1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3 * The NFC Controller Interface is the communication protocol between an
4 * NFC Controller (NFCC) and a Device Host (DH).
5 *
6 * Copyright (C) 2011 Texas Instruments, Inc.
7 *
8 * Written by Ilan Elias <ilane@ti.com>
9 *
10 * Acknowledgements:
11 * This file is based on hci_event.c, which was written
12 * by Maxim Krasnyansky.
13 */
14
15 #define pr_fmt(fmt) KBUILD_MODNAME ": %s: " fmt, __func__
16
17 #include <linux/types.h>
18 #include <linux/interrupt.h>
19 #include <linux/bitops.h>
20 #include <linux/skbuff.h>
21
22 #include "../nfc.h"
23 #include <net/nfc/nci.h>
24 #include <net/nfc/nci_core.h>
25
26 /* Handle NCI Response packets */
27
nci_core_reset_rsp_packet(struct nci_dev * ndev,const struct sk_buff * skb)28 static void nci_core_reset_rsp_packet(struct nci_dev *ndev,
29 const struct sk_buff *skb)
30 {
31 const struct nci_core_reset_rsp *rsp = (void *)skb->data;
32
33 pr_debug("status 0x%x\n", rsp->status);
34
35 /* Handle NCI 1.x ver */
36 if (skb->len != 1) {
37 if (rsp->status == NCI_STATUS_OK) {
38 ndev->nci_ver = rsp->nci_ver;
39 pr_debug("nci_ver 0x%x, config_status 0x%x\n",
40 rsp->nci_ver, rsp->config_status);
41 }
42
43 nci_req_complete(ndev, rsp->status);
44 }
45 }
46
nci_core_init_rsp_packet_v1(struct nci_dev * ndev,const struct sk_buff * skb)47 static u8 nci_core_init_rsp_packet_v1(struct nci_dev *ndev,
48 const struct sk_buff *skb)
49 {
50 const struct nci_core_init_rsp_1 *rsp_1 = (void *)skb->data;
51 const struct nci_core_init_rsp_2 *rsp_2;
52
53 pr_debug("status 0x%x\n", rsp_1->status);
54
55 if (rsp_1->status != NCI_STATUS_OK)
56 return rsp_1->status;
57
58 ndev->nfcc_features = __le32_to_cpu(rsp_1->nfcc_features);
59 ndev->num_supported_rf_interfaces = rsp_1->num_supported_rf_interfaces;
60
61 ndev->num_supported_rf_interfaces =
62 min((int)ndev->num_supported_rf_interfaces,
63 NCI_MAX_SUPPORTED_RF_INTERFACES);
64
65 memcpy(ndev->supported_rf_interfaces,
66 rsp_1->supported_rf_interfaces,
67 ndev->num_supported_rf_interfaces);
68
69 rsp_2 = (void *) (skb->data + 6 + rsp_1->num_supported_rf_interfaces);
70
71 ndev->max_logical_connections = rsp_2->max_logical_connections;
72 ndev->max_routing_table_size =
73 __le16_to_cpu(rsp_2->max_routing_table_size);
74 ndev->max_ctrl_pkt_payload_len =
75 rsp_2->max_ctrl_pkt_payload_len;
76 ndev->max_size_for_large_params =
77 __le16_to_cpu(rsp_2->max_size_for_large_params);
78 ndev->manufact_id =
79 rsp_2->manufact_id;
80 ndev->manufact_specific_info =
81 __le32_to_cpu(rsp_2->manufact_specific_info);
82
83 return NCI_STATUS_OK;
84 }
85
nci_core_init_rsp_packet_v2(struct nci_dev * ndev,const struct sk_buff * skb)86 static u8 nci_core_init_rsp_packet_v2(struct nci_dev *ndev,
87 const struct sk_buff *skb)
88 {
89 const struct nci_core_init_rsp_nci_ver2 *rsp = (void *)skb->data;
90 const u8 *supported_rf_interface = rsp->supported_rf_interfaces;
91 u8 rf_interface_idx = 0;
92 u8 rf_extension_cnt = 0;
93
94 pr_debug("status %x\n", rsp->status);
95
96 if (rsp->status != NCI_STATUS_OK)
97 return rsp->status;
98
99 ndev->nfcc_features = __le32_to_cpu(rsp->nfcc_features);
100 ndev->num_supported_rf_interfaces = rsp->num_supported_rf_interfaces;
101
102 ndev->num_supported_rf_interfaces =
103 min((int)ndev->num_supported_rf_interfaces,
104 NCI_MAX_SUPPORTED_RF_INTERFACES);
105
106 while (rf_interface_idx < ndev->num_supported_rf_interfaces) {
107 ndev->supported_rf_interfaces[rf_interface_idx++] = *supported_rf_interface++;
108
109 /* skip rf extension parameters */
110 rf_extension_cnt = *supported_rf_interface++;
111 supported_rf_interface += rf_extension_cnt;
112 }
113
114 ndev->max_logical_connections = rsp->max_logical_connections;
115 ndev->max_routing_table_size =
116 __le16_to_cpu(rsp->max_routing_table_size);
117 ndev->max_ctrl_pkt_payload_len =
118 rsp->max_ctrl_pkt_payload_len;
119 ndev->max_size_for_large_params = NCI_MAX_LARGE_PARAMS_NCI_v2;
120
121 return NCI_STATUS_OK;
122 }
123
nci_core_init_rsp_packet(struct nci_dev * ndev,const struct sk_buff * skb)124 static void nci_core_init_rsp_packet(struct nci_dev *ndev, const struct sk_buff *skb)
125 {
126 u8 status = 0;
127
128 if (!(ndev->nci_ver & NCI_VER_2_MASK))
129 status = nci_core_init_rsp_packet_v1(ndev, skb);
130 else
131 status = nci_core_init_rsp_packet_v2(ndev, skb);
132
133 if (status != NCI_STATUS_OK)
134 goto exit;
135
136 pr_debug("nfcc_features 0x%x\n",
137 ndev->nfcc_features);
138 pr_debug("num_supported_rf_interfaces %d\n",
139 ndev->num_supported_rf_interfaces);
140 pr_debug("supported_rf_interfaces[0] 0x%x\n",
141 ndev->supported_rf_interfaces[0]);
142 pr_debug("supported_rf_interfaces[1] 0x%x\n",
143 ndev->supported_rf_interfaces[1]);
144 pr_debug("supported_rf_interfaces[2] 0x%x\n",
145 ndev->supported_rf_interfaces[2]);
146 pr_debug("supported_rf_interfaces[3] 0x%x\n",
147 ndev->supported_rf_interfaces[3]);
148 pr_debug("max_logical_connections %d\n",
149 ndev->max_logical_connections);
150 pr_debug("max_routing_table_size %d\n",
151 ndev->max_routing_table_size);
152 pr_debug("max_ctrl_pkt_payload_len %d\n",
153 ndev->max_ctrl_pkt_payload_len);
154 pr_debug("max_size_for_large_params %d\n",
155 ndev->max_size_for_large_params);
156 pr_debug("manufact_id 0x%x\n",
157 ndev->manufact_id);
158 pr_debug("manufact_specific_info 0x%x\n",
159 ndev->manufact_specific_info);
160
161 exit:
162 nci_req_complete(ndev, status);
163 }
164
nci_core_set_config_rsp_packet(struct nci_dev * ndev,const struct sk_buff * skb)165 static void nci_core_set_config_rsp_packet(struct nci_dev *ndev,
166 const struct sk_buff *skb)
167 {
168 const struct nci_core_set_config_rsp *rsp = (void *)skb->data;
169
170 pr_debug("status 0x%x\n", rsp->status);
171
172 nci_req_complete(ndev, rsp->status);
173 }
174
nci_rf_disc_map_rsp_packet(struct nci_dev * ndev,const struct sk_buff * skb)175 static void nci_rf_disc_map_rsp_packet(struct nci_dev *ndev,
176 const struct sk_buff *skb)
177 {
178 __u8 status = skb->data[0];
179
180 pr_debug("status 0x%x\n", status);
181
182 nci_req_complete(ndev, status);
183 }
184
nci_rf_disc_rsp_packet(struct nci_dev * ndev,const struct sk_buff * skb)185 static void nci_rf_disc_rsp_packet(struct nci_dev *ndev,
186 const struct sk_buff *skb)
187 {
188 struct nci_conn_info *conn_info;
189 __u8 status = skb->data[0];
190
191 pr_debug("status 0x%x\n", status);
192
193 if (status == NCI_STATUS_OK) {
194 atomic_set(&ndev->state, NCI_DISCOVERY);
195
196 conn_info = ndev->rf_conn_info;
197 if (!conn_info) {
198 conn_info = devm_kzalloc(&ndev->nfc_dev->dev,
199 sizeof(struct nci_conn_info),
200 GFP_KERNEL);
201 if (!conn_info) {
202 status = NCI_STATUS_REJECTED;
203 goto exit;
204 }
205 conn_info->conn_id = NCI_STATIC_RF_CONN_ID;
206 INIT_LIST_HEAD(&conn_info->list);
207 list_add(&conn_info->list, &ndev->conn_info_list);
208 ndev->rf_conn_info = conn_info;
209 }
210 }
211
212 exit:
213 nci_req_complete(ndev, status);
214 }
215
nci_rf_disc_select_rsp_packet(struct nci_dev * ndev,const struct sk_buff * skb)216 static void nci_rf_disc_select_rsp_packet(struct nci_dev *ndev,
217 const struct sk_buff *skb)
218 {
219 __u8 status = skb->data[0];
220
221 pr_debug("status 0x%x\n", status);
222
223 /* Complete the request on intf_activated_ntf or generic_error_ntf */
224 if (status != NCI_STATUS_OK)
225 nci_req_complete(ndev, status);
226 }
227
nci_rf_deactivate_rsp_packet(struct nci_dev * ndev,const struct sk_buff * skb)228 static void nci_rf_deactivate_rsp_packet(struct nci_dev *ndev,
229 const struct sk_buff *skb)
230 {
231 __u8 status = skb->data[0];
232
233 pr_debug("status 0x%x\n", status);
234
235 /* If target was active, complete the request only in deactivate_ntf */
236 if ((status != NCI_STATUS_OK) ||
237 (atomic_read(&ndev->state) != NCI_POLL_ACTIVE)) {
238 nci_clear_target_list(ndev);
239 atomic_set(&ndev->state, NCI_IDLE);
240 nci_req_complete(ndev, status);
241 }
242 }
243
nci_nfcee_discover_rsp_packet(struct nci_dev * ndev,const struct sk_buff * skb)244 static void nci_nfcee_discover_rsp_packet(struct nci_dev *ndev,
245 const struct sk_buff *skb)
246 {
247 const struct nci_nfcee_discover_rsp *discover_rsp;
248
249 if (skb->len != 2) {
250 nci_req_complete(ndev, NCI_STATUS_NFCEE_PROTOCOL_ERROR);
251 return;
252 }
253
254 discover_rsp = (struct nci_nfcee_discover_rsp *)skb->data;
255
256 if (discover_rsp->status != NCI_STATUS_OK ||
257 discover_rsp->num_nfcee == 0)
258 nci_req_complete(ndev, discover_rsp->status);
259 }
260
nci_nfcee_mode_set_rsp_packet(struct nci_dev * ndev,const struct sk_buff * skb)261 static void nci_nfcee_mode_set_rsp_packet(struct nci_dev *ndev,
262 const struct sk_buff *skb)
263 {
264 __u8 status = skb->data[0];
265
266 pr_debug("status 0x%x\n", status);
267 nci_req_complete(ndev, status);
268 }
269
nci_core_conn_create_rsp_packet(struct nci_dev * ndev,const struct sk_buff * skb)270 static void nci_core_conn_create_rsp_packet(struct nci_dev *ndev,
271 const struct sk_buff *skb)
272 {
273 __u8 status = skb->data[0];
274 struct nci_conn_info *conn_info = NULL;
275 const struct nci_core_conn_create_rsp *rsp;
276
277 pr_debug("status 0x%x\n", status);
278
279 if (status == NCI_STATUS_OK) {
280 rsp = (struct nci_core_conn_create_rsp *)skb->data;
281
282 conn_info = devm_kzalloc(&ndev->nfc_dev->dev,
283 sizeof(*conn_info), GFP_KERNEL);
284 if (!conn_info) {
285 status = NCI_STATUS_REJECTED;
286 goto exit;
287 }
288
289 conn_info->dest_params = devm_kzalloc(&ndev->nfc_dev->dev,
290 sizeof(struct dest_spec_params),
291 GFP_KERNEL);
292 if (!conn_info->dest_params) {
293 status = NCI_STATUS_REJECTED;
294 goto free_conn_info;
295 }
296
297 conn_info->dest_type = ndev->cur_dest_type;
298 conn_info->dest_params->id = ndev->cur_params.id;
299 conn_info->dest_params->protocol = ndev->cur_params.protocol;
300 conn_info->conn_id = rsp->conn_id;
301
302 /* Note: data_exchange_cb and data_exchange_cb_context need to
303 * be specify out of nci_core_conn_create_rsp_packet
304 */
305
306 INIT_LIST_HEAD(&conn_info->list);
307 list_add(&conn_info->list, &ndev->conn_info_list);
308
309 if (ndev->cur_params.id == ndev->hci_dev->nfcee_id)
310 ndev->hci_dev->conn_info = conn_info;
311
312 conn_info->conn_id = rsp->conn_id;
313 conn_info->max_pkt_payload_len = rsp->max_ctrl_pkt_payload_len;
314 atomic_set(&conn_info->credits_cnt, rsp->credits_cnt);
315 }
316
317 free_conn_info:
318 if (status == NCI_STATUS_REJECTED)
319 devm_kfree(&ndev->nfc_dev->dev, conn_info);
320 exit:
321
322 nci_req_complete(ndev, status);
323 }
324
nci_core_conn_close_rsp_packet(struct nci_dev * ndev,const struct sk_buff * skb)325 static void nci_core_conn_close_rsp_packet(struct nci_dev *ndev,
326 const struct sk_buff *skb)
327 {
328 struct nci_conn_info *conn_info;
329 __u8 status = skb->data[0];
330
331 pr_debug("status 0x%x\n", status);
332 if (status == NCI_STATUS_OK) {
333 conn_info = nci_get_conn_info_by_conn_id(ndev,
334 ndev->cur_conn_id);
335 if (conn_info) {
336 list_del(&conn_info->list);
337 if (conn_info == ndev->rf_conn_info)
338 ndev->rf_conn_info = NULL;
339 devm_kfree(&ndev->nfc_dev->dev, conn_info);
340 }
341 }
342 nci_req_complete(ndev, status);
343 }
344
nci_rsp_packet(struct nci_dev * ndev,struct sk_buff * skb)345 void nci_rsp_packet(struct nci_dev *ndev, struct sk_buff *skb)
346 {
347 __u16 rsp_opcode = nci_opcode(skb->data);
348
349 /* we got a rsp, stop the cmd timer */
350 del_timer(&ndev->cmd_timer);
351
352 pr_debug("NCI RX: MT=rsp, PBF=%d, GID=0x%x, OID=0x%x, plen=%d\n",
353 nci_pbf(skb->data),
354 nci_opcode_gid(rsp_opcode),
355 nci_opcode_oid(rsp_opcode),
356 nci_plen(skb->data));
357
358 /* strip the nci control header */
359 skb_pull(skb, NCI_CTRL_HDR_SIZE);
360
361 if (nci_opcode_gid(rsp_opcode) == NCI_GID_PROPRIETARY) {
362 if (nci_prop_rsp_packet(ndev, rsp_opcode, skb) == -ENOTSUPP) {
363 pr_err("unsupported rsp opcode 0x%x\n",
364 rsp_opcode);
365 }
366
367 goto end;
368 }
369
370 switch (rsp_opcode) {
371 case NCI_OP_CORE_RESET_RSP:
372 nci_core_reset_rsp_packet(ndev, skb);
373 break;
374
375 case NCI_OP_CORE_INIT_RSP:
376 nci_core_init_rsp_packet(ndev, skb);
377 break;
378
379 case NCI_OP_CORE_SET_CONFIG_RSP:
380 nci_core_set_config_rsp_packet(ndev, skb);
381 break;
382
383 case NCI_OP_CORE_CONN_CREATE_RSP:
384 nci_core_conn_create_rsp_packet(ndev, skb);
385 break;
386
387 case NCI_OP_CORE_CONN_CLOSE_RSP:
388 nci_core_conn_close_rsp_packet(ndev, skb);
389 break;
390
391 case NCI_OP_RF_DISCOVER_MAP_RSP:
392 nci_rf_disc_map_rsp_packet(ndev, skb);
393 break;
394
395 case NCI_OP_RF_DISCOVER_RSP:
396 nci_rf_disc_rsp_packet(ndev, skb);
397 break;
398
399 case NCI_OP_RF_DISCOVER_SELECT_RSP:
400 nci_rf_disc_select_rsp_packet(ndev, skb);
401 break;
402
403 case NCI_OP_RF_DEACTIVATE_RSP:
404 nci_rf_deactivate_rsp_packet(ndev, skb);
405 break;
406
407 case NCI_OP_NFCEE_DISCOVER_RSP:
408 nci_nfcee_discover_rsp_packet(ndev, skb);
409 break;
410
411 case NCI_OP_NFCEE_MODE_SET_RSP:
412 nci_nfcee_mode_set_rsp_packet(ndev, skb);
413 break;
414
415 default:
416 pr_err("unknown rsp opcode 0x%x\n", rsp_opcode);
417 break;
418 }
419
420 nci_core_rsp_packet(ndev, rsp_opcode, skb);
421 end:
422 kfree_skb(skb);
423
424 /* trigger the next cmd */
425 atomic_set(&ndev->cmd_cnt, 1);
426 if (!skb_queue_empty(&ndev->cmd_q))
427 queue_work(ndev->cmd_wq, &ndev->cmd_work);
428 }
429