cachepc-linux

Fork of AMDESE/linux with modifications for CachePC side-channel attack
git clone https://git.sinitax.com/sinitax/cachepc-linux
Log | Files | Refs | README | LICENSE | sfeed.txt

rsp.c (11324B)


      1// SPDX-License-Identifier: GPL-2.0-only
      2/*
      3 *  The NFC Controller Interface is the communication protocol between an
      4 *  NFC Controller (NFCC) and a Device Host (DH).
      5 *
      6 *  Copyright (C) 2011 Texas Instruments, Inc.
      7 *
      8 *  Written by Ilan Elias <ilane@ti.com>
      9 *
     10 *  Acknowledgements:
     11 *  This file is based on hci_event.c, which was written
     12 *  by Maxim Krasnyansky.
     13 */
     14
     15#define pr_fmt(fmt) KBUILD_MODNAME ": %s: " fmt, __func__
     16
     17#include <linux/types.h>
     18#include <linux/interrupt.h>
     19#include <linux/bitops.h>
     20#include <linux/skbuff.h>
     21
     22#include "../nfc.h"
     23#include <net/nfc/nci.h>
     24#include <net/nfc/nci_core.h>
     25
     26/* Handle NCI Response packets */
     27
     28static void nci_core_reset_rsp_packet(struct nci_dev *ndev,
     29				      const struct sk_buff *skb)
     30{
     31	const struct nci_core_reset_rsp *rsp = (void *)skb->data;
     32
     33	pr_debug("status 0x%x\n", rsp->status);
     34
     35	/* Handle NCI 1.x ver */
     36	if (skb->len != 1) {
     37		if (rsp->status == NCI_STATUS_OK) {
     38			ndev->nci_ver = rsp->nci_ver;
     39			pr_debug("nci_ver 0x%x, config_status 0x%x\n",
     40				 rsp->nci_ver, rsp->config_status);
     41		}
     42
     43		nci_req_complete(ndev, rsp->status);
     44	}
     45}
     46
     47static u8 nci_core_init_rsp_packet_v1(struct nci_dev *ndev,
     48				      const struct sk_buff *skb)
     49{
     50	const struct nci_core_init_rsp_1 *rsp_1 = (void *)skb->data;
     51	const struct nci_core_init_rsp_2 *rsp_2;
     52
     53	pr_debug("status 0x%x\n", rsp_1->status);
     54
     55	if (rsp_1->status != NCI_STATUS_OK)
     56		return rsp_1->status;
     57
     58	ndev->nfcc_features = __le32_to_cpu(rsp_1->nfcc_features);
     59	ndev->num_supported_rf_interfaces = rsp_1->num_supported_rf_interfaces;
     60
     61	ndev->num_supported_rf_interfaces =
     62		min((int)ndev->num_supported_rf_interfaces,
     63		    NCI_MAX_SUPPORTED_RF_INTERFACES);
     64
     65	memcpy(ndev->supported_rf_interfaces,
     66	       rsp_1->supported_rf_interfaces,
     67	       ndev->num_supported_rf_interfaces);
     68
     69	rsp_2 = (void *) (skb->data + 6 + rsp_1->num_supported_rf_interfaces);
     70
     71	ndev->max_logical_connections = rsp_2->max_logical_connections;
     72	ndev->max_routing_table_size =
     73		__le16_to_cpu(rsp_2->max_routing_table_size);
     74	ndev->max_ctrl_pkt_payload_len =
     75		rsp_2->max_ctrl_pkt_payload_len;
     76	ndev->max_size_for_large_params =
     77		__le16_to_cpu(rsp_2->max_size_for_large_params);
     78	ndev->manufact_id =
     79		rsp_2->manufact_id;
     80	ndev->manufact_specific_info =
     81		__le32_to_cpu(rsp_2->manufact_specific_info);
     82
     83	return NCI_STATUS_OK;
     84}
     85
     86static u8 nci_core_init_rsp_packet_v2(struct nci_dev *ndev,
     87				      const struct sk_buff *skb)
     88{
     89	const struct nci_core_init_rsp_nci_ver2 *rsp = (void *)skb->data;
     90	const u8 *supported_rf_interface = rsp->supported_rf_interfaces;
     91	u8 rf_interface_idx = 0;
     92	u8 rf_extension_cnt = 0;
     93
     94	pr_debug("status %x\n", rsp->status);
     95
     96	if (rsp->status != NCI_STATUS_OK)
     97		return rsp->status;
     98
     99	ndev->nfcc_features = __le32_to_cpu(rsp->nfcc_features);
    100	ndev->num_supported_rf_interfaces = rsp->num_supported_rf_interfaces;
    101
    102	ndev->num_supported_rf_interfaces =
    103		min((int)ndev->num_supported_rf_interfaces,
    104		    NCI_MAX_SUPPORTED_RF_INTERFACES);
    105
    106	while (rf_interface_idx < ndev->num_supported_rf_interfaces) {
    107		ndev->supported_rf_interfaces[rf_interface_idx++] = *supported_rf_interface++;
    108
    109		/* skip rf extension parameters */
    110		rf_extension_cnt = *supported_rf_interface++;
    111		supported_rf_interface += rf_extension_cnt;
    112	}
    113
    114	ndev->max_logical_connections = rsp->max_logical_connections;
    115	ndev->max_routing_table_size =
    116			__le16_to_cpu(rsp->max_routing_table_size);
    117	ndev->max_ctrl_pkt_payload_len =
    118			rsp->max_ctrl_pkt_payload_len;
    119	ndev->max_size_for_large_params = NCI_MAX_LARGE_PARAMS_NCI_v2;
    120
    121	return NCI_STATUS_OK;
    122}
    123
    124static void nci_core_init_rsp_packet(struct nci_dev *ndev, const struct sk_buff *skb)
    125{
    126	u8 status = 0;
    127
    128	if (!(ndev->nci_ver & NCI_VER_2_MASK))
    129		status = nci_core_init_rsp_packet_v1(ndev, skb);
    130	else
    131		status = nci_core_init_rsp_packet_v2(ndev, skb);
    132
    133	if (status != NCI_STATUS_OK)
    134		goto exit;
    135
    136	pr_debug("nfcc_features 0x%x\n",
    137		 ndev->nfcc_features);
    138	pr_debug("num_supported_rf_interfaces %d\n",
    139		 ndev->num_supported_rf_interfaces);
    140	pr_debug("supported_rf_interfaces[0] 0x%x\n",
    141		 ndev->supported_rf_interfaces[0]);
    142	pr_debug("supported_rf_interfaces[1] 0x%x\n",
    143		 ndev->supported_rf_interfaces[1]);
    144	pr_debug("supported_rf_interfaces[2] 0x%x\n",
    145		 ndev->supported_rf_interfaces[2]);
    146	pr_debug("supported_rf_interfaces[3] 0x%x\n",
    147		 ndev->supported_rf_interfaces[3]);
    148	pr_debug("max_logical_connections %d\n",
    149		 ndev->max_logical_connections);
    150	pr_debug("max_routing_table_size %d\n",
    151		 ndev->max_routing_table_size);
    152	pr_debug("max_ctrl_pkt_payload_len %d\n",
    153		 ndev->max_ctrl_pkt_payload_len);
    154	pr_debug("max_size_for_large_params %d\n",
    155		 ndev->max_size_for_large_params);
    156	pr_debug("manufact_id 0x%x\n",
    157		 ndev->manufact_id);
    158	pr_debug("manufact_specific_info 0x%x\n",
    159		 ndev->manufact_specific_info);
    160
    161exit:
    162	nci_req_complete(ndev, status);
    163}
    164
    165static void nci_core_set_config_rsp_packet(struct nci_dev *ndev,
    166					   const struct sk_buff *skb)
    167{
    168	const struct nci_core_set_config_rsp *rsp = (void *)skb->data;
    169
    170	pr_debug("status 0x%x\n", rsp->status);
    171
    172	nci_req_complete(ndev, rsp->status);
    173}
    174
    175static void nci_rf_disc_map_rsp_packet(struct nci_dev *ndev,
    176				       const struct sk_buff *skb)
    177{
    178	__u8 status = skb->data[0];
    179
    180	pr_debug("status 0x%x\n", status);
    181
    182	nci_req_complete(ndev, status);
    183}
    184
    185static void nci_rf_disc_rsp_packet(struct nci_dev *ndev,
    186				   const struct sk_buff *skb)
    187{
    188	struct nci_conn_info *conn_info;
    189	__u8 status = skb->data[0];
    190
    191	pr_debug("status 0x%x\n", status);
    192
    193	if (status == NCI_STATUS_OK) {
    194		atomic_set(&ndev->state, NCI_DISCOVERY);
    195
    196		conn_info = ndev->rf_conn_info;
    197		if (!conn_info) {
    198			conn_info = devm_kzalloc(&ndev->nfc_dev->dev,
    199						 sizeof(struct nci_conn_info),
    200						 GFP_KERNEL);
    201			if (!conn_info) {
    202				status = NCI_STATUS_REJECTED;
    203				goto exit;
    204			}
    205			conn_info->conn_id = NCI_STATIC_RF_CONN_ID;
    206			INIT_LIST_HEAD(&conn_info->list);
    207			list_add(&conn_info->list, &ndev->conn_info_list);
    208			ndev->rf_conn_info = conn_info;
    209		}
    210	}
    211
    212exit:
    213	nci_req_complete(ndev, status);
    214}
    215
    216static void nci_rf_disc_select_rsp_packet(struct nci_dev *ndev,
    217					  const struct sk_buff *skb)
    218{
    219	__u8 status = skb->data[0];
    220
    221	pr_debug("status 0x%x\n", status);
    222
    223	/* Complete the request on intf_activated_ntf or generic_error_ntf */
    224	if (status != NCI_STATUS_OK)
    225		nci_req_complete(ndev, status);
    226}
    227
    228static void nci_rf_deactivate_rsp_packet(struct nci_dev *ndev,
    229					 const struct sk_buff *skb)
    230{
    231	__u8 status = skb->data[0];
    232
    233	pr_debug("status 0x%x\n", status);
    234
    235	/* If target was active, complete the request only in deactivate_ntf */
    236	if ((status != NCI_STATUS_OK) ||
    237	    (atomic_read(&ndev->state) != NCI_POLL_ACTIVE)) {
    238		nci_clear_target_list(ndev);
    239		atomic_set(&ndev->state, NCI_IDLE);
    240		nci_req_complete(ndev, status);
    241	}
    242}
    243
    244static void nci_nfcee_discover_rsp_packet(struct nci_dev *ndev,
    245					  const struct sk_buff *skb)
    246{
    247	const struct nci_nfcee_discover_rsp *discover_rsp;
    248
    249	if (skb->len != 2) {
    250		nci_req_complete(ndev, NCI_STATUS_NFCEE_PROTOCOL_ERROR);
    251		return;
    252	}
    253
    254	discover_rsp = (struct nci_nfcee_discover_rsp *)skb->data;
    255
    256	if (discover_rsp->status != NCI_STATUS_OK ||
    257	    discover_rsp->num_nfcee == 0)
    258		nci_req_complete(ndev, discover_rsp->status);
    259}
    260
    261static void nci_nfcee_mode_set_rsp_packet(struct nci_dev *ndev,
    262					  const struct sk_buff *skb)
    263{
    264	__u8 status = skb->data[0];
    265
    266	pr_debug("status 0x%x\n", status);
    267	nci_req_complete(ndev, status);
    268}
    269
    270static void nci_core_conn_create_rsp_packet(struct nci_dev *ndev,
    271					    const struct sk_buff *skb)
    272{
    273	__u8 status = skb->data[0];
    274	struct nci_conn_info *conn_info = NULL;
    275	const struct nci_core_conn_create_rsp *rsp;
    276
    277	pr_debug("status 0x%x\n", status);
    278
    279	if (status == NCI_STATUS_OK) {
    280		rsp = (struct nci_core_conn_create_rsp *)skb->data;
    281
    282		conn_info = devm_kzalloc(&ndev->nfc_dev->dev,
    283					 sizeof(*conn_info), GFP_KERNEL);
    284		if (!conn_info) {
    285			status = NCI_STATUS_REJECTED;
    286			goto exit;
    287		}
    288
    289		conn_info->dest_params = devm_kzalloc(&ndev->nfc_dev->dev,
    290						sizeof(struct dest_spec_params),
    291						GFP_KERNEL);
    292		if (!conn_info->dest_params) {
    293			status = NCI_STATUS_REJECTED;
    294			goto free_conn_info;
    295		}
    296
    297		conn_info->dest_type = ndev->cur_dest_type;
    298		conn_info->dest_params->id = ndev->cur_params.id;
    299		conn_info->dest_params->protocol = ndev->cur_params.protocol;
    300		conn_info->conn_id = rsp->conn_id;
    301
    302		/* Note: data_exchange_cb and data_exchange_cb_context need to
    303		 * be specify out of nci_core_conn_create_rsp_packet
    304		 */
    305
    306		INIT_LIST_HEAD(&conn_info->list);
    307		list_add(&conn_info->list, &ndev->conn_info_list);
    308
    309		if (ndev->cur_params.id == ndev->hci_dev->nfcee_id)
    310			ndev->hci_dev->conn_info = conn_info;
    311
    312		conn_info->conn_id = rsp->conn_id;
    313		conn_info->max_pkt_payload_len = rsp->max_ctrl_pkt_payload_len;
    314		atomic_set(&conn_info->credits_cnt, rsp->credits_cnt);
    315	}
    316
    317free_conn_info:
    318	if (status == NCI_STATUS_REJECTED)
    319		devm_kfree(&ndev->nfc_dev->dev, conn_info);
    320exit:
    321
    322	nci_req_complete(ndev, status);
    323}
    324
    325static void nci_core_conn_close_rsp_packet(struct nci_dev *ndev,
    326					   const struct sk_buff *skb)
    327{
    328	struct nci_conn_info *conn_info;
    329	__u8 status = skb->data[0];
    330
    331	pr_debug("status 0x%x\n", status);
    332	if (status == NCI_STATUS_OK) {
    333		conn_info = nci_get_conn_info_by_conn_id(ndev,
    334							 ndev->cur_conn_id);
    335		if (conn_info) {
    336			list_del(&conn_info->list);
    337			if (conn_info == ndev->rf_conn_info)
    338				ndev->rf_conn_info = NULL;
    339			devm_kfree(&ndev->nfc_dev->dev, conn_info);
    340		}
    341	}
    342	nci_req_complete(ndev, status);
    343}
    344
    345void nci_rsp_packet(struct nci_dev *ndev, struct sk_buff *skb)
    346{
    347	__u16 rsp_opcode = nci_opcode(skb->data);
    348
    349	/* we got a rsp, stop the cmd timer */
    350	del_timer(&ndev->cmd_timer);
    351
    352	pr_debug("NCI RX: MT=rsp, PBF=%d, GID=0x%x, OID=0x%x, plen=%d\n",
    353		 nci_pbf(skb->data),
    354		 nci_opcode_gid(rsp_opcode),
    355		 nci_opcode_oid(rsp_opcode),
    356		 nci_plen(skb->data));
    357
    358	/* strip the nci control header */
    359	skb_pull(skb, NCI_CTRL_HDR_SIZE);
    360
    361	if (nci_opcode_gid(rsp_opcode) == NCI_GID_PROPRIETARY) {
    362		if (nci_prop_rsp_packet(ndev, rsp_opcode, skb) == -ENOTSUPP) {
    363			pr_err("unsupported rsp opcode 0x%x\n",
    364			       rsp_opcode);
    365		}
    366
    367		goto end;
    368	}
    369
    370	switch (rsp_opcode) {
    371	case NCI_OP_CORE_RESET_RSP:
    372		nci_core_reset_rsp_packet(ndev, skb);
    373		break;
    374
    375	case NCI_OP_CORE_INIT_RSP:
    376		nci_core_init_rsp_packet(ndev, skb);
    377		break;
    378
    379	case NCI_OP_CORE_SET_CONFIG_RSP:
    380		nci_core_set_config_rsp_packet(ndev, skb);
    381		break;
    382
    383	case NCI_OP_CORE_CONN_CREATE_RSP:
    384		nci_core_conn_create_rsp_packet(ndev, skb);
    385		break;
    386
    387	case NCI_OP_CORE_CONN_CLOSE_RSP:
    388		nci_core_conn_close_rsp_packet(ndev, skb);
    389		break;
    390
    391	case NCI_OP_RF_DISCOVER_MAP_RSP:
    392		nci_rf_disc_map_rsp_packet(ndev, skb);
    393		break;
    394
    395	case NCI_OP_RF_DISCOVER_RSP:
    396		nci_rf_disc_rsp_packet(ndev, skb);
    397		break;
    398
    399	case NCI_OP_RF_DISCOVER_SELECT_RSP:
    400		nci_rf_disc_select_rsp_packet(ndev, skb);
    401		break;
    402
    403	case NCI_OP_RF_DEACTIVATE_RSP:
    404		nci_rf_deactivate_rsp_packet(ndev, skb);
    405		break;
    406
    407	case NCI_OP_NFCEE_DISCOVER_RSP:
    408		nci_nfcee_discover_rsp_packet(ndev, skb);
    409		break;
    410
    411	case NCI_OP_NFCEE_MODE_SET_RSP:
    412		nci_nfcee_mode_set_rsp_packet(ndev, skb);
    413		break;
    414
    415	default:
    416		pr_err("unknown rsp opcode 0x%x\n", rsp_opcode);
    417		break;
    418	}
    419
    420	nci_core_rsp_packet(ndev, rsp_opcode, skb);
    421end:
    422	kfree_skb(skb);
    423
    424	/* trigger the next cmd */
    425	atomic_set(&ndev->cmd_cnt, 1);
    426	if (!skb_queue_empty(&ndev->cmd_q))
    427		queue_work(ndev->cmd_wq, &ndev->cmd_work);
    428}