]>
Commit | Line | Data |
---|---|---|
2130fb97 CR |
1 | /* |
2 | * Copyright (C) 2014 STMicroelectronics SAS. All rights reserved. | |
3 | * | |
4 | * This program is free software; you can redistribute it and/or modify it | |
5 | * under the terms and conditions of the GNU General Public License, | |
6 | * version 2, as published by the Free Software Foundation. | |
7 | * | |
8 | * This program is distributed in the hope that it will be useful, | |
9 | * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
10 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
11 | * GNU General Public License for more details. | |
12 | * | |
13 | * You should have received a copy of the GNU General Public License | |
14 | * along with this program; if not, see <http://www.gnu.org/licenses/>. | |
15 | */ | |
16 | ||
17 | #include <net/nfc/hci.h> | |
18 | ||
19 | #include "st21nfca.h" | |
2130fb97 CR |
20 | |
21 | #define ST21NFCA_EVT_UICC_ACTIVATE 0x10 | |
22 | #define ST21NFCA_EVT_UICC_DEACTIVATE 0x13 | |
23 | #define ST21NFCA_EVT_SE_HARD_RESET 0x20 | |
24 | #define ST21NFCA_EVT_SE_SOFT_RESET 0x11 | |
25 | #define ST21NFCA_EVT_SE_END_OF_APDU_TRANSFER 0x21 | |
26 | #define ST21NFCA_EVT_SE_ACTIVATE 0x22 | |
27 | #define ST21NFCA_EVT_SE_DEACTIVATE 0x23 | |
28 | ||
29 | #define ST21NFCA_EVT_TRANSMIT_DATA 0x10 | |
30 | #define ST21NFCA_EVT_WTX_REQUEST 0x11 | |
31 | ||
32 | #define ST21NFCA_EVT_CONNECTIVITY 0x10 | |
33 | #define ST21NFCA_EVT_TRANSACTION 0x12 | |
34 | ||
35 | #define ST21NFCA_ESE_HOST_ID 0xc0 | |
36 | ||
37 | #define ST21NFCA_SE_TO_HOT_PLUG 1000 | |
38 | /* Connectivity pipe only */ | |
39 | #define ST21NFCA_SE_COUNT_PIPE_UICC 0x01 | |
40 | /* Connectivity + APDU Reader pipe */ | |
41 | #define ST21NFCA_SE_COUNT_PIPE_EMBEDDED 0x02 | |
42 | ||
43 | #define ST21NFCA_SE_MODE_OFF 0x00 | |
44 | #define ST21NFCA_SE_MODE_ON 0x01 | |
45 | ||
46 | #define ST21NFCA_PARAM_ATR 0x01 | |
47 | #define ST21NFCA_ATR_DEFAULT_BWI 0x04 | |
48 | ||
49 | /* | |
50 | * WT = 2^BWI/10[s], convert into msecs and add a secure | |
51 | * room by increasing by 2 this timeout | |
52 | */ | |
53 | #define ST21NFCA_BWI_TO_TIMEOUT(x) ((1 << x) * 200) | |
54 | #define ST21NFCA_ATR_GET_Y_FROM_TD(x) (x >> 4) | |
55 | ||
56 | /* If TA is present bit 0 is set */ | |
57 | #define ST21NFCA_ATR_TA_PRESENT(x) (x & 0x01) | |
58 | /* If TB is present bit 1 is set */ | |
59 | #define ST21NFCA_ATR_TB_PRESENT(x) (x & 0x02) | |
60 | ||
61 | static u8 st21nfca_se_get_bwi(struct nfc_hci_dev *hdev) | |
62 | { | |
63 | int i; | |
64 | u8 td; | |
65 | struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev); | |
66 | ||
67 | /* Bits 8 to 5 of the first TB for T=1 encode BWI from zero to nine */ | |
68 | for (i = 1; i < ST21NFCA_ESE_MAX_LENGTH; i++) { | |
69 | td = ST21NFCA_ATR_GET_Y_FROM_TD(info->se_info.atr[i]); | |
70 | if (ST21NFCA_ATR_TA_PRESENT(td)) | |
71 | i++; | |
72 | if (ST21NFCA_ATR_TB_PRESENT(td)) { | |
73 | i++; | |
74 | return info->se_info.atr[i] >> 4; | |
75 | } | |
76 | } | |
77 | return ST21NFCA_ATR_DEFAULT_BWI; | |
78 | } | |
79 | ||
80 | static void st21nfca_se_get_atr(struct nfc_hci_dev *hdev) | |
81 | { | |
82 | int r; | |
83 | struct sk_buff *skb; | |
84 | struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev); | |
85 | ||
86 | r = nfc_hci_get_param(hdev, ST21NFCA_APDU_READER_GATE, | |
87 | ST21NFCA_PARAM_ATR, &skb); | |
88 | if (r < 0) | |
89 | return; | |
90 | ||
91 | if (skb->len <= ST21NFCA_ESE_MAX_LENGTH) { | |
92 | memcpy(info->se_info.atr, skb->data, skb->len); | |
93 | info->se_info.wt_timeout = | |
94 | ST21NFCA_BWI_TO_TIMEOUT(st21nfca_se_get_bwi(hdev)); | |
95 | } | |
96 | kfree_skb(skb); | |
97 | } | |
98 | ||
99 | static int st21nfca_hci_control_se(struct nfc_hci_dev *hdev, u32 se_idx, | |
100 | u8 state) | |
101 | { | |
102 | struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev); | |
cde2aa99 | 103 | int r, i; |
2130fb97 CR |
104 | struct sk_buff *sk_host_list; |
105 | u8 se_event, host_id; | |
106 | ||
107 | switch (se_idx) { | |
108 | case NFC_HCI_UICC_HOST_ID: | |
109 | se_event = (state == ST21NFCA_SE_MODE_ON ? | |
110 | ST21NFCA_EVT_UICC_ACTIVATE : | |
111 | ST21NFCA_EVT_UICC_DEACTIVATE); | |
112 | ||
113 | info->se_info.count_pipes = 0; | |
114 | info->se_info.expected_pipes = ST21NFCA_SE_COUNT_PIPE_UICC; | |
115 | break; | |
116 | case ST21NFCA_ESE_HOST_ID: | |
117 | se_event = (state == ST21NFCA_SE_MODE_ON ? | |
118 | ST21NFCA_EVT_SE_ACTIVATE : | |
119 | ST21NFCA_EVT_SE_DEACTIVATE); | |
120 | ||
121 | info->se_info.count_pipes = 0; | |
122 | info->se_info.expected_pipes = ST21NFCA_SE_COUNT_PIPE_EMBEDDED; | |
123 | break; | |
124 | default: | |
125 | return -EINVAL; | |
126 | } | |
127 | ||
128 | /* | |
129 | * Wait for an EVT_HOT_PLUG in order to | |
130 | * retrieve a relevant host list. | |
131 | */ | |
132 | reinit_completion(&info->se_info.req_completion); | |
133 | r = nfc_hci_send_event(hdev, ST21NFCA_DEVICE_MGNT_GATE, se_event, | |
134 | NULL, 0); | |
135 | if (r < 0) | |
136 | return r; | |
137 | ||
138 | mod_timer(&info->se_info.se_active_timer, jiffies + | |
139 | msecs_to_jiffies(ST21NFCA_SE_TO_HOT_PLUG)); | |
140 | info->se_info.se_active = true; | |
141 | ||
142 | /* Ignore return value and check in any case the host_list */ | |
143 | wait_for_completion_interruptible(&info->se_info.req_completion); | |
144 | ||
145 | r = nfc_hci_get_param(hdev, NFC_HCI_ADMIN_GATE, | |
146 | NFC_HCI_ADMIN_HOST_LIST, | |
147 | &sk_host_list); | |
148 | if (r < 0) | |
149 | return r; | |
150 | ||
cde2aa99 CR |
151 | for (i = 0; i < sk_host_list->len && |
152 | sk_host_list->data[i] != se_idx; i++) | |
153 | ; | |
154 | host_id = sk_host_list->data[i]; | |
2130fb97 CR |
155 | kfree_skb(sk_host_list); |
156 | ||
157 | if (state == ST21NFCA_SE_MODE_ON && host_id == se_idx) | |
158 | return se_idx; | |
159 | else if (state == ST21NFCA_SE_MODE_OFF && host_id != se_idx) | |
160 | return se_idx; | |
161 | ||
162 | return -1; | |
163 | } | |
164 | ||
165 | int st21nfca_hci_discover_se(struct nfc_hci_dev *hdev) | |
166 | { | |
167 | struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev); | |
168 | int se_count = 0; | |
169 | ||
170 | if (info->se_status->is_uicc_present) { | |
171 | nfc_add_se(hdev->ndev, NFC_HCI_UICC_HOST_ID, NFC_SE_UICC); | |
172 | se_count++; | |
173 | } | |
174 | ||
175 | if (info->se_status->is_ese_present) { | |
176 | nfc_add_se(hdev->ndev, ST21NFCA_ESE_HOST_ID, NFC_SE_EMBEDDED); | |
177 | se_count++; | |
178 | } | |
179 | ||
180 | return !se_count; | |
181 | } | |
182 | EXPORT_SYMBOL(st21nfca_hci_discover_se); | |
183 | ||
184 | int st21nfca_hci_enable_se(struct nfc_hci_dev *hdev, u32 se_idx) | |
185 | { | |
186 | int r; | |
187 | ||
188 | /* | |
189 | * According to upper layer, se_idx == NFC_SE_UICC when | |
190 | * info->se_status->is_uicc_enable is true should never happen. | |
191 | * Same for eSE. | |
192 | */ | |
193 | r = st21nfca_hci_control_se(hdev, se_idx, ST21NFCA_SE_MODE_ON); | |
194 | ||
195 | if (r == ST21NFCA_ESE_HOST_ID) { | |
196 | st21nfca_se_get_atr(hdev); | |
197 | r = nfc_hci_send_event(hdev, ST21NFCA_APDU_READER_GATE, | |
198 | ST21NFCA_EVT_SE_SOFT_RESET, NULL, 0); | |
199 | if (r < 0) | |
200 | return r; | |
201 | } else if (r < 0) { | |
202 | /* | |
203 | * The activation tentative failed, the secure element | |
204 | * is not connected. Remove from the list. | |
205 | */ | |
206 | nfc_remove_se(hdev->ndev, se_idx); | |
207 | return r; | |
208 | } | |
209 | ||
210 | return 0; | |
211 | } | |
212 | EXPORT_SYMBOL(st21nfca_hci_enable_se); | |
213 | ||
214 | int st21nfca_hci_disable_se(struct nfc_hci_dev *hdev, u32 se_idx) | |
215 | { | |
216 | int r; | |
217 | ||
218 | /* | |
219 | * According to upper layer, se_idx == NFC_SE_UICC when | |
220 | * info->se_status->is_uicc_enable is true should never happen | |
221 | * Same for eSE. | |
222 | */ | |
223 | r = st21nfca_hci_control_se(hdev, se_idx, ST21NFCA_SE_MODE_OFF); | |
224 | if (r < 0) | |
225 | return r; | |
226 | ||
227 | return 0; | |
228 | } | |
229 | EXPORT_SYMBOL(st21nfca_hci_disable_se); | |
230 | ||
231 | int st21nfca_hci_se_io(struct nfc_hci_dev *hdev, u32 se_idx, | |
232 | u8 *apdu, size_t apdu_length, | |
233 | se_io_cb_t cb, void *cb_context) | |
234 | { | |
235 | struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev); | |
236 | ||
237 | pr_debug("se_io %x\n", se_idx); | |
238 | ||
239 | switch (se_idx) { | |
240 | case ST21NFCA_ESE_HOST_ID: | |
241 | info->se_info.cb = cb; | |
242 | info->se_info.cb_context = cb_context; | |
243 | mod_timer(&info->se_info.bwi_timer, jiffies + | |
244 | msecs_to_jiffies(info->se_info.wt_timeout)); | |
245 | info->se_info.bwi_active = true; | |
246 | return nfc_hci_send_event(hdev, ST21NFCA_APDU_READER_GATE, | |
247 | ST21NFCA_EVT_TRANSMIT_DATA, | |
248 | apdu, apdu_length); | |
249 | default: | |
250 | return -ENODEV; | |
251 | } | |
252 | } | |
253 | EXPORT_SYMBOL(st21nfca_hci_se_io); | |
254 | ||
255 | static void st21nfca_se_wt_timeout(unsigned long data) | |
256 | { | |
257 | /* | |
258 | * No answer from the secure element | |
259 | * within the defined timeout. | |
260 | * Let's send a reset request as recovery procedure. | |
261 | * According to the situation, we first try to send a software reset | |
262 | * to the secure element. If the next command is still not | |
263 | * answering in time, we send to the CLF a secure element hardware | |
264 | * reset request. | |
265 | */ | |
266 | /* hardware reset managed through VCC_UICC_OUT power supply */ | |
267 | u8 param = 0x01; | |
268 | struct st21nfca_hci_info *info = (struct st21nfca_hci_info *) data; | |
269 | ||
270 | pr_debug("\n"); | |
271 | ||
272 | info->se_info.bwi_active = false; | |
273 | ||
274 | if (!info->se_info.xch_error) { | |
275 | info->se_info.xch_error = true; | |
276 | nfc_hci_send_event(info->hdev, ST21NFCA_APDU_READER_GATE, | |
277 | ST21NFCA_EVT_SE_SOFT_RESET, NULL, 0); | |
278 | } else { | |
279 | info->se_info.xch_error = false; | |
280 | nfc_hci_send_event(info->hdev, ST21NFCA_DEVICE_MGNT_GATE, | |
281 | ST21NFCA_EVT_SE_HARD_RESET, ¶m, 1); | |
282 | } | |
283 | info->se_info.cb(info->se_info.cb_context, NULL, 0, -ETIME); | |
284 | } | |
285 | ||
286 | static void st21nfca_se_activation_timeout(unsigned long data) | |
287 | { | |
288 | struct st21nfca_hci_info *info = (struct st21nfca_hci_info *) data; | |
289 | ||
290 | pr_debug("\n"); | |
291 | ||
292 | info->se_info.se_active = false; | |
293 | ||
294 | complete(&info->se_info.req_completion); | |
295 | } | |
296 | ||
297 | /* | |
298 | * Returns: | |
299 | * <= 0: driver handled the event, skb consumed | |
300 | * 1: driver does not handle the event, please do standard processing | |
301 | */ | |
302 | int st21nfca_connectivity_event_received(struct nfc_hci_dev *hdev, u8 host, | |
303 | u8 event, struct sk_buff *skb) | |
304 | { | |
305 | int r = 0; | |
26fc6c7f CR |
306 | struct device *dev = &hdev->ndev->dev; |
307 | struct nfc_evt_transaction *transaction; | |
2130fb97 CR |
308 | |
309 | pr_debug("connectivity gate event: %x\n", event); | |
310 | ||
311 | switch (event) { | |
312 | case ST21NFCA_EVT_CONNECTIVITY: | |
313 | break; | |
314 | case ST21NFCA_EVT_TRANSACTION: | |
9dbe7763 CR |
315 | /* |
316 | * According to specification etsi 102 622 | |
317 | * 11.2.2.4 EVT_TRANSACTION Table 52 | |
318 | * Description Tag Length | |
319 | * AID 81 5 to 16 | |
320 | * PARAMETERS 82 0 to 255 | |
321 | */ | |
26fc6c7f CR |
322 | if (skb->len < NFC_MIN_AID_LENGTH + 2 && |
323 | skb->data[0] != NFC_EVT_TRANSACTION_AID_TAG) | |
324 | return -EPROTO; | |
325 | ||
326 | transaction = (struct nfc_evt_transaction *)devm_kzalloc(dev, | |
327 | skb->len - 2, GFP_KERNEL); | |
328 | ||
329 | transaction->aid_len = skb->data[1]; | |
9dbe7763 CR |
330 | memcpy(transaction->aid, &skb->data[2], |
331 | transaction->aid_len); | |
26fc6c7f | 332 | |
9dbe7763 | 333 | /* Check next byte is PARAMETERS tag (82) */ |
26fc6c7f CR |
334 | if (skb->data[transaction->aid_len + 2] != |
335 | NFC_EVT_TRANSACTION_PARAMS_TAG) | |
336 | return -EPROTO; | |
337 | ||
338 | transaction->params_len = skb->data[transaction->aid_len + 3]; | |
339 | memcpy(transaction->params, skb->data + | |
340 | transaction->aid_len + 4, transaction->params_len); | |
341 | ||
342 | r = nfc_se_transaction(hdev->ndev, host, transaction); | |
2130fb97 CR |
343 | break; |
344 | default: | |
345 | return 1; | |
346 | } | |
347 | kfree_skb(skb); | |
348 | return r; | |
349 | } | |
350 | EXPORT_SYMBOL(st21nfca_connectivity_event_received); | |
351 | ||
352 | int st21nfca_apdu_reader_event_received(struct nfc_hci_dev *hdev, | |
353 | u8 event, struct sk_buff *skb) | |
354 | { | |
355 | int r = 0; | |
356 | struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev); | |
357 | ||
358 | pr_debug("apdu reader gate event: %x\n", event); | |
359 | ||
360 | switch (event) { | |
361 | case ST21NFCA_EVT_TRANSMIT_DATA: | |
362 | del_timer_sync(&info->se_info.bwi_timer); | |
363 | info->se_info.bwi_active = false; | |
364 | r = nfc_hci_send_event(hdev, ST21NFCA_DEVICE_MGNT_GATE, | |
365 | ST21NFCA_EVT_SE_END_OF_APDU_TRANSFER, NULL, 0); | |
366 | if (r < 0) | |
367 | goto exit; | |
368 | ||
369 | info->se_info.cb(info->se_info.cb_context, | |
370 | skb->data, skb->len, 0); | |
371 | break; | |
372 | case ST21NFCA_EVT_WTX_REQUEST: | |
373 | mod_timer(&info->se_info.bwi_timer, jiffies + | |
374 | msecs_to_jiffies(info->se_info.wt_timeout)); | |
375 | break; | |
376 | } | |
377 | ||
378 | exit: | |
379 | kfree_skb(skb); | |
380 | return r; | |
381 | } | |
382 | EXPORT_SYMBOL(st21nfca_apdu_reader_event_received); | |
383 | ||
384 | void st21nfca_se_init(struct nfc_hci_dev *hdev) | |
385 | { | |
386 | struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev); | |
387 | ||
388 | init_completion(&info->se_info.req_completion); | |
389 | /* initialize timers */ | |
390 | init_timer(&info->se_info.bwi_timer); | |
391 | info->se_info.bwi_timer.data = (unsigned long)info; | |
392 | info->se_info.bwi_timer.function = st21nfca_se_wt_timeout; | |
393 | info->se_info.bwi_active = false; | |
394 | ||
395 | init_timer(&info->se_info.se_active_timer); | |
396 | info->se_info.se_active_timer.data = (unsigned long)info; | |
397 | info->se_info.se_active_timer.function = st21nfca_se_activation_timeout; | |
398 | info->se_info.se_active = false; | |
399 | ||
400 | info->se_info.count_pipes = 0; | |
401 | info->se_info.expected_pipes = 0; | |
402 | ||
403 | info->se_info.xch_error = false; | |
404 | ||
405 | info->se_info.wt_timeout = | |
406 | ST21NFCA_BWI_TO_TIMEOUT(ST21NFCA_ATR_DEFAULT_BWI); | |
407 | } | |
408 | EXPORT_SYMBOL(st21nfca_se_init); | |
409 | ||
410 | void st21nfca_se_deinit(struct nfc_hci_dev *hdev) | |
411 | { | |
412 | struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev); | |
413 | ||
414 | if (info->se_info.bwi_active) | |
415 | del_timer_sync(&info->se_info.bwi_timer); | |
416 | if (info->se_info.se_active) | |
417 | del_timer_sync(&info->se_info.se_active_timer); | |
418 | ||
419 | info->se_info.bwi_active = false; | |
420 | info->se_info.se_active = false; | |
421 | } | |
422 | EXPORT_SYMBOL(st21nfca_se_deinit); |