GNU Linux-libre 4.14.259-gnu1
[releases.git] / include / net / bluetooth / hci_core.h
1 /*
2    BlueZ - Bluetooth protocol stack for Linux
3    Copyright (c) 2000-2001, 2010, Code Aurora Forum. All rights reserved.
4
5    Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
6
7    This program is free software; you can redistribute it and/or modify
8    it under the terms of the GNU General Public License version 2 as
9    published by the Free Software Foundation;
10
11    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
12    OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
13    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
14    IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
15    CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
16    WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
17    ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
18    OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
19
20    ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
21    COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
22    SOFTWARE IS DISCLAIMED.
23 */
24
25 #ifndef __HCI_CORE_H
26 #define __HCI_CORE_H
27
28 #include <linux/leds.h>
29 #include <linux/rculist.h>
30
31 #include <net/bluetooth/hci.h>
32 #include <net/bluetooth/hci_sock.h>
33
34 /* HCI priority */
35 #define HCI_PRIO_MAX    7
36
37 /* HCI Core structures */
38 struct inquiry_data {
39         bdaddr_t        bdaddr;
40         __u8            pscan_rep_mode;
41         __u8            pscan_period_mode;
42         __u8            pscan_mode;
43         __u8            dev_class[3];
44         __le16          clock_offset;
45         __s8            rssi;
46         __u8            ssp_mode;
47 };
48
49 struct inquiry_entry {
50         struct list_head        all;            /* inq_cache.all */
51         struct list_head        list;           /* unknown or resolve */
52         enum {
53                 NAME_NOT_KNOWN,
54                 NAME_NEEDED,
55                 NAME_PENDING,
56                 NAME_KNOWN,
57         } name_state;
58         __u32                   timestamp;
59         struct inquiry_data     data;
60 };
61
62 struct discovery_state {
63         int                     type;
64         enum {
65                 DISCOVERY_STOPPED,
66                 DISCOVERY_STARTING,
67                 DISCOVERY_FINDING,
68                 DISCOVERY_RESOLVING,
69                 DISCOVERY_STOPPING,
70         } state;
71         struct list_head        all;    /* All devices found during inquiry */
72         struct list_head        unknown;        /* Name state not known */
73         struct list_head        resolve;        /* Name needs to be resolved */
74         __u32                   timestamp;
75         bdaddr_t                last_adv_addr;
76         u8                      last_adv_addr_type;
77         s8                      last_adv_rssi;
78         u32                     last_adv_flags;
79         u8                      last_adv_data[HCI_MAX_AD_LENGTH];
80         u8                      last_adv_data_len;
81         bool                    report_invalid_rssi;
82         bool                    result_filtering;
83         bool                    limited;
84         s8                      rssi;
85         u16                     uuid_count;
86         u8                      (*uuids)[16];
87         unsigned long           scan_start;
88         unsigned long           scan_duration;
89 };
90
91 struct hci_conn_hash {
92         struct list_head list;
93         unsigned int     acl_num;
94         unsigned int     amp_num;
95         unsigned int     sco_num;
96         unsigned int     le_num;
97         unsigned int     le_num_slave;
98 };
99
100 struct bdaddr_list {
101         struct list_head list;
102         bdaddr_t bdaddr;
103         u8 bdaddr_type;
104 };
105
106 struct bt_uuid {
107         struct list_head list;
108         u8 uuid[16];
109         u8 size;
110         u8 svc_hint;
111 };
112
113 struct smp_csrk {
114         bdaddr_t bdaddr;
115         u8 bdaddr_type;
116         u8 type;
117         u8 val[16];
118 };
119
120 struct smp_ltk {
121         struct list_head list;
122         struct rcu_head rcu;
123         bdaddr_t bdaddr;
124         u8 bdaddr_type;
125         u8 authenticated;
126         u8 type;
127         u8 enc_size;
128         __le16 ediv;
129         __le64 rand;
130         u8 val[16];
131 };
132
133 struct smp_irk {
134         struct list_head list;
135         struct rcu_head rcu;
136         bdaddr_t rpa;
137         bdaddr_t bdaddr;
138         u8 addr_type;
139         u8 val[16];
140 };
141
142 struct link_key {
143         struct list_head list;
144         struct rcu_head rcu;
145         bdaddr_t bdaddr;
146         u8 type;
147         u8 val[HCI_LINK_KEY_SIZE];
148         u8 pin_len;
149 };
150
151 struct oob_data {
152         struct list_head list;
153         bdaddr_t bdaddr;
154         u8 bdaddr_type;
155         u8 present;
156         u8 hash192[16];
157         u8 rand192[16];
158         u8 hash256[16];
159         u8 rand256[16];
160 };
161
162 struct adv_info {
163         struct list_head list;
164         bool pending;
165         __u8    instance;
166         __u32   flags;
167         __u16   timeout;
168         __u16   remaining_time;
169         __u16   duration;
170         __u16   adv_data_len;
171         __u8    adv_data[HCI_MAX_AD_LENGTH];
172         __u16   scan_rsp_len;
173         __u8    scan_rsp_data[HCI_MAX_AD_LENGTH];
174 };
175
176 #define HCI_MAX_ADV_INSTANCES           5
177 #define HCI_DEFAULT_ADV_DURATION        2
178
179 #define HCI_MAX_SHORT_NAME_LENGTH       10
180
181 /* Min encryption key size to match with SMP */
182 #define HCI_MIN_ENC_KEY_SIZE            7
183
184 /* Default LE RPA expiry time, 15 minutes */
185 #define HCI_DEFAULT_RPA_TIMEOUT         (15 * 60)
186
187 /* Default min/max age of connection information (1s/3s) */
188 #define DEFAULT_CONN_INFO_MIN_AGE       1000
189 #define DEFAULT_CONN_INFO_MAX_AGE       3000
190
191 struct amp_assoc {
192         __u16   len;
193         __u16   offset;
194         __u16   rem_len;
195         __u16   len_so_far;
196         __u8    data[HCI_MAX_AMP_ASSOC_SIZE];
197 };
198
199 #define HCI_MAX_PAGES   3
200
201 struct hci_dev {
202         struct list_head list;
203         struct mutex    lock;
204
205         char            name[8];
206         unsigned long   flags;
207         __u16           id;
208         __u8            bus;
209         __u8            dev_type;
210         bdaddr_t        bdaddr;
211         bdaddr_t        setup_addr;
212         bdaddr_t        public_addr;
213         bdaddr_t        random_addr;
214         bdaddr_t        static_addr;
215         __u8            adv_addr_type;
216         __u8            dev_name[HCI_MAX_NAME_LENGTH];
217         __u8            short_name[HCI_MAX_SHORT_NAME_LENGTH];
218         __u8            eir[HCI_MAX_EIR_LENGTH];
219         __u16           appearance;
220         __u8            dev_class[3];
221         __u8            major_class;
222         __u8            minor_class;
223         __u8            max_page;
224         __u8            features[HCI_MAX_PAGES][8];
225         __u8            le_features[8];
226         __u8            le_white_list_size;
227         __u8            le_states[8];
228         __u8            commands[64];
229         __u8            hci_ver;
230         __u16           hci_rev;
231         __u8            lmp_ver;
232         __u16           manufacturer;
233         __u16           lmp_subver;
234         __u16           voice_setting;
235         __u8            num_iac;
236         __u8            stored_max_keys;
237         __u8            stored_num_keys;
238         __u8            io_capability;
239         __s8            inq_tx_power;
240         __u16           page_scan_interval;
241         __u16           page_scan_window;
242         __u8            page_scan_type;
243         __u8            le_adv_channel_map;
244         __u16           le_adv_min_interval;
245         __u16           le_adv_max_interval;
246         __u8            le_scan_type;
247         __u16           le_scan_interval;
248         __u16           le_scan_window;
249         __u16           le_conn_min_interval;
250         __u16           le_conn_max_interval;
251         __u16           le_conn_latency;
252         __u16           le_supv_timeout;
253         __u16           le_def_tx_len;
254         __u16           le_def_tx_time;
255         __u16           le_max_tx_len;
256         __u16           le_max_tx_time;
257         __u16           le_max_rx_len;
258         __u16           le_max_rx_time;
259         __u16           discov_interleaved_timeout;
260         __u16           conn_info_min_age;
261         __u16           conn_info_max_age;
262         __u8            ssp_debug_mode;
263         __u8            hw_error_code;
264         __u32           clock;
265
266         __u16           devid_source;
267         __u16           devid_vendor;
268         __u16           devid_product;
269         __u16           devid_version;
270
271         __u16           pkt_type;
272         __u16           esco_type;
273         __u16           link_policy;
274         __u16           link_mode;
275
276         __u32           idle_timeout;
277         __u16           sniff_min_interval;
278         __u16           sniff_max_interval;
279
280         __u8            amp_status;
281         __u32           amp_total_bw;
282         __u32           amp_max_bw;
283         __u32           amp_min_latency;
284         __u32           amp_max_pdu;
285         __u8            amp_type;
286         __u16           amp_pal_cap;
287         __u16           amp_assoc_size;
288         __u32           amp_max_flush_to;
289         __u32           amp_be_flush_to;
290
291         struct amp_assoc        loc_assoc;
292
293         __u8            flow_ctl_mode;
294
295         unsigned int    auto_accept_delay;
296
297         unsigned long   quirks;
298
299         atomic_t        cmd_cnt;
300         unsigned int    acl_cnt;
301         unsigned int    sco_cnt;
302         unsigned int    le_cnt;
303
304         unsigned int    acl_mtu;
305         unsigned int    sco_mtu;
306         unsigned int    le_mtu;
307         unsigned int    acl_pkts;
308         unsigned int    sco_pkts;
309         unsigned int    le_pkts;
310
311         __u16           block_len;
312         __u16           block_mtu;
313         __u16           num_blocks;
314         __u16           block_cnt;
315
316         unsigned long   acl_last_tx;
317         unsigned long   sco_last_tx;
318         unsigned long   le_last_tx;
319
320         struct workqueue_struct *workqueue;
321         struct workqueue_struct *req_workqueue;
322
323         struct work_struct      power_on;
324         struct delayed_work     power_off;
325         struct work_struct      error_reset;
326
327         __u16                   discov_timeout;
328         struct delayed_work     discov_off;
329
330         struct delayed_work     service_cache;
331
332         struct delayed_work     cmd_timer;
333
334         struct work_struct      rx_work;
335         struct work_struct      cmd_work;
336         struct work_struct      tx_work;
337
338         struct work_struct      discov_update;
339         struct work_struct      bg_scan_update;
340         struct work_struct      scan_update;
341         struct work_struct      connectable_update;
342         struct work_struct      discoverable_update;
343         struct delayed_work     le_scan_disable;
344         struct delayed_work     le_scan_restart;
345
346         struct sk_buff_head     rx_q;
347         struct sk_buff_head     raw_q;
348         struct sk_buff_head     cmd_q;
349
350         struct sk_buff          *sent_cmd;
351
352         struct mutex            req_lock;
353         wait_queue_head_t       req_wait_q;
354         __u32                   req_status;
355         __u32                   req_result;
356         struct sk_buff          *req_skb;
357
358         void                    *smp_data;
359         void                    *smp_bredr_data;
360
361         struct discovery_state  discovery;
362         struct hci_conn_hash    conn_hash;
363
364         struct list_head        mgmt_pending;
365         struct list_head        blacklist;
366         struct list_head        whitelist;
367         struct list_head        uuids;
368         struct list_head        link_keys;
369         struct list_head        long_term_keys;
370         struct list_head        identity_resolving_keys;
371         struct list_head        remote_oob_data;
372         struct list_head        le_white_list;
373         struct list_head        le_conn_params;
374         struct list_head        pend_le_conns;
375         struct list_head        pend_le_reports;
376
377         struct hci_dev_stats    stat;
378
379         atomic_t                promisc;
380
381         const char              *hw_info;
382         const char              *fw_info;
383         struct dentry           *debugfs;
384
385         struct device           dev;
386
387         struct rfkill           *rfkill;
388
389         DECLARE_BITMAP(dev_flags, __HCI_NUM_FLAGS);
390
391         __s8                    adv_tx_power;
392         __u8                    adv_data[HCI_MAX_AD_LENGTH];
393         __u8                    adv_data_len;
394         __u8                    scan_rsp_data[HCI_MAX_AD_LENGTH];
395         __u8                    scan_rsp_data_len;
396
397         struct list_head        adv_instances;
398         unsigned int            adv_instance_cnt;
399         __u8                    cur_adv_instance;
400         __u16                   adv_instance_timeout;
401         struct delayed_work     adv_instance_expire;
402
403         __u8                    irk[16];
404         __u32                   rpa_timeout;
405         struct delayed_work     rpa_expired;
406         bdaddr_t                rpa;
407
408 #if IS_ENABLED(CONFIG_BT_LEDS)
409         struct led_trigger      *power_led;
410 #endif
411
412         int (*open)(struct hci_dev *hdev);
413         int (*close)(struct hci_dev *hdev);
414         int (*flush)(struct hci_dev *hdev);
415         int (*setup)(struct hci_dev *hdev);
416         int (*shutdown)(struct hci_dev *hdev);
417         int (*send)(struct hci_dev *hdev, struct sk_buff *skb);
418         void (*notify)(struct hci_dev *hdev, unsigned int evt);
419         void (*hw_error)(struct hci_dev *hdev, u8 code);
420         int (*post_init)(struct hci_dev *hdev);
421         int (*set_diag)(struct hci_dev *hdev, bool enable);
422         int (*set_bdaddr)(struct hci_dev *hdev, const bdaddr_t *bdaddr);
423 };
424
425 #define HCI_PHY_HANDLE(handle)  (handle & 0xff)
426
427 struct hci_conn {
428         struct list_head list;
429
430         atomic_t        refcnt;
431
432         bdaddr_t        dst;
433         __u8            dst_type;
434         bdaddr_t        src;
435         __u8            src_type;
436         bdaddr_t        init_addr;
437         __u8            init_addr_type;
438         bdaddr_t        resp_addr;
439         __u8            resp_addr_type;
440         __u16           handle;
441         __u16           state;
442         __u8            mode;
443         __u8            type;
444         __u8            role;
445         bool            out;
446         __u8            attempt;
447         __u8            dev_class[3];
448         __u8            features[HCI_MAX_PAGES][8];
449         __u16           pkt_type;
450         __u16           link_policy;
451         __u8            key_type;
452         __u8            auth_type;
453         __u8            sec_level;
454         __u8            pending_sec_level;
455         __u8            pin_length;
456         __u8            enc_key_size;
457         __u8            io_capability;
458         __u32           passkey_notify;
459         __u8            passkey_entered;
460         __u16           disc_timeout;
461         __u16           conn_timeout;
462         __u16           setting;
463         __u16           le_conn_min_interval;
464         __u16           le_conn_max_interval;
465         __u16           le_conn_interval;
466         __u16           le_conn_latency;
467         __u16           le_supv_timeout;
468         __u8            le_adv_data[HCI_MAX_AD_LENGTH];
469         __u8            le_adv_data_len;
470         __s8            rssi;
471         __s8            tx_power;
472         __s8            max_tx_power;
473         unsigned long   flags;
474
475         __u32           clock;
476         __u16           clock_accuracy;
477
478         unsigned long   conn_info_timestamp;
479
480         __u8            remote_cap;
481         __u8            remote_auth;
482         __u8            remote_id;
483
484         unsigned int    sent;
485
486         struct sk_buff_head data_q;
487         struct list_head chan_list;
488
489         struct delayed_work disc_work;
490         struct delayed_work auto_accept_work;
491         struct delayed_work idle_work;
492         struct delayed_work le_conn_timeout;
493         struct work_struct  le_scan_cleanup;
494
495         struct device   dev;
496         struct dentry   *debugfs;
497
498         struct hci_dev  *hdev;
499         void            *l2cap_data;
500         void            *sco_data;
501         struct amp_mgr  *amp_mgr;
502
503         struct hci_conn *link;
504
505         void (*connect_cfm_cb)  (struct hci_conn *conn, u8 status);
506         void (*security_cfm_cb) (struct hci_conn *conn, u8 status);
507         void (*disconn_cfm_cb)  (struct hci_conn *conn, u8 reason);
508 };
509
510 struct hci_chan {
511         struct list_head list;
512         __u16 handle;
513         struct hci_conn *conn;
514         struct sk_buff_head data_q;
515         unsigned int    sent;
516         __u8            state;
517         bool            amp;
518 };
519
520 struct hci_conn_params {
521         struct list_head list;
522         struct list_head action;
523
524         bdaddr_t addr;
525         u8 addr_type;
526
527         u16 conn_min_interval;
528         u16 conn_max_interval;
529         u16 conn_latency;
530         u16 supervision_timeout;
531
532         enum {
533                 HCI_AUTO_CONN_DISABLED,
534                 HCI_AUTO_CONN_REPORT,
535                 HCI_AUTO_CONN_DIRECT,
536                 HCI_AUTO_CONN_ALWAYS,
537                 HCI_AUTO_CONN_LINK_LOSS,
538                 HCI_AUTO_CONN_EXPLICIT,
539         } auto_connect;
540
541         struct hci_conn *conn;
542         bool explicit_connect;
543 };
544
545 extern struct list_head hci_dev_list;
546 extern struct list_head hci_cb_list;
547 extern rwlock_t hci_dev_list_lock;
548 extern struct mutex hci_cb_list_lock;
549
550 #define hci_dev_set_flag(hdev, nr)             set_bit((nr), (hdev)->dev_flags)
551 #define hci_dev_clear_flag(hdev, nr)           clear_bit((nr), (hdev)->dev_flags)
552 #define hci_dev_change_flag(hdev, nr)          change_bit((nr), (hdev)->dev_flags)
553 #define hci_dev_test_flag(hdev, nr)            test_bit((nr), (hdev)->dev_flags)
554 #define hci_dev_test_and_set_flag(hdev, nr)    test_and_set_bit((nr), (hdev)->dev_flags)
555 #define hci_dev_test_and_clear_flag(hdev, nr)  test_and_clear_bit((nr), (hdev)->dev_flags)
556 #define hci_dev_test_and_change_flag(hdev, nr) test_and_change_bit((nr), (hdev)->dev_flags)
557
558 #define hci_dev_clear_volatile_flags(hdev)                      \
559         do {                                                    \
560                 hci_dev_clear_flag(hdev, HCI_LE_SCAN);          \
561                 hci_dev_clear_flag(hdev, HCI_LE_ADV);           \
562                 hci_dev_clear_flag(hdev, HCI_PERIODIC_INQ);     \
563         } while (0)
564
565 /* ----- HCI interface to upper protocols ----- */
566 int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr);
567 int l2cap_disconn_ind(struct hci_conn *hcon);
568 void l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
569
570 #if IS_ENABLED(CONFIG_BT_BREDR)
571 int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
572 void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb);
573 #else
574 static inline int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
575                                   __u8 *flags)
576 {
577         return 0;
578 }
579
580 static inline void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb)
581 {
582 }
583 #endif
584
585 /* ----- Inquiry cache ----- */
586 #define INQUIRY_CACHE_AGE_MAX   (HZ*30)   /* 30 seconds */
587 #define INQUIRY_ENTRY_AGE_MAX   (HZ*60)   /* 60 seconds */
588
589 static inline void discovery_init(struct hci_dev *hdev)
590 {
591         hdev->discovery.state = DISCOVERY_STOPPED;
592         INIT_LIST_HEAD(&hdev->discovery.all);
593         INIT_LIST_HEAD(&hdev->discovery.unknown);
594         INIT_LIST_HEAD(&hdev->discovery.resolve);
595         hdev->discovery.report_invalid_rssi = true;
596         hdev->discovery.rssi = HCI_RSSI_INVALID;
597 }
598
599 static inline void hci_discovery_filter_clear(struct hci_dev *hdev)
600 {
601         hdev->discovery.result_filtering = false;
602         hdev->discovery.report_invalid_rssi = true;
603         hdev->discovery.rssi = HCI_RSSI_INVALID;
604         hdev->discovery.uuid_count = 0;
605         kfree(hdev->discovery.uuids);
606         hdev->discovery.uuids = NULL;
607         hdev->discovery.scan_start = 0;
608         hdev->discovery.scan_duration = 0;
609 }
610
611 bool hci_discovery_active(struct hci_dev *hdev);
612
613 void hci_discovery_set_state(struct hci_dev *hdev, int state);
614
615 static inline int inquiry_cache_empty(struct hci_dev *hdev)
616 {
617         return list_empty(&hdev->discovery.all);
618 }
619
620 static inline long inquiry_cache_age(struct hci_dev *hdev)
621 {
622         struct discovery_state *c = &hdev->discovery;
623         return jiffies - c->timestamp;
624 }
625
626 static inline long inquiry_entry_age(struct inquiry_entry *e)
627 {
628         return jiffies - e->timestamp;
629 }
630
631 struct inquiry_entry *hci_inquiry_cache_lookup(struct hci_dev *hdev,
632                                                bdaddr_t *bdaddr);
633 struct inquiry_entry *hci_inquiry_cache_lookup_unknown(struct hci_dev *hdev,
634                                                        bdaddr_t *bdaddr);
635 struct inquiry_entry *hci_inquiry_cache_lookup_resolve(struct hci_dev *hdev,
636                                                        bdaddr_t *bdaddr,
637                                                        int state);
638 void hci_inquiry_cache_update_resolve(struct hci_dev *hdev,
639                                       struct inquiry_entry *ie);
640 u32 hci_inquiry_cache_update(struct hci_dev *hdev, struct inquiry_data *data,
641                              bool name_known);
642 void hci_inquiry_cache_flush(struct hci_dev *hdev);
643
644 /* ----- HCI Connections ----- */
645 enum {
646         HCI_CONN_AUTH_PEND,
647         HCI_CONN_REAUTH_PEND,
648         HCI_CONN_ENCRYPT_PEND,
649         HCI_CONN_RSWITCH_PEND,
650         HCI_CONN_MODE_CHANGE_PEND,
651         HCI_CONN_SCO_SETUP_PEND,
652         HCI_CONN_MGMT_CONNECTED,
653         HCI_CONN_SSP_ENABLED,
654         HCI_CONN_SC_ENABLED,
655         HCI_CONN_AES_CCM,
656         HCI_CONN_POWER_SAVE,
657         HCI_CONN_FLUSH_KEY,
658         HCI_CONN_ENCRYPT,
659         HCI_CONN_AUTH,
660         HCI_CONN_SECURE,
661         HCI_CONN_FIPS,
662         HCI_CONN_STK_ENCRYPT,
663         HCI_CONN_AUTH_INITIATOR,
664         HCI_CONN_DROP,
665         HCI_CONN_PARAM_REMOVAL_PEND,
666         HCI_CONN_NEW_LINK_KEY,
667         HCI_CONN_SCANNING,
668         HCI_CONN_AUTH_FAILURE,
669 };
670
671 static inline bool hci_conn_ssp_enabled(struct hci_conn *conn)
672 {
673         struct hci_dev *hdev = conn->hdev;
674         return hci_dev_test_flag(hdev, HCI_SSP_ENABLED) &&
675                test_bit(HCI_CONN_SSP_ENABLED, &conn->flags);
676 }
677
678 static inline bool hci_conn_sc_enabled(struct hci_conn *conn)
679 {
680         struct hci_dev *hdev = conn->hdev;
681         return hci_dev_test_flag(hdev, HCI_SC_ENABLED) &&
682                test_bit(HCI_CONN_SC_ENABLED, &conn->flags);
683 }
684
685 static inline void hci_conn_hash_add(struct hci_dev *hdev, struct hci_conn *c)
686 {
687         struct hci_conn_hash *h = &hdev->conn_hash;
688         list_add_rcu(&c->list, &h->list);
689         switch (c->type) {
690         case ACL_LINK:
691                 h->acl_num++;
692                 break;
693         case AMP_LINK:
694                 h->amp_num++;
695                 break;
696         case LE_LINK:
697                 h->le_num++;
698                 if (c->role == HCI_ROLE_SLAVE)
699                         h->le_num_slave++;
700                 break;
701         case SCO_LINK:
702         case ESCO_LINK:
703                 h->sco_num++;
704                 break;
705         }
706 }
707
708 static inline void hci_conn_hash_del(struct hci_dev *hdev, struct hci_conn *c)
709 {
710         struct hci_conn_hash *h = &hdev->conn_hash;
711
712         list_del_rcu(&c->list);
713         synchronize_rcu();
714
715         switch (c->type) {
716         case ACL_LINK:
717                 h->acl_num--;
718                 break;
719         case AMP_LINK:
720                 h->amp_num--;
721                 break;
722         case LE_LINK:
723                 h->le_num--;
724                 if (c->role == HCI_ROLE_SLAVE)
725                         h->le_num_slave--;
726                 break;
727         case SCO_LINK:
728         case ESCO_LINK:
729                 h->sco_num--;
730                 break;
731         }
732 }
733
734 static inline unsigned int hci_conn_num(struct hci_dev *hdev, __u8 type)
735 {
736         struct hci_conn_hash *h = &hdev->conn_hash;
737         switch (type) {
738         case ACL_LINK:
739                 return h->acl_num;
740         case AMP_LINK:
741                 return h->amp_num;
742         case LE_LINK:
743                 return h->le_num;
744         case SCO_LINK:
745         case ESCO_LINK:
746                 return h->sco_num;
747         default:
748                 return 0;
749         }
750 }
751
752 static inline unsigned int hci_conn_count(struct hci_dev *hdev)
753 {
754         struct hci_conn_hash *c = &hdev->conn_hash;
755
756         return c->acl_num + c->amp_num + c->sco_num + c->le_num;
757 }
758
759 static inline __u8 hci_conn_lookup_type(struct hci_dev *hdev, __u16 handle)
760 {
761         struct hci_conn_hash *h = &hdev->conn_hash;
762         struct hci_conn *c;
763         __u8 type = INVALID_LINK;
764
765         rcu_read_lock();
766
767         list_for_each_entry_rcu(c, &h->list, list) {
768                 if (c->handle == handle) {
769                         type = c->type;
770                         break;
771                 }
772         }
773
774         rcu_read_unlock();
775
776         return type;
777 }
778
779 static inline struct hci_conn *hci_conn_hash_lookup_handle(struct hci_dev *hdev,
780                                                                 __u16 handle)
781 {
782         struct hci_conn_hash *h = &hdev->conn_hash;
783         struct hci_conn  *c;
784
785         rcu_read_lock();
786
787         list_for_each_entry_rcu(c, &h->list, list) {
788                 if (c->handle == handle) {
789                         rcu_read_unlock();
790                         return c;
791                 }
792         }
793         rcu_read_unlock();
794
795         return NULL;
796 }
797
798 static inline struct hci_conn *hci_conn_hash_lookup_ba(struct hci_dev *hdev,
799                                                         __u8 type, bdaddr_t *ba)
800 {
801         struct hci_conn_hash *h = &hdev->conn_hash;
802         struct hci_conn  *c;
803
804         rcu_read_lock();
805
806         list_for_each_entry_rcu(c, &h->list, list) {
807                 if (c->type == type && !bacmp(&c->dst, ba)) {
808                         rcu_read_unlock();
809                         return c;
810                 }
811         }
812
813         rcu_read_unlock();
814
815         return NULL;
816 }
817
818 static inline struct hci_conn *hci_conn_hash_lookup_le(struct hci_dev *hdev,
819                                                        bdaddr_t *ba,
820                                                        __u8 ba_type)
821 {
822         struct hci_conn_hash *h = &hdev->conn_hash;
823         struct hci_conn  *c;
824
825         rcu_read_lock();
826
827         list_for_each_entry_rcu(c, &h->list, list) {
828                 if (c->type != LE_LINK)
829                        continue;
830
831                 if (ba_type == c->dst_type && !bacmp(&c->dst, ba)) {
832                         rcu_read_unlock();
833                         return c;
834                 }
835         }
836
837         rcu_read_unlock();
838
839         return NULL;
840 }
841
842 static inline struct hci_conn *hci_conn_hash_lookup_state(struct hci_dev *hdev,
843                                                         __u8 type, __u16 state)
844 {
845         struct hci_conn_hash *h = &hdev->conn_hash;
846         struct hci_conn  *c;
847
848         rcu_read_lock();
849
850         list_for_each_entry_rcu(c, &h->list, list) {
851                 if (c->type == type && c->state == state) {
852                         rcu_read_unlock();
853                         return c;
854                 }
855         }
856
857         rcu_read_unlock();
858
859         return NULL;
860 }
861
862 static inline struct hci_conn *hci_lookup_le_connect(struct hci_dev *hdev)
863 {
864         struct hci_conn_hash *h = &hdev->conn_hash;
865         struct hci_conn  *c;
866
867         rcu_read_lock();
868
869         list_for_each_entry_rcu(c, &h->list, list) {
870                 if (c->type == LE_LINK && c->state == BT_CONNECT &&
871                     !test_bit(HCI_CONN_SCANNING, &c->flags)) {
872                         rcu_read_unlock();
873                         return c;
874                 }
875         }
876
877         rcu_read_unlock();
878
879         return NULL;
880 }
881
882 int hci_disconnect(struct hci_conn *conn, __u8 reason);
883 bool hci_setup_sync(struct hci_conn *conn, __u16 handle);
884 void hci_sco_setup(struct hci_conn *conn, __u8 status);
885
886 struct hci_conn *hci_conn_add(struct hci_dev *hdev, int type, bdaddr_t *dst,
887                               u8 role);
888 int hci_conn_del(struct hci_conn *conn);
889 void hci_conn_hash_flush(struct hci_dev *hdev);
890 void hci_conn_check_pending(struct hci_dev *hdev);
891
892 struct hci_chan *hci_chan_create(struct hci_conn *conn);
893 void hci_chan_del(struct hci_chan *chan);
894 void hci_chan_list_flush(struct hci_conn *conn);
895 struct hci_chan *hci_chan_lookup_handle(struct hci_dev *hdev, __u16 handle);
896
897 struct hci_conn *hci_connect_le_scan(struct hci_dev *hdev, bdaddr_t *dst,
898                                      u8 dst_type, u8 sec_level,
899                                      u16 conn_timeout);
900 struct hci_conn *hci_connect_le(struct hci_dev *hdev, bdaddr_t *dst,
901                                 u8 dst_type, u8 sec_level, u16 conn_timeout,
902                                 u8 role, bdaddr_t *direct_rpa);
903 struct hci_conn *hci_connect_acl(struct hci_dev *hdev, bdaddr_t *dst,
904                                  u8 sec_level, u8 auth_type);
905 struct hci_conn *hci_connect_sco(struct hci_dev *hdev, int type, bdaddr_t *dst,
906                                  __u16 setting);
907 int hci_conn_check_link_mode(struct hci_conn *conn);
908 int hci_conn_check_secure(struct hci_conn *conn, __u8 sec_level);
909 int hci_conn_security(struct hci_conn *conn, __u8 sec_level, __u8 auth_type,
910                       bool initiator);
911 int hci_conn_switch_role(struct hci_conn *conn, __u8 role);
912
913 void hci_conn_enter_active_mode(struct hci_conn *conn, __u8 force_active);
914
915 void hci_le_conn_failed(struct hci_conn *conn, u8 status);
916
917 /*
918  * hci_conn_get() and hci_conn_put() are used to control the life-time of an
919  * "hci_conn" object. They do not guarantee that the hci_conn object is running,
920  * working or anything else. They just guarantee that the object is available
921  * and can be dereferenced. So you can use its locks, local variables and any
922  * other constant data.
923  * Before accessing runtime data, you _must_ lock the object and then check that
924  * it is still running. As soon as you release the locks, the connection might
925  * get dropped, though.
926  *
927  * On the other hand, hci_conn_hold() and hci_conn_drop() are used to control
928  * how long the underlying connection is held. So every channel that runs on the
929  * hci_conn object calls this to prevent the connection from disappearing. As
930  * long as you hold a device, you must also guarantee that you have a valid
931  * reference to the device via hci_conn_get() (or the initial reference from
932  * hci_conn_add()).
933  * The hold()/drop() ref-count is known to drop below 0 sometimes, which doesn't
934  * break because nobody cares for that. But this means, we cannot use
935  * _get()/_drop() in it, but require the caller to have a valid ref (FIXME).
936  */
937
938 static inline struct hci_conn *hci_conn_get(struct hci_conn *conn)
939 {
940         get_device(&conn->dev);
941         return conn;
942 }
943
944 static inline void hci_conn_put(struct hci_conn *conn)
945 {
946         put_device(&conn->dev);
947 }
948
949 static inline void hci_conn_hold(struct hci_conn *conn)
950 {
951         BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
952
953         atomic_inc(&conn->refcnt);
954         cancel_delayed_work(&conn->disc_work);
955 }
956
957 static inline void hci_conn_drop(struct hci_conn *conn)
958 {
959         BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
960
961         if (atomic_dec_and_test(&conn->refcnt)) {
962                 unsigned long timeo;
963
964                 switch (conn->type) {
965                 case ACL_LINK:
966                 case LE_LINK:
967                         cancel_delayed_work(&conn->idle_work);
968                         if (conn->state == BT_CONNECTED) {
969                                 timeo = conn->disc_timeout;
970                                 if (!conn->out)
971                                         timeo *= 2;
972                         } else {
973                                 timeo = 0;
974                         }
975                         break;
976
977                 case AMP_LINK:
978                         timeo = conn->disc_timeout;
979                         break;
980
981                 default:
982                         timeo = 0;
983                         break;
984                 }
985
986                 cancel_delayed_work(&conn->disc_work);
987                 queue_delayed_work(conn->hdev->workqueue,
988                                    &conn->disc_work, timeo);
989         }
990 }
991
992 /* ----- HCI Devices ----- */
993 static inline void hci_dev_put(struct hci_dev *d)
994 {
995         BT_DBG("%s orig refcnt %d", d->name,
996                kref_read(&d->dev.kobj.kref));
997
998         put_device(&d->dev);
999 }
1000
1001 static inline struct hci_dev *hci_dev_hold(struct hci_dev *d)
1002 {
1003         BT_DBG("%s orig refcnt %d", d->name,
1004                kref_read(&d->dev.kobj.kref));
1005
1006         get_device(&d->dev);
1007         return d;
1008 }
1009
1010 #define hci_dev_lock(d)         mutex_lock(&d->lock)
1011 #define hci_dev_unlock(d)       mutex_unlock(&d->lock)
1012
1013 #define to_hci_dev(d) container_of(d, struct hci_dev, dev)
1014 #define to_hci_conn(c) container_of(c, struct hci_conn, dev)
1015
1016 static inline void *hci_get_drvdata(struct hci_dev *hdev)
1017 {
1018         return dev_get_drvdata(&hdev->dev);
1019 }
1020
1021 static inline void hci_set_drvdata(struct hci_dev *hdev, void *data)
1022 {
1023         dev_set_drvdata(&hdev->dev, data);
1024 }
1025
1026 struct hci_dev *hci_dev_get(int index);
1027 struct hci_dev *hci_get_route(bdaddr_t *dst, bdaddr_t *src, u8 src_type);
1028
1029 struct hci_dev *hci_alloc_dev(void);
1030 void hci_free_dev(struct hci_dev *hdev);
1031 int hci_register_dev(struct hci_dev *hdev);
1032 void hci_unregister_dev(struct hci_dev *hdev);
1033 void hci_cleanup_dev(struct hci_dev *hdev);
1034 int hci_suspend_dev(struct hci_dev *hdev);
1035 int hci_resume_dev(struct hci_dev *hdev);
1036 int hci_reset_dev(struct hci_dev *hdev);
1037 int hci_recv_frame(struct hci_dev *hdev, struct sk_buff *skb);
1038 int hci_recv_diag(struct hci_dev *hdev, struct sk_buff *skb);
1039 __printf(2, 3) void hci_set_hw_info(struct hci_dev *hdev, const char *fmt, ...);
1040 __printf(2, 3) void hci_set_fw_info(struct hci_dev *hdev, const char *fmt, ...);
1041 int hci_dev_open(__u16 dev);
1042 int hci_dev_close(__u16 dev);
1043 int hci_dev_do_close(struct hci_dev *hdev);
1044 int hci_dev_reset(__u16 dev);
1045 int hci_dev_reset_stat(__u16 dev);
1046 int hci_dev_cmd(unsigned int cmd, void __user *arg);
1047 int hci_get_dev_list(void __user *arg);
1048 int hci_get_dev_info(void __user *arg);
1049 int hci_get_conn_list(void __user *arg);
1050 int hci_get_conn_info(struct hci_dev *hdev, void __user *arg);
1051 int hci_get_auth_info(struct hci_dev *hdev, void __user *arg);
1052 int hci_inquiry(void __user *arg);
1053
1054 struct bdaddr_list *hci_bdaddr_list_lookup(struct list_head *list,
1055                                            bdaddr_t *bdaddr, u8 type);
1056 int hci_bdaddr_list_add(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1057 int hci_bdaddr_list_del(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1058 void hci_bdaddr_list_clear(struct list_head *list);
1059
1060 struct hci_conn_params *hci_conn_params_lookup(struct hci_dev *hdev,
1061                                                bdaddr_t *addr, u8 addr_type);
1062 struct hci_conn_params *hci_conn_params_add(struct hci_dev *hdev,
1063                                             bdaddr_t *addr, u8 addr_type);
1064 void hci_conn_params_del(struct hci_dev *hdev, bdaddr_t *addr, u8 addr_type);
1065 void hci_conn_params_clear_disabled(struct hci_dev *hdev);
1066
1067 struct hci_conn_params *hci_pend_le_action_lookup(struct list_head *list,
1068                                                   bdaddr_t *addr,
1069                                                   u8 addr_type);
1070
1071 void hci_uuids_clear(struct hci_dev *hdev);
1072
1073 void hci_link_keys_clear(struct hci_dev *hdev);
1074 struct link_key *hci_find_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1075 struct link_key *hci_add_link_key(struct hci_dev *hdev, struct hci_conn *conn,
1076                                   bdaddr_t *bdaddr, u8 *val, u8 type,
1077                                   u8 pin_len, bool *persistent);
1078 struct smp_ltk *hci_add_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1079                             u8 addr_type, u8 type, u8 authenticated,
1080                             u8 tk[16], u8 enc_size, __le16 ediv, __le64 rand);
1081 struct smp_ltk *hci_find_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1082                              u8 addr_type, u8 role);
1083 int hci_remove_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 bdaddr_type);
1084 void hci_smp_ltks_clear(struct hci_dev *hdev);
1085 int hci_remove_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1086
1087 struct smp_irk *hci_find_irk_by_rpa(struct hci_dev *hdev, bdaddr_t *rpa);
1088 struct smp_irk *hci_find_irk_by_addr(struct hci_dev *hdev, bdaddr_t *bdaddr,
1089                                      u8 addr_type);
1090 struct smp_irk *hci_add_irk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1091                             u8 addr_type, u8 val[16], bdaddr_t *rpa);
1092 void hci_remove_irk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 addr_type);
1093 void hci_smp_irks_clear(struct hci_dev *hdev);
1094
1095 bool hci_bdaddr_is_paired(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type);
1096
1097 void hci_remote_oob_data_clear(struct hci_dev *hdev);
1098 struct oob_data *hci_find_remote_oob_data(struct hci_dev *hdev,
1099                                           bdaddr_t *bdaddr, u8 bdaddr_type);
1100 int hci_add_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1101                             u8 bdaddr_type, u8 *hash192, u8 *rand192,
1102                             u8 *hash256, u8 *rand256);
1103 int hci_remove_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1104                                u8 bdaddr_type);
1105
1106 void hci_adv_instances_clear(struct hci_dev *hdev);
1107 struct adv_info *hci_find_adv_instance(struct hci_dev *hdev, u8 instance);
1108 struct adv_info *hci_get_next_instance(struct hci_dev *hdev, u8 instance);
1109 int hci_add_adv_instance(struct hci_dev *hdev, u8 instance, u32 flags,
1110                          u16 adv_data_len, u8 *adv_data,
1111                          u16 scan_rsp_len, u8 *scan_rsp_data,
1112                          u16 timeout, u16 duration);
1113 int hci_remove_adv_instance(struct hci_dev *hdev, u8 instance);
1114
1115 void hci_event_packet(struct hci_dev *hdev, struct sk_buff *skb);
1116
1117 void hci_init_sysfs(struct hci_dev *hdev);
1118 void hci_conn_init_sysfs(struct hci_conn *conn);
1119 void hci_conn_add_sysfs(struct hci_conn *conn);
1120 void hci_conn_del_sysfs(struct hci_conn *conn);
1121
1122 #define SET_HCIDEV_DEV(hdev, pdev) ((hdev)->dev.parent = (pdev))
1123
1124 /* ----- LMP capabilities ----- */
1125 #define lmp_encrypt_capable(dev)   ((dev)->features[0][0] & LMP_ENCRYPT)
1126 #define lmp_rswitch_capable(dev)   ((dev)->features[0][0] & LMP_RSWITCH)
1127 #define lmp_hold_capable(dev)      ((dev)->features[0][0] & LMP_HOLD)
1128 #define lmp_sniff_capable(dev)     ((dev)->features[0][0] & LMP_SNIFF)
1129 #define lmp_park_capable(dev)      ((dev)->features[0][1] & LMP_PARK)
1130 #define lmp_inq_rssi_capable(dev)  ((dev)->features[0][3] & LMP_RSSI_INQ)
1131 #define lmp_esco_capable(dev)      ((dev)->features[0][3] & LMP_ESCO)
1132 #define lmp_bredr_capable(dev)     (!((dev)->features[0][4] & LMP_NO_BREDR))
1133 #define lmp_le_capable(dev)        ((dev)->features[0][4] & LMP_LE)
1134 #define lmp_sniffsubr_capable(dev) ((dev)->features[0][5] & LMP_SNIFF_SUBR)
1135 #define lmp_pause_enc_capable(dev) ((dev)->features[0][5] & LMP_PAUSE_ENC)
1136 #define lmp_ext_inq_capable(dev)   ((dev)->features[0][6] & LMP_EXT_INQ)
1137 #define lmp_le_br_capable(dev)     (!!((dev)->features[0][6] & LMP_SIMUL_LE_BR))
1138 #define lmp_ssp_capable(dev)       ((dev)->features[0][6] & LMP_SIMPLE_PAIR)
1139 #define lmp_no_flush_capable(dev)  ((dev)->features[0][6] & LMP_NO_FLUSH)
1140 #define lmp_lsto_capable(dev)      ((dev)->features[0][7] & LMP_LSTO)
1141 #define lmp_inq_tx_pwr_capable(dev) ((dev)->features[0][7] & LMP_INQ_TX_PWR)
1142 #define lmp_ext_feat_capable(dev)  ((dev)->features[0][7] & LMP_EXTFEATURES)
1143 #define lmp_transp_capable(dev)    ((dev)->features[0][2] & LMP_TRANSPARENT)
1144
1145 /* ----- Extended LMP capabilities ----- */
1146 #define lmp_csb_master_capable(dev) ((dev)->features[2][0] & LMP_CSB_MASTER)
1147 #define lmp_csb_slave_capable(dev)  ((dev)->features[2][0] & LMP_CSB_SLAVE)
1148 #define lmp_sync_train_capable(dev) ((dev)->features[2][0] & LMP_SYNC_TRAIN)
1149 #define lmp_sync_scan_capable(dev)  ((dev)->features[2][0] & LMP_SYNC_SCAN)
1150 #define lmp_sc_capable(dev)         ((dev)->features[2][1] & LMP_SC)
1151 #define lmp_ping_capable(dev)       ((dev)->features[2][1] & LMP_PING)
1152
1153 /* ----- Host capabilities ----- */
1154 #define lmp_host_ssp_capable(dev)  ((dev)->features[1][0] & LMP_HOST_SSP)
1155 #define lmp_host_sc_capable(dev)   ((dev)->features[1][0] & LMP_HOST_SC)
1156 #define lmp_host_le_capable(dev)   (!!((dev)->features[1][0] & LMP_HOST_LE))
1157 #define lmp_host_le_br_capable(dev) (!!((dev)->features[1][0] & LMP_HOST_LE_BREDR))
1158
1159 #define hdev_is_powered(dev)   (test_bit(HCI_UP, &(dev)->flags) && \
1160                                 !hci_dev_test_flag(dev, HCI_AUTO_OFF))
1161 #define bredr_sc_enabled(dev)  (lmp_sc_capable(dev) && \
1162                                 hci_dev_test_flag(dev, HCI_SC_ENABLED))
1163
1164 /* ----- HCI protocols ----- */
1165 #define HCI_PROTO_DEFER             0x01
1166
1167 static inline int hci_proto_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
1168                                         __u8 type, __u8 *flags)
1169 {
1170         switch (type) {
1171         case ACL_LINK:
1172                 return l2cap_connect_ind(hdev, bdaddr);
1173
1174         case SCO_LINK:
1175         case ESCO_LINK:
1176                 return sco_connect_ind(hdev, bdaddr, flags);
1177
1178         default:
1179                 BT_ERR("unknown link type %d", type);
1180                 return -EINVAL;
1181         }
1182 }
1183
1184 static inline int hci_proto_disconn_ind(struct hci_conn *conn)
1185 {
1186         if (conn->type != ACL_LINK && conn->type != LE_LINK)
1187                 return HCI_ERROR_REMOTE_USER_TERM;
1188
1189         return l2cap_disconn_ind(conn);
1190 }
1191
1192 /* ----- HCI callbacks ----- */
1193 struct hci_cb {
1194         struct list_head list;
1195
1196         char *name;
1197
1198         void (*connect_cfm)     (struct hci_conn *conn, __u8 status);
1199         void (*disconn_cfm)     (struct hci_conn *conn, __u8 status);
1200         void (*security_cfm)    (struct hci_conn *conn, __u8 status,
1201                                                                 __u8 encrypt);
1202         void (*key_change_cfm)  (struct hci_conn *conn, __u8 status);
1203         void (*role_switch_cfm) (struct hci_conn *conn, __u8 status, __u8 role);
1204 };
1205
1206 static inline void hci_connect_cfm(struct hci_conn *conn, __u8 status)
1207 {
1208         struct hci_cb *cb;
1209
1210         mutex_lock(&hci_cb_list_lock);
1211         list_for_each_entry(cb, &hci_cb_list, list) {
1212                 if (cb->connect_cfm)
1213                         cb->connect_cfm(conn, status);
1214         }
1215         mutex_unlock(&hci_cb_list_lock);
1216
1217         if (conn->connect_cfm_cb)
1218                 conn->connect_cfm_cb(conn, status);
1219 }
1220
1221 static inline void hci_disconn_cfm(struct hci_conn *conn, __u8 reason)
1222 {
1223         struct hci_cb *cb;
1224
1225         mutex_lock(&hci_cb_list_lock);
1226         list_for_each_entry(cb, &hci_cb_list, list) {
1227                 if (cb->disconn_cfm)
1228                         cb->disconn_cfm(conn, reason);
1229         }
1230         mutex_unlock(&hci_cb_list_lock);
1231
1232         if (conn->disconn_cfm_cb)
1233                 conn->disconn_cfm_cb(conn, reason);
1234 }
1235
1236 static inline void hci_auth_cfm(struct hci_conn *conn, __u8 status)
1237 {
1238         struct hci_cb *cb;
1239         __u8 encrypt;
1240
1241         if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->flags))
1242                 return;
1243
1244         encrypt = test_bit(HCI_CONN_ENCRYPT, &conn->flags) ? 0x01 : 0x00;
1245
1246         mutex_lock(&hci_cb_list_lock);
1247         list_for_each_entry(cb, &hci_cb_list, list) {
1248                 if (cb->security_cfm)
1249                         cb->security_cfm(conn, status, encrypt);
1250         }
1251         mutex_unlock(&hci_cb_list_lock);
1252
1253         if (conn->security_cfm_cb)
1254                 conn->security_cfm_cb(conn, status);
1255 }
1256
1257 static inline void hci_encrypt_cfm(struct hci_conn *conn, __u8 status)
1258 {
1259         struct hci_cb *cb;
1260         __u8 encrypt;
1261
1262         if (conn->state == BT_CONFIG) {
1263                 if (!status)
1264                         conn->state = BT_CONNECTED;
1265
1266                 hci_connect_cfm(conn, status);
1267                 hci_conn_drop(conn);
1268                 return;
1269         }
1270
1271         if (!test_bit(HCI_CONN_ENCRYPT, &conn->flags))
1272                 encrypt = 0x00;
1273         else if (test_bit(HCI_CONN_AES_CCM, &conn->flags))
1274                 encrypt = 0x02;
1275         else
1276                 encrypt = 0x01;
1277
1278         if (!status) {
1279                 if (conn->sec_level == BT_SECURITY_SDP)
1280                         conn->sec_level = BT_SECURITY_LOW;
1281
1282                 if (conn->pending_sec_level > conn->sec_level)
1283                         conn->sec_level = conn->pending_sec_level;
1284         }
1285
1286         mutex_lock(&hci_cb_list_lock);
1287         list_for_each_entry(cb, &hci_cb_list, list) {
1288                 if (cb->security_cfm)
1289                         cb->security_cfm(conn, status, encrypt);
1290         }
1291         mutex_unlock(&hci_cb_list_lock);
1292
1293         if (conn->security_cfm_cb)
1294                 conn->security_cfm_cb(conn, status);
1295 }
1296
1297 static inline void hci_key_change_cfm(struct hci_conn *conn, __u8 status)
1298 {
1299         struct hci_cb *cb;
1300
1301         mutex_lock(&hci_cb_list_lock);
1302         list_for_each_entry(cb, &hci_cb_list, list) {
1303                 if (cb->key_change_cfm)
1304                         cb->key_change_cfm(conn, status);
1305         }
1306         mutex_unlock(&hci_cb_list_lock);
1307 }
1308
1309 static inline void hci_role_switch_cfm(struct hci_conn *conn, __u8 status,
1310                                                                 __u8 role)
1311 {
1312         struct hci_cb *cb;
1313
1314         mutex_lock(&hci_cb_list_lock);
1315         list_for_each_entry(cb, &hci_cb_list, list) {
1316                 if (cb->role_switch_cfm)
1317                         cb->role_switch_cfm(conn, status, role);
1318         }
1319         mutex_unlock(&hci_cb_list_lock);
1320 }
1321
1322 static inline void *eir_get_data(u8 *eir, size_t eir_len, u8 type,
1323                                  size_t *data_len)
1324 {
1325         size_t parsed = 0;
1326
1327         if (eir_len < 2)
1328                 return NULL;
1329
1330         while (parsed < eir_len - 1) {
1331                 u8 field_len = eir[0];
1332
1333                 if (field_len == 0)
1334                         break;
1335
1336                 parsed += field_len + 1;
1337
1338                 if (parsed > eir_len)
1339                         break;
1340
1341                 if (eir[1] != type) {
1342                         eir += field_len + 1;
1343                         continue;
1344                 }
1345
1346                 /* Zero length data */
1347                 if (field_len == 1)
1348                         return NULL;
1349
1350                 if (data_len)
1351                         *data_len = field_len - 1;
1352
1353                 return &eir[2];
1354         }
1355
1356         return NULL;
1357 }
1358
1359 static inline bool hci_bdaddr_is_rpa(bdaddr_t *bdaddr, u8 addr_type)
1360 {
1361         if (addr_type != ADDR_LE_DEV_RANDOM)
1362                 return false;
1363
1364         if ((bdaddr->b[5] & 0xc0) == 0x40)
1365                return true;
1366
1367         return false;
1368 }
1369
1370 static inline bool hci_is_identity_address(bdaddr_t *addr, u8 addr_type)
1371 {
1372         if (addr_type == ADDR_LE_DEV_PUBLIC)
1373                 return true;
1374
1375         /* Check for Random Static address type */
1376         if ((addr->b[5] & 0xc0) == 0xc0)
1377                 return true;
1378
1379         return false;
1380 }
1381
1382 static inline struct smp_irk *hci_get_irk(struct hci_dev *hdev,
1383                                           bdaddr_t *bdaddr, u8 addr_type)
1384 {
1385         if (!hci_bdaddr_is_rpa(bdaddr, addr_type))
1386                 return NULL;
1387
1388         return hci_find_irk_by_rpa(hdev, bdaddr);
1389 }
1390
1391 static inline int hci_check_conn_params(u16 min, u16 max, u16 latency,
1392                                         u16 to_multiplier)
1393 {
1394         u16 max_latency;
1395
1396         if (min > max || min < 6 || max > 3200)
1397                 return -EINVAL;
1398
1399         if (to_multiplier < 10 || to_multiplier > 3200)
1400                 return -EINVAL;
1401
1402         if (max >= to_multiplier * 8)
1403                 return -EINVAL;
1404
1405         max_latency = (to_multiplier * 4 / max) - 1;
1406         if (latency > 499 || latency > max_latency)
1407                 return -EINVAL;
1408
1409         return 0;
1410 }
1411
1412 int hci_register_cb(struct hci_cb *hcb);
1413 int hci_unregister_cb(struct hci_cb *hcb);
1414
1415 struct sk_buff *__hci_cmd_sync(struct hci_dev *hdev, u16 opcode, u32 plen,
1416                                const void *param, u32 timeout);
1417 struct sk_buff *__hci_cmd_sync_ev(struct hci_dev *hdev, u16 opcode, u32 plen,
1418                                   const void *param, u8 event, u32 timeout);
1419
1420 int hci_send_cmd(struct hci_dev *hdev, __u16 opcode, __u32 plen,
1421                  const void *param);
1422 void hci_send_acl(struct hci_chan *chan, struct sk_buff *skb, __u16 flags);
1423 void hci_send_sco(struct hci_conn *conn, struct sk_buff *skb);
1424
1425 void *hci_sent_cmd_data(struct hci_dev *hdev, __u16 opcode);
1426
1427 struct sk_buff *hci_cmd_sync(struct hci_dev *hdev, u16 opcode, u32 plen,
1428                              const void *param, u32 timeout);
1429
1430 /* ----- HCI Sockets ----- */
1431 void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb);
1432 void hci_send_to_channel(unsigned short channel, struct sk_buff *skb,
1433                          int flag, struct sock *skip_sk);
1434 void hci_send_to_monitor(struct hci_dev *hdev, struct sk_buff *skb);
1435 void hci_send_monitor_ctrl_event(struct hci_dev *hdev, u16 event,
1436                                  void *data, u16 data_len, ktime_t tstamp,
1437                                  int flag, struct sock *skip_sk);
1438
1439 void hci_sock_dev_event(struct hci_dev *hdev, int event);
1440
1441 #define HCI_MGMT_VAR_LEN        BIT(0)
1442 #define HCI_MGMT_NO_HDEV        BIT(1)
1443 #define HCI_MGMT_UNTRUSTED      BIT(2)
1444 #define HCI_MGMT_UNCONFIGURED   BIT(3)
1445
1446 struct hci_mgmt_handler {
1447         int (*func) (struct sock *sk, struct hci_dev *hdev, void *data,
1448                      u16 data_len);
1449         size_t data_len;
1450         unsigned long flags;
1451 };
1452
1453 struct hci_mgmt_chan {
1454         struct list_head list;
1455         unsigned short channel;
1456         size_t handler_count;
1457         const struct hci_mgmt_handler *handlers;
1458         void (*hdev_init) (struct sock *sk, struct hci_dev *hdev);
1459 };
1460
1461 int hci_mgmt_chan_register(struct hci_mgmt_chan *c);
1462 void hci_mgmt_chan_unregister(struct hci_mgmt_chan *c);
1463
1464 /* Management interface */
1465 #define DISCOV_TYPE_BREDR               (BIT(BDADDR_BREDR))
1466 #define DISCOV_TYPE_LE                  (BIT(BDADDR_LE_PUBLIC) | \
1467                                          BIT(BDADDR_LE_RANDOM))
1468 #define DISCOV_TYPE_INTERLEAVED         (BIT(BDADDR_BREDR) | \
1469                                          BIT(BDADDR_LE_PUBLIC) | \
1470                                          BIT(BDADDR_LE_RANDOM))
1471
1472 /* These LE scan and inquiry parameters were chosen according to LE General
1473  * Discovery Procedure specification.
1474  */
1475 #define DISCOV_LE_SCAN_WIN              0x12
1476 #define DISCOV_LE_SCAN_INT              0x12
1477 #define DISCOV_LE_TIMEOUT               10240   /* msec */
1478 #define DISCOV_INTERLEAVED_TIMEOUT      5120    /* msec */
1479 #define DISCOV_INTERLEAVED_INQUIRY_LEN  0x04
1480 #define DISCOV_BREDR_INQUIRY_LEN        0x08
1481 #define DISCOV_LE_RESTART_DELAY         msecs_to_jiffies(200)   /* msec */
1482
1483 void mgmt_fill_version_info(void *ver);
1484 int mgmt_new_settings(struct hci_dev *hdev);
1485 void mgmt_index_added(struct hci_dev *hdev);
1486 void mgmt_index_removed(struct hci_dev *hdev);
1487 void mgmt_set_powered_failed(struct hci_dev *hdev, int err);
1488 void mgmt_power_on(struct hci_dev *hdev, int err);
1489 void __mgmt_power_off(struct hci_dev *hdev);
1490 void mgmt_new_link_key(struct hci_dev *hdev, struct link_key *key,
1491                        bool persistent);
1492 void mgmt_device_connected(struct hci_dev *hdev, struct hci_conn *conn,
1493                            u32 flags, u8 *name, u8 name_len);
1494 void mgmt_device_disconnected(struct hci_dev *hdev, bdaddr_t *bdaddr,
1495                               u8 link_type, u8 addr_type, u8 reason,
1496                               bool mgmt_connected);
1497 void mgmt_disconnect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr,
1498                             u8 link_type, u8 addr_type, u8 status);
1499 void mgmt_connect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1500                          u8 addr_type, u8 status);
1501 void mgmt_pin_code_request(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 secure);
1502 void mgmt_pin_code_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1503                                   u8 status);
1504 void mgmt_pin_code_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1505                                       u8 status);
1506 int mgmt_user_confirm_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
1507                               u8 link_type, u8 addr_type, u32 value,
1508                               u8 confirm_hint);
1509 int mgmt_user_confirm_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1510                                      u8 link_type, u8 addr_type, u8 status);
1511 int mgmt_user_confirm_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1512                                          u8 link_type, u8 addr_type, u8 status);
1513 int mgmt_user_passkey_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
1514                               u8 link_type, u8 addr_type);
1515 int mgmt_user_passkey_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1516                                      u8 link_type, u8 addr_type, u8 status);
1517 int mgmt_user_passkey_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1518                                          u8 link_type, u8 addr_type, u8 status);
1519 int mgmt_user_passkey_notify(struct hci_dev *hdev, bdaddr_t *bdaddr,
1520                              u8 link_type, u8 addr_type, u32 passkey,
1521                              u8 entered);
1522 void mgmt_auth_failed(struct hci_conn *conn, u8 status);
1523 void mgmt_auth_enable_complete(struct hci_dev *hdev, u8 status);
1524 void mgmt_ssp_enable_complete(struct hci_dev *hdev, u8 enable, u8 status);
1525 void mgmt_set_class_of_dev_complete(struct hci_dev *hdev, u8 *dev_class,
1526                                     u8 status);
1527 void mgmt_set_local_name_complete(struct hci_dev *hdev, u8 *name, u8 status);
1528 void mgmt_start_discovery_complete(struct hci_dev *hdev, u8 status);
1529 void mgmt_stop_discovery_complete(struct hci_dev *hdev, u8 status);
1530 void mgmt_device_found(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1531                        u8 addr_type, u8 *dev_class, s8 rssi, u32 flags,
1532                        u8 *eir, u16 eir_len, u8 *scan_rsp, u8 scan_rsp_len);
1533 void mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1534                       u8 addr_type, s8 rssi, u8 *name, u8 name_len);
1535 void mgmt_discovering(struct hci_dev *hdev, u8 discovering);
1536 bool mgmt_powering_down(struct hci_dev *hdev);
1537 void mgmt_new_ltk(struct hci_dev *hdev, struct smp_ltk *key, bool persistent);
1538 void mgmt_new_irk(struct hci_dev *hdev, struct smp_irk *irk, bool persistent);
1539 void mgmt_new_csrk(struct hci_dev *hdev, struct smp_csrk *csrk,
1540                    bool persistent);
1541 void mgmt_new_conn_param(struct hci_dev *hdev, bdaddr_t *bdaddr,
1542                          u8 bdaddr_type, u8 store_hint, u16 min_interval,
1543                          u16 max_interval, u16 latency, u16 timeout);
1544 void mgmt_smp_complete(struct hci_conn *conn, bool complete);
1545 bool mgmt_get_connectable(struct hci_dev *hdev);
1546 void mgmt_set_connectable_complete(struct hci_dev *hdev, u8 status);
1547 void mgmt_set_discoverable_complete(struct hci_dev *hdev, u8 status);
1548 u8 mgmt_get_adv_discov_flags(struct hci_dev *hdev);
1549 void mgmt_advertising_added(struct sock *sk, struct hci_dev *hdev,
1550                             u8 instance);
1551 void mgmt_advertising_removed(struct sock *sk, struct hci_dev *hdev,
1552                               u8 instance);
1553
1554 u8 hci_le_conn_update(struct hci_conn *conn, u16 min, u16 max, u16 latency,
1555                       u16 to_multiplier);
1556 void hci_le_start_enc(struct hci_conn *conn, __le16 ediv, __le64 rand,
1557                       __u8 ltk[16], __u8 key_size);
1558
1559 void hci_copy_identity_address(struct hci_dev *hdev, bdaddr_t *bdaddr,
1560                                u8 *bdaddr_type);
1561
1562 #define SCO_AIRMODE_MASK       0x0003
1563 #define SCO_AIRMODE_CVSD       0x0000
1564 #define SCO_AIRMODE_TRANSP     0x0003
1565
1566 #endif /* __HCI_CORE_H */