drivers/nfc/pn533/usb.c

   1 // SPDX-License-Identifier: GPL-2.0-or-later
   2 /*
   3  * Driver for NXP PN533 NFC Chip - USB transport layer
   4  *
   5  * Copyright (C) 2011 Instituto Nokia de Tecnologia
   6  * Copyright (C) 2012-2013 Tieto Poland
   7  */
   8
   9 #include <linux/device.h>
  10 #include <linux/kernel.h>
  11 #include <linux/module.h>
  12 #include <linux/slab.h>
  13 #include <linux/usb.h>
  14 #include <linux/nfc.h>
  15 #include <linux/netdevice.h>
  16 #include <net/nfc/nfc.h>
  17 #include "pn533.h"
  18
  19 #define VERSION "0.1"
  20
  21 #define PN533_VENDOR_ID 0x4CC
  22 #define PN533_PRODUCT_ID 0x2533
  23
  24 #define SCM_VENDOR_ID 0x4E6
  25 #define SCL3711_PRODUCT_ID 0x5591
  26
  27 #define SONY_VENDOR_ID         0x054c
  28 #define PASORI_PRODUCT_ID      0x02e1
  29
  30 #define ACS_VENDOR_ID 0x072f
  31 #define ACR122U_PRODUCT_ID 0x2200
  32
  33 static const struct usb_device_id pn533_usb_table[] = {
  34         { USB_DEVICE(PN533_VENDOR_ID, PN533_PRODUCT_ID),
  35           .driver_info = PN533_DEVICE_STD },
  36         { USB_DEVICE(SCM_VENDOR_ID, SCL3711_PRODUCT_ID),
  37           .driver_info = PN533_DEVICE_STD },
  38         { USB_DEVICE(SONY_VENDOR_ID, PASORI_PRODUCT_ID),
  39           .driver_info = PN533_DEVICE_PASORI },
  40         { USB_DEVICE(ACS_VENDOR_ID, ACR122U_PRODUCT_ID),
  41           .driver_info = PN533_DEVICE_ACR122U },
  42         { }
  43 };
  44 MODULE_DEVICE_TABLE(usb, pn533_usb_table);
  45
  46 struct pn533_usb_phy {
  47         struct usb_device *udev;
  48         struct usb_interface *interface;
  49
  50         struct urb *out_urb;
  51         struct urb *in_urb;
  52
  53         struct urb *ack_urb;
  54         u8 *ack_buffer;
  55
  56         struct pn533 *priv;
  57 };
  58
  59 static void pn533_recv_response(struct urb *urb)
  60 {
  61         struct pn533_usb_phy *phy = urb->context;
  62         struct sk_buff *skb = NULL;
  63
  64         if (!urb->status) {
  65                 skb = alloc_skb(urb->actual_length, GFP_ATOMIC);
  66                 if (!skb) {
  67                         nfc_err(&phy->udev->dev, "failed to alloc memory\n");
  68                 } else {
  69                         skb_put_data(skb, urb->transfer_buffer,
  70                                      urb->actual_length);
  71                 }
  72         }
  73
  74         pn533_recv_frame(phy->priv, skb, urb->status);
  75 }
  76
  77 static int pn533_submit_urb_for_response(struct pn533_usb_phy *phy, gfp_t flags)
  78 {
  79         phy->in_urb->complete = pn533_recv_response;
  80
  81         return usb_submit_urb(phy->in_urb, flags);
  82 }
  83
  84 static void pn533_recv_ack(struct urb *urb)
  85 {
  86         struct pn533_usb_phy *phy = urb->context;
  87         struct pn533 *priv = phy->priv;
  88         struct pn533_cmd *cmd = priv->cmd;
  89         struct pn533_std_frame *in_frame;
  90         int rc;
  91
  92         cmd->status = urb->status;
  93
  94         switch (urb->status) {
  95         case 0:
  96                 break; /* success */
  97         case -ECONNRESET:
  98         case -ENOENT:
  99                 dev_dbg(&phy->udev->dev,
 100                         "The urb has been stopped (status %d)\n",
 101                         urb->status);
 102                 goto sched_wq;
 103         case -ESHUTDOWN:
 104         default:
 105                 nfc_err(&phy->udev->dev,
 106                         "Urb failure (status %d)\n", urb->status);
 107                 goto sched_wq;
 108         }
 109
 110         in_frame = phy->in_urb->transfer_buffer;
 111
 112         if (!pn533_rx_frame_is_ack(in_frame)) {
 113                 nfc_err(&phy->udev->dev, "Received an invalid ack\n");
 114                 cmd->status = -EIO;
 115                 goto sched_wq;
 116         }
 117
 118         rc = pn533_submit_urb_for_response(phy, GFP_ATOMIC);
 119         if (rc) {
 120                 nfc_err(&phy->udev->dev,
 121                         "usb_submit_urb failed with result %d\n", rc);
 122                 cmd->status = rc;
 123                 goto sched_wq;
 124         }
 125
 126         return;
 127
 128 sched_wq:
 129         queue_work(priv->wq, &priv->cmd_complete_work);
 130 }
 131
 132 static int pn533_submit_urb_for_ack(struct pn533_usb_phy *phy, gfp_t flags)
 133 {
 134         phy->in_urb->complete = pn533_recv_ack;
 135
 136         return usb_submit_urb(phy->in_urb, flags);
 137 }
 138
 139 static int pn533_usb_send_ack(struct pn533 *dev, gfp_t flags)
 140 {
 141         struct pn533_usb_phy *phy = dev->phy;
 142         static const u8 ack[6] = {0x00, 0x00, 0xff, 0x00, 0xff, 0x00};
 143         /* spec 7.1.1.3:  Preamble, SoPC (2), ACK Code (2), Postamble */
 144
 145         if (!phy->ack_buffer) {
 146                 phy->ack_buffer = kmemdup(ack, sizeof(ack), flags);
 147                 if (!phy->ack_buffer)
 148                         return -ENOMEM;
 149         }
 150
 151         phy->ack_urb->transfer_buffer = phy->ack_buffer;
 152         phy->ack_urb->transfer_buffer_length = sizeof(ack);
 153         return usb_submit_urb(phy->ack_urb, flags);
 154 }
 155
 156 static int pn533_usb_send_frame(struct pn533 *dev,
 157                                 struct sk_buff *out)
 158 {
 159         struct pn533_usb_phy *phy = dev->phy;
 160         int rc;
 161
 162         if (phy->priv == NULL)
 163                 phy->priv = dev;
 164
 165         phy->out_urb->transfer_buffer = out->data;
 166         phy->out_urb->transfer_buffer_length = out->len;
 167
 168         print_hex_dump_debug("PN533 TX: ", DUMP_PREFIX_NONE, 16, 1,
 169                              out->data, out->len, false);
 170
 171         rc = usb_submit_urb(phy->out_urb, GFP_KERNEL);
 172         if (rc)
 173                 return rc;
 174
 175         if (dev->protocol_type == PN533_PROTO_REQ_RESP) {
 176                 /* request for response for sent packet directly */
 177                 rc = pn533_submit_urb_for_response(phy, GFP_KERNEL);
 178                 if (rc)
 179                         goto error;
 180         } else if (dev->protocol_type == PN533_PROTO_REQ_ACK_RESP) {
 181                 /* request for ACK if that's the case */
 182                 rc = pn533_submit_urb_for_ack(phy, GFP_KERNEL);
 183                 if (rc)
 184                         goto error;
 185         }
 186
 187         return 0;
 188
 189 error:
 190         usb_unlink_urb(phy->out_urb);
 191         return rc;
 192 }
 193
 194 static void pn533_usb_abort_cmd(struct pn533 *dev, gfp_t flags)
 195 {
 196         struct pn533_usb_phy *phy = dev->phy;
 197
 198         /* ACR122U does not support any command which aborts last
 199          * issued command i.e. as ACK for standard PN533. Additionally,
 200          * it behaves stange, sending broken or incorrect responses,
 201          * when we cancel urb before the chip will send response.
 202          */
 203         if (dev->device_type == PN533_DEVICE_ACR122U)
 204                 return;
 205
 206         /* An ack will cancel the last issued command */
 207         pn533_usb_send_ack(dev, flags);
 208
 209         /* cancel the urb request */
 210         usb_kill_urb(phy->in_urb);
 211 }
 212
 213 /* ACR122 specific structs and functions */
 214
 215 /* ACS ACR122 pn533 frame definitions */
 216 #define PN533_ACR122_TX_FRAME_HEADER_LEN (sizeof(struct pn533_acr122_tx_frame) \
 217                                           + 2)
 218 #define PN533_ACR122_TX_FRAME_TAIL_LEN 0
 219 #define PN533_ACR122_RX_FRAME_HEADER_LEN (sizeof(struct pn533_acr122_rx_frame) \
 220                                           + 2)
 221 #define PN533_ACR122_RX_FRAME_TAIL_LEN 2
 222 #define PN533_ACR122_FRAME_MAX_PAYLOAD_LEN PN533_STD_FRAME_MAX_PAYLOAD_LEN
 223
 224 /* CCID messages types */
 225 #define PN533_ACR122_PC_TO_RDR_ICCPOWERON 0x62
 226 #define PN533_ACR122_PC_TO_RDR_ESCAPE 0x6B
 227
 228 #define PN533_ACR122_RDR_TO_PC_ESCAPE 0x83
 229
 230
 231 struct pn533_acr122_ccid_hdr {
 232         u8 type;
 233         u32 datalen;
 234         u8 slot;
 235         u8 seq;
 236
 237         /*
 238          * 3 msg specific bytes or status, error and 1 specific
 239          * byte for reposnse msg
 240          */
 241         u8 params[3];
 242         u8 data[]; /* payload */
 243 } __packed;
 244
 245 struct pn533_acr122_apdu_hdr {
 246         u8 class;
 247         u8 ins;
 248         u8 p1;
 249         u8 p2;
 250 } __packed;
 251
 252 struct pn533_acr122_tx_frame {
 253         struct pn533_acr122_ccid_hdr ccid;
 254         struct pn533_acr122_apdu_hdr apdu;
 255         u8 datalen;
 256         u8 data[]; /* pn533 frame: TFI ... */
 257 } __packed;
 258
 259 struct pn533_acr122_rx_frame {
 260         struct pn533_acr122_ccid_hdr ccid;
 261         u8 data[]; /* pn533 frame : TFI ... */
 262 } __packed;
 263
 264 static void pn533_acr122_tx_frame_init(void *_frame, u8 cmd_code)
 265 {
 266         struct pn533_acr122_tx_frame *frame = _frame;
 267
 268         frame->ccid.type = PN533_ACR122_PC_TO_RDR_ESCAPE;
 269         /* sizeof(apdu_hdr) + sizeof(datalen) */
 270         frame->ccid.datalen = sizeof(frame->apdu) + 1;
 271         frame->ccid.slot = 0;
 272         frame->ccid.seq = 0;
 273         frame->ccid.params[0] = 0;
 274         frame->ccid.params[1] = 0;
 275         frame->ccid.params[2] = 0;
 276
 277         frame->data[0] = PN533_STD_FRAME_DIR_OUT;
 278         frame->data[1] = cmd_code;
 279         frame->datalen = 2;  /* data[0] + data[1] */
 280
 281         frame->apdu.class = 0xFF;
 282         frame->apdu.ins = 0;
 283         frame->apdu.p1 = 0;
 284         frame->apdu.p2 = 0;
 285 }
 286
 287 static void pn533_acr122_tx_frame_finish(void *_frame)
 288 {
 289         struct pn533_acr122_tx_frame *frame = _frame;
 290
 291         frame->ccid.datalen += frame->datalen;
 292 }
 293
 294 static void pn533_acr122_tx_update_payload_len(void *_frame, int len)
 295 {
 296         struct pn533_acr122_tx_frame *frame = _frame;
 297
 298         frame->datalen += len;
 299 }
 300
 301 static bool pn533_acr122_is_rx_frame_valid(void *_frame, struct pn533 *dev)
 302 {
 303         struct pn533_acr122_rx_frame *frame = _frame;
 304
 305         if (frame->ccid.type != 0x83)
 306                 return false;
 307
 308         if (!frame->ccid.datalen)
 309                 return false;
 310
 311         if (frame->data[frame->ccid.datalen - 2] == 0x63)
 312                 return false;
 313
 314         return true;
 315 }
 316
 317 static int pn533_acr122_rx_frame_size(void *frame)
 318 {
 319         struct pn533_acr122_rx_frame *f = frame;
 320
 321         /* f->ccid.datalen already includes tail length */
 322         return sizeof(struct pn533_acr122_rx_frame) + f->ccid.datalen;
 323 }
 324
 325 static u8 pn533_acr122_get_cmd_code(void *frame)
 326 {
 327         struct pn533_acr122_rx_frame *f = frame;
 328
 329         return PN533_FRAME_CMD(f);
 330 }
 331
 332 static struct pn533_frame_ops pn533_acr122_frame_ops = {
 333         .tx_frame_init = pn533_acr122_tx_frame_init,
 334         .tx_frame_finish = pn533_acr122_tx_frame_finish,
 335         .tx_update_payload_len = pn533_acr122_tx_update_payload_len,
 336         .tx_header_len = PN533_ACR122_TX_FRAME_HEADER_LEN,
 337         .tx_tail_len = PN533_ACR122_TX_FRAME_TAIL_LEN,
 338
 339         .rx_is_frame_valid = pn533_acr122_is_rx_frame_valid,
 340         .rx_header_len = PN533_ACR122_RX_FRAME_HEADER_LEN,
 341         .rx_tail_len = PN533_ACR122_RX_FRAME_TAIL_LEN,
 342         .rx_frame_size = pn533_acr122_rx_frame_size,
 343
 344         .max_payload_len = PN533_ACR122_FRAME_MAX_PAYLOAD_LEN,
 345         .get_cmd_code = pn533_acr122_get_cmd_code,
 346 };
 347
 348 struct pn533_acr122_poweron_rdr_arg {
 349         int rc;
 350         struct completion done;
 351 };
 352
 353 static void pn533_acr122_poweron_rdr_resp(struct urb *urb)
 354 {
 355         struct pn533_acr122_poweron_rdr_arg *arg = urb->context;
 356
 357         print_hex_dump_debug("ACR122 RX: ", DUMP_PREFIX_NONE, 16, 1,
 358                        urb->transfer_buffer, urb->transfer_buffer_length,
 359                        false);
 360
 361         arg->rc = urb->status;
 362         complete(&arg->done);
 363 }
 364
 365 static int pn533_acr122_poweron_rdr(struct pn533_usb_phy *phy)
 366 {
 367         /* Power on th reader (CCID cmd) */
 368         u8 cmd[10] = {PN533_ACR122_PC_TO_RDR_ICCPOWERON,
 369                       0, 0, 0, 0, 0, 0, 3, 0, 0};
 370         char *buffer;
 371         int transferred;
 372         int rc;
 373         void *cntx;
 374         struct pn533_acr122_poweron_rdr_arg arg;
 375
 376         buffer = kmemdup(cmd, sizeof(cmd), GFP_KERNEL);
 377         if (!buffer)
 378                 return -ENOMEM;
 379
 380         init_completion(&arg.done);
 381         cntx = phy->in_urb->context;  /* backup context */
 382
 383         phy->in_urb->complete = pn533_acr122_poweron_rdr_resp;
 384         phy->in_urb->context = &arg;
 385
 386         print_hex_dump_debug("ACR122 TX: ", DUMP_PREFIX_NONE, 16, 1,
 387                        cmd, sizeof(cmd), false);
 388
 389         rc = usb_bulk_msg(phy->udev, phy->out_urb->pipe, buffer, sizeof(cmd),
 390                           &transferred, 5000);
 391         kfree(buffer);
 392         if (rc || (transferred != sizeof(cmd))) {
 393                 nfc_err(&phy->udev->dev,
 394                         "Reader power on cmd error %d\n", rc);
 395                 return rc;
 396         }
 397
 398         rc =  usb_submit_urb(phy->in_urb, GFP_KERNEL);
 399         if (rc) {
 400                 nfc_err(&phy->udev->dev,
 401                         "Can't submit reader poweron cmd response %d\n", rc);
 402                 return rc;
 403         }
 404
 405         wait_for_completion(&arg.done);
 406         phy->in_urb->context = cntx; /* restore context */
 407
 408         return arg.rc;
 409 }
 410
 411 static void pn533_send_complete(struct urb *urb)
 412 {
 413         struct pn533_usb_phy *phy = urb->context;
 414
 415         switch (urb->status) {
 416         case 0:
 417                 break; /* success */
 418         case -ECONNRESET:
 419         case -ENOENT:
 420                 dev_dbg(&phy->udev->dev,
 421                         "The urb has been stopped (status %d)\n",
 422                         urb->status);
 423                 break;
 424         case -ESHUTDOWN:
 425         default:
 426                 nfc_err(&phy->udev->dev,
 427                         "Urb failure (status %d)\n",
 428                         urb->status);
 429         }
 430 }
 431
 432 static const struct pn533_phy_ops usb_phy_ops = {
 433         .send_frame = pn533_usb_send_frame,
 434         .send_ack = pn533_usb_send_ack,
 435         .abort_cmd = pn533_usb_abort_cmd,
 436 };
 437
 438 static int pn533_usb_probe(struct usb_interface *interface,
 439                         const struct usb_device_id *id)
 440 {
 441         struct pn533 *priv;
 442         struct pn533_usb_phy *phy;
 443         struct usb_host_interface *iface_desc;
 444         struct usb_endpoint_descriptor *endpoint;
 445         int in_endpoint = 0;
 446         int out_endpoint = 0;
 447         int rc = -ENOMEM;
 448         int i;
 449         u32 protocols;
 450         enum pn533_protocol_type protocol_type = PN533_PROTO_REQ_ACK_RESP;
 451         struct pn533_frame_ops *fops = NULL;
 452         unsigned char *in_buf;
 453         int in_buf_len = PN533_EXT_FRAME_HEADER_LEN +
 454                          PN533_STD_FRAME_MAX_PAYLOAD_LEN +
 455                          PN533_STD_FRAME_TAIL_LEN;
 456
 457         phy = devm_kzalloc(&interface->dev, sizeof(*phy), GFP_KERNEL);
 458         if (!phy)
 459                 return -ENOMEM;
 460
 461         in_buf = kzalloc(in_buf_len, GFP_KERNEL);
 462         if (!in_buf)
 463                 return -ENOMEM;
 464
 465         phy->udev = usb_get_dev(interface_to_usbdev(interface));
 466         phy->interface = interface;
 467
 468         iface_desc = interface->cur_altsetting;
 469         for (i = 0; i < iface_desc->desc.bNumEndpoints; ++i) {
 470                 endpoint = &iface_desc->endpoint[i].desc;
 471
 472                 if (!in_endpoint && usb_endpoint_is_bulk_in(endpoint))
 473                         in_endpoint = endpoint->bEndpointAddress;
 474
 475                 if (!out_endpoint && usb_endpoint_is_bulk_out(endpoint))
 476                         out_endpoint = endpoint->bEndpointAddress;
 477         }
 478
 479         if (!in_endpoint || !out_endpoint) {
 480                 nfc_err(&interface->dev,
 481                         "Could not find bulk-in or bulk-out endpoint\n");
 482                 rc = -ENODEV;
 483                 goto error;
 484         }
 485
 486         phy->in_urb = usb_alloc_urb(0, GFP_KERNEL);
 487         phy->out_urb = usb_alloc_urb(0, GFP_KERNEL);
 488         phy->ack_urb = usb_alloc_urb(0, GFP_KERNEL);
 489
 490         if (!phy->in_urb || !phy->out_urb || !phy->ack_urb)
 491                 goto error;
 492
 493         usb_fill_bulk_urb(phy->in_urb, phy->udev,
 494                           usb_rcvbulkpipe(phy->udev, in_endpoint),
 495                           in_buf, in_buf_len, NULL, phy);
 496
 497         usb_fill_bulk_urb(phy->out_urb, phy->udev,
 498                           usb_sndbulkpipe(phy->udev, out_endpoint),
 499                           NULL, 0, pn533_send_complete, phy);
 500         usb_fill_bulk_urb(phy->ack_urb, phy->udev,
 501                           usb_sndbulkpipe(phy->udev, out_endpoint),
 502                           NULL, 0, pn533_send_complete, phy);
 503
 504         switch (id->driver_info) {
 505         case PN533_DEVICE_STD:
 506                 protocols = PN533_ALL_PROTOCOLS;
 507                 break;
 508
 509         case PN533_DEVICE_PASORI:
 510                 protocols = PN533_NO_TYPE_B_PROTOCOLS;
 511                 break;
 512
 513         case PN533_DEVICE_ACR122U:
 514                 protocols = PN533_NO_TYPE_B_PROTOCOLS;
 515                 fops = &pn533_acr122_frame_ops;
 516                 protocol_type = PN533_PROTO_REQ_RESP;
 517
 518                 rc = pn533_acr122_poweron_rdr(phy);
 519                 if (rc < 0) {
 520                         nfc_err(&interface->dev,
 521                                 "Couldn't poweron the reader (error %d)\n", rc);
 522                         goto error;
 523                 }
 524                 break;
 525
 526         default:
 527                 nfc_err(&interface->dev, "Unknown device type %lu\n",
 528                         id->driver_info);
 529                 rc = -EINVAL;
 530                 goto error;
 531         }
 532
 533         priv = pn53x_common_init(id->driver_info, protocol_type,
 534                                         phy, &usb_phy_ops, fops,
 535                                         &phy->udev->dev);
 536
 537         if (IS_ERR(priv)) {
 538                 rc = PTR_ERR(priv);
 539                 goto error;
 540         }
 541
 542         phy->priv = priv;
 543
 544         rc = pn533_finalize_setup(priv);
 545         if (rc)
 546                 goto err_clean;
 547
 548         usb_set_intfdata(interface, phy);
 549         rc = pn53x_register_nfc(priv, protocols, &interface->dev);
 550         if (rc)
 551                 goto err_clean;
 552
 553         return 0;
 554
 555 err_clean:
 556         pn53x_common_clean(priv);
 557 error:
 558         usb_kill_urb(phy->in_urb);
 559         usb_kill_urb(phy->out_urb);
 560         usb_kill_urb(phy->ack_urb);
 561
 562         usb_free_urb(phy->in_urb);
 563         usb_free_urb(phy->out_urb);
 564         usb_free_urb(phy->ack_urb);
 565         usb_put_dev(phy->udev);
 566         kfree(in_buf);
 567         kfree(phy->ack_buffer);
 568
 569         return rc;
 570 }
 571
 572 static void pn533_usb_disconnect(struct usb_interface *interface)
 573 {
 574         struct pn533_usb_phy *phy = usb_get_intfdata(interface);
 575
 576         if (!phy)
 577                 return;
 578
 579         pn53x_unregister_nfc(phy->priv);
 580         pn53x_common_clean(phy->priv);
 581
 582         usb_set_intfdata(interface, NULL);
 583
 584         usb_kill_urb(phy->in_urb);
 585         usb_kill_urb(phy->out_urb);
 586         usb_kill_urb(phy->ack_urb);
 587
 588         kfree(phy->in_urb->transfer_buffer);
 589         usb_free_urb(phy->in_urb);
 590         usb_free_urb(phy->out_urb);
 591         usb_free_urb(phy->ack_urb);
 592         kfree(phy->ack_buffer);
 593
 594         nfc_info(&interface->dev, "NXP PN533 NFC device disconnected\n");
 595 }
 596
 597 static struct usb_driver pn533_usb_driver = {
 598         .name =         "pn533_usb",
 599         .probe =        pn533_usb_probe,
 600         .disconnect =   pn533_usb_disconnect,
 601         .id_table =     pn533_usb_table,
 602 };
 603
 604 module_usb_driver(pn533_usb_driver);
 605
 606 MODULE_AUTHOR("Lauro Ramos Venancio <lauro.venancio@openbossa.org>");
 607 MODULE_AUTHOR("Aloisio Almeida Jr <aloisio.almeida@openbossa.org>");
 608 MODULE_AUTHOR("Waldemar Rymarkiewicz <waldemar.rymarkiewicz@tieto.com>");
 609 MODULE_DESCRIPTION("PN533 USB driver ver " VERSION);
 610 MODULE_VERSION(VERSION);
 611 MODULE_LICENSE("GPL");