net/nfc/llcp_sock.c

   1 /*
   2  * Copyright (C) 2011  Intel Corporation. All rights reserved.
   3  *
   4  * This program is free software; you can redistribute it and/or modify
   5  * it under the terms of the GNU General Public License as published by
   6  * the Free Software Foundation; either version 2 of the License, or
   7  * (at your option) any later version.
   8  *
   9  * This program is distributed in the hope that it will be useful,
  10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  12  * GNU General Public License for more details.
  13  *
  14  * You should have received a copy of the GNU General Public License
  15  * along with this program; if not, see <http://www.gnu.org/licenses/>.
  16  */
  17
  18 #define pr_fmt(fmt) "llcp: %s: " fmt, __func__
  19
  20 #include <linux/init.h>
  21 #include <linux/kernel.h>
  22 #include <linux/module.h>
  23 #include <linux/nfc.h>
  24
  25 #include "nfc.h"
  26 #include "llcp.h"
  27
  28 static int sock_wait_state(struct sock *sk, int state, unsigned long timeo)
  29 {
  30         DECLARE_WAITQUEUE(wait, current);
  31         int err = 0;
  32
  33         pr_debug("sk %p", sk);
  34
  35         add_wait_queue(sk_sleep(sk), &wait);
  36         set_current_state(TASK_INTERRUPTIBLE);
  37
  38         while (sk->sk_state != state) {
  39                 if (!timeo) {
  40                         err = -EINPROGRESS;
  41                         break;
  42                 }
  43
  44                 if (signal_pending(current)) {
  45                         err = sock_intr_errno(timeo);
  46                         break;
  47                 }
  48
  49                 release_sock(sk);
  50                 timeo = schedule_timeout(timeo);
  51                 lock_sock(sk);
  52                 set_current_state(TASK_INTERRUPTIBLE);
  53
  54                 err = sock_error(sk);
  55                 if (err)
  56                         break;
  57         }
  58
  59         __set_current_state(TASK_RUNNING);
  60         remove_wait_queue(sk_sleep(sk), &wait);
  61         return err;
  62 }
  63
  64 static struct proto llcp_sock_proto = {
  65         .name     = "NFC_LLCP",
  66         .owner    = THIS_MODULE,
  67         .obj_size = sizeof(struct nfc_llcp_sock),
  68 };
  69
  70 static int llcp_sock_bind(struct socket *sock, struct sockaddr *addr, int alen)
  71 {
  72         struct sock *sk = sock->sk;
  73         struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
  74         struct nfc_llcp_local *local;
  75         struct nfc_dev *dev;
  76         struct sockaddr_nfc_llcp llcp_addr;
  77         int len, ret = 0;
  78
  79         if (!addr || alen < offsetofend(struct sockaddr, sa_family) ||
  80             addr->sa_family != AF_NFC)
  81                 return -EINVAL;
  82
  83         pr_debug("sk %p addr %p family %d\n", sk, addr, addr->sa_family);
  84
  85         memset(&llcp_addr, 0, sizeof(llcp_addr));
  86         len = min_t(unsigned int, sizeof(llcp_addr), alen);
  87         memcpy(&llcp_addr, addr, len);
  88
  89         /* This is going to be a listening socket, dsap must be 0 */
  90         if (llcp_addr.dsap != 0)
  91                 return -EINVAL;
  92
  93         lock_sock(sk);
  94
  95         if (sk->sk_state != LLCP_CLOSED) {
  96                 ret = -EBADFD;
  97                 goto error;
  98         }
  99
 100         dev = nfc_get_device(llcp_addr.dev_idx);
 101         if (dev == NULL) {
 102                 ret = -ENODEV;
 103                 goto error;
 104         }
 105
 106         local = nfc_llcp_find_local(dev);
 107         if (local == NULL) {
 108                 ret = -ENODEV;
 109                 goto put_dev;
 110         }
 111
 112         llcp_sock->dev = dev;
 113         llcp_sock->local = nfc_llcp_local_get(local);
 114         llcp_sock->nfc_protocol = llcp_addr.nfc_protocol;
 115         llcp_sock->service_name_len = min_t(unsigned int,
 116                                             llcp_addr.service_name_len,
 117                                             NFC_LLCP_MAX_SERVICE_NAME);
 118         llcp_sock->service_name = kmemdup(llcp_addr.service_name,
 119                                           llcp_sock->service_name_len,
 120                                           GFP_KERNEL);
 121
 122         llcp_sock->ssap = nfc_llcp_get_sdp_ssap(local, llcp_sock);
 123         if (llcp_sock->ssap == LLCP_SAP_MAX) {
 124                 ret = -EADDRINUSE;
 125                 goto put_dev;
 126         }
 127
 128         llcp_sock->reserved_ssap = llcp_sock->ssap;
 129
 130         nfc_llcp_sock_link(&local->sockets, sk);
 131
 132         pr_debug("Socket bound to SAP %d\n", llcp_sock->ssap);
 133
 134         sk->sk_state = LLCP_BOUND;
 135
 136 put_dev:
 137         nfc_put_device(dev);
 138
 139 error:
 140         release_sock(sk);
 141         return ret;
 142 }
 143
 144 static int llcp_raw_sock_bind(struct socket *sock, struct sockaddr *addr,
 145                               int alen)
 146 {
 147         struct sock *sk = sock->sk;
 148         struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
 149         struct nfc_llcp_local *local;
 150         struct nfc_dev *dev;
 151         struct sockaddr_nfc_llcp llcp_addr;
 152         int len, ret = 0;
 153
 154         if (!addr || alen < offsetofend(struct sockaddr, sa_family) ||
 155             addr->sa_family != AF_NFC)
 156                 return -EINVAL;
 157
 158         pr_debug("sk %p addr %p family %d\n", sk, addr, addr->sa_family);
 159
 160         memset(&llcp_addr, 0, sizeof(llcp_addr));
 161         len = min_t(unsigned int, sizeof(llcp_addr), alen);
 162         memcpy(&llcp_addr, addr, len);
 163
 164         lock_sock(sk);
 165
 166         if (sk->sk_state != LLCP_CLOSED) {
 167                 ret = -EBADFD;
 168                 goto error;
 169         }
 170
 171         dev = nfc_get_device(llcp_addr.dev_idx);
 172         if (dev == NULL) {
 173                 ret = -ENODEV;
 174                 goto error;
 175         }
 176
 177         local = nfc_llcp_find_local(dev);
 178         if (local == NULL) {
 179                 ret = -ENODEV;
 180                 goto put_dev;
 181         }
 182
 183         llcp_sock->dev = dev;
 184         llcp_sock->local = nfc_llcp_local_get(local);
 185         llcp_sock->nfc_protocol = llcp_addr.nfc_protocol;
 186
 187         nfc_llcp_sock_link(&local->raw_sockets, sk);
 188
 189         sk->sk_state = LLCP_BOUND;
 190
 191 put_dev:
 192         nfc_put_device(dev);
 193
 194 error:
 195         release_sock(sk);
 196         return ret;
 197 }
 198
 199 static int llcp_sock_listen(struct socket *sock, int backlog)
 200 {
 201         struct sock *sk = sock->sk;
 202         int ret = 0;
 203
 204         pr_debug("sk %p backlog %d\n", sk, backlog);
 205
 206         lock_sock(sk);
 207
 208         if ((sock->type != SOCK_SEQPACKET && sock->type != SOCK_STREAM) ||
 209             sk->sk_state != LLCP_BOUND) {
 210                 ret = -EBADFD;
 211                 goto error;
 212         }
 213
 214         sk->sk_max_ack_backlog = backlog;
 215         sk->sk_ack_backlog = 0;
 216
 217         pr_debug("Socket listening\n");
 218         sk->sk_state = LLCP_LISTEN;
 219
 220 error:
 221         release_sock(sk);
 222
 223         return ret;
 224 }
 225
 226 static int nfc_llcp_setsockopt(struct socket *sock, int level, int optname,
 227                                char __user *optval, unsigned int optlen)
 228 {
 229         struct sock *sk = sock->sk;
 230         struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
 231         u32 opt;
 232         int err = 0;
 233
 234         pr_debug("%p optname %d\n", sk, optname);
 235
 236         if (level != SOL_NFC)
 237                 return -ENOPROTOOPT;
 238
 239         lock_sock(sk);
 240
 241         switch (optname) {
 242         case NFC_LLCP_RW:
 243                 if (sk->sk_state == LLCP_CONNECTED ||
 244                     sk->sk_state == LLCP_BOUND ||
 245                     sk->sk_state == LLCP_LISTEN) {
 246                         err = -EINVAL;
 247                         break;
 248                 }
 249
 250                 if (get_user(opt, (u32 __user *) optval)) {
 251                         err = -EFAULT;
 252                         break;
 253                 }
 254
 255                 if (opt > LLCP_MAX_RW) {
 256                         err = -EINVAL;
 257                         break;
 258                 }
 259
 260                 llcp_sock->rw = (u8) opt;
 261
 262                 break;
 263
 264         case NFC_LLCP_MIUX:
 265                 if (sk->sk_state == LLCP_CONNECTED ||
 266                     sk->sk_state == LLCP_BOUND ||
 267                     sk->sk_state == LLCP_LISTEN) {
 268                         err = -EINVAL;
 269                         break;
 270                 }
 271
 272                 if (get_user(opt, (u32 __user *) optval)) {
 273                         err = -EFAULT;
 274                         break;
 275                 }
 276
 277                 if (opt > LLCP_MAX_MIUX) {
 278                         err = -EINVAL;
 279                         break;
 280                 }
 281
 282                 llcp_sock->miux = cpu_to_be16((u16) opt);
 283
 284                 break;
 285
 286         default:
 287                 err = -ENOPROTOOPT;
 288                 break;
 289         }
 290
 291         release_sock(sk);
 292
 293         pr_debug("%p rw %d miux %d\n", llcp_sock,
 294                  llcp_sock->rw, llcp_sock->miux);
 295
 296         return err;
 297 }
 298
 299 static int nfc_llcp_getsockopt(struct socket *sock, int level, int optname,
 300                                char __user *optval, int __user *optlen)
 301 {
 302         struct nfc_llcp_local *local;
 303         struct sock *sk = sock->sk;
 304         struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
 305         int len, err = 0;
 306         u16 miux, remote_miu;
 307         u8 rw;
 308
 309         pr_debug("%p optname %d\n", sk, optname);
 310
 311         if (level != SOL_NFC)
 312                 return -ENOPROTOOPT;
 313
 314         if (get_user(len, optlen))
 315                 return -EFAULT;
 316
 317         local = llcp_sock->local;
 318         if (!local)
 319                 return -ENODEV;
 320
 321         len = min_t(u32, len, sizeof(u32));
 322
 323         lock_sock(sk);
 324
 325         switch (optname) {
 326         case NFC_LLCP_RW:
 327                 rw = llcp_sock->rw > LLCP_MAX_RW ? local->rw : llcp_sock->rw;
 328                 if (put_user(rw, (u32 __user *) optval))
 329                         err = -EFAULT;
 330
 331                 break;
 332
 333         case NFC_LLCP_MIUX:
 334                 miux = be16_to_cpu(llcp_sock->miux) > LLCP_MAX_MIUX ?
 335                         be16_to_cpu(local->miux) : be16_to_cpu(llcp_sock->miux);
 336
 337                 if (put_user(miux, (u32 __user *) optval))
 338                         err = -EFAULT;
 339
 340                 break;
 341
 342         case NFC_LLCP_REMOTE_MIU:
 343                 remote_miu = llcp_sock->remote_miu > LLCP_MAX_MIU ?
 344                                 local->remote_miu : llcp_sock->remote_miu;
 345
 346                 if (put_user(remote_miu, (u32 __user *) optval))
 347                         err = -EFAULT;
 348
 349                 break;
 350
 351         case NFC_LLCP_REMOTE_LTO:
 352                 if (put_user(local->remote_lto / 10, (u32 __user *) optval))
 353                         err = -EFAULT;
 354
 355                 break;
 356
 357         case NFC_LLCP_REMOTE_RW:
 358                 if (put_user(llcp_sock->remote_rw, (u32 __user *) optval))
 359                         err = -EFAULT;
 360
 361                 break;
 362
 363         default:
 364                 err = -ENOPROTOOPT;
 365                 break;
 366         }
 367
 368         release_sock(sk);
 369
 370         if (put_user(len, optlen))
 371                 return -EFAULT;
 372
 373         return err;
 374 }
 375
 376 void nfc_llcp_accept_unlink(struct sock *sk)
 377 {
 378         struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
 379
 380         pr_debug("state %d\n", sk->sk_state);
 381
 382         list_del_init(&llcp_sock->accept_queue);
 383         sk_acceptq_removed(llcp_sock->parent);
 384         llcp_sock->parent = NULL;
 385
 386         sock_put(sk);
 387 }
 388
 389 void nfc_llcp_accept_enqueue(struct sock *parent, struct sock *sk)
 390 {
 391         struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
 392         struct nfc_llcp_sock *llcp_sock_parent = nfc_llcp_sock(parent);
 393
 394         /* Lock will be free from unlink */
 395         sock_hold(sk);
 396
 397         list_add_tail(&llcp_sock->accept_queue,
 398                       &llcp_sock_parent->accept_queue);
 399         llcp_sock->parent = parent;
 400         sk_acceptq_added(parent);
 401 }
 402
 403 struct sock *nfc_llcp_accept_dequeue(struct sock *parent,
 404                                      struct socket *newsock)
 405 {
 406         struct nfc_llcp_sock *lsk, *n, *llcp_parent;
 407         struct sock *sk;
 408
 409         llcp_parent = nfc_llcp_sock(parent);
 410
 411         list_for_each_entry_safe(lsk, n, &llcp_parent->accept_queue,
 412                                  accept_queue) {
 413                 sk = &lsk->sk;
 414                 lock_sock(sk);
 415
 416                 if (sk->sk_state == LLCP_CLOSED) {
 417                         release_sock(sk);
 418                         nfc_llcp_accept_unlink(sk);
 419                         continue;
 420                 }
 421
 422                 if (sk->sk_state == LLCP_CONNECTED || !newsock) {
 423                         list_del_init(&lsk->accept_queue);
 424                         sock_put(sk);
 425
 426                         if (newsock)
 427                                 sock_graft(sk, newsock);
 428
 429                         release_sock(sk);
 430
 431                         pr_debug("Returning sk state %d\n", sk->sk_state);
 432
 433                         sk_acceptq_removed(parent);
 434
 435                         return sk;
 436                 }
 437
 438                 release_sock(sk);
 439         }
 440
 441         return NULL;
 442 }
 443
 444 static int llcp_sock_accept(struct socket *sock, struct socket *newsock,
 445                             int flags)
 446 {
 447         DECLARE_WAITQUEUE(wait, current);
 448         struct sock *sk = sock->sk, *new_sk;
 449         long timeo;
 450         int ret = 0;
 451
 452         pr_debug("parent %p\n", sk);
 453
 454         lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
 455
 456         if (sk->sk_state != LLCP_LISTEN) {
 457                 ret = -EBADFD;
 458                 goto error;
 459         }
 460
 461         timeo = sock_rcvtimeo(sk, flags & O_NONBLOCK);
 462
 463         /* Wait for an incoming connection. */
 464         add_wait_queue_exclusive(sk_sleep(sk), &wait);
 465         while (!(new_sk = nfc_llcp_accept_dequeue(sk, newsock))) {
 466                 set_current_state(TASK_INTERRUPTIBLE);
 467
 468                 if (!timeo) {
 469                         ret = -EAGAIN;
 470                         break;
 471                 }
 472
 473                 if (signal_pending(current)) {
 474                         ret = sock_intr_errno(timeo);
 475                         break;
 476                 }
 477
 478                 release_sock(sk);
 479                 timeo = schedule_timeout(timeo);
 480                 lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
 481         }
 482         __set_current_state(TASK_RUNNING);
 483         remove_wait_queue(sk_sleep(sk), &wait);
 484
 485         if (ret)
 486                 goto error;
 487
 488         newsock->state = SS_CONNECTED;
 489
 490         pr_debug("new socket %p\n", new_sk);
 491
 492 error:
 493         release_sock(sk);
 494
 495         return ret;
 496 }
 497
 498 static int llcp_sock_getname(struct socket *sock, struct sockaddr *uaddr,
 499                              int *len, int peer)
 500 {
 501         struct sock *sk = sock->sk;
 502         struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
 503         DECLARE_SOCKADDR(struct sockaddr_nfc_llcp *, llcp_addr, uaddr);
 504
 505         if (llcp_sock == NULL || llcp_sock->dev == NULL)
 506                 return -EBADFD;
 507
 508         pr_debug("%p %d %d %d\n", sk, llcp_sock->target_idx,
 509                  llcp_sock->dsap, llcp_sock->ssap);
 510
 511         memset(llcp_addr, 0, sizeof(*llcp_addr));
 512         *len = sizeof(struct sockaddr_nfc_llcp);
 513
 514         lock_sock(sk);
 515         if (!llcp_sock->dev) {
 516                 release_sock(sk);
 517                 return -EBADFD;
 518         }
 519         llcp_addr->sa_family = AF_NFC;
 520         llcp_addr->dev_idx = llcp_sock->dev->idx;
 521         llcp_addr->target_idx = llcp_sock->target_idx;
 522         llcp_addr->nfc_protocol = llcp_sock->nfc_protocol;
 523         llcp_addr->dsap = llcp_sock->dsap;
 524         llcp_addr->ssap = llcp_sock->ssap;
 525         llcp_addr->service_name_len = llcp_sock->service_name_len;
 526         memcpy(llcp_addr->service_name, llcp_sock->service_name,
 527                llcp_addr->service_name_len);
 528         release_sock(sk);
 529
 530         return 0;
 531 }
 532
 533 static inline unsigned int llcp_accept_poll(struct sock *parent)
 534 {
 535         struct nfc_llcp_sock *llcp_sock, *parent_sock;
 536         struct sock *sk;
 537
 538         parent_sock = nfc_llcp_sock(parent);
 539
 540         list_for_each_entry(llcp_sock, &parent_sock->accept_queue,
 541                             accept_queue) {
 542                 sk = &llcp_sock->sk;
 543
 544                 if (sk->sk_state == LLCP_CONNECTED)
 545                         return POLLIN | POLLRDNORM;
 546         }
 547
 548         return 0;
 549 }
 550
 551 static unsigned int llcp_sock_poll(struct file *file, struct socket *sock,
 552                                    poll_table *wait)
 553 {
 554         struct sock *sk = sock->sk;
 555         unsigned int mask = 0;
 556
 557         pr_debug("%p\n", sk);
 558
 559         sock_poll_wait(file, sk_sleep(sk), wait);
 560
 561         if (sk->sk_state == LLCP_LISTEN)
 562                 return llcp_accept_poll(sk);
 563
 564         if (sk->sk_err || !skb_queue_empty(&sk->sk_error_queue))
 565                 mask |= POLLERR |
 566                         (sock_flag(sk, SOCK_SELECT_ERR_QUEUE) ? POLLPRI : 0);
 567
 568         if (!skb_queue_empty(&sk->sk_receive_queue))
 569                 mask |= POLLIN | POLLRDNORM;
 570
 571         if (sk->sk_state == LLCP_CLOSED)
 572                 mask |= POLLHUP;
 573
 574         if (sk->sk_shutdown & RCV_SHUTDOWN)
 575                 mask |= POLLRDHUP | POLLIN | POLLRDNORM;
 576
 577         if (sk->sk_shutdown == SHUTDOWN_MASK)
 578                 mask |= POLLHUP;
 579
 580         if (sock_writeable(sk) && sk->sk_state == LLCP_CONNECTED)
 581                 mask |= POLLOUT | POLLWRNORM | POLLWRBAND;
 582         else
 583                 sk_set_bit(SOCKWQ_ASYNC_NOSPACE, sk);
 584
 585         pr_debug("mask 0x%x\n", mask);
 586
 587         return mask;
 588 }
 589
 590 static int llcp_sock_release(struct socket *sock)
 591 {
 592         struct sock *sk = sock->sk;
 593         struct nfc_llcp_local *local;
 594         struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
 595         int err = 0;
 596
 597         if (!sk)
 598                 return 0;
 599
 600         pr_debug("%p\n", sk);
 601
 602         local = llcp_sock->local;
 603         if (local == NULL) {
 604                 err = -ENODEV;
 605                 goto out;
 606         }
 607
 608         lock_sock(sk);
 609
 610         /* Send a DISC */
 611         if (sk->sk_state == LLCP_CONNECTED)
 612                 nfc_llcp_send_disconnect(llcp_sock);
 613
 614         if (sk->sk_state == LLCP_LISTEN) {
 615                 struct nfc_llcp_sock *lsk, *n;
 616                 struct sock *accept_sk;
 617
 618                 list_for_each_entry_safe(lsk, n, &llcp_sock->accept_queue,
 619                                          accept_queue) {
 620                         accept_sk = &lsk->sk;
 621                         lock_sock(accept_sk);
 622
 623                         nfc_llcp_send_disconnect(lsk);
 624                         nfc_llcp_accept_unlink(accept_sk);
 625
 626                         release_sock(accept_sk);
 627                 }
 628         }
 629
 630         if (llcp_sock->reserved_ssap < LLCP_SAP_MAX)
 631                 nfc_llcp_put_ssap(llcp_sock->local, llcp_sock->ssap);
 632
 633         release_sock(sk);
 634
 635         /* Keep this sock alive and therefore do not remove it from the sockets
 636          * list until the DISC PDU has been actually sent. Otherwise we would
 637          * reply with DM PDUs before sending the DISC one.
 638          */
 639         if (sk->sk_state == LLCP_DISCONNECTING)
 640                 return err;
 641
 642         if (sock->type == SOCK_RAW)
 643                 nfc_llcp_sock_unlink(&local->raw_sockets, sk);
 644         else
 645                 nfc_llcp_sock_unlink(&local->sockets, sk);
 646
 647 out:
 648         sock_orphan(sk);
 649         sock_put(sk);
 650
 651         return err;
 652 }
 653
 654 static int llcp_sock_connect(struct socket *sock, struct sockaddr *_addr,
 655                              int len, int flags)
 656 {
 657         struct sock *sk = sock->sk;
 658         struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
 659         struct sockaddr_nfc_llcp *addr = (struct sockaddr_nfc_llcp *)_addr;
 660         struct nfc_dev *dev;
 661         struct nfc_llcp_local *local;
 662         int ret = 0;
 663
 664         pr_debug("sock %p sk %p flags 0x%x\n", sock, sk, flags);
 665
 666         if (!addr || len < sizeof(*addr) || addr->sa_family != AF_NFC)
 667                 return -EINVAL;
 668
 669         if (addr->service_name_len == 0 && addr->dsap == 0)
 670                 return -EINVAL;
 671
 672         pr_debug("addr dev_idx=%u target_idx=%u protocol=%u\n", addr->dev_idx,
 673                  addr->target_idx, addr->nfc_protocol);
 674
 675         lock_sock(sk);
 676
 677         if (sk->sk_state == LLCP_CONNECTED) {
 678                 ret = -EISCONN;
 679                 goto error;
 680         }
 681
 682         dev = nfc_get_device(addr->dev_idx);
 683         if (dev == NULL) {
 684                 ret = -ENODEV;
 685                 goto error;
 686         }
 687
 688         local = nfc_llcp_find_local(dev);
 689         if (local == NULL) {
 690                 ret = -ENODEV;
 691                 goto put_dev;
 692         }
 693
 694         device_lock(&dev->dev);
 695         if (dev->dep_link_up == false) {
 696                 ret = -ENOLINK;
 697                 device_unlock(&dev->dev);
 698                 goto put_dev;
 699         }
 700         device_unlock(&dev->dev);
 701
 702         if (local->rf_mode == NFC_RF_INITIATOR &&
 703             addr->target_idx != local->target_idx) {
 704                 ret = -ENOLINK;
 705                 goto put_dev;
 706         }
 707
 708         llcp_sock->dev = dev;
 709         llcp_sock->local = nfc_llcp_local_get(local);
 710         llcp_sock->ssap = nfc_llcp_get_local_ssap(local);
 711         if (llcp_sock->ssap == LLCP_SAP_MAX) {
 712                 ret = -ENOMEM;
 713                 goto put_dev;
 714         }
 715
 716         llcp_sock->reserved_ssap = llcp_sock->ssap;
 717
 718         if (addr->service_name_len == 0)
 719                 llcp_sock->dsap = addr->dsap;
 720         else
 721                 llcp_sock->dsap = LLCP_SAP_SDP;
 722         llcp_sock->nfc_protocol = addr->nfc_protocol;
 723         llcp_sock->service_name_len = min_t(unsigned int,
 724                                             addr->service_name_len,
 725                                             NFC_LLCP_MAX_SERVICE_NAME);
 726         llcp_sock->service_name = kmemdup(addr->service_name,
 727                                           llcp_sock->service_name_len,
 728                                           GFP_KERNEL);
 729
 730         nfc_llcp_sock_link(&local->connecting_sockets, sk);
 731
 732         ret = nfc_llcp_send_connect(llcp_sock);
 733         if (ret)
 734                 goto sock_unlink;
 735
 736         sk->sk_state = LLCP_CONNECTING;
 737
 738         ret = sock_wait_state(sk, LLCP_CONNECTED,
 739                               sock_sndtimeo(sk, flags & O_NONBLOCK));
 740         if (ret && ret != -EINPROGRESS)
 741                 goto sock_unlink;
 742
 743         release_sock(sk);
 744
 745         return ret;
 746
 747 sock_unlink:
 748         nfc_llcp_put_ssap(local, llcp_sock->ssap);
 749
 750         nfc_llcp_sock_unlink(&local->connecting_sockets, sk);
 751
 752 put_dev:
 753         nfc_put_device(dev);
 754
 755 error:
 756         release_sock(sk);
 757         return ret;
 758 }
 759
 760 static int llcp_sock_sendmsg(struct socket *sock, struct msghdr *msg,
 761                              size_t len)
 762 {
 763         struct sock *sk = sock->sk;
 764         struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
 765         int ret;
 766
 767         pr_debug("sock %p sk %p", sock, sk);
 768
 769         ret = sock_error(sk);
 770         if (ret)
 771                 return ret;
 772
 773         if (msg->msg_flags & MSG_OOB)
 774                 return -EOPNOTSUPP;
 775
 776         lock_sock(sk);
 777
 778         if (sk->sk_type == SOCK_DGRAM) {
 779                 DECLARE_SOCKADDR(struct sockaddr_nfc_llcp *, addr,
 780                                  msg->msg_name);
 781
 782                 if (msg->msg_namelen < sizeof(*addr)) {
 783                         release_sock(sk);
 784                         return -EINVAL;
 785                 }
 786
 787                 release_sock(sk);
 788
 789                 return nfc_llcp_send_ui_frame(llcp_sock, addr->dsap, addr->ssap,
 790                                               msg, len);
 791         }
 792
 793         if (sk->sk_state != LLCP_CONNECTED) {
 794                 release_sock(sk);
 795                 return -ENOTCONN;
 796         }
 797
 798         release_sock(sk);
 799
 800         return nfc_llcp_send_i_frame(llcp_sock, msg, len);
 801 }
 802
 803 static int llcp_sock_recvmsg(struct socket *sock, struct msghdr *msg,
 804                              size_t len, int flags)
 805 {
 806         int noblock = flags & MSG_DONTWAIT;
 807         struct sock *sk = sock->sk;
 808         unsigned int copied, rlen;
 809         struct sk_buff *skb, *cskb;
 810         int err = 0;
 811
 812         pr_debug("%p %zu\n", sk, len);
 813
 814         lock_sock(sk);
 815
 816         if (sk->sk_state == LLCP_CLOSED &&
 817             skb_queue_empty(&sk->sk_receive_queue)) {
 818                 release_sock(sk);
 819                 return 0;
 820         }
 821
 822         release_sock(sk);
 823
 824         if (flags & (MSG_OOB))
 825                 return -EOPNOTSUPP;
 826
 827         skb = skb_recv_datagram(sk, flags, noblock, &err);
 828         if (!skb) {
 829                 pr_err("Recv datagram failed state %d %d %d",
 830                        sk->sk_state, err, sock_error(sk));
 831
 832                 if (sk->sk_shutdown & RCV_SHUTDOWN)
 833                         return 0;
 834
 835                 return err;
 836         }
 837
 838         rlen = skb->len;                /* real length of skb */
 839         copied = min_t(unsigned int, rlen, len);
 840
 841         cskb = skb;
 842         if (skb_copy_datagram_msg(cskb, 0, msg, copied)) {
 843                 if (!(flags & MSG_PEEK))
 844                         skb_queue_head(&sk->sk_receive_queue, skb);
 845                 return -EFAULT;
 846         }
 847
 848         sock_recv_timestamp(msg, sk, skb);
 849
 850         if (sk->sk_type == SOCK_DGRAM && msg->msg_name) {
 851                 struct nfc_llcp_ui_cb *ui_cb = nfc_llcp_ui_skb_cb(skb);
 852                 DECLARE_SOCKADDR(struct sockaddr_nfc_llcp *, sockaddr,
 853                                  msg->msg_name);
 854
 855                 msg->msg_namelen = sizeof(struct sockaddr_nfc_llcp);
 856
 857                 pr_debug("Datagram socket %d %d\n", ui_cb->dsap, ui_cb->ssap);
 858
 859                 memset(sockaddr, 0, sizeof(*sockaddr));
 860                 sockaddr->sa_family = AF_NFC;
 861                 sockaddr->nfc_protocol = NFC_PROTO_NFC_DEP;
 862                 sockaddr->dsap = ui_cb->dsap;
 863                 sockaddr->ssap = ui_cb->ssap;
 864         }
 865
 866         /* Mark read part of skb as used */
 867         if (!(flags & MSG_PEEK)) {
 868
 869                 /* SOCK_STREAM: re-queue skb if it contains unreceived data */
 870                 if (sk->sk_type == SOCK_STREAM ||
 871                     sk->sk_type == SOCK_DGRAM ||
 872                     sk->sk_type == SOCK_RAW) {
 873                         skb_pull(skb, copied);
 874                         if (skb->len) {
 875                                 skb_queue_head(&sk->sk_receive_queue, skb);
 876                                 goto done;
 877                         }
 878                 }
 879
 880                 kfree_skb(skb);
 881         }
 882
 883         /* XXX Queue backlogged skbs */
 884
 885 done:
 886         /* SOCK_SEQPACKET: return real length if MSG_TRUNC is set */
 887         if (sk->sk_type == SOCK_SEQPACKET && (flags & MSG_TRUNC))
 888                 copied = rlen;
 889
 890         return copied;
 891 }
 892
 893 static const struct proto_ops llcp_sock_ops = {
 894         .family         = PF_NFC,
 895         .owner          = THIS_MODULE,
 896         .bind           = llcp_sock_bind,
 897         .connect        = llcp_sock_connect,
 898         .release        = llcp_sock_release,
 899         .socketpair     = sock_no_socketpair,
 900         .accept         = llcp_sock_accept,
 901         .getname        = llcp_sock_getname,
 902         .poll           = llcp_sock_poll,
 903         .ioctl          = sock_no_ioctl,
 904         .listen         = llcp_sock_listen,
 905         .shutdown       = sock_no_shutdown,
 906         .setsockopt     = nfc_llcp_setsockopt,
 907         .getsockopt     = nfc_llcp_getsockopt,
 908         .sendmsg        = llcp_sock_sendmsg,
 909         .recvmsg        = llcp_sock_recvmsg,
 910         .mmap           = sock_no_mmap,
 911 };
 912
 913 static const struct proto_ops llcp_rawsock_ops = {
 914         .family         = PF_NFC,
 915         .owner          = THIS_MODULE,
 916         .bind           = llcp_raw_sock_bind,
 917         .connect        = sock_no_connect,
 918         .release        = llcp_sock_release,
 919         .socketpair     = sock_no_socketpair,
 920         .accept         = sock_no_accept,
 921         .getname        = llcp_sock_getname,
 922         .poll           = llcp_sock_poll,
 923         .ioctl          = sock_no_ioctl,
 924         .listen         = sock_no_listen,
 925         .shutdown       = sock_no_shutdown,
 926         .setsockopt     = sock_no_setsockopt,
 927         .getsockopt     = sock_no_getsockopt,
 928         .sendmsg        = sock_no_sendmsg,
 929         .recvmsg        = llcp_sock_recvmsg,
 930         .mmap           = sock_no_mmap,
 931 };
 932
 933 static void llcp_sock_destruct(struct sock *sk)
 934 {
 935         struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
 936
 937         pr_debug("%p\n", sk);
 938
 939         if (sk->sk_state == LLCP_CONNECTED)
 940                 nfc_put_device(llcp_sock->dev);
 941
 942         skb_queue_purge(&sk->sk_receive_queue);
 943
 944         nfc_llcp_sock_free(llcp_sock);
 945
 946         if (!sock_flag(sk, SOCK_DEAD)) {
 947                 pr_err("Freeing alive NFC LLCP socket %p\n", sk);
 948                 return;
 949         }
 950 }
 951
 952 struct sock *nfc_llcp_sock_alloc(struct socket *sock, int type, gfp_t gfp, int kern)
 953 {
 954         struct sock *sk;
 955         struct nfc_llcp_sock *llcp_sock;
 956
 957         sk = sk_alloc(&init_net, PF_NFC, gfp, &llcp_sock_proto, kern);
 958         if (!sk)
 959                 return NULL;
 960
 961         llcp_sock = nfc_llcp_sock(sk);
 962
 963         sock_init_data(sock, sk);
 964         sk->sk_state = LLCP_CLOSED;
 965         sk->sk_protocol = NFC_SOCKPROTO_LLCP;
 966         sk->sk_type = type;
 967         sk->sk_destruct = llcp_sock_destruct;
 968
 969         llcp_sock->ssap = 0;
 970         llcp_sock->dsap = LLCP_SAP_SDP;
 971         llcp_sock->rw = LLCP_MAX_RW + 1;
 972         llcp_sock->miux = cpu_to_be16(LLCP_MAX_MIUX + 1);
 973         llcp_sock->send_n = llcp_sock->send_ack_n = 0;
 974         llcp_sock->recv_n = llcp_sock->recv_ack_n = 0;
 975         llcp_sock->remote_ready = 1;
 976         llcp_sock->reserved_ssap = LLCP_SAP_MAX;
 977         nfc_llcp_socket_remote_param_init(llcp_sock);
 978         skb_queue_head_init(&llcp_sock->tx_queue);
 979         skb_queue_head_init(&llcp_sock->tx_pending_queue);
 980         INIT_LIST_HEAD(&llcp_sock->accept_queue);
 981
 982         if (sock != NULL)
 983                 sock->state = SS_UNCONNECTED;
 984
 985         return sk;
 986 }
 987
 988 void nfc_llcp_sock_free(struct nfc_llcp_sock *sock)
 989 {
 990         kfree(sock->service_name);
 991
 992         skb_queue_purge(&sock->tx_queue);
 993         skb_queue_purge(&sock->tx_pending_queue);
 994
 995         list_del_init(&sock->accept_queue);
 996
 997         sock->parent = NULL;
 998
 999         nfc_llcp_local_put(sock->local);
1000 }
1001
1002 static int llcp_sock_create(struct net *net, struct socket *sock,
1003                             const struct nfc_protocol *nfc_proto, int kern)
1004 {
1005         struct sock *sk;
1006
1007         pr_debug("%p\n", sock);
1008
1009         if (sock->type != SOCK_STREAM &&
1010             sock->type != SOCK_DGRAM &&
1011             sock->type != SOCK_RAW)
1012                 return -ESOCKTNOSUPPORT;
1013
1014         if (sock->type == SOCK_RAW)
1015                 sock->ops = &llcp_rawsock_ops;
1016         else
1017                 sock->ops = &llcp_sock_ops;
1018
1019         sk = nfc_llcp_sock_alloc(sock, sock->type, GFP_ATOMIC, kern);
1020         if (sk == NULL)
1021                 return -ENOMEM;
1022
1023         return 0;
1024 }
1025
1026 static const struct nfc_protocol llcp_nfc_proto = {
1027         .id       = NFC_SOCKPROTO_LLCP,
1028         .proto    = &llcp_sock_proto,
1029         .owner    = THIS_MODULE,
1030         .create   = llcp_sock_create
1031 };
1032
1033 int __init nfc_llcp_sock_init(void)
1034 {
1035         return nfc_proto_register(&llcp_nfc_proto);
1036 }
1037
1038 void nfc_llcp_sock_exit(void)
1039 {
1040         nfc_proto_unregister(&llcp_nfc_proto);
1041 }