1 // SPDX-License-Identifier: GPL-2.0-only
3 * The NFC Controller Interface is the communication protocol between an
4 * NFC Controller (NFCC) and a Device Host (DH).
6 * Copyright (C) 2011 Texas Instruments, Inc.
7 * Copyright (C) 2014 Marvell International Ltd.
9 * Written by Ilan Elias <ilane@ti.com>
12 * This file is based on hci_core.c, which was written
13 * by Maxim Krasnyansky.
16 #define pr_fmt(fmt) KBUILD_MODNAME ": %s: " fmt, __func__
18 #include <linux/module.h>
19 #include <linux/kernel.h>
20 #include <linux/types.h>
21 #include <linux/workqueue.h>
22 #include <linux/completion.h>
23 #include <linux/export.h>
24 #include <linux/sched.h>
25 #include <linux/bitops.h>
26 #include <linux/skbuff.h>
29 #include <net/nfc/nci.h>
30 #include <net/nfc/nci_core.h>
31 #include <linux/nfc.h>
33 struct core_conn_create_data {
35 struct nci_core_conn_create_cmd *cmd;
38 static void nci_cmd_work(struct work_struct *work);
39 static void nci_rx_work(struct work_struct *work);
40 static void nci_tx_work(struct work_struct *work);
42 struct nci_conn_info *nci_get_conn_info_by_conn_id(struct nci_dev *ndev,
45 struct nci_conn_info *conn_info;
47 list_for_each_entry(conn_info, &ndev->conn_info_list, list) {
48 if (conn_info->conn_id == conn_id)
55 int nci_get_conn_info_by_dest_type_params(struct nci_dev *ndev, u8 dest_type,
56 struct dest_spec_params *params)
58 struct nci_conn_info *conn_info;
60 list_for_each_entry(conn_info, &ndev->conn_info_list, list) {
61 if (conn_info->dest_type == dest_type) {
63 return conn_info->conn_id;
65 if (params->id == conn_info->dest_params->id &&
66 params->protocol == conn_info->dest_params->protocol)
67 return conn_info->conn_id;
73 EXPORT_SYMBOL(nci_get_conn_info_by_dest_type_params);
75 /* ---- NCI requests ---- */
77 void nci_req_complete(struct nci_dev *ndev, int result)
79 if (ndev->req_status == NCI_REQ_PEND) {
80 ndev->req_result = result;
81 ndev->req_status = NCI_REQ_DONE;
82 complete(&ndev->req_completion);
85 EXPORT_SYMBOL(nci_req_complete);
87 static void nci_req_cancel(struct nci_dev *ndev, int err)
89 if (ndev->req_status == NCI_REQ_PEND) {
90 ndev->req_result = err;
91 ndev->req_status = NCI_REQ_CANCELED;
92 complete(&ndev->req_completion);
96 /* Execute request and wait for completion. */
97 static int __nci_request(struct nci_dev *ndev,
98 void (*req)(struct nci_dev *ndev, unsigned long opt),
99 unsigned long opt, __u32 timeout)
104 ndev->req_status = NCI_REQ_PEND;
106 reinit_completion(&ndev->req_completion);
109 wait_for_completion_interruptible_timeout(&ndev->req_completion,
112 pr_debug("wait_for_completion return %ld\n", completion_rc);
114 if (completion_rc > 0) {
115 switch (ndev->req_status) {
117 rc = nci_to_errno(ndev->req_result);
120 case NCI_REQ_CANCELED:
121 rc = -ndev->req_result;
129 pr_err("wait_for_completion_interruptible_timeout failed %ld\n",
132 rc = ((completion_rc == 0) ? (-ETIMEDOUT) : (completion_rc));
135 ndev->req_status = ndev->req_result = 0;
140 inline int nci_request(struct nci_dev *ndev,
141 void (*req)(struct nci_dev *ndev,
143 unsigned long opt, __u32 timeout)
147 /* Serialize all requests */
148 mutex_lock(&ndev->req_lock);
149 /* check the state after obtaing the lock against any races
150 * from nci_close_device when the device gets removed.
152 if (test_bit(NCI_UP, &ndev->flags))
153 rc = __nci_request(ndev, req, opt, timeout);
156 mutex_unlock(&ndev->req_lock);
161 static void nci_reset_req(struct nci_dev *ndev, unsigned long opt)
163 struct nci_core_reset_cmd cmd;
165 cmd.reset_type = NCI_RESET_TYPE_RESET_CONFIG;
166 nci_send_cmd(ndev, NCI_OP_CORE_RESET_CMD, 1, &cmd);
169 static void nci_init_req(struct nci_dev *ndev, unsigned long opt)
171 nci_send_cmd(ndev, NCI_OP_CORE_INIT_CMD, 0, NULL);
174 static void nci_init_complete_req(struct nci_dev *ndev, unsigned long opt)
176 struct nci_rf_disc_map_cmd cmd;
177 struct disc_map_config *cfg = cmd.mapping_configs;
178 __u8 *num = &cmd.num_mapping_configs;
181 /* set rf mapping configurations */
184 /* by default mapping is set to NCI_RF_INTERFACE_FRAME */
185 for (i = 0; i < ndev->num_supported_rf_interfaces; i++) {
186 if (ndev->supported_rf_interfaces[i] ==
187 NCI_RF_INTERFACE_ISO_DEP) {
188 cfg[*num].rf_protocol = NCI_RF_PROTOCOL_ISO_DEP;
189 cfg[*num].mode = NCI_DISC_MAP_MODE_POLL |
190 NCI_DISC_MAP_MODE_LISTEN;
191 cfg[*num].rf_interface = NCI_RF_INTERFACE_ISO_DEP;
193 } else if (ndev->supported_rf_interfaces[i] ==
194 NCI_RF_INTERFACE_NFC_DEP) {
195 cfg[*num].rf_protocol = NCI_RF_PROTOCOL_NFC_DEP;
196 cfg[*num].mode = NCI_DISC_MAP_MODE_POLL |
197 NCI_DISC_MAP_MODE_LISTEN;
198 cfg[*num].rf_interface = NCI_RF_INTERFACE_NFC_DEP;
202 if (*num == NCI_MAX_NUM_MAPPING_CONFIGS)
206 nci_send_cmd(ndev, NCI_OP_RF_DISCOVER_MAP_CMD,
207 (1 + ((*num) * sizeof(struct disc_map_config))), &cmd);
210 struct nci_set_config_param {
216 static void nci_set_config_req(struct nci_dev *ndev, unsigned long opt)
218 struct nci_set_config_param *param = (struct nci_set_config_param *)opt;
219 struct nci_core_set_config_cmd cmd;
221 BUG_ON(param->len > NCI_MAX_PARAM_LEN);
224 cmd.param.id = param->id;
225 cmd.param.len = param->len;
226 memcpy(cmd.param.val, param->val, param->len);
228 nci_send_cmd(ndev, NCI_OP_CORE_SET_CONFIG_CMD, (3 + param->len), &cmd);
231 struct nci_rf_discover_param {
236 static void nci_rf_discover_req(struct nci_dev *ndev, unsigned long opt)
238 struct nci_rf_discover_param *param =
239 (struct nci_rf_discover_param *)opt;
240 struct nci_rf_disc_cmd cmd;
242 cmd.num_disc_configs = 0;
244 if ((cmd.num_disc_configs < NCI_MAX_NUM_RF_CONFIGS) &&
245 (param->im_protocols & NFC_PROTO_JEWEL_MASK ||
246 param->im_protocols & NFC_PROTO_MIFARE_MASK ||
247 param->im_protocols & NFC_PROTO_ISO14443_MASK ||
248 param->im_protocols & NFC_PROTO_NFC_DEP_MASK)) {
249 cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode =
250 NCI_NFC_A_PASSIVE_POLL_MODE;
251 cmd.disc_configs[cmd.num_disc_configs].frequency = 1;
252 cmd.num_disc_configs++;
255 if ((cmd.num_disc_configs < NCI_MAX_NUM_RF_CONFIGS) &&
256 (param->im_protocols & NFC_PROTO_ISO14443_B_MASK)) {
257 cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode =
258 NCI_NFC_B_PASSIVE_POLL_MODE;
259 cmd.disc_configs[cmd.num_disc_configs].frequency = 1;
260 cmd.num_disc_configs++;
263 if ((cmd.num_disc_configs < NCI_MAX_NUM_RF_CONFIGS) &&
264 (param->im_protocols & NFC_PROTO_FELICA_MASK ||
265 param->im_protocols & NFC_PROTO_NFC_DEP_MASK)) {
266 cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode =
267 NCI_NFC_F_PASSIVE_POLL_MODE;
268 cmd.disc_configs[cmd.num_disc_configs].frequency = 1;
269 cmd.num_disc_configs++;
272 if ((cmd.num_disc_configs < NCI_MAX_NUM_RF_CONFIGS) &&
273 (param->im_protocols & NFC_PROTO_ISO15693_MASK)) {
274 cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode =
275 NCI_NFC_V_PASSIVE_POLL_MODE;
276 cmd.disc_configs[cmd.num_disc_configs].frequency = 1;
277 cmd.num_disc_configs++;
280 if ((cmd.num_disc_configs < NCI_MAX_NUM_RF_CONFIGS - 1) &&
281 (param->tm_protocols & NFC_PROTO_NFC_DEP_MASK)) {
282 cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode =
283 NCI_NFC_A_PASSIVE_LISTEN_MODE;
284 cmd.disc_configs[cmd.num_disc_configs].frequency = 1;
285 cmd.num_disc_configs++;
286 cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode =
287 NCI_NFC_F_PASSIVE_LISTEN_MODE;
288 cmd.disc_configs[cmd.num_disc_configs].frequency = 1;
289 cmd.num_disc_configs++;
292 nci_send_cmd(ndev, NCI_OP_RF_DISCOVER_CMD,
293 (1 + (cmd.num_disc_configs * sizeof(struct disc_config))),
297 struct nci_rf_discover_select_param {
298 __u8 rf_discovery_id;
302 static void nci_rf_discover_select_req(struct nci_dev *ndev, unsigned long opt)
304 struct nci_rf_discover_select_param *param =
305 (struct nci_rf_discover_select_param *)opt;
306 struct nci_rf_discover_select_cmd cmd;
308 cmd.rf_discovery_id = param->rf_discovery_id;
309 cmd.rf_protocol = param->rf_protocol;
311 switch (cmd.rf_protocol) {
312 case NCI_RF_PROTOCOL_ISO_DEP:
313 cmd.rf_interface = NCI_RF_INTERFACE_ISO_DEP;
316 case NCI_RF_PROTOCOL_NFC_DEP:
317 cmd.rf_interface = NCI_RF_INTERFACE_NFC_DEP;
321 cmd.rf_interface = NCI_RF_INTERFACE_FRAME;
325 nci_send_cmd(ndev, NCI_OP_RF_DISCOVER_SELECT_CMD,
326 sizeof(struct nci_rf_discover_select_cmd), &cmd);
329 static void nci_rf_deactivate_req(struct nci_dev *ndev, unsigned long opt)
331 struct nci_rf_deactivate_cmd cmd;
335 nci_send_cmd(ndev, NCI_OP_RF_DEACTIVATE_CMD,
336 sizeof(struct nci_rf_deactivate_cmd), &cmd);
339 struct nci_cmd_param {
345 static void nci_generic_req(struct nci_dev *ndev, unsigned long opt)
347 struct nci_cmd_param *param =
348 (struct nci_cmd_param *)opt;
350 nci_send_cmd(ndev, param->opcode, param->len, param->payload);
353 int nci_prop_cmd(struct nci_dev *ndev, __u8 oid, size_t len, __u8 *payload)
355 struct nci_cmd_param param;
357 param.opcode = nci_opcode_pack(NCI_GID_PROPRIETARY, oid);
359 param.payload = payload;
361 return __nci_request(ndev, nci_generic_req, (unsigned long)¶m,
362 msecs_to_jiffies(NCI_CMD_TIMEOUT));
364 EXPORT_SYMBOL(nci_prop_cmd);
366 int nci_core_cmd(struct nci_dev *ndev, __u16 opcode, size_t len, __u8 *payload)
368 struct nci_cmd_param param;
370 param.opcode = opcode;
372 param.payload = payload;
374 return __nci_request(ndev, nci_generic_req, (unsigned long)¶m,
375 msecs_to_jiffies(NCI_CMD_TIMEOUT));
377 EXPORT_SYMBOL(nci_core_cmd);
379 int nci_core_reset(struct nci_dev *ndev)
381 return __nci_request(ndev, nci_reset_req, 0,
382 msecs_to_jiffies(NCI_RESET_TIMEOUT));
384 EXPORT_SYMBOL(nci_core_reset);
386 int nci_core_init(struct nci_dev *ndev)
388 return __nci_request(ndev, nci_init_req, 0,
389 msecs_to_jiffies(NCI_INIT_TIMEOUT));
391 EXPORT_SYMBOL(nci_core_init);
393 struct nci_loopback_data {
395 struct sk_buff *data;
398 static void nci_send_data_req(struct nci_dev *ndev, unsigned long opt)
400 struct nci_loopback_data *data = (struct nci_loopback_data *)opt;
402 nci_send_data(ndev, data->conn_id, data->data);
405 static void nci_nfcc_loopback_cb(void *context, struct sk_buff *skb, int err)
407 struct nci_dev *ndev = (struct nci_dev *)context;
408 struct nci_conn_info *conn_info;
410 conn_info = nci_get_conn_info_by_conn_id(ndev, ndev->cur_conn_id);
412 nci_req_complete(ndev, NCI_STATUS_REJECTED);
416 conn_info->rx_skb = skb;
418 nci_req_complete(ndev, NCI_STATUS_OK);
421 int nci_nfcc_loopback(struct nci_dev *ndev, void *data, size_t data_len,
422 struct sk_buff **resp)
425 struct nci_loopback_data loopback_data;
426 struct nci_conn_info *conn_info;
428 int conn_id = nci_get_conn_info_by_dest_type_params(ndev,
429 NCI_DESTINATION_NFCC_LOOPBACK, NULL);
432 r = nci_core_conn_create(ndev, NCI_DESTINATION_NFCC_LOOPBACK,
434 if (r != NCI_STATUS_OK)
437 conn_id = nci_get_conn_info_by_dest_type_params(ndev,
438 NCI_DESTINATION_NFCC_LOOPBACK,
442 conn_info = nci_get_conn_info_by_conn_id(ndev, conn_id);
446 /* store cb and context to be used on receiving data */
447 conn_info->data_exchange_cb = nci_nfcc_loopback_cb;
448 conn_info->data_exchange_cb_context = ndev;
450 skb = nci_skb_alloc(ndev, NCI_DATA_HDR_SIZE + data_len, GFP_KERNEL);
454 skb_reserve(skb, NCI_DATA_HDR_SIZE);
455 skb_put_data(skb, data, data_len);
457 loopback_data.conn_id = conn_id;
458 loopback_data.data = skb;
460 ndev->cur_conn_id = conn_id;
461 r = nci_request(ndev, nci_send_data_req, (unsigned long)&loopback_data,
462 msecs_to_jiffies(NCI_DATA_TIMEOUT));
463 if (r == NCI_STATUS_OK && resp)
464 *resp = conn_info->rx_skb;
468 EXPORT_SYMBOL(nci_nfcc_loopback);
470 static int nci_open_device(struct nci_dev *ndev)
474 mutex_lock(&ndev->req_lock);
476 if (test_bit(NCI_UNREG, &ndev->flags)) {
481 if (test_bit(NCI_UP, &ndev->flags)) {
486 if (ndev->ops->open(ndev)) {
491 atomic_set(&ndev->cmd_cnt, 1);
493 set_bit(NCI_INIT, &ndev->flags);
496 rc = ndev->ops->init(ndev);
499 rc = __nci_request(ndev, nci_reset_req, 0,
500 msecs_to_jiffies(NCI_RESET_TIMEOUT));
503 if (!rc && ndev->ops->setup) {
504 rc = ndev->ops->setup(ndev);
508 rc = __nci_request(ndev, nci_init_req, 0,
509 msecs_to_jiffies(NCI_INIT_TIMEOUT));
512 if (!rc && ndev->ops->post_setup)
513 rc = ndev->ops->post_setup(ndev);
516 rc = __nci_request(ndev, nci_init_complete_req, 0,
517 msecs_to_jiffies(NCI_INIT_TIMEOUT));
520 clear_bit(NCI_INIT, &ndev->flags);
523 set_bit(NCI_UP, &ndev->flags);
524 nci_clear_target_list(ndev);
525 atomic_set(&ndev->state, NCI_IDLE);
527 /* Init failed, cleanup */
528 skb_queue_purge(&ndev->cmd_q);
529 skb_queue_purge(&ndev->rx_q);
530 skb_queue_purge(&ndev->tx_q);
532 ndev->ops->close(ndev);
537 mutex_unlock(&ndev->req_lock);
541 static int nci_close_device(struct nci_dev *ndev)
543 nci_req_cancel(ndev, ENODEV);
545 /* This mutex needs to be held as a barrier for
546 * caller nci_unregister_device
548 mutex_lock(&ndev->req_lock);
550 if (!test_and_clear_bit(NCI_UP, &ndev->flags)) {
551 /* Need to flush the cmd wq in case
552 * there is a queued/running cmd_work
554 flush_workqueue(ndev->cmd_wq);
555 del_timer_sync(&ndev->cmd_timer);
556 del_timer_sync(&ndev->data_timer);
557 mutex_unlock(&ndev->req_lock);
561 /* Drop RX and TX queues */
562 skb_queue_purge(&ndev->rx_q);
563 skb_queue_purge(&ndev->tx_q);
565 /* Flush RX and TX wq */
566 flush_workqueue(ndev->rx_wq);
567 flush_workqueue(ndev->tx_wq);
570 skb_queue_purge(&ndev->cmd_q);
571 atomic_set(&ndev->cmd_cnt, 1);
573 set_bit(NCI_INIT, &ndev->flags);
574 __nci_request(ndev, nci_reset_req, 0,
575 msecs_to_jiffies(NCI_RESET_TIMEOUT));
577 /* After this point our queues are empty
578 * and no works are scheduled.
580 ndev->ops->close(ndev);
582 clear_bit(NCI_INIT, &ndev->flags);
584 del_timer_sync(&ndev->cmd_timer);
587 flush_workqueue(ndev->cmd_wq);
589 /* Clear flags except NCI_UNREG */
590 ndev->flags &= BIT(NCI_UNREG);
592 mutex_unlock(&ndev->req_lock);
597 /* NCI command timer function */
598 static void nci_cmd_timer(struct timer_list *t)
600 struct nci_dev *ndev = from_timer(ndev, t, cmd_timer);
602 atomic_set(&ndev->cmd_cnt, 1);
603 queue_work(ndev->cmd_wq, &ndev->cmd_work);
606 /* NCI data exchange timer function */
607 static void nci_data_timer(struct timer_list *t)
609 struct nci_dev *ndev = from_timer(ndev, t, data_timer);
611 set_bit(NCI_DATA_EXCHANGE_TO, &ndev->flags);
612 queue_work(ndev->rx_wq, &ndev->rx_work);
615 static int nci_dev_up(struct nfc_dev *nfc_dev)
617 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
619 return nci_open_device(ndev);
622 static int nci_dev_down(struct nfc_dev *nfc_dev)
624 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
626 return nci_close_device(ndev);
629 int nci_set_config(struct nci_dev *ndev, __u8 id, size_t len, __u8 *val)
631 struct nci_set_config_param param;
640 return __nci_request(ndev, nci_set_config_req, (unsigned long)¶m,
641 msecs_to_jiffies(NCI_SET_CONFIG_TIMEOUT));
643 EXPORT_SYMBOL(nci_set_config);
645 static void nci_nfcee_discover_req(struct nci_dev *ndev, unsigned long opt)
647 struct nci_nfcee_discover_cmd cmd;
650 cmd.discovery_action = action;
652 nci_send_cmd(ndev, NCI_OP_NFCEE_DISCOVER_CMD, 1, &cmd);
655 int nci_nfcee_discover(struct nci_dev *ndev, u8 action)
657 return __nci_request(ndev, nci_nfcee_discover_req, action,
658 msecs_to_jiffies(NCI_CMD_TIMEOUT));
660 EXPORT_SYMBOL(nci_nfcee_discover);
662 static void nci_nfcee_mode_set_req(struct nci_dev *ndev, unsigned long opt)
664 struct nci_nfcee_mode_set_cmd *cmd =
665 (struct nci_nfcee_mode_set_cmd *)opt;
667 nci_send_cmd(ndev, NCI_OP_NFCEE_MODE_SET_CMD,
668 sizeof(struct nci_nfcee_mode_set_cmd), cmd);
671 int nci_nfcee_mode_set(struct nci_dev *ndev, u8 nfcee_id, u8 nfcee_mode)
673 struct nci_nfcee_mode_set_cmd cmd;
675 cmd.nfcee_id = nfcee_id;
676 cmd.nfcee_mode = nfcee_mode;
678 return __nci_request(ndev, nci_nfcee_mode_set_req,
680 msecs_to_jiffies(NCI_CMD_TIMEOUT));
682 EXPORT_SYMBOL(nci_nfcee_mode_set);
684 static void nci_core_conn_create_req(struct nci_dev *ndev, unsigned long opt)
686 struct core_conn_create_data *data =
687 (struct core_conn_create_data *)opt;
689 nci_send_cmd(ndev, NCI_OP_CORE_CONN_CREATE_CMD, data->length, data->cmd);
692 int nci_core_conn_create(struct nci_dev *ndev, u8 destination_type,
693 u8 number_destination_params,
695 struct core_conn_create_dest_spec_params *params)
698 struct nci_core_conn_create_cmd *cmd;
699 struct core_conn_create_data data;
701 data.length = params_len + sizeof(struct nci_core_conn_create_cmd);
702 cmd = kzalloc(data.length, GFP_KERNEL);
706 cmd->destination_type = destination_type;
707 cmd->number_destination_params = number_destination_params;
712 memcpy(cmd->params, params, params_len);
713 if (params->length > 0)
714 memcpy(&ndev->cur_params,
715 ¶ms->value[DEST_SPEC_PARAMS_ID_INDEX],
716 sizeof(struct dest_spec_params));
718 ndev->cur_params.id = 0;
720 ndev->cur_params.id = 0;
722 ndev->cur_dest_type = destination_type;
724 r = __nci_request(ndev, nci_core_conn_create_req, (unsigned long)&data,
725 msecs_to_jiffies(NCI_CMD_TIMEOUT));
729 EXPORT_SYMBOL(nci_core_conn_create);
731 static void nci_core_conn_close_req(struct nci_dev *ndev, unsigned long opt)
735 nci_send_cmd(ndev, NCI_OP_CORE_CONN_CLOSE_CMD, 1, &conn_id);
738 int nci_core_conn_close(struct nci_dev *ndev, u8 conn_id)
740 ndev->cur_conn_id = conn_id;
741 return __nci_request(ndev, nci_core_conn_close_req, conn_id,
742 msecs_to_jiffies(NCI_CMD_TIMEOUT));
744 EXPORT_SYMBOL(nci_core_conn_close);
746 static int nci_set_local_general_bytes(struct nfc_dev *nfc_dev)
748 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
749 struct nci_set_config_param param;
752 param.val = nfc_get_local_general_bytes(nfc_dev, ¶m.len);
753 if ((param.val == NULL) || (param.len == 0))
756 if (param.len > NFC_MAX_GT_LEN)
759 param.id = NCI_PN_ATR_REQ_GEN_BYTES;
761 rc = nci_request(ndev, nci_set_config_req, (unsigned long)¶m,
762 msecs_to_jiffies(NCI_SET_CONFIG_TIMEOUT));
766 param.id = NCI_LN_ATR_RES_GEN_BYTES;
768 return nci_request(ndev, nci_set_config_req, (unsigned long)¶m,
769 msecs_to_jiffies(NCI_SET_CONFIG_TIMEOUT));
772 static int nci_set_listen_parameters(struct nfc_dev *nfc_dev)
774 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
778 val = NCI_LA_SEL_INFO_NFC_DEP_MASK;
780 rc = nci_set_config(ndev, NCI_LA_SEL_INFO, 1, &val);
784 val = NCI_LF_PROTOCOL_TYPE_NFC_DEP_MASK;
786 rc = nci_set_config(ndev, NCI_LF_PROTOCOL_TYPE, 1, &val);
790 val = NCI_LF_CON_BITR_F_212 | NCI_LF_CON_BITR_F_424;
792 return nci_set_config(ndev, NCI_LF_CON_BITR_F, 1, &val);
795 static int nci_start_poll(struct nfc_dev *nfc_dev,
796 __u32 im_protocols, __u32 tm_protocols)
798 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
799 struct nci_rf_discover_param param;
802 if ((atomic_read(&ndev->state) == NCI_DISCOVERY) ||
803 (atomic_read(&ndev->state) == NCI_W4_ALL_DISCOVERIES)) {
804 pr_err("unable to start poll, since poll is already active\n");
808 if (ndev->target_active_prot) {
809 pr_err("there is an active target\n");
813 if ((atomic_read(&ndev->state) == NCI_W4_HOST_SELECT) ||
814 (atomic_read(&ndev->state) == NCI_POLL_ACTIVE)) {
815 pr_debug("target active or w4 select, implicitly deactivate\n");
817 rc = nci_request(ndev, nci_rf_deactivate_req,
818 NCI_DEACTIVATE_TYPE_IDLE_MODE,
819 msecs_to_jiffies(NCI_RF_DEACTIVATE_TIMEOUT));
824 if ((im_protocols | tm_protocols) & NFC_PROTO_NFC_DEP_MASK) {
825 rc = nci_set_local_general_bytes(nfc_dev);
827 pr_err("failed to set local general bytes\n");
832 if (tm_protocols & NFC_PROTO_NFC_DEP_MASK) {
833 rc = nci_set_listen_parameters(nfc_dev);
835 pr_err("failed to set listen parameters\n");
838 param.im_protocols = im_protocols;
839 param.tm_protocols = tm_protocols;
840 rc = nci_request(ndev, nci_rf_discover_req, (unsigned long)¶m,
841 msecs_to_jiffies(NCI_RF_DISC_TIMEOUT));
844 ndev->poll_prots = im_protocols;
849 static void nci_stop_poll(struct nfc_dev *nfc_dev)
851 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
853 if ((atomic_read(&ndev->state) != NCI_DISCOVERY) &&
854 (atomic_read(&ndev->state) != NCI_W4_ALL_DISCOVERIES)) {
855 pr_err("unable to stop poll, since poll is not active\n");
859 nci_request(ndev, nci_rf_deactivate_req, NCI_DEACTIVATE_TYPE_IDLE_MODE,
860 msecs_to_jiffies(NCI_RF_DEACTIVATE_TIMEOUT));
863 static int nci_activate_target(struct nfc_dev *nfc_dev,
864 struct nfc_target *target, __u32 protocol)
866 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
867 struct nci_rf_discover_select_param param;
868 struct nfc_target *nci_target = NULL;
872 pr_debug("target_idx %d, protocol 0x%x\n", target->idx, protocol);
874 if ((atomic_read(&ndev->state) != NCI_W4_HOST_SELECT) &&
875 (atomic_read(&ndev->state) != NCI_POLL_ACTIVE)) {
876 pr_err("there is no available target to activate\n");
880 if (ndev->target_active_prot) {
881 pr_err("there is already an active target\n");
885 for (i = 0; i < ndev->n_targets; i++) {
886 if (ndev->targets[i].idx == target->idx) {
887 nci_target = &ndev->targets[i];
893 pr_err("unable to find the selected target\n");
897 if (!(nci_target->supported_protocols & (1 << protocol))) {
898 pr_err("target does not support the requested protocol 0x%x\n",
903 if (atomic_read(&ndev->state) == NCI_W4_HOST_SELECT) {
904 param.rf_discovery_id = nci_target->logical_idx;
906 if (protocol == NFC_PROTO_JEWEL)
907 param.rf_protocol = NCI_RF_PROTOCOL_T1T;
908 else if (protocol == NFC_PROTO_MIFARE)
909 param.rf_protocol = NCI_RF_PROTOCOL_T2T;
910 else if (protocol == NFC_PROTO_FELICA)
911 param.rf_protocol = NCI_RF_PROTOCOL_T3T;
912 else if (protocol == NFC_PROTO_ISO14443 ||
913 protocol == NFC_PROTO_ISO14443_B)
914 param.rf_protocol = NCI_RF_PROTOCOL_ISO_DEP;
916 param.rf_protocol = NCI_RF_PROTOCOL_NFC_DEP;
918 rc = nci_request(ndev, nci_rf_discover_select_req,
919 (unsigned long)¶m,
920 msecs_to_jiffies(NCI_RF_DISC_SELECT_TIMEOUT));
924 ndev->target_active_prot = protocol;
929 static void nci_deactivate_target(struct nfc_dev *nfc_dev,
930 struct nfc_target *target,
933 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
934 u8 nci_mode = NCI_DEACTIVATE_TYPE_IDLE_MODE;
938 if (!ndev->target_active_prot) {
939 pr_err("unable to deactivate target, no active target\n");
943 ndev->target_active_prot = 0;
946 case NFC_TARGET_MODE_SLEEP:
947 nci_mode = NCI_DEACTIVATE_TYPE_SLEEP_MODE;
951 if (atomic_read(&ndev->state) == NCI_POLL_ACTIVE) {
952 nci_request(ndev, nci_rf_deactivate_req, nci_mode,
953 msecs_to_jiffies(NCI_RF_DEACTIVATE_TIMEOUT));
957 static int nci_dep_link_up(struct nfc_dev *nfc_dev, struct nfc_target *target,
958 __u8 comm_mode, __u8 *gb, size_t gb_len)
960 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
963 pr_debug("target_idx %d, comm_mode %d\n", target->idx, comm_mode);
965 rc = nci_activate_target(nfc_dev, target, NFC_PROTO_NFC_DEP);
969 rc = nfc_set_remote_general_bytes(nfc_dev, ndev->remote_gb,
970 ndev->remote_gb_len);
972 rc = nfc_dep_link_is_up(nfc_dev, target->idx, NFC_COMM_PASSIVE,
978 static int nci_dep_link_down(struct nfc_dev *nfc_dev)
980 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
985 if (nfc_dev->rf_mode == NFC_RF_INITIATOR) {
986 nci_deactivate_target(nfc_dev, NULL, NCI_DEACTIVATE_TYPE_IDLE_MODE);
988 if (atomic_read(&ndev->state) == NCI_LISTEN_ACTIVE ||
989 atomic_read(&ndev->state) == NCI_DISCOVERY) {
990 nci_request(ndev, nci_rf_deactivate_req, 0,
991 msecs_to_jiffies(NCI_RF_DEACTIVATE_TIMEOUT));
994 rc = nfc_tm_deactivated(nfc_dev);
996 pr_err("error when signaling tm deactivation\n");
1003 static int nci_transceive(struct nfc_dev *nfc_dev, struct nfc_target *target,
1004 struct sk_buff *skb,
1005 data_exchange_cb_t cb, void *cb_context)
1007 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
1009 struct nci_conn_info *conn_info;
1011 conn_info = ndev->rf_conn_info;
1015 pr_debug("target_idx %d, len %d\n", target->idx, skb->len);
1017 if (!ndev->target_active_prot) {
1018 pr_err("unable to exchange data, no active target\n");
1022 if (test_and_set_bit(NCI_DATA_EXCHANGE, &ndev->flags))
1025 /* store cb and context to be used on receiving data */
1026 conn_info->data_exchange_cb = cb;
1027 conn_info->data_exchange_cb_context = cb_context;
1029 rc = nci_send_data(ndev, NCI_STATIC_RF_CONN_ID, skb);
1031 clear_bit(NCI_DATA_EXCHANGE, &ndev->flags);
1036 static int nci_tm_send(struct nfc_dev *nfc_dev, struct sk_buff *skb)
1038 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
1041 rc = nci_send_data(ndev, NCI_STATIC_RF_CONN_ID, skb);
1043 pr_err("unable to send data\n");
1048 static int nci_enable_se(struct nfc_dev *nfc_dev, u32 se_idx)
1050 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
1052 if (ndev->ops->enable_se)
1053 return ndev->ops->enable_se(ndev, se_idx);
1058 static int nci_disable_se(struct nfc_dev *nfc_dev, u32 se_idx)
1060 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
1062 if (ndev->ops->disable_se)
1063 return ndev->ops->disable_se(ndev, se_idx);
1068 static int nci_discover_se(struct nfc_dev *nfc_dev)
1071 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
1073 if (ndev->ops->discover_se) {
1074 r = nci_nfcee_discover(ndev, NCI_NFCEE_DISCOVERY_ACTION_ENABLE);
1075 if (r != NCI_STATUS_OK)
1078 return ndev->ops->discover_se(ndev);
1084 static int nci_se_io(struct nfc_dev *nfc_dev, u32 se_idx,
1085 u8 *apdu, size_t apdu_length,
1086 se_io_cb_t cb, void *cb_context)
1088 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
1090 if (ndev->ops->se_io)
1091 return ndev->ops->se_io(ndev, se_idx, apdu,
1092 apdu_length, cb, cb_context);
1097 static int nci_fw_download(struct nfc_dev *nfc_dev, const char *firmware_name)
1099 struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
1101 if (!ndev->ops->fw_download)
1104 return ndev->ops->fw_download(ndev, firmware_name);
1107 static struct nfc_ops nci_nfc_ops = {
1108 .dev_up = nci_dev_up,
1109 .dev_down = nci_dev_down,
1110 .start_poll = nci_start_poll,
1111 .stop_poll = nci_stop_poll,
1112 .dep_link_up = nci_dep_link_up,
1113 .dep_link_down = nci_dep_link_down,
1114 .activate_target = nci_activate_target,
1115 .deactivate_target = nci_deactivate_target,
1116 .im_transceive = nci_transceive,
1117 .tm_send = nci_tm_send,
1118 .enable_se = nci_enable_se,
1119 .disable_se = nci_disable_se,
1120 .discover_se = nci_discover_se,
1122 .fw_download = nci_fw_download,
1125 /* ---- Interface to NCI drivers ---- */
1127 * nci_allocate_device - allocate a new nci device
1129 * @ops: device operations
1130 * @supported_protocols: NFC protocols supported by the device
1132 struct nci_dev *nci_allocate_device(struct nci_ops *ops,
1133 __u32 supported_protocols,
1134 int tx_headroom, int tx_tailroom)
1136 struct nci_dev *ndev;
1138 pr_debug("supported_protocols 0x%x\n", supported_protocols);
1140 if (!ops->open || !ops->close || !ops->send)
1143 if (!supported_protocols)
1146 ndev = kzalloc(sizeof(struct nci_dev), GFP_KERNEL);
1152 if (ops->n_prop_ops > NCI_MAX_PROPRIETARY_CMD) {
1153 pr_err("Too many proprietary commands: %zd\n",
1155 ops->prop_ops = NULL;
1156 ops->n_prop_ops = 0;
1159 ndev->tx_headroom = tx_headroom;
1160 ndev->tx_tailroom = tx_tailroom;
1161 init_completion(&ndev->req_completion);
1163 ndev->nfc_dev = nfc_allocate_device(&nci_nfc_ops,
1164 supported_protocols,
1165 tx_headroom + NCI_DATA_HDR_SIZE,
1170 ndev->hci_dev = nci_hci_allocate(ndev);
1174 nfc_set_drvdata(ndev->nfc_dev, ndev);
1179 nfc_free_device(ndev->nfc_dev);
1184 EXPORT_SYMBOL(nci_allocate_device);
1187 * nci_free_device - deallocate nci device
1189 * @ndev: The nci device to deallocate
1191 void nci_free_device(struct nci_dev *ndev)
1193 nfc_free_device(ndev->nfc_dev);
1194 nci_hci_deallocate(ndev);
1197 EXPORT_SYMBOL(nci_free_device);
1200 * nci_register_device - register a nci device in the nfc subsystem
1202 * @dev: The nci device to register
1204 int nci_register_device(struct nci_dev *ndev)
1207 struct device *dev = &ndev->nfc_dev->dev;
1212 INIT_WORK(&ndev->cmd_work, nci_cmd_work);
1213 snprintf(name, sizeof(name), "%s_nci_cmd_wq", dev_name(dev));
1214 ndev->cmd_wq = create_singlethread_workqueue(name);
1215 if (!ndev->cmd_wq) {
1220 INIT_WORK(&ndev->rx_work, nci_rx_work);
1221 snprintf(name, sizeof(name), "%s_nci_rx_wq", dev_name(dev));
1222 ndev->rx_wq = create_singlethread_workqueue(name);
1225 goto destroy_cmd_wq_exit;
1228 INIT_WORK(&ndev->tx_work, nci_tx_work);
1229 snprintf(name, sizeof(name), "%s_nci_tx_wq", dev_name(dev));
1230 ndev->tx_wq = create_singlethread_workqueue(name);
1233 goto destroy_rx_wq_exit;
1236 skb_queue_head_init(&ndev->cmd_q);
1237 skb_queue_head_init(&ndev->rx_q);
1238 skb_queue_head_init(&ndev->tx_q);
1240 timer_setup(&ndev->cmd_timer, nci_cmd_timer, 0);
1241 timer_setup(&ndev->data_timer, nci_data_timer, 0);
1243 mutex_init(&ndev->req_lock);
1244 INIT_LIST_HEAD(&ndev->conn_info_list);
1246 rc = nfc_register_device(ndev->nfc_dev);
1248 goto destroy_rx_wq_exit;
1253 destroy_workqueue(ndev->rx_wq);
1255 destroy_cmd_wq_exit:
1256 destroy_workqueue(ndev->cmd_wq);
1261 EXPORT_SYMBOL(nci_register_device);
1264 * nci_unregister_device - unregister a nci device in the nfc subsystem
1266 * @dev: The nci device to unregister
1268 void nci_unregister_device(struct nci_dev *ndev)
1270 struct nci_conn_info *conn_info, *n;
1272 /* This set_bit is not protected with specialized barrier,
1273 * However, it is fine because the mutex_lock(&ndev->req_lock);
1274 * in nci_close_device() will help to emit one.
1276 set_bit(NCI_UNREG, &ndev->flags);
1278 nci_close_device(ndev);
1280 destroy_workqueue(ndev->cmd_wq);
1281 destroy_workqueue(ndev->rx_wq);
1282 destroy_workqueue(ndev->tx_wq);
1284 list_for_each_entry_safe(conn_info, n, &ndev->conn_info_list, list) {
1285 list_del(&conn_info->list);
1286 /* conn_info is allocated with devm_kzalloc */
1289 nfc_unregister_device(ndev->nfc_dev);
1291 EXPORT_SYMBOL(nci_unregister_device);
1294 * nci_recv_frame - receive frame from NCI drivers
1296 * @ndev: The nci device
1297 * @skb: The sk_buff to receive
1299 int nci_recv_frame(struct nci_dev *ndev, struct sk_buff *skb)
1301 pr_debug("len %d\n", skb->len);
1303 if (!ndev || (!test_bit(NCI_UP, &ndev->flags) &&
1304 !test_bit(NCI_INIT, &ndev->flags))) {
1309 /* Queue frame for rx worker thread */
1310 skb_queue_tail(&ndev->rx_q, skb);
1311 queue_work(ndev->rx_wq, &ndev->rx_work);
1315 EXPORT_SYMBOL(nci_recv_frame);
1317 int nci_send_frame(struct nci_dev *ndev, struct sk_buff *skb)
1319 pr_debug("len %d\n", skb->len);
1326 /* Get rid of skb owner, prior to sending to the driver. */
1329 /* Send copy to sniffer */
1330 nfc_send_to_raw_sock(ndev->nfc_dev, skb,
1331 RAW_PAYLOAD_NCI, NFC_DIRECTION_TX);
1333 return ndev->ops->send(ndev, skb);
1335 EXPORT_SYMBOL(nci_send_frame);
1337 /* Send NCI command */
1338 int nci_send_cmd(struct nci_dev *ndev, __u16 opcode, __u8 plen, void *payload)
1340 struct nci_ctrl_hdr *hdr;
1341 struct sk_buff *skb;
1343 pr_debug("opcode 0x%x, plen %d\n", opcode, plen);
1345 skb = nci_skb_alloc(ndev, (NCI_CTRL_HDR_SIZE + plen), GFP_KERNEL);
1347 pr_err("no memory for command\n");
1351 hdr = skb_put(skb, NCI_CTRL_HDR_SIZE);
1352 hdr->gid = nci_opcode_gid(opcode);
1353 hdr->oid = nci_opcode_oid(opcode);
1356 nci_mt_set((__u8 *)hdr, NCI_MT_CMD_PKT);
1357 nci_pbf_set((__u8 *)hdr, NCI_PBF_LAST);
1360 skb_put_data(skb, payload, plen);
1362 skb_queue_tail(&ndev->cmd_q, skb);
1363 queue_work(ndev->cmd_wq, &ndev->cmd_work);
1367 EXPORT_SYMBOL(nci_send_cmd);
1369 /* Proprietary commands API */
1370 static struct nci_driver_ops *ops_cmd_lookup(struct nci_driver_ops *ops,
1375 struct nci_driver_ops *op;
1380 for (i = 0; i < n_ops; i++) {
1382 if (op->opcode == opcode)
1389 static int nci_op_rsp_packet(struct nci_dev *ndev, __u16 rsp_opcode,
1390 struct sk_buff *skb, struct nci_driver_ops *ops,
1393 struct nci_driver_ops *op;
1395 op = ops_cmd_lookup(ops, n_ops, rsp_opcode);
1396 if (!op || !op->rsp)
1399 return op->rsp(ndev, skb);
1402 static int nci_op_ntf_packet(struct nci_dev *ndev, __u16 ntf_opcode,
1403 struct sk_buff *skb, struct nci_driver_ops *ops,
1406 struct nci_driver_ops *op;
1408 op = ops_cmd_lookup(ops, n_ops, ntf_opcode);
1409 if (!op || !op->ntf)
1412 return op->ntf(ndev, skb);
1415 int nci_prop_rsp_packet(struct nci_dev *ndev, __u16 opcode,
1416 struct sk_buff *skb)
1418 return nci_op_rsp_packet(ndev, opcode, skb, ndev->ops->prop_ops,
1419 ndev->ops->n_prop_ops);
1422 int nci_prop_ntf_packet(struct nci_dev *ndev, __u16 opcode,
1423 struct sk_buff *skb)
1425 return nci_op_ntf_packet(ndev, opcode, skb, ndev->ops->prop_ops,
1426 ndev->ops->n_prop_ops);
1429 int nci_core_rsp_packet(struct nci_dev *ndev, __u16 opcode,
1430 struct sk_buff *skb)
1432 return nci_op_rsp_packet(ndev, opcode, skb, ndev->ops->core_ops,
1433 ndev->ops->n_core_ops);
1436 int nci_core_ntf_packet(struct nci_dev *ndev, __u16 opcode,
1437 struct sk_buff *skb)
1439 return nci_op_ntf_packet(ndev, opcode, skb, ndev->ops->core_ops,
1440 ndev->ops->n_core_ops);
1443 /* ---- NCI TX Data worker thread ---- */
1445 static void nci_tx_work(struct work_struct *work)
1447 struct nci_dev *ndev = container_of(work, struct nci_dev, tx_work);
1448 struct nci_conn_info *conn_info;
1449 struct sk_buff *skb;
1451 conn_info = nci_get_conn_info_by_conn_id(ndev, ndev->cur_conn_id);
1455 pr_debug("credits_cnt %d\n", atomic_read(&conn_info->credits_cnt));
1457 /* Send queued tx data */
1458 while (atomic_read(&conn_info->credits_cnt)) {
1459 skb = skb_dequeue(&ndev->tx_q);
1463 /* Check if data flow control is used */
1464 if (atomic_read(&conn_info->credits_cnt) !=
1465 NCI_DATA_FLOW_CONTROL_NOT_USED)
1466 atomic_dec(&conn_info->credits_cnt);
1468 pr_debug("NCI TX: MT=data, PBF=%d, conn_id=%d, plen=%d\n",
1470 nci_conn_id(skb->data),
1471 nci_plen(skb->data));
1473 nci_send_frame(ndev, skb);
1475 mod_timer(&ndev->data_timer,
1476 jiffies + msecs_to_jiffies(NCI_DATA_TIMEOUT));
1480 /* ----- NCI RX worker thread (data & control) ----- */
1482 static void nci_rx_work(struct work_struct *work)
1484 struct nci_dev *ndev = container_of(work, struct nci_dev, rx_work);
1485 struct sk_buff *skb;
1487 while ((skb = skb_dequeue(&ndev->rx_q))) {
1489 /* Send copy to sniffer */
1490 nfc_send_to_raw_sock(ndev->nfc_dev, skb,
1491 RAW_PAYLOAD_NCI, NFC_DIRECTION_RX);
1494 switch (nci_mt(skb->data)) {
1495 case NCI_MT_RSP_PKT:
1496 nci_rsp_packet(ndev, skb);
1499 case NCI_MT_NTF_PKT:
1500 nci_ntf_packet(ndev, skb);
1503 case NCI_MT_DATA_PKT:
1504 nci_rx_data_packet(ndev, skb);
1508 pr_err("unknown MT 0x%x\n", nci_mt(skb->data));
1514 /* check if a data exchange timout has occurred */
1515 if (test_bit(NCI_DATA_EXCHANGE_TO, &ndev->flags)) {
1516 /* complete the data exchange transaction, if exists */
1517 if (test_bit(NCI_DATA_EXCHANGE, &ndev->flags))
1518 nci_data_exchange_complete(ndev, NULL,
1522 clear_bit(NCI_DATA_EXCHANGE_TO, &ndev->flags);
1526 /* ----- NCI TX CMD worker thread ----- */
1528 static void nci_cmd_work(struct work_struct *work)
1530 struct nci_dev *ndev = container_of(work, struct nci_dev, cmd_work);
1531 struct sk_buff *skb;
1533 pr_debug("cmd_cnt %d\n", atomic_read(&ndev->cmd_cnt));
1535 /* Send queued command */
1536 if (atomic_read(&ndev->cmd_cnt)) {
1537 skb = skb_dequeue(&ndev->cmd_q);
1541 atomic_dec(&ndev->cmd_cnt);
1543 pr_debug("NCI TX: MT=cmd, PBF=%d, GID=0x%x, OID=0x%x, plen=%d\n",
1545 nci_opcode_gid(nci_opcode(skb->data)),
1546 nci_opcode_oid(nci_opcode(skb->data)),
1547 nci_plen(skb->data));
1549 nci_send_frame(ndev, skb);
1551 mod_timer(&ndev->cmd_timer,
1552 jiffies + msecs_to_jiffies(NCI_CMD_TIMEOUT));
1556 MODULE_LICENSE("GPL");