linux/drivers/nfc/port100.c
<<
>>
Prefs
   1/*
   2 * Sony NFC Port-100 Series driver
   3 * Copyright (c) 2013, Intel Corporation.
   4 *
   5 * Partly based/Inspired by Stephen Tiedemann's nfcpy
   6 *
   7 * This program is free software; you can redistribute it and/or modify it
   8 * under the terms and conditions of the GNU General Public License,
   9 * version 2, as published by the Free Software Foundation.
  10 *
  11 * This program is distributed in the hope it will be useful, but WITHOUT
  12 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  13 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
  14 * more details.
  15 *
  16 */
  17
  18#include <linux/module.h>
  19#include <linux/usb.h>
  20#include <net/nfc/digital.h>
  21
  22#define VERSION "0.1"
  23
  24#define SONY_VENDOR_ID          0x054c
  25#define RCS380S_PRODUCT_ID      0x06c1
  26#define RCS380P_PRODUCT_ID      0x06c3
  27
  28#define PORT100_PROTOCOLS (NFC_PROTO_JEWEL_MASK    | \
  29                           NFC_PROTO_MIFARE_MASK   | \
  30                           NFC_PROTO_FELICA_MASK   | \
  31                           NFC_PROTO_NFC_DEP_MASK  | \
  32                           NFC_PROTO_ISO14443_MASK | \
  33                           NFC_PROTO_ISO14443_B_MASK)
  34
  35#define PORT100_CAPABILITIES (NFC_DIGITAL_DRV_CAPS_IN_CRC | \
  36                              NFC_DIGITAL_DRV_CAPS_TG_CRC)
  37
  38/* Standard port100 frame definitions */
  39#define PORT100_FRAME_HEADER_LEN (sizeof(struct port100_frame) \
  40                                  + 2) /* data[0] CC, data[1] SCC */
  41#define PORT100_FRAME_TAIL_LEN 2 /* data[len] DCS, data[len + 1] postamble*/
  42
  43#define PORT100_COMM_RF_HEAD_MAX_LEN (sizeof(struct port100_tg_comm_rf_cmd))
  44
  45/*
  46 * Max extended frame payload len, excluding CC and SCC
  47 * which are already in PORT100_FRAME_HEADER_LEN.
  48 */
  49#define PORT100_FRAME_MAX_PAYLOAD_LEN 1001
  50
  51#define PORT100_FRAME_ACK_SIZE 6 /* Preamble (1), SoPC (2), ACK Code (2),
  52                                    Postamble (1) */
  53static u8 ack_frame[PORT100_FRAME_ACK_SIZE] = {
  54        0x00, 0x00, 0xff, 0x00, 0xff, 0x00
  55};
  56
  57#define PORT100_FRAME_CHECKSUM(f) (f->data[le16_to_cpu(f->datalen)])
  58#define PORT100_FRAME_POSTAMBLE(f) (f->data[le16_to_cpu(f->datalen) + 1])
  59
  60/* start of frame */
  61#define PORT100_FRAME_SOF       0x00FF
  62#define PORT100_FRAME_EXT       0xFFFF
  63#define PORT100_FRAME_ACK       0x00FF
  64
  65/* Port-100 command: in or out */
  66#define PORT100_FRAME_DIRECTION(f) (f->data[0]) /* CC */
  67#define PORT100_FRAME_DIR_OUT 0xD6
  68#define PORT100_FRAME_DIR_IN  0xD7
  69
  70/* Port-100 sub-command */
  71#define PORT100_FRAME_CMD(f) (f->data[1]) /* SCC */
  72
  73#define PORT100_CMD_GET_FIRMWARE_VERSION 0x20
  74#define PORT100_CMD_GET_COMMAND_TYPE     0x28
  75#define PORT100_CMD_SET_COMMAND_TYPE     0x2A
  76
  77#define PORT100_CMD_IN_SET_RF       0x00
  78#define PORT100_CMD_IN_SET_PROTOCOL 0x02
  79#define PORT100_CMD_IN_COMM_RF      0x04
  80
  81#define PORT100_CMD_TG_SET_RF       0x40
  82#define PORT100_CMD_TG_SET_PROTOCOL 0x42
  83#define PORT100_CMD_TG_SET_RF_OFF   0x46
  84#define PORT100_CMD_TG_COMM_RF      0x48
  85
  86#define PORT100_CMD_SWITCH_RF       0x06
  87
  88#define PORT100_CMD_RESPONSE(cmd) (cmd + 1)
  89
  90#define PORT100_CMD_TYPE_IS_SUPPORTED(mask, cmd_type) \
  91        ((mask) & (0x01 << (cmd_type)))
  92#define PORT100_CMD_TYPE_0      0
  93#define PORT100_CMD_TYPE_1      1
  94
  95#define PORT100_CMD_STATUS_OK      0x00
  96#define PORT100_CMD_STATUS_TIMEOUT 0x80
  97
  98#define PORT100_MDAA_TGT_HAS_BEEN_ACTIVATED_MASK 0x01
  99#define PORT100_MDAA_TGT_WAS_ACTIVATED_MASK      0x02
 100
 101struct port100;
 102
 103typedef void (*port100_send_async_complete_t)(struct port100 *dev, void *arg,
 104                                              struct sk_buff *resp);
 105
 106/**
 107 * Setting sets structure for in_set_rf command
 108 *
 109 * @in_*_set_number: Represent the entry indexes in the port-100 RF Base Table.
 110 *              This table contains multiple RF setting sets required for RF
 111 *              communication.
 112 *
 113 * @in_*_comm_type: Theses fields set the communication type to be used.
 114 */
 115struct port100_in_rf_setting {
 116        u8 in_send_set_number;
 117        u8 in_send_comm_type;
 118        u8 in_recv_set_number;
 119        u8 in_recv_comm_type;
 120} __packed;
 121
 122#define PORT100_COMM_TYPE_IN_212F 0x01
 123#define PORT100_COMM_TYPE_IN_424F 0x02
 124#define PORT100_COMM_TYPE_IN_106A 0x03
 125#define PORT100_COMM_TYPE_IN_106B 0x07
 126
 127static const struct port100_in_rf_setting in_rf_settings[] = {
 128        [NFC_DIGITAL_RF_TECH_212F] = {
 129                .in_send_set_number = 1,
 130                .in_send_comm_type  = PORT100_COMM_TYPE_IN_212F,
 131                .in_recv_set_number = 15,
 132                .in_recv_comm_type  = PORT100_COMM_TYPE_IN_212F,
 133        },
 134        [NFC_DIGITAL_RF_TECH_424F] = {
 135                .in_send_set_number = 1,
 136                .in_send_comm_type  = PORT100_COMM_TYPE_IN_424F,
 137                .in_recv_set_number = 15,
 138                .in_recv_comm_type  = PORT100_COMM_TYPE_IN_424F,
 139        },
 140        [NFC_DIGITAL_RF_TECH_106A] = {
 141                .in_send_set_number = 2,
 142                .in_send_comm_type  = PORT100_COMM_TYPE_IN_106A,
 143                .in_recv_set_number = 15,
 144                .in_recv_comm_type  = PORT100_COMM_TYPE_IN_106A,
 145        },
 146        [NFC_DIGITAL_RF_TECH_106B] = {
 147                .in_send_set_number = 3,
 148                .in_send_comm_type  = PORT100_COMM_TYPE_IN_106B,
 149                .in_recv_set_number = 15,
 150                .in_recv_comm_type  = PORT100_COMM_TYPE_IN_106B,
 151        },
 152        /* Ensures the array has NFC_DIGITAL_RF_TECH_LAST elements */
 153        [NFC_DIGITAL_RF_TECH_LAST] = { 0 },
 154};
 155
 156/**
 157 * Setting sets structure for tg_set_rf command
 158 *
 159 * @tg_set_number: Represents the entry index in the port-100 RF Base Table.
 160 *                 This table contains multiple RF setting sets required for RF
 161 *                 communication. this field is used for both send and receive
 162 *                 settings.
 163 *
 164 * @tg_comm_type: Sets the communication type to be used to send and receive
 165 *                data.
 166 */
 167struct port100_tg_rf_setting {
 168        u8 tg_set_number;
 169        u8 tg_comm_type;
 170} __packed;
 171
 172#define PORT100_COMM_TYPE_TG_106A 0x0B
 173#define PORT100_COMM_TYPE_TG_212F 0x0C
 174#define PORT100_COMM_TYPE_TG_424F 0x0D
 175
 176static const struct port100_tg_rf_setting tg_rf_settings[] = {
 177        [NFC_DIGITAL_RF_TECH_106A] = {
 178                .tg_set_number = 8,
 179                .tg_comm_type = PORT100_COMM_TYPE_TG_106A,
 180        },
 181        [NFC_DIGITAL_RF_TECH_212F] = {
 182                .tg_set_number = 8,
 183                .tg_comm_type = PORT100_COMM_TYPE_TG_212F,
 184        },
 185        [NFC_DIGITAL_RF_TECH_424F] = {
 186                .tg_set_number = 8,
 187                .tg_comm_type = PORT100_COMM_TYPE_TG_424F,
 188        },
 189        /* Ensures the array has NFC_DIGITAL_RF_TECH_LAST elements */
 190        [NFC_DIGITAL_RF_TECH_LAST] = { 0 },
 191
 192};
 193
 194#define PORT100_IN_PROT_INITIAL_GUARD_TIME      0x00
 195#define PORT100_IN_PROT_ADD_CRC                 0x01
 196#define PORT100_IN_PROT_CHECK_CRC               0x02
 197#define PORT100_IN_PROT_MULTI_CARD              0x03
 198#define PORT100_IN_PROT_ADD_PARITY              0x04
 199#define PORT100_IN_PROT_CHECK_PARITY            0x05
 200#define PORT100_IN_PROT_BITWISE_AC_RECV_MODE    0x06
 201#define PORT100_IN_PROT_VALID_BIT_NUMBER        0x07
 202#define PORT100_IN_PROT_CRYPTO1                 0x08
 203#define PORT100_IN_PROT_ADD_SOF                 0x09
 204#define PORT100_IN_PROT_CHECK_SOF               0x0A
 205#define PORT100_IN_PROT_ADD_EOF                 0x0B
 206#define PORT100_IN_PROT_CHECK_EOF               0x0C
 207#define PORT100_IN_PROT_DEAF_TIME               0x0E
 208#define PORT100_IN_PROT_CRM                     0x0F
 209#define PORT100_IN_PROT_CRM_MIN_LEN             0x10
 210#define PORT100_IN_PROT_T1_TAG_FRAME            0x11
 211#define PORT100_IN_PROT_RFCA                    0x12
 212#define PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR 0x13
 213#define PORT100_IN_PROT_END                     0x14
 214
 215#define PORT100_IN_MAX_NUM_PROTOCOLS            19
 216
 217#define PORT100_TG_PROT_TU           0x00
 218#define PORT100_TG_PROT_RF_OFF       0x01
 219#define PORT100_TG_PROT_CRM          0x02
 220#define PORT100_TG_PROT_END          0x03
 221
 222#define PORT100_TG_MAX_NUM_PROTOCOLS 3
 223
 224struct port100_protocol {
 225        u8 number;
 226        u8 value;
 227} __packed;
 228
 229static struct port100_protocol
 230in_protocols[][PORT100_IN_MAX_NUM_PROTOCOLS + 1] = {
 231        [NFC_DIGITAL_FRAMING_NFCA_SHORT] = {
 232                { PORT100_IN_PROT_INITIAL_GUARD_TIME,      6 },
 233                { PORT100_IN_PROT_ADD_CRC,                 0 },
 234                { PORT100_IN_PROT_CHECK_CRC,               0 },
 235                { PORT100_IN_PROT_MULTI_CARD,              0 },
 236                { PORT100_IN_PROT_ADD_PARITY,              0 },
 237                { PORT100_IN_PROT_CHECK_PARITY,            1 },
 238                { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
 239                { PORT100_IN_PROT_VALID_BIT_NUMBER,        7 },
 240                { PORT100_IN_PROT_CRYPTO1,                 0 },
 241                { PORT100_IN_PROT_ADD_SOF,                 0 },
 242                { PORT100_IN_PROT_CHECK_SOF,               0 },
 243                { PORT100_IN_PROT_ADD_EOF,                 0 },
 244                { PORT100_IN_PROT_CHECK_EOF,               0 },
 245                { PORT100_IN_PROT_DEAF_TIME,               4 },
 246                { PORT100_IN_PROT_CRM,                     0 },
 247                { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
 248                { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
 249                { PORT100_IN_PROT_RFCA,                    0 },
 250                { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
 251                { PORT100_IN_PROT_END,                     0 },
 252        },
 253        [NFC_DIGITAL_FRAMING_NFCA_STANDARD] = {
 254                { PORT100_IN_PROT_INITIAL_GUARD_TIME,      6 },
 255                { PORT100_IN_PROT_ADD_CRC,                 0 },
 256                { PORT100_IN_PROT_CHECK_CRC,               0 },
 257                { PORT100_IN_PROT_MULTI_CARD,              0 },
 258                { PORT100_IN_PROT_ADD_PARITY,              1 },
 259                { PORT100_IN_PROT_CHECK_PARITY,            1 },
 260                { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
 261                { PORT100_IN_PROT_VALID_BIT_NUMBER,        8 },
 262                { PORT100_IN_PROT_CRYPTO1,                 0 },
 263                { PORT100_IN_PROT_ADD_SOF,                 0 },
 264                { PORT100_IN_PROT_CHECK_SOF,               0 },
 265                { PORT100_IN_PROT_ADD_EOF,                 0 },
 266                { PORT100_IN_PROT_CHECK_EOF,               0 },
 267                { PORT100_IN_PROT_DEAF_TIME,               4 },
 268                { PORT100_IN_PROT_CRM,                     0 },
 269                { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
 270                { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
 271                { PORT100_IN_PROT_RFCA,                    0 },
 272                { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
 273                { PORT100_IN_PROT_END,                     0 },
 274        },
 275        [NFC_DIGITAL_FRAMING_NFCA_STANDARD_WITH_CRC_A] = {
 276                { PORT100_IN_PROT_INITIAL_GUARD_TIME,      6 },
 277                { PORT100_IN_PROT_ADD_CRC,                 1 },
 278                { PORT100_IN_PROT_CHECK_CRC,               1 },
 279                { PORT100_IN_PROT_MULTI_CARD,              0 },
 280                { PORT100_IN_PROT_ADD_PARITY,              1 },
 281                { PORT100_IN_PROT_CHECK_PARITY,            1 },
 282                { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
 283                { PORT100_IN_PROT_VALID_BIT_NUMBER,        8 },
 284                { PORT100_IN_PROT_CRYPTO1,                 0 },
 285                { PORT100_IN_PROT_ADD_SOF,                 0 },
 286                { PORT100_IN_PROT_CHECK_SOF,               0 },
 287                { PORT100_IN_PROT_ADD_EOF,                 0 },
 288                { PORT100_IN_PROT_CHECK_EOF,               0 },
 289                { PORT100_IN_PROT_DEAF_TIME,               4 },
 290                { PORT100_IN_PROT_CRM,                     0 },
 291                { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
 292                { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
 293                { PORT100_IN_PROT_RFCA,                    0 },
 294                { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
 295                { PORT100_IN_PROT_END,                     0 },
 296        },
 297        [NFC_DIGITAL_FRAMING_NFCA_T1T] = {
 298                /* nfc_digital_framing_nfca_short */
 299                { PORT100_IN_PROT_ADD_CRC,          2 },
 300                { PORT100_IN_PROT_CHECK_CRC,        2 },
 301                { PORT100_IN_PROT_VALID_BIT_NUMBER, 8 },
 302                { PORT100_IN_PROT_T1_TAG_FRAME,     2 },
 303                { PORT100_IN_PROT_END,              0 },
 304        },
 305        [NFC_DIGITAL_FRAMING_NFCA_T2T] = {
 306                /* nfc_digital_framing_nfca_standard */
 307                { PORT100_IN_PROT_ADD_CRC,   1 },
 308                { PORT100_IN_PROT_CHECK_CRC, 0 },
 309                { PORT100_IN_PROT_END,       0 },
 310        },
 311        [NFC_DIGITAL_FRAMING_NFCA_T4T] = {
 312                /* nfc_digital_framing_nfca_standard_with_crc_a */
 313                { PORT100_IN_PROT_END,       0 },
 314        },
 315        [NFC_DIGITAL_FRAMING_NFCA_NFC_DEP] = {
 316                /* nfc_digital_framing_nfca_standard */
 317                { PORT100_IN_PROT_END, 0 },
 318        },
 319        [NFC_DIGITAL_FRAMING_NFCF] = {
 320                { PORT100_IN_PROT_INITIAL_GUARD_TIME,     18 },
 321                { PORT100_IN_PROT_ADD_CRC,                 1 },
 322                { PORT100_IN_PROT_CHECK_CRC,               1 },
 323                { PORT100_IN_PROT_MULTI_CARD,              0 },
 324                { PORT100_IN_PROT_ADD_PARITY,              0 },
 325                { PORT100_IN_PROT_CHECK_PARITY,            0 },
 326                { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
 327                { PORT100_IN_PROT_VALID_BIT_NUMBER,        8 },
 328                { PORT100_IN_PROT_CRYPTO1,                 0 },
 329                { PORT100_IN_PROT_ADD_SOF,                 0 },
 330                { PORT100_IN_PROT_CHECK_SOF,               0 },
 331                { PORT100_IN_PROT_ADD_EOF,                 0 },
 332                { PORT100_IN_PROT_CHECK_EOF,               0 },
 333                { PORT100_IN_PROT_DEAF_TIME,               4 },
 334                { PORT100_IN_PROT_CRM,                     0 },
 335                { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
 336                { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
 337                { PORT100_IN_PROT_RFCA,                    0 },
 338                { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
 339                { PORT100_IN_PROT_END,                     0 },
 340        },
 341        [NFC_DIGITAL_FRAMING_NFCF_T3T] = {
 342                /* nfc_digital_framing_nfcf */
 343                { PORT100_IN_PROT_END, 0 },
 344        },
 345        [NFC_DIGITAL_FRAMING_NFCF_NFC_DEP] = {
 346                /* nfc_digital_framing_nfcf */
 347                { PORT100_IN_PROT_INITIAL_GUARD_TIME,     18 },
 348                { PORT100_IN_PROT_ADD_CRC,                 1 },
 349                { PORT100_IN_PROT_CHECK_CRC,               1 },
 350                { PORT100_IN_PROT_MULTI_CARD,              0 },
 351                { PORT100_IN_PROT_ADD_PARITY,              0 },
 352                { PORT100_IN_PROT_CHECK_PARITY,            0 },
 353                { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
 354                { PORT100_IN_PROT_VALID_BIT_NUMBER,        8 },
 355                { PORT100_IN_PROT_CRYPTO1,                 0 },
 356                { PORT100_IN_PROT_ADD_SOF,                 0 },
 357                { PORT100_IN_PROT_CHECK_SOF,               0 },
 358                { PORT100_IN_PROT_ADD_EOF,                 0 },
 359                { PORT100_IN_PROT_CHECK_EOF,               0 },
 360                { PORT100_IN_PROT_DEAF_TIME,               4 },
 361                { PORT100_IN_PROT_CRM,                     0 },
 362                { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
 363                { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
 364                { PORT100_IN_PROT_RFCA,                    0 },
 365                { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
 366                { PORT100_IN_PROT_END,                     0 },
 367        },
 368        [NFC_DIGITAL_FRAMING_NFC_DEP_ACTIVATED] = {
 369                { PORT100_IN_PROT_END, 0 },
 370        },
 371        [NFC_DIGITAL_FRAMING_NFCB] = {
 372                { PORT100_IN_PROT_INITIAL_GUARD_TIME,     20 },
 373                { PORT100_IN_PROT_ADD_CRC,                 1 },
 374                { PORT100_IN_PROT_CHECK_CRC,               1 },
 375                { PORT100_IN_PROT_MULTI_CARD,              0 },
 376                { PORT100_IN_PROT_ADD_PARITY,              0 },
 377                { PORT100_IN_PROT_CHECK_PARITY,            0 },
 378                { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
 379                { PORT100_IN_PROT_VALID_BIT_NUMBER,        8 },
 380                { PORT100_IN_PROT_CRYPTO1,                 0 },
 381                { PORT100_IN_PROT_ADD_SOF,                 1 },
 382                { PORT100_IN_PROT_CHECK_SOF,               1 },
 383                { PORT100_IN_PROT_ADD_EOF,                 1 },
 384                { PORT100_IN_PROT_CHECK_EOF,               1 },
 385                { PORT100_IN_PROT_DEAF_TIME,               4 },
 386                { PORT100_IN_PROT_CRM,                     0 },
 387                { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
 388                { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
 389                { PORT100_IN_PROT_RFCA,                    0 },
 390                { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
 391                { PORT100_IN_PROT_END,                     0 },
 392        },
 393        [NFC_DIGITAL_FRAMING_NFCB_T4T] = {
 394                /* nfc_digital_framing_nfcb */
 395                { PORT100_IN_PROT_END,                     0 },
 396        },
 397        /* Ensures the array has NFC_DIGITAL_FRAMING_LAST elements */
 398        [NFC_DIGITAL_FRAMING_LAST] = {
 399                { PORT100_IN_PROT_END, 0 },
 400        },
 401};
 402
 403static struct port100_protocol
 404tg_protocols[][PORT100_TG_MAX_NUM_PROTOCOLS + 1] = {
 405        [NFC_DIGITAL_FRAMING_NFCA_SHORT] = {
 406                { PORT100_TG_PROT_END, 0 },
 407        },
 408        [NFC_DIGITAL_FRAMING_NFCA_STANDARD] = {
 409                { PORT100_TG_PROT_END, 0 },
 410        },
 411        [NFC_DIGITAL_FRAMING_NFCA_STANDARD_WITH_CRC_A] = {
 412                { PORT100_TG_PROT_END, 0 },
 413        },
 414        [NFC_DIGITAL_FRAMING_NFCA_T1T] = {
 415                { PORT100_TG_PROT_END, 0 },
 416        },
 417        [NFC_DIGITAL_FRAMING_NFCA_T2T] = {
 418                { PORT100_TG_PROT_END, 0 },
 419        },
 420        [NFC_DIGITAL_FRAMING_NFCA_NFC_DEP] = {
 421                { PORT100_TG_PROT_TU,     1 },
 422                { PORT100_TG_PROT_RF_OFF, 0 },
 423                { PORT100_TG_PROT_CRM,    7 },
 424                { PORT100_TG_PROT_END,    0 },
 425        },
 426        [NFC_DIGITAL_FRAMING_NFCF] = {
 427                { PORT100_TG_PROT_END, 0 },
 428        },
 429        [NFC_DIGITAL_FRAMING_NFCF_T3T] = {
 430                { PORT100_TG_PROT_END, 0 },
 431        },
 432        [NFC_DIGITAL_FRAMING_NFCF_NFC_DEP] = {
 433                { PORT100_TG_PROT_TU,     1 },
 434                { PORT100_TG_PROT_RF_OFF, 0 },
 435                { PORT100_TG_PROT_CRM,    7 },
 436                { PORT100_TG_PROT_END,    0 },
 437        },
 438        [NFC_DIGITAL_FRAMING_NFC_DEP_ACTIVATED] = {
 439                { PORT100_TG_PROT_RF_OFF, 1 },
 440                { PORT100_TG_PROT_END,    0 },
 441        },
 442        /* Ensures the array has NFC_DIGITAL_FRAMING_LAST elements */
 443        [NFC_DIGITAL_FRAMING_LAST] = {
 444                { PORT100_TG_PROT_END,    0 },
 445        },
 446};
 447
 448struct port100 {
 449        struct nfc_digital_dev *nfc_digital_dev;
 450
 451        int skb_headroom;
 452        int skb_tailroom;
 453
 454        struct usb_device *udev;
 455        struct usb_interface *interface;
 456
 457        struct urb *out_urb;
 458        struct urb *in_urb;
 459
 460        /* This mutex protects the out_urb and avoids to submit a new command
 461         * through port100_send_frame_async() while the previous one is being
 462         * canceled through port100_abort_cmd().
 463         */
 464        struct mutex out_urb_lock;
 465
 466        struct work_struct cmd_complete_work;
 467
 468        u8 cmd_type;
 469
 470        /* The digital stack serializes commands to be sent. There is no need
 471         * for any queuing/locking mechanism at driver level.
 472         */
 473        struct port100_cmd *cmd;
 474
 475        bool cmd_cancel;
 476        struct completion cmd_cancel_done;
 477};
 478
 479struct port100_cmd {
 480        u8 code;
 481        int status;
 482        struct sk_buff *req;
 483        struct sk_buff *resp;
 484        int resp_len;
 485        port100_send_async_complete_t  complete_cb;
 486        void *complete_cb_context;
 487};
 488
 489struct port100_frame {
 490        u8 preamble;
 491        __be16 start_frame;
 492        __be16 extended_frame;
 493        __le16 datalen;
 494        u8 datalen_checksum;
 495        u8 data[];
 496} __packed;
 497
 498struct port100_ack_frame {
 499        u8 preamble;
 500        __be16 start_frame;
 501        __be16 ack_frame;
 502        u8 postambule;
 503} __packed;
 504
 505struct port100_cb_arg {
 506        nfc_digital_cmd_complete_t complete_cb;
 507        void *complete_arg;
 508        u8 mdaa;
 509};
 510
 511struct port100_tg_comm_rf_cmd {
 512        __le16 guard_time;
 513        __le16 send_timeout;
 514        u8 mdaa;
 515        u8 nfca_param[6];
 516        u8 nfcf_param[18];
 517        u8 mf_halted;
 518        u8 arae_flag;
 519        __le16 recv_timeout;
 520        u8 data[];
 521} __packed;
 522
 523struct port100_tg_comm_rf_res {
 524        u8 comm_type;
 525        u8 ar_status;
 526        u8 target_activated;
 527        __le32 status;
 528        u8 data[];
 529} __packed;
 530
 531/* The rule: value + checksum = 0 */
 532static inline u8 port100_checksum(u16 value)
 533{
 534        return ~(((u8 *)&value)[0] + ((u8 *)&value)[1]) + 1;
 535}
 536
 537/* The rule: sum(data elements) + checksum = 0 */
 538static u8 port100_data_checksum(u8 *data, int datalen)
 539{
 540        u8 sum = 0;
 541        int i;
 542
 543        for (i = 0; i < datalen; i++)
 544                sum += data[i];
 545
 546        return port100_checksum(sum);
 547}
 548
 549static void port100_tx_frame_init(void *_frame, u8 cmd_code)
 550{
 551        struct port100_frame *frame = _frame;
 552
 553        frame->preamble = 0;
 554        frame->start_frame = cpu_to_be16(PORT100_FRAME_SOF);
 555        frame->extended_frame = cpu_to_be16(PORT100_FRAME_EXT);
 556        PORT100_FRAME_DIRECTION(frame) = PORT100_FRAME_DIR_OUT;
 557        PORT100_FRAME_CMD(frame) = cmd_code;
 558        frame->datalen = cpu_to_le16(2);
 559}
 560
 561static void port100_tx_frame_finish(void *_frame)
 562{
 563        struct port100_frame *frame = _frame;
 564
 565        frame->datalen_checksum = port100_checksum(le16_to_cpu(frame->datalen));
 566
 567        PORT100_FRAME_CHECKSUM(frame) =
 568                port100_data_checksum(frame->data, le16_to_cpu(frame->datalen));
 569
 570        PORT100_FRAME_POSTAMBLE(frame) = 0;
 571}
 572
 573static void port100_tx_update_payload_len(void *_frame, int len)
 574{
 575        struct port100_frame *frame = _frame;
 576
 577        frame->datalen = cpu_to_le16(le16_to_cpu(frame->datalen) + len);
 578}
 579
 580static bool port100_rx_frame_is_valid(void *_frame)
 581{
 582        u8 checksum;
 583        struct port100_frame *frame = _frame;
 584
 585        if (frame->start_frame != cpu_to_be16(PORT100_FRAME_SOF) ||
 586            frame->extended_frame != cpu_to_be16(PORT100_FRAME_EXT))
 587                return false;
 588
 589        checksum = port100_checksum(le16_to_cpu(frame->datalen));
 590        if (checksum != frame->datalen_checksum)
 591                return false;
 592
 593        checksum = port100_data_checksum(frame->data,
 594                                         le16_to_cpu(frame->datalen));
 595        if (checksum != PORT100_FRAME_CHECKSUM(frame))
 596                return false;
 597
 598        return true;
 599}
 600
 601static bool port100_rx_frame_is_ack(struct port100_ack_frame *frame)
 602{
 603        return (frame->start_frame == cpu_to_be16(PORT100_FRAME_SOF) &&
 604                frame->ack_frame == cpu_to_be16(PORT100_FRAME_ACK));
 605}
 606
 607static inline int port100_rx_frame_size(void *frame)
 608{
 609        struct port100_frame *f = frame;
 610
 611        return sizeof(struct port100_frame) + le16_to_cpu(f->datalen) +
 612               PORT100_FRAME_TAIL_LEN;
 613}
 614
 615static bool port100_rx_frame_is_cmd_response(struct port100 *dev, void *frame)
 616{
 617        struct port100_frame *f = frame;
 618
 619        return (PORT100_FRAME_CMD(f) == PORT100_CMD_RESPONSE(dev->cmd->code));
 620}
 621
 622static void port100_recv_response(struct urb *urb)
 623{
 624        struct port100 *dev = urb->context;
 625        struct port100_cmd *cmd = dev->cmd;
 626        u8 *in_frame;
 627
 628        cmd->status = urb->status;
 629
 630        switch (urb->status) {
 631        case 0:
 632                break; /* success */
 633        case -ECONNRESET:
 634        case -ENOENT:
 635                nfc_err(&dev->interface->dev,
 636                        "The urb has been canceled (status %d)\n", urb->status);
 637                goto sched_wq;
 638        case -ESHUTDOWN:
 639        default:
 640                nfc_err(&dev->interface->dev, "Urb failure (status %d)\n",
 641                        urb->status);
 642                goto sched_wq;
 643        }
 644
 645        in_frame = dev->in_urb->transfer_buffer;
 646
 647        if (!port100_rx_frame_is_valid(in_frame)) {
 648                nfc_err(&dev->interface->dev, "Received an invalid frame\n");
 649                cmd->status = -EIO;
 650                goto sched_wq;
 651        }
 652
 653        print_hex_dump_debug("PORT100 RX: ", DUMP_PREFIX_NONE, 16, 1, in_frame,
 654                             port100_rx_frame_size(in_frame), false);
 655
 656        if (!port100_rx_frame_is_cmd_response(dev, in_frame)) {
 657                nfc_err(&dev->interface->dev,
 658                        "It's not the response to the last command\n");
 659                cmd->status = -EIO;
 660                goto sched_wq;
 661        }
 662
 663sched_wq:
 664        schedule_work(&dev->cmd_complete_work);
 665}
 666
 667static int port100_submit_urb_for_response(struct port100 *dev, gfp_t flags)
 668{
 669        dev->in_urb->complete = port100_recv_response;
 670
 671        return usb_submit_urb(dev->in_urb, flags);
 672}
 673
 674static void port100_recv_ack(struct urb *urb)
 675{
 676        struct port100 *dev = urb->context;
 677        struct port100_cmd *cmd = dev->cmd;
 678        struct port100_ack_frame *in_frame;
 679        int rc;
 680
 681        cmd->status = urb->status;
 682
 683        switch (urb->status) {
 684        case 0:
 685                break; /* success */
 686        case -ECONNRESET:
 687        case -ENOENT:
 688                nfc_err(&dev->interface->dev,
 689                        "The urb has been stopped (status %d)\n", urb->status);
 690                goto sched_wq;
 691        case -ESHUTDOWN:
 692        default:
 693                nfc_err(&dev->interface->dev, "Urb failure (status %d)\n",
 694                        urb->status);
 695                goto sched_wq;
 696        }
 697
 698        in_frame = dev->in_urb->transfer_buffer;
 699
 700        if (!port100_rx_frame_is_ack(in_frame)) {
 701                nfc_err(&dev->interface->dev, "Received an invalid ack\n");
 702                cmd->status = -EIO;
 703                goto sched_wq;
 704        }
 705
 706        rc = port100_submit_urb_for_response(dev, GFP_ATOMIC);
 707        if (rc) {
 708                nfc_err(&dev->interface->dev,
 709                        "usb_submit_urb failed with result %d\n", rc);
 710                cmd->status = rc;
 711                goto sched_wq;
 712        }
 713
 714        return;
 715
 716sched_wq:
 717        schedule_work(&dev->cmd_complete_work);
 718}
 719
 720static int port100_submit_urb_for_ack(struct port100 *dev, gfp_t flags)
 721{
 722        dev->in_urb->complete = port100_recv_ack;
 723
 724        return usb_submit_urb(dev->in_urb, flags);
 725}
 726
 727static int port100_send_ack(struct port100 *dev)
 728{
 729        int rc = 0;
 730
 731        mutex_lock(&dev->out_urb_lock);
 732
 733        /*
 734         * If prior cancel is in-flight (dev->cmd_cancel == true), we
 735         * can skip to send cancel. Then this will wait the prior
 736         * cancel, or merged into the next cancel rarely if next
 737         * cancel was started before waiting done. In any case, this
 738         * will be waked up soon or later.
 739         */
 740        if (!dev->cmd_cancel) {
 741                reinit_completion(&dev->cmd_cancel_done);
 742
 743                usb_kill_urb(dev->out_urb);
 744
 745                dev->out_urb->transfer_buffer = ack_frame;
 746                dev->out_urb->transfer_buffer_length = sizeof(ack_frame);
 747                rc = usb_submit_urb(dev->out_urb, GFP_KERNEL);
 748
 749                /*
 750                 * Set the cmd_cancel flag only if the URB has been
 751                 * successfully submitted. It will be reset by the out
 752                 * URB completion callback port100_send_complete().
 753                 */
 754                dev->cmd_cancel = !rc;
 755        }
 756
 757        mutex_unlock(&dev->out_urb_lock);
 758
 759        if (!rc)
 760                wait_for_completion(&dev->cmd_cancel_done);
 761
 762        return rc;
 763}
 764
 765static int port100_send_frame_async(struct port100 *dev, struct sk_buff *out,
 766                                    struct sk_buff *in, int in_len)
 767{
 768        int rc;
 769
 770        mutex_lock(&dev->out_urb_lock);
 771
 772        /* A command cancel frame as been sent through dev->out_urb. Don't try
 773         * to submit a new one.
 774         */
 775        if (dev->cmd_cancel) {
 776                rc = -EAGAIN;
 777                goto exit;
 778        }
 779
 780        dev->out_urb->transfer_buffer = out->data;
 781        dev->out_urb->transfer_buffer_length = out->len;
 782
 783        dev->in_urb->transfer_buffer = in->data;
 784        dev->in_urb->transfer_buffer_length = in_len;
 785
 786        print_hex_dump_debug("PORT100 TX: ", DUMP_PREFIX_NONE, 16, 1,
 787                             out->data, out->len, false);
 788
 789        rc = usb_submit_urb(dev->out_urb, GFP_KERNEL);
 790        if (rc)
 791                goto exit;
 792
 793        rc = port100_submit_urb_for_ack(dev, GFP_KERNEL);
 794        if (rc)
 795                usb_unlink_urb(dev->out_urb);
 796
 797exit:
 798        mutex_unlock(&dev->out_urb_lock);
 799
 800        return rc;
 801}
 802
 803static void port100_build_cmd_frame(struct port100 *dev, u8 cmd_code,
 804                                    struct sk_buff *skb)
 805{
 806        /* payload is already there, just update datalen */
 807        int payload_len = skb->len;
 808
 809        skb_push(skb, PORT100_FRAME_HEADER_LEN);
 810        skb_put(skb, PORT100_FRAME_TAIL_LEN);
 811
 812        port100_tx_frame_init(skb->data, cmd_code);
 813        port100_tx_update_payload_len(skb->data, payload_len);
 814        port100_tx_frame_finish(skb->data);
 815}
 816
 817static void port100_send_async_complete(struct port100 *dev)
 818{
 819        struct port100_cmd *cmd = dev->cmd;
 820        int status = cmd->status;
 821
 822        struct sk_buff *req = cmd->req;
 823        struct sk_buff *resp = cmd->resp;
 824
 825        dev_kfree_skb(req);
 826
 827        dev->cmd = NULL;
 828
 829        if (status < 0) {
 830                cmd->complete_cb(dev, cmd->complete_cb_context,
 831                                 ERR_PTR(status));
 832                dev_kfree_skb(resp);
 833                goto done;
 834        }
 835
 836        skb_put(resp, port100_rx_frame_size(resp->data));
 837        skb_pull(resp, PORT100_FRAME_HEADER_LEN);
 838        skb_trim(resp, resp->len - PORT100_FRAME_TAIL_LEN);
 839
 840        cmd->complete_cb(dev, cmd->complete_cb_context, resp);
 841
 842done:
 843        kfree(cmd);
 844}
 845
 846static int port100_send_cmd_async(struct port100 *dev, u8 cmd_code,
 847                                struct sk_buff *req,
 848                                port100_send_async_complete_t complete_cb,
 849                                void *complete_cb_context)
 850{
 851        struct port100_cmd *cmd;
 852        struct sk_buff *resp;
 853        int rc;
 854        int  resp_len = PORT100_FRAME_HEADER_LEN +
 855                        PORT100_FRAME_MAX_PAYLOAD_LEN +
 856                        PORT100_FRAME_TAIL_LEN;
 857
 858        if (dev->cmd) {
 859                nfc_err(&dev->interface->dev,
 860                        "A command is still in process\n");
 861                return -EBUSY;
 862        }
 863
 864        resp = alloc_skb(resp_len, GFP_KERNEL);
 865        if (!resp)
 866                return -ENOMEM;
 867
 868        cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
 869        if (!cmd) {
 870                dev_kfree_skb(resp);
 871                return -ENOMEM;
 872        }
 873
 874        cmd->code = cmd_code;
 875        cmd->req = req;
 876        cmd->resp = resp;
 877        cmd->resp_len = resp_len;
 878        cmd->complete_cb = complete_cb;
 879        cmd->complete_cb_context = complete_cb_context;
 880
 881        port100_build_cmd_frame(dev, cmd_code, req);
 882
 883        dev->cmd = cmd;
 884
 885        rc = port100_send_frame_async(dev, req, resp, resp_len);
 886        if (rc) {
 887                kfree(cmd);
 888                dev_kfree_skb(resp);
 889                dev->cmd = NULL;
 890        }
 891
 892        return rc;
 893}
 894
 895struct port100_sync_cmd_response {
 896        struct sk_buff *resp;
 897        struct completion done;
 898};
 899
 900static void port100_wq_cmd_complete(struct work_struct *work)
 901{
 902        struct port100 *dev = container_of(work, struct port100,
 903                                           cmd_complete_work);
 904
 905        port100_send_async_complete(dev);
 906}
 907
 908static void port100_send_sync_complete(struct port100 *dev, void *_arg,
 909                                      struct sk_buff *resp)
 910{
 911        struct port100_sync_cmd_response *arg = _arg;
 912
 913        arg->resp = resp;
 914        complete(&arg->done);
 915}
 916
 917static struct sk_buff *port100_send_cmd_sync(struct port100 *dev, u8 cmd_code,
 918                                             struct sk_buff *req)
 919{
 920        int rc;
 921        struct port100_sync_cmd_response arg;
 922
 923        init_completion(&arg.done);
 924
 925        rc = port100_send_cmd_async(dev, cmd_code, req,
 926                                    port100_send_sync_complete, &arg);
 927        if (rc) {
 928                dev_kfree_skb(req);
 929                return ERR_PTR(rc);
 930        }
 931
 932        wait_for_completion(&arg.done);
 933
 934        return arg.resp;
 935}
 936
 937static void port100_send_complete(struct urb *urb)
 938{
 939        struct port100 *dev = urb->context;
 940
 941        if (dev->cmd_cancel) {
 942                complete_all(&dev->cmd_cancel_done);
 943                dev->cmd_cancel = false;
 944        }
 945
 946        switch (urb->status) {
 947        case 0:
 948                break; /* success */
 949        case -ECONNRESET:
 950        case -ENOENT:
 951                nfc_err(&dev->interface->dev,
 952                        "The urb has been stopped (status %d)\n", urb->status);
 953                break;
 954        case -ESHUTDOWN:
 955        default:
 956                nfc_err(&dev->interface->dev, "Urb failure (status %d)\n",
 957                        urb->status);
 958        }
 959}
 960
 961static void port100_abort_cmd(struct nfc_digital_dev *ddev)
 962{
 963        struct port100 *dev = nfc_digital_get_drvdata(ddev);
 964
 965        /* An ack will cancel the last issued command */
 966        port100_send_ack(dev);
 967
 968        /* cancel the urb request */
 969        usb_kill_urb(dev->in_urb);
 970}
 971
 972static struct sk_buff *port100_alloc_skb(struct port100 *dev, unsigned int size)
 973{
 974        struct sk_buff *skb;
 975
 976        skb = alloc_skb(dev->skb_headroom + dev->skb_tailroom + size,
 977                        GFP_KERNEL);
 978        if (skb)
 979                skb_reserve(skb, dev->skb_headroom);
 980
 981        return skb;
 982}
 983
 984static int port100_set_command_type(struct port100 *dev, u8 command_type)
 985{
 986        struct sk_buff *skb;
 987        struct sk_buff *resp;
 988        int rc;
 989
 990        skb = port100_alloc_skb(dev, 1);
 991        if (!skb)
 992                return -ENOMEM;
 993
 994        skb_put_u8(skb, command_type);
 995
 996        resp = port100_send_cmd_sync(dev, PORT100_CMD_SET_COMMAND_TYPE, skb);
 997        if (IS_ERR(resp))
 998                return PTR_ERR(resp);
 999
1000        rc = resp->data[0];
1001
1002        dev_kfree_skb(resp);
1003
1004        return rc;
1005}
1006
1007static u64 port100_get_command_type_mask(struct port100 *dev)
1008{
1009        struct sk_buff *skb;
1010        struct sk_buff *resp;
1011        u64 mask;
1012
1013        skb = port100_alloc_skb(dev, 0);
1014        if (!skb)
1015                return -ENOMEM;
1016
1017        resp = port100_send_cmd_sync(dev, PORT100_CMD_GET_COMMAND_TYPE, skb);
1018        if (IS_ERR(resp))
1019                return PTR_ERR(resp);
1020
1021        if (resp->len < 8)
1022                mask = 0;
1023        else
1024                mask = be64_to_cpu(*(__be64 *)resp->data);
1025
1026        dev_kfree_skb(resp);
1027
1028        return mask;
1029}
1030
1031static u16 port100_get_firmware_version(struct port100 *dev)
1032{
1033        struct sk_buff *skb;
1034        struct sk_buff *resp;
1035        u16 fw_ver;
1036
1037        skb = port100_alloc_skb(dev, 0);
1038        if (!skb)
1039                return 0;
1040
1041        resp = port100_send_cmd_sync(dev, PORT100_CMD_GET_FIRMWARE_VERSION,
1042                                     skb);
1043        if (IS_ERR(resp))
1044                return 0;
1045
1046        fw_ver = le16_to_cpu(*(__le16 *)resp->data);
1047
1048        dev_kfree_skb(resp);
1049
1050        return fw_ver;
1051}
1052
1053static int port100_switch_rf(struct nfc_digital_dev *ddev, bool on)
1054{
1055        struct port100 *dev = nfc_digital_get_drvdata(ddev);
1056        struct sk_buff *skb, *resp;
1057
1058        skb = port100_alloc_skb(dev, 1);
1059        if (!skb)
1060                return -ENOMEM;
1061
1062        skb_put_u8(skb, on ? 1 : 0);
1063
1064        /* Cancel the last command if the device is being switched off */
1065        if (!on)
1066                port100_abort_cmd(ddev);
1067
1068        resp = port100_send_cmd_sync(dev, PORT100_CMD_SWITCH_RF, skb);
1069
1070        if (IS_ERR(resp))
1071                return PTR_ERR(resp);
1072
1073        dev_kfree_skb(resp);
1074
1075        return 0;
1076}
1077
1078static int port100_in_set_rf(struct nfc_digital_dev *ddev, u8 rf)
1079{
1080        struct port100 *dev = nfc_digital_get_drvdata(ddev);
1081        struct sk_buff *skb;
1082        struct sk_buff *resp;
1083        int rc;
1084
1085        if (rf >= NFC_DIGITAL_RF_TECH_LAST)
1086                return -EINVAL;
1087
1088        skb = port100_alloc_skb(dev, sizeof(struct port100_in_rf_setting));
1089        if (!skb)
1090                return -ENOMEM;
1091
1092        skb_put_data(skb, &in_rf_settings[rf],
1093                     sizeof(struct port100_in_rf_setting));
1094
1095        resp = port100_send_cmd_sync(dev, PORT100_CMD_IN_SET_RF, skb);
1096
1097        if (IS_ERR(resp))
1098                return PTR_ERR(resp);
1099
1100        rc = resp->data[0];
1101
1102        dev_kfree_skb(resp);
1103
1104        return rc;
1105}
1106
1107static int port100_in_set_framing(struct nfc_digital_dev *ddev, int param)
1108{
1109        struct port100 *dev = nfc_digital_get_drvdata(ddev);
1110        struct port100_protocol *protocols;
1111        struct sk_buff *skb;
1112        struct sk_buff *resp;
1113        int num_protocols;
1114        size_t size;
1115        int rc;
1116
1117        if (param >= NFC_DIGITAL_FRAMING_LAST)
1118                return -EINVAL;
1119
1120        protocols = in_protocols[param];
1121
1122        num_protocols = 0;
1123        while (protocols[num_protocols].number != PORT100_IN_PROT_END)
1124                num_protocols++;
1125
1126        if (!num_protocols)
1127                return 0;
1128
1129        size = sizeof(struct port100_protocol) * num_protocols;
1130
1131        skb = port100_alloc_skb(dev, size);
1132        if (!skb)
1133                return -ENOMEM;
1134
1135        skb_put_data(skb, protocols, size);
1136
1137        resp = port100_send_cmd_sync(dev, PORT100_CMD_IN_SET_PROTOCOL, skb);
1138
1139        if (IS_ERR(resp))
1140                return PTR_ERR(resp);
1141
1142        rc = resp->data[0];
1143
1144        dev_kfree_skb(resp);
1145
1146        return rc;
1147}
1148
1149static int port100_in_configure_hw(struct nfc_digital_dev *ddev, int type,
1150                                   int param)
1151{
1152        if (type == NFC_DIGITAL_CONFIG_RF_TECH)
1153                return port100_in_set_rf(ddev, param);
1154
1155        if (type == NFC_DIGITAL_CONFIG_FRAMING)
1156                return port100_in_set_framing(ddev, param);
1157
1158        return -EINVAL;
1159}
1160
1161static void port100_in_comm_rf_complete(struct port100 *dev, void *arg,
1162                                       struct sk_buff *resp)
1163{
1164        struct port100_cb_arg *cb_arg = arg;
1165        nfc_digital_cmd_complete_t cb = cb_arg->complete_cb;
1166        u32 status;
1167        int rc;
1168
1169        if (IS_ERR(resp)) {
1170                rc =  PTR_ERR(resp);
1171                goto exit;
1172        }
1173
1174        if (resp->len < 4) {
1175                nfc_err(&dev->interface->dev,
1176                        "Invalid packet length received\n");
1177                rc = -EIO;
1178                goto error;
1179        }
1180
1181        status = le32_to_cpu(*(__le32 *)resp->data);
1182
1183        skb_pull(resp, sizeof(u32));
1184
1185        if (status == PORT100_CMD_STATUS_TIMEOUT) {
1186                rc = -ETIMEDOUT;
1187                goto error;
1188        }
1189
1190        if (status != PORT100_CMD_STATUS_OK) {
1191                nfc_err(&dev->interface->dev,
1192                        "in_comm_rf failed with status 0x%08x\n", status);
1193                rc = -EIO;
1194                goto error;
1195        }
1196
1197        /* Remove collision bits byte */
1198        skb_pull(resp, 1);
1199
1200        goto exit;
1201
1202error:
1203        kfree_skb(resp);
1204        resp = ERR_PTR(rc);
1205
1206exit:
1207        cb(dev->nfc_digital_dev, cb_arg->complete_arg, resp);
1208
1209        kfree(cb_arg);
1210}
1211
1212static int port100_in_send_cmd(struct nfc_digital_dev *ddev,
1213                               struct sk_buff *skb, u16 _timeout,
1214                               nfc_digital_cmd_complete_t cb, void *arg)
1215{
1216        struct port100 *dev = nfc_digital_get_drvdata(ddev);
1217        struct port100_cb_arg *cb_arg;
1218        __le16 timeout;
1219
1220        cb_arg = kzalloc(sizeof(struct port100_cb_arg), GFP_KERNEL);
1221        if (!cb_arg)
1222                return -ENOMEM;
1223
1224        cb_arg->complete_cb = cb;
1225        cb_arg->complete_arg = arg;
1226
1227        timeout = cpu_to_le16(_timeout * 10);
1228
1229        memcpy(skb_push(skb, sizeof(__le16)), &timeout, sizeof(__le16));
1230
1231        return port100_send_cmd_async(dev, PORT100_CMD_IN_COMM_RF, skb,
1232                                      port100_in_comm_rf_complete, cb_arg);
1233}
1234
1235static int port100_tg_set_rf(struct nfc_digital_dev *ddev, u8 rf)
1236{
1237        struct port100 *dev = nfc_digital_get_drvdata(ddev);
1238        struct sk_buff *skb;
1239        struct sk_buff *resp;
1240        int rc;
1241
1242        if (rf >= NFC_DIGITAL_RF_TECH_LAST)
1243                return -EINVAL;
1244
1245        skb = port100_alloc_skb(dev, sizeof(struct port100_tg_rf_setting));
1246        if (!skb)
1247                return -ENOMEM;
1248
1249        skb_put_data(skb, &tg_rf_settings[rf],
1250                     sizeof(struct port100_tg_rf_setting));
1251
1252        resp = port100_send_cmd_sync(dev, PORT100_CMD_TG_SET_RF, skb);
1253
1254        if (IS_ERR(resp))
1255                return PTR_ERR(resp);
1256
1257        rc = resp->data[0];
1258
1259        dev_kfree_skb(resp);
1260
1261        return rc;
1262}
1263
1264static int port100_tg_set_framing(struct nfc_digital_dev *ddev, int param)
1265{
1266        struct port100 *dev = nfc_digital_get_drvdata(ddev);
1267        struct port100_protocol *protocols;
1268        struct sk_buff *skb;
1269        struct sk_buff *resp;
1270        int rc;
1271        int num_protocols;
1272        size_t size;
1273
1274        if (param >= NFC_DIGITAL_FRAMING_LAST)
1275                return -EINVAL;
1276
1277        protocols = tg_protocols[param];
1278
1279        num_protocols = 0;
1280        while (protocols[num_protocols].number != PORT100_TG_PROT_END)
1281                num_protocols++;
1282
1283        if (!num_protocols)
1284                return 0;
1285
1286        size = sizeof(struct port100_protocol) * num_protocols;
1287
1288        skb = port100_alloc_skb(dev, size);
1289        if (!skb)
1290                return -ENOMEM;
1291
1292        skb_put_data(skb, protocols, size);
1293
1294        resp = port100_send_cmd_sync(dev, PORT100_CMD_TG_SET_PROTOCOL, skb);
1295
1296        if (IS_ERR(resp))
1297                return PTR_ERR(resp);
1298
1299        rc = resp->data[0];
1300
1301        dev_kfree_skb(resp);
1302
1303        return rc;
1304}
1305
1306static int port100_tg_configure_hw(struct nfc_digital_dev *ddev, int type,
1307                                   int param)
1308{
1309        if (type == NFC_DIGITAL_CONFIG_RF_TECH)
1310                return port100_tg_set_rf(ddev, param);
1311
1312        if (type == NFC_DIGITAL_CONFIG_FRAMING)
1313                return port100_tg_set_framing(ddev, param);
1314
1315        return -EINVAL;
1316}
1317
1318static bool port100_tg_target_activated(struct port100 *dev, u8 tgt_activated)
1319{
1320        u8 mask;
1321
1322        switch (dev->cmd_type) {
1323        case PORT100_CMD_TYPE_0:
1324                mask = PORT100_MDAA_TGT_HAS_BEEN_ACTIVATED_MASK;
1325                break;
1326        case PORT100_CMD_TYPE_1:
1327                mask = PORT100_MDAA_TGT_HAS_BEEN_ACTIVATED_MASK |
1328                       PORT100_MDAA_TGT_WAS_ACTIVATED_MASK;
1329                break;
1330        default:
1331                nfc_err(&dev->interface->dev, "Unknown command type\n");
1332                return false;
1333        }
1334
1335        return ((tgt_activated & mask) == mask);
1336}
1337
1338static void port100_tg_comm_rf_complete(struct port100 *dev, void *arg,
1339                                        struct sk_buff *resp)
1340{
1341        u32 status;
1342        struct port100_cb_arg *cb_arg = arg;
1343        nfc_digital_cmd_complete_t cb = cb_arg->complete_cb;
1344        struct port100_tg_comm_rf_res *hdr;
1345
1346        if (IS_ERR(resp))
1347                goto exit;
1348
1349        hdr = (struct port100_tg_comm_rf_res *)resp->data;
1350
1351        status = le32_to_cpu(hdr->status);
1352
1353        if (cb_arg->mdaa &&
1354            !port100_tg_target_activated(dev, hdr->target_activated)) {
1355                kfree_skb(resp);
1356                resp = ERR_PTR(-ETIMEDOUT);
1357
1358                goto exit;
1359        }
1360
1361        skb_pull(resp, sizeof(struct port100_tg_comm_rf_res));
1362
1363        if (status != PORT100_CMD_STATUS_OK) {
1364                kfree_skb(resp);
1365
1366                if (status == PORT100_CMD_STATUS_TIMEOUT)
1367                        resp = ERR_PTR(-ETIMEDOUT);
1368                else
1369                        resp = ERR_PTR(-EIO);
1370        }
1371
1372exit:
1373        cb(dev->nfc_digital_dev, cb_arg->complete_arg, resp);
1374
1375        kfree(cb_arg);
1376}
1377
1378static int port100_tg_send_cmd(struct nfc_digital_dev *ddev,
1379                               struct sk_buff *skb, u16 timeout,
1380                               nfc_digital_cmd_complete_t cb, void *arg)
1381{
1382        struct port100 *dev = nfc_digital_get_drvdata(ddev);
1383        struct port100_tg_comm_rf_cmd *hdr;
1384        struct port100_cb_arg *cb_arg;
1385
1386        cb_arg = kzalloc(sizeof(struct port100_cb_arg), GFP_KERNEL);
1387        if (!cb_arg)
1388                return -ENOMEM;
1389
1390        cb_arg->complete_cb = cb;
1391        cb_arg->complete_arg = arg;
1392
1393        skb_push(skb, sizeof(struct port100_tg_comm_rf_cmd));
1394
1395        hdr = (struct port100_tg_comm_rf_cmd *)skb->data;
1396
1397        memset(hdr, 0, sizeof(struct port100_tg_comm_rf_cmd));
1398        hdr->guard_time = cpu_to_le16(500);
1399        hdr->send_timeout = cpu_to_le16(0xFFFF);
1400        hdr->recv_timeout = cpu_to_le16(timeout);
1401
1402        return port100_send_cmd_async(dev, PORT100_CMD_TG_COMM_RF, skb,
1403                                      port100_tg_comm_rf_complete, cb_arg);
1404}
1405
1406static int port100_listen_mdaa(struct nfc_digital_dev *ddev,
1407                               struct digital_tg_mdaa_params *params,
1408                               u16 timeout,
1409                               nfc_digital_cmd_complete_t cb, void *arg)
1410{
1411        struct port100 *dev = nfc_digital_get_drvdata(ddev);
1412        struct port100_tg_comm_rf_cmd *hdr;
1413        struct port100_cb_arg *cb_arg;
1414        struct sk_buff *skb;
1415        int rc;
1416
1417        rc = port100_tg_configure_hw(ddev, NFC_DIGITAL_CONFIG_RF_TECH,
1418                                     NFC_DIGITAL_RF_TECH_106A);
1419        if (rc)
1420                return rc;
1421
1422        rc = port100_tg_configure_hw(ddev, NFC_DIGITAL_CONFIG_FRAMING,
1423                                     NFC_DIGITAL_FRAMING_NFCA_NFC_DEP);
1424        if (rc)
1425                return rc;
1426
1427        cb_arg = kzalloc(sizeof(struct port100_cb_arg), GFP_KERNEL);
1428        if (!cb_arg)
1429                return -ENOMEM;
1430
1431        cb_arg->complete_cb = cb;
1432        cb_arg->complete_arg = arg;
1433        cb_arg->mdaa = 1;
1434
1435        skb = port100_alloc_skb(dev, 0);
1436        if (!skb) {
1437                kfree(cb_arg);
1438                return -ENOMEM;
1439        }
1440
1441        skb_push(skb, sizeof(struct port100_tg_comm_rf_cmd));
1442        hdr = (struct port100_tg_comm_rf_cmd *)skb->data;
1443
1444        memset(hdr, 0, sizeof(struct port100_tg_comm_rf_cmd));
1445
1446        hdr->guard_time = 0;
1447        hdr->send_timeout = cpu_to_le16(0xFFFF);
1448        hdr->mdaa = 1;
1449        hdr->nfca_param[0] = (params->sens_res >> 8) & 0xFF;
1450        hdr->nfca_param[1] = params->sens_res & 0xFF;
1451        memcpy(hdr->nfca_param + 2, params->nfcid1, 3);
1452        hdr->nfca_param[5] = params->sel_res;
1453        memcpy(hdr->nfcf_param, params->nfcid2, 8);
1454        hdr->nfcf_param[16] = (params->sc >> 8) & 0xFF;
1455        hdr->nfcf_param[17] = params->sc & 0xFF;
1456        hdr->recv_timeout = cpu_to_le16(timeout);
1457
1458        return port100_send_cmd_async(dev, PORT100_CMD_TG_COMM_RF, skb,
1459                                      port100_tg_comm_rf_complete, cb_arg);
1460}
1461
1462static int port100_listen(struct nfc_digital_dev *ddev, u16 timeout,
1463                          nfc_digital_cmd_complete_t cb, void *arg)
1464{
1465        struct port100 *dev = nfc_digital_get_drvdata(ddev);
1466        struct sk_buff *skb;
1467
1468        skb = port100_alloc_skb(dev, 0);
1469        if (!skb)
1470                return -ENOMEM;
1471
1472        return port100_tg_send_cmd(ddev, skb, timeout, cb, arg);
1473}
1474
1475static struct nfc_digital_ops port100_digital_ops = {
1476        .in_configure_hw = port100_in_configure_hw,
1477        .in_send_cmd = port100_in_send_cmd,
1478
1479        .tg_listen_mdaa = port100_listen_mdaa,
1480        .tg_listen = port100_listen,
1481        .tg_configure_hw = port100_tg_configure_hw,
1482        .tg_send_cmd = port100_tg_send_cmd,
1483
1484        .switch_rf = port100_switch_rf,
1485        .abort_cmd = port100_abort_cmd,
1486};
1487
1488static const struct usb_device_id port100_table[] = {
1489        { USB_DEVICE(SONY_VENDOR_ID, RCS380S_PRODUCT_ID), },
1490        { USB_DEVICE(SONY_VENDOR_ID, RCS380P_PRODUCT_ID), },
1491        { }
1492};
1493MODULE_DEVICE_TABLE(usb, port100_table);
1494
1495static int port100_probe(struct usb_interface *interface,
1496                         const struct usb_device_id *id)
1497{
1498        struct port100 *dev;
1499        int rc;
1500        struct usb_host_interface *iface_desc;
1501        struct usb_endpoint_descriptor *endpoint;
1502        int in_endpoint;
1503        int out_endpoint;
1504        u16 fw_version;
1505        u64 cmd_type_mask;
1506        int i;
1507
1508        dev = devm_kzalloc(&interface->dev, sizeof(struct port100), GFP_KERNEL);
1509        if (!dev)
1510                return -ENOMEM;
1511
1512        mutex_init(&dev->out_urb_lock);
1513        dev->udev = usb_get_dev(interface_to_usbdev(interface));
1514        dev->interface = interface;
1515        usb_set_intfdata(interface, dev);
1516
1517        in_endpoint = out_endpoint = 0;
1518        iface_desc = interface->cur_altsetting;
1519        for (i = 0; i < iface_desc->desc.bNumEndpoints; ++i) {
1520                endpoint = &iface_desc->endpoint[i].desc;
1521
1522                if (!in_endpoint && usb_endpoint_is_bulk_in(endpoint))
1523                        in_endpoint = endpoint->bEndpointAddress;
1524
1525                if (!out_endpoint && usb_endpoint_is_bulk_out(endpoint))
1526                        out_endpoint = endpoint->bEndpointAddress;
1527        }
1528
1529        if (!in_endpoint || !out_endpoint) {
1530                nfc_err(&interface->dev,
1531                        "Could not find bulk-in or bulk-out endpoint\n");
1532                rc = -ENODEV;
1533                goto error;
1534        }
1535
1536        dev->in_urb = usb_alloc_urb(0, GFP_KERNEL);
1537        dev->out_urb = usb_alloc_urb(0, GFP_KERNEL);
1538
1539        if (!dev->in_urb || !dev->out_urb) {
1540                nfc_err(&interface->dev, "Could not allocate USB URBs\n");
1541                rc = -ENOMEM;
1542                goto error;
1543        }
1544
1545        usb_fill_bulk_urb(dev->in_urb, dev->udev,
1546                          usb_rcvbulkpipe(dev->udev, in_endpoint),
1547                          NULL, 0, NULL, dev);
1548        usb_fill_bulk_urb(dev->out_urb, dev->udev,
1549                          usb_sndbulkpipe(dev->udev, out_endpoint),
1550                          NULL, 0, port100_send_complete, dev);
1551        dev->out_urb->transfer_flags = URB_ZERO_PACKET;
1552
1553        dev->skb_headroom = PORT100_FRAME_HEADER_LEN +
1554                            PORT100_COMM_RF_HEAD_MAX_LEN;
1555        dev->skb_tailroom = PORT100_FRAME_TAIL_LEN;
1556
1557        init_completion(&dev->cmd_cancel_done);
1558        INIT_WORK(&dev->cmd_complete_work, port100_wq_cmd_complete);
1559
1560        /* The first thing to do with the Port-100 is to set the command type
1561         * to be used. If supported we use command type 1. 0 otherwise.
1562         */
1563        cmd_type_mask = port100_get_command_type_mask(dev);
1564        if (!cmd_type_mask) {
1565                nfc_err(&interface->dev,
1566                        "Could not get supported command types\n");
1567                rc = -ENODEV;
1568                goto error;
1569        }
1570
1571        if (PORT100_CMD_TYPE_IS_SUPPORTED(cmd_type_mask, PORT100_CMD_TYPE_1))
1572                dev->cmd_type = PORT100_CMD_TYPE_1;
1573        else
1574                dev->cmd_type = PORT100_CMD_TYPE_0;
1575
1576        rc = port100_set_command_type(dev, dev->cmd_type);
1577        if (rc) {
1578                nfc_err(&interface->dev,
1579                        "The device does not support command type %u\n",
1580                        dev->cmd_type);
1581                goto error;
1582        }
1583
1584        fw_version = port100_get_firmware_version(dev);
1585        if (!fw_version)
1586                nfc_err(&interface->dev,
1587                        "Could not get device firmware version\n");
1588
1589        nfc_info(&interface->dev,
1590                 "Sony NFC Port-100 Series attached (firmware v%x.%02x)\n",
1591                 (fw_version & 0xFF00) >> 8, fw_version & 0xFF);
1592
1593        dev->nfc_digital_dev = nfc_digital_allocate_device(&port100_digital_ops,
1594                                                           PORT100_PROTOCOLS,
1595                                                           PORT100_CAPABILITIES,
1596                                                           dev->skb_headroom,
1597                                                           dev->skb_tailroom);
1598        if (!dev->nfc_digital_dev) {
1599                nfc_err(&interface->dev,
1600                        "Could not allocate nfc_digital_dev\n");
1601                rc = -ENOMEM;
1602                goto error;
1603        }
1604
1605        nfc_digital_set_parent_dev(dev->nfc_digital_dev, &interface->dev);
1606        nfc_digital_set_drvdata(dev->nfc_digital_dev, dev);
1607
1608        rc = nfc_digital_register_device(dev->nfc_digital_dev);
1609        if (rc) {
1610                nfc_err(&interface->dev,
1611                        "Could not register digital device\n");
1612                goto free_nfc_dev;
1613        }
1614
1615        return 0;
1616
1617free_nfc_dev:
1618        nfc_digital_free_device(dev->nfc_digital_dev);
1619
1620error:
1621        usb_free_urb(dev->in_urb);
1622        usb_free_urb(dev->out_urb);
1623        usb_put_dev(dev->udev);
1624
1625        return rc;
1626}
1627
1628static void port100_disconnect(struct usb_interface *interface)
1629{
1630        struct port100 *dev;
1631
1632        dev = usb_get_intfdata(interface);
1633        usb_set_intfdata(interface, NULL);
1634
1635        nfc_digital_unregister_device(dev->nfc_digital_dev);
1636        nfc_digital_free_device(dev->nfc_digital_dev);
1637
1638        usb_kill_urb(dev->in_urb);
1639        usb_kill_urb(dev->out_urb);
1640
1641        usb_free_urb(dev->in_urb);
1642        usb_free_urb(dev->out_urb);
1643        usb_put_dev(dev->udev);
1644
1645        kfree(dev->cmd);
1646
1647        nfc_info(&interface->dev, "Sony Port-100 NFC device disconnected\n");
1648}
1649
1650static struct usb_driver port100_driver = {
1651        .name =         "port100",
1652        .probe =        port100_probe,
1653        .disconnect =   port100_disconnect,
1654        .id_table =     port100_table,
1655};
1656
1657module_usb_driver(port100_driver);
1658
1659MODULE_DESCRIPTION("NFC Port-100 series usb driver ver " VERSION);
1660MODULE_VERSION(VERSION);
1661MODULE_LICENSE("GPL");
1662