include/net/bluetooth/hci_core.h

   1 /*
   2    BlueZ - Bluetooth protocol stack for Linux
   3    Copyright (c) 2000-2001, 2010, Code Aurora Forum. All rights reserved.
   4
   5    Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
   6
   7    This program is free software; you can redistribute it and/or modify
   8    it under the terms of the GNU General Public License version 2 as
   9    published by the Free Software Foundation;
  10
  11    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
  12    OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  13    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
  14    IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
  15    CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
  16    WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  17    ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  18    OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  19
  20    ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
  21    COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
  22    SOFTWARE IS DISCLAIMED.
  23 */
  24
  25 #ifndef __HCI_CORE_H
  26 #define __HCI_CORE_H
  27
  28 #include <net/bluetooth/hci.h>
  29 #include <net/bluetooth/hci_sock.h>
  30
  31 /* HCI priority */
  32 #define HCI_PRIO_MAX    7
  33
  34 /* HCI Core structures */
  35 struct inquiry_data {
  36         bdaddr_t        bdaddr;
  37         __u8            pscan_rep_mode;
  38         __u8            pscan_period_mode;
  39         __u8            pscan_mode;
  40         __u8            dev_class[3];
  41         __le16          clock_offset;
  42         __s8            rssi;
  43         __u8            ssp_mode;
  44 };
  45
  46 struct inquiry_entry {
  47         struct list_head        all;            /* inq_cache.all */
  48         struct list_head        list;           /* unknown or resolve */
  49         enum {
  50                 NAME_NOT_KNOWN,
  51                 NAME_NEEDED,
  52                 NAME_PENDING,
  53                 NAME_KNOWN,
  54         } name_state;
  55         __u32                   timestamp;
  56         struct inquiry_data     data;
  57 };
  58
  59 struct discovery_state {
  60         int                     type;
  61         enum {
  62                 DISCOVERY_STOPPED,
  63                 DISCOVERY_STARTING,
  64                 DISCOVERY_FINDING,
  65                 DISCOVERY_RESOLVING,
  66                 DISCOVERY_STOPPING,
  67         } state;
  68         struct list_head        all;    /* All devices found during inquiry */
  69         struct list_head        unknown;        /* Name state not known */
  70         struct list_head        resolve;        /* Name needs to be resolved */
  71         __u32                   timestamp;
  72         bdaddr_t                last_adv_addr;
  73         u8                      last_adv_addr_type;
  74         s8                      last_adv_rssi;
  75         u32                     last_adv_flags;
  76         u8                      last_adv_data[HCI_MAX_AD_LENGTH];
  77         u8                      last_adv_data_len;
  78         bool                    report_invalid_rssi;
  79         bool                    result_filtering;
  80         bool                    limited;
  81         s8                      rssi;
  82         u16                     uuid_count;
  83         u8                      (*uuids)[16];
  84         unsigned long           scan_start;
  85         unsigned long           scan_duration;
  86 };
  87
  88 struct hci_conn_hash {
  89         struct list_head list;
  90         unsigned int     acl_num;
  91         unsigned int     amp_num;
  92         unsigned int     sco_num;
  93         unsigned int     le_num;
  94         unsigned int     le_num_slave;
  95 };
  96
  97 struct bdaddr_list {
  98         struct list_head list;
  99         bdaddr_t bdaddr;
 100         u8 bdaddr_type;
 101 };
 102
 103 struct bt_uuid {
 104         struct list_head list;
 105         u8 uuid[16];
 106         u8 size;
 107         u8 svc_hint;
 108 };
 109
 110 struct smp_csrk {
 111         bdaddr_t bdaddr;
 112         u8 bdaddr_type;
 113         u8 type;
 114         u8 val[16];
 115 };
 116
 117 struct smp_ltk {
 118         struct list_head list;
 119         struct rcu_head rcu;
 120         bdaddr_t bdaddr;
 121         u8 bdaddr_type;
 122         u8 authenticated;
 123         u8 type;
 124         u8 enc_size;
 125         __le16 ediv;
 126         __le64 rand;
 127         u8 val[16];
 128 };
 129
 130 struct smp_irk {
 131         struct list_head list;
 132         struct rcu_head rcu;
 133         bdaddr_t rpa;
 134         bdaddr_t bdaddr;
 135         u8 addr_type;
 136         u8 val[16];
 137 };
 138
 139 struct link_key {
 140         struct list_head list;
 141         struct rcu_head rcu;
 142         bdaddr_t bdaddr;
 143         u8 type;
 144         u8 val[HCI_LINK_KEY_SIZE];
 145         u8 pin_len;
 146 };
 147
 148 struct oob_data {
 149         struct list_head list;
 150         bdaddr_t bdaddr;
 151         u8 bdaddr_type;
 152         u8 present;
 153         u8 hash192[16];
 154         u8 rand192[16];
 155         u8 hash256[16];
 156         u8 rand256[16];
 157 };
 158
 159 struct adv_info {
 160         struct list_head list;
 161         bool pending;
 162         __u8    instance;
 163         __u32   flags;
 164         __u16   timeout;
 165         __u16   remaining_time;
 166         __u16   duration;
 167         __u16   adv_data_len;
 168         __u8    adv_data[HCI_MAX_AD_LENGTH];
 169         __u16   scan_rsp_len;
 170         __u8    scan_rsp_data[HCI_MAX_AD_LENGTH];
 171 };
 172
 173 #define HCI_MAX_ADV_INSTANCES           5
 174 #define HCI_DEFAULT_ADV_DURATION        2
 175
 176 #define HCI_MAX_SHORT_NAME_LENGTH       10
 177
 178 /* Default LE RPA expiry time, 15 minutes */
 179 #define HCI_DEFAULT_RPA_TIMEOUT         (15 * 60)
 180
 181 /* Default min/max age of connection information (1s/3s) */
 182 #define DEFAULT_CONN_INFO_MIN_AGE       1000
 183 #define DEFAULT_CONN_INFO_MAX_AGE       3000
 184
 185 struct amp_assoc {
 186         __u16   len;
 187         __u16   offset;
 188         __u16   rem_len;
 189         __u16   len_so_far;
 190         __u8    data[HCI_MAX_AMP_ASSOC_SIZE];
 191 };
 192
 193 #define HCI_MAX_PAGES   3
 194
 195 struct hci_dev {
 196         struct list_head list;
 197         struct mutex    lock;
 198
 199         char            name[8];
 200         unsigned long   flags;
 201         __u16           id;
 202         __u8            bus;
 203         __u8            dev_type;
 204         bdaddr_t        bdaddr;
 205         bdaddr_t        setup_addr;
 206         bdaddr_t        public_addr;
 207         bdaddr_t        random_addr;
 208         bdaddr_t        static_addr;
 209         __u8            adv_addr_type;
 210         __u8            dev_name[HCI_MAX_NAME_LENGTH];
 211         __u8            short_name[HCI_MAX_SHORT_NAME_LENGTH];
 212         __u8            eir[HCI_MAX_EIR_LENGTH];
 213         __u8            dev_class[3];
 214         __u8            major_class;
 215         __u8            minor_class;
 216         __u8            max_page;
 217         __u8            features[HCI_MAX_PAGES][8];
 218         __u8            le_features[8];
 219         __u8            le_white_list_size;
 220         __u8            le_states[8];
 221         __u8            commands[64];
 222         __u8            hci_ver;
 223         __u16           hci_rev;
 224         __u8            lmp_ver;
 225         __u16           manufacturer;
 226         __u16           lmp_subver;
 227         __u16           voice_setting;
 228         __u8            num_iac;
 229         __u8            stored_max_keys;
 230         __u8            stored_num_keys;
 231         __u8            io_capability;
 232         __s8            inq_tx_power;
 233         __u16           page_scan_interval;
 234         __u16           page_scan_window;
 235         __u8            page_scan_type;
 236         __u8            le_adv_channel_map;
 237         __u16           le_adv_min_interval;
 238         __u16           le_adv_max_interval;
 239         __u8            le_scan_type;
 240         __u16           le_scan_interval;
 241         __u16           le_scan_window;
 242         __u16           le_conn_min_interval;
 243         __u16           le_conn_max_interval;
 244         __u16           le_conn_latency;
 245         __u16           le_supv_timeout;
 246         __u16           le_def_tx_len;
 247         __u16           le_def_tx_time;
 248         __u16           le_max_tx_len;
 249         __u16           le_max_tx_time;
 250         __u16           le_max_rx_len;
 251         __u16           le_max_rx_time;
 252         __u16           discov_interleaved_timeout;
 253         __u16           conn_info_min_age;
 254         __u16           conn_info_max_age;
 255         __u8            ssp_debug_mode;
 256         __u8            hw_error_code;
 257         __u32           clock;
 258
 259         __u16           devid_source;
 260         __u16           devid_vendor;
 261         __u16           devid_product;
 262         __u16           devid_version;
 263
 264         __u16           pkt_type;
 265         __u16           esco_type;
 266         __u16           link_policy;
 267         __u16           link_mode;
 268
 269         __u32           idle_timeout;
 270         __u16           sniff_min_interval;
 271         __u16           sniff_max_interval;
 272
 273         __u8            amp_status;
 274         __u32           amp_total_bw;
 275         __u32           amp_max_bw;
 276         __u32           amp_min_latency;
 277         __u32           amp_max_pdu;
 278         __u8            amp_type;
 279         __u16           amp_pal_cap;
 280         __u16           amp_assoc_size;
 281         __u32           amp_max_flush_to;
 282         __u32           amp_be_flush_to;
 283
 284         struct amp_assoc        loc_assoc;
 285
 286         __u8            flow_ctl_mode;
 287
 288         unsigned int    auto_accept_delay;
 289
 290         unsigned long   quirks;
 291
 292         atomic_t        cmd_cnt;
 293         unsigned int    acl_cnt;
 294         unsigned int    sco_cnt;
 295         unsigned int    le_cnt;
 296
 297         unsigned int    acl_mtu;
 298         unsigned int    sco_mtu;
 299         unsigned int    le_mtu;
 300         unsigned int    acl_pkts;
 301         unsigned int    sco_pkts;
 302         unsigned int    le_pkts;
 303
 304         __u16           block_len;
 305         __u16           block_mtu;
 306         __u16           num_blocks;
 307         __u16           block_cnt;
 308
 309         unsigned long   acl_last_tx;
 310         unsigned long   sco_last_tx;
 311         unsigned long   le_last_tx;
 312
 313         struct workqueue_struct *workqueue;
 314         struct workqueue_struct *req_workqueue;
 315
 316         struct work_struct      power_on;
 317         struct delayed_work     power_off;
 318         struct work_struct      error_reset;
 319
 320         __u16                   discov_timeout;
 321         struct delayed_work     discov_off;
 322
 323         struct delayed_work     service_cache;
 324
 325         struct delayed_work     cmd_timer;
 326
 327         struct work_struct      rx_work;
 328         struct work_struct      cmd_work;
 329         struct work_struct      tx_work;
 330
 331         struct work_struct      discov_update;
 332         struct work_struct      bg_scan_update;
 333         struct work_struct      scan_update;
 334         struct work_struct      connectable_update;
 335         struct work_struct      discoverable_update;
 336         struct delayed_work     le_scan_disable;
 337         struct delayed_work     le_scan_restart;
 338
 339         struct sk_buff_head     rx_q;
 340         struct sk_buff_head     raw_q;
 341         struct sk_buff_head     cmd_q;
 342
 343         struct sk_buff          *sent_cmd;
 344
 345         struct mutex            req_lock;
 346         wait_queue_head_t       req_wait_q;
 347         __u32                   req_status;
 348         __u32                   req_result;
 349         struct sk_buff          *req_skb;
 350
 351         void                    *smp_data;
 352         void                    *smp_bredr_data;
 353
 354         struct discovery_state  discovery;
 355         struct hci_conn_hash    conn_hash;
 356
 357         struct list_head        mgmt_pending;
 358         struct list_head        blacklist;
 359         struct list_head        whitelist;
 360         struct list_head        uuids;
 361         struct list_head        link_keys;
 362         struct list_head        long_term_keys;
 363         struct list_head        identity_resolving_keys;
 364         struct list_head        remote_oob_data;
 365         struct list_head        le_white_list;
 366         struct list_head        le_conn_params;
 367         struct list_head        pend_le_conns;
 368         struct list_head        pend_le_reports;
 369
 370         struct hci_dev_stats    stat;
 371
 372         atomic_t                promisc;
 373
 374         struct dentry           *debugfs;
 375
 376         struct device           dev;
 377
 378         struct rfkill           *rfkill;
 379
 380         DECLARE_BITMAP(dev_flags, __HCI_NUM_FLAGS);
 381
 382         __s8                    adv_tx_power;
 383         __u8                    adv_data[HCI_MAX_AD_LENGTH];
 384         __u8                    adv_data_len;
 385         __u8                    scan_rsp_data[HCI_MAX_AD_LENGTH];
 386         __u8                    scan_rsp_data_len;
 387
 388         struct list_head        adv_instances;
 389         unsigned int            adv_instance_cnt;
 390         __u8                    cur_adv_instance;
 391         __u16                   adv_instance_timeout;
 392         struct delayed_work     adv_instance_expire;
 393
 394         __u8                    irk[16];
 395         __u32                   rpa_timeout;
 396         struct delayed_work     rpa_expired;
 397         bdaddr_t                rpa;
 398
 399         int (*open)(struct hci_dev *hdev);
 400         int (*close)(struct hci_dev *hdev);
 401         int (*flush)(struct hci_dev *hdev);
 402         int (*setup)(struct hci_dev *hdev);
 403         int (*shutdown)(struct hci_dev *hdev);
 404         int (*send)(struct hci_dev *hdev, struct sk_buff *skb);
 405         void (*notify)(struct hci_dev *hdev, unsigned int evt);
 406         void (*hw_error)(struct hci_dev *hdev, u8 code);
 407         int (*post_init)(struct hci_dev *hdev);
 408         int (*set_diag)(struct hci_dev *hdev, bool enable);
 409         int (*set_bdaddr)(struct hci_dev *hdev, const bdaddr_t *bdaddr);
 410 };
 411
 412 #define HCI_PHY_HANDLE(handle)  (handle & 0xff)
 413
 414 struct hci_conn {
 415         struct list_head list;
 416
 417         atomic_t        refcnt;
 418
 419         bdaddr_t        dst;
 420         __u8            dst_type;
 421         bdaddr_t        src;
 422         __u8            src_type;
 423         bdaddr_t        init_addr;
 424         __u8            init_addr_type;
 425         bdaddr_t        resp_addr;
 426         __u8            resp_addr_type;
 427         __u16           handle;
 428         __u16           state;
 429         __u8            mode;
 430         __u8            type;
 431         __u8            role;
 432         bool            out;
 433         __u8            attempt;
 434         __u8            dev_class[3];
 435         __u8            features[HCI_MAX_PAGES][8];
 436         __u16           pkt_type;
 437         __u16           link_policy;
 438         __u8            key_type;
 439         __u8            auth_type;
 440         __u8            sec_level;
 441         __u8            pending_sec_level;
 442         __u8            pin_length;
 443         __u8            enc_key_size;
 444         __u8            io_capability;
 445         __u32           passkey_notify;
 446         __u8            passkey_entered;
 447         __u16           disc_timeout;
 448         __u16           conn_timeout;
 449         __u16           setting;
 450         __u16           le_conn_min_interval;
 451         __u16           le_conn_max_interval;
 452         __u16           le_conn_interval;
 453         __u16           le_conn_latency;
 454         __u16           le_supv_timeout;
 455         __u8            le_adv_data[HCI_MAX_AD_LENGTH];
 456         __u8            le_adv_data_len;
 457         __s8            rssi;
 458         __s8            tx_power;
 459         __s8            max_tx_power;
 460         unsigned long   flags;
 461
 462         __u32           clock;
 463         __u16           clock_accuracy;
 464
 465         unsigned long   conn_info_timestamp;
 466
 467         __u8            remote_cap;
 468         __u8            remote_auth;
 469         __u8            remote_id;
 470
 471         unsigned int    sent;
 472
 473         struct sk_buff_head data_q;
 474         struct list_head chan_list;
 475
 476         struct delayed_work disc_work;
 477         struct delayed_work auto_accept_work;
 478         struct delayed_work idle_work;
 479         struct delayed_work le_conn_timeout;
 480         struct work_struct  le_scan_cleanup;
 481
 482         struct device   dev;
 483         struct dentry   *debugfs;
 484
 485         struct hci_dev  *hdev;
 486         void            *l2cap_data;
 487         void            *sco_data;
 488         struct amp_mgr  *amp_mgr;
 489
 490         struct hci_conn *link;
 491
 492         void (*connect_cfm_cb)  (struct hci_conn *conn, u8 status);
 493         void (*security_cfm_cb) (struct hci_conn *conn, u8 status);
 494         void (*disconn_cfm_cb)  (struct hci_conn *conn, u8 reason);
 495 };
 496
 497 struct hci_chan {
 498         struct list_head list;
 499         __u16 handle;
 500         struct hci_conn *conn;
 501         struct sk_buff_head data_q;
 502         unsigned int    sent;
 503         __u8            state;
 504 };
 505
 506 struct hci_conn_params {
 507         struct list_head list;
 508         struct list_head action;
 509
 510         bdaddr_t addr;
 511         u8 addr_type;
 512
 513         u16 conn_min_interval;
 514         u16 conn_max_interval;
 515         u16 conn_latency;
 516         u16 supervision_timeout;
 517
 518         enum {
 519                 HCI_AUTO_CONN_DISABLED,
 520                 HCI_AUTO_CONN_REPORT,
 521                 HCI_AUTO_CONN_DIRECT,
 522                 HCI_AUTO_CONN_ALWAYS,
 523                 HCI_AUTO_CONN_LINK_LOSS,
 524                 HCI_AUTO_CONN_EXPLICIT,
 525         } auto_connect;
 526
 527         struct hci_conn *conn;
 528         bool explicit_connect;
 529 };
 530
 531 extern struct list_head hci_dev_list;
 532 extern struct list_head hci_cb_list;
 533 extern rwlock_t hci_dev_list_lock;
 534 extern struct mutex hci_cb_list_lock;
 535
 536 #define hci_dev_set_flag(hdev, nr)             set_bit((nr), (hdev)->dev_flags)
 537 #define hci_dev_clear_flag(hdev, nr)           clear_bit((nr), (hdev)->dev_flags)
 538 #define hci_dev_change_flag(hdev, nr)          change_bit((nr), (hdev)->dev_flags)
 539 #define hci_dev_test_flag(hdev, nr)            test_bit((nr), (hdev)->dev_flags)
 540 #define hci_dev_test_and_set_flag(hdev, nr)    test_and_set_bit((nr), (hdev)->dev_flags)
 541 #define hci_dev_test_and_clear_flag(hdev, nr)  test_and_clear_bit((nr), (hdev)->dev_flags)
 542 #define hci_dev_test_and_change_flag(hdev, nr) test_and_change_bit((nr), (hdev)->dev_flags)
 543
 544 #define hci_dev_clear_volatile_flags(hdev)                      \
 545         do {                                                    \
 546                 hci_dev_clear_flag(hdev, HCI_LE_SCAN);          \
 547                 hci_dev_clear_flag(hdev, HCI_LE_ADV);           \
 548                 hci_dev_clear_flag(hdev, HCI_PERIODIC_INQ);     \
 549         } while (0)
 550
 551 /* ----- HCI interface to upper protocols ----- */
 552 int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr);
 553 int l2cap_disconn_ind(struct hci_conn *hcon);
 554 void l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
 555
 556 #if IS_ENABLED(CONFIG_BT_BREDR)
 557 int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
 558 void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb);
 559 #else
 560 static inline int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
 561                                   __u8 *flags)
 562 {
 563         return 0;
 564 }
 565
 566 static inline void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb)
 567 {
 568 }
 569 #endif
 570
 571 /* ----- Inquiry cache ----- */
 572 #define INQUIRY_CACHE_AGE_MAX   (HZ*30)   /* 30 seconds */
 573 #define INQUIRY_ENTRY_AGE_MAX   (HZ*60)   /* 60 seconds */
 574
 575 static inline void discovery_init(struct hci_dev *hdev)
 576 {
 577         hdev->discovery.state = DISCOVERY_STOPPED;
 578         INIT_LIST_HEAD(&hdev->discovery.all);
 579         INIT_LIST_HEAD(&hdev->discovery.unknown);
 580         INIT_LIST_HEAD(&hdev->discovery.resolve);
 581         hdev->discovery.report_invalid_rssi = true;
 582         hdev->discovery.rssi = HCI_RSSI_INVALID;
 583 }
 584
 585 static inline void hci_discovery_filter_clear(struct hci_dev *hdev)
 586 {
 587         hdev->discovery.result_filtering = false;
 588         hdev->discovery.report_invalid_rssi = true;
 589         hdev->discovery.rssi = HCI_RSSI_INVALID;
 590         hdev->discovery.uuid_count = 0;
 591         kfree(hdev->discovery.uuids);
 592         hdev->discovery.uuids = NULL;
 593         hdev->discovery.scan_start = 0;
 594         hdev->discovery.scan_duration = 0;
 595 }
 596
 597 bool hci_discovery_active(struct hci_dev *hdev);
 598
 599 void hci_discovery_set_state(struct hci_dev *hdev, int state);
 600
 601 static inline int inquiry_cache_empty(struct hci_dev *hdev)
 602 {
 603         return list_empty(&hdev->discovery.all);
 604 }
 605
 606 static inline long inquiry_cache_age(struct hci_dev *hdev)
 607 {
 608         struct discovery_state *c = &hdev->discovery;
 609         return jiffies - c->timestamp;
 610 }
 611
 612 static inline long inquiry_entry_age(struct inquiry_entry *e)
 613 {
 614         return jiffies - e->timestamp;
 615 }
 616
 617 struct inquiry_entry *hci_inquiry_cache_lookup(struct hci_dev *hdev,
 618                                                bdaddr_t *bdaddr);
 619 struct inquiry_entry *hci_inquiry_cache_lookup_unknown(struct hci_dev *hdev,
 620                                                        bdaddr_t *bdaddr);
 621 struct inquiry_entry *hci_inquiry_cache_lookup_resolve(struct hci_dev *hdev,
 622                                                        bdaddr_t *bdaddr,
 623                                                        int state);
 624 void hci_inquiry_cache_update_resolve(struct hci_dev *hdev,
 625                                       struct inquiry_entry *ie);
 626 u32 hci_inquiry_cache_update(struct hci_dev *hdev, struct inquiry_data *data,
 627                              bool name_known);
 628 void hci_inquiry_cache_flush(struct hci_dev *hdev);
 629
 630 /* ----- HCI Connections ----- */
 631 enum {
 632         HCI_CONN_AUTH_PEND,
 633         HCI_CONN_REAUTH_PEND,
 634         HCI_CONN_ENCRYPT_PEND,
 635         HCI_CONN_RSWITCH_PEND,
 636         HCI_CONN_MODE_CHANGE_PEND,
 637         HCI_CONN_SCO_SETUP_PEND,
 638         HCI_CONN_MGMT_CONNECTED,
 639         HCI_CONN_SSP_ENABLED,
 640         HCI_CONN_SC_ENABLED,
 641         HCI_CONN_AES_CCM,
 642         HCI_CONN_POWER_SAVE,
 643         HCI_CONN_FLUSH_KEY,
 644         HCI_CONN_ENCRYPT,
 645         HCI_CONN_AUTH,
 646         HCI_CONN_SECURE,
 647         HCI_CONN_FIPS,
 648         HCI_CONN_STK_ENCRYPT,
 649         HCI_CONN_AUTH_INITIATOR,
 650         HCI_CONN_DROP,
 651         HCI_CONN_PARAM_REMOVAL_PEND,
 652         HCI_CONN_NEW_LINK_KEY,
 653         HCI_CONN_SCANNING,
 654 };
 655
 656 static inline bool hci_conn_ssp_enabled(struct hci_conn *conn)
 657 {
 658         struct hci_dev *hdev = conn->hdev;
 659         return hci_dev_test_flag(hdev, HCI_SSP_ENABLED) &&
 660                test_bit(HCI_CONN_SSP_ENABLED, &conn->flags);
 661 }
 662
 663 static inline bool hci_conn_sc_enabled(struct hci_conn *conn)
 664 {
 665         struct hci_dev *hdev = conn->hdev;
 666         return hci_dev_test_flag(hdev, HCI_SC_ENABLED) &&
 667                test_bit(HCI_CONN_SC_ENABLED, &conn->flags);
 668 }
 669
 670 static inline void hci_conn_hash_add(struct hci_dev *hdev, struct hci_conn *c)
 671 {
 672         struct hci_conn_hash *h = &hdev->conn_hash;
 673         list_add_rcu(&c->list, &h->list);
 674         switch (c->type) {
 675         case ACL_LINK:
 676                 h->acl_num++;
 677                 break;
 678         case AMP_LINK:
 679                 h->amp_num++;
 680                 break;
 681         case LE_LINK:
 682                 h->le_num++;
 683                 if (c->role == HCI_ROLE_SLAVE)
 684                         h->le_num_slave++;
 685                 break;
 686         case SCO_LINK:
 687         case ESCO_LINK:
 688                 h->sco_num++;
 689                 break;
 690         }
 691 }
 692
 693 static inline void hci_conn_hash_del(struct hci_dev *hdev, struct hci_conn *c)
 694 {
 695         struct hci_conn_hash *h = &hdev->conn_hash;
 696
 697         list_del_rcu(&c->list);
 698         synchronize_rcu();
 699
 700         switch (c->type) {
 701         case ACL_LINK:
 702                 h->acl_num--;
 703                 break;
 704         case AMP_LINK:
 705                 h->amp_num--;
 706                 break;
 707         case LE_LINK:
 708                 h->le_num--;
 709                 if (c->role == HCI_ROLE_SLAVE)
 710                         h->le_num_slave--;
 711                 break;
 712         case SCO_LINK:
 713         case ESCO_LINK:
 714                 h->sco_num--;
 715                 break;
 716         }
 717 }
 718
 719 static inline unsigned int hci_conn_num(struct hci_dev *hdev, __u8 type)
 720 {
 721         struct hci_conn_hash *h = &hdev->conn_hash;
 722         switch (type) {
 723         case ACL_LINK:
 724                 return h->acl_num;
 725         case AMP_LINK:
 726                 return h->amp_num;
 727         case LE_LINK:
 728                 return h->le_num;
 729         case SCO_LINK:
 730         case ESCO_LINK:
 731                 return h->sco_num;
 732         default:
 733                 return 0;
 734         }
 735 }
 736
 737 static inline unsigned int hci_conn_count(struct hci_dev *hdev)
 738 {
 739         struct hci_conn_hash *c = &hdev->conn_hash;
 740
 741         return c->acl_num + c->amp_num + c->sco_num + c->le_num;
 742 }
 743
 744 static inline __u8 hci_conn_lookup_type(struct hci_dev *hdev, __u16 handle)
 745 {
 746         struct hci_conn_hash *h = &hdev->conn_hash;
 747         struct hci_conn *c;
 748         __u8 type = INVALID_LINK;
 749
 750         rcu_read_lock();
 751
 752         list_for_each_entry_rcu(c, &h->list, list) {
 753                 if (c->handle == handle) {
 754                         type = c->type;
 755                         break;
 756                 }
 757         }
 758
 759         rcu_read_unlock();
 760
 761         return type;
 762 }
 763
 764 static inline struct hci_conn *hci_conn_hash_lookup_handle(struct hci_dev *hdev,
 765                                                                 __u16 handle)
 766 {
 767         struct hci_conn_hash *h = &hdev->conn_hash;
 768         struct hci_conn  *c;
 769
 770         rcu_read_lock();
 771
 772         list_for_each_entry_rcu(c, &h->list, list) {
 773                 if (c->handle == handle) {
 774                         rcu_read_unlock();
 775                         return c;
 776                 }
 777         }
 778         rcu_read_unlock();
 779
 780         return NULL;
 781 }
 782
 783 static inline struct hci_conn *hci_conn_hash_lookup_ba(struct hci_dev *hdev,
 784                                                         __u8 type, bdaddr_t *ba)
 785 {
 786         struct hci_conn_hash *h = &hdev->conn_hash;
 787         struct hci_conn  *c;
 788
 789         rcu_read_lock();
 790
 791         list_for_each_entry_rcu(c, &h->list, list) {
 792                 if (c->type == type && !bacmp(&c->dst, ba)) {
 793                         rcu_read_unlock();
 794                         return c;
 795                 }
 796         }
 797
 798         rcu_read_unlock();
 799
 800         return NULL;
 801 }
 802
 803 static inline struct hci_conn *hci_conn_hash_lookup_le(struct hci_dev *hdev,
 804                                                        bdaddr_t *ba,
 805                                                        __u8 ba_type)
 806 {
 807         struct hci_conn_hash *h = &hdev->conn_hash;
 808         struct hci_conn  *c;
 809
 810         rcu_read_lock();
 811
 812         list_for_each_entry_rcu(c, &h->list, list) {
 813                 if (c->type != LE_LINK)
 814                        continue;
 815
 816                 if (ba_type == c->dst_type && !bacmp(&c->dst, ba)) {
 817                         rcu_read_unlock();
 818                         return c;
 819                 }
 820         }
 821
 822         rcu_read_unlock();
 823
 824         return NULL;
 825 }
 826
 827 static inline struct hci_conn *hci_conn_hash_lookup_state(struct hci_dev *hdev,
 828                                                         __u8 type, __u16 state)
 829 {
 830         struct hci_conn_hash *h = &hdev->conn_hash;
 831         struct hci_conn  *c;
 832
 833         rcu_read_lock();
 834
 835         list_for_each_entry_rcu(c, &h->list, list) {
 836                 if (c->type == type && c->state == state) {
 837                         rcu_read_unlock();
 838                         return c;
 839                 }
 840         }
 841
 842         rcu_read_unlock();
 843
 844         return NULL;
 845 }
 846
 847 static inline struct hci_conn *hci_lookup_le_connect(struct hci_dev *hdev)
 848 {
 849         struct hci_conn_hash *h = &hdev->conn_hash;
 850         struct hci_conn  *c;
 851
 852         rcu_read_lock();
 853
 854         list_for_each_entry_rcu(c, &h->list, list) {
 855                 if (c->type == LE_LINK && c->state == BT_CONNECT &&
 856                     !test_bit(HCI_CONN_SCANNING, &c->flags)) {
 857                         rcu_read_unlock();
 858                         return c;
 859                 }
 860         }
 861
 862         rcu_read_unlock();
 863
 864         return NULL;
 865 }
 866
 867 int hci_disconnect(struct hci_conn *conn, __u8 reason);
 868 bool hci_setup_sync(struct hci_conn *conn, __u16 handle);
 869 void hci_sco_setup(struct hci_conn *conn, __u8 status);
 870
 871 struct hci_conn *hci_conn_add(struct hci_dev *hdev, int type, bdaddr_t *dst,
 872                               u8 role);
 873 int hci_conn_del(struct hci_conn *conn);
 874 void hci_conn_hash_flush(struct hci_dev *hdev);
 875 void hci_conn_check_pending(struct hci_dev *hdev);
 876
 877 struct hci_chan *hci_chan_create(struct hci_conn *conn);
 878 void hci_chan_del(struct hci_chan *chan);
 879 void hci_chan_list_flush(struct hci_conn *conn);
 880 struct hci_chan *hci_chan_lookup_handle(struct hci_dev *hdev, __u16 handle);
 881
 882 struct hci_conn *hci_connect_le_scan(struct hci_dev *hdev, bdaddr_t *dst,
 883                                      u8 dst_type, u8 sec_level,
 884                                      u16 conn_timeout);
 885 struct hci_conn *hci_connect_le(struct hci_dev *hdev, bdaddr_t *dst,
 886                                 u8 dst_type, u8 sec_level, u16 conn_timeout,
 887                                 u8 role);
 888 struct hci_conn *hci_connect_acl(struct hci_dev *hdev, bdaddr_t *dst,
 889                                  u8 sec_level, u8 auth_type);
 890 struct hci_conn *hci_connect_sco(struct hci_dev *hdev, int type, bdaddr_t *dst,
 891                                  __u16 setting);
 892 int hci_conn_check_link_mode(struct hci_conn *conn);
 893 int hci_conn_check_secure(struct hci_conn *conn, __u8 sec_level);
 894 int hci_conn_security(struct hci_conn *conn, __u8 sec_level, __u8 auth_type,
 895                       bool initiator);
 896 int hci_conn_switch_role(struct hci_conn *conn, __u8 role);
 897
 898 void hci_conn_enter_active_mode(struct hci_conn *conn, __u8 force_active);
 899
 900 void hci_le_conn_failed(struct hci_conn *conn, u8 status);
 901
 902 /*
 903  * hci_conn_get() and hci_conn_put() are used to control the life-time of an
 904  * "hci_conn" object. They do not guarantee that the hci_conn object is running,
 905  * working or anything else. They just guarantee that the object is available
 906  * and can be dereferenced. So you can use its locks, local variables and any
 907  * other constant data.
 908  * Before accessing runtime data, you _must_ lock the object and then check that
 909  * it is still running. As soon as you release the locks, the connection might
 910  * get dropped, though.
 911  *
 912  * On the other hand, hci_conn_hold() and hci_conn_drop() are used to control
 913  * how long the underlying connection is held. So every channel that runs on the
 914  * hci_conn object calls this to prevent the connection from disappearing. As
 915  * long as you hold a device, you must also guarantee that you have a valid
 916  * reference to the device via hci_conn_get() (or the initial reference from
 917  * hci_conn_add()).
 918  * The hold()/drop() ref-count is known to drop below 0 sometimes, which doesn't
 919  * break because nobody cares for that. But this means, we cannot use
 920  * _get()/_drop() in it, but require the caller to have a valid ref (FIXME).
 921  */
 922
 923 static inline struct hci_conn *hci_conn_get(struct hci_conn *conn)
 924 {
 925         get_device(&conn->dev);
 926         return conn;
 927 }
 928
 929 static inline void hci_conn_put(struct hci_conn *conn)
 930 {
 931         put_device(&conn->dev);
 932 }
 933
 934 static inline void hci_conn_hold(struct hci_conn *conn)
 935 {
 936         BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
 937
 938         atomic_inc(&conn->refcnt);
 939         cancel_delayed_work(&conn->disc_work);
 940 }
 941
 942 static inline void hci_conn_drop(struct hci_conn *conn)
 943 {
 944         BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
 945
 946         if (atomic_dec_and_test(&conn->refcnt)) {
 947                 unsigned long timeo;
 948
 949                 switch (conn->type) {
 950                 case ACL_LINK:
 951                 case LE_LINK:
 952                         cancel_delayed_work(&conn->idle_work);
 953                         if (conn->state == BT_CONNECTED) {
 954                                 timeo = conn->disc_timeout;
 955                                 if (!conn->out)
 956                                         timeo *= 2;
 957                         } else {
 958                                 timeo = 0;
 959                         }
 960                         break;
 961
 962                 case AMP_LINK:
 963                         timeo = conn->disc_timeout;
 964                         break;
 965
 966                 default:
 967                         timeo = 0;
 968                         break;
 969                 }
 970
 971                 cancel_delayed_work(&conn->disc_work);
 972                 queue_delayed_work(conn->hdev->workqueue,
 973                                    &conn->disc_work, timeo);
 974         }
 975 }
 976
 977 /* ----- HCI Devices ----- */
 978 static inline void hci_dev_put(struct hci_dev *d)
 979 {
 980         BT_DBG("%s orig refcnt %d", d->name,
 981                atomic_read(&d->dev.kobj.kref.refcount));
 982
 983         put_device(&d->dev);
 984 }
 985
 986 static inline struct hci_dev *hci_dev_hold(struct hci_dev *d)
 987 {
 988         BT_DBG("%s orig refcnt %d", d->name,
 989                atomic_read(&d->dev.kobj.kref.refcount));
 990
 991         get_device(&d->dev);
 992         return d;
 993 }
 994
 995 #define hci_dev_lock(d)         mutex_lock(&d->lock)
 996 #define hci_dev_unlock(d)       mutex_unlock(&d->lock)
 997
 998 #define to_hci_dev(d) container_of(d, struct hci_dev, dev)
 999 #define to_hci_conn(c) container_of(c, struct hci_conn, dev)
1000
1001 static inline void *hci_get_drvdata(struct hci_dev *hdev)
1002 {
1003         return dev_get_drvdata(&hdev->dev);
1004 }
1005
1006 static inline void hci_set_drvdata(struct hci_dev *hdev, void *data)
1007 {
1008         dev_set_drvdata(&hdev->dev, data);
1009 }
1010
1011 struct hci_dev *hci_dev_get(int index);
1012 struct hci_dev *hci_get_route(bdaddr_t *dst, bdaddr_t *src);
1013
1014 struct hci_dev *hci_alloc_dev(void);
1015 void hci_free_dev(struct hci_dev *hdev);
1016 int hci_register_dev(struct hci_dev *hdev);
1017 void hci_unregister_dev(struct hci_dev *hdev);
1018 int hci_suspend_dev(struct hci_dev *hdev);
1019 int hci_resume_dev(struct hci_dev *hdev);
1020 int hci_reset_dev(struct hci_dev *hdev);
1021 int hci_dev_open(__u16 dev);
1022 int hci_dev_close(__u16 dev);
1023 int hci_dev_do_close(struct hci_dev *hdev);
1024 int hci_dev_reset(__u16 dev);
1025 int hci_dev_reset_stat(__u16 dev);
1026 int hci_dev_cmd(unsigned int cmd, void __user *arg);
1027 int hci_get_dev_list(void __user *arg);
1028 int hci_get_dev_info(void __user *arg);
1029 int hci_get_conn_list(void __user *arg);
1030 int hci_get_conn_info(struct hci_dev *hdev, void __user *arg);
1031 int hci_get_auth_info(struct hci_dev *hdev, void __user *arg);
1032 int hci_inquiry(void __user *arg);
1033
1034 struct bdaddr_list *hci_bdaddr_list_lookup(struct list_head *list,
1035                                            bdaddr_t *bdaddr, u8 type);
1036 int hci_bdaddr_list_add(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1037 int hci_bdaddr_list_del(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1038 void hci_bdaddr_list_clear(struct list_head *list);
1039
1040 struct hci_conn_params *hci_conn_params_lookup(struct hci_dev *hdev,
1041                                                bdaddr_t *addr, u8 addr_type);
1042 struct hci_conn_params *hci_conn_params_add(struct hci_dev *hdev,
1043                                             bdaddr_t *addr, u8 addr_type);
1044 void hci_conn_params_del(struct hci_dev *hdev, bdaddr_t *addr, u8 addr_type);
1045 void hci_conn_params_clear_disabled(struct hci_dev *hdev);
1046
1047 struct hci_conn_params *hci_pend_le_action_lookup(struct list_head *list,
1048                                                   bdaddr_t *addr,
1049                                                   u8 addr_type);
1050
1051 void hci_uuids_clear(struct hci_dev *hdev);
1052
1053 void hci_link_keys_clear(struct hci_dev *hdev);
1054 struct link_key *hci_find_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1055 struct link_key *hci_add_link_key(struct hci_dev *hdev, struct hci_conn *conn,
1056                                   bdaddr_t *bdaddr, u8 *val, u8 type,
1057                                   u8 pin_len, bool *persistent);
1058 struct smp_ltk *hci_add_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1059                             u8 addr_type, u8 type, u8 authenticated,
1060                             u8 tk[16], u8 enc_size, __le16 ediv, __le64 rand);
1061 struct smp_ltk *hci_find_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1062                              u8 addr_type, u8 role);
1063 int hci_remove_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 bdaddr_type);
1064 void hci_smp_ltks_clear(struct hci_dev *hdev);
1065 int hci_remove_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1066
1067 struct smp_irk *hci_find_irk_by_rpa(struct hci_dev *hdev, bdaddr_t *rpa);
1068 struct smp_irk *hci_find_irk_by_addr(struct hci_dev *hdev, bdaddr_t *bdaddr,
1069                                      u8 addr_type);
1070 struct smp_irk *hci_add_irk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1071                             u8 addr_type, u8 val[16], bdaddr_t *rpa);
1072 void hci_remove_irk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 addr_type);
1073 void hci_smp_irks_clear(struct hci_dev *hdev);
1074
1075 bool hci_bdaddr_is_paired(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type);
1076
1077 void hci_remote_oob_data_clear(struct hci_dev *hdev);
1078 struct oob_data *hci_find_remote_oob_data(struct hci_dev *hdev,
1079                                           bdaddr_t *bdaddr, u8 bdaddr_type);
1080 int hci_add_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1081                             u8 bdaddr_type, u8 *hash192, u8 *rand192,
1082                             u8 *hash256, u8 *rand256);
1083 int hci_remove_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1084                                u8 bdaddr_type);
1085
1086 void hci_adv_instances_clear(struct hci_dev *hdev);
1087 struct adv_info *hci_find_adv_instance(struct hci_dev *hdev, u8 instance);
1088 struct adv_info *hci_get_next_instance(struct hci_dev *hdev, u8 instance);
1089 int hci_add_adv_instance(struct hci_dev *hdev, u8 instance, u32 flags,
1090                          u16 adv_data_len, u8 *adv_data,
1091                          u16 scan_rsp_len, u8 *scan_rsp_data,
1092                          u16 timeout, u16 duration);
1093 int hci_remove_adv_instance(struct hci_dev *hdev, u8 instance);
1094
1095 void hci_event_packet(struct hci_dev *hdev, struct sk_buff *skb);
1096
1097 int hci_recv_frame(struct hci_dev *hdev, struct sk_buff *skb);
1098 int hci_recv_diag(struct hci_dev *hdev, struct sk_buff *skb);
1099
1100 void hci_init_sysfs(struct hci_dev *hdev);
1101 void hci_conn_init_sysfs(struct hci_conn *conn);
1102 void hci_conn_add_sysfs(struct hci_conn *conn);
1103 void hci_conn_del_sysfs(struct hci_conn *conn);
1104
1105 #define SET_HCIDEV_DEV(hdev, pdev) ((hdev)->dev.parent = (pdev))
1106
1107 /* ----- LMP capabilities ----- */
1108 #define lmp_encrypt_capable(dev)   ((dev)->features[0][0] & LMP_ENCRYPT)
1109 #define lmp_rswitch_capable(dev)   ((dev)->features[0][0] & LMP_RSWITCH)
1110 #define lmp_hold_capable(dev)      ((dev)->features[0][0] & LMP_HOLD)
1111 #define lmp_sniff_capable(dev)     ((dev)->features[0][0] & LMP_SNIFF)
1112 #define lmp_park_capable(dev)      ((dev)->features[0][1] & LMP_PARK)
1113 #define lmp_inq_rssi_capable(dev)  ((dev)->features[0][3] & LMP_RSSI_INQ)
1114 #define lmp_esco_capable(dev)      ((dev)->features[0][3] & LMP_ESCO)
1115 #define lmp_bredr_capable(dev)     (!((dev)->features[0][4] & LMP_NO_BREDR))
1116 #define lmp_le_capable(dev)        ((dev)->features[0][4] & LMP_LE)
1117 #define lmp_sniffsubr_capable(dev) ((dev)->features[0][5] & LMP_SNIFF_SUBR)
1118 #define lmp_pause_enc_capable(dev) ((dev)->features[0][5] & LMP_PAUSE_ENC)
1119 #define lmp_ext_inq_capable(dev)   ((dev)->features[0][6] & LMP_EXT_INQ)
1120 #define lmp_le_br_capable(dev)     (!!((dev)->features[0][6] & LMP_SIMUL_LE_BR))
1121 #define lmp_ssp_capable(dev)       ((dev)->features[0][6] & LMP_SIMPLE_PAIR)
1122 #define lmp_no_flush_capable(dev)  ((dev)->features[0][6] & LMP_NO_FLUSH)
1123 #define lmp_lsto_capable(dev)      ((dev)->features[0][7] & LMP_LSTO)
1124 #define lmp_inq_tx_pwr_capable(dev) ((dev)->features[0][7] & LMP_INQ_TX_PWR)
1125 #define lmp_ext_feat_capable(dev)  ((dev)->features[0][7] & LMP_EXTFEATURES)
1126 #define lmp_transp_capable(dev)    ((dev)->features[0][2] & LMP_TRANSPARENT)
1127
1128 /* ----- Extended LMP capabilities ----- */
1129 #define lmp_csb_master_capable(dev) ((dev)->features[2][0] & LMP_CSB_MASTER)
1130 #define lmp_csb_slave_capable(dev)  ((dev)->features[2][0] & LMP_CSB_SLAVE)
1131 #define lmp_sync_train_capable(dev) ((dev)->features[2][0] & LMP_SYNC_TRAIN)
1132 #define lmp_sync_scan_capable(dev)  ((dev)->features[2][0] & LMP_SYNC_SCAN)
1133 #define lmp_sc_capable(dev)         ((dev)->features[2][1] & LMP_SC)
1134 #define lmp_ping_capable(dev)       ((dev)->features[2][1] & LMP_PING)
1135
1136 /* ----- Host capabilities ----- */
1137 #define lmp_host_ssp_capable(dev)  ((dev)->features[1][0] & LMP_HOST_SSP)
1138 #define lmp_host_sc_capable(dev)   ((dev)->features[1][0] & LMP_HOST_SC)
1139 #define lmp_host_le_capable(dev)   (!!((dev)->features[1][0] & LMP_HOST_LE))
1140 #define lmp_host_le_br_capable(dev) (!!((dev)->features[1][0] & LMP_HOST_LE_BREDR))
1141
1142 #define hdev_is_powered(dev)   (test_bit(HCI_UP, &(dev)->flags) && \
1143                                 !hci_dev_test_flag(dev, HCI_AUTO_OFF))
1144 #define bredr_sc_enabled(dev)  (lmp_sc_capable(dev) && \
1145                                 hci_dev_test_flag(dev, HCI_SC_ENABLED))
1146
1147 /* ----- HCI protocols ----- */
1148 #define HCI_PROTO_DEFER             0x01
1149
1150 static inline int hci_proto_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
1151                                         __u8 type, __u8 *flags)
1152 {
1153         switch (type) {
1154         case ACL_LINK:
1155                 return l2cap_connect_ind(hdev, bdaddr);
1156
1157         case SCO_LINK:
1158         case ESCO_LINK:
1159                 return sco_connect_ind(hdev, bdaddr, flags);
1160
1161         default:
1162                 BT_ERR("unknown link type %d", type);
1163                 return -EINVAL;
1164         }
1165 }
1166
1167 static inline int hci_proto_disconn_ind(struct hci_conn *conn)
1168 {
1169         if (conn->type != ACL_LINK && conn->type != LE_LINK)
1170                 return HCI_ERROR_REMOTE_USER_TERM;
1171
1172         return l2cap_disconn_ind(conn);
1173 }
1174
1175 /* ----- HCI callbacks ----- */
1176 struct hci_cb {
1177         struct list_head list;
1178
1179         char *name;
1180
1181         void (*connect_cfm)     (struct hci_conn *conn, __u8 status);
1182         void (*disconn_cfm)     (struct hci_conn *conn, __u8 status);
1183         void (*security_cfm)    (struct hci_conn *conn, __u8 status,
1184                                                                 __u8 encrypt);
1185         void (*key_change_cfm)  (struct hci_conn *conn, __u8 status);
1186         void (*role_switch_cfm) (struct hci_conn *conn, __u8 status, __u8 role);
1187 };
1188
1189 static inline void hci_connect_cfm(struct hci_conn *conn, __u8 status)
1190 {
1191         struct hci_cb *cb;
1192
1193         mutex_lock(&hci_cb_list_lock);
1194         list_for_each_entry(cb, &hci_cb_list, list) {
1195                 if (cb->connect_cfm)
1196                         cb->connect_cfm(conn, status);
1197         }
1198         mutex_unlock(&hci_cb_list_lock);
1199
1200         if (conn->connect_cfm_cb)
1201                 conn->connect_cfm_cb(conn, status);
1202 }
1203
1204 static inline void hci_disconn_cfm(struct hci_conn *conn, __u8 reason)
1205 {
1206         struct hci_cb *cb;
1207
1208         mutex_lock(&hci_cb_list_lock);
1209         list_for_each_entry(cb, &hci_cb_list, list) {
1210                 if (cb->disconn_cfm)
1211                         cb->disconn_cfm(conn, reason);
1212         }
1213         mutex_unlock(&hci_cb_list_lock);
1214
1215         if (conn->disconn_cfm_cb)
1216                 conn->disconn_cfm_cb(conn, reason);
1217 }
1218
1219 static inline void hci_auth_cfm(struct hci_conn *conn, __u8 status)
1220 {
1221         struct hci_cb *cb;
1222         __u8 encrypt;
1223
1224         if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->flags))
1225                 return;
1226
1227         encrypt = test_bit(HCI_CONN_ENCRYPT, &conn->flags) ? 0x01 : 0x00;
1228
1229         mutex_lock(&hci_cb_list_lock);
1230         list_for_each_entry(cb, &hci_cb_list, list) {
1231                 if (cb->security_cfm)
1232                         cb->security_cfm(conn, status, encrypt);
1233         }
1234         mutex_unlock(&hci_cb_list_lock);
1235
1236         if (conn->security_cfm_cb)
1237                 conn->security_cfm_cb(conn, status);
1238 }
1239
1240 static inline void hci_encrypt_cfm(struct hci_conn *conn, __u8 status,
1241                                                                 __u8 encrypt)
1242 {
1243         struct hci_cb *cb;
1244
1245         if (conn->sec_level == BT_SECURITY_SDP)
1246                 conn->sec_level = BT_SECURITY_LOW;
1247
1248         if (conn->pending_sec_level > conn->sec_level)
1249                 conn->sec_level = conn->pending_sec_level;
1250
1251         mutex_lock(&hci_cb_list_lock);
1252         list_for_each_entry(cb, &hci_cb_list, list) {
1253                 if (cb->security_cfm)
1254                         cb->security_cfm(conn, status, encrypt);
1255         }
1256         mutex_unlock(&hci_cb_list_lock);
1257
1258         if (conn->security_cfm_cb)
1259                 conn->security_cfm_cb(conn, status);
1260 }
1261
1262 static inline void hci_key_change_cfm(struct hci_conn *conn, __u8 status)
1263 {
1264         struct hci_cb *cb;
1265
1266         mutex_lock(&hci_cb_list_lock);
1267         list_for_each_entry(cb, &hci_cb_list, list) {
1268                 if (cb->key_change_cfm)
1269                         cb->key_change_cfm(conn, status);
1270         }
1271         mutex_unlock(&hci_cb_list_lock);
1272 }
1273
1274 static inline void hci_role_switch_cfm(struct hci_conn *conn, __u8 status,
1275                                                                 __u8 role)
1276 {
1277         struct hci_cb *cb;
1278
1279         mutex_lock(&hci_cb_list_lock);
1280         list_for_each_entry(cb, &hci_cb_list, list) {
1281                 if (cb->role_switch_cfm)
1282                         cb->role_switch_cfm(conn, status, role);
1283         }
1284         mutex_unlock(&hci_cb_list_lock);
1285 }
1286
1287 static inline void *eir_get_data(u8 *eir, size_t eir_len, u8 type,
1288                                  size_t *data_len)
1289 {
1290         size_t parsed = 0;
1291
1292         if (eir_len < 2)
1293                 return NULL;
1294
1295         while (parsed < eir_len - 1) {
1296                 u8 field_len = eir[0];
1297
1298                 if (field_len == 0)
1299                         break;
1300
1301                 parsed += field_len + 1;
1302
1303                 if (parsed > eir_len)
1304                         break;
1305
1306                 if (eir[1] != type) {
1307                         eir += field_len + 1;
1308                         continue;
1309                 }
1310
1311                 /* Zero length data */
1312                 if (field_len == 1)
1313                         return NULL;
1314
1315                 if (data_len)
1316                         *data_len = field_len - 1;
1317
1318                 return &eir[2];
1319         }
1320
1321         return NULL;
1322 }
1323
1324 static inline bool hci_bdaddr_is_rpa(bdaddr_t *bdaddr, u8 addr_type)
1325 {
1326         if (addr_type != ADDR_LE_DEV_RANDOM)
1327                 return false;
1328
1329         if ((bdaddr->b[5] & 0xc0) == 0x40)
1330                return true;
1331
1332         return false;
1333 }
1334
1335 static inline bool hci_is_identity_address(bdaddr_t *addr, u8 addr_type)
1336 {
1337         if (addr_type == ADDR_LE_DEV_PUBLIC)
1338                 return true;
1339
1340         /* Check for Random Static address type */
1341         if ((addr->b[5] & 0xc0) == 0xc0)
1342                 return true;
1343
1344         return false;
1345 }
1346
1347 static inline struct smp_irk *hci_get_irk(struct hci_dev *hdev,
1348                                           bdaddr_t *bdaddr, u8 addr_type)
1349 {
1350         if (!hci_bdaddr_is_rpa(bdaddr, addr_type))
1351                 return NULL;
1352
1353         return hci_find_irk_by_rpa(hdev, bdaddr);
1354 }
1355
1356 static inline int hci_check_conn_params(u16 min, u16 max, u16 latency,
1357                                         u16 to_multiplier)
1358 {
1359         u16 max_latency;
1360
1361         if (min > max || min < 6 || max > 3200)
1362                 return -EINVAL;
1363
1364         if (to_multiplier < 10 || to_multiplier > 3200)
1365                 return -EINVAL;
1366
1367         if (max >= to_multiplier * 8)
1368                 return -EINVAL;
1369
1370         max_latency = (to_multiplier * 4 / max) - 1;
1371         if (latency > 499 || latency > max_latency)
1372                 return -EINVAL;
1373
1374         return 0;
1375 }
1376
1377 int hci_register_cb(struct hci_cb *hcb);
1378 int hci_unregister_cb(struct hci_cb *hcb);
1379
1380 struct sk_buff *__hci_cmd_sync(struct hci_dev *hdev, u16 opcode, u32 plen,
1381                                const void *param, u32 timeout);
1382 struct sk_buff *__hci_cmd_sync_ev(struct hci_dev *hdev, u16 opcode, u32 plen,
1383                                   const void *param, u8 event, u32 timeout);
1384
1385 int hci_send_cmd(struct hci_dev *hdev, __u16 opcode, __u32 plen,
1386                  const void *param);
1387 void hci_send_acl(struct hci_chan *chan, struct sk_buff *skb, __u16 flags);
1388 void hci_send_sco(struct hci_conn *conn, struct sk_buff *skb);
1389
1390 void *hci_sent_cmd_data(struct hci_dev *hdev, __u16 opcode);
1391
1392 struct sk_buff *hci_cmd_sync(struct hci_dev *hdev, u16 opcode, u32 plen,
1393                              const void *param, u32 timeout);
1394
1395 /* ----- HCI Sockets ----- */
1396 void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb);
1397 void hci_send_to_channel(unsigned short channel, struct sk_buff *skb,
1398                          int flag, struct sock *skip_sk);
1399 void hci_send_to_monitor(struct hci_dev *hdev, struct sk_buff *skb);
1400
1401 void hci_sock_dev_event(struct hci_dev *hdev, int event);
1402
1403 #define HCI_MGMT_VAR_LEN        BIT(0)
1404 #define HCI_MGMT_NO_HDEV        BIT(1)
1405 #define HCI_MGMT_UNTRUSTED      BIT(2)
1406 #define HCI_MGMT_UNCONFIGURED   BIT(3)
1407
1408 struct hci_mgmt_handler {
1409         int (*func) (struct sock *sk, struct hci_dev *hdev, void *data,
1410                      u16 data_len);
1411         size_t data_len;
1412         unsigned long flags;
1413 };
1414
1415 struct hci_mgmt_chan {
1416         struct list_head list;
1417         unsigned short channel;
1418         size_t handler_count;
1419         const struct hci_mgmt_handler *handlers;
1420         void (*hdev_init) (struct sock *sk, struct hci_dev *hdev);
1421 };
1422
1423 int hci_mgmt_chan_register(struct hci_mgmt_chan *c);
1424 void hci_mgmt_chan_unregister(struct hci_mgmt_chan *c);
1425
1426 /* Management interface */
1427 #define DISCOV_TYPE_BREDR               (BIT(BDADDR_BREDR))
1428 #define DISCOV_TYPE_LE                  (BIT(BDADDR_LE_PUBLIC) | \
1429                                          BIT(BDADDR_LE_RANDOM))
1430 #define DISCOV_TYPE_INTERLEAVED         (BIT(BDADDR_BREDR) | \
1431                                          BIT(BDADDR_LE_PUBLIC) | \
1432                                          BIT(BDADDR_LE_RANDOM))
1433
1434 /* These LE scan and inquiry parameters were chosen according to LE General
1435  * Discovery Procedure specification.
1436  */
1437 #define DISCOV_LE_SCAN_WIN              0x12
1438 #define DISCOV_LE_SCAN_INT              0x12
1439 #define DISCOV_LE_TIMEOUT               10240   /* msec */
1440 #define DISCOV_INTERLEAVED_TIMEOUT      5120    /* msec */
1441 #define DISCOV_INTERLEAVED_INQUIRY_LEN  0x04
1442 #define DISCOV_BREDR_INQUIRY_LEN        0x08
1443 #define DISCOV_LE_RESTART_DELAY         msecs_to_jiffies(200)   /* msec */
1444
1445 int mgmt_new_settings(struct hci_dev *hdev);
1446 void mgmt_index_added(struct hci_dev *hdev);
1447 void mgmt_index_removed(struct hci_dev *hdev);
1448 void mgmt_set_powered_failed(struct hci_dev *hdev, int err);
1449 void mgmt_power_on(struct hci_dev *hdev, int err);
1450 void __mgmt_power_off(struct hci_dev *hdev);
1451 void mgmt_new_link_key(struct hci_dev *hdev, struct link_key *key,
1452                        bool persistent);
1453 void mgmt_device_connected(struct hci_dev *hdev, struct hci_conn *conn,
1454                            u32 flags, u8 *name, u8 name_len);
1455 void mgmt_device_disconnected(struct hci_dev *hdev, bdaddr_t *bdaddr,
1456                               u8 link_type, u8 addr_type, u8 reason,
1457                               bool mgmt_connected);
1458 void mgmt_disconnect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr,
1459                             u8 link_type, u8 addr_type, u8 status);
1460 void mgmt_connect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1461                          u8 addr_type, u8 status);
1462 void mgmt_pin_code_request(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 secure);
1463 void mgmt_pin_code_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1464                                   u8 status);
1465 void mgmt_pin_code_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1466                                       u8 status);
1467 int mgmt_user_confirm_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
1468                               u8 link_type, u8 addr_type, u32 value,
1469                               u8 confirm_hint);
1470 int mgmt_user_confirm_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1471                                      u8 link_type, u8 addr_type, u8 status);
1472 int mgmt_user_confirm_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1473                                          u8 link_type, u8 addr_type, u8 status);
1474 int mgmt_user_passkey_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
1475                               u8 link_type, u8 addr_type);
1476 int mgmt_user_passkey_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1477                                      u8 link_type, u8 addr_type, u8 status);
1478 int mgmt_user_passkey_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1479                                          u8 link_type, u8 addr_type, u8 status);
1480 int mgmt_user_passkey_notify(struct hci_dev *hdev, bdaddr_t *bdaddr,
1481                              u8 link_type, u8 addr_type, u32 passkey,
1482                              u8 entered);
1483 void mgmt_auth_failed(struct hci_conn *conn, u8 status);
1484 void mgmt_auth_enable_complete(struct hci_dev *hdev, u8 status);
1485 void mgmt_ssp_enable_complete(struct hci_dev *hdev, u8 enable, u8 status);
1486 void mgmt_set_class_of_dev_complete(struct hci_dev *hdev, u8 *dev_class,
1487                                     u8 status);
1488 void mgmt_set_local_name_complete(struct hci_dev *hdev, u8 *name, u8 status);
1489 void mgmt_start_discovery_complete(struct hci_dev *hdev, u8 status);
1490 void mgmt_stop_discovery_complete(struct hci_dev *hdev, u8 status);
1491 void mgmt_device_found(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1492                        u8 addr_type, u8 *dev_class, s8 rssi, u32 flags,
1493                        u8 *eir, u16 eir_len, u8 *scan_rsp, u8 scan_rsp_len);
1494 void mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1495                       u8 addr_type, s8 rssi, u8 *name, u8 name_len);
1496 void mgmt_discovering(struct hci_dev *hdev, u8 discovering);
1497 bool mgmt_powering_down(struct hci_dev *hdev);
1498 void mgmt_new_ltk(struct hci_dev *hdev, struct smp_ltk *key, bool persistent);
1499 void mgmt_new_irk(struct hci_dev *hdev, struct smp_irk *irk, bool persistent);
1500 void mgmt_new_csrk(struct hci_dev *hdev, struct smp_csrk *csrk,
1501                    bool persistent);
1502 void mgmt_new_conn_param(struct hci_dev *hdev, bdaddr_t *bdaddr,
1503                          u8 bdaddr_type, u8 store_hint, u16 min_interval,
1504                          u16 max_interval, u16 latency, u16 timeout);
1505 void mgmt_smp_complete(struct hci_conn *conn, bool complete);
1506 bool mgmt_get_connectable(struct hci_dev *hdev);
1507 void mgmt_set_connectable_complete(struct hci_dev *hdev, u8 status);
1508 void mgmt_set_discoverable_complete(struct hci_dev *hdev, u8 status);
1509 u8 mgmt_get_adv_discov_flags(struct hci_dev *hdev);
1510 void mgmt_advertising_added(struct sock *sk, struct hci_dev *hdev,
1511                             u8 instance);
1512 void mgmt_advertising_removed(struct sock *sk, struct hci_dev *hdev,
1513                               u8 instance);
1514
1515 u8 hci_le_conn_update(struct hci_conn *conn, u16 min, u16 max, u16 latency,
1516                       u16 to_multiplier);
1517 void hci_le_start_enc(struct hci_conn *conn, __le16 ediv, __le64 rand,
1518                       __u8 ltk[16], __u8 key_size);
1519
1520 void hci_copy_identity_address(struct hci_dev *hdev, bdaddr_t *bdaddr,
1521                                u8 *bdaddr_type);
1522
1523 #define SCO_AIRMODE_MASK       0x0003
1524 #define SCO_AIRMODE_CVSD       0x0000
1525 #define SCO_AIRMODE_TRANSP     0x0003
1526
1527 #endif /* __HCI_CORE_H */