[deliverable/linux.git] / net / nfc / llcp / sock.c

/*
 * Copyright (C) 2011  Intel Corporation. All rights reserved.
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the
 * Free Software Foundation, Inc.,
 * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
 */

#define pr_fmt(fmt) "llcp: %s: " fmt, __func__

#include <linux/init.h>
#include <linux/kernel.h>
#include <linux/module.h>
#include <linux/nfc.h>

#include "../nfc.h"
#include "llcp.h"

static int sock_wait_state(struct sock *sk, int state, unsigned long timeo)
{
	DECLARE_WAITQUEUE(wait, current);
	int err = 0;

	pr_debug("sk %p", sk);

	add_wait_queue(sk_sleep(sk), &wait);
	set_current_state(TASK_INTERRUPTIBLE);

	while (sk->sk_state != state) {
		if (!timeo) {
			err = -EINPROGRESS;
			break;
		}

		if (signal_pending(current)) {
			err = sock_intr_errno(timeo);
			break;
		}

		release_sock(sk);
		timeo = schedule_timeout(timeo);
		lock_sock(sk);
		set_current_state(TASK_INTERRUPTIBLE);

		err = sock_error(sk);
		if (err)
			break;
	}

	__set_current_state(TASK_RUNNING);
	remove_wait_queue(sk_sleep(sk), &wait);
	return err;
}

static struct proto llcp_sock_proto = {
	.name     = "NFC_LLCP",
	.owner    = THIS_MODULE,
	.obj_size = sizeof(struct nfc_llcp_sock),
};

static int llcp_sock_bind(struct socket *sock, struct sockaddr *addr, int alen)
{
	struct sock *sk = sock->sk;
	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
	struct nfc_llcp_local *local;
	struct nfc_dev *dev;
	struct sockaddr_nfc_llcp llcp_addr;
	int len, ret = 0;

	pr_debug("sk %p addr %p family %d\n", sk, addr, addr->sa_family);

	if (!addr || addr->sa_family != AF_NFC)
		return -EINVAL;

	memset(&llcp_addr, 0, sizeof(llcp_addr));
	len = min_t(unsigned int, sizeof(llcp_addr), alen);
	memcpy(&llcp_addr, addr, len);

	/* This is going to be a listening socket, dsap must be 0 */
	if (llcp_addr.dsap != 0)
		return -EINVAL;

	lock_sock(sk);

	if (sk->sk_state != LLCP_CLOSED) {
		ret = -EBADFD;
		goto error;
	}

	dev = nfc_get_device(llcp_addr.dev_idx);
	if (dev == NULL) {
		ret = -ENODEV;
		goto error;
	}

	local = nfc_llcp_find_local(dev);
	if (local == NULL) {
		ret = -ENODEV;
		goto put_dev;
	}

	llcp_sock->dev = dev;
	llcp_sock->local = local;
	llcp_sock->nfc_protocol = llcp_addr.nfc_protocol;
	llcp_sock->service_name_len = min_t(unsigned int,
					    llcp_addr.service_name_len,
					    NFC_LLCP_MAX_SERVICE_NAME);
	llcp_sock->service_name = kmemdup(llcp_addr.service_name,
					  llcp_sock->service_name_len,
					  GFP_KERNEL);

	llcp_sock->ssap = nfc_llcp_get_sdp_ssap(local, llcp_sock);
	if (llcp_sock->ssap == LLCP_MAX_SAP)
		goto put_dev;

	local->sockets[llcp_sock->ssap] = llcp_sock;

	pr_debug("Socket bound to SAP %d\n", llcp_sock->ssap);

	sk->sk_state = LLCP_BOUND;

put_dev:
	nfc_put_device(dev);

error:
	release_sock(sk);
	return ret;
}

static int llcp_sock_listen(struct socket *sock, int backlog)
{
	struct sock *sk = sock->sk;
	int ret = 0;

	pr_debug("sk %p backlog %d\n", sk, backlog);

	lock_sock(sk);

	if ((sock->type != SOCK_SEQPACKET && sock->type != SOCK_STREAM)
	    || sk->sk_state != LLCP_BOUND) {
		ret = -EBADFD;
		goto error;
	}

	sk->sk_max_ack_backlog = backlog;
	sk->sk_ack_backlog = 0;

	pr_debug("Socket listening\n");
	sk->sk_state = LLCP_LISTEN;

error:
	release_sock(sk);

	return ret;
}

void nfc_llcp_accept_unlink(struct sock *sk)
{
	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);

	pr_debug("state %d\n", sk->sk_state);

	list_del_init(&llcp_sock->accept_queue);
	sk_acceptq_removed(llcp_sock->parent);
	llcp_sock->parent = NULL;

	sock_put(sk);
}

void nfc_llcp_accept_enqueue(struct sock *parent, struct sock *sk)
{
	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
	struct nfc_llcp_sock *llcp_sock_parent = nfc_llcp_sock(parent);

	/* Lock will be free from unlink */
	sock_hold(sk);

	list_add_tail(&llcp_sock->accept_queue,
		      &llcp_sock_parent->accept_queue);
	llcp_sock->parent = parent;
	sk_acceptq_added(parent);
}

struct sock *nfc_llcp_accept_dequeue(struct sock *parent,
				     struct socket *newsock)
{
	struct nfc_llcp_sock *lsk, *n, *llcp_parent;
	struct sock *sk;

	llcp_parent = nfc_llcp_sock(parent);

	list_for_each_entry_safe(lsk, n, &llcp_parent->accept_queue,
				 accept_queue) {
		sk = &lsk->sk;
		lock_sock(sk);

		if (sk->sk_state == LLCP_CLOSED) {
			release_sock(sk);
			nfc_llcp_accept_unlink(sk);
			continue;
		}

		if (sk->sk_state == LLCP_CONNECTED || !newsock) {
			nfc_llcp_accept_unlink(sk);
			if (newsock)
				sock_graft(sk, newsock);

			release_sock(sk);

			pr_debug("Returning sk state %d\n", sk->sk_state);

			return sk;
		}

		release_sock(sk);
	}

	return NULL;
}

static int llcp_sock_accept(struct socket *sock, struct socket *newsock,
			    int flags)
{
	DECLARE_WAITQUEUE(wait, current);
	struct sock *sk = sock->sk, *new_sk;
	long timeo;
	int ret = 0;

	pr_debug("parent %p\n", sk);

	lock_sock_nested(sk, SINGLE_DEPTH_NESTING);

	if (sk->sk_state != LLCP_LISTEN) {
		ret = -EBADFD;
		goto error;
	}

	timeo = sock_rcvtimeo(sk, flags & O_NONBLOCK);

	/* Wait for an incoming connection. */
	add_wait_queue_exclusive(sk_sleep(sk), &wait);
	while (!(new_sk = nfc_llcp_accept_dequeue(sk, newsock))) {
		set_current_state(TASK_INTERRUPTIBLE);

		if (!timeo) {
			ret = -EAGAIN;
			break;
		}

		if (signal_pending(current)) {
			ret = sock_intr_errno(timeo);
			break;
		}

		release_sock(sk);
		timeo = schedule_timeout(timeo);
		lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
	}
	__set_current_state(TASK_RUNNING);
	remove_wait_queue(sk_sleep(sk), &wait);

	if (ret)
		goto error;

	newsock->state = SS_CONNECTED;

	pr_debug("new socket %p\n", new_sk);

error:
	release_sock(sk);

	return ret;
}

static int llcp_sock_getname(struct socket *sock, struct sockaddr *addr,
			     int *len, int peer)
{
	struct sockaddr_nfc_llcp *llcp_addr = (struct sockaddr_nfc_llcp *)addr;
	struct sock *sk = sock->sk;
	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);

	pr_debug("%p\n", sk);

	addr->sa_family = AF_NFC;
	*len = sizeof(struct sockaddr_nfc_llcp);

	llcp_addr->dev_idx = llcp_sock->dev->idx;
	llcp_addr->dsap = llcp_sock->dsap;
	llcp_addr->ssap = llcp_sock->ssap;
	llcp_addr->service_name_len = llcp_sock->service_name_len;
	memcpy(llcp_addr->service_name, llcp_sock->service_name,
	       llcp_addr->service_name_len);

	return 0;
}

static inline unsigned int llcp_accept_poll(struct sock *parent)
{
	struct nfc_llcp_sock *llcp_sock, *n, *parent_sock;
	struct sock *sk;

	parent_sock = nfc_llcp_sock(parent);

	list_for_each_entry_safe(llcp_sock, n, &parent_sock->accept_queue,
				 accept_queue) {
		sk = &llcp_sock->sk;

		if (sk->sk_state == LLCP_CONNECTED)
			return POLLIN | POLLRDNORM;
	}

	return 0;
}

static unsigned int llcp_sock_poll(struct file *file, struct socket *sock,
				   poll_table *wait)
{
	struct sock *sk = sock->sk;
	unsigned int mask = 0;

	pr_debug("%p\n", sk);

	sock_poll_wait(file, sk_sleep(sk), wait);

	if (sk->sk_state == LLCP_LISTEN)
		return llcp_accept_poll(sk);

	if (sk->sk_err || !skb_queue_empty(&sk->sk_error_queue))
		mask |= POLLERR;

	if (!skb_queue_empty(&sk->sk_receive_queue))
		mask |= POLLIN;

	if (sk->sk_state == LLCP_CLOSED)
		mask |= POLLHUP;

	return mask;
}

static int llcp_sock_release(struct socket *sock)
{
	struct sock *sk = sock->sk;
	struct nfc_llcp_local *local;
	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
	int err = 0;

	if (!sk)
		return 0;

	pr_debug("%p\n", sk);

	local = llcp_sock->local;
	if (local == NULL) {
		err = -ENODEV;
		goto out;
	}

	mutex_lock(&local->socket_lock);

	if (llcp_sock == local->sockets[llcp_sock->ssap])
		local->sockets[llcp_sock->ssap] = NULL;
	else
		list_del_init(&llcp_sock->list);

	mutex_unlock(&local->socket_lock);

	lock_sock(sk);

	/* Send a DISC */
	if (sk->sk_state == LLCP_CONNECTED)
		nfc_llcp_disconnect(llcp_sock);

	if (sk->sk_state == LLCP_LISTEN) {
		struct nfc_llcp_sock *lsk, *n;
		struct sock *accept_sk;

		list_for_each_entry_safe(lsk, n, &llcp_sock->accept_queue,
					 accept_queue) {
			accept_sk = &lsk->sk;
			lock_sock(accept_sk);

			nfc_llcp_disconnect(lsk);
			nfc_llcp_accept_unlink(accept_sk);

			release_sock(accept_sk);

			sock_orphan(accept_sk);
		}
	}

	/* Freeing the SAP */
	if ((sk->sk_state == LLCP_CONNECTED
	     && llcp_sock->ssap > LLCP_LOCAL_SAP_OFFSET) ||
	    sk->sk_state == LLCP_BOUND || sk->sk_state == LLCP_LISTEN)
		nfc_llcp_put_ssap(llcp_sock->local, llcp_sock->ssap);

	release_sock(sk);

out:
	sock_orphan(sk);
	sock_put(sk);

	return err;
}

static int llcp_sock_connect(struct socket *sock, struct sockaddr *_addr,
			     int len, int flags)
{
	struct sock *sk = sock->sk;
	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
	struct sockaddr_nfc_llcp *addr = (struct sockaddr_nfc_llcp *)_addr;
	struct nfc_dev *dev;
	struct nfc_llcp_local *local;
	int ret = 0;

	pr_debug("sock %p sk %p flags 0x%x\n", sock, sk, flags);

	if (!addr || len < sizeof(struct sockaddr_nfc) ||
	    addr->sa_family != AF_NFC) {
		pr_err("Invalid socket\n");
		return -EINVAL;
	}

	if (addr->service_name_len == 0 && addr->dsap == 0) {
		pr_err("Missing service name or dsap\n");
		return -EINVAL;
	}

	pr_debug("addr dev_idx=%u target_idx=%u protocol=%u\n", addr->dev_idx,
		 addr->target_idx, addr->nfc_protocol);

	lock_sock(sk);

	if (sk->sk_state == LLCP_CONNECTED) {
		ret = -EISCONN;
		goto error;
	}

	dev = nfc_get_device(addr->dev_idx);
	if (dev == NULL) {
		ret = -ENODEV;
		goto error;
	}

	local = nfc_llcp_find_local(dev);
	if (local == NULL) {
		ret = -ENODEV;
		goto put_dev;
	}

	device_lock(&dev->dev);
	if (dev->dep_link_up == false) {
		ret = -ENOLINK;
		device_unlock(&dev->dev);
		goto put_dev;
	}
	device_unlock(&dev->dev);

	if (local->rf_mode == NFC_RF_INITIATOR &&
	    addr->target_idx != local->target_idx) {
		ret = -ENOLINK;
		goto put_dev;
	}

	llcp_sock->dev = dev;
	llcp_sock->local = local;
	llcp_sock->ssap = nfc_llcp_get_local_ssap(local);
	if (llcp_sock->ssap == LLCP_SAP_MAX) {
		ret = -ENOMEM;
		goto put_dev;
	}
	if (addr->service_name_len == 0)
		llcp_sock->dsap = addr->dsap;
	else
		llcp_sock->dsap = LLCP_SAP_SDP;
	llcp_sock->nfc_protocol = addr->nfc_protocol;
	llcp_sock->service_name_len = min_t(unsigned int,
					    addr->service_name_len,
					    NFC_LLCP_MAX_SERVICE_NAME);
	llcp_sock->service_name = kmemdup(addr->service_name,
					  llcp_sock->service_name_len,
					  GFP_KERNEL);

	local->sockets[llcp_sock->ssap] = llcp_sock;

	ret = nfc_llcp_send_connect(llcp_sock);
	if (ret)
		goto put_dev;

	ret = sock_wait_state(sk, LLCP_CONNECTED,
			      sock_sndtimeo(sk, flags & O_NONBLOCK));
	if (ret)
		goto put_dev;

	release_sock(sk);

	return 0;

put_dev:
	nfc_put_device(dev);

error:
	release_sock(sk);
	return ret;
}

static int llcp_sock_sendmsg(struct kiocb *iocb, struct socket *sock,
			     struct msghdr *msg, size_t len)
{
	struct sock *sk = sock->sk;
	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
	int ret;

	pr_debug("sock %p sk %p", sock, sk);

	ret = sock_error(sk);
	if (ret)
		return ret;

	if (msg->msg_flags & MSG_OOB)
		return -EOPNOTSUPP;

	lock_sock(sk);

	if (sk->sk_state != LLCP_CONNECTED) {
		release_sock(sk);
		return -ENOTCONN;
	}

	release_sock(sk);

	return nfc_llcp_send_i_frame(llcp_sock, msg, len);
}

static int llcp_sock_recvmsg(struct kiocb *iocb, struct socket *sock,
			     struct msghdr *msg, size_t len, int flags)
{
	int noblock = flags & MSG_DONTWAIT;
	struct sock *sk = sock->sk;
	unsigned int copied, rlen;
	struct sk_buff *skb, *cskb;
	int err = 0;

	pr_debug("%p %zu\n", sk, len);

	lock_sock(sk);

	if (sk->sk_state == LLCP_CLOSED &&
	    skb_queue_empty(&sk->sk_receive_queue)) {
		release_sock(sk);
		return 0;
	}

	release_sock(sk);

	if (flags & (MSG_OOB))
		return -EOPNOTSUPP;

	skb = skb_recv_datagram(sk, flags, noblock, &err);
	if (!skb) {
		pr_err("Recv datagram failed state %d %d %d",
		       sk->sk_state, err, sock_error(sk));

		if (sk->sk_shutdown & RCV_SHUTDOWN)
			return 0;

		return err;
	}

	rlen = skb->len;		/* real length of skb */
	copied = min_t(unsigned int, rlen, len);

	cskb = skb;
	if (memcpy_toiovec(msg->msg_iov, cskb->data, copied)) {
		if (!(flags & MSG_PEEK))
			skb_queue_head(&sk->sk_receive_queue, skb);
		return -EFAULT;
	}

	/* Mark read part of skb as used */
	if (!(flags & MSG_PEEK)) {

		/* SOCK_STREAM: re-queue skb if it contains unreceived data */
		if (sk->sk_type == SOCK_STREAM) {
			skb_pull(skb, copied);
			if (skb->len) {
				skb_queue_head(&sk->sk_receive_queue, skb);
				goto done;
			}
		}

		kfree_skb(skb);
	}

	/* XXX Queue backlogged skbs */

done:
	/* SOCK_SEQPACKET: return real length if MSG_TRUNC is set */
	if (sk->sk_type == SOCK_SEQPACKET && (flags & MSG_TRUNC))
		copied = rlen;

	return copied;
}

static const struct proto_ops llcp_sock_ops = {
	.family         = PF_NFC,
	.owner          = THIS_MODULE,
	.bind           = llcp_sock_bind,
	.connect        = llcp_sock_connect,
	.release        = llcp_sock_release,
	.socketpair     = sock_no_socketpair,
	.accept         = llcp_sock_accept,
	.getname        = llcp_sock_getname,
	.poll           = llcp_sock_poll,
	.ioctl          = sock_no_ioctl,
	.listen         = llcp_sock_listen,
	.shutdown       = sock_no_shutdown,
	.setsockopt     = sock_no_setsockopt,
	.getsockopt     = sock_no_getsockopt,
	.sendmsg        = llcp_sock_sendmsg,
	.recvmsg        = llcp_sock_recvmsg,
	.mmap           = sock_no_mmap,
};

static void llcp_sock_destruct(struct sock *sk)
{
	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);

	pr_debug("%p\n", sk);

	if (sk->sk_state == LLCP_CONNECTED)
		nfc_put_device(llcp_sock->dev);

	skb_queue_purge(&sk->sk_receive_queue);

	nfc_llcp_sock_free(llcp_sock);

	if (!sock_flag(sk, SOCK_DEAD)) {
		pr_err("Freeing alive NFC LLCP socket %p\n", sk);
		return;
	}
}

struct sock *nfc_llcp_sock_alloc(struct socket *sock, int type, gfp_t gfp)
{
	struct sock *sk;
	struct nfc_llcp_sock *llcp_sock;

	sk = sk_alloc(&init_net, PF_NFC, gfp, &llcp_sock_proto);
	if (!sk)
		return NULL;

	llcp_sock = nfc_llcp_sock(sk);

	sock_init_data(sock, sk);
	sk->sk_state = LLCP_CLOSED;
	sk->sk_protocol = NFC_SOCKPROTO_LLCP;
	sk->sk_type = type;
	sk->sk_destruct = llcp_sock_destruct;

	llcp_sock->ssap = 0;
	llcp_sock->dsap = LLCP_SAP_SDP;
	llcp_sock->send_n = llcp_sock->send_ack_n = 0;
	llcp_sock->recv_n = llcp_sock->recv_ack_n = 0;
	llcp_sock->remote_ready = 1;
	skb_queue_head_init(&llcp_sock->tx_queue);
	skb_queue_head_init(&llcp_sock->tx_pending_queue);
	skb_queue_head_init(&llcp_sock->tx_backlog_queue);
	INIT_LIST_HEAD(&llcp_sock->list);
	INIT_LIST_HEAD(&llcp_sock->accept_queue);

	if (sock != NULL)
		sock->state = SS_UNCONNECTED;

	return sk;
}

void nfc_llcp_sock_free(struct nfc_llcp_sock *sock)
{
	struct nfc_llcp_local *local = sock->local;

	kfree(sock->service_name);

	skb_queue_purge(&sock->tx_queue);
	skb_queue_purge(&sock->tx_pending_queue);
	skb_queue_purge(&sock->tx_backlog_queue);

	list_del_init(&sock->accept_queue);

	if (local != NULL && sock == local->sockets[sock->ssap])
		local->sockets[sock->ssap] = NULL;
	else
		list_del_init(&sock->list);

	sock->parent = NULL;
}

static int llcp_sock_create(struct net *net, struct socket *sock,
			    const struct nfc_protocol *nfc_proto)
{
	struct sock *sk;

	pr_debug("%p\n", sock);

	if (sock->type != SOCK_STREAM && sock->type != SOCK_DGRAM)
		return -ESOCKTNOSUPPORT;

	sock->ops = &llcp_sock_ops;

	sk = nfc_llcp_sock_alloc(sock, sock->type, GFP_ATOMIC);
	if (sk == NULL)
		return -ENOMEM;

	return 0;
}

static const struct nfc_protocol llcp_nfc_proto = {
	.id	  = NFC_SOCKPROTO_LLCP,
	.proto    = &llcp_sock_proto,
	.owner    = THIS_MODULE,
	.create   = llcp_sock_create
};

int __init nfc_llcp_sock_init(void)
{
	return nfc_proto_register(&llcp_nfc_proto);
}

void nfc_llcp_sock_exit(void)
{
	nfc_proto_unregister(&llcp_nfc_proto);
}
Commit	Line	Data
d646960f SO	1	/*
	2	* Copyright (C) 2011 Intel Corporation. All rights reserved.
	3	*
	4	* This program is free software; you can redistribute it and/or modify
	5	* it under the terms of the GNU General Public License as published by
	6	* the Free Software Foundation; either version 2 of the License, or
	7	* (at your option) any later version.
	8	*
	9	* This program is distributed in the hope that it will be useful,
	10	* but WITHOUT ANY WARRANTY; without even the implied warranty of
	11	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	12	* GNU General Public License for more details.
	13	*
	14	* You should have received a copy of the GNU General Public License
	15	* along with this program; if not, write to the
	16	* Free Software Foundation, Inc.,
	17	* 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
	18	*/
	19
	20	#define pr_fmt(fmt) "llcp: %s: " fmt, __func__
	21
	22	#include <linux/init.h>
	23	#include <linux/kernel.h>
	24	#include <linux/module.h>
	25	#include <linux/nfc.h>
	26
	27	#include "../nfc.h"
	28	#include "llcp.h"
	29
ff353d86 SO	30	static int sock_wait_state(struct sock *sk, int state, unsigned long timeo)
	31	{
	32	DECLARE_WAITQUEUE(wait, current);
	33	int err = 0;
	34
	35	pr_debug("sk %p", sk);
	36
	37	add_wait_queue(sk_sleep(sk), &wait);
	38	set_current_state(TASK_INTERRUPTIBLE);
	39
	40	while (sk->sk_state != state) {
	41	if (!timeo) {
	42	err = -EINPROGRESS;
	43	break;
	44	}
	45
	46	if (signal_pending(current)) {
	47	err = sock_intr_errno(timeo);
	48	break;
	49	}
	50
	51	release_sock(sk);
	52	timeo = schedule_timeout(timeo);
	53	lock_sock(sk);
	54	set_current_state(TASK_INTERRUPTIBLE);
	55
	56	err = sock_error(sk);
	57	if (err)
	58	break;
	59	}
	60
	61	__set_current_state(TASK_RUNNING);
	62	remove_wait_queue(sk_sleep(sk), &wait);
	63	return err;
	64	}
	65
d646960f SO	66	static struct proto llcp_sock_proto = {
	67	.name = "NFC_LLCP",
	68	.owner = THIS_MODULE,
	69	.obj_size = sizeof(struct nfc_llcp_sock),
	70	};
	71
	72	static int llcp_sock_bind(struct socket sock, struct sockaddr addr, int alen)
	73	{
	74	struct sock *sk = sock->sk;
	75	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
	76	struct nfc_llcp_local *local;
	77	struct nfc_dev *dev;
	78	struct sockaddr_nfc_llcp llcp_addr;
	79	int len, ret = 0;
	80
	81	pr_debug("sk %p addr %p family %d\n", sk, addr, addr->sa_family);
	82
	83	if (!addr \|\| addr->sa_family != AF_NFC)
	84	return -EINVAL;
	85
	86	memset(&llcp_addr, 0, sizeof(llcp_addr));
	87	len = min_t(unsigned int, sizeof(llcp_addr), alen);
	88	memcpy(&llcp_addr, addr, len);
	89
	90	/* This is going to be a listening socket, dsap must be 0 */
	91	if (llcp_addr.dsap != 0)
	92	return -EINVAL;
	93
	94	lock_sock(sk);
	95
	96	if (sk->sk_state != LLCP_CLOSED) {
	97	ret = -EBADFD;
	98	goto error;
	99	}
	100
	101	dev = nfc_get_device(llcp_addr.dev_idx);
	102	if (dev == NULL) {
	103	ret = -ENODEV;
	104	goto error;
	105	}
	106
	107	local = nfc_llcp_find_local(dev);
	108	if (local == NULL) {
	109	ret = -ENODEV;
	110	goto put_dev;
	111	}
	112
	113	llcp_sock->dev = dev;
	114	llcp_sock->local = local;
	115	llcp_sock->nfc_protocol = llcp_addr.nfc_protocol;
	116	llcp_sock->service_name_len = min_t(unsigned int,
427a2eb1 SO	117	llcp_addr.service_name_len,
427a2eb1 SO	118	NFC_LLCP_MAX_SERVICE_NAME);
d646960f	119	llcp_sock->service_name = kmemdup(llcp_addr.service_name,
427a2eb1 SO	120	llcp_sock->service_name_len,
427a2eb1 SO	121	GFP_KERNEL);
d646960f SO	122
	123	llcp_sock->ssap = nfc_llcp_get_sdp_ssap(local, llcp_sock);
	124	if (llcp_sock->ssap == LLCP_MAX_SAP)
	125	goto put_dev;
	126
	127	local->sockets[llcp_sock->ssap] = llcp_sock;
	128
	129	pr_debug("Socket bound to SAP %d\n", llcp_sock->ssap);
	130
	131	sk->sk_state = LLCP_BOUND;
	132
	133	put_dev:
	134	nfc_put_device(dev);
	135
	136	error:
	137	release_sock(sk);
	138	return ret;
	139	}
	140
	141	static int llcp_sock_listen(struct socket *sock, int backlog)
	142	{
	143	struct sock *sk = sock->sk;
	144	int ret = 0;
	145
	146	pr_debug("sk %p backlog %d\n", sk, backlog);
	147
	148	lock_sock(sk);
	149
	150	if ((sock->type != SOCK_SEQPACKET && sock->type != SOCK_STREAM)
427a2eb1	151	\|\| sk->sk_state != LLCP_BOUND) {
d646960f SO	152	ret = -EBADFD;
	153	goto error;
	154	}
	155
	156	sk->sk_max_ack_backlog = backlog;
	157	sk->sk_ack_backlog = 0;
	158
	159	pr_debug("Socket listening\n");
	160	sk->sk_state = LLCP_LISTEN;
	161
	162	error:
	163	release_sock(sk);
	164
	165	return ret;
	166	}
	167
	168	void nfc_llcp_accept_unlink(struct sock *sk)
	169	{
	170	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
	171
	172	pr_debug("state %d\n", sk->sk_state);
	173
	174	list_del_init(&llcp_sock->accept_queue);
	175	sk_acceptq_removed(llcp_sock->parent);
	176	llcp_sock->parent = NULL;
	177
	178	sock_put(sk);
	179	}
	180
	181	void nfc_llcp_accept_enqueue(struct sock parent, struct sock sk)
	182	{
	183	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
	184	struct nfc_llcp_sock *llcp_sock_parent = nfc_llcp_sock(parent);
	185
	186	/* Lock will be free from unlink */
	187	sock_hold(sk);
	188
	189	list_add_tail(&llcp_sock->accept_queue,
427a2eb1	190	&llcp_sock_parent->accept_queue);
d646960f SO	191	llcp_sock->parent = parent;
	192	sk_acceptq_added(parent);
	193	}
	194
	195	struct sock nfc_llcp_accept_dequeue(struct sock parent,
427a2eb1	196	struct socket *newsock)
d646960f SO	197	{
	198	struct nfc_llcp_sock lsk, n, *llcp_parent;
	199	struct sock *sk;
	200
	201	llcp_parent = nfc_llcp_sock(parent);
	202
	203	list_for_each_entry_safe(lsk, n, &llcp_parent->accept_queue,
427a2eb1	204	accept_queue) {
d646960f SO	205	sk = &lsk->sk;
	206	lock_sock(sk);
	207
	208	if (sk->sk_state == LLCP_CLOSED) {
	209	release_sock(sk);
	210	nfc_llcp_accept_unlink(sk);
	211	continue;
	212	}
	213
	214	if (sk->sk_state == LLCP_CONNECTED \|\| !newsock) {
	215	nfc_llcp_accept_unlink(sk);
	216	if (newsock)
	217	sock_graft(sk, newsock);
	218
	219	release_sock(sk);
	220
	221	pr_debug("Returning sk state %d\n", sk->sk_state);
	222
	223	return sk;
	224	}
	225
	226	release_sock(sk);
	227	}
	228
	229	return NULL;
	230	}
	231
	232	static int llcp_sock_accept(struct socket sock, struct socket newsock,
427a2eb1	233	int flags)
d646960f SO	234	{
	235	DECLARE_WAITQUEUE(wait, current);
	236	struct sock sk = sock->sk, new_sk;
	237	long timeo;
	238	int ret = 0;
	239
	240	pr_debug("parent %p\n", sk);
	241
	242	lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
	243
	244	if (sk->sk_state != LLCP_LISTEN) {
	245	ret = -EBADFD;
	246	goto error;
	247	}
	248
	249	timeo = sock_rcvtimeo(sk, flags & O_NONBLOCK);
	250
	251	/* Wait for an incoming connection. */
	252	add_wait_queue_exclusive(sk_sleep(sk), &wait);
	253	while (!(new_sk = nfc_llcp_accept_dequeue(sk, newsock))) {
	254	set_current_state(TASK_INTERRUPTIBLE);
	255
	256	if (!timeo) {
	257	ret = -EAGAIN;
	258	break;
	259	}
	260
	261	if (signal_pending(current)) {
	262	ret = sock_intr_errno(timeo);
	263	break;
	264	}
	265
	266	release_sock(sk);
	267	timeo = schedule_timeout(timeo);
	268	lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
	269	}
	270	__set_current_state(TASK_RUNNING);
	271	remove_wait_queue(sk_sleep(sk), &wait);
	272
	273	if (ret)
	274	goto error;
	275
	276	newsock->state = SS_CONNECTED;
	277
	278	pr_debug("new socket %p\n", new_sk);
	279
	280	error:
	281	release_sock(sk);
	282
	283	return ret;
	284	}
	285
	286	static int llcp_sock_getname(struct socket sock, struct sockaddr addr,
	287	int *len, int peer)
	288	{
427a2eb1	289	struct sockaddr_nfc_llcp llcp_addr = (struct sockaddr_nfc_llcp )addr;
d646960f SO	290	struct sock *sk = sock->sk;
	291	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
	292
	293	pr_debug("%p\n", sk);
	294
	295	addr->sa_family = AF_NFC;
	296	*len = sizeof(struct sockaddr_nfc_llcp);
	297
	298	llcp_addr->dev_idx = llcp_sock->dev->idx;
	299	llcp_addr->dsap = llcp_sock->dsap;
	300	llcp_addr->ssap = llcp_sock->ssap;
	301	llcp_addr->service_name_len = llcp_sock->service_name_len;
	302	memcpy(llcp_addr->service_name, llcp_sock->service_name,
427a2eb1	303	llcp_addr->service_name_len);
d646960f SO	304
	305	return 0;
	306	}
	307
	308	static inline unsigned int llcp_accept_poll(struct sock *parent)
	309	{
	310	struct nfc_llcp_sock llcp_sock, n, *parent_sock;
	311	struct sock *sk;
	312
	313	parent_sock = nfc_llcp_sock(parent);
	314
	315	list_for_each_entry_safe(llcp_sock, n, &parent_sock->accept_queue,
427a2eb1	316	accept_queue) {
d646960f SO	317	sk = &llcp_sock->sk;
	318
	319	if (sk->sk_state == LLCP_CONNECTED)
	320	return POLLIN \| POLLRDNORM;
	321	}
	322
	323	return 0;
	324	}
	325
	326	static unsigned int llcp_sock_poll(struct file file, struct socket sock,
427a2eb1	327	poll_table *wait)
d646960f SO	328	{
	329	struct sock *sk = sock->sk;
	330	unsigned int mask = 0;
	331
	332	pr_debug("%p\n", sk);
	333
	334	sock_poll_wait(file, sk_sleep(sk), wait);
	335
	336	if (sk->sk_state == LLCP_LISTEN)
	337	return llcp_accept_poll(sk);
	338
	339	if (sk->sk_err \|\| !skb_queue_empty(&sk->sk_error_queue))
	340	mask \|= POLLERR;
	341
	342	if (!skb_queue_empty(&sk->sk_receive_queue))
	343	mask \|= POLLIN;
	344
	345	if (sk->sk_state == LLCP_CLOSED)
	346	mask \|= POLLHUP;
	347
	348	return mask;
	349	}
	350
	351	static int llcp_sock_release(struct socket *sock)
	352	{
	353	struct sock *sk = sock->sk;
	354	struct nfc_llcp_local *local;
	355	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
40c75f81	356	int err = 0;
d646960f SO	357
	358	if (!sk)
	359	return 0;
	360
	361	pr_debug("%p\n", sk);
	362
	363	local = llcp_sock->local;
40c75f81 SO	364	if (local == NULL) {
	365	err = -ENODEV;
	366	goto out;
	367	}
d646960f SO	368
	369	mutex_lock(&local->socket_lock);
	370
0c318359	371	if (llcp_sock == local->sockets[llcp_sock->ssap])
d646960f	372	local->sockets[llcp_sock->ssap] = NULL;
0c318359	373	else
40c75f81	374	list_del_init(&llcp_sock->list);
d646960f SO	375
	376	mutex_unlock(&local->socket_lock);
	377
	378	lock_sock(sk);
	379
	380	/* Send a DISC */
	381	if (sk->sk_state == LLCP_CONNECTED)
	382	nfc_llcp_disconnect(llcp_sock);
	383
	384	if (sk->sk_state == LLCP_LISTEN) {
	385	struct nfc_llcp_sock lsk, n;
	386	struct sock *accept_sk;
	387
	388	list_for_each_entry_safe(lsk, n, &llcp_sock->accept_queue,
427a2eb1	389	accept_queue) {
d646960f SO	390	accept_sk = &lsk->sk;
	391	lock_sock(accept_sk);
	392
	393	nfc_llcp_disconnect(lsk);
	394	nfc_llcp_accept_unlink(accept_sk);
	395
	396	release_sock(accept_sk);
	397
d646960f	398	sock_orphan(accept_sk);
d646960f SO	399	}
	400	}
	401
	402	/* Freeing the SAP */
	403	if ((sk->sk_state == LLCP_CONNECTED
427a2eb1 SO	404	&& llcp_sock->ssap > LLCP_LOCAL_SAP_OFFSET) \|\|
427a2eb1 SO	405	sk->sk_state == LLCP_BOUND \|\| sk->sk_state == LLCP_LISTEN)
d646960f SO	406	nfc_llcp_put_ssap(llcp_sock->local, llcp_sock->ssap);
d646960f SO	407
d646960f SO	408	release_sock(sk);
d646960f SO	409
40c75f81	410	out:
d646960f SO	411	sock_orphan(sk);
	412	sock_put(sk);
	413
40c75f81	414	return err;
d646960f SO	415	}
	416
	417	static int llcp_sock_connect(struct socket sock, struct sockaddr _addr,
427a2eb1	418	int len, int flags)
d646960f SO	419	{
	420	struct sock *sk = sock->sk;
	421	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
	422	struct sockaddr_nfc_llcp addr = (struct sockaddr_nfc_llcp )_addr;
	423	struct nfc_dev *dev;
	424	struct nfc_llcp_local *local;
	425	int ret = 0;
	426
	427	pr_debug("sock %p sk %p flags 0x%x\n", sock, sk, flags);
	428
	429	if (!addr \|\| len < sizeof(struct sockaddr_nfc) \|\|
427a2eb1	430	addr->sa_family != AF_NFC) {
d646960f SO	431	pr_err("Invalid socket\n");
	432	return -EINVAL;
	433	}
	434
	435	if (addr->service_name_len == 0 && addr->dsap == 0) {
	436	pr_err("Missing service name or dsap\n");
	437	return -EINVAL;
	438	}
	439
	440	pr_debug("addr dev_idx=%u target_idx=%u protocol=%u\n", addr->dev_idx,
427a2eb1	441	addr->target_idx, addr->nfc_protocol);
d646960f SO	442
	443	lock_sock(sk);
	444
	445	if (sk->sk_state == LLCP_CONNECTED) {
	446	ret = -EISCONN;
	447	goto error;
	448	}
	449
	450	dev = nfc_get_device(addr->dev_idx);
	451	if (dev == NULL) {
	452	ret = -ENODEV;
	453	goto error;
	454	}
	455
	456	local = nfc_llcp_find_local(dev);
	457	if (local == NULL) {
	458	ret = -ENODEV;
	459	goto put_dev;
	460	}
	461
	462	device_lock(&dev->dev);
	463	if (dev->dep_link_up == false) {
	464	ret = -ENOLINK;
	465	device_unlock(&dev->dev);
	466	goto put_dev;
	467	}
	468	device_unlock(&dev->dev);
	469
	470	if (local->rf_mode == NFC_RF_INITIATOR &&
427a2eb1	471	addr->target_idx != local->target_idx) {
d646960f SO	472	ret = -ENOLINK;
	473	goto put_dev;
	474	}
	475
	476	llcp_sock->dev = dev;
	477	llcp_sock->local = local;
	478	llcp_sock->ssap = nfc_llcp_get_local_ssap(local);
	479	if (llcp_sock->ssap == LLCP_SAP_MAX) {
	480	ret = -ENOMEM;
	481	goto put_dev;
	482	}
	483	if (addr->service_name_len == 0)
	484	llcp_sock->dsap = addr->dsap;
	485	else
	486	llcp_sock->dsap = LLCP_SAP_SDP;
	487	llcp_sock->nfc_protocol = addr->nfc_protocol;
	488	llcp_sock->service_name_len = min_t(unsigned int,
427a2eb1 SO	489	addr->service_name_len,
427a2eb1 SO	490	NFC_LLCP_MAX_SERVICE_NAME);
d646960f	491	llcp_sock->service_name = kmemdup(addr->service_name,
427a2eb1 SO	492	llcp_sock->service_name_len,
427a2eb1 SO	493	GFP_KERNEL);
d646960f SO	494
	495	local->sockets[llcp_sock->ssap] = llcp_sock;
	496
	497	ret = nfc_llcp_send_connect(llcp_sock);
	498	if (ret)
	499	goto put_dev;
	500
ff353d86 SO	501	ret = sock_wait_state(sk, LLCP_CONNECTED,
	502	sock_sndtimeo(sk, flags & O_NONBLOCK));
	503	if (ret)
	504	goto put_dev;
d646960f SO	505
d646960f SO	506	release_sock(sk);
ff353d86	507
d646960f SO	508	return 0;
	509
	510	put_dev:
	511	nfc_put_device(dev);
	512
	513	error:
	514	release_sock(sk);
	515	return ret;
	516	}
	517
53a0ac2e	518	static int llcp_sock_sendmsg(struct kiocb iocb, struct socket sock,
427a2eb1	519	struct msghdr *msg, size_t len)
53a0ac2e SO	520	{
	521	struct sock *sk = sock->sk;
	522	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
	523	int ret;
	524
	525	pr_debug("sock %p sk %p", sock, sk);
	526
	527	ret = sock_error(sk);
	528	if (ret)
	529	return ret;
	530
	531	if (msg->msg_flags & MSG_OOB)
	532	return -EOPNOTSUPP;
	533
	534	lock_sock(sk);
	535
	536	if (sk->sk_state != LLCP_CONNECTED) {
	537	release_sock(sk);
	538	return -ENOTCONN;
	539	}
	540
	541	release_sock(sk);
	542
	543	return nfc_llcp_send_i_frame(llcp_sock, msg, len);
	544	}
	545
d646960f SO	546	static int llcp_sock_recvmsg(struct kiocb iocb, struct socket sock,
	547	struct msghdr *msg, size_t len, int flags)
	548	{
	549	int noblock = flags & MSG_DONTWAIT;
	550	struct sock *sk = sock->sk;
	551	unsigned int copied, rlen;
	552	struct sk_buff skb, cskb;
	553	int err = 0;
	554
	555	pr_debug("%p %zu\n", sk, len);
	556
	557	lock_sock(sk);
	558
	559	if (sk->sk_state == LLCP_CLOSED &&
427a2eb1	560	skb_queue_empty(&sk->sk_receive_queue)) {
d646960f SO	561	release_sock(sk);
	562	return 0;
	563	}
	564
	565	release_sock(sk);
	566
	567	if (flags & (MSG_OOB))
	568	return -EOPNOTSUPP;
	569
	570	skb = skb_recv_datagram(sk, flags, noblock, &err);
	571	if (!skb) {
	572	pr_err("Recv datagram failed state %d %d %d",
427a2eb1	573	sk->sk_state, err, sock_error(sk));
d646960f SO	574
	575	if (sk->sk_shutdown & RCV_SHUTDOWN)
	576	return 0;
	577
	578	return err;
	579	}
	580
427a2eb1	581	rlen = skb->len; /* real length of skb */
d646960f SO	582	copied = min_t(unsigned int, rlen, len);
	583
	584	cskb = skb;
	585	if (memcpy_toiovec(msg->msg_iov, cskb->data, copied)) {
	586	if (!(flags & MSG_PEEK))
	587	skb_queue_head(&sk->sk_receive_queue, skb);
	588	return -EFAULT;
	589	}
	590
	591	/* Mark read part of skb as used */
	592	if (!(flags & MSG_PEEK)) {
	593
	594	/* SOCK_STREAM: re-queue skb if it contains unreceived data */
	595	if (sk->sk_type == SOCK_STREAM) {
	596	skb_pull(skb, copied);
	597	if (skb->len) {
	598	skb_queue_head(&sk->sk_receive_queue, skb);
	599	goto done;
	600	}
	601	}
	602
	603	kfree_skb(skb);
	604	}
	605
	606	/* XXX Queue backlogged skbs */
	607
	608	done:
	609	/* SOCK_SEQPACKET: return real length if MSG_TRUNC is set */
	610	if (sk->sk_type == SOCK_SEQPACKET && (flags & MSG_TRUNC))
	611	copied = rlen;
	612
	613	return copied;
	614	}
	615
	616	static const struct proto_ops llcp_sock_ops = {
	617	.family = PF_NFC,
	618	.owner = THIS_MODULE,
	619	.bind = llcp_sock_bind,
	620	.connect = llcp_sock_connect,
	621	.release = llcp_sock_release,
	622	.socketpair = sock_no_socketpair,
	623	.accept = llcp_sock_accept,
	624	.getname = llcp_sock_getname,
	625	.poll = llcp_sock_poll,
	626	.ioctl = sock_no_ioctl,
	627	.listen = llcp_sock_listen,
	628	.shutdown = sock_no_shutdown,
	629	.setsockopt = sock_no_setsockopt,
	630	.getsockopt = sock_no_getsockopt,
53a0ac2e	631	.sendmsg = llcp_sock_sendmsg,
d646960f SO	632	.recvmsg = llcp_sock_recvmsg,
	633	.mmap = sock_no_mmap,
	634	};
	635
	636	static void llcp_sock_destruct(struct sock *sk)
	637	{
	638	struct nfc_llcp_sock *llcp_sock = nfc_llcp_sock(sk);
	639
	640	pr_debug("%p\n", sk);
	641
	642	if (sk->sk_state == LLCP_CONNECTED)
	643	nfc_put_device(llcp_sock->dev);
	644
	645	skb_queue_purge(&sk->sk_receive_queue);
	646
	647	nfc_llcp_sock_free(llcp_sock);
	648
	649	if (!sock_flag(sk, SOCK_DEAD)) {
	650	pr_err("Freeing alive NFC LLCP socket %p\n", sk);
	651	return;
	652	}
	653	}
	654
	655	struct sock nfc_llcp_sock_alloc(struct socket sock, int type, gfp_t gfp)
	656	{
	657	struct sock *sk;
	658	struct nfc_llcp_sock *llcp_sock;
	659
	660	sk = sk_alloc(&init_net, PF_NFC, gfp, &llcp_sock_proto);
	661	if (!sk)
	662	return NULL;
	663
	664	llcp_sock = nfc_llcp_sock(sk);
	665
	666	sock_init_data(sock, sk);
	667	sk->sk_state = LLCP_CLOSED;
	668	sk->sk_protocol = NFC_SOCKPROTO_LLCP;
	669	sk->sk_type = type;
	670	sk->sk_destruct = llcp_sock_destruct;
	671
	672	llcp_sock->ssap = 0;
	673	llcp_sock->dsap = LLCP_SAP_SDP;
	674	llcp_sock->send_n = llcp_sock->send_ack_n = 0;
	675	llcp_sock->recv_n = llcp_sock->recv_ack_n = 0;
	676	llcp_sock->remote_ready = 1;
	677	skb_queue_head_init(&llcp_sock->tx_queue);
	678	skb_queue_head_init(&llcp_sock->tx_pending_queue);
	679	skb_queue_head_init(&llcp_sock->tx_backlog_queue);
	680	INIT_LIST_HEAD(&llcp_sock->list);
	681	INIT_LIST_HEAD(&llcp_sock->accept_queue);
	682
	683	if (sock != NULL)
	684	sock->state = SS_UNCONNECTED;
	685
	686	return sk;
	687	}
	688
	689	void nfc_llcp_sock_free(struct nfc_llcp_sock *sock)
	690	{
40c75f81 SO	691	struct nfc_llcp_local *local = sock->local;
40c75f81 SO	692
d646960f SO	693	kfree(sock->service_name);
	694
	695	skb_queue_purge(&sock->tx_queue);
	696	skb_queue_purge(&sock->tx_pending_queue);
	697	skb_queue_purge(&sock->tx_backlog_queue);
	698
	699	list_del_init(&sock->accept_queue);
	700
40c75f81 SO	701	if (local != NULL && sock == local->sockets[sock->ssap])
	702	local->sockets[sock->ssap] = NULL;
	703	else
	704	list_del_init(&sock->list);
	705
d646960f SO	706	sock->parent = NULL;
	707	}
	708
	709	static int llcp_sock_create(struct net net, struct socket sock,
427a2eb1	710	const struct nfc_protocol *nfc_proto)
d646960f SO	711	{
	712	struct sock *sk;
	713
	714	pr_debug("%p\n", sock);
	715
	716	if (sock->type != SOCK_STREAM && sock->type != SOCK_DGRAM)
	717	return -ESOCKTNOSUPPORT;
	718
	719	sock->ops = &llcp_sock_ops;
	720
	721	sk = nfc_llcp_sock_alloc(sock, sock->type, GFP_ATOMIC);
	722	if (sk == NULL)
	723	return -ENOMEM;
	724
	725	return 0;
	726	}
	727
	728	static const struct nfc_protocol llcp_nfc_proto = {
	729	.id = NFC_SOCKPROTO_LLCP,
	730	.proto = &llcp_sock_proto,
	731	.owner = THIS_MODULE,
	732	.create = llcp_sock_create
	733	};
	734
	735	int __init nfc_llcp_sock_init(void)
	736	{
	737	return nfc_proto_register(&llcp_nfc_proto);
	738	}
	739
	740	void nfc_llcp_sock_exit(void)
	741	{
	742	nfc_proto_unregister(&llcp_nfc_proto);
	743	}