drivers/bluetooth/hci_ldisc.c

   1 // SPDX-License-Identifier: GPL-2.0-or-later
   2 /*
   3  *
   4  *  Bluetooth HCI UART driver
   5  *
   6  *  Copyright (C) 2000-2001  Qualcomm Incorporated
   7  *  Copyright (C) 2002-2003  Maxim Krasnyansky <maxk@qualcomm.com>
   8  *  Copyright (C) 2004-2005  Marcel Holtmann <marcel@holtmann.org>
   9  */
  10
  11 #include <linux/module.h>
  12
  13 #include <linux/kernel.h>
  14 #include <linux/init.h>
  15 #include <linux/types.h>
  16 #include <linux/fcntl.h>
  17 #include <linux/interrupt.h>
  18 #include <linux/ptrace.h>
  19 #include <linux/poll.h>
  20
  21 #include <linux/slab.h>
  22 #include <linux/tty.h>
  23 #include <linux/errno.h>
  24 #include <linux/string.h>
  25 #include <linux/signal.h>
  26 #include <linux/ioctl.h>
  27 #include <linux/skbuff.h>
  28 #include <linux/firmware.h>
  29 #include <linux/serdev.h>
  30
  31 #include <net/bluetooth/bluetooth.h>
  32 #include <net/bluetooth/hci_core.h>
  33
  34 #include "btintel.h"
  35 #include "btbcm.h"
  36 #include "hci_uart.h"
  37
  38 #define VERSION "2.3"
  39
  40 static const struct hci_uart_proto *hup[HCI_UART_MAX_PROTO];
  41
  42 int hci_uart_register_proto(const struct hci_uart_proto *p)
  43 {
  44         if (p->id >= HCI_UART_MAX_PROTO)
  45                 return -EINVAL;
  46
  47         if (hup[p->id])
  48                 return -EEXIST;
  49
  50         hup[p->id] = p;
  51
  52         BT_INFO("HCI UART protocol %s registered", p->name);
  53
  54         return 0;
  55 }
  56
  57 int hci_uart_unregister_proto(const struct hci_uart_proto *p)
  58 {
  59         if (p->id >= HCI_UART_MAX_PROTO)
  60                 return -EINVAL;
  61
  62         if (!hup[p->id])
  63                 return -EINVAL;
  64
  65         hup[p->id] = NULL;
  66
  67         return 0;
  68 }
  69
  70 static const struct hci_uart_proto *hci_uart_get_proto(unsigned int id)
  71 {
  72         if (id >= HCI_UART_MAX_PROTO)
  73                 return NULL;
  74
  75         return hup[id];
  76 }
  77
  78 static inline void hci_uart_tx_complete(struct hci_uart *hu, int pkt_type)
  79 {
  80         struct hci_dev *hdev = hu->hdev;
  81
  82         /* Update HCI stat counters */
  83         switch (pkt_type) {
  84         case HCI_COMMAND_PKT:
  85                 hdev->stat.cmd_tx++;
  86                 break;
  87
  88         case HCI_ACLDATA_PKT:
  89                 hdev->stat.acl_tx++;
  90                 break;
  91
  92         case HCI_SCODATA_PKT:
  93                 hdev->stat.sco_tx++;
  94                 break;
  95         }
  96 }
  97
  98 static inline struct sk_buff *hci_uart_dequeue(struct hci_uart *hu)
  99 {
 100         struct sk_buff *skb = hu->tx_skb;
 101
 102         if (!skb) {
 103                 percpu_down_read(&hu->proto_lock);
 104
 105                 if (test_bit(HCI_UART_PROTO_READY, &hu->flags))
 106                         skb = hu->proto->dequeue(hu);
 107
 108                 percpu_up_read(&hu->proto_lock);
 109         } else {
 110                 hu->tx_skb = NULL;
 111         }
 112
 113         return skb;
 114 }
 115
 116 int hci_uart_tx_wakeup(struct hci_uart *hu)
 117 {
 118         /* This may be called in an IRQ context, so we can't sleep. Therefore
 119          * we try to acquire the lock only, and if that fails we assume the
 120          * tty is being closed because that is the only time the write lock is
 121          * acquired. If, however, at some point in the future the write lock
 122          * is also acquired in other situations, then this must be revisited.
 123          */
 124         if (!percpu_down_read_trylock(&hu->proto_lock))
 125                 return 0;
 126
 127         if (!test_bit(HCI_UART_PROTO_READY, &hu->flags))
 128                 goto no_schedule;
 129
 130         set_bit(HCI_UART_TX_WAKEUP, &hu->tx_state);
 131         if (test_and_set_bit(HCI_UART_SENDING, &hu->tx_state))
 132                 goto no_schedule;
 133
 134         BT_DBG("");
 135
 136         schedule_work(&hu->write_work);
 137
 138 no_schedule:
 139         percpu_up_read(&hu->proto_lock);
 140
 141         return 0;
 142 }
 143 EXPORT_SYMBOL_GPL(hci_uart_tx_wakeup);
 144
 145 static void hci_uart_write_work(struct work_struct *work)
 146 {
 147         struct hci_uart *hu = container_of(work, struct hci_uart, write_work);
 148         struct tty_struct *tty = hu->tty;
 149         struct hci_dev *hdev = hu->hdev;
 150         struct sk_buff *skb;
 151
 152         /* REVISIT: should we cope with bad skbs or ->write() returning
 153          * and error value ?
 154          */
 155
 156 restart:
 157         clear_bit(HCI_UART_TX_WAKEUP, &hu->tx_state);
 158
 159         while ((skb = hci_uart_dequeue(hu))) {
 160                 int len;
 161
 162                 set_bit(TTY_DO_WRITE_WAKEUP, &tty->flags);
 163                 len = tty->ops->write(tty, skb->data, skb->len);
 164                 hdev->stat.byte_tx += len;
 165
 166                 skb_pull(skb, len);
 167                 if (skb->len) {
 168                         hu->tx_skb = skb;
 169                         break;
 170                 }
 171
 172                 hci_uart_tx_complete(hu, hci_skb_pkt_type(skb));
 173                 kfree_skb(skb);
 174         }
 175
 176         clear_bit(HCI_UART_SENDING, &hu->tx_state);
 177         if (test_bit(HCI_UART_TX_WAKEUP, &hu->tx_state))
 178                 goto restart;
 179
 180         wake_up_bit(&hu->tx_state, HCI_UART_SENDING);
 181 }
 182
 183 void hci_uart_init_work(struct work_struct *work)
 184 {
 185         struct hci_uart *hu = container_of(work, struct hci_uart, init_ready);
 186         int err;
 187         struct hci_dev *hdev;
 188
 189         if (!test_and_clear_bit(HCI_UART_INIT_PENDING, &hu->hdev_flags))
 190                 return;
 191
 192         err = hci_register_dev(hu->hdev);
 193         if (err < 0) {
 194                 BT_ERR("Can't register HCI device");
 195                 clear_bit(HCI_UART_PROTO_READY, &hu->flags);
 196                 hu->proto->close(hu);
 197                 hdev = hu->hdev;
 198                 hu->hdev = NULL;
 199                 hci_free_dev(hdev);
 200                 return;
 201         }
 202
 203         set_bit(HCI_UART_REGISTERED, &hu->flags);
 204 }
 205
 206 int hci_uart_init_ready(struct hci_uart *hu)
 207 {
 208         if (!test_bit(HCI_UART_INIT_PENDING, &hu->hdev_flags))
 209                 return -EALREADY;
 210
 211         schedule_work(&hu->init_ready);
 212
 213         return 0;
 214 }
 215
 216 int hci_uart_wait_until_sent(struct hci_uart *hu)
 217 {
 218         return wait_on_bit_timeout(&hu->tx_state, HCI_UART_SENDING,
 219                                    TASK_INTERRUPTIBLE,
 220                                    msecs_to_jiffies(2000));
 221 }
 222
 223 /* ------- Interface to HCI layer ------ */
 224 /* Reset device */
 225 static int hci_uart_flush(struct hci_dev *hdev)
 226 {
 227         struct hci_uart *hu  = hci_get_drvdata(hdev);
 228         struct tty_struct *tty = hu->tty;
 229
 230         BT_DBG("hdev %p tty %p", hdev, tty);
 231
 232         if (hu->tx_skb) {
 233                 kfree_skb(hu->tx_skb); hu->tx_skb = NULL;
 234         }
 235
 236         /* Flush any pending characters in the driver and discipline. */
 237         tty_ldisc_flush(tty);
 238         tty_driver_flush_buffer(tty);
 239
 240         percpu_down_read(&hu->proto_lock);
 241
 242         if (test_bit(HCI_UART_PROTO_READY, &hu->flags))
 243                 hu->proto->flush(hu);
 244
 245         percpu_up_read(&hu->proto_lock);
 246
 247         return 0;
 248 }
 249
 250 /* Initialize device */
 251 static int hci_uart_open(struct hci_dev *hdev)
 252 {
 253         BT_DBG("%s %p", hdev->name, hdev);
 254
 255         /* Undo clearing this from hci_uart_close() */
 256         hdev->flush = hci_uart_flush;
 257
 258         return 0;
 259 }
 260
 261 /* Close device */
 262 static int hci_uart_close(struct hci_dev *hdev)
 263 {
 264         BT_DBG("hdev %p", hdev);
 265
 266         hci_uart_flush(hdev);
 267         hdev->flush = NULL;
 268         return 0;
 269 }
 270
 271 /* Send frames from HCI layer */
 272 static int hci_uart_send_frame(struct hci_dev *hdev, struct sk_buff *skb)
 273 {
 274         struct hci_uart *hu = hci_get_drvdata(hdev);
 275
 276         BT_DBG("%s: type %d len %d", hdev->name, hci_skb_pkt_type(skb),
 277                skb->len);
 278
 279         percpu_down_read(&hu->proto_lock);
 280
 281         if (!test_bit(HCI_UART_PROTO_READY, &hu->flags)) {
 282                 percpu_up_read(&hu->proto_lock);
 283                 return -EUNATCH;
 284         }
 285
 286         hu->proto->enqueue(hu, skb);
 287         percpu_up_read(&hu->proto_lock);
 288
 289         hci_uart_tx_wakeup(hu);
 290
 291         return 0;
 292 }
 293
 294 /* Check the underlying device or tty has flow control support */
 295 bool hci_uart_has_flow_control(struct hci_uart *hu)
 296 {
 297         /* serdev nodes check if the needed operations are present */
 298         if (hu->serdev)
 299                 return true;
 300
 301         if (hu->tty->driver->ops->tiocmget && hu->tty->driver->ops->tiocmset)
 302                 return true;
 303
 304         return false;
 305 }
 306
 307 /* Flow control or un-flow control the device */
 308 void hci_uart_set_flow_control(struct hci_uart *hu, bool enable)
 309 {
 310         struct tty_struct *tty = hu->tty;
 311         struct ktermios ktermios;
 312         int status;
 313         unsigned int set = 0;
 314         unsigned int clear = 0;
 315
 316         if (hu->serdev) {
 317                 serdev_device_set_flow_control(hu->serdev, !enable);
 318                 serdev_device_set_rts(hu->serdev, !enable);
 319                 return;
 320         }
 321
 322         if (enable) {
 323                 /* Disable hardware flow control */
 324                 ktermios = tty->termios;
 325                 ktermios.c_cflag &= ~CRTSCTS;
 326                 tty_set_termios(tty, &ktermios);
 327                 BT_DBG("Disabling hardware flow control: %s",
 328                        (tty->termios.c_cflag & CRTSCTS) ? "failed" : "success");
 329
 330                 /* Clear RTS to prevent the device from sending */
 331                 /* Most UARTs need OUT2 to enable interrupts */
 332                 status = tty->driver->ops->tiocmget(tty);
 333                 BT_DBG("Current tiocm 0x%x", status);
 334
 335                 set &= ~(TIOCM_OUT2 | TIOCM_RTS);
 336                 clear = ~set;
 337                 set &= TIOCM_DTR | TIOCM_RTS | TIOCM_OUT1 |
 338                        TIOCM_OUT2 | TIOCM_LOOP;
 339                 clear &= TIOCM_DTR | TIOCM_RTS | TIOCM_OUT1 |
 340                          TIOCM_OUT2 | TIOCM_LOOP;
 341                 status = tty->driver->ops->tiocmset(tty, set, clear);
 342                 BT_DBG("Clearing RTS: %s", status ? "failed" : "success");
 343         } else {
 344                 /* Set RTS to allow the device to send again */
 345                 status = tty->driver->ops->tiocmget(tty);
 346                 BT_DBG("Current tiocm 0x%x", status);
 347
 348                 set |= (TIOCM_OUT2 | TIOCM_RTS);
 349                 clear = ~set;
 350                 set &= TIOCM_DTR | TIOCM_RTS | TIOCM_OUT1 |
 351                        TIOCM_OUT2 | TIOCM_LOOP;
 352                 clear &= TIOCM_DTR | TIOCM_RTS | TIOCM_OUT1 |
 353                          TIOCM_OUT2 | TIOCM_LOOP;
 354                 status = tty->driver->ops->tiocmset(tty, set, clear);
 355                 BT_DBG("Setting RTS: %s", status ? "failed" : "success");
 356
 357                 /* Re-enable hardware flow control */
 358                 ktermios = tty->termios;
 359                 ktermios.c_cflag |= CRTSCTS;
 360                 tty_set_termios(tty, &ktermios);
 361                 BT_DBG("Enabling hardware flow control: %s",
 362                        !(tty->termios.c_cflag & CRTSCTS) ? "failed" : "success");
 363         }
 364 }
 365
 366 void hci_uart_set_speeds(struct hci_uart *hu, unsigned int init_speed,
 367                          unsigned int oper_speed)
 368 {
 369         hu->init_speed = init_speed;
 370         hu->oper_speed = oper_speed;
 371 }
 372
 373 void hci_uart_set_baudrate(struct hci_uart *hu, unsigned int speed)
 374 {
 375         struct tty_struct *tty = hu->tty;
 376         struct ktermios ktermios;
 377
 378         ktermios = tty->termios;
 379         ktermios.c_cflag &= ~CBAUD;
 380         tty_termios_encode_baud_rate(&ktermios, speed, speed);
 381
 382         /* tty_set_termios() return not checked as it is always 0 */
 383         tty_set_termios(tty, &ktermios);
 384
 385         BT_DBG("%s: New tty speeds: %d/%d", hu->hdev->name,
 386                tty->termios.c_ispeed, tty->termios.c_ospeed);
 387 }
 388
 389 static int hci_uart_setup(struct hci_dev *hdev)
 390 {
 391         struct hci_uart *hu = hci_get_drvdata(hdev);
 392         struct hci_rp_read_local_version *ver;
 393         struct sk_buff *skb;
 394         unsigned int speed;
 395         int err;
 396
 397         /* Init speed if any */
 398         if (hu->init_speed)
 399                 speed = hu->init_speed;
 400         else if (hu->proto->init_speed)
 401                 speed = hu->proto->init_speed;
 402         else
 403                 speed = 0;
 404
 405         if (speed)
 406                 hci_uart_set_baudrate(hu, speed);
 407
 408         /* Operational speed if any */
 409         if (hu->oper_speed)
 410                 speed = hu->oper_speed;
 411         else if (hu->proto->oper_speed)
 412                 speed = hu->proto->oper_speed;
 413         else
 414                 speed = 0;
 415
 416         if (hu->proto->set_baudrate && speed) {
 417                 err = hu->proto->set_baudrate(hu, speed);
 418                 if (!err)
 419                         hci_uart_set_baudrate(hu, speed);
 420         }
 421
 422         if (hu->proto->setup)
 423                 return hu->proto->setup(hu);
 424
 425         if (!test_bit(HCI_UART_VND_DETECT, &hu->hdev_flags))
 426                 return 0;
 427
 428         skb = __hci_cmd_sync(hdev, HCI_OP_READ_LOCAL_VERSION, 0, NULL,
 429                              HCI_INIT_TIMEOUT);
 430         if (IS_ERR(skb)) {
 431                 BT_ERR("%s: Reading local version information failed (%ld)",
 432                        hdev->name, PTR_ERR(skb));
 433                 return 0;
 434         }
 435
 436         if (skb->len != sizeof(*ver)) {
 437                 BT_ERR("%s: Event length mismatch for version information",
 438                        hdev->name);
 439                 goto done;
 440         }
 441
 442         ver = (struct hci_rp_read_local_version *)skb->data;
 443
 444         switch (le16_to_cpu(ver->manufacturer)) {
 445 #ifdef CONFIG_BT_HCIUART_INTEL
 446         case 2:
 447                 hdev->set_bdaddr = btintel_set_bdaddr;
 448                 btintel_check_bdaddr(hdev);
 449                 break;
 450 #endif
 451 #ifdef CONFIG_BT_HCIUART_BCM
 452         case 15:
 453                 hdev->set_bdaddr = btbcm_set_bdaddr;
 454                 btbcm_check_bdaddr(hdev);
 455                 break;
 456 #endif
 457         default:
 458                 break;
 459         }
 460
 461 done:
 462         kfree_skb(skb);
 463         return 0;
 464 }
 465
 466 /* ------ LDISC part ------ */
 467 /* hci_uart_tty_open
 468  *
 469  *     Called when line discipline changed to HCI_UART.
 470  *
 471  * Arguments:
 472  *     tty    pointer to tty info structure
 473  * Return Value:
 474  *     0 if success, otherwise error code
 475  */
 476 static int hci_uart_tty_open(struct tty_struct *tty)
 477 {
 478         struct hci_uart *hu;
 479
 480         BT_DBG("tty %p", tty);
 481
 482         if (!capable(CAP_NET_ADMIN))
 483                 return -EPERM;
 484
 485         /* Error if the tty has no write op instead of leaving an exploitable
 486          * hole
 487          */
 488         if (tty->ops->write == NULL)
 489                 return -EOPNOTSUPP;
 490
 491         hu = kzalloc(sizeof(struct hci_uart), GFP_KERNEL);
 492         if (!hu) {
 493                 BT_ERR("Can't allocate control structure");
 494                 return -ENFILE;
 495         }
 496         if (percpu_init_rwsem(&hu->proto_lock)) {
 497                 BT_ERR("Can't allocate semaphore structure");
 498                 kfree(hu);
 499                 return -ENOMEM;
 500         }
 501
 502         tty->disc_data = hu;
 503         hu->tty = tty;
 504         tty->receive_room = 65536;
 505
 506         /* disable alignment support by default */
 507         hu->alignment = 1;
 508         hu->padding = 0;
 509
 510         INIT_WORK(&hu->init_ready, hci_uart_init_work);
 511         INIT_WORK(&hu->write_work, hci_uart_write_work);
 512
 513         /* Flush any pending characters in the driver */
 514         tty_driver_flush_buffer(tty);
 515
 516         return 0;
 517 }
 518
 519 /* hci_uart_tty_close()
 520  *
 521  *    Called when the line discipline is changed to something
 522  *    else, the tty is closed, or the tty detects a hangup.
 523  */
 524 static void hci_uart_tty_close(struct tty_struct *tty)
 525 {
 526         struct hci_uart *hu = tty->disc_data;
 527         struct hci_dev *hdev;
 528
 529         BT_DBG("tty %p", tty);
 530
 531         /* Detach from the tty */
 532         tty->disc_data = NULL;
 533
 534         if (!hu)
 535                 return;
 536
 537         hdev = hu->hdev;
 538         if (hdev)
 539                 hci_uart_close(hdev);
 540
 541         if (test_bit(HCI_UART_PROTO_READY, &hu->flags)) {
 542                 percpu_down_write(&hu->proto_lock);
 543                 clear_bit(HCI_UART_PROTO_READY, &hu->flags);
 544                 percpu_up_write(&hu->proto_lock);
 545
 546                 cancel_work_sync(&hu->init_ready);
 547                 cancel_work_sync(&hu->write_work);
 548
 549                 if (hdev) {
 550                         if (test_bit(HCI_UART_REGISTERED, &hu->flags))
 551                                 hci_unregister_dev(hdev);
 552                         hci_free_dev(hdev);
 553                 }
 554                 hu->proto->close(hu);
 555         }
 556         clear_bit(HCI_UART_PROTO_SET, &hu->flags);
 557
 558         percpu_free_rwsem(&hu->proto_lock);
 559
 560         kfree(hu);
 561 }
 562
 563 /* hci_uart_tty_wakeup()
 564  *
 565  *    Callback for transmit wakeup. Called when low level
 566  *    device driver can accept more send data.
 567  *
 568  * Arguments:        tty    pointer to associated tty instance data
 569  * Return Value:    None
 570  */
 571 static void hci_uart_tty_wakeup(struct tty_struct *tty)
 572 {
 573         struct hci_uart *hu = tty->disc_data;
 574
 575         BT_DBG("");
 576
 577         if (!hu)
 578                 return;
 579
 580         clear_bit(TTY_DO_WRITE_WAKEUP, &tty->flags);
 581
 582         if (tty != hu->tty)
 583                 return;
 584
 585         if (test_bit(HCI_UART_PROTO_READY, &hu->flags))
 586                 hci_uart_tx_wakeup(hu);
 587 }
 588
 589 /* hci_uart_tty_receive()
 590  *
 591  *     Called by tty low level driver when receive data is
 592  *     available.
 593  *
 594  * Arguments:  tty          pointer to tty isntance data
 595  *             data         pointer to received data
 596  *             flags        pointer to flags for data
 597  *             count        count of received data in bytes
 598  *
 599  * Return Value:    None
 600  */
 601 static void hci_uart_tty_receive(struct tty_struct *tty, const u8 *data,
 602                                  const u8 *flags, size_t count)
 603 {
 604         struct hci_uart *hu = tty->disc_data;
 605
 606         if (!hu || tty != hu->tty)
 607                 return;
 608
 609         percpu_down_read(&hu->proto_lock);
 610
 611         if (!test_bit(HCI_UART_PROTO_READY, &hu->flags)) {
 612                 percpu_up_read(&hu->proto_lock);
 613                 return;
 614         }
 615
 616         /* It does not need a lock here as it is already protected by a mutex in
 617          * tty caller
 618          */
 619         hu->proto->recv(hu, data, count);
 620         percpu_up_read(&hu->proto_lock);
 621
 622         if (hu->hdev)
 623                 hu->hdev->stat.byte_rx += count;
 624
 625         tty_unthrottle(tty);
 626 }
 627
 628 static int hci_uart_register_dev(struct hci_uart *hu)
 629 {
 630         struct hci_dev *hdev;
 631         int err;
 632
 633         BT_DBG("");
 634
 635         /* Initialize and register HCI device */
 636         hdev = hci_alloc_dev();
 637         if (!hdev) {
 638                 BT_ERR("Can't allocate HCI device");
 639                 return -ENOMEM;
 640         }
 641
 642         hu->hdev = hdev;
 643
 644         hdev->bus = HCI_UART;
 645         hci_set_drvdata(hdev, hu);
 646
 647         /* Only when vendor specific setup callback is provided, consider
 648          * the manufacturer information valid. This avoids filling in the
 649          * value for Ericsson when nothing is specified.
 650          */
 651         if (hu->proto->setup)
 652                 hdev->manufacturer = hu->proto->manufacturer;
 653
 654         hdev->open  = hci_uart_open;
 655         hdev->close = hci_uart_close;
 656         hdev->flush = hci_uart_flush;
 657         hdev->send  = hci_uart_send_frame;
 658         hdev->setup = hci_uart_setup;
 659         SET_HCIDEV_DEV(hdev, hu->tty->dev);
 660
 661         if (test_bit(HCI_UART_RAW_DEVICE, &hu->hdev_flags))
 662                 set_bit(HCI_QUIRK_RAW_DEVICE, &hdev->quirks);
 663
 664         if (test_bit(HCI_UART_EXT_CONFIG, &hu->hdev_flags))
 665                 set_bit(HCI_QUIRK_EXTERNAL_CONFIG, &hdev->quirks);
 666
 667         if (!test_bit(HCI_UART_RESET_ON_INIT, &hu->hdev_flags))
 668                 set_bit(HCI_QUIRK_RESET_ON_CLOSE, &hdev->quirks);
 669
 670         if (test_bit(HCI_UART_CREATE_AMP, &hu->hdev_flags))
 671                 hdev->dev_type = HCI_AMP;
 672         else
 673                 hdev->dev_type = HCI_PRIMARY;
 674
 675         /* Only call open() for the protocol after hdev is fully initialized as
 676          * open() (or a timer/workqueue it starts) may attempt to reference it.
 677          */
 678         err = hu->proto->open(hu);
 679         if (err) {
 680                 hu->hdev = NULL;
 681                 hci_free_dev(hdev);
 682                 return err;
 683         }
 684
 685         if (test_bit(HCI_UART_INIT_PENDING, &hu->hdev_flags))
 686                 return 0;
 687
 688         if (hci_register_dev(hdev) < 0) {
 689                 BT_ERR("Can't register HCI device");
 690                 hu->proto->close(hu);
 691                 hu->hdev = NULL;
 692                 hci_free_dev(hdev);
 693                 return -ENODEV;
 694         }
 695
 696         set_bit(HCI_UART_REGISTERED, &hu->flags);
 697
 698         return 0;
 699 }
 700
 701 static int hci_uart_set_proto(struct hci_uart *hu, int id)
 702 {
 703         const struct hci_uart_proto *p;
 704         int err;
 705
 706         p = hci_uart_get_proto(id);
 707         if (!p)
 708                 return -EPROTONOSUPPORT;
 709
 710         hu->proto = p;
 711
 712         err = hci_uart_register_dev(hu);
 713         if (err) {
 714                 return err;
 715         }
 716
 717         set_bit(HCI_UART_PROTO_READY, &hu->flags);
 718         return 0;
 719 }
 720
 721 static int hci_uart_set_flags(struct hci_uart *hu, unsigned long flags)
 722 {
 723         unsigned long valid_flags = BIT(HCI_UART_RAW_DEVICE) |
 724                                     BIT(HCI_UART_RESET_ON_INIT) |
 725                                     BIT(HCI_UART_CREATE_AMP) |
 726                                     BIT(HCI_UART_INIT_PENDING) |
 727                                     BIT(HCI_UART_EXT_CONFIG) |
 728                                     BIT(HCI_UART_VND_DETECT);
 729
 730         if (flags & ~valid_flags)
 731                 return -EINVAL;
 732
 733         hu->hdev_flags = flags;
 734
 735         return 0;
 736 }
 737
 738 /* hci_uart_tty_ioctl()
 739  *
 740  *    Process IOCTL system call for the tty device.
 741  *
 742  * Arguments:
 743  *
 744  *    tty        pointer to tty instance data
 745  *    cmd        IOCTL command code
 746  *    arg        argument for IOCTL call (cmd dependent)
 747  *
 748  * Return Value:    Command dependent
 749  */
 750 static int hci_uart_tty_ioctl(struct tty_struct *tty, unsigned int cmd,
 751                               unsigned long arg)
 752 {
 753         struct hci_uart *hu = tty->disc_data;
 754         int err = 0;
 755
 756         BT_DBG("");
 757
 758         /* Verify the status of the device */
 759         if (!hu)
 760                 return -EBADF;
 761
 762         switch (cmd) {
 763         case HCIUARTSETPROTO:
 764                 if (!test_and_set_bit(HCI_UART_PROTO_SET, &hu->flags)) {
 765                         err = hci_uart_set_proto(hu, arg);
 766                         if (err)
 767                                 clear_bit(HCI_UART_PROTO_SET, &hu->flags);
 768                 } else
 769                         err = -EBUSY;
 770                 break;
 771
 772         case HCIUARTGETPROTO:
 773                 if (test_bit(HCI_UART_PROTO_SET, &hu->flags) &&
 774                     test_bit(HCI_UART_PROTO_READY, &hu->flags))
 775                         err = hu->proto->id;
 776                 else
 777                         err = -EUNATCH;
 778                 break;
 779
 780         case HCIUARTGETDEVICE:
 781                 if (test_bit(HCI_UART_REGISTERED, &hu->flags))
 782                         err = hu->hdev->id;
 783                 else
 784                         err = -EUNATCH;
 785                 break;
 786
 787         case HCIUARTSETFLAGS:
 788                 if (test_bit(HCI_UART_PROTO_SET, &hu->flags))
 789                         err = -EBUSY;
 790                 else
 791                         err = hci_uart_set_flags(hu, arg);
 792                 break;
 793
 794         case HCIUARTGETFLAGS:
 795                 err = hu->hdev_flags;
 796                 break;
 797
 798         default:
 799                 err = n_tty_ioctl_helper(tty, cmd, arg);
 800                 break;
 801         }
 802
 803         return err;
 804 }
 805
 806 /*
 807  * We don't provide read/write/poll interface for user space.
 808  */
 809 static ssize_t hci_uart_tty_read(struct tty_struct *tty, struct file *file,
 810                                  u8 *buf, size_t nr, void **cookie,
 811                                  unsigned long offset)
 812 {
 813         return 0;
 814 }
 815
 816 static ssize_t hci_uart_tty_write(struct tty_struct *tty, struct file *file,
 817                                   const u8 *data, size_t count)
 818 {
 819         return 0;
 820 }
 821
 822 static struct tty_ldisc_ops hci_uart_ldisc = {
 823         .owner          = THIS_MODULE,
 824         .num            = N_HCI,
 825         .name           = "n_hci",
 826         .open           = hci_uart_tty_open,
 827         .close          = hci_uart_tty_close,
 828         .read           = hci_uart_tty_read,
 829         .write          = hci_uart_tty_write,
 830         .ioctl          = hci_uart_tty_ioctl,
 831         .compat_ioctl   = hci_uart_tty_ioctl,
 832         .receive_buf    = hci_uart_tty_receive,
 833         .write_wakeup   = hci_uart_tty_wakeup,
 834 };
 835
 836 static int __init hci_uart_init(void)
 837 {
 838         int err;
 839
 840         BT_INFO("HCI UART driver ver %s", VERSION);
 841
 842         /* Register the tty discipline */
 843         err = tty_register_ldisc(&hci_uart_ldisc);
 844         if (err) {
 845                 BT_ERR("HCI line discipline registration failed. (%d)", err);
 846                 return err;
 847         }
 848
 849 #ifdef CONFIG_BT_HCIUART_H4
 850         h4_init();
 851 #endif
 852 #ifdef CONFIG_BT_HCIUART_BCSP
 853         bcsp_init();
 854 #endif
 855 #ifdef CONFIG_BT_HCIUART_LL
 856         ll_init();
 857 #endif
 858 #ifdef CONFIG_BT_HCIUART_ATH3K
 859         ath_init();
 860 #endif
 861 #ifdef CONFIG_BT_HCIUART_3WIRE
 862         h5_init();
 863 #endif
 864 #ifdef CONFIG_BT_HCIUART_INTEL
 865         intel_init();
 866 #endif
 867 #ifdef CONFIG_BT_HCIUART_BCM
 868         bcm_init();
 869 #endif
 870 #ifdef CONFIG_BT_HCIUART_QCA
 871         qca_init();
 872 #endif
 873 #ifdef CONFIG_BT_HCIUART_AG6XX
 874         ag6xx_init();
 875 #endif
 876 #ifdef CONFIG_BT_HCIUART_MRVL
 877         mrvl_init();
 878 #endif
 879
 880         return 0;
 881 }
 882
 883 static void __exit hci_uart_exit(void)
 884 {
 885 #ifdef CONFIG_BT_HCIUART_H4
 886         h4_deinit();
 887 #endif
 888 #ifdef CONFIG_BT_HCIUART_BCSP
 889         bcsp_deinit();
 890 #endif
 891 #ifdef CONFIG_BT_HCIUART_LL
 892         ll_deinit();
 893 #endif
 894 #ifdef CONFIG_BT_HCIUART_ATH3K
 895         ath_deinit();
 896 #endif
 897 #ifdef CONFIG_BT_HCIUART_3WIRE
 898         h5_deinit();
 899 #endif
 900 #ifdef CONFIG_BT_HCIUART_INTEL
 901         intel_deinit();
 902 #endif
 903 #ifdef CONFIG_BT_HCIUART_BCM
 904         bcm_deinit();
 905 #endif
 906 #ifdef CONFIG_BT_HCIUART_QCA
 907         qca_deinit();
 908 #endif
 909 #ifdef CONFIG_BT_HCIUART_AG6XX
 910         ag6xx_deinit();
 911 #endif
 912 #ifdef CONFIG_BT_HCIUART_MRVL
 913         mrvl_deinit();
 914 #endif
 915
 916         tty_unregister_ldisc(&hci_uart_ldisc);
 917 }
 918
 919 module_init(hci_uart_init);
 920 module_exit(hci_uart_exit);
 921
 922 MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
 923 MODULE_DESCRIPTION("Bluetooth HCI UART driver ver " VERSION);
 924 MODULE_VERSION(VERSION);
 925 MODULE_LICENSE("GPL");
 926 MODULE_ALIAS_LDISC(N_HCI);