2 * HCI based Driver for STMicroelectronics NFC Chip
4 * Copyright (C) 2014 STMicroelectronics SAS. All rights reserved.
6 * This program is free software; you can redistribute it and/or modify it
7 * under the terms and conditions of the GNU General Public License,
8 * version 2, as published by the Free Software Foundation.
10 * This program is distributed in the hope that it will be useful,
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 * GNU General Public License for more details.
15 * You should have received a copy of the GNU General Public License
16 * along with this program; if not, see <http://www.gnu.org/licenses/>.
19 #include <linux/module.h>
20 #include <linux/nfc.h>
21 #include <net/nfc/hci.h>
22 #include <net/nfc/llc.h>
25 #include "st21nfca_dep.h"
26 #include "st21nfca_se.h"
28 #define DRIVER_DESC "HCI NFC driver for ST21NFCA"
30 #define FULL_VERSION_LEN 3
32 /* Proprietary gates, events, commands and registers */
34 /* Commands that apply to all RF readers */
35 #define ST21NFCA_RF_READER_CMD_PRESENCE_CHECK 0x30
37 #define ST21NFCA_RF_READER_ISO15693_GATE 0x12
38 #define ST21NFCA_RF_READER_ISO15693_INVENTORY 0x01
41 * Reader gate for communication with contact-less cards using Type A
42 * protocol ISO14443-3 but not compliant with ISO14443-4
44 #define ST21NFCA_RF_READER_14443_3_A_GATE 0x15
45 #define ST21NFCA_RF_READER_14443_3_A_UID 0x02
46 #define ST21NFCA_RF_READER_14443_3_A_ATQA 0x03
47 #define ST21NFCA_RF_READER_14443_3_A_SAK 0x04
49 #define ST21NFCA_RF_READER_F_DATARATE 0x01
50 #define ST21NFCA_RF_READER_F_DATARATE_106 0x01
51 #define ST21NFCA_RF_READER_F_DATARATE_212 0x02
52 #define ST21NFCA_RF_READER_F_DATARATE_424 0x04
53 #define ST21NFCA_RF_READER_F_POL_REQ 0x02
54 #define ST21NFCA_RF_READER_F_POL_REQ_DEFAULT 0xffff0000
55 #define ST21NFCA_RF_READER_F_NFCID2 0x03
56 #define ST21NFCA_RF_READER_F_NFCID1 0x04
58 #define ST21NFCA_RF_CARD_F_MODE 0x01
59 #define ST21NFCA_RF_CARD_F_NFCID2_LIST 0x04
60 #define ST21NFCA_RF_CARD_F_NFCID1 0x05
61 #define ST21NFCA_RF_CARD_F_SENS_RES 0x06
62 #define ST21NFCA_RF_CARD_F_SEL_RES 0x07
63 #define ST21NFCA_RF_CARD_F_DATARATE 0x08
64 #define ST21NFCA_RF_CARD_F_DATARATE_212_424 0x01
66 #define ST21NFCA_DEVICE_MGNT_PIPE 0x02
68 #define ST21NFCA_DM_GETINFO 0x13
69 #define ST21NFCA_DM_GETINFO_PIPE_LIST 0x02
70 #define ST21NFCA_DM_GETINFO_PIPE_INFO 0x01
71 #define ST21NFCA_DM_PIPE_CREATED 0x02
72 #define ST21NFCA_DM_PIPE_OPEN 0x04
73 #define ST21NFCA_DM_RF_ACTIVE 0x80
74 #define ST21NFCA_DM_DISCONNECT 0x30
76 #define ST21NFCA_DM_IS_PIPE_OPEN(p) \
77 ((p & 0x0f) == (ST21NFCA_DM_PIPE_CREATED | ST21NFCA_DM_PIPE_OPEN))
79 #define ST21NFCA_NFC_MODE 0x03 /* NFC_MODE parameter*/
81 #define ST21NFCA_EVT_HOT_PLUG 0x03
82 #define ST21NFCA_EVT_HOT_PLUG_IS_INHIBITED(x) (x->data[0] & 0x80)
84 #define ST21NFCA_SE_TO_PIPES 2000
86 static DECLARE_BITMAP(dev_mask, ST21NFCA_NUM_DEVICES);
88 static struct nfc_hci_gate st21nfca_gates[] = {
89 {NFC_HCI_ADMIN_GATE, NFC_HCI_ADMIN_PIPE},
90 {NFC_HCI_LOOPBACK_GATE, NFC_HCI_INVALID_PIPE},
91 {NFC_HCI_ID_MGMT_GATE, NFC_HCI_INVALID_PIPE},
92 {NFC_HCI_LINK_MGMT_GATE, NFC_HCI_LINK_MGMT_PIPE},
93 {NFC_HCI_RF_READER_B_GATE, NFC_HCI_INVALID_PIPE},
94 {NFC_HCI_RF_READER_A_GATE, NFC_HCI_INVALID_PIPE},
95 {ST21NFCA_DEVICE_MGNT_GATE, ST21NFCA_DEVICE_MGNT_PIPE},
96 {ST21NFCA_RF_READER_F_GATE, NFC_HCI_INVALID_PIPE},
97 {ST21NFCA_RF_READER_14443_3_A_GATE, NFC_HCI_INVALID_PIPE},
98 {ST21NFCA_RF_READER_ISO15693_GATE, NFC_HCI_INVALID_PIPE},
99 {ST21NFCA_RF_CARD_F_GATE, NFC_HCI_INVALID_PIPE},
101 /* Secure element pipes are created by secure element host */
102 {ST21NFCA_CONNECTIVITY_GATE, NFC_HCI_DO_NOT_CREATE_PIPE},
103 {ST21NFCA_APDU_READER_GATE, NFC_HCI_DO_NOT_CREATE_PIPE},
106 struct st21nfca_pipe_info {
114 /* Largest headroom needed for outgoing custom commands */
115 #define ST21NFCA_CMDS_HEADROOM 7
117 static int st21nfca_hci_load_session(struct nfc_hci_dev *hdev)
120 struct sk_buff *skb_pipe_list, *skb_pipe_info;
121 struct st21nfca_pipe_info *info;
123 u8 pipe_list[] = { ST21NFCA_DM_GETINFO_PIPE_LIST,
124 NFC_HCI_TERMINAL_HOST_ID
126 u8 pipe_info[] = { ST21NFCA_DM_GETINFO_PIPE_INFO,
127 NFC_HCI_TERMINAL_HOST_ID, 0
130 /* On ST21NFCA device pipes number are dynamics
131 * A maximum of 16 pipes can be created at the same time
132 * If pipes are already created, hci_dev_up will fail.
133 * Doing a clear all pipe is a bad idea because:
134 * - It does useless EEPROM cycling
135 * - It might cause issue for secure elements support
136 * (such as removing connectivity or APDU reader pipe)
137 * A better approach on ST21NFCA is to:
138 * - get a pipe list for each host.
139 * (eg: NFC_HCI_HOST_CONTROLLER_ID for now).
140 * (TODO Later on UICC HOST and eSE HOST)
141 * - get pipe information
142 * - match retrieved pipe list in st21nfca_gates
143 * ST21NFCA_DEVICE_MGNT_GATE is a proprietary gate
144 * with ST21NFCA_DEVICE_MGNT_PIPE.
145 * Pipe can be closed and need to be open.
147 r = nfc_hci_connect_gate(hdev, NFC_HCI_HOST_CONTROLLER_ID,
148 ST21NFCA_DEVICE_MGNT_GATE,
149 ST21NFCA_DEVICE_MGNT_PIPE);
154 r = nfc_hci_send_cmd(hdev, ST21NFCA_DEVICE_MGNT_GATE,
155 ST21NFCA_DM_GETINFO, pipe_list, sizeof(pipe_list),
160 /* Complete the existing gate_pipe table */
161 for (i = 0; i < skb_pipe_list->len; i++) {
162 pipe_info[2] = skb_pipe_list->data[i];
163 r = nfc_hci_send_cmd(hdev, ST21NFCA_DEVICE_MGNT_GATE,
164 ST21NFCA_DM_GETINFO, pipe_info,
165 sizeof(pipe_info), &skb_pipe_info);
171 * Match pipe ID and gate ID
172 * Output format from ST21NFC_DM_GETINFO is:
173 * - pipe state (1byte)
174 * - source hid (1byte)
175 * - source gid (1byte)
176 * - destination hid (1byte)
177 * - destination gid (1byte)
179 info = (struct st21nfca_pipe_info *) skb_pipe_info->data;
180 if (info->dst_gate_id == ST21NFCA_APDU_READER_GATE &&
181 info->src_host_id != ST21NFCA_ESE_HOST_ID) {
182 pr_err("Unexpected apdu_reader pipe on host %x\n",
187 for (j = 0; (j < ARRAY_SIZE(st21nfca_gates)) &&
188 (st21nfca_gates[j].gate != info->dst_gate_id) ; j++)
191 if (j < ARRAY_SIZE(st21nfca_gates) &&
192 st21nfca_gates[j].gate == info->dst_gate_id &&
193 ST21NFCA_DM_IS_PIPE_OPEN(info->pipe_state)) {
194 st21nfca_gates[j].pipe = pipe_info[2];
196 hdev->gate2pipe[st21nfca_gates[j].gate] =
197 st21nfca_gates[j].pipe;
198 hdev->pipes[st21nfca_gates[j].pipe].gate =
199 st21nfca_gates[j].gate;
200 hdev->pipes[st21nfca_gates[j].pipe].dest_host =
206 * 3 gates have a well known pipe ID.
207 * They will never appear in the pipe list
209 if (skb_pipe_list->len + 3 < ARRAY_SIZE(st21nfca_gates)) {
210 for (i = skb_pipe_list->len + 3;
211 i < ARRAY_SIZE(st21nfca_gates) - 2; i++) {
212 r = nfc_hci_connect_gate(hdev,
213 NFC_HCI_HOST_CONTROLLER_ID,
214 st21nfca_gates[i].gate,
215 st21nfca_gates[i].pipe);
221 memcpy(hdev->init_data.gates, st21nfca_gates, sizeof(st21nfca_gates));
223 kfree_skb(skb_pipe_info);
224 kfree_skb(skb_pipe_list);
228 static int st21nfca_hci_open(struct nfc_hci_dev *hdev)
230 struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev);
233 mutex_lock(&info->info_lock);
235 if (info->state != ST21NFCA_ST_COLD) {
240 r = info->phy_ops->enable(info->phy_id);
243 info->state = ST21NFCA_ST_READY;
246 mutex_unlock(&info->info_lock);
250 static void st21nfca_hci_close(struct nfc_hci_dev *hdev)
252 struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev);
254 mutex_lock(&info->info_lock);
256 if (info->state == ST21NFCA_ST_COLD)
259 info->phy_ops->disable(info->phy_id);
260 info->state = ST21NFCA_ST_COLD;
263 mutex_unlock(&info->info_lock);
266 static int st21nfca_hci_ready(struct nfc_hci_dev *hdev)
268 struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev);
276 if (info->se_status->is_ese_present &&
277 info->se_status->is_uicc_present) {
278 white_list[wl_size++] = NFC_HCI_UICC_HOST_ID;
279 white_list[wl_size++] = ST21NFCA_ESE_HOST_ID;
280 } else if (!info->se_status->is_ese_present &&
281 info->se_status->is_uicc_present) {
282 white_list[wl_size++] = NFC_HCI_UICC_HOST_ID;
283 } else if (info->se_status->is_ese_present &&
284 !info->se_status->is_uicc_present) {
285 white_list[wl_size++] = ST21NFCA_ESE_HOST_ID;
289 r = nfc_hci_set_param(hdev, NFC_HCI_ADMIN_GATE,
290 NFC_HCI_ADMIN_WHITELIST,
291 (u8 *) &white_list, wl_size);
296 /* Set NFC_MODE in device management gate to enable */
297 r = nfc_hci_get_param(hdev, ST21NFCA_DEVICE_MGNT_GATE,
298 ST21NFCA_NFC_MODE, &skb);
302 param = skb->data[0];
307 r = nfc_hci_set_param(hdev, ST21NFCA_DEVICE_MGNT_GATE,
308 ST21NFCA_NFC_MODE, ¶m, 1);
313 r = nfc_hci_send_event(hdev, NFC_HCI_RF_READER_A_GATE,
314 NFC_HCI_EVT_END_OPERATION, NULL, 0);
318 r = nfc_hci_get_param(hdev, NFC_HCI_ID_MGMT_GATE,
319 NFC_HCI_ID_MGMT_VERSION_SW, &skb);
323 if (skb->len != FULL_VERSION_LEN) {
328 print_hex_dump(KERN_DEBUG, "FULL VERSION SOFTWARE INFO: ",
329 DUMP_PREFIX_NONE, 16, 1,
330 skb->data, FULL_VERSION_LEN, false);
337 static int st21nfca_hci_xmit(struct nfc_hci_dev *hdev, struct sk_buff *skb)
339 struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev);
341 return info->phy_ops->write(info->phy_id, skb);
344 static int st21nfca_hci_start_poll(struct nfc_hci_dev *hdev,
345 u32 im_protocols, u32 tm_protocols)
350 struct sk_buff *datarate_skb;
352 pr_info(DRIVER_DESC ": %s protocols 0x%x 0x%x\n",
353 __func__, im_protocols, tm_protocols);
355 r = nfc_hci_send_event(hdev, NFC_HCI_RF_READER_A_GATE,
356 NFC_HCI_EVT_END_OPERATION, NULL, 0);
361 * enable polling according to im_protocols & tm_protocols
362 * - CLOSE pipe according to im_protocols & tm_protocols
364 if ((NFC_HCI_RF_READER_B_GATE & im_protocols) == 0) {
365 r = nfc_hci_disconnect_gate(hdev,
366 NFC_HCI_RF_READER_B_GATE);
371 if ((NFC_HCI_RF_READER_A_GATE & im_protocols) == 0) {
372 r = nfc_hci_disconnect_gate(hdev,
373 NFC_HCI_RF_READER_A_GATE);
378 if ((ST21NFCA_RF_READER_F_GATE & im_protocols) == 0) {
379 r = nfc_hci_disconnect_gate(hdev,
380 ST21NFCA_RF_READER_F_GATE);
384 hdev->gb = nfc_get_local_general_bytes(hdev->ndev,
387 if (hdev->gb == NULL || hdev->gb_len == 0) {
388 im_protocols &= ~NFC_PROTO_NFC_DEP_MASK;
389 tm_protocols &= ~NFC_PROTO_NFC_DEP_MASK;
392 param[0] = ST21NFCA_RF_READER_F_DATARATE_106 |
393 ST21NFCA_RF_READER_F_DATARATE_212 |
394 ST21NFCA_RF_READER_F_DATARATE_424;
395 r = nfc_hci_set_param(hdev, ST21NFCA_RF_READER_F_GATE,
396 ST21NFCA_RF_READER_F_DATARATE,
401 pol_req = be32_to_cpu((__force __be32)
402 ST21NFCA_RF_READER_F_POL_REQ_DEFAULT);
403 r = nfc_hci_set_param(hdev, ST21NFCA_RF_READER_F_GATE,
404 ST21NFCA_RF_READER_F_POL_REQ,
410 if ((ST21NFCA_RF_READER_14443_3_A_GATE & im_protocols) == 0) {
411 r = nfc_hci_disconnect_gate(hdev,
412 ST21NFCA_RF_READER_14443_3_A_GATE);
417 if ((ST21NFCA_RF_READER_ISO15693_GATE & im_protocols) == 0) {
418 r = nfc_hci_disconnect_gate(hdev,
419 ST21NFCA_RF_READER_ISO15693_GATE);
424 r = nfc_hci_send_event(hdev, NFC_HCI_RF_READER_A_GATE,
425 NFC_HCI_EVT_READER_REQUESTED, NULL, 0);
427 nfc_hci_send_event(hdev, NFC_HCI_RF_READER_A_GATE,
428 NFC_HCI_EVT_END_OPERATION, NULL, 0);
431 if (tm_protocols & NFC_PROTO_NFC_DEP_MASK) {
432 r = nfc_hci_get_param(hdev, ST21NFCA_RF_CARD_F_GATE,
433 ST21NFCA_RF_CARD_F_DATARATE,
438 /* Configure the maximum supported datarate to 424Kbps */
439 if (datarate_skb->len > 0 &&
440 datarate_skb->data[0] !=
441 ST21NFCA_RF_CARD_F_DATARATE_212_424) {
442 param[0] = ST21NFCA_RF_CARD_F_DATARATE_212_424;
443 r = nfc_hci_set_param(hdev, ST21NFCA_RF_CARD_F_GATE,
444 ST21NFCA_RF_CARD_F_DATARATE,
447 kfree_skb(datarate_skb);
451 kfree_skb(datarate_skb);
456 * NFC Forum Digital Spec Table 7:
457 * NFCID1 size: triple (10 bytes)
461 r = nfc_hci_set_param(hdev, ST21NFCA_RF_CARD_F_GATE,
462 ST21NFCA_RF_CARD_F_SENS_RES, param, 2);
469 * NFC Forum Digistal Spec Table 17:
470 * b3 set to 0b (value b7-b6):
471 * - 10b: Configured for NFC-DEP Protocol
474 r = nfc_hci_set_param(hdev, ST21NFCA_RF_CARD_F_GATE,
475 ST21NFCA_RF_CARD_F_SEL_RES, param, 1);
479 /* Configure NFCID1 Random uid */
480 r = nfc_hci_set_param(hdev, ST21NFCA_RF_CARD_F_GATE,
481 ST21NFCA_RF_CARD_F_NFCID1, NULL, 0);
485 /* Configure NFCID2_LIST */
498 /* 8 byte Pad bytes used for polling respone frame */
501 * Configuration byte:
502 * - bit 0: define the default NFCID2 entry used when the
503 * system code is equal to 'FFFF'
504 * - bit 1: use a random value for lowest 6 bytes of
506 * - bit 2: ignore polling request frame if request code
508 * - Other bits are RFU
511 r = nfc_hci_set_param(hdev, ST21NFCA_RF_CARD_F_GATE,
512 ST21NFCA_RF_CARD_F_NFCID2_LIST, param,
518 r = nfc_hci_set_param(hdev, ST21NFCA_RF_CARD_F_GATE,
519 ST21NFCA_RF_CARD_F_MODE, param, 1);
525 static void st21nfca_hci_stop_poll(struct nfc_hci_dev *hdev)
527 nfc_hci_send_cmd(hdev, ST21NFCA_DEVICE_MGNT_GATE,
528 ST21NFCA_DM_DISCONNECT, NULL, 0, NULL);
531 static int st21nfca_get_iso14443_3_atqa(struct nfc_hci_dev *hdev, u16 *atqa)
534 struct sk_buff *atqa_skb = NULL;
536 r = nfc_hci_get_param(hdev, ST21NFCA_RF_READER_14443_3_A_GATE,
537 ST21NFCA_RF_READER_14443_3_A_ATQA, &atqa_skb);
541 if (atqa_skb->len != 2) {
546 *atqa = be16_to_cpu(*(__be16 *) atqa_skb->data);
553 static int st21nfca_get_iso14443_3_sak(struct nfc_hci_dev *hdev, u8 *sak)
556 struct sk_buff *sak_skb = NULL;
558 r = nfc_hci_get_param(hdev, ST21NFCA_RF_READER_14443_3_A_GATE,
559 ST21NFCA_RF_READER_14443_3_A_SAK, &sak_skb);
563 if (sak_skb->len != 1) {
568 *sak = sak_skb->data[0];
575 static int st21nfca_get_iso14443_3_uid(struct nfc_hci_dev *hdev, u8 *uid,
579 struct sk_buff *uid_skb = NULL;
581 r = nfc_hci_get_param(hdev, ST21NFCA_RF_READER_14443_3_A_GATE,
582 ST21NFCA_RF_READER_14443_3_A_UID, &uid_skb);
586 if (uid_skb->len == 0 || uid_skb->len > NFC_NFCID1_MAXSIZE) {
591 memcpy(uid, uid_skb->data, uid_skb->len);
598 static int st21nfca_get_iso15693_inventory(struct nfc_hci_dev *hdev,
599 struct nfc_target *target)
602 struct sk_buff *inventory_skb = NULL;
604 r = nfc_hci_get_param(hdev, ST21NFCA_RF_READER_ISO15693_GATE,
605 ST21NFCA_RF_READER_ISO15693_INVENTORY,
610 skb_pull(inventory_skb, 2);
612 if (inventory_skb->len == 0 ||
613 inventory_skb->len > NFC_ISO15693_UID_MAXSIZE) {
618 memcpy(target->iso15693_uid, inventory_skb->data, inventory_skb->len);
619 target->iso15693_dsfid = inventory_skb->data[1];
620 target->is_iso15693 = 1;
622 kfree_skb(inventory_skb);
626 static int st21nfca_hci_dep_link_up(struct nfc_hci_dev *hdev,
627 struct nfc_target *target, u8 comm_mode,
628 u8 *gb, size_t gb_len)
630 struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev);
632 info->dep_info.idx = target->idx;
633 return st21nfca_im_send_atr_req(hdev, gb, gb_len);
636 static int st21nfca_hci_dep_link_down(struct nfc_hci_dev *hdev)
638 struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev);
640 info->state = ST21NFCA_ST_READY;
642 return nfc_hci_send_cmd(hdev, ST21NFCA_DEVICE_MGNT_GATE,
643 ST21NFCA_DM_DISCONNECT, NULL, 0, NULL);
646 static int st21nfca_hci_target_from_gate(struct nfc_hci_dev *hdev, u8 gate,
647 struct nfc_target *target)
652 u8 uid[NFC_NFCID1_MAXSIZE];
655 case ST21NFCA_RF_READER_F_GATE:
656 target->supported_protocols = NFC_PROTO_FELICA_MASK;
658 case ST21NFCA_RF_READER_14443_3_A_GATE:
659 /* ISO14443-3 type 1 or 2 tags */
660 r = st21nfca_get_iso14443_3_atqa(hdev, &atqa);
663 if (atqa == 0x000c) {
664 target->supported_protocols = NFC_PROTO_JEWEL_MASK;
665 target->sens_res = 0x0c00;
667 r = st21nfca_get_iso14443_3_sak(hdev, &sak);
671 r = st21nfca_get_iso14443_3_uid(hdev, uid, &len);
675 target->supported_protocols =
676 nfc_hci_sak_to_protocol(sak);
677 if (target->supported_protocols == 0xffffffff)
680 target->sens_res = atqa;
681 target->sel_res = sak;
682 memcpy(target->nfcid1, uid, len);
683 target->nfcid1_len = len;
687 case ST21NFCA_RF_READER_ISO15693_GATE:
688 target->supported_protocols = NFC_PROTO_ISO15693_MASK;
689 r = st21nfca_get_iso15693_inventory(hdev, target);
700 static int st21nfca_hci_complete_target_discovered(struct nfc_hci_dev *hdev,
702 struct nfc_target *target)
705 struct sk_buff *nfcid_skb = NULL;
707 if (gate == ST21NFCA_RF_READER_F_GATE) {
708 r = nfc_hci_get_param(hdev, ST21NFCA_RF_READER_F_GATE,
709 ST21NFCA_RF_READER_F_NFCID2, &nfcid_skb);
713 if (nfcid_skb->len > NFC_SENSF_RES_MAXSIZE) {
719 * - After the recepton of polling response for type F frame
720 * at 212 or 424 Kbit/s, NFCID2 registry parameters will be
722 * - After the reception of SEL_RES with NFCIP-1 compliant bit
723 * set for type A frame NFCID1 will be updated
725 if (nfcid_skb->len > 0) {
727 memcpy(target->sensf_res, nfcid_skb->data,
729 target->sensf_res_len = nfcid_skb->len;
730 /* NFC Forum Digital Protocol Table 44 */
731 if (target->sensf_res[0] == 0x01 &&
732 target->sensf_res[1] == 0xfe)
733 target->supported_protocols =
734 NFC_PROTO_NFC_DEP_MASK;
736 target->supported_protocols =
737 NFC_PROTO_FELICA_MASK;
739 kfree_skb(nfcid_skb);
741 r = nfc_hci_get_param(hdev, ST21NFCA_RF_READER_F_GATE,
742 ST21NFCA_RF_READER_F_NFCID1,
747 if (nfcid_skb->len > NFC_NFCID1_MAXSIZE) {
751 memcpy(target->sensf_res, nfcid_skb->data,
753 target->sensf_res_len = nfcid_skb->len;
754 target->supported_protocols = NFC_PROTO_NFC_DEP_MASK;
756 target->hci_reader_gate = ST21NFCA_RF_READER_F_GATE;
760 kfree_skb(nfcid_skb);
764 #define ST21NFCA_CB_TYPE_READER_ISO15693 1
765 static void st21nfca_hci_data_exchange_cb(void *context, struct sk_buff *skb,
768 struct st21nfca_hci_info *info = context;
770 switch (info->async_cb_type) {
771 case ST21NFCA_CB_TYPE_READER_ISO15693:
773 skb_trim(skb, skb->len - 1);
774 info->async_cb(info->async_cb_context, skb, err);
785 * <= 0: driver handled the data exchange
786 * 1: driver doesn't especially handle, please do standard processing
788 static int st21nfca_hci_im_transceive(struct nfc_hci_dev *hdev,
789 struct nfc_target *target,
791 data_exchange_cb_t cb, void *cb_context)
793 struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev);
795 pr_info(DRIVER_DESC ": %s for gate=%d len=%d\n", __func__,
796 target->hci_reader_gate, skb->len);
798 switch (target->hci_reader_gate) {
799 case ST21NFCA_RF_READER_F_GATE:
800 if (target->supported_protocols == NFC_PROTO_NFC_DEP_MASK)
801 return st21nfca_im_send_dep_req(hdev, skb);
803 *skb_push(skb, 1) = 0x1a;
804 return nfc_hci_send_cmd_async(hdev, target->hci_reader_gate,
805 ST21NFCA_WR_XCHG_DATA, skb->data,
806 skb->len, cb, cb_context);
807 case ST21NFCA_RF_READER_14443_3_A_GATE:
808 *skb_push(skb, 1) = 0x1a; /* CTR, see spec:10.2.2.1 */
810 return nfc_hci_send_cmd_async(hdev, target->hci_reader_gate,
811 ST21NFCA_WR_XCHG_DATA, skb->data,
812 skb->len, cb, cb_context);
813 case ST21NFCA_RF_READER_ISO15693_GATE:
814 info->async_cb_type = ST21NFCA_CB_TYPE_READER_ISO15693;
816 info->async_cb_context = cb_context;
818 *skb_push(skb, 1) = 0x17;
820 return nfc_hci_send_cmd_async(hdev, target->hci_reader_gate,
821 ST21NFCA_WR_XCHG_DATA, skb->data,
823 st21nfca_hci_data_exchange_cb,
831 static int st21nfca_hci_tm_send(struct nfc_hci_dev *hdev, struct sk_buff *skb)
833 return st21nfca_tm_send_dep_res(hdev, skb);
836 static int st21nfca_hci_check_presence(struct nfc_hci_dev *hdev,
837 struct nfc_target *target)
841 switch (target->hci_reader_gate) {
842 case NFC_HCI_RF_READER_A_GATE:
843 case NFC_HCI_RF_READER_B_GATE:
845 * PRESENCE_CHECK on those gates is available
846 * However, the answer to this command is taking 3 * fwi
847 * if the card is no present.
848 * Instead, we send an empty I-Frame with a very short
849 * configurable fwi ~604µs.
851 return nfc_hci_send_cmd(hdev, target->hci_reader_gate,
852 ST21NFCA_WR_XCHG_DATA, &fwi, 1, NULL);
853 case ST21NFCA_RF_READER_14443_3_A_GATE:
854 return nfc_hci_send_cmd(hdev, target->hci_reader_gate,
855 ST21NFCA_RF_READER_CMD_PRESENCE_CHECK,
862 static void st21nfca_hci_cmd_received(struct nfc_hci_dev *hdev, u8 pipe, u8 cmd,
865 struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev);
866 u8 gate = hdev->pipes[pipe].gate;
868 pr_debug("cmd: %x\n", cmd);
871 case NFC_HCI_ANY_OPEN_PIPE:
872 if (gate != ST21NFCA_APDU_READER_GATE &&
873 hdev->pipes[pipe].dest_host != NFC_HCI_UICC_HOST_ID)
874 info->se_info.count_pipes++;
876 if (info->se_info.count_pipes == info->se_info.expected_pipes) {
877 del_timer_sync(&info->se_info.se_active_timer);
878 info->se_info.se_active = false;
879 info->se_info.count_pipes = 0;
880 complete(&info->se_info.req_completion);
886 static int st21nfca_admin_event_received(struct nfc_hci_dev *hdev, u8 event,
889 struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev);
891 pr_debug("admin event: %x\n", event);
894 case ST21NFCA_EVT_HOT_PLUG:
895 if (info->se_info.se_active) {
896 if (!ST21NFCA_EVT_HOT_PLUG_IS_INHIBITED(skb)) {
897 del_timer_sync(&info->se_info.se_active_timer);
898 info->se_info.se_active = false;
899 complete(&info->se_info.req_completion);
901 mod_timer(&info->se_info.se_active_timer,
903 msecs_to_jiffies(ST21NFCA_SE_TO_PIPES));
914 * <= 0: driver handled the event, skb consumed
915 * 1: driver does not handle the event, please do standard processing
917 static int st21nfca_hci_event_received(struct nfc_hci_dev *hdev, u8 pipe,
918 u8 event, struct sk_buff *skb)
920 u8 gate = hdev->pipes[pipe].gate;
921 u8 host = hdev->pipes[pipe].dest_host;
923 pr_debug("hci event: %d gate: %x\n", event, gate);
926 case NFC_HCI_ADMIN_GATE:
927 return st21nfca_admin_event_received(hdev, event, skb);
928 case ST21NFCA_RF_CARD_F_GATE:
929 return st21nfca_dep_event_received(hdev, event, skb);
930 case ST21NFCA_CONNECTIVITY_GATE:
931 return st21nfca_connectivity_event_received(hdev, host,
933 case ST21NFCA_APDU_READER_GATE:
934 return st21nfca_apdu_reader_event_received(hdev, event, skb);
940 static struct nfc_hci_ops st21nfca_hci_ops = {
941 .open = st21nfca_hci_open,
942 .close = st21nfca_hci_close,
943 .load_session = st21nfca_hci_load_session,
944 .hci_ready = st21nfca_hci_ready,
945 .xmit = st21nfca_hci_xmit,
946 .start_poll = st21nfca_hci_start_poll,
947 .stop_poll = st21nfca_hci_stop_poll,
948 .dep_link_up = st21nfca_hci_dep_link_up,
949 .dep_link_down = st21nfca_hci_dep_link_down,
950 .target_from_gate = st21nfca_hci_target_from_gate,
951 .complete_target_discovered = st21nfca_hci_complete_target_discovered,
952 .im_transceive = st21nfca_hci_im_transceive,
953 .tm_send = st21nfca_hci_tm_send,
954 .check_presence = st21nfca_hci_check_presence,
955 .event_received = st21nfca_hci_event_received,
956 .cmd_received = st21nfca_hci_cmd_received,
957 .discover_se = st21nfca_hci_discover_se,
958 .enable_se = st21nfca_hci_enable_se,
959 .disable_se = st21nfca_hci_disable_se,
960 .se_io = st21nfca_hci_se_io,
963 int st21nfca_hci_probe(void *phy_id, struct nfc_phy_ops *phy_ops,
964 char *llc_name, int phy_headroom, int phy_tailroom,
965 int phy_payload, struct nfc_hci_dev **hdev,
966 struct st21nfca_se_status *se_status)
968 struct st21nfca_hci_info *info;
972 struct nfc_hci_init_data init_data;
973 unsigned long quirks = 0;
975 info = kzalloc(sizeof(struct st21nfca_hci_info), GFP_KERNEL);
981 info->phy_ops = phy_ops;
982 info->phy_id = phy_id;
983 info->state = ST21NFCA_ST_COLD;
984 mutex_init(&info->info_lock);
986 init_data.gate_count = ARRAY_SIZE(st21nfca_gates);
988 memcpy(init_data.gates, st21nfca_gates, sizeof(st21nfca_gates));
991 * Session id must include the driver name + i2c bus addr
992 * persistent info to discriminate 2 identical chips
994 dev_num = find_first_zero_bit(dev_mask, ST21NFCA_NUM_DEVICES);
996 if (dev_num >= ST21NFCA_NUM_DEVICES)
999 set_bit(dev_num, dev_mask);
1001 scnprintf(init_data.session_id, sizeof(init_data.session_id), "%s%2x",
1004 protocols = NFC_PROTO_JEWEL_MASK |
1005 NFC_PROTO_MIFARE_MASK |
1006 NFC_PROTO_FELICA_MASK |
1007 NFC_PROTO_ISO14443_MASK |
1008 NFC_PROTO_ISO14443_B_MASK |
1009 NFC_PROTO_ISO15693_MASK |
1010 NFC_PROTO_NFC_DEP_MASK;
1012 set_bit(NFC_HCI_QUIRK_SHORT_CLEAR, &quirks);
1015 nfc_hci_allocate_device(&st21nfca_hci_ops, &init_data, quirks,
1016 protocols, llc_name,
1017 phy_headroom + ST21NFCA_CMDS_HEADROOM,
1018 phy_tailroom, phy_payload);
1021 pr_err("Cannot allocate nfc hdev.\n");
1023 goto err_alloc_hdev;
1026 info->se_status = se_status;
1028 nfc_hci_set_clientdata(info->hdev, info);
1030 r = nfc_hci_register_device(info->hdev);
1035 st21nfca_dep_init(info->hdev);
1036 st21nfca_se_init(info->hdev);
1041 nfc_hci_free_device(info->hdev);
1048 EXPORT_SYMBOL(st21nfca_hci_probe);
1050 void st21nfca_hci_remove(struct nfc_hci_dev *hdev)
1052 struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev);
1054 st21nfca_dep_deinit(hdev);
1055 st21nfca_se_deinit(hdev);
1056 nfc_hci_unregister_device(hdev);
1057 nfc_hci_free_device(hdev);
1060 EXPORT_SYMBOL(st21nfca_hci_remove);
1062 MODULE_LICENSE("GPL");
1063 MODULE_DESCRIPTION(DRIVER_DESC);