include/net/bluetooth/hci_core.h

   1 /*
   2    BlueZ - Bluetooth protocol stack for Linux
   3    Copyright (c) 2000-2001, 2010, Code Aurora Forum. All rights reserved.
   4
   5    Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
   6
   7    This program is free software; you can redistribute it and/or modify
   8    it under the terms of the GNU General Public License version 2 as
   9    published by the Free Software Foundation;
  10
  11    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
  12    OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  13    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
  14    IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
  15    CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
  16    WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  17    ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  18    OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  19
  20    ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
  21    COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
  22    SOFTWARE IS DISCLAIMED.
  23 */
  24
  25 #ifndef __HCI_CORE_H
  26 #define __HCI_CORE_H
  27
  28 #include <linux/idr.h>
  29 #include <linux/leds.h>
  30 #include <linux/rculist.h>
  31
  32 #include <net/bluetooth/hci.h>
  33 #include <net/bluetooth/hci_sync.h>
  34 #include <net/bluetooth/hci_sock.h>
  35
  36 /* HCI priority */
  37 #define HCI_PRIO_MAX    7
  38
  39 /* HCI maximum id value */
  40 #define HCI_MAX_ID 10000
  41
  42 /* HCI Core structures */
  43 struct inquiry_data {
  44         bdaddr_t        bdaddr;
  45         __u8            pscan_rep_mode;
  46         __u8            pscan_period_mode;
  47         __u8            pscan_mode;
  48         __u8            dev_class[3];
  49         __le16          clock_offset;
  50         __s8            rssi;
  51         __u8            ssp_mode;
  52 };
  53
  54 struct inquiry_entry {
  55         struct list_head        all;            /* inq_cache.all */
  56         struct list_head        list;           /* unknown or resolve */
  57         enum {
  58                 NAME_NOT_KNOWN,
  59                 NAME_NEEDED,
  60                 NAME_PENDING,
  61                 NAME_KNOWN,
  62         } name_state;
  63         __u32                   timestamp;
  64         struct inquiry_data     data;
  65 };
  66
  67 struct discovery_state {
  68         int                     type;
  69         enum {
  70                 DISCOVERY_STOPPED,
  71                 DISCOVERY_STARTING,
  72                 DISCOVERY_FINDING,
  73                 DISCOVERY_RESOLVING,
  74                 DISCOVERY_STOPPING,
  75         } state;
  76         struct list_head        all;    /* All devices found during inquiry */
  77         struct list_head        unknown;        /* Name state not known */
  78         struct list_head        resolve;        /* Name needs to be resolved */
  79         __u32                   timestamp;
  80         bdaddr_t                last_adv_addr;
  81         u8                      last_adv_addr_type;
  82         s8                      last_adv_rssi;
  83         u32                     last_adv_flags;
  84         u8                      last_adv_data[HCI_MAX_AD_LENGTH];
  85         u8                      last_adv_data_len;
  86         bool                    report_invalid_rssi;
  87         bool                    result_filtering;
  88         bool                    limited;
  89         s8                      rssi;
  90         u16                     uuid_count;
  91         u8                      (*uuids)[16];
  92         unsigned long           scan_start;
  93         unsigned long           scan_duration;
  94         unsigned long           name_resolve_timeout;
  95 };
  96
  97 #define SUSPEND_NOTIFIER_TIMEOUT        msecs_to_jiffies(2000) /* 2 seconds */
  98
  99 enum suspend_tasks {
 100         SUSPEND_PAUSE_DISCOVERY,
 101         SUSPEND_UNPAUSE_DISCOVERY,
 102
 103         SUSPEND_PAUSE_ADVERTISING,
 104         SUSPEND_UNPAUSE_ADVERTISING,
 105
 106         SUSPEND_SCAN_DISABLE,
 107         SUSPEND_SCAN_ENABLE,
 108         SUSPEND_DISCONNECTING,
 109
 110         SUSPEND_POWERING_DOWN,
 111
 112         SUSPEND_PREPARE_NOTIFIER,
 113
 114         SUSPEND_SET_ADV_FILTER,
 115         __SUSPEND_NUM_TASKS
 116 };
 117
 118 enum suspended_state {
 119         BT_RUNNING = 0,
 120         BT_SUSPEND_DISCONNECT,
 121         BT_SUSPEND_CONFIGURE_WAKE,
 122 };
 123
 124 struct hci_conn_hash {
 125         struct list_head list;
 126         unsigned int     acl_num;
 127         unsigned int     amp_num;
 128         unsigned int     sco_num;
 129         unsigned int     iso_num;
 130         unsigned int     le_num;
 131         unsigned int     le_num_peripheral;
 132 };
 133
 134 struct bdaddr_list {
 135         struct list_head list;
 136         bdaddr_t bdaddr;
 137         u8 bdaddr_type;
 138 };
 139
 140 struct codec_list {
 141         struct list_head list;
 142         u8      id;
 143         __u16   cid;
 144         __u16   vid;
 145         u8      transport;
 146         u8      num_caps;
 147         u32     len;
 148         struct hci_codec_caps caps[];
 149 };
 150
 151 struct bdaddr_list_with_irk {
 152         struct list_head list;
 153         bdaddr_t bdaddr;
 154         u8 bdaddr_type;
 155         u8 peer_irk[16];
 156         u8 local_irk[16];
 157 };
 158
 159 /* Bitmask of connection flags */
 160 enum hci_conn_flags {
 161         HCI_CONN_FLAG_REMOTE_WAKEUP = 1,
 162         HCI_CONN_FLAG_DEVICE_PRIVACY = 2,
 163 };
 164 typedef u8 hci_conn_flags_t;
 165
 166 struct bdaddr_list_with_flags {
 167         struct list_head list;
 168         bdaddr_t bdaddr;
 169         u8 bdaddr_type;
 170         hci_conn_flags_t flags;
 171 };
 172
 173 struct bt_uuid {
 174         struct list_head list;
 175         u8 uuid[16];
 176         u8 size;
 177         u8 svc_hint;
 178 };
 179
 180 struct blocked_key {
 181         struct list_head list;
 182         struct rcu_head rcu;
 183         u8 type;
 184         u8 val[16];
 185 };
 186
 187 struct smp_csrk {
 188         bdaddr_t bdaddr;
 189         u8 bdaddr_type;
 190         u8 type;
 191         u8 val[16];
 192 };
 193
 194 struct smp_ltk {
 195         struct list_head list;
 196         struct rcu_head rcu;
 197         bdaddr_t bdaddr;
 198         u8 bdaddr_type;
 199         u8 authenticated;
 200         u8 type;
 201         u8 enc_size;
 202         __le16 ediv;
 203         __le64 rand;
 204         u8 val[16];
 205 };
 206
 207 struct smp_irk {
 208         struct list_head list;
 209         struct rcu_head rcu;
 210         bdaddr_t rpa;
 211         bdaddr_t bdaddr;
 212         u8 addr_type;
 213         u8 val[16];
 214 };
 215
 216 struct link_key {
 217         struct list_head list;
 218         struct rcu_head rcu;
 219         bdaddr_t bdaddr;
 220         u8 type;
 221         u8 val[HCI_LINK_KEY_SIZE];
 222         u8 pin_len;
 223 };
 224
 225 struct oob_data {
 226         struct list_head list;
 227         bdaddr_t bdaddr;
 228         u8 bdaddr_type;
 229         u8 present;
 230         u8 hash192[16];
 231         u8 rand192[16];
 232         u8 hash256[16];
 233         u8 rand256[16];
 234 };
 235
 236 struct adv_info {
 237         struct list_head list;
 238         bool    enabled;
 239         bool    pending;
 240         bool    periodic;
 241         __u8    mesh;
 242         __u8    instance;
 243         __u32   flags;
 244         __u16   timeout;
 245         __u16   remaining_time;
 246         __u16   duration;
 247         __u16   adv_data_len;
 248         __u8    adv_data[HCI_MAX_EXT_AD_LENGTH];
 249         bool    adv_data_changed;
 250         __u16   scan_rsp_len;
 251         __u8    scan_rsp_data[HCI_MAX_EXT_AD_LENGTH];
 252         bool    scan_rsp_changed;
 253         __u16   per_adv_data_len;
 254         __u8    per_adv_data[HCI_MAX_PER_AD_LENGTH];
 255         __s8    tx_power;
 256         __u32   min_interval;
 257         __u32   max_interval;
 258         bdaddr_t        random_addr;
 259         bool            rpa_expired;
 260         struct delayed_work     rpa_expired_cb;
 261 };
 262
 263 #define HCI_MAX_ADV_INSTANCES           5
 264 #define HCI_DEFAULT_ADV_DURATION        2
 265
 266 #define HCI_ADV_TX_POWER_NO_PREFERENCE 0x7F
 267
 268 #define DATA_CMP(_d1, _l1, _d2, _l2) \
 269         (_l1 == _l2 ? memcmp(_d1, _d2, _l1) : _l1 - _l2)
 270
 271 #define ADV_DATA_CMP(_adv, _data, _len) \
 272         DATA_CMP((_adv)->adv_data, (_adv)->adv_data_len, _data, _len)
 273
 274 #define SCAN_RSP_CMP(_adv, _data, _len) \
 275         DATA_CMP((_adv)->scan_rsp_data, (_adv)->scan_rsp_len, _data, _len)
 276
 277 struct monitored_device {
 278         struct list_head list;
 279
 280         bdaddr_t bdaddr;
 281         __u8     addr_type;
 282         __u16    handle;
 283         bool     notified;
 284 };
 285
 286 struct adv_pattern {
 287         struct list_head list;
 288         __u8 ad_type;
 289         __u8 offset;
 290         __u8 length;
 291         __u8 value[HCI_MAX_AD_LENGTH];
 292 };
 293
 294 struct adv_rssi_thresholds {
 295         __s8 low_threshold;
 296         __s8 high_threshold;
 297         __u16 low_threshold_timeout;
 298         __u16 high_threshold_timeout;
 299         __u8 sampling_period;
 300 };
 301
 302 struct adv_monitor {
 303         struct list_head patterns;
 304         struct adv_rssi_thresholds rssi;
 305         __u16           handle;
 306
 307         enum {
 308                 ADV_MONITOR_STATE_NOT_REGISTERED,
 309                 ADV_MONITOR_STATE_REGISTERED,
 310                 ADV_MONITOR_STATE_OFFLOADED
 311         } state;
 312 };
 313
 314 #define HCI_MIN_ADV_MONITOR_HANDLE              1
 315 #define HCI_MAX_ADV_MONITOR_NUM_HANDLES         32
 316 #define HCI_MAX_ADV_MONITOR_NUM_PATTERNS        16
 317 #define HCI_ADV_MONITOR_EXT_NONE                1
 318 #define HCI_ADV_MONITOR_EXT_MSFT                2
 319
 320 #define HCI_MAX_SHORT_NAME_LENGTH       10
 321
 322 #define HCI_CONN_HANDLE_UNSET           0xffff
 323 #define HCI_CONN_HANDLE_MAX             0x0eff
 324
 325 /* Min encryption key size to match with SMP */
 326 #define HCI_MIN_ENC_KEY_SIZE            7
 327
 328 /* Default LE RPA expiry time, 15 minutes */
 329 #define HCI_DEFAULT_RPA_TIMEOUT         (15 * 60)
 330
 331 /* Default min/max age of connection information (1s/3s) */
 332 #define DEFAULT_CONN_INFO_MIN_AGE       1000
 333 #define DEFAULT_CONN_INFO_MAX_AGE       3000
 334 /* Default authenticated payload timeout 30s */
 335 #define DEFAULT_AUTH_PAYLOAD_TIMEOUT   0x0bb8
 336
 337 struct amp_assoc {
 338         __u16   len;
 339         __u16   offset;
 340         __u16   rem_len;
 341         __u16   len_so_far;
 342         __u8    data[HCI_MAX_AMP_ASSOC_SIZE];
 343 };
 344
 345 #define HCI_MAX_PAGES   3
 346
 347 struct hci_dev {
 348         struct list_head list;
 349         struct mutex    lock;
 350
 351         char            name[8];
 352         unsigned long   flags;
 353         __u16           id;
 354         __u8            bus;
 355         __u8            dev_type;
 356         bdaddr_t        bdaddr;
 357         bdaddr_t        setup_addr;
 358         bdaddr_t        public_addr;
 359         bdaddr_t        random_addr;
 360         bdaddr_t        static_addr;
 361         __u8            adv_addr_type;
 362         __u8            dev_name[HCI_MAX_NAME_LENGTH];
 363         __u8            short_name[HCI_MAX_SHORT_NAME_LENGTH];
 364         __u8            eir[HCI_MAX_EIR_LENGTH];
 365         __u16           appearance;
 366         __u8            dev_class[3];
 367         __u8            major_class;
 368         __u8            minor_class;
 369         __u8            max_page;
 370         __u8            features[HCI_MAX_PAGES][8];
 371         __u8            le_features[8];
 372         __u8            le_accept_list_size;
 373         __u8            le_resolv_list_size;
 374         __u8            le_num_of_adv_sets;
 375         __u8            le_states[8];
 376         __u8            mesh_ad_types[16];
 377         __u8            mesh_send_ref;
 378         __u8            commands[64];
 379         __u8            hci_ver;
 380         __u16           hci_rev;
 381         __u8            lmp_ver;
 382         __u16           manufacturer;
 383         __u16           lmp_subver;
 384         __u16           voice_setting;
 385         __u8            num_iac;
 386         __u16           stored_max_keys;
 387         __u16           stored_num_keys;
 388         __u8            io_capability;
 389         __s8            inq_tx_power;
 390         __u8            err_data_reporting;
 391         __u16           page_scan_interval;
 392         __u16           page_scan_window;
 393         __u8            page_scan_type;
 394         __u8            le_adv_channel_map;
 395         __u16           le_adv_min_interval;
 396         __u16           le_adv_max_interval;
 397         __u8            le_scan_type;
 398         __u16           le_scan_interval;
 399         __u16           le_scan_window;
 400         __u16           le_scan_int_suspend;
 401         __u16           le_scan_window_suspend;
 402         __u16           le_scan_int_discovery;
 403         __u16           le_scan_window_discovery;
 404         __u16           le_scan_int_adv_monitor;
 405         __u16           le_scan_window_adv_monitor;
 406         __u16           le_scan_int_connect;
 407         __u16           le_scan_window_connect;
 408         __u16           le_conn_min_interval;
 409         __u16           le_conn_max_interval;
 410         __u16           le_conn_latency;
 411         __u16           le_supv_timeout;
 412         __u16           le_def_tx_len;
 413         __u16           le_def_tx_time;
 414         __u16           le_max_tx_len;
 415         __u16           le_max_tx_time;
 416         __u16           le_max_rx_len;
 417         __u16           le_max_rx_time;
 418         __u8            le_max_key_size;
 419         __u8            le_min_key_size;
 420         __u16           discov_interleaved_timeout;
 421         __u16           conn_info_min_age;
 422         __u16           conn_info_max_age;
 423         __u16           auth_payload_timeout;
 424         __u8            min_enc_key_size;
 425         __u8            max_enc_key_size;
 426         __u8            pairing_opts;
 427         __u8            ssp_debug_mode;
 428         __u8            hw_error_code;
 429         __u32           clock;
 430         __u16           advmon_allowlist_duration;
 431         __u16           advmon_no_filter_duration;
 432         __u8            enable_advmon_interleave_scan;
 433
 434         __u16           devid_source;
 435         __u16           devid_vendor;
 436         __u16           devid_product;
 437         __u16           devid_version;
 438
 439         __u8            def_page_scan_type;
 440         __u16           def_page_scan_int;
 441         __u16           def_page_scan_window;
 442         __u8            def_inq_scan_type;
 443         __u16           def_inq_scan_int;
 444         __u16           def_inq_scan_window;
 445         __u16           def_br_lsto;
 446         __u16           def_page_timeout;
 447         __u16           def_multi_adv_rotation_duration;
 448         __u16           def_le_autoconnect_timeout;
 449         __s8            min_le_tx_power;
 450         __s8            max_le_tx_power;
 451
 452         __u16           pkt_type;
 453         __u16           esco_type;
 454         __u16           link_policy;
 455         __u16           link_mode;
 456
 457         __u32           idle_timeout;
 458         __u16           sniff_min_interval;
 459         __u16           sniff_max_interval;
 460
 461         __u8            amp_status;
 462         __u32           amp_total_bw;
 463         __u32           amp_max_bw;
 464         __u32           amp_min_latency;
 465         __u32           amp_max_pdu;
 466         __u8            amp_type;
 467         __u16           amp_pal_cap;
 468         __u16           amp_assoc_size;
 469         __u32           amp_max_flush_to;
 470         __u32           amp_be_flush_to;
 471
 472         struct amp_assoc        loc_assoc;
 473
 474         __u8            flow_ctl_mode;
 475
 476         unsigned int    auto_accept_delay;
 477
 478         unsigned long   quirks;
 479
 480         atomic_t        cmd_cnt;
 481         unsigned int    acl_cnt;
 482         unsigned int    sco_cnt;
 483         unsigned int    le_cnt;
 484         unsigned int    iso_cnt;
 485
 486         unsigned int    acl_mtu;
 487         unsigned int    sco_mtu;
 488         unsigned int    le_mtu;
 489         unsigned int    iso_mtu;
 490         unsigned int    acl_pkts;
 491         unsigned int    sco_pkts;
 492         unsigned int    le_pkts;
 493         unsigned int    iso_pkts;
 494
 495         __u16           block_len;
 496         __u16           block_mtu;
 497         __u16           num_blocks;
 498         __u16           block_cnt;
 499
 500         unsigned long   acl_last_tx;
 501         unsigned long   sco_last_tx;
 502         unsigned long   le_last_tx;
 503
 504         __u8            le_tx_def_phys;
 505         __u8            le_rx_def_phys;
 506
 507         struct workqueue_struct *workqueue;
 508         struct workqueue_struct *req_workqueue;
 509
 510         struct work_struct      power_on;
 511         struct delayed_work     power_off;
 512         struct work_struct      error_reset;
 513         struct work_struct      cmd_sync_work;
 514         struct list_head        cmd_sync_work_list;
 515         struct mutex            cmd_sync_work_lock;
 516         struct work_struct      cmd_sync_cancel_work;
 517         struct work_struct      reenable_adv_work;
 518
 519         __u16                   discov_timeout;
 520         struct delayed_work     discov_off;
 521
 522         struct delayed_work     service_cache;
 523
 524         struct delayed_work     cmd_timer;
 525         struct delayed_work     ncmd_timer;
 526
 527         struct work_struct      rx_work;
 528         struct work_struct      cmd_work;
 529         struct work_struct      tx_work;
 530
 531         struct delayed_work     le_scan_disable;
 532         struct delayed_work     le_scan_restart;
 533
 534         struct sk_buff_head     rx_q;
 535         struct sk_buff_head     raw_q;
 536         struct sk_buff_head     cmd_q;
 537
 538         struct sk_buff          *sent_cmd;
 539         struct sk_buff          *recv_event;
 540
 541         struct mutex            req_lock;
 542         wait_queue_head_t       req_wait_q;
 543         __u32                   req_status;
 544         __u32                   req_result;
 545         struct sk_buff          *req_skb;
 546
 547         void                    *smp_data;
 548         void                    *smp_bredr_data;
 549
 550         struct discovery_state  discovery;
 551
 552         int                     discovery_old_state;
 553         bool                    discovery_paused;
 554         int                     advertising_old_state;
 555         bool                    advertising_paused;
 556
 557         struct notifier_block   suspend_notifier;
 558         enum suspended_state    suspend_state_next;
 559         enum suspended_state    suspend_state;
 560         bool                    scanning_paused;
 561         bool                    suspended;
 562         u8                      wake_reason;
 563         bdaddr_t                wake_addr;
 564         u8                      wake_addr_type;
 565
 566         struct hci_conn_hash    conn_hash;
 567
 568         struct list_head        mesh_pending;
 569         struct list_head        mgmt_pending;
 570         struct list_head        reject_list;
 571         struct list_head        accept_list;
 572         struct list_head        uuids;
 573         struct list_head        link_keys;
 574         struct list_head        long_term_keys;
 575         struct list_head        identity_resolving_keys;
 576         struct list_head        remote_oob_data;
 577         struct list_head        le_accept_list;
 578         struct list_head        le_resolv_list;
 579         struct list_head        le_conn_params;
 580         struct list_head        pend_le_conns;
 581         struct list_head        pend_le_reports;
 582         struct list_head        blocked_keys;
 583         struct list_head        local_codecs;
 584
 585         struct hci_dev_stats    stat;
 586
 587         atomic_t                promisc;
 588
 589         const char              *hw_info;
 590         const char              *fw_info;
 591         struct dentry           *debugfs;
 592
 593         struct device           dev;
 594
 595         struct rfkill           *rfkill;
 596
 597         DECLARE_BITMAP(dev_flags, __HCI_NUM_FLAGS);
 598         hci_conn_flags_t        conn_flags;
 599
 600         __s8                    adv_tx_power;
 601         __u8                    adv_data[HCI_MAX_EXT_AD_LENGTH];
 602         __u8                    adv_data_len;
 603         __u8                    scan_rsp_data[HCI_MAX_EXT_AD_LENGTH];
 604         __u8                    scan_rsp_data_len;
 605         __u8                    per_adv_data[HCI_MAX_PER_AD_LENGTH];
 606         __u8                    per_adv_data_len;
 607
 608         struct list_head        adv_instances;
 609         unsigned int            adv_instance_cnt;
 610         __u8                    cur_adv_instance;
 611         __u16                   adv_instance_timeout;
 612         struct delayed_work     adv_instance_expire;
 613
 614         struct idr              adv_monitors_idr;
 615         unsigned int            adv_monitors_cnt;
 616
 617         __u8                    irk[16];
 618         __u32                   rpa_timeout;
 619         struct delayed_work     rpa_expired;
 620         bdaddr_t                rpa;
 621
 622         struct delayed_work     mesh_send_done;
 623
 624         enum {
 625                 INTERLEAVE_SCAN_NONE,
 626                 INTERLEAVE_SCAN_NO_FILTER,
 627                 INTERLEAVE_SCAN_ALLOWLIST
 628         } interleave_scan_state;
 629
 630         struct delayed_work     interleave_scan;
 631
 632         struct list_head        monitored_devices;
 633         bool                    advmon_pend_notify;
 634
 635 #if IS_ENABLED(CONFIG_BT_LEDS)
 636         struct led_trigger      *power_led;
 637 #endif
 638
 639 #if IS_ENABLED(CONFIG_BT_MSFTEXT)
 640         __u16                   msft_opcode;
 641         void                    *msft_data;
 642         bool                    msft_curve_validity;
 643 #endif
 644
 645 #if IS_ENABLED(CONFIG_BT_AOSPEXT)
 646         bool                    aosp_capable;
 647         bool                    aosp_quality_report;
 648 #endif
 649
 650         int (*open)(struct hci_dev *hdev);
 651         int (*close)(struct hci_dev *hdev);
 652         int (*flush)(struct hci_dev *hdev);
 653         int (*setup)(struct hci_dev *hdev);
 654         int (*shutdown)(struct hci_dev *hdev);
 655         int (*send)(struct hci_dev *hdev, struct sk_buff *skb);
 656         void (*notify)(struct hci_dev *hdev, unsigned int evt);
 657         void (*hw_error)(struct hci_dev *hdev, u8 code);
 658         int (*post_init)(struct hci_dev *hdev);
 659         int (*set_diag)(struct hci_dev *hdev, bool enable);
 660         int (*set_bdaddr)(struct hci_dev *hdev, const bdaddr_t *bdaddr);
 661         void (*cmd_timeout)(struct hci_dev *hdev);
 662         void (*reset)(struct hci_dev *hdev);
 663         bool (*wakeup)(struct hci_dev *hdev);
 664         int (*set_quality_report)(struct hci_dev *hdev, bool enable);
 665         int (*get_data_path_id)(struct hci_dev *hdev, __u8 *data_path);
 666         int (*get_codec_config_data)(struct hci_dev *hdev, __u8 type,
 667                                      struct bt_codec *codec, __u8 *vnd_len,
 668                                      __u8 **vnd_data);
 669 };
 670
 671 #define HCI_PHY_HANDLE(handle)  (handle & 0xff)
 672
 673 enum conn_reasons {
 674         CONN_REASON_PAIR_DEVICE,
 675         CONN_REASON_L2CAP_CHAN,
 676         CONN_REASON_SCO_CONNECT,
 677         CONN_REASON_ISO_CONNECT,
 678 };
 679
 680 struct hci_conn {
 681         struct list_head list;
 682
 683         atomic_t        refcnt;
 684
 685         bdaddr_t        dst;
 686         __u8            dst_type;
 687         bdaddr_t        src;
 688         __u8            src_type;
 689         bdaddr_t        init_addr;
 690         __u8            init_addr_type;
 691         bdaddr_t        resp_addr;
 692         __u8            resp_addr_type;
 693         __u8            adv_instance;
 694         __u16           handle;
 695         __u16           sync_handle;
 696         __u16           state;
 697         __u8            mode;
 698         __u8            type;
 699         __u8            role;
 700         bool            out;
 701         __u8            attempt;
 702         __u8            dev_class[3];
 703         __u8            features[HCI_MAX_PAGES][8];
 704         __u16           pkt_type;
 705         __u16           link_policy;
 706         __u8            key_type;
 707         __u8            auth_type;
 708         __u8            sec_level;
 709         __u8            pending_sec_level;
 710         __u8            pin_length;
 711         __u8            enc_key_size;
 712         __u8            io_capability;
 713         __u32           passkey_notify;
 714         __u8            passkey_entered;
 715         __u16           disc_timeout;
 716         __u16           conn_timeout;
 717         __u16           setting;
 718         __u16           auth_payload_timeout;
 719         __u16           le_conn_min_interval;
 720         __u16           le_conn_max_interval;
 721         __u16           le_conn_interval;
 722         __u16           le_conn_latency;
 723         __u16           le_supv_timeout;
 724         __u8            le_adv_data[HCI_MAX_AD_LENGTH];
 725         __u8            le_adv_data_len;
 726         __u8            le_per_adv_data[HCI_MAX_PER_AD_LENGTH];
 727         __u8            le_per_adv_data_len;
 728         __u8            le_tx_phy;
 729         __u8            le_rx_phy;
 730         __s8            rssi;
 731         __s8            tx_power;
 732         __s8            max_tx_power;
 733         struct bt_iso_qos iso_qos;
 734         unsigned long   flags;
 735
 736         enum conn_reasons conn_reason;
 737
 738         __u32           clock;
 739         __u16           clock_accuracy;
 740
 741         unsigned long   conn_info_timestamp;
 742
 743         __u8            remote_cap;
 744         __u8            remote_auth;
 745         __u8            remote_id;
 746
 747         unsigned int    sent;
 748
 749         struct sk_buff_head data_q;
 750         struct list_head chan_list;
 751
 752         struct delayed_work disc_work;
 753         struct delayed_work auto_accept_work;
 754         struct delayed_work idle_work;
 755         struct delayed_work le_conn_timeout;
 756         struct work_struct  le_scan_cleanup;
 757
 758         struct device   dev;
 759         struct dentry   *debugfs;
 760
 761         struct hci_dev  *hdev;
 762         void            *l2cap_data;
 763         void            *sco_data;
 764         void            *iso_data;
 765         struct amp_mgr  *amp_mgr;
 766
 767         struct hci_conn *link;
 768         struct bt_codec codec;
 769
 770         void (*connect_cfm_cb)  (struct hci_conn *conn, u8 status);
 771         void (*security_cfm_cb) (struct hci_conn *conn, u8 status);
 772         void (*disconn_cfm_cb)  (struct hci_conn *conn, u8 reason);
 773
 774         void (*cleanup)(struct hci_conn *conn);
 775 };
 776
 777 struct hci_chan {
 778         struct list_head list;
 779         __u16 handle;
 780         struct hci_conn *conn;
 781         struct sk_buff_head data_q;
 782         unsigned int    sent;
 783         __u8            state;
 784         bool            amp;
 785 };
 786
 787 struct hci_conn_params {
 788         struct list_head list;
 789         struct list_head action;
 790
 791         bdaddr_t addr;
 792         u8 addr_type;
 793
 794         u16 conn_min_interval;
 795         u16 conn_max_interval;
 796         u16 conn_latency;
 797         u16 supervision_timeout;
 798
 799         enum {
 800                 HCI_AUTO_CONN_DISABLED,
 801                 HCI_AUTO_CONN_REPORT,
 802                 HCI_AUTO_CONN_DIRECT,
 803                 HCI_AUTO_CONN_ALWAYS,
 804                 HCI_AUTO_CONN_LINK_LOSS,
 805                 HCI_AUTO_CONN_EXPLICIT,
 806         } auto_connect;
 807
 808         struct hci_conn *conn;
 809         bool explicit_connect;
 810         hci_conn_flags_t flags;
 811         u8  privacy_mode;
 812 };
 813
 814 extern struct list_head hci_dev_list;
 815 extern struct list_head hci_cb_list;
 816 extern rwlock_t hci_dev_list_lock;
 817 extern struct mutex hci_cb_list_lock;
 818
 819 #define hci_dev_set_flag(hdev, nr)             set_bit((nr), (hdev)->dev_flags)
 820 #define hci_dev_clear_flag(hdev, nr)           clear_bit((nr), (hdev)->dev_flags)
 821 #define hci_dev_change_flag(hdev, nr)          change_bit((nr), (hdev)->dev_flags)
 822 #define hci_dev_test_flag(hdev, nr)            test_bit((nr), (hdev)->dev_flags)
 823 #define hci_dev_test_and_set_flag(hdev, nr)    test_and_set_bit((nr), (hdev)->dev_flags)
 824 #define hci_dev_test_and_clear_flag(hdev, nr)  test_and_clear_bit((nr), (hdev)->dev_flags)
 825 #define hci_dev_test_and_change_flag(hdev, nr) test_and_change_bit((nr), (hdev)->dev_flags)
 826
 827 #define hci_dev_clear_volatile_flags(hdev)                      \
 828         do {                                                    \
 829                 hci_dev_clear_flag(hdev, HCI_LE_SCAN);          \
 830                 hci_dev_clear_flag(hdev, HCI_LE_ADV);           \
 831                 hci_dev_clear_flag(hdev, HCI_LL_RPA_RESOLUTION);\
 832                 hci_dev_clear_flag(hdev, HCI_PERIODIC_INQ);     \
 833                 hci_dev_clear_flag(hdev, HCI_QUALITY_REPORT);   \
 834         } while (0)
 835
 836 #define hci_dev_le_state_simultaneous(hdev) \
 837         (test_bit(HCI_QUIRK_VALID_LE_STATES, &hdev->quirks) && \
 838          (hdev->le_states[4] & 0x08) && /* Central */ \
 839          (hdev->le_states[4] & 0x40) && /* Peripheral */ \
 840          (hdev->le_states[3] & 0x10))   /* Simultaneous */
 841
 842 /* ----- HCI interface to upper protocols ----- */
 843 int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr);
 844 int l2cap_disconn_ind(struct hci_conn *hcon);
 845 void l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
 846
 847 #if IS_ENABLED(CONFIG_BT_BREDR)
 848 int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
 849 void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb);
 850 #else
 851 static inline int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
 852                                   __u8 *flags)
 853 {
 854         return 0;
 855 }
 856
 857 static inline void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb)
 858 {
 859 }
 860 #endif
 861
 862 #if IS_ENABLED(CONFIG_BT_LE)
 863 int iso_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
 864 void iso_recv(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
 865 #else
 866 static inline int iso_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
 867                                   __u8 *flags)
 868 {
 869         return 0;
 870 }
 871 static inline void iso_recv(struct hci_conn *hcon, struct sk_buff *skb,
 872                             u16 flags)
 873 {
 874 }
 875 #endif
 876
 877 /* ----- Inquiry cache ----- */
 878 #define INQUIRY_CACHE_AGE_MAX   (HZ*30)   /* 30 seconds */
 879 #define INQUIRY_ENTRY_AGE_MAX   (HZ*60)   /* 60 seconds */
 880
 881 static inline void discovery_init(struct hci_dev *hdev)
 882 {
 883         hdev->discovery.state = DISCOVERY_STOPPED;
 884         INIT_LIST_HEAD(&hdev->discovery.all);
 885         INIT_LIST_HEAD(&hdev->discovery.unknown);
 886         INIT_LIST_HEAD(&hdev->discovery.resolve);
 887         hdev->discovery.report_invalid_rssi = true;
 888         hdev->discovery.rssi = HCI_RSSI_INVALID;
 889 }
 890
 891 static inline void hci_discovery_filter_clear(struct hci_dev *hdev)
 892 {
 893         hdev->discovery.result_filtering = false;
 894         hdev->discovery.report_invalid_rssi = true;
 895         hdev->discovery.rssi = HCI_RSSI_INVALID;
 896         hdev->discovery.uuid_count = 0;
 897         kfree(hdev->discovery.uuids);
 898         hdev->discovery.uuids = NULL;
 899         hdev->discovery.scan_start = 0;
 900         hdev->discovery.scan_duration = 0;
 901 }
 902
 903 bool hci_discovery_active(struct hci_dev *hdev);
 904
 905 void hci_discovery_set_state(struct hci_dev *hdev, int state);
 906
 907 static inline int inquiry_cache_empty(struct hci_dev *hdev)
 908 {
 909         return list_empty(&hdev->discovery.all);
 910 }
 911
 912 static inline long inquiry_cache_age(struct hci_dev *hdev)
 913 {
 914         struct discovery_state *c = &hdev->discovery;
 915         return jiffies - c->timestamp;
 916 }
 917
 918 static inline long inquiry_entry_age(struct inquiry_entry *e)
 919 {
 920         return jiffies - e->timestamp;
 921 }
 922
 923 struct inquiry_entry *hci_inquiry_cache_lookup(struct hci_dev *hdev,
 924                                                bdaddr_t *bdaddr);
 925 struct inquiry_entry *hci_inquiry_cache_lookup_unknown(struct hci_dev *hdev,
 926                                                        bdaddr_t *bdaddr);
 927 struct inquiry_entry *hci_inquiry_cache_lookup_resolve(struct hci_dev *hdev,
 928                                                        bdaddr_t *bdaddr,
 929                                                        int state);
 930 void hci_inquiry_cache_update_resolve(struct hci_dev *hdev,
 931                                       struct inquiry_entry *ie);
 932 u32 hci_inquiry_cache_update(struct hci_dev *hdev, struct inquiry_data *data,
 933                              bool name_known);
 934 void hci_inquiry_cache_flush(struct hci_dev *hdev);
 935
 936 /* ----- HCI Connections ----- */
 937 enum {
 938         HCI_CONN_AUTH_PEND,
 939         HCI_CONN_REAUTH_PEND,
 940         HCI_CONN_ENCRYPT_PEND,
 941         HCI_CONN_RSWITCH_PEND,
 942         HCI_CONN_MODE_CHANGE_PEND,
 943         HCI_CONN_SCO_SETUP_PEND,
 944         HCI_CONN_MGMT_CONNECTED,
 945         HCI_CONN_SSP_ENABLED,
 946         HCI_CONN_SC_ENABLED,
 947         HCI_CONN_AES_CCM,
 948         HCI_CONN_POWER_SAVE,
 949         HCI_CONN_FLUSH_KEY,
 950         HCI_CONN_ENCRYPT,
 951         HCI_CONN_AUTH,
 952         HCI_CONN_SECURE,
 953         HCI_CONN_FIPS,
 954         HCI_CONN_STK_ENCRYPT,
 955         HCI_CONN_AUTH_INITIATOR,
 956         HCI_CONN_DROP,
 957         HCI_CONN_PARAM_REMOVAL_PEND,
 958         HCI_CONN_NEW_LINK_KEY,
 959         HCI_CONN_SCANNING,
 960         HCI_CONN_AUTH_FAILURE,
 961         HCI_CONN_PER_ADV,
 962 };
 963
 964 static inline bool hci_conn_ssp_enabled(struct hci_conn *conn)
 965 {
 966         struct hci_dev *hdev = conn->hdev;
 967         return hci_dev_test_flag(hdev, HCI_SSP_ENABLED) &&
 968                test_bit(HCI_CONN_SSP_ENABLED, &conn->flags);
 969 }
 970
 971 static inline bool hci_conn_sc_enabled(struct hci_conn *conn)
 972 {
 973         struct hci_dev *hdev = conn->hdev;
 974         return hci_dev_test_flag(hdev, HCI_SC_ENABLED) &&
 975                test_bit(HCI_CONN_SC_ENABLED, &conn->flags);
 976 }
 977
 978 static inline void hci_conn_hash_add(struct hci_dev *hdev, struct hci_conn *c)
 979 {
 980         struct hci_conn_hash *h = &hdev->conn_hash;
 981         list_add_rcu(&c->list, &h->list);
 982         switch (c->type) {
 983         case ACL_LINK:
 984                 h->acl_num++;
 985                 break;
 986         case AMP_LINK:
 987                 h->amp_num++;
 988                 break;
 989         case LE_LINK:
 990                 h->le_num++;
 991                 if (c->role == HCI_ROLE_SLAVE)
 992                         h->le_num_peripheral++;
 993                 break;
 994         case SCO_LINK:
 995         case ESCO_LINK:
 996                 h->sco_num++;
 997                 break;
 998         case ISO_LINK:
 999                 h->iso_num++;
1000                 break;
1001         }
1002 }
1003
1004 static inline void hci_conn_hash_del(struct hci_dev *hdev, struct hci_conn *c)
1005 {
1006         struct hci_conn_hash *h = &hdev->conn_hash;
1007
1008         list_del_rcu(&c->list);
1009         synchronize_rcu();
1010
1011         switch (c->type) {
1012         case ACL_LINK:
1013                 h->acl_num--;
1014                 break;
1015         case AMP_LINK:
1016                 h->amp_num--;
1017                 break;
1018         case LE_LINK:
1019                 h->le_num--;
1020                 if (c->role == HCI_ROLE_SLAVE)
1021                         h->le_num_peripheral--;
1022                 break;
1023         case SCO_LINK:
1024         case ESCO_LINK:
1025                 h->sco_num--;
1026                 break;
1027         case ISO_LINK:
1028                 h->iso_num--;
1029                 break;
1030         }
1031 }
1032
1033 static inline unsigned int hci_conn_num(struct hci_dev *hdev, __u8 type)
1034 {
1035         struct hci_conn_hash *h = &hdev->conn_hash;
1036         switch (type) {
1037         case ACL_LINK:
1038                 return h->acl_num;
1039         case AMP_LINK:
1040                 return h->amp_num;
1041         case LE_LINK:
1042                 return h->le_num;
1043         case SCO_LINK:
1044         case ESCO_LINK:
1045                 return h->sco_num;
1046         case ISO_LINK:
1047                 return h->iso_num;
1048         default:
1049                 return 0;
1050         }
1051 }
1052
1053 static inline unsigned int hci_conn_count(struct hci_dev *hdev)
1054 {
1055         struct hci_conn_hash *c = &hdev->conn_hash;
1056
1057         return c->acl_num + c->amp_num + c->sco_num + c->le_num + c->iso_num;
1058 }
1059
1060 static inline __u8 hci_conn_lookup_type(struct hci_dev *hdev, __u16 handle)
1061 {
1062         struct hci_conn_hash *h = &hdev->conn_hash;
1063         struct hci_conn *c;
1064         __u8 type = INVALID_LINK;
1065
1066         rcu_read_lock();
1067
1068         list_for_each_entry_rcu(c, &h->list, list) {
1069                 if (c->handle == handle) {
1070                         type = c->type;
1071                         break;
1072                 }
1073         }
1074
1075         rcu_read_unlock();
1076
1077         return type;
1078 }
1079
1080 static inline struct hci_conn *hci_conn_hash_lookup_bis(struct hci_dev *hdev,
1081                                                         bdaddr_t *ba,
1082                                                         __u8 big, __u8 bis)
1083 {
1084         struct hci_conn_hash *h = &hdev->conn_hash;
1085         struct hci_conn  *c;
1086
1087         rcu_read_lock();
1088
1089         list_for_each_entry_rcu(c, &h->list, list) {
1090                 if (bacmp(&c->dst, ba) || c->type != ISO_LINK)
1091                         continue;
1092
1093                 if (c->iso_qos.big == big && c->iso_qos.bis == bis) {
1094                         rcu_read_unlock();
1095                         return c;
1096                 }
1097         }
1098         rcu_read_unlock();
1099
1100         return NULL;
1101 }
1102
1103 static inline struct hci_conn *hci_conn_hash_lookup_handle(struct hci_dev *hdev,
1104                                                                 __u16 handle)
1105 {
1106         struct hci_conn_hash *h = &hdev->conn_hash;
1107         struct hci_conn  *c;
1108
1109         rcu_read_lock();
1110
1111         list_for_each_entry_rcu(c, &h->list, list) {
1112                 if (c->handle == handle) {
1113                         rcu_read_unlock();
1114                         return c;
1115                 }
1116         }
1117         rcu_read_unlock();
1118
1119         return NULL;
1120 }
1121
1122 static inline struct hci_conn *hci_conn_hash_lookup_ba(struct hci_dev *hdev,
1123                                                         __u8 type, bdaddr_t *ba)
1124 {
1125         struct hci_conn_hash *h = &hdev->conn_hash;
1126         struct hci_conn  *c;
1127
1128         rcu_read_lock();
1129
1130         list_for_each_entry_rcu(c, &h->list, list) {
1131                 if (c->type == type && !bacmp(&c->dst, ba)) {
1132                         rcu_read_unlock();
1133                         return c;
1134                 }
1135         }
1136
1137         rcu_read_unlock();
1138
1139         return NULL;
1140 }
1141
1142 static inline struct hci_conn *hci_conn_hash_lookup_le(struct hci_dev *hdev,
1143                                                        bdaddr_t *ba,
1144                                                        __u8 ba_type)
1145 {
1146         struct hci_conn_hash *h = &hdev->conn_hash;
1147         struct hci_conn  *c;
1148
1149         rcu_read_lock();
1150
1151         list_for_each_entry_rcu(c, &h->list, list) {
1152                 if (c->type != LE_LINK)
1153                        continue;
1154
1155                 if (ba_type == c->dst_type && !bacmp(&c->dst, ba)) {
1156                         rcu_read_unlock();
1157                         return c;
1158                 }
1159         }
1160
1161         rcu_read_unlock();
1162
1163         return NULL;
1164 }
1165
1166 static inline struct hci_conn *hci_conn_hash_lookup_cis(struct hci_dev *hdev,
1167                                                         bdaddr_t *ba,
1168                                                         __u8 ba_type)
1169 {
1170         struct hci_conn_hash *h = &hdev->conn_hash;
1171         struct hci_conn  *c;
1172
1173         rcu_read_lock();
1174
1175         list_for_each_entry_rcu(c, &h->list, list) {
1176                 if (c->type != ISO_LINK)
1177                         continue;
1178
1179                 if (ba_type == c->dst_type && !bacmp(&c->dst, ba)) {
1180                         rcu_read_unlock();
1181                         return c;
1182                 }
1183         }
1184
1185         rcu_read_unlock();
1186
1187         return NULL;
1188 }
1189
1190 static inline struct hci_conn *hci_conn_hash_lookup_cig(struct hci_dev *hdev,
1191                                                         __u8 handle)
1192 {
1193         struct hci_conn_hash *h = &hdev->conn_hash;
1194         struct hci_conn  *c;
1195
1196         rcu_read_lock();
1197
1198         list_for_each_entry_rcu(c, &h->list, list) {
1199                 if (c->type != ISO_LINK)
1200                         continue;
1201
1202                 if (handle == c->iso_qos.cig) {
1203                         rcu_read_unlock();
1204                         return c;
1205                 }
1206         }
1207
1208         rcu_read_unlock();
1209
1210         return NULL;
1211 }
1212
1213 static inline struct hci_conn *hci_conn_hash_lookup_big(struct hci_dev *hdev,
1214                                                         __u8 handle)
1215 {
1216         struct hci_conn_hash *h = &hdev->conn_hash;
1217         struct hci_conn  *c;
1218
1219         rcu_read_lock();
1220
1221         list_for_each_entry_rcu(c, &h->list, list) {
1222                 if (bacmp(&c->dst, BDADDR_ANY) || c->type != ISO_LINK)
1223                         continue;
1224
1225                 if (handle == c->iso_qos.big) {
1226                         rcu_read_unlock();
1227                         return c;
1228                 }
1229         }
1230
1231         rcu_read_unlock();
1232
1233         return NULL;
1234 }
1235
1236 static inline struct hci_conn *hci_conn_hash_lookup_state(struct hci_dev *hdev,
1237                                                         __u8 type, __u16 state)
1238 {
1239         struct hci_conn_hash *h = &hdev->conn_hash;
1240         struct hci_conn  *c;
1241
1242         rcu_read_lock();
1243
1244         list_for_each_entry_rcu(c, &h->list, list) {
1245                 if (c->type == type && c->state == state) {
1246                         rcu_read_unlock();
1247                         return c;
1248                 }
1249         }
1250
1251         rcu_read_unlock();
1252
1253         return NULL;
1254 }
1255
1256 typedef void (*hci_conn_func_t)(struct hci_conn *conn, void *data);
1257 static inline void hci_conn_hash_list_state(struct hci_dev *hdev,
1258                                             hci_conn_func_t func, __u8 type,
1259                                             __u16 state, void *data)
1260 {
1261         struct hci_conn_hash *h = &hdev->conn_hash;
1262         struct hci_conn  *c;
1263
1264         if (!func)
1265                 return;
1266
1267         rcu_read_lock();
1268
1269         list_for_each_entry_rcu(c, &h->list, list) {
1270                 if (c->type == type && c->state == state)
1271                         func(c, data);
1272         }
1273
1274         rcu_read_unlock();
1275 }
1276
1277 static inline struct hci_conn *hci_lookup_le_connect(struct hci_dev *hdev)
1278 {
1279         struct hci_conn_hash *h = &hdev->conn_hash;
1280         struct hci_conn  *c;
1281
1282         rcu_read_lock();
1283
1284         list_for_each_entry_rcu(c, &h->list, list) {
1285                 if (c->type == LE_LINK && c->state == BT_CONNECT &&
1286                     !test_bit(HCI_CONN_SCANNING, &c->flags)) {
1287                         rcu_read_unlock();
1288                         return c;
1289                 }
1290         }
1291
1292         rcu_read_unlock();
1293
1294         return NULL;
1295 }
1296
1297 int hci_disconnect(struct hci_conn *conn, __u8 reason);
1298 bool hci_setup_sync(struct hci_conn *conn, __u16 handle);
1299 void hci_sco_setup(struct hci_conn *conn, __u8 status);
1300 bool hci_iso_setup_path(struct hci_conn *conn);
1301 int hci_le_create_cis(struct hci_conn *conn);
1302
1303 struct hci_conn *hci_conn_add(struct hci_dev *hdev, int type, bdaddr_t *dst,
1304                               u8 role);
1305 int hci_conn_del(struct hci_conn *conn);
1306 void hci_conn_hash_flush(struct hci_dev *hdev);
1307 void hci_conn_check_pending(struct hci_dev *hdev);
1308
1309 struct hci_chan *hci_chan_create(struct hci_conn *conn);
1310 void hci_chan_del(struct hci_chan *chan);
1311 void hci_chan_list_flush(struct hci_conn *conn);
1312 struct hci_chan *hci_chan_lookup_handle(struct hci_dev *hdev, __u16 handle);
1313
1314 struct hci_conn *hci_connect_le_scan(struct hci_dev *hdev, bdaddr_t *dst,
1315                                      u8 dst_type, u8 sec_level,
1316                                      u16 conn_timeout,
1317                                      enum conn_reasons conn_reason);
1318 struct hci_conn *hci_connect_le(struct hci_dev *hdev, bdaddr_t *dst,
1319                                 u8 dst_type, bool dst_resolved, u8 sec_level,
1320                                 u16 conn_timeout, u8 role);
1321 struct hci_conn *hci_connect_acl(struct hci_dev *hdev, bdaddr_t *dst,
1322                                  u8 sec_level, u8 auth_type,
1323                                  enum conn_reasons conn_reason);
1324 struct hci_conn *hci_connect_sco(struct hci_dev *hdev, int type, bdaddr_t *dst,
1325                                  __u16 setting, struct bt_codec *codec);
1326 struct hci_conn *hci_bind_cis(struct hci_dev *hdev, bdaddr_t *dst,
1327                               __u8 dst_type, struct bt_iso_qos *qos);
1328 struct hci_conn *hci_connect_cis(struct hci_dev *hdev, bdaddr_t *dst,
1329                                  __u8 dst_type, struct bt_iso_qos *qos);
1330 struct hci_conn *hci_connect_bis(struct hci_dev *hdev, bdaddr_t *dst,
1331                                  __u8 dst_type, struct bt_iso_qos *qos,
1332                                  __u8 data_len, __u8 *data);
1333 int hci_pa_create_sync(struct hci_dev *hdev, bdaddr_t *dst, __u8 dst_type,
1334                        __u8 sid);
1335 int hci_le_big_create_sync(struct hci_dev *hdev, struct bt_iso_qos *qos,
1336                            __u16 sync_handle, __u8 num_bis, __u8 bis[]);
1337 int hci_conn_check_link_mode(struct hci_conn *conn);
1338 int hci_conn_check_secure(struct hci_conn *conn, __u8 sec_level);
1339 int hci_conn_security(struct hci_conn *conn, __u8 sec_level, __u8 auth_type,
1340                       bool initiator);
1341 int hci_conn_switch_role(struct hci_conn *conn, __u8 role);
1342
1343 void hci_conn_enter_active_mode(struct hci_conn *conn, __u8 force_active);
1344
1345 void hci_conn_failed(struct hci_conn *conn, u8 status);
1346
1347 /*
1348  * hci_conn_get() and hci_conn_put() are used to control the life-time of an
1349  * "hci_conn" object. They do not guarantee that the hci_conn object is running,
1350  * working or anything else. They just guarantee that the object is available
1351  * and can be dereferenced. So you can use its locks, local variables and any
1352  * other constant data.
1353  * Before accessing runtime data, you _must_ lock the object and then check that
1354  * it is still running. As soon as you release the locks, the connection might
1355  * get dropped, though.
1356  *
1357  * On the other hand, hci_conn_hold() and hci_conn_drop() are used to control
1358  * how long the underlying connection is held. So every channel that runs on the
1359  * hci_conn object calls this to prevent the connection from disappearing. As
1360  * long as you hold a device, you must also guarantee that you have a valid
1361  * reference to the device via hci_conn_get() (or the initial reference from
1362  * hci_conn_add()).
1363  * The hold()/drop() ref-count is known to drop below 0 sometimes, which doesn't
1364  * break because nobody cares for that. But this means, we cannot use
1365  * _get()/_drop() in it, but require the caller to have a valid ref (FIXME).
1366  */
1367
1368 static inline struct hci_conn *hci_conn_get(struct hci_conn *conn)
1369 {
1370         get_device(&conn->dev);
1371         return conn;
1372 }
1373
1374 static inline void hci_conn_put(struct hci_conn *conn)
1375 {
1376         put_device(&conn->dev);
1377 }
1378
1379 static inline void hci_conn_hold(struct hci_conn *conn)
1380 {
1381         BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1382
1383         atomic_inc(&conn->refcnt);
1384         cancel_delayed_work(&conn->disc_work);
1385 }
1386
1387 static inline void hci_conn_drop(struct hci_conn *conn)
1388 {
1389         BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1390
1391         if (atomic_dec_and_test(&conn->refcnt)) {
1392                 unsigned long timeo;
1393
1394                 switch (conn->type) {
1395                 case ACL_LINK:
1396                 case LE_LINK:
1397                         cancel_delayed_work(&conn->idle_work);
1398                         if (conn->state == BT_CONNECTED) {
1399                                 timeo = conn->disc_timeout;
1400                                 if (!conn->out)
1401                                         timeo *= 2;
1402                         } else {
1403                                 timeo = 0;
1404                         }
1405                         break;
1406
1407                 case AMP_LINK:
1408                         timeo = conn->disc_timeout;
1409                         break;
1410
1411                 default:
1412                         timeo = 0;
1413                         break;
1414                 }
1415
1416                 cancel_delayed_work(&conn->disc_work);
1417                 queue_delayed_work(conn->hdev->workqueue,
1418                                    &conn->disc_work, timeo);
1419         }
1420 }
1421
1422 /* ----- HCI Devices ----- */
1423 static inline void hci_dev_put(struct hci_dev *d)
1424 {
1425         BT_DBG("%s orig refcnt %d", d->name,
1426                kref_read(&d->dev.kobj.kref));
1427
1428         put_device(&d->dev);
1429 }
1430
1431 static inline struct hci_dev *hci_dev_hold(struct hci_dev *d)
1432 {
1433         BT_DBG("%s orig refcnt %d", d->name,
1434                kref_read(&d->dev.kobj.kref));
1435
1436         get_device(&d->dev);
1437         return d;
1438 }
1439
1440 #define hci_dev_lock(d)         mutex_lock(&d->lock)
1441 #define hci_dev_unlock(d)       mutex_unlock(&d->lock)
1442
1443 #define to_hci_dev(d) container_of(d, struct hci_dev, dev)
1444 #define to_hci_conn(c) container_of(c, struct hci_conn, dev)
1445
1446 static inline void *hci_get_drvdata(struct hci_dev *hdev)
1447 {
1448         return dev_get_drvdata(&hdev->dev);
1449 }
1450
1451 static inline void hci_set_drvdata(struct hci_dev *hdev, void *data)
1452 {
1453         dev_set_drvdata(&hdev->dev, data);
1454 }
1455
1456 static inline void *hci_get_priv(struct hci_dev *hdev)
1457 {
1458         return (char *)hdev + sizeof(*hdev);
1459 }
1460
1461 struct hci_dev *hci_dev_get(int index);
1462 struct hci_dev *hci_get_route(bdaddr_t *dst, bdaddr_t *src, u8 src_type);
1463
1464 struct hci_dev *hci_alloc_dev_priv(int sizeof_priv);
1465
1466 static inline struct hci_dev *hci_alloc_dev(void)
1467 {
1468         return hci_alloc_dev_priv(0);
1469 }
1470
1471 void hci_free_dev(struct hci_dev *hdev);
1472 int hci_register_dev(struct hci_dev *hdev);
1473 void hci_unregister_dev(struct hci_dev *hdev);
1474 void hci_release_dev(struct hci_dev *hdev);
1475 int hci_register_suspend_notifier(struct hci_dev *hdev);
1476 int hci_unregister_suspend_notifier(struct hci_dev *hdev);
1477 int hci_suspend_dev(struct hci_dev *hdev);
1478 int hci_resume_dev(struct hci_dev *hdev);
1479 int hci_reset_dev(struct hci_dev *hdev);
1480 int hci_recv_frame(struct hci_dev *hdev, struct sk_buff *skb);
1481 int hci_recv_diag(struct hci_dev *hdev, struct sk_buff *skb);
1482 __printf(2, 3) void hci_set_hw_info(struct hci_dev *hdev, const char *fmt, ...);
1483 __printf(2, 3) void hci_set_fw_info(struct hci_dev *hdev, const char *fmt, ...);
1484
1485 static inline void hci_set_msft_opcode(struct hci_dev *hdev, __u16 opcode)
1486 {
1487 #if IS_ENABLED(CONFIG_BT_MSFTEXT)
1488         hdev->msft_opcode = opcode;
1489 #endif
1490 }
1491
1492 static inline void hci_set_aosp_capable(struct hci_dev *hdev)
1493 {
1494 #if IS_ENABLED(CONFIG_BT_AOSPEXT)
1495         hdev->aosp_capable = true;
1496 #endif
1497 }
1498
1499 int hci_dev_open(__u16 dev);
1500 int hci_dev_close(__u16 dev);
1501 int hci_dev_do_close(struct hci_dev *hdev);
1502 int hci_dev_reset(__u16 dev);
1503 int hci_dev_reset_stat(__u16 dev);
1504 int hci_dev_cmd(unsigned int cmd, void __user *arg);
1505 int hci_get_dev_list(void __user *arg);
1506 int hci_get_dev_info(void __user *arg);
1507 int hci_get_conn_list(void __user *arg);
1508 int hci_get_conn_info(struct hci_dev *hdev, void __user *arg);
1509 int hci_get_auth_info(struct hci_dev *hdev, void __user *arg);
1510 int hci_inquiry(void __user *arg);
1511
1512 struct bdaddr_list *hci_bdaddr_list_lookup(struct list_head *list,
1513                                            bdaddr_t *bdaddr, u8 type);
1514 struct bdaddr_list_with_irk *hci_bdaddr_list_lookup_with_irk(
1515                                     struct list_head *list, bdaddr_t *bdaddr,
1516                                     u8 type);
1517 struct bdaddr_list_with_flags *
1518 hci_bdaddr_list_lookup_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1519                                   u8 type);
1520 int hci_bdaddr_list_add(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1521 int hci_bdaddr_list_add_with_irk(struct list_head *list, bdaddr_t *bdaddr,
1522                                  u8 type, u8 *peer_irk, u8 *local_irk);
1523 int hci_bdaddr_list_add_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1524                                    u8 type, u32 flags);
1525 int hci_bdaddr_list_del(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1526 int hci_bdaddr_list_del_with_irk(struct list_head *list, bdaddr_t *bdaddr,
1527                                  u8 type);
1528 int hci_bdaddr_list_del_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1529                                    u8 type);
1530 void hci_bdaddr_list_clear(struct list_head *list);
1531
1532 struct hci_conn_params *hci_conn_params_lookup(struct hci_dev *hdev,
1533                                                bdaddr_t *addr, u8 addr_type);
1534 struct hci_conn_params *hci_conn_params_add(struct hci_dev *hdev,
1535                                             bdaddr_t *addr, u8 addr_type);
1536 void hci_conn_params_del(struct hci_dev *hdev, bdaddr_t *addr, u8 addr_type);
1537 void hci_conn_params_clear_disabled(struct hci_dev *hdev);
1538
1539 struct hci_conn_params *hci_pend_le_action_lookup(struct list_head *list,
1540                                                   bdaddr_t *addr,
1541                                                   u8 addr_type);
1542
1543 void hci_uuids_clear(struct hci_dev *hdev);
1544
1545 void hci_link_keys_clear(struct hci_dev *hdev);
1546 struct link_key *hci_find_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1547 struct link_key *hci_add_link_key(struct hci_dev *hdev, struct hci_conn *conn,
1548                                   bdaddr_t *bdaddr, u8 *val, u8 type,
1549                                   u8 pin_len, bool *persistent);
1550 struct smp_ltk *hci_add_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1551                             u8 addr_type, u8 type, u8 authenticated,
1552                             u8 tk[16], u8 enc_size, __le16 ediv, __le64 rand);
1553 struct smp_ltk *hci_find_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1554                              u8 addr_type, u8 role);
1555 int hci_remove_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 bdaddr_type);
1556 void hci_smp_ltks_clear(struct hci_dev *hdev);
1557 int hci_remove_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1558
1559 struct smp_irk *hci_find_irk_by_rpa(struct hci_dev *hdev, bdaddr_t *rpa);
1560 struct smp_irk *hci_find_irk_by_addr(struct hci_dev *hdev, bdaddr_t *bdaddr,
1561                                      u8 addr_type);
1562 struct smp_irk *hci_add_irk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1563                             u8 addr_type, u8 val[16], bdaddr_t *rpa);
1564 void hci_remove_irk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 addr_type);
1565 bool hci_is_blocked_key(struct hci_dev *hdev, u8 type, u8 val[16]);
1566 void hci_blocked_keys_clear(struct hci_dev *hdev);
1567 void hci_smp_irks_clear(struct hci_dev *hdev);
1568
1569 bool hci_bdaddr_is_paired(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type);
1570
1571 void hci_remote_oob_data_clear(struct hci_dev *hdev);
1572 struct oob_data *hci_find_remote_oob_data(struct hci_dev *hdev,
1573                                           bdaddr_t *bdaddr, u8 bdaddr_type);
1574 int hci_add_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1575                             u8 bdaddr_type, u8 *hash192, u8 *rand192,
1576                             u8 *hash256, u8 *rand256);
1577 int hci_remove_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1578                                u8 bdaddr_type);
1579
1580 void hci_adv_instances_clear(struct hci_dev *hdev);
1581 struct adv_info *hci_find_adv_instance(struct hci_dev *hdev, u8 instance);
1582 struct adv_info *hci_get_next_instance(struct hci_dev *hdev, u8 instance);
1583 struct adv_info *hci_add_adv_instance(struct hci_dev *hdev, u8 instance,
1584                                       u32 flags, u16 adv_data_len, u8 *adv_data,
1585                                       u16 scan_rsp_len, u8 *scan_rsp_data,
1586                                       u16 timeout, u16 duration, s8 tx_power,
1587                                       u32 min_interval, u32 max_interval,
1588                                       u8 mesh_handle);
1589 struct adv_info *hci_add_per_instance(struct hci_dev *hdev, u8 instance,
1590                                       u32 flags, u8 data_len, u8 *data,
1591                                       u32 min_interval, u32 max_interval);
1592 int hci_set_adv_instance_data(struct hci_dev *hdev, u8 instance,
1593                          u16 adv_data_len, u8 *adv_data,
1594                          u16 scan_rsp_len, u8 *scan_rsp_data);
1595 int hci_remove_adv_instance(struct hci_dev *hdev, u8 instance);
1596 void hci_adv_instances_set_rpa_expired(struct hci_dev *hdev, bool rpa_expired);
1597 u32 hci_adv_instance_flags(struct hci_dev *hdev, u8 instance);
1598 bool hci_adv_instance_is_scannable(struct hci_dev *hdev, u8 instance);
1599
1600 void hci_adv_monitors_clear(struct hci_dev *hdev);
1601 void hci_free_adv_monitor(struct hci_dev *hdev, struct adv_monitor *monitor);
1602 int hci_add_adv_monitor(struct hci_dev *hdev, struct adv_monitor *monitor);
1603 int hci_remove_single_adv_monitor(struct hci_dev *hdev, u16 handle);
1604 int hci_remove_all_adv_monitor(struct hci_dev *hdev);
1605 bool hci_is_adv_monitoring(struct hci_dev *hdev);
1606 int hci_get_adv_monitor_offload_ext(struct hci_dev *hdev);
1607
1608 void hci_event_packet(struct hci_dev *hdev, struct sk_buff *skb);
1609
1610 void hci_init_sysfs(struct hci_dev *hdev);
1611 void hci_conn_init_sysfs(struct hci_conn *conn);
1612 void hci_conn_add_sysfs(struct hci_conn *conn);
1613 void hci_conn_del_sysfs(struct hci_conn *conn);
1614
1615 #define SET_HCIDEV_DEV(hdev, pdev) ((hdev)->dev.parent = (pdev))
1616
1617 /* ----- LMP capabilities ----- */
1618 #define lmp_encrypt_capable(dev)   ((dev)->features[0][0] & LMP_ENCRYPT)
1619 #define lmp_rswitch_capable(dev)   ((dev)->features[0][0] & LMP_RSWITCH)
1620 #define lmp_hold_capable(dev)      ((dev)->features[0][0] & LMP_HOLD)
1621 #define lmp_sniff_capable(dev)     ((dev)->features[0][0] & LMP_SNIFF)
1622 #define lmp_park_capable(dev)      ((dev)->features[0][1] & LMP_PARK)
1623 #define lmp_inq_rssi_capable(dev)  ((dev)->features[0][3] & LMP_RSSI_INQ)
1624 #define lmp_esco_capable(dev)      ((dev)->features[0][3] & LMP_ESCO)
1625 #define lmp_bredr_capable(dev)     (!((dev)->features[0][4] & LMP_NO_BREDR))
1626 #define lmp_le_capable(dev)        ((dev)->features[0][4] & LMP_LE)
1627 #define lmp_sniffsubr_capable(dev) ((dev)->features[0][5] & LMP_SNIFF_SUBR)
1628 #define lmp_pause_enc_capable(dev) ((dev)->features[0][5] & LMP_PAUSE_ENC)
1629 #define lmp_esco_2m_capable(dev)   ((dev)->features[0][5] & LMP_EDR_ESCO_2M)
1630 #define lmp_ext_inq_capable(dev)   ((dev)->features[0][6] & LMP_EXT_INQ)
1631 #define lmp_le_br_capable(dev)     (!!((dev)->features[0][6] & LMP_SIMUL_LE_BR))
1632 #define lmp_ssp_capable(dev)       ((dev)->features[0][6] & LMP_SIMPLE_PAIR)
1633 #define lmp_no_flush_capable(dev)  ((dev)->features[0][6] & LMP_NO_FLUSH)
1634 #define lmp_lsto_capable(dev)      ((dev)->features[0][7] & LMP_LSTO)
1635 #define lmp_inq_tx_pwr_capable(dev) ((dev)->features[0][7] & LMP_INQ_TX_PWR)
1636 #define lmp_ext_feat_capable(dev)  ((dev)->features[0][7] & LMP_EXTFEATURES)
1637 #define lmp_transp_capable(dev)    ((dev)->features[0][2] & LMP_TRANSPARENT)
1638 #define lmp_edr_2m_capable(dev)    ((dev)->features[0][3] & LMP_EDR_2M)
1639 #define lmp_edr_3m_capable(dev)    ((dev)->features[0][3] & LMP_EDR_3M)
1640 #define lmp_edr_3slot_capable(dev) ((dev)->features[0][4] & LMP_EDR_3SLOT)
1641 #define lmp_edr_5slot_capable(dev) ((dev)->features[0][5] & LMP_EDR_5SLOT)
1642
1643 /* ----- Extended LMP capabilities ----- */
1644 #define lmp_cpb_central_capable(dev) ((dev)->features[2][0] & LMP_CPB_CENTRAL)
1645 #define lmp_cpb_peripheral_capable(dev) ((dev)->features[2][0] & LMP_CPB_PERIPHERAL)
1646 #define lmp_sync_train_capable(dev) ((dev)->features[2][0] & LMP_SYNC_TRAIN)
1647 #define lmp_sync_scan_capable(dev)  ((dev)->features[2][0] & LMP_SYNC_SCAN)
1648 #define lmp_sc_capable(dev)         ((dev)->features[2][1] & LMP_SC)
1649 #define lmp_ping_capable(dev)       ((dev)->features[2][1] & LMP_PING)
1650
1651 /* ----- Host capabilities ----- */
1652 #define lmp_host_ssp_capable(dev)  ((dev)->features[1][0] & LMP_HOST_SSP)
1653 #define lmp_host_sc_capable(dev)   ((dev)->features[1][0] & LMP_HOST_SC)
1654 #define lmp_host_le_capable(dev)   (!!((dev)->features[1][0] & LMP_HOST_LE))
1655 #define lmp_host_le_br_capable(dev) (!!((dev)->features[1][0] & LMP_HOST_LE_BREDR))
1656
1657 #define hdev_is_powered(dev)   (test_bit(HCI_UP, &(dev)->flags) && \
1658                                 !hci_dev_test_flag(dev, HCI_AUTO_OFF))
1659 #define bredr_sc_enabled(dev)  (lmp_sc_capable(dev) && \
1660                                 hci_dev_test_flag(dev, HCI_SC_ENABLED))
1661 #define rpa_valid(dev)         (bacmp(&dev->rpa, BDADDR_ANY) && \
1662                                 !hci_dev_test_flag(dev, HCI_RPA_EXPIRED))
1663 #define adv_rpa_valid(adv)     (bacmp(&adv->random_addr, BDADDR_ANY) && \
1664                                 !adv->rpa_expired)
1665
1666 #define scan_1m(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_1M) || \
1667                       ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_1M))
1668
1669 #define scan_2m(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_2M) || \
1670                       ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_2M))
1671
1672 #define scan_coded(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_CODED) || \
1673                          ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_CODED))
1674
1675 #define ll_privacy_capable(dev) ((dev)->le_features[0] & HCI_LE_LL_PRIVACY)
1676
1677 /* Use LL Privacy based address resolution if supported */
1678 #define use_ll_privacy(dev) (ll_privacy_capable(dev) && \
1679                              hci_dev_test_flag(dev, HCI_ENABLE_LL_PRIVACY))
1680
1681 #define privacy_mode_capable(dev) (use_ll_privacy(dev) && \
1682                                    (hdev->commands[39] & 0x04))
1683
1684 /* Use enhanced synchronous connection if command is supported and its quirk
1685  * has not been set.
1686  */
1687 #define enhanced_sync_conn_capable(dev) \
1688         (((dev)->commands[29] & 0x08) && \
1689          !test_bit(HCI_QUIRK_BROKEN_ENHANCED_SETUP_SYNC_CONN, &(dev)->quirks))
1690
1691 /* Use ext scanning if set ext scan param and ext scan enable is supported */
1692 #define use_ext_scan(dev) (((dev)->commands[37] & 0x20) && \
1693                            ((dev)->commands[37] & 0x40) && \
1694                            !test_bit(HCI_QUIRK_BROKEN_EXT_SCAN, &(dev)->quirks))
1695
1696 /* Use ext create connection if command is supported */
1697 #define use_ext_conn(dev) ((dev)->commands[37] & 0x80)
1698
1699 /* Extended advertising support */
1700 #define ext_adv_capable(dev) (((dev)->le_features[1] & HCI_LE_EXT_ADV))
1701
1702 /* BLUETOOTH CORE SPECIFICATION Version 5.3 | Vol 4, Part E page 1789:
1703  *
1704  * C24: Mandatory if the LE Controller supports Connection State and either
1705  * LE Feature (LL Privacy) or LE Feature (Extended Advertising) is supported
1706  */
1707 #define use_enhanced_conn_complete(dev) (ll_privacy_capable(dev) || \
1708                                          ext_adv_capable(dev))
1709
1710 /* Periodic advertising support */
1711 #define per_adv_capable(dev) (((dev)->le_features[1] & HCI_LE_PERIODIC_ADV))
1712
1713 /* CIS Master/Slave and BIS support */
1714 #define iso_capable(dev) (cis_capable(dev) || bis_capable(dev))
1715 #define cis_capable(dev) \
1716         (cis_central_capable(dev) || cis_peripheral_capable(dev))
1717 #define cis_central_capable(dev) \
1718         ((dev)->le_features[3] & HCI_LE_CIS_CENTRAL)
1719 #define cis_peripheral_capable(dev) \
1720         ((dev)->le_features[3] & HCI_LE_CIS_PERIPHERAL)
1721 #define bis_capable(dev) ((dev)->le_features[3] & HCI_LE_ISO_BROADCASTER)
1722
1723 #define mws_transport_config_capable(dev) (((dev)->commands[30] & 0x08) && \
1724         (!test_bit(HCI_QUIRK_BROKEN_MWS_TRANSPORT_CONFIG, &(dev)->quirks)))
1725
1726 /* ----- HCI protocols ----- */
1727 #define HCI_PROTO_DEFER             0x01
1728
1729 static inline int hci_proto_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
1730                                         __u8 type, __u8 *flags)
1731 {
1732         switch (type) {
1733         case ACL_LINK:
1734                 return l2cap_connect_ind(hdev, bdaddr);
1735
1736         case SCO_LINK:
1737         case ESCO_LINK:
1738                 return sco_connect_ind(hdev, bdaddr, flags);
1739
1740         case ISO_LINK:
1741                 return iso_connect_ind(hdev, bdaddr, flags);
1742
1743         default:
1744                 BT_ERR("unknown link type %d", type);
1745                 return -EINVAL;
1746         }
1747 }
1748
1749 static inline int hci_proto_disconn_ind(struct hci_conn *conn)
1750 {
1751         if (conn->type != ACL_LINK && conn->type != LE_LINK)
1752                 return HCI_ERROR_REMOTE_USER_TERM;
1753
1754         return l2cap_disconn_ind(conn);
1755 }
1756
1757 /* ----- HCI callbacks ----- */
1758 struct hci_cb {
1759         struct list_head list;
1760
1761         char *name;
1762
1763         void (*connect_cfm)     (struct hci_conn *conn, __u8 status);
1764         void (*disconn_cfm)     (struct hci_conn *conn, __u8 status);
1765         void (*security_cfm)    (struct hci_conn *conn, __u8 status,
1766                                                                 __u8 encrypt);
1767         void (*key_change_cfm)  (struct hci_conn *conn, __u8 status);
1768         void (*role_switch_cfm) (struct hci_conn *conn, __u8 status, __u8 role);
1769 };
1770
1771 static inline void hci_connect_cfm(struct hci_conn *conn, __u8 status)
1772 {
1773         struct hci_cb *cb;
1774
1775         mutex_lock(&hci_cb_list_lock);
1776         list_for_each_entry(cb, &hci_cb_list, list) {
1777                 if (cb->connect_cfm)
1778                         cb->connect_cfm(conn, status);
1779         }
1780         mutex_unlock(&hci_cb_list_lock);
1781
1782         if (conn->connect_cfm_cb)
1783                 conn->connect_cfm_cb(conn, status);
1784 }
1785
1786 static inline void hci_disconn_cfm(struct hci_conn *conn, __u8 reason)
1787 {
1788         struct hci_cb *cb;
1789
1790         mutex_lock(&hci_cb_list_lock);
1791         list_for_each_entry(cb, &hci_cb_list, list) {
1792                 if (cb->disconn_cfm)
1793                         cb->disconn_cfm(conn, reason);
1794         }
1795         mutex_unlock(&hci_cb_list_lock);
1796
1797         if (conn->disconn_cfm_cb)
1798                 conn->disconn_cfm_cb(conn, reason);
1799 }
1800
1801 static inline void hci_auth_cfm(struct hci_conn *conn, __u8 status)
1802 {
1803         struct hci_cb *cb;
1804         __u8 encrypt;
1805
1806         if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->flags))
1807                 return;
1808
1809         encrypt = test_bit(HCI_CONN_ENCRYPT, &conn->flags) ? 0x01 : 0x00;
1810
1811         mutex_lock(&hci_cb_list_lock);
1812         list_for_each_entry(cb, &hci_cb_list, list) {
1813                 if (cb->security_cfm)
1814                         cb->security_cfm(conn, status, encrypt);
1815         }
1816         mutex_unlock(&hci_cb_list_lock);
1817
1818         if (conn->security_cfm_cb)
1819                 conn->security_cfm_cb(conn, status);
1820 }
1821
1822 static inline void hci_encrypt_cfm(struct hci_conn *conn, __u8 status)
1823 {
1824         struct hci_cb *cb;
1825         __u8 encrypt;
1826
1827         if (conn->state == BT_CONFIG) {
1828                 if (!status)
1829                         conn->state = BT_CONNECTED;
1830
1831                 hci_connect_cfm(conn, status);
1832                 hci_conn_drop(conn);
1833                 return;
1834         }
1835
1836         if (!test_bit(HCI_CONN_ENCRYPT, &conn->flags))
1837                 encrypt = 0x00;
1838         else if (test_bit(HCI_CONN_AES_CCM, &conn->flags))
1839                 encrypt = 0x02;
1840         else
1841                 encrypt = 0x01;
1842
1843         if (!status) {
1844                 if (conn->sec_level == BT_SECURITY_SDP)
1845                         conn->sec_level = BT_SECURITY_LOW;
1846
1847                 if (conn->pending_sec_level > conn->sec_level)
1848                         conn->sec_level = conn->pending_sec_level;
1849         }
1850
1851         mutex_lock(&hci_cb_list_lock);
1852         list_for_each_entry(cb, &hci_cb_list, list) {
1853                 if (cb->security_cfm)
1854                         cb->security_cfm(conn, status, encrypt);
1855         }
1856         mutex_unlock(&hci_cb_list_lock);
1857
1858         if (conn->security_cfm_cb)
1859                 conn->security_cfm_cb(conn, status);
1860 }
1861
1862 static inline void hci_key_change_cfm(struct hci_conn *conn, __u8 status)
1863 {
1864         struct hci_cb *cb;
1865
1866         mutex_lock(&hci_cb_list_lock);
1867         list_for_each_entry(cb, &hci_cb_list, list) {
1868                 if (cb->key_change_cfm)
1869                         cb->key_change_cfm(conn, status);
1870         }
1871         mutex_unlock(&hci_cb_list_lock);
1872 }
1873
1874 static inline void hci_role_switch_cfm(struct hci_conn *conn, __u8 status,
1875                                                                 __u8 role)
1876 {
1877         struct hci_cb *cb;
1878
1879         mutex_lock(&hci_cb_list_lock);
1880         list_for_each_entry(cb, &hci_cb_list, list) {
1881                 if (cb->role_switch_cfm)
1882                         cb->role_switch_cfm(conn, status, role);
1883         }
1884         mutex_unlock(&hci_cb_list_lock);
1885 }
1886
1887 static inline bool hci_bdaddr_is_rpa(bdaddr_t *bdaddr, u8 addr_type)
1888 {
1889         if (addr_type != ADDR_LE_DEV_RANDOM)
1890                 return false;
1891
1892         if ((bdaddr->b[5] & 0xc0) == 0x40)
1893                return true;
1894
1895         return false;
1896 }
1897
1898 static inline bool hci_is_identity_address(bdaddr_t *addr, u8 addr_type)
1899 {
1900         if (addr_type == ADDR_LE_DEV_PUBLIC)
1901                 return true;
1902
1903         /* Check for Random Static address type */
1904         if ((addr->b[5] & 0xc0) == 0xc0)
1905                 return true;
1906
1907         return false;
1908 }
1909
1910 static inline struct smp_irk *hci_get_irk(struct hci_dev *hdev,
1911                                           bdaddr_t *bdaddr, u8 addr_type)
1912 {
1913         if (!hci_bdaddr_is_rpa(bdaddr, addr_type))
1914                 return NULL;
1915
1916         return hci_find_irk_by_rpa(hdev, bdaddr);
1917 }
1918
1919 static inline int hci_check_conn_params(u16 min, u16 max, u16 latency,
1920                                         u16 to_multiplier)
1921 {
1922         u16 max_latency;
1923
1924         if (min > max || min < 6 || max > 3200)
1925                 return -EINVAL;
1926
1927         if (to_multiplier < 10 || to_multiplier > 3200)
1928                 return -EINVAL;
1929
1930         if (max >= to_multiplier * 8)
1931                 return -EINVAL;
1932
1933         max_latency = (to_multiplier * 4 / max) - 1;
1934         if (latency > 499 || latency > max_latency)
1935                 return -EINVAL;
1936
1937         return 0;
1938 }
1939
1940 int hci_register_cb(struct hci_cb *hcb);
1941 int hci_unregister_cb(struct hci_cb *hcb);
1942
1943 int __hci_cmd_send(struct hci_dev *hdev, u16 opcode, u32 plen,
1944                    const void *param);
1945
1946 int hci_send_cmd(struct hci_dev *hdev, __u16 opcode, __u32 plen,
1947                  const void *param);
1948 void hci_send_acl(struct hci_chan *chan, struct sk_buff *skb, __u16 flags);
1949 void hci_send_sco(struct hci_conn *conn, struct sk_buff *skb);
1950 void hci_send_iso(struct hci_conn *conn, struct sk_buff *skb);
1951
1952 void *hci_sent_cmd_data(struct hci_dev *hdev, __u16 opcode);
1953 void *hci_recv_event_data(struct hci_dev *hdev, __u8 event);
1954
1955 u32 hci_conn_get_phy(struct hci_conn *conn);
1956
1957 /* ----- HCI Sockets ----- */
1958 void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb);
1959 void hci_send_to_channel(unsigned short channel, struct sk_buff *skb,
1960                          int flag, struct sock *skip_sk);
1961 void hci_send_to_monitor(struct hci_dev *hdev, struct sk_buff *skb);
1962 void hci_send_monitor_ctrl_event(struct hci_dev *hdev, u16 event,
1963                                  void *data, u16 data_len, ktime_t tstamp,
1964                                  int flag, struct sock *skip_sk);
1965
1966 void hci_sock_dev_event(struct hci_dev *hdev, int event);
1967
1968 #define HCI_MGMT_VAR_LEN        BIT(0)
1969 #define HCI_MGMT_NO_HDEV        BIT(1)
1970 #define HCI_MGMT_UNTRUSTED      BIT(2)
1971 #define HCI_MGMT_UNCONFIGURED   BIT(3)
1972 #define HCI_MGMT_HDEV_OPTIONAL  BIT(4)
1973
1974 struct hci_mgmt_handler {
1975         int (*func) (struct sock *sk, struct hci_dev *hdev, void *data,
1976                      u16 data_len);
1977         size_t data_len;
1978         unsigned long flags;
1979 };
1980
1981 struct hci_mgmt_chan {
1982         struct list_head list;
1983         unsigned short channel;
1984         size_t handler_count;
1985         const struct hci_mgmt_handler *handlers;
1986         void (*hdev_init) (struct sock *sk, struct hci_dev *hdev);
1987 };
1988
1989 int hci_mgmt_chan_register(struct hci_mgmt_chan *c);
1990 void hci_mgmt_chan_unregister(struct hci_mgmt_chan *c);
1991
1992 /* Management interface */
1993 #define DISCOV_TYPE_BREDR               (BIT(BDADDR_BREDR))
1994 #define DISCOV_TYPE_LE                  (BIT(BDADDR_LE_PUBLIC) | \
1995                                          BIT(BDADDR_LE_RANDOM))
1996 #define DISCOV_TYPE_INTERLEAVED         (BIT(BDADDR_BREDR) | \
1997                                          BIT(BDADDR_LE_PUBLIC) | \
1998                                          BIT(BDADDR_LE_RANDOM))
1999
2000 /* These LE scan and inquiry parameters were chosen according to LE General
2001  * Discovery Procedure specification.
2002  */
2003 #define DISCOV_LE_SCAN_WIN              0x12
2004 #define DISCOV_LE_SCAN_INT              0x12
2005 #define DISCOV_LE_TIMEOUT               10240   /* msec */
2006 #define DISCOV_INTERLEAVED_TIMEOUT      5120    /* msec */
2007 #define DISCOV_INTERLEAVED_INQUIRY_LEN  0x04
2008 #define DISCOV_BREDR_INQUIRY_LEN        0x08
2009 #define DISCOV_LE_RESTART_DELAY         msecs_to_jiffies(200)   /* msec */
2010 #define DISCOV_LE_FAST_ADV_INT_MIN      0x00A0  /* 100 msec */
2011 #define DISCOV_LE_FAST_ADV_INT_MAX      0x00F0  /* 150 msec */
2012 #define DISCOV_LE_PER_ADV_INT_MIN       0x00A0  /* 200 msec */
2013 #define DISCOV_LE_PER_ADV_INT_MAX       0x00A0  /* 200 msec */
2014 #define DISCOV_LE_ADV_MESH_MIN          0x00A0  /* 100 msec */
2015 #define DISCOV_LE_ADV_MESH_MAX          0x00A0  /* 100 msec */
2016 #define INTERVAL_TO_MS(x)               (((x) * 10) / 0x10)
2017
2018 #define NAME_RESOLVE_DURATION           msecs_to_jiffies(10240) /* 10.24 sec */
2019
2020 void mgmt_fill_version_info(void *ver);
2021 int mgmt_new_settings(struct hci_dev *hdev);
2022 void mgmt_index_added(struct hci_dev *hdev);
2023 void mgmt_index_removed(struct hci_dev *hdev);
2024 void mgmt_set_powered_failed(struct hci_dev *hdev, int err);
2025 void mgmt_power_on(struct hci_dev *hdev, int err);
2026 void __mgmt_power_off(struct hci_dev *hdev);
2027 void mgmt_new_link_key(struct hci_dev *hdev, struct link_key *key,
2028                        bool persistent);
2029 void mgmt_device_connected(struct hci_dev *hdev, struct hci_conn *conn,
2030                            u8 *name, u8 name_len);
2031 void mgmt_device_disconnected(struct hci_dev *hdev, bdaddr_t *bdaddr,
2032                               u8 link_type, u8 addr_type, u8 reason,
2033                               bool mgmt_connected);
2034 void mgmt_disconnect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr,
2035                             u8 link_type, u8 addr_type, u8 status);
2036 void mgmt_connect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2037                          u8 addr_type, u8 status);
2038 void mgmt_pin_code_request(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 secure);
2039 void mgmt_pin_code_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2040                                   u8 status);
2041 void mgmt_pin_code_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2042                                       u8 status);
2043 int mgmt_user_confirm_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
2044                               u8 link_type, u8 addr_type, u32 value,
2045                               u8 confirm_hint);
2046 int mgmt_user_confirm_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2047                                      u8 link_type, u8 addr_type, u8 status);
2048 int mgmt_user_confirm_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2049                                          u8 link_type, u8 addr_type, u8 status);
2050 int mgmt_user_passkey_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
2051                               u8 link_type, u8 addr_type);
2052 int mgmt_user_passkey_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2053                                      u8 link_type, u8 addr_type, u8 status);
2054 int mgmt_user_passkey_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2055                                          u8 link_type, u8 addr_type, u8 status);
2056 int mgmt_user_passkey_notify(struct hci_dev *hdev, bdaddr_t *bdaddr,
2057                              u8 link_type, u8 addr_type, u32 passkey,
2058                              u8 entered);
2059 void mgmt_auth_failed(struct hci_conn *conn, u8 status);
2060 void mgmt_auth_enable_complete(struct hci_dev *hdev, u8 status);
2061 void mgmt_set_class_of_dev_complete(struct hci_dev *hdev, u8 *dev_class,
2062                                     u8 status);
2063 void mgmt_set_local_name_complete(struct hci_dev *hdev, u8 *name, u8 status);
2064 void mgmt_start_discovery_complete(struct hci_dev *hdev, u8 status);
2065 void mgmt_stop_discovery_complete(struct hci_dev *hdev, u8 status);
2066 void mgmt_device_found(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2067                        u8 addr_type, u8 *dev_class, s8 rssi, u32 flags,
2068                        u8 *eir, u16 eir_len, u8 *scan_rsp, u8 scan_rsp_len,
2069                        u64 instant);
2070 void mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2071                       u8 addr_type, s8 rssi, u8 *name, u8 name_len);
2072 void mgmt_discovering(struct hci_dev *hdev, u8 discovering);
2073 void mgmt_suspending(struct hci_dev *hdev, u8 state);
2074 void mgmt_resuming(struct hci_dev *hdev, u8 reason, bdaddr_t *bdaddr,
2075                    u8 addr_type);
2076 bool mgmt_powering_down(struct hci_dev *hdev);
2077 void mgmt_new_ltk(struct hci_dev *hdev, struct smp_ltk *key, bool persistent);
2078 void mgmt_new_irk(struct hci_dev *hdev, struct smp_irk *irk, bool persistent);
2079 void mgmt_new_csrk(struct hci_dev *hdev, struct smp_csrk *csrk,
2080                    bool persistent);
2081 void mgmt_new_conn_param(struct hci_dev *hdev, bdaddr_t *bdaddr,
2082                          u8 bdaddr_type, u8 store_hint, u16 min_interval,
2083                          u16 max_interval, u16 latency, u16 timeout);
2084 void mgmt_smp_complete(struct hci_conn *conn, bool complete);
2085 bool mgmt_get_connectable(struct hci_dev *hdev);
2086 u8 mgmt_get_adv_discov_flags(struct hci_dev *hdev);
2087 void mgmt_advertising_added(struct sock *sk, struct hci_dev *hdev,
2088                             u8 instance);
2089 void mgmt_advertising_removed(struct sock *sk, struct hci_dev *hdev,
2090                               u8 instance);
2091 void mgmt_adv_monitor_removed(struct hci_dev *hdev, u16 handle);
2092 int mgmt_phy_configuration_changed(struct hci_dev *hdev, struct sock *skip);
2093 void mgmt_adv_monitor_device_lost(struct hci_dev *hdev, u16 handle,
2094                                   bdaddr_t *bdaddr, u8 addr_type);
2095
2096 int hci_abort_conn(struct hci_conn *conn, u8 reason);
2097 u8 hci_le_conn_update(struct hci_conn *conn, u16 min, u16 max, u16 latency,
2098                       u16 to_multiplier);
2099 void hci_le_start_enc(struct hci_conn *conn, __le16 ediv, __le64 rand,
2100                       __u8 ltk[16], __u8 key_size);
2101
2102 void hci_copy_identity_address(struct hci_dev *hdev, bdaddr_t *bdaddr,
2103                                u8 *bdaddr_type);
2104
2105 #define SCO_AIRMODE_MASK       0x0003
2106 #define SCO_AIRMODE_CVSD       0x0000
2107 #define SCO_AIRMODE_TRANSP     0x0003
2108
2109 #define LOCAL_CODEC_ACL_MASK    BIT(0)
2110 #define LOCAL_CODEC_SCO_MASK    BIT(1)
2111
2112 #define TRANSPORT_TYPE_MAX      0x04
2113
2114 #endif /* __HCI_CORE_H */