include/net/bluetooth/hci_core.h

   1 /*
   2    BlueZ - Bluetooth protocol stack for Linux
   3    Copyright (c) 2000-2001, 2010, Code Aurora Forum. All rights reserved.
   4
   5    Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
   6
   7    This program is free software; you can redistribute it and/or modify
   8    it under the terms of the GNU General Public License version 2 as
   9    published by the Free Software Foundation;
  10
  11    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
  12    OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  13    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
  14    IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
  15    CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
  16    WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  17    ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  18    OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  19
  20    ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
  21    COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
  22    SOFTWARE IS DISCLAIMED.
  23 */
  24
  25 #ifndef __HCI_CORE_H
  26 #define __HCI_CORE_H
  27
  28 #include <net/bluetooth/hci.h>
  29 #include <net/bluetooth/hci_sock.h>
  30
  31 /* HCI priority */
  32 #define HCI_PRIO_MAX    7
  33
  34 /* HCI Core structures */
  35 struct inquiry_data {
  36         bdaddr_t        bdaddr;
  37         __u8            pscan_rep_mode;
  38         __u8            pscan_period_mode;
  39         __u8            pscan_mode;
  40         __u8            dev_class[3];
  41         __le16          clock_offset;
  42         __s8            rssi;
  43         __u8            ssp_mode;
  44 };
  45
  46 struct inquiry_entry {
  47         struct list_head        all;            /* inq_cache.all */
  48         struct list_head        list;           /* unknown or resolve */
  49         enum {
  50                 NAME_NOT_KNOWN,
  51                 NAME_NEEDED,
  52                 NAME_PENDING,
  53                 NAME_KNOWN,
  54         } name_state;
  55         __u32                   timestamp;
  56         struct inquiry_data     data;
  57 };
  58
  59 struct discovery_state {
  60         int                     type;
  61         enum {
  62                 DISCOVERY_STOPPED,
  63                 DISCOVERY_STARTING,
  64                 DISCOVERY_FINDING,
  65                 DISCOVERY_RESOLVING,
  66                 DISCOVERY_STOPPING,
  67         } state;
  68         struct list_head        all;    /* All devices found during inquiry */
  69         struct list_head        unknown;        /* Name state not known */
  70         struct list_head        resolve;        /* Name needs to be resolved */
  71         __u32                   timestamp;
  72         bdaddr_t                last_adv_addr;
  73         u8                      last_adv_addr_type;
  74         s8                      last_adv_rssi;
  75         u32                     last_adv_flags;
  76         u8                      last_adv_data[HCI_MAX_AD_LENGTH];
  77         u8                      last_adv_data_len;
  78         bool                    report_invalid_rssi;
  79         s8                      rssi;
  80         u16                     uuid_count;
  81         u8                      (*uuids)[16];
  82 };
  83
  84 struct hci_conn_hash {
  85         struct list_head list;
  86         unsigned int     acl_num;
  87         unsigned int     amp_num;
  88         unsigned int     sco_num;
  89         unsigned int     le_num;
  90         unsigned int     le_num_slave;
  91 };
  92
  93 struct bdaddr_list {
  94         struct list_head list;
  95         bdaddr_t bdaddr;
  96         u8 bdaddr_type;
  97 };
  98
  99 struct bt_uuid {
 100         struct list_head list;
 101         u8 uuid[16];
 102         u8 size;
 103         u8 svc_hint;
 104 };
 105
 106 struct smp_csrk {
 107         bdaddr_t bdaddr;
 108         u8 bdaddr_type;
 109         u8 master;
 110         u8 val[16];
 111 };
 112
 113 struct smp_ltk {
 114         struct list_head list;
 115         struct rcu_head rcu;
 116         bdaddr_t bdaddr;
 117         u8 bdaddr_type;
 118         u8 authenticated;
 119         u8 type;
 120         u8 enc_size;
 121         __le16 ediv;
 122         __le64 rand;
 123         u8 val[16];
 124 };
 125
 126 struct smp_irk {
 127         struct list_head list;
 128         struct rcu_head rcu;
 129         bdaddr_t rpa;
 130         bdaddr_t bdaddr;
 131         u8 addr_type;
 132         u8 val[16];
 133 };
 134
 135 struct link_key {
 136         struct list_head list;
 137         struct rcu_head rcu;
 138         bdaddr_t bdaddr;
 139         u8 type;
 140         u8 val[HCI_LINK_KEY_SIZE];
 141         u8 pin_len;
 142 };
 143
 144 struct oob_data {
 145         struct list_head list;
 146         bdaddr_t bdaddr;
 147         u8 bdaddr_type;
 148         u8 hash192[16];
 149         u8 rand192[16];
 150         u8 hash256[16];
 151         u8 rand256[16];
 152 };
 153
 154 #define HCI_MAX_SHORT_NAME_LENGTH       10
 155
 156 /* Default LE RPA expiry time, 15 minutes */
 157 #define HCI_DEFAULT_RPA_TIMEOUT         (15 * 60)
 158
 159 /* Default min/max age of connection information (1s/3s) */
 160 #define DEFAULT_CONN_INFO_MIN_AGE       1000
 161 #define DEFAULT_CONN_INFO_MAX_AGE       3000
 162
 163 struct amp_assoc {
 164         __u16   len;
 165         __u16   offset;
 166         __u16   rem_len;
 167         __u16   len_so_far;
 168         __u8    data[HCI_MAX_AMP_ASSOC_SIZE];
 169 };
 170
 171 #define HCI_MAX_PAGES   3
 172
 173 #ifdef CONFIG_TIZEN_WIP
 174 #define HCI_MAX_EIR_MANUFACTURER_DATA_LENGTH    100
 175 #endif
 176
 177 #define NUM_REASSEMBLY 4
 178 struct hci_dev {
 179         struct list_head list;
 180         struct mutex    lock;
 181
 182         char            name[8];
 183         unsigned long   flags;
 184         __u16           id;
 185         __u8            bus;
 186         __u8            dev_type;
 187         bdaddr_t        bdaddr;
 188         bdaddr_t        setup_addr;
 189         bdaddr_t        public_addr;
 190         bdaddr_t        random_addr;
 191         bdaddr_t        static_addr;
 192         __u8            adv_addr_type;
 193         __u8            dev_name[HCI_MAX_NAME_LENGTH];
 194         __u8            short_name[HCI_MAX_SHORT_NAME_LENGTH];
 195         __u8            eir[HCI_MAX_EIR_LENGTH];
 196         __u8            dev_class[3];
 197         __u8            major_class;
 198         __u8            minor_class;
 199         __u8            max_page;
 200         __u8            features[HCI_MAX_PAGES][8];
 201         __u8            le_features[8];
 202         __u8            le_white_list_size;
 203         __u8            le_states[8];
 204         __u8            commands[64];
 205         __u8            hci_ver;
 206         __u16           hci_rev;
 207         __u8            lmp_ver;
 208         __u16           manufacturer;
 209         __u16           lmp_subver;
 210         __u16           voice_setting;
 211         __u8            num_iac;
 212         __u8            stored_max_keys;
 213         __u8            stored_num_keys;
 214         __u8            io_capability;
 215         __s8            inq_tx_power;
 216         __u16           page_scan_interval;
 217         __u16           page_scan_window;
 218         __u8            page_scan_type;
 219         __u8            le_adv_channel_map;
 220         __u16           le_adv_min_interval;
 221         __u16           le_adv_max_interval;
 222         __u8            le_scan_type;
 223         __u16           le_scan_interval;
 224         __u16           le_scan_window;
 225         __u16           le_conn_min_interval;
 226         __u16           le_conn_max_interval;
 227         __u16           le_conn_latency;
 228         __u16           le_supv_timeout;
 229         __u16           le_def_tx_len;
 230         __u16           le_def_tx_time;
 231         __u16           le_max_tx_len;
 232         __u16           le_max_tx_time;
 233         __u16           le_max_rx_len;
 234         __u16           le_max_rx_time;
 235         __u16           discov_interleaved_timeout;
 236         __u16           conn_info_min_age;
 237         __u16           conn_info_max_age;
 238         __u8            ssp_debug_mode;
 239         __u32           clock;
 240
 241         __u16           devid_source;
 242         __u16           devid_vendor;
 243         __u16           devid_product;
 244         __u16           devid_version;
 245
 246         __u16           pkt_type;
 247         __u16           esco_type;
 248         __u16           link_policy;
 249         __u16           link_mode;
 250
 251         __u32           idle_timeout;
 252         __u16           sniff_min_interval;
 253         __u16           sniff_max_interval;
 254
 255         __u8            amp_status;
 256         __u32           amp_total_bw;
 257         __u32           amp_max_bw;
 258         __u32           amp_min_latency;
 259         __u32           amp_max_pdu;
 260         __u8            amp_type;
 261         __u16           amp_pal_cap;
 262         __u16           amp_assoc_size;
 263         __u32           amp_max_flush_to;
 264         __u32           amp_be_flush_to;
 265
 266         struct amp_assoc        loc_assoc;
 267
 268         __u8            flow_ctl_mode;
 269
 270         unsigned int    auto_accept_delay;
 271
 272         unsigned long   quirks;
 273
 274         atomic_t        cmd_cnt;
 275         unsigned int    acl_cnt;
 276         unsigned int    sco_cnt;
 277         unsigned int    le_cnt;
 278
 279         unsigned int    acl_mtu;
 280         unsigned int    sco_mtu;
 281         unsigned int    le_mtu;
 282         unsigned int    acl_pkts;
 283         unsigned int    sco_pkts;
 284         unsigned int    le_pkts;
 285
 286         __u16           block_len;
 287         __u16           block_mtu;
 288         __u16           num_blocks;
 289         __u16           block_cnt;
 290
 291         unsigned long   acl_last_tx;
 292         unsigned long   sco_last_tx;
 293         unsigned long   le_last_tx;
 294
 295         struct workqueue_struct *workqueue;
 296         struct workqueue_struct *req_workqueue;
 297
 298         struct work_struct      power_on;
 299         struct delayed_work     power_off;
 300
 301         __u16                   discov_timeout;
 302         struct delayed_work     discov_off;
 303
 304         struct delayed_work     service_cache;
 305
 306         struct delayed_work     cmd_timer;
 307
 308         struct work_struct      rx_work;
 309         struct work_struct      cmd_work;
 310         struct work_struct      tx_work;
 311
 312         struct sk_buff_head     rx_q;
 313         struct sk_buff_head     raw_q;
 314         struct sk_buff_head     cmd_q;
 315
 316         struct sk_buff          *recv_evt;
 317         struct sk_buff          *sent_cmd;
 318         struct sk_buff          *reassembly[NUM_REASSEMBLY];
 319
 320         struct mutex            req_lock;
 321         wait_queue_head_t       req_wait_q;
 322         __u32                   req_status;
 323         __u32                   req_result;
 324
 325         void                    *smp_data;
 326         void                    *smp_bredr_data;
 327
 328         struct discovery_state  discovery;
 329 #ifdef CONFIG_TIZEN_WIP
 330 /* BEGIN TIZEN_Bluetooth :: Seperate LE discovery */
 331         struct discovery_state  le_discovery;
 332 /* END TIZEN_Bluetooth */
 333 #endif
 334         struct hci_conn_hash    conn_hash;
 335
 336         struct list_head        mgmt_pending;
 337         struct list_head        blacklist;
 338         struct list_head        whitelist;
 339         struct list_head        uuids;
 340         struct list_head        link_keys;
 341         struct list_head        long_term_keys;
 342         struct list_head        identity_resolving_keys;
 343         struct list_head        remote_oob_data;
 344         struct list_head        le_white_list;
 345         struct list_head        le_conn_params;
 346         struct list_head        pend_le_conns;
 347         struct list_head        pend_le_reports;
 348
 349         struct hci_dev_stats    stat;
 350
 351         atomic_t                promisc;
 352
 353         struct dentry           *debugfs;
 354
 355         struct device           dev;
 356
 357         struct rfkill           *rfkill;
 358
 359         unsigned long           dbg_flags;
 360         unsigned long           dev_flags;
 361
 362         struct delayed_work     le_scan_disable;
 363
 364         __s8                    adv_tx_power;
 365         __u8                    adv_data[HCI_MAX_AD_LENGTH];
 366         __u8                    adv_data_len;
 367         __u8                    scan_rsp_data[HCI_MAX_AD_LENGTH];
 368         __u8                    scan_rsp_data_len;
 369
 370         __u8                    irk[16];
 371         __u32                   rpa_timeout;
 372         struct delayed_work     rpa_expired;
 373         bdaddr_t                rpa;
 374  #ifdef CONFIG_TIZEN_WIP
 375         __u8                    adv_filter_policy;
 376         __u8                    adv_type;
 377
 378         __u8                    manufacturer_len;
 379         __u8                    manufacturer_data[HCI_MAX_EIR_MANUFACTURER_DATA_LENGTH];
 380 #endif
 381
 382         int (*open)(struct hci_dev *hdev);
 383         int (*close)(struct hci_dev *hdev);
 384         int (*flush)(struct hci_dev *hdev);
 385         int (*setup)(struct hci_dev *hdev);
 386         int (*send)(struct hci_dev *hdev, struct sk_buff *skb);
 387         void (*notify)(struct hci_dev *hdev, unsigned int evt);
 388         int (*set_bdaddr)(struct hci_dev *hdev, const bdaddr_t *bdaddr);
 389 };
 390
 391 #define HCI_PHY_HANDLE(handle)  (handle & 0xff)
 392
 393 struct hci_conn {
 394         struct list_head list;
 395
 396         atomic_t        refcnt;
 397
 398         bdaddr_t        dst;
 399         __u8            dst_type;
 400         bdaddr_t        src;
 401         __u8            src_type;
 402         bdaddr_t        init_addr;
 403         __u8            init_addr_type;
 404         bdaddr_t        resp_addr;
 405         __u8            resp_addr_type;
 406         __u16           handle;
 407         __u16           state;
 408         __u8            mode;
 409         __u8            type;
 410         __u8            role;
 411         bool            out;
 412         __u8            attempt;
 413         __u8            dev_class[3];
 414         __u8            features[HCI_MAX_PAGES][8];
 415         __u16           pkt_type;
 416         __u16           link_policy;
 417         __u8            key_type;
 418         __u8            auth_type;
 419         __u8            sec_level;
 420         __u8            pending_sec_level;
 421         __u8            pin_length;
 422         __u8            enc_key_size;
 423         __u8            io_capability;
 424         __u32           passkey_notify;
 425         __u8            passkey_entered;
 426         __u16           disc_timeout;
 427         __u16           conn_timeout;
 428         __u16           setting;
 429         __u16           le_conn_min_interval;
 430         __u16           le_conn_max_interval;
 431         __u16           le_conn_interval;
 432         __u16           le_conn_latency;
 433         __u16           le_supv_timeout;
 434         __u8            le_adv_data[HCI_MAX_AD_LENGTH];
 435         __u8            le_adv_data_len;
 436         __s8            rssi;
 437         __s8            tx_power;
 438         __s8            max_tx_power;
 439         unsigned long   flags;
 440
 441         __u32           clock;
 442         __u16           clock_accuracy;
 443
 444         unsigned long   conn_info_timestamp;
 445
 446         __u8            remote_cap;
 447         __u8            remote_auth;
 448         __u8            remote_id;
 449
 450         unsigned int    sent;
 451
 452         struct sk_buff_head data_q;
 453         struct list_head chan_list;
 454
 455         struct delayed_work disc_work;
 456         struct delayed_work auto_accept_work;
 457         struct delayed_work idle_work;
 458         struct delayed_work le_conn_timeout;
 459
 460         struct device   dev;
 461         struct dentry   *debugfs;
 462
 463         struct hci_dev  *hdev;
 464         void            *l2cap_data;
 465         void            *sco_data;
 466         struct amp_mgr  *amp_mgr;
 467
 468         struct hci_conn *link;
 469
 470 #ifdef CONFIG_TIZEN_WIP
 471 /* BEGIN TIZEN_Bluetooth :: RSSI Monitoring */
 472         bool            rssi_monitored;
 473 /* END TIZEN_Bluetooth :: RSSI Monitoring */
 474         __u8            sco_role;
 475         __u16           voice_setting;
 476 #endif
 477         void (*connect_cfm_cb)  (struct hci_conn *conn, u8 status);
 478         void (*security_cfm_cb) (struct hci_conn *conn, u8 status);
 479         void (*disconn_cfm_cb)  (struct hci_conn *conn, u8 reason);
 480 };
 481
 482 struct hci_chan {
 483         struct list_head list;
 484         __u16 handle;
 485         struct hci_conn *conn;
 486         struct sk_buff_head data_q;
 487         unsigned int    sent;
 488         __u8            state;
 489 };
 490
 491 struct hci_conn_params {
 492         struct list_head list;
 493         struct list_head action;
 494
 495         bdaddr_t addr;
 496         u8 addr_type;
 497
 498         u16 conn_min_interval;
 499         u16 conn_max_interval;
 500         u16 conn_latency;
 501         u16 supervision_timeout;
 502
 503         enum {
 504                 HCI_AUTO_CONN_DISABLED,
 505                 HCI_AUTO_CONN_REPORT,
 506                 HCI_AUTO_CONN_DIRECT,
 507                 HCI_AUTO_CONN_ALWAYS,
 508                 HCI_AUTO_CONN_LINK_LOSS,
 509         } auto_connect;
 510
 511         struct hci_conn *conn;
 512 };
 513
 514 extern struct list_head hci_dev_list;
 515 extern struct list_head hci_cb_list;
 516 extern rwlock_t hci_dev_list_lock;
 517 extern rwlock_t hci_cb_list_lock;
 518
 519 /* ----- HCI interface to upper protocols ----- */
 520 int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr);
 521 void l2cap_connect_cfm(struct hci_conn *hcon, u8 status);
 522 int l2cap_disconn_ind(struct hci_conn *hcon);
 523 void l2cap_disconn_cfm(struct hci_conn *hcon, u8 reason);
 524 int l2cap_security_cfm(struct hci_conn *hcon, u8 status, u8 encrypt);
 525 int l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
 526
 527 int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
 528 void sco_connect_cfm(struct hci_conn *hcon, __u8 status);
 529 void sco_disconn_cfm(struct hci_conn *hcon, __u8 reason);
 530 int sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb);
 531
 532 /* ----- Inquiry cache ----- */
 533 #define INQUIRY_CACHE_AGE_MAX   (HZ*30)   /* 30 seconds */
 534 #define INQUIRY_ENTRY_AGE_MAX   (HZ*60)   /* 60 seconds */
 535
 536 static inline void discovery_init(struct hci_dev *hdev)
 537 {
 538         hdev->discovery.state = DISCOVERY_STOPPED;
 539         INIT_LIST_HEAD(&hdev->discovery.all);
 540         INIT_LIST_HEAD(&hdev->discovery.unknown);
 541         INIT_LIST_HEAD(&hdev->discovery.resolve);
 542         hdev->discovery.report_invalid_rssi = true;
 543         hdev->discovery.rssi = HCI_RSSI_INVALID;
 544 }
 545
 546 static inline void hci_discovery_filter_clear(struct hci_dev *hdev)
 547 {
 548         hdev->discovery.report_invalid_rssi = true;
 549         hdev->discovery.rssi = HCI_RSSI_INVALID;
 550         hdev->discovery.uuid_count = 0;
 551         kfree(hdev->discovery.uuids);
 552         hdev->discovery.uuids = NULL;
 553 }
 554
 555 bool hci_discovery_active(struct hci_dev *hdev);
 556
 557 void hci_discovery_set_state(struct hci_dev *hdev, int state);
 558
 559 #ifdef CONFIG_TIZEN_WIP
 560 /* BEGIN TIZEN_Bluetooth :: Seperate LE discovery */
 561 bool hci_le_discovery_active(struct hci_dev *hdev);
 562 void hci_le_discovery_set_state(struct hci_dev *hdev, int state);
 563 /* END TIZEN_Bluetooth */
 564 #endif
 565 static inline int inquiry_cache_empty(struct hci_dev *hdev)
 566 {
 567         return list_empty(&hdev->discovery.all);
 568 }
 569
 570 static inline long inquiry_cache_age(struct hci_dev *hdev)
 571 {
 572         struct discovery_state *c = &hdev->discovery;
 573         return jiffies - c->timestamp;
 574 }
 575
 576 static inline long inquiry_entry_age(struct inquiry_entry *e)
 577 {
 578         return jiffies - e->timestamp;
 579 }
 580
 581 struct inquiry_entry *hci_inquiry_cache_lookup(struct hci_dev *hdev,
 582                                                bdaddr_t *bdaddr);
 583 struct inquiry_entry *hci_inquiry_cache_lookup_unknown(struct hci_dev *hdev,
 584                                                        bdaddr_t *bdaddr);
 585 struct inquiry_entry *hci_inquiry_cache_lookup_resolve(struct hci_dev *hdev,
 586                                                        bdaddr_t *bdaddr,
 587                                                        int state);
 588 void hci_inquiry_cache_update_resolve(struct hci_dev *hdev,
 589                                       struct inquiry_entry *ie);
 590 u32 hci_inquiry_cache_update(struct hci_dev *hdev, struct inquiry_data *data,
 591                              bool name_known);
 592 void hci_inquiry_cache_flush(struct hci_dev *hdev);
 593
 594 /* ----- HCI Connections ----- */
 595 #ifdef CONFIG_TIZEN_WIP
 596 #define LINK_SUPERVISION_TIMEOUT   0x1F40   /* n * 0.625 = 5 seconds */
 597 #endif
 598
 599 enum {
 600         HCI_CONN_AUTH_PEND,
 601         HCI_CONN_REAUTH_PEND,
 602         HCI_CONN_ENCRYPT_PEND,
 603         HCI_CONN_RSWITCH_PEND,
 604         HCI_CONN_MODE_CHANGE_PEND,
 605         HCI_CONN_SCO_SETUP_PEND,
 606         HCI_CONN_MGMT_CONNECTED,
 607         HCI_CONN_SSP_ENABLED,
 608         HCI_CONN_SC_ENABLED,
 609         HCI_CONN_AES_CCM,
 610         HCI_CONN_POWER_SAVE,
 611         HCI_CONN_REMOTE_OOB,
 612         HCI_CONN_FLUSH_KEY,
 613         HCI_CONN_ENCRYPT,
 614         HCI_CONN_AUTH,
 615         HCI_CONN_SECURE,
 616         HCI_CONN_FIPS,
 617         HCI_CONN_STK_ENCRYPT,
 618         HCI_CONN_AUTH_INITIATOR,
 619         HCI_CONN_DROP,
 620         HCI_CONN_PARAM_REMOVAL_PEND,
 621         HCI_CONN_NEW_LINK_KEY,
 622 };
 623
 624 static inline bool hci_conn_ssp_enabled(struct hci_conn *conn)
 625 {
 626         struct hci_dev *hdev = conn->hdev;
 627         return test_bit(HCI_SSP_ENABLED, &hdev->dev_flags) &&
 628                test_bit(HCI_CONN_SSP_ENABLED, &conn->flags);
 629 }
 630
 631 static inline bool hci_conn_sc_enabled(struct hci_conn *conn)
 632 {
 633         struct hci_dev *hdev = conn->hdev;
 634         return test_bit(HCI_SC_ENABLED, &hdev->dev_flags) &&
 635                test_bit(HCI_CONN_SC_ENABLED, &conn->flags);
 636 }
 637
 638 static inline void hci_conn_hash_add(struct hci_dev *hdev, struct hci_conn *c)
 639 {
 640         struct hci_conn_hash *h = &hdev->conn_hash;
 641         list_add_rcu(&c->list, &h->list);
 642         switch (c->type) {
 643         case ACL_LINK:
 644                 h->acl_num++;
 645                 break;
 646         case AMP_LINK:
 647                 h->amp_num++;
 648                 break;
 649         case LE_LINK:
 650                 h->le_num++;
 651                 if (c->role == HCI_ROLE_SLAVE)
 652                         h->le_num_slave++;
 653                 break;
 654         case SCO_LINK:
 655         case ESCO_LINK:
 656                 h->sco_num++;
 657                 break;
 658         }
 659 }
 660
 661 static inline void hci_conn_hash_del(struct hci_dev *hdev, struct hci_conn *c)
 662 {
 663         struct hci_conn_hash *h = &hdev->conn_hash;
 664
 665         list_del_rcu(&c->list);
 666         synchronize_rcu();
 667
 668         switch (c->type) {
 669         case ACL_LINK:
 670                 h->acl_num--;
 671                 break;
 672         case AMP_LINK:
 673                 h->amp_num--;
 674                 break;
 675         case LE_LINK:
 676                 h->le_num--;
 677                 if (c->role == HCI_ROLE_SLAVE)
 678                         h->le_num_slave--;
 679                 break;
 680         case SCO_LINK:
 681         case ESCO_LINK:
 682                 h->sco_num--;
 683                 break;
 684         }
 685 }
 686
 687 static inline unsigned int hci_conn_num(struct hci_dev *hdev, __u8 type)
 688 {
 689         struct hci_conn_hash *h = &hdev->conn_hash;
 690         switch (type) {
 691         case ACL_LINK:
 692                 return h->acl_num;
 693         case AMP_LINK:
 694                 return h->amp_num;
 695         case LE_LINK:
 696                 return h->le_num;
 697         case SCO_LINK:
 698         case ESCO_LINK:
 699                 return h->sco_num;
 700         default:
 701                 return 0;
 702         }
 703 }
 704
 705 static inline unsigned int hci_conn_count(struct hci_dev *hdev)
 706 {
 707         struct hci_conn_hash *c = &hdev->conn_hash;
 708
 709         return c->acl_num + c->amp_num + c->sco_num + c->le_num;
 710 }
 711
 712 static inline __u8 hci_conn_lookup_type(struct hci_dev *hdev, __u16 handle)
 713 {
 714         struct hci_conn_hash *h = &hdev->conn_hash;
 715         struct hci_conn *c;
 716         __u8 type = INVALID_LINK;
 717
 718         rcu_read_lock();
 719
 720         list_for_each_entry_rcu(c, &h->list, list) {
 721                 if (c->handle == handle) {
 722                         type = c->type;
 723                         break;
 724                 }
 725         }
 726
 727         rcu_read_unlock();
 728
 729         return type;
 730 }
 731
 732 static inline struct hci_conn *hci_conn_hash_lookup_handle(struct hci_dev *hdev,
 733                                                                 __u16 handle)
 734 {
 735         struct hci_conn_hash *h = &hdev->conn_hash;
 736         struct hci_conn  *c;
 737
 738         rcu_read_lock();
 739
 740         list_for_each_entry_rcu(c, &h->list, list) {
 741                 if (c->handle == handle) {
 742                         rcu_read_unlock();
 743                         return c;
 744                 }
 745         }
 746         rcu_read_unlock();
 747
 748         return NULL;
 749 }
 750
 751 static inline struct hci_conn *hci_conn_hash_lookup_ba(struct hci_dev *hdev,
 752                                                         __u8 type, bdaddr_t *ba)
 753 {
 754         struct hci_conn_hash *h = &hdev->conn_hash;
 755         struct hci_conn  *c;
 756
 757         rcu_read_lock();
 758
 759         list_for_each_entry_rcu(c, &h->list, list) {
 760                 if (c->type == type && !bacmp(&c->dst, ba)) {
 761                         rcu_read_unlock();
 762                         return c;
 763                 }
 764         }
 765
 766         rcu_read_unlock();
 767
 768         return NULL;
 769 }
 770
 771 #ifdef CONFIG_TIZEN_WIP
 772
 773 static inline struct hci_conn *hci_conn_hash_lookup_sco(struct hci_dev *hdev)
 774 {
 775         struct hci_conn_hash *h = &hdev->conn_hash;
 776         struct hci_conn  *c;
 777
 778         rcu_read_lock();
 779
 780         list_for_each_entry_rcu(c, &h->list, list) {
 781                 if (c->type == SCO_LINK || c->type == ESCO_LINK) {
 782                         rcu_read_unlock();
 783                         return c;
 784                 }
 785         }
 786
 787         rcu_read_unlock();
 788
 789         return NULL;
 790 }
 791
 792 /* BEGIN TIZEN_Bluetooth :: RSSI Monitoring */
 793 static inline bool hci_conn_rssi_state_set(struct hci_dev *hdev,
 794                                         __u8 type, bdaddr_t *ba, bool value)
 795 {
 796         struct hci_conn_hash *h = &hdev->conn_hash;
 797         struct hci_conn  *c;
 798         __u8 conn_type;
 799
 800         if (type == 0x01)
 801                 conn_type = LE_LINK;
 802         else
 803                 conn_type = ACL_LINK;
 804
 805         rcu_read_lock();
 806
 807         list_for_each_entry_rcu(c, &h->list, list) {
 808                 if (c->type == conn_type && !bacmp(&c->dst, ba)) {
 809                         c->rssi_monitored = value;
 810                         rcu_read_unlock();
 811                         return true;
 812                 }
 813         }
 814
 815         rcu_read_unlock();
 816         return false;
 817 }
 818
 819 static inline void hci_conn_rssi_unset_all(struct hci_dev *hdev,
 820                                         __u8 type)
 821 {
 822         struct hci_conn_hash *h = &hdev->conn_hash;
 823         struct hci_conn  *c;
 824         __u8 conn_type;
 825
 826         if (type == 0x01)
 827                 conn_type = LE_LINK;
 828         else
 829                 conn_type = ACL_LINK;
 830
 831         rcu_read_lock();
 832         list_for_each_entry_rcu(c, &h->list, list) {
 833                 if (c->type == conn_type)
 834                         c->rssi_monitored = false;
 835         }
 836         rcu_read_unlock();
 837 }
 838
 839 static inline int hci_conn_hash_lookup_rssi_count(struct hci_dev *hdev)
 840 {
 841         struct hci_conn_hash *h = &hdev->conn_hash;
 842         struct hci_conn  *c;
 843         int count = 0;
 844         rcu_read_lock();
 845
 846         list_for_each_entry_rcu(c, &h->list, list) {
 847                 if (c->rssi_monitored == true)
 848                         ++count;
 849         }
 850
 851         rcu_read_unlock();
 852         return count;
 853 }
 854 /* END TIZEN_Bluetooth :: RSSI Monitoring */
 855 #endif
 856
 857 static inline struct hci_conn *hci_conn_hash_lookup_state(struct hci_dev *hdev,
 858                                                         __u8 type, __u16 state)
 859 {
 860         struct hci_conn_hash *h = &hdev->conn_hash;
 861         struct hci_conn  *c;
 862
 863         rcu_read_lock();
 864
 865         list_for_each_entry_rcu(c, &h->list, list) {
 866                 if (c->type == type && c->state == state) {
 867                         rcu_read_unlock();
 868                         return c;
 869                 }
 870         }
 871
 872         rcu_read_unlock();
 873
 874         return NULL;
 875 }
 876
 877 int hci_disconnect(struct hci_conn *conn, __u8 reason);
 878 bool hci_setup_sync(struct hci_conn *conn, __u16 handle);
 879 void hci_sco_setup(struct hci_conn *conn, __u8 status);
 880
 881 struct hci_conn *hci_conn_add(struct hci_dev *hdev, int type, bdaddr_t *dst,
 882                               u8 role);
 883 int hci_conn_del(struct hci_conn *conn);
 884 void hci_conn_hash_flush(struct hci_dev *hdev);
 885 void hci_conn_check_pending(struct hci_dev *hdev);
 886
 887 struct hci_chan *hci_chan_create(struct hci_conn *conn);
 888 void hci_chan_del(struct hci_chan *chan);
 889 void hci_chan_list_flush(struct hci_conn *conn);
 890 struct hci_chan *hci_chan_lookup_handle(struct hci_dev *hdev, __u16 handle);
 891
 892 struct hci_conn *hci_connect_le(struct hci_dev *hdev, bdaddr_t *dst,
 893                                 u8 dst_type, u8 sec_level, u16 conn_timeout,
 894                                 u8 role);
 895 struct hci_conn *hci_connect_acl(struct hci_dev *hdev, bdaddr_t *dst,
 896                                  u8 sec_level, u8 auth_type);
 897 struct hci_conn *hci_connect_sco(struct hci_dev *hdev, int type, bdaddr_t *dst,
 898                                  __u16 setting);
 899 int hci_conn_check_link_mode(struct hci_conn *conn);
 900 int hci_conn_check_secure(struct hci_conn *conn, __u8 sec_level);
 901 int hci_conn_security(struct hci_conn *conn, __u8 sec_level, __u8 auth_type,
 902                       bool initiator);
 903 int hci_conn_switch_role(struct hci_conn *conn, __u8 role);
 904 #ifdef CONFIG_TIZEN_WIP
 905 int hci_conn_change_supervision_timeout(struct hci_conn *conn, __u16 timeout);
 906 #endif
 907
 908 void hci_conn_enter_active_mode(struct hci_conn *conn, __u8 force_active);
 909
 910 void hci_le_conn_failed(struct hci_conn *conn, u8 status);
 911
 912 /*
 913  * hci_conn_get() and hci_conn_put() are used to control the life-time of an
 914  * "hci_conn" object. They do not guarantee that the hci_conn object is running,
 915  * working or anything else. They just guarantee that the object is available
 916  * and can be dereferenced. So you can use its locks, local variables and any
 917  * other constant data.
 918  * Before accessing runtime data, you _must_ lock the object and then check that
 919  * it is still running. As soon as you release the locks, the connection might
 920  * get dropped, though.
 921  *
 922  * On the other hand, hci_conn_hold() and hci_conn_drop() are used to control
 923  * how long the underlying connection is held. So every channel that runs on the
 924  * hci_conn object calls this to prevent the connection from disappearing. As
 925  * long as you hold a device, you must also guarantee that you have a valid
 926  * reference to the device via hci_conn_get() (or the initial reference from
 927  * hci_conn_add()).
 928  * The hold()/drop() ref-count is known to drop below 0 sometimes, which doesn't
 929  * break because nobody cares for that. But this means, we cannot use
 930  * _get()/_drop() in it, but require the caller to have a valid ref (FIXME).
 931  */
 932
 933 static inline struct hci_conn *hci_conn_get(struct hci_conn *conn)
 934 {
 935         get_device(&conn->dev);
 936         return conn;
 937 }
 938
 939 static inline void hci_conn_put(struct hci_conn *conn)
 940 {
 941         put_device(&conn->dev);
 942 }
 943
 944 static inline void hci_conn_hold(struct hci_conn *conn)
 945 {
 946         BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
 947
 948         atomic_inc(&conn->refcnt);
 949         cancel_delayed_work(&conn->disc_work);
 950 }
 951
 952 static inline void hci_conn_drop(struct hci_conn *conn)
 953 {
 954         BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
 955
 956 #ifdef CONFIG_TIZEN_WIP
 957         if (!atomic_read(&conn->refcnt)) {
 958                 BT_ERR("conn->refcnt is zero");
 959                 return;
 960         }
 961 #endif
 962         if (atomic_dec_and_test(&conn->refcnt)) {
 963                 unsigned long timeo;
 964
 965                 switch (conn->type) {
 966                 case ACL_LINK:
 967                 case LE_LINK:
 968                         cancel_delayed_work(&conn->idle_work);
 969                         if (conn->state == BT_CONNECTED) {
 970                                 timeo = conn->disc_timeout;
 971                                 if (!conn->out)
 972                                         timeo *= 2;
 973                         } else {
 974                                 timeo = 0;
 975                         }
 976                         break;
 977
 978                 case AMP_LINK:
 979                         timeo = conn->disc_timeout;
 980                         break;
 981
 982                 default:
 983                         timeo = 0;
 984                         break;
 985                 }
 986
 987                 cancel_delayed_work(&conn->disc_work);
 988                 queue_delayed_work(conn->hdev->workqueue,
 989                                    &conn->disc_work, timeo);
 990         }
 991 }
 992
 993 /* ----- HCI Devices ----- */
 994 static inline void hci_dev_put(struct hci_dev *d)
 995 {
 996         BT_DBG("%s orig refcnt %d", d->name,
 997                atomic_read(&d->dev.kobj.kref.refcount));
 998
 999         put_device(&d->dev);
1000 }
1001
1002 static inline struct hci_dev *hci_dev_hold(struct hci_dev *d)
1003 {
1004         BT_DBG("%s orig refcnt %d", d->name,
1005                atomic_read(&d->dev.kobj.kref.refcount));
1006
1007         get_device(&d->dev);
1008         return d;
1009 }
1010
1011 #define hci_dev_lock(d)         mutex_lock(&d->lock)
1012 #define hci_dev_unlock(d)       mutex_unlock(&d->lock)
1013
1014 #define to_hci_dev(d) container_of(d, struct hci_dev, dev)
1015 #define to_hci_conn(c) container_of(c, struct hci_conn, dev)
1016
1017 static inline void *hci_get_drvdata(struct hci_dev *hdev)
1018 {
1019         return dev_get_drvdata(&hdev->dev);
1020 }
1021
1022 static inline void hci_set_drvdata(struct hci_dev *hdev, void *data)
1023 {
1024         dev_set_drvdata(&hdev->dev, data);
1025 }
1026
1027 struct hci_dev *hci_dev_get(int index);
1028 struct hci_dev *hci_get_route(bdaddr_t *dst, bdaddr_t *src);
1029
1030 struct hci_dev *hci_alloc_dev(void);
1031 void hci_free_dev(struct hci_dev *hdev);
1032 int hci_register_dev(struct hci_dev *hdev);
1033 void hci_unregister_dev(struct hci_dev *hdev);
1034 int hci_suspend_dev(struct hci_dev *hdev);
1035 int hci_resume_dev(struct hci_dev *hdev);
1036 int hci_reset_dev(struct hci_dev *hdev);
1037 int hci_dev_open(__u16 dev);
1038 int hci_dev_close(__u16 dev);
1039 int hci_dev_reset(__u16 dev);
1040 int hci_dev_reset_stat(__u16 dev);
1041 int hci_dev_cmd(unsigned int cmd, void __user *arg);
1042 int hci_get_dev_list(void __user *arg);
1043 int hci_get_dev_info(void __user *arg);
1044 int hci_get_conn_list(void __user *arg);
1045 #ifdef CONFIG_TIZEN_WIP
1046 u32 get_link_mode(struct hci_conn *conn);
1047 #endif
1048 int hci_get_conn_info(struct hci_dev *hdev, void __user *arg);
1049 int hci_get_auth_info(struct hci_dev *hdev, void __user *arg);
1050 int hci_inquiry(void __user *arg);
1051
1052 struct bdaddr_list *hci_bdaddr_list_lookup(struct list_head *list,
1053                                            bdaddr_t *bdaddr, u8 type);
1054 int hci_bdaddr_list_add(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1055 int hci_bdaddr_list_del(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1056 void hci_bdaddr_list_clear(struct list_head *list);
1057
1058 struct hci_conn_params *hci_conn_params_lookup(struct hci_dev *hdev,
1059                                                bdaddr_t *addr, u8 addr_type);
1060 struct hci_conn_params *hci_conn_params_add(struct hci_dev *hdev,
1061                                             bdaddr_t *addr, u8 addr_type);
1062 void hci_conn_params_del(struct hci_dev *hdev, bdaddr_t *addr, u8 addr_type);
1063 void hci_conn_params_clear_all(struct hci_dev *hdev);
1064 void hci_conn_params_clear_disabled(struct hci_dev *hdev);
1065
1066 struct hci_conn_params *hci_pend_le_action_lookup(struct list_head *list,
1067                                                   bdaddr_t *addr,
1068                                                   u8 addr_type);
1069
1070 void hci_uuids_clear(struct hci_dev *hdev);
1071
1072 void hci_link_keys_clear(struct hci_dev *hdev);
1073 struct link_key *hci_find_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1074 struct link_key *hci_add_link_key(struct hci_dev *hdev, struct hci_conn *conn,
1075                                   bdaddr_t *bdaddr, u8 *val, u8 type,
1076                                   u8 pin_len, bool *persistent);
1077 struct smp_ltk *hci_add_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1078                             u8 addr_type, u8 type, u8 authenticated,
1079                             u8 tk[16], u8 enc_size, __le16 ediv, __le64 rand);
1080 struct smp_ltk *hci_find_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1081                              u8 addr_type, u8 role);
1082 int hci_remove_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 bdaddr_type);
1083 void hci_smp_ltks_clear(struct hci_dev *hdev);
1084 int hci_remove_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1085
1086 struct smp_irk *hci_find_irk_by_rpa(struct hci_dev *hdev, bdaddr_t *rpa);
1087 struct smp_irk *hci_find_irk_by_addr(struct hci_dev *hdev, bdaddr_t *bdaddr,
1088                                      u8 addr_type);
1089 struct smp_irk *hci_add_irk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1090                             u8 addr_type, u8 val[16], bdaddr_t *rpa);
1091 void hci_remove_irk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 addr_type);
1092 void hci_smp_irks_clear(struct hci_dev *hdev);
1093
1094 void hci_remote_oob_data_clear(struct hci_dev *hdev);
1095 struct oob_data *hci_find_remote_oob_data(struct hci_dev *hdev,
1096                                           bdaddr_t *bdaddr, u8 bdaddr_type);
1097 int hci_add_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1098                             u8 bdaddr_type, u8 *hash192, u8 *rand192,
1099                             u8 *hash256, u8 *rand256);
1100 int hci_remove_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1101                                u8 bdaddr_type);
1102
1103 void hci_event_packet(struct hci_dev *hdev, struct sk_buff *skb);
1104
1105 int hci_recv_frame(struct hci_dev *hdev, struct sk_buff *skb);
1106 int hci_recv_stream_fragment(struct hci_dev *hdev, void *data, int count);
1107
1108 void hci_init_sysfs(struct hci_dev *hdev);
1109 void hci_conn_init_sysfs(struct hci_conn *conn);
1110 void hci_conn_add_sysfs(struct hci_conn *conn);
1111 void hci_conn_del_sysfs(struct hci_conn *conn);
1112
1113 #define SET_HCIDEV_DEV(hdev, pdev) ((hdev)->dev.parent = (pdev))
1114
1115 /* ----- LMP capabilities ----- */
1116 #define lmp_encrypt_capable(dev)   ((dev)->features[0][0] & LMP_ENCRYPT)
1117 #define lmp_rswitch_capable(dev)   ((dev)->features[0][0] & LMP_RSWITCH)
1118 #define lmp_hold_capable(dev)      ((dev)->features[0][0] & LMP_HOLD)
1119 #define lmp_sniff_capable(dev)     ((dev)->features[0][0] & LMP_SNIFF)
1120 #define lmp_park_capable(dev)      ((dev)->features[0][1] & LMP_PARK)
1121 #define lmp_inq_rssi_capable(dev)  ((dev)->features[0][3] & LMP_RSSI_INQ)
1122 #define lmp_esco_capable(dev)      ((dev)->features[0][3] & LMP_ESCO)
1123 #define lmp_bredr_capable(dev)     (!((dev)->features[0][4] & LMP_NO_BREDR))
1124 #define lmp_le_capable(dev)        ((dev)->features[0][4] & LMP_LE)
1125 #define lmp_sniffsubr_capable(dev) ((dev)->features[0][5] & LMP_SNIFF_SUBR)
1126 #define lmp_pause_enc_capable(dev) ((dev)->features[0][5] & LMP_PAUSE_ENC)
1127 #define lmp_ext_inq_capable(dev)   ((dev)->features[0][6] & LMP_EXT_INQ)
1128 #define lmp_le_br_capable(dev)     (!!((dev)->features[0][6] & LMP_SIMUL_LE_BR))
1129 #define lmp_ssp_capable(dev)       ((dev)->features[0][6] & LMP_SIMPLE_PAIR)
1130 #define lmp_no_flush_capable(dev)  ((dev)->features[0][6] & LMP_NO_FLUSH)
1131 #define lmp_lsto_capable(dev)      ((dev)->features[0][7] & LMP_LSTO)
1132 #define lmp_inq_tx_pwr_capable(dev) ((dev)->features[0][7] & LMP_INQ_TX_PWR)
1133 #define lmp_ext_feat_capable(dev)  ((dev)->features[0][7] & LMP_EXTFEATURES)
1134 #define lmp_transp_capable(dev)    ((dev)->features[0][2] & LMP_TRANSPARENT)
1135
1136 /* ----- Extended LMP capabilities ----- */
1137 #define lmp_csb_master_capable(dev) ((dev)->features[2][0] & LMP_CSB_MASTER)
1138 #define lmp_csb_slave_capable(dev)  ((dev)->features[2][0] & LMP_CSB_SLAVE)
1139 #define lmp_sync_train_capable(dev) ((dev)->features[2][0] & LMP_SYNC_TRAIN)
1140 #define lmp_sync_scan_capable(dev)  ((dev)->features[2][0] & LMP_SYNC_SCAN)
1141 #define lmp_sc_capable(dev)         ((dev)->features[2][1] & LMP_SC)
1142 #define lmp_ping_capable(dev)       ((dev)->features[2][1] & LMP_PING)
1143
1144 /* ----- Host capabilities ----- */
1145 #define lmp_host_ssp_capable(dev)  ((dev)->features[1][0] & LMP_HOST_SSP)
1146 #define lmp_host_sc_capable(dev)   ((dev)->features[1][0] & LMP_HOST_SC)
1147 #define lmp_host_le_capable(dev)   (!!((dev)->features[1][0] & LMP_HOST_LE))
1148 #define lmp_host_le_br_capable(dev) (!!((dev)->features[1][0] & LMP_HOST_LE_BREDR))
1149
1150 #define hdev_is_powered(hdev) (test_bit(HCI_UP, &hdev->flags) && \
1151                                 !test_bit(HCI_AUTO_OFF, &hdev->dev_flags))
1152 #define bredr_sc_enabled(dev) (lmp_sc_capable(dev) && \
1153                                test_bit(HCI_SC_ENABLED, &(dev)->dev_flags))
1154
1155 /* ----- HCI protocols ----- */
1156 #define HCI_PROTO_DEFER             0x01
1157
1158 static inline int hci_proto_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
1159                                         __u8 type, __u8 *flags)
1160 {
1161         switch (type) {
1162         case ACL_LINK:
1163                 return l2cap_connect_ind(hdev, bdaddr);
1164
1165         case SCO_LINK:
1166         case ESCO_LINK:
1167                 return sco_connect_ind(hdev, bdaddr, flags);
1168
1169         default:
1170                 BT_ERR("unknown link type %d", type);
1171                 return -EINVAL;
1172         }
1173 }
1174
1175 static inline void hci_proto_connect_cfm(struct hci_conn *conn, __u8 status)
1176 {
1177         switch (conn->type) {
1178         case ACL_LINK:
1179         case LE_LINK:
1180                 l2cap_connect_cfm(conn, status);
1181                 break;
1182
1183         case SCO_LINK:
1184         case ESCO_LINK:
1185                 sco_connect_cfm(conn, status);
1186                 break;
1187
1188         default:
1189                 BT_ERR("unknown link type %d", conn->type);
1190                 break;
1191         }
1192
1193         if (conn->connect_cfm_cb)
1194                 conn->connect_cfm_cb(conn, status);
1195 }
1196
1197 static inline int hci_proto_disconn_ind(struct hci_conn *conn)
1198 {
1199         if (conn->type != ACL_LINK && conn->type != LE_LINK)
1200                 return HCI_ERROR_REMOTE_USER_TERM;
1201
1202         return l2cap_disconn_ind(conn);
1203 }
1204
1205 static inline void hci_proto_disconn_cfm(struct hci_conn *conn, __u8 reason)
1206 {
1207         switch (conn->type) {
1208         case ACL_LINK:
1209         case LE_LINK:
1210                 l2cap_disconn_cfm(conn, reason);
1211                 break;
1212
1213         case SCO_LINK:
1214         case ESCO_LINK:
1215                 sco_disconn_cfm(conn, reason);
1216                 break;
1217
1218         /* L2CAP would be handled for BREDR chan */
1219         case AMP_LINK:
1220                 break;
1221
1222         default:
1223                 BT_ERR("unknown link type %d", conn->type);
1224                 break;
1225         }
1226
1227         if (conn->disconn_cfm_cb)
1228                 conn->disconn_cfm_cb(conn, reason);
1229 }
1230
1231 static inline void hci_proto_auth_cfm(struct hci_conn *conn, __u8 status)
1232 {
1233         __u8 encrypt;
1234
1235         if (conn->type != ACL_LINK && conn->type != LE_LINK)
1236                 return;
1237
1238         if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->flags))
1239                 return;
1240
1241         encrypt = test_bit(HCI_CONN_ENCRYPT, &conn->flags) ? 0x01 : 0x00;
1242         l2cap_security_cfm(conn, status, encrypt);
1243
1244         if (conn->security_cfm_cb)
1245                 conn->security_cfm_cb(conn, status);
1246 }
1247
1248 static inline void hci_proto_encrypt_cfm(struct hci_conn *conn, __u8 status,
1249                                                                 __u8 encrypt)
1250 {
1251         if (conn->type != ACL_LINK && conn->type != LE_LINK)
1252                 return;
1253
1254         l2cap_security_cfm(conn, status, encrypt);
1255
1256         if (conn->security_cfm_cb)
1257                 conn->security_cfm_cb(conn, status);
1258 }
1259
1260 /* ----- HCI callbacks ----- */
1261 struct hci_cb {
1262         struct list_head list;
1263
1264         char *name;
1265
1266         void (*security_cfm)    (struct hci_conn *conn, __u8 status,
1267                                                                 __u8 encrypt);
1268         void (*key_change_cfm)  (struct hci_conn *conn, __u8 status);
1269         void (*role_switch_cfm) (struct hci_conn *conn, __u8 status, __u8 role);
1270 };
1271
1272 static inline void hci_auth_cfm(struct hci_conn *conn, __u8 status)
1273 {
1274         struct hci_cb *cb;
1275         __u8 encrypt;
1276
1277         hci_proto_auth_cfm(conn, status);
1278
1279         if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->flags))
1280                 return;
1281
1282         encrypt = test_bit(HCI_CONN_ENCRYPT, &conn->flags) ? 0x01 : 0x00;
1283
1284         read_lock(&hci_cb_list_lock);
1285         list_for_each_entry(cb, &hci_cb_list, list) {
1286                 if (cb->security_cfm)
1287                         cb->security_cfm(conn, status, encrypt);
1288         }
1289         read_unlock(&hci_cb_list_lock);
1290 }
1291
1292 static inline void hci_encrypt_cfm(struct hci_conn *conn, __u8 status,
1293                                                                 __u8 encrypt)
1294 {
1295         struct hci_cb *cb;
1296
1297         if (conn->sec_level == BT_SECURITY_SDP)
1298                 conn->sec_level = BT_SECURITY_LOW;
1299
1300         if (conn->pending_sec_level > conn->sec_level)
1301                 conn->sec_level = conn->pending_sec_level;
1302
1303         hci_proto_encrypt_cfm(conn, status, encrypt);
1304
1305         read_lock(&hci_cb_list_lock);
1306         list_for_each_entry(cb, &hci_cb_list, list) {
1307                 if (cb->security_cfm)
1308                         cb->security_cfm(conn, status, encrypt);
1309         }
1310         read_unlock(&hci_cb_list_lock);
1311 }
1312
1313 static inline void hci_key_change_cfm(struct hci_conn *conn, __u8 status)
1314 {
1315         struct hci_cb *cb;
1316
1317         read_lock(&hci_cb_list_lock);
1318         list_for_each_entry(cb, &hci_cb_list, list) {
1319                 if (cb->key_change_cfm)
1320                         cb->key_change_cfm(conn, status);
1321         }
1322         read_unlock(&hci_cb_list_lock);
1323 }
1324
1325 static inline void hci_role_switch_cfm(struct hci_conn *conn, __u8 status,
1326                                                                 __u8 role)
1327 {
1328         struct hci_cb *cb;
1329
1330         read_lock(&hci_cb_list_lock);
1331         list_for_each_entry(cb, &hci_cb_list, list) {
1332                 if (cb->role_switch_cfm)
1333                         cb->role_switch_cfm(conn, status, role);
1334         }
1335         read_unlock(&hci_cb_list_lock);
1336 }
1337
1338 static inline bool eir_has_data_type(u8 *data, size_t data_len, u8 type)
1339 {
1340         size_t parsed = 0;
1341
1342         if (data_len < 2)
1343                 return false;
1344
1345         while (parsed < data_len - 1) {
1346                 u8 field_len = data[0];
1347
1348                 if (field_len == 0)
1349                         break;
1350
1351                 parsed += field_len + 1;
1352
1353                 if (parsed > data_len)
1354                         break;
1355
1356                 if (data[1] == type)
1357                         return true;
1358
1359                 data += field_len + 1;
1360         }
1361
1362         return false;
1363 }
1364
1365 static inline bool hci_bdaddr_is_rpa(bdaddr_t *bdaddr, u8 addr_type)
1366 {
1367         if (addr_type != ADDR_LE_DEV_RANDOM)
1368                 return false;
1369
1370         if ((bdaddr->b[5] & 0xc0) == 0x40)
1371                return true;
1372
1373         return false;
1374 }
1375
1376 static inline bool hci_is_identity_address(bdaddr_t *addr, u8 addr_type)
1377 {
1378         if (addr_type == ADDR_LE_DEV_PUBLIC)
1379                 return true;
1380
1381         /* Check for Random Static address type */
1382         if ((addr->b[5] & 0xc0) == 0xc0)
1383                 return true;
1384
1385         return false;
1386 }
1387
1388 static inline struct smp_irk *hci_get_irk(struct hci_dev *hdev,
1389                                           bdaddr_t *bdaddr, u8 addr_type)
1390 {
1391         if (!hci_bdaddr_is_rpa(bdaddr, addr_type))
1392                 return NULL;
1393
1394         return hci_find_irk_by_rpa(hdev, bdaddr);
1395 }
1396
1397 static inline int hci_check_conn_params(u16 min, u16 max, u16 latency,
1398                                         u16 to_multiplier)
1399 {
1400         u16 max_latency;
1401
1402         if (min > max || min < 6 || max > 3200)
1403                 return -EINVAL;
1404
1405         if (to_multiplier < 10 || to_multiplier > 3200)
1406                 return -EINVAL;
1407
1408         if (max >= to_multiplier * 8)
1409                 return -EINVAL;
1410
1411         max_latency = (to_multiplier * 8 / max) - 1;
1412         if (latency > 499 || latency > max_latency)
1413                 return -EINVAL;
1414
1415         return 0;
1416 }
1417
1418 int hci_register_cb(struct hci_cb *hcb);
1419 int hci_unregister_cb(struct hci_cb *hcb);
1420
1421 #ifdef CONFIG_TIZEN_WIP
1422 int hci_register_notifier(struct notifier_block *nb);
1423 int hci_unregister_notifier(struct notifier_block *nb);
1424 #endif
1425 bool hci_req_pending(struct hci_dev *hdev);
1426
1427 struct sk_buff *__hci_cmd_sync(struct hci_dev *hdev, u16 opcode, u32 plen,
1428                                const void *param, u32 timeout);
1429 struct sk_buff *__hci_cmd_sync_ev(struct hci_dev *hdev, u16 opcode, u32 plen,
1430                                   const void *param, u8 event, u32 timeout);
1431
1432 int hci_send_cmd(struct hci_dev *hdev, __u16 opcode, __u32 plen,
1433                  const void *param);
1434 void hci_send_acl(struct hci_chan *chan, struct sk_buff *skb, __u16 flags);
1435 void hci_send_sco(struct hci_conn *conn, struct sk_buff *skb);
1436
1437 void *hci_sent_cmd_data(struct hci_dev *hdev, __u16 opcode);
1438
1439 /* ----- HCI Sockets ----- */
1440 void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb);
1441 void hci_send_to_control(struct sk_buff *skb, struct sock *skip_sk);
1442 void hci_send_to_monitor(struct hci_dev *hdev, struct sk_buff *skb);
1443
1444 void hci_sock_dev_event(struct hci_dev *hdev, int event);
1445
1446 /* Management interface */
1447 #define DISCOV_TYPE_BREDR               (BIT(BDADDR_BREDR))
1448 #define DISCOV_TYPE_LE                  (BIT(BDADDR_LE_PUBLIC) | \
1449                                          BIT(BDADDR_LE_RANDOM))
1450 #define DISCOV_TYPE_INTERLEAVED         (BIT(BDADDR_BREDR) | \
1451                                          BIT(BDADDR_LE_PUBLIC) | \
1452                                          BIT(BDADDR_LE_RANDOM))
1453
1454 /* These LE scan and inquiry parameters were chosen according to LE General
1455  * Discovery Procedure specification.
1456  */
1457 #define DISCOV_LE_SCAN_WIN              0x12
1458 #define DISCOV_LE_SCAN_INT              0x12
1459 #define DISCOV_LE_TIMEOUT               10240   /* msec */
1460 #define DISCOV_INTERLEAVED_TIMEOUT      5120    /* msec */
1461 #define DISCOV_INTERLEAVED_INQUIRY_LEN  0x04
1462 #define DISCOV_BREDR_INQUIRY_LEN        0x08
1463
1464 int mgmt_control(struct sock *sk, struct msghdr *msg, size_t len);
1465 int mgmt_new_settings(struct hci_dev *hdev);
1466 void mgmt_index_added(struct hci_dev *hdev);
1467 void mgmt_index_removed(struct hci_dev *hdev);
1468 void mgmt_set_powered_failed(struct hci_dev *hdev, int err);
1469 int mgmt_powered(struct hci_dev *hdev, u8 powered);
1470 int mgmt_update_adv_data(struct hci_dev *hdev);
1471 void mgmt_discoverable_timeout(struct hci_dev *hdev);
1472 void mgmt_new_link_key(struct hci_dev *hdev, struct link_key *key,
1473                        bool persistent);
1474 void mgmt_device_connected(struct hci_dev *hdev, struct hci_conn *conn,
1475                            u32 flags, u8 *name, u8 name_len);
1476 void mgmt_device_disconnected(struct hci_dev *hdev, bdaddr_t *bdaddr,
1477                               u8 link_type, u8 addr_type, u8 reason,
1478                               bool mgmt_connected);
1479 #ifdef CONFIG_TIZEN_WIP
1480 /* BEGIN TIZEN_Bluetooth :: name update changes */
1481 int mgmt_device_name_update(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 *name,
1482                            u8 name_len);
1483 /* END TIZEN_Bluetooth :: name update changes */
1484 #endif
1485 void mgmt_disconnect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr,
1486                             u8 link_type, u8 addr_type, u8 status);
1487 void mgmt_connect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1488                          u8 addr_type, u8 status);
1489 void mgmt_pin_code_request(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 secure);
1490 void mgmt_pin_code_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1491                                   u8 status);
1492 void mgmt_pin_code_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1493                                       u8 status);
1494 int mgmt_user_confirm_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
1495                               u8 link_type, u8 addr_type, u32 value,
1496                               u8 confirm_hint);
1497 int mgmt_user_confirm_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1498                                      u8 link_type, u8 addr_type, u8 status);
1499 int mgmt_user_confirm_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1500                                          u8 link_type, u8 addr_type, u8 status);
1501 int mgmt_user_passkey_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
1502                               u8 link_type, u8 addr_type);
1503 int mgmt_user_passkey_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1504                                      u8 link_type, u8 addr_type, u8 status);
1505 int mgmt_user_passkey_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1506                                          u8 link_type, u8 addr_type, u8 status);
1507 int mgmt_user_passkey_notify(struct hci_dev *hdev, bdaddr_t *bdaddr,
1508                              u8 link_type, u8 addr_type, u32 passkey,
1509                              u8 entered);
1510 void mgmt_auth_failed(struct hci_conn *conn, u8 status);
1511 void mgmt_auth_enable_complete(struct hci_dev *hdev, u8 status);
1512 void mgmt_ssp_enable_complete(struct hci_dev *hdev, u8 enable, u8 status);
1513 void mgmt_set_class_of_dev_complete(struct hci_dev *hdev, u8 *dev_class,
1514                                     u8 status);
1515 void mgmt_set_local_name_complete(struct hci_dev *hdev, u8 *name, u8 status);
1516 void mgmt_read_local_oob_data_complete(struct hci_dev *hdev, u8 *hash192,
1517                                        u8 *rand192, u8 *hash256, u8 *rand256,
1518                                        u8 status);
1519 void mgmt_device_found(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1520                        u8 addr_type, u8 *dev_class, s8 rssi, u32 flags,
1521                        u8 *eir, u16 eir_len, u8 *scan_rsp, u8 scan_rsp_len);
1522 #ifdef CONFIG_TIZEN_WIP /* TIZEN_Bluetooth :: Pass adv type */
1523 void mgmt_le_device_found(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1524                        u8 addr_type, u8 *dev_class, s8 rssi, u32 flags,
1525                        u8 *eir, u16 eir_len, u8 *scan_rsp, u8 scan_rsp_len, u8 adv_type);
1526 #endif
1527 void mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1528                       u8 addr_type, s8 rssi, u8 *name, u8 name_len);
1529 void mgmt_discovering(struct hci_dev *hdev, u8 discovering);
1530 bool mgmt_powering_down(struct hci_dev *hdev);
1531 #ifdef CONFIG_TIZEN_WIP
1532 /* BEGIN TIZEN_Bluetooth :: Seperate LE discovery */
1533 void mgmt_le_discovering(struct hci_dev *hdev, u8 discovering);
1534 /* END TIZEN_Bluetooth */
1535 #endif
1536 void mgmt_new_ltk(struct hci_dev *hdev, struct smp_ltk *key, bool persistent);
1537 void mgmt_new_irk(struct hci_dev *hdev, struct smp_irk *irk);
1538 void mgmt_new_csrk(struct hci_dev *hdev, struct smp_csrk *csrk,
1539                    bool persistent);
1540 void mgmt_new_conn_param(struct hci_dev *hdev, bdaddr_t *bdaddr,
1541                          u8 bdaddr_type, u8 store_hint, u16 min_interval,
1542                          u16 max_interval, u16 latency, u16 timeout);
1543 void mgmt_reenable_advertising(struct hci_dev *hdev);
1544 void mgmt_smp_complete(struct hci_conn *conn, bool complete);
1545 #ifdef CONFIG_TIZEN_WIP
1546 void mgmt_hardware_error(struct hci_dev *hdev, u8 err_code);
1547 void mgmt_tx_timeout_error(struct hci_dev *hdev);
1548 void mgmt_rssi_enable_success(struct sock *sk, struct hci_dev *hdev,
1549                 void *data, struct hci_cc_rsp_enable_rssi *rp, int success);
1550 void mgmt_rssi_disable_success(struct sock *sk, struct hci_dev *hdev,
1551                 void *data, struct hci_cc_rsp_enable_rssi *rp, int success);
1552 int mgmt_set_rssi_threshold(struct sock *sk, struct hci_dev *hdev,
1553                 void *data, u16 len);
1554 void mgmt_rssi_alert_evt(struct hci_dev *hdev, struct sk_buff *skb);
1555 void mgmt_raw_rssi_response(struct hci_dev *hdev,
1556                 struct hci_cc_rp_get_raw_rssi *rp, int success);
1557 void mgmt_multi_adv_state_change_evt(struct hci_dev *hdev,
1558                 struct sk_buff *skb);
1559 void mgmt_enable_rssi_cc(struct hci_dev *hdev, void *response, u8 status);
1560 int mgmt_le_conn_updated(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type,
1561                 u8 dst_type, u16 conn_interval, u16 conn_latency,
1562                 u16 supervision_timeout);
1563 int mgmt_le_conn_update_failed(struct hci_dev *hdev, bdaddr_t *bdaddr,
1564                 u8 link_type, u8 addr_type, u8 status);
1565 void mgmt_6lowpan_conn_changed(struct hci_dev *hdev, char if_name[16],
1566                 bdaddr_t *bdaddr, u8 addr_type, bool connected);
1567 void mgmt_le_read_maximum_data_length_complete(struct hci_dev *hdev,
1568                 u8 status);
1569 void mgmt_le_write_host_suggested_data_length_complete(struct hci_dev *hdev,
1570                 u8 status);
1571 #endif
1572
1573 u8 hci_le_conn_update(struct hci_conn *conn, u16 min, u16 max, u16 latency,
1574                       u16 to_multiplier);
1575 void hci_le_start_enc(struct hci_conn *conn, __le16 ediv, __le64 rand,
1576                                                         __u8 ltk[16]);
1577
1578 void hci_copy_identity_address(struct hci_dev *hdev, bdaddr_t *bdaddr,
1579                                u8 *bdaddr_type);
1580
1581 #define SCO_AIRMODE_MASK       0x0003
1582 #define SCO_AIRMODE_CVSD       0x0000
1583 #define SCO_AIRMODE_TRANSP     0x0003
1584
1585 #endif /* __HCI_CORE_H */