[deliverable/linux.git] / net / nfc / nci / ntf.c

/*
 *  The NFC Controller Interface is the communication protocol between an
 *  NFC Controller (NFCC) and a Device Host (DH).
 *
 *  Copyright (C) 2011 Texas Instruments, Inc.
 *
 *  Written by Ilan Elias <ilane@ti.com>
 *
 *  Acknowledgements:
 *  This file is based on hci_event.c, which was written
 *  by Maxim Krasnyansky.
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License version 2
 *  as published by the Free Software Foundation
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License
 *  along with this program; if not, write to the Free Software
 *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 *
 */

#define pr_fmt(fmt) KBUILD_MODNAME ": %s: " fmt, __func__

#include <linux/types.h>
#include <linux/interrupt.h>
#include <linux/bitops.h>
#include <linux/skbuff.h>

#include "../nfc.h"
#include <net/nfc/nci.h>
#include <net/nfc/nci_core.h>
#include <linux/nfc.h>

/* Handle NCI Notification packets */

static void nci_core_conn_credits_ntf_packet(struct nci_dev *ndev,
					     struct sk_buff *skb)
{
	struct nci_core_conn_credit_ntf *ntf = (void *) skb->data;
	int i;

	pr_debug("num_entries %d\n", ntf->num_entries);

	if (ntf->num_entries > NCI_MAX_NUM_CONN)
		ntf->num_entries = NCI_MAX_NUM_CONN;

	/* update the credits */
	for (i = 0; i < ntf->num_entries; i++) {
		ntf->conn_entries[i].conn_id =
			nci_conn_id(&ntf->conn_entries[i].conn_id);

		pr_debug("entry[%d]: conn_id %d, credits %d\n",
			 i, ntf->conn_entries[i].conn_id,
			 ntf->conn_entries[i].credits);

		if (ntf->conn_entries[i].conn_id == NCI_STATIC_RF_CONN_ID) {
			/* found static rf connection */
			atomic_add(ntf->conn_entries[i].credits,
				   &ndev->credits_cnt);
		}
	}

	/* trigger the next tx */
	if (!skb_queue_empty(&ndev->tx_q))
		queue_work(ndev->tx_wq, &ndev->tx_work);
}

static void nci_core_generic_error_ntf_packet(struct nci_dev *ndev,
					      struct sk_buff *skb)
{
	__u8 status = skb->data[0];

	pr_debug("status 0x%x\n", status);

	if (atomic_read(&ndev->state) == NCI_W4_HOST_SELECT) {
		/* Activation failed, so complete the request
		   (the state remains the same) */
		nci_req_complete(ndev, status);
	}
}

static void nci_core_conn_intf_error_ntf_packet(struct nci_dev *ndev,
						struct sk_buff *skb)
{
	struct nci_core_intf_error_ntf *ntf = (void *) skb->data;

	ntf->conn_id = nci_conn_id(&ntf->conn_id);

	pr_debug("status 0x%x, conn_id %d\n", ntf->status, ntf->conn_id);

	/* complete the data exchange transaction, if exists */
	if (test_bit(NCI_DATA_EXCHANGE, &ndev->flags))
		nci_data_exchange_complete(ndev, NULL, -EIO);
}

static __u8 *nci_extract_rf_params_nfca_passive_poll(struct nci_dev *ndev,
			struct rf_tech_specific_params_nfca_poll *nfca_poll,
						     __u8 *data)
{
	nfca_poll->sens_res = __le16_to_cpu(*((__u16 *)data));
	data += 2;

	nfca_poll->nfcid1_len = min_t(__u8, *data++, NFC_NFCID1_MAXSIZE);

	pr_debug("sens_res 0x%x, nfcid1_len %d\n",
		 nfca_poll->sens_res, nfca_poll->nfcid1_len);

	memcpy(nfca_poll->nfcid1, data, nfca_poll->nfcid1_len);
	data += nfca_poll->nfcid1_len;

	nfca_poll->sel_res_len = *data++;

	if (nfca_poll->sel_res_len != 0)
		nfca_poll->sel_res = *data++;

	pr_debug("sel_res_len %d, sel_res 0x%x\n",
		 nfca_poll->sel_res_len,
		 nfca_poll->sel_res);

	return data;
}

static __u8 *nci_extract_rf_params_nfcb_passive_poll(struct nci_dev *ndev,
			struct rf_tech_specific_params_nfcb_poll *nfcb_poll,
						     __u8 *data)
{
	nfcb_poll->sensb_res_len = min_t(__u8, *data++, NFC_SENSB_RES_MAXSIZE);

	pr_debug("sensb_res_len %d\n", nfcb_poll->sensb_res_len);

	memcpy(nfcb_poll->sensb_res, data, nfcb_poll->sensb_res_len);
	data += nfcb_poll->sensb_res_len;

	return data;
}

static __u8 *nci_extract_rf_params_nfcf_passive_poll(struct nci_dev *ndev,
			struct rf_tech_specific_params_nfcf_poll *nfcf_poll,
						     __u8 *data)
{
	nfcf_poll->bit_rate = *data++;
	nfcf_poll->sensf_res_len = min_t(__u8, *data++, NFC_SENSF_RES_MAXSIZE);

	pr_debug("bit_rate %d, sensf_res_len %d\n",
		 nfcf_poll->bit_rate, nfcf_poll->sensf_res_len);

	memcpy(nfcf_poll->sensf_res, data, nfcf_poll->sensf_res_len);
	data += nfcf_poll->sensf_res_len;

	return data;
}

static int nci_add_new_protocol(struct nci_dev *ndev,
				struct nfc_target *target,
				__u8 rf_protocol,
				__u8 rf_tech_and_mode,
				void *params)
{
	struct rf_tech_specific_params_nfca_poll *nfca_poll;
	struct rf_tech_specific_params_nfcb_poll *nfcb_poll;
	struct rf_tech_specific_params_nfcf_poll *nfcf_poll;
	__u32 protocol;

	if (rf_protocol == NCI_RF_PROTOCOL_T2T)
		protocol = NFC_PROTO_MIFARE_MASK;
	else if (rf_protocol == NCI_RF_PROTOCOL_ISO_DEP)
		protocol = NFC_PROTO_ISO14443_MASK;
	else if (rf_protocol == NCI_RF_PROTOCOL_T3T)
		protocol = NFC_PROTO_FELICA_MASK;
	else
		protocol = 0;

	if (!(protocol & ndev->poll_prots)) {
		pr_err("the target found does not have the desired protocol\n");
		return -EPROTO;
	}

	if (rf_tech_and_mode == NCI_NFC_A_PASSIVE_POLL_MODE) {
		nfca_poll = (struct rf_tech_specific_params_nfca_poll *)params;

		target->sens_res = nfca_poll->sens_res;
		target->sel_res = nfca_poll->sel_res;
		target->nfcid1_len = nfca_poll->nfcid1_len;
		if (target->nfcid1_len > 0) {
			memcpy(target->nfcid1, nfca_poll->nfcid1,
			       target->nfcid1_len);
		}
	} else if (rf_tech_and_mode == NCI_NFC_B_PASSIVE_POLL_MODE) {
		nfcb_poll = (struct rf_tech_specific_params_nfcb_poll *)params;

		target->sensb_res_len = nfcb_poll->sensb_res_len;
		if (target->sensb_res_len > 0) {
			memcpy(target->sensb_res, nfcb_poll->sensb_res,
			       target->sensb_res_len);
		}
	} else if (rf_tech_and_mode == NCI_NFC_F_PASSIVE_POLL_MODE) {
		nfcf_poll = (struct rf_tech_specific_params_nfcf_poll *)params;

		target->sensf_res_len = nfcf_poll->sensf_res_len;
		if (target->sensf_res_len > 0) {
			memcpy(target->sensf_res, nfcf_poll->sensf_res,
			       target->sensf_res_len);
		}
	} else {
		pr_err("unsupported rf_tech_and_mode 0x%x\n", rf_tech_and_mode);
		return -EPROTO;
	}

	target->supported_protocols |= protocol;

	pr_debug("protocol 0x%x\n", protocol);

	return 0;
}

static void nci_add_new_target(struct nci_dev *ndev,
			       struct nci_rf_discover_ntf *ntf)
{
	struct nfc_target *target;
	int i, rc;

	for (i = 0; i < ndev->n_targets; i++) {
		target = &ndev->targets[i];
		if (target->logical_idx == ntf->rf_discovery_id) {
			/* This target already exists, add the new protocol */
			nci_add_new_protocol(ndev, target, ntf->rf_protocol,
					     ntf->rf_tech_and_mode,
					     &ntf->rf_tech_specific_params);
			return;
		}
	}

	/* This is a new target, check if we've enough room */
	if (ndev->n_targets == NCI_MAX_DISCOVERED_TARGETS) {
		pr_debug("not enough room, ignoring new target...\n");
		return;
	}

	target = &ndev->targets[ndev->n_targets];

	rc = nci_add_new_protocol(ndev, target, ntf->rf_protocol,
				  ntf->rf_tech_and_mode,
				  &ntf->rf_tech_specific_params);
	if (!rc) {
		target->logical_idx = ntf->rf_discovery_id;
		ndev->n_targets++;

		pr_debug("logical idx %d, n_targets %d\n", target->logical_idx,
			 ndev->n_targets);
	}
}

void nci_clear_target_list(struct nci_dev *ndev)
{
	memset(ndev->targets, 0,
	       (sizeof(struct nfc_target)*NCI_MAX_DISCOVERED_TARGETS));

	ndev->n_targets = 0;
}

static void nci_rf_discover_ntf_packet(struct nci_dev *ndev,
				       struct sk_buff *skb)
{
	struct nci_rf_discover_ntf ntf;
	__u8 *data = skb->data;
	bool add_target = true;

	ntf.rf_discovery_id = *data++;
	ntf.rf_protocol = *data++;
	ntf.rf_tech_and_mode = *data++;
	ntf.rf_tech_specific_params_len = *data++;

	pr_debug("rf_discovery_id %d\n", ntf.rf_discovery_id);
	pr_debug("rf_protocol 0x%x\n", ntf.rf_protocol);
	pr_debug("rf_tech_and_mode 0x%x\n", ntf.rf_tech_and_mode);
	pr_debug("rf_tech_specific_params_len %d\n",
		 ntf.rf_tech_specific_params_len);

	if (ntf.rf_tech_specific_params_len > 0) {
		switch (ntf.rf_tech_and_mode) {
		case NCI_NFC_A_PASSIVE_POLL_MODE:
			data = nci_extract_rf_params_nfca_passive_poll(ndev,
				&(ntf.rf_tech_specific_params.nfca_poll), data);
			break;

		case NCI_NFC_B_PASSIVE_POLL_MODE:
			data = nci_extract_rf_params_nfcb_passive_poll(ndev,
				&(ntf.rf_tech_specific_params.nfcb_poll), data);
			break;

		case NCI_NFC_F_PASSIVE_POLL_MODE:
			data = nci_extract_rf_params_nfcf_passive_poll(ndev,
				&(ntf.rf_tech_specific_params.nfcf_poll), data);
			break;

		default:
			pr_err("unsupported rf_tech_and_mode 0x%x\n",
			       ntf.rf_tech_and_mode);
			data += ntf.rf_tech_specific_params_len;
			add_target = false;
		}
	}

	ntf.ntf_type = *data++;
	pr_debug("ntf_type %d\n", ntf.ntf_type);

	if (add_target == true)
		nci_add_new_target(ndev, &ntf);

	if (ntf.ntf_type == NCI_DISCOVER_NTF_TYPE_MORE) {
		atomic_set(&ndev->state, NCI_W4_ALL_DISCOVERIES);
	} else {
		atomic_set(&ndev->state, NCI_W4_HOST_SELECT);
		nfc_targets_found(ndev->nfc_dev, ndev->targets,
				  ndev->n_targets);
	}
}

static int nci_extract_activation_params_iso_dep(struct nci_dev *ndev,
			struct nci_rf_intf_activated_ntf *ntf, __u8 *data)
{
	struct activation_params_nfca_poll_iso_dep *nfca_poll;
	struct activation_params_nfcb_poll_iso_dep *nfcb_poll;

	switch (ntf->activation_rf_tech_and_mode) {
	case NCI_NFC_A_PASSIVE_POLL_MODE:
		nfca_poll = &ntf->activation_params.nfca_poll_iso_dep;
		nfca_poll->rats_res_len = min_t(__u8, *data++, 20);
		pr_debug("rats_res_len %d\n", nfca_poll->rats_res_len);
		if (nfca_poll->rats_res_len > 0) {
			memcpy(nfca_poll->rats_res,
			       data, nfca_poll->rats_res_len);
		}
		break;

	case NCI_NFC_B_PASSIVE_POLL_MODE:
		nfcb_poll = &ntf->activation_params.nfcb_poll_iso_dep;
		nfcb_poll->attrib_res_len = min_t(__u8, *data++, 50);
		pr_debug("attrib_res_len %d\n", nfcb_poll->attrib_res_len);
		if (nfcb_poll->attrib_res_len > 0) {
			memcpy(nfcb_poll->attrib_res,
			       data, nfcb_poll->attrib_res_len);
		}
		break;

	default:
		pr_err("unsupported activation_rf_tech_and_mode 0x%x\n",
		       ntf->activation_rf_tech_and_mode);
		return NCI_STATUS_RF_PROTOCOL_ERROR;
	}

	return NCI_STATUS_OK;
}

static void nci_target_auto_activated(struct nci_dev *ndev,
				      struct nci_rf_intf_activated_ntf *ntf)
{
	struct nfc_target *target;
	int rc;

	target = &ndev->targets[ndev->n_targets];

	rc = nci_add_new_protocol(ndev, target, ntf->rf_protocol,
				  ntf->activation_rf_tech_and_mode,
				  &ntf->rf_tech_specific_params);
	if (rc)
		return;

	target->logical_idx = ntf->rf_discovery_id;
	ndev->n_targets++;

	pr_debug("logical idx %d, n_targets %d\n",
		 target->logical_idx, ndev->n_targets);

	nfc_targets_found(ndev->nfc_dev, ndev->targets, ndev->n_targets);
}

static void nci_rf_intf_activated_ntf_packet(struct nci_dev *ndev,
					     struct sk_buff *skb)
{
	struct nci_rf_intf_activated_ntf ntf;
	__u8 *data = skb->data;
	int err = NCI_STATUS_OK;

	ntf.rf_discovery_id = *data++;
	ntf.rf_interface = *data++;
	ntf.rf_protocol = *data++;
	ntf.activation_rf_tech_and_mode = *data++;
	ntf.max_data_pkt_payload_size = *data++;
	ntf.initial_num_credits = *data++;
	ntf.rf_tech_specific_params_len = *data++;

	pr_debug("rf_discovery_id %d\n", ntf.rf_discovery_id);
	pr_debug("rf_interface 0x%x\n", ntf.rf_interface);
	pr_debug("rf_protocol 0x%x\n", ntf.rf_protocol);
	pr_debug("activation_rf_tech_and_mode 0x%x\n",
		 ntf.activation_rf_tech_and_mode);
	pr_debug("max_data_pkt_payload_size 0x%x\n",
		 ntf.max_data_pkt_payload_size);
	pr_debug("initial_num_credits 0x%x\n",
		 ntf.initial_num_credits);
	pr_debug("rf_tech_specific_params_len %d\n",
		 ntf.rf_tech_specific_params_len);

	if (ntf.rf_tech_specific_params_len > 0) {
		switch (ntf.activation_rf_tech_and_mode) {
		case NCI_NFC_A_PASSIVE_POLL_MODE:
			data = nci_extract_rf_params_nfca_passive_poll(ndev,
				&(ntf.rf_tech_specific_params.nfca_poll), data);
			break;

		case NCI_NFC_B_PASSIVE_POLL_MODE:
			data = nci_extract_rf_params_nfcb_passive_poll(ndev,
				&(ntf.rf_tech_specific_params.nfcb_poll), data);
			break;

		case NCI_NFC_F_PASSIVE_POLL_MODE:
			data = nci_extract_rf_params_nfcf_passive_poll(ndev,
				&(ntf.rf_tech_specific_params.nfcf_poll), data);
			break;

		default:
			pr_err("unsupported activation_rf_tech_and_mode 0x%x\n",
			       ntf.activation_rf_tech_and_mode);
			err = NCI_STATUS_RF_PROTOCOL_ERROR;
			goto exit;
		}
	}

	ntf.data_exch_rf_tech_and_mode = *data++;
	ntf.data_exch_tx_bit_rate = *data++;
	ntf.data_exch_rx_bit_rate = *data++;
	ntf.activation_params_len = *data++;

	pr_debug("data_exch_rf_tech_and_mode 0x%x\n",
		 ntf.data_exch_rf_tech_and_mode);
	pr_debug("data_exch_tx_bit_rate 0x%x\n", ntf.data_exch_tx_bit_rate);
	pr_debug("data_exch_rx_bit_rate 0x%x\n", ntf.data_exch_rx_bit_rate);
	pr_debug("activation_params_len %d\n", ntf.activation_params_len);

	if (ntf.activation_params_len > 0) {
		switch (ntf.rf_interface) {
		case NCI_RF_INTERFACE_ISO_DEP:
			err = nci_extract_activation_params_iso_dep(ndev,
								    &ntf, data);
			break;

		case NCI_RF_INTERFACE_FRAME:
			/* no activation params */
			break;

		default:
			pr_err("unsupported rf_interface 0x%x\n",
			       ntf.rf_interface);
			err = NCI_STATUS_RF_PROTOCOL_ERROR;
			break;
		}
	}

exit:
	if (err == NCI_STATUS_OK) {
		ndev->max_data_pkt_payload_size = ntf.max_data_pkt_payload_size;
		ndev->initial_num_credits = ntf.initial_num_credits;

		/* set the available credits to initial value */
		atomic_set(&ndev->credits_cnt, ndev->initial_num_credits);
	}

	if (atomic_read(&ndev->state) == NCI_DISCOVERY) {
		/* A single target was found and activated automatically */
		atomic_set(&ndev->state, NCI_POLL_ACTIVE);
		if (err == NCI_STATUS_OK)
			nci_target_auto_activated(ndev, &ntf);
	} else {	/* ndev->state == NCI_W4_HOST_SELECT */
		/* A selected target was activated, so complete the request */
		atomic_set(&ndev->state, NCI_POLL_ACTIVE);
		nci_req_complete(ndev, err);
	}
}

static void nci_rf_deactivate_ntf_packet(struct nci_dev *ndev,
					 struct sk_buff *skb)
{
	struct nci_rf_deactivate_ntf *ntf = (void *) skb->data;

	pr_debug("entry, type 0x%x, reason 0x%x\n", ntf->type, ntf->reason);

	/* drop tx data queue */
	skb_queue_purge(&ndev->tx_q);

	/* drop partial rx data packet */
	if (ndev->rx_data_reassembly) {
		kfree_skb(ndev->rx_data_reassembly);
		ndev->rx_data_reassembly = NULL;
	}

	/* complete the data exchange transaction, if exists */
	if (test_bit(NCI_DATA_EXCHANGE, &ndev->flags))
		nci_data_exchange_complete(ndev, NULL, -EIO);

	nci_clear_target_list(ndev);
	atomic_set(&ndev->state, NCI_IDLE);
	nci_req_complete(ndev, NCI_STATUS_OK);
}

void nci_ntf_packet(struct nci_dev *ndev, struct sk_buff *skb)
{
	__u16 ntf_opcode = nci_opcode(skb->data);

	pr_debug("NCI RX: MT=ntf, PBF=%d, GID=0x%x, OID=0x%x, plen=%d\n",
		 nci_pbf(skb->data),
		 nci_opcode_gid(ntf_opcode),
		 nci_opcode_oid(ntf_opcode),
		 nci_plen(skb->data));

	/* strip the nci control header */
	skb_pull(skb, NCI_CTRL_HDR_SIZE);

	switch (ntf_opcode) {
	case NCI_OP_CORE_CONN_CREDITS_NTF:
		nci_core_conn_credits_ntf_packet(ndev, skb);
		break;

	case NCI_OP_CORE_GENERIC_ERROR_NTF:
		nci_core_generic_error_ntf_packet(ndev, skb);
		break;

	case NCI_OP_CORE_INTF_ERROR_NTF:
		nci_core_conn_intf_error_ntf_packet(ndev, skb);
		break;

	case NCI_OP_RF_DISCOVER_NTF:
		nci_rf_discover_ntf_packet(ndev, skb);
		break;

	case NCI_OP_RF_INTF_ACTIVATED_NTF:
		nci_rf_intf_activated_ntf_packet(ndev, skb);
		break;

	case NCI_OP_RF_DEACTIVATE_NTF:
		nci_rf_deactivate_ntf_packet(ndev, skb);
		break;

	default:
		pr_err("unknown ntf opcode 0x%x\n", ntf_opcode);
		break;
	}

	kfree_skb(skb);
}
Commit	Line	Data
6a2968aa IE	1	/*
	2	* The NFC Controller Interface is the communication protocol between an
	3	* NFC Controller (NFCC) and a Device Host (DH).
	4	*
	5	* Copyright (C) 2011 Texas Instruments, Inc.
	6	*
	7	* Written by Ilan Elias <ilane@ti.com>
	8	*
	9	* Acknowledgements:
	10	* This file is based on hci_event.c, which was written
	11	* by Maxim Krasnyansky.
	12	*
	13	* This program is free software; you can redistribute it and/or modify
	14	* it under the terms of the GNU General Public License version 2
	15	* as published by the Free Software Foundation
	16	*
	17	* This program is distributed in the hope that it will be useful,
	18	* but WITHOUT ANY WARRANTY; without even the implied warranty of
	19	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	20	* GNU General Public License for more details.
	21	*
	22	* You should have received a copy of the GNU General Public License
	23	* along with this program; if not, write to the Free Software
	24	* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
	25	*
	26	*/
	27
52858b51	28	#define pr_fmt(fmt) KBUILD_MODNAME ": %s: " fmt, __func__
ed1e0ad8	29
6a2968aa IE	30	#include <linux/types.h>
	31	#include <linux/interrupt.h>
	32	#include <linux/bitops.h>
	33	#include <linux/skbuff.h>
	34
	35	#include "../nfc.h"
	36	#include <net/nfc/nci.h>
	37	#include <net/nfc/nci_core.h>
	38	#include <linux/nfc.h>
	39
	40	/* Handle NCI Notification packets */
	41
	42	static void nci_core_conn_credits_ntf_packet(struct nci_dev *ndev,
eb9bc6e9	43	struct sk_buff *skb)
6a2968aa IE	44	{
	45	struct nci_core_conn_credit_ntf ntf = (void ) skb->data;
	46	int i;
	47
24bf3304	48	pr_debug("num_entries %d\n", ntf->num_entries);
6a2968aa IE	49
	50	if (ntf->num_entries > NCI_MAX_NUM_CONN)
	51	ntf->num_entries = NCI_MAX_NUM_CONN;
	52
	53	/* update the credits */
	54	for (i = 0; i < ntf->num_entries; i++) {
637d85a7 IE	55	ntf->conn_entries[i].conn_id =
	56	nci_conn_id(&ntf->conn_entries[i].conn_id);
	57
20c239c1 JP	58	pr_debug("entry[%d]: conn_id %d, credits %d\n",
	59	i, ntf->conn_entries[i].conn_id,
	60	ntf->conn_entries[i].credits);
6a2968aa	61
e8c0dacd	62	if (ntf->conn_entries[i].conn_id == NCI_STATIC_RF_CONN_ID) {
6a2968aa IE	63	/* found static rf connection */
6a2968aa IE	64	atomic_add(ntf->conn_entries[i].credits,
eb9bc6e9	65	&ndev->credits_cnt);
6a2968aa IE	66	}
	67	}
	68
	69	/* trigger the next tx */
	70	if (!skb_queue_empty(&ndev->tx_q))
	71	queue_work(ndev->tx_wq, &ndev->tx_work);
	72	}
	73
019c4fba	74	static void nci_core_generic_error_ntf_packet(struct nci_dev *ndev,
eb9bc6e9	75	struct sk_buff *skb)
019c4fba IE	76	{
	77	__u8 status = skb->data[0];
	78
	79	pr_debug("status 0x%x\n", status);
	80
	81	if (atomic_read(&ndev->state) == NCI_W4_HOST_SELECT) {
	82	/* Activation failed, so complete the request
eb9bc6e9	83	(the state remains the same) */
019c4fba IE	84	nci_req_complete(ndev, status);
	85	}
	86	}
	87
004161cb IE	88	static void nci_core_conn_intf_error_ntf_packet(struct nci_dev *ndev,
	89	struct sk_buff *skb)
	90	{
	91	struct nci_core_intf_error_ntf ntf = (void ) skb->data;
	92
	93	ntf->conn_id = nci_conn_id(&ntf->conn_id);
	94
	95	pr_debug("status 0x%x, conn_id %d\n", ntf->status, ntf->conn_id);
	96
	97	/* complete the data exchange transaction, if exists */
	98	if (test_bit(NCI_DATA_EXCHANGE, &ndev->flags))
	99	nci_data_exchange_complete(ndev, NULL, -EIO);
	100	}
	101
e8c0dacd	102	static __u8 nci_extract_rf_params_nfca_passive_poll(struct nci_dev ndev,
019c4fba	103	struct rf_tech_specific_params_nfca_poll *nfca_poll,
eb9bc6e9	104	__u8 *data)
6a2968aa	105	{
6a2968aa IE	106	nfca_poll->sens_res = __le16_to_cpu(((__u16 )data));
	107	data += 2;
	108
67de956f	109	nfca_poll->nfcid1_len = min_t(__u8, *data++, NFC_NFCID1_MAXSIZE);
6a2968aa	110
20c239c1 JP	111	pr_debug("sens_res 0x%x, nfcid1_len %d\n",
20c239c1 JP	112	nfca_poll->sens_res, nfca_poll->nfcid1_len);
6a2968aa IE	113
	114	memcpy(nfca_poll->nfcid1, data, nfca_poll->nfcid1_len);
	115	data += nfca_poll->nfcid1_len;
	116
	117	nfca_poll->sel_res_len = *data++;
	118
	119	if (nfca_poll->sel_res_len != 0)
	120	nfca_poll->sel_res = *data++;
	121
20c239c1 JP	122	pr_debug("sel_res_len %d, sel_res 0x%x\n",
	123	nfca_poll->sel_res_len,
	124	nfca_poll->sel_res);
e8c0dacd IE	125
	126	return data;
	127	}
	128
d5a2ca60	129	static __u8 nci_extract_rf_params_nfcb_passive_poll(struct nci_dev ndev,
019c4fba	130	struct rf_tech_specific_params_nfcb_poll *nfcb_poll,
eb9bc6e9	131	__u8 *data)
d5a2ca60	132	{
67de956f	133	nfcb_poll->sensb_res_len = min_t(__u8, *data++, NFC_SENSB_RES_MAXSIZE);
d5a2ca60 IE	134
	135	pr_debug("sensb_res_len %d\n", nfcb_poll->sensb_res_len);
	136
	137	memcpy(nfcb_poll->sensb_res, data, nfcb_poll->sensb_res_len);
	138	data += nfcb_poll->sensb_res_len;
	139
	140	return data;
	141	}
	142
	143	static __u8 nci_extract_rf_params_nfcf_passive_poll(struct nci_dev ndev,
019c4fba	144	struct rf_tech_specific_params_nfcf_poll *nfcf_poll,
eb9bc6e9	145	__u8 *data)
d5a2ca60	146	{
d5a2ca60	147	nfcf_poll->bit_rate = *data++;
67de956f	148	nfcf_poll->sensf_res_len = min_t(__u8, *data++, NFC_SENSF_RES_MAXSIZE);
d5a2ca60 IE	149
d5a2ca60 IE	150	pr_debug("bit_rate %d, sensf_res_len %d\n",
eb9bc6e9	151	nfcf_poll->bit_rate, nfcf_poll->sensf_res_len);
d5a2ca60 IE	152
	153	memcpy(nfcf_poll->sensf_res, data, nfcf_poll->sensf_res_len);
	154	data += nfcf_poll->sensf_res_len;
	155
	156	return data;
	157	}
	158
019c4fba IE	159	static int nci_add_new_protocol(struct nci_dev *ndev,
	160	struct nfc_target *target,
	161	__u8 rf_protocol,
	162	__u8 rf_tech_and_mode,
	163	void *params)
	164	{
	165	struct rf_tech_specific_params_nfca_poll *nfca_poll;
	166	struct rf_tech_specific_params_nfcb_poll *nfcb_poll;
	167	struct rf_tech_specific_params_nfcf_poll *nfcf_poll;
	168	__u32 protocol;
	169
	170	if (rf_protocol == NCI_RF_PROTOCOL_T2T)
	171	protocol = NFC_PROTO_MIFARE_MASK;
	172	else if (rf_protocol == NCI_RF_PROTOCOL_ISO_DEP)
	173	protocol = NFC_PROTO_ISO14443_MASK;
	174	else if (rf_protocol == NCI_RF_PROTOCOL_T3T)
	175	protocol = NFC_PROTO_FELICA_MASK;
	176	else
	177	protocol = 0;
	178
	179	if (!(protocol & ndev->poll_prots)) {
	180	pr_err("the target found does not have the desired protocol\n");
	181	return -EPROTO;
	182	}
	183
	184	if (rf_tech_and_mode == NCI_NFC_A_PASSIVE_POLL_MODE) {
	185	nfca_poll = (struct rf_tech_specific_params_nfca_poll *)params;
	186
	187	target->sens_res = nfca_poll->sens_res;
	188	target->sel_res = nfca_poll->sel_res;
	189	target->nfcid1_len = nfca_poll->nfcid1_len;
	190	if (target->nfcid1_len > 0) {
	191	memcpy(target->nfcid1, nfca_poll->nfcid1,
eb9bc6e9	192	target->nfcid1_len);
019c4fba IE	193	}
	194	} else if (rf_tech_and_mode == NCI_NFC_B_PASSIVE_POLL_MODE) {
	195	nfcb_poll = (struct rf_tech_specific_params_nfcb_poll *)params;
	196
	197	target->sensb_res_len = nfcb_poll->sensb_res_len;
	198	if (target->sensb_res_len > 0) {
	199	memcpy(target->sensb_res, nfcb_poll->sensb_res,
eb9bc6e9	200	target->sensb_res_len);
019c4fba IE	201	}
	202	} else if (rf_tech_and_mode == NCI_NFC_F_PASSIVE_POLL_MODE) {
	203	nfcf_poll = (struct rf_tech_specific_params_nfcf_poll *)params;
	204
	205	target->sensf_res_len = nfcf_poll->sensf_res_len;
	206	if (target->sensf_res_len > 0) {
	207	memcpy(target->sensf_res, nfcf_poll->sensf_res,
eb9bc6e9	208	target->sensf_res_len);
019c4fba IE	209	}
	210	} else {
	211	pr_err("unsupported rf_tech_and_mode 0x%x\n", rf_tech_and_mode);
	212	return -EPROTO;
	213	}
	214
	215	target->supported_protocols \|= protocol;
	216
	217	pr_debug("protocol 0x%x\n", protocol);
	218
	219	return 0;
	220	}
	221
	222	static void nci_add_new_target(struct nci_dev *ndev,
eb9bc6e9	223	struct nci_rf_discover_ntf *ntf)
019c4fba IE	224	{
	225	struct nfc_target *target;
	226	int i, rc;
	227
	228	for (i = 0; i < ndev->n_targets; i++) {
	229	target = &ndev->targets[i];
c4fbb651	230	if (target->logical_idx == ntf->rf_discovery_id) {
019c4fba IE	231	/* This target already exists, add the new protocol */
019c4fba IE	232	nci_add_new_protocol(ndev, target, ntf->rf_protocol,
eb9bc6e9 SO	233	ntf->rf_tech_and_mode,
eb9bc6e9 SO	234	&ntf->rf_tech_specific_params);
019c4fba IE	235	return;
	236	}
	237	}
	238
	239	/* This is a new target, check if we've enough room */
	240	if (ndev->n_targets == NCI_MAX_DISCOVERED_TARGETS) {
	241	pr_debug("not enough room, ignoring new target...\n");
	242	return;
	243	}
	244
	245	target = &ndev->targets[ndev->n_targets];
	246
	247	rc = nci_add_new_protocol(ndev, target, ntf->rf_protocol,
eb9bc6e9 SO	248	ntf->rf_tech_and_mode,
eb9bc6e9 SO	249	&ntf->rf_tech_specific_params);
019c4fba	250	if (!rc) {
c4fbb651	251	target->logical_idx = ntf->rf_discovery_id;
019c4fba IE	252	ndev->n_targets++;
019c4fba IE	253
c4fbb651	254	pr_debug("logical idx %d, n_targets %d\n", target->logical_idx,
eb9bc6e9	255	ndev->n_targets);
019c4fba IE	256	}
	257	}
	258
	259	void nci_clear_target_list(struct nci_dev *ndev)
	260	{
	261	memset(ndev->targets, 0,
eb9bc6e9	262	(sizeof(struct nfc_target)*NCI_MAX_DISCOVERED_TARGETS));
019c4fba IE	263
	264	ndev->n_targets = 0;
	265	}
	266
	267	static void nci_rf_discover_ntf_packet(struct nci_dev *ndev,
eb9bc6e9	268	struct sk_buff *skb)
019c4fba IE	269	{
	270	struct nci_rf_discover_ntf ntf;
	271	__u8 *data = skb->data;
	272	bool add_target = true;
	273
	274	ntf.rf_discovery_id = *data++;
	275	ntf.rf_protocol = *data++;
	276	ntf.rf_tech_and_mode = *data++;
	277	ntf.rf_tech_specific_params_len = *data++;
	278
	279	pr_debug("rf_discovery_id %d\n", ntf.rf_discovery_id);
	280	pr_debug("rf_protocol 0x%x\n", ntf.rf_protocol);
	281	pr_debug("rf_tech_and_mode 0x%x\n", ntf.rf_tech_and_mode);
	282	pr_debug("rf_tech_specific_params_len %d\n",
eb9bc6e9	283	ntf.rf_tech_specific_params_len);
019c4fba IE	284
	285	if (ntf.rf_tech_specific_params_len > 0) {
	286	switch (ntf.rf_tech_and_mode) {
	287	case NCI_NFC_A_PASSIVE_POLL_MODE:
	288	data = nci_extract_rf_params_nfca_passive_poll(ndev,
	289	&(ntf.rf_tech_specific_params.nfca_poll), data);
	290	break;
	291
	292	case NCI_NFC_B_PASSIVE_POLL_MODE:
	293	data = nci_extract_rf_params_nfcb_passive_poll(ndev,
	294	&(ntf.rf_tech_specific_params.nfcb_poll), data);
	295	break;
	296
	297	case NCI_NFC_F_PASSIVE_POLL_MODE:
	298	data = nci_extract_rf_params_nfcf_passive_poll(ndev,
	299	&(ntf.rf_tech_specific_params.nfcf_poll), data);
	300	break;
	301
	302	default:
	303	pr_err("unsupported rf_tech_and_mode 0x%x\n",
	304	ntf.rf_tech_and_mode);
	305	data += ntf.rf_tech_specific_params_len;
	306	add_target = false;
	307	}
	308	}
	309
	310	ntf.ntf_type = *data++;
	311	pr_debug("ntf_type %d\n", ntf.ntf_type);
	312
	313	if (add_target == true)
	314	nci_add_new_target(ndev, &ntf);
	315
	316	if (ntf.ntf_type == NCI_DISCOVER_NTF_TYPE_MORE) {
	317	atomic_set(&ndev->state, NCI_W4_ALL_DISCOVERIES);
	318	} else {
	319	atomic_set(&ndev->state, NCI_W4_HOST_SELECT);
	320	nfc_targets_found(ndev->nfc_dev, ndev->targets,
eb9bc6e9	321	ndev->n_targets);
019c4fba IE	322	}
	323	}
	324
e8c0dacd IE	325	static int nci_extract_activation_params_iso_dep(struct nci_dev *ndev,
	326	struct nci_rf_intf_activated_ntf ntf, __u8 data)
	327	{
	328	struct activation_params_nfca_poll_iso_dep *nfca_poll;
d5a2ca60	329	struct activation_params_nfcb_poll_iso_dep *nfcb_poll;
e8c0dacd IE	330
	331	switch (ntf->activation_rf_tech_and_mode) {
	332	case NCI_NFC_A_PASSIVE_POLL_MODE:
	333	nfca_poll = &ntf->activation_params.nfca_poll_iso_dep;
67de956f	334	nfca_poll->rats_res_len = min_t(__u8, *data++, 20);
d5a2ca60	335	pr_debug("rats_res_len %d\n", nfca_poll->rats_res_len);
e8c0dacd IE	336	if (nfca_poll->rats_res_len > 0) {
e8c0dacd IE	337	memcpy(nfca_poll->rats_res,
eb9bc6e9	338	data, nfca_poll->rats_res_len);
6a2968aa IE	339	}
	340	break;
	341
d5a2ca60 IE	342	case NCI_NFC_B_PASSIVE_POLL_MODE:
d5a2ca60 IE	343	nfcb_poll = &ntf->activation_params.nfcb_poll_iso_dep;
67de956f	344	nfcb_poll->attrib_res_len = min_t(__u8, *data++, 50);
eb9bc6e9	345	pr_debug("attrib_res_len %d\n", nfcb_poll->attrib_res_len);
d5a2ca60 IE	346	if (nfcb_poll->attrib_res_len > 0) {
d5a2ca60 IE	347	memcpy(nfcb_poll->attrib_res,
eb9bc6e9	348	data, nfcb_poll->attrib_res_len);
d5a2ca60 IE	349	}
	350	break;
	351
6a2968aa	352	default:
ed1e0ad8 JP	353	pr_err("unsupported activation_rf_tech_and_mode 0x%x\n",
ed1e0ad8 JP	354	ntf->activation_rf_tech_and_mode);
019c4fba	355	return NCI_STATUS_RF_PROTOCOL_ERROR;
6a2968aa IE	356	}
6a2968aa IE	357
019c4fba	358	return NCI_STATUS_OK;
6a2968aa IE	359	}
6a2968aa IE	360
019c4fba	361	static void nci_target_auto_activated(struct nci_dev *ndev,
eb9bc6e9	362	struct nci_rf_intf_activated_ntf *ntf)
6a2968aa	363	{
019c4fba IE	364	struct nfc_target *target;
019c4fba IE	365	int rc;
6a2968aa	366
019c4fba	367	target = &ndev->targets[ndev->n_targets];
d5a2ca60	368
019c4fba	369	rc = nci_add_new_protocol(ndev, target, ntf->rf_protocol,
eb9bc6e9 SO	370	ntf->activation_rf_tech_and_mode,
eb9bc6e9 SO	371	&ntf->rf_tech_specific_params);
019c4fba	372	if (rc)
6a2968aa	373	return;
6a2968aa	374
c4fbb651	375	target->logical_idx = ntf->rf_discovery_id;
019c4fba	376	ndev->n_targets++;
d5a2ca60	377
c4fbb651 SO	378	pr_debug("logical idx %d, n_targets %d\n",
c4fbb651 SO	379	target->logical_idx, ndev->n_targets);
637d85a7	380
019c4fba	381	nfc_targets_found(ndev->nfc_dev, ndev->targets, ndev->n_targets);
6a2968aa IE	382	}
6a2968aa IE	383
e8c0dacd	384	static void nci_rf_intf_activated_ntf_packet(struct nci_dev *ndev,
eb9bc6e9	385	struct sk_buff *skb)
6a2968aa	386	{
e8c0dacd	387	struct nci_rf_intf_activated_ntf ntf;
6a2968aa	388	__u8 *data = skb->data;
019c4fba	389	int err = NCI_STATUS_OK;
6a2968aa	390
e8c0dacd	391	ntf.rf_discovery_id = *data++;
637d85a7	392	ntf.rf_interface = *data++;
6a2968aa	393	ntf.rf_protocol = *data++;
e8c0dacd	394	ntf.activation_rf_tech_and_mode = *data++;
637d85a7 IE	395	ntf.max_data_pkt_payload_size = *data++;
637d85a7 IE	396	ntf.initial_num_credits = *data++;
6a2968aa IE	397	ntf.rf_tech_specific_params_len = *data++;
6a2968aa IE	398
20c239c1	399	pr_debug("rf_discovery_id %d\n", ntf.rf_discovery_id);
637d85a7	400	pr_debug("rf_interface 0x%x\n", ntf.rf_interface);
20c239c1 JP	401	pr_debug("rf_protocol 0x%x\n", ntf.rf_protocol);
	402	pr_debug("activation_rf_tech_and_mode 0x%x\n",
	403	ntf.activation_rf_tech_and_mode);
637d85a7 IE	404	pr_debug("max_data_pkt_payload_size 0x%x\n",
637d85a7 IE	405	ntf.max_data_pkt_payload_size);
eb9bc6e9 SO	406	pr_debug("initial_num_credits 0x%x\n",
eb9bc6e9 SO	407	ntf.initial_num_credits);
20c239c1 JP	408	pr_debug("rf_tech_specific_params_len %d\n",
20c239c1 JP	409	ntf.rf_tech_specific_params_len);
6a2968aa	410
e8c0dacd IE	411	if (ntf.rf_tech_specific_params_len > 0) {
	412	switch (ntf.activation_rf_tech_and_mode) {
	413	case NCI_NFC_A_PASSIVE_POLL_MODE:
	414	data = nci_extract_rf_params_nfca_passive_poll(ndev,
019c4fba	415	&(ntf.rf_tech_specific_params.nfca_poll), data);
e8c0dacd IE	416	break;
e8c0dacd IE	417
d5a2ca60 IE	418	case NCI_NFC_B_PASSIVE_POLL_MODE:
d5a2ca60 IE	419	data = nci_extract_rf_params_nfcb_passive_poll(ndev,
019c4fba	420	&(ntf.rf_tech_specific_params.nfcb_poll), data);
d5a2ca60 IE	421	break;
	422
	423	case NCI_NFC_F_PASSIVE_POLL_MODE:
	424	data = nci_extract_rf_params_nfcf_passive_poll(ndev,
019c4fba	425	&(ntf.rf_tech_specific_params.nfcf_poll), data);
d5a2ca60 IE	426	break;
d5a2ca60 IE	427
e8c0dacd	428	default:
ed1e0ad8 JP	429	pr_err("unsupported activation_rf_tech_and_mode 0x%x\n",
ed1e0ad8 JP	430	ntf.activation_rf_tech_and_mode);
019c4fba IE	431	err = NCI_STATUS_RF_PROTOCOL_ERROR;
019c4fba IE	432	goto exit;
e8c0dacd IE	433	}
e8c0dacd IE	434	}
6a2968aa	435
e8c0dacd IE	436	ntf.data_exch_rf_tech_and_mode = *data++;
	437	ntf.data_exch_tx_bit_rate = *data++;
	438	ntf.data_exch_rx_bit_rate = *data++;
	439	ntf.activation_params_len = *data++;
	440
20c239c1 JP	441	pr_debug("data_exch_rf_tech_and_mode 0x%x\n",
20c239c1 JP	442	ntf.data_exch_rf_tech_and_mode);
eb9bc6e9 SO	443	pr_debug("data_exch_tx_bit_rate 0x%x\n", ntf.data_exch_tx_bit_rate);
	444	pr_debug("data_exch_rx_bit_rate 0x%x\n", ntf.data_exch_rx_bit_rate);
	445	pr_debug("activation_params_len %d\n", ntf.activation_params_len);
e8c0dacd IE	446
e8c0dacd IE	447	if (ntf.activation_params_len > 0) {
637d85a7	448	switch (ntf.rf_interface) {
e8c0dacd IE	449	case NCI_RF_INTERFACE_ISO_DEP:
e8c0dacd IE	450	err = nci_extract_activation_params_iso_dep(ndev,
eb9bc6e9	451	&ntf, data);
e8c0dacd IE	452	break;
	453
	454	case NCI_RF_INTERFACE_FRAME:
	455	/* no activation params */
	456	break;
	457
	458	default:
637d85a7 IE	459	pr_err("unsupported rf_interface 0x%x\n",
637d85a7 IE	460	ntf.rf_interface);
019c4fba IE	461	err = NCI_STATUS_RF_PROTOCOL_ERROR;
019c4fba IE	462	break;
e8c0dacd	463	}
6a2968aa IE	464	}
6a2968aa IE	465
019c4fba IE	466	exit:
	467	if (err == NCI_STATUS_OK) {
	468	ndev->max_data_pkt_payload_size = ntf.max_data_pkt_payload_size;
	469	ndev->initial_num_credits = ntf.initial_num_credits;
	470
	471	/* set the available credits to initial value */
	472	atomic_set(&ndev->credits_cnt, ndev->initial_num_credits);
	473	}
	474
	475	if (atomic_read(&ndev->state) == NCI_DISCOVERY) {
	476	/* A single target was found and activated automatically */
	477	atomic_set(&ndev->state, NCI_POLL_ACTIVE);
	478	if (err == NCI_STATUS_OK)
	479	nci_target_auto_activated(ndev, &ntf);
	480	} else { /* ndev->state == NCI_W4_HOST_SELECT */
	481	/* A selected target was activated, so complete the request */
	482	atomic_set(&ndev->state, NCI_POLL_ACTIVE);
	483	nci_req_complete(ndev, err);
	484	}
6a2968aa IE	485	}
	486
	487	static void nci_rf_deactivate_ntf_packet(struct nci_dev *ndev,
eb9bc6e9	488	struct sk_buff *skb)
6a2968aa	489	{
e8c0dacd	490	struct nci_rf_deactivate_ntf ntf = (void ) skb->data;
6a2968aa	491
20c239c1	492	pr_debug("entry, type 0x%x, reason 0x%x\n", ntf->type, ntf->reason);
6a2968aa	493
6a2968aa IE	494	/* drop tx data queue */
	495	skb_queue_purge(&ndev->tx_q);
	496
	497	/* drop partial rx data packet */
	498	if (ndev->rx_data_reassembly) {
	499	kfree_skb(ndev->rx_data_reassembly);
799030b7	500	ndev->rx_data_reassembly = NULL;
6a2968aa IE	501	}
	502
	503	/* complete the data exchange transaction, if exists */
38f04c6b	504	if (test_bit(NCI_DATA_EXCHANGE, &ndev->flags))
6a2968aa	505	nci_data_exchange_complete(ndev, NULL, -EIO);
bd7e01bc	506
019c4fba IE	507	nci_clear_target_list(ndev);
019c4fba IE	508	atomic_set(&ndev->state, NCI_IDLE);
bd7e01bc	509	nci_req_complete(ndev, NCI_STATUS_OK);
6a2968aa IE	510	}
	511
	512	void nci_ntf_packet(struct nci_dev ndev, struct sk_buff skb)
	513	{
	514	__u16 ntf_opcode = nci_opcode(skb->data);
	515
20c239c1 JP	516	pr_debug("NCI RX: MT=ntf, PBF=%d, GID=0x%x, OID=0x%x, plen=%d\n",
	517	nci_pbf(skb->data),
	518	nci_opcode_gid(ntf_opcode),
	519	nci_opcode_oid(ntf_opcode),
	520	nci_plen(skb->data));
6a2968aa IE	521
	522	/* strip the nci control header */
	523	skb_pull(skb, NCI_CTRL_HDR_SIZE);
	524
	525	switch (ntf_opcode) {
	526	case NCI_OP_CORE_CONN_CREDITS_NTF:
	527	nci_core_conn_credits_ntf_packet(ndev, skb);
	528	break;
	529
019c4fba IE	530	case NCI_OP_CORE_GENERIC_ERROR_NTF:
	531	nci_core_generic_error_ntf_packet(ndev, skb);
	532	break;
	533
004161cb IE	534	case NCI_OP_CORE_INTF_ERROR_NTF:
	535	nci_core_conn_intf_error_ntf_packet(ndev, skb);
	536	break;
	537
019c4fba IE	538	case NCI_OP_RF_DISCOVER_NTF:
	539	nci_rf_discover_ntf_packet(ndev, skb);
	540	break;
	541
e8c0dacd IE	542	case NCI_OP_RF_INTF_ACTIVATED_NTF:
e8c0dacd IE	543	nci_rf_intf_activated_ntf_packet(ndev, skb);
6a2968aa IE	544	break;
	545
	546	case NCI_OP_RF_DEACTIVATE_NTF:
	547	nci_rf_deactivate_ntf_packet(ndev, skb);
	548	break;
	549
	550	default:
ed1e0ad8	551	pr_err("unknown ntf opcode 0x%x\n", ntf_opcode);
6a2968aa IE	552	break;
	553	}
	554
	555	kfree_skb(skb);
	556	}