1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3 * HCI based Driver for NXP PN544 NFC Chip
4 *
5 * Copyright (C) 2012 Intel Corporation. All rights reserved.
6 */
7
8 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
9
10 #include <linux/delay.h>
11 #include <linux/slab.h>
12 #include <linux/module.h>
13
14 #include <linux/nfc.h>
15 #include <net/nfc/hci.h>
16 #include <net/nfc/llc.h>
17
18 #include "pn544.h"
19
20 /* Timing restrictions (ms) */
21 #define PN544_HCI_RESETVEN_TIME 30
22
23 enum pn544_state {
24 PN544_ST_COLD,
25 PN544_ST_FW_READY,
26 PN544_ST_READY,
27 };
28
29 #define FULL_VERSION_LEN 11
30
31 /* Proprietary commands */
32 #define PN544_WRITE 0x3f
33 #define PN544_TEST_SWP 0x21
34
35 /* Proprietary gates, events, commands and registers */
36
37 /* NFC_HCI_RF_READER_A_GATE additional registers and commands */
38 #define PN544_RF_READER_A_AUTO_ACTIVATION 0x10
39 #define PN544_RF_READER_A_CMD_CONTINUE_ACTIVATION 0x12
40 #define PN544_MIFARE_CMD 0x21
41
42 /* Commands that apply to all RF readers */
43 #define PN544_RF_READER_CMD_PRESENCE_CHECK 0x30
44 #define PN544_RF_READER_CMD_ACTIVATE_NEXT 0x32
45
46 /* NFC_HCI_ID_MGMT_GATE additional registers */
47 #define PN544_ID_MGMT_FULL_VERSION_SW 0x10
48
49 #define PN544_RF_READER_ISO15693_GATE 0x12
50
51 #define PN544_RF_READER_F_GATE 0x14
52 #define PN544_FELICA_ID 0x04
53 #define PN544_FELICA_RAW 0x20
54
55 #define PN544_RF_READER_JEWEL_GATE 0x15
56 #define PN544_JEWEL_RAW_CMD 0x23
57
58 #define PN544_RF_READER_NFCIP1_INITIATOR_GATE 0x30
59 #define PN544_RF_READER_NFCIP1_TARGET_GATE 0x31
60
61 #define PN544_SYS_MGMT_GATE 0x90
62 #define PN544_SYS_MGMT_INFO_NOTIFICATION 0x02
63
64 #define PN544_POLLING_LOOP_MGMT_GATE 0x94
65 #define PN544_DEP_MODE 0x01
66 #define PN544_DEP_ATR_REQ 0x02
67 #define PN544_DEP_ATR_RES 0x03
68 #define PN544_DEP_MERGE 0x0D
69 #define PN544_PL_RDPHASES 0x06
70 #define PN544_PL_EMULATION 0x07
71 #define PN544_PL_NFCT_DEACTIVATED 0x09
72
73 #define PN544_SWP_MGMT_GATE 0xA0
74 #define PN544_SWP_DEFAULT_MODE 0x01
75
76 #define PN544_NFC_WI_MGMT_GATE 0xA1
77 #define PN544_NFC_ESE_DEFAULT_MODE 0x01
78
79 #define PN544_HCI_EVT_SND_DATA 0x01
80 #define PN544_HCI_EVT_ACTIVATED 0x02
81 #define PN544_HCI_EVT_DEACTIVATED 0x03
82 #define PN544_HCI_EVT_RCV_DATA 0x04
83 #define PN544_HCI_EVT_CONTINUE_MI 0x05
84 #define PN544_HCI_EVT_SWITCH_MODE 0x03
85
86 #define PN544_HCI_CMD_ATTREQUEST 0x12
87 #define PN544_HCI_CMD_CONTINUE_ACTIVATION 0x13
88
89 static struct nfc_hci_gate pn544_gates[] = {
90 {NFC_HCI_ADMIN_GATE, NFC_HCI_INVALID_PIPE},
91 {NFC_HCI_LOOPBACK_GATE, NFC_HCI_INVALID_PIPE},
92 {NFC_HCI_ID_MGMT_GATE, NFC_HCI_INVALID_PIPE},
93 {NFC_HCI_LINK_MGMT_GATE, NFC_HCI_INVALID_PIPE},
94 {NFC_HCI_RF_READER_B_GATE, NFC_HCI_INVALID_PIPE},
95 {NFC_HCI_RF_READER_A_GATE, NFC_HCI_INVALID_PIPE},
96 {PN544_SYS_MGMT_GATE, NFC_HCI_INVALID_PIPE},
97 {PN544_SWP_MGMT_GATE, NFC_HCI_INVALID_PIPE},
98 {PN544_POLLING_LOOP_MGMT_GATE, NFC_HCI_INVALID_PIPE},
99 {PN544_NFC_WI_MGMT_GATE, NFC_HCI_INVALID_PIPE},
100 {PN544_RF_READER_F_GATE, NFC_HCI_INVALID_PIPE},
101 {PN544_RF_READER_JEWEL_GATE, NFC_HCI_INVALID_PIPE},
102 {PN544_RF_READER_ISO15693_GATE, NFC_HCI_INVALID_PIPE},
103 {PN544_RF_READER_NFCIP1_INITIATOR_GATE, NFC_HCI_INVALID_PIPE},
104 {PN544_RF_READER_NFCIP1_TARGET_GATE, NFC_HCI_INVALID_PIPE}
105 };
106
107 /* Largest headroom needed for outgoing custom commands */
108 #define PN544_CMDS_HEADROOM 2
109
110 struct pn544_hci_info {
111 struct nfc_phy_ops *phy_ops;
112 void *phy_id;
113
114 struct nfc_hci_dev *hdev;
115
116 enum pn544_state state;
117
118 struct mutex info_lock;
119
120 int async_cb_type;
121 data_exchange_cb_t async_cb;
122 void *async_cb_context;
123
124 fw_download_t fw_download;
125 };
126
pn544_hci_open(struct nfc_hci_dev * hdev)127 static int pn544_hci_open(struct nfc_hci_dev *hdev)
128 {
129 struct pn544_hci_info *info = nfc_hci_get_clientdata(hdev);
130 int r = 0;
131
132 mutex_lock(&info->info_lock);
133
134 if (info->state != PN544_ST_COLD) {
135 r = -EBUSY;
136 goto out;
137 }
138
139 r = info->phy_ops->enable(info->phy_id);
140
141 if (r == 0)
142 info->state = PN544_ST_READY;
143
144 out:
145 mutex_unlock(&info->info_lock);
146 return r;
147 }
148
pn544_hci_close(struct nfc_hci_dev * hdev)149 static void pn544_hci_close(struct nfc_hci_dev *hdev)
150 {
151 struct pn544_hci_info *info = nfc_hci_get_clientdata(hdev);
152
153 mutex_lock(&info->info_lock);
154
155 if (info->state == PN544_ST_COLD)
156 goto out;
157
158 info->phy_ops->disable(info->phy_id);
159
160 info->state = PN544_ST_COLD;
161
162 out:
163 mutex_unlock(&info->info_lock);
164 }
165
pn544_hci_ready(struct nfc_hci_dev * hdev)166 static int pn544_hci_ready(struct nfc_hci_dev *hdev)
167 {
168 struct sk_buff *skb;
169 static struct hw_config {
170 u8 adr[2];
171 u8 value;
172 } hw_config[] = {
173 {{0x9f, 0x9a}, 0x00},
174
175 {{0x98, 0x10}, 0xbc},
176
177 {{0x9e, 0x71}, 0x00},
178
179 {{0x98, 0x09}, 0x00},
180
181 {{0x9e, 0xb4}, 0x00},
182
183 {{0x9c, 0x01}, 0x08},
184
185 {{0x9e, 0xaa}, 0x01},
186
187 {{0x9b, 0xd1}, 0x17},
188 {{0x9b, 0xd2}, 0x58},
189 {{0x9b, 0xd3}, 0x10},
190 {{0x9b, 0xd4}, 0x47},
191 {{0x9b, 0xd5}, 0x0c},
192 {{0x9b, 0xd6}, 0x37},
193 {{0x9b, 0xdd}, 0x33},
194
195 {{0x9b, 0x84}, 0x00},
196 {{0x99, 0x81}, 0x79},
197 {{0x99, 0x31}, 0x79},
198
199 {{0x98, 0x00}, 0x3f},
200
201 {{0x9f, 0x09}, 0x02},
202
203 {{0x9f, 0x0a}, 0x05},
204
205 {{0x9e, 0xd1}, 0xa1},
206 {{0x99, 0x23}, 0x01},
207
208 {{0x9e, 0x74}, 0x00},
209 {{0x9e, 0x90}, 0x00},
210 {{0x9f, 0x28}, 0x10},
211
212 {{0x9f, 0x35}, 0x04},
213
214 {{0x9f, 0x36}, 0x11},
215
216 {{0x9c, 0x31}, 0x00},
217
218 {{0x9c, 0x32}, 0x00},
219
220 {{0x9c, 0x19}, 0x0a},
221
222 {{0x9c, 0x1a}, 0x0a},
223
224 {{0x9c, 0x0c}, 0x00},
225
226 {{0x9c, 0x0d}, 0x00},
227
228 {{0x9c, 0x12}, 0x00},
229
230 {{0x9c, 0x13}, 0x00},
231
232 {{0x98, 0xa2}, 0x09},
233
234 {{0x98, 0x93}, 0x00},
235
236 {{0x98, 0x7d}, 0x08},
237 {{0x98, 0x7e}, 0x00},
238 {{0x9f, 0xc8}, 0x00},
239 };
240 struct hw_config *p = hw_config;
241 int count = ARRAY_SIZE(hw_config);
242 struct sk_buff *res_skb;
243 u8 param[4];
244 int r;
245
246 param[0] = 0;
247 while (count--) {
248 param[1] = p->adr[0];
249 param[2] = p->adr[1];
250 param[3] = p->value;
251
252 r = nfc_hci_send_cmd(hdev, PN544_SYS_MGMT_GATE, PN544_WRITE,
253 param, 4, &res_skb);
254 if (r < 0)
255 return r;
256
257 if (res_skb->len != 1) {
258 kfree_skb(res_skb);
259 return -EPROTO;
260 }
261
262 if (res_skb->data[0] != p->value) {
263 kfree_skb(res_skb);
264 return -EIO;
265 }
266
267 kfree_skb(res_skb);
268
269 p++;
270 }
271
272 param[0] = NFC_HCI_UICC_HOST_ID;
273 r = nfc_hci_set_param(hdev, NFC_HCI_ADMIN_GATE,
274 NFC_HCI_ADMIN_WHITELIST, param, 1);
275 if (r < 0)
276 return r;
277
278 param[0] = 0x3d;
279 r = nfc_hci_set_param(hdev, PN544_SYS_MGMT_GATE,
280 PN544_SYS_MGMT_INFO_NOTIFICATION, param, 1);
281 if (r < 0)
282 return r;
283
284 param[0] = 0x0;
285 r = nfc_hci_set_param(hdev, NFC_HCI_RF_READER_A_GATE,
286 PN544_RF_READER_A_AUTO_ACTIVATION, param, 1);
287 if (r < 0)
288 return r;
289
290 r = nfc_hci_send_event(hdev, NFC_HCI_RF_READER_A_GATE,
291 NFC_HCI_EVT_END_OPERATION, NULL, 0);
292 if (r < 0)
293 return r;
294
295 param[0] = 0x1;
296 r = nfc_hci_set_param(hdev, PN544_POLLING_LOOP_MGMT_GATE,
297 PN544_PL_NFCT_DEACTIVATED, param, 1);
298 if (r < 0)
299 return r;
300
301 param[0] = 0x0;
302 r = nfc_hci_set_param(hdev, PN544_POLLING_LOOP_MGMT_GATE,
303 PN544_PL_RDPHASES, param, 1);
304 if (r < 0)
305 return r;
306
307 r = nfc_hci_get_param(hdev, NFC_HCI_ID_MGMT_GATE,
308 PN544_ID_MGMT_FULL_VERSION_SW, &skb);
309 if (r < 0)
310 return r;
311
312 if (skb->len != FULL_VERSION_LEN) {
313 kfree_skb(skb);
314 return -EINVAL;
315 }
316
317 print_hex_dump(KERN_DEBUG, "FULL VERSION SOFTWARE INFO: ",
318 DUMP_PREFIX_NONE, 16, 1,
319 skb->data, FULL_VERSION_LEN, false);
320
321 kfree_skb(skb);
322
323 return 0;
324 }
325
pn544_hci_xmit(struct nfc_hci_dev * hdev,struct sk_buff * skb)326 static int pn544_hci_xmit(struct nfc_hci_dev *hdev, struct sk_buff *skb)
327 {
328 struct pn544_hci_info *info = nfc_hci_get_clientdata(hdev);
329
330 return info->phy_ops->write(info->phy_id, skb);
331 }
332
pn544_hci_start_poll(struct nfc_hci_dev * hdev,u32 im_protocols,u32 tm_protocols)333 static int pn544_hci_start_poll(struct nfc_hci_dev *hdev,
334 u32 im_protocols, u32 tm_protocols)
335 {
336 u8 phases = 0;
337 int r;
338 u8 duration[2];
339 u8 activated;
340 u8 i_mode = 0x3f; /* Enable all supported modes */
341 u8 t_mode = 0x0f;
342 u8 t_merge = 0x01; /* Enable merge by default */
343
344 pr_info(DRIVER_DESC ": %s protocols 0x%x 0x%x\n",
345 __func__, im_protocols, tm_protocols);
346
347 r = nfc_hci_send_event(hdev, NFC_HCI_RF_READER_A_GATE,
348 NFC_HCI_EVT_END_OPERATION, NULL, 0);
349 if (r < 0)
350 return r;
351
352 duration[0] = 0x18;
353 duration[1] = 0x6a;
354 r = nfc_hci_set_param(hdev, PN544_POLLING_LOOP_MGMT_GATE,
355 PN544_PL_EMULATION, duration, 2);
356 if (r < 0)
357 return r;
358
359 activated = 0;
360 r = nfc_hci_set_param(hdev, PN544_POLLING_LOOP_MGMT_GATE,
361 PN544_PL_NFCT_DEACTIVATED, &activated, 1);
362 if (r < 0)
363 return r;
364
365 if (im_protocols & (NFC_PROTO_ISO14443_MASK | NFC_PROTO_MIFARE_MASK |
366 NFC_PROTO_JEWEL_MASK))
367 phases |= 1; /* Type A */
368 if (im_protocols & NFC_PROTO_FELICA_MASK) {
369 phases |= (1 << 2); /* Type F 212 */
370 phases |= (1 << 3); /* Type F 424 */
371 }
372
373 phases |= (1 << 5); /* NFC active */
374
375 r = nfc_hci_set_param(hdev, PN544_POLLING_LOOP_MGMT_GATE,
376 PN544_PL_RDPHASES, &phases, 1);
377 if (r < 0)
378 return r;
379
380 if ((im_protocols | tm_protocols) & NFC_PROTO_NFC_DEP_MASK) {
381 hdev->gb = nfc_get_local_general_bytes(hdev->ndev,
382 &hdev->gb_len);
383 pr_debug("generate local bytes %p\n", hdev->gb);
384 if (hdev->gb == NULL || hdev->gb_len == 0) {
385 im_protocols &= ~NFC_PROTO_NFC_DEP_MASK;
386 tm_protocols &= ~NFC_PROTO_NFC_DEP_MASK;
387 }
388 }
389
390 if (im_protocols & NFC_PROTO_NFC_DEP_MASK) {
391 r = nfc_hci_send_event(hdev,
392 PN544_RF_READER_NFCIP1_INITIATOR_GATE,
393 NFC_HCI_EVT_END_OPERATION, NULL, 0);
394 if (r < 0)
395 return r;
396
397 r = nfc_hci_set_param(hdev,
398 PN544_RF_READER_NFCIP1_INITIATOR_GATE,
399 PN544_DEP_MODE, &i_mode, 1);
400 if (r < 0)
401 return r;
402
403 r = nfc_hci_set_param(hdev,
404 PN544_RF_READER_NFCIP1_INITIATOR_GATE,
405 PN544_DEP_ATR_REQ, hdev->gb, hdev->gb_len);
406 if (r < 0)
407 return r;
408
409 r = nfc_hci_send_event(hdev,
410 PN544_RF_READER_NFCIP1_INITIATOR_GATE,
411 NFC_HCI_EVT_READER_REQUESTED, NULL, 0);
412 if (r < 0)
413 nfc_hci_send_event(hdev,
414 PN544_RF_READER_NFCIP1_INITIATOR_GATE,
415 NFC_HCI_EVT_END_OPERATION, NULL, 0);
416 }
417
418 if (tm_protocols & NFC_PROTO_NFC_DEP_MASK) {
419 r = nfc_hci_set_param(hdev, PN544_RF_READER_NFCIP1_TARGET_GATE,
420 PN544_DEP_MODE, &t_mode, 1);
421 if (r < 0)
422 return r;
423
424 r = nfc_hci_set_param(hdev, PN544_RF_READER_NFCIP1_TARGET_GATE,
425 PN544_DEP_ATR_RES, hdev->gb, hdev->gb_len);
426 if (r < 0)
427 return r;
428
429 r = nfc_hci_set_param(hdev, PN544_RF_READER_NFCIP1_TARGET_GATE,
430 PN544_DEP_MERGE, &t_merge, 1);
431 if (r < 0)
432 return r;
433 }
434
435 r = nfc_hci_send_event(hdev, NFC_HCI_RF_READER_A_GATE,
436 NFC_HCI_EVT_READER_REQUESTED, NULL, 0);
437 if (r < 0)
438 nfc_hci_send_event(hdev, NFC_HCI_RF_READER_A_GATE,
439 NFC_HCI_EVT_END_OPERATION, NULL, 0);
440
441 return r;
442 }
443
pn544_hci_dep_link_up(struct nfc_hci_dev * hdev,struct nfc_target * target,u8 comm_mode,u8 * gb,size_t gb_len)444 static int pn544_hci_dep_link_up(struct nfc_hci_dev *hdev,
445 struct nfc_target *target, u8 comm_mode,
446 u8 *gb, size_t gb_len)
447 {
448 struct sk_buff *rgb_skb = NULL;
449 int r;
450
451 r = nfc_hci_get_param(hdev, target->hci_reader_gate,
452 PN544_DEP_ATR_RES, &rgb_skb);
453 if (r < 0)
454 return r;
455
456 if (rgb_skb->len == 0 || rgb_skb->len > NFC_GB_MAXSIZE) {
457 r = -EPROTO;
458 goto exit;
459 }
460 print_hex_dump(KERN_DEBUG, "remote gb: ", DUMP_PREFIX_OFFSET,
461 16, 1, rgb_skb->data, rgb_skb->len, true);
462
463 r = nfc_set_remote_general_bytes(hdev->ndev, rgb_skb->data,
464 rgb_skb->len);
465
466 if (r == 0)
467 r = nfc_dep_link_is_up(hdev->ndev, target->idx, comm_mode,
468 NFC_RF_INITIATOR);
469 exit:
470 kfree_skb(rgb_skb);
471 return r;
472 }
473
pn544_hci_dep_link_down(struct nfc_hci_dev * hdev)474 static int pn544_hci_dep_link_down(struct nfc_hci_dev *hdev)
475 {
476
477 return nfc_hci_send_event(hdev, PN544_RF_READER_NFCIP1_INITIATOR_GATE,
478 NFC_HCI_EVT_END_OPERATION, NULL, 0);
479 }
480
pn544_hci_target_from_gate(struct nfc_hci_dev * hdev,u8 gate,struct nfc_target * target)481 static int pn544_hci_target_from_gate(struct nfc_hci_dev *hdev, u8 gate,
482 struct nfc_target *target)
483 {
484 switch (gate) {
485 case PN544_RF_READER_F_GATE:
486 target->supported_protocols = NFC_PROTO_FELICA_MASK;
487 break;
488 case PN544_RF_READER_JEWEL_GATE:
489 target->supported_protocols = NFC_PROTO_JEWEL_MASK;
490 target->sens_res = 0x0c00;
491 break;
492 case PN544_RF_READER_NFCIP1_INITIATOR_GATE:
493 target->supported_protocols = NFC_PROTO_NFC_DEP_MASK;
494 break;
495 default:
496 return -EPROTO;
497 }
498
499 return 0;
500 }
501
pn544_hci_complete_target_discovered(struct nfc_hci_dev * hdev,u8 gate,struct nfc_target * target)502 static int pn544_hci_complete_target_discovered(struct nfc_hci_dev *hdev,
503 u8 gate,
504 struct nfc_target *target)
505 {
506 struct sk_buff *uid_skb;
507 int r = 0;
508
509 if (gate == PN544_RF_READER_NFCIP1_INITIATOR_GATE)
510 return r;
511
512 if (target->supported_protocols & NFC_PROTO_NFC_DEP_MASK) {
513 r = nfc_hci_send_cmd(hdev,
514 PN544_RF_READER_NFCIP1_INITIATOR_GATE,
515 PN544_HCI_CMD_CONTINUE_ACTIVATION, NULL, 0, NULL);
516 if (r < 0)
517 return r;
518
519 target->hci_reader_gate = PN544_RF_READER_NFCIP1_INITIATOR_GATE;
520 } else if (target->supported_protocols & NFC_PROTO_MIFARE_MASK) {
521 if (target->nfcid1_len != 4 && target->nfcid1_len != 7 &&
522 target->nfcid1_len != 10)
523 return -EPROTO;
524
525 r = nfc_hci_send_cmd(hdev, NFC_HCI_RF_READER_A_GATE,
526 PN544_RF_READER_CMD_ACTIVATE_NEXT,
527 target->nfcid1, target->nfcid1_len, NULL);
528 } else if (target->supported_protocols & NFC_PROTO_FELICA_MASK) {
529 r = nfc_hci_get_param(hdev, PN544_RF_READER_F_GATE,
530 PN544_FELICA_ID, &uid_skb);
531 if (r < 0)
532 return r;
533
534 if (uid_skb->len != 8) {
535 kfree_skb(uid_skb);
536 return -EPROTO;
537 }
538
539 /* Type F NFC-DEP IDm has prefix 0x01FE */
540 if ((uid_skb->data[0] == 0x01) && (uid_skb->data[1] == 0xfe)) {
541 kfree_skb(uid_skb);
542 r = nfc_hci_send_cmd(hdev,
543 PN544_RF_READER_NFCIP1_INITIATOR_GATE,
544 PN544_HCI_CMD_CONTINUE_ACTIVATION,
545 NULL, 0, NULL);
546 if (r < 0)
547 return r;
548
549 target->supported_protocols = NFC_PROTO_NFC_DEP_MASK;
550 target->hci_reader_gate =
551 PN544_RF_READER_NFCIP1_INITIATOR_GATE;
552 } else {
553 r = nfc_hci_send_cmd(hdev, PN544_RF_READER_F_GATE,
554 PN544_RF_READER_CMD_ACTIVATE_NEXT,
555 uid_skb->data, uid_skb->len, NULL);
556 kfree_skb(uid_skb);
557 }
558 } else if (target->supported_protocols & NFC_PROTO_ISO14443_MASK) {
559 /*
560 * TODO: maybe other ISO 14443 require some kind of continue
561 * activation, but for now we've seen only this one below.
562 */
563 if (target->sens_res == 0x4403) /* Type 4 Mifare DESFire */
564 r = nfc_hci_send_cmd(hdev, NFC_HCI_RF_READER_A_GATE,
565 PN544_RF_READER_A_CMD_CONTINUE_ACTIVATION,
566 NULL, 0, NULL);
567 }
568
569 return r;
570 }
571
572 #define PN544_CB_TYPE_READER_F 1
573
pn544_hci_data_exchange_cb(void * context,struct sk_buff * skb,int err)574 static void pn544_hci_data_exchange_cb(void *context, struct sk_buff *skb,
575 int err)
576 {
577 struct pn544_hci_info *info = context;
578
579 switch (info->async_cb_type) {
580 case PN544_CB_TYPE_READER_F:
581 if (err == 0)
582 skb_pull(skb, 1);
583 info->async_cb(info->async_cb_context, skb, err);
584 break;
585 default:
586 if (err == 0)
587 kfree_skb(skb);
588 break;
589 }
590 }
591
592 #define MIFARE_CMD_AUTH_KEY_A 0x60
593 #define MIFARE_CMD_AUTH_KEY_B 0x61
594 #define MIFARE_CMD_HEADER 2
595 #define MIFARE_UID_LEN 4
596 #define MIFARE_KEY_LEN 6
597 #define MIFARE_CMD_LEN 12
598 /*
599 * Returns:
600 * <= 0: driver handled the data exchange
601 * 1: driver doesn't especially handle, please do standard processing
602 */
pn544_hci_im_transceive(struct nfc_hci_dev * hdev,struct nfc_target * target,struct sk_buff * skb,data_exchange_cb_t cb,void * cb_context)603 static int pn544_hci_im_transceive(struct nfc_hci_dev *hdev,
604 struct nfc_target *target,
605 struct sk_buff *skb, data_exchange_cb_t cb,
606 void *cb_context)
607 {
608 struct pn544_hci_info *info = nfc_hci_get_clientdata(hdev);
609
610 pr_info(DRIVER_DESC ": %s for gate=%d\n", __func__,
611 target->hci_reader_gate);
612
613 switch (target->hci_reader_gate) {
614 case NFC_HCI_RF_READER_A_GATE:
615 if (target->supported_protocols & NFC_PROTO_MIFARE_MASK) {
616 /*
617 * It seems that pn544 is inverting key and UID for
618 * MIFARE authentication commands.
619 */
620 if (skb->len == MIFARE_CMD_LEN &&
621 (skb->data[0] == MIFARE_CMD_AUTH_KEY_A ||
622 skb->data[0] == MIFARE_CMD_AUTH_KEY_B)) {
623 u8 uid[MIFARE_UID_LEN];
624 u8 *data = skb->data + MIFARE_CMD_HEADER;
625
626 memcpy(uid, data + MIFARE_KEY_LEN,
627 MIFARE_UID_LEN);
628 memmove(data + MIFARE_UID_LEN, data,
629 MIFARE_KEY_LEN);
630 memcpy(data, uid, MIFARE_UID_LEN);
631 }
632
633 return nfc_hci_send_cmd_async(hdev,
634 target->hci_reader_gate,
635 PN544_MIFARE_CMD,
636 skb->data, skb->len,
637 cb, cb_context);
638 } else
639 return 1;
640 case PN544_RF_READER_F_GATE:
641 *(u8 *)skb_push(skb, 1) = 0;
642 *(u8 *)skb_push(skb, 1) = 0;
643
644 info->async_cb_type = PN544_CB_TYPE_READER_F;
645 info->async_cb = cb;
646 info->async_cb_context = cb_context;
647
648 return nfc_hci_send_cmd_async(hdev, target->hci_reader_gate,
649 PN544_FELICA_RAW, skb->data,
650 skb->len,
651 pn544_hci_data_exchange_cb, info);
652 case PN544_RF_READER_JEWEL_GATE:
653 return nfc_hci_send_cmd_async(hdev, target->hci_reader_gate,
654 PN544_JEWEL_RAW_CMD, skb->data,
655 skb->len, cb, cb_context);
656 case PN544_RF_READER_NFCIP1_INITIATOR_GATE:
657 *(u8 *)skb_push(skb, 1) = 0;
658
659 return nfc_hci_send_event(hdev, target->hci_reader_gate,
660 PN544_HCI_EVT_SND_DATA, skb->data,
661 skb->len);
662 default:
663 return 1;
664 }
665 }
666
pn544_hci_tm_send(struct nfc_hci_dev * hdev,struct sk_buff * skb)667 static int pn544_hci_tm_send(struct nfc_hci_dev *hdev, struct sk_buff *skb)
668 {
669 int r;
670
671 /* Set default false for multiple information chaining */
672 *(u8 *)skb_push(skb, 1) = 0;
673
674 r = nfc_hci_send_event(hdev, PN544_RF_READER_NFCIP1_TARGET_GATE,
675 PN544_HCI_EVT_SND_DATA, skb->data, skb->len);
676
677 kfree_skb(skb);
678
679 return r;
680 }
681
pn544_hci_check_presence(struct nfc_hci_dev * hdev,struct nfc_target * target)682 static int pn544_hci_check_presence(struct nfc_hci_dev *hdev,
683 struct nfc_target *target)
684 {
685 pr_debug("supported protocol %d\b", target->supported_protocols);
686 if (target->supported_protocols & (NFC_PROTO_ISO14443_MASK |
687 NFC_PROTO_ISO14443_B_MASK)) {
688 return nfc_hci_send_cmd(hdev, target->hci_reader_gate,
689 PN544_RF_READER_CMD_PRESENCE_CHECK,
690 NULL, 0, NULL);
691 } else if (target->supported_protocols & NFC_PROTO_MIFARE_MASK) {
692 if (target->nfcid1_len != 4 && target->nfcid1_len != 7 &&
693 target->nfcid1_len != 10)
694 return -EOPNOTSUPP;
695
696 return nfc_hci_send_cmd(hdev, NFC_HCI_RF_READER_A_GATE,
697 PN544_RF_READER_CMD_ACTIVATE_NEXT,
698 target->nfcid1, target->nfcid1_len, NULL);
699 } else if (target->supported_protocols & (NFC_PROTO_JEWEL_MASK |
700 NFC_PROTO_FELICA_MASK)) {
701 return -EOPNOTSUPP;
702 } else if (target->supported_protocols & NFC_PROTO_NFC_DEP_MASK) {
703 return nfc_hci_send_cmd(hdev, target->hci_reader_gate,
704 PN544_HCI_CMD_ATTREQUEST,
705 NULL, 0, NULL);
706 }
707
708 return 0;
709 }
710
711 /*
712 * Returns:
713 * <= 0: driver handled the event, skb consumed
714 * 1: driver does not handle the event, please do standard processing
715 */
pn544_hci_event_received(struct nfc_hci_dev * hdev,u8 pipe,u8 event,struct sk_buff * skb)716 static int pn544_hci_event_received(struct nfc_hci_dev *hdev, u8 pipe, u8 event,
717 struct sk_buff *skb)
718 {
719 struct sk_buff *rgb_skb = NULL;
720 u8 gate = hdev->pipes[pipe].gate;
721 int r;
722
723 pr_debug("hci event %d\n", event);
724 switch (event) {
725 case PN544_HCI_EVT_ACTIVATED:
726 if (gate == PN544_RF_READER_NFCIP1_INITIATOR_GATE) {
727 r = nfc_hci_target_discovered(hdev, gate);
728 } else if (gate == PN544_RF_READER_NFCIP1_TARGET_GATE) {
729 r = nfc_hci_get_param(hdev, gate, PN544_DEP_ATR_REQ,
730 &rgb_skb);
731 if (r < 0)
732 goto exit;
733
734 r = nfc_tm_activated(hdev->ndev, NFC_PROTO_NFC_DEP_MASK,
735 NFC_COMM_PASSIVE, rgb_skb->data,
736 rgb_skb->len);
737
738 kfree_skb(rgb_skb);
739 } else {
740 r = -EINVAL;
741 }
742 break;
743 case PN544_HCI_EVT_DEACTIVATED:
744 r = nfc_hci_send_event(hdev, gate, NFC_HCI_EVT_END_OPERATION,
745 NULL, 0);
746 break;
747 case PN544_HCI_EVT_RCV_DATA:
748 if (skb->len < 2) {
749 r = -EPROTO;
750 goto exit;
751 }
752
753 if (skb->data[0] != 0) {
754 pr_debug("data0 %d\n", skb->data[0]);
755 r = -EPROTO;
756 goto exit;
757 }
758
759 skb_pull(skb, 2);
760 return nfc_tm_data_received(hdev->ndev, skb);
761 default:
762 return 1;
763 }
764
765 exit:
766 kfree_skb(skb);
767
768 return r;
769 }
770
pn544_hci_fw_download(struct nfc_hci_dev * hdev,const char * firmware_name)771 static int pn544_hci_fw_download(struct nfc_hci_dev *hdev,
772 const char *firmware_name)
773 {
774 struct pn544_hci_info *info = nfc_hci_get_clientdata(hdev);
775
776 if (info->fw_download == NULL)
777 return -ENOTSUPP;
778
779 return info->fw_download(info->phy_id, firmware_name, hdev->sw_romlib);
780 }
781
pn544_hci_discover_se(struct nfc_hci_dev * hdev)782 static int pn544_hci_discover_se(struct nfc_hci_dev *hdev)
783 {
784 u32 se_idx = 0;
785 u8 ese_mode = 0x01; /* Default mode */
786 struct sk_buff *res_skb;
787 int r;
788
789 r = nfc_hci_send_cmd(hdev, PN544_SYS_MGMT_GATE, PN544_TEST_SWP,
790 NULL, 0, &res_skb);
791
792 if (r == 0) {
793 if (res_skb->len == 2 && res_skb->data[0] == 0x00)
794 nfc_add_se(hdev->ndev, se_idx++, NFC_SE_UICC);
795
796 kfree_skb(res_skb);
797 }
798
799 r = nfc_hci_send_event(hdev, PN544_NFC_WI_MGMT_GATE,
800 PN544_HCI_EVT_SWITCH_MODE,
801 &ese_mode, 1);
802 if (r == 0)
803 nfc_add_se(hdev->ndev, se_idx++, NFC_SE_EMBEDDED);
804
805 return !se_idx;
806 }
807
808 #define PN544_SE_MODE_OFF 0x00
809 #define PN544_SE_MODE_ON 0x01
pn544_hci_enable_se(struct nfc_hci_dev * hdev,u32 se_idx)810 static int pn544_hci_enable_se(struct nfc_hci_dev *hdev, u32 se_idx)
811 {
812 struct nfc_se *se;
813 u8 enable = PN544_SE_MODE_ON;
814 static struct uicc_gatelist {
815 u8 head;
816 u8 adr[2];
817 u8 value;
818 } uicc_gatelist[] = {
819 {0x00, {0x9e, 0xd9}, 0x23},
820 {0x00, {0x9e, 0xda}, 0x21},
821 {0x00, {0x9e, 0xdb}, 0x22},
822 {0x00, {0x9e, 0xdc}, 0x24},
823 };
824 struct uicc_gatelist *p = uicc_gatelist;
825 int count = ARRAY_SIZE(uicc_gatelist);
826 struct sk_buff *res_skb;
827 int r;
828
829 se = nfc_find_se(hdev->ndev, se_idx);
830
831 switch (se->type) {
832 case NFC_SE_UICC:
833 while (count--) {
834 r = nfc_hci_send_cmd(hdev, PN544_SYS_MGMT_GATE,
835 PN544_WRITE, (u8 *)p, 4, &res_skb);
836 if (r < 0)
837 return r;
838
839 if (res_skb->len != 1) {
840 kfree_skb(res_skb);
841 return -EPROTO;
842 }
843
844 if (res_skb->data[0] != p->value) {
845 kfree_skb(res_skb);
846 return -EIO;
847 }
848
849 kfree_skb(res_skb);
850
851 p++;
852 }
853
854 return nfc_hci_set_param(hdev, PN544_SWP_MGMT_GATE,
855 PN544_SWP_DEFAULT_MODE, &enable, 1);
856 case NFC_SE_EMBEDDED:
857 return nfc_hci_set_param(hdev, PN544_NFC_WI_MGMT_GATE,
858 PN544_NFC_ESE_DEFAULT_MODE, &enable, 1);
859
860 default:
861 return -EINVAL;
862 }
863 }
864
pn544_hci_disable_se(struct nfc_hci_dev * hdev,u32 se_idx)865 static int pn544_hci_disable_se(struct nfc_hci_dev *hdev, u32 se_idx)
866 {
867 struct nfc_se *se;
868 u8 disable = PN544_SE_MODE_OFF;
869
870 se = nfc_find_se(hdev->ndev, se_idx);
871
872 switch (se->type) {
873 case NFC_SE_UICC:
874 return nfc_hci_set_param(hdev, PN544_SWP_MGMT_GATE,
875 PN544_SWP_DEFAULT_MODE, &disable, 1);
876 case NFC_SE_EMBEDDED:
877 return nfc_hci_set_param(hdev, PN544_NFC_WI_MGMT_GATE,
878 PN544_NFC_ESE_DEFAULT_MODE, &disable, 1);
879 default:
880 return -EINVAL;
881 }
882 }
883
884 static struct nfc_hci_ops pn544_hci_ops = {
885 .open = pn544_hci_open,
886 .close = pn544_hci_close,
887 .hci_ready = pn544_hci_ready,
888 .xmit = pn544_hci_xmit,
889 .start_poll = pn544_hci_start_poll,
890 .dep_link_up = pn544_hci_dep_link_up,
891 .dep_link_down = pn544_hci_dep_link_down,
892 .target_from_gate = pn544_hci_target_from_gate,
893 .complete_target_discovered = pn544_hci_complete_target_discovered,
894 .im_transceive = pn544_hci_im_transceive,
895 .tm_send = pn544_hci_tm_send,
896 .check_presence = pn544_hci_check_presence,
897 .event_received = pn544_hci_event_received,
898 .fw_download = pn544_hci_fw_download,
899 .discover_se = pn544_hci_discover_se,
900 .enable_se = pn544_hci_enable_se,
901 .disable_se = pn544_hci_disable_se,
902 };
903
pn544_hci_probe(void * phy_id,struct nfc_phy_ops * phy_ops,char * llc_name,int phy_headroom,int phy_tailroom,int phy_payload,fw_download_t fw_download,struct nfc_hci_dev ** hdev)904 int pn544_hci_probe(void *phy_id, struct nfc_phy_ops *phy_ops, char *llc_name,
905 int phy_headroom, int phy_tailroom, int phy_payload,
906 fw_download_t fw_download, struct nfc_hci_dev **hdev)
907 {
908 struct pn544_hci_info *info;
909 u32 protocols;
910 struct nfc_hci_init_data init_data;
911 int r;
912
913 info = kzalloc(sizeof(struct pn544_hci_info), GFP_KERNEL);
914 if (!info) {
915 r = -ENOMEM;
916 goto err_info_alloc;
917 }
918
919 info->phy_ops = phy_ops;
920 info->phy_id = phy_id;
921 info->fw_download = fw_download;
922 info->state = PN544_ST_COLD;
923 mutex_init(&info->info_lock);
924
925 init_data.gate_count = ARRAY_SIZE(pn544_gates);
926
927 memcpy(init_data.gates, pn544_gates, sizeof(pn544_gates));
928
929 /*
930 * TODO: Session id must include the driver name + some bus addr
931 * persistent info to discriminate 2 identical chips
932 */
933 strcpy(init_data.session_id, "ID544HCI");
934
935 protocols = NFC_PROTO_JEWEL_MASK |
936 NFC_PROTO_MIFARE_MASK |
937 NFC_PROTO_FELICA_MASK |
938 NFC_PROTO_ISO14443_MASK |
939 NFC_PROTO_ISO14443_B_MASK |
940 NFC_PROTO_NFC_DEP_MASK;
941
942 info->hdev = nfc_hci_allocate_device(&pn544_hci_ops, &init_data, 0,
943 protocols, llc_name,
944 phy_headroom + PN544_CMDS_HEADROOM,
945 phy_tailroom, phy_payload);
946 if (!info->hdev) {
947 pr_err("Cannot allocate nfc hdev\n");
948 r = -ENOMEM;
949 goto err_alloc_hdev;
950 }
951
952 nfc_hci_set_clientdata(info->hdev, info);
953
954 r = nfc_hci_register_device(info->hdev);
955 if (r)
956 goto err_regdev;
957
958 *hdev = info->hdev;
959
960 return 0;
961
962 err_regdev:
963 nfc_hci_free_device(info->hdev);
964
965 err_alloc_hdev:
966 kfree(info);
967
968 err_info_alloc:
969 return r;
970 }
971 EXPORT_SYMBOL(pn544_hci_probe);
972
pn544_hci_remove(struct nfc_hci_dev * hdev)973 void pn544_hci_remove(struct nfc_hci_dev *hdev)
974 {
975 struct pn544_hci_info *info = nfc_hci_get_clientdata(hdev);
976
977 nfc_hci_unregister_device(hdev);
978 nfc_hci_free_device(hdev);
979 kfree(info);
980 }
981 EXPORT_SYMBOL(pn544_hci_remove);
982
983 MODULE_LICENSE("GPL");
984 MODULE_DESCRIPTION(DRIVER_DESC);
985
