1 // SPDX-License-Identifier: GPL-2.0-only 2 /* 3 * The NFC Controller Interface is the communication protocol between an 4 * NFC Controller (NFCC) and a Device Host (DH). 5 * 6 * Copyright (C) 2014 Marvell International Ltd. 7 * Copyright (C) 2011 Texas Instruments, Inc. 8 * 9 * Written by Ilan Elias <ilane@ti.com> 10 * 11 * Acknowledgements: 12 * This file is based on hci_event.c, which was written 13 * by Maxim Krasnyansky. 14 */ 15 16 #define pr_fmt(fmt) KBUILD_MODNAME ": %s: " fmt, __func__ 17 18 #include <linux/types.h> 19 #include <linux/interrupt.h> 20 #include <linux/bitops.h> 21 #include <linux/skbuff.h> 22 23 #include "../nfc.h" 24 #include <net/nfc/nci.h> 25 #include <net/nfc/nci_core.h> 26 #include <linux/nfc.h> 27 28 /* Handle NCI Notification packets */ 29 30 static void nci_core_reset_ntf_packet(struct nci_dev *ndev, 31 const struct sk_buff *skb) 32 { 33 /* Handle NCI 2.x core reset notification */ 34 const struct nci_core_reset_ntf *ntf = (void *)skb->data; 35 36 ndev->nci_ver = ntf->nci_ver; 37 pr_debug("nci_ver 0x%x, config_status 0x%x\n", 38 ntf->nci_ver, ntf->config_status); 39 40 ndev->manufact_id = ntf->manufact_id; 41 ndev->manufact_specific_info = 42 __le32_to_cpu(ntf->manufact_specific_info); 43 44 nci_req_complete(ndev, NCI_STATUS_OK); 45 } 46 47 static void nci_core_conn_credits_ntf_packet(struct nci_dev *ndev, 48 struct sk_buff *skb) 49 { 50 struct nci_core_conn_credit_ntf *ntf = (void *) skb->data; 51 struct nci_conn_info *conn_info; 52 int i; 53 54 pr_debug("num_entries %d\n", ntf->num_entries); 55 56 if (ntf->num_entries > NCI_MAX_NUM_CONN) 57 ntf->num_entries = NCI_MAX_NUM_CONN; 58 59 /* update the credits */ 60 for (i = 0; i < ntf->num_entries; i++) { 61 ntf->conn_entries[i].conn_id = 62 nci_conn_id(&ntf->conn_entries[i].conn_id); 63 64 pr_debug("entry[%d]: conn_id %d, credits %d\n", 65 i, ntf->conn_entries[i].conn_id, 66 ntf->conn_entries[i].credits); 67 68 conn_info = nci_get_conn_info_by_conn_id(ndev, 69 ntf->conn_entries[i].conn_id); 70 if (!conn_info) 71 return; 72 73 atomic_add(ntf->conn_entries[i].credits, 74 &conn_info->credits_cnt); 75 } 76 77 /* trigger the next tx */ 78 if (!skb_queue_empty(&ndev->tx_q)) 79 queue_work(ndev->tx_wq, &ndev->tx_work); 80 } 81 82 static void nci_core_generic_error_ntf_packet(struct nci_dev *ndev, 83 const struct sk_buff *skb) 84 { 85 __u8 status = skb->data[0]; 86 87 pr_debug("status 0x%x\n", status); 88 89 if (atomic_read(&ndev->state) == NCI_W4_HOST_SELECT) { 90 /* Activation failed, so complete the request 91 (the state remains the same) */ 92 nci_req_complete(ndev, status); 93 } 94 } 95 96 static void nci_core_conn_intf_error_ntf_packet(struct nci_dev *ndev, 97 struct sk_buff *skb) 98 { 99 struct nci_core_intf_error_ntf *ntf = (void *) skb->data; 100 101 ntf->conn_id = nci_conn_id(&ntf->conn_id); 102 103 pr_debug("status 0x%x, conn_id %d\n", ntf->status, ntf->conn_id); 104 105 /* complete the data exchange transaction, if exists */ 106 if (test_bit(NCI_DATA_EXCHANGE, &ndev->flags)) 107 nci_data_exchange_complete(ndev, NULL, ntf->conn_id, -EIO); 108 } 109 110 static const __u8 * 111 nci_extract_rf_params_nfca_passive_poll(struct nci_dev *ndev, 112 struct rf_tech_specific_params_nfca_poll *nfca_poll, 113 const __u8 *data) 114 { 115 nfca_poll->sens_res = __le16_to_cpu(*((__le16 *)data)); 116 data += 2; 117 118 nfca_poll->nfcid1_len = min_t(__u8, *data++, NFC_NFCID1_MAXSIZE); 119 120 pr_debug("sens_res 0x%x, nfcid1_len %d\n", 121 nfca_poll->sens_res, nfca_poll->nfcid1_len); 122 123 memcpy(nfca_poll->nfcid1, data, nfca_poll->nfcid1_len); 124 data += nfca_poll->nfcid1_len; 125 126 nfca_poll->sel_res_len = *data++; 127 128 if (nfca_poll->sel_res_len != 0) 129 nfca_poll->sel_res = *data++; 130 131 pr_debug("sel_res_len %d, sel_res 0x%x\n", 132 nfca_poll->sel_res_len, 133 nfca_poll->sel_res); 134 135 return data; 136 } 137 138 static const __u8 * 139 nci_extract_rf_params_nfcb_passive_poll(struct nci_dev *ndev, 140 struct rf_tech_specific_params_nfcb_poll *nfcb_poll, 141 const __u8 *data) 142 { 143 nfcb_poll->sensb_res_len = min_t(__u8, *data++, NFC_SENSB_RES_MAXSIZE); 144 145 pr_debug("sensb_res_len %d\n", nfcb_poll->sensb_res_len); 146 147 memcpy(nfcb_poll->sensb_res, data, nfcb_poll->sensb_res_len); 148 data += nfcb_poll->sensb_res_len; 149 150 return data; 151 } 152 153 static const __u8 * 154 nci_extract_rf_params_nfcf_passive_poll(struct nci_dev *ndev, 155 struct rf_tech_specific_params_nfcf_poll *nfcf_poll, 156 const __u8 *data) 157 { 158 nfcf_poll->bit_rate = *data++; 159 nfcf_poll->sensf_res_len = min_t(__u8, *data++, NFC_SENSF_RES_MAXSIZE); 160 161 pr_debug("bit_rate %d, sensf_res_len %d\n", 162 nfcf_poll->bit_rate, nfcf_poll->sensf_res_len); 163 164 memcpy(nfcf_poll->sensf_res, data, nfcf_poll->sensf_res_len); 165 data += nfcf_poll->sensf_res_len; 166 167 return data; 168 } 169 170 static const __u8 * 171 nci_extract_rf_params_nfcv_passive_poll(struct nci_dev *ndev, 172 struct rf_tech_specific_params_nfcv_poll *nfcv_poll, 173 const __u8 *data) 174 { 175 ++data; 176 nfcv_poll->dsfid = *data++; 177 memcpy(nfcv_poll->uid, data, NFC_ISO15693_UID_MAXSIZE); 178 data += NFC_ISO15693_UID_MAXSIZE; 179 return data; 180 } 181 182 static const __u8 * 183 nci_extract_rf_params_nfcf_passive_listen(struct nci_dev *ndev, 184 struct rf_tech_specific_params_nfcf_listen *nfcf_listen, 185 const __u8 *data) 186 { 187 nfcf_listen->local_nfcid2_len = min_t(__u8, *data++, 188 NFC_NFCID2_MAXSIZE); 189 memcpy(nfcf_listen->local_nfcid2, data, nfcf_listen->local_nfcid2_len); 190 data += nfcf_listen->local_nfcid2_len; 191 192 return data; 193 } 194 195 static __u32 nci_get_prop_rf_protocol(struct nci_dev *ndev, __u8 rf_protocol) 196 { 197 if (ndev->ops->get_rfprotocol) 198 return ndev->ops->get_rfprotocol(ndev, rf_protocol); 199 return 0; 200 } 201 202 static int nci_add_new_protocol(struct nci_dev *ndev, 203 struct nfc_target *target, 204 __u8 rf_protocol, 205 __u8 rf_tech_and_mode, 206 const void *params) 207 { 208 const struct rf_tech_specific_params_nfca_poll *nfca_poll; 209 const struct rf_tech_specific_params_nfcb_poll *nfcb_poll; 210 const struct rf_tech_specific_params_nfcf_poll *nfcf_poll; 211 const struct rf_tech_specific_params_nfcv_poll *nfcv_poll; 212 __u32 protocol; 213 214 if (rf_protocol == NCI_RF_PROTOCOL_T1T) 215 protocol = NFC_PROTO_JEWEL_MASK; 216 else if (rf_protocol == NCI_RF_PROTOCOL_T2T) 217 protocol = NFC_PROTO_MIFARE_MASK; 218 else if (rf_protocol == NCI_RF_PROTOCOL_ISO_DEP) 219 if (rf_tech_and_mode == NCI_NFC_A_PASSIVE_POLL_MODE) 220 protocol = NFC_PROTO_ISO14443_MASK; 221 else 222 protocol = NFC_PROTO_ISO14443_B_MASK; 223 else if (rf_protocol == NCI_RF_PROTOCOL_T3T) 224 protocol = NFC_PROTO_FELICA_MASK; 225 else if (rf_protocol == NCI_RF_PROTOCOL_NFC_DEP) 226 protocol = NFC_PROTO_NFC_DEP_MASK; 227 else if (rf_protocol == NCI_RF_PROTOCOL_T5T) 228 protocol = NFC_PROTO_ISO15693_MASK; 229 else 230 protocol = nci_get_prop_rf_protocol(ndev, rf_protocol); 231 232 if (!(protocol & ndev->poll_prots)) { 233 pr_err("the target found does not have the desired protocol\n"); 234 return -EPROTO; 235 } 236 237 if (rf_tech_and_mode == NCI_NFC_A_PASSIVE_POLL_MODE) { 238 nfca_poll = (struct rf_tech_specific_params_nfca_poll *)params; 239 240 target->sens_res = nfca_poll->sens_res; 241 target->sel_res = nfca_poll->sel_res; 242 target->nfcid1_len = nfca_poll->nfcid1_len; 243 if (target->nfcid1_len > ARRAY_SIZE(target->nfcid1)) 244 return -EPROTO; 245 if (target->nfcid1_len > 0) { 246 memcpy(target->nfcid1, nfca_poll->nfcid1, 247 target->nfcid1_len); 248 } 249 } else if (rf_tech_and_mode == NCI_NFC_B_PASSIVE_POLL_MODE) { 250 nfcb_poll = (struct rf_tech_specific_params_nfcb_poll *)params; 251 252 target->sensb_res_len = nfcb_poll->sensb_res_len; 253 if (target->sensb_res_len > ARRAY_SIZE(target->sensb_res)) 254 return -EPROTO; 255 if (target->sensb_res_len > 0) { 256 memcpy(target->sensb_res, nfcb_poll->sensb_res, 257 target->sensb_res_len); 258 } 259 } else if (rf_tech_and_mode == NCI_NFC_F_PASSIVE_POLL_MODE) { 260 nfcf_poll = (struct rf_tech_specific_params_nfcf_poll *)params; 261 262 target->sensf_res_len = nfcf_poll->sensf_res_len; 263 if (target->sensf_res_len > ARRAY_SIZE(target->sensf_res)) 264 return -EPROTO; 265 if (target->sensf_res_len > 0) { 266 memcpy(target->sensf_res, nfcf_poll->sensf_res, 267 target->sensf_res_len); 268 } 269 } else if (rf_tech_and_mode == NCI_NFC_V_PASSIVE_POLL_MODE) { 270 nfcv_poll = (struct rf_tech_specific_params_nfcv_poll *)params; 271 272 target->is_iso15693 = 1; 273 target->iso15693_dsfid = nfcv_poll->dsfid; 274 memcpy(target->iso15693_uid, nfcv_poll->uid, NFC_ISO15693_UID_MAXSIZE); 275 } else { 276 pr_err("unsupported rf_tech_and_mode 0x%x\n", rf_tech_and_mode); 277 return -EPROTO; 278 } 279 280 target->supported_protocols |= protocol; 281 282 pr_debug("protocol 0x%x\n", protocol); 283 284 return 0; 285 } 286 287 static void nci_add_new_target(struct nci_dev *ndev, 288 const struct nci_rf_discover_ntf *ntf) 289 { 290 struct nfc_target *target; 291 int i, rc; 292 293 for (i = 0; i < ndev->n_targets; i++) { 294 target = &ndev->targets[i]; 295 if (target->logical_idx == ntf->rf_discovery_id) { 296 /* This target already exists, add the new protocol */ 297 nci_add_new_protocol(ndev, target, ntf->rf_protocol, 298 ntf->rf_tech_and_mode, 299 &ntf->rf_tech_specific_params); 300 return; 301 } 302 } 303 304 /* This is a new target, check if we've enough room */ 305 if (ndev->n_targets == NCI_MAX_DISCOVERED_TARGETS) { 306 pr_debug("not enough room, ignoring new target...\n"); 307 return; 308 } 309 310 target = &ndev->targets[ndev->n_targets]; 311 312 rc = nci_add_new_protocol(ndev, target, ntf->rf_protocol, 313 ntf->rf_tech_and_mode, 314 &ntf->rf_tech_specific_params); 315 if (!rc) { 316 target->logical_idx = ntf->rf_discovery_id; 317 ndev->n_targets++; 318 319 pr_debug("logical idx %d, n_targets %d\n", target->logical_idx, 320 ndev->n_targets); 321 } 322 } 323 324 void nci_clear_target_list(struct nci_dev *ndev) 325 { 326 memset(ndev->targets, 0, 327 (sizeof(struct nfc_target)*NCI_MAX_DISCOVERED_TARGETS)); 328 329 ndev->n_targets = 0; 330 } 331 332 static void nci_rf_discover_ntf_packet(struct nci_dev *ndev, 333 const struct sk_buff *skb) 334 { 335 struct nci_rf_discover_ntf ntf; 336 const __u8 *data = skb->data; 337 bool add_target = true; 338 339 ntf.rf_discovery_id = *data++; 340 ntf.rf_protocol = *data++; 341 ntf.rf_tech_and_mode = *data++; 342 ntf.rf_tech_specific_params_len = *data++; 343 344 pr_debug("rf_discovery_id %d\n", ntf.rf_discovery_id); 345 pr_debug("rf_protocol 0x%x\n", ntf.rf_protocol); 346 pr_debug("rf_tech_and_mode 0x%x\n", ntf.rf_tech_and_mode); 347 pr_debug("rf_tech_specific_params_len %d\n", 348 ntf.rf_tech_specific_params_len); 349 350 if (ntf.rf_tech_specific_params_len > 0) { 351 switch (ntf.rf_tech_and_mode) { 352 case NCI_NFC_A_PASSIVE_POLL_MODE: 353 data = nci_extract_rf_params_nfca_passive_poll(ndev, 354 &(ntf.rf_tech_specific_params.nfca_poll), data); 355 break; 356 357 case NCI_NFC_B_PASSIVE_POLL_MODE: 358 data = nci_extract_rf_params_nfcb_passive_poll(ndev, 359 &(ntf.rf_tech_specific_params.nfcb_poll), data); 360 break; 361 362 case NCI_NFC_F_PASSIVE_POLL_MODE: 363 data = nci_extract_rf_params_nfcf_passive_poll(ndev, 364 &(ntf.rf_tech_specific_params.nfcf_poll), data); 365 break; 366 367 case NCI_NFC_V_PASSIVE_POLL_MODE: 368 data = nci_extract_rf_params_nfcv_passive_poll(ndev, 369 &(ntf.rf_tech_specific_params.nfcv_poll), data); 370 break; 371 372 default: 373 pr_err("unsupported rf_tech_and_mode 0x%x\n", 374 ntf.rf_tech_and_mode); 375 data += ntf.rf_tech_specific_params_len; 376 add_target = false; 377 } 378 } 379 380 ntf.ntf_type = *data++; 381 pr_debug("ntf_type %d\n", ntf.ntf_type); 382 383 if (add_target == true) 384 nci_add_new_target(ndev, &ntf); 385 386 if (ntf.ntf_type == NCI_DISCOVER_NTF_TYPE_MORE) { 387 atomic_set(&ndev->state, NCI_W4_ALL_DISCOVERIES); 388 } else { 389 atomic_set(&ndev->state, NCI_W4_HOST_SELECT); 390 nfc_targets_found(ndev->nfc_dev, ndev->targets, 391 ndev->n_targets); 392 } 393 } 394 395 static int nci_extract_activation_params_iso_dep(struct nci_dev *ndev, 396 struct nci_rf_intf_activated_ntf *ntf, 397 const __u8 *data) 398 { 399 struct activation_params_nfca_poll_iso_dep *nfca_poll; 400 struct activation_params_nfcb_poll_iso_dep *nfcb_poll; 401 402 switch (ntf->activation_rf_tech_and_mode) { 403 case NCI_NFC_A_PASSIVE_POLL_MODE: 404 nfca_poll = &ntf->activation_params.nfca_poll_iso_dep; 405 nfca_poll->rats_res_len = min_t(__u8, *data++, NFC_ATS_MAXSIZE); 406 pr_debug("rats_res_len %d\n", nfca_poll->rats_res_len); 407 if (nfca_poll->rats_res_len > 0) { 408 memcpy(nfca_poll->rats_res, 409 data, nfca_poll->rats_res_len); 410 } 411 break; 412 413 case NCI_NFC_B_PASSIVE_POLL_MODE: 414 nfcb_poll = &ntf->activation_params.nfcb_poll_iso_dep; 415 nfcb_poll->attrib_res_len = min_t(__u8, *data++, 50); 416 pr_debug("attrib_res_len %d\n", nfcb_poll->attrib_res_len); 417 if (nfcb_poll->attrib_res_len > 0) { 418 memcpy(nfcb_poll->attrib_res, 419 data, nfcb_poll->attrib_res_len); 420 } 421 break; 422 423 default: 424 pr_err("unsupported activation_rf_tech_and_mode 0x%x\n", 425 ntf->activation_rf_tech_and_mode); 426 return NCI_STATUS_RF_PROTOCOL_ERROR; 427 } 428 429 return NCI_STATUS_OK; 430 } 431 432 static int nci_extract_activation_params_nfc_dep(struct nci_dev *ndev, 433 struct nci_rf_intf_activated_ntf *ntf, 434 const __u8 *data) 435 { 436 struct activation_params_poll_nfc_dep *poll; 437 struct activation_params_listen_nfc_dep *listen; 438 439 switch (ntf->activation_rf_tech_and_mode) { 440 case NCI_NFC_A_PASSIVE_POLL_MODE: 441 case NCI_NFC_F_PASSIVE_POLL_MODE: 442 poll = &ntf->activation_params.poll_nfc_dep; 443 poll->atr_res_len = min_t(__u8, *data++, 444 NFC_ATR_RES_MAXSIZE - 2); 445 pr_debug("atr_res_len %d\n", poll->atr_res_len); 446 if (poll->atr_res_len > 0) 447 memcpy(poll->atr_res, data, poll->atr_res_len); 448 break; 449 450 case NCI_NFC_A_PASSIVE_LISTEN_MODE: 451 case NCI_NFC_F_PASSIVE_LISTEN_MODE: 452 listen = &ntf->activation_params.listen_nfc_dep; 453 listen->atr_req_len = min_t(__u8, *data++, 454 NFC_ATR_REQ_MAXSIZE - 2); 455 pr_debug("atr_req_len %d\n", listen->atr_req_len); 456 if (listen->atr_req_len > 0) 457 memcpy(listen->atr_req, data, listen->atr_req_len); 458 break; 459 460 default: 461 pr_err("unsupported activation_rf_tech_and_mode 0x%x\n", 462 ntf->activation_rf_tech_and_mode); 463 return NCI_STATUS_RF_PROTOCOL_ERROR; 464 } 465 466 return NCI_STATUS_OK; 467 } 468 469 static void nci_target_auto_activated(struct nci_dev *ndev, 470 const struct nci_rf_intf_activated_ntf *ntf) 471 { 472 struct nfc_target *target; 473 int rc; 474 475 target = &ndev->targets[ndev->n_targets]; 476 477 rc = nci_add_new_protocol(ndev, target, ntf->rf_protocol, 478 ntf->activation_rf_tech_and_mode, 479 &ntf->rf_tech_specific_params); 480 if (rc) 481 return; 482 483 target->logical_idx = ntf->rf_discovery_id; 484 ndev->n_targets++; 485 486 pr_debug("logical idx %d, n_targets %d\n", 487 target->logical_idx, ndev->n_targets); 488 489 nfc_targets_found(ndev->nfc_dev, ndev->targets, ndev->n_targets); 490 } 491 492 static int nci_store_general_bytes_nfc_dep(struct nci_dev *ndev, 493 const struct nci_rf_intf_activated_ntf *ntf) 494 { 495 ndev->remote_gb_len = 0; 496 497 if (ntf->activation_params_len <= 0) 498 return NCI_STATUS_OK; 499 500 switch (ntf->activation_rf_tech_and_mode) { 501 case NCI_NFC_A_PASSIVE_POLL_MODE: 502 case NCI_NFC_F_PASSIVE_POLL_MODE: 503 ndev->remote_gb_len = min_t(__u8, 504 (ntf->activation_params.poll_nfc_dep.atr_res_len 505 - NFC_ATR_RES_GT_OFFSET), 506 NFC_ATR_RES_GB_MAXSIZE); 507 memcpy(ndev->remote_gb, 508 (ntf->activation_params.poll_nfc_dep.atr_res 509 + NFC_ATR_RES_GT_OFFSET), 510 ndev->remote_gb_len); 511 break; 512 513 case NCI_NFC_A_PASSIVE_LISTEN_MODE: 514 case NCI_NFC_F_PASSIVE_LISTEN_MODE: 515 ndev->remote_gb_len = min_t(__u8, 516 (ntf->activation_params.listen_nfc_dep.atr_req_len 517 - NFC_ATR_REQ_GT_OFFSET), 518 NFC_ATR_REQ_GB_MAXSIZE); 519 memcpy(ndev->remote_gb, 520 (ntf->activation_params.listen_nfc_dep.atr_req 521 + NFC_ATR_REQ_GT_OFFSET), 522 ndev->remote_gb_len); 523 break; 524 525 default: 526 pr_err("unsupported activation_rf_tech_and_mode 0x%x\n", 527 ntf->activation_rf_tech_and_mode); 528 return NCI_STATUS_RF_PROTOCOL_ERROR; 529 } 530 531 return NCI_STATUS_OK; 532 } 533 534 static int nci_store_ats_nfc_iso_dep(struct nci_dev *ndev, 535 const struct nci_rf_intf_activated_ntf *ntf) 536 { 537 ndev->target_ats_len = 0; 538 539 if (ntf->activation_params_len <= 0) 540 return NCI_STATUS_OK; 541 542 if (ntf->activation_params.nfca_poll_iso_dep.rats_res_len > NFC_ATS_MAXSIZE) { 543 pr_debug("ATS too long\n"); 544 return NCI_STATUS_RF_PROTOCOL_ERROR; 545 } 546 547 if (ntf->activation_params.nfca_poll_iso_dep.rats_res_len > 0) { 548 ndev->target_ats_len = ntf->activation_params.nfca_poll_iso_dep.rats_res_len; 549 memcpy(ndev->target_ats, ntf->activation_params.nfca_poll_iso_dep.rats_res, 550 ndev->target_ats_len); 551 } 552 553 return NCI_STATUS_OK; 554 } 555 556 static void nci_rf_intf_activated_ntf_packet(struct nci_dev *ndev, 557 const struct sk_buff *skb) 558 { 559 struct nci_conn_info *conn_info; 560 struct nci_rf_intf_activated_ntf ntf; 561 const __u8 *data = skb->data; 562 int err = NCI_STATUS_OK; 563 564 ntf.rf_discovery_id = *data++; 565 ntf.rf_interface = *data++; 566 ntf.rf_protocol = *data++; 567 ntf.activation_rf_tech_and_mode = *data++; 568 ntf.max_data_pkt_payload_size = *data++; 569 ntf.initial_num_credits = *data++; 570 ntf.rf_tech_specific_params_len = *data++; 571 572 pr_debug("rf_discovery_id %d\n", ntf.rf_discovery_id); 573 pr_debug("rf_interface 0x%x\n", ntf.rf_interface); 574 pr_debug("rf_protocol 0x%x\n", ntf.rf_protocol); 575 pr_debug("activation_rf_tech_and_mode 0x%x\n", 576 ntf.activation_rf_tech_and_mode); 577 pr_debug("max_data_pkt_payload_size 0x%x\n", 578 ntf.max_data_pkt_payload_size); 579 pr_debug("initial_num_credits 0x%x\n", 580 ntf.initial_num_credits); 581 pr_debug("rf_tech_specific_params_len %d\n", 582 ntf.rf_tech_specific_params_len); 583 584 /* If this contains a value of 0x00 (NFCEE Direct RF 585 * Interface) then all following parameters SHALL contain a 586 * value of 0 and SHALL be ignored. 587 */ 588 if (ntf.rf_interface == NCI_RF_INTERFACE_NFCEE_DIRECT) 589 goto listen; 590 591 if (ntf.rf_tech_specific_params_len > 0) { 592 switch (ntf.activation_rf_tech_and_mode) { 593 case NCI_NFC_A_PASSIVE_POLL_MODE: 594 data = nci_extract_rf_params_nfca_passive_poll(ndev, 595 &(ntf.rf_tech_specific_params.nfca_poll), data); 596 break; 597 598 case NCI_NFC_B_PASSIVE_POLL_MODE: 599 data = nci_extract_rf_params_nfcb_passive_poll(ndev, 600 &(ntf.rf_tech_specific_params.nfcb_poll), data); 601 break; 602 603 case NCI_NFC_F_PASSIVE_POLL_MODE: 604 data = nci_extract_rf_params_nfcf_passive_poll(ndev, 605 &(ntf.rf_tech_specific_params.nfcf_poll), data); 606 break; 607 608 case NCI_NFC_V_PASSIVE_POLL_MODE: 609 data = nci_extract_rf_params_nfcv_passive_poll(ndev, 610 &(ntf.rf_tech_specific_params.nfcv_poll), data); 611 break; 612 613 case NCI_NFC_A_PASSIVE_LISTEN_MODE: 614 /* no RF technology specific parameters */ 615 break; 616 617 case NCI_NFC_F_PASSIVE_LISTEN_MODE: 618 data = nci_extract_rf_params_nfcf_passive_listen(ndev, 619 &(ntf.rf_tech_specific_params.nfcf_listen), 620 data); 621 break; 622 623 default: 624 pr_err("unsupported activation_rf_tech_and_mode 0x%x\n", 625 ntf.activation_rf_tech_and_mode); 626 err = NCI_STATUS_RF_PROTOCOL_ERROR; 627 goto exit; 628 } 629 } 630 631 ntf.data_exch_rf_tech_and_mode = *data++; 632 ntf.data_exch_tx_bit_rate = *data++; 633 ntf.data_exch_rx_bit_rate = *data++; 634 ntf.activation_params_len = *data++; 635 636 pr_debug("data_exch_rf_tech_and_mode 0x%x\n", 637 ntf.data_exch_rf_tech_and_mode); 638 pr_debug("data_exch_tx_bit_rate 0x%x\n", ntf.data_exch_tx_bit_rate); 639 pr_debug("data_exch_rx_bit_rate 0x%x\n", ntf.data_exch_rx_bit_rate); 640 pr_debug("activation_params_len %d\n", ntf.activation_params_len); 641 642 if (ntf.activation_params_len > 0) { 643 switch (ntf.rf_interface) { 644 case NCI_RF_INTERFACE_ISO_DEP: 645 err = nci_extract_activation_params_iso_dep(ndev, 646 &ntf, data); 647 break; 648 649 case NCI_RF_INTERFACE_NFC_DEP: 650 err = nci_extract_activation_params_nfc_dep(ndev, 651 &ntf, data); 652 break; 653 654 case NCI_RF_INTERFACE_FRAME: 655 /* no activation params */ 656 break; 657 658 default: 659 pr_err("unsupported rf_interface 0x%x\n", 660 ntf.rf_interface); 661 err = NCI_STATUS_RF_PROTOCOL_ERROR; 662 break; 663 } 664 } 665 666 exit: 667 if (err == NCI_STATUS_OK) { 668 conn_info = ndev->rf_conn_info; 669 if (!conn_info) 670 return; 671 672 conn_info->max_pkt_payload_len = ntf.max_data_pkt_payload_size; 673 conn_info->initial_num_credits = ntf.initial_num_credits; 674 675 /* set the available credits to initial value */ 676 atomic_set(&conn_info->credits_cnt, 677 conn_info->initial_num_credits); 678 679 /* store general bytes to be reported later in dep_link_up */ 680 if (ntf.rf_interface == NCI_RF_INTERFACE_NFC_DEP) { 681 err = nci_store_general_bytes_nfc_dep(ndev, &ntf); 682 if (err != NCI_STATUS_OK) 683 pr_err("unable to store general bytes\n"); 684 } 685 686 /* store ATS to be reported later in nci_activate_target */ 687 if (ntf.rf_interface == NCI_RF_INTERFACE_ISO_DEP && 688 ntf.activation_rf_tech_and_mode == NCI_NFC_A_PASSIVE_POLL_MODE) { 689 err = nci_store_ats_nfc_iso_dep(ndev, &ntf); 690 if (err != NCI_STATUS_OK) 691 pr_err("unable to store ATS\n"); 692 } 693 } 694 695 if (!(ntf.activation_rf_tech_and_mode & NCI_RF_TECH_MODE_LISTEN_MASK)) { 696 /* Poll mode */ 697 if (atomic_read(&ndev->state) == NCI_DISCOVERY) { 698 /* A single target was found and activated 699 * automatically */ 700 atomic_set(&ndev->state, NCI_POLL_ACTIVE); 701 if (err == NCI_STATUS_OK) 702 nci_target_auto_activated(ndev, &ntf); 703 } else { /* ndev->state == NCI_W4_HOST_SELECT */ 704 /* A selected target was activated, so complete the 705 * request */ 706 atomic_set(&ndev->state, NCI_POLL_ACTIVE); 707 nci_req_complete(ndev, err); 708 } 709 } else { 710 listen: 711 /* Listen mode */ 712 atomic_set(&ndev->state, NCI_LISTEN_ACTIVE); 713 if (err == NCI_STATUS_OK && 714 ntf.rf_protocol == NCI_RF_PROTOCOL_NFC_DEP) { 715 err = nfc_tm_activated(ndev->nfc_dev, 716 NFC_PROTO_NFC_DEP_MASK, 717 NFC_COMM_PASSIVE, 718 ndev->remote_gb, 719 ndev->remote_gb_len); 720 if (err != NCI_STATUS_OK) 721 pr_err("error when signaling tm activation\n"); 722 } 723 } 724 } 725 726 static void nci_rf_deactivate_ntf_packet(struct nci_dev *ndev, 727 const struct sk_buff *skb) 728 { 729 const struct nci_conn_info *conn_info; 730 const struct nci_rf_deactivate_ntf *ntf = (void *)skb->data; 731 732 pr_debug("entry, type 0x%x, reason 0x%x\n", ntf->type, ntf->reason); 733 734 conn_info = ndev->rf_conn_info; 735 if (!conn_info) 736 return; 737 738 /* drop tx data queue */ 739 skb_queue_purge(&ndev->tx_q); 740 741 /* drop partial rx data packet */ 742 if (ndev->rx_data_reassembly) { 743 kfree_skb(ndev->rx_data_reassembly); 744 ndev->rx_data_reassembly = NULL; 745 } 746 747 /* complete the data exchange transaction, if exists */ 748 if (test_bit(NCI_DATA_EXCHANGE, &ndev->flags)) 749 nci_data_exchange_complete(ndev, NULL, NCI_STATIC_RF_CONN_ID, 750 -EIO); 751 752 switch (ntf->type) { 753 case NCI_DEACTIVATE_TYPE_IDLE_MODE: 754 nci_clear_target_list(ndev); 755 atomic_set(&ndev->state, NCI_IDLE); 756 break; 757 case NCI_DEACTIVATE_TYPE_SLEEP_MODE: 758 case NCI_DEACTIVATE_TYPE_SLEEP_AF_MODE: 759 atomic_set(&ndev->state, NCI_W4_HOST_SELECT); 760 break; 761 case NCI_DEACTIVATE_TYPE_DISCOVERY: 762 nci_clear_target_list(ndev); 763 atomic_set(&ndev->state, NCI_DISCOVERY); 764 break; 765 } 766 767 nci_req_complete(ndev, NCI_STATUS_OK); 768 } 769 770 static void nci_nfcee_discover_ntf_packet(struct nci_dev *ndev, 771 const struct sk_buff *skb) 772 { 773 u8 status = NCI_STATUS_OK; 774 const struct nci_nfcee_discover_ntf *nfcee_ntf = 775 (struct nci_nfcee_discover_ntf *)skb->data; 776 777 /* NFCForum NCI 9.2.1 HCI Network Specific Handling 778 * If the NFCC supports the HCI Network, it SHALL return one, 779 * and only one, NFCEE_DISCOVER_NTF with a Protocol type of 780 * “HCI Access”, even if the HCI Network contains multiple NFCEEs. 781 */ 782 ndev->hci_dev->nfcee_id = nfcee_ntf->nfcee_id; 783 ndev->cur_params.id = nfcee_ntf->nfcee_id; 784 785 nci_req_complete(ndev, status); 786 } 787 788 void nci_ntf_packet(struct nci_dev *ndev, struct sk_buff *skb) 789 { 790 __u16 ntf_opcode = nci_opcode(skb->data); 791 792 pr_debug("NCI RX: MT=ntf, PBF=%d, GID=0x%x, OID=0x%x, plen=%d\n", 793 nci_pbf(skb->data), 794 nci_opcode_gid(ntf_opcode), 795 nci_opcode_oid(ntf_opcode), 796 nci_plen(skb->data)); 797 798 /* strip the nci control header */ 799 skb_pull(skb, NCI_CTRL_HDR_SIZE); 800 801 if (nci_opcode_gid(ntf_opcode) == NCI_GID_PROPRIETARY) { 802 if (nci_prop_ntf_packet(ndev, ntf_opcode, skb) == -ENOTSUPP) { 803 pr_err("unsupported ntf opcode 0x%x\n", 804 ntf_opcode); 805 } 806 807 goto end; 808 } 809 810 switch (ntf_opcode) { 811 case NCI_OP_CORE_RESET_NTF: 812 nci_core_reset_ntf_packet(ndev, skb); 813 break; 814 815 case NCI_OP_CORE_CONN_CREDITS_NTF: 816 nci_core_conn_credits_ntf_packet(ndev, skb); 817 break; 818 819 case NCI_OP_CORE_GENERIC_ERROR_NTF: 820 nci_core_generic_error_ntf_packet(ndev, skb); 821 break; 822 823 case NCI_OP_CORE_INTF_ERROR_NTF: 824 nci_core_conn_intf_error_ntf_packet(ndev, skb); 825 break; 826 827 case NCI_OP_RF_DISCOVER_NTF: 828 nci_rf_discover_ntf_packet(ndev, skb); 829 break; 830 831 case NCI_OP_RF_INTF_ACTIVATED_NTF: 832 nci_rf_intf_activated_ntf_packet(ndev, skb); 833 break; 834 835 case NCI_OP_RF_DEACTIVATE_NTF: 836 nci_rf_deactivate_ntf_packet(ndev, skb); 837 break; 838 839 case NCI_OP_NFCEE_DISCOVER_NTF: 840 nci_nfcee_discover_ntf_packet(ndev, skb); 841 break; 842 843 case NCI_OP_RF_NFCEE_ACTION_NTF: 844 break; 845 846 default: 847 pr_err("unknown ntf opcode 0x%x\n", ntf_opcode); 848 break; 849 } 850 851 nci_core_ntf_packet(ndev, ntf_opcode, skb); 852 end: 853 kfree_skb(skb); 854 } 855