xref: /openbmc/linux/include/net/bluetooth/hci_core.h (revision a06c488d)
1 /*
2    BlueZ - Bluetooth protocol stack for Linux
3    Copyright (c) 2000-2001, 2010, Code Aurora Forum. All rights reserved.
4 
5    Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
6 
7    This program is free software; you can redistribute it and/or modify
8    it under the terms of the GNU General Public License version 2 as
9    published by the Free Software Foundation;
10 
11    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
12    OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
13    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
14    IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
15    CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
16    WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
17    ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
18    OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
19 
20    ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
21    COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
22    SOFTWARE IS DISCLAIMED.
23 */
24 
25 #ifndef __HCI_CORE_H
26 #define __HCI_CORE_H
27 
28 #include <net/bluetooth/hci.h>
29 #include <net/bluetooth/hci_sock.h>
30 
31 /* HCI priority */
32 #define HCI_PRIO_MAX	7
33 
34 /* HCI Core structures */
35 struct inquiry_data {
36 	bdaddr_t	bdaddr;
37 	__u8		pscan_rep_mode;
38 	__u8		pscan_period_mode;
39 	__u8		pscan_mode;
40 	__u8		dev_class[3];
41 	__le16		clock_offset;
42 	__s8		rssi;
43 	__u8		ssp_mode;
44 };
45 
46 struct inquiry_entry {
47 	struct list_head	all;		/* inq_cache.all */
48 	struct list_head	list;		/* unknown or resolve */
49 	enum {
50 		NAME_NOT_KNOWN,
51 		NAME_NEEDED,
52 		NAME_PENDING,
53 		NAME_KNOWN,
54 	} name_state;
55 	__u32			timestamp;
56 	struct inquiry_data	data;
57 };
58 
59 struct discovery_state {
60 	int			type;
61 	enum {
62 		DISCOVERY_STOPPED,
63 		DISCOVERY_STARTING,
64 		DISCOVERY_FINDING,
65 		DISCOVERY_RESOLVING,
66 		DISCOVERY_STOPPING,
67 	} state;
68 	struct list_head	all;	/* All devices found during inquiry */
69 	struct list_head	unknown;	/* Name state not known */
70 	struct list_head	resolve;	/* Name needs to be resolved */
71 	__u32			timestamp;
72 	bdaddr_t		last_adv_addr;
73 	u8			last_adv_addr_type;
74 	s8			last_adv_rssi;
75 	u32			last_adv_flags;
76 	u8			last_adv_data[HCI_MAX_AD_LENGTH];
77 	u8			last_adv_data_len;
78 	bool			report_invalid_rssi;
79 	bool			result_filtering;
80 	bool			limited;
81 	s8			rssi;
82 	u16			uuid_count;
83 	u8			(*uuids)[16];
84 	unsigned long		scan_start;
85 	unsigned long		scan_duration;
86 };
87 
88 struct hci_conn_hash {
89 	struct list_head list;
90 	unsigned int     acl_num;
91 	unsigned int     amp_num;
92 	unsigned int     sco_num;
93 	unsigned int     le_num;
94 	unsigned int     le_num_slave;
95 };
96 
97 struct bdaddr_list {
98 	struct list_head list;
99 	bdaddr_t bdaddr;
100 	u8 bdaddr_type;
101 };
102 
103 struct bt_uuid {
104 	struct list_head list;
105 	u8 uuid[16];
106 	u8 size;
107 	u8 svc_hint;
108 };
109 
110 struct smp_csrk {
111 	bdaddr_t bdaddr;
112 	u8 bdaddr_type;
113 	u8 type;
114 	u8 val[16];
115 };
116 
117 struct smp_ltk {
118 	struct list_head list;
119 	struct rcu_head rcu;
120 	bdaddr_t bdaddr;
121 	u8 bdaddr_type;
122 	u8 authenticated;
123 	u8 type;
124 	u8 enc_size;
125 	__le16 ediv;
126 	__le64 rand;
127 	u8 val[16];
128 };
129 
130 struct smp_irk {
131 	struct list_head list;
132 	struct rcu_head rcu;
133 	bdaddr_t rpa;
134 	bdaddr_t bdaddr;
135 	u8 addr_type;
136 	u8 val[16];
137 };
138 
139 struct link_key {
140 	struct list_head list;
141 	struct rcu_head rcu;
142 	bdaddr_t bdaddr;
143 	u8 type;
144 	u8 val[HCI_LINK_KEY_SIZE];
145 	u8 pin_len;
146 };
147 
148 struct oob_data {
149 	struct list_head list;
150 	bdaddr_t bdaddr;
151 	u8 bdaddr_type;
152 	u8 present;
153 	u8 hash192[16];
154 	u8 rand192[16];
155 	u8 hash256[16];
156 	u8 rand256[16];
157 };
158 
159 struct adv_info {
160 	struct list_head list;
161 	bool pending;
162 	__u8	instance;
163 	__u32	flags;
164 	__u16	timeout;
165 	__u16	remaining_time;
166 	__u16	duration;
167 	__u16	adv_data_len;
168 	__u8	adv_data[HCI_MAX_AD_LENGTH];
169 	__u16	scan_rsp_len;
170 	__u8	scan_rsp_data[HCI_MAX_AD_LENGTH];
171 };
172 
173 #define HCI_MAX_ADV_INSTANCES		5
174 #define HCI_DEFAULT_ADV_DURATION	2
175 
176 #define HCI_MAX_SHORT_NAME_LENGTH	10
177 
178 /* Default LE RPA expiry time, 15 minutes */
179 #define HCI_DEFAULT_RPA_TIMEOUT		(15 * 60)
180 
181 /* Default min/max age of connection information (1s/3s) */
182 #define DEFAULT_CONN_INFO_MIN_AGE	1000
183 #define DEFAULT_CONN_INFO_MAX_AGE	3000
184 
185 struct amp_assoc {
186 	__u16	len;
187 	__u16	offset;
188 	__u16	rem_len;
189 	__u16	len_so_far;
190 	__u8	data[HCI_MAX_AMP_ASSOC_SIZE];
191 };
192 
193 #define HCI_MAX_PAGES	3
194 
195 struct hci_dev {
196 	struct list_head list;
197 	struct mutex	lock;
198 
199 	char		name[8];
200 	unsigned long	flags;
201 	__u16		id;
202 	__u8		bus;
203 	__u8		dev_type;
204 	bdaddr_t	bdaddr;
205 	bdaddr_t	setup_addr;
206 	bdaddr_t	public_addr;
207 	bdaddr_t	random_addr;
208 	bdaddr_t	static_addr;
209 	__u8		adv_addr_type;
210 	__u8		dev_name[HCI_MAX_NAME_LENGTH];
211 	__u8		short_name[HCI_MAX_SHORT_NAME_LENGTH];
212 	__u8		eir[HCI_MAX_EIR_LENGTH];
213 	__u8		dev_class[3];
214 	__u8		major_class;
215 	__u8		minor_class;
216 	__u8		max_page;
217 	__u8		features[HCI_MAX_PAGES][8];
218 	__u8		le_features[8];
219 	__u8		le_white_list_size;
220 	__u8		le_states[8];
221 	__u8		commands[64];
222 	__u8		hci_ver;
223 	__u16		hci_rev;
224 	__u8		lmp_ver;
225 	__u16		manufacturer;
226 	__u16		lmp_subver;
227 	__u16		voice_setting;
228 	__u8		num_iac;
229 	__u8		stored_max_keys;
230 	__u8		stored_num_keys;
231 	__u8		io_capability;
232 	__s8		inq_tx_power;
233 	__u16		page_scan_interval;
234 	__u16		page_scan_window;
235 	__u8		page_scan_type;
236 	__u8		le_adv_channel_map;
237 	__u16		le_adv_min_interval;
238 	__u16		le_adv_max_interval;
239 	__u8		le_scan_type;
240 	__u16		le_scan_interval;
241 	__u16		le_scan_window;
242 	__u16		le_conn_min_interval;
243 	__u16		le_conn_max_interval;
244 	__u16		le_conn_latency;
245 	__u16		le_supv_timeout;
246 	__u16		le_def_tx_len;
247 	__u16		le_def_tx_time;
248 	__u16		le_max_tx_len;
249 	__u16		le_max_tx_time;
250 	__u16		le_max_rx_len;
251 	__u16		le_max_rx_time;
252 	__u16		discov_interleaved_timeout;
253 	__u16		conn_info_min_age;
254 	__u16		conn_info_max_age;
255 	__u8		ssp_debug_mode;
256 	__u8		hw_error_code;
257 	__u32		clock;
258 
259 	__u16		devid_source;
260 	__u16		devid_vendor;
261 	__u16		devid_product;
262 	__u16		devid_version;
263 
264 	__u16		pkt_type;
265 	__u16		esco_type;
266 	__u16		link_policy;
267 	__u16		link_mode;
268 
269 	__u32		idle_timeout;
270 	__u16		sniff_min_interval;
271 	__u16		sniff_max_interval;
272 
273 	__u8		amp_status;
274 	__u32		amp_total_bw;
275 	__u32		amp_max_bw;
276 	__u32		amp_min_latency;
277 	__u32		amp_max_pdu;
278 	__u8		amp_type;
279 	__u16		amp_pal_cap;
280 	__u16		amp_assoc_size;
281 	__u32		amp_max_flush_to;
282 	__u32		amp_be_flush_to;
283 
284 	struct amp_assoc	loc_assoc;
285 
286 	__u8		flow_ctl_mode;
287 
288 	unsigned int	auto_accept_delay;
289 
290 	unsigned long	quirks;
291 
292 	atomic_t	cmd_cnt;
293 	unsigned int	acl_cnt;
294 	unsigned int	sco_cnt;
295 	unsigned int	le_cnt;
296 
297 	unsigned int	acl_mtu;
298 	unsigned int	sco_mtu;
299 	unsigned int	le_mtu;
300 	unsigned int	acl_pkts;
301 	unsigned int	sco_pkts;
302 	unsigned int	le_pkts;
303 
304 	__u16		block_len;
305 	__u16		block_mtu;
306 	__u16		num_blocks;
307 	__u16		block_cnt;
308 
309 	unsigned long	acl_last_tx;
310 	unsigned long	sco_last_tx;
311 	unsigned long	le_last_tx;
312 
313 	struct workqueue_struct	*workqueue;
314 	struct workqueue_struct	*req_workqueue;
315 
316 	struct work_struct	power_on;
317 	struct delayed_work	power_off;
318 	struct work_struct	error_reset;
319 
320 	__u16			discov_timeout;
321 	struct delayed_work	discov_off;
322 
323 	struct delayed_work	service_cache;
324 
325 	struct delayed_work	cmd_timer;
326 
327 	struct work_struct	rx_work;
328 	struct work_struct	cmd_work;
329 	struct work_struct	tx_work;
330 
331 	struct work_struct	discov_update;
332 	struct work_struct	bg_scan_update;
333 	struct work_struct	scan_update;
334 	struct work_struct	connectable_update;
335 	struct work_struct	discoverable_update;
336 	struct delayed_work	le_scan_disable;
337 	struct delayed_work	le_scan_restart;
338 
339 	struct sk_buff_head	rx_q;
340 	struct sk_buff_head	raw_q;
341 	struct sk_buff_head	cmd_q;
342 
343 	struct sk_buff		*sent_cmd;
344 
345 	struct mutex		req_lock;
346 	wait_queue_head_t	req_wait_q;
347 	__u32			req_status;
348 	__u32			req_result;
349 	struct sk_buff		*req_skb;
350 
351 	void			*smp_data;
352 	void			*smp_bredr_data;
353 
354 	struct discovery_state	discovery;
355 	struct hci_conn_hash	conn_hash;
356 
357 	struct list_head	mgmt_pending;
358 	struct list_head	blacklist;
359 	struct list_head	whitelist;
360 	struct list_head	uuids;
361 	struct list_head	link_keys;
362 	struct list_head	long_term_keys;
363 	struct list_head	identity_resolving_keys;
364 	struct list_head	remote_oob_data;
365 	struct list_head	le_white_list;
366 	struct list_head	le_conn_params;
367 	struct list_head	pend_le_conns;
368 	struct list_head	pend_le_reports;
369 
370 	struct hci_dev_stats	stat;
371 
372 	atomic_t		promisc;
373 
374 	struct dentry		*debugfs;
375 
376 	struct device		dev;
377 
378 	struct rfkill		*rfkill;
379 
380 	DECLARE_BITMAP(dev_flags, __HCI_NUM_FLAGS);
381 
382 	__s8			adv_tx_power;
383 	__u8			adv_data[HCI_MAX_AD_LENGTH];
384 	__u8			adv_data_len;
385 	__u8			scan_rsp_data[HCI_MAX_AD_LENGTH];
386 	__u8			scan_rsp_data_len;
387 
388 	struct list_head	adv_instances;
389 	unsigned int		adv_instance_cnt;
390 	__u8			cur_adv_instance;
391 	__u16			adv_instance_timeout;
392 	struct delayed_work	adv_instance_expire;
393 
394 	__u8			irk[16];
395 	__u32			rpa_timeout;
396 	struct delayed_work	rpa_expired;
397 	bdaddr_t		rpa;
398 
399 	int (*open)(struct hci_dev *hdev);
400 	int (*close)(struct hci_dev *hdev);
401 	int (*flush)(struct hci_dev *hdev);
402 	int (*setup)(struct hci_dev *hdev);
403 	int (*shutdown)(struct hci_dev *hdev);
404 	int (*send)(struct hci_dev *hdev, struct sk_buff *skb);
405 	void (*notify)(struct hci_dev *hdev, unsigned int evt);
406 	void (*hw_error)(struct hci_dev *hdev, u8 code);
407 	int (*post_init)(struct hci_dev *hdev);
408 	int (*set_diag)(struct hci_dev *hdev, bool enable);
409 	int (*set_bdaddr)(struct hci_dev *hdev, const bdaddr_t *bdaddr);
410 };
411 
412 #define HCI_PHY_HANDLE(handle)	(handle & 0xff)
413 
414 struct hci_conn {
415 	struct list_head list;
416 
417 	atomic_t	refcnt;
418 
419 	bdaddr_t	dst;
420 	__u8		dst_type;
421 	bdaddr_t	src;
422 	__u8		src_type;
423 	bdaddr_t	init_addr;
424 	__u8		init_addr_type;
425 	bdaddr_t	resp_addr;
426 	__u8		resp_addr_type;
427 	__u16		handle;
428 	__u16		state;
429 	__u8		mode;
430 	__u8		type;
431 	__u8		role;
432 	bool		out;
433 	__u8		attempt;
434 	__u8		dev_class[3];
435 	__u8		features[HCI_MAX_PAGES][8];
436 	__u16		pkt_type;
437 	__u16		link_policy;
438 	__u8		key_type;
439 	__u8		auth_type;
440 	__u8		sec_level;
441 	__u8		pending_sec_level;
442 	__u8		pin_length;
443 	__u8		enc_key_size;
444 	__u8		io_capability;
445 	__u32		passkey_notify;
446 	__u8		passkey_entered;
447 	__u16		disc_timeout;
448 	__u16		conn_timeout;
449 	__u16		setting;
450 	__u16		le_conn_min_interval;
451 	__u16		le_conn_max_interval;
452 	__u16		le_conn_interval;
453 	__u16		le_conn_latency;
454 	__u16		le_supv_timeout;
455 	__u8		le_adv_data[HCI_MAX_AD_LENGTH];
456 	__u8		le_adv_data_len;
457 	__s8		rssi;
458 	__s8		tx_power;
459 	__s8		max_tx_power;
460 	unsigned long	flags;
461 
462 	__u32		clock;
463 	__u16		clock_accuracy;
464 
465 	unsigned long	conn_info_timestamp;
466 
467 	__u8		remote_cap;
468 	__u8		remote_auth;
469 	__u8		remote_id;
470 
471 	unsigned int	sent;
472 
473 	struct sk_buff_head data_q;
474 	struct list_head chan_list;
475 
476 	struct delayed_work disc_work;
477 	struct delayed_work auto_accept_work;
478 	struct delayed_work idle_work;
479 	struct delayed_work le_conn_timeout;
480 	struct work_struct  le_scan_cleanup;
481 
482 	struct device	dev;
483 	struct dentry	*debugfs;
484 
485 	struct hci_dev	*hdev;
486 	void		*l2cap_data;
487 	void		*sco_data;
488 	struct amp_mgr	*amp_mgr;
489 
490 	struct hci_conn	*link;
491 
492 	void (*connect_cfm_cb)	(struct hci_conn *conn, u8 status);
493 	void (*security_cfm_cb)	(struct hci_conn *conn, u8 status);
494 	void (*disconn_cfm_cb)	(struct hci_conn *conn, u8 reason);
495 };
496 
497 struct hci_chan {
498 	struct list_head list;
499 	__u16 handle;
500 	struct hci_conn *conn;
501 	struct sk_buff_head data_q;
502 	unsigned int	sent;
503 	__u8		state;
504 };
505 
506 struct hci_conn_params {
507 	struct list_head list;
508 	struct list_head action;
509 
510 	bdaddr_t addr;
511 	u8 addr_type;
512 
513 	u16 conn_min_interval;
514 	u16 conn_max_interval;
515 	u16 conn_latency;
516 	u16 supervision_timeout;
517 
518 	enum {
519 		HCI_AUTO_CONN_DISABLED,
520 		HCI_AUTO_CONN_REPORT,
521 		HCI_AUTO_CONN_DIRECT,
522 		HCI_AUTO_CONN_ALWAYS,
523 		HCI_AUTO_CONN_LINK_LOSS,
524 		HCI_AUTO_CONN_EXPLICIT,
525 	} auto_connect;
526 
527 	struct hci_conn *conn;
528 	bool explicit_connect;
529 };
530 
531 extern struct list_head hci_dev_list;
532 extern struct list_head hci_cb_list;
533 extern rwlock_t hci_dev_list_lock;
534 extern struct mutex hci_cb_list_lock;
535 
536 #define hci_dev_set_flag(hdev, nr)             set_bit((nr), (hdev)->dev_flags)
537 #define hci_dev_clear_flag(hdev, nr)           clear_bit((nr), (hdev)->dev_flags)
538 #define hci_dev_change_flag(hdev, nr)          change_bit((nr), (hdev)->dev_flags)
539 #define hci_dev_test_flag(hdev, nr)            test_bit((nr), (hdev)->dev_flags)
540 #define hci_dev_test_and_set_flag(hdev, nr)    test_and_set_bit((nr), (hdev)->dev_flags)
541 #define hci_dev_test_and_clear_flag(hdev, nr)  test_and_clear_bit((nr), (hdev)->dev_flags)
542 #define hci_dev_test_and_change_flag(hdev, nr) test_and_change_bit((nr), (hdev)->dev_flags)
543 
544 #define hci_dev_clear_volatile_flags(hdev)			\
545 	do {							\
546 		hci_dev_clear_flag(hdev, HCI_LE_SCAN);		\
547 		hci_dev_clear_flag(hdev, HCI_LE_ADV);		\
548 		hci_dev_clear_flag(hdev, HCI_PERIODIC_INQ);	\
549 	} while (0)
550 
551 /* ----- HCI interface to upper protocols ----- */
552 int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr);
553 int l2cap_disconn_ind(struct hci_conn *hcon);
554 void l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
555 
556 #if IS_ENABLED(CONFIG_BT_BREDR)
557 int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
558 void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb);
559 #else
560 static inline int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
561 				  __u8 *flags)
562 {
563 	return 0;
564 }
565 
566 static inline void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb)
567 {
568 }
569 #endif
570 
571 /* ----- Inquiry cache ----- */
572 #define INQUIRY_CACHE_AGE_MAX   (HZ*30)   /* 30 seconds */
573 #define INQUIRY_ENTRY_AGE_MAX   (HZ*60)   /* 60 seconds */
574 
575 static inline void discovery_init(struct hci_dev *hdev)
576 {
577 	hdev->discovery.state = DISCOVERY_STOPPED;
578 	INIT_LIST_HEAD(&hdev->discovery.all);
579 	INIT_LIST_HEAD(&hdev->discovery.unknown);
580 	INIT_LIST_HEAD(&hdev->discovery.resolve);
581 	hdev->discovery.report_invalid_rssi = true;
582 	hdev->discovery.rssi = HCI_RSSI_INVALID;
583 }
584 
585 static inline void hci_discovery_filter_clear(struct hci_dev *hdev)
586 {
587 	hdev->discovery.result_filtering = false;
588 	hdev->discovery.report_invalid_rssi = true;
589 	hdev->discovery.rssi = HCI_RSSI_INVALID;
590 	hdev->discovery.uuid_count = 0;
591 	kfree(hdev->discovery.uuids);
592 	hdev->discovery.uuids = NULL;
593 	hdev->discovery.scan_start = 0;
594 	hdev->discovery.scan_duration = 0;
595 }
596 
597 bool hci_discovery_active(struct hci_dev *hdev);
598 
599 void hci_discovery_set_state(struct hci_dev *hdev, int state);
600 
601 static inline int inquiry_cache_empty(struct hci_dev *hdev)
602 {
603 	return list_empty(&hdev->discovery.all);
604 }
605 
606 static inline long inquiry_cache_age(struct hci_dev *hdev)
607 {
608 	struct discovery_state *c = &hdev->discovery;
609 	return jiffies - c->timestamp;
610 }
611 
612 static inline long inquiry_entry_age(struct inquiry_entry *e)
613 {
614 	return jiffies - e->timestamp;
615 }
616 
617 struct inquiry_entry *hci_inquiry_cache_lookup(struct hci_dev *hdev,
618 					       bdaddr_t *bdaddr);
619 struct inquiry_entry *hci_inquiry_cache_lookup_unknown(struct hci_dev *hdev,
620 						       bdaddr_t *bdaddr);
621 struct inquiry_entry *hci_inquiry_cache_lookup_resolve(struct hci_dev *hdev,
622 						       bdaddr_t *bdaddr,
623 						       int state);
624 void hci_inquiry_cache_update_resolve(struct hci_dev *hdev,
625 				      struct inquiry_entry *ie);
626 u32 hci_inquiry_cache_update(struct hci_dev *hdev, struct inquiry_data *data,
627 			     bool name_known);
628 void hci_inquiry_cache_flush(struct hci_dev *hdev);
629 
630 /* ----- HCI Connections ----- */
631 enum {
632 	HCI_CONN_AUTH_PEND,
633 	HCI_CONN_REAUTH_PEND,
634 	HCI_CONN_ENCRYPT_PEND,
635 	HCI_CONN_RSWITCH_PEND,
636 	HCI_CONN_MODE_CHANGE_PEND,
637 	HCI_CONN_SCO_SETUP_PEND,
638 	HCI_CONN_MGMT_CONNECTED,
639 	HCI_CONN_SSP_ENABLED,
640 	HCI_CONN_SC_ENABLED,
641 	HCI_CONN_AES_CCM,
642 	HCI_CONN_POWER_SAVE,
643 	HCI_CONN_FLUSH_KEY,
644 	HCI_CONN_ENCRYPT,
645 	HCI_CONN_AUTH,
646 	HCI_CONN_SECURE,
647 	HCI_CONN_FIPS,
648 	HCI_CONN_STK_ENCRYPT,
649 	HCI_CONN_AUTH_INITIATOR,
650 	HCI_CONN_DROP,
651 	HCI_CONN_PARAM_REMOVAL_PEND,
652 	HCI_CONN_NEW_LINK_KEY,
653 	HCI_CONN_SCANNING,
654 };
655 
656 static inline bool hci_conn_ssp_enabled(struct hci_conn *conn)
657 {
658 	struct hci_dev *hdev = conn->hdev;
659 	return hci_dev_test_flag(hdev, HCI_SSP_ENABLED) &&
660 	       test_bit(HCI_CONN_SSP_ENABLED, &conn->flags);
661 }
662 
663 static inline bool hci_conn_sc_enabled(struct hci_conn *conn)
664 {
665 	struct hci_dev *hdev = conn->hdev;
666 	return hci_dev_test_flag(hdev, HCI_SC_ENABLED) &&
667 	       test_bit(HCI_CONN_SC_ENABLED, &conn->flags);
668 }
669 
670 static inline void hci_conn_hash_add(struct hci_dev *hdev, struct hci_conn *c)
671 {
672 	struct hci_conn_hash *h = &hdev->conn_hash;
673 	list_add_rcu(&c->list, &h->list);
674 	switch (c->type) {
675 	case ACL_LINK:
676 		h->acl_num++;
677 		break;
678 	case AMP_LINK:
679 		h->amp_num++;
680 		break;
681 	case LE_LINK:
682 		h->le_num++;
683 		if (c->role == HCI_ROLE_SLAVE)
684 			h->le_num_slave++;
685 		break;
686 	case SCO_LINK:
687 	case ESCO_LINK:
688 		h->sco_num++;
689 		break;
690 	}
691 }
692 
693 static inline void hci_conn_hash_del(struct hci_dev *hdev, struct hci_conn *c)
694 {
695 	struct hci_conn_hash *h = &hdev->conn_hash;
696 
697 	list_del_rcu(&c->list);
698 	synchronize_rcu();
699 
700 	switch (c->type) {
701 	case ACL_LINK:
702 		h->acl_num--;
703 		break;
704 	case AMP_LINK:
705 		h->amp_num--;
706 		break;
707 	case LE_LINK:
708 		h->le_num--;
709 		if (c->role == HCI_ROLE_SLAVE)
710 			h->le_num_slave--;
711 		break;
712 	case SCO_LINK:
713 	case ESCO_LINK:
714 		h->sco_num--;
715 		break;
716 	}
717 }
718 
719 static inline unsigned int hci_conn_num(struct hci_dev *hdev, __u8 type)
720 {
721 	struct hci_conn_hash *h = &hdev->conn_hash;
722 	switch (type) {
723 	case ACL_LINK:
724 		return h->acl_num;
725 	case AMP_LINK:
726 		return h->amp_num;
727 	case LE_LINK:
728 		return h->le_num;
729 	case SCO_LINK:
730 	case ESCO_LINK:
731 		return h->sco_num;
732 	default:
733 		return 0;
734 	}
735 }
736 
737 static inline unsigned int hci_conn_count(struct hci_dev *hdev)
738 {
739 	struct hci_conn_hash *c = &hdev->conn_hash;
740 
741 	return c->acl_num + c->amp_num + c->sco_num + c->le_num;
742 }
743 
744 static inline __u8 hci_conn_lookup_type(struct hci_dev *hdev, __u16 handle)
745 {
746 	struct hci_conn_hash *h = &hdev->conn_hash;
747 	struct hci_conn *c;
748 	__u8 type = INVALID_LINK;
749 
750 	rcu_read_lock();
751 
752 	list_for_each_entry_rcu(c, &h->list, list) {
753 		if (c->handle == handle) {
754 			type = c->type;
755 			break;
756 		}
757 	}
758 
759 	rcu_read_unlock();
760 
761 	return type;
762 }
763 
764 static inline struct hci_conn *hci_conn_hash_lookup_handle(struct hci_dev *hdev,
765 								__u16 handle)
766 {
767 	struct hci_conn_hash *h = &hdev->conn_hash;
768 	struct hci_conn  *c;
769 
770 	rcu_read_lock();
771 
772 	list_for_each_entry_rcu(c, &h->list, list) {
773 		if (c->handle == handle) {
774 			rcu_read_unlock();
775 			return c;
776 		}
777 	}
778 	rcu_read_unlock();
779 
780 	return NULL;
781 }
782 
783 static inline struct hci_conn *hci_conn_hash_lookup_ba(struct hci_dev *hdev,
784 							__u8 type, bdaddr_t *ba)
785 {
786 	struct hci_conn_hash *h = &hdev->conn_hash;
787 	struct hci_conn  *c;
788 
789 	rcu_read_lock();
790 
791 	list_for_each_entry_rcu(c, &h->list, list) {
792 		if (c->type == type && !bacmp(&c->dst, ba)) {
793 			rcu_read_unlock();
794 			return c;
795 		}
796 	}
797 
798 	rcu_read_unlock();
799 
800 	return NULL;
801 }
802 
803 static inline struct hci_conn *hci_conn_hash_lookup_le(struct hci_dev *hdev,
804 						       bdaddr_t *ba,
805 						       __u8 ba_type)
806 {
807 	struct hci_conn_hash *h = &hdev->conn_hash;
808 	struct hci_conn  *c;
809 
810 	rcu_read_lock();
811 
812 	list_for_each_entry_rcu(c, &h->list, list) {
813 		if (c->type != LE_LINK)
814 		       continue;
815 
816 		if (ba_type == c->dst_type && !bacmp(&c->dst, ba)) {
817 			rcu_read_unlock();
818 			return c;
819 		}
820 	}
821 
822 	rcu_read_unlock();
823 
824 	return NULL;
825 }
826 
827 static inline struct hci_conn *hci_conn_hash_lookup_state(struct hci_dev *hdev,
828 							__u8 type, __u16 state)
829 {
830 	struct hci_conn_hash *h = &hdev->conn_hash;
831 	struct hci_conn  *c;
832 
833 	rcu_read_lock();
834 
835 	list_for_each_entry_rcu(c, &h->list, list) {
836 		if (c->type == type && c->state == state) {
837 			rcu_read_unlock();
838 			return c;
839 		}
840 	}
841 
842 	rcu_read_unlock();
843 
844 	return NULL;
845 }
846 
847 static inline struct hci_conn *hci_lookup_le_connect(struct hci_dev *hdev)
848 {
849 	struct hci_conn_hash *h = &hdev->conn_hash;
850 	struct hci_conn  *c;
851 
852 	rcu_read_lock();
853 
854 	list_for_each_entry_rcu(c, &h->list, list) {
855 		if (c->type == LE_LINK && c->state == BT_CONNECT &&
856 		    !test_bit(HCI_CONN_SCANNING, &c->flags)) {
857 			rcu_read_unlock();
858 			return c;
859 		}
860 	}
861 
862 	rcu_read_unlock();
863 
864 	return NULL;
865 }
866 
867 int hci_disconnect(struct hci_conn *conn, __u8 reason);
868 bool hci_setup_sync(struct hci_conn *conn, __u16 handle);
869 void hci_sco_setup(struct hci_conn *conn, __u8 status);
870 
871 struct hci_conn *hci_conn_add(struct hci_dev *hdev, int type, bdaddr_t *dst,
872 			      u8 role);
873 int hci_conn_del(struct hci_conn *conn);
874 void hci_conn_hash_flush(struct hci_dev *hdev);
875 void hci_conn_check_pending(struct hci_dev *hdev);
876 
877 struct hci_chan *hci_chan_create(struct hci_conn *conn);
878 void hci_chan_del(struct hci_chan *chan);
879 void hci_chan_list_flush(struct hci_conn *conn);
880 struct hci_chan *hci_chan_lookup_handle(struct hci_dev *hdev, __u16 handle);
881 
882 struct hci_conn *hci_connect_le_scan(struct hci_dev *hdev, bdaddr_t *dst,
883 				     u8 dst_type, u8 sec_level,
884 				     u16 conn_timeout);
885 struct hci_conn *hci_connect_le(struct hci_dev *hdev, bdaddr_t *dst,
886 				u8 dst_type, u8 sec_level, u16 conn_timeout,
887 				u8 role);
888 struct hci_conn *hci_connect_acl(struct hci_dev *hdev, bdaddr_t *dst,
889 				 u8 sec_level, u8 auth_type);
890 struct hci_conn *hci_connect_sco(struct hci_dev *hdev, int type, bdaddr_t *dst,
891 				 __u16 setting);
892 int hci_conn_check_link_mode(struct hci_conn *conn);
893 int hci_conn_check_secure(struct hci_conn *conn, __u8 sec_level);
894 int hci_conn_security(struct hci_conn *conn, __u8 sec_level, __u8 auth_type,
895 		      bool initiator);
896 int hci_conn_switch_role(struct hci_conn *conn, __u8 role);
897 
898 void hci_conn_enter_active_mode(struct hci_conn *conn, __u8 force_active);
899 
900 void hci_le_conn_failed(struct hci_conn *conn, u8 status);
901 
902 /*
903  * hci_conn_get() and hci_conn_put() are used to control the life-time of an
904  * "hci_conn" object. They do not guarantee that the hci_conn object is running,
905  * working or anything else. They just guarantee that the object is available
906  * and can be dereferenced. So you can use its locks, local variables and any
907  * other constant data.
908  * Before accessing runtime data, you _must_ lock the object and then check that
909  * it is still running. As soon as you release the locks, the connection might
910  * get dropped, though.
911  *
912  * On the other hand, hci_conn_hold() and hci_conn_drop() are used to control
913  * how long the underlying connection is held. So every channel that runs on the
914  * hci_conn object calls this to prevent the connection from disappearing. As
915  * long as you hold a device, you must also guarantee that you have a valid
916  * reference to the device via hci_conn_get() (or the initial reference from
917  * hci_conn_add()).
918  * The hold()/drop() ref-count is known to drop below 0 sometimes, which doesn't
919  * break because nobody cares for that. But this means, we cannot use
920  * _get()/_drop() in it, but require the caller to have a valid ref (FIXME).
921  */
922 
923 static inline struct hci_conn *hci_conn_get(struct hci_conn *conn)
924 {
925 	get_device(&conn->dev);
926 	return conn;
927 }
928 
929 static inline void hci_conn_put(struct hci_conn *conn)
930 {
931 	put_device(&conn->dev);
932 }
933 
934 static inline void hci_conn_hold(struct hci_conn *conn)
935 {
936 	BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
937 
938 	atomic_inc(&conn->refcnt);
939 	cancel_delayed_work(&conn->disc_work);
940 }
941 
942 static inline void hci_conn_drop(struct hci_conn *conn)
943 {
944 	BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
945 
946 	if (atomic_dec_and_test(&conn->refcnt)) {
947 		unsigned long timeo;
948 
949 		switch (conn->type) {
950 		case ACL_LINK:
951 		case LE_LINK:
952 			cancel_delayed_work(&conn->idle_work);
953 			if (conn->state == BT_CONNECTED) {
954 				timeo = conn->disc_timeout;
955 				if (!conn->out)
956 					timeo *= 2;
957 			} else {
958 				timeo = 0;
959 			}
960 			break;
961 
962 		case AMP_LINK:
963 			timeo = conn->disc_timeout;
964 			break;
965 
966 		default:
967 			timeo = 0;
968 			break;
969 		}
970 
971 		cancel_delayed_work(&conn->disc_work);
972 		queue_delayed_work(conn->hdev->workqueue,
973 				   &conn->disc_work, timeo);
974 	}
975 }
976 
977 /* ----- HCI Devices ----- */
978 static inline void hci_dev_put(struct hci_dev *d)
979 {
980 	BT_DBG("%s orig refcnt %d", d->name,
981 	       atomic_read(&d->dev.kobj.kref.refcount));
982 
983 	put_device(&d->dev);
984 }
985 
986 static inline struct hci_dev *hci_dev_hold(struct hci_dev *d)
987 {
988 	BT_DBG("%s orig refcnt %d", d->name,
989 	       atomic_read(&d->dev.kobj.kref.refcount));
990 
991 	get_device(&d->dev);
992 	return d;
993 }
994 
995 #define hci_dev_lock(d)		mutex_lock(&d->lock)
996 #define hci_dev_unlock(d)	mutex_unlock(&d->lock)
997 
998 #define to_hci_dev(d) container_of(d, struct hci_dev, dev)
999 #define to_hci_conn(c) container_of(c, struct hci_conn, dev)
1000 
1001 static inline void *hci_get_drvdata(struct hci_dev *hdev)
1002 {
1003 	return dev_get_drvdata(&hdev->dev);
1004 }
1005 
1006 static inline void hci_set_drvdata(struct hci_dev *hdev, void *data)
1007 {
1008 	dev_set_drvdata(&hdev->dev, data);
1009 }
1010 
1011 struct hci_dev *hci_dev_get(int index);
1012 struct hci_dev *hci_get_route(bdaddr_t *dst, bdaddr_t *src);
1013 
1014 struct hci_dev *hci_alloc_dev(void);
1015 void hci_free_dev(struct hci_dev *hdev);
1016 int hci_register_dev(struct hci_dev *hdev);
1017 void hci_unregister_dev(struct hci_dev *hdev);
1018 int hci_suspend_dev(struct hci_dev *hdev);
1019 int hci_resume_dev(struct hci_dev *hdev);
1020 int hci_reset_dev(struct hci_dev *hdev);
1021 int hci_dev_open(__u16 dev);
1022 int hci_dev_close(__u16 dev);
1023 int hci_dev_do_close(struct hci_dev *hdev);
1024 int hci_dev_reset(__u16 dev);
1025 int hci_dev_reset_stat(__u16 dev);
1026 int hci_dev_cmd(unsigned int cmd, void __user *arg);
1027 int hci_get_dev_list(void __user *arg);
1028 int hci_get_dev_info(void __user *arg);
1029 int hci_get_conn_list(void __user *arg);
1030 int hci_get_conn_info(struct hci_dev *hdev, void __user *arg);
1031 int hci_get_auth_info(struct hci_dev *hdev, void __user *arg);
1032 int hci_inquiry(void __user *arg);
1033 
1034 struct bdaddr_list *hci_bdaddr_list_lookup(struct list_head *list,
1035 					   bdaddr_t *bdaddr, u8 type);
1036 int hci_bdaddr_list_add(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1037 int hci_bdaddr_list_del(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1038 void hci_bdaddr_list_clear(struct list_head *list);
1039 
1040 struct hci_conn_params *hci_conn_params_lookup(struct hci_dev *hdev,
1041 					       bdaddr_t *addr, u8 addr_type);
1042 struct hci_conn_params *hci_conn_params_add(struct hci_dev *hdev,
1043 					    bdaddr_t *addr, u8 addr_type);
1044 void hci_conn_params_del(struct hci_dev *hdev, bdaddr_t *addr, u8 addr_type);
1045 void hci_conn_params_clear_disabled(struct hci_dev *hdev);
1046 
1047 struct hci_conn_params *hci_pend_le_action_lookup(struct list_head *list,
1048 						  bdaddr_t *addr,
1049 						  u8 addr_type);
1050 
1051 void hci_uuids_clear(struct hci_dev *hdev);
1052 
1053 void hci_link_keys_clear(struct hci_dev *hdev);
1054 struct link_key *hci_find_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1055 struct link_key *hci_add_link_key(struct hci_dev *hdev, struct hci_conn *conn,
1056 				  bdaddr_t *bdaddr, u8 *val, u8 type,
1057 				  u8 pin_len, bool *persistent);
1058 struct smp_ltk *hci_add_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1059 			    u8 addr_type, u8 type, u8 authenticated,
1060 			    u8 tk[16], u8 enc_size, __le16 ediv, __le64 rand);
1061 struct smp_ltk *hci_find_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1062 			     u8 addr_type, u8 role);
1063 int hci_remove_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 bdaddr_type);
1064 void hci_smp_ltks_clear(struct hci_dev *hdev);
1065 int hci_remove_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1066 
1067 struct smp_irk *hci_find_irk_by_rpa(struct hci_dev *hdev, bdaddr_t *rpa);
1068 struct smp_irk *hci_find_irk_by_addr(struct hci_dev *hdev, bdaddr_t *bdaddr,
1069 				     u8 addr_type);
1070 struct smp_irk *hci_add_irk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1071 			    u8 addr_type, u8 val[16], bdaddr_t *rpa);
1072 void hci_remove_irk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 addr_type);
1073 void hci_smp_irks_clear(struct hci_dev *hdev);
1074 
1075 bool hci_bdaddr_is_paired(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type);
1076 
1077 void hci_remote_oob_data_clear(struct hci_dev *hdev);
1078 struct oob_data *hci_find_remote_oob_data(struct hci_dev *hdev,
1079 					  bdaddr_t *bdaddr, u8 bdaddr_type);
1080 int hci_add_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1081 			    u8 bdaddr_type, u8 *hash192, u8 *rand192,
1082 			    u8 *hash256, u8 *rand256);
1083 int hci_remove_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1084 			       u8 bdaddr_type);
1085 
1086 void hci_adv_instances_clear(struct hci_dev *hdev);
1087 struct adv_info *hci_find_adv_instance(struct hci_dev *hdev, u8 instance);
1088 struct adv_info *hci_get_next_instance(struct hci_dev *hdev, u8 instance);
1089 int hci_add_adv_instance(struct hci_dev *hdev, u8 instance, u32 flags,
1090 			 u16 adv_data_len, u8 *adv_data,
1091 			 u16 scan_rsp_len, u8 *scan_rsp_data,
1092 			 u16 timeout, u16 duration);
1093 int hci_remove_adv_instance(struct hci_dev *hdev, u8 instance);
1094 
1095 void hci_event_packet(struct hci_dev *hdev, struct sk_buff *skb);
1096 
1097 int hci_recv_frame(struct hci_dev *hdev, struct sk_buff *skb);
1098 int hci_recv_diag(struct hci_dev *hdev, struct sk_buff *skb);
1099 
1100 void hci_init_sysfs(struct hci_dev *hdev);
1101 void hci_conn_init_sysfs(struct hci_conn *conn);
1102 void hci_conn_add_sysfs(struct hci_conn *conn);
1103 void hci_conn_del_sysfs(struct hci_conn *conn);
1104 
1105 #define SET_HCIDEV_DEV(hdev, pdev) ((hdev)->dev.parent = (pdev))
1106 
1107 /* ----- LMP capabilities ----- */
1108 #define lmp_encrypt_capable(dev)   ((dev)->features[0][0] & LMP_ENCRYPT)
1109 #define lmp_rswitch_capable(dev)   ((dev)->features[0][0] & LMP_RSWITCH)
1110 #define lmp_hold_capable(dev)      ((dev)->features[0][0] & LMP_HOLD)
1111 #define lmp_sniff_capable(dev)     ((dev)->features[0][0] & LMP_SNIFF)
1112 #define lmp_park_capable(dev)      ((dev)->features[0][1] & LMP_PARK)
1113 #define lmp_inq_rssi_capable(dev)  ((dev)->features[0][3] & LMP_RSSI_INQ)
1114 #define lmp_esco_capable(dev)      ((dev)->features[0][3] & LMP_ESCO)
1115 #define lmp_bredr_capable(dev)     (!((dev)->features[0][4] & LMP_NO_BREDR))
1116 #define lmp_le_capable(dev)        ((dev)->features[0][4] & LMP_LE)
1117 #define lmp_sniffsubr_capable(dev) ((dev)->features[0][5] & LMP_SNIFF_SUBR)
1118 #define lmp_pause_enc_capable(dev) ((dev)->features[0][5] & LMP_PAUSE_ENC)
1119 #define lmp_ext_inq_capable(dev)   ((dev)->features[0][6] & LMP_EXT_INQ)
1120 #define lmp_le_br_capable(dev)     (!!((dev)->features[0][6] & LMP_SIMUL_LE_BR))
1121 #define lmp_ssp_capable(dev)       ((dev)->features[0][6] & LMP_SIMPLE_PAIR)
1122 #define lmp_no_flush_capable(dev)  ((dev)->features[0][6] & LMP_NO_FLUSH)
1123 #define lmp_lsto_capable(dev)      ((dev)->features[0][7] & LMP_LSTO)
1124 #define lmp_inq_tx_pwr_capable(dev) ((dev)->features[0][7] & LMP_INQ_TX_PWR)
1125 #define lmp_ext_feat_capable(dev)  ((dev)->features[0][7] & LMP_EXTFEATURES)
1126 #define lmp_transp_capable(dev)    ((dev)->features[0][2] & LMP_TRANSPARENT)
1127 
1128 /* ----- Extended LMP capabilities ----- */
1129 #define lmp_csb_master_capable(dev) ((dev)->features[2][0] & LMP_CSB_MASTER)
1130 #define lmp_csb_slave_capable(dev)  ((dev)->features[2][0] & LMP_CSB_SLAVE)
1131 #define lmp_sync_train_capable(dev) ((dev)->features[2][0] & LMP_SYNC_TRAIN)
1132 #define lmp_sync_scan_capable(dev)  ((dev)->features[2][0] & LMP_SYNC_SCAN)
1133 #define lmp_sc_capable(dev)         ((dev)->features[2][1] & LMP_SC)
1134 #define lmp_ping_capable(dev)       ((dev)->features[2][1] & LMP_PING)
1135 
1136 /* ----- Host capabilities ----- */
1137 #define lmp_host_ssp_capable(dev)  ((dev)->features[1][0] & LMP_HOST_SSP)
1138 #define lmp_host_sc_capable(dev)   ((dev)->features[1][0] & LMP_HOST_SC)
1139 #define lmp_host_le_capable(dev)   (!!((dev)->features[1][0] & LMP_HOST_LE))
1140 #define lmp_host_le_br_capable(dev) (!!((dev)->features[1][0] & LMP_HOST_LE_BREDR))
1141 
1142 #define hdev_is_powered(dev)   (test_bit(HCI_UP, &(dev)->flags) && \
1143 				!hci_dev_test_flag(dev, HCI_AUTO_OFF))
1144 #define bredr_sc_enabled(dev)  (lmp_sc_capable(dev) && \
1145 				hci_dev_test_flag(dev, HCI_SC_ENABLED))
1146 
1147 /* ----- HCI protocols ----- */
1148 #define HCI_PROTO_DEFER             0x01
1149 
1150 static inline int hci_proto_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
1151 					__u8 type, __u8 *flags)
1152 {
1153 	switch (type) {
1154 	case ACL_LINK:
1155 		return l2cap_connect_ind(hdev, bdaddr);
1156 
1157 	case SCO_LINK:
1158 	case ESCO_LINK:
1159 		return sco_connect_ind(hdev, bdaddr, flags);
1160 
1161 	default:
1162 		BT_ERR("unknown link type %d", type);
1163 		return -EINVAL;
1164 	}
1165 }
1166 
1167 static inline int hci_proto_disconn_ind(struct hci_conn *conn)
1168 {
1169 	if (conn->type != ACL_LINK && conn->type != LE_LINK)
1170 		return HCI_ERROR_REMOTE_USER_TERM;
1171 
1172 	return l2cap_disconn_ind(conn);
1173 }
1174 
1175 /* ----- HCI callbacks ----- */
1176 struct hci_cb {
1177 	struct list_head list;
1178 
1179 	char *name;
1180 
1181 	void (*connect_cfm)	(struct hci_conn *conn, __u8 status);
1182 	void (*disconn_cfm)	(struct hci_conn *conn, __u8 status);
1183 	void (*security_cfm)	(struct hci_conn *conn, __u8 status,
1184 								__u8 encrypt);
1185 	void (*key_change_cfm)	(struct hci_conn *conn, __u8 status);
1186 	void (*role_switch_cfm)	(struct hci_conn *conn, __u8 status, __u8 role);
1187 };
1188 
1189 static inline void hci_connect_cfm(struct hci_conn *conn, __u8 status)
1190 {
1191 	struct hci_cb *cb;
1192 
1193 	mutex_lock(&hci_cb_list_lock);
1194 	list_for_each_entry(cb, &hci_cb_list, list) {
1195 		if (cb->connect_cfm)
1196 			cb->connect_cfm(conn, status);
1197 	}
1198 	mutex_unlock(&hci_cb_list_lock);
1199 
1200 	if (conn->connect_cfm_cb)
1201 		conn->connect_cfm_cb(conn, status);
1202 }
1203 
1204 static inline void hci_disconn_cfm(struct hci_conn *conn, __u8 reason)
1205 {
1206 	struct hci_cb *cb;
1207 
1208 	mutex_lock(&hci_cb_list_lock);
1209 	list_for_each_entry(cb, &hci_cb_list, list) {
1210 		if (cb->disconn_cfm)
1211 			cb->disconn_cfm(conn, reason);
1212 	}
1213 	mutex_unlock(&hci_cb_list_lock);
1214 
1215 	if (conn->disconn_cfm_cb)
1216 		conn->disconn_cfm_cb(conn, reason);
1217 }
1218 
1219 static inline void hci_auth_cfm(struct hci_conn *conn, __u8 status)
1220 {
1221 	struct hci_cb *cb;
1222 	__u8 encrypt;
1223 
1224 	if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->flags))
1225 		return;
1226 
1227 	encrypt = test_bit(HCI_CONN_ENCRYPT, &conn->flags) ? 0x01 : 0x00;
1228 
1229 	mutex_lock(&hci_cb_list_lock);
1230 	list_for_each_entry(cb, &hci_cb_list, list) {
1231 		if (cb->security_cfm)
1232 			cb->security_cfm(conn, status, encrypt);
1233 	}
1234 	mutex_unlock(&hci_cb_list_lock);
1235 
1236 	if (conn->security_cfm_cb)
1237 		conn->security_cfm_cb(conn, status);
1238 }
1239 
1240 static inline void hci_encrypt_cfm(struct hci_conn *conn, __u8 status,
1241 								__u8 encrypt)
1242 {
1243 	struct hci_cb *cb;
1244 
1245 	if (conn->sec_level == BT_SECURITY_SDP)
1246 		conn->sec_level = BT_SECURITY_LOW;
1247 
1248 	if (conn->pending_sec_level > conn->sec_level)
1249 		conn->sec_level = conn->pending_sec_level;
1250 
1251 	mutex_lock(&hci_cb_list_lock);
1252 	list_for_each_entry(cb, &hci_cb_list, list) {
1253 		if (cb->security_cfm)
1254 			cb->security_cfm(conn, status, encrypt);
1255 	}
1256 	mutex_unlock(&hci_cb_list_lock);
1257 
1258 	if (conn->security_cfm_cb)
1259 		conn->security_cfm_cb(conn, status);
1260 }
1261 
1262 static inline void hci_key_change_cfm(struct hci_conn *conn, __u8 status)
1263 {
1264 	struct hci_cb *cb;
1265 
1266 	mutex_lock(&hci_cb_list_lock);
1267 	list_for_each_entry(cb, &hci_cb_list, list) {
1268 		if (cb->key_change_cfm)
1269 			cb->key_change_cfm(conn, status);
1270 	}
1271 	mutex_unlock(&hci_cb_list_lock);
1272 }
1273 
1274 static inline void hci_role_switch_cfm(struct hci_conn *conn, __u8 status,
1275 								__u8 role)
1276 {
1277 	struct hci_cb *cb;
1278 
1279 	mutex_lock(&hci_cb_list_lock);
1280 	list_for_each_entry(cb, &hci_cb_list, list) {
1281 		if (cb->role_switch_cfm)
1282 			cb->role_switch_cfm(conn, status, role);
1283 	}
1284 	mutex_unlock(&hci_cb_list_lock);
1285 }
1286 
1287 static inline void *eir_get_data(u8 *eir, size_t eir_len, u8 type,
1288 				 size_t *data_len)
1289 {
1290 	size_t parsed = 0;
1291 
1292 	if (eir_len < 2)
1293 		return NULL;
1294 
1295 	while (parsed < eir_len - 1) {
1296 		u8 field_len = eir[0];
1297 
1298 		if (field_len == 0)
1299 			break;
1300 
1301 		parsed += field_len + 1;
1302 
1303 		if (parsed > eir_len)
1304 			break;
1305 
1306 		if (eir[1] != type) {
1307 			eir += field_len + 1;
1308 			continue;
1309 		}
1310 
1311 		/* Zero length data */
1312 		if (field_len == 1)
1313 			return NULL;
1314 
1315 		if (data_len)
1316 			*data_len = field_len - 1;
1317 
1318 		return &eir[2];
1319 	}
1320 
1321 	return NULL;
1322 }
1323 
1324 static inline bool hci_bdaddr_is_rpa(bdaddr_t *bdaddr, u8 addr_type)
1325 {
1326 	if (addr_type != ADDR_LE_DEV_RANDOM)
1327 		return false;
1328 
1329 	if ((bdaddr->b[5] & 0xc0) == 0x40)
1330 	       return true;
1331 
1332 	return false;
1333 }
1334 
1335 static inline bool hci_is_identity_address(bdaddr_t *addr, u8 addr_type)
1336 {
1337 	if (addr_type == ADDR_LE_DEV_PUBLIC)
1338 		return true;
1339 
1340 	/* Check for Random Static address type */
1341 	if ((addr->b[5] & 0xc0) == 0xc0)
1342 		return true;
1343 
1344 	return false;
1345 }
1346 
1347 static inline struct smp_irk *hci_get_irk(struct hci_dev *hdev,
1348 					  bdaddr_t *bdaddr, u8 addr_type)
1349 {
1350 	if (!hci_bdaddr_is_rpa(bdaddr, addr_type))
1351 		return NULL;
1352 
1353 	return hci_find_irk_by_rpa(hdev, bdaddr);
1354 }
1355 
1356 static inline int hci_check_conn_params(u16 min, u16 max, u16 latency,
1357 					u16 to_multiplier)
1358 {
1359 	u16 max_latency;
1360 
1361 	if (min > max || min < 6 || max > 3200)
1362 		return -EINVAL;
1363 
1364 	if (to_multiplier < 10 || to_multiplier > 3200)
1365 		return -EINVAL;
1366 
1367 	if (max >= to_multiplier * 8)
1368 		return -EINVAL;
1369 
1370 	max_latency = (to_multiplier * 4 / max) - 1;
1371 	if (latency > 499 || latency > max_latency)
1372 		return -EINVAL;
1373 
1374 	return 0;
1375 }
1376 
1377 int hci_register_cb(struct hci_cb *hcb);
1378 int hci_unregister_cb(struct hci_cb *hcb);
1379 
1380 struct sk_buff *__hci_cmd_sync(struct hci_dev *hdev, u16 opcode, u32 plen,
1381 			       const void *param, u32 timeout);
1382 struct sk_buff *__hci_cmd_sync_ev(struct hci_dev *hdev, u16 opcode, u32 plen,
1383 				  const void *param, u8 event, u32 timeout);
1384 
1385 int hci_send_cmd(struct hci_dev *hdev, __u16 opcode, __u32 plen,
1386 		 const void *param);
1387 void hci_send_acl(struct hci_chan *chan, struct sk_buff *skb, __u16 flags);
1388 void hci_send_sco(struct hci_conn *conn, struct sk_buff *skb);
1389 
1390 void *hci_sent_cmd_data(struct hci_dev *hdev, __u16 opcode);
1391 
1392 struct sk_buff *hci_cmd_sync(struct hci_dev *hdev, u16 opcode, u32 plen,
1393 			     const void *param, u32 timeout);
1394 
1395 /* ----- HCI Sockets ----- */
1396 void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb);
1397 void hci_send_to_channel(unsigned short channel, struct sk_buff *skb,
1398 			 int flag, struct sock *skip_sk);
1399 void hci_send_to_monitor(struct hci_dev *hdev, struct sk_buff *skb);
1400 
1401 void hci_sock_dev_event(struct hci_dev *hdev, int event);
1402 
1403 #define HCI_MGMT_VAR_LEN	BIT(0)
1404 #define HCI_MGMT_NO_HDEV	BIT(1)
1405 #define HCI_MGMT_UNTRUSTED	BIT(2)
1406 #define HCI_MGMT_UNCONFIGURED	BIT(3)
1407 
1408 struct hci_mgmt_handler {
1409 	int (*func) (struct sock *sk, struct hci_dev *hdev, void *data,
1410 		     u16 data_len);
1411 	size_t data_len;
1412 	unsigned long flags;
1413 };
1414 
1415 struct hci_mgmt_chan {
1416 	struct list_head list;
1417 	unsigned short channel;
1418 	size_t handler_count;
1419 	const struct hci_mgmt_handler *handlers;
1420 	void (*hdev_init) (struct sock *sk, struct hci_dev *hdev);
1421 };
1422 
1423 int hci_mgmt_chan_register(struct hci_mgmt_chan *c);
1424 void hci_mgmt_chan_unregister(struct hci_mgmt_chan *c);
1425 
1426 /* Management interface */
1427 #define DISCOV_TYPE_BREDR		(BIT(BDADDR_BREDR))
1428 #define DISCOV_TYPE_LE			(BIT(BDADDR_LE_PUBLIC) | \
1429 					 BIT(BDADDR_LE_RANDOM))
1430 #define DISCOV_TYPE_INTERLEAVED		(BIT(BDADDR_BREDR) | \
1431 					 BIT(BDADDR_LE_PUBLIC) | \
1432 					 BIT(BDADDR_LE_RANDOM))
1433 
1434 /* These LE scan and inquiry parameters were chosen according to LE General
1435  * Discovery Procedure specification.
1436  */
1437 #define DISCOV_LE_SCAN_WIN		0x12
1438 #define DISCOV_LE_SCAN_INT		0x12
1439 #define DISCOV_LE_TIMEOUT		10240	/* msec */
1440 #define DISCOV_INTERLEAVED_TIMEOUT	5120	/* msec */
1441 #define DISCOV_INTERLEAVED_INQUIRY_LEN	0x04
1442 #define DISCOV_BREDR_INQUIRY_LEN	0x08
1443 #define DISCOV_LE_RESTART_DELAY		msecs_to_jiffies(200)	/* msec */
1444 
1445 int mgmt_new_settings(struct hci_dev *hdev);
1446 void mgmt_index_added(struct hci_dev *hdev);
1447 void mgmt_index_removed(struct hci_dev *hdev);
1448 void mgmt_set_powered_failed(struct hci_dev *hdev, int err);
1449 void mgmt_power_on(struct hci_dev *hdev, int err);
1450 void __mgmt_power_off(struct hci_dev *hdev);
1451 void mgmt_new_link_key(struct hci_dev *hdev, struct link_key *key,
1452 		       bool persistent);
1453 void mgmt_device_connected(struct hci_dev *hdev, struct hci_conn *conn,
1454 			   u32 flags, u8 *name, u8 name_len);
1455 void mgmt_device_disconnected(struct hci_dev *hdev, bdaddr_t *bdaddr,
1456 			      u8 link_type, u8 addr_type, u8 reason,
1457 			      bool mgmt_connected);
1458 void mgmt_disconnect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr,
1459 			    u8 link_type, u8 addr_type, u8 status);
1460 void mgmt_connect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1461 			 u8 addr_type, u8 status);
1462 void mgmt_pin_code_request(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 secure);
1463 void mgmt_pin_code_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1464 				  u8 status);
1465 void mgmt_pin_code_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1466 				      u8 status);
1467 int mgmt_user_confirm_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
1468 			      u8 link_type, u8 addr_type, u32 value,
1469 			      u8 confirm_hint);
1470 int mgmt_user_confirm_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1471 				     u8 link_type, u8 addr_type, u8 status);
1472 int mgmt_user_confirm_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1473 					 u8 link_type, u8 addr_type, u8 status);
1474 int mgmt_user_passkey_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
1475 			      u8 link_type, u8 addr_type);
1476 int mgmt_user_passkey_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1477 				     u8 link_type, u8 addr_type, u8 status);
1478 int mgmt_user_passkey_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1479 					 u8 link_type, u8 addr_type, u8 status);
1480 int mgmt_user_passkey_notify(struct hci_dev *hdev, bdaddr_t *bdaddr,
1481 			     u8 link_type, u8 addr_type, u32 passkey,
1482 			     u8 entered);
1483 void mgmt_auth_failed(struct hci_conn *conn, u8 status);
1484 void mgmt_auth_enable_complete(struct hci_dev *hdev, u8 status);
1485 void mgmt_ssp_enable_complete(struct hci_dev *hdev, u8 enable, u8 status);
1486 void mgmt_set_class_of_dev_complete(struct hci_dev *hdev, u8 *dev_class,
1487 				    u8 status);
1488 void mgmt_set_local_name_complete(struct hci_dev *hdev, u8 *name, u8 status);
1489 void mgmt_start_discovery_complete(struct hci_dev *hdev, u8 status);
1490 void mgmt_stop_discovery_complete(struct hci_dev *hdev, u8 status);
1491 void mgmt_device_found(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1492 		       u8 addr_type, u8 *dev_class, s8 rssi, u32 flags,
1493 		       u8 *eir, u16 eir_len, u8 *scan_rsp, u8 scan_rsp_len);
1494 void mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1495 		      u8 addr_type, s8 rssi, u8 *name, u8 name_len);
1496 void mgmt_discovering(struct hci_dev *hdev, u8 discovering);
1497 bool mgmt_powering_down(struct hci_dev *hdev);
1498 void mgmt_new_ltk(struct hci_dev *hdev, struct smp_ltk *key, bool persistent);
1499 void mgmt_new_irk(struct hci_dev *hdev, struct smp_irk *irk, bool persistent);
1500 void mgmt_new_csrk(struct hci_dev *hdev, struct smp_csrk *csrk,
1501 		   bool persistent);
1502 void mgmt_new_conn_param(struct hci_dev *hdev, bdaddr_t *bdaddr,
1503 			 u8 bdaddr_type, u8 store_hint, u16 min_interval,
1504 			 u16 max_interval, u16 latency, u16 timeout);
1505 void mgmt_smp_complete(struct hci_conn *conn, bool complete);
1506 bool mgmt_get_connectable(struct hci_dev *hdev);
1507 void mgmt_set_connectable_complete(struct hci_dev *hdev, u8 status);
1508 void mgmt_set_discoverable_complete(struct hci_dev *hdev, u8 status);
1509 u8 mgmt_get_adv_discov_flags(struct hci_dev *hdev);
1510 void mgmt_advertising_added(struct sock *sk, struct hci_dev *hdev,
1511 			    u8 instance);
1512 void mgmt_advertising_removed(struct sock *sk, struct hci_dev *hdev,
1513 			      u8 instance);
1514 
1515 u8 hci_le_conn_update(struct hci_conn *conn, u16 min, u16 max, u16 latency,
1516 		      u16 to_multiplier);
1517 void hci_le_start_enc(struct hci_conn *conn, __le16 ediv, __le64 rand,
1518 		      __u8 ltk[16], __u8 key_size);
1519 
1520 void hci_copy_identity_address(struct hci_dev *hdev, bdaddr_t *bdaddr,
1521 			       u8 *bdaddr_type);
1522 
1523 #define SCO_AIRMODE_MASK       0x0003
1524 #define SCO_AIRMODE_CVSD       0x0000
1525 #define SCO_AIRMODE_TRANSP     0x0003
1526 
1527 #endif /* __HCI_CORE_H */
1528