xref: /openbmc/linux/net/nfc/nci/core.c (revision 46e72ebc)
1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3  *  The NFC Controller Interface is the communication protocol between an
4  *  NFC Controller (NFCC) and a Device Host (DH).
5  *
6  *  Copyright (C) 2011 Texas Instruments, Inc.
7  *  Copyright (C) 2014 Marvell International Ltd.
8  *
9  *  Written by Ilan Elias <ilane@ti.com>
10  *
11  *  Acknowledgements:
12  *  This file is based on hci_core.c, which was written
13  *  by Maxim Krasnyansky.
14  */
15 
16 #define pr_fmt(fmt) KBUILD_MODNAME ": %s: " fmt, __func__
17 
18 #include <linux/module.h>
19 #include <linux/kernel.h>
20 #include <linux/types.h>
21 #include <linux/workqueue.h>
22 #include <linux/completion.h>
23 #include <linux/export.h>
24 #include <linux/sched.h>
25 #include <linux/bitops.h>
26 #include <linux/skbuff.h>
27 #include <linux/kcov.h>
28 
29 #include "../nfc.h"
30 #include <net/nfc/nci.h>
31 #include <net/nfc/nci_core.h>
32 #include <linux/nfc.h>
33 
34 struct core_conn_create_data {
35 	int length;
36 	struct nci_core_conn_create_cmd *cmd;
37 };
38 
39 static void nci_cmd_work(struct work_struct *work);
40 static void nci_rx_work(struct work_struct *work);
41 static void nci_tx_work(struct work_struct *work);
42 
nci_get_conn_info_by_conn_id(struct nci_dev * ndev,int conn_id)43 struct nci_conn_info *nci_get_conn_info_by_conn_id(struct nci_dev *ndev,
44 						   int conn_id)
45 {
46 	struct nci_conn_info *conn_info;
47 
48 	list_for_each_entry(conn_info, &ndev->conn_info_list, list) {
49 		if (conn_info->conn_id == conn_id)
50 			return conn_info;
51 	}
52 
53 	return NULL;
54 }
55 
nci_get_conn_info_by_dest_type_params(struct nci_dev * ndev,u8 dest_type,const struct dest_spec_params * params)56 int nci_get_conn_info_by_dest_type_params(struct nci_dev *ndev, u8 dest_type,
57 					  const struct dest_spec_params *params)
58 {
59 	const struct nci_conn_info *conn_info;
60 
61 	list_for_each_entry(conn_info, &ndev->conn_info_list, list) {
62 		if (conn_info->dest_type == dest_type) {
63 			if (!params)
64 				return conn_info->conn_id;
65 
66 			if (params->id == conn_info->dest_params->id &&
67 			    params->protocol == conn_info->dest_params->protocol)
68 				return conn_info->conn_id;
69 		}
70 	}
71 
72 	return -EINVAL;
73 }
74 EXPORT_SYMBOL(nci_get_conn_info_by_dest_type_params);
75 
76 /* ---- NCI requests ---- */
77 
nci_req_complete(struct nci_dev * ndev,int result)78 void nci_req_complete(struct nci_dev *ndev, int result)
79 {
80 	if (ndev->req_status == NCI_REQ_PEND) {
81 		ndev->req_result = result;
82 		ndev->req_status = NCI_REQ_DONE;
83 		complete(&ndev->req_completion);
84 	}
85 }
86 EXPORT_SYMBOL(nci_req_complete);
87 
nci_req_cancel(struct nci_dev * ndev,int err)88 static void nci_req_cancel(struct nci_dev *ndev, int err)
89 {
90 	if (ndev->req_status == NCI_REQ_PEND) {
91 		ndev->req_result = err;
92 		ndev->req_status = NCI_REQ_CANCELED;
93 		complete(&ndev->req_completion);
94 	}
95 }
96 
97 /* Execute request and wait for completion. */
__nci_request(struct nci_dev * ndev,void (* req)(struct nci_dev * ndev,const void * opt),const void * opt,__u32 timeout)98 static int __nci_request(struct nci_dev *ndev,
99 			 void (*req)(struct nci_dev *ndev, const void *opt),
100 			 const void *opt, __u32 timeout)
101 {
102 	int rc = 0;
103 	long completion_rc;
104 
105 	ndev->req_status = NCI_REQ_PEND;
106 
107 	reinit_completion(&ndev->req_completion);
108 	req(ndev, opt);
109 	completion_rc =
110 		wait_for_completion_interruptible_timeout(&ndev->req_completion,
111 							  timeout);
112 
113 	pr_debug("wait_for_completion return %ld\n", completion_rc);
114 
115 	if (completion_rc > 0) {
116 		switch (ndev->req_status) {
117 		case NCI_REQ_DONE:
118 			rc = nci_to_errno(ndev->req_result);
119 			break;
120 
121 		case NCI_REQ_CANCELED:
122 			rc = -ndev->req_result;
123 			break;
124 
125 		default:
126 			rc = -ETIMEDOUT;
127 			break;
128 		}
129 	} else {
130 		pr_err("wait_for_completion_interruptible_timeout failed %ld\n",
131 		       completion_rc);
132 
133 		rc = ((completion_rc == 0) ? (-ETIMEDOUT) : (completion_rc));
134 	}
135 
136 	ndev->req_status = ndev->req_result = 0;
137 
138 	return rc;
139 }
140 
nci_request(struct nci_dev * ndev,void (* req)(struct nci_dev * ndev,const void * opt),const void * opt,__u32 timeout)141 inline int nci_request(struct nci_dev *ndev,
142 		       void (*req)(struct nci_dev *ndev,
143 				   const void *opt),
144 		       const void *opt, __u32 timeout)
145 {
146 	int rc;
147 
148 	/* Serialize all requests */
149 	mutex_lock(&ndev->req_lock);
150 	/* check the state after obtaing the lock against any races
151 	 * from nci_close_device when the device gets removed.
152 	 */
153 	if (test_bit(NCI_UP, &ndev->flags))
154 		rc = __nci_request(ndev, req, opt, timeout);
155 	else
156 		rc = -ENETDOWN;
157 	mutex_unlock(&ndev->req_lock);
158 
159 	return rc;
160 }
161 
nci_reset_req(struct nci_dev * ndev,const void * opt)162 static void nci_reset_req(struct nci_dev *ndev, const void *opt)
163 {
164 	struct nci_core_reset_cmd cmd;
165 
166 	cmd.reset_type = NCI_RESET_TYPE_RESET_CONFIG;
167 	nci_send_cmd(ndev, NCI_OP_CORE_RESET_CMD, 1, &cmd);
168 }
169 
nci_init_req(struct nci_dev * ndev,const void * opt)170 static void nci_init_req(struct nci_dev *ndev, const void *opt)
171 {
172 	u8 plen = 0;
173 
174 	if (opt)
175 		plen = sizeof(struct nci_core_init_v2_cmd);
176 
177 	nci_send_cmd(ndev, NCI_OP_CORE_INIT_CMD, plen, opt);
178 }
179 
nci_init_complete_req(struct nci_dev * ndev,const void * opt)180 static void nci_init_complete_req(struct nci_dev *ndev, const void *opt)
181 {
182 	struct nci_rf_disc_map_cmd cmd;
183 	struct disc_map_config *cfg = cmd.mapping_configs;
184 	__u8 *num = &cmd.num_mapping_configs;
185 	int i;
186 
187 	/* set rf mapping configurations */
188 	*num = 0;
189 
190 	/* by default mapping is set to NCI_RF_INTERFACE_FRAME */
191 	for (i = 0; i < ndev->num_supported_rf_interfaces; i++) {
192 		if (ndev->supported_rf_interfaces[i] ==
193 		    NCI_RF_INTERFACE_ISO_DEP) {
194 			cfg[*num].rf_protocol = NCI_RF_PROTOCOL_ISO_DEP;
195 			cfg[*num].mode = NCI_DISC_MAP_MODE_POLL |
196 				NCI_DISC_MAP_MODE_LISTEN;
197 			cfg[*num].rf_interface = NCI_RF_INTERFACE_ISO_DEP;
198 			(*num)++;
199 		} else if (ndev->supported_rf_interfaces[i] ==
200 			   NCI_RF_INTERFACE_NFC_DEP) {
201 			cfg[*num].rf_protocol = NCI_RF_PROTOCOL_NFC_DEP;
202 			cfg[*num].mode = NCI_DISC_MAP_MODE_POLL |
203 				NCI_DISC_MAP_MODE_LISTEN;
204 			cfg[*num].rf_interface = NCI_RF_INTERFACE_NFC_DEP;
205 			(*num)++;
206 		}
207 
208 		if (*num == NCI_MAX_NUM_MAPPING_CONFIGS)
209 			break;
210 	}
211 
212 	nci_send_cmd(ndev, NCI_OP_RF_DISCOVER_MAP_CMD,
213 		     (1 + ((*num) * sizeof(struct disc_map_config))), &cmd);
214 }
215 
216 struct nci_set_config_param {
217 	__u8		id;
218 	size_t		len;
219 	const __u8	*val;
220 };
221 
nci_set_config_req(struct nci_dev * ndev,const void * opt)222 static void nci_set_config_req(struct nci_dev *ndev, const void *opt)
223 {
224 	const struct nci_set_config_param *param = opt;
225 	struct nci_core_set_config_cmd cmd;
226 
227 	BUG_ON(param->len > NCI_MAX_PARAM_LEN);
228 
229 	cmd.num_params = 1;
230 	cmd.param.id = param->id;
231 	cmd.param.len = param->len;
232 	memcpy(cmd.param.val, param->val, param->len);
233 
234 	nci_send_cmd(ndev, NCI_OP_CORE_SET_CONFIG_CMD, (3 + param->len), &cmd);
235 }
236 
237 struct nci_rf_discover_param {
238 	__u32	im_protocols;
239 	__u32	tm_protocols;
240 };
241 
nci_rf_discover_req(struct nci_dev * ndev,const void * opt)242 static void nci_rf_discover_req(struct nci_dev *ndev, const void *opt)
243 {
244 	const struct nci_rf_discover_param *param = opt;
245 	struct nci_rf_disc_cmd cmd;
246 
247 	cmd.num_disc_configs = 0;
248 
249 	if ((cmd.num_disc_configs < NCI_MAX_NUM_RF_CONFIGS) &&
250 	    (param->im_protocols & NFC_PROTO_JEWEL_MASK ||
251 	     param->im_protocols & NFC_PROTO_MIFARE_MASK ||
252 	     param->im_protocols & NFC_PROTO_ISO14443_MASK ||
253 	     param->im_protocols & NFC_PROTO_NFC_DEP_MASK)) {
254 		cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode =
255 			NCI_NFC_A_PASSIVE_POLL_MODE;
256 		cmd.disc_configs[cmd.num_disc_configs].frequency = 1;
257 		cmd.num_disc_configs++;
258 	}
259 
260 	if ((cmd.num_disc_configs < NCI_MAX_NUM_RF_CONFIGS) &&
261 	    (param->im_protocols & NFC_PROTO_ISO14443_B_MASK)) {
262 		cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode =
263 			NCI_NFC_B_PASSIVE_POLL_MODE;
264 		cmd.disc_configs[cmd.num_disc_configs].frequency = 1;
265 		cmd.num_disc_configs++;
266 	}
267 
268 	if ((cmd.num_disc_configs < NCI_MAX_NUM_RF_CONFIGS) &&
269 	    (param->im_protocols & NFC_PROTO_FELICA_MASK ||
270 	     param->im_protocols & NFC_PROTO_NFC_DEP_MASK)) {
271 		cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode =
272 			NCI_NFC_F_PASSIVE_POLL_MODE;
273 		cmd.disc_configs[cmd.num_disc_configs].frequency = 1;
274 		cmd.num_disc_configs++;
275 	}
276 
277 	if ((cmd.num_disc_configs < NCI_MAX_NUM_RF_CONFIGS) &&
278 	    (param->im_protocols & NFC_PROTO_ISO15693_MASK)) {
279 		cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode =
280 			NCI_NFC_V_PASSIVE_POLL_MODE;
281 		cmd.disc_configs[cmd.num_disc_configs].frequency = 1;
282 		cmd.num_disc_configs++;
283 	}
284 
285 	if ((cmd.num_disc_configs < NCI_MAX_NUM_RF_CONFIGS - 1) &&
286 	    (param->tm_protocols & NFC_PROTO_NFC_DEP_MASK)) {
287 		cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode =
288 			NCI_NFC_A_PASSIVE_LISTEN_MODE;
289 		cmd.disc_configs[cmd.num_disc_configs].frequency = 1;
290 		cmd.num_disc_configs++;
291 		cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode =
292 			NCI_NFC_F_PASSIVE_LISTEN_MODE;
293 		cmd.disc_configs[cmd.num_disc_configs].frequency = 1;
294 		cmd.num_disc_configs++;
295 	}
296 
297 	nci_send_cmd(ndev, NCI_OP_RF_DISCOVER_CMD,
298 		     (1 + (cmd.num_disc_configs * sizeof(struct disc_config))),
299 		     &cmd);
300 }
301 
302 struct nci_rf_discover_select_param {
303 	__u8	rf_discovery_id;
304 	__u8	rf_protocol;
305 };
306 
nci_rf_discover_select_req(struct nci_dev * ndev,const void * opt)307 static void nci_rf_discover_select_req(struct nci_dev *ndev, const void *opt)
308 {
309 	const struct nci_rf_discover_select_param *param = opt;
310 	struct nci_rf_discover_select_cmd cmd;
311 
312 	cmd.rf_discovery_id = param->rf_discovery_id;
313 	cmd.rf_protocol = param->rf_protocol;
314 
315 	switch (cmd.rf_protocol) {
316 	case NCI_RF_PROTOCOL_ISO_DEP:
317 		cmd.rf_interface = NCI_RF_INTERFACE_ISO_DEP;
318 		break;
319 
320 	case NCI_RF_PROTOCOL_NFC_DEP:
321 		cmd.rf_interface = NCI_RF_INTERFACE_NFC_DEP;
322 		break;
323 
324 	default:
325 		cmd.rf_interface = NCI_RF_INTERFACE_FRAME;
326 		break;
327 	}
328 
329 	nci_send_cmd(ndev, NCI_OP_RF_DISCOVER_SELECT_CMD,
330 		     sizeof(struct nci_rf_discover_select_cmd), &cmd);
331 }
332 
nci_rf_deactivate_req(struct nci_dev * ndev,const void * opt)333 static void nci_rf_deactivate_req(struct nci_dev *ndev, const void *opt)
334 {
335 	struct nci_rf_deactivate_cmd cmd;
336 
337 	cmd.type = (unsigned long)opt;
338 
339 	nci_send_cmd(ndev, NCI_OP_RF_DEACTIVATE_CMD,
340 		     sizeof(struct nci_rf_deactivate_cmd), &cmd);
341 }
342 
343 struct nci_cmd_param {
344 	__u16 opcode;
345 	size_t len;
346 	const __u8 *payload;
347 };
348 
nci_generic_req(struct nci_dev * ndev,const void * opt)349 static void nci_generic_req(struct nci_dev *ndev, const void *opt)
350 {
351 	const struct nci_cmd_param *param = opt;
352 
353 	nci_send_cmd(ndev, param->opcode, param->len, param->payload);
354 }
355 
nci_prop_cmd(struct nci_dev * ndev,__u8 oid,size_t len,const __u8 * payload)356 int nci_prop_cmd(struct nci_dev *ndev, __u8 oid, size_t len, const __u8 *payload)
357 {
358 	struct nci_cmd_param param;
359 
360 	param.opcode = nci_opcode_pack(NCI_GID_PROPRIETARY, oid);
361 	param.len = len;
362 	param.payload = payload;
363 
364 	return __nci_request(ndev, nci_generic_req, &param,
365 			     msecs_to_jiffies(NCI_CMD_TIMEOUT));
366 }
367 EXPORT_SYMBOL(nci_prop_cmd);
368 
nci_core_cmd(struct nci_dev * ndev,__u16 opcode,size_t len,const __u8 * payload)369 int nci_core_cmd(struct nci_dev *ndev, __u16 opcode, size_t len,
370 		 const __u8 *payload)
371 {
372 	struct nci_cmd_param param;
373 
374 	param.opcode = opcode;
375 	param.len = len;
376 	param.payload = payload;
377 
378 	return __nci_request(ndev, nci_generic_req, &param,
379 			     msecs_to_jiffies(NCI_CMD_TIMEOUT));
380 }
381 EXPORT_SYMBOL(nci_core_cmd);
382 
nci_core_reset(struct nci_dev * ndev)383 int nci_core_reset(struct nci_dev *ndev)
384 {
385 	return __nci_request(ndev, nci_reset_req, (void *)0,
386 			     msecs_to_jiffies(NCI_RESET_TIMEOUT));
387 }
388 EXPORT_SYMBOL(nci_core_reset);
389 
nci_core_init(struct nci_dev * ndev)390 int nci_core_init(struct nci_dev *ndev)
391 {
392 	return __nci_request(ndev, nci_init_req, (void *)0,
393 			     msecs_to_jiffies(NCI_INIT_TIMEOUT));
394 }
395 EXPORT_SYMBOL(nci_core_init);
396 
397 struct nci_loopback_data {
398 	u8 conn_id;
399 	struct sk_buff *data;
400 };
401 
nci_send_data_req(struct nci_dev * ndev,const void * opt)402 static void nci_send_data_req(struct nci_dev *ndev, const void *opt)
403 {
404 	const struct nci_loopback_data *data = opt;
405 
406 	nci_send_data(ndev, data->conn_id, data->data);
407 }
408 
nci_nfcc_loopback_cb(void * context,struct sk_buff * skb,int err)409 static void nci_nfcc_loopback_cb(void *context, struct sk_buff *skb, int err)
410 {
411 	struct nci_dev *ndev = (struct nci_dev *)context;
412 	struct nci_conn_info *conn_info;
413 
414 	conn_info = nci_get_conn_info_by_conn_id(ndev, ndev->cur_conn_id);
415 	if (!conn_info) {
416 		nci_req_complete(ndev, NCI_STATUS_REJECTED);
417 		return;
418 	}
419 
420 	conn_info->rx_skb = skb;
421 
422 	nci_req_complete(ndev, NCI_STATUS_OK);
423 }
424 
nci_nfcc_loopback(struct nci_dev * ndev,const void * data,size_t data_len,struct sk_buff ** resp)425 int nci_nfcc_loopback(struct nci_dev *ndev, const void *data, size_t data_len,
426 		      struct sk_buff **resp)
427 {
428 	int r;
429 	struct nci_loopback_data loopback_data;
430 	struct nci_conn_info *conn_info;
431 	struct sk_buff *skb;
432 	int conn_id = nci_get_conn_info_by_dest_type_params(ndev,
433 					NCI_DESTINATION_NFCC_LOOPBACK, NULL);
434 
435 	if (conn_id < 0) {
436 		r = nci_core_conn_create(ndev, NCI_DESTINATION_NFCC_LOOPBACK,
437 					 0, 0, NULL);
438 		if (r != NCI_STATUS_OK)
439 			return r;
440 
441 		conn_id = nci_get_conn_info_by_dest_type_params(ndev,
442 					NCI_DESTINATION_NFCC_LOOPBACK,
443 					NULL);
444 	}
445 
446 	conn_info = nci_get_conn_info_by_conn_id(ndev, conn_id);
447 	if (!conn_info)
448 		return -EPROTO;
449 
450 	/* store cb and context to be used on receiving data */
451 	conn_info->data_exchange_cb = nci_nfcc_loopback_cb;
452 	conn_info->data_exchange_cb_context = ndev;
453 
454 	skb = nci_skb_alloc(ndev, NCI_DATA_HDR_SIZE + data_len, GFP_KERNEL);
455 	if (!skb)
456 		return -ENOMEM;
457 
458 	skb_reserve(skb, NCI_DATA_HDR_SIZE);
459 	skb_put_data(skb, data, data_len);
460 
461 	loopback_data.conn_id = conn_id;
462 	loopback_data.data = skb;
463 
464 	ndev->cur_conn_id = conn_id;
465 	r = nci_request(ndev, nci_send_data_req, &loopback_data,
466 			msecs_to_jiffies(NCI_DATA_TIMEOUT));
467 	if (r == NCI_STATUS_OK && resp)
468 		*resp = conn_info->rx_skb;
469 
470 	return r;
471 }
472 EXPORT_SYMBOL(nci_nfcc_loopback);
473 
nci_open_device(struct nci_dev * ndev)474 static int nci_open_device(struct nci_dev *ndev)
475 {
476 	int rc = 0;
477 
478 	mutex_lock(&ndev->req_lock);
479 
480 	if (test_bit(NCI_UNREG, &ndev->flags)) {
481 		rc = -ENODEV;
482 		goto done;
483 	}
484 
485 	if (test_bit(NCI_UP, &ndev->flags)) {
486 		rc = -EALREADY;
487 		goto done;
488 	}
489 
490 	if (ndev->ops->open(ndev)) {
491 		rc = -EIO;
492 		goto done;
493 	}
494 
495 	atomic_set(&ndev->cmd_cnt, 1);
496 
497 	set_bit(NCI_INIT, &ndev->flags);
498 
499 	if (ndev->ops->init)
500 		rc = ndev->ops->init(ndev);
501 
502 	if (!rc) {
503 		rc = __nci_request(ndev, nci_reset_req, (void *)0,
504 				   msecs_to_jiffies(NCI_RESET_TIMEOUT));
505 	}
506 
507 	if (!rc && ndev->ops->setup) {
508 		rc = ndev->ops->setup(ndev);
509 	}
510 
511 	if (!rc) {
512 		struct nci_core_init_v2_cmd nci_init_v2_cmd = {
513 			.feature1 = NCI_FEATURE_DISABLE,
514 			.feature2 = NCI_FEATURE_DISABLE
515 		};
516 		const void *opt = NULL;
517 
518 		if (ndev->nci_ver & NCI_VER_2_MASK)
519 			opt = &nci_init_v2_cmd;
520 
521 		rc = __nci_request(ndev, nci_init_req, opt,
522 				   msecs_to_jiffies(NCI_INIT_TIMEOUT));
523 	}
524 
525 	if (!rc && ndev->ops->post_setup)
526 		rc = ndev->ops->post_setup(ndev);
527 
528 	if (!rc) {
529 		rc = __nci_request(ndev, nci_init_complete_req, (void *)0,
530 				   msecs_to_jiffies(NCI_INIT_TIMEOUT));
531 	}
532 
533 	clear_bit(NCI_INIT, &ndev->flags);
534 
535 	if (!rc) {
536 		set_bit(NCI_UP, &ndev->flags);
537 		nci_clear_target_list(ndev);
538 		atomic_set(&ndev->state, NCI_IDLE);
539 	} else {
540 		/* Init failed, cleanup */
541 		skb_queue_purge(&ndev->cmd_q);
542 		skb_queue_purge(&ndev->rx_q);
543 		skb_queue_purge(&ndev->tx_q);
544 
545 		ndev->ops->close(ndev);
546 		ndev->flags &= BIT(NCI_UNREG);
547 	}
548 
549 done:
550 	mutex_unlock(&ndev->req_lock);
551 	return rc;
552 }
553 
nci_close_device(struct nci_dev * ndev)554 static int nci_close_device(struct nci_dev *ndev)
555 {
556 	nci_req_cancel(ndev, ENODEV);
557 
558 	/* This mutex needs to be held as a barrier for
559 	 * caller nci_unregister_device
560 	 */
561 	mutex_lock(&ndev->req_lock);
562 
563 	if (!test_and_clear_bit(NCI_UP, &ndev->flags)) {
564 		/* Need to flush the cmd wq in case
565 		 * there is a queued/running cmd_work
566 		 */
567 		flush_workqueue(ndev->cmd_wq);
568 		del_timer_sync(&ndev->cmd_timer);
569 		del_timer_sync(&ndev->data_timer);
570 		mutex_unlock(&ndev->req_lock);
571 		return 0;
572 	}
573 
574 	/* Drop RX and TX queues */
575 	skb_queue_purge(&ndev->rx_q);
576 	skb_queue_purge(&ndev->tx_q);
577 
578 	/* Flush RX and TX wq */
579 	flush_workqueue(ndev->rx_wq);
580 	flush_workqueue(ndev->tx_wq);
581 
582 	/* Reset device */
583 	skb_queue_purge(&ndev->cmd_q);
584 	atomic_set(&ndev->cmd_cnt, 1);
585 
586 	set_bit(NCI_INIT, &ndev->flags);
587 	__nci_request(ndev, nci_reset_req, (void *)0,
588 		      msecs_to_jiffies(NCI_RESET_TIMEOUT));
589 
590 	/* After this point our queues are empty
591 	 * and no works are scheduled.
592 	 */
593 	ndev->ops->close(ndev);
594 
595 	clear_bit(NCI_INIT, &ndev->flags);
596 
597 	/* Flush cmd wq */
598 	flush_workqueue(ndev->cmd_wq);
599 
600 	del_timer_sync(&ndev->cmd_timer);
601 
602 	/* Clear flags except NCI_UNREG */
603 	ndev->flags &= BIT(NCI_UNREG);
604 
605 	mutex_unlock(&ndev->req_lock);
606 
607 	return 0;
608 }
609 
610 /* NCI command timer function */
nci_cmd_timer(struct timer_list * t)611 static void nci_cmd_timer(struct timer_list *t)
612 {
613 	struct nci_dev *ndev = from_timer(ndev, t, cmd_timer);
614 
615 	atomic_set(&ndev->cmd_cnt, 1);
616 	queue_work(ndev->cmd_wq, &ndev->cmd_work);
617 }
618 
619 /* NCI data exchange timer function */
nci_data_timer(struct timer_list * t)620 static void nci_data_timer(struct timer_list *t)
621 {
622 	struct nci_dev *ndev = from_timer(ndev, t, data_timer);
623 
624 	set_bit(NCI_DATA_EXCHANGE_TO, &ndev->flags);
625 	queue_work(ndev->rx_wq, &ndev->rx_work);
626 }
627 
nci_dev_up(struct nfc_dev * nfc_dev)628 static int nci_dev_up(struct nfc_dev *nfc_dev)
629 {
630 	struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
631 
632 	return nci_open_device(ndev);
633 }
634 
nci_dev_down(struct nfc_dev * nfc_dev)635 static int nci_dev_down(struct nfc_dev *nfc_dev)
636 {
637 	struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
638 
639 	return nci_close_device(ndev);
640 }
641 
nci_set_config(struct nci_dev * ndev,__u8 id,size_t len,const __u8 * val)642 int nci_set_config(struct nci_dev *ndev, __u8 id, size_t len, const __u8 *val)
643 {
644 	struct nci_set_config_param param;
645 
646 	if (!val || !len)
647 		return 0;
648 
649 	param.id = id;
650 	param.len = len;
651 	param.val = val;
652 
653 	return __nci_request(ndev, nci_set_config_req, &param,
654 			     msecs_to_jiffies(NCI_SET_CONFIG_TIMEOUT));
655 }
656 EXPORT_SYMBOL(nci_set_config);
657 
nci_nfcee_discover_req(struct nci_dev * ndev,const void * opt)658 static void nci_nfcee_discover_req(struct nci_dev *ndev, const void *opt)
659 {
660 	struct nci_nfcee_discover_cmd cmd;
661 	__u8 action = (unsigned long)opt;
662 
663 	cmd.discovery_action = action;
664 
665 	nci_send_cmd(ndev, NCI_OP_NFCEE_DISCOVER_CMD, 1, &cmd);
666 }
667 
nci_nfcee_discover(struct nci_dev * ndev,u8 action)668 int nci_nfcee_discover(struct nci_dev *ndev, u8 action)
669 {
670 	unsigned long opt = action;
671 
672 	return __nci_request(ndev, nci_nfcee_discover_req, (void *)opt,
673 				msecs_to_jiffies(NCI_CMD_TIMEOUT));
674 }
675 EXPORT_SYMBOL(nci_nfcee_discover);
676 
nci_nfcee_mode_set_req(struct nci_dev * ndev,const void * opt)677 static void nci_nfcee_mode_set_req(struct nci_dev *ndev, const void *opt)
678 {
679 	const struct nci_nfcee_mode_set_cmd *cmd = opt;
680 
681 	nci_send_cmd(ndev, NCI_OP_NFCEE_MODE_SET_CMD,
682 		     sizeof(struct nci_nfcee_mode_set_cmd), cmd);
683 }
684 
nci_nfcee_mode_set(struct nci_dev * ndev,u8 nfcee_id,u8 nfcee_mode)685 int nci_nfcee_mode_set(struct nci_dev *ndev, u8 nfcee_id, u8 nfcee_mode)
686 {
687 	struct nci_nfcee_mode_set_cmd cmd;
688 
689 	cmd.nfcee_id = nfcee_id;
690 	cmd.nfcee_mode = nfcee_mode;
691 
692 	return __nci_request(ndev, nci_nfcee_mode_set_req, &cmd,
693 			     msecs_to_jiffies(NCI_CMD_TIMEOUT));
694 }
695 EXPORT_SYMBOL(nci_nfcee_mode_set);
696 
nci_core_conn_create_req(struct nci_dev * ndev,const void * opt)697 static void nci_core_conn_create_req(struct nci_dev *ndev, const void *opt)
698 {
699 	const struct core_conn_create_data *data = opt;
700 
701 	nci_send_cmd(ndev, NCI_OP_CORE_CONN_CREATE_CMD, data->length, data->cmd);
702 }
703 
nci_core_conn_create(struct nci_dev * ndev,u8 destination_type,u8 number_destination_params,size_t params_len,const struct core_conn_create_dest_spec_params * params)704 int nci_core_conn_create(struct nci_dev *ndev, u8 destination_type,
705 			 u8 number_destination_params,
706 			 size_t params_len,
707 			 const struct core_conn_create_dest_spec_params *params)
708 {
709 	int r;
710 	struct nci_core_conn_create_cmd *cmd;
711 	struct core_conn_create_data data;
712 
713 	data.length = params_len + sizeof(struct nci_core_conn_create_cmd);
714 	cmd = kzalloc(data.length, GFP_KERNEL);
715 	if (!cmd)
716 		return -ENOMEM;
717 
718 	cmd->destination_type = destination_type;
719 	cmd->number_destination_params = number_destination_params;
720 
721 	data.cmd = cmd;
722 
723 	if (params) {
724 		memcpy(cmd->params, params, params_len);
725 		if (params->length > 0)
726 			memcpy(&ndev->cur_params,
727 			       &params->value[DEST_SPEC_PARAMS_ID_INDEX],
728 			       sizeof(struct dest_spec_params));
729 		else
730 			ndev->cur_params.id = 0;
731 	} else {
732 		ndev->cur_params.id = 0;
733 	}
734 	ndev->cur_dest_type = destination_type;
735 
736 	r = __nci_request(ndev, nci_core_conn_create_req, &data,
737 			  msecs_to_jiffies(NCI_CMD_TIMEOUT));
738 	kfree(cmd);
739 	return r;
740 }
741 EXPORT_SYMBOL(nci_core_conn_create);
742 
nci_core_conn_close_req(struct nci_dev * ndev,const void * opt)743 static void nci_core_conn_close_req(struct nci_dev *ndev, const void *opt)
744 {
745 	__u8 conn_id = (unsigned long)opt;
746 
747 	nci_send_cmd(ndev, NCI_OP_CORE_CONN_CLOSE_CMD, 1, &conn_id);
748 }
749 
nci_core_conn_close(struct nci_dev * ndev,u8 conn_id)750 int nci_core_conn_close(struct nci_dev *ndev, u8 conn_id)
751 {
752 	unsigned long opt = conn_id;
753 
754 	ndev->cur_conn_id = conn_id;
755 	return __nci_request(ndev, nci_core_conn_close_req, (void *)opt,
756 			     msecs_to_jiffies(NCI_CMD_TIMEOUT));
757 }
758 EXPORT_SYMBOL(nci_core_conn_close);
759 
nci_set_local_general_bytes(struct nfc_dev * nfc_dev)760 static int nci_set_local_general_bytes(struct nfc_dev *nfc_dev)
761 {
762 	struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
763 	struct nci_set_config_param param;
764 	int rc;
765 
766 	param.val = nfc_get_local_general_bytes(nfc_dev, &param.len);
767 	if ((param.val == NULL) || (param.len == 0))
768 		return 0;
769 
770 	if (param.len > NFC_MAX_GT_LEN)
771 		return -EINVAL;
772 
773 	param.id = NCI_PN_ATR_REQ_GEN_BYTES;
774 
775 	rc = nci_request(ndev, nci_set_config_req, &param,
776 			 msecs_to_jiffies(NCI_SET_CONFIG_TIMEOUT));
777 	if (rc)
778 		return rc;
779 
780 	param.id = NCI_LN_ATR_RES_GEN_BYTES;
781 
782 	return nci_request(ndev, nci_set_config_req, &param,
783 			   msecs_to_jiffies(NCI_SET_CONFIG_TIMEOUT));
784 }
785 
nci_set_listen_parameters(struct nfc_dev * nfc_dev)786 static int nci_set_listen_parameters(struct nfc_dev *nfc_dev)
787 {
788 	struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
789 	int rc;
790 	__u8 val;
791 
792 	val = NCI_LA_SEL_INFO_NFC_DEP_MASK;
793 
794 	rc = nci_set_config(ndev, NCI_LA_SEL_INFO, 1, &val);
795 	if (rc)
796 		return rc;
797 
798 	val = NCI_LF_PROTOCOL_TYPE_NFC_DEP_MASK;
799 
800 	rc = nci_set_config(ndev, NCI_LF_PROTOCOL_TYPE, 1, &val);
801 	if (rc)
802 		return rc;
803 
804 	val = NCI_LF_CON_BITR_F_212 | NCI_LF_CON_BITR_F_424;
805 
806 	return nci_set_config(ndev, NCI_LF_CON_BITR_F, 1, &val);
807 }
808 
nci_start_poll(struct nfc_dev * nfc_dev,__u32 im_protocols,__u32 tm_protocols)809 static int nci_start_poll(struct nfc_dev *nfc_dev,
810 			  __u32 im_protocols, __u32 tm_protocols)
811 {
812 	struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
813 	struct nci_rf_discover_param param;
814 	int rc;
815 
816 	if ((atomic_read(&ndev->state) == NCI_DISCOVERY) ||
817 	    (atomic_read(&ndev->state) == NCI_W4_ALL_DISCOVERIES)) {
818 		pr_err("unable to start poll, since poll is already active\n");
819 		return -EBUSY;
820 	}
821 
822 	if (ndev->target_active_prot) {
823 		pr_err("there is an active target\n");
824 		return -EBUSY;
825 	}
826 
827 	if ((atomic_read(&ndev->state) == NCI_W4_HOST_SELECT) ||
828 	    (atomic_read(&ndev->state) == NCI_POLL_ACTIVE)) {
829 		pr_debug("target active or w4 select, implicitly deactivate\n");
830 
831 		rc = nci_request(ndev, nci_rf_deactivate_req,
832 				 (void *)NCI_DEACTIVATE_TYPE_IDLE_MODE,
833 				 msecs_to_jiffies(NCI_RF_DEACTIVATE_TIMEOUT));
834 		if (rc)
835 			return -EBUSY;
836 	}
837 
838 	if ((im_protocols | tm_protocols) & NFC_PROTO_NFC_DEP_MASK) {
839 		rc = nci_set_local_general_bytes(nfc_dev);
840 		if (rc) {
841 			pr_err("failed to set local general bytes\n");
842 			return rc;
843 		}
844 	}
845 
846 	if (tm_protocols & NFC_PROTO_NFC_DEP_MASK) {
847 		rc = nci_set_listen_parameters(nfc_dev);
848 		if (rc)
849 			pr_err("failed to set listen parameters\n");
850 	}
851 
852 	param.im_protocols = im_protocols;
853 	param.tm_protocols = tm_protocols;
854 	rc = nci_request(ndev, nci_rf_discover_req, &param,
855 			 msecs_to_jiffies(NCI_RF_DISC_TIMEOUT));
856 
857 	if (!rc)
858 		ndev->poll_prots = im_protocols;
859 
860 	return rc;
861 }
862 
nci_stop_poll(struct nfc_dev * nfc_dev)863 static void nci_stop_poll(struct nfc_dev *nfc_dev)
864 {
865 	struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
866 
867 	if ((atomic_read(&ndev->state) != NCI_DISCOVERY) &&
868 	    (atomic_read(&ndev->state) != NCI_W4_ALL_DISCOVERIES)) {
869 		pr_err("unable to stop poll, since poll is not active\n");
870 		return;
871 	}
872 
873 	nci_request(ndev, nci_rf_deactivate_req,
874 		    (void *)NCI_DEACTIVATE_TYPE_IDLE_MODE,
875 		    msecs_to_jiffies(NCI_RF_DEACTIVATE_TIMEOUT));
876 }
877 
nci_activate_target(struct nfc_dev * nfc_dev,struct nfc_target * target,__u32 protocol)878 static int nci_activate_target(struct nfc_dev *nfc_dev,
879 			       struct nfc_target *target, __u32 protocol)
880 {
881 	struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
882 	struct nci_rf_discover_select_param param;
883 	const struct nfc_target *nci_target = NULL;
884 	int i;
885 	int rc = 0;
886 
887 	pr_debug("target_idx %d, protocol 0x%x\n", target->idx, protocol);
888 
889 	if ((atomic_read(&ndev->state) != NCI_W4_HOST_SELECT) &&
890 	    (atomic_read(&ndev->state) != NCI_POLL_ACTIVE)) {
891 		pr_err("there is no available target to activate\n");
892 		return -EINVAL;
893 	}
894 
895 	if (ndev->target_active_prot) {
896 		pr_err("there is already an active target\n");
897 		return -EBUSY;
898 	}
899 
900 	for (i = 0; i < ndev->n_targets; i++) {
901 		if (ndev->targets[i].idx == target->idx) {
902 			nci_target = &ndev->targets[i];
903 			break;
904 		}
905 	}
906 
907 	if (!nci_target) {
908 		pr_err("unable to find the selected target\n");
909 		return -EINVAL;
910 	}
911 
912 	if (protocol >= NFC_PROTO_MAX) {
913 		pr_err("the requested nfc protocol is invalid\n");
914 		return -EINVAL;
915 	}
916 
917 	if (!(nci_target->supported_protocols & (1 << protocol))) {
918 		pr_err("target does not support the requested protocol 0x%x\n",
919 		       protocol);
920 		return -EINVAL;
921 	}
922 
923 	if (atomic_read(&ndev->state) == NCI_W4_HOST_SELECT) {
924 		param.rf_discovery_id = nci_target->logical_idx;
925 
926 		if (protocol == NFC_PROTO_JEWEL)
927 			param.rf_protocol = NCI_RF_PROTOCOL_T1T;
928 		else if (protocol == NFC_PROTO_MIFARE)
929 			param.rf_protocol = NCI_RF_PROTOCOL_T2T;
930 		else if (protocol == NFC_PROTO_FELICA)
931 			param.rf_protocol = NCI_RF_PROTOCOL_T3T;
932 		else if (protocol == NFC_PROTO_ISO14443 ||
933 			 protocol == NFC_PROTO_ISO14443_B)
934 			param.rf_protocol = NCI_RF_PROTOCOL_ISO_DEP;
935 		else
936 			param.rf_protocol = NCI_RF_PROTOCOL_NFC_DEP;
937 
938 		rc = nci_request(ndev, nci_rf_discover_select_req, &param,
939 				 msecs_to_jiffies(NCI_RF_DISC_SELECT_TIMEOUT));
940 	}
941 
942 	if (!rc)
943 		ndev->target_active_prot = protocol;
944 
945 	return rc;
946 }
947 
nci_deactivate_target(struct nfc_dev * nfc_dev,struct nfc_target * target,__u8 mode)948 static void nci_deactivate_target(struct nfc_dev *nfc_dev,
949 				  struct nfc_target *target,
950 				  __u8 mode)
951 {
952 	struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
953 	unsigned long nci_mode = NCI_DEACTIVATE_TYPE_IDLE_MODE;
954 
955 	if (!ndev->target_active_prot) {
956 		pr_err("unable to deactivate target, no active target\n");
957 		return;
958 	}
959 
960 	ndev->target_active_prot = 0;
961 
962 	switch (mode) {
963 	case NFC_TARGET_MODE_SLEEP:
964 		nci_mode = NCI_DEACTIVATE_TYPE_SLEEP_MODE;
965 		break;
966 	}
967 
968 	if (atomic_read(&ndev->state) == NCI_POLL_ACTIVE) {
969 		nci_request(ndev, nci_rf_deactivate_req, (void *)nci_mode,
970 			    msecs_to_jiffies(NCI_RF_DEACTIVATE_TIMEOUT));
971 	}
972 }
973 
nci_dep_link_up(struct nfc_dev * nfc_dev,struct nfc_target * target,__u8 comm_mode,__u8 * gb,size_t gb_len)974 static int nci_dep_link_up(struct nfc_dev *nfc_dev, struct nfc_target *target,
975 			   __u8 comm_mode, __u8 *gb, size_t gb_len)
976 {
977 	struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
978 	int rc;
979 
980 	pr_debug("target_idx %d, comm_mode %d\n", target->idx, comm_mode);
981 
982 	rc = nci_activate_target(nfc_dev, target, NFC_PROTO_NFC_DEP);
983 	if (rc)
984 		return rc;
985 
986 	rc = nfc_set_remote_general_bytes(nfc_dev, ndev->remote_gb,
987 					  ndev->remote_gb_len);
988 	if (!rc)
989 		rc = nfc_dep_link_is_up(nfc_dev, target->idx, NFC_COMM_PASSIVE,
990 					NFC_RF_INITIATOR);
991 
992 	return rc;
993 }
994 
nci_dep_link_down(struct nfc_dev * nfc_dev)995 static int nci_dep_link_down(struct nfc_dev *nfc_dev)
996 {
997 	struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
998 	int rc;
999 
1000 	if (nfc_dev->rf_mode == NFC_RF_INITIATOR) {
1001 		nci_deactivate_target(nfc_dev, NULL, NCI_DEACTIVATE_TYPE_IDLE_MODE);
1002 	} else {
1003 		if (atomic_read(&ndev->state) == NCI_LISTEN_ACTIVE ||
1004 		    atomic_read(&ndev->state) == NCI_DISCOVERY) {
1005 			nci_request(ndev, nci_rf_deactivate_req, (void *)0,
1006 				    msecs_to_jiffies(NCI_RF_DEACTIVATE_TIMEOUT));
1007 		}
1008 
1009 		rc = nfc_tm_deactivated(nfc_dev);
1010 		if (rc)
1011 			pr_err("error when signaling tm deactivation\n");
1012 	}
1013 
1014 	return 0;
1015 }
1016 
1017 
nci_transceive(struct nfc_dev * nfc_dev,struct nfc_target * target,struct sk_buff * skb,data_exchange_cb_t cb,void * cb_context)1018 static int nci_transceive(struct nfc_dev *nfc_dev, struct nfc_target *target,
1019 			  struct sk_buff *skb,
1020 			  data_exchange_cb_t cb, void *cb_context)
1021 {
1022 	struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
1023 	int rc;
1024 	struct nci_conn_info *conn_info;
1025 
1026 	conn_info = ndev->rf_conn_info;
1027 	if (!conn_info)
1028 		return -EPROTO;
1029 
1030 	pr_debug("target_idx %d, len %d\n", target->idx, skb->len);
1031 
1032 	if (!ndev->target_active_prot) {
1033 		pr_err("unable to exchange data, no active target\n");
1034 		return -EINVAL;
1035 	}
1036 
1037 	if (test_and_set_bit(NCI_DATA_EXCHANGE, &ndev->flags))
1038 		return -EBUSY;
1039 
1040 	/* store cb and context to be used on receiving data */
1041 	conn_info->data_exchange_cb = cb;
1042 	conn_info->data_exchange_cb_context = cb_context;
1043 
1044 	rc = nci_send_data(ndev, NCI_STATIC_RF_CONN_ID, skb);
1045 	if (rc)
1046 		clear_bit(NCI_DATA_EXCHANGE, &ndev->flags);
1047 
1048 	return rc;
1049 }
1050 
nci_tm_send(struct nfc_dev * nfc_dev,struct sk_buff * skb)1051 static int nci_tm_send(struct nfc_dev *nfc_dev, struct sk_buff *skb)
1052 {
1053 	struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
1054 	int rc;
1055 
1056 	rc = nci_send_data(ndev, NCI_STATIC_RF_CONN_ID, skb);
1057 	if (rc)
1058 		pr_err("unable to send data\n");
1059 
1060 	return rc;
1061 }
1062 
nci_enable_se(struct nfc_dev * nfc_dev,u32 se_idx)1063 static int nci_enable_se(struct nfc_dev *nfc_dev, u32 se_idx)
1064 {
1065 	struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
1066 
1067 	if (ndev->ops->enable_se)
1068 		return ndev->ops->enable_se(ndev, se_idx);
1069 
1070 	return 0;
1071 }
1072 
nci_disable_se(struct nfc_dev * nfc_dev,u32 se_idx)1073 static int nci_disable_se(struct nfc_dev *nfc_dev, u32 se_idx)
1074 {
1075 	struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
1076 
1077 	if (ndev->ops->disable_se)
1078 		return ndev->ops->disable_se(ndev, se_idx);
1079 
1080 	return 0;
1081 }
1082 
nci_discover_se(struct nfc_dev * nfc_dev)1083 static int nci_discover_se(struct nfc_dev *nfc_dev)
1084 {
1085 	int r;
1086 	struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
1087 
1088 	if (ndev->ops->discover_se) {
1089 		r = nci_nfcee_discover(ndev, NCI_NFCEE_DISCOVERY_ACTION_ENABLE);
1090 		if (r != NCI_STATUS_OK)
1091 			return -EPROTO;
1092 
1093 		return ndev->ops->discover_se(ndev);
1094 	}
1095 
1096 	return 0;
1097 }
1098 
nci_se_io(struct nfc_dev * nfc_dev,u32 se_idx,u8 * apdu,size_t apdu_length,se_io_cb_t cb,void * cb_context)1099 static int nci_se_io(struct nfc_dev *nfc_dev, u32 se_idx,
1100 		     u8 *apdu, size_t apdu_length,
1101 		     se_io_cb_t cb, void *cb_context)
1102 {
1103 	struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
1104 
1105 	if (ndev->ops->se_io)
1106 		return ndev->ops->se_io(ndev, se_idx, apdu,
1107 				apdu_length, cb, cb_context);
1108 
1109 	return 0;
1110 }
1111 
nci_fw_download(struct nfc_dev * nfc_dev,const char * firmware_name)1112 static int nci_fw_download(struct nfc_dev *nfc_dev, const char *firmware_name)
1113 {
1114 	struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
1115 
1116 	if (!ndev->ops->fw_download)
1117 		return -ENOTSUPP;
1118 
1119 	return ndev->ops->fw_download(ndev, firmware_name);
1120 }
1121 
1122 static const struct nfc_ops nci_nfc_ops = {
1123 	.dev_up = nci_dev_up,
1124 	.dev_down = nci_dev_down,
1125 	.start_poll = nci_start_poll,
1126 	.stop_poll = nci_stop_poll,
1127 	.dep_link_up = nci_dep_link_up,
1128 	.dep_link_down = nci_dep_link_down,
1129 	.activate_target = nci_activate_target,
1130 	.deactivate_target = nci_deactivate_target,
1131 	.im_transceive = nci_transceive,
1132 	.tm_send = nci_tm_send,
1133 	.enable_se = nci_enable_se,
1134 	.disable_se = nci_disable_se,
1135 	.discover_se = nci_discover_se,
1136 	.se_io = nci_se_io,
1137 	.fw_download = nci_fw_download,
1138 };
1139 
1140 /* ---- Interface to NCI drivers ---- */
1141 /**
1142  * nci_allocate_device - allocate a new nci device
1143  *
1144  * @ops: device operations
1145  * @supported_protocols: NFC protocols supported by the device
1146  * @tx_headroom: Reserved space at beginning of skb
1147  * @tx_tailroom: Reserved space at end of skb
1148  */
nci_allocate_device(const struct nci_ops * ops,__u32 supported_protocols,int tx_headroom,int tx_tailroom)1149 struct nci_dev *nci_allocate_device(const struct nci_ops *ops,
1150 				    __u32 supported_protocols,
1151 				    int tx_headroom, int tx_tailroom)
1152 {
1153 	struct nci_dev *ndev;
1154 
1155 	pr_debug("supported_protocols 0x%x\n", supported_protocols);
1156 
1157 	if (!ops->open || !ops->close || !ops->send)
1158 		return NULL;
1159 
1160 	if (!supported_protocols)
1161 		return NULL;
1162 
1163 	ndev = kzalloc(sizeof(struct nci_dev), GFP_KERNEL);
1164 	if (!ndev)
1165 		return NULL;
1166 
1167 	ndev->ops = ops;
1168 
1169 	if (ops->n_prop_ops > NCI_MAX_PROPRIETARY_CMD) {
1170 		pr_err("Too many proprietary commands: %zd\n",
1171 		       ops->n_prop_ops);
1172 		goto free_nci;
1173 	}
1174 
1175 	ndev->tx_headroom = tx_headroom;
1176 	ndev->tx_tailroom = tx_tailroom;
1177 	init_completion(&ndev->req_completion);
1178 
1179 	ndev->nfc_dev = nfc_allocate_device(&nci_nfc_ops,
1180 					    supported_protocols,
1181 					    tx_headroom + NCI_DATA_HDR_SIZE,
1182 					    tx_tailroom);
1183 	if (!ndev->nfc_dev)
1184 		goto free_nci;
1185 
1186 	ndev->hci_dev = nci_hci_allocate(ndev);
1187 	if (!ndev->hci_dev)
1188 		goto free_nfc;
1189 
1190 	nfc_set_drvdata(ndev->nfc_dev, ndev);
1191 
1192 	return ndev;
1193 
1194 free_nfc:
1195 	nfc_free_device(ndev->nfc_dev);
1196 free_nci:
1197 	kfree(ndev);
1198 	return NULL;
1199 }
1200 EXPORT_SYMBOL(nci_allocate_device);
1201 
1202 /**
1203  * nci_free_device - deallocate nci device
1204  *
1205  * @ndev: The nci device to deallocate
1206  */
nci_free_device(struct nci_dev * ndev)1207 void nci_free_device(struct nci_dev *ndev)
1208 {
1209 	nfc_free_device(ndev->nfc_dev);
1210 	nci_hci_deallocate(ndev);
1211 
1212 	/* drop partial rx data packet if present */
1213 	if (ndev->rx_data_reassembly)
1214 		kfree_skb(ndev->rx_data_reassembly);
1215 	kfree(ndev);
1216 }
1217 EXPORT_SYMBOL(nci_free_device);
1218 
1219 /**
1220  * nci_register_device - register a nci device in the nfc subsystem
1221  *
1222  * @ndev: The nci device to register
1223  */
nci_register_device(struct nci_dev * ndev)1224 int nci_register_device(struct nci_dev *ndev)
1225 {
1226 	int rc;
1227 	struct device *dev = &ndev->nfc_dev->dev;
1228 	char name[32];
1229 
1230 	ndev->flags = 0;
1231 
1232 	INIT_WORK(&ndev->cmd_work, nci_cmd_work);
1233 	snprintf(name, sizeof(name), "%s_nci_cmd_wq", dev_name(dev));
1234 	ndev->cmd_wq = create_singlethread_workqueue(name);
1235 	if (!ndev->cmd_wq) {
1236 		rc = -ENOMEM;
1237 		goto exit;
1238 	}
1239 
1240 	INIT_WORK(&ndev->rx_work, nci_rx_work);
1241 	snprintf(name, sizeof(name), "%s_nci_rx_wq", dev_name(dev));
1242 	ndev->rx_wq = create_singlethread_workqueue(name);
1243 	if (!ndev->rx_wq) {
1244 		rc = -ENOMEM;
1245 		goto destroy_cmd_wq_exit;
1246 	}
1247 
1248 	INIT_WORK(&ndev->tx_work, nci_tx_work);
1249 	snprintf(name, sizeof(name), "%s_nci_tx_wq", dev_name(dev));
1250 	ndev->tx_wq = create_singlethread_workqueue(name);
1251 	if (!ndev->tx_wq) {
1252 		rc = -ENOMEM;
1253 		goto destroy_rx_wq_exit;
1254 	}
1255 
1256 	skb_queue_head_init(&ndev->cmd_q);
1257 	skb_queue_head_init(&ndev->rx_q);
1258 	skb_queue_head_init(&ndev->tx_q);
1259 
1260 	timer_setup(&ndev->cmd_timer, nci_cmd_timer, 0);
1261 	timer_setup(&ndev->data_timer, nci_data_timer, 0);
1262 
1263 	mutex_init(&ndev->req_lock);
1264 	INIT_LIST_HEAD(&ndev->conn_info_list);
1265 
1266 	rc = nfc_register_device(ndev->nfc_dev);
1267 	if (rc)
1268 		goto destroy_tx_wq_exit;
1269 
1270 	goto exit;
1271 
1272 destroy_tx_wq_exit:
1273 	destroy_workqueue(ndev->tx_wq);
1274 
1275 destroy_rx_wq_exit:
1276 	destroy_workqueue(ndev->rx_wq);
1277 
1278 destroy_cmd_wq_exit:
1279 	destroy_workqueue(ndev->cmd_wq);
1280 
1281 exit:
1282 	return rc;
1283 }
1284 EXPORT_SYMBOL(nci_register_device);
1285 
1286 /**
1287  * nci_unregister_device - unregister a nci device in the nfc subsystem
1288  *
1289  * @ndev: The nci device to unregister
1290  */
nci_unregister_device(struct nci_dev * ndev)1291 void nci_unregister_device(struct nci_dev *ndev)
1292 {
1293 	struct nci_conn_info *conn_info, *n;
1294 
1295 	/* This set_bit is not protected with specialized barrier,
1296 	 * However, it is fine because the mutex_lock(&ndev->req_lock);
1297 	 * in nci_close_device() will help to emit one.
1298 	 */
1299 	set_bit(NCI_UNREG, &ndev->flags);
1300 
1301 	nci_close_device(ndev);
1302 
1303 	destroy_workqueue(ndev->cmd_wq);
1304 	destroy_workqueue(ndev->rx_wq);
1305 	destroy_workqueue(ndev->tx_wq);
1306 
1307 	list_for_each_entry_safe(conn_info, n, &ndev->conn_info_list, list) {
1308 		list_del(&conn_info->list);
1309 		/* conn_info is allocated with devm_kzalloc */
1310 	}
1311 
1312 	nfc_unregister_device(ndev->nfc_dev);
1313 }
1314 EXPORT_SYMBOL(nci_unregister_device);
1315 
1316 /**
1317  * nci_recv_frame - receive frame from NCI drivers
1318  *
1319  * @ndev: The nci device
1320  * @skb: The sk_buff to receive
1321  */
nci_recv_frame(struct nci_dev * ndev,struct sk_buff * skb)1322 int nci_recv_frame(struct nci_dev *ndev, struct sk_buff *skb)
1323 {
1324 	pr_debug("len %d\n", skb->len);
1325 
1326 	if (!ndev || (!test_bit(NCI_UP, &ndev->flags) &&
1327 	    !test_bit(NCI_INIT, &ndev->flags))) {
1328 		kfree_skb(skb);
1329 		return -ENXIO;
1330 	}
1331 
1332 	/* Queue frame for rx worker thread */
1333 	skb_queue_tail(&ndev->rx_q, skb);
1334 	queue_work(ndev->rx_wq, &ndev->rx_work);
1335 
1336 	return 0;
1337 }
1338 EXPORT_SYMBOL(nci_recv_frame);
1339 
nci_send_frame(struct nci_dev * ndev,struct sk_buff * skb)1340 int nci_send_frame(struct nci_dev *ndev, struct sk_buff *skb)
1341 {
1342 	pr_debug("len %d\n", skb->len);
1343 
1344 	if (!ndev) {
1345 		kfree_skb(skb);
1346 		return -ENODEV;
1347 	}
1348 
1349 	/* Get rid of skb owner, prior to sending to the driver. */
1350 	skb_orphan(skb);
1351 
1352 	/* Send copy to sniffer */
1353 	nfc_send_to_raw_sock(ndev->nfc_dev, skb,
1354 			     RAW_PAYLOAD_NCI, NFC_DIRECTION_TX);
1355 
1356 	return ndev->ops->send(ndev, skb);
1357 }
1358 EXPORT_SYMBOL(nci_send_frame);
1359 
1360 /* Send NCI command */
nci_send_cmd(struct nci_dev * ndev,__u16 opcode,__u8 plen,const void * payload)1361 int nci_send_cmd(struct nci_dev *ndev, __u16 opcode, __u8 plen, const void *payload)
1362 {
1363 	struct nci_ctrl_hdr *hdr;
1364 	struct sk_buff *skb;
1365 
1366 	pr_debug("opcode 0x%x, plen %d\n", opcode, plen);
1367 
1368 	skb = nci_skb_alloc(ndev, (NCI_CTRL_HDR_SIZE + plen), GFP_KERNEL);
1369 	if (!skb) {
1370 		pr_err("no memory for command\n");
1371 		return -ENOMEM;
1372 	}
1373 
1374 	hdr = skb_put(skb, NCI_CTRL_HDR_SIZE);
1375 	hdr->gid = nci_opcode_gid(opcode);
1376 	hdr->oid = nci_opcode_oid(opcode);
1377 	hdr->plen = plen;
1378 
1379 	nci_mt_set((__u8 *)hdr, NCI_MT_CMD_PKT);
1380 	nci_pbf_set((__u8 *)hdr, NCI_PBF_LAST);
1381 
1382 	if (plen)
1383 		skb_put_data(skb, payload, plen);
1384 
1385 	skb_queue_tail(&ndev->cmd_q, skb);
1386 	queue_work(ndev->cmd_wq, &ndev->cmd_work);
1387 
1388 	return 0;
1389 }
1390 EXPORT_SYMBOL(nci_send_cmd);
1391 
1392 /* Proprietary commands API */
ops_cmd_lookup(const struct nci_driver_ops * ops,size_t n_ops,__u16 opcode)1393 static const struct nci_driver_ops *ops_cmd_lookup(const struct nci_driver_ops *ops,
1394 						   size_t n_ops,
1395 						   __u16 opcode)
1396 {
1397 	size_t i;
1398 	const struct nci_driver_ops *op;
1399 
1400 	if (!ops || !n_ops)
1401 		return NULL;
1402 
1403 	for (i = 0; i < n_ops; i++) {
1404 		op = &ops[i];
1405 		if (op->opcode == opcode)
1406 			return op;
1407 	}
1408 
1409 	return NULL;
1410 }
1411 
nci_op_rsp_packet(struct nci_dev * ndev,__u16 rsp_opcode,struct sk_buff * skb,const struct nci_driver_ops * ops,size_t n_ops)1412 static int nci_op_rsp_packet(struct nci_dev *ndev, __u16 rsp_opcode,
1413 			     struct sk_buff *skb, const struct nci_driver_ops *ops,
1414 			     size_t n_ops)
1415 {
1416 	const struct nci_driver_ops *op;
1417 
1418 	op = ops_cmd_lookup(ops, n_ops, rsp_opcode);
1419 	if (!op || !op->rsp)
1420 		return -ENOTSUPP;
1421 
1422 	return op->rsp(ndev, skb);
1423 }
1424 
nci_op_ntf_packet(struct nci_dev * ndev,__u16 ntf_opcode,struct sk_buff * skb,const struct nci_driver_ops * ops,size_t n_ops)1425 static int nci_op_ntf_packet(struct nci_dev *ndev, __u16 ntf_opcode,
1426 			     struct sk_buff *skb, const struct nci_driver_ops *ops,
1427 			     size_t n_ops)
1428 {
1429 	const struct nci_driver_ops *op;
1430 
1431 	op = ops_cmd_lookup(ops, n_ops, ntf_opcode);
1432 	if (!op || !op->ntf)
1433 		return -ENOTSUPP;
1434 
1435 	return op->ntf(ndev, skb);
1436 }
1437 
nci_prop_rsp_packet(struct nci_dev * ndev,__u16 opcode,struct sk_buff * skb)1438 int nci_prop_rsp_packet(struct nci_dev *ndev, __u16 opcode,
1439 			struct sk_buff *skb)
1440 {
1441 	return nci_op_rsp_packet(ndev, opcode, skb, ndev->ops->prop_ops,
1442 				 ndev->ops->n_prop_ops);
1443 }
1444 
nci_prop_ntf_packet(struct nci_dev * ndev,__u16 opcode,struct sk_buff * skb)1445 int nci_prop_ntf_packet(struct nci_dev *ndev, __u16 opcode,
1446 			struct sk_buff *skb)
1447 {
1448 	return nci_op_ntf_packet(ndev, opcode, skb, ndev->ops->prop_ops,
1449 				 ndev->ops->n_prop_ops);
1450 }
1451 
nci_core_rsp_packet(struct nci_dev * ndev,__u16 opcode,struct sk_buff * skb)1452 int nci_core_rsp_packet(struct nci_dev *ndev, __u16 opcode,
1453 			struct sk_buff *skb)
1454 {
1455 	return nci_op_rsp_packet(ndev, opcode, skb, ndev->ops->core_ops,
1456 				  ndev->ops->n_core_ops);
1457 }
1458 
nci_core_ntf_packet(struct nci_dev * ndev,__u16 opcode,struct sk_buff * skb)1459 int nci_core_ntf_packet(struct nci_dev *ndev, __u16 opcode,
1460 			struct sk_buff *skb)
1461 {
1462 	return nci_op_ntf_packet(ndev, opcode, skb, ndev->ops->core_ops,
1463 				 ndev->ops->n_core_ops);
1464 }
1465 
nci_valid_size(struct sk_buff * skb)1466 static bool nci_valid_size(struct sk_buff *skb)
1467 {
1468 	BUILD_BUG_ON(NCI_CTRL_HDR_SIZE != NCI_DATA_HDR_SIZE);
1469 	unsigned int hdr_size = NCI_CTRL_HDR_SIZE;
1470 
1471 	if (skb->len < hdr_size ||
1472 	    !nci_plen(skb->data) ||
1473 	    skb->len < hdr_size + nci_plen(skb->data)) {
1474 		return false;
1475 	}
1476 	return true;
1477 }
1478 
1479 /* ---- NCI TX Data worker thread ---- */
1480 
nci_tx_work(struct work_struct * work)1481 static void nci_tx_work(struct work_struct *work)
1482 {
1483 	struct nci_dev *ndev = container_of(work, struct nci_dev, tx_work);
1484 	struct nci_conn_info *conn_info;
1485 	struct sk_buff *skb;
1486 
1487 	conn_info = nci_get_conn_info_by_conn_id(ndev, ndev->cur_conn_id);
1488 	if (!conn_info)
1489 		return;
1490 
1491 	pr_debug("credits_cnt %d\n", atomic_read(&conn_info->credits_cnt));
1492 
1493 	/* Send queued tx data */
1494 	while (atomic_read(&conn_info->credits_cnt)) {
1495 		skb = skb_dequeue(&ndev->tx_q);
1496 		if (!skb)
1497 			return;
1498 		kcov_remote_start_common(skb_get_kcov_handle(skb));
1499 
1500 		/* Check if data flow control is used */
1501 		if (atomic_read(&conn_info->credits_cnt) !=
1502 		    NCI_DATA_FLOW_CONTROL_NOT_USED)
1503 			atomic_dec(&conn_info->credits_cnt);
1504 
1505 		pr_debug("NCI TX: MT=data, PBF=%d, conn_id=%d, plen=%d\n",
1506 			 nci_pbf(skb->data),
1507 			 nci_conn_id(skb->data),
1508 			 nci_plen(skb->data));
1509 
1510 		nci_send_frame(ndev, skb);
1511 
1512 		mod_timer(&ndev->data_timer,
1513 			  jiffies + msecs_to_jiffies(NCI_DATA_TIMEOUT));
1514 		kcov_remote_stop();
1515 	}
1516 }
1517 
1518 /* ----- NCI RX worker thread (data & control) ----- */
1519 
nci_rx_work(struct work_struct * work)1520 static void nci_rx_work(struct work_struct *work)
1521 {
1522 	struct nci_dev *ndev = container_of(work, struct nci_dev, rx_work);
1523 	struct sk_buff *skb;
1524 
1525 	for (; (skb = skb_dequeue(&ndev->rx_q)); kcov_remote_stop()) {
1526 		kcov_remote_start_common(skb_get_kcov_handle(skb));
1527 
1528 		/* Send copy to sniffer */
1529 		nfc_send_to_raw_sock(ndev->nfc_dev, skb,
1530 				     RAW_PAYLOAD_NCI, NFC_DIRECTION_RX);
1531 
1532 		if (!nci_valid_size(skb)) {
1533 			kfree_skb(skb);
1534 			continue;
1535 		}
1536 
1537 		/* Process frame */
1538 		switch (nci_mt(skb->data)) {
1539 		case NCI_MT_RSP_PKT:
1540 			nci_rsp_packet(ndev, skb);
1541 			break;
1542 
1543 		case NCI_MT_NTF_PKT:
1544 			nci_ntf_packet(ndev, skb);
1545 			break;
1546 
1547 		case NCI_MT_DATA_PKT:
1548 			nci_rx_data_packet(ndev, skb);
1549 			break;
1550 
1551 		default:
1552 			pr_err("unknown MT 0x%x\n", nci_mt(skb->data));
1553 			kfree_skb(skb);
1554 			break;
1555 		}
1556 	}
1557 
1558 	/* check if a data exchange timeout has occurred */
1559 	if (test_bit(NCI_DATA_EXCHANGE_TO, &ndev->flags)) {
1560 		/* complete the data exchange transaction, if exists */
1561 		if (test_bit(NCI_DATA_EXCHANGE, &ndev->flags))
1562 			nci_data_exchange_complete(ndev, NULL,
1563 						   ndev->cur_conn_id,
1564 						   -ETIMEDOUT);
1565 
1566 		clear_bit(NCI_DATA_EXCHANGE_TO, &ndev->flags);
1567 	}
1568 }
1569 
1570 /* ----- NCI TX CMD worker thread ----- */
1571 
nci_cmd_work(struct work_struct * work)1572 static void nci_cmd_work(struct work_struct *work)
1573 {
1574 	struct nci_dev *ndev = container_of(work, struct nci_dev, cmd_work);
1575 	struct sk_buff *skb;
1576 
1577 	pr_debug("cmd_cnt %d\n", atomic_read(&ndev->cmd_cnt));
1578 
1579 	/* Send queued command */
1580 	if (atomic_read(&ndev->cmd_cnt)) {
1581 		skb = skb_dequeue(&ndev->cmd_q);
1582 		if (!skb)
1583 			return;
1584 
1585 		kcov_remote_start_common(skb_get_kcov_handle(skb));
1586 		atomic_dec(&ndev->cmd_cnt);
1587 
1588 		pr_debug("NCI TX: MT=cmd, PBF=%d, GID=0x%x, OID=0x%x, plen=%d\n",
1589 			 nci_pbf(skb->data),
1590 			 nci_opcode_gid(nci_opcode(skb->data)),
1591 			 nci_opcode_oid(nci_opcode(skb->data)),
1592 			 nci_plen(skb->data));
1593 
1594 		nci_send_frame(ndev, skb);
1595 
1596 		mod_timer(&ndev->cmd_timer,
1597 			  jiffies + msecs_to_jiffies(NCI_CMD_TIMEOUT));
1598 		kcov_remote_stop();
1599 	}
1600 }
1601 
1602 MODULE_LICENSE("GPL");
1603