net/nfc/netlink.c

   1 // SPDX-License-Identifier: GPL-2.0-or-later
   2 /*
   3  * Copyright (C) 2011 Instituto Nokia de Tecnologia
   4  *
   5  * Authors:
   6  *    Lauro Ramos Venancio <lauro.venancio@openbossa.org>
   7  *    Aloisio Almeida Jr <aloisio.almeida@openbossa.org>
   8  *
   9  * Vendor commands implementation based on net/wireless/nl80211.c
  10  * which is:
  11  *
  12  * Copyright 2006-2010  Johannes Berg <johannes@sipsolutions.net>
  13  * Copyright 2013-2014  Intel Mobile Communications GmbH
  14  */
  15
  16 #define pr_fmt(fmt) KBUILD_MODNAME ": %s: " fmt, __func__
  17
  18 #include <net/genetlink.h>
  19 #include <linux/nfc.h>
  20 #include <linux/slab.h>
  21
  22 #include "nfc.h"
  23 #include "llcp.h"
  24
  25 static const struct genl_multicast_group nfc_genl_mcgrps[] = {
  26         { .name = NFC_GENL_MCAST_EVENT_NAME, },
  27 };
  28
  29 static struct genl_family nfc_genl_family;
  30 static const struct nla_policy nfc_genl_policy[NFC_ATTR_MAX + 1] = {
  31         [NFC_ATTR_DEVICE_INDEX] = { .type = NLA_U32 },
  32         [NFC_ATTR_DEVICE_NAME] = { .type = NLA_STRING,
  33                                 .len = NFC_DEVICE_NAME_MAXSIZE },
  34         [NFC_ATTR_PROTOCOLS] = { .type = NLA_U32 },
  35         [NFC_ATTR_COMM_MODE] = { .type = NLA_U8 },
  36         [NFC_ATTR_RF_MODE] = { .type = NLA_U8 },
  37         [NFC_ATTR_DEVICE_POWERED] = { .type = NLA_U8 },
  38         [NFC_ATTR_IM_PROTOCOLS] = { .type = NLA_U32 },
  39         [NFC_ATTR_TM_PROTOCOLS] = { .type = NLA_U32 },
  40         [NFC_ATTR_LLC_PARAM_LTO] = { .type = NLA_U8 },
  41         [NFC_ATTR_LLC_PARAM_RW] = { .type = NLA_U8 },
  42         [NFC_ATTR_LLC_PARAM_MIUX] = { .type = NLA_U16 },
  43         [NFC_ATTR_LLC_SDP] = { .type = NLA_NESTED },
  44         [NFC_ATTR_FIRMWARE_NAME] = { .type = NLA_STRING,
  45                                      .len = NFC_FIRMWARE_NAME_MAXSIZE },
  46         [NFC_ATTR_SE_APDU] = { .type = NLA_BINARY },
  47         [NFC_ATTR_VENDOR_DATA] = { .type = NLA_BINARY },
  48
  49 };
  50
  51 static const struct nla_policy nfc_sdp_genl_policy[NFC_SDP_ATTR_MAX + 1] = {
  52         [NFC_SDP_ATTR_URI] = { .type = NLA_STRING,
  53                                .len = U8_MAX - 4 },
  54         [NFC_SDP_ATTR_SAP] = { .type = NLA_U8 },
  55 };
  56
  57 static int nfc_genl_send_target(struct sk_buff *msg, struct nfc_target *target,
  58                                 struct netlink_callback *cb, int flags)
  59 {
  60         void *hdr;
  61
  62         hdr = genlmsg_put(msg, NETLINK_CB(cb->skb).portid, cb->nlh->nlmsg_seq,
  63                           &nfc_genl_family, flags, NFC_CMD_GET_TARGET);
  64         if (!hdr)
  65                 return -EMSGSIZE;
  66
  67         genl_dump_check_consistent(cb, hdr);
  68
  69         if (nla_put_u32(msg, NFC_ATTR_TARGET_INDEX, target->idx) ||
  70             nla_put_u32(msg, NFC_ATTR_PROTOCOLS, target->supported_protocols) ||
  71             nla_put_u16(msg, NFC_ATTR_TARGET_SENS_RES, target->sens_res) ||
  72             nla_put_u8(msg, NFC_ATTR_TARGET_SEL_RES, target->sel_res))
  73                 goto nla_put_failure;
  74         if (target->nfcid1_len > 0 &&
  75             nla_put(msg, NFC_ATTR_TARGET_NFCID1, target->nfcid1_len,
  76                     target->nfcid1))
  77                 goto nla_put_failure;
  78         if (target->sensb_res_len > 0 &&
  79             nla_put(msg, NFC_ATTR_TARGET_SENSB_RES, target->sensb_res_len,
  80                     target->sensb_res))
  81                 goto nla_put_failure;
  82         if (target->sensf_res_len > 0 &&
  83             nla_put(msg, NFC_ATTR_TARGET_SENSF_RES, target->sensf_res_len,
  84                     target->sensf_res))
  85                 goto nla_put_failure;
  86
  87         if (target->is_iso15693) {
  88                 if (nla_put_u8(msg, NFC_ATTR_TARGET_ISO15693_DSFID,
  89                                target->iso15693_dsfid) ||
  90                     nla_put(msg, NFC_ATTR_TARGET_ISO15693_UID,
  91                             sizeof(target->iso15693_uid), target->iso15693_uid))
  92                         goto nla_put_failure;
  93         }
  94
  95         genlmsg_end(msg, hdr);
  96         return 0;
  97
  98 nla_put_failure:
  99         genlmsg_cancel(msg, hdr);
 100         return -EMSGSIZE;
 101 }
 102
 103 static struct nfc_dev *__get_device_from_cb(struct netlink_callback *cb)
 104 {
 105         struct nlattr **attrbuf = genl_family_attrbuf(&nfc_genl_family);
 106         struct nfc_dev *dev;
 107         int rc;
 108         u32 idx;
 109
 110         rc = nlmsg_parse_deprecated(cb->nlh,
 111                                     GENL_HDRLEN + nfc_genl_family.hdrsize,
 112                                     attrbuf, nfc_genl_family.maxattr,
 113                                     nfc_genl_policy, NULL);
 114         if (rc < 0)
 115                 return ERR_PTR(rc);
 116
 117         if (!attrbuf[NFC_ATTR_DEVICE_INDEX])
 118                 return ERR_PTR(-EINVAL);
 119
 120         idx = nla_get_u32(attrbuf[NFC_ATTR_DEVICE_INDEX]);
 121
 122         dev = nfc_get_device(idx);
 123         if (!dev)
 124                 return ERR_PTR(-ENODEV);
 125
 126         return dev;
 127 }
 128
 129 static int nfc_genl_dump_targets(struct sk_buff *skb,
 130                                  struct netlink_callback *cb)
 131 {
 132         int i = cb->args[0];
 133         struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
 134         int rc;
 135
 136         if (!dev) {
 137                 dev = __get_device_from_cb(cb);
 138                 if (IS_ERR(dev))
 139                         return PTR_ERR(dev);
 140
 141                 cb->args[1] = (long) dev;
 142         }
 143
 144         device_lock(&dev->dev);
 145
 146         cb->seq = dev->targets_generation;
 147
 148         while (i < dev->n_targets) {
 149                 rc = nfc_genl_send_target(skb, &dev->targets[i], cb,
 150                                           NLM_F_MULTI);
 151                 if (rc < 0)
 152                         break;
 153
 154                 i++;
 155         }
 156
 157         device_unlock(&dev->dev);
 158
 159         cb->args[0] = i;
 160
 161         return skb->len;
 162 }
 163
 164 static int nfc_genl_dump_targets_done(struct netlink_callback *cb)
 165 {
 166         struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
 167
 168         if (dev)
 169                 nfc_put_device(dev);
 170
 171         return 0;
 172 }
 173
 174 int nfc_genl_targets_found(struct nfc_dev *dev)
 175 {
 176         struct sk_buff *msg;
 177         void *hdr;
 178
 179         dev->genl_data.poll_req_portid = 0;
 180
 181         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
 182         if (!msg)
 183                 return -ENOMEM;
 184
 185         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 186                           NFC_EVENT_TARGETS_FOUND);
 187         if (!hdr)
 188                 goto free_msg;
 189
 190         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 191                 goto nla_put_failure;
 192
 193         genlmsg_end(msg, hdr);
 194
 195         return genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
 196
 197 nla_put_failure:
 198 free_msg:
 199         nlmsg_free(msg);
 200         return -EMSGSIZE;
 201 }
 202
 203 int nfc_genl_target_lost(struct nfc_dev *dev, u32 target_idx)
 204 {
 205         struct sk_buff *msg;
 206         void *hdr;
 207
 208         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 209         if (!msg)
 210                 return -ENOMEM;
 211
 212         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 213                           NFC_EVENT_TARGET_LOST);
 214         if (!hdr)
 215                 goto free_msg;
 216
 217         if (nla_put_string(msg, NFC_ATTR_DEVICE_NAME, nfc_device_name(dev)) ||
 218             nla_put_u32(msg, NFC_ATTR_TARGET_INDEX, target_idx))
 219                 goto nla_put_failure;
 220
 221         genlmsg_end(msg, hdr);
 222
 223         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 224
 225         return 0;
 226
 227 nla_put_failure:
 228 free_msg:
 229         nlmsg_free(msg);
 230         return -EMSGSIZE;
 231 }
 232
 233 int nfc_genl_tm_activated(struct nfc_dev *dev, u32 protocol)
 234 {
 235         struct sk_buff *msg;
 236         void *hdr;
 237
 238         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 239         if (!msg)
 240                 return -ENOMEM;
 241
 242         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 243                           NFC_EVENT_TM_ACTIVATED);
 244         if (!hdr)
 245                 goto free_msg;
 246
 247         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 248                 goto nla_put_failure;
 249         if (nla_put_u32(msg, NFC_ATTR_TM_PROTOCOLS, protocol))
 250                 goto nla_put_failure;
 251
 252         genlmsg_end(msg, hdr);
 253
 254         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 255
 256         return 0;
 257
 258 nla_put_failure:
 259 free_msg:
 260         nlmsg_free(msg);
 261         return -EMSGSIZE;
 262 }
 263
 264 int nfc_genl_tm_deactivated(struct nfc_dev *dev)
 265 {
 266         struct sk_buff *msg;
 267         void *hdr;
 268
 269         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 270         if (!msg)
 271                 return -ENOMEM;
 272
 273         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 274                           NFC_EVENT_TM_DEACTIVATED);
 275         if (!hdr)
 276                 goto free_msg;
 277
 278         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 279                 goto nla_put_failure;
 280
 281         genlmsg_end(msg, hdr);
 282
 283         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 284
 285         return 0;
 286
 287 nla_put_failure:
 288 free_msg:
 289         nlmsg_free(msg);
 290         return -EMSGSIZE;
 291 }
 292
 293 static int nfc_genl_setup_device_added(struct nfc_dev *dev, struct sk_buff *msg)
 294 {
 295         if (nla_put_string(msg, NFC_ATTR_DEVICE_NAME, nfc_device_name(dev)) ||
 296             nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
 297             nla_put_u32(msg, NFC_ATTR_PROTOCOLS, dev->supported_protocols) ||
 298             nla_put_u8(msg, NFC_ATTR_DEVICE_POWERED, dev->dev_up) ||
 299             nla_put_u8(msg, NFC_ATTR_RF_MODE, dev->rf_mode))
 300                 return -1;
 301         return 0;
 302 }
 303
 304 int nfc_genl_device_added(struct nfc_dev *dev)
 305 {
 306         struct sk_buff *msg;
 307         void *hdr;
 308
 309         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 310         if (!msg)
 311                 return -ENOMEM;
 312
 313         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 314                           NFC_EVENT_DEVICE_ADDED);
 315         if (!hdr)
 316                 goto free_msg;
 317
 318         if (nfc_genl_setup_device_added(dev, msg))
 319                 goto nla_put_failure;
 320
 321         genlmsg_end(msg, hdr);
 322
 323         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 324
 325         return 0;
 326
 327 nla_put_failure:
 328 free_msg:
 329         nlmsg_free(msg);
 330         return -EMSGSIZE;
 331 }
 332
 333 int nfc_genl_device_removed(struct nfc_dev *dev)
 334 {
 335         struct sk_buff *msg;
 336         void *hdr;
 337
 338         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 339         if (!msg)
 340                 return -ENOMEM;
 341
 342         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 343                           NFC_EVENT_DEVICE_REMOVED);
 344         if (!hdr)
 345                 goto free_msg;
 346
 347         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 348                 goto nla_put_failure;
 349
 350         genlmsg_end(msg, hdr);
 351
 352         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 353
 354         return 0;
 355
 356 nla_put_failure:
 357 free_msg:
 358         nlmsg_free(msg);
 359         return -EMSGSIZE;
 360 }
 361
 362 int nfc_genl_llc_send_sdres(struct nfc_dev *dev, struct hlist_head *sdres_list)
 363 {
 364         struct sk_buff *msg;
 365         struct nlattr *sdp_attr, *uri_attr;
 366         struct nfc_llcp_sdp_tlv *sdres;
 367         struct hlist_node *n;
 368         void *hdr;
 369         int rc = -EMSGSIZE;
 370         int i;
 371
 372         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 373         if (!msg)
 374                 return -ENOMEM;
 375
 376         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 377                           NFC_EVENT_LLC_SDRES);
 378         if (!hdr)
 379                 goto free_msg;
 380
 381         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 382                 goto nla_put_failure;
 383
 384         sdp_attr = nla_nest_start_noflag(msg, NFC_ATTR_LLC_SDP);
 385         if (sdp_attr == NULL) {
 386                 rc = -ENOMEM;
 387                 goto nla_put_failure;
 388         }
 389
 390         i = 1;
 391         hlist_for_each_entry_safe(sdres, n, sdres_list, node) {
 392                 pr_debug("uri: %s, sap: %d\n", sdres->uri, sdres->sap);
 393
 394                 uri_attr = nla_nest_start_noflag(msg, i++);
 395                 if (uri_attr == NULL) {
 396                         rc = -ENOMEM;
 397                         goto nla_put_failure;
 398                 }
 399
 400                 if (nla_put_u8(msg, NFC_SDP_ATTR_SAP, sdres->sap))
 401                         goto nla_put_failure;
 402
 403                 if (nla_put_string(msg, NFC_SDP_ATTR_URI, sdres->uri))
 404                         goto nla_put_failure;
 405
 406                 nla_nest_end(msg, uri_attr);
 407
 408                 hlist_del(&sdres->node);
 409
 410                 nfc_llcp_free_sdp_tlv(sdres);
 411         }
 412
 413         nla_nest_end(msg, sdp_attr);
 414
 415         genlmsg_end(msg, hdr);
 416
 417         return genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
 418
 419 nla_put_failure:
 420 free_msg:
 421         nlmsg_free(msg);
 422
 423         nfc_llcp_free_sdp_tlv_list(sdres_list);
 424
 425         return rc;
 426 }
 427
 428 int nfc_genl_se_added(struct nfc_dev *dev, u32 se_idx, u16 type)
 429 {
 430         struct sk_buff *msg;
 431         void *hdr;
 432
 433         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 434         if (!msg)
 435                 return -ENOMEM;
 436
 437         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 438                           NFC_EVENT_SE_ADDED);
 439         if (!hdr)
 440                 goto free_msg;
 441
 442         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
 443             nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx) ||
 444             nla_put_u8(msg, NFC_ATTR_SE_TYPE, type))
 445                 goto nla_put_failure;
 446
 447         genlmsg_end(msg, hdr);
 448
 449         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 450
 451         return 0;
 452
 453 nla_put_failure:
 454 free_msg:
 455         nlmsg_free(msg);
 456         return -EMSGSIZE;
 457 }
 458
 459 int nfc_genl_se_removed(struct nfc_dev *dev, u32 se_idx)
 460 {
 461         struct sk_buff *msg;
 462         void *hdr;
 463
 464         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 465         if (!msg)
 466                 return -ENOMEM;
 467
 468         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 469                           NFC_EVENT_SE_REMOVED);
 470         if (!hdr)
 471                 goto free_msg;
 472
 473         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
 474             nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx))
 475                 goto nla_put_failure;
 476
 477         genlmsg_end(msg, hdr);
 478
 479         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 480
 481         return 0;
 482
 483 nla_put_failure:
 484 free_msg:
 485         nlmsg_free(msg);
 486         return -EMSGSIZE;
 487 }
 488
 489 int nfc_genl_se_transaction(struct nfc_dev *dev, u8 se_idx,
 490                             struct nfc_evt_transaction *evt_transaction)
 491 {
 492         struct nfc_se *se;
 493         struct sk_buff *msg;
 494         void *hdr;
 495
 496         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 497         if (!msg)
 498                 return -ENOMEM;
 499
 500         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 501                           NFC_EVENT_SE_TRANSACTION);
 502         if (!hdr)
 503                 goto free_msg;
 504
 505         se = nfc_find_se(dev, se_idx);
 506         if (!se)
 507                 goto free_msg;
 508
 509         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
 510             nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx) ||
 511             nla_put_u8(msg, NFC_ATTR_SE_TYPE, se->type) ||
 512             nla_put(msg, NFC_ATTR_SE_AID, evt_transaction->aid_len,
 513                     evt_transaction->aid) ||
 514             nla_put(msg, NFC_ATTR_SE_PARAMS, evt_transaction->params_len,
 515                     evt_transaction->params))
 516                 goto nla_put_failure;
 517
 518         /* evt_transaction is no more used */
 519         devm_kfree(&dev->dev, evt_transaction);
 520
 521         genlmsg_end(msg, hdr);
 522
 523         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 524
 525         return 0;
 526
 527 nla_put_failure:
 528 free_msg:
 529         /* evt_transaction is no more used */
 530         devm_kfree(&dev->dev, evt_transaction);
 531         nlmsg_free(msg);
 532         return -EMSGSIZE;
 533 }
 534
 535 int nfc_genl_se_connectivity(struct nfc_dev *dev, u8 se_idx)
 536 {
 537         struct nfc_se *se;
 538         struct sk_buff *msg;
 539         void *hdr;
 540
 541         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 542         if (!msg)
 543                 return -ENOMEM;
 544
 545         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 546                           NFC_EVENT_SE_CONNECTIVITY);
 547         if (!hdr)
 548                 goto free_msg;
 549
 550         se = nfc_find_se(dev, se_idx);
 551         if (!se)
 552                 goto free_msg;
 553
 554         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
 555             nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx) ||
 556             nla_put_u8(msg, NFC_ATTR_SE_TYPE, se->type))
 557                 goto nla_put_failure;
 558
 559         genlmsg_end(msg, hdr);
 560
 561         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 562
 563         return 0;
 564
 565 nla_put_failure:
 566 free_msg:
 567         nlmsg_free(msg);
 568         return -EMSGSIZE;
 569 }
 570
 571 static int nfc_genl_send_device(struct sk_buff *msg, struct nfc_dev *dev,
 572                                 u32 portid, u32 seq,
 573                                 struct netlink_callback *cb,
 574                                 int flags)
 575 {
 576         void *hdr;
 577
 578         hdr = genlmsg_put(msg, portid, seq, &nfc_genl_family, flags,
 579                           NFC_CMD_GET_DEVICE);
 580         if (!hdr)
 581                 return -EMSGSIZE;
 582
 583         if (cb)
 584                 genl_dump_check_consistent(cb, hdr);
 585
 586         if (nfc_genl_setup_device_added(dev, msg))
 587                 goto nla_put_failure;
 588
 589         genlmsg_end(msg, hdr);
 590         return 0;
 591
 592 nla_put_failure:
 593         genlmsg_cancel(msg, hdr);
 594         return -EMSGSIZE;
 595 }
 596
 597 static int nfc_genl_dump_devices(struct sk_buff *skb,
 598                                  struct netlink_callback *cb)
 599 {
 600         struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
 601         struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
 602         bool first_call = false;
 603
 604         if (!iter) {
 605                 first_call = true;
 606                 iter = kmalloc(sizeof(struct class_dev_iter), GFP_KERNEL);
 607                 if (!iter)
 608                         return -ENOMEM;
 609                 cb->args[0] = (long) iter;
 610         }
 611
 612         mutex_lock(&nfc_devlist_mutex);
 613
 614         cb->seq = nfc_devlist_generation;
 615
 616         if (first_call) {
 617                 nfc_device_iter_init(iter);
 618                 dev = nfc_device_iter_next(iter);
 619         }
 620
 621         while (dev) {
 622                 int rc;
 623
 624                 rc = nfc_genl_send_device(skb, dev, NETLINK_CB(cb->skb).portid,
 625                                           cb->nlh->nlmsg_seq, cb, NLM_F_MULTI);
 626                 if (rc < 0)
 627                         break;
 628
 629                 dev = nfc_device_iter_next(iter);
 630         }
 631
 632         mutex_unlock(&nfc_devlist_mutex);
 633
 634         cb->args[1] = (long) dev;
 635
 636         return skb->len;
 637 }
 638
 639 static int nfc_genl_dump_devices_done(struct netlink_callback *cb)
 640 {
 641         struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
 642
 643         nfc_device_iter_exit(iter);
 644         kfree(iter);
 645
 646         return 0;
 647 }
 648
 649 int nfc_genl_dep_link_up_event(struct nfc_dev *dev, u32 target_idx,
 650                                u8 comm_mode, u8 rf_mode)
 651 {
 652         struct sk_buff *msg;
 653         void *hdr;
 654
 655         pr_debug("DEP link is up\n");
 656
 657         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
 658         if (!msg)
 659                 return -ENOMEM;
 660
 661         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0, NFC_CMD_DEP_LINK_UP);
 662         if (!hdr)
 663                 goto free_msg;
 664
 665         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 666                 goto nla_put_failure;
 667         if (rf_mode == NFC_RF_INITIATOR &&
 668             nla_put_u32(msg, NFC_ATTR_TARGET_INDEX, target_idx))
 669                 goto nla_put_failure;
 670         if (nla_put_u8(msg, NFC_ATTR_COMM_MODE, comm_mode) ||
 671             nla_put_u8(msg, NFC_ATTR_RF_MODE, rf_mode))
 672                 goto nla_put_failure;
 673
 674         genlmsg_end(msg, hdr);
 675
 676         dev->dep_link_up = true;
 677
 678         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
 679
 680         return 0;
 681
 682 nla_put_failure:
 683 free_msg:
 684         nlmsg_free(msg);
 685         return -EMSGSIZE;
 686 }
 687
 688 int nfc_genl_dep_link_down_event(struct nfc_dev *dev)
 689 {
 690         struct sk_buff *msg;
 691         void *hdr;
 692
 693         pr_debug("DEP link is down\n");
 694
 695         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
 696         if (!msg)
 697                 return -ENOMEM;
 698
 699         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 700                           NFC_CMD_DEP_LINK_DOWN);
 701         if (!hdr)
 702                 goto free_msg;
 703
 704         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 705                 goto nla_put_failure;
 706
 707         genlmsg_end(msg, hdr);
 708
 709         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
 710
 711         return 0;
 712
 713 nla_put_failure:
 714 free_msg:
 715         nlmsg_free(msg);
 716         return -EMSGSIZE;
 717 }
 718
 719 static int nfc_genl_get_device(struct sk_buff *skb, struct genl_info *info)
 720 {
 721         struct sk_buff *msg;
 722         struct nfc_dev *dev;
 723         u32 idx;
 724         int rc = -ENOBUFS;
 725
 726         if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
 727                 return -EINVAL;
 728
 729         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 730
 731         dev = nfc_get_device(idx);
 732         if (!dev)
 733                 return -ENODEV;
 734
 735         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 736         if (!msg) {
 737                 rc = -ENOMEM;
 738                 goto out_putdev;
 739         }
 740
 741         rc = nfc_genl_send_device(msg, dev, info->snd_portid, info->snd_seq,
 742                                   NULL, 0);
 743         if (rc < 0)
 744                 goto out_free;
 745
 746         nfc_put_device(dev);
 747
 748         return genlmsg_reply(msg, info);
 749
 750 out_free:
 751         nlmsg_free(msg);
 752 out_putdev:
 753         nfc_put_device(dev);
 754         return rc;
 755 }
 756
 757 static int nfc_genl_dev_up(struct sk_buff *skb, struct genl_info *info)
 758 {
 759         struct nfc_dev *dev;
 760         int rc;
 761         u32 idx;
 762
 763         if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
 764                 return -EINVAL;
 765
 766         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 767
 768         dev = nfc_get_device(idx);
 769         if (!dev)
 770                 return -ENODEV;
 771
 772         rc = nfc_dev_up(dev);
 773
 774         nfc_put_device(dev);
 775         return rc;
 776 }
 777
 778 static int nfc_genl_dev_down(struct sk_buff *skb, struct genl_info *info)
 779 {
 780         struct nfc_dev *dev;
 781         int rc;
 782         u32 idx;
 783
 784         if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
 785                 return -EINVAL;
 786
 787         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 788
 789         dev = nfc_get_device(idx);
 790         if (!dev)
 791                 return -ENODEV;
 792
 793         rc = nfc_dev_down(dev);
 794
 795         nfc_put_device(dev);
 796         return rc;
 797 }
 798
 799 static int nfc_genl_start_poll(struct sk_buff *skb, struct genl_info *info)
 800 {
 801         struct nfc_dev *dev;
 802         int rc;
 803         u32 idx;
 804         u32 im_protocols = 0, tm_protocols = 0;
 805
 806         pr_debug("Poll start\n");
 807
 808         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
 809             ((!info->attrs[NFC_ATTR_IM_PROTOCOLS] &&
 810               !info->attrs[NFC_ATTR_PROTOCOLS]) &&
 811               !info->attrs[NFC_ATTR_TM_PROTOCOLS]))
 812                 return -EINVAL;
 813
 814         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 815
 816         if (info->attrs[NFC_ATTR_TM_PROTOCOLS])
 817                 tm_protocols = nla_get_u32(info->attrs[NFC_ATTR_TM_PROTOCOLS]);
 818
 819         if (info->attrs[NFC_ATTR_IM_PROTOCOLS])
 820                 im_protocols = nla_get_u32(info->attrs[NFC_ATTR_IM_PROTOCOLS]);
 821         else if (info->attrs[NFC_ATTR_PROTOCOLS])
 822                 im_protocols = nla_get_u32(info->attrs[NFC_ATTR_PROTOCOLS]);
 823
 824         dev = nfc_get_device(idx);
 825         if (!dev)
 826                 return -ENODEV;
 827
 828         mutex_lock(&dev->genl_data.genl_data_mutex);
 829
 830         rc = nfc_start_poll(dev, im_protocols, tm_protocols);
 831         if (!rc)
 832                 dev->genl_data.poll_req_portid = info->snd_portid;
 833
 834         mutex_unlock(&dev->genl_data.genl_data_mutex);
 835
 836         nfc_put_device(dev);
 837         return rc;
 838 }
 839
 840 static int nfc_genl_stop_poll(struct sk_buff *skb, struct genl_info *info)
 841 {
 842         struct nfc_dev *dev;
 843         int rc;
 844         u32 idx;
 845
 846         if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
 847                 return -EINVAL;
 848
 849         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 850
 851         dev = nfc_get_device(idx);
 852         if (!dev)
 853                 return -ENODEV;
 854
 855         device_lock(&dev->dev);
 856
 857         if (!dev->polling) {
 858                 device_unlock(&dev->dev);
 859                 return -EINVAL;
 860         }
 861
 862         device_unlock(&dev->dev);
 863
 864         mutex_lock(&dev->genl_data.genl_data_mutex);
 865
 866         if (dev->genl_data.poll_req_portid != info->snd_portid) {
 867                 rc = -EBUSY;
 868                 goto out;
 869         }
 870
 871         rc = nfc_stop_poll(dev);
 872         dev->genl_data.poll_req_portid = 0;
 873
 874 out:
 875         mutex_unlock(&dev->genl_data.genl_data_mutex);
 876         nfc_put_device(dev);
 877         return rc;
 878 }
 879
 880 static int nfc_genl_activate_target(struct sk_buff *skb, struct genl_info *info)
 881 {
 882         struct nfc_dev *dev;
 883         u32 device_idx, target_idx, protocol;
 884         int rc;
 885
 886         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
 887             !info->attrs[NFC_ATTR_TARGET_INDEX] ||
 888             !info->attrs[NFC_ATTR_PROTOCOLS])
 889                 return -EINVAL;
 890
 891         device_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 892
 893         dev = nfc_get_device(device_idx);
 894         if (!dev)
 895                 return -ENODEV;
 896
 897         target_idx = nla_get_u32(info->attrs[NFC_ATTR_TARGET_INDEX]);
 898         protocol = nla_get_u32(info->attrs[NFC_ATTR_PROTOCOLS]);
 899
 900         nfc_deactivate_target(dev, target_idx, NFC_TARGET_MODE_SLEEP);
 901         rc = nfc_activate_target(dev, target_idx, protocol);
 902
 903         nfc_put_device(dev);
 904         return rc;
 905 }
 906
 907 static int nfc_genl_deactivate_target(struct sk_buff *skb,
 908                                       struct genl_info *info)
 909 {
 910         struct nfc_dev *dev;
 911         u32 device_idx, target_idx;
 912         int rc;
 913
 914         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
 915             !info->attrs[NFC_ATTR_TARGET_INDEX])
 916                 return -EINVAL;
 917
 918         device_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 919
 920         dev = nfc_get_device(device_idx);
 921         if (!dev)
 922                 return -ENODEV;
 923
 924         target_idx = nla_get_u32(info->attrs[NFC_ATTR_TARGET_INDEX]);
 925
 926         rc = nfc_deactivate_target(dev, target_idx, NFC_TARGET_MODE_SLEEP);
 927
 928         nfc_put_device(dev);
 929         return rc;
 930 }
 931
 932 static int nfc_genl_dep_link_up(struct sk_buff *skb, struct genl_info *info)
 933 {
 934         struct nfc_dev *dev;
 935         int rc, tgt_idx;
 936         u32 idx;
 937         u8 comm;
 938
 939         pr_debug("DEP link up\n");
 940
 941         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
 942             !info->attrs[NFC_ATTR_COMM_MODE])
 943                 return -EINVAL;
 944
 945         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 946         if (!info->attrs[NFC_ATTR_TARGET_INDEX])
 947                 tgt_idx = NFC_TARGET_IDX_ANY;
 948         else
 949                 tgt_idx = nla_get_u32(info->attrs[NFC_ATTR_TARGET_INDEX]);
 950
 951         comm = nla_get_u8(info->attrs[NFC_ATTR_COMM_MODE]);
 952
 953         if (comm != NFC_COMM_ACTIVE && comm != NFC_COMM_PASSIVE)
 954                 return -EINVAL;
 955
 956         dev = nfc_get_device(idx);
 957         if (!dev)
 958                 return -ENODEV;
 959
 960         rc = nfc_dep_link_up(dev, tgt_idx, comm);
 961
 962         nfc_put_device(dev);
 963
 964         return rc;
 965 }
 966
 967 static int nfc_genl_dep_link_down(struct sk_buff *skb, struct genl_info *info)
 968 {
 969         struct nfc_dev *dev;
 970         int rc;
 971         u32 idx;
 972
 973         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
 974             !info->attrs[NFC_ATTR_TARGET_INDEX])
 975                 return -EINVAL;
 976
 977         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 978
 979         dev = nfc_get_device(idx);
 980         if (!dev)
 981                 return -ENODEV;
 982
 983         rc = nfc_dep_link_down(dev);
 984
 985         nfc_put_device(dev);
 986         return rc;
 987 }
 988
 989 static int nfc_genl_send_params(struct sk_buff *msg,
 990                                 struct nfc_llcp_local *local,
 991                                 u32 portid, u32 seq)
 992 {
 993         void *hdr;
 994
 995         hdr = genlmsg_put(msg, portid, seq, &nfc_genl_family, 0,
 996                           NFC_CMD_LLC_GET_PARAMS);
 997         if (!hdr)
 998                 return -EMSGSIZE;
 999
1000         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, local->dev->idx) ||
1001             nla_put_u8(msg, NFC_ATTR_LLC_PARAM_LTO, local->lto) ||
1002             nla_put_u8(msg, NFC_ATTR_LLC_PARAM_RW, local->rw) ||
1003             nla_put_u16(msg, NFC_ATTR_LLC_PARAM_MIUX, be16_to_cpu(local->miux)))
1004                 goto nla_put_failure;
1005
1006         genlmsg_end(msg, hdr);
1007         return 0;
1008
1009 nla_put_failure:
1010         genlmsg_cancel(msg, hdr);
1011         return -EMSGSIZE;
1012 }
1013
1014 static int nfc_genl_llc_get_params(struct sk_buff *skb, struct genl_info *info)
1015 {
1016         struct nfc_dev *dev;
1017         struct nfc_llcp_local *local;
1018         int rc = 0;
1019         struct sk_buff *msg = NULL;
1020         u32 idx;
1021
1022         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1023             !info->attrs[NFC_ATTR_FIRMWARE_NAME])
1024                 return -EINVAL;
1025
1026         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1027
1028         dev = nfc_get_device(idx);
1029         if (!dev)
1030                 return -ENODEV;
1031
1032         device_lock(&dev->dev);
1033
1034         local = nfc_llcp_find_local(dev);
1035         if (!local) {
1036                 rc = -ENODEV;
1037                 goto exit;
1038         }
1039
1040         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
1041         if (!msg) {
1042                 rc = -ENOMEM;
1043                 goto exit;
1044         }
1045
1046         rc = nfc_genl_send_params(msg, local, info->snd_portid, info->snd_seq);
1047
1048 exit:
1049         device_unlock(&dev->dev);
1050
1051         nfc_put_device(dev);
1052
1053         if (rc < 0) {
1054                 if (msg)
1055                         nlmsg_free(msg);
1056
1057                 return rc;
1058         }
1059
1060         return genlmsg_reply(msg, info);
1061 }
1062
1063 static int nfc_genl_llc_set_params(struct sk_buff *skb, struct genl_info *info)
1064 {
1065         struct nfc_dev *dev;
1066         struct nfc_llcp_local *local;
1067         u8 rw = 0;
1068         u16 miux = 0;
1069         u32 idx;
1070         int rc = 0;
1071
1072         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1073             (!info->attrs[NFC_ATTR_LLC_PARAM_LTO] &&
1074              !info->attrs[NFC_ATTR_LLC_PARAM_RW] &&
1075              !info->attrs[NFC_ATTR_LLC_PARAM_MIUX]))
1076                 return -EINVAL;
1077
1078         if (info->attrs[NFC_ATTR_LLC_PARAM_RW]) {
1079                 rw = nla_get_u8(info->attrs[NFC_ATTR_LLC_PARAM_RW]);
1080
1081                 if (rw > LLCP_MAX_RW)
1082                         return -EINVAL;
1083         }
1084
1085         if (info->attrs[NFC_ATTR_LLC_PARAM_MIUX]) {
1086                 miux = nla_get_u16(info->attrs[NFC_ATTR_LLC_PARAM_MIUX]);
1087
1088                 if (miux > LLCP_MAX_MIUX)
1089                         return -EINVAL;
1090         }
1091
1092         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1093
1094         dev = nfc_get_device(idx);
1095         if (!dev)
1096                 return -ENODEV;
1097
1098         device_lock(&dev->dev);
1099
1100         local = nfc_llcp_find_local(dev);
1101         if (!local) {
1102                 nfc_put_device(dev);
1103                 rc = -ENODEV;
1104                 goto exit;
1105         }
1106
1107         if (info->attrs[NFC_ATTR_LLC_PARAM_LTO]) {
1108                 if (dev->dep_link_up) {
1109                         rc = -EINPROGRESS;
1110                         goto exit;
1111                 }
1112
1113                 local->lto = nla_get_u8(info->attrs[NFC_ATTR_LLC_PARAM_LTO]);
1114         }
1115
1116         if (info->attrs[NFC_ATTR_LLC_PARAM_RW])
1117                 local->rw = rw;
1118
1119         if (info->attrs[NFC_ATTR_LLC_PARAM_MIUX])
1120                 local->miux = cpu_to_be16(miux);
1121
1122 exit:
1123         device_unlock(&dev->dev);
1124
1125         nfc_put_device(dev);
1126
1127         return rc;
1128 }
1129
1130 static int nfc_genl_llc_sdreq(struct sk_buff *skb, struct genl_info *info)
1131 {
1132         struct nfc_dev *dev;
1133         struct nfc_llcp_local *local;
1134         struct nlattr *attr, *sdp_attrs[NFC_SDP_ATTR_MAX+1];
1135         u32 idx;
1136         u8 tid;
1137         char *uri;
1138         int rc = 0, rem;
1139         size_t uri_len, tlvs_len;
1140         struct hlist_head sdreq_list;
1141         struct nfc_llcp_sdp_tlv *sdreq;
1142
1143         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1144             !info->attrs[NFC_ATTR_LLC_SDP])
1145                 return -EINVAL;
1146
1147         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1148
1149         dev = nfc_get_device(idx);
1150         if (!dev)
1151                 return -ENODEV;
1152
1153         device_lock(&dev->dev);
1154
1155         if (dev->dep_link_up == false) {
1156                 rc = -ENOLINK;
1157                 goto exit;
1158         }
1159
1160         local = nfc_llcp_find_local(dev);
1161         if (!local) {
1162                 nfc_put_device(dev);
1163                 rc = -ENODEV;
1164                 goto exit;
1165         }
1166
1167         INIT_HLIST_HEAD(&sdreq_list);
1168
1169         tlvs_len = 0;
1170
1171         nla_for_each_nested(attr, info->attrs[NFC_ATTR_LLC_SDP], rem) {
1172                 rc = nla_parse_nested_deprecated(sdp_attrs, NFC_SDP_ATTR_MAX,
1173                                                  attr, nfc_sdp_genl_policy,
1174                                                  info->extack);
1175
1176                 if (rc != 0) {
1177                         rc = -EINVAL;
1178                         goto exit;
1179                 }
1180
1181                 if (!sdp_attrs[NFC_SDP_ATTR_URI])
1182                         continue;
1183
1184                 uri_len = nla_len(sdp_attrs[NFC_SDP_ATTR_URI]);
1185                 if (uri_len == 0)
1186                         continue;
1187
1188                 uri = nla_data(sdp_attrs[NFC_SDP_ATTR_URI]);
1189                 if (uri == NULL || *uri == 0)
1190                         continue;
1191
1192                 tid = local->sdreq_next_tid++;
1193
1194                 sdreq = nfc_llcp_build_sdreq_tlv(tid, uri, uri_len);
1195                 if (sdreq == NULL) {
1196                         rc = -ENOMEM;
1197                         goto exit;
1198                 }
1199
1200                 tlvs_len += sdreq->tlv_len;
1201
1202                 hlist_add_head(&sdreq->node, &sdreq_list);
1203         }
1204
1205         if (hlist_empty(&sdreq_list)) {
1206                 rc = -EINVAL;
1207                 goto exit;
1208         }
1209
1210         rc = nfc_llcp_send_snl_sdreq(local, &sdreq_list, tlvs_len);
1211 exit:
1212         device_unlock(&dev->dev);
1213
1214         nfc_put_device(dev);
1215
1216         return rc;
1217 }
1218
1219 static int nfc_genl_fw_download(struct sk_buff *skb, struct genl_info *info)
1220 {
1221         struct nfc_dev *dev;
1222         int rc;
1223         u32 idx;
1224         char firmware_name[NFC_FIRMWARE_NAME_MAXSIZE + 1];
1225
1226         if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
1227                 return -EINVAL;
1228
1229         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1230
1231         dev = nfc_get_device(idx);
1232         if (!dev)
1233                 return -ENODEV;
1234
1235         nla_strlcpy(firmware_name, info->attrs[NFC_ATTR_FIRMWARE_NAME],
1236                     sizeof(firmware_name));
1237
1238         rc = nfc_fw_download(dev, firmware_name);
1239
1240         nfc_put_device(dev);
1241         return rc;
1242 }
1243
1244 int nfc_genl_fw_download_done(struct nfc_dev *dev, const char *firmware_name,
1245                               u32 result)
1246 {
1247         struct sk_buff *msg;
1248         void *hdr;
1249
1250         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
1251         if (!msg)
1252                 return -ENOMEM;
1253
1254         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
1255                           NFC_CMD_FW_DOWNLOAD);
1256         if (!hdr)
1257                 goto free_msg;
1258
1259         if (nla_put_string(msg, NFC_ATTR_FIRMWARE_NAME, firmware_name) ||
1260             nla_put_u32(msg, NFC_ATTR_FIRMWARE_DOWNLOAD_STATUS, result) ||
1261             nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
1262                 goto nla_put_failure;
1263
1264         genlmsg_end(msg, hdr);
1265
1266         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
1267
1268         return 0;
1269
1270 nla_put_failure:
1271 free_msg:
1272         nlmsg_free(msg);
1273         return -EMSGSIZE;
1274 }
1275
1276 static int nfc_genl_enable_se(struct sk_buff *skb, struct genl_info *info)
1277 {
1278         struct nfc_dev *dev;
1279         int rc;
1280         u32 idx, se_idx;
1281
1282         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1283             !info->attrs[NFC_ATTR_SE_INDEX])
1284                 return -EINVAL;
1285
1286         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1287         se_idx = nla_get_u32(info->attrs[NFC_ATTR_SE_INDEX]);
1288
1289         dev = nfc_get_device(idx);
1290         if (!dev)
1291                 return -ENODEV;
1292
1293         rc = nfc_enable_se(dev, se_idx);
1294
1295         nfc_put_device(dev);
1296         return rc;
1297 }
1298
1299 static int nfc_genl_disable_se(struct sk_buff *skb, struct genl_info *info)
1300 {
1301         struct nfc_dev *dev;
1302         int rc;
1303         u32 idx, se_idx;
1304
1305         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1306             !info->attrs[NFC_ATTR_SE_INDEX])
1307                 return -EINVAL;
1308
1309         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1310         se_idx = nla_get_u32(info->attrs[NFC_ATTR_SE_INDEX]);
1311
1312         dev = nfc_get_device(idx);
1313         if (!dev)
1314                 return -ENODEV;
1315
1316         rc = nfc_disable_se(dev, se_idx);
1317
1318         nfc_put_device(dev);
1319         return rc;
1320 }
1321
1322 static int nfc_genl_send_se(struct sk_buff *msg, struct nfc_dev *dev,
1323                                 u32 portid, u32 seq,
1324                                 struct netlink_callback *cb,
1325                                 int flags)
1326 {
1327         void *hdr;
1328         struct nfc_se *se, *n;
1329
1330         list_for_each_entry_safe(se, n, &dev->secure_elements, list) {
1331                 hdr = genlmsg_put(msg, portid, seq, &nfc_genl_family, flags,
1332                                   NFC_CMD_GET_SE);
1333                 if (!hdr)
1334                         goto nla_put_failure;
1335
1336                 if (cb)
1337                         genl_dump_check_consistent(cb, hdr);
1338
1339                 if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
1340                     nla_put_u32(msg, NFC_ATTR_SE_INDEX, se->idx) ||
1341                     nla_put_u8(msg, NFC_ATTR_SE_TYPE, se->type))
1342                         goto nla_put_failure;
1343
1344                 genlmsg_end(msg, hdr);
1345         }
1346
1347         return 0;
1348
1349 nla_put_failure:
1350         genlmsg_cancel(msg, hdr);
1351         return -EMSGSIZE;
1352 }
1353
1354 static int nfc_genl_dump_ses(struct sk_buff *skb,
1355                                  struct netlink_callback *cb)
1356 {
1357         struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
1358         struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
1359         bool first_call = false;
1360
1361         if (!iter) {
1362                 first_call = true;
1363                 iter = kmalloc(sizeof(struct class_dev_iter), GFP_KERNEL);
1364                 if (!iter)
1365                         return -ENOMEM;
1366                 cb->args[0] = (long) iter;
1367         }
1368
1369         mutex_lock(&nfc_devlist_mutex);
1370
1371         cb->seq = nfc_devlist_generation;
1372
1373         if (first_call) {
1374                 nfc_device_iter_init(iter);
1375                 dev = nfc_device_iter_next(iter);
1376         }
1377
1378         while (dev) {
1379                 int rc;
1380
1381                 rc = nfc_genl_send_se(skb, dev, NETLINK_CB(cb->skb).portid,
1382                                           cb->nlh->nlmsg_seq, cb, NLM_F_MULTI);
1383                 if (rc < 0)
1384                         break;
1385
1386                 dev = nfc_device_iter_next(iter);
1387         }
1388
1389         mutex_unlock(&nfc_devlist_mutex);
1390
1391         cb->args[1] = (long) dev;
1392
1393         return skb->len;
1394 }
1395
1396 static int nfc_genl_dump_ses_done(struct netlink_callback *cb)
1397 {
1398         struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
1399
1400         nfc_device_iter_exit(iter);
1401         kfree(iter);
1402
1403         return 0;
1404 }
1405
1406 static int nfc_se_io(struct nfc_dev *dev, u32 se_idx,
1407                      u8 *apdu, size_t apdu_length,
1408                      se_io_cb_t cb, void *cb_context)
1409 {
1410         struct nfc_se *se;
1411         int rc;
1412
1413         pr_debug("%s se index %d\n", dev_name(&dev->dev), se_idx);
1414
1415         device_lock(&dev->dev);
1416
1417         if (!device_is_registered(&dev->dev)) {
1418                 rc = -ENODEV;
1419                 goto error;
1420         }
1421
1422         if (!dev->dev_up) {
1423                 rc = -ENODEV;
1424                 goto error;
1425         }
1426
1427         if (!dev->ops->se_io) {
1428                 rc = -EOPNOTSUPP;
1429                 goto error;
1430         }
1431
1432         se = nfc_find_se(dev, se_idx);
1433         if (!se) {
1434                 rc = -EINVAL;
1435                 goto error;
1436         }
1437
1438         if (se->state != NFC_SE_ENABLED) {
1439                 rc = -ENODEV;
1440                 goto error;
1441         }
1442
1443         rc = dev->ops->se_io(dev, se_idx, apdu,
1444                         apdu_length, cb, cb_context);
1445
1446 error:
1447         device_unlock(&dev->dev);
1448         return rc;
1449 }
1450
1451 struct se_io_ctx {
1452         u32 dev_idx;
1453         u32 se_idx;
1454 };
1455
1456 static void se_io_cb(void *context, u8 *apdu, size_t apdu_len, int err)
1457 {
1458         struct se_io_ctx *ctx = context;
1459         struct sk_buff *msg;
1460         void *hdr;
1461
1462         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
1463         if (!msg) {
1464                 kfree(ctx);
1465                 return;
1466         }
1467
1468         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
1469                           NFC_CMD_SE_IO);
1470         if (!hdr)
1471                 goto free_msg;
1472
1473         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, ctx->dev_idx) ||
1474             nla_put_u32(msg, NFC_ATTR_SE_INDEX, ctx->se_idx) ||
1475             nla_put(msg, NFC_ATTR_SE_APDU, apdu_len, apdu))
1476                 goto nla_put_failure;
1477
1478         genlmsg_end(msg, hdr);
1479
1480         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
1481
1482         kfree(ctx);
1483
1484         return;
1485
1486 nla_put_failure:
1487 free_msg:
1488         nlmsg_free(msg);
1489         kfree(ctx);
1490
1491         return;
1492 }
1493
1494 static int nfc_genl_se_io(struct sk_buff *skb, struct genl_info *info)
1495 {
1496         struct nfc_dev *dev;
1497         struct se_io_ctx *ctx;
1498         u32 dev_idx, se_idx;
1499         u8 *apdu;
1500         size_t apdu_len;
1501
1502         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1503             !info->attrs[NFC_ATTR_SE_INDEX] ||
1504             !info->attrs[NFC_ATTR_SE_APDU])
1505                 return -EINVAL;
1506
1507         dev_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1508         se_idx = nla_get_u32(info->attrs[NFC_ATTR_SE_INDEX]);
1509
1510         dev = nfc_get_device(dev_idx);
1511         if (!dev)
1512                 return -ENODEV;
1513
1514         if (!dev->ops || !dev->ops->se_io)
1515                 return -ENOTSUPP;
1516
1517         apdu_len = nla_len(info->attrs[NFC_ATTR_SE_APDU]);
1518         if (apdu_len == 0)
1519                 return -EINVAL;
1520
1521         apdu = nla_data(info->attrs[NFC_ATTR_SE_APDU]);
1522         if (!apdu)
1523                 return -EINVAL;
1524
1525         ctx = kzalloc(sizeof(struct se_io_ctx), GFP_KERNEL);
1526         if (!ctx)
1527                 return -ENOMEM;
1528
1529         ctx->dev_idx = dev_idx;
1530         ctx->se_idx = se_idx;
1531
1532         return nfc_se_io(dev, se_idx, apdu, apdu_len, se_io_cb, ctx);
1533 }
1534
1535 static int nfc_genl_vendor_cmd(struct sk_buff *skb,
1536                                struct genl_info *info)
1537 {
1538         struct nfc_dev *dev;
1539         struct nfc_vendor_cmd *cmd;
1540         u32 dev_idx, vid, subcmd;
1541         u8 *data;
1542         size_t data_len;
1543         int i, err;
1544
1545         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1546             !info->attrs[NFC_ATTR_VENDOR_ID] ||
1547             !info->attrs[NFC_ATTR_VENDOR_SUBCMD])
1548                 return -EINVAL;
1549
1550         dev_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1551         vid = nla_get_u32(info->attrs[NFC_ATTR_VENDOR_ID]);
1552         subcmd = nla_get_u32(info->attrs[NFC_ATTR_VENDOR_SUBCMD]);
1553
1554         dev = nfc_get_device(dev_idx);
1555         if (!dev || !dev->vendor_cmds || !dev->n_vendor_cmds)
1556                 return -ENODEV;
1557
1558         if (info->attrs[NFC_ATTR_VENDOR_DATA]) {
1559                 data = nla_data(info->attrs[NFC_ATTR_VENDOR_DATA]);
1560                 data_len = nla_len(info->attrs[NFC_ATTR_VENDOR_DATA]);
1561                 if (data_len == 0)
1562                         return -EINVAL;
1563         } else {
1564                 data = NULL;
1565                 data_len = 0;
1566         }
1567
1568         for (i = 0; i < dev->n_vendor_cmds; i++) {
1569                 cmd = &dev->vendor_cmds[i];
1570
1571                 if (cmd->vendor_id != vid || cmd->subcmd != subcmd)
1572                         continue;
1573
1574                 dev->cur_cmd_info = info;
1575                 err = cmd->doit(dev, data, data_len);
1576                 dev->cur_cmd_info = NULL;
1577                 return err;
1578         }
1579
1580         return -EOPNOTSUPP;
1581 }
1582
1583 /* message building helper */
1584 static inline void *nfc_hdr_put(struct sk_buff *skb, u32 portid, u32 seq,
1585                                 int flags, u8 cmd)
1586 {
1587         /* since there is no private header just add the generic one */
1588         return genlmsg_put(skb, portid, seq, &nfc_genl_family, flags, cmd);
1589 }
1590
1591 static struct sk_buff *
1592 __nfc_alloc_vendor_cmd_skb(struct nfc_dev *dev, int approxlen,
1593                            u32 portid, u32 seq,
1594                            enum nfc_attrs attr,
1595                            u32 oui, u32 subcmd, gfp_t gfp)
1596 {
1597         struct sk_buff *skb;
1598         void *hdr;
1599
1600         skb = nlmsg_new(approxlen + 100, gfp);
1601         if (!skb)
1602                 return NULL;
1603
1604         hdr = nfc_hdr_put(skb, portid, seq, 0, NFC_CMD_VENDOR);
1605         if (!hdr) {
1606                 kfree_skb(skb);
1607                 return NULL;
1608         }
1609
1610         if (nla_put_u32(skb, NFC_ATTR_DEVICE_INDEX, dev->idx))
1611                 goto nla_put_failure;
1612         if (nla_put_u32(skb, NFC_ATTR_VENDOR_ID, oui))
1613                 goto nla_put_failure;
1614         if (nla_put_u32(skb, NFC_ATTR_VENDOR_SUBCMD, subcmd))
1615                 goto nla_put_failure;
1616
1617         ((void **)skb->cb)[0] = dev;
1618         ((void **)skb->cb)[1] = hdr;
1619
1620         return skb;
1621
1622 nla_put_failure:
1623         kfree_skb(skb);
1624         return NULL;
1625 }
1626
1627 struct sk_buff *__nfc_alloc_vendor_cmd_reply_skb(struct nfc_dev *dev,
1628                                                  enum nfc_attrs attr,
1629                                                  u32 oui, u32 subcmd,
1630                                                  int approxlen)
1631 {
1632         if (WARN_ON(!dev->cur_cmd_info))
1633                 return NULL;
1634
1635         return __nfc_alloc_vendor_cmd_skb(dev, approxlen,
1636                                           dev->cur_cmd_info->snd_portid,
1637                                           dev->cur_cmd_info->snd_seq, attr,
1638                                           oui, subcmd, GFP_KERNEL);
1639 }
1640 EXPORT_SYMBOL(__nfc_alloc_vendor_cmd_reply_skb);
1641
1642 int nfc_vendor_cmd_reply(struct sk_buff *skb)
1643 {
1644         struct nfc_dev *dev = ((void **)skb->cb)[0];
1645         void *hdr = ((void **)skb->cb)[1];
1646
1647         /* clear CB data for netlink core to own from now on */
1648         memset(skb->cb, 0, sizeof(skb->cb));
1649
1650         if (WARN_ON(!dev->cur_cmd_info)) {
1651                 kfree_skb(skb);
1652                 return -EINVAL;
1653         }
1654
1655         genlmsg_end(skb, hdr);
1656         return genlmsg_reply(skb, dev->cur_cmd_info);
1657 }
1658 EXPORT_SYMBOL(nfc_vendor_cmd_reply);
1659
1660 static const struct genl_ops nfc_genl_ops[] = {
1661         {
1662                 .cmd = NFC_CMD_GET_DEVICE,
1663                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1664                 .doit = nfc_genl_get_device,
1665                 .dumpit = nfc_genl_dump_devices,
1666                 .done = nfc_genl_dump_devices_done,
1667         },
1668         {
1669                 .cmd = NFC_CMD_DEV_UP,
1670                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1671                 .doit = nfc_genl_dev_up,
1672         },
1673         {
1674                 .cmd = NFC_CMD_DEV_DOWN,
1675                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1676                 .doit = nfc_genl_dev_down,
1677         },
1678         {
1679                 .cmd = NFC_CMD_START_POLL,
1680                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1681                 .doit = nfc_genl_start_poll,
1682         },
1683         {
1684                 .cmd = NFC_CMD_STOP_POLL,
1685                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1686                 .doit = nfc_genl_stop_poll,
1687         },
1688         {
1689                 .cmd = NFC_CMD_DEP_LINK_UP,
1690                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1691                 .doit = nfc_genl_dep_link_up,
1692         },
1693         {
1694                 .cmd = NFC_CMD_DEP_LINK_DOWN,
1695                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1696                 .doit = nfc_genl_dep_link_down,
1697         },
1698         {
1699                 .cmd = NFC_CMD_GET_TARGET,
1700                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1701                 .dumpit = nfc_genl_dump_targets,
1702                 .done = nfc_genl_dump_targets_done,
1703         },
1704         {
1705                 .cmd = NFC_CMD_LLC_GET_PARAMS,
1706                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1707                 .doit = nfc_genl_llc_get_params,
1708         },
1709         {
1710                 .cmd = NFC_CMD_LLC_SET_PARAMS,
1711                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1712                 .doit = nfc_genl_llc_set_params,
1713         },
1714         {
1715                 .cmd = NFC_CMD_LLC_SDREQ,
1716                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1717                 .doit = nfc_genl_llc_sdreq,
1718         },
1719         {
1720                 .cmd = NFC_CMD_FW_DOWNLOAD,
1721                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1722                 .doit = nfc_genl_fw_download,
1723         },
1724         {
1725                 .cmd = NFC_CMD_ENABLE_SE,
1726                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1727                 .doit = nfc_genl_enable_se,
1728         },
1729         {
1730                 .cmd = NFC_CMD_DISABLE_SE,
1731                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1732                 .doit = nfc_genl_disable_se,
1733         },
1734         {
1735                 .cmd = NFC_CMD_GET_SE,
1736                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1737                 .dumpit = nfc_genl_dump_ses,
1738                 .done = nfc_genl_dump_ses_done,
1739         },
1740         {
1741                 .cmd = NFC_CMD_SE_IO,
1742                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1743                 .doit = nfc_genl_se_io,
1744         },
1745         {
1746                 .cmd = NFC_CMD_ACTIVATE_TARGET,
1747                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1748                 .doit = nfc_genl_activate_target,
1749         },
1750         {
1751                 .cmd = NFC_CMD_VENDOR,
1752                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1753                 .doit = nfc_genl_vendor_cmd,
1754         },
1755         {
1756                 .cmd = NFC_CMD_DEACTIVATE_TARGET,
1757                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1758                 .doit = nfc_genl_deactivate_target,
1759         },
1760 };
1761
1762 static struct genl_family nfc_genl_family __ro_after_init = {
1763         .hdrsize = 0,
1764         .name = NFC_GENL_NAME,
1765         .version = NFC_GENL_VERSION,
1766         .maxattr = NFC_ATTR_MAX,
1767         .policy = nfc_genl_policy,
1768         .module = THIS_MODULE,
1769         .ops = nfc_genl_ops,
1770         .n_ops = ARRAY_SIZE(nfc_genl_ops),
1771         .mcgrps = nfc_genl_mcgrps,
1772         .n_mcgrps = ARRAY_SIZE(nfc_genl_mcgrps),
1773 };
1774
1775
1776 struct urelease_work {
1777         struct  work_struct w;
1778         u32     portid;
1779 };
1780
1781 static void nfc_urelease_event_work(struct work_struct *work)
1782 {
1783         struct urelease_work *w = container_of(work, struct urelease_work, w);
1784         struct class_dev_iter iter;
1785         struct nfc_dev *dev;
1786
1787         pr_debug("portid %d\n", w->portid);
1788
1789         mutex_lock(&nfc_devlist_mutex);
1790
1791         nfc_device_iter_init(&iter);
1792         dev = nfc_device_iter_next(&iter);
1793
1794         while (dev) {
1795                 mutex_lock(&dev->genl_data.genl_data_mutex);
1796
1797                 if (dev->genl_data.poll_req_portid == w->portid) {
1798                         nfc_stop_poll(dev);
1799                         dev->genl_data.poll_req_portid = 0;
1800                 }
1801
1802                 mutex_unlock(&dev->genl_data.genl_data_mutex);
1803
1804                 dev = nfc_device_iter_next(&iter);
1805         }
1806
1807         nfc_device_iter_exit(&iter);
1808
1809         mutex_unlock(&nfc_devlist_mutex);
1810
1811         kfree(w);
1812 }
1813
1814 static int nfc_genl_rcv_nl_event(struct notifier_block *this,
1815                                  unsigned long event, void *ptr)
1816 {
1817         struct netlink_notify *n = ptr;
1818         struct urelease_work *w;
1819
1820         if (event != NETLINK_URELEASE || n->protocol != NETLINK_GENERIC)
1821                 goto out;
1822
1823         pr_debug("NETLINK_URELEASE event from id %d\n", n->portid);
1824
1825         w = kmalloc(sizeof(*w), GFP_ATOMIC);
1826         if (w) {
1827                 INIT_WORK((struct work_struct *) w, nfc_urelease_event_work);
1828                 w->portid = n->portid;
1829                 schedule_work((struct work_struct *) w);
1830         }
1831
1832 out:
1833         return NOTIFY_DONE;
1834 }
1835
1836 void nfc_genl_data_init(struct nfc_genl_data *genl_data)
1837 {
1838         genl_data->poll_req_portid = 0;
1839         mutex_init(&genl_data->genl_data_mutex);
1840 }
1841
1842 void nfc_genl_data_exit(struct nfc_genl_data *genl_data)
1843 {
1844         mutex_destroy(&genl_data->genl_data_mutex);
1845 }
1846
1847 static struct notifier_block nl_notifier = {
1848         .notifier_call  = nfc_genl_rcv_nl_event,
1849 };
1850
1851 /**
1852  * nfc_genl_init() - Initialize netlink interface
1853  *
1854  * This initialization function registers the nfc netlink family.
1855  */
1856 int __init nfc_genl_init(void)
1857 {
1858         int rc;
1859
1860         rc = genl_register_family(&nfc_genl_family);
1861         if (rc)
1862                 return rc;
1863
1864         netlink_register_notifier(&nl_notifier);
1865
1866         return 0;
1867 }
1868
1869 /**
1870  * nfc_genl_exit() - Deinitialize netlink interface
1871  *
1872  * This exit function unregisters the nfc netlink family.
1873  */
1874 void nfc_genl_exit(void)
1875 {
1876         netlink_unregister_notifier(&nl_notifier);
1877         genl_unregister_family(&nfc_genl_family);
1878 }