Commit | Line | Data |
---|---|---|
2130fb97 CR |
1 | /* |
2 | * Copyright (C) 2014 STMicroelectronics SAS. All rights reserved. | |
3 | * | |
4 | * This program is free software; you can redistribute it and/or modify it | |
5 | * under the terms and conditions of the GNU General Public License, | |
6 | * version 2, as published by the Free Software Foundation. | |
7 | * | |
8 | * This program is distributed in the hope that it will be useful, | |
9 | * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
10 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
11 | * GNU General Public License for more details. | |
12 | * | |
13 | * You should have received a copy of the GNU General Public License | |
14 | * along with this program; if not, see <http://www.gnu.org/licenses/>. | |
15 | */ | |
16 | ||
17 | #include <net/nfc/hci.h> | |
18 | ||
19 | #include "st21nfca.h" | |
2130fb97 CR |
20 | |
21 | #define ST21NFCA_EVT_UICC_ACTIVATE 0x10 | |
57dc828a | 22 | #define ST21NFCA_EVT_UICC_DEACTIVATE 0x13 |
2130fb97 CR |
23 | #define ST21NFCA_EVT_SE_HARD_RESET 0x20 |
24 | #define ST21NFCA_EVT_SE_SOFT_RESET 0x11 | |
25 | #define ST21NFCA_EVT_SE_END_OF_APDU_TRANSFER 0x21 | |
26 | #define ST21NFCA_EVT_SE_ACTIVATE 0x22 | |
27 | #define ST21NFCA_EVT_SE_DEACTIVATE 0x23 | |
28 | ||
29 | #define ST21NFCA_EVT_TRANSMIT_DATA 0x10 | |
30 | #define ST21NFCA_EVT_WTX_REQUEST 0x11 | |
31 | ||
32 | #define ST21NFCA_EVT_CONNECTIVITY 0x10 | |
33 | #define ST21NFCA_EVT_TRANSACTION 0x12 | |
34 | ||
2130fb97 CR |
35 | #define ST21NFCA_SE_TO_HOT_PLUG 1000 |
36 | /* Connectivity pipe only */ | |
37 | #define ST21NFCA_SE_COUNT_PIPE_UICC 0x01 | |
38 | /* Connectivity + APDU Reader pipe */ | |
39 | #define ST21NFCA_SE_COUNT_PIPE_EMBEDDED 0x02 | |
40 | ||
41 | #define ST21NFCA_SE_MODE_OFF 0x00 | |
42 | #define ST21NFCA_SE_MODE_ON 0x01 | |
43 | ||
44 | #define ST21NFCA_PARAM_ATR 0x01 | |
45 | #define ST21NFCA_ATR_DEFAULT_BWI 0x04 | |
46 | ||
47 | /* | |
48 | * WT = 2^BWI/10[s], convert into msecs and add a secure | |
49 | * room by increasing by 2 this timeout | |
50 | */ | |
51 | #define ST21NFCA_BWI_TO_TIMEOUT(x) ((1 << x) * 200) | |
52 | #define ST21NFCA_ATR_GET_Y_FROM_TD(x) (x >> 4) | |
53 | ||
54 | /* If TA is present bit 0 is set */ | |
55 | #define ST21NFCA_ATR_TA_PRESENT(x) (x & 0x01) | |
56 | /* If TB is present bit 1 is set */ | |
57 | #define ST21NFCA_ATR_TB_PRESENT(x) (x & 0x02) | |
58 | ||
59 | static u8 st21nfca_se_get_bwi(struct nfc_hci_dev *hdev) | |
60 | { | |
61 | int i; | |
62 | u8 td; | |
63 | struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev); | |
64 | ||
65 | /* Bits 8 to 5 of the first TB for T=1 encode BWI from zero to nine */ | |
66 | for (i = 1; i < ST21NFCA_ESE_MAX_LENGTH; i++) { | |
67 | td = ST21NFCA_ATR_GET_Y_FROM_TD(info->se_info.atr[i]); | |
68 | if (ST21NFCA_ATR_TA_PRESENT(td)) | |
69 | i++; | |
70 | if (ST21NFCA_ATR_TB_PRESENT(td)) { | |
71 | i++; | |
72 | return info->se_info.atr[i] >> 4; | |
73 | } | |
74 | } | |
75 | return ST21NFCA_ATR_DEFAULT_BWI; | |
76 | } | |
77 | ||
78 | static void st21nfca_se_get_atr(struct nfc_hci_dev *hdev) | |
79 | { | |
80 | int r; | |
81 | struct sk_buff *skb; | |
82 | struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev); | |
83 | ||
84 | r = nfc_hci_get_param(hdev, ST21NFCA_APDU_READER_GATE, | |
85 | ST21NFCA_PARAM_ATR, &skb); | |
86 | if (r < 0) | |
87 | return; | |
88 | ||
89 | if (skb->len <= ST21NFCA_ESE_MAX_LENGTH) { | |
90 | memcpy(info->se_info.atr, skb->data, skb->len); | |
91 | info->se_info.wt_timeout = | |
92 | ST21NFCA_BWI_TO_TIMEOUT(st21nfca_se_get_bwi(hdev)); | |
93 | } | |
94 | kfree_skb(skb); | |
95 | } | |
96 | ||
97 | static int st21nfca_hci_control_se(struct nfc_hci_dev *hdev, u32 se_idx, | |
98 | u8 state) | |
99 | { | |
100 | struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev); | |
cde2aa99 | 101 | int r, i; |
2130fb97 CR |
102 | struct sk_buff *sk_host_list; |
103 | u8 se_event, host_id; | |
104 | ||
105 | switch (se_idx) { | |
106 | case NFC_HCI_UICC_HOST_ID: | |
107 | se_event = (state == ST21NFCA_SE_MODE_ON ? | |
108 | ST21NFCA_EVT_UICC_ACTIVATE : | |
109 | ST21NFCA_EVT_UICC_DEACTIVATE); | |
110 | ||
111 | info->se_info.count_pipes = 0; | |
112 | info->se_info.expected_pipes = ST21NFCA_SE_COUNT_PIPE_UICC; | |
113 | break; | |
114 | case ST21NFCA_ESE_HOST_ID: | |
115 | se_event = (state == ST21NFCA_SE_MODE_ON ? | |
116 | ST21NFCA_EVT_SE_ACTIVATE : | |
117 | ST21NFCA_EVT_SE_DEACTIVATE); | |
118 | ||
119 | info->se_info.count_pipes = 0; | |
120 | info->se_info.expected_pipes = ST21NFCA_SE_COUNT_PIPE_EMBEDDED; | |
121 | break; | |
122 | default: | |
123 | return -EINVAL; | |
124 | } | |
125 | ||
126 | /* | |
127 | * Wait for an EVT_HOT_PLUG in order to | |
128 | * retrieve a relevant host list. | |
129 | */ | |
130 | reinit_completion(&info->se_info.req_completion); | |
131 | r = nfc_hci_send_event(hdev, ST21NFCA_DEVICE_MGNT_GATE, se_event, | |
132 | NULL, 0); | |
133 | if (r < 0) | |
134 | return r; | |
135 | ||
136 | mod_timer(&info->se_info.se_active_timer, jiffies + | |
137 | msecs_to_jiffies(ST21NFCA_SE_TO_HOT_PLUG)); | |
138 | info->se_info.se_active = true; | |
139 | ||
140 | /* Ignore return value and check in any case the host_list */ | |
141 | wait_for_completion_interruptible(&info->se_info.req_completion); | |
142 | ||
143 | r = nfc_hci_get_param(hdev, NFC_HCI_ADMIN_GATE, | |
144 | NFC_HCI_ADMIN_HOST_LIST, | |
145 | &sk_host_list); | |
146 | if (r < 0) | |
147 | return r; | |
148 | ||
cde2aa99 CR |
149 | for (i = 0; i < sk_host_list->len && |
150 | sk_host_list->data[i] != se_idx; i++) | |
151 | ; | |
152 | host_id = sk_host_list->data[i]; | |
2130fb97 CR |
153 | kfree_skb(sk_host_list); |
154 | ||
155 | if (state == ST21NFCA_SE_MODE_ON && host_id == se_idx) | |
156 | return se_idx; | |
157 | else if (state == ST21NFCA_SE_MODE_OFF && host_id != se_idx) | |
158 | return se_idx; | |
159 | ||
160 | return -1; | |
161 | } | |
162 | ||
163 | int st21nfca_hci_discover_se(struct nfc_hci_dev *hdev) | |
164 | { | |
165 | struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev); | |
166 | int se_count = 0; | |
167 | ||
15d17170 CR |
168 | if (test_bit(ST21NFCA_FACTORY_MODE, &hdev->quirks)) |
169 | return 0; | |
170 | ||
2130fb97 CR |
171 | if (info->se_status->is_uicc_present) { |
172 | nfc_add_se(hdev->ndev, NFC_HCI_UICC_HOST_ID, NFC_SE_UICC); | |
173 | se_count++; | |
174 | } | |
175 | ||
176 | if (info->se_status->is_ese_present) { | |
177 | nfc_add_se(hdev->ndev, ST21NFCA_ESE_HOST_ID, NFC_SE_EMBEDDED); | |
178 | se_count++; | |
179 | } | |
180 | ||
181 | return !se_count; | |
182 | } | |
183 | EXPORT_SYMBOL(st21nfca_hci_discover_se); | |
184 | ||
185 | int st21nfca_hci_enable_se(struct nfc_hci_dev *hdev, u32 se_idx) | |
186 | { | |
187 | int r; | |
188 | ||
189 | /* | |
190 | * According to upper layer, se_idx == NFC_SE_UICC when | |
191 | * info->se_status->is_uicc_enable is true should never happen. | |
192 | * Same for eSE. | |
193 | */ | |
194 | r = st21nfca_hci_control_se(hdev, se_idx, ST21NFCA_SE_MODE_ON); | |
2130fb97 CR |
195 | if (r == ST21NFCA_ESE_HOST_ID) { |
196 | st21nfca_se_get_atr(hdev); | |
197 | r = nfc_hci_send_event(hdev, ST21NFCA_APDU_READER_GATE, | |
198 | ST21NFCA_EVT_SE_SOFT_RESET, NULL, 0); | |
199 | if (r < 0) | |
200 | return r; | |
201 | } else if (r < 0) { | |
202 | /* | |
203 | * The activation tentative failed, the secure element | |
204 | * is not connected. Remove from the list. | |
205 | */ | |
206 | nfc_remove_se(hdev->ndev, se_idx); | |
207 | return r; | |
208 | } | |
209 | ||
210 | return 0; | |
211 | } | |
212 | EXPORT_SYMBOL(st21nfca_hci_enable_se); | |
213 | ||
214 | int st21nfca_hci_disable_se(struct nfc_hci_dev *hdev, u32 se_idx) | |
215 | { | |
216 | int r; | |
217 | ||
218 | /* | |
219 | * According to upper layer, se_idx == NFC_SE_UICC when | |
220 | * info->se_status->is_uicc_enable is true should never happen | |
221 | * Same for eSE. | |
222 | */ | |
223 | r = st21nfca_hci_control_se(hdev, se_idx, ST21NFCA_SE_MODE_OFF); | |
224 | if (r < 0) | |
225 | return r; | |
226 | ||
227 | return 0; | |
228 | } | |
229 | EXPORT_SYMBOL(st21nfca_hci_disable_se); | |
230 | ||
231 | int st21nfca_hci_se_io(struct nfc_hci_dev *hdev, u32 se_idx, | |
232 | u8 *apdu, size_t apdu_length, | |
233 | se_io_cb_t cb, void *cb_context) | |
234 | { | |
235 | struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev); | |
236 | ||
237 | pr_debug("se_io %x\n", se_idx); | |
238 | ||
239 | switch (se_idx) { | |
240 | case ST21NFCA_ESE_HOST_ID: | |
241 | info->se_info.cb = cb; | |
242 | info->se_info.cb_context = cb_context; | |
243 | mod_timer(&info->se_info.bwi_timer, jiffies + | |
244 | msecs_to_jiffies(info->se_info.wt_timeout)); | |
245 | info->se_info.bwi_active = true; | |
246 | return nfc_hci_send_event(hdev, ST21NFCA_APDU_READER_GATE, | |
247 | ST21NFCA_EVT_TRANSMIT_DATA, | |
248 | apdu, apdu_length); | |
249 | default: | |
250 | return -ENODEV; | |
251 | } | |
252 | } | |
253 | EXPORT_SYMBOL(st21nfca_hci_se_io); | |
254 | ||
255 | static void st21nfca_se_wt_timeout(unsigned long data) | |
256 | { | |
257 | /* | |
258 | * No answer from the secure element | |
259 | * within the defined timeout. | |
260 | * Let's send a reset request as recovery procedure. | |
261 | * According to the situation, we first try to send a software reset | |
262 | * to the secure element. If the next command is still not | |
263 | * answering in time, we send to the CLF a secure element hardware | |
264 | * reset request. | |
265 | */ | |
266 | /* hardware reset managed through VCC_UICC_OUT power supply */ | |
267 | u8 param = 0x01; | |
268 | struct st21nfca_hci_info *info = (struct st21nfca_hci_info *) data; | |
269 | ||
270 | pr_debug("\n"); | |
271 | ||
272 | info->se_info.bwi_active = false; | |
273 | ||
274 | if (!info->se_info.xch_error) { | |
275 | info->se_info.xch_error = true; | |
276 | nfc_hci_send_event(info->hdev, ST21NFCA_APDU_READER_GATE, | |
277 | ST21NFCA_EVT_SE_SOFT_RESET, NULL, 0); | |
278 | } else { | |
279 | info->se_info.xch_error = false; | |
280 | nfc_hci_send_event(info->hdev, ST21NFCA_DEVICE_MGNT_GATE, | |
281 | ST21NFCA_EVT_SE_HARD_RESET, ¶m, 1); | |
282 | } | |
283 | info->se_info.cb(info->se_info.cb_context, NULL, 0, -ETIME); | |
284 | } | |
285 | ||
286 | static void st21nfca_se_activation_timeout(unsigned long data) | |
287 | { | |
288 | struct st21nfca_hci_info *info = (struct st21nfca_hci_info *) data; | |
289 | ||
290 | pr_debug("\n"); | |
291 | ||
292 | info->se_info.se_active = false; | |
293 | ||
294 | complete(&info->se_info.req_completion); | |
295 | } | |
296 | ||
297 | /* | |
298 | * Returns: | |
299 | * <= 0: driver handled the event, skb consumed | |
300 | * 1: driver does not handle the event, please do standard processing | |
301 | */ | |
302 | int st21nfca_connectivity_event_received(struct nfc_hci_dev *hdev, u8 host, | |
303 | u8 event, struct sk_buff *skb) | |
304 | { | |
305 | int r = 0; | |
26fc6c7f CR |
306 | struct device *dev = &hdev->ndev->dev; |
307 | struct nfc_evt_transaction *transaction; | |
2130fb97 CR |
308 | |
309 | pr_debug("connectivity gate event: %x\n", event); | |
310 | ||
311 | switch (event) { | |
312 | case ST21NFCA_EVT_CONNECTIVITY: | |
72c54c42 | 313 | r = nfc_se_connectivity(hdev->ndev, host); |
a6e57ec6 | 314 | break; |
2130fb97 | 315 | case ST21NFCA_EVT_TRANSACTION: |
9dbe7763 CR |
316 | /* |
317 | * According to specification etsi 102 622 | |
318 | * 11.2.2.4 EVT_TRANSACTION Table 52 | |
319 | * Description Tag Length | |
320 | * AID 81 5 to 16 | |
321 | * PARAMETERS 82 0 to 255 | |
322 | */ | |
26fc6c7f CR |
323 | if (skb->len < NFC_MIN_AID_LENGTH + 2 && |
324 | skb->data[0] != NFC_EVT_TRANSACTION_AID_TAG) | |
325 | return -EPROTO; | |
326 | ||
327 | transaction = (struct nfc_evt_transaction *)devm_kzalloc(dev, | |
328 | skb->len - 2, GFP_KERNEL); | |
329 | ||
330 | transaction->aid_len = skb->data[1]; | |
9dbe7763 CR |
331 | memcpy(transaction->aid, &skb->data[2], |
332 | transaction->aid_len); | |
26fc6c7f | 333 | |
9dbe7763 | 334 | /* Check next byte is PARAMETERS tag (82) */ |
26fc6c7f CR |
335 | if (skb->data[transaction->aid_len + 2] != |
336 | NFC_EVT_TRANSACTION_PARAMS_TAG) | |
337 | return -EPROTO; | |
338 | ||
339 | transaction->params_len = skb->data[transaction->aid_len + 3]; | |
340 | memcpy(transaction->params, skb->data + | |
341 | transaction->aid_len + 4, transaction->params_len); | |
342 | ||
343 | r = nfc_se_transaction(hdev->ndev, host, transaction); | |
a6e57ec6 | 344 | break; |
2130fb97 | 345 | default: |
a9e062d0 | 346 | nfc_err(&hdev->ndev->dev, "Unexpected event on connectivity gate\n"); |
2130fb97 CR |
347 | return 1; |
348 | } | |
349 | kfree_skb(skb); | |
350 | return r; | |
351 | } | |
352 | EXPORT_SYMBOL(st21nfca_connectivity_event_received); | |
353 | ||
354 | int st21nfca_apdu_reader_event_received(struct nfc_hci_dev *hdev, | |
355 | u8 event, struct sk_buff *skb) | |
356 | { | |
357 | int r = 0; | |
358 | struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev); | |
359 | ||
360 | pr_debug("apdu reader gate event: %x\n", event); | |
361 | ||
362 | switch (event) { | |
363 | case ST21NFCA_EVT_TRANSMIT_DATA: | |
364 | del_timer_sync(&info->se_info.bwi_timer); | |
365 | info->se_info.bwi_active = false; | |
366 | r = nfc_hci_send_event(hdev, ST21NFCA_DEVICE_MGNT_GATE, | |
367 | ST21NFCA_EVT_SE_END_OF_APDU_TRANSFER, NULL, 0); | |
368 | if (r < 0) | |
369 | goto exit; | |
370 | ||
371 | info->se_info.cb(info->se_info.cb_context, | |
372 | skb->data, skb->len, 0); | |
373 | break; | |
374 | case ST21NFCA_EVT_WTX_REQUEST: | |
375 | mod_timer(&info->se_info.bwi_timer, jiffies + | |
376 | msecs_to_jiffies(info->se_info.wt_timeout)); | |
377 | break; | |
a9e062d0 CR |
378 | default: |
379 | nfc_err(&hdev->ndev->dev, "Unexpected event on apdu reader gate\n"); | |
380 | return 1; | |
2130fb97 CR |
381 | } |
382 | ||
383 | exit: | |
384 | kfree_skb(skb); | |
385 | return r; | |
386 | } | |
387 | EXPORT_SYMBOL(st21nfca_apdu_reader_event_received); | |
388 | ||
389 | void st21nfca_se_init(struct nfc_hci_dev *hdev) | |
390 | { | |
391 | struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev); | |
392 | ||
393 | init_completion(&info->se_info.req_completion); | |
394 | /* initialize timers */ | |
395 | init_timer(&info->se_info.bwi_timer); | |
396 | info->se_info.bwi_timer.data = (unsigned long)info; | |
397 | info->se_info.bwi_timer.function = st21nfca_se_wt_timeout; | |
398 | info->se_info.bwi_active = false; | |
399 | ||
400 | init_timer(&info->se_info.se_active_timer); | |
401 | info->se_info.se_active_timer.data = (unsigned long)info; | |
402 | info->se_info.se_active_timer.function = st21nfca_se_activation_timeout; | |
403 | info->se_info.se_active = false; | |
404 | ||
405 | info->se_info.count_pipes = 0; | |
406 | info->se_info.expected_pipes = 0; | |
407 | ||
408 | info->se_info.xch_error = false; | |
409 | ||
410 | info->se_info.wt_timeout = | |
411 | ST21NFCA_BWI_TO_TIMEOUT(ST21NFCA_ATR_DEFAULT_BWI); | |
412 | } | |
413 | EXPORT_SYMBOL(st21nfca_se_init); | |
414 | ||
415 | void st21nfca_se_deinit(struct nfc_hci_dev *hdev) | |
416 | { | |
417 | struct st21nfca_hci_info *info = nfc_hci_get_clientdata(hdev); | |
418 | ||
419 | if (info->se_info.bwi_active) | |
420 | del_timer_sync(&info->se_info.bwi_timer); | |
421 | if (info->se_info.se_active) | |
422 | del_timer_sync(&info->se_info.se_active_timer); | |
423 | ||
424 | info->se_info.bwi_active = false; | |
425 | info->se_info.se_active = false; | |
426 | } | |
427 | EXPORT_SYMBOL(st21nfca_se_deinit); |