Bluetooth: Make handle of hci_conn be unique
[platform/kernel/linux-rpi.git] / include / net / bluetooth / hci_core.h
1 /*
2    BlueZ - Bluetooth protocol stack for Linux
3    Copyright (c) 2000-2001, 2010, Code Aurora Forum. All rights reserved.
4    Copyright 2023 NXP
5
6    Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
7
8    This program is free software; you can redistribute it and/or modify
9    it under the terms of the GNU General Public License version 2 as
10    published by the Free Software Foundation;
11
12    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
13    OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
14    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
15    IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
16    CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
17    WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
18    ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
19    OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
20
21    ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
22    COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
23    SOFTWARE IS DISCLAIMED.
24 */
25
26 #ifndef __HCI_CORE_H
27 #define __HCI_CORE_H
28
29 #include <linux/idr.h>
30 #include <linux/leds.h>
31 #include <linux/rculist.h>
32
33 #include <net/bluetooth/hci.h>
34 #include <net/bluetooth/hci_sync.h>
35 #include <net/bluetooth/hci_sock.h>
36 #include <net/bluetooth/coredump.h>
37
38 /* HCI priority */
39 #define HCI_PRIO_MAX    7
40
41 /* HCI maximum id value */
42 #define HCI_MAX_ID 10000
43
44 /* HCI Core structures */
45 struct inquiry_data {
46         bdaddr_t        bdaddr;
47         __u8            pscan_rep_mode;
48         __u8            pscan_period_mode;
49         __u8            pscan_mode;
50         __u8            dev_class[3];
51         __le16          clock_offset;
52         __s8            rssi;
53         __u8            ssp_mode;
54 };
55
56 struct inquiry_entry {
57         struct list_head        all;            /* inq_cache.all */
58         struct list_head        list;           /* unknown or resolve */
59         enum {
60                 NAME_NOT_KNOWN,
61                 NAME_NEEDED,
62                 NAME_PENDING,
63                 NAME_KNOWN,
64         } name_state;
65         __u32                   timestamp;
66         struct inquiry_data     data;
67 };
68
69 struct discovery_state {
70         int                     type;
71         enum {
72                 DISCOVERY_STOPPED,
73                 DISCOVERY_STARTING,
74                 DISCOVERY_FINDING,
75                 DISCOVERY_RESOLVING,
76                 DISCOVERY_STOPPING,
77         } state;
78         struct list_head        all;    /* All devices found during inquiry */
79         struct list_head        unknown;        /* Name state not known */
80         struct list_head        resolve;        /* Name needs to be resolved */
81         __u32                   timestamp;
82         bdaddr_t                last_adv_addr;
83         u8                      last_adv_addr_type;
84         s8                      last_adv_rssi;
85         u32                     last_adv_flags;
86         u8                      last_adv_data[HCI_MAX_EXT_AD_LENGTH];
87         u8                      last_adv_data_len;
88         bool                    report_invalid_rssi;
89         bool                    result_filtering;
90         bool                    limited;
91         s8                      rssi;
92         u16                     uuid_count;
93         u8                      (*uuids)[16];
94         unsigned long           scan_start;
95         unsigned long           scan_duration;
96         unsigned long           name_resolve_timeout;
97 };
98
99 #define SUSPEND_NOTIFIER_TIMEOUT        msecs_to_jiffies(2000) /* 2 seconds */
100
101 enum suspend_tasks {
102         SUSPEND_PAUSE_DISCOVERY,
103         SUSPEND_UNPAUSE_DISCOVERY,
104
105         SUSPEND_PAUSE_ADVERTISING,
106         SUSPEND_UNPAUSE_ADVERTISING,
107
108         SUSPEND_SCAN_DISABLE,
109         SUSPEND_SCAN_ENABLE,
110         SUSPEND_DISCONNECTING,
111
112         SUSPEND_POWERING_DOWN,
113
114         SUSPEND_PREPARE_NOTIFIER,
115
116         SUSPEND_SET_ADV_FILTER,
117         __SUSPEND_NUM_TASKS
118 };
119
120 enum suspended_state {
121         BT_RUNNING = 0,
122         BT_SUSPEND_DISCONNECT,
123         BT_SUSPEND_CONFIGURE_WAKE,
124 };
125
126 struct hci_conn_hash {
127         struct list_head list;
128         unsigned int     acl_num;
129         unsigned int     amp_num;
130         unsigned int     sco_num;
131         unsigned int     iso_num;
132         unsigned int     le_num;
133         unsigned int     le_num_peripheral;
134 };
135
136 struct bdaddr_list {
137         struct list_head list;
138         bdaddr_t bdaddr;
139         u8 bdaddr_type;
140 };
141
142 struct codec_list {
143         struct list_head list;
144         u8      id;
145         __u16   cid;
146         __u16   vid;
147         u8      transport;
148         u8      num_caps;
149         u32     len;
150         struct hci_codec_caps caps[];
151 };
152
153 struct bdaddr_list_with_irk {
154         struct list_head list;
155         bdaddr_t bdaddr;
156         u8 bdaddr_type;
157         u8 peer_irk[16];
158         u8 local_irk[16];
159 };
160
161 /* Bitmask of connection flags */
162 enum hci_conn_flags {
163         HCI_CONN_FLAG_REMOTE_WAKEUP = 1,
164         HCI_CONN_FLAG_DEVICE_PRIVACY = 2,
165 };
166 typedef u8 hci_conn_flags_t;
167
168 struct bdaddr_list_with_flags {
169         struct list_head list;
170         bdaddr_t bdaddr;
171         u8 bdaddr_type;
172         hci_conn_flags_t flags;
173 };
174
175 struct bt_uuid {
176         struct list_head list;
177         u8 uuid[16];
178         u8 size;
179         u8 svc_hint;
180 };
181
182 struct blocked_key {
183         struct list_head list;
184         struct rcu_head rcu;
185         u8 type;
186         u8 val[16];
187 };
188
189 struct smp_csrk {
190         bdaddr_t bdaddr;
191         u8 bdaddr_type;
192         u8 type;
193         u8 val[16];
194 };
195
196 struct smp_ltk {
197         struct list_head list;
198         struct rcu_head rcu;
199         bdaddr_t bdaddr;
200         u8 bdaddr_type;
201         u8 authenticated;
202         u8 type;
203         u8 enc_size;
204         __le16 ediv;
205         __le64 rand;
206         u8 val[16];
207 };
208
209 struct smp_irk {
210         struct list_head list;
211         struct rcu_head rcu;
212         bdaddr_t rpa;
213         bdaddr_t bdaddr;
214         u8 addr_type;
215         u8 val[16];
216 };
217
218 struct link_key {
219         struct list_head list;
220         struct rcu_head rcu;
221         bdaddr_t bdaddr;
222         u8 type;
223         u8 val[HCI_LINK_KEY_SIZE];
224         u8 pin_len;
225 };
226
227 struct oob_data {
228         struct list_head list;
229         bdaddr_t bdaddr;
230         u8 bdaddr_type;
231         u8 present;
232         u8 hash192[16];
233         u8 rand192[16];
234         u8 hash256[16];
235         u8 rand256[16];
236 };
237
238 struct adv_info {
239         struct list_head list;
240         bool    enabled;
241         bool    pending;
242         bool    periodic;
243         __u8    mesh;
244         __u8    instance;
245         __u32   flags;
246         __u16   timeout;
247         __u16   remaining_time;
248         __u16   duration;
249         __u16   adv_data_len;
250         __u8    adv_data[HCI_MAX_EXT_AD_LENGTH];
251         bool    adv_data_changed;
252         __u16   scan_rsp_len;
253         __u8    scan_rsp_data[HCI_MAX_EXT_AD_LENGTH];
254         bool    scan_rsp_changed;
255         __u16   per_adv_data_len;
256         __u8    per_adv_data[HCI_MAX_PER_AD_LENGTH];
257         __s8    tx_power;
258         __u32   min_interval;
259         __u32   max_interval;
260         bdaddr_t        random_addr;
261         bool            rpa_expired;
262         struct delayed_work     rpa_expired_cb;
263 };
264
265 #define HCI_MAX_ADV_INSTANCES           5
266 #define HCI_DEFAULT_ADV_DURATION        2
267
268 #define HCI_ADV_TX_POWER_NO_PREFERENCE 0x7F
269
270 #define DATA_CMP(_d1, _l1, _d2, _l2) \
271         (_l1 == _l2 ? memcmp(_d1, _d2, _l1) : _l1 - _l2)
272
273 #define ADV_DATA_CMP(_adv, _data, _len) \
274         DATA_CMP((_adv)->adv_data, (_adv)->adv_data_len, _data, _len)
275
276 #define SCAN_RSP_CMP(_adv, _data, _len) \
277         DATA_CMP((_adv)->scan_rsp_data, (_adv)->scan_rsp_len, _data, _len)
278
279 struct monitored_device {
280         struct list_head list;
281
282         bdaddr_t bdaddr;
283         __u8     addr_type;
284         __u16    handle;
285         bool     notified;
286 };
287
288 struct adv_pattern {
289         struct list_head list;
290         __u8 ad_type;
291         __u8 offset;
292         __u8 length;
293         __u8 value[HCI_MAX_EXT_AD_LENGTH];
294 };
295
296 struct adv_rssi_thresholds {
297         __s8 low_threshold;
298         __s8 high_threshold;
299         __u16 low_threshold_timeout;
300         __u16 high_threshold_timeout;
301         __u8 sampling_period;
302 };
303
304 struct adv_monitor {
305         struct list_head patterns;
306         struct adv_rssi_thresholds rssi;
307         __u16           handle;
308
309         enum {
310                 ADV_MONITOR_STATE_NOT_REGISTERED,
311                 ADV_MONITOR_STATE_REGISTERED,
312                 ADV_MONITOR_STATE_OFFLOADED
313         } state;
314 };
315
316 #define HCI_MIN_ADV_MONITOR_HANDLE              1
317 #define HCI_MAX_ADV_MONITOR_NUM_HANDLES         32
318 #define HCI_MAX_ADV_MONITOR_NUM_PATTERNS        16
319 #define HCI_ADV_MONITOR_EXT_NONE                1
320 #define HCI_ADV_MONITOR_EXT_MSFT                2
321
322 #define HCI_MAX_SHORT_NAME_LENGTH       10
323
324 #define HCI_CONN_HANDLE_MAX             0x0eff
325 #define HCI_CONN_HANDLE_UNSET(_handle)  (_handle > HCI_CONN_HANDLE_MAX)
326
327 /* Min encryption key size to match with SMP */
328 #define HCI_MIN_ENC_KEY_SIZE            7
329
330 /* Default LE RPA expiry time, 15 minutes */
331 #define HCI_DEFAULT_RPA_TIMEOUT         (15 * 60)
332
333 /* Default min/max age of connection information (1s/3s) */
334 #define DEFAULT_CONN_INFO_MIN_AGE       1000
335 #define DEFAULT_CONN_INFO_MAX_AGE       3000
336 /* Default authenticated payload timeout 30s */
337 #define DEFAULT_AUTH_PAYLOAD_TIMEOUT   0x0bb8
338
339 struct amp_assoc {
340         __u16   len;
341         __u16   offset;
342         __u16   rem_len;
343         __u16   len_so_far;
344         __u8    data[HCI_MAX_AMP_ASSOC_SIZE];
345 };
346
347 #define HCI_MAX_PAGES   3
348
349 struct hci_dev {
350         struct list_head list;
351         struct mutex    lock;
352
353         struct ida      unset_handle_ida;
354
355         const char      *name;
356         unsigned long   flags;
357         __u16           id;
358         __u8            bus;
359         __u8            dev_type;
360         bdaddr_t        bdaddr;
361         bdaddr_t        setup_addr;
362         bdaddr_t        public_addr;
363         bdaddr_t        random_addr;
364         bdaddr_t        static_addr;
365         __u8            adv_addr_type;
366         __u8            dev_name[HCI_MAX_NAME_LENGTH];
367         __u8            short_name[HCI_MAX_SHORT_NAME_LENGTH];
368         __u8            eir[HCI_MAX_EIR_LENGTH];
369         __u16           appearance;
370         __u8            dev_class[3];
371         __u8            major_class;
372         __u8            minor_class;
373         __u8            max_page;
374         __u8            features[HCI_MAX_PAGES][8];
375         __u8            le_features[8];
376         __u8            le_accept_list_size;
377         __u8            le_resolv_list_size;
378         __u8            le_num_of_adv_sets;
379         __u8            le_states[8];
380         __u8            mesh_ad_types[16];
381         __u8            mesh_send_ref;
382         __u8            commands[64];
383         __u8            hci_ver;
384         __u16           hci_rev;
385         __u8            lmp_ver;
386         __u16           manufacturer;
387         __u16           lmp_subver;
388         __u16           voice_setting;
389         __u8            num_iac;
390         __u16           stored_max_keys;
391         __u16           stored_num_keys;
392         __u8            io_capability;
393         __s8            inq_tx_power;
394         __u8            err_data_reporting;
395         __u16           page_scan_interval;
396         __u16           page_scan_window;
397         __u8            page_scan_type;
398         __u8            le_adv_channel_map;
399         __u16           le_adv_min_interval;
400         __u16           le_adv_max_interval;
401         __u8            le_scan_type;
402         __u16           le_scan_interval;
403         __u16           le_scan_window;
404         __u16           le_scan_int_suspend;
405         __u16           le_scan_window_suspend;
406         __u16           le_scan_int_discovery;
407         __u16           le_scan_window_discovery;
408         __u16           le_scan_int_adv_monitor;
409         __u16           le_scan_window_adv_monitor;
410         __u16           le_scan_int_connect;
411         __u16           le_scan_window_connect;
412         __u16           le_conn_min_interval;
413         __u16           le_conn_max_interval;
414         __u16           le_conn_latency;
415         __u16           le_supv_timeout;
416         __u16           le_def_tx_len;
417         __u16           le_def_tx_time;
418         __u16           le_max_tx_len;
419         __u16           le_max_tx_time;
420         __u16           le_max_rx_len;
421         __u16           le_max_rx_time;
422         __u8            le_max_key_size;
423         __u8            le_min_key_size;
424         __u16           discov_interleaved_timeout;
425         __u16           conn_info_min_age;
426         __u16           conn_info_max_age;
427         __u16           auth_payload_timeout;
428         __u8            min_enc_key_size;
429         __u8            max_enc_key_size;
430         __u8            pairing_opts;
431         __u8            ssp_debug_mode;
432         __u8            hw_error_code;
433         __u32           clock;
434         __u16           advmon_allowlist_duration;
435         __u16           advmon_no_filter_duration;
436         __u8            enable_advmon_interleave_scan;
437
438         __u16           devid_source;
439         __u16           devid_vendor;
440         __u16           devid_product;
441         __u16           devid_version;
442
443         __u8            def_page_scan_type;
444         __u16           def_page_scan_int;
445         __u16           def_page_scan_window;
446         __u8            def_inq_scan_type;
447         __u16           def_inq_scan_int;
448         __u16           def_inq_scan_window;
449         __u16           def_br_lsto;
450         __u16           def_page_timeout;
451         __u16           def_multi_adv_rotation_duration;
452         __u16           def_le_autoconnect_timeout;
453         __s8            min_le_tx_power;
454         __s8            max_le_tx_power;
455
456         __u16           pkt_type;
457         __u16           esco_type;
458         __u16           link_policy;
459         __u16           link_mode;
460
461         __u32           idle_timeout;
462         __u16           sniff_min_interval;
463         __u16           sniff_max_interval;
464
465         __u8            amp_status;
466         __u32           amp_total_bw;
467         __u32           amp_max_bw;
468         __u32           amp_min_latency;
469         __u32           amp_max_pdu;
470         __u8            amp_type;
471         __u16           amp_pal_cap;
472         __u16           amp_assoc_size;
473         __u32           amp_max_flush_to;
474         __u32           amp_be_flush_to;
475
476         struct amp_assoc        loc_assoc;
477
478         __u8            flow_ctl_mode;
479
480         unsigned int    auto_accept_delay;
481
482         unsigned long   quirks;
483
484         atomic_t        cmd_cnt;
485         unsigned int    acl_cnt;
486         unsigned int    sco_cnt;
487         unsigned int    le_cnt;
488         unsigned int    iso_cnt;
489
490         unsigned int    acl_mtu;
491         unsigned int    sco_mtu;
492         unsigned int    le_mtu;
493         unsigned int    iso_mtu;
494         unsigned int    acl_pkts;
495         unsigned int    sco_pkts;
496         unsigned int    le_pkts;
497         unsigned int    iso_pkts;
498
499         __u16           block_len;
500         __u16           block_mtu;
501         __u16           num_blocks;
502         __u16           block_cnt;
503
504         unsigned long   acl_last_tx;
505         unsigned long   sco_last_tx;
506         unsigned long   le_last_tx;
507
508         __u8            le_tx_def_phys;
509         __u8            le_rx_def_phys;
510
511         struct workqueue_struct *workqueue;
512         struct workqueue_struct *req_workqueue;
513
514         struct work_struct      power_on;
515         struct delayed_work     power_off;
516         struct work_struct      error_reset;
517         struct work_struct      cmd_sync_work;
518         struct list_head        cmd_sync_work_list;
519         struct mutex            cmd_sync_work_lock;
520         struct mutex            unregister_lock;
521         struct work_struct      cmd_sync_cancel_work;
522         struct work_struct      reenable_adv_work;
523
524         __u16                   discov_timeout;
525         struct delayed_work     discov_off;
526
527         struct delayed_work     service_cache;
528
529         struct delayed_work     cmd_timer;
530         struct delayed_work     ncmd_timer;
531
532         struct work_struct      rx_work;
533         struct work_struct      cmd_work;
534         struct work_struct      tx_work;
535
536         struct delayed_work     le_scan_disable;
537         struct delayed_work     le_scan_restart;
538
539         struct sk_buff_head     rx_q;
540         struct sk_buff_head     raw_q;
541         struct sk_buff_head     cmd_q;
542
543         struct sk_buff          *sent_cmd;
544         struct sk_buff          *recv_event;
545
546         struct mutex            req_lock;
547         wait_queue_head_t       req_wait_q;
548         __u32                   req_status;
549         __u32                   req_result;
550         struct sk_buff          *req_skb;
551
552         void                    *smp_data;
553         void                    *smp_bredr_data;
554
555         struct discovery_state  discovery;
556
557         int                     discovery_old_state;
558         bool                    discovery_paused;
559         int                     advertising_old_state;
560         bool                    advertising_paused;
561
562         struct notifier_block   suspend_notifier;
563         enum suspended_state    suspend_state_next;
564         enum suspended_state    suspend_state;
565         bool                    scanning_paused;
566         bool                    suspended;
567         u8                      wake_reason;
568         bdaddr_t                wake_addr;
569         u8                      wake_addr_type;
570
571         struct hci_conn_hash    conn_hash;
572
573         struct list_head        mesh_pending;
574         struct list_head        mgmt_pending;
575         struct list_head        reject_list;
576         struct list_head        accept_list;
577         struct list_head        uuids;
578         struct list_head        link_keys;
579         struct list_head        long_term_keys;
580         struct list_head        identity_resolving_keys;
581         struct list_head        remote_oob_data;
582         struct list_head        le_accept_list;
583         struct list_head        le_resolv_list;
584         struct list_head        le_conn_params;
585         struct list_head        pend_le_conns;
586         struct list_head        pend_le_reports;
587         struct list_head        blocked_keys;
588         struct list_head        local_codecs;
589
590         struct hci_dev_stats    stat;
591
592         atomic_t                promisc;
593
594         const char              *hw_info;
595         const char              *fw_info;
596         struct dentry           *debugfs;
597
598         struct hci_devcoredump  dump;
599
600         struct device           dev;
601
602         struct rfkill           *rfkill;
603
604         DECLARE_BITMAP(dev_flags, __HCI_NUM_FLAGS);
605         hci_conn_flags_t        conn_flags;
606
607         __s8                    adv_tx_power;
608         __u8                    adv_data[HCI_MAX_EXT_AD_LENGTH];
609         __u8                    adv_data_len;
610         __u8                    scan_rsp_data[HCI_MAX_EXT_AD_LENGTH];
611         __u8                    scan_rsp_data_len;
612         __u8                    per_adv_data[HCI_MAX_PER_AD_LENGTH];
613         __u8                    per_adv_data_len;
614
615         struct list_head        adv_instances;
616         unsigned int            adv_instance_cnt;
617         __u8                    cur_adv_instance;
618         __u16                   adv_instance_timeout;
619         struct delayed_work     adv_instance_expire;
620
621         struct idr              adv_monitors_idr;
622         unsigned int            adv_monitors_cnt;
623
624         __u8                    irk[16];
625         __u32                   rpa_timeout;
626         struct delayed_work     rpa_expired;
627         bdaddr_t                rpa;
628
629         struct delayed_work     mesh_send_done;
630
631         enum {
632                 INTERLEAVE_SCAN_NONE,
633                 INTERLEAVE_SCAN_NO_FILTER,
634                 INTERLEAVE_SCAN_ALLOWLIST
635         } interleave_scan_state;
636
637         struct delayed_work     interleave_scan;
638
639         struct list_head        monitored_devices;
640         bool                    advmon_pend_notify;
641
642 #if IS_ENABLED(CONFIG_BT_LEDS)
643         struct led_trigger      *power_led;
644 #endif
645
646 #if IS_ENABLED(CONFIG_BT_MSFTEXT)
647         __u16                   msft_opcode;
648         void                    *msft_data;
649         bool                    msft_curve_validity;
650 #endif
651
652 #if IS_ENABLED(CONFIG_BT_AOSPEXT)
653         bool                    aosp_capable;
654         bool                    aosp_quality_report;
655 #endif
656
657         int (*open)(struct hci_dev *hdev);
658         int (*close)(struct hci_dev *hdev);
659         int (*flush)(struct hci_dev *hdev);
660         int (*setup)(struct hci_dev *hdev);
661         int (*shutdown)(struct hci_dev *hdev);
662         int (*send)(struct hci_dev *hdev, struct sk_buff *skb);
663         void (*notify)(struct hci_dev *hdev, unsigned int evt);
664         void (*hw_error)(struct hci_dev *hdev, u8 code);
665         int (*post_init)(struct hci_dev *hdev);
666         int (*set_diag)(struct hci_dev *hdev, bool enable);
667         int (*set_bdaddr)(struct hci_dev *hdev, const bdaddr_t *bdaddr);
668         void (*cmd_timeout)(struct hci_dev *hdev);
669         void (*reset)(struct hci_dev *hdev);
670         bool (*wakeup)(struct hci_dev *hdev);
671         int (*set_quality_report)(struct hci_dev *hdev, bool enable);
672         int (*get_data_path_id)(struct hci_dev *hdev, __u8 *data_path);
673         int (*get_codec_config_data)(struct hci_dev *hdev, __u8 type,
674                                      struct bt_codec *codec, __u8 *vnd_len,
675                                      __u8 **vnd_data);
676 };
677
678 #define HCI_PHY_HANDLE(handle)  (handle & 0xff)
679
680 enum conn_reasons {
681         CONN_REASON_PAIR_DEVICE,
682         CONN_REASON_L2CAP_CHAN,
683         CONN_REASON_SCO_CONNECT,
684         CONN_REASON_ISO_CONNECT,
685 };
686
687 struct hci_conn {
688         struct list_head list;
689
690         atomic_t        refcnt;
691
692         bdaddr_t        dst;
693         __u8            dst_type;
694         bdaddr_t        src;
695         __u8            src_type;
696         bdaddr_t        init_addr;
697         __u8            init_addr_type;
698         bdaddr_t        resp_addr;
699         __u8            resp_addr_type;
700         __u8            adv_instance;
701         __u16           handle;
702         __u16           sync_handle;
703         __u16           state;
704         __u8            mode;
705         __u8            type;
706         __u8            role;
707         bool            out;
708         __u8            attempt;
709         __u8            dev_class[3];
710         __u8            features[HCI_MAX_PAGES][8];
711         __u16           pkt_type;
712         __u16           link_policy;
713         __u8            key_type;
714         __u8            auth_type;
715         __u8            sec_level;
716         __u8            pending_sec_level;
717         __u8            pin_length;
718         __u8            enc_key_size;
719         __u8            io_capability;
720         __u32           passkey_notify;
721         __u8            passkey_entered;
722         __u16           disc_timeout;
723         __u16           conn_timeout;
724         __u16           setting;
725         __u16           auth_payload_timeout;
726         __u16           le_conn_min_interval;
727         __u16           le_conn_max_interval;
728         __u16           le_conn_interval;
729         __u16           le_conn_latency;
730         __u16           le_supv_timeout;
731         __u8            le_adv_data[HCI_MAX_EXT_AD_LENGTH];
732         __u8            le_adv_data_len;
733         __u8            le_per_adv_data[HCI_MAX_PER_AD_LENGTH];
734         __u8            le_per_adv_data_len;
735         __u8            le_tx_phy;
736         __u8            le_rx_phy;
737         __s8            rssi;
738         __s8            tx_power;
739         __s8            max_tx_power;
740         struct bt_iso_qos iso_qos;
741         unsigned long   flags;
742
743         enum conn_reasons conn_reason;
744         __u8            abort_reason;
745
746         __u32           clock;
747         __u16           clock_accuracy;
748
749         unsigned long   conn_info_timestamp;
750
751         __u8            remote_cap;
752         __u8            remote_auth;
753         __u8            remote_id;
754
755         unsigned int    sent;
756
757         struct sk_buff_head data_q;
758         struct list_head chan_list;
759
760         struct delayed_work disc_work;
761         struct delayed_work auto_accept_work;
762         struct delayed_work idle_work;
763         struct delayed_work le_conn_timeout;
764
765         struct device   dev;
766         struct dentry   *debugfs;
767
768         struct hci_dev  *hdev;
769         void            *l2cap_data;
770         void            *sco_data;
771         void            *iso_data;
772         struct amp_mgr  *amp_mgr;
773
774         struct list_head link_list;
775         struct hci_conn *parent;
776         struct hci_link *link;
777
778         struct bt_codec codec;
779
780         void (*connect_cfm_cb)  (struct hci_conn *conn, u8 status);
781         void (*security_cfm_cb) (struct hci_conn *conn, u8 status);
782         void (*disconn_cfm_cb)  (struct hci_conn *conn, u8 reason);
783
784         void (*cleanup)(struct hci_conn *conn);
785 };
786
787 struct hci_link {
788         struct list_head list;
789         struct hci_conn *conn;
790 };
791
792 struct hci_chan {
793         struct list_head list;
794         __u16 handle;
795         struct hci_conn *conn;
796         struct sk_buff_head data_q;
797         unsigned int    sent;
798         __u8            state;
799         bool            amp;
800 };
801
802 struct hci_conn_params {
803         struct list_head list;
804         struct list_head action;
805
806         bdaddr_t addr;
807         u8 addr_type;
808
809         u16 conn_min_interval;
810         u16 conn_max_interval;
811         u16 conn_latency;
812         u16 supervision_timeout;
813
814         enum {
815                 HCI_AUTO_CONN_DISABLED,
816                 HCI_AUTO_CONN_REPORT,
817                 HCI_AUTO_CONN_DIRECT,
818                 HCI_AUTO_CONN_ALWAYS,
819                 HCI_AUTO_CONN_LINK_LOSS,
820                 HCI_AUTO_CONN_EXPLICIT,
821         } auto_connect;
822
823         struct hci_conn *conn;
824         bool explicit_connect;
825         /* Accessed without hdev->lock: */
826         hci_conn_flags_t flags;
827         u8  privacy_mode;
828 };
829
830 extern struct list_head hci_dev_list;
831 extern struct list_head hci_cb_list;
832 extern rwlock_t hci_dev_list_lock;
833 extern struct mutex hci_cb_list_lock;
834
835 #define hci_dev_set_flag(hdev, nr)             set_bit((nr), (hdev)->dev_flags)
836 #define hci_dev_clear_flag(hdev, nr)           clear_bit((nr), (hdev)->dev_flags)
837 #define hci_dev_change_flag(hdev, nr)          change_bit((nr), (hdev)->dev_flags)
838 #define hci_dev_test_flag(hdev, nr)            test_bit((nr), (hdev)->dev_flags)
839 #define hci_dev_test_and_set_flag(hdev, nr)    test_and_set_bit((nr), (hdev)->dev_flags)
840 #define hci_dev_test_and_clear_flag(hdev, nr)  test_and_clear_bit((nr), (hdev)->dev_flags)
841 #define hci_dev_test_and_change_flag(hdev, nr) test_and_change_bit((nr), (hdev)->dev_flags)
842
843 #define hci_dev_clear_volatile_flags(hdev)                      \
844         do {                                                    \
845                 hci_dev_clear_flag(hdev, HCI_LE_SCAN);          \
846                 hci_dev_clear_flag(hdev, HCI_LE_ADV);           \
847                 hci_dev_clear_flag(hdev, HCI_LL_RPA_RESOLUTION);\
848                 hci_dev_clear_flag(hdev, HCI_PERIODIC_INQ);     \
849                 hci_dev_clear_flag(hdev, HCI_QUALITY_REPORT);   \
850         } while (0)
851
852 #define hci_dev_le_state_simultaneous(hdev) \
853         (test_bit(HCI_QUIRK_VALID_LE_STATES, &hdev->quirks) && \
854          (hdev->le_states[4] & 0x08) && /* Central */ \
855          (hdev->le_states[4] & 0x40) && /* Peripheral */ \
856          (hdev->le_states[3] & 0x10))   /* Simultaneous */
857
858 /* ----- HCI interface to upper protocols ----- */
859 int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr);
860 int l2cap_disconn_ind(struct hci_conn *hcon);
861 void l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
862
863 #if IS_ENABLED(CONFIG_BT_BREDR)
864 int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
865 void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb);
866 #else
867 static inline int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
868                                   __u8 *flags)
869 {
870         return 0;
871 }
872
873 static inline void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb)
874 {
875 }
876 #endif
877
878 #if IS_ENABLED(CONFIG_BT_LE)
879 int iso_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
880 void iso_recv(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
881 #else
882 static inline int iso_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
883                                   __u8 *flags)
884 {
885         return 0;
886 }
887 static inline void iso_recv(struct hci_conn *hcon, struct sk_buff *skb,
888                             u16 flags)
889 {
890 }
891 #endif
892
893 /* ----- Inquiry cache ----- */
894 #define INQUIRY_CACHE_AGE_MAX   (HZ*30)   /* 30 seconds */
895 #define INQUIRY_ENTRY_AGE_MAX   (HZ*60)   /* 60 seconds */
896
897 static inline void discovery_init(struct hci_dev *hdev)
898 {
899         hdev->discovery.state = DISCOVERY_STOPPED;
900         INIT_LIST_HEAD(&hdev->discovery.all);
901         INIT_LIST_HEAD(&hdev->discovery.unknown);
902         INIT_LIST_HEAD(&hdev->discovery.resolve);
903         hdev->discovery.report_invalid_rssi = true;
904         hdev->discovery.rssi = HCI_RSSI_INVALID;
905 }
906
907 static inline void hci_discovery_filter_clear(struct hci_dev *hdev)
908 {
909         hdev->discovery.result_filtering = false;
910         hdev->discovery.report_invalid_rssi = true;
911         hdev->discovery.rssi = HCI_RSSI_INVALID;
912         hdev->discovery.uuid_count = 0;
913         kfree(hdev->discovery.uuids);
914         hdev->discovery.uuids = NULL;
915         hdev->discovery.scan_start = 0;
916         hdev->discovery.scan_duration = 0;
917 }
918
919 bool hci_discovery_active(struct hci_dev *hdev);
920
921 void hci_discovery_set_state(struct hci_dev *hdev, int state);
922
923 static inline int inquiry_cache_empty(struct hci_dev *hdev)
924 {
925         return list_empty(&hdev->discovery.all);
926 }
927
928 static inline long inquiry_cache_age(struct hci_dev *hdev)
929 {
930         struct discovery_state *c = &hdev->discovery;
931         return jiffies - c->timestamp;
932 }
933
934 static inline long inquiry_entry_age(struct inquiry_entry *e)
935 {
936         return jiffies - e->timestamp;
937 }
938
939 struct inquiry_entry *hci_inquiry_cache_lookup(struct hci_dev *hdev,
940                                                bdaddr_t *bdaddr);
941 struct inquiry_entry *hci_inquiry_cache_lookup_unknown(struct hci_dev *hdev,
942                                                        bdaddr_t *bdaddr);
943 struct inquiry_entry *hci_inquiry_cache_lookup_resolve(struct hci_dev *hdev,
944                                                        bdaddr_t *bdaddr,
945                                                        int state);
946 void hci_inquiry_cache_update_resolve(struct hci_dev *hdev,
947                                       struct inquiry_entry *ie);
948 u32 hci_inquiry_cache_update(struct hci_dev *hdev, struct inquiry_data *data,
949                              bool name_known);
950 void hci_inquiry_cache_flush(struct hci_dev *hdev);
951
952 /* ----- HCI Connections ----- */
953 enum {
954         HCI_CONN_AUTH_PEND,
955         HCI_CONN_REAUTH_PEND,
956         HCI_CONN_ENCRYPT_PEND,
957         HCI_CONN_RSWITCH_PEND,
958         HCI_CONN_MODE_CHANGE_PEND,
959         HCI_CONN_SCO_SETUP_PEND,
960         HCI_CONN_MGMT_CONNECTED,
961         HCI_CONN_SSP_ENABLED,
962         HCI_CONN_SC_ENABLED,
963         HCI_CONN_AES_CCM,
964         HCI_CONN_POWER_SAVE,
965         HCI_CONN_FLUSH_KEY,
966         HCI_CONN_ENCRYPT,
967         HCI_CONN_AUTH,
968         HCI_CONN_SECURE,
969         HCI_CONN_FIPS,
970         HCI_CONN_STK_ENCRYPT,
971         HCI_CONN_AUTH_INITIATOR,
972         HCI_CONN_DROP,
973         HCI_CONN_CANCEL,
974         HCI_CONN_PARAM_REMOVAL_PEND,
975         HCI_CONN_NEW_LINK_KEY,
976         HCI_CONN_SCANNING,
977         HCI_CONN_AUTH_FAILURE,
978         HCI_CONN_PER_ADV,
979         HCI_CONN_BIG_CREATED,
980         HCI_CONN_CREATE_CIS,
981         HCI_CONN_BIG_SYNC,
982         HCI_CONN_BIG_SYNC_FAILED,
983         HCI_CONN_PA_SYNC,
984         HCI_CONN_PA_SYNC_FAILED,
985 };
986
987 static inline bool hci_conn_ssp_enabled(struct hci_conn *conn)
988 {
989         struct hci_dev *hdev = conn->hdev;
990         return hci_dev_test_flag(hdev, HCI_SSP_ENABLED) &&
991                test_bit(HCI_CONN_SSP_ENABLED, &conn->flags);
992 }
993
994 static inline bool hci_conn_sc_enabled(struct hci_conn *conn)
995 {
996         struct hci_dev *hdev = conn->hdev;
997         return hci_dev_test_flag(hdev, HCI_SC_ENABLED) &&
998                test_bit(HCI_CONN_SC_ENABLED, &conn->flags);
999 }
1000
1001 static inline void hci_conn_hash_add(struct hci_dev *hdev, struct hci_conn *c)
1002 {
1003         struct hci_conn_hash *h = &hdev->conn_hash;
1004         list_add_tail_rcu(&c->list, &h->list);
1005         switch (c->type) {
1006         case ACL_LINK:
1007                 h->acl_num++;
1008                 break;
1009         case AMP_LINK:
1010                 h->amp_num++;
1011                 break;
1012         case LE_LINK:
1013                 h->le_num++;
1014                 if (c->role == HCI_ROLE_SLAVE)
1015                         h->le_num_peripheral++;
1016                 break;
1017         case SCO_LINK:
1018         case ESCO_LINK:
1019                 h->sco_num++;
1020                 break;
1021         case ISO_LINK:
1022                 h->iso_num++;
1023                 break;
1024         }
1025 }
1026
1027 static inline void hci_conn_hash_del(struct hci_dev *hdev, struct hci_conn *c)
1028 {
1029         struct hci_conn_hash *h = &hdev->conn_hash;
1030
1031         list_del_rcu(&c->list);
1032         synchronize_rcu();
1033
1034         switch (c->type) {
1035         case ACL_LINK:
1036                 h->acl_num--;
1037                 break;
1038         case AMP_LINK:
1039                 h->amp_num--;
1040                 break;
1041         case LE_LINK:
1042                 h->le_num--;
1043                 if (c->role == HCI_ROLE_SLAVE)
1044                         h->le_num_peripheral--;
1045                 break;
1046         case SCO_LINK:
1047         case ESCO_LINK:
1048                 h->sco_num--;
1049                 break;
1050         case ISO_LINK:
1051                 h->iso_num--;
1052                 break;
1053         }
1054 }
1055
1056 static inline unsigned int hci_conn_num(struct hci_dev *hdev, __u8 type)
1057 {
1058         struct hci_conn_hash *h = &hdev->conn_hash;
1059         switch (type) {
1060         case ACL_LINK:
1061                 return h->acl_num;
1062         case AMP_LINK:
1063                 return h->amp_num;
1064         case LE_LINK:
1065                 return h->le_num;
1066         case SCO_LINK:
1067         case ESCO_LINK:
1068                 return h->sco_num;
1069         case ISO_LINK:
1070                 return h->iso_num;
1071         default:
1072                 return 0;
1073         }
1074 }
1075
1076 static inline unsigned int hci_conn_count(struct hci_dev *hdev)
1077 {
1078         struct hci_conn_hash *c = &hdev->conn_hash;
1079
1080         return c->acl_num + c->amp_num + c->sco_num + c->le_num + c->iso_num;
1081 }
1082
1083 static inline __u8 hci_conn_lookup_type(struct hci_dev *hdev, __u16 handle)
1084 {
1085         struct hci_conn_hash *h = &hdev->conn_hash;
1086         struct hci_conn *c;
1087         __u8 type = INVALID_LINK;
1088
1089         rcu_read_lock();
1090
1091         list_for_each_entry_rcu(c, &h->list, list) {
1092                 if (c->handle == handle) {
1093                         type = c->type;
1094                         break;
1095                 }
1096         }
1097
1098         rcu_read_unlock();
1099
1100         return type;
1101 }
1102
1103 static inline struct hci_conn *hci_conn_hash_lookup_bis(struct hci_dev *hdev,
1104                                                         bdaddr_t *ba, __u8 bis)
1105 {
1106         struct hci_conn_hash *h = &hdev->conn_hash;
1107         struct hci_conn  *c;
1108
1109         rcu_read_lock();
1110
1111         list_for_each_entry_rcu(c, &h->list, list) {
1112                 if (bacmp(&c->dst, ba) || c->type != ISO_LINK)
1113                         continue;
1114
1115                 if (c->iso_qos.bcast.bis == bis) {
1116                         rcu_read_unlock();
1117                         return c;
1118                 }
1119         }
1120         rcu_read_unlock();
1121
1122         return NULL;
1123 }
1124
1125 static inline struct hci_conn *
1126 hci_conn_hash_lookup_per_adv_bis(struct hci_dev *hdev,
1127                                  bdaddr_t *ba,
1128                                  __u8 big, __u8 bis)
1129 {
1130         struct hci_conn_hash *h = &hdev->conn_hash;
1131         struct hci_conn  *c;
1132
1133         rcu_read_lock();
1134
1135         list_for_each_entry_rcu(c, &h->list, list) {
1136                 if (bacmp(&c->dst, ba) || c->type != ISO_LINK ||
1137                         !test_bit(HCI_CONN_PER_ADV, &c->flags))
1138                         continue;
1139
1140                 if (c->iso_qos.bcast.big == big &&
1141                     c->iso_qos.bcast.bis == bis) {
1142                         rcu_read_unlock();
1143                         return c;
1144                 }
1145         }
1146         rcu_read_unlock();
1147
1148         return NULL;
1149 }
1150
1151 static inline struct hci_conn *hci_conn_hash_lookup_handle(struct hci_dev *hdev,
1152                                                                 __u16 handle)
1153 {
1154         struct hci_conn_hash *h = &hdev->conn_hash;
1155         struct hci_conn  *c;
1156
1157         rcu_read_lock();
1158
1159         list_for_each_entry_rcu(c, &h->list, list) {
1160                 if (c->handle == handle) {
1161                         rcu_read_unlock();
1162                         return c;
1163                 }
1164         }
1165         rcu_read_unlock();
1166
1167         return NULL;
1168 }
1169
1170 static inline struct hci_conn *hci_conn_hash_lookup_ba(struct hci_dev *hdev,
1171                                                         __u8 type, bdaddr_t *ba)
1172 {
1173         struct hci_conn_hash *h = &hdev->conn_hash;
1174         struct hci_conn  *c;
1175
1176         rcu_read_lock();
1177
1178         list_for_each_entry_rcu(c, &h->list, list) {
1179                 if (c->type == type && !bacmp(&c->dst, ba)) {
1180                         rcu_read_unlock();
1181                         return c;
1182                 }
1183         }
1184
1185         rcu_read_unlock();
1186
1187         return NULL;
1188 }
1189
1190 static inline struct hci_conn *hci_conn_hash_lookup_le(struct hci_dev *hdev,
1191                                                        bdaddr_t *ba,
1192                                                        __u8 ba_type)
1193 {
1194         struct hci_conn_hash *h = &hdev->conn_hash;
1195         struct hci_conn  *c;
1196
1197         rcu_read_lock();
1198
1199         list_for_each_entry_rcu(c, &h->list, list) {
1200                 if (c->type != LE_LINK)
1201                        continue;
1202
1203                 if (ba_type == c->dst_type && !bacmp(&c->dst, ba)) {
1204                         rcu_read_unlock();
1205                         return c;
1206                 }
1207         }
1208
1209         rcu_read_unlock();
1210
1211         return NULL;
1212 }
1213
1214 static inline struct hci_conn *hci_conn_hash_lookup_cis(struct hci_dev *hdev,
1215                                                         bdaddr_t *ba,
1216                                                         __u8 ba_type,
1217                                                         __u8 cig,
1218                                                         __u8 id)
1219 {
1220         struct hci_conn_hash *h = &hdev->conn_hash;
1221         struct hci_conn  *c;
1222
1223         rcu_read_lock();
1224
1225         list_for_each_entry_rcu(c, &h->list, list) {
1226                 if (c->type != ISO_LINK || !bacmp(&c->dst, BDADDR_ANY))
1227                         continue;
1228
1229                 /* Match CIG ID if set */
1230                 if (cig != BT_ISO_QOS_CIG_UNSET && cig != c->iso_qos.ucast.cig)
1231                         continue;
1232
1233                 /* Match CIS ID if set */
1234                 if (id != BT_ISO_QOS_CIS_UNSET && id != c->iso_qos.ucast.cis)
1235                         continue;
1236
1237                 /* Match destination address if set */
1238                 if (!ba || (ba_type == c->dst_type && !bacmp(&c->dst, ba))) {
1239                         rcu_read_unlock();
1240                         return c;
1241                 }
1242         }
1243
1244         rcu_read_unlock();
1245
1246         return NULL;
1247 }
1248
1249 static inline struct hci_conn *hci_conn_hash_lookup_cig(struct hci_dev *hdev,
1250                                                         __u8 handle)
1251 {
1252         struct hci_conn_hash *h = &hdev->conn_hash;
1253         struct hci_conn  *c;
1254
1255         rcu_read_lock();
1256
1257         list_for_each_entry_rcu(c, &h->list, list) {
1258                 if (c->type != ISO_LINK || !bacmp(&c->dst, BDADDR_ANY))
1259                         continue;
1260
1261                 if (handle == c->iso_qos.ucast.cig) {
1262                         rcu_read_unlock();
1263                         return c;
1264                 }
1265         }
1266
1267         rcu_read_unlock();
1268
1269         return NULL;
1270 }
1271
1272 static inline struct hci_conn *hci_conn_hash_lookup_big(struct hci_dev *hdev,
1273                                                         __u8 handle)
1274 {
1275         struct hci_conn_hash *h = &hdev->conn_hash;
1276         struct hci_conn  *c;
1277
1278         rcu_read_lock();
1279
1280         list_for_each_entry_rcu(c, &h->list, list) {
1281                 if (bacmp(&c->dst, BDADDR_ANY) || c->type != ISO_LINK)
1282                         continue;
1283
1284                 if (handle == c->iso_qos.bcast.big) {
1285                         rcu_read_unlock();
1286                         return c;
1287                 }
1288         }
1289
1290         rcu_read_unlock();
1291
1292         return NULL;
1293 }
1294
1295 static inline struct hci_conn *hci_conn_hash_lookup_big_any_dst(struct hci_dev *hdev,
1296                                                         __u8 handle)
1297 {
1298         struct hci_conn_hash *h = &hdev->conn_hash;
1299         struct hci_conn  *c;
1300
1301         rcu_read_lock();
1302
1303         list_for_each_entry_rcu(c, &h->list, list) {
1304                 if (c->type != ISO_LINK)
1305                         continue;
1306
1307                 if (handle != BT_ISO_QOS_BIG_UNSET && handle == c->iso_qos.bcast.big) {
1308                         rcu_read_unlock();
1309                         return c;
1310                 }
1311         }
1312
1313         rcu_read_unlock();
1314
1315         return NULL;
1316 }
1317
1318 static inline struct hci_conn *
1319 hci_conn_hash_lookup_pa_sync_big_handle(struct hci_dev *hdev, __u8 big)
1320 {
1321         struct hci_conn_hash *h = &hdev->conn_hash;
1322         struct hci_conn  *c;
1323
1324         rcu_read_lock();
1325
1326         list_for_each_entry_rcu(c, &h->list, list) {
1327                 if (c->type != ISO_LINK ||
1328                         !test_bit(HCI_CONN_PA_SYNC, &c->flags))
1329                         continue;
1330
1331                 if (c->iso_qos.bcast.big == big) {
1332                         rcu_read_unlock();
1333                         return c;
1334                 }
1335         }
1336         rcu_read_unlock();
1337
1338         return NULL;
1339 }
1340
1341 static inline struct hci_conn *
1342 hci_conn_hash_lookup_pa_sync_handle(struct hci_dev *hdev, __u16 sync_handle)
1343 {
1344         struct hci_conn_hash *h = &hdev->conn_hash;
1345         struct hci_conn  *c;
1346
1347         rcu_read_lock();
1348
1349         list_for_each_entry_rcu(c, &h->list, list) {
1350                 if (c->type != ISO_LINK ||
1351                         !test_bit(HCI_CONN_PA_SYNC, &c->flags))
1352                         continue;
1353
1354                 if (c->sync_handle == sync_handle) {
1355                         rcu_read_unlock();
1356                         return c;
1357                 }
1358         }
1359         rcu_read_unlock();
1360
1361         return NULL;
1362 }
1363
1364 static inline struct hci_conn *hci_conn_hash_lookup_state(struct hci_dev *hdev,
1365                                                         __u8 type, __u16 state)
1366 {
1367         struct hci_conn_hash *h = &hdev->conn_hash;
1368         struct hci_conn  *c;
1369
1370         rcu_read_lock();
1371
1372         list_for_each_entry_rcu(c, &h->list, list) {
1373                 if (c->type == type && c->state == state) {
1374                         rcu_read_unlock();
1375                         return c;
1376                 }
1377         }
1378
1379         rcu_read_unlock();
1380
1381         return NULL;
1382 }
1383
1384 typedef void (*hci_conn_func_t)(struct hci_conn *conn, void *data);
1385 static inline void hci_conn_hash_list_state(struct hci_dev *hdev,
1386                                             hci_conn_func_t func, __u8 type,
1387                                             __u16 state, void *data)
1388 {
1389         struct hci_conn_hash *h = &hdev->conn_hash;
1390         struct hci_conn  *c;
1391
1392         if (!func)
1393                 return;
1394
1395         rcu_read_lock();
1396
1397         list_for_each_entry_rcu(c, &h->list, list) {
1398                 if (c->type == type && c->state == state)
1399                         func(c, data);
1400         }
1401
1402         rcu_read_unlock();
1403 }
1404
1405 static inline struct hci_conn *hci_lookup_le_connect(struct hci_dev *hdev)
1406 {
1407         struct hci_conn_hash *h = &hdev->conn_hash;
1408         struct hci_conn  *c;
1409
1410         rcu_read_lock();
1411
1412         list_for_each_entry_rcu(c, &h->list, list) {
1413                 if (c->type == LE_LINK && c->state == BT_CONNECT &&
1414                     !test_bit(HCI_CONN_SCANNING, &c->flags)) {
1415                         rcu_read_unlock();
1416                         return c;
1417                 }
1418         }
1419
1420         rcu_read_unlock();
1421
1422         return NULL;
1423 }
1424
1425 /* Returns true if an le connection is in the scanning state */
1426 static inline bool hci_is_le_conn_scanning(struct hci_dev *hdev)
1427 {
1428         struct hci_conn_hash *h = &hdev->conn_hash;
1429         struct hci_conn  *c;
1430
1431         rcu_read_lock();
1432
1433         list_for_each_entry_rcu(c, &h->list, list) {
1434                 if (c->type == LE_LINK && c->state == BT_CONNECT &&
1435                     test_bit(HCI_CONN_SCANNING, &c->flags)) {
1436                         rcu_read_unlock();
1437                         return true;
1438                 }
1439         }
1440
1441         rcu_read_unlock();
1442
1443         return false;
1444 }
1445
1446 int hci_disconnect(struct hci_conn *conn, __u8 reason);
1447 bool hci_setup_sync(struct hci_conn *conn, __u16 handle);
1448 void hci_sco_setup(struct hci_conn *conn, __u8 status);
1449 bool hci_iso_setup_path(struct hci_conn *conn);
1450 int hci_le_create_cis_pending(struct hci_dev *hdev);
1451 int hci_conn_check_create_cis(struct hci_conn *conn);
1452
1453 struct hci_conn *hci_conn_add(struct hci_dev *hdev, int type, bdaddr_t *dst,
1454                               u8 role, u16 handle);
1455 struct hci_conn *hci_conn_add_unset(struct hci_dev *hdev, int type,
1456                                     bdaddr_t *dst, u8 role);
1457 void hci_conn_del(struct hci_conn *conn);
1458 void hci_conn_hash_flush(struct hci_dev *hdev);
1459 void hci_conn_check_pending(struct hci_dev *hdev);
1460
1461 struct hci_chan *hci_chan_create(struct hci_conn *conn);
1462 void hci_chan_del(struct hci_chan *chan);
1463 void hci_chan_list_flush(struct hci_conn *conn);
1464 struct hci_chan *hci_chan_lookup_handle(struct hci_dev *hdev, __u16 handle);
1465
1466 struct hci_conn *hci_connect_le_scan(struct hci_dev *hdev, bdaddr_t *dst,
1467                                      u8 dst_type, u8 sec_level,
1468                                      u16 conn_timeout,
1469                                      enum conn_reasons conn_reason);
1470 struct hci_conn *hci_connect_le(struct hci_dev *hdev, bdaddr_t *dst,
1471                                 u8 dst_type, bool dst_resolved, u8 sec_level,
1472                                 u16 conn_timeout, u8 role);
1473 struct hci_conn *hci_connect_acl(struct hci_dev *hdev, bdaddr_t *dst,
1474                                  u8 sec_level, u8 auth_type,
1475                                  enum conn_reasons conn_reason);
1476 struct hci_conn *hci_connect_sco(struct hci_dev *hdev, int type, bdaddr_t *dst,
1477                                  __u16 setting, struct bt_codec *codec);
1478 struct hci_conn *hci_bind_cis(struct hci_dev *hdev, bdaddr_t *dst,
1479                               __u8 dst_type, struct bt_iso_qos *qos);
1480 struct hci_conn *hci_bind_bis(struct hci_dev *hdev, bdaddr_t *dst,
1481                               struct bt_iso_qos *qos,
1482                               __u8 base_len, __u8 *base);
1483 struct hci_conn *hci_connect_cis(struct hci_dev *hdev, bdaddr_t *dst,
1484                                  __u8 dst_type, struct bt_iso_qos *qos);
1485 struct hci_conn *hci_connect_bis(struct hci_dev *hdev, bdaddr_t *dst,
1486                                  __u8 dst_type, struct bt_iso_qos *qos,
1487                                  __u8 data_len, __u8 *data);
1488 int hci_pa_create_sync(struct hci_dev *hdev, bdaddr_t *dst, __u8 dst_type,
1489                        __u8 sid, struct bt_iso_qos *qos);
1490 int hci_le_big_create_sync(struct hci_dev *hdev, struct hci_conn *hcon,
1491                            struct bt_iso_qos *qos,
1492                            __u16 sync_handle, __u8 num_bis, __u8 bis[]);
1493 int hci_conn_check_link_mode(struct hci_conn *conn);
1494 int hci_conn_check_secure(struct hci_conn *conn, __u8 sec_level);
1495 int hci_conn_security(struct hci_conn *conn, __u8 sec_level, __u8 auth_type,
1496                       bool initiator);
1497 int hci_conn_switch_role(struct hci_conn *conn, __u8 role);
1498
1499 void hci_conn_enter_active_mode(struct hci_conn *conn, __u8 force_active);
1500
1501 void hci_conn_failed(struct hci_conn *conn, u8 status);
1502 u8 hci_conn_set_handle(struct hci_conn *conn, u16 handle);
1503
1504 /*
1505  * hci_conn_get() and hci_conn_put() are used to control the life-time of an
1506  * "hci_conn" object. They do not guarantee that the hci_conn object is running,
1507  * working or anything else. They just guarantee that the object is available
1508  * and can be dereferenced. So you can use its locks, local variables and any
1509  * other constant data.
1510  * Before accessing runtime data, you _must_ lock the object and then check that
1511  * it is still running. As soon as you release the locks, the connection might
1512  * get dropped, though.
1513  *
1514  * On the other hand, hci_conn_hold() and hci_conn_drop() are used to control
1515  * how long the underlying connection is held. So every channel that runs on the
1516  * hci_conn object calls this to prevent the connection from disappearing. As
1517  * long as you hold a device, you must also guarantee that you have a valid
1518  * reference to the device via hci_conn_get() (or the initial reference from
1519  * hci_conn_add()).
1520  * The hold()/drop() ref-count is known to drop below 0 sometimes, which doesn't
1521  * break because nobody cares for that. But this means, we cannot use
1522  * _get()/_drop() in it, but require the caller to have a valid ref (FIXME).
1523  */
1524
1525 static inline struct hci_conn *hci_conn_get(struct hci_conn *conn)
1526 {
1527         get_device(&conn->dev);
1528         return conn;
1529 }
1530
1531 static inline void hci_conn_put(struct hci_conn *conn)
1532 {
1533         put_device(&conn->dev);
1534 }
1535
1536 static inline struct hci_conn *hci_conn_hold(struct hci_conn *conn)
1537 {
1538         BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1539
1540         atomic_inc(&conn->refcnt);
1541         cancel_delayed_work(&conn->disc_work);
1542
1543         return conn;
1544 }
1545
1546 static inline void hci_conn_drop(struct hci_conn *conn)
1547 {
1548         BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1549
1550         if (atomic_dec_and_test(&conn->refcnt)) {
1551                 unsigned long timeo;
1552
1553                 switch (conn->type) {
1554                 case ACL_LINK:
1555                 case LE_LINK:
1556                         cancel_delayed_work(&conn->idle_work);
1557                         if (conn->state == BT_CONNECTED) {
1558                                 timeo = conn->disc_timeout;
1559                                 if (!conn->out)
1560                                         timeo *= 2;
1561                         } else {
1562                                 timeo = 0;
1563                         }
1564                         break;
1565
1566                 case AMP_LINK:
1567                         timeo = conn->disc_timeout;
1568                         break;
1569
1570                 default:
1571                         timeo = 0;
1572                         break;
1573                 }
1574
1575                 cancel_delayed_work(&conn->disc_work);
1576                 queue_delayed_work(conn->hdev->workqueue,
1577                                    &conn->disc_work, timeo);
1578         }
1579 }
1580
1581 /* ----- HCI Devices ----- */
1582 static inline void hci_dev_put(struct hci_dev *d)
1583 {
1584         BT_DBG("%s orig refcnt %d", d->name,
1585                kref_read(&d->dev.kobj.kref));
1586
1587         put_device(&d->dev);
1588 }
1589
1590 static inline struct hci_dev *hci_dev_hold(struct hci_dev *d)
1591 {
1592         BT_DBG("%s orig refcnt %d", d->name,
1593                kref_read(&d->dev.kobj.kref));
1594
1595         get_device(&d->dev);
1596         return d;
1597 }
1598
1599 #define hci_dev_lock(d)         mutex_lock(&d->lock)
1600 #define hci_dev_unlock(d)       mutex_unlock(&d->lock)
1601
1602 #define to_hci_dev(d) container_of(d, struct hci_dev, dev)
1603 #define to_hci_conn(c) container_of(c, struct hci_conn, dev)
1604
1605 static inline void *hci_get_drvdata(struct hci_dev *hdev)
1606 {
1607         return dev_get_drvdata(&hdev->dev);
1608 }
1609
1610 static inline void hci_set_drvdata(struct hci_dev *hdev, void *data)
1611 {
1612         dev_set_drvdata(&hdev->dev, data);
1613 }
1614
1615 static inline void *hci_get_priv(struct hci_dev *hdev)
1616 {
1617         return (char *)hdev + sizeof(*hdev);
1618 }
1619
1620 struct hci_dev *hci_dev_get(int index);
1621 struct hci_dev *hci_get_route(bdaddr_t *dst, bdaddr_t *src, u8 src_type);
1622
1623 struct hci_dev *hci_alloc_dev_priv(int sizeof_priv);
1624
1625 static inline struct hci_dev *hci_alloc_dev(void)
1626 {
1627         return hci_alloc_dev_priv(0);
1628 }
1629
1630 void hci_free_dev(struct hci_dev *hdev);
1631 int hci_register_dev(struct hci_dev *hdev);
1632 void hci_unregister_dev(struct hci_dev *hdev);
1633 void hci_release_dev(struct hci_dev *hdev);
1634 int hci_register_suspend_notifier(struct hci_dev *hdev);
1635 int hci_unregister_suspend_notifier(struct hci_dev *hdev);
1636 int hci_suspend_dev(struct hci_dev *hdev);
1637 int hci_resume_dev(struct hci_dev *hdev);
1638 int hci_reset_dev(struct hci_dev *hdev);
1639 int hci_recv_frame(struct hci_dev *hdev, struct sk_buff *skb);
1640 int hci_recv_diag(struct hci_dev *hdev, struct sk_buff *skb);
1641 __printf(2, 3) void hci_set_hw_info(struct hci_dev *hdev, const char *fmt, ...);
1642 __printf(2, 3) void hci_set_fw_info(struct hci_dev *hdev, const char *fmt, ...);
1643
1644 static inline void hci_set_msft_opcode(struct hci_dev *hdev, __u16 opcode)
1645 {
1646 #if IS_ENABLED(CONFIG_BT_MSFTEXT)
1647         hdev->msft_opcode = opcode;
1648 #endif
1649 }
1650
1651 static inline void hci_set_aosp_capable(struct hci_dev *hdev)
1652 {
1653 #if IS_ENABLED(CONFIG_BT_AOSPEXT)
1654         hdev->aosp_capable = true;
1655 #endif
1656 }
1657
1658 static inline void hci_devcd_setup(struct hci_dev *hdev)
1659 {
1660 #ifdef CONFIG_DEV_COREDUMP
1661         INIT_WORK(&hdev->dump.dump_rx, hci_devcd_rx);
1662         INIT_DELAYED_WORK(&hdev->dump.dump_timeout, hci_devcd_timeout);
1663         skb_queue_head_init(&hdev->dump.dump_q);
1664 #endif
1665 }
1666
1667 int hci_dev_open(__u16 dev);
1668 int hci_dev_close(__u16 dev);
1669 int hci_dev_do_close(struct hci_dev *hdev);
1670 int hci_dev_reset(__u16 dev);
1671 int hci_dev_reset_stat(__u16 dev);
1672 int hci_dev_cmd(unsigned int cmd, void __user *arg);
1673 int hci_get_dev_list(void __user *arg);
1674 int hci_get_dev_info(void __user *arg);
1675 int hci_get_conn_list(void __user *arg);
1676 int hci_get_conn_info(struct hci_dev *hdev, void __user *arg);
1677 int hci_get_auth_info(struct hci_dev *hdev, void __user *arg);
1678 int hci_inquiry(void __user *arg);
1679
1680 struct bdaddr_list *hci_bdaddr_list_lookup(struct list_head *list,
1681                                            bdaddr_t *bdaddr, u8 type);
1682 struct bdaddr_list_with_irk *hci_bdaddr_list_lookup_with_irk(
1683                                     struct list_head *list, bdaddr_t *bdaddr,
1684                                     u8 type);
1685 struct bdaddr_list_with_flags *
1686 hci_bdaddr_list_lookup_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1687                                   u8 type);
1688 int hci_bdaddr_list_add(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1689 int hci_bdaddr_list_add_with_irk(struct list_head *list, bdaddr_t *bdaddr,
1690                                  u8 type, u8 *peer_irk, u8 *local_irk);
1691 int hci_bdaddr_list_add_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1692                                    u8 type, u32 flags);
1693 int hci_bdaddr_list_del(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1694 int hci_bdaddr_list_del_with_irk(struct list_head *list, bdaddr_t *bdaddr,
1695                                  u8 type);
1696 int hci_bdaddr_list_del_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1697                                    u8 type);
1698 void hci_bdaddr_list_clear(struct list_head *list);
1699
1700 struct hci_conn_params *hci_conn_params_lookup(struct hci_dev *hdev,
1701                                                bdaddr_t *addr, u8 addr_type);
1702 struct hci_conn_params *hci_conn_params_add(struct hci_dev *hdev,
1703                                             bdaddr_t *addr, u8 addr_type);
1704 void hci_conn_params_del(struct hci_dev *hdev, bdaddr_t *addr, u8 addr_type);
1705 void hci_conn_params_clear_disabled(struct hci_dev *hdev);
1706 void hci_conn_params_free(struct hci_conn_params *param);
1707
1708 void hci_pend_le_list_del_init(struct hci_conn_params *param);
1709 void hci_pend_le_list_add(struct hci_conn_params *param,
1710                           struct list_head *list);
1711 struct hci_conn_params *hci_pend_le_action_lookup(struct list_head *list,
1712                                                   bdaddr_t *addr,
1713                                                   u8 addr_type);
1714
1715 void hci_uuids_clear(struct hci_dev *hdev);
1716
1717 void hci_link_keys_clear(struct hci_dev *hdev);
1718 struct link_key *hci_find_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1719 struct link_key *hci_add_link_key(struct hci_dev *hdev, struct hci_conn *conn,
1720                                   bdaddr_t *bdaddr, u8 *val, u8 type,
1721                                   u8 pin_len, bool *persistent);
1722 struct smp_ltk *hci_add_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1723                             u8 addr_type, u8 type, u8 authenticated,
1724                             u8 tk[16], u8 enc_size, __le16 ediv, __le64 rand);
1725 struct smp_ltk *hci_find_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1726                              u8 addr_type, u8 role);
1727 int hci_remove_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 bdaddr_type);
1728 void hci_smp_ltks_clear(struct hci_dev *hdev);
1729 int hci_remove_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1730
1731 struct smp_irk *hci_find_irk_by_rpa(struct hci_dev *hdev, bdaddr_t *rpa);
1732 struct smp_irk *hci_find_irk_by_addr(struct hci_dev *hdev, bdaddr_t *bdaddr,
1733                                      u8 addr_type);
1734 struct smp_irk *hci_add_irk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1735                             u8 addr_type, u8 val[16], bdaddr_t *rpa);
1736 void hci_remove_irk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 addr_type);
1737 bool hci_is_blocked_key(struct hci_dev *hdev, u8 type, u8 val[16]);
1738 void hci_blocked_keys_clear(struct hci_dev *hdev);
1739 void hci_smp_irks_clear(struct hci_dev *hdev);
1740
1741 bool hci_bdaddr_is_paired(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type);
1742
1743 void hci_remote_oob_data_clear(struct hci_dev *hdev);
1744 struct oob_data *hci_find_remote_oob_data(struct hci_dev *hdev,
1745                                           bdaddr_t *bdaddr, u8 bdaddr_type);
1746 int hci_add_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1747                             u8 bdaddr_type, u8 *hash192, u8 *rand192,
1748                             u8 *hash256, u8 *rand256);
1749 int hci_remove_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1750                                u8 bdaddr_type);
1751
1752 void hci_adv_instances_clear(struct hci_dev *hdev);
1753 struct adv_info *hci_find_adv_instance(struct hci_dev *hdev, u8 instance);
1754 struct adv_info *hci_get_next_instance(struct hci_dev *hdev, u8 instance);
1755 struct adv_info *hci_add_adv_instance(struct hci_dev *hdev, u8 instance,
1756                                       u32 flags, u16 adv_data_len, u8 *adv_data,
1757                                       u16 scan_rsp_len, u8 *scan_rsp_data,
1758                                       u16 timeout, u16 duration, s8 tx_power,
1759                                       u32 min_interval, u32 max_interval,
1760                                       u8 mesh_handle);
1761 struct adv_info *hci_add_per_instance(struct hci_dev *hdev, u8 instance,
1762                                       u32 flags, u8 data_len, u8 *data,
1763                                       u32 min_interval, u32 max_interval);
1764 int hci_set_adv_instance_data(struct hci_dev *hdev, u8 instance,
1765                          u16 adv_data_len, u8 *adv_data,
1766                          u16 scan_rsp_len, u8 *scan_rsp_data);
1767 int hci_remove_adv_instance(struct hci_dev *hdev, u8 instance);
1768 void hci_adv_instances_set_rpa_expired(struct hci_dev *hdev, bool rpa_expired);
1769 u32 hci_adv_instance_flags(struct hci_dev *hdev, u8 instance);
1770 bool hci_adv_instance_is_scannable(struct hci_dev *hdev, u8 instance);
1771
1772 void hci_adv_monitors_clear(struct hci_dev *hdev);
1773 void hci_free_adv_monitor(struct hci_dev *hdev, struct adv_monitor *monitor);
1774 int hci_add_adv_monitor(struct hci_dev *hdev, struct adv_monitor *monitor);
1775 int hci_remove_single_adv_monitor(struct hci_dev *hdev, u16 handle);
1776 int hci_remove_all_adv_monitor(struct hci_dev *hdev);
1777 bool hci_is_adv_monitoring(struct hci_dev *hdev);
1778 int hci_get_adv_monitor_offload_ext(struct hci_dev *hdev);
1779
1780 void hci_event_packet(struct hci_dev *hdev, struct sk_buff *skb);
1781
1782 void hci_init_sysfs(struct hci_dev *hdev);
1783 void hci_conn_init_sysfs(struct hci_conn *conn);
1784 void hci_conn_add_sysfs(struct hci_conn *conn);
1785 void hci_conn_del_sysfs(struct hci_conn *conn);
1786
1787 #define SET_HCIDEV_DEV(hdev, pdev) ((hdev)->dev.parent = (pdev))
1788 #define GET_HCIDEV_DEV(hdev) ((hdev)->dev.parent)
1789
1790 /* ----- LMP capabilities ----- */
1791 #define lmp_encrypt_capable(dev)   ((dev)->features[0][0] & LMP_ENCRYPT)
1792 #define lmp_rswitch_capable(dev)   ((dev)->features[0][0] & LMP_RSWITCH)
1793 #define lmp_hold_capable(dev)      ((dev)->features[0][0] & LMP_HOLD)
1794 #define lmp_sniff_capable(dev)     ((dev)->features[0][0] & LMP_SNIFF)
1795 #define lmp_park_capable(dev)      ((dev)->features[0][1] & LMP_PARK)
1796 #define lmp_inq_rssi_capable(dev)  ((dev)->features[0][3] & LMP_RSSI_INQ)
1797 #define lmp_esco_capable(dev)      ((dev)->features[0][3] & LMP_ESCO)
1798 #define lmp_bredr_capable(dev)     (!((dev)->features[0][4] & LMP_NO_BREDR))
1799 #define lmp_le_capable(dev)        ((dev)->features[0][4] & LMP_LE)
1800 #define lmp_sniffsubr_capable(dev) ((dev)->features[0][5] & LMP_SNIFF_SUBR)
1801 #define lmp_pause_enc_capable(dev) ((dev)->features[0][5] & LMP_PAUSE_ENC)
1802 #define lmp_esco_2m_capable(dev)   ((dev)->features[0][5] & LMP_EDR_ESCO_2M)
1803 #define lmp_ext_inq_capable(dev)   ((dev)->features[0][6] & LMP_EXT_INQ)
1804 #define lmp_le_br_capable(dev)     (!!((dev)->features[0][6] & LMP_SIMUL_LE_BR))
1805 #define lmp_ssp_capable(dev)       ((dev)->features[0][6] & LMP_SIMPLE_PAIR)
1806 #define lmp_no_flush_capable(dev)  ((dev)->features[0][6] & LMP_NO_FLUSH)
1807 #define lmp_lsto_capable(dev)      ((dev)->features[0][7] & LMP_LSTO)
1808 #define lmp_inq_tx_pwr_capable(dev) ((dev)->features[0][7] & LMP_INQ_TX_PWR)
1809 #define lmp_ext_feat_capable(dev)  ((dev)->features[0][7] & LMP_EXTFEATURES)
1810 #define lmp_transp_capable(dev)    ((dev)->features[0][2] & LMP_TRANSPARENT)
1811 #define lmp_edr_2m_capable(dev)    ((dev)->features[0][3] & LMP_EDR_2M)
1812 #define lmp_edr_3m_capable(dev)    ((dev)->features[0][3] & LMP_EDR_3M)
1813 #define lmp_edr_3slot_capable(dev) ((dev)->features[0][4] & LMP_EDR_3SLOT)
1814 #define lmp_edr_5slot_capable(dev) ((dev)->features[0][5] & LMP_EDR_5SLOT)
1815
1816 /* ----- Extended LMP capabilities ----- */
1817 #define lmp_cpb_central_capable(dev) ((dev)->features[2][0] & LMP_CPB_CENTRAL)
1818 #define lmp_cpb_peripheral_capable(dev) ((dev)->features[2][0] & LMP_CPB_PERIPHERAL)
1819 #define lmp_sync_train_capable(dev) ((dev)->features[2][0] & LMP_SYNC_TRAIN)
1820 #define lmp_sync_scan_capable(dev)  ((dev)->features[2][0] & LMP_SYNC_SCAN)
1821 #define lmp_sc_capable(dev)         ((dev)->features[2][1] & LMP_SC)
1822 #define lmp_ping_capable(dev)       ((dev)->features[2][1] & LMP_PING)
1823
1824 /* ----- Host capabilities ----- */
1825 #define lmp_host_ssp_capable(dev)  ((dev)->features[1][0] & LMP_HOST_SSP)
1826 #define lmp_host_sc_capable(dev)   ((dev)->features[1][0] & LMP_HOST_SC)
1827 #define lmp_host_le_capable(dev)   (!!((dev)->features[1][0] & LMP_HOST_LE))
1828 #define lmp_host_le_br_capable(dev) (!!((dev)->features[1][0] & LMP_HOST_LE_BREDR))
1829
1830 #define hdev_is_powered(dev)   (test_bit(HCI_UP, &(dev)->flags) && \
1831                                 !hci_dev_test_flag(dev, HCI_AUTO_OFF))
1832 #define bredr_sc_enabled(dev)  (lmp_sc_capable(dev) && \
1833                                 hci_dev_test_flag(dev, HCI_SC_ENABLED))
1834 #define rpa_valid(dev)         (bacmp(&dev->rpa, BDADDR_ANY) && \
1835                                 !hci_dev_test_flag(dev, HCI_RPA_EXPIRED))
1836 #define adv_rpa_valid(adv)     (bacmp(&adv->random_addr, BDADDR_ANY) && \
1837                                 !adv->rpa_expired)
1838
1839 #define scan_1m(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_1M) || \
1840                       ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_1M))
1841
1842 #define le_2m_capable(dev) (((dev)->le_features[1] & HCI_LE_PHY_2M))
1843
1844 #define scan_2m(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_2M) || \
1845                       ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_2M))
1846
1847 #define le_coded_capable(dev) (((dev)->le_features[1] & HCI_LE_PHY_CODED) && \
1848                                !test_bit(HCI_QUIRK_BROKEN_LE_CODED, \
1849                                          &(dev)->quirks))
1850
1851 #define scan_coded(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_CODED) || \
1852                          ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_CODED))
1853
1854 #define ll_privacy_capable(dev) ((dev)->le_features[0] & HCI_LE_LL_PRIVACY)
1855
1856 /* Use LL Privacy based address resolution if supported */
1857 #define use_ll_privacy(dev) (ll_privacy_capable(dev) && \
1858                              hci_dev_test_flag(dev, HCI_ENABLE_LL_PRIVACY))
1859
1860 #define privacy_mode_capable(dev) (use_ll_privacy(dev) && \
1861                                    (hdev->commands[39] & 0x04))
1862
1863 /* Use enhanced synchronous connection if command is supported and its quirk
1864  * has not been set.
1865  */
1866 #define enhanced_sync_conn_capable(dev) \
1867         (((dev)->commands[29] & 0x08) && \
1868          !test_bit(HCI_QUIRK_BROKEN_ENHANCED_SETUP_SYNC_CONN, &(dev)->quirks))
1869
1870 /* Use ext scanning if set ext scan param and ext scan enable is supported */
1871 #define use_ext_scan(dev) (((dev)->commands[37] & 0x20) && \
1872                            ((dev)->commands[37] & 0x40) && \
1873                            !test_bit(HCI_QUIRK_BROKEN_EXT_SCAN, &(dev)->quirks))
1874
1875 /* Use ext create connection if command is supported */
1876 #define use_ext_conn(dev) ((dev)->commands[37] & 0x80)
1877
1878 /* Extended advertising support */
1879 #define ext_adv_capable(dev) (((dev)->le_features[1] & HCI_LE_EXT_ADV))
1880
1881 /* Maximum advertising length */
1882 #define max_adv_len(dev) \
1883         (ext_adv_capable(dev) ? HCI_MAX_EXT_AD_LENGTH : HCI_MAX_AD_LENGTH)
1884
1885 /* BLUETOOTH CORE SPECIFICATION Version 5.3 | Vol 4, Part E page 1789:
1886  *
1887  * C24: Mandatory if the LE Controller supports Connection State and either
1888  * LE Feature (LL Privacy) or LE Feature (Extended Advertising) is supported
1889  */
1890 #define use_enhanced_conn_complete(dev) (ll_privacy_capable(dev) || \
1891                                          ext_adv_capable(dev))
1892
1893 /* Periodic advertising support */
1894 #define per_adv_capable(dev) (((dev)->le_features[1] & HCI_LE_PERIODIC_ADV))
1895
1896 /* CIS Master/Slave and BIS support */
1897 #define iso_capable(dev) (cis_capable(dev) || bis_capable(dev))
1898 #define cis_capable(dev) \
1899         (cis_central_capable(dev) || cis_peripheral_capable(dev))
1900 #define cis_central_capable(dev) \
1901         ((dev)->le_features[3] & HCI_LE_CIS_CENTRAL)
1902 #define cis_peripheral_capable(dev) \
1903         ((dev)->le_features[3] & HCI_LE_CIS_PERIPHERAL)
1904 #define bis_capable(dev) ((dev)->le_features[3] & HCI_LE_ISO_BROADCASTER)
1905 #define sync_recv_capable(dev) ((dev)->le_features[3] & HCI_LE_ISO_SYNC_RECEIVER)
1906
1907 #define mws_transport_config_capable(dev) (((dev)->commands[30] & 0x08) && \
1908         (!test_bit(HCI_QUIRK_BROKEN_MWS_TRANSPORT_CONFIG, &(dev)->quirks)))
1909
1910 /* ----- HCI protocols ----- */
1911 #define HCI_PROTO_DEFER             0x01
1912
1913 static inline int hci_proto_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
1914                                         __u8 type, __u8 *flags)
1915 {
1916         switch (type) {
1917         case ACL_LINK:
1918                 return l2cap_connect_ind(hdev, bdaddr);
1919
1920         case SCO_LINK:
1921         case ESCO_LINK:
1922                 return sco_connect_ind(hdev, bdaddr, flags);
1923
1924         case ISO_LINK:
1925                 return iso_connect_ind(hdev, bdaddr, flags);
1926
1927         default:
1928                 BT_ERR("unknown link type %d", type);
1929                 return -EINVAL;
1930         }
1931 }
1932
1933 static inline int hci_proto_disconn_ind(struct hci_conn *conn)
1934 {
1935         if (conn->type != ACL_LINK && conn->type != LE_LINK)
1936                 return HCI_ERROR_REMOTE_USER_TERM;
1937
1938         return l2cap_disconn_ind(conn);
1939 }
1940
1941 /* ----- HCI callbacks ----- */
1942 struct hci_cb {
1943         struct list_head list;
1944
1945         char *name;
1946
1947         void (*connect_cfm)     (struct hci_conn *conn, __u8 status);
1948         void (*disconn_cfm)     (struct hci_conn *conn, __u8 status);
1949         void (*security_cfm)    (struct hci_conn *conn, __u8 status,
1950                                                                 __u8 encrypt);
1951         void (*key_change_cfm)  (struct hci_conn *conn, __u8 status);
1952         void (*role_switch_cfm) (struct hci_conn *conn, __u8 status, __u8 role);
1953 };
1954
1955 static inline void hci_connect_cfm(struct hci_conn *conn, __u8 status)
1956 {
1957         struct hci_cb *cb;
1958
1959         mutex_lock(&hci_cb_list_lock);
1960         list_for_each_entry(cb, &hci_cb_list, list) {
1961                 if (cb->connect_cfm)
1962                         cb->connect_cfm(conn, status);
1963         }
1964         mutex_unlock(&hci_cb_list_lock);
1965
1966         if (conn->connect_cfm_cb)
1967                 conn->connect_cfm_cb(conn, status);
1968 }
1969
1970 static inline void hci_disconn_cfm(struct hci_conn *conn, __u8 reason)
1971 {
1972         struct hci_cb *cb;
1973
1974         mutex_lock(&hci_cb_list_lock);
1975         list_for_each_entry(cb, &hci_cb_list, list) {
1976                 if (cb->disconn_cfm)
1977                         cb->disconn_cfm(conn, reason);
1978         }
1979         mutex_unlock(&hci_cb_list_lock);
1980
1981         if (conn->disconn_cfm_cb)
1982                 conn->disconn_cfm_cb(conn, reason);
1983 }
1984
1985 static inline void hci_auth_cfm(struct hci_conn *conn, __u8 status)
1986 {
1987         struct hci_cb *cb;
1988         __u8 encrypt;
1989
1990         if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->flags))
1991                 return;
1992
1993         encrypt = test_bit(HCI_CONN_ENCRYPT, &conn->flags) ? 0x01 : 0x00;
1994
1995         mutex_lock(&hci_cb_list_lock);
1996         list_for_each_entry(cb, &hci_cb_list, list) {
1997                 if (cb->security_cfm)
1998                         cb->security_cfm(conn, status, encrypt);
1999         }
2000         mutex_unlock(&hci_cb_list_lock);
2001
2002         if (conn->security_cfm_cb)
2003                 conn->security_cfm_cb(conn, status);
2004 }
2005
2006 static inline void hci_encrypt_cfm(struct hci_conn *conn, __u8 status)
2007 {
2008         struct hci_cb *cb;
2009         __u8 encrypt;
2010
2011         if (conn->state == BT_CONFIG) {
2012                 if (!status)
2013                         conn->state = BT_CONNECTED;
2014
2015                 hci_connect_cfm(conn, status);
2016                 hci_conn_drop(conn);
2017                 return;
2018         }
2019
2020         if (!test_bit(HCI_CONN_ENCRYPT, &conn->flags))
2021                 encrypt = 0x00;
2022         else if (test_bit(HCI_CONN_AES_CCM, &conn->flags))
2023                 encrypt = 0x02;
2024         else
2025                 encrypt = 0x01;
2026
2027         if (!status) {
2028                 if (conn->sec_level == BT_SECURITY_SDP)
2029                         conn->sec_level = BT_SECURITY_LOW;
2030
2031                 if (conn->pending_sec_level > conn->sec_level)
2032                         conn->sec_level = conn->pending_sec_level;
2033         }
2034
2035         mutex_lock(&hci_cb_list_lock);
2036         list_for_each_entry(cb, &hci_cb_list, list) {
2037                 if (cb->security_cfm)
2038                         cb->security_cfm(conn, status, encrypt);
2039         }
2040         mutex_unlock(&hci_cb_list_lock);
2041
2042         if (conn->security_cfm_cb)
2043                 conn->security_cfm_cb(conn, status);
2044 }
2045
2046 static inline void hci_key_change_cfm(struct hci_conn *conn, __u8 status)
2047 {
2048         struct hci_cb *cb;
2049
2050         mutex_lock(&hci_cb_list_lock);
2051         list_for_each_entry(cb, &hci_cb_list, list) {
2052                 if (cb->key_change_cfm)
2053                         cb->key_change_cfm(conn, status);
2054         }
2055         mutex_unlock(&hci_cb_list_lock);
2056 }
2057
2058 static inline void hci_role_switch_cfm(struct hci_conn *conn, __u8 status,
2059                                                                 __u8 role)
2060 {
2061         struct hci_cb *cb;
2062
2063         mutex_lock(&hci_cb_list_lock);
2064         list_for_each_entry(cb, &hci_cb_list, list) {
2065                 if (cb->role_switch_cfm)
2066                         cb->role_switch_cfm(conn, status, role);
2067         }
2068         mutex_unlock(&hci_cb_list_lock);
2069 }
2070
2071 static inline bool hci_bdaddr_is_rpa(bdaddr_t *bdaddr, u8 addr_type)
2072 {
2073         if (addr_type != ADDR_LE_DEV_RANDOM)
2074                 return false;
2075
2076         if ((bdaddr->b[5] & 0xc0) == 0x40)
2077                return true;
2078
2079         return false;
2080 }
2081
2082 static inline bool hci_is_identity_address(bdaddr_t *addr, u8 addr_type)
2083 {
2084         if (addr_type == ADDR_LE_DEV_PUBLIC)
2085                 return true;
2086
2087         /* Check for Random Static address type */
2088         if ((addr->b[5] & 0xc0) == 0xc0)
2089                 return true;
2090
2091         return false;
2092 }
2093
2094 static inline struct smp_irk *hci_get_irk(struct hci_dev *hdev,
2095                                           bdaddr_t *bdaddr, u8 addr_type)
2096 {
2097         if (!hci_bdaddr_is_rpa(bdaddr, addr_type))
2098                 return NULL;
2099
2100         return hci_find_irk_by_rpa(hdev, bdaddr);
2101 }
2102
2103 static inline int hci_check_conn_params(u16 min, u16 max, u16 latency,
2104                                         u16 to_multiplier)
2105 {
2106         u16 max_latency;
2107
2108         if (min > max || min < 6 || max > 3200)
2109                 return -EINVAL;
2110
2111         if (to_multiplier < 10 || to_multiplier > 3200)
2112                 return -EINVAL;
2113
2114         if (max >= to_multiplier * 8)
2115                 return -EINVAL;
2116
2117         max_latency = (to_multiplier * 4 / max) - 1;
2118         if (latency > 499 || latency > max_latency)
2119                 return -EINVAL;
2120
2121         return 0;
2122 }
2123
2124 int hci_register_cb(struct hci_cb *hcb);
2125 int hci_unregister_cb(struct hci_cb *hcb);
2126
2127 int __hci_cmd_send(struct hci_dev *hdev, u16 opcode, u32 plen,
2128                    const void *param);
2129
2130 int hci_send_cmd(struct hci_dev *hdev, __u16 opcode, __u32 plen,
2131                  const void *param);
2132 void hci_send_acl(struct hci_chan *chan, struct sk_buff *skb, __u16 flags);
2133 void hci_send_sco(struct hci_conn *conn, struct sk_buff *skb);
2134 void hci_send_iso(struct hci_conn *conn, struct sk_buff *skb);
2135
2136 void *hci_sent_cmd_data(struct hci_dev *hdev, __u16 opcode);
2137 void *hci_recv_event_data(struct hci_dev *hdev, __u8 event);
2138
2139 u32 hci_conn_get_phy(struct hci_conn *conn);
2140
2141 /* ----- HCI Sockets ----- */
2142 void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb);
2143 void hci_send_to_channel(unsigned short channel, struct sk_buff *skb,
2144                          int flag, struct sock *skip_sk);
2145 void hci_send_to_monitor(struct hci_dev *hdev, struct sk_buff *skb);
2146 void hci_send_monitor_ctrl_event(struct hci_dev *hdev, u16 event,
2147                                  void *data, u16 data_len, ktime_t tstamp,
2148                                  int flag, struct sock *skip_sk);
2149
2150 void hci_sock_dev_event(struct hci_dev *hdev, int event);
2151
2152 #define HCI_MGMT_VAR_LEN        BIT(0)
2153 #define HCI_MGMT_NO_HDEV        BIT(1)
2154 #define HCI_MGMT_UNTRUSTED      BIT(2)
2155 #define HCI_MGMT_UNCONFIGURED   BIT(3)
2156 #define HCI_MGMT_HDEV_OPTIONAL  BIT(4)
2157
2158 struct hci_mgmt_handler {
2159         int (*func) (struct sock *sk, struct hci_dev *hdev, void *data,
2160                      u16 data_len);
2161         size_t data_len;
2162         unsigned long flags;
2163 };
2164
2165 struct hci_mgmt_chan {
2166         struct list_head list;
2167         unsigned short channel;
2168         size_t handler_count;
2169         const struct hci_mgmt_handler *handlers;
2170         void (*hdev_init) (struct sock *sk, struct hci_dev *hdev);
2171 };
2172
2173 int hci_mgmt_chan_register(struct hci_mgmt_chan *c);
2174 void hci_mgmt_chan_unregister(struct hci_mgmt_chan *c);
2175
2176 /* Management interface */
2177 #define DISCOV_TYPE_BREDR               (BIT(BDADDR_BREDR))
2178 #define DISCOV_TYPE_LE                  (BIT(BDADDR_LE_PUBLIC) | \
2179                                          BIT(BDADDR_LE_RANDOM))
2180 #define DISCOV_TYPE_INTERLEAVED         (BIT(BDADDR_BREDR) | \
2181                                          BIT(BDADDR_LE_PUBLIC) | \
2182                                          BIT(BDADDR_LE_RANDOM))
2183
2184 /* These LE scan and inquiry parameters were chosen according to LE General
2185  * Discovery Procedure specification.
2186  */
2187 #define DISCOV_LE_SCAN_WIN              0x12
2188 #define DISCOV_LE_SCAN_INT              0x12
2189 #define DISCOV_LE_TIMEOUT               10240   /* msec */
2190 #define DISCOV_INTERLEAVED_TIMEOUT      5120    /* msec */
2191 #define DISCOV_INTERLEAVED_INQUIRY_LEN  0x04
2192 #define DISCOV_BREDR_INQUIRY_LEN        0x08
2193 #define DISCOV_LE_RESTART_DELAY         msecs_to_jiffies(200)   /* msec */
2194 #define DISCOV_LE_FAST_ADV_INT_MIN      0x00A0  /* 100 msec */
2195 #define DISCOV_LE_FAST_ADV_INT_MAX      0x00F0  /* 150 msec */
2196 #define DISCOV_LE_PER_ADV_INT_MIN       0x00A0  /* 200 msec */
2197 #define DISCOV_LE_PER_ADV_INT_MAX       0x00A0  /* 200 msec */
2198 #define DISCOV_LE_ADV_MESH_MIN          0x00A0  /* 100 msec */
2199 #define DISCOV_LE_ADV_MESH_MAX          0x00A0  /* 100 msec */
2200 #define INTERVAL_TO_MS(x)               (((x) * 10) / 0x10)
2201
2202 #define NAME_RESOLVE_DURATION           msecs_to_jiffies(10240) /* 10.24 sec */
2203
2204 void mgmt_fill_version_info(void *ver);
2205 int mgmt_new_settings(struct hci_dev *hdev);
2206 void mgmt_index_added(struct hci_dev *hdev);
2207 void mgmt_index_removed(struct hci_dev *hdev);
2208 void mgmt_set_powered_failed(struct hci_dev *hdev, int err);
2209 void mgmt_power_on(struct hci_dev *hdev, int err);
2210 void __mgmt_power_off(struct hci_dev *hdev);
2211 void mgmt_new_link_key(struct hci_dev *hdev, struct link_key *key,
2212                        bool persistent);
2213 void mgmt_device_connected(struct hci_dev *hdev, struct hci_conn *conn,
2214                            u8 *name, u8 name_len);
2215 void mgmt_device_disconnected(struct hci_dev *hdev, bdaddr_t *bdaddr,
2216                               u8 link_type, u8 addr_type, u8 reason,
2217                               bool mgmt_connected);
2218 void mgmt_disconnect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr,
2219                             u8 link_type, u8 addr_type, u8 status);
2220 void mgmt_connect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2221                          u8 addr_type, u8 status);
2222 void mgmt_pin_code_request(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 secure);
2223 void mgmt_pin_code_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2224                                   u8 status);
2225 void mgmt_pin_code_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2226                                       u8 status);
2227 int mgmt_user_confirm_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
2228                               u8 link_type, u8 addr_type, u32 value,
2229                               u8 confirm_hint);
2230 int mgmt_user_confirm_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2231                                      u8 link_type, u8 addr_type, u8 status);
2232 int mgmt_user_confirm_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2233                                          u8 link_type, u8 addr_type, u8 status);
2234 int mgmt_user_passkey_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
2235                               u8 link_type, u8 addr_type);
2236 int mgmt_user_passkey_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2237                                      u8 link_type, u8 addr_type, u8 status);
2238 int mgmt_user_passkey_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2239                                          u8 link_type, u8 addr_type, u8 status);
2240 int mgmt_user_passkey_notify(struct hci_dev *hdev, bdaddr_t *bdaddr,
2241                              u8 link_type, u8 addr_type, u32 passkey,
2242                              u8 entered);
2243 void mgmt_auth_failed(struct hci_conn *conn, u8 status);
2244 void mgmt_auth_enable_complete(struct hci_dev *hdev, u8 status);
2245 void mgmt_set_class_of_dev_complete(struct hci_dev *hdev, u8 *dev_class,
2246                                     u8 status);
2247 void mgmt_set_local_name_complete(struct hci_dev *hdev, u8 *name, u8 status);
2248 void mgmt_start_discovery_complete(struct hci_dev *hdev, u8 status);
2249 void mgmt_stop_discovery_complete(struct hci_dev *hdev, u8 status);
2250 void mgmt_device_found(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2251                        u8 addr_type, u8 *dev_class, s8 rssi, u32 flags,
2252                        u8 *eir, u16 eir_len, u8 *scan_rsp, u8 scan_rsp_len,
2253                        u64 instant);
2254 void mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2255                       u8 addr_type, s8 rssi, u8 *name, u8 name_len);
2256 void mgmt_discovering(struct hci_dev *hdev, u8 discovering);
2257 void mgmt_suspending(struct hci_dev *hdev, u8 state);
2258 void mgmt_resuming(struct hci_dev *hdev, u8 reason, bdaddr_t *bdaddr,
2259                    u8 addr_type);
2260 bool mgmt_powering_down(struct hci_dev *hdev);
2261 void mgmt_new_ltk(struct hci_dev *hdev, struct smp_ltk *key, bool persistent);
2262 void mgmt_new_irk(struct hci_dev *hdev, struct smp_irk *irk, bool persistent);
2263 void mgmt_new_csrk(struct hci_dev *hdev, struct smp_csrk *csrk,
2264                    bool persistent);
2265 void mgmt_new_conn_param(struct hci_dev *hdev, bdaddr_t *bdaddr,
2266                          u8 bdaddr_type, u8 store_hint, u16 min_interval,
2267                          u16 max_interval, u16 latency, u16 timeout);
2268 void mgmt_smp_complete(struct hci_conn *conn, bool complete);
2269 bool mgmt_get_connectable(struct hci_dev *hdev);
2270 u8 mgmt_get_adv_discov_flags(struct hci_dev *hdev);
2271 void mgmt_advertising_added(struct sock *sk, struct hci_dev *hdev,
2272                             u8 instance);
2273 void mgmt_advertising_removed(struct sock *sk, struct hci_dev *hdev,
2274                               u8 instance);
2275 void mgmt_adv_monitor_removed(struct hci_dev *hdev, u16 handle);
2276 int mgmt_phy_configuration_changed(struct hci_dev *hdev, struct sock *skip);
2277 void mgmt_adv_monitor_device_lost(struct hci_dev *hdev, u16 handle,
2278                                   bdaddr_t *bdaddr, u8 addr_type);
2279
2280 int hci_abort_conn(struct hci_conn *conn, u8 reason);
2281 u8 hci_le_conn_update(struct hci_conn *conn, u16 min, u16 max, u16 latency,
2282                       u16 to_multiplier);
2283 void hci_le_start_enc(struct hci_conn *conn, __le16 ediv, __le64 rand,
2284                       __u8 ltk[16], __u8 key_size);
2285
2286 void hci_copy_identity_address(struct hci_dev *hdev, bdaddr_t *bdaddr,
2287                                u8 *bdaddr_type);
2288
2289 #define SCO_AIRMODE_MASK       0x0003
2290 #define SCO_AIRMODE_CVSD       0x0000
2291 #define SCO_AIRMODE_TRANSP     0x0003
2292
2293 #define LOCAL_CODEC_ACL_MASK    BIT(0)
2294 #define LOCAL_CODEC_SCO_MASK    BIT(1)
2295
2296 #define TRANSPORT_TYPE_MAX      0x04
2297
2298 #endif /* __HCI_CORE_H */