hci_core.h 50.6 KB
Newer Older
1
/*
L
Linus Torvalds 已提交
2
   BlueZ - Bluetooth protocol stack for Linux
3
   Copyright (c) 2000-2001, 2010, Code Aurora Forum. All rights reserved.
L
Linus Torvalds 已提交
4 5 6 7 8 9 10 11 12 13 14

   Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>

   This program is free software; you can redistribute it and/or modify
   it under the terms of the GNU General Public License version 2 as
   published by the Free Software Foundation;

   THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
   OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
   FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
   IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
15 16 17
   CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
   WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
   ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
L
Linus Torvalds 已提交
18 19
   OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

20 21
   ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
   COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
L
Linus Torvalds 已提交
22 23 24 25 26 27
   SOFTWARE IS DISCLAIMED.
*/

#ifndef __HCI_CORE_H
#define __HCI_CORE_H

28
#include <linux/idr.h>
29
#include <linux/leds.h>
30 31
#include <linux/rculist.h>

L
Linus Torvalds 已提交
32
#include <net/bluetooth/hci.h>
33
#include <net/bluetooth/hci_sock.h>
L
Linus Torvalds 已提交
34

35 36 37
/* HCI priority */
#define HCI_PRIO_MAX	7

L
Linus Torvalds 已提交
38 39 40 41 42 43 44
/* HCI Core structures */
struct inquiry_data {
	bdaddr_t	bdaddr;
	__u8		pscan_rep_mode;
	__u8		pscan_period_mode;
	__u8		pscan_mode;
	__u8		dev_class[3];
45
	__le16		clock_offset;
L
Linus Torvalds 已提交
46
	__s8		rssi;
47
	__u8		ssp_mode;
L
Linus Torvalds 已提交
48 49 50
};

struct inquiry_entry {
51 52 53 54 55 56 57 58
	struct list_head	all;		/* inq_cache.all */
	struct list_head	list;		/* unknown or resolve */
	enum {
		NAME_NOT_KNOWN,
		NAME_NEEDED,
		NAME_PENDING,
		NAME_KNOWN,
	} name_state;
L
Linus Torvalds 已提交
59 60 61 62
	__u32			timestamp;
	struct inquiry_data	data;
};

63
struct discovery_state {
64
	int			type;
65 66 67
	enum {
		DISCOVERY_STOPPED,
		DISCOVERY_STARTING,
68
		DISCOVERY_FINDING,
69
		DISCOVERY_RESOLVING,
70 71
		DISCOVERY_STOPPING,
	} state;
72
	struct list_head	all;	/* All devices found during inquiry */
73 74 75
	struct list_head	unknown;	/* Name state not known */
	struct list_head	resolve;	/* Name needs to be resolved */
	__u32			timestamp;
76 77
	bdaddr_t		last_adv_addr;
	u8			last_adv_addr_type;
78
	s8			last_adv_rssi;
79
	u32			last_adv_flags;
80 81
	u8			last_adv_data[HCI_MAX_AD_LENGTH];
	u8			last_adv_data_len;
82
	bool			report_invalid_rssi;
83
	bool			result_filtering;
84
	bool			limited;
85 86 87
	s8			rssi;
	u16			uuid_count;
	u8			(*uuids)[16];
88 89
	unsigned long		scan_start;
	unsigned long		scan_duration;
L
Linus Torvalds 已提交
90 91
};

92 93 94
#define SUSPEND_NOTIFIER_TIMEOUT	msecs_to_jiffies(2000) /* 2 seconds */

enum suspend_tasks {
95 96 97 98 99 100
	SUSPEND_PAUSE_DISCOVERY,
	SUSPEND_UNPAUSE_DISCOVERY,

	SUSPEND_PAUSE_ADVERTISING,
	SUSPEND_UNPAUSE_ADVERTISING,

101 102 103 104
	SUSPEND_SCAN_DISABLE,
	SUSPEND_SCAN_ENABLE,
	SUSPEND_DISCONNECTING,

105 106 107
	SUSPEND_POWERING_DOWN,

	SUSPEND_PREPARE_NOTIFIER,
108 109

	SUSPEND_SET_ADV_FILTER,
110 111 112 113 114
	__SUSPEND_NUM_TASKS
};

enum suspended_state {
	BT_RUNNING = 0,
115
	BT_SUSPEND_DISCONNECT,
116
	BT_SUSPEND_CONFIGURE_WAKE,
117 118
};

L
Linus Torvalds 已提交
119 120 121
struct hci_conn_hash {
	struct list_head list;
	unsigned int     acl_num;
122
	unsigned int     amp_num;
L
Linus Torvalds 已提交
123
	unsigned int     sco_num;
V
Ville Tervo 已提交
124
	unsigned int     le_num;
125
	unsigned int     le_num_slave;
L
Linus Torvalds 已提交
126 127
};

128 129 130
struct bdaddr_list {
	struct list_head list;
	bdaddr_t bdaddr;
131
	u8 bdaddr_type;
132
};
133

134 135 136 137 138 139 140 141
struct bdaddr_list_with_irk {
	struct list_head list;
	bdaddr_t bdaddr;
	u8 bdaddr_type;
	u8 peer_irk[16];
	u8 local_irk[16];
};

142 143 144 145 146 147 148
struct bdaddr_list_with_flags {
	struct list_head list;
	bdaddr_t bdaddr;
	u8 bdaddr_type;
	u32 current_flags;
};

149 150 151 152 153 154 155 156 157 158
enum hci_conn_flags {
	HCI_CONN_FLAG_REMOTE_WAKEUP,
	HCI_CONN_FLAG_MAX
};

#define hci_conn_test_flag(nr, flags) ((flags) & (1U << nr))

/* Make sure number of flags doesn't exceed sizeof(current_flags) */
static_assert(HCI_CONN_FLAG_MAX < 32);

159 160 161
struct bt_uuid {
	struct list_head list;
	u8 uuid[16];
162
	u8 size;
163
	u8 svc_hint;
164 165
};

166 167 168 169 170 171 172
struct blocked_key {
	struct list_head list;
	struct rcu_head rcu;
	u8 type;
	u8 val[16];
};

173 174 175
struct smp_csrk {
	bdaddr_t bdaddr;
	u8 bdaddr_type;
176
	u8 type;
177 178 179
	u8 val[16];
};

180 181
struct smp_ltk {
	struct list_head list;
J
Johan Hedberg 已提交
182
	struct rcu_head rcu;
183 184 185 186 187 188
	bdaddr_t bdaddr;
	u8 bdaddr_type;
	u8 authenticated;
	u8 type;
	u8 enc_size;
	__le16 ediv;
189
	__le64 rand;
190
	u8 val[16];
191
};
192

193 194
struct smp_irk {
	struct list_head list;
J
Johan Hedberg 已提交
195
	struct rcu_head rcu;
196 197 198 199 200 201
	bdaddr_t rpa;
	bdaddr_t bdaddr;
	u8 addr_type;
	u8 val[16];
};

202 203
struct link_key {
	struct list_head list;
204
	struct rcu_head rcu;
205 206
	bdaddr_t bdaddr;
	u8 type;
207
	u8 val[HCI_LINK_KEY_SIZE];
208 209 210
	u8 pin_len;
};

211 212 213
struct oob_data {
	struct list_head list;
	bdaddr_t bdaddr;
214
	u8 bdaddr_type;
215
	u8 present;
216
	u8 hash192[16];
217
	u8 rand192[16];
218
	u8 hash256[16];
219
	u8 rand256[16];
220 221
};

222
struct adv_info {
223
	struct list_head list;
224
	bool pending;
225 226
	__u8	instance;
	__u32	flags;
227
	__u16	timeout;
228
	__u16	remaining_time;
229
	__u16	duration;
230 231 232 233
	__u16	adv_data_len;
	__u8	adv_data[HCI_MAX_AD_LENGTH];
	__u16	scan_rsp_len;
	__u8	scan_rsp_data[HCI_MAX_AD_LENGTH];
234
	__s8	tx_power;
235 236
	__u32   min_interval;
	__u32   max_interval;
237 238 239
	bdaddr_t	random_addr;
	bool 		rpa_expired;
	struct delayed_work	rpa_expired_cb;
240 241
};

242
#define HCI_MAX_ADV_INSTANCES		5
243 244
#define HCI_DEFAULT_ADV_DURATION	2

245 246
#define HCI_ADV_TX_POWER_NO_PREFERENCE 0x7F

247 248 249 250 251 252 253 254
struct adv_pattern {
	struct list_head list;
	__u8 ad_type;
	__u8 offset;
	__u8 length;
	__u8 value[HCI_MAX_AD_LENGTH];
};

255 256 257 258 259 260 261 262
struct adv_rssi_thresholds {
	__s8 low_threshold;
	__s8 high_threshold;
	__u16 low_threshold_timeout;
	__u16 high_threshold_timeout;
	__u8 sampling_period;
};

263 264
struct adv_monitor {
	struct list_head patterns;
265
	struct adv_rssi_thresholds rssi;
266
	__u16		handle;
267 268 269 270 271 272

	enum {
		ADV_MONITOR_STATE_NOT_REGISTERED,
		ADV_MONITOR_STATE_REGISTERED,
		ADV_MONITOR_STATE_OFFLOADED
	} state;
273 274 275
};

#define HCI_MIN_ADV_MONITOR_HANDLE		1
276
#define HCI_MAX_ADV_MONITOR_NUM_HANDLES		32
277
#define HCI_MAX_ADV_MONITOR_NUM_PATTERNS	16
278 279
#define HCI_ADV_MONITOR_EXT_NONE		1
#define HCI_ADV_MONITOR_EXT_MSFT		2
280

281 282
#define HCI_MAX_SHORT_NAME_LENGTH	10

283 284 285
/* Min encryption key size to match with SMP */
#define HCI_MIN_ENC_KEY_SIZE		7

286 287 288
/* Default LE RPA expiry time, 15 minutes */
#define HCI_DEFAULT_RPA_TIMEOUT		(15 * 60)

289 290 291
/* Default min/max age of connection information (1s/3s) */
#define DEFAULT_CONN_INFO_MIN_AGE	1000
#define DEFAULT_CONN_INFO_MAX_AGE	3000
292 293
/* Default authenticated payload timeout 30s */
#define DEFAULT_AUTH_PAYLOAD_TIMEOUT   0x0bb8
294

295 296 297
struct amp_assoc {
	__u16	len;
	__u16	offset;
298 299
	__u16	rem_len;
	__u16	len_so_far;
300 301 302
	__u8	data[HCI_MAX_AMP_ASSOC_SIZE];
};

303
#define HCI_MAX_PAGES	3
304

L
Linus Torvalds 已提交
305 306
struct hci_dev {
	struct list_head list;
307
	struct mutex	lock;
L
Linus Torvalds 已提交
308 309 310 311

	char		name[8];
	unsigned long	flags;
	__u16		id;
312
	__u8		bus;
313
	__u8		dev_type;
L
Linus Torvalds 已提交
314
	bdaddr_t	bdaddr;
315
	bdaddr_t	setup_addr;
316
	bdaddr_t	public_addr;
317
	bdaddr_t	random_addr;
318
	bdaddr_t	static_addr;
319
	__u8		adv_addr_type;
320
	__u8		dev_name[HCI_MAX_NAME_LENGTH];
321
	__u8		short_name[HCI_MAX_SHORT_NAME_LENGTH];
322
	__u8		eir[HCI_MAX_EIR_LENGTH];
323
	__u16		appearance;
324
	__u8		dev_class[3];
325 326
	__u8		major_class;
	__u8		minor_class;
327
	__u8		max_page;
328
	__u8		features[HCI_MAX_PAGES][8];
329
	__u8		le_features[8];
330
	__u8		le_white_list_size;
A
Ankit Navik 已提交
331
	__u8		le_resolv_list_size;
332
	__u8		le_num_of_adv_sets;
333
	__u8		le_states[8];
334
	__u8		commands[64];
335 336
	__u8		hci_ver;
	__u16		hci_rev;
337
	__u8		lmp_ver;
338
	__u16		manufacturer;
339
	__u16		lmp_subver;
L
Linus Torvalds 已提交
340
	__u16		voice_setting;
341
	__u8		num_iac;
342 343
	__u8		stored_max_keys;
	__u8		stored_num_keys;
344
	__u8		io_capability;
345
	__s8		inq_tx_power;
346
	__u8		err_data_reporting;
347 348 349
	__u16		page_scan_interval;
	__u16		page_scan_window;
	__u8		page_scan_type;
350
	__u8		le_adv_channel_map;
351 352
	__u16		le_adv_min_interval;
	__u16		le_adv_max_interval;
353
	__u8		le_scan_type;
354 355
	__u16		le_scan_interval;
	__u16		le_scan_window;
356 357 358 359 360 361 362 363
	__u16		le_scan_int_suspend;
	__u16		le_scan_window_suspend;
	__u16		le_scan_int_discovery;
	__u16		le_scan_window_discovery;
	__u16		le_scan_int_adv_monitor;
	__u16		le_scan_window_adv_monitor;
	__u16		le_scan_int_connect;
	__u16		le_scan_window_connect;
364 365
	__u16		le_conn_min_interval;
	__u16		le_conn_max_interval;
366 367
	__u16		le_conn_latency;
	__u16		le_supv_timeout;
368 369 370 371 372 373
	__u16		le_def_tx_len;
	__u16		le_def_tx_time;
	__u16		le_max_tx_len;
	__u16		le_max_tx_time;
	__u16		le_max_rx_len;
	__u16		le_max_rx_time;
374 375
	__u8		le_max_key_size;
	__u8		le_min_key_size;
376
	__u16		discov_interleaved_timeout;
377 378
	__u16		conn_info_min_age;
	__u16		conn_info_max_age;
379
	__u16		auth_payload_timeout;
380
	__u8		min_enc_key_size;
381 382
	__u8		max_enc_key_size;
	__u8		pairing_opts;
383
	__u8		ssp_debug_mode;
384
	__u8		hw_error_code;
385
	__u32		clock;
386 387
	__u16		advmon_allowlist_duration;
	__u16		advmon_no_filter_duration;
388
	__u8		enable_advmon_interleave_scan;
389

390 391 392 393
	__u16		devid_source;
	__u16		devid_vendor;
	__u16		devid_product;
	__u16		devid_version;
L
Linus Torvalds 已提交
394

395 396 397 398 399 400 401 402 403
	__u8		def_page_scan_type;
	__u16		def_page_scan_int;
	__u16		def_page_scan_window;
	__u8		def_inq_scan_type;
	__u16		def_inq_scan_int;
	__u16		def_inq_scan_window;
	__u16		def_br_lsto;
	__u16		def_page_timeout;
	__u16		def_multi_adv_rotation_duration;
404
	__u16		def_le_autoconnect_timeout;
405 406
	__s8		min_le_tx_power;
	__s8		max_le_tx_power;
407

L
Linus Torvalds 已提交
408
	__u16		pkt_type;
409
	__u16		esco_type;
L
Linus Torvalds 已提交
410 411 412
	__u16		link_policy;
	__u16		link_mode;

413 414 415 416
	__u32		idle_timeout;
	__u16		sniff_min_interval;
	__u16		sniff_max_interval;

417 418 419 420 421 422 423 424 425 426 427
	__u8		amp_status;
	__u32		amp_total_bw;
	__u32		amp_max_bw;
	__u32		amp_min_latency;
	__u32		amp_max_pdu;
	__u8		amp_type;
	__u16		amp_pal_cap;
	__u16		amp_assoc_size;
	__u32		amp_max_flush_to;
	__u32		amp_be_flush_to;

428 429
	struct amp_assoc	loc_assoc;

430 431
	__u8		flow_ctl_mode;

432 433
	unsigned int	auto_accept_delay;

L
Linus Torvalds 已提交
434 435 436 437 438
	unsigned long	quirks;

	atomic_t	cmd_cnt;
	unsigned int	acl_cnt;
	unsigned int	sco_cnt;
439
	unsigned int	le_cnt;
L
Linus Torvalds 已提交
440 441 442

	unsigned int	acl_mtu;
	unsigned int	sco_mtu;
443
	unsigned int	le_mtu;
L
Linus Torvalds 已提交
444 445
	unsigned int	acl_pkts;
	unsigned int	sco_pkts;
446
	unsigned int	le_pkts;
L
Linus Torvalds 已提交
447

448 449 450 451 452
	__u16		block_len;
	__u16		block_mtu;
	__u16		num_blocks;
	__u16		block_cnt;

L
Linus Torvalds 已提交
453 454
	unsigned long	acl_last_tx;
	unsigned long	sco_last_tx;
455
	unsigned long	le_last_tx;
L
Linus Torvalds 已提交
456

457 458 459
	__u8		le_tx_def_phys;
	__u8		le_rx_def_phys;

460
	struct workqueue_struct	*workqueue;
461
	struct workqueue_struct	*req_workqueue;
462

463
	struct work_struct	power_on;
464
	struct delayed_work	power_off;
465
	struct work_struct	error_reset;
466

467 468 469
	__u16			discov_timeout;
	struct delayed_work	discov_off;

470 471
	struct delayed_work	service_cache;

472
	struct delayed_work	cmd_timer;
473 474

	struct work_struct	rx_work;
475
	struct work_struct	cmd_work;
476
	struct work_struct	tx_work;
L
Linus Torvalds 已提交
477

478
	struct work_struct	discov_update;
479
	struct work_struct	bg_scan_update;
480
	struct work_struct	scan_update;
481
	struct work_struct	connectable_update;
482
	struct work_struct	discoverable_update;
483 484
	struct delayed_work	le_scan_disable;
	struct delayed_work	le_scan_restart;
485

L
Linus Torvalds 已提交
486 487 488 489 490 491
	struct sk_buff_head	rx_q;
	struct sk_buff_head	raw_q;
	struct sk_buff_head	cmd_q;

	struct sk_buff		*sent_cmd;

492
	struct mutex		req_lock;
L
Linus Torvalds 已提交
493 494 495
	wait_queue_head_t	req_wait_q;
	__u32			req_status;
	__u32			req_result;
496
	struct sk_buff		*req_skb;
497

498
	void			*smp_data;
499
	void			*smp_bredr_data;
500

501
	struct discovery_state	discovery;
502

503 504 505 506 507
	int			discovery_old_state;
	bool			discovery_paused;
	int			advertising_old_state;
	bool			advertising_paused;

508 509 510 511
	struct notifier_block	suspend_notifier;
	struct work_struct	suspend_prepare;
	enum suspended_state	suspend_state_next;
	enum suspended_state	suspend_state;
512 513
	bool			scanning_paused;
	bool			suspended;
514 515 516
	u8			wake_reason;
	bdaddr_t		wake_addr;
	u8			wake_addr_type;
517 518 519 520

	wait_queue_head_t	suspend_wait_q;
	DECLARE_BITMAP(suspend_tasks, __SUSPEND_NUM_TASKS);

L
Linus Torvalds 已提交
521 522
	struct hci_conn_hash	conn_hash;

523 524
	struct list_head	mgmt_pending;
	struct list_head	blacklist;
525
	struct list_head	whitelist;
526
	struct list_head	uuids;
527
	struct list_head	link_keys;
528
	struct list_head	long_term_keys;
529
	struct list_head	identity_resolving_keys;
530
	struct list_head	remote_oob_data;
531
	struct list_head	le_white_list;
A
Ankit Navik 已提交
532
	struct list_head	le_resolv_list;
533
	struct list_head	le_conn_params;
534
	struct list_head	pend_le_conns;
535
	struct list_head	pend_le_reports;
536
	struct list_head	blocked_keys;
537

L
Linus Torvalds 已提交
538 539
	struct hci_dev_stats	stat;

A
Andrei Emeltchenko 已提交
540
	atomic_t		promisc;
L
Linus Torvalds 已提交
541

542 543
	const char		*hw_info;
	const char		*fw_info;
544 545
	struct dentry		*debugfs;

546
	struct device		dev;
L
Linus Torvalds 已提交
547

548 549
	struct rfkill		*rfkill;

550
	DECLARE_BITMAP(dev_flags, __HCI_NUM_FLAGS);
551

552
	__s8			adv_tx_power;
553 554
	__u8			adv_data[HCI_MAX_AD_LENGTH];
	__u8			adv_data_len;
555 556
	__u8			scan_rsp_data[HCI_MAX_AD_LENGTH];
	__u8			scan_rsp_data_len;
557

558 559 560
	struct list_head	adv_instances;
	unsigned int		adv_instance_cnt;
	__u8			cur_adv_instance;
561 562
	__u16			adv_instance_timeout;
	struct delayed_work	adv_instance_expire;
563

564 565 566
	struct idr		adv_monitors_idr;
	unsigned int		adv_monitors_cnt;

567
	__u8			irk[16];
568 569
	__u32			rpa_timeout;
	struct delayed_work	rpa_expired;
570
	bdaddr_t		rpa;
571

572 573 574 575 576 577 578 579
	enum {
		INTERLEAVE_SCAN_NONE,
		INTERLEAVE_SCAN_NO_FILTER,
		INTERLEAVE_SCAN_ALLOWLIST
	} interleave_scan_state;

	struct delayed_work	interleave_scan;

580
#if IS_ENABLED(CONFIG_BT_LEDS)
581
	struct led_trigger	*power_led;
582
#endif
583

584 585 586 587 588
#if IS_ENABLED(CONFIG_BT_MSFTEXT)
	__u16			msft_opcode;
	void			*msft_data;
#endif

589 590 591 592
#if IS_ENABLED(CONFIG_BT_AOSPEXT)
	bool			aosp_capable;
#endif

L
Linus Torvalds 已提交
593 594 595
	int (*open)(struct hci_dev *hdev);
	int (*close)(struct hci_dev *hdev);
	int (*flush)(struct hci_dev *hdev);
596
	int (*setup)(struct hci_dev *hdev);
597
	int (*shutdown)(struct hci_dev *hdev);
598
	int (*send)(struct hci_dev *hdev, struct sk_buff *skb);
L
Linus Torvalds 已提交
599
	void (*notify)(struct hci_dev *hdev, unsigned int evt);
600
	void (*hw_error)(struct hci_dev *hdev, u8 code);
601
	int (*post_init)(struct hci_dev *hdev);
602
	int (*set_diag)(struct hci_dev *hdev, bool enable);
603
	int (*set_bdaddr)(struct hci_dev *hdev, const bdaddr_t *bdaddr);
604
	void (*cmd_timeout)(struct hci_dev *hdev);
605
	bool (*prevent_wake)(struct hci_dev *hdev);
L
Linus Torvalds 已提交
606 607
};

608 609
#define HCI_PHY_HANDLE(handle)	(handle & 0xff)

610 611 612 613 614 615
enum conn_reasons {
	CONN_REASON_PAIR_DEVICE,
	CONN_REASON_L2CAP_CHAN,
	CONN_REASON_SCO_CONNECT,
};

L
Linus Torvalds 已提交
616 617 618
struct hci_conn {
	struct list_head list;

619 620 621
	atomic_t	refcnt;

	bdaddr_t	dst;
622
	__u8		dst_type;
623
	bdaddr_t	src;
624
	__u8		src_type;
625 626 627 628
	bdaddr_t	init_addr;
	__u8		init_addr_type;
	bdaddr_t	resp_addr;
	__u8		resp_addr_type;
629 630 631 632
	__u16		handle;
	__u16		state;
	__u8		mode;
	__u8		type;
633
	__u8		role;
634
	bool		out;
635 636
	__u8		attempt;
	__u8		dev_class[3];
637
	__u8		features[HCI_MAX_PAGES][8];
638 639
	__u16		pkt_type;
	__u16		link_policy;
640
	__u8		key_type;
641 642 643 644
	__u8		auth_type;
	__u8		sec_level;
	__u8		pending_sec_level;
	__u8		pin_length;
645
	__u8		enc_key_size;
646
	__u8		io_capability;
647 648
	__u32		passkey_notify;
	__u8		passkey_entered;
649
	__u16		disc_timeout;
650
	__u16		conn_timeout;
651
	__u16		setting;
652
	__u16		auth_payload_timeout;
653 654
	__u16		le_conn_min_interval;
	__u16		le_conn_max_interval;
655 656 657
	__u16		le_conn_interval;
	__u16		le_conn_latency;
	__u16		le_supv_timeout;
658 659
	__u8		le_adv_data[HCI_MAX_AD_LENGTH];
	__u8		le_adv_data_len;
660 661
	__u8		le_tx_phy;
	__u8		le_rx_phy;
662
	__s8		rssi;
663
	__s8		tx_power;
664
	__s8		max_tx_power;
665
	unsigned long	flags;
666

667 668
	enum conn_reasons conn_reason;

669 670 671
	__u32		clock;
	__u16		clock_accuracy;

672 673
	unsigned long	conn_info_timestamp;

674 675
	__u8		remote_cap;
	__u8		remote_auth;
676
	__u8		remote_id;
677

678
	unsigned int	sent;
679

L
Linus Torvalds 已提交
680
	struct sk_buff_head data_q;
681
	struct list_head chan_list;
L
Linus Torvalds 已提交
682

683
	struct delayed_work disc_work;
684
	struct delayed_work auto_accept_work;
685
	struct delayed_work idle_work;
686
	struct delayed_work le_conn_timeout;
687
	struct work_struct  le_scan_cleanup;
688

689
	struct device	dev;
690
	struct dentry	*debugfs;
691

L
Linus Torvalds 已提交
692 693 694
	struct hci_dev	*hdev;
	void		*l2cap_data;
	void		*sco_data;
695
	struct amp_mgr	*amp_mgr;
L
Linus Torvalds 已提交
696 697

	struct hci_conn	*link;
698 699 700 701

	void (*connect_cfm_cb)	(struct hci_conn *conn, u8 status);
	void (*security_cfm_cb)	(struct hci_conn *conn, u8 status);
	void (*disconn_cfm_cb)	(struct hci_conn *conn, u8 reason);
L
Linus Torvalds 已提交
702 703
};

704 705
struct hci_chan {
	struct list_head list;
706
	__u16 handle;
707 708 709
	struct hci_conn *conn;
	struct sk_buff_head data_q;
	unsigned int	sent;
M
Mat Martineau 已提交
710
	__u8		state;
711
	bool		amp;
712 713
};

714 715
struct hci_conn_params {
	struct list_head list;
716
	struct list_head action;
717 718 719 720 721 722

	bdaddr_t addr;
	u8 addr_type;

	u16 conn_min_interval;
	u16 conn_max_interval;
723 724
	u16 conn_latency;
	u16 supervision_timeout;
725 726 727

	enum {
		HCI_AUTO_CONN_DISABLED,
728
		HCI_AUTO_CONN_REPORT,
729
		HCI_AUTO_CONN_DIRECT,
730 731
		HCI_AUTO_CONN_ALWAYS,
		HCI_AUTO_CONN_LINK_LOSS,
732
		HCI_AUTO_CONN_EXPLICIT,
733
	} auto_connect;
734 735

	struct hci_conn *conn;
736
	bool explicit_connect;
737
	u32 current_flags;
738 739
};

L
Linus Torvalds 已提交
740 741 742
extern struct list_head hci_dev_list;
extern struct list_head hci_cb_list;
extern rwlock_t hci_dev_list_lock;
743
extern struct mutex hci_cb_list_lock;
L
Linus Torvalds 已提交
744

745 746 747 748 749 750 751 752 753 754 755 756
#define hci_dev_set_flag(hdev, nr)             set_bit((nr), (hdev)->dev_flags)
#define hci_dev_clear_flag(hdev, nr)           clear_bit((nr), (hdev)->dev_flags)
#define hci_dev_change_flag(hdev, nr)          change_bit((nr), (hdev)->dev_flags)
#define hci_dev_test_flag(hdev, nr)            test_bit((nr), (hdev)->dev_flags)
#define hci_dev_test_and_set_flag(hdev, nr)    test_and_set_bit((nr), (hdev)->dev_flags)
#define hci_dev_test_and_clear_flag(hdev, nr)  test_and_clear_bit((nr), (hdev)->dev_flags)
#define hci_dev_test_and_change_flag(hdev, nr) test_and_change_bit((nr), (hdev)->dev_flags)

#define hci_dev_clear_volatile_flags(hdev)			\
	do {							\
		hci_dev_clear_flag(hdev, HCI_LE_SCAN);		\
		hci_dev_clear_flag(hdev, HCI_LE_ADV);		\
757
		hci_dev_clear_flag(hdev, HCI_LL_RPA_RESOLUTION);\
758 759
		hci_dev_clear_flag(hdev, HCI_PERIODIC_INQ);	\
	} while (0)
760

761
/* ----- HCI interface to upper protocols ----- */
762 763
int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr);
int l2cap_disconn_ind(struct hci_conn *hcon);
764
void l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
765

766
#if IS_ENABLED(CONFIG_BT_BREDR)
767
int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
768
void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb);
769 770 771 772 773 774 775 776 777 778 779
#else
static inline int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
				  __u8 *flags)
{
	return 0;
}

static inline void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb)
{
}
#endif
780

L
Linus Torvalds 已提交
781
/* ----- Inquiry cache ----- */
A
Andrei Emeltchenko 已提交
782 783
#define INQUIRY_CACHE_AGE_MAX   (HZ*30)   /* 30 seconds */
#define INQUIRY_ENTRY_AGE_MAX   (HZ*60)   /* 60 seconds */
L
Linus Torvalds 已提交
784

785
static inline void discovery_init(struct hci_dev *hdev)
L
Linus Torvalds 已提交
786
{
787
	hdev->discovery.state = DISCOVERY_STOPPED;
788 789 790
	INIT_LIST_HEAD(&hdev->discovery.all);
	INIT_LIST_HEAD(&hdev->discovery.unknown);
	INIT_LIST_HEAD(&hdev->discovery.resolve);
791
	hdev->discovery.report_invalid_rssi = true;
792
	hdev->discovery.rssi = HCI_RSSI_INVALID;
L
Linus Torvalds 已提交
793 794
}

795 796
static inline void hci_discovery_filter_clear(struct hci_dev *hdev)
{
797
	hdev->discovery.result_filtering = false;
798
	hdev->discovery.report_invalid_rssi = true;
799 800 801 802
	hdev->discovery.rssi = HCI_RSSI_INVALID;
	hdev->discovery.uuid_count = 0;
	kfree(hdev->discovery.uuids);
	hdev->discovery.uuids = NULL;
803 804
	hdev->discovery.scan_start = 0;
	hdev->discovery.scan_duration = 0;
805 806
}

807 808
bool hci_discovery_active(struct hci_dev *hdev);

809 810
void hci_discovery_set_state(struct hci_dev *hdev, int state);

L
Linus Torvalds 已提交
811 812
static inline int inquiry_cache_empty(struct hci_dev *hdev)
{
813
	return list_empty(&hdev->discovery.all);
L
Linus Torvalds 已提交
814 815 816 817
}

static inline long inquiry_cache_age(struct hci_dev *hdev)
{
818
	struct discovery_state *c = &hdev->discovery;
L
Linus Torvalds 已提交
819 820 821 822 823 824 825 826
	return jiffies - c->timestamp;
}

static inline long inquiry_entry_age(struct inquiry_entry *e)
{
	return jiffies - e->timestamp;
}

827
struct inquiry_entry *hci_inquiry_cache_lookup(struct hci_dev *hdev,
828
					       bdaddr_t *bdaddr);
829
struct inquiry_entry *hci_inquiry_cache_lookup_unknown(struct hci_dev *hdev,
830
						       bdaddr_t *bdaddr);
831
struct inquiry_entry *hci_inquiry_cache_lookup_resolve(struct hci_dev *hdev,
832 833
						       bdaddr_t *bdaddr,
						       int state);
834
void hci_inquiry_cache_update_resolve(struct hci_dev *hdev,
835
				      struct inquiry_entry *ie);
836 837
u32 hci_inquiry_cache_update(struct hci_dev *hdev, struct inquiry_data *data,
			     bool name_known);
838
void hci_inquiry_cache_flush(struct hci_dev *hdev);
L
Linus Torvalds 已提交
839 840 841 842

/* ----- HCI Connections ----- */
enum {
	HCI_CONN_AUTH_PEND,
843
	HCI_CONN_REAUTH_PEND,
L
Linus Torvalds 已提交
844
	HCI_CONN_ENCRYPT_PEND,
845 846
	HCI_CONN_RSWITCH_PEND,
	HCI_CONN_MODE_CHANGE_PEND,
847
	HCI_CONN_SCO_SETUP_PEND,
848
	HCI_CONN_MGMT_CONNECTED,
849
	HCI_CONN_SSP_ENABLED,
850
	HCI_CONN_SC_ENABLED,
851
	HCI_CONN_AES_CCM,
852
	HCI_CONN_POWER_SAVE,
853
	HCI_CONN_FLUSH_KEY,
854 855 856 857
	HCI_CONN_ENCRYPT,
	HCI_CONN_AUTH,
	HCI_CONN_SECURE,
	HCI_CONN_FIPS,
858
	HCI_CONN_STK_ENCRYPT,
859
	HCI_CONN_AUTH_INITIATOR,
860
	HCI_CONN_DROP,
861
	HCI_CONN_PARAM_REMOVAL_PEND,
862
	HCI_CONN_NEW_LINK_KEY,
863
	HCI_CONN_SCANNING,
864
	HCI_CONN_AUTH_FAILURE,
L
Linus Torvalds 已提交
865 866
};

867 868 869
static inline bool hci_conn_ssp_enabled(struct hci_conn *conn)
{
	struct hci_dev *hdev = conn->hdev;
870
	return hci_dev_test_flag(hdev, HCI_SSP_ENABLED) &&
871
	       test_bit(HCI_CONN_SSP_ENABLED, &conn->flags);
872 873
}

874 875 876
static inline bool hci_conn_sc_enabled(struct hci_conn *conn)
{
	struct hci_dev *hdev = conn->hdev;
877
	return hci_dev_test_flag(hdev, HCI_SC_ENABLED) &&
878 879 880
	       test_bit(HCI_CONN_SC_ENABLED, &conn->flags);
}

L
Linus Torvalds 已提交
881 882 883
static inline void hci_conn_hash_add(struct hci_dev *hdev, struct hci_conn *c)
{
	struct hci_conn_hash *h = &hdev->conn_hash;
884
	list_add_rcu(&c->list, &h->list);
V
Ville Tervo 已提交
885 886
	switch (c->type) {
	case ACL_LINK:
L
Linus Torvalds 已提交
887
		h->acl_num++;
V
Ville Tervo 已提交
888
		break;
889 890 891
	case AMP_LINK:
		h->amp_num++;
		break;
V
Ville Tervo 已提交
892 893
	case LE_LINK:
		h->le_num++;
894 895
		if (c->role == HCI_ROLE_SLAVE)
			h->le_num_slave++;
V
Ville Tervo 已提交
896 897 898
		break;
	case SCO_LINK:
	case ESCO_LINK:
L
Linus Torvalds 已提交
899
		h->sco_num++;
V
Ville Tervo 已提交
900 901
		break;
	}
L
Linus Torvalds 已提交
902 903 904 905 906
}

static inline void hci_conn_hash_del(struct hci_dev *hdev, struct hci_conn *c)
{
	struct hci_conn_hash *h = &hdev->conn_hash;
907 908 909 910

	list_del_rcu(&c->list);
	synchronize_rcu();

V
Ville Tervo 已提交
911 912
	switch (c->type) {
	case ACL_LINK:
L
Linus Torvalds 已提交
913
		h->acl_num--;
V
Ville Tervo 已提交
914
		break;
915 916 917
	case AMP_LINK:
		h->amp_num--;
		break;
V
Ville Tervo 已提交
918 919
	case LE_LINK:
		h->le_num--;
920 921
		if (c->role == HCI_ROLE_SLAVE)
			h->le_num_slave--;
V
Ville Tervo 已提交
922 923 924
		break;
	case SCO_LINK:
	case ESCO_LINK:
L
Linus Torvalds 已提交
925
		h->sco_num--;
V
Ville Tervo 已提交
926 927
		break;
	}
L
Linus Torvalds 已提交
928 929
}

930 931 932 933 934 935
static inline unsigned int hci_conn_num(struct hci_dev *hdev, __u8 type)
{
	struct hci_conn_hash *h = &hdev->conn_hash;
	switch (type) {
	case ACL_LINK:
		return h->acl_num;
936 937
	case AMP_LINK:
		return h->amp_num;
938 939 940 941 942 943 944 945 946 947
	case LE_LINK:
		return h->le_num;
	case SCO_LINK:
	case ESCO_LINK:
		return h->sco_num;
	default:
		return 0;
	}
}

948 949 950 951 952 953 954
static inline unsigned int hci_conn_count(struct hci_dev *hdev)
{
	struct hci_conn_hash *c = &hdev->conn_hash;

	return c->acl_num + c->amp_num + c->sco_num + c->le_num;
}

955 956 957 958 959 960 961 962 963 964 965 966 967 968 969 970 971 972 973 974
static inline __u8 hci_conn_lookup_type(struct hci_dev *hdev, __u16 handle)
{
	struct hci_conn_hash *h = &hdev->conn_hash;
	struct hci_conn *c;
	__u8 type = INVALID_LINK;

	rcu_read_lock();

	list_for_each_entry_rcu(c, &h->list, list) {
		if (c->handle == handle) {
			type = c->type;
			break;
		}
	}

	rcu_read_unlock();

	return type;
}

L
Linus Torvalds 已提交
975
static inline struct hci_conn *hci_conn_hash_lookup_handle(struct hci_dev *hdev,
976
								__u16 handle)
L
Linus Torvalds 已提交
977 978 979 980
{
	struct hci_conn_hash *h = &hdev->conn_hash;
	struct hci_conn  *c;

981 982 983 984 985
	rcu_read_lock();

	list_for_each_entry_rcu(c, &h->list, list) {
		if (c->handle == handle) {
			rcu_read_unlock();
L
Linus Torvalds 已提交
986
			return c;
987
		}
L
Linus Torvalds 已提交
988
	}
989 990
	rcu_read_unlock();

L
Linus Torvalds 已提交
991 992 993 994
	return NULL;
}

static inline struct hci_conn *hci_conn_hash_lookup_ba(struct hci_dev *hdev,
995
							__u8 type, bdaddr_t *ba)
L
Linus Torvalds 已提交
996 997 998 999
{
	struct hci_conn_hash *h = &hdev->conn_hash;
	struct hci_conn  *c;

1000 1001 1002 1003 1004
	rcu_read_lock();

	list_for_each_entry_rcu(c, &h->list, list) {
		if (c->type == type && !bacmp(&c->dst, ba)) {
			rcu_read_unlock();
L
Linus Torvalds 已提交
1005
			return c;
1006
		}
L
Linus Torvalds 已提交
1007
	}
1008 1009 1010

	rcu_read_unlock();

L
Linus Torvalds 已提交
1011 1012 1013
	return NULL;
}

1014 1015 1016 1017 1018 1019 1020 1021 1022 1023 1024 1025 1026 1027 1028 1029 1030 1031 1032 1033 1034 1035 1036 1037
static inline struct hci_conn *hci_conn_hash_lookup_le(struct hci_dev *hdev,
						       bdaddr_t *ba,
						       __u8 ba_type)
{
	struct hci_conn_hash *h = &hdev->conn_hash;
	struct hci_conn  *c;

	rcu_read_lock();

	list_for_each_entry_rcu(c, &h->list, list) {
		if (c->type != LE_LINK)
		       continue;

		if (ba_type == c->dst_type && !bacmp(&c->dst, ba)) {
			rcu_read_unlock();
			return c;
		}
	}

	rcu_read_unlock();

	return NULL;
}

1038
static inline struct hci_conn *hci_conn_hash_lookup_state(struct hci_dev *hdev,
1039
							__u8 type, __u16 state)
1040 1041 1042 1043
{
	struct hci_conn_hash *h = &hdev->conn_hash;
	struct hci_conn  *c;

1044 1045 1046 1047 1048
	rcu_read_lock();

	list_for_each_entry_rcu(c, &h->list, list) {
		if (c->type == type && c->state == state) {
			rcu_read_unlock();
1049
			return c;
1050
		}
1051
	}
1052

1053
	rcu_read_unlock();
1054

1055
	return NULL;
1056 1057
}

1058 1059 1060 1061 1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072 1073 1074 1075 1076 1077
static inline struct hci_conn *hci_lookup_le_connect(struct hci_dev *hdev)
{
	struct hci_conn_hash *h = &hdev->conn_hash;
	struct hci_conn  *c;

	rcu_read_lock();

	list_for_each_entry_rcu(c, &h->list, list) {
		if (c->type == LE_LINK && c->state == BT_CONNECT &&
		    !test_bit(HCI_CONN_SCANNING, &c->flags)) {
			rcu_read_unlock();
			return c;
		}
	}

	rcu_read_unlock();

	return NULL;
}

1078
int hci_disconnect(struct hci_conn *conn, __u8 reason);
1079
bool hci_setup_sync(struct hci_conn *conn, __u16 handle);
1080
void hci_sco_setup(struct hci_conn *conn, __u8 status);
L
Linus Torvalds 已提交
1081

1082 1083
struct hci_conn *hci_conn_add(struct hci_dev *hdev, int type, bdaddr_t *dst,
			      u8 role);
1084 1085 1086
int hci_conn_del(struct hci_conn *conn);
void hci_conn_hash_flush(struct hci_dev *hdev);
void hci_conn_check_pending(struct hci_dev *hdev);
L
Linus Torvalds 已提交
1087

1088
struct hci_chan *hci_chan_create(struct hci_conn *conn);
1089
void hci_chan_del(struct hci_chan *chan);
1090
void hci_chan_list_flush(struct hci_conn *conn);
1091
struct hci_chan *hci_chan_lookup_handle(struct hci_dev *hdev, __u16 handle);
1092

1093 1094
struct hci_conn *hci_connect_le_scan(struct hci_dev *hdev, bdaddr_t *dst,
				     u8 dst_type, u8 sec_level,
1095 1096
				     u16 conn_timeout,
				     enum conn_reasons conn_reason);
1097
struct hci_conn *hci_connect_le(struct hci_dev *hdev, bdaddr_t *dst,
1098
				u8 dst_type, u8 sec_level, u16 conn_timeout,
1099
				u8 role, bdaddr_t *direct_rpa);
1100
struct hci_conn *hci_connect_acl(struct hci_dev *hdev, bdaddr_t *dst,
1101 1102
				 u8 sec_level, u8 auth_type,
				 enum conn_reasons conn_reason);
1103 1104
struct hci_conn *hci_connect_sco(struct hci_dev *hdev, int type, bdaddr_t *dst,
				 __u16 setting);
1105
int hci_conn_check_link_mode(struct hci_conn *conn);
1106
int hci_conn_check_secure(struct hci_conn *conn, __u8 sec_level);
1107 1108
int hci_conn_security(struct hci_conn *conn, __u8 sec_level, __u8 auth_type,
		      bool initiator);
1109
int hci_conn_switch_role(struct hci_conn *conn, __u8 role);
L
Linus Torvalds 已提交
1110

1111
void hci_conn_enter_active_mode(struct hci_conn *conn, __u8 force_active);
L
Linus Torvalds 已提交
1112

1113 1114
void hci_le_conn_failed(struct hci_conn *conn, u8 status);

1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135
/*
 * hci_conn_get() and hci_conn_put() are used to control the life-time of an
 * "hci_conn" object. They do not guarantee that the hci_conn object is running,
 * working or anything else. They just guarantee that the object is available
 * and can be dereferenced. So you can use its locks, local variables and any
 * other constant data.
 * Before accessing runtime data, you _must_ lock the object and then check that
 * it is still running. As soon as you release the locks, the connection might
 * get dropped, though.
 *
 * On the other hand, hci_conn_hold() and hci_conn_drop() are used to control
 * how long the underlying connection is held. So every channel that runs on the
 * hci_conn object calls this to prevent the connection from disappearing. As
 * long as you hold a device, you must also guarantee that you have a valid
 * reference to the device via hci_conn_get() (or the initial reference from
 * hci_conn_add()).
 * The hold()/drop() ref-count is known to drop below 0 sometimes, which doesn't
 * break because nobody cares for that. But this means, we cannot use
 * _get()/_drop() in it, but require the caller to have a valid ref (FIXME).
 */

1136
static inline struct hci_conn *hci_conn_get(struct hci_conn *conn)
1137 1138
{
	get_device(&conn->dev);
1139
	return conn;
1140 1141 1142 1143 1144 1145 1146
}

static inline void hci_conn_put(struct hci_conn *conn)
{
	put_device(&conn->dev);
}

L
Linus Torvalds 已提交
1147 1148
static inline void hci_conn_hold(struct hci_conn *conn)
{
1149
	BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1150

L
Linus Torvalds 已提交
1151
	atomic_inc(&conn->refcnt);
A
Andre Guedes 已提交
1152
	cancel_delayed_work(&conn->disc_work);
L
Linus Torvalds 已提交
1153 1154
}

1155
static inline void hci_conn_drop(struct hci_conn *conn)
L
Linus Torvalds 已提交
1156
{
1157
	BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1158

L
Linus Torvalds 已提交
1159
	if (atomic_dec_and_test(&conn->refcnt)) {
1160
		unsigned long timeo;
1161 1162 1163 1164

		switch (conn->type) {
		case ACL_LINK:
		case LE_LINK:
1165
			cancel_delayed_work(&conn->idle_work);
1166
			if (conn->state == BT_CONNECTED) {
1167
				timeo = conn->disc_timeout;
1168
				if (!conn->out)
1169
					timeo *= 2;
1170
			} else {
1171
				timeo = 0;
1172
			}
1173 1174 1175 1176 1177 1178 1179
			break;

		case AMP_LINK:
			timeo = conn->disc_timeout;
			break;

		default:
1180
			timeo = 0;
1181
			break;
1182
		}
1183

A
Andre Guedes 已提交
1184
		cancel_delayed_work(&conn->disc_work);
1185
		queue_delayed_work(conn->hdev->workqueue,
1186
				   &conn->disc_work, timeo);
L
Linus Torvalds 已提交
1187 1188 1189 1190
	}
}

/* ----- HCI Devices ----- */
1191
static inline void hci_dev_put(struct hci_dev *d)
L
Linus Torvalds 已提交
1192
{
1193
	BT_DBG("%s orig refcnt %d", d->name,
1194
	       kref_read(&d->dev.kobj.kref));
1195

1196
	put_device(&d->dev);
L
Linus Torvalds 已提交
1197 1198
}

1199
static inline struct hci_dev *hci_dev_hold(struct hci_dev *d)
L
Linus Torvalds 已提交
1200
{
1201
	BT_DBG("%s orig refcnt %d", d->name,
1202
	       kref_read(&d->dev.kobj.kref));
1203

1204
	get_device(&d->dev);
L
Linus Torvalds 已提交
1205 1206 1207
	return d;
}

1208 1209
#define hci_dev_lock(d)		mutex_lock(&d->lock)
#define hci_dev_unlock(d)	mutex_unlock(&d->lock)
L
Linus Torvalds 已提交
1210

1211
#define to_hci_dev(d) container_of(d, struct hci_dev, dev)
1212
#define to_hci_conn(c) container_of(c, struct hci_conn, dev)
1213

1214 1215 1216 1217 1218 1219 1220 1221 1222 1223
static inline void *hci_get_drvdata(struct hci_dev *hdev)
{
	return dev_get_drvdata(&hdev->dev);
}

static inline void hci_set_drvdata(struct hci_dev *hdev, void *data)
{
	dev_set_drvdata(&hdev->dev, data);
}

L
Linus Torvalds 已提交
1224
struct hci_dev *hci_dev_get(int index);
1225
struct hci_dev *hci_get_route(bdaddr_t *dst, bdaddr_t *src, u8 src_type);
L
Linus Torvalds 已提交
1226 1227 1228 1229

struct hci_dev *hci_alloc_dev(void);
void hci_free_dev(struct hci_dev *hdev);
int hci_register_dev(struct hci_dev *hdev);
1230
void hci_unregister_dev(struct hci_dev *hdev);
L
Linus Torvalds 已提交
1231 1232
int hci_suspend_dev(struct hci_dev *hdev);
int hci_resume_dev(struct hci_dev *hdev);
1233
int hci_reset_dev(struct hci_dev *hdev);
1234 1235
int hci_recv_frame(struct hci_dev *hdev, struct sk_buff *skb);
int hci_recv_diag(struct hci_dev *hdev, struct sk_buff *skb);
1236 1237
__printf(2, 3) void hci_set_hw_info(struct hci_dev *hdev, const char *fmt, ...);
__printf(2, 3) void hci_set_fw_info(struct hci_dev *hdev, const char *fmt, ...);
1238 1239 1240 1241 1242 1243 1244 1245

static inline void hci_set_msft_opcode(struct hci_dev *hdev, __u16 opcode)
{
#if IS_ENABLED(CONFIG_BT_MSFTEXT)
	hdev->msft_opcode = opcode;
#endif
}

1246 1247 1248 1249 1250 1251 1252
static inline void hci_set_aosp_capable(struct hci_dev *hdev)
{
#if IS_ENABLED(CONFIG_BT_AOSPEXT)
	hdev->aosp_capable = true;
#endif
}

L
Linus Torvalds 已提交
1253 1254
int hci_dev_open(__u16 dev);
int hci_dev_close(__u16 dev);
1255
int hci_dev_do_close(struct hci_dev *hdev);
L
Linus Torvalds 已提交
1256 1257 1258 1259 1260 1261 1262
int hci_dev_reset(__u16 dev);
int hci_dev_reset_stat(__u16 dev);
int hci_dev_cmd(unsigned int cmd, void __user *arg);
int hci_get_dev_list(void __user *arg);
int hci_get_dev_info(void __user *arg);
int hci_get_conn_list(void __user *arg);
int hci_get_conn_info(struct hci_dev *hdev, void __user *arg);
1263
int hci_get_auth_info(struct hci_dev *hdev, void __user *arg);
L
Linus Torvalds 已提交
1264 1265
int hci_inquiry(void __user *arg);

1266 1267
struct bdaddr_list *hci_bdaddr_list_lookup(struct list_head *list,
					   bdaddr_t *bdaddr, u8 type);
1268 1269 1270
struct bdaddr_list_with_irk *hci_bdaddr_list_lookup_with_irk(
				    struct list_head *list, bdaddr_t *bdaddr,
				    u8 type);
1271 1272 1273
struct bdaddr_list_with_flags *
hci_bdaddr_list_lookup_with_flags(struct list_head *list, bdaddr_t *bdaddr,
				  u8 type);
1274
int hci_bdaddr_list_add(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1275
int hci_bdaddr_list_add_with_irk(struct list_head *list, bdaddr_t *bdaddr,
1276 1277 1278
				 u8 type, u8 *peer_irk, u8 *local_irk);
int hci_bdaddr_list_add_with_flags(struct list_head *list, bdaddr_t *bdaddr,
				   u8 type, u32 flags);
1279
int hci_bdaddr_list_del(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1280
int hci_bdaddr_list_del_with_irk(struct list_head *list, bdaddr_t *bdaddr,
1281 1282 1283
				 u8 type);
int hci_bdaddr_list_del_with_flags(struct list_head *list, bdaddr_t *bdaddr,
				   u8 type);
1284
void hci_bdaddr_list_clear(struct list_head *list);
1285

1286 1287
struct hci_conn_params *hci_conn_params_lookup(struct hci_dev *hdev,
					       bdaddr_t *addr, u8 addr_type);
1288 1289
struct hci_conn_params *hci_conn_params_add(struct hci_dev *hdev,
					    bdaddr_t *addr, u8 addr_type);
1290
void hci_conn_params_del(struct hci_dev *hdev, bdaddr_t *addr, u8 addr_type);
1291
void hci_conn_params_clear_disabled(struct hci_dev *hdev);
1292

1293 1294 1295
struct hci_conn_params *hci_pend_le_action_lookup(struct list_head *list,
						  bdaddr_t *addr,
						  u8 addr_type);
1296

1297
void hci_uuids_clear(struct hci_dev *hdev);
1298

1299
void hci_link_keys_clear(struct hci_dev *hdev);
1300
struct link_key *hci_find_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1301
struct link_key *hci_add_link_key(struct hci_dev *hdev, struct hci_conn *conn,
1302 1303
				  bdaddr_t *bdaddr, u8 *val, u8 type,
				  u8 pin_len, bool *persistent);
1304
struct smp_ltk *hci_add_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1305
			    u8 addr_type, u8 type, u8 authenticated,
1306
			    u8 tk[16], u8 enc_size, __le16 ediv, __le64 rand);
1307 1308
struct smp_ltk *hci_find_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
			     u8 addr_type, u8 role);
1309
int hci_remove_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 bdaddr_type);
1310
void hci_smp_ltks_clear(struct hci_dev *hdev);
1311 1312
int hci_remove_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);

1313 1314 1315
struct smp_irk *hci_find_irk_by_rpa(struct hci_dev *hdev, bdaddr_t *rpa);
struct smp_irk *hci_find_irk_by_addr(struct hci_dev *hdev, bdaddr_t *bdaddr,
				     u8 addr_type);
1316 1317
struct smp_irk *hci_add_irk(struct hci_dev *hdev, bdaddr_t *bdaddr,
			    u8 addr_type, u8 val[16], bdaddr_t *rpa);
1318
void hci_remove_irk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 addr_type);
1319 1320
bool hci_is_blocked_key(struct hci_dev *hdev, u8 type, u8 val[16]);
void hci_blocked_keys_clear(struct hci_dev *hdev);
1321 1322
void hci_smp_irks_clear(struct hci_dev *hdev);

1323 1324
bool hci_bdaddr_is_paired(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type);

1325
void hci_remote_oob_data_clear(struct hci_dev *hdev);
1326
struct oob_data *hci_find_remote_oob_data(struct hci_dev *hdev,
1327
					  bdaddr_t *bdaddr, u8 bdaddr_type);
1328
int hci_add_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1329
			    u8 bdaddr_type, u8 *hash192, u8 *rand192,
1330
			    u8 *hash256, u8 *rand256);
1331 1332
int hci_remove_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
			       u8 bdaddr_type);
1333

1334 1335 1336 1337 1338 1339
void hci_adv_instances_clear(struct hci_dev *hdev);
struct adv_info *hci_find_adv_instance(struct hci_dev *hdev, u8 instance);
struct adv_info *hci_get_next_instance(struct hci_dev *hdev, u8 instance);
int hci_add_adv_instance(struct hci_dev *hdev, u8 instance, u32 flags,
			 u16 adv_data_len, u8 *adv_data,
			 u16 scan_rsp_len, u8 *scan_rsp_data,
1340 1341
			 u16 timeout, u16 duration, s8 tx_power,
			 u32 min_interval, u32 max_interval);
1342 1343 1344
int hci_set_adv_instance_data(struct hci_dev *hdev, u8 instance,
			 u16 adv_data_len, u8 *adv_data,
			 u16 scan_rsp_len, u8 *scan_rsp_data);
1345
int hci_remove_adv_instance(struct hci_dev *hdev, u8 instance);
1346
void hci_adv_instances_set_rpa_expired(struct hci_dev *hdev, bool rpa_expired);
1347

1348
void hci_adv_monitors_clear(struct hci_dev *hdev);
1349
void hci_free_adv_monitor(struct hci_dev *hdev, struct adv_monitor *monitor);
1350
int hci_add_adv_patterns_monitor_complete(struct hci_dev *hdev, u8 status);
1351
int hci_remove_adv_monitor_complete(struct hci_dev *hdev, u8 status);
1352 1353
bool hci_add_adv_monitor(struct hci_dev *hdev, struct adv_monitor *monitor,
			int *err);
1354 1355
bool hci_remove_single_adv_monitor(struct hci_dev *hdev, u16 handle, int *err);
bool hci_remove_all_adv_monitor(struct hci_dev *hdev, int *err);
1356
bool hci_is_adv_monitoring(struct hci_dev *hdev);
1357
int hci_get_adv_monitor_offload_ext(struct hci_dev *hdev);
1358

L
Linus Torvalds 已提交
1359 1360
void hci_event_packet(struct hci_dev *hdev, struct sk_buff *skb);

1361
void hci_init_sysfs(struct hci_dev *hdev);
1362
void hci_conn_init_sysfs(struct hci_conn *conn);
1363 1364
void hci_conn_add_sysfs(struct hci_conn *conn);
void hci_conn_del_sysfs(struct hci_conn *conn);
L
Linus Torvalds 已提交
1365

1366
#define SET_HCIDEV_DEV(hdev, pdev) ((hdev)->dev.parent = (pdev))
L
Linus Torvalds 已提交
1367 1368

/* ----- LMP capabilities ----- */
1369 1370 1371 1372 1373 1374 1375 1376 1377 1378 1379
#define lmp_encrypt_capable(dev)   ((dev)->features[0][0] & LMP_ENCRYPT)
#define lmp_rswitch_capable(dev)   ((dev)->features[0][0] & LMP_RSWITCH)
#define lmp_hold_capable(dev)      ((dev)->features[0][0] & LMP_HOLD)
#define lmp_sniff_capable(dev)     ((dev)->features[0][0] & LMP_SNIFF)
#define lmp_park_capable(dev)      ((dev)->features[0][1] & LMP_PARK)
#define lmp_inq_rssi_capable(dev)  ((dev)->features[0][3] & LMP_RSSI_INQ)
#define lmp_esco_capable(dev)      ((dev)->features[0][3] & LMP_ESCO)
#define lmp_bredr_capable(dev)     (!((dev)->features[0][4] & LMP_NO_BREDR))
#define lmp_le_capable(dev)        ((dev)->features[0][4] & LMP_LE)
#define lmp_sniffsubr_capable(dev) ((dev)->features[0][5] & LMP_SNIFF_SUBR)
#define lmp_pause_enc_capable(dev) ((dev)->features[0][5] & LMP_PAUSE_ENC)
1380
#define lmp_esco_2m_capable(dev)   ((dev)->features[0][5] & LMP_EDR_ESCO_2M)
1381 1382 1383 1384 1385 1386 1387
#define lmp_ext_inq_capable(dev)   ((dev)->features[0][6] & LMP_EXT_INQ)
#define lmp_le_br_capable(dev)     (!!((dev)->features[0][6] & LMP_SIMUL_LE_BR))
#define lmp_ssp_capable(dev)       ((dev)->features[0][6] & LMP_SIMPLE_PAIR)
#define lmp_no_flush_capable(dev)  ((dev)->features[0][6] & LMP_NO_FLUSH)
#define lmp_lsto_capable(dev)      ((dev)->features[0][7] & LMP_LSTO)
#define lmp_inq_tx_pwr_capable(dev) ((dev)->features[0][7] & LMP_INQ_TX_PWR)
#define lmp_ext_feat_capable(dev)  ((dev)->features[0][7] & LMP_EXTFEATURES)
1388
#define lmp_transp_capable(dev)    ((dev)->features[0][2] & LMP_TRANSPARENT)
1389 1390 1391 1392
#define lmp_edr_2m_capable(dev)    ((dev)->features[0][3] & LMP_EDR_2M)
#define lmp_edr_3m_capable(dev)    ((dev)->features[0][3] & LMP_EDR_3M)
#define lmp_edr_3slot_capable(dev) ((dev)->features[0][4] & LMP_EDR_3SLOT)
#define lmp_edr_5slot_capable(dev) ((dev)->features[0][5] & LMP_EDR_5SLOT)
L
Linus Torvalds 已提交
1393

1394
/* ----- Extended LMP capabilities ----- */
1395 1396 1397 1398
#define lmp_csb_master_capable(dev) ((dev)->features[2][0] & LMP_CSB_MASTER)
#define lmp_csb_slave_capable(dev)  ((dev)->features[2][0] & LMP_CSB_SLAVE)
#define lmp_sync_train_capable(dev) ((dev)->features[2][0] & LMP_SYNC_TRAIN)
#define lmp_sync_scan_capable(dev)  ((dev)->features[2][0] & LMP_SYNC_SCAN)
1399 1400
#define lmp_sc_capable(dev)         ((dev)->features[2][1] & LMP_SC)
#define lmp_ping_capable(dev)       ((dev)->features[2][1] & LMP_PING)
1401 1402

/* ----- Host capabilities ----- */
1403
#define lmp_host_ssp_capable(dev)  ((dev)->features[1][0] & LMP_HOST_SSP)
1404
#define lmp_host_sc_capable(dev)   ((dev)->features[1][0] & LMP_HOST_SC)
1405 1406
#define lmp_host_le_capable(dev)   (!!((dev)->features[1][0] & LMP_HOST_LE))
#define lmp_host_le_br_capable(dev) (!!((dev)->features[1][0] & LMP_HOST_LE_BREDR))
1407

1408 1409 1410 1411
#define hdev_is_powered(dev)   (test_bit(HCI_UP, &(dev)->flags) && \
				!hci_dev_test_flag(dev, HCI_AUTO_OFF))
#define bredr_sc_enabled(dev)  (lmp_sc_capable(dev) && \
				hci_dev_test_flag(dev, HCI_SC_ENABLED))
1412

1413 1414 1415 1416 1417 1418 1419 1420 1421
#define scan_1m(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_1M) || \
		      ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_1M))

#define scan_2m(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_2M) || \
		      ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_2M))

#define scan_coded(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_CODED) || \
			 ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_CODED))

1422 1423 1424
/* Use LL Privacy based address resolution if supported */
#define use_ll_privacy(dev) ((dev)->le_features[0] & HCI_LE_LL_PRIVACY)

1425 1426 1427
/* Use ext scanning if set ext scan param and ext scan enable is supported */
#define use_ext_scan(dev) (((dev)->commands[37] & 0x20) && \
			   ((dev)->commands[37] & 0x40))
1428 1429
/* Use ext create connection if command is supported */
#define use_ext_conn(dev) ((dev)->commands[37] & 0x80)
1430

1431 1432 1433
/* Extended advertising support */
#define ext_adv_capable(dev) (((dev)->le_features[1] & HCI_LE_EXT_ADV))

L
Linus Torvalds 已提交
1434
/* ----- HCI protocols ----- */
1435 1436
#define HCI_PROTO_DEFER             0x01

1437
static inline int hci_proto_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
1438
					__u8 type, __u8 *flags)
L
Linus Torvalds 已提交
1439
{
1440 1441 1442
	switch (type) {
	case ACL_LINK:
		return l2cap_connect_ind(hdev, bdaddr);
L
Linus Torvalds 已提交
1443

1444 1445
	case SCO_LINK:
	case ESCO_LINK:
1446
		return sco_connect_ind(hdev, bdaddr, flags);
L
Linus Torvalds 已提交
1447

1448 1449 1450 1451
	default:
		BT_ERR("unknown link type %d", type);
		return -EINVAL;
	}
L
Linus Torvalds 已提交
1452 1453
}

1454
static inline int hci_proto_disconn_ind(struct hci_conn *conn)
L
Linus Torvalds 已提交
1455
{
1456 1457
	if (conn->type != ACL_LINK && conn->type != LE_LINK)
		return HCI_ERROR_REMOTE_USER_TERM;
L
Linus Torvalds 已提交
1458

1459
	return l2cap_disconn_ind(conn);
1460 1461
}

L
Linus Torvalds 已提交
1462 1463 1464 1465 1466 1467
/* ----- HCI callbacks ----- */
struct hci_cb {
	struct list_head list;

	char *name;

1468
	void (*connect_cfm)	(struct hci_conn *conn, __u8 status);
1469
	void (*disconn_cfm)	(struct hci_conn *conn, __u8 status);
1470 1471
	void (*security_cfm)	(struct hci_conn *conn, __u8 status,
								__u8 encrypt);
L
Linus Torvalds 已提交
1472 1473 1474 1475
	void (*key_change_cfm)	(struct hci_conn *conn, __u8 status);
	void (*role_switch_cfm)	(struct hci_conn *conn, __u8 status, __u8 role);
};

1476 1477 1478 1479 1480 1481 1482 1483 1484 1485 1486 1487 1488 1489 1490
static inline void hci_connect_cfm(struct hci_conn *conn, __u8 status)
{
	struct hci_cb *cb;

	mutex_lock(&hci_cb_list_lock);
	list_for_each_entry(cb, &hci_cb_list, list) {
		if (cb->connect_cfm)
			cb->connect_cfm(conn, status);
	}
	mutex_unlock(&hci_cb_list_lock);

	if (conn->connect_cfm_cb)
		conn->connect_cfm_cb(conn, status);
}

1491 1492 1493 1494 1495 1496 1497 1498 1499 1500 1501 1502 1503 1504 1505
static inline void hci_disconn_cfm(struct hci_conn *conn, __u8 reason)
{
	struct hci_cb *cb;

	mutex_lock(&hci_cb_list_lock);
	list_for_each_entry(cb, &hci_cb_list, list) {
		if (cb->disconn_cfm)
			cb->disconn_cfm(conn, reason);
	}
	mutex_unlock(&hci_cb_list_lock);

	if (conn->disconn_cfm_cb)
		conn->disconn_cfm_cb(conn, reason);
}

L
Linus Torvalds 已提交
1506 1507
static inline void hci_auth_cfm(struct hci_conn *conn, __u8 status)
{
1508
	struct hci_cb *cb;
1509
	__u8 encrypt;
L
Linus Torvalds 已提交
1510

1511
	if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->flags))
1512 1513
		return;

1514
	encrypt = test_bit(HCI_CONN_ENCRYPT, &conn->flags) ? 0x01 : 0x00;
1515

1516
	mutex_lock(&hci_cb_list_lock);
1517
	list_for_each_entry(cb, &hci_cb_list, list) {
1518 1519
		if (cb->security_cfm)
			cb->security_cfm(conn, status, encrypt);
L
Linus Torvalds 已提交
1520
	}
1521
	mutex_unlock(&hci_cb_list_lock);
1522 1523 1524

	if (conn->security_cfm_cb)
		conn->security_cfm_cb(conn, status);
L
Linus Torvalds 已提交
1525 1526
}

1527
static inline void hci_encrypt_cfm(struct hci_conn *conn, __u8 status)
L
Linus Torvalds 已提交
1528
{
1529
	struct hci_cb *cb;
1530 1531 1532
	__u8 encrypt;

	if (conn->state == BT_CONFIG) {
1533
		if (!status)
1534 1535 1536 1537 1538 1539 1540 1541 1542 1543 1544 1545 1546
			conn->state = BT_CONNECTED;

		hci_connect_cfm(conn, status);
		hci_conn_drop(conn);
		return;
	}

	if (!test_bit(HCI_CONN_ENCRYPT, &conn->flags))
		encrypt = 0x00;
	else if (test_bit(HCI_CONN_AES_CCM, &conn->flags))
		encrypt = 0x02;
	else
		encrypt = 0x01;
L
Linus Torvalds 已提交
1547

1548 1549 1550
	if (!status) {
		if (conn->sec_level == BT_SECURITY_SDP)
			conn->sec_level = BT_SECURITY_LOW;
1551

1552 1553 1554
		if (conn->pending_sec_level > conn->sec_level)
			conn->sec_level = conn->pending_sec_level;
	}
1555

1556
	mutex_lock(&hci_cb_list_lock);
1557
	list_for_each_entry(cb, &hci_cb_list, list) {
1558 1559
		if (cb->security_cfm)
			cb->security_cfm(conn, status, encrypt);
L
Linus Torvalds 已提交
1560
	}
1561
	mutex_unlock(&hci_cb_list_lock);
1562 1563 1564

	if (conn->security_cfm_cb)
		conn->security_cfm_cb(conn, status);
L
Linus Torvalds 已提交
1565 1566 1567 1568
}

static inline void hci_key_change_cfm(struct hci_conn *conn, __u8 status)
{
1569
	struct hci_cb *cb;
L
Linus Torvalds 已提交
1570

1571
	mutex_lock(&hci_cb_list_lock);
1572
	list_for_each_entry(cb, &hci_cb_list, list) {
L
Linus Torvalds 已提交
1573 1574 1575
		if (cb->key_change_cfm)
			cb->key_change_cfm(conn, status);
	}
1576
	mutex_unlock(&hci_cb_list_lock);
L
Linus Torvalds 已提交
1577 1578
}

1579 1580
static inline void hci_role_switch_cfm(struct hci_conn *conn, __u8 status,
								__u8 role)
L
Linus Torvalds 已提交
1581
{
1582
	struct hci_cb *cb;
L
Linus Torvalds 已提交
1583

1584
	mutex_lock(&hci_cb_list_lock);
1585
	list_for_each_entry(cb, &hci_cb_list, list) {
L
Linus Torvalds 已提交
1586 1587 1588
		if (cb->role_switch_cfm)
			cb->role_switch_cfm(conn, status, role);
	}
1589
	mutex_unlock(&hci_cb_list_lock);
L
Linus Torvalds 已提交
1590 1591
}

1592 1593
static inline void *eir_get_data(u8 *eir, size_t eir_len, u8 type,
				 size_t *data_len)
1594
{
1595
	size_t parsed = 0;
1596

1597 1598
	if (eir_len < 2)
		return NULL;
1599

1600 1601
	while (parsed < eir_len - 1) {
		u8 field_len = eir[0];
1602 1603 1604 1605 1606 1607

		if (field_len == 0)
			break;

		parsed += field_len + 1;

1608
		if (parsed > eir_len)
1609 1610
			break;

1611 1612 1613 1614 1615 1616 1617 1618
		if (eir[1] != type) {
			eir += field_len + 1;
			continue;
		}

		/* Zero length data */
		if (field_len == 1)
			return NULL;
1619

1620 1621 1622 1623
		if (data_len)
			*data_len = field_len - 1;

		return &eir[2];
1624 1625
	}

1626
	return NULL;
1627 1628
}

1629 1630
static inline bool hci_bdaddr_is_rpa(bdaddr_t *bdaddr, u8 addr_type)
{
1631
	if (addr_type != ADDR_LE_DEV_RANDOM)
1632 1633 1634 1635 1636 1637 1638 1639
		return false;

	if ((bdaddr->b[5] & 0xc0) == 0x40)
	       return true;

	return false;
}

1640 1641 1642 1643 1644 1645 1646 1647 1648 1649 1650 1651
static inline bool hci_is_identity_address(bdaddr_t *addr, u8 addr_type)
{
	if (addr_type == ADDR_LE_DEV_PUBLIC)
		return true;

	/* Check for Random Static address type */
	if ((addr->b[5] & 0xc0) == 0xc0)
		return true;

	return false;
}

1652 1653 1654 1655 1656 1657 1658 1659 1660
static inline struct smp_irk *hci_get_irk(struct hci_dev *hdev,
					  bdaddr_t *bdaddr, u8 addr_type)
{
	if (!hci_bdaddr_is_rpa(bdaddr, addr_type))
		return NULL;

	return hci_find_irk_by_rpa(hdev, bdaddr);
}

1661 1662 1663 1664 1665 1666 1667 1668 1669 1670 1671 1672 1673 1674
static inline int hci_check_conn_params(u16 min, u16 max, u16 latency,
					u16 to_multiplier)
{
	u16 max_latency;

	if (min > max || min < 6 || max > 3200)
		return -EINVAL;

	if (to_multiplier < 10 || to_multiplier > 3200)
		return -EINVAL;

	if (max >= to_multiplier * 8)
		return -EINVAL;

1675
	max_latency = (to_multiplier * 4 / max) - 1;
1676 1677 1678 1679 1680 1681
	if (latency > 499 || latency > max_latency)
		return -EINVAL;

	return 0;
}

L
Linus Torvalds 已提交
1682 1683 1684
int hci_register_cb(struct hci_cb *hcb);
int hci_unregister_cb(struct hci_cb *hcb);

1685
struct sk_buff *__hci_cmd_sync(struct hci_dev *hdev, u16 opcode, u32 plen,
1686
			       const void *param, u32 timeout);
1687
struct sk_buff *__hci_cmd_sync_ev(struct hci_dev *hdev, u16 opcode, u32 plen,
1688
				  const void *param, u8 event, u32 timeout);
1689 1690
int __hci_cmd_send(struct hci_dev *hdev, u16 opcode, u32 plen,
		   const void *param);
1691

1692 1693
int hci_send_cmd(struct hci_dev *hdev, __u16 opcode, __u32 plen,
		 const void *param);
1694
void hci_send_acl(struct hci_chan *chan, struct sk_buff *skb, __u16 flags);
1695
void hci_send_sco(struct hci_conn *conn, struct sk_buff *skb);
L
Linus Torvalds 已提交
1696

1697
void *hci_sent_cmd_data(struct hci_dev *hdev, __u16 opcode);
L
Linus Torvalds 已提交
1698

1699 1700 1701
struct sk_buff *hci_cmd_sync(struct hci_dev *hdev, u16 opcode, u32 plen,
			     const void *param, u32 timeout);

1702 1703
u32 hci_conn_get_phy(struct hci_conn *conn);

L
Linus Torvalds 已提交
1704
/* ----- HCI Sockets ----- */
1705
void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb);
1706
void hci_send_to_channel(unsigned short channel, struct sk_buff *skb,
1707
			 int flag, struct sock *skip_sk);
1708
void hci_send_to_monitor(struct hci_dev *hdev, struct sk_buff *skb);
1709 1710 1711
void hci_send_monitor_ctrl_event(struct hci_dev *hdev, u16 event,
				 void *data, u16 data_len, ktime_t tstamp,
				 int flag, struct sock *skip_sk);
L
Linus Torvalds 已提交
1712

1713 1714
void hci_sock_dev_event(struct hci_dev *hdev, int event);

1715 1716 1717 1718
#define HCI_MGMT_VAR_LEN	BIT(0)
#define HCI_MGMT_NO_HDEV	BIT(1)
#define HCI_MGMT_UNTRUSTED	BIT(2)
#define HCI_MGMT_UNCONFIGURED	BIT(3)
1719
#define HCI_MGMT_HDEV_OPTIONAL	BIT(4)
1720

1721 1722 1723 1724
struct hci_mgmt_handler {
	int (*func) (struct sock *sk, struct hci_dev *hdev, void *data,
		     u16 data_len);
	size_t data_len;
1725
	unsigned long flags;
1726 1727 1728 1729 1730 1731 1732
};

struct hci_mgmt_chan {
	struct list_head list;
	unsigned short channel;
	size_t handler_count;
	const struct hci_mgmt_handler *handlers;
1733
	void (*hdev_init) (struct sock *sk, struct hci_dev *hdev);
1734 1735 1736 1737 1738
};

int hci_mgmt_chan_register(struct hci_mgmt_chan *c);
void hci_mgmt_chan_unregister(struct hci_mgmt_chan *c);

1739
/* Management interface */
1740 1741 1742 1743 1744 1745
#define DISCOV_TYPE_BREDR		(BIT(BDADDR_BREDR))
#define DISCOV_TYPE_LE			(BIT(BDADDR_LE_PUBLIC) | \
					 BIT(BDADDR_LE_RANDOM))
#define DISCOV_TYPE_INTERLEAVED		(BIT(BDADDR_BREDR) | \
					 BIT(BDADDR_LE_PUBLIC) | \
					 BIT(BDADDR_LE_RANDOM))
1746

1747 1748 1749 1750 1751
/* These LE scan and inquiry parameters were chosen according to LE General
 * Discovery Procedure specification.
 */
#define DISCOV_LE_SCAN_WIN		0x12
#define DISCOV_LE_SCAN_INT		0x12
1752
#define DISCOV_LE_TIMEOUT		10240	/* msec */
1753
#define DISCOV_INTERLEAVED_TIMEOUT	5120	/* msec */
1754 1755
#define DISCOV_INTERLEAVED_INQUIRY_LEN	0x04
#define DISCOV_BREDR_INQUIRY_LEN	0x08
1756
#define DISCOV_LE_RESTART_DELAY		msecs_to_jiffies(200)	/* msec */
1757 1758
#define DISCOV_LE_FAST_ADV_INT_MIN     100     /* msec */
#define DISCOV_LE_FAST_ADV_INT_MAX     150     /* msec */
1759

1760
void mgmt_fill_version_info(void *ver);
1761
int mgmt_new_settings(struct hci_dev *hdev);
1762 1763
void mgmt_index_added(struct hci_dev *hdev);
void mgmt_index_removed(struct hci_dev *hdev);
1764
void mgmt_set_powered_failed(struct hci_dev *hdev, int err);
1765 1766
void mgmt_power_on(struct hci_dev *hdev, int err);
void __mgmt_power_off(struct hci_dev *hdev);
1767 1768
void mgmt_new_link_key(struct hci_dev *hdev, struct link_key *key,
		       bool persistent);
1769 1770
void mgmt_device_connected(struct hci_dev *hdev, struct hci_conn *conn,
			   u32 flags, u8 *name, u8 name_len);
1771
void mgmt_device_disconnected(struct hci_dev *hdev, bdaddr_t *bdaddr,
1772 1773
			      u8 link_type, u8 addr_type, u8 reason,
			      bool mgmt_connected);
1774 1775
void mgmt_disconnect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr,
			    u8 link_type, u8 addr_type, u8 status);
1776 1777
void mgmt_connect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
			 u8 addr_type, u8 status);
1778
void mgmt_pin_code_request(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 secure);
1779 1780
void mgmt_pin_code_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
				  u8 status);
1781 1782
void mgmt_pin_code_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
				      u8 status);
1783
int mgmt_user_confirm_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
1784
			      u8 link_type, u8 addr_type, u32 value,
1785
			      u8 confirm_hint);
1786
int mgmt_user_confirm_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1787
				     u8 link_type, u8 addr_type, u8 status);
1788
int mgmt_user_confirm_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1789
					 u8 link_type, u8 addr_type, u8 status);
1790
int mgmt_user_passkey_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
1791
			      u8 link_type, u8 addr_type);
1792
int mgmt_user_passkey_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1793
				     u8 link_type, u8 addr_type, u8 status);
1794
int mgmt_user_passkey_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1795
					 u8 link_type, u8 addr_type, u8 status);
1796 1797 1798
int mgmt_user_passkey_notify(struct hci_dev *hdev, bdaddr_t *bdaddr,
			     u8 link_type, u8 addr_type, u32 passkey,
			     u8 entered);
1799
void mgmt_auth_failed(struct hci_conn *conn, u8 status);
1800
void mgmt_auth_enable_complete(struct hci_dev *hdev, u8 status);
1801
void mgmt_ssp_enable_complete(struct hci_dev *hdev, u8 enable, u8 status);
1802 1803
void mgmt_set_class_of_dev_complete(struct hci_dev *hdev, u8 *dev_class,
				    u8 status);
1804
void mgmt_set_local_name_complete(struct hci_dev *hdev, u8 *name, u8 status);
1805
void mgmt_start_discovery_complete(struct hci_dev *hdev, u8 status);
1806
void mgmt_stop_discovery_complete(struct hci_dev *hdev, u8 status);
1807
void mgmt_device_found(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1808 1809
		       u8 addr_type, u8 *dev_class, s8 rssi, u32 flags,
		       u8 *eir, u16 eir_len, u8 *scan_rsp, u8 scan_rsp_len);
1810 1811
void mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
		      u8 addr_type, s8 rssi, u8 *name, u8 name_len);
1812
void mgmt_discovering(struct hci_dev *hdev, u8 discovering);
1813 1814 1815
void mgmt_suspending(struct hci_dev *hdev, u8 state);
void mgmt_resuming(struct hci_dev *hdev, u8 reason, bdaddr_t *bdaddr,
		   u8 addr_type);
1816
bool mgmt_powering_down(struct hci_dev *hdev);
1817
void mgmt_new_ltk(struct hci_dev *hdev, struct smp_ltk *key, bool persistent);
1818
void mgmt_new_irk(struct hci_dev *hdev, struct smp_irk *irk, bool persistent);
1819 1820
void mgmt_new_csrk(struct hci_dev *hdev, struct smp_csrk *csrk,
		   bool persistent);
1821
void mgmt_new_conn_param(struct hci_dev *hdev, bdaddr_t *bdaddr,
1822 1823
			 u8 bdaddr_type, u8 store_hint, u16 min_interval,
			 u16 max_interval, u16 latency, u16 timeout);
1824
void mgmt_smp_complete(struct hci_conn *conn, bool complete);
1825
bool mgmt_get_connectable(struct hci_dev *hdev);
1826
void mgmt_set_connectable_complete(struct hci_dev *hdev, u8 status);
1827
void mgmt_set_discoverable_complete(struct hci_dev *hdev, u8 status);
1828 1829 1830 1831 1832
u8 mgmt_get_adv_discov_flags(struct hci_dev *hdev);
void mgmt_advertising_added(struct sock *sk, struct hci_dev *hdev,
			    u8 instance);
void mgmt_advertising_removed(struct sock *sk, struct hci_dev *hdev,
			      u8 instance);
1833
void mgmt_adv_monitor_removed(struct hci_dev *hdev, u16 handle);
1834
int mgmt_phy_configuration_changed(struct hci_dev *hdev, struct sock *skip);
1835
int mgmt_add_adv_patterns_monitor_complete(struct hci_dev *hdev, u8 status);
1836
int mgmt_remove_adv_monitor_complete(struct hci_dev *hdev, u8 status);
1837

1838 1839
u8 hci_le_conn_update(struct hci_conn *conn, u16 min, u16 max, u16 latency,
		      u16 to_multiplier);
1840
void hci_le_start_enc(struct hci_conn *conn, __le16 ediv, __le64 rand,
1841
		      __u8 ltk[16], __u8 key_size);
A
Andre Guedes 已提交
1842

1843 1844
void hci_copy_identity_address(struct hci_dev *hdev, bdaddr_t *bdaddr,
			       u8 *bdaddr_type);
1845

1846 1847 1848 1849
#define SCO_AIRMODE_MASK       0x0003
#define SCO_AIRMODE_CVSD       0x0000
#define SCO_AIRMODE_TRANSP     0x0003

L
Linus Torvalds 已提交
1850
#endif /* __HCI_CORE_H */