1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3  * Proprietary commands extension for STMicroelectronics NFC Chip
4  *
5  * Copyright (C) 2014-2015  STMicroelectronics SAS. All rights reserved.
6  */
7 
8 #include <net/genetlink.h>
9 #include <linux/module.h>
10 #include <linux/nfc.h>
11 #include <net/nfc/hci.h>
12 #include <net/nfc/llc.h>
13 
14 #include "st21nfca.h"
15 
16 #define ST21NFCA_HCI_DM_GETDATA			0x10
17 #define ST21NFCA_HCI_DM_PUTDATA			0x11
18 #define ST21NFCA_HCI_DM_LOAD			0x12
19 #define ST21NFCA_HCI_DM_GETINFO			0x13
20 #define ST21NFCA_HCI_DM_UPDATE_AID		0x20
21 #define ST21NFCA_HCI_DM_RESET			0x3e
22 
23 #define ST21NFCA_HCI_DM_FIELD_GENERATOR		0x32
24 
25 #define ST21NFCA_FACTORY_MODE_ON		1
26 #define ST21NFCA_FACTORY_MODE_OFF		0
27 
28 #define ST21NFCA_EVT_POST_DATA			0x02
29 
30 struct get_param_data {
31 	u8 gate;
32 	u8 data;
33 } __packed;
34 
35 static int st21nfca_factory_mode(struct nfc_dev *dev, void *data,
36 			       size_t data_len)
37 {
38 	struct nfc_hci_dev *hdev = nfc_get_drvdata(dev);
39 
40 	if (data_len != 1)
41 		return -EINVAL;
42 
43 	pr_debug("factory mode: %x\n", ((u8 *)data)[0]);
44 
45 	switch (((u8 *)data)[0]) {
46 	case ST21NFCA_FACTORY_MODE_ON:
47 		test_and_set_bit(ST21NFCA_FACTORY_MODE, &hdev->quirks);
48 	break;
49 	case ST21NFCA_FACTORY_MODE_OFF:
50 		clear_bit(ST21NFCA_FACTORY_MODE, &hdev->quirks);
51 	break;
52 	default:
53 		return -EINVAL;
54 	}
55 
56 	return 0;
57 }
58 
59 static int st21nfca_hci_clear_all_pipes(struct nfc_dev *dev, void *data,
60 				      size_t data_len)
61 {
62 	struct nfc_hci_dev *hdev = nfc_get_drvdata(dev);
63 
64 	return nfc_hci_disconnect_all_gates(hdev);
65 }
66 
67 static int st21nfca_hci_dm_put_data(struct nfc_dev *dev, void *data,
68 				  size_t data_len)
69 {
70 	struct nfc_hci_dev *hdev = nfc_get_drvdata(dev);
71 
72 	return nfc_hci_send_cmd(hdev, ST21NFCA_DEVICE_MGNT_GATE,
73 				ST21NFCA_HCI_DM_PUTDATA, data,
74 				data_len, NULL);
75 }
76 
77 static int st21nfca_hci_dm_update_aid(struct nfc_dev *dev, void *data,
78 				    size_t data_len)
79 {
80 	struct nfc_hci_dev *hdev = nfc_get_drvdata(dev);
81 
82 	return nfc_hci_send_cmd(hdev, ST21NFCA_DEVICE_MGNT_GATE,
83 			ST21NFCA_HCI_DM_UPDATE_AID, data, data_len, NULL);
84 }
85 
86 static int st21nfca_hci_dm_get_info(struct nfc_dev *dev, void *data,
87 				    size_t data_len)
88 {
89 	int r;
90 	struct sk_buff *msg, *skb;
91 	struct nfc_hci_dev *hdev = nfc_get_drvdata(dev);
92 
93 	r = nfc_hci_send_cmd(hdev,
94 			     ST21NFCA_DEVICE_MGNT_GATE,
95 			     ST21NFCA_HCI_DM_GETINFO,
96 			     data, data_len, &skb);
97 	if (r)
98 		goto exit;
99 
100 	msg = nfc_vendor_cmd_alloc_reply_skb(dev, ST21NFCA_VENDOR_OUI,
101 					     HCI_DM_GET_INFO, skb->len);
102 	if (!msg) {
103 		r = -ENOMEM;
104 		goto free_skb;
105 	}
106 
107 	if (nla_put(msg, NFC_ATTR_VENDOR_DATA, skb->len, skb->data)) {
108 		kfree_skb(msg);
109 		r = -ENOBUFS;
110 		goto free_skb;
111 	}
112 
113 	r = nfc_vendor_cmd_reply(msg);
114 
115 free_skb:
116 	kfree_skb(skb);
117 exit:
118 	return r;
119 }
120 
121 static int st21nfca_hci_dm_get_data(struct nfc_dev *dev, void *data,
122 				    size_t data_len)
123 {
124 	int r;
125 	struct sk_buff *msg, *skb;
126 	struct nfc_hci_dev *hdev = nfc_get_drvdata(dev);
127 
128 	r = nfc_hci_send_cmd(hdev,
129 			     ST21NFCA_DEVICE_MGNT_GATE,
130 			     ST21NFCA_HCI_DM_GETDATA,
131 			     data, data_len, &skb);
132 	if (r)
133 		goto exit;
134 
135 	msg = nfc_vendor_cmd_alloc_reply_skb(dev, ST21NFCA_VENDOR_OUI,
136 					     HCI_DM_GET_DATA, skb->len);
137 	if (!msg) {
138 		r = -ENOMEM;
139 		goto free_skb;
140 	}
141 
142 	if (nla_put(msg, NFC_ATTR_VENDOR_DATA, skb->len, skb->data)) {
143 		kfree_skb(msg);
144 		r = -ENOBUFS;
145 		goto free_skb;
146 	}
147 
148 	r = nfc_vendor_cmd_reply(msg);
149 
150 free_skb:
151 	kfree_skb(skb);
152 exit:
153 	return r;
154 }
155 
156 static int st21nfca_hci_dm_load(struct nfc_dev *dev, void *data,
157 				size_t data_len)
158 {
159 	struct nfc_hci_dev *hdev = nfc_get_drvdata(dev);
160 
161 	return nfc_hci_send_cmd(hdev, ST21NFCA_DEVICE_MGNT_GATE,
162 				ST21NFCA_HCI_DM_LOAD, data, data_len, NULL);
163 }
164 
165 static int st21nfca_hci_dm_reset(struct nfc_dev *dev, void *data,
166 				 size_t data_len)
167 {
168 	int r;
169 	struct nfc_hci_dev *hdev = nfc_get_drvdata(dev);
170 
171 	r = nfc_hci_send_cmd_async(hdev, ST21NFCA_DEVICE_MGNT_GATE,
172 			ST21NFCA_HCI_DM_RESET, data, data_len, NULL, NULL);
173 	if (r < 0)
174 		return r;
175 
176 	r = nfc_llc_stop(hdev->llc);
177 	if (r < 0)
178 		return r;
179 
180 	return nfc_llc_start(hdev->llc);
181 }
182 
183 static int st21nfca_hci_get_param(struct nfc_dev *dev, void *data,
184 				  size_t data_len)
185 {
186 	int r;
187 	struct sk_buff *msg, *skb;
188 	struct nfc_hci_dev *hdev = nfc_get_drvdata(dev);
189 	struct get_param_data *param = (struct get_param_data *)data;
190 
191 	if (data_len < sizeof(struct get_param_data))
192 		return -EPROTO;
193 
194 	r = nfc_hci_get_param(hdev, param->gate, param->data, &skb);
195 	if (r)
196 		goto exit;
197 
198 	msg = nfc_vendor_cmd_alloc_reply_skb(dev, ST21NFCA_VENDOR_OUI,
199 					     HCI_GET_PARAM, skb->len);
200 	if (!msg) {
201 		r = -ENOMEM;
202 		goto free_skb;
203 	}
204 
205 	if (nla_put(msg, NFC_ATTR_VENDOR_DATA, skb->len, skb->data)) {
206 		kfree_skb(msg);
207 		r = -ENOBUFS;
208 		goto free_skb;
209 	}
210 
211 	r = nfc_vendor_cmd_reply(msg);
212 
213 free_skb:
214 	kfree_skb(skb);
215 exit:
216 	return r;
217 }
218 
219 static int st21nfca_hci_dm_field_generator(struct nfc_dev *dev, void *data,
220 					   size_t data_len)
221 {
222 	struct nfc_hci_dev *hdev = nfc_get_drvdata(dev);
223 
224 	return nfc_hci_send_cmd(hdev,
225 				ST21NFCA_DEVICE_MGNT_GATE,
226 				ST21NFCA_HCI_DM_FIELD_GENERATOR,
227 				data, data_len, NULL);
228 }
229 
230 int st21nfca_hci_loopback_event_received(struct nfc_hci_dev *hdev, u8 event,
231 					 struct sk_buff *skb)
232 {
233 	struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev);
234 
235 	switch (event) {
236 	case ST21NFCA_EVT_POST_DATA:
237 		info->vendor_info.rx_skb = skb;
238 	break;
239 	default:
240 		nfc_err(&hdev->ndev->dev, "Unexpected event on loopback gate\n");
241 	}
242 	complete(&info->vendor_info.req_completion);
243 	return 0;
244 }
245 EXPORT_SYMBOL(st21nfca_hci_loopback_event_received);
246 
247 static int st21nfca_hci_loopback(struct nfc_dev *dev, void *data,
248 				 size_t data_len)
249 {
250 	int r;
251 	struct sk_buff *msg;
252 	struct nfc_hci_dev *hdev = nfc_get_drvdata(dev);
253 	struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev);
254 
255 	if (data_len <= 0)
256 		return -EPROTO;
257 
258 	reinit_completion(&info->vendor_info.req_completion);
259 	info->vendor_info.rx_skb = NULL;
260 
261 	r = nfc_hci_send_event(hdev, NFC_HCI_LOOPBACK_GATE,
262 			       ST21NFCA_EVT_POST_DATA, data, data_len);
263 	if (r < 0) {
264 		r = -EPROTO;
265 		goto exit;
266 	}
267 
268 	wait_for_completion_interruptible(&info->vendor_info.req_completion);
269 	if (!info->vendor_info.rx_skb ||
270 	    info->vendor_info.rx_skb->len != data_len) {
271 		r = -EPROTO;
272 		goto exit;
273 	}
274 
275 	msg = nfc_vendor_cmd_alloc_reply_skb(hdev->ndev,
276 					ST21NFCA_VENDOR_OUI,
277 					HCI_LOOPBACK,
278 					info->vendor_info.rx_skb->len);
279 	if (!msg) {
280 		r = -ENOMEM;
281 		goto free_skb;
282 	}
283 
284 	if (nla_put(msg, NFC_ATTR_VENDOR_DATA, info->vendor_info.rx_skb->len,
285 		    info->vendor_info.rx_skb->data)) {
286 		kfree_skb(msg);
287 		r = -ENOBUFS;
288 		goto free_skb;
289 	}
290 
291 	r = nfc_vendor_cmd_reply(msg);
292 free_skb:
293 	kfree_skb(info->vendor_info.rx_skb);
294 exit:
295 	return r;
296 }
297 
298 static const struct nfc_vendor_cmd st21nfca_vendor_cmds[] = {
299 	{
300 		.vendor_id = ST21NFCA_VENDOR_OUI,
301 		.subcmd = FACTORY_MODE,
302 		.doit = st21nfca_factory_mode,
303 	},
304 	{
305 		.vendor_id = ST21NFCA_VENDOR_OUI,
306 		.subcmd = HCI_CLEAR_ALL_PIPES,
307 		.doit = st21nfca_hci_clear_all_pipes,
308 	},
309 	{
310 		.vendor_id = ST21NFCA_VENDOR_OUI,
311 		.subcmd = HCI_DM_PUT_DATA,
312 		.doit = st21nfca_hci_dm_put_data,
313 	},
314 	{
315 		.vendor_id = ST21NFCA_VENDOR_OUI,
316 		.subcmd = HCI_DM_UPDATE_AID,
317 		.doit = st21nfca_hci_dm_update_aid,
318 	},
319 	{
320 		.vendor_id = ST21NFCA_VENDOR_OUI,
321 		.subcmd = HCI_DM_GET_INFO,
322 		.doit = st21nfca_hci_dm_get_info,
323 	},
324 	{
325 		.vendor_id = ST21NFCA_VENDOR_OUI,
326 		.subcmd = HCI_DM_GET_DATA,
327 		.doit = st21nfca_hci_dm_get_data,
328 	},
329 	{
330 		.vendor_id = ST21NFCA_VENDOR_OUI,
331 		.subcmd = HCI_DM_LOAD,
332 		.doit = st21nfca_hci_dm_load,
333 	},
334 	{
335 		.vendor_id = ST21NFCA_VENDOR_OUI,
336 		.subcmd = HCI_DM_RESET,
337 		.doit = st21nfca_hci_dm_reset,
338 	},
339 	{
340 		.vendor_id = ST21NFCA_VENDOR_OUI,
341 		.subcmd = HCI_GET_PARAM,
342 		.doit = st21nfca_hci_get_param,
343 	},
344 	{
345 		.vendor_id = ST21NFCA_VENDOR_OUI,
346 		.subcmd = HCI_DM_FIELD_GENERATOR,
347 		.doit = st21nfca_hci_dm_field_generator,
348 	},
349 	{
350 		.vendor_id = ST21NFCA_VENDOR_OUI,
351 		.subcmd = HCI_LOOPBACK,
352 		.doit = st21nfca_hci_loopback,
353 	},
354 };
355 
356 int st21nfca_vendor_cmds_init(struct nfc_hci_dev *hdev)
357 {
358 	struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev);
359 
360 	init_completion(&info->vendor_info.req_completion);
361 	return nfc_set_vendor_cmds(hdev->ndev, st21nfca_vendor_cmds,
362 				   sizeof(st21nfca_vendor_cmds));
363 }
364 EXPORT_SYMBOL(st21nfca_vendor_cmds_init);
365