1 /* 2 * Copyright (C) 2012 Intel Corporation. All rights reserved. 3 * 4 * This program is free software; you can redistribute it and/or modify 5 * it under the terms of the GNU General Public License as published by 6 * the Free Software Foundation; either version 2 of the License, or 7 * (at your option) any later version. 8 * 9 * This program is distributed in the hope that it will be useful, 10 * but WITHOUT ANY WARRANTY; without even the implied warranty of 11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 12 * GNU General Public License for more details. 13 * 14 * You should have received a copy of the GNU General Public License 15 * along with this program; if not, see <http://www.gnu.org/licenses/>. 16 */ 17 18 #define pr_fmt(fmt) "hci: %s: " fmt, __func__ 19 20 #include <linux/init.h> 21 #include <linux/kernel.h> 22 #include <linux/module.h> 23 #include <linux/nfc.h> 24 25 #include <net/nfc/nfc.h> 26 #include <net/nfc/hci.h> 27 #include <net/nfc/llc.h> 28 29 #include "hci.h" 30 31 /* Largest headroom needed for outgoing HCI commands */ 32 #define HCI_CMDS_HEADROOM 1 33 34 int nfc_hci_result_to_errno(u8 result) 35 { 36 switch (result) { 37 case NFC_HCI_ANY_OK: 38 return 0; 39 case NFC_HCI_ANY_E_REG_PAR_UNKNOWN: 40 return -EOPNOTSUPP; 41 case NFC_HCI_ANY_E_TIMEOUT: 42 return -ETIME; 43 default: 44 return -1; 45 } 46 } 47 EXPORT_SYMBOL(nfc_hci_result_to_errno); 48 49 static void nfc_hci_msg_tx_work(struct work_struct *work) 50 { 51 struct nfc_hci_dev *hdev = container_of(work, struct nfc_hci_dev, 52 msg_tx_work); 53 struct hci_msg *msg; 54 struct sk_buff *skb; 55 int r = 0; 56 57 mutex_lock(&hdev->msg_tx_mutex); 58 if (hdev->shutting_down) 59 goto exit; 60 61 if (hdev->cmd_pending_msg) { 62 if (timer_pending(&hdev->cmd_timer) == 0) { 63 if (hdev->cmd_pending_msg->cb) 64 hdev->cmd_pending_msg->cb(hdev-> 65 cmd_pending_msg-> 66 cb_context, 67 NULL, 68 -ETIME); 69 kfree(hdev->cmd_pending_msg); 70 hdev->cmd_pending_msg = NULL; 71 } else { 72 goto exit; 73 } 74 } 75 76 next_msg: 77 if (list_empty(&hdev->msg_tx_queue)) 78 goto exit; 79 80 msg = list_first_entry(&hdev->msg_tx_queue, struct hci_msg, msg_l); 81 list_del(&msg->msg_l); 82 83 pr_debug("msg_tx_queue has a cmd to send\n"); 84 while ((skb = skb_dequeue(&msg->msg_frags)) != NULL) { 85 r = nfc_llc_xmit_from_hci(hdev->llc, skb); 86 if (r < 0) { 87 kfree_skb(skb); 88 skb_queue_purge(&msg->msg_frags); 89 if (msg->cb) 90 msg->cb(msg->cb_context, NULL, r); 91 kfree(msg); 92 break; 93 } 94 } 95 96 if (r) 97 goto next_msg; 98 99 if (msg->wait_response == false) { 100 kfree(msg); 101 goto next_msg; 102 } 103 104 hdev->cmd_pending_msg = msg; 105 mod_timer(&hdev->cmd_timer, jiffies + 106 msecs_to_jiffies(hdev->cmd_pending_msg->completion_delay)); 107 108 exit: 109 mutex_unlock(&hdev->msg_tx_mutex); 110 } 111 112 static void nfc_hci_msg_rx_work(struct work_struct *work) 113 { 114 struct nfc_hci_dev *hdev = container_of(work, struct nfc_hci_dev, 115 msg_rx_work); 116 struct sk_buff *skb; 117 struct hcp_message *message; 118 u8 pipe; 119 u8 type; 120 u8 instruction; 121 122 while ((skb = skb_dequeue(&hdev->msg_rx_queue)) != NULL) { 123 pipe = skb->data[0]; 124 skb_pull(skb, NFC_HCI_HCP_PACKET_HEADER_LEN); 125 message = (struct hcp_message *)skb->data; 126 type = HCP_MSG_GET_TYPE(message->header); 127 instruction = HCP_MSG_GET_CMD(message->header); 128 skb_pull(skb, NFC_HCI_HCP_MESSAGE_HEADER_LEN); 129 130 nfc_hci_hcp_message_rx(hdev, pipe, type, instruction, skb); 131 } 132 } 133 134 static void __nfc_hci_cmd_completion(struct nfc_hci_dev *hdev, int err, 135 struct sk_buff *skb) 136 { 137 del_timer_sync(&hdev->cmd_timer); 138 139 if (hdev->cmd_pending_msg->cb) 140 hdev->cmd_pending_msg->cb(hdev->cmd_pending_msg->cb_context, 141 skb, err); 142 else 143 kfree_skb(skb); 144 145 kfree(hdev->cmd_pending_msg); 146 hdev->cmd_pending_msg = NULL; 147 148 schedule_work(&hdev->msg_tx_work); 149 } 150 151 void nfc_hci_resp_received(struct nfc_hci_dev *hdev, u8 result, 152 struct sk_buff *skb) 153 { 154 mutex_lock(&hdev->msg_tx_mutex); 155 156 if (hdev->cmd_pending_msg == NULL) { 157 kfree_skb(skb); 158 goto exit; 159 } 160 161 __nfc_hci_cmd_completion(hdev, nfc_hci_result_to_errno(result), skb); 162 163 exit: 164 mutex_unlock(&hdev->msg_tx_mutex); 165 } 166 167 void nfc_hci_cmd_received(struct nfc_hci_dev *hdev, u8 pipe, u8 cmd, 168 struct sk_buff *skb) 169 { 170 kfree_skb(skb); 171 } 172 173 u32 nfc_hci_sak_to_protocol(u8 sak) 174 { 175 switch (NFC_HCI_TYPE_A_SEL_PROT(sak)) { 176 case NFC_HCI_TYPE_A_SEL_PROT_MIFARE: 177 return NFC_PROTO_MIFARE_MASK; 178 case NFC_HCI_TYPE_A_SEL_PROT_ISO14443: 179 return NFC_PROTO_ISO14443_MASK; 180 case NFC_HCI_TYPE_A_SEL_PROT_DEP: 181 return NFC_PROTO_NFC_DEP_MASK; 182 case NFC_HCI_TYPE_A_SEL_PROT_ISO14443_DEP: 183 return NFC_PROTO_ISO14443_MASK | NFC_PROTO_NFC_DEP_MASK; 184 default: 185 return 0xffffffff; 186 } 187 } 188 EXPORT_SYMBOL(nfc_hci_sak_to_protocol); 189 190 int nfc_hci_target_discovered(struct nfc_hci_dev *hdev, u8 gate) 191 { 192 struct nfc_target *targets; 193 struct sk_buff *atqa_skb = NULL; 194 struct sk_buff *sak_skb = NULL; 195 struct sk_buff *uid_skb = NULL; 196 int r; 197 198 pr_debug("from gate %d\n", gate); 199 200 targets = kzalloc(sizeof(struct nfc_target), GFP_KERNEL); 201 if (targets == NULL) 202 return -ENOMEM; 203 204 switch (gate) { 205 case NFC_HCI_RF_READER_A_GATE: 206 r = nfc_hci_get_param(hdev, NFC_HCI_RF_READER_A_GATE, 207 NFC_HCI_RF_READER_A_ATQA, &atqa_skb); 208 if (r < 0) 209 goto exit; 210 211 r = nfc_hci_get_param(hdev, NFC_HCI_RF_READER_A_GATE, 212 NFC_HCI_RF_READER_A_SAK, &sak_skb); 213 if (r < 0) 214 goto exit; 215 216 if (atqa_skb->len != 2 || sak_skb->len != 1) { 217 r = -EPROTO; 218 goto exit; 219 } 220 221 targets->supported_protocols = 222 nfc_hci_sak_to_protocol(sak_skb->data[0]); 223 if (targets->supported_protocols == 0xffffffff) { 224 r = -EPROTO; 225 goto exit; 226 } 227 228 targets->sens_res = be16_to_cpu(*(__be16 *)atqa_skb->data); 229 targets->sel_res = sak_skb->data[0]; 230 231 r = nfc_hci_get_param(hdev, NFC_HCI_RF_READER_A_GATE, 232 NFC_HCI_RF_READER_A_UID, &uid_skb); 233 if (r < 0) 234 goto exit; 235 236 if (uid_skb->len == 0 || uid_skb->len > NFC_NFCID1_MAXSIZE) { 237 r = -EPROTO; 238 goto exit; 239 } 240 241 memcpy(targets->nfcid1, uid_skb->data, uid_skb->len); 242 targets->nfcid1_len = uid_skb->len; 243 244 if (hdev->ops->complete_target_discovered) { 245 r = hdev->ops->complete_target_discovered(hdev, gate, 246 targets); 247 if (r < 0) 248 goto exit; 249 } 250 break; 251 case NFC_HCI_RF_READER_B_GATE: 252 targets->supported_protocols = NFC_PROTO_ISO14443_B_MASK; 253 break; 254 default: 255 if (hdev->ops->target_from_gate) 256 r = hdev->ops->target_from_gate(hdev, gate, targets); 257 else 258 r = -EPROTO; 259 if (r < 0) 260 goto exit; 261 262 if (hdev->ops->complete_target_discovered) { 263 r = hdev->ops->complete_target_discovered(hdev, gate, 264 targets); 265 if (r < 0) 266 goto exit; 267 } 268 break; 269 } 270 271 /* if driver set the new gate, we will skip the old one */ 272 if (targets->hci_reader_gate == 0x00) 273 targets->hci_reader_gate = gate; 274 275 r = nfc_targets_found(hdev->ndev, targets, 1); 276 277 exit: 278 kfree(targets); 279 kfree_skb(atqa_skb); 280 kfree_skb(sak_skb); 281 kfree_skb(uid_skb); 282 283 return r; 284 } 285 EXPORT_SYMBOL(nfc_hci_target_discovered); 286 287 void nfc_hci_event_received(struct nfc_hci_dev *hdev, u8 pipe, u8 event, 288 struct sk_buff *skb) 289 { 290 int r = 0; 291 u8 gate = nfc_hci_pipe2gate(hdev, pipe); 292 293 if (gate == 0xff) { 294 pr_err("Discarded event %x to unopened pipe %x\n", event, pipe); 295 goto exit; 296 } 297 298 if (hdev->ops->event_received) { 299 r = hdev->ops->event_received(hdev, gate, event, skb); 300 if (r <= 0) 301 goto exit_noskb; 302 } 303 304 switch (event) { 305 case NFC_HCI_EVT_TARGET_DISCOVERED: 306 if (skb->len < 1) { /* no status data? */ 307 r = -EPROTO; 308 goto exit; 309 } 310 311 if (skb->data[0] == 3) { 312 /* TODO: Multiple targets in field, none activated 313 * poll is supposedly stopped, but there is no 314 * single target to activate, so nothing to report 315 * up. 316 * if we need to restart poll, we must save the 317 * protocols from the initial poll and reuse here. 318 */ 319 } 320 321 if (skb->data[0] != 0) { 322 r = -EPROTO; 323 goto exit; 324 } 325 326 r = nfc_hci_target_discovered(hdev, gate); 327 break; 328 default: 329 pr_info("Discarded unknown event %x to gate %x\n", event, gate); 330 r = -EINVAL; 331 break; 332 } 333 334 exit: 335 kfree_skb(skb); 336 337 exit_noskb: 338 if (r) 339 nfc_hci_driver_failure(hdev, r); 340 } 341 342 static void nfc_hci_cmd_timeout(unsigned long data) 343 { 344 struct nfc_hci_dev *hdev = (struct nfc_hci_dev *)data; 345 346 schedule_work(&hdev->msg_tx_work); 347 } 348 349 static int hci_dev_connect_gates(struct nfc_hci_dev *hdev, u8 gate_count, 350 struct nfc_hci_gate *gates) 351 { 352 int r; 353 while (gate_count--) { 354 r = nfc_hci_connect_gate(hdev, NFC_HCI_HOST_CONTROLLER_ID, 355 gates->gate, gates->pipe); 356 if (r < 0) 357 return r; 358 gates++; 359 } 360 361 return 0; 362 } 363 364 static int hci_dev_session_init(struct nfc_hci_dev *hdev) 365 { 366 struct sk_buff *skb = NULL; 367 int r; 368 369 if (hdev->init_data.gates[0].gate != NFC_HCI_ADMIN_GATE) 370 return -EPROTO; 371 372 r = nfc_hci_connect_gate(hdev, NFC_HCI_HOST_CONTROLLER_ID, 373 hdev->init_data.gates[0].gate, 374 hdev->init_data.gates[0].pipe); 375 if (r < 0) 376 goto exit; 377 378 r = nfc_hci_get_param(hdev, NFC_HCI_ADMIN_GATE, 379 NFC_HCI_ADMIN_SESSION_IDENTITY, &skb); 380 if (r < 0) 381 goto disconnect_all; 382 383 if (skb->len && skb->len == strlen(hdev->init_data.session_id) && 384 (memcmp(hdev->init_data.session_id, skb->data, 385 skb->len) == 0) && hdev->ops->load_session) { 386 /* Restore gate<->pipe table from some proprietary location. */ 387 388 r = hdev->ops->load_session(hdev); 389 390 if (r < 0) 391 goto disconnect_all; 392 } else { 393 394 r = nfc_hci_disconnect_all_gates(hdev); 395 if (r < 0) 396 goto exit; 397 398 r = hci_dev_connect_gates(hdev, hdev->init_data.gate_count, 399 hdev->init_data.gates); 400 if (r < 0) 401 goto disconnect_all; 402 403 r = nfc_hci_set_param(hdev, NFC_HCI_ADMIN_GATE, 404 NFC_HCI_ADMIN_SESSION_IDENTITY, 405 hdev->init_data.session_id, 406 strlen(hdev->init_data.session_id)); 407 } 408 if (r == 0) 409 goto exit; 410 411 disconnect_all: 412 nfc_hci_disconnect_all_gates(hdev); 413 414 exit: 415 kfree_skb(skb); 416 417 return r; 418 } 419 420 static int hci_dev_version(struct nfc_hci_dev *hdev) 421 { 422 int r; 423 struct sk_buff *skb; 424 425 r = nfc_hci_get_param(hdev, NFC_HCI_ID_MGMT_GATE, 426 NFC_HCI_ID_MGMT_VERSION_SW, &skb); 427 if (r == -EOPNOTSUPP) { 428 pr_info("Software/Hardware info not available\n"); 429 return 0; 430 } 431 if (r < 0) 432 return r; 433 434 if (skb->len != 3) { 435 kfree_skb(skb); 436 return -EINVAL; 437 } 438 439 hdev->sw_romlib = (skb->data[0] & 0xf0) >> 4; 440 hdev->sw_patch = skb->data[0] & 0x0f; 441 hdev->sw_flashlib_major = skb->data[1]; 442 hdev->sw_flashlib_minor = skb->data[2]; 443 444 kfree_skb(skb); 445 446 r = nfc_hci_get_param(hdev, NFC_HCI_ID_MGMT_GATE, 447 NFC_HCI_ID_MGMT_VERSION_HW, &skb); 448 if (r < 0) 449 return r; 450 451 if (skb->len != 3) { 452 kfree_skb(skb); 453 return -EINVAL; 454 } 455 456 hdev->hw_derivative = (skb->data[0] & 0xe0) >> 5; 457 hdev->hw_version = skb->data[0] & 0x1f; 458 hdev->hw_mpw = (skb->data[1] & 0xc0) >> 6; 459 hdev->hw_software = skb->data[1] & 0x3f; 460 hdev->hw_bsid = skb->data[2]; 461 462 kfree_skb(skb); 463 464 pr_info("SOFTWARE INFO:\n"); 465 pr_info("RomLib : %d\n", hdev->sw_romlib); 466 pr_info("Patch : %d\n", hdev->sw_patch); 467 pr_info("FlashLib Major : %d\n", hdev->sw_flashlib_major); 468 pr_info("FlashLib Minor : %d\n", hdev->sw_flashlib_minor); 469 pr_info("HARDWARE INFO:\n"); 470 pr_info("Derivative : %d\n", hdev->hw_derivative); 471 pr_info("HW Version : %d\n", hdev->hw_version); 472 pr_info("#MPW : %d\n", hdev->hw_mpw); 473 pr_info("Software : %d\n", hdev->hw_software); 474 pr_info("BSID Version : %d\n", hdev->hw_bsid); 475 476 return 0; 477 } 478 479 static int hci_dev_up(struct nfc_dev *nfc_dev) 480 { 481 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 482 int r = 0; 483 484 if (hdev->ops->open) { 485 r = hdev->ops->open(hdev); 486 if (r < 0) 487 return r; 488 } 489 490 r = nfc_llc_start(hdev->llc); 491 if (r < 0) 492 goto exit_close; 493 494 r = hci_dev_session_init(hdev); 495 if (r < 0) 496 goto exit_llc; 497 498 r = nfc_hci_send_event(hdev, NFC_HCI_RF_READER_A_GATE, 499 NFC_HCI_EVT_END_OPERATION, NULL, 0); 500 if (r < 0) 501 goto exit_llc; 502 503 if (hdev->ops->hci_ready) { 504 r = hdev->ops->hci_ready(hdev); 505 if (r < 0) 506 goto exit_llc; 507 } 508 509 r = hci_dev_version(hdev); 510 if (r < 0) 511 goto exit_llc; 512 513 return 0; 514 515 exit_llc: 516 nfc_llc_stop(hdev->llc); 517 518 exit_close: 519 if (hdev->ops->close) 520 hdev->ops->close(hdev); 521 522 return r; 523 } 524 525 static int hci_dev_down(struct nfc_dev *nfc_dev) 526 { 527 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 528 529 nfc_llc_stop(hdev->llc); 530 531 if (hdev->ops->close) 532 hdev->ops->close(hdev); 533 534 memset(hdev->gate2pipe, NFC_HCI_INVALID_PIPE, sizeof(hdev->gate2pipe)); 535 536 return 0; 537 } 538 539 static int hci_start_poll(struct nfc_dev *nfc_dev, 540 u32 im_protocols, u32 tm_protocols) 541 { 542 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 543 544 if (hdev->ops->start_poll) 545 return hdev->ops->start_poll(hdev, im_protocols, tm_protocols); 546 else 547 return nfc_hci_send_event(hdev, NFC_HCI_RF_READER_A_GATE, 548 NFC_HCI_EVT_READER_REQUESTED, 549 NULL, 0); 550 } 551 552 static void hci_stop_poll(struct nfc_dev *nfc_dev) 553 { 554 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 555 556 nfc_hci_send_event(hdev, NFC_HCI_RF_READER_A_GATE, 557 NFC_HCI_EVT_END_OPERATION, NULL, 0); 558 } 559 560 static int hci_dep_link_up(struct nfc_dev *nfc_dev, struct nfc_target *target, 561 __u8 comm_mode, __u8 *gb, size_t gb_len) 562 { 563 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 564 565 if (!hdev->ops->dep_link_up) 566 return 0; 567 568 return hdev->ops->dep_link_up(hdev, target, comm_mode, 569 gb, gb_len); 570 } 571 572 static int hci_dep_link_down(struct nfc_dev *nfc_dev) 573 { 574 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 575 576 if (!hdev->ops->dep_link_down) 577 return 0; 578 579 return hdev->ops->dep_link_down(hdev); 580 } 581 582 static int hci_activate_target(struct nfc_dev *nfc_dev, 583 struct nfc_target *target, u32 protocol) 584 { 585 return 0; 586 } 587 588 static void hci_deactivate_target(struct nfc_dev *nfc_dev, 589 struct nfc_target *target) 590 { 591 } 592 593 #define HCI_CB_TYPE_TRANSCEIVE 1 594 595 static void hci_transceive_cb(void *context, struct sk_buff *skb, int err) 596 { 597 struct nfc_hci_dev *hdev = context; 598 599 switch (hdev->async_cb_type) { 600 case HCI_CB_TYPE_TRANSCEIVE: 601 /* 602 * TODO: Check RF Error indicator to make sure data is valid. 603 * It seems that HCI cmd can complete without error, but data 604 * can be invalid if an RF error occured? Ignore for now. 605 */ 606 if (err == 0) 607 skb_trim(skb, skb->len - 1); /* RF Err ind */ 608 609 hdev->async_cb(hdev->async_cb_context, skb, err); 610 break; 611 default: 612 if (err == 0) 613 kfree_skb(skb); 614 break; 615 } 616 } 617 618 static int hci_transceive(struct nfc_dev *nfc_dev, struct nfc_target *target, 619 struct sk_buff *skb, data_exchange_cb_t cb, 620 void *cb_context) 621 { 622 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 623 int r; 624 625 pr_debug("target_idx=%d\n", target->idx); 626 627 switch (target->hci_reader_gate) { 628 case NFC_HCI_RF_READER_A_GATE: 629 case NFC_HCI_RF_READER_B_GATE: 630 if (hdev->ops->im_transceive) { 631 r = hdev->ops->im_transceive(hdev, target, skb, cb, 632 cb_context); 633 if (r <= 0) /* handled */ 634 break; 635 } 636 637 *skb_push(skb, 1) = 0; /* CTR, see spec:10.2.2.1 */ 638 639 hdev->async_cb_type = HCI_CB_TYPE_TRANSCEIVE; 640 hdev->async_cb = cb; 641 hdev->async_cb_context = cb_context; 642 643 r = nfc_hci_send_cmd_async(hdev, target->hci_reader_gate, 644 NFC_HCI_WR_XCHG_DATA, skb->data, 645 skb->len, hci_transceive_cb, hdev); 646 break; 647 default: 648 if (hdev->ops->im_transceive) { 649 r = hdev->ops->im_transceive(hdev, target, skb, cb, 650 cb_context); 651 if (r == 1) 652 r = -ENOTSUPP; 653 } else { 654 r = -ENOTSUPP; 655 } 656 break; 657 } 658 659 kfree_skb(skb); 660 661 return r; 662 } 663 664 static int hci_tm_send(struct nfc_dev *nfc_dev, struct sk_buff *skb) 665 { 666 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 667 668 if (!hdev->ops->tm_send) { 669 kfree_skb(skb); 670 return -ENOTSUPP; 671 } 672 673 return hdev->ops->tm_send(hdev, skb); 674 } 675 676 static int hci_check_presence(struct nfc_dev *nfc_dev, 677 struct nfc_target *target) 678 { 679 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 680 681 if (!hdev->ops->check_presence) 682 return 0; 683 684 return hdev->ops->check_presence(hdev, target); 685 } 686 687 static int hci_discover_se(struct nfc_dev *nfc_dev) 688 { 689 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 690 691 if (hdev->ops->discover_se) 692 return hdev->ops->discover_se(hdev); 693 694 return 0; 695 } 696 697 static int hci_enable_se(struct nfc_dev *nfc_dev, u32 se_idx) 698 { 699 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 700 701 if (hdev->ops->enable_se) 702 return hdev->ops->enable_se(hdev, se_idx); 703 704 return 0; 705 } 706 707 static int hci_disable_se(struct nfc_dev *nfc_dev, u32 se_idx) 708 { 709 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 710 711 if (hdev->ops->disable_se) 712 return hdev->ops->disable_se(hdev, se_idx); 713 714 return 0; 715 } 716 717 static void nfc_hci_failure(struct nfc_hci_dev *hdev, int err) 718 { 719 mutex_lock(&hdev->msg_tx_mutex); 720 721 if (hdev->cmd_pending_msg == NULL) { 722 nfc_driver_failure(hdev->ndev, err); 723 goto exit; 724 } 725 726 __nfc_hci_cmd_completion(hdev, err, NULL); 727 728 exit: 729 mutex_unlock(&hdev->msg_tx_mutex); 730 } 731 732 static void nfc_hci_llc_failure(struct nfc_hci_dev *hdev, int err) 733 { 734 nfc_hci_failure(hdev, err); 735 } 736 737 static void nfc_hci_recv_from_llc(struct nfc_hci_dev *hdev, struct sk_buff *skb) 738 { 739 struct hcp_packet *packet; 740 u8 type; 741 u8 instruction; 742 struct sk_buff *hcp_skb; 743 u8 pipe; 744 struct sk_buff *frag_skb; 745 int msg_len; 746 747 packet = (struct hcp_packet *)skb->data; 748 if ((packet->header & ~NFC_HCI_FRAGMENT) == 0) { 749 skb_queue_tail(&hdev->rx_hcp_frags, skb); 750 return; 751 } 752 753 /* it's the last fragment. Does it need re-aggregation? */ 754 if (skb_queue_len(&hdev->rx_hcp_frags)) { 755 pipe = packet->header & NFC_HCI_FRAGMENT; 756 skb_queue_tail(&hdev->rx_hcp_frags, skb); 757 758 msg_len = 0; 759 skb_queue_walk(&hdev->rx_hcp_frags, frag_skb) { 760 msg_len += (frag_skb->len - 761 NFC_HCI_HCP_PACKET_HEADER_LEN); 762 } 763 764 hcp_skb = nfc_alloc_recv_skb(NFC_HCI_HCP_PACKET_HEADER_LEN + 765 msg_len, GFP_KERNEL); 766 if (hcp_skb == NULL) { 767 nfc_hci_failure(hdev, -ENOMEM); 768 return; 769 } 770 771 *skb_put(hcp_skb, NFC_HCI_HCP_PACKET_HEADER_LEN) = pipe; 772 773 skb_queue_walk(&hdev->rx_hcp_frags, frag_skb) { 774 msg_len = frag_skb->len - NFC_HCI_HCP_PACKET_HEADER_LEN; 775 memcpy(skb_put(hcp_skb, msg_len), 776 frag_skb->data + NFC_HCI_HCP_PACKET_HEADER_LEN, 777 msg_len); 778 } 779 780 skb_queue_purge(&hdev->rx_hcp_frags); 781 } else { 782 packet->header &= NFC_HCI_FRAGMENT; 783 hcp_skb = skb; 784 } 785 786 /* if this is a response, dispatch immediately to 787 * unblock waiting cmd context. Otherwise, enqueue to dispatch 788 * in separate context where handler can also execute command. 789 */ 790 packet = (struct hcp_packet *)hcp_skb->data; 791 type = HCP_MSG_GET_TYPE(packet->message.header); 792 if (type == NFC_HCI_HCP_RESPONSE) { 793 pipe = packet->header; 794 instruction = HCP_MSG_GET_CMD(packet->message.header); 795 skb_pull(hcp_skb, NFC_HCI_HCP_PACKET_HEADER_LEN + 796 NFC_HCI_HCP_MESSAGE_HEADER_LEN); 797 nfc_hci_hcp_message_rx(hdev, pipe, type, instruction, hcp_skb); 798 } else { 799 skb_queue_tail(&hdev->msg_rx_queue, hcp_skb); 800 schedule_work(&hdev->msg_rx_work); 801 } 802 } 803 804 static int hci_fw_download(struct nfc_dev *nfc_dev, const char *firmware_name) 805 { 806 struct nfc_hci_dev *hdev = nfc_get_drvdata(nfc_dev); 807 808 if (!hdev->ops->fw_download) 809 return -ENOTSUPP; 810 811 return hdev->ops->fw_download(hdev, firmware_name); 812 } 813 814 static struct nfc_ops hci_nfc_ops = { 815 .dev_up = hci_dev_up, 816 .dev_down = hci_dev_down, 817 .start_poll = hci_start_poll, 818 .stop_poll = hci_stop_poll, 819 .dep_link_up = hci_dep_link_up, 820 .dep_link_down = hci_dep_link_down, 821 .activate_target = hci_activate_target, 822 .deactivate_target = hci_deactivate_target, 823 .im_transceive = hci_transceive, 824 .tm_send = hci_tm_send, 825 .check_presence = hci_check_presence, 826 .fw_download = hci_fw_download, 827 .discover_se = hci_discover_se, 828 .enable_se = hci_enable_se, 829 .disable_se = hci_disable_se, 830 }; 831 832 struct nfc_hci_dev *nfc_hci_allocate_device(struct nfc_hci_ops *ops, 833 struct nfc_hci_init_data *init_data, 834 unsigned long quirks, 835 u32 protocols, 836 const char *llc_name, 837 int tx_headroom, 838 int tx_tailroom, 839 int max_link_payload) 840 { 841 struct nfc_hci_dev *hdev; 842 843 if (ops->xmit == NULL) 844 return NULL; 845 846 if (protocols == 0) 847 return NULL; 848 849 hdev = kzalloc(sizeof(struct nfc_hci_dev), GFP_KERNEL); 850 if (hdev == NULL) 851 return NULL; 852 853 hdev->llc = nfc_llc_allocate(llc_name, hdev, ops->xmit, 854 nfc_hci_recv_from_llc, tx_headroom, 855 tx_tailroom, nfc_hci_llc_failure); 856 if (hdev->llc == NULL) { 857 kfree(hdev); 858 return NULL; 859 } 860 861 hdev->ndev = nfc_allocate_device(&hci_nfc_ops, protocols, 862 tx_headroom + HCI_CMDS_HEADROOM, 863 tx_tailroom); 864 if (!hdev->ndev) { 865 nfc_llc_free(hdev->llc); 866 kfree(hdev); 867 return NULL; 868 } 869 870 hdev->ops = ops; 871 hdev->max_data_link_payload = max_link_payload; 872 hdev->init_data = *init_data; 873 874 nfc_set_drvdata(hdev->ndev, hdev); 875 876 memset(hdev->gate2pipe, NFC_HCI_INVALID_PIPE, sizeof(hdev->gate2pipe)); 877 878 hdev->quirks = quirks; 879 880 return hdev; 881 } 882 EXPORT_SYMBOL(nfc_hci_allocate_device); 883 884 void nfc_hci_free_device(struct nfc_hci_dev *hdev) 885 { 886 nfc_free_device(hdev->ndev); 887 nfc_llc_free(hdev->llc); 888 kfree(hdev); 889 } 890 EXPORT_SYMBOL(nfc_hci_free_device); 891 892 int nfc_hci_register_device(struct nfc_hci_dev *hdev) 893 { 894 mutex_init(&hdev->msg_tx_mutex); 895 896 INIT_LIST_HEAD(&hdev->msg_tx_queue); 897 898 INIT_WORK(&hdev->msg_tx_work, nfc_hci_msg_tx_work); 899 900 init_timer(&hdev->cmd_timer); 901 hdev->cmd_timer.data = (unsigned long)hdev; 902 hdev->cmd_timer.function = nfc_hci_cmd_timeout; 903 904 skb_queue_head_init(&hdev->rx_hcp_frags); 905 906 INIT_WORK(&hdev->msg_rx_work, nfc_hci_msg_rx_work); 907 908 skb_queue_head_init(&hdev->msg_rx_queue); 909 910 return nfc_register_device(hdev->ndev); 911 } 912 EXPORT_SYMBOL(nfc_hci_register_device); 913 914 void nfc_hci_unregister_device(struct nfc_hci_dev *hdev) 915 { 916 struct hci_msg *msg, *n; 917 918 mutex_lock(&hdev->msg_tx_mutex); 919 920 if (hdev->cmd_pending_msg) { 921 if (hdev->cmd_pending_msg->cb) 922 hdev->cmd_pending_msg->cb( 923 hdev->cmd_pending_msg->cb_context, 924 NULL, -ESHUTDOWN); 925 kfree(hdev->cmd_pending_msg); 926 hdev->cmd_pending_msg = NULL; 927 } 928 929 hdev->shutting_down = true; 930 931 mutex_unlock(&hdev->msg_tx_mutex); 932 933 del_timer_sync(&hdev->cmd_timer); 934 cancel_work_sync(&hdev->msg_tx_work); 935 936 cancel_work_sync(&hdev->msg_rx_work); 937 938 nfc_unregister_device(hdev->ndev); 939 940 skb_queue_purge(&hdev->rx_hcp_frags); 941 skb_queue_purge(&hdev->msg_rx_queue); 942 943 list_for_each_entry_safe(msg, n, &hdev->msg_tx_queue, msg_l) { 944 list_del(&msg->msg_l); 945 skb_queue_purge(&msg->msg_frags); 946 kfree(msg); 947 } 948 } 949 EXPORT_SYMBOL(nfc_hci_unregister_device); 950 951 void nfc_hci_set_clientdata(struct nfc_hci_dev *hdev, void *clientdata) 952 { 953 hdev->clientdata = clientdata; 954 } 955 EXPORT_SYMBOL(nfc_hci_set_clientdata); 956 957 void *nfc_hci_get_clientdata(struct nfc_hci_dev *hdev) 958 { 959 return hdev->clientdata; 960 } 961 EXPORT_SYMBOL(nfc_hci_get_clientdata); 962 963 void nfc_hci_driver_failure(struct nfc_hci_dev *hdev, int err) 964 { 965 nfc_hci_failure(hdev, err); 966 } 967 EXPORT_SYMBOL(nfc_hci_driver_failure); 968 969 void nfc_hci_recv_frame(struct nfc_hci_dev *hdev, struct sk_buff *skb) 970 { 971 nfc_llc_rcv_from_drv(hdev->llc, skb); 972 } 973 EXPORT_SYMBOL(nfc_hci_recv_frame); 974 975 static int __init nfc_hci_init(void) 976 { 977 return nfc_llc_init(); 978 } 979 980 static void __exit nfc_hci_exit(void) 981 { 982 nfc_llc_exit(); 983 } 984 985 subsys_initcall(nfc_hci_init); 986 module_exit(nfc_hci_exit); 987 988 MODULE_LICENSE("GPL"); 989 MODULE_DESCRIPTION("NFC HCI Core"); 990