include/net/bluetooth/hci_core.h

   1 /*
   2    BlueZ - Bluetooth protocol stack for Linux
   3    Copyright (c) 2000-2001, 2010, Code Aurora Forum. All rights reserved.
   4
   5    Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
   6
   7    This program is free software; you can redistribute it and/or modify
   8    it under the terms of the GNU General Public License version 2 as
   9    published by the Free Software Foundation;
  10
  11    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
  12    OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  13    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
  14    IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
  15    CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
  16    WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  17    ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  18    OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  19
  20    ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
  21    COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
  22    SOFTWARE IS DISCLAIMED.
  23 */
  24
  25 #ifndef __HCI_CORE_H
  26 #define __HCI_CORE_H
  27
  28 #include <linux/leds.h>
  29 #include <linux/rculist.h>
  30
  31 #include <net/bluetooth/hci.h>
  32 #include <net/bluetooth/hci_sock.h>
  33
  34 /* HCI priority */
  35 #define HCI_PRIO_MAX    7
  36
  37 /* HCI maximum id value */
  38 #define HCI_MAX_ID 10000
  39
  40 /* HCI Core structures */
  41 struct inquiry_data {
  42         bdaddr_t        bdaddr;
  43         __u8            pscan_rep_mode;
  44         __u8            pscan_period_mode;
  45         __u8            pscan_mode;
  46         __u8            dev_class[3];
  47         __le16          clock_offset;
  48         __s8            rssi;
  49         __u8            ssp_mode;
  50 };
  51
  52 struct inquiry_entry {
  53         struct list_head        all;            /* inq_cache.all */
  54         struct list_head        list;           /* unknown or resolve */
  55         enum {
  56                 NAME_NOT_KNOWN,
  57                 NAME_NEEDED,
  58                 NAME_PENDING,
  59                 NAME_KNOWN,
  60         } name_state;
  61         __u32                   timestamp;
  62         struct inquiry_data     data;
  63 };
  64
  65 struct discovery_state {
  66         int                     type;
  67         enum {
  68                 DISCOVERY_STOPPED,
  69                 DISCOVERY_STARTING,
  70                 DISCOVERY_FINDING,
  71                 DISCOVERY_RESOLVING,
  72                 DISCOVERY_STOPPING,
  73         } state;
  74         struct list_head        all;    /* All devices found during inquiry */
  75         struct list_head        unknown;        /* Name state not known */
  76         struct list_head        resolve;        /* Name needs to be resolved */
  77         __u32                   timestamp;
  78         bdaddr_t                last_adv_addr;
  79         u8                      last_adv_addr_type;
  80         s8                      last_adv_rssi;
  81         u32                     last_adv_flags;
  82         u8                      last_adv_data[HCI_MAX_AD_LENGTH];
  83         u8                      last_adv_data_len;
  84         bool                    report_invalid_rssi;
  85         bool                    result_filtering;
  86         bool                    limited;
  87         s8                      rssi;
  88         u16                     uuid_count;
  89         u8                      (*uuids)[16];
  90         unsigned long           scan_start;
  91         unsigned long           scan_duration;
  92 };
  93
  94 struct hci_conn_hash {
  95         struct list_head list;
  96         unsigned int     acl_num;
  97         unsigned int     amp_num;
  98         unsigned int     sco_num;
  99         unsigned int     le_num;
 100         unsigned int     le_num_slave;
 101 };
 102
 103 struct bdaddr_list {
 104         struct list_head list;
 105         bdaddr_t bdaddr;
 106         u8 bdaddr_type;
 107 };
 108
 109 struct bt_uuid {
 110         struct list_head list;
 111         u8 uuid[16];
 112         u8 size;
 113         u8 svc_hint;
 114 };
 115
 116 struct smp_csrk {
 117         bdaddr_t bdaddr;
 118         u8 bdaddr_type;
 119         u8 type;
 120         u8 val[16];
 121 };
 122
 123 struct smp_ltk {
 124         struct list_head list;
 125         struct rcu_head rcu;
 126         bdaddr_t bdaddr;
 127         u8 bdaddr_type;
 128         u8 authenticated;
 129         u8 type;
 130         u8 enc_size;
 131         __le16 ediv;
 132         __le64 rand;
 133         u8 val[16];
 134 };
 135
 136 struct smp_irk {
 137         struct list_head list;
 138         struct rcu_head rcu;
 139         bdaddr_t rpa;
 140         bdaddr_t bdaddr;
 141         u8 addr_type;
 142         u8 val[16];
 143 };
 144
 145 struct link_key {
 146         struct list_head list;
 147         struct rcu_head rcu;
 148         bdaddr_t bdaddr;
 149         u8 type;
 150         u8 val[HCI_LINK_KEY_SIZE];
 151         u8 pin_len;
 152 };
 153
 154 struct oob_data {
 155         struct list_head list;
 156         bdaddr_t bdaddr;
 157         u8 bdaddr_type;
 158         u8 present;
 159         u8 hash192[16];
 160         u8 rand192[16];
 161         u8 hash256[16];
 162         u8 rand256[16];
 163 };
 164
 165 struct adv_info {
 166         struct list_head list;
 167         bool pending;
 168         __u8    instance;
 169         __u32   flags;
 170         __u16   timeout;
 171         __u16   remaining_time;
 172         __u16   duration;
 173         __u16   adv_data_len;
 174         __u8    adv_data[HCI_MAX_AD_LENGTH];
 175         __u16   scan_rsp_len;
 176         __u8    scan_rsp_data[HCI_MAX_AD_LENGTH];
 177 };
 178
 179 #define HCI_MAX_ADV_INSTANCES           5
 180 #define HCI_DEFAULT_ADV_DURATION        2
 181
 182 #define HCI_MAX_SHORT_NAME_LENGTH       10
 183
 184 /* Min encryption key size to match with SMP */
 185 #define HCI_MIN_ENC_KEY_SIZE            7
 186
 187 /* Default LE RPA expiry time, 15 minutes */
 188 #define HCI_DEFAULT_RPA_TIMEOUT         (15 * 60)
 189
 190 /* Default min/max age of connection information (1s/3s) */
 191 #define DEFAULT_CONN_INFO_MIN_AGE       1000
 192 #define DEFAULT_CONN_INFO_MAX_AGE       3000
 193
 194 struct amp_assoc {
 195         __u16   len;
 196         __u16   offset;
 197         __u16   rem_len;
 198         __u16   len_so_far;
 199         __u8    data[HCI_MAX_AMP_ASSOC_SIZE];
 200 };
 201
 202 #define HCI_MAX_PAGES   3
 203
 204 struct hci_dev {
 205         struct list_head list;
 206         struct mutex    lock;
 207
 208         char            name[8];
 209         unsigned long   flags;
 210         __u16           id;
 211         __u8            bus;
 212         __u8            dev_type;
 213         bdaddr_t        bdaddr;
 214         bdaddr_t        setup_addr;
 215         bdaddr_t        public_addr;
 216         bdaddr_t        random_addr;
 217         bdaddr_t        static_addr;
 218         __u8            adv_addr_type;
 219         __u8            dev_name[HCI_MAX_NAME_LENGTH];
 220         __u8            short_name[HCI_MAX_SHORT_NAME_LENGTH];
 221         __u8            eir[HCI_MAX_EIR_LENGTH];
 222         __u16           appearance;
 223         __u8            dev_class[3];
 224         __u8            major_class;
 225         __u8            minor_class;
 226         __u8            max_page;
 227         __u8            features[HCI_MAX_PAGES][8];
 228         __u8            le_features[8];
 229         __u8            le_white_list_size;
 230         __u8            le_states[8];
 231         __u8            commands[64];
 232         __u8            hci_ver;
 233         __u16           hci_rev;
 234         __u8            lmp_ver;
 235         __u16           manufacturer;
 236         __u16           lmp_subver;
 237         __u16           voice_setting;
 238         __u8            num_iac;
 239         __u8            stored_max_keys;
 240         __u8            stored_num_keys;
 241         __u8            io_capability;
 242         __s8            inq_tx_power;
 243         __u16           page_scan_interval;
 244         __u16           page_scan_window;
 245         __u8            page_scan_type;
 246         __u8            le_adv_channel_map;
 247         __u16           le_adv_min_interval;
 248         __u16           le_adv_max_interval;
 249         __u8            le_scan_type;
 250         __u16           le_scan_interval;
 251         __u16           le_scan_window;
 252         __u16           le_conn_min_interval;
 253         __u16           le_conn_max_interval;
 254         __u16           le_conn_latency;
 255         __u16           le_supv_timeout;
 256         __u16           le_def_tx_len;
 257         __u16           le_def_tx_time;
 258         __u16           le_max_tx_len;
 259         __u16           le_max_tx_time;
 260         __u16           le_max_rx_len;
 261         __u16           le_max_rx_time;
 262         __u16           discov_interleaved_timeout;
 263         __u16           conn_info_min_age;
 264         __u16           conn_info_max_age;
 265         __u8            ssp_debug_mode;
 266         __u8            hw_error_code;
 267         __u32           clock;
 268
 269         __u16           devid_source;
 270         __u16           devid_vendor;
 271         __u16           devid_product;
 272         __u16           devid_version;
 273
 274         __u16           pkt_type;
 275         __u16           esco_type;
 276         __u16           link_policy;
 277         __u16           link_mode;
 278
 279         __u32           idle_timeout;
 280         __u16           sniff_min_interval;
 281         __u16           sniff_max_interval;
 282
 283         __u8            amp_status;
 284         __u32           amp_total_bw;
 285         __u32           amp_max_bw;
 286         __u32           amp_min_latency;
 287         __u32           amp_max_pdu;
 288         __u8            amp_type;
 289         __u16           amp_pal_cap;
 290         __u16           amp_assoc_size;
 291         __u32           amp_max_flush_to;
 292         __u32           amp_be_flush_to;
 293
 294         struct amp_assoc        loc_assoc;
 295
 296         __u8            flow_ctl_mode;
 297
 298         unsigned int    auto_accept_delay;
 299
 300         unsigned long   quirks;
 301
 302         atomic_t        cmd_cnt;
 303         unsigned int    acl_cnt;
 304         unsigned int    sco_cnt;
 305         unsigned int    le_cnt;
 306
 307         unsigned int    acl_mtu;
 308         unsigned int    sco_mtu;
 309         unsigned int    le_mtu;
 310         unsigned int    acl_pkts;
 311         unsigned int    sco_pkts;
 312         unsigned int    le_pkts;
 313
 314         __u16           block_len;
 315         __u16           block_mtu;
 316         __u16           num_blocks;
 317         __u16           block_cnt;
 318
 319         unsigned long   acl_last_tx;
 320         unsigned long   sco_last_tx;
 321         unsigned long   le_last_tx;
 322
 323         struct workqueue_struct *workqueue;
 324         struct workqueue_struct *req_workqueue;
 325
 326         struct work_struct      power_on;
 327         struct delayed_work     power_off;
 328         struct work_struct      error_reset;
 329
 330         __u16                   discov_timeout;
 331         struct delayed_work     discov_off;
 332
 333         struct delayed_work     service_cache;
 334
 335         struct delayed_work     cmd_timer;
 336
 337         struct work_struct      rx_work;
 338         struct work_struct      cmd_work;
 339         struct work_struct      tx_work;
 340
 341         struct work_struct      discov_update;
 342         struct work_struct      bg_scan_update;
 343         struct work_struct      scan_update;
 344         struct work_struct      connectable_update;
 345         struct work_struct      discoverable_update;
 346         struct delayed_work     le_scan_disable;
 347         struct delayed_work     le_scan_restart;
 348
 349         struct sk_buff_head     rx_q;
 350         struct sk_buff_head     raw_q;
 351         struct sk_buff_head     cmd_q;
 352
 353         struct sk_buff          *sent_cmd;
 354
 355         struct mutex            req_lock;
 356         wait_queue_head_t       req_wait_q;
 357         __u32                   req_status;
 358         __u32                   req_result;
 359         struct sk_buff          *req_skb;
 360
 361         void                    *smp_data;
 362         void                    *smp_bredr_data;
 363
 364         struct discovery_state  discovery;
 365         struct hci_conn_hash    conn_hash;
 366
 367         struct list_head        mgmt_pending;
 368         struct list_head        blacklist;
 369         struct list_head        whitelist;
 370         struct list_head        uuids;
 371         struct list_head        link_keys;
 372         struct list_head        long_term_keys;
 373         struct list_head        identity_resolving_keys;
 374         struct list_head        remote_oob_data;
 375         struct list_head        le_white_list;
 376         struct list_head        le_conn_params;
 377         struct list_head        pend_le_conns;
 378         struct list_head        pend_le_reports;
 379
 380         struct hci_dev_stats    stat;
 381
 382         atomic_t                promisc;
 383
 384         const char              *hw_info;
 385         const char              *fw_info;
 386         struct dentry           *debugfs;
 387
 388         struct device           dev;
 389
 390         struct rfkill           *rfkill;
 391
 392         DECLARE_BITMAP(dev_flags, __HCI_NUM_FLAGS);
 393
 394         __s8                    adv_tx_power;
 395         __u8                    adv_data[HCI_MAX_AD_LENGTH];
 396         __u8                    adv_data_len;
 397         __u8                    scan_rsp_data[HCI_MAX_AD_LENGTH];
 398         __u8                    scan_rsp_data_len;
 399
 400         struct list_head        adv_instances;
 401         unsigned int            adv_instance_cnt;
 402         __u8                    cur_adv_instance;
 403         __u16                   adv_instance_timeout;
 404         struct delayed_work     adv_instance_expire;
 405
 406         __u8                    irk[16];
 407         __u32                   rpa_timeout;
 408         struct delayed_work     rpa_expired;
 409         bdaddr_t                rpa;
 410
 411 #if IS_ENABLED(CONFIG_BT_LEDS)
 412         struct led_trigger      *power_led;
 413 #endif
 414
 415         int (*open)(struct hci_dev *hdev);
 416         int (*close)(struct hci_dev *hdev);
 417         int (*flush)(struct hci_dev *hdev);
 418         int (*setup)(struct hci_dev *hdev);
 419         int (*shutdown)(struct hci_dev *hdev);
 420         int (*send)(struct hci_dev *hdev, struct sk_buff *skb);
 421         void (*notify)(struct hci_dev *hdev, unsigned int evt);
 422         void (*hw_error)(struct hci_dev *hdev, u8 code);
 423         int (*post_init)(struct hci_dev *hdev);
 424         int (*set_diag)(struct hci_dev *hdev, bool enable);
 425         int (*set_bdaddr)(struct hci_dev *hdev, const bdaddr_t *bdaddr);
 426 };
 427
 428 #define HCI_PHY_HANDLE(handle)  (handle & 0xff)
 429
 430 struct hci_conn {
 431         struct list_head list;
 432
 433         atomic_t        refcnt;
 434
 435         bdaddr_t        dst;
 436         __u8            dst_type;
 437         bdaddr_t        src;
 438         __u8            src_type;
 439         bdaddr_t        init_addr;
 440         __u8            init_addr_type;
 441         bdaddr_t        resp_addr;
 442         __u8            resp_addr_type;
 443         __u16           handle;
 444         __u16           state;
 445         __u8            mode;
 446         __u8            type;
 447         __u8            role;
 448         bool            out;
 449         __u8            attempt;
 450         __u8            dev_class[3];
 451         __u8            features[HCI_MAX_PAGES][8];
 452         __u16           pkt_type;
 453         __u16           link_policy;
 454         __u8            key_type;
 455         __u8            auth_type;
 456         __u8            sec_level;
 457         __u8            pending_sec_level;
 458         __u8            pin_length;
 459         __u8            enc_key_size;
 460         __u8            io_capability;
 461         __u32           passkey_notify;
 462         __u8            passkey_entered;
 463         __u16           disc_timeout;
 464         __u16           conn_timeout;
 465         __u16           setting;
 466         __u16           le_conn_min_interval;
 467         __u16           le_conn_max_interval;
 468         __u16           le_conn_interval;
 469         __u16           le_conn_latency;
 470         __u16           le_supv_timeout;
 471         __u8            le_adv_data[HCI_MAX_AD_LENGTH];
 472         __u8            le_adv_data_len;
 473         __s8            rssi;
 474         __s8            tx_power;
 475         __s8            max_tx_power;
 476         unsigned long   flags;
 477
 478         __u32           clock;
 479         __u16           clock_accuracy;
 480
 481         unsigned long   conn_info_timestamp;
 482
 483         __u8            remote_cap;
 484         __u8            remote_auth;
 485         __u8            remote_id;
 486
 487         unsigned int    sent;
 488
 489         struct sk_buff_head data_q;
 490         struct list_head chan_list;
 491
 492         struct delayed_work disc_work;
 493         struct delayed_work auto_accept_work;
 494         struct delayed_work idle_work;
 495         struct delayed_work le_conn_timeout;
 496         struct work_struct  le_scan_cleanup;
 497
 498         struct device   dev;
 499         struct dentry   *debugfs;
 500
 501         struct hci_dev  *hdev;
 502         void            *l2cap_data;
 503         void            *sco_data;
 504         struct amp_mgr  *amp_mgr;
 505
 506         struct hci_conn *link;
 507
 508         void (*connect_cfm_cb)  (struct hci_conn *conn, u8 status);
 509         void (*security_cfm_cb) (struct hci_conn *conn, u8 status);
 510         void (*disconn_cfm_cb)  (struct hci_conn *conn, u8 reason);
 511 };
 512
 513 struct hci_chan {
 514         struct list_head list;
 515         __u16 handle;
 516         struct hci_conn *conn;
 517         struct sk_buff_head data_q;
 518         unsigned int    sent;
 519         __u8            state;
 520         bool            amp;
 521 };
 522
 523 struct hci_conn_params {
 524         struct list_head list;
 525         struct list_head action;
 526
 527         bdaddr_t addr;
 528         u8 addr_type;
 529
 530         u16 conn_min_interval;
 531         u16 conn_max_interval;
 532         u16 conn_latency;
 533         u16 supervision_timeout;
 534
 535         enum {
 536                 HCI_AUTO_CONN_DISABLED,
 537                 HCI_AUTO_CONN_REPORT,
 538                 HCI_AUTO_CONN_DIRECT,
 539                 HCI_AUTO_CONN_ALWAYS,
 540                 HCI_AUTO_CONN_LINK_LOSS,
 541                 HCI_AUTO_CONN_EXPLICIT,
 542         } auto_connect;
 543
 544         struct hci_conn *conn;
 545         bool explicit_connect;
 546 };
 547
 548 extern struct list_head hci_dev_list;
 549 extern struct list_head hci_cb_list;
 550 extern rwlock_t hci_dev_list_lock;
 551 extern struct mutex hci_cb_list_lock;
 552
 553 #define hci_dev_set_flag(hdev, nr)             set_bit((nr), (hdev)->dev_flags)
 554 #define hci_dev_clear_flag(hdev, nr)           clear_bit((nr), (hdev)->dev_flags)
 555 #define hci_dev_change_flag(hdev, nr)          change_bit((nr), (hdev)->dev_flags)
 556 #define hci_dev_test_flag(hdev, nr)            test_bit((nr), (hdev)->dev_flags)
 557 #define hci_dev_test_and_set_flag(hdev, nr)    test_and_set_bit((nr), (hdev)->dev_flags)
 558 #define hci_dev_test_and_clear_flag(hdev, nr)  test_and_clear_bit((nr), (hdev)->dev_flags)
 559 #define hci_dev_test_and_change_flag(hdev, nr) test_and_change_bit((nr), (hdev)->dev_flags)
 560
 561 #define hci_dev_clear_volatile_flags(hdev)                      \
 562         do {                                                    \
 563                 hci_dev_clear_flag(hdev, HCI_LE_SCAN);          \
 564                 hci_dev_clear_flag(hdev, HCI_LE_ADV);           \
 565                 hci_dev_clear_flag(hdev, HCI_PERIODIC_INQ);     \
 566         } while (0)
 567
 568 /* ----- HCI interface to upper protocols ----- */
 569 int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr);
 570 int l2cap_disconn_ind(struct hci_conn *hcon);
 571 void l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
 572
 573 #if IS_ENABLED(CONFIG_BT_BREDR)
 574 int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
 575 void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb);
 576 #else
 577 static inline int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
 578                                   __u8 *flags)
 579 {
 580         return 0;
 581 }
 582
 583 static inline void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb)
 584 {
 585 }
 586 #endif
 587
 588 /* ----- Inquiry cache ----- */
 589 #define INQUIRY_CACHE_AGE_MAX   (HZ*30)   /* 30 seconds */
 590 #define INQUIRY_ENTRY_AGE_MAX   (HZ*60)   /* 60 seconds */
 591
 592 static inline void discovery_init(struct hci_dev *hdev)
 593 {
 594         hdev->discovery.state = DISCOVERY_STOPPED;
 595         INIT_LIST_HEAD(&hdev->discovery.all);
 596         INIT_LIST_HEAD(&hdev->discovery.unknown);
 597         INIT_LIST_HEAD(&hdev->discovery.resolve);
 598         hdev->discovery.report_invalid_rssi = true;
 599         hdev->discovery.rssi = HCI_RSSI_INVALID;
 600 }
 601
 602 static inline void hci_discovery_filter_clear(struct hci_dev *hdev)
 603 {
 604         hdev->discovery.result_filtering = false;
 605         hdev->discovery.report_invalid_rssi = true;
 606         hdev->discovery.rssi = HCI_RSSI_INVALID;
 607         hdev->discovery.uuid_count = 0;
 608         kfree(hdev->discovery.uuids);
 609         hdev->discovery.uuids = NULL;
 610         hdev->discovery.scan_start = 0;
 611         hdev->discovery.scan_duration = 0;
 612 }
 613
 614 bool hci_discovery_active(struct hci_dev *hdev);
 615
 616 void hci_discovery_set_state(struct hci_dev *hdev, int state);
 617
 618 static inline int inquiry_cache_empty(struct hci_dev *hdev)
 619 {
 620         return list_empty(&hdev->discovery.all);
 621 }
 622
 623 static inline long inquiry_cache_age(struct hci_dev *hdev)
 624 {
 625         struct discovery_state *c = &hdev->discovery;
 626         return jiffies - c->timestamp;
 627 }
 628
 629 static inline long inquiry_entry_age(struct inquiry_entry *e)
 630 {
 631         return jiffies - e->timestamp;
 632 }
 633
 634 struct inquiry_entry *hci_inquiry_cache_lookup(struct hci_dev *hdev,
 635                                                bdaddr_t *bdaddr);
 636 struct inquiry_entry *hci_inquiry_cache_lookup_unknown(struct hci_dev *hdev,
 637                                                        bdaddr_t *bdaddr);
 638 struct inquiry_entry *hci_inquiry_cache_lookup_resolve(struct hci_dev *hdev,
 639                                                        bdaddr_t *bdaddr,
 640                                                        int state);
 641 void hci_inquiry_cache_update_resolve(struct hci_dev *hdev,
 642                                       struct inquiry_entry *ie);
 643 u32 hci_inquiry_cache_update(struct hci_dev *hdev, struct inquiry_data *data,
 644                              bool name_known);
 645 void hci_inquiry_cache_flush(struct hci_dev *hdev);
 646
 647 /* ----- HCI Connections ----- */
 648 enum {
 649         HCI_CONN_AUTH_PEND,
 650         HCI_CONN_REAUTH_PEND,
 651         HCI_CONN_ENCRYPT_PEND,
 652         HCI_CONN_RSWITCH_PEND,
 653         HCI_CONN_MODE_CHANGE_PEND,
 654         HCI_CONN_SCO_SETUP_PEND,
 655         HCI_CONN_MGMT_CONNECTED,
 656         HCI_CONN_SSP_ENABLED,
 657         HCI_CONN_SC_ENABLED,
 658         HCI_CONN_AES_CCM,
 659         HCI_CONN_POWER_SAVE,
 660         HCI_CONN_FLUSH_KEY,
 661         HCI_CONN_ENCRYPT,
 662         HCI_CONN_AUTH,
 663         HCI_CONN_SECURE,
 664         HCI_CONN_FIPS,
 665         HCI_CONN_STK_ENCRYPT,
 666         HCI_CONN_AUTH_INITIATOR,
 667         HCI_CONN_DROP,
 668         HCI_CONN_PARAM_REMOVAL_PEND,
 669         HCI_CONN_NEW_LINK_KEY,
 670         HCI_CONN_SCANNING,
 671         HCI_CONN_AUTH_FAILURE,
 672 };
 673
 674 static inline bool hci_conn_ssp_enabled(struct hci_conn *conn)
 675 {
 676         struct hci_dev *hdev = conn->hdev;
 677         return hci_dev_test_flag(hdev, HCI_SSP_ENABLED) &&
 678                test_bit(HCI_CONN_SSP_ENABLED, &conn->flags);
 679 }
 680
 681 static inline bool hci_conn_sc_enabled(struct hci_conn *conn)
 682 {
 683         struct hci_dev *hdev = conn->hdev;
 684         return hci_dev_test_flag(hdev, HCI_SC_ENABLED) &&
 685                test_bit(HCI_CONN_SC_ENABLED, &conn->flags);
 686 }
 687
 688 static inline void hci_conn_hash_add(struct hci_dev *hdev, struct hci_conn *c)
 689 {
 690         struct hci_conn_hash *h = &hdev->conn_hash;
 691         list_add_rcu(&c->list, &h->list);
 692         switch (c->type) {
 693         case ACL_LINK:
 694                 h->acl_num++;
 695                 break;
 696         case AMP_LINK:
 697                 h->amp_num++;
 698                 break;
 699         case LE_LINK:
 700                 h->le_num++;
 701                 if (c->role == HCI_ROLE_SLAVE)
 702                         h->le_num_slave++;
 703                 break;
 704         case SCO_LINK:
 705         case ESCO_LINK:
 706                 h->sco_num++;
 707                 break;
 708         }
 709 }
 710
 711 static inline void hci_conn_hash_del(struct hci_dev *hdev, struct hci_conn *c)
 712 {
 713         struct hci_conn_hash *h = &hdev->conn_hash;
 714
 715         list_del_rcu(&c->list);
 716         synchronize_rcu();
 717
 718         switch (c->type) {
 719         case ACL_LINK:
 720                 h->acl_num--;
 721                 break;
 722         case AMP_LINK:
 723                 h->amp_num--;
 724                 break;
 725         case LE_LINK:
 726                 h->le_num--;
 727                 if (c->role == HCI_ROLE_SLAVE)
 728                         h->le_num_slave--;
 729                 break;
 730         case SCO_LINK:
 731         case ESCO_LINK:
 732                 h->sco_num--;
 733                 break;
 734         }
 735 }
 736
 737 static inline unsigned int hci_conn_num(struct hci_dev *hdev, __u8 type)
 738 {
 739         struct hci_conn_hash *h = &hdev->conn_hash;
 740         switch (type) {
 741         case ACL_LINK:
 742                 return h->acl_num;
 743         case AMP_LINK:
 744                 return h->amp_num;
 745         case LE_LINK:
 746                 return h->le_num;
 747         case SCO_LINK:
 748         case ESCO_LINK:
 749                 return h->sco_num;
 750         default:
 751                 return 0;
 752         }
 753 }
 754
 755 static inline unsigned int hci_conn_count(struct hci_dev *hdev)
 756 {
 757         struct hci_conn_hash *c = &hdev->conn_hash;
 758
 759         return c->acl_num + c->amp_num + c->sco_num + c->le_num;
 760 }
 761
 762 static inline __u8 hci_conn_lookup_type(struct hci_dev *hdev, __u16 handle)
 763 {
 764         struct hci_conn_hash *h = &hdev->conn_hash;
 765         struct hci_conn *c;
 766         __u8 type = INVALID_LINK;
 767
 768         rcu_read_lock();
 769
 770         list_for_each_entry_rcu(c, &h->list, list) {
 771                 if (c->handle == handle) {
 772                         type = c->type;
 773                         break;
 774                 }
 775         }
 776
 777         rcu_read_unlock();
 778
 779         return type;
 780 }
 781
 782 static inline struct hci_conn *hci_conn_hash_lookup_handle(struct hci_dev *hdev,
 783                                                                 __u16 handle)
 784 {
 785         struct hci_conn_hash *h = &hdev->conn_hash;
 786         struct hci_conn  *c;
 787
 788         rcu_read_lock();
 789
 790         list_for_each_entry_rcu(c, &h->list, list) {
 791                 if (c->handle == handle) {
 792                         rcu_read_unlock();
 793                         return c;
 794                 }
 795         }
 796         rcu_read_unlock();
 797
 798         return NULL;
 799 }
 800
 801 static inline struct hci_conn *hci_conn_hash_lookup_ba(struct hci_dev *hdev,
 802                                                         __u8 type, bdaddr_t *ba)
 803 {
 804         struct hci_conn_hash *h = &hdev->conn_hash;
 805         struct hci_conn  *c;
 806
 807         rcu_read_lock();
 808
 809         list_for_each_entry_rcu(c, &h->list, list) {
 810                 if (c->type == type && !bacmp(&c->dst, ba)) {
 811                         rcu_read_unlock();
 812                         return c;
 813                 }
 814         }
 815
 816         rcu_read_unlock();
 817
 818         return NULL;
 819 }
 820
 821 static inline struct hci_conn *hci_conn_hash_lookup_le(struct hci_dev *hdev,
 822                                                        bdaddr_t *ba,
 823                                                        __u8 ba_type)
 824 {
 825         struct hci_conn_hash *h = &hdev->conn_hash;
 826         struct hci_conn  *c;
 827
 828         rcu_read_lock();
 829
 830         list_for_each_entry_rcu(c, &h->list, list) {
 831                 if (c->type != LE_LINK)
 832                        continue;
 833
 834                 if (ba_type == c->dst_type && !bacmp(&c->dst, ba)) {
 835                         rcu_read_unlock();
 836                         return c;
 837                 }
 838         }
 839
 840         rcu_read_unlock();
 841
 842         return NULL;
 843 }
 844
 845 static inline struct hci_conn *hci_conn_hash_lookup_state(struct hci_dev *hdev,
 846                                                         __u8 type, __u16 state)
 847 {
 848         struct hci_conn_hash *h = &hdev->conn_hash;
 849         struct hci_conn  *c;
 850
 851         rcu_read_lock();
 852
 853         list_for_each_entry_rcu(c, &h->list, list) {
 854                 if (c->type == type && c->state == state) {
 855                         rcu_read_unlock();
 856                         return c;
 857                 }
 858         }
 859
 860         rcu_read_unlock();
 861
 862         return NULL;
 863 }
 864
 865 static inline struct hci_conn *hci_lookup_le_connect(struct hci_dev *hdev)
 866 {
 867         struct hci_conn_hash *h = &hdev->conn_hash;
 868         struct hci_conn  *c;
 869
 870         rcu_read_lock();
 871
 872         list_for_each_entry_rcu(c, &h->list, list) {
 873                 if (c->type == LE_LINK && c->state == BT_CONNECT &&
 874                     !test_bit(HCI_CONN_SCANNING, &c->flags)) {
 875                         rcu_read_unlock();
 876                         return c;
 877                 }
 878         }
 879
 880         rcu_read_unlock();
 881
 882         return NULL;
 883 }
 884
 885 int hci_disconnect(struct hci_conn *conn, __u8 reason);
 886 bool hci_setup_sync(struct hci_conn *conn, __u16 handle);
 887 void hci_sco_setup(struct hci_conn *conn, __u8 status);
 888
 889 struct hci_conn *hci_conn_add(struct hci_dev *hdev, int type, bdaddr_t *dst,
 890                               u8 role);
 891 int hci_conn_del(struct hci_conn *conn);
 892 void hci_conn_hash_flush(struct hci_dev *hdev);
 893 void hci_conn_check_pending(struct hci_dev *hdev);
 894
 895 struct hci_chan *hci_chan_create(struct hci_conn *conn);
 896 void hci_chan_del(struct hci_chan *chan);
 897 void hci_chan_list_flush(struct hci_conn *conn);
 898 struct hci_chan *hci_chan_lookup_handle(struct hci_dev *hdev, __u16 handle);
 899
 900 struct hci_conn *hci_connect_le_scan(struct hci_dev *hdev, bdaddr_t *dst,
 901                                      u8 dst_type, u8 sec_level,
 902                                      u16 conn_timeout);
 903 struct hci_conn *hci_connect_le(struct hci_dev *hdev, bdaddr_t *dst,
 904                                 u8 dst_type, u8 sec_level, u16 conn_timeout,
 905                                 u8 role, bdaddr_t *direct_rpa);
 906 struct hci_conn *hci_connect_acl(struct hci_dev *hdev, bdaddr_t *dst,
 907                                  u8 sec_level, u8 auth_type);
 908 struct hci_conn *hci_connect_sco(struct hci_dev *hdev, int type, bdaddr_t *dst,
 909                                  __u16 setting);
 910 int hci_conn_check_link_mode(struct hci_conn *conn);
 911 int hci_conn_check_secure(struct hci_conn *conn, __u8 sec_level);
 912 int hci_conn_security(struct hci_conn *conn, __u8 sec_level, __u8 auth_type,
 913                       bool initiator);
 914 int hci_conn_switch_role(struct hci_conn *conn, __u8 role);
 915
 916 void hci_conn_enter_active_mode(struct hci_conn *conn, __u8 force_active);
 917
 918 void hci_le_conn_failed(struct hci_conn *conn, u8 status);
 919
 920 /*
 921  * hci_conn_get() and hci_conn_put() are used to control the life-time of an
 922  * "hci_conn" object. They do not guarantee that the hci_conn object is running,
 923  * working or anything else. They just guarantee that the object is available
 924  * and can be dereferenced. So you can use its locks, local variables and any
 925  * other constant data.
 926  * Before accessing runtime data, you _must_ lock the object and then check that
 927  * it is still running. As soon as you release the locks, the connection might
 928  * get dropped, though.
 929  *
 930  * On the other hand, hci_conn_hold() and hci_conn_drop() are used to control
 931  * how long the underlying connection is held. So every channel that runs on the
 932  * hci_conn object calls this to prevent the connection from disappearing. As
 933  * long as you hold a device, you must also guarantee that you have a valid
 934  * reference to the device via hci_conn_get() (or the initial reference from
 935  * hci_conn_add()).
 936  * The hold()/drop() ref-count is known to drop below 0 sometimes, which doesn't
 937  * break because nobody cares for that. But this means, we cannot use
 938  * _get()/_drop() in it, but require the caller to have a valid ref (FIXME).
 939  */
 940
 941 static inline struct hci_conn *hci_conn_get(struct hci_conn *conn)
 942 {
 943         get_device(&conn->dev);
 944         return conn;
 945 }
 946
 947 static inline void hci_conn_put(struct hci_conn *conn)
 948 {
 949         put_device(&conn->dev);
 950 }
 951
 952 static inline void hci_conn_hold(struct hci_conn *conn)
 953 {
 954         BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
 955
 956         atomic_inc(&conn->refcnt);
 957         cancel_delayed_work(&conn->disc_work);
 958 }
 959
 960 static inline void hci_conn_drop(struct hci_conn *conn)
 961 {
 962         BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
 963
 964         if (atomic_dec_and_test(&conn->refcnt)) {
 965                 unsigned long timeo;
 966
 967                 switch (conn->type) {
 968                 case ACL_LINK:
 969                 case LE_LINK:
 970                         cancel_delayed_work(&conn->idle_work);
 971                         if (conn->state == BT_CONNECTED) {
 972                                 timeo = conn->disc_timeout;
 973                                 if (!conn->out)
 974                                         timeo *= 2;
 975                         } else {
 976                                 timeo = 0;
 977                         }
 978                         break;
 979
 980                 case AMP_LINK:
 981                         timeo = conn->disc_timeout;
 982                         break;
 983
 984                 default:
 985                         timeo = 0;
 986                         break;
 987                 }
 988
 989                 cancel_delayed_work(&conn->disc_work);
 990                 queue_delayed_work(conn->hdev->workqueue,
 991                                    &conn->disc_work, timeo);
 992         }
 993 }
 994
 995 /* ----- HCI Devices ----- */
 996 static inline void hci_dev_put(struct hci_dev *d)
 997 {
 998         BT_DBG("%s orig refcnt %d", d->name,
 999                kref_read(&d->dev.kobj.kref));
1000
1001         put_device(&d->dev);
1002 }
1003
1004 static inline struct hci_dev *hci_dev_hold(struct hci_dev *d)
1005 {
1006         BT_DBG("%s orig refcnt %d", d->name,
1007                kref_read(&d->dev.kobj.kref));
1008
1009         get_device(&d->dev);
1010         return d;
1011 }
1012
1013 #define hci_dev_lock(d)         mutex_lock(&d->lock)
1014 #define hci_dev_unlock(d)       mutex_unlock(&d->lock)
1015
1016 #define to_hci_dev(d) container_of(d, struct hci_dev, dev)
1017 #define to_hci_conn(c) container_of(c, struct hci_conn, dev)
1018
1019 static inline void *hci_get_drvdata(struct hci_dev *hdev)
1020 {
1021         return dev_get_drvdata(&hdev->dev);
1022 }
1023
1024 static inline void hci_set_drvdata(struct hci_dev *hdev, void *data)
1025 {
1026         dev_set_drvdata(&hdev->dev, data);
1027 }
1028
1029 struct hci_dev *hci_dev_get(int index);
1030 struct hci_dev *hci_get_route(bdaddr_t *dst, bdaddr_t *src, u8 src_type);
1031
1032 struct hci_dev *hci_alloc_dev(void);
1033 void hci_free_dev(struct hci_dev *hdev);
1034 int hci_register_dev(struct hci_dev *hdev);
1035 void hci_unregister_dev(struct hci_dev *hdev);
1036 void hci_cleanup_dev(struct hci_dev *hdev);
1037 int hci_suspend_dev(struct hci_dev *hdev);
1038 int hci_resume_dev(struct hci_dev *hdev);
1039 int hci_reset_dev(struct hci_dev *hdev);
1040 int hci_recv_frame(struct hci_dev *hdev, struct sk_buff *skb);
1041 int hci_recv_diag(struct hci_dev *hdev, struct sk_buff *skb);
1042 __printf(2, 3) void hci_set_hw_info(struct hci_dev *hdev, const char *fmt, ...);
1043 __printf(2, 3) void hci_set_fw_info(struct hci_dev *hdev, const char *fmt, ...);
1044 int hci_dev_open(__u16 dev);
1045 int hci_dev_close(__u16 dev);
1046 int hci_dev_do_close(struct hci_dev *hdev);
1047 int hci_dev_reset(__u16 dev);
1048 int hci_dev_reset_stat(__u16 dev);
1049 int hci_dev_cmd(unsigned int cmd, void __user *arg);
1050 int hci_get_dev_list(void __user *arg);
1051 int hci_get_dev_info(void __user *arg);
1052 int hci_get_conn_list(void __user *arg);
1053 int hci_get_conn_info(struct hci_dev *hdev, void __user *arg);
1054 int hci_get_auth_info(struct hci_dev *hdev, void __user *arg);
1055 int hci_inquiry(void __user *arg);
1056
1057 struct bdaddr_list *hci_bdaddr_list_lookup(struct list_head *list,
1058                                            bdaddr_t *bdaddr, u8 type);
1059 int hci_bdaddr_list_add(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1060 int hci_bdaddr_list_del(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1061 void hci_bdaddr_list_clear(struct list_head *list);
1062
1063 struct hci_conn_params *hci_conn_params_lookup(struct hci_dev *hdev,
1064                                                bdaddr_t *addr, u8 addr_type);
1065 struct hci_conn_params *hci_conn_params_add(struct hci_dev *hdev,
1066                                             bdaddr_t *addr, u8 addr_type);
1067 void hci_conn_params_del(struct hci_dev *hdev, bdaddr_t *addr, u8 addr_type);
1068 void hci_conn_params_clear_disabled(struct hci_dev *hdev);
1069
1070 struct hci_conn_params *hci_pend_le_action_lookup(struct list_head *list,
1071                                                   bdaddr_t *addr,
1072                                                   u8 addr_type);
1073
1074 void hci_uuids_clear(struct hci_dev *hdev);
1075
1076 void hci_link_keys_clear(struct hci_dev *hdev);
1077 struct link_key *hci_find_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1078 struct link_key *hci_add_link_key(struct hci_dev *hdev, struct hci_conn *conn,
1079                                   bdaddr_t *bdaddr, u8 *val, u8 type,
1080                                   u8 pin_len, bool *persistent);
1081 struct smp_ltk *hci_add_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1082                             u8 addr_type, u8 type, u8 authenticated,
1083                             u8 tk[16], u8 enc_size, __le16 ediv, __le64 rand);
1084 struct smp_ltk *hci_find_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1085                              u8 addr_type, u8 role);
1086 int hci_remove_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 bdaddr_type);
1087 void hci_smp_ltks_clear(struct hci_dev *hdev);
1088 int hci_remove_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1089
1090 struct smp_irk *hci_find_irk_by_rpa(struct hci_dev *hdev, bdaddr_t *rpa);
1091 struct smp_irk *hci_find_irk_by_addr(struct hci_dev *hdev, bdaddr_t *bdaddr,
1092                                      u8 addr_type);
1093 struct smp_irk *hci_add_irk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1094                             u8 addr_type, u8 val[16], bdaddr_t *rpa);
1095 void hci_remove_irk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 addr_type);
1096 void hci_smp_irks_clear(struct hci_dev *hdev);
1097
1098 bool hci_bdaddr_is_paired(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type);
1099
1100 void hci_remote_oob_data_clear(struct hci_dev *hdev);
1101 struct oob_data *hci_find_remote_oob_data(struct hci_dev *hdev,
1102                                           bdaddr_t *bdaddr, u8 bdaddr_type);
1103 int hci_add_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1104                             u8 bdaddr_type, u8 *hash192, u8 *rand192,
1105                             u8 *hash256, u8 *rand256);
1106 int hci_remove_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1107                                u8 bdaddr_type);
1108
1109 void hci_adv_instances_clear(struct hci_dev *hdev);
1110 struct adv_info *hci_find_adv_instance(struct hci_dev *hdev, u8 instance);
1111 struct adv_info *hci_get_next_instance(struct hci_dev *hdev, u8 instance);
1112 int hci_add_adv_instance(struct hci_dev *hdev, u8 instance, u32 flags,
1113                          u16 adv_data_len, u8 *adv_data,
1114                          u16 scan_rsp_len, u8 *scan_rsp_data,
1115                          u16 timeout, u16 duration);
1116 int hci_remove_adv_instance(struct hci_dev *hdev, u8 instance);
1117
1118 void hci_event_packet(struct hci_dev *hdev, struct sk_buff *skb);
1119
1120 void hci_init_sysfs(struct hci_dev *hdev);
1121 void hci_conn_init_sysfs(struct hci_conn *conn);
1122 void hci_conn_add_sysfs(struct hci_conn *conn);
1123 void hci_conn_del_sysfs(struct hci_conn *conn);
1124
1125 #define SET_HCIDEV_DEV(hdev, pdev) ((hdev)->dev.parent = (pdev))
1126
1127 /* ----- LMP capabilities ----- */
1128 #define lmp_encrypt_capable(dev)   ((dev)->features[0][0] & LMP_ENCRYPT)
1129 #define lmp_rswitch_capable(dev)   ((dev)->features[0][0] & LMP_RSWITCH)
1130 #define lmp_hold_capable(dev)      ((dev)->features[0][0] & LMP_HOLD)
1131 #define lmp_sniff_capable(dev)     ((dev)->features[0][0] & LMP_SNIFF)
1132 #define lmp_park_capable(dev)      ((dev)->features[0][1] & LMP_PARK)
1133 #define lmp_inq_rssi_capable(dev)  ((dev)->features[0][3] & LMP_RSSI_INQ)
1134 #define lmp_esco_capable(dev)      ((dev)->features[0][3] & LMP_ESCO)
1135 #define lmp_bredr_capable(dev)     (!((dev)->features[0][4] & LMP_NO_BREDR))
1136 #define lmp_le_capable(dev)        ((dev)->features[0][4] & LMP_LE)
1137 #define lmp_sniffsubr_capable(dev) ((dev)->features[0][5] & LMP_SNIFF_SUBR)
1138 #define lmp_pause_enc_capable(dev) ((dev)->features[0][5] & LMP_PAUSE_ENC)
1139 #define lmp_ext_inq_capable(dev)   ((dev)->features[0][6] & LMP_EXT_INQ)
1140 #define lmp_le_br_capable(dev)     (!!((dev)->features[0][6] & LMP_SIMUL_LE_BR))
1141 #define lmp_ssp_capable(dev)       ((dev)->features[0][6] & LMP_SIMPLE_PAIR)
1142 #define lmp_no_flush_capable(dev)  ((dev)->features[0][6] & LMP_NO_FLUSH)
1143 #define lmp_lsto_capable(dev)      ((dev)->features[0][7] & LMP_LSTO)
1144 #define lmp_inq_tx_pwr_capable(dev) ((dev)->features[0][7] & LMP_INQ_TX_PWR)
1145 #define lmp_ext_feat_capable(dev)  ((dev)->features[0][7] & LMP_EXTFEATURES)
1146 #define lmp_transp_capable(dev)    ((dev)->features[0][2] & LMP_TRANSPARENT)
1147
1148 /* ----- Extended LMP capabilities ----- */
1149 #define lmp_csb_master_capable(dev) ((dev)->features[2][0] & LMP_CSB_MASTER)
1150 #define lmp_csb_slave_capable(dev)  ((dev)->features[2][0] & LMP_CSB_SLAVE)
1151 #define lmp_sync_train_capable(dev) ((dev)->features[2][0] & LMP_SYNC_TRAIN)
1152 #define lmp_sync_scan_capable(dev)  ((dev)->features[2][0] & LMP_SYNC_SCAN)
1153 #define lmp_sc_capable(dev)         ((dev)->features[2][1] & LMP_SC)
1154 #define lmp_ping_capable(dev)       ((dev)->features[2][1] & LMP_PING)
1155
1156 /* ----- Host capabilities ----- */
1157 #define lmp_host_ssp_capable(dev)  ((dev)->features[1][0] & LMP_HOST_SSP)
1158 #define lmp_host_sc_capable(dev)   ((dev)->features[1][0] & LMP_HOST_SC)
1159 #define lmp_host_le_capable(dev)   (!!((dev)->features[1][0] & LMP_HOST_LE))
1160 #define lmp_host_le_br_capable(dev) (!!((dev)->features[1][0] & LMP_HOST_LE_BREDR))
1161
1162 #define hdev_is_powered(dev)   (test_bit(HCI_UP, &(dev)->flags) && \
1163                                 !hci_dev_test_flag(dev, HCI_AUTO_OFF))
1164 #define bredr_sc_enabled(dev)  (lmp_sc_capable(dev) && \
1165                                 hci_dev_test_flag(dev, HCI_SC_ENABLED))
1166
1167 /* ----- HCI protocols ----- */
1168 #define HCI_PROTO_DEFER             0x01
1169
1170 static inline int hci_proto_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
1171                                         __u8 type, __u8 *flags)
1172 {
1173         switch (type) {
1174         case ACL_LINK:
1175                 return l2cap_connect_ind(hdev, bdaddr);
1176
1177         case SCO_LINK:
1178         case ESCO_LINK:
1179                 return sco_connect_ind(hdev, bdaddr, flags);
1180
1181         default:
1182                 BT_ERR("unknown link type %d", type);
1183                 return -EINVAL;
1184         }
1185 }
1186
1187 static inline int hci_proto_disconn_ind(struct hci_conn *conn)
1188 {
1189         if (conn->type != ACL_LINK && conn->type != LE_LINK)
1190                 return HCI_ERROR_REMOTE_USER_TERM;
1191
1192         return l2cap_disconn_ind(conn);
1193 }
1194
1195 /* ----- HCI callbacks ----- */
1196 struct hci_cb {
1197         struct list_head list;
1198
1199         char *name;
1200
1201         void (*connect_cfm)     (struct hci_conn *conn, __u8 status);
1202         void (*disconn_cfm)     (struct hci_conn *conn, __u8 status);
1203         void (*security_cfm)    (struct hci_conn *conn, __u8 status,
1204                                                                 __u8 encrypt);
1205         void (*key_change_cfm)  (struct hci_conn *conn, __u8 status);
1206         void (*role_switch_cfm) (struct hci_conn *conn, __u8 status, __u8 role);
1207 };
1208
1209 static inline void hci_connect_cfm(struct hci_conn *conn, __u8 status)
1210 {
1211         struct hci_cb *cb;
1212
1213         mutex_lock(&hci_cb_list_lock);
1214         list_for_each_entry(cb, &hci_cb_list, list) {
1215                 if (cb->connect_cfm)
1216                         cb->connect_cfm(conn, status);
1217         }
1218         mutex_unlock(&hci_cb_list_lock);
1219
1220         if (conn->connect_cfm_cb)
1221                 conn->connect_cfm_cb(conn, status);
1222 }
1223
1224 static inline void hci_disconn_cfm(struct hci_conn *conn, __u8 reason)
1225 {
1226         struct hci_cb *cb;
1227
1228         mutex_lock(&hci_cb_list_lock);
1229         list_for_each_entry(cb, &hci_cb_list, list) {
1230                 if (cb->disconn_cfm)
1231                         cb->disconn_cfm(conn, reason);
1232         }
1233         mutex_unlock(&hci_cb_list_lock);
1234
1235         if (conn->disconn_cfm_cb)
1236                 conn->disconn_cfm_cb(conn, reason);
1237 }
1238
1239 static inline void hci_auth_cfm(struct hci_conn *conn, __u8 status)
1240 {
1241         struct hci_cb *cb;
1242         __u8 encrypt;
1243
1244         if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->flags))
1245                 return;
1246
1247         encrypt = test_bit(HCI_CONN_ENCRYPT, &conn->flags) ? 0x01 : 0x00;
1248
1249         mutex_lock(&hci_cb_list_lock);
1250         list_for_each_entry(cb, &hci_cb_list, list) {
1251                 if (cb->security_cfm)
1252                         cb->security_cfm(conn, status, encrypt);
1253         }
1254         mutex_unlock(&hci_cb_list_lock);
1255
1256         if (conn->security_cfm_cb)
1257                 conn->security_cfm_cb(conn, status);
1258 }
1259
1260 static inline void hci_encrypt_cfm(struct hci_conn *conn, __u8 status)
1261 {
1262         struct hci_cb *cb;
1263         __u8 encrypt;
1264
1265         if (conn->state == BT_CONFIG) {
1266                 if (!status)
1267                         conn->state = BT_CONNECTED;
1268
1269                 hci_connect_cfm(conn, status);
1270                 hci_conn_drop(conn);
1271                 return;
1272         }
1273
1274         if (!test_bit(HCI_CONN_ENCRYPT, &conn->flags))
1275                 encrypt = 0x00;
1276         else if (test_bit(HCI_CONN_AES_CCM, &conn->flags))
1277                 encrypt = 0x02;
1278         else
1279                 encrypt = 0x01;
1280
1281         if (!status) {
1282                 if (conn->sec_level == BT_SECURITY_SDP)
1283                         conn->sec_level = BT_SECURITY_LOW;
1284
1285                 if (conn->pending_sec_level > conn->sec_level)
1286                         conn->sec_level = conn->pending_sec_level;
1287         }
1288
1289         mutex_lock(&hci_cb_list_lock);
1290         list_for_each_entry(cb, &hci_cb_list, list) {
1291                 if (cb->security_cfm)
1292                         cb->security_cfm(conn, status, encrypt);
1293         }
1294         mutex_unlock(&hci_cb_list_lock);
1295
1296         if (conn->security_cfm_cb)
1297                 conn->security_cfm_cb(conn, status);
1298 }
1299
1300 static inline void hci_key_change_cfm(struct hci_conn *conn, __u8 status)
1301 {
1302         struct hci_cb *cb;
1303
1304         mutex_lock(&hci_cb_list_lock);
1305         list_for_each_entry(cb, &hci_cb_list, list) {
1306                 if (cb->key_change_cfm)
1307                         cb->key_change_cfm(conn, status);
1308         }
1309         mutex_unlock(&hci_cb_list_lock);
1310 }
1311
1312 static inline void hci_role_switch_cfm(struct hci_conn *conn, __u8 status,
1313                                                                 __u8 role)
1314 {
1315         struct hci_cb *cb;
1316
1317         mutex_lock(&hci_cb_list_lock);
1318         list_for_each_entry(cb, &hci_cb_list, list) {
1319                 if (cb->role_switch_cfm)
1320                         cb->role_switch_cfm(conn, status, role);
1321         }
1322         mutex_unlock(&hci_cb_list_lock);
1323 }
1324
1325 static inline void *eir_get_data(u8 *eir, size_t eir_len, u8 type,
1326                                  size_t *data_len)
1327 {
1328         size_t parsed = 0;
1329
1330         if (eir_len < 2)
1331                 return NULL;
1332
1333         while (parsed < eir_len - 1) {
1334                 u8 field_len = eir[0];
1335
1336                 if (field_len == 0)
1337                         break;
1338
1339                 parsed += field_len + 1;
1340
1341                 if (parsed > eir_len)
1342                         break;
1343
1344                 if (eir[1] != type) {
1345                         eir += field_len + 1;
1346                         continue;
1347                 }
1348
1349                 /* Zero length data */
1350                 if (field_len == 1)
1351                         return NULL;
1352
1353                 if (data_len)
1354                         *data_len = field_len - 1;
1355
1356                 return &eir[2];
1357         }
1358
1359         return NULL;
1360 }
1361
1362 static inline bool hci_bdaddr_is_rpa(bdaddr_t *bdaddr, u8 addr_type)
1363 {
1364         if (addr_type != ADDR_LE_DEV_RANDOM)
1365                 return false;
1366
1367         if ((bdaddr->b[5] & 0xc0) == 0x40)
1368                return true;
1369
1370         return false;
1371 }
1372
1373 static inline bool hci_is_identity_address(bdaddr_t *addr, u8 addr_type)
1374 {
1375         if (addr_type == ADDR_LE_DEV_PUBLIC)
1376                 return true;
1377
1378         /* Check for Random Static address type */
1379         if ((addr->b[5] & 0xc0) == 0xc0)
1380                 return true;
1381
1382         return false;
1383 }
1384
1385 static inline struct smp_irk *hci_get_irk(struct hci_dev *hdev,
1386                                           bdaddr_t *bdaddr, u8 addr_type)
1387 {
1388         if (!hci_bdaddr_is_rpa(bdaddr, addr_type))
1389                 return NULL;
1390
1391         return hci_find_irk_by_rpa(hdev, bdaddr);
1392 }
1393
1394 static inline int hci_check_conn_params(u16 min, u16 max, u16 latency,
1395                                         u16 to_multiplier)
1396 {
1397         u16 max_latency;
1398
1399         if (min > max || min < 6 || max > 3200)
1400                 return -EINVAL;
1401
1402         if (to_multiplier < 10 || to_multiplier > 3200)
1403                 return -EINVAL;
1404
1405         if (max >= to_multiplier * 8)
1406                 return -EINVAL;
1407
1408         max_latency = (to_multiplier * 4 / max) - 1;
1409         if (latency > 499 || latency > max_latency)
1410                 return -EINVAL;
1411
1412         return 0;
1413 }
1414
1415 int hci_register_cb(struct hci_cb *hcb);
1416 int hci_unregister_cb(struct hci_cb *hcb);
1417
1418 struct sk_buff *__hci_cmd_sync(struct hci_dev *hdev, u16 opcode, u32 plen,
1419                                const void *param, u32 timeout);
1420 struct sk_buff *__hci_cmd_sync_ev(struct hci_dev *hdev, u16 opcode, u32 plen,
1421                                   const void *param, u8 event, u32 timeout);
1422
1423 int hci_send_cmd(struct hci_dev *hdev, __u16 opcode, __u32 plen,
1424                  const void *param);
1425 void hci_send_acl(struct hci_chan *chan, struct sk_buff *skb, __u16 flags);
1426 void hci_send_sco(struct hci_conn *conn, struct sk_buff *skb);
1427
1428 void *hci_sent_cmd_data(struct hci_dev *hdev, __u16 opcode);
1429
1430 struct sk_buff *hci_cmd_sync(struct hci_dev *hdev, u16 opcode, u32 plen,
1431                              const void *param, u32 timeout);
1432
1433 /* ----- HCI Sockets ----- */
1434 void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb);
1435 void hci_send_to_channel(unsigned short channel, struct sk_buff *skb,
1436                          int flag, struct sock *skip_sk);
1437 void hci_send_to_monitor(struct hci_dev *hdev, struct sk_buff *skb);
1438 void hci_send_monitor_ctrl_event(struct hci_dev *hdev, u16 event,
1439                                  void *data, u16 data_len, ktime_t tstamp,
1440                                  int flag, struct sock *skip_sk);
1441
1442 void hci_sock_dev_event(struct hci_dev *hdev, int event);
1443
1444 #define HCI_MGMT_VAR_LEN        BIT(0)
1445 #define HCI_MGMT_NO_HDEV        BIT(1)
1446 #define HCI_MGMT_UNTRUSTED      BIT(2)
1447 #define HCI_MGMT_UNCONFIGURED   BIT(3)
1448
1449 struct hci_mgmt_handler {
1450         int (*func) (struct sock *sk, struct hci_dev *hdev, void *data,
1451                      u16 data_len);
1452         size_t data_len;
1453         unsigned long flags;
1454 };
1455
1456 struct hci_mgmt_chan {
1457         struct list_head list;
1458         unsigned short channel;
1459         size_t handler_count;
1460         const struct hci_mgmt_handler *handlers;
1461         void (*hdev_init) (struct sock *sk, struct hci_dev *hdev);
1462 };
1463
1464 int hci_mgmt_chan_register(struct hci_mgmt_chan *c);
1465 void hci_mgmt_chan_unregister(struct hci_mgmt_chan *c);
1466
1467 /* Management interface */
1468 #define DISCOV_TYPE_BREDR               (BIT(BDADDR_BREDR))
1469 #define DISCOV_TYPE_LE                  (BIT(BDADDR_LE_PUBLIC) | \
1470                                          BIT(BDADDR_LE_RANDOM))
1471 #define DISCOV_TYPE_INTERLEAVED         (BIT(BDADDR_BREDR) | \
1472                                          BIT(BDADDR_LE_PUBLIC) | \
1473                                          BIT(BDADDR_LE_RANDOM))
1474
1475 /* These LE scan and inquiry parameters were chosen according to LE General
1476  * Discovery Procedure specification.
1477  */
1478 #define DISCOV_LE_SCAN_WIN              0x12
1479 #define DISCOV_LE_SCAN_INT              0x12
1480 #define DISCOV_LE_TIMEOUT               10240   /* msec */
1481 #define DISCOV_INTERLEAVED_TIMEOUT      5120    /* msec */
1482 #define DISCOV_INTERLEAVED_INQUIRY_LEN  0x04
1483 #define DISCOV_BREDR_INQUIRY_LEN        0x08
1484 #define DISCOV_LE_RESTART_DELAY         msecs_to_jiffies(200)   /* msec */
1485
1486 void mgmt_fill_version_info(void *ver);
1487 int mgmt_new_settings(struct hci_dev *hdev);
1488 void mgmt_index_added(struct hci_dev *hdev);
1489 void mgmt_index_removed(struct hci_dev *hdev);
1490 void mgmt_set_powered_failed(struct hci_dev *hdev, int err);
1491 void mgmt_power_on(struct hci_dev *hdev, int err);
1492 void __mgmt_power_off(struct hci_dev *hdev);
1493 void mgmt_new_link_key(struct hci_dev *hdev, struct link_key *key,
1494                        bool persistent);
1495 void mgmt_device_connected(struct hci_dev *hdev, struct hci_conn *conn,
1496                            u32 flags, u8 *name, u8 name_len);
1497 void mgmt_device_disconnected(struct hci_dev *hdev, bdaddr_t *bdaddr,
1498                               u8 link_type, u8 addr_type, u8 reason,
1499                               bool mgmt_connected);
1500 void mgmt_disconnect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr,
1501                             u8 link_type, u8 addr_type, u8 status);
1502 void mgmt_connect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1503                          u8 addr_type, u8 status);
1504 void mgmt_pin_code_request(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 secure);
1505 void mgmt_pin_code_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1506                                   u8 status);
1507 void mgmt_pin_code_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1508                                       u8 status);
1509 int mgmt_user_confirm_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
1510                               u8 link_type, u8 addr_type, u32 value,
1511                               u8 confirm_hint);
1512 int mgmt_user_confirm_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1513                                      u8 link_type, u8 addr_type, u8 status);
1514 int mgmt_user_confirm_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1515                                          u8 link_type, u8 addr_type, u8 status);
1516 int mgmt_user_passkey_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
1517                               u8 link_type, u8 addr_type);
1518 int mgmt_user_passkey_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1519                                      u8 link_type, u8 addr_type, u8 status);
1520 int mgmt_user_passkey_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1521                                          u8 link_type, u8 addr_type, u8 status);
1522 int mgmt_user_passkey_notify(struct hci_dev *hdev, bdaddr_t *bdaddr,
1523                              u8 link_type, u8 addr_type, u32 passkey,
1524                              u8 entered);
1525 void mgmt_auth_failed(struct hci_conn *conn, u8 status);
1526 void mgmt_auth_enable_complete(struct hci_dev *hdev, u8 status);
1527 void mgmt_ssp_enable_complete(struct hci_dev *hdev, u8 enable, u8 status);
1528 void mgmt_set_class_of_dev_complete(struct hci_dev *hdev, u8 *dev_class,
1529                                     u8 status);
1530 void mgmt_set_local_name_complete(struct hci_dev *hdev, u8 *name, u8 status);
1531 void mgmt_start_discovery_complete(struct hci_dev *hdev, u8 status);
1532 void mgmt_stop_discovery_complete(struct hci_dev *hdev, u8 status);
1533 void mgmt_device_found(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1534                        u8 addr_type, u8 *dev_class, s8 rssi, u32 flags,
1535                        u8 *eir, u16 eir_len, u8 *scan_rsp, u8 scan_rsp_len);
1536 void mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1537                       u8 addr_type, s8 rssi, u8 *name, u8 name_len);
1538 void mgmt_discovering(struct hci_dev *hdev, u8 discovering);
1539 bool mgmt_powering_down(struct hci_dev *hdev);
1540 void mgmt_new_ltk(struct hci_dev *hdev, struct smp_ltk *key, bool persistent);
1541 void mgmt_new_irk(struct hci_dev *hdev, struct smp_irk *irk, bool persistent);
1542 void mgmt_new_csrk(struct hci_dev *hdev, struct smp_csrk *csrk,
1543                    bool persistent);
1544 void mgmt_new_conn_param(struct hci_dev *hdev, bdaddr_t *bdaddr,
1545                          u8 bdaddr_type, u8 store_hint, u16 min_interval,
1546                          u16 max_interval, u16 latency, u16 timeout);
1547 void mgmt_smp_complete(struct hci_conn *conn, bool complete);
1548 bool mgmt_get_connectable(struct hci_dev *hdev);
1549 void mgmt_set_connectable_complete(struct hci_dev *hdev, u8 status);
1550 void mgmt_set_discoverable_complete(struct hci_dev *hdev, u8 status);
1551 u8 mgmt_get_adv_discov_flags(struct hci_dev *hdev);
1552 void mgmt_advertising_added(struct sock *sk, struct hci_dev *hdev,
1553                             u8 instance);
1554 void mgmt_advertising_removed(struct sock *sk, struct hci_dev *hdev,
1555                               u8 instance);
1556
1557 u8 hci_le_conn_update(struct hci_conn *conn, u16 min, u16 max, u16 latency,
1558                       u16 to_multiplier);
1559 void hci_le_start_enc(struct hci_conn *conn, __le16 ediv, __le64 rand,
1560                       __u8 ltk[16], __u8 key_size);
1561
1562 void hci_copy_identity_address(struct hci_dev *hdev, bdaddr_t *bdaddr,
1563                                u8 *bdaddr_type);
1564
1565 #define SCO_AIRMODE_MASK       0x0003
1566 #define SCO_AIRMODE_CVSD       0x0000
1567 #define SCO_AIRMODE_TRANSP     0x0003
1568
1569 #endif /* __HCI_CORE_H */