xref: /openbmc/linux/net/nfc/netlink.c (revision 7d94ab16)
1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3  * Copyright (C) 2011 Instituto Nokia de Tecnologia
4  *
5  * Authors:
6  *    Lauro Ramos Venancio <lauro.venancio@openbossa.org>
7  *    Aloisio Almeida Jr <aloisio.almeida@openbossa.org>
8  *
9  * Vendor commands implementation based on net/wireless/nl80211.c
10  * which is:
11  *
12  * Copyright 2006-2010	Johannes Berg <johannes@sipsolutions.net>
13  * Copyright 2013-2014  Intel Mobile Communications GmbH
14  */
15 
16 #define pr_fmt(fmt) KBUILD_MODNAME ": %s: " fmt, __func__
17 
18 #include <net/genetlink.h>
19 #include <linux/nfc.h>
20 #include <linux/slab.h>
21 
22 #include "nfc.h"
23 #include "llcp.h"
24 
25 static const struct genl_multicast_group nfc_genl_mcgrps[] = {
26 	{ .name = NFC_GENL_MCAST_EVENT_NAME, },
27 };
28 
29 static struct genl_family nfc_genl_family;
30 static const struct nla_policy nfc_genl_policy[NFC_ATTR_MAX + 1] = {
31 	[NFC_ATTR_DEVICE_INDEX] = { .type = NLA_U32 },
32 	[NFC_ATTR_DEVICE_NAME] = { .type = NLA_STRING,
33 				.len = NFC_DEVICE_NAME_MAXSIZE },
34 	[NFC_ATTR_PROTOCOLS] = { .type = NLA_U32 },
35 	[NFC_ATTR_COMM_MODE] = { .type = NLA_U8 },
36 	[NFC_ATTR_RF_MODE] = { .type = NLA_U8 },
37 	[NFC_ATTR_DEVICE_POWERED] = { .type = NLA_U8 },
38 	[NFC_ATTR_IM_PROTOCOLS] = { .type = NLA_U32 },
39 	[NFC_ATTR_TM_PROTOCOLS] = { .type = NLA_U32 },
40 	[NFC_ATTR_LLC_PARAM_LTO] = { .type = NLA_U8 },
41 	[NFC_ATTR_LLC_PARAM_RW] = { .type = NLA_U8 },
42 	[NFC_ATTR_LLC_PARAM_MIUX] = { .type = NLA_U16 },
43 	[NFC_ATTR_LLC_SDP] = { .type = NLA_NESTED },
44 	[NFC_ATTR_FIRMWARE_NAME] = { .type = NLA_STRING,
45 				     .len = NFC_FIRMWARE_NAME_MAXSIZE },
46 	[NFC_ATTR_SE_APDU] = { .type = NLA_BINARY },
47 	[NFC_ATTR_VENDOR_DATA] = { .type = NLA_BINARY },
48 
49 };
50 
51 static const struct nla_policy nfc_sdp_genl_policy[NFC_SDP_ATTR_MAX + 1] = {
52 	[NFC_SDP_ATTR_URI] = { .type = NLA_STRING,
53 			       .len = U8_MAX - 4 },
54 	[NFC_SDP_ATTR_SAP] = { .type = NLA_U8 },
55 };
56 
57 static int nfc_genl_send_target(struct sk_buff *msg, struct nfc_target *target,
58 				struct netlink_callback *cb, int flags)
59 {
60 	void *hdr;
61 
62 	hdr = genlmsg_put(msg, NETLINK_CB(cb->skb).portid, cb->nlh->nlmsg_seq,
63 			  &nfc_genl_family, flags, NFC_CMD_GET_TARGET);
64 	if (!hdr)
65 		return -EMSGSIZE;
66 
67 	genl_dump_check_consistent(cb, hdr);
68 
69 	if (nla_put_u32(msg, NFC_ATTR_TARGET_INDEX, target->idx) ||
70 	    nla_put_u32(msg, NFC_ATTR_PROTOCOLS, target->supported_protocols) ||
71 	    nla_put_u16(msg, NFC_ATTR_TARGET_SENS_RES, target->sens_res) ||
72 	    nla_put_u8(msg, NFC_ATTR_TARGET_SEL_RES, target->sel_res))
73 		goto nla_put_failure;
74 	if (target->nfcid1_len > 0 &&
75 	    nla_put(msg, NFC_ATTR_TARGET_NFCID1, target->nfcid1_len,
76 		    target->nfcid1))
77 		goto nla_put_failure;
78 	if (target->sensb_res_len > 0 &&
79 	    nla_put(msg, NFC_ATTR_TARGET_SENSB_RES, target->sensb_res_len,
80 		    target->sensb_res))
81 		goto nla_put_failure;
82 	if (target->sensf_res_len > 0 &&
83 	    nla_put(msg, NFC_ATTR_TARGET_SENSF_RES, target->sensf_res_len,
84 		    target->sensf_res))
85 		goto nla_put_failure;
86 
87 	if (target->is_iso15693) {
88 		if (nla_put_u8(msg, NFC_ATTR_TARGET_ISO15693_DSFID,
89 			       target->iso15693_dsfid) ||
90 		    nla_put(msg, NFC_ATTR_TARGET_ISO15693_UID,
91 			    sizeof(target->iso15693_uid), target->iso15693_uid))
92 			goto nla_put_failure;
93 	}
94 
95 	genlmsg_end(msg, hdr);
96 	return 0;
97 
98 nla_put_failure:
99 	genlmsg_cancel(msg, hdr);
100 	return -EMSGSIZE;
101 }
102 
103 static struct nfc_dev *__get_device_from_cb(struct netlink_callback *cb)
104 {
105 	const struct genl_dumpit_info *info = genl_dumpit_info(cb);
106 	struct nfc_dev *dev;
107 	u32 idx;
108 
109 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
110 		return ERR_PTR(-EINVAL);
111 
112 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
113 
114 	dev = nfc_get_device(idx);
115 	if (!dev)
116 		return ERR_PTR(-ENODEV);
117 
118 	return dev;
119 }
120 
121 static int nfc_genl_dump_targets(struct sk_buff *skb,
122 				 struct netlink_callback *cb)
123 {
124 	int i = cb->args[0];
125 	struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
126 	int rc;
127 
128 	if (!dev) {
129 		dev = __get_device_from_cb(cb);
130 		if (IS_ERR(dev))
131 			return PTR_ERR(dev);
132 
133 		cb->args[1] = (long) dev;
134 	}
135 
136 	device_lock(&dev->dev);
137 
138 	cb->seq = dev->targets_generation;
139 
140 	while (i < dev->n_targets) {
141 		rc = nfc_genl_send_target(skb, &dev->targets[i], cb,
142 					  NLM_F_MULTI);
143 		if (rc < 0)
144 			break;
145 
146 		i++;
147 	}
148 
149 	device_unlock(&dev->dev);
150 
151 	cb->args[0] = i;
152 
153 	return skb->len;
154 }
155 
156 static int nfc_genl_dump_targets_done(struct netlink_callback *cb)
157 {
158 	struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
159 
160 	if (dev)
161 		nfc_put_device(dev);
162 
163 	return 0;
164 }
165 
166 int nfc_genl_targets_found(struct nfc_dev *dev)
167 {
168 	struct sk_buff *msg;
169 	void *hdr;
170 
171 	dev->genl_data.poll_req_portid = 0;
172 
173 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
174 	if (!msg)
175 		return -ENOMEM;
176 
177 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
178 			  NFC_EVENT_TARGETS_FOUND);
179 	if (!hdr)
180 		goto free_msg;
181 
182 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
183 		goto nla_put_failure;
184 
185 	genlmsg_end(msg, hdr);
186 
187 	return genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
188 
189 nla_put_failure:
190 free_msg:
191 	nlmsg_free(msg);
192 	return -EMSGSIZE;
193 }
194 
195 int nfc_genl_target_lost(struct nfc_dev *dev, u32 target_idx)
196 {
197 	struct sk_buff *msg;
198 	void *hdr;
199 
200 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
201 	if (!msg)
202 		return -ENOMEM;
203 
204 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
205 			  NFC_EVENT_TARGET_LOST);
206 	if (!hdr)
207 		goto free_msg;
208 
209 	if (nla_put_string(msg, NFC_ATTR_DEVICE_NAME, nfc_device_name(dev)) ||
210 	    nla_put_u32(msg, NFC_ATTR_TARGET_INDEX, target_idx))
211 		goto nla_put_failure;
212 
213 	genlmsg_end(msg, hdr);
214 
215 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
216 
217 	return 0;
218 
219 nla_put_failure:
220 free_msg:
221 	nlmsg_free(msg);
222 	return -EMSGSIZE;
223 }
224 
225 int nfc_genl_tm_activated(struct nfc_dev *dev, u32 protocol)
226 {
227 	struct sk_buff *msg;
228 	void *hdr;
229 
230 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
231 	if (!msg)
232 		return -ENOMEM;
233 
234 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
235 			  NFC_EVENT_TM_ACTIVATED);
236 	if (!hdr)
237 		goto free_msg;
238 
239 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
240 		goto nla_put_failure;
241 	if (nla_put_u32(msg, NFC_ATTR_TM_PROTOCOLS, protocol))
242 		goto nla_put_failure;
243 
244 	genlmsg_end(msg, hdr);
245 
246 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
247 
248 	return 0;
249 
250 nla_put_failure:
251 free_msg:
252 	nlmsg_free(msg);
253 	return -EMSGSIZE;
254 }
255 
256 int nfc_genl_tm_deactivated(struct nfc_dev *dev)
257 {
258 	struct sk_buff *msg;
259 	void *hdr;
260 
261 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
262 	if (!msg)
263 		return -ENOMEM;
264 
265 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
266 			  NFC_EVENT_TM_DEACTIVATED);
267 	if (!hdr)
268 		goto free_msg;
269 
270 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
271 		goto nla_put_failure;
272 
273 	genlmsg_end(msg, hdr);
274 
275 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
276 
277 	return 0;
278 
279 nla_put_failure:
280 free_msg:
281 	nlmsg_free(msg);
282 	return -EMSGSIZE;
283 }
284 
285 static int nfc_genl_setup_device_added(struct nfc_dev *dev, struct sk_buff *msg)
286 {
287 	if (nla_put_string(msg, NFC_ATTR_DEVICE_NAME, nfc_device_name(dev)) ||
288 	    nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
289 	    nla_put_u32(msg, NFC_ATTR_PROTOCOLS, dev->supported_protocols) ||
290 	    nla_put_u8(msg, NFC_ATTR_DEVICE_POWERED, dev->dev_up) ||
291 	    nla_put_u8(msg, NFC_ATTR_RF_MODE, dev->rf_mode))
292 		return -1;
293 	return 0;
294 }
295 
296 int nfc_genl_device_added(struct nfc_dev *dev)
297 {
298 	struct sk_buff *msg;
299 	void *hdr;
300 
301 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
302 	if (!msg)
303 		return -ENOMEM;
304 
305 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
306 			  NFC_EVENT_DEVICE_ADDED);
307 	if (!hdr)
308 		goto free_msg;
309 
310 	if (nfc_genl_setup_device_added(dev, msg))
311 		goto nla_put_failure;
312 
313 	genlmsg_end(msg, hdr);
314 
315 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
316 
317 	return 0;
318 
319 nla_put_failure:
320 free_msg:
321 	nlmsg_free(msg);
322 	return -EMSGSIZE;
323 }
324 
325 int nfc_genl_device_removed(struct nfc_dev *dev)
326 {
327 	struct sk_buff *msg;
328 	void *hdr;
329 
330 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
331 	if (!msg)
332 		return -ENOMEM;
333 
334 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
335 			  NFC_EVENT_DEVICE_REMOVED);
336 	if (!hdr)
337 		goto free_msg;
338 
339 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
340 		goto nla_put_failure;
341 
342 	genlmsg_end(msg, hdr);
343 
344 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
345 
346 	return 0;
347 
348 nla_put_failure:
349 free_msg:
350 	nlmsg_free(msg);
351 	return -EMSGSIZE;
352 }
353 
354 int nfc_genl_llc_send_sdres(struct nfc_dev *dev, struct hlist_head *sdres_list)
355 {
356 	struct sk_buff *msg;
357 	struct nlattr *sdp_attr, *uri_attr;
358 	struct nfc_llcp_sdp_tlv *sdres;
359 	struct hlist_node *n;
360 	void *hdr;
361 	int rc = -EMSGSIZE;
362 	int i;
363 
364 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
365 	if (!msg)
366 		return -ENOMEM;
367 
368 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
369 			  NFC_EVENT_LLC_SDRES);
370 	if (!hdr)
371 		goto free_msg;
372 
373 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
374 		goto nla_put_failure;
375 
376 	sdp_attr = nla_nest_start_noflag(msg, NFC_ATTR_LLC_SDP);
377 	if (sdp_attr == NULL) {
378 		rc = -ENOMEM;
379 		goto nla_put_failure;
380 	}
381 
382 	i = 1;
383 	hlist_for_each_entry_safe(sdres, n, sdres_list, node) {
384 		pr_debug("uri: %s, sap: %d\n", sdres->uri, sdres->sap);
385 
386 		uri_attr = nla_nest_start_noflag(msg, i++);
387 		if (uri_attr == NULL) {
388 			rc = -ENOMEM;
389 			goto nla_put_failure;
390 		}
391 
392 		if (nla_put_u8(msg, NFC_SDP_ATTR_SAP, sdres->sap))
393 			goto nla_put_failure;
394 
395 		if (nla_put_string(msg, NFC_SDP_ATTR_URI, sdres->uri))
396 			goto nla_put_failure;
397 
398 		nla_nest_end(msg, uri_attr);
399 
400 		hlist_del(&sdres->node);
401 
402 		nfc_llcp_free_sdp_tlv(sdres);
403 	}
404 
405 	nla_nest_end(msg, sdp_attr);
406 
407 	genlmsg_end(msg, hdr);
408 
409 	return genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
410 
411 nla_put_failure:
412 free_msg:
413 	nlmsg_free(msg);
414 
415 	nfc_llcp_free_sdp_tlv_list(sdres_list);
416 
417 	return rc;
418 }
419 
420 int nfc_genl_se_added(struct nfc_dev *dev, u32 se_idx, u16 type)
421 {
422 	struct sk_buff *msg;
423 	void *hdr;
424 
425 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
426 	if (!msg)
427 		return -ENOMEM;
428 
429 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
430 			  NFC_EVENT_SE_ADDED);
431 	if (!hdr)
432 		goto free_msg;
433 
434 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
435 	    nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx) ||
436 	    nla_put_u8(msg, NFC_ATTR_SE_TYPE, type))
437 		goto nla_put_failure;
438 
439 	genlmsg_end(msg, hdr);
440 
441 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
442 
443 	return 0;
444 
445 nla_put_failure:
446 free_msg:
447 	nlmsg_free(msg);
448 	return -EMSGSIZE;
449 }
450 
451 int nfc_genl_se_removed(struct nfc_dev *dev, u32 se_idx)
452 {
453 	struct sk_buff *msg;
454 	void *hdr;
455 
456 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
457 	if (!msg)
458 		return -ENOMEM;
459 
460 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
461 			  NFC_EVENT_SE_REMOVED);
462 	if (!hdr)
463 		goto free_msg;
464 
465 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
466 	    nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx))
467 		goto nla_put_failure;
468 
469 	genlmsg_end(msg, hdr);
470 
471 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
472 
473 	return 0;
474 
475 nla_put_failure:
476 free_msg:
477 	nlmsg_free(msg);
478 	return -EMSGSIZE;
479 }
480 
481 int nfc_genl_se_transaction(struct nfc_dev *dev, u8 se_idx,
482 			    struct nfc_evt_transaction *evt_transaction)
483 {
484 	struct nfc_se *se;
485 	struct sk_buff *msg;
486 	void *hdr;
487 
488 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
489 	if (!msg)
490 		return -ENOMEM;
491 
492 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
493 			  NFC_EVENT_SE_TRANSACTION);
494 	if (!hdr)
495 		goto free_msg;
496 
497 	se = nfc_find_se(dev, se_idx);
498 	if (!se)
499 		goto free_msg;
500 
501 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
502 	    nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx) ||
503 	    nla_put_u8(msg, NFC_ATTR_SE_TYPE, se->type) ||
504 	    nla_put(msg, NFC_ATTR_SE_AID, evt_transaction->aid_len,
505 		    evt_transaction->aid) ||
506 	    nla_put(msg, NFC_ATTR_SE_PARAMS, evt_transaction->params_len,
507 		    evt_transaction->params))
508 		goto nla_put_failure;
509 
510 	/* evt_transaction is no more used */
511 	devm_kfree(&dev->dev, evt_transaction);
512 
513 	genlmsg_end(msg, hdr);
514 
515 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
516 
517 	return 0;
518 
519 nla_put_failure:
520 free_msg:
521 	/* evt_transaction is no more used */
522 	devm_kfree(&dev->dev, evt_transaction);
523 	nlmsg_free(msg);
524 	return -EMSGSIZE;
525 }
526 
527 int nfc_genl_se_connectivity(struct nfc_dev *dev, u8 se_idx)
528 {
529 	struct nfc_se *se;
530 	struct sk_buff *msg;
531 	void *hdr;
532 
533 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
534 	if (!msg)
535 		return -ENOMEM;
536 
537 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
538 			  NFC_EVENT_SE_CONNECTIVITY);
539 	if (!hdr)
540 		goto free_msg;
541 
542 	se = nfc_find_se(dev, se_idx);
543 	if (!se)
544 		goto free_msg;
545 
546 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
547 	    nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx) ||
548 	    nla_put_u8(msg, NFC_ATTR_SE_TYPE, se->type))
549 		goto nla_put_failure;
550 
551 	genlmsg_end(msg, hdr);
552 
553 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
554 
555 	return 0;
556 
557 nla_put_failure:
558 free_msg:
559 	nlmsg_free(msg);
560 	return -EMSGSIZE;
561 }
562 
563 static int nfc_genl_send_device(struct sk_buff *msg, struct nfc_dev *dev,
564 				u32 portid, u32 seq,
565 				struct netlink_callback *cb,
566 				int flags)
567 {
568 	void *hdr;
569 
570 	hdr = genlmsg_put(msg, portid, seq, &nfc_genl_family, flags,
571 			  NFC_CMD_GET_DEVICE);
572 	if (!hdr)
573 		return -EMSGSIZE;
574 
575 	if (cb)
576 		genl_dump_check_consistent(cb, hdr);
577 
578 	if (nfc_genl_setup_device_added(dev, msg))
579 		goto nla_put_failure;
580 
581 	genlmsg_end(msg, hdr);
582 	return 0;
583 
584 nla_put_failure:
585 	genlmsg_cancel(msg, hdr);
586 	return -EMSGSIZE;
587 }
588 
589 static int nfc_genl_dump_devices(struct sk_buff *skb,
590 				 struct netlink_callback *cb)
591 {
592 	struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
593 	struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
594 	bool first_call = false;
595 
596 	if (!iter) {
597 		first_call = true;
598 		iter = kmalloc(sizeof(struct class_dev_iter), GFP_KERNEL);
599 		if (!iter)
600 			return -ENOMEM;
601 		cb->args[0] = (long) iter;
602 	}
603 
604 	mutex_lock(&nfc_devlist_mutex);
605 
606 	cb->seq = nfc_devlist_generation;
607 
608 	if (first_call) {
609 		nfc_device_iter_init(iter);
610 		dev = nfc_device_iter_next(iter);
611 	}
612 
613 	while (dev) {
614 		int rc;
615 
616 		rc = nfc_genl_send_device(skb, dev, NETLINK_CB(cb->skb).portid,
617 					  cb->nlh->nlmsg_seq, cb, NLM_F_MULTI);
618 		if (rc < 0)
619 			break;
620 
621 		dev = nfc_device_iter_next(iter);
622 	}
623 
624 	mutex_unlock(&nfc_devlist_mutex);
625 
626 	cb->args[1] = (long) dev;
627 
628 	return skb->len;
629 }
630 
631 static int nfc_genl_dump_devices_done(struct netlink_callback *cb)
632 {
633 	struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
634 
635 	nfc_device_iter_exit(iter);
636 	kfree(iter);
637 
638 	return 0;
639 }
640 
641 int nfc_genl_dep_link_up_event(struct nfc_dev *dev, u32 target_idx,
642 			       u8 comm_mode, u8 rf_mode)
643 {
644 	struct sk_buff *msg;
645 	void *hdr;
646 
647 	pr_debug("DEP link is up\n");
648 
649 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
650 	if (!msg)
651 		return -ENOMEM;
652 
653 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0, NFC_CMD_DEP_LINK_UP);
654 	if (!hdr)
655 		goto free_msg;
656 
657 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
658 		goto nla_put_failure;
659 	if (rf_mode == NFC_RF_INITIATOR &&
660 	    nla_put_u32(msg, NFC_ATTR_TARGET_INDEX, target_idx))
661 		goto nla_put_failure;
662 	if (nla_put_u8(msg, NFC_ATTR_COMM_MODE, comm_mode) ||
663 	    nla_put_u8(msg, NFC_ATTR_RF_MODE, rf_mode))
664 		goto nla_put_failure;
665 
666 	genlmsg_end(msg, hdr);
667 
668 	dev->dep_link_up = true;
669 
670 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
671 
672 	return 0;
673 
674 nla_put_failure:
675 free_msg:
676 	nlmsg_free(msg);
677 	return -EMSGSIZE;
678 }
679 
680 int nfc_genl_dep_link_down_event(struct nfc_dev *dev)
681 {
682 	struct sk_buff *msg;
683 	void *hdr;
684 
685 	pr_debug("DEP link is down\n");
686 
687 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
688 	if (!msg)
689 		return -ENOMEM;
690 
691 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
692 			  NFC_CMD_DEP_LINK_DOWN);
693 	if (!hdr)
694 		goto free_msg;
695 
696 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
697 		goto nla_put_failure;
698 
699 	genlmsg_end(msg, hdr);
700 
701 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
702 
703 	return 0;
704 
705 nla_put_failure:
706 free_msg:
707 	nlmsg_free(msg);
708 	return -EMSGSIZE;
709 }
710 
711 static int nfc_genl_get_device(struct sk_buff *skb, struct genl_info *info)
712 {
713 	struct sk_buff *msg;
714 	struct nfc_dev *dev;
715 	u32 idx;
716 	int rc = -ENOBUFS;
717 
718 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
719 		return -EINVAL;
720 
721 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
722 
723 	dev = nfc_get_device(idx);
724 	if (!dev)
725 		return -ENODEV;
726 
727 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
728 	if (!msg) {
729 		rc = -ENOMEM;
730 		goto out_putdev;
731 	}
732 
733 	rc = nfc_genl_send_device(msg, dev, info->snd_portid, info->snd_seq,
734 				  NULL, 0);
735 	if (rc < 0)
736 		goto out_free;
737 
738 	nfc_put_device(dev);
739 
740 	return genlmsg_reply(msg, info);
741 
742 out_free:
743 	nlmsg_free(msg);
744 out_putdev:
745 	nfc_put_device(dev);
746 	return rc;
747 }
748 
749 static int nfc_genl_dev_up(struct sk_buff *skb, struct genl_info *info)
750 {
751 	struct nfc_dev *dev;
752 	int rc;
753 	u32 idx;
754 
755 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
756 		return -EINVAL;
757 
758 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
759 
760 	dev = nfc_get_device(idx);
761 	if (!dev)
762 		return -ENODEV;
763 
764 	rc = nfc_dev_up(dev);
765 
766 	nfc_put_device(dev);
767 	return rc;
768 }
769 
770 static int nfc_genl_dev_down(struct sk_buff *skb, struct genl_info *info)
771 {
772 	struct nfc_dev *dev;
773 	int rc;
774 	u32 idx;
775 
776 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
777 		return -EINVAL;
778 
779 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
780 
781 	dev = nfc_get_device(idx);
782 	if (!dev)
783 		return -ENODEV;
784 
785 	rc = nfc_dev_down(dev);
786 
787 	nfc_put_device(dev);
788 	return rc;
789 }
790 
791 static int nfc_genl_start_poll(struct sk_buff *skb, struct genl_info *info)
792 {
793 	struct nfc_dev *dev;
794 	int rc;
795 	u32 idx;
796 	u32 im_protocols = 0, tm_protocols = 0;
797 
798 	pr_debug("Poll start\n");
799 
800 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
801 	    ((!info->attrs[NFC_ATTR_IM_PROTOCOLS] &&
802 	      !info->attrs[NFC_ATTR_PROTOCOLS]) &&
803 	      !info->attrs[NFC_ATTR_TM_PROTOCOLS]))
804 		return -EINVAL;
805 
806 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
807 
808 	if (info->attrs[NFC_ATTR_TM_PROTOCOLS])
809 		tm_protocols = nla_get_u32(info->attrs[NFC_ATTR_TM_PROTOCOLS]);
810 
811 	if (info->attrs[NFC_ATTR_IM_PROTOCOLS])
812 		im_protocols = nla_get_u32(info->attrs[NFC_ATTR_IM_PROTOCOLS]);
813 	else if (info->attrs[NFC_ATTR_PROTOCOLS])
814 		im_protocols = nla_get_u32(info->attrs[NFC_ATTR_PROTOCOLS]);
815 
816 	dev = nfc_get_device(idx);
817 	if (!dev)
818 		return -ENODEV;
819 
820 	mutex_lock(&dev->genl_data.genl_data_mutex);
821 
822 	rc = nfc_start_poll(dev, im_protocols, tm_protocols);
823 	if (!rc)
824 		dev->genl_data.poll_req_portid = info->snd_portid;
825 
826 	mutex_unlock(&dev->genl_data.genl_data_mutex);
827 
828 	nfc_put_device(dev);
829 	return rc;
830 }
831 
832 static int nfc_genl_stop_poll(struct sk_buff *skb, struct genl_info *info)
833 {
834 	struct nfc_dev *dev;
835 	int rc;
836 	u32 idx;
837 
838 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
839 		return -EINVAL;
840 
841 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
842 
843 	dev = nfc_get_device(idx);
844 	if (!dev)
845 		return -ENODEV;
846 
847 	device_lock(&dev->dev);
848 
849 	if (!dev->polling) {
850 		device_unlock(&dev->dev);
851 		return -EINVAL;
852 	}
853 
854 	device_unlock(&dev->dev);
855 
856 	mutex_lock(&dev->genl_data.genl_data_mutex);
857 
858 	if (dev->genl_data.poll_req_portid != info->snd_portid) {
859 		rc = -EBUSY;
860 		goto out;
861 	}
862 
863 	rc = nfc_stop_poll(dev);
864 	dev->genl_data.poll_req_portid = 0;
865 
866 out:
867 	mutex_unlock(&dev->genl_data.genl_data_mutex);
868 	nfc_put_device(dev);
869 	return rc;
870 }
871 
872 static int nfc_genl_activate_target(struct sk_buff *skb, struct genl_info *info)
873 {
874 	struct nfc_dev *dev;
875 	u32 device_idx, target_idx, protocol;
876 	int rc;
877 
878 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
879 	    !info->attrs[NFC_ATTR_TARGET_INDEX] ||
880 	    !info->attrs[NFC_ATTR_PROTOCOLS])
881 		return -EINVAL;
882 
883 	device_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
884 
885 	dev = nfc_get_device(device_idx);
886 	if (!dev)
887 		return -ENODEV;
888 
889 	target_idx = nla_get_u32(info->attrs[NFC_ATTR_TARGET_INDEX]);
890 	protocol = nla_get_u32(info->attrs[NFC_ATTR_PROTOCOLS]);
891 
892 	nfc_deactivate_target(dev, target_idx, NFC_TARGET_MODE_SLEEP);
893 	rc = nfc_activate_target(dev, target_idx, protocol);
894 
895 	nfc_put_device(dev);
896 	return rc;
897 }
898 
899 static int nfc_genl_deactivate_target(struct sk_buff *skb,
900 				      struct genl_info *info)
901 {
902 	struct nfc_dev *dev;
903 	u32 device_idx, target_idx;
904 	int rc;
905 
906 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
907 	    !info->attrs[NFC_ATTR_TARGET_INDEX])
908 		return -EINVAL;
909 
910 	device_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
911 
912 	dev = nfc_get_device(device_idx);
913 	if (!dev)
914 		return -ENODEV;
915 
916 	target_idx = nla_get_u32(info->attrs[NFC_ATTR_TARGET_INDEX]);
917 
918 	rc = nfc_deactivate_target(dev, target_idx, NFC_TARGET_MODE_SLEEP);
919 
920 	nfc_put_device(dev);
921 	return rc;
922 }
923 
924 static int nfc_genl_dep_link_up(struct sk_buff *skb, struct genl_info *info)
925 {
926 	struct nfc_dev *dev;
927 	int rc, tgt_idx;
928 	u32 idx;
929 	u8 comm;
930 
931 	pr_debug("DEP link up\n");
932 
933 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
934 	    !info->attrs[NFC_ATTR_COMM_MODE])
935 		return -EINVAL;
936 
937 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
938 	if (!info->attrs[NFC_ATTR_TARGET_INDEX])
939 		tgt_idx = NFC_TARGET_IDX_ANY;
940 	else
941 		tgt_idx = nla_get_u32(info->attrs[NFC_ATTR_TARGET_INDEX]);
942 
943 	comm = nla_get_u8(info->attrs[NFC_ATTR_COMM_MODE]);
944 
945 	if (comm != NFC_COMM_ACTIVE && comm != NFC_COMM_PASSIVE)
946 		return -EINVAL;
947 
948 	dev = nfc_get_device(idx);
949 	if (!dev)
950 		return -ENODEV;
951 
952 	rc = nfc_dep_link_up(dev, tgt_idx, comm);
953 
954 	nfc_put_device(dev);
955 
956 	return rc;
957 }
958 
959 static int nfc_genl_dep_link_down(struct sk_buff *skb, struct genl_info *info)
960 {
961 	struct nfc_dev *dev;
962 	int rc;
963 	u32 idx;
964 
965 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
966 	    !info->attrs[NFC_ATTR_TARGET_INDEX])
967 		return -EINVAL;
968 
969 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
970 
971 	dev = nfc_get_device(idx);
972 	if (!dev)
973 		return -ENODEV;
974 
975 	rc = nfc_dep_link_down(dev);
976 
977 	nfc_put_device(dev);
978 	return rc;
979 }
980 
981 static int nfc_genl_send_params(struct sk_buff *msg,
982 				struct nfc_llcp_local *local,
983 				u32 portid, u32 seq)
984 {
985 	void *hdr;
986 
987 	hdr = genlmsg_put(msg, portid, seq, &nfc_genl_family, 0,
988 			  NFC_CMD_LLC_GET_PARAMS);
989 	if (!hdr)
990 		return -EMSGSIZE;
991 
992 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, local->dev->idx) ||
993 	    nla_put_u8(msg, NFC_ATTR_LLC_PARAM_LTO, local->lto) ||
994 	    nla_put_u8(msg, NFC_ATTR_LLC_PARAM_RW, local->rw) ||
995 	    nla_put_u16(msg, NFC_ATTR_LLC_PARAM_MIUX, be16_to_cpu(local->miux)))
996 		goto nla_put_failure;
997 
998 	genlmsg_end(msg, hdr);
999 	return 0;
1000 
1001 nla_put_failure:
1002 	genlmsg_cancel(msg, hdr);
1003 	return -EMSGSIZE;
1004 }
1005 
1006 static int nfc_genl_llc_get_params(struct sk_buff *skb, struct genl_info *info)
1007 {
1008 	struct nfc_dev *dev;
1009 	struct nfc_llcp_local *local;
1010 	int rc = 0;
1011 	struct sk_buff *msg = NULL;
1012 	u32 idx;
1013 
1014 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1015 	    !info->attrs[NFC_ATTR_FIRMWARE_NAME])
1016 		return -EINVAL;
1017 
1018 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1019 
1020 	dev = nfc_get_device(idx);
1021 	if (!dev)
1022 		return -ENODEV;
1023 
1024 	device_lock(&dev->dev);
1025 
1026 	local = nfc_llcp_find_local(dev);
1027 	if (!local) {
1028 		rc = -ENODEV;
1029 		goto exit;
1030 	}
1031 
1032 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
1033 	if (!msg) {
1034 		rc = -ENOMEM;
1035 		goto exit;
1036 	}
1037 
1038 	rc = nfc_genl_send_params(msg, local, info->snd_portid, info->snd_seq);
1039 
1040 exit:
1041 	device_unlock(&dev->dev);
1042 
1043 	nfc_put_device(dev);
1044 
1045 	if (rc < 0) {
1046 		if (msg)
1047 			nlmsg_free(msg);
1048 
1049 		return rc;
1050 	}
1051 
1052 	return genlmsg_reply(msg, info);
1053 }
1054 
1055 static int nfc_genl_llc_set_params(struct sk_buff *skb, struct genl_info *info)
1056 {
1057 	struct nfc_dev *dev;
1058 	struct nfc_llcp_local *local;
1059 	u8 rw = 0;
1060 	u16 miux = 0;
1061 	u32 idx;
1062 	int rc = 0;
1063 
1064 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1065 	    (!info->attrs[NFC_ATTR_LLC_PARAM_LTO] &&
1066 	     !info->attrs[NFC_ATTR_LLC_PARAM_RW] &&
1067 	     !info->attrs[NFC_ATTR_LLC_PARAM_MIUX]))
1068 		return -EINVAL;
1069 
1070 	if (info->attrs[NFC_ATTR_LLC_PARAM_RW]) {
1071 		rw = nla_get_u8(info->attrs[NFC_ATTR_LLC_PARAM_RW]);
1072 
1073 		if (rw > LLCP_MAX_RW)
1074 			return -EINVAL;
1075 	}
1076 
1077 	if (info->attrs[NFC_ATTR_LLC_PARAM_MIUX]) {
1078 		miux = nla_get_u16(info->attrs[NFC_ATTR_LLC_PARAM_MIUX]);
1079 
1080 		if (miux > LLCP_MAX_MIUX)
1081 			return -EINVAL;
1082 	}
1083 
1084 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1085 
1086 	dev = nfc_get_device(idx);
1087 	if (!dev)
1088 		return -ENODEV;
1089 
1090 	device_lock(&dev->dev);
1091 
1092 	local = nfc_llcp_find_local(dev);
1093 	if (!local) {
1094 		rc = -ENODEV;
1095 		goto exit;
1096 	}
1097 
1098 	if (info->attrs[NFC_ATTR_LLC_PARAM_LTO]) {
1099 		if (dev->dep_link_up) {
1100 			rc = -EINPROGRESS;
1101 			goto exit;
1102 		}
1103 
1104 		local->lto = nla_get_u8(info->attrs[NFC_ATTR_LLC_PARAM_LTO]);
1105 	}
1106 
1107 	if (info->attrs[NFC_ATTR_LLC_PARAM_RW])
1108 		local->rw = rw;
1109 
1110 	if (info->attrs[NFC_ATTR_LLC_PARAM_MIUX])
1111 		local->miux = cpu_to_be16(miux);
1112 
1113 exit:
1114 	device_unlock(&dev->dev);
1115 
1116 	nfc_put_device(dev);
1117 
1118 	return rc;
1119 }
1120 
1121 static int nfc_genl_llc_sdreq(struct sk_buff *skb, struct genl_info *info)
1122 {
1123 	struct nfc_dev *dev;
1124 	struct nfc_llcp_local *local;
1125 	struct nlattr *attr, *sdp_attrs[NFC_SDP_ATTR_MAX+1];
1126 	u32 idx;
1127 	u8 tid;
1128 	char *uri;
1129 	int rc = 0, rem;
1130 	size_t uri_len, tlvs_len;
1131 	struct hlist_head sdreq_list;
1132 	struct nfc_llcp_sdp_tlv *sdreq;
1133 
1134 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1135 	    !info->attrs[NFC_ATTR_LLC_SDP])
1136 		return -EINVAL;
1137 
1138 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1139 
1140 	dev = nfc_get_device(idx);
1141 	if (!dev)
1142 		return -ENODEV;
1143 
1144 	device_lock(&dev->dev);
1145 
1146 	if (dev->dep_link_up == false) {
1147 		rc = -ENOLINK;
1148 		goto exit;
1149 	}
1150 
1151 	local = nfc_llcp_find_local(dev);
1152 	if (!local) {
1153 		rc = -ENODEV;
1154 		goto exit;
1155 	}
1156 
1157 	INIT_HLIST_HEAD(&sdreq_list);
1158 
1159 	tlvs_len = 0;
1160 
1161 	nla_for_each_nested(attr, info->attrs[NFC_ATTR_LLC_SDP], rem) {
1162 		rc = nla_parse_nested_deprecated(sdp_attrs, NFC_SDP_ATTR_MAX,
1163 						 attr, nfc_sdp_genl_policy,
1164 						 info->extack);
1165 
1166 		if (rc != 0) {
1167 			rc = -EINVAL;
1168 			goto exit;
1169 		}
1170 
1171 		if (!sdp_attrs[NFC_SDP_ATTR_URI])
1172 			continue;
1173 
1174 		uri_len = nla_len(sdp_attrs[NFC_SDP_ATTR_URI]);
1175 		if (uri_len == 0)
1176 			continue;
1177 
1178 		uri = nla_data(sdp_attrs[NFC_SDP_ATTR_URI]);
1179 		if (uri == NULL || *uri == 0)
1180 			continue;
1181 
1182 		tid = local->sdreq_next_tid++;
1183 
1184 		sdreq = nfc_llcp_build_sdreq_tlv(tid, uri, uri_len);
1185 		if (sdreq == NULL) {
1186 			rc = -ENOMEM;
1187 			goto exit;
1188 		}
1189 
1190 		tlvs_len += sdreq->tlv_len;
1191 
1192 		hlist_add_head(&sdreq->node, &sdreq_list);
1193 	}
1194 
1195 	if (hlist_empty(&sdreq_list)) {
1196 		rc = -EINVAL;
1197 		goto exit;
1198 	}
1199 
1200 	rc = nfc_llcp_send_snl_sdreq(local, &sdreq_list, tlvs_len);
1201 exit:
1202 	device_unlock(&dev->dev);
1203 
1204 	nfc_put_device(dev);
1205 
1206 	return rc;
1207 }
1208 
1209 static int nfc_genl_fw_download(struct sk_buff *skb, struct genl_info *info)
1210 {
1211 	struct nfc_dev *dev;
1212 	int rc;
1213 	u32 idx;
1214 	char firmware_name[NFC_FIRMWARE_NAME_MAXSIZE + 1];
1215 
1216 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
1217 		return -EINVAL;
1218 
1219 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1220 
1221 	dev = nfc_get_device(idx);
1222 	if (!dev)
1223 		return -ENODEV;
1224 
1225 	nla_strlcpy(firmware_name, info->attrs[NFC_ATTR_FIRMWARE_NAME],
1226 		    sizeof(firmware_name));
1227 
1228 	rc = nfc_fw_download(dev, firmware_name);
1229 
1230 	nfc_put_device(dev);
1231 	return rc;
1232 }
1233 
1234 int nfc_genl_fw_download_done(struct nfc_dev *dev, const char *firmware_name,
1235 			      u32 result)
1236 {
1237 	struct sk_buff *msg;
1238 	void *hdr;
1239 
1240 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
1241 	if (!msg)
1242 		return -ENOMEM;
1243 
1244 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
1245 			  NFC_CMD_FW_DOWNLOAD);
1246 	if (!hdr)
1247 		goto free_msg;
1248 
1249 	if (nla_put_string(msg, NFC_ATTR_FIRMWARE_NAME, firmware_name) ||
1250 	    nla_put_u32(msg, NFC_ATTR_FIRMWARE_DOWNLOAD_STATUS, result) ||
1251 	    nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
1252 		goto nla_put_failure;
1253 
1254 	genlmsg_end(msg, hdr);
1255 
1256 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
1257 
1258 	return 0;
1259 
1260 nla_put_failure:
1261 free_msg:
1262 	nlmsg_free(msg);
1263 	return -EMSGSIZE;
1264 }
1265 
1266 static int nfc_genl_enable_se(struct sk_buff *skb, struct genl_info *info)
1267 {
1268 	struct nfc_dev *dev;
1269 	int rc;
1270 	u32 idx, se_idx;
1271 
1272 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1273 	    !info->attrs[NFC_ATTR_SE_INDEX])
1274 		return -EINVAL;
1275 
1276 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1277 	se_idx = nla_get_u32(info->attrs[NFC_ATTR_SE_INDEX]);
1278 
1279 	dev = nfc_get_device(idx);
1280 	if (!dev)
1281 		return -ENODEV;
1282 
1283 	rc = nfc_enable_se(dev, se_idx);
1284 
1285 	nfc_put_device(dev);
1286 	return rc;
1287 }
1288 
1289 static int nfc_genl_disable_se(struct sk_buff *skb, struct genl_info *info)
1290 {
1291 	struct nfc_dev *dev;
1292 	int rc;
1293 	u32 idx, se_idx;
1294 
1295 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1296 	    !info->attrs[NFC_ATTR_SE_INDEX])
1297 		return -EINVAL;
1298 
1299 	idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1300 	se_idx = nla_get_u32(info->attrs[NFC_ATTR_SE_INDEX]);
1301 
1302 	dev = nfc_get_device(idx);
1303 	if (!dev)
1304 		return -ENODEV;
1305 
1306 	rc = nfc_disable_se(dev, se_idx);
1307 
1308 	nfc_put_device(dev);
1309 	return rc;
1310 }
1311 
1312 static int nfc_genl_send_se(struct sk_buff *msg, struct nfc_dev *dev,
1313 				u32 portid, u32 seq,
1314 				struct netlink_callback *cb,
1315 				int flags)
1316 {
1317 	void *hdr;
1318 	struct nfc_se *se, *n;
1319 
1320 	list_for_each_entry_safe(se, n, &dev->secure_elements, list) {
1321 		hdr = genlmsg_put(msg, portid, seq, &nfc_genl_family, flags,
1322 				  NFC_CMD_GET_SE);
1323 		if (!hdr)
1324 			goto nla_put_failure;
1325 
1326 		if (cb)
1327 			genl_dump_check_consistent(cb, hdr);
1328 
1329 		if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
1330 		    nla_put_u32(msg, NFC_ATTR_SE_INDEX, se->idx) ||
1331 		    nla_put_u8(msg, NFC_ATTR_SE_TYPE, se->type))
1332 			goto nla_put_failure;
1333 
1334 		genlmsg_end(msg, hdr);
1335 	}
1336 
1337 	return 0;
1338 
1339 nla_put_failure:
1340 	genlmsg_cancel(msg, hdr);
1341 	return -EMSGSIZE;
1342 }
1343 
1344 static int nfc_genl_dump_ses(struct sk_buff *skb,
1345 				 struct netlink_callback *cb)
1346 {
1347 	struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
1348 	struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
1349 	bool first_call = false;
1350 
1351 	if (!iter) {
1352 		first_call = true;
1353 		iter = kmalloc(sizeof(struct class_dev_iter), GFP_KERNEL);
1354 		if (!iter)
1355 			return -ENOMEM;
1356 		cb->args[0] = (long) iter;
1357 	}
1358 
1359 	mutex_lock(&nfc_devlist_mutex);
1360 
1361 	cb->seq = nfc_devlist_generation;
1362 
1363 	if (first_call) {
1364 		nfc_device_iter_init(iter);
1365 		dev = nfc_device_iter_next(iter);
1366 	}
1367 
1368 	while (dev) {
1369 		int rc;
1370 
1371 		rc = nfc_genl_send_se(skb, dev, NETLINK_CB(cb->skb).portid,
1372 					  cb->nlh->nlmsg_seq, cb, NLM_F_MULTI);
1373 		if (rc < 0)
1374 			break;
1375 
1376 		dev = nfc_device_iter_next(iter);
1377 	}
1378 
1379 	mutex_unlock(&nfc_devlist_mutex);
1380 
1381 	cb->args[1] = (long) dev;
1382 
1383 	return skb->len;
1384 }
1385 
1386 static int nfc_genl_dump_ses_done(struct netlink_callback *cb)
1387 {
1388 	struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
1389 
1390 	nfc_device_iter_exit(iter);
1391 	kfree(iter);
1392 
1393 	return 0;
1394 }
1395 
1396 static int nfc_se_io(struct nfc_dev *dev, u32 se_idx,
1397 		     u8 *apdu, size_t apdu_length,
1398 		     se_io_cb_t cb, void *cb_context)
1399 {
1400 	struct nfc_se *se;
1401 	int rc;
1402 
1403 	pr_debug("%s se index %d\n", dev_name(&dev->dev), se_idx);
1404 
1405 	device_lock(&dev->dev);
1406 
1407 	if (!device_is_registered(&dev->dev)) {
1408 		rc = -ENODEV;
1409 		goto error;
1410 	}
1411 
1412 	if (!dev->dev_up) {
1413 		rc = -ENODEV;
1414 		goto error;
1415 	}
1416 
1417 	if (!dev->ops->se_io) {
1418 		rc = -EOPNOTSUPP;
1419 		goto error;
1420 	}
1421 
1422 	se = nfc_find_se(dev, se_idx);
1423 	if (!se) {
1424 		rc = -EINVAL;
1425 		goto error;
1426 	}
1427 
1428 	if (se->state != NFC_SE_ENABLED) {
1429 		rc = -ENODEV;
1430 		goto error;
1431 	}
1432 
1433 	rc = dev->ops->se_io(dev, se_idx, apdu,
1434 			apdu_length, cb, cb_context);
1435 
1436 error:
1437 	device_unlock(&dev->dev);
1438 	return rc;
1439 }
1440 
1441 struct se_io_ctx {
1442 	u32 dev_idx;
1443 	u32 se_idx;
1444 };
1445 
1446 static void se_io_cb(void *context, u8 *apdu, size_t apdu_len, int err)
1447 {
1448 	struct se_io_ctx *ctx = context;
1449 	struct sk_buff *msg;
1450 	void *hdr;
1451 
1452 	msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
1453 	if (!msg) {
1454 		kfree(ctx);
1455 		return;
1456 	}
1457 
1458 	hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
1459 			  NFC_CMD_SE_IO);
1460 	if (!hdr)
1461 		goto free_msg;
1462 
1463 	if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, ctx->dev_idx) ||
1464 	    nla_put_u32(msg, NFC_ATTR_SE_INDEX, ctx->se_idx) ||
1465 	    nla_put(msg, NFC_ATTR_SE_APDU, apdu_len, apdu))
1466 		goto nla_put_failure;
1467 
1468 	genlmsg_end(msg, hdr);
1469 
1470 	genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
1471 
1472 	kfree(ctx);
1473 
1474 	return;
1475 
1476 nla_put_failure:
1477 free_msg:
1478 	nlmsg_free(msg);
1479 	kfree(ctx);
1480 
1481 	return;
1482 }
1483 
1484 static int nfc_genl_se_io(struct sk_buff *skb, struct genl_info *info)
1485 {
1486 	struct nfc_dev *dev;
1487 	struct se_io_ctx *ctx;
1488 	u32 dev_idx, se_idx;
1489 	u8 *apdu;
1490 	size_t apdu_len;
1491 
1492 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1493 	    !info->attrs[NFC_ATTR_SE_INDEX] ||
1494 	    !info->attrs[NFC_ATTR_SE_APDU])
1495 		return -EINVAL;
1496 
1497 	dev_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1498 	se_idx = nla_get_u32(info->attrs[NFC_ATTR_SE_INDEX]);
1499 
1500 	dev = nfc_get_device(dev_idx);
1501 	if (!dev)
1502 		return -ENODEV;
1503 
1504 	if (!dev->ops || !dev->ops->se_io)
1505 		return -ENOTSUPP;
1506 
1507 	apdu_len = nla_len(info->attrs[NFC_ATTR_SE_APDU]);
1508 	if (apdu_len == 0)
1509 		return -EINVAL;
1510 
1511 	apdu = nla_data(info->attrs[NFC_ATTR_SE_APDU]);
1512 	if (!apdu)
1513 		return -EINVAL;
1514 
1515 	ctx = kzalloc(sizeof(struct se_io_ctx), GFP_KERNEL);
1516 	if (!ctx)
1517 		return -ENOMEM;
1518 
1519 	ctx->dev_idx = dev_idx;
1520 	ctx->se_idx = se_idx;
1521 
1522 	return nfc_se_io(dev, se_idx, apdu, apdu_len, se_io_cb, ctx);
1523 }
1524 
1525 static int nfc_genl_vendor_cmd(struct sk_buff *skb,
1526 			       struct genl_info *info)
1527 {
1528 	struct nfc_dev *dev;
1529 	struct nfc_vendor_cmd *cmd;
1530 	u32 dev_idx, vid, subcmd;
1531 	u8 *data;
1532 	size_t data_len;
1533 	int i, err;
1534 
1535 	if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1536 	    !info->attrs[NFC_ATTR_VENDOR_ID] ||
1537 	    !info->attrs[NFC_ATTR_VENDOR_SUBCMD])
1538 		return -EINVAL;
1539 
1540 	dev_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1541 	vid = nla_get_u32(info->attrs[NFC_ATTR_VENDOR_ID]);
1542 	subcmd = nla_get_u32(info->attrs[NFC_ATTR_VENDOR_SUBCMD]);
1543 
1544 	dev = nfc_get_device(dev_idx);
1545 	if (!dev || !dev->vendor_cmds || !dev->n_vendor_cmds)
1546 		return -ENODEV;
1547 
1548 	if (info->attrs[NFC_ATTR_VENDOR_DATA]) {
1549 		data = nla_data(info->attrs[NFC_ATTR_VENDOR_DATA]);
1550 		data_len = nla_len(info->attrs[NFC_ATTR_VENDOR_DATA]);
1551 		if (data_len == 0)
1552 			return -EINVAL;
1553 	} else {
1554 		data = NULL;
1555 		data_len = 0;
1556 	}
1557 
1558 	for (i = 0; i < dev->n_vendor_cmds; i++) {
1559 		cmd = &dev->vendor_cmds[i];
1560 
1561 		if (cmd->vendor_id != vid || cmd->subcmd != subcmd)
1562 			continue;
1563 
1564 		dev->cur_cmd_info = info;
1565 		err = cmd->doit(dev, data, data_len);
1566 		dev->cur_cmd_info = NULL;
1567 		return err;
1568 	}
1569 
1570 	return -EOPNOTSUPP;
1571 }
1572 
1573 /* message building helper */
1574 static inline void *nfc_hdr_put(struct sk_buff *skb, u32 portid, u32 seq,
1575 				int flags, u8 cmd)
1576 {
1577 	/* since there is no private header just add the generic one */
1578 	return genlmsg_put(skb, portid, seq, &nfc_genl_family, flags, cmd);
1579 }
1580 
1581 static struct sk_buff *
1582 __nfc_alloc_vendor_cmd_skb(struct nfc_dev *dev, int approxlen,
1583 			   u32 portid, u32 seq,
1584 			   enum nfc_attrs attr,
1585 			   u32 oui, u32 subcmd, gfp_t gfp)
1586 {
1587 	struct sk_buff *skb;
1588 	void *hdr;
1589 
1590 	skb = nlmsg_new(approxlen + 100, gfp);
1591 	if (!skb)
1592 		return NULL;
1593 
1594 	hdr = nfc_hdr_put(skb, portid, seq, 0, NFC_CMD_VENDOR);
1595 	if (!hdr) {
1596 		kfree_skb(skb);
1597 		return NULL;
1598 	}
1599 
1600 	if (nla_put_u32(skb, NFC_ATTR_DEVICE_INDEX, dev->idx))
1601 		goto nla_put_failure;
1602 	if (nla_put_u32(skb, NFC_ATTR_VENDOR_ID, oui))
1603 		goto nla_put_failure;
1604 	if (nla_put_u32(skb, NFC_ATTR_VENDOR_SUBCMD, subcmd))
1605 		goto nla_put_failure;
1606 
1607 	((void **)skb->cb)[0] = dev;
1608 	((void **)skb->cb)[1] = hdr;
1609 
1610 	return skb;
1611 
1612 nla_put_failure:
1613 	kfree_skb(skb);
1614 	return NULL;
1615 }
1616 
1617 struct sk_buff *__nfc_alloc_vendor_cmd_reply_skb(struct nfc_dev *dev,
1618 						 enum nfc_attrs attr,
1619 						 u32 oui, u32 subcmd,
1620 						 int approxlen)
1621 {
1622 	if (WARN_ON(!dev->cur_cmd_info))
1623 		return NULL;
1624 
1625 	return __nfc_alloc_vendor_cmd_skb(dev, approxlen,
1626 					  dev->cur_cmd_info->snd_portid,
1627 					  dev->cur_cmd_info->snd_seq, attr,
1628 					  oui, subcmd, GFP_KERNEL);
1629 }
1630 EXPORT_SYMBOL(__nfc_alloc_vendor_cmd_reply_skb);
1631 
1632 int nfc_vendor_cmd_reply(struct sk_buff *skb)
1633 {
1634 	struct nfc_dev *dev = ((void **)skb->cb)[0];
1635 	void *hdr = ((void **)skb->cb)[1];
1636 
1637 	/* clear CB data for netlink core to own from now on */
1638 	memset(skb->cb, 0, sizeof(skb->cb));
1639 
1640 	if (WARN_ON(!dev->cur_cmd_info)) {
1641 		kfree_skb(skb);
1642 		return -EINVAL;
1643 	}
1644 
1645 	genlmsg_end(skb, hdr);
1646 	return genlmsg_reply(skb, dev->cur_cmd_info);
1647 }
1648 EXPORT_SYMBOL(nfc_vendor_cmd_reply);
1649 
1650 static const struct genl_ops nfc_genl_ops[] = {
1651 	{
1652 		.cmd = NFC_CMD_GET_DEVICE,
1653 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1654 		.doit = nfc_genl_get_device,
1655 		.dumpit = nfc_genl_dump_devices,
1656 		.done = nfc_genl_dump_devices_done,
1657 	},
1658 	{
1659 		.cmd = NFC_CMD_DEV_UP,
1660 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1661 		.doit = nfc_genl_dev_up,
1662 	},
1663 	{
1664 		.cmd = NFC_CMD_DEV_DOWN,
1665 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1666 		.doit = nfc_genl_dev_down,
1667 	},
1668 	{
1669 		.cmd = NFC_CMD_START_POLL,
1670 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1671 		.doit = nfc_genl_start_poll,
1672 	},
1673 	{
1674 		.cmd = NFC_CMD_STOP_POLL,
1675 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1676 		.doit = nfc_genl_stop_poll,
1677 	},
1678 	{
1679 		.cmd = NFC_CMD_DEP_LINK_UP,
1680 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1681 		.doit = nfc_genl_dep_link_up,
1682 	},
1683 	{
1684 		.cmd = NFC_CMD_DEP_LINK_DOWN,
1685 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1686 		.doit = nfc_genl_dep_link_down,
1687 	},
1688 	{
1689 		.cmd = NFC_CMD_GET_TARGET,
1690 		.validate = GENL_DONT_VALIDATE_STRICT |
1691 			    GENL_DONT_VALIDATE_DUMP_STRICT,
1692 		.dumpit = nfc_genl_dump_targets,
1693 		.done = nfc_genl_dump_targets_done,
1694 	},
1695 	{
1696 		.cmd = NFC_CMD_LLC_GET_PARAMS,
1697 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1698 		.doit = nfc_genl_llc_get_params,
1699 	},
1700 	{
1701 		.cmd = NFC_CMD_LLC_SET_PARAMS,
1702 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1703 		.doit = nfc_genl_llc_set_params,
1704 	},
1705 	{
1706 		.cmd = NFC_CMD_LLC_SDREQ,
1707 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1708 		.doit = nfc_genl_llc_sdreq,
1709 	},
1710 	{
1711 		.cmd = NFC_CMD_FW_DOWNLOAD,
1712 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1713 		.doit = nfc_genl_fw_download,
1714 	},
1715 	{
1716 		.cmd = NFC_CMD_ENABLE_SE,
1717 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1718 		.doit = nfc_genl_enable_se,
1719 	},
1720 	{
1721 		.cmd = NFC_CMD_DISABLE_SE,
1722 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1723 		.doit = nfc_genl_disable_se,
1724 	},
1725 	{
1726 		.cmd = NFC_CMD_GET_SE,
1727 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1728 		.dumpit = nfc_genl_dump_ses,
1729 		.done = nfc_genl_dump_ses_done,
1730 	},
1731 	{
1732 		.cmd = NFC_CMD_SE_IO,
1733 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1734 		.doit = nfc_genl_se_io,
1735 	},
1736 	{
1737 		.cmd = NFC_CMD_ACTIVATE_TARGET,
1738 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1739 		.doit = nfc_genl_activate_target,
1740 	},
1741 	{
1742 		.cmd = NFC_CMD_VENDOR,
1743 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1744 		.doit = nfc_genl_vendor_cmd,
1745 	},
1746 	{
1747 		.cmd = NFC_CMD_DEACTIVATE_TARGET,
1748 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1749 		.doit = nfc_genl_deactivate_target,
1750 	},
1751 };
1752 
1753 static struct genl_family nfc_genl_family __ro_after_init = {
1754 	.hdrsize = 0,
1755 	.name = NFC_GENL_NAME,
1756 	.version = NFC_GENL_VERSION,
1757 	.maxattr = NFC_ATTR_MAX,
1758 	.policy = nfc_genl_policy,
1759 	.module = THIS_MODULE,
1760 	.ops = nfc_genl_ops,
1761 	.n_ops = ARRAY_SIZE(nfc_genl_ops),
1762 	.mcgrps = nfc_genl_mcgrps,
1763 	.n_mcgrps = ARRAY_SIZE(nfc_genl_mcgrps),
1764 };
1765 
1766 
1767 struct urelease_work {
1768 	struct	work_struct w;
1769 	u32	portid;
1770 };
1771 
1772 static void nfc_urelease_event_work(struct work_struct *work)
1773 {
1774 	struct urelease_work *w = container_of(work, struct urelease_work, w);
1775 	struct class_dev_iter iter;
1776 	struct nfc_dev *dev;
1777 
1778 	pr_debug("portid %d\n", w->portid);
1779 
1780 	mutex_lock(&nfc_devlist_mutex);
1781 
1782 	nfc_device_iter_init(&iter);
1783 	dev = nfc_device_iter_next(&iter);
1784 
1785 	while (dev) {
1786 		mutex_lock(&dev->genl_data.genl_data_mutex);
1787 
1788 		if (dev->genl_data.poll_req_portid == w->portid) {
1789 			nfc_stop_poll(dev);
1790 			dev->genl_data.poll_req_portid = 0;
1791 		}
1792 
1793 		mutex_unlock(&dev->genl_data.genl_data_mutex);
1794 
1795 		dev = nfc_device_iter_next(&iter);
1796 	}
1797 
1798 	nfc_device_iter_exit(&iter);
1799 
1800 	mutex_unlock(&nfc_devlist_mutex);
1801 
1802 	kfree(w);
1803 }
1804 
1805 static int nfc_genl_rcv_nl_event(struct notifier_block *this,
1806 				 unsigned long event, void *ptr)
1807 {
1808 	struct netlink_notify *n = ptr;
1809 	struct urelease_work *w;
1810 
1811 	if (event != NETLINK_URELEASE || n->protocol != NETLINK_GENERIC)
1812 		goto out;
1813 
1814 	pr_debug("NETLINK_URELEASE event from id %d\n", n->portid);
1815 
1816 	w = kmalloc(sizeof(*w), GFP_ATOMIC);
1817 	if (w) {
1818 		INIT_WORK((struct work_struct *) w, nfc_urelease_event_work);
1819 		w->portid = n->portid;
1820 		schedule_work((struct work_struct *) w);
1821 	}
1822 
1823 out:
1824 	return NOTIFY_DONE;
1825 }
1826 
1827 void nfc_genl_data_init(struct nfc_genl_data *genl_data)
1828 {
1829 	genl_data->poll_req_portid = 0;
1830 	mutex_init(&genl_data->genl_data_mutex);
1831 }
1832 
1833 void nfc_genl_data_exit(struct nfc_genl_data *genl_data)
1834 {
1835 	mutex_destroy(&genl_data->genl_data_mutex);
1836 }
1837 
1838 static struct notifier_block nl_notifier = {
1839 	.notifier_call  = nfc_genl_rcv_nl_event,
1840 };
1841 
1842 /**
1843  * nfc_genl_init() - Initialize netlink interface
1844  *
1845  * This initialization function registers the nfc netlink family.
1846  */
1847 int __init nfc_genl_init(void)
1848 {
1849 	int rc;
1850 
1851 	rc = genl_register_family(&nfc_genl_family);
1852 	if (rc)
1853 		return rc;
1854 
1855 	netlink_register_notifier(&nl_notifier);
1856 
1857 	return 0;
1858 }
1859 
1860 /**
1861  * nfc_genl_exit() - Deinitialize netlink interface
1862  *
1863  * This exit function unregisters the nfc netlink family.
1864  */
1865 void nfc_genl_exit(void)
1866 {
1867 	netlink_unregister_notifier(&nl_notifier);
1868 	genl_unregister_family(&nfc_genl_family);
1869 }
1870