drivers/nfc/port100.c

   1 // SPDX-License-Identifier: GPL-2.0-only
   2 /*
   3  * Sony NFC Port-100 Series driver
   4  * Copyright (c) 2013, Intel Corporation.
   5  *
   6  * Partly based/Inspired by Stephen Tiedemann's nfcpy
   7  */
   8
   9 #include <linux/module.h>
  10 #include <linux/usb.h>
  11 #include <net/nfc/digital.h>
  12
  13 #define VERSION "0.1"
  14
  15 #define SONY_VENDOR_ID          0x054c
  16 #define RCS380S_PRODUCT_ID      0x06c1
  17 #define RCS380P_PRODUCT_ID      0x06c3
  18
  19 #define PORT100_PROTOCOLS (NFC_PROTO_JEWEL_MASK    | \
  20                            NFC_PROTO_MIFARE_MASK   | \
  21                            NFC_PROTO_FELICA_MASK   | \
  22                            NFC_PROTO_NFC_DEP_MASK  | \
  23                            NFC_PROTO_ISO14443_MASK | \
  24                            NFC_PROTO_ISO14443_B_MASK)
  25
  26 #define PORT100_CAPABILITIES (NFC_DIGITAL_DRV_CAPS_IN_CRC | \
  27                               NFC_DIGITAL_DRV_CAPS_TG_CRC)
  28
  29 /* Standard port100 frame definitions */
  30 #define PORT100_FRAME_HEADER_LEN (sizeof(struct port100_frame) \
  31                                   + 2) /* data[0] CC, data[1] SCC */
  32 #define PORT100_FRAME_TAIL_LEN 2 /* data[len] DCS, data[len + 1] postamble*/
  33
  34 #define PORT100_COMM_RF_HEAD_MAX_LEN (sizeof(struct port100_tg_comm_rf_cmd))
  35
  36 /*
  37  * Max extended frame payload len, excluding CC and SCC
  38  * which are already in PORT100_FRAME_HEADER_LEN.
  39  */
  40 #define PORT100_FRAME_MAX_PAYLOAD_LEN 1001
  41
  42 #define PORT100_FRAME_ACK_SIZE 6 /* Preamble (1), SoPC (2), ACK Code (2),
  43                                     Postamble (1) */
  44 static u8 ack_frame[PORT100_FRAME_ACK_SIZE] = {
  45         0x00, 0x00, 0xff, 0x00, 0xff, 0x00
  46 };
  47
  48 #define PORT100_FRAME_CHECKSUM(f) (f->data[le16_to_cpu(f->datalen)])
  49 #define PORT100_FRAME_POSTAMBLE(f) (f->data[le16_to_cpu(f->datalen) + 1])
  50
  51 /* start of frame */
  52 #define PORT100_FRAME_SOF       0x00FF
  53 #define PORT100_FRAME_EXT       0xFFFF
  54 #define PORT100_FRAME_ACK       0x00FF
  55
  56 /* Port-100 command: in or out */
  57 #define PORT100_FRAME_DIRECTION(f) (f->data[0]) /* CC */
  58 #define PORT100_FRAME_DIR_OUT 0xD6
  59 #define PORT100_FRAME_DIR_IN  0xD7
  60
  61 /* Port-100 sub-command */
  62 #define PORT100_FRAME_CMD(f) (f->data[1]) /* SCC */
  63
  64 #define PORT100_CMD_GET_FIRMWARE_VERSION 0x20
  65 #define PORT100_CMD_GET_COMMAND_TYPE     0x28
  66 #define PORT100_CMD_SET_COMMAND_TYPE     0x2A
  67
  68 #define PORT100_CMD_IN_SET_RF       0x00
  69 #define PORT100_CMD_IN_SET_PROTOCOL 0x02
  70 #define PORT100_CMD_IN_COMM_RF      0x04
  71
  72 #define PORT100_CMD_TG_SET_RF       0x40
  73 #define PORT100_CMD_TG_SET_PROTOCOL 0x42
  74 #define PORT100_CMD_TG_SET_RF_OFF   0x46
  75 #define PORT100_CMD_TG_COMM_RF      0x48
  76
  77 #define PORT100_CMD_SWITCH_RF       0x06
  78
  79 #define PORT100_CMD_RESPONSE(cmd) (cmd + 1)
  80
  81 #define PORT100_CMD_TYPE_IS_SUPPORTED(mask, cmd_type) \
  82         ((mask) & (0x01 << (cmd_type)))
  83 #define PORT100_CMD_TYPE_0      0
  84 #define PORT100_CMD_TYPE_1      1
  85
  86 #define PORT100_CMD_STATUS_OK      0x00
  87 #define PORT100_CMD_STATUS_TIMEOUT 0x80
  88
  89 #define PORT100_MDAA_TGT_HAS_BEEN_ACTIVATED_MASK 0x01
  90 #define PORT100_MDAA_TGT_WAS_ACTIVATED_MASK      0x02
  91
  92 struct port100;
  93
  94 typedef void (*port100_send_async_complete_t)(struct port100 *dev, void *arg,
  95                                               struct sk_buff *resp);
  96
  97 /*
  98  * Setting sets structure for in_set_rf command
  99  *
 100  * @in_*_set_number: Represent the entry indexes in the port-100 RF Base Table.
 101  *              This table contains multiple RF setting sets required for RF
 102  *              communication.
 103  *
 104  * @in_*_comm_type: Theses fields set the communication type to be used.
 105  */
 106 struct port100_in_rf_setting {
 107         u8 in_send_set_number;
 108         u8 in_send_comm_type;
 109         u8 in_recv_set_number;
 110         u8 in_recv_comm_type;
 111 } __packed;
 112
 113 #define PORT100_COMM_TYPE_IN_212F 0x01
 114 #define PORT100_COMM_TYPE_IN_424F 0x02
 115 #define PORT100_COMM_TYPE_IN_106A 0x03
 116 #define PORT100_COMM_TYPE_IN_106B 0x07
 117
 118 static const struct port100_in_rf_setting in_rf_settings[] = {
 119         [NFC_DIGITAL_RF_TECH_212F] = {
 120                 .in_send_set_number = 1,
 121                 .in_send_comm_type  = PORT100_COMM_TYPE_IN_212F,
 122                 .in_recv_set_number = 15,
 123                 .in_recv_comm_type  = PORT100_COMM_TYPE_IN_212F,
 124         },
 125         [NFC_DIGITAL_RF_TECH_424F] = {
 126                 .in_send_set_number = 1,
 127                 .in_send_comm_type  = PORT100_COMM_TYPE_IN_424F,
 128                 .in_recv_set_number = 15,
 129                 .in_recv_comm_type  = PORT100_COMM_TYPE_IN_424F,
 130         },
 131         [NFC_DIGITAL_RF_TECH_106A] = {
 132                 .in_send_set_number = 2,
 133                 .in_send_comm_type  = PORT100_COMM_TYPE_IN_106A,
 134                 .in_recv_set_number = 15,
 135                 .in_recv_comm_type  = PORT100_COMM_TYPE_IN_106A,
 136         },
 137         [NFC_DIGITAL_RF_TECH_106B] = {
 138                 .in_send_set_number = 3,
 139                 .in_send_comm_type  = PORT100_COMM_TYPE_IN_106B,
 140                 .in_recv_set_number = 15,
 141                 .in_recv_comm_type  = PORT100_COMM_TYPE_IN_106B,
 142         },
 143         /* Ensures the array has NFC_DIGITAL_RF_TECH_LAST elements */
 144         [NFC_DIGITAL_RF_TECH_LAST] = { 0 },
 145 };
 146
 147 /**
 148  * struct port100_tg_rf_setting - Setting sets structure for tg_set_rf command
 149  *
 150  * @tg_set_number: Represents the entry index in the port-100 RF Base Table.
 151  *                 This table contains multiple RF setting sets required for RF
 152  *                 communication. this field is used for both send and receive
 153  *                 settings.
 154  *
 155  * @tg_comm_type: Sets the communication type to be used to send and receive
 156  *                data.
 157  */
 158 struct port100_tg_rf_setting {
 159         u8 tg_set_number;
 160         u8 tg_comm_type;
 161 } __packed;
 162
 163 #define PORT100_COMM_TYPE_TG_106A 0x0B
 164 #define PORT100_COMM_TYPE_TG_212F 0x0C
 165 #define PORT100_COMM_TYPE_TG_424F 0x0D
 166
 167 static const struct port100_tg_rf_setting tg_rf_settings[] = {
 168         [NFC_DIGITAL_RF_TECH_106A] = {
 169                 .tg_set_number = 8,
 170                 .tg_comm_type = PORT100_COMM_TYPE_TG_106A,
 171         },
 172         [NFC_DIGITAL_RF_TECH_212F] = {
 173                 .tg_set_number = 8,
 174                 .tg_comm_type = PORT100_COMM_TYPE_TG_212F,
 175         },
 176         [NFC_DIGITAL_RF_TECH_424F] = {
 177                 .tg_set_number = 8,
 178                 .tg_comm_type = PORT100_COMM_TYPE_TG_424F,
 179         },
 180         /* Ensures the array has NFC_DIGITAL_RF_TECH_LAST elements */
 181         [NFC_DIGITAL_RF_TECH_LAST] = { 0 },
 182
 183 };
 184
 185 #define PORT100_IN_PROT_INITIAL_GUARD_TIME      0x00
 186 #define PORT100_IN_PROT_ADD_CRC                 0x01
 187 #define PORT100_IN_PROT_CHECK_CRC               0x02
 188 #define PORT100_IN_PROT_MULTI_CARD              0x03
 189 #define PORT100_IN_PROT_ADD_PARITY              0x04
 190 #define PORT100_IN_PROT_CHECK_PARITY            0x05
 191 #define PORT100_IN_PROT_BITWISE_AC_RECV_MODE    0x06
 192 #define PORT100_IN_PROT_VALID_BIT_NUMBER        0x07
 193 #define PORT100_IN_PROT_CRYPTO1                 0x08
 194 #define PORT100_IN_PROT_ADD_SOF                 0x09
 195 #define PORT100_IN_PROT_CHECK_SOF               0x0A
 196 #define PORT100_IN_PROT_ADD_EOF                 0x0B
 197 #define PORT100_IN_PROT_CHECK_EOF               0x0C
 198 #define PORT100_IN_PROT_DEAF_TIME               0x0E
 199 #define PORT100_IN_PROT_CRM                     0x0F
 200 #define PORT100_IN_PROT_CRM_MIN_LEN             0x10
 201 #define PORT100_IN_PROT_T1_TAG_FRAME            0x11
 202 #define PORT100_IN_PROT_RFCA                    0x12
 203 #define PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR 0x13
 204 #define PORT100_IN_PROT_END                     0x14
 205
 206 #define PORT100_IN_MAX_NUM_PROTOCOLS            19
 207
 208 #define PORT100_TG_PROT_TU           0x00
 209 #define PORT100_TG_PROT_RF_OFF       0x01
 210 #define PORT100_TG_PROT_CRM          0x02
 211 #define PORT100_TG_PROT_END          0x03
 212
 213 #define PORT100_TG_MAX_NUM_PROTOCOLS 3
 214
 215 struct port100_protocol {
 216         u8 number;
 217         u8 value;
 218 } __packed;
 219
 220 static const struct port100_protocol
 221 in_protocols[][PORT100_IN_MAX_NUM_PROTOCOLS + 1] = {
 222         [NFC_DIGITAL_FRAMING_NFCA_SHORT] = {
 223                 { PORT100_IN_PROT_INITIAL_GUARD_TIME,      6 },
 224                 { PORT100_IN_PROT_ADD_CRC,                 0 },
 225                 { PORT100_IN_PROT_CHECK_CRC,               0 },
 226                 { PORT100_IN_PROT_MULTI_CARD,              0 },
 227                 { PORT100_IN_PROT_ADD_PARITY,              0 },
 228                 { PORT100_IN_PROT_CHECK_PARITY,            1 },
 229                 { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
 230                 { PORT100_IN_PROT_VALID_BIT_NUMBER,        7 },
 231                 { PORT100_IN_PROT_CRYPTO1,                 0 },
 232                 { PORT100_IN_PROT_ADD_SOF,                 0 },
 233                 { PORT100_IN_PROT_CHECK_SOF,               0 },
 234                 { PORT100_IN_PROT_ADD_EOF,                 0 },
 235                 { PORT100_IN_PROT_CHECK_EOF,               0 },
 236                 { PORT100_IN_PROT_DEAF_TIME,               4 },
 237                 { PORT100_IN_PROT_CRM,                     0 },
 238                 { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
 239                 { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
 240                 { PORT100_IN_PROT_RFCA,                    0 },
 241                 { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
 242                 { PORT100_IN_PROT_END,                     0 },
 243         },
 244         [NFC_DIGITAL_FRAMING_NFCA_STANDARD] = {
 245                 { PORT100_IN_PROT_INITIAL_GUARD_TIME,      6 },
 246                 { PORT100_IN_PROT_ADD_CRC,                 0 },
 247                 { PORT100_IN_PROT_CHECK_CRC,               0 },
 248                 { PORT100_IN_PROT_MULTI_CARD,              0 },
 249                 { PORT100_IN_PROT_ADD_PARITY,              1 },
 250                 { PORT100_IN_PROT_CHECK_PARITY,            1 },
 251                 { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
 252                 { PORT100_IN_PROT_VALID_BIT_NUMBER,        8 },
 253                 { PORT100_IN_PROT_CRYPTO1,                 0 },
 254                 { PORT100_IN_PROT_ADD_SOF,                 0 },
 255                 { PORT100_IN_PROT_CHECK_SOF,               0 },
 256                 { PORT100_IN_PROT_ADD_EOF,                 0 },
 257                 { PORT100_IN_PROT_CHECK_EOF,               0 },
 258                 { PORT100_IN_PROT_DEAF_TIME,               4 },
 259                 { PORT100_IN_PROT_CRM,                     0 },
 260                 { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
 261                 { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
 262                 { PORT100_IN_PROT_RFCA,                    0 },
 263                 { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
 264                 { PORT100_IN_PROT_END,                     0 },
 265         },
 266         [NFC_DIGITAL_FRAMING_NFCA_STANDARD_WITH_CRC_A] = {
 267                 { PORT100_IN_PROT_INITIAL_GUARD_TIME,      6 },
 268                 { PORT100_IN_PROT_ADD_CRC,                 1 },
 269                 { PORT100_IN_PROT_CHECK_CRC,               1 },
 270                 { PORT100_IN_PROT_MULTI_CARD,              0 },
 271                 { PORT100_IN_PROT_ADD_PARITY,              1 },
 272                 { PORT100_IN_PROT_CHECK_PARITY,            1 },
 273                 { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
 274                 { PORT100_IN_PROT_VALID_BIT_NUMBER,        8 },
 275                 { PORT100_IN_PROT_CRYPTO1,                 0 },
 276                 { PORT100_IN_PROT_ADD_SOF,                 0 },
 277                 { PORT100_IN_PROT_CHECK_SOF,               0 },
 278                 { PORT100_IN_PROT_ADD_EOF,                 0 },
 279                 { PORT100_IN_PROT_CHECK_EOF,               0 },
 280                 { PORT100_IN_PROT_DEAF_TIME,               4 },
 281                 { PORT100_IN_PROT_CRM,                     0 },
 282                 { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
 283                 { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
 284                 { PORT100_IN_PROT_RFCA,                    0 },
 285                 { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
 286                 { PORT100_IN_PROT_END,                     0 },
 287         },
 288         [NFC_DIGITAL_FRAMING_NFCA_T1T] = {
 289                 /* nfc_digital_framing_nfca_short */
 290                 { PORT100_IN_PROT_ADD_CRC,          2 },
 291                 { PORT100_IN_PROT_CHECK_CRC,        2 },
 292                 { PORT100_IN_PROT_VALID_BIT_NUMBER, 8 },
 293                 { PORT100_IN_PROT_T1_TAG_FRAME,     2 },
 294                 { PORT100_IN_PROT_END,              0 },
 295         },
 296         [NFC_DIGITAL_FRAMING_NFCA_T2T] = {
 297                 /* nfc_digital_framing_nfca_standard */
 298                 { PORT100_IN_PROT_ADD_CRC,   1 },
 299                 { PORT100_IN_PROT_CHECK_CRC, 0 },
 300                 { PORT100_IN_PROT_END,       0 },
 301         },
 302         [NFC_DIGITAL_FRAMING_NFCA_T4T] = {
 303                 /* nfc_digital_framing_nfca_standard_with_crc_a */
 304                 { PORT100_IN_PROT_END,       0 },
 305         },
 306         [NFC_DIGITAL_FRAMING_NFCA_NFC_DEP] = {
 307                 /* nfc_digital_framing_nfca_standard */
 308                 { PORT100_IN_PROT_END, 0 },
 309         },
 310         [NFC_DIGITAL_FRAMING_NFCF] = {
 311                 { PORT100_IN_PROT_INITIAL_GUARD_TIME,     18 },
 312                 { PORT100_IN_PROT_ADD_CRC,                 1 },
 313                 { PORT100_IN_PROT_CHECK_CRC,               1 },
 314                 { PORT100_IN_PROT_MULTI_CARD,              0 },
 315                 { PORT100_IN_PROT_ADD_PARITY,              0 },
 316                 { PORT100_IN_PROT_CHECK_PARITY,            0 },
 317                 { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
 318                 { PORT100_IN_PROT_VALID_BIT_NUMBER,        8 },
 319                 { PORT100_IN_PROT_CRYPTO1,                 0 },
 320                 { PORT100_IN_PROT_ADD_SOF,                 0 },
 321                 { PORT100_IN_PROT_CHECK_SOF,               0 },
 322                 { PORT100_IN_PROT_ADD_EOF,                 0 },
 323                 { PORT100_IN_PROT_CHECK_EOF,               0 },
 324                 { PORT100_IN_PROT_DEAF_TIME,               4 },
 325                 { PORT100_IN_PROT_CRM,                     0 },
 326                 { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
 327                 { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
 328                 { PORT100_IN_PROT_RFCA,                    0 },
 329                 { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
 330                 { PORT100_IN_PROT_END,                     0 },
 331         },
 332         [NFC_DIGITAL_FRAMING_NFCF_T3T] = {
 333                 /* nfc_digital_framing_nfcf */
 334                 { PORT100_IN_PROT_END, 0 },
 335         },
 336         [NFC_DIGITAL_FRAMING_NFCF_NFC_DEP] = {
 337                 /* nfc_digital_framing_nfcf */
 338                 { PORT100_IN_PROT_INITIAL_GUARD_TIME,     18 },
 339                 { PORT100_IN_PROT_ADD_CRC,                 1 },
 340                 { PORT100_IN_PROT_CHECK_CRC,               1 },
 341                 { PORT100_IN_PROT_MULTI_CARD,              0 },
 342                 { PORT100_IN_PROT_ADD_PARITY,              0 },
 343                 { PORT100_IN_PROT_CHECK_PARITY,            0 },
 344                 { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
 345                 { PORT100_IN_PROT_VALID_BIT_NUMBER,        8 },
 346                 { PORT100_IN_PROT_CRYPTO1,                 0 },
 347                 { PORT100_IN_PROT_ADD_SOF,                 0 },
 348                 { PORT100_IN_PROT_CHECK_SOF,               0 },
 349                 { PORT100_IN_PROT_ADD_EOF,                 0 },
 350                 { PORT100_IN_PROT_CHECK_EOF,               0 },
 351                 { PORT100_IN_PROT_DEAF_TIME,               4 },
 352                 { PORT100_IN_PROT_CRM,                     0 },
 353                 { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
 354                 { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
 355                 { PORT100_IN_PROT_RFCA,                    0 },
 356                 { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
 357                 { PORT100_IN_PROT_END,                     0 },
 358         },
 359         [NFC_DIGITAL_FRAMING_NFC_DEP_ACTIVATED] = {
 360                 { PORT100_IN_PROT_END, 0 },
 361         },
 362         [NFC_DIGITAL_FRAMING_NFCB] = {
 363                 { PORT100_IN_PROT_INITIAL_GUARD_TIME,     20 },
 364                 { PORT100_IN_PROT_ADD_CRC,                 1 },
 365                 { PORT100_IN_PROT_CHECK_CRC,               1 },
 366                 { PORT100_IN_PROT_MULTI_CARD,              0 },
 367                 { PORT100_IN_PROT_ADD_PARITY,              0 },
 368                 { PORT100_IN_PROT_CHECK_PARITY,            0 },
 369                 { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
 370                 { PORT100_IN_PROT_VALID_BIT_NUMBER,        8 },
 371                 { PORT100_IN_PROT_CRYPTO1,                 0 },
 372                 { PORT100_IN_PROT_ADD_SOF,                 1 },
 373                 { PORT100_IN_PROT_CHECK_SOF,               1 },
 374                 { PORT100_IN_PROT_ADD_EOF,                 1 },
 375                 { PORT100_IN_PROT_CHECK_EOF,               1 },
 376                 { PORT100_IN_PROT_DEAF_TIME,               4 },
 377                 { PORT100_IN_PROT_CRM,                     0 },
 378                 { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
 379                 { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
 380                 { PORT100_IN_PROT_RFCA,                    0 },
 381                 { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
 382                 { PORT100_IN_PROT_END,                     0 },
 383         },
 384         [NFC_DIGITAL_FRAMING_NFCB_T4T] = {
 385                 /* nfc_digital_framing_nfcb */
 386                 { PORT100_IN_PROT_END,                     0 },
 387         },
 388         /* Ensures the array has NFC_DIGITAL_FRAMING_LAST elements */
 389         [NFC_DIGITAL_FRAMING_LAST] = {
 390                 { PORT100_IN_PROT_END, 0 },
 391         },
 392 };
 393
 394 static const struct port100_protocol
 395 tg_protocols[][PORT100_TG_MAX_NUM_PROTOCOLS + 1] = {
 396         [NFC_DIGITAL_FRAMING_NFCA_SHORT] = {
 397                 { PORT100_TG_PROT_END, 0 },
 398         },
 399         [NFC_DIGITAL_FRAMING_NFCA_STANDARD] = {
 400                 { PORT100_TG_PROT_END, 0 },
 401         },
 402         [NFC_DIGITAL_FRAMING_NFCA_STANDARD_WITH_CRC_A] = {
 403                 { PORT100_TG_PROT_END, 0 },
 404         },
 405         [NFC_DIGITAL_FRAMING_NFCA_T1T] = {
 406                 { PORT100_TG_PROT_END, 0 },
 407         },
 408         [NFC_DIGITAL_FRAMING_NFCA_T2T] = {
 409                 { PORT100_TG_PROT_END, 0 },
 410         },
 411         [NFC_DIGITAL_FRAMING_NFCA_NFC_DEP] = {
 412                 { PORT100_TG_PROT_TU,     1 },
 413                 { PORT100_TG_PROT_RF_OFF, 0 },
 414                 { PORT100_TG_PROT_CRM,    7 },
 415                 { PORT100_TG_PROT_END,    0 },
 416         },
 417         [NFC_DIGITAL_FRAMING_NFCF] = {
 418                 { PORT100_TG_PROT_END, 0 },
 419         },
 420         [NFC_DIGITAL_FRAMING_NFCF_T3T] = {
 421                 { PORT100_TG_PROT_END, 0 },
 422         },
 423         [NFC_DIGITAL_FRAMING_NFCF_NFC_DEP] = {
 424                 { PORT100_TG_PROT_TU,     1 },
 425                 { PORT100_TG_PROT_RF_OFF, 0 },
 426                 { PORT100_TG_PROT_CRM,    7 },
 427                 { PORT100_TG_PROT_END,    0 },
 428         },
 429         [NFC_DIGITAL_FRAMING_NFC_DEP_ACTIVATED] = {
 430                 { PORT100_TG_PROT_RF_OFF, 1 },
 431                 { PORT100_TG_PROT_END,    0 },
 432         },
 433         /* Ensures the array has NFC_DIGITAL_FRAMING_LAST elements */
 434         [NFC_DIGITAL_FRAMING_LAST] = {
 435                 { PORT100_TG_PROT_END,    0 },
 436         },
 437 };
 438
 439 struct port100 {
 440         struct nfc_digital_dev *nfc_digital_dev;
 441
 442         int skb_headroom;
 443         int skb_tailroom;
 444
 445         struct usb_device *udev;
 446         struct usb_interface *interface;
 447
 448         struct urb *out_urb;
 449         struct urb *in_urb;
 450
 451         /* This mutex protects the out_urb and avoids to submit a new command
 452          * through port100_send_frame_async() while the previous one is being
 453          * canceled through port100_abort_cmd().
 454          */
 455         struct mutex out_urb_lock;
 456
 457         struct work_struct cmd_complete_work;
 458
 459         u8 cmd_type;
 460
 461         /* The digital stack serializes commands to be sent. There is no need
 462          * for any queuing/locking mechanism at driver level.
 463          */
 464         struct port100_cmd *cmd;
 465
 466         bool cmd_cancel;
 467         struct completion cmd_cancel_done;
 468 };
 469
 470 struct port100_cmd {
 471         u8 code;
 472         int status;
 473         struct sk_buff *req;
 474         struct sk_buff *resp;
 475         int resp_len;
 476         port100_send_async_complete_t  complete_cb;
 477         void *complete_cb_context;
 478 };
 479
 480 struct port100_frame {
 481         u8 preamble;
 482         __be16 start_frame;
 483         __be16 extended_frame;
 484         __le16 datalen;
 485         u8 datalen_checksum;
 486         u8 data[];
 487 } __packed;
 488
 489 struct port100_ack_frame {
 490         u8 preamble;
 491         __be16 start_frame;
 492         __be16 ack_frame;
 493         u8 postambule;
 494 } __packed;
 495
 496 struct port100_cb_arg {
 497         nfc_digital_cmd_complete_t complete_cb;
 498         void *complete_arg;
 499         u8 mdaa;
 500 };
 501
 502 struct port100_tg_comm_rf_cmd {
 503         __le16 guard_time;
 504         __le16 send_timeout;
 505         u8 mdaa;
 506         u8 nfca_param[6];
 507         u8 nfcf_param[18];
 508         u8 mf_halted;
 509         u8 arae_flag;
 510         __le16 recv_timeout;
 511         u8 data[];
 512 } __packed;
 513
 514 struct port100_tg_comm_rf_res {
 515         u8 comm_type;
 516         u8 ar_status;
 517         u8 target_activated;
 518         __le32 status;
 519         u8 data[];
 520 } __packed;
 521
 522 /* The rule: value + checksum = 0 */
 523 static inline u8 port100_checksum(u16 value)
 524 {
 525         return ~(((u8 *)&value)[0] + ((u8 *)&value)[1]) + 1;
 526 }
 527
 528 /* The rule: sum(data elements) + checksum = 0 */
 529 static u8 port100_data_checksum(const u8 *data, int datalen)
 530 {
 531         u8 sum = 0;
 532         int i;
 533
 534         for (i = 0; i < datalen; i++)
 535                 sum += data[i];
 536
 537         return port100_checksum(sum);
 538 }
 539
 540 static void port100_tx_frame_init(void *_frame, u8 cmd_code)
 541 {
 542         struct port100_frame *frame = _frame;
 543
 544         frame->preamble = 0;
 545         frame->start_frame = cpu_to_be16(PORT100_FRAME_SOF);
 546         frame->extended_frame = cpu_to_be16(PORT100_FRAME_EXT);
 547         PORT100_FRAME_DIRECTION(frame) = PORT100_FRAME_DIR_OUT;
 548         PORT100_FRAME_CMD(frame) = cmd_code;
 549         frame->datalen = cpu_to_le16(2);
 550 }
 551
 552 static void port100_tx_frame_finish(void *_frame)
 553 {
 554         struct port100_frame *frame = _frame;
 555
 556         frame->datalen_checksum = port100_checksum(le16_to_cpu(frame->datalen));
 557
 558         PORT100_FRAME_CHECKSUM(frame) =
 559                 port100_data_checksum(frame->data, le16_to_cpu(frame->datalen));
 560
 561         PORT100_FRAME_POSTAMBLE(frame) = 0;
 562 }
 563
 564 static void port100_tx_update_payload_len(void *_frame, int len)
 565 {
 566         struct port100_frame *frame = _frame;
 567
 568         le16_add_cpu(&frame->datalen, len);
 569 }
 570
 571 static bool port100_rx_frame_is_valid(const void *_frame)
 572 {
 573         u8 checksum;
 574         const struct port100_frame *frame = _frame;
 575
 576         if (frame->start_frame != cpu_to_be16(PORT100_FRAME_SOF) ||
 577             frame->extended_frame != cpu_to_be16(PORT100_FRAME_EXT))
 578                 return false;
 579
 580         checksum = port100_checksum(le16_to_cpu(frame->datalen));
 581         if (checksum != frame->datalen_checksum)
 582                 return false;
 583
 584         checksum = port100_data_checksum(frame->data,
 585                                          le16_to_cpu(frame->datalen));
 586         if (checksum != PORT100_FRAME_CHECKSUM(frame))
 587                 return false;
 588
 589         return true;
 590 }
 591
 592 static bool port100_rx_frame_is_ack(const struct port100_ack_frame *frame)
 593 {
 594         return (frame->start_frame == cpu_to_be16(PORT100_FRAME_SOF) &&
 595                 frame->ack_frame == cpu_to_be16(PORT100_FRAME_ACK));
 596 }
 597
 598 static inline int port100_rx_frame_size(const void *frame)
 599 {
 600         const struct port100_frame *f = frame;
 601
 602         return sizeof(struct port100_frame) + le16_to_cpu(f->datalen) +
 603                PORT100_FRAME_TAIL_LEN;
 604 }
 605
 606 static bool port100_rx_frame_is_cmd_response(const struct port100 *dev,
 607                                              const void *frame)
 608 {
 609         const struct port100_frame *f = frame;
 610
 611         return (PORT100_FRAME_CMD(f) == PORT100_CMD_RESPONSE(dev->cmd->code));
 612 }
 613
 614 static void port100_recv_response(struct urb *urb)
 615 {
 616         struct port100 *dev = urb->context;
 617         struct port100_cmd *cmd = dev->cmd;
 618         u8 *in_frame;
 619
 620         cmd->status = urb->status;
 621
 622         switch (urb->status) {
 623         case 0:
 624                 break; /* success */
 625         case -ECONNRESET:
 626         case -ENOENT:
 627                 nfc_err(&dev->interface->dev,
 628                         "The urb has been canceled (status %d)\n", urb->status);
 629                 goto sched_wq;
 630         case -ESHUTDOWN:
 631         default:
 632                 nfc_err(&dev->interface->dev, "Urb failure (status %d)\n",
 633                         urb->status);
 634                 goto sched_wq;
 635         }
 636
 637         in_frame = dev->in_urb->transfer_buffer;
 638
 639         if (!port100_rx_frame_is_valid(in_frame)) {
 640                 nfc_err(&dev->interface->dev, "Received an invalid frame\n");
 641                 cmd->status = -EIO;
 642                 goto sched_wq;
 643         }
 644
 645         print_hex_dump_debug("PORT100 RX: ", DUMP_PREFIX_NONE, 16, 1, in_frame,
 646                              port100_rx_frame_size(in_frame), false);
 647
 648         if (!port100_rx_frame_is_cmd_response(dev, in_frame)) {
 649                 nfc_err(&dev->interface->dev,
 650                         "It's not the response to the last command\n");
 651                 cmd->status = -EIO;
 652                 goto sched_wq;
 653         }
 654
 655 sched_wq:
 656         schedule_work(&dev->cmd_complete_work);
 657 }
 658
 659 static int port100_submit_urb_for_response(const struct port100 *dev,
 660                                            gfp_t flags)
 661 {
 662         dev->in_urb->complete = port100_recv_response;
 663
 664         return usb_submit_urb(dev->in_urb, flags);
 665 }
 666
 667 static void port100_recv_ack(struct urb *urb)
 668 {
 669         struct port100 *dev = urb->context;
 670         struct port100_cmd *cmd = dev->cmd;
 671         const struct port100_ack_frame *in_frame;
 672         int rc;
 673
 674         cmd->status = urb->status;
 675
 676         switch (urb->status) {
 677         case 0:
 678                 break; /* success */
 679         case -ECONNRESET:
 680         case -ENOENT:
 681                 nfc_err(&dev->interface->dev,
 682                         "The urb has been stopped (status %d)\n", urb->status);
 683                 goto sched_wq;
 684         case -ESHUTDOWN:
 685         default:
 686                 nfc_err(&dev->interface->dev, "Urb failure (status %d)\n",
 687                         urb->status);
 688                 goto sched_wq;
 689         }
 690
 691         in_frame = dev->in_urb->transfer_buffer;
 692
 693         if (!port100_rx_frame_is_ack(in_frame)) {
 694                 nfc_err(&dev->interface->dev, "Received an invalid ack\n");
 695                 cmd->status = -EIO;
 696                 goto sched_wq;
 697         }
 698
 699         rc = port100_submit_urb_for_response(dev, GFP_ATOMIC);
 700         if (rc) {
 701                 nfc_err(&dev->interface->dev,
 702                         "usb_submit_urb failed with result %d\n", rc);
 703                 cmd->status = rc;
 704                 goto sched_wq;
 705         }
 706
 707         return;
 708
 709 sched_wq:
 710         schedule_work(&dev->cmd_complete_work);
 711 }
 712
 713 static int port100_submit_urb_for_ack(const struct port100 *dev, gfp_t flags)
 714 {
 715         dev->in_urb->complete = port100_recv_ack;
 716
 717         return usb_submit_urb(dev->in_urb, flags);
 718 }
 719
 720 static int port100_send_ack(struct port100 *dev)
 721 {
 722         int rc = 0;
 723
 724         mutex_lock(&dev->out_urb_lock);
 725
 726         /*
 727          * If prior cancel is in-flight (dev->cmd_cancel == true), we
 728          * can skip to send cancel. Then this will wait the prior
 729          * cancel, or merged into the next cancel rarely if next
 730          * cancel was started before waiting done. In any case, this
 731          * will be waked up soon or later.
 732          */
 733         if (!dev->cmd_cancel) {
 734                 reinit_completion(&dev->cmd_cancel_done);
 735
 736                 usb_kill_urb(dev->out_urb);
 737
 738                 dev->out_urb->transfer_buffer = ack_frame;
 739                 dev->out_urb->transfer_buffer_length = sizeof(ack_frame);
 740                 rc = usb_submit_urb(dev->out_urb, GFP_KERNEL);
 741
 742                 /*
 743                  * Set the cmd_cancel flag only if the URB has been
 744                  * successfully submitted. It will be reset by the out
 745                  * URB completion callback port100_send_complete().
 746                  */
 747                 dev->cmd_cancel = !rc;
 748         }
 749
 750         mutex_unlock(&dev->out_urb_lock);
 751
 752         if (!rc)
 753                 wait_for_completion(&dev->cmd_cancel_done);
 754
 755         return rc;
 756 }
 757
 758 static int port100_send_frame_async(struct port100 *dev,
 759                                     const struct sk_buff *out,
 760                                     const struct sk_buff *in, int in_len)
 761 {
 762         int rc;
 763
 764         mutex_lock(&dev->out_urb_lock);
 765
 766         /* A command cancel frame as been sent through dev->out_urb. Don't try
 767          * to submit a new one.
 768          */
 769         if (dev->cmd_cancel) {
 770                 rc = -EAGAIN;
 771                 goto exit;
 772         }
 773
 774         dev->out_urb->transfer_buffer = out->data;
 775         dev->out_urb->transfer_buffer_length = out->len;
 776
 777         dev->in_urb->transfer_buffer = in->data;
 778         dev->in_urb->transfer_buffer_length = in_len;
 779
 780         print_hex_dump_debug("PORT100 TX: ", DUMP_PREFIX_NONE, 16, 1,
 781                              out->data, out->len, false);
 782
 783         rc = usb_submit_urb(dev->out_urb, GFP_KERNEL);
 784         if (rc)
 785                 goto exit;
 786
 787         rc = port100_submit_urb_for_ack(dev, GFP_KERNEL);
 788         if (rc)
 789                 usb_kill_urb(dev->out_urb);
 790
 791 exit:
 792         mutex_unlock(&dev->out_urb_lock);
 793
 794         return rc;
 795 }
 796
 797 static void port100_build_cmd_frame(struct port100 *dev, u8 cmd_code,
 798                                     struct sk_buff *skb)
 799 {
 800         /* payload is already there, just update datalen */
 801         int payload_len = skb->len;
 802
 803         skb_push(skb, PORT100_FRAME_HEADER_LEN);
 804         skb_put(skb, PORT100_FRAME_TAIL_LEN);
 805
 806         port100_tx_frame_init(skb->data, cmd_code);
 807         port100_tx_update_payload_len(skb->data, payload_len);
 808         port100_tx_frame_finish(skb->data);
 809 }
 810
 811 static void port100_send_async_complete(struct port100 *dev)
 812 {
 813         struct port100_cmd *cmd = dev->cmd;
 814         int status = cmd->status;
 815
 816         struct sk_buff *req = cmd->req;
 817         struct sk_buff *resp = cmd->resp;
 818
 819         dev_kfree_skb(req);
 820
 821         dev->cmd = NULL;
 822
 823         if (status < 0) {
 824                 cmd->complete_cb(dev, cmd->complete_cb_context,
 825                                  ERR_PTR(status));
 826                 dev_kfree_skb(resp);
 827                 goto done;
 828         }
 829
 830         skb_put(resp, port100_rx_frame_size(resp->data));
 831         skb_pull(resp, PORT100_FRAME_HEADER_LEN);
 832         skb_trim(resp, resp->len - PORT100_FRAME_TAIL_LEN);
 833
 834         cmd->complete_cb(dev, cmd->complete_cb_context, resp);
 835
 836 done:
 837         kfree(cmd);
 838 }
 839
 840 static int port100_send_cmd_async(struct port100 *dev, u8 cmd_code,
 841                                 struct sk_buff *req,
 842                                 port100_send_async_complete_t complete_cb,
 843                                 void *complete_cb_context)
 844 {
 845         struct port100_cmd *cmd;
 846         struct sk_buff *resp;
 847         int rc;
 848         int  resp_len = PORT100_FRAME_HEADER_LEN +
 849                         PORT100_FRAME_MAX_PAYLOAD_LEN +
 850                         PORT100_FRAME_TAIL_LEN;
 851
 852         if (dev->cmd) {
 853                 nfc_err(&dev->interface->dev,
 854                         "A command is still in process\n");
 855                 return -EBUSY;
 856         }
 857
 858         resp = alloc_skb(resp_len, GFP_KERNEL);
 859         if (!resp)
 860                 return -ENOMEM;
 861
 862         cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
 863         if (!cmd) {
 864                 dev_kfree_skb(resp);
 865                 return -ENOMEM;
 866         }
 867
 868         cmd->code = cmd_code;
 869         cmd->req = req;
 870         cmd->resp = resp;
 871         cmd->resp_len = resp_len;
 872         cmd->complete_cb = complete_cb;
 873         cmd->complete_cb_context = complete_cb_context;
 874
 875         port100_build_cmd_frame(dev, cmd_code, req);
 876
 877         dev->cmd = cmd;
 878
 879         rc = port100_send_frame_async(dev, req, resp, resp_len);
 880         if (rc) {
 881                 kfree(cmd);
 882                 dev_kfree_skb(resp);
 883                 dev->cmd = NULL;
 884         }
 885
 886         return rc;
 887 }
 888
 889 struct port100_sync_cmd_response {
 890         struct sk_buff *resp;
 891         struct completion done;
 892 };
 893
 894 static void port100_wq_cmd_complete(struct work_struct *work)
 895 {
 896         struct port100 *dev = container_of(work, struct port100,
 897                                            cmd_complete_work);
 898
 899         port100_send_async_complete(dev);
 900 }
 901
 902 static void port100_send_sync_complete(struct port100 *dev, void *_arg,
 903                                       struct sk_buff *resp)
 904 {
 905         struct port100_sync_cmd_response *arg = _arg;
 906
 907         arg->resp = resp;
 908         complete(&arg->done);
 909 }
 910
 911 static struct sk_buff *port100_send_cmd_sync(struct port100 *dev, u8 cmd_code,
 912                                              struct sk_buff *req)
 913 {
 914         int rc;
 915         struct port100_sync_cmd_response arg;
 916
 917         init_completion(&arg.done);
 918
 919         rc = port100_send_cmd_async(dev, cmd_code, req,
 920                                     port100_send_sync_complete, &arg);
 921         if (rc) {
 922                 dev_kfree_skb(req);
 923                 return ERR_PTR(rc);
 924         }
 925
 926         wait_for_completion(&arg.done);
 927
 928         return arg.resp;
 929 }
 930
 931 static void port100_send_complete(struct urb *urb)
 932 {
 933         struct port100 *dev = urb->context;
 934
 935         if (dev->cmd_cancel) {
 936                 complete_all(&dev->cmd_cancel_done);
 937                 dev->cmd_cancel = false;
 938         }
 939
 940         switch (urb->status) {
 941         case 0:
 942                 break; /* success */
 943         case -ECONNRESET:
 944         case -ENOENT:
 945                 nfc_err(&dev->interface->dev,
 946                         "The urb has been stopped (status %d)\n", urb->status);
 947                 break;
 948         case -ESHUTDOWN:
 949         default:
 950                 nfc_err(&dev->interface->dev, "Urb failure (status %d)\n",
 951                         urb->status);
 952         }
 953 }
 954
 955 static void port100_abort_cmd(struct nfc_digital_dev *ddev)
 956 {
 957         struct port100 *dev = nfc_digital_get_drvdata(ddev);
 958
 959         /* An ack will cancel the last issued command */
 960         port100_send_ack(dev);
 961
 962         /* cancel the urb request */
 963         usb_kill_urb(dev->in_urb);
 964 }
 965
 966 static struct sk_buff *port100_alloc_skb(const struct port100 *dev, unsigned int size)
 967 {
 968         struct sk_buff *skb;
 969
 970         skb = alloc_skb(dev->skb_headroom + dev->skb_tailroom + size,
 971                         GFP_KERNEL);
 972         if (skb)
 973                 skb_reserve(skb, dev->skb_headroom);
 974
 975         return skb;
 976 }
 977
 978 static int port100_set_command_type(struct port100 *dev, u8 command_type)
 979 {
 980         struct sk_buff *skb;
 981         struct sk_buff *resp;
 982         int rc;
 983
 984         skb = port100_alloc_skb(dev, 1);
 985         if (!skb)
 986                 return -ENOMEM;
 987
 988         skb_put_u8(skb, command_type);
 989
 990         resp = port100_send_cmd_sync(dev, PORT100_CMD_SET_COMMAND_TYPE, skb);
 991         if (IS_ERR(resp))
 992                 return PTR_ERR(resp);
 993
 994         rc = resp->data[0];
 995
 996         dev_kfree_skb(resp);
 997
 998         return rc;
 999 }
1000
1001 static u64 port100_get_command_type_mask(struct port100 *dev)
1002 {
1003         struct sk_buff *skb;
1004         struct sk_buff *resp;
1005         u64 mask;
1006
1007         skb = port100_alloc_skb(dev, 0);
1008         if (!skb)
1009                 return -ENOMEM;
1010
1011         resp = port100_send_cmd_sync(dev, PORT100_CMD_GET_COMMAND_TYPE, skb);
1012         if (IS_ERR(resp))
1013                 return PTR_ERR(resp);
1014
1015         if (resp->len < 8)
1016                 mask = 0;
1017         else
1018                 mask = be64_to_cpu(*(__be64 *)resp->data);
1019
1020         dev_kfree_skb(resp);
1021
1022         return mask;
1023 }
1024
1025 static u16 port100_get_firmware_version(struct port100 *dev)
1026 {
1027         struct sk_buff *skb;
1028         struct sk_buff *resp;
1029         u16 fw_ver;
1030
1031         skb = port100_alloc_skb(dev, 0);
1032         if (!skb)
1033                 return 0;
1034
1035         resp = port100_send_cmd_sync(dev, PORT100_CMD_GET_FIRMWARE_VERSION,
1036                                      skb);
1037         if (IS_ERR(resp))
1038                 return 0;
1039
1040         fw_ver = le16_to_cpu(*(__le16 *)resp->data);
1041
1042         dev_kfree_skb(resp);
1043
1044         return fw_ver;
1045 }
1046
1047 static int port100_switch_rf(struct nfc_digital_dev *ddev, bool on)
1048 {
1049         struct port100 *dev = nfc_digital_get_drvdata(ddev);
1050         struct sk_buff *skb, *resp;
1051
1052         skb = port100_alloc_skb(dev, 1);
1053         if (!skb)
1054                 return -ENOMEM;
1055
1056         skb_put_u8(skb, on ? 1 : 0);
1057
1058         /* Cancel the last command if the device is being switched off */
1059         if (!on)
1060                 port100_abort_cmd(ddev);
1061
1062         resp = port100_send_cmd_sync(dev, PORT100_CMD_SWITCH_RF, skb);
1063
1064         if (IS_ERR(resp))
1065                 return PTR_ERR(resp);
1066
1067         dev_kfree_skb(resp);
1068
1069         return 0;
1070 }
1071
1072 static int port100_in_set_rf(struct nfc_digital_dev *ddev, u8 rf)
1073 {
1074         struct port100 *dev = nfc_digital_get_drvdata(ddev);
1075         struct sk_buff *skb;
1076         struct sk_buff *resp;
1077         int rc;
1078
1079         if (rf >= NFC_DIGITAL_RF_TECH_LAST)
1080                 return -EINVAL;
1081
1082         skb = port100_alloc_skb(dev, sizeof(struct port100_in_rf_setting));
1083         if (!skb)
1084                 return -ENOMEM;
1085
1086         skb_put_data(skb, &in_rf_settings[rf],
1087                      sizeof(struct port100_in_rf_setting));
1088
1089         resp = port100_send_cmd_sync(dev, PORT100_CMD_IN_SET_RF, skb);
1090
1091         if (IS_ERR(resp))
1092                 return PTR_ERR(resp);
1093
1094         rc = resp->data[0];
1095
1096         dev_kfree_skb(resp);
1097
1098         return rc;
1099 }
1100
1101 static int port100_in_set_framing(struct nfc_digital_dev *ddev, int param)
1102 {
1103         struct port100 *dev = nfc_digital_get_drvdata(ddev);
1104         const struct port100_protocol *protocols;
1105         struct sk_buff *skb;
1106         struct sk_buff *resp;
1107         int num_protocols;
1108         size_t size;
1109         int rc;
1110
1111         if (param >= NFC_DIGITAL_FRAMING_LAST)
1112                 return -EINVAL;
1113
1114         protocols = in_protocols[param];
1115
1116         num_protocols = 0;
1117         while (protocols[num_protocols].number != PORT100_IN_PROT_END)
1118                 num_protocols++;
1119
1120         if (!num_protocols)
1121                 return 0;
1122
1123         size = sizeof(struct port100_protocol) * num_protocols;
1124
1125         skb = port100_alloc_skb(dev, size);
1126         if (!skb)
1127                 return -ENOMEM;
1128
1129         skb_put_data(skb, protocols, size);
1130
1131         resp = port100_send_cmd_sync(dev, PORT100_CMD_IN_SET_PROTOCOL, skb);
1132
1133         if (IS_ERR(resp))
1134                 return PTR_ERR(resp);
1135
1136         rc = resp->data[0];
1137
1138         dev_kfree_skb(resp);
1139
1140         return rc;
1141 }
1142
1143 static int port100_in_configure_hw(struct nfc_digital_dev *ddev, int type,
1144                                    int param)
1145 {
1146         if (type == NFC_DIGITAL_CONFIG_RF_TECH)
1147                 return port100_in_set_rf(ddev, param);
1148
1149         if (type == NFC_DIGITAL_CONFIG_FRAMING)
1150                 return port100_in_set_framing(ddev, param);
1151
1152         return -EINVAL;
1153 }
1154
1155 static void port100_in_comm_rf_complete(struct port100 *dev, void *arg,
1156                                        struct sk_buff *resp)
1157 {
1158         const struct port100_cb_arg *cb_arg = arg;
1159         nfc_digital_cmd_complete_t cb = cb_arg->complete_cb;
1160         u32 status;
1161         int rc;
1162
1163         if (IS_ERR(resp)) {
1164                 rc =  PTR_ERR(resp);
1165                 goto exit;
1166         }
1167
1168         if (resp->len < 4) {
1169                 nfc_err(&dev->interface->dev,
1170                         "Invalid packet length received\n");
1171                 rc = -EIO;
1172                 goto error;
1173         }
1174
1175         status = le32_to_cpu(*(__le32 *)resp->data);
1176
1177         skb_pull(resp, sizeof(u32));
1178
1179         if (status == PORT100_CMD_STATUS_TIMEOUT) {
1180                 rc = -ETIMEDOUT;
1181                 goto error;
1182         }
1183
1184         if (status != PORT100_CMD_STATUS_OK) {
1185                 nfc_err(&dev->interface->dev,
1186                         "in_comm_rf failed with status 0x%08x\n", status);
1187                 rc = -EIO;
1188                 goto error;
1189         }
1190
1191         /* Remove collision bits byte */
1192         skb_pull(resp, 1);
1193
1194         goto exit;
1195
1196 error:
1197         kfree_skb(resp);
1198         resp = ERR_PTR(rc);
1199
1200 exit:
1201         cb(dev->nfc_digital_dev, cb_arg->complete_arg, resp);
1202
1203         kfree(cb_arg);
1204 }
1205
1206 static int port100_in_send_cmd(struct nfc_digital_dev *ddev,
1207                                struct sk_buff *skb, u16 _timeout,
1208                                nfc_digital_cmd_complete_t cb, void *arg)
1209 {
1210         struct port100 *dev = nfc_digital_get_drvdata(ddev);
1211         struct port100_cb_arg *cb_arg;
1212         __le16 timeout;
1213
1214         cb_arg = kzalloc(sizeof(struct port100_cb_arg), GFP_KERNEL);
1215         if (!cb_arg)
1216                 return -ENOMEM;
1217
1218         cb_arg->complete_cb = cb;
1219         cb_arg->complete_arg = arg;
1220
1221         timeout = cpu_to_le16(_timeout * 10);
1222
1223         memcpy(skb_push(skb, sizeof(__le16)), &timeout, sizeof(__le16));
1224
1225         return port100_send_cmd_async(dev, PORT100_CMD_IN_COMM_RF, skb,
1226                                       port100_in_comm_rf_complete, cb_arg);
1227 }
1228
1229 static int port100_tg_set_rf(struct nfc_digital_dev *ddev, u8 rf)
1230 {
1231         struct port100 *dev = nfc_digital_get_drvdata(ddev);
1232         struct sk_buff *skb;
1233         struct sk_buff *resp;
1234         int rc;
1235
1236         if (rf >= NFC_DIGITAL_RF_TECH_LAST)
1237                 return -EINVAL;
1238
1239         skb = port100_alloc_skb(dev, sizeof(struct port100_tg_rf_setting));
1240         if (!skb)
1241                 return -ENOMEM;
1242
1243         skb_put_data(skb, &tg_rf_settings[rf],
1244                      sizeof(struct port100_tg_rf_setting));
1245
1246         resp = port100_send_cmd_sync(dev, PORT100_CMD_TG_SET_RF, skb);
1247
1248         if (IS_ERR(resp))
1249                 return PTR_ERR(resp);
1250
1251         rc = resp->data[0];
1252
1253         dev_kfree_skb(resp);
1254
1255         return rc;
1256 }
1257
1258 static int port100_tg_set_framing(struct nfc_digital_dev *ddev, int param)
1259 {
1260         struct port100 *dev = nfc_digital_get_drvdata(ddev);
1261         const struct port100_protocol *protocols;
1262         struct sk_buff *skb;
1263         struct sk_buff *resp;
1264         int rc;
1265         int num_protocols;
1266         size_t size;
1267
1268         if (param >= NFC_DIGITAL_FRAMING_LAST)
1269                 return -EINVAL;
1270
1271         protocols = tg_protocols[param];
1272
1273         num_protocols = 0;
1274         while (protocols[num_protocols].number != PORT100_TG_PROT_END)
1275                 num_protocols++;
1276
1277         if (!num_protocols)
1278                 return 0;
1279
1280         size = sizeof(struct port100_protocol) * num_protocols;
1281
1282         skb = port100_alloc_skb(dev, size);
1283         if (!skb)
1284                 return -ENOMEM;
1285
1286         skb_put_data(skb, protocols, size);
1287
1288         resp = port100_send_cmd_sync(dev, PORT100_CMD_TG_SET_PROTOCOL, skb);
1289
1290         if (IS_ERR(resp))
1291                 return PTR_ERR(resp);
1292
1293         rc = resp->data[0];
1294
1295         dev_kfree_skb(resp);
1296
1297         return rc;
1298 }
1299
1300 static int port100_tg_configure_hw(struct nfc_digital_dev *ddev, int type,
1301                                    int param)
1302 {
1303         if (type == NFC_DIGITAL_CONFIG_RF_TECH)
1304                 return port100_tg_set_rf(ddev, param);
1305
1306         if (type == NFC_DIGITAL_CONFIG_FRAMING)
1307                 return port100_tg_set_framing(ddev, param);
1308
1309         return -EINVAL;
1310 }
1311
1312 static bool port100_tg_target_activated(struct port100 *dev, u8 tgt_activated)
1313 {
1314         u8 mask;
1315
1316         switch (dev->cmd_type) {
1317         case PORT100_CMD_TYPE_0:
1318                 mask = PORT100_MDAA_TGT_HAS_BEEN_ACTIVATED_MASK;
1319                 break;
1320         case PORT100_CMD_TYPE_1:
1321                 mask = PORT100_MDAA_TGT_HAS_BEEN_ACTIVATED_MASK |
1322                        PORT100_MDAA_TGT_WAS_ACTIVATED_MASK;
1323                 break;
1324         default:
1325                 nfc_err(&dev->interface->dev, "Unknown command type\n");
1326                 return false;
1327         }
1328
1329         return ((tgt_activated & mask) == mask);
1330 }
1331
1332 static void port100_tg_comm_rf_complete(struct port100 *dev, void *arg,
1333                                         struct sk_buff *resp)
1334 {
1335         u32 status;
1336         const struct port100_cb_arg *cb_arg = arg;
1337         nfc_digital_cmd_complete_t cb = cb_arg->complete_cb;
1338         struct port100_tg_comm_rf_res *hdr;
1339
1340         if (IS_ERR(resp))
1341                 goto exit;
1342
1343         hdr = (struct port100_tg_comm_rf_res *)resp->data;
1344
1345         status = le32_to_cpu(hdr->status);
1346
1347         if (cb_arg->mdaa &&
1348             !port100_tg_target_activated(dev, hdr->target_activated)) {
1349                 kfree_skb(resp);
1350                 resp = ERR_PTR(-ETIMEDOUT);
1351
1352                 goto exit;
1353         }
1354
1355         skb_pull(resp, sizeof(struct port100_tg_comm_rf_res));
1356
1357         if (status != PORT100_CMD_STATUS_OK) {
1358                 kfree_skb(resp);
1359
1360                 if (status == PORT100_CMD_STATUS_TIMEOUT)
1361                         resp = ERR_PTR(-ETIMEDOUT);
1362                 else
1363                         resp = ERR_PTR(-EIO);
1364         }
1365
1366 exit:
1367         cb(dev->nfc_digital_dev, cb_arg->complete_arg, resp);
1368
1369         kfree(cb_arg);
1370 }
1371
1372 static int port100_tg_send_cmd(struct nfc_digital_dev *ddev,
1373                                struct sk_buff *skb, u16 timeout,
1374                                nfc_digital_cmd_complete_t cb, void *arg)
1375 {
1376         struct port100 *dev = nfc_digital_get_drvdata(ddev);
1377         struct port100_tg_comm_rf_cmd *hdr;
1378         struct port100_cb_arg *cb_arg;
1379
1380         cb_arg = kzalloc(sizeof(struct port100_cb_arg), GFP_KERNEL);
1381         if (!cb_arg)
1382                 return -ENOMEM;
1383
1384         cb_arg->complete_cb = cb;
1385         cb_arg->complete_arg = arg;
1386
1387         skb_push(skb, sizeof(struct port100_tg_comm_rf_cmd));
1388
1389         hdr = (struct port100_tg_comm_rf_cmd *)skb->data;
1390
1391         memset(hdr, 0, sizeof(struct port100_tg_comm_rf_cmd));
1392         hdr->guard_time = cpu_to_le16(500);
1393         hdr->send_timeout = cpu_to_le16(0xFFFF);
1394         hdr->recv_timeout = cpu_to_le16(timeout);
1395
1396         return port100_send_cmd_async(dev, PORT100_CMD_TG_COMM_RF, skb,
1397                                       port100_tg_comm_rf_complete, cb_arg);
1398 }
1399
1400 static int port100_listen_mdaa(struct nfc_digital_dev *ddev,
1401                                struct digital_tg_mdaa_params *params,
1402                                u16 timeout,
1403                                nfc_digital_cmd_complete_t cb, void *arg)
1404 {
1405         struct port100 *dev = nfc_digital_get_drvdata(ddev);
1406         struct port100_tg_comm_rf_cmd *hdr;
1407         struct port100_cb_arg *cb_arg;
1408         struct sk_buff *skb;
1409         int rc;
1410
1411         rc = port100_tg_configure_hw(ddev, NFC_DIGITAL_CONFIG_RF_TECH,
1412                                      NFC_DIGITAL_RF_TECH_106A);
1413         if (rc)
1414                 return rc;
1415
1416         rc = port100_tg_configure_hw(ddev, NFC_DIGITAL_CONFIG_FRAMING,
1417                                      NFC_DIGITAL_FRAMING_NFCA_NFC_DEP);
1418         if (rc)
1419                 return rc;
1420
1421         cb_arg = kzalloc(sizeof(struct port100_cb_arg), GFP_KERNEL);
1422         if (!cb_arg)
1423                 return -ENOMEM;
1424
1425         cb_arg->complete_cb = cb;
1426         cb_arg->complete_arg = arg;
1427         cb_arg->mdaa = 1;
1428
1429         skb = port100_alloc_skb(dev, 0);
1430         if (!skb) {
1431                 kfree(cb_arg);
1432                 return -ENOMEM;
1433         }
1434
1435         skb_push(skb, sizeof(struct port100_tg_comm_rf_cmd));
1436         hdr = (struct port100_tg_comm_rf_cmd *)skb->data;
1437
1438         memset(hdr, 0, sizeof(struct port100_tg_comm_rf_cmd));
1439
1440         hdr->guard_time = 0;
1441         hdr->send_timeout = cpu_to_le16(0xFFFF);
1442         hdr->mdaa = 1;
1443         hdr->nfca_param[0] = (params->sens_res >> 8) & 0xFF;
1444         hdr->nfca_param[1] = params->sens_res & 0xFF;
1445         memcpy(hdr->nfca_param + 2, params->nfcid1, 3);
1446         hdr->nfca_param[5] = params->sel_res;
1447         memcpy(hdr->nfcf_param, params->nfcid2, 8);
1448         hdr->nfcf_param[16] = (params->sc >> 8) & 0xFF;
1449         hdr->nfcf_param[17] = params->sc & 0xFF;
1450         hdr->recv_timeout = cpu_to_le16(timeout);
1451
1452         return port100_send_cmd_async(dev, PORT100_CMD_TG_COMM_RF, skb,
1453                                       port100_tg_comm_rf_complete, cb_arg);
1454 }
1455
1456 static int port100_listen(struct nfc_digital_dev *ddev, u16 timeout,
1457                           nfc_digital_cmd_complete_t cb, void *arg)
1458 {
1459         const struct port100 *dev = nfc_digital_get_drvdata(ddev);
1460         struct sk_buff *skb;
1461
1462         skb = port100_alloc_skb(dev, 0);
1463         if (!skb)
1464                 return -ENOMEM;
1465
1466         return port100_tg_send_cmd(ddev, skb, timeout, cb, arg);
1467 }
1468
1469 static const struct nfc_digital_ops port100_digital_ops = {
1470         .in_configure_hw = port100_in_configure_hw,
1471         .in_send_cmd = port100_in_send_cmd,
1472
1473         .tg_listen_mdaa = port100_listen_mdaa,
1474         .tg_listen = port100_listen,
1475         .tg_configure_hw = port100_tg_configure_hw,
1476         .tg_send_cmd = port100_tg_send_cmd,
1477
1478         .switch_rf = port100_switch_rf,
1479         .abort_cmd = port100_abort_cmd,
1480 };
1481
1482 static const struct usb_device_id port100_table[] = {
1483         { USB_DEVICE(SONY_VENDOR_ID, RCS380S_PRODUCT_ID), },
1484         { USB_DEVICE(SONY_VENDOR_ID, RCS380P_PRODUCT_ID), },
1485         { }
1486 };
1487 MODULE_DEVICE_TABLE(usb, port100_table);
1488
1489 static int port100_probe(struct usb_interface *interface,
1490                          const struct usb_device_id *id)
1491 {
1492         struct port100 *dev;
1493         int rc;
1494         struct usb_host_interface *iface_desc;
1495         struct usb_endpoint_descriptor *endpoint;
1496         int in_endpoint;
1497         int out_endpoint;
1498         u16 fw_version;
1499         u64 cmd_type_mask;
1500         int i;
1501
1502         dev = devm_kzalloc(&interface->dev, sizeof(struct port100), GFP_KERNEL);
1503         if (!dev)
1504                 return -ENOMEM;
1505
1506         mutex_init(&dev->out_urb_lock);
1507         dev->udev = usb_get_dev(interface_to_usbdev(interface));
1508         dev->interface = interface;
1509         usb_set_intfdata(interface, dev);
1510
1511         in_endpoint = out_endpoint = 0;
1512         iface_desc = interface->cur_altsetting;
1513         for (i = 0; i < iface_desc->desc.bNumEndpoints; ++i) {
1514                 endpoint = &iface_desc->endpoint[i].desc;
1515
1516                 if (!in_endpoint && usb_endpoint_is_bulk_in(endpoint))
1517                         in_endpoint = endpoint->bEndpointAddress;
1518
1519                 if (!out_endpoint && usb_endpoint_is_bulk_out(endpoint))
1520                         out_endpoint = endpoint->bEndpointAddress;
1521         }
1522
1523         if (!in_endpoint || !out_endpoint) {
1524                 nfc_err(&interface->dev,
1525                         "Could not find bulk-in or bulk-out endpoint\n");
1526                 rc = -ENODEV;
1527                 goto error;
1528         }
1529
1530         dev->in_urb = usb_alloc_urb(0, GFP_KERNEL);
1531         dev->out_urb = usb_alloc_urb(0, GFP_KERNEL);
1532
1533         if (!dev->in_urb || !dev->out_urb) {
1534                 nfc_err(&interface->dev, "Could not allocate USB URBs\n");
1535                 rc = -ENOMEM;
1536                 goto error;
1537         }
1538
1539         usb_fill_bulk_urb(dev->in_urb, dev->udev,
1540                           usb_rcvbulkpipe(dev->udev, in_endpoint),
1541                           NULL, 0, NULL, dev);
1542         usb_fill_bulk_urb(dev->out_urb, dev->udev,
1543                           usb_sndbulkpipe(dev->udev, out_endpoint),
1544                           NULL, 0, port100_send_complete, dev);
1545         dev->out_urb->transfer_flags = URB_ZERO_PACKET;
1546
1547         dev->skb_headroom = PORT100_FRAME_HEADER_LEN +
1548                             PORT100_COMM_RF_HEAD_MAX_LEN;
1549         dev->skb_tailroom = PORT100_FRAME_TAIL_LEN;
1550
1551         init_completion(&dev->cmd_cancel_done);
1552         INIT_WORK(&dev->cmd_complete_work, port100_wq_cmd_complete);
1553
1554         /* The first thing to do with the Port-100 is to set the command type
1555          * to be used. If supported we use command type 1. 0 otherwise.
1556          */
1557         cmd_type_mask = port100_get_command_type_mask(dev);
1558         if (!cmd_type_mask) {
1559                 nfc_err(&interface->dev,
1560                         "Could not get supported command types\n");
1561                 rc = -ENODEV;
1562                 goto error;
1563         }
1564
1565         if (PORT100_CMD_TYPE_IS_SUPPORTED(cmd_type_mask, PORT100_CMD_TYPE_1))
1566                 dev->cmd_type = PORT100_CMD_TYPE_1;
1567         else
1568                 dev->cmd_type = PORT100_CMD_TYPE_0;
1569
1570         rc = port100_set_command_type(dev, dev->cmd_type);
1571         if (rc) {
1572                 nfc_err(&interface->dev,
1573                         "The device does not support command type %u\n",
1574                         dev->cmd_type);
1575                 goto error;
1576         }
1577
1578         fw_version = port100_get_firmware_version(dev);
1579         if (!fw_version)
1580                 nfc_err(&interface->dev,
1581                         "Could not get device firmware version\n");
1582
1583         nfc_info(&interface->dev,
1584                  "Sony NFC Port-100 Series attached (firmware v%x.%02x)\n",
1585                  (fw_version & 0xFF00) >> 8, fw_version & 0xFF);
1586
1587         dev->nfc_digital_dev = nfc_digital_allocate_device(&port100_digital_ops,
1588                                                            PORT100_PROTOCOLS,
1589                                                            PORT100_CAPABILITIES,
1590                                                            dev->skb_headroom,
1591                                                            dev->skb_tailroom);
1592         if (!dev->nfc_digital_dev) {
1593                 nfc_err(&interface->dev,
1594                         "Could not allocate nfc_digital_dev\n");
1595                 rc = -ENOMEM;
1596                 goto error;
1597         }
1598
1599         nfc_digital_set_parent_dev(dev->nfc_digital_dev, &interface->dev);
1600         nfc_digital_set_drvdata(dev->nfc_digital_dev, dev);
1601
1602         rc = nfc_digital_register_device(dev->nfc_digital_dev);
1603         if (rc) {
1604                 nfc_err(&interface->dev,
1605                         "Could not register digital device\n");
1606                 goto free_nfc_dev;
1607         }
1608
1609         return 0;
1610
1611 free_nfc_dev:
1612         nfc_digital_free_device(dev->nfc_digital_dev);
1613
1614 error:
1615         usb_free_urb(dev->in_urb);
1616         usb_free_urb(dev->out_urb);
1617         usb_put_dev(dev->udev);
1618
1619         return rc;
1620 }
1621
1622 static void port100_disconnect(struct usb_interface *interface)
1623 {
1624         struct port100 *dev;
1625
1626         dev = usb_get_intfdata(interface);
1627         usb_set_intfdata(interface, NULL);
1628
1629         nfc_digital_unregister_device(dev->nfc_digital_dev);
1630         nfc_digital_free_device(dev->nfc_digital_dev);
1631
1632         usb_kill_urb(dev->in_urb);
1633         usb_kill_urb(dev->out_urb);
1634
1635         usb_free_urb(dev->in_urb);
1636         usb_free_urb(dev->out_urb);
1637         usb_put_dev(dev->udev);
1638
1639         kfree(dev->cmd);
1640
1641         nfc_info(&interface->dev, "Sony Port-100 NFC device disconnected\n");
1642 }
1643
1644 static struct usb_driver port100_driver = {
1645         .name =         "port100",
1646         .probe =        port100_probe,
1647         .disconnect =   port100_disconnect,
1648         .id_table =     port100_table,
1649 };
1650
1651 module_usb_driver(port100_driver);
1652
1653 MODULE_DESCRIPTION("NFC Port-100 series usb driver ver " VERSION);
1654 MODULE_VERSION(VERSION);
1655 MODULE_LICENSE("GPL");