include/net/bluetooth/hci_core.h

   1 /*
   2    BlueZ - Bluetooth protocol stack for Linux
   3    Copyright (c) 2000-2001, 2010, Code Aurora Forum. All rights reserved.
   4    Copyright 2023 NXP
   5
   6    Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
   7
   8    This program is free software; you can redistribute it and/or modify
   9    it under the terms of the GNU General Public License version 2 as
  10    published by the Free Software Foundation;
  11
  12    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
  13    OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  14    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
  15    IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
  16    CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
  17    WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  18    ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  19    OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  20
  21    ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
  22    COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
  23    SOFTWARE IS DISCLAIMED.
  24 */
  25
  26 #ifndef __HCI_CORE_H
  27 #define __HCI_CORE_H
  28
  29 #include <linux/idr.h>
  30 #include <linux/leds.h>
  31 #include <linux/rculist.h>
  32
  33 #include <net/bluetooth/hci.h>
  34 #include <net/bluetooth/hci_sync.h>
  35 #include <net/bluetooth/hci_sock.h>
  36 #include <net/bluetooth/coredump.h>
  37
  38 /* HCI priority */
  39 #define HCI_PRIO_MAX    7
  40
  41 /* HCI maximum id value */
  42 #define HCI_MAX_ID 10000
  43
  44 /* HCI Core structures */
  45 struct inquiry_data {
  46         bdaddr_t        bdaddr;
  47         __u8            pscan_rep_mode;
  48         __u8            pscan_period_mode;
  49         __u8            pscan_mode;
  50         __u8            dev_class[3];
  51         __le16          clock_offset;
  52         __s8            rssi;
  53         __u8            ssp_mode;
  54 };
  55
  56 struct inquiry_entry {
  57         struct list_head        all;            /* inq_cache.all */
  58         struct list_head        list;           /* unknown or resolve */
  59         enum {
  60                 NAME_NOT_KNOWN,
  61                 NAME_NEEDED,
  62                 NAME_PENDING,
  63                 NAME_KNOWN,
  64         } name_state;
  65         __u32                   timestamp;
  66         struct inquiry_data     data;
  67 };
  68
  69 struct discovery_state {
  70         int                     type;
  71         enum {
  72                 DISCOVERY_STOPPED,
  73                 DISCOVERY_STARTING,
  74                 DISCOVERY_FINDING,
  75                 DISCOVERY_RESOLVING,
  76                 DISCOVERY_STOPPING,
  77         } state;
  78         struct list_head        all;    /* All devices found during inquiry */
  79         struct list_head        unknown;        /* Name state not known */
  80         struct list_head        resolve;        /* Name needs to be resolved */
  81         __u32                   timestamp;
  82         bdaddr_t                last_adv_addr;
  83         u8                      last_adv_addr_type;
  84         s8                      last_adv_rssi;
  85         u32                     last_adv_flags;
  86         u8                      last_adv_data[HCI_MAX_AD_LENGTH];
  87         u8                      last_adv_data_len;
  88         bool                    report_invalid_rssi;
  89         bool                    result_filtering;
  90         bool                    limited;
  91         s8                      rssi;
  92         u16                     uuid_count;
  93         u8                      (*uuids)[16];
  94         unsigned long           scan_start;
  95         unsigned long           scan_duration;
  96         unsigned long           name_resolve_timeout;
  97 };
  98
  99 #define SUSPEND_NOTIFIER_TIMEOUT        msecs_to_jiffies(2000) /* 2 seconds */
 100
 101 enum suspend_tasks {
 102         SUSPEND_PAUSE_DISCOVERY,
 103         SUSPEND_UNPAUSE_DISCOVERY,
 104
 105         SUSPEND_PAUSE_ADVERTISING,
 106         SUSPEND_UNPAUSE_ADVERTISING,
 107
 108         SUSPEND_SCAN_DISABLE,
 109         SUSPEND_SCAN_ENABLE,
 110         SUSPEND_DISCONNECTING,
 111
 112         SUSPEND_POWERING_DOWN,
 113
 114         SUSPEND_PREPARE_NOTIFIER,
 115
 116         SUSPEND_SET_ADV_FILTER,
 117         __SUSPEND_NUM_TASKS
 118 };
 119
 120 enum suspended_state {
 121         BT_RUNNING = 0,
 122         BT_SUSPEND_DISCONNECT,
 123         BT_SUSPEND_CONFIGURE_WAKE,
 124 };
 125
 126 struct hci_conn_hash {
 127         struct list_head list;
 128         unsigned int     acl_num;
 129         unsigned int     amp_num;
 130         unsigned int     sco_num;
 131         unsigned int     iso_num;
 132         unsigned int     le_num;
 133         unsigned int     le_num_peripheral;
 134 };
 135
 136 struct bdaddr_list {
 137         struct list_head list;
 138         bdaddr_t bdaddr;
 139         u8 bdaddr_type;
 140 };
 141
 142 struct codec_list {
 143         struct list_head list;
 144         u8      id;
 145         __u16   cid;
 146         __u16   vid;
 147         u8      transport;
 148         u8      num_caps;
 149         u32     len;
 150         struct hci_codec_caps caps[];
 151 };
 152
 153 struct bdaddr_list_with_irk {
 154         struct list_head list;
 155         bdaddr_t bdaddr;
 156         u8 bdaddr_type;
 157         u8 peer_irk[16];
 158         u8 local_irk[16];
 159 };
 160
 161 /* Bitmask of connection flags */
 162 enum hci_conn_flags {
 163         HCI_CONN_FLAG_REMOTE_WAKEUP = 1,
 164         HCI_CONN_FLAG_DEVICE_PRIVACY = 2,
 165 };
 166 typedef u8 hci_conn_flags_t;
 167
 168 struct bdaddr_list_with_flags {
 169         struct list_head list;
 170         bdaddr_t bdaddr;
 171         u8 bdaddr_type;
 172         hci_conn_flags_t flags;
 173 };
 174
 175 struct bt_uuid {
 176         struct list_head list;
 177         u8 uuid[16];
 178         u8 size;
 179         u8 svc_hint;
 180 };
 181
 182 struct blocked_key {
 183         struct list_head list;
 184         struct rcu_head rcu;
 185         u8 type;
 186         u8 val[16];
 187 };
 188
 189 struct smp_csrk {
 190         bdaddr_t bdaddr;
 191         u8 bdaddr_type;
 192         u8 type;
 193         u8 val[16];
 194 };
 195
 196 struct smp_ltk {
 197         struct list_head list;
 198         struct rcu_head rcu;
 199         bdaddr_t bdaddr;
 200         u8 bdaddr_type;
 201         u8 authenticated;
 202         u8 type;
 203         u8 enc_size;
 204         __le16 ediv;
 205         __le64 rand;
 206         u8 val[16];
 207 };
 208
 209 struct smp_irk {
 210         struct list_head list;
 211         struct rcu_head rcu;
 212         bdaddr_t rpa;
 213         bdaddr_t bdaddr;
 214         u8 addr_type;
 215         u8 val[16];
 216 };
 217
 218 struct link_key {
 219         struct list_head list;
 220         struct rcu_head rcu;
 221         bdaddr_t bdaddr;
 222         u8 type;
 223         u8 val[HCI_LINK_KEY_SIZE];
 224         u8 pin_len;
 225 };
 226
 227 struct oob_data {
 228         struct list_head list;
 229         bdaddr_t bdaddr;
 230         u8 bdaddr_type;
 231         u8 present;
 232         u8 hash192[16];
 233         u8 rand192[16];
 234         u8 hash256[16];
 235         u8 rand256[16];
 236 };
 237
 238 struct adv_info {
 239         struct list_head list;
 240         bool    enabled;
 241         bool    pending;
 242         bool    periodic;
 243         __u8    mesh;
 244         __u8    instance;
 245         __u32   flags;
 246         __u16   timeout;
 247         __u16   remaining_time;
 248         __u16   duration;
 249         __u16   adv_data_len;
 250         __u8    adv_data[HCI_MAX_EXT_AD_LENGTH];
 251         bool    adv_data_changed;
 252         __u16   scan_rsp_len;
 253         __u8    scan_rsp_data[HCI_MAX_EXT_AD_LENGTH];
 254         bool    scan_rsp_changed;
 255         __u16   per_adv_data_len;
 256         __u8    per_adv_data[HCI_MAX_PER_AD_LENGTH];
 257         __s8    tx_power;
 258         __u32   min_interval;
 259         __u32   max_interval;
 260         bdaddr_t        random_addr;
 261         bool            rpa_expired;
 262         struct delayed_work     rpa_expired_cb;
 263 };
 264
 265 #define HCI_MAX_ADV_INSTANCES           5
 266 #define HCI_DEFAULT_ADV_DURATION        2
 267
 268 #define HCI_ADV_TX_POWER_NO_PREFERENCE 0x7F
 269
 270 #define DATA_CMP(_d1, _l1, _d2, _l2) \
 271         (_l1 == _l2 ? memcmp(_d1, _d2, _l1) : _l1 - _l2)
 272
 273 #define ADV_DATA_CMP(_adv, _data, _len) \
 274         DATA_CMP((_adv)->adv_data, (_adv)->adv_data_len, _data, _len)
 275
 276 #define SCAN_RSP_CMP(_adv, _data, _len) \
 277         DATA_CMP((_adv)->scan_rsp_data, (_adv)->scan_rsp_len, _data, _len)
 278
 279 struct monitored_device {
 280         struct list_head list;
 281
 282         bdaddr_t bdaddr;
 283         __u8     addr_type;
 284         __u16    handle;
 285         bool     notified;
 286 };
 287
 288 struct adv_pattern {
 289         struct list_head list;
 290         __u8 ad_type;
 291         __u8 offset;
 292         __u8 length;
 293         __u8 value[HCI_MAX_AD_LENGTH];
 294 };
 295
 296 struct adv_rssi_thresholds {
 297         __s8 low_threshold;
 298         __s8 high_threshold;
 299         __u16 low_threshold_timeout;
 300         __u16 high_threshold_timeout;
 301         __u8 sampling_period;
 302 };
 303
 304 struct adv_monitor {
 305         struct list_head patterns;
 306         struct adv_rssi_thresholds rssi;
 307         __u16           handle;
 308
 309         enum {
 310                 ADV_MONITOR_STATE_NOT_REGISTERED,
 311                 ADV_MONITOR_STATE_REGISTERED,
 312                 ADV_MONITOR_STATE_OFFLOADED
 313         } state;
 314 };
 315
 316 #define HCI_MIN_ADV_MONITOR_HANDLE              1
 317 #define HCI_MAX_ADV_MONITOR_NUM_HANDLES         32
 318 #define HCI_MAX_ADV_MONITOR_NUM_PATTERNS        16
 319 #define HCI_ADV_MONITOR_EXT_NONE                1
 320 #define HCI_ADV_MONITOR_EXT_MSFT                2
 321
 322 #define HCI_MAX_SHORT_NAME_LENGTH       10
 323
 324 #define HCI_CONN_HANDLE_UNSET           0xffff
 325 #define HCI_CONN_HANDLE_MAX             0x0eff
 326
 327 /* Min encryption key size to match with SMP */
 328 #define HCI_MIN_ENC_KEY_SIZE            7
 329
 330 /* Default LE RPA expiry time, 15 minutes */
 331 #define HCI_DEFAULT_RPA_TIMEOUT         (15 * 60)
 332
 333 /* Default min/max age of connection information (1s/3s) */
 334 #define DEFAULT_CONN_INFO_MIN_AGE       1000
 335 #define DEFAULT_CONN_INFO_MAX_AGE       3000
 336 /* Default authenticated payload timeout 30s */
 337 #define DEFAULT_AUTH_PAYLOAD_TIMEOUT   0x0bb8
 338
 339 struct amp_assoc {
 340         __u16   len;
 341         __u16   offset;
 342         __u16   rem_len;
 343         __u16   len_so_far;
 344         __u8    data[HCI_MAX_AMP_ASSOC_SIZE];
 345 };
 346
 347 #define HCI_MAX_PAGES   3
 348
 349 struct hci_dev {
 350         struct list_head list;
 351         struct mutex    lock;
 352
 353         char            name[8];
 354         unsigned long   flags;
 355         __u16           id;
 356         __u8            bus;
 357         __u8            dev_type;
 358         bdaddr_t        bdaddr;
 359         bdaddr_t        setup_addr;
 360         bdaddr_t        public_addr;
 361         bdaddr_t        random_addr;
 362         bdaddr_t        static_addr;
 363         __u8            adv_addr_type;
 364         __u8            dev_name[HCI_MAX_NAME_LENGTH];
 365         __u8            short_name[HCI_MAX_SHORT_NAME_LENGTH];
 366         __u8            eir[HCI_MAX_EIR_LENGTH];
 367         __u16           appearance;
 368         __u8            dev_class[3];
 369         __u8            major_class;
 370         __u8            minor_class;
 371         __u8            max_page;
 372         __u8            features[HCI_MAX_PAGES][8];
 373         __u8            le_features[8];
 374         __u8            le_accept_list_size;
 375         __u8            le_resolv_list_size;
 376         __u8            le_num_of_adv_sets;
 377         __u8            le_states[8];
 378         __u8            mesh_ad_types[16];
 379         __u8            mesh_send_ref;
 380         __u8            commands[64];
 381         __u8            hci_ver;
 382         __u16           hci_rev;
 383         __u8            lmp_ver;
 384         __u16           manufacturer;
 385         __u16           lmp_subver;
 386         __u16           voice_setting;
 387         __u8            num_iac;
 388         __u16           stored_max_keys;
 389         __u16           stored_num_keys;
 390         __u8            io_capability;
 391         __s8            inq_tx_power;
 392         __u8            err_data_reporting;
 393         __u16           page_scan_interval;
 394         __u16           page_scan_window;
 395         __u8            page_scan_type;
 396         __u8            le_adv_channel_map;
 397         __u16           le_adv_min_interval;
 398         __u16           le_adv_max_interval;
 399         __u8            le_scan_type;
 400         __u16           le_scan_interval;
 401         __u16           le_scan_window;
 402         __u16           le_scan_int_suspend;
 403         __u16           le_scan_window_suspend;
 404         __u16           le_scan_int_discovery;
 405         __u16           le_scan_window_discovery;
 406         __u16           le_scan_int_adv_monitor;
 407         __u16           le_scan_window_adv_monitor;
 408         __u16           le_scan_int_connect;
 409         __u16           le_scan_window_connect;
 410         __u16           le_conn_min_interval;
 411         __u16           le_conn_max_interval;
 412         __u16           le_conn_latency;
 413         __u16           le_supv_timeout;
 414         __u16           le_def_tx_len;
 415         __u16           le_def_tx_time;
 416         __u16           le_max_tx_len;
 417         __u16           le_max_tx_time;
 418         __u16           le_max_rx_len;
 419         __u16           le_max_rx_time;
 420         __u8            le_max_key_size;
 421         __u8            le_min_key_size;
 422         __u16           discov_interleaved_timeout;
 423         __u16           conn_info_min_age;
 424         __u16           conn_info_max_age;
 425         __u16           auth_payload_timeout;
 426         __u8            min_enc_key_size;
 427         __u8            max_enc_key_size;
 428         __u8            pairing_opts;
 429         __u8            ssp_debug_mode;
 430         __u8            hw_error_code;
 431         __u32           clock;
 432         __u16           advmon_allowlist_duration;
 433         __u16           advmon_no_filter_duration;
 434         __u8            enable_advmon_interleave_scan;
 435
 436         __u16           devid_source;
 437         __u16           devid_vendor;
 438         __u16           devid_product;
 439         __u16           devid_version;
 440
 441         __u8            def_page_scan_type;
 442         __u16           def_page_scan_int;
 443         __u16           def_page_scan_window;
 444         __u8            def_inq_scan_type;
 445         __u16           def_inq_scan_int;
 446         __u16           def_inq_scan_window;
 447         __u16           def_br_lsto;
 448         __u16           def_page_timeout;
 449         __u16           def_multi_adv_rotation_duration;
 450         __u16           def_le_autoconnect_timeout;
 451         __s8            min_le_tx_power;
 452         __s8            max_le_tx_power;
 453
 454         __u16           pkt_type;
 455         __u16           esco_type;
 456         __u16           link_policy;
 457         __u16           link_mode;
 458
 459         __u32           idle_timeout;
 460         __u16           sniff_min_interval;
 461         __u16           sniff_max_interval;
 462
 463         __u8            amp_status;
 464         __u32           amp_total_bw;
 465         __u32           amp_max_bw;
 466         __u32           amp_min_latency;
 467         __u32           amp_max_pdu;
 468         __u8            amp_type;
 469         __u16           amp_pal_cap;
 470         __u16           amp_assoc_size;
 471         __u32           amp_max_flush_to;
 472         __u32           amp_be_flush_to;
 473
 474         struct amp_assoc        loc_assoc;
 475
 476         __u8            flow_ctl_mode;
 477
 478         unsigned int    auto_accept_delay;
 479
 480         unsigned long   quirks;
 481
 482         atomic_t        cmd_cnt;
 483         unsigned int    acl_cnt;
 484         unsigned int    sco_cnt;
 485         unsigned int    le_cnt;
 486         unsigned int    iso_cnt;
 487
 488         unsigned int    acl_mtu;
 489         unsigned int    sco_mtu;
 490         unsigned int    le_mtu;
 491         unsigned int    iso_mtu;
 492         unsigned int    acl_pkts;
 493         unsigned int    sco_pkts;
 494         unsigned int    le_pkts;
 495         unsigned int    iso_pkts;
 496
 497         __u16           block_len;
 498         __u16           block_mtu;
 499         __u16           num_blocks;
 500         __u16           block_cnt;
 501
 502         unsigned long   acl_last_tx;
 503         unsigned long   sco_last_tx;
 504         unsigned long   le_last_tx;
 505
 506         __u8            le_tx_def_phys;
 507         __u8            le_rx_def_phys;
 508
 509         struct workqueue_struct *workqueue;
 510         struct workqueue_struct *req_workqueue;
 511
 512         struct work_struct      power_on;
 513         struct delayed_work     power_off;
 514         struct work_struct      error_reset;
 515         struct work_struct      cmd_sync_work;
 516         struct list_head        cmd_sync_work_list;
 517         struct mutex            cmd_sync_work_lock;
 518         struct work_struct      cmd_sync_cancel_work;
 519         struct work_struct      reenable_adv_work;
 520
 521         __u16                   discov_timeout;
 522         struct delayed_work     discov_off;
 523
 524         struct delayed_work     service_cache;
 525
 526         struct delayed_work     cmd_timer;
 527         struct delayed_work     ncmd_timer;
 528
 529         struct work_struct      rx_work;
 530         struct work_struct      cmd_work;
 531         struct work_struct      tx_work;
 532
 533         struct delayed_work     le_scan_disable;
 534         struct delayed_work     le_scan_restart;
 535
 536         struct sk_buff_head     rx_q;
 537         struct sk_buff_head     raw_q;
 538         struct sk_buff_head     cmd_q;
 539
 540         struct sk_buff          *sent_cmd;
 541         struct sk_buff          *recv_event;
 542
 543         struct mutex            req_lock;
 544         wait_queue_head_t       req_wait_q;
 545         __u32                   req_status;
 546         __u32                   req_result;
 547         struct sk_buff          *req_skb;
 548
 549         void                    *smp_data;
 550         void                    *smp_bredr_data;
 551
 552         struct discovery_state  discovery;
 553
 554         int                     discovery_old_state;
 555         bool                    discovery_paused;
 556         int                     advertising_old_state;
 557         bool                    advertising_paused;
 558
 559         struct notifier_block   suspend_notifier;
 560         enum suspended_state    suspend_state_next;
 561         enum suspended_state    suspend_state;
 562         bool                    scanning_paused;
 563         bool                    suspended;
 564         u8                      wake_reason;
 565         bdaddr_t                wake_addr;
 566         u8                      wake_addr_type;
 567
 568         struct hci_conn_hash    conn_hash;
 569
 570         struct list_head        mesh_pending;
 571         struct list_head        mgmt_pending;
 572         struct list_head        reject_list;
 573         struct list_head        accept_list;
 574         struct list_head        uuids;
 575         struct list_head        link_keys;
 576         struct list_head        long_term_keys;
 577         struct list_head        identity_resolving_keys;
 578         struct list_head        remote_oob_data;
 579         struct list_head        le_accept_list;
 580         struct list_head        le_resolv_list;
 581         struct list_head        le_conn_params;
 582         struct list_head        pend_le_conns;
 583         struct list_head        pend_le_reports;
 584         struct list_head        blocked_keys;
 585         struct list_head        local_codecs;
 586
 587         struct hci_dev_stats    stat;
 588
 589         atomic_t                promisc;
 590
 591         const char              *hw_info;
 592         const char              *fw_info;
 593         struct dentry           *debugfs;
 594
 595 #ifdef CONFIG_DEV_COREDUMP
 596         struct hci_devcoredump  dump;
 597 #endif
 598
 599         struct device           dev;
 600
 601         struct rfkill           *rfkill;
 602
 603         DECLARE_BITMAP(dev_flags, __HCI_NUM_FLAGS);
 604         hci_conn_flags_t        conn_flags;
 605
 606         __s8                    adv_tx_power;
 607         __u8                    adv_data[HCI_MAX_EXT_AD_LENGTH];
 608         __u8                    adv_data_len;
 609         __u8                    scan_rsp_data[HCI_MAX_EXT_AD_LENGTH];
 610         __u8                    scan_rsp_data_len;
 611         __u8                    per_adv_data[HCI_MAX_PER_AD_LENGTH];
 612         __u8                    per_adv_data_len;
 613
 614         struct list_head        adv_instances;
 615         unsigned int            adv_instance_cnt;
 616         __u8                    cur_adv_instance;
 617         __u16                   adv_instance_timeout;
 618         struct delayed_work     adv_instance_expire;
 619
 620         struct idr              adv_monitors_idr;
 621         unsigned int            adv_monitors_cnt;
 622
 623         __u8                    irk[16];
 624         __u32                   rpa_timeout;
 625         struct delayed_work     rpa_expired;
 626         bdaddr_t                rpa;
 627
 628         struct delayed_work     mesh_send_done;
 629
 630         enum {
 631                 INTERLEAVE_SCAN_NONE,
 632                 INTERLEAVE_SCAN_NO_FILTER,
 633                 INTERLEAVE_SCAN_ALLOWLIST
 634         } interleave_scan_state;
 635
 636         struct delayed_work     interleave_scan;
 637
 638         struct list_head        monitored_devices;
 639         bool                    advmon_pend_notify;
 640
 641 #if IS_ENABLED(CONFIG_BT_LEDS)
 642         struct led_trigger      *power_led;
 643 #endif
 644
 645 #if IS_ENABLED(CONFIG_BT_MSFTEXT)
 646         __u16                   msft_opcode;
 647         void                    *msft_data;
 648         bool                    msft_curve_validity;
 649 #endif
 650
 651 #if IS_ENABLED(CONFIG_BT_AOSPEXT)
 652         bool                    aosp_capable;
 653         bool                    aosp_quality_report;
 654 #endif
 655
 656         int (*open)(struct hci_dev *hdev);
 657         int (*close)(struct hci_dev *hdev);
 658         int (*flush)(struct hci_dev *hdev);
 659         int (*setup)(struct hci_dev *hdev);
 660         int (*shutdown)(struct hci_dev *hdev);
 661         int (*send)(struct hci_dev *hdev, struct sk_buff *skb);
 662         void (*notify)(struct hci_dev *hdev, unsigned int evt);
 663         void (*hw_error)(struct hci_dev *hdev, u8 code);
 664         int (*post_init)(struct hci_dev *hdev);
 665         int (*set_diag)(struct hci_dev *hdev, bool enable);
 666         int (*set_bdaddr)(struct hci_dev *hdev, const bdaddr_t *bdaddr);
 667         void (*cmd_timeout)(struct hci_dev *hdev);
 668         void (*reset)(struct hci_dev *hdev);
 669         bool (*wakeup)(struct hci_dev *hdev);
 670         int (*set_quality_report)(struct hci_dev *hdev, bool enable);
 671         int (*get_data_path_id)(struct hci_dev *hdev, __u8 *data_path);
 672         int (*get_codec_config_data)(struct hci_dev *hdev, __u8 type,
 673                                      struct bt_codec *codec, __u8 *vnd_len,
 674                                      __u8 **vnd_data);
 675 };
 676
 677 #define HCI_PHY_HANDLE(handle)  (handle & 0xff)
 678
 679 enum conn_reasons {
 680         CONN_REASON_PAIR_DEVICE,
 681         CONN_REASON_L2CAP_CHAN,
 682         CONN_REASON_SCO_CONNECT,
 683         CONN_REASON_ISO_CONNECT,
 684 };
 685
 686 struct hci_conn {
 687         struct list_head list;
 688
 689         atomic_t        refcnt;
 690
 691         bdaddr_t        dst;
 692         __u8            dst_type;
 693         bdaddr_t        src;
 694         __u8            src_type;
 695         bdaddr_t        init_addr;
 696         __u8            init_addr_type;
 697         bdaddr_t        resp_addr;
 698         __u8            resp_addr_type;
 699         __u8            adv_instance;
 700         __u16           handle;
 701         __u16           sync_handle;
 702         __u16           state;
 703         __u8            mode;
 704         __u8            type;
 705         __u8            role;
 706         bool            out;
 707         __u8            attempt;
 708         __u8            dev_class[3];
 709         __u8            features[HCI_MAX_PAGES][8];
 710         __u16           pkt_type;
 711         __u16           link_policy;
 712         __u8            key_type;
 713         __u8            auth_type;
 714         __u8            sec_level;
 715         __u8            pending_sec_level;
 716         __u8            pin_length;
 717         __u8            enc_key_size;
 718         __u8            io_capability;
 719         __u32           passkey_notify;
 720         __u8            passkey_entered;
 721         __u16           disc_timeout;
 722         __u16           conn_timeout;
 723         __u16           setting;
 724         __u16           auth_payload_timeout;
 725         __u16           le_conn_min_interval;
 726         __u16           le_conn_max_interval;
 727         __u16           le_conn_interval;
 728         __u16           le_conn_latency;
 729         __u16           le_supv_timeout;
 730         __u8            le_adv_data[HCI_MAX_AD_LENGTH];
 731         __u8            le_adv_data_len;
 732         __u8            le_per_adv_data[HCI_MAX_PER_AD_LENGTH];
 733         __u8            le_per_adv_data_len;
 734         __u8            le_tx_phy;
 735         __u8            le_rx_phy;
 736         __s8            rssi;
 737         __s8            tx_power;
 738         __s8            max_tx_power;
 739         struct bt_iso_qos iso_qos;
 740         unsigned long   flags;
 741
 742         enum conn_reasons conn_reason;
 743
 744         __u32           clock;
 745         __u16           clock_accuracy;
 746
 747         unsigned long   conn_info_timestamp;
 748
 749         __u8            remote_cap;
 750         __u8            remote_auth;
 751         __u8            remote_id;
 752
 753         unsigned int    sent;
 754
 755         struct sk_buff_head data_q;
 756         struct list_head chan_list;
 757
 758         struct delayed_work disc_work;
 759         struct delayed_work auto_accept_work;
 760         struct delayed_work idle_work;
 761         struct delayed_work le_conn_timeout;
 762         struct work_struct  le_scan_cleanup;
 763
 764         struct device   dev;
 765         struct dentry   *debugfs;
 766
 767         struct hci_dev  *hdev;
 768         void            *l2cap_data;
 769         void            *sco_data;
 770         void            *iso_data;
 771         struct amp_mgr  *amp_mgr;
 772
 773         struct list_head link_list;
 774         struct hci_conn *parent;
 775         struct hci_link *link;
 776
 777         struct bt_codec codec;
 778
 779         void (*connect_cfm_cb)  (struct hci_conn *conn, u8 status);
 780         void (*security_cfm_cb) (struct hci_conn *conn, u8 status);
 781         void (*disconn_cfm_cb)  (struct hci_conn *conn, u8 reason);
 782
 783         void (*cleanup)(struct hci_conn *conn);
 784 };
 785
 786 struct hci_link {
 787         struct list_head list;
 788         struct hci_conn *conn;
 789 };
 790
 791 struct hci_chan {
 792         struct list_head list;
 793         __u16 handle;
 794         struct hci_conn *conn;
 795         struct sk_buff_head data_q;
 796         unsigned int    sent;
 797         __u8            state;
 798         bool            amp;
 799 };
 800
 801 struct hci_conn_params {
 802         struct list_head list;
 803         struct list_head action;
 804
 805         bdaddr_t addr;
 806         u8 addr_type;
 807
 808         u16 conn_min_interval;
 809         u16 conn_max_interval;
 810         u16 conn_latency;
 811         u16 supervision_timeout;
 812
 813         enum {
 814                 HCI_AUTO_CONN_DISABLED,
 815                 HCI_AUTO_CONN_REPORT,
 816                 HCI_AUTO_CONN_DIRECT,
 817                 HCI_AUTO_CONN_ALWAYS,
 818                 HCI_AUTO_CONN_LINK_LOSS,
 819                 HCI_AUTO_CONN_EXPLICIT,
 820         } auto_connect;
 821
 822         struct hci_conn *conn;
 823         bool explicit_connect;
 824         hci_conn_flags_t flags;
 825         u8  privacy_mode;
 826 };
 827
 828 extern struct list_head hci_dev_list;
 829 extern struct list_head hci_cb_list;
 830 extern rwlock_t hci_dev_list_lock;
 831 extern struct mutex hci_cb_list_lock;
 832
 833 #define hci_dev_set_flag(hdev, nr)             set_bit((nr), (hdev)->dev_flags)
 834 #define hci_dev_clear_flag(hdev, nr)           clear_bit((nr), (hdev)->dev_flags)
 835 #define hci_dev_change_flag(hdev, nr)          change_bit((nr), (hdev)->dev_flags)
 836 #define hci_dev_test_flag(hdev, nr)            test_bit((nr), (hdev)->dev_flags)
 837 #define hci_dev_test_and_set_flag(hdev, nr)    test_and_set_bit((nr), (hdev)->dev_flags)
 838 #define hci_dev_test_and_clear_flag(hdev, nr)  test_and_clear_bit((nr), (hdev)->dev_flags)
 839 #define hci_dev_test_and_change_flag(hdev, nr) test_and_change_bit((nr), (hdev)->dev_flags)
 840
 841 #define hci_dev_clear_volatile_flags(hdev)                      \
 842         do {                                                    \
 843                 hci_dev_clear_flag(hdev, HCI_LE_SCAN);          \
 844                 hci_dev_clear_flag(hdev, HCI_LE_ADV);           \
 845                 hci_dev_clear_flag(hdev, HCI_LL_RPA_RESOLUTION);\
 846                 hci_dev_clear_flag(hdev, HCI_PERIODIC_INQ);     \
 847                 hci_dev_clear_flag(hdev, HCI_QUALITY_REPORT);   \
 848         } while (0)
 849
 850 #define hci_dev_le_state_simultaneous(hdev) \
 851         (test_bit(HCI_QUIRK_VALID_LE_STATES, &hdev->quirks) && \
 852          (hdev->le_states[4] & 0x08) && /* Central */ \
 853          (hdev->le_states[4] & 0x40) && /* Peripheral */ \
 854          (hdev->le_states[3] & 0x10))   /* Simultaneous */
 855
 856 /* ----- HCI interface to upper protocols ----- */
 857 int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr);
 858 int l2cap_disconn_ind(struct hci_conn *hcon);
 859 void l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
 860
 861 #if IS_ENABLED(CONFIG_BT_BREDR)
 862 int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
 863 void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb);
 864 #else
 865 static inline int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
 866                                   __u8 *flags)
 867 {
 868         return 0;
 869 }
 870
 871 static inline void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb)
 872 {
 873 }
 874 #endif
 875
 876 #if IS_ENABLED(CONFIG_BT_LE)
 877 int iso_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
 878 void iso_recv(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
 879 #else
 880 static inline int iso_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
 881                                   __u8 *flags)
 882 {
 883         return 0;
 884 }
 885 static inline void iso_recv(struct hci_conn *hcon, struct sk_buff *skb,
 886                             u16 flags)
 887 {
 888 }
 889 #endif
 890
 891 /* ----- Inquiry cache ----- */
 892 #define INQUIRY_CACHE_AGE_MAX   (HZ*30)   /* 30 seconds */
 893 #define INQUIRY_ENTRY_AGE_MAX   (HZ*60)   /* 60 seconds */
 894
 895 static inline void discovery_init(struct hci_dev *hdev)
 896 {
 897         hdev->discovery.state = DISCOVERY_STOPPED;
 898         INIT_LIST_HEAD(&hdev->discovery.all);
 899         INIT_LIST_HEAD(&hdev->discovery.unknown);
 900         INIT_LIST_HEAD(&hdev->discovery.resolve);
 901         hdev->discovery.report_invalid_rssi = true;
 902         hdev->discovery.rssi = HCI_RSSI_INVALID;
 903 }
 904
 905 static inline void hci_discovery_filter_clear(struct hci_dev *hdev)
 906 {
 907         hdev->discovery.result_filtering = false;
 908         hdev->discovery.report_invalid_rssi = true;
 909         hdev->discovery.rssi = HCI_RSSI_INVALID;
 910         hdev->discovery.uuid_count = 0;
 911         kfree(hdev->discovery.uuids);
 912         hdev->discovery.uuids = NULL;
 913         hdev->discovery.scan_start = 0;
 914         hdev->discovery.scan_duration = 0;
 915 }
 916
 917 bool hci_discovery_active(struct hci_dev *hdev);
 918
 919 void hci_discovery_set_state(struct hci_dev *hdev, int state);
 920
 921 static inline int inquiry_cache_empty(struct hci_dev *hdev)
 922 {
 923         return list_empty(&hdev->discovery.all);
 924 }
 925
 926 static inline long inquiry_cache_age(struct hci_dev *hdev)
 927 {
 928         struct discovery_state *c = &hdev->discovery;
 929         return jiffies - c->timestamp;
 930 }
 931
 932 static inline long inquiry_entry_age(struct inquiry_entry *e)
 933 {
 934         return jiffies - e->timestamp;
 935 }
 936
 937 struct inquiry_entry *hci_inquiry_cache_lookup(struct hci_dev *hdev,
 938                                                bdaddr_t *bdaddr);
 939 struct inquiry_entry *hci_inquiry_cache_lookup_unknown(struct hci_dev *hdev,
 940                                                        bdaddr_t *bdaddr);
 941 struct inquiry_entry *hci_inquiry_cache_lookup_resolve(struct hci_dev *hdev,
 942                                                        bdaddr_t *bdaddr,
 943                                                        int state);
 944 void hci_inquiry_cache_update_resolve(struct hci_dev *hdev,
 945                                       struct inquiry_entry *ie);
 946 u32 hci_inquiry_cache_update(struct hci_dev *hdev, struct inquiry_data *data,
 947                              bool name_known);
 948 void hci_inquiry_cache_flush(struct hci_dev *hdev);
 949
 950 /* ----- HCI Connections ----- */
 951 enum {
 952         HCI_CONN_AUTH_PEND,
 953         HCI_CONN_REAUTH_PEND,
 954         HCI_CONN_ENCRYPT_PEND,
 955         HCI_CONN_RSWITCH_PEND,
 956         HCI_CONN_MODE_CHANGE_PEND,
 957         HCI_CONN_SCO_SETUP_PEND,
 958         HCI_CONN_MGMT_CONNECTED,
 959         HCI_CONN_SSP_ENABLED,
 960         HCI_CONN_SC_ENABLED,
 961         HCI_CONN_AES_CCM,
 962         HCI_CONN_POWER_SAVE,
 963         HCI_CONN_FLUSH_KEY,
 964         HCI_CONN_ENCRYPT,
 965         HCI_CONN_AUTH,
 966         HCI_CONN_SECURE,
 967         HCI_CONN_FIPS,
 968         HCI_CONN_STK_ENCRYPT,
 969         HCI_CONN_AUTH_INITIATOR,
 970         HCI_CONN_DROP,
 971         HCI_CONN_CANCEL,
 972         HCI_CONN_PARAM_REMOVAL_PEND,
 973         HCI_CONN_NEW_LINK_KEY,
 974         HCI_CONN_SCANNING,
 975         HCI_CONN_AUTH_FAILURE,
 976         HCI_CONN_PER_ADV,
 977 };
 978
 979 static inline bool hci_conn_ssp_enabled(struct hci_conn *conn)
 980 {
 981         struct hci_dev *hdev = conn->hdev;
 982         return hci_dev_test_flag(hdev, HCI_SSP_ENABLED) &&
 983                test_bit(HCI_CONN_SSP_ENABLED, &conn->flags);
 984 }
 985
 986 static inline bool hci_conn_sc_enabled(struct hci_conn *conn)
 987 {
 988         struct hci_dev *hdev = conn->hdev;
 989         return hci_dev_test_flag(hdev, HCI_SC_ENABLED) &&
 990                test_bit(HCI_CONN_SC_ENABLED, &conn->flags);
 991 }
 992
 993 static inline void hci_conn_hash_add(struct hci_dev *hdev, struct hci_conn *c)
 994 {
 995         struct hci_conn_hash *h = &hdev->conn_hash;
 996         list_add_tail_rcu(&c->list, &h->list);
 997         switch (c->type) {
 998         case ACL_LINK:
 999                 h->acl_num++;
1000                 break;
1001         case AMP_LINK:
1002                 h->amp_num++;
1003                 break;
1004         case LE_LINK:
1005                 h->le_num++;
1006                 if (c->role == HCI_ROLE_SLAVE)
1007                         h->le_num_peripheral++;
1008                 break;
1009         case SCO_LINK:
1010         case ESCO_LINK:
1011                 h->sco_num++;
1012                 break;
1013         case ISO_LINK:
1014                 h->iso_num++;
1015                 break;
1016         }
1017 }
1018
1019 static inline void hci_conn_hash_del(struct hci_dev *hdev, struct hci_conn *c)
1020 {
1021         struct hci_conn_hash *h = &hdev->conn_hash;
1022
1023         list_del_rcu(&c->list);
1024         synchronize_rcu();
1025
1026         switch (c->type) {
1027         case ACL_LINK:
1028                 h->acl_num--;
1029                 break;
1030         case AMP_LINK:
1031                 h->amp_num--;
1032                 break;
1033         case LE_LINK:
1034                 h->le_num--;
1035                 if (c->role == HCI_ROLE_SLAVE)
1036                         h->le_num_peripheral--;
1037                 break;
1038         case SCO_LINK:
1039         case ESCO_LINK:
1040                 h->sco_num--;
1041                 break;
1042         case ISO_LINK:
1043                 h->iso_num--;
1044                 break;
1045         }
1046 }
1047
1048 static inline unsigned int hci_conn_num(struct hci_dev *hdev, __u8 type)
1049 {
1050         struct hci_conn_hash *h = &hdev->conn_hash;
1051         switch (type) {
1052         case ACL_LINK:
1053                 return h->acl_num;
1054         case AMP_LINK:
1055                 return h->amp_num;
1056         case LE_LINK:
1057                 return h->le_num;
1058         case SCO_LINK:
1059         case ESCO_LINK:
1060                 return h->sco_num;
1061         case ISO_LINK:
1062                 return h->iso_num;
1063         default:
1064                 return 0;
1065         }
1066 }
1067
1068 static inline unsigned int hci_conn_count(struct hci_dev *hdev)
1069 {
1070         struct hci_conn_hash *c = &hdev->conn_hash;
1071
1072         return c->acl_num + c->amp_num + c->sco_num + c->le_num + c->iso_num;
1073 }
1074
1075 static inline __u8 hci_conn_lookup_type(struct hci_dev *hdev, __u16 handle)
1076 {
1077         struct hci_conn_hash *h = &hdev->conn_hash;
1078         struct hci_conn *c;
1079         __u8 type = INVALID_LINK;
1080
1081         rcu_read_lock();
1082
1083         list_for_each_entry_rcu(c, &h->list, list) {
1084                 if (c->handle == handle) {
1085                         type = c->type;
1086                         break;
1087                 }
1088         }
1089
1090         rcu_read_unlock();
1091
1092         return type;
1093 }
1094
1095 static inline struct hci_conn *hci_conn_hash_lookup_bis(struct hci_dev *hdev,
1096                                                         bdaddr_t *ba,
1097                                                         __u8 big, __u8 bis)
1098 {
1099         struct hci_conn_hash *h = &hdev->conn_hash;
1100         struct hci_conn  *c;
1101
1102         rcu_read_lock();
1103
1104         list_for_each_entry_rcu(c, &h->list, list) {
1105                 if (bacmp(&c->dst, ba) || c->type != ISO_LINK)
1106                         continue;
1107
1108                 if (c->iso_qos.bcast.big == big && c->iso_qos.bcast.bis == bis) {
1109                         rcu_read_unlock();
1110                         return c;
1111                 }
1112         }
1113         rcu_read_unlock();
1114
1115         return NULL;
1116 }
1117
1118 static inline struct hci_conn *hci_conn_hash_lookup_handle(struct hci_dev *hdev,
1119                                                                 __u16 handle)
1120 {
1121         struct hci_conn_hash *h = &hdev->conn_hash;
1122         struct hci_conn  *c;
1123
1124         rcu_read_lock();
1125
1126         list_for_each_entry_rcu(c, &h->list, list) {
1127                 if (c->handle == handle) {
1128                         rcu_read_unlock();
1129                         return c;
1130                 }
1131         }
1132         rcu_read_unlock();
1133
1134         return NULL;
1135 }
1136
1137 static inline struct hci_conn *hci_conn_hash_lookup_ba(struct hci_dev *hdev,
1138                                                         __u8 type, bdaddr_t *ba)
1139 {
1140         struct hci_conn_hash *h = &hdev->conn_hash;
1141         struct hci_conn  *c;
1142
1143         rcu_read_lock();
1144
1145         list_for_each_entry_rcu(c, &h->list, list) {
1146                 if (c->type == type && !bacmp(&c->dst, ba)) {
1147                         rcu_read_unlock();
1148                         return c;
1149                 }
1150         }
1151
1152         rcu_read_unlock();
1153
1154         return NULL;
1155 }
1156
1157 static inline struct hci_conn *hci_conn_hash_lookup_le(struct hci_dev *hdev,
1158                                                        bdaddr_t *ba,
1159                                                        __u8 ba_type)
1160 {
1161         struct hci_conn_hash *h = &hdev->conn_hash;
1162         struct hci_conn  *c;
1163
1164         rcu_read_lock();
1165
1166         list_for_each_entry_rcu(c, &h->list, list) {
1167                 if (c->type != LE_LINK)
1168                        continue;
1169
1170                 if (ba_type == c->dst_type && !bacmp(&c->dst, ba)) {
1171                         rcu_read_unlock();
1172                         return c;
1173                 }
1174         }
1175
1176         rcu_read_unlock();
1177
1178         return NULL;
1179 }
1180
1181 static inline struct hci_conn *hci_conn_hash_lookup_cis(struct hci_dev *hdev,
1182                                                         bdaddr_t *ba,
1183                                                         __u8 ba_type,
1184                                                         __u8 cig,
1185                                                         __u8 id)
1186 {
1187         struct hci_conn_hash *h = &hdev->conn_hash;
1188         struct hci_conn  *c;
1189
1190         rcu_read_lock();
1191
1192         list_for_each_entry_rcu(c, &h->list, list) {
1193                 if (c->type != ISO_LINK)
1194                         continue;
1195
1196                 /* Match CIG ID if set */
1197                 if (cig != BT_ISO_QOS_CIG_UNSET && cig != c->iso_qos.ucast.cig)
1198                         continue;
1199
1200                 /* Match CIS ID if set */
1201                 if (id != BT_ISO_QOS_CIS_UNSET && id != c->iso_qos.ucast.cis)
1202                         continue;
1203
1204                 if (ba_type == c->dst_type && !bacmp(&c->dst, ba)) {
1205                         rcu_read_unlock();
1206                         return c;
1207                 }
1208         }
1209
1210         rcu_read_unlock();
1211
1212         return NULL;
1213 }
1214
1215 static inline struct hci_conn *hci_conn_hash_lookup_cig(struct hci_dev *hdev,
1216                                                         __u8 handle)
1217 {
1218         struct hci_conn_hash *h = &hdev->conn_hash;
1219         struct hci_conn  *c;
1220
1221         rcu_read_lock();
1222
1223         list_for_each_entry_rcu(c, &h->list, list) {
1224                 if (c->type != ISO_LINK)
1225                         continue;
1226
1227                 if (handle == c->iso_qos.ucast.cig) {
1228                         rcu_read_unlock();
1229                         return c;
1230                 }
1231         }
1232
1233         rcu_read_unlock();
1234
1235         return NULL;
1236 }
1237
1238 static inline struct hci_conn *hci_conn_hash_lookup_big(struct hci_dev *hdev,
1239                                                         __u8 handle)
1240 {
1241         struct hci_conn_hash *h = &hdev->conn_hash;
1242         struct hci_conn  *c;
1243
1244         rcu_read_lock();
1245
1246         list_for_each_entry_rcu(c, &h->list, list) {
1247                 if (bacmp(&c->dst, BDADDR_ANY) || c->type != ISO_LINK)
1248                         continue;
1249
1250                 if (handle == c->iso_qos.bcast.big) {
1251                         rcu_read_unlock();
1252                         return c;
1253                 }
1254         }
1255
1256         rcu_read_unlock();
1257
1258         return NULL;
1259 }
1260
1261 static inline struct hci_conn *hci_conn_hash_lookup_state(struct hci_dev *hdev,
1262                                                         __u8 type, __u16 state)
1263 {
1264         struct hci_conn_hash *h = &hdev->conn_hash;
1265         struct hci_conn  *c;
1266
1267         rcu_read_lock();
1268
1269         list_for_each_entry_rcu(c, &h->list, list) {
1270                 if (c->type == type && c->state == state) {
1271                         rcu_read_unlock();
1272                         return c;
1273                 }
1274         }
1275
1276         rcu_read_unlock();
1277
1278         return NULL;
1279 }
1280
1281 typedef void (*hci_conn_func_t)(struct hci_conn *conn, void *data);
1282 static inline void hci_conn_hash_list_state(struct hci_dev *hdev,
1283                                             hci_conn_func_t func, __u8 type,
1284                                             __u16 state, void *data)
1285 {
1286         struct hci_conn_hash *h = &hdev->conn_hash;
1287         struct hci_conn  *c;
1288
1289         if (!func)
1290                 return;
1291
1292         rcu_read_lock();
1293
1294         list_for_each_entry_rcu(c, &h->list, list) {
1295                 if (c->type == type && c->state == state)
1296                         func(c, data);
1297         }
1298
1299         rcu_read_unlock();
1300 }
1301
1302 static inline struct hci_conn *hci_lookup_le_connect(struct hci_dev *hdev)
1303 {
1304         struct hci_conn_hash *h = &hdev->conn_hash;
1305         struct hci_conn  *c;
1306
1307         rcu_read_lock();
1308
1309         list_for_each_entry_rcu(c, &h->list, list) {
1310                 if (c->type == LE_LINK && c->state == BT_CONNECT &&
1311                     !test_bit(HCI_CONN_SCANNING, &c->flags)) {
1312                         rcu_read_unlock();
1313                         return c;
1314                 }
1315         }
1316
1317         rcu_read_unlock();
1318
1319         return NULL;
1320 }
1321
1322 int hci_disconnect(struct hci_conn *conn, __u8 reason);
1323 bool hci_setup_sync(struct hci_conn *conn, __u16 handle);
1324 void hci_sco_setup(struct hci_conn *conn, __u8 status);
1325 bool hci_iso_setup_path(struct hci_conn *conn);
1326 int hci_le_create_cis(struct hci_conn *conn);
1327
1328 struct hci_conn *hci_conn_add(struct hci_dev *hdev, int type, bdaddr_t *dst,
1329                               u8 role);
1330 void hci_conn_del(struct hci_conn *conn);
1331 void hci_conn_hash_flush(struct hci_dev *hdev);
1332 void hci_conn_check_pending(struct hci_dev *hdev);
1333
1334 struct hci_chan *hci_chan_create(struct hci_conn *conn);
1335 void hci_chan_del(struct hci_chan *chan);
1336 void hci_chan_list_flush(struct hci_conn *conn);
1337 struct hci_chan *hci_chan_lookup_handle(struct hci_dev *hdev, __u16 handle);
1338
1339 struct hci_conn *hci_connect_le_scan(struct hci_dev *hdev, bdaddr_t *dst,
1340                                      u8 dst_type, u8 sec_level,
1341                                      u16 conn_timeout,
1342                                      enum conn_reasons conn_reason);
1343 struct hci_conn *hci_connect_le(struct hci_dev *hdev, bdaddr_t *dst,
1344                                 u8 dst_type, bool dst_resolved, u8 sec_level,
1345                                 u16 conn_timeout, u8 role);
1346 struct hci_conn *hci_connect_acl(struct hci_dev *hdev, bdaddr_t *dst,
1347                                  u8 sec_level, u8 auth_type,
1348                                  enum conn_reasons conn_reason);
1349 struct hci_conn *hci_connect_sco(struct hci_dev *hdev, int type, bdaddr_t *dst,
1350                                  __u16 setting, struct bt_codec *codec);
1351 struct hci_conn *hci_bind_cis(struct hci_dev *hdev, bdaddr_t *dst,
1352                               __u8 dst_type, struct bt_iso_qos *qos);
1353 struct hci_conn *hci_connect_cis(struct hci_dev *hdev, bdaddr_t *dst,
1354                                  __u8 dst_type, struct bt_iso_qos *qos);
1355 struct hci_conn *hci_connect_bis(struct hci_dev *hdev, bdaddr_t *dst,
1356                                  __u8 dst_type, struct bt_iso_qos *qos,
1357                                  __u8 data_len, __u8 *data);
1358 int hci_pa_create_sync(struct hci_dev *hdev, bdaddr_t *dst, __u8 dst_type,
1359                        __u8 sid, struct bt_iso_qos *qos);
1360 int hci_le_big_create_sync(struct hci_dev *hdev, struct bt_iso_qos *qos,
1361                            __u16 sync_handle, __u8 num_bis, __u8 bis[]);
1362 int hci_conn_check_link_mode(struct hci_conn *conn);
1363 int hci_conn_check_secure(struct hci_conn *conn, __u8 sec_level);
1364 int hci_conn_security(struct hci_conn *conn, __u8 sec_level, __u8 auth_type,
1365                       bool initiator);
1366 int hci_conn_switch_role(struct hci_conn *conn, __u8 role);
1367
1368 void hci_conn_enter_active_mode(struct hci_conn *conn, __u8 force_active);
1369
1370 void hci_conn_failed(struct hci_conn *conn, u8 status);
1371
1372 /*
1373  * hci_conn_get() and hci_conn_put() are used to control the life-time of an
1374  * "hci_conn" object. They do not guarantee that the hci_conn object is running,
1375  * working or anything else. They just guarantee that the object is available
1376  * and can be dereferenced. So you can use its locks, local variables and any
1377  * other constant data.
1378  * Before accessing runtime data, you _must_ lock the object and then check that
1379  * it is still running. As soon as you release the locks, the connection might
1380  * get dropped, though.
1381  *
1382  * On the other hand, hci_conn_hold() and hci_conn_drop() are used to control
1383  * how long the underlying connection is held. So every channel that runs on the
1384  * hci_conn object calls this to prevent the connection from disappearing. As
1385  * long as you hold a device, you must also guarantee that you have a valid
1386  * reference to the device via hci_conn_get() (or the initial reference from
1387  * hci_conn_add()).
1388  * The hold()/drop() ref-count is known to drop below 0 sometimes, which doesn't
1389  * break because nobody cares for that. But this means, we cannot use
1390  * _get()/_drop() in it, but require the caller to have a valid ref (FIXME).
1391  */
1392
1393 static inline struct hci_conn *hci_conn_get(struct hci_conn *conn)
1394 {
1395         get_device(&conn->dev);
1396         return conn;
1397 }
1398
1399 static inline void hci_conn_put(struct hci_conn *conn)
1400 {
1401         put_device(&conn->dev);
1402 }
1403
1404 static inline struct hci_conn *hci_conn_hold(struct hci_conn *conn)
1405 {
1406         BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1407
1408         atomic_inc(&conn->refcnt);
1409         cancel_delayed_work(&conn->disc_work);
1410
1411         return conn;
1412 }
1413
1414 static inline void hci_conn_drop(struct hci_conn *conn)
1415 {
1416         BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1417
1418         if (atomic_dec_and_test(&conn->refcnt)) {
1419                 unsigned long timeo;
1420
1421                 switch (conn->type) {
1422                 case ACL_LINK:
1423                 case LE_LINK:
1424                         cancel_delayed_work(&conn->idle_work);
1425                         if (conn->state == BT_CONNECTED) {
1426                                 timeo = conn->disc_timeout;
1427                                 if (!conn->out)
1428                                         timeo *= 2;
1429                         } else {
1430                                 timeo = 0;
1431                         }
1432                         break;
1433
1434                 case AMP_LINK:
1435                         timeo = conn->disc_timeout;
1436                         break;
1437
1438                 default:
1439                         timeo = 0;
1440                         break;
1441                 }
1442
1443                 cancel_delayed_work(&conn->disc_work);
1444                 queue_delayed_work(conn->hdev->workqueue,
1445                                    &conn->disc_work, timeo);
1446         }
1447 }
1448
1449 /* ----- HCI Devices ----- */
1450 static inline void hci_dev_put(struct hci_dev *d)
1451 {
1452         BT_DBG("%s orig refcnt %d", d->name,
1453                kref_read(&d->dev.kobj.kref));
1454
1455         put_device(&d->dev);
1456 }
1457
1458 static inline struct hci_dev *hci_dev_hold(struct hci_dev *d)
1459 {
1460         BT_DBG("%s orig refcnt %d", d->name,
1461                kref_read(&d->dev.kobj.kref));
1462
1463         get_device(&d->dev);
1464         return d;
1465 }
1466
1467 #define hci_dev_lock(d)         mutex_lock(&d->lock)
1468 #define hci_dev_unlock(d)       mutex_unlock(&d->lock)
1469
1470 #define to_hci_dev(d) container_of(d, struct hci_dev, dev)
1471 #define to_hci_conn(c) container_of(c, struct hci_conn, dev)
1472
1473 static inline void *hci_get_drvdata(struct hci_dev *hdev)
1474 {
1475         return dev_get_drvdata(&hdev->dev);
1476 }
1477
1478 static inline void hci_set_drvdata(struct hci_dev *hdev, void *data)
1479 {
1480         dev_set_drvdata(&hdev->dev, data);
1481 }
1482
1483 static inline void *hci_get_priv(struct hci_dev *hdev)
1484 {
1485         return (char *)hdev + sizeof(*hdev);
1486 }
1487
1488 struct hci_dev *hci_dev_get(int index);
1489 struct hci_dev *hci_get_route(bdaddr_t *dst, bdaddr_t *src, u8 src_type);
1490
1491 struct hci_dev *hci_alloc_dev_priv(int sizeof_priv);
1492
1493 static inline struct hci_dev *hci_alloc_dev(void)
1494 {
1495         return hci_alloc_dev_priv(0);
1496 }
1497
1498 void hci_free_dev(struct hci_dev *hdev);
1499 int hci_register_dev(struct hci_dev *hdev);
1500 void hci_unregister_dev(struct hci_dev *hdev);
1501 void hci_release_dev(struct hci_dev *hdev);
1502 int hci_register_suspend_notifier(struct hci_dev *hdev);
1503 int hci_unregister_suspend_notifier(struct hci_dev *hdev);
1504 int hci_suspend_dev(struct hci_dev *hdev);
1505 int hci_resume_dev(struct hci_dev *hdev);
1506 int hci_reset_dev(struct hci_dev *hdev);
1507 int hci_recv_frame(struct hci_dev *hdev, struct sk_buff *skb);
1508 int hci_recv_diag(struct hci_dev *hdev, struct sk_buff *skb);
1509 __printf(2, 3) void hci_set_hw_info(struct hci_dev *hdev, const char *fmt, ...);
1510 __printf(2, 3) void hci_set_fw_info(struct hci_dev *hdev, const char *fmt, ...);
1511
1512 static inline void hci_set_msft_opcode(struct hci_dev *hdev, __u16 opcode)
1513 {
1514 #if IS_ENABLED(CONFIG_BT_MSFTEXT)
1515         hdev->msft_opcode = opcode;
1516 #endif
1517 }
1518
1519 static inline void hci_set_aosp_capable(struct hci_dev *hdev)
1520 {
1521 #if IS_ENABLED(CONFIG_BT_AOSPEXT)
1522         hdev->aosp_capable = true;
1523 #endif
1524 }
1525
1526 static inline void hci_devcd_setup(struct hci_dev *hdev)
1527 {
1528 #ifdef CONFIG_DEV_COREDUMP
1529         INIT_WORK(&hdev->dump.dump_rx, hci_devcd_rx);
1530         INIT_DELAYED_WORK(&hdev->dump.dump_timeout, hci_devcd_timeout);
1531         skb_queue_head_init(&hdev->dump.dump_q);
1532 #endif
1533 }
1534
1535 int hci_dev_open(__u16 dev);
1536 int hci_dev_close(__u16 dev);
1537 int hci_dev_do_close(struct hci_dev *hdev);
1538 int hci_dev_reset(__u16 dev);
1539 int hci_dev_reset_stat(__u16 dev);
1540 int hci_dev_cmd(unsigned int cmd, void __user *arg);
1541 int hci_get_dev_list(void __user *arg);
1542 int hci_get_dev_info(void __user *arg);
1543 int hci_get_conn_list(void __user *arg);
1544 int hci_get_conn_info(struct hci_dev *hdev, void __user *arg);
1545 int hci_get_auth_info(struct hci_dev *hdev, void __user *arg);
1546 int hci_inquiry(void __user *arg);
1547
1548 struct bdaddr_list *hci_bdaddr_list_lookup(struct list_head *list,
1549                                            bdaddr_t *bdaddr, u8 type);
1550 struct bdaddr_list_with_irk *hci_bdaddr_list_lookup_with_irk(
1551                                     struct list_head *list, bdaddr_t *bdaddr,
1552                                     u8 type);
1553 struct bdaddr_list_with_flags *
1554 hci_bdaddr_list_lookup_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1555                                   u8 type);
1556 int hci_bdaddr_list_add(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1557 int hci_bdaddr_list_add_with_irk(struct list_head *list, bdaddr_t *bdaddr,
1558                                  u8 type, u8 *peer_irk, u8 *local_irk);
1559 int hci_bdaddr_list_add_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1560                                    u8 type, u32 flags);
1561 int hci_bdaddr_list_del(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1562 int hci_bdaddr_list_del_with_irk(struct list_head *list, bdaddr_t *bdaddr,
1563                                  u8 type);
1564 int hci_bdaddr_list_del_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1565                                    u8 type);
1566 void hci_bdaddr_list_clear(struct list_head *list);
1567
1568 struct hci_conn_params *hci_conn_params_lookup(struct hci_dev *hdev,
1569                                                bdaddr_t *addr, u8 addr_type);
1570 struct hci_conn_params *hci_conn_params_add(struct hci_dev *hdev,
1571                                             bdaddr_t *addr, u8 addr_type);
1572 void hci_conn_params_del(struct hci_dev *hdev, bdaddr_t *addr, u8 addr_type);
1573 void hci_conn_params_clear_disabled(struct hci_dev *hdev);
1574
1575 struct hci_conn_params *hci_pend_le_action_lookup(struct list_head *list,
1576                                                   bdaddr_t *addr,
1577                                                   u8 addr_type);
1578
1579 void hci_uuids_clear(struct hci_dev *hdev);
1580
1581 void hci_link_keys_clear(struct hci_dev *hdev);
1582 struct link_key *hci_find_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1583 struct link_key *hci_add_link_key(struct hci_dev *hdev, struct hci_conn *conn,
1584                                   bdaddr_t *bdaddr, u8 *val, u8 type,
1585                                   u8 pin_len, bool *persistent);
1586 struct smp_ltk *hci_add_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1587                             u8 addr_type, u8 type, u8 authenticated,
1588                             u8 tk[16], u8 enc_size, __le16 ediv, __le64 rand);
1589 struct smp_ltk *hci_find_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1590                              u8 addr_type, u8 role);
1591 int hci_remove_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 bdaddr_type);
1592 void hci_smp_ltks_clear(struct hci_dev *hdev);
1593 int hci_remove_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1594
1595 struct smp_irk *hci_find_irk_by_rpa(struct hci_dev *hdev, bdaddr_t *rpa);
1596 struct smp_irk *hci_find_irk_by_addr(struct hci_dev *hdev, bdaddr_t *bdaddr,
1597                                      u8 addr_type);
1598 struct smp_irk *hci_add_irk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1599                             u8 addr_type, u8 val[16], bdaddr_t *rpa);
1600 void hci_remove_irk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 addr_type);
1601 bool hci_is_blocked_key(struct hci_dev *hdev, u8 type, u8 val[16]);
1602 void hci_blocked_keys_clear(struct hci_dev *hdev);
1603 void hci_smp_irks_clear(struct hci_dev *hdev);
1604
1605 bool hci_bdaddr_is_paired(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type);
1606
1607 void hci_remote_oob_data_clear(struct hci_dev *hdev);
1608 struct oob_data *hci_find_remote_oob_data(struct hci_dev *hdev,
1609                                           bdaddr_t *bdaddr, u8 bdaddr_type);
1610 int hci_add_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1611                             u8 bdaddr_type, u8 *hash192, u8 *rand192,
1612                             u8 *hash256, u8 *rand256);
1613 int hci_remove_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1614                                u8 bdaddr_type);
1615
1616 void hci_adv_instances_clear(struct hci_dev *hdev);
1617 struct adv_info *hci_find_adv_instance(struct hci_dev *hdev, u8 instance);
1618 struct adv_info *hci_get_next_instance(struct hci_dev *hdev, u8 instance);
1619 struct adv_info *hci_add_adv_instance(struct hci_dev *hdev, u8 instance,
1620                                       u32 flags, u16 adv_data_len, u8 *adv_data,
1621                                       u16 scan_rsp_len, u8 *scan_rsp_data,
1622                                       u16 timeout, u16 duration, s8 tx_power,
1623                                       u32 min_interval, u32 max_interval,
1624                                       u8 mesh_handle);
1625 struct adv_info *hci_add_per_instance(struct hci_dev *hdev, u8 instance,
1626                                       u32 flags, u8 data_len, u8 *data,
1627                                       u32 min_interval, u32 max_interval);
1628 int hci_set_adv_instance_data(struct hci_dev *hdev, u8 instance,
1629                          u16 adv_data_len, u8 *adv_data,
1630                          u16 scan_rsp_len, u8 *scan_rsp_data);
1631 int hci_remove_adv_instance(struct hci_dev *hdev, u8 instance);
1632 void hci_adv_instances_set_rpa_expired(struct hci_dev *hdev, bool rpa_expired);
1633 u32 hci_adv_instance_flags(struct hci_dev *hdev, u8 instance);
1634 bool hci_adv_instance_is_scannable(struct hci_dev *hdev, u8 instance);
1635
1636 void hci_adv_monitors_clear(struct hci_dev *hdev);
1637 void hci_free_adv_monitor(struct hci_dev *hdev, struct adv_monitor *monitor);
1638 int hci_add_adv_monitor(struct hci_dev *hdev, struct adv_monitor *monitor);
1639 int hci_remove_single_adv_monitor(struct hci_dev *hdev, u16 handle);
1640 int hci_remove_all_adv_monitor(struct hci_dev *hdev);
1641 bool hci_is_adv_monitoring(struct hci_dev *hdev);
1642 int hci_get_adv_monitor_offload_ext(struct hci_dev *hdev);
1643
1644 void hci_event_packet(struct hci_dev *hdev, struct sk_buff *skb);
1645
1646 void hci_init_sysfs(struct hci_dev *hdev);
1647 void hci_conn_init_sysfs(struct hci_conn *conn);
1648 void hci_conn_add_sysfs(struct hci_conn *conn);
1649 void hci_conn_del_sysfs(struct hci_conn *conn);
1650
1651 #define SET_HCIDEV_DEV(hdev, pdev) ((hdev)->dev.parent = (pdev))
1652 #define GET_HCIDEV_DEV(hdev) ((hdev)->dev.parent)
1653
1654 /* ----- LMP capabilities ----- */
1655 #define lmp_encrypt_capable(dev)   ((dev)->features[0][0] & LMP_ENCRYPT)
1656 #define lmp_rswitch_capable(dev)   ((dev)->features[0][0] & LMP_RSWITCH)
1657 #define lmp_hold_capable(dev)      ((dev)->features[0][0] & LMP_HOLD)
1658 #define lmp_sniff_capable(dev)     ((dev)->features[0][0] & LMP_SNIFF)
1659 #define lmp_park_capable(dev)      ((dev)->features[0][1] & LMP_PARK)
1660 #define lmp_inq_rssi_capable(dev)  ((dev)->features[0][3] & LMP_RSSI_INQ)
1661 #define lmp_esco_capable(dev)      ((dev)->features[0][3] & LMP_ESCO)
1662 #define lmp_bredr_capable(dev)     (!((dev)->features[0][4] & LMP_NO_BREDR))
1663 #define lmp_le_capable(dev)        ((dev)->features[0][4] & LMP_LE)
1664 #define lmp_sniffsubr_capable(dev) ((dev)->features[0][5] & LMP_SNIFF_SUBR)
1665 #define lmp_pause_enc_capable(dev) ((dev)->features[0][5] & LMP_PAUSE_ENC)
1666 #define lmp_esco_2m_capable(dev)   ((dev)->features[0][5] & LMP_EDR_ESCO_2M)
1667 #define lmp_ext_inq_capable(dev)   ((dev)->features[0][6] & LMP_EXT_INQ)
1668 #define lmp_le_br_capable(dev)     (!!((dev)->features[0][6] & LMP_SIMUL_LE_BR))
1669 #define lmp_ssp_capable(dev)       ((dev)->features[0][6] & LMP_SIMPLE_PAIR)
1670 #define lmp_no_flush_capable(dev)  ((dev)->features[0][6] & LMP_NO_FLUSH)
1671 #define lmp_lsto_capable(dev)      ((dev)->features[0][7] & LMP_LSTO)
1672 #define lmp_inq_tx_pwr_capable(dev) ((dev)->features[0][7] & LMP_INQ_TX_PWR)
1673 #define lmp_ext_feat_capable(dev)  ((dev)->features[0][7] & LMP_EXTFEATURES)
1674 #define lmp_transp_capable(dev)    ((dev)->features[0][2] & LMP_TRANSPARENT)
1675 #define lmp_edr_2m_capable(dev)    ((dev)->features[0][3] & LMP_EDR_2M)
1676 #define lmp_edr_3m_capable(dev)    ((dev)->features[0][3] & LMP_EDR_3M)
1677 #define lmp_edr_3slot_capable(dev) ((dev)->features[0][4] & LMP_EDR_3SLOT)
1678 #define lmp_edr_5slot_capable(dev) ((dev)->features[0][5] & LMP_EDR_5SLOT)
1679
1680 /* ----- Extended LMP capabilities ----- */
1681 #define lmp_cpb_central_capable(dev) ((dev)->features[2][0] & LMP_CPB_CENTRAL)
1682 #define lmp_cpb_peripheral_capable(dev) ((dev)->features[2][0] & LMP_CPB_PERIPHERAL)
1683 #define lmp_sync_train_capable(dev) ((dev)->features[2][0] & LMP_SYNC_TRAIN)
1684 #define lmp_sync_scan_capable(dev)  ((dev)->features[2][0] & LMP_SYNC_SCAN)
1685 #define lmp_sc_capable(dev)         ((dev)->features[2][1] & LMP_SC)
1686 #define lmp_ping_capable(dev)       ((dev)->features[2][1] & LMP_PING)
1687
1688 /* ----- Host capabilities ----- */
1689 #define lmp_host_ssp_capable(dev)  ((dev)->features[1][0] & LMP_HOST_SSP)
1690 #define lmp_host_sc_capable(dev)   ((dev)->features[1][0] & LMP_HOST_SC)
1691 #define lmp_host_le_capable(dev)   (!!((dev)->features[1][0] & LMP_HOST_LE))
1692 #define lmp_host_le_br_capable(dev) (!!((dev)->features[1][0] & LMP_HOST_LE_BREDR))
1693
1694 #define hdev_is_powered(dev)   (test_bit(HCI_UP, &(dev)->flags) && \
1695                                 !hci_dev_test_flag(dev, HCI_AUTO_OFF))
1696 #define bredr_sc_enabled(dev)  (lmp_sc_capable(dev) && \
1697                                 hci_dev_test_flag(dev, HCI_SC_ENABLED))
1698 #define rpa_valid(dev)         (bacmp(&dev->rpa, BDADDR_ANY) && \
1699                                 !hci_dev_test_flag(dev, HCI_RPA_EXPIRED))
1700 #define adv_rpa_valid(adv)     (bacmp(&adv->random_addr, BDADDR_ANY) && \
1701                                 !adv->rpa_expired)
1702
1703 #define scan_1m(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_1M) || \
1704                       ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_1M))
1705
1706 #define le_2m_capable(dev) (((dev)->le_features[1] & HCI_LE_PHY_2M))
1707
1708 #define scan_2m(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_2M) || \
1709                       ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_2M))
1710
1711 #define le_coded_capable(dev) (((dev)->le_features[1] & HCI_LE_PHY_CODED))
1712
1713 #define scan_coded(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_CODED) || \
1714                          ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_CODED))
1715
1716 #define ll_privacy_capable(dev) ((dev)->le_features[0] & HCI_LE_LL_PRIVACY)
1717
1718 /* Use LL Privacy based address resolution if supported */
1719 #define use_ll_privacy(dev) (ll_privacy_capable(dev) && \
1720                              hci_dev_test_flag(dev, HCI_ENABLE_LL_PRIVACY))
1721
1722 #define privacy_mode_capable(dev) (use_ll_privacy(dev) && \
1723                                    (hdev->commands[39] & 0x04))
1724
1725 /* Use enhanced synchronous connection if command is supported and its quirk
1726  * has not been set.
1727  */
1728 #define enhanced_sync_conn_capable(dev) \
1729         (((dev)->commands[29] & 0x08) && \
1730          !test_bit(HCI_QUIRK_BROKEN_ENHANCED_SETUP_SYNC_CONN, &(dev)->quirks))
1731
1732 /* Use ext scanning if set ext scan param and ext scan enable is supported */
1733 #define use_ext_scan(dev) (((dev)->commands[37] & 0x20) && \
1734                            ((dev)->commands[37] & 0x40) && \
1735                            !test_bit(HCI_QUIRK_BROKEN_EXT_SCAN, &(dev)->quirks))
1736
1737 /* Use ext create connection if command is supported */
1738 #define use_ext_conn(dev) ((dev)->commands[37] & 0x80)
1739
1740 /* Extended advertising support */
1741 #define ext_adv_capable(dev) (((dev)->le_features[1] & HCI_LE_EXT_ADV))
1742
1743 /* BLUETOOTH CORE SPECIFICATION Version 5.3 | Vol 4, Part E page 1789:
1744  *
1745  * C24: Mandatory if the LE Controller supports Connection State and either
1746  * LE Feature (LL Privacy) or LE Feature (Extended Advertising) is supported
1747  */
1748 #define use_enhanced_conn_complete(dev) (ll_privacy_capable(dev) || \
1749                                          ext_adv_capable(dev))
1750
1751 /* Periodic advertising support */
1752 #define per_adv_capable(dev) (((dev)->le_features[1] & HCI_LE_PERIODIC_ADV))
1753
1754 /* CIS Master/Slave and BIS support */
1755 #define iso_capable(dev) (cis_capable(dev) || bis_capable(dev))
1756 #define cis_capable(dev) \
1757         (cis_central_capable(dev) || cis_peripheral_capable(dev))
1758 #define cis_central_capable(dev) \
1759         ((dev)->le_features[3] & HCI_LE_CIS_CENTRAL)
1760 #define cis_peripheral_capable(dev) \
1761         ((dev)->le_features[3] & HCI_LE_CIS_PERIPHERAL)
1762 #define bis_capable(dev) ((dev)->le_features[3] & HCI_LE_ISO_BROADCASTER)
1763
1764 #define mws_transport_config_capable(dev) (((dev)->commands[30] & 0x08) && \
1765         (!test_bit(HCI_QUIRK_BROKEN_MWS_TRANSPORT_CONFIG, &(dev)->quirks)))
1766
1767 /* ----- HCI protocols ----- */
1768 #define HCI_PROTO_DEFER             0x01
1769
1770 static inline int hci_proto_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
1771                                         __u8 type, __u8 *flags)
1772 {
1773         switch (type) {
1774         case ACL_LINK:
1775                 return l2cap_connect_ind(hdev, bdaddr);
1776
1777         case SCO_LINK:
1778         case ESCO_LINK:
1779                 return sco_connect_ind(hdev, bdaddr, flags);
1780
1781         case ISO_LINK:
1782                 return iso_connect_ind(hdev, bdaddr, flags);
1783
1784         default:
1785                 BT_ERR("unknown link type %d", type);
1786                 return -EINVAL;
1787         }
1788 }
1789
1790 static inline int hci_proto_disconn_ind(struct hci_conn *conn)
1791 {
1792         if (conn->type != ACL_LINK && conn->type != LE_LINK)
1793                 return HCI_ERROR_REMOTE_USER_TERM;
1794
1795         return l2cap_disconn_ind(conn);
1796 }
1797
1798 /* ----- HCI callbacks ----- */
1799 struct hci_cb {
1800         struct list_head list;
1801
1802         char *name;
1803
1804         void (*connect_cfm)     (struct hci_conn *conn, __u8 status);
1805         void (*disconn_cfm)     (struct hci_conn *conn, __u8 status);
1806         void (*security_cfm)    (struct hci_conn *conn, __u8 status,
1807                                                                 __u8 encrypt);
1808         void (*key_change_cfm)  (struct hci_conn *conn, __u8 status);
1809         void (*role_switch_cfm) (struct hci_conn *conn, __u8 status, __u8 role);
1810 };
1811
1812 static inline void hci_connect_cfm(struct hci_conn *conn, __u8 status)
1813 {
1814         struct hci_cb *cb;
1815
1816         mutex_lock(&hci_cb_list_lock);
1817         list_for_each_entry(cb, &hci_cb_list, list) {
1818                 if (cb->connect_cfm)
1819                         cb->connect_cfm(conn, status);
1820         }
1821         mutex_unlock(&hci_cb_list_lock);
1822
1823         if (conn->connect_cfm_cb)
1824                 conn->connect_cfm_cb(conn, status);
1825 }
1826
1827 static inline void hci_disconn_cfm(struct hci_conn *conn, __u8 reason)
1828 {
1829         struct hci_cb *cb;
1830
1831         mutex_lock(&hci_cb_list_lock);
1832         list_for_each_entry(cb, &hci_cb_list, list) {
1833                 if (cb->disconn_cfm)
1834                         cb->disconn_cfm(conn, reason);
1835         }
1836         mutex_unlock(&hci_cb_list_lock);
1837
1838         if (conn->disconn_cfm_cb)
1839                 conn->disconn_cfm_cb(conn, reason);
1840 }
1841
1842 static inline void hci_auth_cfm(struct hci_conn *conn, __u8 status)
1843 {
1844         struct hci_cb *cb;
1845         __u8 encrypt;
1846
1847         if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->flags))
1848                 return;
1849
1850         encrypt = test_bit(HCI_CONN_ENCRYPT, &conn->flags) ? 0x01 : 0x00;
1851
1852         mutex_lock(&hci_cb_list_lock);
1853         list_for_each_entry(cb, &hci_cb_list, list) {
1854                 if (cb->security_cfm)
1855                         cb->security_cfm(conn, status, encrypt);
1856         }
1857         mutex_unlock(&hci_cb_list_lock);
1858
1859         if (conn->security_cfm_cb)
1860                 conn->security_cfm_cb(conn, status);
1861 }
1862
1863 static inline void hci_encrypt_cfm(struct hci_conn *conn, __u8 status)
1864 {
1865         struct hci_cb *cb;
1866         __u8 encrypt;
1867
1868         if (conn->state == BT_CONFIG) {
1869                 if (!status)
1870                         conn->state = BT_CONNECTED;
1871
1872                 hci_connect_cfm(conn, status);
1873                 hci_conn_drop(conn);
1874                 return;
1875         }
1876
1877         if (!test_bit(HCI_CONN_ENCRYPT, &conn->flags))
1878                 encrypt = 0x00;
1879         else if (test_bit(HCI_CONN_AES_CCM, &conn->flags))
1880                 encrypt = 0x02;
1881         else
1882                 encrypt = 0x01;
1883
1884         if (!status) {
1885                 if (conn->sec_level == BT_SECURITY_SDP)
1886                         conn->sec_level = BT_SECURITY_LOW;
1887
1888                 if (conn->pending_sec_level > conn->sec_level)
1889                         conn->sec_level = conn->pending_sec_level;
1890         }
1891
1892         mutex_lock(&hci_cb_list_lock);
1893         list_for_each_entry(cb, &hci_cb_list, list) {
1894                 if (cb->security_cfm)
1895                         cb->security_cfm(conn, status, encrypt);
1896         }
1897         mutex_unlock(&hci_cb_list_lock);
1898
1899         if (conn->security_cfm_cb)
1900                 conn->security_cfm_cb(conn, status);
1901 }
1902
1903 static inline void hci_key_change_cfm(struct hci_conn *conn, __u8 status)
1904 {
1905         struct hci_cb *cb;
1906
1907         mutex_lock(&hci_cb_list_lock);
1908         list_for_each_entry(cb, &hci_cb_list, list) {
1909                 if (cb->key_change_cfm)
1910                         cb->key_change_cfm(conn, status);
1911         }
1912         mutex_unlock(&hci_cb_list_lock);
1913 }
1914
1915 static inline void hci_role_switch_cfm(struct hci_conn *conn, __u8 status,
1916                                                                 __u8 role)
1917 {
1918         struct hci_cb *cb;
1919
1920         mutex_lock(&hci_cb_list_lock);
1921         list_for_each_entry(cb, &hci_cb_list, list) {
1922                 if (cb->role_switch_cfm)
1923                         cb->role_switch_cfm(conn, status, role);
1924         }
1925         mutex_unlock(&hci_cb_list_lock);
1926 }
1927
1928 static inline bool hci_bdaddr_is_rpa(bdaddr_t *bdaddr, u8 addr_type)
1929 {
1930         if (addr_type != ADDR_LE_DEV_RANDOM)
1931                 return false;
1932
1933         if ((bdaddr->b[5] & 0xc0) == 0x40)
1934                return true;
1935
1936         return false;
1937 }
1938
1939 static inline bool hci_is_identity_address(bdaddr_t *addr, u8 addr_type)
1940 {
1941         if (addr_type == ADDR_LE_DEV_PUBLIC)
1942                 return true;
1943
1944         /* Check for Random Static address type */
1945         if ((addr->b[5] & 0xc0) == 0xc0)
1946                 return true;
1947
1948         return false;
1949 }
1950
1951 static inline struct smp_irk *hci_get_irk(struct hci_dev *hdev,
1952                                           bdaddr_t *bdaddr, u8 addr_type)
1953 {
1954         if (!hci_bdaddr_is_rpa(bdaddr, addr_type))
1955                 return NULL;
1956
1957         return hci_find_irk_by_rpa(hdev, bdaddr);
1958 }
1959
1960 static inline int hci_check_conn_params(u16 min, u16 max, u16 latency,
1961                                         u16 to_multiplier)
1962 {
1963         u16 max_latency;
1964
1965         if (min > max || min < 6 || max > 3200)
1966                 return -EINVAL;
1967
1968         if (to_multiplier < 10 || to_multiplier > 3200)
1969                 return -EINVAL;
1970
1971         if (max >= to_multiplier * 8)
1972                 return -EINVAL;
1973
1974         max_latency = (to_multiplier * 4 / max) - 1;
1975         if (latency > 499 || latency > max_latency)
1976                 return -EINVAL;
1977
1978         return 0;
1979 }
1980
1981 int hci_register_cb(struct hci_cb *hcb);
1982 int hci_unregister_cb(struct hci_cb *hcb);
1983
1984 int __hci_cmd_send(struct hci_dev *hdev, u16 opcode, u32 plen,
1985                    const void *param);
1986
1987 int hci_send_cmd(struct hci_dev *hdev, __u16 opcode, __u32 plen,
1988                  const void *param);
1989 void hci_send_acl(struct hci_chan *chan, struct sk_buff *skb, __u16 flags);
1990 void hci_send_sco(struct hci_conn *conn, struct sk_buff *skb);
1991 void hci_send_iso(struct hci_conn *conn, struct sk_buff *skb);
1992
1993 void *hci_sent_cmd_data(struct hci_dev *hdev, __u16 opcode);
1994 void *hci_recv_event_data(struct hci_dev *hdev, __u8 event);
1995
1996 u32 hci_conn_get_phy(struct hci_conn *conn);
1997
1998 /* ----- HCI Sockets ----- */
1999 void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb);
2000 void hci_send_to_channel(unsigned short channel, struct sk_buff *skb,
2001                          int flag, struct sock *skip_sk);
2002 void hci_send_to_monitor(struct hci_dev *hdev, struct sk_buff *skb);
2003 void hci_send_monitor_ctrl_event(struct hci_dev *hdev, u16 event,
2004                                  void *data, u16 data_len, ktime_t tstamp,
2005                                  int flag, struct sock *skip_sk);
2006
2007 void hci_sock_dev_event(struct hci_dev *hdev, int event);
2008
2009 #define HCI_MGMT_VAR_LEN        BIT(0)
2010 #define HCI_MGMT_NO_HDEV        BIT(1)
2011 #define HCI_MGMT_UNTRUSTED      BIT(2)
2012 #define HCI_MGMT_UNCONFIGURED   BIT(3)
2013 #define HCI_MGMT_HDEV_OPTIONAL  BIT(4)
2014
2015 struct hci_mgmt_handler {
2016         int (*func) (struct sock *sk, struct hci_dev *hdev, void *data,
2017                      u16 data_len);
2018         size_t data_len;
2019         unsigned long flags;
2020 };
2021
2022 struct hci_mgmt_chan {
2023         struct list_head list;
2024         unsigned short channel;
2025         size_t handler_count;
2026         const struct hci_mgmt_handler *handlers;
2027         void (*hdev_init) (struct sock *sk, struct hci_dev *hdev);
2028 };
2029
2030 int hci_mgmt_chan_register(struct hci_mgmt_chan *c);
2031 void hci_mgmt_chan_unregister(struct hci_mgmt_chan *c);
2032
2033 /* Management interface */
2034 #define DISCOV_TYPE_BREDR               (BIT(BDADDR_BREDR))
2035 #define DISCOV_TYPE_LE                  (BIT(BDADDR_LE_PUBLIC) | \
2036                                          BIT(BDADDR_LE_RANDOM))
2037 #define DISCOV_TYPE_INTERLEAVED         (BIT(BDADDR_BREDR) | \
2038                                          BIT(BDADDR_LE_PUBLIC) | \
2039                                          BIT(BDADDR_LE_RANDOM))
2040
2041 /* These LE scan and inquiry parameters were chosen according to LE General
2042  * Discovery Procedure specification.
2043  */
2044 #define DISCOV_LE_SCAN_WIN              0x12
2045 #define DISCOV_LE_SCAN_INT              0x12
2046 #define DISCOV_LE_TIMEOUT               10240   /* msec */
2047 #define DISCOV_INTERLEAVED_TIMEOUT      5120    /* msec */
2048 #define DISCOV_INTERLEAVED_INQUIRY_LEN  0x04
2049 #define DISCOV_BREDR_INQUIRY_LEN        0x08
2050 #define DISCOV_LE_RESTART_DELAY         msecs_to_jiffies(200)   /* msec */
2051 #define DISCOV_LE_FAST_ADV_INT_MIN      0x00A0  /* 100 msec */
2052 #define DISCOV_LE_FAST_ADV_INT_MAX      0x00F0  /* 150 msec */
2053 #define DISCOV_LE_PER_ADV_INT_MIN       0x00A0  /* 200 msec */
2054 #define DISCOV_LE_PER_ADV_INT_MAX       0x00A0  /* 200 msec */
2055 #define DISCOV_LE_ADV_MESH_MIN          0x00A0  /* 100 msec */
2056 #define DISCOV_LE_ADV_MESH_MAX          0x00A0  /* 100 msec */
2057 #define INTERVAL_TO_MS(x)               (((x) * 10) / 0x10)
2058
2059 #define NAME_RESOLVE_DURATION           msecs_to_jiffies(10240) /* 10.24 sec */
2060
2061 void mgmt_fill_version_info(void *ver);
2062 int mgmt_new_settings(struct hci_dev *hdev);
2063 void mgmt_index_added(struct hci_dev *hdev);
2064 void mgmt_index_removed(struct hci_dev *hdev);
2065 void mgmt_set_powered_failed(struct hci_dev *hdev, int err);
2066 void mgmt_power_on(struct hci_dev *hdev, int err);
2067 void __mgmt_power_off(struct hci_dev *hdev);
2068 void mgmt_new_link_key(struct hci_dev *hdev, struct link_key *key,
2069                        bool persistent);
2070 void mgmt_device_connected(struct hci_dev *hdev, struct hci_conn *conn,
2071                            u8 *name, u8 name_len);
2072 void mgmt_device_disconnected(struct hci_dev *hdev, bdaddr_t *bdaddr,
2073                               u8 link_type, u8 addr_type, u8 reason,
2074                               bool mgmt_connected);
2075 void mgmt_disconnect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr,
2076                             u8 link_type, u8 addr_type, u8 status);
2077 void mgmt_connect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2078                          u8 addr_type, u8 status);
2079 void mgmt_pin_code_request(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 secure);
2080 void mgmt_pin_code_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2081                                   u8 status);
2082 void mgmt_pin_code_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2083                                       u8 status);
2084 int mgmt_user_confirm_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
2085                               u8 link_type, u8 addr_type, u32 value,
2086                               u8 confirm_hint);
2087 int mgmt_user_confirm_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2088                                      u8 link_type, u8 addr_type, u8 status);
2089 int mgmt_user_confirm_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2090                                          u8 link_type, u8 addr_type, u8 status);
2091 int mgmt_user_passkey_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
2092                               u8 link_type, u8 addr_type);
2093 int mgmt_user_passkey_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2094                                      u8 link_type, u8 addr_type, u8 status);
2095 int mgmt_user_passkey_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2096                                          u8 link_type, u8 addr_type, u8 status);
2097 int mgmt_user_passkey_notify(struct hci_dev *hdev, bdaddr_t *bdaddr,
2098                              u8 link_type, u8 addr_type, u32 passkey,
2099                              u8 entered);
2100 void mgmt_auth_failed(struct hci_conn *conn, u8 status);
2101 void mgmt_auth_enable_complete(struct hci_dev *hdev, u8 status);
2102 void mgmt_set_class_of_dev_complete(struct hci_dev *hdev, u8 *dev_class,
2103                                     u8 status);
2104 void mgmt_set_local_name_complete(struct hci_dev *hdev, u8 *name, u8 status);
2105 void mgmt_start_discovery_complete(struct hci_dev *hdev, u8 status);
2106 void mgmt_stop_discovery_complete(struct hci_dev *hdev, u8 status);
2107 void mgmt_device_found(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2108                        u8 addr_type, u8 *dev_class, s8 rssi, u32 flags,
2109                        u8 *eir, u16 eir_len, u8 *scan_rsp, u8 scan_rsp_len,
2110                        u64 instant);
2111 void mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2112                       u8 addr_type, s8 rssi, u8 *name, u8 name_len);
2113 void mgmt_discovering(struct hci_dev *hdev, u8 discovering);
2114 void mgmt_suspending(struct hci_dev *hdev, u8 state);
2115 void mgmt_resuming(struct hci_dev *hdev, u8 reason, bdaddr_t *bdaddr,
2116                    u8 addr_type);
2117 bool mgmt_powering_down(struct hci_dev *hdev);
2118 void mgmt_new_ltk(struct hci_dev *hdev, struct smp_ltk *key, bool persistent);
2119 void mgmt_new_irk(struct hci_dev *hdev, struct smp_irk *irk, bool persistent);
2120 void mgmt_new_csrk(struct hci_dev *hdev, struct smp_csrk *csrk,
2121                    bool persistent);
2122 void mgmt_new_conn_param(struct hci_dev *hdev, bdaddr_t *bdaddr,
2123                          u8 bdaddr_type, u8 store_hint, u16 min_interval,
2124                          u16 max_interval, u16 latency, u16 timeout);
2125 void mgmt_smp_complete(struct hci_conn *conn, bool complete);
2126 bool mgmt_get_connectable(struct hci_dev *hdev);
2127 u8 mgmt_get_adv_discov_flags(struct hci_dev *hdev);
2128 void mgmt_advertising_added(struct sock *sk, struct hci_dev *hdev,
2129                             u8 instance);
2130 void mgmt_advertising_removed(struct sock *sk, struct hci_dev *hdev,
2131                               u8 instance);
2132 void mgmt_adv_monitor_removed(struct hci_dev *hdev, u16 handle);
2133 int mgmt_phy_configuration_changed(struct hci_dev *hdev, struct sock *skip);
2134 void mgmt_adv_monitor_device_lost(struct hci_dev *hdev, u16 handle,
2135                                   bdaddr_t *bdaddr, u8 addr_type);
2136
2137 int hci_abort_conn(struct hci_conn *conn, u8 reason);
2138 u8 hci_le_conn_update(struct hci_conn *conn, u16 min, u16 max, u16 latency,
2139                       u16 to_multiplier);
2140 void hci_le_start_enc(struct hci_conn *conn, __le16 ediv, __le64 rand,
2141                       __u8 ltk[16], __u8 key_size);
2142
2143 void hci_copy_identity_address(struct hci_dev *hdev, bdaddr_t *bdaddr,
2144                                u8 *bdaddr_type);
2145
2146 #define SCO_AIRMODE_MASK       0x0003
2147 #define SCO_AIRMODE_CVSD       0x0000
2148 #define SCO_AIRMODE_TRANSP     0x0003
2149
2150 #define LOCAL_CODEC_ACL_MASK    BIT(0)
2151 #define LOCAL_CODEC_SCO_MASK    BIT(1)
2152
2153 #define TRANSPORT_TYPE_MAX      0x04
2154
2155 #endif /* __HCI_CORE_H */