linux/include/net/bluetooth/hci_core.h
<<
>>
Prefs
   1/*
   2   BlueZ - Bluetooth protocol stack for Linux
   3   Copyright (c) 2000-2001, 2010, Code Aurora Forum. All rights reserved.
   4
   5   Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
   6
   7   This program is free software; you can redistribute it and/or modify
   8   it under the terms of the GNU General Public License version 2 as
   9   published by the Free Software Foundation;
  10
  11   THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
  12   OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  13   FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
  14   IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
  15   CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
  16   WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  17   ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  18   OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  19
  20   ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
  21   COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
  22   SOFTWARE IS DISCLAIMED.
  23*/
  24
  25#ifndef __HCI_CORE_H
  26#define __HCI_CORE_H
  27
  28#include <net/bluetooth/hci.h>
  29#include <net/bluetooth/hci_sock.h>
  30
  31/* HCI priority */
  32#define HCI_PRIO_MAX    7
  33
  34/* HCI Core structures */
  35struct inquiry_data {
  36        bdaddr_t        bdaddr;
  37        __u8            pscan_rep_mode;
  38        __u8            pscan_period_mode;
  39        __u8            pscan_mode;
  40        __u8            dev_class[3];
  41        __le16          clock_offset;
  42        __s8            rssi;
  43        __u8            ssp_mode;
  44};
  45
  46struct inquiry_entry {
  47        struct list_head        all;            /* inq_cache.all */
  48        struct list_head        list;           /* unknown or resolve */
  49        enum {
  50                NAME_NOT_KNOWN,
  51                NAME_NEEDED,
  52                NAME_PENDING,
  53                NAME_KNOWN,
  54        } name_state;
  55        __u32                   timestamp;
  56        struct inquiry_data     data;
  57};
  58
  59struct discovery_state {
  60        int                     type;
  61        enum {
  62                DISCOVERY_STOPPED,
  63                DISCOVERY_STARTING,
  64                DISCOVERY_FINDING,
  65                DISCOVERY_RESOLVING,
  66                DISCOVERY_STOPPING,
  67        } state;
  68        struct list_head        all;    /* All devices found during inquiry */
  69        struct list_head        unknown;        /* Name state not known */
  70        struct list_head        resolve;        /* Name needs to be resolved */
  71        __u32                   timestamp;
  72        bdaddr_t                last_adv_addr;
  73        u8                      last_adv_addr_type;
  74        s8                      last_adv_rssi;
  75        u32                     last_adv_flags;
  76        u8                      last_adv_data[HCI_MAX_AD_LENGTH];
  77        u8                      last_adv_data_len;
  78        bool                    report_invalid_rssi;
  79        bool                    result_filtering;
  80        bool                    limited;
  81        s8                      rssi;
  82        u16                     uuid_count;
  83        u8                      (*uuids)[16];
  84        unsigned long           scan_start;
  85        unsigned long           scan_duration;
  86};
  87
  88struct hci_conn_hash {
  89        struct list_head list;
  90        unsigned int     acl_num;
  91        unsigned int     amp_num;
  92        unsigned int     sco_num;
  93        unsigned int     le_num;
  94        unsigned int     le_num_slave;
  95};
  96
  97struct bdaddr_list {
  98        struct list_head list;
  99        bdaddr_t bdaddr;
 100        u8 bdaddr_type;
 101};
 102
 103struct bt_uuid {
 104        struct list_head list;
 105        u8 uuid[16];
 106        u8 size;
 107        u8 svc_hint;
 108};
 109
 110struct smp_csrk {
 111        bdaddr_t bdaddr;
 112        u8 bdaddr_type;
 113        u8 type;
 114        u8 val[16];
 115};
 116
 117struct smp_ltk {
 118        struct list_head list;
 119        struct rcu_head rcu;
 120        bdaddr_t bdaddr;
 121        u8 bdaddr_type;
 122        u8 authenticated;
 123        u8 type;
 124        u8 enc_size;
 125        __le16 ediv;
 126        __le64 rand;
 127        u8 val[16];
 128};
 129
 130struct smp_irk {
 131        struct list_head list;
 132        struct rcu_head rcu;
 133        bdaddr_t rpa;
 134        bdaddr_t bdaddr;
 135        u8 addr_type;
 136        u8 val[16];
 137};
 138
 139struct link_key {
 140        struct list_head list;
 141        struct rcu_head rcu;
 142        bdaddr_t bdaddr;
 143        u8 type;
 144        u8 val[HCI_LINK_KEY_SIZE];
 145        u8 pin_len;
 146};
 147
 148struct oob_data {
 149        struct list_head list;
 150        bdaddr_t bdaddr;
 151        u8 bdaddr_type;
 152        u8 present;
 153        u8 hash192[16];
 154        u8 rand192[16];
 155        u8 hash256[16];
 156        u8 rand256[16];
 157};
 158
 159struct adv_info {
 160        struct list_head list;
 161        bool pending;
 162        __u8    instance;
 163        __u32   flags;
 164        __u16   timeout;
 165        __u16   remaining_time;
 166        __u16   duration;
 167        __u16   adv_data_len;
 168        __u8    adv_data[HCI_MAX_AD_LENGTH];
 169        __u16   scan_rsp_len;
 170        __u8    scan_rsp_data[HCI_MAX_AD_LENGTH];
 171};
 172
 173#define HCI_MAX_ADV_INSTANCES           5
 174#define HCI_DEFAULT_ADV_DURATION        2
 175
 176#define HCI_MAX_SHORT_NAME_LENGTH       10
 177
 178/* Default LE RPA expiry time, 15 minutes */
 179#define HCI_DEFAULT_RPA_TIMEOUT         (15 * 60)
 180
 181/* Default min/max age of connection information (1s/3s) */
 182#define DEFAULT_CONN_INFO_MIN_AGE       1000
 183#define DEFAULT_CONN_INFO_MAX_AGE       3000
 184
 185struct amp_assoc {
 186        __u16   len;
 187        __u16   offset;
 188        __u16   rem_len;
 189        __u16   len_so_far;
 190        __u8    data[HCI_MAX_AMP_ASSOC_SIZE];
 191};
 192
 193#define HCI_MAX_PAGES   3
 194
 195struct hci_dev {
 196        struct list_head list;
 197        struct mutex    lock;
 198
 199        char            name[8];
 200        unsigned long   flags;
 201        __u16           id;
 202        __u8            bus;
 203        __u8            dev_type;
 204        bdaddr_t        bdaddr;
 205        bdaddr_t        setup_addr;
 206        bdaddr_t        public_addr;
 207        bdaddr_t        random_addr;
 208        bdaddr_t        static_addr;
 209        __u8            adv_addr_type;
 210        __u8            dev_name[HCI_MAX_NAME_LENGTH];
 211        __u8            short_name[HCI_MAX_SHORT_NAME_LENGTH];
 212        __u8            eir[HCI_MAX_EIR_LENGTH];
 213        __u8            dev_class[3];
 214        __u8            major_class;
 215        __u8            minor_class;
 216        __u8            max_page;
 217        __u8            features[HCI_MAX_PAGES][8];
 218        __u8            le_features[8];
 219        __u8            le_white_list_size;
 220        __u8            le_states[8];
 221        __u8            commands[64];
 222        __u8            hci_ver;
 223        __u16           hci_rev;
 224        __u8            lmp_ver;
 225        __u16           manufacturer;
 226        __u16           lmp_subver;
 227        __u16           voice_setting;
 228        __u8            num_iac;
 229        __u8            stored_max_keys;
 230        __u8            stored_num_keys;
 231        __u8            io_capability;
 232        __s8            inq_tx_power;
 233        __u16           page_scan_interval;
 234        __u16           page_scan_window;
 235        __u8            page_scan_type;
 236        __u8            le_adv_channel_map;
 237        __u16           le_adv_min_interval;
 238        __u16           le_adv_max_interval;
 239        __u8            le_scan_type;
 240        __u16           le_scan_interval;
 241        __u16           le_scan_window;
 242        __u16           le_conn_min_interval;
 243        __u16           le_conn_max_interval;
 244        __u16           le_conn_latency;
 245        __u16           le_supv_timeout;
 246        __u16           le_def_tx_len;
 247        __u16           le_def_tx_time;
 248        __u16           le_max_tx_len;
 249        __u16           le_max_tx_time;
 250        __u16           le_max_rx_len;
 251        __u16           le_max_rx_time;
 252        __u16           discov_interleaved_timeout;
 253        __u16           conn_info_min_age;
 254        __u16           conn_info_max_age;
 255        __u8            ssp_debug_mode;
 256        __u8            hw_error_code;
 257        __u32           clock;
 258
 259        __u16           devid_source;
 260        __u16           devid_vendor;
 261        __u16           devid_product;
 262        __u16           devid_version;
 263
 264        __u16           pkt_type;
 265        __u16           esco_type;
 266        __u16           link_policy;
 267        __u16           link_mode;
 268
 269        __u32           idle_timeout;
 270        __u16           sniff_min_interval;
 271        __u16           sniff_max_interval;
 272
 273        __u8            amp_status;
 274        __u32           amp_total_bw;
 275        __u32           amp_max_bw;
 276        __u32           amp_min_latency;
 277        __u32           amp_max_pdu;
 278        __u8            amp_type;
 279        __u16           amp_pal_cap;
 280        __u16           amp_assoc_size;
 281        __u32           amp_max_flush_to;
 282        __u32           amp_be_flush_to;
 283
 284        struct amp_assoc        loc_assoc;
 285
 286        __u8            flow_ctl_mode;
 287
 288        unsigned int    auto_accept_delay;
 289
 290        unsigned long   quirks;
 291
 292        atomic_t        cmd_cnt;
 293        unsigned int    acl_cnt;
 294        unsigned int    sco_cnt;
 295        unsigned int    le_cnt;
 296
 297        unsigned int    acl_mtu;
 298        unsigned int    sco_mtu;
 299        unsigned int    le_mtu;
 300        unsigned int    acl_pkts;
 301        unsigned int    sco_pkts;
 302        unsigned int    le_pkts;
 303
 304        __u16           block_len;
 305        __u16           block_mtu;
 306        __u16           num_blocks;
 307        __u16           block_cnt;
 308
 309        unsigned long   acl_last_tx;
 310        unsigned long   sco_last_tx;
 311        unsigned long   le_last_tx;
 312
 313        struct workqueue_struct *workqueue;
 314        struct workqueue_struct *req_workqueue;
 315
 316        struct work_struct      power_on;
 317        struct delayed_work     power_off;
 318        struct work_struct      error_reset;
 319
 320        __u16                   discov_timeout;
 321        struct delayed_work     discov_off;
 322
 323        struct delayed_work     service_cache;
 324
 325        struct delayed_work     cmd_timer;
 326
 327        struct work_struct      rx_work;
 328        struct work_struct      cmd_work;
 329        struct work_struct      tx_work;
 330
 331        struct work_struct      discov_update;
 332        struct work_struct      bg_scan_update;
 333        struct work_struct      scan_update;
 334        struct work_struct      connectable_update;
 335        struct work_struct      discoverable_update;
 336        struct delayed_work     le_scan_disable;
 337        struct delayed_work     le_scan_restart;
 338
 339        struct sk_buff_head     rx_q;
 340        struct sk_buff_head     raw_q;
 341        struct sk_buff_head     cmd_q;
 342
 343        struct sk_buff          *sent_cmd;
 344
 345        struct mutex            req_lock;
 346        wait_queue_head_t       req_wait_q;
 347        __u32                   req_status;
 348        __u32                   req_result;
 349        struct sk_buff          *req_skb;
 350
 351        void                    *smp_data;
 352        void                    *smp_bredr_data;
 353
 354        struct discovery_state  discovery;
 355        struct hci_conn_hash    conn_hash;
 356
 357        struct list_head        mgmt_pending;
 358        struct list_head        blacklist;
 359        struct list_head        whitelist;
 360        struct list_head        uuids;
 361        struct list_head        link_keys;
 362        struct list_head        long_term_keys;
 363        struct list_head        identity_resolving_keys;
 364        struct list_head        remote_oob_data;
 365        struct list_head        le_white_list;
 366        struct list_head        le_conn_params;
 367        struct list_head        pend_le_conns;
 368        struct list_head        pend_le_reports;
 369
 370        struct hci_dev_stats    stat;
 371
 372        atomic_t                promisc;
 373
 374        struct dentry           *debugfs;
 375
 376        struct device           dev;
 377
 378        struct rfkill           *rfkill;
 379
 380        DECLARE_BITMAP(dev_flags, __HCI_NUM_FLAGS);
 381
 382        __s8                    adv_tx_power;
 383        __u8                    adv_data[HCI_MAX_AD_LENGTH];
 384        __u8                    adv_data_len;
 385        __u8                    scan_rsp_data[HCI_MAX_AD_LENGTH];
 386        __u8                    scan_rsp_data_len;
 387
 388        struct list_head        adv_instances;
 389        unsigned int            adv_instance_cnt;
 390        __u8                    cur_adv_instance;
 391        __u16                   adv_instance_timeout;
 392        struct delayed_work     adv_instance_expire;
 393
 394        __u8                    irk[16];
 395        __u32                   rpa_timeout;
 396        struct delayed_work     rpa_expired;
 397        bdaddr_t                rpa;
 398
 399        int (*open)(struct hci_dev *hdev);
 400        int (*close)(struct hci_dev *hdev);
 401        int (*flush)(struct hci_dev *hdev);
 402        int (*setup)(struct hci_dev *hdev);
 403        int (*shutdown)(struct hci_dev *hdev);
 404        int (*send)(struct hci_dev *hdev, struct sk_buff *skb);
 405        void (*notify)(struct hci_dev *hdev, unsigned int evt);
 406        void (*hw_error)(struct hci_dev *hdev, u8 code);
 407        int (*post_init)(struct hci_dev *hdev);
 408        int (*set_diag)(struct hci_dev *hdev, bool enable);
 409        int (*set_bdaddr)(struct hci_dev *hdev, const bdaddr_t *bdaddr);
 410};
 411
 412#define HCI_PHY_HANDLE(handle)  (handle & 0xff)
 413
 414struct hci_conn {
 415        struct list_head list;
 416
 417        atomic_t        refcnt;
 418
 419        bdaddr_t        dst;
 420        __u8            dst_type;
 421        bdaddr_t        src;
 422        __u8            src_type;
 423        bdaddr_t        init_addr;
 424        __u8            init_addr_type;
 425        bdaddr_t        resp_addr;
 426        __u8            resp_addr_type;
 427        __u16           handle;
 428        __u16           state;
 429        __u8            mode;
 430        __u8            type;
 431        __u8            role;
 432        bool            out;
 433        __u8            attempt;
 434        __u8            dev_class[3];
 435        __u8            features[HCI_MAX_PAGES][8];
 436        __u16           pkt_type;
 437        __u16           link_policy;
 438        __u8            key_type;
 439        __u8            auth_type;
 440        __u8            sec_level;
 441        __u8            pending_sec_level;
 442        __u8            pin_length;
 443        __u8            enc_key_size;
 444        __u8            io_capability;
 445        __u32           passkey_notify;
 446        __u8            passkey_entered;
 447        __u16           disc_timeout;
 448        __u16           conn_timeout;
 449        __u16           setting;
 450        __u16           le_conn_min_interval;
 451        __u16           le_conn_max_interval;
 452        __u16           le_conn_interval;
 453        __u16           le_conn_latency;
 454        __u16           le_supv_timeout;
 455        __u8            le_adv_data[HCI_MAX_AD_LENGTH];
 456        __u8            le_adv_data_len;
 457        __s8            rssi;
 458        __s8            tx_power;
 459        __s8            max_tx_power;
 460        unsigned long   flags;
 461
 462        __u32           clock;
 463        __u16           clock_accuracy;
 464
 465        unsigned long   conn_info_timestamp;
 466
 467        __u8            remote_cap;
 468        __u8            remote_auth;
 469        __u8            remote_id;
 470
 471        unsigned int    sent;
 472
 473        struct sk_buff_head data_q;
 474        struct list_head chan_list;
 475
 476        struct delayed_work disc_work;
 477        struct delayed_work auto_accept_work;
 478        struct delayed_work idle_work;
 479        struct delayed_work le_conn_timeout;
 480        struct work_struct  le_scan_cleanup;
 481
 482        struct device   dev;
 483        struct dentry   *debugfs;
 484
 485        struct hci_dev  *hdev;
 486        void            *l2cap_data;
 487        void            *sco_data;
 488        struct amp_mgr  *amp_mgr;
 489
 490        struct hci_conn *link;
 491
 492        void (*connect_cfm_cb)  (struct hci_conn *conn, u8 status);
 493        void (*security_cfm_cb) (struct hci_conn *conn, u8 status);
 494        void (*disconn_cfm_cb)  (struct hci_conn *conn, u8 reason);
 495};
 496
 497struct hci_chan {
 498        struct list_head list;
 499        __u16 handle;
 500        struct hci_conn *conn;
 501        struct sk_buff_head data_q;
 502        unsigned int    sent;
 503        __u8            state;
 504};
 505
 506struct hci_conn_params {
 507        struct list_head list;
 508        struct list_head action;
 509
 510        bdaddr_t addr;
 511        u8 addr_type;
 512
 513        u16 conn_min_interval;
 514        u16 conn_max_interval;
 515        u16 conn_latency;
 516        u16 supervision_timeout;
 517
 518        enum {
 519                HCI_AUTO_CONN_DISABLED,
 520                HCI_AUTO_CONN_REPORT,
 521                HCI_AUTO_CONN_DIRECT,
 522                HCI_AUTO_CONN_ALWAYS,
 523                HCI_AUTO_CONN_LINK_LOSS,
 524                HCI_AUTO_CONN_EXPLICIT,
 525        } auto_connect;
 526
 527        struct hci_conn *conn;
 528        bool explicit_connect;
 529};
 530
 531extern struct list_head hci_dev_list;
 532extern struct list_head hci_cb_list;
 533extern rwlock_t hci_dev_list_lock;
 534extern struct mutex hci_cb_list_lock;
 535
 536#define hci_dev_set_flag(hdev, nr)             set_bit((nr), (hdev)->dev_flags)
 537#define hci_dev_clear_flag(hdev, nr)           clear_bit((nr), (hdev)->dev_flags)
 538#define hci_dev_change_flag(hdev, nr)          change_bit((nr), (hdev)->dev_flags)
 539#define hci_dev_test_flag(hdev, nr)            test_bit((nr), (hdev)->dev_flags)
 540#define hci_dev_test_and_set_flag(hdev, nr)    test_and_set_bit((nr), (hdev)->dev_flags)
 541#define hci_dev_test_and_clear_flag(hdev, nr)  test_and_clear_bit((nr), (hdev)->dev_flags)
 542#define hci_dev_test_and_change_flag(hdev, nr) test_and_change_bit((nr), (hdev)->dev_flags)
 543
 544#define hci_dev_clear_volatile_flags(hdev)                      \
 545        do {                                                    \
 546                hci_dev_clear_flag(hdev, HCI_LE_SCAN);          \
 547                hci_dev_clear_flag(hdev, HCI_LE_ADV);           \
 548                hci_dev_clear_flag(hdev, HCI_PERIODIC_INQ);     \
 549        } while (0)
 550
 551/* ----- HCI interface to upper protocols ----- */
 552int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr);
 553int l2cap_disconn_ind(struct hci_conn *hcon);
 554void l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
 555
 556#if IS_ENABLED(CONFIG_BT_BREDR)
 557int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
 558void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb);
 559#else
 560static inline int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
 561                                  __u8 *flags)
 562{
 563        return 0;
 564}
 565
 566static inline void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb)
 567{
 568}
 569#endif
 570
 571/* ----- Inquiry cache ----- */
 572#define INQUIRY_CACHE_AGE_MAX   (HZ*30)   /* 30 seconds */
 573#define INQUIRY_ENTRY_AGE_MAX   (HZ*60)   /* 60 seconds */
 574
 575static inline void discovery_init(struct hci_dev *hdev)
 576{
 577        hdev->discovery.state = DISCOVERY_STOPPED;
 578        INIT_LIST_HEAD(&hdev->discovery.all);
 579        INIT_LIST_HEAD(&hdev->discovery.unknown);
 580        INIT_LIST_HEAD(&hdev->discovery.resolve);
 581        hdev->discovery.report_invalid_rssi = true;
 582        hdev->discovery.rssi = HCI_RSSI_INVALID;
 583}
 584
 585static inline void hci_discovery_filter_clear(struct hci_dev *hdev)
 586{
 587        hdev->discovery.result_filtering = false;
 588        hdev->discovery.report_invalid_rssi = true;
 589        hdev->discovery.rssi = HCI_RSSI_INVALID;
 590        hdev->discovery.uuid_count = 0;
 591        kfree(hdev->discovery.uuids);
 592        hdev->discovery.uuids = NULL;
 593        hdev->discovery.scan_start = 0;
 594        hdev->discovery.scan_duration = 0;
 595}
 596
 597bool hci_discovery_active(struct hci_dev *hdev);
 598
 599void hci_discovery_set_state(struct hci_dev *hdev, int state);
 600
 601static inline int inquiry_cache_empty(struct hci_dev *hdev)
 602{
 603        return list_empty(&hdev->discovery.all);
 604}
 605
 606static inline long inquiry_cache_age(struct hci_dev *hdev)
 607{
 608        struct discovery_state *c = &hdev->discovery;
 609        return jiffies - c->timestamp;
 610}
 611
 612static inline long inquiry_entry_age(struct inquiry_entry *e)
 613{
 614        return jiffies - e->timestamp;
 615}
 616
 617struct inquiry_entry *hci_inquiry_cache_lookup(struct hci_dev *hdev,
 618                                               bdaddr_t *bdaddr);
 619struct inquiry_entry *hci_inquiry_cache_lookup_unknown(struct hci_dev *hdev,
 620                                                       bdaddr_t *bdaddr);
 621struct inquiry_entry *hci_inquiry_cache_lookup_resolve(struct hci_dev *hdev,
 622                                                       bdaddr_t *bdaddr,
 623                                                       int state);
 624void hci_inquiry_cache_update_resolve(struct hci_dev *hdev,
 625                                      struct inquiry_entry *ie);
 626u32 hci_inquiry_cache_update(struct hci_dev *hdev, struct inquiry_data *data,
 627                             bool name_known);
 628void hci_inquiry_cache_flush(struct hci_dev *hdev);
 629
 630/* ----- HCI Connections ----- */
 631enum {
 632        HCI_CONN_AUTH_PEND,
 633        HCI_CONN_REAUTH_PEND,
 634        HCI_CONN_ENCRYPT_PEND,
 635        HCI_CONN_RSWITCH_PEND,
 636        HCI_CONN_MODE_CHANGE_PEND,
 637        HCI_CONN_SCO_SETUP_PEND,
 638        HCI_CONN_MGMT_CONNECTED,
 639        HCI_CONN_SSP_ENABLED,
 640        HCI_CONN_SC_ENABLED,
 641        HCI_CONN_AES_CCM,
 642        HCI_CONN_POWER_SAVE,
 643        HCI_CONN_FLUSH_KEY,
 644        HCI_CONN_ENCRYPT,
 645        HCI_CONN_AUTH,
 646        HCI_CONN_SECURE,
 647        HCI_CONN_FIPS,
 648        HCI_CONN_STK_ENCRYPT,
 649        HCI_CONN_AUTH_INITIATOR,
 650        HCI_CONN_DROP,
 651        HCI_CONN_PARAM_REMOVAL_PEND,
 652        HCI_CONN_NEW_LINK_KEY,
 653        HCI_CONN_SCANNING,
 654};
 655
 656static inline bool hci_conn_ssp_enabled(struct hci_conn *conn)
 657{
 658        struct hci_dev *hdev = conn->hdev;
 659        return hci_dev_test_flag(hdev, HCI_SSP_ENABLED) &&
 660               test_bit(HCI_CONN_SSP_ENABLED, &conn->flags);
 661}
 662
 663static inline bool hci_conn_sc_enabled(struct hci_conn *conn)
 664{
 665        struct hci_dev *hdev = conn->hdev;
 666        return hci_dev_test_flag(hdev, HCI_SC_ENABLED) &&
 667               test_bit(HCI_CONN_SC_ENABLED, &conn->flags);
 668}
 669
 670static inline void hci_conn_hash_add(struct hci_dev *hdev, struct hci_conn *c)
 671{
 672        struct hci_conn_hash *h = &hdev->conn_hash;
 673        list_add_rcu(&c->list, &h->list);
 674        switch (c->type) {
 675        case ACL_LINK:
 676                h->acl_num++;
 677                break;
 678        case AMP_LINK:
 679                h->amp_num++;
 680                break;
 681        case LE_LINK:
 682                h->le_num++;
 683                if (c->role == HCI_ROLE_SLAVE)
 684                        h->le_num_slave++;
 685                break;
 686        case SCO_LINK:
 687        case ESCO_LINK:
 688                h->sco_num++;
 689                break;
 690        }
 691}
 692
 693static inline void hci_conn_hash_del(struct hci_dev *hdev, struct hci_conn *c)
 694{
 695        struct hci_conn_hash *h = &hdev->conn_hash;
 696
 697        list_del_rcu(&c->list);
 698        synchronize_rcu();
 699
 700        switch (c->type) {
 701        case ACL_LINK:
 702                h->acl_num--;
 703                break;
 704        case AMP_LINK:
 705                h->amp_num--;
 706                break;
 707        case LE_LINK:
 708                h->le_num--;
 709                if (c->role == HCI_ROLE_SLAVE)
 710                        h->le_num_slave--;
 711                break;
 712        case SCO_LINK:
 713        case ESCO_LINK:
 714                h->sco_num--;
 715                break;
 716        }
 717}
 718
 719static inline unsigned int hci_conn_num(struct hci_dev *hdev, __u8 type)
 720{
 721        struct hci_conn_hash *h = &hdev->conn_hash;
 722        switch (type) {
 723        case ACL_LINK:
 724                return h->acl_num;
 725        case AMP_LINK:
 726                return h->amp_num;
 727        case LE_LINK:
 728                return h->le_num;
 729        case SCO_LINK:
 730        case ESCO_LINK:
 731                return h->sco_num;
 732        default:
 733                return 0;
 734        }
 735}
 736
 737static inline unsigned int hci_conn_count(struct hci_dev *hdev)
 738{
 739        struct hci_conn_hash *c = &hdev->conn_hash;
 740
 741        return c->acl_num + c->amp_num + c->sco_num + c->le_num;
 742}
 743
 744static inline __u8 hci_conn_lookup_type(struct hci_dev *hdev, __u16 handle)
 745{
 746        struct hci_conn_hash *h = &hdev->conn_hash;
 747        struct hci_conn *c;
 748        __u8 type = INVALID_LINK;
 749
 750        rcu_read_lock();
 751
 752        list_for_each_entry_rcu(c, &h->list, list) {
 753                if (c->handle == handle) {
 754                        type = c->type;
 755                        break;
 756                }
 757        }
 758
 759        rcu_read_unlock();
 760
 761        return type;
 762}
 763
 764static inline struct hci_conn *hci_conn_hash_lookup_handle(struct hci_dev *hdev,
 765                                                                __u16 handle)
 766{
 767        struct hci_conn_hash *h = &hdev->conn_hash;
 768        struct hci_conn  *c;
 769
 770        rcu_read_lock();
 771
 772        list_for_each_entry_rcu(c, &h->list, list) {
 773                if (c->handle == handle) {
 774                        rcu_read_unlock();
 775                        return c;
 776                }
 777        }
 778        rcu_read_unlock();
 779
 780        return NULL;
 781}
 782
 783static inline struct hci_conn *hci_conn_hash_lookup_ba(struct hci_dev *hdev,
 784                                                        __u8 type, bdaddr_t *ba)
 785{
 786        struct hci_conn_hash *h = &hdev->conn_hash;
 787        struct hci_conn  *c;
 788
 789        rcu_read_lock();
 790
 791        list_for_each_entry_rcu(c, &h->list, list) {
 792                if (c->type == type && !bacmp(&c->dst, ba)) {
 793                        rcu_read_unlock();
 794                        return c;
 795                }
 796        }
 797
 798        rcu_read_unlock();
 799
 800        return NULL;
 801}
 802
 803static inline struct hci_conn *hci_conn_hash_lookup_le(struct hci_dev *hdev,
 804                                                       bdaddr_t *ba,
 805                                                       __u8 ba_type)
 806{
 807        struct hci_conn_hash *h = &hdev->conn_hash;
 808        struct hci_conn  *c;
 809
 810        rcu_read_lock();
 811
 812        list_for_each_entry_rcu(c, &h->list, list) {
 813                if (c->type != LE_LINK)
 814                       continue;
 815
 816                if (ba_type == c->dst_type && !bacmp(&c->dst, ba)) {
 817                        rcu_read_unlock();
 818                        return c;
 819                }
 820        }
 821
 822        rcu_read_unlock();
 823
 824        return NULL;
 825}
 826
 827static inline struct hci_conn *hci_conn_hash_lookup_state(struct hci_dev *hdev,
 828                                                        __u8 type, __u16 state)
 829{
 830        struct hci_conn_hash *h = &hdev->conn_hash;
 831        struct hci_conn  *c;
 832
 833        rcu_read_lock();
 834
 835        list_for_each_entry_rcu(c, &h->list, list) {
 836                if (c->type == type && c->state == state) {
 837                        rcu_read_unlock();
 838                        return c;
 839                }
 840        }
 841
 842        rcu_read_unlock();
 843
 844        return NULL;
 845}
 846
 847static inline struct hci_conn *hci_lookup_le_connect(struct hci_dev *hdev)
 848{
 849        struct hci_conn_hash *h = &hdev->conn_hash;
 850        struct hci_conn  *c;
 851
 852        rcu_read_lock();
 853
 854        list_for_each_entry_rcu(c, &h->list, list) {
 855                if (c->type == LE_LINK && c->state == BT_CONNECT &&
 856                    !test_bit(HCI_CONN_SCANNING, &c->flags)) {
 857                        rcu_read_unlock();
 858                        return c;
 859                }
 860        }
 861
 862        rcu_read_unlock();
 863
 864        return NULL;
 865}
 866
 867int hci_disconnect(struct hci_conn *conn, __u8 reason);
 868bool hci_setup_sync(struct hci_conn *conn, __u16 handle);
 869void hci_sco_setup(struct hci_conn *conn, __u8 status);
 870
 871struct hci_conn *hci_conn_add(struct hci_dev *hdev, int type, bdaddr_t *dst,
 872                              u8 role);
 873int hci_conn_del(struct hci_conn *conn);
 874void hci_conn_hash_flush(struct hci_dev *hdev);
 875void hci_conn_check_pending(struct hci_dev *hdev);
 876
 877struct hci_chan *hci_chan_create(struct hci_conn *conn);
 878void hci_chan_del(struct hci_chan *chan);
 879void hci_chan_list_flush(struct hci_conn *conn);
 880struct hci_chan *hci_chan_lookup_handle(struct hci_dev *hdev, __u16 handle);
 881
 882struct hci_conn *hci_connect_le_scan(struct hci_dev *hdev, bdaddr_t *dst,
 883                                     u8 dst_type, u8 sec_level,
 884                                     u16 conn_timeout);
 885struct hci_conn *hci_connect_le(struct hci_dev *hdev, bdaddr_t *dst,
 886                                u8 dst_type, u8 sec_level, u16 conn_timeout,
 887                                u8 role);
 888struct hci_conn *hci_connect_acl(struct hci_dev *hdev, bdaddr_t *dst,
 889                                 u8 sec_level, u8 auth_type);
 890struct hci_conn *hci_connect_sco(struct hci_dev *hdev, int type, bdaddr_t *dst,
 891                                 __u16 setting);
 892int hci_conn_check_link_mode(struct hci_conn *conn);
 893int hci_conn_check_secure(struct hci_conn *conn, __u8 sec_level);
 894int hci_conn_security(struct hci_conn *conn, __u8 sec_level, __u8 auth_type,
 895                      bool initiator);
 896int hci_conn_switch_role(struct hci_conn *conn, __u8 role);
 897
 898void hci_conn_enter_active_mode(struct hci_conn *conn, __u8 force_active);
 899
 900void hci_le_conn_failed(struct hci_conn *conn, u8 status);
 901
 902/*
 903 * hci_conn_get() and hci_conn_put() are used to control the life-time of an
 904 * "hci_conn" object. They do not guarantee that the hci_conn object is running,
 905 * working or anything else. They just guarantee that the object is available
 906 * and can be dereferenced. So you can use its locks, local variables and any
 907 * other constant data.
 908 * Before accessing runtime data, you _must_ lock the object and then check that
 909 * it is still running. As soon as you release the locks, the connection might
 910 * get dropped, though.
 911 *
 912 * On the other hand, hci_conn_hold() and hci_conn_drop() are used to control
 913 * how long the underlying connection is held. So every channel that runs on the
 914 * hci_conn object calls this to prevent the connection from disappearing. As
 915 * long as you hold a device, you must also guarantee that you have a valid
 916 * reference to the device via hci_conn_get() (or the initial reference from
 917 * hci_conn_add()).
 918 * The hold()/drop() ref-count is known to drop below 0 sometimes, which doesn't
 919 * break because nobody cares for that. But this means, we cannot use
 920 * _get()/_drop() in it, but require the caller to have a valid ref (FIXME).
 921 */
 922
 923static inline struct hci_conn *hci_conn_get(struct hci_conn *conn)
 924{
 925        get_device(&conn->dev);
 926        return conn;
 927}
 928
 929static inline void hci_conn_put(struct hci_conn *conn)
 930{
 931        put_device(&conn->dev);
 932}
 933
 934static inline void hci_conn_hold(struct hci_conn *conn)
 935{
 936        BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
 937
 938        atomic_inc(&conn->refcnt);
 939        cancel_delayed_work(&conn->disc_work);
 940}
 941
 942static inline void hci_conn_drop(struct hci_conn *conn)
 943{
 944        BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
 945
 946        if (atomic_dec_and_test(&conn->refcnt)) {
 947                unsigned long timeo;
 948
 949                switch (conn->type) {
 950                case ACL_LINK:
 951                case LE_LINK:
 952                        cancel_delayed_work(&conn->idle_work);
 953                        if (conn->state == BT_CONNECTED) {
 954                                timeo = conn->disc_timeout;
 955                                if (!conn->out)
 956                                        timeo *= 2;
 957                        } else {
 958                                timeo = 0;
 959                        }
 960                        break;
 961
 962                case AMP_LINK:
 963                        timeo = conn->disc_timeout;
 964                        break;
 965
 966                default:
 967                        timeo = 0;
 968                        break;
 969                }
 970
 971                cancel_delayed_work(&conn->disc_work);
 972                queue_delayed_work(conn->hdev->workqueue,
 973                                   &conn->disc_work, timeo);
 974        }
 975}
 976
 977/* ----- HCI Devices ----- */
 978static inline void hci_dev_put(struct hci_dev *d)
 979{
 980        BT_DBG("%s orig refcnt %d", d->name,
 981               atomic_read(&d->dev.kobj.kref.refcount));
 982
 983        put_device(&d->dev);
 984}
 985
 986static inline struct hci_dev *hci_dev_hold(struct hci_dev *d)
 987{
 988        BT_DBG("%s orig refcnt %d", d->name,
 989               atomic_read(&d->dev.kobj.kref.refcount));
 990
 991        get_device(&d->dev);
 992        return d;
 993}
 994
 995#define hci_dev_lock(d)         mutex_lock(&d->lock)
 996#define hci_dev_unlock(d)       mutex_unlock(&d->lock)
 997
 998#define to_hci_dev(d) container_of(d, struct hci_dev, dev)
 999#define to_hci_conn(c) container_of(c, struct hci_conn, dev)
1000
1001static inline void *hci_get_drvdata(struct hci_dev *hdev)
1002{
1003        return dev_get_drvdata(&hdev->dev);
1004}
1005
1006static inline void hci_set_drvdata(struct hci_dev *hdev, void *data)
1007{
1008        dev_set_drvdata(&hdev->dev, data);
1009}
1010
1011struct hci_dev *hci_dev_get(int index);
1012struct hci_dev *hci_get_route(bdaddr_t *dst, bdaddr_t *src);
1013
1014struct hci_dev *hci_alloc_dev(void);
1015void hci_free_dev(struct hci_dev *hdev);
1016int hci_register_dev(struct hci_dev *hdev);
1017void hci_unregister_dev(struct hci_dev *hdev);
1018int hci_suspend_dev(struct hci_dev *hdev);
1019int hci_resume_dev(struct hci_dev *hdev);
1020int hci_reset_dev(struct hci_dev *hdev);
1021int hci_dev_open(__u16 dev);
1022int hci_dev_close(__u16 dev);
1023int hci_dev_do_close(struct hci_dev *hdev);
1024int hci_dev_reset(__u16 dev);
1025int hci_dev_reset_stat(__u16 dev);
1026int hci_dev_cmd(unsigned int cmd, void __user *arg);
1027int hci_get_dev_list(void __user *arg);
1028int hci_get_dev_info(void __user *arg);
1029int hci_get_conn_list(void __user *arg);
1030int hci_get_conn_info(struct hci_dev *hdev, void __user *arg);
1031int hci_get_auth_info(struct hci_dev *hdev, void __user *arg);
1032int hci_inquiry(void __user *arg);
1033
1034struct bdaddr_list *hci_bdaddr_list_lookup(struct list_head *list,
1035                                           bdaddr_t *bdaddr, u8 type);
1036int hci_bdaddr_list_add(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1037int hci_bdaddr_list_del(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1038void hci_bdaddr_list_clear(struct list_head *list);
1039
1040struct hci_conn_params *hci_conn_params_lookup(struct hci_dev *hdev,
1041                                               bdaddr_t *addr, u8 addr_type);
1042struct hci_conn_params *hci_conn_params_add(struct hci_dev *hdev,
1043                                            bdaddr_t *addr, u8 addr_type);
1044void hci_conn_params_del(struct hci_dev *hdev, bdaddr_t *addr, u8 addr_type);
1045void hci_conn_params_clear_disabled(struct hci_dev *hdev);
1046
1047struct hci_conn_params *hci_pend_le_action_lookup(struct list_head *list,
1048                                                  bdaddr_t *addr,
1049                                                  u8 addr_type);
1050
1051void hci_uuids_clear(struct hci_dev *hdev);
1052
1053void hci_link_keys_clear(struct hci_dev *hdev);
1054struct link_key *hci_find_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1055struct link_key *hci_add_link_key(struct hci_dev *hdev, struct hci_conn *conn,
1056                                  bdaddr_t *bdaddr, u8 *val, u8 type,
1057                                  u8 pin_len, bool *persistent);
1058struct smp_ltk *hci_add_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1059                            u8 addr_type, u8 type, u8 authenticated,
1060                            u8 tk[16], u8 enc_size, __le16 ediv, __le64 rand);
1061struct smp_ltk *hci_find_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1062                             u8 addr_type, u8 role);
1063int hci_remove_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 bdaddr_type);
1064void hci_smp_ltks_clear(struct hci_dev *hdev);
1065int hci_remove_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1066
1067struct smp_irk *hci_find_irk_by_rpa(struct hci_dev *hdev, bdaddr_t *rpa);
1068struct smp_irk *hci_find_irk_by_addr(struct hci_dev *hdev, bdaddr_t *bdaddr,
1069                                     u8 addr_type);
1070struct smp_irk *hci_add_irk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1071                            u8 addr_type, u8 val[16], bdaddr_t *rpa);
1072void hci_remove_irk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 addr_type);
1073void hci_smp_irks_clear(struct hci_dev *hdev);
1074
1075bool hci_bdaddr_is_paired(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type);
1076
1077void hci_remote_oob_data_clear(struct hci_dev *hdev);
1078struct oob_data *hci_find_remote_oob_data(struct hci_dev *hdev,
1079                                          bdaddr_t *bdaddr, u8 bdaddr_type);
1080int hci_add_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1081                            u8 bdaddr_type, u8 *hash192, u8 *rand192,
1082                            u8 *hash256, u8 *rand256);
1083int hci_remove_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1084                               u8 bdaddr_type);
1085
1086void hci_adv_instances_clear(struct hci_dev *hdev);
1087struct adv_info *hci_find_adv_instance(struct hci_dev *hdev, u8 instance);
1088struct adv_info *hci_get_next_instance(struct hci_dev *hdev, u8 instance);
1089int hci_add_adv_instance(struct hci_dev *hdev, u8 instance, u32 flags,
1090                         u16 adv_data_len, u8 *adv_data,
1091                         u16 scan_rsp_len, u8 *scan_rsp_data,
1092                         u16 timeout, u16 duration);
1093int hci_remove_adv_instance(struct hci_dev *hdev, u8 instance);
1094
1095void hci_event_packet(struct hci_dev *hdev, struct sk_buff *skb);
1096
1097int hci_recv_frame(struct hci_dev *hdev, struct sk_buff *skb);
1098int hci_recv_diag(struct hci_dev *hdev, struct sk_buff *skb);
1099
1100void hci_init_sysfs(struct hci_dev *hdev);
1101void hci_conn_init_sysfs(struct hci_conn *conn);
1102void hci_conn_add_sysfs(struct hci_conn *conn);
1103void hci_conn_del_sysfs(struct hci_conn *conn);
1104
1105#define SET_HCIDEV_DEV(hdev, pdev) ((hdev)->dev.parent = (pdev))
1106
1107/* ----- LMP capabilities ----- */
1108#define lmp_encrypt_capable(dev)   ((dev)->features[0][0] & LMP_ENCRYPT)
1109#define lmp_rswitch_capable(dev)   ((dev)->features[0][0] & LMP_RSWITCH)
1110#define lmp_hold_capable(dev)      ((dev)->features[0][0] & LMP_HOLD)
1111#define lmp_sniff_capable(dev)     ((dev)->features[0][0] & LMP_SNIFF)
1112#define lmp_park_capable(dev)      ((dev)->features[0][1] & LMP_PARK)
1113#define lmp_inq_rssi_capable(dev)  ((dev)->features[0][3] & LMP_RSSI_INQ)
1114#define lmp_esco_capable(dev)      ((dev)->features[0][3] & LMP_ESCO)
1115#define lmp_bredr_capable(dev)     (!((dev)->features[0][4] & LMP_NO_BREDR))
1116#define lmp_le_capable(dev)        ((dev)->features[0][4] & LMP_LE)
1117#define lmp_sniffsubr_capable(dev) ((dev)->features[0][5] & LMP_SNIFF_SUBR)
1118#define lmp_pause_enc_capable(dev) ((dev)->features[0][5] & LMP_PAUSE_ENC)
1119#define lmp_ext_inq_capable(dev)   ((dev)->features[0][6] & LMP_EXT_INQ)
1120#define lmp_le_br_capable(dev)     (!!((dev)->features[0][6] & LMP_SIMUL_LE_BR))
1121#define lmp_ssp_capable(dev)       ((dev)->features[0][6] & LMP_SIMPLE_PAIR)
1122#define lmp_no_flush_capable(dev)  ((dev)->features[0][6] & LMP_NO_FLUSH)
1123#define lmp_lsto_capable(dev)      ((dev)->features[0][7] & LMP_LSTO)
1124#define lmp_inq_tx_pwr_capable(dev) ((dev)->features[0][7] & LMP_INQ_TX_PWR)
1125#define lmp_ext_feat_capable(dev)  ((dev)->features[0][7] & LMP_EXTFEATURES)
1126#define lmp_transp_capable(dev)    ((dev)->features[0][2] & LMP_TRANSPARENT)
1127
1128/* ----- Extended LMP capabilities ----- */
1129#define lmp_csb_master_capable(dev) ((dev)->features[2][0] & LMP_CSB_MASTER)
1130#define lmp_csb_slave_capable(dev)  ((dev)->features[2][0] & LMP_CSB_SLAVE)
1131#define lmp_sync_train_capable(dev) ((dev)->features[2][0] & LMP_SYNC_TRAIN)
1132#define lmp_sync_scan_capable(dev)  ((dev)->features[2][0] & LMP_SYNC_SCAN)
1133#define lmp_sc_capable(dev)         ((dev)->features[2][1] & LMP_SC)
1134#define lmp_ping_capable(dev)       ((dev)->features[2][1] & LMP_PING)
1135
1136/* ----- Host capabilities ----- */
1137#define lmp_host_ssp_capable(dev)  ((dev)->features[1][0] & LMP_HOST_SSP)
1138#define lmp_host_sc_capable(dev)   ((dev)->features[1][0] & LMP_HOST_SC)
1139#define lmp_host_le_capable(dev)   (!!((dev)->features[1][0] & LMP_HOST_LE))
1140#define lmp_host_le_br_capable(dev) (!!((dev)->features[1][0] & LMP_HOST_LE_BREDR))
1141
1142#define hdev_is_powered(dev)   (test_bit(HCI_UP, &(dev)->flags) && \
1143                                !hci_dev_test_flag(dev, HCI_AUTO_OFF))
1144#define bredr_sc_enabled(dev)  (lmp_sc_capable(dev) && \
1145                                hci_dev_test_flag(dev, HCI_SC_ENABLED))
1146
1147/* ----- HCI protocols ----- */
1148#define HCI_PROTO_DEFER             0x01
1149
1150static inline int hci_proto_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
1151                                        __u8 type, __u8 *flags)
1152{
1153        switch (type) {
1154        case ACL_LINK:
1155                return l2cap_connect_ind(hdev, bdaddr);
1156
1157        case SCO_LINK:
1158        case ESCO_LINK:
1159                return sco_connect_ind(hdev, bdaddr, flags);
1160
1161        default:
1162                BT_ERR("unknown link type %d", type);
1163                return -EINVAL;
1164        }
1165}
1166
1167static inline int hci_proto_disconn_ind(struct hci_conn *conn)
1168{
1169        if (conn->type != ACL_LINK && conn->type != LE_LINK)
1170                return HCI_ERROR_REMOTE_USER_TERM;
1171
1172        return l2cap_disconn_ind(conn);
1173}
1174
1175/* ----- HCI callbacks ----- */
1176struct hci_cb {
1177        struct list_head list;
1178
1179        char *name;
1180
1181        void (*connect_cfm)     (struct hci_conn *conn, __u8 status);
1182        void (*disconn_cfm)     (struct hci_conn *conn, __u8 status);
1183        void (*security_cfm)    (struct hci_conn *conn, __u8 status,
1184                                                                __u8 encrypt);
1185        void (*key_change_cfm)  (struct hci_conn *conn, __u8 status);
1186        void (*role_switch_cfm) (struct hci_conn *conn, __u8 status, __u8 role);
1187};
1188
1189static inline void hci_connect_cfm(struct hci_conn *conn, __u8 status)
1190{
1191        struct hci_cb *cb;
1192
1193        mutex_lock(&hci_cb_list_lock);
1194        list_for_each_entry(cb, &hci_cb_list, list) {
1195                if (cb->connect_cfm)
1196                        cb->connect_cfm(conn, status);
1197        }
1198        mutex_unlock(&hci_cb_list_lock);
1199
1200        if (conn->connect_cfm_cb)
1201                conn->connect_cfm_cb(conn, status);
1202}
1203
1204static inline void hci_disconn_cfm(struct hci_conn *conn, __u8 reason)
1205{
1206        struct hci_cb *cb;
1207
1208        mutex_lock(&hci_cb_list_lock);
1209        list_for_each_entry(cb, &hci_cb_list, list) {
1210                if (cb->disconn_cfm)
1211                        cb->disconn_cfm(conn, reason);
1212        }
1213        mutex_unlock(&hci_cb_list_lock);
1214
1215        if (conn->disconn_cfm_cb)
1216                conn->disconn_cfm_cb(conn, reason);
1217}
1218
1219static inline void hci_auth_cfm(struct hci_conn *conn, __u8 status)
1220{
1221        struct hci_cb *cb;
1222        __u8 encrypt;
1223
1224        if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->flags))
1225                return;
1226
1227        encrypt = test_bit(HCI_CONN_ENCRYPT, &conn->flags) ? 0x01 : 0x00;
1228
1229        mutex_lock(&hci_cb_list_lock);
1230        list_for_each_entry(cb, &hci_cb_list, list) {
1231                if (cb->security_cfm)
1232                        cb->security_cfm(conn, status, encrypt);
1233        }
1234        mutex_unlock(&hci_cb_list_lock);
1235
1236        if (conn->security_cfm_cb)
1237                conn->security_cfm_cb(conn, status);
1238}
1239
1240static inline void hci_encrypt_cfm(struct hci_conn *conn, __u8 status,
1241                                                                __u8 encrypt)
1242{
1243        struct hci_cb *cb;
1244
1245        if (conn->sec_level == BT_SECURITY_SDP)
1246                conn->sec_level = BT_SECURITY_LOW;
1247
1248        if (conn->pending_sec_level > conn->sec_level)
1249                conn->sec_level = conn->pending_sec_level;
1250
1251        mutex_lock(&hci_cb_list_lock);
1252        list_for_each_entry(cb, &hci_cb_list, list) {
1253                if (cb->security_cfm)
1254                        cb->security_cfm(conn, status, encrypt);
1255        }
1256        mutex_unlock(&hci_cb_list_lock);
1257
1258        if (conn->security_cfm_cb)
1259                conn->security_cfm_cb(conn, status);
1260}
1261
1262static inline void hci_key_change_cfm(struct hci_conn *conn, __u8 status)
1263{
1264        struct hci_cb *cb;
1265
1266        mutex_lock(&hci_cb_list_lock);
1267        list_for_each_entry(cb, &hci_cb_list, list) {
1268                if (cb->key_change_cfm)
1269                        cb->key_change_cfm(conn, status);
1270        }
1271        mutex_unlock(&hci_cb_list_lock);
1272}
1273
1274static inline void hci_role_switch_cfm(struct hci_conn *conn, __u8 status,
1275                                                                __u8 role)
1276{
1277        struct hci_cb *cb;
1278
1279        mutex_lock(&hci_cb_list_lock);
1280        list_for_each_entry(cb, &hci_cb_list, list) {
1281                if (cb->role_switch_cfm)
1282                        cb->role_switch_cfm(conn, status, role);
1283        }
1284        mutex_unlock(&hci_cb_list_lock);
1285}
1286
1287static inline void *eir_get_data(u8 *eir, size_t eir_len, u8 type,
1288                                 size_t *data_len)
1289{
1290        size_t parsed = 0;
1291
1292        if (eir_len < 2)
1293                return NULL;
1294
1295        while (parsed < eir_len - 1) {
1296                u8 field_len = eir[0];
1297
1298                if (field_len == 0)
1299                        break;
1300
1301                parsed += field_len + 1;
1302
1303                if (parsed > eir_len)
1304                        break;
1305
1306                if (eir[1] != type) {
1307                        eir += field_len + 1;
1308                        continue;
1309                }
1310
1311                /* Zero length data */
1312                if (field_len == 1)
1313                        return NULL;
1314
1315                if (data_len)
1316                        *data_len = field_len - 1;
1317
1318                return &eir[2];
1319        }
1320
1321        return NULL;
1322}
1323
1324static inline bool hci_bdaddr_is_rpa(bdaddr_t *bdaddr, u8 addr_type)
1325{
1326        if (addr_type != ADDR_LE_DEV_RANDOM)
1327                return false;
1328
1329        if ((bdaddr->b[5] & 0xc0) == 0x40)
1330               return true;
1331
1332        return false;
1333}
1334
1335static inline bool hci_is_identity_address(bdaddr_t *addr, u8 addr_type)
1336{
1337        if (addr_type == ADDR_LE_DEV_PUBLIC)
1338                return true;
1339
1340        /* Check for Random Static address type */
1341        if ((addr->b[5] & 0xc0) == 0xc0)
1342                return true;
1343
1344        return false;
1345}
1346
1347static inline struct smp_irk *hci_get_irk(struct hci_dev *hdev,
1348                                          bdaddr_t *bdaddr, u8 addr_type)
1349{
1350        if (!hci_bdaddr_is_rpa(bdaddr, addr_type))
1351                return NULL;
1352
1353        return hci_find_irk_by_rpa(hdev, bdaddr);
1354}
1355
1356static inline int hci_check_conn_params(u16 min, u16 max, u16 latency,
1357                                        u16 to_multiplier)
1358{
1359        u16 max_latency;
1360
1361        if (min > max || min < 6 || max > 3200)
1362                return -EINVAL;
1363
1364        if (to_multiplier < 10 || to_multiplier > 3200)
1365                return -EINVAL;
1366
1367        if (max >= to_multiplier * 8)
1368                return -EINVAL;
1369
1370        max_latency = (to_multiplier * 4 / max) - 1;
1371        if (latency > 499 || latency > max_latency)
1372                return -EINVAL;
1373
1374        return 0;
1375}
1376
1377int hci_register_cb(struct hci_cb *hcb);
1378int hci_unregister_cb(struct hci_cb *hcb);
1379
1380struct sk_buff *__hci_cmd_sync(struct hci_dev *hdev, u16 opcode, u32 plen,
1381                               const void *param, u32 timeout);
1382struct sk_buff *__hci_cmd_sync_ev(struct hci_dev *hdev, u16 opcode, u32 plen,
1383                                  const void *param, u8 event, u32 timeout);
1384
1385int hci_send_cmd(struct hci_dev *hdev, __u16 opcode, __u32 plen,
1386                 const void *param);
1387void hci_send_acl(struct hci_chan *chan, struct sk_buff *skb, __u16 flags);
1388void hci_send_sco(struct hci_conn *conn, struct sk_buff *skb);
1389
1390void *hci_sent_cmd_data(struct hci_dev *hdev, __u16 opcode);
1391
1392struct sk_buff *hci_cmd_sync(struct hci_dev *hdev, u16 opcode, u32 plen,
1393                             const void *param, u32 timeout);
1394
1395/* ----- HCI Sockets ----- */
1396void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb);
1397void hci_send_to_channel(unsigned short channel, struct sk_buff *skb,
1398                         int flag, struct sock *skip_sk);
1399void hci_send_to_monitor(struct hci_dev *hdev, struct sk_buff *skb);
1400
1401void hci_sock_dev_event(struct hci_dev *hdev, int event);
1402
1403#define HCI_MGMT_VAR_LEN        BIT(0)
1404#define HCI_MGMT_NO_HDEV        BIT(1)
1405#define HCI_MGMT_UNTRUSTED      BIT(2)
1406#define HCI_MGMT_UNCONFIGURED   BIT(3)
1407
1408struct hci_mgmt_handler {
1409        int (*func) (struct sock *sk, struct hci_dev *hdev, void *data,
1410                     u16 data_len);
1411        size_t data_len;
1412        unsigned long flags;
1413};
1414
1415struct hci_mgmt_chan {
1416        struct list_head list;
1417        unsigned short channel;
1418        size_t handler_count;
1419        const struct hci_mgmt_handler *handlers;
1420        void (*hdev_init) (struct sock *sk, struct hci_dev *hdev);
1421};
1422
1423int hci_mgmt_chan_register(struct hci_mgmt_chan *c);
1424void hci_mgmt_chan_unregister(struct hci_mgmt_chan *c);
1425
1426/* Management interface */
1427#define DISCOV_TYPE_BREDR               (BIT(BDADDR_BREDR))
1428#define DISCOV_TYPE_LE                  (BIT(BDADDR_LE_PUBLIC) | \
1429                                         BIT(BDADDR_LE_RANDOM))
1430#define DISCOV_TYPE_INTERLEAVED         (BIT(BDADDR_BREDR) | \
1431                                         BIT(BDADDR_LE_PUBLIC) | \
1432                                         BIT(BDADDR_LE_RANDOM))
1433
1434/* These LE scan and inquiry parameters were chosen according to LE General
1435 * Discovery Procedure specification.
1436 */
1437#define DISCOV_LE_SCAN_WIN              0x12
1438#define DISCOV_LE_SCAN_INT              0x12
1439#define DISCOV_LE_TIMEOUT               10240   /* msec */
1440#define DISCOV_INTERLEAVED_TIMEOUT      5120    /* msec */
1441#define DISCOV_INTERLEAVED_INQUIRY_LEN  0x04
1442#define DISCOV_BREDR_INQUIRY_LEN        0x08
1443#define DISCOV_LE_RESTART_DELAY         msecs_to_jiffies(200)   /* msec */
1444
1445int mgmt_new_settings(struct hci_dev *hdev);
1446void mgmt_index_added(struct hci_dev *hdev);
1447void mgmt_index_removed(struct hci_dev *hdev);
1448void mgmt_set_powered_failed(struct hci_dev *hdev, int err);
1449void mgmt_power_on(struct hci_dev *hdev, int err);
1450void __mgmt_power_off(struct hci_dev *hdev);
1451void mgmt_new_link_key(struct hci_dev *hdev, struct link_key *key,
1452                       bool persistent);
1453void mgmt_device_connected(struct hci_dev *hdev, struct hci_conn *conn,
1454                           u32 flags, u8 *name, u8 name_len);
1455void mgmt_device_disconnected(struct hci_dev *hdev, bdaddr_t *bdaddr,
1456                              u8 link_type, u8 addr_type, u8 reason,
1457                              bool mgmt_connected);
1458void mgmt_disconnect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr,
1459                            u8 link_type, u8 addr_type, u8 status);
1460void mgmt_connect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1461                         u8 addr_type, u8 status);
1462void mgmt_pin_code_request(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 secure);
1463void mgmt_pin_code_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1464                                  u8 status);
1465void mgmt_pin_code_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1466                                      u8 status);
1467int mgmt_user_confirm_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
1468                              u8 link_type, u8 addr_type, u32 value,
1469                              u8 confirm_hint);
1470int mgmt_user_confirm_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1471                                     u8 link_type, u8 addr_type, u8 status);
1472int mgmt_user_confirm_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1473                                         u8 link_type, u8 addr_type, u8 status);
1474int mgmt_user_passkey_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
1475                              u8 link_type, u8 addr_type);
1476int mgmt_user_passkey_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1477                                     u8 link_type, u8 addr_type, u8 status);
1478int mgmt_user_passkey_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1479                                         u8 link_type, u8 addr_type, u8 status);
1480int mgmt_user_passkey_notify(struct hci_dev *hdev, bdaddr_t *bdaddr,
1481                             u8 link_type, u8 addr_type, u32 passkey,
1482                             u8 entered);
1483void mgmt_auth_failed(struct hci_conn *conn, u8 status);
1484void mgmt_auth_enable_complete(struct hci_dev *hdev, u8 status);
1485void mgmt_ssp_enable_complete(struct hci_dev *hdev, u8 enable, u8 status);
1486void mgmt_set_class_of_dev_complete(struct hci_dev *hdev, u8 *dev_class,
1487                                    u8 status);
1488void mgmt_set_local_name_complete(struct hci_dev *hdev, u8 *name, u8 status);
1489void mgmt_start_discovery_complete(struct hci_dev *hdev, u8 status);
1490void mgmt_stop_discovery_complete(struct hci_dev *hdev, u8 status);
1491void mgmt_device_found(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1492                       u8 addr_type, u8 *dev_class, s8 rssi, u32 flags,
1493                       u8 *eir, u16 eir_len, u8 *scan_rsp, u8 scan_rsp_len);
1494void mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1495                      u8 addr_type, s8 rssi, u8 *name, u8 name_len);
1496void mgmt_discovering(struct hci_dev *hdev, u8 discovering);
1497bool mgmt_powering_down(struct hci_dev *hdev);
1498void mgmt_new_ltk(struct hci_dev *hdev, struct smp_ltk *key, bool persistent);
1499void mgmt_new_irk(struct hci_dev *hdev, struct smp_irk *irk, bool persistent);
1500void mgmt_new_csrk(struct hci_dev *hdev, struct smp_csrk *csrk,
1501                   bool persistent);
1502void mgmt_new_conn_param(struct hci_dev *hdev, bdaddr_t *bdaddr,
1503                         u8 bdaddr_type, u8 store_hint, u16 min_interval,
1504                         u16 max_interval, u16 latency, u16 timeout);
1505void mgmt_smp_complete(struct hci_conn *conn, bool complete);
1506bool mgmt_get_connectable(struct hci_dev *hdev);
1507void mgmt_set_connectable_complete(struct hci_dev *hdev, u8 status);
1508void mgmt_set_discoverable_complete(struct hci_dev *hdev, u8 status);
1509u8 mgmt_get_adv_discov_flags(struct hci_dev *hdev);
1510void mgmt_advertising_added(struct sock *sk, struct hci_dev *hdev,
1511                            u8 instance);
1512void mgmt_advertising_removed(struct sock *sk, struct hci_dev *hdev,
1513                              u8 instance);
1514
1515u8 hci_le_conn_update(struct hci_conn *conn, u16 min, u16 max, u16 latency,
1516                      u16 to_multiplier);
1517void hci_le_start_enc(struct hci_conn *conn, __le16 ediv, __le64 rand,
1518                      __u8 ltk[16], __u8 key_size);
1519
1520void hci_copy_identity_address(struct hci_dev *hdev, bdaddr_t *bdaddr,
1521                               u8 *bdaddr_type);
1522
1523#define SCO_AIRMODE_MASK       0x0003
1524#define SCO_AIRMODE_CVSD       0x0000
1525#define SCO_AIRMODE_TRANSP     0x0003
1526
1527#endif /* __HCI_CORE_H */
1528