Linux Audio

Check our new training course

Loading...
v6.13.7
  1/*
  2   BlueZ - Bluetooth protocol stack for Linux
  3   Copyright (C) 2000-2001 Qualcomm Incorporated
  4
  5   Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
  6
  7   This program is free software; you can redistribute it and/or modify
  8   it under the terms of the GNU General Public License version 2 as
  9   published by the Free Software Foundation;
 10
 11   THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
 12   OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 13   FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
 14   IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
 15   CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
 16   WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 17   ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 18   OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 19
 20   ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
 21   COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
 22   SOFTWARE IS DISCLAIMED.
 23*/
 24
 25/* Bluetooth address family and sockets. */
 26
 27#include <linux/module.h>
 28#include <linux/debugfs.h>
 29#include <linux/stringify.h>
 30#include <linux/sched/signal.h>
 31
 32#include <asm/ioctls.h>
 33
 34#include <net/bluetooth/bluetooth.h>
 35#include <linux/proc_fs.h>
 36
 37#include "leds.h"
 38#include "selftest.h"
 39
 40/* Bluetooth sockets */
 41#define BT_MAX_PROTO	(BTPROTO_LAST + 1)
 42static const struct net_proto_family *bt_proto[BT_MAX_PROTO];
 43static DEFINE_RWLOCK(bt_proto_lock);
 44
 45static struct lock_class_key bt_lock_key[BT_MAX_PROTO];
 46static const char *const bt_key_strings[BT_MAX_PROTO] = {
 47	"sk_lock-AF_BLUETOOTH-BTPROTO_L2CAP",
 48	"sk_lock-AF_BLUETOOTH-BTPROTO_HCI",
 49	"sk_lock-AF_BLUETOOTH-BTPROTO_SCO",
 50	"sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM",
 51	"sk_lock-AF_BLUETOOTH-BTPROTO_BNEP",
 52	"sk_lock-AF_BLUETOOTH-BTPROTO_CMTP",
 53	"sk_lock-AF_BLUETOOTH-BTPROTO_HIDP",
 54	"sk_lock-AF_BLUETOOTH-BTPROTO_AVDTP",
 55	"sk_lock-AF_BLUETOOTH-BTPROTO_ISO",
 56};
 57
 58static struct lock_class_key bt_slock_key[BT_MAX_PROTO];
 59static const char *const bt_slock_key_strings[BT_MAX_PROTO] = {
 60	"slock-AF_BLUETOOTH-BTPROTO_L2CAP",
 61	"slock-AF_BLUETOOTH-BTPROTO_HCI",
 62	"slock-AF_BLUETOOTH-BTPROTO_SCO",
 63	"slock-AF_BLUETOOTH-BTPROTO_RFCOMM",
 64	"slock-AF_BLUETOOTH-BTPROTO_BNEP",
 65	"slock-AF_BLUETOOTH-BTPROTO_CMTP",
 66	"slock-AF_BLUETOOTH-BTPROTO_HIDP",
 67	"slock-AF_BLUETOOTH-BTPROTO_AVDTP",
 68	"slock-AF_BLUETOOTH-BTPROTO_ISO",
 69};
 70
 71void bt_sock_reclassify_lock(struct sock *sk, int proto)
 72{
 73	BUG_ON(!sk);
 74	BUG_ON(!sock_allow_reclassification(sk));
 75
 76	sock_lock_init_class_and_name(sk,
 77				      bt_slock_key_strings[proto], &bt_slock_key[proto],
 78				      bt_key_strings[proto], &bt_lock_key[proto]);
 79}
 80EXPORT_SYMBOL(bt_sock_reclassify_lock);
 81
 82int bt_sock_register(int proto, const struct net_proto_family *ops)
 83{
 84	int err = 0;
 85
 86	if (proto < 0 || proto >= BT_MAX_PROTO)
 87		return -EINVAL;
 88
 89	write_lock(&bt_proto_lock);
 90
 91	if (bt_proto[proto])
 92		err = -EEXIST;
 93	else
 94		bt_proto[proto] = ops;
 95
 96	write_unlock(&bt_proto_lock);
 97
 98	return err;
 99}
100EXPORT_SYMBOL(bt_sock_register);
101
102void bt_sock_unregister(int proto)
103{
104	if (proto < 0 || proto >= BT_MAX_PROTO)
105		return;
106
107	write_lock(&bt_proto_lock);
108	bt_proto[proto] = NULL;
109	write_unlock(&bt_proto_lock);
110}
111EXPORT_SYMBOL(bt_sock_unregister);
112
113static int bt_sock_create(struct net *net, struct socket *sock, int proto,
114			  int kern)
115{
116	int err;
117
118	if (net != &init_net)
119		return -EAFNOSUPPORT;
120
121	if (proto < 0 || proto >= BT_MAX_PROTO)
122		return -EINVAL;
123
124	if (!bt_proto[proto])
125		request_module("bt-proto-%d", proto);
126
127	err = -EPROTONOSUPPORT;
128
129	read_lock(&bt_proto_lock);
130
131	if (bt_proto[proto] && try_module_get(bt_proto[proto]->owner)) {
132		err = bt_proto[proto]->create(net, sock, proto, kern);
133		if (!err)
134			bt_sock_reclassify_lock(sock->sk, proto);
135		module_put(bt_proto[proto]->owner);
136	}
137
138	read_unlock(&bt_proto_lock);
139
140	return err;
141}
142
143struct sock *bt_sock_alloc(struct net *net, struct socket *sock,
144			   struct proto *prot, int proto, gfp_t prio, int kern)
145{
146	struct sock *sk;
147
148	sk = sk_alloc(net, PF_BLUETOOTH, prio, prot, kern);
149	if (!sk)
150		return NULL;
151
152	sock_init_data(sock, sk);
153	INIT_LIST_HEAD(&bt_sk(sk)->accept_q);
154
155	sock_reset_flag(sk, SOCK_ZAPPED);
156
157	sk->sk_protocol = proto;
158	sk->sk_state    = BT_OPEN;
159
160	/* Init peer information so it can be properly monitored */
161	if (!kern) {
162		spin_lock(&sk->sk_peer_lock);
163		sk->sk_peer_pid  = get_pid(task_tgid(current));
164		sk->sk_peer_cred = get_current_cred();
165		spin_unlock(&sk->sk_peer_lock);
166	}
167
168	return sk;
169}
170EXPORT_SYMBOL(bt_sock_alloc);
171
172void bt_sock_link(struct bt_sock_list *l, struct sock *sk)
173{
174	write_lock(&l->lock);
175	sk_add_node(sk, &l->head);
176	write_unlock(&l->lock);
177}
178EXPORT_SYMBOL(bt_sock_link);
179
180void bt_sock_unlink(struct bt_sock_list *l, struct sock *sk)
181{
182	write_lock(&l->lock);
183	sk_del_node_init(sk);
184	write_unlock(&l->lock);
185}
186EXPORT_SYMBOL(bt_sock_unlink);
187
188bool bt_sock_linked(struct bt_sock_list *l, struct sock *s)
189{
190	struct sock *sk;
191
192	if (!l || !s)
193		return false;
194
195	read_lock(&l->lock);
196
197	sk_for_each(sk, &l->head) {
198		if (s == sk) {
199			read_unlock(&l->lock);
200			return true;
201		}
202	}
203
204	read_unlock(&l->lock);
205
206	return false;
207}
208EXPORT_SYMBOL(bt_sock_linked);
209
210void bt_accept_enqueue(struct sock *parent, struct sock *sk, bool bh)
211{
212	const struct cred *old_cred;
213	struct pid *old_pid;
214
215	BT_DBG("parent %p, sk %p", parent, sk);
216
217	sock_hold(sk);
218
219	if (bh)
220		bh_lock_sock_nested(sk);
221	else
222		lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
223
224	list_add_tail(&bt_sk(sk)->accept_q, &bt_sk(parent)->accept_q);
225	bt_sk(sk)->parent = parent;
226
227	/* Copy credentials from parent since for incoming connections the
228	 * socket is allocated by the kernel.
229	 */
230	spin_lock(&sk->sk_peer_lock);
231	old_pid = sk->sk_peer_pid;
232	old_cred = sk->sk_peer_cred;
233	sk->sk_peer_pid = get_pid(parent->sk_peer_pid);
234	sk->sk_peer_cred = get_cred(parent->sk_peer_cred);
235	spin_unlock(&sk->sk_peer_lock);
236
237	put_pid(old_pid);
238	put_cred(old_cred);
239
240	if (bh)
241		bh_unlock_sock(sk);
242	else
243		release_sock(sk);
244
245	sk_acceptq_added(parent);
246}
247EXPORT_SYMBOL(bt_accept_enqueue);
248
249/* Calling function must hold the sk lock.
250 * bt_sk(sk)->parent must be non-NULL meaning sk is in the parent list.
251 */
252void bt_accept_unlink(struct sock *sk)
253{
254	BT_DBG("sk %p state %d", sk, sk->sk_state);
255
256	list_del_init(&bt_sk(sk)->accept_q);
257	sk_acceptq_removed(bt_sk(sk)->parent);
258	bt_sk(sk)->parent = NULL;
259	sock_put(sk);
260}
261EXPORT_SYMBOL(bt_accept_unlink);
262
263struct sock *bt_accept_dequeue(struct sock *parent, struct socket *newsock)
264{
265	struct bt_sock *s, *n;
266	struct sock *sk;
267
268	BT_DBG("parent %p", parent);
269
270restart:
271	list_for_each_entry_safe(s, n, &bt_sk(parent)->accept_q, accept_q) {
272		sk = (struct sock *)s;
273
274		/* Prevent early freeing of sk due to unlink and sock_kill */
275		sock_hold(sk);
276		lock_sock(sk);
277
278		/* Check sk has not already been unlinked via
279		 * bt_accept_unlink() due to serialisation caused by sk locking
280		 */
281		if (!bt_sk(sk)->parent) {
282			BT_DBG("sk %p, already unlinked", sk);
283			release_sock(sk);
284			sock_put(sk);
285
286			/* Restart the loop as sk is no longer in the list
287			 * and also avoid a potential infinite loop because
288			 * list_for_each_entry_safe() is not thread safe.
289			 */
290			goto restart;
291		}
292
293		/* sk is safely in the parent list so reduce reference count */
294		sock_put(sk);
295
296		/* FIXME: Is this check still needed */
297		if (sk->sk_state == BT_CLOSED) {
298			bt_accept_unlink(sk);
299			release_sock(sk);
300			continue;
301		}
302
303		if (sk->sk_state == BT_CONNECTED || !newsock ||
304		    test_bit(BT_SK_DEFER_SETUP, &bt_sk(parent)->flags)) {
305			bt_accept_unlink(sk);
306			if (newsock)
307				sock_graft(sk, newsock);
308
309			release_sock(sk);
310			return sk;
311		}
312
313		release_sock(sk);
314	}
315
316	return NULL;
317}
318EXPORT_SYMBOL(bt_accept_dequeue);
319
320int bt_sock_recvmsg(struct socket *sock, struct msghdr *msg, size_t len,
321		    int flags)
322{
323	struct sock *sk = sock->sk;
324	struct sk_buff *skb;
325	size_t copied;
326	size_t skblen;
327	int err;
328
329	BT_DBG("sock %p sk %p len %zu", sock, sk, len);
330
331	if (flags & MSG_OOB)
332		return -EOPNOTSUPP;
333
 
 
334	skb = skb_recv_datagram(sk, flags, &err);
335	if (!skb) {
336		if (sk->sk_shutdown & RCV_SHUTDOWN)
337			err = 0;
338
 
339		return err;
340	}
341
342	skblen = skb->len;
343	copied = skb->len;
344	if (len < copied) {
345		msg->msg_flags |= MSG_TRUNC;
346		copied = len;
347	}
348
349	skb_reset_transport_header(skb);
350	err = skb_copy_datagram_msg(skb, 0, msg, copied);
351	if (err == 0) {
352		sock_recv_cmsgs(msg, sk, skb);
353
354		if (msg->msg_name && bt_sk(sk)->skb_msg_name)
355			bt_sk(sk)->skb_msg_name(skb, msg->msg_name,
356						&msg->msg_namelen);
357
358		if (test_bit(BT_SK_PKT_STATUS, &bt_sk(sk)->flags)) {
359			u8 pkt_status = hci_skb_pkt_status(skb);
360
361			put_cmsg(msg, SOL_BLUETOOTH, BT_SCM_PKT_STATUS,
362				 sizeof(pkt_status), &pkt_status);
363		}
364	}
365
366	skb_free_datagram(sk, skb);
367
 
 
368	if (flags & MSG_TRUNC)
369		copied = skblen;
370
371	return err ? : copied;
372}
373EXPORT_SYMBOL(bt_sock_recvmsg);
374
375static long bt_sock_data_wait(struct sock *sk, long timeo)
376{
377	DECLARE_WAITQUEUE(wait, current);
378
379	add_wait_queue(sk_sleep(sk), &wait);
380	for (;;) {
381		set_current_state(TASK_INTERRUPTIBLE);
382
383		if (!skb_queue_empty(&sk->sk_receive_queue))
384			break;
385
386		if (sk->sk_err || (sk->sk_shutdown & RCV_SHUTDOWN))
387			break;
388
389		if (signal_pending(current) || !timeo)
390			break;
391
392		sk_set_bit(SOCKWQ_ASYNC_WAITDATA, sk);
393		release_sock(sk);
394		timeo = schedule_timeout(timeo);
395		lock_sock(sk);
396		sk_clear_bit(SOCKWQ_ASYNC_WAITDATA, sk);
397	}
398
399	__set_current_state(TASK_RUNNING);
400	remove_wait_queue(sk_sleep(sk), &wait);
401	return timeo;
402}
403
404int bt_sock_stream_recvmsg(struct socket *sock, struct msghdr *msg,
405			   size_t size, int flags)
406{
407	struct sock *sk = sock->sk;
408	int err = 0;
409	size_t target, copied = 0;
410	long timeo;
411
412	if (flags & MSG_OOB)
413		return -EOPNOTSUPP;
414
415	BT_DBG("sk %p size %zu", sk, size);
416
417	lock_sock(sk);
418
419	target = sock_rcvlowat(sk, flags & MSG_WAITALL, size);
420	timeo  = sock_rcvtimeo(sk, flags & MSG_DONTWAIT);
421
422	do {
423		struct sk_buff *skb;
424		int chunk;
425
426		skb = skb_dequeue(&sk->sk_receive_queue);
427		if (!skb) {
428			if (copied >= target)
429				break;
430
431			err = sock_error(sk);
432			if (err)
433				break;
434			if (sk->sk_shutdown & RCV_SHUTDOWN)
435				break;
436
437			err = -EAGAIN;
438			if (!timeo)
439				break;
440
441			timeo = bt_sock_data_wait(sk, timeo);
442
443			if (signal_pending(current)) {
444				err = sock_intr_errno(timeo);
445				goto out;
446			}
447			continue;
448		}
449
450		chunk = min_t(unsigned int, skb->len, size);
451		if (skb_copy_datagram_msg(skb, 0, msg, chunk)) {
452			skb_queue_head(&sk->sk_receive_queue, skb);
453			if (!copied)
454				copied = -EFAULT;
455			break;
456		}
457		copied += chunk;
458		size   -= chunk;
459
460		sock_recv_cmsgs(msg, sk, skb);
461
462		if (!(flags & MSG_PEEK)) {
463			int skb_len = skb_headlen(skb);
464
465			if (chunk <= skb_len) {
466				__skb_pull(skb, chunk);
467			} else {
468				struct sk_buff *frag;
469
470				__skb_pull(skb, skb_len);
471				chunk -= skb_len;
472
473				skb_walk_frags(skb, frag) {
474					if (chunk <= frag->len) {
475						/* Pulling partial data */
476						skb->len -= chunk;
477						skb->data_len -= chunk;
478						__skb_pull(frag, chunk);
479						break;
480					} else if (frag->len) {
481						/* Pulling all frag data */
482						chunk -= frag->len;
483						skb->len -= frag->len;
484						skb->data_len -= frag->len;
485						__skb_pull(frag, frag->len);
486					}
487				}
488			}
489
490			if (skb->len) {
491				skb_queue_head(&sk->sk_receive_queue, skb);
492				break;
493			}
494			kfree_skb(skb);
495
496		} else {
497			/* put message back and return */
498			skb_queue_head(&sk->sk_receive_queue, skb);
499			break;
500		}
501	} while (size);
502
503out:
504	release_sock(sk);
505	return copied ? : err;
506}
507EXPORT_SYMBOL(bt_sock_stream_recvmsg);
508
509static inline __poll_t bt_accept_poll(struct sock *parent)
510{
511	struct bt_sock *s, *n;
512	struct sock *sk;
513
514	list_for_each_entry_safe(s, n, &bt_sk(parent)->accept_q, accept_q) {
515		sk = (struct sock *)s;
516		if (sk->sk_state == BT_CONNECTED ||
517		    (test_bit(BT_SK_DEFER_SETUP, &bt_sk(parent)->flags) &&
518		     sk->sk_state == BT_CONNECT2))
519			return EPOLLIN | EPOLLRDNORM;
520	}
521
522	return 0;
523}
524
525__poll_t bt_sock_poll(struct file *file, struct socket *sock,
526		      poll_table *wait)
527{
528	struct sock *sk = sock->sk;
529	__poll_t mask = 0;
530
531	poll_wait(file, sk_sleep(sk), wait);
532
533	if (sk->sk_state == BT_LISTEN)
534		return bt_accept_poll(sk);
535
536	if (sk->sk_err || !skb_queue_empty_lockless(&sk->sk_error_queue))
537		mask |= EPOLLERR |
538			(sock_flag(sk, SOCK_SELECT_ERR_QUEUE) ? EPOLLPRI : 0);
539
540	if (sk->sk_shutdown & RCV_SHUTDOWN)
541		mask |= EPOLLRDHUP | EPOLLIN | EPOLLRDNORM;
542
543	if (sk->sk_shutdown == SHUTDOWN_MASK)
544		mask |= EPOLLHUP;
545
546	if (!skb_queue_empty_lockless(&sk->sk_receive_queue))
547		mask |= EPOLLIN | EPOLLRDNORM;
548
549	if (sk->sk_state == BT_CLOSED)
550		mask |= EPOLLHUP;
551
552	if (sk->sk_state == BT_CONNECT ||
553	    sk->sk_state == BT_CONNECT2 ||
554	    sk->sk_state == BT_CONFIG)
555		return mask;
556
557	if (!test_bit(BT_SK_SUSPEND, &bt_sk(sk)->flags) && sock_writeable(sk))
558		mask |= EPOLLOUT | EPOLLWRNORM | EPOLLWRBAND;
559	else
560		sk_set_bit(SOCKWQ_ASYNC_NOSPACE, sk);
561
562	return mask;
563}
564EXPORT_SYMBOL(bt_sock_poll);
565
566int bt_sock_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
567{
568	struct sock *sk = sock->sk;
569	struct sk_buff *skb;
570	long amount;
571	int err;
572
573	BT_DBG("sk %p cmd %x arg %lx", sk, cmd, arg);
574
575	switch (cmd) {
576	case TIOCOUTQ:
577		if (sk->sk_state == BT_LISTEN)
578			return -EINVAL;
579
580		amount = sk->sk_sndbuf - sk_wmem_alloc_get(sk);
581		if (amount < 0)
582			amount = 0;
583		err = put_user(amount, (int __user *)arg);
584		break;
585
586	case TIOCINQ:
587		if (sk->sk_state == BT_LISTEN)
588			return -EINVAL;
589
590		spin_lock(&sk->sk_receive_queue.lock);
591		skb = skb_peek(&sk->sk_receive_queue);
592		amount = skb ? skb->len : 0;
593		spin_unlock(&sk->sk_receive_queue.lock);
594
595		err = put_user(amount, (int __user *)arg);
596		break;
597
598	default:
599		err = -ENOIOCTLCMD;
600		break;
601	}
602
603	return err;
604}
605EXPORT_SYMBOL(bt_sock_ioctl);
606
607/* This function expects the sk lock to be held when called */
608int bt_sock_wait_state(struct sock *sk, int state, unsigned long timeo)
609{
610	DECLARE_WAITQUEUE(wait, current);
611	int err = 0;
612
613	BT_DBG("sk %p", sk);
614
615	add_wait_queue(sk_sleep(sk), &wait);
616	set_current_state(TASK_INTERRUPTIBLE);
617	while (sk->sk_state != state) {
618		if (!timeo) {
619			err = -EINPROGRESS;
620			break;
621		}
622
623		if (signal_pending(current)) {
624			err = sock_intr_errno(timeo);
625			break;
626		}
627
628		release_sock(sk);
629		timeo = schedule_timeout(timeo);
630		lock_sock(sk);
631		set_current_state(TASK_INTERRUPTIBLE);
632
633		err = sock_error(sk);
634		if (err)
635			break;
636	}
637	__set_current_state(TASK_RUNNING);
638	remove_wait_queue(sk_sleep(sk), &wait);
639	return err;
640}
641EXPORT_SYMBOL(bt_sock_wait_state);
642
643/* This function expects the sk lock to be held when called */
644int bt_sock_wait_ready(struct sock *sk, unsigned int msg_flags)
645{
646	DECLARE_WAITQUEUE(wait, current);
647	unsigned long timeo;
648	int err = 0;
649
650	BT_DBG("sk %p", sk);
651
652	timeo = sock_sndtimeo(sk, !!(msg_flags & MSG_DONTWAIT));
653
654	add_wait_queue(sk_sleep(sk), &wait);
655	set_current_state(TASK_INTERRUPTIBLE);
656	while (test_bit(BT_SK_SUSPEND, &bt_sk(sk)->flags)) {
657		if (!timeo) {
658			err = -EAGAIN;
659			break;
660		}
661
662		if (signal_pending(current)) {
663			err = sock_intr_errno(timeo);
664			break;
665		}
666
667		release_sock(sk);
668		timeo = schedule_timeout(timeo);
669		lock_sock(sk);
670		set_current_state(TASK_INTERRUPTIBLE);
671
672		err = sock_error(sk);
673		if (err)
674			break;
675	}
676	__set_current_state(TASK_RUNNING);
677	remove_wait_queue(sk_sleep(sk), &wait);
678
679	return err;
680}
681EXPORT_SYMBOL(bt_sock_wait_ready);
682
683#ifdef CONFIG_PROC_FS
684static void *bt_seq_start(struct seq_file *seq, loff_t *pos)
685	__acquires(seq->private->l->lock)
686{
687	struct bt_sock_list *l = pde_data(file_inode(seq->file));
688
689	read_lock(&l->lock);
690	return seq_hlist_start_head(&l->head, *pos);
691}
692
693static void *bt_seq_next(struct seq_file *seq, void *v, loff_t *pos)
694{
695	struct bt_sock_list *l = pde_data(file_inode(seq->file));
696
697	return seq_hlist_next(v, &l->head, pos);
698}
699
700static void bt_seq_stop(struct seq_file *seq, void *v)
701	__releases(seq->private->l->lock)
702{
703	struct bt_sock_list *l = pde_data(file_inode(seq->file));
704
705	read_unlock(&l->lock);
706}
707
708static int bt_seq_show(struct seq_file *seq, void *v)
709{
710	struct bt_sock_list *l = pde_data(file_inode(seq->file));
711
712	if (v == SEQ_START_TOKEN) {
713		seq_puts(seq, "sk               RefCnt Rmem   Wmem   User   Inode  Parent");
714
715		if (l->custom_seq_show) {
716			seq_putc(seq, ' ');
717			l->custom_seq_show(seq, v);
718		}
719
720		seq_putc(seq, '\n');
721	} else {
722		struct sock *sk = sk_entry(v);
723		struct bt_sock *bt = bt_sk(sk);
724
725		seq_printf(seq,
726			   "%pK %-6d %-6u %-6u %-6u %-6lu %-6lu",
727			   sk,
728			   refcount_read(&sk->sk_refcnt),
729			   sk_rmem_alloc_get(sk),
730			   sk_wmem_alloc_get(sk),
731			   from_kuid(seq_user_ns(seq), sock_i_uid(sk)),
732			   sock_i_ino(sk),
733			   bt->parent ? sock_i_ino(bt->parent) : 0LU);
734
735		if (l->custom_seq_show) {
736			seq_putc(seq, ' ');
737			l->custom_seq_show(seq, v);
738		}
739
740		seq_putc(seq, '\n');
741	}
742	return 0;
743}
744
745static const struct seq_operations bt_seq_ops = {
746	.start = bt_seq_start,
747	.next  = bt_seq_next,
748	.stop  = bt_seq_stop,
749	.show  = bt_seq_show,
750};
751
752int bt_procfs_init(struct net *net, const char *name,
753		   struct bt_sock_list *sk_list,
754		   int (*seq_show)(struct seq_file *, void *))
755{
756	sk_list->custom_seq_show = seq_show;
757
758	if (!proc_create_seq_data(name, 0, net->proc_net, &bt_seq_ops, sk_list))
759		return -ENOMEM;
760	return 0;
761}
762
763void bt_procfs_cleanup(struct net *net, const char *name)
764{
765	remove_proc_entry(name, net->proc_net);
766}
767#else
768int bt_procfs_init(struct net *net, const char *name,
769		   struct bt_sock_list *sk_list,
770		   int (*seq_show)(struct seq_file *, void *))
771{
772	return 0;
773}
774
775void bt_procfs_cleanup(struct net *net, const char *name)
776{
777}
778#endif
779EXPORT_SYMBOL(bt_procfs_init);
780EXPORT_SYMBOL(bt_procfs_cleanup);
781
782static const struct net_proto_family bt_sock_family_ops = {
783	.owner	= THIS_MODULE,
784	.family	= PF_BLUETOOTH,
785	.create	= bt_sock_create,
786};
787
788struct dentry *bt_debugfs;
789EXPORT_SYMBOL_GPL(bt_debugfs);
790
791#define VERSION __stringify(BT_SUBSYS_VERSION) "." \
792		__stringify(BT_SUBSYS_REVISION)
793
794static int __init bt_init(void)
795{
796	int err;
797
798	sock_skb_cb_check_size(sizeof(struct bt_skb_cb));
799
800	BT_INFO("Core ver %s", VERSION);
801
802	err = bt_selftest();
803	if (err < 0)
804		return err;
805
806	bt_debugfs = debugfs_create_dir("bluetooth", NULL);
807
808	bt_leds_init();
809
810	err = bt_sysfs_init();
811	if (err < 0)
812		goto cleanup_led;
813
814	err = sock_register(&bt_sock_family_ops);
815	if (err)
816		goto cleanup_sysfs;
817
818	BT_INFO("HCI device and connection manager initialized");
819
820	err = hci_sock_init();
821	if (err)
822		goto unregister_socket;
823
824	err = l2cap_init();
825	if (err)
826		goto cleanup_socket;
827
828	err = sco_init();
829	if (err)
830		goto cleanup_cap;
831
832	err = mgmt_init();
833	if (err)
834		goto cleanup_sco;
835
836	return 0;
837
838cleanup_sco:
839	sco_exit();
840cleanup_cap:
841	l2cap_exit();
842cleanup_socket:
843	hci_sock_cleanup();
844unregister_socket:
845	sock_unregister(PF_BLUETOOTH);
846cleanup_sysfs:
847	bt_sysfs_cleanup();
848cleanup_led:
849	bt_leds_cleanup();
850	debugfs_remove_recursive(bt_debugfs);
851	return err;
852}
853
854static void __exit bt_exit(void)
855{
856	iso_exit();
857
858	mgmt_exit();
859
860	sco_exit();
861
862	l2cap_exit();
863
864	hci_sock_cleanup();
865
866	sock_unregister(PF_BLUETOOTH);
867
868	bt_sysfs_cleanup();
869
870	bt_leds_cleanup();
871
872	debugfs_remove_recursive(bt_debugfs);
873}
874
875subsys_initcall(bt_init);
876module_exit(bt_exit);
877
878MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
879MODULE_DESCRIPTION("Bluetooth Core ver " VERSION);
880MODULE_VERSION(VERSION);
881MODULE_LICENSE("GPL");
882MODULE_ALIAS_NETPROTO(PF_BLUETOOTH);
v6.8
  1/*
  2   BlueZ - Bluetooth protocol stack for Linux
  3   Copyright (C) 2000-2001 Qualcomm Incorporated
  4
  5   Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
  6
  7   This program is free software; you can redistribute it and/or modify
  8   it under the terms of the GNU General Public License version 2 as
  9   published by the Free Software Foundation;
 10
 11   THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
 12   OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 13   FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
 14   IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
 15   CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
 16   WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 17   ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 18   OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 19
 20   ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
 21   COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
 22   SOFTWARE IS DISCLAIMED.
 23*/
 24
 25/* Bluetooth address family and sockets. */
 26
 27#include <linux/module.h>
 28#include <linux/debugfs.h>
 29#include <linux/stringify.h>
 30#include <linux/sched/signal.h>
 31
 32#include <asm/ioctls.h>
 33
 34#include <net/bluetooth/bluetooth.h>
 35#include <linux/proc_fs.h>
 36
 37#include "leds.h"
 38#include "selftest.h"
 39
 40/* Bluetooth sockets */
 41#define BT_MAX_PROTO	(BTPROTO_LAST + 1)
 42static const struct net_proto_family *bt_proto[BT_MAX_PROTO];
 43static DEFINE_RWLOCK(bt_proto_lock);
 44
 45static struct lock_class_key bt_lock_key[BT_MAX_PROTO];
 46static const char *const bt_key_strings[BT_MAX_PROTO] = {
 47	"sk_lock-AF_BLUETOOTH-BTPROTO_L2CAP",
 48	"sk_lock-AF_BLUETOOTH-BTPROTO_HCI",
 49	"sk_lock-AF_BLUETOOTH-BTPROTO_SCO",
 50	"sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM",
 51	"sk_lock-AF_BLUETOOTH-BTPROTO_BNEP",
 52	"sk_lock-AF_BLUETOOTH-BTPROTO_CMTP",
 53	"sk_lock-AF_BLUETOOTH-BTPROTO_HIDP",
 54	"sk_lock-AF_BLUETOOTH-BTPROTO_AVDTP",
 55	"sk_lock-AF_BLUETOOTH-BTPROTO_ISO",
 56};
 57
 58static struct lock_class_key bt_slock_key[BT_MAX_PROTO];
 59static const char *const bt_slock_key_strings[BT_MAX_PROTO] = {
 60	"slock-AF_BLUETOOTH-BTPROTO_L2CAP",
 61	"slock-AF_BLUETOOTH-BTPROTO_HCI",
 62	"slock-AF_BLUETOOTH-BTPROTO_SCO",
 63	"slock-AF_BLUETOOTH-BTPROTO_RFCOMM",
 64	"slock-AF_BLUETOOTH-BTPROTO_BNEP",
 65	"slock-AF_BLUETOOTH-BTPROTO_CMTP",
 66	"slock-AF_BLUETOOTH-BTPROTO_HIDP",
 67	"slock-AF_BLUETOOTH-BTPROTO_AVDTP",
 68	"slock-AF_BLUETOOTH-BTPROTO_ISO",
 69};
 70
 71void bt_sock_reclassify_lock(struct sock *sk, int proto)
 72{
 73	BUG_ON(!sk);
 74	BUG_ON(!sock_allow_reclassification(sk));
 75
 76	sock_lock_init_class_and_name(sk,
 77				      bt_slock_key_strings[proto], &bt_slock_key[proto],
 78				      bt_key_strings[proto], &bt_lock_key[proto]);
 79}
 80EXPORT_SYMBOL(bt_sock_reclassify_lock);
 81
 82int bt_sock_register(int proto, const struct net_proto_family *ops)
 83{
 84	int err = 0;
 85
 86	if (proto < 0 || proto >= BT_MAX_PROTO)
 87		return -EINVAL;
 88
 89	write_lock(&bt_proto_lock);
 90
 91	if (bt_proto[proto])
 92		err = -EEXIST;
 93	else
 94		bt_proto[proto] = ops;
 95
 96	write_unlock(&bt_proto_lock);
 97
 98	return err;
 99}
100EXPORT_SYMBOL(bt_sock_register);
101
102void bt_sock_unregister(int proto)
103{
104	if (proto < 0 || proto >= BT_MAX_PROTO)
105		return;
106
107	write_lock(&bt_proto_lock);
108	bt_proto[proto] = NULL;
109	write_unlock(&bt_proto_lock);
110}
111EXPORT_SYMBOL(bt_sock_unregister);
112
113static int bt_sock_create(struct net *net, struct socket *sock, int proto,
114			  int kern)
115{
116	int err;
117
118	if (net != &init_net)
119		return -EAFNOSUPPORT;
120
121	if (proto < 0 || proto >= BT_MAX_PROTO)
122		return -EINVAL;
123
124	if (!bt_proto[proto])
125		request_module("bt-proto-%d", proto);
126
127	err = -EPROTONOSUPPORT;
128
129	read_lock(&bt_proto_lock);
130
131	if (bt_proto[proto] && try_module_get(bt_proto[proto]->owner)) {
132		err = bt_proto[proto]->create(net, sock, proto, kern);
133		if (!err)
134			bt_sock_reclassify_lock(sock->sk, proto);
135		module_put(bt_proto[proto]->owner);
136	}
137
138	read_unlock(&bt_proto_lock);
139
140	return err;
141}
142
143struct sock *bt_sock_alloc(struct net *net, struct socket *sock,
144			   struct proto *prot, int proto, gfp_t prio, int kern)
145{
146	struct sock *sk;
147
148	sk = sk_alloc(net, PF_BLUETOOTH, prio, prot, kern);
149	if (!sk)
150		return NULL;
151
152	sock_init_data(sock, sk);
153	INIT_LIST_HEAD(&bt_sk(sk)->accept_q);
154
155	sock_reset_flag(sk, SOCK_ZAPPED);
156
157	sk->sk_protocol = proto;
158	sk->sk_state    = BT_OPEN;
159
160	/* Init peer information so it can be properly monitored */
161	if (!kern) {
162		spin_lock(&sk->sk_peer_lock);
163		sk->sk_peer_pid  = get_pid(task_tgid(current));
164		sk->sk_peer_cred = get_current_cred();
165		spin_unlock(&sk->sk_peer_lock);
166	}
167
168	return sk;
169}
170EXPORT_SYMBOL(bt_sock_alloc);
171
172void bt_sock_link(struct bt_sock_list *l, struct sock *sk)
173{
174	write_lock(&l->lock);
175	sk_add_node(sk, &l->head);
176	write_unlock(&l->lock);
177}
178EXPORT_SYMBOL(bt_sock_link);
179
180void bt_sock_unlink(struct bt_sock_list *l, struct sock *sk)
181{
182	write_lock(&l->lock);
183	sk_del_node_init(sk);
184	write_unlock(&l->lock);
185}
186EXPORT_SYMBOL(bt_sock_unlink);
187
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
188void bt_accept_enqueue(struct sock *parent, struct sock *sk, bool bh)
189{
190	const struct cred *old_cred;
191	struct pid *old_pid;
192
193	BT_DBG("parent %p, sk %p", parent, sk);
194
195	sock_hold(sk);
196
197	if (bh)
198		bh_lock_sock_nested(sk);
199	else
200		lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
201
202	list_add_tail(&bt_sk(sk)->accept_q, &bt_sk(parent)->accept_q);
203	bt_sk(sk)->parent = parent;
204
205	/* Copy credentials from parent since for incoming connections the
206	 * socket is allocated by the kernel.
207	 */
208	spin_lock(&sk->sk_peer_lock);
209	old_pid = sk->sk_peer_pid;
210	old_cred = sk->sk_peer_cred;
211	sk->sk_peer_pid = get_pid(parent->sk_peer_pid);
212	sk->sk_peer_cred = get_cred(parent->sk_peer_cred);
213	spin_unlock(&sk->sk_peer_lock);
214
215	put_pid(old_pid);
216	put_cred(old_cred);
217
218	if (bh)
219		bh_unlock_sock(sk);
220	else
221		release_sock(sk);
222
223	sk_acceptq_added(parent);
224}
225EXPORT_SYMBOL(bt_accept_enqueue);
226
227/* Calling function must hold the sk lock.
228 * bt_sk(sk)->parent must be non-NULL meaning sk is in the parent list.
229 */
230void bt_accept_unlink(struct sock *sk)
231{
232	BT_DBG("sk %p state %d", sk, sk->sk_state);
233
234	list_del_init(&bt_sk(sk)->accept_q);
235	sk_acceptq_removed(bt_sk(sk)->parent);
236	bt_sk(sk)->parent = NULL;
237	sock_put(sk);
238}
239EXPORT_SYMBOL(bt_accept_unlink);
240
241struct sock *bt_accept_dequeue(struct sock *parent, struct socket *newsock)
242{
243	struct bt_sock *s, *n;
244	struct sock *sk;
245
246	BT_DBG("parent %p", parent);
247
248restart:
249	list_for_each_entry_safe(s, n, &bt_sk(parent)->accept_q, accept_q) {
250		sk = (struct sock *)s;
251
252		/* Prevent early freeing of sk due to unlink and sock_kill */
253		sock_hold(sk);
254		lock_sock(sk);
255
256		/* Check sk has not already been unlinked via
257		 * bt_accept_unlink() due to serialisation caused by sk locking
258		 */
259		if (!bt_sk(sk)->parent) {
260			BT_DBG("sk %p, already unlinked", sk);
261			release_sock(sk);
262			sock_put(sk);
263
264			/* Restart the loop as sk is no longer in the list
265			 * and also avoid a potential infinite loop because
266			 * list_for_each_entry_safe() is not thread safe.
267			 */
268			goto restart;
269		}
270
271		/* sk is safely in the parent list so reduce reference count */
272		sock_put(sk);
273
274		/* FIXME: Is this check still needed */
275		if (sk->sk_state == BT_CLOSED) {
276			bt_accept_unlink(sk);
277			release_sock(sk);
278			continue;
279		}
280
281		if (sk->sk_state == BT_CONNECTED || !newsock ||
282		    test_bit(BT_SK_DEFER_SETUP, &bt_sk(parent)->flags)) {
283			bt_accept_unlink(sk);
284			if (newsock)
285				sock_graft(sk, newsock);
286
287			release_sock(sk);
288			return sk;
289		}
290
291		release_sock(sk);
292	}
293
294	return NULL;
295}
296EXPORT_SYMBOL(bt_accept_dequeue);
297
298int bt_sock_recvmsg(struct socket *sock, struct msghdr *msg, size_t len,
299		    int flags)
300{
301	struct sock *sk = sock->sk;
302	struct sk_buff *skb;
303	size_t copied;
304	size_t skblen;
305	int err;
306
307	BT_DBG("sock %p sk %p len %zu", sock, sk, len);
308
309	if (flags & MSG_OOB)
310		return -EOPNOTSUPP;
311
312	lock_sock(sk);
313
314	skb = skb_recv_datagram(sk, flags, &err);
315	if (!skb) {
316		if (sk->sk_shutdown & RCV_SHUTDOWN)
317			err = 0;
318
319		release_sock(sk);
320		return err;
321	}
322
323	skblen = skb->len;
324	copied = skb->len;
325	if (len < copied) {
326		msg->msg_flags |= MSG_TRUNC;
327		copied = len;
328	}
329
330	skb_reset_transport_header(skb);
331	err = skb_copy_datagram_msg(skb, 0, msg, copied);
332	if (err == 0) {
333		sock_recv_cmsgs(msg, sk, skb);
334
335		if (msg->msg_name && bt_sk(sk)->skb_msg_name)
336			bt_sk(sk)->skb_msg_name(skb, msg->msg_name,
337						&msg->msg_namelen);
338
339		if (test_bit(BT_SK_PKT_STATUS, &bt_sk(sk)->flags)) {
340			u8 pkt_status = hci_skb_pkt_status(skb);
341
342			put_cmsg(msg, SOL_BLUETOOTH, BT_SCM_PKT_STATUS,
343				 sizeof(pkt_status), &pkt_status);
344		}
345	}
346
347	skb_free_datagram(sk, skb);
348
349	release_sock(sk);
350
351	if (flags & MSG_TRUNC)
352		copied = skblen;
353
354	return err ? : copied;
355}
356EXPORT_SYMBOL(bt_sock_recvmsg);
357
358static long bt_sock_data_wait(struct sock *sk, long timeo)
359{
360	DECLARE_WAITQUEUE(wait, current);
361
362	add_wait_queue(sk_sleep(sk), &wait);
363	for (;;) {
364		set_current_state(TASK_INTERRUPTIBLE);
365
366		if (!skb_queue_empty(&sk->sk_receive_queue))
367			break;
368
369		if (sk->sk_err || (sk->sk_shutdown & RCV_SHUTDOWN))
370			break;
371
372		if (signal_pending(current) || !timeo)
373			break;
374
375		sk_set_bit(SOCKWQ_ASYNC_WAITDATA, sk);
376		release_sock(sk);
377		timeo = schedule_timeout(timeo);
378		lock_sock(sk);
379		sk_clear_bit(SOCKWQ_ASYNC_WAITDATA, sk);
380	}
381
382	__set_current_state(TASK_RUNNING);
383	remove_wait_queue(sk_sleep(sk), &wait);
384	return timeo;
385}
386
387int bt_sock_stream_recvmsg(struct socket *sock, struct msghdr *msg,
388			   size_t size, int flags)
389{
390	struct sock *sk = sock->sk;
391	int err = 0;
392	size_t target, copied = 0;
393	long timeo;
394
395	if (flags & MSG_OOB)
396		return -EOPNOTSUPP;
397
398	BT_DBG("sk %p size %zu", sk, size);
399
400	lock_sock(sk);
401
402	target = sock_rcvlowat(sk, flags & MSG_WAITALL, size);
403	timeo  = sock_rcvtimeo(sk, flags & MSG_DONTWAIT);
404
405	do {
406		struct sk_buff *skb;
407		int chunk;
408
409		skb = skb_dequeue(&sk->sk_receive_queue);
410		if (!skb) {
411			if (copied >= target)
412				break;
413
414			err = sock_error(sk);
415			if (err)
416				break;
417			if (sk->sk_shutdown & RCV_SHUTDOWN)
418				break;
419
420			err = -EAGAIN;
421			if (!timeo)
422				break;
423
424			timeo = bt_sock_data_wait(sk, timeo);
425
426			if (signal_pending(current)) {
427				err = sock_intr_errno(timeo);
428				goto out;
429			}
430			continue;
431		}
432
433		chunk = min_t(unsigned int, skb->len, size);
434		if (skb_copy_datagram_msg(skb, 0, msg, chunk)) {
435			skb_queue_head(&sk->sk_receive_queue, skb);
436			if (!copied)
437				copied = -EFAULT;
438			break;
439		}
440		copied += chunk;
441		size   -= chunk;
442
443		sock_recv_cmsgs(msg, sk, skb);
444
445		if (!(flags & MSG_PEEK)) {
446			int skb_len = skb_headlen(skb);
447
448			if (chunk <= skb_len) {
449				__skb_pull(skb, chunk);
450			} else {
451				struct sk_buff *frag;
452
453				__skb_pull(skb, skb_len);
454				chunk -= skb_len;
455
456				skb_walk_frags(skb, frag) {
457					if (chunk <= frag->len) {
458						/* Pulling partial data */
459						skb->len -= chunk;
460						skb->data_len -= chunk;
461						__skb_pull(frag, chunk);
462						break;
463					} else if (frag->len) {
464						/* Pulling all frag data */
465						chunk -= frag->len;
466						skb->len -= frag->len;
467						skb->data_len -= frag->len;
468						__skb_pull(frag, frag->len);
469					}
470				}
471			}
472
473			if (skb->len) {
474				skb_queue_head(&sk->sk_receive_queue, skb);
475				break;
476			}
477			kfree_skb(skb);
478
479		} else {
480			/* put message back and return */
481			skb_queue_head(&sk->sk_receive_queue, skb);
482			break;
483		}
484	} while (size);
485
486out:
487	release_sock(sk);
488	return copied ? : err;
489}
490EXPORT_SYMBOL(bt_sock_stream_recvmsg);
491
492static inline __poll_t bt_accept_poll(struct sock *parent)
493{
494	struct bt_sock *s, *n;
495	struct sock *sk;
496
497	list_for_each_entry_safe(s, n, &bt_sk(parent)->accept_q, accept_q) {
498		sk = (struct sock *)s;
499		if (sk->sk_state == BT_CONNECTED ||
500		    (test_bit(BT_SK_DEFER_SETUP, &bt_sk(parent)->flags) &&
501		     sk->sk_state == BT_CONNECT2))
502			return EPOLLIN | EPOLLRDNORM;
503	}
504
505	return 0;
506}
507
508__poll_t bt_sock_poll(struct file *file, struct socket *sock,
509		      poll_table *wait)
510{
511	struct sock *sk = sock->sk;
512	__poll_t mask = 0;
513
514	poll_wait(file, sk_sleep(sk), wait);
515
516	if (sk->sk_state == BT_LISTEN)
517		return bt_accept_poll(sk);
518
519	if (sk->sk_err || !skb_queue_empty_lockless(&sk->sk_error_queue))
520		mask |= EPOLLERR |
521			(sock_flag(sk, SOCK_SELECT_ERR_QUEUE) ? EPOLLPRI : 0);
522
523	if (sk->sk_shutdown & RCV_SHUTDOWN)
524		mask |= EPOLLRDHUP | EPOLLIN | EPOLLRDNORM;
525
526	if (sk->sk_shutdown == SHUTDOWN_MASK)
527		mask |= EPOLLHUP;
528
529	if (!skb_queue_empty_lockless(&sk->sk_receive_queue))
530		mask |= EPOLLIN | EPOLLRDNORM;
531
532	if (sk->sk_state == BT_CLOSED)
533		mask |= EPOLLHUP;
534
535	if (sk->sk_state == BT_CONNECT ||
536	    sk->sk_state == BT_CONNECT2 ||
537	    sk->sk_state == BT_CONFIG)
538		return mask;
539
540	if (!test_bit(BT_SK_SUSPEND, &bt_sk(sk)->flags) && sock_writeable(sk))
541		mask |= EPOLLOUT | EPOLLWRNORM | EPOLLWRBAND;
542	else
543		sk_set_bit(SOCKWQ_ASYNC_NOSPACE, sk);
544
545	return mask;
546}
547EXPORT_SYMBOL(bt_sock_poll);
548
549int bt_sock_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
550{
551	struct sock *sk = sock->sk;
552	struct sk_buff *skb;
553	long amount;
554	int err;
555
556	BT_DBG("sk %p cmd %x arg %lx", sk, cmd, arg);
557
558	switch (cmd) {
559	case TIOCOUTQ:
560		if (sk->sk_state == BT_LISTEN)
561			return -EINVAL;
562
563		amount = sk->sk_sndbuf - sk_wmem_alloc_get(sk);
564		if (amount < 0)
565			amount = 0;
566		err = put_user(amount, (int __user *)arg);
567		break;
568
569	case TIOCINQ:
570		if (sk->sk_state == BT_LISTEN)
571			return -EINVAL;
572
573		lock_sock(sk);
574		skb = skb_peek(&sk->sk_receive_queue);
575		amount = skb ? skb->len : 0;
576		release_sock(sk);
 
577		err = put_user(amount, (int __user *)arg);
578		break;
579
580	default:
581		err = -ENOIOCTLCMD;
582		break;
583	}
584
585	return err;
586}
587EXPORT_SYMBOL(bt_sock_ioctl);
588
589/* This function expects the sk lock to be held when called */
590int bt_sock_wait_state(struct sock *sk, int state, unsigned long timeo)
591{
592	DECLARE_WAITQUEUE(wait, current);
593	int err = 0;
594
595	BT_DBG("sk %p", sk);
596
597	add_wait_queue(sk_sleep(sk), &wait);
598	set_current_state(TASK_INTERRUPTIBLE);
599	while (sk->sk_state != state) {
600		if (!timeo) {
601			err = -EINPROGRESS;
602			break;
603		}
604
605		if (signal_pending(current)) {
606			err = sock_intr_errno(timeo);
607			break;
608		}
609
610		release_sock(sk);
611		timeo = schedule_timeout(timeo);
612		lock_sock(sk);
613		set_current_state(TASK_INTERRUPTIBLE);
614
615		err = sock_error(sk);
616		if (err)
617			break;
618	}
619	__set_current_state(TASK_RUNNING);
620	remove_wait_queue(sk_sleep(sk), &wait);
621	return err;
622}
623EXPORT_SYMBOL(bt_sock_wait_state);
624
625/* This function expects the sk lock to be held when called */
626int bt_sock_wait_ready(struct sock *sk, unsigned int msg_flags)
627{
628	DECLARE_WAITQUEUE(wait, current);
629	unsigned long timeo;
630	int err = 0;
631
632	BT_DBG("sk %p", sk);
633
634	timeo = sock_sndtimeo(sk, !!(msg_flags & MSG_DONTWAIT));
635
636	add_wait_queue(sk_sleep(sk), &wait);
637	set_current_state(TASK_INTERRUPTIBLE);
638	while (test_bit(BT_SK_SUSPEND, &bt_sk(sk)->flags)) {
639		if (!timeo) {
640			err = -EAGAIN;
641			break;
642		}
643
644		if (signal_pending(current)) {
645			err = sock_intr_errno(timeo);
646			break;
647		}
648
649		release_sock(sk);
650		timeo = schedule_timeout(timeo);
651		lock_sock(sk);
652		set_current_state(TASK_INTERRUPTIBLE);
653
654		err = sock_error(sk);
655		if (err)
656			break;
657	}
658	__set_current_state(TASK_RUNNING);
659	remove_wait_queue(sk_sleep(sk), &wait);
660
661	return err;
662}
663EXPORT_SYMBOL(bt_sock_wait_ready);
664
665#ifdef CONFIG_PROC_FS
666static void *bt_seq_start(struct seq_file *seq, loff_t *pos)
667	__acquires(seq->private->l->lock)
668{
669	struct bt_sock_list *l = pde_data(file_inode(seq->file));
670
671	read_lock(&l->lock);
672	return seq_hlist_start_head(&l->head, *pos);
673}
674
675static void *bt_seq_next(struct seq_file *seq, void *v, loff_t *pos)
676{
677	struct bt_sock_list *l = pde_data(file_inode(seq->file));
678
679	return seq_hlist_next(v, &l->head, pos);
680}
681
682static void bt_seq_stop(struct seq_file *seq, void *v)
683	__releases(seq->private->l->lock)
684{
685	struct bt_sock_list *l = pde_data(file_inode(seq->file));
686
687	read_unlock(&l->lock);
688}
689
690static int bt_seq_show(struct seq_file *seq, void *v)
691{
692	struct bt_sock_list *l = pde_data(file_inode(seq->file));
693
694	if (v == SEQ_START_TOKEN) {
695		seq_puts(seq, "sk               RefCnt Rmem   Wmem   User   Inode  Parent");
696
697		if (l->custom_seq_show) {
698			seq_putc(seq, ' ');
699			l->custom_seq_show(seq, v);
700		}
701
702		seq_putc(seq, '\n');
703	} else {
704		struct sock *sk = sk_entry(v);
705		struct bt_sock *bt = bt_sk(sk);
706
707		seq_printf(seq,
708			   "%pK %-6d %-6u %-6u %-6u %-6lu %-6lu",
709			   sk,
710			   refcount_read(&sk->sk_refcnt),
711			   sk_rmem_alloc_get(sk),
712			   sk_wmem_alloc_get(sk),
713			   from_kuid(seq_user_ns(seq), sock_i_uid(sk)),
714			   sock_i_ino(sk),
715			   bt->parent ? sock_i_ino(bt->parent) : 0LU);
716
717		if (l->custom_seq_show) {
718			seq_putc(seq, ' ');
719			l->custom_seq_show(seq, v);
720		}
721
722		seq_putc(seq, '\n');
723	}
724	return 0;
725}
726
727static const struct seq_operations bt_seq_ops = {
728	.start = bt_seq_start,
729	.next  = bt_seq_next,
730	.stop  = bt_seq_stop,
731	.show  = bt_seq_show,
732};
733
734int bt_procfs_init(struct net *net, const char *name,
735		   struct bt_sock_list *sk_list,
736		   int (*seq_show)(struct seq_file *, void *))
737{
738	sk_list->custom_seq_show = seq_show;
739
740	if (!proc_create_seq_data(name, 0, net->proc_net, &bt_seq_ops, sk_list))
741		return -ENOMEM;
742	return 0;
743}
744
745void bt_procfs_cleanup(struct net *net, const char *name)
746{
747	remove_proc_entry(name, net->proc_net);
748}
749#else
750int bt_procfs_init(struct net *net, const char *name,
751		   struct bt_sock_list *sk_list,
752		   int (*seq_show)(struct seq_file *, void *))
753{
754	return 0;
755}
756
757void bt_procfs_cleanup(struct net *net, const char *name)
758{
759}
760#endif
761EXPORT_SYMBOL(bt_procfs_init);
762EXPORT_SYMBOL(bt_procfs_cleanup);
763
764static const struct net_proto_family bt_sock_family_ops = {
765	.owner	= THIS_MODULE,
766	.family	= PF_BLUETOOTH,
767	.create	= bt_sock_create,
768};
769
770struct dentry *bt_debugfs;
771EXPORT_SYMBOL_GPL(bt_debugfs);
772
773#define VERSION __stringify(BT_SUBSYS_VERSION) "." \
774		__stringify(BT_SUBSYS_REVISION)
775
776static int __init bt_init(void)
777{
778	int err;
779
780	sock_skb_cb_check_size(sizeof(struct bt_skb_cb));
781
782	BT_INFO("Core ver %s", VERSION);
783
784	err = bt_selftest();
785	if (err < 0)
786		return err;
787
788	bt_debugfs = debugfs_create_dir("bluetooth", NULL);
789
790	bt_leds_init();
791
792	err = bt_sysfs_init();
793	if (err < 0)
794		goto cleanup_led;
795
796	err = sock_register(&bt_sock_family_ops);
797	if (err)
798		goto cleanup_sysfs;
799
800	BT_INFO("HCI device and connection manager initialized");
801
802	err = hci_sock_init();
803	if (err)
804		goto unregister_socket;
805
806	err = l2cap_init();
807	if (err)
808		goto cleanup_socket;
809
810	err = sco_init();
811	if (err)
812		goto cleanup_cap;
813
814	err = mgmt_init();
815	if (err)
816		goto cleanup_sco;
817
818	return 0;
819
820cleanup_sco:
821	sco_exit();
822cleanup_cap:
823	l2cap_exit();
824cleanup_socket:
825	hci_sock_cleanup();
826unregister_socket:
827	sock_unregister(PF_BLUETOOTH);
828cleanup_sysfs:
829	bt_sysfs_cleanup();
830cleanup_led:
831	bt_leds_cleanup();
 
832	return err;
833}
834
835static void __exit bt_exit(void)
836{
 
 
837	mgmt_exit();
838
839	sco_exit();
840
841	l2cap_exit();
842
843	hci_sock_cleanup();
844
845	sock_unregister(PF_BLUETOOTH);
846
847	bt_sysfs_cleanup();
848
849	bt_leds_cleanup();
850
851	debugfs_remove_recursive(bt_debugfs);
852}
853
854subsys_initcall(bt_init);
855module_exit(bt_exit);
856
857MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
858MODULE_DESCRIPTION("Bluetooth Core ver " VERSION);
859MODULE_VERSION(VERSION);
860MODULE_LICENSE("GPL");
861MODULE_ALIAS_NETPROTO(PF_BLUETOOTH);