 &&
75 	    nla_put(msg, NFC_ATTR_TARGET_NFCID1, target->nfcid1_len,
76 		    target->nfcid1))
77 		goto nla_put_failure;
78 	if (target->sensb_res_len > 0 &&
79 	    nla_put(msg, NFC_ATTR_TARGET_SENSB_RES, target->sensb_res_len,
80 		    target->sensb_res))
81 		goto nla_put_failure;
82 	if (target->sensf_res_len > 0 &&
83 	    nla_put(msg, NFC_ATTR_TARGET_SENSF_RES, target->sensf_res_len,
84 		    target->sensf_res))
85 		goto nla_put_failure;
86 
87 	if (target->is_iso15693) {
88 		if (nla_put_u8(msg, NFC_ATTR_TARGET_ISO15693_DSFID,
89 			       target->iso15693_dsfid) ||
90 		    nla_put(msg, NFC_ATTR_TARGET_ISO15693_UID,
91 			    sizeof(target->iso15693_uid), target->iso15693_uid))
92 			goto nla_put_failure;
93 	}
94 
95 	genlmsg_end(msg, hdr);
96 	return 0;
97 
98 nla_put_failure:
99 	genlmsg_cancel(msg, hdr);
100 	return -EMSGSIZE;
101 }
102 
103 static struct nfc_dev *__get_device_from_cb(struct netlink_callback *cb)
104 {
105 	struct nlattr **attrbuf = genl_family_attrbuf(&nfc_genl_family);
106 	struct nfc_dev *dev;
107 	int rc;
108 	u32 idx;
109 
110 	rc = nlmsg_parse_deprecated(cb->nlh,
111 				    GENL_HDRLEN + nfc_genl_family.hdrsize,
112 				    attrbuf, nfc_genl_family.maxattr,
113 				    nfc_genl_policy, NULL);
114 	if (rc < 0)
115 		return ERR_PTR(rc);
116 
117 	if (!attrbuf[NFC_ATTR_DEVICE_INDEX])
118 		return ERR_PTR(-EINVAL);
119 
120 	idx = nla_get_u32(attrbuf[NFC_ATTR_DEVICE_INDEX]);
121 
122 	dev = nfc_get_device(idx);
123 	if (!dev)
124 		return ERR_PTR(-ENODEV);
125 
126 	return dev;
127 }
128 
129 static int nfc_genl_dump_targets(struct sk_buff *skb,
130 				 struct netlink_callback *cb)
131 {
132 	int i = cb->args[0];
133 	struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
134 	int rc;
135 
136 	if (!dev) {
137 		dev = __get_device_from_cb(cb);
138 		if (IS_ERR(dev))
139 			return PTR_ERR(dev);
140 
141 		cb->args[1] = (long) dev;
142 	}
143 
144 	device_lock(&dev->dev);
145 
146 	cb->seq = dev->targets_generation;
147 
148 	while (i < dev->n_targets) {
149 		rc = nfc_genl_send_target(skb, &dev->targets[i], cb,
150 					  NLM_F_MULTI);
151 		if (rc < 0)
152 			break;
153 
154 		i++;
155 	}
156 
157 	device_unlock(&dev->dev);
158 
159 	cb->args[0] = i;
160 
161 	return skb->len;
162 }
163 
164 static int nfc_genl_dump_targets_done(struct netlink_callback *cb)
165 {
166 	struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
167 
168 	if (dev)
169 		nfc_put_device(dev);
170 
171 	return 0;
172 }
173 
174 int nfc_genl_targets_found(struct nfc_dev *dev)
175 {
176 	struct sk_buff *msg;
177 	void *hdr;
178 
179 	dev->genl_data.poll_req_portid = 0;
180 
181 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
182 	if (!msg)
183 		return -ENOMEM;
184 
185 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
186 			  NFC_EVENT_TARGETS_FOUND);
187 	if (!hdr)
188 		goto free_msg;
189 
190 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
191 		goto nla_put_failure;
192 
193 	genlmsg_end(msg, hdr);
194 
195 	return genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
196 
197 nla_put_failure:
198 free_msg:
199 	nlmsg_free(msg);
200 	return -EMSGSIZE;
201 }
202 
203 int nfc_genl_target_lost(struct nfc_dev *dev, u32 target_idx)
204 {
205 	struct sk_buff *msg;
206 	void *hdr;
207 
208 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
209 	if (!msg)
210 		return -ENOMEM;
211 
212 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
213 			  NFC_EVENT_TARGET_LOST);
214 	if (!hdr)
215 		goto free_msg;
216 
217 	if (nla_put_string(msg, NFC_ATTR_DEVICE_NAME, nfc_device_name(dev)) ||
218 	    nla_put_u32(msg, NFC_ATTR_TARGET_INDEX, target_idx))
219 		goto nla_put_failure;
220 
221 	genlmsg_end(msg, hdr);
222 
223 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
224 
225 	return 0;
226 
227 nla_put_failure:
228 free_msg:
229 	nlmsg_free(msg);
230 	return -EMSGSIZE;
231 }
232 
233 int nfc_genl_tm_activated(struct nfc_dev *dev, u32 protocol)
234 {
235 	struct sk_buff *msg;
236 	void *hdr;
237 
238 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
239 	if (!msg)
240 		return -ENOMEM;
241 
242 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
243 			  NFC_EVENT_TM_ACTIVATED);
244 	if (!hdr)
245 		goto free_msg;
246 
247 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
248 		goto nla_put_failure;
249 	if (nla_put_u32(msg, NFC_ATTR_TM_PROTOCOLS, protocol))
250 		goto nla_put_failure;
251 
252 	genlmsg_end(msg, hdr);
253 
254 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
255 
256 	return 0;
257 
258 nla_put_failure:
259 free_msg:
260 	nlmsg_free(msg);
261 	return -EMSGSIZE;
262 }
263 
264 int nfc_genl_tm_deactivated(struct nfc_dev *dev)
265 {
266 	struct sk_buff *msg;
267 	void *hdr;
268 
269 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
270 	if (!msg)
271 		return -ENOMEM;
272 
273 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
274 			  NFC_EVENT_TM_DEACTIVATED);
275 	if (!hdr)
276 		goto free_msg;
277 
278 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
279 		goto nla_put_failure;
280 
281 	genlmsg_end(msg, hdr);
282 
283 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
284 
285 	return 0;
286 
287 nla_put_failure:
288 free_msg:
289 	nlmsg_free(msg);
290 	return -EMSGSIZE;
291 }
292 
293 static int nfc_genl_setup_device_added(struct nfc_dev *dev, struct sk_buff *msg)
294 {
295 	if (nla_put_string(msg, NFC_ATTR_DEVICE_NAME, nfc_device_name(dev)) ||
296 	    nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
297 	    nla_put_u32(msg, NFC_ATTR_PROTOCOLS, dev->supported_protocols) ||
298 	    nla_put_u8(msg, NFC_ATTR_DEVICE_POWERED, dev->dev_up) ||
299 	    nla_put_u8(msg, NFC_ATTR_RF_MODE, dev->rf_mode))
300 		return -1;
301 	return 0;
302 }
303 
304 int nfc_genl_device_added(struct nfc_dev *dev)
305 {
306 	struct sk_buff *msg;
307 	void *hdr;
308 
309 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
310 	if (!msg)
311 		return -ENOMEM;
312 
313 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
314 			  NFC_EVENT_DEVICE_ADDED);
315 	if (!hdr)
316 		goto free_msg;
317 
318 	if (nfc_genl_setup_device_added(dev, msg))
319 		goto nla_put_failure;
320 
321 	genlmsg_end(msg, hdr);
322 
323 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
324 
325 	return 0;
326 
327 nla_put_failure:
328 free_msg:
329 	nlmsg_free(msg);
330 	return -EMSGSIZE;
331 }
332 
333 int nfc_genl_device_removed(struct nfc_dev *dev)
334 {
335 	struct sk_buff *msg;
336 	void *hdr;
337 
338 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
339 	if (!msg)
340 		return -ENOMEM;
341 
342 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
343 			  NFC_EVENT_DEVICE_REMOVED);
344 	if (!hdr)
345 		goto free_msg;
346 
347 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
348 		goto nla_put_failure;
349 
350 	genlmsg_end(msg, hdr);
351 
352 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
353 
354 	return 0;
355 
356 nla_put_failure:
357 free_msg:
358 	nlmsg_free(msg);
359 	return -EMSGSIZE;
360 }
361 
362 int nfc_genl_llc_send_sdres(struct nfc_dev *dev, struct hlist_head *sdres_list)
363 {
364 	struct sk_buff *msg;
365 	struct nlattr *sdp_attr, *uri_attr;
366 	struct nfc_llcp_sdp_tlv *sdres;
367 	struct hlist_node *n;
368 	void *hdr;
369 	int rc = -EMSGSIZE;
370 	int i;
371 
372 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
373 	if (!msg)
374 		return -ENOMEM;
375 
376 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
377 			  NFC_EVENT_LLC_SDRES);
378 	if (!hdr)
379 		goto free_msg;
380 
381 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
382 		goto nla_put_failure;
383 
384 	sdp_attr = nla_nest_start_noflag(msg, NFC_ATTR_LLC_SDP);
385 	if (sdp_attr == NULL) {
386 		rc = -ENOMEM;
387 		goto nla_put_failure;
388 	}
389 
390 	i = 1;
391 	hlist_for_each_entry_safe(sdres, n, sdres_list, node) {
392 		pr_debug("uri: %s, sap: %d\n", sdres->uri, sdres->sap);
393 
394 		uri_attr = nla_nest_start_noflag(msg, i++);
395 		if (uri_attr == NULL) {
396 			rc = -ENOMEM;
397 			goto nla_put_failure;
398 		}
399 
400 		if (nla_put_u8(msg, NFC_SDP_ATTR_SAP, sdres->sap))
401 			goto nla_put_failure;
402 
403 		if (nla_put_string(msg, NFC_SDP_ATTR_URI, sdres->uri))
404 			goto nla_put_failure;
405 
406 		nla_nest_end(msg, uri_attr);
407 
408 		hlist_del(&sdres->node);
409 
410 		nfc_llcp_free_sdp_tlv(sdres);
411 	}
412 
413 	nla_nest_end(msg, sdp_attr);
414 
415 	genlmsg_end(msg, hdr);
416 
417 	return genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
418 
419 nla_put_failure:
420 free_msg:
421 	nlmsg_free(msg);
422 
423 	nfc_llcp_free_sdp_tlv_list(sdres_list);
424 
425 	return rc;
426 }
427 
428 int nfc_genl_se_added(struct nfc_dev *dev, u32 se_idx, u16 type)
429 {
430 	struct sk_buff *msg;
431 	void *hdr;
432 
433 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
434 	if (!msg)
435 		return -ENOMEM;
436 
437 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
438 			  NFC_EVENT_SE_ADDED);
439 	if (!hdr)
440 		goto free_msg;
441 
442 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
443 	    nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx) ||
444 	    nla_put_u8(msg, NFC_ATTR_SE_TYPE, type))
445 		goto nla_put_failure;
446 
447 	genlmsg_end(msg, hdr);
448 
449 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
450 
451 	return 0;
452 
453 nla_put_failure:
454 free_msg:
455 	nlmsg_free(msg);
456 	return -EMSGSIZE;
457 }
458 
459 int nfc_genl_se_removed(struct nfc_dev *dev, u32 se_idx)
460 {
461 	struct sk_buff *msg;
462 	void *hdr;
463 
464 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
465 	if (!msg)
466 		return -ENOMEM;
467 
468 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
469 			  NFC_EVENT_SE_REMOVED);
470 	if (!hdr)
471 		goto free_msg;
472 
473 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
474 	    nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx))
475 		goto nla_put_failure;
476 
477 	genlmsg_end(msg, hdr);
478 
479 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
480 
481 	return 0;
482 
483 nla_put_failure:
484 free_msg:
485 	nlmsg_free(msg);
486 	return -EMSGSIZE;
487 }
488 
489 int nfc_genl_se_transaction(struct nfc_dev *dev, u8 se_idx,
490 			    struct nfc_evt_transaction *evt_transaction)
491 {
492 	struct nfc_se *se;
493 	struct sk_buff *msg;
494 	void *hdr;
495 
496 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
497 	if (!msg)
498 		return -ENOMEM;
499 
500 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
501 			  NFC_EVENT_SE_TRANSACTION);
502 	if (!hdr)
503 		goto free_msg;
504 
505 	se = nfc_find_se(dev, se_idx);
506 	if (!se)
507 		goto free_msg;
508 
509 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
510 	    nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx) ||
511 	    nla_put_u8(msg, NFC_ATTR_SE_TYPE, se->type) ||
512 	    nla_put(msg, NFC_ATTR_SE_AID, evt_transaction->aid_len,
513 		    evt_transaction->aid) ||
514 	    nla_put(msg, NFC_ATTR_SE_PARAMS, evt_transaction->params_len,
515 		    evt_transaction->params))
516 		goto nla_put_failure;
517 
518 	/* evt_transaction is no more used */
519 	devm_kfree(&dev->dev, evt_transaction);
520 
521 	genlmsg_end(msg, hdr);
522 
523 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
524 
525 	return 0;
526 
527 nla_put_failure:
528 free_msg:
529 	/* evt_transaction is no more used */
530 	devm_kfree(&dev->dev, evt_transaction);
531 	nlmsg_free(msg);
532 	return -EMSGSIZE;
533 }
534 
535 int nfc_genl_se_connectivity(struct nfc_dev *dev, u8 se_idx)
536 {
537 	struct nfc_se *se;
538 	struct sk_buff *msg;
539 	void *hdr;
540 
541 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
542 	if (!msg)
543 		return -ENOMEM;
544 
545 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
546 			  NFC_EVENT_SE_CONNECTIVITY);
547 	if (!hdr)
548 		goto free_msg;
549 
550 	se = nfc_find_se(dev, se_idx);
551 	if (!se)
552 		goto free_msg;
553 
554 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
555 	    nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx) ||
556 	    nla_put_u8(msg, NFC_ATTR_SE_TYPE, se->type))
557 		goto nla_put_failure;
558 
559 	genlmsg_end(msg, hdr);
560 
561 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
562 
563 	return 0;
564 
565 nla_put_failure:
566 free_msg:
567 	nlmsg_free(msg);
568 	return -EMSGSIZE;
569 }
570 
571 static int nfc_genl_send_device(struct sk_buff *msg, struct nfc_dev *dev,
572 				u32 portid, u32 seq,
573 				struct netlink_callback *cb,
574 				int flags)
575 {
576 	void *hdr;
577 
578 	hdr = genlmsg_put(msg, portid, seq, &nfc_genl_family, flags,
579 			  NFC_CMD_GET_DEVICE);
580 	if (!hdr)
581 		return -EMSGSIZE;
582 
583 	if (cb)
584 		genl_dump_check_consistent(cb, hdr);
585 
586 	if (nfc_genl_setup_device_added(dev, msg))
587 		goto nla_put_failure;
588 
589 	genlmsg_end(msg, hdr);
590 	return 0;
591 
592 nla_put_failure:
593 	genlmsg_cancel(msg, hdr);
594 	return -EMSGSIZE;
595 }
596 
597 static int nfc_genl_dump_devices(struct sk_buff *skb,
598 				 struct netlink_callback *cb)
599 {
600 	struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
601 	struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
602 	bool first_call = false;
603 
604 	if (!iter) {
605 		first_call = true;
606 		iter = kmalloc(sizeof(struct class_dev_iter), GFP_KERNEL);
607 		if (!iter)
608 			return -ENOMEM;
609 		cb->args[0] = (long) iter;
610 	}
611 
612 	mutex_lock(&nfc_devlist_mutex);
613 
614 	cb->seq = nfc_devlist_generation;
615 
616 	if (first_call) {
617 		nfc_device_iter_init(iter);
618 		dev = nfc_device_iter_next(iter);
619 	}
620 
621 	while (dev) {
622 		int rc;
623 
624 		rc = nfc_genl_send_device(skb, dev, NETLINK_CB(cb->skb).portid,
625 					  cb->nlh->nlmsg_seq, cb, NLM_F_MULTI);
626 		if (rc < 0)
627 			break;
628 
629 		dev = nfc_device_iter_next(iter);
630 	}
631 
632 	mutex_unlock(&nfc_devlist_mutex);
633 
634 	cb->args[1] = (long) dev;
635 
636 	return skb->len;
637 }
638 
639 static int nfc_genl_dump_devices_done(struct netlink_callback *cb)
640 {
641 	struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
642 
643 	nfc_device_iter_exit(iter);
644 	kfree(iter);
645 
646 	return 0;
647 }
648 
649 int nfc_genl_dep_link_up_event(struct nfc_dev *dev, u32 target_idx,
650 			       u8 comm_mode, u8 rf_mode)
651 {
652 	struct sk_buff *msg;
653 	void *hdr;
654 
655 	pr_debug("DEP link is up\n");
656 
657 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
658 	if (!msg)
659 		return -ENOMEM;
660 
661 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0, NFC_CMD_DEP_LINK_UP);
662 	if (!hdr)
663 		goto free_msg;
664 
665 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
666 		goto nla_put_failure;
667 	if (rf_mode == NFC_RF_INITIATOR &&
668 	    nla_put_u32(msg, NFC_ATTR_TARGET_INDEX, target_idx))
669 		goto nla_put_failure;
670 	if (nla_put_u8(msg, NFC_ATTR_COMM_MODE, comm_mode) ||
671 	    nla_put_u8(msg, NFC_ATTR_RF_MODE, rf_mode))
672 		goto nla_put_failure;
673 
674 	genlmsg_end(msg, hdr);
675 
676 	dev->dep_link_up = true;
677 
678 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
679 
680 	return 0;
681 
682 nla_put_failure:
683 free_msg:
684 	nlmsg_free(msg);
685 	return -EMSGSIZE;
686 }
687 
688 int nfc_genl_dep_link_down_event(struct nfc_dev *dev)
689 {
690 	struct sk_buff *msg;
691 	void *hdr;
692 
693 	pr_debug("DEP link is down\n");
694 
695 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
696 	if (!msg)
697 		return -ENOMEM;
698 
699 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
700 			  NFC_CMD_DEP_LINK_DOWN);
701 	if (!hdr)
702 		goto free_msg;
703 
704 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
705 		goto nla_put_failure;
706 
707 	genlmsg_end(msg, hdr);
708 
709 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
710 
711 	return 0;
712 
713 nla_put_failure:
714 free_msg:
715 	nlmsg_free(msg);
716 	return -EMSGSIZE;
717 }
718 
719 static int nfc_genl_get_device(struct sk_buff *skb, struct genl_info *info)
720 {
721 	struct sk_buff *msg;
722 	struct nfc_dev *dev;
723 	u32 idx;
724 	int rc = -ENOBUFS;
725 
726 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
727 		return -EINVAL;
728 
729 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
730 
731 	dev = nfc_get_device(idx);
732 	if (!dev)
733 		return -ENODEV;
734 
735 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
736 	if (!msg) {
737 		rc = -ENOMEM;
738 		goto out_putdev;
739 	}
740 
741 	rc = nfc_genl_send_device(msg, dev, info->snd_portid, info->snd_seq,
742 				  NULL, 0);
743 	if (rc < 0)
744 		goto out_free;
745 
746 	nfc_put_device(dev);
747 
748 	return genlmsg_reply(msg, info);
749 
750 out_free:
751 	nlmsg_free(msg);
752 out_putdev:
753 	nfc_put_device(dev);
754 	return rc;
755 }
756 
757 static int nfc_genl_dev_up(struct sk_buff *skb, struct genl_info *info)
758 {
759 	struct nfc_dev *dev;
760 	int rc;
761 	u32 idx;
762 
763 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
764 		return -EINVAL;
765 
766 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
767 
768 	dev = nfc_get_device(idx);
769 	if (!dev)
770 		return -ENODEV;
771 
772 	rc = nfc_dev_up(dev);
773 
774 	nfc_put_device(dev);
775 	return rc;
776 }
777 
778 static int nfc_genl_dev_down(struct sk_buff *skb, struct genl_info *info)
779 {
780 	struct nfc_dev *dev;
781 	int rc;
782 	u32 idx;
783 
784 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
785 		return -EINVAL;
786 
787 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
788 
789 	dev = nfc_get_device(idx);
790 	if (!dev)
791 		return -ENODEV;
792 
793 	rc = nfc_dev_down(dev);
794 
795 	nfc_put_device(dev);
796 	return rc;
797 }
798 
799 static int nfc_genl_start_poll(struct sk_buff *skb, struct genl_info *info)
800 {
801 	struct nfc_dev *dev;
802 	int rc;
803 	u32 idx;
804 	u32 im_protocols = 0, tm_protocols = 0;
805 
806 	pr_debug("Poll start\n");
807 
808 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
809 	    ((!info->attrs[NFC_ATTR_IM_PROTOCOLS] &&
810 	      !info->attrs[NFC_ATTR_PROTOCOLS]) &&
811 	      !info->attrs[NFC_ATTR_TM_PROTOCOLS]))
812 		return -EINVAL;
813 
814 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
815 
816 	if (info->attrs[NFC_ATTR_TM_PROTOCOLS])
817 		tm_protocols = nla_get_u32(info->attrs[NFC_ATTR_TM_PROTOCOLS]);
818 
819 	if (info->attrs[NFC_ATTR_IM_PROTOCOLS])
820 		im_protocols = nla_get_u32(info->attrs[NFC_ATTR_IM_PROTOCOLS]);
821 	else if (info->attrs[NFC_ATTR_PROTOCOLS])
822 		im_protocols = nla_get_u32(info->attrs[NFC_ATTR_PROTOCOLS]);
823 
824 	dev = nfc_get_device(idx);
825 	if (!dev)
826 		return -ENODEV;
827 
828 	mutex_lock(&dev->genl_data.genl_data_mutex);
829 
830 	rc = nfc_start_poll(dev, im_protocols, tm_protocols);
831 	if (!rc)
832 		dev->genl_data.poll_req_portid = info->snd_portid;
833 
834 	mutex_unlock(&dev->genl_data.genl_data_mutex);
835 
836 	nfc_put_device(dev);
837 	return rc;
838 }
839 
840 static int nfc_genl_stop_poll(struct sk_buff *skb, struct genl_info *info)
841 {
842 	struct nfc_dev *dev;
843 	int rc;
844 	u32 idx;
845 
846 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
847 		return -EINVAL;
848 
849 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
850 
851 	dev = nfc_get_device(idx);
852 	if (!dev)
853 		return -ENODEV;
854 
855 	device_lock(&dev->dev);
856 
857 	if (!dev->polling) {
858 		device_unlock(&dev->dev);
859 		return -EINVAL;
860 	}
861 
862 	device_unlock(&dev->dev);
863 
864 	mutex_lock(&dev->genl_data.genl_data_mutex);
865 
866 	if (dev->genl_data.poll_req_portid != info->snd_portid) {
867 		rc = -EBUSY;
868 		goto out;
869 	}
870 
871 	rc = nfc_stop_poll(dev);
872 	dev->genl_data.poll_req_portid = 0;
873 
874 out:
875 	mutex_unlock(&dev->genl_data.genl_data_mutex);
876 	nfc_put_device(dev);
877 	return rc;
878 }
879 
880 static int nfc_genl_activate_target(struct sk_buff *skb, struct genl_info *info)
881 {
882 	struct nfc_dev *dev;
883 	u32 device_idx, target_idx, protocol;
884 	int rc;
885 
886 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
887 	    !info->attrs[NFC_ATTR_TARGET_INDEX] ||
888 	    !info->attrs[NFC_ATTR_PROTOCOLS])
889 		return -EINVAL;
890 
891 	device_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
892 
893 	dev = nfc_get_device(device_idx);
894 	if (!dev)
895 		return -ENODEV;
896 
897 	target_idx = nla_get_u32(info->attrs[NFC_ATTR_TARGET_INDEX]);
898 	protocol = nla_get_u32(info->attrs[NFC_ATTR_PROTOCOLS]);
899 
900 	nfc_deactivate_target(dev, target_idx, NFC_TARGET_MODE_SLEEP);
901 	rc = nfc_activate_target(dev, target_idx, protocol);
902 
903 	nfc_put_device(dev);
904 	return rc;
905 }
906 
907 static int nfc_genl_deactivate_target(struct sk_buff *skb,
908 				      struct genl_info *info)
909 {
910 	struct nfc_dev *dev;
911 	u32 device_idx, target_idx;
912 	int rc;
913 
914 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
915 	    !info->attrs[NFC_ATTR_TARGET_INDEX])
916 		return -EINVAL;
917 
918 	device_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
919 
920 	dev = nfc_get_device(device_idx);
921 	if (!dev)
922 		return -ENODEV;
923 
924 	target_idx = nla_get_u32(info->attrs[NFC_ATTR_TARGET_INDEX]);
925 
926 	rc = nfc_deactivate_target(dev, target_idx, NFC_TARGET_MODE_SLEEP);
927 
928 	nfc_put_device(dev);
929 	return rc;
930 }
931 
932 static int nfc_genl_dep_link_up(struct sk_buff *skb, struct genl_info *info)
933 {
934 	struct nfc_dev *dev;
935 	int rc, tgt_idx;
936 	u32 idx;
937 	u8 comm;
938 
939 	pr_debug("DEP link up\n");
940 
941 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
942 	    !info->attrs[NFC_ATTR_COMM_MODE])
943 		return -EINVAL;
944 
945 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
946 	if (!info->attrs[NFC_ATTR_TARGET_INDEX])
947 		tgt_idx = NFC_TARGET_IDX_ANY;
948 	else
949 		tgt_idx = nla_get_u32(info->attrs[NFC_ATTR_TARGET_INDEX]);
950 
951 	comm = nla_get_u8(info->attrs[NFC_ATTR_COMM_MODE]);
952 
953 	if (comm != NFC_COMM_ACTIVE && comm != NFC_COMM_PASSIVE)
954 		return -EINVAL;
955 
956 	dev = nfc_get_device(idx);
957 	if (!dev)
958 		return -ENODEV;
959 
960 	rc = nfc_dep_link_up(dev, tgt_idx, comm);
961 
962 	nfc_put_device(dev);
963 
964 	return rc;
965 }
966 
967 static int nfc_genl_dep_link_down(struct sk_buff *skb, struct genl_info *info)
968 {
969 	struct nfc_dev *dev;
970 	int rc;
971 	u32 idx;
972 
973 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
974 	    !info->attrs[NFC_ATTR_TARGET_INDEX])
975 		return -EINVAL;
976 
977 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
978 
979 	dev = nfc_get_device(idx);
980 	if (!dev)
981 		return -ENODEV;
982 
983 	rc = nfc_dep_link_down(dev);
984 
985 	nfc_put_device(dev);
986 	return rc;
987 }
988 
989 static int nfc_genl_send_params(struct sk_buff *msg,
990 				struct nfc_llcp_local *local,
991 				u32 portid, u32 seq)
992 {
993 	void *hdr;
994 
995 	hdr = genlmsg_put(msg, portid, seq, &nfc_genl_family, 0,
996 			  NFC_CMD_LLC_GET_PARAMS);
997 	if (!hdr)
998 		return -EMSGSIZE;
999 
1000 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, local->dev->idx) ||
1001 	    nla_put_u8(msg, NFC_ATTR_LLC_PARAM_LTO, local->lto) ||
1002 	    nla_put_u8(msg, NFC_ATTR_LLC_PARAM_RW, local->rw) ||
1003 	    nla_put_u16(msg, NFC_ATTR_LLC_PARAM_MIUX, be16_to_cpu(local->miux)))
1004 		goto nla_put_failure;
1005 
1006 	genlmsg_end(msg, hdr);
1007 	return 0;
1008 
1009 nla_put_failure:
1010 	genlmsg_cancel(msg, hdr);
1011 	return -EMSGSIZE;
1012 }
1013 
1014 static int nfc_genl_llc_get_params(struct sk_buff *skb, struct genl_info *info)
1015 {
1016 	struct nfc_dev *dev;
1017 	struct nfc_llcp_local *local;
1018 	int rc = 0;
1019 	struct sk_buff *msg = NULL;
1020 	u32 idx;
1021 
1022 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1023 	    !info->attrs[NFC_ATTR_FIRMWARE_NAME])
1024 		return -EINVAL;
1025 
1026 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1027 
1028 	dev = nfc_get_device(idx);
1029 	if (!dev)
1030 		return -ENODEV;
1031 
1032 	device_lock(&dev->dev);
1033 
1034 	local = nfc_llcp_find_local(dev);
1035 	if (!local) {
1036 		rc = -ENODEV;
1037 		goto exit;
1038 	}
1039 
1040 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
1041 	if (!msg) {
1042 		rc = -ENOMEM;
1043 		goto exit;
1044 	}
1045 
1046 	rc = nfc_genl_send_params(msg, local, info->snd_portid, info->snd_seq);
1047 
1048 exit:
1049 	device_unlock(&dev->dev);
1050 
1051 	nfc_put_device(dev);
1052 
1053 	if (rc < 0) {
1054 		if (msg)
1055 			nlmsg_free(msg);
1056 
1057 		return rc;
1058 	}
1059 
1060 	return genlmsg_reply(msg, info);
1061 }
1062 
1063 static int nfc_genl_llc_set_params(struct sk_buff *skb, struct genl_info *info)
1064 {
1065 	struct nfc_dev *dev;
1066 	struct nfc_llcp_local *local;
1067 	u8 rw = 0;
1068 	u16 miux = 0;
1069 	u32 idx;
1070 	int rc = 0;
1071 
1072 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1073 	    (!info->attrs[NFC_ATTR_LLC_PARAM_LTO] &&
1074 	     !info->attrs[NFC_ATTR_LLC_PARAM_RW] &&
1075 	     !info->attrs[NFC_ATTR_LLC_PARAM_MIUX]))
1076 		return -EINVAL;
1077 
1078 	if (info->attrs[NFC_ATTR_LLC_PARAM_RW]) {
1079 		rw = nla_get_u8(info->attrs[NFC_ATTR_LLC_PARAM_RW]);
1080 
1081 		if (rw > LLCP_MAX_RW)
1082 			return -EINVAL;
1083 	}
1084 
1085 	if (info->attrs[NFC_ATTR_LLC_PARAM_MIUX]) {
1086 		miux = nla_get_u16(info->attrs[NFC_ATTR_LLC_PARAM_MIUX]);
1087 
1088 		if (miux > LLCP_MAX_MIUX)
1089 			return -EINVAL;
1090 	}
1091 
1092 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1093 
1094 	dev = nfc_get_device(idx);
1095 	if (!dev)
1096 		return -ENODEV;
1097 
1098 	device_lock(&dev->dev);
1099 
1100 	local = nfc_llcp_find_local(dev);
1101 	if (!local) {
1102 		nfc_put_device(dev);
1103 		rc = -ENODEV;
1104 		goto exit;
1105 	}
1106 
1107 	if (info->attrs[NFC_ATTR_LLC_PARAM_LTO]) {
1108 		if (dev->dep_link_up) {
1109 			rc = -EINPROGRESS;
1110 			goto exit;
1111 		}
1112 
1113 		local->lto = nla_get_u8(info->attrs[NFC_ATTR_LLC_PARAM_LTO]);
1114 	}
1115 
1116 	if (info->attrs[NFC_ATTR_LLC_PARAM_RW])
1117 		local->rw = rw;
1118 
1119 	if (info->attrs[NFC_ATTR_LLC_PARAM_MIUX])
1120 		local->miux = cpu_to_be16(miux);
1121 
1122 exit:
1123 	device_unlock(&dev->dev);
1124 
1125 	nfc_put_device(dev);
1126 
1127 	return rc;
1128 }
1129 
1130 static int nfc_genl_llc_sdreq(struct sk_buff *skb, struct genl_info *info)
1131 {
1132 	struct nfc_dev *dev;
1133 	struct nfc_llcp_local *local;
1134 	struct nlattr *attr, *sdp_attrs[NFC_SDP_ATTR_MAX+1];
1135 	u32 idx;
1136 	u8 tid;
1137 	char *uri;
1138 	int rc = 0, rem;
1139 	size_t uri_len, tlvs_len;
1140 	struct hlist_head sdreq_list;
1141 	struct nfc_llcp_sdp_tlv *sdreq;
1142 
1143 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1144 	    !info->attrs[NFC_ATTR_LLC_SDP])
1145 		return -EINVAL;
1146 
1147 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1148 
1149 	dev = nfc_get_device(idx);
1150 	if (!dev)
1151 		return -ENODEV;
1152 
1153 	device_lock(&dev->dev);
1154 
1155 	if (dev->dep_link_up == false) {
1156 		rc = -ENOLINK;
1157 		goto exit;
1158 	}
1159 
1160 	local = nfc_llcp_find_local(dev);
1161 	if (!local) {
1162 		nfc_put_device(dev);
1163 		rc = -ENODEV;
1164 		goto exit;
1165 	}
1166 
1167 	INIT_HLIST_HEAD(&sdreq_list);
1168 
1169 	tlvs_len = 0;
1170 
1171 	nla_for_each_nested(attr, info->attrs[NFC_ATTR_LLC_SDP], rem) {
1172 		rc = nla_parse_nested_deprecated(sdp_attrs, NFC_SDP_ATTR_MAX,
1173 						 attr, nfc_sdp_genl_policy,
1174 						 info->extack);
1175 
1176 		if (rc != 0) {
1177 			rc = -EINVAL;
1178 			goto exit;
1179 		}
1180 
1181 		if (!sdp_attrs[NFC_SDP_ATTR_URI])
1182 			continue;
1183 
1184 		uri_len = nla_len(sdp_attrs[NFC_SDP_ATTR_URI]);
1185 		if (uri_len == 0)
1186 			continue;
1187 
1188 		uri = nla_data(sdp_attrs[NFC_SDP_ATTR_URI]);
1189 		if (uri == NULL || *uri == 0)
1190 			continue;
1191 
1192 		tid = local->sdreq_next_tid++;
1193 
1194 		sdreq = nfc_llcp_build_sdreq_tlv(tid, uri, uri_len);
1195 		if (sdreq == NULL) {
1196 			rc = -ENOMEM;
1197 			goto exit;
1198 		}
1199 
1200 		tlvs_len += sdreq->tlv_len;
1201 
1202 		hlist_add_head(&sdreq->node, &sdreq_list);
1203 	}
1204 
1205 	if (hlist_empty(&sdreq_list)) {
1206 		rc = -EINVAL;
1207 		goto exit;
1208 	}
1209 
1210 	rc = nfc_llcp_send_snl_sdreq(local, &sdreq_list, tlvs_len);
1211 exit:
1212 	device_unlock(&dev->dev);
1213 
1214 	nfc_put_device(dev);
1215 
1216 	return rc;
1217 }
1218 
1219 static int nfc_genl_fw_download(struct sk_buff *skb, struct genl_info *info)
1220 {
1221 	struct nfc_dev *dev;
1222 	int rc;
1223 	u32 idx;
1224 	char firmware_name[NFC_FIRMWARE_NAME_MAXSIZE + 1];
1225 
1226 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
1227 		return -EINVAL;
1228 
1229 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1230 
1231 	dev = nfc_get_device(idx);
1232 	if (!dev)
1233 		return -ENODEV;
1234 
1235 	nla_strlcpy(firmware_name, info->attrs[NFC_ATTR_FIRMWARE_NAME],
1236 		    sizeof(firmware_name));
1237 
1238 	rc = nfc_fw_download(dev, firmware_name);
1239 
1240 	nfc_put_device(dev);
1241 	return rc;
1242 }
1243 
1244 int nfc_genl_fw_download_done(struct nfc_dev *dev, const char *firmware_name,
1245 			      u32 result)
1246 {
1247 	struct sk_buff *msg;
1248 	void *hdr;
1249 
1250 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
1251 	if (!msg)
1252 		return -ENOMEM;
1253 
1254 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
1255 			  NFC_CMD_FW_DOWNLOAD);
1256 	if (!hdr)
1257 		goto free_msg;
1258 
1259 	if (nla_put_string(msg, NFC_ATTR_FIRMWARE_NAME, firmware_name) ||
1260 	    nla_put_u32(msg, NFC_ATTR_FIRMWARE_DOWNLOAD_STATUS, result) ||
1261 	    nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
1262 		goto nla_put_failure;
1263 
1264 	genlmsg_end(msg, hdr);
1265 
1266 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
1267 
1268 	return 0;
1269 
1270 nla_put_failure:
1271 free_msg:
1272 	nlmsg_free(msg);
1273 	return -EMSGSIZE;
1274 }
1275 
1276 static int nfc_genl_enable_se(struct sk_buff *skb, struct genl_info *info)
1277 {
1278 	struct nfc_dev *dev;
1279 	int rc;
1280 	u32 idx, se_idx;
1281 
1282 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1283 	    !info->attrs[NFC_ATTR_SE_INDEX])
1284 		return -EINVAL;
1285 
1286 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1287 	se_idx = nla_get_u32(info->attrs[NFC_ATTR_SE_INDEX]);
1288 
1289 	dev = nfc_get_device(idx);
1290 	if (!dev)
1291 		return -ENODEV;
1292 
1293 	rc = nfc_enable_se(dev, se_idx);
1294 
1295 	nfc_put_device(dev);
1296 	return rc;
1297 }
1298 
1299 static int nfc_genl_disable_se(struct sk_buff *skb, struct genl_info *info)
1300 {
1301 	struct nfc_dev *dev;
1302 	int rc;
1303 	u32 idx, se_idx;
1304 
1305 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1306 	    !info->attrs[NFC_ATTR_SE_INDEX])
1307 		return -EINVAL;
1308 
1309 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1310 	se_idx = nla_get_u32(info->attrs[NFC_ATTR_SE_INDEX]);
1311 
1312 	dev = nfc_get_device(idx);
1313 	if (!dev)
1314 		return -ENODEV;
1315 
1316 	rc = nfc_disable_se(dev, se_idx);
1317 
1318 	nfc_put_device(dev);
1319 	return rc;
1320 }
1321 
1322 static int nfc_genl_send_se(struct sk_buff *msg, struct nfc_dev *dev,
1323 				u32 portid, u32 seq,
1324 				struct netlink_callback *cb,
1325 				int flags)
1326 {
1327 	void *hdr;
1328 	struct nfc_se *se, *n;
1329 
1330 	list_for_each_entry_safe(se, n, &dev->secure_elements, list) {
1331 		hdr = genlmsg_put(msg, portid, seq, &nfc_genl_family, flags,
1332 				  NFC_CMD_GET_SE);
1333 		if (!hdr)
1334 			goto nla_put_failure;
1335 
1336 		if (cb)
1337 			genl_dump_check_consistent(cb, hdr);
1338 
1339 		if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
1340 		    nla_put_u32(msg, NFC_ATTR_SE_INDEX, se->idx) ||
1341 		    nla_put_u8(msg, NFC_ATTR_SE_TYPE, se->type))
1342 			goto nla_put_failure;
1343 
1344 		genlmsg_end(msg, hdr);
1345 	}
1346 
1347 	return 0;
1348 
1349 nla_put_failure:
1350 	genlmsg_cancel(msg, hdr);
1351 	return -EMSGSIZE;
1352 }
1353 
1354 static int nfc_genl_dump_ses(struct sk_buff *skb,
1355 				 struct netlink_callback *cb)
1356 {
1357 	struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
1358 	struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
1359 	bool first_call = false;
1360 
1361 	if (!iter) {
1362 		first_call = true;
1363 		iter = kmalloc(sizeof(struct class_dev_iter), GFP_KERNEL);
1364 		if (!iter)
1365 			return -ENOMEM;
1366 		cb->args[0] = (long) iter;
1367 	}
1368 
1369 	mutex_lock(&nfc_devlist_mutex);
1370 
1371 	cb->seq = nfc_devlist_generation;
1372 
1373 	if (first_call) {
1374 		nfc_device_iter_init(iter);
1375 		dev = nfc_device_iter_next(iter);
1376 	}
1377 
1378 	while (dev) {
1379 		int rc;
1380 
1381 		rc = nfc_genl_send_se(skb, dev, NETLINK_CB(cb->skb).portid,
1382 					  cb->nlh->nlmsg_seq, cb, NLM_F_MULTI);
1383 		if (rc < 0)
1384 			break;
1385 
1386 		dev = nfc_device_iter_next(iter);
1387 	}
1388 
1389 	mutex_unlock(&nfc_devlist_mutex);
1390 
1391 	cb->args[1] = (long) dev;
1392 
1393 	return skb->len;
1394 }
1395 
1396 static int nfc_genl_dump_ses_done(struct netlink_callback *cb)
1397 {
1398 	struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
1399 
1400 	nfc_device_iter_exit(iter);
1401 	kfree(iter);
1402 
1403 	return 0;
1404 }
1405 
1406 static int nfc_se_io(struct nfc_dev *dev, u32 se_idx,
1407 		     u8 *apdu, size_t apdu_length,
1408 		     se_io_cb_t cb, void *cb_context)
1409 {
1410 	struct nfc_se *se;
1411 	int rc;
1412 
1413 	pr_debug("%s se index %d\n", dev_name(&dev->dev), se_idx);
1414 
1415 	device_lock(&dev->dev);
1416 
1417 	if (!device_is_registered(&dev->dev)) {
1418 		rc = -ENODEV;
1419 		goto error;
1420 	}
1421 
1422 	if (!dev->dev_up) {
1423 		rc = -ENODEV;
1424 		goto error;
1425 	}
1426 
1427 	if (!dev->ops->se_io) {
1428 		rc = -EOPNOTSUPP;
1429 		goto error;
1430 	}
1431 
1432 	se = nfc_find_se(dev, se_idx);
1433 	if (!se) {
1434 		rc = -EINVAL;
1435 		goto error;
1436 	}
1437 
1438 	if (se->state != NFC_SE_ENABLED) {
1439 		rc = -ENODEV;
1440 		goto error;
1441 	}
1442 
1443 	rc = dev->ops->se_io(dev, se_idx, apdu,
1444 			apdu_length, cb, cb_context);
1445 
1446 error:
1447 	device_unlock(&dev->dev);
1448 	return rc;
1449 }
1450 
1451 struct se_io_ctx {
1452 	u32 dev_idx;
1453 	u32 se_idx;
1454 };
1455 
1456 static void se_io_cb(void *context, u8 *apdu, size_t apdu_len, int err)
1457 {
1458 	struct se_io_ctx *ctx = context;
1459 	struct sk_buff *msg;
1460 	void *hdr;
1461 
1462 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
1463 	if (!msg) {
1464 		kfree(ctx);
1465 		return;
1466 	}
1467 
1468 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
1469 			  NFC_CMD_SE_IO);
1470 	if (!hdr)
1471 		goto free_msg;
1472 
1473 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, ctx->dev_idx) ||
1474 	    nla_put_u32(msg, NFC_ATTR_SE_INDEX, ctx->se_idx) ||
1475 	    nla_put(msg, NFC_ATTR_SE_APDU, apdu_len, apdu))
1476 		goto nla_put_failure;
1477 
1478 	genlmsg_end(msg, hdr);
1479 
1480 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
1481 
1482 	kfree(ctx);
1483 
1484 	return;
1485 
1486 nla_put_failure:
1487 free_msg:
1488 	nlmsg_free(msg);
1489 	kfree(ctx);
1490 
1491 	return;
1492 }
1493 
1494 static int nfc_genl_se_io(struct sk_buff *skb, struct genl_info *info)
1495 {
1496 	struct nfc_dev *dev;
1497 	struct se_io_ctx *ctx;
1498 	u32 dev_idx, se_idx;
1499 	u8 *apdu;
1500 	size_t apdu_len;
1501 
1502 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1503 	    !info->attrs[NFC_ATTR_SE_INDEX] ||
1504 	    !info->attrs[NFC_ATTR_SE_APDU])
1505 		return -EINVAL;
1506 
1507 	dev_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1508 	se_idx = nla_get_u32(info->attrs[NFC_ATTR_SE_INDEX]);
1509 
1510 	dev = nfc_get_device(dev_idx);
1511 	if (!dev)
1512 		return -ENODEV;
1513 
1514 	if (!dev->ops || !dev->ops->se_io)
1515 		return -ENOTSUPP;
1516 
1517 	apdu_len = nla_len(info->attrs[NFC_ATTR_SE_APDU]);
1518 	if (apdu_len == 0)
1519 		return -EINVAL;
1520 
1521 	apdu = nla_data(info->attrs[NFC_ATTR_SE_APDU]);
1522 	if (!apdu)
1523 		return -EINVAL;
1524 
1525 	ctx = kzalloc(sizeof(struct se_io_ctx), GFP_KERNEL);
1526 	if (!ctx)
1527 		return -ENOMEM;
1528 
1529 	ctx->dev_idx = dev_idx;
1530 	ctx->se_idx = se_idx;
1531 
1532 	return nfc_se_io(dev, se_idx, apdu, apdu_len, se_io_cb, ctx);
1533 }
1534 
1535 static int nfc_genl_vendor_cmd(struct sk_buff *skb,
1536 			       struct genl_info *info)
1537 {
1538 	struct nfc_dev *dev;
1539 	struct nfc_vendor_cmd *cmd;
1540 	u32 dev_idx, vid, subcmd;
1541 	u8 *data;
1542 	size_t data_len;
1543 	int i, err;
1544 
1545 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1546 	    !info->attrs[NFC_ATTR_VENDOR_ID] ||
1547 	    !info->attrs[NFC_ATTR_VENDOR_SUBCMD])
1548 		return -EINVAL;
1549 
1550 	dev_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1551 	vid = nla_get_u32(info->attrs[NFC_ATTR_VENDOR_ID]);
1552 	subcmd = nla_get_u32(info->attrs[NFC_ATTR_VENDOR_SUBCMD]);
1553 
1554 	dev = nfc_get_device(dev_idx);
1555 	if (!dev || !dev->vendor_cmds || !dev->n_vendor_cmds)
1556 		return -ENODEV;
1557 
1558 	if (info->attrs[NFC_ATTR_VENDOR_DATA]) {
1559 		data = nla_data(info->attrs[NFC_ATTR_VENDOR_DATA]);
1560 		data_len = nla_len(info->attrs[NFC_ATTR_VENDOR_DATA]);
1561 		if (data_len == 0)
1562 			return -EINVAL;
1563 	} else {
1564 		data = NULL;
1565 		data_len = 0;
1566 	}
1567 
1568 	for (i = 0; i < dev->n_vendor_cmds; i++) {
1569 		cmd = &dev->vendor_cmds[i];
1570 
1571 		if (cmd->vendor_id != vid || cmd->subcmd != subcmd)
1572 			continue;
1573 
1574 		dev->cur_cmd_info = info;
1575 		err = cmd->doit(dev, data, data_len);
1576 		dev->cur_cmd_info = NULL;
1577 		return err;
1578 	}
1579 
1580 	return -EOPNOTSUPP;
1581 }
1582 
1583 /* message building helper */
1584 static inline void *nfc_hdr_put(struct sk_buff *skb, u32 portid, u32 seq,
1585 				int flags, u8 cmd)
1586 {
1587 	/* since there is no private header just add the generic one */
1588 	return genlmsg_put(skb, portid, seq, &nfc_genl_family, flags, cmd);
1589 }
1590 
1591 static struct sk_buff *
1592 __nfc_alloc_vendor_cmd_skb(struct nfc_dev *dev, int approxlen,
1593 			   u32 portid, u32 seq,
1594 			   enum nfc_attrs attr,
1595 			   u32 oui, u32 subcmd, gfp_t gfp)
1596 {
1597 	struct sk_buff *skb;
1598 	void *hdr;
1599 
1600 	skb = nlmsg_new(approxlen + 100, gfp);
1601 	if (!skb)
1602 		return NULL;
1603 
1604 	hdr = nfc_hdr_put(skb, portid, seq, 0, NFC_CMD_VENDOR);
1605 	if (!hdr) {
1606 		kfree_skb(skb);
1607 		return NULL;
1608 	}
1609 
1610 	if (nla_put_u32(skb, NFC_ATTR_DEVICE_INDEX, dev->idx))
1611 		goto nla_put_failure;
1612 	if (nla_put_u32(skb, NFC_ATTR_VENDOR_ID, oui))
1613 		goto nla_put_failure;
1614 	if (nla_put_u32(skb, NFC_ATTR_VENDOR_SUBCMD, subcmd))
1615 		goto nla_put_failure;
1616 
1617 	((void **)skb->cb)[0] = dev;
1618 	((void **)skb->cb)[1] = hdr;
1619 
1620 	return skb;
1621 
1622 nla_put_failure:
1623 	kfree_skb(skb);
1624 	return NULL;
1625 }
1626 
1627 struct sk_buff *__nfc_alloc_vendor_cmd_reply_skb(struct nfc_dev *dev,
1628 						 enum nfc_attrs attr,
1629 						 u32 oui, u32 subcmd,
1630 						 int approxlen)
1631 {
1632 	if (WARN_ON(!dev->cur_cmd_info))
1633 		return NULL;
1634 
1635 	return __nfc_alloc_vendor_cmd_skb(dev, approxlen,
1636 					  dev->cur_cmd_info->snd_portid,
1637 					  dev->cur_cmd_info->snd_seq, attr,
1638 					  oui, subcmd, GFP_KERNEL);
1639 }
1640 EXPORT_SYMBOL(__nfc_alloc_vendor_cmd_reply_skb);
1641 
1642 int nfc_vendor_cmd_reply(struct sk_buff *skb)
1643 {
1644 	struct nfc_dev *dev = ((void **)skb->cb)[0];
1645 	void *hdr = ((void **)skb->cb)[1];
1646 
1647 	/* clear CB data for netlink core to own from now on */
1648 	memset(skb->cb, 0, sizeof(skb->cb));
1649 
1650 	if (WARN_ON(!dev->cur_cmd_info)) {
1651 		kfree_skb(skb);
1652 		return -EINVAL;
1653 	}
1654 
1655 	genlmsg_end(skb, hdr);
1656 	return genlmsg_reply(skb, dev->cur_cmd_info);
1657 }
1658 EXPORT_SYMBOL(nfc_vendor_cmd_reply);
1659 
1660 static const struct genl_ops nfc_genl_ops[] = {
1661 	{
1662 		.cmd = NFC_CMD_GET_DEVICE,
1663 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1664 		.doit = nfc_genl_get_device,
1665 		.dumpit = nfc_genl_dump_devices,
1666 		.done = nfc_genl_dump_devices_done,
1667 	},
1668 	{
1669 		.cmd = NFC_CMD_DEV_UP,
1670 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1671 		.doit = nfc_genl_dev_up,
1672 	},
1673 	{
1674 		.cmd = NFC_CMD_DEV_DOWN,
1675 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1676 		.doit = nfc_genl_dev_down,
1677 	},
1678 	{
1679 		.cmd = NFC_CMD_START_POLL,
1680 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1681 		.doit = nfc_genl_start_poll,
1682 	},
1683 	{
1684 		.cmd = NFC_CMD_STOP_POLL,
1685 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1686 		.doit = nfc_genl_stop_poll,
1687 	},
1688 	{
1689 		.cmd = NFC_CMD_DEP_LINK_UP,
1690 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1691 		.doit = nfc_genl_dep_link_up,
1692 	},
1693 	{
1694 		.cmd = NFC_CMD_DEP_LINK_DOWN,
1695 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1696 		.doit = nfc_genl_dep_link_down,
1697 	},
1698 	{
1699 		.cmd = NFC_CMD_GET_TARGET,
1700 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1701 		.dumpit = nfc_genl_dump_targets,
1702 		.done = nfc_genl_dump_targets_done,
1703 	},
1704 	{
1705 		.cmd = NFC_CMD_LLC_GET_PARAMS,
1706 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1707 		.doit = nfc_genl_llc_get_params,
1708 	},
1709 	{
1710 		.cmd = NFC_CMD_LLC_SET_PARAMS,
1711 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1712 		.doit = nfc_genl_llc_set_params,
1713 	},
1714 	{
1715 		.cmd = NFC_CMD_LLC_SDREQ,
1716 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1717 		.doit = nfc_genl_llc_sdreq,
1718 	},
1719 	{
1720 		.cmd = NFC_CMD_FW_DOWNLOAD,
1721 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1722 		.doit = nfc_genl_fw_download,
1723 	},
1724 	{
1725 		.cmd = NFC_CMD_ENABLE_SE,
1726 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1727 		.doit = nfc_genl_enable_se,
1728 	},
1729 	{
1730 		.cmd = NFC_CMD_DISABLE_SE,
1731 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1732 		.doit = nfc_genl_disable_se,
1733 	},
1734 	{
1735 		.cmd = NFC_CMD_GET_SE,
1736 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1737 		.dumpit = nfc_genl_dump_ses,
1738 		.done = nfc_genl_dump_ses_done,
1739 	},
1740 	{
1741 		.cmd = NFC_CMD_SE_IO,
1742 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1743 		.doit = nfc_genl_se_io,
1744 	},
1745 	{
1746 		.cmd = NFC_CMD_ACTIVATE_TARGET,
1747 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1748 		.doit = nfc_genl_activate_target,
1749 	},
1750 	{
1751 		.cmd = NFC_CMD_VENDOR,
1752 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1753 		.doit = nfc_genl_vendor_cmd,
1754 	},
1755 	{
1756 		.cmd = NFC_CMD_DEACTIVATE_TARGET,
1757 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1758 		.doit = nfc_genl_deactivate_target,
1759 	},
1760 };
1761 
1762 static struct genl_family nfc_genl_family __ro_after_init = {
1763 	.hdrsize = 0,
1764 	.name = NFC_GENL_NAME,
1765 	.version = NFC_GENL_VERSION,
1766 	.maxattr = NFC_ATTR_MAX,
1767 	.policy = nfc_genl_policy,
1768 	.module = THIS_MODULE,
1769 	.ops = nfc_genl_ops,
1770 	.n_ops = ARRAY_SIZE(nfc_genl_ops),
1771 	.mcgrps = nfc_genl_mcgrps,
1772 	.n_mcgrps = ARRAY_SIZE(nfc_genl_mcgrps),
1773 };
1774 
1775 
1776 struct urelease_work {
1777 	struct	work_struct w;
1778 	u32	portid;
1779 };
1780 
1781 static void nfc_urelease_event_work(struct work_struct *work)
1782 {
1783 	struct urelease_work *w = container_of(work, struct urelease_work, w);
1784 	struct class_dev_iter iter;
1785 	struct nfc_dev *dev;
1786 
1787 	pr_debug("portid %d\n", w->portid);
1788 
1789 	mutex_lock(&nfc_devlist_mutex);
1790 
1791 	nfc_device_iter_init(&iter);
1792 	dev = nfc_device_iter_next(&iter);
1793 
1794 	while (dev) {
1795 		mutex_lock(&dev->genl_data.genl_data_mutex);
1796 
1797 		if (dev->genl_data.poll_req_portid == w->portid) {
1798 			nfc_stop_poll(dev);
1799 			dev->genl_data.poll_req_portid = 0;
1800 		}
1801 
1802 		mutex_unlock(&dev->genl_data.genl_data_mutex);
1803 
1804 		dev = nfc_device_iter_next(&iter);
1805 	}
1806 
1807 	nfc_device_iter_exit(&iter);
1808 
1809 	mutex_unlock(&nfc_devlist_mutex);
1810 
1811 	kfree(w);
1812 }
1813 
1814 static int nfc_genl_rcv_nl_event(struct notifier_block *this,
1815 				 unsigned long event, void *ptr)
1816 {
1817 	struct netlink_notify *n = ptr;
1818 	struct urelease_work *w;
1819 
1820 	if (event != NETLINK_URELEASE || n->protocol != NETLINK_GENERIC)
1821 		goto out;
1822 
1823 	pr_debug("NETLINK_URELEASE event from id %d\n", n->portid);
1824 
1825 	w = kmalloc(sizeof(*w), GFP_ATOMIC);
1826 	if (w) {
1827 		INIT_WORK((struct work_struct *) w, nfc_urelease_event_work);
1828 		w->portid = n->portid;
1829 		schedule_work((struct work_struct *) w);
1830 	}
1831 
1832 out:
1833 	return NOTIFY_DONE;
1834 }
1835 
1836 void nfc_genl_data_init(struct nfc_genl_data *genl_data)
1837 {
1838 	genl_data->poll_req_portid = 0;
1839 	mutex_init(&genl_data->genl_data_mutex);
1840 }
1841 
1842 void nfc_genl_data_exit(struct nfc_genl_data *genl_data)
1843 {
1844 	mutex_destroy(&genl_data->genl_data_mutex);
1845 }
1846 
1847 static struct notifier_block nl_notifier = {
1848 	.notifier_call  = nfc_genl_rcv_nl_event,
1849 };
1850 
1851 /**
1852  * nfc_genl_init() - Initialize netlink interface
1853  *
1854  * This initialization function registers the nfc netlink family.
1855  */
1856 int __init nfc_genl_init(void)
1857 {
1858 	int rc;
1859 
1860 	rc = genl_register_family(&nfc_genl_family);
1861 	if (rc)
1862 		return rc;
1863 
1864 	netlink_register_notifier(&nl_notifier);
1865 
1866 	return 0;
1867 }
1868 
1869 /**
1870  * nfc_genl_exit() - Deinitialize netlink interface
1871  *
1872  * This exit function unregisters the nfc netlink family.
1873  */
1874 void nfc_genl_exit(void)
1875 {
1876 	netlink_unregister_notifier(&nl_notifier);
1877 	genl_unregister_family(&nfc_genl_family);
1878 }
1879