1/*
2 *  The NFC Controller Interface is the communication protocol between an
3 *  NFC Controller (NFCC) and a Device Host (DH).
4 *
5 *  Copyright (C) 2011 Texas Instruments, Inc.
6 *
7 *  Written by Ilan Elias <ilane@ti.com>
8 *
9 *  Acknowledgements:
10 *  This file is based on hci_event.c, which was written
11 *  by Maxim Krasnyansky.
12 *
13 *  This program is free software; you can redistribute it and/or modify
14 *  it under the terms of the GNU General Public License version 2
15 *  as published by the Free Software Foundation
16 *
17 *  This program is distributed in the hope that it will be useful,
18 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
19 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
20 *  GNU General Public License for more details.
21 *
22 *  You should have received a copy of the GNU General Public License
23 *  along with this program; if not, see <http://www.gnu.org/licenses/>.
24 *
25 */
26
27#define pr_fmt(fmt) KBUILD_MODNAME ": %s: " fmt, __func__
28
29#include <linux/types.h>
30#include <linux/interrupt.h>
31#include <linux/bitops.h>
32#include <linux/skbuff.h>
33
34#include "../nfc.h"
35#include <net/nfc/nci.h>
36#include <net/nfc/nci_core.h>
37
38/* Handle NCI Response packets */
39
40static void nci_core_reset_rsp_packet(struct nci_dev *ndev, struct sk_buff *skb)
41{
42	struct nci_core_reset_rsp *rsp = (void *) skb->data;
43
44	pr_debug("status 0x%x\n", rsp->status);
45
46	if (rsp->status == NCI_STATUS_OK) {
47		ndev->nci_ver = rsp->nci_ver;
48		pr_debug("nci_ver 0x%x, config_status 0x%x\n",
49			 rsp->nci_ver, rsp->config_status);
50	}
51
52	nci_req_complete(ndev, rsp->status);
53}
54
55static void nci_core_init_rsp_packet(struct nci_dev *ndev, struct sk_buff *skb)
56{
57	struct nci_core_init_rsp_1 *rsp_1 = (void *) skb->data;
58	struct nci_core_init_rsp_2 *rsp_2;
59
60	pr_debug("status 0x%x\n", rsp_1->status);
61
62	if (rsp_1->status != NCI_STATUS_OK)
63		goto exit;
64
65	ndev->nfcc_features = __le32_to_cpu(rsp_1->nfcc_features);
66	ndev->num_supported_rf_interfaces = rsp_1->num_supported_rf_interfaces;
67
68	if (ndev->num_supported_rf_interfaces >
69	    NCI_MAX_SUPPORTED_RF_INTERFACES) {
70		ndev->num_supported_rf_interfaces =
71			NCI_MAX_SUPPORTED_RF_INTERFACES;
72	}
73
74	memcpy(ndev->supported_rf_interfaces,
75	       rsp_1->supported_rf_interfaces,
76	       ndev->num_supported_rf_interfaces);
77
78	rsp_2 = (void *) (skb->data + 6 + rsp_1->num_supported_rf_interfaces);
79
80	ndev->max_logical_connections = rsp_2->max_logical_connections;
81	ndev->max_routing_table_size =
82		__le16_to_cpu(rsp_2->max_routing_table_size);
83	ndev->max_ctrl_pkt_payload_len =
84		rsp_2->max_ctrl_pkt_payload_len;
85	ndev->max_size_for_large_params =
86		__le16_to_cpu(rsp_2->max_size_for_large_params);
87	ndev->manufact_id =
88		rsp_2->manufact_id;
89	ndev->manufact_specific_info =
90		__le32_to_cpu(rsp_2->manufact_specific_info);
91
92	pr_debug("nfcc_features 0x%x\n",
93		 ndev->nfcc_features);
94	pr_debug("num_supported_rf_interfaces %d\n",
95		 ndev->num_supported_rf_interfaces);
96	pr_debug("supported_rf_interfaces[0] 0x%x\n",
97		 ndev->supported_rf_interfaces[0]);
98	pr_debug("supported_rf_interfaces[1] 0x%x\n",
99		 ndev->supported_rf_interfaces[1]);
100	pr_debug("supported_rf_interfaces[2] 0x%x\n",
101		 ndev->supported_rf_interfaces[2]);
102	pr_debug("supported_rf_interfaces[3] 0x%x\n",
103		 ndev->supported_rf_interfaces[3]);
104	pr_debug("max_logical_connections %d\n",
105		 ndev->max_logical_connections);
106	pr_debug("max_routing_table_size %d\n",
107		 ndev->max_routing_table_size);
108	pr_debug("max_ctrl_pkt_payload_len %d\n",
109		 ndev->max_ctrl_pkt_payload_len);
110	pr_debug("max_size_for_large_params %d\n",
111		 ndev->max_size_for_large_params);
112	pr_debug("manufact_id 0x%x\n",
113		 ndev->manufact_id);
114	pr_debug("manufact_specific_info 0x%x\n",
115		 ndev->manufact_specific_info);
116
117exit:
118	nci_req_complete(ndev, rsp_1->status);
119}
120
121static void nci_core_set_config_rsp_packet(struct nci_dev *ndev,
122					   struct sk_buff *skb)
123{
124	struct nci_core_set_config_rsp *rsp = (void *) skb->data;
125
126	pr_debug("status 0x%x\n", rsp->status);
127
128	nci_req_complete(ndev, rsp->status);
129}
130
131static void nci_rf_disc_map_rsp_packet(struct nci_dev *ndev,
132				       struct sk_buff *skb)
133{
134	__u8 status = skb->data[0];
135
136	pr_debug("status 0x%x\n", status);
137
138	nci_req_complete(ndev, status);
139}
140
141static void nci_rf_disc_rsp_packet(struct nci_dev *ndev, struct sk_buff *skb)
142{
143	struct nci_conn_info    *conn_info;
144	__u8 status = skb->data[0];
145
146	pr_debug("status 0x%x\n", status);
147
148	if (status == NCI_STATUS_OK) {
149		atomic_set(&ndev->state, NCI_DISCOVERY);
150
151		conn_info = ndev->rf_conn_info;
152		if (!conn_info) {
153			conn_info = devm_kzalloc(&ndev->nfc_dev->dev,
154						 sizeof(struct nci_conn_info),
155						 GFP_KERNEL);
156			if (!conn_info) {
157				status = NCI_STATUS_REJECTED;
158				goto exit;
159			}
160			conn_info->conn_id = NCI_STATIC_RF_CONN_ID;
161			INIT_LIST_HEAD(&conn_info->list);
162			list_add(&conn_info->list, &ndev->conn_info_list);
163			ndev->rf_conn_info = conn_info;
164		}
165	}
166
167exit:
168	nci_req_complete(ndev, status);
169}
170
171static void nci_rf_disc_select_rsp_packet(struct nci_dev *ndev,
172					  struct sk_buff *skb)
173{
174	__u8 status = skb->data[0];
175
176	pr_debug("status 0x%x\n", status);
177
178	/* Complete the request on intf_activated_ntf or generic_error_ntf */
179	if (status != NCI_STATUS_OK)
180		nci_req_complete(ndev, status);
181}
182
183static void nci_rf_deactivate_rsp_packet(struct nci_dev *ndev,
184					 struct sk_buff *skb)
185{
186	__u8 status = skb->data[0];
187
188	pr_debug("status 0x%x\n", status);
189
190	/* If target was active, complete the request only in deactivate_ntf */
191	if ((status != NCI_STATUS_OK) ||
192	    (atomic_read(&ndev->state) != NCI_POLL_ACTIVE)) {
193		nci_clear_target_list(ndev);
194		atomic_set(&ndev->state, NCI_IDLE);
195		nci_req_complete(ndev, status);
196	}
197}
198
199static void nci_nfcee_discover_rsp_packet(struct nci_dev *ndev,
200					  struct sk_buff *skb)
201{
202	struct nci_nfcee_discover_rsp *discover_rsp;
203
204	if (skb->len != 2) {
205		nci_req_complete(ndev, NCI_STATUS_NFCEE_PROTOCOL_ERROR);
206		return;
207	}
208
209	discover_rsp = (struct nci_nfcee_discover_rsp *)skb->data;
210
211	if (discover_rsp->status != NCI_STATUS_OK ||
212	    discover_rsp->num_nfcee == 0)
213		nci_req_complete(ndev, discover_rsp->status);
214}
215
216static void nci_nfcee_mode_set_rsp_packet(struct nci_dev *ndev,
217					  struct sk_buff *skb)
218{
219	__u8 status = skb->data[0];
220
221	pr_debug("status 0x%x\n", status);
222	nci_req_complete(ndev, status);
223}
224
225static void nci_core_conn_create_rsp_packet(struct nci_dev *ndev,
226					    struct sk_buff *skb)
227{
228	__u8 status = skb->data[0];
229	struct nci_conn_info *conn_info;
230	struct nci_core_conn_create_rsp *rsp;
231
232	pr_debug("status 0x%x\n", status);
233
234	if (status == NCI_STATUS_OK) {
235		rsp = (struct nci_core_conn_create_rsp *)skb->data;
236
237		conn_info = devm_kzalloc(&ndev->nfc_dev->dev,
238					 sizeof(*conn_info), GFP_KERNEL);
239		if (!conn_info) {
240			status = NCI_STATUS_REJECTED;
241			goto exit;
242		}
243
244		conn_info->id = ndev->cur_id;
245		conn_info->conn_id = rsp->conn_id;
246
247		/* Note: data_exchange_cb and data_exchange_cb_context need to
248		 * be specify out of nci_core_conn_create_rsp_packet
249		 */
250
251		INIT_LIST_HEAD(&conn_info->list);
252		list_add(&conn_info->list, &ndev->conn_info_list);
253
254		if (ndev->cur_id == ndev->hci_dev->nfcee_id)
255			ndev->hci_dev->conn_info = conn_info;
256
257		conn_info->conn_id = rsp->conn_id;
258		conn_info->max_pkt_payload_len = rsp->max_ctrl_pkt_payload_len;
259		atomic_set(&conn_info->credits_cnt, rsp->credits_cnt);
260	}
261
262exit:
263	nci_req_complete(ndev, status);
264}
265
266static void nci_core_conn_close_rsp_packet(struct nci_dev *ndev,
267					   struct sk_buff *skb)
268{
269	struct nci_conn_info *conn_info;
270	__u8 status = skb->data[0];
271
272	pr_debug("status 0x%x\n", status);
273	if (status == NCI_STATUS_OK) {
274		conn_info = nci_get_conn_info_by_conn_id(ndev, ndev->cur_id);
275		if (conn_info) {
276			list_del(&conn_info->list);
277			devm_kfree(&ndev->nfc_dev->dev, conn_info);
278		}
279	}
280	nci_req_complete(ndev, status);
281}
282
283void nci_rsp_packet(struct nci_dev *ndev, struct sk_buff *skb)
284{
285	__u16 rsp_opcode = nci_opcode(skb->data);
286
287	/* we got a rsp, stop the cmd timer */
288	del_timer(&ndev->cmd_timer);
289
290	pr_debug("NCI RX: MT=rsp, PBF=%d, GID=0x%x, OID=0x%x, plen=%d\n",
291		 nci_pbf(skb->data),
292		 nci_opcode_gid(rsp_opcode),
293		 nci_opcode_oid(rsp_opcode),
294		 nci_plen(skb->data));
295
296	/* strip the nci control header */
297	skb_pull(skb, NCI_CTRL_HDR_SIZE);
298
299	switch (rsp_opcode) {
300	case NCI_OP_CORE_RESET_RSP:
301		nci_core_reset_rsp_packet(ndev, skb);
302		break;
303
304	case NCI_OP_CORE_INIT_RSP:
305		nci_core_init_rsp_packet(ndev, skb);
306		break;
307
308	case NCI_OP_CORE_SET_CONFIG_RSP:
309		nci_core_set_config_rsp_packet(ndev, skb);
310		break;
311
312	case NCI_OP_CORE_CONN_CREATE_RSP:
313		nci_core_conn_create_rsp_packet(ndev, skb);
314		break;
315
316	case NCI_OP_CORE_CONN_CLOSE_RSP:
317		nci_core_conn_close_rsp_packet(ndev, skb);
318		break;
319
320	case NCI_OP_RF_DISCOVER_MAP_RSP:
321		nci_rf_disc_map_rsp_packet(ndev, skb);
322		break;
323
324	case NCI_OP_RF_DISCOVER_RSP:
325		nci_rf_disc_rsp_packet(ndev, skb);
326		break;
327
328	case NCI_OP_RF_DISCOVER_SELECT_RSP:
329		nci_rf_disc_select_rsp_packet(ndev, skb);
330		break;
331
332	case NCI_OP_RF_DEACTIVATE_RSP:
333		nci_rf_deactivate_rsp_packet(ndev, skb);
334		break;
335
336	case NCI_OP_NFCEE_DISCOVER_RSP:
337		nci_nfcee_discover_rsp_packet(ndev, skb);
338		break;
339
340	case NCI_OP_NFCEE_MODE_SET_RSP:
341		nci_nfcee_mode_set_rsp_packet(ndev, skb);
342		break;
343
344	default:
345		pr_err("unknown rsp opcode 0x%x\n", rsp_opcode);
346		break;
347	}
348
349	kfree_skb(skb);
350
351	/* trigger the next cmd */
352	atomic_set(&ndev->cmd_cnt, 1);
353	if (!skb_queue_empty(&ndev->cmd_q))
354		queue_work(ndev->cmd_wq, &ndev->cmd_work);
355}
356