Loading...
1/*
2 BlueZ - Bluetooth protocol stack for Linux
3 Copyright (c) 2000-2001, 2010, Code Aurora Forum. All rights reserved.
4
5 Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
6
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License version 2 as
9 published by the Free Software Foundation;
10
11 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
12 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
13 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
14 IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
15 CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
16 WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
17 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
18 OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
19
20 ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
21 COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
22 SOFTWARE IS DISCLAIMED.
23*/
24
25#ifndef __HCI_CORE_H
26#define __HCI_CORE_H
27
28#include <linux/interrupt.h>
29#include <net/bluetooth/hci.h>
30
31/* HCI upper protocols */
32#define HCI_PROTO_L2CAP 0
33#define HCI_PROTO_SCO 1
34
35/* HCI Core structures */
36struct inquiry_data {
37 bdaddr_t bdaddr;
38 __u8 pscan_rep_mode;
39 __u8 pscan_period_mode;
40 __u8 pscan_mode;
41 __u8 dev_class[3];
42 __le16 clock_offset;
43 __s8 rssi;
44 __u8 ssp_mode;
45};
46
47struct inquiry_entry {
48 struct inquiry_entry *next;
49 __u32 timestamp;
50 struct inquiry_data data;
51};
52
53struct inquiry_cache {
54 spinlock_t lock;
55 __u32 timestamp;
56 struct inquiry_entry *list;
57};
58
59struct hci_conn_hash {
60 struct list_head list;
61 spinlock_t lock;
62 unsigned int acl_num;
63 unsigned int sco_num;
64 unsigned int le_num;
65};
66
67struct bdaddr_list {
68 struct list_head list;
69 bdaddr_t bdaddr;
70};
71
72struct bt_uuid {
73 struct list_head list;
74 u8 uuid[16];
75 u8 svc_hint;
76};
77
78struct key_master_id {
79 __le16 ediv;
80 u8 rand[8];
81} __packed;
82
83struct link_key_data {
84 bdaddr_t bdaddr;
85 u8 type;
86 u8 val[16];
87 u8 pin_len;
88 u8 dlen;
89 u8 data[0];
90} __packed;
91
92struct link_key {
93 struct list_head list;
94 bdaddr_t bdaddr;
95 u8 type;
96 u8 val[16];
97 u8 pin_len;
98 u8 dlen;
99 u8 data[0];
100};
101
102struct oob_data {
103 struct list_head list;
104 bdaddr_t bdaddr;
105 u8 hash[16];
106 u8 randomizer[16];
107};
108
109struct adv_entry {
110 struct list_head list;
111 bdaddr_t bdaddr;
112 u8 bdaddr_type;
113};
114
115#define NUM_REASSEMBLY 4
116struct hci_dev {
117 struct list_head list;
118 spinlock_t lock;
119 atomic_t refcnt;
120
121 char name[8];
122 unsigned long flags;
123 __u16 id;
124 __u8 bus;
125 __u8 dev_type;
126 bdaddr_t bdaddr;
127 __u8 dev_name[HCI_MAX_NAME_LENGTH];
128 __u8 eir[HCI_MAX_EIR_LENGTH];
129 __u8 dev_class[3];
130 __u8 major_class;
131 __u8 minor_class;
132 __u8 features[8];
133 __u8 extfeatures[8];
134 __u8 commands[64];
135 __u8 ssp_mode;
136 __u8 hci_ver;
137 __u16 hci_rev;
138 __u8 lmp_ver;
139 __u16 manufacturer;
140 __le16 lmp_subver;
141 __u16 voice_setting;
142 __u8 io_capability;
143
144 __u16 pkt_type;
145 __u16 esco_type;
146 __u16 link_policy;
147 __u16 link_mode;
148
149 __u32 idle_timeout;
150 __u16 sniff_min_interval;
151 __u16 sniff_max_interval;
152
153 unsigned int auto_accept_delay;
154
155 unsigned long quirks;
156
157 atomic_t cmd_cnt;
158 unsigned int acl_cnt;
159 unsigned int sco_cnt;
160 unsigned int le_cnt;
161
162 unsigned int acl_mtu;
163 unsigned int sco_mtu;
164 unsigned int le_mtu;
165 unsigned int acl_pkts;
166 unsigned int sco_pkts;
167 unsigned int le_pkts;
168
169 unsigned long acl_last_tx;
170 unsigned long sco_last_tx;
171 unsigned long le_last_tx;
172
173 struct workqueue_struct *workqueue;
174
175 struct work_struct power_on;
176 struct work_struct power_off;
177 struct timer_list off_timer;
178
179 struct timer_list cmd_timer;
180 struct tasklet_struct cmd_task;
181 struct tasklet_struct rx_task;
182 struct tasklet_struct tx_task;
183
184 struct sk_buff_head rx_q;
185 struct sk_buff_head raw_q;
186 struct sk_buff_head cmd_q;
187
188 struct sk_buff *sent_cmd;
189 struct sk_buff *reassembly[NUM_REASSEMBLY];
190
191 struct mutex req_lock;
192 wait_queue_head_t req_wait_q;
193 __u32 req_status;
194 __u32 req_result;
195
196 __u16 init_last_cmd;
197
198 struct crypto_blkcipher *tfm;
199
200 struct inquiry_cache inq_cache;
201 struct hci_conn_hash conn_hash;
202 struct list_head blacklist;
203
204 struct list_head uuids;
205
206 struct list_head link_keys;
207
208 struct list_head remote_oob_data;
209
210 struct list_head adv_entries;
211 struct timer_list adv_timer;
212
213 struct hci_dev_stats stat;
214
215 struct sk_buff_head driver_init;
216
217 void *driver_data;
218 void *core_data;
219
220 atomic_t promisc;
221
222 struct dentry *debugfs;
223
224 struct device *parent;
225 struct device dev;
226
227 struct rfkill *rfkill;
228
229 struct module *owner;
230
231 int (*open)(struct hci_dev *hdev);
232 int (*close)(struct hci_dev *hdev);
233 int (*flush)(struct hci_dev *hdev);
234 int (*send)(struct sk_buff *skb);
235 void (*destruct)(struct hci_dev *hdev);
236 void (*notify)(struct hci_dev *hdev, unsigned int evt);
237 int (*ioctl)(struct hci_dev *hdev, unsigned int cmd, unsigned long arg);
238};
239
240struct hci_conn {
241 struct list_head list;
242
243 atomic_t refcnt;
244
245 bdaddr_t dst;
246 __u8 dst_type;
247 __u16 handle;
248 __u16 state;
249 __u8 mode;
250 __u8 type;
251 __u8 out;
252 __u8 attempt;
253 __u8 dev_class[3];
254 __u8 features[8];
255 __u8 ssp_mode;
256 __u16 interval;
257 __u16 pkt_type;
258 __u16 link_policy;
259 __u32 link_mode;
260 __u8 key_type;
261 __u8 auth_type;
262 __u8 sec_level;
263 __u8 pending_sec_level;
264 __u8 pin_length;
265 __u8 enc_key_size;
266 __u8 io_capability;
267 __u8 power_save;
268 __u16 disc_timeout;
269 unsigned long pend;
270
271 __u8 remote_cap;
272 __u8 remote_oob;
273 __u8 remote_auth;
274
275 unsigned int sent;
276
277 struct sk_buff_head data_q;
278
279 struct timer_list disc_timer;
280 struct timer_list idle_timer;
281 struct timer_list auto_accept_timer;
282
283 struct work_struct work_add;
284 struct work_struct work_del;
285
286 struct device dev;
287 atomic_t devref;
288
289 struct hci_dev *hdev;
290 void *l2cap_data;
291 void *sco_data;
292
293 struct hci_conn *link;
294
295 void (*connect_cfm_cb) (struct hci_conn *conn, u8 status);
296 void (*security_cfm_cb) (struct hci_conn *conn, u8 status);
297 void (*disconn_cfm_cb) (struct hci_conn *conn, u8 reason);
298};
299
300extern struct hci_proto *hci_proto[];
301extern struct list_head hci_dev_list;
302extern struct list_head hci_cb_list;
303extern rwlock_t hci_dev_list_lock;
304extern rwlock_t hci_cb_list_lock;
305
306/* ----- Inquiry cache ----- */
307#define INQUIRY_CACHE_AGE_MAX (HZ*30) /* 30 seconds */
308#define INQUIRY_ENTRY_AGE_MAX (HZ*60) /* 60 seconds */
309
310#define inquiry_cache_lock(c) spin_lock(&c->lock)
311#define inquiry_cache_unlock(c) spin_unlock(&c->lock)
312#define inquiry_cache_lock_bh(c) spin_lock_bh(&c->lock)
313#define inquiry_cache_unlock_bh(c) spin_unlock_bh(&c->lock)
314
315static inline void inquiry_cache_init(struct hci_dev *hdev)
316{
317 struct inquiry_cache *c = &hdev->inq_cache;
318 spin_lock_init(&c->lock);
319 c->list = NULL;
320}
321
322static inline int inquiry_cache_empty(struct hci_dev *hdev)
323{
324 struct inquiry_cache *c = &hdev->inq_cache;
325 return c->list == NULL;
326}
327
328static inline long inquiry_cache_age(struct hci_dev *hdev)
329{
330 struct inquiry_cache *c = &hdev->inq_cache;
331 return jiffies - c->timestamp;
332}
333
334static inline long inquiry_entry_age(struct inquiry_entry *e)
335{
336 return jiffies - e->timestamp;
337}
338
339struct inquiry_entry *hci_inquiry_cache_lookup(struct hci_dev *hdev,
340 bdaddr_t *bdaddr);
341void hci_inquiry_cache_update(struct hci_dev *hdev, struct inquiry_data *data);
342
343/* ----- HCI Connections ----- */
344enum {
345 HCI_CONN_AUTH_PEND,
346 HCI_CONN_REAUTH_PEND,
347 HCI_CONN_ENCRYPT_PEND,
348 HCI_CONN_RSWITCH_PEND,
349 HCI_CONN_MODE_CHANGE_PEND,
350 HCI_CONN_SCO_SETUP_PEND,
351};
352
353static inline void hci_conn_hash_init(struct hci_dev *hdev)
354{
355 struct hci_conn_hash *h = &hdev->conn_hash;
356 INIT_LIST_HEAD(&h->list);
357 spin_lock_init(&h->lock);
358 h->acl_num = 0;
359 h->sco_num = 0;
360}
361
362static inline void hci_conn_hash_add(struct hci_dev *hdev, struct hci_conn *c)
363{
364 struct hci_conn_hash *h = &hdev->conn_hash;
365 list_add(&c->list, &h->list);
366 switch (c->type) {
367 case ACL_LINK:
368 h->acl_num++;
369 break;
370 case LE_LINK:
371 h->le_num++;
372 break;
373 case SCO_LINK:
374 case ESCO_LINK:
375 h->sco_num++;
376 break;
377 }
378}
379
380static inline void hci_conn_hash_del(struct hci_dev *hdev, struct hci_conn *c)
381{
382 struct hci_conn_hash *h = &hdev->conn_hash;
383 list_del(&c->list);
384 switch (c->type) {
385 case ACL_LINK:
386 h->acl_num--;
387 break;
388 case LE_LINK:
389 h->le_num--;
390 break;
391 case SCO_LINK:
392 case ESCO_LINK:
393 h->sco_num--;
394 break;
395 }
396}
397
398static inline struct hci_conn *hci_conn_hash_lookup_handle(struct hci_dev *hdev,
399 __u16 handle)
400{
401 struct hci_conn_hash *h = &hdev->conn_hash;
402 struct list_head *p;
403 struct hci_conn *c;
404
405 list_for_each(p, &h->list) {
406 c = list_entry(p, struct hci_conn, list);
407 if (c->handle == handle)
408 return c;
409 }
410 return NULL;
411}
412
413static inline struct hci_conn *hci_conn_hash_lookup_ba(struct hci_dev *hdev,
414 __u8 type, bdaddr_t *ba)
415{
416 struct hci_conn_hash *h = &hdev->conn_hash;
417 struct list_head *p;
418 struct hci_conn *c;
419
420 list_for_each(p, &h->list) {
421 c = list_entry(p, struct hci_conn, list);
422 if (c->type == type && !bacmp(&c->dst, ba))
423 return c;
424 }
425 return NULL;
426}
427
428static inline struct hci_conn *hci_conn_hash_lookup_state(struct hci_dev *hdev,
429 __u8 type, __u16 state)
430{
431 struct hci_conn_hash *h = &hdev->conn_hash;
432 struct list_head *p;
433 struct hci_conn *c;
434
435 list_for_each(p, &h->list) {
436 c = list_entry(p, struct hci_conn, list);
437 if (c->type == type && c->state == state)
438 return c;
439 }
440 return NULL;
441}
442
443void hci_acl_connect(struct hci_conn *conn);
444void hci_acl_disconn(struct hci_conn *conn, __u8 reason);
445void hci_add_sco(struct hci_conn *conn, __u16 handle);
446void hci_setup_sync(struct hci_conn *conn, __u16 handle);
447void hci_sco_setup(struct hci_conn *conn, __u8 status);
448
449struct hci_conn *hci_conn_add(struct hci_dev *hdev, int type, bdaddr_t *dst);
450int hci_conn_del(struct hci_conn *conn);
451void hci_conn_hash_flush(struct hci_dev *hdev);
452void hci_conn_check_pending(struct hci_dev *hdev);
453
454struct hci_conn *hci_connect(struct hci_dev *hdev, int type, bdaddr_t *dst,
455 __u8 sec_level, __u8 auth_type);
456int hci_conn_check_link_mode(struct hci_conn *conn);
457int hci_conn_check_secure(struct hci_conn *conn, __u8 sec_level);
458int hci_conn_security(struct hci_conn *conn, __u8 sec_level, __u8 auth_type);
459int hci_conn_change_link_key(struct hci_conn *conn);
460int hci_conn_switch_role(struct hci_conn *conn, __u8 role);
461
462void hci_conn_enter_active_mode(struct hci_conn *conn, __u8 force_active);
463void hci_conn_enter_sniff_mode(struct hci_conn *conn);
464
465void hci_conn_hold_device(struct hci_conn *conn);
466void hci_conn_put_device(struct hci_conn *conn);
467
468static inline void hci_conn_hold(struct hci_conn *conn)
469{
470 atomic_inc(&conn->refcnt);
471 del_timer(&conn->disc_timer);
472}
473
474static inline void hci_conn_put(struct hci_conn *conn)
475{
476 if (atomic_dec_and_test(&conn->refcnt)) {
477 unsigned long timeo;
478 if (conn->type == ACL_LINK) {
479 del_timer(&conn->idle_timer);
480 if (conn->state == BT_CONNECTED) {
481 timeo = msecs_to_jiffies(conn->disc_timeout);
482 if (!conn->out)
483 timeo *= 2;
484 } else {
485 timeo = msecs_to_jiffies(10);
486 }
487 } else {
488 timeo = msecs_to_jiffies(10);
489 }
490 mod_timer(&conn->disc_timer, jiffies + timeo);
491 }
492}
493
494/* ----- HCI Devices ----- */
495static inline void __hci_dev_put(struct hci_dev *d)
496{
497 if (atomic_dec_and_test(&d->refcnt))
498 d->destruct(d);
499}
500
501static inline void hci_dev_put(struct hci_dev *d)
502{
503 __hci_dev_put(d);
504 module_put(d->owner);
505}
506
507static inline struct hci_dev *__hci_dev_hold(struct hci_dev *d)
508{
509 atomic_inc(&d->refcnt);
510 return d;
511}
512
513static inline struct hci_dev *hci_dev_hold(struct hci_dev *d)
514{
515 if (try_module_get(d->owner))
516 return __hci_dev_hold(d);
517 return NULL;
518}
519
520#define hci_dev_lock(d) spin_lock(&d->lock)
521#define hci_dev_unlock(d) spin_unlock(&d->lock)
522#define hci_dev_lock_bh(d) spin_lock_bh(&d->lock)
523#define hci_dev_unlock_bh(d) spin_unlock_bh(&d->lock)
524
525struct hci_dev *hci_dev_get(int index);
526struct hci_dev *hci_get_route(bdaddr_t *src, bdaddr_t *dst);
527
528struct hci_dev *hci_alloc_dev(void);
529void hci_free_dev(struct hci_dev *hdev);
530int hci_register_dev(struct hci_dev *hdev);
531int hci_unregister_dev(struct hci_dev *hdev);
532int hci_suspend_dev(struct hci_dev *hdev);
533int hci_resume_dev(struct hci_dev *hdev);
534int hci_dev_open(__u16 dev);
535int hci_dev_close(__u16 dev);
536int hci_dev_reset(__u16 dev);
537int hci_dev_reset_stat(__u16 dev);
538int hci_dev_cmd(unsigned int cmd, void __user *arg);
539int hci_get_dev_list(void __user *arg);
540int hci_get_dev_info(void __user *arg);
541int hci_get_conn_list(void __user *arg);
542int hci_get_conn_info(struct hci_dev *hdev, void __user *arg);
543int hci_get_auth_info(struct hci_dev *hdev, void __user *arg);
544int hci_inquiry(void __user *arg);
545
546struct bdaddr_list *hci_blacklist_lookup(struct hci_dev *hdev, bdaddr_t *bdaddr);
547int hci_blacklist_clear(struct hci_dev *hdev);
548int hci_blacklist_add(struct hci_dev *hdev, bdaddr_t *bdaddr);
549int hci_blacklist_del(struct hci_dev *hdev, bdaddr_t *bdaddr);
550
551int hci_uuids_clear(struct hci_dev *hdev);
552
553int hci_link_keys_clear(struct hci_dev *hdev);
554struct link_key *hci_find_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
555int hci_add_link_key(struct hci_dev *hdev, struct hci_conn *conn, int new_key,
556 bdaddr_t *bdaddr, u8 *val, u8 type, u8 pin_len);
557struct link_key *hci_find_ltk(struct hci_dev *hdev, __le16 ediv, u8 rand[8]);
558struct link_key *hci_find_link_key_type(struct hci_dev *hdev,
559 bdaddr_t *bdaddr, u8 type);
560int hci_add_ltk(struct hci_dev *hdev, int new_key, bdaddr_t *bdaddr,
561 u8 key_size, __le16 ediv, u8 rand[8], u8 ltk[16]);
562int hci_remove_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
563
564int hci_remote_oob_data_clear(struct hci_dev *hdev);
565struct oob_data *hci_find_remote_oob_data(struct hci_dev *hdev,
566 bdaddr_t *bdaddr);
567int hci_add_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 *hash,
568 u8 *randomizer);
569int hci_remove_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr);
570
571#define ADV_CLEAR_TIMEOUT (3*60*HZ) /* Three minutes */
572int hci_adv_entries_clear(struct hci_dev *hdev);
573struct adv_entry *hci_find_adv_entry(struct hci_dev *hdev, bdaddr_t *bdaddr);
574int hci_add_adv_entry(struct hci_dev *hdev,
575 struct hci_ev_le_advertising_info *ev);
576
577void hci_del_off_timer(struct hci_dev *hdev);
578
579void hci_event_packet(struct hci_dev *hdev, struct sk_buff *skb);
580
581int hci_recv_frame(struct sk_buff *skb);
582int hci_recv_fragment(struct hci_dev *hdev, int type, void *data, int count);
583int hci_recv_stream_fragment(struct hci_dev *hdev, void *data, int count);
584
585int hci_register_sysfs(struct hci_dev *hdev);
586void hci_unregister_sysfs(struct hci_dev *hdev);
587void hci_conn_init_sysfs(struct hci_conn *conn);
588void hci_conn_add_sysfs(struct hci_conn *conn);
589void hci_conn_del_sysfs(struct hci_conn *conn);
590
591#define SET_HCIDEV_DEV(hdev, pdev) ((hdev)->parent = (pdev))
592
593/* ----- LMP capabilities ----- */
594#define lmp_rswitch_capable(dev) ((dev)->features[0] & LMP_RSWITCH)
595#define lmp_encrypt_capable(dev) ((dev)->features[0] & LMP_ENCRYPT)
596#define lmp_sniff_capable(dev) ((dev)->features[0] & LMP_SNIFF)
597#define lmp_sniffsubr_capable(dev) ((dev)->features[5] & LMP_SNIFF_SUBR)
598#define lmp_esco_capable(dev) ((dev)->features[3] & LMP_ESCO)
599#define lmp_ssp_capable(dev) ((dev)->features[6] & LMP_SIMPLE_PAIR)
600#define lmp_no_flush_capable(dev) ((dev)->features[6] & LMP_NO_FLUSH)
601#define lmp_le_capable(dev) ((dev)->features[4] & LMP_LE)
602
603/* ----- Extended LMP capabilities ----- */
604#define lmp_host_le_capable(dev) ((dev)->extfeatures[0] & LMP_HOST_LE)
605
606/* ----- HCI protocols ----- */
607struct hci_proto {
608 char *name;
609 unsigned int id;
610 unsigned long flags;
611
612 void *priv;
613
614 int (*connect_ind) (struct hci_dev *hdev, bdaddr_t *bdaddr,
615 __u8 type);
616 int (*connect_cfm) (struct hci_conn *conn, __u8 status);
617 int (*disconn_ind) (struct hci_conn *conn);
618 int (*disconn_cfm) (struct hci_conn *conn, __u8 reason);
619 int (*recv_acldata) (struct hci_conn *conn, struct sk_buff *skb,
620 __u16 flags);
621 int (*recv_scodata) (struct hci_conn *conn, struct sk_buff *skb);
622 int (*security_cfm) (struct hci_conn *conn, __u8 status,
623 __u8 encrypt);
624};
625
626static inline int hci_proto_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
627 __u8 type)
628{
629 register struct hci_proto *hp;
630 int mask = 0;
631
632 hp = hci_proto[HCI_PROTO_L2CAP];
633 if (hp && hp->connect_ind)
634 mask |= hp->connect_ind(hdev, bdaddr, type);
635
636 hp = hci_proto[HCI_PROTO_SCO];
637 if (hp && hp->connect_ind)
638 mask |= hp->connect_ind(hdev, bdaddr, type);
639
640 return mask;
641}
642
643static inline void hci_proto_connect_cfm(struct hci_conn *conn, __u8 status)
644{
645 register struct hci_proto *hp;
646
647 hp = hci_proto[HCI_PROTO_L2CAP];
648 if (hp && hp->connect_cfm)
649 hp->connect_cfm(conn, status);
650
651 hp = hci_proto[HCI_PROTO_SCO];
652 if (hp && hp->connect_cfm)
653 hp->connect_cfm(conn, status);
654
655 if (conn->connect_cfm_cb)
656 conn->connect_cfm_cb(conn, status);
657}
658
659static inline int hci_proto_disconn_ind(struct hci_conn *conn)
660{
661 register struct hci_proto *hp;
662 int reason = 0x13;
663
664 hp = hci_proto[HCI_PROTO_L2CAP];
665 if (hp && hp->disconn_ind)
666 reason = hp->disconn_ind(conn);
667
668 hp = hci_proto[HCI_PROTO_SCO];
669 if (hp && hp->disconn_ind)
670 reason = hp->disconn_ind(conn);
671
672 return reason;
673}
674
675static inline void hci_proto_disconn_cfm(struct hci_conn *conn, __u8 reason)
676{
677 register struct hci_proto *hp;
678
679 hp = hci_proto[HCI_PROTO_L2CAP];
680 if (hp && hp->disconn_cfm)
681 hp->disconn_cfm(conn, reason);
682
683 hp = hci_proto[HCI_PROTO_SCO];
684 if (hp && hp->disconn_cfm)
685 hp->disconn_cfm(conn, reason);
686
687 if (conn->disconn_cfm_cb)
688 conn->disconn_cfm_cb(conn, reason);
689}
690
691static inline void hci_proto_auth_cfm(struct hci_conn *conn, __u8 status)
692{
693 register struct hci_proto *hp;
694 __u8 encrypt;
695
696 if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->pend))
697 return;
698
699 encrypt = (conn->link_mode & HCI_LM_ENCRYPT) ? 0x01 : 0x00;
700
701 hp = hci_proto[HCI_PROTO_L2CAP];
702 if (hp && hp->security_cfm)
703 hp->security_cfm(conn, status, encrypt);
704
705 hp = hci_proto[HCI_PROTO_SCO];
706 if (hp && hp->security_cfm)
707 hp->security_cfm(conn, status, encrypt);
708
709 if (conn->security_cfm_cb)
710 conn->security_cfm_cb(conn, status);
711}
712
713static inline void hci_proto_encrypt_cfm(struct hci_conn *conn, __u8 status,
714 __u8 encrypt)
715{
716 register struct hci_proto *hp;
717
718 hp = hci_proto[HCI_PROTO_L2CAP];
719 if (hp && hp->security_cfm)
720 hp->security_cfm(conn, status, encrypt);
721
722 hp = hci_proto[HCI_PROTO_SCO];
723 if (hp && hp->security_cfm)
724 hp->security_cfm(conn, status, encrypt);
725
726 if (conn->security_cfm_cb)
727 conn->security_cfm_cb(conn, status);
728}
729
730int hci_register_proto(struct hci_proto *hproto);
731int hci_unregister_proto(struct hci_proto *hproto);
732
733/* ----- HCI callbacks ----- */
734struct hci_cb {
735 struct list_head list;
736
737 char *name;
738
739 void (*security_cfm) (struct hci_conn *conn, __u8 status,
740 __u8 encrypt);
741 void (*key_change_cfm) (struct hci_conn *conn, __u8 status);
742 void (*role_switch_cfm) (struct hci_conn *conn, __u8 status, __u8 role);
743};
744
745static inline void hci_auth_cfm(struct hci_conn *conn, __u8 status)
746{
747 struct list_head *p;
748 __u8 encrypt;
749
750 hci_proto_auth_cfm(conn, status);
751
752 if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->pend))
753 return;
754
755 encrypt = (conn->link_mode & HCI_LM_ENCRYPT) ? 0x01 : 0x00;
756
757 read_lock_bh(&hci_cb_list_lock);
758 list_for_each(p, &hci_cb_list) {
759 struct hci_cb *cb = list_entry(p, struct hci_cb, list);
760 if (cb->security_cfm)
761 cb->security_cfm(conn, status, encrypt);
762 }
763 read_unlock_bh(&hci_cb_list_lock);
764}
765
766static inline void hci_encrypt_cfm(struct hci_conn *conn, __u8 status,
767 __u8 encrypt)
768{
769 struct list_head *p;
770
771 if (conn->sec_level == BT_SECURITY_SDP)
772 conn->sec_level = BT_SECURITY_LOW;
773
774 if (conn->pending_sec_level > conn->sec_level)
775 conn->sec_level = conn->pending_sec_level;
776
777 hci_proto_encrypt_cfm(conn, status, encrypt);
778
779 read_lock_bh(&hci_cb_list_lock);
780 list_for_each(p, &hci_cb_list) {
781 struct hci_cb *cb = list_entry(p, struct hci_cb, list);
782 if (cb->security_cfm)
783 cb->security_cfm(conn, status, encrypt);
784 }
785 read_unlock_bh(&hci_cb_list_lock);
786}
787
788static inline void hci_key_change_cfm(struct hci_conn *conn, __u8 status)
789{
790 struct list_head *p;
791
792 read_lock_bh(&hci_cb_list_lock);
793 list_for_each(p, &hci_cb_list) {
794 struct hci_cb *cb = list_entry(p, struct hci_cb, list);
795 if (cb->key_change_cfm)
796 cb->key_change_cfm(conn, status);
797 }
798 read_unlock_bh(&hci_cb_list_lock);
799}
800
801static inline void hci_role_switch_cfm(struct hci_conn *conn, __u8 status,
802 __u8 role)
803{
804 struct list_head *p;
805
806 read_lock_bh(&hci_cb_list_lock);
807 list_for_each(p, &hci_cb_list) {
808 struct hci_cb *cb = list_entry(p, struct hci_cb, list);
809 if (cb->role_switch_cfm)
810 cb->role_switch_cfm(conn, status, role);
811 }
812 read_unlock_bh(&hci_cb_list_lock);
813}
814
815int hci_register_cb(struct hci_cb *hcb);
816int hci_unregister_cb(struct hci_cb *hcb);
817
818int hci_register_notifier(struct notifier_block *nb);
819int hci_unregister_notifier(struct notifier_block *nb);
820
821int hci_send_cmd(struct hci_dev *hdev, __u16 opcode, __u32 plen, void *param);
822void hci_send_acl(struct hci_conn *conn, struct sk_buff *skb, __u16 flags);
823void hci_send_sco(struct hci_conn *conn, struct sk_buff *skb);
824
825void *hci_sent_cmd_data(struct hci_dev *hdev, __u16 opcode);
826
827void hci_si_event(struct hci_dev *hdev, int type, int dlen, void *data);
828
829/* ----- HCI Sockets ----- */
830void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb,
831 struct sock *skip_sk);
832
833/* Management interface */
834int mgmt_control(struct sock *sk, struct msghdr *msg, size_t len);
835int mgmt_index_added(u16 index);
836int mgmt_index_removed(u16 index);
837int mgmt_powered(u16 index, u8 powered);
838int mgmt_discoverable(u16 index, u8 discoverable);
839int mgmt_connectable(u16 index, u8 connectable);
840int mgmt_new_key(u16 index, struct link_key *key, u8 persistent);
841int mgmt_connected(u16 index, bdaddr_t *bdaddr);
842int mgmt_disconnected(u16 index, bdaddr_t *bdaddr);
843int mgmt_disconnect_failed(u16 index);
844int mgmt_connect_failed(u16 index, bdaddr_t *bdaddr, u8 status);
845int mgmt_pin_code_request(u16 index, bdaddr_t *bdaddr, u8 secure);
846int mgmt_pin_code_reply_complete(u16 index, bdaddr_t *bdaddr, u8 status);
847int mgmt_pin_code_neg_reply_complete(u16 index, bdaddr_t *bdaddr, u8 status);
848int mgmt_user_confirm_request(u16 index, bdaddr_t *bdaddr, __le32 value,
849 u8 confirm_hint);
850int mgmt_user_confirm_reply_complete(u16 index, bdaddr_t *bdaddr, u8 status);
851int mgmt_user_confirm_neg_reply_complete(u16 index, bdaddr_t *bdaddr,
852 u8 status);
853int mgmt_auth_failed(u16 index, bdaddr_t *bdaddr, u8 status);
854int mgmt_set_local_name_complete(u16 index, u8 *name, u8 status);
855int mgmt_read_local_oob_data_reply_complete(u16 index, u8 *hash, u8 *randomizer,
856 u8 status);
857int mgmt_device_found(u16 index, bdaddr_t *bdaddr, u8 *dev_class, s8 rssi,
858 u8 *eir);
859int mgmt_remote_name(u16 index, bdaddr_t *bdaddr, u8 *name);
860int mgmt_discovering(u16 index, u8 discovering);
861
862/* HCI info for socket */
863#define hci_pi(sk) ((struct hci_pinfo *) sk)
864
865struct hci_pinfo {
866 struct bt_sock bt;
867 struct hci_dev *hdev;
868 struct hci_filter filter;
869 __u32 cmsg_mask;
870 unsigned short channel;
871};
872
873/* HCI security filter */
874#define HCI_SFLT_MAX_OGF 5
875
876struct hci_sec_filter {
877 __u32 type_mask;
878 __u32 event_mask[2];
879 __u32 ocf_mask[HCI_SFLT_MAX_OGF + 1][4];
880};
881
882/* ----- HCI requests ----- */
883#define HCI_REQ_DONE 0
884#define HCI_REQ_PEND 1
885#define HCI_REQ_CANCELED 2
886
887#define hci_req_lock(d) mutex_lock(&d->req_lock)
888#define hci_req_unlock(d) mutex_unlock(&d->req_lock)
889
890void hci_req_complete(struct hci_dev *hdev, __u16 cmd, int result);
891
892void hci_le_conn_update(struct hci_conn *conn, u16 min, u16 max,
893 u16 latency, u16 to_multiplier);
894void hci_le_start_enc(struct hci_conn *conn, __le16 ediv, __u8 rand[8],
895 __u8 ltk[16]);
896void hci_le_ltk_reply(struct hci_conn *conn, u8 ltk[16]);
897void hci_le_ltk_neg_reply(struct hci_conn *conn);
898
899#endif /* __HCI_CORE_H */
1/*
2 BlueZ - Bluetooth protocol stack for Linux
3 Copyright (c) 2000-2001, 2010, Code Aurora Forum. All rights reserved.
4 Copyright 2023-2024 NXP
5
6 Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
7
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License version 2 as
10 published by the Free Software Foundation;
11
12 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
13 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
14 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
15 IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
16 CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
17 WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
18 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
19 OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
20
21 ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
22 COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
23 SOFTWARE IS DISCLAIMED.
24*/
25
26#ifndef __HCI_CORE_H
27#define __HCI_CORE_H
28
29#include <linux/idr.h>
30#include <linux/leds.h>
31#include <linux/rculist.h>
32
33#include <net/bluetooth/hci.h>
34#include <net/bluetooth/hci_sync.h>
35#include <net/bluetooth/hci_sock.h>
36#include <net/bluetooth/coredump.h>
37
38/* HCI priority */
39#define HCI_PRIO_MAX 7
40
41/* HCI maximum id value */
42#define HCI_MAX_ID 10000
43
44/* HCI Core structures */
45struct inquiry_data {
46 bdaddr_t bdaddr;
47 __u8 pscan_rep_mode;
48 __u8 pscan_period_mode;
49 __u8 pscan_mode;
50 __u8 dev_class[3];
51 __le16 clock_offset;
52 __s8 rssi;
53 __u8 ssp_mode;
54};
55
56struct inquiry_entry {
57 struct list_head all; /* inq_cache.all */
58 struct list_head list; /* unknown or resolve */
59 enum {
60 NAME_NOT_KNOWN,
61 NAME_NEEDED,
62 NAME_PENDING,
63 NAME_KNOWN,
64 } name_state;
65 __u32 timestamp;
66 struct inquiry_data data;
67};
68
69struct discovery_state {
70 int type;
71 enum {
72 DISCOVERY_STOPPED,
73 DISCOVERY_STARTING,
74 DISCOVERY_FINDING,
75 DISCOVERY_RESOLVING,
76 DISCOVERY_STOPPING,
77 } state;
78 struct list_head all; /* All devices found during inquiry */
79 struct list_head unknown; /* Name state not known */
80 struct list_head resolve; /* Name needs to be resolved */
81 __u32 timestamp;
82 bdaddr_t last_adv_addr;
83 u8 last_adv_addr_type;
84 s8 last_adv_rssi;
85 u32 last_adv_flags;
86 u8 last_adv_data[HCI_MAX_EXT_AD_LENGTH];
87 u8 last_adv_data_len;
88 bool report_invalid_rssi;
89 bool result_filtering;
90 bool limited;
91 s8 rssi;
92 u16 uuid_count;
93 u8 (*uuids)[16];
94 unsigned long name_resolve_timeout;
95};
96
97#define SUSPEND_NOTIFIER_TIMEOUT msecs_to_jiffies(2000) /* 2 seconds */
98
99enum suspend_tasks {
100 SUSPEND_PAUSE_DISCOVERY,
101 SUSPEND_UNPAUSE_DISCOVERY,
102
103 SUSPEND_PAUSE_ADVERTISING,
104 SUSPEND_UNPAUSE_ADVERTISING,
105
106 SUSPEND_SCAN_DISABLE,
107 SUSPEND_SCAN_ENABLE,
108 SUSPEND_DISCONNECTING,
109
110 SUSPEND_POWERING_DOWN,
111
112 SUSPEND_PREPARE_NOTIFIER,
113
114 SUSPEND_SET_ADV_FILTER,
115 __SUSPEND_NUM_TASKS
116};
117
118enum suspended_state {
119 BT_RUNNING = 0,
120 BT_SUSPEND_DISCONNECT,
121 BT_SUSPEND_CONFIGURE_WAKE,
122};
123
124struct hci_conn_hash {
125 struct list_head list;
126 unsigned int acl_num;
127 unsigned int sco_num;
128 unsigned int iso_num;
129 unsigned int le_num;
130 unsigned int le_num_peripheral;
131};
132
133struct bdaddr_list {
134 struct list_head list;
135 bdaddr_t bdaddr;
136 u8 bdaddr_type;
137};
138
139struct codec_list {
140 struct list_head list;
141 u8 id;
142 __u16 cid;
143 __u16 vid;
144 u8 transport;
145 u8 num_caps;
146 u32 len;
147 struct hci_codec_caps caps[];
148};
149
150struct bdaddr_list_with_irk {
151 struct list_head list;
152 bdaddr_t bdaddr;
153 u8 bdaddr_type;
154 u8 peer_irk[16];
155 u8 local_irk[16];
156};
157
158/* Bitmask of connection flags */
159enum hci_conn_flags {
160 HCI_CONN_FLAG_REMOTE_WAKEUP = 1,
161 HCI_CONN_FLAG_DEVICE_PRIVACY = 2,
162};
163typedef u8 hci_conn_flags_t;
164
165struct bdaddr_list_with_flags {
166 struct list_head list;
167 bdaddr_t bdaddr;
168 u8 bdaddr_type;
169 hci_conn_flags_t flags;
170};
171
172struct bt_uuid {
173 struct list_head list;
174 u8 uuid[16];
175 u8 size;
176 u8 svc_hint;
177};
178
179struct blocked_key {
180 struct list_head list;
181 struct rcu_head rcu;
182 u8 type;
183 u8 val[16];
184};
185
186struct smp_csrk {
187 bdaddr_t bdaddr;
188 u8 bdaddr_type;
189 u8 type;
190 u8 val[16];
191};
192
193struct smp_ltk {
194 struct list_head list;
195 struct rcu_head rcu;
196 bdaddr_t bdaddr;
197 u8 bdaddr_type;
198 u8 authenticated;
199 u8 type;
200 u8 enc_size;
201 __le16 ediv;
202 __le64 rand;
203 u8 val[16];
204};
205
206struct smp_irk {
207 struct list_head list;
208 struct rcu_head rcu;
209 bdaddr_t rpa;
210 bdaddr_t bdaddr;
211 u8 addr_type;
212 u8 val[16];
213};
214
215struct link_key {
216 struct list_head list;
217 struct rcu_head rcu;
218 bdaddr_t bdaddr;
219 u8 type;
220 u8 val[HCI_LINK_KEY_SIZE];
221 u8 pin_len;
222};
223
224struct oob_data {
225 struct list_head list;
226 bdaddr_t bdaddr;
227 u8 bdaddr_type;
228 u8 present;
229 u8 hash192[16];
230 u8 rand192[16];
231 u8 hash256[16];
232 u8 rand256[16];
233};
234
235struct adv_info {
236 struct list_head list;
237 bool enabled;
238 bool pending;
239 bool periodic;
240 __u8 mesh;
241 __u8 instance;
242 __u8 handle;
243 __u32 flags;
244 __u16 timeout;
245 __u16 remaining_time;
246 __u16 duration;
247 __u16 adv_data_len;
248 __u8 adv_data[HCI_MAX_EXT_AD_LENGTH];
249 bool adv_data_changed;
250 __u16 scan_rsp_len;
251 __u8 scan_rsp_data[HCI_MAX_EXT_AD_LENGTH];
252 bool scan_rsp_changed;
253 __u16 per_adv_data_len;
254 __u8 per_adv_data[HCI_MAX_PER_AD_LENGTH];
255 __s8 tx_power;
256 __u32 min_interval;
257 __u32 max_interval;
258 bdaddr_t random_addr;
259 bool rpa_expired;
260 struct delayed_work rpa_expired_cb;
261};
262
263#define HCI_MAX_ADV_INSTANCES 5
264#define HCI_DEFAULT_ADV_DURATION 2
265
266#define HCI_ADV_TX_POWER_NO_PREFERENCE 0x7F
267
268#define DATA_CMP(_d1, _l1, _d2, _l2) \
269 (_l1 == _l2 ? memcmp(_d1, _d2, _l1) : _l1 - _l2)
270
271#define ADV_DATA_CMP(_adv, _data, _len) \
272 DATA_CMP((_adv)->adv_data, (_adv)->adv_data_len, _data, _len)
273
274#define SCAN_RSP_CMP(_adv, _data, _len) \
275 DATA_CMP((_adv)->scan_rsp_data, (_adv)->scan_rsp_len, _data, _len)
276
277struct monitored_device {
278 struct list_head list;
279
280 bdaddr_t bdaddr;
281 __u8 addr_type;
282 __u16 handle;
283 bool notified;
284};
285
286struct adv_pattern {
287 struct list_head list;
288 __u8 ad_type;
289 __u8 offset;
290 __u8 length;
291 __u8 value[HCI_MAX_EXT_AD_LENGTH];
292};
293
294struct adv_rssi_thresholds {
295 __s8 low_threshold;
296 __s8 high_threshold;
297 __u16 low_threshold_timeout;
298 __u16 high_threshold_timeout;
299 __u8 sampling_period;
300};
301
302struct adv_monitor {
303 struct list_head patterns;
304 struct adv_rssi_thresholds rssi;
305 __u16 handle;
306
307 enum {
308 ADV_MONITOR_STATE_NOT_REGISTERED,
309 ADV_MONITOR_STATE_REGISTERED,
310 ADV_MONITOR_STATE_OFFLOADED
311 } state;
312};
313
314#define HCI_MIN_ADV_MONITOR_HANDLE 1
315#define HCI_MAX_ADV_MONITOR_NUM_HANDLES 32
316#define HCI_MAX_ADV_MONITOR_NUM_PATTERNS 16
317#define HCI_ADV_MONITOR_EXT_NONE 1
318#define HCI_ADV_MONITOR_EXT_MSFT 2
319
320#define HCI_MAX_SHORT_NAME_LENGTH 10
321
322#define HCI_CONN_HANDLE_MAX 0x0eff
323#define HCI_CONN_HANDLE_UNSET(_handle) (_handle > HCI_CONN_HANDLE_MAX)
324
325/* Min encryption key size to match with SMP */
326#define HCI_MIN_ENC_KEY_SIZE 7
327
328/* Default LE RPA expiry time, 15 minutes */
329#define HCI_DEFAULT_RPA_TIMEOUT (15 * 60)
330
331/* Default min/max age of connection information (1s/3s) */
332#define DEFAULT_CONN_INFO_MIN_AGE 1000
333#define DEFAULT_CONN_INFO_MAX_AGE 3000
334/* Default authenticated payload timeout 30s */
335#define DEFAULT_AUTH_PAYLOAD_TIMEOUT 0x0bb8
336
337#define HCI_MAX_PAGES 3
338
339struct hci_dev {
340 struct list_head list;
341 struct mutex lock;
342
343 struct ida unset_handle_ida;
344
345 const char *name;
346 unsigned long flags;
347 __u16 id;
348 __u8 bus;
349 bdaddr_t bdaddr;
350 bdaddr_t setup_addr;
351 bdaddr_t public_addr;
352 bdaddr_t random_addr;
353 bdaddr_t static_addr;
354 __u8 adv_addr_type;
355 __u8 dev_name[HCI_MAX_NAME_LENGTH];
356 __u8 short_name[HCI_MAX_SHORT_NAME_LENGTH];
357 __u8 eir[HCI_MAX_EIR_LENGTH];
358 __u16 appearance;
359 __u8 dev_class[3];
360 __u8 major_class;
361 __u8 minor_class;
362 __u8 max_page;
363 __u8 features[HCI_MAX_PAGES][8];
364 __u8 le_features[8];
365 __u8 le_accept_list_size;
366 __u8 le_resolv_list_size;
367 __u8 le_num_of_adv_sets;
368 __u8 le_states[8];
369 __u8 mesh_ad_types[16];
370 __u8 mesh_send_ref;
371 __u8 commands[64];
372 __u8 hci_ver;
373 __u16 hci_rev;
374 __u8 lmp_ver;
375 __u16 manufacturer;
376 __u16 lmp_subver;
377 __u16 voice_setting;
378 __u8 num_iac;
379 __u16 stored_max_keys;
380 __u16 stored_num_keys;
381 __u8 io_capability;
382 __s8 inq_tx_power;
383 __u8 err_data_reporting;
384 __u16 page_scan_interval;
385 __u16 page_scan_window;
386 __u8 page_scan_type;
387 __u8 le_adv_channel_map;
388 __u16 le_adv_min_interval;
389 __u16 le_adv_max_interval;
390 __u8 le_scan_type;
391 __u16 le_scan_interval;
392 __u16 le_scan_window;
393 __u16 le_scan_int_suspend;
394 __u16 le_scan_window_suspend;
395 __u16 le_scan_int_discovery;
396 __u16 le_scan_window_discovery;
397 __u16 le_scan_int_adv_monitor;
398 __u16 le_scan_window_adv_monitor;
399 __u16 le_scan_int_connect;
400 __u16 le_scan_window_connect;
401 __u16 le_conn_min_interval;
402 __u16 le_conn_max_interval;
403 __u16 le_conn_latency;
404 __u16 le_supv_timeout;
405 __u16 le_def_tx_len;
406 __u16 le_def_tx_time;
407 __u16 le_max_tx_len;
408 __u16 le_max_tx_time;
409 __u16 le_max_rx_len;
410 __u16 le_max_rx_time;
411 __u8 le_max_key_size;
412 __u8 le_min_key_size;
413 __u16 discov_interleaved_timeout;
414 __u16 conn_info_min_age;
415 __u16 conn_info_max_age;
416 __u16 auth_payload_timeout;
417 __u8 min_enc_key_size;
418 __u8 max_enc_key_size;
419 __u8 pairing_opts;
420 __u8 ssp_debug_mode;
421 __u8 hw_error_code;
422 __u32 clock;
423 __u16 advmon_allowlist_duration;
424 __u16 advmon_no_filter_duration;
425 __u8 enable_advmon_interleave_scan;
426
427 __u16 devid_source;
428 __u16 devid_vendor;
429 __u16 devid_product;
430 __u16 devid_version;
431
432 __u8 def_page_scan_type;
433 __u16 def_page_scan_int;
434 __u16 def_page_scan_window;
435 __u8 def_inq_scan_type;
436 __u16 def_inq_scan_int;
437 __u16 def_inq_scan_window;
438 __u16 def_br_lsto;
439 __u16 def_page_timeout;
440 __u16 def_multi_adv_rotation_duration;
441 __u16 def_le_autoconnect_timeout;
442 __s8 min_le_tx_power;
443 __s8 max_le_tx_power;
444
445 __u16 pkt_type;
446 __u16 esco_type;
447 __u16 link_policy;
448 __u16 link_mode;
449
450 __u32 idle_timeout;
451 __u16 sniff_min_interval;
452 __u16 sniff_max_interval;
453
454 unsigned int auto_accept_delay;
455
456 unsigned long quirks;
457
458 atomic_t cmd_cnt;
459 unsigned int acl_cnt;
460 unsigned int sco_cnt;
461 unsigned int le_cnt;
462 unsigned int iso_cnt;
463
464 unsigned int acl_mtu;
465 unsigned int sco_mtu;
466 unsigned int le_mtu;
467 unsigned int iso_mtu;
468 unsigned int acl_pkts;
469 unsigned int sco_pkts;
470 unsigned int le_pkts;
471 unsigned int iso_pkts;
472
473 unsigned long acl_last_tx;
474 unsigned long le_last_tx;
475
476 __u8 le_tx_def_phys;
477 __u8 le_rx_def_phys;
478
479 struct workqueue_struct *workqueue;
480 struct workqueue_struct *req_workqueue;
481
482 struct work_struct power_on;
483 struct delayed_work power_off;
484 struct work_struct error_reset;
485 struct work_struct cmd_sync_work;
486 struct list_head cmd_sync_work_list;
487 struct mutex cmd_sync_work_lock;
488 struct mutex unregister_lock;
489 struct work_struct cmd_sync_cancel_work;
490 struct work_struct reenable_adv_work;
491
492 __u16 discov_timeout;
493 struct delayed_work discov_off;
494
495 struct delayed_work service_cache;
496
497 struct delayed_work cmd_timer;
498 struct delayed_work ncmd_timer;
499
500 struct work_struct rx_work;
501 struct work_struct cmd_work;
502 struct work_struct tx_work;
503
504 struct delayed_work le_scan_disable;
505
506 struct sk_buff_head rx_q;
507 struct sk_buff_head raw_q;
508 struct sk_buff_head cmd_q;
509
510 struct sk_buff *sent_cmd;
511 struct sk_buff *recv_event;
512
513 struct mutex req_lock;
514 wait_queue_head_t req_wait_q;
515 __u32 req_status;
516 __u32 req_result;
517 struct sk_buff *req_skb;
518 struct sk_buff *req_rsp;
519
520 void *smp_data;
521 void *smp_bredr_data;
522
523 struct discovery_state discovery;
524
525 bool discovery_paused;
526 int advertising_old_state;
527 bool advertising_paused;
528
529 struct notifier_block suspend_notifier;
530 enum suspended_state suspend_state_next;
531 enum suspended_state suspend_state;
532 bool scanning_paused;
533 bool suspended;
534 u8 wake_reason;
535 bdaddr_t wake_addr;
536 u8 wake_addr_type;
537
538 struct hci_conn_hash conn_hash;
539
540 struct list_head mesh_pending;
541 struct list_head mgmt_pending;
542 struct list_head reject_list;
543 struct list_head accept_list;
544 struct list_head uuids;
545 struct list_head link_keys;
546 struct list_head long_term_keys;
547 struct list_head identity_resolving_keys;
548 struct list_head remote_oob_data;
549 struct list_head le_accept_list;
550 struct list_head le_resolv_list;
551 struct list_head le_conn_params;
552 struct list_head pend_le_conns;
553 struct list_head pend_le_reports;
554 struct list_head blocked_keys;
555 struct list_head local_codecs;
556
557 struct hci_dev_stats stat;
558
559 atomic_t promisc;
560
561 const char *hw_info;
562 const char *fw_info;
563 struct dentry *debugfs;
564
565 struct hci_devcoredump dump;
566
567 struct device dev;
568
569 struct rfkill *rfkill;
570
571 DECLARE_BITMAP(dev_flags, __HCI_NUM_FLAGS);
572 hci_conn_flags_t conn_flags;
573
574 __s8 adv_tx_power;
575 __u8 adv_data[HCI_MAX_EXT_AD_LENGTH];
576 __u8 adv_data_len;
577 __u8 scan_rsp_data[HCI_MAX_EXT_AD_LENGTH];
578 __u8 scan_rsp_data_len;
579 __u8 per_adv_data[HCI_MAX_PER_AD_LENGTH];
580 __u8 per_adv_data_len;
581
582 struct list_head adv_instances;
583 unsigned int adv_instance_cnt;
584 __u8 cur_adv_instance;
585 __u16 adv_instance_timeout;
586 struct delayed_work adv_instance_expire;
587
588 struct idr adv_monitors_idr;
589 unsigned int adv_monitors_cnt;
590
591 __u8 irk[16];
592 __u32 rpa_timeout;
593 struct delayed_work rpa_expired;
594 bdaddr_t rpa;
595
596 struct delayed_work mesh_send_done;
597
598 enum {
599 INTERLEAVE_SCAN_NONE,
600 INTERLEAVE_SCAN_NO_FILTER,
601 INTERLEAVE_SCAN_ALLOWLIST
602 } interleave_scan_state;
603
604 struct delayed_work interleave_scan;
605
606 struct list_head monitored_devices;
607 bool advmon_pend_notify;
608
609#if IS_ENABLED(CONFIG_BT_LEDS)
610 struct led_trigger *power_led;
611#endif
612
613#if IS_ENABLED(CONFIG_BT_MSFTEXT)
614 __u16 msft_opcode;
615 void *msft_data;
616 bool msft_curve_validity;
617#endif
618
619#if IS_ENABLED(CONFIG_BT_AOSPEXT)
620 bool aosp_capable;
621 bool aosp_quality_report;
622#endif
623
624 int (*open)(struct hci_dev *hdev);
625 int (*close)(struct hci_dev *hdev);
626 int (*flush)(struct hci_dev *hdev);
627 int (*setup)(struct hci_dev *hdev);
628 int (*shutdown)(struct hci_dev *hdev);
629 int (*send)(struct hci_dev *hdev, struct sk_buff *skb);
630 void (*notify)(struct hci_dev *hdev, unsigned int evt);
631 void (*hw_error)(struct hci_dev *hdev, u8 code);
632 int (*post_init)(struct hci_dev *hdev);
633 int (*set_diag)(struct hci_dev *hdev, bool enable);
634 int (*set_bdaddr)(struct hci_dev *hdev, const bdaddr_t *bdaddr);
635 void (*cmd_timeout)(struct hci_dev *hdev);
636 void (*reset)(struct hci_dev *hdev);
637 bool (*wakeup)(struct hci_dev *hdev);
638 int (*set_quality_report)(struct hci_dev *hdev, bool enable);
639 int (*get_data_path_id)(struct hci_dev *hdev, __u8 *data_path);
640 int (*get_codec_config_data)(struct hci_dev *hdev, __u8 type,
641 struct bt_codec *codec, __u8 *vnd_len,
642 __u8 **vnd_data);
643 u8 (*classify_pkt_type)(struct hci_dev *hdev, struct sk_buff *skb);
644};
645
646#define HCI_PHY_HANDLE(handle) (handle & 0xff)
647
648enum conn_reasons {
649 CONN_REASON_PAIR_DEVICE,
650 CONN_REASON_L2CAP_CHAN,
651 CONN_REASON_SCO_CONNECT,
652 CONN_REASON_ISO_CONNECT,
653};
654
655struct hci_conn {
656 struct list_head list;
657
658 atomic_t refcnt;
659
660 bdaddr_t dst;
661 __u8 dst_type;
662 bdaddr_t src;
663 __u8 src_type;
664 bdaddr_t init_addr;
665 __u8 init_addr_type;
666 bdaddr_t resp_addr;
667 __u8 resp_addr_type;
668 __u8 adv_instance;
669 __u16 handle;
670 __u16 sync_handle;
671 __u8 sid;
672 __u16 state;
673 __u16 mtu;
674 __u8 mode;
675 __u8 type;
676 __u8 role;
677 bool out;
678 __u8 attempt;
679 __u8 dev_class[3];
680 __u8 features[HCI_MAX_PAGES][8];
681 __u16 pkt_type;
682 __u16 link_policy;
683 __u8 key_type;
684 __u8 auth_type;
685 __u8 sec_level;
686 __u8 pending_sec_level;
687 __u8 pin_length;
688 __u8 enc_key_size;
689 __u8 io_capability;
690 __u32 passkey_notify;
691 __u8 passkey_entered;
692 __u16 disc_timeout;
693 __u16 conn_timeout;
694 __u16 setting;
695 __u16 auth_payload_timeout;
696 __u16 le_conn_min_interval;
697 __u16 le_conn_max_interval;
698 __u16 le_conn_interval;
699 __u16 le_conn_latency;
700 __u16 le_supv_timeout;
701 __u8 le_adv_data[HCI_MAX_EXT_AD_LENGTH];
702 __u8 le_adv_data_len;
703 __u8 le_per_adv_data[HCI_MAX_PER_AD_TOT_LEN];
704 __u16 le_per_adv_data_len;
705 __u16 le_per_adv_data_offset;
706 __u8 le_adv_phy;
707 __u8 le_adv_sec_phy;
708 __u8 le_tx_phy;
709 __u8 le_rx_phy;
710 __s8 rssi;
711 __s8 tx_power;
712 __s8 max_tx_power;
713 struct bt_iso_qos iso_qos;
714 __u8 num_bis;
715 __u8 bis[HCI_MAX_ISO_BIS];
716
717 unsigned long flags;
718
719 enum conn_reasons conn_reason;
720 __u8 abort_reason;
721
722 __u32 clock;
723 __u16 clock_accuracy;
724
725 unsigned long conn_info_timestamp;
726
727 __u8 remote_cap;
728 __u8 remote_auth;
729 __u8 remote_id;
730
731 unsigned int sent;
732
733 struct sk_buff_head data_q;
734 struct list_head chan_list;
735
736 struct delayed_work disc_work;
737 struct delayed_work auto_accept_work;
738 struct delayed_work idle_work;
739 struct delayed_work le_conn_timeout;
740
741 struct device dev;
742 struct dentry *debugfs;
743
744 struct hci_dev *hdev;
745 void *l2cap_data;
746 void *sco_data;
747 void *iso_data;
748
749 struct list_head link_list;
750 struct hci_conn *parent;
751 struct hci_link *link;
752
753 struct bt_codec codec;
754
755 void (*connect_cfm_cb) (struct hci_conn *conn, u8 status);
756 void (*security_cfm_cb) (struct hci_conn *conn, u8 status);
757 void (*disconn_cfm_cb) (struct hci_conn *conn, u8 reason);
758
759 void (*cleanup)(struct hci_conn *conn);
760};
761
762struct hci_link {
763 struct list_head list;
764 struct hci_conn *conn;
765};
766
767struct hci_chan {
768 struct list_head list;
769 __u16 handle;
770 struct hci_conn *conn;
771 struct sk_buff_head data_q;
772 unsigned int sent;
773 __u8 state;
774};
775
776struct hci_conn_params {
777 struct list_head list;
778 struct list_head action;
779
780 bdaddr_t addr;
781 u8 addr_type;
782
783 u16 conn_min_interval;
784 u16 conn_max_interval;
785 u16 conn_latency;
786 u16 supervision_timeout;
787
788 enum {
789 HCI_AUTO_CONN_DISABLED,
790 HCI_AUTO_CONN_REPORT,
791 HCI_AUTO_CONN_DIRECT,
792 HCI_AUTO_CONN_ALWAYS,
793 HCI_AUTO_CONN_LINK_LOSS,
794 HCI_AUTO_CONN_EXPLICIT,
795 } auto_connect;
796
797 struct hci_conn *conn;
798 bool explicit_connect;
799 /* Accessed without hdev->lock: */
800 hci_conn_flags_t flags;
801 u8 privacy_mode;
802};
803
804extern struct list_head hci_dev_list;
805extern struct list_head hci_cb_list;
806extern rwlock_t hci_dev_list_lock;
807
808#define hci_dev_set_flag(hdev, nr) set_bit((nr), (hdev)->dev_flags)
809#define hci_dev_clear_flag(hdev, nr) clear_bit((nr), (hdev)->dev_flags)
810#define hci_dev_change_flag(hdev, nr) change_bit((nr), (hdev)->dev_flags)
811#define hci_dev_test_flag(hdev, nr) test_bit((nr), (hdev)->dev_flags)
812#define hci_dev_test_and_set_flag(hdev, nr) test_and_set_bit((nr), (hdev)->dev_flags)
813#define hci_dev_test_and_clear_flag(hdev, nr) test_and_clear_bit((nr), (hdev)->dev_flags)
814#define hci_dev_test_and_change_flag(hdev, nr) test_and_change_bit((nr), (hdev)->dev_flags)
815
816#define hci_dev_clear_volatile_flags(hdev) \
817 do { \
818 hci_dev_clear_flag(hdev, HCI_LE_SCAN); \
819 hci_dev_clear_flag(hdev, HCI_LE_ADV); \
820 hci_dev_clear_flag(hdev, HCI_LL_RPA_RESOLUTION);\
821 hci_dev_clear_flag(hdev, HCI_PERIODIC_INQ); \
822 hci_dev_clear_flag(hdev, HCI_QUALITY_REPORT); \
823 } while (0)
824
825#define hci_dev_le_state_simultaneous(hdev) \
826 (!test_bit(HCI_QUIRK_BROKEN_LE_STATES, &hdev->quirks) && \
827 (hdev->le_states[4] & 0x08) && /* Central */ \
828 (hdev->le_states[4] & 0x40) && /* Peripheral */ \
829 (hdev->le_states[3] & 0x10)) /* Simultaneous */
830
831/* ----- HCI interface to upper protocols ----- */
832int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr);
833int l2cap_disconn_ind(struct hci_conn *hcon);
834void l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
835
836#if IS_ENABLED(CONFIG_BT_BREDR)
837int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
838void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb);
839#else
840static inline int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
841 __u8 *flags)
842{
843 return 0;
844}
845
846static inline void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb)
847{
848}
849#endif
850
851#if IS_ENABLED(CONFIG_BT_LE)
852int iso_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
853void iso_recv(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
854#else
855static inline int iso_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
856 __u8 *flags)
857{
858 return 0;
859}
860static inline void iso_recv(struct hci_conn *hcon, struct sk_buff *skb,
861 u16 flags)
862{
863}
864#endif
865
866/* ----- Inquiry cache ----- */
867#define INQUIRY_CACHE_AGE_MAX (HZ*30) /* 30 seconds */
868#define INQUIRY_ENTRY_AGE_MAX (HZ*60) /* 60 seconds */
869
870static inline void discovery_init(struct hci_dev *hdev)
871{
872 hdev->discovery.state = DISCOVERY_STOPPED;
873 INIT_LIST_HEAD(&hdev->discovery.all);
874 INIT_LIST_HEAD(&hdev->discovery.unknown);
875 INIT_LIST_HEAD(&hdev->discovery.resolve);
876 hdev->discovery.report_invalid_rssi = true;
877 hdev->discovery.rssi = HCI_RSSI_INVALID;
878}
879
880static inline void hci_discovery_filter_clear(struct hci_dev *hdev)
881{
882 hdev->discovery.result_filtering = false;
883 hdev->discovery.report_invalid_rssi = true;
884 hdev->discovery.rssi = HCI_RSSI_INVALID;
885 hdev->discovery.uuid_count = 0;
886 kfree(hdev->discovery.uuids);
887 hdev->discovery.uuids = NULL;
888}
889
890bool hci_discovery_active(struct hci_dev *hdev);
891
892void hci_discovery_set_state(struct hci_dev *hdev, int state);
893
894static inline int inquiry_cache_empty(struct hci_dev *hdev)
895{
896 return list_empty(&hdev->discovery.all);
897}
898
899static inline long inquiry_cache_age(struct hci_dev *hdev)
900{
901 struct discovery_state *c = &hdev->discovery;
902 return jiffies - c->timestamp;
903}
904
905static inline long inquiry_entry_age(struct inquiry_entry *e)
906{
907 return jiffies - e->timestamp;
908}
909
910struct inquiry_entry *hci_inquiry_cache_lookup(struct hci_dev *hdev,
911 bdaddr_t *bdaddr);
912struct inquiry_entry *hci_inquiry_cache_lookup_unknown(struct hci_dev *hdev,
913 bdaddr_t *bdaddr);
914struct inquiry_entry *hci_inquiry_cache_lookup_resolve(struct hci_dev *hdev,
915 bdaddr_t *bdaddr,
916 int state);
917void hci_inquiry_cache_update_resolve(struct hci_dev *hdev,
918 struct inquiry_entry *ie);
919u32 hci_inquiry_cache_update(struct hci_dev *hdev, struct inquiry_data *data,
920 bool name_known);
921void hci_inquiry_cache_flush(struct hci_dev *hdev);
922
923/* ----- HCI Connections ----- */
924enum {
925 HCI_CONN_AUTH_PEND,
926 HCI_CONN_ENCRYPT_PEND,
927 HCI_CONN_RSWITCH_PEND,
928 HCI_CONN_MODE_CHANGE_PEND,
929 HCI_CONN_SCO_SETUP_PEND,
930 HCI_CONN_MGMT_CONNECTED,
931 HCI_CONN_SSP_ENABLED,
932 HCI_CONN_SC_ENABLED,
933 HCI_CONN_AES_CCM,
934 HCI_CONN_POWER_SAVE,
935 HCI_CONN_FLUSH_KEY,
936 HCI_CONN_ENCRYPT,
937 HCI_CONN_AUTH,
938 HCI_CONN_SECURE,
939 HCI_CONN_FIPS,
940 HCI_CONN_STK_ENCRYPT,
941 HCI_CONN_AUTH_INITIATOR,
942 HCI_CONN_DROP,
943 HCI_CONN_CANCEL,
944 HCI_CONN_PARAM_REMOVAL_PEND,
945 HCI_CONN_NEW_LINK_KEY,
946 HCI_CONN_SCANNING,
947 HCI_CONN_AUTH_FAILURE,
948 HCI_CONN_PER_ADV,
949 HCI_CONN_BIG_CREATED,
950 HCI_CONN_CREATE_CIS,
951 HCI_CONN_CREATE_BIG_SYNC,
952 HCI_CONN_BIG_SYNC,
953 HCI_CONN_BIG_SYNC_FAILED,
954 HCI_CONN_CREATE_PA_SYNC,
955 HCI_CONN_PA_SYNC,
956 HCI_CONN_PA_SYNC_FAILED,
957};
958
959static inline bool hci_conn_ssp_enabled(struct hci_conn *conn)
960{
961 struct hci_dev *hdev = conn->hdev;
962 return hci_dev_test_flag(hdev, HCI_SSP_ENABLED) &&
963 test_bit(HCI_CONN_SSP_ENABLED, &conn->flags);
964}
965
966static inline bool hci_conn_sc_enabled(struct hci_conn *conn)
967{
968 struct hci_dev *hdev = conn->hdev;
969 return hci_dev_test_flag(hdev, HCI_SC_ENABLED) &&
970 test_bit(HCI_CONN_SC_ENABLED, &conn->flags);
971}
972
973static inline void hci_conn_hash_add(struct hci_dev *hdev, struct hci_conn *c)
974{
975 struct hci_conn_hash *h = &hdev->conn_hash;
976 list_add_tail_rcu(&c->list, &h->list);
977 switch (c->type) {
978 case ACL_LINK:
979 h->acl_num++;
980 break;
981 case LE_LINK:
982 h->le_num++;
983 if (c->role == HCI_ROLE_SLAVE)
984 h->le_num_peripheral++;
985 break;
986 case SCO_LINK:
987 case ESCO_LINK:
988 h->sco_num++;
989 break;
990 case ISO_LINK:
991 h->iso_num++;
992 break;
993 }
994}
995
996static inline void hci_conn_hash_del(struct hci_dev *hdev, struct hci_conn *c)
997{
998 struct hci_conn_hash *h = &hdev->conn_hash;
999
1000 list_del_rcu(&c->list);
1001 synchronize_rcu();
1002
1003 switch (c->type) {
1004 case ACL_LINK:
1005 h->acl_num--;
1006 break;
1007 case LE_LINK:
1008 h->le_num--;
1009 if (c->role == HCI_ROLE_SLAVE)
1010 h->le_num_peripheral--;
1011 break;
1012 case SCO_LINK:
1013 case ESCO_LINK:
1014 h->sco_num--;
1015 break;
1016 case ISO_LINK:
1017 h->iso_num--;
1018 break;
1019 }
1020}
1021
1022static inline unsigned int hci_conn_num(struct hci_dev *hdev, __u8 type)
1023{
1024 struct hci_conn_hash *h = &hdev->conn_hash;
1025 switch (type) {
1026 case ACL_LINK:
1027 return h->acl_num;
1028 case LE_LINK:
1029 return h->le_num;
1030 case SCO_LINK:
1031 case ESCO_LINK:
1032 return h->sco_num;
1033 case ISO_LINK:
1034 return h->iso_num;
1035 default:
1036 return 0;
1037 }
1038}
1039
1040static inline unsigned int hci_conn_count(struct hci_dev *hdev)
1041{
1042 struct hci_conn_hash *c = &hdev->conn_hash;
1043
1044 return c->acl_num + c->sco_num + c->le_num + c->iso_num;
1045}
1046
1047static inline bool hci_conn_valid(struct hci_dev *hdev, struct hci_conn *conn)
1048{
1049 struct hci_conn_hash *h = &hdev->conn_hash;
1050 struct hci_conn *c;
1051
1052 rcu_read_lock();
1053
1054 list_for_each_entry_rcu(c, &h->list, list) {
1055 if (c == conn) {
1056 rcu_read_unlock();
1057 return true;
1058 }
1059 }
1060 rcu_read_unlock();
1061
1062 return false;
1063}
1064
1065static inline __u8 hci_conn_lookup_type(struct hci_dev *hdev, __u16 handle)
1066{
1067 struct hci_conn_hash *h = &hdev->conn_hash;
1068 struct hci_conn *c;
1069 __u8 type = INVALID_LINK;
1070
1071 rcu_read_lock();
1072
1073 list_for_each_entry_rcu(c, &h->list, list) {
1074 if (c->handle == handle) {
1075 type = c->type;
1076 break;
1077 }
1078 }
1079
1080 rcu_read_unlock();
1081
1082 return type;
1083}
1084
1085static inline struct hci_conn *hci_conn_hash_lookup_bis(struct hci_dev *hdev,
1086 bdaddr_t *ba, __u8 bis)
1087{
1088 struct hci_conn_hash *h = &hdev->conn_hash;
1089 struct hci_conn *c;
1090
1091 rcu_read_lock();
1092
1093 list_for_each_entry_rcu(c, &h->list, list) {
1094 if (bacmp(&c->dst, ba) || c->type != ISO_LINK)
1095 continue;
1096
1097 if (c->iso_qos.bcast.bis == bis) {
1098 rcu_read_unlock();
1099 return c;
1100 }
1101 }
1102 rcu_read_unlock();
1103
1104 return NULL;
1105}
1106
1107static inline struct hci_conn *hci_conn_hash_lookup_sid(struct hci_dev *hdev,
1108 __u8 sid,
1109 bdaddr_t *dst,
1110 __u8 dst_type)
1111{
1112 struct hci_conn_hash *h = &hdev->conn_hash;
1113 struct hci_conn *c;
1114
1115 rcu_read_lock();
1116
1117 list_for_each_entry_rcu(c, &h->list, list) {
1118 if (c->type != ISO_LINK || bacmp(&c->dst, dst) ||
1119 c->dst_type != dst_type || c->sid != sid)
1120 continue;
1121
1122 rcu_read_unlock();
1123 return c;
1124 }
1125
1126 rcu_read_unlock();
1127
1128 return NULL;
1129}
1130
1131static inline struct hci_conn *
1132hci_conn_hash_lookup_per_adv_bis(struct hci_dev *hdev,
1133 bdaddr_t *ba,
1134 __u8 big, __u8 bis)
1135{
1136 struct hci_conn_hash *h = &hdev->conn_hash;
1137 struct hci_conn *c;
1138
1139 rcu_read_lock();
1140
1141 list_for_each_entry_rcu(c, &h->list, list) {
1142 if (bacmp(&c->dst, ba) || c->type != ISO_LINK ||
1143 !test_bit(HCI_CONN_PER_ADV, &c->flags))
1144 continue;
1145
1146 if (c->iso_qos.bcast.big == big &&
1147 c->iso_qos.bcast.bis == bis) {
1148 rcu_read_unlock();
1149 return c;
1150 }
1151 }
1152 rcu_read_unlock();
1153
1154 return NULL;
1155}
1156
1157static inline struct hci_conn *hci_conn_hash_lookup_handle(struct hci_dev *hdev,
1158 __u16 handle)
1159{
1160 struct hci_conn_hash *h = &hdev->conn_hash;
1161 struct hci_conn *c;
1162
1163 rcu_read_lock();
1164
1165 list_for_each_entry_rcu(c, &h->list, list) {
1166 if (c->handle == handle) {
1167 rcu_read_unlock();
1168 return c;
1169 }
1170 }
1171 rcu_read_unlock();
1172
1173 return NULL;
1174}
1175
1176static inline struct hci_conn *hci_conn_hash_lookup_ba(struct hci_dev *hdev,
1177 __u8 type, bdaddr_t *ba)
1178{
1179 struct hci_conn_hash *h = &hdev->conn_hash;
1180 struct hci_conn *c;
1181
1182 rcu_read_lock();
1183
1184 list_for_each_entry_rcu(c, &h->list, list) {
1185 if (c->type == type && !bacmp(&c->dst, ba)) {
1186 rcu_read_unlock();
1187 return c;
1188 }
1189 }
1190
1191 rcu_read_unlock();
1192
1193 return NULL;
1194}
1195
1196static inline struct hci_conn *hci_conn_hash_lookup_le(struct hci_dev *hdev,
1197 bdaddr_t *ba,
1198 __u8 ba_type)
1199{
1200 struct hci_conn_hash *h = &hdev->conn_hash;
1201 struct hci_conn *c;
1202
1203 rcu_read_lock();
1204
1205 list_for_each_entry_rcu(c, &h->list, list) {
1206 if (c->type != LE_LINK)
1207 continue;
1208
1209 if (ba_type == c->dst_type && !bacmp(&c->dst, ba)) {
1210 rcu_read_unlock();
1211 return c;
1212 }
1213 }
1214
1215 rcu_read_unlock();
1216
1217 return NULL;
1218}
1219
1220static inline struct hci_conn *hci_conn_hash_lookup_cis(struct hci_dev *hdev,
1221 bdaddr_t *ba,
1222 __u8 ba_type,
1223 __u8 cig,
1224 __u8 id)
1225{
1226 struct hci_conn_hash *h = &hdev->conn_hash;
1227 struct hci_conn *c;
1228
1229 rcu_read_lock();
1230
1231 list_for_each_entry_rcu(c, &h->list, list) {
1232 if (c->type != ISO_LINK || !bacmp(&c->dst, BDADDR_ANY))
1233 continue;
1234
1235 /* Match CIG ID if set */
1236 if (cig != c->iso_qos.ucast.cig)
1237 continue;
1238
1239 /* Match CIS ID if set */
1240 if (id != c->iso_qos.ucast.cis)
1241 continue;
1242
1243 /* Match destination address if set */
1244 if (!ba || (ba_type == c->dst_type && !bacmp(&c->dst, ba))) {
1245 rcu_read_unlock();
1246 return c;
1247 }
1248 }
1249
1250 rcu_read_unlock();
1251
1252 return NULL;
1253}
1254
1255static inline struct hci_conn *hci_conn_hash_lookup_cig(struct hci_dev *hdev,
1256 __u8 handle)
1257{
1258 struct hci_conn_hash *h = &hdev->conn_hash;
1259 struct hci_conn *c;
1260
1261 rcu_read_lock();
1262
1263 list_for_each_entry_rcu(c, &h->list, list) {
1264 if (c->type != ISO_LINK || !bacmp(&c->dst, BDADDR_ANY))
1265 continue;
1266
1267 if (handle == c->iso_qos.ucast.cig) {
1268 rcu_read_unlock();
1269 return c;
1270 }
1271 }
1272
1273 rcu_read_unlock();
1274
1275 return NULL;
1276}
1277
1278static inline struct hci_conn *hci_conn_hash_lookup_big(struct hci_dev *hdev,
1279 __u8 handle)
1280{
1281 struct hci_conn_hash *h = &hdev->conn_hash;
1282 struct hci_conn *c;
1283
1284 rcu_read_lock();
1285
1286 list_for_each_entry_rcu(c, &h->list, list) {
1287 if (c->type != ISO_LINK)
1288 continue;
1289
1290 /* An ISO_LINK hcon with BDADDR_ANY as destination
1291 * address is a Broadcast connection. A Broadcast
1292 * slave connection is associated with a PA train,
1293 * so the sync_handle can be used to differentiate
1294 * from unicast.
1295 */
1296 if (bacmp(&c->dst, BDADDR_ANY) &&
1297 c->sync_handle == HCI_SYNC_HANDLE_INVALID)
1298 continue;
1299
1300 if (handle == c->iso_qos.bcast.big) {
1301 rcu_read_unlock();
1302 return c;
1303 }
1304 }
1305
1306 rcu_read_unlock();
1307
1308 return NULL;
1309}
1310
1311static inline struct hci_conn *
1312hci_conn_hash_lookup_big_sync_pend(struct hci_dev *hdev,
1313 __u8 handle, __u8 num_bis)
1314{
1315 struct hci_conn_hash *h = &hdev->conn_hash;
1316 struct hci_conn *c;
1317
1318 rcu_read_lock();
1319
1320 list_for_each_entry_rcu(c, &h->list, list) {
1321 if (c->type != ISO_LINK)
1322 continue;
1323
1324 if (handle == c->iso_qos.bcast.big && num_bis == c->num_bis) {
1325 rcu_read_unlock();
1326 return c;
1327 }
1328 }
1329
1330 rcu_read_unlock();
1331
1332 return NULL;
1333}
1334
1335static inline struct hci_conn *
1336hci_conn_hash_lookup_big_state(struct hci_dev *hdev, __u8 handle, __u16 state)
1337{
1338 struct hci_conn_hash *h = &hdev->conn_hash;
1339 struct hci_conn *c;
1340
1341 rcu_read_lock();
1342
1343 list_for_each_entry_rcu(c, &h->list, list) {
1344 if (bacmp(&c->dst, BDADDR_ANY) || c->type != ISO_LINK ||
1345 c->state != state)
1346 continue;
1347
1348 if (handle == c->iso_qos.bcast.big) {
1349 rcu_read_unlock();
1350 return c;
1351 }
1352 }
1353
1354 rcu_read_unlock();
1355
1356 return NULL;
1357}
1358
1359static inline struct hci_conn *
1360hci_conn_hash_lookup_pa_sync_big_handle(struct hci_dev *hdev, __u8 big)
1361{
1362 struct hci_conn_hash *h = &hdev->conn_hash;
1363 struct hci_conn *c;
1364
1365 rcu_read_lock();
1366
1367 list_for_each_entry_rcu(c, &h->list, list) {
1368 if (c->type != ISO_LINK ||
1369 !test_bit(HCI_CONN_PA_SYNC, &c->flags))
1370 continue;
1371
1372 if (c->iso_qos.bcast.big == big) {
1373 rcu_read_unlock();
1374 return c;
1375 }
1376 }
1377 rcu_read_unlock();
1378
1379 return NULL;
1380}
1381
1382static inline struct hci_conn *
1383hci_conn_hash_lookup_pa_sync_handle(struct hci_dev *hdev, __u16 sync_handle)
1384{
1385 struct hci_conn_hash *h = &hdev->conn_hash;
1386 struct hci_conn *c;
1387
1388 rcu_read_lock();
1389
1390 list_for_each_entry_rcu(c, &h->list, list) {
1391 if (c->type != ISO_LINK)
1392 continue;
1393
1394 /* Ignore the listen hcon, we are looking
1395 * for the child hcon that was created as
1396 * a result of the PA sync established event.
1397 */
1398 if (c->state == BT_LISTEN)
1399 continue;
1400
1401 if (c->sync_handle == sync_handle) {
1402 rcu_read_unlock();
1403 return c;
1404 }
1405 }
1406 rcu_read_unlock();
1407
1408 return NULL;
1409}
1410
1411static inline struct hci_conn *hci_conn_hash_lookup_state(struct hci_dev *hdev,
1412 __u8 type, __u16 state)
1413{
1414 struct hci_conn_hash *h = &hdev->conn_hash;
1415 struct hci_conn *c;
1416
1417 rcu_read_lock();
1418
1419 list_for_each_entry_rcu(c, &h->list, list) {
1420 if (c->type == type && c->state == state) {
1421 rcu_read_unlock();
1422 return c;
1423 }
1424 }
1425
1426 rcu_read_unlock();
1427
1428 return NULL;
1429}
1430
1431typedef void (*hci_conn_func_t)(struct hci_conn *conn, void *data);
1432static inline void hci_conn_hash_list_state(struct hci_dev *hdev,
1433 hci_conn_func_t func, __u8 type,
1434 __u16 state, void *data)
1435{
1436 struct hci_conn_hash *h = &hdev->conn_hash;
1437 struct hci_conn *c;
1438
1439 if (!func)
1440 return;
1441
1442 rcu_read_lock();
1443
1444 list_for_each_entry_rcu(c, &h->list, list) {
1445 if (c->type == type && c->state == state)
1446 func(c, data);
1447 }
1448
1449 rcu_read_unlock();
1450}
1451
1452static inline void hci_conn_hash_list_flag(struct hci_dev *hdev,
1453 hci_conn_func_t func, __u8 type,
1454 __u8 flag, void *data)
1455{
1456 struct hci_conn_hash *h = &hdev->conn_hash;
1457 struct hci_conn *c;
1458
1459 if (!func)
1460 return;
1461
1462 rcu_read_lock();
1463
1464 list_for_each_entry_rcu(c, &h->list, list) {
1465 if (c->type == type && test_bit(flag, &c->flags))
1466 func(c, data);
1467 }
1468
1469 rcu_read_unlock();
1470}
1471
1472static inline struct hci_conn *hci_lookup_le_connect(struct hci_dev *hdev)
1473{
1474 struct hci_conn_hash *h = &hdev->conn_hash;
1475 struct hci_conn *c;
1476
1477 rcu_read_lock();
1478
1479 list_for_each_entry_rcu(c, &h->list, list) {
1480 if (c->type == LE_LINK && c->state == BT_CONNECT &&
1481 !test_bit(HCI_CONN_SCANNING, &c->flags)) {
1482 rcu_read_unlock();
1483 return c;
1484 }
1485 }
1486
1487 rcu_read_unlock();
1488
1489 return NULL;
1490}
1491
1492/* Returns true if an le connection is in the scanning state */
1493static inline bool hci_is_le_conn_scanning(struct hci_dev *hdev)
1494{
1495 struct hci_conn_hash *h = &hdev->conn_hash;
1496 struct hci_conn *c;
1497
1498 rcu_read_lock();
1499
1500 list_for_each_entry_rcu(c, &h->list, list) {
1501 if (c->type == LE_LINK && c->state == BT_CONNECT &&
1502 test_bit(HCI_CONN_SCANNING, &c->flags)) {
1503 rcu_read_unlock();
1504 return true;
1505 }
1506 }
1507
1508 rcu_read_unlock();
1509
1510 return false;
1511}
1512
1513int hci_disconnect(struct hci_conn *conn, __u8 reason);
1514bool hci_setup_sync(struct hci_conn *conn, __u16 handle);
1515void hci_sco_setup(struct hci_conn *conn, __u8 status);
1516bool hci_iso_setup_path(struct hci_conn *conn);
1517int hci_le_create_cis_pending(struct hci_dev *hdev);
1518int hci_pa_create_sync_pending(struct hci_dev *hdev);
1519int hci_le_big_create_sync_pending(struct hci_dev *hdev);
1520int hci_conn_check_create_cis(struct hci_conn *conn);
1521
1522struct hci_conn *hci_conn_add(struct hci_dev *hdev, int type, bdaddr_t *dst,
1523 u8 role, u16 handle);
1524struct hci_conn *hci_conn_add_unset(struct hci_dev *hdev, int type,
1525 bdaddr_t *dst, u8 role);
1526void hci_conn_del(struct hci_conn *conn);
1527void hci_conn_hash_flush(struct hci_dev *hdev);
1528
1529struct hci_chan *hci_chan_create(struct hci_conn *conn);
1530void hci_chan_del(struct hci_chan *chan);
1531void hci_chan_list_flush(struct hci_conn *conn);
1532struct hci_chan *hci_chan_lookup_handle(struct hci_dev *hdev, __u16 handle);
1533
1534struct hci_conn *hci_connect_le_scan(struct hci_dev *hdev, bdaddr_t *dst,
1535 u8 dst_type, u8 sec_level,
1536 u16 conn_timeout,
1537 enum conn_reasons conn_reason);
1538struct hci_conn *hci_connect_le(struct hci_dev *hdev, bdaddr_t *dst,
1539 u8 dst_type, bool dst_resolved, u8 sec_level,
1540 u16 conn_timeout, u8 role, u8 phy, u8 sec_phy);
1541void hci_connect_le_scan_cleanup(struct hci_conn *conn, u8 status);
1542struct hci_conn *hci_connect_acl(struct hci_dev *hdev, bdaddr_t *dst,
1543 u8 sec_level, u8 auth_type,
1544 enum conn_reasons conn_reason, u16 timeout);
1545struct hci_conn *hci_connect_sco(struct hci_dev *hdev, int type, bdaddr_t *dst,
1546 __u16 setting, struct bt_codec *codec,
1547 u16 timeout);
1548struct hci_conn *hci_bind_cis(struct hci_dev *hdev, bdaddr_t *dst,
1549 __u8 dst_type, struct bt_iso_qos *qos);
1550struct hci_conn *hci_bind_bis(struct hci_dev *hdev, bdaddr_t *dst,
1551 struct bt_iso_qos *qos,
1552 __u8 base_len, __u8 *base);
1553struct hci_conn *hci_connect_cis(struct hci_dev *hdev, bdaddr_t *dst,
1554 __u8 dst_type, struct bt_iso_qos *qos);
1555struct hci_conn *hci_connect_bis(struct hci_dev *hdev, bdaddr_t *dst,
1556 __u8 dst_type, struct bt_iso_qos *qos,
1557 __u8 data_len, __u8 *data);
1558struct hci_conn *hci_pa_create_sync(struct hci_dev *hdev, bdaddr_t *dst,
1559 __u8 dst_type, __u8 sid, struct bt_iso_qos *qos);
1560int hci_le_big_create_sync(struct hci_dev *hdev, struct hci_conn *hcon,
1561 struct bt_iso_qos *qos,
1562 __u16 sync_handle, __u8 num_bis, __u8 bis[]);
1563int hci_conn_check_link_mode(struct hci_conn *conn);
1564int hci_conn_check_secure(struct hci_conn *conn, __u8 sec_level);
1565int hci_conn_security(struct hci_conn *conn, __u8 sec_level, __u8 auth_type,
1566 bool initiator);
1567int hci_conn_switch_role(struct hci_conn *conn, __u8 role);
1568
1569void hci_conn_enter_active_mode(struct hci_conn *conn, __u8 force_active);
1570
1571void hci_conn_failed(struct hci_conn *conn, u8 status);
1572u8 hci_conn_set_handle(struct hci_conn *conn, u16 handle);
1573
1574/*
1575 * hci_conn_get() and hci_conn_put() are used to control the life-time of an
1576 * "hci_conn" object. They do not guarantee that the hci_conn object is running,
1577 * working or anything else. They just guarantee that the object is available
1578 * and can be dereferenced. So you can use its locks, local variables and any
1579 * other constant data.
1580 * Before accessing runtime data, you _must_ lock the object and then check that
1581 * it is still running. As soon as you release the locks, the connection might
1582 * get dropped, though.
1583 *
1584 * On the other hand, hci_conn_hold() and hci_conn_drop() are used to control
1585 * how long the underlying connection is held. So every channel that runs on the
1586 * hci_conn object calls this to prevent the connection from disappearing. As
1587 * long as you hold a device, you must also guarantee that you have a valid
1588 * reference to the device via hci_conn_get() (or the initial reference from
1589 * hci_conn_add()).
1590 * The hold()/drop() ref-count is known to drop below 0 sometimes, which doesn't
1591 * break because nobody cares for that. But this means, we cannot use
1592 * _get()/_drop() in it, but require the caller to have a valid ref (FIXME).
1593 */
1594
1595static inline struct hci_conn *hci_conn_get(struct hci_conn *conn)
1596{
1597 get_device(&conn->dev);
1598 return conn;
1599}
1600
1601static inline void hci_conn_put(struct hci_conn *conn)
1602{
1603 put_device(&conn->dev);
1604}
1605
1606static inline struct hci_conn *hci_conn_hold(struct hci_conn *conn)
1607{
1608 BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1609
1610 atomic_inc(&conn->refcnt);
1611 cancel_delayed_work(&conn->disc_work);
1612
1613 return conn;
1614}
1615
1616static inline void hci_conn_drop(struct hci_conn *conn)
1617{
1618 BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1619
1620 if (atomic_dec_and_test(&conn->refcnt)) {
1621 unsigned long timeo;
1622
1623 switch (conn->type) {
1624 case ACL_LINK:
1625 case LE_LINK:
1626 cancel_delayed_work(&conn->idle_work);
1627 if (conn->state == BT_CONNECTED) {
1628 timeo = conn->disc_timeout;
1629 if (!conn->out)
1630 timeo *= 2;
1631 } else {
1632 timeo = 0;
1633 }
1634 break;
1635
1636 default:
1637 timeo = 0;
1638 break;
1639 }
1640
1641 cancel_delayed_work(&conn->disc_work);
1642 queue_delayed_work(conn->hdev->workqueue,
1643 &conn->disc_work, timeo);
1644 }
1645}
1646
1647/* ----- HCI Devices ----- */
1648static inline void hci_dev_put(struct hci_dev *d)
1649{
1650 BT_DBG("%s orig refcnt %d", d->name,
1651 kref_read(&d->dev.kobj.kref));
1652
1653 put_device(&d->dev);
1654}
1655
1656static inline struct hci_dev *hci_dev_hold(struct hci_dev *d)
1657{
1658 BT_DBG("%s orig refcnt %d", d->name,
1659 kref_read(&d->dev.kobj.kref));
1660
1661 get_device(&d->dev);
1662 return d;
1663}
1664
1665#define hci_dev_lock(d) mutex_lock(&d->lock)
1666#define hci_dev_unlock(d) mutex_unlock(&d->lock)
1667
1668#define to_hci_dev(d) container_of(d, struct hci_dev, dev)
1669#define to_hci_conn(c) container_of(c, struct hci_conn, dev)
1670
1671static inline void *hci_get_drvdata(struct hci_dev *hdev)
1672{
1673 return dev_get_drvdata(&hdev->dev);
1674}
1675
1676static inline void hci_set_drvdata(struct hci_dev *hdev, void *data)
1677{
1678 dev_set_drvdata(&hdev->dev, data);
1679}
1680
1681static inline void *hci_get_priv(struct hci_dev *hdev)
1682{
1683 return (char *)hdev + sizeof(*hdev);
1684}
1685
1686struct hci_dev *hci_dev_get(int index);
1687struct hci_dev *hci_get_route(bdaddr_t *dst, bdaddr_t *src, u8 src_type);
1688
1689struct hci_dev *hci_alloc_dev_priv(int sizeof_priv);
1690
1691static inline struct hci_dev *hci_alloc_dev(void)
1692{
1693 return hci_alloc_dev_priv(0);
1694}
1695
1696void hci_free_dev(struct hci_dev *hdev);
1697int hci_register_dev(struct hci_dev *hdev);
1698void hci_unregister_dev(struct hci_dev *hdev);
1699void hci_release_dev(struct hci_dev *hdev);
1700int hci_register_suspend_notifier(struct hci_dev *hdev);
1701int hci_unregister_suspend_notifier(struct hci_dev *hdev);
1702int hci_suspend_dev(struct hci_dev *hdev);
1703int hci_resume_dev(struct hci_dev *hdev);
1704int hci_reset_dev(struct hci_dev *hdev);
1705int hci_recv_frame(struct hci_dev *hdev, struct sk_buff *skb);
1706int hci_recv_diag(struct hci_dev *hdev, struct sk_buff *skb);
1707__printf(2, 3) void hci_set_hw_info(struct hci_dev *hdev, const char *fmt, ...);
1708__printf(2, 3) void hci_set_fw_info(struct hci_dev *hdev, const char *fmt, ...);
1709
1710static inline void hci_set_msft_opcode(struct hci_dev *hdev, __u16 opcode)
1711{
1712#if IS_ENABLED(CONFIG_BT_MSFTEXT)
1713 hdev->msft_opcode = opcode;
1714#endif
1715}
1716
1717static inline void hci_set_aosp_capable(struct hci_dev *hdev)
1718{
1719#if IS_ENABLED(CONFIG_BT_AOSPEXT)
1720 hdev->aosp_capable = true;
1721#endif
1722}
1723
1724static inline void hci_devcd_setup(struct hci_dev *hdev)
1725{
1726#ifdef CONFIG_DEV_COREDUMP
1727 INIT_WORK(&hdev->dump.dump_rx, hci_devcd_rx);
1728 INIT_DELAYED_WORK(&hdev->dump.dump_timeout, hci_devcd_timeout);
1729 skb_queue_head_init(&hdev->dump.dump_q);
1730#endif
1731}
1732
1733int hci_dev_open(__u16 dev);
1734int hci_dev_close(__u16 dev);
1735int hci_dev_do_close(struct hci_dev *hdev);
1736int hci_dev_reset(__u16 dev);
1737int hci_dev_reset_stat(__u16 dev);
1738int hci_dev_cmd(unsigned int cmd, void __user *arg);
1739int hci_get_dev_list(void __user *arg);
1740int hci_get_dev_info(void __user *arg);
1741int hci_get_conn_list(void __user *arg);
1742int hci_get_conn_info(struct hci_dev *hdev, void __user *arg);
1743int hci_get_auth_info(struct hci_dev *hdev, void __user *arg);
1744int hci_inquiry(void __user *arg);
1745
1746struct bdaddr_list *hci_bdaddr_list_lookup(struct list_head *list,
1747 bdaddr_t *bdaddr, u8 type);
1748struct bdaddr_list_with_irk *hci_bdaddr_list_lookup_with_irk(
1749 struct list_head *list, bdaddr_t *bdaddr,
1750 u8 type);
1751struct bdaddr_list_with_flags *
1752hci_bdaddr_list_lookup_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1753 u8 type);
1754int hci_bdaddr_list_add(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1755int hci_bdaddr_list_add_with_irk(struct list_head *list, bdaddr_t *bdaddr,
1756 u8 type, u8 *peer_irk, u8 *local_irk);
1757int hci_bdaddr_list_add_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1758 u8 type, u32 flags);
1759int hci_bdaddr_list_del(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1760int hci_bdaddr_list_del_with_irk(struct list_head *list, bdaddr_t *bdaddr,
1761 u8 type);
1762int hci_bdaddr_list_del_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1763 u8 type);
1764void hci_bdaddr_list_clear(struct list_head *list);
1765
1766struct hci_conn_params *hci_conn_params_lookup(struct hci_dev *hdev,
1767 bdaddr_t *addr, u8 addr_type);
1768struct hci_conn_params *hci_conn_params_add(struct hci_dev *hdev,
1769 bdaddr_t *addr, u8 addr_type);
1770void hci_conn_params_del(struct hci_dev *hdev, bdaddr_t *addr, u8 addr_type);
1771void hci_conn_params_clear_disabled(struct hci_dev *hdev);
1772void hci_conn_params_free(struct hci_conn_params *param);
1773
1774void hci_pend_le_list_del_init(struct hci_conn_params *param);
1775void hci_pend_le_list_add(struct hci_conn_params *param,
1776 struct list_head *list);
1777struct hci_conn_params *hci_pend_le_action_lookup(struct list_head *list,
1778 bdaddr_t *addr,
1779 u8 addr_type);
1780
1781void hci_uuids_clear(struct hci_dev *hdev);
1782
1783void hci_link_keys_clear(struct hci_dev *hdev);
1784struct link_key *hci_find_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1785struct link_key *hci_add_link_key(struct hci_dev *hdev, struct hci_conn *conn,
1786 bdaddr_t *bdaddr, u8 *val, u8 type,
1787 u8 pin_len, bool *persistent);
1788struct smp_ltk *hci_add_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1789 u8 addr_type, u8 type, u8 authenticated,
1790 u8 tk[16], u8 enc_size, __le16 ediv, __le64 rand);
1791struct smp_ltk *hci_find_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1792 u8 addr_type, u8 role);
1793int hci_remove_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 bdaddr_type);
1794void hci_smp_ltks_clear(struct hci_dev *hdev);
1795int hci_remove_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1796
1797struct smp_irk *hci_find_irk_by_rpa(struct hci_dev *hdev, bdaddr_t *rpa);
1798struct smp_irk *hci_find_irk_by_addr(struct hci_dev *hdev, bdaddr_t *bdaddr,
1799 u8 addr_type);
1800struct smp_irk *hci_add_irk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1801 u8 addr_type, u8 val[16], bdaddr_t *rpa);
1802void hci_remove_irk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 addr_type);
1803bool hci_is_blocked_key(struct hci_dev *hdev, u8 type, u8 val[16]);
1804void hci_blocked_keys_clear(struct hci_dev *hdev);
1805void hci_smp_irks_clear(struct hci_dev *hdev);
1806
1807bool hci_bdaddr_is_paired(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type);
1808
1809void hci_remote_oob_data_clear(struct hci_dev *hdev);
1810struct oob_data *hci_find_remote_oob_data(struct hci_dev *hdev,
1811 bdaddr_t *bdaddr, u8 bdaddr_type);
1812int hci_add_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1813 u8 bdaddr_type, u8 *hash192, u8 *rand192,
1814 u8 *hash256, u8 *rand256);
1815int hci_remove_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1816 u8 bdaddr_type);
1817
1818void hci_adv_instances_clear(struct hci_dev *hdev);
1819struct adv_info *hci_find_adv_instance(struct hci_dev *hdev, u8 instance);
1820struct adv_info *hci_get_next_instance(struct hci_dev *hdev, u8 instance);
1821struct adv_info *hci_add_adv_instance(struct hci_dev *hdev, u8 instance,
1822 u32 flags, u16 adv_data_len, u8 *adv_data,
1823 u16 scan_rsp_len, u8 *scan_rsp_data,
1824 u16 timeout, u16 duration, s8 tx_power,
1825 u32 min_interval, u32 max_interval,
1826 u8 mesh_handle);
1827struct adv_info *hci_add_per_instance(struct hci_dev *hdev, u8 instance,
1828 u32 flags, u8 data_len, u8 *data,
1829 u32 min_interval, u32 max_interval);
1830int hci_set_adv_instance_data(struct hci_dev *hdev, u8 instance,
1831 u16 adv_data_len, u8 *adv_data,
1832 u16 scan_rsp_len, u8 *scan_rsp_data);
1833int hci_remove_adv_instance(struct hci_dev *hdev, u8 instance);
1834void hci_adv_instances_set_rpa_expired(struct hci_dev *hdev, bool rpa_expired);
1835u32 hci_adv_instance_flags(struct hci_dev *hdev, u8 instance);
1836bool hci_adv_instance_is_scannable(struct hci_dev *hdev, u8 instance);
1837
1838void hci_adv_monitors_clear(struct hci_dev *hdev);
1839void hci_free_adv_monitor(struct hci_dev *hdev, struct adv_monitor *monitor);
1840int hci_add_adv_monitor(struct hci_dev *hdev, struct adv_monitor *monitor);
1841int hci_remove_single_adv_monitor(struct hci_dev *hdev, u16 handle);
1842int hci_remove_all_adv_monitor(struct hci_dev *hdev);
1843bool hci_is_adv_monitoring(struct hci_dev *hdev);
1844int hci_get_adv_monitor_offload_ext(struct hci_dev *hdev);
1845
1846void hci_event_packet(struct hci_dev *hdev, struct sk_buff *skb);
1847
1848void hci_init_sysfs(struct hci_dev *hdev);
1849void hci_conn_init_sysfs(struct hci_conn *conn);
1850void hci_conn_add_sysfs(struct hci_conn *conn);
1851void hci_conn_del_sysfs(struct hci_conn *conn);
1852
1853#define SET_HCIDEV_DEV(hdev, pdev) ((hdev)->dev.parent = (pdev))
1854#define GET_HCIDEV_DEV(hdev) ((hdev)->dev.parent)
1855
1856/* ----- LMP capabilities ----- */
1857#define lmp_encrypt_capable(dev) ((dev)->features[0][0] & LMP_ENCRYPT)
1858#define lmp_rswitch_capable(dev) ((dev)->features[0][0] & LMP_RSWITCH)
1859#define lmp_hold_capable(dev) ((dev)->features[0][0] & LMP_HOLD)
1860#define lmp_sniff_capable(dev) ((dev)->features[0][0] & LMP_SNIFF)
1861#define lmp_park_capable(dev) ((dev)->features[0][1] & LMP_PARK)
1862#define lmp_inq_rssi_capable(dev) ((dev)->features[0][3] & LMP_RSSI_INQ)
1863#define lmp_esco_capable(dev) ((dev)->features[0][3] & LMP_ESCO)
1864#define lmp_bredr_capable(dev) (!((dev)->features[0][4] & LMP_NO_BREDR))
1865#define lmp_le_capable(dev) ((dev)->features[0][4] & LMP_LE)
1866#define lmp_sniffsubr_capable(dev) ((dev)->features[0][5] & LMP_SNIFF_SUBR)
1867#define lmp_pause_enc_capable(dev) ((dev)->features[0][5] & LMP_PAUSE_ENC)
1868#define lmp_esco_2m_capable(dev) ((dev)->features[0][5] & LMP_EDR_ESCO_2M)
1869#define lmp_ext_inq_capable(dev) ((dev)->features[0][6] & LMP_EXT_INQ)
1870#define lmp_le_br_capable(dev) (!!((dev)->features[0][6] & LMP_SIMUL_LE_BR))
1871#define lmp_ssp_capable(dev) ((dev)->features[0][6] & LMP_SIMPLE_PAIR)
1872#define lmp_no_flush_capable(dev) ((dev)->features[0][6] & LMP_NO_FLUSH)
1873#define lmp_lsto_capable(dev) ((dev)->features[0][7] & LMP_LSTO)
1874#define lmp_inq_tx_pwr_capable(dev) ((dev)->features[0][7] & LMP_INQ_TX_PWR)
1875#define lmp_ext_feat_capable(dev) ((dev)->features[0][7] & LMP_EXTFEATURES)
1876#define lmp_transp_capable(dev) ((dev)->features[0][2] & LMP_TRANSPARENT)
1877#define lmp_edr_2m_capable(dev) ((dev)->features[0][3] & LMP_EDR_2M)
1878#define lmp_edr_3m_capable(dev) ((dev)->features[0][3] & LMP_EDR_3M)
1879#define lmp_edr_3slot_capable(dev) ((dev)->features[0][4] & LMP_EDR_3SLOT)
1880#define lmp_edr_5slot_capable(dev) ((dev)->features[0][5] & LMP_EDR_5SLOT)
1881
1882/* ----- Extended LMP capabilities ----- */
1883#define lmp_cpb_central_capable(dev) ((dev)->features[2][0] & LMP_CPB_CENTRAL)
1884#define lmp_cpb_peripheral_capable(dev) ((dev)->features[2][0] & LMP_CPB_PERIPHERAL)
1885#define lmp_sync_train_capable(dev) ((dev)->features[2][0] & LMP_SYNC_TRAIN)
1886#define lmp_sync_scan_capable(dev) ((dev)->features[2][0] & LMP_SYNC_SCAN)
1887#define lmp_sc_capable(dev) ((dev)->features[2][1] & LMP_SC)
1888#define lmp_ping_capable(dev) ((dev)->features[2][1] & LMP_PING)
1889
1890/* ----- Host capabilities ----- */
1891#define lmp_host_ssp_capable(dev) ((dev)->features[1][0] & LMP_HOST_SSP)
1892#define lmp_host_sc_capable(dev) ((dev)->features[1][0] & LMP_HOST_SC)
1893#define lmp_host_le_capable(dev) (!!((dev)->features[1][0] & LMP_HOST_LE))
1894#define lmp_host_le_br_capable(dev) (!!((dev)->features[1][0] & LMP_HOST_LE_BREDR))
1895
1896#define hdev_is_powered(dev) (test_bit(HCI_UP, &(dev)->flags) && \
1897 !hci_dev_test_flag(dev, HCI_AUTO_OFF))
1898#define bredr_sc_enabled(dev) (lmp_sc_capable(dev) && \
1899 hci_dev_test_flag(dev, HCI_SC_ENABLED))
1900#define rpa_valid(dev) (bacmp(&dev->rpa, BDADDR_ANY) && \
1901 !hci_dev_test_flag(dev, HCI_RPA_EXPIRED))
1902#define adv_rpa_valid(adv) (bacmp(&adv->random_addr, BDADDR_ANY) && \
1903 !adv->rpa_expired)
1904
1905#define scan_1m(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_1M) || \
1906 ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_1M))
1907
1908#define le_2m_capable(dev) (((dev)->le_features[1] & HCI_LE_PHY_2M))
1909
1910#define scan_2m(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_2M) || \
1911 ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_2M))
1912
1913#define le_coded_capable(dev) (((dev)->le_features[1] & HCI_LE_PHY_CODED) && \
1914 !test_bit(HCI_QUIRK_BROKEN_LE_CODED, \
1915 &(dev)->quirks))
1916
1917#define scan_coded(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_CODED) || \
1918 ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_CODED))
1919
1920#define ll_privacy_capable(dev) ((dev)->le_features[0] & HCI_LE_LL_PRIVACY)
1921
1922/* Use LL Privacy based address resolution if supported */
1923#define use_ll_privacy(dev) (ll_privacy_capable(dev) && \
1924 hci_dev_test_flag(dev, HCI_ENABLE_LL_PRIVACY))
1925
1926#define privacy_mode_capable(dev) (use_ll_privacy(dev) && \
1927 (hdev->commands[39] & 0x04))
1928
1929#define read_key_size_capable(dev) \
1930 ((dev)->commands[20] & 0x10 && \
1931 !test_bit(HCI_QUIRK_BROKEN_READ_ENC_KEY_SIZE, &hdev->quirks))
1932
1933/* Use enhanced synchronous connection if command is supported and its quirk
1934 * has not been set.
1935 */
1936#define enhanced_sync_conn_capable(dev) \
1937 (((dev)->commands[29] & 0x08) && \
1938 !test_bit(HCI_QUIRK_BROKEN_ENHANCED_SETUP_SYNC_CONN, &(dev)->quirks))
1939
1940/* Use ext scanning if set ext scan param and ext scan enable is supported */
1941#define use_ext_scan(dev) (((dev)->commands[37] & 0x20) && \
1942 ((dev)->commands[37] & 0x40) && \
1943 !test_bit(HCI_QUIRK_BROKEN_EXT_SCAN, &(dev)->quirks))
1944
1945/* Use ext create connection if command is supported */
1946#define use_ext_conn(dev) (((dev)->commands[37] & 0x80) && \
1947 !test_bit(HCI_QUIRK_BROKEN_EXT_CREATE_CONN, &(dev)->quirks))
1948/* Extended advertising support */
1949#define ext_adv_capable(dev) (((dev)->le_features[1] & HCI_LE_EXT_ADV))
1950
1951/* Maximum advertising length */
1952#define max_adv_len(dev) \
1953 (ext_adv_capable(dev) ? HCI_MAX_EXT_AD_LENGTH : HCI_MAX_AD_LENGTH)
1954
1955/* BLUETOOTH CORE SPECIFICATION Version 5.3 | Vol 4, Part E page 1789:
1956 *
1957 * C24: Mandatory if the LE Controller supports Connection State and either
1958 * LE Feature (LL Privacy) or LE Feature (Extended Advertising) is supported
1959 */
1960#define use_enhanced_conn_complete(dev) ((ll_privacy_capable(dev) || \
1961 ext_adv_capable(dev)) && \
1962 !test_bit(HCI_QUIRK_BROKEN_EXT_CREATE_CONN, \
1963 &(dev)->quirks))
1964
1965/* Periodic advertising support */
1966#define per_adv_capable(dev) (((dev)->le_features[1] & HCI_LE_PERIODIC_ADV))
1967
1968/* CIS Master/Slave and BIS support */
1969#define iso_capable(dev) (cis_capable(dev) || bis_capable(dev))
1970#define cis_capable(dev) \
1971 (cis_central_capable(dev) || cis_peripheral_capable(dev))
1972#define cis_central_capable(dev) \
1973 ((dev)->le_features[3] & HCI_LE_CIS_CENTRAL)
1974#define cis_peripheral_capable(dev) \
1975 ((dev)->le_features[3] & HCI_LE_CIS_PERIPHERAL)
1976#define bis_capable(dev) ((dev)->le_features[3] & HCI_LE_ISO_BROADCASTER)
1977#define sync_recv_capable(dev) ((dev)->le_features[3] & HCI_LE_ISO_SYNC_RECEIVER)
1978
1979#define mws_transport_config_capable(dev) (((dev)->commands[30] & 0x08) && \
1980 (!test_bit(HCI_QUIRK_BROKEN_MWS_TRANSPORT_CONFIG, &(dev)->quirks)))
1981
1982/* ----- HCI protocols ----- */
1983#define HCI_PROTO_DEFER 0x01
1984
1985static inline int hci_proto_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
1986 __u8 type, __u8 *flags)
1987{
1988 switch (type) {
1989 case ACL_LINK:
1990 return l2cap_connect_ind(hdev, bdaddr);
1991
1992 case SCO_LINK:
1993 case ESCO_LINK:
1994 return sco_connect_ind(hdev, bdaddr, flags);
1995
1996 case ISO_LINK:
1997 return iso_connect_ind(hdev, bdaddr, flags);
1998
1999 default:
2000 BT_ERR("unknown link type %d", type);
2001 return -EINVAL;
2002 }
2003}
2004
2005static inline int hci_proto_disconn_ind(struct hci_conn *conn)
2006{
2007 if (conn->type != ACL_LINK && conn->type != LE_LINK)
2008 return HCI_ERROR_REMOTE_USER_TERM;
2009
2010 return l2cap_disconn_ind(conn);
2011}
2012
2013/* ----- HCI callbacks ----- */
2014struct hci_cb {
2015 struct list_head list;
2016
2017 char *name;
2018
2019 bool (*match) (struct hci_conn *conn);
2020 void (*connect_cfm) (struct hci_conn *conn, __u8 status);
2021 void (*disconn_cfm) (struct hci_conn *conn, __u8 status);
2022 void (*security_cfm) (struct hci_conn *conn, __u8 status,
2023 __u8 encrypt);
2024 void (*key_change_cfm) (struct hci_conn *conn, __u8 status);
2025 void (*role_switch_cfm) (struct hci_conn *conn, __u8 status, __u8 role);
2026};
2027
2028static inline void hci_cb_lookup(struct hci_conn *conn, struct list_head *list)
2029{
2030 struct hci_cb *cb, *cpy;
2031
2032 rcu_read_lock();
2033 list_for_each_entry_rcu(cb, &hci_cb_list, list) {
2034 if (cb->match && cb->match(conn)) {
2035 cpy = kmalloc(sizeof(*cpy), GFP_ATOMIC);
2036 if (!cpy)
2037 break;
2038
2039 *cpy = *cb;
2040 INIT_LIST_HEAD(&cpy->list);
2041 list_add_rcu(&cpy->list, list);
2042 }
2043 }
2044 rcu_read_unlock();
2045}
2046
2047static inline void hci_connect_cfm(struct hci_conn *conn, __u8 status)
2048{
2049 struct list_head list;
2050 struct hci_cb *cb, *tmp;
2051
2052 INIT_LIST_HEAD(&list);
2053 hci_cb_lookup(conn, &list);
2054
2055 list_for_each_entry_safe(cb, tmp, &list, list) {
2056 if (cb->connect_cfm)
2057 cb->connect_cfm(conn, status);
2058 kfree(cb);
2059 }
2060
2061 if (conn->connect_cfm_cb)
2062 conn->connect_cfm_cb(conn, status);
2063}
2064
2065static inline void hci_disconn_cfm(struct hci_conn *conn, __u8 reason)
2066{
2067 struct list_head list;
2068 struct hci_cb *cb, *tmp;
2069
2070 INIT_LIST_HEAD(&list);
2071 hci_cb_lookup(conn, &list);
2072
2073 list_for_each_entry_safe(cb, tmp, &list, list) {
2074 if (cb->disconn_cfm)
2075 cb->disconn_cfm(conn, reason);
2076 kfree(cb);
2077 }
2078
2079 if (conn->disconn_cfm_cb)
2080 conn->disconn_cfm_cb(conn, reason);
2081}
2082
2083static inline void hci_security_cfm(struct hci_conn *conn, __u8 status,
2084 __u8 encrypt)
2085{
2086 struct list_head list;
2087 struct hci_cb *cb, *tmp;
2088
2089 INIT_LIST_HEAD(&list);
2090 hci_cb_lookup(conn, &list);
2091
2092 list_for_each_entry_safe(cb, tmp, &list, list) {
2093 if (cb->security_cfm)
2094 cb->security_cfm(conn, status, encrypt);
2095 kfree(cb);
2096 }
2097
2098 if (conn->security_cfm_cb)
2099 conn->security_cfm_cb(conn, status);
2100}
2101
2102static inline void hci_auth_cfm(struct hci_conn *conn, __u8 status)
2103{
2104 __u8 encrypt;
2105
2106 if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->flags))
2107 return;
2108
2109 encrypt = test_bit(HCI_CONN_ENCRYPT, &conn->flags) ? 0x01 : 0x00;
2110
2111 hci_security_cfm(conn, status, encrypt);
2112}
2113
2114static inline void hci_encrypt_cfm(struct hci_conn *conn, __u8 status)
2115{
2116 __u8 encrypt;
2117
2118 if (conn->state == BT_CONFIG) {
2119 if (!status)
2120 conn->state = BT_CONNECTED;
2121
2122 hci_connect_cfm(conn, status);
2123 hci_conn_drop(conn);
2124 return;
2125 }
2126
2127 if (!test_bit(HCI_CONN_ENCRYPT, &conn->flags))
2128 encrypt = 0x00;
2129 else if (test_bit(HCI_CONN_AES_CCM, &conn->flags))
2130 encrypt = 0x02;
2131 else
2132 encrypt = 0x01;
2133
2134 if (!status) {
2135 if (conn->sec_level == BT_SECURITY_SDP)
2136 conn->sec_level = BT_SECURITY_LOW;
2137
2138 if (conn->pending_sec_level > conn->sec_level)
2139 conn->sec_level = conn->pending_sec_level;
2140 }
2141
2142 hci_security_cfm(conn, status, encrypt);
2143}
2144
2145static inline void hci_key_change_cfm(struct hci_conn *conn, __u8 status)
2146{
2147 struct list_head list;
2148 struct hci_cb *cb, *tmp;
2149
2150 INIT_LIST_HEAD(&list);
2151 hci_cb_lookup(conn, &list);
2152
2153 list_for_each_entry_safe(cb, tmp, &list, list) {
2154 if (cb->key_change_cfm)
2155 cb->key_change_cfm(conn, status);
2156 kfree(cb);
2157 }
2158}
2159
2160static inline void hci_role_switch_cfm(struct hci_conn *conn, __u8 status,
2161 __u8 role)
2162{
2163 struct list_head list;
2164 struct hci_cb *cb, *tmp;
2165
2166 INIT_LIST_HEAD(&list);
2167 hci_cb_lookup(conn, &list);
2168
2169 list_for_each_entry_safe(cb, tmp, &list, list) {
2170 if (cb->role_switch_cfm)
2171 cb->role_switch_cfm(conn, status, role);
2172 kfree(cb);
2173 }
2174}
2175
2176static inline bool hci_bdaddr_is_rpa(bdaddr_t *bdaddr, u8 addr_type)
2177{
2178 if (addr_type != ADDR_LE_DEV_RANDOM)
2179 return false;
2180
2181 if ((bdaddr->b[5] & 0xc0) == 0x40)
2182 return true;
2183
2184 return false;
2185}
2186
2187static inline bool hci_is_identity_address(bdaddr_t *addr, u8 addr_type)
2188{
2189 if (addr_type == ADDR_LE_DEV_PUBLIC)
2190 return true;
2191
2192 /* Check for Random Static address type */
2193 if ((addr->b[5] & 0xc0) == 0xc0)
2194 return true;
2195
2196 return false;
2197}
2198
2199static inline struct smp_irk *hci_get_irk(struct hci_dev *hdev,
2200 bdaddr_t *bdaddr, u8 addr_type)
2201{
2202 if (!hci_bdaddr_is_rpa(bdaddr, addr_type))
2203 return NULL;
2204
2205 return hci_find_irk_by_rpa(hdev, bdaddr);
2206}
2207
2208static inline int hci_check_conn_params(u16 min, u16 max, u16 latency,
2209 u16 to_multiplier)
2210{
2211 u16 max_latency;
2212
2213 if (min > max) {
2214 BT_WARN("min %d > max %d", min, max);
2215 return -EINVAL;
2216 }
2217
2218 if (min < 6) {
2219 BT_WARN("min %d < 6", min);
2220 return -EINVAL;
2221 }
2222
2223 if (max > 3200) {
2224 BT_WARN("max %d > 3200", max);
2225 return -EINVAL;
2226 }
2227
2228 if (to_multiplier < 10) {
2229 BT_WARN("to_multiplier %d < 10", to_multiplier);
2230 return -EINVAL;
2231 }
2232
2233 if (to_multiplier > 3200) {
2234 BT_WARN("to_multiplier %d > 3200", to_multiplier);
2235 return -EINVAL;
2236 }
2237
2238 if (max >= to_multiplier * 8) {
2239 BT_WARN("max %d >= to_multiplier %d * 8", max, to_multiplier);
2240 return -EINVAL;
2241 }
2242
2243 max_latency = (to_multiplier * 4 / max) - 1;
2244 if (latency > 499) {
2245 BT_WARN("latency %d > 499", latency);
2246 return -EINVAL;
2247 }
2248
2249 if (latency > max_latency) {
2250 BT_WARN("latency %d > max_latency %d", latency, max_latency);
2251 return -EINVAL;
2252 }
2253
2254 return 0;
2255}
2256
2257int hci_register_cb(struct hci_cb *hcb);
2258int hci_unregister_cb(struct hci_cb *hcb);
2259
2260int __hci_cmd_send(struct hci_dev *hdev, u16 opcode, u32 plen,
2261 const void *param);
2262
2263int hci_send_cmd(struct hci_dev *hdev, __u16 opcode, __u32 plen,
2264 const void *param);
2265void hci_send_acl(struct hci_chan *chan, struct sk_buff *skb, __u16 flags);
2266void hci_send_sco(struct hci_conn *conn, struct sk_buff *skb);
2267void hci_send_iso(struct hci_conn *conn, struct sk_buff *skb);
2268
2269void *hci_sent_cmd_data(struct hci_dev *hdev, __u16 opcode);
2270void *hci_recv_event_data(struct hci_dev *hdev, __u8 event);
2271
2272u32 hci_conn_get_phy(struct hci_conn *conn);
2273
2274/* ----- HCI Sockets ----- */
2275void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb);
2276void hci_send_to_channel(unsigned short channel, struct sk_buff *skb,
2277 int flag, struct sock *skip_sk);
2278void hci_send_to_monitor(struct hci_dev *hdev, struct sk_buff *skb);
2279void hci_send_monitor_ctrl_event(struct hci_dev *hdev, u16 event,
2280 void *data, u16 data_len, ktime_t tstamp,
2281 int flag, struct sock *skip_sk);
2282
2283void hci_sock_dev_event(struct hci_dev *hdev, int event);
2284
2285#define HCI_MGMT_VAR_LEN BIT(0)
2286#define HCI_MGMT_NO_HDEV BIT(1)
2287#define HCI_MGMT_UNTRUSTED BIT(2)
2288#define HCI_MGMT_UNCONFIGURED BIT(3)
2289#define HCI_MGMT_HDEV_OPTIONAL BIT(4)
2290
2291struct hci_mgmt_handler {
2292 int (*func) (struct sock *sk, struct hci_dev *hdev, void *data,
2293 u16 data_len);
2294 size_t data_len;
2295 unsigned long flags;
2296};
2297
2298struct hci_mgmt_chan {
2299 struct list_head list;
2300 unsigned short channel;
2301 size_t handler_count;
2302 const struct hci_mgmt_handler *handlers;
2303 void (*hdev_init) (struct sock *sk, struct hci_dev *hdev);
2304};
2305
2306int hci_mgmt_chan_register(struct hci_mgmt_chan *c);
2307void hci_mgmt_chan_unregister(struct hci_mgmt_chan *c);
2308
2309/* Management interface */
2310#define DISCOV_TYPE_BREDR (BIT(BDADDR_BREDR))
2311#define DISCOV_TYPE_LE (BIT(BDADDR_LE_PUBLIC) | \
2312 BIT(BDADDR_LE_RANDOM))
2313#define DISCOV_TYPE_INTERLEAVED (BIT(BDADDR_BREDR) | \
2314 BIT(BDADDR_LE_PUBLIC) | \
2315 BIT(BDADDR_LE_RANDOM))
2316
2317/* These LE scan and inquiry parameters were chosen according to LE General
2318 * Discovery Procedure specification.
2319 */
2320#define DISCOV_LE_SCAN_WIN 0x0012 /* 11.25 msec */
2321#define DISCOV_LE_SCAN_INT 0x0012 /* 11.25 msec */
2322#define DISCOV_LE_SCAN_INT_FAST 0x0060 /* 60 msec */
2323#define DISCOV_LE_SCAN_WIN_FAST 0x0030 /* 30 msec */
2324#define DISCOV_LE_SCAN_INT_CONN 0x0060 /* 60 msec */
2325#define DISCOV_LE_SCAN_WIN_CONN 0x0060 /* 60 msec */
2326#define DISCOV_LE_SCAN_INT_SLOW1 0x0800 /* 1.28 sec */
2327#define DISCOV_LE_SCAN_WIN_SLOW1 0x0012 /* 11.25 msec */
2328#define DISCOV_LE_SCAN_INT_SLOW2 0x1000 /* 2.56 sec */
2329#define DISCOV_LE_SCAN_WIN_SLOW2 0x0024 /* 22.5 msec */
2330#define DISCOV_CODED_SCAN_INT_FAST 0x0120 /* 180 msec */
2331#define DISCOV_CODED_SCAN_WIN_FAST 0x0090 /* 90 msec */
2332#define DISCOV_CODED_SCAN_INT_SLOW1 0x1800 /* 3.84 sec */
2333#define DISCOV_CODED_SCAN_WIN_SLOW1 0x0036 /* 33.75 msec */
2334#define DISCOV_CODED_SCAN_INT_SLOW2 0x3000 /* 7.68 sec */
2335#define DISCOV_CODED_SCAN_WIN_SLOW2 0x006c /* 67.5 msec */
2336#define DISCOV_LE_TIMEOUT 10240 /* msec */
2337#define DISCOV_INTERLEAVED_TIMEOUT 5120 /* msec */
2338#define DISCOV_INTERLEAVED_INQUIRY_LEN 0x04
2339#define DISCOV_BREDR_INQUIRY_LEN 0x08
2340#define DISCOV_LE_RESTART_DELAY msecs_to_jiffies(200) /* msec */
2341#define DISCOV_LE_FAST_ADV_INT_MIN 0x00A0 /* 100 msec */
2342#define DISCOV_LE_FAST_ADV_INT_MAX 0x00F0 /* 150 msec */
2343#define DISCOV_LE_PER_ADV_INT_MIN 0x00A0 /* 200 msec */
2344#define DISCOV_LE_PER_ADV_INT_MAX 0x00A0 /* 200 msec */
2345#define DISCOV_LE_ADV_MESH_MIN 0x00A0 /* 100 msec */
2346#define DISCOV_LE_ADV_MESH_MAX 0x00A0 /* 100 msec */
2347#define INTERVAL_TO_MS(x) (((x) * 10) / 0x10)
2348
2349#define NAME_RESOLVE_DURATION msecs_to_jiffies(10240) /* 10.24 sec */
2350
2351void mgmt_fill_version_info(void *ver);
2352int mgmt_new_settings(struct hci_dev *hdev);
2353void mgmt_index_added(struct hci_dev *hdev);
2354void mgmt_index_removed(struct hci_dev *hdev);
2355void mgmt_set_powered_failed(struct hci_dev *hdev, int err);
2356void mgmt_power_on(struct hci_dev *hdev, int err);
2357void __mgmt_power_off(struct hci_dev *hdev);
2358void mgmt_new_link_key(struct hci_dev *hdev, struct link_key *key,
2359 bool persistent);
2360void mgmt_device_connected(struct hci_dev *hdev, struct hci_conn *conn,
2361 u8 *name, u8 name_len);
2362void mgmt_device_disconnected(struct hci_dev *hdev, bdaddr_t *bdaddr,
2363 u8 link_type, u8 addr_type, u8 reason,
2364 bool mgmt_connected);
2365void mgmt_disconnect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr,
2366 u8 link_type, u8 addr_type, u8 status);
2367void mgmt_connect_failed(struct hci_dev *hdev, struct hci_conn *conn,
2368 u8 status);
2369void mgmt_pin_code_request(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 secure);
2370void mgmt_pin_code_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2371 u8 status);
2372void mgmt_pin_code_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2373 u8 status);
2374int mgmt_user_confirm_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
2375 u8 link_type, u8 addr_type, u32 value,
2376 u8 confirm_hint);
2377int mgmt_user_confirm_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2378 u8 link_type, u8 addr_type, u8 status);
2379int mgmt_user_confirm_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2380 u8 link_type, u8 addr_type, u8 status);
2381int mgmt_user_passkey_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
2382 u8 link_type, u8 addr_type);
2383int mgmt_user_passkey_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2384 u8 link_type, u8 addr_type, u8 status);
2385int mgmt_user_passkey_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2386 u8 link_type, u8 addr_type, u8 status);
2387int mgmt_user_passkey_notify(struct hci_dev *hdev, bdaddr_t *bdaddr,
2388 u8 link_type, u8 addr_type, u32 passkey,
2389 u8 entered);
2390void mgmt_auth_failed(struct hci_conn *conn, u8 status);
2391void mgmt_auth_enable_complete(struct hci_dev *hdev, u8 status);
2392void mgmt_set_class_of_dev_complete(struct hci_dev *hdev, u8 *dev_class,
2393 u8 status);
2394void mgmt_set_local_name_complete(struct hci_dev *hdev, u8 *name, u8 status);
2395void mgmt_start_discovery_complete(struct hci_dev *hdev, u8 status);
2396void mgmt_stop_discovery_complete(struct hci_dev *hdev, u8 status);
2397void mgmt_device_found(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2398 u8 addr_type, u8 *dev_class, s8 rssi, u32 flags,
2399 u8 *eir, u16 eir_len, u8 *scan_rsp, u8 scan_rsp_len,
2400 u64 instant);
2401void mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2402 u8 addr_type, s8 rssi, u8 *name, u8 name_len);
2403void mgmt_discovering(struct hci_dev *hdev, u8 discovering);
2404void mgmt_suspending(struct hci_dev *hdev, u8 state);
2405void mgmt_resuming(struct hci_dev *hdev, u8 reason, bdaddr_t *bdaddr,
2406 u8 addr_type);
2407bool mgmt_powering_down(struct hci_dev *hdev);
2408void mgmt_new_ltk(struct hci_dev *hdev, struct smp_ltk *key, bool persistent);
2409void mgmt_new_irk(struct hci_dev *hdev, struct smp_irk *irk, bool persistent);
2410void mgmt_new_csrk(struct hci_dev *hdev, struct smp_csrk *csrk,
2411 bool persistent);
2412void mgmt_new_conn_param(struct hci_dev *hdev, bdaddr_t *bdaddr,
2413 u8 bdaddr_type, u8 store_hint, u16 min_interval,
2414 u16 max_interval, u16 latency, u16 timeout);
2415void mgmt_smp_complete(struct hci_conn *conn, bool complete);
2416bool mgmt_get_connectable(struct hci_dev *hdev);
2417u8 mgmt_get_adv_discov_flags(struct hci_dev *hdev);
2418void mgmt_advertising_added(struct sock *sk, struct hci_dev *hdev,
2419 u8 instance);
2420void mgmt_advertising_removed(struct sock *sk, struct hci_dev *hdev,
2421 u8 instance);
2422void mgmt_adv_monitor_removed(struct hci_dev *hdev, u16 handle);
2423int mgmt_phy_configuration_changed(struct hci_dev *hdev, struct sock *skip);
2424void mgmt_adv_monitor_device_lost(struct hci_dev *hdev, u16 handle,
2425 bdaddr_t *bdaddr, u8 addr_type);
2426
2427int hci_abort_conn(struct hci_conn *conn, u8 reason);
2428u8 hci_le_conn_update(struct hci_conn *conn, u16 min, u16 max, u16 latency,
2429 u16 to_multiplier);
2430void hci_le_start_enc(struct hci_conn *conn, __le16 ediv, __le64 rand,
2431 __u8 ltk[16], __u8 key_size);
2432
2433void hci_copy_identity_address(struct hci_dev *hdev, bdaddr_t *bdaddr,
2434 u8 *bdaddr_type);
2435
2436#define SCO_AIRMODE_MASK 0x0003
2437#define SCO_AIRMODE_CVSD 0x0000
2438#define SCO_AIRMODE_TRANSP 0x0003
2439
2440#define LOCAL_CODEC_ACL_MASK BIT(0)
2441#define LOCAL_CODEC_SCO_MASK BIT(1)
2442
2443#define TRANSPORT_TYPE_MAX 0x04
2444
2445#endif /* __HCI_CORE_H */