/* packet-rfid-pn532.c

 * Dissector for the NXP PN532 Protocol

 *

 * References:

 * http://www.nxp.com/documents/user_manual/141520.pdf

 *

 * Copyright 2012, Tyson Key <tyson.key@gmail.com>

 * Copyright 2013, Michal Labedzki for Tieto Corporation

 *

 * Wireshark - Network traffic analyzer

 * By Gerald Combs <gerald@wireshark.org>

 * Copyright 1998 Gerald Combs

 *

 * SPDX-License-Identifier: GPL-2.0-or-later

 *

 */

#include "config.h"

#include <epan/packet.h>

#include <epan/prefs.h>

#include <epan/expert.h>

#include "packet-usb.h"

static int proto_pn532;

static int hf_pn532_command;

static int hf_pn532_direction;

static int hf_pn532_MaxTg;

static int hf_pn532_Tg;

static int hf_pn532_NbTg;

static int hf_pn532_BrTy;

static int hf_pn532_error;

static int hf_pn532_status_nad_present;

static int hf_pn532_status_mi;

static int hf_pn532_status_error_code;

static int hf_pn532_payload_length;

static int hf_pn532_ic_version;

static int hf_pn532_fw_version;

static int hf_pn532_fw_revision;

static int hf_pn532_fw_support;

static int hf_pn532_fw_support_rfu;

static int hf_pn532_fw_support_iso_018092;

static int hf_pn532_fw_support_iso_iec_14443_type_b;

static int hf_pn532_fw_support_iso_iec_14443_type_a;

static int hf_pn532_14443a_uid;

static int hf_pn532_sam_mode;

static int hf_pn532_sam_timeout;

static int hf_pn532_sam_irq;

static int hf_pn532_config;

static int hf_pn532_config_not_used;

static int hf_pn532_config_auto_rfca;

static int hf_pn532_config_rf;

static int hf_pn532_config_rfu;

static int hf_pn532_config_atr_res_timeout;

static int hf_pn532_config_timeout_non_dep;

static int hf_pn532_config_max_rty_com;

static int hf_pn532_config_max_rty_atr;

static int hf_pn532_config_max_rty_psl;

static int hf_pn532_config_max_rty_passive_activation;

static int hf_pn532_afi;

static int hf_pn532_polling_method;

static int hf_pn532_config_ciu_rf_cfg;

static int hf_pn532_config_ciu_cw_gs_p;

static int hf_pn532_config_ciu_mod_gs_p;

static int hf_pn532_config_ciu_rx_threshold;

static int hf_pn532_config_ciu_demon_rf_on;

static int hf_pn532_config_ciu_demon_rf_off;

static int hf_pn532_config_ciu_gs_n_on;

static int hf_pn532_config_ciu_gs_n_off;

static int hf_pn532_config_ciu_mod_width;

static int hf_pn532_config_ciu_mif_nfc;

static int hf_pn532_config_ciu_tx_bit_phase;

static int hf_pn532_config_212_kbps;

static int hf_pn532_config_424_kbps;

static int hf_pn532_config_848_kbps;

static int hf_pn532_state;

static int hf_pn532_brit_nu_7;

static int hf_pn532_brit_speed_target;

static int hf_pn532_brit_nu_3;

static int hf_pn532_brit_speed_initiator;

static int hf_pn532_tg_response;

static int hf_pn532_initiator_command;

static int hf_pn532_data_in;

static int hf_pn532_data_out;

static int hf_pn532_gt;

static int hf_pn532_mode_nu_7;

static int hf_pn532_mode_nu_3_7;

static int hf_pn532_mode_picc_only;

static int hf_pn532_mode_dep_only;

static int hf_pn532_mode_passive_only;

static int hf_pn532_mode_mifare_parameters;

static int hf_pn532_mode_mifare_parameters_sens_res;

static int hf_pn532_mode_mifare_parameters_nfc_id_1t;

static int hf_pn532_mode_mifare_parameters_sel_res;

static int hf_pn532_mode_felica_parameters;

static int hf_pn532_mode_felica_parameters_nfc_id_2t;

static int hf_pn532_mode_felica_parameters_pad;

static int hf_pn532_mode_felica_parameters_system_code;

static int hf_pn532_mode_nfc_id_3t;

static int hf_pn532_mode_gt_length;

static int hf_pn532_mode_gt;

static int hf_pn532_mode_tk_length;

static int hf_pn532_mode_tk;

static int hf_pn532_mode_baudrate;

static int hf_pn532_mode_iso_iec_14443_4_picc;

static int hf_pn532_mode_dep;

static int hf_pn532_mode_framing_type;

static int hf_pn532_brit;

static int hf_pn532_brti;

static int hf_pn532_txmode_nu_7;

static int hf_pn532_txmode_tx_speed;

static int hf_pn532_txmode_nu_2_3;

static int hf_pn532_txmode_tx_framing;

static int hf_pn532_baudrate;

static int hf_pn532_flags;

static int hf_pn532_flags_rfu_7;

static int hf_pn532_flags_remove_preamble_and_postamble;

static int hf_pn532_flags_iso_14443_4_picc_emulation;

static int hf_pn532_flags_automatic_rats;

static int hf_pn532_flags_rfu_3;

static int hf_pn532_flags_automatic_atr_res;

static int hf_pn532_flags_did_used;

static int hf_pn532_flags_nad_used;

static int hf_pn532_target;

static int hf_pn532_wakeup_enable;

static int hf_pn532_generate_irq;

static int hf_pn532_register_address;

static int hf_pn532_register_value;

static int hf_pn532_field;

static int hf_pn532_brrx;

static int hf_pn532_brtx;

static int hf_pn532_type;

static int hf_pn532_sam_status;

static int hf_pn532_wakeup_enable_i2c;

static int hf_pn532_wakeup_enable_gpio;

static int hf_pn532_wakeup_enable_spi;

static int hf_pn532_wakeup_enable_hsu;

static int hf_pn532_wakeup_enable_rf_level_detector;

static int hf_pn532_wakeup_enable_rfu_2;

static int hf_pn532_wakeup_enable_int_1;

static int hf_pn532_wakeup_enable_int_0;

static int hf_pn532_gpio_ioi1;

static int hf_pn532_gpio_p3;

static int hf_pn532_gpio_p7;

static int hf_pn532_poll_number;

static int hf_pn532_period;

static int hf_pn532_autopoll_type;

static int hf_pn532_autopoll_type_act;

static int hf_pn532_autopoll_type_dep;

static int hf_pn532_autopoll_type_tcl;

static int hf_pn532_autopoll_type_mf_fe;

static int hf_pn532_autopoll_type_not_used;

static int hf_pn532_autopoll_type_baudrate_and_modulation;

static int hf_pn532_target_data;

static int hf_pn532_target_data_length;

static int hf_pn532_nfc_id_3i;

static int hf_pn532_gi;

static int hf_pn532_next_not_used_2_7;

static int hf_pn532_next_gi;

static int hf_pn532_next_nfc_id_3i;

static int hf_pn532_nfc_id_3t;

static int hf_pn532_activation_baudrate;

static int hf_pn532_communication_mode;

static int hf_pn532_jump_next_not_used_3_7;

static int hf_pn532_jump_next_passive_initiator_data;

static int hf_pn532_jump_next_gi;

static int hf_pn532_jump_next_nfc_id_3i;

static int hf_pn532_passive_initiator_data;

static int hf_pn532_did_target;

static int hf_pn532_send_bit_rate_target;

static int hf_pn532_receive_bit_rate_target;

static int hf_pn532_timeout;

static int hf_pn532_optional_parameters;

static int hf_pn532_test_number;

static int hf_pn532_parameters;

static int hf_pn532_parameters_length;

static int hf_pn532_sens_res;

static int hf_pn532_sel_res;

static int hf_pn532_nfc_id_length;

static int hf_pn532_nfc_id_1;

static int hf_pn532_ats_length;

static int hf_pn532_ats;

static int hf_pn532_pol_res_length;

static int hf_pn532_response_code;

static int hf_pn532_nfc_id_2t;

static int hf_pn532_pad;

static int hf_pn532_syst_code;

static int hf_pn532_atqb_response;

static int hf_pn532_attrib_res_length;

static int hf_pn532_attrib_res;

static int hf_pn532_jewel_id;

static int hf_pn532_response_for;

static int hf_pn532_diagnose_baudrate;

static int hf_pn532_reply_delay;

static int hf_pn532_ciu_tx_mode;

static int hf_pn532_ciu_rx_mode;

static int hf_pn532_diagnose_result;

static int hf_pn532_diagnose_number_of_fails;

static int hf_pn532_andet_bot;

static int hf_pn532_andet_up;

static int hf_pn532_andet_ith;

static int hf_pn532_andet_en;

static expert_field ei_unknown_data;

static expert_field ei_unexpected_data;

static wmem_tree_t *command_info;

static dissector_handle_t pn532_handle;

void proto_register_pn532(void);

void proto_reg_handoff_pn532(void);

#define DIAGNOSE_REQ               0x00

#define DIAGNOSE_RSP               0x01

#define GET_FIRMWARE_VERSION_REQ   0x02

#define GET_FIRMWARE_VERSION_RSP   0x03

#define GET_GENERAL_STATUS_REQ     0x04

#define GET_GENERAL_STATUS_RSP     0x05

#define READ_REGISTER_REQ          0x06

#define READ_REGISTER_RSP          0x07

#define WRITE_REGISTER_REQ         0x08

#define WRITE_REGISTER_RSP         0x09

#define READ_GPIO_REQ              0x0C

#define READ_GPIO_RSP              0x0D

#define WRITE_GPIO_REQ             0x0E

#define WRITE_GPIO_RSP             0x0F

#define SET_SERIAL_BAUD_RATE_REQ   0x10

#define SET_SERIAL_BAUD_RATE_RSP   0x11

#define SET_PARAMETERS_REQ         0x12

#define SET_PARAMETERS_RSP         0x13

#define SAM_CONFIGURATION_REQ      0x14

#define SAM_CONFIGURATION_RSP      0x15

#define POWER_DOWN_REQ             0x16

#define POWER_DOWN_RSP             0x17

#define RF_CONFIGURATION_REQ       0x32

#define RF_CONFIGURATION_RSP       0x33

#define IN_DATA_EXCHANGE_REQ       0x40

#define IN_DATA_EXCHANGE_RSP       0x41

#define IN_COMMUNICATE_THRU_REQ    0x42

#define IN_COMMUNICATE_THRU_RSP    0x43

#define IN_DESELECT_REQ            0x44

#define IN_DESELECT_RSP            0x45

#define IN_JUMP_FOR_PSL_REQ        0x46

#define IN_JUMP_FOR_PSL_RSP        0x47

#define IN_LIST_PASSIVE_TARGET_REQ 0x4A

#define IN_LIST_PASSIVE_TARGET_RSP 0x4B

#define IN_PSL_REQ                 0x4E

#define IN_PSL_RSP                 0x4F

#define IN_ATR_REQ                 0x50

#define IN_ATR_RSP                 0x51

#define IN_RELEASE_REQ             0x52

#define IN_RELEASE_RSP             0x53

#define IN_SELECT_REQ              0x54

#define IN_SELECT_RSP              0x55

#define IN_JUMP_FOR_DEP_REQ        0x56

#define IN_JUMP_FOR_DEP_RSP        0x57

#define RF_REGULATION_TEST_REQ     0x58

#define RF_REGULATION_TEST_RSP     0x59

#define IN_AUTO_POLL_REQ           0x60

#define IN_AUTO_POLL_RSP           0x61

#define TG_GET_DATA_REQ            0x86

#define TG_GET_DATA_RSP            0x87

#define TG_GET_INITIATOR_CMD_REQ   0x88

#define TG_GET_INITIATOR_CMD_RSP   0x89

#define TG_GET_TARGET_STATUS_REQ   0x8A

#define TG_GET_TARGET_STATUS_RSP   0x8B

#define TG_INIT_AS_TARGET_REQ      0x8C

#define TG_INIT_AS_TARGET_RSP      0x8D

#define TG_SET_DATA_REQ            0x8E

#define TG_SET_DATA_RSP            0x8F

#define TG_RESP_TO_INITIATOR_REQ   0x90

#define TG_RESP_TO_INITIATOR_RSP   0x91

#define TG_SET_GENERAL_BYTES_REQ   0x92

#define TG_SET_GENERAL_BYTES_RSP   0x93

#define TG_SET_METADATA_REQ        0x94

#define TG_SET_METADATA_RSP        0x95

/* Baud rate and modulation types */

#define ISO_IEC_14443A_106         0x00

#define FELICA_212                 0x01

#define FELICA_424                 0x02

#define ISO_IEC_14443B_106         0x03

#define JEWEL_14443A_106           0x04

/* Table of payload types - adapted from the I2C dissector */

enum {

    SUB_DATA = 0,

    SUB_FELICA,

    SUB_MIFARE,

    SUB_ISO7816,

    SUB_MAX

};

typedef struct command_data_t {

    uint32_t bus_id;

    uint32_t device_address;

    uint32_t endpoint;

    uint8_t  command;

    uint32_t command_frame_number;

    uint32_t response_frame_number;

    union {

        int16_t test_number;

        int16_t baudrate;

    } data;

} command_data_t;

static dissector_handle_t sub_handles[SUB_MAX];

static int sub_selected = SUB_DATA;

/* Subtree handles: set by register_subtree_array */

static int ett_pn532;

static int ett_pn532_flags;

static int ett_pn532_target;

static int ett_pn532_fw_support;

static int ett_pn532_config_212_kbps;

static int ett_pn532_config_424_kbps;

static int ett_pn532_config_848_kbps;

static int ett_pn532_mifare_parameters;

static int ett_pn532_felica_parameters;

static int ett_pn532_wakeup_enable;

static int ett_pn532_autopoll_type;

/* Re-arranged from defs above to be in ascending order by value */

static const value_string pn532_commands[] = {

    {DIAGNOSE_REQ,               "Diagnose"},

    {DIAGNOSE_RSP,               "Diagnose (Response)"},

    {GET_FIRMWARE_VERSION_REQ,   "GetFirmwareVersion"},

    {GET_FIRMWARE_VERSION_RSP,   "GetFirmwareVersion (Response)"},

    {GET_GENERAL_STATUS_REQ,     "GetGeneralStatus"},

    {GET_GENERAL_STATUS_RSP,     "GetGeneralStatus (Response)"},

    {READ_REGISTER_REQ,          "ReadRegister"},

    {READ_REGISTER_RSP,          "ReadRegister (Response)"},

    {WRITE_REGISTER_REQ,         "WriteRegister"},

    {WRITE_REGISTER_RSP,         "WriteRegister (Response)"},

    {READ_GPIO_REQ,              "ReadGPIO"},

    {READ_GPIO_RSP,              "ReadGPIO (Response)"},

    {WRITE_GPIO_REQ,             "WriteGPIO"},

    {WRITE_GPIO_RSP,             "WriteGPIO (Response)"},

    {SET_SERIAL_BAUD_RATE_REQ,   "SetSerialBaudRate"},

    {SET_SERIAL_BAUD_RATE_RSP,   "SetSerialBaudRate (Response)"},

    {SET_PARAMETERS_REQ,         "SetParameters"},

    {SET_PARAMETERS_RSP,         "SetParameters (Response)"},

    {SAM_CONFIGURATION_REQ,      "SAMConfiguration"},

    {SAM_CONFIGURATION_RSP,      "SAMConfiguration (Response)"},

    {POWER_DOWN_REQ,             "PowerDown"},

    {POWER_DOWN_RSP,             "PowerDown (Response)"},

    {RF_CONFIGURATION_REQ,       "RFConfiguration"},

    {RF_CONFIGURATION_RSP,       "RFConfiguration (Response)"},

    {IN_DATA_EXCHANGE_REQ,       "InDataExchange"},

    {IN_DATA_EXCHANGE_RSP,       "InDataExchange (Response)"},

    {IN_COMMUNICATE_THRU_REQ,    "InCommunicateThru"},

    {IN_COMMUNICATE_THRU_RSP,    "InCommunicateThru (Response)"},

    {IN_DESELECT_REQ,            "InDeselect"},

    {IN_DESELECT_RSP,            "InDeselect (Response)"},

    {IN_JUMP_FOR_PSL_REQ,        "InJumpForPSL"},

    {IN_JUMP_FOR_PSL_RSP,        "InJumpForPSL (Response)"},

    {IN_LIST_PASSIVE_TARGET_REQ, "InListPassiveTarget"},

    {IN_LIST_PASSIVE_TARGET_RSP, "InListPassiveTarget (Response)"},

    {IN_PSL_REQ,                 "InPSL"},

    {IN_PSL_RSP,                 "InPSL (Response)"},

    {IN_ATR_REQ,                 "InATR"},

    {IN_ATR_RSP,                 "InATR (Response)"},

    {IN_RELEASE_REQ,             "InRelease"},

    {IN_RELEASE_RSP,             "InRelease (Response)"},

    {IN_SELECT_REQ,              "InSelect"},

    {IN_SELECT_RSP,              "InSelect (Response)"},

    {IN_JUMP_FOR_DEP_REQ,        "InJumpForDEP"},

    {IN_JUMP_FOR_DEP_RSP,        "InJumpForDEP (Response)"},

    {RF_REGULATION_TEST_REQ,     "RFRegulationTest"},

    {RF_REGULATION_TEST_RSP,     "RFRegulationTest (Response)"},

    {IN_AUTO_POLL_REQ,           "InAutoPoll"},

    {IN_AUTO_POLL_RSP,           "InAutoPoll (Response)"},

    {TG_GET_DATA_REQ,            "TgGetData"},

    {TG_GET_DATA_RSP,            "TgGetData (Response)"},

    {TG_GET_INITIATOR_CMD_REQ,   "TgGetInitiatorCommand"},

    {TG_GET_INITIATOR_CMD_RSP,   "TgGetInitiatorCommand (Response)"},

    {TG_GET_TARGET_STATUS_REQ,   "TgGetTargetStatus"},

    {TG_GET_TARGET_STATUS_RSP,   "TgGetTargetStatus (Response)"},

    {TG_INIT_AS_TARGET_REQ,      "TgInitAsTarget"},

    {TG_INIT_AS_TARGET_RSP,      "TgInitAsTarget (Response)"},

    {TG_SET_DATA_REQ,            "TgSetData"},

    {TG_SET_DATA_RSP,            "TgSetData (Response)"},

    {TG_RESP_TO_INITIATOR_REQ,   "TgResponseToInitiator"},

    {TG_RESP_TO_INITIATOR_RSP,   "TgResponseToInitiator (Response)"},

    {TG_SET_GENERAL_BYTES_REQ,   "TgSetGeneralBytes"},

    {TG_SET_GENERAL_BYTES_RSP,   "TgSetGeneralBytes (Response)"},

    {TG_SET_METADATA_REQ,        "TgSetMetaData"},

    {TG_SET_METADATA_RSP,        "TgSetMetaData (Response)"},

    {0x00, NULL}

};

static value_string_ext pn532_commands_ext = VALUE_STRING_EXT_INIT(pn532_commands);

/* TFI - 1 byte frame identifier; specifying direction of communication */

static const value_string pn532_directions[] = {

    {0xD4,  "Host to PN532"},

    {0xD5,  "PN532 to Host"},

    {0x00, NULL}

};

static const value_string pn532_errors[] = {

    {0x00,  "No Error"},

    {0x01,  "Time Out"},

    {0x02,  "CRC Error detected by the CIU"},

    {0x03,  "Parity Error detected by the CIU"},

    {0x04,  "Erroneous Bit Count has been detected"},

    {0x05,  "Framing error during Mifare operation"},

    {0x06,  "Abnormal Bit-Collision"},

    {0x07,  "Communication Buffer Size Insufficient"},

    {0x09,  "RF Buffer overflow has been detected by the CIU"},

    {0x0A,  "In active communication mode, the RF field has not been switched on in time by the counterpart"},

    {0x0B,  "RF Protocol Error"},

    {0x0D,  "Temperature Error"},

    {0x0E,  "Internal Buffer Overflow"},

    {0x10,  "Invalid Parameter"},

    {0x12,  "The PN532 configured in target mode does not support the command received from the initiator"},

    {0x13,  "Invalid Data Format"},

    {0x14,  "Authentication Error"},

    {0x23,  "UID Check Byte is Wrong"},

    {0x25,  "Invalid Device State"},

    {0x26,  "Operation not allowed in this configuration"},

    {0x27,  "Unacceptable Command"},

    {0x29,  "The PN532 configured as target has been released by its initiator"},

    {0x2A,  "ID of the card does not match"},

    {0x2B,  "Card previously activated has disappeared"},

    {0x2C,  "Mismatch between the NFCID3 initiator and the NFCID3 target in DEP 212/424 kbps passive"},

    {0x2D,  "Over-current event has been detected"},

    {0x2E,  "NAD missing in DEP frame"},

    {0x00, NULL}

};

static const value_string pn532_config_vals[] = {

    {0x01,  "RF Field"},

    {0x02,  "Various Timings"},

    {0x04,  "Max Rty COM"},

    {0x05,  "Max Retries"},

    {0x0A,  "Analog settings for the baudrate 106 kbps type A"},

    {0x0B,  "Analog settings for the baudrate 212/424 kbps"},

    {0x0C,  "Analog settings for the type B"},

    {0x0D,  "Analog settings for baudrates 212/424 and 848 kbps with ISO/IEC14443-4 protocol"},

    {0x00, NULL}

};

static const value_string pn532_config_timeout_vals[] = {

    {0x00,  "No Timeout"},

    {0x01,  "100 us"},

    {0x02,  "200 us"},

    {0x03,  "400 us"},

    {0x04,  "800 us"},

    {0x05,  "1.6 ms"},

    {0x06,  "3.2 ms"},

    {0x07,  "6.4 ms"},

    {0x08,  "12.8 ms"},

    {0x09,  "25.6 ms"},

    {0x0A,  "51.2 ms"},

    {0x0B,  "102.4 ms"},

    {0x0C,  "204.8 ms"},

    {0x0D,  "409.6 ms"},

    {0x0E,  "819.2 ms"},

    {0x0F,  "1.64 sec"},

    {0x10,  "3.28 sec"},

    {0x00, NULL}

};

static const value_string pn532_polling_method_vals[] = {

    {0x00,  "Timeslot Approach"},

    {0x01,  "Probabilistic Approach"},

    {0x00, NULL}

};

/* Baud rates and modulation types */

static const value_string pn532_brtypes[] = {

    {ISO_IEC_14443A_106,        "ISO/IEC 14443-A at 106 kbps"},

    {FELICA_212,                "FeliCa at 212 kbps"},

    {FELICA_424,                "FeliCa at 424 kbps"},

    {ISO_IEC_14443B_106,        "ISO/IEC 14443-B at 106 kbps"},

    {JEWEL_14443A_106,          "InnoVision Jewel/Topaz at 106 kbps"},

    {0x00, NULL}

};

/* SAM Modes */

static const value_string pn532_sam_modes[] = {

    {0x01,  "Normal Mode"},

    {0x02,  "Virtual Card Mode"},

    {0x03,  "Wired Card Mode"},

    {0x04,  "Dual Card Mode"},

    {0x00, NULL}

};

static const value_string pn532_state_vals[] = {

    {0x00,  "TG Idle / TG Released"},

    {0x01,  "TG Activated"},

    {0x02,  "TG Deselected"},

    {0x80,  "PICC Released"},

    {0x81,  "PICC Activated"},

    {0x82,  "PICC Deselected"},

    {0x00, NULL}

};

static const value_string pn532_speed_vals[] = {

    {0x00,  "106 kbps"},

    {0x01,  "212 kbps"},

    {0x02,  "424 kbps"},

    {0x00, NULL}

};

static const value_string pn532_framing_type_vals[] = {

    {0x00,  "Mifare"},

    {0x01,  "Active Mode"},

    {0x02,  "FeliCa"},

    {0x00, NULL}

};

static const value_string pn532_txspeed_vals[] = {

    {0x00,  "106 kbps"},

    {0x01,  "212 kbps"},

    {0x02,  "424 kbps"},

    {0x03,  "848 kbps"},

    {0x00, NULL}

};

static const value_string pn532_txframing_vals[] = {

    {0x00,  "Mifare"},

    {0x02,  "FeliCa"},

    {0x00, NULL}

};

static const value_string pn532_baudrate_vals[] = {

    {0x00,  "9.6 kbaud"},

    {0x01,  "19.2 kbaud"},

    {0x02,  "38.4 kbaud"},

    {0x03,  "57.6 kbaud"},

    {0x04,  "115.2 kbaud"},

    {0x05,  "230.4 kbaud"},

    {0x06,  "460.8 kbaud"},

    {0x07,  "921.6 kbaud"},

    {0x08,  "1.288 Mbaud"},

    {0x00, NULL}

};

static const value_string pn532_type_vals[] = {

    {0x00,  "Mifare, ISO/IEC14443-3 Type A, ISO/IEC14443-3 Type B, ISO/IEC18092 passive 106 kbps"},

    {0x01,  "ISO/IEC18092 Active Mode"},

    {0x02,  "Innovision Jewel Tag"},

    {0x10,  "FeliCa, ISO/IEC18092 passive 212/424 kbps"},

    {0x00, NULL}

};

static const value_string pn532_communication_mode_vals[] = {

    {0x00,  "Passive Mode"},

    {0x01,  "Active Mode"},

    {0x00, NULL}

};

static const value_string pn532_test_number_vals[] = {

    {0x00,  "Communication Line Test"},

    {0x01,  "ROM Test"},

    {0x02,  "RAM Test"},

    {0x04,  "Polling Test to Target"},

    {0x05,  "Echo Back Test"},

    {0x06,  "Attention Request Test or ISO/IEC14443-4 card presence detection"},

    {0x07,  "Self Antenna Test"},

    {0x00, NULL}

};

static const value_string pn532_diagnose_baudrate_vals[] = {

    {0x01,  "212 kbps"},

    {0x02,  "424 kbps"},

    {0x00, NULL}

};

static void sam_timeout_base(char* buf, uint32_t value) {

    if (value == 0x00) {

        snprintf(buf, ITEM_LABEL_LENGTH, "No timeout control");

    } else if (0x01 <= value && value <= 0x13) {

        snprintf(buf, ITEM_LABEL_LENGTH, "%u ms", value * 50);

    } else {

        snprintf(buf, ITEM_LABEL_LENGTH, "%u.%03u s", value * 50 / 1000, value * 50 % 1000);

    }

}

static void replay_delay_base(char* buf, uint32_t value) {

        snprintf(buf, ITEM_LABEL_LENGTH, "%u.%03u s", value * 500 / 1000, value * 500 % 1000);

}

static int

dissect_status(proto_tree *tree, tvbuff_t *tvb, int offset)

{

    proto_tree_add_item(tree, hf_pn532_status_nad_present, tvb, offset, 1, ENC_BIG_ENDIAN);

    proto_tree_add_item(tree, hf_pn532_status_mi, tvb, offset, 1, ENC_BIG_ENDIAN);

    proto_tree_add_item(tree, hf_pn532_status_error_code, tvb, offset, 1, ENC_BIG_ENDIAN);

    return offset + 1;

}

static int

dissect_pn532(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data)

{

    proto_item *item;

    proto_tree *pn532_tree;

    proto_item *sub_item;

    proto_tree *sub_tree;

    proto_item *next_item;

    proto_tree *next_tree;

    uint8_t     cmd;

    uint8_t     config;

    int16_t     baudrate;

    int16_t     test_number;

    uint8_t     length;

    uint8_t     value;

    uint8_t     type;

    uint8_t     item_value;

    tvbuff_t   *next_tvb;

    int         offset = 0;

    command_data_t  *command_data = NULL;

    urb_info_t      *urb;

    wmem_tree_key_t  key[5];

    uint32_t         bus_id;

    uint32_t         device_address;

    uint32_t         endpoint;

    uint32_t         k_bus_id;

    uint32_t         k_device_address;

    uint32_t         k_endpoint;

    uint32_t         k_frame_number;

    /* Reject the packet if data is NULL */

    if (data == NULL)

        return 0;

    urb = (urb_info_t *)data;

    col_set_str(pinfo->cinfo, COL_PROTOCOL, "PN532");

    item = proto_tree_add_item(tree, proto_pn532, tvb, 0, -1, ENC_NA);

    pn532_tree = proto_item_add_subtree(item, ett_pn532);

    proto_tree_add_item(pn532_tree, hf_pn532_direction, tvb, offset, 1, ENC_NA);

    offset += 1;

    proto_tree_add_item(pn532_tree, hf_pn532_command, tvb, offset, 1, ENC_NA);

    cmd = tvb_get_uint8(tvb, offset);

    offset += 1;

    col_set_str(pinfo->cinfo, COL_INFO, val_to_str_ext_const(cmd, &pn532_commands_ext, "Unknown command"));

    bus_id = urb->bus_id;

    device_address = urb->device_address;

    endpoint = urb->endpoint;

    k_bus_id          = bus_id;

    k_device_address  = device_address;

    k_endpoint        = endpoint;

    k_frame_number    = pinfo->num;

    key[0].length = 1;

    key[0].key = &k_bus_id;

    key[1].length = 1;

    key[1].key = &k_device_address;

    key[2].length = 1;

    key[2].key = &k_endpoint;

    key[3].length = 1;

    key[3].key = &k_frame_number;

    key[4].length = 0;

    key[4].key = NULL;

    if (!pinfo->fd->visited && !(cmd & 0x01)) {

        command_data = wmem_new(wmem_file_scope(), command_data_t);

        command_data->bus_id = bus_id;

        command_data->device_address = device_address;

        command_data->endpoint = endpoint;

        command_data->command = cmd;

        command_data->command_frame_number = pinfo->num;

        command_data->response_frame_number = 0;

        wmem_tree_insert32_array(command_info, key, command_data);

        k_bus_id          = bus_id;

        k_device_address  = device_address;

        k_endpoint        = endpoint;

        k_frame_number    = pinfo->num;

        key[0].length = 1;

        key[0].key = &k_bus_id;

        key[1].length = 1;

        key[1].key = &k_device_address;

        key[2].length = 1;

        key[2].key = &k_endpoint;

        key[3].length = 1;

        key[3].key = &k_frame_number;

        key[4].length = 0;

        key[4].key = NULL;

    }

    if (cmd & 0x01) {

        wmem_tree_t  *wmem_tree;

        key[3].length = 0;

        key[3].key = NULL;

        wmem_tree = (wmem_tree_t *) wmem_tree_lookup32_array(command_info, key);

        if (wmem_tree) {

            command_data = (command_data_t *) wmem_tree_lookup32_le(wmem_tree, pinfo->num);

            if (command_data && (command_data->response_frame_number == 0 ||

                    command_data->response_frame_number == pinfo->num)) {

                if (!pinfo->fd->visited && command_data->response_frame_number == 0) {

                    command_data->response_frame_number = pinfo->num;

                }

            }

        }

        if (command_data) {

            sub_item = proto_tree_add_uint(pn532_tree, hf_pn532_response_for, tvb, offset, tvb_captured_length_remaining(tvb, offset), command_data->command_frame_number);

            proto_item_set_generated(sub_item);

        }

    }

    switch (cmd) {

    case DIAGNOSE_REQ:

        proto_tree_add_item(pn532_tree, hf_pn532_test_number, tvb, offset, 1, ENC_NA);

        test_number = tvb_get_uint8(tvb, offset);

        offset += 1;

        if (command_data)

            command_data->data.test_number = test_number;

        proto_tree_add_item(pn532_tree, hf_pn532_parameters_length, tvb, offset, 1, ENC_NA);

        length = tvb_get_uint8(tvb, offset);

        offset += 1;

        switch (test_number) {

        case 0x00:

            proto_tree_add_item(pn532_tree, hf_pn532_data_in, tvb, offset, length, ENC_NA);

            offset += length;

            break;

        case 0x04:

            proto_tree_add_item(pn532_tree, hf_pn532_diagnose_baudrate, tvb, offset, 1, ENC_NA);

            offset += 1;

            break;

        case 0x05:

            proto_tree_add_item(pn532_tree, hf_pn532_reply_delay, tvb, offset, 1, ENC_NA);

            offset += 1;

            proto_tree_add_item(pn532_tree, hf_pn532_ciu_tx_mode, tvb, offset, 1, ENC_NA);

            offset += 1;

            proto_tree_add_item(pn532_tree, hf_pn532_ciu_rx_mode, tvb, offset, 1, ENC_NA);

            offset += 1;

            break;

        case 0x07:

            proto_tree_add_item(pn532_tree, hf_pn532_andet_bot, tvb, offset, 1, ENC_NA);

            proto_tree_add_item(pn532_tree, hf_pn532_andet_up,  tvb, offset, 1, ENC_NA);

            proto_tree_add_item(pn532_tree, hf_pn532_andet_ith, tvb, offset, 1, ENC_NA);

            proto_tree_add_item(pn532_tree, hf_pn532_andet_en,  tvb, offset, 1, ENC_NA);

            offset += 1;

            break;

        case 0x01:

        case 0x02:

        case 0x06:

            /* No parameters */

            break;

        default:

            proto_tree_add_item(pn532_tree, hf_pn532_parameters, tvb, offset, tvb_captured_length_remaining(tvb, offset), ENC_NA);

            offset += tvb_captured_length_remaining(tvb, offset);

        }

        break;

    case DIAGNOSE_RSP:

        if (command_data && command_data->command == DIAGNOSE_REQ)

            test_number = command_data->data.test_number;

        else

            test_number = -1; /* Force unknown test_number */

        if (tvb_reported_length_remaining(tvb, offset) >= 1) {

            proto_tree_add_item(pn532_tree, hf_pn532_parameters_length, tvb, offset, 1, ENC_NA);

            offset += 1;

            switch (test_number) {

            case 0x00:

                proto_tree_add_item(pn532_tree, hf_pn532_test_number, tvb, offset, 1, ENC_NA);

                offset += 1;

                proto_tree_add_item(pn532_tree, hf_pn532_parameters_length, tvb, offset, 1, ENC_NA);

                length = tvb_captured_length_remaining(tvb, offset);

                offset += 1;

                proto_tree_add_item(pn532_tree, hf_pn532_data_out, tvb, offset, length, ENC_NA);

                offset += length;

                break;

            case 0x01:

            case 0x02:

            case 0x06:

            case 0x07:

                proto_tree_add_item(pn532_tree, hf_pn532_diagnose_result, tvb, offset, 1, ENC_NA);

                offset += 1;

                break;

            case 0x04:

                proto_tree_add_item(pn532_tree, hf_pn532_diagnose_number_of_fails, tvb, offset, 1, ENC_NA);

                offset += 1;

                break;

            case 0x05:

                /* Not possible; test 0x05 runs infinitely */

                break;

            default:

                proto_tree_add_item(pn532_tree, hf_pn532_parameters, tvb, offset, tvb_captured_length_remaining(tvb, offset), ENC_NA);

                offset += tvb_captured_length_remaining(tvb, offset);

            }

        }

        break;

    case GET_FIRMWARE_VERSION_REQ:

        /* No parameters */

        break;

    case GET_FIRMWARE_VERSION_RSP:

        proto_tree_add_item(pn532_tree, hf_pn532_ic_version, tvb, offset, 1, ENC_NA);

        offset += 1;

        proto_tree_add_item(pn532_tree, hf_pn532_fw_version, tvb, offset, 1, ENC_NA);

        offset += 1;

        proto_tree_add_item(pn532_tree, hf_pn532_fw_revision, tvb, offset, 1, ENC_NA);

        offset += 1;

        sub_item = proto_tree_add_item(pn532_tree, hf_pn532_fw_support, tvb, offset, 1, ENC_NA);

        sub_tree = proto_item_add_subtree(sub_item, ett_pn532_fw_support);

        proto_tree_add_item(sub_tree, hf_pn532_fw_support_rfu, tvb, offset, 1, ENC_NA);

        proto_tree_add_item(sub_tree, hf_pn532_fw_support_iso_018092, tvb, offset, 1, ENC_NA);

        proto_tree_add_item(sub_tree, hf_pn532_fw_support_iso_iec_14443_type_b, tvb, offset, 1, ENC_NA);

        proto_tree_add_item(sub_tree, hf_pn532_fw_support_iso_iec_14443_type_a, tvb, offset, 1, ENC_NA);

        offset += 1;

        break;

    case GET_GENERAL_STATUS_REQ:

        /* No parameters */

        break;

    case GET_GENERAL_STATUS_RSP:

        proto_tree_add_item(pn532_tree, hf_pn532_error, tvb, offset, 1, ENC_BIG_ENDIAN);

        offset += 1;

        proto_tree_add_item(pn532_tree, hf_pn532_field, tvb, offset, 1, ENC_BIG_ENDIAN);

        offset += 1;

        proto_tree_add_item(pn532_tree, hf_pn532_NbTg, tvb, offset, 1, ENC_BIG_ENDIAN);

        value = tvb_get_uint8(tvb, offset);

        offset += 1;

        for (item_value = 1; item_value <= value; item_value += 1) {

            sub_item = proto_tree_add_item(pn532_tree, hf_pn532_target, tvb, offset, 4, ENC_NA);

            sub_tree = proto_item_add_subtree(sub_item, ett_pn532_target);

            proto_item_append_text(sub_item, " %u/%u", item_value, value);

            proto_tree_add_item(sub_tree, hf_pn532_Tg, tvb, offset, 1, ENC_BIG_ENDIAN);

            offset += 1;

            proto_tree_add_item(sub_tree, hf_pn532_brrx, tvb, offset, 1, ENC_BIG_ENDIAN);

            offset += 1;

            proto_tree_add_item(sub_tree, hf_pn532_brtx, tvb, offset, 1, ENC_BIG_ENDIAN);

            offset += 1;

            proto_tree_add_item(sub_tree, hf_pn532_type, tvb, offset, 1, ENC_BIG_ENDIAN);

            offset += 1;

        }

        proto_tree_add_item(pn532_tree, hf_pn532_sam_status, tvb, offset, 1, ENC_BIG_ENDIAN);

        offset += 1;

        break;

    case READ_REGISTER_REQ:

        while (tvb_reported_length_remaining(tvb, offset) >= 2) {

            proto_tree_add_item(pn532_tree, hf_pn532_register_address, tvb, offset, 2, ENC_BIG_ENDIAN);

            offset += 2;

        }

        break;

    case READ_REGISTER_RSP:

        while (tvb_reported_length_remaining(tvb, offset) >= 1) {

            proto_tree_add_item(pn532_tree, hf_pn532_register_value, tvb, offset, 1, ENC_BIG_ENDIAN);

            offset += 1;

        }

        break;

    case WRITE_REGISTER_REQ:

        while (tvb_reported_length_remaining(tvb, offset) >= 3) {

            proto_tree_add_item(pn532_tree, hf_pn532_register_address, tvb, offset, 2, ENC_BIG_ENDIAN);

            offset += 2;

            proto_tree_add_item(pn532_tree, hf_pn532_register_value, tvb, offset, 1, ENC_BIG_ENDIAN);

            offset += 1;

        }

        break;

    case WRITE_REGISTER_RSP:

        /* No parameters */

        break;

    case READ_GPIO_REQ:

        /* No parameters */

        break;

    case READ_GPIO_RSP:

        proto_tree_add_item(pn532_tree, hf_pn532_gpio_p3, tvb, offset, 1, ENC_BIG_ENDIAN);

        offset += 1;

        proto_tree_add_item(pn532_tree, hf_pn532_gpio_p7, tvb, offset, 1, ENC_BIG_ENDIAN);

        offset += 1;

        proto_tree_add_item(pn532_tree, hf_pn532_gpio_ioi1, tvb, offset, 1, ENC_BIG_ENDIAN);

        offset += 1;

        break;

    case WRITE_GPIO_REQ:

        proto_tree_add_item(pn532_tree, hf_pn532_gpio_p3, tvb, offset, 1, ENC_BIG_ENDIAN);

        offset += 1;

        proto_tree_add_item(pn532_tree, hf_pn532_gpio_p7, tvb, offset, 1, ENC_BIG_ENDIAN);

        offset += 1;

        break;

    case WRITE_GPIO_RSP:

        /* No parameters */

        break;

    case SET_SERIAL_BAUD_RATE_REQ:

        proto_tree_add_item(pn532_tree, hf_pn532_baudrate, tvb, offset, 1, ENC_BIG_ENDIAN);

        offset += 1;

        break;

    case SET_SERIAL_BAUD_RATE_RSP:

        /* No parameters */

        break;

    case SET_PARAMETERS_REQ:

        sub_item = proto_tree_add_item(pn532_tree, hf_pn532_flags, tvb, offset, 1, ENC_NA);

        sub_tree = proto_item_add_subtree(sub_item, ett_pn532_flags);

        proto_tree_add_item(sub_tree, hf_pn532_flags_rfu_7, tvb, offset, 1, ENC_BIG_ENDIAN);

        proto_tree_add_item(sub_tree, hf_pn532_flags_remove_preamble_and_postamble, tvb, offset, 1, ENC_BIG_ENDIAN);

        proto_tree_add_item(sub_tree, hf_pn532_flags_iso_14443_4_picc_emulation, tvb, offset, 1, ENC_BIG_ENDIAN);

        proto_tree_add_item(sub_tree, hf_pn532_flags_automatic_rats, tvb, offset, 1, ENC_BIG_ENDIAN);

        proto_tree_add_item(sub_tree, hf_pn532_flags_rfu_3, tvb, offset, 1, ENC_BIG_ENDIAN);

        proto_tree_add_item(sub_tree, hf_pn532_flags_automatic_atr_res, tvb, offset, 1, ENC_BIG_ENDIAN);

        proto_tree_add_item(sub_tree, hf_pn532_flags_did_used, tvb, offset, 1, ENC_BIG_ENDIAN);

        proto_tree_add_item(sub_tree, hf_pn532_flags_nad_used, tvb, offset, 1, ENC_BIG_ENDIAN);

        offset += 1;

        break;

    case SET_PARAMETERS_RSP:

        /* No parameters */

        break;

    case SAM_CONFIGURATION_REQ: /* Secure Application/Security Access Module Configuration Request */

        proto_tree_add_item(pn532_tree, hf_pn532_sam_mode, tvb, offset, 1, ENC_BIG_ENDIAN);

        offset += 1;

        proto_tree_add_item(pn532_tree, hf_pn532_sam_timeout, tvb, offset, 1, ENC_BIG_ENDIAN);

        offset += 1;

        if (tvb_reported_length_remaining(tvb, offset) >= 1) {

            proto_tree_add_item(pn532_tree, hf_pn532_sam_irq, tvb, offset, 1, ENC_BIG_ENDIAN);

            offset += 1;

        }

        break;

    case SAM_CONFIGURATION_RSP:

        /* No parameters */

        break;

    case POWER_DOWN_REQ:

        sub_item = proto_tree_add_item(pn532_tree, hf_pn532_wakeup_enable, tvb, offset, 1, ENC_NA);

        sub_tree = proto_item_add_subtree(sub_item, ett_pn532_wakeup_enable);