xref: /linux/net/nfc/llcp_sock.c (revision bb1c928df78ee6e3665a0d013e74108cc9abf34b)
1 /*
2  * Copyright (C) 2011  Intel Corporation. All rights reserved.
3  *
4  * This program is free software; you can redistribute it and/or modify
5  * it under the terms of the GNU General Public License as published by
6  * the Free Software Foundation; either version 2 of the License, or
7  * (at your option) any later version.
8  *
9  * This program is distributed in the hope that it will be useful,
10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12  * GNU General Public License for more details.
13  *
14  * You should have received a copy of the GNU General Public License
15  * along with this program; if not, see <http://www.gnu.org/licenses/>.
16  */
17 
18 #define pr_fmt(fmt) "llcp: %s: " fmt, __func__
19 
20 #include <linux/init.h>
21 #include <linux/kernel.h>
22 #include <linux/module.h>
23 #include <linux/nfc.h>
24 #include <linux/sched/signal.h>
25 
26 #include "nfc.h"
27 #include "llcp.h"
28 
29 static int sock_wait_state(struct sock *sk, int state, unsigned long timeo)
30 {
31 	DECLARE_WAITQUEUE(wait, current);
32 	int err = 0;
33 
34 	pr_debug("sk %p", sk);
35 
36 	add_wait_queue(sk_sleep(sk), &wait);
37 	set_current_state(TASK_INTERRUPTIBLE);
38 
39 	while (sk->sk_state != state) {
40 		if (!timeo) {
41 			err = -EINPROGRESS;
42 			break;
43 		}
44 
45 		if (signal_pending(current)) {
46 			err = sock_intr_errno(timeo);
47 			break;
48 		}
49 
50 		release_sock(sk);
51 		timeo = schedule_timeout(timeo);
52 		lock_sock(sk);
53 		set_current_state(TASK_INTERRUPTIBLE);
54 
55 		err = sock_error(sk);
56 		if (err)
57 			break;
58 	}
59 
60 	__set_current_state(TASK_RUNNING);
61 	remove_wait_queue(sk_sleep(sk), &wait);
62 	return err;
63 }
64 
65 static struct proto llcp_sock_proto = {
66 	.name     = "NFC_LLCP",
67 	.owner    = THIS_MODULE,
68 	.obj_size = sizeof(struct nfc_llcp_sock),
69 };
70 
71 static int llcp_sock_bind(struct socket *sock, struct sockaddr *addr, int alen)
72 {
73 	struct sock *sk = sock->sk;
74 	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
75 	struct nfc_llcp_local *local;
76 	struct nfc_dev *dev;
77 	struct sockaddr_nfc_llcp llcp_addr;
78 	int len, ret = 0;
79 
80 	if (!addr || alen < offsetofend(struct sockaddr, sa_family) ||
81 	    addr->sa_family != AF_NFC)
82 		return -EINVAL;
83 
84 	pr_debug("sk %p addr %p family %d\n", sk, addr, addr->sa_family);
85 
86 	memset(&llcp_addr, 0, sizeof(llcp_addr));
87 	len = min_t(unsigned int, sizeof(llcp_addr), alen);
88 	memcpy(&llcp_addr, addr, len);
89 
90 	/* This is going to be a listening socket, dsap must be 0 */
91 	if (llcp_addr.dsap != 0)
92 		return -EINVAL;
93 
94 	lock_sock(sk);
95 
96 	if (sk->sk_state != LLCP_CLOSED) {
97 		ret = -EBADFD;
98 		goto error;
99 	}
100 
101 	dev = nfc_get_device(llcp_addr.dev_idx);
102 	if (dev == NULL) {
103 		ret = -ENODEV;
104 		goto error;
105 	}
106 
107 	local = nfc_llcp_find_local(dev);
108 	if (local == NULL) {
109 		ret = -ENODEV;
110 		goto put_dev;
111 	}
112 
113 	llcp_sock->dev = dev;
114 	llcp_sock->local = nfc_llcp_local_get(local);
115 	llcp_sock->nfc_protocol = llcp_addr.nfc_protocol;
116 	llcp_sock->service_name_len = min_t(unsigned int,
117 					    llcp_addr.service_name_len,
118 					    NFC_LLCP_MAX_SERVICE_NAME);
119 	llcp_sock->service_name = kmemdup(llcp_addr.service_name,
120 					  llcp_sock->service_name_len,
121 					  GFP_KERNEL);
122 
123 	llcp_sock->ssap = nfc_llcp_get_sdp_ssap(local, llcp_sock);
124 	if (llcp_sock->ssap == LLCP_SAP_MAX) {
125 		ret = -EADDRINUSE;
126 		goto put_dev;
127 	}
128 
129 	llcp_sock->reserved_ssap = llcp_sock->ssap;
130 
131 	nfc_llcp_sock_link(&local->sockets, sk);
132 
133 	pr_debug("Socket bound to SAP %d\n", llcp_sock->ssap);
134 
135 	sk->sk_state = LLCP_BOUND;
136 
137 put_dev:
138 	nfc_put_device(dev);
139 
140 error:
141 	release_sock(sk);
142 	return ret;
143 }
144 
145 static int llcp_raw_sock_bind(struct socket *sock, struct sockaddr *addr,
146 			      int alen)
147 {
148 	struct sock *sk = sock->sk;
149 	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
150 	struct nfc_llcp_local *local;
151 	struct nfc_dev *dev;
152 	struct sockaddr_nfc_llcp llcp_addr;
153 	int len, ret = 0;
154 
155 	if (!addr || alen < offsetofend(struct sockaddr, sa_family) ||
156 	    addr->sa_family != AF_NFC)
157 		return -EINVAL;
158 
159 	pr_debug("sk %p addr %p family %d\n", sk, addr, addr->sa_family);
160 
161 	memset(&llcp_addr, 0, sizeof(llcp_addr));
162 	len = min_t(unsigned int, sizeof(llcp_addr), alen);
163 	memcpy(&llcp_addr, addr, len);
164 
165 	lock_sock(sk);
166 
167 	if (sk->sk_state != LLCP_CLOSED) {
168 		ret = -EBADFD;
169 		goto error;
170 	}
171 
172 	dev = nfc_get_device(llcp_addr.dev_idx);
173 	if (dev == NULL) {
174 		ret = -ENODEV;
175 		goto error;
176 	}
177 
178 	local = nfc_llcp_find_local(dev);
179 	if (local == NULL) {
180 		ret = -ENODEV;
181 		goto put_dev;
182 	}
183 
184 	llcp_sock->dev = dev;
185 	llcp_sock->local = nfc_llcp_local_get(local);
186 	llcp_sock->nfc_protocol = llcp_addr.nfc_protocol;
187 
188 	nfc_llcp_sock_link(&local->raw_sockets, sk);
189 
190 	sk->sk_state = LLCP_BOUND;
191 
192 put_dev:
193 	nfc_put_device(dev);
194 
195 error:
196 	release_sock(sk);
197 	return ret;
198 }
199 
200 static int llcp_sock_listen(struct socket *sock, int backlog)
201 {
202 	struct sock *sk = sock->sk;
203 	int ret = 0;
204 
205 	pr_debug("sk %p backlog %d\n", sk, backlog);
206 
207 	lock_sock(sk);
208 
209 	if ((sock->type != SOCK_SEQPACKET && sock->type != SOCK_STREAM) ||
210 	    sk->sk_state != LLCP_BOUND) {
211 		ret = -EBADFD;
212 		goto error;
213 	}
214 
215 	sk->sk_max_ack_backlog = backlog;
216 	sk->sk_ack_backlog = 0;
217 
218 	pr_debug("Socket listening\n");
219 	sk->sk_state = LLCP_LISTEN;
220 
221 error:
222 	release_sock(sk);
223 
224 	return ret;
225 }
226 
227 static int nfc_llcp_setsockopt(struct socket *sock, int level, int optname,
228 			       char __user *optval, unsigned int optlen)
229 {
230 	struct sock *sk = sock->sk;
231 	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
232 	u32 opt;
233 	int err = 0;
234 
235 	pr_debug("%p optname %d\n", sk, optname);
236 
237 	if (level != SOL_NFC)
238 		return -ENOPROTOOPT;
239 
240 	lock_sock(sk);
241 
242 	switch (optname) {
243 	case NFC_LLCP_RW:
244 		if (sk->sk_state == LLCP_CONNECTED ||
245 		    sk->sk_state == LLCP_BOUND ||
246 		    sk->sk_state == LLCP_LISTEN) {
247 			err = -EINVAL;
248 			break;
249 		}
250 
251 		if (get_user(opt, (u32 __user *) optval)) {
252 			err = -EFAULT;
253 			break;
254 		}
255 
256 		if (opt > LLCP_MAX_RW) {
257 			err = -EINVAL;
258 			break;
259 		}
260 
261 		llcp_sock->rw = (u8) opt;
262 
263 		break;
264 
265 	case NFC_LLCP_MIUX:
266 		if (sk->sk_state == LLCP_CONNECTED ||
267 		    sk->sk_state == LLCP_BOUND ||
268 		    sk->sk_state == LLCP_LISTEN) {
269 			err = -EINVAL;
270 			break;
271 		}
272 
273 		if (get_user(opt, (u32 __user *) optval)) {
274 			err = -EFAULT;
275 			break;
276 		}
277 
278 		if (opt > LLCP_MAX_MIUX) {
279 			err = -EINVAL;
280 			break;
281 		}
282 
283 		llcp_sock->miux = cpu_to_be16((u16) opt);
284 
285 		break;
286 
287 	default:
288 		err = -ENOPROTOOPT;
289 		break;
290 	}
291 
292 	release_sock(sk);
293 
294 	pr_debug("%p rw %d miux %d\n", llcp_sock,
295 		 llcp_sock->rw, llcp_sock->miux);
296 
297 	return err;
298 }
299 
300 static int nfc_llcp_getsockopt(struct socket *sock, int level, int optname,
301 			       char __user *optval, int __user *optlen)
302 {
303 	struct nfc_llcp_local *local;
304 	struct sock *sk = sock->sk;
305 	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
306 	int len, err = 0;
307 	u16 miux, remote_miu;
308 	u8 rw;
309 
310 	pr_debug("%p optname %d\n", sk, optname);
311 
312 	if (level != SOL_NFC)
313 		return -ENOPROTOOPT;
314 
315 	if (get_user(len, optlen))
316 		return -EFAULT;
317 
318 	local = llcp_sock->local;
319 	if (!local)
320 		return -ENODEV;
321 
322 	len = min_t(u32, len, sizeof(u32));
323 
324 	lock_sock(sk);
325 
326 	switch (optname) {
327 	case NFC_LLCP_RW:
328 		rw = llcp_sock->rw > LLCP_MAX_RW ? local->rw : llcp_sock->rw;
329 		if (put_user(rw, (u32 __user *) optval))
330 			err = -EFAULT;
331 
332 		break;
333 
334 	case NFC_LLCP_MIUX:
335 		miux = be16_to_cpu(llcp_sock->miux) > LLCP_MAX_MIUX ?
336 			be16_to_cpu(local->miux) : be16_to_cpu(llcp_sock->miux);
337 
338 		if (put_user(miux, (u32 __user *) optval))
339 			err = -EFAULT;
340 
341 		break;
342 
343 	case NFC_LLCP_REMOTE_MIU:
344 		remote_miu = llcp_sock->remote_miu > LLCP_MAX_MIU ?
345 				local->remote_miu : llcp_sock->remote_miu;
346 
347 		if (put_user(remote_miu, (u32 __user *) optval))
348 			err = -EFAULT;
349 
350 		break;
351 
352 	case NFC_LLCP_REMOTE_LTO:
353 		if (put_user(local->remote_lto / 10, (u32 __user *) optval))
354 			err = -EFAULT;
355 
356 		break;
357 
358 	case NFC_LLCP_REMOTE_RW:
359 		if (put_user(llcp_sock->remote_rw, (u32 __user *) optval))
360 			err = -EFAULT;
361 
362 		break;
363 
364 	default:
365 		err = -ENOPROTOOPT;
366 		break;
367 	}
368 
369 	release_sock(sk);
370 
371 	if (put_user(len, optlen))
372 		return -EFAULT;
373 
374 	return err;
375 }
376 
377 void nfc_llcp_accept_unlink(struct sock *sk)
378 {
379 	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
380 
381 	pr_debug("state %d\n", sk->sk_state);
382 
383 	list_del_init(&llcp_sock->accept_queue);
384 	sk_acceptq_removed(llcp_sock->parent);
385 	llcp_sock->parent = NULL;
386 
387 	sock_put(sk);
388 }
389 
390 void nfc_llcp_accept_enqueue(struct sock *parent, struct sock *sk)
391 {
392 	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
393 	struct nfc_llcp_sock *llcp_sock_parent = nfc_llcp_sock(parent);
394 
395 	/* Lock will be free from unlink */
396 	sock_hold(sk);
397 
398 	list_add_tail(&llcp_sock->accept_queue,
399 		      &llcp_sock_parent->accept_queue);
400 	llcp_sock->parent = parent;
401 	sk_acceptq_added(parent);
402 }
403 
404 struct sock *nfc_llcp_accept_dequeue(struct sock *parent,
405 				     struct socket *newsock)
406 {
407 	struct nfc_llcp_sock *lsk, *n, *llcp_parent;
408 	struct sock *sk;
409 
410 	llcp_parent = nfc_llcp_sock(parent);
411 
412 	list_for_each_entry_safe(lsk, n, &llcp_parent->accept_queue,
413 				 accept_queue) {
414 		sk = &lsk->sk;
415 		lock_sock(sk);
416 
417 		if (sk->sk_state == LLCP_CLOSED) {
418 			release_sock(sk);
419 			nfc_llcp_accept_unlink(sk);
420 			continue;
421 		}
422 
423 		if (sk->sk_state == LLCP_CONNECTED || !newsock) {
424 			list_del_init(&lsk->accept_queue);
425 			sock_put(sk);
426 
427 			if (newsock)
428 				sock_graft(sk, newsock);
429 
430 			release_sock(sk);
431 
432 			pr_debug("Returning sk state %d\n", sk->sk_state);
433 
434 			sk_acceptq_removed(parent);
435 
436 			return sk;
437 		}
438 
439 		release_sock(sk);
440 	}
441 
442 	return NULL;
443 }
444 
445 static int llcp_sock_accept(struct socket *sock, struct socket *newsock,
446 			    int flags, bool kern)
447 {
448 	DECLARE_WAITQUEUE(wait, current);
449 	struct sock *sk = sock->sk, *new_sk;
450 	long timeo;
451 	int ret = 0;
452 
453 	pr_debug("parent %p\n", sk);
454 
455 	lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
456 
457 	if (sk->sk_state != LLCP_LISTEN) {
458 		ret = -EBADFD;
459 		goto error;
460 	}
461 
462 	timeo = sock_rcvtimeo(sk, flags & O_NONBLOCK);
463 
464 	/* Wait for an incoming connection. */
465 	add_wait_queue_exclusive(sk_sleep(sk), &wait);
466 	while (!(new_sk = nfc_llcp_accept_dequeue(sk, newsock))) {
467 		set_current_state(TASK_INTERRUPTIBLE);
468 
469 		if (!timeo) {
470 			ret = -EAGAIN;
471 			break;
472 		}
473 
474 		if (signal_pending(current)) {
475 			ret = sock_intr_errno(timeo);
476 			break;
477 		}
478 
479 		release_sock(sk);
480 		timeo = schedule_timeout(timeo);
481 		lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
482 	}
483 	__set_current_state(TASK_RUNNING);
484 	remove_wait_queue(sk_sleep(sk), &wait);
485 
486 	if (ret)
487 		goto error;
488 
489 	newsock->state = SS_CONNECTED;
490 
491 	pr_debug("new socket %p\n", new_sk);
492 
493 error:
494 	release_sock(sk);
495 
496 	return ret;
497 }
498 
499 static int llcp_sock_getname(struct socket *sock, struct sockaddr *uaddr,
500 			     int *len, int peer)
501 {
502 	struct sock *sk = sock->sk;
503 	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
504 	DECLARE_SOCKADDR(struct sockaddr_nfc_llcp *, llcp_addr, uaddr);
505 
506 	if (llcp_sock == NULL || llcp_sock->dev == NULL)
507 		return -EBADFD;
508 
509 	pr_debug("%p %d %d %d\n", sk, llcp_sock->target_idx,
510 		 llcp_sock->dsap, llcp_sock->ssap);
511 
512 	memset(llcp_addr, 0, sizeof(*llcp_addr));
513 	*len = sizeof(struct sockaddr_nfc_llcp);
514 
515 	lock_sock(sk);
516 	if (!llcp_sock->dev) {
517 		release_sock(sk);
518 		return -EBADFD;
519 	}
520 	llcp_addr->sa_family = AF_NFC;
521 	llcp_addr->dev_idx = llcp_sock->dev->idx;
522 	llcp_addr->target_idx = llcp_sock->target_idx;
523 	llcp_addr->nfc_protocol = llcp_sock->nfc_protocol;
524 	llcp_addr->dsap = llcp_sock->dsap;
525 	llcp_addr->ssap = llcp_sock->ssap;
526 	llcp_addr->service_name_len = llcp_sock->service_name_len;
527 	memcpy(llcp_addr->service_name, llcp_sock->service_name,
528 	       llcp_addr->service_name_len);
529 	release_sock(sk);
530 
531 	return 0;
532 }
533 
534 static inline unsigned int llcp_accept_poll(struct sock *parent)
535 {
536 	struct nfc_llcp_sock *llcp_sock, *parent_sock;
537 	struct sock *sk;
538 
539 	parent_sock = nfc_llcp_sock(parent);
540 
541 	list_for_each_entry(llcp_sock, &parent_sock->accept_queue,
542 			    accept_queue) {
543 		sk = &llcp_sock->sk;
544 
545 		if (sk->sk_state == LLCP_CONNECTED)
546 			return POLLIN | POLLRDNORM;
547 	}
548 
549 	return 0;
550 }
551 
552 static unsigned int llcp_sock_poll(struct file *file, struct socket *sock,
553 				   poll_table *wait)
554 {
555 	struct sock *sk = sock->sk;
556 	unsigned int mask = 0;
557 
558 	pr_debug("%p\n", sk);
559 
560 	sock_poll_wait(file, sk_sleep(sk), wait);
561 
562 	if (sk->sk_state == LLCP_LISTEN)
563 		return llcp_accept_poll(sk);
564 
565 	if (sk->sk_err || !skb_queue_empty(&sk->sk_error_queue))
566 		mask |= POLLERR |
567 			(sock_flag(sk, SOCK_SELECT_ERR_QUEUE) ? POLLPRI : 0);
568 
569 	if (!skb_queue_empty(&sk->sk_receive_queue))
570 		mask |= POLLIN | POLLRDNORM;
571 
572 	if (sk->sk_state == LLCP_CLOSED)
573 		mask |= POLLHUP;
574 
575 	if (sk->sk_shutdown & RCV_SHUTDOWN)
576 		mask |= POLLRDHUP | POLLIN | POLLRDNORM;
577 
578 	if (sk->sk_shutdown == SHUTDOWN_MASK)
579 		mask |= POLLHUP;
580 
581 	if (sock_writeable(sk) && sk->sk_state == LLCP_CONNECTED)
582 		mask |= POLLOUT | POLLWRNORM | POLLWRBAND;
583 	else
584 		sk_set_bit(SOCKWQ_ASYNC_NOSPACE, sk);
585 
586 	pr_debug("mask 0x%x\n", mask);
587 
588 	return mask;
589 }
590 
591 static int llcp_sock_release(struct socket *sock)
592 {
593 	struct sock *sk = sock->sk;
594 	struct nfc_llcp_local *local;
595 	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
596 	int err = 0;
597 
598 	if (!sk)
599 		return 0;
600 
601 	pr_debug("%p\n", sk);
602 
603 	local = llcp_sock->local;
604 	if (local == NULL) {
605 		err = -ENODEV;
606 		goto out;
607 	}
608 
609 	lock_sock(sk);
610 
611 	/* Send a DISC */
612 	if (sk->sk_state == LLCP_CONNECTED)
613 		nfc_llcp_send_disconnect(llcp_sock);
614 
615 	if (sk->sk_state == LLCP_LISTEN) {
616 		struct nfc_llcp_sock *lsk, *n;
617 		struct sock *accept_sk;
618 
619 		list_for_each_entry_safe(lsk, n, &llcp_sock->accept_queue,
620 					 accept_queue) {
621 			accept_sk = &lsk->sk;
622 			lock_sock(accept_sk);
623 
624 			nfc_llcp_send_disconnect(lsk);
625 			nfc_llcp_accept_unlink(accept_sk);
626 
627 			release_sock(accept_sk);
628 		}
629 	}
630 
631 	if (llcp_sock->reserved_ssap < LLCP_SAP_MAX)
632 		nfc_llcp_put_ssap(llcp_sock->local, llcp_sock->ssap);
633 
634 	release_sock(sk);
635 
636 	/* Keep this sock alive and therefore do not remove it from the sockets
637 	 * list until the DISC PDU has been actually sent. Otherwise we would
638 	 * reply with DM PDUs before sending the DISC one.
639 	 */
640 	if (sk->sk_state == LLCP_DISCONNECTING)
641 		return err;
642 
643 	if (sock->type == SOCK_RAW)
644 		nfc_llcp_sock_unlink(&local->raw_sockets, sk);
645 	else
646 		nfc_llcp_sock_unlink(&local->sockets, sk);
647 
648 out:
649 	sock_orphan(sk);
650 	sock_put(sk);
651 
652 	return err;
653 }
654 
655 static int llcp_sock_connect(struct socket *sock, struct sockaddr *_addr,
656 			     int len, int flags)
657 {
658 	struct sock *sk = sock->sk;
659 	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
660 	struct sockaddr_nfc_llcp *addr = (struct sockaddr_nfc_llcp *)_addr;
661 	struct nfc_dev *dev;
662 	struct nfc_llcp_local *local;
663 	int ret = 0;
664 
665 	pr_debug("sock %p sk %p flags 0x%x\n", sock, sk, flags);
666 
667 	if (!addr || len < sizeof(*addr) || addr->sa_family != AF_NFC)
668 		return -EINVAL;
669 
670 	if (addr->service_name_len == 0 && addr->dsap == 0)
671 		return -EINVAL;
672 
673 	pr_debug("addr dev_idx=%u target_idx=%u protocol=%u\n", addr->dev_idx,
674 		 addr->target_idx, addr->nfc_protocol);
675 
676 	lock_sock(sk);
677 
678 	if (sk->sk_state == LLCP_CONNECTED) {
679 		ret = -EISCONN;
680 		goto error;
681 	}
682 
683 	dev = nfc_get_device(addr->dev_idx);
684 	if (dev == NULL) {
685 		ret = -ENODEV;
686 		goto error;
687 	}
688 
689 	local = nfc_llcp_find_local(dev);
690 	if (local == NULL) {
691 		ret = -ENODEV;
692 		goto put_dev;
693 	}
694 
695 	device_lock(&dev->dev);
696 	if (dev->dep_link_up == false) {
697 		ret = -ENOLINK;
698 		device_unlock(&dev->dev);
699 		goto put_dev;
700 	}
701 	device_unlock(&dev->dev);
702 
703 	if (local->rf_mode == NFC_RF_INITIATOR &&
704 	    addr->target_idx != local->target_idx) {
705 		ret = -ENOLINK;
706 		goto put_dev;
707 	}
708 
709 	llcp_sock->dev = dev;
710 	llcp_sock->local = nfc_llcp_local_get(local);
711 	llcp_sock->ssap = nfc_llcp_get_local_ssap(local);
712 	if (llcp_sock->ssap == LLCP_SAP_MAX) {
713 		ret = -ENOMEM;
714 		goto put_dev;
715 	}
716 
717 	llcp_sock->reserved_ssap = llcp_sock->ssap;
718 
719 	if (addr->service_name_len == 0)
720 		llcp_sock->dsap = addr->dsap;
721 	else
722 		llcp_sock->dsap = LLCP_SAP_SDP;
723 	llcp_sock->nfc_protocol = addr->nfc_protocol;
724 	llcp_sock->service_name_len = min_t(unsigned int,
725 					    addr->service_name_len,
726 					    NFC_LLCP_MAX_SERVICE_NAME);
727 	llcp_sock->service_name = kmemdup(addr->service_name,
728 					  llcp_sock->service_name_len,
729 					  GFP_KERNEL);
730 
731 	nfc_llcp_sock_link(&local->connecting_sockets, sk);
732 
733 	ret = nfc_llcp_send_connect(llcp_sock);
734 	if (ret)
735 		goto sock_unlink;
736 
737 	sk->sk_state = LLCP_CONNECTING;
738 
739 	ret = sock_wait_state(sk, LLCP_CONNECTED,
740 			      sock_sndtimeo(sk, flags & O_NONBLOCK));
741 	if (ret && ret != -EINPROGRESS)
742 		goto sock_unlink;
743 
744 	release_sock(sk);
745 
746 	return ret;
747 
748 sock_unlink:
749 	nfc_llcp_put_ssap(local, llcp_sock->ssap);
750 
751 	nfc_llcp_sock_unlink(&local->connecting_sockets, sk);
752 
753 put_dev:
754 	nfc_put_device(dev);
755 
756 error:
757 	release_sock(sk);
758 	return ret;
759 }
760 
761 static int llcp_sock_sendmsg(struct socket *sock, struct msghdr *msg,
762 			     size_t len)
763 {
764 	struct sock *sk = sock->sk;
765 	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
766 	int ret;
767 
768 	pr_debug("sock %p sk %p", sock, sk);
769 
770 	ret = sock_error(sk);
771 	if (ret)
772 		return ret;
773 
774 	if (msg->msg_flags & MSG_OOB)
775 		return -EOPNOTSUPP;
776 
777 	lock_sock(sk);
778 
779 	if (sk->sk_type == SOCK_DGRAM) {
780 		DECLARE_SOCKADDR(struct sockaddr_nfc_llcp *, addr,
781 				 msg->msg_name);
782 
783 		if (msg->msg_namelen < sizeof(*addr)) {
784 			release_sock(sk);
785 			return -EINVAL;
786 		}
787 
788 		release_sock(sk);
789 
790 		return nfc_llcp_send_ui_frame(llcp_sock, addr->dsap, addr->ssap,
791 					      msg, len);
792 	}
793 
794 	if (sk->sk_state != LLCP_CONNECTED) {
795 		release_sock(sk);
796 		return -ENOTCONN;
797 	}
798 
799 	release_sock(sk);
800 
801 	return nfc_llcp_send_i_frame(llcp_sock, msg, len);
802 }
803 
804 static int llcp_sock_recvmsg(struct socket *sock, struct msghdr *msg,
805 			     size_t len, int flags)
806 {
807 	int noblock = flags & MSG_DONTWAIT;
808 	struct sock *sk = sock->sk;
809 	unsigned int copied, rlen;
810 	struct sk_buff *skb, *cskb;
811 	int err = 0;
812 
813 	pr_debug("%p %zu\n", sk, len);
814 
815 	lock_sock(sk);
816 
817 	if (sk->sk_state == LLCP_CLOSED &&
818 	    skb_queue_empty(&sk->sk_receive_queue)) {
819 		release_sock(sk);
820 		return 0;
821 	}
822 
823 	release_sock(sk);
824 
825 	if (flags & (MSG_OOB))
826 		return -EOPNOTSUPP;
827 
828 	skb = skb_recv_datagram(sk, flags, noblock, &err);
829 	if (!skb) {
830 		pr_err("Recv datagram failed state %d %d %d",
831 		       sk->sk_state, err, sock_error(sk));
832 
833 		if (sk->sk_shutdown & RCV_SHUTDOWN)
834 			return 0;
835 
836 		return err;
837 	}
838 
839 	rlen = skb->len;		/* real length of skb */
840 	copied = min_t(unsigned int, rlen, len);
841 
842 	cskb = skb;
843 	if (skb_copy_datagram_msg(cskb, 0, msg, copied)) {
844 		if (!(flags & MSG_PEEK))
845 			skb_queue_head(&sk->sk_receive_queue, skb);
846 		return -EFAULT;
847 	}
848 
849 	sock_recv_timestamp(msg, sk, skb);
850 
851 	if (sk->sk_type == SOCK_DGRAM && msg->msg_name) {
852 		struct nfc_llcp_ui_cb *ui_cb = nfc_llcp_ui_skb_cb(skb);
853 		DECLARE_SOCKADDR(struct sockaddr_nfc_llcp *, sockaddr,
854 				 msg->msg_name);
855 
856 		msg->msg_namelen = sizeof(struct sockaddr_nfc_llcp);
857 
858 		pr_debug("Datagram socket %d %d\n", ui_cb->dsap, ui_cb->ssap);
859 
860 		memset(sockaddr, 0, sizeof(*sockaddr));
861 		sockaddr->sa_family = AF_NFC;
862 		sockaddr->nfc_protocol = NFC_PROTO_NFC_DEP;
863 		sockaddr->dsap = ui_cb->dsap;
864 		sockaddr->ssap = ui_cb->ssap;
865 	}
866 
867 	/* Mark read part of skb as used */
868 	if (!(flags & MSG_PEEK)) {
869 
870 		/* SOCK_STREAM: re-queue skb if it contains unreceived data */
871 		if (sk->sk_type == SOCK_STREAM ||
872 		    sk->sk_type == SOCK_DGRAM ||
873 		    sk->sk_type == SOCK_RAW) {
874 			skb_pull(skb, copied);
875 			if (skb->len) {
876 				skb_queue_head(&sk->sk_receive_queue, skb);
877 				goto done;
878 			}
879 		}
880 
881 		kfree_skb(skb);
882 	}
883 
884 	/* XXX Queue backlogged skbs */
885 
886 done:
887 	/* SOCK_SEQPACKET: return real length if MSG_TRUNC is set */
888 	if (sk->sk_type == SOCK_SEQPACKET && (flags & MSG_TRUNC))
889 		copied = rlen;
890 
891 	return copied;
892 }
893 
894 static const struct proto_ops llcp_sock_ops = {
895 	.family         = PF_NFC,
896 	.owner          = THIS_MODULE,
897 	.bind           = llcp_sock_bind,
898 	.connect        = llcp_sock_connect,
899 	.release        = llcp_sock_release,
900 	.socketpair     = sock_no_socketpair,
901 	.accept         = llcp_sock_accept,
902 	.getname        = llcp_sock_getname,
903 	.poll           = llcp_sock_poll,
904 	.ioctl          = sock_no_ioctl,
905 	.listen         = llcp_sock_listen,
906 	.shutdown       = sock_no_shutdown,
907 	.setsockopt     = nfc_llcp_setsockopt,
908 	.getsockopt     = nfc_llcp_getsockopt,
909 	.sendmsg        = llcp_sock_sendmsg,
910 	.recvmsg        = llcp_sock_recvmsg,
911 	.mmap           = sock_no_mmap,
912 };
913 
914 static const struct proto_ops llcp_rawsock_ops = {
915 	.family         = PF_NFC,
916 	.owner          = THIS_MODULE,
917 	.bind           = llcp_raw_sock_bind,
918 	.connect        = sock_no_connect,
919 	.release        = llcp_sock_release,
920 	.socketpair     = sock_no_socketpair,
921 	.accept         = sock_no_accept,
922 	.getname        = llcp_sock_getname,
923 	.poll           = llcp_sock_poll,
924 	.ioctl          = sock_no_ioctl,
925 	.listen         = sock_no_listen,
926 	.shutdown       = sock_no_shutdown,
927 	.setsockopt     = sock_no_setsockopt,
928 	.getsockopt     = sock_no_getsockopt,
929 	.sendmsg        = sock_no_sendmsg,
930 	.recvmsg        = llcp_sock_recvmsg,
931 	.mmap           = sock_no_mmap,
932 };
933 
934 static void llcp_sock_destruct(struct sock *sk)
935 {
936 	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
937 
938 	pr_debug("%p\n", sk);
939 
940 	if (sk->sk_state == LLCP_CONNECTED)
941 		nfc_put_device(llcp_sock->dev);
942 
943 	skb_queue_purge(&sk->sk_receive_queue);
944 
945 	nfc_llcp_sock_free(llcp_sock);
946 
947 	if (!sock_flag(sk, SOCK_DEAD)) {
948 		pr_err("Freeing alive NFC LLCP socket %p\n", sk);
949 		return;
950 	}
951 }
952 
953 struct sock *nfc_llcp_sock_alloc(struct socket *sock, int type, gfp_t gfp, int kern)
954 {
955 	struct sock *sk;
956 	struct nfc_llcp_sock *llcp_sock;
957 
958 	sk = sk_alloc(&init_net, PF_NFC, gfp, &llcp_sock_proto, kern);
959 	if (!sk)
960 		return NULL;
961 
962 	llcp_sock = nfc_llcp_sock(sk);
963 
964 	sock_init_data(sock, sk);
965 	sk->sk_state = LLCP_CLOSED;
966 	sk->sk_protocol = NFC_SOCKPROTO_LLCP;
967 	sk->sk_type = type;
968 	sk->sk_destruct = llcp_sock_destruct;
969 
970 	llcp_sock->ssap = 0;
971 	llcp_sock->dsap = LLCP_SAP_SDP;
972 	llcp_sock->rw = LLCP_MAX_RW + 1;
973 	llcp_sock->miux = cpu_to_be16(LLCP_MAX_MIUX + 1);
974 	llcp_sock->send_n = llcp_sock->send_ack_n = 0;
975 	llcp_sock->recv_n = llcp_sock->recv_ack_n = 0;
976 	llcp_sock->remote_ready = 1;
977 	llcp_sock->reserved_ssap = LLCP_SAP_MAX;
978 	nfc_llcp_socket_remote_param_init(llcp_sock);
979 	skb_queue_head_init(&llcp_sock->tx_queue);
980 	skb_queue_head_init(&llcp_sock->tx_pending_queue);
981 	INIT_LIST_HEAD(&llcp_sock->accept_queue);
982 
983 	if (sock != NULL)
984 		sock->state = SS_UNCONNECTED;
985 
986 	return sk;
987 }
988 
989 void nfc_llcp_sock_free(struct nfc_llcp_sock *sock)
990 {
991 	kfree(sock->service_name);
992 
993 	skb_queue_purge(&sock->tx_queue);
994 	skb_queue_purge(&sock->tx_pending_queue);
995 
996 	list_del_init(&sock->accept_queue);
997 
998 	sock->parent = NULL;
999 
1000 	nfc_llcp_local_put(sock->local);
1001 }
1002 
1003 static int llcp_sock_create(struct net *net, struct socket *sock,
1004 			    const struct nfc_protocol *nfc_proto, int kern)
1005 {
1006 	struct sock *sk;
1007 
1008 	pr_debug("%p\n", sock);
1009 
1010 	if (sock->type != SOCK_STREAM &&
1011 	    sock->type != SOCK_DGRAM &&
1012 	    sock->type != SOCK_RAW)
1013 		return -ESOCKTNOSUPPORT;
1014 
1015 	if (sock->type == SOCK_RAW)
1016 		sock->ops = &llcp_rawsock_ops;
1017 	else
1018 		sock->ops = &llcp_sock_ops;
1019 
1020 	sk = nfc_llcp_sock_alloc(sock, sock->type, GFP_ATOMIC, kern);
1021 	if (sk == NULL)
1022 		return -ENOMEM;
1023 
1024 	return 0;
1025 }
1026 
1027 static const struct nfc_protocol llcp_nfc_proto = {
1028 	.id	  = NFC_SOCKPROTO_LLCP,
1029 	.proto    = &llcp_sock_proto,
1030 	.owner    = THIS_MODULE,
1031 	.create   = llcp_sock_create
1032 };
1033 
1034 int __init nfc_llcp_sock_init(void)
1035 {
1036 	return nfc_proto_register(&llcp_nfc_proto);
1037 }
1038 
1039 void nfc_llcp_sock_exit(void)
1040 {
1041 	nfc_proto_unregister(&llcp_nfc_proto);
1042 }
1043