xref: /openbmc/linux/drivers/bluetooth/hci_ldisc.c (revision b7ec62d7)
1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3  *
4  *  Bluetooth HCI UART driver
5  *
6  *  Copyright (C) 2000-2001  Qualcomm Incorporated
7  *  Copyright (C) 2002-2003  Maxim Krasnyansky <maxk@qualcomm.com>
8  *  Copyright (C) 2004-2005  Marcel Holtmann <marcel@holtmann.org>
9  */
10 
11 #include <linux/module.h>
12 
13 #include <linux/kernel.h>
14 #include <linux/init.h>
15 #include <linux/types.h>
16 #include <linux/fcntl.h>
17 #include <linux/interrupt.h>
18 #include <linux/ptrace.h>
19 #include <linux/poll.h>
20 
21 #include <linux/slab.h>
22 #include <linux/tty.h>
23 #include <linux/errno.h>
24 #include <linux/string.h>
25 #include <linux/signal.h>
26 #include <linux/ioctl.h>
27 #include <linux/skbuff.h>
28 #include <linux/firmware.h>
29 #include <linux/serdev.h>
30 
31 #include <net/bluetooth/bluetooth.h>
32 #include <net/bluetooth/hci_core.h>
33 
34 #include "btintel.h"
35 #include "btbcm.h"
36 #include "hci_uart.h"
37 
38 #define VERSION "2.3"
39 
40 static const struct hci_uart_proto *hup[HCI_UART_MAX_PROTO];
41 
42 int hci_uart_register_proto(const struct hci_uart_proto *p)
43 {
44 	if (p->id >= HCI_UART_MAX_PROTO)
45 		return -EINVAL;
46 
47 	if (hup[p->id])
48 		return -EEXIST;
49 
50 	hup[p->id] = p;
51 
52 	BT_INFO("HCI UART protocol %s registered", p->name);
53 
54 	return 0;
55 }
56 
57 int hci_uart_unregister_proto(const struct hci_uart_proto *p)
58 {
59 	if (p->id >= HCI_UART_MAX_PROTO)
60 		return -EINVAL;
61 
62 	if (!hup[p->id])
63 		return -EINVAL;
64 
65 	hup[p->id] = NULL;
66 
67 	return 0;
68 }
69 
70 static const struct hci_uart_proto *hci_uart_get_proto(unsigned int id)
71 {
72 	if (id >= HCI_UART_MAX_PROTO)
73 		return NULL;
74 
75 	return hup[id];
76 }
77 
78 static inline void hci_uart_tx_complete(struct hci_uart *hu, int pkt_type)
79 {
80 	struct hci_dev *hdev = hu->hdev;
81 
82 	/* Update HCI stat counters */
83 	switch (pkt_type) {
84 	case HCI_COMMAND_PKT:
85 		hdev->stat.cmd_tx++;
86 		break;
87 
88 	case HCI_ACLDATA_PKT:
89 		hdev->stat.acl_tx++;
90 		break;
91 
92 	case HCI_SCODATA_PKT:
93 		hdev->stat.sco_tx++;
94 		break;
95 	}
96 }
97 
98 static inline struct sk_buff *hci_uart_dequeue(struct hci_uart *hu)
99 {
100 	struct sk_buff *skb = hu->tx_skb;
101 
102 	if (!skb) {
103 		percpu_down_read(&hu->proto_lock);
104 
105 		if (test_bit(HCI_UART_PROTO_READY, &hu->flags))
106 			skb = hu->proto->dequeue(hu);
107 
108 		percpu_up_read(&hu->proto_lock);
109 	} else {
110 		hu->tx_skb = NULL;
111 	}
112 
113 	return skb;
114 }
115 
116 int hci_uart_tx_wakeup(struct hci_uart *hu)
117 {
118 	/* This may be called in an IRQ context, so we can't sleep. Therefore
119 	 * we try to acquire the lock only, and if that fails we assume the
120 	 * tty is being closed because that is the only time the write lock is
121 	 * acquired. If, however, at some point in the future the write lock
122 	 * is also acquired in other situations, then this must be revisited.
123 	 */
124 	if (!percpu_down_read_trylock(&hu->proto_lock))
125 		return 0;
126 
127 	if (!test_bit(HCI_UART_PROTO_READY, &hu->flags))
128 		goto no_schedule;
129 
130 	set_bit(HCI_UART_TX_WAKEUP, &hu->tx_state);
131 	if (test_and_set_bit(HCI_UART_SENDING, &hu->tx_state))
132 		goto no_schedule;
133 
134 	BT_DBG("");
135 
136 	schedule_work(&hu->write_work);
137 
138 no_schedule:
139 	percpu_up_read(&hu->proto_lock);
140 
141 	return 0;
142 }
143 EXPORT_SYMBOL_GPL(hci_uart_tx_wakeup);
144 
145 static void hci_uart_write_work(struct work_struct *work)
146 {
147 	struct hci_uart *hu = container_of(work, struct hci_uart, write_work);
148 	struct tty_struct *tty = hu->tty;
149 	struct hci_dev *hdev = hu->hdev;
150 	struct sk_buff *skb;
151 
152 	/* REVISIT: should we cope with bad skbs or ->write() returning
153 	 * and error value ?
154 	 */
155 
156 restart:
157 	clear_bit(HCI_UART_TX_WAKEUP, &hu->tx_state);
158 
159 	while ((skb = hci_uart_dequeue(hu))) {
160 		int len;
161 
162 		set_bit(TTY_DO_WRITE_WAKEUP, &tty->flags);
163 		len = tty->ops->write(tty, skb->data, skb->len);
164 		hdev->stat.byte_tx += len;
165 
166 		skb_pull(skb, len);
167 		if (skb->len) {
168 			hu->tx_skb = skb;
169 			break;
170 		}
171 
172 		hci_uart_tx_complete(hu, hci_skb_pkt_type(skb));
173 		kfree_skb(skb);
174 	}
175 
176 	clear_bit(HCI_UART_SENDING, &hu->tx_state);
177 	if (test_bit(HCI_UART_TX_WAKEUP, &hu->tx_state))
178 		goto restart;
179 
180 	wake_up_bit(&hu->tx_state, HCI_UART_SENDING);
181 }
182 
183 void hci_uart_init_work(struct work_struct *work)
184 {
185 	struct hci_uart *hu = container_of(work, struct hci_uart, init_ready);
186 	int err;
187 	struct hci_dev *hdev;
188 
189 	if (!test_and_clear_bit(HCI_UART_INIT_PENDING, &hu->hdev_flags))
190 		return;
191 
192 	err = hci_register_dev(hu->hdev);
193 	if (err < 0) {
194 		BT_ERR("Can't register HCI device");
195 		clear_bit(HCI_UART_PROTO_READY, &hu->flags);
196 		hu->proto->close(hu);
197 		hdev = hu->hdev;
198 		hu->hdev = NULL;
199 		hci_free_dev(hdev);
200 		return;
201 	}
202 
203 	set_bit(HCI_UART_REGISTERED, &hu->flags);
204 }
205 
206 int hci_uart_init_ready(struct hci_uart *hu)
207 {
208 	if (!test_bit(HCI_UART_INIT_PENDING, &hu->hdev_flags))
209 		return -EALREADY;
210 
211 	schedule_work(&hu->init_ready);
212 
213 	return 0;
214 }
215 
216 int hci_uart_wait_until_sent(struct hci_uart *hu)
217 {
218 	return wait_on_bit_timeout(&hu->tx_state, HCI_UART_SENDING,
219 				   TASK_INTERRUPTIBLE,
220 				   msecs_to_jiffies(2000));
221 }
222 
223 /* ------- Interface to HCI layer ------ */
224 /* Reset device */
225 static int hci_uart_flush(struct hci_dev *hdev)
226 {
227 	struct hci_uart *hu  = hci_get_drvdata(hdev);
228 	struct tty_struct *tty = hu->tty;
229 
230 	BT_DBG("hdev %p tty %p", hdev, tty);
231 
232 	if (hu->tx_skb) {
233 		kfree_skb(hu->tx_skb); hu->tx_skb = NULL;
234 	}
235 
236 	/* Flush any pending characters in the driver and discipline. */
237 	tty_ldisc_flush(tty);
238 	tty_driver_flush_buffer(tty);
239 
240 	percpu_down_read(&hu->proto_lock);
241 
242 	if (test_bit(HCI_UART_PROTO_READY, &hu->flags))
243 		hu->proto->flush(hu);
244 
245 	percpu_up_read(&hu->proto_lock);
246 
247 	return 0;
248 }
249 
250 /* Initialize device */
251 static int hci_uart_open(struct hci_dev *hdev)
252 {
253 	BT_DBG("%s %p", hdev->name, hdev);
254 
255 	/* Undo clearing this from hci_uart_close() */
256 	hdev->flush = hci_uart_flush;
257 
258 	return 0;
259 }
260 
261 /* Close device */
262 static int hci_uart_close(struct hci_dev *hdev)
263 {
264 	BT_DBG("hdev %p", hdev);
265 
266 	hci_uart_flush(hdev);
267 	hdev->flush = NULL;
268 	return 0;
269 }
270 
271 /* Send frames from HCI layer */
272 static int hci_uart_send_frame(struct hci_dev *hdev, struct sk_buff *skb)
273 {
274 	struct hci_uart *hu = hci_get_drvdata(hdev);
275 
276 	BT_DBG("%s: type %d len %d", hdev->name, hci_skb_pkt_type(skb),
277 	       skb->len);
278 
279 	percpu_down_read(&hu->proto_lock);
280 
281 	if (!test_bit(HCI_UART_PROTO_READY, &hu->flags)) {
282 		percpu_up_read(&hu->proto_lock);
283 		return -EUNATCH;
284 	}
285 
286 	hu->proto->enqueue(hu, skb);
287 	percpu_up_read(&hu->proto_lock);
288 
289 	hci_uart_tx_wakeup(hu);
290 
291 	return 0;
292 }
293 
294 /* Check the underlying device or tty has flow control support */
295 bool hci_uart_has_flow_control(struct hci_uart *hu)
296 {
297 	/* serdev nodes check if the needed operations are present */
298 	if (hu->serdev)
299 		return true;
300 
301 	if (hu->tty->driver->ops->tiocmget && hu->tty->driver->ops->tiocmset)
302 		return true;
303 
304 	return false;
305 }
306 
307 /* Flow control or un-flow control the device */
308 void hci_uart_set_flow_control(struct hci_uart *hu, bool enable)
309 {
310 	struct tty_struct *tty = hu->tty;
311 	struct ktermios ktermios;
312 	int status;
313 	unsigned int set = 0;
314 	unsigned int clear = 0;
315 
316 	if (hu->serdev) {
317 		serdev_device_set_flow_control(hu->serdev, !enable);
318 		serdev_device_set_rts(hu->serdev, !enable);
319 		return;
320 	}
321 
322 	if (enable) {
323 		/* Disable hardware flow control */
324 		ktermios = tty->termios;
325 		ktermios.c_cflag &= ~CRTSCTS;
326 		status = tty_set_termios(tty, &ktermios);
327 		BT_DBG("Disabling hardware flow control: %s",
328 		       status ? "failed" : "success");
329 
330 		/* Clear RTS to prevent the device from sending */
331 		/* Most UARTs need OUT2 to enable interrupts */
332 		status = tty->driver->ops->tiocmget(tty);
333 		BT_DBG("Current tiocm 0x%x", status);
334 
335 		set &= ~(TIOCM_OUT2 | TIOCM_RTS);
336 		clear = ~set;
337 		set &= TIOCM_DTR | TIOCM_RTS | TIOCM_OUT1 |
338 		       TIOCM_OUT2 | TIOCM_LOOP;
339 		clear &= TIOCM_DTR | TIOCM_RTS | TIOCM_OUT1 |
340 			 TIOCM_OUT2 | TIOCM_LOOP;
341 		status = tty->driver->ops->tiocmset(tty, set, clear);
342 		BT_DBG("Clearing RTS: %s", status ? "failed" : "success");
343 	} else {
344 		/* Set RTS to allow the device to send again */
345 		status = tty->driver->ops->tiocmget(tty);
346 		BT_DBG("Current tiocm 0x%x", status);
347 
348 		set |= (TIOCM_OUT2 | TIOCM_RTS);
349 		clear = ~set;
350 		set &= TIOCM_DTR | TIOCM_RTS | TIOCM_OUT1 |
351 		       TIOCM_OUT2 | TIOCM_LOOP;
352 		clear &= TIOCM_DTR | TIOCM_RTS | TIOCM_OUT1 |
353 			 TIOCM_OUT2 | TIOCM_LOOP;
354 		status = tty->driver->ops->tiocmset(tty, set, clear);
355 		BT_DBG("Setting RTS: %s", status ? "failed" : "success");
356 
357 		/* Re-enable hardware flow control */
358 		ktermios = tty->termios;
359 		ktermios.c_cflag |= CRTSCTS;
360 		status = tty_set_termios(tty, &ktermios);
361 		BT_DBG("Enabling hardware flow control: %s",
362 		       status ? "failed" : "success");
363 	}
364 }
365 
366 void hci_uart_set_speeds(struct hci_uart *hu, unsigned int init_speed,
367 			 unsigned int oper_speed)
368 {
369 	hu->init_speed = init_speed;
370 	hu->oper_speed = oper_speed;
371 }
372 
373 void hci_uart_set_baudrate(struct hci_uart *hu, unsigned int speed)
374 {
375 	struct tty_struct *tty = hu->tty;
376 	struct ktermios ktermios;
377 
378 	ktermios = tty->termios;
379 	ktermios.c_cflag &= ~CBAUD;
380 	tty_termios_encode_baud_rate(&ktermios, speed, speed);
381 
382 	/* tty_set_termios() return not checked as it is always 0 */
383 	tty_set_termios(tty, &ktermios);
384 
385 	BT_DBG("%s: New tty speeds: %d/%d", hu->hdev->name,
386 	       tty->termios.c_ispeed, tty->termios.c_ospeed);
387 }
388 
389 static int hci_uart_setup(struct hci_dev *hdev)
390 {
391 	struct hci_uart *hu = hci_get_drvdata(hdev);
392 	struct hci_rp_read_local_version *ver;
393 	struct sk_buff *skb;
394 	unsigned int speed;
395 	int err;
396 
397 	/* Init speed if any */
398 	if (hu->init_speed)
399 		speed = hu->init_speed;
400 	else if (hu->proto->init_speed)
401 		speed = hu->proto->init_speed;
402 	else
403 		speed = 0;
404 
405 	if (speed)
406 		hci_uart_set_baudrate(hu, speed);
407 
408 	/* Operational speed if any */
409 	if (hu->oper_speed)
410 		speed = hu->oper_speed;
411 	else if (hu->proto->oper_speed)
412 		speed = hu->proto->oper_speed;
413 	else
414 		speed = 0;
415 
416 	if (hu->proto->set_baudrate && speed) {
417 		err = hu->proto->set_baudrate(hu, speed);
418 		if (!err)
419 			hci_uart_set_baudrate(hu, speed);
420 	}
421 
422 	if (hu->proto->setup)
423 		return hu->proto->setup(hu);
424 
425 	if (!test_bit(HCI_UART_VND_DETECT, &hu->hdev_flags))
426 		return 0;
427 
428 	skb = __hci_cmd_sync(hdev, HCI_OP_READ_LOCAL_VERSION, 0, NULL,
429 			     HCI_INIT_TIMEOUT);
430 	if (IS_ERR(skb)) {
431 		BT_ERR("%s: Reading local version information failed (%ld)",
432 		       hdev->name, PTR_ERR(skb));
433 		return 0;
434 	}
435 
436 	if (skb->len != sizeof(*ver)) {
437 		BT_ERR("%s: Event length mismatch for version information",
438 		       hdev->name);
439 		goto done;
440 	}
441 
442 	ver = (struct hci_rp_read_local_version *)skb->data;
443 
444 	switch (le16_to_cpu(ver->manufacturer)) {
445 #ifdef CONFIG_BT_HCIUART_INTEL
446 	case 2:
447 		hdev->set_bdaddr = btintel_set_bdaddr;
448 		btintel_check_bdaddr(hdev);
449 		break;
450 #endif
451 #ifdef CONFIG_BT_HCIUART_BCM
452 	case 15:
453 		hdev->set_bdaddr = btbcm_set_bdaddr;
454 		btbcm_check_bdaddr(hdev);
455 		break;
456 #endif
457 	default:
458 		break;
459 	}
460 
461 done:
462 	kfree_skb(skb);
463 	return 0;
464 }
465 
466 /* ------ LDISC part ------ */
467 /* hci_uart_tty_open
468  *
469  *     Called when line discipline changed to HCI_UART.
470  *
471  * Arguments:
472  *     tty    pointer to tty info structure
473  * Return Value:
474  *     0 if success, otherwise error code
475  */
476 static int hci_uart_tty_open(struct tty_struct *tty)
477 {
478 	struct hci_uart *hu;
479 
480 	BT_DBG("tty %p", tty);
481 
482 	if (!capable(CAP_NET_ADMIN))
483 		return -EPERM;
484 
485 	/* Error if the tty has no write op instead of leaving an exploitable
486 	 * hole
487 	 */
488 	if (tty->ops->write == NULL)
489 		return -EOPNOTSUPP;
490 
491 	hu = kzalloc(sizeof(struct hci_uart), GFP_KERNEL);
492 	if (!hu) {
493 		BT_ERR("Can't allocate control structure");
494 		return -ENFILE;
495 	}
496 
497 	tty->disc_data = hu;
498 	hu->tty = tty;
499 	tty->receive_room = 65536;
500 
501 	/* disable alignment support by default */
502 	hu->alignment = 1;
503 	hu->padding = 0;
504 
505 	INIT_WORK(&hu->init_ready, hci_uart_init_work);
506 	INIT_WORK(&hu->write_work, hci_uart_write_work);
507 
508 	percpu_init_rwsem(&hu->proto_lock);
509 
510 	/* Flush any pending characters in the driver */
511 	tty_driver_flush_buffer(tty);
512 
513 	return 0;
514 }
515 
516 /* hci_uart_tty_close()
517  *
518  *    Called when the line discipline is changed to something
519  *    else, the tty is closed, or the tty detects a hangup.
520  */
521 static void hci_uart_tty_close(struct tty_struct *tty)
522 {
523 	struct hci_uart *hu = tty->disc_data;
524 	struct hci_dev *hdev;
525 
526 	BT_DBG("tty %p", tty);
527 
528 	/* Detach from the tty */
529 	tty->disc_data = NULL;
530 
531 	if (!hu)
532 		return;
533 
534 	hdev = hu->hdev;
535 	if (hdev)
536 		hci_uart_close(hdev);
537 
538 	if (test_bit(HCI_UART_PROTO_READY, &hu->flags)) {
539 		percpu_down_write(&hu->proto_lock);
540 		clear_bit(HCI_UART_PROTO_READY, &hu->flags);
541 		percpu_up_write(&hu->proto_lock);
542 
543 		cancel_work_sync(&hu->init_ready);
544 		cancel_work_sync(&hu->write_work);
545 
546 		if (hdev) {
547 			if (test_bit(HCI_UART_REGISTERED, &hu->flags))
548 				hci_unregister_dev(hdev);
549 			hci_free_dev(hdev);
550 		}
551 		hu->proto->close(hu);
552 	}
553 	clear_bit(HCI_UART_PROTO_SET, &hu->flags);
554 
555 	percpu_free_rwsem(&hu->proto_lock);
556 
557 	kfree(hu);
558 }
559 
560 /* hci_uart_tty_wakeup()
561  *
562  *    Callback for transmit wakeup. Called when low level
563  *    device driver can accept more send data.
564  *
565  * Arguments:        tty    pointer to associated tty instance data
566  * Return Value:    None
567  */
568 static void hci_uart_tty_wakeup(struct tty_struct *tty)
569 {
570 	struct hci_uart *hu = tty->disc_data;
571 
572 	BT_DBG("");
573 
574 	if (!hu)
575 		return;
576 
577 	clear_bit(TTY_DO_WRITE_WAKEUP, &tty->flags);
578 
579 	if (tty != hu->tty)
580 		return;
581 
582 	if (test_bit(HCI_UART_PROTO_READY, &hu->flags))
583 		hci_uart_tx_wakeup(hu);
584 }
585 
586 /* hci_uart_tty_receive()
587  *
588  *     Called by tty low level driver when receive data is
589  *     available.
590  *
591  * Arguments:  tty          pointer to tty isntance data
592  *             data         pointer to received data
593  *             flags        pointer to flags for data
594  *             count        count of received data in bytes
595  *
596  * Return Value:    None
597  */
598 static void hci_uart_tty_receive(struct tty_struct *tty, const u8 *data,
599 				 const char *flags, int count)
600 {
601 	struct hci_uart *hu = tty->disc_data;
602 
603 	if (!hu || tty != hu->tty)
604 		return;
605 
606 	percpu_down_read(&hu->proto_lock);
607 
608 	if (!test_bit(HCI_UART_PROTO_READY, &hu->flags)) {
609 		percpu_up_read(&hu->proto_lock);
610 		return;
611 	}
612 
613 	/* It does not need a lock here as it is already protected by a mutex in
614 	 * tty caller
615 	 */
616 	hu->proto->recv(hu, data, count);
617 	percpu_up_read(&hu->proto_lock);
618 
619 	if (hu->hdev)
620 		hu->hdev->stat.byte_rx += count;
621 
622 	tty_unthrottle(tty);
623 }
624 
625 static int hci_uart_register_dev(struct hci_uart *hu)
626 {
627 	struct hci_dev *hdev;
628 	int err;
629 
630 	BT_DBG("");
631 
632 	/* Initialize and register HCI device */
633 	hdev = hci_alloc_dev();
634 	if (!hdev) {
635 		BT_ERR("Can't allocate HCI device");
636 		return -ENOMEM;
637 	}
638 
639 	hu->hdev = hdev;
640 
641 	hdev->bus = HCI_UART;
642 	hci_set_drvdata(hdev, hu);
643 
644 	/* Only when vendor specific setup callback is provided, consider
645 	 * the manufacturer information valid. This avoids filling in the
646 	 * value for Ericsson when nothing is specified.
647 	 */
648 	if (hu->proto->setup)
649 		hdev->manufacturer = hu->proto->manufacturer;
650 
651 	hdev->open  = hci_uart_open;
652 	hdev->close = hci_uart_close;
653 	hdev->flush = hci_uart_flush;
654 	hdev->send  = hci_uart_send_frame;
655 	hdev->setup = hci_uart_setup;
656 	SET_HCIDEV_DEV(hdev, hu->tty->dev);
657 
658 	if (test_bit(HCI_UART_RAW_DEVICE, &hu->hdev_flags))
659 		set_bit(HCI_QUIRK_RAW_DEVICE, &hdev->quirks);
660 
661 	if (test_bit(HCI_UART_EXT_CONFIG, &hu->hdev_flags))
662 		set_bit(HCI_QUIRK_EXTERNAL_CONFIG, &hdev->quirks);
663 
664 	if (!test_bit(HCI_UART_RESET_ON_INIT, &hu->hdev_flags))
665 		set_bit(HCI_QUIRK_RESET_ON_CLOSE, &hdev->quirks);
666 
667 	if (test_bit(HCI_UART_CREATE_AMP, &hu->hdev_flags))
668 		hdev->dev_type = HCI_AMP;
669 	else
670 		hdev->dev_type = HCI_PRIMARY;
671 
672 	/* Only call open() for the protocol after hdev is fully initialized as
673 	 * open() (or a timer/workqueue it starts) may attempt to reference it.
674 	 */
675 	err = hu->proto->open(hu);
676 	if (err) {
677 		hu->hdev = NULL;
678 		hci_free_dev(hdev);
679 		return err;
680 	}
681 
682 	if (test_bit(HCI_UART_INIT_PENDING, &hu->hdev_flags))
683 		return 0;
684 
685 	if (hci_register_dev(hdev) < 0) {
686 		BT_ERR("Can't register HCI device");
687 		hu->proto->close(hu);
688 		hu->hdev = NULL;
689 		hci_free_dev(hdev);
690 		return -ENODEV;
691 	}
692 
693 	set_bit(HCI_UART_REGISTERED, &hu->flags);
694 
695 	return 0;
696 }
697 
698 static int hci_uart_set_proto(struct hci_uart *hu, int id)
699 {
700 	const struct hci_uart_proto *p;
701 	int err;
702 
703 	p = hci_uart_get_proto(id);
704 	if (!p)
705 		return -EPROTONOSUPPORT;
706 
707 	hu->proto = p;
708 
709 	err = hci_uart_register_dev(hu);
710 	if (err) {
711 		return err;
712 	}
713 
714 	set_bit(HCI_UART_PROTO_READY, &hu->flags);
715 	return 0;
716 }
717 
718 static int hci_uart_set_flags(struct hci_uart *hu, unsigned long flags)
719 {
720 	unsigned long valid_flags = BIT(HCI_UART_RAW_DEVICE) |
721 				    BIT(HCI_UART_RESET_ON_INIT) |
722 				    BIT(HCI_UART_CREATE_AMP) |
723 				    BIT(HCI_UART_INIT_PENDING) |
724 				    BIT(HCI_UART_EXT_CONFIG) |
725 				    BIT(HCI_UART_VND_DETECT);
726 
727 	if (flags & ~valid_flags)
728 		return -EINVAL;
729 
730 	hu->hdev_flags = flags;
731 
732 	return 0;
733 }
734 
735 /* hci_uart_tty_ioctl()
736  *
737  *    Process IOCTL system call for the tty device.
738  *
739  * Arguments:
740  *
741  *    tty        pointer to tty instance data
742  *    file       pointer to open file object for device
743  *    cmd        IOCTL command code
744  *    arg        argument for IOCTL call (cmd dependent)
745  *
746  * Return Value:    Command dependent
747  */
748 static int hci_uart_tty_ioctl(struct tty_struct *tty, struct file *file,
749 			      unsigned int cmd, unsigned long arg)
750 {
751 	struct hci_uart *hu = tty->disc_data;
752 	int err = 0;
753 
754 	BT_DBG("");
755 
756 	/* Verify the status of the device */
757 	if (!hu)
758 		return -EBADF;
759 
760 	switch (cmd) {
761 	case HCIUARTSETPROTO:
762 		if (!test_and_set_bit(HCI_UART_PROTO_SET, &hu->flags)) {
763 			err = hci_uart_set_proto(hu, arg);
764 			if (err)
765 				clear_bit(HCI_UART_PROTO_SET, &hu->flags);
766 		} else
767 			err = -EBUSY;
768 		break;
769 
770 	case HCIUARTGETPROTO:
771 		if (test_bit(HCI_UART_PROTO_SET, &hu->flags))
772 			err = hu->proto->id;
773 		else
774 			err = -EUNATCH;
775 		break;
776 
777 	case HCIUARTGETDEVICE:
778 		if (test_bit(HCI_UART_REGISTERED, &hu->flags))
779 			err = hu->hdev->id;
780 		else
781 			err = -EUNATCH;
782 		break;
783 
784 	case HCIUARTSETFLAGS:
785 		if (test_bit(HCI_UART_PROTO_SET, &hu->flags))
786 			err = -EBUSY;
787 		else
788 			err = hci_uart_set_flags(hu, arg);
789 		break;
790 
791 	case HCIUARTGETFLAGS:
792 		err = hu->hdev_flags;
793 		break;
794 
795 	default:
796 		err = n_tty_ioctl_helper(tty, cmd, arg);
797 		break;
798 	}
799 
800 	return err;
801 }
802 
803 /*
804  * We don't provide read/write/poll interface for user space.
805  */
806 static ssize_t hci_uart_tty_read(struct tty_struct *tty, struct file *file,
807 				 unsigned char *buf, size_t nr,
808 				 void **cookie, unsigned long offset)
809 {
810 	return 0;
811 }
812 
813 static ssize_t hci_uart_tty_write(struct tty_struct *tty, struct file *file,
814 				  const unsigned char *data, size_t count)
815 {
816 	return 0;
817 }
818 
819 static __poll_t hci_uart_tty_poll(struct tty_struct *tty,
820 				      struct file *filp, poll_table *wait)
821 {
822 	return 0;
823 }
824 
825 static struct tty_ldisc_ops hci_uart_ldisc = {
826 	.owner		= THIS_MODULE,
827 	.num		= N_HCI,
828 	.name		= "n_hci",
829 	.open		= hci_uart_tty_open,
830 	.close		= hci_uart_tty_close,
831 	.read		= hci_uart_tty_read,
832 	.write		= hci_uart_tty_write,
833 	.ioctl		= hci_uart_tty_ioctl,
834 	.compat_ioctl	= hci_uart_tty_ioctl,
835 	.poll		= hci_uart_tty_poll,
836 	.receive_buf	= hci_uart_tty_receive,
837 	.write_wakeup	= hci_uart_tty_wakeup,
838 };
839 
840 static int __init hci_uart_init(void)
841 {
842 	int err;
843 
844 	BT_INFO("HCI UART driver ver %s", VERSION);
845 
846 	/* Register the tty discipline */
847 	err = tty_register_ldisc(&hci_uart_ldisc);
848 	if (err) {
849 		BT_ERR("HCI line discipline registration failed. (%d)", err);
850 		return err;
851 	}
852 
853 #ifdef CONFIG_BT_HCIUART_H4
854 	h4_init();
855 #endif
856 #ifdef CONFIG_BT_HCIUART_BCSP
857 	bcsp_init();
858 #endif
859 #ifdef CONFIG_BT_HCIUART_LL
860 	ll_init();
861 #endif
862 #ifdef CONFIG_BT_HCIUART_ATH3K
863 	ath_init();
864 #endif
865 #ifdef CONFIG_BT_HCIUART_3WIRE
866 	h5_init();
867 #endif
868 #ifdef CONFIG_BT_HCIUART_INTEL
869 	intel_init();
870 #endif
871 #ifdef CONFIG_BT_HCIUART_BCM
872 	bcm_init();
873 #endif
874 #ifdef CONFIG_BT_HCIUART_QCA
875 	qca_init();
876 #endif
877 #ifdef CONFIG_BT_HCIUART_AG6XX
878 	ag6xx_init();
879 #endif
880 #ifdef CONFIG_BT_HCIUART_MRVL
881 	mrvl_init();
882 #endif
883 
884 	return 0;
885 }
886 
887 static void __exit hci_uart_exit(void)
888 {
889 #ifdef CONFIG_BT_HCIUART_H4
890 	h4_deinit();
891 #endif
892 #ifdef CONFIG_BT_HCIUART_BCSP
893 	bcsp_deinit();
894 #endif
895 #ifdef CONFIG_BT_HCIUART_LL
896 	ll_deinit();
897 #endif
898 #ifdef CONFIG_BT_HCIUART_ATH3K
899 	ath_deinit();
900 #endif
901 #ifdef CONFIG_BT_HCIUART_3WIRE
902 	h5_deinit();
903 #endif
904 #ifdef CONFIG_BT_HCIUART_INTEL
905 	intel_deinit();
906 #endif
907 #ifdef CONFIG_BT_HCIUART_BCM
908 	bcm_deinit();
909 #endif
910 #ifdef CONFIG_BT_HCIUART_QCA
911 	qca_deinit();
912 #endif
913 #ifdef CONFIG_BT_HCIUART_AG6XX
914 	ag6xx_deinit();
915 #endif
916 #ifdef CONFIG_BT_HCIUART_MRVL
917 	mrvl_deinit();
918 #endif
919 
920 	tty_unregister_ldisc(&hci_uart_ldisc);
921 }
922 
923 module_init(hci_uart_init);
924 module_exit(hci_uart_exit);
925 
926 MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
927 MODULE_DESCRIPTION("Bluetooth HCI UART driver ver " VERSION);
928 MODULE_VERSION(VERSION);
929 MODULE_LICENSE("GPL");
930 MODULE_ALIAS_LDISC(N_HCI);
931