5fa3cf0fabd6cca533860bc65faea25714f3a173
[sfrench/cifs-2.6.git] / drivers / nfc / port100.c
1 /*
2  * Sony NFC Port-100 Series driver
3  * Copyright (c) 2013, Intel Corporation.
4  *
5  * Partly based/Inspired by Stephen Tiedemann's nfcpy
6  *
7  * This program is free software; you can redistribute it and/or modify it
8  * under the terms and conditions of the GNU General Public License,
9  * version 2, as published by the Free Software Foundation.
10  *
11  * This program is distributed in the hope it will be useful, but WITHOUT
12  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
13  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
14  * more details.
15  *
16  */
17
18 #include <linux/module.h>
19 #include <linux/usb.h>
20 #include <net/nfc/digital.h>
21
22 #define VERSION "0.1"
23
24 #define SONY_VENDOR_ID          0x054c
25 #define RCS380S_PRODUCT_ID      0x06c1
26 #define RCS380P_PRODUCT_ID      0x06c3
27
28 #define PORT100_PROTOCOLS (NFC_PROTO_JEWEL_MASK    | \
29                            NFC_PROTO_MIFARE_MASK   | \
30                            NFC_PROTO_FELICA_MASK   | \
31                            NFC_PROTO_NFC_DEP_MASK  | \
32                            NFC_PROTO_ISO14443_MASK | \
33                            NFC_PROTO_ISO14443_B_MASK)
34
35 #define PORT100_CAPABILITIES (NFC_DIGITAL_DRV_CAPS_IN_CRC | \
36                               NFC_DIGITAL_DRV_CAPS_TG_CRC)
37
38 /* Standard port100 frame definitions */
39 #define PORT100_FRAME_HEADER_LEN (sizeof(struct port100_frame) \
40                                   + 2) /* data[0] CC, data[1] SCC */
41 #define PORT100_FRAME_TAIL_LEN 2 /* data[len] DCS, data[len + 1] postamble*/
42
43 #define PORT100_COMM_RF_HEAD_MAX_LEN (sizeof(struct port100_tg_comm_rf_cmd))
44
45 /*
46  * Max extended frame payload len, excluding CC and SCC
47  * which are already in PORT100_FRAME_HEADER_LEN.
48  */
49 #define PORT100_FRAME_MAX_PAYLOAD_LEN 1001
50
51 #define PORT100_FRAME_ACK_SIZE 6 /* Preamble (1), SoPC (2), ACK Code (2),
52                                     Postamble (1) */
53 static u8 ack_frame[PORT100_FRAME_ACK_SIZE] = {
54         0x00, 0x00, 0xff, 0x00, 0xff, 0x00
55 };
56
57 #define PORT100_FRAME_CHECKSUM(f) (f->data[le16_to_cpu(f->datalen)])
58 #define PORT100_FRAME_POSTAMBLE(f) (f->data[le16_to_cpu(f->datalen) + 1])
59
60 /* start of frame */
61 #define PORT100_FRAME_SOF       0x00FF
62 #define PORT100_FRAME_EXT       0xFFFF
63 #define PORT100_FRAME_ACK       0x00FF
64
65 /* Port-100 command: in or out */
66 #define PORT100_FRAME_DIRECTION(f) (f->data[0]) /* CC */
67 #define PORT100_FRAME_DIR_OUT 0xD6
68 #define PORT100_FRAME_DIR_IN  0xD7
69
70 /* Port-100 sub-command */
71 #define PORT100_FRAME_CMD(f) (f->data[1]) /* SCC */
72
73 #define PORT100_CMD_GET_FIRMWARE_VERSION 0x20
74 #define PORT100_CMD_GET_COMMAND_TYPE     0x28
75 #define PORT100_CMD_SET_COMMAND_TYPE     0x2A
76
77 #define PORT100_CMD_IN_SET_RF       0x00
78 #define PORT100_CMD_IN_SET_PROTOCOL 0x02
79 #define PORT100_CMD_IN_COMM_RF      0x04
80
81 #define PORT100_CMD_TG_SET_RF       0x40
82 #define PORT100_CMD_TG_SET_PROTOCOL 0x42
83 #define PORT100_CMD_TG_SET_RF_OFF   0x46
84 #define PORT100_CMD_TG_COMM_RF      0x48
85
86 #define PORT100_CMD_SWITCH_RF       0x06
87
88 #define PORT100_CMD_RESPONSE(cmd) (cmd + 1)
89
90 #define PORT100_CMD_TYPE_IS_SUPPORTED(mask, cmd_type) \
91         ((mask) & (0x01 << (cmd_type)))
92 #define PORT100_CMD_TYPE_0      0
93 #define PORT100_CMD_TYPE_1      1
94
95 #define PORT100_CMD_STATUS_OK      0x00
96 #define PORT100_CMD_STATUS_TIMEOUT 0x80
97
98 #define PORT100_MDAA_TGT_HAS_BEEN_ACTIVATED_MASK 0x01
99 #define PORT100_MDAA_TGT_WAS_ACTIVATED_MASK      0x02
100
101 struct port100;
102
103 typedef void (*port100_send_async_complete_t)(struct port100 *dev, void *arg,
104                                               struct sk_buff *resp);
105
106 /**
107  * Setting sets structure for in_set_rf command
108  *
109  * @in_*_set_number: Represent the entry indexes in the port-100 RF Base Table.
110  *              This table contains multiple RF setting sets required for RF
111  *              communication.
112  *
113  * @in_*_comm_type: Theses fields set the communication type to be used.
114  */
115 struct port100_in_rf_setting {
116         u8 in_send_set_number;
117         u8 in_send_comm_type;
118         u8 in_recv_set_number;
119         u8 in_recv_comm_type;
120 } __packed;
121
122 #define PORT100_COMM_TYPE_IN_212F 0x01
123 #define PORT100_COMM_TYPE_IN_424F 0x02
124 #define PORT100_COMM_TYPE_IN_106A 0x03
125 #define PORT100_COMM_TYPE_IN_106B 0x07
126
127 static const struct port100_in_rf_setting in_rf_settings[] = {
128         [NFC_DIGITAL_RF_TECH_212F] = {
129                 .in_send_set_number = 1,
130                 .in_send_comm_type  = PORT100_COMM_TYPE_IN_212F,
131                 .in_recv_set_number = 15,
132                 .in_recv_comm_type  = PORT100_COMM_TYPE_IN_212F,
133         },
134         [NFC_DIGITAL_RF_TECH_424F] = {
135                 .in_send_set_number = 1,
136                 .in_send_comm_type  = PORT100_COMM_TYPE_IN_424F,
137                 .in_recv_set_number = 15,
138                 .in_recv_comm_type  = PORT100_COMM_TYPE_IN_424F,
139         },
140         [NFC_DIGITAL_RF_TECH_106A] = {
141                 .in_send_set_number = 2,
142                 .in_send_comm_type  = PORT100_COMM_TYPE_IN_106A,
143                 .in_recv_set_number = 15,
144                 .in_recv_comm_type  = PORT100_COMM_TYPE_IN_106A,
145         },
146         [NFC_DIGITAL_RF_TECH_106B] = {
147                 .in_send_set_number = 3,
148                 .in_send_comm_type  = PORT100_COMM_TYPE_IN_106B,
149                 .in_recv_set_number = 15,
150                 .in_recv_comm_type  = PORT100_COMM_TYPE_IN_106B,
151         },
152         /* Ensures the array has NFC_DIGITAL_RF_TECH_LAST elements */
153         [NFC_DIGITAL_RF_TECH_LAST] = { 0 },
154 };
155
156 /**
157  * Setting sets structure for tg_set_rf command
158  *
159  * @tg_set_number: Represents the entry index in the port-100 RF Base Table.
160  *                 This table contains multiple RF setting sets required for RF
161  *                 communication. this field is used for both send and receive
162  *                 settings.
163  *
164  * @tg_comm_type: Sets the communication type to be used to send and receive
165  *                data.
166  */
167 struct port100_tg_rf_setting {
168         u8 tg_set_number;
169         u8 tg_comm_type;
170 } __packed;
171
172 #define PORT100_COMM_TYPE_TG_106A 0x0B
173 #define PORT100_COMM_TYPE_TG_212F 0x0C
174 #define PORT100_COMM_TYPE_TG_424F 0x0D
175
176 static const struct port100_tg_rf_setting tg_rf_settings[] = {
177         [NFC_DIGITAL_RF_TECH_106A] = {
178                 .tg_set_number = 8,
179                 .tg_comm_type = PORT100_COMM_TYPE_TG_106A,
180         },
181         [NFC_DIGITAL_RF_TECH_212F] = {
182                 .tg_set_number = 8,
183                 .tg_comm_type = PORT100_COMM_TYPE_TG_212F,
184         },
185         [NFC_DIGITAL_RF_TECH_424F] = {
186                 .tg_set_number = 8,
187                 .tg_comm_type = PORT100_COMM_TYPE_TG_424F,
188         },
189         /* Ensures the array has NFC_DIGITAL_RF_TECH_LAST elements */
190         [NFC_DIGITAL_RF_TECH_LAST] = { 0 },
191
192 };
193
194 #define PORT100_IN_PROT_INITIAL_GUARD_TIME      0x00
195 #define PORT100_IN_PROT_ADD_CRC                 0x01
196 #define PORT100_IN_PROT_CHECK_CRC               0x02
197 #define PORT100_IN_PROT_MULTI_CARD              0x03
198 #define PORT100_IN_PROT_ADD_PARITY              0x04
199 #define PORT100_IN_PROT_CHECK_PARITY            0x05
200 #define PORT100_IN_PROT_BITWISE_AC_RECV_MODE    0x06
201 #define PORT100_IN_PROT_VALID_BIT_NUMBER        0x07
202 #define PORT100_IN_PROT_CRYPTO1                 0x08
203 #define PORT100_IN_PROT_ADD_SOF                 0x09
204 #define PORT100_IN_PROT_CHECK_SOF               0x0A
205 #define PORT100_IN_PROT_ADD_EOF                 0x0B
206 #define PORT100_IN_PROT_CHECK_EOF               0x0C
207 #define PORT100_IN_PROT_DEAF_TIME               0x0E
208 #define PORT100_IN_PROT_CRM                     0x0F
209 #define PORT100_IN_PROT_CRM_MIN_LEN             0x10
210 #define PORT100_IN_PROT_T1_TAG_FRAME            0x11
211 #define PORT100_IN_PROT_RFCA                    0x12
212 #define PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR 0x13
213 #define PORT100_IN_PROT_END                     0x14
214
215 #define PORT100_IN_MAX_NUM_PROTOCOLS            19
216
217 #define PORT100_TG_PROT_TU           0x00
218 #define PORT100_TG_PROT_RF_OFF       0x01
219 #define PORT100_TG_PROT_CRM          0x02
220 #define PORT100_TG_PROT_END          0x03
221
222 #define PORT100_TG_MAX_NUM_PROTOCOLS 3
223
224 struct port100_protocol {
225         u8 number;
226         u8 value;
227 } __packed;
228
229 static struct port100_protocol
230 in_protocols[][PORT100_IN_MAX_NUM_PROTOCOLS + 1] = {
231         [NFC_DIGITAL_FRAMING_NFCA_SHORT] = {
232                 { PORT100_IN_PROT_INITIAL_GUARD_TIME,      6 },
233                 { PORT100_IN_PROT_ADD_CRC,                 0 },
234                 { PORT100_IN_PROT_CHECK_CRC,               0 },
235                 { PORT100_IN_PROT_MULTI_CARD,              0 },
236                 { PORT100_IN_PROT_ADD_PARITY,              0 },
237                 { PORT100_IN_PROT_CHECK_PARITY,            1 },
238                 { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
239                 { PORT100_IN_PROT_VALID_BIT_NUMBER,        7 },
240                 { PORT100_IN_PROT_CRYPTO1,                 0 },
241                 { PORT100_IN_PROT_ADD_SOF,                 0 },
242                 { PORT100_IN_PROT_CHECK_SOF,               0 },
243                 { PORT100_IN_PROT_ADD_EOF,                 0 },
244                 { PORT100_IN_PROT_CHECK_EOF,               0 },
245                 { PORT100_IN_PROT_DEAF_TIME,               4 },
246                 { PORT100_IN_PROT_CRM,                     0 },
247                 { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
248                 { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
249                 { PORT100_IN_PROT_RFCA,                    0 },
250                 { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
251                 { PORT100_IN_PROT_END,                     0 },
252         },
253         [NFC_DIGITAL_FRAMING_NFCA_STANDARD] = {
254                 { PORT100_IN_PROT_INITIAL_GUARD_TIME,      6 },
255                 { PORT100_IN_PROT_ADD_CRC,                 0 },
256                 { PORT100_IN_PROT_CHECK_CRC,               0 },
257                 { PORT100_IN_PROT_MULTI_CARD,              0 },
258                 { PORT100_IN_PROT_ADD_PARITY,              1 },
259                 { PORT100_IN_PROT_CHECK_PARITY,            1 },
260                 { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
261                 { PORT100_IN_PROT_VALID_BIT_NUMBER,        8 },
262                 { PORT100_IN_PROT_CRYPTO1,                 0 },
263                 { PORT100_IN_PROT_ADD_SOF,                 0 },
264                 { PORT100_IN_PROT_CHECK_SOF,               0 },
265                 { PORT100_IN_PROT_ADD_EOF,                 0 },
266                 { PORT100_IN_PROT_CHECK_EOF,               0 },
267                 { PORT100_IN_PROT_DEAF_TIME,               4 },
268                 { PORT100_IN_PROT_CRM,                     0 },
269                 { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
270                 { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
271                 { PORT100_IN_PROT_RFCA,                    0 },
272                 { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
273                 { PORT100_IN_PROT_END,                     0 },
274         },
275         [NFC_DIGITAL_FRAMING_NFCA_STANDARD_WITH_CRC_A] = {
276                 { PORT100_IN_PROT_INITIAL_GUARD_TIME,      6 },
277                 { PORT100_IN_PROT_ADD_CRC,                 1 },
278                 { PORT100_IN_PROT_CHECK_CRC,               1 },
279                 { PORT100_IN_PROT_MULTI_CARD,              0 },
280                 { PORT100_IN_PROT_ADD_PARITY,              1 },
281                 { PORT100_IN_PROT_CHECK_PARITY,            1 },
282                 { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
283                 { PORT100_IN_PROT_VALID_BIT_NUMBER,        8 },
284                 { PORT100_IN_PROT_CRYPTO1,                 0 },
285                 { PORT100_IN_PROT_ADD_SOF,                 0 },
286                 { PORT100_IN_PROT_CHECK_SOF,               0 },
287                 { PORT100_IN_PROT_ADD_EOF,                 0 },
288                 { PORT100_IN_PROT_CHECK_EOF,               0 },
289                 { PORT100_IN_PROT_DEAF_TIME,               4 },
290                 { PORT100_IN_PROT_CRM,                     0 },
291                 { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
292                 { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
293                 { PORT100_IN_PROT_RFCA,                    0 },
294                 { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
295                 { PORT100_IN_PROT_END,                     0 },
296         },
297         [NFC_DIGITAL_FRAMING_NFCA_T1T] = {
298                 /* nfc_digital_framing_nfca_short */
299                 { PORT100_IN_PROT_ADD_CRC,          2 },
300                 { PORT100_IN_PROT_CHECK_CRC,        2 },
301                 { PORT100_IN_PROT_VALID_BIT_NUMBER, 8 },
302                 { PORT100_IN_PROT_T1_TAG_FRAME,     2 },
303                 { PORT100_IN_PROT_END,              0 },
304         },
305         [NFC_DIGITAL_FRAMING_NFCA_T2T] = {
306                 /* nfc_digital_framing_nfca_standard */
307                 { PORT100_IN_PROT_ADD_CRC,   1 },
308                 { PORT100_IN_PROT_CHECK_CRC, 0 },
309                 { PORT100_IN_PROT_END,       0 },
310         },
311         [NFC_DIGITAL_FRAMING_NFCA_T4T] = {
312                 /* nfc_digital_framing_nfca_standard_with_crc_a */
313                 { PORT100_IN_PROT_END,       0 },
314         },
315         [NFC_DIGITAL_FRAMING_NFCA_NFC_DEP] = {
316                 /* nfc_digital_framing_nfca_standard */
317                 { PORT100_IN_PROT_END, 0 },
318         },
319         [NFC_DIGITAL_FRAMING_NFCF] = {
320                 { PORT100_IN_PROT_INITIAL_GUARD_TIME,     18 },
321                 { PORT100_IN_PROT_ADD_CRC,                 1 },
322                 { PORT100_IN_PROT_CHECK_CRC,               1 },
323                 { PORT100_IN_PROT_MULTI_CARD,              0 },
324                 { PORT100_IN_PROT_ADD_PARITY,              0 },
325                 { PORT100_IN_PROT_CHECK_PARITY,            0 },
326                 { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
327                 { PORT100_IN_PROT_VALID_BIT_NUMBER,        8 },
328                 { PORT100_IN_PROT_CRYPTO1,                 0 },
329                 { PORT100_IN_PROT_ADD_SOF,                 0 },
330                 { PORT100_IN_PROT_CHECK_SOF,               0 },
331                 { PORT100_IN_PROT_ADD_EOF,                 0 },
332                 { PORT100_IN_PROT_CHECK_EOF,               0 },
333                 { PORT100_IN_PROT_DEAF_TIME,               4 },
334                 { PORT100_IN_PROT_CRM,                     0 },
335                 { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
336                 { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
337                 { PORT100_IN_PROT_RFCA,                    0 },
338                 { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
339                 { PORT100_IN_PROT_END,                     0 },
340         },
341         [NFC_DIGITAL_FRAMING_NFCF_T3T] = {
342                 /* nfc_digital_framing_nfcf */
343                 { PORT100_IN_PROT_END, 0 },
344         },
345         [NFC_DIGITAL_FRAMING_NFCF_NFC_DEP] = {
346                 /* nfc_digital_framing_nfcf */
347                 { PORT100_IN_PROT_INITIAL_GUARD_TIME,     18 },
348                 { PORT100_IN_PROT_ADD_CRC,                 1 },
349                 { PORT100_IN_PROT_CHECK_CRC,               1 },
350                 { PORT100_IN_PROT_MULTI_CARD,              0 },
351                 { PORT100_IN_PROT_ADD_PARITY,              0 },
352                 { PORT100_IN_PROT_CHECK_PARITY,            0 },
353                 { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
354                 { PORT100_IN_PROT_VALID_BIT_NUMBER,        8 },
355                 { PORT100_IN_PROT_CRYPTO1,                 0 },
356                 { PORT100_IN_PROT_ADD_SOF,                 0 },
357                 { PORT100_IN_PROT_CHECK_SOF,               0 },
358                 { PORT100_IN_PROT_ADD_EOF,                 0 },
359                 { PORT100_IN_PROT_CHECK_EOF,               0 },
360                 { PORT100_IN_PROT_DEAF_TIME,               4 },
361                 { PORT100_IN_PROT_CRM,                     0 },
362                 { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
363                 { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
364                 { PORT100_IN_PROT_RFCA,                    0 },
365                 { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
366                 { PORT100_IN_PROT_END,                     0 },
367         },
368         [NFC_DIGITAL_FRAMING_NFC_DEP_ACTIVATED] = {
369                 { PORT100_IN_PROT_END, 0 },
370         },
371         [NFC_DIGITAL_FRAMING_NFCB] = {
372                 { PORT100_IN_PROT_INITIAL_GUARD_TIME,     20 },
373                 { PORT100_IN_PROT_ADD_CRC,                 1 },
374                 { PORT100_IN_PROT_CHECK_CRC,               1 },
375                 { PORT100_IN_PROT_MULTI_CARD,              0 },
376                 { PORT100_IN_PROT_ADD_PARITY,              0 },
377                 { PORT100_IN_PROT_CHECK_PARITY,            0 },
378                 { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
379                 { PORT100_IN_PROT_VALID_BIT_NUMBER,        8 },
380                 { PORT100_IN_PROT_CRYPTO1,                 0 },
381                 { PORT100_IN_PROT_ADD_SOF,                 1 },
382                 { PORT100_IN_PROT_CHECK_SOF,               1 },
383                 { PORT100_IN_PROT_ADD_EOF,                 1 },
384                 { PORT100_IN_PROT_CHECK_EOF,               1 },
385                 { PORT100_IN_PROT_DEAF_TIME,               4 },
386                 { PORT100_IN_PROT_CRM,                     0 },
387                 { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
388                 { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
389                 { PORT100_IN_PROT_RFCA,                    0 },
390                 { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
391                 { PORT100_IN_PROT_END,                     0 },
392         },
393         [NFC_DIGITAL_FRAMING_NFCB_T4T] = {
394                 /* nfc_digital_framing_nfcb */
395                 { PORT100_IN_PROT_END,                     0 },
396         },
397         /* Ensures the array has NFC_DIGITAL_FRAMING_LAST elements */
398         [NFC_DIGITAL_FRAMING_LAST] = {
399                 { PORT100_IN_PROT_END, 0 },
400         },
401 };
402
403 static struct port100_protocol
404 tg_protocols[][PORT100_TG_MAX_NUM_PROTOCOLS + 1] = {
405         [NFC_DIGITAL_FRAMING_NFCA_SHORT] = {
406                 { PORT100_TG_PROT_END, 0 },
407         },
408         [NFC_DIGITAL_FRAMING_NFCA_STANDARD] = {
409                 { PORT100_TG_PROT_END, 0 },
410         },
411         [NFC_DIGITAL_FRAMING_NFCA_STANDARD_WITH_CRC_A] = {
412                 { PORT100_TG_PROT_END, 0 },
413         },
414         [NFC_DIGITAL_FRAMING_NFCA_T1T] = {
415                 { PORT100_TG_PROT_END, 0 },
416         },
417         [NFC_DIGITAL_FRAMING_NFCA_T2T] = {
418                 { PORT100_TG_PROT_END, 0 },
419         },
420         [NFC_DIGITAL_FRAMING_NFCA_NFC_DEP] = {
421                 { PORT100_TG_PROT_TU,     1 },
422                 { PORT100_TG_PROT_RF_OFF, 0 },
423                 { PORT100_TG_PROT_CRM,    7 },
424                 { PORT100_TG_PROT_END,    0 },
425         },
426         [NFC_DIGITAL_FRAMING_NFCF] = {
427                 { PORT100_TG_PROT_END, 0 },
428         },
429         [NFC_DIGITAL_FRAMING_NFCF_T3T] = {
430                 { PORT100_TG_PROT_END, 0 },
431         },
432         [NFC_DIGITAL_FRAMING_NFCF_NFC_DEP] = {
433                 { PORT100_TG_PROT_TU,     1 },
434                 { PORT100_TG_PROT_RF_OFF, 0 },
435                 { PORT100_TG_PROT_CRM,    7 },
436                 { PORT100_TG_PROT_END,    0 },
437         },
438         [NFC_DIGITAL_FRAMING_NFC_DEP_ACTIVATED] = {
439                 { PORT100_TG_PROT_RF_OFF, 1 },
440                 { PORT100_TG_PROT_END,    0 },
441         },
442         /* Ensures the array has NFC_DIGITAL_FRAMING_LAST elements */
443         [NFC_DIGITAL_FRAMING_LAST] = {
444                 { PORT100_TG_PROT_END,    0 },
445         },
446 };
447
448 struct port100 {
449         struct nfc_digital_dev *nfc_digital_dev;
450
451         int skb_headroom;
452         int skb_tailroom;
453
454         struct usb_device *udev;
455         struct usb_interface *interface;
456
457         struct urb *out_urb;
458         struct urb *in_urb;
459
460         /* This mutex protects the out_urb and avoids to submit a new command
461          * through port100_send_frame_async() while the previous one is being
462          * canceled through port100_abort_cmd().
463          */
464         struct mutex out_urb_lock;
465
466         struct work_struct cmd_complete_work;
467
468         u8 cmd_type;
469
470         /* The digital stack serializes commands to be sent. There is no need
471          * for any queuing/locking mechanism at driver level.
472          */
473         struct port100_cmd *cmd;
474
475         bool cmd_cancel;
476         struct completion cmd_cancel_done;
477 };
478
479 struct port100_cmd {
480         u8 code;
481         int status;
482         struct sk_buff *req;
483         struct sk_buff *resp;
484         int resp_len;
485         port100_send_async_complete_t  complete_cb;
486         void *complete_cb_context;
487 };
488
489 struct port100_frame {
490         u8 preamble;
491         __be16 start_frame;
492         __be16 extended_frame;
493         __le16 datalen;
494         u8 datalen_checksum;
495         u8 data[];
496 } __packed;
497
498 struct port100_ack_frame {
499         u8 preamble;
500         __be16 start_frame;
501         __be16 ack_frame;
502         u8 postambule;
503 } __packed;
504
505 struct port100_cb_arg {
506         nfc_digital_cmd_complete_t complete_cb;
507         void *complete_arg;
508         u8 mdaa;
509 };
510
511 struct port100_tg_comm_rf_cmd {
512         __le16 guard_time;
513         __le16 send_timeout;
514         u8 mdaa;
515         u8 nfca_param[6];
516         u8 nfcf_param[18];
517         u8 mf_halted;
518         u8 arae_flag;
519         __le16 recv_timeout;
520         u8 data[];
521 } __packed;
522
523 struct port100_tg_comm_rf_res {
524         u8 comm_type;
525         u8 ar_status;
526         u8 target_activated;
527         __le32 status;
528         u8 data[];
529 } __packed;
530
531 /* The rule: value + checksum = 0 */
532 static inline u8 port100_checksum(u16 value)
533 {
534         return ~(((u8 *)&value)[0] + ((u8 *)&value)[1]) + 1;
535 }
536
537 /* The rule: sum(data elements) + checksum = 0 */
538 static u8 port100_data_checksum(u8 *data, int datalen)
539 {
540         u8 sum = 0;
541         int i;
542
543         for (i = 0; i < datalen; i++)
544                 sum += data[i];
545
546         return port100_checksum(sum);
547 }
548
549 static void port100_tx_frame_init(void *_frame, u8 cmd_code)
550 {
551         struct port100_frame *frame = _frame;
552
553         frame->preamble = 0;
554         frame->start_frame = cpu_to_be16(PORT100_FRAME_SOF);
555         frame->extended_frame = cpu_to_be16(PORT100_FRAME_EXT);
556         PORT100_FRAME_DIRECTION(frame) = PORT100_FRAME_DIR_OUT;
557         PORT100_FRAME_CMD(frame) = cmd_code;
558         frame->datalen = cpu_to_le16(2);
559 }
560
561 static void port100_tx_frame_finish(void *_frame)
562 {
563         struct port100_frame *frame = _frame;
564
565         frame->datalen_checksum = port100_checksum(le16_to_cpu(frame->datalen));
566
567         PORT100_FRAME_CHECKSUM(frame) =
568                 port100_data_checksum(frame->data, le16_to_cpu(frame->datalen));
569
570         PORT100_FRAME_POSTAMBLE(frame) = 0;
571 }
572
573 static void port100_tx_update_payload_len(void *_frame, int len)
574 {
575         struct port100_frame *frame = _frame;
576
577         frame->datalen = cpu_to_le16(le16_to_cpu(frame->datalen) + len);
578 }
579
580 static bool port100_rx_frame_is_valid(void *_frame)
581 {
582         u8 checksum;
583         struct port100_frame *frame = _frame;
584
585         if (frame->start_frame != cpu_to_be16(PORT100_FRAME_SOF) ||
586             frame->extended_frame != cpu_to_be16(PORT100_FRAME_EXT))
587                 return false;
588
589         checksum = port100_checksum(le16_to_cpu(frame->datalen));
590         if (checksum != frame->datalen_checksum)
591                 return false;
592
593         checksum = port100_data_checksum(frame->data,
594                                          le16_to_cpu(frame->datalen));
595         if (checksum != PORT100_FRAME_CHECKSUM(frame))
596                 return false;
597
598         return true;
599 }
600
601 static bool port100_rx_frame_is_ack(struct port100_ack_frame *frame)
602 {
603         return (frame->start_frame == cpu_to_be16(PORT100_FRAME_SOF) &&
604                 frame->ack_frame == cpu_to_be16(PORT100_FRAME_ACK));
605 }
606
607 static inline int port100_rx_frame_size(void *frame)
608 {
609         struct port100_frame *f = frame;
610
611         return sizeof(struct port100_frame) + le16_to_cpu(f->datalen) +
612                PORT100_FRAME_TAIL_LEN;
613 }
614
615 static bool port100_rx_frame_is_cmd_response(struct port100 *dev, void *frame)
616 {
617         struct port100_frame *f = frame;
618
619         return (PORT100_FRAME_CMD(f) == PORT100_CMD_RESPONSE(dev->cmd->code));
620 }
621
622 static void port100_recv_response(struct urb *urb)
623 {
624         struct port100 *dev = urb->context;
625         struct port100_cmd *cmd = dev->cmd;
626         u8 *in_frame;
627
628         cmd->status = urb->status;
629
630         switch (urb->status) {
631         case 0:
632                 break; /* success */
633         case -ECONNRESET:
634         case -ENOENT:
635                 nfc_err(&dev->interface->dev,
636                         "The urb has been canceled (status %d)\n", urb->status);
637                 goto sched_wq;
638         case -ESHUTDOWN:
639         default:
640                 nfc_err(&dev->interface->dev, "Urb failure (status %d)\n",
641                         urb->status);
642                 goto sched_wq;
643         }
644
645         in_frame = dev->in_urb->transfer_buffer;
646
647         if (!port100_rx_frame_is_valid(in_frame)) {
648                 nfc_err(&dev->interface->dev, "Received an invalid frame\n");
649                 cmd->status = -EIO;
650                 goto sched_wq;
651         }
652
653         print_hex_dump_debug("PORT100 RX: ", DUMP_PREFIX_NONE, 16, 1, in_frame,
654                              port100_rx_frame_size(in_frame), false);
655
656         if (!port100_rx_frame_is_cmd_response(dev, in_frame)) {
657                 nfc_err(&dev->interface->dev,
658                         "It's not the response to the last command\n");
659                 cmd->status = -EIO;
660                 goto sched_wq;
661         }
662
663 sched_wq:
664         schedule_work(&dev->cmd_complete_work);
665 }
666
667 static int port100_submit_urb_for_response(struct port100 *dev, gfp_t flags)
668 {
669         dev->in_urb->complete = port100_recv_response;
670
671         return usb_submit_urb(dev->in_urb, flags);
672 }
673
674 static void port100_recv_ack(struct urb *urb)
675 {
676         struct port100 *dev = urb->context;
677         struct port100_cmd *cmd = dev->cmd;
678         struct port100_ack_frame *in_frame;
679         int rc;
680
681         cmd->status = urb->status;
682
683         switch (urb->status) {
684         case 0:
685                 break; /* success */
686         case -ECONNRESET:
687         case -ENOENT:
688                 nfc_err(&dev->interface->dev,
689                         "The urb has been stopped (status %d)\n", urb->status);
690                 goto sched_wq;
691         case -ESHUTDOWN:
692         default:
693                 nfc_err(&dev->interface->dev, "Urb failure (status %d)\n",
694                         urb->status);
695                 goto sched_wq;
696         }
697
698         in_frame = dev->in_urb->transfer_buffer;
699
700         if (!port100_rx_frame_is_ack(in_frame)) {
701                 nfc_err(&dev->interface->dev, "Received an invalid ack\n");
702                 cmd->status = -EIO;
703                 goto sched_wq;
704         }
705
706         rc = port100_submit_urb_for_response(dev, GFP_ATOMIC);
707         if (rc) {
708                 nfc_err(&dev->interface->dev,
709                         "usb_submit_urb failed with result %d\n", rc);
710                 cmd->status = rc;
711                 goto sched_wq;
712         }
713
714         return;
715
716 sched_wq:
717         schedule_work(&dev->cmd_complete_work);
718 }
719
720 static int port100_submit_urb_for_ack(struct port100 *dev, gfp_t flags)
721 {
722         dev->in_urb->complete = port100_recv_ack;
723
724         return usb_submit_urb(dev->in_urb, flags);
725 }
726
727 static int port100_send_ack(struct port100 *dev)
728 {
729         int rc = 0;
730
731         mutex_lock(&dev->out_urb_lock);
732
733         /*
734          * If prior cancel is in-flight (dev->cmd_cancel == true), we
735          * can skip to send cancel. Then this will wait the prior
736          * cancel, or merged into the next cancel rarely if next
737          * cancel was started before waiting done. In any case, this
738          * will be waked up soon or later.
739          */
740         if (!dev->cmd_cancel) {
741                 reinit_completion(&dev->cmd_cancel_done);
742
743                 usb_kill_urb(dev->out_urb);
744
745                 dev->out_urb->transfer_buffer = ack_frame;
746                 dev->out_urb->transfer_buffer_length = sizeof(ack_frame);
747                 rc = usb_submit_urb(dev->out_urb, GFP_KERNEL);
748
749                 /*
750                  * Set the cmd_cancel flag only if the URB has been
751                  * successfully submitted. It will be reset by the out
752                  * URB completion callback port100_send_complete().
753                  */
754                 dev->cmd_cancel = !rc;
755         }
756
757         mutex_unlock(&dev->out_urb_lock);
758
759         if (!rc)
760                 wait_for_completion(&dev->cmd_cancel_done);
761
762         return rc;
763 }
764
765 static int port100_send_frame_async(struct port100 *dev, struct sk_buff *out,
766                                     struct sk_buff *in, int in_len)
767 {
768         int rc;
769
770         mutex_lock(&dev->out_urb_lock);
771
772         /* A command cancel frame as been sent through dev->out_urb. Don't try
773          * to submit a new one.
774          */
775         if (dev->cmd_cancel) {
776                 rc = -EAGAIN;
777                 goto exit;
778         }
779
780         dev->out_urb->transfer_buffer = out->data;
781         dev->out_urb->transfer_buffer_length = out->len;
782
783         dev->in_urb->transfer_buffer = in->data;
784         dev->in_urb->transfer_buffer_length = in_len;
785
786         print_hex_dump_debug("PORT100 TX: ", DUMP_PREFIX_NONE, 16, 1,
787                              out->data, out->len, false);
788
789         rc = usb_submit_urb(dev->out_urb, GFP_KERNEL);
790         if (rc)
791                 goto exit;
792
793         rc = port100_submit_urb_for_ack(dev, GFP_KERNEL);
794         if (rc)
795                 usb_unlink_urb(dev->out_urb);
796
797 exit:
798         mutex_unlock(&dev->out_urb_lock);
799
800         return rc;
801 }
802
803 static void port100_build_cmd_frame(struct port100 *dev, u8 cmd_code,
804                                     struct sk_buff *skb)
805 {
806         /* payload is already there, just update datalen */
807         int payload_len = skb->len;
808
809         skb_push(skb, PORT100_FRAME_HEADER_LEN);
810         skb_put(skb, PORT100_FRAME_TAIL_LEN);
811
812         port100_tx_frame_init(skb->data, cmd_code);
813         port100_tx_update_payload_len(skb->data, payload_len);
814         port100_tx_frame_finish(skb->data);
815 }
816
817 static void port100_send_async_complete(struct port100 *dev)
818 {
819         struct port100_cmd *cmd = dev->cmd;
820         int status = cmd->status;
821
822         struct sk_buff *req = cmd->req;
823         struct sk_buff *resp = cmd->resp;
824
825         dev_kfree_skb(req);
826
827         dev->cmd = NULL;
828
829         if (status < 0) {
830                 cmd->complete_cb(dev, cmd->complete_cb_context,
831                                  ERR_PTR(status));
832                 dev_kfree_skb(resp);
833                 goto done;
834         }
835
836         skb_put(resp, port100_rx_frame_size(resp->data));
837         skb_pull(resp, PORT100_FRAME_HEADER_LEN);
838         skb_trim(resp, resp->len - PORT100_FRAME_TAIL_LEN);
839
840         cmd->complete_cb(dev, cmd->complete_cb_context, resp);
841
842 done:
843         kfree(cmd);
844 }
845
846 static int port100_send_cmd_async(struct port100 *dev, u8 cmd_code,
847                                 struct sk_buff *req,
848                                 port100_send_async_complete_t complete_cb,
849                                 void *complete_cb_context)
850 {
851         struct port100_cmd *cmd;
852         struct sk_buff *resp;
853         int rc;
854         int  resp_len = PORT100_FRAME_HEADER_LEN +
855                         PORT100_FRAME_MAX_PAYLOAD_LEN +
856                         PORT100_FRAME_TAIL_LEN;
857
858         if (dev->cmd) {
859                 nfc_err(&dev->interface->dev,
860                         "A command is still in process\n");
861                 return -EBUSY;
862         }
863
864         resp = alloc_skb(resp_len, GFP_KERNEL);
865         if (!resp)
866                 return -ENOMEM;
867
868         cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
869         if (!cmd) {
870                 dev_kfree_skb(resp);
871                 return -ENOMEM;
872         }
873
874         cmd->code = cmd_code;
875         cmd->req = req;
876         cmd->resp = resp;
877         cmd->resp_len = resp_len;
878         cmd->complete_cb = complete_cb;
879         cmd->complete_cb_context = complete_cb_context;
880
881         port100_build_cmd_frame(dev, cmd_code, req);
882
883         dev->cmd = cmd;
884
885         rc = port100_send_frame_async(dev, req, resp, resp_len);
886         if (rc) {
887                 kfree(cmd);
888                 dev_kfree_skb(resp);
889                 dev->cmd = NULL;
890         }
891
892         return rc;
893 }
894
895 struct port100_sync_cmd_response {
896         struct sk_buff *resp;
897         struct completion done;
898 };
899
900 static void port100_wq_cmd_complete(struct work_struct *work)
901 {
902         struct port100 *dev = container_of(work, struct port100,
903                                            cmd_complete_work);
904
905         port100_send_async_complete(dev);
906 }
907
908 static void port100_send_sync_complete(struct port100 *dev, void *_arg,
909                                       struct sk_buff *resp)
910 {
911         struct port100_sync_cmd_response *arg = _arg;
912
913         arg->resp = resp;
914         complete(&arg->done);
915 }
916
917 static struct sk_buff *port100_send_cmd_sync(struct port100 *dev, u8 cmd_code,
918                                              struct sk_buff *req)
919 {
920         int rc;
921         struct port100_sync_cmd_response arg;
922
923         init_completion(&arg.done);
924
925         rc = port100_send_cmd_async(dev, cmd_code, req,
926                                     port100_send_sync_complete, &arg);
927         if (rc) {
928                 dev_kfree_skb(req);
929                 return ERR_PTR(rc);
930         }
931
932         wait_for_completion(&arg.done);
933
934         return arg.resp;
935 }
936
937 static void port100_send_complete(struct urb *urb)
938 {
939         struct port100 *dev = urb->context;
940
941         if (dev->cmd_cancel) {
942                 complete_all(&dev->cmd_cancel_done);
943                 dev->cmd_cancel = false;
944         }
945
946         switch (urb->status) {
947         case 0:
948                 break; /* success */
949         case -ECONNRESET:
950         case -ENOENT:
951                 nfc_err(&dev->interface->dev,
952                         "The urb has been stopped (status %d)\n", urb->status);
953                 break;
954         case -ESHUTDOWN:
955         default:
956                 nfc_err(&dev->interface->dev, "Urb failure (status %d)\n",
957                         urb->status);
958         }
959 }
960
961 static void port100_abort_cmd(struct nfc_digital_dev *ddev)
962 {
963         struct port100 *dev = nfc_digital_get_drvdata(ddev);
964
965         /* An ack will cancel the last issued command */
966         port100_send_ack(dev);
967
968         /* cancel the urb request */
969         usb_kill_urb(dev->in_urb);
970 }
971
972 static struct sk_buff *port100_alloc_skb(struct port100 *dev, unsigned int size)
973 {
974         struct sk_buff *skb;
975
976         skb = alloc_skb(dev->skb_headroom + dev->skb_tailroom + size,
977                         GFP_KERNEL);
978         if (skb)
979                 skb_reserve(skb, dev->skb_headroom);
980
981         return skb;
982 }
983
984 static int port100_set_command_type(struct port100 *dev, u8 command_type)
985 {
986         struct sk_buff *skb;
987         struct sk_buff *resp;
988         int rc;
989
990         skb = port100_alloc_skb(dev, 1);
991         if (!skb)
992                 return -ENOMEM;
993
994         *(u8 *)skb_put(skb, sizeof(u8)) = command_type;
995
996         resp = port100_send_cmd_sync(dev, PORT100_CMD_SET_COMMAND_TYPE, skb);
997         if (IS_ERR(resp))
998                 return PTR_ERR(resp);
999
1000         rc = resp->data[0];
1001
1002         dev_kfree_skb(resp);
1003
1004         return rc;
1005 }
1006
1007 static u64 port100_get_command_type_mask(struct port100 *dev)
1008 {
1009         struct sk_buff *skb;
1010         struct sk_buff *resp;
1011         u64 mask;
1012
1013         skb = port100_alloc_skb(dev, 0);
1014         if (!skb)
1015                 return -ENOMEM;
1016
1017         resp = port100_send_cmd_sync(dev, PORT100_CMD_GET_COMMAND_TYPE, skb);
1018         if (IS_ERR(resp))
1019                 return PTR_ERR(resp);
1020
1021         if (resp->len < 8)
1022                 mask = 0;
1023         else
1024                 mask = be64_to_cpu(*(__be64 *)resp->data);
1025
1026         dev_kfree_skb(resp);
1027
1028         return mask;
1029 }
1030
1031 static u16 port100_get_firmware_version(struct port100 *dev)
1032 {
1033         struct sk_buff *skb;
1034         struct sk_buff *resp;
1035         u16 fw_ver;
1036
1037         skb = port100_alloc_skb(dev, 0);
1038         if (!skb)
1039                 return 0;
1040
1041         resp = port100_send_cmd_sync(dev, PORT100_CMD_GET_FIRMWARE_VERSION,
1042                                      skb);
1043         if (IS_ERR(resp))
1044                 return 0;
1045
1046         fw_ver = le16_to_cpu(*(__le16 *)resp->data);
1047
1048         dev_kfree_skb(resp);
1049
1050         return fw_ver;
1051 }
1052
1053 static int port100_switch_rf(struct nfc_digital_dev *ddev, bool on)
1054 {
1055         struct port100 *dev = nfc_digital_get_drvdata(ddev);
1056         struct sk_buff *skb, *resp;
1057
1058         skb = port100_alloc_skb(dev, 1);
1059         if (!skb)
1060                 return -ENOMEM;
1061
1062         *(u8 *)skb_put(skb, 1) = on ? 1 : 0;
1063
1064         /* Cancel the last command if the device is being switched off */
1065         if (!on)
1066                 port100_abort_cmd(ddev);
1067
1068         resp = port100_send_cmd_sync(dev, PORT100_CMD_SWITCH_RF, skb);
1069
1070         if (IS_ERR(resp))
1071                 return PTR_ERR(resp);
1072
1073         dev_kfree_skb(resp);
1074
1075         return 0;
1076 }
1077
1078 static int port100_in_set_rf(struct nfc_digital_dev *ddev, u8 rf)
1079 {
1080         struct port100 *dev = nfc_digital_get_drvdata(ddev);
1081         struct sk_buff *skb;
1082         struct sk_buff *resp;
1083         int rc;
1084
1085         if (rf >= NFC_DIGITAL_RF_TECH_LAST)
1086                 return -EINVAL;
1087
1088         skb = port100_alloc_skb(dev, sizeof(struct port100_in_rf_setting));
1089         if (!skb)
1090                 return -ENOMEM;
1091
1092         skb_put_data(skb, &in_rf_settings[rf],
1093                      sizeof(struct port100_in_rf_setting));
1094
1095         resp = port100_send_cmd_sync(dev, PORT100_CMD_IN_SET_RF, skb);
1096
1097         if (IS_ERR(resp))
1098                 return PTR_ERR(resp);
1099
1100         rc = resp->data[0];
1101
1102         dev_kfree_skb(resp);
1103
1104         return rc;
1105 }
1106
1107 static int port100_in_set_framing(struct nfc_digital_dev *ddev, int param)
1108 {
1109         struct port100 *dev = nfc_digital_get_drvdata(ddev);
1110         struct port100_protocol *protocols;
1111         struct sk_buff *skb;
1112         struct sk_buff *resp;
1113         int num_protocols;
1114         size_t size;
1115         int rc;
1116
1117         if (param >= NFC_DIGITAL_FRAMING_LAST)
1118                 return -EINVAL;
1119
1120         protocols = in_protocols[param];
1121
1122         num_protocols = 0;
1123         while (protocols[num_protocols].number != PORT100_IN_PROT_END)
1124                 num_protocols++;
1125
1126         if (!num_protocols)
1127                 return 0;
1128
1129         size = sizeof(struct port100_protocol) * num_protocols;
1130
1131         skb = port100_alloc_skb(dev, size);
1132         if (!skb)
1133                 return -ENOMEM;
1134
1135         skb_put_data(skb, protocols, size);
1136
1137         resp = port100_send_cmd_sync(dev, PORT100_CMD_IN_SET_PROTOCOL, skb);
1138
1139         if (IS_ERR(resp))
1140                 return PTR_ERR(resp);
1141
1142         rc = resp->data[0];
1143
1144         dev_kfree_skb(resp);
1145
1146         return rc;
1147 }
1148
1149 static int port100_in_configure_hw(struct nfc_digital_dev *ddev, int type,
1150                                    int param)
1151 {
1152         if (type == NFC_DIGITAL_CONFIG_RF_TECH)
1153                 return port100_in_set_rf(ddev, param);
1154
1155         if (type == NFC_DIGITAL_CONFIG_FRAMING)
1156                 return port100_in_set_framing(ddev, param);
1157
1158         return -EINVAL;
1159 }
1160
1161 static void port100_in_comm_rf_complete(struct port100 *dev, void *arg,
1162                                        struct sk_buff *resp)
1163 {
1164         struct port100_cb_arg *cb_arg = arg;
1165         nfc_digital_cmd_complete_t cb = cb_arg->complete_cb;
1166         u32 status;
1167         int rc;
1168
1169         if (IS_ERR(resp)) {
1170                 rc =  PTR_ERR(resp);
1171                 goto exit;
1172         }
1173
1174         if (resp->len < 4) {
1175                 nfc_err(&dev->interface->dev,
1176                         "Invalid packet length received\n");
1177                 rc = -EIO;
1178                 goto error;
1179         }
1180
1181         status = le32_to_cpu(*(__le32 *)resp->data);
1182
1183         skb_pull(resp, sizeof(u32));
1184
1185         if (status == PORT100_CMD_STATUS_TIMEOUT) {
1186                 rc = -ETIMEDOUT;
1187                 goto error;
1188         }
1189
1190         if (status != PORT100_CMD_STATUS_OK) {
1191                 nfc_err(&dev->interface->dev,
1192                         "in_comm_rf failed with status 0x%08x\n", status);
1193                 rc = -EIO;
1194                 goto error;
1195         }
1196
1197         /* Remove collision bits byte */
1198         skb_pull(resp, 1);
1199
1200         goto exit;
1201
1202 error:
1203         kfree_skb(resp);
1204         resp = ERR_PTR(rc);
1205
1206 exit:
1207         cb(dev->nfc_digital_dev, cb_arg->complete_arg, resp);
1208
1209         kfree(cb_arg);
1210 }
1211
1212 static int port100_in_send_cmd(struct nfc_digital_dev *ddev,
1213                                struct sk_buff *skb, u16 _timeout,
1214                                nfc_digital_cmd_complete_t cb, void *arg)
1215 {
1216         struct port100 *dev = nfc_digital_get_drvdata(ddev);
1217         struct port100_cb_arg *cb_arg;
1218         __le16 timeout;
1219
1220         cb_arg = kzalloc(sizeof(struct port100_cb_arg), GFP_KERNEL);
1221         if (!cb_arg)
1222                 return -ENOMEM;
1223
1224         cb_arg->complete_cb = cb;
1225         cb_arg->complete_arg = arg;
1226
1227         timeout = cpu_to_le16(_timeout * 10);
1228
1229         memcpy(skb_push(skb, sizeof(__le16)), &timeout, sizeof(__le16));
1230
1231         return port100_send_cmd_async(dev, PORT100_CMD_IN_COMM_RF, skb,
1232                                       port100_in_comm_rf_complete, cb_arg);
1233 }
1234
1235 static int port100_tg_set_rf(struct nfc_digital_dev *ddev, u8 rf)
1236 {
1237         struct port100 *dev = nfc_digital_get_drvdata(ddev);
1238         struct sk_buff *skb;
1239         struct sk_buff *resp;
1240         int rc;
1241
1242         if (rf >= NFC_DIGITAL_RF_TECH_LAST)
1243                 return -EINVAL;
1244
1245         skb = port100_alloc_skb(dev, sizeof(struct port100_tg_rf_setting));
1246         if (!skb)
1247                 return -ENOMEM;
1248
1249         skb_put_data(skb, &tg_rf_settings[rf],
1250                      sizeof(struct port100_tg_rf_setting));
1251
1252         resp = port100_send_cmd_sync(dev, PORT100_CMD_TG_SET_RF, skb);
1253
1254         if (IS_ERR(resp))
1255                 return PTR_ERR(resp);
1256
1257         rc = resp->data[0];
1258
1259         dev_kfree_skb(resp);
1260
1261         return rc;
1262 }
1263
1264 static int port100_tg_set_framing(struct nfc_digital_dev *ddev, int param)
1265 {
1266         struct port100 *dev = nfc_digital_get_drvdata(ddev);
1267         struct port100_protocol *protocols;
1268         struct sk_buff *skb;
1269         struct sk_buff *resp;
1270         int rc;
1271         int num_protocols;
1272         size_t size;
1273
1274         if (param >= NFC_DIGITAL_FRAMING_LAST)
1275                 return -EINVAL;
1276
1277         protocols = tg_protocols[param];
1278
1279         num_protocols = 0;
1280         while (protocols[num_protocols].number != PORT100_TG_PROT_END)
1281                 num_protocols++;
1282
1283         if (!num_protocols)
1284                 return 0;
1285
1286         size = sizeof(struct port100_protocol) * num_protocols;
1287
1288         skb = port100_alloc_skb(dev, size);
1289         if (!skb)
1290                 return -ENOMEM;
1291
1292         skb_put_data(skb, protocols, size);
1293
1294         resp = port100_send_cmd_sync(dev, PORT100_CMD_TG_SET_PROTOCOL, skb);
1295
1296         if (IS_ERR(resp))
1297                 return PTR_ERR(resp);
1298
1299         rc = resp->data[0];
1300
1301         dev_kfree_skb(resp);
1302
1303         return rc;
1304 }
1305
1306 static int port100_tg_configure_hw(struct nfc_digital_dev *ddev, int type,
1307                                    int param)
1308 {
1309         if (type == NFC_DIGITAL_CONFIG_RF_TECH)
1310                 return port100_tg_set_rf(ddev, param);
1311
1312         if (type == NFC_DIGITAL_CONFIG_FRAMING)
1313                 return port100_tg_set_framing(ddev, param);
1314
1315         return -EINVAL;
1316 }
1317
1318 static bool port100_tg_target_activated(struct port100 *dev, u8 tgt_activated)
1319 {
1320         u8 mask;
1321
1322         switch (dev->cmd_type) {
1323         case PORT100_CMD_TYPE_0:
1324                 mask = PORT100_MDAA_TGT_HAS_BEEN_ACTIVATED_MASK;
1325                 break;
1326         case PORT100_CMD_TYPE_1:
1327                 mask = PORT100_MDAA_TGT_HAS_BEEN_ACTIVATED_MASK |
1328                        PORT100_MDAA_TGT_WAS_ACTIVATED_MASK;
1329                 break;
1330         default:
1331                 nfc_err(&dev->interface->dev, "Unknown command type\n");
1332                 return false;
1333         }
1334
1335         return ((tgt_activated & mask) == mask);
1336 }
1337
1338 static void port100_tg_comm_rf_complete(struct port100 *dev, void *arg,
1339                                         struct sk_buff *resp)
1340 {
1341         u32 status;
1342         struct port100_cb_arg *cb_arg = arg;
1343         nfc_digital_cmd_complete_t cb = cb_arg->complete_cb;
1344         struct port100_tg_comm_rf_res *hdr;
1345
1346         if (IS_ERR(resp))
1347                 goto exit;
1348
1349         hdr = (struct port100_tg_comm_rf_res *)resp->data;
1350
1351         status = le32_to_cpu(hdr->status);
1352
1353         if (cb_arg->mdaa &&
1354             !port100_tg_target_activated(dev, hdr->target_activated)) {
1355                 kfree_skb(resp);
1356                 resp = ERR_PTR(-ETIMEDOUT);
1357
1358                 goto exit;
1359         }
1360
1361         skb_pull(resp, sizeof(struct port100_tg_comm_rf_res));
1362
1363         if (status != PORT100_CMD_STATUS_OK) {
1364                 kfree_skb(resp);
1365
1366                 if (status == PORT100_CMD_STATUS_TIMEOUT)
1367                         resp = ERR_PTR(-ETIMEDOUT);
1368                 else
1369                         resp = ERR_PTR(-EIO);
1370         }
1371
1372 exit:
1373         cb(dev->nfc_digital_dev, cb_arg->complete_arg, resp);
1374
1375         kfree(cb_arg);
1376 }
1377
1378 static int port100_tg_send_cmd(struct nfc_digital_dev *ddev,
1379                                struct sk_buff *skb, u16 timeout,
1380                                nfc_digital_cmd_complete_t cb, void *arg)
1381 {
1382         struct port100 *dev = nfc_digital_get_drvdata(ddev);
1383         struct port100_tg_comm_rf_cmd *hdr;
1384         struct port100_cb_arg *cb_arg;
1385
1386         cb_arg = kzalloc(sizeof(struct port100_cb_arg), GFP_KERNEL);
1387         if (!cb_arg)
1388                 return -ENOMEM;
1389
1390         cb_arg->complete_cb = cb;
1391         cb_arg->complete_arg = arg;
1392
1393         skb_push(skb, sizeof(struct port100_tg_comm_rf_cmd));
1394
1395         hdr = (struct port100_tg_comm_rf_cmd *)skb->data;
1396
1397         memset(hdr, 0, sizeof(struct port100_tg_comm_rf_cmd));
1398         hdr->guard_time = cpu_to_le16(500);
1399         hdr->send_timeout = cpu_to_le16(0xFFFF);
1400         hdr->recv_timeout = cpu_to_le16(timeout);
1401
1402         return port100_send_cmd_async(dev, PORT100_CMD_TG_COMM_RF, skb,
1403                                       port100_tg_comm_rf_complete, cb_arg);
1404 }
1405
1406 static int port100_listen_mdaa(struct nfc_digital_dev *ddev,
1407                                struct digital_tg_mdaa_params *params,
1408                                u16 timeout,
1409                                nfc_digital_cmd_complete_t cb, void *arg)
1410 {
1411         struct port100 *dev = nfc_digital_get_drvdata(ddev);
1412         struct port100_tg_comm_rf_cmd *hdr;
1413         struct port100_cb_arg *cb_arg;
1414         struct sk_buff *skb;
1415         int rc;
1416
1417         rc = port100_tg_configure_hw(ddev, NFC_DIGITAL_CONFIG_RF_TECH,
1418                                      NFC_DIGITAL_RF_TECH_106A);
1419         if (rc)
1420                 return rc;
1421
1422         rc = port100_tg_configure_hw(ddev, NFC_DIGITAL_CONFIG_FRAMING,
1423                                      NFC_DIGITAL_FRAMING_NFCA_NFC_DEP);
1424         if (rc)
1425                 return rc;
1426
1427         cb_arg = kzalloc(sizeof(struct port100_cb_arg), GFP_KERNEL);
1428         if (!cb_arg)
1429                 return -ENOMEM;
1430
1431         cb_arg->complete_cb = cb;
1432         cb_arg->complete_arg = arg;
1433         cb_arg->mdaa = 1;
1434
1435         skb = port100_alloc_skb(dev, 0);
1436         if (!skb) {
1437                 kfree(cb_arg);
1438                 return -ENOMEM;
1439         }
1440
1441         skb_push(skb, sizeof(struct port100_tg_comm_rf_cmd));
1442         hdr = (struct port100_tg_comm_rf_cmd *)skb->data;
1443
1444         memset(hdr, 0, sizeof(struct port100_tg_comm_rf_cmd));
1445
1446         hdr->guard_time = 0;
1447         hdr->send_timeout = cpu_to_le16(0xFFFF);
1448         hdr->mdaa = 1;
1449         hdr->nfca_param[0] = (params->sens_res >> 8) & 0xFF;
1450         hdr->nfca_param[1] = params->sens_res & 0xFF;
1451         memcpy(hdr->nfca_param + 2, params->nfcid1, 3);
1452         hdr->nfca_param[5] = params->sel_res;
1453         memcpy(hdr->nfcf_param, params->nfcid2, 8);
1454         hdr->nfcf_param[16] = (params->sc >> 8) & 0xFF;
1455         hdr->nfcf_param[17] = params->sc & 0xFF;
1456         hdr->recv_timeout = cpu_to_le16(timeout);
1457
1458         return port100_send_cmd_async(dev, PORT100_CMD_TG_COMM_RF, skb,
1459                                       port100_tg_comm_rf_complete, cb_arg);
1460 }
1461
1462 static int port100_listen(struct nfc_digital_dev *ddev, u16 timeout,
1463                           nfc_digital_cmd_complete_t cb, void *arg)
1464 {
1465         struct port100 *dev = nfc_digital_get_drvdata(ddev);
1466         struct sk_buff *skb;
1467
1468         skb = port100_alloc_skb(dev, 0);
1469         if (!skb)
1470                 return -ENOMEM;
1471
1472         return port100_tg_send_cmd(ddev, skb, timeout, cb, arg);
1473 }
1474
1475 static struct nfc_digital_ops port100_digital_ops = {
1476         .in_configure_hw = port100_in_configure_hw,
1477         .in_send_cmd = port100_in_send_cmd,
1478
1479         .tg_listen_mdaa = port100_listen_mdaa,
1480         .tg_listen = port100_listen,
1481         .tg_configure_hw = port100_tg_configure_hw,
1482         .tg_send_cmd = port100_tg_send_cmd,
1483
1484         .switch_rf = port100_switch_rf,
1485         .abort_cmd = port100_abort_cmd,
1486 };
1487
1488 static const struct usb_device_id port100_table[] = {
1489         { USB_DEVICE(SONY_VENDOR_ID, RCS380S_PRODUCT_ID), },
1490         { USB_DEVICE(SONY_VENDOR_ID, RCS380P_PRODUCT_ID), },
1491         { }
1492 };
1493 MODULE_DEVICE_TABLE(usb, port100_table);
1494
1495 static int port100_probe(struct usb_interface *interface,
1496                          const struct usb_device_id *id)
1497 {
1498         struct port100 *dev;
1499         int rc;
1500         struct usb_host_interface *iface_desc;
1501         struct usb_endpoint_descriptor *endpoint;
1502         int in_endpoint;
1503         int out_endpoint;
1504         u16 fw_version;
1505         u64 cmd_type_mask;
1506         int i;
1507
1508         dev = devm_kzalloc(&interface->dev, sizeof(struct port100), GFP_KERNEL);
1509         if (!dev)
1510                 return -ENOMEM;
1511
1512         mutex_init(&dev->out_urb_lock);
1513         dev->udev = usb_get_dev(interface_to_usbdev(interface));
1514         dev->interface = interface;
1515         usb_set_intfdata(interface, dev);
1516
1517         in_endpoint = out_endpoint = 0;
1518         iface_desc = interface->cur_altsetting;
1519         for (i = 0; i < iface_desc->desc.bNumEndpoints; ++i) {
1520                 endpoint = &iface_desc->endpoint[i].desc;
1521
1522                 if (!in_endpoint && usb_endpoint_is_bulk_in(endpoint))
1523                         in_endpoint = endpoint->bEndpointAddress;
1524
1525                 if (!out_endpoint && usb_endpoint_is_bulk_out(endpoint))
1526                         out_endpoint = endpoint->bEndpointAddress;
1527         }
1528
1529         if (!in_endpoint || !out_endpoint) {
1530                 nfc_err(&interface->dev,
1531                         "Could not find bulk-in or bulk-out endpoint\n");
1532                 rc = -ENODEV;
1533                 goto error;
1534         }
1535
1536         dev->in_urb = usb_alloc_urb(0, GFP_KERNEL);
1537         dev->out_urb = usb_alloc_urb(0, GFP_KERNEL);
1538
1539         if (!dev->in_urb || !dev->out_urb) {
1540                 nfc_err(&interface->dev, "Could not allocate USB URBs\n");
1541                 rc = -ENOMEM;
1542                 goto error;
1543         }
1544
1545         usb_fill_bulk_urb(dev->in_urb, dev->udev,
1546                           usb_rcvbulkpipe(dev->udev, in_endpoint),
1547                           NULL, 0, NULL, dev);
1548         usb_fill_bulk_urb(dev->out_urb, dev->udev,
1549                           usb_sndbulkpipe(dev->udev, out_endpoint),
1550                           NULL, 0, port100_send_complete, dev);
1551         dev->out_urb->transfer_flags = URB_ZERO_PACKET;
1552
1553         dev->skb_headroom = PORT100_FRAME_HEADER_LEN +
1554                             PORT100_COMM_RF_HEAD_MAX_LEN;
1555         dev->skb_tailroom = PORT100_FRAME_TAIL_LEN;
1556
1557         init_completion(&dev->cmd_cancel_done);
1558         INIT_WORK(&dev->cmd_complete_work, port100_wq_cmd_complete);
1559
1560         /* The first thing to do with the Port-100 is to set the command type
1561          * to be used. If supported we use command type 1. 0 otherwise.
1562          */
1563         cmd_type_mask = port100_get_command_type_mask(dev);
1564         if (!cmd_type_mask) {
1565                 nfc_err(&interface->dev,
1566                         "Could not get supported command types\n");
1567                 rc = -ENODEV;
1568                 goto error;
1569         }
1570
1571         if (PORT100_CMD_TYPE_IS_SUPPORTED(cmd_type_mask, PORT100_CMD_TYPE_1))
1572                 dev->cmd_type = PORT100_CMD_TYPE_1;
1573         else
1574                 dev->cmd_type = PORT100_CMD_TYPE_0;
1575
1576         rc = port100_set_command_type(dev, dev->cmd_type);
1577         if (rc) {
1578                 nfc_err(&interface->dev,
1579                         "The device does not support command type %u\n",
1580                         dev->cmd_type);
1581                 goto error;
1582         }
1583
1584         fw_version = port100_get_firmware_version(dev);
1585         if (!fw_version)
1586                 nfc_err(&interface->dev,
1587                         "Could not get device firmware version\n");
1588
1589         nfc_info(&interface->dev,
1590                  "Sony NFC Port-100 Series attached (firmware v%x.%02x)\n",
1591                  (fw_version & 0xFF00) >> 8, fw_version & 0xFF);
1592
1593         dev->nfc_digital_dev = nfc_digital_allocate_device(&port100_digital_ops,
1594                                                            PORT100_PROTOCOLS,
1595                                                            PORT100_CAPABILITIES,
1596                                                            dev->skb_headroom,
1597                                                            dev->skb_tailroom);
1598         if (!dev->nfc_digital_dev) {
1599                 nfc_err(&interface->dev,
1600                         "Could not allocate nfc_digital_dev\n");
1601                 rc = -ENOMEM;
1602                 goto error;
1603         }
1604
1605         nfc_digital_set_parent_dev(dev->nfc_digital_dev, &interface->dev);
1606         nfc_digital_set_drvdata(dev->nfc_digital_dev, dev);
1607
1608         rc = nfc_digital_register_device(dev->nfc_digital_dev);
1609         if (rc) {
1610                 nfc_err(&interface->dev,
1611                         "Could not register digital device\n");
1612                 goto free_nfc_dev;
1613         }
1614
1615         return 0;
1616
1617 free_nfc_dev:
1618         nfc_digital_free_device(dev->nfc_digital_dev);
1619
1620 error:
1621         usb_free_urb(dev->in_urb);
1622         usb_free_urb(dev->out_urb);
1623         usb_put_dev(dev->udev);
1624
1625         return rc;
1626 }
1627
1628 static void port100_disconnect(struct usb_interface *interface)
1629 {
1630         struct port100 *dev;
1631
1632         dev = usb_get_intfdata(interface);
1633         usb_set_intfdata(interface, NULL);
1634
1635         nfc_digital_unregister_device(dev->nfc_digital_dev);
1636         nfc_digital_free_device(dev->nfc_digital_dev);
1637
1638         usb_kill_urb(dev->in_urb);
1639         usb_kill_urb(dev->out_urb);
1640
1641         usb_free_urb(dev->in_urb);
1642         usb_free_urb(dev->out_urb);
1643         usb_put_dev(dev->udev);
1644
1645         kfree(dev->cmd);
1646
1647         nfc_info(&interface->dev, "Sony Port-100 NFC device disconnected\n");
1648 }
1649
1650 static struct usb_driver port100_driver = {
1651         .name =         "port100",
1652         .probe =        port100_probe,
1653         .disconnect =   port100_disconnect,
1654         .id_table =     port100_table,
1655 };
1656
1657 module_usb_driver(port100_driver);
1658
1659 MODULE_DESCRIPTION("NFC Port-100 series usb driver ver " VERSION);
1660 MODULE_VERSION(VERSION);
1661 MODULE_LICENSE("GPL");