mirror of
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2025-10-31 16:54:21 +00:00
7525858679
In digital_tg_recv_dep_req, it calls nfc_tm_data_received(..,resp).
If nfc_tm_data_received() failed, the callee will free the resp via
kfree_skb() and return error. But in the exit branch, the resp
will be freed again.
My patch sets resp to NULL if nfc_tm_data_received() failed, to
avoid the double free.
Fixes: 1c7a4c24fb ("NFC Digital: Add target NFC-DEP support")
Signed-off-by: Lv Yunlong <lyl2019@mail.ustc.edu.cn>
Signed-off-by: David S. Miller <davem@davemloft.net>
1633 lines
34 KiB
C
1633 lines
34 KiB
C
// SPDX-License-Identifier: GPL-2.0-only
|
|
/*
|
|
* NFC Digital Protocol stack
|
|
* Copyright (c) 2013, Intel Corporation.
|
|
*/
|
|
|
|
#define pr_fmt(fmt) "digital: %s: " fmt, __func__
|
|
|
|
#include "digital.h"
|
|
|
|
#define DIGITAL_NFC_DEP_N_RETRY_NACK 2
|
|
#define DIGITAL_NFC_DEP_N_RETRY_ATN 2
|
|
|
|
#define DIGITAL_NFC_DEP_FRAME_DIR_OUT 0xD4
|
|
#define DIGITAL_NFC_DEP_FRAME_DIR_IN 0xD5
|
|
|
|
#define DIGITAL_NFC_DEP_NFCA_SOD_SB 0xF0
|
|
|
|
#define DIGITAL_CMD_ATR_REQ 0x00
|
|
#define DIGITAL_CMD_ATR_RES 0x01
|
|
#define DIGITAL_CMD_PSL_REQ 0x04
|
|
#define DIGITAL_CMD_PSL_RES 0x05
|
|
#define DIGITAL_CMD_DEP_REQ 0x06
|
|
#define DIGITAL_CMD_DEP_RES 0x07
|
|
|
|
#define DIGITAL_ATR_REQ_MIN_SIZE 16
|
|
#define DIGITAL_ATR_REQ_MAX_SIZE 64
|
|
|
|
#define DIGITAL_ATR_RES_TO_WT(s) ((s) & 0xF)
|
|
|
|
#define DIGITAL_DID_MAX 14
|
|
|
|
#define DIGITAL_PAYLOAD_SIZE_MAX 254
|
|
#define DIGITAL_PAYLOAD_BITS_TO_PP(s) (((s) & 0x3) << 4)
|
|
#define DIGITAL_PAYLOAD_PP_TO_BITS(s) (((s) >> 4) & 0x3)
|
|
#define DIGITAL_PAYLOAD_BITS_TO_FSL(s) ((s) & 0x3)
|
|
#define DIGITAL_PAYLOAD_FSL_TO_BITS(s) ((s) & 0x3)
|
|
|
|
#define DIGITAL_GB_BIT 0x02
|
|
|
|
#define DIGITAL_NFC_DEP_PFB_TYPE(pfb) ((pfb) & 0xE0)
|
|
|
|
#define DIGITAL_NFC_DEP_PFB_TIMEOUT_BIT 0x10
|
|
#define DIGITAL_NFC_DEP_PFB_MI_BIT 0x10
|
|
#define DIGITAL_NFC_DEP_PFB_NACK_BIT 0x10
|
|
#define DIGITAL_NFC_DEP_PFB_DID_BIT 0x04
|
|
|
|
#define DIGITAL_NFC_DEP_PFB_IS_TIMEOUT(pfb) \
|
|
((pfb) & DIGITAL_NFC_DEP_PFB_TIMEOUT_BIT)
|
|
#define DIGITAL_NFC_DEP_MI_BIT_SET(pfb) ((pfb) & DIGITAL_NFC_DEP_PFB_MI_BIT)
|
|
#define DIGITAL_NFC_DEP_NACK_BIT_SET(pfb) ((pfb) & DIGITAL_NFC_DEP_PFB_NACK_BIT)
|
|
#define DIGITAL_NFC_DEP_NAD_BIT_SET(pfb) ((pfb) & 0x08)
|
|
#define DIGITAL_NFC_DEP_DID_BIT_SET(pfb) ((pfb) & DIGITAL_NFC_DEP_PFB_DID_BIT)
|
|
#define DIGITAL_NFC_DEP_PFB_PNI(pfb) ((pfb) & 0x03)
|
|
|
|
#define DIGITAL_NFC_DEP_RTOX_VALUE(data) ((data) & 0x3F)
|
|
#define DIGITAL_NFC_DEP_RTOX_MAX 59
|
|
|
|
#define DIGITAL_NFC_DEP_PFB_I_PDU 0x00
|
|
#define DIGITAL_NFC_DEP_PFB_ACK_NACK_PDU 0x40
|
|
#define DIGITAL_NFC_DEP_PFB_SUPERVISOR_PDU 0x80
|
|
|
|
struct digital_atr_req {
|
|
u8 dir;
|
|
u8 cmd;
|
|
u8 nfcid3[10];
|
|
u8 did;
|
|
u8 bs;
|
|
u8 br;
|
|
u8 pp;
|
|
u8 gb[];
|
|
} __packed;
|
|
|
|
struct digital_atr_res {
|
|
u8 dir;
|
|
u8 cmd;
|
|
u8 nfcid3[10];
|
|
u8 did;
|
|
u8 bs;
|
|
u8 br;
|
|
u8 to;
|
|
u8 pp;
|
|
u8 gb[];
|
|
} __packed;
|
|
|
|
struct digital_psl_req {
|
|
u8 dir;
|
|
u8 cmd;
|
|
u8 did;
|
|
u8 brs;
|
|
u8 fsl;
|
|
} __packed;
|
|
|
|
struct digital_psl_res {
|
|
u8 dir;
|
|
u8 cmd;
|
|
u8 did;
|
|
} __packed;
|
|
|
|
struct digital_dep_req_res {
|
|
u8 dir;
|
|
u8 cmd;
|
|
u8 pfb;
|
|
} __packed;
|
|
|
|
static void digital_in_recv_dep_res(struct nfc_digital_dev *ddev, void *arg,
|
|
struct sk_buff *resp);
|
|
static void digital_tg_recv_dep_req(struct nfc_digital_dev *ddev, void *arg,
|
|
struct sk_buff *resp);
|
|
|
|
static const u8 digital_payload_bits_map[4] = {
|
|
[0] = 64,
|
|
[1] = 128,
|
|
[2] = 192,
|
|
[3] = 254
|
|
};
|
|
|
|
/* Response Waiting Time for ATR_RES PDU in ms
|
|
*
|
|
* RWT(ATR_RES) = RWT(nfcdep,activation) + dRWT(nfcdep) + dT(nfcdep,initiator)
|
|
*
|
|
* with:
|
|
* RWT(nfcdep,activation) = 4096 * 2^12 / f(c) s
|
|
* dRWT(nfcdep) = 16 / f(c) s
|
|
* dT(nfcdep,initiator) = 100 ms
|
|
* f(c) = 13560000 Hz
|
|
*/
|
|
#define DIGITAL_ATR_RES_RWT 1337
|
|
|
|
/* Response Waiting Time for other DEP PDUs in ms
|
|
*
|
|
* max_rwt = rwt + dRWT(nfcdep) + dT(nfcdep,initiator)
|
|
*
|
|
* with:
|
|
* rwt = (256 * 16 / f(c)) * 2^wt s
|
|
* dRWT(nfcdep) = 16 / f(c) s
|
|
* dT(nfcdep,initiator) = 100 ms
|
|
* f(c) = 13560000 Hz
|
|
* 0 <= wt <= 14 (given by the target by the TO field of ATR_RES response)
|
|
*/
|
|
#define DIGITAL_NFC_DEP_IN_MAX_WT 14
|
|
#define DIGITAL_NFC_DEP_TG_MAX_WT 14
|
|
static const u16 digital_rwt_map[DIGITAL_NFC_DEP_IN_MAX_WT + 1] = {
|
|
100, 101, 101, 102, 105,
|
|
110, 119, 139, 177, 255,
|
|
409, 719, 1337, 2575, 5049,
|
|
};
|
|
|
|
static u8 digital_payload_bits_to_size(u8 payload_bits)
|
|
{
|
|
if (payload_bits >= ARRAY_SIZE(digital_payload_bits_map))
|
|
return 0;
|
|
|
|
return digital_payload_bits_map[payload_bits];
|
|
}
|
|
|
|
static u8 digital_payload_size_to_bits(u8 payload_size)
|
|
{
|
|
int i;
|
|
|
|
for (i = 0; i < ARRAY_SIZE(digital_payload_bits_map); i++)
|
|
if (digital_payload_bits_map[i] == payload_size)
|
|
return i;
|
|
|
|
return 0xff;
|
|
}
|
|
|
|
static void digital_skb_push_dep_sod(struct nfc_digital_dev *ddev,
|
|
struct sk_buff *skb)
|
|
{
|
|
skb_push(skb, sizeof(u8));
|
|
|
|
skb->data[0] = skb->len;
|
|
|
|
if (ddev->curr_rf_tech == NFC_DIGITAL_RF_TECH_106A)
|
|
*(u8 *)skb_push(skb, sizeof(u8)) = DIGITAL_NFC_DEP_NFCA_SOD_SB;
|
|
}
|
|
|
|
static int digital_skb_pull_dep_sod(struct nfc_digital_dev *ddev,
|
|
struct sk_buff *skb)
|
|
{
|
|
u8 size;
|
|
|
|
if (skb->len < 2)
|
|
return -EIO;
|
|
|
|
if (ddev->curr_rf_tech == NFC_DIGITAL_RF_TECH_106A)
|
|
skb_pull(skb, sizeof(u8));
|
|
|
|
size = skb->data[0];
|
|
if (size != skb->len)
|
|
return -EIO;
|
|
|
|
skb_pull(skb, sizeof(u8));
|
|
|
|
return 0;
|
|
}
|
|
|
|
static struct sk_buff *
|
|
digital_send_dep_data_prep(struct nfc_digital_dev *ddev, struct sk_buff *skb,
|
|
struct digital_dep_req_res *dep_req_res,
|
|
struct digital_data_exch *data_exch)
|
|
{
|
|
struct sk_buff *new_skb;
|
|
|
|
if (skb->len > ddev->remote_payload_max) {
|
|
dep_req_res->pfb |= DIGITAL_NFC_DEP_PFB_MI_BIT;
|
|
|
|
new_skb = digital_skb_alloc(ddev, ddev->remote_payload_max);
|
|
if (!new_skb) {
|
|
kfree_skb(ddev->chaining_skb);
|
|
ddev->chaining_skb = NULL;
|
|
|
|
return ERR_PTR(-ENOMEM);
|
|
}
|
|
|
|
skb_put_data(new_skb, skb->data, ddev->remote_payload_max);
|
|
skb_pull(skb, ddev->remote_payload_max);
|
|
|
|
ddev->chaining_skb = skb;
|
|
ddev->data_exch = data_exch;
|
|
} else {
|
|
ddev->chaining_skb = NULL;
|
|
new_skb = skb;
|
|
}
|
|
|
|
return new_skb;
|
|
}
|
|
|
|
static struct sk_buff *
|
|
digital_recv_dep_data_gather(struct nfc_digital_dev *ddev, u8 pfb,
|
|
struct sk_buff *resp,
|
|
int (*send_ack)(struct nfc_digital_dev *ddev,
|
|
struct digital_data_exch
|
|
*data_exch),
|
|
struct digital_data_exch *data_exch)
|
|
{
|
|
struct sk_buff *new_skb;
|
|
int rc;
|
|
|
|
if (DIGITAL_NFC_DEP_MI_BIT_SET(pfb) && (!ddev->chaining_skb)) {
|
|
ddev->chaining_skb =
|
|
nfc_alloc_recv_skb(8 * ddev->local_payload_max,
|
|
GFP_KERNEL);
|
|
if (!ddev->chaining_skb) {
|
|
rc = -ENOMEM;
|
|
goto error;
|
|
}
|
|
}
|
|
|
|
if (ddev->chaining_skb) {
|
|
if (resp->len > skb_tailroom(ddev->chaining_skb)) {
|
|
new_skb = skb_copy_expand(ddev->chaining_skb,
|
|
skb_headroom(
|
|
ddev->chaining_skb),
|
|
8 * ddev->local_payload_max,
|
|
GFP_KERNEL);
|
|
if (!new_skb) {
|
|
rc = -ENOMEM;
|
|
goto error;
|
|
}
|
|
|
|
kfree_skb(ddev->chaining_skb);
|
|
ddev->chaining_skb = new_skb;
|
|
}
|
|
|
|
skb_put_data(ddev->chaining_skb, resp->data, resp->len);
|
|
|
|
kfree_skb(resp);
|
|
resp = NULL;
|
|
|
|
if (DIGITAL_NFC_DEP_MI_BIT_SET(pfb)) {
|
|
rc = send_ack(ddev, data_exch);
|
|
if (rc)
|
|
goto error;
|
|
|
|
return NULL;
|
|
}
|
|
|
|
resp = ddev->chaining_skb;
|
|
ddev->chaining_skb = NULL;
|
|
}
|
|
|
|
return resp;
|
|
|
|
error:
|
|
kfree_skb(resp);
|
|
|
|
kfree_skb(ddev->chaining_skb);
|
|
ddev->chaining_skb = NULL;
|
|
|
|
return ERR_PTR(rc);
|
|
}
|
|
|
|
static void digital_in_recv_psl_res(struct nfc_digital_dev *ddev, void *arg,
|
|
struct sk_buff *resp)
|
|
{
|
|
struct nfc_target *target = arg;
|
|
struct digital_psl_res *psl_res;
|
|
int rc;
|
|
|
|
if (IS_ERR(resp)) {
|
|
rc = PTR_ERR(resp);
|
|
resp = NULL;
|
|
goto exit;
|
|
}
|
|
|
|
rc = ddev->skb_check_crc(resp);
|
|
if (rc) {
|
|
PROTOCOL_ERR("14.4.1.6");
|
|
goto exit;
|
|
}
|
|
|
|
rc = digital_skb_pull_dep_sod(ddev, resp);
|
|
if (rc) {
|
|
PROTOCOL_ERR("14.4.1.2");
|
|
goto exit;
|
|
}
|
|
|
|
psl_res = (struct digital_psl_res *)resp->data;
|
|
|
|
if ((resp->len != sizeof(*psl_res)) ||
|
|
(psl_res->dir != DIGITAL_NFC_DEP_FRAME_DIR_IN) ||
|
|
(psl_res->cmd != DIGITAL_CMD_PSL_RES)) {
|
|
rc = -EIO;
|
|
goto exit;
|
|
}
|
|
|
|
rc = digital_in_configure_hw(ddev, NFC_DIGITAL_CONFIG_RF_TECH,
|
|
NFC_DIGITAL_RF_TECH_424F);
|
|
if (rc)
|
|
goto exit;
|
|
|
|
rc = digital_in_configure_hw(ddev, NFC_DIGITAL_CONFIG_FRAMING,
|
|
NFC_DIGITAL_FRAMING_NFCF_NFC_DEP);
|
|
if (rc)
|
|
goto exit;
|
|
|
|
if (!DIGITAL_DRV_CAPS_IN_CRC(ddev) &&
|
|
(ddev->curr_rf_tech == NFC_DIGITAL_RF_TECH_106A)) {
|
|
ddev->skb_add_crc = digital_skb_add_crc_f;
|
|
ddev->skb_check_crc = digital_skb_check_crc_f;
|
|
}
|
|
|
|
ddev->curr_rf_tech = NFC_DIGITAL_RF_TECH_424F;
|
|
|
|
nfc_dep_link_is_up(ddev->nfc_dev, target->idx, NFC_COMM_ACTIVE,
|
|
NFC_RF_INITIATOR);
|
|
|
|
ddev->curr_nfc_dep_pni = 0;
|
|
|
|
exit:
|
|
dev_kfree_skb(resp);
|
|
|
|
if (rc)
|
|
ddev->curr_protocol = 0;
|
|
}
|
|
|
|
static int digital_in_send_psl_req(struct nfc_digital_dev *ddev,
|
|
struct nfc_target *target)
|
|
{
|
|
struct sk_buff *skb;
|
|
struct digital_psl_req *psl_req;
|
|
int rc;
|
|
u8 payload_size, payload_bits;
|
|
|
|
skb = digital_skb_alloc(ddev, sizeof(*psl_req));
|
|
if (!skb)
|
|
return -ENOMEM;
|
|
|
|
skb_put(skb, sizeof(*psl_req));
|
|
|
|
psl_req = (struct digital_psl_req *)skb->data;
|
|
|
|
psl_req->dir = DIGITAL_NFC_DEP_FRAME_DIR_OUT;
|
|
psl_req->cmd = DIGITAL_CMD_PSL_REQ;
|
|
psl_req->did = 0;
|
|
psl_req->brs = (0x2 << 3) | 0x2; /* 424F both directions */
|
|
|
|
payload_size = min(ddev->local_payload_max, ddev->remote_payload_max);
|
|
payload_bits = digital_payload_size_to_bits(payload_size);
|
|
psl_req->fsl = DIGITAL_PAYLOAD_BITS_TO_FSL(payload_bits);
|
|
|
|
ddev->local_payload_max = payload_size;
|
|
ddev->remote_payload_max = payload_size;
|
|
|
|
digital_skb_push_dep_sod(ddev, skb);
|
|
|
|
ddev->skb_add_crc(skb);
|
|
|
|
rc = digital_in_send_cmd(ddev, skb, ddev->dep_rwt,
|
|
digital_in_recv_psl_res, target);
|
|
if (rc)
|
|
kfree_skb(skb);
|
|
|
|
return rc;
|
|
}
|
|
|
|
static void digital_in_recv_atr_res(struct nfc_digital_dev *ddev, void *arg,
|
|
struct sk_buff *resp)
|
|
{
|
|
struct nfc_target *target = arg;
|
|
struct digital_atr_res *atr_res;
|
|
u8 gb_len, payload_bits;
|
|
u8 wt;
|
|
int rc;
|
|
|
|
if (IS_ERR(resp)) {
|
|
rc = PTR_ERR(resp);
|
|
resp = NULL;
|
|
goto exit;
|
|
}
|
|
|
|
rc = ddev->skb_check_crc(resp);
|
|
if (rc) {
|
|
PROTOCOL_ERR("14.4.1.6");
|
|
goto exit;
|
|
}
|
|
|
|
rc = digital_skb_pull_dep_sod(ddev, resp);
|
|
if (rc) {
|
|
PROTOCOL_ERR("14.4.1.2");
|
|
goto exit;
|
|
}
|
|
|
|
if (resp->len < sizeof(struct digital_atr_res)) {
|
|
rc = -EIO;
|
|
goto exit;
|
|
}
|
|
|
|
gb_len = resp->len - sizeof(struct digital_atr_res);
|
|
|
|
atr_res = (struct digital_atr_res *)resp->data;
|
|
|
|
wt = DIGITAL_ATR_RES_TO_WT(atr_res->to);
|
|
if (wt > DIGITAL_NFC_DEP_IN_MAX_WT)
|
|
wt = DIGITAL_NFC_DEP_IN_MAX_WT;
|
|
ddev->dep_rwt = digital_rwt_map[wt];
|
|
|
|
payload_bits = DIGITAL_PAYLOAD_PP_TO_BITS(atr_res->pp);
|
|
ddev->remote_payload_max = digital_payload_bits_to_size(payload_bits);
|
|
|
|
if (!ddev->remote_payload_max) {
|
|
rc = -EINVAL;
|
|
goto exit;
|
|
}
|
|
|
|
rc = nfc_set_remote_general_bytes(ddev->nfc_dev, atr_res->gb, gb_len);
|
|
if (rc)
|
|
goto exit;
|
|
|
|
if ((ddev->protocols & NFC_PROTO_FELICA_MASK) &&
|
|
(ddev->curr_rf_tech != NFC_DIGITAL_RF_TECH_424F)) {
|
|
rc = digital_in_send_psl_req(ddev, target);
|
|
if (!rc)
|
|
goto exit;
|
|
}
|
|
|
|
rc = nfc_dep_link_is_up(ddev->nfc_dev, target->idx, NFC_COMM_ACTIVE,
|
|
NFC_RF_INITIATOR);
|
|
|
|
ddev->curr_nfc_dep_pni = 0;
|
|
|
|
exit:
|
|
dev_kfree_skb(resp);
|
|
|
|
if (rc)
|
|
ddev->curr_protocol = 0;
|
|
}
|
|
|
|
int digital_in_send_atr_req(struct nfc_digital_dev *ddev,
|
|
struct nfc_target *target, __u8 comm_mode, __u8 *gb,
|
|
size_t gb_len)
|
|
{
|
|
struct sk_buff *skb;
|
|
struct digital_atr_req *atr_req;
|
|
uint size;
|
|
int rc;
|
|
u8 payload_bits;
|
|
|
|
size = DIGITAL_ATR_REQ_MIN_SIZE + gb_len;
|
|
|
|
if (size > DIGITAL_ATR_REQ_MAX_SIZE) {
|
|
PROTOCOL_ERR("14.6.1.1");
|
|
return -EINVAL;
|
|
}
|
|
|
|
skb = digital_skb_alloc(ddev, size);
|
|
if (!skb)
|
|
return -ENOMEM;
|
|
|
|
skb_put(skb, sizeof(struct digital_atr_req));
|
|
|
|
atr_req = (struct digital_atr_req *)skb->data;
|
|
memset(atr_req, 0, sizeof(struct digital_atr_req));
|
|
|
|
atr_req->dir = DIGITAL_NFC_DEP_FRAME_DIR_OUT;
|
|
atr_req->cmd = DIGITAL_CMD_ATR_REQ;
|
|
if (target->nfcid2_len)
|
|
memcpy(atr_req->nfcid3, target->nfcid2, NFC_NFCID2_MAXSIZE);
|
|
else
|
|
get_random_bytes(atr_req->nfcid3, NFC_NFCID3_MAXSIZE);
|
|
|
|
atr_req->did = 0;
|
|
atr_req->bs = 0;
|
|
atr_req->br = 0;
|
|
|
|
ddev->local_payload_max = DIGITAL_PAYLOAD_SIZE_MAX;
|
|
payload_bits = digital_payload_size_to_bits(ddev->local_payload_max);
|
|
atr_req->pp = DIGITAL_PAYLOAD_BITS_TO_PP(payload_bits);
|
|
|
|
if (gb_len) {
|
|
atr_req->pp |= DIGITAL_GB_BIT;
|
|
skb_put_data(skb, gb, gb_len);
|
|
}
|
|
|
|
digital_skb_push_dep_sod(ddev, skb);
|
|
|
|
ddev->skb_add_crc(skb);
|
|
|
|
rc = digital_in_send_cmd(ddev, skb, DIGITAL_ATR_RES_RWT,
|
|
digital_in_recv_atr_res, target);
|
|
if (rc)
|
|
kfree_skb(skb);
|
|
|
|
return rc;
|
|
}
|
|
|
|
static int digital_in_send_ack(struct nfc_digital_dev *ddev,
|
|
struct digital_data_exch *data_exch)
|
|
{
|
|
struct digital_dep_req_res *dep_req;
|
|
struct sk_buff *skb;
|
|
int rc;
|
|
|
|
skb = digital_skb_alloc(ddev, 1);
|
|
if (!skb)
|
|
return -ENOMEM;
|
|
|
|
skb_push(skb, sizeof(struct digital_dep_req_res));
|
|
|
|
dep_req = (struct digital_dep_req_res *)skb->data;
|
|
|
|
dep_req->dir = DIGITAL_NFC_DEP_FRAME_DIR_OUT;
|
|
dep_req->cmd = DIGITAL_CMD_DEP_REQ;
|
|
dep_req->pfb = DIGITAL_NFC_DEP_PFB_ACK_NACK_PDU |
|
|
ddev->curr_nfc_dep_pni;
|
|
|
|
digital_skb_push_dep_sod(ddev, skb);
|
|
|
|
ddev->skb_add_crc(skb);
|
|
|
|
ddev->saved_skb = pskb_copy(skb, GFP_KERNEL);
|
|
|
|
rc = digital_in_send_cmd(ddev, skb, ddev->dep_rwt,
|
|
digital_in_recv_dep_res, data_exch);
|
|
if (rc) {
|
|
kfree_skb(skb);
|
|
kfree_skb(ddev->saved_skb);
|
|
ddev->saved_skb = NULL;
|
|
}
|
|
|
|
return rc;
|
|
}
|
|
|
|
static int digital_in_send_nack(struct nfc_digital_dev *ddev,
|
|
struct digital_data_exch *data_exch)
|
|
{
|
|
struct digital_dep_req_res *dep_req;
|
|
struct sk_buff *skb;
|
|
int rc;
|
|
|
|
skb = digital_skb_alloc(ddev, 1);
|
|
if (!skb)
|
|
return -ENOMEM;
|
|
|
|
skb_push(skb, sizeof(struct digital_dep_req_res));
|
|
|
|
dep_req = (struct digital_dep_req_res *)skb->data;
|
|
|
|
dep_req->dir = DIGITAL_NFC_DEP_FRAME_DIR_OUT;
|
|
dep_req->cmd = DIGITAL_CMD_DEP_REQ;
|
|
dep_req->pfb = DIGITAL_NFC_DEP_PFB_ACK_NACK_PDU |
|
|
DIGITAL_NFC_DEP_PFB_NACK_BIT | ddev->curr_nfc_dep_pni;
|
|
|
|
digital_skb_push_dep_sod(ddev, skb);
|
|
|
|
ddev->skb_add_crc(skb);
|
|
|
|
rc = digital_in_send_cmd(ddev, skb, ddev->dep_rwt,
|
|
digital_in_recv_dep_res, data_exch);
|
|
if (rc)
|
|
kfree_skb(skb);
|
|
|
|
return rc;
|
|
}
|
|
|
|
static int digital_in_send_atn(struct nfc_digital_dev *ddev,
|
|
struct digital_data_exch *data_exch)
|
|
{
|
|
struct digital_dep_req_res *dep_req;
|
|
struct sk_buff *skb;
|
|
int rc;
|
|
|
|
skb = digital_skb_alloc(ddev, 1);
|
|
if (!skb)
|
|
return -ENOMEM;
|
|
|
|
skb_push(skb, sizeof(struct digital_dep_req_res));
|
|
|
|
dep_req = (struct digital_dep_req_res *)skb->data;
|
|
|
|
dep_req->dir = DIGITAL_NFC_DEP_FRAME_DIR_OUT;
|
|
dep_req->cmd = DIGITAL_CMD_DEP_REQ;
|
|
dep_req->pfb = DIGITAL_NFC_DEP_PFB_SUPERVISOR_PDU;
|
|
|
|
digital_skb_push_dep_sod(ddev, skb);
|
|
|
|
ddev->skb_add_crc(skb);
|
|
|
|
rc = digital_in_send_cmd(ddev, skb, ddev->dep_rwt,
|
|
digital_in_recv_dep_res, data_exch);
|
|
if (rc)
|
|
kfree_skb(skb);
|
|
|
|
return rc;
|
|
}
|
|
|
|
static int digital_in_send_rtox(struct nfc_digital_dev *ddev,
|
|
struct digital_data_exch *data_exch, u8 rtox)
|
|
{
|
|
struct digital_dep_req_res *dep_req;
|
|
struct sk_buff *skb;
|
|
int rc;
|
|
u16 rwt_int;
|
|
|
|
rwt_int = ddev->dep_rwt * rtox;
|
|
if (rwt_int > digital_rwt_map[DIGITAL_NFC_DEP_IN_MAX_WT])
|
|
rwt_int = digital_rwt_map[DIGITAL_NFC_DEP_IN_MAX_WT];
|
|
|
|
skb = digital_skb_alloc(ddev, 1);
|
|
if (!skb)
|
|
return -ENOMEM;
|
|
|
|
skb_put_u8(skb, rtox);
|
|
|
|
skb_push(skb, sizeof(struct digital_dep_req_res));
|
|
|
|
dep_req = (struct digital_dep_req_res *)skb->data;
|
|
|
|
dep_req->dir = DIGITAL_NFC_DEP_FRAME_DIR_OUT;
|
|
dep_req->cmd = DIGITAL_CMD_DEP_REQ;
|
|
dep_req->pfb = DIGITAL_NFC_DEP_PFB_SUPERVISOR_PDU |
|
|
DIGITAL_NFC_DEP_PFB_TIMEOUT_BIT;
|
|
|
|
digital_skb_push_dep_sod(ddev, skb);
|
|
|
|
ddev->skb_add_crc(skb);
|
|
|
|
rc = digital_in_send_cmd(ddev, skb, rwt_int,
|
|
digital_in_recv_dep_res, data_exch);
|
|
if (rc)
|
|
kfree_skb(skb);
|
|
|
|
return rc;
|
|
}
|
|
|
|
static int digital_in_send_saved_skb(struct nfc_digital_dev *ddev,
|
|
struct digital_data_exch *data_exch)
|
|
{
|
|
int rc;
|
|
|
|
if (!ddev->saved_skb)
|
|
return -EINVAL;
|
|
|
|
skb_get(ddev->saved_skb);
|
|
|
|
rc = digital_in_send_cmd(ddev, ddev->saved_skb, ddev->dep_rwt,
|
|
digital_in_recv_dep_res, data_exch);
|
|
if (rc)
|
|
kfree_skb(ddev->saved_skb);
|
|
|
|
return rc;
|
|
}
|
|
|
|
static void digital_in_recv_dep_res(struct nfc_digital_dev *ddev, void *arg,
|
|
struct sk_buff *resp)
|
|
{
|
|
struct digital_data_exch *data_exch = arg;
|
|
struct digital_dep_req_res *dep_res;
|
|
u8 pfb;
|
|
uint size;
|
|
int rc;
|
|
u8 rtox;
|
|
|
|
if (IS_ERR(resp)) {
|
|
rc = PTR_ERR(resp);
|
|
resp = NULL;
|
|
|
|
if ((rc == -EIO || (rc == -ETIMEDOUT && ddev->nack_count)) &&
|
|
(ddev->nack_count++ < DIGITAL_NFC_DEP_N_RETRY_NACK)) {
|
|
ddev->atn_count = 0;
|
|
|
|
rc = digital_in_send_nack(ddev, data_exch);
|
|
if (rc)
|
|
goto error;
|
|
|
|
return;
|
|
} else if ((rc == -ETIMEDOUT) &&
|
|
(ddev->atn_count++ < DIGITAL_NFC_DEP_N_RETRY_ATN)) {
|
|
ddev->nack_count = 0;
|
|
|
|
rc = digital_in_send_atn(ddev, data_exch);
|
|
if (rc)
|
|
goto error;
|
|
|
|
return;
|
|
}
|
|
|
|
goto exit;
|
|
}
|
|
|
|
rc = digital_skb_pull_dep_sod(ddev, resp);
|
|
if (rc) {
|
|
PROTOCOL_ERR("14.4.1.2");
|
|
goto exit;
|
|
}
|
|
|
|
rc = ddev->skb_check_crc(resp);
|
|
if (rc) {
|
|
if ((resp->len >= 4) &&
|
|
(ddev->nack_count++ < DIGITAL_NFC_DEP_N_RETRY_NACK)) {
|
|
ddev->atn_count = 0;
|
|
|
|
rc = digital_in_send_nack(ddev, data_exch);
|
|
if (rc)
|
|
goto error;
|
|
|
|
kfree_skb(resp);
|
|
|
|
return;
|
|
}
|
|
|
|
PROTOCOL_ERR("14.4.1.6");
|
|
goto error;
|
|
}
|
|
|
|
ddev->atn_count = 0;
|
|
ddev->nack_count = 0;
|
|
|
|
if (resp->len > ddev->local_payload_max) {
|
|
rc = -EMSGSIZE;
|
|
goto exit;
|
|
}
|
|
|
|
size = sizeof(struct digital_dep_req_res);
|
|
dep_res = (struct digital_dep_req_res *)resp->data;
|
|
|
|
if (resp->len < size || dep_res->dir != DIGITAL_NFC_DEP_FRAME_DIR_IN ||
|
|
dep_res->cmd != DIGITAL_CMD_DEP_RES) {
|
|
rc = -EIO;
|
|
goto error;
|
|
}
|
|
|
|
pfb = dep_res->pfb;
|
|
|
|
if (DIGITAL_NFC_DEP_DID_BIT_SET(pfb)) {
|
|
PROTOCOL_ERR("14.8.2.1");
|
|
rc = -EIO;
|
|
goto error;
|
|
}
|
|
|
|
if (DIGITAL_NFC_DEP_NAD_BIT_SET(pfb)) {
|
|
rc = -EIO;
|
|
goto exit;
|
|
}
|
|
|
|
if (size > resp->len) {
|
|
rc = -EIO;
|
|
goto error;
|
|
}
|
|
|
|
skb_pull(resp, size);
|
|
|
|
switch (DIGITAL_NFC_DEP_PFB_TYPE(pfb)) {
|
|
case DIGITAL_NFC_DEP_PFB_I_PDU:
|
|
if (DIGITAL_NFC_DEP_PFB_PNI(pfb) != ddev->curr_nfc_dep_pni) {
|
|
PROTOCOL_ERR("14.12.3.3");
|
|
rc = -EIO;
|
|
goto error;
|
|
}
|
|
|
|
ddev->curr_nfc_dep_pni =
|
|
DIGITAL_NFC_DEP_PFB_PNI(ddev->curr_nfc_dep_pni + 1);
|
|
|
|
kfree_skb(ddev->saved_skb);
|
|
ddev->saved_skb = NULL;
|
|
|
|
resp = digital_recv_dep_data_gather(ddev, pfb, resp,
|
|
digital_in_send_ack,
|
|
data_exch);
|
|
if (IS_ERR(resp)) {
|
|
rc = PTR_ERR(resp);
|
|
resp = NULL;
|
|
goto error;
|
|
}
|
|
|
|
/* If resp is NULL then we're still chaining so return and
|
|
* wait for the next part of the PDU. Else, the PDU is
|
|
* complete so pass it up.
|
|
*/
|
|
if (!resp)
|
|
return;
|
|
|
|
rc = 0;
|
|
break;
|
|
|
|
case DIGITAL_NFC_DEP_PFB_ACK_NACK_PDU:
|
|
if (DIGITAL_NFC_DEP_NACK_BIT_SET(pfb)) {
|
|
PROTOCOL_ERR("14.12.4.5");
|
|
rc = -EIO;
|
|
goto exit;
|
|
}
|
|
|
|
if (DIGITAL_NFC_DEP_PFB_PNI(pfb) != ddev->curr_nfc_dep_pni) {
|
|
PROTOCOL_ERR("14.12.3.3");
|
|
rc = -EIO;
|
|
goto exit;
|
|
}
|
|
|
|
ddev->curr_nfc_dep_pni =
|
|
DIGITAL_NFC_DEP_PFB_PNI(ddev->curr_nfc_dep_pni + 1);
|
|
|
|
if (!ddev->chaining_skb) {
|
|
PROTOCOL_ERR("14.12.4.3");
|
|
rc = -EIO;
|
|
goto exit;
|
|
}
|
|
|
|
/* The initiator has received a valid ACK. Free the last sent
|
|
* PDU and keep on sending chained skb.
|
|
*/
|
|
kfree_skb(ddev->saved_skb);
|
|
ddev->saved_skb = NULL;
|
|
|
|
rc = digital_in_send_dep_req(ddev, NULL,
|
|
ddev->chaining_skb,
|
|
ddev->data_exch);
|
|
if (rc)
|
|
goto error;
|
|
|
|
goto free_resp;
|
|
|
|
case DIGITAL_NFC_DEP_PFB_SUPERVISOR_PDU:
|
|
if (!DIGITAL_NFC_DEP_PFB_IS_TIMEOUT(pfb)) { /* ATN */
|
|
rc = digital_in_send_saved_skb(ddev, data_exch);
|
|
if (rc)
|
|
goto error;
|
|
|
|
goto free_resp;
|
|
}
|
|
|
|
if (ddev->atn_count || ddev->nack_count) {
|
|
PROTOCOL_ERR("14.12.4.4");
|
|
rc = -EIO;
|
|
goto error;
|
|
}
|
|
|
|
rtox = DIGITAL_NFC_DEP_RTOX_VALUE(resp->data[0]);
|
|
if (!rtox || rtox > DIGITAL_NFC_DEP_RTOX_MAX) {
|
|
PROTOCOL_ERR("14.8.4.1");
|
|
rc = -EIO;
|
|
goto error;
|
|
}
|
|
|
|
rc = digital_in_send_rtox(ddev, data_exch, rtox);
|
|
if (rc)
|
|
goto error;
|
|
|
|
goto free_resp;
|
|
}
|
|
|
|
exit:
|
|
data_exch->cb(data_exch->cb_context, resp, rc);
|
|
|
|
error:
|
|
kfree(data_exch);
|
|
|
|
kfree_skb(ddev->chaining_skb);
|
|
ddev->chaining_skb = NULL;
|
|
|
|
kfree_skb(ddev->saved_skb);
|
|
ddev->saved_skb = NULL;
|
|
|
|
if (rc)
|
|
kfree_skb(resp);
|
|
|
|
return;
|
|
|
|
free_resp:
|
|
dev_kfree_skb(resp);
|
|
}
|
|
|
|
int digital_in_send_dep_req(struct nfc_digital_dev *ddev,
|
|
struct nfc_target *target, struct sk_buff *skb,
|
|
struct digital_data_exch *data_exch)
|
|
{
|
|
struct digital_dep_req_res *dep_req;
|
|
struct sk_buff *chaining_skb, *tmp_skb;
|
|
int rc;
|
|
|
|
skb_push(skb, sizeof(struct digital_dep_req_res));
|
|
|
|
dep_req = (struct digital_dep_req_res *)skb->data;
|
|
|
|
dep_req->dir = DIGITAL_NFC_DEP_FRAME_DIR_OUT;
|
|
dep_req->cmd = DIGITAL_CMD_DEP_REQ;
|
|
dep_req->pfb = ddev->curr_nfc_dep_pni;
|
|
|
|
ddev->atn_count = 0;
|
|
ddev->nack_count = 0;
|
|
|
|
chaining_skb = ddev->chaining_skb;
|
|
|
|
tmp_skb = digital_send_dep_data_prep(ddev, skb, dep_req, data_exch);
|
|
if (IS_ERR(tmp_skb))
|
|
return PTR_ERR(tmp_skb);
|
|
|
|
digital_skb_push_dep_sod(ddev, tmp_skb);
|
|
|
|
ddev->skb_add_crc(tmp_skb);
|
|
|
|
ddev->saved_skb = pskb_copy(tmp_skb, GFP_KERNEL);
|
|
|
|
rc = digital_in_send_cmd(ddev, tmp_skb, ddev->dep_rwt,
|
|
digital_in_recv_dep_res, data_exch);
|
|
if (rc) {
|
|
if (tmp_skb != skb)
|
|
kfree_skb(tmp_skb);
|
|
|
|
kfree_skb(chaining_skb);
|
|
ddev->chaining_skb = NULL;
|
|
|
|
kfree_skb(ddev->saved_skb);
|
|
ddev->saved_skb = NULL;
|
|
}
|
|
|
|
return rc;
|
|
}
|
|
|
|
static void digital_tg_set_rf_tech(struct nfc_digital_dev *ddev, u8 rf_tech)
|
|
{
|
|
ddev->curr_rf_tech = rf_tech;
|
|
|
|
ddev->skb_add_crc = digital_skb_add_crc_none;
|
|
ddev->skb_check_crc = digital_skb_check_crc_none;
|
|
|
|
if (DIGITAL_DRV_CAPS_TG_CRC(ddev))
|
|
return;
|
|
|
|
switch (ddev->curr_rf_tech) {
|
|
case NFC_DIGITAL_RF_TECH_106A:
|
|
ddev->skb_add_crc = digital_skb_add_crc_a;
|
|
ddev->skb_check_crc = digital_skb_check_crc_a;
|
|
break;
|
|
|
|
case NFC_DIGITAL_RF_TECH_212F:
|
|
case NFC_DIGITAL_RF_TECH_424F:
|
|
ddev->skb_add_crc = digital_skb_add_crc_f;
|
|
ddev->skb_check_crc = digital_skb_check_crc_f;
|
|
break;
|
|
|
|
default:
|
|
break;
|
|
}
|
|
}
|
|
|
|
static int digital_tg_send_ack(struct nfc_digital_dev *ddev,
|
|
struct digital_data_exch *data_exch)
|
|
{
|
|
struct digital_dep_req_res *dep_res;
|
|
struct sk_buff *skb;
|
|
int rc;
|
|
|
|
skb = digital_skb_alloc(ddev, 1);
|
|
if (!skb)
|
|
return -ENOMEM;
|
|
|
|
skb_push(skb, sizeof(struct digital_dep_req_res));
|
|
|
|
dep_res = (struct digital_dep_req_res *)skb->data;
|
|
|
|
dep_res->dir = DIGITAL_NFC_DEP_FRAME_DIR_IN;
|
|
dep_res->cmd = DIGITAL_CMD_DEP_RES;
|
|
dep_res->pfb = DIGITAL_NFC_DEP_PFB_ACK_NACK_PDU |
|
|
ddev->curr_nfc_dep_pni;
|
|
|
|
if (ddev->did) {
|
|
dep_res->pfb |= DIGITAL_NFC_DEP_PFB_DID_BIT;
|
|
|
|
skb_put_data(skb, &ddev->did, sizeof(ddev->did));
|
|
}
|
|
|
|
ddev->curr_nfc_dep_pni =
|
|
DIGITAL_NFC_DEP_PFB_PNI(ddev->curr_nfc_dep_pni + 1);
|
|
|
|
digital_skb_push_dep_sod(ddev, skb);
|
|
|
|
ddev->skb_add_crc(skb);
|
|
|
|
ddev->saved_skb = pskb_copy(skb, GFP_KERNEL);
|
|
|
|
rc = digital_tg_send_cmd(ddev, skb, 1500, digital_tg_recv_dep_req,
|
|
data_exch);
|
|
if (rc) {
|
|
kfree_skb(skb);
|
|
kfree_skb(ddev->saved_skb);
|
|
ddev->saved_skb = NULL;
|
|
}
|
|
|
|
return rc;
|
|
}
|
|
|
|
static int digital_tg_send_atn(struct nfc_digital_dev *ddev)
|
|
{
|
|
struct digital_dep_req_res *dep_res;
|
|
struct sk_buff *skb;
|
|
int rc;
|
|
|
|
skb = digital_skb_alloc(ddev, 1);
|
|
if (!skb)
|
|
return -ENOMEM;
|
|
|
|
skb_push(skb, sizeof(struct digital_dep_req_res));
|
|
|
|
dep_res = (struct digital_dep_req_res *)skb->data;
|
|
|
|
dep_res->dir = DIGITAL_NFC_DEP_FRAME_DIR_IN;
|
|
dep_res->cmd = DIGITAL_CMD_DEP_RES;
|
|
dep_res->pfb = DIGITAL_NFC_DEP_PFB_SUPERVISOR_PDU;
|
|
|
|
if (ddev->did) {
|
|
dep_res->pfb |= DIGITAL_NFC_DEP_PFB_DID_BIT;
|
|
|
|
skb_put_data(skb, &ddev->did, sizeof(ddev->did));
|
|
}
|
|
|
|
digital_skb_push_dep_sod(ddev, skb);
|
|
|
|
ddev->skb_add_crc(skb);
|
|
|
|
rc = digital_tg_send_cmd(ddev, skb, 1500, digital_tg_recv_dep_req,
|
|
NULL);
|
|
if (rc)
|
|
kfree_skb(skb);
|
|
|
|
return rc;
|
|
}
|
|
|
|
static int digital_tg_send_saved_skb(struct nfc_digital_dev *ddev)
|
|
{
|
|
int rc;
|
|
|
|
if (!ddev->saved_skb)
|
|
return -EINVAL;
|
|
|
|
skb_get(ddev->saved_skb);
|
|
|
|
rc = digital_tg_send_cmd(ddev, ddev->saved_skb, 1500,
|
|
digital_tg_recv_dep_req, NULL);
|
|
if (rc)
|
|
kfree_skb(ddev->saved_skb);
|
|
|
|
return rc;
|
|
}
|
|
|
|
static void digital_tg_recv_dep_req(struct nfc_digital_dev *ddev, void *arg,
|
|
struct sk_buff *resp)
|
|
{
|
|
int rc;
|
|
struct digital_dep_req_res *dep_req;
|
|
u8 pfb;
|
|
size_t size;
|
|
|
|
if (IS_ERR(resp)) {
|
|
rc = PTR_ERR(resp);
|
|
resp = NULL;
|
|
goto exit;
|
|
}
|
|
|
|
rc = ddev->skb_check_crc(resp);
|
|
if (rc) {
|
|
PROTOCOL_ERR("14.4.1.6");
|
|
goto exit;
|
|
}
|
|
|
|
rc = digital_skb_pull_dep_sod(ddev, resp);
|
|
if (rc) {
|
|
PROTOCOL_ERR("14.4.1.2");
|
|
goto exit;
|
|
}
|
|
|
|
if (resp->len > ddev->local_payload_max) {
|
|
rc = -EMSGSIZE;
|
|
goto exit;
|
|
}
|
|
|
|
size = sizeof(struct digital_dep_req_res);
|
|
dep_req = (struct digital_dep_req_res *)resp->data;
|
|
|
|
if (resp->len < size || dep_req->dir != DIGITAL_NFC_DEP_FRAME_DIR_OUT ||
|
|
dep_req->cmd != DIGITAL_CMD_DEP_REQ) {
|
|
rc = -EIO;
|
|
goto exit;
|
|
}
|
|
|
|
pfb = dep_req->pfb;
|
|
|
|
if (DIGITAL_NFC_DEP_DID_BIT_SET(pfb)) {
|
|
if (ddev->did && (ddev->did == resp->data[3])) {
|
|
size++;
|
|
} else {
|
|
rc = -EIO;
|
|
goto exit;
|
|
}
|
|
} else if (ddev->did) {
|
|
rc = -EIO;
|
|
goto exit;
|
|
}
|
|
|
|
if (DIGITAL_NFC_DEP_NAD_BIT_SET(pfb)) {
|
|
rc = -EIO;
|
|
goto exit;
|
|
}
|
|
|
|
if (size > resp->len) {
|
|
rc = -EIO;
|
|
goto exit;
|
|
}
|
|
|
|
skb_pull(resp, size);
|
|
|
|
switch (DIGITAL_NFC_DEP_PFB_TYPE(pfb)) {
|
|
case DIGITAL_NFC_DEP_PFB_I_PDU:
|
|
pr_debug("DIGITAL_NFC_DEP_PFB_I_PDU\n");
|
|
|
|
if (ddev->atn_count) {
|
|
/* The target has received (and replied to) at least one
|
|
* ATN DEP_REQ.
|
|
*/
|
|
ddev->atn_count = 0;
|
|
|
|
/* pni of resp PDU equal to the target current pni - 1
|
|
* means resp is the previous DEP_REQ PDU received from
|
|
* the initiator so the target replies with saved_skb
|
|
* which is the previous DEP_RES saved in
|
|
* digital_tg_send_dep_res().
|
|
*/
|
|
if (DIGITAL_NFC_DEP_PFB_PNI(pfb) ==
|
|
DIGITAL_NFC_DEP_PFB_PNI(ddev->curr_nfc_dep_pni - 1)) {
|
|
rc = digital_tg_send_saved_skb(ddev);
|
|
if (rc)
|
|
goto exit;
|
|
|
|
goto free_resp;
|
|
}
|
|
|
|
/* atn_count > 0 and PDU pni != curr_nfc_dep_pni - 1
|
|
* means the target probably did not received the last
|
|
* DEP_REQ PDU sent by the initiator. The target
|
|
* fallbacks to normal processing then.
|
|
*/
|
|
}
|
|
|
|
if (DIGITAL_NFC_DEP_PFB_PNI(pfb) != ddev->curr_nfc_dep_pni) {
|
|
PROTOCOL_ERR("14.12.3.4");
|
|
rc = -EIO;
|
|
goto exit;
|
|
}
|
|
|
|
kfree_skb(ddev->saved_skb);
|
|
ddev->saved_skb = NULL;
|
|
|
|
resp = digital_recv_dep_data_gather(ddev, pfb, resp,
|
|
digital_tg_send_ack, NULL);
|
|
if (IS_ERR(resp)) {
|
|
rc = PTR_ERR(resp);
|
|
resp = NULL;
|
|
goto exit;
|
|
}
|
|
|
|
/* If resp is NULL then we're still chaining so return and
|
|
* wait for the next part of the PDU. Else, the PDU is
|
|
* complete so pass it up.
|
|
*/
|
|
if (!resp)
|
|
return;
|
|
|
|
rc = 0;
|
|
break;
|
|
case DIGITAL_NFC_DEP_PFB_ACK_NACK_PDU:
|
|
if (DIGITAL_NFC_DEP_NACK_BIT_SET(pfb)) { /* NACK */
|
|
if (DIGITAL_NFC_DEP_PFB_PNI(pfb + 1) !=
|
|
ddev->curr_nfc_dep_pni) {
|
|
rc = -EIO;
|
|
goto exit;
|
|
}
|
|
|
|
ddev->atn_count = 0;
|
|
|
|
rc = digital_tg_send_saved_skb(ddev);
|
|
if (rc)
|
|
goto exit;
|
|
|
|
goto free_resp;
|
|
}
|
|
|
|
/* ACK */
|
|
if (ddev->atn_count) {
|
|
/* The target has previously received one or more ATN
|
|
* PDUs.
|
|
*/
|
|
ddev->atn_count = 0;
|
|
|
|
/* If the ACK PNI is equal to the target PNI - 1 means
|
|
* that the initiator did not receive the previous PDU
|
|
* sent by the target so re-send it.
|
|
*/
|
|
if (DIGITAL_NFC_DEP_PFB_PNI(pfb + 1) ==
|
|
ddev->curr_nfc_dep_pni) {
|
|
rc = digital_tg_send_saved_skb(ddev);
|
|
if (rc)
|
|
goto exit;
|
|
|
|
goto free_resp;
|
|
}
|
|
|
|
/* Otherwise, the target did not receive the previous
|
|
* ACK PDU from the initiator. Fallback to normal
|
|
* processing of chained PDU then.
|
|
*/
|
|
}
|
|
|
|
/* Keep on sending chained PDU */
|
|
if (!ddev->chaining_skb ||
|
|
DIGITAL_NFC_DEP_PFB_PNI(pfb) !=
|
|
ddev->curr_nfc_dep_pni) {
|
|
rc = -EIO;
|
|
goto exit;
|
|
}
|
|
|
|
kfree_skb(ddev->saved_skb);
|
|
ddev->saved_skb = NULL;
|
|
|
|
rc = digital_tg_send_dep_res(ddev, ddev->chaining_skb);
|
|
if (rc)
|
|
goto exit;
|
|
|
|
goto free_resp;
|
|
case DIGITAL_NFC_DEP_PFB_SUPERVISOR_PDU:
|
|
if (DIGITAL_NFC_DEP_PFB_IS_TIMEOUT(pfb)) {
|
|
rc = -EINVAL;
|
|
goto exit;
|
|
}
|
|
|
|
rc = digital_tg_send_atn(ddev);
|
|
if (rc)
|
|
goto exit;
|
|
|
|
ddev->atn_count++;
|
|
|
|
goto free_resp;
|
|
}
|
|
|
|
rc = nfc_tm_data_received(ddev->nfc_dev, resp);
|
|
if (rc)
|
|
resp = NULL;
|
|
|
|
exit:
|
|
kfree_skb(ddev->chaining_skb);
|
|
ddev->chaining_skb = NULL;
|
|
|
|
ddev->atn_count = 0;
|
|
|
|
kfree_skb(ddev->saved_skb);
|
|
ddev->saved_skb = NULL;
|
|
|
|
if (rc)
|
|
kfree_skb(resp);
|
|
|
|
return;
|
|
|
|
free_resp:
|
|
dev_kfree_skb(resp);
|
|
}
|
|
|
|
int digital_tg_send_dep_res(struct nfc_digital_dev *ddev, struct sk_buff *skb)
|
|
{
|
|
struct digital_dep_req_res *dep_res;
|
|
struct sk_buff *chaining_skb, *tmp_skb;
|
|
int rc;
|
|
|
|
skb_push(skb, sizeof(struct digital_dep_req_res));
|
|
|
|
dep_res = (struct digital_dep_req_res *)skb->data;
|
|
|
|
dep_res->dir = DIGITAL_NFC_DEP_FRAME_DIR_IN;
|
|
dep_res->cmd = DIGITAL_CMD_DEP_RES;
|
|
dep_res->pfb = ddev->curr_nfc_dep_pni;
|
|
|
|
if (ddev->did) {
|
|
dep_res->pfb |= DIGITAL_NFC_DEP_PFB_DID_BIT;
|
|
|
|
skb_put_data(skb, &ddev->did, sizeof(ddev->did));
|
|
}
|
|
|
|
ddev->curr_nfc_dep_pni =
|
|
DIGITAL_NFC_DEP_PFB_PNI(ddev->curr_nfc_dep_pni + 1);
|
|
|
|
chaining_skb = ddev->chaining_skb;
|
|
|
|
tmp_skb = digital_send_dep_data_prep(ddev, skb, dep_res, NULL);
|
|
if (IS_ERR(tmp_skb))
|
|
return PTR_ERR(tmp_skb);
|
|
|
|
digital_skb_push_dep_sod(ddev, tmp_skb);
|
|
|
|
ddev->skb_add_crc(tmp_skb);
|
|
|
|
ddev->saved_skb = pskb_copy(tmp_skb, GFP_KERNEL);
|
|
|
|
rc = digital_tg_send_cmd(ddev, tmp_skb, 1500, digital_tg_recv_dep_req,
|
|
NULL);
|
|
if (rc) {
|
|
if (tmp_skb != skb)
|
|
kfree_skb(tmp_skb);
|
|
|
|
kfree_skb(chaining_skb);
|
|
ddev->chaining_skb = NULL;
|
|
|
|
kfree_skb(ddev->saved_skb);
|
|
ddev->saved_skb = NULL;
|
|
}
|
|
|
|
return rc;
|
|
}
|
|
|
|
static void digital_tg_send_psl_res_complete(struct nfc_digital_dev *ddev,
|
|
void *arg, struct sk_buff *resp)
|
|
{
|
|
u8 rf_tech = (unsigned long)arg;
|
|
|
|
if (IS_ERR(resp))
|
|
return;
|
|
|
|
digital_tg_set_rf_tech(ddev, rf_tech);
|
|
|
|
digital_tg_configure_hw(ddev, NFC_DIGITAL_CONFIG_RF_TECH, rf_tech);
|
|
|
|
digital_tg_listen(ddev, 1500, digital_tg_recv_dep_req, NULL);
|
|
|
|
dev_kfree_skb(resp);
|
|
}
|
|
|
|
static int digital_tg_send_psl_res(struct nfc_digital_dev *ddev, u8 did,
|
|
u8 rf_tech)
|
|
{
|
|
struct digital_psl_res *psl_res;
|
|
struct sk_buff *skb;
|
|
int rc;
|
|
|
|
skb = digital_skb_alloc(ddev, sizeof(struct digital_psl_res));
|
|
if (!skb)
|
|
return -ENOMEM;
|
|
|
|
skb_put(skb, sizeof(struct digital_psl_res));
|
|
|
|
psl_res = (struct digital_psl_res *)skb->data;
|
|
|
|
psl_res->dir = DIGITAL_NFC_DEP_FRAME_DIR_IN;
|
|
psl_res->cmd = DIGITAL_CMD_PSL_RES;
|
|
psl_res->did = did;
|
|
|
|
digital_skb_push_dep_sod(ddev, skb);
|
|
|
|
ddev->skb_add_crc(skb);
|
|
|
|
ddev->curr_nfc_dep_pni = 0;
|
|
|
|
rc = digital_tg_send_cmd(ddev, skb, 0, digital_tg_send_psl_res_complete,
|
|
(void *)(unsigned long)rf_tech);
|
|
if (rc)
|
|
kfree_skb(skb);
|
|
|
|
return rc;
|
|
}
|
|
|
|
static void digital_tg_recv_psl_req(struct nfc_digital_dev *ddev, void *arg,
|
|
struct sk_buff *resp)
|
|
{
|
|
int rc;
|
|
struct digital_psl_req *psl_req;
|
|
u8 rf_tech;
|
|
u8 dsi, payload_size, payload_bits;
|
|
|
|
if (IS_ERR(resp)) {
|
|
rc = PTR_ERR(resp);
|
|
resp = NULL;
|
|
goto exit;
|
|
}
|
|
|
|
rc = ddev->skb_check_crc(resp);
|
|
if (rc) {
|
|
PROTOCOL_ERR("14.4.1.6");
|
|
goto exit;
|
|
}
|
|
|
|
rc = digital_skb_pull_dep_sod(ddev, resp);
|
|
if (rc) {
|
|
PROTOCOL_ERR("14.4.1.2");
|
|
goto exit;
|
|
}
|
|
|
|
psl_req = (struct digital_psl_req *)resp->data;
|
|
|
|
if (resp->len != sizeof(struct digital_psl_req) ||
|
|
psl_req->dir != DIGITAL_NFC_DEP_FRAME_DIR_OUT ||
|
|
psl_req->cmd != DIGITAL_CMD_PSL_REQ) {
|
|
rc = -EIO;
|
|
goto exit;
|
|
}
|
|
|
|
dsi = (psl_req->brs >> 3) & 0x07;
|
|
switch (dsi) {
|
|
case 0:
|
|
rf_tech = NFC_DIGITAL_RF_TECH_106A;
|
|
break;
|
|
case 1:
|
|
rf_tech = NFC_DIGITAL_RF_TECH_212F;
|
|
break;
|
|
case 2:
|
|
rf_tech = NFC_DIGITAL_RF_TECH_424F;
|
|
break;
|
|
default:
|
|
pr_err("Unsupported dsi value %d\n", dsi);
|
|
goto exit;
|
|
}
|
|
|
|
payload_bits = DIGITAL_PAYLOAD_FSL_TO_BITS(psl_req->fsl);
|
|
payload_size = digital_payload_bits_to_size(payload_bits);
|
|
|
|
if (!payload_size || (payload_size > min(ddev->local_payload_max,
|
|
ddev->remote_payload_max))) {
|
|
rc = -EINVAL;
|
|
goto exit;
|
|
}
|
|
|
|
ddev->local_payload_max = payload_size;
|
|
ddev->remote_payload_max = payload_size;
|
|
|
|
rc = digital_tg_send_psl_res(ddev, psl_req->did, rf_tech);
|
|
|
|
exit:
|
|
kfree_skb(resp);
|
|
}
|
|
|
|
static void digital_tg_send_atr_res_complete(struct nfc_digital_dev *ddev,
|
|
void *arg, struct sk_buff *resp)
|
|
{
|
|
int offset;
|
|
|
|
if (IS_ERR(resp)) {
|
|
digital_poll_next_tech(ddev);
|
|
return;
|
|
}
|
|
|
|
offset = 2;
|
|
if (resp->data[0] == DIGITAL_NFC_DEP_NFCA_SOD_SB)
|
|
offset++;
|
|
|
|
ddev->atn_count = 0;
|
|
|
|
if (resp->data[offset] == DIGITAL_CMD_PSL_REQ)
|
|
digital_tg_recv_psl_req(ddev, arg, resp);
|
|
else
|
|
digital_tg_recv_dep_req(ddev, arg, resp);
|
|
}
|
|
|
|
static int digital_tg_send_atr_res(struct nfc_digital_dev *ddev,
|
|
struct digital_atr_req *atr_req)
|
|
{
|
|
struct digital_atr_res *atr_res;
|
|
struct sk_buff *skb;
|
|
u8 *gb, payload_bits;
|
|
size_t gb_len;
|
|
int rc;
|
|
|
|
gb = nfc_get_local_general_bytes(ddev->nfc_dev, &gb_len);
|
|
if (!gb)
|
|
gb_len = 0;
|
|
|
|
skb = digital_skb_alloc(ddev, sizeof(struct digital_atr_res) + gb_len);
|
|
if (!skb)
|
|
return -ENOMEM;
|
|
|
|
skb_put(skb, sizeof(struct digital_atr_res));
|
|
atr_res = (struct digital_atr_res *)skb->data;
|
|
|
|
memset(atr_res, 0, sizeof(struct digital_atr_res));
|
|
|
|
atr_res->dir = DIGITAL_NFC_DEP_FRAME_DIR_IN;
|
|
atr_res->cmd = DIGITAL_CMD_ATR_RES;
|
|
memcpy(atr_res->nfcid3, atr_req->nfcid3, sizeof(atr_req->nfcid3));
|
|
atr_res->to = DIGITAL_NFC_DEP_TG_MAX_WT;
|
|
|
|
ddev->local_payload_max = DIGITAL_PAYLOAD_SIZE_MAX;
|
|
payload_bits = digital_payload_size_to_bits(ddev->local_payload_max);
|
|
atr_res->pp = DIGITAL_PAYLOAD_BITS_TO_PP(payload_bits);
|
|
|
|
if (gb_len) {
|
|
skb_put(skb, gb_len);
|
|
|
|
atr_res->pp |= DIGITAL_GB_BIT;
|
|
memcpy(atr_res->gb, gb, gb_len);
|
|
}
|
|
|
|
digital_skb_push_dep_sod(ddev, skb);
|
|
|
|
ddev->skb_add_crc(skb);
|
|
|
|
ddev->curr_nfc_dep_pni = 0;
|
|
|
|
rc = digital_tg_send_cmd(ddev, skb, 999,
|
|
digital_tg_send_atr_res_complete, NULL);
|
|
if (rc)
|
|
kfree_skb(skb);
|
|
|
|
return rc;
|
|
}
|
|
|
|
void digital_tg_recv_atr_req(struct nfc_digital_dev *ddev, void *arg,
|
|
struct sk_buff *resp)
|
|
{
|
|
int rc;
|
|
struct digital_atr_req *atr_req;
|
|
size_t gb_len, min_size;
|
|
u8 poll_tech_count, payload_bits;
|
|
|
|
if (IS_ERR(resp)) {
|
|
rc = PTR_ERR(resp);
|
|
resp = NULL;
|
|
goto exit;
|
|
}
|
|
|
|
if (!resp->len) {
|
|
rc = -EIO;
|
|
goto exit;
|
|
}
|
|
|
|
if (resp->data[0] == DIGITAL_NFC_DEP_NFCA_SOD_SB) {
|
|
min_size = DIGITAL_ATR_REQ_MIN_SIZE + 2;
|
|
digital_tg_set_rf_tech(ddev, NFC_DIGITAL_RF_TECH_106A);
|
|
} else {
|
|
min_size = DIGITAL_ATR_REQ_MIN_SIZE + 1;
|
|
digital_tg_set_rf_tech(ddev, NFC_DIGITAL_RF_TECH_212F);
|
|
}
|
|
|
|
if (resp->len < min_size) {
|
|
rc = -EIO;
|
|
goto exit;
|
|
}
|
|
|
|
ddev->curr_protocol = NFC_PROTO_NFC_DEP_MASK;
|
|
|
|
rc = ddev->skb_check_crc(resp);
|
|
if (rc) {
|
|
PROTOCOL_ERR("14.4.1.6");
|
|
goto exit;
|
|
}
|
|
|
|
rc = digital_skb_pull_dep_sod(ddev, resp);
|
|
if (rc) {
|
|
PROTOCOL_ERR("14.4.1.2");
|
|
goto exit;
|
|
}
|
|
|
|
atr_req = (struct digital_atr_req *)resp->data;
|
|
|
|
if (atr_req->dir != DIGITAL_NFC_DEP_FRAME_DIR_OUT ||
|
|
atr_req->cmd != DIGITAL_CMD_ATR_REQ ||
|
|
atr_req->did > DIGITAL_DID_MAX) {
|
|
rc = -EINVAL;
|
|
goto exit;
|
|
}
|
|
|
|
payload_bits = DIGITAL_PAYLOAD_PP_TO_BITS(atr_req->pp);
|
|
ddev->remote_payload_max = digital_payload_bits_to_size(payload_bits);
|
|
|
|
if (!ddev->remote_payload_max) {
|
|
rc = -EINVAL;
|
|
goto exit;
|
|
}
|
|
|
|
ddev->did = atr_req->did;
|
|
|
|
rc = digital_tg_configure_hw(ddev, NFC_DIGITAL_CONFIG_FRAMING,
|
|
NFC_DIGITAL_FRAMING_NFC_DEP_ACTIVATED);
|
|
if (rc)
|
|
goto exit;
|
|
|
|
rc = digital_tg_send_atr_res(ddev, atr_req);
|
|
if (rc)
|
|
goto exit;
|
|
|
|
gb_len = resp->len - sizeof(struct digital_atr_req);
|
|
|
|
poll_tech_count = ddev->poll_tech_count;
|
|
ddev->poll_tech_count = 0;
|
|
|
|
rc = nfc_tm_activated(ddev->nfc_dev, NFC_PROTO_NFC_DEP_MASK,
|
|
NFC_COMM_PASSIVE, atr_req->gb, gb_len);
|
|
if (rc) {
|
|
ddev->poll_tech_count = poll_tech_count;
|
|
goto exit;
|
|
}
|
|
|
|
rc = 0;
|
|
exit:
|
|
if (rc)
|
|
digital_poll_next_tech(ddev);
|
|
|
|
dev_kfree_skb(resp);
|
|
}
|