pn544.c revision 8bd7fc89958c2f23a5c5d0113ff65713683041ea
1/*
2 * HCI based Driver for NXP PN544 NFC Chip
3 *
4 * Copyright (C) 2012  Intel Corporation. All rights reserved.
5 *
6 * This program is free software; you can redistribute it and/or modify it
7 * under the terms and conditions of the GNU General Public License,
8 * version 2, as published by the Free Software Foundation.
9 *
10 * This program is distributed in the hope that it will be useful,
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 * GNU General Public License for more details.
14 *
15 * You should have received a copy of the GNU General Public License
16 * along with this program; if not, write to the
17 * Free Software Foundation, Inc.,
18 * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
19 */
20
21#include <linux/delay.h>
22#include <linux/slab.h>
23#include <linux/module.h>
24
25#include <linux/nfc.h>
26#include <net/nfc/hci.h>
27#include <net/nfc/llc.h>
28
29#include "pn544.h"
30
31/* Timing restrictions (ms) */
32#define PN544_HCI_RESETVEN_TIME		30
33
34enum pn544_state {
35	PN544_ST_COLD,
36	PN544_ST_FW_READY,
37	PN544_ST_READY,
38};
39
40#define FULL_VERSION_LEN 11
41
42/* Proprietary commands */
43#define PN544_WRITE		0x3f
44
45/* Proprietary gates, events, commands and registers */
46
47/* NFC_HCI_RF_READER_A_GATE additional registers and commands */
48#define PN544_RF_READER_A_AUTO_ACTIVATION			0x10
49#define PN544_RF_READER_A_CMD_CONTINUE_ACTIVATION		0x12
50#define PN544_MIFARE_CMD					0x21
51
52/* Commands that apply to all RF readers */
53#define PN544_RF_READER_CMD_PRESENCE_CHECK	0x30
54#define PN544_RF_READER_CMD_ACTIVATE_NEXT	0x32
55
56/* NFC_HCI_ID_MGMT_GATE additional registers */
57#define PN544_ID_MGMT_FULL_VERSION_SW		0x10
58
59#define PN544_RF_READER_ISO15693_GATE		0x12
60
61#define PN544_RF_READER_F_GATE			0x14
62#define PN544_FELICA_ID				0x04
63#define PN544_FELICA_RAW			0x20
64
65#define PN544_RF_READER_JEWEL_GATE		0x15
66#define PN544_JEWEL_RAW_CMD			0x23
67
68#define PN544_RF_READER_NFCIP1_INITIATOR_GATE	0x30
69#define PN544_RF_READER_NFCIP1_TARGET_GATE	0x31
70
71#define PN544_SYS_MGMT_GATE			0x90
72#define PN544_SYS_MGMT_INFO_NOTIFICATION	0x02
73
74#define PN544_POLLING_LOOP_MGMT_GATE		0x94
75#define PN544_DEP_MODE				0x01
76#define PN544_DEP_ATR_REQ			0x02
77#define PN544_DEP_ATR_RES			0x03
78#define PN544_DEP_MERGE				0x0D
79#define PN544_PL_RDPHASES			0x06
80#define PN544_PL_EMULATION			0x07
81#define PN544_PL_NFCT_DEACTIVATED		0x09
82
83#define PN544_SWP_MGMT_GATE			0xA0
84
85#define PN544_NFC_WI_MGMT_GATE			0xA1
86
87#define PN544_HCI_EVT_SND_DATA			0x01
88#define PN544_HCI_EVT_ACTIVATED			0x02
89#define PN544_HCI_EVT_DEACTIVATED		0x03
90#define PN544_HCI_EVT_RCV_DATA			0x04
91#define PN544_HCI_EVT_CONTINUE_MI		0x05
92
93#define PN544_HCI_CMD_ATTREQUEST		0x12
94#define PN544_HCI_CMD_CONTINUE_ACTIVATION	0x13
95
96static struct nfc_hci_gate pn544_gates[] = {
97	{NFC_HCI_ADMIN_GATE, NFC_HCI_INVALID_PIPE},
98	{NFC_HCI_LOOPBACK_GATE, NFC_HCI_INVALID_PIPE},
99	{NFC_HCI_ID_MGMT_GATE, NFC_HCI_INVALID_PIPE},
100	{NFC_HCI_LINK_MGMT_GATE, NFC_HCI_INVALID_PIPE},
101	{NFC_HCI_RF_READER_B_GATE, NFC_HCI_INVALID_PIPE},
102	{NFC_HCI_RF_READER_A_GATE, NFC_HCI_INVALID_PIPE},
103	{PN544_SYS_MGMT_GATE, NFC_HCI_INVALID_PIPE},
104	{PN544_SWP_MGMT_GATE, NFC_HCI_INVALID_PIPE},
105	{PN544_POLLING_LOOP_MGMT_GATE, NFC_HCI_INVALID_PIPE},
106	{PN544_NFC_WI_MGMT_GATE, NFC_HCI_INVALID_PIPE},
107	{PN544_RF_READER_F_GATE, NFC_HCI_INVALID_PIPE},
108	{PN544_RF_READER_JEWEL_GATE, NFC_HCI_INVALID_PIPE},
109	{PN544_RF_READER_ISO15693_GATE, NFC_HCI_INVALID_PIPE},
110	{PN544_RF_READER_NFCIP1_INITIATOR_GATE, NFC_HCI_INVALID_PIPE},
111	{PN544_RF_READER_NFCIP1_TARGET_GATE, NFC_HCI_INVALID_PIPE}
112};
113
114/* Largest headroom needed for outgoing custom commands */
115#define PN544_CMDS_HEADROOM	2
116
117struct pn544_hci_info {
118	struct nfc_phy_ops *phy_ops;
119	void *phy_id;
120
121	struct nfc_hci_dev *hdev;
122
123	enum pn544_state state;
124
125	struct mutex info_lock;
126
127	int async_cb_type;
128	data_exchange_cb_t async_cb;
129	void *async_cb_context;
130
131	fw_download_t fw_download;
132};
133
134static int pn544_hci_open(struct nfc_hci_dev *hdev)
135{
136	struct pn544_hci_info *info = nfc_hci_get_clientdata(hdev);
137	int r = 0;
138
139	mutex_lock(&info->info_lock);
140
141	if (info->state != PN544_ST_COLD) {
142		r = -EBUSY;
143		goto out;
144	}
145
146	r = info->phy_ops->enable(info->phy_id);
147
148	if (r == 0)
149		info->state = PN544_ST_READY;
150
151out:
152	mutex_unlock(&info->info_lock);
153	return r;
154}
155
156static void pn544_hci_close(struct nfc_hci_dev *hdev)
157{
158	struct pn544_hci_info *info = nfc_hci_get_clientdata(hdev);
159
160	mutex_lock(&info->info_lock);
161
162	if (info->state == PN544_ST_COLD)
163		goto out;
164
165	info->phy_ops->disable(info->phy_id);
166
167	info->state = PN544_ST_COLD;
168
169out:
170	mutex_unlock(&info->info_lock);
171}
172
173static int pn544_hci_ready(struct nfc_hci_dev *hdev)
174{
175	struct sk_buff *skb;
176	static struct hw_config {
177		u8 adr[2];
178		u8 value;
179	} hw_config[] = {
180		{{0x9f, 0x9a}, 0x00},
181
182		{{0x98, 0x10}, 0xbc},
183
184		{{0x9e, 0x71}, 0x00},
185
186		{{0x98, 0x09}, 0x00},
187
188		{{0x9e, 0xb4}, 0x00},
189
190		{{0x9e, 0xd9}, 0xff},
191		{{0x9e, 0xda}, 0xff},
192		{{0x9e, 0xdb}, 0x23},
193		{{0x9e, 0xdc}, 0x21},
194		{{0x9e, 0xdd}, 0x22},
195		{{0x9e, 0xde}, 0x24},
196
197		{{0x9c, 0x01}, 0x08},
198
199		{{0x9e, 0xaa}, 0x01},
200
201		{{0x9b, 0xd1}, 0x0d},
202		{{0x9b, 0xd2}, 0x24},
203		{{0x9b, 0xd3}, 0x0a},
204		{{0x9b, 0xd4}, 0x22},
205		{{0x9b, 0xd5}, 0x08},
206		{{0x9b, 0xd6}, 0x1e},
207		{{0x9b, 0xdd}, 0x1c},
208
209		{{0x9b, 0x84}, 0x13},
210		{{0x99, 0x81}, 0x7f},
211		{{0x99, 0x31}, 0x70},
212
213		{{0x98, 0x00}, 0x3f},
214
215		{{0x9f, 0x09}, 0x00},
216
217		{{0x9f, 0x0a}, 0x05},
218
219		{{0x9e, 0xd1}, 0xa1},
220		{{0x99, 0x23}, 0x00},
221
222		{{0x9e, 0x74}, 0x80},
223
224		{{0x9f, 0x28}, 0x10},
225
226		{{0x9f, 0x35}, 0x14},
227
228		{{0x9f, 0x36}, 0x60},
229
230		{{0x9c, 0x31}, 0x00},
231
232		{{0x9c, 0x32}, 0xc8},
233
234		{{0x9c, 0x19}, 0x40},
235
236		{{0x9c, 0x1a}, 0x40},
237
238		{{0x9c, 0x0c}, 0x00},
239
240		{{0x9c, 0x0d}, 0x00},
241
242		{{0x9c, 0x12}, 0x00},
243
244		{{0x9c, 0x13}, 0x00},
245
246		{{0x98, 0xa2}, 0x0e},
247
248		{{0x98, 0x93}, 0x40},
249
250		{{0x98, 0x7d}, 0x02},
251		{{0x98, 0x7e}, 0x00},
252		{{0x9f, 0xc8}, 0x01},
253	};
254	struct hw_config *p = hw_config;
255	int count = ARRAY_SIZE(hw_config);
256	struct sk_buff *res_skb;
257	u8 param[4];
258	int r;
259
260	param[0] = 0;
261	while (count--) {
262		param[1] = p->adr[0];
263		param[2] = p->adr[1];
264		param[3] = p->value;
265
266		r = nfc_hci_send_cmd(hdev, PN544_SYS_MGMT_GATE, PN544_WRITE,
267				     param, 4, &res_skb);
268		if (r < 0)
269			return r;
270
271		if (res_skb->len != 1) {
272			kfree_skb(res_skb);
273			return -EPROTO;
274		}
275
276		if (res_skb->data[0] != p->value) {
277			kfree_skb(res_skb);
278			return -EIO;
279		}
280
281		kfree_skb(res_skb);
282
283		p++;
284	}
285
286	param[0] = NFC_HCI_UICC_HOST_ID;
287	r = nfc_hci_set_param(hdev, NFC_HCI_ADMIN_GATE,
288			      NFC_HCI_ADMIN_WHITELIST, param, 1);
289	if (r < 0)
290		return r;
291
292	param[0] = 0x3d;
293	r = nfc_hci_set_param(hdev, PN544_SYS_MGMT_GATE,
294			      PN544_SYS_MGMT_INFO_NOTIFICATION, param, 1);
295	if (r < 0)
296		return r;
297
298	param[0] = 0x0;
299	r = nfc_hci_set_param(hdev, NFC_HCI_RF_READER_A_GATE,
300			      PN544_RF_READER_A_AUTO_ACTIVATION, param, 1);
301	if (r < 0)
302		return r;
303
304	r = nfc_hci_send_event(hdev, NFC_HCI_RF_READER_A_GATE,
305			       NFC_HCI_EVT_END_OPERATION, NULL, 0);
306	if (r < 0)
307		return r;
308
309	param[0] = 0x1;
310	r = nfc_hci_set_param(hdev, PN544_POLLING_LOOP_MGMT_GATE,
311			      PN544_PL_NFCT_DEACTIVATED, param, 1);
312	if (r < 0)
313		return r;
314
315	param[0] = 0x0;
316	r = nfc_hci_set_param(hdev, PN544_POLLING_LOOP_MGMT_GATE,
317			      PN544_PL_RDPHASES, param, 1);
318	if (r < 0)
319		return r;
320
321	r = nfc_hci_get_param(hdev, NFC_HCI_ID_MGMT_GATE,
322			      PN544_ID_MGMT_FULL_VERSION_SW, &skb);
323	if (r < 0)
324		return r;
325
326	if (skb->len != FULL_VERSION_LEN) {
327		kfree_skb(skb);
328		return -EINVAL;
329	}
330
331	print_hex_dump(KERN_DEBUG, "FULL VERSION SOFTWARE INFO: ",
332		       DUMP_PREFIX_NONE, 16, 1,
333		       skb->data, FULL_VERSION_LEN, false);
334
335	kfree_skb(skb);
336
337	return 0;
338}
339
340static int pn544_hci_xmit(struct nfc_hci_dev *hdev, struct sk_buff *skb)
341{
342	struct pn544_hci_info *info = nfc_hci_get_clientdata(hdev);
343
344	return info->phy_ops->write(info->phy_id, skb);
345}
346
347static int pn544_hci_start_poll(struct nfc_hci_dev *hdev,
348				u32 im_protocols, u32 tm_protocols)
349{
350	u8 phases = 0;
351	int r;
352	u8 duration[2];
353	u8 activated;
354	u8 i_mode = 0x3f; /* Enable all supported modes */
355	u8 t_mode = 0x0f;
356	u8 t_merge = 0x01; /* Enable merge by default */
357
358	pr_info(DRIVER_DESC ": %s protocols 0x%x 0x%x\n",
359		__func__, im_protocols, tm_protocols);
360
361	r = nfc_hci_send_event(hdev, NFC_HCI_RF_READER_A_GATE,
362			       NFC_HCI_EVT_END_OPERATION, NULL, 0);
363	if (r < 0)
364		return r;
365
366	duration[0] = 0x18;
367	duration[1] = 0x6a;
368	r = nfc_hci_set_param(hdev, PN544_POLLING_LOOP_MGMT_GATE,
369			      PN544_PL_EMULATION, duration, 2);
370	if (r < 0)
371		return r;
372
373	activated = 0;
374	r = nfc_hci_set_param(hdev, PN544_POLLING_LOOP_MGMT_GATE,
375			      PN544_PL_NFCT_DEACTIVATED, &activated, 1);
376	if (r < 0)
377		return r;
378
379	if (im_protocols & (NFC_PROTO_ISO14443_MASK | NFC_PROTO_MIFARE_MASK |
380			 NFC_PROTO_JEWEL_MASK))
381		phases |= 1;		/* Type A */
382	if (im_protocols & NFC_PROTO_FELICA_MASK) {
383		phases |= (1 << 2);	/* Type F 212 */
384		phases |= (1 << 3);	/* Type F 424 */
385	}
386
387	phases |= (1 << 5);		/* NFC active */
388
389	r = nfc_hci_set_param(hdev, PN544_POLLING_LOOP_MGMT_GATE,
390			      PN544_PL_RDPHASES, &phases, 1);
391	if (r < 0)
392		return r;
393
394	if ((im_protocols | tm_protocols) & NFC_PROTO_NFC_DEP_MASK) {
395		hdev->gb = nfc_get_local_general_bytes(hdev->ndev,
396							&hdev->gb_len);
397		pr_debug("generate local bytes %p", hdev->gb);
398		if (hdev->gb == NULL || hdev->gb_len == 0) {
399			im_protocols &= ~NFC_PROTO_NFC_DEP_MASK;
400			tm_protocols &= ~NFC_PROTO_NFC_DEP_MASK;
401		}
402	}
403
404	if (im_protocols & NFC_PROTO_NFC_DEP_MASK) {
405		r = nfc_hci_send_event(hdev,
406				PN544_RF_READER_NFCIP1_INITIATOR_GATE,
407				NFC_HCI_EVT_END_OPERATION, NULL, 0);
408		if (r < 0)
409			return r;
410
411		r = nfc_hci_set_param(hdev,
412				PN544_RF_READER_NFCIP1_INITIATOR_GATE,
413				PN544_DEP_MODE, &i_mode, 1);
414		if (r < 0)
415			return r;
416
417		r = nfc_hci_set_param(hdev,
418				PN544_RF_READER_NFCIP1_INITIATOR_GATE,
419				PN544_DEP_ATR_REQ, hdev->gb, hdev->gb_len);
420		if (r < 0)
421			return r;
422
423		r = nfc_hci_send_event(hdev,
424				PN544_RF_READER_NFCIP1_INITIATOR_GATE,
425				NFC_HCI_EVT_READER_REQUESTED, NULL, 0);
426		if (r < 0)
427			nfc_hci_send_event(hdev,
428					PN544_RF_READER_NFCIP1_INITIATOR_GATE,
429					NFC_HCI_EVT_END_OPERATION, NULL, 0);
430	}
431
432	if (tm_protocols & NFC_PROTO_NFC_DEP_MASK) {
433		r = nfc_hci_set_param(hdev, PN544_RF_READER_NFCIP1_TARGET_GATE,
434				PN544_DEP_MODE, &t_mode, 1);
435		if (r < 0)
436			return r;
437
438		r = nfc_hci_set_param(hdev, PN544_RF_READER_NFCIP1_TARGET_GATE,
439				PN544_DEP_ATR_RES, hdev->gb, hdev->gb_len);
440		if (r < 0)
441			return r;
442
443		r = nfc_hci_set_param(hdev, PN544_RF_READER_NFCIP1_TARGET_GATE,
444				PN544_DEP_MERGE, &t_merge, 1);
445		if (r < 0)
446			return r;
447	}
448
449	r = nfc_hci_send_event(hdev, NFC_HCI_RF_READER_A_GATE,
450			       NFC_HCI_EVT_READER_REQUESTED, NULL, 0);
451	if (r < 0)
452		nfc_hci_send_event(hdev, NFC_HCI_RF_READER_A_GATE,
453				   NFC_HCI_EVT_END_OPERATION, NULL, 0);
454
455	return r;
456}
457
458static int pn544_hci_dep_link_up(struct nfc_hci_dev *hdev,
459				struct nfc_target *target, u8 comm_mode,
460				u8 *gb, size_t gb_len)
461{
462	struct sk_buff *rgb_skb = NULL;
463	int r;
464
465	r = nfc_hci_get_param(hdev, target->hci_reader_gate,
466				PN544_DEP_ATR_RES, &rgb_skb);
467	if (r < 0)
468		return r;
469
470	if (rgb_skb->len == 0 || rgb_skb->len > NFC_GB_MAXSIZE) {
471		r = -EPROTO;
472		goto exit;
473	}
474	print_hex_dump(KERN_DEBUG, "remote gb: ", DUMP_PREFIX_OFFSET,
475			16, 1, rgb_skb->data, rgb_skb->len, true);
476
477	r = nfc_set_remote_general_bytes(hdev->ndev, rgb_skb->data,
478						rgb_skb->len);
479
480	if (r == 0)
481		r = nfc_dep_link_is_up(hdev->ndev, target->idx, comm_mode,
482					NFC_RF_INITIATOR);
483exit:
484	kfree_skb(rgb_skb);
485	return r;
486}
487
488static int pn544_hci_dep_link_down(struct nfc_hci_dev *hdev)
489{
490
491	return nfc_hci_send_event(hdev, PN544_RF_READER_NFCIP1_INITIATOR_GATE,
492					NFC_HCI_EVT_END_OPERATION, NULL, 0);
493}
494
495static int pn544_hci_target_from_gate(struct nfc_hci_dev *hdev, u8 gate,
496				      struct nfc_target *target)
497{
498	switch (gate) {
499	case PN544_RF_READER_F_GATE:
500		target->supported_protocols = NFC_PROTO_FELICA_MASK;
501		break;
502	case PN544_RF_READER_JEWEL_GATE:
503		target->supported_protocols = NFC_PROTO_JEWEL_MASK;
504		target->sens_res = 0x0c00;
505		break;
506	case PN544_RF_READER_NFCIP1_INITIATOR_GATE:
507		target->supported_protocols = NFC_PROTO_NFC_DEP_MASK;
508		break;
509	default:
510		return -EPROTO;
511	}
512
513	return 0;
514}
515
516static int pn544_hci_complete_target_discovered(struct nfc_hci_dev *hdev,
517						u8 gate,
518						struct nfc_target *target)
519{
520	struct sk_buff *uid_skb;
521	int r = 0;
522
523	if (gate == PN544_RF_READER_NFCIP1_INITIATOR_GATE)
524		return r;
525
526	if (target->supported_protocols & NFC_PROTO_NFC_DEP_MASK) {
527		r = nfc_hci_send_cmd(hdev,
528			PN544_RF_READER_NFCIP1_INITIATOR_GATE,
529			PN544_HCI_CMD_CONTINUE_ACTIVATION, NULL, 0, NULL);
530		if (r < 0)
531			return r;
532
533		target->hci_reader_gate = PN544_RF_READER_NFCIP1_INITIATOR_GATE;
534	} else if (target->supported_protocols & NFC_PROTO_MIFARE_MASK) {
535		if (target->nfcid1_len != 4 && target->nfcid1_len != 7 &&
536		    target->nfcid1_len != 10)
537			return -EPROTO;
538
539		r = nfc_hci_send_cmd(hdev, NFC_HCI_RF_READER_A_GATE,
540				     PN544_RF_READER_CMD_ACTIVATE_NEXT,
541				     target->nfcid1, target->nfcid1_len, NULL);
542	} else if (target->supported_protocols & NFC_PROTO_FELICA_MASK) {
543		r = nfc_hci_get_param(hdev, PN544_RF_READER_F_GATE,
544				      PN544_FELICA_ID, &uid_skb);
545		if (r < 0)
546			return r;
547
548		if (uid_skb->len != 8) {
549			kfree_skb(uid_skb);
550			return -EPROTO;
551		}
552
553		/* Type F NFC-DEP IDm has prefix 0x01FE */
554		if ((uid_skb->data[0] == 0x01) && (uid_skb->data[1] == 0xfe)) {
555			kfree_skb(uid_skb);
556			r = nfc_hci_send_cmd(hdev,
557					PN544_RF_READER_NFCIP1_INITIATOR_GATE,
558					PN544_HCI_CMD_CONTINUE_ACTIVATION,
559					NULL, 0, NULL);
560			if (r < 0)
561				return r;
562
563			target->supported_protocols = NFC_PROTO_NFC_DEP_MASK;
564			target->hci_reader_gate =
565				PN544_RF_READER_NFCIP1_INITIATOR_GATE;
566		} else {
567			r = nfc_hci_send_cmd(hdev, PN544_RF_READER_F_GATE,
568					     PN544_RF_READER_CMD_ACTIVATE_NEXT,
569					     uid_skb->data, uid_skb->len, NULL);
570			kfree_skb(uid_skb);
571		}
572	} else if (target->supported_protocols & NFC_PROTO_ISO14443_MASK) {
573		/*
574		 * TODO: maybe other ISO 14443 require some kind of continue
575		 * activation, but for now we've seen only this one below.
576		 */
577		if (target->sens_res == 0x4403)	/* Type 4 Mifare DESFire */
578			r = nfc_hci_send_cmd(hdev, NFC_HCI_RF_READER_A_GATE,
579			      PN544_RF_READER_A_CMD_CONTINUE_ACTIVATION,
580			      NULL, 0, NULL);
581	}
582
583	return r;
584}
585
586#define PN544_CB_TYPE_READER_F 1
587
588static void pn544_hci_data_exchange_cb(void *context, struct sk_buff *skb,
589				       int err)
590{
591	struct pn544_hci_info *info = context;
592
593	switch (info->async_cb_type) {
594	case PN544_CB_TYPE_READER_F:
595		if (err == 0)
596			skb_pull(skb, 1);
597		info->async_cb(info->async_cb_context, skb, err);
598		break;
599	default:
600		if (err == 0)
601			kfree_skb(skb);
602		break;
603	}
604}
605
606#define MIFARE_CMD_AUTH_KEY_A	0x60
607#define MIFARE_CMD_AUTH_KEY_B	0x61
608#define MIFARE_CMD_HEADER	2
609#define MIFARE_UID_LEN		4
610#define MIFARE_KEY_LEN		6
611#define MIFARE_CMD_LEN		12
612/*
613 * Returns:
614 * <= 0: driver handled the data exchange
615 *    1: driver doesn't especially handle, please do standard processing
616 */
617static int pn544_hci_im_transceive(struct nfc_hci_dev *hdev,
618				   struct nfc_target *target,
619				   struct sk_buff *skb, data_exchange_cb_t cb,
620				   void *cb_context)
621{
622	struct pn544_hci_info *info = nfc_hci_get_clientdata(hdev);
623
624	pr_info(DRIVER_DESC ": %s for gate=%d\n", __func__,
625		target->hci_reader_gate);
626
627	switch (target->hci_reader_gate) {
628	case NFC_HCI_RF_READER_A_GATE:
629		if (target->supported_protocols & NFC_PROTO_MIFARE_MASK) {
630			/*
631			 * It seems that pn544 is inverting key and UID for
632			 * MIFARE authentication commands.
633			 */
634			if (skb->len == MIFARE_CMD_LEN &&
635			    (skb->data[0] == MIFARE_CMD_AUTH_KEY_A ||
636			     skb->data[0] == MIFARE_CMD_AUTH_KEY_B)) {
637				u8 uid[MIFARE_UID_LEN];
638				u8 *data = skb->data + MIFARE_CMD_HEADER;
639
640				memcpy(uid, data + MIFARE_KEY_LEN,
641				       MIFARE_UID_LEN);
642				memmove(data + MIFARE_UID_LEN, data,
643					MIFARE_KEY_LEN);
644				memcpy(data, uid, MIFARE_UID_LEN);
645			}
646
647			return nfc_hci_send_cmd_async(hdev,
648						      target->hci_reader_gate,
649						      PN544_MIFARE_CMD,
650						      skb->data, skb->len,
651						      cb, cb_context);
652		} else
653			return 1;
654	case PN544_RF_READER_F_GATE:
655		*skb_push(skb, 1) = 0;
656		*skb_push(skb, 1) = 0;
657
658		info->async_cb_type = PN544_CB_TYPE_READER_F;
659		info->async_cb = cb;
660		info->async_cb_context = cb_context;
661
662		return nfc_hci_send_cmd_async(hdev, target->hci_reader_gate,
663					      PN544_FELICA_RAW, skb->data,
664					      skb->len,
665					      pn544_hci_data_exchange_cb, info);
666	case PN544_RF_READER_JEWEL_GATE:
667		return nfc_hci_send_cmd_async(hdev, target->hci_reader_gate,
668					      PN544_JEWEL_RAW_CMD, skb->data,
669					      skb->len, cb, cb_context);
670	case PN544_RF_READER_NFCIP1_INITIATOR_GATE:
671		*skb_push(skb, 1) = 0;
672
673		return nfc_hci_send_event(hdev, target->hci_reader_gate,
674					PN544_HCI_EVT_SND_DATA, skb->data,
675					skb->len);
676	default:
677		return 1;
678	}
679}
680
681static int pn544_hci_tm_send(struct nfc_hci_dev *hdev, struct sk_buff *skb)
682{
683	int r;
684
685	/* Set default false for multiple information chaining */
686	*skb_push(skb, 1) = 0;
687
688	r = nfc_hci_send_event(hdev, PN544_RF_READER_NFCIP1_TARGET_GATE,
689			       PN544_HCI_EVT_SND_DATA, skb->data, skb->len);
690
691	kfree_skb(skb);
692
693	return r;
694}
695
696static int pn544_hci_check_presence(struct nfc_hci_dev *hdev,
697				   struct nfc_target *target)
698{
699	pr_debug("supported protocol %d", target->supported_protocols);
700	if (target->supported_protocols & (NFC_PROTO_ISO14443_MASK |
701					NFC_PROTO_ISO14443_B_MASK)) {
702		return nfc_hci_send_cmd(hdev, target->hci_reader_gate,
703					PN544_RF_READER_CMD_PRESENCE_CHECK,
704					NULL, 0, NULL);
705	} else if (target->supported_protocols & NFC_PROTO_MIFARE_MASK) {
706		if (target->nfcid1_len != 4 && target->nfcid1_len != 7 &&
707		    target->nfcid1_len != 10)
708			return -EOPNOTSUPP;
709
710		 return nfc_hci_send_cmd(hdev, NFC_HCI_RF_READER_A_GATE,
711				     PN544_RF_READER_CMD_ACTIVATE_NEXT,
712				     target->nfcid1, target->nfcid1_len, NULL);
713	} else if (target->supported_protocols & (NFC_PROTO_JEWEL_MASK |
714						NFC_PROTO_FELICA_MASK)) {
715		return -EOPNOTSUPP;
716	} else if (target->supported_protocols & NFC_PROTO_NFC_DEP_MASK) {
717		return nfc_hci_send_cmd(hdev, target->hci_reader_gate,
718					PN544_HCI_CMD_ATTREQUEST,
719					NULL, 0, NULL);
720	}
721
722	return 0;
723}
724
725/*
726 * Returns:
727 * <= 0: driver handled the event, skb consumed
728 *    1: driver does not handle the event, please do standard processing
729 */
730static int pn544_hci_event_received(struct nfc_hci_dev *hdev, u8 gate, u8 event,
731				    struct sk_buff *skb)
732{
733	struct sk_buff *rgb_skb = NULL;
734	int r;
735
736	pr_debug("hci event %d", event);
737	switch (event) {
738	case PN544_HCI_EVT_ACTIVATED:
739		if (gate == PN544_RF_READER_NFCIP1_INITIATOR_GATE) {
740			r = nfc_hci_target_discovered(hdev, gate);
741		} else if (gate == PN544_RF_READER_NFCIP1_TARGET_GATE) {
742			r = nfc_hci_get_param(hdev, gate, PN544_DEP_ATR_REQ,
743					      &rgb_skb);
744			if (r < 0)
745				goto exit;
746
747			r = nfc_tm_activated(hdev->ndev, NFC_PROTO_NFC_DEP_MASK,
748					     NFC_COMM_PASSIVE, rgb_skb->data,
749					     rgb_skb->len);
750
751			kfree_skb(rgb_skb);
752		} else {
753			r = -EINVAL;
754		}
755		break;
756	case PN544_HCI_EVT_DEACTIVATED:
757		r = nfc_hci_send_event(hdev, gate, NFC_HCI_EVT_END_OPERATION,
758				       NULL, 0);
759		break;
760	case PN544_HCI_EVT_RCV_DATA:
761		if (skb->len < 2) {
762			r = -EPROTO;
763			goto exit;
764		}
765
766		if (skb->data[0] != 0) {
767			pr_debug("data0 %d", skb->data[0]);
768			r = -EPROTO;
769			goto exit;
770		}
771
772		skb_pull(skb, 2);
773		return nfc_tm_data_received(hdev->ndev, skb);
774	default:
775		return 1;
776	}
777
778exit:
779	kfree_skb(skb);
780
781	return r;
782}
783
784static int pn544_hci_fw_download(struct nfc_hci_dev *hdev,
785				 const char *firmware_name)
786{
787	struct pn544_hci_info *info = nfc_hci_get_clientdata(hdev);
788
789	if (info->fw_download == NULL)
790		return -ENOTSUPP;
791
792	return info->fw_download(info->phy_id, firmware_name);
793}
794
795static struct nfc_hci_ops pn544_hci_ops = {
796	.open = pn544_hci_open,
797	.close = pn544_hci_close,
798	.hci_ready = pn544_hci_ready,
799	.xmit = pn544_hci_xmit,
800	.start_poll = pn544_hci_start_poll,
801	.dep_link_up = pn544_hci_dep_link_up,
802	.dep_link_down = pn544_hci_dep_link_down,
803	.target_from_gate = pn544_hci_target_from_gate,
804	.complete_target_discovered = pn544_hci_complete_target_discovered,
805	.im_transceive = pn544_hci_im_transceive,
806	.tm_send = pn544_hci_tm_send,
807	.check_presence = pn544_hci_check_presence,
808	.event_received = pn544_hci_event_received,
809	.fw_download = pn544_hci_fw_download,
810};
811
812int pn544_hci_probe(void *phy_id, struct nfc_phy_ops *phy_ops, char *llc_name,
813		    int phy_headroom, int phy_tailroom, int phy_payload,
814		    fw_download_t fw_download, struct nfc_hci_dev **hdev)
815{
816	struct pn544_hci_info *info;
817	u32 protocols;
818	struct nfc_hci_init_data init_data;
819	int r;
820
821	info = kzalloc(sizeof(struct pn544_hci_info), GFP_KERNEL);
822	if (!info) {
823		pr_err("Cannot allocate memory for pn544_hci_info.\n");
824		r = -ENOMEM;
825		goto err_info_alloc;
826	}
827
828	info->phy_ops = phy_ops;
829	info->phy_id = phy_id;
830	info->fw_download = fw_download;
831	info->state = PN544_ST_COLD;
832	mutex_init(&info->info_lock);
833
834	init_data.gate_count = ARRAY_SIZE(pn544_gates);
835
836	memcpy(init_data.gates, pn544_gates, sizeof(pn544_gates));
837
838	/*
839	 * TODO: Session id must include the driver name + some bus addr
840	 * persistent info to discriminate 2 identical chips
841	 */
842	strcpy(init_data.session_id, "ID544HCI");
843
844	protocols = NFC_PROTO_JEWEL_MASK |
845		    NFC_PROTO_MIFARE_MASK |
846		    NFC_PROTO_FELICA_MASK |
847		    NFC_PROTO_ISO14443_MASK |
848		    NFC_PROTO_ISO14443_B_MASK |
849		    NFC_PROTO_NFC_DEP_MASK;
850
851	info->hdev = nfc_hci_allocate_device(&pn544_hci_ops, &init_data, 0,
852					     protocols, llc_name,
853					     phy_headroom + PN544_CMDS_HEADROOM,
854					     phy_tailroom, phy_payload);
855	if (!info->hdev) {
856		pr_err("Cannot allocate nfc hdev.\n");
857		r = -ENOMEM;
858		goto err_alloc_hdev;
859	}
860
861	nfc_hci_set_clientdata(info->hdev, info);
862
863	r = nfc_hci_register_device(info->hdev);
864	if (r)
865		goto err_regdev;
866
867	*hdev = info->hdev;
868
869	return 0;
870
871err_regdev:
872	nfc_hci_free_device(info->hdev);
873
874err_alloc_hdev:
875	kfree(info);
876
877err_info_alloc:
878	return r;
879}
880EXPORT_SYMBOL(pn544_hci_probe);
881
882void pn544_hci_remove(struct nfc_hci_dev *hdev)
883{
884	struct pn544_hci_info *info = nfc_hci_get_clientdata(hdev);
885
886	nfc_hci_unregister_device(hdev);
887	nfc_hci_free_device(hdev);
888	kfree(info);
889}
890EXPORT_SYMBOL(pn544_hci_remove);
891
892MODULE_LICENSE("GPL");
893MODULE_DESCRIPTION(DRIVER_DESC);
894