1 /*
2 HIDP implementation for Linux Bluetooth stack (BlueZ).
3 Copyright (C) 2003-2004 Marcel Holtmann <marcel@holtmann.org>
4
5 This program is free software; you can redistribute it and/or modify
6 it under the terms of the GNU General Public License version 2 as
7 published by the Free Software Foundation;
8
9 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
10 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
11 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
12 IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
13 CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
14 WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
15 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
16 OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17
18 ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
19 COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
20 SOFTWARE IS DISCLAIMED.
21 */
22
23 #include <linux/module.h>
24
25 #include <linux/types.h>
26 #include <linux/capability.h>
27 #include <linux/errno.h>
28 #include <linux/kernel.h>
29 #include <linux/slab.h>
30 #include <linux/poll.h>
31 #include <linux/fcntl.h>
32 #include <linux/skbuff.h>
33 #include <linux/socket.h>
34 #include <linux/ioctl.h>
35 #include <linux/file.h>
36 #include <linux/init.h>
37 #include <linux/compat.h>
38 #include <net/sock.h>
39
40 #include "hidp.h"
41
hidp_sock_release(struct socket * sock)42 static int hidp_sock_release(struct socket *sock)
43 {
44 struct sock *sk = sock->sk;
45
46 BT_DBG("sock %p sk %p", sock, sk);
47
48 if (!sk)
49 return 0;
50
51 sock_orphan(sk);
52 sock_put(sk);
53
54 return 0;
55 }
56
hidp_sock_ioctl(struct socket * sock,unsigned int cmd,unsigned long arg)57 static int hidp_sock_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
58 {
59 void __user *argp = (void __user *) arg;
60 struct hidp_connadd_req ca;
61 struct hidp_conndel_req cd;
62 struct hidp_connlist_req cl;
63 struct hidp_conninfo ci;
64 struct socket *csock;
65 struct socket *isock;
66 int err;
67
68 BT_DBG("cmd %x arg %lx", cmd, arg);
69
70 switch (cmd) {
71 case HIDPCONNADD:
72 if (!capable(CAP_NET_ADMIN))
73 return -EACCES;
74
75 if (copy_from_user(&ca, argp, sizeof(ca)))
76 return -EFAULT;
77
78 csock = sockfd_lookup(ca.ctrl_sock, &err);
79 if (!csock)
80 return err;
81
82 isock = sockfd_lookup(ca.intr_sock, &err);
83 if (!isock) {
84 sockfd_put(csock);
85 return err;
86 }
87
88 if (csock->sk->sk_state != BT_CONNECTED || isock->sk->sk_state != BT_CONNECTED) {
89 sockfd_put(csock);
90 sockfd_put(isock);
91 return -EBADFD;
92 }
93
94 err = hidp_add_connection(&ca, csock, isock);
95 if (!err) {
96 if (copy_to_user(argp, &ca, sizeof(ca)))
97 err = -EFAULT;
98 } else {
99 sockfd_put(csock);
100 sockfd_put(isock);
101 }
102
103 return err;
104
105 case HIDPCONNDEL:
106 if (!capable(CAP_NET_ADMIN))
107 return -EACCES;
108
109 if (copy_from_user(&cd, argp, sizeof(cd)))
110 return -EFAULT;
111
112 return hidp_del_connection(&cd);
113
114 case HIDPGETCONNLIST:
115 if (copy_from_user(&cl, argp, sizeof(cl)))
116 return -EFAULT;
117
118 if (cl.cnum <= 0)
119 return -EINVAL;
120
121 err = hidp_get_connlist(&cl);
122 if (!err && copy_to_user(argp, &cl, sizeof(cl)))
123 return -EFAULT;
124
125 return err;
126
127 case HIDPGETCONNINFO:
128 if (copy_from_user(&ci, argp, sizeof(ci)))
129 return -EFAULT;
130
131 err = hidp_get_conninfo(&ci);
132 if (!err && copy_to_user(argp, &ci, sizeof(ci)))
133 return -EFAULT;
134
135 return err;
136 }
137
138 return -EINVAL;
139 }
140
141 #ifdef CONFIG_COMPAT
142 struct compat_hidp_connadd_req {
143 int ctrl_sock; // Connected control socket
144 int intr_sock; // Connteted interrupt socket
145 __u16 parser;
146 __u16 rd_size;
147 compat_uptr_t rd_data;
148 __u8 country;
149 __u8 subclass;
150 __u16 vendor;
151 __u16 product;
152 __u16 version;
153 __u32 flags;
154 __u32 idle_to;
155 char name[128];
156 };
157
hidp_sock_compat_ioctl(struct socket * sock,unsigned int cmd,unsigned long arg)158 static int hidp_sock_compat_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
159 {
160 if (cmd == HIDPGETCONNLIST) {
161 struct hidp_connlist_req cl;
162 uint32_t uci;
163 int err;
164
165 if (get_user(cl.cnum, (uint32_t __user *) arg) ||
166 get_user(uci, (u32 __user *) (arg + 4)))
167 return -EFAULT;
168
169 cl.ci = compat_ptr(uci);
170
171 if (cl.cnum <= 0)
172 return -EINVAL;
173
174 err = hidp_get_connlist(&cl);
175
176 if (!err && put_user(cl.cnum, (uint32_t __user *) arg))
177 err = -EFAULT;
178
179 return err;
180 } else if (cmd == HIDPCONNADD) {
181 struct compat_hidp_connadd_req ca;
182 struct hidp_connadd_req __user *uca;
183
184 uca = compat_alloc_user_space(sizeof(*uca));
185
186 if (copy_from_user(&ca, (void __user *) arg, sizeof(ca)))
187 return -EFAULT;
188
189 if (put_user(ca.ctrl_sock, &uca->ctrl_sock) ||
190 put_user(ca.intr_sock, &uca->intr_sock) ||
191 put_user(ca.parser, &uca->parser) ||
192 put_user(ca.rd_size, &uca->rd_size) ||
193 put_user(compat_ptr(ca.rd_data), &uca->rd_data) ||
194 put_user(ca.country, &uca->country) ||
195 put_user(ca.subclass, &uca->subclass) ||
196 put_user(ca.vendor, &uca->vendor) ||
197 put_user(ca.product, &uca->product) ||
198 put_user(ca.version, &uca->version) ||
199 put_user(ca.flags, &uca->flags) ||
200 put_user(ca.idle_to, &uca->idle_to) ||
201 copy_to_user(&uca->name[0], &ca.name[0], 128))
202 return -EFAULT;
203
204 arg = (unsigned long) uca;
205
206 /* Fall through. We don't actually write back any _changes_
207 to the structure anyway, so there's no need to copy back
208 into the original compat version */
209 }
210
211 return hidp_sock_ioctl(sock, cmd, arg);
212 }
213 #endif
214
215 static const struct proto_ops hidp_sock_ops = {
216 .family = PF_BLUETOOTH,
217 .owner = THIS_MODULE,
218 .release = hidp_sock_release,
219 .ioctl = hidp_sock_ioctl,
220 #ifdef CONFIG_COMPAT
221 .compat_ioctl = hidp_sock_compat_ioctl,
222 #endif
223 .bind = sock_no_bind,
224 .getname = sock_no_getname,
225 .sendmsg = sock_no_sendmsg,
226 .recvmsg = sock_no_recvmsg,
227 .poll = sock_no_poll,
228 .listen = sock_no_listen,
229 .shutdown = sock_no_shutdown,
230 .setsockopt = sock_no_setsockopt,
231 .getsockopt = sock_no_getsockopt,
232 .connect = sock_no_connect,
233 .socketpair = sock_no_socketpair,
234 .accept = sock_no_accept,
235 .mmap = sock_no_mmap
236 };
237
238 static struct proto hidp_proto = {
239 .name = "HIDP",
240 .owner = THIS_MODULE,
241 .obj_size = sizeof(struct bt_sock)
242 };
243
hidp_sock_create(struct net * net,struct socket * sock,int protocol)244 static int hidp_sock_create(struct net *net, struct socket *sock, int protocol)
245 {
246 struct sock *sk;
247
248 BT_DBG("sock %p", sock);
249
250 if (sock->type != SOCK_RAW)
251 return -ESOCKTNOSUPPORT;
252
253 sk = sk_alloc(net, PF_BLUETOOTH, GFP_ATOMIC, &hidp_proto);
254 if (!sk)
255 return -ENOMEM;
256
257 sock_init_data(sock, sk);
258
259 sock->ops = &hidp_sock_ops;
260
261 sock->state = SS_UNCONNECTED;
262
263 sock_reset_flag(sk, SOCK_ZAPPED);
264
265 sk->sk_protocol = protocol;
266 sk->sk_state = BT_OPEN;
267
268 return 0;
269 }
270
271 static struct net_proto_family hidp_sock_family_ops = {
272 .family = PF_BLUETOOTH,
273 .owner = THIS_MODULE,
274 .create = hidp_sock_create
275 };
276
hidp_init_sockets(void)277 int __init hidp_init_sockets(void)
278 {
279 int err;
280
281 err = proto_register(&hidp_proto, 0);
282 if (err < 0)
283 return err;
284
285 err = bt_sock_register(BTPROTO_HIDP, &hidp_sock_family_ops);
286 if (err < 0)
287 goto error;
288
289 return 0;
290
291 error:
292 BT_ERR("Can't register HIDP socket");
293 proto_unregister(&hidp_proto);
294 return err;
295 }
296
hidp_cleanup_sockets(void)297 void __exit hidp_cleanup_sockets(void)
298 {
299 if (bt_sock_unregister(BTPROTO_HIDP) < 0)
300 BT_ERR("Can't unregister HIDP socket");
301
302 proto_unregister(&hidp_proto);
303 }
304