1 /* 2 * Copyright (C) 2012 Intel Corporation. All rights reserved. 3 * 4 * This program is free software; you can redistribute it and/or modify 5 * it under the terms of the GNU General Public License as published by 6 * the Free Software Foundation; either version 2 of the License, or 7 * (at your option) any later version. 8 * 9 * This program is distributed in the hope that it will be useful, 10 * but WITHOUT ANY WARRANTY; without even the implied warranty of 11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 12 * GNU General Public License for more details. 13 * 14 * You should have received a copy of the GNU General Public License 15 * along with this program; if not, see <http://www.gnu.org/licenses/>. 16 */ 17 18 #define pr_fmt(fmt) "hci: %s: " fmt, __func__ 19 20 #include <linux/init.h> 21 #include <linux/kernel.h> 22 #include <linux/module.h> 23 #include <linux/nfc.h> 24 25 #include <net/nfc/nfc.h> 26 #include <net/nfc/hci.h> 27 #include <net/nfc/llc.h> 28 29 #include "hci.h" 30 31 /* Largest headroom needed for outgoing HCI commands */ 32 #define HCI_CMDS_HEADROOM 1 33 34 int nfc_hci_result_to_errno(u8 result) 35 { 36 switch (result) { 37 case NFC_HCI_ANY_OK: 38 return 0; 39 case NFC_HCI_ANY_E_REG_PAR_UNKNOWN: 40 return -EOPNOTSUPP; 41 case NFC_HCI_ANY_E_TIMEOUT: 42 return -ETIME; 43 default: 44 return -1; 45 } 46 } 47 EXPORT_SYMBOL(nfc_hci_result_to_errno); 48 49 static void nfc_hci_msg_tx_work(struct work_struct *work) 50 { 51 struct nfc_hci_dev *hdev = container_of(work, struct nfc_hci_dev, 52 msg_tx_work); 53 struct hci_msg *msg; 54 struct sk_buff *skb; 55 int r = 0; 56 57 mutex_lock(&hdev->msg_tx_mutex); 58 if (hdev->shutting_down) 59 goto exit; 60 61 if (hdev->cmd_pending_msg) { 62 if (timer_pending(&hdev->cmd_timer) == 0) { 63 if (hdev->cmd_pending_msg->cb) 64 hdev->cmd_pending_msg->cb(hdev-> 65 cmd_pending_msg-> 66 cb_context, 67 NULL, 68 -ETIME); 69 kfree(hdev->cmd_pending_msg); 70 hdev->cmd_pending_msg = NULL; 71 } else { 72 goto exit; 73 } 74 } 75 76 next_msg: 77 if (list_empty(&hdev->msg_tx_queue)) 78 goto exit; 79 80 msg = list_first_entry(&hdev->msg_tx_queue, struct hci_msg, msg_l); 81 list_del(&msg->msg_l); 82 83 pr_debug("msg_tx_queue has a cmd to send\n"); 84 while ((skb = skb_dequeue(&msg->msg_frags)) != NULL) { 85 r = nfc_llc_xmit_from_hci(hdev->llc, skb); 86 if (r < 0) { 87 kfree_skb(skb); 88 skb_queue_purge(&msg->msg_frags); 89 if (msg->cb) 90 msg->cb(msg->cb_context, NULL, r); 91 kfree(msg); 92 break; 93 } 94 } 95 96 if (r) 97 goto next_msg; 98 99 if (msg->wait_response == false) { 100 kfree(msg); 101 goto next_msg; 102 } 103 104 hdev->cmd_pending_msg = msg; 105 mod_timer(&hdev->cmd_timer, jiffies + 106 msecs_to_jiffies(hdev->cmd_pending_msg->completion_delay)); 107 108 exit: 109 mutex_unlock(&hdev->msg_tx_mutex); 110 } 111 112 static void nfc_hci_msg_rx_work(struct work_struct *work) 113 { 114 struct nfc_hci_dev *hdev = container_of(work, struct nfc_hci_dev, 115 msg_rx_work); 116 struct sk_buff *skb; 117 struct hcp_message *message; 118 u8 pipe; 119 u8 type; 120 u8 instruction; 121 122 while ((skb = skb_dequeue(&hdev->msg_rx_queue)) != NULL) { 123 pipe = skb->data[0]; 124 skb_pull(skb, NFC_HCI_HCP_PACKET_HEADER_LEN); 125 message = (struct hcp_message *)skb->data; 126 type = HCP_MSG_GET_TYPE(message->header); 127 instruction = HCP_MSG_GET_CMD(message->header); 128 skb_pull(skb, NFC_HCI_HCP_MESSAGE_HEADER_LEN); 129 130 nfc_hci_hcp_message_rx(hdev, pipe, type, instruction, skb); 131 } 132 } 133 134 static void __nfc_hci_cmd_completion(struct nfc_hci_dev *hdev, int err, 135 struct sk_buff *skb) 136 { 137 del_timer_sync(&hdev->cmd_timer); 138 139 if (hdev->cmd_pending_msg->cb) 140 hdev->cmd_pending_msg->cb(hdev->cmd_pending_msg->cb_context, 141 skb, err); 142 else 143 kfree_skb(skb); 144 145 kfree(hdev->cmd_pending_msg); 146 hdev->cmd_pending_msg = NULL; 147 148 schedule_work(&hdev->msg_tx_work); 149 } 150 151 void nfc_hci_resp_received(struct nfc_hci_dev *hdev, u8 result, 152 struct sk_buff *skb) 153 { 154 mutex_lock(&hdev->msg_tx_mutex); 155 156 if (hdev->cmd_pending_msg == NULL) { 157 kfree_skb(skb); 158 goto exit; 159 } 160 161 __nfc_hci_cmd_completion(hdev, nfc_hci_result_to_errno(result), skb); 162 163 exit: 164 mutex_unlock(&hdev->msg_tx_mutex); 165 } 166 167 void nfc_hci_cmd_received(struct nfc_hci_dev *hdev, u8 pipe, u8 cmd, 168 struct sk_buff *skb) 169 { 170 kfree_skb(skb); 171 } 172 173 u32 nfc_hci_sak_to_protocol(u8 sak) 174 { 175 switch (NFC_HCI_TYPE_A_SEL_PROT(sak)) { 176 case NFC_HCI_TYPE_A_SEL_PROT_MIFARE: 177 return NFC_PROTO_MIFARE_MASK; 178 case NFC_HCI_TYPE_A_SEL_PROT_ISO14443: 179 return NFC_PROTO_ISO14443_MASK; 180 case NFC_HCI_TYPE_A_SEL_PROT_DEP: 181 return NFC_PROTO_NFC_DEP_MASK; 182 case NFC_HCI_TYPE_A_SEL_PROT_ISO14443_DEP: 183 return NFC_PROTO_ISO14443_MASK | NFC_PROTO_NFC_DEP_MASK; 184 default: 185 return 0xffffffff; 186 } 187 } 188 EXPORT_SYMBOL(nfc_hci_sak_to_protocol); 189 190 int nfc_hci_target_discovered(struct nfc_hci_dev *hdev, u8 gate) 191 { 192 struct nfc_target *targets; 193 struct sk_buff *atqa_skb = NULL; 194 struct sk_buff *sak_skb = NULL; 195 struct sk_buff *uid_skb = NULL; 196 int r; 197 198 pr_debug("from gate %d\n", gate); 199 200 targets = kzalloc(sizeof(struct nfc_target), GFP_KERNEL); 201 if (targets == NULL) 202 return -ENOMEM; 203 204 switch (gate) { 205 case NFC_HCI_RF_READER_A_GATE: 206 r = nfc_hci_get_param(hdev, NFC_HCI_RF_READER_A_GATE, 207 NFC_HCI_RF_READER_A_ATQA, &atqa_skb); 208 if (r < 0) 209 goto exit; 210 211 r = nfc_hci_get_param(hdev, NFC_HCI_RF_READER_A_GATE, 212 NFC_HCI_RF_READER_A_SAK, &sak_skb); 213 if (r < 0) 214 goto exit; 215 216 if (atqa_skb->len != 2 || sak_skb->len != 1) { 217 r = -EPROTO; 218 goto exit; 219 } 220 221 targets->supported_protocols = 222 nfc_hci_sak_to_protocol(sak_skb->data[0]); 223 if (targets->supported_protocols == 0xffffffff) { 224 r = -EPROTO; 225 goto exit; 226 } 227 228 targets->sens_res = be16_to_cpu(*(u16 *)atqa_skb->data); 229 targets->sel_res = sak_skb->data[0]; 230 231 r = nfc_hci_get_param(hdev, NFC_HCI_RF_READER_A_GATE, 232 NFC_HCI_RF_READER_A_UID, &uid_skb); 233 if (r < 0) 234 goto exit; 235 236 if (uid_skb->len == 0 || uid_skb->len > NFC_NFCID1_MAXSIZE) { 237 r = -EPROTO; 238 goto exit; 239 } 240 241 memcpy(targets->nfcid1, uid_skb->data, uid_skb->len); 242 targets->nfcid1_len = uid_skb->len; 243 244 if (hdev->ops->complete_target_discovered) { 245 r = hdev->ops->complete_target_discovered(hdev, gate, 246 targets); 247 if (r < 0) 248 goto exit; 249 } 250 break; 251 case NFC_HCI_RF_READER_B_GATE: 252 targets->supported_protocols = NFC_PROTO_ISO14443_B_MASK; 253 break; 254 default: 255 if (hdev->ops->target_from_gate) 256 r = hdev->ops->target_from_gate(hdev, gate, targets); 257 else 258 r = -EPROTO; 259 if (r < 0) 260 goto exit; 261 262 if (hdev->ops->complete_target_discovered) { 263 r = hdev->ops->complete_target_discovered(hdev, gate, 264 targets); 265 if (r < 0) 266 goto exit; 267 } 268 break; 269 } 270 271 /* if driver set the new gate, we will skip the old one */ 272 if (targets->hci_reader_gate == 0x00) 273 targets->hci_reader_gate = gate; 274 275 r = nfc_targets_found(hdev->ndev, targets, 1); 276 277 exit: 278 kfree(targets); 279 kfree_skb(atqa_skb); 280 kfree_skb(sak_skb); 281 kfree_skb(uid_skb); 282 283 return r; 284 } 285 EXPORT_SYMBOL(nfc_hci_target_discovered); 286 287 void nfc_hci_event_received(struct nfc_hci_dev *hdev, u8 pipe, u8 event, 288 struct sk_buff *skb) 289 { 290 int r = 0; 291 u8 gate = nfc_hci_pipe2gate(hdev, pipe); 292 293 if (gate == 0xff) { 294 pr_err("Discarded event %x to unopened pipe %x\n", event, pipe); 295 goto exit; 296 } 297 298 if (hdev->ops->event_received) { 299 r = hdev->ops->event_received(hdev, gate, event, skb); 300 if (r <= 0) 301 goto exit_noskb; 302 } 303 304 switch (event) { 305 case NFC_HCI_EVT_TARGET_DISCOVERED: 306 if (skb->len < 1) { /* no status data? */ 307 r = -EPROTO; 308 goto exit; 309 } 310 311 if (skb->data[0] == 3) { 312 /* TODO: Multiple targets in field, none activated 313 * poll is supposedly stopped, but there is no 314 * single target to activate, so nothing to report 315 * up. 316 * if we need to restart poll, we must save the 317 * protocols from the initial poll and reuse here. 318 */ 319 } 320 321 if (skb->data[0] != 0) { 322 r = -EPROTO; 323 goto exit; 324 } 325 326 r = nfc_hci_target_discovered(hdev, gate); 327 break; 328 default: 329 pr_info("Discarded unknown event %x to gate %x\n", event, gate); 330 r = -EINVAL; 331 break; 332 } 333 334 exit: 335 kfree_skb(skb); 336 337 exit_noskb: 338 if (r) { 339 /* TODO: There was an error dispatching the event, 340 * how to propagate up to nfc core? 341 */ 342 } 343 } 344 345 static void nfc_hci_cmd_timeout(unsigned long data) 346 { 347 struct nfc_hci_dev *hdev = (struct nfc_hci_dev *)data; 348 349 schedule_work(&hdev->msg_tx_work); 350 } 351 352 static int hci_dev_connect_gates(struct nfc_hci_dev *hdev, u8 gate_count, 353 struct nfc_hci_gate *gates) 354 { 355 int r; 356 while (gate_count--) { 357 r = nfc_hci_connect_gate(hdev, NFC_HCI_HOST_CONTROLLER_ID, 358 gates->gate, gates->pipe); 359 if (r < 0) 360 return r; 361 gates++; 362 } 363 364 return 0; 365 } 366 367 static int hci_dev_session_init(struct nfc_hci_dev *hdev) 368 { 369 struct sk_buff *skb = NULL; 370 int r; 371 372 if (hdev->init_data.gates[0].gate != NFC_HCI_ADMIN_GATE) 373 return -EPROTO; 374 375 r = nfc_hci_connect_gate(hdev, NFC_HCI_HOST_CONTROLLER_ID, 376 hdev->init_data.gates[0].gate, 377 hdev->init_data.gates[0].pipe); 378 if (r < 0) 379 goto exit; 380 381 r = nfc_hci_get_param(hdev, NFC_HCI_ADMIN_GATE, 382 NFC_HCI_ADMIN_SESSION_IDENTITY, &skb); 383 if (r < 0) 384 goto disconnect_all; 385 386 if (skb->len && skb->len == strlen(hdev->init_data.session_id)) 387 if (memcmp(hdev->init_data.session_id, skb->data, 388 skb->len) == 0) { 389 /* TODO ELa: restore gate<->pipe table from 390 * some TBD location. 391 * note: it doesn't seem possible to get the chip 392 * currently open gate/pipe table. 393 * It is only possible to obtain the supported 394 * gate list. 395 */ 396 397 /* goto exit 398 * For now, always do a full initialization */ 399 } 400 401 r = nfc_hci_disconnect_all_gates(hdev); 402 if (r < 0) 403 goto exit; 404 405 r = hci_dev_connect_gates(hdev, hdev->init_data.gate_count, 406 hdev->init_data.gates); 407 if (r < 0) 408 goto disconnect_all; 409 410 r = nfc_hci_set_param(hdev, NFC_HCI_ADMIN_GATE, 411 NFC_HCI_ADMIN_SESSION_IDENTITY, 412 hdev->init_data.session_id, 413 strlen(hdev->init_data.session_id)); 414 if (r == 0) 415 goto exit; 416 417 disconnect_all: 418 nfc_hci_disconnect_all_gates(hdev); 419 420 exit: 421 kfree_skb(skb); 422 423 return r; 424 } 425 426 static int hci_dev_version(struct nfc_hci_dev *hdev) 427 { 428 int r; 429 struct sk_buff *skb; 430 431 r = nfc_hci_get_param(hdev, NFC_HCI_ID_MGMT_GATE, 432 NFC_HCI_ID_MGMT_VERSION_SW, &skb); 433 if (r == -EOPNOTSUPP) { 434 pr_info("Software/Hardware info not available\n"); 435 return 0; 436 } 437 if (r < 0) 438 return r; 439 440 if (skb->len != 3) { 441 kfree_skb(skb); 442 return -EINVAL; 443 } 444 445 hdev->sw_romlib = (skb->data[0] & 0xf0) >> 4; 446 hdev->sw_patch = skb->data[0] & 0x0f; 447 hdev->sw_flashlib_major = skb->data[1]; 448 hdev->sw_flashlib_minor = skb->data[2]; 449 450 kfree_skb(skb); 451 452 r = nfc_hci_get_param(hdev, NFC_HCI_ID_MGMT_GATE, 453 NFC_HCI_ID_MGMT_VERSION_HW, &skb); 454 if (r < 0) 455 return r; 456 457 if (skb->len != 3) { 458 kfree_skb(skb); 459 return -EINVAL; 460 } 461 462 hdev->hw_derivative = (skb->data[0] & 0xe0) >> 5; 463 hdev->hw_version = skb->data[0] & 0x1f; 464 hdev->hw_mpw = (skb->data[1] & 0xc0) >> 6; 465 hdev->hw_software = skb->data[1] & 0x3f; 466 hdev->hw_bsid = skb->data[2]; 467 468 kfree_skb(skb); 469 470 pr_info("SOFTWARE INFO:\n"); 471 pr_info("RomLib : %d\n", hdev->sw_romlib); 472 pr_info("Patch : %d\n", hdev->sw_patch); 473 pr_info("FlashLib Major : %d\n", hdev->sw_flashlib_major); 474 pr_info("FlashLib Minor : %d\n", hdev->sw_flashlib_minor); 475 pr_info("HARDWARE INFO:\n"); 476 pr_info("Derivative : %d\n", hdev->hw_derivative); 477 pr_info("HW Version : %d\n", hdev->hw_version); 478 pr_info("#MPW : %d\n", hdev->hw_mpw); 479 pr_info("Software : %d\n", hdev->hw_software); 480 pr_info("BSID Version : %d\n", hdev->hw_bsid); 481 482 return 0; 483 } 484 485 static int hci_dev_up(struct nfc_dev *nfc_dev) 486 { 487 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 488 int r = 0; 489 490 if (hdev->ops->open) { 491 r = hdev->ops->open(hdev); 492 if (r < 0) 493 return r; 494 } 495 496 r = nfc_llc_start(hdev->llc); 497 if (r < 0) 498 goto exit_close; 499 500 r = hci_dev_session_init(hdev); 501 if (r < 0) 502 goto exit_llc; 503 504 r = nfc_hci_send_event(hdev, NFC_HCI_RF_READER_A_GATE, 505 NFC_HCI_EVT_END_OPERATION, NULL, 0); 506 if (r < 0) 507 goto exit_llc; 508 509 if (hdev->ops->hci_ready) { 510 r = hdev->ops->hci_ready(hdev); 511 if (r < 0) 512 goto exit_llc; 513 } 514 515 r = hci_dev_version(hdev); 516 if (r < 0) 517 goto exit_llc; 518 519 return 0; 520 521 exit_llc: 522 nfc_llc_stop(hdev->llc); 523 524 exit_close: 525 if (hdev->ops->close) 526 hdev->ops->close(hdev); 527 528 return r; 529 } 530 531 static int hci_dev_down(struct nfc_dev *nfc_dev) 532 { 533 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 534 535 nfc_llc_stop(hdev->llc); 536 537 if (hdev->ops->close) 538 hdev->ops->close(hdev); 539 540 memset(hdev->gate2pipe, NFC_HCI_INVALID_PIPE, sizeof(hdev->gate2pipe)); 541 542 return 0; 543 } 544 545 static int hci_start_poll(struct nfc_dev *nfc_dev, 546 u32 im_protocols, u32 tm_protocols) 547 { 548 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 549 550 if (hdev->ops->start_poll) 551 return hdev->ops->start_poll(hdev, im_protocols, tm_protocols); 552 else 553 return nfc_hci_send_event(hdev, NFC_HCI_RF_READER_A_GATE, 554 NFC_HCI_EVT_READER_REQUESTED, 555 NULL, 0); 556 } 557 558 static void hci_stop_poll(struct nfc_dev *nfc_dev) 559 { 560 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 561 562 nfc_hci_send_event(hdev, NFC_HCI_RF_READER_A_GATE, 563 NFC_HCI_EVT_END_OPERATION, NULL, 0); 564 } 565 566 static int hci_dep_link_up(struct nfc_dev *nfc_dev, struct nfc_target *target, 567 __u8 comm_mode, __u8 *gb, size_t gb_len) 568 { 569 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 570 571 if (!hdev->ops->dep_link_up) 572 return 0; 573 574 return hdev->ops->dep_link_up(hdev, target, comm_mode, 575 gb, gb_len); 576 } 577 578 static int hci_dep_link_down(struct nfc_dev *nfc_dev) 579 { 580 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 581 582 if (!hdev->ops->dep_link_down) 583 return 0; 584 585 return hdev->ops->dep_link_down(hdev); 586 } 587 588 static int hci_activate_target(struct nfc_dev *nfc_dev, 589 struct nfc_target *target, u32 protocol) 590 { 591 return 0; 592 } 593 594 static void hci_deactivate_target(struct nfc_dev *nfc_dev, 595 struct nfc_target *target) 596 { 597 } 598 599 #define HCI_CB_TYPE_TRANSCEIVE 1 600 601 static void hci_transceive_cb(void *context, struct sk_buff *skb, int err) 602 { 603 struct nfc_hci_dev *hdev = context; 604 605 switch (hdev->async_cb_type) { 606 case HCI_CB_TYPE_TRANSCEIVE: 607 /* 608 * TODO: Check RF Error indicator to make sure data is valid. 609 * It seems that HCI cmd can complete without error, but data 610 * can be invalid if an RF error occured? Ignore for now. 611 */ 612 if (err == 0) 613 skb_trim(skb, skb->len - 1); /* RF Err ind */ 614 615 hdev->async_cb(hdev->async_cb_context, skb, err); 616 break; 617 default: 618 if (err == 0) 619 kfree_skb(skb); 620 break; 621 } 622 } 623 624 static int hci_transceive(struct nfc_dev *nfc_dev, struct nfc_target *target, 625 struct sk_buff *skb, data_exchange_cb_t cb, 626 void *cb_context) 627 { 628 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 629 int r; 630 631 pr_debug("target_idx=%d\n", target->idx); 632 633 switch (target->hci_reader_gate) { 634 case NFC_HCI_RF_READER_A_GATE: 635 case NFC_HCI_RF_READER_B_GATE: 636 if (hdev->ops->im_transceive) { 637 r = hdev->ops->im_transceive(hdev, target, skb, cb, 638 cb_context); 639 if (r <= 0) /* handled */ 640 break; 641 } 642 643 *skb_push(skb, 1) = 0; /* CTR, see spec:10.2.2.1 */ 644 645 hdev->async_cb_type = HCI_CB_TYPE_TRANSCEIVE; 646 hdev->async_cb = cb; 647 hdev->async_cb_context = cb_context; 648 649 r = nfc_hci_send_cmd_async(hdev, target->hci_reader_gate, 650 NFC_HCI_WR_XCHG_DATA, skb->data, 651 skb->len, hci_transceive_cb, hdev); 652 break; 653 default: 654 if (hdev->ops->im_transceive) { 655 r = hdev->ops->im_transceive(hdev, target, skb, cb, 656 cb_context); 657 if (r == 1) 658 r = -ENOTSUPP; 659 } else { 660 r = -ENOTSUPP; 661 } 662 break; 663 } 664 665 kfree_skb(skb); 666 667 return r; 668 } 669 670 static int hci_tm_send(struct nfc_dev *nfc_dev, struct sk_buff *skb) 671 { 672 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 673 674 if (!hdev->ops->tm_send) { 675 kfree_skb(skb); 676 return -ENOTSUPP; 677 } 678 679 return hdev->ops->tm_send(hdev, skb); 680 } 681 682 static int hci_check_presence(struct nfc_dev *nfc_dev, 683 struct nfc_target *target) 684 { 685 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 686 687 if (!hdev->ops->check_presence) 688 return 0; 689 690 return hdev->ops->check_presence(hdev, target); 691 } 692 693 static int hci_discover_se(struct nfc_dev *nfc_dev) 694 { 695 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 696 697 if (hdev->ops->discover_se) 698 return hdev->ops->discover_se(hdev); 699 700 return 0; 701 } 702 703 static int hci_enable_se(struct nfc_dev *nfc_dev, u32 se_idx) 704 { 705 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 706 707 if (hdev->ops->enable_se) 708 return hdev->ops->enable_se(hdev, se_idx); 709 710 return 0; 711 } 712 713 static int hci_disable_se(struct nfc_dev *nfc_dev, u32 se_idx) 714 { 715 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 716 717 if (hdev->ops->disable_se) 718 return hdev->ops->disable_se(hdev, se_idx); 719 720 return 0; 721 } 722 723 static void nfc_hci_failure(struct nfc_hci_dev *hdev, int err) 724 { 725 mutex_lock(&hdev->msg_tx_mutex); 726 727 if (hdev->cmd_pending_msg == NULL) { 728 nfc_driver_failure(hdev->ndev, err); 729 goto exit; 730 } 731 732 __nfc_hci_cmd_completion(hdev, err, NULL); 733 734 exit: 735 mutex_unlock(&hdev->msg_tx_mutex); 736 } 737 738 static void nfc_hci_llc_failure(struct nfc_hci_dev *hdev, int err) 739 { 740 nfc_hci_failure(hdev, err); 741 } 742 743 static void nfc_hci_recv_from_llc(struct nfc_hci_dev *hdev, struct sk_buff *skb) 744 { 745 struct hcp_packet *packet; 746 u8 type; 747 u8 instruction; 748 struct sk_buff *hcp_skb; 749 u8 pipe; 750 struct sk_buff *frag_skb; 751 int msg_len; 752 753 packet = (struct hcp_packet *)skb->data; 754 if ((packet->header & ~NFC_HCI_FRAGMENT) == 0) { 755 skb_queue_tail(&hdev->rx_hcp_frags, skb); 756 return; 757 } 758 759 /* it's the last fragment. Does it need re-aggregation? */ 760 if (skb_queue_len(&hdev->rx_hcp_frags)) { 761 pipe = packet->header & NFC_HCI_FRAGMENT; 762 skb_queue_tail(&hdev->rx_hcp_frags, skb); 763 764 msg_len = 0; 765 skb_queue_walk(&hdev->rx_hcp_frags, frag_skb) { 766 msg_len += (frag_skb->len - 767 NFC_HCI_HCP_PACKET_HEADER_LEN); 768 } 769 770 hcp_skb = nfc_alloc_recv_skb(NFC_HCI_HCP_PACKET_HEADER_LEN + 771 msg_len, GFP_KERNEL); 772 if (hcp_skb == NULL) { 773 nfc_hci_failure(hdev, -ENOMEM); 774 return; 775 } 776 777 *skb_put(hcp_skb, NFC_HCI_HCP_PACKET_HEADER_LEN) = pipe; 778 779 skb_queue_walk(&hdev->rx_hcp_frags, frag_skb) { 780 msg_len = frag_skb->len - NFC_HCI_HCP_PACKET_HEADER_LEN; 781 memcpy(skb_put(hcp_skb, msg_len), 782 frag_skb->data + NFC_HCI_HCP_PACKET_HEADER_LEN, 783 msg_len); 784 } 785 786 skb_queue_purge(&hdev->rx_hcp_frags); 787 } else { 788 packet->header &= NFC_HCI_FRAGMENT; 789 hcp_skb = skb; 790 } 791 792 /* if this is a response, dispatch immediately to 793 * unblock waiting cmd context. Otherwise, enqueue to dispatch 794 * in separate context where handler can also execute command. 795 */ 796 packet = (struct hcp_packet *)hcp_skb->data; 797 type = HCP_MSG_GET_TYPE(packet->message.header); 798 if (type == NFC_HCI_HCP_RESPONSE) { 799 pipe = packet->header; 800 instruction = HCP_MSG_GET_CMD(packet->message.header); 801 skb_pull(hcp_skb, NFC_HCI_HCP_PACKET_HEADER_LEN + 802 NFC_HCI_HCP_MESSAGE_HEADER_LEN); 803 nfc_hci_hcp_message_rx(hdev, pipe, type, instruction, hcp_skb); 804 } else { 805 skb_queue_tail(&hdev->msg_rx_queue, hcp_skb); 806 schedule_work(&hdev->msg_rx_work); 807 } 808 } 809 810 static int hci_fw_download(struct nfc_dev *nfc_dev, const char *firmware_name) 811 { 812 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 813 814 if (!hdev->ops->fw_download) 815 return -ENOTSUPP; 816 817 return hdev->ops->fw_download(hdev, firmware_name); 818 } 819 820 static struct nfc_ops hci_nfc_ops = { 821 .dev_up = hci_dev_up, 822 .dev_down = hci_dev_down, 823 .start_poll = hci_start_poll, 824 .stop_poll = hci_stop_poll, 825 .dep_link_up = hci_dep_link_up, 826 .dep_link_down = hci_dep_link_down, 827 .activate_target = hci_activate_target, 828 .deactivate_target = hci_deactivate_target, 829 .im_transceive = hci_transceive, 830 .tm_send = hci_tm_send, 831 .check_presence = hci_check_presence, 832 .fw_download = hci_fw_download, 833 .discover_se = hci_discover_se, 834 .enable_se = hci_enable_se, 835 .disable_se = hci_disable_se, 836 }; 837 838 struct nfc_hci_dev *nfc_hci_allocate_device(struct nfc_hci_ops *ops, 839 struct nfc_hci_init_data *init_data, 840 unsigned long quirks, 841 u32 protocols, 842 const char *llc_name, 843 int tx_headroom, 844 int tx_tailroom, 845 int max_link_payload) 846 { 847 struct nfc_hci_dev *hdev; 848 849 if (ops->xmit == NULL) 850 return NULL; 851 852 if (protocols == 0) 853 return NULL; 854 855 hdev = kzalloc(sizeof(struct nfc_hci_dev), GFP_KERNEL); 856 if (hdev == NULL) 857 return NULL; 858 859 hdev->llc = nfc_llc_allocate(llc_name, hdev, ops->xmit, 860 nfc_hci_recv_from_llc, tx_headroom, 861 tx_tailroom, nfc_hci_llc_failure); 862 if (hdev->llc == NULL) { 863 kfree(hdev); 864 return NULL; 865 } 866 867 hdev->ndev = nfc_allocate_device(&hci_nfc_ops, protocols, 868 tx_headroom + HCI_CMDS_HEADROOM, 869 tx_tailroom); 870 if (!hdev->ndev) { 871 nfc_llc_free(hdev->llc); 872 kfree(hdev); 873 return NULL; 874 } 875 876 hdev->ops = ops; 877 hdev->max_data_link_payload = max_link_payload; 878 hdev->init_data = *init_data; 879 880 nfc_set_drvdata(hdev->ndev, hdev); 881 882 memset(hdev->gate2pipe, NFC_HCI_INVALID_PIPE, sizeof(hdev->gate2pipe)); 883 884 hdev->quirks = quirks; 885 886 return hdev; 887 } 888 EXPORT_SYMBOL(nfc_hci_allocate_device); 889 890 void nfc_hci_free_device(struct nfc_hci_dev *hdev) 891 { 892 nfc_free_device(hdev->ndev); 893 nfc_llc_free(hdev->llc); 894 kfree(hdev); 895 } 896 EXPORT_SYMBOL(nfc_hci_free_device); 897 898 int nfc_hci_register_device(struct nfc_hci_dev *hdev) 899 { 900 mutex_init(&hdev->msg_tx_mutex); 901 902 INIT_LIST_HEAD(&hdev->msg_tx_queue); 903 904 INIT_WORK(&hdev->msg_tx_work, nfc_hci_msg_tx_work); 905 906 init_timer(&hdev->cmd_timer); 907 hdev->cmd_timer.data = (unsigned long)hdev; 908 hdev->cmd_timer.function = nfc_hci_cmd_timeout; 909 910 skb_queue_head_init(&hdev->rx_hcp_frags); 911 912 INIT_WORK(&hdev->msg_rx_work, nfc_hci_msg_rx_work); 913 914 skb_queue_head_init(&hdev->msg_rx_queue); 915 916 return nfc_register_device(hdev->ndev); 917 } 918 EXPORT_SYMBOL(nfc_hci_register_device); 919 920 void nfc_hci_unregister_device(struct nfc_hci_dev *hdev) 921 { 922 struct hci_msg *msg, *n; 923 924 mutex_lock(&hdev->msg_tx_mutex); 925 926 if (hdev->cmd_pending_msg) { 927 if (hdev->cmd_pending_msg->cb) 928 hdev->cmd_pending_msg->cb( 929 hdev->cmd_pending_msg->cb_context, 930 NULL, -ESHUTDOWN); 931 kfree(hdev->cmd_pending_msg); 932 hdev->cmd_pending_msg = NULL; 933 } 934 935 hdev->shutting_down = true; 936 937 mutex_unlock(&hdev->msg_tx_mutex); 938 939 del_timer_sync(&hdev->cmd_timer); 940 cancel_work_sync(&hdev->msg_tx_work); 941 942 cancel_work_sync(&hdev->msg_rx_work); 943 944 nfc_unregister_device(hdev->ndev); 945 946 skb_queue_purge(&hdev->rx_hcp_frags); 947 skb_queue_purge(&hdev->msg_rx_queue); 948 949 list_for_each_entry_safe(msg, n, &hdev->msg_tx_queue, msg_l) { 950 list_del(&msg->msg_l); 951 skb_queue_purge(&msg->msg_frags); 952 kfree(msg); 953 } 954 } 955 EXPORT_SYMBOL(nfc_hci_unregister_device); 956 957 void nfc_hci_set_clientdata(struct nfc_hci_dev *hdev, void *clientdata) 958 { 959 hdev->clientdata = clientdata; 960 } 961 EXPORT_SYMBOL(nfc_hci_set_clientdata); 962 963 void *nfc_hci_get_clientdata(struct nfc_hci_dev *hdev) 964 { 965 return hdev->clientdata; 966 } 967 EXPORT_SYMBOL(nfc_hci_get_clientdata); 968 969 void nfc_hci_driver_failure(struct nfc_hci_dev *hdev, int err) 970 { 971 nfc_hci_failure(hdev, err); 972 } 973 EXPORT_SYMBOL(nfc_hci_driver_failure); 974 975 void nfc_hci_recv_frame(struct nfc_hci_dev *hdev, struct sk_buff *skb) 976 { 977 nfc_llc_rcv_from_drv(hdev->llc, skb); 978 } 979 EXPORT_SYMBOL(nfc_hci_recv_frame); 980 981 static int __init nfc_hci_init(void) 982 { 983 return nfc_llc_init(); 984 } 985 986 static void __exit nfc_hci_exit(void) 987 { 988 nfc_llc_exit(); 989 } 990 991 subsys_initcall(nfc_hci_init); 992 module_exit(nfc_hci_exit); 993 994 MODULE_LICENSE("GPL"); 995 MODULE_DESCRIPTION("NFC HCI Core"); 996