xref: /openbmc/linux/net/nfc/nci/ntf.c (revision 867a0e05)
1 /*
2  *  The NFC Controller Interface is the communication protocol between an
3  *  NFC Controller (NFCC) and a Device Host (DH).
4  *
5  *  Copyright (C) 2014 Marvell International Ltd.
6  *  Copyright (C) 2011 Texas Instruments, Inc.
7  *
8  *  Written by Ilan Elias <ilane@ti.com>
9  *
10  *  Acknowledgements:
11  *  This file is based on hci_event.c, which was written
12  *  by Maxim Krasnyansky.
13  *
14  *  This program is free software; you can redistribute it and/or modify
15  *  it under the terms of the GNU General Public License version 2
16  *  as published by the Free Software Foundation
17  *
18  *  This program is distributed in the hope that it will be useful,
19  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
20  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
21  *  GNU General Public License for more details.
22  *
23  *  You should have received a copy of the GNU General Public License
24  *  along with this program; if not, see <http://www.gnu.org/licenses/>.
25  *
26  */
27 
28 #define pr_fmt(fmt) KBUILD_MODNAME ": %s: " fmt, __func__
29 
30 #include <linux/types.h>
31 #include <linux/interrupt.h>
32 #include <linux/bitops.h>
33 #include <linux/skbuff.h>
34 
35 #include "../nfc.h"
36 #include <net/nfc/nci.h>
37 #include <net/nfc/nci_core.h>
38 #include <linux/nfc.h>
39 
40 /* Handle NCI Notification packets */
41 
42 static void nci_core_conn_credits_ntf_packet(struct nci_dev *ndev,
43 					     struct sk_buff *skb)
44 {
45 	struct nci_core_conn_credit_ntf *ntf = (void *) skb->data;
46 	int i;
47 
48 	pr_debug("num_entries %d\n", ntf->num_entries);
49 
50 	if (ntf->num_entries > NCI_MAX_NUM_CONN)
51 		ntf->num_entries = NCI_MAX_NUM_CONN;
52 
53 	/* update the credits */
54 	for (i = 0; i < ntf->num_entries; i++) {
55 		ntf->conn_entries[i].conn_id =
56 			nci_conn_id(&ntf->conn_entries[i].conn_id);
57 
58 		pr_debug("entry[%d]: conn_id %d, credits %d\n",
59 			 i, ntf->conn_entries[i].conn_id,
60 			 ntf->conn_entries[i].credits);
61 
62 		if (ntf->conn_entries[i].conn_id == NCI_STATIC_RF_CONN_ID) {
63 			/* found static rf connection */
64 			atomic_add(ntf->conn_entries[i].credits,
65 				   &ndev->credits_cnt);
66 		}
67 	}
68 
69 	/* trigger the next tx */
70 	if (!skb_queue_empty(&ndev->tx_q))
71 		queue_work(ndev->tx_wq, &ndev->tx_work);
72 }
73 
74 static void nci_core_generic_error_ntf_packet(struct nci_dev *ndev,
75 					      struct sk_buff *skb)
76 {
77 	__u8 status = skb->data[0];
78 
79 	pr_debug("status 0x%x\n", status);
80 
81 	if (atomic_read(&ndev->state) == NCI_W4_HOST_SELECT) {
82 		/* Activation failed, so complete the request
83 		   (the state remains the same) */
84 		nci_req_complete(ndev, status);
85 	}
86 }
87 
88 static void nci_core_conn_intf_error_ntf_packet(struct nci_dev *ndev,
89 						struct sk_buff *skb)
90 {
91 	struct nci_core_intf_error_ntf *ntf = (void *) skb->data;
92 
93 	ntf->conn_id = nci_conn_id(&ntf->conn_id);
94 
95 	pr_debug("status 0x%x, conn_id %d\n", ntf->status, ntf->conn_id);
96 
97 	/* complete the data exchange transaction, if exists */
98 	if (test_bit(NCI_DATA_EXCHANGE, &ndev->flags))
99 		nci_data_exchange_complete(ndev, NULL, -EIO);
100 }
101 
102 static __u8 *nci_extract_rf_params_nfca_passive_poll(struct nci_dev *ndev,
103 			struct rf_tech_specific_params_nfca_poll *nfca_poll,
104 						     __u8 *data)
105 {
106 	nfca_poll->sens_res = __le16_to_cpu(*((__le16 *)data));
107 	data += 2;
108 
109 	nfca_poll->nfcid1_len = min_t(__u8, *data++, NFC_NFCID1_MAXSIZE);
110 
111 	pr_debug("sens_res 0x%x, nfcid1_len %d\n",
112 		 nfca_poll->sens_res, nfca_poll->nfcid1_len);
113 
114 	memcpy(nfca_poll->nfcid1, data, nfca_poll->nfcid1_len);
115 	data += nfca_poll->nfcid1_len;
116 
117 	nfca_poll->sel_res_len = *data++;
118 
119 	if (nfca_poll->sel_res_len != 0)
120 		nfca_poll->sel_res = *data++;
121 
122 	pr_debug("sel_res_len %d, sel_res 0x%x\n",
123 		 nfca_poll->sel_res_len,
124 		 nfca_poll->sel_res);
125 
126 	return data;
127 }
128 
129 static __u8 *nci_extract_rf_params_nfcb_passive_poll(struct nci_dev *ndev,
130 			struct rf_tech_specific_params_nfcb_poll *nfcb_poll,
131 						     __u8 *data)
132 {
133 	nfcb_poll->sensb_res_len = min_t(__u8, *data++, NFC_SENSB_RES_MAXSIZE);
134 
135 	pr_debug("sensb_res_len %d\n", nfcb_poll->sensb_res_len);
136 
137 	memcpy(nfcb_poll->sensb_res, data, nfcb_poll->sensb_res_len);
138 	data += nfcb_poll->sensb_res_len;
139 
140 	return data;
141 }
142 
143 static __u8 *nci_extract_rf_params_nfcf_passive_poll(struct nci_dev *ndev,
144 			struct rf_tech_specific_params_nfcf_poll *nfcf_poll,
145 						     __u8 *data)
146 {
147 	nfcf_poll->bit_rate = *data++;
148 	nfcf_poll->sensf_res_len = min_t(__u8, *data++, NFC_SENSF_RES_MAXSIZE);
149 
150 	pr_debug("bit_rate %d, sensf_res_len %d\n",
151 		 nfcf_poll->bit_rate, nfcf_poll->sensf_res_len);
152 
153 	memcpy(nfcf_poll->sensf_res, data, nfcf_poll->sensf_res_len);
154 	data += nfcf_poll->sensf_res_len;
155 
156 	return data;
157 }
158 
159 static __u8 *nci_extract_rf_params_nfcv_passive_poll(struct nci_dev *ndev,
160 			struct rf_tech_specific_params_nfcv_poll *nfcv_poll,
161 						     __u8 *data)
162 {
163 	++data;
164 	nfcv_poll->dsfid = *data++;
165 	memcpy(nfcv_poll->uid, data, NFC_ISO15693_UID_MAXSIZE);
166 	data += NFC_ISO15693_UID_MAXSIZE;
167 	return data;
168 }
169 
170 static __u8 *nci_extract_rf_params_nfcf_passive_listen(struct nci_dev *ndev,
171 			struct rf_tech_specific_params_nfcf_listen *nfcf_listen,
172 						     __u8 *data)
173 {
174 	nfcf_listen->local_nfcid2_len = min_t(__u8, *data++,
175 					      NFC_NFCID2_MAXSIZE);
176 	memcpy(nfcf_listen->local_nfcid2, data, nfcf_listen->local_nfcid2_len);
177 	data += nfcf_listen->local_nfcid2_len;
178 
179 	return data;
180 }
181 
182 static __u32 nci_get_prop_rf_protocol(struct nci_dev *ndev, __u8 rf_protocol)
183 {
184 	if (ndev->ops->get_rfprotocol)
185 		return ndev->ops->get_rfprotocol(ndev, rf_protocol);
186 	return 0;
187 }
188 
189 static int nci_add_new_protocol(struct nci_dev *ndev,
190 				struct nfc_target *target,
191 				__u8 rf_protocol,
192 				__u8 rf_tech_and_mode,
193 				void *params)
194 {
195 	struct rf_tech_specific_params_nfca_poll *nfca_poll;
196 	struct rf_tech_specific_params_nfcb_poll *nfcb_poll;
197 	struct rf_tech_specific_params_nfcf_poll *nfcf_poll;
198 	struct rf_tech_specific_params_nfcv_poll *nfcv_poll;
199 	__u32 protocol;
200 
201 	if (rf_protocol == NCI_RF_PROTOCOL_T1T)
202 		protocol = NFC_PROTO_JEWEL_MASK;
203 	else if (rf_protocol == NCI_RF_PROTOCOL_T2T)
204 		protocol = NFC_PROTO_MIFARE_MASK;
205 	else if (rf_protocol == NCI_RF_PROTOCOL_ISO_DEP)
206 		if (rf_tech_and_mode == NCI_NFC_A_PASSIVE_POLL_MODE)
207 			protocol = NFC_PROTO_ISO14443_MASK;
208 		else
209 			protocol = NFC_PROTO_ISO14443_B_MASK;
210 	else if (rf_protocol == NCI_RF_PROTOCOL_T3T)
211 		protocol = NFC_PROTO_FELICA_MASK;
212 	else if (rf_protocol == NCI_RF_PROTOCOL_NFC_DEP)
213 		protocol = NFC_PROTO_NFC_DEP_MASK;
214 	else if (rf_protocol == NCI_RF_PROTOCOL_T5T)
215 		protocol = NFC_PROTO_ISO15693_MASK;
216 	else
217 		protocol = nci_get_prop_rf_protocol(ndev, rf_protocol);
218 
219 	if (!(protocol & ndev->poll_prots)) {
220 		pr_err("the target found does not have the desired protocol\n");
221 		return -EPROTO;
222 	}
223 
224 	if (rf_tech_and_mode == NCI_NFC_A_PASSIVE_POLL_MODE) {
225 		nfca_poll = (struct rf_tech_specific_params_nfca_poll *)params;
226 
227 		target->sens_res = nfca_poll->sens_res;
228 		target->sel_res = nfca_poll->sel_res;
229 		target->nfcid1_len = nfca_poll->nfcid1_len;
230 		if (target->nfcid1_len > 0) {
231 			memcpy(target->nfcid1, nfca_poll->nfcid1,
232 			       target->nfcid1_len);
233 		}
234 	} else if (rf_tech_and_mode == NCI_NFC_B_PASSIVE_POLL_MODE) {
235 		nfcb_poll = (struct rf_tech_specific_params_nfcb_poll *)params;
236 
237 		target->sensb_res_len = nfcb_poll->sensb_res_len;
238 		if (target->sensb_res_len > 0) {
239 			memcpy(target->sensb_res, nfcb_poll->sensb_res,
240 			       target->sensb_res_len);
241 		}
242 	} else if (rf_tech_and_mode == NCI_NFC_F_PASSIVE_POLL_MODE) {
243 		nfcf_poll = (struct rf_tech_specific_params_nfcf_poll *)params;
244 
245 		target->sensf_res_len = nfcf_poll->sensf_res_len;
246 		if (target->sensf_res_len > 0) {
247 			memcpy(target->sensf_res, nfcf_poll->sensf_res,
248 			       target->sensf_res_len);
249 		}
250 	} else if (rf_tech_and_mode == NCI_NFC_V_PASSIVE_POLL_MODE) {
251 		nfcv_poll = (struct rf_tech_specific_params_nfcv_poll *)params;
252 
253 		target->is_iso15693 = 1;
254 		target->iso15693_dsfid = nfcv_poll->dsfid;
255 		memcpy(target->iso15693_uid, nfcv_poll->uid, NFC_ISO15693_UID_MAXSIZE);
256 	} else {
257 		pr_err("unsupported rf_tech_and_mode 0x%x\n", rf_tech_and_mode);
258 		return -EPROTO;
259 	}
260 
261 	target->supported_protocols |= protocol;
262 
263 	pr_debug("protocol 0x%x\n", protocol);
264 
265 	return 0;
266 }
267 
268 static void nci_add_new_target(struct nci_dev *ndev,
269 			       struct nci_rf_discover_ntf *ntf)
270 {
271 	struct nfc_target *target;
272 	int i, rc;
273 
274 	for (i = 0; i < ndev->n_targets; i++) {
275 		target = &ndev->targets[i];
276 		if (target->logical_idx == ntf->rf_discovery_id) {
277 			/* This target already exists, add the new protocol */
278 			nci_add_new_protocol(ndev, target, ntf->rf_protocol,
279 					     ntf->rf_tech_and_mode,
280 					     &ntf->rf_tech_specific_params);
281 			return;
282 		}
283 	}
284 
285 	/* This is a new target, check if we've enough room */
286 	if (ndev->n_targets == NCI_MAX_DISCOVERED_TARGETS) {
287 		pr_debug("not enough room, ignoring new target...\n");
288 		return;
289 	}
290 
291 	target = &ndev->targets[ndev->n_targets];
292 
293 	rc = nci_add_new_protocol(ndev, target, ntf->rf_protocol,
294 				  ntf->rf_tech_and_mode,
295 				  &ntf->rf_tech_specific_params);
296 	if (!rc) {
297 		target->logical_idx = ntf->rf_discovery_id;
298 		ndev->n_targets++;
299 
300 		pr_debug("logical idx %d, n_targets %d\n", target->logical_idx,
301 			 ndev->n_targets);
302 	}
303 }
304 
305 void nci_clear_target_list(struct nci_dev *ndev)
306 {
307 	memset(ndev->targets, 0,
308 	       (sizeof(struct nfc_target)*NCI_MAX_DISCOVERED_TARGETS));
309 
310 	ndev->n_targets = 0;
311 }
312 
313 static void nci_rf_discover_ntf_packet(struct nci_dev *ndev,
314 				       struct sk_buff *skb)
315 {
316 	struct nci_rf_discover_ntf ntf;
317 	__u8 *data = skb->data;
318 	bool add_target = true;
319 
320 	ntf.rf_discovery_id = *data++;
321 	ntf.rf_protocol = *data++;
322 	ntf.rf_tech_and_mode = *data++;
323 	ntf.rf_tech_specific_params_len = *data++;
324 
325 	pr_debug("rf_discovery_id %d\n", ntf.rf_discovery_id);
326 	pr_debug("rf_protocol 0x%x\n", ntf.rf_protocol);
327 	pr_debug("rf_tech_and_mode 0x%x\n", ntf.rf_tech_and_mode);
328 	pr_debug("rf_tech_specific_params_len %d\n",
329 		 ntf.rf_tech_specific_params_len);
330 
331 	if (ntf.rf_tech_specific_params_len > 0) {
332 		switch (ntf.rf_tech_and_mode) {
333 		case NCI_NFC_A_PASSIVE_POLL_MODE:
334 			data = nci_extract_rf_params_nfca_passive_poll(ndev,
335 				&(ntf.rf_tech_specific_params.nfca_poll), data);
336 			break;
337 
338 		case NCI_NFC_B_PASSIVE_POLL_MODE:
339 			data = nci_extract_rf_params_nfcb_passive_poll(ndev,
340 				&(ntf.rf_tech_specific_params.nfcb_poll), data);
341 			break;
342 
343 		case NCI_NFC_F_PASSIVE_POLL_MODE:
344 			data = nci_extract_rf_params_nfcf_passive_poll(ndev,
345 				&(ntf.rf_tech_specific_params.nfcf_poll), data);
346 			break;
347 
348 		case NCI_NFC_V_PASSIVE_POLL_MODE:
349 			data = nci_extract_rf_params_nfcv_passive_poll(ndev,
350 				&(ntf.rf_tech_specific_params.nfcv_poll), data);
351 			break;
352 
353 		default:
354 			pr_err("unsupported rf_tech_and_mode 0x%x\n",
355 			       ntf.rf_tech_and_mode);
356 			data += ntf.rf_tech_specific_params_len;
357 			add_target = false;
358 		}
359 	}
360 
361 	ntf.ntf_type = *data++;
362 	pr_debug("ntf_type %d\n", ntf.ntf_type);
363 
364 	if (add_target == true)
365 		nci_add_new_target(ndev, &ntf);
366 
367 	if (ntf.ntf_type == NCI_DISCOVER_NTF_TYPE_MORE) {
368 		atomic_set(&ndev->state, NCI_W4_ALL_DISCOVERIES);
369 	} else {
370 		atomic_set(&ndev->state, NCI_W4_HOST_SELECT);
371 		nfc_targets_found(ndev->nfc_dev, ndev->targets,
372 				  ndev->n_targets);
373 	}
374 }
375 
376 static int nci_extract_activation_params_iso_dep(struct nci_dev *ndev,
377 			struct nci_rf_intf_activated_ntf *ntf, __u8 *data)
378 {
379 	struct activation_params_nfca_poll_iso_dep *nfca_poll;
380 	struct activation_params_nfcb_poll_iso_dep *nfcb_poll;
381 
382 	switch (ntf->activation_rf_tech_and_mode) {
383 	case NCI_NFC_A_PASSIVE_POLL_MODE:
384 		nfca_poll = &ntf->activation_params.nfca_poll_iso_dep;
385 		nfca_poll->rats_res_len = min_t(__u8, *data++, 20);
386 		pr_debug("rats_res_len %d\n", nfca_poll->rats_res_len);
387 		if (nfca_poll->rats_res_len > 0) {
388 			memcpy(nfca_poll->rats_res,
389 			       data, nfca_poll->rats_res_len);
390 		}
391 		break;
392 
393 	case NCI_NFC_B_PASSIVE_POLL_MODE:
394 		nfcb_poll = &ntf->activation_params.nfcb_poll_iso_dep;
395 		nfcb_poll->attrib_res_len = min_t(__u8, *data++, 50);
396 		pr_debug("attrib_res_len %d\n", nfcb_poll->attrib_res_len);
397 		if (nfcb_poll->attrib_res_len > 0) {
398 			memcpy(nfcb_poll->attrib_res,
399 			       data, nfcb_poll->attrib_res_len);
400 		}
401 		break;
402 
403 	default:
404 		pr_err("unsupported activation_rf_tech_and_mode 0x%x\n",
405 		       ntf->activation_rf_tech_and_mode);
406 		return NCI_STATUS_RF_PROTOCOL_ERROR;
407 	}
408 
409 	return NCI_STATUS_OK;
410 }
411 
412 static int nci_extract_activation_params_nfc_dep(struct nci_dev *ndev,
413 			struct nci_rf_intf_activated_ntf *ntf, __u8 *data)
414 {
415 	struct activation_params_poll_nfc_dep *poll;
416 	struct activation_params_listen_nfc_dep *listen;
417 
418 	switch (ntf->activation_rf_tech_and_mode) {
419 	case NCI_NFC_A_PASSIVE_POLL_MODE:
420 	case NCI_NFC_F_PASSIVE_POLL_MODE:
421 		poll = &ntf->activation_params.poll_nfc_dep;
422 		poll->atr_res_len = min_t(__u8, *data++,
423 					  NFC_ATR_RES_MAXSIZE - 2);
424 		pr_debug("atr_res_len %d\n", poll->atr_res_len);
425 		if (poll->atr_res_len > 0)
426 			memcpy(poll->atr_res, data, poll->atr_res_len);
427 		break;
428 
429 	case NCI_NFC_A_PASSIVE_LISTEN_MODE:
430 	case NCI_NFC_F_PASSIVE_LISTEN_MODE:
431 		listen = &ntf->activation_params.listen_nfc_dep;
432 		listen->atr_req_len = min_t(__u8, *data++,
433 					    NFC_ATR_REQ_MAXSIZE - 2);
434 		pr_debug("atr_req_len %d\n", listen->atr_req_len);
435 		if (listen->atr_req_len > 0)
436 			memcpy(listen->atr_req, data, listen->atr_req_len);
437 		break;
438 
439 	default:
440 		pr_err("unsupported activation_rf_tech_and_mode 0x%x\n",
441 		       ntf->activation_rf_tech_and_mode);
442 		return NCI_STATUS_RF_PROTOCOL_ERROR;
443 	}
444 
445 	return NCI_STATUS_OK;
446 }
447 
448 static void nci_target_auto_activated(struct nci_dev *ndev,
449 				      struct nci_rf_intf_activated_ntf *ntf)
450 {
451 	struct nfc_target *target;
452 	int rc;
453 
454 	target = &ndev->targets[ndev->n_targets];
455 
456 	rc = nci_add_new_protocol(ndev, target, ntf->rf_protocol,
457 				  ntf->activation_rf_tech_and_mode,
458 				  &ntf->rf_tech_specific_params);
459 	if (rc)
460 		return;
461 
462 	target->logical_idx = ntf->rf_discovery_id;
463 	ndev->n_targets++;
464 
465 	pr_debug("logical idx %d, n_targets %d\n",
466 		 target->logical_idx, ndev->n_targets);
467 
468 	nfc_targets_found(ndev->nfc_dev, ndev->targets, ndev->n_targets);
469 }
470 
471 static int nci_store_general_bytes_nfc_dep(struct nci_dev *ndev,
472 		struct nci_rf_intf_activated_ntf *ntf)
473 {
474 	ndev->remote_gb_len = 0;
475 
476 	if (ntf->activation_params_len <= 0)
477 		return NCI_STATUS_OK;
478 
479 	switch (ntf->activation_rf_tech_and_mode) {
480 	case NCI_NFC_A_PASSIVE_POLL_MODE:
481 	case NCI_NFC_F_PASSIVE_POLL_MODE:
482 		ndev->remote_gb_len = min_t(__u8,
483 			(ntf->activation_params.poll_nfc_dep.atr_res_len
484 						- NFC_ATR_RES_GT_OFFSET),
485 			NFC_ATR_RES_GB_MAXSIZE);
486 		memcpy(ndev->remote_gb,
487 		       (ntf->activation_params.poll_nfc_dep.atr_res
488 						+ NFC_ATR_RES_GT_OFFSET),
489 		       ndev->remote_gb_len);
490 		break;
491 
492 	case NCI_NFC_A_PASSIVE_LISTEN_MODE:
493 	case NCI_NFC_F_PASSIVE_LISTEN_MODE:
494 		ndev->remote_gb_len = min_t(__u8,
495 			(ntf->activation_params.listen_nfc_dep.atr_req_len
496 						- NFC_ATR_REQ_GT_OFFSET),
497 			NFC_ATR_REQ_GB_MAXSIZE);
498 		memcpy(ndev->remote_gb,
499 		       (ntf->activation_params.listen_nfc_dep.atr_req
500 						+ NFC_ATR_REQ_GT_OFFSET),
501 		       ndev->remote_gb_len);
502 		break;
503 
504 	default:
505 		pr_err("unsupported activation_rf_tech_and_mode 0x%x\n",
506 		       ntf->activation_rf_tech_and_mode);
507 		return NCI_STATUS_RF_PROTOCOL_ERROR;
508 	}
509 
510 	return NCI_STATUS_OK;
511 }
512 
513 static void nci_rf_intf_activated_ntf_packet(struct nci_dev *ndev,
514 					     struct sk_buff *skb)
515 {
516 	struct nci_rf_intf_activated_ntf ntf;
517 	__u8 *data = skb->data;
518 	int err = NCI_STATUS_OK;
519 
520 	ntf.rf_discovery_id = *data++;
521 	ntf.rf_interface = *data++;
522 	ntf.rf_protocol = *data++;
523 	ntf.activation_rf_tech_and_mode = *data++;
524 	ntf.max_data_pkt_payload_size = *data++;
525 	ntf.initial_num_credits = *data++;
526 	ntf.rf_tech_specific_params_len = *data++;
527 
528 	pr_debug("rf_discovery_id %d\n", ntf.rf_discovery_id);
529 	pr_debug("rf_interface 0x%x\n", ntf.rf_interface);
530 	pr_debug("rf_protocol 0x%x\n", ntf.rf_protocol);
531 	pr_debug("activation_rf_tech_and_mode 0x%x\n",
532 		 ntf.activation_rf_tech_and_mode);
533 	pr_debug("max_data_pkt_payload_size 0x%x\n",
534 		 ntf.max_data_pkt_payload_size);
535 	pr_debug("initial_num_credits 0x%x\n",
536 		 ntf.initial_num_credits);
537 	pr_debug("rf_tech_specific_params_len %d\n",
538 		 ntf.rf_tech_specific_params_len);
539 
540 	if (ntf.rf_tech_specific_params_len > 0) {
541 		switch (ntf.activation_rf_tech_and_mode) {
542 		case NCI_NFC_A_PASSIVE_POLL_MODE:
543 			data = nci_extract_rf_params_nfca_passive_poll(ndev,
544 				&(ntf.rf_tech_specific_params.nfca_poll), data);
545 			break;
546 
547 		case NCI_NFC_B_PASSIVE_POLL_MODE:
548 			data = nci_extract_rf_params_nfcb_passive_poll(ndev,
549 				&(ntf.rf_tech_specific_params.nfcb_poll), data);
550 			break;
551 
552 		case NCI_NFC_F_PASSIVE_POLL_MODE:
553 			data = nci_extract_rf_params_nfcf_passive_poll(ndev,
554 				&(ntf.rf_tech_specific_params.nfcf_poll), data);
555 			break;
556 
557 		case NCI_NFC_V_PASSIVE_POLL_MODE:
558 			data = nci_extract_rf_params_nfcv_passive_poll(ndev,
559 				&(ntf.rf_tech_specific_params.nfcv_poll), data);
560 			break;
561 
562 		case NCI_NFC_A_PASSIVE_LISTEN_MODE:
563 			/* no RF technology specific parameters */
564 			break;
565 
566 		case NCI_NFC_F_PASSIVE_LISTEN_MODE:
567 			data = nci_extract_rf_params_nfcf_passive_listen(ndev,
568 				&(ntf.rf_tech_specific_params.nfcf_listen),
569 				data);
570 			break;
571 
572 		default:
573 			pr_err("unsupported activation_rf_tech_and_mode 0x%x\n",
574 			       ntf.activation_rf_tech_and_mode);
575 			err = NCI_STATUS_RF_PROTOCOL_ERROR;
576 			goto exit;
577 		}
578 	}
579 
580 	ntf.data_exch_rf_tech_and_mode = *data++;
581 	ntf.data_exch_tx_bit_rate = *data++;
582 	ntf.data_exch_rx_bit_rate = *data++;
583 	ntf.activation_params_len = *data++;
584 
585 	pr_debug("data_exch_rf_tech_and_mode 0x%x\n",
586 		 ntf.data_exch_rf_tech_and_mode);
587 	pr_debug("data_exch_tx_bit_rate 0x%x\n", ntf.data_exch_tx_bit_rate);
588 	pr_debug("data_exch_rx_bit_rate 0x%x\n", ntf.data_exch_rx_bit_rate);
589 	pr_debug("activation_params_len %d\n", ntf.activation_params_len);
590 
591 	if (ntf.activation_params_len > 0) {
592 		switch (ntf.rf_interface) {
593 		case NCI_RF_INTERFACE_ISO_DEP:
594 			err = nci_extract_activation_params_iso_dep(ndev,
595 								    &ntf, data);
596 			break;
597 
598 		case NCI_RF_INTERFACE_NFC_DEP:
599 			err = nci_extract_activation_params_nfc_dep(ndev,
600 								    &ntf, data);
601 			break;
602 
603 		case NCI_RF_INTERFACE_FRAME:
604 			/* no activation params */
605 			break;
606 
607 		default:
608 			pr_err("unsupported rf_interface 0x%x\n",
609 			       ntf.rf_interface);
610 			err = NCI_STATUS_RF_PROTOCOL_ERROR;
611 			break;
612 		}
613 	}
614 
615 exit:
616 	if (err == NCI_STATUS_OK) {
617 		ndev->max_data_pkt_payload_size = ntf.max_data_pkt_payload_size;
618 		ndev->initial_num_credits = ntf.initial_num_credits;
619 
620 		/* set the available credits to initial value */
621 		atomic_set(&ndev->credits_cnt, ndev->initial_num_credits);
622 
623 		/* store general bytes to be reported later in dep_link_up */
624 		if (ntf.rf_interface == NCI_RF_INTERFACE_NFC_DEP) {
625 			err = nci_store_general_bytes_nfc_dep(ndev, &ntf);
626 			if (err != NCI_STATUS_OK)
627 				pr_err("unable to store general bytes\n");
628 		}
629 	}
630 
631 	if (!(ntf.activation_rf_tech_and_mode & NCI_RF_TECH_MODE_LISTEN_MASK)) {
632 		/* Poll mode */
633 		if (atomic_read(&ndev->state) == NCI_DISCOVERY) {
634 			/* A single target was found and activated
635 			 * automatically */
636 			atomic_set(&ndev->state, NCI_POLL_ACTIVE);
637 			if (err == NCI_STATUS_OK)
638 				nci_target_auto_activated(ndev, &ntf);
639 		} else {	/* ndev->state == NCI_W4_HOST_SELECT */
640 			/* A selected target was activated, so complete the
641 			 * request */
642 			atomic_set(&ndev->state, NCI_POLL_ACTIVE);
643 			nci_req_complete(ndev, err);
644 		}
645 	} else {
646 		/* Listen mode */
647 		atomic_set(&ndev->state, NCI_LISTEN_ACTIVE);
648 		if (err == NCI_STATUS_OK &&
649 		    ntf.rf_protocol == NCI_RF_PROTOCOL_NFC_DEP) {
650 			err = nfc_tm_activated(ndev->nfc_dev,
651 					       NFC_PROTO_NFC_DEP_MASK,
652 					       NFC_COMM_PASSIVE,
653 					       ndev->remote_gb,
654 					       ndev->remote_gb_len);
655 			if (err != NCI_STATUS_OK)
656 				pr_err("error when signaling tm activation\n");
657 		}
658 	}
659 }
660 
661 static void nci_rf_deactivate_ntf_packet(struct nci_dev *ndev,
662 					 struct sk_buff *skb)
663 {
664 	struct nci_rf_deactivate_ntf *ntf = (void *) skb->data;
665 
666 	pr_debug("entry, type 0x%x, reason 0x%x\n", ntf->type, ntf->reason);
667 
668 	/* drop tx data queue */
669 	skb_queue_purge(&ndev->tx_q);
670 
671 	/* drop partial rx data packet */
672 	if (ndev->rx_data_reassembly) {
673 		kfree_skb(ndev->rx_data_reassembly);
674 		ndev->rx_data_reassembly = NULL;
675 	}
676 
677 	/* complete the data exchange transaction, if exists */
678 	if (test_bit(NCI_DATA_EXCHANGE, &ndev->flags))
679 		nci_data_exchange_complete(ndev, NULL, -EIO);
680 
681 	switch (ntf->type) {
682 	case NCI_DEACTIVATE_TYPE_IDLE_MODE:
683 		nci_clear_target_list(ndev);
684 		atomic_set(&ndev->state, NCI_IDLE);
685 		break;
686 	case NCI_DEACTIVATE_TYPE_SLEEP_MODE:
687 	case NCI_DEACTIVATE_TYPE_SLEEP_AF_MODE:
688 		atomic_set(&ndev->state, NCI_W4_HOST_SELECT);
689 		break;
690 	case NCI_DEACTIVATE_TYPE_DISCOVERY:
691 		nci_clear_target_list(ndev);
692 		atomic_set(&ndev->state, NCI_DISCOVERY);
693 		break;
694 	}
695 
696 	nci_req_complete(ndev, NCI_STATUS_OK);
697 }
698 
699 void nci_ntf_packet(struct nci_dev *ndev, struct sk_buff *skb)
700 {
701 	__u16 ntf_opcode = nci_opcode(skb->data);
702 
703 	pr_debug("NCI RX: MT=ntf, PBF=%d, GID=0x%x, OID=0x%x, plen=%d\n",
704 		 nci_pbf(skb->data),
705 		 nci_opcode_gid(ntf_opcode),
706 		 nci_opcode_oid(ntf_opcode),
707 		 nci_plen(skb->data));
708 
709 	/* strip the nci control header */
710 	skb_pull(skb, NCI_CTRL_HDR_SIZE);
711 
712 	switch (ntf_opcode) {
713 	case NCI_OP_CORE_CONN_CREDITS_NTF:
714 		nci_core_conn_credits_ntf_packet(ndev, skb);
715 		break;
716 
717 	case NCI_OP_CORE_GENERIC_ERROR_NTF:
718 		nci_core_generic_error_ntf_packet(ndev, skb);
719 		break;
720 
721 	case NCI_OP_CORE_INTF_ERROR_NTF:
722 		nci_core_conn_intf_error_ntf_packet(ndev, skb);
723 		break;
724 
725 	case NCI_OP_RF_DISCOVER_NTF:
726 		nci_rf_discover_ntf_packet(ndev, skb);
727 		break;
728 
729 	case NCI_OP_RF_INTF_ACTIVATED_NTF:
730 		nci_rf_intf_activated_ntf_packet(ndev, skb);
731 		break;
732 
733 	case NCI_OP_RF_DEACTIVATE_NTF:
734 		nci_rf_deactivate_ntf_packet(ndev, skb);
735 		break;
736 
737 	default:
738 		pr_err("unknown ntf opcode 0x%x\n", ntf_opcode);
739 		break;
740 	}
741 
742 	kfree_skb(skb);
743 }
744