xref: /openbmc/linux/net/bluetooth/hci_sock.c (revision cedc5469778846ee18c653aaa6d70681961eed93)
11da177e4SLinus Torvalds /*
21da177e4SLinus Torvalds    BlueZ - Bluetooth protocol stack for Linux
31da177e4SLinus Torvalds    Copyright (C) 2000-2001 Qualcomm Incorporated
41da177e4SLinus Torvalds 
51da177e4SLinus Torvalds    Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
61da177e4SLinus Torvalds 
71da177e4SLinus Torvalds    This program is free software; you can redistribute it and/or modify
81da177e4SLinus Torvalds    it under the terms of the GNU General Public License version 2 as
91da177e4SLinus Torvalds    published by the Free Software Foundation;
101da177e4SLinus Torvalds 
111da177e4SLinus Torvalds    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
121da177e4SLinus Torvalds    OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
131da177e4SLinus Torvalds    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
141da177e4SLinus Torvalds    IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
151da177e4SLinus Torvalds    CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
161da177e4SLinus Torvalds    WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
171da177e4SLinus Torvalds    ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
181da177e4SLinus Torvalds    OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
191da177e4SLinus Torvalds 
201da177e4SLinus Torvalds    ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
211da177e4SLinus Torvalds    COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
221da177e4SLinus Torvalds    SOFTWARE IS DISCLAIMED.
231da177e4SLinus Torvalds */
241da177e4SLinus Torvalds 
251da177e4SLinus Torvalds /* Bluetooth HCI sockets. */
261da177e4SLinus Torvalds 
271da177e4SLinus Torvalds #include <linux/module.h>
281da177e4SLinus Torvalds 
291da177e4SLinus Torvalds #include <linux/types.h>
304fc268d2SRandy Dunlap #include <linux/capability.h>
311da177e4SLinus Torvalds #include <linux/errno.h>
321da177e4SLinus Torvalds #include <linux/kernel.h>
331da177e4SLinus Torvalds #include <linux/slab.h>
341da177e4SLinus Torvalds #include <linux/poll.h>
351da177e4SLinus Torvalds #include <linux/fcntl.h>
361da177e4SLinus Torvalds #include <linux/init.h>
371da177e4SLinus Torvalds #include <linux/skbuff.h>
381da177e4SLinus Torvalds #include <linux/workqueue.h>
391da177e4SLinus Torvalds #include <linux/interrupt.h>
40767c5eb5SMarcel Holtmann #include <linux/compat.h>
411da177e4SLinus Torvalds #include <linux/socket.h>
421da177e4SLinus Torvalds #include <linux/ioctl.h>
431da177e4SLinus Torvalds #include <net/sock.h>
441da177e4SLinus Torvalds 
451da177e4SLinus Torvalds #include <asm/system.h>
4670f23020SAndrei Emeltchenko #include <linux/uaccess.h>
471da177e4SLinus Torvalds #include <asm/unaligned.h>
481da177e4SLinus Torvalds 
491da177e4SLinus Torvalds #include <net/bluetooth/bluetooth.h>
501da177e4SLinus Torvalds #include <net/bluetooth/hci_core.h>
511da177e4SLinus Torvalds 
52eb939922SRusty Russell static bool enable_mgmt;
530381101fSJohan Hedberg 
541da177e4SLinus Torvalds /* ----- HCI socket interface ----- */
551da177e4SLinus Torvalds 
561da177e4SLinus Torvalds static inline int hci_test_bit(int nr, void *addr)
571da177e4SLinus Torvalds {
581da177e4SLinus Torvalds 	return *((__u32 *) addr + (nr >> 5)) & ((__u32) 1 << (nr & 31));
591da177e4SLinus Torvalds }
601da177e4SLinus Torvalds 
611da177e4SLinus Torvalds /* Security filter */
621da177e4SLinus Torvalds static struct hci_sec_filter hci_sec_filter = {
631da177e4SLinus Torvalds 	/* Packet types */
641da177e4SLinus Torvalds 	0x10,
651da177e4SLinus Torvalds 	/* Events */
66dd7f5527SMarcel Holtmann 	{ 0x1000d9fe, 0x0000b00c },
671da177e4SLinus Torvalds 	/* Commands */
681da177e4SLinus Torvalds 	{
691da177e4SLinus Torvalds 		{ 0x0 },
701da177e4SLinus Torvalds 		/* OGF_LINK_CTL */
717c631a67SMarcel Holtmann 		{ 0xbe000006, 0x00000001, 0x00000000, 0x00 },
721da177e4SLinus Torvalds 		/* OGF_LINK_POLICY */
737c631a67SMarcel Holtmann 		{ 0x00005200, 0x00000000, 0x00000000, 0x00 },
741da177e4SLinus Torvalds 		/* OGF_HOST_CTL */
757c631a67SMarcel Holtmann 		{ 0xaab00200, 0x2b402aaa, 0x05220154, 0x00 },
761da177e4SLinus Torvalds 		/* OGF_INFO_PARAM */
777c631a67SMarcel Holtmann 		{ 0x000002be, 0x00000000, 0x00000000, 0x00 },
781da177e4SLinus Torvalds 		/* OGF_STATUS_PARAM */
797c631a67SMarcel Holtmann 		{ 0x000000ea, 0x00000000, 0x00000000, 0x00 }
801da177e4SLinus Torvalds 	}
811da177e4SLinus Torvalds };
821da177e4SLinus Torvalds 
831da177e4SLinus Torvalds static struct bt_sock_list hci_sk_list = {
84d5fb2962SRobert P. J. Day 	.lock = __RW_LOCK_UNLOCKED(hci_sk_list.lock)
851da177e4SLinus Torvalds };
861da177e4SLinus Torvalds 
871da177e4SLinus Torvalds /* Send frame to RAW socket */
88470fe1b5SMarcel Holtmann void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb)
891da177e4SLinus Torvalds {
901da177e4SLinus Torvalds 	struct sock *sk;
911da177e4SLinus Torvalds 	struct hlist_node *node;
921da177e4SLinus Torvalds 
931da177e4SLinus Torvalds 	BT_DBG("hdev %p len %d", hdev, skb->len);
941da177e4SLinus Torvalds 
951da177e4SLinus Torvalds 	read_lock(&hci_sk_list.lock);
96470fe1b5SMarcel Holtmann 
971da177e4SLinus Torvalds 	sk_for_each(sk, node, &hci_sk_list.head) {
981da177e4SLinus Torvalds 		struct hci_filter *flt;
991da177e4SLinus Torvalds 		struct sk_buff *nskb;
1001da177e4SLinus Torvalds 
1011da177e4SLinus Torvalds 		if (sk->sk_state != BT_BOUND || hci_pi(sk)->hdev != hdev)
1021da177e4SLinus Torvalds 			continue;
1031da177e4SLinus Torvalds 
1041da177e4SLinus Torvalds 		/* Don't send frame to the socket it came from */
1051da177e4SLinus Torvalds 		if (skb->sk == sk)
1061da177e4SLinus Torvalds 			continue;
1071da177e4SLinus Torvalds 
108470fe1b5SMarcel Holtmann 		if (hci_pi(sk)->channel != HCI_CHANNEL_RAW)
109a40c406cSJohan Hedberg 			continue;
110a40c406cSJohan Hedberg 
1111da177e4SLinus Torvalds 		/* Apply filter */
1121da177e4SLinus Torvalds 		flt = &hci_pi(sk)->filter;
1131da177e4SLinus Torvalds 
1140d48d939SMarcel Holtmann 		if (!test_bit((bt_cb(skb)->pkt_type == HCI_VENDOR_PKT) ?
1150d48d939SMarcel Holtmann 				0 : (bt_cb(skb)->pkt_type & HCI_FLT_TYPE_BITS), &flt->type_mask))
1161da177e4SLinus Torvalds 			continue;
1171da177e4SLinus Torvalds 
1180d48d939SMarcel Holtmann 		if (bt_cb(skb)->pkt_type == HCI_EVENT_PKT) {
1191da177e4SLinus Torvalds 			register int evt = (*(__u8 *)skb->data & HCI_FLT_EVENT_BITS);
1201da177e4SLinus Torvalds 
1211da177e4SLinus Torvalds 			if (!hci_test_bit(evt, &flt->event_mask))
1221da177e4SLinus Torvalds 				continue;
1231da177e4SLinus Torvalds 
1244498c80dSDavid S. Miller 			if (flt->opcode &&
1254498c80dSDavid S. Miller 			    ((evt == HCI_EV_CMD_COMPLETE &&
1264498c80dSDavid S. Miller 			      flt->opcode !=
127905f3ed6SAl Viro 			      get_unaligned((__le16 *)(skb->data + 3))) ||
1281da177e4SLinus Torvalds 			     (evt == HCI_EV_CMD_STATUS &&
1294498c80dSDavid S. Miller 			      flt->opcode !=
130905f3ed6SAl Viro 			      get_unaligned((__le16 *)(skb->data + 4)))))
1311da177e4SLinus Torvalds 				continue;
1321da177e4SLinus Torvalds 		}
1331da177e4SLinus Torvalds 
13470f23020SAndrei Emeltchenko 		nskb = skb_clone(skb, GFP_ATOMIC);
13570f23020SAndrei Emeltchenko 		if (!nskb)
1361da177e4SLinus Torvalds 			continue;
1371da177e4SLinus Torvalds 
1381da177e4SLinus Torvalds 		/* Put type byte before the data */
1390d48d939SMarcel Holtmann 		memcpy(skb_push(nskb, 1), &bt_cb(nskb)->pkt_type, 1);
1401da177e4SLinus Torvalds 
1411da177e4SLinus Torvalds 		if (sock_queue_rcv_skb(sk, nskb))
1421da177e4SLinus Torvalds 			kfree_skb(nskb);
1431da177e4SLinus Torvalds 	}
144470fe1b5SMarcel Holtmann 
145470fe1b5SMarcel Holtmann 	read_unlock(&hci_sk_list.lock);
146470fe1b5SMarcel Holtmann }
147470fe1b5SMarcel Holtmann 
148470fe1b5SMarcel Holtmann /* Send frame to control socket */
149470fe1b5SMarcel Holtmann void hci_send_to_control(struct sk_buff *skb, struct sock *skip_sk)
150470fe1b5SMarcel Holtmann {
151470fe1b5SMarcel Holtmann 	struct sock *sk;
152470fe1b5SMarcel Holtmann 	struct hlist_node *node;
153470fe1b5SMarcel Holtmann 
154470fe1b5SMarcel Holtmann 	BT_DBG("len %d", skb->len);
155470fe1b5SMarcel Holtmann 
156470fe1b5SMarcel Holtmann 	read_lock(&hci_sk_list.lock);
157470fe1b5SMarcel Holtmann 
158470fe1b5SMarcel Holtmann 	sk_for_each(sk, node, &hci_sk_list.head) {
159470fe1b5SMarcel Holtmann 		struct sk_buff *nskb;
160470fe1b5SMarcel Holtmann 
161470fe1b5SMarcel Holtmann 		/* Skip the original socket */
162470fe1b5SMarcel Holtmann 		if (sk == skip_sk)
163470fe1b5SMarcel Holtmann 			continue;
164470fe1b5SMarcel Holtmann 
165470fe1b5SMarcel Holtmann 		if (sk->sk_state != BT_BOUND)
166470fe1b5SMarcel Holtmann 			continue;
167470fe1b5SMarcel Holtmann 
168470fe1b5SMarcel Holtmann 		if (hci_pi(sk)->channel != HCI_CHANNEL_CONTROL)
169470fe1b5SMarcel Holtmann 			continue;
170470fe1b5SMarcel Holtmann 
171470fe1b5SMarcel Holtmann 		nskb = skb_clone(skb, GFP_ATOMIC);
172470fe1b5SMarcel Holtmann 		if (!nskb)
173470fe1b5SMarcel Holtmann 			continue;
174470fe1b5SMarcel Holtmann 
175470fe1b5SMarcel Holtmann 		if (sock_queue_rcv_skb(sk, nskb))
176470fe1b5SMarcel Holtmann 			kfree_skb(nskb);
177470fe1b5SMarcel Holtmann 	}
178470fe1b5SMarcel Holtmann 
1791da177e4SLinus Torvalds 	read_unlock(&hci_sk_list.lock);
1801da177e4SLinus Torvalds }
1811da177e4SLinus Torvalds 
1821da177e4SLinus Torvalds static int hci_sock_release(struct socket *sock)
1831da177e4SLinus Torvalds {
1841da177e4SLinus Torvalds 	struct sock *sk = sock->sk;
1857b005bd3SMarcel Holtmann 	struct hci_dev *hdev;
1861da177e4SLinus Torvalds 
1871da177e4SLinus Torvalds 	BT_DBG("sock %p sk %p", sock, sk);
1881da177e4SLinus Torvalds 
1891da177e4SLinus Torvalds 	if (!sk)
1901da177e4SLinus Torvalds 		return 0;
1911da177e4SLinus Torvalds 
1927b005bd3SMarcel Holtmann 	hdev = hci_pi(sk)->hdev;
1937b005bd3SMarcel Holtmann 
1941da177e4SLinus Torvalds 	bt_sock_unlink(&hci_sk_list, sk);
1951da177e4SLinus Torvalds 
1961da177e4SLinus Torvalds 	if (hdev) {
1971da177e4SLinus Torvalds 		atomic_dec(&hdev->promisc);
1981da177e4SLinus Torvalds 		hci_dev_put(hdev);
1991da177e4SLinus Torvalds 	}
2001da177e4SLinus Torvalds 
2011da177e4SLinus Torvalds 	sock_orphan(sk);
2021da177e4SLinus Torvalds 
2031da177e4SLinus Torvalds 	skb_queue_purge(&sk->sk_receive_queue);
2041da177e4SLinus Torvalds 	skb_queue_purge(&sk->sk_write_queue);
2051da177e4SLinus Torvalds 
2061da177e4SLinus Torvalds 	sock_put(sk);
2071da177e4SLinus Torvalds 	return 0;
2081da177e4SLinus Torvalds }
2091da177e4SLinus Torvalds 
210b2a66aadSAntti Julku static int hci_sock_blacklist_add(struct hci_dev *hdev, void __user *arg)
211f0358568SJohan Hedberg {
212f0358568SJohan Hedberg 	bdaddr_t bdaddr;
2135e762444SAntti Julku 	int err;
214f0358568SJohan Hedberg 
215f0358568SJohan Hedberg 	if (copy_from_user(&bdaddr, arg, sizeof(bdaddr)))
216f0358568SJohan Hedberg 		return -EFAULT;
217f0358568SJohan Hedberg 
21809fd0de5SGustavo F. Padovan 	hci_dev_lock(hdev);
2195e762444SAntti Julku 
22088c1fe4bSJohan Hedberg 	err = hci_blacklist_add(hdev, &bdaddr, 0);
2215e762444SAntti Julku 
22209fd0de5SGustavo F. Padovan 	hci_dev_unlock(hdev);
2235e762444SAntti Julku 
2245e762444SAntti Julku 	return err;
225f0358568SJohan Hedberg }
226f0358568SJohan Hedberg 
227b2a66aadSAntti Julku static int hci_sock_blacklist_del(struct hci_dev *hdev, void __user *arg)
228f0358568SJohan Hedberg {
229f0358568SJohan Hedberg 	bdaddr_t bdaddr;
2305e762444SAntti Julku 	int err;
231f0358568SJohan Hedberg 
232f0358568SJohan Hedberg 	if (copy_from_user(&bdaddr, arg, sizeof(bdaddr)))
233f0358568SJohan Hedberg 		return -EFAULT;
234f0358568SJohan Hedberg 
23509fd0de5SGustavo F. Padovan 	hci_dev_lock(hdev);
2365e762444SAntti Julku 
23788c1fe4bSJohan Hedberg 	err = hci_blacklist_del(hdev, &bdaddr, 0);
2385e762444SAntti Julku 
23909fd0de5SGustavo F. Padovan 	hci_dev_unlock(hdev);
2405e762444SAntti Julku 
2415e762444SAntti Julku 	return err;
242f0358568SJohan Hedberg }
243f0358568SJohan Hedberg 
2441da177e4SLinus Torvalds /* Ioctls that require bound socket */
2451da177e4SLinus Torvalds static inline int hci_sock_bound_ioctl(struct sock *sk, unsigned int cmd, unsigned long arg)
2461da177e4SLinus Torvalds {
2471da177e4SLinus Torvalds 	struct hci_dev *hdev = hci_pi(sk)->hdev;
2481da177e4SLinus Torvalds 
2491da177e4SLinus Torvalds 	if (!hdev)
2501da177e4SLinus Torvalds 		return -EBADFD;
2511da177e4SLinus Torvalds 
2521da177e4SLinus Torvalds 	switch (cmd) {
2531da177e4SLinus Torvalds 	case HCISETRAW:
2541da177e4SLinus Torvalds 		if (!capable(CAP_NET_ADMIN))
2551da177e4SLinus Torvalds 			return -EACCES;
2561da177e4SLinus Torvalds 
2571da177e4SLinus Torvalds 		if (test_bit(HCI_QUIRK_RAW_DEVICE, &hdev->quirks))
2581da177e4SLinus Torvalds 			return -EPERM;
2591da177e4SLinus Torvalds 
2601da177e4SLinus Torvalds 		if (arg)
2611da177e4SLinus Torvalds 			set_bit(HCI_RAW, &hdev->flags);
2621da177e4SLinus Torvalds 		else
2631da177e4SLinus Torvalds 			clear_bit(HCI_RAW, &hdev->flags);
2641da177e4SLinus Torvalds 
2651da177e4SLinus Torvalds 		return 0;
2661da177e4SLinus Torvalds 
2671da177e4SLinus Torvalds 	case HCIGETCONNINFO:
2681da177e4SLinus Torvalds 		return hci_get_conn_info(hdev, (void __user *) arg);
2691da177e4SLinus Torvalds 
27040be492fSMarcel Holtmann 	case HCIGETAUTHINFO:
27140be492fSMarcel Holtmann 		return hci_get_auth_info(hdev, (void __user *) arg);
27240be492fSMarcel Holtmann 
273f0358568SJohan Hedberg 	case HCIBLOCKADDR:
274f0358568SJohan Hedberg 		if (!capable(CAP_NET_ADMIN))
275f0358568SJohan Hedberg 			return -EACCES;
276b2a66aadSAntti Julku 		return hci_sock_blacklist_add(hdev, (void __user *) arg);
277f0358568SJohan Hedberg 
278f0358568SJohan Hedberg 	case HCIUNBLOCKADDR:
279f0358568SJohan Hedberg 		if (!capable(CAP_NET_ADMIN))
280f0358568SJohan Hedberg 			return -EACCES;
281b2a66aadSAntti Julku 		return hci_sock_blacklist_del(hdev, (void __user *) arg);
282f0358568SJohan Hedberg 
2831da177e4SLinus Torvalds 	default:
2841da177e4SLinus Torvalds 		if (hdev->ioctl)
2851da177e4SLinus Torvalds 			return hdev->ioctl(hdev, cmd, arg);
2861da177e4SLinus Torvalds 		return -EINVAL;
2871da177e4SLinus Torvalds 	}
2881da177e4SLinus Torvalds }
2891da177e4SLinus Torvalds 
2901da177e4SLinus Torvalds static int hci_sock_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
2911da177e4SLinus Torvalds {
2921da177e4SLinus Torvalds 	struct sock *sk = sock->sk;
2931da177e4SLinus Torvalds 	void __user *argp = (void __user *) arg;
2941da177e4SLinus Torvalds 	int err;
2951da177e4SLinus Torvalds 
2961da177e4SLinus Torvalds 	BT_DBG("cmd %x arg %lx", cmd, arg);
2971da177e4SLinus Torvalds 
2981da177e4SLinus Torvalds 	switch (cmd) {
2991da177e4SLinus Torvalds 	case HCIGETDEVLIST:
3001da177e4SLinus Torvalds 		return hci_get_dev_list(argp);
3011da177e4SLinus Torvalds 
3021da177e4SLinus Torvalds 	case HCIGETDEVINFO:
3031da177e4SLinus Torvalds 		return hci_get_dev_info(argp);
3041da177e4SLinus Torvalds 
3051da177e4SLinus Torvalds 	case HCIGETCONNLIST:
3061da177e4SLinus Torvalds 		return hci_get_conn_list(argp);
3071da177e4SLinus Torvalds 
3081da177e4SLinus Torvalds 	case HCIDEVUP:
3091da177e4SLinus Torvalds 		if (!capable(CAP_NET_ADMIN))
3101da177e4SLinus Torvalds 			return -EACCES;
3111da177e4SLinus Torvalds 		return hci_dev_open(arg);
3121da177e4SLinus Torvalds 
3131da177e4SLinus Torvalds 	case HCIDEVDOWN:
3141da177e4SLinus Torvalds 		if (!capable(CAP_NET_ADMIN))
3151da177e4SLinus Torvalds 			return -EACCES;
3161da177e4SLinus Torvalds 		return hci_dev_close(arg);
3171da177e4SLinus Torvalds 
3181da177e4SLinus Torvalds 	case HCIDEVRESET:
3191da177e4SLinus Torvalds 		if (!capable(CAP_NET_ADMIN))
3201da177e4SLinus Torvalds 			return -EACCES;
3211da177e4SLinus Torvalds 		return hci_dev_reset(arg);
3221da177e4SLinus Torvalds 
3231da177e4SLinus Torvalds 	case HCIDEVRESTAT:
3241da177e4SLinus Torvalds 		if (!capable(CAP_NET_ADMIN))
3251da177e4SLinus Torvalds 			return -EACCES;
3261da177e4SLinus Torvalds 		return hci_dev_reset_stat(arg);
3271da177e4SLinus Torvalds 
3281da177e4SLinus Torvalds 	case HCISETSCAN:
3291da177e4SLinus Torvalds 	case HCISETAUTH:
3301da177e4SLinus Torvalds 	case HCISETENCRYPT:
3311da177e4SLinus Torvalds 	case HCISETPTYPE:
3321da177e4SLinus Torvalds 	case HCISETLINKPOL:
3331da177e4SLinus Torvalds 	case HCISETLINKMODE:
3341da177e4SLinus Torvalds 	case HCISETACLMTU:
3351da177e4SLinus Torvalds 	case HCISETSCOMTU:
3361da177e4SLinus Torvalds 		if (!capable(CAP_NET_ADMIN))
3371da177e4SLinus Torvalds 			return -EACCES;
3381da177e4SLinus Torvalds 		return hci_dev_cmd(cmd, argp);
3391da177e4SLinus Torvalds 
3401da177e4SLinus Torvalds 	case HCIINQUIRY:
3411da177e4SLinus Torvalds 		return hci_inquiry(argp);
3421da177e4SLinus Torvalds 
3431da177e4SLinus Torvalds 	default:
3441da177e4SLinus Torvalds 		lock_sock(sk);
3451da177e4SLinus Torvalds 		err = hci_sock_bound_ioctl(sk, cmd, arg);
3461da177e4SLinus Torvalds 		release_sock(sk);
3471da177e4SLinus Torvalds 		return err;
3481da177e4SLinus Torvalds 	}
3491da177e4SLinus Torvalds }
3501da177e4SLinus Torvalds 
3511da177e4SLinus Torvalds static int hci_sock_bind(struct socket *sock, struct sockaddr *addr, int addr_len)
3521da177e4SLinus Torvalds {
3530381101fSJohan Hedberg 	struct sockaddr_hci haddr;
3541da177e4SLinus Torvalds 	struct sock *sk = sock->sk;
3551da177e4SLinus Torvalds 	struct hci_dev *hdev = NULL;
3560381101fSJohan Hedberg 	int len, err = 0;
3571da177e4SLinus Torvalds 
3581da177e4SLinus Torvalds 	BT_DBG("sock %p sk %p", sock, sk);
3591da177e4SLinus Torvalds 
3600381101fSJohan Hedberg 	if (!addr)
3610381101fSJohan Hedberg 		return -EINVAL;
3620381101fSJohan Hedberg 
3630381101fSJohan Hedberg 	memset(&haddr, 0, sizeof(haddr));
3640381101fSJohan Hedberg 	len = min_t(unsigned int, sizeof(haddr), addr_len);
3650381101fSJohan Hedberg 	memcpy(&haddr, addr, len);
3660381101fSJohan Hedberg 
3670381101fSJohan Hedberg 	if (haddr.hci_family != AF_BLUETOOTH)
3680381101fSJohan Hedberg 		return -EINVAL;
3690381101fSJohan Hedberg 
37017f9cc31SGustavo F. Padovan 	if (haddr.hci_channel > HCI_CHANNEL_CONTROL)
37117f9cc31SGustavo F. Padovan 		return -EINVAL;
37217f9cc31SGustavo F. Padovan 
37314c0b608SJohan Hedberg 	if (haddr.hci_channel == HCI_CHANNEL_CONTROL) {
37414c0b608SJohan Hedberg 		if (!enable_mgmt)
3751da177e4SLinus Torvalds 			return -EINVAL;
37614c0b608SJohan Hedberg 		set_bit(HCI_PI_MGMT_INIT, &hci_pi(sk)->flags);
37714c0b608SJohan Hedberg 	}
3781da177e4SLinus Torvalds 
3791da177e4SLinus Torvalds 	lock_sock(sk);
3801da177e4SLinus Torvalds 
3810381101fSJohan Hedberg 	if (sk->sk_state == BT_BOUND || hci_pi(sk)->hdev) {
3821da177e4SLinus Torvalds 		err = -EALREADY;
3831da177e4SLinus Torvalds 		goto done;
3841da177e4SLinus Torvalds 	}
3851da177e4SLinus Torvalds 
3860381101fSJohan Hedberg 	if (haddr.hci_dev != HCI_DEV_NONE) {
3870381101fSJohan Hedberg 		hdev = hci_dev_get(haddr.hci_dev);
38870f23020SAndrei Emeltchenko 		if (!hdev) {
3891da177e4SLinus Torvalds 			err = -ENODEV;
3901da177e4SLinus Torvalds 			goto done;
3911da177e4SLinus Torvalds 		}
3921da177e4SLinus Torvalds 
3931da177e4SLinus Torvalds 		atomic_inc(&hdev->promisc);
3941da177e4SLinus Torvalds 	}
3951da177e4SLinus Torvalds 
3960381101fSJohan Hedberg 	hci_pi(sk)->channel = haddr.hci_channel;
3971da177e4SLinus Torvalds 	hci_pi(sk)->hdev = hdev;
3981da177e4SLinus Torvalds 	sk->sk_state = BT_BOUND;
3991da177e4SLinus Torvalds 
4001da177e4SLinus Torvalds done:
4011da177e4SLinus Torvalds 	release_sock(sk);
4021da177e4SLinus Torvalds 	return err;
4031da177e4SLinus Torvalds }
4041da177e4SLinus Torvalds 
4051da177e4SLinus Torvalds static int hci_sock_getname(struct socket *sock, struct sockaddr *addr, int *addr_len, int peer)
4061da177e4SLinus Torvalds {
4071da177e4SLinus Torvalds 	struct sockaddr_hci *haddr = (struct sockaddr_hci *) addr;
4081da177e4SLinus Torvalds 	struct sock *sk = sock->sk;
4097b005bd3SMarcel Holtmann 	struct hci_dev *hdev = hci_pi(sk)->hdev;
4101da177e4SLinus Torvalds 
4111da177e4SLinus Torvalds 	BT_DBG("sock %p sk %p", sock, sk);
4121da177e4SLinus Torvalds 
4137b005bd3SMarcel Holtmann 	if (!hdev)
4147b005bd3SMarcel Holtmann 		return -EBADFD;
4157b005bd3SMarcel Holtmann 
4161da177e4SLinus Torvalds 	lock_sock(sk);
4171da177e4SLinus Torvalds 
4181da177e4SLinus Torvalds 	*addr_len = sizeof(*haddr);
4191da177e4SLinus Torvalds 	haddr->hci_family = AF_BLUETOOTH;
4207b005bd3SMarcel Holtmann 	haddr->hci_dev    = hdev->id;
4211da177e4SLinus Torvalds 
4221da177e4SLinus Torvalds 	release_sock(sk);
4231da177e4SLinus Torvalds 	return 0;
4241da177e4SLinus Torvalds }
4251da177e4SLinus Torvalds 
4261da177e4SLinus Torvalds static inline void hci_sock_cmsg(struct sock *sk, struct msghdr *msg, struct sk_buff *skb)
4271da177e4SLinus Torvalds {
4281da177e4SLinus Torvalds 	__u32 mask = hci_pi(sk)->cmsg_mask;
4291da177e4SLinus Torvalds 
4300d48d939SMarcel Holtmann 	if (mask & HCI_CMSG_DIR) {
4310d48d939SMarcel Holtmann 		int incoming = bt_cb(skb)->incoming;
4320d48d939SMarcel Holtmann 		put_cmsg(msg, SOL_HCI, HCI_CMSG_DIR, sizeof(incoming), &incoming);
4330d48d939SMarcel Holtmann 	}
4341da177e4SLinus Torvalds 
435a61bbcf2SPatrick McHardy 	if (mask & HCI_CMSG_TSTAMP) {
436f6e623a6SJohann Felix Soden #ifdef CONFIG_COMPAT
437f6e623a6SJohann Felix Soden 		struct compat_timeval ctv;
438f6e623a6SJohann Felix Soden #endif
439a61bbcf2SPatrick McHardy 		struct timeval tv;
440767c5eb5SMarcel Holtmann 		void *data;
441767c5eb5SMarcel Holtmann 		int len;
442a61bbcf2SPatrick McHardy 
443a61bbcf2SPatrick McHardy 		skb_get_timestamp(skb, &tv);
444767c5eb5SMarcel Holtmann 
4451da97f83SDavid S. Miller 		data = &tv;
4461da97f83SDavid S. Miller 		len = sizeof(tv);
4471da97f83SDavid S. Miller #ifdef CONFIG_COMPAT
448767c5eb5SMarcel Holtmann 		if (msg->msg_flags & MSG_CMSG_COMPAT) {
449767c5eb5SMarcel Holtmann 			ctv.tv_sec = tv.tv_sec;
450767c5eb5SMarcel Holtmann 			ctv.tv_usec = tv.tv_usec;
451767c5eb5SMarcel Holtmann 			data = &ctv;
452767c5eb5SMarcel Holtmann 			len = sizeof(ctv);
453767c5eb5SMarcel Holtmann 		}
4541da97f83SDavid S. Miller #endif
455767c5eb5SMarcel Holtmann 
456767c5eb5SMarcel Holtmann 		put_cmsg(msg, SOL_HCI, HCI_CMSG_TSTAMP, len, data);
457a61bbcf2SPatrick McHardy 	}
4581da177e4SLinus Torvalds }
4591da177e4SLinus Torvalds 
4601da177e4SLinus Torvalds static int hci_sock_recvmsg(struct kiocb *iocb, struct socket *sock,
4611da177e4SLinus Torvalds 				struct msghdr *msg, size_t len, int flags)
4621da177e4SLinus Torvalds {
4631da177e4SLinus Torvalds 	int noblock = flags & MSG_DONTWAIT;
4641da177e4SLinus Torvalds 	struct sock *sk = sock->sk;
4651da177e4SLinus Torvalds 	struct sk_buff *skb;
4661da177e4SLinus Torvalds 	int copied, err;
4671da177e4SLinus Torvalds 
4681da177e4SLinus Torvalds 	BT_DBG("sock %p, sk %p", sock, sk);
4691da177e4SLinus Torvalds 
4701da177e4SLinus Torvalds 	if (flags & (MSG_OOB))
4711da177e4SLinus Torvalds 		return -EOPNOTSUPP;
4721da177e4SLinus Torvalds 
4731da177e4SLinus Torvalds 	if (sk->sk_state == BT_CLOSED)
4741da177e4SLinus Torvalds 		return 0;
4751da177e4SLinus Torvalds 
47670f23020SAndrei Emeltchenko 	skb = skb_recv_datagram(sk, flags, noblock, &err);
47770f23020SAndrei Emeltchenko 	if (!skb)
4781da177e4SLinus Torvalds 		return err;
4791da177e4SLinus Torvalds 
4801da177e4SLinus Torvalds 	msg->msg_namelen = 0;
4811da177e4SLinus Torvalds 
4821da177e4SLinus Torvalds 	copied = skb->len;
4831da177e4SLinus Torvalds 	if (len < copied) {
4841da177e4SLinus Torvalds 		msg->msg_flags |= MSG_TRUNC;
4851da177e4SLinus Torvalds 		copied = len;
4861da177e4SLinus Torvalds 	}
4871da177e4SLinus Torvalds 
488badff6d0SArnaldo Carvalho de Melo 	skb_reset_transport_header(skb);
4891da177e4SLinus Torvalds 	err = skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied);
4901da177e4SLinus Torvalds 
4911da177e4SLinus Torvalds 	hci_sock_cmsg(sk, msg, skb);
4921da177e4SLinus Torvalds 
4931da177e4SLinus Torvalds 	skb_free_datagram(sk, skb);
4941da177e4SLinus Torvalds 
4951da177e4SLinus Torvalds 	return err ? : copied;
4961da177e4SLinus Torvalds }
4971da177e4SLinus Torvalds 
4981da177e4SLinus Torvalds static int hci_sock_sendmsg(struct kiocb *iocb, struct socket *sock,
4991da177e4SLinus Torvalds 			    struct msghdr *msg, size_t len)
5001da177e4SLinus Torvalds {
5011da177e4SLinus Torvalds 	struct sock *sk = sock->sk;
5021da177e4SLinus Torvalds 	struct hci_dev *hdev;
5031da177e4SLinus Torvalds 	struct sk_buff *skb;
5041da177e4SLinus Torvalds 	int err;
5051da177e4SLinus Torvalds 
5061da177e4SLinus Torvalds 	BT_DBG("sock %p sk %p", sock, sk);
5071da177e4SLinus Torvalds 
5081da177e4SLinus Torvalds 	if (msg->msg_flags & MSG_OOB)
5091da177e4SLinus Torvalds 		return -EOPNOTSUPP;
5101da177e4SLinus Torvalds 
5111da177e4SLinus Torvalds 	if (msg->msg_flags & ~(MSG_DONTWAIT|MSG_NOSIGNAL|MSG_ERRQUEUE))
5121da177e4SLinus Torvalds 		return -EINVAL;
5131da177e4SLinus Torvalds 
5141da177e4SLinus Torvalds 	if (len < 4 || len > HCI_MAX_FRAME_SIZE)
5151da177e4SLinus Torvalds 		return -EINVAL;
5161da177e4SLinus Torvalds 
5171da177e4SLinus Torvalds 	lock_sock(sk);
5181da177e4SLinus Torvalds 
5190381101fSJohan Hedberg 	switch (hci_pi(sk)->channel) {
5200381101fSJohan Hedberg 	case HCI_CHANNEL_RAW:
5210381101fSJohan Hedberg 		break;
5220381101fSJohan Hedberg 	case HCI_CHANNEL_CONTROL:
5230381101fSJohan Hedberg 		err = mgmt_control(sk, msg, len);
5240381101fSJohan Hedberg 		goto done;
5250381101fSJohan Hedberg 	default:
5260381101fSJohan Hedberg 		err = -EINVAL;
5270381101fSJohan Hedberg 		goto done;
5280381101fSJohan Hedberg 	}
5290381101fSJohan Hedberg 
53070f23020SAndrei Emeltchenko 	hdev = hci_pi(sk)->hdev;
53170f23020SAndrei Emeltchenko 	if (!hdev) {
5321da177e4SLinus Torvalds 		err = -EBADFD;
5331da177e4SLinus Torvalds 		goto done;
5341da177e4SLinus Torvalds 	}
5351da177e4SLinus Torvalds 
5367e21addcSMarcel Holtmann 	if (!test_bit(HCI_UP, &hdev->flags)) {
5377e21addcSMarcel Holtmann 		err = -ENETDOWN;
5387e21addcSMarcel Holtmann 		goto done;
5397e21addcSMarcel Holtmann 	}
5407e21addcSMarcel Holtmann 
54170f23020SAndrei Emeltchenko 	skb = bt_skb_send_alloc(sk, len, msg->msg_flags & MSG_DONTWAIT, &err);
54270f23020SAndrei Emeltchenko 	if (!skb)
5431da177e4SLinus Torvalds 		goto done;
5441da177e4SLinus Torvalds 
5451da177e4SLinus Torvalds 	if (memcpy_fromiovec(skb_put(skb, len), msg->msg_iov, len)) {
5461da177e4SLinus Torvalds 		err = -EFAULT;
5471da177e4SLinus Torvalds 		goto drop;
5481da177e4SLinus Torvalds 	}
5491da177e4SLinus Torvalds 
5500d48d939SMarcel Holtmann 	bt_cb(skb)->pkt_type = *((unsigned char *) skb->data);
5511da177e4SLinus Torvalds 	skb_pull(skb, 1);
5521da177e4SLinus Torvalds 	skb->dev = (void *) hdev;
5531da177e4SLinus Torvalds 
5540d48d939SMarcel Holtmann 	if (bt_cb(skb)->pkt_type == HCI_COMMAND_PKT) {
55583985319SHarvey Harrison 		u16 opcode = get_unaligned_le16(skb->data);
5561da177e4SLinus Torvalds 		u16 ogf = hci_opcode_ogf(opcode);
5571da177e4SLinus Torvalds 		u16 ocf = hci_opcode_ocf(opcode);
5581da177e4SLinus Torvalds 
5591da177e4SLinus Torvalds 		if (((ogf > HCI_SFLT_MAX_OGF) ||
5601da177e4SLinus Torvalds 				!hci_test_bit(ocf & HCI_FLT_OCF_BITS, &hci_sec_filter.ocf_mask[ogf])) &&
5611da177e4SLinus Torvalds 					!capable(CAP_NET_RAW)) {
5621da177e4SLinus Torvalds 			err = -EPERM;
5631da177e4SLinus Torvalds 			goto drop;
5641da177e4SLinus Torvalds 		}
5651da177e4SLinus Torvalds 
566a9de9248SMarcel Holtmann 		if (test_bit(HCI_RAW, &hdev->flags) || (ogf == 0x3f)) {
5671da177e4SLinus Torvalds 			skb_queue_tail(&hdev->raw_q, skb);
5683eff45eaSGustavo F. Padovan 			queue_work(hdev->workqueue, &hdev->tx_work);
5691da177e4SLinus Torvalds 		} else {
5701da177e4SLinus Torvalds 			skb_queue_tail(&hdev->cmd_q, skb);
571c347b765SGustavo F. Padovan 			queue_work(hdev->workqueue, &hdev->cmd_work);
5721da177e4SLinus Torvalds 		}
5731da177e4SLinus Torvalds 	} else {
5741da177e4SLinus Torvalds 		if (!capable(CAP_NET_RAW)) {
5751da177e4SLinus Torvalds 			err = -EPERM;
5761da177e4SLinus Torvalds 			goto drop;
5771da177e4SLinus Torvalds 		}
5781da177e4SLinus Torvalds 
5791da177e4SLinus Torvalds 		skb_queue_tail(&hdev->raw_q, skb);
5803eff45eaSGustavo F. Padovan 		queue_work(hdev->workqueue, &hdev->tx_work);
5811da177e4SLinus Torvalds 	}
5821da177e4SLinus Torvalds 
5831da177e4SLinus Torvalds 	err = len;
5841da177e4SLinus Torvalds 
5851da177e4SLinus Torvalds done:
5861da177e4SLinus Torvalds 	release_sock(sk);
5871da177e4SLinus Torvalds 	return err;
5881da177e4SLinus Torvalds 
5891da177e4SLinus Torvalds drop:
5901da177e4SLinus Torvalds 	kfree_skb(skb);
5911da177e4SLinus Torvalds 	goto done;
5921da177e4SLinus Torvalds }
5931da177e4SLinus Torvalds 
594b7058842SDavid S. Miller static int hci_sock_setsockopt(struct socket *sock, int level, int optname, char __user *optval, unsigned int len)
5951da177e4SLinus Torvalds {
5961da177e4SLinus Torvalds 	struct hci_ufilter uf = { .opcode = 0 };
5971da177e4SLinus Torvalds 	struct sock *sk = sock->sk;
5981da177e4SLinus Torvalds 	int err = 0, opt = 0;
5991da177e4SLinus Torvalds 
6001da177e4SLinus Torvalds 	BT_DBG("sk %p, opt %d", sk, optname);
6011da177e4SLinus Torvalds 
6021da177e4SLinus Torvalds 	lock_sock(sk);
6031da177e4SLinus Torvalds 
6042f39cdb7SMarcel Holtmann 	if (hci_pi(sk)->channel != HCI_CHANNEL_RAW) {
6052f39cdb7SMarcel Holtmann 		err = -EINVAL;
6062f39cdb7SMarcel Holtmann 		goto done;
6072f39cdb7SMarcel Holtmann 	}
6082f39cdb7SMarcel Holtmann 
6091da177e4SLinus Torvalds 	switch (optname) {
6101da177e4SLinus Torvalds 	case HCI_DATA_DIR:
6111da177e4SLinus Torvalds 		if (get_user(opt, (int __user *)optval)) {
6121da177e4SLinus Torvalds 			err = -EFAULT;
6131da177e4SLinus Torvalds 			break;
6141da177e4SLinus Torvalds 		}
6151da177e4SLinus Torvalds 
6161da177e4SLinus Torvalds 		if (opt)
6171da177e4SLinus Torvalds 			hci_pi(sk)->cmsg_mask |= HCI_CMSG_DIR;
6181da177e4SLinus Torvalds 		else
6191da177e4SLinus Torvalds 			hci_pi(sk)->cmsg_mask &= ~HCI_CMSG_DIR;
6201da177e4SLinus Torvalds 		break;
6211da177e4SLinus Torvalds 
6221da177e4SLinus Torvalds 	case HCI_TIME_STAMP:
6231da177e4SLinus Torvalds 		if (get_user(opt, (int __user *)optval)) {
6241da177e4SLinus Torvalds 			err = -EFAULT;
6251da177e4SLinus Torvalds 			break;
6261da177e4SLinus Torvalds 		}
6271da177e4SLinus Torvalds 
6281da177e4SLinus Torvalds 		if (opt)
6291da177e4SLinus Torvalds 			hci_pi(sk)->cmsg_mask |= HCI_CMSG_TSTAMP;
6301da177e4SLinus Torvalds 		else
6311da177e4SLinus Torvalds 			hci_pi(sk)->cmsg_mask &= ~HCI_CMSG_TSTAMP;
6321da177e4SLinus Torvalds 		break;
6331da177e4SLinus Torvalds 
6341da177e4SLinus Torvalds 	case HCI_FILTER:
6350878b666SMarcel Holtmann 		{
6360878b666SMarcel Holtmann 			struct hci_filter *f = &hci_pi(sk)->filter;
6370878b666SMarcel Holtmann 
6380878b666SMarcel Holtmann 			uf.type_mask = f->type_mask;
6390878b666SMarcel Holtmann 			uf.opcode    = f->opcode;
6400878b666SMarcel Holtmann 			uf.event_mask[0] = *((u32 *) f->event_mask + 0);
6410878b666SMarcel Holtmann 			uf.event_mask[1] = *((u32 *) f->event_mask + 1);
6420878b666SMarcel Holtmann 		}
6430878b666SMarcel Holtmann 
6441da177e4SLinus Torvalds 		len = min_t(unsigned int, len, sizeof(uf));
6451da177e4SLinus Torvalds 		if (copy_from_user(&uf, optval, len)) {
6461da177e4SLinus Torvalds 			err = -EFAULT;
6471da177e4SLinus Torvalds 			break;
6481da177e4SLinus Torvalds 		}
6491da177e4SLinus Torvalds 
6501da177e4SLinus Torvalds 		if (!capable(CAP_NET_RAW)) {
6511da177e4SLinus Torvalds 			uf.type_mask &= hci_sec_filter.type_mask;
6521da177e4SLinus Torvalds 			uf.event_mask[0] &= *((u32 *) hci_sec_filter.event_mask + 0);
6531da177e4SLinus Torvalds 			uf.event_mask[1] &= *((u32 *) hci_sec_filter.event_mask + 1);
6541da177e4SLinus Torvalds 		}
6551da177e4SLinus Torvalds 
6561da177e4SLinus Torvalds 		{
6571da177e4SLinus Torvalds 			struct hci_filter *f = &hci_pi(sk)->filter;
6581da177e4SLinus Torvalds 
6591da177e4SLinus Torvalds 			f->type_mask = uf.type_mask;
6601da177e4SLinus Torvalds 			f->opcode    = uf.opcode;
6611da177e4SLinus Torvalds 			*((u32 *) f->event_mask + 0) = uf.event_mask[0];
6621da177e4SLinus Torvalds 			*((u32 *) f->event_mask + 1) = uf.event_mask[1];
6631da177e4SLinus Torvalds 		}
6641da177e4SLinus Torvalds 		break;
6651da177e4SLinus Torvalds 
6661da177e4SLinus Torvalds 	default:
6671da177e4SLinus Torvalds 		err = -ENOPROTOOPT;
6681da177e4SLinus Torvalds 		break;
6691da177e4SLinus Torvalds 	}
6701da177e4SLinus Torvalds 
6712f39cdb7SMarcel Holtmann done:
6721da177e4SLinus Torvalds 	release_sock(sk);
6731da177e4SLinus Torvalds 	return err;
6741da177e4SLinus Torvalds }
6751da177e4SLinus Torvalds 
6761da177e4SLinus Torvalds static int hci_sock_getsockopt(struct socket *sock, int level, int optname, char __user *optval, int __user *optlen)
6771da177e4SLinus Torvalds {
6781da177e4SLinus Torvalds 	struct hci_ufilter uf;
6791da177e4SLinus Torvalds 	struct sock *sk = sock->sk;
680*cedc5469SMarcel Holtmann 	int len, opt, err = 0;
681*cedc5469SMarcel Holtmann 
682*cedc5469SMarcel Holtmann 	BT_DBG("sk %p, opt %d", sk, optname);
6831da177e4SLinus Torvalds 
6841da177e4SLinus Torvalds 	if (get_user(len, optlen))
6851da177e4SLinus Torvalds 		return -EFAULT;
6861da177e4SLinus Torvalds 
687*cedc5469SMarcel Holtmann 	lock_sock(sk);
688*cedc5469SMarcel Holtmann 
689*cedc5469SMarcel Holtmann 	if (hci_pi(sk)->channel != HCI_CHANNEL_RAW) {
690*cedc5469SMarcel Holtmann 		err = -EINVAL;
691*cedc5469SMarcel Holtmann 		goto done;
692*cedc5469SMarcel Holtmann 	}
693*cedc5469SMarcel Holtmann 
6941da177e4SLinus Torvalds 	switch (optname) {
6951da177e4SLinus Torvalds 	case HCI_DATA_DIR:
6961da177e4SLinus Torvalds 		if (hci_pi(sk)->cmsg_mask & HCI_CMSG_DIR)
6971da177e4SLinus Torvalds 			opt = 1;
6981da177e4SLinus Torvalds 		else
6991da177e4SLinus Torvalds 			opt = 0;
7001da177e4SLinus Torvalds 
7011da177e4SLinus Torvalds 		if (put_user(opt, optval))
702*cedc5469SMarcel Holtmann 			err = -EFAULT;
7031da177e4SLinus Torvalds 		break;
7041da177e4SLinus Torvalds 
7051da177e4SLinus Torvalds 	case HCI_TIME_STAMP:
7061da177e4SLinus Torvalds 		if (hci_pi(sk)->cmsg_mask & HCI_CMSG_TSTAMP)
7071da177e4SLinus Torvalds 			opt = 1;
7081da177e4SLinus Torvalds 		else
7091da177e4SLinus Torvalds 			opt = 0;
7101da177e4SLinus Torvalds 
7111da177e4SLinus Torvalds 		if (put_user(opt, optval))
712*cedc5469SMarcel Holtmann 			err = -EFAULT;
7131da177e4SLinus Torvalds 		break;
7141da177e4SLinus Torvalds 
7151da177e4SLinus Torvalds 	case HCI_FILTER:
7161da177e4SLinus Torvalds 		{
7171da177e4SLinus Torvalds 			struct hci_filter *f = &hci_pi(sk)->filter;
7181da177e4SLinus Torvalds 
7191da177e4SLinus Torvalds 			uf.type_mask = f->type_mask;
7201da177e4SLinus Torvalds 			uf.opcode    = f->opcode;
7211da177e4SLinus Torvalds 			uf.event_mask[0] = *((u32 *) f->event_mask + 0);
7221da177e4SLinus Torvalds 			uf.event_mask[1] = *((u32 *) f->event_mask + 1);
7231da177e4SLinus Torvalds 		}
7241da177e4SLinus Torvalds 
7251da177e4SLinus Torvalds 		len = min_t(unsigned int, len, sizeof(uf));
7261da177e4SLinus Torvalds 		if (copy_to_user(optval, &uf, len))
727*cedc5469SMarcel Holtmann 			err = -EFAULT;
7281da177e4SLinus Torvalds 		break;
7291da177e4SLinus Torvalds 
7301da177e4SLinus Torvalds 	default:
731*cedc5469SMarcel Holtmann 		err = -ENOPROTOOPT;
7321da177e4SLinus Torvalds 		break;
7331da177e4SLinus Torvalds 	}
7341da177e4SLinus Torvalds 
735*cedc5469SMarcel Holtmann done:
736*cedc5469SMarcel Holtmann 	release_sock(sk);
737*cedc5469SMarcel Holtmann 	return err;
7381da177e4SLinus Torvalds }
7391da177e4SLinus Torvalds 
74090ddc4f0SEric Dumazet static const struct proto_ops hci_sock_ops = {
7411da177e4SLinus Torvalds 	.family		= PF_BLUETOOTH,
7421da177e4SLinus Torvalds 	.owner		= THIS_MODULE,
7431da177e4SLinus Torvalds 	.release	= hci_sock_release,
7441da177e4SLinus Torvalds 	.bind		= hci_sock_bind,
7451da177e4SLinus Torvalds 	.getname	= hci_sock_getname,
7461da177e4SLinus Torvalds 	.sendmsg	= hci_sock_sendmsg,
7471da177e4SLinus Torvalds 	.recvmsg	= hci_sock_recvmsg,
7481da177e4SLinus Torvalds 	.ioctl		= hci_sock_ioctl,
7491da177e4SLinus Torvalds 	.poll		= datagram_poll,
7501da177e4SLinus Torvalds 	.listen		= sock_no_listen,
7511da177e4SLinus Torvalds 	.shutdown	= sock_no_shutdown,
7521da177e4SLinus Torvalds 	.setsockopt	= hci_sock_setsockopt,
7531da177e4SLinus Torvalds 	.getsockopt	= hci_sock_getsockopt,
7541da177e4SLinus Torvalds 	.connect	= sock_no_connect,
7551da177e4SLinus Torvalds 	.socketpair	= sock_no_socketpair,
7561da177e4SLinus Torvalds 	.accept		= sock_no_accept,
7571da177e4SLinus Torvalds 	.mmap		= sock_no_mmap
7581da177e4SLinus Torvalds };
7591da177e4SLinus Torvalds 
7601da177e4SLinus Torvalds static struct proto hci_sk_proto = {
7611da177e4SLinus Torvalds 	.name		= "HCI",
7621da177e4SLinus Torvalds 	.owner		= THIS_MODULE,
7631da177e4SLinus Torvalds 	.obj_size	= sizeof(struct hci_pinfo)
7641da177e4SLinus Torvalds };
7651da177e4SLinus Torvalds 
7663f378b68SEric Paris static int hci_sock_create(struct net *net, struct socket *sock, int protocol,
7673f378b68SEric Paris 			   int kern)
7681da177e4SLinus Torvalds {
7691da177e4SLinus Torvalds 	struct sock *sk;
7701da177e4SLinus Torvalds 
7711da177e4SLinus Torvalds 	BT_DBG("sock %p", sock);
7721da177e4SLinus Torvalds 
7731da177e4SLinus Torvalds 	if (sock->type != SOCK_RAW)
7741da177e4SLinus Torvalds 		return -ESOCKTNOSUPPORT;
7751da177e4SLinus Torvalds 
7761da177e4SLinus Torvalds 	sock->ops = &hci_sock_ops;
7771da177e4SLinus Torvalds 
7786257ff21SPavel Emelyanov 	sk = sk_alloc(net, PF_BLUETOOTH, GFP_ATOMIC, &hci_sk_proto);
7791da177e4SLinus Torvalds 	if (!sk)
7801da177e4SLinus Torvalds 		return -ENOMEM;
7811da177e4SLinus Torvalds 
7821da177e4SLinus Torvalds 	sock_init_data(sock, sk);
7831da177e4SLinus Torvalds 
7841da177e4SLinus Torvalds 	sock_reset_flag(sk, SOCK_ZAPPED);
7851da177e4SLinus Torvalds 
7861da177e4SLinus Torvalds 	sk->sk_protocol = protocol;
7871da177e4SLinus Torvalds 
7881da177e4SLinus Torvalds 	sock->state = SS_UNCONNECTED;
7891da177e4SLinus Torvalds 	sk->sk_state = BT_OPEN;
7901da177e4SLinus Torvalds 
7911da177e4SLinus Torvalds 	bt_sock_link(&hci_sk_list, sk);
7921da177e4SLinus Torvalds 	return 0;
7931da177e4SLinus Torvalds }
7941da177e4SLinus Torvalds 
7951da177e4SLinus Torvalds static int hci_sock_dev_event(struct notifier_block *this, unsigned long event, void *ptr)
7961da177e4SLinus Torvalds {
7971da177e4SLinus Torvalds 	struct hci_dev *hdev = (struct hci_dev *) ptr;
7981da177e4SLinus Torvalds 	struct hci_ev_si_device ev;
7991da177e4SLinus Torvalds 
8001da177e4SLinus Torvalds 	BT_DBG("hdev %s event %ld", hdev->name, event);
8011da177e4SLinus Torvalds 
8021da177e4SLinus Torvalds 	/* Send event to sockets */
8031da177e4SLinus Torvalds 	ev.event  = event;
8041da177e4SLinus Torvalds 	ev.dev_id = hdev->id;
8051da177e4SLinus Torvalds 	hci_si_event(NULL, HCI_EV_SI_DEVICE, sizeof(ev), &ev);
8061da177e4SLinus Torvalds 
8071da177e4SLinus Torvalds 	if (event == HCI_DEV_UNREG) {
8081da177e4SLinus Torvalds 		struct sock *sk;
8091da177e4SLinus Torvalds 		struct hlist_node *node;
8101da177e4SLinus Torvalds 
8111da177e4SLinus Torvalds 		/* Detach sockets from device */
8121da177e4SLinus Torvalds 		read_lock(&hci_sk_list.lock);
8131da177e4SLinus Torvalds 		sk_for_each(sk, node, &hci_sk_list.head) {
8144ce61d1cSSatyam Sharma 			bh_lock_sock_nested(sk);
8151da177e4SLinus Torvalds 			if (hci_pi(sk)->hdev == hdev) {
8161da177e4SLinus Torvalds 				hci_pi(sk)->hdev = NULL;
8171da177e4SLinus Torvalds 				sk->sk_err = EPIPE;
8181da177e4SLinus Torvalds 				sk->sk_state = BT_OPEN;
8191da177e4SLinus Torvalds 				sk->sk_state_change(sk);
8201da177e4SLinus Torvalds 
8211da177e4SLinus Torvalds 				hci_dev_put(hdev);
8221da177e4SLinus Torvalds 			}
8234ce61d1cSSatyam Sharma 			bh_unlock_sock(sk);
8241da177e4SLinus Torvalds 		}
8251da177e4SLinus Torvalds 		read_unlock(&hci_sk_list.lock);
8261da177e4SLinus Torvalds 	}
8271da177e4SLinus Torvalds 
8281da177e4SLinus Torvalds 	return NOTIFY_DONE;
8291da177e4SLinus Torvalds }
8301da177e4SLinus Torvalds 
831ec1b4cf7SStephen Hemminger static const struct net_proto_family hci_sock_family_ops = {
8321da177e4SLinus Torvalds 	.family	= PF_BLUETOOTH,
8331da177e4SLinus Torvalds 	.owner	= THIS_MODULE,
8341da177e4SLinus Torvalds 	.create	= hci_sock_create,
8351da177e4SLinus Torvalds };
8361da177e4SLinus Torvalds 
8371da177e4SLinus Torvalds static struct notifier_block hci_sock_nblock = {
8381da177e4SLinus Torvalds 	.notifier_call = hci_sock_dev_event
8391da177e4SLinus Torvalds };
8401da177e4SLinus Torvalds 
8411da177e4SLinus Torvalds int __init hci_sock_init(void)
8421da177e4SLinus Torvalds {
8431da177e4SLinus Torvalds 	int err;
8441da177e4SLinus Torvalds 
8451da177e4SLinus Torvalds 	err = proto_register(&hci_sk_proto, 0);
8461da177e4SLinus Torvalds 	if (err < 0)
8471da177e4SLinus Torvalds 		return err;
8481da177e4SLinus Torvalds 
8491da177e4SLinus Torvalds 	err = bt_sock_register(BTPROTO_HCI, &hci_sock_family_ops);
8501da177e4SLinus Torvalds 	if (err < 0)
8511da177e4SLinus Torvalds 		goto error;
8521da177e4SLinus Torvalds 
8531da177e4SLinus Torvalds 	hci_register_notifier(&hci_sock_nblock);
8541da177e4SLinus Torvalds 
8551da177e4SLinus Torvalds 	BT_INFO("HCI socket layer initialized");
8561da177e4SLinus Torvalds 
8571da177e4SLinus Torvalds 	return 0;
8581da177e4SLinus Torvalds 
8591da177e4SLinus Torvalds error:
8601da177e4SLinus Torvalds 	BT_ERR("HCI socket registration failed");
8611da177e4SLinus Torvalds 	proto_unregister(&hci_sk_proto);
8621da177e4SLinus Torvalds 	return err;
8631da177e4SLinus Torvalds }
8641da177e4SLinus Torvalds 
865b7440a14SAnand Gadiyar void hci_sock_cleanup(void)
8661da177e4SLinus Torvalds {
8671da177e4SLinus Torvalds 	if (bt_sock_unregister(BTPROTO_HCI) < 0)
8681da177e4SLinus Torvalds 		BT_ERR("HCI socket unregistration failed");
8691da177e4SLinus Torvalds 
8701da177e4SLinus Torvalds 	hci_unregister_notifier(&hci_sock_nblock);
8711da177e4SLinus Torvalds 
8721da177e4SLinus Torvalds 	proto_unregister(&hci_sk_proto);
8731da177e4SLinus Torvalds }
8740381101fSJohan Hedberg 
8750381101fSJohan Hedberg module_param(enable_mgmt, bool, 0644);
8760381101fSJohan Hedberg MODULE_PARM_DESC(enable_mgmt, "Enable Management interface");
877