[deliverable/linux.git] / net / nfc / llcp / commands.c

/*
 * Copyright (C) 2011  Intel Corporation. All rights reserved.
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the
 * Free Software Foundation, Inc.,
 * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
 */

#define pr_fmt(fmt) "llcp: %s: " fmt, __func__

#include <linux/init.h>
#include <linux/kernel.h>
#include <linux/module.h>
#include <linux/nfc.h>

#include <net/nfc/nfc.h>

#include "../nfc.h"
#include "llcp.h"

static u8 llcp_tlv_length[LLCP_TLV_MAX] = {
	0,
	1, /* VERSION */
	2, /* MIUX */
	2, /* WKS */
	1, /* LTO */
	1, /* RW */
	0, /* SN */
	1, /* OPT */
	0, /* SDREQ */
	2, /* SDRES */

};

static u8 llcp_tlv8(u8 *tlv, u8 type)
{
	if (tlv[0] != type || tlv[1] != llcp_tlv_length[tlv[0]])
		return 0;

	return tlv[2];
}

static u8 llcp_tlv16(u8 *tlv, u8 type)
{
	if (tlv[0] != type || tlv[1] != llcp_tlv_length[tlv[0]])
		return 0;

	return be16_to_cpu(*((__be16 *)(tlv + 2)));
}


static u8 llcp_tlv_version(u8 *tlv)
{
	return llcp_tlv8(tlv, LLCP_TLV_VERSION);
}

static u16 llcp_tlv_miux(u8 *tlv)
{
	return llcp_tlv16(tlv, LLCP_TLV_MIUX) & 0x7f;
}

static u16 llcp_tlv_wks(u8 *tlv)
{
	return llcp_tlv16(tlv, LLCP_TLV_WKS);
}

static u16 llcp_tlv_lto(u8 *tlv)
{
	return llcp_tlv8(tlv, LLCP_TLV_LTO);
}

static u8 llcp_tlv_opt(u8 *tlv)
{
	return llcp_tlv8(tlv, LLCP_TLV_OPT);
}

static u8 llcp_tlv_rw(u8 *tlv)
{
	return llcp_tlv8(tlv, LLCP_TLV_RW) & 0xf;
}

u8 *nfc_llcp_build_tlv(u8 type, u8 *value, u8 value_length, u8 *tlv_length)
{
	u8 *tlv, length;

	pr_debug("type %d\n", type);

	if (type >= LLCP_TLV_MAX)
		return NULL;

	length = llcp_tlv_length[type];
	if (length == 0 && value_length == 0)
		return NULL;
	else
		length = value_length;

	*tlv_length = 2 + length;
	tlv = kzalloc(2 + length, GFP_KERNEL);
	if (tlv == NULL)
		return tlv;

	tlv[0] = type;
	tlv[1] = length;
	memcpy(tlv + 2, value, length);

	return tlv;
}

int nfc_llcp_parse_tlv(struct nfc_llcp_local *local,
			u8 *tlv_array, u16 tlv_array_len)
{
	u8 *tlv = tlv_array, type, length, offset = 0;

	pr_debug("TLV array length %d\n", tlv_array_len);

	if (local == NULL)
		return -ENODEV;

	while (offset < tlv_array_len) {
		type = tlv[0];
		length = tlv[1];

		pr_debug("type 0x%x length %d\n", type, length);

		switch (type) {
		case LLCP_TLV_VERSION:
			local->remote_version = llcp_tlv_version(tlv);
			break;
		case LLCP_TLV_MIUX:
			local->remote_miu = llcp_tlv_miux(tlv) + 128;
			break;
		case LLCP_TLV_WKS:
			local->remote_wks = llcp_tlv_wks(tlv);
			break;
		case LLCP_TLV_LTO:
			local->remote_lto = llcp_tlv_lto(tlv) * 10;
			break;
		case LLCP_TLV_OPT:
			local->remote_opt = llcp_tlv_opt(tlv);
			break;
		case LLCP_TLV_RW:
			local->remote_rw = llcp_tlv_rw(tlv);
			break;
		default:
			pr_err("Invalid gt tlv value 0x%x\n", type);
			break;
		}

		offset += length + 2;
		tlv += length + 2;
	}

	pr_debug("version 0x%x miu %d lto %d opt 0x%x wks 0x%x rw %d\n",
		local->remote_version, local->remote_miu,
		local->remote_lto, local->remote_opt,
		local->remote_wks, local->remote_rw);

	return 0;
}

static struct sk_buff *llcp_add_header(struct sk_buff *pdu,
					u8 dsap, u8 ssap, u8 ptype)
{
	u8 header[2];

	pr_debug("ptype 0x%x dsap 0x%x ssap 0x%x\n", ptype, dsap, ssap);

	header[0] = (u8)((dsap << 2) | (ptype >> 2));
	header[1] = (u8)((ptype << 6) | ssap);

	pr_debug("header 0x%x 0x%x\n", header[0], header[1]);

	memcpy(skb_put(pdu, LLCP_HEADER_SIZE), header, LLCP_HEADER_SIZE);

	return pdu;
}

static struct sk_buff *llcp_add_tlv(struct sk_buff *pdu, u8 *tlv, u8 tlv_length)
{
	/* XXX Add an skb length check */

	if (tlv == NULL)
		return NULL;

	memcpy(skb_put(pdu, tlv_length), tlv, tlv_length);

	return pdu;
}

static struct sk_buff *llcp_allocate_pdu(struct nfc_llcp_sock *sock,
							u8 cmd, u16 size)
{
	struct sk_buff *skb;
	int err;

	if (sock->ssap == 0)
		return NULL;

	skb = nfc_alloc_send_skb(sock->dev, &sock->sk, MSG_DONTWAIT,
					size + LLCP_HEADER_SIZE, &err);
	if (skb == NULL) {
		pr_err("Could not allocate PDU\n");
		return NULL;
	}

	skb = llcp_add_header(skb, sock->dsap, sock->ssap, cmd);

	return skb;
}

int nfc_llcp_disconnect(struct nfc_llcp_sock *sock)
{
	struct sk_buff *skb;
	struct nfc_dev *dev;
	struct nfc_llcp_local *local;
	u16 size = 0;

	pr_debug("Sending DISC\n");

	local = sock->local;
	if (local == NULL)
		return -ENODEV;

	dev = sock->dev;
	if (dev == NULL)
		return -ENODEV;

	size += LLCP_HEADER_SIZE;
	size += dev->tx_headroom + dev->tx_tailroom + NFC_HEADER_SIZE;

	skb = alloc_skb(size, GFP_ATOMIC);
	if (skb == NULL)
		return -ENOMEM;

	skb_reserve(skb, dev->tx_headroom + NFC_HEADER_SIZE);

	skb = llcp_add_header(skb, sock->ssap, sock->dsap, LLCP_PDU_DISC);

	skb_queue_tail(&local->tx_queue, skb);

	return 0;
}

int nfc_llcp_send_symm(struct nfc_dev *dev)
{
	struct sk_buff *skb;
	struct nfc_llcp_local *local;
	u16 size = 0;

	pr_debug("Sending SYMM\n");

	local = nfc_llcp_find_local(dev);
	if (local == NULL)
		return -ENODEV;

	size += LLCP_HEADER_SIZE;
	size += dev->tx_headroom + dev->tx_tailroom + NFC_HEADER_SIZE;

	skb = alloc_skb(size, GFP_KERNEL);
	if (skb == NULL)
		return -ENOMEM;

	skb_reserve(skb, dev->tx_headroom + NFC_HEADER_SIZE);

	skb = llcp_add_header(skb, 0, 0, LLCP_PDU_SYMM);

	return nfc_data_exchange(dev, local->target_idx, skb,
					nfc_llcp_recv, local);
}

int nfc_llcp_send_connect(struct nfc_llcp_sock *sock)
{
	struct nfc_llcp_local *local;
	struct sk_buff *skb;
	u8 *service_name_tlv = NULL, service_name_tlv_length;
	u8 *miux_tlv = NULL, miux_tlv_length;
	u8 *rw_tlv = NULL, rw_tlv_length, rw;
	__be16 miux;
	int err;
	u16 size = 0;

	pr_debug("Sending CONNECT\n");

	local = sock->local;
	if (local == NULL)
		return -ENODEV;

	if (sock->service_name != NULL) {
		service_name_tlv = nfc_llcp_build_tlv(LLCP_TLV_SN,
					sock->service_name,
					sock->service_name_len,
					&service_name_tlv_length);
		size += service_name_tlv_length;
	}

	miux = cpu_to_be16(LLCP_MAX_MIUX);
	miux_tlv = nfc_llcp_build_tlv(LLCP_TLV_MIUX, (u8 *)&miux, 0, &miux_tlv_length);
	size += miux_tlv_length;

	rw = LLCP_MAX_RW;
	rw_tlv = nfc_llcp_build_tlv(LLCP_TLV_RW, &rw, 0, &rw_tlv_length);
	size += rw_tlv_length;

	pr_debug("SKB size %d SN length %zu\n", size, sock->service_name_len);

	skb = llcp_allocate_pdu(sock, LLCP_PDU_CONNECT, size);
	if (skb == NULL) {
		err = -ENOMEM;
		goto error_tlv;
	}

	if (service_name_tlv != NULL)
		skb = llcp_add_tlv(skb, service_name_tlv,
					service_name_tlv_length);

	skb = llcp_add_tlv(skb, miux_tlv, miux_tlv_length);
	skb = llcp_add_tlv(skb, rw_tlv, rw_tlv_length);

	skb_queue_tail(&local->tx_queue, skb);

	return 0;

error_tlv:
	pr_err("error %d\n", err);

	kfree(service_name_tlv);
	kfree(miux_tlv);
	kfree(rw_tlv);

	return err;
}

int nfc_llcp_send_cc(struct nfc_llcp_sock *sock)
{
	struct nfc_llcp_local *local;
	struct sk_buff *skb;
	u8 *miux_tlv = NULL, miux_tlv_length;
	u8 *rw_tlv = NULL, rw_tlv_length, rw;
	__be16 miux;
	int err;
	u16 size = 0;

	pr_debug("Sending CC\n");

	local = sock->local;
	if (local == NULL)
		return -ENODEV;

	miux = cpu_to_be16(LLCP_MAX_MIUX);
	miux_tlv = nfc_llcp_build_tlv(LLCP_TLV_MIUX, (u8 *)&miux, 0, &miux_tlv_length);
	size += miux_tlv_length;

	rw = LLCP_MAX_RW;
	rw_tlv = nfc_llcp_build_tlv(LLCP_TLV_RW, &rw, 0, &rw_tlv_length);
	size += rw_tlv_length;

	skb = llcp_allocate_pdu(sock, LLCP_PDU_CC, size);
	if (skb == NULL) {
		err = -ENOMEM;
		goto error_tlv;
	}

	skb = llcp_add_tlv(skb, miux_tlv, miux_tlv_length);
	skb = llcp_add_tlv(skb, rw_tlv, rw_tlv_length);

	skb_queue_tail(&local->tx_queue, skb);

	return 0;

error_tlv:
	pr_err("error %d\n", err);

	kfree(miux_tlv);
	kfree(rw_tlv);

	return err;
}

int nfc_llcp_send_dm(struct nfc_llcp_local *local, u8 ssap, u8 dsap, u8 reason)
{
	struct sk_buff *skb;
	struct nfc_dev *dev;
	u16 size = 1; /* Reason code */

	pr_debug("Sending DM reason 0x%x\n", reason);

	if (local == NULL)
		return -ENODEV;

	dev = local->dev;
	if (dev == NULL)
		return -ENODEV;

	size += LLCP_HEADER_SIZE;
	size += dev->tx_headroom + dev->tx_tailroom + NFC_HEADER_SIZE;

	skb = alloc_skb(size, GFP_KERNEL);
	if (skb == NULL)
		return -ENOMEM;

	skb_reserve(skb, dev->tx_headroom + NFC_HEADER_SIZE);

	skb = llcp_add_header(skb, ssap, dsap, LLCP_PDU_DM);

	memcpy(skb_put(skb, 1), &reason, 1);

	skb_queue_head(&local->tx_queue, skb);

	return 0;
}

int nfc_llcp_send_disconnect(struct nfc_llcp_sock *sock)
{
	struct sk_buff *skb;
	struct nfc_llcp_local *local;

	pr_debug("Send DISC\n");

	local = sock->local;
	if (local == NULL)
		return -ENODEV;

	skb = llcp_allocate_pdu(sock, LLCP_PDU_DISC, 0);
	if (skb == NULL)
		return -ENOMEM;

	skb_queue_head(&local->tx_queue, skb);

	return 0;
}

int nfc_llcp_send_i_frame(struct nfc_llcp_sock *sock,
				struct msghdr *msg, size_t len)
{
	struct sk_buff *pdu;
	struct sock *sk = &sock->sk;
	struct nfc_llcp_local *local;
	size_t frag_len = 0, remaining_len;
	u8 *msg_data, *msg_ptr;

	pr_debug("Send I frame len %zd\n", len);

	local = sock->local;
	if (local == NULL)
		return -ENODEV;

	msg_data = kzalloc(len, GFP_KERNEL);
	if (msg_data == NULL)
		return -ENOMEM;

	if (memcpy_fromiovec(msg_data, msg->msg_iov, len)) {
			kfree(msg_data);
			return -EFAULT;
	}

	remaining_len = len;
	msg_ptr = msg_data;

	while (remaining_len > 0) {

		frag_len = min_t(u16, local->remote_miu, remaining_len);

		pr_debug("Fragment %zd bytes remaining %zd",
			 frag_len, remaining_len);

		pdu = llcp_allocate_pdu(sock, LLCP_PDU_I,
					frag_len + LLCP_SEQUENCE_SIZE);
		if (pdu == NULL)
			return -ENOMEM;

		skb_put(pdu, LLCP_SEQUENCE_SIZE);

		memcpy(skb_put(pdu, frag_len), msg_ptr, frag_len);

		skb_queue_head(&sock->tx_queue, pdu);

		lock_sock(sk);

		nfc_llcp_queue_i_frames(sock);

		release_sock(sk);

		remaining_len -= frag_len;
		msg_ptr += len;
	}

	kfree(msg_data);

	return 0;
}

int nfc_llcp_send_rr(struct nfc_llcp_sock *sock)
{
	struct sk_buff *skb;
	struct nfc_llcp_local *local;

	pr_debug("Send rr nr %d\n", sock->recv_n);

	local = sock->local;
	if (local == NULL)
		return -ENODEV;

	skb = llcp_allocate_pdu(sock, LLCP_PDU_RR, LLCP_SEQUENCE_SIZE);
	if (skb == NULL)
		return -ENOMEM;

	skb_put(skb, LLCP_SEQUENCE_SIZE);

	skb->data[2] = sock->recv_n % 16;

	skb_queue_head(&local->tx_queue, skb);

	return 0;
}
Commit	Line	Data
d646960f SO	1	/*
	2	* Copyright (C) 2011 Intel Corporation. All rights reserved.
	3	*
	4	* This program is free software; you can redistribute it and/or modify
	5	* it under the terms of the GNU General Public License as published by
	6	* the Free Software Foundation; either version 2 of the License, or
	7	* (at your option) any later version.
	8	*
	9	* This program is distributed in the hope that it will be useful,
	10	* but WITHOUT ANY WARRANTY; without even the implied warranty of
	11	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	12	* GNU General Public License for more details.
	13	*
	14	* You should have received a copy of the GNU General Public License
	15	* along with this program; if not, write to the
	16	* Free Software Foundation, Inc.,
	17	* 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
	18	*/
	19
	20	#define pr_fmt(fmt) "llcp: %s: " fmt, __func__
	21
	22	#include <linux/init.h>
	23	#include <linux/kernel.h>
	24	#include <linux/module.h>
	25	#include <linux/nfc.h>
	26
	27	#include <net/nfc/nfc.h>
	28
	29	#include "../nfc.h"
	30	#include "llcp.h"
	31
	32	static u8 llcp_tlv_length[LLCP_TLV_MAX] = {
	33	0,
	34	1, /* VERSION */
	35	2, /* MIUX */
	36	2, /* WKS */
	37	1, /* LTO */
	38	1, /* RW */
	39	0, /* SN */
	40	1, /* OPT */
	41	0, /* SDREQ */
	42	2, /* SDRES */
	43
	44	};
	45
	46	static u8 llcp_tlv8(u8 *tlv, u8 type)
	47	{
	48	if (tlv[0] != type \|\| tlv[1] != llcp_tlv_length[tlv[0]])
	49	return 0;
	50
	51	return tlv[2];
	52	}
	53
	54	static u8 llcp_tlv16(u8 *tlv, u8 type)
	55	{
	56	if (tlv[0] != type \|\| tlv[1] != llcp_tlv_length[tlv[0]])
	57	return 0;
	58
	59	return be16_to_cpu(((__be16 )(tlv + 2)));
	60	}
	61
	62
	63	static u8 llcp_tlv_version(u8 *tlv)
	64	{
65	return llcp_tlv8(tlv, LLCP_TLV_VERSION);
66	}
67
68	static u16 llcp_tlv_miux(u8 *tlv)
69	{
70	return llcp_tlv16(tlv, LLCP_TLV_MIUX) & 0x7f;
71	}
72
73	static u16 llcp_tlv_wks(u8 *tlv)
74	{
75	return llcp_tlv16(tlv, LLCP_TLV_WKS);
76	}
77
78	static u16 llcp_tlv_lto(u8 *tlv)
79	{
80	return llcp_tlv8(tlv, LLCP_TLV_LTO);
81	}
82
83	static u8 llcp_tlv_opt(u8 *tlv)
84	{
85	return llcp_tlv8(tlv, LLCP_TLV_OPT);
86	}
87
88	static u8 llcp_tlv_rw(u8 *tlv)
89	{
90	return llcp_tlv8(tlv, LLCP_TLV_RW) & 0xf;
91	}
92
93	u8 nfc_llcp_build_tlv(u8 type, u8 value, u8 value_length, u8 *tlv_length)
94	{
95	u8 *tlv, length;
96
97	pr_debug("type %d\n", type);
98
99	if (type >= LLCP_TLV_MAX)
100	return NULL;
101
102	length = llcp_tlv_length[type];
103	if (length == 0 && value_length == 0)
104	return NULL;
105	else
106	length = value_length;
107
108	*tlv_length = 2 + length;
109	tlv = kzalloc(2 + length, GFP_KERNEL);
110	if (tlv == NULL)
111	return tlv;
112
113	tlv[0] = type;
114	tlv[1] = length;
115	memcpy(tlv + 2, value, length);
116
117	return tlv;
118	}
119
120	int nfc_llcp_parse_tlv(struct nfc_llcp_local *local,
121	u8 *tlv_array, u16 tlv_array_len)
122	{
123	u8 *tlv = tlv_array, type, length, offset = 0;
124
125	pr_debug("TLV array length %d\n", tlv_array_len);
126
127	if (local == NULL)
128	return -ENODEV;
129
130	while (offset < tlv_array_len) {
131	type = tlv[0];
132	length = tlv[1];
133
134	pr_debug("type 0x%x length %d\n", type, length);
135
136	switch (type) {
137	case LLCP_TLV_VERSION:
138	local->remote_version = llcp_tlv_version(tlv);
139	break;
140	case LLCP_TLV_MIUX:
141	local->remote_miu = llcp_tlv_miux(tlv) + 128;
142	break;
143	case LLCP_TLV_WKS:
144	local->remote_wks = llcp_tlv_wks(tlv);
145	break;
146	case LLCP_TLV_LTO:
147	local->remote_lto = llcp_tlv_lto(tlv) * 10;
148	break;
149	case LLCP_TLV_OPT:
150	local->remote_opt = llcp_tlv_opt(tlv);
151	break;
152	case LLCP_TLV_RW:
153	local->remote_rw = llcp_tlv_rw(tlv);
154	break;
155	default:
156	pr_err("Invalid gt tlv value 0x%x\n", type);
157	break;
158	}
159
160	offset += length + 2;
161	tlv += length + 2;
162	}
163
164	pr_debug("version 0x%x miu %d lto %d opt 0x%x wks 0x%x rw %d\n",
165	local->remote_version, local->remote_miu,
166	local->remote_lto, local->remote_opt,
167	local->remote_wks, local->remote_rw);
168
169	return 0;
170	}
171
172	static struct sk_buff llcp_add_header(struct sk_buff pdu,
173	u8 dsap, u8 ssap, u8 ptype)
174	{
175	u8 header[2];
176
177	pr_debug("ptype 0x%x dsap 0x%x ssap 0x%x\n", ptype, dsap, ssap);
178
179	header[0] = (u8)((dsap << 2) \| (ptype >> 2));
180	header[1] = (u8)((ptype << 6) \| ssap);
181
182	pr_debug("header 0x%x 0x%x\n", header[0], header[1]);
183
184	memcpy(skb_put(pdu, LLCP_HEADER_SIZE), header, LLCP_HEADER_SIZE);
185
186	return pdu;
187	}
188
189	static struct sk_buff llcp_add_tlv(struct sk_buff pdu, u8 *tlv, u8 tlv_length)
190	{
191	/* XXX Add an skb length check */
192
193	if (tlv == NULL)
194	return NULL;
195
196	memcpy(skb_put(pdu, tlv_length), tlv, tlv_length);
197
198	return pdu;
199	}
200
201	static struct sk_buff llcp_allocate_pdu(struct nfc_llcp_sock sock,
202	u8 cmd, u16 size)
203	{
204	struct sk_buff *skb;
205	int err;
206
207	if (sock->ssap == 0)
208	return NULL;
209
210	skb = nfc_alloc_send_skb(sock->dev, &sock->sk, MSG_DONTWAIT,
211	size + LLCP_HEADER_SIZE, &err);
212	if (skb == NULL) {
213	pr_err("Could not allocate PDU\n");
214	return NULL;
215	}
216
217	skb = llcp_add_header(skb, sock->dsap, sock->ssap, cmd);
218
219	return skb;
220	}
221
222	int nfc_llcp_disconnect(struct nfc_llcp_sock *sock)
223	{
224	struct sk_buff *skb;
225	struct nfc_dev *dev;
226	struct nfc_llcp_local *local;
227	u16 size = 0;
228
229	pr_debug("Sending DISC\n");
230
231	local = sock->local;
232	if (local == NULL)
233	return -ENODEV;
234
235	dev = sock->dev;
236	if (dev == NULL)
237	return -ENODEV;
238
239	size += LLCP_HEADER_SIZE;
240	size += dev->tx_headroom + dev->tx_tailroom + NFC_HEADER_SIZE;
241
242	skb = alloc_skb(size, GFP_ATOMIC);
243	if (skb == NULL)
244	return -ENOMEM;
245
246	skb_reserve(skb, dev->tx_headroom + NFC_HEADER_SIZE);
247
248	skb = llcp_add_header(skb, sock->ssap, sock->dsap, LLCP_PDU_DISC);
249
250	skb_queue_tail(&local->tx_queue, skb);
251
252	return 0;
253	}
254
255	int nfc_llcp_send_symm(struct nfc_dev *dev)
256	{
257	struct sk_buff *skb;
258	struct nfc_llcp_local *local;
259	u16 size = 0;
260
261	pr_debug("Sending SYMM\n");
262
263	local = nfc_llcp_find_local(dev);
264	if (local == NULL)
265	return -ENODEV;
266
267	size += LLCP_HEADER_SIZE;
268	size += dev->tx_headroom + dev->tx_tailroom + NFC_HEADER_SIZE;
269
270	skb = alloc_skb(size, GFP_KERNEL);
271	if (skb == NULL)
272	return -ENOMEM;
273
274	skb_reserve(skb, dev->tx_headroom + NFC_HEADER_SIZE);
275
276	skb = llcp_add_header(skb, 0, 0, LLCP_PDU_SYMM);
277
278	return nfc_data_exchange(dev, local->target_idx, skb,
279	nfc_llcp_recv, local);
280	}
281
282	int nfc_llcp_send_connect(struct nfc_llcp_sock *sock)
283	{
284	struct nfc_llcp_local *local;
285	struct sk_buff *skb;
286	u8 *service_name_tlv = NULL, service_name_tlv_length;
eda21f16 SO	287	u8 *miux_tlv = NULL, miux_tlv_length;
	288	u8 *rw_tlv = NULL, rw_tlv_length, rw;
	289	__be16 miux;
d646960f SO	290	int err;
	291	u16 size = 0;
	292
	293	pr_debug("Sending CONNECT\n");
	294
	295	local = sock->local;
	296	if (local == NULL)
	297	return -ENODEV;
	298
	299	if (sock->service_name != NULL) {
	300	service_name_tlv = nfc_llcp_build_tlv(LLCP_TLV_SN,
	301	sock->service_name,
	302	sock->service_name_len,
	303	&service_name_tlv_length);
	304	size += service_name_tlv_length;
	305	}
	306
eda21f16 SO	307	miux = cpu_to_be16(LLCP_MAX_MIUX);
	308	miux_tlv = nfc_llcp_build_tlv(LLCP_TLV_MIUX, (u8 *)&miux, 0, &miux_tlv_length);
	309	size += miux_tlv_length;
	310
	311	rw = LLCP_MAX_RW;
	312	rw_tlv = nfc_llcp_build_tlv(LLCP_TLV_RW, &rw, 0, &rw_tlv_length);
	313	size += rw_tlv_length;
	314
d646960f SO	315	pr_debug("SKB size %d SN length %zu\n", size, sock->service_name_len);
	316
	317	skb = llcp_allocate_pdu(sock, LLCP_PDU_CONNECT, size);
	318	if (skb == NULL) {
	319	err = -ENOMEM;
	320	goto error_tlv;
	321	}
	322
	323	if (service_name_tlv != NULL)
	324	skb = llcp_add_tlv(skb, service_name_tlv,
	325	service_name_tlv_length);
	326
eda21f16 SO	327	skb = llcp_add_tlv(skb, miux_tlv, miux_tlv_length);
	328	skb = llcp_add_tlv(skb, rw_tlv, rw_tlv_length);
	329
d646960f SO	330	skb_queue_tail(&local->tx_queue, skb);
	331
	332	return 0;
	333
	334	error_tlv:
	335	pr_err("error %d\n", err);
	336
	337	kfree(service_name_tlv);
eda21f16 SO	338	kfree(miux_tlv);
eda21f16 SO	339	kfree(rw_tlv);
d646960f SO	340
	341	return err;
	342	}
	343
	344	int nfc_llcp_send_cc(struct nfc_llcp_sock *sock)
	345	{
	346	struct nfc_llcp_local *local;
	347	struct sk_buff *skb;
eda21f16 SO	348	u8 *miux_tlv = NULL, miux_tlv_length;
	349	u8 *rw_tlv = NULL, rw_tlv_length, rw;
	350	__be16 miux;
	351	int err;
	352	u16 size = 0;
d646960f SO	353
	354	pr_debug("Sending CC\n");
	355
	356	local = sock->local;
	357	if (local == NULL)
	358	return -ENODEV;
	359
eda21f16 SO	360	miux = cpu_to_be16(LLCP_MAX_MIUX);
	361	miux_tlv = nfc_llcp_build_tlv(LLCP_TLV_MIUX, (u8 *)&miux, 0, &miux_tlv_length);
	362	size += miux_tlv_length;
	363
	364	rw = LLCP_MAX_RW;
	365	rw_tlv = nfc_llcp_build_tlv(LLCP_TLV_RW, &rw, 0, &rw_tlv_length);
	366	size += rw_tlv_length;
	367
	368	skb = llcp_allocate_pdu(sock, LLCP_PDU_CC, size);
	369	if (skb == NULL) {
	370	err = -ENOMEM;
	371	goto error_tlv;
	372	}
	373
	374	skb = llcp_add_tlv(skb, miux_tlv, miux_tlv_length);
	375	skb = llcp_add_tlv(skb, rw_tlv, rw_tlv_length);
d646960f SO	376
	377	skb_queue_tail(&local->tx_queue, skb);
	378
	379	return 0;
eda21f16 SO	380
	381	error_tlv:
	382	pr_err("error %d\n", err);
	383
	384	kfree(miux_tlv);
	385	kfree(rw_tlv);
	386
	387	return err;
d646960f SO	388	}
	389
	390	int nfc_llcp_send_dm(struct nfc_llcp_local *local, u8 ssap, u8 dsap, u8 reason)
	391	{
	392	struct sk_buff *skb;
	393	struct nfc_dev *dev;
	394	u16 size = 1; /* Reason code */
	395
	396	pr_debug("Sending DM reason 0x%x\n", reason);
	397
	398	if (local == NULL)
	399	return -ENODEV;
	400
	401	dev = local->dev;
	402	if (dev == NULL)
	403	return -ENODEV;
	404
	405	size += LLCP_HEADER_SIZE;
	406	size += dev->tx_headroom + dev->tx_tailroom + NFC_HEADER_SIZE;
	407
	408	skb = alloc_skb(size, GFP_KERNEL);
	409	if (skb == NULL)
	410	return -ENOMEM;
	411
	412	skb_reserve(skb, dev->tx_headroom + NFC_HEADER_SIZE);
	413
	414	skb = llcp_add_header(skb, ssap, dsap, LLCP_PDU_DM);
	415
	416	memcpy(skb_put(skb, 1), &reason, 1);
	417
	418	skb_queue_head(&local->tx_queue, skb);
	419
	420	return 0;
	421	}
	422
	423	int nfc_llcp_send_disconnect(struct nfc_llcp_sock *sock)
	424	{
	425	struct sk_buff *skb;
	426	struct nfc_llcp_local *local;
	427
	428	pr_debug("Send DISC\n");
	429
	430	local = sock->local;
	431	if (local == NULL)
	432	return -ENODEV;
	433
	434	skb = llcp_allocate_pdu(sock, LLCP_PDU_DISC, 0);
	435	if (skb == NULL)
	436	return -ENOMEM;
	437
	438	skb_queue_head(&local->tx_queue, skb);
	439
	440	return 0;
	441	}
53a0ac2e SO	442
	443	int nfc_llcp_send_i_frame(struct nfc_llcp_sock *sock,
	444	struct msghdr *msg, size_t len)
	445	{
	446	struct sk_buff *pdu;
e65b0f46 SO	447	struct sock *sk = &sock->sk;
	448	struct nfc_llcp_local *local;
	449	size_t frag_len = 0, remaining_len;
	450	u8 msg_data, msg_ptr;
53a0ac2e	451
e65b0f46	452	pr_debug("Send I frame len %zd\n", len);
53a0ac2e	453
e65b0f46 SO	454	local = sock->local;
	455	if (local == NULL)
	456	return -ENODEV;
53a0ac2e	457
e65b0f46 SO	458	msg_data = kzalloc(len, GFP_KERNEL);
	459	if (msg_data == NULL)
	460	return -ENOMEM;
53a0ac2e	461
e65b0f46 SO	462	if (memcpy_fromiovec(msg_data, msg->msg_iov, len)) {
	463	kfree(msg_data);
	464	return -EFAULT;
53a0ac2e SO	465	}
53a0ac2e SO	466
e65b0f46 SO	467	remaining_len = len;
	468	msg_ptr = msg_data;
	469
	470	while (remaining_len > 0) {
	471
	472	frag_len = min_t(u16, local->remote_miu, remaining_len);
53a0ac2e	473
e65b0f46 SO	474	pr_debug("Fragment %zd bytes remaining %zd",
e65b0f46 SO	475	frag_len, remaining_len);
53a0ac2e	476
e65b0f46 SO	477	pdu = llcp_allocate_pdu(sock, LLCP_PDU_I,
	478	frag_len + LLCP_SEQUENCE_SIZE);
	479	if (pdu == NULL)
	480	return -ENOMEM;
	481
	482	skb_put(pdu, LLCP_SEQUENCE_SIZE);
	483
	484	memcpy(skb_put(pdu, frag_len), msg_ptr, frag_len);
	485
	486	skb_queue_head(&sock->tx_queue, pdu);
	487
	488	lock_sock(sk);
	489
	490	nfc_llcp_queue_i_frames(sock);
	491
	492	release_sock(sk);
	493
	494	remaining_len -= frag_len;
	495	msg_ptr += len;
	496	}
53a0ac2e	497
e65b0f46	498	kfree(msg_data);
53a0ac2e SO	499
	500	return 0;
	501	}
d094afa1 SO	502
	503	int nfc_llcp_send_rr(struct nfc_llcp_sock *sock)
	504	{
	505	struct sk_buff *skb;
	506	struct nfc_llcp_local *local;
	507
	508	pr_debug("Send rr nr %d\n", sock->recv_n);
	509
	510	local = sock->local;
	511	if (local == NULL)
	512	return -ENODEV;
	513
	514	skb = llcp_allocate_pdu(sock, LLCP_PDU_RR, LLCP_SEQUENCE_SIZE);
	515	if (skb == NULL)
	516	return -ENOMEM;
	517
	518	skb_put(skb, LLCP_SEQUENCE_SIZE);
	519
	520	skb->data[2] = sock->recv_n % 16;
	521
	522	skb_queue_head(&local->tx_queue, skb);
	523
	524	return 0;
	525	}