1 // SPDX-License-Identifier: GPL-2.0-only 2 /* 3 * The NFC Controller Interface is the communication protocol between an 4 * NFC Controller (NFCC) and a Device Host (DH). 5 * 6 * Copyright (C) 2011 Texas Instruments, Inc. 7 * Copyright (C) 2014 Marvell International Ltd. 8 * 9 * Written by Ilan Elias <ilane@ti.com> 10 * 11 * Acknowledgements: 12 * This file is based on hci_core.c, which was written 13 * by Maxim Krasnyansky. 14 */ 15 16 #define pr_fmt(fmt) KBUILD_MODNAME ": %s: " fmt, __func__ 17 18 #include <linux/module.h> 19 #include <linux/kernel.h> 20 #include <linux/types.h> 21 #include <linux/workqueue.h> 22 #include <linux/completion.h> 23 #include <linux/export.h> 24 #include <linux/sched.h> 25 #include <linux/bitops.h> 26 #include <linux/skbuff.h> 27 #include <linux/kcov.h> 28 29 #include "../nfc.h" 30 #include <net/nfc/nci.h> 31 #include <net/nfc/nci_core.h> 32 #include <linux/nfc.h> 33 34 struct core_conn_create_data { 35 int length; 36 struct nci_core_conn_create_cmd *cmd; 37 }; 38 39 static void nci_cmd_work(struct work_struct *work); 40 static void nci_rx_work(struct work_struct *work); 41 static void nci_tx_work(struct work_struct *work); 42 43 struct nci_conn_info *nci_get_conn_info_by_conn_id(struct nci_dev *ndev, 44 int conn_id) 45 { 46 struct nci_conn_info *conn_info; 47 48 list_for_each_entry(conn_info, &ndev->conn_info_list, list) { 49 if (conn_info->conn_id == conn_id) 50 return conn_info; 51 } 52 53 return NULL; 54 } 55 56 int nci_get_conn_info_by_dest_type_params(struct nci_dev *ndev, u8 dest_type, 57 const struct dest_spec_params *params) 58 { 59 const struct nci_conn_info *conn_info; 60 61 list_for_each_entry(conn_info, &ndev->conn_info_list, list) { 62 if (conn_info->dest_type == dest_type) { 63 if (!params) 64 return conn_info->conn_id; 65 66 if (params->id == conn_info->dest_params->id && 67 params->protocol == conn_info->dest_params->protocol) 68 return conn_info->conn_id; 69 } 70 } 71 72 return -EINVAL; 73 } 74 EXPORT_SYMBOL(nci_get_conn_info_by_dest_type_params); 75 76 /* ---- NCI requests ---- */ 77 78 void nci_req_complete(struct nci_dev *ndev, int result) 79 { 80 if (ndev->req_status == NCI_REQ_PEND) { 81 ndev->req_result = result; 82 ndev->req_status = NCI_REQ_DONE; 83 complete(&ndev->req_completion); 84 } 85 } 86 EXPORT_SYMBOL(nci_req_complete); 87 88 static void nci_req_cancel(struct nci_dev *ndev, int err) 89 { 90 if (ndev->req_status == NCI_REQ_PEND) { 91 ndev->req_result = err; 92 ndev->req_status = NCI_REQ_CANCELED; 93 complete(&ndev->req_completion); 94 } 95 } 96 97 /* Execute request and wait for completion. */ 98 static int __nci_request(struct nci_dev *ndev, 99 void (*req)(struct nci_dev *ndev, const void *opt), 100 const void *opt, __u32 timeout) 101 { 102 int rc = 0; 103 long completion_rc; 104 105 ndev->req_status = NCI_REQ_PEND; 106 107 reinit_completion(&ndev->req_completion); 108 req(ndev, opt); 109 completion_rc = 110 wait_for_completion_interruptible_timeout(&ndev->req_completion, 111 timeout); 112 113 pr_debug("wait_for_completion return %ld\n", completion_rc); 114 115 if (completion_rc > 0) { 116 switch (ndev->req_status) { 117 case NCI_REQ_DONE: 118 rc = nci_to_errno(ndev->req_result); 119 break; 120 121 case NCI_REQ_CANCELED: 122 rc = -ndev->req_result; 123 break; 124 125 default: 126 rc = -ETIMEDOUT; 127 break; 128 } 129 } else { 130 pr_err("wait_for_completion_interruptible_timeout failed %ld\n", 131 completion_rc); 132 133 rc = ((completion_rc == 0) ? (-ETIMEDOUT) : (completion_rc)); 134 } 135 136 ndev->req_status = ndev->req_result = 0; 137 138 return rc; 139 } 140 141 inline int nci_request(struct nci_dev *ndev, 142 void (*req)(struct nci_dev *ndev, 143 const void *opt), 144 const void *opt, __u32 timeout) 145 { 146 int rc; 147 148 /* Serialize all requests */ 149 mutex_lock(&ndev->req_lock); 150 /* check the state after obtaing the lock against any races 151 * from nci_close_device when the device gets removed. 152 */ 153 if (test_bit(NCI_UP, &ndev->flags)) 154 rc = __nci_request(ndev, req, opt, timeout); 155 else 156 rc = -ENETDOWN; 157 mutex_unlock(&ndev->req_lock); 158 159 return rc; 160 } 161 162 static void nci_reset_req(struct nci_dev *ndev, const void *opt) 163 { 164 struct nci_core_reset_cmd cmd; 165 166 cmd.reset_type = NCI_RESET_TYPE_RESET_CONFIG; 167 nci_send_cmd(ndev, NCI_OP_CORE_RESET_CMD, 1, &cmd); 168 } 169 170 static void nci_init_req(struct nci_dev *ndev, const void *opt) 171 { 172 u8 plen = 0; 173 174 if (opt) 175 plen = sizeof(struct nci_core_init_v2_cmd); 176 177 nci_send_cmd(ndev, NCI_OP_CORE_INIT_CMD, plen, opt); 178 } 179 180 static void nci_init_complete_req(struct nci_dev *ndev, const void *opt) 181 { 182 struct nci_rf_disc_map_cmd cmd; 183 struct disc_map_config *cfg = cmd.mapping_configs; 184 __u8 *num = &cmd.num_mapping_configs; 185 int i; 186 187 /* set rf mapping configurations */ 188 *num = 0; 189 190 /* by default mapping is set to NCI_RF_INTERFACE_FRAME */ 191 for (i = 0; i < ndev->num_supported_rf_interfaces; i++) { 192 if (ndev->supported_rf_interfaces[i] == 193 NCI_RF_INTERFACE_ISO_DEP) { 194 cfg[*num].rf_protocol = NCI_RF_PROTOCOL_ISO_DEP; 195 cfg[*num].mode = NCI_DISC_MAP_MODE_POLL | 196 NCI_DISC_MAP_MODE_LISTEN; 197 cfg[*num].rf_interface = NCI_RF_INTERFACE_ISO_DEP; 198 (*num)++; 199 } else if (ndev->supported_rf_interfaces[i] == 200 NCI_RF_INTERFACE_NFC_DEP) { 201 cfg[*num].rf_protocol = NCI_RF_PROTOCOL_NFC_DEP; 202 cfg[*num].mode = NCI_DISC_MAP_MODE_POLL | 203 NCI_DISC_MAP_MODE_LISTEN; 204 cfg[*num].rf_interface = NCI_RF_INTERFACE_NFC_DEP; 205 (*num)++; 206 } 207 208 if (*num == NCI_MAX_NUM_MAPPING_CONFIGS) 209 break; 210 } 211 212 nci_send_cmd(ndev, NCI_OP_RF_DISCOVER_MAP_CMD, 213 (1 + ((*num) * sizeof(struct disc_map_config))), &cmd); 214 } 215 216 struct nci_set_config_param { 217 __u8 id; 218 size_t len; 219 const __u8 *val; 220 }; 221 222 static void nci_set_config_req(struct nci_dev *ndev, const void *opt) 223 { 224 const struct nci_set_config_param *param = opt; 225 struct nci_core_set_config_cmd cmd; 226 227 BUG_ON(param->len > NCI_MAX_PARAM_LEN); 228 229 cmd.num_params = 1; 230 cmd.param.id = param->id; 231 cmd.param.len = param->len; 232 memcpy(cmd.param.val, param->val, param->len); 233 234 nci_send_cmd(ndev, NCI_OP_CORE_SET_CONFIG_CMD, (3 + param->len), &cmd); 235 } 236 237 struct nci_rf_discover_param { 238 __u32 im_protocols; 239 __u32 tm_protocols; 240 }; 241 242 static void nci_rf_discover_req(struct nci_dev *ndev, const void *opt) 243 { 244 const struct nci_rf_discover_param *param = opt; 245 struct nci_rf_disc_cmd cmd; 246 247 cmd.num_disc_configs = 0; 248 249 if ((cmd.num_disc_configs < NCI_MAX_NUM_RF_CONFIGS) && 250 (param->im_protocols & NFC_PROTO_JEWEL_MASK || 251 param->im_protocols & NFC_PROTO_MIFARE_MASK || 252 param->im_protocols & NFC_PROTO_ISO14443_MASK || 253 param->im_protocols & NFC_PROTO_NFC_DEP_MASK)) { 254 cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode = 255 NCI_NFC_A_PASSIVE_POLL_MODE; 256 cmd.disc_configs[cmd.num_disc_configs].frequency = 1; 257 cmd.num_disc_configs++; 258 } 259 260 if ((cmd.num_disc_configs < NCI_MAX_NUM_RF_CONFIGS) && 261 (param->im_protocols & NFC_PROTO_ISO14443_B_MASK)) { 262 cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode = 263 NCI_NFC_B_PASSIVE_POLL_MODE; 264 cmd.disc_configs[cmd.num_disc_configs].frequency = 1; 265 cmd.num_disc_configs++; 266 } 267 268 if ((cmd.num_disc_configs < NCI_MAX_NUM_RF_CONFIGS) && 269 (param->im_protocols & NFC_PROTO_FELICA_MASK || 270 param->im_protocols & NFC_PROTO_NFC_DEP_MASK)) { 271 cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode = 272 NCI_NFC_F_PASSIVE_POLL_MODE; 273 cmd.disc_configs[cmd.num_disc_configs].frequency = 1; 274 cmd.num_disc_configs++; 275 } 276 277 if ((cmd.num_disc_configs < NCI_MAX_NUM_RF_CONFIGS) && 278 (param->im_protocols & NFC_PROTO_ISO15693_MASK)) { 279 cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode = 280 NCI_NFC_V_PASSIVE_POLL_MODE; 281 cmd.disc_configs[cmd.num_disc_configs].frequency = 1; 282 cmd.num_disc_configs++; 283 } 284 285 if ((cmd.num_disc_configs < NCI_MAX_NUM_RF_CONFIGS - 1) && 286 (param->tm_protocols & NFC_PROTO_NFC_DEP_MASK)) { 287 cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode = 288 NCI_NFC_A_PASSIVE_LISTEN_MODE; 289 cmd.disc_configs[cmd.num_disc_configs].frequency = 1; 290 cmd.num_disc_configs++; 291 cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode = 292 NCI_NFC_F_PASSIVE_LISTEN_MODE; 293 cmd.disc_configs[cmd.num_disc_configs].frequency = 1; 294 cmd.num_disc_configs++; 295 } 296 297 nci_send_cmd(ndev, NCI_OP_RF_DISCOVER_CMD, 298 (1 + (cmd.num_disc_configs * sizeof(struct disc_config))), 299 &cmd); 300 } 301 302 struct nci_rf_discover_select_param { 303 __u8 rf_discovery_id; 304 __u8 rf_protocol; 305 }; 306 307 static void nci_rf_discover_select_req(struct nci_dev *ndev, const void *opt) 308 { 309 const struct nci_rf_discover_select_param *param = opt; 310 struct nci_rf_discover_select_cmd cmd; 311 312 cmd.rf_discovery_id = param->rf_discovery_id; 313 cmd.rf_protocol = param->rf_protocol; 314 315 switch (cmd.rf_protocol) { 316 case NCI_RF_PROTOCOL_ISO_DEP: 317 cmd.rf_interface = NCI_RF_INTERFACE_ISO_DEP; 318 break; 319 320 case NCI_RF_PROTOCOL_NFC_DEP: 321 cmd.rf_interface = NCI_RF_INTERFACE_NFC_DEP; 322 break; 323 324 default: 325 cmd.rf_interface = NCI_RF_INTERFACE_FRAME; 326 break; 327 } 328 329 nci_send_cmd(ndev, NCI_OP_RF_DISCOVER_SELECT_CMD, 330 sizeof(struct nci_rf_discover_select_cmd), &cmd); 331 } 332 333 static void nci_rf_deactivate_req(struct nci_dev *ndev, const void *opt) 334 { 335 struct nci_rf_deactivate_cmd cmd; 336 337 cmd.type = (unsigned long)opt; 338 339 nci_send_cmd(ndev, NCI_OP_RF_DEACTIVATE_CMD, 340 sizeof(struct nci_rf_deactivate_cmd), &cmd); 341 } 342 343 struct nci_cmd_param { 344 __u16 opcode; 345 size_t len; 346 const __u8 *payload; 347 }; 348 349 static void nci_generic_req(struct nci_dev *ndev, const void *opt) 350 { 351 const struct nci_cmd_param *param = opt; 352 353 nci_send_cmd(ndev, param->opcode, param->len, param->payload); 354 } 355 356 int nci_prop_cmd(struct nci_dev *ndev, __u8 oid, size_t len, const __u8 *payload) 357 { 358 struct nci_cmd_param param; 359 360 param.opcode = nci_opcode_pack(NCI_GID_PROPRIETARY, oid); 361 param.len = len; 362 param.payload = payload; 363 364 return __nci_request(ndev, nci_generic_req, ¶m, 365 msecs_to_jiffies(NCI_CMD_TIMEOUT)); 366 } 367 EXPORT_SYMBOL(nci_prop_cmd); 368 369 int nci_core_cmd(struct nci_dev *ndev, __u16 opcode, size_t len, 370 const __u8 *payload) 371 { 372 struct nci_cmd_param param; 373 374 param.opcode = opcode; 375 param.len = len; 376 param.payload = payload; 377 378 return __nci_request(ndev, nci_generic_req, ¶m, 379 msecs_to_jiffies(NCI_CMD_TIMEOUT)); 380 } 381 EXPORT_SYMBOL(nci_core_cmd); 382 383 int nci_core_reset(struct nci_dev *ndev) 384 { 385 return __nci_request(ndev, nci_reset_req, (void *)0, 386 msecs_to_jiffies(NCI_RESET_TIMEOUT)); 387 } 388 EXPORT_SYMBOL(nci_core_reset); 389 390 int nci_core_init(struct nci_dev *ndev) 391 { 392 return __nci_request(ndev, nci_init_req, (void *)0, 393 msecs_to_jiffies(NCI_INIT_TIMEOUT)); 394 } 395 EXPORT_SYMBOL(nci_core_init); 396 397 struct nci_loopback_data { 398 u8 conn_id; 399 struct sk_buff *data; 400 }; 401 402 static void nci_send_data_req(struct nci_dev *ndev, const void *opt) 403 { 404 const struct nci_loopback_data *data = opt; 405 406 nci_send_data(ndev, data->conn_id, data->data); 407 } 408 409 static void nci_nfcc_loopback_cb(void *context, struct sk_buff *skb, int err) 410 { 411 struct nci_dev *ndev = (struct nci_dev *)context; 412 struct nci_conn_info *conn_info; 413 414 conn_info = nci_get_conn_info_by_conn_id(ndev, ndev->cur_conn_id); 415 if (!conn_info) { 416 nci_req_complete(ndev, NCI_STATUS_REJECTED); 417 return; 418 } 419 420 conn_info->rx_skb = skb; 421 422 nci_req_complete(ndev, NCI_STATUS_OK); 423 } 424 425 int nci_nfcc_loopback(struct nci_dev *ndev, const void *data, size_t data_len, 426 struct sk_buff **resp) 427 { 428 int r; 429 struct nci_loopback_data loopback_data; 430 struct nci_conn_info *conn_info; 431 struct sk_buff *skb; 432 int conn_id = nci_get_conn_info_by_dest_type_params(ndev, 433 NCI_DESTINATION_NFCC_LOOPBACK, NULL); 434 435 if (conn_id < 0) { 436 r = nci_core_conn_create(ndev, NCI_DESTINATION_NFCC_LOOPBACK, 437 0, 0, NULL); 438 if (r != NCI_STATUS_OK) 439 return r; 440 441 conn_id = nci_get_conn_info_by_dest_type_params(ndev, 442 NCI_DESTINATION_NFCC_LOOPBACK, 443 NULL); 444 } 445 446 conn_info = nci_get_conn_info_by_conn_id(ndev, conn_id); 447 if (!conn_info) 448 return -EPROTO; 449 450 /* store cb and context to be used on receiving data */ 451 conn_info->data_exchange_cb = nci_nfcc_loopback_cb; 452 conn_info->data_exchange_cb_context = ndev; 453 454 skb = nci_skb_alloc(ndev, NCI_DATA_HDR_SIZE + data_len, GFP_KERNEL); 455 if (!skb) 456 return -ENOMEM; 457 458 skb_reserve(skb, NCI_DATA_HDR_SIZE); 459 skb_put_data(skb, data, data_len); 460 461 loopback_data.conn_id = conn_id; 462 loopback_data.data = skb; 463 464 ndev->cur_conn_id = conn_id; 465 r = nci_request(ndev, nci_send_data_req, &loopback_data, 466 msecs_to_jiffies(NCI_DATA_TIMEOUT)); 467 if (r == NCI_STATUS_OK && resp) 468 *resp = conn_info->rx_skb; 469 470 return r; 471 } 472 EXPORT_SYMBOL(nci_nfcc_loopback); 473 474 static int nci_open_device(struct nci_dev *ndev) 475 { 476 int rc = 0; 477 478 mutex_lock(&ndev->req_lock); 479 480 if (test_bit(NCI_UNREG, &ndev->flags)) { 481 rc = -ENODEV; 482 goto done; 483 } 484 485 if (test_bit(NCI_UP, &ndev->flags)) { 486 rc = -EALREADY; 487 goto done; 488 } 489 490 if (ndev->ops->open(ndev)) { 491 rc = -EIO; 492 goto done; 493 } 494 495 atomic_set(&ndev->cmd_cnt, 1); 496 497 set_bit(NCI_INIT, &ndev->flags); 498 499 if (ndev->ops->init) 500 rc = ndev->ops->init(ndev); 501 502 if (!rc) { 503 rc = __nci_request(ndev, nci_reset_req, (void *)0, 504 msecs_to_jiffies(NCI_RESET_TIMEOUT)); 505 } 506 507 if (!rc && ndev->ops->setup) { 508 rc = ndev->ops->setup(ndev); 509 } 510 511 if (!rc) { 512 struct nci_core_init_v2_cmd nci_init_v2_cmd = { 513 .feature1 = NCI_FEATURE_DISABLE, 514 .feature2 = NCI_FEATURE_DISABLE 515 }; 516 const void *opt = NULL; 517 518 if (ndev->nci_ver & NCI_VER_2_MASK) 519 opt = &nci_init_v2_cmd; 520 521 rc = __nci_request(ndev, nci_init_req, opt, 522 msecs_to_jiffies(NCI_INIT_TIMEOUT)); 523 } 524 525 if (!rc && ndev->ops->post_setup) 526 rc = ndev->ops->post_setup(ndev); 527 528 if (!rc) { 529 rc = __nci_request(ndev, nci_init_complete_req, (void *)0, 530 msecs_to_jiffies(NCI_INIT_TIMEOUT)); 531 } 532 533 clear_bit(NCI_INIT, &ndev->flags); 534 535 if (!rc) { 536 set_bit(NCI_UP, &ndev->flags); 537 nci_clear_target_list(ndev); 538 atomic_set(&ndev->state, NCI_IDLE); 539 } else { 540 /* Init failed, cleanup */ 541 skb_queue_purge(&ndev->cmd_q); 542 skb_queue_purge(&ndev->rx_q); 543 skb_queue_purge(&ndev->tx_q); 544 545 ndev->ops->close(ndev); 546 ndev->flags &= BIT(NCI_UNREG); 547 } 548 549 done: 550 mutex_unlock(&ndev->req_lock); 551 return rc; 552 } 553 554 static int nci_close_device(struct nci_dev *ndev) 555 { 556 nci_req_cancel(ndev, ENODEV); 557 558 /* This mutex needs to be held as a barrier for 559 * caller nci_unregister_device 560 */ 561 mutex_lock(&ndev->req_lock); 562 563 if (!test_and_clear_bit(NCI_UP, &ndev->flags)) { 564 /* Need to flush the cmd wq in case 565 * there is a queued/running cmd_work 566 */ 567 flush_workqueue(ndev->cmd_wq); 568 timer_delete_sync(&ndev->cmd_timer); 569 timer_delete_sync(&ndev->data_timer); 570 mutex_unlock(&ndev->req_lock); 571 return 0; 572 } 573 574 /* Drop RX and TX queues */ 575 skb_queue_purge(&ndev->rx_q); 576 skb_queue_purge(&ndev->tx_q); 577 578 /* Flush RX and TX wq */ 579 flush_workqueue(ndev->rx_wq); 580 flush_workqueue(ndev->tx_wq); 581 582 /* Reset device */ 583 skb_queue_purge(&ndev->cmd_q); 584 atomic_set(&ndev->cmd_cnt, 1); 585 586 set_bit(NCI_INIT, &ndev->flags); 587 __nci_request(ndev, nci_reset_req, (void *)0, 588 msecs_to_jiffies(NCI_RESET_TIMEOUT)); 589 590 /* After this point our queues are empty 591 * and no works are scheduled. 592 */ 593 ndev->ops->close(ndev); 594 595 clear_bit(NCI_INIT, &ndev->flags); 596 597 /* Flush cmd wq */ 598 flush_workqueue(ndev->cmd_wq); 599 600 timer_delete_sync(&ndev->cmd_timer); 601 602 /* Clear flags except NCI_UNREG */ 603 ndev->flags &= BIT(NCI_UNREG); 604 605 mutex_unlock(&ndev->req_lock); 606 607 return 0; 608 } 609 610 /* NCI command timer function */ 611 static void nci_cmd_timer(struct timer_list *t) 612 { 613 struct nci_dev *ndev = timer_container_of(ndev, t, cmd_timer); 614 615 atomic_set(&ndev->cmd_cnt, 1); 616 queue_work(ndev->cmd_wq, &ndev->cmd_work); 617 } 618 619 /* NCI data exchange timer function */ 620 static void nci_data_timer(struct timer_list *t) 621 { 622 struct nci_dev *ndev = timer_container_of(ndev, t, data_timer); 623 624 set_bit(NCI_DATA_EXCHANGE_TO, &ndev->flags); 625 queue_work(ndev->rx_wq, &ndev->rx_work); 626 } 627 628 static int nci_dev_up(struct nfc_dev *nfc_dev) 629 { 630 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev); 631 632 return nci_open_device(ndev); 633 } 634 635 static int nci_dev_down(struct nfc_dev *nfc_dev) 636 { 637 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev); 638 639 return nci_close_device(ndev); 640 } 641 642 int nci_set_config(struct nci_dev *ndev, __u8 id, size_t len, const __u8 *val) 643 { 644 struct nci_set_config_param param; 645 646 if (!val || !len) 647 return 0; 648 649 param.id = id; 650 param.len = len; 651 param.val = val; 652 653 return __nci_request(ndev, nci_set_config_req, ¶m, 654 msecs_to_jiffies(NCI_SET_CONFIG_TIMEOUT)); 655 } 656 EXPORT_SYMBOL(nci_set_config); 657 658 static void nci_nfcee_discover_req(struct nci_dev *ndev, const void *opt) 659 { 660 struct nci_nfcee_discover_cmd cmd; 661 __u8 action = (unsigned long)opt; 662 663 cmd.discovery_action = action; 664 665 nci_send_cmd(ndev, NCI_OP_NFCEE_DISCOVER_CMD, 1, &cmd); 666 } 667 668 int nci_nfcee_discover(struct nci_dev *ndev, u8 action) 669 { 670 unsigned long opt = action; 671 672 return __nci_request(ndev, nci_nfcee_discover_req, (void *)opt, 673 msecs_to_jiffies(NCI_CMD_TIMEOUT)); 674 } 675 EXPORT_SYMBOL(nci_nfcee_discover); 676 677 static void nci_nfcee_mode_set_req(struct nci_dev *ndev, const void *opt) 678 { 679 const struct nci_nfcee_mode_set_cmd *cmd = opt; 680 681 nci_send_cmd(ndev, NCI_OP_NFCEE_MODE_SET_CMD, 682 sizeof(struct nci_nfcee_mode_set_cmd), cmd); 683 } 684 685 int nci_nfcee_mode_set(struct nci_dev *ndev, u8 nfcee_id, u8 nfcee_mode) 686 { 687 struct nci_nfcee_mode_set_cmd cmd; 688 689 cmd.nfcee_id = nfcee_id; 690 cmd.nfcee_mode = nfcee_mode; 691 692 return __nci_request(ndev, nci_nfcee_mode_set_req, &cmd, 693 msecs_to_jiffies(NCI_CMD_TIMEOUT)); 694 } 695 EXPORT_SYMBOL(nci_nfcee_mode_set); 696 697 static void nci_core_conn_create_req(struct nci_dev *ndev, const void *opt) 698 { 699 const struct core_conn_create_data *data = opt; 700 701 nci_send_cmd(ndev, NCI_OP_CORE_CONN_CREATE_CMD, data->length, data->cmd); 702 } 703 704 int nci_core_conn_create(struct nci_dev *ndev, u8 destination_type, 705 u8 number_destination_params, 706 size_t params_len, 707 const struct core_conn_create_dest_spec_params *params) 708 { 709 int r; 710 struct nci_core_conn_create_cmd *cmd; 711 struct core_conn_create_data data; 712 713 data.length = params_len + sizeof(struct nci_core_conn_create_cmd); 714 cmd = kzalloc(data.length, GFP_KERNEL); 715 if (!cmd) 716 return -ENOMEM; 717 718 cmd->destination_type = destination_type; 719 cmd->number_destination_params = number_destination_params; 720 721 data.cmd = cmd; 722 723 if (params) { 724 memcpy(cmd->params, params, params_len); 725 if (params->length > 0) 726 memcpy(&ndev->cur_params, 727 ¶ms->value[DEST_SPEC_PARAMS_ID_INDEX], 728 sizeof(struct dest_spec_params)); 729 else 730 ndev->cur_params.id = 0; 731 } else { 732 ndev->cur_params.id = 0; 733 } 734 ndev->cur_dest_type = destination_type; 735 736 r = __nci_request(ndev, nci_core_conn_create_req, &data, 737 msecs_to_jiffies(NCI_CMD_TIMEOUT)); 738 kfree(cmd); 739 return r; 740 } 741 EXPORT_SYMBOL(nci_core_conn_create); 742 743 static void nci_core_conn_close_req(struct nci_dev *ndev, const void *opt) 744 { 745 __u8 conn_id = (unsigned long)opt; 746 747 nci_send_cmd(ndev, NCI_OP_CORE_CONN_CLOSE_CMD, 1, &conn_id); 748 } 749 750 int nci_core_conn_close(struct nci_dev *ndev, u8 conn_id) 751 { 752 unsigned long opt = conn_id; 753 754 ndev->cur_conn_id = conn_id; 755 return __nci_request(ndev, nci_core_conn_close_req, (void *)opt, 756 msecs_to_jiffies(NCI_CMD_TIMEOUT)); 757 } 758 EXPORT_SYMBOL(nci_core_conn_close); 759 760 static void nci_set_target_ats(struct nfc_target *target, struct nci_dev *ndev) 761 { 762 if (ndev->target_ats_len > 0) { 763 target->ats_len = ndev->target_ats_len; 764 memcpy(target->ats, ndev->target_ats, target->ats_len); 765 } 766 } 767 768 static int nci_set_local_general_bytes(struct nfc_dev *nfc_dev) 769 { 770 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev); 771 struct nci_set_config_param param; 772 int rc; 773 774 param.val = nfc_get_local_general_bytes(nfc_dev, ¶m.len); 775 if ((param.val == NULL) || (param.len == 0)) 776 return 0; 777 778 if (param.len > NFC_MAX_GT_LEN) 779 return -EINVAL; 780 781 param.id = NCI_PN_ATR_REQ_GEN_BYTES; 782 783 rc = nci_request(ndev, nci_set_config_req, ¶m, 784 msecs_to_jiffies(NCI_SET_CONFIG_TIMEOUT)); 785 if (rc) 786 return rc; 787 788 param.id = NCI_LN_ATR_RES_GEN_BYTES; 789 790 return nci_request(ndev, nci_set_config_req, ¶m, 791 msecs_to_jiffies(NCI_SET_CONFIG_TIMEOUT)); 792 } 793 794 static int nci_set_listen_parameters(struct nfc_dev *nfc_dev) 795 { 796 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev); 797 int rc; 798 __u8 val; 799 800 val = NCI_LA_SEL_INFO_NFC_DEP_MASK; 801 802 rc = nci_set_config(ndev, NCI_LA_SEL_INFO, 1, &val); 803 if (rc) 804 return rc; 805 806 val = NCI_LF_PROTOCOL_TYPE_NFC_DEP_MASK; 807 808 rc = nci_set_config(ndev, NCI_LF_PROTOCOL_TYPE, 1, &val); 809 if (rc) 810 return rc; 811 812 val = NCI_LF_CON_BITR_F_212 | NCI_LF_CON_BITR_F_424; 813 814 return nci_set_config(ndev, NCI_LF_CON_BITR_F, 1, &val); 815 } 816 817 static int nci_start_poll(struct nfc_dev *nfc_dev, 818 __u32 im_protocols, __u32 tm_protocols) 819 { 820 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev); 821 struct nci_rf_discover_param param; 822 int rc; 823 824 if ((atomic_read(&ndev->state) == NCI_DISCOVERY) || 825 (atomic_read(&ndev->state) == NCI_W4_ALL_DISCOVERIES)) { 826 pr_err("unable to start poll, since poll is already active\n"); 827 return -EBUSY; 828 } 829 830 if (ndev->target_active_prot) { 831 pr_err("there is an active target\n"); 832 return -EBUSY; 833 } 834 835 if ((atomic_read(&ndev->state) == NCI_W4_HOST_SELECT) || 836 (atomic_read(&ndev->state) == NCI_POLL_ACTIVE)) { 837 pr_debug("target active or w4 select, implicitly deactivate\n"); 838 839 rc = nci_request(ndev, nci_rf_deactivate_req, 840 (void *)NCI_DEACTIVATE_TYPE_IDLE_MODE, 841 msecs_to_jiffies(NCI_RF_DEACTIVATE_TIMEOUT)); 842 if (rc) 843 return -EBUSY; 844 } 845 846 if ((im_protocols | tm_protocols) & NFC_PROTO_NFC_DEP_MASK) { 847 rc = nci_set_local_general_bytes(nfc_dev); 848 if (rc) { 849 pr_err("failed to set local general bytes\n"); 850 return rc; 851 } 852 } 853 854 if (tm_protocols & NFC_PROTO_NFC_DEP_MASK) { 855 rc = nci_set_listen_parameters(nfc_dev); 856 if (rc) 857 pr_err("failed to set listen parameters\n"); 858 } 859 860 param.im_protocols = im_protocols; 861 param.tm_protocols = tm_protocols; 862 rc = nci_request(ndev, nci_rf_discover_req, ¶m, 863 msecs_to_jiffies(NCI_RF_DISC_TIMEOUT)); 864 865 if (!rc) 866 ndev->poll_prots = im_protocols; 867 868 return rc; 869 } 870 871 static void nci_stop_poll(struct nfc_dev *nfc_dev) 872 { 873 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev); 874 875 if ((atomic_read(&ndev->state) != NCI_DISCOVERY) && 876 (atomic_read(&ndev->state) != NCI_W4_ALL_DISCOVERIES)) { 877 pr_err("unable to stop poll, since poll is not active\n"); 878 return; 879 } 880 881 nci_request(ndev, nci_rf_deactivate_req, 882 (void *)NCI_DEACTIVATE_TYPE_IDLE_MODE, 883 msecs_to_jiffies(NCI_RF_DEACTIVATE_TIMEOUT)); 884 } 885 886 static int nci_activate_target(struct nfc_dev *nfc_dev, 887 struct nfc_target *target, __u32 protocol) 888 { 889 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev); 890 struct nci_rf_discover_select_param param; 891 const struct nfc_target *nci_target = NULL; 892 int i; 893 int rc = 0; 894 895 pr_debug("target_idx %d, protocol 0x%x\n", target->idx, protocol); 896 897 if ((atomic_read(&ndev->state) != NCI_W4_HOST_SELECT) && 898 (atomic_read(&ndev->state) != NCI_POLL_ACTIVE)) { 899 pr_err("there is no available target to activate\n"); 900 return -EINVAL; 901 } 902 903 if (ndev->target_active_prot) { 904 pr_err("there is already an active target\n"); 905 return -EBUSY; 906 } 907 908 for (i = 0; i < ndev->n_targets; i++) { 909 if (ndev->targets[i].idx == target->idx) { 910 nci_target = &ndev->targets[i]; 911 break; 912 } 913 } 914 915 if (!nci_target) { 916 pr_err("unable to find the selected target\n"); 917 return -EINVAL; 918 } 919 920 if (protocol >= NFC_PROTO_MAX) { 921 pr_err("the requested nfc protocol is invalid\n"); 922 return -EINVAL; 923 } 924 925 if (!(nci_target->supported_protocols & (1 << protocol))) { 926 pr_err("target does not support the requested protocol 0x%x\n", 927 protocol); 928 return -EINVAL; 929 } 930 931 if (atomic_read(&ndev->state) == NCI_W4_HOST_SELECT) { 932 param.rf_discovery_id = nci_target->logical_idx; 933 934 if (protocol == NFC_PROTO_JEWEL) 935 param.rf_protocol = NCI_RF_PROTOCOL_T1T; 936 else if (protocol == NFC_PROTO_MIFARE) 937 param.rf_protocol = NCI_RF_PROTOCOL_T2T; 938 else if (protocol == NFC_PROTO_FELICA) 939 param.rf_protocol = NCI_RF_PROTOCOL_T3T; 940 else if (protocol == NFC_PROTO_ISO14443 || 941 protocol == NFC_PROTO_ISO14443_B) 942 param.rf_protocol = NCI_RF_PROTOCOL_ISO_DEP; 943 else 944 param.rf_protocol = NCI_RF_PROTOCOL_NFC_DEP; 945 946 rc = nci_request(ndev, nci_rf_discover_select_req, ¶m, 947 msecs_to_jiffies(NCI_RF_DISC_SELECT_TIMEOUT)); 948 } 949 950 if (!rc) { 951 ndev->target_active_prot = protocol; 952 if (protocol == NFC_PROTO_ISO14443) 953 nci_set_target_ats(target, ndev); 954 } 955 956 return rc; 957 } 958 959 static void nci_deactivate_target(struct nfc_dev *nfc_dev, 960 struct nfc_target *target, 961 __u8 mode) 962 { 963 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev); 964 unsigned long nci_mode = NCI_DEACTIVATE_TYPE_IDLE_MODE; 965 966 if (!ndev->target_active_prot) { 967 pr_err("unable to deactivate target, no active target\n"); 968 return; 969 } 970 971 ndev->target_active_prot = 0; 972 973 switch (mode) { 974 case NFC_TARGET_MODE_SLEEP: 975 nci_mode = NCI_DEACTIVATE_TYPE_SLEEP_MODE; 976 break; 977 } 978 979 if (atomic_read(&ndev->state) == NCI_POLL_ACTIVE) { 980 nci_request(ndev, nci_rf_deactivate_req, (void *)nci_mode, 981 msecs_to_jiffies(NCI_RF_DEACTIVATE_TIMEOUT)); 982 } 983 } 984 985 static int nci_dep_link_up(struct nfc_dev *nfc_dev, struct nfc_target *target, 986 __u8 comm_mode, __u8 *gb, size_t gb_len) 987 { 988 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev); 989 int rc; 990 991 pr_debug("target_idx %d, comm_mode %d\n", target->idx, comm_mode); 992 993 rc = nci_activate_target(nfc_dev, target, NFC_PROTO_NFC_DEP); 994 if (rc) 995 return rc; 996 997 rc = nfc_set_remote_general_bytes(nfc_dev, ndev->remote_gb, 998 ndev->remote_gb_len); 999 if (!rc) 1000 rc = nfc_dep_link_is_up(nfc_dev, target->idx, NFC_COMM_PASSIVE, 1001 NFC_RF_INITIATOR); 1002 1003 return rc; 1004 } 1005 1006 static int nci_dep_link_down(struct nfc_dev *nfc_dev) 1007 { 1008 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev); 1009 int rc; 1010 1011 if (nfc_dev->rf_mode == NFC_RF_INITIATOR) { 1012 nci_deactivate_target(nfc_dev, NULL, NCI_DEACTIVATE_TYPE_IDLE_MODE); 1013 } else { 1014 if (atomic_read(&ndev->state) == NCI_LISTEN_ACTIVE || 1015 atomic_read(&ndev->state) == NCI_DISCOVERY) { 1016 nci_request(ndev, nci_rf_deactivate_req, (void *)0, 1017 msecs_to_jiffies(NCI_RF_DEACTIVATE_TIMEOUT)); 1018 } 1019 1020 rc = nfc_tm_deactivated(nfc_dev); 1021 if (rc) 1022 pr_err("error when signaling tm deactivation\n"); 1023 } 1024 1025 return 0; 1026 } 1027 1028 1029 static int nci_transceive(struct nfc_dev *nfc_dev, struct nfc_target *target, 1030 struct sk_buff *skb, 1031 data_exchange_cb_t cb, void *cb_context) 1032 { 1033 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev); 1034 int rc; 1035 struct nci_conn_info *conn_info; 1036 1037 conn_info = ndev->rf_conn_info; 1038 if (!conn_info) 1039 return -EPROTO; 1040 1041 pr_debug("target_idx %d, len %d\n", target->idx, skb->len); 1042 1043 if (!ndev->target_active_prot) { 1044 pr_err("unable to exchange data, no active target\n"); 1045 return -EINVAL; 1046 } 1047 1048 if (test_and_set_bit(NCI_DATA_EXCHANGE, &ndev->flags)) 1049 return -EBUSY; 1050 1051 /* store cb and context to be used on receiving data */ 1052 conn_info->data_exchange_cb = cb; 1053 conn_info->data_exchange_cb_context = cb_context; 1054 1055 rc = nci_send_data(ndev, NCI_STATIC_RF_CONN_ID, skb); 1056 if (rc) 1057 clear_bit(NCI_DATA_EXCHANGE, &ndev->flags); 1058 1059 return rc; 1060 } 1061 1062 static int nci_tm_send(struct nfc_dev *nfc_dev, struct sk_buff *skb) 1063 { 1064 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev); 1065 int rc; 1066 1067 rc = nci_send_data(ndev, NCI_STATIC_RF_CONN_ID, skb); 1068 if (rc) 1069 pr_err("unable to send data\n"); 1070 1071 return rc; 1072 } 1073 1074 static int nci_enable_se(struct nfc_dev *nfc_dev, u32 se_idx) 1075 { 1076 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev); 1077 1078 if (ndev->ops->enable_se) 1079 return ndev->ops->enable_se(ndev, se_idx); 1080 1081 return 0; 1082 } 1083 1084 static int nci_disable_se(struct nfc_dev *nfc_dev, u32 se_idx) 1085 { 1086 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev); 1087 1088 if (ndev->ops->disable_se) 1089 return ndev->ops->disable_se(ndev, se_idx); 1090 1091 return 0; 1092 } 1093 1094 static int nci_discover_se(struct nfc_dev *nfc_dev) 1095 { 1096 int r; 1097 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev); 1098 1099 if (ndev->ops->discover_se) { 1100 r = nci_nfcee_discover(ndev, NCI_NFCEE_DISCOVERY_ACTION_ENABLE); 1101 if (r != NCI_STATUS_OK) 1102 return -EPROTO; 1103 1104 return ndev->ops->discover_se(ndev); 1105 } 1106 1107 return 0; 1108 } 1109 1110 static int nci_se_io(struct nfc_dev *nfc_dev, u32 se_idx, 1111 u8 *apdu, size_t apdu_length, 1112 se_io_cb_t cb, void *cb_context) 1113 { 1114 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev); 1115 1116 if (ndev->ops->se_io) 1117 return ndev->ops->se_io(ndev, se_idx, apdu, 1118 apdu_length, cb, cb_context); 1119 1120 return 0; 1121 } 1122 1123 static int nci_fw_download(struct nfc_dev *nfc_dev, const char *firmware_name) 1124 { 1125 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev); 1126 1127 if (!ndev->ops->fw_download) 1128 return -ENOTSUPP; 1129 1130 return ndev->ops->fw_download(ndev, firmware_name); 1131 } 1132 1133 static const struct nfc_ops nci_nfc_ops = { 1134 .dev_up = nci_dev_up, 1135 .dev_down = nci_dev_down, 1136 .start_poll = nci_start_poll, 1137 .stop_poll = nci_stop_poll, 1138 .dep_link_up = nci_dep_link_up, 1139 .dep_link_down = nci_dep_link_down, 1140 .activate_target = nci_activate_target, 1141 .deactivate_target = nci_deactivate_target, 1142 .im_transceive = nci_transceive, 1143 .tm_send = nci_tm_send, 1144 .enable_se = nci_enable_se, 1145 .disable_se = nci_disable_se, 1146 .discover_se = nci_discover_se, 1147 .se_io = nci_se_io, 1148 .fw_download = nci_fw_download, 1149 }; 1150 1151 /* ---- Interface to NCI drivers ---- */ 1152 /** 1153 * nci_allocate_device - allocate a new nci device 1154 * 1155 * @ops: device operations 1156 * @supported_protocols: NFC protocols supported by the device 1157 * @tx_headroom: Reserved space at beginning of skb 1158 * @tx_tailroom: Reserved space at end of skb 1159 */ 1160 struct nci_dev *nci_allocate_device(const struct nci_ops *ops, 1161 __u32 supported_protocols, 1162 int tx_headroom, int tx_tailroom) 1163 { 1164 struct nci_dev *ndev; 1165 1166 pr_debug("supported_protocols 0x%x\n", supported_protocols); 1167 1168 if (!ops->open || !ops->close || !ops->send) 1169 return NULL; 1170 1171 if (!supported_protocols) 1172 return NULL; 1173 1174 ndev = kzalloc(sizeof(struct nci_dev), GFP_KERNEL); 1175 if (!ndev) 1176 return NULL; 1177 1178 ndev->ops = ops; 1179 1180 if (ops->n_prop_ops > NCI_MAX_PROPRIETARY_CMD) { 1181 pr_err("Too many proprietary commands: %zd\n", 1182 ops->n_prop_ops); 1183 goto free_nci; 1184 } 1185 1186 ndev->tx_headroom = tx_headroom; 1187 ndev->tx_tailroom = tx_tailroom; 1188 init_completion(&ndev->req_completion); 1189 1190 ndev->nfc_dev = nfc_allocate_device(&nci_nfc_ops, 1191 supported_protocols, 1192 tx_headroom + NCI_DATA_HDR_SIZE, 1193 tx_tailroom); 1194 if (!ndev->nfc_dev) 1195 goto free_nci; 1196 1197 ndev->hci_dev = nci_hci_allocate(ndev); 1198 if (!ndev->hci_dev) 1199 goto free_nfc; 1200 1201 nfc_set_drvdata(ndev->nfc_dev, ndev); 1202 1203 return ndev; 1204 1205 free_nfc: 1206 nfc_free_device(ndev->nfc_dev); 1207 free_nci: 1208 kfree(ndev); 1209 return NULL; 1210 } 1211 EXPORT_SYMBOL(nci_allocate_device); 1212 1213 /** 1214 * nci_free_device - deallocate nci device 1215 * 1216 * @ndev: The nci device to deallocate 1217 */ 1218 void nci_free_device(struct nci_dev *ndev) 1219 { 1220 nfc_free_device(ndev->nfc_dev); 1221 nci_hci_deallocate(ndev); 1222 1223 /* drop partial rx data packet if present */ 1224 if (ndev->rx_data_reassembly) 1225 kfree_skb(ndev->rx_data_reassembly); 1226 kfree(ndev); 1227 } 1228 EXPORT_SYMBOL(nci_free_device); 1229 1230 /** 1231 * nci_register_device - register a nci device in the nfc subsystem 1232 * 1233 * @ndev: The nci device to register 1234 */ 1235 int nci_register_device(struct nci_dev *ndev) 1236 { 1237 int rc; 1238 struct device *dev = &ndev->nfc_dev->dev; 1239 char name[32]; 1240 1241 ndev->flags = 0; 1242 1243 INIT_WORK(&ndev->cmd_work, nci_cmd_work); 1244 snprintf(name, sizeof(name), "%s_nci_cmd_wq", dev_name(dev)); 1245 ndev->cmd_wq = create_singlethread_workqueue(name); 1246 if (!ndev->cmd_wq) { 1247 rc = -ENOMEM; 1248 goto exit; 1249 } 1250 1251 INIT_WORK(&ndev->rx_work, nci_rx_work); 1252 snprintf(name, sizeof(name), "%s_nci_rx_wq", dev_name(dev)); 1253 ndev->rx_wq = create_singlethread_workqueue(name); 1254 if (!ndev->rx_wq) { 1255 rc = -ENOMEM; 1256 goto destroy_cmd_wq_exit; 1257 } 1258 1259 INIT_WORK(&ndev->tx_work, nci_tx_work); 1260 snprintf(name, sizeof(name), "%s_nci_tx_wq", dev_name(dev)); 1261 ndev->tx_wq = create_singlethread_workqueue(name); 1262 if (!ndev->tx_wq) { 1263 rc = -ENOMEM; 1264 goto destroy_rx_wq_exit; 1265 } 1266 1267 skb_queue_head_init(&ndev->cmd_q); 1268 skb_queue_head_init(&ndev->rx_q); 1269 skb_queue_head_init(&ndev->tx_q); 1270 1271 timer_setup(&ndev->cmd_timer, nci_cmd_timer, 0); 1272 timer_setup(&ndev->data_timer, nci_data_timer, 0); 1273 1274 mutex_init(&ndev->req_lock); 1275 INIT_LIST_HEAD(&ndev->conn_info_list); 1276 1277 rc = nfc_register_device(ndev->nfc_dev); 1278 if (rc) 1279 goto destroy_tx_wq_exit; 1280 1281 goto exit; 1282 1283 destroy_tx_wq_exit: 1284 destroy_workqueue(ndev->tx_wq); 1285 1286 destroy_rx_wq_exit: 1287 destroy_workqueue(ndev->rx_wq); 1288 1289 destroy_cmd_wq_exit: 1290 destroy_workqueue(ndev->cmd_wq); 1291 1292 exit: 1293 return rc; 1294 } 1295 EXPORT_SYMBOL(nci_register_device); 1296 1297 /** 1298 * nci_unregister_device - unregister a nci device in the nfc subsystem 1299 * 1300 * @ndev: The nci device to unregister 1301 */ 1302 void nci_unregister_device(struct nci_dev *ndev) 1303 { 1304 struct nci_conn_info *conn_info, *n; 1305 1306 nfc_unregister_rfkill(ndev->nfc_dev); 1307 1308 /* This set_bit is not protected with specialized barrier, 1309 * However, it is fine because the mutex_lock(&ndev->req_lock); 1310 * in nci_close_device() will help to emit one. 1311 */ 1312 set_bit(NCI_UNREG, &ndev->flags); 1313 1314 nci_close_device(ndev); 1315 1316 destroy_workqueue(ndev->cmd_wq); 1317 destroy_workqueue(ndev->rx_wq); 1318 destroy_workqueue(ndev->tx_wq); 1319 1320 list_for_each_entry_safe(conn_info, n, &ndev->conn_info_list, list) { 1321 list_del(&conn_info->list); 1322 /* conn_info is allocated with devm_kzalloc */ 1323 } 1324 1325 nfc_remove_device(ndev->nfc_dev); 1326 } 1327 EXPORT_SYMBOL(nci_unregister_device); 1328 1329 /** 1330 * nci_recv_frame - receive frame from NCI drivers 1331 * 1332 * @ndev: The nci device 1333 * @skb: The sk_buff to receive 1334 */ 1335 int nci_recv_frame(struct nci_dev *ndev, struct sk_buff *skb) 1336 { 1337 pr_debug("len %d\n", skb->len); 1338 1339 if (!ndev || (!test_bit(NCI_UP, &ndev->flags) && 1340 !test_bit(NCI_INIT, &ndev->flags))) { 1341 kfree_skb(skb); 1342 return -ENXIO; 1343 } 1344 1345 /* Queue frame for rx worker thread */ 1346 skb_queue_tail(&ndev->rx_q, skb); 1347 queue_work(ndev->rx_wq, &ndev->rx_work); 1348 1349 return 0; 1350 } 1351 EXPORT_SYMBOL(nci_recv_frame); 1352 1353 int nci_send_frame(struct nci_dev *ndev, struct sk_buff *skb) 1354 { 1355 pr_debug("len %d\n", skb->len); 1356 1357 if (!ndev) { 1358 kfree_skb(skb); 1359 return -ENODEV; 1360 } 1361 1362 /* Get rid of skb owner, prior to sending to the driver. */ 1363 skb_orphan(skb); 1364 1365 /* Send copy to sniffer */ 1366 nfc_send_to_raw_sock(ndev->nfc_dev, skb, 1367 RAW_PAYLOAD_NCI, NFC_DIRECTION_TX); 1368 1369 return ndev->ops->send(ndev, skb); 1370 } 1371 EXPORT_SYMBOL(nci_send_frame); 1372 1373 /* Send NCI command */ 1374 int nci_send_cmd(struct nci_dev *ndev, __u16 opcode, __u8 plen, const void *payload) 1375 { 1376 struct nci_ctrl_hdr *hdr; 1377 struct sk_buff *skb; 1378 1379 pr_debug("opcode 0x%x, plen %d\n", opcode, plen); 1380 1381 skb = nci_skb_alloc(ndev, (NCI_CTRL_HDR_SIZE + plen), GFP_KERNEL); 1382 if (!skb) { 1383 pr_err("no memory for command\n"); 1384 return -ENOMEM; 1385 } 1386 1387 hdr = skb_put(skb, NCI_CTRL_HDR_SIZE); 1388 hdr->gid = nci_opcode_gid(opcode); 1389 hdr->oid = nci_opcode_oid(opcode); 1390 hdr->plen = plen; 1391 1392 nci_mt_set((__u8 *)hdr, NCI_MT_CMD_PKT); 1393 nci_pbf_set((__u8 *)hdr, NCI_PBF_LAST); 1394 1395 if (plen) 1396 skb_put_data(skb, payload, plen); 1397 1398 skb_queue_tail(&ndev->cmd_q, skb); 1399 queue_work(ndev->cmd_wq, &ndev->cmd_work); 1400 1401 return 0; 1402 } 1403 EXPORT_SYMBOL(nci_send_cmd); 1404 1405 /* Proprietary commands API */ 1406 static const struct nci_driver_ops *ops_cmd_lookup(const struct nci_driver_ops *ops, 1407 size_t n_ops, 1408 __u16 opcode) 1409 { 1410 size_t i; 1411 const struct nci_driver_ops *op; 1412 1413 if (!ops || !n_ops) 1414 return NULL; 1415 1416 for (i = 0; i < n_ops; i++) { 1417 op = &ops[i]; 1418 if (op->opcode == opcode) 1419 return op; 1420 } 1421 1422 return NULL; 1423 } 1424 1425 static int nci_op_rsp_packet(struct nci_dev *ndev, __u16 rsp_opcode, 1426 struct sk_buff *skb, const struct nci_driver_ops *ops, 1427 size_t n_ops) 1428 { 1429 const struct nci_driver_ops *op; 1430 1431 op = ops_cmd_lookup(ops, n_ops, rsp_opcode); 1432 if (!op || !op->rsp) 1433 return -ENOTSUPP; 1434 1435 return op->rsp(ndev, skb); 1436 } 1437 1438 static int nci_op_ntf_packet(struct nci_dev *ndev, __u16 ntf_opcode, 1439 struct sk_buff *skb, const struct nci_driver_ops *ops, 1440 size_t n_ops) 1441 { 1442 const struct nci_driver_ops *op; 1443 1444 op = ops_cmd_lookup(ops, n_ops, ntf_opcode); 1445 if (!op || !op->ntf) 1446 return -ENOTSUPP; 1447 1448 return op->ntf(ndev, skb); 1449 } 1450 1451 int nci_prop_rsp_packet(struct nci_dev *ndev, __u16 opcode, 1452 struct sk_buff *skb) 1453 { 1454 return nci_op_rsp_packet(ndev, opcode, skb, ndev->ops->prop_ops, 1455 ndev->ops->n_prop_ops); 1456 } 1457 1458 int nci_prop_ntf_packet(struct nci_dev *ndev, __u16 opcode, 1459 struct sk_buff *skb) 1460 { 1461 return nci_op_ntf_packet(ndev, opcode, skb, ndev->ops->prop_ops, 1462 ndev->ops->n_prop_ops); 1463 } 1464 1465 int nci_core_rsp_packet(struct nci_dev *ndev, __u16 opcode, 1466 struct sk_buff *skb) 1467 { 1468 return nci_op_rsp_packet(ndev, opcode, skb, ndev->ops->core_ops, 1469 ndev->ops->n_core_ops); 1470 } 1471 1472 int nci_core_ntf_packet(struct nci_dev *ndev, __u16 opcode, 1473 struct sk_buff *skb) 1474 { 1475 return nci_op_ntf_packet(ndev, opcode, skb, ndev->ops->core_ops, 1476 ndev->ops->n_core_ops); 1477 } 1478 1479 static bool nci_valid_size(struct sk_buff *skb) 1480 { 1481 BUILD_BUG_ON(NCI_CTRL_HDR_SIZE != NCI_DATA_HDR_SIZE); 1482 unsigned int hdr_size = NCI_CTRL_HDR_SIZE; 1483 1484 if (skb->len < hdr_size || 1485 !nci_plen(skb->data) || 1486 skb->len < hdr_size + nci_plen(skb->data)) { 1487 return false; 1488 } 1489 return true; 1490 } 1491 1492 /* ---- NCI TX Data worker thread ---- */ 1493 1494 static void nci_tx_work(struct work_struct *work) 1495 { 1496 struct nci_dev *ndev = container_of(work, struct nci_dev, tx_work); 1497 struct nci_conn_info *conn_info; 1498 struct sk_buff *skb; 1499 1500 conn_info = nci_get_conn_info_by_conn_id(ndev, ndev->cur_conn_id); 1501 if (!conn_info) 1502 return; 1503 1504 pr_debug("credits_cnt %d\n", atomic_read(&conn_info->credits_cnt)); 1505 1506 /* Send queued tx data */ 1507 while (atomic_read(&conn_info->credits_cnt)) { 1508 skb = skb_dequeue(&ndev->tx_q); 1509 if (!skb) 1510 return; 1511 kcov_remote_start_common(skb_get_kcov_handle(skb)); 1512 1513 /* Check if data flow control is used */ 1514 if (atomic_read(&conn_info->credits_cnt) != 1515 NCI_DATA_FLOW_CONTROL_NOT_USED) 1516 atomic_dec(&conn_info->credits_cnt); 1517 1518 pr_debug("NCI TX: MT=data, PBF=%d, conn_id=%d, plen=%d\n", 1519 nci_pbf(skb->data), 1520 nci_conn_id(skb->data), 1521 nci_plen(skb->data)); 1522 1523 nci_send_frame(ndev, skb); 1524 1525 mod_timer(&ndev->data_timer, 1526 jiffies + msecs_to_jiffies(NCI_DATA_TIMEOUT)); 1527 kcov_remote_stop(); 1528 } 1529 } 1530 1531 /* ----- NCI RX worker thread (data & control) ----- */ 1532 1533 static void nci_rx_work(struct work_struct *work) 1534 { 1535 struct nci_dev *ndev = container_of(work, struct nci_dev, rx_work); 1536 struct sk_buff *skb; 1537 1538 for (; (skb = skb_dequeue(&ndev->rx_q)); kcov_remote_stop()) { 1539 kcov_remote_start_common(skb_get_kcov_handle(skb)); 1540 1541 /* Send copy to sniffer */ 1542 nfc_send_to_raw_sock(ndev->nfc_dev, skb, 1543 RAW_PAYLOAD_NCI, NFC_DIRECTION_RX); 1544 1545 if (!nci_valid_size(skb)) { 1546 kfree_skb(skb); 1547 continue; 1548 } 1549 1550 /* Process frame */ 1551 switch (nci_mt(skb->data)) { 1552 case NCI_MT_RSP_PKT: 1553 nci_rsp_packet(ndev, skb); 1554 break; 1555 1556 case NCI_MT_NTF_PKT: 1557 nci_ntf_packet(ndev, skb); 1558 break; 1559 1560 case NCI_MT_DATA_PKT: 1561 nci_rx_data_packet(ndev, skb); 1562 break; 1563 1564 default: 1565 pr_err("unknown MT 0x%x\n", nci_mt(skb->data)); 1566 kfree_skb(skb); 1567 break; 1568 } 1569 } 1570 1571 /* check if a data exchange timeout has occurred */ 1572 if (test_bit(NCI_DATA_EXCHANGE_TO, &ndev->flags)) { 1573 /* complete the data exchange transaction, if exists */ 1574 if (test_bit(NCI_DATA_EXCHANGE, &ndev->flags)) 1575 nci_data_exchange_complete(ndev, NULL, 1576 ndev->cur_conn_id, 1577 -ETIMEDOUT); 1578 1579 clear_bit(NCI_DATA_EXCHANGE_TO, &ndev->flags); 1580 } 1581 } 1582 1583 /* ----- NCI TX CMD worker thread ----- */ 1584 1585 static void nci_cmd_work(struct work_struct *work) 1586 { 1587 struct nci_dev *ndev = container_of(work, struct nci_dev, cmd_work); 1588 struct sk_buff *skb; 1589 1590 pr_debug("cmd_cnt %d\n", atomic_read(&ndev->cmd_cnt)); 1591 1592 /* Send queued command */ 1593 if (atomic_read(&ndev->cmd_cnt)) { 1594 skb = skb_dequeue(&ndev->cmd_q); 1595 if (!skb) 1596 return; 1597 1598 kcov_remote_start_common(skb_get_kcov_handle(skb)); 1599 atomic_dec(&ndev->cmd_cnt); 1600 1601 pr_debug("NCI TX: MT=cmd, PBF=%d, GID=0x%x, OID=0x%x, plen=%d\n", 1602 nci_pbf(skb->data), 1603 nci_opcode_gid(nci_opcode(skb->data)), 1604 nci_opcode_oid(nci_opcode(skb->data)), 1605 nci_plen(skb->data)); 1606 1607 nci_send_frame(ndev, skb); 1608 1609 mod_timer(&ndev->cmd_timer, 1610 jiffies + msecs_to_jiffies(NCI_CMD_TIMEOUT)); 1611 kcov_remote_stop(); 1612 } 1613 } 1614 1615 MODULE_DESCRIPTION("NFC Controller Interface"); 1616 MODULE_LICENSE("GPL"); 1617