net/nfc/netlink.c

   1 // SPDX-License-Identifier: GPL-2.0-or-later
   2 /*
   3  * Copyright (C) 2011 Instituto Nokia de Tecnologia
   4  *
   5  * Authors:
   6  *    Lauro Ramos Venancio <lauro.venancio@openbossa.org>
   7  *    Aloisio Almeida Jr <aloisio.almeida@openbossa.org>
   8  *
   9  * Vendor commands implementation based on net/wireless/nl80211.c
  10  * which is:
  11  *
  12  * Copyright 2006-2010  Johannes Berg <johannes@sipsolutions.net>
  13  * Copyright 2013-2014  Intel Mobile Communications GmbH
  14  */
  15
  16 #define pr_fmt(fmt) KBUILD_MODNAME ": %s: " fmt, __func__
  17
  18 #include <net/genetlink.h>
  19 #include <linux/nfc.h>
  20 #include <linux/slab.h>
  21
  22 #include "nfc.h"
  23 #include "llcp.h"
  24
  25 static const struct genl_multicast_group nfc_genl_mcgrps[] = {
  26         { .name = NFC_GENL_MCAST_EVENT_NAME, },
  27 };
  28
  29 static struct genl_family nfc_genl_family;
  30 static const struct nla_policy nfc_genl_policy[NFC_ATTR_MAX + 1] = {
  31         [NFC_ATTR_DEVICE_INDEX] = { .type = NLA_U32 },
  32         [NFC_ATTR_DEVICE_NAME] = { .type = NLA_STRING,
  33                                 .len = NFC_DEVICE_NAME_MAXSIZE },
  34         [NFC_ATTR_PROTOCOLS] = { .type = NLA_U32 },
  35         [NFC_ATTR_TARGET_INDEX] = { .type = NLA_U32 },
  36         [NFC_ATTR_COMM_MODE] = { .type = NLA_U8 },
  37         [NFC_ATTR_RF_MODE] = { .type = NLA_U8 },
  38         [NFC_ATTR_DEVICE_POWERED] = { .type = NLA_U8 },
  39         [NFC_ATTR_IM_PROTOCOLS] = { .type = NLA_U32 },
  40         [NFC_ATTR_TM_PROTOCOLS] = { .type = NLA_U32 },
  41         [NFC_ATTR_LLC_PARAM_LTO] = { .type = NLA_U8 },
  42         [NFC_ATTR_LLC_PARAM_RW] = { .type = NLA_U8 },
  43         [NFC_ATTR_LLC_PARAM_MIUX] = { .type = NLA_U16 },
  44         [NFC_ATTR_LLC_SDP] = { .type = NLA_NESTED },
  45         [NFC_ATTR_FIRMWARE_NAME] = { .type = NLA_STRING,
  46                                      .len = NFC_FIRMWARE_NAME_MAXSIZE },
  47         [NFC_ATTR_SE_INDEX] = { .type = NLA_U32 },
  48         [NFC_ATTR_SE_APDU] = { .type = NLA_BINARY },
  49         [NFC_ATTR_VENDOR_ID] = { .type = NLA_U32 },
  50         [NFC_ATTR_VENDOR_SUBCMD] = { .type = NLA_U32 },
  51         [NFC_ATTR_VENDOR_DATA] = { .type = NLA_BINARY },
  52
  53 };
  54
  55 static const struct nla_policy nfc_sdp_genl_policy[NFC_SDP_ATTR_MAX + 1] = {
  56         [NFC_SDP_ATTR_URI] = { .type = NLA_STRING,
  57                                .len = U8_MAX - 4 },
  58         [NFC_SDP_ATTR_SAP] = { .type = NLA_U8 },
  59 };
  60
  61 static int nfc_genl_send_target(struct sk_buff *msg, struct nfc_target *target,
  62                                 struct netlink_callback *cb, int flags)
  63 {
  64         void *hdr;
  65
  66         hdr = genlmsg_put(msg, NETLINK_CB(cb->skb).portid, cb->nlh->nlmsg_seq,
  67                           &nfc_genl_family, flags, NFC_CMD_GET_TARGET);
  68         if (!hdr)
  69                 return -EMSGSIZE;
  70
  71         genl_dump_check_consistent(cb, hdr);
  72
  73         if (nla_put_u32(msg, NFC_ATTR_TARGET_INDEX, target->idx) ||
  74             nla_put_u32(msg, NFC_ATTR_PROTOCOLS, target->supported_protocols) ||
  75             nla_put_u16(msg, NFC_ATTR_TARGET_SENS_RES, target->sens_res) ||
  76             nla_put_u8(msg, NFC_ATTR_TARGET_SEL_RES, target->sel_res))
  77                 goto nla_put_failure;
  78         if (target->nfcid1_len > 0 &&
  79             nla_put(msg, NFC_ATTR_TARGET_NFCID1, target->nfcid1_len,
  80                     target->nfcid1))
  81                 goto nla_put_failure;
  82         if (target->sensb_res_len > 0 &&
  83             nla_put(msg, NFC_ATTR_TARGET_SENSB_RES, target->sensb_res_len,
  84                     target->sensb_res))
  85                 goto nla_put_failure;
  86         if (target->sensf_res_len > 0 &&
  87             nla_put(msg, NFC_ATTR_TARGET_SENSF_RES, target->sensf_res_len,
  88                     target->sensf_res))
  89                 goto nla_put_failure;
  90
  91         if (target->is_iso15693) {
  92                 if (nla_put_u8(msg, NFC_ATTR_TARGET_ISO15693_DSFID,
  93                                target->iso15693_dsfid) ||
  94                     nla_put(msg, NFC_ATTR_TARGET_ISO15693_UID,
  95                             sizeof(target->iso15693_uid), target->iso15693_uid))
  96                         goto nla_put_failure;
  97         }
  98
  99         genlmsg_end(msg, hdr);
 100         return 0;
 101
 102 nla_put_failure:
 103         genlmsg_cancel(msg, hdr);
 104         return -EMSGSIZE;
 105 }
 106
 107 static struct nfc_dev *__get_device_from_cb(struct netlink_callback *cb)
 108 {
 109         struct nlattr **attrbuf = genl_family_attrbuf(&nfc_genl_family);
 110         struct nfc_dev *dev;
 111         int rc;
 112         u32 idx;
 113
 114         rc = nlmsg_parse_deprecated(cb->nlh,
 115                                     GENL_HDRLEN + nfc_genl_family.hdrsize,
 116                                     attrbuf, nfc_genl_family.maxattr,
 117                                     nfc_genl_policy, NULL);
 118         if (rc < 0)
 119                 return ERR_PTR(rc);
 120
 121         if (!attrbuf[NFC_ATTR_DEVICE_INDEX])
 122                 return ERR_PTR(-EINVAL);
 123
 124         idx = nla_get_u32(attrbuf[NFC_ATTR_DEVICE_INDEX]);
 125
 126         dev = nfc_get_device(idx);
 127         if (!dev)
 128                 return ERR_PTR(-ENODEV);
 129
 130         return dev;
 131 }
 132
 133 static int nfc_genl_dump_targets(struct sk_buff *skb,
 134                                  struct netlink_callback *cb)
 135 {
 136         int i = cb->args[0];
 137         struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
 138         int rc;
 139
 140         if (!dev) {
 141                 dev = __get_device_from_cb(cb);
 142                 if (IS_ERR(dev))
 143                         return PTR_ERR(dev);
 144
 145                 cb->args[1] = (long) dev;
 146         }
 147
 148         device_lock(&dev->dev);
 149
 150         cb->seq = dev->targets_generation;
 151
 152         while (i < dev->n_targets) {
 153                 rc = nfc_genl_send_target(skb, &dev->targets[i], cb,
 154                                           NLM_F_MULTI);
 155                 if (rc < 0)
 156                         break;
 157
 158                 i++;
 159         }
 160
 161         device_unlock(&dev->dev);
 162
 163         cb->args[0] = i;
 164
 165         return skb->len;
 166 }
 167
 168 static int nfc_genl_dump_targets_done(struct netlink_callback *cb)
 169 {
 170         struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
 171
 172         if (dev)
 173                 nfc_put_device(dev);
 174
 175         return 0;
 176 }
 177
 178 int nfc_genl_targets_found(struct nfc_dev *dev)
 179 {
 180         struct sk_buff *msg;
 181         void *hdr;
 182
 183         dev->genl_data.poll_req_portid = 0;
 184
 185         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
 186         if (!msg)
 187                 return -ENOMEM;
 188
 189         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 190                           NFC_EVENT_TARGETS_FOUND);
 191         if (!hdr)
 192                 goto free_msg;
 193
 194         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 195                 goto nla_put_failure;
 196
 197         genlmsg_end(msg, hdr);
 198
 199         return genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
 200
 201 nla_put_failure:
 202 free_msg:
 203         nlmsg_free(msg);
 204         return -EMSGSIZE;
 205 }
 206
 207 int nfc_genl_target_lost(struct nfc_dev *dev, u32 target_idx)
 208 {
 209         struct sk_buff *msg;
 210         void *hdr;
 211
 212         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 213         if (!msg)
 214                 return -ENOMEM;
 215
 216         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 217                           NFC_EVENT_TARGET_LOST);
 218         if (!hdr)
 219                 goto free_msg;
 220
 221         if (nla_put_string(msg, NFC_ATTR_DEVICE_NAME, nfc_device_name(dev)) ||
 222             nla_put_u32(msg, NFC_ATTR_TARGET_INDEX, target_idx))
 223                 goto nla_put_failure;
 224
 225         genlmsg_end(msg, hdr);
 226
 227         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 228
 229         return 0;
 230
 231 nla_put_failure:
 232 free_msg:
 233         nlmsg_free(msg);
 234         return -EMSGSIZE;
 235 }
 236
 237 int nfc_genl_tm_activated(struct nfc_dev *dev, u32 protocol)
 238 {
 239         struct sk_buff *msg;
 240         void *hdr;
 241
 242         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 243         if (!msg)
 244                 return -ENOMEM;
 245
 246         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 247                           NFC_EVENT_TM_ACTIVATED);
 248         if (!hdr)
 249                 goto free_msg;
 250
 251         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 252                 goto nla_put_failure;
 253         if (nla_put_u32(msg, NFC_ATTR_TM_PROTOCOLS, protocol))
 254                 goto nla_put_failure;
 255
 256         genlmsg_end(msg, hdr);
 257
 258         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 259
 260         return 0;
 261
 262 nla_put_failure:
 263 free_msg:
 264         nlmsg_free(msg);
 265         return -EMSGSIZE;
 266 }
 267
 268 int nfc_genl_tm_deactivated(struct nfc_dev *dev)
 269 {
 270         struct sk_buff *msg;
 271         void *hdr;
 272
 273         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 274         if (!msg)
 275                 return -ENOMEM;
 276
 277         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 278                           NFC_EVENT_TM_DEACTIVATED);
 279         if (!hdr)
 280                 goto free_msg;
 281
 282         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 283                 goto nla_put_failure;
 284
 285         genlmsg_end(msg, hdr);
 286
 287         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 288
 289         return 0;
 290
 291 nla_put_failure:
 292 free_msg:
 293         nlmsg_free(msg);
 294         return -EMSGSIZE;
 295 }
 296
 297 static int nfc_genl_setup_device_added(struct nfc_dev *dev, struct sk_buff *msg)
 298 {
 299         if (nla_put_string(msg, NFC_ATTR_DEVICE_NAME, nfc_device_name(dev)) ||
 300             nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
 301             nla_put_u32(msg, NFC_ATTR_PROTOCOLS, dev->supported_protocols) ||
 302             nla_put_u8(msg, NFC_ATTR_DEVICE_POWERED, dev->dev_up) ||
 303             nla_put_u8(msg, NFC_ATTR_RF_MODE, dev->rf_mode))
 304                 return -1;
 305         return 0;
 306 }
 307
 308 int nfc_genl_device_added(struct nfc_dev *dev)
 309 {
 310         struct sk_buff *msg;
 311         void *hdr;
 312
 313         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 314         if (!msg)
 315                 return -ENOMEM;
 316
 317         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 318                           NFC_EVENT_DEVICE_ADDED);
 319         if (!hdr)
 320                 goto free_msg;
 321
 322         if (nfc_genl_setup_device_added(dev, msg))
 323                 goto nla_put_failure;
 324
 325         genlmsg_end(msg, hdr);
 326
 327         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 328
 329         return 0;
 330
 331 nla_put_failure:
 332 free_msg:
 333         nlmsg_free(msg);
 334         return -EMSGSIZE;
 335 }
 336
 337 int nfc_genl_device_removed(struct nfc_dev *dev)
 338 {
 339         struct sk_buff *msg;
 340         void *hdr;
 341
 342         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 343         if (!msg)
 344                 return -ENOMEM;
 345
 346         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 347                           NFC_EVENT_DEVICE_REMOVED);
 348         if (!hdr)
 349                 goto free_msg;
 350
 351         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 352                 goto nla_put_failure;
 353
 354         genlmsg_end(msg, hdr);
 355
 356         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 357
 358         return 0;
 359
 360 nla_put_failure:
 361 free_msg:
 362         nlmsg_free(msg);
 363         return -EMSGSIZE;
 364 }
 365
 366 int nfc_genl_llc_send_sdres(struct nfc_dev *dev, struct hlist_head *sdres_list)
 367 {
 368         struct sk_buff *msg;
 369         struct nlattr *sdp_attr, *uri_attr;
 370         struct nfc_llcp_sdp_tlv *sdres;
 371         struct hlist_node *n;
 372         void *hdr;
 373         int rc = -EMSGSIZE;
 374         int i;
 375
 376         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 377         if (!msg)
 378                 return -ENOMEM;
 379
 380         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 381                           NFC_EVENT_LLC_SDRES);
 382         if (!hdr)
 383                 goto free_msg;
 384
 385         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 386                 goto nla_put_failure;
 387
 388         sdp_attr = nla_nest_start_noflag(msg, NFC_ATTR_LLC_SDP);
 389         if (sdp_attr == NULL) {
 390                 rc = -ENOMEM;
 391                 goto nla_put_failure;
 392         }
 393
 394         i = 1;
 395         hlist_for_each_entry_safe(sdres, n, sdres_list, node) {
 396                 pr_debug("uri: %s, sap: %d\n", sdres->uri, sdres->sap);
 397
 398                 uri_attr = nla_nest_start_noflag(msg, i++);
 399                 if (uri_attr == NULL) {
 400                         rc = -ENOMEM;
 401                         goto nla_put_failure;
 402                 }
 403
 404                 if (nla_put_u8(msg, NFC_SDP_ATTR_SAP, sdres->sap))
 405                         goto nla_put_failure;
 406
 407                 if (nla_put_string(msg, NFC_SDP_ATTR_URI, sdres->uri))
 408                         goto nla_put_failure;
 409
 410                 nla_nest_end(msg, uri_attr);
 411
 412                 hlist_del(&sdres->node);
 413
 414                 nfc_llcp_free_sdp_tlv(sdres);
 415         }
 416
 417         nla_nest_end(msg, sdp_attr);
 418
 419         genlmsg_end(msg, hdr);
 420
 421         return genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
 422
 423 nla_put_failure:
 424 free_msg:
 425         nlmsg_free(msg);
 426
 427         nfc_llcp_free_sdp_tlv_list(sdres_list);
 428
 429         return rc;
 430 }
 431
 432 int nfc_genl_se_added(struct nfc_dev *dev, u32 se_idx, u16 type)
 433 {
 434         struct sk_buff *msg;
 435         void *hdr;
 436
 437         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 438         if (!msg)
 439                 return -ENOMEM;
 440
 441         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 442                           NFC_EVENT_SE_ADDED);
 443         if (!hdr)
 444                 goto free_msg;
 445
 446         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
 447             nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx) ||
 448             nla_put_u8(msg, NFC_ATTR_SE_TYPE, type))
 449                 goto nla_put_failure;
 450
 451         genlmsg_end(msg, hdr);
 452
 453         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 454
 455         return 0;
 456
 457 nla_put_failure:
 458 free_msg:
 459         nlmsg_free(msg);
 460         return -EMSGSIZE;
 461 }
 462
 463 int nfc_genl_se_removed(struct nfc_dev *dev, u32 se_idx)
 464 {
 465         struct sk_buff *msg;
 466         void *hdr;
 467
 468         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 469         if (!msg)
 470                 return -ENOMEM;
 471
 472         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 473                           NFC_EVENT_SE_REMOVED);
 474         if (!hdr)
 475                 goto free_msg;
 476
 477         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
 478             nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx))
 479                 goto nla_put_failure;
 480
 481         genlmsg_end(msg, hdr);
 482
 483         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 484
 485         return 0;
 486
 487 nla_put_failure:
 488 free_msg:
 489         nlmsg_free(msg);
 490         return -EMSGSIZE;
 491 }
 492
 493 int nfc_genl_se_transaction(struct nfc_dev *dev, u8 se_idx,
 494                             struct nfc_evt_transaction *evt_transaction)
 495 {
 496         struct nfc_se *se;
 497         struct sk_buff *msg;
 498         void *hdr;
 499
 500         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 501         if (!msg)
 502                 return -ENOMEM;
 503
 504         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 505                           NFC_EVENT_SE_TRANSACTION);
 506         if (!hdr)
 507                 goto free_msg;
 508
 509         se = nfc_find_se(dev, se_idx);
 510         if (!se)
 511                 goto free_msg;
 512
 513         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
 514             nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx) ||
 515             nla_put_u8(msg, NFC_ATTR_SE_TYPE, se->type) ||
 516             nla_put(msg, NFC_ATTR_SE_AID, evt_transaction->aid_len,
 517                     evt_transaction->aid) ||
 518             nla_put(msg, NFC_ATTR_SE_PARAMS, evt_transaction->params_len,
 519                     evt_transaction->params))
 520                 goto nla_put_failure;
 521
 522         /* evt_transaction is no more used */
 523         devm_kfree(&dev->dev, evt_transaction);
 524
 525         genlmsg_end(msg, hdr);
 526
 527         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 528
 529         return 0;
 530
 531 nla_put_failure:
 532 free_msg:
 533         /* evt_transaction is no more used */
 534         devm_kfree(&dev->dev, evt_transaction);
 535         nlmsg_free(msg);
 536         return -EMSGSIZE;
 537 }
 538
 539 int nfc_genl_se_connectivity(struct nfc_dev *dev, u8 se_idx)
 540 {
 541         struct nfc_se *se;
 542         struct sk_buff *msg;
 543         void *hdr;
 544
 545         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 546         if (!msg)
 547                 return -ENOMEM;
 548
 549         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 550                           NFC_EVENT_SE_CONNECTIVITY);
 551         if (!hdr)
 552                 goto free_msg;
 553
 554         se = nfc_find_se(dev, se_idx);
 555         if (!se)
 556                 goto free_msg;
 557
 558         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
 559             nla_put_u32(msg, NFC_ATTR_SE_INDEX, se_idx) ||
 560             nla_put_u8(msg, NFC_ATTR_SE_TYPE, se->type))
 561                 goto nla_put_failure;
 562
 563         genlmsg_end(msg, hdr);
 564
 565         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
 566
 567         return 0;
 568
 569 nla_put_failure:
 570 free_msg:
 571         nlmsg_free(msg);
 572         return -EMSGSIZE;
 573 }
 574
 575 static int nfc_genl_send_device(struct sk_buff *msg, struct nfc_dev *dev,
 576                                 u32 portid, u32 seq,
 577                                 struct netlink_callback *cb,
 578                                 int flags)
 579 {
 580         void *hdr;
 581
 582         hdr = genlmsg_put(msg, portid, seq, &nfc_genl_family, flags,
 583                           NFC_CMD_GET_DEVICE);
 584         if (!hdr)
 585                 return -EMSGSIZE;
 586
 587         if (cb)
 588                 genl_dump_check_consistent(cb, hdr);
 589
 590         if (nfc_genl_setup_device_added(dev, msg))
 591                 goto nla_put_failure;
 592
 593         genlmsg_end(msg, hdr);
 594         return 0;
 595
 596 nla_put_failure:
 597         genlmsg_cancel(msg, hdr);
 598         return -EMSGSIZE;
 599 }
 600
 601 static int nfc_genl_dump_devices(struct sk_buff *skb,
 602                                  struct netlink_callback *cb)
 603 {
 604         struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
 605         struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
 606         bool first_call = false;
 607
 608         if (!iter) {
 609                 first_call = true;
 610                 iter = kmalloc(sizeof(struct class_dev_iter), GFP_KERNEL);
 611                 if (!iter)
 612                         return -ENOMEM;
 613                 cb->args[0] = (long) iter;
 614         }
 615
 616         mutex_lock(&nfc_devlist_mutex);
 617
 618         cb->seq = nfc_devlist_generation;
 619
 620         if (first_call) {
 621                 nfc_device_iter_init(iter);
 622                 dev = nfc_device_iter_next(iter);
 623         }
 624
 625         while (dev) {
 626                 int rc;
 627
 628                 rc = nfc_genl_send_device(skb, dev, NETLINK_CB(cb->skb).portid,
 629                                           cb->nlh->nlmsg_seq, cb, NLM_F_MULTI);
 630                 if (rc < 0)
 631                         break;
 632
 633                 dev = nfc_device_iter_next(iter);
 634         }
 635
 636         mutex_unlock(&nfc_devlist_mutex);
 637
 638         cb->args[1] = (long) dev;
 639
 640         return skb->len;
 641 }
 642
 643 static int nfc_genl_dump_devices_done(struct netlink_callback *cb)
 644 {
 645         struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
 646
 647         if (iter) {
 648                 nfc_device_iter_exit(iter);
 649                 kfree(iter);
 650         }
 651
 652         return 0;
 653 }
 654
 655 int nfc_genl_dep_link_up_event(struct nfc_dev *dev, u32 target_idx,
 656                                u8 comm_mode, u8 rf_mode)
 657 {
 658         struct sk_buff *msg;
 659         void *hdr;
 660
 661         pr_debug("DEP link is up\n");
 662
 663         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
 664         if (!msg)
 665                 return -ENOMEM;
 666
 667         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0, NFC_CMD_DEP_LINK_UP);
 668         if (!hdr)
 669                 goto free_msg;
 670
 671         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 672                 goto nla_put_failure;
 673         if (rf_mode == NFC_RF_INITIATOR &&
 674             nla_put_u32(msg, NFC_ATTR_TARGET_INDEX, target_idx))
 675                 goto nla_put_failure;
 676         if (nla_put_u8(msg, NFC_ATTR_COMM_MODE, comm_mode) ||
 677             nla_put_u8(msg, NFC_ATTR_RF_MODE, rf_mode))
 678                 goto nla_put_failure;
 679
 680         genlmsg_end(msg, hdr);
 681
 682         dev->dep_link_up = true;
 683
 684         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
 685
 686         return 0;
 687
 688 nla_put_failure:
 689 free_msg:
 690         nlmsg_free(msg);
 691         return -EMSGSIZE;
 692 }
 693
 694 int nfc_genl_dep_link_down_event(struct nfc_dev *dev)
 695 {
 696         struct sk_buff *msg;
 697         void *hdr;
 698
 699         pr_debug("DEP link is down\n");
 700
 701         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
 702         if (!msg)
 703                 return -ENOMEM;
 704
 705         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
 706                           NFC_CMD_DEP_LINK_DOWN);
 707         if (!hdr)
 708                 goto free_msg;
 709
 710         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
 711                 goto nla_put_failure;
 712
 713         genlmsg_end(msg, hdr);
 714
 715         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
 716
 717         return 0;
 718
 719 nla_put_failure:
 720 free_msg:
 721         nlmsg_free(msg);
 722         return -EMSGSIZE;
 723 }
 724
 725 static int nfc_genl_get_device(struct sk_buff *skb, struct genl_info *info)
 726 {
 727         struct sk_buff *msg;
 728         struct nfc_dev *dev;
 729         u32 idx;
 730         int rc = -ENOBUFS;
 731
 732         if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
 733                 return -EINVAL;
 734
 735         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 736
 737         dev = nfc_get_device(idx);
 738         if (!dev)
 739                 return -ENODEV;
 740
 741         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
 742         if (!msg) {
 743                 rc = -ENOMEM;
 744                 goto out_putdev;
 745         }
 746
 747         rc = nfc_genl_send_device(msg, dev, info->snd_portid, info->snd_seq,
 748                                   NULL, 0);
 749         if (rc < 0)
 750                 goto out_free;
 751
 752         nfc_put_device(dev);
 753
 754         return genlmsg_reply(msg, info);
 755
 756 out_free:
 757         nlmsg_free(msg);
 758 out_putdev:
 759         nfc_put_device(dev);
 760         return rc;
 761 }
 762
 763 static int nfc_genl_dev_up(struct sk_buff *skb, struct genl_info *info)
 764 {
 765         struct nfc_dev *dev;
 766         int rc;
 767         u32 idx;
 768
 769         if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
 770                 return -EINVAL;
 771
 772         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 773
 774         dev = nfc_get_device(idx);
 775         if (!dev)
 776                 return -ENODEV;
 777
 778         rc = nfc_dev_up(dev);
 779
 780         nfc_put_device(dev);
 781         return rc;
 782 }
 783
 784 static int nfc_genl_dev_down(struct sk_buff *skb, struct genl_info *info)
 785 {
 786         struct nfc_dev *dev;
 787         int rc;
 788         u32 idx;
 789
 790         if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
 791                 return -EINVAL;
 792
 793         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 794
 795         dev = nfc_get_device(idx);
 796         if (!dev)
 797                 return -ENODEV;
 798
 799         rc = nfc_dev_down(dev);
 800
 801         nfc_put_device(dev);
 802         return rc;
 803 }
 804
 805 static int nfc_genl_start_poll(struct sk_buff *skb, struct genl_info *info)
 806 {
 807         struct nfc_dev *dev;
 808         int rc;
 809         u32 idx;
 810         u32 im_protocols = 0, tm_protocols = 0;
 811
 812         pr_debug("Poll start\n");
 813
 814         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
 815             ((!info->attrs[NFC_ATTR_IM_PROTOCOLS] &&
 816               !info->attrs[NFC_ATTR_PROTOCOLS]) &&
 817               !info->attrs[NFC_ATTR_TM_PROTOCOLS]))
 818                 return -EINVAL;
 819
 820         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 821
 822         if (info->attrs[NFC_ATTR_TM_PROTOCOLS])
 823                 tm_protocols = nla_get_u32(info->attrs[NFC_ATTR_TM_PROTOCOLS]);
 824
 825         if (info->attrs[NFC_ATTR_IM_PROTOCOLS])
 826                 im_protocols = nla_get_u32(info->attrs[NFC_ATTR_IM_PROTOCOLS]);
 827         else if (info->attrs[NFC_ATTR_PROTOCOLS])
 828                 im_protocols = nla_get_u32(info->attrs[NFC_ATTR_PROTOCOLS]);
 829
 830         dev = nfc_get_device(idx);
 831         if (!dev)
 832                 return -ENODEV;
 833
 834         mutex_lock(&dev->genl_data.genl_data_mutex);
 835
 836         rc = nfc_start_poll(dev, im_protocols, tm_protocols);
 837         if (!rc)
 838                 dev->genl_data.poll_req_portid = info->snd_portid;
 839
 840         mutex_unlock(&dev->genl_data.genl_data_mutex);
 841
 842         nfc_put_device(dev);
 843         return rc;
 844 }
 845
 846 static int nfc_genl_stop_poll(struct sk_buff *skb, struct genl_info *info)
 847 {
 848         struct nfc_dev *dev;
 849         int rc;
 850         u32 idx;
 851
 852         if (!info->attrs[NFC_ATTR_DEVICE_INDEX])
 853                 return -EINVAL;
 854
 855         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 856
 857         dev = nfc_get_device(idx);
 858         if (!dev)
 859                 return -ENODEV;
 860
 861         device_lock(&dev->dev);
 862
 863         if (!dev->polling) {
 864                 device_unlock(&dev->dev);
 865                 nfc_put_device(dev);
 866                 return -EINVAL;
 867         }
 868
 869         device_unlock(&dev->dev);
 870
 871         mutex_lock(&dev->genl_data.genl_data_mutex);
 872
 873         if (dev->genl_data.poll_req_portid != info->snd_portid) {
 874                 rc = -EBUSY;
 875                 goto out;
 876         }
 877
 878         rc = nfc_stop_poll(dev);
 879         dev->genl_data.poll_req_portid = 0;
 880
 881 out:
 882         mutex_unlock(&dev->genl_data.genl_data_mutex);
 883         nfc_put_device(dev);
 884         return rc;
 885 }
 886
 887 static int nfc_genl_activate_target(struct sk_buff *skb, struct genl_info *info)
 888 {
 889         struct nfc_dev *dev;
 890         u32 device_idx, target_idx, protocol;
 891         int rc;
 892
 893         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
 894             !info->attrs[NFC_ATTR_TARGET_INDEX] ||
 895             !info->attrs[NFC_ATTR_PROTOCOLS])
 896                 return -EINVAL;
 897
 898         device_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 899
 900         dev = nfc_get_device(device_idx);
 901         if (!dev)
 902                 return -ENODEV;
 903
 904         target_idx = nla_get_u32(info->attrs[NFC_ATTR_TARGET_INDEX]);
 905         protocol = nla_get_u32(info->attrs[NFC_ATTR_PROTOCOLS]);
 906
 907         nfc_deactivate_target(dev, target_idx, NFC_TARGET_MODE_SLEEP);
 908         rc = nfc_activate_target(dev, target_idx, protocol);
 909
 910         nfc_put_device(dev);
 911         return rc;
 912 }
 913
 914 static int nfc_genl_deactivate_target(struct sk_buff *skb,
 915                                       struct genl_info *info)
 916 {
 917         struct nfc_dev *dev;
 918         u32 device_idx, target_idx;
 919         int rc;
 920
 921         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
 922             !info->attrs[NFC_ATTR_TARGET_INDEX])
 923                 return -EINVAL;
 924
 925         device_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 926
 927         dev = nfc_get_device(device_idx);
 928         if (!dev)
 929                 return -ENODEV;
 930
 931         target_idx = nla_get_u32(info->attrs[NFC_ATTR_TARGET_INDEX]);
 932
 933         rc = nfc_deactivate_target(dev, target_idx, NFC_TARGET_MODE_SLEEP);
 934
 935         nfc_put_device(dev);
 936         return rc;
 937 }
 938
 939 static int nfc_genl_dep_link_up(struct sk_buff *skb, struct genl_info *info)
 940 {
 941         struct nfc_dev *dev;
 942         int rc, tgt_idx;
 943         u32 idx;
 944         u8 comm;
 945
 946         pr_debug("DEP link up\n");
 947
 948         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
 949             !info->attrs[NFC_ATTR_COMM_MODE])
 950                 return -EINVAL;
 951
 952         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 953         if (!info->attrs[NFC_ATTR_TARGET_INDEX])
 954                 tgt_idx = NFC_TARGET_IDX_ANY;
 955         else
 956                 tgt_idx = nla_get_u32(info->attrs[NFC_ATTR_TARGET_INDEX]);
 957
 958         comm = nla_get_u8(info->attrs[NFC_ATTR_COMM_MODE]);
 959
 960         if (comm != NFC_COMM_ACTIVE && comm != NFC_COMM_PASSIVE)
 961                 return -EINVAL;
 962
 963         dev = nfc_get_device(idx);
 964         if (!dev)
 965                 return -ENODEV;
 966
 967         rc = nfc_dep_link_up(dev, tgt_idx, comm);
 968
 969         nfc_put_device(dev);
 970
 971         return rc;
 972 }
 973
 974 static int nfc_genl_dep_link_down(struct sk_buff *skb, struct genl_info *info)
 975 {
 976         struct nfc_dev *dev;
 977         int rc;
 978         u32 idx;
 979
 980         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
 981             !info->attrs[NFC_ATTR_TARGET_INDEX])
 982                 return -EINVAL;
 983
 984         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
 985
 986         dev = nfc_get_device(idx);
 987         if (!dev)
 988                 return -ENODEV;
 989
 990         rc = nfc_dep_link_down(dev);
 991
 992         nfc_put_device(dev);
 993         return rc;
 994 }
 995
 996 static int nfc_genl_send_params(struct sk_buff *msg,
 997                                 struct nfc_llcp_local *local,
 998                                 u32 portid, u32 seq)
 999 {
1000         void *hdr;
1001
1002         hdr = genlmsg_put(msg, portid, seq, &nfc_genl_family, 0,
1003                           NFC_CMD_LLC_GET_PARAMS);
1004         if (!hdr)
1005                 return -EMSGSIZE;
1006
1007         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, local->dev->idx) ||
1008             nla_put_u8(msg, NFC_ATTR_LLC_PARAM_LTO, local->lto) ||
1009             nla_put_u8(msg, NFC_ATTR_LLC_PARAM_RW, local->rw) ||
1010             nla_put_u16(msg, NFC_ATTR_LLC_PARAM_MIUX, be16_to_cpu(local->miux)))
1011                 goto nla_put_failure;
1012
1013         genlmsg_end(msg, hdr);
1014         return 0;
1015
1016 nla_put_failure:
1017         genlmsg_cancel(msg, hdr);
1018         return -EMSGSIZE;
1019 }
1020
1021 static int nfc_genl_llc_get_params(struct sk_buff *skb, struct genl_info *info)
1022 {
1023         struct nfc_dev *dev;
1024         struct nfc_llcp_local *local;
1025         int rc = 0;
1026         struct sk_buff *msg = NULL;
1027         u32 idx;
1028
1029         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1030             !info->attrs[NFC_ATTR_FIRMWARE_NAME])
1031                 return -EINVAL;
1032
1033         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1034
1035         dev = nfc_get_device(idx);
1036         if (!dev)
1037                 return -ENODEV;
1038
1039         device_lock(&dev->dev);
1040
1041         local = nfc_llcp_find_local(dev);
1042         if (!local) {
1043                 rc = -ENODEV;
1044                 goto exit;
1045         }
1046
1047         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
1048         if (!msg) {
1049                 rc = -ENOMEM;
1050                 goto exit;
1051         }
1052
1053         rc = nfc_genl_send_params(msg, local, info->snd_portid, info->snd_seq);
1054
1055 exit:
1056         device_unlock(&dev->dev);
1057
1058         nfc_put_device(dev);
1059
1060         if (rc < 0) {
1061                 if (msg)
1062                         nlmsg_free(msg);
1063
1064                 return rc;
1065         }
1066
1067         return genlmsg_reply(msg, info);
1068 }
1069
1070 static int nfc_genl_llc_set_params(struct sk_buff *skb, struct genl_info *info)
1071 {
1072         struct nfc_dev *dev;
1073         struct nfc_llcp_local *local;
1074         u8 rw = 0;
1075         u16 miux = 0;
1076         u32 idx;
1077         int rc = 0;
1078
1079         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1080             (!info->attrs[NFC_ATTR_LLC_PARAM_LTO] &&
1081              !info->attrs[NFC_ATTR_LLC_PARAM_RW] &&
1082              !info->attrs[NFC_ATTR_LLC_PARAM_MIUX]))
1083                 return -EINVAL;
1084
1085         if (info->attrs[NFC_ATTR_LLC_PARAM_RW]) {
1086                 rw = nla_get_u8(info->attrs[NFC_ATTR_LLC_PARAM_RW]);
1087
1088                 if (rw > LLCP_MAX_RW)
1089                         return -EINVAL;
1090         }
1091
1092         if (info->attrs[NFC_ATTR_LLC_PARAM_MIUX]) {
1093                 miux = nla_get_u16(info->attrs[NFC_ATTR_LLC_PARAM_MIUX]);
1094
1095                 if (miux > LLCP_MAX_MIUX)
1096                         return -EINVAL;
1097         }
1098
1099         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1100
1101         dev = nfc_get_device(idx);
1102         if (!dev)
1103                 return -ENODEV;
1104
1105         device_lock(&dev->dev);
1106
1107         local = nfc_llcp_find_local(dev);
1108         if (!local) {
1109                 rc = -ENODEV;
1110                 goto exit;
1111         }
1112
1113         if (info->attrs[NFC_ATTR_LLC_PARAM_LTO]) {
1114                 if (dev->dep_link_up) {
1115                         rc = -EINPROGRESS;
1116                         goto exit;
1117                 }
1118
1119                 local->lto = nla_get_u8(info->attrs[NFC_ATTR_LLC_PARAM_LTO]);
1120         }
1121
1122         if (info->attrs[NFC_ATTR_LLC_PARAM_RW])
1123                 local->rw = rw;
1124
1125         if (info->attrs[NFC_ATTR_LLC_PARAM_MIUX])
1126                 local->miux = cpu_to_be16(miux);
1127
1128 exit:
1129         device_unlock(&dev->dev);
1130
1131         nfc_put_device(dev);
1132
1133         return rc;
1134 }
1135
1136 static int nfc_genl_llc_sdreq(struct sk_buff *skb, struct genl_info *info)
1137 {
1138         struct nfc_dev *dev;
1139         struct nfc_llcp_local *local;
1140         struct nlattr *attr, *sdp_attrs[NFC_SDP_ATTR_MAX+1];
1141         u32 idx;
1142         u8 tid;
1143         char *uri;
1144         int rc = 0, rem;
1145         size_t uri_len, tlvs_len;
1146         struct hlist_head sdreq_list;
1147         struct nfc_llcp_sdp_tlv *sdreq;
1148
1149         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1150             !info->attrs[NFC_ATTR_LLC_SDP])
1151                 return -EINVAL;
1152
1153         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1154
1155         dev = nfc_get_device(idx);
1156         if (!dev)
1157                 return -ENODEV;
1158
1159         device_lock(&dev->dev);
1160
1161         if (dev->dep_link_up == false) {
1162                 rc = -ENOLINK;
1163                 goto exit;
1164         }
1165
1166         local = nfc_llcp_find_local(dev);
1167         if (!local) {
1168                 rc = -ENODEV;
1169                 goto exit;
1170         }
1171
1172         INIT_HLIST_HEAD(&sdreq_list);
1173
1174         tlvs_len = 0;
1175
1176         nla_for_each_nested(attr, info->attrs[NFC_ATTR_LLC_SDP], rem) {
1177                 rc = nla_parse_nested_deprecated(sdp_attrs, NFC_SDP_ATTR_MAX,
1178                                                  attr, nfc_sdp_genl_policy,
1179                                                  info->extack);
1180
1181                 if (rc != 0) {
1182                         rc = -EINVAL;
1183                         goto exit;
1184                 }
1185
1186                 if (!sdp_attrs[NFC_SDP_ATTR_URI])
1187                         continue;
1188
1189                 uri_len = nla_len(sdp_attrs[NFC_SDP_ATTR_URI]);
1190                 if (uri_len == 0)
1191                         continue;
1192
1193                 uri = nla_data(sdp_attrs[NFC_SDP_ATTR_URI]);
1194                 if (uri == NULL || *uri == 0)
1195                         continue;
1196
1197                 tid = local->sdreq_next_tid++;
1198
1199                 sdreq = nfc_llcp_build_sdreq_tlv(tid, uri, uri_len);
1200                 if (sdreq == NULL) {
1201                         rc = -ENOMEM;
1202                         goto exit;
1203                 }
1204
1205                 tlvs_len += sdreq->tlv_len;
1206
1207                 hlist_add_head(&sdreq->node, &sdreq_list);
1208         }
1209
1210         if (hlist_empty(&sdreq_list)) {
1211                 rc = -EINVAL;
1212                 goto exit;
1213         }
1214
1215         rc = nfc_llcp_send_snl_sdreq(local, &sdreq_list, tlvs_len);
1216 exit:
1217         device_unlock(&dev->dev);
1218
1219         nfc_put_device(dev);
1220
1221         return rc;
1222 }
1223
1224 static int nfc_genl_fw_download(struct sk_buff *skb, struct genl_info *info)
1225 {
1226         struct nfc_dev *dev;
1227         int rc;
1228         u32 idx;
1229         char firmware_name[NFC_FIRMWARE_NAME_MAXSIZE + 1];
1230
1231         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] || !info->attrs[NFC_ATTR_FIRMWARE_NAME])
1232                 return -EINVAL;
1233
1234         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1235
1236         dev = nfc_get_device(idx);
1237         if (!dev)
1238                 return -ENODEV;
1239
1240         nla_strlcpy(firmware_name, info->attrs[NFC_ATTR_FIRMWARE_NAME],
1241                     sizeof(firmware_name));
1242
1243         rc = nfc_fw_download(dev, firmware_name);
1244
1245         nfc_put_device(dev);
1246         return rc;
1247 }
1248
1249 int nfc_genl_fw_download_done(struct nfc_dev *dev, const char *firmware_name,
1250                               u32 result)
1251 {
1252         struct sk_buff *msg;
1253         void *hdr;
1254
1255         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
1256         if (!msg)
1257                 return -ENOMEM;
1258
1259         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
1260                           NFC_CMD_FW_DOWNLOAD);
1261         if (!hdr)
1262                 goto free_msg;
1263
1264         if (nla_put_string(msg, NFC_ATTR_FIRMWARE_NAME, firmware_name) ||
1265             nla_put_u32(msg, NFC_ATTR_FIRMWARE_DOWNLOAD_STATUS, result) ||
1266             nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx))
1267                 goto nla_put_failure;
1268
1269         genlmsg_end(msg, hdr);
1270
1271         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_ATOMIC);
1272
1273         return 0;
1274
1275 nla_put_failure:
1276 free_msg:
1277         nlmsg_free(msg);
1278         return -EMSGSIZE;
1279 }
1280
1281 static int nfc_genl_enable_se(struct sk_buff *skb, struct genl_info *info)
1282 {
1283         struct nfc_dev *dev;
1284         int rc;
1285         u32 idx, se_idx;
1286
1287         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1288             !info->attrs[NFC_ATTR_SE_INDEX])
1289                 return -EINVAL;
1290
1291         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1292         se_idx = nla_get_u32(info->attrs[NFC_ATTR_SE_INDEX]);
1293
1294         dev = nfc_get_device(idx);
1295         if (!dev)
1296                 return -ENODEV;
1297
1298         rc = nfc_enable_se(dev, se_idx);
1299
1300         nfc_put_device(dev);
1301         return rc;
1302 }
1303
1304 static int nfc_genl_disable_se(struct sk_buff *skb, struct genl_info *info)
1305 {
1306         struct nfc_dev *dev;
1307         int rc;
1308         u32 idx, se_idx;
1309
1310         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1311             !info->attrs[NFC_ATTR_SE_INDEX])
1312                 return -EINVAL;
1313
1314         idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1315         se_idx = nla_get_u32(info->attrs[NFC_ATTR_SE_INDEX]);
1316
1317         dev = nfc_get_device(idx);
1318         if (!dev)
1319                 return -ENODEV;
1320
1321         rc = nfc_disable_se(dev, se_idx);
1322
1323         nfc_put_device(dev);
1324         return rc;
1325 }
1326
1327 static int nfc_genl_send_se(struct sk_buff *msg, struct nfc_dev *dev,
1328                                 u32 portid, u32 seq,
1329                                 struct netlink_callback *cb,
1330                                 int flags)
1331 {
1332         void *hdr;
1333         struct nfc_se *se, *n;
1334
1335         list_for_each_entry_safe(se, n, &dev->secure_elements, list) {
1336                 hdr = genlmsg_put(msg, portid, seq, &nfc_genl_family, flags,
1337                                   NFC_CMD_GET_SE);
1338                 if (!hdr)
1339                         goto nla_put_failure;
1340
1341                 if (cb)
1342                         genl_dump_check_consistent(cb, hdr);
1343
1344                 if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, dev->idx) ||
1345                     nla_put_u32(msg, NFC_ATTR_SE_INDEX, se->idx) ||
1346                     nla_put_u8(msg, NFC_ATTR_SE_TYPE, se->type))
1347                         goto nla_put_failure;
1348
1349                 genlmsg_end(msg, hdr);
1350         }
1351
1352         return 0;
1353
1354 nla_put_failure:
1355         genlmsg_cancel(msg, hdr);
1356         return -EMSGSIZE;
1357 }
1358
1359 static int nfc_genl_dump_ses(struct sk_buff *skb,
1360                                  struct netlink_callback *cb)
1361 {
1362         struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
1363         struct nfc_dev *dev = (struct nfc_dev *) cb->args[1];
1364         bool first_call = false;
1365
1366         if (!iter) {
1367                 first_call = true;
1368                 iter = kmalloc(sizeof(struct class_dev_iter), GFP_KERNEL);
1369                 if (!iter)
1370                         return -ENOMEM;
1371                 cb->args[0] = (long) iter;
1372         }
1373
1374         mutex_lock(&nfc_devlist_mutex);
1375
1376         cb->seq = nfc_devlist_generation;
1377
1378         if (first_call) {
1379                 nfc_device_iter_init(iter);
1380                 dev = nfc_device_iter_next(iter);
1381         }
1382
1383         while (dev) {
1384                 int rc;
1385
1386                 rc = nfc_genl_send_se(skb, dev, NETLINK_CB(cb->skb).portid,
1387                                           cb->nlh->nlmsg_seq, cb, NLM_F_MULTI);
1388                 if (rc < 0)
1389                         break;
1390
1391                 dev = nfc_device_iter_next(iter);
1392         }
1393
1394         mutex_unlock(&nfc_devlist_mutex);
1395
1396         cb->args[1] = (long) dev;
1397
1398         return skb->len;
1399 }
1400
1401 static int nfc_genl_dump_ses_done(struct netlink_callback *cb)
1402 {
1403         struct class_dev_iter *iter = (struct class_dev_iter *) cb->args[0];
1404
1405         if (iter) {
1406                 nfc_device_iter_exit(iter);
1407                 kfree(iter);
1408         }
1409
1410         return 0;
1411 }
1412
1413 static int nfc_se_io(struct nfc_dev *dev, u32 se_idx,
1414                      u8 *apdu, size_t apdu_length,
1415                      se_io_cb_t cb, void *cb_context)
1416 {
1417         struct nfc_se *se;
1418         int rc;
1419
1420         pr_debug("%s se index %d\n", dev_name(&dev->dev), se_idx);
1421
1422         device_lock(&dev->dev);
1423
1424         if (!device_is_registered(&dev->dev)) {
1425                 rc = -ENODEV;
1426                 goto error;
1427         }
1428
1429         if (!dev->dev_up) {
1430                 rc = -ENODEV;
1431                 goto error;
1432         }
1433
1434         if (!dev->ops->se_io) {
1435                 rc = -EOPNOTSUPP;
1436                 goto error;
1437         }
1438
1439         se = nfc_find_se(dev, se_idx);
1440         if (!se) {
1441                 rc = -EINVAL;
1442                 goto error;
1443         }
1444
1445         if (se->state != NFC_SE_ENABLED) {
1446                 rc = -ENODEV;
1447                 goto error;
1448         }
1449
1450         rc = dev->ops->se_io(dev, se_idx, apdu,
1451                         apdu_length, cb, cb_context);
1452
1453 error:
1454         device_unlock(&dev->dev);
1455         return rc;
1456 }
1457
1458 struct se_io_ctx {
1459         u32 dev_idx;
1460         u32 se_idx;
1461 };
1462
1463 static void se_io_cb(void *context, u8 *apdu, size_t apdu_len, int err)
1464 {
1465         struct se_io_ctx *ctx = context;
1466         struct sk_buff *msg;
1467         void *hdr;
1468
1469         msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
1470         if (!msg) {
1471                 kfree(ctx);
1472                 return;
1473         }
1474
1475         hdr = genlmsg_put(msg, 0, 0, &nfc_genl_family, 0,
1476                           NFC_CMD_SE_IO);
1477         if (!hdr)
1478                 goto free_msg;
1479
1480         if (nla_put_u32(msg, NFC_ATTR_DEVICE_INDEX, ctx->dev_idx) ||
1481             nla_put_u32(msg, NFC_ATTR_SE_INDEX, ctx->se_idx) ||
1482             nla_put(msg, NFC_ATTR_SE_APDU, apdu_len, apdu))
1483                 goto nla_put_failure;
1484
1485         genlmsg_end(msg, hdr);
1486
1487         genlmsg_multicast(&nfc_genl_family, msg, 0, 0, GFP_KERNEL);
1488
1489         kfree(ctx);
1490
1491         return;
1492
1493 nla_put_failure:
1494 free_msg:
1495         nlmsg_free(msg);
1496         kfree(ctx);
1497
1498         return;
1499 }
1500
1501 static int nfc_genl_se_io(struct sk_buff *skb, struct genl_info *info)
1502 {
1503         struct nfc_dev *dev;
1504         struct se_io_ctx *ctx;
1505         u32 dev_idx, se_idx;
1506         u8 *apdu;
1507         size_t apdu_len;
1508
1509         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1510             !info->attrs[NFC_ATTR_SE_INDEX] ||
1511             !info->attrs[NFC_ATTR_SE_APDU])
1512                 return -EINVAL;
1513
1514         dev_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1515         se_idx = nla_get_u32(info->attrs[NFC_ATTR_SE_INDEX]);
1516
1517         dev = nfc_get_device(dev_idx);
1518         if (!dev)
1519                 return -ENODEV;
1520
1521         if (!dev->ops || !dev->ops->se_io)
1522                 return -ENOTSUPP;
1523
1524         apdu_len = nla_len(info->attrs[NFC_ATTR_SE_APDU]);
1525         if (apdu_len == 0)
1526                 return -EINVAL;
1527
1528         apdu = nla_data(info->attrs[NFC_ATTR_SE_APDU]);
1529         if (!apdu)
1530                 return -EINVAL;
1531
1532         ctx = kzalloc(sizeof(struct se_io_ctx), GFP_KERNEL);
1533         if (!ctx)
1534                 return -ENOMEM;
1535
1536         ctx->dev_idx = dev_idx;
1537         ctx->se_idx = se_idx;
1538
1539         return nfc_se_io(dev, se_idx, apdu, apdu_len, se_io_cb, ctx);
1540 }
1541
1542 static int nfc_genl_vendor_cmd(struct sk_buff *skb,
1543                                struct genl_info *info)
1544 {
1545         struct nfc_dev *dev;
1546         struct nfc_vendor_cmd *cmd;
1547         u32 dev_idx, vid, subcmd;
1548         u8 *data;
1549         size_t data_len;
1550         int i, err;
1551
1552         if (!info->attrs[NFC_ATTR_DEVICE_INDEX] ||
1553             !info->attrs[NFC_ATTR_VENDOR_ID] ||
1554             !info->attrs[NFC_ATTR_VENDOR_SUBCMD])
1555                 return -EINVAL;
1556
1557         dev_idx = nla_get_u32(info->attrs[NFC_ATTR_DEVICE_INDEX]);
1558         vid = nla_get_u32(info->attrs[NFC_ATTR_VENDOR_ID]);
1559         subcmd = nla_get_u32(info->attrs[NFC_ATTR_VENDOR_SUBCMD]);
1560
1561         dev = nfc_get_device(dev_idx);
1562         if (!dev || !dev->vendor_cmds || !dev->n_vendor_cmds)
1563                 return -ENODEV;
1564
1565         if (info->attrs[NFC_ATTR_VENDOR_DATA]) {
1566                 data = nla_data(info->attrs[NFC_ATTR_VENDOR_DATA]);
1567                 data_len = nla_len(info->attrs[NFC_ATTR_VENDOR_DATA]);
1568                 if (data_len == 0)
1569                         return -EINVAL;
1570         } else {
1571                 data = NULL;
1572                 data_len = 0;
1573         }
1574
1575         for (i = 0; i < dev->n_vendor_cmds; i++) {
1576                 cmd = &dev->vendor_cmds[i];
1577
1578                 if (cmd->vendor_id != vid || cmd->subcmd != subcmd)
1579                         continue;
1580
1581                 dev->cur_cmd_info = info;
1582                 err = cmd->doit(dev, data, data_len);
1583                 dev->cur_cmd_info = NULL;
1584                 return err;
1585         }
1586
1587         return -EOPNOTSUPP;
1588 }
1589
1590 /* message building helper */
1591 static inline void *nfc_hdr_put(struct sk_buff *skb, u32 portid, u32 seq,
1592                                 int flags, u8 cmd)
1593 {
1594         /* since there is no private header just add the generic one */
1595         return genlmsg_put(skb, portid, seq, &nfc_genl_family, flags, cmd);
1596 }
1597
1598 static struct sk_buff *
1599 __nfc_alloc_vendor_cmd_skb(struct nfc_dev *dev, int approxlen,
1600                            u32 portid, u32 seq,
1601                            enum nfc_attrs attr,
1602                            u32 oui, u32 subcmd, gfp_t gfp)
1603 {
1604         struct sk_buff *skb;
1605         void *hdr;
1606
1607         skb = nlmsg_new(approxlen + 100, gfp);
1608         if (!skb)
1609                 return NULL;
1610
1611         hdr = nfc_hdr_put(skb, portid, seq, 0, NFC_CMD_VENDOR);
1612         if (!hdr) {
1613                 kfree_skb(skb);
1614                 return NULL;
1615         }
1616
1617         if (nla_put_u32(skb, NFC_ATTR_DEVICE_INDEX, dev->idx))
1618                 goto nla_put_failure;
1619         if (nla_put_u32(skb, NFC_ATTR_VENDOR_ID, oui))
1620                 goto nla_put_failure;
1621         if (nla_put_u32(skb, NFC_ATTR_VENDOR_SUBCMD, subcmd))
1622                 goto nla_put_failure;
1623
1624         ((void **)skb->cb)[0] = dev;
1625         ((void **)skb->cb)[1] = hdr;
1626
1627         return skb;
1628
1629 nla_put_failure:
1630         kfree_skb(skb);
1631         return NULL;
1632 }
1633
1634 struct sk_buff *__nfc_alloc_vendor_cmd_reply_skb(struct nfc_dev *dev,
1635                                                  enum nfc_attrs attr,
1636                                                  u32 oui, u32 subcmd,
1637                                                  int approxlen)
1638 {
1639         if (WARN_ON(!dev->cur_cmd_info))
1640                 return NULL;
1641
1642         return __nfc_alloc_vendor_cmd_skb(dev, approxlen,
1643                                           dev->cur_cmd_info->snd_portid,
1644                                           dev->cur_cmd_info->snd_seq, attr,
1645                                           oui, subcmd, GFP_KERNEL);
1646 }
1647 EXPORT_SYMBOL(__nfc_alloc_vendor_cmd_reply_skb);
1648
1649 int nfc_vendor_cmd_reply(struct sk_buff *skb)
1650 {
1651         struct nfc_dev *dev = ((void **)skb->cb)[0];
1652         void *hdr = ((void **)skb->cb)[1];
1653
1654         /* clear CB data for netlink core to own from now on */
1655         memset(skb->cb, 0, sizeof(skb->cb));
1656
1657         if (WARN_ON(!dev->cur_cmd_info)) {
1658                 kfree_skb(skb);
1659                 return -EINVAL;
1660         }
1661
1662         genlmsg_end(skb, hdr);
1663         return genlmsg_reply(skb, dev->cur_cmd_info);
1664 }
1665 EXPORT_SYMBOL(nfc_vendor_cmd_reply);
1666
1667 static const struct genl_ops nfc_genl_ops[] = {
1668         {
1669                 .cmd = NFC_CMD_GET_DEVICE,
1670                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1671                 .doit = nfc_genl_get_device,
1672                 .dumpit = nfc_genl_dump_devices,
1673                 .done = nfc_genl_dump_devices_done,
1674         },
1675         {
1676                 .cmd = NFC_CMD_DEV_UP,
1677                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1678                 .doit = nfc_genl_dev_up,
1679         },
1680         {
1681                 .cmd = NFC_CMD_DEV_DOWN,
1682                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1683                 .doit = nfc_genl_dev_down,
1684         },
1685         {
1686                 .cmd = NFC_CMD_START_POLL,
1687                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1688                 .doit = nfc_genl_start_poll,
1689         },
1690         {
1691                 .cmd = NFC_CMD_STOP_POLL,
1692                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1693                 .doit = nfc_genl_stop_poll,
1694         },
1695         {
1696                 .cmd = NFC_CMD_DEP_LINK_UP,
1697                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1698                 .doit = nfc_genl_dep_link_up,
1699         },
1700         {
1701                 .cmd = NFC_CMD_DEP_LINK_DOWN,
1702                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1703                 .doit = nfc_genl_dep_link_down,
1704         },
1705         {
1706                 .cmd = NFC_CMD_GET_TARGET,
1707                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1708                 .dumpit = nfc_genl_dump_targets,
1709                 .done = nfc_genl_dump_targets_done,
1710         },
1711         {
1712                 .cmd = NFC_CMD_LLC_GET_PARAMS,
1713                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1714                 .doit = nfc_genl_llc_get_params,
1715         },
1716         {
1717                 .cmd = NFC_CMD_LLC_SET_PARAMS,
1718                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1719                 .doit = nfc_genl_llc_set_params,
1720         },
1721         {
1722                 .cmd = NFC_CMD_LLC_SDREQ,
1723                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1724                 .doit = nfc_genl_llc_sdreq,
1725         },
1726         {
1727                 .cmd = NFC_CMD_FW_DOWNLOAD,
1728                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1729                 .doit = nfc_genl_fw_download,
1730         },
1731         {
1732                 .cmd = NFC_CMD_ENABLE_SE,
1733                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1734                 .doit = nfc_genl_enable_se,
1735         },
1736         {
1737                 .cmd = NFC_CMD_DISABLE_SE,
1738                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1739                 .doit = nfc_genl_disable_se,
1740         },
1741         {
1742                 .cmd = NFC_CMD_GET_SE,
1743                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1744                 .dumpit = nfc_genl_dump_ses,
1745                 .done = nfc_genl_dump_ses_done,
1746         },
1747         {
1748                 .cmd = NFC_CMD_SE_IO,
1749                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1750                 .doit = nfc_genl_se_io,
1751         },
1752         {
1753                 .cmd = NFC_CMD_ACTIVATE_TARGET,
1754                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1755                 .doit = nfc_genl_activate_target,
1756         },
1757         {
1758                 .cmd = NFC_CMD_VENDOR,
1759                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1760                 .doit = nfc_genl_vendor_cmd,
1761         },
1762         {
1763                 .cmd = NFC_CMD_DEACTIVATE_TARGET,
1764                 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
1765                 .doit = nfc_genl_deactivate_target,
1766         },
1767 };
1768
1769 static struct genl_family nfc_genl_family __ro_after_init = {
1770         .hdrsize = 0,
1771         .name = NFC_GENL_NAME,
1772         .version = NFC_GENL_VERSION,
1773         .maxattr = NFC_ATTR_MAX,
1774         .policy = nfc_genl_policy,
1775         .module = THIS_MODULE,
1776         .ops = nfc_genl_ops,
1777         .n_ops = ARRAY_SIZE(nfc_genl_ops),
1778         .mcgrps = nfc_genl_mcgrps,
1779         .n_mcgrps = ARRAY_SIZE(nfc_genl_mcgrps),
1780 };
1781
1782
1783 struct urelease_work {
1784         struct  work_struct w;
1785         u32     portid;
1786 };
1787
1788 static void nfc_urelease_event_work(struct work_struct *work)
1789 {
1790         struct urelease_work *w = container_of(work, struct urelease_work, w);
1791         struct class_dev_iter iter;
1792         struct nfc_dev *dev;
1793
1794         pr_debug("portid %d\n", w->portid);
1795
1796         mutex_lock(&nfc_devlist_mutex);
1797
1798         nfc_device_iter_init(&iter);
1799         dev = nfc_device_iter_next(&iter);
1800
1801         while (dev) {
1802                 mutex_lock(&dev->genl_data.genl_data_mutex);
1803
1804                 if (dev->genl_data.poll_req_portid == w->portid) {
1805                         nfc_stop_poll(dev);
1806                         dev->genl_data.poll_req_portid = 0;
1807                 }
1808
1809                 mutex_unlock(&dev->genl_data.genl_data_mutex);
1810
1811                 dev = nfc_device_iter_next(&iter);
1812         }
1813
1814         nfc_device_iter_exit(&iter);
1815
1816         mutex_unlock(&nfc_devlist_mutex);
1817
1818         kfree(w);
1819 }
1820
1821 static int nfc_genl_rcv_nl_event(struct notifier_block *this,
1822                                  unsigned long event, void *ptr)
1823 {
1824         struct netlink_notify *n = ptr;
1825         struct urelease_work *w;
1826
1827         if (event != NETLINK_URELEASE || n->protocol != NETLINK_GENERIC)
1828                 goto out;
1829
1830         pr_debug("NETLINK_URELEASE event from id %d\n", n->portid);
1831
1832         w = kmalloc(sizeof(*w), GFP_ATOMIC);
1833         if (w) {
1834                 INIT_WORK((struct work_struct *) w, nfc_urelease_event_work);
1835                 w->portid = n->portid;
1836                 schedule_work((struct work_struct *) w);
1837         }
1838
1839 out:
1840         return NOTIFY_DONE;
1841 }
1842
1843 void nfc_genl_data_init(struct nfc_genl_data *genl_data)
1844 {
1845         genl_data->poll_req_portid = 0;
1846         mutex_init(&genl_data->genl_data_mutex);
1847 }
1848
1849 void nfc_genl_data_exit(struct nfc_genl_data *genl_data)
1850 {
1851         mutex_destroy(&genl_data->genl_data_mutex);
1852 }
1853
1854 static struct notifier_block nl_notifier = {
1855         .notifier_call  = nfc_genl_rcv_nl_event,
1856 };
1857
1858 /**
1859  * nfc_genl_init() - Initialize netlink interface
1860  *
1861  * This initialization function registers the nfc netlink family.
1862  */
1863 int __init nfc_genl_init(void)
1864 {
1865         int rc;
1866
1867         rc = genl_register_family(&nfc_genl_family);
1868         if (rc)
1869                 return rc;
1870
1871         netlink_register_notifier(&nl_notifier);
1872
1873         return 0;
1874 }
1875
1876 /**
1877  * nfc_genl_exit() - Deinitialize netlink interface
1878  *
1879  * This exit function unregisters the nfc netlink family.
1880  */
1881 void nfc_genl_exit(void)
1882 {
1883         netlink_unregister_notifier(&nl_notifier);
1884         genl_unregister_family(&nfc_genl_family);
1885 }