2 BlueZ - Bluetooth protocol stack for Linux
3 Copyright (c) 2000-2001, 2010, Code Aurora Forum. All rights reserved.
5 Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License version 2 as
9 published by the Free Software Foundation;
11 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
12 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
13 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
14 IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
15 CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
16 WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
17 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
18 OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
20 ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
21 COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
22 SOFTWARE IS DISCLAIMED.
28 #include <net/bluetooth/hci.h>
31 #define HCI_PRIO_MAX 7
33 /* HCI Core structures */
37 __u8 pscan_period_mode;
45 struct inquiry_entry {
46 struct list_head all; /* inq_cache.all */
47 struct list_head list; /* unknown or resolve */
55 struct inquiry_data data;
58 struct discovery_state {
67 struct list_head all; /* All devices found during inquiry */
68 struct list_head unknown; /* Name state not known */
69 struct list_head resolve; /* Name needs to be resolved */
73 struct hci_conn_hash {
74 struct list_head list;
82 struct list_head list;
87 struct list_head list;
94 struct list_head list;
106 struct list_head list;
109 u8 val[HCI_LINK_KEY_SIZE];
114 struct list_head list;
120 #define HCI_MAX_SHORT_NAME_LENGTH 10
127 __u8 data[HCI_MAX_AMP_ASSOC_SIZE];
130 #define HCI_MAX_PAGES 3
132 #define NUM_REASSEMBLY 4
134 struct list_head list;
143 bdaddr_t static_addr;
144 __u8 dev_name[HCI_MAX_NAME_LENGTH];
145 __u8 short_name[HCI_MAX_SHORT_NAME_LENGTH];
146 __u8 eir[HCI_MAX_EIR_LENGTH];
151 __u8 features[HCI_MAX_PAGES][8];
153 __u8 le_white_list_size;
164 __u16 page_scan_interval;
165 __u16 page_scan_window;
167 __u16 le_scan_interval;
168 __u16 le_scan_window;
181 __u16 sniff_min_interval;
182 __u16 sniff_max_interval;
187 __u32 amp_min_latency;
191 __u16 amp_assoc_size;
192 __u32 amp_max_flush_to;
193 __u32 amp_be_flush_to;
195 struct amp_assoc loc_assoc;
199 unsigned int auto_accept_delay;
201 unsigned long quirks;
204 unsigned int acl_cnt;
205 unsigned int sco_cnt;
208 unsigned int acl_mtu;
209 unsigned int sco_mtu;
211 unsigned int acl_pkts;
212 unsigned int sco_pkts;
213 unsigned int le_pkts;
220 unsigned long acl_last_tx;
221 unsigned long sco_last_tx;
222 unsigned long le_last_tx;
224 struct workqueue_struct *workqueue;
225 struct workqueue_struct *req_workqueue;
227 struct work_struct power_on;
228 struct delayed_work power_off;
230 __u16 discov_timeout;
231 struct delayed_work discov_off;
233 struct delayed_work service_cache;
235 struct timer_list cmd_timer;
237 struct work_struct rx_work;
238 struct work_struct cmd_work;
239 struct work_struct tx_work;
241 struct sk_buff_head rx_q;
242 struct sk_buff_head raw_q;
243 struct sk_buff_head cmd_q;
245 struct sk_buff *recv_evt;
246 struct sk_buff *sent_cmd;
247 struct sk_buff *reassembly[NUM_REASSEMBLY];
249 struct mutex req_lock;
250 wait_queue_head_t req_wait_q;
254 struct list_head mgmt_pending;
256 struct discovery_state discovery;
257 struct hci_conn_hash conn_hash;
258 struct list_head blacklist;
260 struct list_head uuids;
262 struct list_head link_keys;
264 struct list_head long_term_keys;
266 struct list_head remote_oob_data;
268 struct hci_dev_stats stat;
272 struct dentry *debugfs;
276 struct rfkill *rfkill;
278 unsigned long dev_flags;
280 struct delayed_work le_scan_disable;
283 __u8 adv_data[HCI_MAX_AD_LENGTH];
286 int (*open)(struct hci_dev *hdev);
287 int (*close)(struct hci_dev *hdev);
288 int (*flush)(struct hci_dev *hdev);
289 int (*setup)(struct hci_dev *hdev);
290 int (*send)(struct hci_dev *hdev, struct sk_buff *skb);
291 void (*notify)(struct hci_dev *hdev, unsigned int evt);
294 #define HCI_PHY_HANDLE(handle) (handle & 0xff)
297 struct list_head list;
310 __u8 features[HCI_MAX_PAGES][8];
318 __u8 pending_sec_level;
322 __u32 passkey_notify;
323 __u8 passkey_entered;
335 struct sk_buff_head data_q;
336 struct list_head chan_list;
338 struct delayed_work disc_work;
339 struct timer_list idle_timer;
340 struct timer_list auto_accept_timer;
344 struct hci_dev *hdev;
348 struct amp_mgr *amp_mgr;
350 struct hci_conn *link;
352 void (*connect_cfm_cb) (struct hci_conn *conn, u8 status);
353 void (*security_cfm_cb) (struct hci_conn *conn, u8 status);
354 void (*disconn_cfm_cb) (struct hci_conn *conn, u8 reason);
358 struct list_head list;
360 struct hci_conn *conn;
361 struct sk_buff_head data_q;
366 extern struct list_head hci_dev_list;
367 extern struct list_head hci_cb_list;
368 extern rwlock_t hci_dev_list_lock;
369 extern rwlock_t hci_cb_list_lock;
371 /* ----- HCI interface to upper protocols ----- */
372 extern int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr);
373 extern void l2cap_connect_cfm(struct hci_conn *hcon, u8 status);
374 extern int l2cap_disconn_ind(struct hci_conn *hcon);
375 extern void l2cap_disconn_cfm(struct hci_conn *hcon, u8 reason);
376 extern int l2cap_security_cfm(struct hci_conn *hcon, u8 status, u8 encrypt);
377 extern int l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb,
380 extern int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
381 extern void sco_connect_cfm(struct hci_conn *hcon, __u8 status);
382 extern void sco_disconn_cfm(struct hci_conn *hcon, __u8 reason);
383 extern int sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb);
385 /* ----- Inquiry cache ----- */
386 #define INQUIRY_CACHE_AGE_MAX (HZ*30) /* 30 seconds */
387 #define INQUIRY_ENTRY_AGE_MAX (HZ*60) /* 60 seconds */
389 static inline void discovery_init(struct hci_dev *hdev)
391 hdev->discovery.state = DISCOVERY_STOPPED;
392 INIT_LIST_HEAD(&hdev->discovery.all);
393 INIT_LIST_HEAD(&hdev->discovery.unknown);
394 INIT_LIST_HEAD(&hdev->discovery.resolve);
397 bool hci_discovery_active(struct hci_dev *hdev);
399 void hci_discovery_set_state(struct hci_dev *hdev, int state);
401 static inline int inquiry_cache_empty(struct hci_dev *hdev)
403 return list_empty(&hdev->discovery.all);
406 static inline long inquiry_cache_age(struct hci_dev *hdev)
408 struct discovery_state *c = &hdev->discovery;
409 return jiffies - c->timestamp;
412 static inline long inquiry_entry_age(struct inquiry_entry *e)
414 return jiffies - e->timestamp;
417 struct inquiry_entry *hci_inquiry_cache_lookup(struct hci_dev *hdev,
419 struct inquiry_entry *hci_inquiry_cache_lookup_unknown(struct hci_dev *hdev,
421 struct inquiry_entry *hci_inquiry_cache_lookup_resolve(struct hci_dev *hdev,
424 void hci_inquiry_cache_update_resolve(struct hci_dev *hdev,
425 struct inquiry_entry *ie);
426 bool hci_inquiry_cache_update(struct hci_dev *hdev, struct inquiry_data *data,
427 bool name_known, bool *ssp);
428 void hci_inquiry_cache_flush(struct hci_dev *hdev);
430 /* ----- HCI Connections ----- */
433 HCI_CONN_REAUTH_PEND,
434 HCI_CONN_ENCRYPT_PEND,
435 HCI_CONN_RSWITCH_PEND,
436 HCI_CONN_MODE_CHANGE_PEND,
437 HCI_CONN_SCO_SETUP_PEND,
438 HCI_CONN_LE_SMP_PEND,
439 HCI_CONN_MGMT_CONNECTED,
440 HCI_CONN_SSP_ENABLED,
445 static inline bool hci_conn_ssp_enabled(struct hci_conn *conn)
447 struct hci_dev *hdev = conn->hdev;
448 return test_bit(HCI_SSP_ENABLED, &hdev->dev_flags) &&
449 test_bit(HCI_CONN_SSP_ENABLED, &conn->flags);
452 static inline void hci_conn_hash_add(struct hci_dev *hdev, struct hci_conn *c)
454 struct hci_conn_hash *h = &hdev->conn_hash;
455 list_add_rcu(&c->list, &h->list);
473 static inline void hci_conn_hash_del(struct hci_dev *hdev, struct hci_conn *c)
475 struct hci_conn_hash *h = &hdev->conn_hash;
477 list_del_rcu(&c->list);
497 static inline unsigned int hci_conn_num(struct hci_dev *hdev, __u8 type)
499 struct hci_conn_hash *h = &hdev->conn_hash;
515 static inline struct hci_conn *hci_conn_hash_lookup_handle(struct hci_dev *hdev,
518 struct hci_conn_hash *h = &hdev->conn_hash;
523 list_for_each_entry_rcu(c, &h->list, list) {
524 if (c->handle == handle) {
534 static inline struct hci_conn *hci_conn_hash_lookup_ba(struct hci_dev *hdev,
535 __u8 type, bdaddr_t *ba)
537 struct hci_conn_hash *h = &hdev->conn_hash;
542 list_for_each_entry_rcu(c, &h->list, list) {
543 if (c->type == type && !bacmp(&c->dst, ba)) {
554 static inline struct hci_conn *hci_conn_hash_lookup_state(struct hci_dev *hdev,
555 __u8 type, __u16 state)
557 struct hci_conn_hash *h = &hdev->conn_hash;
562 list_for_each_entry_rcu(c, &h->list, list) {
563 if (c->type == type && c->state == state) {
574 void hci_disconnect(struct hci_conn *conn, __u8 reason);
575 bool hci_setup_sync(struct hci_conn *conn, __u16 handle);
576 void hci_sco_setup(struct hci_conn *conn, __u8 status);
578 struct hci_conn *hci_conn_add(struct hci_dev *hdev, int type, bdaddr_t *dst);
579 int hci_conn_del(struct hci_conn *conn);
580 void hci_conn_hash_flush(struct hci_dev *hdev);
581 void hci_conn_check_pending(struct hci_dev *hdev);
583 struct hci_chan *hci_chan_create(struct hci_conn *conn);
584 void hci_chan_del(struct hci_chan *chan);
585 void hci_chan_list_flush(struct hci_conn *conn);
586 struct hci_chan *hci_chan_lookup_handle(struct hci_dev *hdev, __u16 handle);
588 struct hci_conn *hci_connect(struct hci_dev *hdev, int type, bdaddr_t *dst,
589 __u8 dst_type, __u8 sec_level, __u8 auth_type);
590 struct hci_conn *hci_connect_sco(struct hci_dev *hdev, int type, bdaddr_t *dst,
592 int hci_conn_check_link_mode(struct hci_conn *conn);
593 int hci_conn_check_secure(struct hci_conn *conn, __u8 sec_level);
594 int hci_conn_security(struct hci_conn *conn, __u8 sec_level, __u8 auth_type);
595 int hci_conn_change_link_key(struct hci_conn *conn);
596 int hci_conn_switch_role(struct hci_conn *conn, __u8 role);
598 void hci_conn_enter_active_mode(struct hci_conn *conn, __u8 force_active);
601 * hci_conn_get() and hci_conn_put() are used to control the life-time of an
602 * "hci_conn" object. They do not guarantee that the hci_conn object is running,
603 * working or anything else. They just guarantee that the object is available
604 * and can be dereferenced. So you can use its locks, local variables and any
605 * other constant data.
606 * Before accessing runtime data, you _must_ lock the object and then check that
607 * it is still running. As soon as you release the locks, the connection might
608 * get dropped, though.
610 * On the other hand, hci_conn_hold() and hci_conn_drop() are used to control
611 * how long the underlying connection is held. So every channel that runs on the
612 * hci_conn object calls this to prevent the connection from disappearing. As
613 * long as you hold a device, you must also guarantee that you have a valid
614 * reference to the device via hci_conn_get() (or the initial reference from
616 * The hold()/drop() ref-count is known to drop below 0 sometimes, which doesn't
617 * break because nobody cares for that. But this means, we cannot use
618 * _get()/_drop() in it, but require the caller to have a valid ref (FIXME).
621 static inline void hci_conn_get(struct hci_conn *conn)
623 get_device(&conn->dev);
626 static inline void hci_conn_put(struct hci_conn *conn)
628 put_device(&conn->dev);
631 static inline void hci_conn_hold(struct hci_conn *conn)
633 BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
635 atomic_inc(&conn->refcnt);
636 cancel_delayed_work(&conn->disc_work);
639 static inline void hci_conn_drop(struct hci_conn *conn)
641 BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
643 if (atomic_dec_and_test(&conn->refcnt)) {
646 switch (conn->type) {
649 del_timer(&conn->idle_timer);
650 if (conn->state == BT_CONNECTED) {
651 timeo = conn->disc_timeout;
655 timeo = msecs_to_jiffies(10);
660 timeo = conn->disc_timeout;
664 timeo = msecs_to_jiffies(10);
668 cancel_delayed_work(&conn->disc_work);
669 queue_delayed_work(conn->hdev->workqueue,
670 &conn->disc_work, timeo);
674 /* ----- HCI Devices ----- */
675 static inline void hci_dev_put(struct hci_dev *d)
677 BT_DBG("%s orig refcnt %d", d->name,
678 atomic_read(&d->dev.kobj.kref.refcount));
683 static inline struct hci_dev *hci_dev_hold(struct hci_dev *d)
685 BT_DBG("%s orig refcnt %d", d->name,
686 atomic_read(&d->dev.kobj.kref.refcount));
692 #define hci_dev_lock(d) mutex_lock(&d->lock)
693 #define hci_dev_unlock(d) mutex_unlock(&d->lock)
695 #define to_hci_dev(d) container_of(d, struct hci_dev, dev)
696 #define to_hci_conn(c) container_of(c, struct hci_conn, dev)
698 static inline void *hci_get_drvdata(struct hci_dev *hdev)
700 return dev_get_drvdata(&hdev->dev);
703 static inline void hci_set_drvdata(struct hci_dev *hdev, void *data)
705 dev_set_drvdata(&hdev->dev, data);
708 struct hci_dev *hci_dev_get(int index);
709 struct hci_dev *hci_get_route(bdaddr_t *dst, bdaddr_t *src);
711 struct hci_dev *hci_alloc_dev(void);
712 void hci_free_dev(struct hci_dev *hdev);
713 int hci_register_dev(struct hci_dev *hdev);
714 void hci_unregister_dev(struct hci_dev *hdev);
715 int hci_suspend_dev(struct hci_dev *hdev);
716 int hci_resume_dev(struct hci_dev *hdev);
717 int hci_dev_open(__u16 dev);
718 int hci_dev_close(__u16 dev);
719 int hci_dev_reset(__u16 dev);
720 int hci_dev_reset_stat(__u16 dev);
721 int hci_dev_cmd(unsigned int cmd, void __user *arg);
722 int hci_get_dev_list(void __user *arg);
723 int hci_get_dev_info(void __user *arg);
724 int hci_get_conn_list(void __user *arg);
725 int hci_get_conn_info(struct hci_dev *hdev, void __user *arg);
726 int hci_get_auth_info(struct hci_dev *hdev, void __user *arg);
727 int hci_inquiry(void __user *arg);
729 struct bdaddr_list *hci_blacklist_lookup(struct hci_dev *hdev,
731 int hci_blacklist_clear(struct hci_dev *hdev);
732 int hci_blacklist_add(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type);
733 int hci_blacklist_del(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type);
735 int hci_uuids_clear(struct hci_dev *hdev);
737 int hci_link_keys_clear(struct hci_dev *hdev);
738 struct link_key *hci_find_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
739 int hci_add_link_key(struct hci_dev *hdev, struct hci_conn *conn, int new_key,
740 bdaddr_t *bdaddr, u8 *val, u8 type, u8 pin_len);
741 struct smp_ltk *hci_find_ltk(struct hci_dev *hdev, __le16 ediv, u8 rand[8]);
742 int hci_add_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 addr_type, u8 type,
743 int new_key, u8 authenticated, u8 tk[16], u8 enc_size,
744 __le16 ediv, u8 rand[8]);
745 struct smp_ltk *hci_find_ltk_by_addr(struct hci_dev *hdev, bdaddr_t *bdaddr,
747 int hci_remove_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr);
748 int hci_smp_ltks_clear(struct hci_dev *hdev);
749 int hci_remove_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
751 int hci_remote_oob_data_clear(struct hci_dev *hdev);
752 struct oob_data *hci_find_remote_oob_data(struct hci_dev *hdev,
754 int hci_add_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 *hash,
756 int hci_remove_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr);
758 void hci_event_packet(struct hci_dev *hdev, struct sk_buff *skb);
760 int hci_recv_frame(struct hci_dev *hdev, struct sk_buff *skb);
761 int hci_recv_fragment(struct hci_dev *hdev, int type, void *data, int count);
762 int hci_recv_stream_fragment(struct hci_dev *hdev, void *data, int count);
764 void hci_init_sysfs(struct hci_dev *hdev);
765 int hci_add_sysfs(struct hci_dev *hdev);
766 void hci_del_sysfs(struct hci_dev *hdev);
767 void hci_conn_init_sysfs(struct hci_conn *conn);
768 void hci_conn_add_sysfs(struct hci_conn *conn);
769 void hci_conn_del_sysfs(struct hci_conn *conn);
771 #define SET_HCIDEV_DEV(hdev, pdev) ((hdev)->dev.parent = (pdev))
773 /* ----- LMP capabilities ----- */
774 #define lmp_encrypt_capable(dev) ((dev)->features[0][0] & LMP_ENCRYPT)
775 #define lmp_rswitch_capable(dev) ((dev)->features[0][0] & LMP_RSWITCH)
776 #define lmp_hold_capable(dev) ((dev)->features[0][0] & LMP_HOLD)
777 #define lmp_sniff_capable(dev) ((dev)->features[0][0] & LMP_SNIFF)
778 #define lmp_park_capable(dev) ((dev)->features[0][1] & LMP_PARK)
779 #define lmp_inq_rssi_capable(dev) ((dev)->features[0][3] & LMP_RSSI_INQ)
780 #define lmp_esco_capable(dev) ((dev)->features[0][3] & LMP_ESCO)
781 #define lmp_bredr_capable(dev) (!((dev)->features[0][4] & LMP_NO_BREDR))
782 #define lmp_le_capable(dev) ((dev)->features[0][4] & LMP_LE)
783 #define lmp_sniffsubr_capable(dev) ((dev)->features[0][5] & LMP_SNIFF_SUBR)
784 #define lmp_pause_enc_capable(dev) ((dev)->features[0][5] & LMP_PAUSE_ENC)
785 #define lmp_ext_inq_capable(dev) ((dev)->features[0][6] & LMP_EXT_INQ)
786 #define lmp_le_br_capable(dev) (!!((dev)->features[0][6] & LMP_SIMUL_LE_BR))
787 #define lmp_ssp_capable(dev) ((dev)->features[0][6] & LMP_SIMPLE_PAIR)
788 #define lmp_no_flush_capable(dev) ((dev)->features[0][6] & LMP_NO_FLUSH)
789 #define lmp_lsto_capable(dev) ((dev)->features[0][7] & LMP_LSTO)
790 #define lmp_inq_tx_pwr_capable(dev) ((dev)->features[0][7] & LMP_INQ_TX_PWR)
791 #define lmp_ext_feat_capable(dev) ((dev)->features[0][7] & LMP_EXTFEATURES)
792 #define lmp_transp_capable(dev) ((dev)->features[0][2] & LMP_TRANSPARENT)
794 /* ----- Extended LMP capabilities ----- */
795 #define lmp_host_ssp_capable(dev) ((dev)->features[1][0] & LMP_HOST_SSP)
796 #define lmp_host_le_capable(dev) (!!((dev)->features[1][0] & LMP_HOST_LE))
797 #define lmp_host_le_br_capable(dev) (!!((dev)->features[1][0] & LMP_HOST_LE_BREDR))
799 /* ----- HCI protocols ----- */
800 #define HCI_PROTO_DEFER 0x01
802 static inline int hci_proto_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
803 __u8 type, __u8 *flags)
807 return l2cap_connect_ind(hdev, bdaddr);
811 return sco_connect_ind(hdev, bdaddr, flags);
814 BT_ERR("unknown link type %d", type);
819 static inline void hci_proto_connect_cfm(struct hci_conn *conn, __u8 status)
821 switch (conn->type) {
824 l2cap_connect_cfm(conn, status);
829 sco_connect_cfm(conn, status);
833 BT_ERR("unknown link type %d", conn->type);
837 if (conn->connect_cfm_cb)
838 conn->connect_cfm_cb(conn, status);
841 static inline int hci_proto_disconn_ind(struct hci_conn *conn)
843 if (conn->type != ACL_LINK && conn->type != LE_LINK)
844 return HCI_ERROR_REMOTE_USER_TERM;
846 return l2cap_disconn_ind(conn);
849 static inline void hci_proto_disconn_cfm(struct hci_conn *conn, __u8 reason)
851 switch (conn->type) {
854 l2cap_disconn_cfm(conn, reason);
859 sco_disconn_cfm(conn, reason);
862 /* L2CAP would be handled for BREDR chan */
867 BT_ERR("unknown link type %d", conn->type);
871 if (conn->disconn_cfm_cb)
872 conn->disconn_cfm_cb(conn, reason);
875 static inline void hci_proto_auth_cfm(struct hci_conn *conn, __u8 status)
879 if (conn->type != ACL_LINK && conn->type != LE_LINK)
882 if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->flags))
885 encrypt = (conn->link_mode & HCI_LM_ENCRYPT) ? 0x01 : 0x00;
886 l2cap_security_cfm(conn, status, encrypt);
888 if (conn->security_cfm_cb)
889 conn->security_cfm_cb(conn, status);
892 static inline void hci_proto_encrypt_cfm(struct hci_conn *conn, __u8 status,
895 if (conn->type != ACL_LINK && conn->type != LE_LINK)
898 l2cap_security_cfm(conn, status, encrypt);
900 if (conn->security_cfm_cb)
901 conn->security_cfm_cb(conn, status);
904 /* ----- HCI callbacks ----- */
906 struct list_head list;
910 void (*security_cfm) (struct hci_conn *conn, __u8 status,
912 void (*key_change_cfm) (struct hci_conn *conn, __u8 status);
913 void (*role_switch_cfm) (struct hci_conn *conn, __u8 status, __u8 role);
916 static inline void hci_auth_cfm(struct hci_conn *conn, __u8 status)
921 hci_proto_auth_cfm(conn, status);
923 if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->flags))
926 encrypt = (conn->link_mode & HCI_LM_ENCRYPT) ? 0x01 : 0x00;
928 read_lock(&hci_cb_list_lock);
929 list_for_each_entry(cb, &hci_cb_list, list) {
930 if (cb->security_cfm)
931 cb->security_cfm(conn, status, encrypt);
933 read_unlock(&hci_cb_list_lock);
936 static inline void hci_encrypt_cfm(struct hci_conn *conn, __u8 status,
941 if (conn->sec_level == BT_SECURITY_SDP)
942 conn->sec_level = BT_SECURITY_LOW;
944 if (conn->pending_sec_level > conn->sec_level)
945 conn->sec_level = conn->pending_sec_level;
947 hci_proto_encrypt_cfm(conn, status, encrypt);
949 read_lock(&hci_cb_list_lock);
950 list_for_each_entry(cb, &hci_cb_list, list) {
951 if (cb->security_cfm)
952 cb->security_cfm(conn, status, encrypt);
954 read_unlock(&hci_cb_list_lock);
957 static inline void hci_key_change_cfm(struct hci_conn *conn, __u8 status)
961 read_lock(&hci_cb_list_lock);
962 list_for_each_entry(cb, &hci_cb_list, list) {
963 if (cb->key_change_cfm)
964 cb->key_change_cfm(conn, status);
966 read_unlock(&hci_cb_list_lock);
969 static inline void hci_role_switch_cfm(struct hci_conn *conn, __u8 status,
974 read_lock(&hci_cb_list_lock);
975 list_for_each_entry(cb, &hci_cb_list, list) {
976 if (cb->role_switch_cfm)
977 cb->role_switch_cfm(conn, status, role);
979 read_unlock(&hci_cb_list_lock);
982 static inline bool eir_has_data_type(u8 *data, size_t data_len, u8 type)
989 while (parsed < data_len - 1) {
990 u8 field_len = data[0];
995 parsed += field_len + 1;
997 if (parsed > data_len)
1000 if (data[1] == type)
1003 data += field_len + 1;
1009 static inline size_t eir_get_length(u8 *eir, size_t eir_len)
1013 while (parsed < eir_len) {
1014 u8 field_len = eir[0];
1019 parsed += field_len + 1;
1020 eir += field_len + 1;
1026 static inline u16 eir_append_data(u8 *eir, u16 eir_len, u8 type, u8 *data,
1029 eir[eir_len++] = sizeof(type) + data_len;
1030 eir[eir_len++] = type;
1031 memcpy(&eir[eir_len], data, data_len);
1032 eir_len += data_len;
1037 int hci_register_cb(struct hci_cb *hcb);
1038 int hci_unregister_cb(struct hci_cb *hcb);
1040 struct hci_request {
1041 struct hci_dev *hdev;
1042 struct sk_buff_head cmd_q;
1044 /* If something goes wrong when building the HCI request, the error
1045 * value is stored in this field.
1050 void hci_req_init(struct hci_request *req, struct hci_dev *hdev);
1051 int hci_req_run(struct hci_request *req, hci_req_complete_t complete);
1052 void hci_req_add(struct hci_request *req, u16 opcode, u32 plen,
1054 void hci_req_add_ev(struct hci_request *req, u16 opcode, u32 plen,
1055 const void *param, u8 event);
1056 void hci_req_cmd_complete(struct hci_dev *hdev, u16 opcode, u8 status);
1058 struct sk_buff *__hci_cmd_sync(struct hci_dev *hdev, u16 opcode, u32 plen,
1059 const void *param, u32 timeout);
1060 struct sk_buff *__hci_cmd_sync_ev(struct hci_dev *hdev, u16 opcode, u32 plen,
1061 const void *param, u8 event, u32 timeout);
1063 int hci_send_cmd(struct hci_dev *hdev, __u16 opcode, __u32 plen,
1065 void hci_send_acl(struct hci_chan *chan, struct sk_buff *skb, __u16 flags);
1066 void hci_send_sco(struct hci_conn *conn, struct sk_buff *skb);
1068 void *hci_sent_cmd_data(struct hci_dev *hdev, __u16 opcode);
1070 /* ----- HCI Sockets ----- */
1071 void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb);
1072 void hci_send_to_control(struct sk_buff *skb, struct sock *skip_sk);
1073 void hci_send_to_monitor(struct hci_dev *hdev, struct sk_buff *skb);
1075 void hci_sock_dev_event(struct hci_dev *hdev, int event);
1077 /* Management interface */
1078 #define DISCOV_TYPE_BREDR (BIT(BDADDR_BREDR))
1079 #define DISCOV_TYPE_LE (BIT(BDADDR_LE_PUBLIC) | \
1080 BIT(BDADDR_LE_RANDOM))
1081 #define DISCOV_TYPE_INTERLEAVED (BIT(BDADDR_BREDR) | \
1082 BIT(BDADDR_LE_PUBLIC) | \
1083 BIT(BDADDR_LE_RANDOM))
1085 /* These LE scan and inquiry parameters were chosen according to LE General
1086 * Discovery Procedure specification.
1088 #define DISCOV_LE_SCAN_WIN 0x12
1089 #define DISCOV_LE_SCAN_INT 0x12
1090 #define DISCOV_LE_TIMEOUT msecs_to_jiffies(10240)
1091 #define DISCOV_INTERLEAVED_TIMEOUT msecs_to_jiffies(5120)
1092 #define DISCOV_INTERLEAVED_INQUIRY_LEN 0x04
1093 #define DISCOV_BREDR_INQUIRY_LEN 0x08
1095 int mgmt_control(struct sock *sk, struct msghdr *msg, size_t len);
1096 void mgmt_index_added(struct hci_dev *hdev);
1097 void mgmt_index_removed(struct hci_dev *hdev);
1098 void mgmt_set_powered_failed(struct hci_dev *hdev, int err);
1099 int mgmt_powered(struct hci_dev *hdev, u8 powered);
1100 int mgmt_discoverable(struct hci_dev *hdev, u8 discoverable);
1101 int mgmt_connectable(struct hci_dev *hdev, u8 connectable);
1102 int mgmt_write_scan_failed(struct hci_dev *hdev, u8 scan, u8 status);
1103 int mgmt_new_link_key(struct hci_dev *hdev, struct link_key *key,
1105 void mgmt_device_connected(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1106 u8 addr_type, u32 flags, u8 *name, u8 name_len,
1108 void mgmt_device_disconnected(struct hci_dev *hdev, bdaddr_t *bdaddr,
1109 u8 link_type, u8 addr_type, u8 reason);
1110 void mgmt_disconnect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr,
1111 u8 link_type, u8 addr_type, u8 status);
1112 void mgmt_connect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1113 u8 addr_type, u8 status);
1114 int mgmt_pin_code_request(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 secure);
1115 int mgmt_pin_code_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1117 int mgmt_pin_code_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1119 int mgmt_user_confirm_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
1120 u8 link_type, u8 addr_type, __le32 value,
1122 int mgmt_user_confirm_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1123 u8 link_type, u8 addr_type, u8 status);
1124 int mgmt_user_confirm_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1125 u8 link_type, u8 addr_type, u8 status);
1126 int mgmt_user_passkey_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
1127 u8 link_type, u8 addr_type);
1128 int mgmt_user_passkey_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1129 u8 link_type, u8 addr_type, u8 status);
1130 int mgmt_user_passkey_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1131 u8 link_type, u8 addr_type, u8 status);
1132 int mgmt_user_passkey_notify(struct hci_dev *hdev, bdaddr_t *bdaddr,
1133 u8 link_type, u8 addr_type, u32 passkey,
1135 int mgmt_auth_failed(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1136 u8 addr_type, u8 status);
1137 int mgmt_auth_enable_complete(struct hci_dev *hdev, u8 status);
1138 int mgmt_ssp_enable_complete(struct hci_dev *hdev, u8 enable, u8 status);
1139 int mgmt_set_class_of_dev_complete(struct hci_dev *hdev, u8 *dev_class,
1141 int mgmt_set_local_name_complete(struct hci_dev *hdev, u8 *name, u8 status);
1142 int mgmt_read_local_oob_data_reply_complete(struct hci_dev *hdev, u8 *hash,
1143 u8 *randomizer, u8 status);
1144 void mgmt_device_found(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1145 u8 addr_type, u8 *dev_class, s8 rssi, u8 cfm_name,
1146 u8 ssp, u8 *eir, u16 eir_len);
1147 void mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1148 u8 addr_type, s8 rssi, u8 *name, u8 name_len);
1149 void mgmt_discovering(struct hci_dev *hdev, u8 discovering);
1150 int mgmt_device_blocked(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type);
1151 int mgmt_device_unblocked(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type);
1152 int mgmt_new_ltk(struct hci_dev *hdev, struct smp_ltk *key, u8 persistent);
1153 void mgmt_reenable_advertising(struct hci_dev *hdev);
1155 /* HCI info for socket */
1156 #define hci_pi(sk) ((struct hci_pinfo *) sk)
1160 struct hci_dev *hdev;
1161 struct hci_filter filter;
1163 unsigned short channel;
1166 /* HCI security filter */
1167 #define HCI_SFLT_MAX_OGF 5
1169 struct hci_sec_filter {
1171 __u32 event_mask[2];
1172 __u32 ocf_mask[HCI_SFLT_MAX_OGF + 1][4];
1175 /* ----- HCI requests ----- */
1176 #define HCI_REQ_DONE 0
1177 #define HCI_REQ_PEND 1
1178 #define HCI_REQ_CANCELED 2
1180 #define hci_req_lock(d) mutex_lock(&d->req_lock)
1181 #define hci_req_unlock(d) mutex_unlock(&d->req_lock)
1183 void hci_update_ad(struct hci_request *req);
1185 void hci_le_conn_update(struct hci_conn *conn, u16 min, u16 max,
1186 u16 latency, u16 to_multiplier);
1187 void hci_le_start_enc(struct hci_conn *conn, __le16 ediv, __u8 rand[8],
1190 #define SCO_AIRMODE_MASK 0x0003
1191 #define SCO_AIRMODE_CVSD 0x0000
1192 #define SCO_AIRMODE_TRANSP 0x0003
1194 #endif /* __HCI_CORE_H */