| // SPDX-License-Identifier: GPL-2.0-only | 
 | /* | 
 |  * NFC Digital Protocol stack | 
 |  * Copyright (c) 2013, Intel Corporation. | 
 |  */ | 
 |  | 
 | #define pr_fmt(fmt) "digital: %s: " fmt, __func__ | 
 |  | 
 | #include "digital.h" | 
 |  | 
 | #define DIGITAL_NFC_DEP_N_RETRY_NACK	2 | 
 | #define DIGITAL_NFC_DEP_N_RETRY_ATN	2 | 
 |  | 
 | #define DIGITAL_NFC_DEP_FRAME_DIR_OUT 0xD4 | 
 | #define DIGITAL_NFC_DEP_FRAME_DIR_IN  0xD5 | 
 |  | 
 | #define DIGITAL_NFC_DEP_NFCA_SOD_SB   0xF0 | 
 |  | 
 | #define DIGITAL_CMD_ATR_REQ 0x00 | 
 | #define DIGITAL_CMD_ATR_RES 0x01 | 
 | #define DIGITAL_CMD_PSL_REQ 0x04 | 
 | #define DIGITAL_CMD_PSL_RES 0x05 | 
 | #define DIGITAL_CMD_DEP_REQ 0x06 | 
 | #define DIGITAL_CMD_DEP_RES 0x07 | 
 |  | 
 | #define DIGITAL_ATR_REQ_MIN_SIZE 16 | 
 | #define DIGITAL_ATR_REQ_MAX_SIZE 64 | 
 |  | 
 | #define DIGITAL_ATR_RES_TO_WT(s)	((s) & 0xF) | 
 |  | 
 | #define DIGITAL_DID_MAX	14 | 
 |  | 
 | #define DIGITAL_PAYLOAD_SIZE_MAX	254 | 
 | #define DIGITAL_PAYLOAD_BITS_TO_PP(s)	(((s) & 0x3) << 4) | 
 | #define DIGITAL_PAYLOAD_PP_TO_BITS(s)	(((s) >> 4) & 0x3) | 
 | #define DIGITAL_PAYLOAD_BITS_TO_FSL(s)	((s) & 0x3) | 
 | #define DIGITAL_PAYLOAD_FSL_TO_BITS(s)	((s) & 0x3) | 
 |  | 
 | #define DIGITAL_GB_BIT	0x02 | 
 |  | 
 | #define DIGITAL_NFC_DEP_PFB_TYPE(pfb) ((pfb) & 0xE0) | 
 |  | 
 | #define DIGITAL_NFC_DEP_PFB_TIMEOUT_BIT 0x10 | 
 | #define DIGITAL_NFC_DEP_PFB_MI_BIT	0x10 | 
 | #define DIGITAL_NFC_DEP_PFB_NACK_BIT	0x10 | 
 | #define DIGITAL_NFC_DEP_PFB_DID_BIT	0x04 | 
 |  | 
 | #define DIGITAL_NFC_DEP_PFB_IS_TIMEOUT(pfb) \ | 
 | 				((pfb) & DIGITAL_NFC_DEP_PFB_TIMEOUT_BIT) | 
 | #define DIGITAL_NFC_DEP_MI_BIT_SET(pfb)  ((pfb) & DIGITAL_NFC_DEP_PFB_MI_BIT) | 
 | #define DIGITAL_NFC_DEP_NACK_BIT_SET(pfb) ((pfb) & DIGITAL_NFC_DEP_PFB_NACK_BIT) | 
 | #define DIGITAL_NFC_DEP_NAD_BIT_SET(pfb) ((pfb) & 0x08) | 
 | #define DIGITAL_NFC_DEP_DID_BIT_SET(pfb) ((pfb) & DIGITAL_NFC_DEP_PFB_DID_BIT) | 
 | #define DIGITAL_NFC_DEP_PFB_PNI(pfb)     ((pfb) & 0x03) | 
 |  | 
 | #define DIGITAL_NFC_DEP_RTOX_VALUE(data) ((data) & 0x3F) | 
 | #define DIGITAL_NFC_DEP_RTOX_MAX	 59 | 
 |  | 
 | #define DIGITAL_NFC_DEP_PFB_I_PDU          0x00 | 
 | #define DIGITAL_NFC_DEP_PFB_ACK_NACK_PDU   0x40 | 
 | #define DIGITAL_NFC_DEP_PFB_SUPERVISOR_PDU 0x80 | 
 |  | 
 | struct digital_atr_req { | 
 | 	u8 dir; | 
 | 	u8 cmd; | 
 | 	u8 nfcid3[10]; | 
 | 	u8 did; | 
 | 	u8 bs; | 
 | 	u8 br; | 
 | 	u8 pp; | 
 | 	u8 gb[]; | 
 | } __packed; | 
 |  | 
 | struct digital_atr_res { | 
 | 	u8 dir; | 
 | 	u8 cmd; | 
 | 	u8 nfcid3[10]; | 
 | 	u8 did; | 
 | 	u8 bs; | 
 | 	u8 br; | 
 | 	u8 to; | 
 | 	u8 pp; | 
 | 	u8 gb[]; | 
 | } __packed; | 
 |  | 
 | struct digital_psl_req { | 
 | 	u8 dir; | 
 | 	u8 cmd; | 
 | 	u8 did; | 
 | 	u8 brs; | 
 | 	u8 fsl; | 
 | } __packed; | 
 |  | 
 | struct digital_psl_res { | 
 | 	u8 dir; | 
 | 	u8 cmd; | 
 | 	u8 did; | 
 | } __packed; | 
 |  | 
 | struct digital_dep_req_res { | 
 | 	u8 dir; | 
 | 	u8 cmd; | 
 | 	u8 pfb; | 
 | } __packed; | 
 |  | 
 | static void digital_in_recv_dep_res(struct nfc_digital_dev *ddev, void *arg, | 
 | 				    struct sk_buff *resp); | 
 | static void digital_tg_recv_dep_req(struct nfc_digital_dev *ddev, void *arg, | 
 | 				    struct sk_buff *resp); | 
 |  | 
 | static const u8 digital_payload_bits_map[4] = { | 
 | 	[0] = 64, | 
 | 	[1] = 128, | 
 | 	[2] = 192, | 
 | 	[3] = 254 | 
 | }; | 
 |  | 
 | /* Response Waiting Time for ATR_RES PDU in ms | 
 |  * | 
 |  * RWT(ATR_RES) = RWT(nfcdep,activation) + dRWT(nfcdep) + dT(nfcdep,initiator) | 
 |  * | 
 |  * with: | 
 |  *  RWT(nfcdep,activation) = 4096 * 2^12 / f(c) s | 
 |  *  dRWT(nfcdep) = 16 / f(c) s | 
 |  *  dT(nfcdep,initiator) = 100 ms | 
 |  *  f(c) = 13560000 Hz | 
 |  */ | 
 | #define DIGITAL_ATR_RES_RWT 1337 | 
 |  | 
 | /* Response Waiting Time for other DEP PDUs in ms | 
 |  * | 
 |  * max_rwt = rwt + dRWT(nfcdep) + dT(nfcdep,initiator) | 
 |  * | 
 |  * with: | 
 |  *  rwt = (256 * 16 / f(c)) * 2^wt s | 
 |  *  dRWT(nfcdep) = 16 / f(c) s | 
 |  *  dT(nfcdep,initiator) = 100 ms | 
 |  *  f(c) = 13560000 Hz | 
 |  *  0 <= wt <= 14 (given by the target by the TO field of ATR_RES response) | 
 |  */ | 
 | #define DIGITAL_NFC_DEP_IN_MAX_WT 14 | 
 | #define DIGITAL_NFC_DEP_TG_MAX_WT 14 | 
 | static const u16 digital_rwt_map[DIGITAL_NFC_DEP_IN_MAX_WT + 1] = { | 
 | 	100,  101,  101,  102,  105, | 
 | 	110,  119,  139,  177,  255, | 
 | 	409,  719, 1337, 2575, 5049, | 
 | }; | 
 |  | 
 | static u8 digital_payload_bits_to_size(u8 payload_bits) | 
 | { | 
 | 	if (payload_bits >= ARRAY_SIZE(digital_payload_bits_map)) | 
 | 		return 0; | 
 |  | 
 | 	return digital_payload_bits_map[payload_bits]; | 
 | } | 
 |  | 
 | static u8 digital_payload_size_to_bits(u8 payload_size) | 
 | { | 
 | 	int i; | 
 |  | 
 | 	for (i = 0; i < ARRAY_SIZE(digital_payload_bits_map); i++) | 
 | 		if (digital_payload_bits_map[i] == payload_size) | 
 | 			return i; | 
 |  | 
 | 	return 0xff; | 
 | } | 
 |  | 
 | static void digital_skb_push_dep_sod(struct nfc_digital_dev *ddev, | 
 | 				     struct sk_buff *skb) | 
 | { | 
 | 	skb_push(skb, sizeof(u8)); | 
 |  | 
 | 	skb->data[0] = skb->len; | 
 |  | 
 | 	if (ddev->curr_rf_tech == NFC_DIGITAL_RF_TECH_106A) | 
 | 		*(u8 *)skb_push(skb, sizeof(u8)) = DIGITAL_NFC_DEP_NFCA_SOD_SB; | 
 | } | 
 |  | 
 | static int digital_skb_pull_dep_sod(struct nfc_digital_dev *ddev, | 
 | 				    struct sk_buff *skb) | 
 | { | 
 | 	u8 size; | 
 |  | 
 | 	if (skb->len < 2) | 
 | 		return -EIO; | 
 |  | 
 | 	if (ddev->curr_rf_tech == NFC_DIGITAL_RF_TECH_106A) | 
 | 		skb_pull(skb, sizeof(u8)); | 
 |  | 
 | 	size = skb->data[0]; | 
 | 	if (size != skb->len) | 
 | 		return -EIO; | 
 |  | 
 | 	skb_pull(skb, sizeof(u8)); | 
 |  | 
 | 	return 0; | 
 | } | 
 |  | 
 | static struct sk_buff * | 
 | digital_send_dep_data_prep(struct nfc_digital_dev *ddev, struct sk_buff *skb, | 
 | 			   struct digital_dep_req_res *dep_req_res, | 
 | 			   struct digital_data_exch *data_exch) | 
 | { | 
 | 	struct sk_buff *new_skb; | 
 |  | 
 | 	if (skb->len > ddev->remote_payload_max) { | 
 | 		dep_req_res->pfb |= DIGITAL_NFC_DEP_PFB_MI_BIT; | 
 |  | 
 | 		new_skb = digital_skb_alloc(ddev, ddev->remote_payload_max); | 
 | 		if (!new_skb) { | 
 | 			kfree_skb(ddev->chaining_skb); | 
 | 			ddev->chaining_skb = NULL; | 
 |  | 
 | 			return ERR_PTR(-ENOMEM); | 
 | 		} | 
 |  | 
 | 		skb_put_data(new_skb, skb->data, ddev->remote_payload_max); | 
 | 		skb_pull(skb, ddev->remote_payload_max); | 
 |  | 
 | 		ddev->chaining_skb = skb; | 
 | 		ddev->data_exch = data_exch; | 
 | 	} else { | 
 | 		ddev->chaining_skb = NULL; | 
 | 		new_skb = skb; | 
 | 	} | 
 |  | 
 | 	return new_skb; | 
 | } | 
 |  | 
 | static struct sk_buff * | 
 | digital_recv_dep_data_gather(struct nfc_digital_dev *ddev, u8 pfb, | 
 | 			     struct sk_buff *resp, | 
 | 			     int (*send_ack)(struct nfc_digital_dev *ddev, | 
 | 					     struct digital_data_exch | 
 | 							     *data_exch), | 
 | 			     struct digital_data_exch *data_exch) | 
 | { | 
 | 	struct sk_buff *new_skb; | 
 | 	int rc; | 
 |  | 
 | 	if (DIGITAL_NFC_DEP_MI_BIT_SET(pfb) && (!ddev->chaining_skb)) { | 
 | 		ddev->chaining_skb = | 
 | 			nfc_alloc_recv_skb(8 * ddev->local_payload_max, | 
 | 					   GFP_KERNEL); | 
 | 		if (!ddev->chaining_skb) { | 
 | 			rc = -ENOMEM; | 
 | 			goto error; | 
 | 		} | 
 | 	} | 
 |  | 
 | 	if (ddev->chaining_skb) { | 
 | 		if (resp->len > skb_tailroom(ddev->chaining_skb)) { | 
 | 			new_skb = skb_copy_expand(ddev->chaining_skb, | 
 | 						  skb_headroom( | 
 | 							  ddev->chaining_skb), | 
 | 						  8 * ddev->local_payload_max, | 
 | 						  GFP_KERNEL); | 
 | 			if (!new_skb) { | 
 | 				rc = -ENOMEM; | 
 | 				goto error; | 
 | 			} | 
 |  | 
 | 			kfree_skb(ddev->chaining_skb); | 
 | 			ddev->chaining_skb = new_skb; | 
 | 		} | 
 |  | 
 | 		skb_put_data(ddev->chaining_skb, resp->data, resp->len); | 
 |  | 
 | 		kfree_skb(resp); | 
 | 		resp = NULL; | 
 |  | 
 | 		if (DIGITAL_NFC_DEP_MI_BIT_SET(pfb)) { | 
 | 			rc = send_ack(ddev, data_exch); | 
 | 			if (rc) | 
 | 				goto error; | 
 |  | 
 | 			return NULL; | 
 | 		} | 
 |  | 
 | 		resp = ddev->chaining_skb; | 
 | 		ddev->chaining_skb = NULL; | 
 | 	} | 
 |  | 
 | 	return resp; | 
 |  | 
 | error: | 
 | 	kfree_skb(resp); | 
 |  | 
 | 	kfree_skb(ddev->chaining_skb); | 
 | 	ddev->chaining_skb = NULL; | 
 |  | 
 | 	return ERR_PTR(rc); | 
 | } | 
 |  | 
 | static void digital_in_recv_psl_res(struct nfc_digital_dev *ddev, void *arg, | 
 | 				    struct sk_buff *resp) | 
 | { | 
 | 	struct nfc_target *target = arg; | 
 | 	struct digital_psl_res *psl_res; | 
 | 	int rc; | 
 |  | 
 | 	if (IS_ERR(resp)) { | 
 | 		rc = PTR_ERR(resp); | 
 | 		resp = NULL; | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	rc = ddev->skb_check_crc(resp); | 
 | 	if (rc) { | 
 | 		PROTOCOL_ERR("14.4.1.6"); | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	rc = digital_skb_pull_dep_sod(ddev, resp); | 
 | 	if (rc) { | 
 | 		PROTOCOL_ERR("14.4.1.2"); | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	psl_res = (struct digital_psl_res *)resp->data; | 
 |  | 
 | 	if ((resp->len != sizeof(*psl_res)) || | 
 | 	    (psl_res->dir != DIGITAL_NFC_DEP_FRAME_DIR_IN) || | 
 | 	    (psl_res->cmd != DIGITAL_CMD_PSL_RES)) { | 
 | 		rc = -EIO; | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	rc = digital_in_configure_hw(ddev, NFC_DIGITAL_CONFIG_RF_TECH, | 
 | 				     NFC_DIGITAL_RF_TECH_424F); | 
 | 	if (rc) | 
 | 		goto exit; | 
 |  | 
 | 	rc = digital_in_configure_hw(ddev, NFC_DIGITAL_CONFIG_FRAMING, | 
 | 				     NFC_DIGITAL_FRAMING_NFCF_NFC_DEP); | 
 | 	if (rc) | 
 | 		goto exit; | 
 |  | 
 | 	if (!DIGITAL_DRV_CAPS_IN_CRC(ddev) && | 
 | 	    (ddev->curr_rf_tech == NFC_DIGITAL_RF_TECH_106A)) { | 
 | 		ddev->skb_add_crc = digital_skb_add_crc_f; | 
 | 		ddev->skb_check_crc = digital_skb_check_crc_f; | 
 | 	} | 
 |  | 
 | 	ddev->curr_rf_tech = NFC_DIGITAL_RF_TECH_424F; | 
 |  | 
 | 	nfc_dep_link_is_up(ddev->nfc_dev, target->idx, NFC_COMM_ACTIVE, | 
 | 			   NFC_RF_INITIATOR); | 
 |  | 
 | 	ddev->curr_nfc_dep_pni = 0; | 
 |  | 
 | exit: | 
 | 	dev_kfree_skb(resp); | 
 |  | 
 | 	if (rc) | 
 | 		ddev->curr_protocol = 0; | 
 | } | 
 |  | 
 | static int digital_in_send_psl_req(struct nfc_digital_dev *ddev, | 
 | 				   struct nfc_target *target) | 
 | { | 
 | 	struct sk_buff *skb; | 
 | 	struct digital_psl_req *psl_req; | 
 | 	int rc; | 
 | 	u8 payload_size, payload_bits; | 
 |  | 
 | 	skb = digital_skb_alloc(ddev, sizeof(*psl_req)); | 
 | 	if (!skb) | 
 | 		return -ENOMEM; | 
 |  | 
 | 	skb_put(skb, sizeof(*psl_req)); | 
 |  | 
 | 	psl_req = (struct digital_psl_req *)skb->data; | 
 |  | 
 | 	psl_req->dir = DIGITAL_NFC_DEP_FRAME_DIR_OUT; | 
 | 	psl_req->cmd = DIGITAL_CMD_PSL_REQ; | 
 | 	psl_req->did = 0; | 
 | 	psl_req->brs = (0x2 << 3) | 0x2; /* 424F both directions */ | 
 |  | 
 | 	payload_size = min(ddev->local_payload_max, ddev->remote_payload_max); | 
 | 	payload_bits = digital_payload_size_to_bits(payload_size); | 
 | 	psl_req->fsl = DIGITAL_PAYLOAD_BITS_TO_FSL(payload_bits); | 
 |  | 
 | 	ddev->local_payload_max = payload_size; | 
 | 	ddev->remote_payload_max = payload_size; | 
 |  | 
 | 	digital_skb_push_dep_sod(ddev, skb); | 
 |  | 
 | 	ddev->skb_add_crc(skb); | 
 |  | 
 | 	rc = digital_in_send_cmd(ddev, skb, ddev->dep_rwt, | 
 | 				 digital_in_recv_psl_res, target); | 
 | 	if (rc) | 
 | 		kfree_skb(skb); | 
 |  | 
 | 	return rc; | 
 | } | 
 |  | 
 | static void digital_in_recv_atr_res(struct nfc_digital_dev *ddev, void *arg, | 
 | 				 struct sk_buff *resp) | 
 | { | 
 | 	struct nfc_target *target = arg; | 
 | 	struct digital_atr_res *atr_res; | 
 | 	u8 gb_len, payload_bits; | 
 | 	u8 wt; | 
 | 	int rc; | 
 |  | 
 | 	if (IS_ERR(resp)) { | 
 | 		rc = PTR_ERR(resp); | 
 | 		resp = NULL; | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	rc = ddev->skb_check_crc(resp); | 
 | 	if (rc) { | 
 | 		PROTOCOL_ERR("14.4.1.6"); | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	rc = digital_skb_pull_dep_sod(ddev, resp); | 
 | 	if (rc) { | 
 | 		PROTOCOL_ERR("14.4.1.2"); | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	if (resp->len < sizeof(struct digital_atr_res)) { | 
 | 		rc = -EIO; | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	gb_len = resp->len - sizeof(struct digital_atr_res); | 
 |  | 
 | 	atr_res = (struct digital_atr_res *)resp->data; | 
 |  | 
 | 	wt = DIGITAL_ATR_RES_TO_WT(atr_res->to); | 
 | 	if (wt > DIGITAL_NFC_DEP_IN_MAX_WT) | 
 | 		wt = DIGITAL_NFC_DEP_IN_MAX_WT; | 
 | 	ddev->dep_rwt = digital_rwt_map[wt]; | 
 |  | 
 | 	payload_bits = DIGITAL_PAYLOAD_PP_TO_BITS(atr_res->pp); | 
 | 	ddev->remote_payload_max = digital_payload_bits_to_size(payload_bits); | 
 |  | 
 | 	if (!ddev->remote_payload_max) { | 
 | 		rc = -EINVAL; | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	rc = nfc_set_remote_general_bytes(ddev->nfc_dev, atr_res->gb, gb_len); | 
 | 	if (rc) | 
 | 		goto exit; | 
 |  | 
 | 	if ((ddev->protocols & NFC_PROTO_FELICA_MASK) && | 
 | 	    (ddev->curr_rf_tech != NFC_DIGITAL_RF_TECH_424F)) { | 
 | 		rc = digital_in_send_psl_req(ddev, target); | 
 | 		if (!rc) | 
 | 			goto exit; | 
 | 	} | 
 |  | 
 | 	rc = nfc_dep_link_is_up(ddev->nfc_dev, target->idx, NFC_COMM_ACTIVE, | 
 | 				NFC_RF_INITIATOR); | 
 |  | 
 | 	ddev->curr_nfc_dep_pni = 0; | 
 |  | 
 | exit: | 
 | 	dev_kfree_skb(resp); | 
 |  | 
 | 	if (rc) | 
 | 		ddev->curr_protocol = 0; | 
 | } | 
 |  | 
 | int digital_in_send_atr_req(struct nfc_digital_dev *ddev, | 
 | 			    struct nfc_target *target, __u8 comm_mode, __u8 *gb, | 
 | 			    size_t gb_len) | 
 | { | 
 | 	struct sk_buff *skb; | 
 | 	struct digital_atr_req *atr_req; | 
 | 	uint size; | 
 | 	int rc; | 
 | 	u8 payload_bits; | 
 |  | 
 | 	size = DIGITAL_ATR_REQ_MIN_SIZE + gb_len; | 
 |  | 
 | 	if (size > DIGITAL_ATR_REQ_MAX_SIZE) { | 
 | 		PROTOCOL_ERR("14.6.1.1"); | 
 | 		return -EINVAL; | 
 | 	} | 
 |  | 
 | 	skb = digital_skb_alloc(ddev, size); | 
 | 	if (!skb) | 
 | 		return -ENOMEM; | 
 |  | 
 | 	skb_put(skb, sizeof(struct digital_atr_req)); | 
 |  | 
 | 	atr_req = (struct digital_atr_req *)skb->data; | 
 | 	memset(atr_req, 0, sizeof(struct digital_atr_req)); | 
 |  | 
 | 	atr_req->dir = DIGITAL_NFC_DEP_FRAME_DIR_OUT; | 
 | 	atr_req->cmd = DIGITAL_CMD_ATR_REQ; | 
 | 	if (target->nfcid2_len) | 
 | 		memcpy(atr_req->nfcid3, target->nfcid2, NFC_NFCID2_MAXSIZE); | 
 | 	else | 
 | 		get_random_bytes(atr_req->nfcid3, NFC_NFCID3_MAXSIZE); | 
 |  | 
 | 	atr_req->did = 0; | 
 | 	atr_req->bs = 0; | 
 | 	atr_req->br = 0; | 
 |  | 
 | 	ddev->local_payload_max = DIGITAL_PAYLOAD_SIZE_MAX; | 
 | 	payload_bits = digital_payload_size_to_bits(ddev->local_payload_max); | 
 | 	atr_req->pp = DIGITAL_PAYLOAD_BITS_TO_PP(payload_bits); | 
 |  | 
 | 	if (gb_len) { | 
 | 		atr_req->pp |= DIGITAL_GB_BIT; | 
 | 		skb_put_data(skb, gb, gb_len); | 
 | 	} | 
 |  | 
 | 	digital_skb_push_dep_sod(ddev, skb); | 
 |  | 
 | 	ddev->skb_add_crc(skb); | 
 |  | 
 | 	rc = digital_in_send_cmd(ddev, skb, DIGITAL_ATR_RES_RWT, | 
 | 				 digital_in_recv_atr_res, target); | 
 | 	if (rc) | 
 | 		kfree_skb(skb); | 
 |  | 
 | 	return rc; | 
 | } | 
 |  | 
 | static int digital_in_send_ack(struct nfc_digital_dev *ddev, | 
 | 			       struct digital_data_exch *data_exch) | 
 | { | 
 | 	struct digital_dep_req_res *dep_req; | 
 | 	struct sk_buff *skb; | 
 | 	int rc; | 
 |  | 
 | 	skb = digital_skb_alloc(ddev, 1); | 
 | 	if (!skb) | 
 | 		return -ENOMEM; | 
 |  | 
 | 	skb_push(skb, sizeof(struct digital_dep_req_res)); | 
 |  | 
 | 	dep_req = (struct digital_dep_req_res *)skb->data; | 
 |  | 
 | 	dep_req->dir = DIGITAL_NFC_DEP_FRAME_DIR_OUT; | 
 | 	dep_req->cmd = DIGITAL_CMD_DEP_REQ; | 
 | 	dep_req->pfb = DIGITAL_NFC_DEP_PFB_ACK_NACK_PDU | | 
 | 		       ddev->curr_nfc_dep_pni; | 
 |  | 
 | 	digital_skb_push_dep_sod(ddev, skb); | 
 |  | 
 | 	ddev->skb_add_crc(skb); | 
 |  | 
 | 	ddev->saved_skb = pskb_copy(skb, GFP_KERNEL); | 
 |  | 
 | 	rc = digital_in_send_cmd(ddev, skb, ddev->dep_rwt, | 
 | 				 digital_in_recv_dep_res, data_exch); | 
 | 	if (rc) { | 
 | 		kfree_skb(skb); | 
 | 		kfree_skb(ddev->saved_skb); | 
 | 		ddev->saved_skb = NULL; | 
 | 	} | 
 |  | 
 | 	return rc; | 
 | } | 
 |  | 
 | static int digital_in_send_nack(struct nfc_digital_dev *ddev, | 
 | 				struct digital_data_exch *data_exch) | 
 | { | 
 | 	struct digital_dep_req_res *dep_req; | 
 | 	struct sk_buff *skb; | 
 | 	int rc; | 
 |  | 
 | 	skb = digital_skb_alloc(ddev, 1); | 
 | 	if (!skb) | 
 | 		return -ENOMEM; | 
 |  | 
 | 	skb_push(skb, sizeof(struct digital_dep_req_res)); | 
 |  | 
 | 	dep_req = (struct digital_dep_req_res *)skb->data; | 
 |  | 
 | 	dep_req->dir = DIGITAL_NFC_DEP_FRAME_DIR_OUT; | 
 | 	dep_req->cmd = DIGITAL_CMD_DEP_REQ; | 
 | 	dep_req->pfb = DIGITAL_NFC_DEP_PFB_ACK_NACK_PDU | | 
 | 		       DIGITAL_NFC_DEP_PFB_NACK_BIT | ddev->curr_nfc_dep_pni; | 
 |  | 
 | 	digital_skb_push_dep_sod(ddev, skb); | 
 |  | 
 | 	ddev->skb_add_crc(skb); | 
 |  | 
 | 	rc = digital_in_send_cmd(ddev, skb, ddev->dep_rwt, | 
 | 				 digital_in_recv_dep_res, data_exch); | 
 | 	if (rc) | 
 | 		kfree_skb(skb); | 
 |  | 
 | 	return rc; | 
 | } | 
 |  | 
 | static int digital_in_send_atn(struct nfc_digital_dev *ddev, | 
 | 			       struct digital_data_exch *data_exch) | 
 | { | 
 | 	struct digital_dep_req_res *dep_req; | 
 | 	struct sk_buff *skb; | 
 | 	int rc; | 
 |  | 
 | 	skb = digital_skb_alloc(ddev, 1); | 
 | 	if (!skb) | 
 | 		return -ENOMEM; | 
 |  | 
 | 	skb_push(skb, sizeof(struct digital_dep_req_res)); | 
 |  | 
 | 	dep_req = (struct digital_dep_req_res *)skb->data; | 
 |  | 
 | 	dep_req->dir = DIGITAL_NFC_DEP_FRAME_DIR_OUT; | 
 | 	dep_req->cmd = DIGITAL_CMD_DEP_REQ; | 
 | 	dep_req->pfb = DIGITAL_NFC_DEP_PFB_SUPERVISOR_PDU; | 
 |  | 
 | 	digital_skb_push_dep_sod(ddev, skb); | 
 |  | 
 | 	ddev->skb_add_crc(skb); | 
 |  | 
 | 	rc = digital_in_send_cmd(ddev, skb, ddev->dep_rwt, | 
 | 				 digital_in_recv_dep_res, data_exch); | 
 | 	if (rc) | 
 | 		kfree_skb(skb); | 
 |  | 
 | 	return rc; | 
 | } | 
 |  | 
 | static int digital_in_send_rtox(struct nfc_digital_dev *ddev, | 
 | 				struct digital_data_exch *data_exch, u8 rtox) | 
 | { | 
 | 	struct digital_dep_req_res *dep_req; | 
 | 	struct sk_buff *skb; | 
 | 	int rc; | 
 | 	u16 rwt_int; | 
 |  | 
 | 	rwt_int = ddev->dep_rwt * rtox; | 
 | 	if (rwt_int > digital_rwt_map[DIGITAL_NFC_DEP_IN_MAX_WT]) | 
 | 		rwt_int = digital_rwt_map[DIGITAL_NFC_DEP_IN_MAX_WT]; | 
 |  | 
 | 	skb = digital_skb_alloc(ddev, 1); | 
 | 	if (!skb) | 
 | 		return -ENOMEM; | 
 |  | 
 | 	skb_put_u8(skb, rtox); | 
 |  | 
 | 	skb_push(skb, sizeof(struct digital_dep_req_res)); | 
 |  | 
 | 	dep_req = (struct digital_dep_req_res *)skb->data; | 
 |  | 
 | 	dep_req->dir = DIGITAL_NFC_DEP_FRAME_DIR_OUT; | 
 | 	dep_req->cmd = DIGITAL_CMD_DEP_REQ; | 
 | 	dep_req->pfb = DIGITAL_NFC_DEP_PFB_SUPERVISOR_PDU | | 
 | 		       DIGITAL_NFC_DEP_PFB_TIMEOUT_BIT; | 
 |  | 
 | 	digital_skb_push_dep_sod(ddev, skb); | 
 |  | 
 | 	ddev->skb_add_crc(skb); | 
 |  | 
 | 	rc = digital_in_send_cmd(ddev, skb, rwt_int, | 
 | 				 digital_in_recv_dep_res, data_exch); | 
 | 	if (rc) | 
 | 		kfree_skb(skb); | 
 |  | 
 | 	return rc; | 
 | } | 
 |  | 
 | static int digital_in_send_saved_skb(struct nfc_digital_dev *ddev, | 
 | 				     struct digital_data_exch *data_exch) | 
 | { | 
 | 	int rc; | 
 |  | 
 | 	if (!ddev->saved_skb) | 
 | 		return -EINVAL; | 
 |  | 
 | 	skb_get(ddev->saved_skb); | 
 |  | 
 | 	rc = digital_in_send_cmd(ddev, ddev->saved_skb, ddev->dep_rwt, | 
 | 				 digital_in_recv_dep_res, data_exch); | 
 | 	if (rc) | 
 | 		kfree_skb(ddev->saved_skb); | 
 |  | 
 | 	return rc; | 
 | } | 
 |  | 
 | static void digital_in_recv_dep_res(struct nfc_digital_dev *ddev, void *arg, | 
 | 				    struct sk_buff *resp) | 
 | { | 
 | 	struct digital_data_exch *data_exch = arg; | 
 | 	struct digital_dep_req_res *dep_res; | 
 | 	u8 pfb; | 
 | 	uint size; | 
 | 	int rc; | 
 | 	u8 rtox; | 
 |  | 
 | 	if (IS_ERR(resp)) { | 
 | 		rc = PTR_ERR(resp); | 
 | 		resp = NULL; | 
 |  | 
 | 		if ((rc == -EIO || (rc == -ETIMEDOUT && ddev->nack_count)) && | 
 | 		    (ddev->nack_count++ < DIGITAL_NFC_DEP_N_RETRY_NACK)) { | 
 | 			ddev->atn_count = 0; | 
 |  | 
 | 			rc = digital_in_send_nack(ddev, data_exch); | 
 | 			if (rc) | 
 | 				goto error; | 
 |  | 
 | 			return; | 
 | 		} else if ((rc == -ETIMEDOUT) && | 
 | 			   (ddev->atn_count++ < DIGITAL_NFC_DEP_N_RETRY_ATN)) { | 
 | 			ddev->nack_count = 0; | 
 |  | 
 | 			rc = digital_in_send_atn(ddev, data_exch); | 
 | 			if (rc) | 
 | 				goto error; | 
 |  | 
 | 			return; | 
 | 		} | 
 |  | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	rc = digital_skb_pull_dep_sod(ddev, resp); | 
 | 	if (rc) { | 
 | 		PROTOCOL_ERR("14.4.1.2"); | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	rc = ddev->skb_check_crc(resp); | 
 | 	if (rc) { | 
 | 		if ((resp->len >= 4) && | 
 | 		    (ddev->nack_count++ < DIGITAL_NFC_DEP_N_RETRY_NACK)) { | 
 | 			ddev->atn_count = 0; | 
 |  | 
 | 			rc = digital_in_send_nack(ddev, data_exch); | 
 | 			if (rc) | 
 | 				goto error; | 
 |  | 
 | 			kfree_skb(resp); | 
 |  | 
 | 			return; | 
 | 		} | 
 |  | 
 | 		PROTOCOL_ERR("14.4.1.6"); | 
 | 		goto error; | 
 | 	} | 
 |  | 
 | 	ddev->atn_count = 0; | 
 | 	ddev->nack_count = 0; | 
 |  | 
 | 	if (resp->len > ddev->local_payload_max) { | 
 | 		rc = -EMSGSIZE; | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	size = sizeof(struct digital_dep_req_res); | 
 | 	dep_res = (struct digital_dep_req_res *)resp->data; | 
 |  | 
 | 	if (resp->len < size || dep_res->dir != DIGITAL_NFC_DEP_FRAME_DIR_IN || | 
 | 	    dep_res->cmd != DIGITAL_CMD_DEP_RES) { | 
 | 		rc = -EIO; | 
 | 		goto error; | 
 | 	} | 
 |  | 
 | 	pfb = dep_res->pfb; | 
 |  | 
 | 	if (DIGITAL_NFC_DEP_DID_BIT_SET(pfb)) { | 
 | 		PROTOCOL_ERR("14.8.2.1"); | 
 | 		rc = -EIO; | 
 | 		goto error; | 
 | 	} | 
 |  | 
 | 	if (DIGITAL_NFC_DEP_NAD_BIT_SET(pfb)) { | 
 | 		rc = -EIO; | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	if (size > resp->len) { | 
 | 		rc = -EIO; | 
 | 		goto error; | 
 | 	} | 
 |  | 
 | 	skb_pull(resp, size); | 
 |  | 
 | 	switch (DIGITAL_NFC_DEP_PFB_TYPE(pfb)) { | 
 | 	case DIGITAL_NFC_DEP_PFB_I_PDU: | 
 | 		if (DIGITAL_NFC_DEP_PFB_PNI(pfb) != ddev->curr_nfc_dep_pni) { | 
 | 			PROTOCOL_ERR("14.12.3.3"); | 
 | 			rc = -EIO; | 
 | 			goto error; | 
 | 		} | 
 |  | 
 | 		ddev->curr_nfc_dep_pni = | 
 | 			DIGITAL_NFC_DEP_PFB_PNI(ddev->curr_nfc_dep_pni + 1); | 
 |  | 
 | 		kfree_skb(ddev->saved_skb); | 
 | 		ddev->saved_skb = NULL; | 
 |  | 
 | 		resp = digital_recv_dep_data_gather(ddev, pfb, resp, | 
 | 						    digital_in_send_ack, | 
 | 						    data_exch); | 
 | 		if (IS_ERR(resp)) { | 
 | 			rc = PTR_ERR(resp); | 
 | 			resp = NULL; | 
 | 			goto error; | 
 | 		} | 
 |  | 
 | 		/* If resp is NULL then we're still chaining so return and | 
 | 		 * wait for the next part of the PDU.  Else, the PDU is | 
 | 		 * complete so pass it up. | 
 | 		 */ | 
 | 		if (!resp) | 
 | 			return; | 
 |  | 
 | 		rc = 0; | 
 | 		break; | 
 |  | 
 | 	case DIGITAL_NFC_DEP_PFB_ACK_NACK_PDU: | 
 | 		if (DIGITAL_NFC_DEP_NACK_BIT_SET(pfb)) { | 
 | 			PROTOCOL_ERR("14.12.4.5"); | 
 | 			rc = -EIO; | 
 | 			goto exit; | 
 | 		} | 
 |  | 
 | 		if (DIGITAL_NFC_DEP_PFB_PNI(pfb) != ddev->curr_nfc_dep_pni) { | 
 | 			PROTOCOL_ERR("14.12.3.3"); | 
 | 			rc = -EIO; | 
 | 			goto exit; | 
 | 		} | 
 |  | 
 | 		ddev->curr_nfc_dep_pni = | 
 | 			DIGITAL_NFC_DEP_PFB_PNI(ddev->curr_nfc_dep_pni + 1); | 
 |  | 
 | 		if (!ddev->chaining_skb) { | 
 | 			PROTOCOL_ERR("14.12.4.3"); | 
 | 			rc = -EIO; | 
 | 			goto exit; | 
 | 		} | 
 |  | 
 | 		/* The initiator has received a valid ACK. Free the last sent | 
 | 		 * PDU and keep on sending chained skb. | 
 | 		 */ | 
 | 		kfree_skb(ddev->saved_skb); | 
 | 		ddev->saved_skb = NULL; | 
 |  | 
 | 		rc = digital_in_send_dep_req(ddev, NULL, | 
 | 					     ddev->chaining_skb, | 
 | 					     ddev->data_exch); | 
 | 		if (rc) | 
 | 			goto error; | 
 |  | 
 | 		goto free_resp; | 
 |  | 
 | 	case DIGITAL_NFC_DEP_PFB_SUPERVISOR_PDU: | 
 | 		if (!DIGITAL_NFC_DEP_PFB_IS_TIMEOUT(pfb)) { /* ATN */ | 
 | 			rc = digital_in_send_saved_skb(ddev, data_exch); | 
 | 			if (rc) | 
 | 				goto error; | 
 |  | 
 | 			goto free_resp; | 
 | 		} | 
 |  | 
 | 		if (ddev->atn_count || ddev->nack_count) { | 
 | 			PROTOCOL_ERR("14.12.4.4"); | 
 | 			rc = -EIO; | 
 | 			goto error; | 
 | 		} | 
 |  | 
 | 		rtox = DIGITAL_NFC_DEP_RTOX_VALUE(resp->data[0]); | 
 | 		if (!rtox || rtox > DIGITAL_NFC_DEP_RTOX_MAX) { | 
 | 			PROTOCOL_ERR("14.8.4.1"); | 
 | 			rc = -EIO; | 
 | 			goto error; | 
 | 		} | 
 |  | 
 | 		rc = digital_in_send_rtox(ddev, data_exch, rtox); | 
 | 		if (rc) | 
 | 			goto error; | 
 |  | 
 | 		goto free_resp; | 
 | 	} | 
 |  | 
 | exit: | 
 | 	data_exch->cb(data_exch->cb_context, resp, rc); | 
 |  | 
 | error: | 
 | 	kfree(data_exch); | 
 |  | 
 | 	kfree_skb(ddev->chaining_skb); | 
 | 	ddev->chaining_skb = NULL; | 
 |  | 
 | 	kfree_skb(ddev->saved_skb); | 
 | 	ddev->saved_skb = NULL; | 
 |  | 
 | 	if (rc) | 
 | 		kfree_skb(resp); | 
 |  | 
 | 	return; | 
 |  | 
 | free_resp: | 
 | 	dev_kfree_skb(resp); | 
 | } | 
 |  | 
 | int digital_in_send_dep_req(struct nfc_digital_dev *ddev, | 
 | 			    struct nfc_target *target, struct sk_buff *skb, | 
 | 			    struct digital_data_exch *data_exch) | 
 | { | 
 | 	struct digital_dep_req_res *dep_req; | 
 | 	struct sk_buff *chaining_skb, *tmp_skb; | 
 | 	int rc; | 
 |  | 
 | 	skb_push(skb, sizeof(struct digital_dep_req_res)); | 
 |  | 
 | 	dep_req = (struct digital_dep_req_res *)skb->data; | 
 |  | 
 | 	dep_req->dir = DIGITAL_NFC_DEP_FRAME_DIR_OUT; | 
 | 	dep_req->cmd = DIGITAL_CMD_DEP_REQ; | 
 | 	dep_req->pfb = ddev->curr_nfc_dep_pni; | 
 |  | 
 | 	ddev->atn_count = 0; | 
 | 	ddev->nack_count = 0; | 
 |  | 
 | 	chaining_skb = ddev->chaining_skb; | 
 |  | 
 | 	tmp_skb = digital_send_dep_data_prep(ddev, skb, dep_req, data_exch); | 
 | 	if (IS_ERR(tmp_skb)) | 
 | 		return PTR_ERR(tmp_skb); | 
 |  | 
 | 	digital_skb_push_dep_sod(ddev, tmp_skb); | 
 |  | 
 | 	ddev->skb_add_crc(tmp_skb); | 
 |  | 
 | 	ddev->saved_skb = pskb_copy(tmp_skb, GFP_KERNEL); | 
 |  | 
 | 	rc = digital_in_send_cmd(ddev, tmp_skb, ddev->dep_rwt, | 
 | 				 digital_in_recv_dep_res, data_exch); | 
 | 	if (rc) { | 
 | 		if (tmp_skb != skb) | 
 | 			kfree_skb(tmp_skb); | 
 |  | 
 | 		kfree_skb(chaining_skb); | 
 | 		ddev->chaining_skb = NULL; | 
 |  | 
 | 		kfree_skb(ddev->saved_skb); | 
 | 		ddev->saved_skb = NULL; | 
 | 	} | 
 |  | 
 | 	return rc; | 
 | } | 
 |  | 
 | static void digital_tg_set_rf_tech(struct nfc_digital_dev *ddev, u8 rf_tech) | 
 | { | 
 | 	ddev->curr_rf_tech = rf_tech; | 
 |  | 
 | 	ddev->skb_add_crc = digital_skb_add_crc_none; | 
 | 	ddev->skb_check_crc = digital_skb_check_crc_none; | 
 |  | 
 | 	if (DIGITAL_DRV_CAPS_TG_CRC(ddev)) | 
 | 		return; | 
 |  | 
 | 	switch (ddev->curr_rf_tech) { | 
 | 	case NFC_DIGITAL_RF_TECH_106A: | 
 | 		ddev->skb_add_crc = digital_skb_add_crc_a; | 
 | 		ddev->skb_check_crc = digital_skb_check_crc_a; | 
 | 		break; | 
 |  | 
 | 	case NFC_DIGITAL_RF_TECH_212F: | 
 | 	case NFC_DIGITAL_RF_TECH_424F: | 
 | 		ddev->skb_add_crc = digital_skb_add_crc_f; | 
 | 		ddev->skb_check_crc = digital_skb_check_crc_f; | 
 | 		break; | 
 |  | 
 | 	default: | 
 | 		break; | 
 | 	} | 
 | } | 
 |  | 
 | static int digital_tg_send_ack(struct nfc_digital_dev *ddev, | 
 | 			       struct digital_data_exch *data_exch) | 
 | { | 
 | 	struct digital_dep_req_res *dep_res; | 
 | 	struct sk_buff *skb; | 
 | 	int rc; | 
 |  | 
 | 	skb = digital_skb_alloc(ddev, 1); | 
 | 	if (!skb) | 
 | 		return -ENOMEM; | 
 |  | 
 | 	skb_push(skb, sizeof(struct digital_dep_req_res)); | 
 |  | 
 | 	dep_res = (struct digital_dep_req_res *)skb->data; | 
 |  | 
 | 	dep_res->dir = DIGITAL_NFC_DEP_FRAME_DIR_IN; | 
 | 	dep_res->cmd = DIGITAL_CMD_DEP_RES; | 
 | 	dep_res->pfb = DIGITAL_NFC_DEP_PFB_ACK_NACK_PDU | | 
 | 		       ddev->curr_nfc_dep_pni; | 
 |  | 
 | 	if (ddev->did) { | 
 | 		dep_res->pfb |= DIGITAL_NFC_DEP_PFB_DID_BIT; | 
 |  | 
 | 		skb_put_data(skb, &ddev->did, sizeof(ddev->did)); | 
 | 	} | 
 |  | 
 | 	ddev->curr_nfc_dep_pni = | 
 | 		DIGITAL_NFC_DEP_PFB_PNI(ddev->curr_nfc_dep_pni + 1); | 
 |  | 
 | 	digital_skb_push_dep_sod(ddev, skb); | 
 |  | 
 | 	ddev->skb_add_crc(skb); | 
 |  | 
 | 	ddev->saved_skb = pskb_copy(skb, GFP_KERNEL); | 
 |  | 
 | 	rc = digital_tg_send_cmd(ddev, skb, 1500, digital_tg_recv_dep_req, | 
 | 				 data_exch); | 
 | 	if (rc) { | 
 | 		kfree_skb(skb); | 
 | 		kfree_skb(ddev->saved_skb); | 
 | 		ddev->saved_skb = NULL; | 
 | 	} | 
 |  | 
 | 	return rc; | 
 | } | 
 |  | 
 | static int digital_tg_send_atn(struct nfc_digital_dev *ddev) | 
 | { | 
 | 	struct digital_dep_req_res *dep_res; | 
 | 	struct sk_buff *skb; | 
 | 	int rc; | 
 |  | 
 | 	skb = digital_skb_alloc(ddev, 1); | 
 | 	if (!skb) | 
 | 		return -ENOMEM; | 
 |  | 
 | 	skb_push(skb, sizeof(struct digital_dep_req_res)); | 
 |  | 
 | 	dep_res = (struct digital_dep_req_res *)skb->data; | 
 |  | 
 | 	dep_res->dir = DIGITAL_NFC_DEP_FRAME_DIR_IN; | 
 | 	dep_res->cmd = DIGITAL_CMD_DEP_RES; | 
 | 	dep_res->pfb = DIGITAL_NFC_DEP_PFB_SUPERVISOR_PDU; | 
 |  | 
 | 	if (ddev->did) { | 
 | 		dep_res->pfb |= DIGITAL_NFC_DEP_PFB_DID_BIT; | 
 |  | 
 | 		skb_put_data(skb, &ddev->did, sizeof(ddev->did)); | 
 | 	} | 
 |  | 
 | 	digital_skb_push_dep_sod(ddev, skb); | 
 |  | 
 | 	ddev->skb_add_crc(skb); | 
 |  | 
 | 	rc = digital_tg_send_cmd(ddev, skb, 1500, digital_tg_recv_dep_req, | 
 | 				 NULL); | 
 | 	if (rc) | 
 | 		kfree_skb(skb); | 
 |  | 
 | 	return rc; | 
 | } | 
 |  | 
 | static int digital_tg_send_saved_skb(struct nfc_digital_dev *ddev) | 
 | { | 
 | 	int rc; | 
 |  | 
 | 	if (!ddev->saved_skb) | 
 | 		return -EINVAL; | 
 |  | 
 | 	skb_get(ddev->saved_skb); | 
 |  | 
 | 	rc = digital_tg_send_cmd(ddev, ddev->saved_skb, 1500, | 
 | 				 digital_tg_recv_dep_req, NULL); | 
 | 	if (rc) | 
 | 		kfree_skb(ddev->saved_skb); | 
 |  | 
 | 	return rc; | 
 | } | 
 |  | 
 | static void digital_tg_recv_dep_req(struct nfc_digital_dev *ddev, void *arg, | 
 | 				    struct sk_buff *resp) | 
 | { | 
 | 	int rc; | 
 | 	struct digital_dep_req_res *dep_req; | 
 | 	u8 pfb; | 
 | 	size_t size; | 
 |  | 
 | 	if (IS_ERR(resp)) { | 
 | 		rc = PTR_ERR(resp); | 
 | 		resp = NULL; | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	rc = ddev->skb_check_crc(resp); | 
 | 	if (rc) { | 
 | 		PROTOCOL_ERR("14.4.1.6"); | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	rc = digital_skb_pull_dep_sod(ddev, resp); | 
 | 	if (rc) { | 
 | 		PROTOCOL_ERR("14.4.1.2"); | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	if (resp->len > ddev->local_payload_max) { | 
 | 		rc = -EMSGSIZE; | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	size = sizeof(struct digital_dep_req_res); | 
 | 	dep_req = (struct digital_dep_req_res *)resp->data; | 
 |  | 
 | 	if (resp->len < size || dep_req->dir != DIGITAL_NFC_DEP_FRAME_DIR_OUT || | 
 | 	    dep_req->cmd != DIGITAL_CMD_DEP_REQ) { | 
 | 		rc = -EIO; | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	pfb = dep_req->pfb; | 
 |  | 
 | 	if (DIGITAL_NFC_DEP_DID_BIT_SET(pfb)) { | 
 | 		if (ddev->did && (ddev->did == resp->data[3])) { | 
 | 			size++; | 
 | 		} else { | 
 | 			rc = -EIO; | 
 | 			goto exit; | 
 | 		} | 
 | 	} else if (ddev->did) { | 
 | 		rc = -EIO; | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	if (DIGITAL_NFC_DEP_NAD_BIT_SET(pfb)) { | 
 | 		rc = -EIO; | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	if (size > resp->len) { | 
 | 		rc = -EIO; | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	skb_pull(resp, size); | 
 |  | 
 | 	switch (DIGITAL_NFC_DEP_PFB_TYPE(pfb)) { | 
 | 	case DIGITAL_NFC_DEP_PFB_I_PDU: | 
 | 		pr_debug("DIGITAL_NFC_DEP_PFB_I_PDU\n"); | 
 |  | 
 | 		if (ddev->atn_count) { | 
 | 			/* The target has received (and replied to) at least one | 
 | 			 * ATN DEP_REQ. | 
 | 			 */ | 
 | 			ddev->atn_count = 0; | 
 |  | 
 | 			/* pni of resp PDU equal to the target current pni - 1 | 
 | 			 * means resp is the previous DEP_REQ PDU received from | 
 | 			 * the initiator so the target replies with saved_skb | 
 | 			 * which is the previous DEP_RES saved in | 
 | 			 * digital_tg_send_dep_res(). | 
 | 			 */ | 
 | 			if (DIGITAL_NFC_DEP_PFB_PNI(pfb) == | 
 | 			  DIGITAL_NFC_DEP_PFB_PNI(ddev->curr_nfc_dep_pni - 1)) { | 
 | 				rc = digital_tg_send_saved_skb(ddev); | 
 | 				if (rc) | 
 | 					goto exit; | 
 |  | 
 | 				goto free_resp; | 
 | 			} | 
 |  | 
 | 			/* atn_count > 0 and PDU pni != curr_nfc_dep_pni - 1 | 
 | 			 * means the target probably did not received the last | 
 | 			 * DEP_REQ PDU sent by the initiator. The target | 
 | 			 * fallbacks to normal processing then. | 
 | 			 */ | 
 | 		} | 
 |  | 
 | 		if (DIGITAL_NFC_DEP_PFB_PNI(pfb) != ddev->curr_nfc_dep_pni) { | 
 | 			PROTOCOL_ERR("14.12.3.4"); | 
 | 			rc = -EIO; | 
 | 			goto exit; | 
 | 		} | 
 |  | 
 | 		kfree_skb(ddev->saved_skb); | 
 | 		ddev->saved_skb = NULL; | 
 |  | 
 | 		resp = digital_recv_dep_data_gather(ddev, pfb, resp, | 
 | 						    digital_tg_send_ack, NULL); | 
 | 		if (IS_ERR(resp)) { | 
 | 			rc = PTR_ERR(resp); | 
 | 			resp = NULL; | 
 | 			goto exit; | 
 | 		} | 
 |  | 
 | 		/* If resp is NULL then we're still chaining so return and | 
 | 		 * wait for the next part of the PDU.  Else, the PDU is | 
 | 		 * complete so pass it up. | 
 | 		 */ | 
 | 		if (!resp) | 
 | 			return; | 
 |  | 
 | 		rc = 0; | 
 | 		break; | 
 | 	case DIGITAL_NFC_DEP_PFB_ACK_NACK_PDU: | 
 | 		if (DIGITAL_NFC_DEP_NACK_BIT_SET(pfb)) { /* NACK */ | 
 | 			if (DIGITAL_NFC_DEP_PFB_PNI(pfb + 1) != | 
 | 						ddev->curr_nfc_dep_pni) { | 
 | 				rc = -EIO; | 
 | 				goto exit; | 
 | 			} | 
 |  | 
 | 			ddev->atn_count = 0; | 
 |  | 
 | 			rc = digital_tg_send_saved_skb(ddev); | 
 | 			if (rc) | 
 | 				goto exit; | 
 |  | 
 | 			goto free_resp; | 
 | 		} | 
 |  | 
 | 		/* ACK */ | 
 | 		if (ddev->atn_count) { | 
 | 			/* The target has previously received one or more ATN | 
 | 			 * PDUs. | 
 | 			 */ | 
 | 			ddev->atn_count = 0; | 
 |  | 
 | 			/* If the ACK PNI is equal to the target PNI - 1 means | 
 | 			 * that the initiator did not receive the previous PDU | 
 | 			 * sent by the target so re-send it. | 
 | 			 */ | 
 | 			if (DIGITAL_NFC_DEP_PFB_PNI(pfb + 1) == | 
 | 						ddev->curr_nfc_dep_pni) { | 
 | 				rc = digital_tg_send_saved_skb(ddev); | 
 | 				if (rc) | 
 | 					goto exit; | 
 |  | 
 | 				goto free_resp; | 
 | 			} | 
 |  | 
 | 			/* Otherwise, the target did not receive the previous | 
 | 			 * ACK PDU from the initiator. Fallback to normal | 
 | 			 * processing of chained PDU then. | 
 | 			 */ | 
 | 		} | 
 |  | 
 | 		/* Keep on sending chained PDU */ | 
 | 		if (!ddev->chaining_skb || | 
 | 		    DIGITAL_NFC_DEP_PFB_PNI(pfb) != | 
 | 					ddev->curr_nfc_dep_pni) { | 
 | 			rc = -EIO; | 
 | 			goto exit; | 
 | 		} | 
 |  | 
 | 		kfree_skb(ddev->saved_skb); | 
 | 		ddev->saved_skb = NULL; | 
 |  | 
 | 		rc = digital_tg_send_dep_res(ddev, ddev->chaining_skb); | 
 | 		if (rc) | 
 | 			goto exit; | 
 |  | 
 | 		goto free_resp; | 
 | 	case DIGITAL_NFC_DEP_PFB_SUPERVISOR_PDU: | 
 | 		if (DIGITAL_NFC_DEP_PFB_IS_TIMEOUT(pfb)) { | 
 | 			rc = -EINVAL; | 
 | 			goto exit; | 
 | 		} | 
 |  | 
 | 		rc = digital_tg_send_atn(ddev); | 
 | 		if (rc) | 
 | 			goto exit; | 
 |  | 
 | 		ddev->atn_count++; | 
 |  | 
 | 		goto free_resp; | 
 | 	} | 
 |  | 
 | 	rc = nfc_tm_data_received(ddev->nfc_dev, resp); | 
 | 	if (rc) | 
 | 		resp = NULL; | 
 |  | 
 | exit: | 
 | 	kfree_skb(ddev->chaining_skb); | 
 | 	ddev->chaining_skb = NULL; | 
 |  | 
 | 	ddev->atn_count = 0; | 
 |  | 
 | 	kfree_skb(ddev->saved_skb); | 
 | 	ddev->saved_skb = NULL; | 
 |  | 
 | 	if (rc) | 
 | 		kfree_skb(resp); | 
 |  | 
 | 	return; | 
 |  | 
 | free_resp: | 
 | 	dev_kfree_skb(resp); | 
 | } | 
 |  | 
 | int digital_tg_send_dep_res(struct nfc_digital_dev *ddev, struct sk_buff *skb) | 
 | { | 
 | 	struct digital_dep_req_res *dep_res; | 
 | 	struct sk_buff *chaining_skb, *tmp_skb; | 
 | 	int rc; | 
 |  | 
 | 	skb_push(skb, sizeof(struct digital_dep_req_res)); | 
 |  | 
 | 	dep_res = (struct digital_dep_req_res *)skb->data; | 
 |  | 
 | 	dep_res->dir = DIGITAL_NFC_DEP_FRAME_DIR_IN; | 
 | 	dep_res->cmd = DIGITAL_CMD_DEP_RES; | 
 | 	dep_res->pfb = ddev->curr_nfc_dep_pni; | 
 |  | 
 | 	if (ddev->did) { | 
 | 		dep_res->pfb |= DIGITAL_NFC_DEP_PFB_DID_BIT; | 
 |  | 
 | 		skb_put_data(skb, &ddev->did, sizeof(ddev->did)); | 
 | 	} | 
 |  | 
 | 	ddev->curr_nfc_dep_pni = | 
 | 		DIGITAL_NFC_DEP_PFB_PNI(ddev->curr_nfc_dep_pni + 1); | 
 |  | 
 | 	chaining_skb = ddev->chaining_skb; | 
 |  | 
 | 	tmp_skb = digital_send_dep_data_prep(ddev, skb, dep_res, NULL); | 
 | 	if (IS_ERR(tmp_skb)) | 
 | 		return PTR_ERR(tmp_skb); | 
 |  | 
 | 	digital_skb_push_dep_sod(ddev, tmp_skb); | 
 |  | 
 | 	ddev->skb_add_crc(tmp_skb); | 
 |  | 
 | 	ddev->saved_skb = pskb_copy(tmp_skb, GFP_KERNEL); | 
 |  | 
 | 	rc = digital_tg_send_cmd(ddev, tmp_skb, 1500, digital_tg_recv_dep_req, | 
 | 				 NULL); | 
 | 	if (rc) { | 
 | 		if (tmp_skb != skb) | 
 | 			kfree_skb(tmp_skb); | 
 |  | 
 | 		kfree_skb(chaining_skb); | 
 | 		ddev->chaining_skb = NULL; | 
 |  | 
 | 		kfree_skb(ddev->saved_skb); | 
 | 		ddev->saved_skb = NULL; | 
 | 	} | 
 |  | 
 | 	return rc; | 
 | } | 
 |  | 
 | static void digital_tg_send_psl_res_complete(struct nfc_digital_dev *ddev, | 
 | 					     void *arg, struct sk_buff *resp) | 
 | { | 
 | 	u8 rf_tech = (unsigned long)arg; | 
 |  | 
 | 	if (IS_ERR(resp)) | 
 | 		return; | 
 |  | 
 | 	digital_tg_set_rf_tech(ddev, rf_tech); | 
 |  | 
 | 	digital_tg_configure_hw(ddev, NFC_DIGITAL_CONFIG_RF_TECH, rf_tech); | 
 |  | 
 | 	digital_tg_listen(ddev, 1500, digital_tg_recv_dep_req, NULL); | 
 |  | 
 | 	dev_kfree_skb(resp); | 
 | } | 
 |  | 
 | static int digital_tg_send_psl_res(struct nfc_digital_dev *ddev, u8 did, | 
 | 				   u8 rf_tech) | 
 | { | 
 | 	struct digital_psl_res *psl_res; | 
 | 	struct sk_buff *skb; | 
 | 	int rc; | 
 |  | 
 | 	skb = digital_skb_alloc(ddev, sizeof(struct digital_psl_res)); | 
 | 	if (!skb) | 
 | 		return -ENOMEM; | 
 |  | 
 | 	skb_put(skb, sizeof(struct digital_psl_res)); | 
 |  | 
 | 	psl_res = (struct digital_psl_res *)skb->data; | 
 |  | 
 | 	psl_res->dir = DIGITAL_NFC_DEP_FRAME_DIR_IN; | 
 | 	psl_res->cmd = DIGITAL_CMD_PSL_RES; | 
 | 	psl_res->did = did; | 
 |  | 
 | 	digital_skb_push_dep_sod(ddev, skb); | 
 |  | 
 | 	ddev->skb_add_crc(skb); | 
 |  | 
 | 	ddev->curr_nfc_dep_pni = 0; | 
 |  | 
 | 	rc = digital_tg_send_cmd(ddev, skb, 0, digital_tg_send_psl_res_complete, | 
 | 				 (void *)(unsigned long)rf_tech); | 
 | 	if (rc) | 
 | 		kfree_skb(skb); | 
 |  | 
 | 	return rc; | 
 | } | 
 |  | 
 | static void digital_tg_recv_psl_req(struct nfc_digital_dev *ddev, void *arg, | 
 | 				    struct sk_buff *resp) | 
 | { | 
 | 	int rc; | 
 | 	struct digital_psl_req *psl_req; | 
 | 	u8 rf_tech; | 
 | 	u8 dsi, payload_size, payload_bits; | 
 |  | 
 | 	if (IS_ERR(resp)) { | 
 | 		rc = PTR_ERR(resp); | 
 | 		resp = NULL; | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	rc = ddev->skb_check_crc(resp); | 
 | 	if (rc) { | 
 | 		PROTOCOL_ERR("14.4.1.6"); | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	rc = digital_skb_pull_dep_sod(ddev, resp); | 
 | 	if (rc) { | 
 | 		PROTOCOL_ERR("14.4.1.2"); | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	psl_req = (struct digital_psl_req *)resp->data; | 
 |  | 
 | 	if (resp->len != sizeof(struct digital_psl_req) || | 
 | 	    psl_req->dir != DIGITAL_NFC_DEP_FRAME_DIR_OUT || | 
 | 	    psl_req->cmd != DIGITAL_CMD_PSL_REQ) { | 
 | 		rc = -EIO; | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	dsi = (psl_req->brs >> 3) & 0x07; | 
 | 	switch (dsi) { | 
 | 	case 0: | 
 | 		rf_tech = NFC_DIGITAL_RF_TECH_106A; | 
 | 		break; | 
 | 	case 1: | 
 | 		rf_tech = NFC_DIGITAL_RF_TECH_212F; | 
 | 		break; | 
 | 	case 2: | 
 | 		rf_tech = NFC_DIGITAL_RF_TECH_424F; | 
 | 		break; | 
 | 	default: | 
 | 		pr_err("Unsupported dsi value %d\n", dsi); | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	payload_bits = DIGITAL_PAYLOAD_FSL_TO_BITS(psl_req->fsl); | 
 | 	payload_size = digital_payload_bits_to_size(payload_bits); | 
 |  | 
 | 	if (!payload_size || (payload_size > min(ddev->local_payload_max, | 
 | 						 ddev->remote_payload_max))) { | 
 | 		rc = -EINVAL; | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	ddev->local_payload_max = payload_size; | 
 | 	ddev->remote_payload_max = payload_size; | 
 |  | 
 | 	rc = digital_tg_send_psl_res(ddev, psl_req->did, rf_tech); | 
 |  | 
 | exit: | 
 | 	kfree_skb(resp); | 
 | } | 
 |  | 
 | static void digital_tg_send_atr_res_complete(struct nfc_digital_dev *ddev, | 
 | 					     void *arg, struct sk_buff *resp) | 
 | { | 
 | 	int offset; | 
 |  | 
 | 	if (IS_ERR(resp)) { | 
 | 		digital_poll_next_tech(ddev); | 
 | 		return; | 
 | 	} | 
 |  | 
 | 	offset = 2; | 
 | 	if (resp->data[0] == DIGITAL_NFC_DEP_NFCA_SOD_SB) | 
 | 		offset++; | 
 |  | 
 | 	ddev->atn_count = 0; | 
 |  | 
 | 	if (resp->data[offset] == DIGITAL_CMD_PSL_REQ) | 
 | 		digital_tg_recv_psl_req(ddev, arg, resp); | 
 | 	else | 
 | 		digital_tg_recv_dep_req(ddev, arg, resp); | 
 | } | 
 |  | 
 | static int digital_tg_send_atr_res(struct nfc_digital_dev *ddev, | 
 | 				   struct digital_atr_req *atr_req) | 
 | { | 
 | 	struct digital_atr_res *atr_res; | 
 | 	struct sk_buff *skb; | 
 | 	u8 *gb, payload_bits; | 
 | 	size_t gb_len; | 
 | 	int rc; | 
 |  | 
 | 	gb = nfc_get_local_general_bytes(ddev->nfc_dev, &gb_len); | 
 | 	if (!gb) | 
 | 		gb_len = 0; | 
 |  | 
 | 	skb = digital_skb_alloc(ddev, sizeof(struct digital_atr_res) + gb_len); | 
 | 	if (!skb) | 
 | 		return -ENOMEM; | 
 |  | 
 | 	skb_put(skb, sizeof(struct digital_atr_res)); | 
 | 	atr_res = (struct digital_atr_res *)skb->data; | 
 |  | 
 | 	memset(atr_res, 0, sizeof(struct digital_atr_res)); | 
 |  | 
 | 	atr_res->dir = DIGITAL_NFC_DEP_FRAME_DIR_IN; | 
 | 	atr_res->cmd = DIGITAL_CMD_ATR_RES; | 
 | 	memcpy(atr_res->nfcid3, atr_req->nfcid3, sizeof(atr_req->nfcid3)); | 
 | 	atr_res->to = DIGITAL_NFC_DEP_TG_MAX_WT; | 
 |  | 
 | 	ddev->local_payload_max = DIGITAL_PAYLOAD_SIZE_MAX; | 
 | 	payload_bits = digital_payload_size_to_bits(ddev->local_payload_max); | 
 | 	atr_res->pp = DIGITAL_PAYLOAD_BITS_TO_PP(payload_bits); | 
 |  | 
 | 	if (gb_len) { | 
 | 		skb_put(skb, gb_len); | 
 |  | 
 | 		atr_res->pp |= DIGITAL_GB_BIT; | 
 | 		memcpy(atr_res->gb, gb, gb_len); | 
 | 	} | 
 |  | 
 | 	digital_skb_push_dep_sod(ddev, skb); | 
 |  | 
 | 	ddev->skb_add_crc(skb); | 
 |  | 
 | 	ddev->curr_nfc_dep_pni = 0; | 
 |  | 
 | 	rc = digital_tg_send_cmd(ddev, skb, 999, | 
 | 				 digital_tg_send_atr_res_complete, NULL); | 
 | 	if (rc) | 
 | 		kfree_skb(skb); | 
 |  | 
 | 	return rc; | 
 | } | 
 |  | 
 | void digital_tg_recv_atr_req(struct nfc_digital_dev *ddev, void *arg, | 
 | 			     struct sk_buff *resp) | 
 | { | 
 | 	int rc; | 
 | 	struct digital_atr_req *atr_req; | 
 | 	size_t gb_len, min_size; | 
 | 	u8 poll_tech_count, payload_bits; | 
 |  | 
 | 	if (IS_ERR(resp)) { | 
 | 		rc = PTR_ERR(resp); | 
 | 		resp = NULL; | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	if (!resp->len) { | 
 | 		rc = -EIO; | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	if (resp->data[0] == DIGITAL_NFC_DEP_NFCA_SOD_SB) { | 
 | 		min_size = DIGITAL_ATR_REQ_MIN_SIZE + 2; | 
 | 		digital_tg_set_rf_tech(ddev, NFC_DIGITAL_RF_TECH_106A); | 
 | 	} else { | 
 | 		min_size = DIGITAL_ATR_REQ_MIN_SIZE + 1; | 
 | 		digital_tg_set_rf_tech(ddev, NFC_DIGITAL_RF_TECH_212F); | 
 | 	} | 
 |  | 
 | 	if (resp->len < min_size) { | 
 | 		rc = -EIO; | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	ddev->curr_protocol = NFC_PROTO_NFC_DEP_MASK; | 
 |  | 
 | 	rc = ddev->skb_check_crc(resp); | 
 | 	if (rc) { | 
 | 		PROTOCOL_ERR("14.4.1.6"); | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	rc = digital_skb_pull_dep_sod(ddev, resp); | 
 | 	if (rc) { | 
 | 		PROTOCOL_ERR("14.4.1.2"); | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	atr_req = (struct digital_atr_req *)resp->data; | 
 |  | 
 | 	if (atr_req->dir != DIGITAL_NFC_DEP_FRAME_DIR_OUT || | 
 | 	    atr_req->cmd != DIGITAL_CMD_ATR_REQ || | 
 | 	    atr_req->did > DIGITAL_DID_MAX) { | 
 | 		rc = -EINVAL; | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	payload_bits = DIGITAL_PAYLOAD_PP_TO_BITS(atr_req->pp); | 
 | 	ddev->remote_payload_max = digital_payload_bits_to_size(payload_bits); | 
 |  | 
 | 	if (!ddev->remote_payload_max) { | 
 | 		rc = -EINVAL; | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	ddev->did = atr_req->did; | 
 |  | 
 | 	rc = digital_tg_configure_hw(ddev, NFC_DIGITAL_CONFIG_FRAMING, | 
 | 				     NFC_DIGITAL_FRAMING_NFC_DEP_ACTIVATED); | 
 | 	if (rc) | 
 | 		goto exit; | 
 |  | 
 | 	rc = digital_tg_send_atr_res(ddev, atr_req); | 
 | 	if (rc) | 
 | 		goto exit; | 
 |  | 
 | 	gb_len = resp->len - sizeof(struct digital_atr_req); | 
 |  | 
 | 	poll_tech_count = ddev->poll_tech_count; | 
 | 	ddev->poll_tech_count = 0; | 
 |  | 
 | 	rc = nfc_tm_activated(ddev->nfc_dev, NFC_PROTO_NFC_DEP_MASK, | 
 | 			      NFC_COMM_PASSIVE, atr_req->gb, gb_len); | 
 | 	if (rc) { | 
 | 		ddev->poll_tech_count = poll_tech_count; | 
 | 		goto exit; | 
 | 	} | 
 |  | 
 | 	rc = 0; | 
 | exit: | 
 | 	if (rc) | 
 | 		digital_poll_next_tech(ddev); | 
 |  | 
 | 	dev_kfree_skb(resp); | 
 | } |