linux/net/nfc/nci/core.c
<<
>>
Prefs
   1// SPDX-License-Identifier: GPL-2.0-only
   2/*
   3 *  The NFC Controller Interface is the communication protocol between an
   4 *  NFC Controller (NFCC) and a Device Host (DH).
   5 *
   6 *  Copyright (C) 2011 Texas Instruments, Inc.
   7 *  Copyright (C) 2014 Marvell International Ltd.
   8 *
   9 *  Written by Ilan Elias <ilane@ti.com>
  10 *
  11 *  Acknowledgements:
  12 *  This file is based on hci_core.c, which was written
  13 *  by Maxim Krasnyansky.
  14 */
  15
  16#define pr_fmt(fmt) KBUILD_MODNAME ": %s: " fmt, __func__
  17
  18#include <linux/module.h>
  19#include <linux/kernel.h>
  20#include <linux/types.h>
  21#include <linux/workqueue.h>
  22#include <linux/completion.h>
  23#include <linux/export.h>
  24#include <linux/sched.h>
  25#include <linux/bitops.h>
  26#include <linux/skbuff.h>
  27
  28#include "../nfc.h"
  29#include <net/nfc/nci.h>
  30#include <net/nfc/nci_core.h>
  31#include <linux/nfc.h>
  32
  33struct core_conn_create_data {
  34        int length;
  35        struct nci_core_conn_create_cmd *cmd;
  36};
  37
  38static void nci_cmd_work(struct work_struct *work);
  39static void nci_rx_work(struct work_struct *work);
  40static void nci_tx_work(struct work_struct *work);
  41
  42struct nci_conn_info *nci_get_conn_info_by_conn_id(struct nci_dev *ndev,
  43                                                   int conn_id)
  44{
  45        struct nci_conn_info *conn_info;
  46
  47        list_for_each_entry(conn_info, &ndev->conn_info_list, list) {
  48                if (conn_info->conn_id == conn_id)
  49                        return conn_info;
  50        }
  51
  52        return NULL;
  53}
  54
  55int nci_get_conn_info_by_dest_type_params(struct nci_dev *ndev, u8 dest_type,
  56                                          const struct dest_spec_params *params)
  57{
  58        const struct nci_conn_info *conn_info;
  59
  60        list_for_each_entry(conn_info, &ndev->conn_info_list, list) {
  61                if (conn_info->dest_type == dest_type) {
  62                        if (!params)
  63                                return conn_info->conn_id;
  64
  65                        if (params->id == conn_info->dest_params->id &&
  66                            params->protocol == conn_info->dest_params->protocol)
  67                                return conn_info->conn_id;
  68                }
  69        }
  70
  71        return -EINVAL;
  72}
  73EXPORT_SYMBOL(nci_get_conn_info_by_dest_type_params);
  74
  75/* ---- NCI requests ---- */
  76
  77void nci_req_complete(struct nci_dev *ndev, int result)
  78{
  79        if (ndev->req_status == NCI_REQ_PEND) {
  80                ndev->req_result = result;
  81                ndev->req_status = NCI_REQ_DONE;
  82                complete(&ndev->req_completion);
  83        }
  84}
  85EXPORT_SYMBOL(nci_req_complete);
  86
  87static void nci_req_cancel(struct nci_dev *ndev, int err)
  88{
  89        if (ndev->req_status == NCI_REQ_PEND) {
  90                ndev->req_result = err;
  91                ndev->req_status = NCI_REQ_CANCELED;
  92                complete(&ndev->req_completion);
  93        }
  94}
  95
  96/* Execute request and wait for completion. */
  97static int __nci_request(struct nci_dev *ndev,
  98                         void (*req)(struct nci_dev *ndev, const void *opt),
  99                         const void *opt, __u32 timeout)
 100{
 101        int rc = 0;
 102        long completion_rc;
 103
 104        ndev->req_status = NCI_REQ_PEND;
 105
 106        reinit_completion(&ndev->req_completion);
 107        req(ndev, opt);
 108        completion_rc =
 109                wait_for_completion_interruptible_timeout(&ndev->req_completion,
 110                                                          timeout);
 111
 112        pr_debug("wait_for_completion return %ld\n", completion_rc);
 113
 114        if (completion_rc > 0) {
 115                switch (ndev->req_status) {
 116                case NCI_REQ_DONE:
 117                        rc = nci_to_errno(ndev->req_result);
 118                        break;
 119
 120                case NCI_REQ_CANCELED:
 121                        rc = -ndev->req_result;
 122                        break;
 123
 124                default:
 125                        rc = -ETIMEDOUT;
 126                        break;
 127                }
 128        } else {
 129                pr_err("wait_for_completion_interruptible_timeout failed %ld\n",
 130                       completion_rc);
 131
 132                rc = ((completion_rc == 0) ? (-ETIMEDOUT) : (completion_rc));
 133        }
 134
 135        ndev->req_status = ndev->req_result = 0;
 136
 137        return rc;
 138}
 139
 140inline int nci_request(struct nci_dev *ndev,
 141                       void (*req)(struct nci_dev *ndev,
 142                                   const void *opt),
 143                       const void *opt, __u32 timeout)
 144{
 145        int rc;
 146
 147        if (!test_bit(NCI_UP, &ndev->flags))
 148                return -ENETDOWN;
 149
 150        /* Serialize all requests */
 151        mutex_lock(&ndev->req_lock);
 152        rc = __nci_request(ndev, req, opt, timeout);
 153        mutex_unlock(&ndev->req_lock);
 154
 155        return rc;
 156}
 157
 158static void nci_reset_req(struct nci_dev *ndev, const void *opt)
 159{
 160        struct nci_core_reset_cmd cmd;
 161
 162        cmd.reset_type = NCI_RESET_TYPE_RESET_CONFIG;
 163        nci_send_cmd(ndev, NCI_OP_CORE_RESET_CMD, 1, &cmd);
 164}
 165
 166static void nci_init_req(struct nci_dev *ndev, const void *opt)
 167{
 168        u8 plen = 0;
 169
 170        if (opt)
 171                plen = sizeof(struct nci_core_init_v2_cmd);
 172
 173        nci_send_cmd(ndev, NCI_OP_CORE_INIT_CMD, plen, opt);
 174}
 175
 176static void nci_init_complete_req(struct nci_dev *ndev, const void *opt)
 177{
 178        struct nci_rf_disc_map_cmd cmd;
 179        struct disc_map_config *cfg = cmd.mapping_configs;
 180        __u8 *num = &cmd.num_mapping_configs;
 181        int i;
 182
 183        /* set rf mapping configurations */
 184        *num = 0;
 185
 186        /* by default mapping is set to NCI_RF_INTERFACE_FRAME */
 187        for (i = 0; i < ndev->num_supported_rf_interfaces; i++) {
 188                if (ndev->supported_rf_interfaces[i] ==
 189                    NCI_RF_INTERFACE_ISO_DEP) {
 190                        cfg[*num].rf_protocol = NCI_RF_PROTOCOL_ISO_DEP;
 191                        cfg[*num].mode = NCI_DISC_MAP_MODE_POLL |
 192                                NCI_DISC_MAP_MODE_LISTEN;
 193                        cfg[*num].rf_interface = NCI_RF_INTERFACE_ISO_DEP;
 194                        (*num)++;
 195                } else if (ndev->supported_rf_interfaces[i] ==
 196                           NCI_RF_INTERFACE_NFC_DEP) {
 197                        cfg[*num].rf_protocol = NCI_RF_PROTOCOL_NFC_DEP;
 198                        cfg[*num].mode = NCI_DISC_MAP_MODE_POLL |
 199                                NCI_DISC_MAP_MODE_LISTEN;
 200                        cfg[*num].rf_interface = NCI_RF_INTERFACE_NFC_DEP;
 201                        (*num)++;
 202                }
 203
 204                if (*num == NCI_MAX_NUM_MAPPING_CONFIGS)
 205                        break;
 206        }
 207
 208        nci_send_cmd(ndev, NCI_OP_RF_DISCOVER_MAP_CMD,
 209                     (1 + ((*num) * sizeof(struct disc_map_config))), &cmd);
 210}
 211
 212struct nci_set_config_param {
 213        __u8            id;
 214        size_t          len;
 215        const __u8      *val;
 216};
 217
 218static void nci_set_config_req(struct nci_dev *ndev, const void *opt)
 219{
 220        const struct nci_set_config_param *param = opt;
 221        struct nci_core_set_config_cmd cmd;
 222
 223        BUG_ON(param->len > NCI_MAX_PARAM_LEN);
 224
 225        cmd.num_params = 1;
 226        cmd.param.id = param->id;
 227        cmd.param.len = param->len;
 228        memcpy(cmd.param.val, param->val, param->len);
 229
 230        nci_send_cmd(ndev, NCI_OP_CORE_SET_CONFIG_CMD, (3 + param->len), &cmd);
 231}
 232
 233struct nci_rf_discover_param {
 234        __u32   im_protocols;
 235        __u32   tm_protocols;
 236};
 237
 238static void nci_rf_discover_req(struct nci_dev *ndev, const void *opt)
 239{
 240        const struct nci_rf_discover_param *param = opt;
 241        struct nci_rf_disc_cmd cmd;
 242
 243        cmd.num_disc_configs = 0;
 244
 245        if ((cmd.num_disc_configs < NCI_MAX_NUM_RF_CONFIGS) &&
 246            (param->im_protocols & NFC_PROTO_JEWEL_MASK ||
 247             param->im_protocols & NFC_PROTO_MIFARE_MASK ||
 248             param->im_protocols & NFC_PROTO_ISO14443_MASK ||
 249             param->im_protocols & NFC_PROTO_NFC_DEP_MASK)) {
 250                cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode =
 251                        NCI_NFC_A_PASSIVE_POLL_MODE;
 252                cmd.disc_configs[cmd.num_disc_configs].frequency = 1;
 253                cmd.num_disc_configs++;
 254        }
 255
 256        if ((cmd.num_disc_configs < NCI_MAX_NUM_RF_CONFIGS) &&
 257            (param->im_protocols & NFC_PROTO_ISO14443_B_MASK)) {
 258                cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode =
 259                        NCI_NFC_B_PASSIVE_POLL_MODE;
 260                cmd.disc_configs[cmd.num_disc_configs].frequency = 1;
 261                cmd.num_disc_configs++;
 262        }
 263
 264        if ((cmd.num_disc_configs < NCI_MAX_NUM_RF_CONFIGS) &&
 265            (param->im_protocols & NFC_PROTO_FELICA_MASK ||
 266             param->im_protocols & NFC_PROTO_NFC_DEP_MASK)) {
 267                cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode =
 268                        NCI_NFC_F_PASSIVE_POLL_MODE;
 269                cmd.disc_configs[cmd.num_disc_configs].frequency = 1;
 270                cmd.num_disc_configs++;
 271        }
 272
 273        if ((cmd.num_disc_configs < NCI_MAX_NUM_RF_CONFIGS) &&
 274            (param->im_protocols & NFC_PROTO_ISO15693_MASK)) {
 275                cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode =
 276                        NCI_NFC_V_PASSIVE_POLL_MODE;
 277                cmd.disc_configs[cmd.num_disc_configs].frequency = 1;
 278                cmd.num_disc_configs++;
 279        }
 280
 281        if ((cmd.num_disc_configs < NCI_MAX_NUM_RF_CONFIGS - 1) &&
 282            (param->tm_protocols & NFC_PROTO_NFC_DEP_MASK)) {
 283                cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode =
 284                        NCI_NFC_A_PASSIVE_LISTEN_MODE;
 285                cmd.disc_configs[cmd.num_disc_configs].frequency = 1;
 286                cmd.num_disc_configs++;
 287                cmd.disc_configs[cmd.num_disc_configs].rf_tech_and_mode =
 288                        NCI_NFC_F_PASSIVE_LISTEN_MODE;
 289                cmd.disc_configs[cmd.num_disc_configs].frequency = 1;
 290                cmd.num_disc_configs++;
 291        }
 292
 293        nci_send_cmd(ndev, NCI_OP_RF_DISCOVER_CMD,
 294                     (1 + (cmd.num_disc_configs * sizeof(struct disc_config))),
 295                     &cmd);
 296}
 297
 298struct nci_rf_discover_select_param {
 299        __u8    rf_discovery_id;
 300        __u8    rf_protocol;
 301};
 302
 303static void nci_rf_discover_select_req(struct nci_dev *ndev, const void *opt)
 304{
 305        const struct nci_rf_discover_select_param *param = opt;
 306        struct nci_rf_discover_select_cmd cmd;
 307
 308        cmd.rf_discovery_id = param->rf_discovery_id;
 309        cmd.rf_protocol = param->rf_protocol;
 310
 311        switch (cmd.rf_protocol) {
 312        case NCI_RF_PROTOCOL_ISO_DEP:
 313                cmd.rf_interface = NCI_RF_INTERFACE_ISO_DEP;
 314                break;
 315
 316        case NCI_RF_PROTOCOL_NFC_DEP:
 317                cmd.rf_interface = NCI_RF_INTERFACE_NFC_DEP;
 318                break;
 319
 320        default:
 321                cmd.rf_interface = NCI_RF_INTERFACE_FRAME;
 322                break;
 323        }
 324
 325        nci_send_cmd(ndev, NCI_OP_RF_DISCOVER_SELECT_CMD,
 326                     sizeof(struct nci_rf_discover_select_cmd), &cmd);
 327}
 328
 329static void nci_rf_deactivate_req(struct nci_dev *ndev, const void *opt)
 330{
 331        struct nci_rf_deactivate_cmd cmd;
 332
 333        cmd.type = (unsigned long)opt;
 334
 335        nci_send_cmd(ndev, NCI_OP_RF_DEACTIVATE_CMD,
 336                     sizeof(struct nci_rf_deactivate_cmd), &cmd);
 337}
 338
 339struct nci_cmd_param {
 340        __u16 opcode;
 341        size_t len;
 342        const __u8 *payload;
 343};
 344
 345static void nci_generic_req(struct nci_dev *ndev, const void *opt)
 346{
 347        const struct nci_cmd_param *param = opt;
 348
 349        nci_send_cmd(ndev, param->opcode, param->len, param->payload);
 350}
 351
 352int nci_prop_cmd(struct nci_dev *ndev, __u8 oid, size_t len, const __u8 *payload)
 353{
 354        struct nci_cmd_param param;
 355
 356        param.opcode = nci_opcode_pack(NCI_GID_PROPRIETARY, oid);
 357        param.len = len;
 358        param.payload = payload;
 359
 360        return __nci_request(ndev, nci_generic_req, &param,
 361                             msecs_to_jiffies(NCI_CMD_TIMEOUT));
 362}
 363EXPORT_SYMBOL(nci_prop_cmd);
 364
 365int nci_core_cmd(struct nci_dev *ndev, __u16 opcode, size_t len,
 366                 const __u8 *payload)
 367{
 368        struct nci_cmd_param param;
 369
 370        param.opcode = opcode;
 371        param.len = len;
 372        param.payload = payload;
 373
 374        return __nci_request(ndev, nci_generic_req, &param,
 375                             msecs_to_jiffies(NCI_CMD_TIMEOUT));
 376}
 377EXPORT_SYMBOL(nci_core_cmd);
 378
 379int nci_core_reset(struct nci_dev *ndev)
 380{
 381        return __nci_request(ndev, nci_reset_req, (void *)0,
 382                             msecs_to_jiffies(NCI_RESET_TIMEOUT));
 383}
 384EXPORT_SYMBOL(nci_core_reset);
 385
 386int nci_core_init(struct nci_dev *ndev)
 387{
 388        return __nci_request(ndev, nci_init_req, (void *)0,
 389                             msecs_to_jiffies(NCI_INIT_TIMEOUT));
 390}
 391EXPORT_SYMBOL(nci_core_init);
 392
 393struct nci_loopback_data {
 394        u8 conn_id;
 395        struct sk_buff *data;
 396};
 397
 398static void nci_send_data_req(struct nci_dev *ndev, const void *opt)
 399{
 400        const struct nci_loopback_data *data = opt;
 401
 402        nci_send_data(ndev, data->conn_id, data->data);
 403}
 404
 405static void nci_nfcc_loopback_cb(void *context, struct sk_buff *skb, int err)
 406{
 407        struct nci_dev *ndev = (struct nci_dev *)context;
 408        struct nci_conn_info *conn_info;
 409
 410        conn_info = nci_get_conn_info_by_conn_id(ndev, ndev->cur_conn_id);
 411        if (!conn_info) {
 412                nci_req_complete(ndev, NCI_STATUS_REJECTED);
 413                return;
 414        }
 415
 416        conn_info->rx_skb = skb;
 417
 418        nci_req_complete(ndev, NCI_STATUS_OK);
 419}
 420
 421int nci_nfcc_loopback(struct nci_dev *ndev, const void *data, size_t data_len,
 422                      struct sk_buff **resp)
 423{
 424        int r;
 425        struct nci_loopback_data loopback_data;
 426        struct nci_conn_info *conn_info;
 427        struct sk_buff *skb;
 428        int conn_id = nci_get_conn_info_by_dest_type_params(ndev,
 429                                        NCI_DESTINATION_NFCC_LOOPBACK, NULL);
 430
 431        if (conn_id < 0) {
 432                r = nci_core_conn_create(ndev, NCI_DESTINATION_NFCC_LOOPBACK,
 433                                         0, 0, NULL);
 434                if (r != NCI_STATUS_OK)
 435                        return r;
 436
 437                conn_id = nci_get_conn_info_by_dest_type_params(ndev,
 438                                        NCI_DESTINATION_NFCC_LOOPBACK,
 439                                        NULL);
 440        }
 441
 442        conn_info = nci_get_conn_info_by_conn_id(ndev, conn_id);
 443        if (!conn_info)
 444                return -EPROTO;
 445
 446        /* store cb and context to be used on receiving data */
 447        conn_info->data_exchange_cb = nci_nfcc_loopback_cb;
 448        conn_info->data_exchange_cb_context = ndev;
 449
 450        skb = nci_skb_alloc(ndev, NCI_DATA_HDR_SIZE + data_len, GFP_KERNEL);
 451        if (!skb)
 452                return -ENOMEM;
 453
 454        skb_reserve(skb, NCI_DATA_HDR_SIZE);
 455        skb_put_data(skb, data, data_len);
 456
 457        loopback_data.conn_id = conn_id;
 458        loopback_data.data = skb;
 459
 460        ndev->cur_conn_id = conn_id;
 461        r = nci_request(ndev, nci_send_data_req, &loopback_data,
 462                        msecs_to_jiffies(NCI_DATA_TIMEOUT));
 463        if (r == NCI_STATUS_OK && resp)
 464                *resp = conn_info->rx_skb;
 465
 466        return r;
 467}
 468EXPORT_SYMBOL(nci_nfcc_loopback);
 469
 470static int nci_open_device(struct nci_dev *ndev)
 471{
 472        int rc = 0;
 473
 474        mutex_lock(&ndev->req_lock);
 475
 476        if (test_bit(NCI_UP, &ndev->flags)) {
 477                rc = -EALREADY;
 478                goto done;
 479        }
 480
 481        if (ndev->ops->open(ndev)) {
 482                rc = -EIO;
 483                goto done;
 484        }
 485
 486        atomic_set(&ndev->cmd_cnt, 1);
 487
 488        set_bit(NCI_INIT, &ndev->flags);
 489
 490        if (ndev->ops->init)
 491                rc = ndev->ops->init(ndev);
 492
 493        if (!rc) {
 494                rc = __nci_request(ndev, nci_reset_req, (void *)0,
 495                                   msecs_to_jiffies(NCI_RESET_TIMEOUT));
 496        }
 497
 498        if (!rc && ndev->ops->setup) {
 499                rc = ndev->ops->setup(ndev);
 500        }
 501
 502        if (!rc) {
 503                struct nci_core_init_v2_cmd nci_init_v2_cmd = {
 504                        .feature1 = NCI_FEATURE_DISABLE,
 505                        .feature2 = NCI_FEATURE_DISABLE
 506                };
 507                const void *opt = NULL;
 508
 509                if (ndev->nci_ver & NCI_VER_2_MASK)
 510                        opt = &nci_init_v2_cmd;
 511
 512                rc = __nci_request(ndev, nci_init_req, opt,
 513                                   msecs_to_jiffies(NCI_INIT_TIMEOUT));
 514        }
 515
 516        if (!rc && ndev->ops->post_setup)
 517                rc = ndev->ops->post_setup(ndev);
 518
 519        if (!rc) {
 520                rc = __nci_request(ndev, nci_init_complete_req, (void *)0,
 521                                   msecs_to_jiffies(NCI_INIT_TIMEOUT));
 522        }
 523
 524        clear_bit(NCI_INIT, &ndev->flags);
 525
 526        if (!rc) {
 527                set_bit(NCI_UP, &ndev->flags);
 528                nci_clear_target_list(ndev);
 529                atomic_set(&ndev->state, NCI_IDLE);
 530        } else {
 531                /* Init failed, cleanup */
 532                skb_queue_purge(&ndev->cmd_q);
 533                skb_queue_purge(&ndev->rx_q);
 534                skb_queue_purge(&ndev->tx_q);
 535
 536                ndev->ops->close(ndev);
 537                ndev->flags = 0;
 538        }
 539
 540done:
 541        mutex_unlock(&ndev->req_lock);
 542        return rc;
 543}
 544
 545static int nci_close_device(struct nci_dev *ndev)
 546{
 547        nci_req_cancel(ndev, ENODEV);
 548        mutex_lock(&ndev->req_lock);
 549
 550        if (!test_and_clear_bit(NCI_UP, &ndev->flags)) {
 551                del_timer_sync(&ndev->cmd_timer);
 552                del_timer_sync(&ndev->data_timer);
 553                mutex_unlock(&ndev->req_lock);
 554                return 0;
 555        }
 556
 557        /* Drop RX and TX queues */
 558        skb_queue_purge(&ndev->rx_q);
 559        skb_queue_purge(&ndev->tx_q);
 560
 561        /* Flush RX and TX wq */
 562        flush_workqueue(ndev->rx_wq);
 563        flush_workqueue(ndev->tx_wq);
 564
 565        /* Reset device */
 566        skb_queue_purge(&ndev->cmd_q);
 567        atomic_set(&ndev->cmd_cnt, 1);
 568
 569        set_bit(NCI_INIT, &ndev->flags);
 570        __nci_request(ndev, nci_reset_req, (void *)0,
 571                      msecs_to_jiffies(NCI_RESET_TIMEOUT));
 572
 573        /* After this point our queues are empty
 574         * and no works are scheduled.
 575         */
 576        ndev->ops->close(ndev);
 577
 578        clear_bit(NCI_INIT, &ndev->flags);
 579
 580        /* Flush cmd wq */
 581        flush_workqueue(ndev->cmd_wq);
 582
 583        del_timer_sync(&ndev->cmd_timer);
 584
 585        /* Clear flags */
 586        ndev->flags = 0;
 587
 588        mutex_unlock(&ndev->req_lock);
 589
 590        return 0;
 591}
 592
 593/* NCI command timer function */
 594static void nci_cmd_timer(struct timer_list *t)
 595{
 596        struct nci_dev *ndev = from_timer(ndev, t, cmd_timer);
 597
 598        atomic_set(&ndev->cmd_cnt, 1);
 599        queue_work(ndev->cmd_wq, &ndev->cmd_work);
 600}
 601
 602/* NCI data exchange timer function */
 603static void nci_data_timer(struct timer_list *t)
 604{
 605        struct nci_dev *ndev = from_timer(ndev, t, data_timer);
 606
 607        set_bit(NCI_DATA_EXCHANGE_TO, &ndev->flags);
 608        queue_work(ndev->rx_wq, &ndev->rx_work);
 609}
 610
 611static int nci_dev_up(struct nfc_dev *nfc_dev)
 612{
 613        struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
 614
 615        return nci_open_device(ndev);
 616}
 617
 618static int nci_dev_down(struct nfc_dev *nfc_dev)
 619{
 620        struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
 621
 622        return nci_close_device(ndev);
 623}
 624
 625int nci_set_config(struct nci_dev *ndev, __u8 id, size_t len, const __u8 *val)
 626{
 627        struct nci_set_config_param param;
 628
 629        if (!val || !len)
 630                return 0;
 631
 632        param.id = id;
 633        param.len = len;
 634        param.val = val;
 635
 636        return __nci_request(ndev, nci_set_config_req, &param,
 637                             msecs_to_jiffies(NCI_SET_CONFIG_TIMEOUT));
 638}
 639EXPORT_SYMBOL(nci_set_config);
 640
 641static void nci_nfcee_discover_req(struct nci_dev *ndev, const void *opt)
 642{
 643        struct nci_nfcee_discover_cmd cmd;
 644        __u8 action = (unsigned long)opt;
 645
 646        cmd.discovery_action = action;
 647
 648        nci_send_cmd(ndev, NCI_OP_NFCEE_DISCOVER_CMD, 1, &cmd);
 649}
 650
 651int nci_nfcee_discover(struct nci_dev *ndev, u8 action)
 652{
 653        unsigned long opt = action;
 654
 655        return __nci_request(ndev, nci_nfcee_discover_req, (void *)opt,
 656                                msecs_to_jiffies(NCI_CMD_TIMEOUT));
 657}
 658EXPORT_SYMBOL(nci_nfcee_discover);
 659
 660static void nci_nfcee_mode_set_req(struct nci_dev *ndev, const void *opt)
 661{
 662        const struct nci_nfcee_mode_set_cmd *cmd = opt;
 663
 664        nci_send_cmd(ndev, NCI_OP_NFCEE_MODE_SET_CMD,
 665                     sizeof(struct nci_nfcee_mode_set_cmd), cmd);
 666}
 667
 668int nci_nfcee_mode_set(struct nci_dev *ndev, u8 nfcee_id, u8 nfcee_mode)
 669{
 670        struct nci_nfcee_mode_set_cmd cmd;
 671
 672        cmd.nfcee_id = nfcee_id;
 673        cmd.nfcee_mode = nfcee_mode;
 674
 675        return __nci_request(ndev, nci_nfcee_mode_set_req, &cmd,
 676                             msecs_to_jiffies(NCI_CMD_TIMEOUT));
 677}
 678EXPORT_SYMBOL(nci_nfcee_mode_set);
 679
 680static void nci_core_conn_create_req(struct nci_dev *ndev, const void *opt)
 681{
 682        const struct core_conn_create_data *data = opt;
 683
 684        nci_send_cmd(ndev, NCI_OP_CORE_CONN_CREATE_CMD, data->length, data->cmd);
 685}
 686
 687int nci_core_conn_create(struct nci_dev *ndev, u8 destination_type,
 688                         u8 number_destination_params,
 689                         size_t params_len,
 690                         const struct core_conn_create_dest_spec_params *params)
 691{
 692        int r;
 693        struct nci_core_conn_create_cmd *cmd;
 694        struct core_conn_create_data data;
 695
 696        data.length = params_len + sizeof(struct nci_core_conn_create_cmd);
 697        cmd = kzalloc(data.length, GFP_KERNEL);
 698        if (!cmd)
 699                return -ENOMEM;
 700
 701        cmd->destination_type = destination_type;
 702        cmd->number_destination_params = number_destination_params;
 703
 704        data.cmd = cmd;
 705
 706        if (params) {
 707                memcpy(cmd->params, params, params_len);
 708                if (params->length > 0)
 709                        memcpy(&ndev->cur_params,
 710                               &params->value[DEST_SPEC_PARAMS_ID_INDEX],
 711                               sizeof(struct dest_spec_params));
 712                else
 713                        ndev->cur_params.id = 0;
 714        } else {
 715                ndev->cur_params.id = 0;
 716        }
 717        ndev->cur_dest_type = destination_type;
 718
 719        r = __nci_request(ndev, nci_core_conn_create_req, &data,
 720                          msecs_to_jiffies(NCI_CMD_TIMEOUT));
 721        kfree(cmd);
 722        return r;
 723}
 724EXPORT_SYMBOL(nci_core_conn_create);
 725
 726static void nci_core_conn_close_req(struct nci_dev *ndev, const void *opt)
 727{
 728        __u8 conn_id = (unsigned long)opt;
 729
 730        nci_send_cmd(ndev, NCI_OP_CORE_CONN_CLOSE_CMD, 1, &conn_id);
 731}
 732
 733int nci_core_conn_close(struct nci_dev *ndev, u8 conn_id)
 734{
 735        unsigned long opt = conn_id;
 736
 737        ndev->cur_conn_id = conn_id;
 738        return __nci_request(ndev, nci_core_conn_close_req, (void *)opt,
 739                             msecs_to_jiffies(NCI_CMD_TIMEOUT));
 740}
 741EXPORT_SYMBOL(nci_core_conn_close);
 742
 743static int nci_set_local_general_bytes(struct nfc_dev *nfc_dev)
 744{
 745        struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
 746        struct nci_set_config_param param;
 747        int rc;
 748
 749        param.val = nfc_get_local_general_bytes(nfc_dev, &param.len);
 750        if ((param.val == NULL) || (param.len == 0))
 751                return 0;
 752
 753        if (param.len > NFC_MAX_GT_LEN)
 754                return -EINVAL;
 755
 756        param.id = NCI_PN_ATR_REQ_GEN_BYTES;
 757
 758        rc = nci_request(ndev, nci_set_config_req, &param,
 759                         msecs_to_jiffies(NCI_SET_CONFIG_TIMEOUT));
 760        if (rc)
 761                return rc;
 762
 763        param.id = NCI_LN_ATR_RES_GEN_BYTES;
 764
 765        return nci_request(ndev, nci_set_config_req, &param,
 766                           msecs_to_jiffies(NCI_SET_CONFIG_TIMEOUT));
 767}
 768
 769static int nci_set_listen_parameters(struct nfc_dev *nfc_dev)
 770{
 771        struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
 772        int rc;
 773        __u8 val;
 774
 775        val = NCI_LA_SEL_INFO_NFC_DEP_MASK;
 776
 777        rc = nci_set_config(ndev, NCI_LA_SEL_INFO, 1, &val);
 778        if (rc)
 779                return rc;
 780
 781        val = NCI_LF_PROTOCOL_TYPE_NFC_DEP_MASK;
 782
 783        rc = nci_set_config(ndev, NCI_LF_PROTOCOL_TYPE, 1, &val);
 784        if (rc)
 785                return rc;
 786
 787        val = NCI_LF_CON_BITR_F_212 | NCI_LF_CON_BITR_F_424;
 788
 789        return nci_set_config(ndev, NCI_LF_CON_BITR_F, 1, &val);
 790}
 791
 792static int nci_start_poll(struct nfc_dev *nfc_dev,
 793                          __u32 im_protocols, __u32 tm_protocols)
 794{
 795        struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
 796        struct nci_rf_discover_param param;
 797        int rc;
 798
 799        if ((atomic_read(&ndev->state) == NCI_DISCOVERY) ||
 800            (atomic_read(&ndev->state) == NCI_W4_ALL_DISCOVERIES)) {
 801                pr_err("unable to start poll, since poll is already active\n");
 802                return -EBUSY;
 803        }
 804
 805        if (ndev->target_active_prot) {
 806                pr_err("there is an active target\n");
 807                return -EBUSY;
 808        }
 809
 810        if ((atomic_read(&ndev->state) == NCI_W4_HOST_SELECT) ||
 811            (atomic_read(&ndev->state) == NCI_POLL_ACTIVE)) {
 812                pr_debug("target active or w4 select, implicitly deactivate\n");
 813
 814                rc = nci_request(ndev, nci_rf_deactivate_req,
 815                                 (void *)NCI_DEACTIVATE_TYPE_IDLE_MODE,
 816                                 msecs_to_jiffies(NCI_RF_DEACTIVATE_TIMEOUT));
 817                if (rc)
 818                        return -EBUSY;
 819        }
 820
 821        if ((im_protocols | tm_protocols) & NFC_PROTO_NFC_DEP_MASK) {
 822                rc = nci_set_local_general_bytes(nfc_dev);
 823                if (rc) {
 824                        pr_err("failed to set local general bytes\n");
 825                        return rc;
 826                }
 827        }
 828
 829        if (tm_protocols & NFC_PROTO_NFC_DEP_MASK) {
 830                rc = nci_set_listen_parameters(nfc_dev);
 831                if (rc)
 832                        pr_err("failed to set listen parameters\n");
 833        }
 834
 835        param.im_protocols = im_protocols;
 836        param.tm_protocols = tm_protocols;
 837        rc = nci_request(ndev, nci_rf_discover_req, &param,
 838                         msecs_to_jiffies(NCI_RF_DISC_TIMEOUT));
 839
 840        if (!rc)
 841                ndev->poll_prots = im_protocols;
 842
 843        return rc;
 844}
 845
 846static void nci_stop_poll(struct nfc_dev *nfc_dev)
 847{
 848        struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
 849
 850        if ((atomic_read(&ndev->state) != NCI_DISCOVERY) &&
 851            (atomic_read(&ndev->state) != NCI_W4_ALL_DISCOVERIES)) {
 852                pr_err("unable to stop poll, since poll is not active\n");
 853                return;
 854        }
 855
 856        nci_request(ndev, nci_rf_deactivate_req,
 857                    (void *)NCI_DEACTIVATE_TYPE_IDLE_MODE,
 858                    msecs_to_jiffies(NCI_RF_DEACTIVATE_TIMEOUT));
 859}
 860
 861static int nci_activate_target(struct nfc_dev *nfc_dev,
 862                               struct nfc_target *target, __u32 protocol)
 863{
 864        struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
 865        struct nci_rf_discover_select_param param;
 866        const struct nfc_target *nci_target = NULL;
 867        int i;
 868        int rc = 0;
 869
 870        pr_debug("target_idx %d, protocol 0x%x\n", target->idx, protocol);
 871
 872        if ((atomic_read(&ndev->state) != NCI_W4_HOST_SELECT) &&
 873            (atomic_read(&ndev->state) != NCI_POLL_ACTIVE)) {
 874                pr_err("there is no available target to activate\n");
 875                return -EINVAL;
 876        }
 877
 878        if (ndev->target_active_prot) {
 879                pr_err("there is already an active target\n");
 880                return -EBUSY;
 881        }
 882
 883        for (i = 0; i < ndev->n_targets; i++) {
 884                if (ndev->targets[i].idx == target->idx) {
 885                        nci_target = &ndev->targets[i];
 886                        break;
 887                }
 888        }
 889
 890        if (!nci_target) {
 891                pr_err("unable to find the selected target\n");
 892                return -EINVAL;
 893        }
 894
 895        if (!(nci_target->supported_protocols & (1 << protocol))) {
 896                pr_err("target does not support the requested protocol 0x%x\n",
 897                       protocol);
 898                return -EINVAL;
 899        }
 900
 901        if (atomic_read(&ndev->state) == NCI_W4_HOST_SELECT) {
 902                param.rf_discovery_id = nci_target->logical_idx;
 903
 904                if (protocol == NFC_PROTO_JEWEL)
 905                        param.rf_protocol = NCI_RF_PROTOCOL_T1T;
 906                else if (protocol == NFC_PROTO_MIFARE)
 907                        param.rf_protocol = NCI_RF_PROTOCOL_T2T;
 908                else if (protocol == NFC_PROTO_FELICA)
 909                        param.rf_protocol = NCI_RF_PROTOCOL_T3T;
 910                else if (protocol == NFC_PROTO_ISO14443 ||
 911                         protocol == NFC_PROTO_ISO14443_B)
 912                        param.rf_protocol = NCI_RF_PROTOCOL_ISO_DEP;
 913                else
 914                        param.rf_protocol = NCI_RF_PROTOCOL_NFC_DEP;
 915
 916                rc = nci_request(ndev, nci_rf_discover_select_req, &param,
 917                                 msecs_to_jiffies(NCI_RF_DISC_SELECT_TIMEOUT));
 918        }
 919
 920        if (!rc)
 921                ndev->target_active_prot = protocol;
 922
 923        return rc;
 924}
 925
 926static void nci_deactivate_target(struct nfc_dev *nfc_dev,
 927                                  struct nfc_target *target,
 928                                  __u8 mode)
 929{
 930        struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
 931        unsigned long nci_mode = NCI_DEACTIVATE_TYPE_IDLE_MODE;
 932
 933        pr_debug("entry\n");
 934
 935        if (!ndev->target_active_prot) {
 936                pr_err("unable to deactivate target, no active target\n");
 937                return;
 938        }
 939
 940        ndev->target_active_prot = 0;
 941
 942        switch (mode) {
 943        case NFC_TARGET_MODE_SLEEP:
 944                nci_mode = NCI_DEACTIVATE_TYPE_SLEEP_MODE;
 945                break;
 946        }
 947
 948        if (atomic_read(&ndev->state) == NCI_POLL_ACTIVE) {
 949                nci_request(ndev, nci_rf_deactivate_req, (void *)nci_mode,
 950                            msecs_to_jiffies(NCI_RF_DEACTIVATE_TIMEOUT));
 951        }
 952}
 953
 954static int nci_dep_link_up(struct nfc_dev *nfc_dev, struct nfc_target *target,
 955                           __u8 comm_mode, __u8 *gb, size_t gb_len)
 956{
 957        struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
 958        int rc;
 959
 960        pr_debug("target_idx %d, comm_mode %d\n", target->idx, comm_mode);
 961
 962        rc = nci_activate_target(nfc_dev, target, NFC_PROTO_NFC_DEP);
 963        if (rc)
 964                return rc;
 965
 966        rc = nfc_set_remote_general_bytes(nfc_dev, ndev->remote_gb,
 967                                          ndev->remote_gb_len);
 968        if (!rc)
 969                rc = nfc_dep_link_is_up(nfc_dev, target->idx, NFC_COMM_PASSIVE,
 970                                        NFC_RF_INITIATOR);
 971
 972        return rc;
 973}
 974
 975static int nci_dep_link_down(struct nfc_dev *nfc_dev)
 976{
 977        struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
 978        int rc;
 979
 980        pr_debug("entry\n");
 981
 982        if (nfc_dev->rf_mode == NFC_RF_INITIATOR) {
 983                nci_deactivate_target(nfc_dev, NULL, NCI_DEACTIVATE_TYPE_IDLE_MODE);
 984        } else {
 985                if (atomic_read(&ndev->state) == NCI_LISTEN_ACTIVE ||
 986                    atomic_read(&ndev->state) == NCI_DISCOVERY) {
 987                        nci_request(ndev, nci_rf_deactivate_req, (void *)0,
 988                                    msecs_to_jiffies(NCI_RF_DEACTIVATE_TIMEOUT));
 989                }
 990
 991                rc = nfc_tm_deactivated(nfc_dev);
 992                if (rc)
 993                        pr_err("error when signaling tm deactivation\n");
 994        }
 995
 996        return 0;
 997}
 998
 999
1000static int nci_transceive(struct nfc_dev *nfc_dev, struct nfc_target *target,
1001                          struct sk_buff *skb,
1002                          data_exchange_cb_t cb, void *cb_context)
1003{
1004        struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
1005        int rc;
1006        struct nci_conn_info *conn_info;
1007
1008        conn_info = ndev->rf_conn_info;
1009        if (!conn_info)
1010                return -EPROTO;
1011
1012        pr_debug("target_idx %d, len %d\n", target->idx, skb->len);
1013
1014        if (!ndev->target_active_prot) {
1015                pr_err("unable to exchange data, no active target\n");
1016                return -EINVAL;
1017        }
1018
1019        if (test_and_set_bit(NCI_DATA_EXCHANGE, &ndev->flags))
1020                return -EBUSY;
1021
1022        /* store cb and context to be used on receiving data */
1023        conn_info->data_exchange_cb = cb;
1024        conn_info->data_exchange_cb_context = cb_context;
1025
1026        rc = nci_send_data(ndev, NCI_STATIC_RF_CONN_ID, skb);
1027        if (rc)
1028                clear_bit(NCI_DATA_EXCHANGE, &ndev->flags);
1029
1030        return rc;
1031}
1032
1033static int nci_tm_send(struct nfc_dev *nfc_dev, struct sk_buff *skb)
1034{
1035        struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
1036        int rc;
1037
1038        rc = nci_send_data(ndev, NCI_STATIC_RF_CONN_ID, skb);
1039        if (rc)
1040                pr_err("unable to send data\n");
1041
1042        return rc;
1043}
1044
1045static int nci_enable_se(struct nfc_dev *nfc_dev, u32 se_idx)
1046{
1047        struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
1048
1049        if (ndev->ops->enable_se)
1050                return ndev->ops->enable_se(ndev, se_idx);
1051
1052        return 0;
1053}
1054
1055static int nci_disable_se(struct nfc_dev *nfc_dev, u32 se_idx)
1056{
1057        struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
1058
1059        if (ndev->ops->disable_se)
1060                return ndev->ops->disable_se(ndev, se_idx);
1061
1062        return 0;
1063}
1064
1065static int nci_discover_se(struct nfc_dev *nfc_dev)
1066{
1067        int r;
1068        struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
1069
1070        if (ndev->ops->discover_se) {
1071                r = nci_nfcee_discover(ndev, NCI_NFCEE_DISCOVERY_ACTION_ENABLE);
1072                if (r != NCI_STATUS_OK)
1073                        return -EPROTO;
1074
1075                return ndev->ops->discover_se(ndev);
1076        }
1077
1078        return 0;
1079}
1080
1081static int nci_se_io(struct nfc_dev *nfc_dev, u32 se_idx,
1082                     u8 *apdu, size_t apdu_length,
1083                     se_io_cb_t cb, void *cb_context)
1084{
1085        struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
1086
1087        if (ndev->ops->se_io)
1088                return ndev->ops->se_io(ndev, se_idx, apdu,
1089                                apdu_length, cb, cb_context);
1090
1091        return 0;
1092}
1093
1094static int nci_fw_download(struct nfc_dev *nfc_dev, const char *firmware_name)
1095{
1096        struct nci_dev *ndev = nfc_get_drvdata(nfc_dev);
1097
1098        if (!ndev->ops->fw_download)
1099                return -ENOTSUPP;
1100
1101        return ndev->ops->fw_download(ndev, firmware_name);
1102}
1103
1104static const struct nfc_ops nci_nfc_ops = {
1105        .dev_up = nci_dev_up,
1106        .dev_down = nci_dev_down,
1107        .start_poll = nci_start_poll,
1108        .stop_poll = nci_stop_poll,
1109        .dep_link_up = nci_dep_link_up,
1110        .dep_link_down = nci_dep_link_down,
1111        .activate_target = nci_activate_target,
1112        .deactivate_target = nci_deactivate_target,
1113        .im_transceive = nci_transceive,
1114        .tm_send = nci_tm_send,
1115        .enable_se = nci_enable_se,
1116        .disable_se = nci_disable_se,
1117        .discover_se = nci_discover_se,
1118        .se_io = nci_se_io,
1119        .fw_download = nci_fw_download,
1120};
1121
1122/* ---- Interface to NCI drivers ---- */
1123/**
1124 * nci_allocate_device - allocate a new nci device
1125 *
1126 * @ops: device operations
1127 * @supported_protocols: NFC protocols supported by the device
1128 * @tx_headroom: Reserved space at beginning of skb
1129 * @tx_tailroom: Reserved space at end of skb
1130 */
1131struct nci_dev *nci_allocate_device(const struct nci_ops *ops,
1132                                    __u32 supported_protocols,
1133                                    int tx_headroom, int tx_tailroom)
1134{
1135        struct nci_dev *ndev;
1136
1137        pr_debug("supported_protocols 0x%x\n", supported_protocols);
1138
1139        if (!ops->open || !ops->close || !ops->send)
1140                return NULL;
1141
1142        if (!supported_protocols)
1143                return NULL;
1144
1145        ndev = kzalloc(sizeof(struct nci_dev), GFP_KERNEL);
1146        if (!ndev)
1147                return NULL;
1148
1149        ndev->ops = ops;
1150
1151        if (ops->n_prop_ops > NCI_MAX_PROPRIETARY_CMD) {
1152                pr_err("Too many proprietary commands: %zd\n",
1153                       ops->n_prop_ops);
1154                goto free_nci;
1155        }
1156
1157        ndev->tx_headroom = tx_headroom;
1158        ndev->tx_tailroom = tx_tailroom;
1159        init_completion(&ndev->req_completion);
1160
1161        ndev->nfc_dev = nfc_allocate_device(&nci_nfc_ops,
1162                                            supported_protocols,
1163                                            tx_headroom + NCI_DATA_HDR_SIZE,
1164                                            tx_tailroom);
1165        if (!ndev->nfc_dev)
1166                goto free_nci;
1167
1168        ndev->hci_dev = nci_hci_allocate(ndev);
1169        if (!ndev->hci_dev)
1170                goto free_nfc;
1171
1172        nfc_set_drvdata(ndev->nfc_dev, ndev);
1173
1174        return ndev;
1175
1176free_nfc:
1177        nfc_free_device(ndev->nfc_dev);
1178free_nci:
1179        kfree(ndev);
1180        return NULL;
1181}
1182EXPORT_SYMBOL(nci_allocate_device);
1183
1184/**
1185 * nci_free_device - deallocate nci device
1186 *
1187 * @ndev: The nci device to deallocate
1188 */
1189void nci_free_device(struct nci_dev *ndev)
1190{
1191        nfc_free_device(ndev->nfc_dev);
1192        nci_hci_deallocate(ndev);
1193        kfree(ndev);
1194}
1195EXPORT_SYMBOL(nci_free_device);
1196
1197/**
1198 * nci_register_device - register a nci device in the nfc subsystem
1199 *
1200 * @ndev: The nci device to register
1201 */
1202int nci_register_device(struct nci_dev *ndev)
1203{
1204        int rc;
1205        struct device *dev = &ndev->nfc_dev->dev;
1206        char name[32];
1207
1208        ndev->flags = 0;
1209
1210        INIT_WORK(&ndev->cmd_work, nci_cmd_work);
1211        snprintf(name, sizeof(name), "%s_nci_cmd_wq", dev_name(dev));
1212        ndev->cmd_wq = create_singlethread_workqueue(name);
1213        if (!ndev->cmd_wq) {
1214                rc = -ENOMEM;
1215                goto exit;
1216        }
1217
1218        INIT_WORK(&ndev->rx_work, nci_rx_work);
1219        snprintf(name, sizeof(name), "%s_nci_rx_wq", dev_name(dev));
1220        ndev->rx_wq = create_singlethread_workqueue(name);
1221        if (!ndev->rx_wq) {
1222                rc = -ENOMEM;
1223                goto destroy_cmd_wq_exit;
1224        }
1225
1226        INIT_WORK(&ndev->tx_work, nci_tx_work);
1227        snprintf(name, sizeof(name), "%s_nci_tx_wq", dev_name(dev));
1228        ndev->tx_wq = create_singlethread_workqueue(name);
1229        if (!ndev->tx_wq) {
1230                rc = -ENOMEM;
1231                goto destroy_rx_wq_exit;
1232        }
1233
1234        skb_queue_head_init(&ndev->cmd_q);
1235        skb_queue_head_init(&ndev->rx_q);
1236        skb_queue_head_init(&ndev->tx_q);
1237
1238        timer_setup(&ndev->cmd_timer, nci_cmd_timer, 0);
1239        timer_setup(&ndev->data_timer, nci_data_timer, 0);
1240
1241        mutex_init(&ndev->req_lock);
1242        INIT_LIST_HEAD(&ndev->conn_info_list);
1243
1244        rc = nfc_register_device(ndev->nfc_dev);
1245        if (rc)
1246                goto destroy_tx_wq_exit;
1247
1248        goto exit;
1249
1250destroy_tx_wq_exit:
1251        destroy_workqueue(ndev->tx_wq);
1252
1253destroy_rx_wq_exit:
1254        destroy_workqueue(ndev->rx_wq);
1255
1256destroy_cmd_wq_exit:
1257        destroy_workqueue(ndev->cmd_wq);
1258
1259exit:
1260        return rc;
1261}
1262EXPORT_SYMBOL(nci_register_device);
1263
1264/**
1265 * nci_unregister_device - unregister a nci device in the nfc subsystem
1266 *
1267 * @ndev: The nci device to unregister
1268 */
1269void nci_unregister_device(struct nci_dev *ndev)
1270{
1271        struct nci_conn_info *conn_info, *n;
1272
1273        nci_close_device(ndev);
1274
1275        destroy_workqueue(ndev->cmd_wq);
1276        destroy_workqueue(ndev->rx_wq);
1277        destroy_workqueue(ndev->tx_wq);
1278
1279        list_for_each_entry_safe(conn_info, n, &ndev->conn_info_list, list) {
1280                list_del(&conn_info->list);
1281                /* conn_info is allocated with devm_kzalloc */
1282        }
1283
1284        nfc_unregister_device(ndev->nfc_dev);
1285}
1286EXPORT_SYMBOL(nci_unregister_device);
1287
1288/**
1289 * nci_recv_frame - receive frame from NCI drivers
1290 *
1291 * @ndev: The nci device
1292 * @skb: The sk_buff to receive
1293 */
1294int nci_recv_frame(struct nci_dev *ndev, struct sk_buff *skb)
1295{
1296        pr_debug("len %d\n", skb->len);
1297
1298        if (!ndev || (!test_bit(NCI_UP, &ndev->flags) &&
1299            !test_bit(NCI_INIT, &ndev->flags))) {
1300                kfree_skb(skb);
1301                return -ENXIO;
1302        }
1303
1304        /* Queue frame for rx worker thread */
1305        skb_queue_tail(&ndev->rx_q, skb);
1306        queue_work(ndev->rx_wq, &ndev->rx_work);
1307
1308        return 0;
1309}
1310EXPORT_SYMBOL(nci_recv_frame);
1311
1312int nci_send_frame(struct nci_dev *ndev, struct sk_buff *skb)
1313{
1314        pr_debug("len %d\n", skb->len);
1315
1316        if (!ndev) {
1317                kfree_skb(skb);
1318                return -ENODEV;
1319        }
1320
1321        /* Get rid of skb owner, prior to sending to the driver. */
1322        skb_orphan(skb);
1323
1324        /* Send copy to sniffer */
1325        nfc_send_to_raw_sock(ndev->nfc_dev, skb,
1326                             RAW_PAYLOAD_NCI, NFC_DIRECTION_TX);
1327
1328        return ndev->ops->send(ndev, skb);
1329}
1330EXPORT_SYMBOL(nci_send_frame);
1331
1332/* Send NCI command */
1333int nci_send_cmd(struct nci_dev *ndev, __u16 opcode, __u8 plen, const void *payload)
1334{
1335        struct nci_ctrl_hdr *hdr;
1336        struct sk_buff *skb;
1337
1338        pr_debug("opcode 0x%x, plen %d\n", opcode, plen);
1339
1340        skb = nci_skb_alloc(ndev, (NCI_CTRL_HDR_SIZE + plen), GFP_KERNEL);
1341        if (!skb) {
1342                pr_err("no memory for command\n");
1343                return -ENOMEM;
1344        }
1345
1346        hdr = skb_put(skb, NCI_CTRL_HDR_SIZE);
1347        hdr->gid = nci_opcode_gid(opcode);
1348        hdr->oid = nci_opcode_oid(opcode);
1349        hdr->plen = plen;
1350
1351        nci_mt_set((__u8 *)hdr, NCI_MT_CMD_PKT);
1352        nci_pbf_set((__u8 *)hdr, NCI_PBF_LAST);
1353
1354        if (plen)
1355                skb_put_data(skb, payload, plen);
1356
1357        skb_queue_tail(&ndev->cmd_q, skb);
1358        queue_work(ndev->cmd_wq, &ndev->cmd_work);
1359
1360        return 0;
1361}
1362EXPORT_SYMBOL(nci_send_cmd);
1363
1364/* Proprietary commands API */
1365static const struct nci_driver_ops *ops_cmd_lookup(const struct nci_driver_ops *ops,
1366                                                   size_t n_ops,
1367                                                   __u16 opcode)
1368{
1369        size_t i;
1370        const struct nci_driver_ops *op;
1371
1372        if (!ops || !n_ops)
1373                return NULL;
1374
1375        for (i = 0; i < n_ops; i++) {
1376                op = &ops[i];
1377                if (op->opcode == opcode)
1378                        return op;
1379        }
1380
1381        return NULL;
1382}
1383
1384static int nci_op_rsp_packet(struct nci_dev *ndev, __u16 rsp_opcode,
1385                             struct sk_buff *skb, const struct nci_driver_ops *ops,
1386                             size_t n_ops)
1387{
1388        const struct nci_driver_ops *op;
1389
1390        op = ops_cmd_lookup(ops, n_ops, rsp_opcode);
1391        if (!op || !op->rsp)
1392                return -ENOTSUPP;
1393
1394        return op->rsp(ndev, skb);
1395}
1396
1397static int nci_op_ntf_packet(struct nci_dev *ndev, __u16 ntf_opcode,
1398                             struct sk_buff *skb, const struct nci_driver_ops *ops,
1399                             size_t n_ops)
1400{
1401        const struct nci_driver_ops *op;
1402
1403        op = ops_cmd_lookup(ops, n_ops, ntf_opcode);
1404        if (!op || !op->ntf)
1405                return -ENOTSUPP;
1406
1407        return op->ntf(ndev, skb);
1408}
1409
1410int nci_prop_rsp_packet(struct nci_dev *ndev, __u16 opcode,
1411                        struct sk_buff *skb)
1412{
1413        return nci_op_rsp_packet(ndev, opcode, skb, ndev->ops->prop_ops,
1414                                 ndev->ops->n_prop_ops);
1415}
1416
1417int nci_prop_ntf_packet(struct nci_dev *ndev, __u16 opcode,
1418                        struct sk_buff *skb)
1419{
1420        return nci_op_ntf_packet(ndev, opcode, skb, ndev->ops->prop_ops,
1421                                 ndev->ops->n_prop_ops);
1422}
1423
1424int nci_core_rsp_packet(struct nci_dev *ndev, __u16 opcode,
1425                        struct sk_buff *skb)
1426{
1427        return nci_op_rsp_packet(ndev, opcode, skb, ndev->ops->core_ops,
1428                                  ndev->ops->n_core_ops);
1429}
1430
1431int nci_core_ntf_packet(struct nci_dev *ndev, __u16 opcode,
1432                        struct sk_buff *skb)
1433{
1434        return nci_op_ntf_packet(ndev, opcode, skb, ndev->ops->core_ops,
1435                                 ndev->ops->n_core_ops);
1436}
1437
1438/* ---- NCI TX Data worker thread ---- */
1439
1440static void nci_tx_work(struct work_struct *work)
1441{
1442        struct nci_dev *ndev = container_of(work, struct nci_dev, tx_work);
1443        struct nci_conn_info *conn_info;
1444        struct sk_buff *skb;
1445
1446        conn_info = nci_get_conn_info_by_conn_id(ndev, ndev->cur_conn_id);
1447        if (!conn_info)
1448                return;
1449
1450        pr_debug("credits_cnt %d\n", atomic_read(&conn_info->credits_cnt));
1451
1452        /* Send queued tx data */
1453        while (atomic_read(&conn_info->credits_cnt)) {
1454                skb = skb_dequeue(&ndev->tx_q);
1455                if (!skb)
1456                        return;
1457
1458                /* Check if data flow control is used */
1459                if (atomic_read(&conn_info->credits_cnt) !=
1460                    NCI_DATA_FLOW_CONTROL_NOT_USED)
1461                        atomic_dec(&conn_info->credits_cnt);
1462
1463                pr_debug("NCI TX: MT=data, PBF=%d, conn_id=%d, plen=%d\n",
1464                         nci_pbf(skb->data),
1465                         nci_conn_id(skb->data),
1466                         nci_plen(skb->data));
1467
1468                nci_send_frame(ndev, skb);
1469
1470                mod_timer(&ndev->data_timer,
1471                          jiffies + msecs_to_jiffies(NCI_DATA_TIMEOUT));
1472        }
1473}
1474
1475/* ----- NCI RX worker thread (data & control) ----- */
1476
1477static void nci_rx_work(struct work_struct *work)
1478{
1479        struct nci_dev *ndev = container_of(work, struct nci_dev, rx_work);
1480        struct sk_buff *skb;
1481
1482        while ((skb = skb_dequeue(&ndev->rx_q))) {
1483
1484                /* Send copy to sniffer */
1485                nfc_send_to_raw_sock(ndev->nfc_dev, skb,
1486                                     RAW_PAYLOAD_NCI, NFC_DIRECTION_RX);
1487
1488                /* Process frame */
1489                switch (nci_mt(skb->data)) {
1490                case NCI_MT_RSP_PKT:
1491                        nci_rsp_packet(ndev, skb);
1492                        break;
1493
1494                case NCI_MT_NTF_PKT:
1495                        nci_ntf_packet(ndev, skb);
1496                        break;
1497
1498                case NCI_MT_DATA_PKT:
1499                        nci_rx_data_packet(ndev, skb);
1500                        break;
1501
1502                default:
1503                        pr_err("unknown MT 0x%x\n", nci_mt(skb->data));
1504                        kfree_skb(skb);
1505                        break;
1506                }
1507        }
1508
1509        /* check if a data exchange timeout has occurred */
1510        if (test_bit(NCI_DATA_EXCHANGE_TO, &ndev->flags)) {
1511                /* complete the data exchange transaction, if exists */
1512                if (test_bit(NCI_DATA_EXCHANGE, &ndev->flags))
1513                        nci_data_exchange_complete(ndev, NULL,
1514                                                   ndev->cur_conn_id,
1515                                                   -ETIMEDOUT);
1516
1517                clear_bit(NCI_DATA_EXCHANGE_TO, &ndev->flags);
1518        }
1519}
1520
1521/* ----- NCI TX CMD worker thread ----- */
1522
1523static void nci_cmd_work(struct work_struct *work)
1524{
1525        struct nci_dev *ndev = container_of(work, struct nci_dev, cmd_work);
1526        struct sk_buff *skb;
1527
1528        pr_debug("cmd_cnt %d\n", atomic_read(&ndev->cmd_cnt));
1529
1530        /* Send queued command */
1531        if (atomic_read(&ndev->cmd_cnt)) {
1532                skb = skb_dequeue(&ndev->cmd_q);
1533                if (!skb)
1534                        return;
1535
1536                atomic_dec(&ndev->cmd_cnt);
1537
1538                pr_debug("NCI TX: MT=cmd, PBF=%d, GID=0x%x, OID=0x%x, plen=%d\n",
1539                         nci_pbf(skb->data),
1540                         nci_opcode_gid(nci_opcode(skb->data)),
1541                         nci_opcode_oid(nci_opcode(skb->data)),
1542                         nci_plen(skb->data));
1543
1544                nci_send_frame(ndev, skb);
1545
1546                mod_timer(&ndev->cmd_timer,
1547                          jiffies + msecs_to_jiffies(NCI_CMD_TIMEOUT));
1548        }
1549}
1550
1551MODULE_LICENSE("GPL");
1552