Commit | Line | Data |
---|---|---|
d646960f SO |
1 | /* |
2 | * Copyright (C) 2011 Intel Corporation. All rights reserved. | |
3 | * | |
4 | * This program is free software; you can redistribute it and/or modify | |
5 | * it under the terms of the GNU General Public License as published by | |
6 | * the Free Software Foundation; either version 2 of the License, or | |
7 | * (at your option) any later version. | |
8 | * | |
9 | * This program is distributed in the hope that it will be useful, | |
10 | * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
11 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
12 | * GNU General Public License for more details. | |
13 | * | |
14 | * You should have received a copy of the GNU General Public License | |
15 | * along with this program; if not, write to the | |
16 | * Free Software Foundation, Inc., | |
17 | * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. | |
18 | */ | |
19 | ||
20 | #define pr_fmt(fmt) "llcp: %s: " fmt, __func__ | |
21 | ||
22 | #include <linux/init.h> | |
23 | #include <linux/kernel.h> | |
24 | #include <linux/list.h> | |
25 | #include <linux/nfc.h> | |
26 | ||
27 | #include "../nfc.h" | |
28 | #include "llcp.h" | |
29 | ||
30 | static u8 llcp_magic[3] = {0x46, 0x66, 0x6d}; | |
31 | ||
32 | static struct list_head llcp_devices; | |
33 | ||
a69f32af | 34 | void nfc_llcp_sock_link(struct llcp_sock_list *l, struct sock *sk) |
d646960f | 35 | { |
a69f32af SO |
36 | write_lock(&l->lock); |
37 | sk_add_node(sk, &l->head); | |
38 | write_unlock(&l->lock); | |
39 | } | |
d646960f | 40 | |
a69f32af SO |
41 | void nfc_llcp_sock_unlink(struct llcp_sock_list *l, struct sock *sk) |
42 | { | |
43 | write_lock(&l->lock); | |
44 | sk_del_node_init(sk); | |
45 | write_unlock(&l->lock); | |
46 | } | |
d646960f | 47 | |
f31652a5 SO |
48 | static void nfc_llcp_socket_purge(struct nfc_llcp_sock *sock) |
49 | { | |
50 | struct nfc_llcp_local *local = sock->local; | |
51 | struct sk_buff *s, *tmp; | |
52 | ||
53 | pr_debug("%p\n", &sock->sk); | |
54 | ||
55 | skb_queue_purge(&sock->tx_queue); | |
56 | skb_queue_purge(&sock->tx_pending_queue); | |
f31652a5 SO |
57 | |
58 | if (local == NULL) | |
59 | return; | |
60 | ||
61 | /* Search for local pending SKBs that are related to this socket */ | |
62 | skb_queue_walk_safe(&local->tx_queue, s, tmp) { | |
63 | if (s->sk != &sock->sk) | |
64 | continue; | |
65 | ||
66 | skb_unlink(s, &local->tx_queue); | |
67 | kfree_skb(s); | |
68 | } | |
69 | } | |
70 | ||
3bbc0ceb SO |
71 | static void nfc_llcp_socket_release(struct nfc_llcp_local *local, bool listen, |
72 | int err) | |
a69f32af SO |
73 | { |
74 | struct sock *sk; | |
b67bfe0d | 75 | struct hlist_node *tmp; |
a69f32af | 76 | struct nfc_llcp_sock *llcp_sock; |
d646960f | 77 | |
f31652a5 SO |
78 | skb_queue_purge(&local->tx_queue); |
79 | ||
a69f32af | 80 | write_lock(&local->sockets.lock); |
40c75f81 | 81 | |
b67bfe0d | 82 | sk_for_each_safe(sk, tmp, &local->sockets.head) { |
a69f32af | 83 | llcp_sock = nfc_llcp_sock(sk); |
d646960f | 84 | |
50b78b2a | 85 | bh_lock_sock(sk); |
d646960f | 86 | |
f31652a5 SO |
87 | nfc_llcp_socket_purge(llcp_sock); |
88 | ||
a69f32af SO |
89 | if (sk->sk_state == LLCP_CONNECTED) |
90 | nfc_put_device(llcp_sock->dev); | |
d646960f | 91 | |
a69f32af | 92 | if (sk->sk_state == LLCP_LISTEN) { |
d646960f SO |
93 | struct nfc_llcp_sock *lsk, *n; |
94 | struct sock *accept_sk; | |
95 | ||
0f450772 SJ |
96 | list_for_each_entry_safe(lsk, n, |
97 | &llcp_sock->accept_queue, | |
427a2eb1 | 98 | accept_queue) { |
d646960f | 99 | accept_sk = &lsk->sk; |
50b78b2a | 100 | bh_lock_sock(accept_sk); |
d646960f SO |
101 | |
102 | nfc_llcp_accept_unlink(accept_sk); | |
103 | ||
3bbc0ceb SO |
104 | if (err) |
105 | accept_sk->sk_err = err; | |
d646960f | 106 | accept_sk->sk_state = LLCP_CLOSED; |
3bbc0ceb | 107 | accept_sk->sk_state_change(sk); |
d646960f | 108 | |
50b78b2a | 109 | bh_unlock_sock(accept_sk); |
d646960f | 110 | } |
4d22ea15 SO |
111 | |
112 | if (listen == true) { | |
50b78b2a | 113 | bh_unlock_sock(sk); |
4d22ea15 SO |
114 | continue; |
115 | } | |
d646960f SO |
116 | } |
117 | ||
c8512be6 SO |
118 | /* |
119 | * If we have a connection less socket bound, we keep it alive | |
120 | * if the device is still present. | |
121 | */ | |
122 | if (sk->sk_state == LLCP_BOUND && sk->sk_type == SOCK_DGRAM && | |
123 | listen == true) { | |
124 | bh_unlock_sock(sk); | |
125 | continue; | |
126 | } | |
127 | ||
3bbc0ceb SO |
128 | if (err) |
129 | sk->sk_err = err; | |
a69f32af | 130 | sk->sk_state = LLCP_CLOSED; |
3bbc0ceb | 131 | sk->sk_state_change(sk); |
d646960f | 132 | |
50b78b2a | 133 | bh_unlock_sock(sk); |
d646960f | 134 | |
a69f32af | 135 | sk_del_node_init(sk); |
d646960f SO |
136 | } |
137 | ||
a69f32af | 138 | write_unlock(&local->sockets.lock); |
e6a3a4bb SO |
139 | |
140 | /* | |
141 | * If we want to keep the listening sockets alive, | |
142 | * we don't touch the RAW ones. | |
143 | */ | |
144 | if (listen == true) | |
145 | return; | |
146 | ||
147 | write_lock(&local->raw_sockets.lock); | |
148 | ||
149 | sk_for_each_safe(sk, tmp, &local->raw_sockets.head) { | |
150 | llcp_sock = nfc_llcp_sock(sk); | |
151 | ||
152 | bh_lock_sock(sk); | |
153 | ||
154 | nfc_llcp_socket_purge(llcp_sock); | |
155 | ||
3bbc0ceb SO |
156 | if (err) |
157 | sk->sk_err = err; | |
e6a3a4bb | 158 | sk->sk_state = LLCP_CLOSED; |
e6a3a4bb SO |
159 | sk->sk_state_change(sk); |
160 | ||
161 | bh_unlock_sock(sk); | |
162 | ||
e6a3a4bb SO |
163 | sk_del_node_init(sk); |
164 | } | |
165 | ||
166 | write_unlock(&local->raw_sockets.lock); | |
d646960f SO |
167 | } |
168 | ||
c7aa1225 SO |
169 | struct nfc_llcp_local *nfc_llcp_local_get(struct nfc_llcp_local *local) |
170 | { | |
171 | kref_get(&local->ref); | |
172 | ||
173 | return local; | |
174 | } | |
175 | ||
3536da06 | 176 | static void local_cleanup(struct nfc_llcp_local *local, bool listen) |
c7aa1225 | 177 | { |
3bbc0ceb | 178 | nfc_llcp_socket_release(local, listen, ENXIO); |
c7aa1225 SO |
179 | del_timer_sync(&local->link_timer); |
180 | skb_queue_purge(&local->tx_queue); | |
474fee3d TH |
181 | cancel_work_sync(&local->tx_work); |
182 | cancel_work_sync(&local->rx_work); | |
183 | cancel_work_sync(&local->timeout_work); | |
c7aa1225 | 184 | kfree_skb(local->rx_pending); |
3536da06 SO |
185 | } |
186 | ||
187 | static void local_release(struct kref *ref) | |
188 | { | |
189 | struct nfc_llcp_local *local; | |
190 | ||
191 | local = container_of(ref, struct nfc_llcp_local, ref); | |
192 | ||
193 | list_del(&local->list); | |
194 | local_cleanup(local, false); | |
c7aa1225 SO |
195 | kfree(local); |
196 | } | |
197 | ||
198 | int nfc_llcp_local_put(struct nfc_llcp_local *local) | |
199 | { | |
a69f32af SO |
200 | if (local == NULL) |
201 | return 0; | |
202 | ||
c7aa1225 SO |
203 | return kref_put(&local->ref, local_release); |
204 | } | |
205 | ||
8f50020e SO |
206 | static struct nfc_llcp_sock *nfc_llcp_sock_get(struct nfc_llcp_local *local, |
207 | u8 ssap, u8 dsap) | |
208 | { | |
209 | struct sock *sk; | |
a8df0f37 | 210 | struct nfc_llcp_sock *llcp_sock, *tmp_sock; |
8f50020e SO |
211 | |
212 | pr_debug("ssap dsap %d %d\n", ssap, dsap); | |
213 | ||
214 | if (ssap == 0 && dsap == 0) | |
215 | return NULL; | |
216 | ||
217 | read_lock(&local->sockets.lock); | |
218 | ||
219 | llcp_sock = NULL; | |
220 | ||
b67bfe0d | 221 | sk_for_each(sk, &local->sockets.head) { |
a8df0f37 | 222 | tmp_sock = nfc_llcp_sock(sk); |
8f50020e | 223 | |
a8df0f37 SO |
224 | if (tmp_sock->ssap == ssap && tmp_sock->dsap == dsap) { |
225 | llcp_sock = tmp_sock; | |
8f50020e | 226 | break; |
a8df0f37 | 227 | } |
8f50020e SO |
228 | } |
229 | ||
230 | read_unlock(&local->sockets.lock); | |
231 | ||
232 | if (llcp_sock == NULL) | |
233 | return NULL; | |
234 | ||
235 | sock_hold(&llcp_sock->sk); | |
236 | ||
237 | return llcp_sock; | |
238 | } | |
239 | ||
240 | static void nfc_llcp_sock_put(struct nfc_llcp_sock *sock) | |
241 | { | |
242 | sock_put(&sock->sk); | |
243 | } | |
244 | ||
d646960f SO |
245 | static void nfc_llcp_timeout_work(struct work_struct *work) |
246 | { | |
247 | struct nfc_llcp_local *local = container_of(work, struct nfc_llcp_local, | |
427a2eb1 | 248 | timeout_work); |
d646960f SO |
249 | |
250 | nfc_dep_link_down(local->dev); | |
251 | } | |
252 | ||
253 | static void nfc_llcp_symm_timer(unsigned long data) | |
254 | { | |
255 | struct nfc_llcp_local *local = (struct nfc_llcp_local *) data; | |
256 | ||
257 | pr_err("SYMM timeout\n"); | |
258 | ||
916082b0 | 259 | schedule_work(&local->timeout_work); |
d646960f SO |
260 | } |
261 | ||
262 | struct nfc_llcp_local *nfc_llcp_find_local(struct nfc_dev *dev) | |
263 | { | |
264 | struct nfc_llcp_local *local, *n; | |
265 | ||
266 | list_for_each_entry_safe(local, n, &llcp_devices, list) | |
267 | if (local->dev == dev) | |
268 | return local; | |
269 | ||
270 | pr_debug("No device found\n"); | |
271 | ||
272 | return NULL; | |
273 | } | |
274 | ||
275 | static char *wks[] = { | |
276 | NULL, | |
277 | NULL, /* SDP */ | |
278 | "urn:nfc:sn:ip", | |
279 | "urn:nfc:sn:obex", | |
280 | "urn:nfc:sn:snep", | |
281 | }; | |
282 | ||
283 | static int nfc_llcp_wks_sap(char *service_name, size_t service_name_len) | |
284 | { | |
285 | int sap, num_wks; | |
286 | ||
287 | pr_debug("%s\n", service_name); | |
288 | ||
289 | if (service_name == NULL) | |
290 | return -EINVAL; | |
291 | ||
292 | num_wks = ARRAY_SIZE(wks); | |
293 | ||
427a2eb1 | 294 | for (sap = 0; sap < num_wks; sap++) { |
d646960f SO |
295 | if (wks[sap] == NULL) |
296 | continue; | |
297 | ||
298 | if (strncmp(wks[sap], service_name, service_name_len) == 0) | |
299 | return sap; | |
300 | } | |
301 | ||
302 | return -EINVAL; | |
303 | } | |
304 | ||
8f50020e SO |
305 | static |
306 | struct nfc_llcp_sock *nfc_llcp_sock_from_sn(struct nfc_llcp_local *local, | |
307 | u8 *sn, size_t sn_len) | |
308 | { | |
309 | struct sock *sk; | |
8f50020e SO |
310 | struct nfc_llcp_sock *llcp_sock, *tmp_sock; |
311 | ||
312 | pr_debug("sn %zd %p\n", sn_len, sn); | |
313 | ||
314 | if (sn == NULL || sn_len == 0) | |
315 | return NULL; | |
316 | ||
317 | read_lock(&local->sockets.lock); | |
318 | ||
319 | llcp_sock = NULL; | |
320 | ||
b67bfe0d | 321 | sk_for_each(sk, &local->sockets.head) { |
8f50020e SO |
322 | tmp_sock = nfc_llcp_sock(sk); |
323 | ||
324 | pr_debug("llcp sock %p\n", tmp_sock); | |
325 | ||
54292d64 SO |
326 | if (tmp_sock->sk.sk_type == SOCK_STREAM && |
327 | tmp_sock->sk.sk_state != LLCP_LISTEN) | |
328 | continue; | |
329 | ||
330 | if (tmp_sock->sk.sk_type == SOCK_DGRAM && | |
331 | tmp_sock->sk.sk_state != LLCP_BOUND) | |
8f50020e SO |
332 | continue; |
333 | ||
334 | if (tmp_sock->service_name == NULL || | |
335 | tmp_sock->service_name_len == 0) | |
336 | continue; | |
337 | ||
338 | if (tmp_sock->service_name_len != sn_len) | |
339 | continue; | |
340 | ||
341 | if (memcmp(sn, tmp_sock->service_name, sn_len) == 0) { | |
342 | llcp_sock = tmp_sock; | |
343 | break; | |
344 | } | |
345 | } | |
346 | ||
347 | read_unlock(&local->sockets.lock); | |
348 | ||
349 | pr_debug("Found llcp sock %p\n", llcp_sock); | |
350 | ||
351 | return llcp_sock; | |
352 | } | |
353 | ||
d646960f | 354 | u8 nfc_llcp_get_sdp_ssap(struct nfc_llcp_local *local, |
427a2eb1 | 355 | struct nfc_llcp_sock *sock) |
d646960f SO |
356 | { |
357 | mutex_lock(&local->sdp_lock); | |
358 | ||
359 | if (sock->service_name != NULL && sock->service_name_len > 0) { | |
360 | int ssap = nfc_llcp_wks_sap(sock->service_name, | |
427a2eb1 | 361 | sock->service_name_len); |
d646960f SO |
362 | |
363 | if (ssap > 0) { | |
364 | pr_debug("WKS %d\n", ssap); | |
365 | ||
366 | /* This is a WKS, let's check if it's free */ | |
367 | if (local->local_wks & BIT(ssap)) { | |
368 | mutex_unlock(&local->sdp_lock); | |
369 | ||
370 | return LLCP_SAP_MAX; | |
371 | } | |
372 | ||
1762c17c | 373 | set_bit(ssap, &local->local_wks); |
d646960f SO |
374 | mutex_unlock(&local->sdp_lock); |
375 | ||
376 | return ssap; | |
377 | } | |
378 | ||
379 | /* | |
8f50020e SO |
380 | * Check if there already is a non WKS socket bound |
381 | * to this service name. | |
d646960f | 382 | */ |
8f50020e SO |
383 | if (nfc_llcp_sock_from_sn(local, sock->service_name, |
384 | sock->service_name_len) != NULL) { | |
d646960f SO |
385 | mutex_unlock(&local->sdp_lock); |
386 | ||
387 | return LLCP_SAP_MAX; | |
388 | } | |
389 | ||
d646960f SO |
390 | mutex_unlock(&local->sdp_lock); |
391 | ||
8f50020e | 392 | return LLCP_SDP_UNBOUND; |
d646960f | 393 | |
ebbb16d9 SO |
394 | } else if (sock->ssap != 0 && sock->ssap < LLCP_WKS_NUM_SAP) { |
395 | if (!test_bit(sock->ssap, &local->local_wks)) { | |
396 | set_bit(sock->ssap, &local->local_wks); | |
397 | mutex_unlock(&local->sdp_lock); | |
d646960f | 398 | |
ebbb16d9 | 399 | return sock->ssap; |
d646960f SO |
400 | } |
401 | } | |
402 | ||
403 | mutex_unlock(&local->sdp_lock); | |
404 | ||
405 | return LLCP_SAP_MAX; | |
406 | } | |
407 | ||
408 | u8 nfc_llcp_get_local_ssap(struct nfc_llcp_local *local) | |
409 | { | |
410 | u8 local_ssap; | |
411 | ||
412 | mutex_lock(&local->sdp_lock); | |
413 | ||
414 | local_ssap = find_first_zero_bit(&local->local_sap, LLCP_LOCAL_NUM_SAP); | |
415 | if (local_ssap == LLCP_LOCAL_NUM_SAP) { | |
416 | mutex_unlock(&local->sdp_lock); | |
417 | return LLCP_SAP_MAX; | |
418 | } | |
419 | ||
1762c17c | 420 | set_bit(local_ssap, &local->local_sap); |
d646960f SO |
421 | |
422 | mutex_unlock(&local->sdp_lock); | |
423 | ||
424 | return local_ssap + LLCP_LOCAL_SAP_OFFSET; | |
425 | } | |
426 | ||
427 | void nfc_llcp_put_ssap(struct nfc_llcp_local *local, u8 ssap) | |
428 | { | |
429 | u8 local_ssap; | |
430 | unsigned long *sdp; | |
431 | ||
432 | if (ssap < LLCP_WKS_NUM_SAP) { | |
433 | local_ssap = ssap; | |
434 | sdp = &local->local_wks; | |
435 | } else if (ssap < LLCP_LOCAL_NUM_SAP) { | |
8f50020e SO |
436 | atomic_t *client_cnt; |
437 | ||
d646960f SO |
438 | local_ssap = ssap - LLCP_WKS_NUM_SAP; |
439 | sdp = &local->local_sdp; | |
8f50020e SO |
440 | client_cnt = &local->local_sdp_cnt[local_ssap]; |
441 | ||
442 | pr_debug("%d clients\n", atomic_read(client_cnt)); | |
443 | ||
444 | mutex_lock(&local->sdp_lock); | |
445 | ||
446 | if (atomic_dec_and_test(client_cnt)) { | |
447 | struct nfc_llcp_sock *l_sock; | |
448 | ||
449 | pr_debug("No more clients for SAP %d\n", ssap); | |
450 | ||
451 | clear_bit(local_ssap, sdp); | |
452 | ||
453 | /* Find the listening sock and set it back to UNBOUND */ | |
454 | l_sock = nfc_llcp_sock_get(local, ssap, LLCP_SAP_SDP); | |
455 | if (l_sock) { | |
456 | l_sock->ssap = LLCP_SDP_UNBOUND; | |
457 | nfc_llcp_sock_put(l_sock); | |
458 | } | |
459 | } | |
460 | ||
461 | mutex_unlock(&local->sdp_lock); | |
462 | ||
463 | return; | |
d646960f SO |
464 | } else if (ssap < LLCP_MAX_SAP) { |
465 | local_ssap = ssap - LLCP_LOCAL_NUM_SAP; | |
466 | sdp = &local->local_sap; | |
467 | } else { | |
468 | return; | |
469 | } | |
470 | ||
471 | mutex_lock(&local->sdp_lock); | |
472 | ||
1762c17c | 473 | clear_bit(local_ssap, sdp); |
d646960f SO |
474 | |
475 | mutex_unlock(&local->sdp_lock); | |
476 | } | |
477 | ||
8f50020e SO |
478 | static u8 nfc_llcp_reserve_sdp_ssap(struct nfc_llcp_local *local) |
479 | { | |
480 | u8 ssap; | |
481 | ||
482 | mutex_lock(&local->sdp_lock); | |
483 | ||
484 | ssap = find_first_zero_bit(&local->local_sdp, LLCP_SDP_NUM_SAP); | |
485 | if (ssap == LLCP_SDP_NUM_SAP) { | |
486 | mutex_unlock(&local->sdp_lock); | |
487 | ||
488 | return LLCP_SAP_MAX; | |
489 | } | |
490 | ||
491 | pr_debug("SDP ssap %d\n", LLCP_WKS_NUM_SAP + ssap); | |
492 | ||
493 | set_bit(ssap, &local->local_sdp); | |
494 | ||
495 | mutex_unlock(&local->sdp_lock); | |
496 | ||
497 | return LLCP_WKS_NUM_SAP + ssap; | |
498 | } | |
499 | ||
d646960f SO |
500 | static int nfc_llcp_build_gb(struct nfc_llcp_local *local) |
501 | { | |
502 | u8 *gb_cur, *version_tlv, version, version_length; | |
52feb444 | 503 | u8 *lto_tlv, lto_length; |
d646960f | 504 | u8 *wks_tlv, wks_length; |
56d5876a | 505 | u8 *miux_tlv, miux_length; |
d646960f | 506 | u8 gb_len = 0; |
52da2449 | 507 | int ret = 0; |
d646960f SO |
508 | |
509 | version = LLCP_VERSION_11; | |
510 | version_tlv = nfc_llcp_build_tlv(LLCP_TLV_VERSION, &version, | |
427a2eb1 | 511 | 1, &version_length); |
d646960f SO |
512 | gb_len += version_length; |
513 | ||
52feb444 | 514 | lto_tlv = nfc_llcp_build_tlv(LLCP_TLV_LTO, &local->lto, 1, <o_length); |
d646960f SO |
515 | gb_len += lto_length; |
516 | ||
517 | pr_debug("Local wks 0x%lx\n", local->local_wks); | |
518 | wks_tlv = nfc_llcp_build_tlv(LLCP_TLV_WKS, (u8 *)&local->local_wks, 2, | |
427a2eb1 | 519 | &wks_length); |
d646960f SO |
520 | gb_len += wks_length; |
521 | ||
52feb444 | 522 | miux_tlv = nfc_llcp_build_tlv(LLCP_TLV_MIUX, (u8 *)&local->miux, 0, |
56d5876a SO |
523 | &miux_length); |
524 | gb_len += miux_length; | |
525 | ||
d646960f SO |
526 | gb_len += ARRAY_SIZE(llcp_magic); |
527 | ||
528 | if (gb_len > NFC_MAX_GT_LEN) { | |
52da2449 WY |
529 | ret = -EINVAL; |
530 | goto out; | |
d646960f SO |
531 | } |
532 | ||
533 | gb_cur = local->gb; | |
534 | ||
535 | memcpy(gb_cur, llcp_magic, ARRAY_SIZE(llcp_magic)); | |
536 | gb_cur += ARRAY_SIZE(llcp_magic); | |
537 | ||
538 | memcpy(gb_cur, version_tlv, version_length); | |
539 | gb_cur += version_length; | |
540 | ||
541 | memcpy(gb_cur, lto_tlv, lto_length); | |
542 | gb_cur += lto_length; | |
543 | ||
544 | memcpy(gb_cur, wks_tlv, wks_length); | |
545 | gb_cur += wks_length; | |
546 | ||
56d5876a SO |
547 | memcpy(gb_cur, miux_tlv, miux_length); |
548 | gb_cur += miux_length; | |
549 | ||
52da2449 WY |
550 | local->gb_len = gb_len; |
551 | ||
552 | out: | |
d646960f SO |
553 | kfree(version_tlv); |
554 | kfree(lto_tlv); | |
52da2449 WY |
555 | kfree(wks_tlv); |
556 | kfree(miux_tlv); | |
d646960f | 557 | |
52da2449 | 558 | return ret; |
d646960f SO |
559 | } |
560 | ||
b8e7a06d SO |
561 | u8 *nfc_llcp_general_bytes(struct nfc_dev *dev, size_t *general_bytes_len) |
562 | { | |
563 | struct nfc_llcp_local *local; | |
564 | ||
565 | local = nfc_llcp_find_local(dev); | |
566 | if (local == NULL) { | |
567 | *general_bytes_len = 0; | |
568 | return NULL; | |
569 | } | |
570 | ||
571 | nfc_llcp_build_gb(local); | |
572 | ||
573 | *general_bytes_len = local->gb_len; | |
574 | ||
575 | return local->gb; | |
576 | } | |
577 | ||
d646960f SO |
578 | int nfc_llcp_set_remote_gb(struct nfc_dev *dev, u8 *gb, u8 gb_len) |
579 | { | |
580 | struct nfc_llcp_local *local = nfc_llcp_find_local(dev); | |
581 | ||
582 | if (local == NULL) { | |
583 | pr_err("No LLCP device\n"); | |
584 | return -ENODEV; | |
585 | } | |
e9a4aa3b DC |
586 | if (gb_len < 3) |
587 | return -EINVAL; | |
d646960f SO |
588 | |
589 | memset(local->remote_gb, 0, NFC_MAX_GT_LEN); | |
590 | memcpy(local->remote_gb, gb, gb_len); | |
591 | local->remote_gb_len = gb_len; | |
592 | ||
d646960f SO |
593 | if (memcmp(local->remote_gb, llcp_magic, 3)) { |
594 | pr_err("MAC does not support LLCP\n"); | |
595 | return -EINVAL; | |
596 | } | |
597 | ||
7a06e586 SO |
598 | return nfc_llcp_parse_gb_tlv(local, |
599 | &local->remote_gb[3], | |
600 | local->remote_gb_len - 3); | |
d646960f SO |
601 | } |
602 | ||
d646960f SO |
603 | static u8 nfc_llcp_dsap(struct sk_buff *pdu) |
604 | { | |
605 | return (pdu->data[0] & 0xfc) >> 2; | |
606 | } | |
607 | ||
608 | static u8 nfc_llcp_ptype(struct sk_buff *pdu) | |
609 | { | |
610 | return ((pdu->data[0] & 0x03) << 2) | ((pdu->data[1] & 0xc0) >> 6); | |
611 | } | |
612 | ||
613 | static u8 nfc_llcp_ssap(struct sk_buff *pdu) | |
614 | { | |
615 | return pdu->data[1] & 0x3f; | |
616 | } | |
617 | ||
618 | static u8 nfc_llcp_ns(struct sk_buff *pdu) | |
619 | { | |
620 | return pdu->data[2] >> 4; | |
621 | } | |
622 | ||
623 | static u8 nfc_llcp_nr(struct sk_buff *pdu) | |
624 | { | |
625 | return pdu->data[2] & 0xf; | |
626 | } | |
627 | ||
628 | static void nfc_llcp_set_nrns(struct nfc_llcp_sock *sock, struct sk_buff *pdu) | |
629 | { | |
279cf174 | 630 | pdu->data[2] = (sock->send_n << 4) | (sock->recv_n); |
d646960f SO |
631 | sock->send_n = (sock->send_n + 1) % 16; |
632 | sock->recv_ack_n = (sock->recv_n - 1) % 16; | |
633 | } | |
634 | ||
4463523b TE |
635 | void nfc_llcp_send_to_raw_sock(struct nfc_llcp_local *local, |
636 | struct sk_buff *skb, u8 direction) | |
637 | { | |
4463523b TE |
638 | struct sk_buff *skb_copy = NULL, *nskb; |
639 | struct sock *sk; | |
640 | u8 *data; | |
641 | ||
642 | read_lock(&local->raw_sockets.lock); | |
643 | ||
b67bfe0d | 644 | sk_for_each(sk, &local->raw_sockets.head) { |
4463523b TE |
645 | if (sk->sk_state != LLCP_BOUND) |
646 | continue; | |
647 | ||
648 | if (skb_copy == NULL) { | |
649 | skb_copy = __pskb_copy(skb, NFC_LLCP_RAW_HEADER_SIZE, | |
650 | GFP_ATOMIC); | |
651 | ||
652 | if (skb_copy == NULL) | |
653 | continue; | |
654 | ||
655 | data = skb_push(skb_copy, NFC_LLCP_RAW_HEADER_SIZE); | |
656 | ||
657 | data[0] = local->dev ? local->dev->idx : 0xFF; | |
658 | data[1] = direction; | |
659 | } | |
660 | ||
661 | nskb = skb_clone(skb_copy, GFP_ATOMIC); | |
662 | if (!nskb) | |
663 | continue; | |
664 | ||
665 | if (sock_queue_rcv_skb(sk, nskb)) | |
666 | kfree_skb(nskb); | |
667 | } | |
668 | ||
669 | read_unlock(&local->raw_sockets.lock); | |
670 | ||
671 | kfree_skb(skb_copy); | |
672 | } | |
673 | ||
84457960 SO |
674 | static void nfc_llcp_tx_work(struct work_struct *work) |
675 | { | |
676 | struct nfc_llcp_local *local = container_of(work, struct nfc_llcp_local, | |
677 | tx_work); | |
678 | struct sk_buff *skb; | |
679 | struct sock *sk; | |
680 | struct nfc_llcp_sock *llcp_sock; | |
681 | ||
682 | skb = skb_dequeue(&local->tx_queue); | |
683 | if (skb != NULL) { | |
684 | sk = skb->sk; | |
685 | llcp_sock = nfc_llcp_sock(sk); | |
a6a0915f SO |
686 | |
687 | if (llcp_sock == NULL && nfc_llcp_ptype(skb) == LLCP_PDU_I) { | |
688 | nfc_llcp_send_symm(local->dev); | |
689 | } else { | |
be02b6b6 SO |
690 | struct sk_buff *copy_skb = NULL; |
691 | u8 ptype = nfc_llcp_ptype(skb); | |
84457960 SO |
692 | int ret; |
693 | ||
694 | pr_debug("Sending pending skb\n"); | |
695 | print_hex_dump(KERN_DEBUG, "LLCP Tx: ", | |
696 | DUMP_PREFIX_OFFSET, 16, 1, | |
697 | skb->data, skb->len, true); | |
698 | ||
be02b6b6 SO |
699 | if (ptype == LLCP_PDU_I) |
700 | copy_skb = skb_copy(skb, GFP_ATOMIC); | |
701 | ||
2c2d45bd TE |
702 | __net_timestamp(skb); |
703 | ||
4463523b TE |
704 | nfc_llcp_send_to_raw_sock(local, skb, |
705 | NFC_LLCP_DIRECTION_TX); | |
706 | ||
84457960 SO |
707 | ret = nfc_data_exchange(local->dev, local->target_idx, |
708 | skb, nfc_llcp_recv, local); | |
709 | ||
be02b6b6 SO |
710 | if (ret) { |
711 | kfree_skb(copy_skb); | |
712 | goto out; | |
84457960 | 713 | } |
be02b6b6 SO |
714 | |
715 | if (ptype == LLCP_PDU_I && copy_skb) | |
716 | skb_queue_tail(&llcp_sock->tx_pending_queue, | |
717 | copy_skb); | |
84457960 SO |
718 | } |
719 | } else { | |
720 | nfc_llcp_send_symm(local->dev); | |
721 | } | |
722 | ||
be02b6b6 | 723 | out: |
84457960 SO |
724 | mod_timer(&local->link_timer, |
725 | jiffies + msecs_to_jiffies(2 * local->remote_lto)); | |
726 | } | |
727 | ||
a69f32af SO |
728 | static struct nfc_llcp_sock *nfc_llcp_connecting_sock_get(struct nfc_llcp_local *local, |
729 | u8 ssap) | |
730 | { | |
731 | struct sock *sk; | |
732 | struct nfc_llcp_sock *llcp_sock; | |
a69f32af SO |
733 | |
734 | read_lock(&local->connecting_sockets.lock); | |
735 | ||
b67bfe0d | 736 | sk_for_each(sk, &local->connecting_sockets.head) { |
a69f32af SO |
737 | llcp_sock = nfc_llcp_sock(sk); |
738 | ||
5a0f6f3b SO |
739 | if (llcp_sock->ssap == ssap) { |
740 | sock_hold(&llcp_sock->sk); | |
a69f32af | 741 | goto out; |
5a0f6f3b | 742 | } |
a69f32af SO |
743 | } |
744 | ||
745 | llcp_sock = NULL; | |
746 | ||
747 | out: | |
748 | read_unlock(&local->connecting_sockets.lock); | |
749 | ||
a69f32af SO |
750 | return llcp_sock; |
751 | } | |
752 | ||
a69f32af SO |
753 | static struct nfc_llcp_sock *nfc_llcp_sock_get_sn(struct nfc_llcp_local *local, |
754 | u8 *sn, size_t sn_len) | |
755 | { | |
a69f32af SO |
756 | struct nfc_llcp_sock *llcp_sock; |
757 | ||
8f50020e | 758 | llcp_sock = nfc_llcp_sock_from_sn(local, sn, sn_len); |
d646960f | 759 | |
a69f32af SO |
760 | if (llcp_sock == NULL) |
761 | return NULL; | |
d646960f | 762 | |
a69f32af SO |
763 | sock_hold(&llcp_sock->sk); |
764 | ||
765 | return llcp_sock; | |
d646960f SO |
766 | } |
767 | ||
d646960f SO |
768 | static u8 *nfc_llcp_connect_sn(struct sk_buff *skb, size_t *sn_len) |
769 | { | |
770 | u8 *tlv = &skb->data[2], type, length; | |
771 | size_t tlv_array_len = skb->len - LLCP_HEADER_SIZE, offset = 0; | |
772 | ||
773 | while (offset < tlv_array_len) { | |
774 | type = tlv[0]; | |
775 | length = tlv[1]; | |
776 | ||
777 | pr_debug("type 0x%x length %d\n", type, length); | |
778 | ||
779 | if (type == LLCP_TLV_SN) { | |
780 | *sn_len = length; | |
781 | return &tlv[2]; | |
782 | } | |
783 | ||
784 | offset += length + 2; | |
785 | tlv += length + 2; | |
786 | } | |
787 | ||
788 | return NULL; | |
789 | } | |
790 | ||
968272bf SO |
791 | static void nfc_llcp_recv_ui(struct nfc_llcp_local *local, |
792 | struct sk_buff *skb) | |
793 | { | |
794 | struct nfc_llcp_sock *llcp_sock; | |
795 | struct nfc_llcp_ui_cb *ui_cb; | |
796 | u8 dsap, ssap; | |
797 | ||
798 | dsap = nfc_llcp_dsap(skb); | |
799 | ssap = nfc_llcp_ssap(skb); | |
800 | ||
801 | ui_cb = nfc_llcp_ui_skb_cb(skb); | |
802 | ui_cb->dsap = dsap; | |
803 | ui_cb->ssap = ssap; | |
804 | ||
805 | printk("%s %d %d\n", __func__, dsap, ssap); | |
806 | ||
807 | pr_debug("%d %d\n", dsap, ssap); | |
808 | ||
809 | /* We're looking for a bound socket, not a client one */ | |
810 | llcp_sock = nfc_llcp_sock_get(local, dsap, LLCP_SAP_SDP); | |
811 | if (llcp_sock == NULL || llcp_sock->sk.sk_type != SOCK_DGRAM) | |
812 | return; | |
813 | ||
814 | /* There is no sequence with UI frames */ | |
815 | skb_pull(skb, LLCP_HEADER_SIZE); | |
1727cf93 SO |
816 | if (!sock_queue_rcv_skb(&llcp_sock->sk, skb)) { |
817 | /* | |
818 | * UI frames will be freed from the socket layer, so we | |
819 | * need to keep them alive until someone receives them. | |
820 | */ | |
821 | skb_get(skb); | |
822 | } else { | |
823 | pr_err("Receive queue is full\n"); | |
968272bf SO |
824 | } |
825 | ||
826 | nfc_llcp_sock_put(llcp_sock); | |
827 | } | |
828 | ||
d646960f | 829 | static void nfc_llcp_recv_connect(struct nfc_llcp_local *local, |
427a2eb1 | 830 | struct sk_buff *skb) |
d646960f SO |
831 | { |
832 | struct sock *new_sk, *parent; | |
833 | struct nfc_llcp_sock *sock, *new_sock; | |
a69f32af | 834 | u8 dsap, ssap, reason; |
d646960f SO |
835 | |
836 | dsap = nfc_llcp_dsap(skb); | |
837 | ssap = nfc_llcp_ssap(skb); | |
838 | ||
839 | pr_debug("%d %d\n", dsap, ssap); | |
840 | ||
d646960f | 841 | if (dsap != LLCP_SAP_SDP) { |
a69f32af SO |
842 | sock = nfc_llcp_sock_get(local, dsap, LLCP_SAP_SDP); |
843 | if (sock == NULL || sock->sk.sk_state != LLCP_LISTEN) { | |
d646960f SO |
844 | reason = LLCP_DM_NOBOUND; |
845 | goto fail; | |
846 | } | |
d646960f SO |
847 | } else { |
848 | u8 *sn; | |
849 | size_t sn_len; | |
850 | ||
851 | sn = nfc_llcp_connect_sn(skb, &sn_len); | |
852 | if (sn == NULL) { | |
853 | reason = LLCP_DM_NOBOUND; | |
854 | goto fail; | |
855 | } | |
856 | ||
857 | pr_debug("Service name length %zu\n", sn_len); | |
858 | ||
a69f32af SO |
859 | sock = nfc_llcp_sock_get_sn(local, sn, sn_len); |
860 | if (sock == NULL) { | |
861 | reason = LLCP_DM_NOBOUND; | |
862 | goto fail; | |
d646960f | 863 | } |
d646960f SO |
864 | } |
865 | ||
a69f32af | 866 | lock_sock(&sock->sk); |
d646960f | 867 | |
d646960f SO |
868 | parent = &sock->sk; |
869 | ||
870 | if (sk_acceptq_is_full(parent)) { | |
871 | reason = LLCP_DM_REJ; | |
872 | release_sock(&sock->sk); | |
873 | sock_put(&sock->sk); | |
874 | goto fail; | |
875 | } | |
876 | ||
8f50020e SO |
877 | if (sock->ssap == LLCP_SDP_UNBOUND) { |
878 | u8 ssap = nfc_llcp_reserve_sdp_ssap(local); | |
879 | ||
880 | pr_debug("First client, reserving %d\n", ssap); | |
881 | ||
882 | if (ssap == LLCP_SAP_MAX) { | |
883 | reason = LLCP_DM_REJ; | |
884 | release_sock(&sock->sk); | |
885 | sock_put(&sock->sk); | |
886 | goto fail; | |
887 | } | |
888 | ||
889 | sock->ssap = ssap; | |
890 | } | |
891 | ||
427a2eb1 | 892 | new_sk = nfc_llcp_sock_alloc(NULL, parent->sk_type, GFP_ATOMIC); |
d646960f SO |
893 | if (new_sk == NULL) { |
894 | reason = LLCP_DM_REJ; | |
895 | release_sock(&sock->sk); | |
896 | sock_put(&sock->sk); | |
897 | goto fail; | |
898 | } | |
899 | ||
900 | new_sock = nfc_llcp_sock(new_sk); | |
901 | new_sock->dev = local->dev; | |
c7aa1225 | 902 | new_sock->local = nfc_llcp_local_get(local); |
93d7e490 | 903 | new_sock->miu = local->remote_miu; |
d646960f | 904 | new_sock->nfc_protocol = sock->nfc_protocol; |
d646960f | 905 | new_sock->dsap = ssap; |
025f1520 | 906 | new_sock->target_idx = local->target_idx; |
d646960f | 907 | new_sock->parent = parent; |
8f50020e SO |
908 | new_sock->ssap = sock->ssap; |
909 | if (sock->ssap < LLCP_LOCAL_NUM_SAP && sock->ssap >= LLCP_WKS_NUM_SAP) { | |
910 | atomic_t *client_count; | |
911 | ||
912 | pr_debug("reserved_ssap %d for %p\n", sock->ssap, new_sock); | |
913 | ||
914 | client_count = | |
915 | &local->local_sdp_cnt[sock->ssap - LLCP_WKS_NUM_SAP]; | |
916 | ||
917 | atomic_inc(client_count); | |
918 | new_sock->reserved_ssap = sock->ssap; | |
919 | } | |
d646960f | 920 | |
7a06e586 SO |
921 | nfc_llcp_parse_connection_tlv(new_sock, &skb->data[LLCP_HEADER_SIZE], |
922 | skb->len - LLCP_HEADER_SIZE); | |
923 | ||
d646960f SO |
924 | pr_debug("new sock %p sk %p\n", new_sock, &new_sock->sk); |
925 | ||
a69f32af | 926 | nfc_llcp_sock_link(&local->sockets, new_sk); |
d646960f SO |
927 | |
928 | nfc_llcp_accept_enqueue(&sock->sk, new_sk); | |
929 | ||
930 | nfc_get_device(local->dev->idx); | |
931 | ||
932 | new_sk->sk_state = LLCP_CONNECTED; | |
933 | ||
934 | /* Wake the listening processes */ | |
935 | parent->sk_data_ready(parent, 0); | |
936 | ||
937 | /* Send CC */ | |
938 | nfc_llcp_send_cc(new_sock); | |
939 | ||
940 | release_sock(&sock->sk); | |
941 | sock_put(&sock->sk); | |
942 | ||
943 | return; | |
944 | ||
945 | fail: | |
946 | /* Send DM */ | |
947 | nfc_llcp_send_dm(local, dsap, ssap, reason); | |
d646960f SO |
948 | } |
949 | ||
d094afa1 | 950 | int nfc_llcp_queue_i_frames(struct nfc_llcp_sock *sock) |
4722d2b7 | 951 | { |
d094afa1 | 952 | int nr_frames = 0; |
4722d2b7 SO |
953 | struct nfc_llcp_local *local = sock->local; |
954 | ||
955 | pr_debug("Remote ready %d tx queue len %d remote rw %d", | |
427a2eb1 | 956 | sock->remote_ready, skb_queue_len(&sock->tx_pending_queue), |
7a06e586 | 957 | sock->rw); |
4722d2b7 SO |
958 | |
959 | /* Try to queue some I frames for transmission */ | |
960 | while (sock->remote_ready && | |
7a06e586 | 961 | skb_queue_len(&sock->tx_pending_queue) < sock->rw) { |
84457960 | 962 | struct sk_buff *pdu; |
4722d2b7 SO |
963 | |
964 | pdu = skb_dequeue(&sock->tx_queue); | |
965 | if (pdu == NULL) | |
966 | break; | |
967 | ||
968 | /* Update N(S)/N(R) */ | |
969 | nfc_llcp_set_nrns(sock, pdu); | |
970 | ||
4722d2b7 | 971 | skb_queue_tail(&local->tx_queue, pdu); |
d094afa1 | 972 | nr_frames++; |
4722d2b7 | 973 | } |
d094afa1 SO |
974 | |
975 | return nr_frames; | |
4722d2b7 SO |
976 | } |
977 | ||
d646960f | 978 | static void nfc_llcp_recv_hdlc(struct nfc_llcp_local *local, |
427a2eb1 | 979 | struct sk_buff *skb) |
d646960f SO |
980 | { |
981 | struct nfc_llcp_sock *llcp_sock; | |
982 | struct sock *sk; | |
983 | u8 dsap, ssap, ptype, ns, nr; | |
984 | ||
985 | ptype = nfc_llcp_ptype(skb); | |
986 | dsap = nfc_llcp_dsap(skb); | |
987 | ssap = nfc_llcp_ssap(skb); | |
988 | ns = nfc_llcp_ns(skb); | |
989 | nr = nfc_llcp_nr(skb); | |
990 | ||
991 | pr_debug("%d %d R %d S %d\n", dsap, ssap, nr, ns); | |
992 | ||
993 | llcp_sock = nfc_llcp_sock_get(local, dsap, ssap); | |
994 | if (llcp_sock == NULL) { | |
995 | nfc_llcp_send_dm(local, dsap, ssap, LLCP_DM_NOCONN); | |
996 | return; | |
997 | } | |
998 | ||
999 | sk = &llcp_sock->sk; | |
1000 | lock_sock(sk); | |
1001 | if (sk->sk_state == LLCP_CLOSED) { | |
1002 | release_sock(sk); | |
1003 | nfc_llcp_sock_put(llcp_sock); | |
1004 | } | |
1005 | ||
d646960f SO |
1006 | /* Pass the payload upstream */ |
1007 | if (ptype == LLCP_PDU_I) { | |
1008 | pr_debug("I frame, queueing on %p\n", &llcp_sock->sk); | |
1009 | ||
53aef920 SO |
1010 | if (ns == llcp_sock->recv_n) |
1011 | llcp_sock->recv_n = (llcp_sock->recv_n + 1) % 16; | |
1012 | else | |
1013 | pr_err("Received out of sequence I PDU\n"); | |
1014 | ||
d646960f | 1015 | skb_pull(skb, LLCP_HEADER_SIZE + LLCP_SEQUENCE_SIZE); |
1727cf93 SO |
1016 | if (!sock_queue_rcv_skb(&llcp_sock->sk, skb)) { |
1017 | /* | |
1018 | * I frames will be freed from the socket layer, so we | |
1019 | * need to keep them alive until someone receives them. | |
1020 | */ | |
1021 | skb_get(skb); | |
1022 | } else { | |
1023 | pr_err("Receive queue is full\n"); | |
d646960f SO |
1024 | } |
1025 | } | |
1026 | ||
1027 | /* Remove skbs from the pending queue */ | |
1028 | if (llcp_sock->send_ack_n != nr) { | |
1029 | struct sk_buff *s, *tmp; | |
28981491 | 1030 | u8 n; |
d646960f SO |
1031 | |
1032 | llcp_sock->send_ack_n = nr; | |
1033 | ||
84457960 SO |
1034 | /* Remove and free all skbs until ns == nr */ |
1035 | skb_queue_walk_safe(&llcp_sock->tx_pending_queue, s, tmp) { | |
28981491 WR |
1036 | n = nfc_llcp_ns(s); |
1037 | ||
84457960 SO |
1038 | skb_unlink(s, &llcp_sock->tx_pending_queue); |
1039 | kfree_skb(s); | |
1040 | ||
28981491 | 1041 | if (n == nr) |
84457960 SO |
1042 | break; |
1043 | } | |
1044 | ||
1045 | /* Re-queue the remaining skbs for transmission */ | |
1046 | skb_queue_reverse_walk_safe(&llcp_sock->tx_pending_queue, | |
1047 | s, tmp) { | |
1048 | skb_unlink(s, &llcp_sock->tx_pending_queue); | |
1049 | skb_queue_head(&local->tx_queue, s); | |
1050 | } | |
d646960f SO |
1051 | } |
1052 | ||
53aef920 SO |
1053 | if (ptype == LLCP_PDU_RR) |
1054 | llcp_sock->remote_ready = true; | |
427a2eb1 | 1055 | else if (ptype == LLCP_PDU_RNR) |
53aef920 SO |
1056 | llcp_sock->remote_ready = false; |
1057 | ||
56af2568 | 1058 | if (nfc_llcp_queue_i_frames(llcp_sock) == 0 && ptype == LLCP_PDU_I) |
d094afa1 | 1059 | nfc_llcp_send_rr(llcp_sock); |
d646960f SO |
1060 | |
1061 | release_sock(sk); | |
1062 | nfc_llcp_sock_put(llcp_sock); | |
1063 | } | |
1064 | ||
1065 | static void nfc_llcp_recv_disc(struct nfc_llcp_local *local, | |
427a2eb1 | 1066 | struct sk_buff *skb) |
d646960f SO |
1067 | { |
1068 | struct nfc_llcp_sock *llcp_sock; | |
1069 | struct sock *sk; | |
1070 | u8 dsap, ssap; | |
1071 | ||
1072 | dsap = nfc_llcp_dsap(skb); | |
1073 | ssap = nfc_llcp_ssap(skb); | |
1074 | ||
1075 | llcp_sock = nfc_llcp_sock_get(local, dsap, ssap); | |
1076 | if (llcp_sock == NULL) { | |
1077 | nfc_llcp_send_dm(local, dsap, ssap, LLCP_DM_NOCONN); | |
1078 | return; | |
1079 | } | |
1080 | ||
1081 | sk = &llcp_sock->sk; | |
1082 | lock_sock(sk); | |
f31652a5 SO |
1083 | |
1084 | nfc_llcp_socket_purge(llcp_sock); | |
1085 | ||
d646960f SO |
1086 | if (sk->sk_state == LLCP_CLOSED) { |
1087 | release_sock(sk); | |
1088 | nfc_llcp_sock_put(llcp_sock); | |
1089 | } | |
1090 | ||
d646960f SO |
1091 | if (sk->sk_state == LLCP_CONNECTED) { |
1092 | nfc_put_device(local->dev); | |
1093 | sk->sk_state = LLCP_CLOSED; | |
1094 | sk->sk_state_change(sk); | |
1095 | } | |
1096 | ||
1097 | nfc_llcp_send_dm(local, dsap, ssap, LLCP_DM_DISC); | |
1098 | ||
1099 | release_sock(sk); | |
1100 | nfc_llcp_sock_put(llcp_sock); | |
1101 | } | |
1102 | ||
427a2eb1 | 1103 | static void nfc_llcp_recv_cc(struct nfc_llcp_local *local, struct sk_buff *skb) |
d646960f SO |
1104 | { |
1105 | struct nfc_llcp_sock *llcp_sock; | |
ff353d86 | 1106 | struct sock *sk; |
d646960f SO |
1107 | u8 dsap, ssap; |
1108 | ||
d646960f SO |
1109 | dsap = nfc_llcp_dsap(skb); |
1110 | ssap = nfc_llcp_ssap(skb); | |
1111 | ||
a69f32af | 1112 | llcp_sock = nfc_llcp_connecting_sock_get(local, dsap); |
d646960f SO |
1113 | if (llcp_sock == NULL) { |
1114 | pr_err("Invalid CC\n"); | |
1115 | nfc_llcp_send_dm(local, dsap, ssap, LLCP_DM_NOCONN); | |
1116 | ||
1117 | return; | |
1118 | } | |
1119 | ||
ff353d86 | 1120 | sk = &llcp_sock->sk; |
d646960f | 1121 | |
a69f32af SO |
1122 | /* Unlink from connecting and link to the client array */ |
1123 | nfc_llcp_sock_unlink(&local->connecting_sockets, sk); | |
1124 | nfc_llcp_sock_link(&local->sockets, sk); | |
1125 | llcp_sock->dsap = ssap; | |
1126 | ||
7a06e586 SO |
1127 | nfc_llcp_parse_connection_tlv(llcp_sock, &skb->data[LLCP_HEADER_SIZE], |
1128 | skb->len - LLCP_HEADER_SIZE); | |
d646960f | 1129 | |
ff353d86 SO |
1130 | sk->sk_state = LLCP_CONNECTED; |
1131 | sk->sk_state_change(sk); | |
1132 | ||
d646960f SO |
1133 | nfc_llcp_sock_put(llcp_sock); |
1134 | } | |
1135 | ||
5c0560b7 SO |
1136 | static void nfc_llcp_recv_dm(struct nfc_llcp_local *local, struct sk_buff *skb) |
1137 | { | |
1138 | struct nfc_llcp_sock *llcp_sock; | |
1139 | struct sock *sk; | |
1140 | u8 dsap, ssap, reason; | |
1141 | ||
1142 | dsap = nfc_llcp_dsap(skb); | |
1143 | ssap = nfc_llcp_ssap(skb); | |
1144 | reason = skb->data[2]; | |
1145 | ||
1146 | pr_debug("%d %d reason %d\n", ssap, dsap, reason); | |
1147 | ||
1148 | switch (reason) { | |
1149 | case LLCP_DM_NOBOUND: | |
1150 | case LLCP_DM_REJ: | |
1151 | llcp_sock = nfc_llcp_connecting_sock_get(local, dsap); | |
1152 | break; | |
1153 | ||
1154 | default: | |
1155 | llcp_sock = nfc_llcp_sock_get(local, dsap, ssap); | |
1156 | break; | |
1157 | } | |
1158 | ||
1159 | if (llcp_sock == NULL) { | |
a8df0f37 | 1160 | pr_debug("Already closed\n"); |
5c0560b7 SO |
1161 | return; |
1162 | } | |
1163 | ||
1164 | sk = &llcp_sock->sk; | |
1165 | ||
1166 | sk->sk_err = ENXIO; | |
1167 | sk->sk_state = LLCP_CLOSED; | |
1168 | sk->sk_state_change(sk); | |
1169 | ||
1170 | nfc_llcp_sock_put(llcp_sock); | |
5c0560b7 SO |
1171 | } |
1172 | ||
19cfe584 SO |
1173 | static void nfc_llcp_recv_snl(struct nfc_llcp_local *local, |
1174 | struct sk_buff *skb) | |
1175 | { | |
1176 | struct nfc_llcp_sock *llcp_sock; | |
1177 | u8 dsap, ssap, *tlv, type, length, tid, sap; | |
1178 | u16 tlv_len, offset; | |
1179 | char *service_name; | |
1180 | size_t service_name_len; | |
1181 | ||
1182 | dsap = nfc_llcp_dsap(skb); | |
1183 | ssap = nfc_llcp_ssap(skb); | |
1184 | ||
1185 | pr_debug("%d %d\n", dsap, ssap); | |
1186 | ||
1187 | if (dsap != LLCP_SAP_SDP || ssap != LLCP_SAP_SDP) { | |
1188 | pr_err("Wrong SNL SAP\n"); | |
1189 | return; | |
1190 | } | |
1191 | ||
1192 | tlv = &skb->data[LLCP_HEADER_SIZE]; | |
1193 | tlv_len = skb->len - LLCP_HEADER_SIZE; | |
1194 | offset = 0; | |
1195 | ||
0f450772 | 1196 | while (offset < tlv_len) { |
19cfe584 SO |
1197 | type = tlv[0]; |
1198 | length = tlv[1]; | |
1199 | ||
1200 | switch (type) { | |
1201 | case LLCP_TLV_SDREQ: | |
1202 | tid = tlv[2]; | |
1203 | service_name = (char *) &tlv[3]; | |
1204 | service_name_len = length - 1; | |
1205 | ||
e6904081 | 1206 | pr_debug("Looking for %.16s\n", service_name); |
19cfe584 SO |
1207 | |
1208 | if (service_name_len == strlen("urn:nfc:sn:sdp") && | |
1209 | !strncmp(service_name, "urn:nfc:sn:sdp", | |
1210 | service_name_len)) { | |
1211 | sap = 1; | |
e6904081 SO |
1212 | goto send_snl; |
1213 | } | |
1214 | ||
1215 | llcp_sock = nfc_llcp_sock_from_sn(local, service_name, | |
1216 | service_name_len); | |
1217 | if (!llcp_sock) { | |
1218 | sap = 0; | |
1219 | goto send_snl; | |
1220 | } | |
1221 | ||
1222 | /* | |
1223 | * We found a socket but its ssap has not been reserved | |
1224 | * yet. We need to assign it for good and send a reply. | |
1225 | * The ssap will be freed when the socket is closed. | |
1226 | */ | |
1227 | if (llcp_sock->ssap == LLCP_SDP_UNBOUND) { | |
1228 | atomic_t *client_count; | |
1229 | ||
1230 | sap = nfc_llcp_reserve_sdp_ssap(local); | |
1231 | ||
1232 | pr_debug("Reserving %d\n", sap); | |
1233 | ||
1234 | if (sap == LLCP_SAP_MAX) { | |
1235 | sap = 0; | |
1236 | goto send_snl; | |
1237 | } | |
1238 | ||
1239 | client_count = | |
1240 | &local->local_sdp_cnt[sap - | |
1241 | LLCP_WKS_NUM_SAP]; | |
1242 | ||
1243 | atomic_inc(client_count); | |
1244 | ||
1245 | llcp_sock->ssap = sap; | |
1246 | llcp_sock->reserved_ssap = sap; | |
19cfe584 | 1247 | } else { |
e6904081 | 1248 | sap = llcp_sock->ssap; |
19cfe584 SO |
1249 | } |
1250 | ||
e6904081 SO |
1251 | pr_debug("%p %d\n", llcp_sock, sap); |
1252 | ||
0f450772 | 1253 | send_snl: |
19cfe584 SO |
1254 | nfc_llcp_send_snl(local, tid, sap); |
1255 | break; | |
1256 | ||
1257 | default: | |
1258 | pr_err("Invalid SNL tlv value 0x%x\n", type); | |
1259 | break; | |
1260 | } | |
1261 | ||
1262 | offset += length + 2; | |
1263 | tlv += length + 2; | |
1264 | } | |
1265 | } | |
1266 | ||
d646960f SO |
1267 | static void nfc_llcp_rx_work(struct work_struct *work) |
1268 | { | |
1269 | struct nfc_llcp_local *local = container_of(work, struct nfc_llcp_local, | |
427a2eb1 | 1270 | rx_work); |
d646960f SO |
1271 | u8 dsap, ssap, ptype; |
1272 | struct sk_buff *skb; | |
1273 | ||
1274 | skb = local->rx_pending; | |
1275 | if (skb == NULL) { | |
1276 | pr_debug("No pending SKB\n"); | |
1277 | return; | |
1278 | } | |
1279 | ||
1280 | ptype = nfc_llcp_ptype(skb); | |
1281 | dsap = nfc_llcp_dsap(skb); | |
1282 | ssap = nfc_llcp_ssap(skb); | |
1283 | ||
1284 | pr_debug("ptype 0x%x dsap 0x%x ssap 0x%x\n", ptype, dsap, ssap); | |
1285 | ||
4be646ec SO |
1286 | if (ptype != LLCP_PDU_SYMM) |
1287 | print_hex_dump(KERN_DEBUG, "LLCP Rx: ", DUMP_PREFIX_OFFSET, | |
1288 | 16, 1, skb->data, skb->len, true); | |
1289 | ||
2c2d45bd TE |
1290 | __net_timestamp(skb); |
1291 | ||
4463523b TE |
1292 | nfc_llcp_send_to_raw_sock(local, skb, NFC_LLCP_DIRECTION_RX); |
1293 | ||
d646960f SO |
1294 | switch (ptype) { |
1295 | case LLCP_PDU_SYMM: | |
1296 | pr_debug("SYMM\n"); | |
1297 | break; | |
1298 | ||
968272bf SO |
1299 | case LLCP_PDU_UI: |
1300 | pr_debug("UI\n"); | |
1301 | nfc_llcp_recv_ui(local, skb); | |
1302 | break; | |
1303 | ||
d646960f SO |
1304 | case LLCP_PDU_CONNECT: |
1305 | pr_debug("CONNECT\n"); | |
1306 | nfc_llcp_recv_connect(local, skb); | |
1307 | break; | |
1308 | ||
1309 | case LLCP_PDU_DISC: | |
1310 | pr_debug("DISC\n"); | |
1311 | nfc_llcp_recv_disc(local, skb); | |
1312 | break; | |
1313 | ||
1314 | case LLCP_PDU_CC: | |
1315 | pr_debug("CC\n"); | |
1316 | nfc_llcp_recv_cc(local, skb); | |
1317 | break; | |
1318 | ||
5c0560b7 SO |
1319 | case LLCP_PDU_DM: |
1320 | pr_debug("DM\n"); | |
1321 | nfc_llcp_recv_dm(local, skb); | |
1322 | break; | |
1323 | ||
19cfe584 SO |
1324 | case LLCP_PDU_SNL: |
1325 | pr_debug("SNL\n"); | |
1326 | nfc_llcp_recv_snl(local, skb); | |
1327 | break; | |
1328 | ||
d646960f SO |
1329 | case LLCP_PDU_I: |
1330 | case LLCP_PDU_RR: | |
53aef920 | 1331 | case LLCP_PDU_RNR: |
d646960f SO |
1332 | pr_debug("I frame\n"); |
1333 | nfc_llcp_recv_hdlc(local, skb); | |
1334 | break; | |
1335 | ||
1336 | } | |
1337 | ||
916082b0 | 1338 | schedule_work(&local->tx_work); |
d646960f SO |
1339 | kfree_skb(local->rx_pending); |
1340 | local->rx_pending = NULL; | |
d646960f SO |
1341 | } |
1342 | ||
1727cf93 SO |
1343 | static void __nfc_llcp_recv(struct nfc_llcp_local *local, struct sk_buff *skb) |
1344 | { | |
1345 | local->rx_pending = skb; | |
1346 | del_timer(&local->link_timer); | |
1347 | schedule_work(&local->rx_work); | |
1348 | } | |
1349 | ||
d646960f SO |
1350 | void nfc_llcp_recv(void *data, struct sk_buff *skb, int err) |
1351 | { | |
1352 | struct nfc_llcp_local *local = (struct nfc_llcp_local *) data; | |
1353 | ||
1354 | pr_debug("Received an LLCP PDU\n"); | |
1355 | if (err < 0) { | |
427a2eb1 | 1356 | pr_err("err %d\n", err); |
d646960f SO |
1357 | return; |
1358 | } | |
1359 | ||
1727cf93 | 1360 | __nfc_llcp_recv(local, skb); |
d646960f SO |
1361 | } |
1362 | ||
73167ced SO |
1363 | int nfc_llcp_data_received(struct nfc_dev *dev, struct sk_buff *skb) |
1364 | { | |
1365 | struct nfc_llcp_local *local; | |
1366 | ||
1367 | local = nfc_llcp_find_local(dev); | |
1368 | if (local == NULL) | |
1369 | return -ENODEV; | |
1370 | ||
1727cf93 | 1371 | __nfc_llcp_recv(local, skb); |
73167ced SO |
1372 | |
1373 | return 0; | |
1374 | } | |
1375 | ||
d646960f SO |
1376 | void nfc_llcp_mac_is_down(struct nfc_dev *dev) |
1377 | { | |
1378 | struct nfc_llcp_local *local; | |
1379 | ||
1380 | local = nfc_llcp_find_local(dev); | |
1381 | if (local == NULL) | |
1382 | return; | |
1383 | ||
1384 | /* Close and purge all existing sockets */ | |
3bbc0ceb | 1385 | nfc_llcp_socket_release(local, true, 0); |
d646960f SO |
1386 | } |
1387 | ||
1388 | void nfc_llcp_mac_is_up(struct nfc_dev *dev, u32 target_idx, | |
1389 | u8 comm_mode, u8 rf_mode) | |
1390 | { | |
1391 | struct nfc_llcp_local *local; | |
1392 | ||
1393 | pr_debug("rf mode %d\n", rf_mode); | |
1394 | ||
1395 | local = nfc_llcp_find_local(dev); | |
1396 | if (local == NULL) | |
1397 | return; | |
1398 | ||
1399 | local->target_idx = target_idx; | |
1400 | local->comm_mode = comm_mode; | |
1401 | local->rf_mode = rf_mode; | |
1402 | ||
1403 | if (rf_mode == NFC_RF_INITIATOR) { | |
1404 | pr_debug("Queueing Tx work\n"); | |
1405 | ||
916082b0 | 1406 | schedule_work(&local->tx_work); |
d646960f SO |
1407 | } else { |
1408 | mod_timer(&local->link_timer, | |
427a2eb1 | 1409 | jiffies + msecs_to_jiffies(local->remote_lto)); |
d646960f SO |
1410 | } |
1411 | } | |
1412 | ||
1413 | int nfc_llcp_register_device(struct nfc_dev *ndev) | |
1414 | { | |
d646960f | 1415 | struct nfc_llcp_local *local; |
d646960f SO |
1416 | |
1417 | local = kzalloc(sizeof(struct nfc_llcp_local), GFP_KERNEL); | |
1418 | if (local == NULL) | |
1419 | return -ENOMEM; | |
1420 | ||
1421 | local->dev = ndev; | |
1422 | INIT_LIST_HEAD(&local->list); | |
c7aa1225 | 1423 | kref_init(&local->ref); |
d646960f | 1424 | mutex_init(&local->sdp_lock); |
d646960f SO |
1425 | init_timer(&local->link_timer); |
1426 | local->link_timer.data = (unsigned long) local; | |
1427 | local->link_timer.function = nfc_llcp_symm_timer; | |
1428 | ||
1429 | skb_queue_head_init(&local->tx_queue); | |
1430 | INIT_WORK(&local->tx_work, nfc_llcp_tx_work); | |
d646960f SO |
1431 | |
1432 | local->rx_pending = NULL; | |
1433 | INIT_WORK(&local->rx_work, nfc_llcp_rx_work); | |
d646960f SO |
1434 | |
1435 | INIT_WORK(&local->timeout_work, nfc_llcp_timeout_work); | |
d646960f | 1436 | |
fe235b58 SJ |
1437 | rwlock_init(&local->sockets.lock); |
1438 | rwlock_init(&local->connecting_sockets.lock); | |
4463523b | 1439 | rwlock_init(&local->raw_sockets.lock); |
a69f32af | 1440 | |
52feb444 TE |
1441 | local->lto = 150; /* 1500 ms */ |
1442 | local->rw = LLCP_MAX_RW; | |
1443 | local->miux = cpu_to_be16(LLCP_MAX_MIUX); | |
1444 | ||
d646960f SO |
1445 | nfc_llcp_build_gb(local); |
1446 | ||
1447 | local->remote_miu = LLCP_DEFAULT_MIU; | |
1448 | local->remote_lto = LLCP_DEFAULT_LTO; | |
d646960f | 1449 | |
16a78e9f | 1450 | list_add(&local->list, &llcp_devices); |
d646960f | 1451 | |
d646960f SO |
1452 | return 0; |
1453 | } | |
1454 | ||
1455 | void nfc_llcp_unregister_device(struct nfc_dev *dev) | |
1456 | { | |
1457 | struct nfc_llcp_local *local = nfc_llcp_find_local(dev); | |
1458 | ||
1459 | if (local == NULL) { | |
1460 | pr_debug("No such device\n"); | |
1461 | return; | |
1462 | } | |
1463 | ||
3536da06 SO |
1464 | local_cleanup(local, false); |
1465 | ||
c7aa1225 | 1466 | nfc_llcp_local_put(local); |
d646960f SO |
1467 | } |
1468 | ||
1469 | int __init nfc_llcp_init(void) | |
1470 | { | |
1471 | INIT_LIST_HEAD(&llcp_devices); | |
1472 | ||
1473 | return nfc_llcp_sock_init(); | |
1474 | } | |
1475 | ||
1476 | void nfc_llcp_exit(void) | |
1477 | { | |
1478 | nfc_llcp_sock_exit(); | |
1479 | } |