hci_core.h 52.4 KB
Newer Older
1
/*
L
Linus Torvalds 已提交
2
   BlueZ - Bluetooth protocol stack for Linux
3
   Copyright (c) 2000-2001, 2010, Code Aurora Forum. All rights reserved.
L
Linus Torvalds 已提交
4 5 6 7 8 9 10 11 12 13 14

   Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>

   This program is free software; you can redistribute it and/or modify
   it under the terms of the GNU General Public License version 2 as
   published by the Free Software Foundation;

   THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
   OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
   FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
   IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
15 16 17
   CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
   WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
   ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
L
Linus Torvalds 已提交
18 19
   OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

20 21
   ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
   COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
L
Linus Torvalds 已提交
22 23 24 25 26 27
   SOFTWARE IS DISCLAIMED.
*/

#ifndef __HCI_CORE_H
#define __HCI_CORE_H

28
#include <linux/idr.h>
29
#include <linux/leds.h>
30 31
#include <linux/rculist.h>

L
Linus Torvalds 已提交
32
#include <net/bluetooth/hci.h>
33
#include <net/bluetooth/hci_sync.h>
34
#include <net/bluetooth/hci_sock.h>
L
Linus Torvalds 已提交
35

36 37 38
/* HCI priority */
#define HCI_PRIO_MAX	7

39 40 41
/* HCI maximum id value */
#define HCI_MAX_ID 10000

L
Linus Torvalds 已提交
42 43 44 45 46 47 48
/* HCI Core structures */
struct inquiry_data {
	bdaddr_t	bdaddr;
	__u8		pscan_rep_mode;
	__u8		pscan_period_mode;
	__u8		pscan_mode;
	__u8		dev_class[3];
49
	__le16		clock_offset;
L
Linus Torvalds 已提交
50
	__s8		rssi;
51
	__u8		ssp_mode;
L
Linus Torvalds 已提交
52 53 54
};

struct inquiry_entry {
55 56 57 58 59 60 61 62
	struct list_head	all;		/* inq_cache.all */
	struct list_head	list;		/* unknown or resolve */
	enum {
		NAME_NOT_KNOWN,
		NAME_NEEDED,
		NAME_PENDING,
		NAME_KNOWN,
	} name_state;
L
Linus Torvalds 已提交
63 64 65 66
	__u32			timestamp;
	struct inquiry_data	data;
};

67
struct discovery_state {
68
	int			type;
69 70 71
	enum {
		DISCOVERY_STOPPED,
		DISCOVERY_STARTING,
72
		DISCOVERY_FINDING,
73
		DISCOVERY_RESOLVING,
74 75
		DISCOVERY_STOPPING,
	} state;
76
	struct list_head	all;	/* All devices found during inquiry */
77 78 79
	struct list_head	unknown;	/* Name state not known */
	struct list_head	resolve;	/* Name needs to be resolved */
	__u32			timestamp;
80 81
	bdaddr_t		last_adv_addr;
	u8			last_adv_addr_type;
82
	s8			last_adv_rssi;
83
	u32			last_adv_flags;
84 85
	u8			last_adv_data[HCI_MAX_AD_LENGTH];
	u8			last_adv_data_len;
86
	bool			report_invalid_rssi;
87
	bool			result_filtering;
88
	bool			limited;
89 90 91
	s8			rssi;
	u16			uuid_count;
	u8			(*uuids)[16];
92 93
	unsigned long		scan_start;
	unsigned long		scan_duration;
94
	unsigned long		name_resolve_timeout;
L
Linus Torvalds 已提交
95 96
};

97 98 99
#define SUSPEND_NOTIFIER_TIMEOUT	msecs_to_jiffies(2000) /* 2 seconds */

enum suspend_tasks {
100 101 102 103 104 105
	SUSPEND_PAUSE_DISCOVERY,
	SUSPEND_UNPAUSE_DISCOVERY,

	SUSPEND_PAUSE_ADVERTISING,
	SUSPEND_UNPAUSE_ADVERTISING,

106 107 108 109
	SUSPEND_SCAN_DISABLE,
	SUSPEND_SCAN_ENABLE,
	SUSPEND_DISCONNECTING,

110 111 112
	SUSPEND_POWERING_DOWN,

	SUSPEND_PREPARE_NOTIFIER,
113 114

	SUSPEND_SET_ADV_FILTER,
115 116 117 118 119
	__SUSPEND_NUM_TASKS
};

enum suspended_state {
	BT_RUNNING = 0,
120
	BT_SUSPEND_DISCONNECT,
121
	BT_SUSPEND_CONFIGURE_WAKE,
122 123
};

L
Linus Torvalds 已提交
124 125 126
struct hci_conn_hash {
	struct list_head list;
	unsigned int     acl_num;
127
	unsigned int     amp_num;
L
Linus Torvalds 已提交
128
	unsigned int     sco_num;
V
Ville Tervo 已提交
129
	unsigned int     le_num;
130
	unsigned int     le_num_peripheral;
L
Linus Torvalds 已提交
131 132
};

133 134 135
struct bdaddr_list {
	struct list_head list;
	bdaddr_t bdaddr;
136
	u8 bdaddr_type;
137
};
138

139 140 141 142 143 144 145 146 147 148 149
struct codec_list {
	struct list_head list;
	u8	id;
	__u16	cid;
	__u16	vid;
	u8	transport;
	u8	num_caps;
	u32	len;
	struct hci_codec_caps caps[];
};

150 151 152 153 154 155 156 157
struct bdaddr_list_with_irk {
	struct list_head list;
	bdaddr_t bdaddr;
	u8 bdaddr_type;
	u8 peer_irk[16];
	u8 local_irk[16];
};

158
/* Bitmask of connection flags */
159
enum hci_conn_flags {
160 161
	HCI_CONN_FLAG_REMOTE_WAKEUP = 1,
	HCI_CONN_FLAG_DEVICE_PRIVACY = 2,
162
};
163
typedef u8 hci_conn_flags_t;
164 165 166 167 168

struct bdaddr_list_with_flags {
	struct list_head list;
	bdaddr_t bdaddr;
	u8 bdaddr_type;
169
	hci_conn_flags_t flags;
170
};
171

172 173 174
struct bt_uuid {
	struct list_head list;
	u8 uuid[16];
175
	u8 size;
176
	u8 svc_hint;
177 178
};

179 180 181 182 183 184 185
struct blocked_key {
	struct list_head list;
	struct rcu_head rcu;
	u8 type;
	u8 val[16];
};

186 187 188
struct smp_csrk {
	bdaddr_t bdaddr;
	u8 bdaddr_type;
189
	u8 type;
190 191 192
	u8 val[16];
};

193 194
struct smp_ltk {
	struct list_head list;
J
Johan Hedberg 已提交
195
	struct rcu_head rcu;
196 197 198 199 200 201
	bdaddr_t bdaddr;
	u8 bdaddr_type;
	u8 authenticated;
	u8 type;
	u8 enc_size;
	__le16 ediv;
202
	__le64 rand;
203
	u8 val[16];
204
};
205

206 207
struct smp_irk {
	struct list_head list;
J
Johan Hedberg 已提交
208
	struct rcu_head rcu;
209 210 211 212 213 214
	bdaddr_t rpa;
	bdaddr_t bdaddr;
	u8 addr_type;
	u8 val[16];
};

215 216
struct link_key {
	struct list_head list;
217
	struct rcu_head rcu;
218 219
	bdaddr_t bdaddr;
	u8 type;
220
	u8 val[HCI_LINK_KEY_SIZE];
221 222 223
	u8 pin_len;
};

224 225 226
struct oob_data {
	struct list_head list;
	bdaddr_t bdaddr;
227
	u8 bdaddr_type;
228
	u8 present;
229
	u8 hash192[16];
230
	u8 rand192[16];
231
	u8 hash256[16];
232
	u8 rand256[16];
233 234
};

235
struct adv_info {
236
	struct list_head list;
237
	bool enabled;
238
	bool pending;
239 240
	__u8	instance;
	__u32	flags;
241
	__u16	timeout;
242
	__u16	remaining_time;
243
	__u16	duration;
244
	__u16	adv_data_len;
245
	__u8	adv_data[HCI_MAX_EXT_AD_LENGTH];
246
	__u16	scan_rsp_len;
247
	__u8	scan_rsp_data[HCI_MAX_EXT_AD_LENGTH];
248
	__s8	tx_power;
249 250
	__u32   min_interval;
	__u32   max_interval;
251 252 253
	bdaddr_t	random_addr;
	bool 		rpa_expired;
	struct delayed_work	rpa_expired_cb;
254 255
};

256
#define HCI_MAX_ADV_INSTANCES		5
257 258
#define HCI_DEFAULT_ADV_DURATION	2

259 260
#define HCI_ADV_TX_POWER_NO_PREFERENCE 0x7F

261 262 263 264 265 266 267 268 269
struct monitored_device {
	struct list_head list;

	bdaddr_t bdaddr;
	__u8     addr_type;
	__u16    handle;
	bool     notified;
};

270 271 272 273 274 275 276 277
struct adv_pattern {
	struct list_head list;
	__u8 ad_type;
	__u8 offset;
	__u8 length;
	__u8 value[HCI_MAX_AD_LENGTH];
};

278 279 280 281 282 283 284 285
struct adv_rssi_thresholds {
	__s8 low_threshold;
	__s8 high_threshold;
	__u16 low_threshold_timeout;
	__u16 high_threshold_timeout;
	__u8 sampling_period;
};

286 287
struct adv_monitor {
	struct list_head patterns;
288
	struct adv_rssi_thresholds rssi;
289
	__u16		handle;
290 291 292 293 294 295

	enum {
		ADV_MONITOR_STATE_NOT_REGISTERED,
		ADV_MONITOR_STATE_REGISTERED,
		ADV_MONITOR_STATE_OFFLOADED
	} state;
296 297 298
};

#define HCI_MIN_ADV_MONITOR_HANDLE		1
299
#define HCI_MAX_ADV_MONITOR_NUM_HANDLES		32
300
#define HCI_MAX_ADV_MONITOR_NUM_PATTERNS	16
301 302
#define HCI_ADV_MONITOR_EXT_NONE		1
#define HCI_ADV_MONITOR_EXT_MSFT		2
303

304 305
#define HCI_MAX_SHORT_NAME_LENGTH	10

306 307 308
#define HCI_CONN_HANDLE_UNSET		0xffff
#define HCI_CONN_HANDLE_MAX		0x0eff

309 310 311
/* Min encryption key size to match with SMP */
#define HCI_MIN_ENC_KEY_SIZE		7

312 313 314
/* Default LE RPA expiry time, 15 minutes */
#define HCI_DEFAULT_RPA_TIMEOUT		(15 * 60)

315 316 317
/* Default min/max age of connection information (1s/3s) */
#define DEFAULT_CONN_INFO_MIN_AGE	1000
#define DEFAULT_CONN_INFO_MAX_AGE	3000
318 319
/* Default authenticated payload timeout 30s */
#define DEFAULT_AUTH_PAYLOAD_TIMEOUT   0x0bb8
320

321 322 323
struct amp_assoc {
	__u16	len;
	__u16	offset;
324 325
	__u16	rem_len;
	__u16	len_so_far;
326 327 328
	__u8	data[HCI_MAX_AMP_ASSOC_SIZE];
};

329
#define HCI_MAX_PAGES	3
330

L
Linus Torvalds 已提交
331 332
struct hci_dev {
	struct list_head list;
333
	struct mutex	lock;
L
Linus Torvalds 已提交
334 335 336 337

	char		name[8];
	unsigned long	flags;
	__u16		id;
338
	__u8		bus;
339
	__u8		dev_type;
L
Linus Torvalds 已提交
340
	bdaddr_t	bdaddr;
341
	bdaddr_t	setup_addr;
342
	bdaddr_t	public_addr;
343
	bdaddr_t	random_addr;
344
	bdaddr_t	static_addr;
345
	__u8		adv_addr_type;
346
	__u8		dev_name[HCI_MAX_NAME_LENGTH];
347
	__u8		short_name[HCI_MAX_SHORT_NAME_LENGTH];
348
	__u8		eir[HCI_MAX_EIR_LENGTH];
349
	__u16		appearance;
350
	__u8		dev_class[3];
351 352
	__u8		major_class;
	__u8		minor_class;
353
	__u8		max_page;
354
	__u8		features[HCI_MAX_PAGES][8];
355
	__u8		le_features[8];
356
	__u8		le_accept_list_size;
A
Ankit Navik 已提交
357
	__u8		le_resolv_list_size;
358
	__u8		le_num_of_adv_sets;
359
	__u8		le_states[8];
360
	__u8		commands[64];
361 362
	__u8		hci_ver;
	__u16		hci_rev;
363
	__u8		lmp_ver;
364
	__u16		manufacturer;
365
	__u16		lmp_subver;
L
Linus Torvalds 已提交
366
	__u16		voice_setting;
367
	__u8		num_iac;
368 369
	__u16		stored_max_keys;
	__u16		stored_num_keys;
370
	__u8		io_capability;
371
	__s8		inq_tx_power;
372
	__u8		err_data_reporting;
373 374 375
	__u16		page_scan_interval;
	__u16		page_scan_window;
	__u8		page_scan_type;
376
	__u8		le_adv_channel_map;
377 378
	__u16		le_adv_min_interval;
	__u16		le_adv_max_interval;
379
	__u8		le_scan_type;
380 381
	__u16		le_scan_interval;
	__u16		le_scan_window;
382 383 384 385 386 387 388 389
	__u16		le_scan_int_suspend;
	__u16		le_scan_window_suspend;
	__u16		le_scan_int_discovery;
	__u16		le_scan_window_discovery;
	__u16		le_scan_int_adv_monitor;
	__u16		le_scan_window_adv_monitor;
	__u16		le_scan_int_connect;
	__u16		le_scan_window_connect;
390 391
	__u16		le_conn_min_interval;
	__u16		le_conn_max_interval;
392 393
	__u16		le_conn_latency;
	__u16		le_supv_timeout;
394 395 396 397 398 399
	__u16		le_def_tx_len;
	__u16		le_def_tx_time;
	__u16		le_max_tx_len;
	__u16		le_max_tx_time;
	__u16		le_max_rx_len;
	__u16		le_max_rx_time;
400 401
	__u8		le_max_key_size;
	__u8		le_min_key_size;
402
	__u16		discov_interleaved_timeout;
403 404
	__u16		conn_info_min_age;
	__u16		conn_info_max_age;
405
	__u16		auth_payload_timeout;
406
	__u8		min_enc_key_size;
407 408
	__u8		max_enc_key_size;
	__u8		pairing_opts;
409
	__u8		ssp_debug_mode;
410
	__u8		hw_error_code;
411
	__u32		clock;
412 413
	__u16		advmon_allowlist_duration;
	__u16		advmon_no_filter_duration;
414
	__u8		enable_advmon_interleave_scan;
415

416 417 418 419
	__u16		devid_source;
	__u16		devid_vendor;
	__u16		devid_product;
	__u16		devid_version;
L
Linus Torvalds 已提交
420

421 422 423 424 425 426 427 428 429
	__u8		def_page_scan_type;
	__u16		def_page_scan_int;
	__u16		def_page_scan_window;
	__u8		def_inq_scan_type;
	__u16		def_inq_scan_int;
	__u16		def_inq_scan_window;
	__u16		def_br_lsto;
	__u16		def_page_timeout;
	__u16		def_multi_adv_rotation_duration;
430
	__u16		def_le_autoconnect_timeout;
431 432
	__s8		min_le_tx_power;
	__s8		max_le_tx_power;
433

L
Linus Torvalds 已提交
434
	__u16		pkt_type;
435
	__u16		esco_type;
L
Linus Torvalds 已提交
436 437 438
	__u16		link_policy;
	__u16		link_mode;

439 440 441 442
	__u32		idle_timeout;
	__u16		sniff_min_interval;
	__u16		sniff_max_interval;

443 444 445 446 447 448 449 450 451 452 453
	__u8		amp_status;
	__u32		amp_total_bw;
	__u32		amp_max_bw;
	__u32		amp_min_latency;
	__u32		amp_max_pdu;
	__u8		amp_type;
	__u16		amp_pal_cap;
	__u16		amp_assoc_size;
	__u32		amp_max_flush_to;
	__u32		amp_be_flush_to;

454 455
	struct amp_assoc	loc_assoc;

456 457
	__u8		flow_ctl_mode;

458 459
	unsigned int	auto_accept_delay;

L
Linus Torvalds 已提交
460 461 462 463 464
	unsigned long	quirks;

	atomic_t	cmd_cnt;
	unsigned int	acl_cnt;
	unsigned int	sco_cnt;
465
	unsigned int	le_cnt;
L
Linus Torvalds 已提交
466 467 468

	unsigned int	acl_mtu;
	unsigned int	sco_mtu;
469
	unsigned int	le_mtu;
L
Linus Torvalds 已提交
470 471
	unsigned int	acl_pkts;
	unsigned int	sco_pkts;
472
	unsigned int	le_pkts;
L
Linus Torvalds 已提交
473

474 475 476 477 478
	__u16		block_len;
	__u16		block_mtu;
	__u16		num_blocks;
	__u16		block_cnt;

L
Linus Torvalds 已提交
479 480
	unsigned long	acl_last_tx;
	unsigned long	sco_last_tx;
481
	unsigned long	le_last_tx;
L
Linus Torvalds 已提交
482

483 484 485
	__u8		le_tx_def_phys;
	__u8		le_rx_def_phys;

486
	struct workqueue_struct	*workqueue;
487
	struct workqueue_struct	*req_workqueue;
488

489
	struct work_struct	power_on;
490
	struct delayed_work	power_off;
491
	struct work_struct	error_reset;
492 493 494
	struct work_struct	cmd_sync_work;
	struct list_head	cmd_sync_work_list;
	struct mutex		cmd_sync_work_lock;
495
	struct work_struct	cmd_sync_cancel_work;
496

497 498 499
	__u16			discov_timeout;
	struct delayed_work	discov_off;

500 501
	struct delayed_work	service_cache;

502
	struct delayed_work	cmd_timer;
503
	struct delayed_work	ncmd_timer;
504 505

	struct work_struct	rx_work;
506
	struct work_struct	cmd_work;
507
	struct work_struct	tx_work;
L
Linus Torvalds 已提交
508

509
	struct work_struct	discov_update;
510
	struct work_struct	scan_update;
511 512
	struct delayed_work	le_scan_disable;
	struct delayed_work	le_scan_restart;
513

L
Linus Torvalds 已提交
514 515 516 517 518 519
	struct sk_buff_head	rx_q;
	struct sk_buff_head	raw_q;
	struct sk_buff_head	cmd_q;

	struct sk_buff		*sent_cmd;

520
	struct mutex		req_lock;
L
Linus Torvalds 已提交
521 522 523
	wait_queue_head_t	req_wait_q;
	__u32			req_status;
	__u32			req_result;
524
	struct sk_buff		*req_skb;
525

526
	void			*smp_data;
527
	void			*smp_bredr_data;
528

529
	struct discovery_state	discovery;
530

531 532 533 534 535
	int			discovery_old_state;
	bool			discovery_paused;
	int			advertising_old_state;
	bool			advertising_paused;

536 537 538
	struct notifier_block	suspend_notifier;
	enum suspended_state	suspend_state_next;
	enum suspended_state	suspend_state;
539 540
	bool			scanning_paused;
	bool			suspended;
541 542 543
	u8			wake_reason;
	bdaddr_t		wake_addr;
	u8			wake_addr_type;
544

L
Linus Torvalds 已提交
545 546
	struct hci_conn_hash	conn_hash;

547
	struct list_head	mgmt_pending;
548 549
	struct list_head	reject_list;
	struct list_head	accept_list;
550
	struct list_head	uuids;
551
	struct list_head	link_keys;
552
	struct list_head	long_term_keys;
553
	struct list_head	identity_resolving_keys;
554
	struct list_head	remote_oob_data;
555
	struct list_head	le_accept_list;
A
Ankit Navik 已提交
556
	struct list_head	le_resolv_list;
557
	struct list_head	le_conn_params;
558
	struct list_head	pend_le_conns;
559
	struct list_head	pend_le_reports;
560
	struct list_head	blocked_keys;
561
	struct list_head	local_codecs;
562

L
Linus Torvalds 已提交
563 564
	struct hci_dev_stats	stat;

A
Andrei Emeltchenko 已提交
565
	atomic_t		promisc;
L
Linus Torvalds 已提交
566

567 568
	const char		*hw_info;
	const char		*fw_info;
569 570
	struct dentry		*debugfs;

571
	struct device		dev;
L
Linus Torvalds 已提交
572

573 574
	struct rfkill		*rfkill;

575
	DECLARE_BITMAP(dev_flags, __HCI_NUM_FLAGS);
576
	hci_conn_flags_t	conn_flags;
577

578
	__s8			adv_tx_power;
579
	__u8			adv_data[HCI_MAX_EXT_AD_LENGTH];
580
	__u8			adv_data_len;
581
	__u8			scan_rsp_data[HCI_MAX_EXT_AD_LENGTH];
582
	__u8			scan_rsp_data_len;
583

584 585 586
	struct list_head	adv_instances;
	unsigned int		adv_instance_cnt;
	__u8			cur_adv_instance;
587 588
	__u16			adv_instance_timeout;
	struct delayed_work	adv_instance_expire;
589

590 591 592
	struct idr		adv_monitors_idr;
	unsigned int		adv_monitors_cnt;

593
	__u8			irk[16];
594 595
	__u32			rpa_timeout;
	struct delayed_work	rpa_expired;
596
	bdaddr_t		rpa;
597

598 599 600 601 602 603 604 605
	enum {
		INTERLEAVE_SCAN_NONE,
		INTERLEAVE_SCAN_NO_FILTER,
		INTERLEAVE_SCAN_ALLOWLIST
	} interleave_scan_state;

	struct delayed_work	interleave_scan;

606
	struct list_head	monitored_devices;
607
	bool			advmon_pend_notify;
608

609
#if IS_ENABLED(CONFIG_BT_LEDS)
610
	struct led_trigger	*power_led;
611
#endif
612

613 614 615
#if IS_ENABLED(CONFIG_BT_MSFTEXT)
	__u16			msft_opcode;
	void			*msft_data;
616
	bool			msft_curve_validity;
617 618
#endif

619 620
#if IS_ENABLED(CONFIG_BT_AOSPEXT)
	bool			aosp_capable;
621
	bool			aosp_quality_report;
622 623
#endif

L
Linus Torvalds 已提交
624 625 626
	int (*open)(struct hci_dev *hdev);
	int (*close)(struct hci_dev *hdev);
	int (*flush)(struct hci_dev *hdev);
627
	int (*setup)(struct hci_dev *hdev);
628
	int (*shutdown)(struct hci_dev *hdev);
629
	int (*send)(struct hci_dev *hdev, struct sk_buff *skb);
L
Linus Torvalds 已提交
630
	void (*notify)(struct hci_dev *hdev, unsigned int evt);
631
	void (*hw_error)(struct hci_dev *hdev, u8 code);
632
	int (*post_init)(struct hci_dev *hdev);
633
	int (*set_diag)(struct hci_dev *hdev, bool enable);
634
	int (*set_bdaddr)(struct hci_dev *hdev, const bdaddr_t *bdaddr);
635
	void (*cmd_timeout)(struct hci_dev *hdev);
636
	bool (*wakeup)(struct hci_dev *hdev);
637
	int (*set_quality_report)(struct hci_dev *hdev, bool enable);
638
	int (*get_data_path_id)(struct hci_dev *hdev, __u8 *data_path);
639 640 641
	int (*get_codec_config_data)(struct hci_dev *hdev, __u8 type,
				     struct bt_codec *codec, __u8 *vnd_len,
				     __u8 **vnd_data);
L
Linus Torvalds 已提交
642 643
};

644 645
#define HCI_PHY_HANDLE(handle)	(handle & 0xff)

646 647 648 649 650 651
enum conn_reasons {
	CONN_REASON_PAIR_DEVICE,
	CONN_REASON_L2CAP_CHAN,
	CONN_REASON_SCO_CONNECT,
};

L
Linus Torvalds 已提交
652 653 654
struct hci_conn {
	struct list_head list;

655 656 657
	atomic_t	refcnt;

	bdaddr_t	dst;
658
	__u8		dst_type;
659
	bdaddr_t	src;
660
	__u8		src_type;
661 662 663 664
	bdaddr_t	init_addr;
	__u8		init_addr_type;
	bdaddr_t	resp_addr;
	__u8		resp_addr_type;
665
	__u8		adv_instance;
666 667 668 669
	__u16		handle;
	__u16		state;
	__u8		mode;
	__u8		type;
670
	__u8		role;
671
	bool		out;
672 673
	__u8		attempt;
	__u8		dev_class[3];
674
	__u8		features[HCI_MAX_PAGES][8];
675 676
	__u16		pkt_type;
	__u16		link_policy;
677
	__u8		key_type;
678 679 680 681
	__u8		auth_type;
	__u8		sec_level;
	__u8		pending_sec_level;
	__u8		pin_length;
682
	__u8		enc_key_size;
683
	__u8		io_capability;
684 685
	__u32		passkey_notify;
	__u8		passkey_entered;
686
	__u16		disc_timeout;
687
	__u16		conn_timeout;
688
	__u16		setting;
689
	__u16		auth_payload_timeout;
690 691
	__u16		le_conn_min_interval;
	__u16		le_conn_max_interval;
692 693 694
	__u16		le_conn_interval;
	__u16		le_conn_latency;
	__u16		le_supv_timeout;
695 696
	__u8		le_adv_data[HCI_MAX_AD_LENGTH];
	__u8		le_adv_data_len;
697 698
	__u8		le_tx_phy;
	__u8		le_rx_phy;
699
	__s8		rssi;
700
	__s8		tx_power;
701
	__s8		max_tx_power;
702
	unsigned long	flags;
703

704 705
	enum conn_reasons conn_reason;

706 707 708
	__u32		clock;
	__u16		clock_accuracy;

709 710
	unsigned long	conn_info_timestamp;

711 712
	__u8		remote_cap;
	__u8		remote_auth;
713
	__u8		remote_id;
714

715
	unsigned int	sent;
716

L
Linus Torvalds 已提交
717
	struct sk_buff_head data_q;
718
	struct list_head chan_list;
L
Linus Torvalds 已提交
719

720
	struct delayed_work disc_work;
721
	struct delayed_work auto_accept_work;
722
	struct delayed_work idle_work;
723
	struct delayed_work le_conn_timeout;
724
	struct work_struct  le_scan_cleanup;
725

726
	struct device	dev;
727
	struct dentry	*debugfs;
728

L
Linus Torvalds 已提交
729 730 731
	struct hci_dev	*hdev;
	void		*l2cap_data;
	void		*sco_data;
732
	struct amp_mgr	*amp_mgr;
L
Linus Torvalds 已提交
733 734

	struct hci_conn	*link;
735
	struct bt_codec codec;
736 737 738 739

	void (*connect_cfm_cb)	(struct hci_conn *conn, u8 status);
	void (*security_cfm_cb)	(struct hci_conn *conn, u8 status);
	void (*disconn_cfm_cb)	(struct hci_conn *conn, u8 reason);
L
Linus Torvalds 已提交
740 741
};

742 743
struct hci_chan {
	struct list_head list;
744
	__u16 handle;
745 746 747
	struct hci_conn *conn;
	struct sk_buff_head data_q;
	unsigned int	sent;
M
Mat Martineau 已提交
748
	__u8		state;
749
	bool		amp;
750 751
};

752 753
struct hci_conn_params {
	struct list_head list;
754
	struct list_head action;
755 756 757 758 759 760

	bdaddr_t addr;
	u8 addr_type;

	u16 conn_min_interval;
	u16 conn_max_interval;
761 762
	u16 conn_latency;
	u16 supervision_timeout;
763 764 765

	enum {
		HCI_AUTO_CONN_DISABLED,
766
		HCI_AUTO_CONN_REPORT,
767
		HCI_AUTO_CONN_DIRECT,
768 769
		HCI_AUTO_CONN_ALWAYS,
		HCI_AUTO_CONN_LINK_LOSS,
770
		HCI_AUTO_CONN_EXPLICIT,
771
	} auto_connect;
772 773

	struct hci_conn *conn;
774
	bool explicit_connect;
775
	hci_conn_flags_t flags;
776
	u8  privacy_mode;
777 778
};

L
Linus Torvalds 已提交
779 780 781
extern struct list_head hci_dev_list;
extern struct list_head hci_cb_list;
extern rwlock_t hci_dev_list_lock;
782
extern struct mutex hci_cb_list_lock;
L
Linus Torvalds 已提交
783

784 785 786 787 788 789 790 791 792 793 794 795
#define hci_dev_set_flag(hdev, nr)             set_bit((nr), (hdev)->dev_flags)
#define hci_dev_clear_flag(hdev, nr)           clear_bit((nr), (hdev)->dev_flags)
#define hci_dev_change_flag(hdev, nr)          change_bit((nr), (hdev)->dev_flags)
#define hci_dev_test_flag(hdev, nr)            test_bit((nr), (hdev)->dev_flags)
#define hci_dev_test_and_set_flag(hdev, nr)    test_and_set_bit((nr), (hdev)->dev_flags)
#define hci_dev_test_and_clear_flag(hdev, nr)  test_and_clear_bit((nr), (hdev)->dev_flags)
#define hci_dev_test_and_change_flag(hdev, nr) test_and_change_bit((nr), (hdev)->dev_flags)

#define hci_dev_clear_volatile_flags(hdev)			\
	do {							\
		hci_dev_clear_flag(hdev, HCI_LE_SCAN);		\
		hci_dev_clear_flag(hdev, HCI_LE_ADV);		\
796
		hci_dev_clear_flag(hdev, HCI_LL_RPA_RESOLUTION);\
797
		hci_dev_clear_flag(hdev, HCI_PERIODIC_INQ);	\
798
		hci_dev_clear_flag(hdev, HCI_QUALITY_REPORT);	\
799
	} while (0)
800

801 802 803 804 805 806
#define hci_dev_le_state_simultaneous(hdev) \
	(test_bit(HCI_QUIRK_VALID_LE_STATES, &hdev->quirks) && \
	 (hdev->le_states[4] & 0x08) &&	/* Central */ \
	 (hdev->le_states[4] & 0x40) &&	/* Peripheral */ \
	 (hdev->le_states[3] & 0x10))	/* Simultaneous */

807
/* ----- HCI interface to upper protocols ----- */
808 809
int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr);
int l2cap_disconn_ind(struct hci_conn *hcon);
810
void l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
811

812
#if IS_ENABLED(CONFIG_BT_BREDR)
813
int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
814
void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb);
815 816 817 818 819 820 821 822 823 824 825
#else
static inline int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
				  __u8 *flags)
{
	return 0;
}

static inline void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb)
{
}
#endif
826

L
Linus Torvalds 已提交
827
/* ----- Inquiry cache ----- */
A
Andrei Emeltchenko 已提交
828 829
#define INQUIRY_CACHE_AGE_MAX   (HZ*30)   /* 30 seconds */
#define INQUIRY_ENTRY_AGE_MAX   (HZ*60)   /* 60 seconds */
L
Linus Torvalds 已提交
830

831
static inline void discovery_init(struct hci_dev *hdev)
L
Linus Torvalds 已提交
832
{
833
	hdev->discovery.state = DISCOVERY_STOPPED;
834 835 836
	INIT_LIST_HEAD(&hdev->discovery.all);
	INIT_LIST_HEAD(&hdev->discovery.unknown);
	INIT_LIST_HEAD(&hdev->discovery.resolve);
837
	hdev->discovery.report_invalid_rssi = true;
838
	hdev->discovery.rssi = HCI_RSSI_INVALID;
L
Linus Torvalds 已提交
839 840
}

841 842
static inline void hci_discovery_filter_clear(struct hci_dev *hdev)
{
843
	hdev->discovery.result_filtering = false;
844
	hdev->discovery.report_invalid_rssi = true;
845 846 847 848
	hdev->discovery.rssi = HCI_RSSI_INVALID;
	hdev->discovery.uuid_count = 0;
	kfree(hdev->discovery.uuids);
	hdev->discovery.uuids = NULL;
849 850
	hdev->discovery.scan_start = 0;
	hdev->discovery.scan_duration = 0;
851 852
}

853 854
bool hci_discovery_active(struct hci_dev *hdev);

855 856
void hci_discovery_set_state(struct hci_dev *hdev, int state);

L
Linus Torvalds 已提交
857 858
static inline int inquiry_cache_empty(struct hci_dev *hdev)
{
859
	return list_empty(&hdev->discovery.all);
L
Linus Torvalds 已提交
860 861 862 863
}

static inline long inquiry_cache_age(struct hci_dev *hdev)
{
864
	struct discovery_state *c = &hdev->discovery;
L
Linus Torvalds 已提交
865 866 867 868 869 870 871 872
	return jiffies - c->timestamp;
}

static inline long inquiry_entry_age(struct inquiry_entry *e)
{
	return jiffies - e->timestamp;
}

873
struct inquiry_entry *hci_inquiry_cache_lookup(struct hci_dev *hdev,
874
					       bdaddr_t *bdaddr);
875
struct inquiry_entry *hci_inquiry_cache_lookup_unknown(struct hci_dev *hdev,
876
						       bdaddr_t *bdaddr);
877
struct inquiry_entry *hci_inquiry_cache_lookup_resolve(struct hci_dev *hdev,
878 879
						       bdaddr_t *bdaddr,
						       int state);
880
void hci_inquiry_cache_update_resolve(struct hci_dev *hdev,
881
				      struct inquiry_entry *ie);
882 883
u32 hci_inquiry_cache_update(struct hci_dev *hdev, struct inquiry_data *data,
			     bool name_known);
884
void hci_inquiry_cache_flush(struct hci_dev *hdev);
L
Linus Torvalds 已提交
885 886 887 888

/* ----- HCI Connections ----- */
enum {
	HCI_CONN_AUTH_PEND,
889
	HCI_CONN_REAUTH_PEND,
L
Linus Torvalds 已提交
890
	HCI_CONN_ENCRYPT_PEND,
891 892
	HCI_CONN_RSWITCH_PEND,
	HCI_CONN_MODE_CHANGE_PEND,
893
	HCI_CONN_SCO_SETUP_PEND,
894
	HCI_CONN_MGMT_CONNECTED,
895
	HCI_CONN_SSP_ENABLED,
896
	HCI_CONN_SC_ENABLED,
897
	HCI_CONN_AES_CCM,
898
	HCI_CONN_POWER_SAVE,
899
	HCI_CONN_FLUSH_KEY,
900 901 902 903
	HCI_CONN_ENCRYPT,
	HCI_CONN_AUTH,
	HCI_CONN_SECURE,
	HCI_CONN_FIPS,
904
	HCI_CONN_STK_ENCRYPT,
905
	HCI_CONN_AUTH_INITIATOR,
906
	HCI_CONN_DROP,
907
	HCI_CONN_PARAM_REMOVAL_PEND,
908
	HCI_CONN_NEW_LINK_KEY,
909
	HCI_CONN_SCANNING,
910
	HCI_CONN_AUTH_FAILURE,
L
Linus Torvalds 已提交
911 912
};

913 914 915
static inline bool hci_conn_ssp_enabled(struct hci_conn *conn)
{
	struct hci_dev *hdev = conn->hdev;
916
	return hci_dev_test_flag(hdev, HCI_SSP_ENABLED) &&
917
	       test_bit(HCI_CONN_SSP_ENABLED, &conn->flags);
918 919
}

920 921 922
static inline bool hci_conn_sc_enabled(struct hci_conn *conn)
{
	struct hci_dev *hdev = conn->hdev;
923
	return hci_dev_test_flag(hdev, HCI_SC_ENABLED) &&
924 925 926
	       test_bit(HCI_CONN_SC_ENABLED, &conn->flags);
}

L
Linus Torvalds 已提交
927 928 929
static inline void hci_conn_hash_add(struct hci_dev *hdev, struct hci_conn *c)
{
	struct hci_conn_hash *h = &hdev->conn_hash;
930
	list_add_rcu(&c->list, &h->list);
V
Ville Tervo 已提交
931 932
	switch (c->type) {
	case ACL_LINK:
L
Linus Torvalds 已提交
933
		h->acl_num++;
V
Ville Tervo 已提交
934
		break;
935 936 937
	case AMP_LINK:
		h->amp_num++;
		break;
V
Ville Tervo 已提交
938 939
	case LE_LINK:
		h->le_num++;
940
		if (c->role == HCI_ROLE_SLAVE)
941
			h->le_num_peripheral++;
V
Ville Tervo 已提交
942 943 944
		break;
	case SCO_LINK:
	case ESCO_LINK:
L
Linus Torvalds 已提交
945
		h->sco_num++;
V
Ville Tervo 已提交
946 947
		break;
	}
L
Linus Torvalds 已提交
948 949 950 951 952
}

static inline void hci_conn_hash_del(struct hci_dev *hdev, struct hci_conn *c)
{
	struct hci_conn_hash *h = &hdev->conn_hash;
953 954 955 956

	list_del_rcu(&c->list);
	synchronize_rcu();

V
Ville Tervo 已提交
957 958
	switch (c->type) {
	case ACL_LINK:
L
Linus Torvalds 已提交
959
		h->acl_num--;
V
Ville Tervo 已提交
960
		break;
961 962 963
	case AMP_LINK:
		h->amp_num--;
		break;
V
Ville Tervo 已提交
964 965
	case LE_LINK:
		h->le_num--;
966
		if (c->role == HCI_ROLE_SLAVE)
967
			h->le_num_peripheral--;
V
Ville Tervo 已提交
968 969 970
		break;
	case SCO_LINK:
	case ESCO_LINK:
L
Linus Torvalds 已提交
971
		h->sco_num--;
V
Ville Tervo 已提交
972 973
		break;
	}
L
Linus Torvalds 已提交
974 975
}

976 977 978 979 980 981
static inline unsigned int hci_conn_num(struct hci_dev *hdev, __u8 type)
{
	struct hci_conn_hash *h = &hdev->conn_hash;
	switch (type) {
	case ACL_LINK:
		return h->acl_num;
982 983
	case AMP_LINK:
		return h->amp_num;
984 985 986 987 988 989 990 991 992 993
	case LE_LINK:
		return h->le_num;
	case SCO_LINK:
	case ESCO_LINK:
		return h->sco_num;
	default:
		return 0;
	}
}

994 995 996 997 998 999 1000
static inline unsigned int hci_conn_count(struct hci_dev *hdev)
{
	struct hci_conn_hash *c = &hdev->conn_hash;

	return c->acl_num + c->amp_num + c->sco_num + c->le_num;
}

1001 1002 1003 1004 1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015 1016 1017 1018 1019 1020
static inline __u8 hci_conn_lookup_type(struct hci_dev *hdev, __u16 handle)
{
	struct hci_conn_hash *h = &hdev->conn_hash;
	struct hci_conn *c;
	__u8 type = INVALID_LINK;

	rcu_read_lock();

	list_for_each_entry_rcu(c, &h->list, list) {
		if (c->handle == handle) {
			type = c->type;
			break;
		}
	}

	rcu_read_unlock();

	return type;
}

L
Linus Torvalds 已提交
1021
static inline struct hci_conn *hci_conn_hash_lookup_handle(struct hci_dev *hdev,
1022
								__u16 handle)
L
Linus Torvalds 已提交
1023 1024 1025 1026
{
	struct hci_conn_hash *h = &hdev->conn_hash;
	struct hci_conn  *c;

1027 1028 1029 1030 1031
	rcu_read_lock();

	list_for_each_entry_rcu(c, &h->list, list) {
		if (c->handle == handle) {
			rcu_read_unlock();
L
Linus Torvalds 已提交
1032
			return c;
1033
		}
L
Linus Torvalds 已提交
1034
	}
1035 1036
	rcu_read_unlock();

L
Linus Torvalds 已提交
1037 1038 1039 1040
	return NULL;
}

static inline struct hci_conn *hci_conn_hash_lookup_ba(struct hci_dev *hdev,
1041
							__u8 type, bdaddr_t *ba)
L
Linus Torvalds 已提交
1042 1043 1044 1045
{
	struct hci_conn_hash *h = &hdev->conn_hash;
	struct hci_conn  *c;

1046 1047 1048 1049 1050
	rcu_read_lock();

	list_for_each_entry_rcu(c, &h->list, list) {
		if (c->type == type && !bacmp(&c->dst, ba)) {
			rcu_read_unlock();
L
Linus Torvalds 已提交
1051
			return c;
1052
		}
L
Linus Torvalds 已提交
1053
	}
1054 1055 1056

	rcu_read_unlock();

L
Linus Torvalds 已提交
1057 1058 1059
	return NULL;
}

1060 1061 1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072 1073 1074 1075 1076 1077 1078 1079 1080 1081 1082 1083
static inline struct hci_conn *hci_conn_hash_lookup_le(struct hci_dev *hdev,
						       bdaddr_t *ba,
						       __u8 ba_type)
{
	struct hci_conn_hash *h = &hdev->conn_hash;
	struct hci_conn  *c;

	rcu_read_lock();

	list_for_each_entry_rcu(c, &h->list, list) {
		if (c->type != LE_LINK)
		       continue;

		if (ba_type == c->dst_type && !bacmp(&c->dst, ba)) {
			rcu_read_unlock();
			return c;
		}
	}

	rcu_read_unlock();

	return NULL;
}

1084
static inline struct hci_conn *hci_conn_hash_lookup_state(struct hci_dev *hdev,
1085
							__u8 type, __u16 state)
1086 1087 1088 1089
{
	struct hci_conn_hash *h = &hdev->conn_hash;
	struct hci_conn  *c;

1090 1091 1092 1093 1094
	rcu_read_lock();

	list_for_each_entry_rcu(c, &h->list, list) {
		if (c->type == type && c->state == state) {
			rcu_read_unlock();
1095
			return c;
1096
		}
1097
	}
1098

1099
	rcu_read_unlock();
1100

1101
	return NULL;
1102 1103
}

1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123
static inline struct hci_conn *hci_lookup_le_connect(struct hci_dev *hdev)
{
	struct hci_conn_hash *h = &hdev->conn_hash;
	struct hci_conn  *c;

	rcu_read_lock();

	list_for_each_entry_rcu(c, &h->list, list) {
		if (c->type == LE_LINK && c->state == BT_CONNECT &&
		    !test_bit(HCI_CONN_SCANNING, &c->flags)) {
			rcu_read_unlock();
			return c;
		}
	}

	rcu_read_unlock();

	return NULL;
}

1124
int hci_disconnect(struct hci_conn *conn, __u8 reason);
1125
bool hci_setup_sync(struct hci_conn *conn, __u16 handle);
1126
void hci_sco_setup(struct hci_conn *conn, __u8 status);
L
Linus Torvalds 已提交
1127

1128 1129
struct hci_conn *hci_conn_add(struct hci_dev *hdev, int type, bdaddr_t *dst,
			      u8 role);
1130 1131 1132
int hci_conn_del(struct hci_conn *conn);
void hci_conn_hash_flush(struct hci_dev *hdev);
void hci_conn_check_pending(struct hci_dev *hdev);
L
Linus Torvalds 已提交
1133

1134
struct hci_chan *hci_chan_create(struct hci_conn *conn);
1135
void hci_chan_del(struct hci_chan *chan);
1136
void hci_chan_list_flush(struct hci_conn *conn);
1137
struct hci_chan *hci_chan_lookup_handle(struct hci_dev *hdev, __u16 handle);
1138

1139 1140
struct hci_conn *hci_connect_le_scan(struct hci_dev *hdev, bdaddr_t *dst,
				     u8 dst_type, u8 sec_level,
1141 1142
				     u16 conn_timeout,
				     enum conn_reasons conn_reason);
1143
struct hci_conn *hci_connect_le(struct hci_dev *hdev, bdaddr_t *dst,
1144
				u8 dst_type, bool dst_resolved, u8 sec_level,
1145
				u16 conn_timeout, u8 role);
1146
struct hci_conn *hci_connect_acl(struct hci_dev *hdev, bdaddr_t *dst,
1147 1148
				 u8 sec_level, u8 auth_type,
				 enum conn_reasons conn_reason);
1149
struct hci_conn *hci_connect_sco(struct hci_dev *hdev, int type, bdaddr_t *dst,
1150
				 __u16 setting, struct bt_codec *codec);
1151
int hci_conn_check_link_mode(struct hci_conn *conn);
1152
int hci_conn_check_secure(struct hci_conn *conn, __u8 sec_level);
1153 1154
int hci_conn_security(struct hci_conn *conn, __u8 sec_level, __u8 auth_type,
		      bool initiator);
1155
int hci_conn_switch_role(struct hci_conn *conn, __u8 role);
L
Linus Torvalds 已提交
1156

1157
void hci_conn_enter_active_mode(struct hci_conn *conn, __u8 force_active);
L
Linus Torvalds 已提交
1158

1159
void hci_conn_failed(struct hci_conn *conn, u8 status);
1160

1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174 1175 1176 1177 1178 1179 1180 1181
/*
 * hci_conn_get() and hci_conn_put() are used to control the life-time of an
 * "hci_conn" object. They do not guarantee that the hci_conn object is running,
 * working or anything else. They just guarantee that the object is available
 * and can be dereferenced. So you can use its locks, local variables and any
 * other constant data.
 * Before accessing runtime data, you _must_ lock the object and then check that
 * it is still running. As soon as you release the locks, the connection might
 * get dropped, though.
 *
 * On the other hand, hci_conn_hold() and hci_conn_drop() are used to control
 * how long the underlying connection is held. So every channel that runs on the
 * hci_conn object calls this to prevent the connection from disappearing. As
 * long as you hold a device, you must also guarantee that you have a valid
 * reference to the device via hci_conn_get() (or the initial reference from
 * hci_conn_add()).
 * The hold()/drop() ref-count is known to drop below 0 sometimes, which doesn't
 * break because nobody cares for that. But this means, we cannot use
 * _get()/_drop() in it, but require the caller to have a valid ref (FIXME).
 */

1182
static inline struct hci_conn *hci_conn_get(struct hci_conn *conn)
1183 1184
{
	get_device(&conn->dev);
1185
	return conn;
1186 1187 1188 1189 1190 1191 1192
}

static inline void hci_conn_put(struct hci_conn *conn)
{
	put_device(&conn->dev);
}

L
Linus Torvalds 已提交
1193 1194
static inline void hci_conn_hold(struct hci_conn *conn)
{
1195
	BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1196

L
Linus Torvalds 已提交
1197
	atomic_inc(&conn->refcnt);
A
Andre Guedes 已提交
1198
	cancel_delayed_work(&conn->disc_work);
L
Linus Torvalds 已提交
1199 1200
}

1201
static inline void hci_conn_drop(struct hci_conn *conn)
L
Linus Torvalds 已提交
1202
{
1203
	BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1204

L
Linus Torvalds 已提交
1205
	if (atomic_dec_and_test(&conn->refcnt)) {
1206
		unsigned long timeo;
1207 1208 1209 1210

		switch (conn->type) {
		case ACL_LINK:
		case LE_LINK:
1211
			cancel_delayed_work(&conn->idle_work);
1212
			if (conn->state == BT_CONNECTED) {
1213
				timeo = conn->disc_timeout;
1214
				if (!conn->out)
1215
					timeo *= 2;
1216
			} else {
1217
				timeo = 0;
1218
			}
1219 1220 1221 1222 1223 1224 1225
			break;

		case AMP_LINK:
			timeo = conn->disc_timeout;
			break;

		default:
1226
			timeo = 0;
1227
			break;
1228
		}
1229

A
Andre Guedes 已提交
1230
		cancel_delayed_work(&conn->disc_work);
1231
		queue_delayed_work(conn->hdev->workqueue,
1232
				   &conn->disc_work, timeo);
L
Linus Torvalds 已提交
1233 1234 1235 1236
	}
}

/* ----- HCI Devices ----- */
1237
static inline void hci_dev_put(struct hci_dev *d)
L
Linus Torvalds 已提交
1238
{
1239
	BT_DBG("%s orig refcnt %d", d->name,
1240
	       kref_read(&d->dev.kobj.kref));
1241

1242
	put_device(&d->dev);
L
Linus Torvalds 已提交
1243 1244
}

1245
static inline struct hci_dev *hci_dev_hold(struct hci_dev *d)
L
Linus Torvalds 已提交
1246
{
1247
	BT_DBG("%s orig refcnt %d", d->name,
1248
	       kref_read(&d->dev.kobj.kref));
1249

1250
	get_device(&d->dev);
L
Linus Torvalds 已提交
1251 1252 1253
	return d;
}

1254 1255
#define hci_dev_lock(d)		mutex_lock(&d->lock)
#define hci_dev_unlock(d)	mutex_unlock(&d->lock)
L
Linus Torvalds 已提交
1256

1257
#define to_hci_dev(d) container_of(d, struct hci_dev, dev)
1258
#define to_hci_conn(c) container_of(c, struct hci_conn, dev)
1259

1260 1261 1262 1263 1264 1265 1266 1267 1268 1269
static inline void *hci_get_drvdata(struct hci_dev *hdev)
{
	return dev_get_drvdata(&hdev->dev);
}

static inline void hci_set_drvdata(struct hci_dev *hdev, void *data)
{
	dev_set_drvdata(&hdev->dev, data);
}

1270 1271 1272 1273 1274
static inline void *hci_get_priv(struct hci_dev *hdev)
{
	return (char *)hdev + sizeof(*hdev);
}

L
Linus Torvalds 已提交
1275
struct hci_dev *hci_dev_get(int index);
1276
struct hci_dev *hci_get_route(bdaddr_t *dst, bdaddr_t *src, u8 src_type);
L
Linus Torvalds 已提交
1277

1278 1279 1280 1281 1282 1283 1284
struct hci_dev *hci_alloc_dev_priv(int sizeof_priv);

static inline struct hci_dev *hci_alloc_dev(void)
{
	return hci_alloc_dev_priv(0);
}

L
Linus Torvalds 已提交
1285 1286
void hci_free_dev(struct hci_dev *hdev);
int hci_register_dev(struct hci_dev *hdev);
1287
void hci_unregister_dev(struct hci_dev *hdev);
1288
void hci_release_dev(struct hci_dev *hdev);
L
Linus Torvalds 已提交
1289 1290
int hci_suspend_dev(struct hci_dev *hdev);
int hci_resume_dev(struct hci_dev *hdev);
1291
int hci_reset_dev(struct hci_dev *hdev);
1292 1293
int hci_recv_frame(struct hci_dev *hdev, struct sk_buff *skb);
int hci_recv_diag(struct hci_dev *hdev, struct sk_buff *skb);
1294 1295
__printf(2, 3) void hci_set_hw_info(struct hci_dev *hdev, const char *fmt, ...);
__printf(2, 3) void hci_set_fw_info(struct hci_dev *hdev, const char *fmt, ...);
1296 1297 1298 1299 1300 1301 1302 1303

static inline void hci_set_msft_opcode(struct hci_dev *hdev, __u16 opcode)
{
#if IS_ENABLED(CONFIG_BT_MSFTEXT)
	hdev->msft_opcode = opcode;
#endif
}

1304 1305 1306 1307 1308 1309 1310
static inline void hci_set_aosp_capable(struct hci_dev *hdev)
{
#if IS_ENABLED(CONFIG_BT_AOSPEXT)
	hdev->aosp_capable = true;
#endif
}

L
Linus Torvalds 已提交
1311 1312
int hci_dev_open(__u16 dev);
int hci_dev_close(__u16 dev);
1313
int hci_dev_do_close(struct hci_dev *hdev);
L
Linus Torvalds 已提交
1314 1315 1316 1317 1318 1319 1320
int hci_dev_reset(__u16 dev);
int hci_dev_reset_stat(__u16 dev);
int hci_dev_cmd(unsigned int cmd, void __user *arg);
int hci_get_dev_list(void __user *arg);
int hci_get_dev_info(void __user *arg);
int hci_get_conn_list(void __user *arg);
int hci_get_conn_info(struct hci_dev *hdev, void __user *arg);
1321
int hci_get_auth_info(struct hci_dev *hdev, void __user *arg);
L
Linus Torvalds 已提交
1322 1323
int hci_inquiry(void __user *arg);

1324 1325
struct bdaddr_list *hci_bdaddr_list_lookup(struct list_head *list,
					   bdaddr_t *bdaddr, u8 type);
1326 1327 1328
struct bdaddr_list_with_irk *hci_bdaddr_list_lookup_with_irk(
				    struct list_head *list, bdaddr_t *bdaddr,
				    u8 type);
1329 1330 1331
struct bdaddr_list_with_flags *
hci_bdaddr_list_lookup_with_flags(struct list_head *list, bdaddr_t *bdaddr,
				  u8 type);
1332
int hci_bdaddr_list_add(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1333
int hci_bdaddr_list_add_with_irk(struct list_head *list, bdaddr_t *bdaddr,
1334 1335 1336
				 u8 type, u8 *peer_irk, u8 *local_irk);
int hci_bdaddr_list_add_with_flags(struct list_head *list, bdaddr_t *bdaddr,
				   u8 type, u32 flags);
1337
int hci_bdaddr_list_del(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1338
int hci_bdaddr_list_del_with_irk(struct list_head *list, bdaddr_t *bdaddr,
1339 1340 1341
				 u8 type);
int hci_bdaddr_list_del_with_flags(struct list_head *list, bdaddr_t *bdaddr,
				   u8 type);
1342
void hci_bdaddr_list_clear(struct list_head *list);
1343

1344 1345
struct hci_conn_params *hci_conn_params_lookup(struct hci_dev *hdev,
					       bdaddr_t *addr, u8 addr_type);
1346 1347
struct hci_conn_params *hci_conn_params_add(struct hci_dev *hdev,
					    bdaddr_t *addr, u8 addr_type);
1348
void hci_conn_params_del(struct hci_dev *hdev, bdaddr_t *addr, u8 addr_type);
1349
void hci_conn_params_clear_disabled(struct hci_dev *hdev);
1350

1351 1352 1353
struct hci_conn_params *hci_pend_le_action_lookup(struct list_head *list,
						  bdaddr_t *addr,
						  u8 addr_type);
1354

1355
void hci_uuids_clear(struct hci_dev *hdev);
1356

1357
void hci_link_keys_clear(struct hci_dev *hdev);
1358
struct link_key *hci_find_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1359
struct link_key *hci_add_link_key(struct hci_dev *hdev, struct hci_conn *conn,
1360 1361
				  bdaddr_t *bdaddr, u8 *val, u8 type,
				  u8 pin_len, bool *persistent);
1362
struct smp_ltk *hci_add_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1363
			    u8 addr_type, u8 type, u8 authenticated,
1364
			    u8 tk[16], u8 enc_size, __le16 ediv, __le64 rand);
1365 1366
struct smp_ltk *hci_find_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
			     u8 addr_type, u8 role);
1367
int hci_remove_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 bdaddr_type);
1368
void hci_smp_ltks_clear(struct hci_dev *hdev);
1369 1370
int hci_remove_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);

1371 1372 1373
struct smp_irk *hci_find_irk_by_rpa(struct hci_dev *hdev, bdaddr_t *rpa);
struct smp_irk *hci_find_irk_by_addr(struct hci_dev *hdev, bdaddr_t *bdaddr,
				     u8 addr_type);
1374 1375
struct smp_irk *hci_add_irk(struct hci_dev *hdev, bdaddr_t *bdaddr,
			    u8 addr_type, u8 val[16], bdaddr_t *rpa);
1376
void hci_remove_irk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 addr_type);
1377 1378
bool hci_is_blocked_key(struct hci_dev *hdev, u8 type, u8 val[16]);
void hci_blocked_keys_clear(struct hci_dev *hdev);
1379 1380
void hci_smp_irks_clear(struct hci_dev *hdev);

1381 1382
bool hci_bdaddr_is_paired(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type);

1383
void hci_remote_oob_data_clear(struct hci_dev *hdev);
1384
struct oob_data *hci_find_remote_oob_data(struct hci_dev *hdev,
1385
					  bdaddr_t *bdaddr, u8 bdaddr_type);
1386
int hci_add_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1387
			    u8 bdaddr_type, u8 *hash192, u8 *rand192,
1388
			    u8 *hash256, u8 *rand256);
1389 1390
int hci_remove_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
			       u8 bdaddr_type);
1391

1392 1393 1394 1395 1396 1397
void hci_adv_instances_clear(struct hci_dev *hdev);
struct adv_info *hci_find_adv_instance(struct hci_dev *hdev, u8 instance);
struct adv_info *hci_get_next_instance(struct hci_dev *hdev, u8 instance);
int hci_add_adv_instance(struct hci_dev *hdev, u8 instance, u32 flags,
			 u16 adv_data_len, u8 *adv_data,
			 u16 scan_rsp_len, u8 *scan_rsp_data,
1398 1399
			 u16 timeout, u16 duration, s8 tx_power,
			 u32 min_interval, u32 max_interval);
1400 1401 1402
int hci_set_adv_instance_data(struct hci_dev *hdev, u8 instance,
			 u16 adv_data_len, u8 *adv_data,
			 u16 scan_rsp_len, u8 *scan_rsp_data);
1403
int hci_remove_adv_instance(struct hci_dev *hdev, u8 instance);
1404
void hci_adv_instances_set_rpa_expired(struct hci_dev *hdev, bool rpa_expired);
1405 1406
u32 hci_adv_instance_flags(struct hci_dev *hdev, u8 instance);
bool hci_adv_instance_is_scannable(struct hci_dev *hdev, u8 instance);
1407

1408
void hci_adv_monitors_clear(struct hci_dev *hdev);
1409
void hci_free_adv_monitor(struct hci_dev *hdev, struct adv_monitor *monitor);
1410
int hci_add_adv_patterns_monitor_complete(struct hci_dev *hdev, u8 status);
1411
int hci_remove_adv_monitor_complete(struct hci_dev *hdev, u8 status);
1412 1413
bool hci_add_adv_monitor(struct hci_dev *hdev, struct adv_monitor *monitor,
			int *err);
1414 1415
bool hci_remove_single_adv_monitor(struct hci_dev *hdev, u16 handle, int *err);
bool hci_remove_all_adv_monitor(struct hci_dev *hdev, int *err);
1416
bool hci_is_adv_monitoring(struct hci_dev *hdev);
1417
int hci_get_adv_monitor_offload_ext(struct hci_dev *hdev);
1418

L
Linus Torvalds 已提交
1419 1420
void hci_event_packet(struct hci_dev *hdev, struct sk_buff *skb);

1421
void hci_init_sysfs(struct hci_dev *hdev);
1422
void hci_conn_init_sysfs(struct hci_conn *conn);
1423 1424
void hci_conn_add_sysfs(struct hci_conn *conn);
void hci_conn_del_sysfs(struct hci_conn *conn);
L
Linus Torvalds 已提交
1425

1426
#define SET_HCIDEV_DEV(hdev, pdev) ((hdev)->dev.parent = (pdev))
L
Linus Torvalds 已提交
1427 1428

/* ----- LMP capabilities ----- */
1429 1430 1431 1432 1433 1434 1435 1436 1437 1438 1439
#define lmp_encrypt_capable(dev)   ((dev)->features[0][0] & LMP_ENCRYPT)
#define lmp_rswitch_capable(dev)   ((dev)->features[0][0] & LMP_RSWITCH)
#define lmp_hold_capable(dev)      ((dev)->features[0][0] & LMP_HOLD)
#define lmp_sniff_capable(dev)     ((dev)->features[0][0] & LMP_SNIFF)
#define lmp_park_capable(dev)      ((dev)->features[0][1] & LMP_PARK)
#define lmp_inq_rssi_capable(dev)  ((dev)->features[0][3] & LMP_RSSI_INQ)
#define lmp_esco_capable(dev)      ((dev)->features[0][3] & LMP_ESCO)
#define lmp_bredr_capable(dev)     (!((dev)->features[0][4] & LMP_NO_BREDR))
#define lmp_le_capable(dev)        ((dev)->features[0][4] & LMP_LE)
#define lmp_sniffsubr_capable(dev) ((dev)->features[0][5] & LMP_SNIFF_SUBR)
#define lmp_pause_enc_capable(dev) ((dev)->features[0][5] & LMP_PAUSE_ENC)
1440
#define lmp_esco_2m_capable(dev)   ((dev)->features[0][5] & LMP_EDR_ESCO_2M)
1441 1442 1443 1444 1445 1446 1447
#define lmp_ext_inq_capable(dev)   ((dev)->features[0][6] & LMP_EXT_INQ)
#define lmp_le_br_capable(dev)     (!!((dev)->features[0][6] & LMP_SIMUL_LE_BR))
#define lmp_ssp_capable(dev)       ((dev)->features[0][6] & LMP_SIMPLE_PAIR)
#define lmp_no_flush_capable(dev)  ((dev)->features[0][6] & LMP_NO_FLUSH)
#define lmp_lsto_capable(dev)      ((dev)->features[0][7] & LMP_LSTO)
#define lmp_inq_tx_pwr_capable(dev) ((dev)->features[0][7] & LMP_INQ_TX_PWR)
#define lmp_ext_feat_capable(dev)  ((dev)->features[0][7] & LMP_EXTFEATURES)
1448
#define lmp_transp_capable(dev)    ((dev)->features[0][2] & LMP_TRANSPARENT)
1449 1450 1451 1452
#define lmp_edr_2m_capable(dev)    ((dev)->features[0][3] & LMP_EDR_2M)
#define lmp_edr_3m_capable(dev)    ((dev)->features[0][3] & LMP_EDR_3M)
#define lmp_edr_3slot_capable(dev) ((dev)->features[0][4] & LMP_EDR_3SLOT)
#define lmp_edr_5slot_capable(dev) ((dev)->features[0][5] & LMP_EDR_5SLOT)
L
Linus Torvalds 已提交
1453

1454
/* ----- Extended LMP capabilities ----- */
1455 1456
#define lmp_cpb_central_capable(dev) ((dev)->features[2][0] & LMP_CPB_CENTRAL)
#define lmp_cpb_peripheral_capable(dev) ((dev)->features[2][0] & LMP_CPB_PERIPHERAL)
1457 1458
#define lmp_sync_train_capable(dev) ((dev)->features[2][0] & LMP_SYNC_TRAIN)
#define lmp_sync_scan_capable(dev)  ((dev)->features[2][0] & LMP_SYNC_SCAN)
1459 1460
#define lmp_sc_capable(dev)         ((dev)->features[2][1] & LMP_SC)
#define lmp_ping_capable(dev)       ((dev)->features[2][1] & LMP_PING)
1461 1462

/* ----- Host capabilities ----- */
1463
#define lmp_host_ssp_capable(dev)  ((dev)->features[1][0] & LMP_HOST_SSP)
1464
#define lmp_host_sc_capable(dev)   ((dev)->features[1][0] & LMP_HOST_SC)
1465 1466
#define lmp_host_le_capable(dev)   (!!((dev)->features[1][0] & LMP_HOST_LE))
#define lmp_host_le_br_capable(dev) (!!((dev)->features[1][0] & LMP_HOST_LE_BREDR))
1467

1468 1469 1470 1471
#define hdev_is_powered(dev)   (test_bit(HCI_UP, &(dev)->flags) && \
				!hci_dev_test_flag(dev, HCI_AUTO_OFF))
#define bredr_sc_enabled(dev)  (lmp_sc_capable(dev) && \
				hci_dev_test_flag(dev, HCI_SC_ENABLED))
1472 1473 1474 1475
#define rpa_valid(dev)         (bacmp(&dev->rpa, BDADDR_ANY) && \
				!hci_dev_test_flag(dev, HCI_RPA_EXPIRED))
#define adv_rpa_valid(adv)     (bacmp(&adv->random_addr, BDADDR_ANY) && \
				!adv->rpa_expired)
1476

1477 1478 1479 1480 1481 1482 1483 1484 1485
#define scan_1m(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_1M) || \
		      ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_1M))

#define scan_2m(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_2M) || \
		      ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_2M))

#define scan_coded(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_CODED) || \
			 ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_CODED))

1486 1487
#define ll_privacy_capable(dev) ((dev)->le_features[0] & HCI_LE_LL_PRIVACY)

1488
/* Use LL Privacy based address resolution if supported */
1489 1490
#define use_ll_privacy(dev) (ll_privacy_capable(dev) && \
			     hci_dev_test_flag(dev, HCI_ENABLE_LL_PRIVACY))
1491

1492 1493 1494
#define privacy_mode_capable(dev) (use_ll_privacy(dev) && \
				   (hdev->commands[39] & 0x04))

1495 1496 1497 1498 1499 1500
/* Use enhanced synchronous connection if command is supported and its quirk
 * has not been set.
 */
#define enhanced_sync_conn_capable(dev) \
	(((dev)->commands[29] & 0x08) && \
	 !test_bit(HCI_QUIRK_BROKEN_ENHANCED_SETUP_SYNC_CONN, &(dev)->quirks))
1501

1502 1503 1504
/* Use ext scanning if set ext scan param and ext scan enable is supported */
#define use_ext_scan(dev) (((dev)->commands[37] & 0x20) && \
			   ((dev)->commands[37] & 0x40))
1505 1506
/* Use ext create connection if command is supported */
#define use_ext_conn(dev) ((dev)->commands[37] & 0x80)
1507

1508 1509 1510
/* Extended advertising support */
#define ext_adv_capable(dev) (((dev)->le_features[1] & HCI_LE_EXT_ADV))

1511 1512 1513 1514 1515 1516 1517 1518
/* BLUETOOTH CORE SPECIFICATION Version 5.3 | Vol 4, Part E page 1789:
 *
 * C24: Mandatory if the LE Controller supports Connection State and either
 * LE Feature (LL Privacy) or LE Feature (Extended Advertising) is supported
 */
#define use_enhanced_conn_complete(dev) (ll_privacy_capable(dev) || \
					 ext_adv_capable(dev))

L
Linus Torvalds 已提交
1519
/* ----- HCI protocols ----- */
1520 1521
#define HCI_PROTO_DEFER             0x01

1522
static inline int hci_proto_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
1523
					__u8 type, __u8 *flags)
L
Linus Torvalds 已提交
1524
{
1525 1526 1527
	switch (type) {
	case ACL_LINK:
		return l2cap_connect_ind(hdev, bdaddr);
L
Linus Torvalds 已提交
1528

1529 1530
	case SCO_LINK:
	case ESCO_LINK:
1531
		return sco_connect_ind(hdev, bdaddr, flags);
L
Linus Torvalds 已提交
1532

1533 1534 1535 1536
	default:
		BT_ERR("unknown link type %d", type);
		return -EINVAL;
	}
L
Linus Torvalds 已提交
1537 1538
}

1539
static inline int hci_proto_disconn_ind(struct hci_conn *conn)
L
Linus Torvalds 已提交
1540
{
1541 1542
	if (conn->type != ACL_LINK && conn->type != LE_LINK)
		return HCI_ERROR_REMOTE_USER_TERM;
L
Linus Torvalds 已提交
1543

1544
	return l2cap_disconn_ind(conn);
1545 1546
}

L
Linus Torvalds 已提交
1547 1548 1549 1550 1551 1552
/* ----- HCI callbacks ----- */
struct hci_cb {
	struct list_head list;

	char *name;

1553
	void (*connect_cfm)	(struct hci_conn *conn, __u8 status);
1554
	void (*disconn_cfm)	(struct hci_conn *conn, __u8 status);
1555 1556
	void (*security_cfm)	(struct hci_conn *conn, __u8 status,
								__u8 encrypt);
L
Linus Torvalds 已提交
1557 1558 1559 1560
	void (*key_change_cfm)	(struct hci_conn *conn, __u8 status);
	void (*role_switch_cfm)	(struct hci_conn *conn, __u8 status, __u8 role);
};

1561 1562 1563 1564 1565 1566 1567 1568 1569 1570 1571 1572 1573 1574 1575
static inline void hci_connect_cfm(struct hci_conn *conn, __u8 status)
{
	struct hci_cb *cb;

	mutex_lock(&hci_cb_list_lock);
	list_for_each_entry(cb, &hci_cb_list, list) {
		if (cb->connect_cfm)
			cb->connect_cfm(conn, status);
	}
	mutex_unlock(&hci_cb_list_lock);

	if (conn->connect_cfm_cb)
		conn->connect_cfm_cb(conn, status);
}

1576 1577 1578 1579 1580 1581 1582 1583 1584 1585 1586 1587 1588 1589 1590
static inline void hci_disconn_cfm(struct hci_conn *conn, __u8 reason)
{
	struct hci_cb *cb;

	mutex_lock(&hci_cb_list_lock);
	list_for_each_entry(cb, &hci_cb_list, list) {
		if (cb->disconn_cfm)
			cb->disconn_cfm(conn, reason);
	}
	mutex_unlock(&hci_cb_list_lock);

	if (conn->disconn_cfm_cb)
		conn->disconn_cfm_cb(conn, reason);
}

L
Linus Torvalds 已提交
1591 1592
static inline void hci_auth_cfm(struct hci_conn *conn, __u8 status)
{
1593
	struct hci_cb *cb;
1594
	__u8 encrypt;
L
Linus Torvalds 已提交
1595

1596
	if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->flags))
1597 1598
		return;

1599
	encrypt = test_bit(HCI_CONN_ENCRYPT, &conn->flags) ? 0x01 : 0x00;
1600

1601
	mutex_lock(&hci_cb_list_lock);
1602
	list_for_each_entry(cb, &hci_cb_list, list) {
1603 1604
		if (cb->security_cfm)
			cb->security_cfm(conn, status, encrypt);
L
Linus Torvalds 已提交
1605
	}
1606
	mutex_unlock(&hci_cb_list_lock);
1607 1608 1609

	if (conn->security_cfm_cb)
		conn->security_cfm_cb(conn, status);
L
Linus Torvalds 已提交
1610 1611
}

1612
static inline void hci_encrypt_cfm(struct hci_conn *conn, __u8 status)
L
Linus Torvalds 已提交
1613
{
1614
	struct hci_cb *cb;
1615 1616 1617
	__u8 encrypt;

	if (conn->state == BT_CONFIG) {
1618
		if (!status)
1619 1620 1621 1622 1623 1624 1625 1626 1627 1628 1629 1630 1631
			conn->state = BT_CONNECTED;

		hci_connect_cfm(conn, status);
		hci_conn_drop(conn);
		return;
	}

	if (!test_bit(HCI_CONN_ENCRYPT, &conn->flags))
		encrypt = 0x00;
	else if (test_bit(HCI_CONN_AES_CCM, &conn->flags))
		encrypt = 0x02;
	else
		encrypt = 0x01;
L
Linus Torvalds 已提交
1632

1633 1634 1635
	if (!status) {
		if (conn->sec_level == BT_SECURITY_SDP)
			conn->sec_level = BT_SECURITY_LOW;
1636

1637 1638 1639
		if (conn->pending_sec_level > conn->sec_level)
			conn->sec_level = conn->pending_sec_level;
	}
1640

1641
	mutex_lock(&hci_cb_list_lock);
1642
	list_for_each_entry(cb, &hci_cb_list, list) {
1643 1644
		if (cb->security_cfm)
			cb->security_cfm(conn, status, encrypt);
L
Linus Torvalds 已提交
1645
	}
1646
	mutex_unlock(&hci_cb_list_lock);
1647 1648 1649

	if (conn->security_cfm_cb)
		conn->security_cfm_cb(conn, status);
L
Linus Torvalds 已提交
1650 1651 1652 1653
}

static inline void hci_key_change_cfm(struct hci_conn *conn, __u8 status)
{
1654
	struct hci_cb *cb;
L
Linus Torvalds 已提交
1655

1656
	mutex_lock(&hci_cb_list_lock);
1657
	list_for_each_entry(cb, &hci_cb_list, list) {
L
Linus Torvalds 已提交
1658 1659 1660
		if (cb->key_change_cfm)
			cb->key_change_cfm(conn, status);
	}
1661
	mutex_unlock(&hci_cb_list_lock);
L
Linus Torvalds 已提交
1662 1663
}

1664 1665
static inline void hci_role_switch_cfm(struct hci_conn *conn, __u8 status,
								__u8 role)
L
Linus Torvalds 已提交
1666
{
1667
	struct hci_cb *cb;
L
Linus Torvalds 已提交
1668

1669
	mutex_lock(&hci_cb_list_lock);
1670
	list_for_each_entry(cb, &hci_cb_list, list) {
L
Linus Torvalds 已提交
1671 1672 1673
		if (cb->role_switch_cfm)
			cb->role_switch_cfm(conn, status, role);
	}
1674
	mutex_unlock(&hci_cb_list_lock);
L
Linus Torvalds 已提交
1675 1676
}

1677 1678
static inline bool hci_bdaddr_is_rpa(bdaddr_t *bdaddr, u8 addr_type)
{
1679
	if (addr_type != ADDR_LE_DEV_RANDOM)
1680 1681 1682 1683 1684 1685 1686 1687
		return false;

	if ((bdaddr->b[5] & 0xc0) == 0x40)
	       return true;

	return false;
}

1688 1689 1690 1691 1692 1693 1694 1695 1696 1697 1698 1699
static inline bool hci_is_identity_address(bdaddr_t *addr, u8 addr_type)
{
	if (addr_type == ADDR_LE_DEV_PUBLIC)
		return true;

	/* Check for Random Static address type */
	if ((addr->b[5] & 0xc0) == 0xc0)
		return true;

	return false;
}

1700 1701 1702 1703 1704 1705 1706 1707 1708
static inline struct smp_irk *hci_get_irk(struct hci_dev *hdev,
					  bdaddr_t *bdaddr, u8 addr_type)
{
	if (!hci_bdaddr_is_rpa(bdaddr, addr_type))
		return NULL;

	return hci_find_irk_by_rpa(hdev, bdaddr);
}

1709 1710 1711 1712 1713 1714 1715 1716 1717 1718 1719 1720 1721 1722
static inline int hci_check_conn_params(u16 min, u16 max, u16 latency,
					u16 to_multiplier)
{
	u16 max_latency;

	if (min > max || min < 6 || max > 3200)
		return -EINVAL;

	if (to_multiplier < 10 || to_multiplier > 3200)
		return -EINVAL;

	if (max >= to_multiplier * 8)
		return -EINVAL;

1723
	max_latency = (to_multiplier * 4 / max) - 1;
1724 1725 1726 1727 1728 1729
	if (latency > 499 || latency > max_latency)
		return -EINVAL;

	return 0;
}

L
Linus Torvalds 已提交
1730 1731 1732
int hci_register_cb(struct hci_cb *hcb);
int hci_unregister_cb(struct hci_cb *hcb);

1733 1734
int __hci_cmd_send(struct hci_dev *hdev, u16 opcode, u32 plen,
		   const void *param);
1735

1736 1737
int hci_send_cmd(struct hci_dev *hdev, __u16 opcode, __u32 plen,
		 const void *param);
1738
void hci_send_acl(struct hci_chan *chan, struct sk_buff *skb, __u16 flags);
1739
void hci_send_sco(struct hci_conn *conn, struct sk_buff *skb);
L
Linus Torvalds 已提交
1740

1741
void *hci_sent_cmd_data(struct hci_dev *hdev, __u16 opcode);
L
Linus Torvalds 已提交
1742

1743 1744
u32 hci_conn_get_phy(struct hci_conn *conn);

L
Linus Torvalds 已提交
1745
/* ----- HCI Sockets ----- */
1746
void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb);
1747
void hci_send_to_channel(unsigned short channel, struct sk_buff *skb,
1748
			 int flag, struct sock *skip_sk);
1749
void hci_send_to_monitor(struct hci_dev *hdev, struct sk_buff *skb);
1750 1751 1752
void hci_send_monitor_ctrl_event(struct hci_dev *hdev, u16 event,
				 void *data, u16 data_len, ktime_t tstamp,
				 int flag, struct sock *skip_sk);
L
Linus Torvalds 已提交
1753

1754 1755
void hci_sock_dev_event(struct hci_dev *hdev, int event);

1756 1757 1758 1759
#define HCI_MGMT_VAR_LEN	BIT(0)
#define HCI_MGMT_NO_HDEV	BIT(1)
#define HCI_MGMT_UNTRUSTED	BIT(2)
#define HCI_MGMT_UNCONFIGURED	BIT(3)
1760
#define HCI_MGMT_HDEV_OPTIONAL	BIT(4)
1761

1762 1763 1764 1765
struct hci_mgmt_handler {
	int (*func) (struct sock *sk, struct hci_dev *hdev, void *data,
		     u16 data_len);
	size_t data_len;
1766
	unsigned long flags;
1767 1768 1769 1770 1771 1772 1773
};

struct hci_mgmt_chan {
	struct list_head list;
	unsigned short channel;
	size_t handler_count;
	const struct hci_mgmt_handler *handlers;
1774
	void (*hdev_init) (struct sock *sk, struct hci_dev *hdev);
1775 1776 1777 1778 1779
};

int hci_mgmt_chan_register(struct hci_mgmt_chan *c);
void hci_mgmt_chan_unregister(struct hci_mgmt_chan *c);

1780
/* Management interface */
1781 1782 1783 1784 1785 1786
#define DISCOV_TYPE_BREDR		(BIT(BDADDR_BREDR))
#define DISCOV_TYPE_LE			(BIT(BDADDR_LE_PUBLIC) | \
					 BIT(BDADDR_LE_RANDOM))
#define DISCOV_TYPE_INTERLEAVED		(BIT(BDADDR_BREDR) | \
					 BIT(BDADDR_LE_PUBLIC) | \
					 BIT(BDADDR_LE_RANDOM))
1787

1788 1789 1790 1791 1792
/* These LE scan and inquiry parameters were chosen according to LE General
 * Discovery Procedure specification.
 */
#define DISCOV_LE_SCAN_WIN		0x12
#define DISCOV_LE_SCAN_INT		0x12
1793
#define DISCOV_LE_TIMEOUT		10240	/* msec */
1794
#define DISCOV_INTERLEAVED_TIMEOUT	5120	/* msec */
1795 1796
#define DISCOV_INTERLEAVED_INQUIRY_LEN	0x04
#define DISCOV_BREDR_INQUIRY_LEN	0x08
1797
#define DISCOV_LE_RESTART_DELAY		msecs_to_jiffies(200)	/* msec */
1798 1799
#define DISCOV_LE_FAST_ADV_INT_MIN	0x00A0	/* 100 msec */
#define DISCOV_LE_FAST_ADV_INT_MAX	0x00F0	/* 150 msec */
1800

1801 1802
#define NAME_RESOLVE_DURATION		msecs_to_jiffies(10240)	/* 10.24 sec */

1803
void mgmt_fill_version_info(void *ver);
1804
int mgmt_new_settings(struct hci_dev *hdev);
1805 1806
void mgmt_index_added(struct hci_dev *hdev);
void mgmt_index_removed(struct hci_dev *hdev);
1807
void mgmt_set_powered_failed(struct hci_dev *hdev, int err);
1808 1809
void mgmt_power_on(struct hci_dev *hdev, int err);
void __mgmt_power_off(struct hci_dev *hdev);
1810 1811
void mgmt_new_link_key(struct hci_dev *hdev, struct link_key *key,
		       bool persistent);
1812
void mgmt_device_connected(struct hci_dev *hdev, struct hci_conn *conn,
1813
			   u8 *name, u8 name_len);
1814
void mgmt_device_disconnected(struct hci_dev *hdev, bdaddr_t *bdaddr,
1815 1816
			      u8 link_type, u8 addr_type, u8 reason,
			      bool mgmt_connected);
1817 1818
void mgmt_disconnect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr,
			    u8 link_type, u8 addr_type, u8 status);
1819 1820
void mgmt_connect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
			 u8 addr_type, u8 status);
1821
void mgmt_pin_code_request(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 secure);
1822 1823
void mgmt_pin_code_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
				  u8 status);
1824 1825
void mgmt_pin_code_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
				      u8 status);
1826
int mgmt_user_confirm_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
1827
			      u8 link_type, u8 addr_type, u32 value,
1828
			      u8 confirm_hint);
1829
int mgmt_user_confirm_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1830
				     u8 link_type, u8 addr_type, u8 status);
1831
int mgmt_user_confirm_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1832
					 u8 link_type, u8 addr_type, u8 status);
1833
int mgmt_user_passkey_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
1834
			      u8 link_type, u8 addr_type);
1835
int mgmt_user_passkey_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1836
				     u8 link_type, u8 addr_type, u8 status);
1837
int mgmt_user_passkey_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1838
					 u8 link_type, u8 addr_type, u8 status);
1839 1840 1841
int mgmt_user_passkey_notify(struct hci_dev *hdev, bdaddr_t *bdaddr,
			     u8 link_type, u8 addr_type, u32 passkey,
			     u8 entered);
1842
void mgmt_auth_failed(struct hci_conn *conn, u8 status);
1843
void mgmt_auth_enable_complete(struct hci_dev *hdev, u8 status);
1844 1845
void mgmt_set_class_of_dev_complete(struct hci_dev *hdev, u8 *dev_class,
				    u8 status);
1846
void mgmt_set_local_name_complete(struct hci_dev *hdev, u8 *name, u8 status);
1847
void mgmt_start_discovery_complete(struct hci_dev *hdev, u8 status);
1848
void mgmt_stop_discovery_complete(struct hci_dev *hdev, u8 status);
1849
void mgmt_device_found(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1850 1851
		       u8 addr_type, u8 *dev_class, s8 rssi, u32 flags,
		       u8 *eir, u16 eir_len, u8 *scan_rsp, u8 scan_rsp_len);
1852 1853
void mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
		      u8 addr_type, s8 rssi, u8 *name, u8 name_len);
1854
void mgmt_discovering(struct hci_dev *hdev, u8 discovering);
1855 1856 1857
void mgmt_suspending(struct hci_dev *hdev, u8 state);
void mgmt_resuming(struct hci_dev *hdev, u8 reason, bdaddr_t *bdaddr,
		   u8 addr_type);
1858
bool mgmt_powering_down(struct hci_dev *hdev);
1859
void mgmt_new_ltk(struct hci_dev *hdev, struct smp_ltk *key, bool persistent);
1860
void mgmt_new_irk(struct hci_dev *hdev, struct smp_irk *irk, bool persistent);
1861 1862
void mgmt_new_csrk(struct hci_dev *hdev, struct smp_csrk *csrk,
		   bool persistent);
1863
void mgmt_new_conn_param(struct hci_dev *hdev, bdaddr_t *bdaddr,
1864 1865
			 u8 bdaddr_type, u8 store_hint, u16 min_interval,
			 u16 max_interval, u16 latency, u16 timeout);
1866
void mgmt_smp_complete(struct hci_conn *conn, bool complete);
1867 1868 1869 1870 1871 1872
bool mgmt_get_connectable(struct hci_dev *hdev);
u8 mgmt_get_adv_discov_flags(struct hci_dev *hdev);
void mgmt_advertising_added(struct sock *sk, struct hci_dev *hdev,
			    u8 instance);
void mgmt_advertising_removed(struct sock *sk, struct hci_dev *hdev,
			      u8 instance);
1873
void mgmt_adv_monitor_removed(struct hci_dev *hdev, u16 handle);
1874
int mgmt_phy_configuration_changed(struct hci_dev *hdev, struct sock *skip);
1875
int mgmt_add_adv_patterns_monitor_complete(struct hci_dev *hdev, u8 status);
1876
int mgmt_remove_adv_monitor_complete(struct hci_dev *hdev, u8 status);
1877 1878
void mgmt_adv_monitor_device_lost(struct hci_dev *hdev, u16 handle,
				  bdaddr_t *bdaddr, u8 addr_type);
1879

1880 1881
u8 hci_le_conn_update(struct hci_conn *conn, u16 min, u16 max, u16 latency,
		      u16 to_multiplier);
1882
void hci_le_start_enc(struct hci_conn *conn, __le16 ediv, __le64 rand,
1883
		      __u8 ltk[16], __u8 key_size);
A
Andre Guedes 已提交
1884

1885 1886
void hci_copy_identity_address(struct hci_dev *hdev, bdaddr_t *bdaddr,
			       u8 *bdaddr_type);
1887

1888 1889 1890 1891
#define SCO_AIRMODE_MASK       0x0003
#define SCO_AIRMODE_CVSD       0x0000
#define SCO_AIRMODE_TRANSP     0x0003

1892 1893 1894 1895 1896
#define LOCAL_CODEC_ACL_MASK	BIT(0)
#define LOCAL_CODEC_SCO_MASK	BIT(1)

#define TRANSPORT_TYPE_MAX	0x04

L
Linus Torvalds 已提交
1897
#endif /* __HCI_CORE_H */