b83cfcf666648d4ebb2136b0e3757898bac238d7
[platform/kernel/linux-starfive.git] / include / net / bluetooth / hci_core.h
1 /*
2    BlueZ - Bluetooth protocol stack for Linux
3    Copyright (c) 2000-2001, 2010, Code Aurora Forum. All rights reserved.
4    Copyright 2023 NXP
5
6    Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
7
8    This program is free software; you can redistribute it and/or modify
9    it under the terms of the GNU General Public License version 2 as
10    published by the Free Software Foundation;
11
12    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
13    OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
14    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
15    IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
16    CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
17    WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
18    ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
19    OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
20
21    ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
22    COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
23    SOFTWARE IS DISCLAIMED.
24 */
25
26 #ifndef __HCI_CORE_H
27 #define __HCI_CORE_H
28
29 #include <linux/idr.h>
30 #include <linux/leds.h>
31 #include <linux/rculist.h>
32
33 #include <net/bluetooth/hci.h>
34 #include <net/bluetooth/hci_sync.h>
35 #include <net/bluetooth/hci_sock.h>
36 #include <net/bluetooth/coredump.h>
37
38 /* HCI priority */
39 #define HCI_PRIO_MAX    7
40
41 /* HCI maximum id value */
42 #define HCI_MAX_ID 10000
43
44 /* HCI Core structures */
45 struct inquiry_data {
46         bdaddr_t        bdaddr;
47         __u8            pscan_rep_mode;
48         __u8            pscan_period_mode;
49         __u8            pscan_mode;
50         __u8            dev_class[3];
51         __le16          clock_offset;
52         __s8            rssi;
53         __u8            ssp_mode;
54 };
55
56 struct inquiry_entry {
57         struct list_head        all;            /* inq_cache.all */
58         struct list_head        list;           /* unknown or resolve */
59         enum {
60                 NAME_NOT_KNOWN,
61                 NAME_NEEDED,
62                 NAME_PENDING,
63                 NAME_KNOWN,
64         } name_state;
65         __u32                   timestamp;
66         struct inquiry_data     data;
67 };
68
69 struct discovery_state {
70         int                     type;
71         enum {
72                 DISCOVERY_STOPPED,
73                 DISCOVERY_STARTING,
74                 DISCOVERY_FINDING,
75                 DISCOVERY_RESOLVING,
76                 DISCOVERY_STOPPING,
77         } state;
78         struct list_head        all;    /* All devices found during inquiry */
79         struct list_head        unknown;        /* Name state not known */
80         struct list_head        resolve;        /* Name needs to be resolved */
81         __u32                   timestamp;
82         bdaddr_t                last_adv_addr;
83         u8                      last_adv_addr_type;
84         s8                      last_adv_rssi;
85         u32                     last_adv_flags;
86         u8                      last_adv_data[HCI_MAX_EXT_AD_LENGTH];
87         u8                      last_adv_data_len;
88         bool                    report_invalid_rssi;
89         bool                    result_filtering;
90         bool                    limited;
91         s8                      rssi;
92         u16                     uuid_count;
93         u8                      (*uuids)[16];
94         unsigned long           scan_start;
95         unsigned long           scan_duration;
96         unsigned long           name_resolve_timeout;
97 };
98
99 #define SUSPEND_NOTIFIER_TIMEOUT        msecs_to_jiffies(2000) /* 2 seconds */
100
101 enum suspend_tasks {
102         SUSPEND_PAUSE_DISCOVERY,
103         SUSPEND_UNPAUSE_DISCOVERY,
104
105         SUSPEND_PAUSE_ADVERTISING,
106         SUSPEND_UNPAUSE_ADVERTISING,
107
108         SUSPEND_SCAN_DISABLE,
109         SUSPEND_SCAN_ENABLE,
110         SUSPEND_DISCONNECTING,
111
112         SUSPEND_POWERING_DOWN,
113
114         SUSPEND_PREPARE_NOTIFIER,
115
116         SUSPEND_SET_ADV_FILTER,
117         __SUSPEND_NUM_TASKS
118 };
119
120 enum suspended_state {
121         BT_RUNNING = 0,
122         BT_SUSPEND_DISCONNECT,
123         BT_SUSPEND_CONFIGURE_WAKE,
124 };
125
126 struct hci_conn_hash {
127         struct list_head list;
128         unsigned int     acl_num;
129         unsigned int     amp_num;
130         unsigned int     sco_num;
131         unsigned int     iso_num;
132         unsigned int     le_num;
133         unsigned int     le_num_peripheral;
134 };
135
136 struct bdaddr_list {
137         struct list_head list;
138         bdaddr_t bdaddr;
139         u8 bdaddr_type;
140 };
141
142 struct codec_list {
143         struct list_head list;
144         u8      id;
145         __u16   cid;
146         __u16   vid;
147         u8      transport;
148         u8      num_caps;
149         u32     len;
150         struct hci_codec_caps caps[];
151 };
152
153 struct bdaddr_list_with_irk {
154         struct list_head list;
155         bdaddr_t bdaddr;
156         u8 bdaddr_type;
157         u8 peer_irk[16];
158         u8 local_irk[16];
159 };
160
161 /* Bitmask of connection flags */
162 enum hci_conn_flags {
163         HCI_CONN_FLAG_REMOTE_WAKEUP = 1,
164         HCI_CONN_FLAG_DEVICE_PRIVACY = 2,
165 };
166 typedef u8 hci_conn_flags_t;
167
168 struct bdaddr_list_with_flags {
169         struct list_head list;
170         bdaddr_t bdaddr;
171         u8 bdaddr_type;
172         hci_conn_flags_t flags;
173 };
174
175 struct bt_uuid {
176         struct list_head list;
177         u8 uuid[16];
178         u8 size;
179         u8 svc_hint;
180 };
181
182 struct blocked_key {
183         struct list_head list;
184         struct rcu_head rcu;
185         u8 type;
186         u8 val[16];
187 };
188
189 struct smp_csrk {
190         bdaddr_t bdaddr;
191         u8 bdaddr_type;
192         u8 link_type;
193         u8 type;
194         u8 val[16];
195 };
196
197 struct smp_ltk {
198         struct list_head list;
199         struct rcu_head rcu;
200         bdaddr_t bdaddr;
201         u8 bdaddr_type;
202         u8 link_type;
203         u8 authenticated;
204         u8 type;
205         u8 enc_size;
206         __le16 ediv;
207         __le64 rand;
208         u8 val[16];
209 };
210
211 struct smp_irk {
212         struct list_head list;
213         struct rcu_head rcu;
214         bdaddr_t rpa;
215         bdaddr_t bdaddr;
216         u8 addr_type;
217         u8 link_type;
218         u8 val[16];
219 };
220
221 struct link_key {
222         struct list_head list;
223         struct rcu_head rcu;
224         bdaddr_t bdaddr;
225         u8 bdaddr_type;
226         u8 link_type;
227         u8 type;
228         u8 val[HCI_LINK_KEY_SIZE];
229         u8 pin_len;
230 };
231
232 struct oob_data {
233         struct list_head list;
234         bdaddr_t bdaddr;
235         u8 bdaddr_type;
236         u8 present;
237         u8 hash192[16];
238         u8 rand192[16];
239         u8 hash256[16];
240         u8 rand256[16];
241 };
242
243 struct adv_info {
244         struct list_head list;
245         bool    enabled;
246         bool    pending;
247         bool    periodic;
248         __u8    mesh;
249         __u8    instance;
250         __u32   flags;
251         __u16   timeout;
252         __u16   remaining_time;
253         __u16   duration;
254         __u16   adv_data_len;
255         __u8    adv_data[HCI_MAX_EXT_AD_LENGTH];
256         bool    adv_data_changed;
257         __u16   scan_rsp_len;
258         __u8    scan_rsp_data[HCI_MAX_EXT_AD_LENGTH];
259         bool    scan_rsp_changed;
260         __u16   per_adv_data_len;
261         __u8    per_adv_data[HCI_MAX_PER_AD_LENGTH];
262         __s8    tx_power;
263         __u32   min_interval;
264         __u32   max_interval;
265         bdaddr_t        random_addr;
266         bool            rpa_expired;
267         struct delayed_work     rpa_expired_cb;
268 };
269
270 #define HCI_MAX_ADV_INSTANCES           5
271 #define HCI_DEFAULT_ADV_DURATION        2
272
273 #define HCI_ADV_TX_POWER_NO_PREFERENCE 0x7F
274
275 #define DATA_CMP(_d1, _l1, _d2, _l2) \
276         (_l1 == _l2 ? memcmp(_d1, _d2, _l1) : _l1 - _l2)
277
278 #define ADV_DATA_CMP(_adv, _data, _len) \
279         DATA_CMP((_adv)->adv_data, (_adv)->adv_data_len, _data, _len)
280
281 #define SCAN_RSP_CMP(_adv, _data, _len) \
282         DATA_CMP((_adv)->scan_rsp_data, (_adv)->scan_rsp_len, _data, _len)
283
284 struct monitored_device {
285         struct list_head list;
286
287         bdaddr_t bdaddr;
288         __u8     addr_type;
289         __u16    handle;
290         bool     notified;
291 };
292
293 struct adv_pattern {
294         struct list_head list;
295         __u8 ad_type;
296         __u8 offset;
297         __u8 length;
298         __u8 value[HCI_MAX_EXT_AD_LENGTH];
299 };
300
301 struct adv_rssi_thresholds {
302         __s8 low_threshold;
303         __s8 high_threshold;
304         __u16 low_threshold_timeout;
305         __u16 high_threshold_timeout;
306         __u8 sampling_period;
307 };
308
309 struct adv_monitor {
310         struct list_head patterns;
311         struct adv_rssi_thresholds rssi;
312         __u16           handle;
313
314         enum {
315                 ADV_MONITOR_STATE_NOT_REGISTERED,
316                 ADV_MONITOR_STATE_REGISTERED,
317                 ADV_MONITOR_STATE_OFFLOADED
318         } state;
319 };
320
321 #define HCI_MIN_ADV_MONITOR_HANDLE              1
322 #define HCI_MAX_ADV_MONITOR_NUM_HANDLES         32
323 #define HCI_MAX_ADV_MONITOR_NUM_PATTERNS        16
324 #define HCI_ADV_MONITOR_EXT_NONE                1
325 #define HCI_ADV_MONITOR_EXT_MSFT                2
326
327 #define HCI_MAX_SHORT_NAME_LENGTH       10
328
329 #define HCI_CONN_HANDLE_MAX             0x0eff
330 #define HCI_CONN_HANDLE_UNSET(_handle)  (_handle > HCI_CONN_HANDLE_MAX)
331
332 /* Min encryption key size to match with SMP */
333 #define HCI_MIN_ENC_KEY_SIZE            7
334
335 /* Default LE RPA expiry time, 15 minutes */
336 #define HCI_DEFAULT_RPA_TIMEOUT         (15 * 60)
337
338 /* Default min/max age of connection information (1s/3s) */
339 #define DEFAULT_CONN_INFO_MIN_AGE       1000
340 #define DEFAULT_CONN_INFO_MAX_AGE       3000
341 /* Default authenticated payload timeout 30s */
342 #define DEFAULT_AUTH_PAYLOAD_TIMEOUT   0x0bb8
343
344 struct amp_assoc {
345         __u16   len;
346         __u16   offset;
347         __u16   rem_len;
348         __u16   len_so_far;
349         __u8    data[HCI_MAX_AMP_ASSOC_SIZE];
350 };
351
352 #define HCI_MAX_PAGES   3
353
354 struct hci_dev {
355         struct list_head list;
356         struct mutex    lock;
357
358         struct ida      unset_handle_ida;
359
360         const char      *name;
361         unsigned long   flags;
362         __u16           id;
363         __u8            bus;
364         __u8            dev_type;
365         bdaddr_t        bdaddr;
366         bdaddr_t        setup_addr;
367         bdaddr_t        public_addr;
368         bdaddr_t        random_addr;
369         bdaddr_t        static_addr;
370         __u8            adv_addr_type;
371         __u8            dev_name[HCI_MAX_NAME_LENGTH];
372         __u8            short_name[HCI_MAX_SHORT_NAME_LENGTH];
373         __u8            eir[HCI_MAX_EIR_LENGTH];
374         __u16           appearance;
375         __u8            dev_class[3];
376         __u8            major_class;
377         __u8            minor_class;
378         __u8            max_page;
379         __u8            features[HCI_MAX_PAGES][8];
380         __u8            le_features[8];
381         __u8            le_accept_list_size;
382         __u8            le_resolv_list_size;
383         __u8            le_num_of_adv_sets;
384         __u8            le_states[8];
385         __u8            mesh_ad_types[16];
386         __u8            mesh_send_ref;
387         __u8            commands[64];
388         __u8            hci_ver;
389         __u16           hci_rev;
390         __u8            lmp_ver;
391         __u16           manufacturer;
392         __u16           lmp_subver;
393         __u16           voice_setting;
394         __u8            num_iac;
395         __u16           stored_max_keys;
396         __u16           stored_num_keys;
397         __u8            io_capability;
398         __s8            inq_tx_power;
399         __u8            err_data_reporting;
400         __u16           page_scan_interval;
401         __u16           page_scan_window;
402         __u8            page_scan_type;
403         __u8            le_adv_channel_map;
404         __u16           le_adv_min_interval;
405         __u16           le_adv_max_interval;
406         __u8            le_scan_type;
407         __u16           le_scan_interval;
408         __u16           le_scan_window;
409         __u16           le_scan_int_suspend;
410         __u16           le_scan_window_suspend;
411         __u16           le_scan_int_discovery;
412         __u16           le_scan_window_discovery;
413         __u16           le_scan_int_adv_monitor;
414         __u16           le_scan_window_adv_monitor;
415         __u16           le_scan_int_connect;
416         __u16           le_scan_window_connect;
417         __u16           le_conn_min_interval;
418         __u16           le_conn_max_interval;
419         __u16           le_conn_latency;
420         __u16           le_supv_timeout;
421         __u16           le_def_tx_len;
422         __u16           le_def_tx_time;
423         __u16           le_max_tx_len;
424         __u16           le_max_tx_time;
425         __u16           le_max_rx_len;
426         __u16           le_max_rx_time;
427         __u8            le_max_key_size;
428         __u8            le_min_key_size;
429         __u16           discov_interleaved_timeout;
430         __u16           conn_info_min_age;
431         __u16           conn_info_max_age;
432         __u16           auth_payload_timeout;
433         __u8            min_enc_key_size;
434         __u8            max_enc_key_size;
435         __u8            pairing_opts;
436         __u8            ssp_debug_mode;
437         __u8            hw_error_code;
438         __u32           clock;
439         __u16           advmon_allowlist_duration;
440         __u16           advmon_no_filter_duration;
441         __u8            enable_advmon_interleave_scan;
442
443         __u16           devid_source;
444         __u16           devid_vendor;
445         __u16           devid_product;
446         __u16           devid_version;
447
448         __u8            def_page_scan_type;
449         __u16           def_page_scan_int;
450         __u16           def_page_scan_window;
451         __u8            def_inq_scan_type;
452         __u16           def_inq_scan_int;
453         __u16           def_inq_scan_window;
454         __u16           def_br_lsto;
455         __u16           def_page_timeout;
456         __u16           def_multi_adv_rotation_duration;
457         __u16           def_le_autoconnect_timeout;
458         __s8            min_le_tx_power;
459         __s8            max_le_tx_power;
460
461         __u16           pkt_type;
462         __u16           esco_type;
463         __u16           link_policy;
464         __u16           link_mode;
465
466         __u32           idle_timeout;
467         __u16           sniff_min_interval;
468         __u16           sniff_max_interval;
469
470         __u8            amp_status;
471         __u32           amp_total_bw;
472         __u32           amp_max_bw;
473         __u32           amp_min_latency;
474         __u32           amp_max_pdu;
475         __u8            amp_type;
476         __u16           amp_pal_cap;
477         __u16           amp_assoc_size;
478         __u32           amp_max_flush_to;
479         __u32           amp_be_flush_to;
480
481         struct amp_assoc        loc_assoc;
482
483         __u8            flow_ctl_mode;
484
485         unsigned int    auto_accept_delay;
486
487         unsigned long   quirks;
488
489         atomic_t        cmd_cnt;
490         unsigned int    acl_cnt;
491         unsigned int    sco_cnt;
492         unsigned int    le_cnt;
493         unsigned int    iso_cnt;
494
495         unsigned int    acl_mtu;
496         unsigned int    sco_mtu;
497         unsigned int    le_mtu;
498         unsigned int    iso_mtu;
499         unsigned int    acl_pkts;
500         unsigned int    sco_pkts;
501         unsigned int    le_pkts;
502         unsigned int    iso_pkts;
503
504         __u16           block_len;
505         __u16           block_mtu;
506         __u16           num_blocks;
507         __u16           block_cnt;
508
509         unsigned long   acl_last_tx;
510         unsigned long   sco_last_tx;
511         unsigned long   le_last_tx;
512
513         __u8            le_tx_def_phys;
514         __u8            le_rx_def_phys;
515
516         struct workqueue_struct *workqueue;
517         struct workqueue_struct *req_workqueue;
518
519         struct work_struct      power_on;
520         struct delayed_work     power_off;
521         struct work_struct      error_reset;
522         struct work_struct      cmd_sync_work;
523         struct list_head        cmd_sync_work_list;
524         struct mutex            cmd_sync_work_lock;
525         struct mutex            unregister_lock;
526         struct work_struct      cmd_sync_cancel_work;
527         struct work_struct      reenable_adv_work;
528
529         __u16                   discov_timeout;
530         struct delayed_work     discov_off;
531
532         struct delayed_work     service_cache;
533
534         struct delayed_work     cmd_timer;
535         struct delayed_work     ncmd_timer;
536
537         struct work_struct      rx_work;
538         struct work_struct      cmd_work;
539         struct work_struct      tx_work;
540
541         struct delayed_work     le_scan_disable;
542         struct delayed_work     le_scan_restart;
543
544         struct sk_buff_head     rx_q;
545         struct sk_buff_head     raw_q;
546         struct sk_buff_head     cmd_q;
547
548         struct sk_buff          *sent_cmd;
549         struct sk_buff          *recv_event;
550
551         struct mutex            req_lock;
552         wait_queue_head_t       req_wait_q;
553         __u32                   req_status;
554         __u32                   req_result;
555         struct sk_buff          *req_skb;
556
557         void                    *smp_data;
558         void                    *smp_bredr_data;
559
560         struct discovery_state  discovery;
561
562         int                     discovery_old_state;
563         bool                    discovery_paused;
564         int                     advertising_old_state;
565         bool                    advertising_paused;
566
567         struct notifier_block   suspend_notifier;
568         enum suspended_state    suspend_state_next;
569         enum suspended_state    suspend_state;
570         bool                    scanning_paused;
571         bool                    suspended;
572         u8                      wake_reason;
573         bdaddr_t                wake_addr;
574         u8                      wake_addr_type;
575
576         struct hci_conn_hash    conn_hash;
577
578         struct list_head        mesh_pending;
579         struct list_head        mgmt_pending;
580         struct list_head        reject_list;
581         struct list_head        accept_list;
582         struct list_head        uuids;
583         struct list_head        link_keys;
584         struct list_head        long_term_keys;
585         struct list_head        identity_resolving_keys;
586         struct list_head        remote_oob_data;
587         struct list_head        le_accept_list;
588         struct list_head        le_resolv_list;
589         struct list_head        le_conn_params;
590         struct list_head        pend_le_conns;
591         struct list_head        pend_le_reports;
592         struct list_head        blocked_keys;
593         struct list_head        local_codecs;
594
595         struct hci_dev_stats    stat;
596
597         atomic_t                promisc;
598
599         const char              *hw_info;
600         const char              *fw_info;
601         struct dentry           *debugfs;
602
603         struct hci_devcoredump  dump;
604
605         struct device           dev;
606
607         struct rfkill           *rfkill;
608
609         DECLARE_BITMAP(dev_flags, __HCI_NUM_FLAGS);
610         hci_conn_flags_t        conn_flags;
611
612         __s8                    adv_tx_power;
613         __u8                    adv_data[HCI_MAX_EXT_AD_LENGTH];
614         __u8                    adv_data_len;
615         __u8                    scan_rsp_data[HCI_MAX_EXT_AD_LENGTH];
616         __u8                    scan_rsp_data_len;
617         __u8                    per_adv_data[HCI_MAX_PER_AD_LENGTH];
618         __u8                    per_adv_data_len;
619
620         struct list_head        adv_instances;
621         unsigned int            adv_instance_cnt;
622         __u8                    cur_adv_instance;
623         __u16                   adv_instance_timeout;
624         struct delayed_work     adv_instance_expire;
625
626         struct idr              adv_monitors_idr;
627         unsigned int            adv_monitors_cnt;
628
629         __u8                    irk[16];
630         __u32                   rpa_timeout;
631         struct delayed_work     rpa_expired;
632         bdaddr_t                rpa;
633
634         struct delayed_work     mesh_send_done;
635
636         enum {
637                 INTERLEAVE_SCAN_NONE,
638                 INTERLEAVE_SCAN_NO_FILTER,
639                 INTERLEAVE_SCAN_ALLOWLIST
640         } interleave_scan_state;
641
642         struct delayed_work     interleave_scan;
643
644         struct list_head        monitored_devices;
645         bool                    advmon_pend_notify;
646
647 #if IS_ENABLED(CONFIG_BT_LEDS)
648         struct led_trigger      *power_led;
649 #endif
650
651 #if IS_ENABLED(CONFIG_BT_MSFTEXT)
652         __u16                   msft_opcode;
653         void                    *msft_data;
654         bool                    msft_curve_validity;
655 #endif
656
657 #if IS_ENABLED(CONFIG_BT_AOSPEXT)
658         bool                    aosp_capable;
659         bool                    aosp_quality_report;
660 #endif
661
662         int (*open)(struct hci_dev *hdev);
663         int (*close)(struct hci_dev *hdev);
664         int (*flush)(struct hci_dev *hdev);
665         int (*setup)(struct hci_dev *hdev);
666         int (*shutdown)(struct hci_dev *hdev);
667         int (*send)(struct hci_dev *hdev, struct sk_buff *skb);
668         void (*notify)(struct hci_dev *hdev, unsigned int evt);
669         void (*hw_error)(struct hci_dev *hdev, u8 code);
670         int (*post_init)(struct hci_dev *hdev);
671         int (*set_diag)(struct hci_dev *hdev, bool enable);
672         int (*set_bdaddr)(struct hci_dev *hdev, const bdaddr_t *bdaddr);
673         void (*cmd_timeout)(struct hci_dev *hdev);
674         void (*reset)(struct hci_dev *hdev);
675         bool (*wakeup)(struct hci_dev *hdev);
676         int (*set_quality_report)(struct hci_dev *hdev, bool enable);
677         int (*get_data_path_id)(struct hci_dev *hdev, __u8 *data_path);
678         int (*get_codec_config_data)(struct hci_dev *hdev, __u8 type,
679                                      struct bt_codec *codec, __u8 *vnd_len,
680                                      __u8 **vnd_data);
681 };
682
683 #define HCI_PHY_HANDLE(handle)  (handle & 0xff)
684
685 enum conn_reasons {
686         CONN_REASON_PAIR_DEVICE,
687         CONN_REASON_L2CAP_CHAN,
688         CONN_REASON_SCO_CONNECT,
689         CONN_REASON_ISO_CONNECT,
690 };
691
692 struct hci_conn {
693         struct list_head list;
694
695         atomic_t        refcnt;
696
697         bdaddr_t        dst;
698         __u8            dst_type;
699         bdaddr_t        src;
700         __u8            src_type;
701         bdaddr_t        init_addr;
702         __u8            init_addr_type;
703         bdaddr_t        resp_addr;
704         __u8            resp_addr_type;
705         __u8            adv_instance;
706         __u16           handle;
707         __u16           sync_handle;
708         __u16           state;
709         __u8            mode;
710         __u8            type;
711         __u8            role;
712         bool            out;
713         __u8            attempt;
714         __u8            dev_class[3];
715         __u8            features[HCI_MAX_PAGES][8];
716         __u16           pkt_type;
717         __u16           link_policy;
718         __u8            key_type;
719         __u8            auth_type;
720         __u8            sec_level;
721         __u8            pending_sec_level;
722         __u8            pin_length;
723         __u8            enc_key_size;
724         __u8            io_capability;
725         __u32           passkey_notify;
726         __u8            passkey_entered;
727         __u16           disc_timeout;
728         __u16           conn_timeout;
729         __u16           setting;
730         __u16           auth_payload_timeout;
731         __u16           le_conn_min_interval;
732         __u16           le_conn_max_interval;
733         __u16           le_conn_interval;
734         __u16           le_conn_latency;
735         __u16           le_supv_timeout;
736         __u8            le_adv_data[HCI_MAX_EXT_AD_LENGTH];
737         __u8            le_adv_data_len;
738         __u8            le_per_adv_data[HCI_MAX_PER_AD_LENGTH];
739         __u8            le_per_adv_data_len;
740         __u8            le_tx_phy;
741         __u8            le_rx_phy;
742         __s8            rssi;
743         __s8            tx_power;
744         __s8            max_tx_power;
745         struct bt_iso_qos iso_qos;
746         unsigned long   flags;
747
748         enum conn_reasons conn_reason;
749         __u8            abort_reason;
750
751         __u32           clock;
752         __u16           clock_accuracy;
753
754         unsigned long   conn_info_timestamp;
755
756         __u8            remote_cap;
757         __u8            remote_auth;
758         __u8            remote_id;
759
760         unsigned int    sent;
761
762         struct sk_buff_head data_q;
763         struct list_head chan_list;
764
765         struct delayed_work disc_work;
766         struct delayed_work auto_accept_work;
767         struct delayed_work idle_work;
768         struct delayed_work le_conn_timeout;
769
770         struct device   dev;
771         struct dentry   *debugfs;
772
773         struct hci_dev  *hdev;
774         void            *l2cap_data;
775         void            *sco_data;
776         void            *iso_data;
777         struct amp_mgr  *amp_mgr;
778
779         struct list_head link_list;
780         struct hci_conn *parent;
781         struct hci_link *link;
782
783         struct bt_codec codec;
784
785         void (*connect_cfm_cb)  (struct hci_conn *conn, u8 status);
786         void (*security_cfm_cb) (struct hci_conn *conn, u8 status);
787         void (*disconn_cfm_cb)  (struct hci_conn *conn, u8 reason);
788
789         void (*cleanup)(struct hci_conn *conn);
790 };
791
792 struct hci_link {
793         struct list_head list;
794         struct hci_conn *conn;
795 };
796
797 struct hci_chan {
798         struct list_head list;
799         __u16 handle;
800         struct hci_conn *conn;
801         struct sk_buff_head data_q;
802         unsigned int    sent;
803         __u8            state;
804         bool            amp;
805 };
806
807 struct hci_conn_params {
808         struct list_head list;
809         struct list_head action;
810
811         bdaddr_t addr;
812         u8 addr_type;
813
814         u16 conn_min_interval;
815         u16 conn_max_interval;
816         u16 conn_latency;
817         u16 supervision_timeout;
818
819         enum {
820                 HCI_AUTO_CONN_DISABLED,
821                 HCI_AUTO_CONN_REPORT,
822                 HCI_AUTO_CONN_DIRECT,
823                 HCI_AUTO_CONN_ALWAYS,
824                 HCI_AUTO_CONN_LINK_LOSS,
825                 HCI_AUTO_CONN_EXPLICIT,
826         } auto_connect;
827
828         struct hci_conn *conn;
829         bool explicit_connect;
830         /* Accessed without hdev->lock: */
831         hci_conn_flags_t flags;
832         u8  privacy_mode;
833 };
834
835 extern struct list_head hci_dev_list;
836 extern struct list_head hci_cb_list;
837 extern rwlock_t hci_dev_list_lock;
838 extern struct mutex hci_cb_list_lock;
839
840 #define hci_dev_set_flag(hdev, nr)             set_bit((nr), (hdev)->dev_flags)
841 #define hci_dev_clear_flag(hdev, nr)           clear_bit((nr), (hdev)->dev_flags)
842 #define hci_dev_change_flag(hdev, nr)          change_bit((nr), (hdev)->dev_flags)
843 #define hci_dev_test_flag(hdev, nr)            test_bit((nr), (hdev)->dev_flags)
844 #define hci_dev_test_and_set_flag(hdev, nr)    test_and_set_bit((nr), (hdev)->dev_flags)
845 #define hci_dev_test_and_clear_flag(hdev, nr)  test_and_clear_bit((nr), (hdev)->dev_flags)
846 #define hci_dev_test_and_change_flag(hdev, nr) test_and_change_bit((nr), (hdev)->dev_flags)
847
848 #define hci_dev_clear_volatile_flags(hdev)                      \
849         do {                                                    \
850                 hci_dev_clear_flag(hdev, HCI_LE_SCAN);          \
851                 hci_dev_clear_flag(hdev, HCI_LE_ADV);           \
852                 hci_dev_clear_flag(hdev, HCI_LL_RPA_RESOLUTION);\
853                 hci_dev_clear_flag(hdev, HCI_PERIODIC_INQ);     \
854                 hci_dev_clear_flag(hdev, HCI_QUALITY_REPORT);   \
855         } while (0)
856
857 #define hci_dev_le_state_simultaneous(hdev) \
858         (test_bit(HCI_QUIRK_VALID_LE_STATES, &hdev->quirks) && \
859          (hdev->le_states[4] & 0x08) && /* Central */ \
860          (hdev->le_states[4] & 0x40) && /* Peripheral */ \
861          (hdev->le_states[3] & 0x10))   /* Simultaneous */
862
863 /* ----- HCI interface to upper protocols ----- */
864 int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr);
865 int l2cap_disconn_ind(struct hci_conn *hcon);
866 void l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
867
868 #if IS_ENABLED(CONFIG_BT_BREDR)
869 int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
870 void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb);
871 #else
872 static inline int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
873                                   __u8 *flags)
874 {
875         return 0;
876 }
877
878 static inline void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb)
879 {
880 }
881 #endif
882
883 #if IS_ENABLED(CONFIG_BT_LE)
884 int iso_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
885 void iso_recv(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
886 #else
887 static inline int iso_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
888                                   __u8 *flags)
889 {
890         return 0;
891 }
892 static inline void iso_recv(struct hci_conn *hcon, struct sk_buff *skb,
893                             u16 flags)
894 {
895 }
896 #endif
897
898 /* ----- Inquiry cache ----- */
899 #define INQUIRY_CACHE_AGE_MAX   (HZ*30)   /* 30 seconds */
900 #define INQUIRY_ENTRY_AGE_MAX   (HZ*60)   /* 60 seconds */
901
902 static inline void discovery_init(struct hci_dev *hdev)
903 {
904         hdev->discovery.state = DISCOVERY_STOPPED;
905         INIT_LIST_HEAD(&hdev->discovery.all);
906         INIT_LIST_HEAD(&hdev->discovery.unknown);
907         INIT_LIST_HEAD(&hdev->discovery.resolve);
908         hdev->discovery.report_invalid_rssi = true;
909         hdev->discovery.rssi = HCI_RSSI_INVALID;
910 }
911
912 static inline void hci_discovery_filter_clear(struct hci_dev *hdev)
913 {
914         hdev->discovery.result_filtering = false;
915         hdev->discovery.report_invalid_rssi = true;
916         hdev->discovery.rssi = HCI_RSSI_INVALID;
917         hdev->discovery.uuid_count = 0;
918         kfree(hdev->discovery.uuids);
919         hdev->discovery.uuids = NULL;
920         hdev->discovery.scan_start = 0;
921         hdev->discovery.scan_duration = 0;
922 }
923
924 bool hci_discovery_active(struct hci_dev *hdev);
925
926 void hci_discovery_set_state(struct hci_dev *hdev, int state);
927
928 static inline int inquiry_cache_empty(struct hci_dev *hdev)
929 {
930         return list_empty(&hdev->discovery.all);
931 }
932
933 static inline long inquiry_cache_age(struct hci_dev *hdev)
934 {
935         struct discovery_state *c = &hdev->discovery;
936         return jiffies - c->timestamp;
937 }
938
939 static inline long inquiry_entry_age(struct inquiry_entry *e)
940 {
941         return jiffies - e->timestamp;
942 }
943
944 struct inquiry_entry *hci_inquiry_cache_lookup(struct hci_dev *hdev,
945                                                bdaddr_t *bdaddr);
946 struct inquiry_entry *hci_inquiry_cache_lookup_unknown(struct hci_dev *hdev,
947                                                        bdaddr_t *bdaddr);
948 struct inquiry_entry *hci_inquiry_cache_lookup_resolve(struct hci_dev *hdev,
949                                                        bdaddr_t *bdaddr,
950                                                        int state);
951 void hci_inquiry_cache_update_resolve(struct hci_dev *hdev,
952                                       struct inquiry_entry *ie);
953 u32 hci_inquiry_cache_update(struct hci_dev *hdev, struct inquiry_data *data,
954                              bool name_known);
955 void hci_inquiry_cache_flush(struct hci_dev *hdev);
956
957 /* ----- HCI Connections ----- */
958 enum {
959         HCI_CONN_AUTH_PEND,
960         HCI_CONN_ENCRYPT_PEND,
961         HCI_CONN_RSWITCH_PEND,
962         HCI_CONN_MODE_CHANGE_PEND,
963         HCI_CONN_SCO_SETUP_PEND,
964         HCI_CONN_MGMT_CONNECTED,
965         HCI_CONN_SSP_ENABLED,
966         HCI_CONN_SC_ENABLED,
967         HCI_CONN_AES_CCM,
968         HCI_CONN_POWER_SAVE,
969         HCI_CONN_FLUSH_KEY,
970         HCI_CONN_ENCRYPT,
971         HCI_CONN_AUTH,
972         HCI_CONN_SECURE,
973         HCI_CONN_FIPS,
974         HCI_CONN_STK_ENCRYPT,
975         HCI_CONN_AUTH_INITIATOR,
976         HCI_CONN_DROP,
977         HCI_CONN_CANCEL,
978         HCI_CONN_PARAM_REMOVAL_PEND,
979         HCI_CONN_NEW_LINK_KEY,
980         HCI_CONN_SCANNING,
981         HCI_CONN_AUTH_FAILURE,
982         HCI_CONN_PER_ADV,
983         HCI_CONN_BIG_CREATED,
984         HCI_CONN_CREATE_CIS,
985         HCI_CONN_BIG_SYNC,
986         HCI_CONN_BIG_SYNC_FAILED,
987         HCI_CONN_PA_SYNC,
988         HCI_CONN_PA_SYNC_FAILED,
989 };
990
991 static inline bool hci_conn_ssp_enabled(struct hci_conn *conn)
992 {
993         struct hci_dev *hdev = conn->hdev;
994         return hci_dev_test_flag(hdev, HCI_SSP_ENABLED) &&
995                test_bit(HCI_CONN_SSP_ENABLED, &conn->flags);
996 }
997
998 static inline bool hci_conn_sc_enabled(struct hci_conn *conn)
999 {
1000         struct hci_dev *hdev = conn->hdev;
1001         return hci_dev_test_flag(hdev, HCI_SC_ENABLED) &&
1002                test_bit(HCI_CONN_SC_ENABLED, &conn->flags);
1003 }
1004
1005 static inline void hci_conn_hash_add(struct hci_dev *hdev, struct hci_conn *c)
1006 {
1007         struct hci_conn_hash *h = &hdev->conn_hash;
1008         list_add_tail_rcu(&c->list, &h->list);
1009         switch (c->type) {
1010         case ACL_LINK:
1011                 h->acl_num++;
1012                 break;
1013         case AMP_LINK:
1014                 h->amp_num++;
1015                 break;
1016         case LE_LINK:
1017                 h->le_num++;
1018                 if (c->role == HCI_ROLE_SLAVE)
1019                         h->le_num_peripheral++;
1020                 break;
1021         case SCO_LINK:
1022         case ESCO_LINK:
1023                 h->sco_num++;
1024                 break;
1025         case ISO_LINK:
1026                 h->iso_num++;
1027                 break;
1028         }
1029 }
1030
1031 static inline void hci_conn_hash_del(struct hci_dev *hdev, struct hci_conn *c)
1032 {
1033         struct hci_conn_hash *h = &hdev->conn_hash;
1034
1035         list_del_rcu(&c->list);
1036         synchronize_rcu();
1037
1038         switch (c->type) {
1039         case ACL_LINK:
1040                 h->acl_num--;
1041                 break;
1042         case AMP_LINK:
1043                 h->amp_num--;
1044                 break;
1045         case LE_LINK:
1046                 h->le_num--;
1047                 if (c->role == HCI_ROLE_SLAVE)
1048                         h->le_num_peripheral--;
1049                 break;
1050         case SCO_LINK:
1051         case ESCO_LINK:
1052                 h->sco_num--;
1053                 break;
1054         case ISO_LINK:
1055                 h->iso_num--;
1056                 break;
1057         }
1058 }
1059
1060 static inline unsigned int hci_conn_num(struct hci_dev *hdev, __u8 type)
1061 {
1062         struct hci_conn_hash *h = &hdev->conn_hash;
1063         switch (type) {
1064         case ACL_LINK:
1065                 return h->acl_num;
1066         case AMP_LINK:
1067                 return h->amp_num;
1068         case LE_LINK:
1069                 return h->le_num;
1070         case SCO_LINK:
1071         case ESCO_LINK:
1072                 return h->sco_num;
1073         case ISO_LINK:
1074                 return h->iso_num;
1075         default:
1076                 return 0;
1077         }
1078 }
1079
1080 static inline unsigned int hci_conn_count(struct hci_dev *hdev)
1081 {
1082         struct hci_conn_hash *c = &hdev->conn_hash;
1083
1084         return c->acl_num + c->amp_num + c->sco_num + c->le_num + c->iso_num;
1085 }
1086
1087 static inline __u8 hci_conn_lookup_type(struct hci_dev *hdev, __u16 handle)
1088 {
1089         struct hci_conn_hash *h = &hdev->conn_hash;
1090         struct hci_conn *c;
1091         __u8 type = INVALID_LINK;
1092
1093         rcu_read_lock();
1094
1095         list_for_each_entry_rcu(c, &h->list, list) {
1096                 if (c->handle == handle) {
1097                         type = c->type;
1098                         break;
1099                 }
1100         }
1101
1102         rcu_read_unlock();
1103
1104         return type;
1105 }
1106
1107 static inline struct hci_conn *hci_conn_hash_lookup_bis(struct hci_dev *hdev,
1108                                                         bdaddr_t *ba, __u8 bis)
1109 {
1110         struct hci_conn_hash *h = &hdev->conn_hash;
1111         struct hci_conn  *c;
1112
1113         rcu_read_lock();
1114
1115         list_for_each_entry_rcu(c, &h->list, list) {
1116                 if (bacmp(&c->dst, ba) || c->type != ISO_LINK)
1117                         continue;
1118
1119                 if (c->iso_qos.bcast.bis == bis) {
1120                         rcu_read_unlock();
1121                         return c;
1122                 }
1123         }
1124         rcu_read_unlock();
1125
1126         return NULL;
1127 }
1128
1129 static inline struct hci_conn *
1130 hci_conn_hash_lookup_per_adv_bis(struct hci_dev *hdev,
1131                                  bdaddr_t *ba,
1132                                  __u8 big, __u8 bis)
1133 {
1134         struct hci_conn_hash *h = &hdev->conn_hash;
1135         struct hci_conn  *c;
1136
1137         rcu_read_lock();
1138
1139         list_for_each_entry_rcu(c, &h->list, list) {
1140                 if (bacmp(&c->dst, ba) || c->type != ISO_LINK ||
1141                         !test_bit(HCI_CONN_PER_ADV, &c->flags))
1142                         continue;
1143
1144                 if (c->iso_qos.bcast.big == big &&
1145                     c->iso_qos.bcast.bis == bis) {
1146                         rcu_read_unlock();
1147                         return c;
1148                 }
1149         }
1150         rcu_read_unlock();
1151
1152         return NULL;
1153 }
1154
1155 static inline struct hci_conn *hci_conn_hash_lookup_handle(struct hci_dev *hdev,
1156                                                                 __u16 handle)
1157 {
1158         struct hci_conn_hash *h = &hdev->conn_hash;
1159         struct hci_conn  *c;
1160
1161         rcu_read_lock();
1162
1163         list_for_each_entry_rcu(c, &h->list, list) {
1164                 if (c->handle == handle) {
1165                         rcu_read_unlock();
1166                         return c;
1167                 }
1168         }
1169         rcu_read_unlock();
1170
1171         return NULL;
1172 }
1173
1174 static inline struct hci_conn *hci_conn_hash_lookup_ba(struct hci_dev *hdev,
1175                                                         __u8 type, bdaddr_t *ba)
1176 {
1177         struct hci_conn_hash *h = &hdev->conn_hash;
1178         struct hci_conn  *c;
1179
1180         rcu_read_lock();
1181
1182         list_for_each_entry_rcu(c, &h->list, list) {
1183                 if (c->type == type && !bacmp(&c->dst, ba)) {
1184                         rcu_read_unlock();
1185                         return c;
1186                 }
1187         }
1188
1189         rcu_read_unlock();
1190
1191         return NULL;
1192 }
1193
1194 static inline struct hci_conn *hci_conn_hash_lookup_le(struct hci_dev *hdev,
1195                                                        bdaddr_t *ba,
1196                                                        __u8 ba_type)
1197 {
1198         struct hci_conn_hash *h = &hdev->conn_hash;
1199         struct hci_conn  *c;
1200
1201         rcu_read_lock();
1202
1203         list_for_each_entry_rcu(c, &h->list, list) {
1204                 if (c->type != LE_LINK)
1205                        continue;
1206
1207                 if (ba_type == c->dst_type && !bacmp(&c->dst, ba)) {
1208                         rcu_read_unlock();
1209                         return c;
1210                 }
1211         }
1212
1213         rcu_read_unlock();
1214
1215         return NULL;
1216 }
1217
1218 static inline struct hci_conn *hci_conn_hash_lookup_cis(struct hci_dev *hdev,
1219                                                         bdaddr_t *ba,
1220                                                         __u8 ba_type,
1221                                                         __u8 cig,
1222                                                         __u8 id)
1223 {
1224         struct hci_conn_hash *h = &hdev->conn_hash;
1225         struct hci_conn  *c;
1226
1227         rcu_read_lock();
1228
1229         list_for_each_entry_rcu(c, &h->list, list) {
1230                 if (c->type != ISO_LINK || !bacmp(&c->dst, BDADDR_ANY))
1231                         continue;
1232
1233                 /* Match CIG ID if set */
1234                 if (cig != c->iso_qos.ucast.cig)
1235                         continue;
1236
1237                 /* Match CIS ID if set */
1238                 if (id != c->iso_qos.ucast.cis)
1239                         continue;
1240
1241                 /* Match destination address if set */
1242                 if (!ba || (ba_type == c->dst_type && !bacmp(&c->dst, ba))) {
1243                         rcu_read_unlock();
1244                         return c;
1245                 }
1246         }
1247
1248         rcu_read_unlock();
1249
1250         return NULL;
1251 }
1252
1253 static inline struct hci_conn *hci_conn_hash_lookup_cig(struct hci_dev *hdev,
1254                                                         __u8 handle)
1255 {
1256         struct hci_conn_hash *h = &hdev->conn_hash;
1257         struct hci_conn  *c;
1258
1259         rcu_read_lock();
1260
1261         list_for_each_entry_rcu(c, &h->list, list) {
1262                 if (c->type != ISO_LINK || !bacmp(&c->dst, BDADDR_ANY))
1263                         continue;
1264
1265                 if (handle == c->iso_qos.ucast.cig) {
1266                         rcu_read_unlock();
1267                         return c;
1268                 }
1269         }
1270
1271         rcu_read_unlock();
1272
1273         return NULL;
1274 }
1275
1276 static inline struct hci_conn *hci_conn_hash_lookup_big(struct hci_dev *hdev,
1277                                                         __u8 handle)
1278 {
1279         struct hci_conn_hash *h = &hdev->conn_hash;
1280         struct hci_conn  *c;
1281
1282         rcu_read_lock();
1283
1284         list_for_each_entry_rcu(c, &h->list, list) {
1285                 if (bacmp(&c->dst, BDADDR_ANY) || c->type != ISO_LINK)
1286                         continue;
1287
1288                 if (handle == c->iso_qos.bcast.big) {
1289                         rcu_read_unlock();
1290                         return c;
1291                 }
1292         }
1293
1294         rcu_read_unlock();
1295
1296         return NULL;
1297 }
1298
1299 static inline struct hci_conn *hci_conn_hash_lookup_big_any_dst(struct hci_dev *hdev,
1300                                                         __u8 handle)
1301 {
1302         struct hci_conn_hash *h = &hdev->conn_hash;
1303         struct hci_conn  *c;
1304
1305         rcu_read_lock();
1306
1307         list_for_each_entry_rcu(c, &h->list, list) {
1308                 if (c->type != ISO_LINK)
1309                         continue;
1310
1311                 if (handle != BT_ISO_QOS_BIG_UNSET && handle == c->iso_qos.bcast.big) {
1312                         rcu_read_unlock();
1313                         return c;
1314                 }
1315         }
1316
1317         rcu_read_unlock();
1318
1319         return NULL;
1320 }
1321
1322 static inline struct hci_conn *
1323 hci_conn_hash_lookup_pa_sync_big_handle(struct hci_dev *hdev, __u8 big)
1324 {
1325         struct hci_conn_hash *h = &hdev->conn_hash;
1326         struct hci_conn  *c;
1327
1328         rcu_read_lock();
1329
1330         list_for_each_entry_rcu(c, &h->list, list) {
1331                 if (c->type != ISO_LINK ||
1332                         !test_bit(HCI_CONN_PA_SYNC, &c->flags))
1333                         continue;
1334
1335                 if (c->iso_qos.bcast.big == big) {
1336                         rcu_read_unlock();
1337                         return c;
1338                 }
1339         }
1340         rcu_read_unlock();
1341
1342         return NULL;
1343 }
1344
1345 static inline struct hci_conn *
1346 hci_conn_hash_lookup_pa_sync_handle(struct hci_dev *hdev, __u16 sync_handle)
1347 {
1348         struct hci_conn_hash *h = &hdev->conn_hash;
1349         struct hci_conn  *c;
1350
1351         rcu_read_lock();
1352
1353         list_for_each_entry_rcu(c, &h->list, list) {
1354                 if (c->type != ISO_LINK ||
1355                         !test_bit(HCI_CONN_PA_SYNC, &c->flags))
1356                         continue;
1357
1358                 if (c->sync_handle == sync_handle) {
1359                         rcu_read_unlock();
1360                         return c;
1361                 }
1362         }
1363         rcu_read_unlock();
1364
1365         return NULL;
1366 }
1367
1368 static inline struct hci_conn *hci_conn_hash_lookup_state(struct hci_dev *hdev,
1369                                                         __u8 type, __u16 state)
1370 {
1371         struct hci_conn_hash *h = &hdev->conn_hash;
1372         struct hci_conn  *c;
1373
1374         rcu_read_lock();
1375
1376         list_for_each_entry_rcu(c, &h->list, list) {
1377                 if (c->type == type && c->state == state) {
1378                         rcu_read_unlock();
1379                         return c;
1380                 }
1381         }
1382
1383         rcu_read_unlock();
1384
1385         return NULL;
1386 }
1387
1388 typedef void (*hci_conn_func_t)(struct hci_conn *conn, void *data);
1389 static inline void hci_conn_hash_list_state(struct hci_dev *hdev,
1390                                             hci_conn_func_t func, __u8 type,
1391                                             __u16 state, void *data)
1392 {
1393         struct hci_conn_hash *h = &hdev->conn_hash;
1394         struct hci_conn  *c;
1395
1396         if (!func)
1397                 return;
1398
1399         rcu_read_lock();
1400
1401         list_for_each_entry_rcu(c, &h->list, list) {
1402                 if (c->type == type && c->state == state)
1403                         func(c, data);
1404         }
1405
1406         rcu_read_unlock();
1407 }
1408
1409 static inline struct hci_conn *hci_lookup_le_connect(struct hci_dev *hdev)
1410 {
1411         struct hci_conn_hash *h = &hdev->conn_hash;
1412         struct hci_conn  *c;
1413
1414         rcu_read_lock();
1415
1416         list_for_each_entry_rcu(c, &h->list, list) {
1417                 if (c->type == LE_LINK && c->state == BT_CONNECT &&
1418                     !test_bit(HCI_CONN_SCANNING, &c->flags)) {
1419                         rcu_read_unlock();
1420                         return c;
1421                 }
1422         }
1423
1424         rcu_read_unlock();
1425
1426         return NULL;
1427 }
1428
1429 /* Returns true if an le connection is in the scanning state */
1430 static inline bool hci_is_le_conn_scanning(struct hci_dev *hdev)
1431 {
1432         struct hci_conn_hash *h = &hdev->conn_hash;
1433         struct hci_conn  *c;
1434
1435         rcu_read_lock();
1436
1437         list_for_each_entry_rcu(c, &h->list, list) {
1438                 if (c->type == LE_LINK && c->state == BT_CONNECT &&
1439                     test_bit(HCI_CONN_SCANNING, &c->flags)) {
1440                         rcu_read_unlock();
1441                         return true;
1442                 }
1443         }
1444
1445         rcu_read_unlock();
1446
1447         return false;
1448 }
1449
1450 int hci_disconnect(struct hci_conn *conn, __u8 reason);
1451 bool hci_setup_sync(struct hci_conn *conn, __u16 handle);
1452 void hci_sco_setup(struct hci_conn *conn, __u8 status);
1453 bool hci_iso_setup_path(struct hci_conn *conn);
1454 int hci_le_create_cis_pending(struct hci_dev *hdev);
1455 int hci_conn_check_create_cis(struct hci_conn *conn);
1456
1457 struct hci_conn *hci_conn_add(struct hci_dev *hdev, int type, bdaddr_t *dst,
1458                               u8 role, u16 handle);
1459 struct hci_conn *hci_conn_add_unset(struct hci_dev *hdev, int type,
1460                                     bdaddr_t *dst, u8 role);
1461 void hci_conn_del(struct hci_conn *conn);
1462 void hci_conn_hash_flush(struct hci_dev *hdev);
1463 void hci_conn_check_pending(struct hci_dev *hdev);
1464
1465 struct hci_chan *hci_chan_create(struct hci_conn *conn);
1466 void hci_chan_del(struct hci_chan *chan);
1467 void hci_chan_list_flush(struct hci_conn *conn);
1468 struct hci_chan *hci_chan_lookup_handle(struct hci_dev *hdev, __u16 handle);
1469
1470 struct hci_conn *hci_connect_le_scan(struct hci_dev *hdev, bdaddr_t *dst,
1471                                      u8 dst_type, u8 sec_level,
1472                                      u16 conn_timeout,
1473                                      enum conn_reasons conn_reason);
1474 struct hci_conn *hci_connect_le(struct hci_dev *hdev, bdaddr_t *dst,
1475                                 u8 dst_type, bool dst_resolved, u8 sec_level,
1476                                 u16 conn_timeout, u8 role);
1477 struct hci_conn *hci_connect_acl(struct hci_dev *hdev, bdaddr_t *dst,
1478                                  u8 sec_level, u8 auth_type,
1479                                  enum conn_reasons conn_reason);
1480 struct hci_conn *hci_connect_sco(struct hci_dev *hdev, int type, bdaddr_t *dst,
1481                                  __u16 setting, struct bt_codec *codec);
1482 struct hci_conn *hci_bind_cis(struct hci_dev *hdev, bdaddr_t *dst,
1483                               __u8 dst_type, struct bt_iso_qos *qos);
1484 struct hci_conn *hci_bind_bis(struct hci_dev *hdev, bdaddr_t *dst,
1485                               struct bt_iso_qos *qos,
1486                               __u8 base_len, __u8 *base);
1487 struct hci_conn *hci_connect_cis(struct hci_dev *hdev, bdaddr_t *dst,
1488                                  __u8 dst_type, struct bt_iso_qos *qos);
1489 struct hci_conn *hci_connect_bis(struct hci_dev *hdev, bdaddr_t *dst,
1490                                  __u8 dst_type, struct bt_iso_qos *qos,
1491                                  __u8 data_len, __u8 *data);
1492 int hci_pa_create_sync(struct hci_dev *hdev, bdaddr_t *dst, __u8 dst_type,
1493                        __u8 sid, struct bt_iso_qos *qos);
1494 int hci_le_big_create_sync(struct hci_dev *hdev, struct hci_conn *hcon,
1495                            struct bt_iso_qos *qos,
1496                            __u16 sync_handle, __u8 num_bis, __u8 bis[]);
1497 int hci_conn_check_link_mode(struct hci_conn *conn);
1498 int hci_conn_check_secure(struct hci_conn *conn, __u8 sec_level);
1499 int hci_conn_security(struct hci_conn *conn, __u8 sec_level, __u8 auth_type,
1500                       bool initiator);
1501 int hci_conn_switch_role(struct hci_conn *conn, __u8 role);
1502
1503 void hci_conn_enter_active_mode(struct hci_conn *conn, __u8 force_active);
1504
1505 void hci_conn_failed(struct hci_conn *conn, u8 status);
1506 u8 hci_conn_set_handle(struct hci_conn *conn, u16 handle);
1507
1508 /*
1509  * hci_conn_get() and hci_conn_put() are used to control the life-time of an
1510  * "hci_conn" object. They do not guarantee that the hci_conn object is running,
1511  * working or anything else. They just guarantee that the object is available
1512  * and can be dereferenced. So you can use its locks, local variables and any
1513  * other constant data.
1514  * Before accessing runtime data, you _must_ lock the object and then check that
1515  * it is still running. As soon as you release the locks, the connection might
1516  * get dropped, though.
1517  *
1518  * On the other hand, hci_conn_hold() and hci_conn_drop() are used to control
1519  * how long the underlying connection is held. So every channel that runs on the
1520  * hci_conn object calls this to prevent the connection from disappearing. As
1521  * long as you hold a device, you must also guarantee that you have a valid
1522  * reference to the device via hci_conn_get() (or the initial reference from
1523  * hci_conn_add()).
1524  * The hold()/drop() ref-count is known to drop below 0 sometimes, which doesn't
1525  * break because nobody cares for that. But this means, we cannot use
1526  * _get()/_drop() in it, but require the caller to have a valid ref (FIXME).
1527  */
1528
1529 static inline struct hci_conn *hci_conn_get(struct hci_conn *conn)
1530 {
1531         get_device(&conn->dev);
1532         return conn;
1533 }
1534
1535 static inline void hci_conn_put(struct hci_conn *conn)
1536 {
1537         put_device(&conn->dev);
1538 }
1539
1540 static inline struct hci_conn *hci_conn_hold(struct hci_conn *conn)
1541 {
1542         BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1543
1544         atomic_inc(&conn->refcnt);
1545         cancel_delayed_work(&conn->disc_work);
1546
1547         return conn;
1548 }
1549
1550 static inline void hci_conn_drop(struct hci_conn *conn)
1551 {
1552         BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1553
1554         if (atomic_dec_and_test(&conn->refcnt)) {
1555                 unsigned long timeo;
1556
1557                 switch (conn->type) {
1558                 case ACL_LINK:
1559                 case LE_LINK:
1560                         cancel_delayed_work(&conn->idle_work);
1561                         if (conn->state == BT_CONNECTED) {
1562                                 timeo = conn->disc_timeout;
1563                                 if (!conn->out)
1564                                         timeo *= 2;
1565                         } else {
1566                                 timeo = 0;
1567                         }
1568                         break;
1569
1570                 case AMP_LINK:
1571                         timeo = conn->disc_timeout;
1572                         break;
1573
1574                 default:
1575                         timeo = 0;
1576                         break;
1577                 }
1578
1579                 cancel_delayed_work(&conn->disc_work);
1580                 queue_delayed_work(conn->hdev->workqueue,
1581                                    &conn->disc_work, timeo);
1582         }
1583 }
1584
1585 /* ----- HCI Devices ----- */
1586 static inline void hci_dev_put(struct hci_dev *d)
1587 {
1588         BT_DBG("%s orig refcnt %d", d->name,
1589                kref_read(&d->dev.kobj.kref));
1590
1591         put_device(&d->dev);
1592 }
1593
1594 static inline struct hci_dev *hci_dev_hold(struct hci_dev *d)
1595 {
1596         BT_DBG("%s orig refcnt %d", d->name,
1597                kref_read(&d->dev.kobj.kref));
1598
1599         get_device(&d->dev);
1600         return d;
1601 }
1602
1603 #define hci_dev_lock(d)         mutex_lock(&d->lock)
1604 #define hci_dev_unlock(d)       mutex_unlock(&d->lock)
1605
1606 #define to_hci_dev(d) container_of(d, struct hci_dev, dev)
1607 #define to_hci_conn(c) container_of(c, struct hci_conn, dev)
1608
1609 static inline void *hci_get_drvdata(struct hci_dev *hdev)
1610 {
1611         return dev_get_drvdata(&hdev->dev);
1612 }
1613
1614 static inline void hci_set_drvdata(struct hci_dev *hdev, void *data)
1615 {
1616         dev_set_drvdata(&hdev->dev, data);
1617 }
1618
1619 static inline void *hci_get_priv(struct hci_dev *hdev)
1620 {
1621         return (char *)hdev + sizeof(*hdev);
1622 }
1623
1624 struct hci_dev *hci_dev_get(int index);
1625 struct hci_dev *hci_get_route(bdaddr_t *dst, bdaddr_t *src, u8 src_type);
1626
1627 struct hci_dev *hci_alloc_dev_priv(int sizeof_priv);
1628
1629 static inline struct hci_dev *hci_alloc_dev(void)
1630 {
1631         return hci_alloc_dev_priv(0);
1632 }
1633
1634 void hci_free_dev(struct hci_dev *hdev);
1635 int hci_register_dev(struct hci_dev *hdev);
1636 void hci_unregister_dev(struct hci_dev *hdev);
1637 void hci_release_dev(struct hci_dev *hdev);
1638 int hci_register_suspend_notifier(struct hci_dev *hdev);
1639 int hci_unregister_suspend_notifier(struct hci_dev *hdev);
1640 int hci_suspend_dev(struct hci_dev *hdev);
1641 int hci_resume_dev(struct hci_dev *hdev);
1642 int hci_reset_dev(struct hci_dev *hdev);
1643 int hci_recv_frame(struct hci_dev *hdev, struct sk_buff *skb);
1644 int hci_recv_diag(struct hci_dev *hdev, struct sk_buff *skb);
1645 __printf(2, 3) void hci_set_hw_info(struct hci_dev *hdev, const char *fmt, ...);
1646 __printf(2, 3) void hci_set_fw_info(struct hci_dev *hdev, const char *fmt, ...);
1647
1648 static inline void hci_set_msft_opcode(struct hci_dev *hdev, __u16 opcode)
1649 {
1650 #if IS_ENABLED(CONFIG_BT_MSFTEXT)
1651         hdev->msft_opcode = opcode;
1652 #endif
1653 }
1654
1655 static inline void hci_set_aosp_capable(struct hci_dev *hdev)
1656 {
1657 #if IS_ENABLED(CONFIG_BT_AOSPEXT)
1658         hdev->aosp_capable = true;
1659 #endif
1660 }
1661
1662 static inline void hci_devcd_setup(struct hci_dev *hdev)
1663 {
1664 #ifdef CONFIG_DEV_COREDUMP
1665         INIT_WORK(&hdev->dump.dump_rx, hci_devcd_rx);
1666         INIT_DELAYED_WORK(&hdev->dump.dump_timeout, hci_devcd_timeout);
1667         skb_queue_head_init(&hdev->dump.dump_q);
1668 #endif
1669 }
1670
1671 int hci_dev_open(__u16 dev);
1672 int hci_dev_close(__u16 dev);
1673 int hci_dev_do_close(struct hci_dev *hdev);
1674 int hci_dev_reset(__u16 dev);
1675 int hci_dev_reset_stat(__u16 dev);
1676 int hci_dev_cmd(unsigned int cmd, void __user *arg);
1677 int hci_get_dev_list(void __user *arg);
1678 int hci_get_dev_info(void __user *arg);
1679 int hci_get_conn_list(void __user *arg);
1680 int hci_get_conn_info(struct hci_dev *hdev, void __user *arg);
1681 int hci_get_auth_info(struct hci_dev *hdev, void __user *arg);
1682 int hci_inquiry(void __user *arg);
1683
1684 struct bdaddr_list *hci_bdaddr_list_lookup(struct list_head *list,
1685                                            bdaddr_t *bdaddr, u8 type);
1686 struct bdaddr_list_with_irk *hci_bdaddr_list_lookup_with_irk(
1687                                     struct list_head *list, bdaddr_t *bdaddr,
1688                                     u8 type);
1689 struct bdaddr_list_with_flags *
1690 hci_bdaddr_list_lookup_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1691                                   u8 type);
1692 int hci_bdaddr_list_add(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1693 int hci_bdaddr_list_add_with_irk(struct list_head *list, bdaddr_t *bdaddr,
1694                                  u8 type, u8 *peer_irk, u8 *local_irk);
1695 int hci_bdaddr_list_add_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1696                                    u8 type, u32 flags);
1697 int hci_bdaddr_list_del(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1698 int hci_bdaddr_list_del_with_irk(struct list_head *list, bdaddr_t *bdaddr,
1699                                  u8 type);
1700 int hci_bdaddr_list_del_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1701                                    u8 type);
1702 void hci_bdaddr_list_clear(struct list_head *list);
1703
1704 struct hci_conn_params *hci_conn_params_lookup(struct hci_dev *hdev,
1705                                                bdaddr_t *addr, u8 addr_type);
1706 struct hci_conn_params *hci_conn_params_add(struct hci_dev *hdev,
1707                                             bdaddr_t *addr, u8 addr_type);
1708 void hci_conn_params_del(struct hci_dev *hdev, bdaddr_t *addr, u8 addr_type);
1709 void hci_conn_params_clear_disabled(struct hci_dev *hdev);
1710 void hci_conn_params_free(struct hci_conn_params *param);
1711
1712 void hci_pend_le_list_del_init(struct hci_conn_params *param);
1713 void hci_pend_le_list_add(struct hci_conn_params *param,
1714                           struct list_head *list);
1715 struct hci_conn_params *hci_pend_le_action_lookup(struct list_head *list,
1716                                                   bdaddr_t *addr,
1717                                                   u8 addr_type);
1718
1719 void hci_uuids_clear(struct hci_dev *hdev);
1720
1721 void hci_link_keys_clear(struct hci_dev *hdev);
1722 struct link_key *hci_find_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1723 struct link_key *hci_add_link_key(struct hci_dev *hdev, struct hci_conn *conn,
1724                                   bdaddr_t *bdaddr, u8 *val, u8 type,
1725                                   u8 pin_len, bool *persistent);
1726 struct smp_ltk *hci_add_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1727                             u8 addr_type, u8 type, u8 authenticated,
1728                             u8 tk[16], u8 enc_size, __le16 ediv, __le64 rand);
1729 struct smp_ltk *hci_find_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1730                              u8 addr_type, u8 role);
1731 int hci_remove_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 bdaddr_type);
1732 void hci_smp_ltks_clear(struct hci_dev *hdev);
1733 int hci_remove_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1734
1735 struct smp_irk *hci_find_irk_by_rpa(struct hci_dev *hdev, bdaddr_t *rpa);
1736 struct smp_irk *hci_find_irk_by_addr(struct hci_dev *hdev, bdaddr_t *bdaddr,
1737                                      u8 addr_type);
1738 struct smp_irk *hci_add_irk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1739                             u8 addr_type, u8 val[16], bdaddr_t *rpa);
1740 void hci_remove_irk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 addr_type);
1741 bool hci_is_blocked_key(struct hci_dev *hdev, u8 type, u8 val[16]);
1742 void hci_blocked_keys_clear(struct hci_dev *hdev);
1743 void hci_smp_irks_clear(struct hci_dev *hdev);
1744
1745 bool hci_bdaddr_is_paired(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type);
1746
1747 void hci_remote_oob_data_clear(struct hci_dev *hdev);
1748 struct oob_data *hci_find_remote_oob_data(struct hci_dev *hdev,
1749                                           bdaddr_t *bdaddr, u8 bdaddr_type);
1750 int hci_add_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1751                             u8 bdaddr_type, u8 *hash192, u8 *rand192,
1752                             u8 *hash256, u8 *rand256);
1753 int hci_remove_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1754                                u8 bdaddr_type);
1755
1756 void hci_adv_instances_clear(struct hci_dev *hdev);
1757 struct adv_info *hci_find_adv_instance(struct hci_dev *hdev, u8 instance);
1758 struct adv_info *hci_get_next_instance(struct hci_dev *hdev, u8 instance);
1759 struct adv_info *hci_add_adv_instance(struct hci_dev *hdev, u8 instance,
1760                                       u32 flags, u16 adv_data_len, u8 *adv_data,
1761                                       u16 scan_rsp_len, u8 *scan_rsp_data,
1762                                       u16 timeout, u16 duration, s8 tx_power,
1763                                       u32 min_interval, u32 max_interval,
1764                                       u8 mesh_handle);
1765 struct adv_info *hci_add_per_instance(struct hci_dev *hdev, u8 instance,
1766                                       u32 flags, u8 data_len, u8 *data,
1767                                       u32 min_interval, u32 max_interval);
1768 int hci_set_adv_instance_data(struct hci_dev *hdev, u8 instance,
1769                          u16 adv_data_len, u8 *adv_data,
1770                          u16 scan_rsp_len, u8 *scan_rsp_data);
1771 int hci_remove_adv_instance(struct hci_dev *hdev, u8 instance);
1772 void hci_adv_instances_set_rpa_expired(struct hci_dev *hdev, bool rpa_expired);
1773 u32 hci_adv_instance_flags(struct hci_dev *hdev, u8 instance);
1774 bool hci_adv_instance_is_scannable(struct hci_dev *hdev, u8 instance);
1775
1776 void hci_adv_monitors_clear(struct hci_dev *hdev);
1777 void hci_free_adv_monitor(struct hci_dev *hdev, struct adv_monitor *monitor);
1778 int hci_add_adv_monitor(struct hci_dev *hdev, struct adv_monitor *monitor);
1779 int hci_remove_single_adv_monitor(struct hci_dev *hdev, u16 handle);
1780 int hci_remove_all_adv_monitor(struct hci_dev *hdev);
1781 bool hci_is_adv_monitoring(struct hci_dev *hdev);
1782 int hci_get_adv_monitor_offload_ext(struct hci_dev *hdev);
1783
1784 void hci_event_packet(struct hci_dev *hdev, struct sk_buff *skb);
1785
1786 void hci_init_sysfs(struct hci_dev *hdev);
1787 void hci_conn_init_sysfs(struct hci_conn *conn);
1788 void hci_conn_add_sysfs(struct hci_conn *conn);
1789 void hci_conn_del_sysfs(struct hci_conn *conn);
1790
1791 #define SET_HCIDEV_DEV(hdev, pdev) ((hdev)->dev.parent = (pdev))
1792 #define GET_HCIDEV_DEV(hdev) ((hdev)->dev.parent)
1793
1794 /* ----- LMP capabilities ----- */
1795 #define lmp_encrypt_capable(dev)   ((dev)->features[0][0] & LMP_ENCRYPT)
1796 #define lmp_rswitch_capable(dev)   ((dev)->features[0][0] & LMP_RSWITCH)
1797 #define lmp_hold_capable(dev)      ((dev)->features[0][0] & LMP_HOLD)
1798 #define lmp_sniff_capable(dev)     ((dev)->features[0][0] & LMP_SNIFF)
1799 #define lmp_park_capable(dev)      ((dev)->features[0][1] & LMP_PARK)
1800 #define lmp_inq_rssi_capable(dev)  ((dev)->features[0][3] & LMP_RSSI_INQ)
1801 #define lmp_esco_capable(dev)      ((dev)->features[0][3] & LMP_ESCO)
1802 #define lmp_bredr_capable(dev)     (!((dev)->features[0][4] & LMP_NO_BREDR))
1803 #define lmp_le_capable(dev)        ((dev)->features[0][4] & LMP_LE)
1804 #define lmp_sniffsubr_capable(dev) ((dev)->features[0][5] & LMP_SNIFF_SUBR)
1805 #define lmp_pause_enc_capable(dev) ((dev)->features[0][5] & LMP_PAUSE_ENC)
1806 #define lmp_esco_2m_capable(dev)   ((dev)->features[0][5] & LMP_EDR_ESCO_2M)
1807 #define lmp_ext_inq_capable(dev)   ((dev)->features[0][6] & LMP_EXT_INQ)
1808 #define lmp_le_br_capable(dev)     (!!((dev)->features[0][6] & LMP_SIMUL_LE_BR))
1809 #define lmp_ssp_capable(dev)       ((dev)->features[0][6] & LMP_SIMPLE_PAIR)
1810 #define lmp_no_flush_capable(dev)  ((dev)->features[0][6] & LMP_NO_FLUSH)
1811 #define lmp_lsto_capable(dev)      ((dev)->features[0][7] & LMP_LSTO)
1812 #define lmp_inq_tx_pwr_capable(dev) ((dev)->features[0][7] & LMP_INQ_TX_PWR)
1813 #define lmp_ext_feat_capable(dev)  ((dev)->features[0][7] & LMP_EXTFEATURES)
1814 #define lmp_transp_capable(dev)    ((dev)->features[0][2] & LMP_TRANSPARENT)
1815 #define lmp_edr_2m_capable(dev)    ((dev)->features[0][3] & LMP_EDR_2M)
1816 #define lmp_edr_3m_capable(dev)    ((dev)->features[0][3] & LMP_EDR_3M)
1817 #define lmp_edr_3slot_capable(dev) ((dev)->features[0][4] & LMP_EDR_3SLOT)
1818 #define lmp_edr_5slot_capable(dev) ((dev)->features[0][5] & LMP_EDR_5SLOT)
1819
1820 /* ----- Extended LMP capabilities ----- */
1821 #define lmp_cpb_central_capable(dev) ((dev)->features[2][0] & LMP_CPB_CENTRAL)
1822 #define lmp_cpb_peripheral_capable(dev) ((dev)->features[2][0] & LMP_CPB_PERIPHERAL)
1823 #define lmp_sync_train_capable(dev) ((dev)->features[2][0] & LMP_SYNC_TRAIN)
1824 #define lmp_sync_scan_capable(dev)  ((dev)->features[2][0] & LMP_SYNC_SCAN)
1825 #define lmp_sc_capable(dev)         ((dev)->features[2][1] & LMP_SC)
1826 #define lmp_ping_capable(dev)       ((dev)->features[2][1] & LMP_PING)
1827
1828 /* ----- Host capabilities ----- */
1829 #define lmp_host_ssp_capable(dev)  ((dev)->features[1][0] & LMP_HOST_SSP)
1830 #define lmp_host_sc_capable(dev)   ((dev)->features[1][0] & LMP_HOST_SC)
1831 #define lmp_host_le_capable(dev)   (!!((dev)->features[1][0] & LMP_HOST_LE))
1832 #define lmp_host_le_br_capable(dev) (!!((dev)->features[1][0] & LMP_HOST_LE_BREDR))
1833
1834 #define hdev_is_powered(dev)   (test_bit(HCI_UP, &(dev)->flags) && \
1835                                 !hci_dev_test_flag(dev, HCI_AUTO_OFF))
1836 #define bredr_sc_enabled(dev)  (lmp_sc_capable(dev) && \
1837                                 hci_dev_test_flag(dev, HCI_SC_ENABLED))
1838 #define rpa_valid(dev)         (bacmp(&dev->rpa, BDADDR_ANY) && \
1839                                 !hci_dev_test_flag(dev, HCI_RPA_EXPIRED))
1840 #define adv_rpa_valid(adv)     (bacmp(&adv->random_addr, BDADDR_ANY) && \
1841                                 !adv->rpa_expired)
1842
1843 #define scan_1m(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_1M) || \
1844                       ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_1M))
1845
1846 #define le_2m_capable(dev) (((dev)->le_features[1] & HCI_LE_PHY_2M))
1847
1848 #define scan_2m(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_2M) || \
1849                       ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_2M))
1850
1851 #define le_coded_capable(dev) (((dev)->le_features[1] & HCI_LE_PHY_CODED) && \
1852                                !test_bit(HCI_QUIRK_BROKEN_LE_CODED, \
1853                                          &(dev)->quirks))
1854
1855 #define scan_coded(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_CODED) || \
1856                          ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_CODED))
1857
1858 #define ll_privacy_capable(dev) ((dev)->le_features[0] & HCI_LE_LL_PRIVACY)
1859
1860 /* Use LL Privacy based address resolution if supported */
1861 #define use_ll_privacy(dev) (ll_privacy_capable(dev) && \
1862                              hci_dev_test_flag(dev, HCI_ENABLE_LL_PRIVACY))
1863
1864 #define privacy_mode_capable(dev) (use_ll_privacy(dev) && \
1865                                    (hdev->commands[39] & 0x04))
1866
1867 /* Use enhanced synchronous connection if command is supported and its quirk
1868  * has not been set.
1869  */
1870 #define enhanced_sync_conn_capable(dev) \
1871         (((dev)->commands[29] & 0x08) && \
1872          !test_bit(HCI_QUIRK_BROKEN_ENHANCED_SETUP_SYNC_CONN, &(dev)->quirks))
1873
1874 /* Use ext scanning if set ext scan param and ext scan enable is supported */
1875 #define use_ext_scan(dev) (((dev)->commands[37] & 0x20) && \
1876                            ((dev)->commands[37] & 0x40) && \
1877                            !test_bit(HCI_QUIRK_BROKEN_EXT_SCAN, &(dev)->quirks))
1878
1879 /* Use ext create connection if command is supported */
1880 #define use_ext_conn(dev) ((dev)->commands[37] & 0x80)
1881
1882 /* Extended advertising support */
1883 #define ext_adv_capable(dev) (((dev)->le_features[1] & HCI_LE_EXT_ADV))
1884
1885 /* Maximum advertising length */
1886 #define max_adv_len(dev) \
1887         (ext_adv_capable(dev) ? HCI_MAX_EXT_AD_LENGTH : HCI_MAX_AD_LENGTH)
1888
1889 /* BLUETOOTH CORE SPECIFICATION Version 5.3 | Vol 4, Part E page 1789:
1890  *
1891  * C24: Mandatory if the LE Controller supports Connection State and either
1892  * LE Feature (LL Privacy) or LE Feature (Extended Advertising) is supported
1893  */
1894 #define use_enhanced_conn_complete(dev) (ll_privacy_capable(dev) || \
1895                                          ext_adv_capable(dev))
1896
1897 /* Periodic advertising support */
1898 #define per_adv_capable(dev) (((dev)->le_features[1] & HCI_LE_PERIODIC_ADV))
1899
1900 /* CIS Master/Slave and BIS support */
1901 #define iso_capable(dev) (cis_capable(dev) || bis_capable(dev))
1902 #define cis_capable(dev) \
1903         (cis_central_capable(dev) || cis_peripheral_capable(dev))
1904 #define cis_central_capable(dev) \
1905         ((dev)->le_features[3] & HCI_LE_CIS_CENTRAL)
1906 #define cis_peripheral_capable(dev) \
1907         ((dev)->le_features[3] & HCI_LE_CIS_PERIPHERAL)
1908 #define bis_capable(dev) ((dev)->le_features[3] & HCI_LE_ISO_BROADCASTER)
1909 #define sync_recv_capable(dev) ((dev)->le_features[3] & HCI_LE_ISO_SYNC_RECEIVER)
1910
1911 #define mws_transport_config_capable(dev) (((dev)->commands[30] & 0x08) && \
1912         (!test_bit(HCI_QUIRK_BROKEN_MWS_TRANSPORT_CONFIG, &(dev)->quirks)))
1913
1914 /* ----- HCI protocols ----- */
1915 #define HCI_PROTO_DEFER             0x01
1916
1917 static inline int hci_proto_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
1918                                         __u8 type, __u8 *flags)
1919 {
1920         switch (type) {
1921         case ACL_LINK:
1922                 return l2cap_connect_ind(hdev, bdaddr);
1923
1924         case SCO_LINK:
1925         case ESCO_LINK:
1926                 return sco_connect_ind(hdev, bdaddr, flags);
1927
1928         case ISO_LINK:
1929                 return iso_connect_ind(hdev, bdaddr, flags);
1930
1931         default:
1932                 BT_ERR("unknown link type %d", type);
1933                 return -EINVAL;
1934         }
1935 }
1936
1937 static inline int hci_proto_disconn_ind(struct hci_conn *conn)
1938 {
1939         if (conn->type != ACL_LINK && conn->type != LE_LINK)
1940                 return HCI_ERROR_REMOTE_USER_TERM;
1941
1942         return l2cap_disconn_ind(conn);
1943 }
1944
1945 /* ----- HCI callbacks ----- */
1946 struct hci_cb {
1947         struct list_head list;
1948
1949         char *name;
1950
1951         void (*connect_cfm)     (struct hci_conn *conn, __u8 status);
1952         void (*disconn_cfm)     (struct hci_conn *conn, __u8 status);
1953         void (*security_cfm)    (struct hci_conn *conn, __u8 status,
1954                                                                 __u8 encrypt);
1955         void (*key_change_cfm)  (struct hci_conn *conn, __u8 status);
1956         void (*role_switch_cfm) (struct hci_conn *conn, __u8 status, __u8 role);
1957 };
1958
1959 static inline void hci_connect_cfm(struct hci_conn *conn, __u8 status)
1960 {
1961         struct hci_cb *cb;
1962
1963         mutex_lock(&hci_cb_list_lock);
1964         list_for_each_entry(cb, &hci_cb_list, list) {
1965                 if (cb->connect_cfm)
1966                         cb->connect_cfm(conn, status);
1967         }
1968         mutex_unlock(&hci_cb_list_lock);
1969
1970         if (conn->connect_cfm_cb)
1971                 conn->connect_cfm_cb(conn, status);
1972 }
1973
1974 static inline void hci_disconn_cfm(struct hci_conn *conn, __u8 reason)
1975 {
1976         struct hci_cb *cb;
1977
1978         mutex_lock(&hci_cb_list_lock);
1979         list_for_each_entry(cb, &hci_cb_list, list) {
1980                 if (cb->disconn_cfm)
1981                         cb->disconn_cfm(conn, reason);
1982         }
1983         mutex_unlock(&hci_cb_list_lock);
1984
1985         if (conn->disconn_cfm_cb)
1986                 conn->disconn_cfm_cb(conn, reason);
1987 }
1988
1989 static inline void hci_auth_cfm(struct hci_conn *conn, __u8 status)
1990 {
1991         struct hci_cb *cb;
1992         __u8 encrypt;
1993
1994         if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->flags))
1995                 return;
1996
1997         encrypt = test_bit(HCI_CONN_ENCRYPT, &conn->flags) ? 0x01 : 0x00;
1998
1999         mutex_lock(&hci_cb_list_lock);
2000         list_for_each_entry(cb, &hci_cb_list, list) {
2001                 if (cb->security_cfm)
2002                         cb->security_cfm(conn, status, encrypt);
2003         }
2004         mutex_unlock(&hci_cb_list_lock);
2005
2006         if (conn->security_cfm_cb)
2007                 conn->security_cfm_cb(conn, status);
2008 }
2009
2010 static inline void hci_encrypt_cfm(struct hci_conn *conn, __u8 status)
2011 {
2012         struct hci_cb *cb;
2013         __u8 encrypt;
2014
2015         if (conn->state == BT_CONFIG) {
2016                 if (!status)
2017                         conn->state = BT_CONNECTED;
2018
2019                 hci_connect_cfm(conn, status);
2020                 hci_conn_drop(conn);
2021                 return;
2022         }
2023
2024         if (!test_bit(HCI_CONN_ENCRYPT, &conn->flags))
2025                 encrypt = 0x00;
2026         else if (test_bit(HCI_CONN_AES_CCM, &conn->flags))
2027                 encrypt = 0x02;
2028         else
2029                 encrypt = 0x01;
2030
2031         if (!status) {
2032                 if (conn->sec_level == BT_SECURITY_SDP)
2033                         conn->sec_level = BT_SECURITY_LOW;
2034
2035                 if (conn->pending_sec_level > conn->sec_level)
2036                         conn->sec_level = conn->pending_sec_level;
2037         }
2038
2039         mutex_lock(&hci_cb_list_lock);
2040         list_for_each_entry(cb, &hci_cb_list, list) {
2041                 if (cb->security_cfm)
2042                         cb->security_cfm(conn, status, encrypt);
2043         }
2044         mutex_unlock(&hci_cb_list_lock);
2045
2046         if (conn->security_cfm_cb)
2047                 conn->security_cfm_cb(conn, status);
2048 }
2049
2050 static inline void hci_key_change_cfm(struct hci_conn *conn, __u8 status)
2051 {
2052         struct hci_cb *cb;
2053
2054         mutex_lock(&hci_cb_list_lock);
2055         list_for_each_entry(cb, &hci_cb_list, list) {
2056                 if (cb->key_change_cfm)
2057                         cb->key_change_cfm(conn, status);
2058         }
2059         mutex_unlock(&hci_cb_list_lock);
2060 }
2061
2062 static inline void hci_role_switch_cfm(struct hci_conn *conn, __u8 status,
2063                                                                 __u8 role)
2064 {
2065         struct hci_cb *cb;
2066
2067         mutex_lock(&hci_cb_list_lock);
2068         list_for_each_entry(cb, &hci_cb_list, list) {
2069                 if (cb->role_switch_cfm)
2070                         cb->role_switch_cfm(conn, status, role);
2071         }
2072         mutex_unlock(&hci_cb_list_lock);
2073 }
2074
2075 static inline bool hci_bdaddr_is_rpa(bdaddr_t *bdaddr, u8 addr_type)
2076 {
2077         if (addr_type != ADDR_LE_DEV_RANDOM)
2078                 return false;
2079
2080         if ((bdaddr->b[5] & 0xc0) == 0x40)
2081                return true;
2082
2083         return false;
2084 }
2085
2086 static inline bool hci_is_identity_address(bdaddr_t *addr, u8 addr_type)
2087 {
2088         if (addr_type == ADDR_LE_DEV_PUBLIC)
2089                 return true;
2090
2091         /* Check for Random Static address type */
2092         if ((addr->b[5] & 0xc0) == 0xc0)
2093                 return true;
2094
2095         return false;
2096 }
2097
2098 static inline struct smp_irk *hci_get_irk(struct hci_dev *hdev,
2099                                           bdaddr_t *bdaddr, u8 addr_type)
2100 {
2101         if (!hci_bdaddr_is_rpa(bdaddr, addr_type))
2102                 return NULL;
2103
2104         return hci_find_irk_by_rpa(hdev, bdaddr);
2105 }
2106
2107 static inline int hci_check_conn_params(u16 min, u16 max, u16 latency,
2108                                         u16 to_multiplier)
2109 {
2110         u16 max_latency;
2111
2112         if (min > max || min < 6 || max > 3200)
2113                 return -EINVAL;
2114
2115         if (to_multiplier < 10 || to_multiplier > 3200)
2116                 return -EINVAL;
2117
2118         if (max >= to_multiplier * 8)
2119                 return -EINVAL;
2120
2121         max_latency = (to_multiplier * 4 / max) - 1;
2122         if (latency > 499 || latency > max_latency)
2123                 return -EINVAL;
2124
2125         return 0;
2126 }
2127
2128 int hci_register_cb(struct hci_cb *hcb);
2129 int hci_unregister_cb(struct hci_cb *hcb);
2130
2131 int __hci_cmd_send(struct hci_dev *hdev, u16 opcode, u32 plen,
2132                    const void *param);
2133
2134 int hci_send_cmd(struct hci_dev *hdev, __u16 opcode, __u32 plen,
2135                  const void *param);
2136 void hci_send_acl(struct hci_chan *chan, struct sk_buff *skb, __u16 flags);
2137 void hci_send_sco(struct hci_conn *conn, struct sk_buff *skb);
2138 void hci_send_iso(struct hci_conn *conn, struct sk_buff *skb);
2139
2140 void *hci_sent_cmd_data(struct hci_dev *hdev, __u16 opcode);
2141 void *hci_recv_event_data(struct hci_dev *hdev, __u8 event);
2142
2143 u32 hci_conn_get_phy(struct hci_conn *conn);
2144
2145 /* ----- HCI Sockets ----- */
2146 void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb);
2147 void hci_send_to_channel(unsigned short channel, struct sk_buff *skb,
2148                          int flag, struct sock *skip_sk);
2149 void hci_send_to_monitor(struct hci_dev *hdev, struct sk_buff *skb);
2150 void hci_send_monitor_ctrl_event(struct hci_dev *hdev, u16 event,
2151                                  void *data, u16 data_len, ktime_t tstamp,
2152                                  int flag, struct sock *skip_sk);
2153
2154 void hci_sock_dev_event(struct hci_dev *hdev, int event);
2155
2156 #define HCI_MGMT_VAR_LEN        BIT(0)
2157 #define HCI_MGMT_NO_HDEV        BIT(1)
2158 #define HCI_MGMT_UNTRUSTED      BIT(2)
2159 #define HCI_MGMT_UNCONFIGURED   BIT(3)
2160 #define HCI_MGMT_HDEV_OPTIONAL  BIT(4)
2161
2162 struct hci_mgmt_handler {
2163         int (*func) (struct sock *sk, struct hci_dev *hdev, void *data,
2164                      u16 data_len);
2165         size_t data_len;
2166         unsigned long flags;
2167 };
2168
2169 struct hci_mgmt_chan {
2170         struct list_head list;
2171         unsigned short channel;
2172         size_t handler_count;
2173         const struct hci_mgmt_handler *handlers;
2174         void (*hdev_init) (struct sock *sk, struct hci_dev *hdev);
2175 };
2176
2177 int hci_mgmt_chan_register(struct hci_mgmt_chan *c);
2178 void hci_mgmt_chan_unregister(struct hci_mgmt_chan *c);
2179
2180 /* Management interface */
2181 #define DISCOV_TYPE_BREDR               (BIT(BDADDR_BREDR))
2182 #define DISCOV_TYPE_LE                  (BIT(BDADDR_LE_PUBLIC) | \
2183                                          BIT(BDADDR_LE_RANDOM))
2184 #define DISCOV_TYPE_INTERLEAVED         (BIT(BDADDR_BREDR) | \
2185                                          BIT(BDADDR_LE_PUBLIC) | \
2186                                          BIT(BDADDR_LE_RANDOM))
2187
2188 /* These LE scan and inquiry parameters were chosen according to LE General
2189  * Discovery Procedure specification.
2190  */
2191 #define DISCOV_LE_SCAN_WIN              0x12
2192 #define DISCOV_LE_SCAN_INT              0x12
2193 #define DISCOV_LE_TIMEOUT               10240   /* msec */
2194 #define DISCOV_INTERLEAVED_TIMEOUT      5120    /* msec */
2195 #define DISCOV_INTERLEAVED_INQUIRY_LEN  0x04
2196 #define DISCOV_BREDR_INQUIRY_LEN        0x08
2197 #define DISCOV_LE_RESTART_DELAY         msecs_to_jiffies(200)   /* msec */
2198 #define DISCOV_LE_FAST_ADV_INT_MIN      0x00A0  /* 100 msec */
2199 #define DISCOV_LE_FAST_ADV_INT_MAX      0x00F0  /* 150 msec */
2200 #define DISCOV_LE_PER_ADV_INT_MIN       0x00A0  /* 200 msec */
2201 #define DISCOV_LE_PER_ADV_INT_MAX       0x00A0  /* 200 msec */
2202 #define DISCOV_LE_ADV_MESH_MIN          0x00A0  /* 100 msec */
2203 #define DISCOV_LE_ADV_MESH_MAX          0x00A0  /* 100 msec */
2204 #define INTERVAL_TO_MS(x)               (((x) * 10) / 0x10)
2205
2206 #define NAME_RESOLVE_DURATION           msecs_to_jiffies(10240) /* 10.24 sec */
2207
2208 void mgmt_fill_version_info(void *ver);
2209 int mgmt_new_settings(struct hci_dev *hdev);
2210 void mgmt_index_added(struct hci_dev *hdev);
2211 void mgmt_index_removed(struct hci_dev *hdev);
2212 void mgmt_set_powered_failed(struct hci_dev *hdev, int err);
2213 void mgmt_power_on(struct hci_dev *hdev, int err);
2214 void __mgmt_power_off(struct hci_dev *hdev);
2215 void mgmt_new_link_key(struct hci_dev *hdev, struct link_key *key,
2216                        bool persistent);
2217 void mgmt_device_connected(struct hci_dev *hdev, struct hci_conn *conn,
2218                            u8 *name, u8 name_len);
2219 void mgmt_device_disconnected(struct hci_dev *hdev, bdaddr_t *bdaddr,
2220                               u8 link_type, u8 addr_type, u8 reason,
2221                               bool mgmt_connected);
2222 void mgmt_disconnect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr,
2223                             u8 link_type, u8 addr_type, u8 status);
2224 void mgmt_connect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2225                          u8 addr_type, u8 status);
2226 void mgmt_pin_code_request(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 secure);
2227 void mgmt_pin_code_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2228                                   u8 status);
2229 void mgmt_pin_code_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2230                                       u8 status);
2231 int mgmt_user_confirm_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
2232                               u8 link_type, u8 addr_type, u32 value,
2233                               u8 confirm_hint);
2234 int mgmt_user_confirm_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2235                                      u8 link_type, u8 addr_type, u8 status);
2236 int mgmt_user_confirm_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2237                                          u8 link_type, u8 addr_type, u8 status);
2238 int mgmt_user_passkey_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
2239                               u8 link_type, u8 addr_type);
2240 int mgmt_user_passkey_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2241                                      u8 link_type, u8 addr_type, u8 status);
2242 int mgmt_user_passkey_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2243                                          u8 link_type, u8 addr_type, u8 status);
2244 int mgmt_user_passkey_notify(struct hci_dev *hdev, bdaddr_t *bdaddr,
2245                              u8 link_type, u8 addr_type, u32 passkey,
2246                              u8 entered);
2247 void mgmt_auth_failed(struct hci_conn *conn, u8 status);
2248 void mgmt_auth_enable_complete(struct hci_dev *hdev, u8 status);
2249 void mgmt_set_class_of_dev_complete(struct hci_dev *hdev, u8 *dev_class,
2250                                     u8 status);
2251 void mgmt_set_local_name_complete(struct hci_dev *hdev, u8 *name, u8 status);
2252 void mgmt_start_discovery_complete(struct hci_dev *hdev, u8 status);
2253 void mgmt_stop_discovery_complete(struct hci_dev *hdev, u8 status);
2254 void mgmt_device_found(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2255                        u8 addr_type, u8 *dev_class, s8 rssi, u32 flags,
2256                        u8 *eir, u16 eir_len, u8 *scan_rsp, u8 scan_rsp_len,
2257                        u64 instant);
2258 void mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2259                       u8 addr_type, s8 rssi, u8 *name, u8 name_len);
2260 void mgmt_discovering(struct hci_dev *hdev, u8 discovering);
2261 void mgmt_suspending(struct hci_dev *hdev, u8 state);
2262 void mgmt_resuming(struct hci_dev *hdev, u8 reason, bdaddr_t *bdaddr,
2263                    u8 addr_type);
2264 bool mgmt_powering_down(struct hci_dev *hdev);
2265 void mgmt_new_ltk(struct hci_dev *hdev, struct smp_ltk *key, bool persistent);
2266 void mgmt_new_irk(struct hci_dev *hdev, struct smp_irk *irk, bool persistent);
2267 void mgmt_new_csrk(struct hci_dev *hdev, struct smp_csrk *csrk,
2268                    bool persistent);
2269 void mgmt_new_conn_param(struct hci_dev *hdev, bdaddr_t *bdaddr,
2270                          u8 bdaddr_type, u8 store_hint, u16 min_interval,
2271                          u16 max_interval, u16 latency, u16 timeout);
2272 void mgmt_smp_complete(struct hci_conn *conn, bool complete);
2273 bool mgmt_get_connectable(struct hci_dev *hdev);
2274 u8 mgmt_get_adv_discov_flags(struct hci_dev *hdev);
2275 void mgmt_advertising_added(struct sock *sk, struct hci_dev *hdev,
2276                             u8 instance);
2277 void mgmt_advertising_removed(struct sock *sk, struct hci_dev *hdev,
2278                               u8 instance);
2279 void mgmt_adv_monitor_removed(struct hci_dev *hdev, u16 handle);
2280 int mgmt_phy_configuration_changed(struct hci_dev *hdev, struct sock *skip);
2281 void mgmt_adv_monitor_device_lost(struct hci_dev *hdev, u16 handle,
2282                                   bdaddr_t *bdaddr, u8 addr_type);
2283
2284 int hci_abort_conn(struct hci_conn *conn, u8 reason);
2285 u8 hci_le_conn_update(struct hci_conn *conn, u16 min, u16 max, u16 latency,
2286                       u16 to_multiplier);
2287 void hci_le_start_enc(struct hci_conn *conn, __le16 ediv, __le64 rand,
2288                       __u8 ltk[16], __u8 key_size);
2289
2290 void hci_copy_identity_address(struct hci_dev *hdev, bdaddr_t *bdaddr,
2291                                u8 *bdaddr_type);
2292
2293 #define SCO_AIRMODE_MASK       0x0003
2294 #define SCO_AIRMODE_CVSD       0x0000
2295 #define SCO_AIRMODE_TRANSP     0x0003
2296
2297 #define LOCAL_CODEC_ACL_MASK    BIT(0)
2298 #define LOCAL_CODEC_SCO_MASK    BIT(1)
2299
2300 #define TRANSPORT_TYPE_MAX      0x04
2301
2302 #endif /* __HCI_CORE_H */