include/net/bluetooth/hci_core.h

   1 /*
   2    BlueZ - Bluetooth protocol stack for Linux
   3    Copyright (c) 2000-2001, 2010, Code Aurora Forum. All rights reserved.
   4    Copyright 2023 NXP
   5
   6    Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
   7
   8    This program is free software; you can redistribute it and/or modify
   9    it under the terms of the GNU General Public License version 2 as
  10    published by the Free Software Foundation;
  11
  12    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
  13    OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  14    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
  15    IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
  16    CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
  17    WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  18    ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  19    OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  20
  21    ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
  22    COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
  23    SOFTWARE IS DISCLAIMED.
  24 */
  25
  26 #ifndef __HCI_CORE_H
  27 #define __HCI_CORE_H
  28
  29 #include <linux/idr.h>
  30 #include <linux/leds.h>
  31 #include <linux/rculist.h>
  32
  33 #include <net/bluetooth/hci.h>
  34 #include <net/bluetooth/hci_sync.h>
  35 #include <net/bluetooth/hci_sock.h>
  36 #include <net/bluetooth/coredump.h>
  37
  38 /* HCI priority */
  39 #define HCI_PRIO_MAX    7
  40
  41 /* HCI maximum id value */
  42 #define HCI_MAX_ID 10000
  43
  44 /* HCI Core structures */
  45 struct inquiry_data {
  46         bdaddr_t        bdaddr;
  47         __u8            pscan_rep_mode;
  48         __u8            pscan_period_mode;
  49         __u8            pscan_mode;
  50         __u8            dev_class[3];
  51         __le16          clock_offset;
  52         __s8            rssi;
  53         __u8            ssp_mode;
  54 };
  55
  56 struct inquiry_entry {
  57         struct list_head        all;            /* inq_cache.all */
  58         struct list_head        list;           /* unknown or resolve */
  59         enum {
  60                 NAME_NOT_KNOWN,
  61                 NAME_NEEDED,
  62                 NAME_PENDING,
  63                 NAME_KNOWN,
  64         } name_state;
  65         __u32                   timestamp;
  66         struct inquiry_data     data;
  67 };
  68
  69 struct discovery_state {
  70         int                     type;
  71         enum {
  72                 DISCOVERY_STOPPED,
  73                 DISCOVERY_STARTING,
  74                 DISCOVERY_FINDING,
  75                 DISCOVERY_RESOLVING,
  76                 DISCOVERY_STOPPING,
  77         } state;
  78         struct list_head        all;    /* All devices found during inquiry */
  79         struct list_head        unknown;        /* Name state not known */
  80         struct list_head        resolve;        /* Name needs to be resolved */
  81         __u32                   timestamp;
  82         bdaddr_t                last_adv_addr;
  83         u8                      last_adv_addr_type;
  84         s8                      last_adv_rssi;
  85         u32                     last_adv_flags;
  86         u8                      last_adv_data[HCI_MAX_AD_LENGTH];
  87         u8                      last_adv_data_len;
  88         bool                    report_invalid_rssi;
  89         bool                    result_filtering;
  90         bool                    limited;
  91         s8                      rssi;
  92         u16                     uuid_count;
  93         u8                      (*uuids)[16];
  94         unsigned long           scan_start;
  95         unsigned long           scan_duration;
  96         unsigned long           name_resolve_timeout;
  97 };
  98
  99 #define SUSPEND_NOTIFIER_TIMEOUT        msecs_to_jiffies(2000) /* 2 seconds */
 100
 101 enum suspend_tasks {
 102         SUSPEND_PAUSE_DISCOVERY,
 103         SUSPEND_UNPAUSE_DISCOVERY,
 104
 105         SUSPEND_PAUSE_ADVERTISING,
 106         SUSPEND_UNPAUSE_ADVERTISING,
 107
 108         SUSPEND_SCAN_DISABLE,
 109         SUSPEND_SCAN_ENABLE,
 110         SUSPEND_DISCONNECTING,
 111
 112         SUSPEND_POWERING_DOWN,
 113
 114         SUSPEND_PREPARE_NOTIFIER,
 115
 116         SUSPEND_SET_ADV_FILTER,
 117         __SUSPEND_NUM_TASKS
 118 };
 119
 120 enum suspended_state {
 121         BT_RUNNING = 0,
 122         BT_SUSPEND_DISCONNECT,
 123         BT_SUSPEND_CONFIGURE_WAKE,
 124 };
 125
 126 struct hci_conn_hash {
 127         struct list_head list;
 128         unsigned int     acl_num;
 129         unsigned int     amp_num;
 130         unsigned int     sco_num;
 131         unsigned int     iso_num;
 132         unsigned int     le_num;
 133         unsigned int     le_num_peripheral;
 134 };
 135
 136 struct bdaddr_list {
 137         struct list_head list;
 138         bdaddr_t bdaddr;
 139         u8 bdaddr_type;
 140 };
 141
 142 struct codec_list {
 143         struct list_head list;
 144         u8      id;
 145         __u16   cid;
 146         __u16   vid;
 147         u8      transport;
 148         u8      num_caps;
 149         u32     len;
 150         struct hci_codec_caps caps[];
 151 };
 152
 153 struct bdaddr_list_with_irk {
 154         struct list_head list;
 155         bdaddr_t bdaddr;
 156         u8 bdaddr_type;
 157         u8 peer_irk[16];
 158         u8 local_irk[16];
 159 };
 160
 161 /* Bitmask of connection flags */
 162 enum hci_conn_flags {
 163         HCI_CONN_FLAG_REMOTE_WAKEUP = 1,
 164         HCI_CONN_FLAG_DEVICE_PRIVACY = 2,
 165 };
 166 typedef u8 hci_conn_flags_t;
 167
 168 struct bdaddr_list_with_flags {
 169         struct list_head list;
 170         bdaddr_t bdaddr;
 171         u8 bdaddr_type;
 172         hci_conn_flags_t flags;
 173 };
 174
 175 struct bt_uuid {
 176         struct list_head list;
 177         u8 uuid[16];
 178         u8 size;
 179         u8 svc_hint;
 180 };
 181
 182 struct blocked_key {
 183         struct list_head list;
 184         struct rcu_head rcu;
 185         u8 type;
 186         u8 val[16];
 187 };
 188
 189 struct smp_csrk {
 190         bdaddr_t bdaddr;
 191         u8 bdaddr_type;
 192         u8 type;
 193         u8 val[16];
 194 };
 195
 196 struct smp_ltk {
 197         struct list_head list;
 198         struct rcu_head rcu;
 199         bdaddr_t bdaddr;
 200         u8 bdaddr_type;
 201         u8 authenticated;
 202         u8 type;
 203         u8 enc_size;
 204         __le16 ediv;
 205         __le64 rand;
 206         u8 val[16];
 207 };
 208
 209 struct smp_irk {
 210         struct list_head list;
 211         struct rcu_head rcu;
 212         bdaddr_t rpa;
 213         bdaddr_t bdaddr;
 214         u8 addr_type;
 215         u8 val[16];
 216 };
 217
 218 struct link_key {
 219         struct list_head list;
 220         struct rcu_head rcu;
 221         bdaddr_t bdaddr;
 222         u8 type;
 223         u8 val[HCI_LINK_KEY_SIZE];
 224         u8 pin_len;
 225 };
 226
 227 struct oob_data {
 228         struct list_head list;
 229         bdaddr_t bdaddr;
 230         u8 bdaddr_type;
 231         u8 present;
 232         u8 hash192[16];
 233         u8 rand192[16];
 234         u8 hash256[16];
 235         u8 rand256[16];
 236 };
 237
 238 struct adv_info {
 239         struct list_head list;
 240         bool    enabled;
 241         bool    pending;
 242         bool    periodic;
 243         __u8    mesh;
 244         __u8    instance;
 245         __u32   flags;
 246         __u16   timeout;
 247         __u16   remaining_time;
 248         __u16   duration;
 249         __u16   adv_data_len;
 250         __u8    adv_data[HCI_MAX_EXT_AD_LENGTH];
 251         bool    adv_data_changed;
 252         __u16   scan_rsp_len;
 253         __u8    scan_rsp_data[HCI_MAX_EXT_AD_LENGTH];
 254         bool    scan_rsp_changed;
 255         __u16   per_adv_data_len;
 256         __u8    per_adv_data[HCI_MAX_PER_AD_LENGTH];
 257         __s8    tx_power;
 258         __u32   min_interval;
 259         __u32   max_interval;
 260         bdaddr_t        random_addr;
 261         bool            rpa_expired;
 262         struct delayed_work     rpa_expired_cb;
 263 };
 264
 265 #define HCI_MAX_ADV_INSTANCES           5
 266 #define HCI_DEFAULT_ADV_DURATION        2
 267
 268 #define HCI_ADV_TX_POWER_NO_PREFERENCE 0x7F
 269
 270 #define DATA_CMP(_d1, _l1, _d2, _l2) \
 271         (_l1 == _l2 ? memcmp(_d1, _d2, _l1) : _l1 - _l2)
 272
 273 #define ADV_DATA_CMP(_adv, _data, _len) \
 274         DATA_CMP((_adv)->adv_data, (_adv)->adv_data_len, _data, _len)
 275
 276 #define SCAN_RSP_CMP(_adv, _data, _len) \
 277         DATA_CMP((_adv)->scan_rsp_data, (_adv)->scan_rsp_len, _data, _len)
 278
 279 struct monitored_device {
 280         struct list_head list;
 281
 282         bdaddr_t bdaddr;
 283         __u8     addr_type;
 284         __u16    handle;
 285         bool     notified;
 286 };
 287
 288 struct adv_pattern {
 289         struct list_head list;
 290         __u8 ad_type;
 291         __u8 offset;
 292         __u8 length;
 293         __u8 value[HCI_MAX_AD_LENGTH];
 294 };
 295
 296 struct adv_rssi_thresholds {
 297         __s8 low_threshold;
 298         __s8 high_threshold;
 299         __u16 low_threshold_timeout;
 300         __u16 high_threshold_timeout;
 301         __u8 sampling_period;
 302 };
 303
 304 struct adv_monitor {
 305         struct list_head patterns;
 306         struct adv_rssi_thresholds rssi;
 307         __u16           handle;
 308
 309         enum {
 310                 ADV_MONITOR_STATE_NOT_REGISTERED,
 311                 ADV_MONITOR_STATE_REGISTERED,
 312                 ADV_MONITOR_STATE_OFFLOADED
 313         } state;
 314 };
 315
 316 #define HCI_MIN_ADV_MONITOR_HANDLE              1
 317 #define HCI_MAX_ADV_MONITOR_NUM_HANDLES         32
 318 #define HCI_MAX_ADV_MONITOR_NUM_PATTERNS        16
 319 #define HCI_ADV_MONITOR_EXT_NONE                1
 320 #define HCI_ADV_MONITOR_EXT_MSFT                2
 321
 322 #define HCI_MAX_SHORT_NAME_LENGTH       10
 323
 324 #define HCI_CONN_HANDLE_MAX             0x0eff
 325 #define HCI_CONN_HANDLE_UNSET(_handle)  (_handle > HCI_CONN_HANDLE_MAX)
 326
 327 /* Min encryption key size to match with SMP */
 328 #define HCI_MIN_ENC_KEY_SIZE            7
 329
 330 /* Default LE RPA expiry time, 15 minutes */
 331 #define HCI_DEFAULT_RPA_TIMEOUT         (15 * 60)
 332
 333 /* Default min/max age of connection information (1s/3s) */
 334 #define DEFAULT_CONN_INFO_MIN_AGE       1000
 335 #define DEFAULT_CONN_INFO_MAX_AGE       3000
 336 /* Default authenticated payload timeout 30s */
 337 #define DEFAULT_AUTH_PAYLOAD_TIMEOUT   0x0bb8
 338
 339 struct amp_assoc {
 340         __u16   len;
 341         __u16   offset;
 342         __u16   rem_len;
 343         __u16   len_so_far;
 344         __u8    data[HCI_MAX_AMP_ASSOC_SIZE];
 345 };
 346
 347 #define HCI_MAX_PAGES   3
 348
 349 struct hci_dev {
 350         struct list_head list;
 351         struct mutex    lock;
 352
 353         char            name[8];
 354         unsigned long   flags;
 355         __u16           id;
 356         __u8            bus;
 357         __u8            dev_type;
 358         bdaddr_t        bdaddr;
 359         bdaddr_t        setup_addr;
 360         bdaddr_t        public_addr;
 361         bdaddr_t        random_addr;
 362         bdaddr_t        static_addr;
 363         __u8            adv_addr_type;
 364         __u8            dev_name[HCI_MAX_NAME_LENGTH];
 365         __u8            short_name[HCI_MAX_SHORT_NAME_LENGTH];
 366         __u8            eir[HCI_MAX_EIR_LENGTH];
 367         __u16           appearance;
 368         __u8            dev_class[3];
 369         __u8            major_class;
 370         __u8            minor_class;
 371         __u8            max_page;
 372         __u8            features[HCI_MAX_PAGES][8];
 373         __u8            le_features[8];
 374         __u8            le_accept_list_size;
 375         __u8            le_resolv_list_size;
 376         __u8            le_num_of_adv_sets;
 377         __u8            le_states[8];
 378         __u8            mesh_ad_types[16];
 379         __u8            mesh_send_ref;
 380         __u8            commands[64];
 381         __u8            hci_ver;
 382         __u16           hci_rev;
 383         __u8            lmp_ver;
 384         __u16           manufacturer;
 385         __u16           lmp_subver;
 386         __u16           voice_setting;
 387         __u8            num_iac;
 388         __u16           stored_max_keys;
 389         __u16           stored_num_keys;
 390         __u8            io_capability;
 391         __s8            inq_tx_power;
 392         __u8            err_data_reporting;
 393         __u16           page_scan_interval;
 394         __u16           page_scan_window;
 395         __u8            page_scan_type;
 396         __u8            le_adv_channel_map;
 397         __u16           le_adv_min_interval;
 398         __u16           le_adv_max_interval;
 399         __u8            le_scan_type;
 400         __u16           le_scan_interval;
 401         __u16           le_scan_window;
 402         __u16           le_scan_int_suspend;
 403         __u16           le_scan_window_suspend;
 404         __u16           le_scan_int_discovery;
 405         __u16           le_scan_window_discovery;
 406         __u16           le_scan_int_adv_monitor;
 407         __u16           le_scan_window_adv_monitor;
 408         __u16           le_scan_int_connect;
 409         __u16           le_scan_window_connect;
 410         __u16           le_conn_min_interval;
 411         __u16           le_conn_max_interval;
 412         __u16           le_conn_latency;
 413         __u16           le_supv_timeout;
 414         __u16           le_def_tx_len;
 415         __u16           le_def_tx_time;
 416         __u16           le_max_tx_len;
 417         __u16           le_max_tx_time;
 418         __u16           le_max_rx_len;
 419         __u16           le_max_rx_time;
 420         __u8            le_max_key_size;
 421         __u8            le_min_key_size;
 422         __u16           discov_interleaved_timeout;
 423         __u16           conn_info_min_age;
 424         __u16           conn_info_max_age;
 425         __u16           auth_payload_timeout;
 426         __u8            min_enc_key_size;
 427         __u8            max_enc_key_size;
 428         __u8            pairing_opts;
 429         __u8            ssp_debug_mode;
 430         __u8            hw_error_code;
 431         __u32           clock;
 432         __u16           advmon_allowlist_duration;
 433         __u16           advmon_no_filter_duration;
 434         __u8            enable_advmon_interleave_scan;
 435
 436         __u16           devid_source;
 437         __u16           devid_vendor;
 438         __u16           devid_product;
 439         __u16           devid_version;
 440
 441         __u8            def_page_scan_type;
 442         __u16           def_page_scan_int;
 443         __u16           def_page_scan_window;
 444         __u8            def_inq_scan_type;
 445         __u16           def_inq_scan_int;
 446         __u16           def_inq_scan_window;
 447         __u16           def_br_lsto;
 448         __u16           def_page_timeout;
 449         __u16           def_multi_adv_rotation_duration;
 450         __u16           def_le_autoconnect_timeout;
 451         __s8            min_le_tx_power;
 452         __s8            max_le_tx_power;
 453
 454         __u16           pkt_type;
 455         __u16           esco_type;
 456         __u16           link_policy;
 457         __u16           link_mode;
 458
 459         __u32           idle_timeout;
 460         __u16           sniff_min_interval;
 461         __u16           sniff_max_interval;
 462
 463         __u8            amp_status;
 464         __u32           amp_total_bw;
 465         __u32           amp_max_bw;
 466         __u32           amp_min_latency;
 467         __u32           amp_max_pdu;
 468         __u8            amp_type;
 469         __u16           amp_pal_cap;
 470         __u16           amp_assoc_size;
 471         __u32           amp_max_flush_to;
 472         __u32           amp_be_flush_to;
 473
 474         struct amp_assoc        loc_assoc;
 475
 476         __u8            flow_ctl_mode;
 477
 478         unsigned int    auto_accept_delay;
 479
 480         unsigned long   quirks;
 481
 482         atomic_t        cmd_cnt;
 483         unsigned int    acl_cnt;
 484         unsigned int    sco_cnt;
 485         unsigned int    le_cnt;
 486         unsigned int    iso_cnt;
 487
 488         unsigned int    acl_mtu;
 489         unsigned int    sco_mtu;
 490         unsigned int    le_mtu;
 491         unsigned int    iso_mtu;
 492         unsigned int    acl_pkts;
 493         unsigned int    sco_pkts;
 494         unsigned int    le_pkts;
 495         unsigned int    iso_pkts;
 496
 497         __u16           block_len;
 498         __u16           block_mtu;
 499         __u16           num_blocks;
 500         __u16           block_cnt;
 501
 502         unsigned long   acl_last_tx;
 503         unsigned long   sco_last_tx;
 504         unsigned long   le_last_tx;
 505
 506         __u8            le_tx_def_phys;
 507         __u8            le_rx_def_phys;
 508
 509         struct workqueue_struct *workqueue;
 510         struct workqueue_struct *req_workqueue;
 511
 512         struct work_struct      power_on;
 513         struct delayed_work     power_off;
 514         struct work_struct      error_reset;
 515         struct work_struct      cmd_sync_work;
 516         struct list_head        cmd_sync_work_list;
 517         struct mutex            cmd_sync_work_lock;
 518         struct mutex            unregister_lock;
 519         struct work_struct      cmd_sync_cancel_work;
 520         struct work_struct      reenable_adv_work;
 521
 522         __u16                   discov_timeout;
 523         struct delayed_work     discov_off;
 524
 525         struct delayed_work     service_cache;
 526
 527         struct delayed_work     cmd_timer;
 528         struct delayed_work     ncmd_timer;
 529
 530         struct work_struct      rx_work;
 531         struct work_struct      cmd_work;
 532         struct work_struct      tx_work;
 533
 534         struct delayed_work     le_scan_disable;
 535         struct delayed_work     le_scan_restart;
 536
 537         struct sk_buff_head     rx_q;
 538         struct sk_buff_head     raw_q;
 539         struct sk_buff_head     cmd_q;
 540
 541         struct sk_buff          *sent_cmd;
 542         struct sk_buff          *recv_event;
 543
 544         struct mutex            req_lock;
 545         wait_queue_head_t       req_wait_q;
 546         __u32                   req_status;
 547         __u32                   req_result;
 548         struct sk_buff          *req_skb;
 549
 550         void                    *smp_data;
 551         void                    *smp_bredr_data;
 552
 553         struct discovery_state  discovery;
 554
 555         int                     discovery_old_state;
 556         bool                    discovery_paused;
 557         int                     advertising_old_state;
 558         bool                    advertising_paused;
 559
 560         struct notifier_block   suspend_notifier;
 561         enum suspended_state    suspend_state_next;
 562         enum suspended_state    suspend_state;
 563         bool                    scanning_paused;
 564         bool                    suspended;
 565         u8                      wake_reason;
 566         bdaddr_t                wake_addr;
 567         u8                      wake_addr_type;
 568
 569         struct hci_conn_hash    conn_hash;
 570
 571         struct list_head        mesh_pending;
 572         struct list_head        mgmt_pending;
 573         struct list_head        reject_list;
 574         struct list_head        accept_list;
 575         struct list_head        uuids;
 576         struct list_head        link_keys;
 577         struct list_head        long_term_keys;
 578         struct list_head        identity_resolving_keys;
 579         struct list_head        remote_oob_data;
 580         struct list_head        le_accept_list;
 581         struct list_head        le_resolv_list;
 582         struct list_head        le_conn_params;
 583         struct list_head        pend_le_conns;
 584         struct list_head        pend_le_reports;
 585         struct list_head        blocked_keys;
 586         struct list_head        local_codecs;
 587
 588         struct hci_dev_stats    stat;
 589
 590         atomic_t                promisc;
 591
 592         const char              *hw_info;
 593         const char              *fw_info;
 594         struct dentry           *debugfs;
 595
 596         struct hci_devcoredump  dump;
 597
 598         struct device           dev;
 599
 600         struct rfkill           *rfkill;
 601
 602         DECLARE_BITMAP(dev_flags, __HCI_NUM_FLAGS);
 603         hci_conn_flags_t        conn_flags;
 604
 605         __s8                    adv_tx_power;
 606         __u8                    adv_data[HCI_MAX_EXT_AD_LENGTH];
 607         __u8                    adv_data_len;
 608         __u8                    scan_rsp_data[HCI_MAX_EXT_AD_LENGTH];
 609         __u8                    scan_rsp_data_len;
 610         __u8                    per_adv_data[HCI_MAX_PER_AD_LENGTH];
 611         __u8                    per_adv_data_len;
 612
 613         struct list_head        adv_instances;
 614         unsigned int            adv_instance_cnt;
 615         __u8                    cur_adv_instance;
 616         __u16                   adv_instance_timeout;
 617         struct delayed_work     adv_instance_expire;
 618
 619         struct idr              adv_monitors_idr;
 620         unsigned int            adv_monitors_cnt;
 621
 622         __u8                    irk[16];
 623         __u32                   rpa_timeout;
 624         struct delayed_work     rpa_expired;
 625         bdaddr_t                rpa;
 626
 627         struct delayed_work     mesh_send_done;
 628
 629         enum {
 630                 INTERLEAVE_SCAN_NONE,
 631                 INTERLEAVE_SCAN_NO_FILTER,
 632                 INTERLEAVE_SCAN_ALLOWLIST
 633         } interleave_scan_state;
 634
 635         struct delayed_work     interleave_scan;
 636
 637         struct list_head        monitored_devices;
 638         bool                    advmon_pend_notify;
 639
 640 #if IS_ENABLED(CONFIG_BT_LEDS)
 641         struct led_trigger      *power_led;
 642 #endif
 643
 644 #if IS_ENABLED(CONFIG_BT_MSFTEXT)
 645         __u16                   msft_opcode;
 646         void                    *msft_data;
 647         bool                    msft_curve_validity;
 648 #endif
 649
 650 #if IS_ENABLED(CONFIG_BT_AOSPEXT)
 651         bool                    aosp_capable;
 652         bool                    aosp_quality_report;
 653 #endif
 654
 655         int (*open)(struct hci_dev *hdev);
 656         int (*close)(struct hci_dev *hdev);
 657         int (*flush)(struct hci_dev *hdev);
 658         int (*setup)(struct hci_dev *hdev);
 659         int (*shutdown)(struct hci_dev *hdev);
 660         int (*send)(struct hci_dev *hdev, struct sk_buff *skb);
 661         void (*notify)(struct hci_dev *hdev, unsigned int evt);
 662         void (*hw_error)(struct hci_dev *hdev, u8 code);
 663         int (*post_init)(struct hci_dev *hdev);
 664         int (*set_diag)(struct hci_dev *hdev, bool enable);
 665         int (*set_bdaddr)(struct hci_dev *hdev, const bdaddr_t *bdaddr);
 666         void (*cmd_timeout)(struct hci_dev *hdev);
 667         void (*reset)(struct hci_dev *hdev);
 668         bool (*wakeup)(struct hci_dev *hdev);
 669         int (*set_quality_report)(struct hci_dev *hdev, bool enable);
 670         int (*get_data_path_id)(struct hci_dev *hdev, __u8 *data_path);
 671         int (*get_codec_config_data)(struct hci_dev *hdev, __u8 type,
 672                                      struct bt_codec *codec, __u8 *vnd_len,
 673                                      __u8 **vnd_data);
 674 };
 675
 676 #define HCI_PHY_HANDLE(handle)  (handle & 0xff)
 677
 678 enum conn_reasons {
 679         CONN_REASON_PAIR_DEVICE,
 680         CONN_REASON_L2CAP_CHAN,
 681         CONN_REASON_SCO_CONNECT,
 682         CONN_REASON_ISO_CONNECT,
 683 };
 684
 685 struct hci_conn {
 686         struct list_head list;
 687
 688         atomic_t        refcnt;
 689
 690         bdaddr_t        dst;
 691         __u8            dst_type;
 692         bdaddr_t        src;
 693         __u8            src_type;
 694         bdaddr_t        init_addr;
 695         __u8            init_addr_type;
 696         bdaddr_t        resp_addr;
 697         __u8            resp_addr_type;
 698         __u8            adv_instance;
 699         __u16           handle;
 700         __u16           sync_handle;
 701         __u16           state;
 702         __u8            mode;
 703         __u8            type;
 704         __u8            role;
 705         bool            out;
 706         __u8            attempt;
 707         __u8            dev_class[3];
 708         __u8            features[HCI_MAX_PAGES][8];
 709         __u16           pkt_type;
 710         __u16           link_policy;
 711         __u8            key_type;
 712         __u8            auth_type;
 713         __u8            sec_level;
 714         __u8            pending_sec_level;
 715         __u8            pin_length;
 716         __u8            enc_key_size;
 717         __u8            io_capability;
 718         __u32           passkey_notify;
 719         __u8            passkey_entered;
 720         __u16           disc_timeout;
 721         __u16           conn_timeout;
 722         __u16           setting;
 723         __u16           auth_payload_timeout;
 724         __u16           le_conn_min_interval;
 725         __u16           le_conn_max_interval;
 726         __u16           le_conn_interval;
 727         __u16           le_conn_latency;
 728         __u16           le_supv_timeout;
 729         __u8            le_adv_data[HCI_MAX_AD_LENGTH];
 730         __u8            le_adv_data_len;
 731         __u8            le_per_adv_data[HCI_MAX_PER_AD_LENGTH];
 732         __u8            le_per_adv_data_len;
 733         __u8            le_tx_phy;
 734         __u8            le_rx_phy;
 735         __s8            rssi;
 736         __s8            tx_power;
 737         __s8            max_tx_power;
 738         struct bt_iso_qos iso_qos;
 739         unsigned long   flags;
 740
 741         enum conn_reasons conn_reason;
 742         __u8            abort_reason;
 743
 744         __u32           clock;
 745         __u16           clock_accuracy;
 746
 747         unsigned long   conn_info_timestamp;
 748
 749         __u8            remote_cap;
 750         __u8            remote_auth;
 751         __u8            remote_id;
 752
 753         unsigned int    sent;
 754
 755         struct sk_buff_head data_q;
 756         struct list_head chan_list;
 757
 758         struct delayed_work disc_work;
 759         struct delayed_work auto_accept_work;
 760         struct delayed_work idle_work;
 761         struct delayed_work le_conn_timeout;
 762
 763         struct device   dev;
 764         struct dentry   *debugfs;
 765
 766         struct hci_dev  *hdev;
 767         void            *l2cap_data;
 768         void            *sco_data;
 769         void            *iso_data;
 770         struct amp_mgr  *amp_mgr;
 771
 772         struct list_head link_list;
 773         struct hci_conn *parent;
 774         struct hci_link *link;
 775
 776         struct bt_codec codec;
 777
 778         void (*connect_cfm_cb)  (struct hci_conn *conn, u8 status);
 779         void (*security_cfm_cb) (struct hci_conn *conn, u8 status);
 780         void (*disconn_cfm_cb)  (struct hci_conn *conn, u8 reason);
 781
 782         void (*cleanup)(struct hci_conn *conn);
 783 };
 784
 785 struct hci_link {
 786         struct list_head list;
 787         struct hci_conn *conn;
 788 };
 789
 790 struct hci_chan {
 791         struct list_head list;
 792         __u16 handle;
 793         struct hci_conn *conn;
 794         struct sk_buff_head data_q;
 795         unsigned int    sent;
 796         __u8            state;
 797         bool            amp;
 798 };
 799
 800 struct hci_conn_params {
 801         struct list_head list;
 802         struct list_head action;
 803
 804         bdaddr_t addr;
 805         u8 addr_type;
 806
 807         u16 conn_min_interval;
 808         u16 conn_max_interval;
 809         u16 conn_latency;
 810         u16 supervision_timeout;
 811
 812         enum {
 813                 HCI_AUTO_CONN_DISABLED,
 814                 HCI_AUTO_CONN_REPORT,
 815                 HCI_AUTO_CONN_DIRECT,
 816                 HCI_AUTO_CONN_ALWAYS,
 817                 HCI_AUTO_CONN_LINK_LOSS,
 818                 HCI_AUTO_CONN_EXPLICIT,
 819         } auto_connect;
 820
 821         struct hci_conn *conn;
 822         bool explicit_connect;
 823         /* Accessed without hdev->lock: */
 824         hci_conn_flags_t flags;
 825         u8  privacy_mode;
 826 };
 827
 828 extern struct list_head hci_dev_list;
 829 extern struct list_head hci_cb_list;
 830 extern rwlock_t hci_dev_list_lock;
 831 extern struct mutex hci_cb_list_lock;
 832
 833 #define hci_dev_set_flag(hdev, nr)             set_bit((nr), (hdev)->dev_flags)
 834 #define hci_dev_clear_flag(hdev, nr)           clear_bit((nr), (hdev)->dev_flags)
 835 #define hci_dev_change_flag(hdev, nr)          change_bit((nr), (hdev)->dev_flags)
 836 #define hci_dev_test_flag(hdev, nr)            test_bit((nr), (hdev)->dev_flags)
 837 #define hci_dev_test_and_set_flag(hdev, nr)    test_and_set_bit((nr), (hdev)->dev_flags)
 838 #define hci_dev_test_and_clear_flag(hdev, nr)  test_and_clear_bit((nr), (hdev)->dev_flags)
 839 #define hci_dev_test_and_change_flag(hdev, nr) test_and_change_bit((nr), (hdev)->dev_flags)
 840
 841 #define hci_dev_clear_volatile_flags(hdev)                      \
 842         do {                                                    \
 843                 hci_dev_clear_flag(hdev, HCI_LE_SCAN);          \
 844                 hci_dev_clear_flag(hdev, HCI_LE_ADV);           \
 845                 hci_dev_clear_flag(hdev, HCI_LL_RPA_RESOLUTION);\
 846                 hci_dev_clear_flag(hdev, HCI_PERIODIC_INQ);     \
 847                 hci_dev_clear_flag(hdev, HCI_QUALITY_REPORT);   \
 848         } while (0)
 849
 850 #define hci_dev_le_state_simultaneous(hdev) \
 851         (test_bit(HCI_QUIRK_VALID_LE_STATES, &hdev->quirks) && \
 852          (hdev->le_states[4] & 0x08) && /* Central */ \
 853          (hdev->le_states[4] & 0x40) && /* Peripheral */ \
 854          (hdev->le_states[3] & 0x10))   /* Simultaneous */
 855
 856 /* ----- HCI interface to upper protocols ----- */
 857 int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr);
 858 int l2cap_disconn_ind(struct hci_conn *hcon);
 859 void l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
 860
 861 #if IS_ENABLED(CONFIG_BT_BREDR)
 862 int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
 863 void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb);
 864 #else
 865 static inline int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
 866                                   __u8 *flags)
 867 {
 868         return 0;
 869 }
 870
 871 static inline void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb)
 872 {
 873 }
 874 #endif
 875
 876 #if IS_ENABLED(CONFIG_BT_LE)
 877 int iso_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
 878 void iso_recv(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
 879 #else
 880 static inline int iso_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
 881                                   __u8 *flags)
 882 {
 883         return 0;
 884 }
 885 static inline void iso_recv(struct hci_conn *hcon, struct sk_buff *skb,
 886                             u16 flags)
 887 {
 888 }
 889 #endif
 890
 891 /* ----- Inquiry cache ----- */
 892 #define INQUIRY_CACHE_AGE_MAX   (HZ*30)   /* 30 seconds */
 893 #define INQUIRY_ENTRY_AGE_MAX   (HZ*60)   /* 60 seconds */
 894
 895 static inline void discovery_init(struct hci_dev *hdev)
 896 {
 897         hdev->discovery.state = DISCOVERY_STOPPED;
 898         INIT_LIST_HEAD(&hdev->discovery.all);
 899         INIT_LIST_HEAD(&hdev->discovery.unknown);
 900         INIT_LIST_HEAD(&hdev->discovery.resolve);
 901         hdev->discovery.report_invalid_rssi = true;
 902         hdev->discovery.rssi = HCI_RSSI_INVALID;
 903 }
 904
 905 static inline void hci_discovery_filter_clear(struct hci_dev *hdev)
 906 {
 907         hdev->discovery.result_filtering = false;
 908         hdev->discovery.report_invalid_rssi = true;
 909         hdev->discovery.rssi = HCI_RSSI_INVALID;
 910         hdev->discovery.uuid_count = 0;
 911         kfree(hdev->discovery.uuids);
 912         hdev->discovery.uuids = NULL;
 913         hdev->discovery.scan_start = 0;
 914         hdev->discovery.scan_duration = 0;
 915 }
 916
 917 bool hci_discovery_active(struct hci_dev *hdev);
 918
 919 void hci_discovery_set_state(struct hci_dev *hdev, int state);
 920
 921 static inline int inquiry_cache_empty(struct hci_dev *hdev)
 922 {
 923         return list_empty(&hdev->discovery.all);
 924 }
 925
 926 static inline long inquiry_cache_age(struct hci_dev *hdev)
 927 {
 928         struct discovery_state *c = &hdev->discovery;
 929         return jiffies - c->timestamp;
 930 }
 931
 932 static inline long inquiry_entry_age(struct inquiry_entry *e)
 933 {
 934         return jiffies - e->timestamp;
 935 }
 936
 937 struct inquiry_entry *hci_inquiry_cache_lookup(struct hci_dev *hdev,
 938                                                bdaddr_t *bdaddr);
 939 struct inquiry_entry *hci_inquiry_cache_lookup_unknown(struct hci_dev *hdev,
 940                                                        bdaddr_t *bdaddr);
 941 struct inquiry_entry *hci_inquiry_cache_lookup_resolve(struct hci_dev *hdev,
 942                                                        bdaddr_t *bdaddr,
 943                                                        int state);
 944 void hci_inquiry_cache_update_resolve(struct hci_dev *hdev,
 945                                       struct inquiry_entry *ie);
 946 u32 hci_inquiry_cache_update(struct hci_dev *hdev, struct inquiry_data *data,
 947                              bool name_known);
 948 void hci_inquiry_cache_flush(struct hci_dev *hdev);
 949
 950 /* ----- HCI Connections ----- */
 951 enum {
 952         HCI_CONN_AUTH_PEND,
 953         HCI_CONN_REAUTH_PEND,
 954         HCI_CONN_ENCRYPT_PEND,
 955         HCI_CONN_RSWITCH_PEND,
 956         HCI_CONN_MODE_CHANGE_PEND,
 957         HCI_CONN_SCO_SETUP_PEND,
 958         HCI_CONN_MGMT_CONNECTED,
 959         HCI_CONN_SSP_ENABLED,
 960         HCI_CONN_SC_ENABLED,
 961         HCI_CONN_AES_CCM,
 962         HCI_CONN_POWER_SAVE,
 963         HCI_CONN_FLUSH_KEY,
 964         HCI_CONN_ENCRYPT,
 965         HCI_CONN_AUTH,
 966         HCI_CONN_SECURE,
 967         HCI_CONN_FIPS,
 968         HCI_CONN_STK_ENCRYPT,
 969         HCI_CONN_AUTH_INITIATOR,
 970         HCI_CONN_DROP,
 971         HCI_CONN_CANCEL,
 972         HCI_CONN_PARAM_REMOVAL_PEND,
 973         HCI_CONN_NEW_LINK_KEY,
 974         HCI_CONN_SCANNING,
 975         HCI_CONN_AUTH_FAILURE,
 976         HCI_CONN_PER_ADV,
 977         HCI_CONN_BIG_CREATED,
 978         HCI_CONN_CREATE_CIS,
 979         HCI_CONN_BIG_SYNC,
 980         HCI_CONN_BIG_SYNC_FAILED,
 981 };
 982
 983 static inline bool hci_conn_ssp_enabled(struct hci_conn *conn)
 984 {
 985         struct hci_dev *hdev = conn->hdev;
 986         return hci_dev_test_flag(hdev, HCI_SSP_ENABLED) &&
 987                test_bit(HCI_CONN_SSP_ENABLED, &conn->flags);
 988 }
 989
 990 static inline bool hci_conn_sc_enabled(struct hci_conn *conn)
 991 {
 992         struct hci_dev *hdev = conn->hdev;
 993         return hci_dev_test_flag(hdev, HCI_SC_ENABLED) &&
 994                test_bit(HCI_CONN_SC_ENABLED, &conn->flags);
 995 }
 996
 997 static inline void hci_conn_hash_add(struct hci_dev *hdev, struct hci_conn *c)
 998 {
 999         struct hci_conn_hash *h = &hdev->conn_hash;
1000         list_add_tail_rcu(&c->list, &h->list);
1001         switch (c->type) {
1002         case ACL_LINK:
1003                 h->acl_num++;
1004                 break;
1005         case AMP_LINK:
1006                 h->amp_num++;
1007                 break;
1008         case LE_LINK:
1009                 h->le_num++;
1010                 if (c->role == HCI_ROLE_SLAVE)
1011                         h->le_num_peripheral++;
1012                 break;
1013         case SCO_LINK:
1014         case ESCO_LINK:
1015                 h->sco_num++;
1016                 break;
1017         case ISO_LINK:
1018                 h->iso_num++;
1019                 break;
1020         }
1021 }
1022
1023 static inline void hci_conn_hash_del(struct hci_dev *hdev, struct hci_conn *c)
1024 {
1025         struct hci_conn_hash *h = &hdev->conn_hash;
1026
1027         list_del_rcu(&c->list);
1028         synchronize_rcu();
1029
1030         switch (c->type) {
1031         case ACL_LINK:
1032                 h->acl_num--;
1033                 break;
1034         case AMP_LINK:
1035                 h->amp_num--;
1036                 break;
1037         case LE_LINK:
1038                 h->le_num--;
1039                 if (c->role == HCI_ROLE_SLAVE)
1040                         h->le_num_peripheral--;
1041                 break;
1042         case SCO_LINK:
1043         case ESCO_LINK:
1044                 h->sco_num--;
1045                 break;
1046         case ISO_LINK:
1047                 h->iso_num--;
1048                 break;
1049         }
1050 }
1051
1052 static inline unsigned int hci_conn_num(struct hci_dev *hdev, __u8 type)
1053 {
1054         struct hci_conn_hash *h = &hdev->conn_hash;
1055         switch (type) {
1056         case ACL_LINK:
1057                 return h->acl_num;
1058         case AMP_LINK:
1059                 return h->amp_num;
1060         case LE_LINK:
1061                 return h->le_num;
1062         case SCO_LINK:
1063         case ESCO_LINK:
1064                 return h->sco_num;
1065         case ISO_LINK:
1066                 return h->iso_num;
1067         default:
1068                 return 0;
1069         }
1070 }
1071
1072 static inline unsigned int hci_conn_count(struct hci_dev *hdev)
1073 {
1074         struct hci_conn_hash *c = &hdev->conn_hash;
1075
1076         return c->acl_num + c->amp_num + c->sco_num + c->le_num + c->iso_num;
1077 }
1078
1079 static inline __u8 hci_conn_lookup_type(struct hci_dev *hdev, __u16 handle)
1080 {
1081         struct hci_conn_hash *h = &hdev->conn_hash;
1082         struct hci_conn *c;
1083         __u8 type = INVALID_LINK;
1084
1085         rcu_read_lock();
1086
1087         list_for_each_entry_rcu(c, &h->list, list) {
1088                 if (c->handle == handle) {
1089                         type = c->type;
1090                         break;
1091                 }
1092         }
1093
1094         rcu_read_unlock();
1095
1096         return type;
1097 }
1098
1099 static inline struct hci_conn *hci_conn_hash_lookup_bis(struct hci_dev *hdev,
1100                                                         bdaddr_t *ba, __u8 bis)
1101 {
1102         struct hci_conn_hash *h = &hdev->conn_hash;
1103         struct hci_conn  *c;
1104
1105         rcu_read_lock();
1106
1107         list_for_each_entry_rcu(c, &h->list, list) {
1108                 if (bacmp(&c->dst, ba) || c->type != ISO_LINK)
1109                         continue;
1110
1111                 if (c->iso_qos.bcast.bis == bis) {
1112                         rcu_read_unlock();
1113                         return c;
1114                 }
1115         }
1116         rcu_read_unlock();
1117
1118         return NULL;
1119 }
1120
1121 static inline struct hci_conn *
1122 hci_conn_hash_lookup_per_adv_bis(struct hci_dev *hdev,
1123                                  bdaddr_t *ba,
1124                                  __u8 big, __u8 bis)
1125 {
1126         struct hci_conn_hash *h = &hdev->conn_hash;
1127         struct hci_conn  *c;
1128
1129         rcu_read_lock();
1130
1131         list_for_each_entry_rcu(c, &h->list, list) {
1132                 if (bacmp(&c->dst, ba) || c->type != ISO_LINK ||
1133                         !test_bit(HCI_CONN_PER_ADV, &c->flags))
1134                         continue;
1135
1136                 if (c->iso_qos.bcast.big == big &&
1137                     c->iso_qos.bcast.bis == bis) {
1138                         rcu_read_unlock();
1139                         return c;
1140                 }
1141         }
1142         rcu_read_unlock();
1143
1144         return NULL;
1145 }
1146
1147 static inline struct hci_conn *hci_conn_hash_lookup_handle(struct hci_dev *hdev,
1148                                                                 __u16 handle)
1149 {
1150         struct hci_conn_hash *h = &hdev->conn_hash;
1151         struct hci_conn  *c;
1152
1153         rcu_read_lock();
1154
1155         list_for_each_entry_rcu(c, &h->list, list) {
1156                 if (c->handle == handle) {
1157                         rcu_read_unlock();
1158                         return c;
1159                 }
1160         }
1161         rcu_read_unlock();
1162
1163         return NULL;
1164 }
1165
1166 static inline struct hci_conn *hci_conn_hash_lookup_ba(struct hci_dev *hdev,
1167                                                         __u8 type, bdaddr_t *ba)
1168 {
1169         struct hci_conn_hash *h = &hdev->conn_hash;
1170         struct hci_conn  *c;
1171
1172         rcu_read_lock();
1173
1174         list_for_each_entry_rcu(c, &h->list, list) {
1175                 if (c->type == type && !bacmp(&c->dst, ba)) {
1176                         rcu_read_unlock();
1177                         return c;
1178                 }
1179         }
1180
1181         rcu_read_unlock();
1182
1183         return NULL;
1184 }
1185
1186 static inline struct hci_conn *hci_conn_hash_lookup_le(struct hci_dev *hdev,
1187                                                        bdaddr_t *ba,
1188                                                        __u8 ba_type)
1189 {
1190         struct hci_conn_hash *h = &hdev->conn_hash;
1191         struct hci_conn  *c;
1192
1193         rcu_read_lock();
1194
1195         list_for_each_entry_rcu(c, &h->list, list) {
1196                 if (c->type != LE_LINK)
1197                        continue;
1198
1199                 if (ba_type == c->dst_type && !bacmp(&c->dst, ba)) {
1200                         rcu_read_unlock();
1201                         return c;
1202                 }
1203         }
1204
1205         rcu_read_unlock();
1206
1207         return NULL;
1208 }
1209
1210 static inline struct hci_conn *hci_conn_hash_lookup_cis(struct hci_dev *hdev,
1211                                                         bdaddr_t *ba,
1212                                                         __u8 ba_type,
1213                                                         __u8 cig,
1214                                                         __u8 id)
1215 {
1216         struct hci_conn_hash *h = &hdev->conn_hash;
1217         struct hci_conn  *c;
1218
1219         rcu_read_lock();
1220
1221         list_for_each_entry_rcu(c, &h->list, list) {
1222                 if (c->type != ISO_LINK)
1223                         continue;
1224
1225                 /* Match CIG ID if set */
1226                 if (cig != BT_ISO_QOS_CIG_UNSET && cig != c->iso_qos.ucast.cig)
1227                         continue;
1228
1229                 /* Match CIS ID if set */
1230                 if (id != BT_ISO_QOS_CIS_UNSET && id != c->iso_qos.ucast.cis)
1231                         continue;
1232
1233                 /* Match destination address if set */
1234                 if (!ba || (ba_type == c->dst_type && !bacmp(&c->dst, ba))) {
1235                         rcu_read_unlock();
1236                         return c;
1237                 }
1238         }
1239
1240         rcu_read_unlock();
1241
1242         return NULL;
1243 }
1244
1245 static inline struct hci_conn *hci_conn_hash_lookup_cig(struct hci_dev *hdev,
1246                                                         __u8 handle)
1247 {
1248         struct hci_conn_hash *h = &hdev->conn_hash;
1249         struct hci_conn  *c;
1250
1251         rcu_read_lock();
1252
1253         list_for_each_entry_rcu(c, &h->list, list) {
1254                 if (c->type != ISO_LINK)
1255                         continue;
1256
1257                 if (handle == c->iso_qos.ucast.cig) {
1258                         rcu_read_unlock();
1259                         return c;
1260                 }
1261         }
1262
1263         rcu_read_unlock();
1264
1265         return NULL;
1266 }
1267
1268 static inline struct hci_conn *hci_conn_hash_lookup_big(struct hci_dev *hdev,
1269                                                         __u8 handle)
1270 {
1271         struct hci_conn_hash *h = &hdev->conn_hash;
1272         struct hci_conn  *c;
1273
1274         rcu_read_lock();
1275
1276         list_for_each_entry_rcu(c, &h->list, list) {
1277                 if (bacmp(&c->dst, BDADDR_ANY) || c->type != ISO_LINK)
1278                         continue;
1279
1280                 if (handle == c->iso_qos.bcast.big) {
1281                         rcu_read_unlock();
1282                         return c;
1283                 }
1284         }
1285
1286         rcu_read_unlock();
1287
1288         return NULL;
1289 }
1290
1291 static inline struct hci_conn *hci_conn_hash_lookup_big_any_dst(struct hci_dev *hdev,
1292                                                         __u8 handle)
1293 {
1294         struct hci_conn_hash *h = &hdev->conn_hash;
1295         struct hci_conn  *c;
1296
1297         rcu_read_lock();
1298
1299         list_for_each_entry_rcu(c, &h->list, list) {
1300                 if (c->type != ISO_LINK)
1301                         continue;
1302
1303                 if (handle == c->iso_qos.bcast.big) {
1304                         rcu_read_unlock();
1305                         return c;
1306                 }
1307         }
1308
1309         rcu_read_unlock();
1310
1311         return NULL;
1312 }
1313
1314 static inline struct hci_conn *hci_conn_hash_lookup_state(struct hci_dev *hdev,
1315                                                         __u8 type, __u16 state)
1316 {
1317         struct hci_conn_hash *h = &hdev->conn_hash;
1318         struct hci_conn  *c;
1319
1320         rcu_read_lock();
1321
1322         list_for_each_entry_rcu(c, &h->list, list) {
1323                 if (c->type == type && c->state == state) {
1324                         rcu_read_unlock();
1325                         return c;
1326                 }
1327         }
1328
1329         rcu_read_unlock();
1330
1331         return NULL;
1332 }
1333
1334 typedef void (*hci_conn_func_t)(struct hci_conn *conn, void *data);
1335 static inline void hci_conn_hash_list_state(struct hci_dev *hdev,
1336                                             hci_conn_func_t func, __u8 type,
1337                                             __u16 state, void *data)
1338 {
1339         struct hci_conn_hash *h = &hdev->conn_hash;
1340         struct hci_conn  *c;
1341
1342         if (!func)
1343                 return;
1344
1345         rcu_read_lock();
1346
1347         list_for_each_entry_rcu(c, &h->list, list) {
1348                 if (c->type == type && c->state == state)
1349                         func(c, data);
1350         }
1351
1352         rcu_read_unlock();
1353 }
1354
1355 static inline struct hci_conn *hci_lookup_le_connect(struct hci_dev *hdev)
1356 {
1357         struct hci_conn_hash *h = &hdev->conn_hash;
1358         struct hci_conn  *c;
1359
1360         rcu_read_lock();
1361
1362         list_for_each_entry_rcu(c, &h->list, list) {
1363                 if (c->type == LE_LINK && c->state == BT_CONNECT &&
1364                     !test_bit(HCI_CONN_SCANNING, &c->flags)) {
1365                         rcu_read_unlock();
1366                         return c;
1367                 }
1368         }
1369
1370         rcu_read_unlock();
1371
1372         return NULL;
1373 }
1374
1375 /* Returns true if an le connection is in the scanning state */
1376 static inline bool hci_is_le_conn_scanning(struct hci_dev *hdev)
1377 {
1378         struct hci_conn_hash *h = &hdev->conn_hash;
1379         struct hci_conn  *c;
1380
1381         rcu_read_lock();
1382
1383         list_for_each_entry_rcu(c, &h->list, list) {
1384                 if (c->type == LE_LINK && c->state == BT_CONNECT &&
1385                     test_bit(HCI_CONN_SCANNING, &c->flags)) {
1386                         rcu_read_unlock();
1387                         return true;
1388                 }
1389         }
1390
1391         rcu_read_unlock();
1392
1393         return false;
1394 }
1395
1396 int hci_disconnect(struct hci_conn *conn, __u8 reason);
1397 bool hci_setup_sync(struct hci_conn *conn, __u16 handle);
1398 void hci_sco_setup(struct hci_conn *conn, __u8 status);
1399 bool hci_iso_setup_path(struct hci_conn *conn);
1400 int hci_le_create_cis_pending(struct hci_dev *hdev);
1401 int hci_conn_check_create_cis(struct hci_conn *conn);
1402
1403 struct hci_conn *hci_conn_add(struct hci_dev *hdev, int type, bdaddr_t *dst,
1404                               u8 role);
1405 void hci_conn_del(struct hci_conn *conn);
1406 void hci_conn_hash_flush(struct hci_dev *hdev);
1407 void hci_conn_check_pending(struct hci_dev *hdev);
1408
1409 struct hci_chan *hci_chan_create(struct hci_conn *conn);
1410 void hci_chan_del(struct hci_chan *chan);
1411 void hci_chan_list_flush(struct hci_conn *conn);
1412 struct hci_chan *hci_chan_lookup_handle(struct hci_dev *hdev, __u16 handle);
1413
1414 struct hci_conn *hci_connect_le_scan(struct hci_dev *hdev, bdaddr_t *dst,
1415                                      u8 dst_type, u8 sec_level,
1416                                      u16 conn_timeout,
1417                                      enum conn_reasons conn_reason);
1418 struct hci_conn *hci_connect_le(struct hci_dev *hdev, bdaddr_t *dst,
1419                                 u8 dst_type, bool dst_resolved, u8 sec_level,
1420                                 u16 conn_timeout, u8 role);
1421 struct hci_conn *hci_connect_acl(struct hci_dev *hdev, bdaddr_t *dst,
1422                                  u8 sec_level, u8 auth_type,
1423                                  enum conn_reasons conn_reason);
1424 struct hci_conn *hci_connect_sco(struct hci_dev *hdev, int type, bdaddr_t *dst,
1425                                  __u16 setting, struct bt_codec *codec);
1426 struct hci_conn *hci_bind_cis(struct hci_dev *hdev, bdaddr_t *dst,
1427                               __u8 dst_type, struct bt_iso_qos *qos);
1428 struct hci_conn *hci_bind_bis(struct hci_dev *hdev, bdaddr_t *dst,
1429                               struct bt_iso_qos *qos,
1430                               __u8 base_len, __u8 *base);
1431 struct hci_conn *hci_connect_cis(struct hci_dev *hdev, bdaddr_t *dst,
1432                                  __u8 dst_type, struct bt_iso_qos *qos);
1433 struct hci_conn *hci_connect_bis(struct hci_dev *hdev, bdaddr_t *dst,
1434                                  __u8 dst_type, struct bt_iso_qos *qos,
1435                                  __u8 data_len, __u8 *data);
1436 int hci_pa_create_sync(struct hci_dev *hdev, bdaddr_t *dst, __u8 dst_type,
1437                        __u8 sid, struct bt_iso_qos *qos);
1438 int hci_le_big_create_sync(struct hci_dev *hdev, struct bt_iso_qos *qos,
1439                            __u16 sync_handle, __u8 num_bis, __u8 bis[]);
1440 int hci_conn_check_link_mode(struct hci_conn *conn);
1441 int hci_conn_check_secure(struct hci_conn *conn, __u8 sec_level);
1442 int hci_conn_security(struct hci_conn *conn, __u8 sec_level, __u8 auth_type,
1443                       bool initiator);
1444 int hci_conn_switch_role(struct hci_conn *conn, __u8 role);
1445
1446 void hci_conn_enter_active_mode(struct hci_conn *conn, __u8 force_active);
1447
1448 void hci_conn_failed(struct hci_conn *conn, u8 status);
1449 u8 hci_conn_set_handle(struct hci_conn *conn, u16 handle);
1450
1451 /*
1452  * hci_conn_get() and hci_conn_put() are used to control the life-time of an
1453  * "hci_conn" object. They do not guarantee that the hci_conn object is running,
1454  * working or anything else. They just guarantee that the object is available
1455  * and can be dereferenced. So you can use its locks, local variables and any
1456  * other constant data.
1457  * Before accessing runtime data, you _must_ lock the object and then check that
1458  * it is still running. As soon as you release the locks, the connection might
1459  * get dropped, though.
1460  *
1461  * On the other hand, hci_conn_hold() and hci_conn_drop() are used to control
1462  * how long the underlying connection is held. So every channel that runs on the
1463  * hci_conn object calls this to prevent the connection from disappearing. As
1464  * long as you hold a device, you must also guarantee that you have a valid
1465  * reference to the device via hci_conn_get() (or the initial reference from
1466  * hci_conn_add()).
1467  * The hold()/drop() ref-count is known to drop below 0 sometimes, which doesn't
1468  * break because nobody cares for that. But this means, we cannot use
1469  * _get()/_drop() in it, but require the caller to have a valid ref (FIXME).
1470  */
1471
1472 static inline struct hci_conn *hci_conn_get(struct hci_conn *conn)
1473 {
1474         get_device(&conn->dev);
1475         return conn;
1476 }
1477
1478 static inline void hci_conn_put(struct hci_conn *conn)
1479 {
1480         put_device(&conn->dev);
1481 }
1482
1483 static inline struct hci_conn *hci_conn_hold(struct hci_conn *conn)
1484 {
1485         BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1486
1487         atomic_inc(&conn->refcnt);
1488         cancel_delayed_work(&conn->disc_work);
1489
1490         return conn;
1491 }
1492
1493 static inline void hci_conn_drop(struct hci_conn *conn)
1494 {
1495         BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1496
1497         if (atomic_dec_and_test(&conn->refcnt)) {
1498                 unsigned long timeo;
1499
1500                 switch (conn->type) {
1501                 case ACL_LINK:
1502                 case LE_LINK:
1503                         cancel_delayed_work(&conn->idle_work);
1504                         if (conn->state == BT_CONNECTED) {
1505                                 timeo = conn->disc_timeout;
1506                                 if (!conn->out)
1507                                         timeo *= 2;
1508                         } else {
1509                                 timeo = 0;
1510                         }
1511                         break;
1512
1513                 case AMP_LINK:
1514                         timeo = conn->disc_timeout;
1515                         break;
1516
1517                 default:
1518                         timeo = 0;
1519                         break;
1520                 }
1521
1522                 cancel_delayed_work(&conn->disc_work);
1523                 queue_delayed_work(conn->hdev->workqueue,
1524                                    &conn->disc_work, timeo);
1525         }
1526 }
1527
1528 /* ----- HCI Devices ----- */
1529 static inline void hci_dev_put(struct hci_dev *d)
1530 {
1531         BT_DBG("%s orig refcnt %d", d->name,
1532                kref_read(&d->dev.kobj.kref));
1533
1534         put_device(&d->dev);
1535 }
1536
1537 static inline struct hci_dev *hci_dev_hold(struct hci_dev *d)
1538 {
1539         BT_DBG("%s orig refcnt %d", d->name,
1540                kref_read(&d->dev.kobj.kref));
1541
1542         get_device(&d->dev);
1543         return d;
1544 }
1545
1546 #define hci_dev_lock(d)         mutex_lock(&d->lock)
1547 #define hci_dev_unlock(d)       mutex_unlock(&d->lock)
1548
1549 #define to_hci_dev(d) container_of(d, struct hci_dev, dev)
1550 #define to_hci_conn(c) container_of(c, struct hci_conn, dev)
1551
1552 static inline void *hci_get_drvdata(struct hci_dev *hdev)
1553 {
1554         return dev_get_drvdata(&hdev->dev);
1555 }
1556
1557 static inline void hci_set_drvdata(struct hci_dev *hdev, void *data)
1558 {
1559         dev_set_drvdata(&hdev->dev, data);
1560 }
1561
1562 static inline void *hci_get_priv(struct hci_dev *hdev)
1563 {
1564         return (char *)hdev + sizeof(*hdev);
1565 }
1566
1567 struct hci_dev *hci_dev_get(int index);
1568 struct hci_dev *hci_get_route(bdaddr_t *dst, bdaddr_t *src, u8 src_type);
1569
1570 struct hci_dev *hci_alloc_dev_priv(int sizeof_priv);
1571
1572 static inline struct hci_dev *hci_alloc_dev(void)
1573 {
1574         return hci_alloc_dev_priv(0);
1575 }
1576
1577 void hci_free_dev(struct hci_dev *hdev);
1578 int hci_register_dev(struct hci_dev *hdev);
1579 void hci_unregister_dev(struct hci_dev *hdev);
1580 void hci_release_dev(struct hci_dev *hdev);
1581 int hci_register_suspend_notifier(struct hci_dev *hdev);
1582 int hci_unregister_suspend_notifier(struct hci_dev *hdev);
1583 int hci_suspend_dev(struct hci_dev *hdev);
1584 int hci_resume_dev(struct hci_dev *hdev);
1585 int hci_reset_dev(struct hci_dev *hdev);
1586 int hci_recv_frame(struct hci_dev *hdev, struct sk_buff *skb);
1587 int hci_recv_diag(struct hci_dev *hdev, struct sk_buff *skb);
1588 __printf(2, 3) void hci_set_hw_info(struct hci_dev *hdev, const char *fmt, ...);
1589 __printf(2, 3) void hci_set_fw_info(struct hci_dev *hdev, const char *fmt, ...);
1590
1591 static inline void hci_set_msft_opcode(struct hci_dev *hdev, __u16 opcode)
1592 {
1593 #if IS_ENABLED(CONFIG_BT_MSFTEXT)
1594         hdev->msft_opcode = opcode;
1595 #endif
1596 }
1597
1598 static inline void hci_set_aosp_capable(struct hci_dev *hdev)
1599 {
1600 #if IS_ENABLED(CONFIG_BT_AOSPEXT)
1601         hdev->aosp_capable = true;
1602 #endif
1603 }
1604
1605 static inline void hci_devcd_setup(struct hci_dev *hdev)
1606 {
1607 #ifdef CONFIG_DEV_COREDUMP
1608         INIT_WORK(&hdev->dump.dump_rx, hci_devcd_rx);
1609         INIT_DELAYED_WORK(&hdev->dump.dump_timeout, hci_devcd_timeout);
1610         skb_queue_head_init(&hdev->dump.dump_q);
1611 #endif
1612 }
1613
1614 int hci_dev_open(__u16 dev);
1615 int hci_dev_close(__u16 dev);
1616 int hci_dev_do_close(struct hci_dev *hdev);
1617 int hci_dev_reset(__u16 dev);
1618 int hci_dev_reset_stat(__u16 dev);
1619 int hci_dev_cmd(unsigned int cmd, void __user *arg);
1620 int hci_get_dev_list(void __user *arg);
1621 int hci_get_dev_info(void __user *arg);
1622 int hci_get_conn_list(void __user *arg);
1623 int hci_get_conn_info(struct hci_dev *hdev, void __user *arg);
1624 int hci_get_auth_info(struct hci_dev *hdev, void __user *arg);
1625 int hci_inquiry(void __user *arg);
1626
1627 struct bdaddr_list *hci_bdaddr_list_lookup(struct list_head *list,
1628                                            bdaddr_t *bdaddr, u8 type);
1629 struct bdaddr_list_with_irk *hci_bdaddr_list_lookup_with_irk(
1630                                     struct list_head *list, bdaddr_t *bdaddr,
1631                                     u8 type);
1632 struct bdaddr_list_with_flags *
1633 hci_bdaddr_list_lookup_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1634                                   u8 type);
1635 int hci_bdaddr_list_add(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1636 int hci_bdaddr_list_add_with_irk(struct list_head *list, bdaddr_t *bdaddr,
1637                                  u8 type, u8 *peer_irk, u8 *local_irk);
1638 int hci_bdaddr_list_add_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1639                                    u8 type, u32 flags);
1640 int hci_bdaddr_list_del(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1641 int hci_bdaddr_list_del_with_irk(struct list_head *list, bdaddr_t *bdaddr,
1642                                  u8 type);
1643 int hci_bdaddr_list_del_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1644                                    u8 type);
1645 void hci_bdaddr_list_clear(struct list_head *list);
1646
1647 struct hci_conn_params *hci_conn_params_lookup(struct hci_dev *hdev,
1648                                                bdaddr_t *addr, u8 addr_type);
1649 struct hci_conn_params *hci_conn_params_add(struct hci_dev *hdev,
1650                                             bdaddr_t *addr, u8 addr_type);
1651 void hci_conn_params_del(struct hci_dev *hdev, bdaddr_t *addr, u8 addr_type);
1652 void hci_conn_params_clear_disabled(struct hci_dev *hdev);
1653 void hci_conn_params_free(struct hci_conn_params *param);
1654
1655 void hci_pend_le_list_del_init(struct hci_conn_params *param);
1656 void hci_pend_le_list_add(struct hci_conn_params *param,
1657                           struct list_head *list);
1658 struct hci_conn_params *hci_pend_le_action_lookup(struct list_head *list,
1659                                                   bdaddr_t *addr,
1660                                                   u8 addr_type);
1661
1662 void hci_uuids_clear(struct hci_dev *hdev);
1663
1664 void hci_link_keys_clear(struct hci_dev *hdev);
1665 struct link_key *hci_find_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1666 struct link_key *hci_add_link_key(struct hci_dev *hdev, struct hci_conn *conn,
1667                                   bdaddr_t *bdaddr, u8 *val, u8 type,
1668                                   u8 pin_len, bool *persistent);
1669 struct smp_ltk *hci_add_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1670                             u8 addr_type, u8 type, u8 authenticated,
1671                             u8 tk[16], u8 enc_size, __le16 ediv, __le64 rand);
1672 struct smp_ltk *hci_find_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1673                              u8 addr_type, u8 role);
1674 int hci_remove_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 bdaddr_type);
1675 void hci_smp_ltks_clear(struct hci_dev *hdev);
1676 int hci_remove_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1677
1678 struct smp_irk *hci_find_irk_by_rpa(struct hci_dev *hdev, bdaddr_t *rpa);
1679 struct smp_irk *hci_find_irk_by_addr(struct hci_dev *hdev, bdaddr_t *bdaddr,
1680                                      u8 addr_type);
1681 struct smp_irk *hci_add_irk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1682                             u8 addr_type, u8 val[16], bdaddr_t *rpa);
1683 void hci_remove_irk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 addr_type);
1684 bool hci_is_blocked_key(struct hci_dev *hdev, u8 type, u8 val[16]);
1685 void hci_blocked_keys_clear(struct hci_dev *hdev);
1686 void hci_smp_irks_clear(struct hci_dev *hdev);
1687
1688 bool hci_bdaddr_is_paired(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type);
1689
1690 void hci_remote_oob_data_clear(struct hci_dev *hdev);
1691 struct oob_data *hci_find_remote_oob_data(struct hci_dev *hdev,
1692                                           bdaddr_t *bdaddr, u8 bdaddr_type);
1693 int hci_add_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1694                             u8 bdaddr_type, u8 *hash192, u8 *rand192,
1695                             u8 *hash256, u8 *rand256);
1696 int hci_remove_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1697                                u8 bdaddr_type);
1698
1699 void hci_adv_instances_clear(struct hci_dev *hdev);
1700 struct adv_info *hci_find_adv_instance(struct hci_dev *hdev, u8 instance);
1701 struct adv_info *hci_get_next_instance(struct hci_dev *hdev, u8 instance);
1702 struct adv_info *hci_add_adv_instance(struct hci_dev *hdev, u8 instance,
1703                                       u32 flags, u16 adv_data_len, u8 *adv_data,
1704                                       u16 scan_rsp_len, u8 *scan_rsp_data,
1705                                       u16 timeout, u16 duration, s8 tx_power,
1706                                       u32 min_interval, u32 max_interval,
1707                                       u8 mesh_handle);
1708 struct adv_info *hci_add_per_instance(struct hci_dev *hdev, u8 instance,
1709                                       u32 flags, u8 data_len, u8 *data,
1710                                       u32 min_interval, u32 max_interval);
1711 int hci_set_adv_instance_data(struct hci_dev *hdev, u8 instance,
1712                          u16 adv_data_len, u8 *adv_data,
1713                          u16 scan_rsp_len, u8 *scan_rsp_data);
1714 int hci_remove_adv_instance(struct hci_dev *hdev, u8 instance);
1715 void hci_adv_instances_set_rpa_expired(struct hci_dev *hdev, bool rpa_expired);
1716 u32 hci_adv_instance_flags(struct hci_dev *hdev, u8 instance);
1717 bool hci_adv_instance_is_scannable(struct hci_dev *hdev, u8 instance);
1718
1719 void hci_adv_monitors_clear(struct hci_dev *hdev);
1720 void hci_free_adv_monitor(struct hci_dev *hdev, struct adv_monitor *monitor);
1721 int hci_add_adv_monitor(struct hci_dev *hdev, struct adv_monitor *monitor);
1722 int hci_remove_single_adv_monitor(struct hci_dev *hdev, u16 handle);
1723 int hci_remove_all_adv_monitor(struct hci_dev *hdev);
1724 bool hci_is_adv_monitoring(struct hci_dev *hdev);
1725 int hci_get_adv_monitor_offload_ext(struct hci_dev *hdev);
1726
1727 void hci_event_packet(struct hci_dev *hdev, struct sk_buff *skb);
1728
1729 void hci_init_sysfs(struct hci_dev *hdev);
1730 void hci_conn_init_sysfs(struct hci_conn *conn);
1731 void hci_conn_add_sysfs(struct hci_conn *conn);
1732 void hci_conn_del_sysfs(struct hci_conn *conn);
1733
1734 #define SET_HCIDEV_DEV(hdev, pdev) ((hdev)->dev.parent = (pdev))
1735 #define GET_HCIDEV_DEV(hdev) ((hdev)->dev.parent)
1736
1737 /* ----- LMP capabilities ----- */
1738 #define lmp_encrypt_capable(dev)   ((dev)->features[0][0] & LMP_ENCRYPT)
1739 #define lmp_rswitch_capable(dev)   ((dev)->features[0][0] & LMP_RSWITCH)
1740 #define lmp_hold_capable(dev)      ((dev)->features[0][0] & LMP_HOLD)
1741 #define lmp_sniff_capable(dev)     ((dev)->features[0][0] & LMP_SNIFF)
1742 #define lmp_park_capable(dev)      ((dev)->features[0][1] & LMP_PARK)
1743 #define lmp_inq_rssi_capable(dev)  ((dev)->features[0][3] & LMP_RSSI_INQ)
1744 #define lmp_esco_capable(dev)      ((dev)->features[0][3] & LMP_ESCO)
1745 #define lmp_bredr_capable(dev)     (!((dev)->features[0][4] & LMP_NO_BREDR))
1746 #define lmp_le_capable(dev)        ((dev)->features[0][4] & LMP_LE)
1747 #define lmp_sniffsubr_capable(dev) ((dev)->features[0][5] & LMP_SNIFF_SUBR)
1748 #define lmp_pause_enc_capable(dev) ((dev)->features[0][5] & LMP_PAUSE_ENC)
1749 #define lmp_esco_2m_capable(dev)   ((dev)->features[0][5] & LMP_EDR_ESCO_2M)
1750 #define lmp_ext_inq_capable(dev)   ((dev)->features[0][6] & LMP_EXT_INQ)
1751 #define lmp_le_br_capable(dev)     (!!((dev)->features[0][6] & LMP_SIMUL_LE_BR))
1752 #define lmp_ssp_capable(dev)       ((dev)->features[0][6] & LMP_SIMPLE_PAIR)
1753 #define lmp_no_flush_capable(dev)  ((dev)->features[0][6] & LMP_NO_FLUSH)
1754 #define lmp_lsto_capable(dev)      ((dev)->features[0][7] & LMP_LSTO)
1755 #define lmp_inq_tx_pwr_capable(dev) ((dev)->features[0][7] & LMP_INQ_TX_PWR)
1756 #define lmp_ext_feat_capable(dev)  ((dev)->features[0][7] & LMP_EXTFEATURES)
1757 #define lmp_transp_capable(dev)    ((dev)->features[0][2] & LMP_TRANSPARENT)
1758 #define lmp_edr_2m_capable(dev)    ((dev)->features[0][3] & LMP_EDR_2M)
1759 #define lmp_edr_3m_capable(dev)    ((dev)->features[0][3] & LMP_EDR_3M)
1760 #define lmp_edr_3slot_capable(dev) ((dev)->features[0][4] & LMP_EDR_3SLOT)
1761 #define lmp_edr_5slot_capable(dev) ((dev)->features[0][5] & LMP_EDR_5SLOT)
1762
1763 /* ----- Extended LMP capabilities ----- */
1764 #define lmp_cpb_central_capable(dev) ((dev)->features[2][0] & LMP_CPB_CENTRAL)
1765 #define lmp_cpb_peripheral_capable(dev) ((dev)->features[2][0] & LMP_CPB_PERIPHERAL)
1766 #define lmp_sync_train_capable(dev) ((dev)->features[2][0] & LMP_SYNC_TRAIN)
1767 #define lmp_sync_scan_capable(dev)  ((dev)->features[2][0] & LMP_SYNC_SCAN)
1768 #define lmp_sc_capable(dev)         ((dev)->features[2][1] & LMP_SC)
1769 #define lmp_ping_capable(dev)       ((dev)->features[2][1] & LMP_PING)
1770
1771 /* ----- Host capabilities ----- */
1772 #define lmp_host_ssp_capable(dev)  ((dev)->features[1][0] & LMP_HOST_SSP)
1773 #define lmp_host_sc_capable(dev)   ((dev)->features[1][0] & LMP_HOST_SC)
1774 #define lmp_host_le_capable(dev)   (!!((dev)->features[1][0] & LMP_HOST_LE))
1775 #define lmp_host_le_br_capable(dev) (!!((dev)->features[1][0] & LMP_HOST_LE_BREDR))
1776
1777 #define hdev_is_powered(dev)   (test_bit(HCI_UP, &(dev)->flags) && \
1778                                 !hci_dev_test_flag(dev, HCI_AUTO_OFF))
1779 #define bredr_sc_enabled(dev)  (lmp_sc_capable(dev) && \
1780                                 hci_dev_test_flag(dev, HCI_SC_ENABLED))
1781 #define rpa_valid(dev)         (bacmp(&dev->rpa, BDADDR_ANY) && \
1782                                 !hci_dev_test_flag(dev, HCI_RPA_EXPIRED))
1783 #define adv_rpa_valid(adv)     (bacmp(&adv->random_addr, BDADDR_ANY) && \
1784                                 !adv->rpa_expired)
1785
1786 #define scan_1m(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_1M) || \
1787                       ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_1M))
1788
1789 #define le_2m_capable(dev) (((dev)->le_features[1] & HCI_LE_PHY_2M))
1790
1791 #define scan_2m(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_2M) || \
1792                       ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_2M))
1793
1794 #define le_coded_capable(dev) (((dev)->le_features[1] & HCI_LE_PHY_CODED))
1795
1796 #define scan_coded(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_CODED) || \
1797                          ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_CODED))
1798
1799 #define ll_privacy_capable(dev) ((dev)->le_features[0] & HCI_LE_LL_PRIVACY)
1800
1801 /* Use LL Privacy based address resolution if supported */
1802 #define use_ll_privacy(dev) (ll_privacy_capable(dev) && \
1803                              hci_dev_test_flag(dev, HCI_ENABLE_LL_PRIVACY))
1804
1805 #define privacy_mode_capable(dev) (use_ll_privacy(dev) && \
1806                                    (hdev->commands[39] & 0x04))
1807
1808 /* Use enhanced synchronous connection if command is supported and its quirk
1809  * has not been set.
1810  */
1811 #define enhanced_sync_conn_capable(dev) \
1812         (((dev)->commands[29] & 0x08) && \
1813          !test_bit(HCI_QUIRK_BROKEN_ENHANCED_SETUP_SYNC_CONN, &(dev)->quirks))
1814
1815 /* Use ext scanning if set ext scan param and ext scan enable is supported */
1816 #define use_ext_scan(dev) (((dev)->commands[37] & 0x20) && \
1817                            ((dev)->commands[37] & 0x40) && \
1818                            !test_bit(HCI_QUIRK_BROKEN_EXT_SCAN, &(dev)->quirks))
1819
1820 /* Use ext create connection if command is supported */
1821 #define use_ext_conn(dev) ((dev)->commands[37] & 0x80)
1822
1823 /* Extended advertising support */
1824 #define ext_adv_capable(dev) (((dev)->le_features[1] & HCI_LE_EXT_ADV))
1825
1826 /* Maximum advertising length */
1827 #define max_adv_len(dev) \
1828         (ext_adv_capable(dev) ? HCI_MAX_EXT_AD_LENGTH : HCI_MAX_AD_LENGTH)
1829
1830 /* BLUETOOTH CORE SPECIFICATION Version 5.3 | Vol 4, Part E page 1789:
1831  *
1832  * C24: Mandatory if the LE Controller supports Connection State and either
1833  * LE Feature (LL Privacy) or LE Feature (Extended Advertising) is supported
1834  */
1835 #define use_enhanced_conn_complete(dev) (ll_privacy_capable(dev) || \
1836                                          ext_adv_capable(dev))
1837
1838 /* Periodic advertising support */
1839 #define per_adv_capable(dev) (((dev)->le_features[1] & HCI_LE_PERIODIC_ADV))
1840
1841 /* CIS Master/Slave and BIS support */
1842 #define iso_capable(dev) (cis_capable(dev) || bis_capable(dev))
1843 #define cis_capable(dev) \
1844         (cis_central_capable(dev) || cis_peripheral_capable(dev))
1845 #define cis_central_capable(dev) \
1846         ((dev)->le_features[3] & HCI_LE_CIS_CENTRAL)
1847 #define cis_peripheral_capable(dev) \
1848         ((dev)->le_features[3] & HCI_LE_CIS_PERIPHERAL)
1849 #define bis_capable(dev) ((dev)->le_features[3] & HCI_LE_ISO_BROADCASTER)
1850 #define sync_recv_capable(dev) ((dev)->le_features[3] & HCI_LE_ISO_SYNC_RECEIVER)
1851
1852 #define mws_transport_config_capable(dev) (((dev)->commands[30] & 0x08) && \
1853         (!test_bit(HCI_QUIRK_BROKEN_MWS_TRANSPORT_CONFIG, &(dev)->quirks)))
1854
1855 /* ----- HCI protocols ----- */
1856 #define HCI_PROTO_DEFER             0x01
1857
1858 static inline int hci_proto_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
1859                                         __u8 type, __u8 *flags)
1860 {
1861         switch (type) {
1862         case ACL_LINK:
1863                 return l2cap_connect_ind(hdev, bdaddr);
1864
1865         case SCO_LINK:
1866         case ESCO_LINK:
1867                 return sco_connect_ind(hdev, bdaddr, flags);
1868
1869         case ISO_LINK:
1870                 return iso_connect_ind(hdev, bdaddr, flags);
1871
1872         default:
1873                 BT_ERR("unknown link type %d", type);
1874                 return -EINVAL;
1875         }
1876 }
1877
1878 static inline int hci_proto_disconn_ind(struct hci_conn *conn)
1879 {
1880         if (conn->type != ACL_LINK && conn->type != LE_LINK)
1881                 return HCI_ERROR_REMOTE_USER_TERM;
1882
1883         return l2cap_disconn_ind(conn);
1884 }
1885
1886 /* ----- HCI callbacks ----- */
1887 struct hci_cb {
1888         struct list_head list;
1889
1890         char *name;
1891
1892         void (*connect_cfm)     (struct hci_conn *conn, __u8 status);
1893         void (*disconn_cfm)     (struct hci_conn *conn, __u8 status);
1894         void (*security_cfm)    (struct hci_conn *conn, __u8 status,
1895                                                                 __u8 encrypt);
1896         void (*key_change_cfm)  (struct hci_conn *conn, __u8 status);
1897         void (*role_switch_cfm) (struct hci_conn *conn, __u8 status, __u8 role);
1898 };
1899
1900 static inline void hci_connect_cfm(struct hci_conn *conn, __u8 status)
1901 {
1902         struct hci_cb *cb;
1903
1904         mutex_lock(&hci_cb_list_lock);
1905         list_for_each_entry(cb, &hci_cb_list, list) {
1906                 if (cb->connect_cfm)
1907                         cb->connect_cfm(conn, status);
1908         }
1909         mutex_unlock(&hci_cb_list_lock);
1910
1911         if (conn->connect_cfm_cb)
1912                 conn->connect_cfm_cb(conn, status);
1913 }
1914
1915 static inline void hci_disconn_cfm(struct hci_conn *conn, __u8 reason)
1916 {
1917         struct hci_cb *cb;
1918
1919         mutex_lock(&hci_cb_list_lock);
1920         list_for_each_entry(cb, &hci_cb_list, list) {
1921                 if (cb->disconn_cfm)
1922                         cb->disconn_cfm(conn, reason);
1923         }
1924         mutex_unlock(&hci_cb_list_lock);
1925
1926         if (conn->disconn_cfm_cb)
1927                 conn->disconn_cfm_cb(conn, reason);
1928 }
1929
1930 static inline void hci_auth_cfm(struct hci_conn *conn, __u8 status)
1931 {
1932         struct hci_cb *cb;
1933         __u8 encrypt;
1934
1935         if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->flags))
1936                 return;
1937
1938         encrypt = test_bit(HCI_CONN_ENCRYPT, &conn->flags) ? 0x01 : 0x00;
1939
1940         mutex_lock(&hci_cb_list_lock);
1941         list_for_each_entry(cb, &hci_cb_list, list) {
1942                 if (cb->security_cfm)
1943                         cb->security_cfm(conn, status, encrypt);
1944         }
1945         mutex_unlock(&hci_cb_list_lock);
1946
1947         if (conn->security_cfm_cb)
1948                 conn->security_cfm_cb(conn, status);
1949 }
1950
1951 static inline void hci_encrypt_cfm(struct hci_conn *conn, __u8 status)
1952 {
1953         struct hci_cb *cb;
1954         __u8 encrypt;
1955
1956         if (conn->state == BT_CONFIG) {
1957                 if (!status)
1958                         conn->state = BT_CONNECTED;
1959
1960                 hci_connect_cfm(conn, status);
1961                 hci_conn_drop(conn);
1962                 return;
1963         }
1964
1965         if (!test_bit(HCI_CONN_ENCRYPT, &conn->flags))
1966                 encrypt = 0x00;
1967         else if (test_bit(HCI_CONN_AES_CCM, &conn->flags))
1968                 encrypt = 0x02;
1969         else
1970                 encrypt = 0x01;
1971
1972         if (!status) {
1973                 if (conn->sec_level == BT_SECURITY_SDP)
1974                         conn->sec_level = BT_SECURITY_LOW;
1975
1976                 if (conn->pending_sec_level > conn->sec_level)
1977                         conn->sec_level = conn->pending_sec_level;
1978         }
1979
1980         mutex_lock(&hci_cb_list_lock);
1981         list_for_each_entry(cb, &hci_cb_list, list) {
1982                 if (cb->security_cfm)
1983                         cb->security_cfm(conn, status, encrypt);
1984         }
1985         mutex_unlock(&hci_cb_list_lock);
1986
1987         if (conn->security_cfm_cb)
1988                 conn->security_cfm_cb(conn, status);
1989 }
1990
1991 static inline void hci_key_change_cfm(struct hci_conn *conn, __u8 status)
1992 {
1993         struct hci_cb *cb;
1994
1995         mutex_lock(&hci_cb_list_lock);
1996         list_for_each_entry(cb, &hci_cb_list, list) {
1997                 if (cb->key_change_cfm)
1998                         cb->key_change_cfm(conn, status);
1999         }
2000         mutex_unlock(&hci_cb_list_lock);
2001 }
2002
2003 static inline void hci_role_switch_cfm(struct hci_conn *conn, __u8 status,
2004                                                                 __u8 role)
2005 {
2006         struct hci_cb *cb;
2007
2008         mutex_lock(&hci_cb_list_lock);
2009         list_for_each_entry(cb, &hci_cb_list, list) {
2010                 if (cb->role_switch_cfm)
2011                         cb->role_switch_cfm(conn, status, role);
2012         }
2013         mutex_unlock(&hci_cb_list_lock);
2014 }
2015
2016 static inline bool hci_bdaddr_is_rpa(bdaddr_t *bdaddr, u8 addr_type)
2017 {
2018         if (addr_type != ADDR_LE_DEV_RANDOM)
2019                 return false;
2020
2021         if ((bdaddr->b[5] & 0xc0) == 0x40)
2022                return true;
2023
2024         return false;
2025 }
2026
2027 static inline bool hci_is_identity_address(bdaddr_t *addr, u8 addr_type)
2028 {
2029         if (addr_type == ADDR_LE_DEV_PUBLIC)
2030                 return true;
2031
2032         /* Check for Random Static address type */
2033         if ((addr->b[5] & 0xc0) == 0xc0)
2034                 return true;
2035
2036         return false;
2037 }
2038
2039 static inline struct smp_irk *hci_get_irk(struct hci_dev *hdev,
2040                                           bdaddr_t *bdaddr, u8 addr_type)
2041 {
2042         if (!hci_bdaddr_is_rpa(bdaddr, addr_type))
2043                 return NULL;
2044
2045         return hci_find_irk_by_rpa(hdev, bdaddr);
2046 }
2047
2048 static inline int hci_check_conn_params(u16 min, u16 max, u16 latency,
2049                                         u16 to_multiplier)
2050 {
2051         u16 max_latency;
2052
2053         if (min > max || min < 6 || max > 3200)
2054                 return -EINVAL;
2055
2056         if (to_multiplier < 10 || to_multiplier > 3200)
2057                 return -EINVAL;
2058
2059         if (max >= to_multiplier * 8)
2060                 return -EINVAL;
2061
2062         max_latency = (to_multiplier * 4 / max) - 1;
2063         if (latency > 499 || latency > max_latency)
2064                 return -EINVAL;
2065
2066         return 0;
2067 }
2068
2069 int hci_register_cb(struct hci_cb *hcb);
2070 int hci_unregister_cb(struct hci_cb *hcb);
2071
2072 int __hci_cmd_send(struct hci_dev *hdev, u16 opcode, u32 plen,
2073                    const void *param);
2074
2075 int hci_send_cmd(struct hci_dev *hdev, __u16 opcode, __u32 plen,
2076                  const void *param);
2077 void hci_send_acl(struct hci_chan *chan, struct sk_buff *skb, __u16 flags);
2078 void hci_send_sco(struct hci_conn *conn, struct sk_buff *skb);
2079 void hci_send_iso(struct hci_conn *conn, struct sk_buff *skb);
2080
2081 void *hci_sent_cmd_data(struct hci_dev *hdev, __u16 opcode);
2082 void *hci_recv_event_data(struct hci_dev *hdev, __u8 event);
2083
2084 u32 hci_conn_get_phy(struct hci_conn *conn);
2085
2086 /* ----- HCI Sockets ----- */
2087 void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb);
2088 void hci_send_to_channel(unsigned short channel, struct sk_buff *skb,
2089                          int flag, struct sock *skip_sk);
2090 void hci_send_to_monitor(struct hci_dev *hdev, struct sk_buff *skb);
2091 void hci_send_monitor_ctrl_event(struct hci_dev *hdev, u16 event,
2092                                  void *data, u16 data_len, ktime_t tstamp,
2093                                  int flag, struct sock *skip_sk);
2094
2095 void hci_sock_dev_event(struct hci_dev *hdev, int event);
2096
2097 #define HCI_MGMT_VAR_LEN        BIT(0)
2098 #define HCI_MGMT_NO_HDEV        BIT(1)
2099 #define HCI_MGMT_UNTRUSTED      BIT(2)
2100 #define HCI_MGMT_UNCONFIGURED   BIT(3)
2101 #define HCI_MGMT_HDEV_OPTIONAL  BIT(4)
2102
2103 struct hci_mgmt_handler {
2104         int (*func) (struct sock *sk, struct hci_dev *hdev, void *data,
2105                      u16 data_len);
2106         size_t data_len;
2107         unsigned long flags;
2108 };
2109
2110 struct hci_mgmt_chan {
2111         struct list_head list;
2112         unsigned short channel;
2113         size_t handler_count;
2114         const struct hci_mgmt_handler *handlers;
2115         void (*hdev_init) (struct sock *sk, struct hci_dev *hdev);
2116 };
2117
2118 int hci_mgmt_chan_register(struct hci_mgmt_chan *c);
2119 void hci_mgmt_chan_unregister(struct hci_mgmt_chan *c);
2120
2121 /* Management interface */
2122 #define DISCOV_TYPE_BREDR               (BIT(BDADDR_BREDR))
2123 #define DISCOV_TYPE_LE                  (BIT(BDADDR_LE_PUBLIC) | \
2124                                          BIT(BDADDR_LE_RANDOM))
2125 #define DISCOV_TYPE_INTERLEAVED         (BIT(BDADDR_BREDR) | \
2126                                          BIT(BDADDR_LE_PUBLIC) | \
2127                                          BIT(BDADDR_LE_RANDOM))
2128
2129 /* These LE scan and inquiry parameters were chosen according to LE General
2130  * Discovery Procedure specification.
2131  */
2132 #define DISCOV_LE_SCAN_WIN              0x12
2133 #define DISCOV_LE_SCAN_INT              0x12
2134 #define DISCOV_LE_TIMEOUT               10240   /* msec */
2135 #define DISCOV_INTERLEAVED_TIMEOUT      5120    /* msec */
2136 #define DISCOV_INTERLEAVED_INQUIRY_LEN  0x04
2137 #define DISCOV_BREDR_INQUIRY_LEN        0x08
2138 #define DISCOV_LE_RESTART_DELAY         msecs_to_jiffies(200)   /* msec */
2139 #define DISCOV_LE_FAST_ADV_INT_MIN      0x00A0  /* 100 msec */
2140 #define DISCOV_LE_FAST_ADV_INT_MAX      0x00F0  /* 150 msec */
2141 #define DISCOV_LE_PER_ADV_INT_MIN       0x00A0  /* 200 msec */
2142 #define DISCOV_LE_PER_ADV_INT_MAX       0x00A0  /* 200 msec */
2143 #define DISCOV_LE_ADV_MESH_MIN          0x00A0  /* 100 msec */
2144 #define DISCOV_LE_ADV_MESH_MAX          0x00A0  /* 100 msec */
2145 #define INTERVAL_TO_MS(x)               (((x) * 10) / 0x10)
2146
2147 #define NAME_RESOLVE_DURATION           msecs_to_jiffies(10240) /* 10.24 sec */
2148
2149 void mgmt_fill_version_info(void *ver);
2150 int mgmt_new_settings(struct hci_dev *hdev);
2151 void mgmt_index_added(struct hci_dev *hdev);
2152 void mgmt_index_removed(struct hci_dev *hdev);
2153 void mgmt_set_powered_failed(struct hci_dev *hdev, int err);
2154 void mgmt_power_on(struct hci_dev *hdev, int err);
2155 void __mgmt_power_off(struct hci_dev *hdev);
2156 void mgmt_new_link_key(struct hci_dev *hdev, struct link_key *key,
2157                        bool persistent);
2158 void mgmt_device_connected(struct hci_dev *hdev, struct hci_conn *conn,
2159                            u8 *name, u8 name_len);
2160 void mgmt_device_disconnected(struct hci_dev *hdev, bdaddr_t *bdaddr,
2161                               u8 link_type, u8 addr_type, u8 reason,
2162                               bool mgmt_connected);
2163 void mgmt_disconnect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr,
2164                             u8 link_type, u8 addr_type, u8 status);
2165 void mgmt_connect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2166                          u8 addr_type, u8 status);
2167 void mgmt_pin_code_request(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 secure);
2168 void mgmt_pin_code_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2169                                   u8 status);
2170 void mgmt_pin_code_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2171                                       u8 status);
2172 int mgmt_user_confirm_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
2173                               u8 link_type, u8 addr_type, u32 value,
2174                               u8 confirm_hint);
2175 int mgmt_user_confirm_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2176                                      u8 link_type, u8 addr_type, u8 status);
2177 int mgmt_user_confirm_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2178                                          u8 link_type, u8 addr_type, u8 status);
2179 int mgmt_user_passkey_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
2180                               u8 link_type, u8 addr_type);
2181 int mgmt_user_passkey_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2182                                      u8 link_type, u8 addr_type, u8 status);
2183 int mgmt_user_passkey_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2184                                          u8 link_type, u8 addr_type, u8 status);
2185 int mgmt_user_passkey_notify(struct hci_dev *hdev, bdaddr_t *bdaddr,
2186                              u8 link_type, u8 addr_type, u32 passkey,
2187                              u8 entered);
2188 void mgmt_auth_failed(struct hci_conn *conn, u8 status);
2189 void mgmt_auth_enable_complete(struct hci_dev *hdev, u8 status);
2190 void mgmt_set_class_of_dev_complete(struct hci_dev *hdev, u8 *dev_class,
2191                                     u8 status);
2192 void mgmt_set_local_name_complete(struct hci_dev *hdev, u8 *name, u8 status);
2193 void mgmt_start_discovery_complete(struct hci_dev *hdev, u8 status);
2194 void mgmt_stop_discovery_complete(struct hci_dev *hdev, u8 status);
2195 void mgmt_device_found(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2196                        u8 addr_type, u8 *dev_class, s8 rssi, u32 flags,
2197                        u8 *eir, u16 eir_len, u8 *scan_rsp, u8 scan_rsp_len,
2198                        u64 instant);
2199 void mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2200                       u8 addr_type, s8 rssi, u8 *name, u8 name_len);
2201 void mgmt_discovering(struct hci_dev *hdev, u8 discovering);
2202 void mgmt_suspending(struct hci_dev *hdev, u8 state);
2203 void mgmt_resuming(struct hci_dev *hdev, u8 reason, bdaddr_t *bdaddr,
2204                    u8 addr_type);
2205 bool mgmt_powering_down(struct hci_dev *hdev);
2206 void mgmt_new_ltk(struct hci_dev *hdev, struct smp_ltk *key, bool persistent);
2207 void mgmt_new_irk(struct hci_dev *hdev, struct smp_irk *irk, bool persistent);
2208 void mgmt_new_csrk(struct hci_dev *hdev, struct smp_csrk *csrk,
2209                    bool persistent);
2210 void mgmt_new_conn_param(struct hci_dev *hdev, bdaddr_t *bdaddr,
2211                          u8 bdaddr_type, u8 store_hint, u16 min_interval,
2212                          u16 max_interval, u16 latency, u16 timeout);
2213 void mgmt_smp_complete(struct hci_conn *conn, bool complete);
2214 bool mgmt_get_connectable(struct hci_dev *hdev);
2215 u8 mgmt_get_adv_discov_flags(struct hci_dev *hdev);
2216 void mgmt_advertising_added(struct sock *sk, struct hci_dev *hdev,
2217                             u8 instance);
2218 void mgmt_advertising_removed(struct sock *sk, struct hci_dev *hdev,
2219                               u8 instance);
2220 void mgmt_adv_monitor_removed(struct hci_dev *hdev, u16 handle);
2221 int mgmt_phy_configuration_changed(struct hci_dev *hdev, struct sock *skip);
2222 void mgmt_adv_monitor_device_lost(struct hci_dev *hdev, u16 handle,
2223                                   bdaddr_t *bdaddr, u8 addr_type);
2224
2225 int hci_abort_conn(struct hci_conn *conn, u8 reason);
2226 u8 hci_le_conn_update(struct hci_conn *conn, u16 min, u16 max, u16 latency,
2227                       u16 to_multiplier);
2228 void hci_le_start_enc(struct hci_conn *conn, __le16 ediv, __le64 rand,
2229                       __u8 ltk[16], __u8 key_size);
2230
2231 void hci_copy_identity_address(struct hci_dev *hdev, bdaddr_t *bdaddr,
2232                                u8 *bdaddr_type);
2233
2234 #define SCO_AIRMODE_MASK       0x0003
2235 #define SCO_AIRMODE_CVSD       0x0000
2236 #define SCO_AIRMODE_TRANSP     0x0003
2237
2238 #define LOCAL_CODEC_ACL_MASK    BIT(0)
2239 #define LOCAL_CODEC_SCO_MASK    BIT(1)
2240
2241 #define TRANSPORT_TYPE_MAX      0x04
2242
2243 #endif /* __HCI_CORE_H */