GNU Linux-libre 6.7.9-gnu
[releases.git] / include / net / bluetooth / hci_core.h
1 /*
2    BlueZ - Bluetooth protocol stack for Linux
3    Copyright (c) 2000-2001, 2010, Code Aurora Forum. All rights reserved.
4    Copyright 2023 NXP
5
6    Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
7
8    This program is free software; you can redistribute it and/or modify
9    it under the terms of the GNU General Public License version 2 as
10    published by the Free Software Foundation;
11
12    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
13    OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
14    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
15    IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
16    CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
17    WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
18    ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
19    OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
20
21    ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
22    COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
23    SOFTWARE IS DISCLAIMED.
24 */
25
26 #ifndef __HCI_CORE_H
27 #define __HCI_CORE_H
28
29 #include <linux/idr.h>
30 #include <linux/leds.h>
31 #include <linux/rculist.h>
32
33 #include <net/bluetooth/hci.h>
34 #include <net/bluetooth/hci_sync.h>
35 #include <net/bluetooth/hci_sock.h>
36 #include <net/bluetooth/coredump.h>
37
38 /* HCI priority */
39 #define HCI_PRIO_MAX    7
40
41 /* HCI maximum id value */
42 #define HCI_MAX_ID 10000
43
44 /* HCI Core structures */
45 struct inquiry_data {
46         bdaddr_t        bdaddr;
47         __u8            pscan_rep_mode;
48         __u8            pscan_period_mode;
49         __u8            pscan_mode;
50         __u8            dev_class[3];
51         __le16          clock_offset;
52         __s8            rssi;
53         __u8            ssp_mode;
54 };
55
56 struct inquiry_entry {
57         struct list_head        all;            /* inq_cache.all */
58         struct list_head        list;           /* unknown or resolve */
59         enum {
60                 NAME_NOT_KNOWN,
61                 NAME_NEEDED,
62                 NAME_PENDING,
63                 NAME_KNOWN,
64         } name_state;
65         __u32                   timestamp;
66         struct inquiry_data     data;
67 };
68
69 struct discovery_state {
70         int                     type;
71         enum {
72                 DISCOVERY_STOPPED,
73                 DISCOVERY_STARTING,
74                 DISCOVERY_FINDING,
75                 DISCOVERY_RESOLVING,
76                 DISCOVERY_STOPPING,
77         } state;
78         struct list_head        all;    /* All devices found during inquiry */
79         struct list_head        unknown;        /* Name state not known */
80         struct list_head        resolve;        /* Name needs to be resolved */
81         __u32                   timestamp;
82         bdaddr_t                last_adv_addr;
83         u8                      last_adv_addr_type;
84         s8                      last_adv_rssi;
85         u32                     last_adv_flags;
86         u8                      last_adv_data[HCI_MAX_EXT_AD_LENGTH];
87         u8                      last_adv_data_len;
88         bool                    report_invalid_rssi;
89         bool                    result_filtering;
90         bool                    limited;
91         s8                      rssi;
92         u16                     uuid_count;
93         u8                      (*uuids)[16];
94         unsigned long           scan_start;
95         unsigned long           scan_duration;
96         unsigned long           name_resolve_timeout;
97 };
98
99 #define SUSPEND_NOTIFIER_TIMEOUT        msecs_to_jiffies(2000) /* 2 seconds */
100
101 enum suspend_tasks {
102         SUSPEND_PAUSE_DISCOVERY,
103         SUSPEND_UNPAUSE_DISCOVERY,
104
105         SUSPEND_PAUSE_ADVERTISING,
106         SUSPEND_UNPAUSE_ADVERTISING,
107
108         SUSPEND_SCAN_DISABLE,
109         SUSPEND_SCAN_ENABLE,
110         SUSPEND_DISCONNECTING,
111
112         SUSPEND_POWERING_DOWN,
113
114         SUSPEND_PREPARE_NOTIFIER,
115
116         SUSPEND_SET_ADV_FILTER,
117         __SUSPEND_NUM_TASKS
118 };
119
120 enum suspended_state {
121         BT_RUNNING = 0,
122         BT_SUSPEND_DISCONNECT,
123         BT_SUSPEND_CONFIGURE_WAKE,
124 };
125
126 struct hci_conn_hash {
127         struct list_head list;
128         unsigned int     acl_num;
129         unsigned int     amp_num;
130         unsigned int     sco_num;
131         unsigned int     iso_num;
132         unsigned int     le_num;
133         unsigned int     le_num_peripheral;
134 };
135
136 struct bdaddr_list {
137         struct list_head list;
138         bdaddr_t bdaddr;
139         u8 bdaddr_type;
140 };
141
142 struct codec_list {
143         struct list_head list;
144         u8      id;
145         __u16   cid;
146         __u16   vid;
147         u8      transport;
148         u8      num_caps;
149         u32     len;
150         struct hci_codec_caps caps[];
151 };
152
153 struct bdaddr_list_with_irk {
154         struct list_head list;
155         bdaddr_t bdaddr;
156         u8 bdaddr_type;
157         u8 peer_irk[16];
158         u8 local_irk[16];
159 };
160
161 /* Bitmask of connection flags */
162 enum hci_conn_flags {
163         HCI_CONN_FLAG_REMOTE_WAKEUP = 1,
164         HCI_CONN_FLAG_DEVICE_PRIVACY = 2,
165 };
166 typedef u8 hci_conn_flags_t;
167
168 struct bdaddr_list_with_flags {
169         struct list_head list;
170         bdaddr_t bdaddr;
171         u8 bdaddr_type;
172         hci_conn_flags_t flags;
173 };
174
175 struct bt_uuid {
176         struct list_head list;
177         u8 uuid[16];
178         u8 size;
179         u8 svc_hint;
180 };
181
182 struct blocked_key {
183         struct list_head list;
184         struct rcu_head rcu;
185         u8 type;
186         u8 val[16];
187 };
188
189 struct smp_csrk {
190         bdaddr_t bdaddr;
191         u8 bdaddr_type;
192         u8 link_type;
193         u8 type;
194         u8 val[16];
195 };
196
197 struct smp_ltk {
198         struct list_head list;
199         struct rcu_head rcu;
200         bdaddr_t bdaddr;
201         u8 bdaddr_type;
202         u8 link_type;
203         u8 authenticated;
204         u8 type;
205         u8 enc_size;
206         __le16 ediv;
207         __le64 rand;
208         u8 val[16];
209 };
210
211 struct smp_irk {
212         struct list_head list;
213         struct rcu_head rcu;
214         bdaddr_t rpa;
215         bdaddr_t bdaddr;
216         u8 addr_type;
217         u8 link_type;
218         u8 val[16];
219 };
220
221 struct link_key {
222         struct list_head list;
223         struct rcu_head rcu;
224         bdaddr_t bdaddr;
225         u8 bdaddr_type;
226         u8 link_type;
227         u8 type;
228         u8 val[HCI_LINK_KEY_SIZE];
229         u8 pin_len;
230 };
231
232 struct oob_data {
233         struct list_head list;
234         bdaddr_t bdaddr;
235         u8 bdaddr_type;
236         u8 present;
237         u8 hash192[16];
238         u8 rand192[16];
239         u8 hash256[16];
240         u8 rand256[16];
241 };
242
243 struct adv_info {
244         struct list_head list;
245         bool    enabled;
246         bool    pending;
247         bool    periodic;
248         __u8    mesh;
249         __u8    instance;
250         __u32   flags;
251         __u16   timeout;
252         __u16   remaining_time;
253         __u16   duration;
254         __u16   adv_data_len;
255         __u8    adv_data[HCI_MAX_EXT_AD_LENGTH];
256         bool    adv_data_changed;
257         __u16   scan_rsp_len;
258         __u8    scan_rsp_data[HCI_MAX_EXT_AD_LENGTH];
259         bool    scan_rsp_changed;
260         __u16   per_adv_data_len;
261         __u8    per_adv_data[HCI_MAX_PER_AD_LENGTH];
262         __s8    tx_power;
263         __u32   min_interval;
264         __u32   max_interval;
265         bdaddr_t        random_addr;
266         bool            rpa_expired;
267         struct delayed_work     rpa_expired_cb;
268 };
269
270 #define HCI_MAX_ADV_INSTANCES           5
271 #define HCI_DEFAULT_ADV_DURATION        2
272
273 #define HCI_ADV_TX_POWER_NO_PREFERENCE 0x7F
274
275 #define DATA_CMP(_d1, _l1, _d2, _l2) \
276         (_l1 == _l2 ? memcmp(_d1, _d2, _l1) : _l1 - _l2)
277
278 #define ADV_DATA_CMP(_adv, _data, _len) \
279         DATA_CMP((_adv)->adv_data, (_adv)->adv_data_len, _data, _len)
280
281 #define SCAN_RSP_CMP(_adv, _data, _len) \
282         DATA_CMP((_adv)->scan_rsp_data, (_adv)->scan_rsp_len, _data, _len)
283
284 struct monitored_device {
285         struct list_head list;
286
287         bdaddr_t bdaddr;
288         __u8     addr_type;
289         __u16    handle;
290         bool     notified;
291 };
292
293 struct adv_pattern {
294         struct list_head list;
295         __u8 ad_type;
296         __u8 offset;
297         __u8 length;
298         __u8 value[HCI_MAX_EXT_AD_LENGTH];
299 };
300
301 struct adv_rssi_thresholds {
302         __s8 low_threshold;
303         __s8 high_threshold;
304         __u16 low_threshold_timeout;
305         __u16 high_threshold_timeout;
306         __u8 sampling_period;
307 };
308
309 struct adv_monitor {
310         struct list_head patterns;
311         struct adv_rssi_thresholds rssi;
312         __u16           handle;
313
314         enum {
315                 ADV_MONITOR_STATE_NOT_REGISTERED,
316                 ADV_MONITOR_STATE_REGISTERED,
317                 ADV_MONITOR_STATE_OFFLOADED
318         } state;
319 };
320
321 #define HCI_MIN_ADV_MONITOR_HANDLE              1
322 #define HCI_MAX_ADV_MONITOR_NUM_HANDLES         32
323 #define HCI_MAX_ADV_MONITOR_NUM_PATTERNS        16
324 #define HCI_ADV_MONITOR_EXT_NONE                1
325 #define HCI_ADV_MONITOR_EXT_MSFT                2
326
327 #define HCI_MAX_SHORT_NAME_LENGTH       10
328
329 #define HCI_CONN_HANDLE_MAX             0x0eff
330 #define HCI_CONN_HANDLE_UNSET(_handle)  (_handle > HCI_CONN_HANDLE_MAX)
331
332 /* Min encryption key size to match with SMP */
333 #define HCI_MIN_ENC_KEY_SIZE            7
334
335 /* Default LE RPA expiry time, 15 minutes */
336 #define HCI_DEFAULT_RPA_TIMEOUT         (15 * 60)
337
338 /* Default min/max age of connection information (1s/3s) */
339 #define DEFAULT_CONN_INFO_MIN_AGE       1000
340 #define DEFAULT_CONN_INFO_MAX_AGE       3000
341 /* Default authenticated payload timeout 30s */
342 #define DEFAULT_AUTH_PAYLOAD_TIMEOUT   0x0bb8
343
344 struct amp_assoc {
345         __u16   len;
346         __u16   offset;
347         __u16   rem_len;
348         __u16   len_so_far;
349         __u8    data[HCI_MAX_AMP_ASSOC_SIZE];
350 };
351
352 #define HCI_MAX_PAGES   3
353
354 struct hci_dev {
355         struct list_head list;
356         struct mutex    lock;
357
358         struct ida      unset_handle_ida;
359
360         const char      *name;
361         unsigned long   flags;
362         __u16           id;
363         __u8            bus;
364         __u8            dev_type;
365         bdaddr_t        bdaddr;
366         bdaddr_t        setup_addr;
367         bdaddr_t        public_addr;
368         bdaddr_t        random_addr;
369         bdaddr_t        static_addr;
370         __u8            adv_addr_type;
371         __u8            dev_name[HCI_MAX_NAME_LENGTH];
372         __u8            short_name[HCI_MAX_SHORT_NAME_LENGTH];
373         __u8            eir[HCI_MAX_EIR_LENGTH];
374         __u16           appearance;
375         __u8            dev_class[3];
376         __u8            major_class;
377         __u8            minor_class;
378         __u8            max_page;
379         __u8            features[HCI_MAX_PAGES][8];
380         __u8            le_features[8];
381         __u8            le_accept_list_size;
382         __u8            le_resolv_list_size;
383         __u8            le_num_of_adv_sets;
384         __u8            le_states[8];
385         __u8            mesh_ad_types[16];
386         __u8            mesh_send_ref;
387         __u8            commands[64];
388         __u8            hci_ver;
389         __u16           hci_rev;
390         __u8            lmp_ver;
391         __u16           manufacturer;
392         __u16           lmp_subver;
393         __u16           voice_setting;
394         __u8            num_iac;
395         __u16           stored_max_keys;
396         __u16           stored_num_keys;
397         __u8            io_capability;
398         __s8            inq_tx_power;
399         __u8            err_data_reporting;
400         __u16           page_scan_interval;
401         __u16           page_scan_window;
402         __u8            page_scan_type;
403         __u8            le_adv_channel_map;
404         __u16           le_adv_min_interval;
405         __u16           le_adv_max_interval;
406         __u8            le_scan_type;
407         __u16           le_scan_interval;
408         __u16           le_scan_window;
409         __u16           le_scan_int_suspend;
410         __u16           le_scan_window_suspend;
411         __u16           le_scan_int_discovery;
412         __u16           le_scan_window_discovery;
413         __u16           le_scan_int_adv_monitor;
414         __u16           le_scan_window_adv_monitor;
415         __u16           le_scan_int_connect;
416         __u16           le_scan_window_connect;
417         __u16           le_conn_min_interval;
418         __u16           le_conn_max_interval;
419         __u16           le_conn_latency;
420         __u16           le_supv_timeout;
421         __u16           le_def_tx_len;
422         __u16           le_def_tx_time;
423         __u16           le_max_tx_len;
424         __u16           le_max_tx_time;
425         __u16           le_max_rx_len;
426         __u16           le_max_rx_time;
427         __u8            le_max_key_size;
428         __u8            le_min_key_size;
429         __u16           discov_interleaved_timeout;
430         __u16           conn_info_min_age;
431         __u16           conn_info_max_age;
432         __u16           auth_payload_timeout;
433         __u8            min_enc_key_size;
434         __u8            max_enc_key_size;
435         __u8            pairing_opts;
436         __u8            ssp_debug_mode;
437         __u8            hw_error_code;
438         __u32           clock;
439         __u16           advmon_allowlist_duration;
440         __u16           advmon_no_filter_duration;
441         __u8            enable_advmon_interleave_scan;
442
443         __u16           devid_source;
444         __u16           devid_vendor;
445         __u16           devid_product;
446         __u16           devid_version;
447
448         __u8            def_page_scan_type;
449         __u16           def_page_scan_int;
450         __u16           def_page_scan_window;
451         __u8            def_inq_scan_type;
452         __u16           def_inq_scan_int;
453         __u16           def_inq_scan_window;
454         __u16           def_br_lsto;
455         __u16           def_page_timeout;
456         __u16           def_multi_adv_rotation_duration;
457         __u16           def_le_autoconnect_timeout;
458         __s8            min_le_tx_power;
459         __s8            max_le_tx_power;
460
461         __u16           pkt_type;
462         __u16           esco_type;
463         __u16           link_policy;
464         __u16           link_mode;
465
466         __u32           idle_timeout;
467         __u16           sniff_min_interval;
468         __u16           sniff_max_interval;
469
470         __u8            amp_status;
471         __u32           amp_total_bw;
472         __u32           amp_max_bw;
473         __u32           amp_min_latency;
474         __u32           amp_max_pdu;
475         __u8            amp_type;
476         __u16           amp_pal_cap;
477         __u16           amp_assoc_size;
478         __u32           amp_max_flush_to;
479         __u32           amp_be_flush_to;
480
481         struct amp_assoc        loc_assoc;
482
483         __u8            flow_ctl_mode;
484
485         unsigned int    auto_accept_delay;
486
487         unsigned long   quirks;
488
489         atomic_t        cmd_cnt;
490         unsigned int    acl_cnt;
491         unsigned int    sco_cnt;
492         unsigned int    le_cnt;
493         unsigned int    iso_cnt;
494
495         unsigned int    acl_mtu;
496         unsigned int    sco_mtu;
497         unsigned int    le_mtu;
498         unsigned int    iso_mtu;
499         unsigned int    acl_pkts;
500         unsigned int    sco_pkts;
501         unsigned int    le_pkts;
502         unsigned int    iso_pkts;
503
504         __u16           block_len;
505         __u16           block_mtu;
506         __u16           num_blocks;
507         __u16           block_cnt;
508
509         unsigned long   acl_last_tx;
510         unsigned long   sco_last_tx;
511         unsigned long   le_last_tx;
512
513         __u8            le_tx_def_phys;
514         __u8            le_rx_def_phys;
515
516         struct workqueue_struct *workqueue;
517         struct workqueue_struct *req_workqueue;
518
519         struct work_struct      power_on;
520         struct delayed_work     power_off;
521         struct work_struct      error_reset;
522         struct work_struct      cmd_sync_work;
523         struct list_head        cmd_sync_work_list;
524         struct mutex            cmd_sync_work_lock;
525         struct mutex            unregister_lock;
526         struct work_struct      cmd_sync_cancel_work;
527         struct work_struct      reenable_adv_work;
528
529         __u16                   discov_timeout;
530         struct delayed_work     discov_off;
531
532         struct delayed_work     service_cache;
533
534         struct delayed_work     cmd_timer;
535         struct delayed_work     ncmd_timer;
536
537         struct work_struct      rx_work;
538         struct work_struct      cmd_work;
539         struct work_struct      tx_work;
540
541         struct delayed_work     le_scan_disable;
542         struct delayed_work     le_scan_restart;
543
544         struct sk_buff_head     rx_q;
545         struct sk_buff_head     raw_q;
546         struct sk_buff_head     cmd_q;
547
548         struct sk_buff          *sent_cmd;
549         struct sk_buff          *recv_event;
550
551         struct mutex            req_lock;
552         wait_queue_head_t       req_wait_q;
553         __u32                   req_status;
554         __u32                   req_result;
555         struct sk_buff          *req_skb;
556
557         void                    *smp_data;
558         void                    *smp_bredr_data;
559
560         struct discovery_state  discovery;
561
562         int                     discovery_old_state;
563         bool                    discovery_paused;
564         int                     advertising_old_state;
565         bool                    advertising_paused;
566
567         struct notifier_block   suspend_notifier;
568         enum suspended_state    suspend_state_next;
569         enum suspended_state    suspend_state;
570         bool                    scanning_paused;
571         bool                    suspended;
572         u8                      wake_reason;
573         bdaddr_t                wake_addr;
574         u8                      wake_addr_type;
575
576         struct hci_conn_hash    conn_hash;
577
578         struct list_head        mesh_pending;
579         struct list_head        mgmt_pending;
580         struct list_head        reject_list;
581         struct list_head        accept_list;
582         struct list_head        uuids;
583         struct list_head        link_keys;
584         struct list_head        long_term_keys;
585         struct list_head        identity_resolving_keys;
586         struct list_head        remote_oob_data;
587         struct list_head        le_accept_list;
588         struct list_head        le_resolv_list;
589         struct list_head        le_conn_params;
590         struct list_head        pend_le_conns;
591         struct list_head        pend_le_reports;
592         struct list_head        blocked_keys;
593         struct list_head        local_codecs;
594
595         struct hci_dev_stats    stat;
596
597         atomic_t                promisc;
598
599         const char              *hw_info;
600         const char              *fw_info;
601         struct dentry           *debugfs;
602
603         struct hci_devcoredump  dump;
604
605         struct device           dev;
606
607         struct rfkill           *rfkill;
608
609         DECLARE_BITMAP(dev_flags, __HCI_NUM_FLAGS);
610         hci_conn_flags_t        conn_flags;
611
612         __s8                    adv_tx_power;
613         __u8                    adv_data[HCI_MAX_EXT_AD_LENGTH];
614         __u8                    adv_data_len;
615         __u8                    scan_rsp_data[HCI_MAX_EXT_AD_LENGTH];
616         __u8                    scan_rsp_data_len;
617         __u8                    per_adv_data[HCI_MAX_PER_AD_LENGTH];
618         __u8                    per_adv_data_len;
619
620         struct list_head        adv_instances;
621         unsigned int            adv_instance_cnt;
622         __u8                    cur_adv_instance;
623         __u16                   adv_instance_timeout;
624         struct delayed_work     adv_instance_expire;
625
626         struct idr              adv_monitors_idr;
627         unsigned int            adv_monitors_cnt;
628
629         __u8                    irk[16];
630         __u32                   rpa_timeout;
631         struct delayed_work     rpa_expired;
632         bdaddr_t                rpa;
633
634         struct delayed_work     mesh_send_done;
635
636         enum {
637                 INTERLEAVE_SCAN_NONE,
638                 INTERLEAVE_SCAN_NO_FILTER,
639                 INTERLEAVE_SCAN_ALLOWLIST
640         } interleave_scan_state;
641
642         struct delayed_work     interleave_scan;
643
644         struct list_head        monitored_devices;
645         bool                    advmon_pend_notify;
646
647 #if IS_ENABLED(CONFIG_BT_LEDS)
648         struct led_trigger      *power_led;
649 #endif
650
651 #if IS_ENABLED(CONFIG_BT_MSFTEXT)
652         __u16                   msft_opcode;
653         void                    *msft_data;
654         bool                    msft_curve_validity;
655 #endif
656
657 #if IS_ENABLED(CONFIG_BT_AOSPEXT)
658         bool                    aosp_capable;
659         bool                    aosp_quality_report;
660 #endif
661
662         int (*open)(struct hci_dev *hdev);
663         int (*close)(struct hci_dev *hdev);
664         int (*flush)(struct hci_dev *hdev);
665         int (*setup)(struct hci_dev *hdev);
666         int (*shutdown)(struct hci_dev *hdev);
667         int (*send)(struct hci_dev *hdev, struct sk_buff *skb);
668         void (*notify)(struct hci_dev *hdev, unsigned int evt);
669         void (*hw_error)(struct hci_dev *hdev, u8 code);
670         int (*post_init)(struct hci_dev *hdev);
671         int (*set_diag)(struct hci_dev *hdev, bool enable);
672         int (*set_bdaddr)(struct hci_dev *hdev, const bdaddr_t *bdaddr);
673         void (*cmd_timeout)(struct hci_dev *hdev);
674         void (*reset)(struct hci_dev *hdev);
675         bool (*wakeup)(struct hci_dev *hdev);
676         int (*set_quality_report)(struct hci_dev *hdev, bool enable);
677         int (*get_data_path_id)(struct hci_dev *hdev, __u8 *data_path);
678         int (*get_codec_config_data)(struct hci_dev *hdev, __u8 type,
679                                      struct bt_codec *codec, __u8 *vnd_len,
680                                      __u8 **vnd_data);
681 };
682
683 #define HCI_PHY_HANDLE(handle)  (handle & 0xff)
684
685 enum conn_reasons {
686         CONN_REASON_PAIR_DEVICE,
687         CONN_REASON_L2CAP_CHAN,
688         CONN_REASON_SCO_CONNECT,
689         CONN_REASON_ISO_CONNECT,
690 };
691
692 struct hci_conn {
693         struct list_head list;
694
695         atomic_t        refcnt;
696
697         bdaddr_t        dst;
698         __u8            dst_type;
699         bdaddr_t        src;
700         __u8            src_type;
701         bdaddr_t        init_addr;
702         __u8            init_addr_type;
703         bdaddr_t        resp_addr;
704         __u8            resp_addr_type;
705         __u8            adv_instance;
706         __u16           handle;
707         __u16           sync_handle;
708         __u16           state;
709         __u8            mode;
710         __u8            type;
711         __u8            role;
712         bool            out;
713         __u8            attempt;
714         __u8            dev_class[3];
715         __u8            features[HCI_MAX_PAGES][8];
716         __u16           pkt_type;
717         __u16           link_policy;
718         __u8            key_type;
719         __u8            auth_type;
720         __u8            sec_level;
721         __u8            pending_sec_level;
722         __u8            pin_length;
723         __u8            enc_key_size;
724         __u8            io_capability;
725         __u32           passkey_notify;
726         __u8            passkey_entered;
727         __u16           disc_timeout;
728         __u16           conn_timeout;
729         __u16           setting;
730         __u16           auth_payload_timeout;
731         __u16           le_conn_min_interval;
732         __u16           le_conn_max_interval;
733         __u16           le_conn_interval;
734         __u16           le_conn_latency;
735         __u16           le_supv_timeout;
736         __u8            le_adv_data[HCI_MAX_EXT_AD_LENGTH];
737         __u8            le_adv_data_len;
738         __u8            le_per_adv_data[HCI_MAX_PER_AD_LENGTH];
739         __u8            le_per_adv_data_len;
740         __u8            le_tx_phy;
741         __u8            le_rx_phy;
742         __s8            rssi;
743         __s8            tx_power;
744         __s8            max_tx_power;
745         struct bt_iso_qos iso_qos;
746         unsigned long   flags;
747
748         enum conn_reasons conn_reason;
749         __u8            abort_reason;
750
751         __u32           clock;
752         __u16           clock_accuracy;
753
754         unsigned long   conn_info_timestamp;
755
756         __u8            remote_cap;
757         __u8            remote_auth;
758         __u8            remote_id;
759
760         unsigned int    sent;
761
762         struct sk_buff_head data_q;
763         struct list_head chan_list;
764
765         struct delayed_work disc_work;
766         struct delayed_work auto_accept_work;
767         struct delayed_work idle_work;
768         struct delayed_work le_conn_timeout;
769
770         struct device   dev;
771         struct dentry   *debugfs;
772
773         struct hci_dev  *hdev;
774         void            *l2cap_data;
775         void            *sco_data;
776         void            *iso_data;
777         struct amp_mgr  *amp_mgr;
778
779         struct list_head link_list;
780         struct hci_conn *parent;
781         struct hci_link *link;
782
783         struct bt_codec codec;
784
785         void (*connect_cfm_cb)  (struct hci_conn *conn, u8 status);
786         void (*security_cfm_cb) (struct hci_conn *conn, u8 status);
787         void (*disconn_cfm_cb)  (struct hci_conn *conn, u8 reason);
788
789         void (*cleanup)(struct hci_conn *conn);
790 };
791
792 struct hci_link {
793         struct list_head list;
794         struct hci_conn *conn;
795 };
796
797 struct hci_chan {
798         struct list_head list;
799         __u16 handle;
800         struct hci_conn *conn;
801         struct sk_buff_head data_q;
802         unsigned int    sent;
803         __u8            state;
804         bool            amp;
805 };
806
807 struct hci_conn_params {
808         struct list_head list;
809         struct list_head action;
810
811         bdaddr_t addr;
812         u8 addr_type;
813
814         u16 conn_min_interval;
815         u16 conn_max_interval;
816         u16 conn_latency;
817         u16 supervision_timeout;
818
819         enum {
820                 HCI_AUTO_CONN_DISABLED,
821                 HCI_AUTO_CONN_REPORT,
822                 HCI_AUTO_CONN_DIRECT,
823                 HCI_AUTO_CONN_ALWAYS,
824                 HCI_AUTO_CONN_LINK_LOSS,
825                 HCI_AUTO_CONN_EXPLICIT,
826         } auto_connect;
827
828         struct hci_conn *conn;
829         bool explicit_connect;
830         /* Accessed without hdev->lock: */
831         hci_conn_flags_t flags;
832         u8  privacy_mode;
833 };
834
835 extern struct list_head hci_dev_list;
836 extern struct list_head hci_cb_list;
837 extern rwlock_t hci_dev_list_lock;
838 extern struct mutex hci_cb_list_lock;
839
840 #define hci_dev_set_flag(hdev, nr)             set_bit((nr), (hdev)->dev_flags)
841 #define hci_dev_clear_flag(hdev, nr)           clear_bit((nr), (hdev)->dev_flags)
842 #define hci_dev_change_flag(hdev, nr)          change_bit((nr), (hdev)->dev_flags)
843 #define hci_dev_test_flag(hdev, nr)            test_bit((nr), (hdev)->dev_flags)
844 #define hci_dev_test_and_set_flag(hdev, nr)    test_and_set_bit((nr), (hdev)->dev_flags)
845 #define hci_dev_test_and_clear_flag(hdev, nr)  test_and_clear_bit((nr), (hdev)->dev_flags)
846 #define hci_dev_test_and_change_flag(hdev, nr) test_and_change_bit((nr), (hdev)->dev_flags)
847
848 #define hci_dev_clear_volatile_flags(hdev)                      \
849         do {                                                    \
850                 hci_dev_clear_flag(hdev, HCI_LE_SCAN);          \
851                 hci_dev_clear_flag(hdev, HCI_LE_ADV);           \
852                 hci_dev_clear_flag(hdev, HCI_LL_RPA_RESOLUTION);\
853                 hci_dev_clear_flag(hdev, HCI_PERIODIC_INQ);     \
854                 hci_dev_clear_flag(hdev, HCI_QUALITY_REPORT);   \
855         } while (0)
856
857 #define hci_dev_le_state_simultaneous(hdev) \
858         (test_bit(HCI_QUIRK_VALID_LE_STATES, &hdev->quirks) && \
859          (hdev->le_states[4] & 0x08) && /* Central */ \
860          (hdev->le_states[4] & 0x40) && /* Peripheral */ \
861          (hdev->le_states[3] & 0x10))   /* Simultaneous */
862
863 /* ----- HCI interface to upper protocols ----- */
864 int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr);
865 int l2cap_disconn_ind(struct hci_conn *hcon);
866 void l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
867
868 #if IS_ENABLED(CONFIG_BT_BREDR)
869 int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
870 void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb);
871 #else
872 static inline int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
873                                   __u8 *flags)
874 {
875         return 0;
876 }
877
878 static inline void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb)
879 {
880 }
881 #endif
882
883 #if IS_ENABLED(CONFIG_BT_LE)
884 int iso_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
885 void iso_recv(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
886 #else
887 static inline int iso_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
888                                   __u8 *flags)
889 {
890         return 0;
891 }
892 static inline void iso_recv(struct hci_conn *hcon, struct sk_buff *skb,
893                             u16 flags)
894 {
895 }
896 #endif
897
898 /* ----- Inquiry cache ----- */
899 #define INQUIRY_CACHE_AGE_MAX   (HZ*30)   /* 30 seconds */
900 #define INQUIRY_ENTRY_AGE_MAX   (HZ*60)   /* 60 seconds */
901
902 static inline void discovery_init(struct hci_dev *hdev)
903 {
904         hdev->discovery.state = DISCOVERY_STOPPED;
905         INIT_LIST_HEAD(&hdev->discovery.all);
906         INIT_LIST_HEAD(&hdev->discovery.unknown);
907         INIT_LIST_HEAD(&hdev->discovery.resolve);
908         hdev->discovery.report_invalid_rssi = true;
909         hdev->discovery.rssi = HCI_RSSI_INVALID;
910 }
911
912 static inline void hci_discovery_filter_clear(struct hci_dev *hdev)
913 {
914         hdev->discovery.result_filtering = false;
915         hdev->discovery.report_invalid_rssi = true;
916         hdev->discovery.rssi = HCI_RSSI_INVALID;
917         hdev->discovery.uuid_count = 0;
918         kfree(hdev->discovery.uuids);
919         hdev->discovery.uuids = NULL;
920         hdev->discovery.scan_start = 0;
921         hdev->discovery.scan_duration = 0;
922 }
923
924 bool hci_discovery_active(struct hci_dev *hdev);
925
926 void hci_discovery_set_state(struct hci_dev *hdev, int state);
927
928 static inline int inquiry_cache_empty(struct hci_dev *hdev)
929 {
930         return list_empty(&hdev->discovery.all);
931 }
932
933 static inline long inquiry_cache_age(struct hci_dev *hdev)
934 {
935         struct discovery_state *c = &hdev->discovery;
936         return jiffies - c->timestamp;
937 }
938
939 static inline long inquiry_entry_age(struct inquiry_entry *e)
940 {
941         return jiffies - e->timestamp;
942 }
943
944 struct inquiry_entry *hci_inquiry_cache_lookup(struct hci_dev *hdev,
945                                                bdaddr_t *bdaddr);
946 struct inquiry_entry *hci_inquiry_cache_lookup_unknown(struct hci_dev *hdev,
947                                                        bdaddr_t *bdaddr);
948 struct inquiry_entry *hci_inquiry_cache_lookup_resolve(struct hci_dev *hdev,
949                                                        bdaddr_t *bdaddr,
950                                                        int state);
951 void hci_inquiry_cache_update_resolve(struct hci_dev *hdev,
952                                       struct inquiry_entry *ie);
953 u32 hci_inquiry_cache_update(struct hci_dev *hdev, struct inquiry_data *data,
954                              bool name_known);
955 void hci_inquiry_cache_flush(struct hci_dev *hdev);
956
957 /* ----- HCI Connections ----- */
958 enum {
959         HCI_CONN_AUTH_PEND,
960         HCI_CONN_ENCRYPT_PEND,
961         HCI_CONN_RSWITCH_PEND,
962         HCI_CONN_MODE_CHANGE_PEND,
963         HCI_CONN_SCO_SETUP_PEND,
964         HCI_CONN_MGMT_CONNECTED,
965         HCI_CONN_SSP_ENABLED,
966         HCI_CONN_SC_ENABLED,
967         HCI_CONN_AES_CCM,
968         HCI_CONN_POWER_SAVE,
969         HCI_CONN_FLUSH_KEY,
970         HCI_CONN_ENCRYPT,
971         HCI_CONN_AUTH,
972         HCI_CONN_SECURE,
973         HCI_CONN_FIPS,
974         HCI_CONN_STK_ENCRYPT,
975         HCI_CONN_AUTH_INITIATOR,
976         HCI_CONN_DROP,
977         HCI_CONN_CANCEL,
978         HCI_CONN_PARAM_REMOVAL_PEND,
979         HCI_CONN_NEW_LINK_KEY,
980         HCI_CONN_SCANNING,
981         HCI_CONN_AUTH_FAILURE,
982         HCI_CONN_PER_ADV,
983         HCI_CONN_BIG_CREATED,
984         HCI_CONN_CREATE_CIS,
985         HCI_CONN_BIG_SYNC,
986         HCI_CONN_BIG_SYNC_FAILED,
987         HCI_CONN_PA_SYNC,
988         HCI_CONN_PA_SYNC_FAILED,
989 };
990
991 static inline bool hci_conn_ssp_enabled(struct hci_conn *conn)
992 {
993         struct hci_dev *hdev = conn->hdev;
994         return hci_dev_test_flag(hdev, HCI_SSP_ENABLED) &&
995                test_bit(HCI_CONN_SSP_ENABLED, &conn->flags);
996 }
997
998 static inline bool hci_conn_sc_enabled(struct hci_conn *conn)
999 {
1000         struct hci_dev *hdev = conn->hdev;
1001         return hci_dev_test_flag(hdev, HCI_SC_ENABLED) &&
1002                test_bit(HCI_CONN_SC_ENABLED, &conn->flags);
1003 }
1004
1005 static inline void hci_conn_hash_add(struct hci_dev *hdev, struct hci_conn *c)
1006 {
1007         struct hci_conn_hash *h = &hdev->conn_hash;
1008         list_add_tail_rcu(&c->list, &h->list);
1009         switch (c->type) {
1010         case ACL_LINK:
1011                 h->acl_num++;
1012                 break;
1013         case AMP_LINK:
1014                 h->amp_num++;
1015                 break;
1016         case LE_LINK:
1017                 h->le_num++;
1018                 if (c->role == HCI_ROLE_SLAVE)
1019                         h->le_num_peripheral++;
1020                 break;
1021         case SCO_LINK:
1022         case ESCO_LINK:
1023                 h->sco_num++;
1024                 break;
1025         case ISO_LINK:
1026                 h->iso_num++;
1027                 break;
1028         }
1029 }
1030
1031 static inline void hci_conn_hash_del(struct hci_dev *hdev, struct hci_conn *c)
1032 {
1033         struct hci_conn_hash *h = &hdev->conn_hash;
1034
1035         list_del_rcu(&c->list);
1036         synchronize_rcu();
1037
1038         switch (c->type) {
1039         case ACL_LINK:
1040                 h->acl_num--;
1041                 break;
1042         case AMP_LINK:
1043                 h->amp_num--;
1044                 break;
1045         case LE_LINK:
1046                 h->le_num--;
1047                 if (c->role == HCI_ROLE_SLAVE)
1048                         h->le_num_peripheral--;
1049                 break;
1050         case SCO_LINK:
1051         case ESCO_LINK:
1052                 h->sco_num--;
1053                 break;
1054         case ISO_LINK:
1055                 h->iso_num--;
1056                 break;
1057         }
1058 }
1059
1060 static inline unsigned int hci_conn_num(struct hci_dev *hdev, __u8 type)
1061 {
1062         struct hci_conn_hash *h = &hdev->conn_hash;
1063         switch (type) {
1064         case ACL_LINK:
1065                 return h->acl_num;
1066         case AMP_LINK:
1067                 return h->amp_num;
1068         case LE_LINK:
1069                 return h->le_num;
1070         case SCO_LINK:
1071         case ESCO_LINK:
1072                 return h->sco_num;
1073         case ISO_LINK:
1074                 return h->iso_num;
1075         default:
1076                 return 0;
1077         }
1078 }
1079
1080 static inline unsigned int hci_conn_count(struct hci_dev *hdev)
1081 {
1082         struct hci_conn_hash *c = &hdev->conn_hash;
1083
1084         return c->acl_num + c->amp_num + c->sco_num + c->le_num + c->iso_num;
1085 }
1086
1087 static inline __u8 hci_conn_lookup_type(struct hci_dev *hdev, __u16 handle)
1088 {
1089         struct hci_conn_hash *h = &hdev->conn_hash;
1090         struct hci_conn *c;
1091         __u8 type = INVALID_LINK;
1092
1093         rcu_read_lock();
1094
1095         list_for_each_entry_rcu(c, &h->list, list) {
1096                 if (c->handle == handle) {
1097                         type = c->type;
1098                         break;
1099                 }
1100         }
1101
1102         rcu_read_unlock();
1103
1104         return type;
1105 }
1106
1107 static inline struct hci_conn *hci_conn_hash_lookup_bis(struct hci_dev *hdev,
1108                                                         bdaddr_t *ba, __u8 bis)
1109 {
1110         struct hci_conn_hash *h = &hdev->conn_hash;
1111         struct hci_conn  *c;
1112
1113         rcu_read_lock();
1114
1115         list_for_each_entry_rcu(c, &h->list, list) {
1116                 if (bacmp(&c->dst, ba) || c->type != ISO_LINK)
1117                         continue;
1118
1119                 if (c->iso_qos.bcast.bis == bis) {
1120                         rcu_read_unlock();
1121                         return c;
1122                 }
1123         }
1124         rcu_read_unlock();
1125
1126         return NULL;
1127 }
1128
1129 static inline struct hci_conn *
1130 hci_conn_hash_lookup_per_adv_bis(struct hci_dev *hdev,
1131                                  bdaddr_t *ba,
1132                                  __u8 big, __u8 bis)
1133 {
1134         struct hci_conn_hash *h = &hdev->conn_hash;
1135         struct hci_conn  *c;
1136
1137         rcu_read_lock();
1138
1139         list_for_each_entry_rcu(c, &h->list, list) {
1140                 if (bacmp(&c->dst, ba) || c->type != ISO_LINK ||
1141                         !test_bit(HCI_CONN_PER_ADV, &c->flags))
1142                         continue;
1143
1144                 if (c->iso_qos.bcast.big == big &&
1145                     c->iso_qos.bcast.bis == bis) {
1146                         rcu_read_unlock();
1147                         return c;
1148                 }
1149         }
1150         rcu_read_unlock();
1151
1152         return NULL;
1153 }
1154
1155 static inline struct hci_conn *hci_conn_hash_lookup_handle(struct hci_dev *hdev,
1156                                                                 __u16 handle)
1157 {
1158         struct hci_conn_hash *h = &hdev->conn_hash;
1159         struct hci_conn  *c;
1160
1161         rcu_read_lock();
1162
1163         list_for_each_entry_rcu(c, &h->list, list) {
1164                 if (c->handle == handle) {
1165                         rcu_read_unlock();
1166                         return c;
1167                 }
1168         }
1169         rcu_read_unlock();
1170
1171         return NULL;
1172 }
1173
1174 static inline struct hci_conn *hci_conn_hash_lookup_ba(struct hci_dev *hdev,
1175                                                         __u8 type, bdaddr_t *ba)
1176 {
1177         struct hci_conn_hash *h = &hdev->conn_hash;
1178         struct hci_conn  *c;
1179
1180         rcu_read_lock();
1181
1182         list_for_each_entry_rcu(c, &h->list, list) {
1183                 if (c->type == type && !bacmp(&c->dst, ba)) {
1184                         rcu_read_unlock();
1185                         return c;
1186                 }
1187         }
1188
1189         rcu_read_unlock();
1190
1191         return NULL;
1192 }
1193
1194 static inline struct hci_conn *hci_conn_hash_lookup_le(struct hci_dev *hdev,
1195                                                        bdaddr_t *ba,
1196                                                        __u8 ba_type)
1197 {
1198         struct hci_conn_hash *h = &hdev->conn_hash;
1199         struct hci_conn  *c;
1200
1201         rcu_read_lock();
1202
1203         list_for_each_entry_rcu(c, &h->list, list) {
1204                 if (c->type != LE_LINK)
1205                        continue;
1206
1207                 if (ba_type == c->dst_type && !bacmp(&c->dst, ba)) {
1208                         rcu_read_unlock();
1209                         return c;
1210                 }
1211         }
1212
1213         rcu_read_unlock();
1214
1215         return NULL;
1216 }
1217
1218 static inline struct hci_conn *hci_conn_hash_lookup_cis(struct hci_dev *hdev,
1219                                                         bdaddr_t *ba,
1220                                                         __u8 ba_type,
1221                                                         __u8 cig,
1222                                                         __u8 id)
1223 {
1224         struct hci_conn_hash *h = &hdev->conn_hash;
1225         struct hci_conn  *c;
1226
1227         rcu_read_lock();
1228
1229         list_for_each_entry_rcu(c, &h->list, list) {
1230                 if (c->type != ISO_LINK || !bacmp(&c->dst, BDADDR_ANY))
1231                         continue;
1232
1233                 /* Match CIG ID if set */
1234                 if (cig != c->iso_qos.ucast.cig)
1235                         continue;
1236
1237                 /* Match CIS ID if set */
1238                 if (id != c->iso_qos.ucast.cis)
1239                         continue;
1240
1241                 /* Match destination address if set */
1242                 if (!ba || (ba_type == c->dst_type && !bacmp(&c->dst, ba))) {
1243                         rcu_read_unlock();
1244                         return c;
1245                 }
1246         }
1247
1248         rcu_read_unlock();
1249
1250         return NULL;
1251 }
1252
1253 static inline struct hci_conn *hci_conn_hash_lookup_cig(struct hci_dev *hdev,
1254                                                         __u8 handle)
1255 {
1256         struct hci_conn_hash *h = &hdev->conn_hash;
1257         struct hci_conn  *c;
1258
1259         rcu_read_lock();
1260
1261         list_for_each_entry_rcu(c, &h->list, list) {
1262                 if (c->type != ISO_LINK || !bacmp(&c->dst, BDADDR_ANY))
1263                         continue;
1264
1265                 if (handle == c->iso_qos.ucast.cig) {
1266                         rcu_read_unlock();
1267                         return c;
1268                 }
1269         }
1270
1271         rcu_read_unlock();
1272
1273         return NULL;
1274 }
1275
1276 static inline struct hci_conn *hci_conn_hash_lookup_big(struct hci_dev *hdev,
1277                                                         __u8 handle)
1278 {
1279         struct hci_conn_hash *h = &hdev->conn_hash;
1280         struct hci_conn  *c;
1281
1282         rcu_read_lock();
1283
1284         list_for_each_entry_rcu(c, &h->list, list) {
1285                 if (bacmp(&c->dst, BDADDR_ANY) || c->type != ISO_LINK)
1286                         continue;
1287
1288                 if (handle == c->iso_qos.bcast.big) {
1289                         rcu_read_unlock();
1290                         return c;
1291                 }
1292         }
1293
1294         rcu_read_unlock();
1295
1296         return NULL;
1297 }
1298
1299 static inline struct hci_conn *
1300 hci_conn_hash_lookup_pa_sync_big_handle(struct hci_dev *hdev, __u8 big)
1301 {
1302         struct hci_conn_hash *h = &hdev->conn_hash;
1303         struct hci_conn  *c;
1304
1305         rcu_read_lock();
1306
1307         list_for_each_entry_rcu(c, &h->list, list) {
1308                 if (c->type != ISO_LINK ||
1309                         !test_bit(HCI_CONN_PA_SYNC, &c->flags))
1310                         continue;
1311
1312                 if (c->iso_qos.bcast.big == big) {
1313                         rcu_read_unlock();
1314                         return c;
1315                 }
1316         }
1317         rcu_read_unlock();
1318
1319         return NULL;
1320 }
1321
1322 static inline struct hci_conn *
1323 hci_conn_hash_lookup_pa_sync_handle(struct hci_dev *hdev, __u16 sync_handle)
1324 {
1325         struct hci_conn_hash *h = &hdev->conn_hash;
1326         struct hci_conn  *c;
1327
1328         rcu_read_lock();
1329
1330         list_for_each_entry_rcu(c, &h->list, list) {
1331                 if (c->type != ISO_LINK ||
1332                         !test_bit(HCI_CONN_PA_SYNC, &c->flags))
1333                         continue;
1334
1335                 if (c->sync_handle == sync_handle) {
1336                         rcu_read_unlock();
1337                         return c;
1338                 }
1339         }
1340         rcu_read_unlock();
1341
1342         return NULL;
1343 }
1344
1345 static inline struct hci_conn *hci_conn_hash_lookup_state(struct hci_dev *hdev,
1346                                                         __u8 type, __u16 state)
1347 {
1348         struct hci_conn_hash *h = &hdev->conn_hash;
1349         struct hci_conn  *c;
1350
1351         rcu_read_lock();
1352
1353         list_for_each_entry_rcu(c, &h->list, list) {
1354                 if (c->type == type && c->state == state) {
1355                         rcu_read_unlock();
1356                         return c;
1357                 }
1358         }
1359
1360         rcu_read_unlock();
1361
1362         return NULL;
1363 }
1364
1365 typedef void (*hci_conn_func_t)(struct hci_conn *conn, void *data);
1366 static inline void hci_conn_hash_list_state(struct hci_dev *hdev,
1367                                             hci_conn_func_t func, __u8 type,
1368                                             __u16 state, void *data)
1369 {
1370         struct hci_conn_hash *h = &hdev->conn_hash;
1371         struct hci_conn  *c;
1372
1373         if (!func)
1374                 return;
1375
1376         rcu_read_lock();
1377
1378         list_for_each_entry_rcu(c, &h->list, list) {
1379                 if (c->type == type && c->state == state)
1380                         func(c, data);
1381         }
1382
1383         rcu_read_unlock();
1384 }
1385
1386 static inline void hci_conn_hash_list_flag(struct hci_dev *hdev,
1387                                             hci_conn_func_t func, __u8 type,
1388                                             __u8 flag, void *data)
1389 {
1390         struct hci_conn_hash *h = &hdev->conn_hash;
1391         struct hci_conn  *c;
1392
1393         if (!func)
1394                 return;
1395
1396         rcu_read_lock();
1397
1398         list_for_each_entry_rcu(c, &h->list, list) {
1399                 if (c->type == type && test_bit(flag, &c->flags))
1400                         func(c, data);
1401         }
1402
1403         rcu_read_unlock();
1404 }
1405
1406 static inline struct hci_conn *hci_lookup_le_connect(struct hci_dev *hdev)
1407 {
1408         struct hci_conn_hash *h = &hdev->conn_hash;
1409         struct hci_conn  *c;
1410
1411         rcu_read_lock();
1412
1413         list_for_each_entry_rcu(c, &h->list, list) {
1414                 if (c->type == LE_LINK && c->state == BT_CONNECT &&
1415                     !test_bit(HCI_CONN_SCANNING, &c->flags)) {
1416                         rcu_read_unlock();
1417                         return c;
1418                 }
1419         }
1420
1421         rcu_read_unlock();
1422
1423         return NULL;
1424 }
1425
1426 /* Returns true if an le connection is in the scanning state */
1427 static inline bool hci_is_le_conn_scanning(struct hci_dev *hdev)
1428 {
1429         struct hci_conn_hash *h = &hdev->conn_hash;
1430         struct hci_conn  *c;
1431
1432         rcu_read_lock();
1433
1434         list_for_each_entry_rcu(c, &h->list, list) {
1435                 if (c->type == LE_LINK && c->state == BT_CONNECT &&
1436                     test_bit(HCI_CONN_SCANNING, &c->flags)) {
1437                         rcu_read_unlock();
1438                         return true;
1439                 }
1440         }
1441
1442         rcu_read_unlock();
1443
1444         return false;
1445 }
1446
1447 int hci_disconnect(struct hci_conn *conn, __u8 reason);
1448 bool hci_setup_sync(struct hci_conn *conn, __u16 handle);
1449 void hci_sco_setup(struct hci_conn *conn, __u8 status);
1450 bool hci_iso_setup_path(struct hci_conn *conn);
1451 int hci_le_create_cis_pending(struct hci_dev *hdev);
1452 int hci_conn_check_create_cis(struct hci_conn *conn);
1453
1454 struct hci_conn *hci_conn_add(struct hci_dev *hdev, int type, bdaddr_t *dst,
1455                               u8 role, u16 handle);
1456 struct hci_conn *hci_conn_add_unset(struct hci_dev *hdev, int type,
1457                                     bdaddr_t *dst, u8 role);
1458 void hci_conn_del(struct hci_conn *conn);
1459 void hci_conn_hash_flush(struct hci_dev *hdev);
1460 void hci_conn_check_pending(struct hci_dev *hdev);
1461
1462 struct hci_chan *hci_chan_create(struct hci_conn *conn);
1463 void hci_chan_del(struct hci_chan *chan);
1464 void hci_chan_list_flush(struct hci_conn *conn);
1465 struct hci_chan *hci_chan_lookup_handle(struct hci_dev *hdev, __u16 handle);
1466
1467 struct hci_conn *hci_connect_le_scan(struct hci_dev *hdev, bdaddr_t *dst,
1468                                      u8 dst_type, u8 sec_level,
1469                                      u16 conn_timeout,
1470                                      enum conn_reasons conn_reason);
1471 struct hci_conn *hci_connect_le(struct hci_dev *hdev, bdaddr_t *dst,
1472                                 u8 dst_type, bool dst_resolved, u8 sec_level,
1473                                 u16 conn_timeout, u8 role);
1474 struct hci_conn *hci_connect_acl(struct hci_dev *hdev, bdaddr_t *dst,
1475                                  u8 sec_level, u8 auth_type,
1476                                  enum conn_reasons conn_reason);
1477 struct hci_conn *hci_connect_sco(struct hci_dev *hdev, int type, bdaddr_t *dst,
1478                                  __u16 setting, struct bt_codec *codec);
1479 struct hci_conn *hci_bind_cis(struct hci_dev *hdev, bdaddr_t *dst,
1480                               __u8 dst_type, struct bt_iso_qos *qos);
1481 struct hci_conn *hci_bind_bis(struct hci_dev *hdev, bdaddr_t *dst,
1482                               struct bt_iso_qos *qos,
1483                               __u8 base_len, __u8 *base);
1484 struct hci_conn *hci_connect_cis(struct hci_dev *hdev, bdaddr_t *dst,
1485                                  __u8 dst_type, struct bt_iso_qos *qos);
1486 struct hci_conn *hci_connect_bis(struct hci_dev *hdev, bdaddr_t *dst,
1487                                  __u8 dst_type, struct bt_iso_qos *qos,
1488                                  __u8 data_len, __u8 *data);
1489 int hci_pa_create_sync(struct hci_dev *hdev, bdaddr_t *dst, __u8 dst_type,
1490                        __u8 sid, struct bt_iso_qos *qos);
1491 int hci_le_big_create_sync(struct hci_dev *hdev, struct hci_conn *hcon,
1492                            struct bt_iso_qos *qos,
1493                            __u16 sync_handle, __u8 num_bis, __u8 bis[]);
1494 int hci_conn_check_link_mode(struct hci_conn *conn);
1495 int hci_conn_check_secure(struct hci_conn *conn, __u8 sec_level);
1496 int hci_conn_security(struct hci_conn *conn, __u8 sec_level, __u8 auth_type,
1497                       bool initiator);
1498 int hci_conn_switch_role(struct hci_conn *conn, __u8 role);
1499
1500 void hci_conn_enter_active_mode(struct hci_conn *conn, __u8 force_active);
1501
1502 void hci_conn_failed(struct hci_conn *conn, u8 status);
1503 u8 hci_conn_set_handle(struct hci_conn *conn, u16 handle);
1504
1505 /*
1506  * hci_conn_get() and hci_conn_put() are used to control the life-time of an
1507  * "hci_conn" object. They do not guarantee that the hci_conn object is running,
1508  * working or anything else. They just guarantee that the object is available
1509  * and can be dereferenced. So you can use its locks, local variables and any
1510  * other constant data.
1511  * Before accessing runtime data, you _must_ lock the object and then check that
1512  * it is still running. As soon as you release the locks, the connection might
1513  * get dropped, though.
1514  *
1515  * On the other hand, hci_conn_hold() and hci_conn_drop() are used to control
1516  * how long the underlying connection is held. So every channel that runs on the
1517  * hci_conn object calls this to prevent the connection from disappearing. As
1518  * long as you hold a device, you must also guarantee that you have a valid
1519  * reference to the device via hci_conn_get() (or the initial reference from
1520  * hci_conn_add()).
1521  * The hold()/drop() ref-count is known to drop below 0 sometimes, which doesn't
1522  * break because nobody cares for that. But this means, we cannot use
1523  * _get()/_drop() in it, but require the caller to have a valid ref (FIXME).
1524  */
1525
1526 static inline struct hci_conn *hci_conn_get(struct hci_conn *conn)
1527 {
1528         get_device(&conn->dev);
1529         return conn;
1530 }
1531
1532 static inline void hci_conn_put(struct hci_conn *conn)
1533 {
1534         put_device(&conn->dev);
1535 }
1536
1537 static inline struct hci_conn *hci_conn_hold(struct hci_conn *conn)
1538 {
1539         BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1540
1541         atomic_inc(&conn->refcnt);
1542         cancel_delayed_work(&conn->disc_work);
1543
1544         return conn;
1545 }
1546
1547 static inline void hci_conn_drop(struct hci_conn *conn)
1548 {
1549         BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1550
1551         if (atomic_dec_and_test(&conn->refcnt)) {
1552                 unsigned long timeo;
1553
1554                 switch (conn->type) {
1555                 case ACL_LINK:
1556                 case LE_LINK:
1557                         cancel_delayed_work(&conn->idle_work);
1558                         if (conn->state == BT_CONNECTED) {
1559                                 timeo = conn->disc_timeout;
1560                                 if (!conn->out)
1561                                         timeo *= 2;
1562                         } else {
1563                                 timeo = 0;
1564                         }
1565                         break;
1566
1567                 case AMP_LINK:
1568                         timeo = conn->disc_timeout;
1569                         break;
1570
1571                 default:
1572                         timeo = 0;
1573                         break;
1574                 }
1575
1576                 cancel_delayed_work(&conn->disc_work);
1577                 queue_delayed_work(conn->hdev->workqueue,
1578                                    &conn->disc_work, timeo);
1579         }
1580 }
1581
1582 /* ----- HCI Devices ----- */
1583 static inline void hci_dev_put(struct hci_dev *d)
1584 {
1585         BT_DBG("%s orig refcnt %d", d->name,
1586                kref_read(&d->dev.kobj.kref));
1587
1588         put_device(&d->dev);
1589 }
1590
1591 static inline struct hci_dev *hci_dev_hold(struct hci_dev *d)
1592 {
1593         BT_DBG("%s orig refcnt %d", d->name,
1594                kref_read(&d->dev.kobj.kref));
1595
1596         get_device(&d->dev);
1597         return d;
1598 }
1599
1600 #define hci_dev_lock(d)         mutex_lock(&d->lock)
1601 #define hci_dev_unlock(d)       mutex_unlock(&d->lock)
1602
1603 #define to_hci_dev(d) container_of(d, struct hci_dev, dev)
1604 #define to_hci_conn(c) container_of(c, struct hci_conn, dev)
1605
1606 static inline void *hci_get_drvdata(struct hci_dev *hdev)
1607 {
1608         return dev_get_drvdata(&hdev->dev);
1609 }
1610
1611 static inline void hci_set_drvdata(struct hci_dev *hdev, void *data)
1612 {
1613         dev_set_drvdata(&hdev->dev, data);
1614 }
1615
1616 static inline void *hci_get_priv(struct hci_dev *hdev)
1617 {
1618         return (char *)hdev + sizeof(*hdev);
1619 }
1620
1621 struct hci_dev *hci_dev_get(int index);
1622 struct hci_dev *hci_get_route(bdaddr_t *dst, bdaddr_t *src, u8 src_type);
1623
1624 struct hci_dev *hci_alloc_dev_priv(int sizeof_priv);
1625
1626 static inline struct hci_dev *hci_alloc_dev(void)
1627 {
1628         return hci_alloc_dev_priv(0);
1629 }
1630
1631 void hci_free_dev(struct hci_dev *hdev);
1632 int hci_register_dev(struct hci_dev *hdev);
1633 void hci_unregister_dev(struct hci_dev *hdev);
1634 void hci_release_dev(struct hci_dev *hdev);
1635 int hci_register_suspend_notifier(struct hci_dev *hdev);
1636 int hci_unregister_suspend_notifier(struct hci_dev *hdev);
1637 int hci_suspend_dev(struct hci_dev *hdev);
1638 int hci_resume_dev(struct hci_dev *hdev);
1639 int hci_reset_dev(struct hci_dev *hdev);
1640 int hci_recv_frame(struct hci_dev *hdev, struct sk_buff *skb);
1641 int hci_recv_diag(struct hci_dev *hdev, struct sk_buff *skb);
1642 __printf(2, 3) void hci_set_hw_info(struct hci_dev *hdev, const char *fmt, ...);
1643 __printf(2, 3) void hci_set_fw_info(struct hci_dev *hdev, const char *fmt, ...);
1644
1645 static inline void hci_set_msft_opcode(struct hci_dev *hdev, __u16 opcode)
1646 {
1647 #if IS_ENABLED(CONFIG_BT_MSFTEXT)
1648         hdev->msft_opcode = opcode;
1649 #endif
1650 }
1651
1652 static inline void hci_set_aosp_capable(struct hci_dev *hdev)
1653 {
1654 #if IS_ENABLED(CONFIG_BT_AOSPEXT)
1655         hdev->aosp_capable = true;
1656 #endif
1657 }
1658
1659 static inline void hci_devcd_setup(struct hci_dev *hdev)
1660 {
1661 #ifdef CONFIG_DEV_COREDUMP
1662         INIT_WORK(&hdev->dump.dump_rx, hci_devcd_rx);
1663         INIT_DELAYED_WORK(&hdev->dump.dump_timeout, hci_devcd_timeout);
1664         skb_queue_head_init(&hdev->dump.dump_q);
1665 #endif
1666 }
1667
1668 int hci_dev_open(__u16 dev);
1669 int hci_dev_close(__u16 dev);
1670 int hci_dev_do_close(struct hci_dev *hdev);
1671 int hci_dev_reset(__u16 dev);
1672 int hci_dev_reset_stat(__u16 dev);
1673 int hci_dev_cmd(unsigned int cmd, void __user *arg);
1674 int hci_get_dev_list(void __user *arg);
1675 int hci_get_dev_info(void __user *arg);
1676 int hci_get_conn_list(void __user *arg);
1677 int hci_get_conn_info(struct hci_dev *hdev, void __user *arg);
1678 int hci_get_auth_info(struct hci_dev *hdev, void __user *arg);
1679 int hci_inquiry(void __user *arg);
1680
1681 struct bdaddr_list *hci_bdaddr_list_lookup(struct list_head *list,
1682                                            bdaddr_t *bdaddr, u8 type);
1683 struct bdaddr_list_with_irk *hci_bdaddr_list_lookup_with_irk(
1684                                     struct list_head *list, bdaddr_t *bdaddr,
1685                                     u8 type);
1686 struct bdaddr_list_with_flags *
1687 hci_bdaddr_list_lookup_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1688                                   u8 type);
1689 int hci_bdaddr_list_add(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1690 int hci_bdaddr_list_add_with_irk(struct list_head *list, bdaddr_t *bdaddr,
1691                                  u8 type, u8 *peer_irk, u8 *local_irk);
1692 int hci_bdaddr_list_add_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1693                                    u8 type, u32 flags);
1694 int hci_bdaddr_list_del(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1695 int hci_bdaddr_list_del_with_irk(struct list_head *list, bdaddr_t *bdaddr,
1696                                  u8 type);
1697 int hci_bdaddr_list_del_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1698                                    u8 type);
1699 void hci_bdaddr_list_clear(struct list_head *list);
1700
1701 struct hci_conn_params *hci_conn_params_lookup(struct hci_dev *hdev,
1702                                                bdaddr_t *addr, u8 addr_type);
1703 struct hci_conn_params *hci_conn_params_add(struct hci_dev *hdev,
1704                                             bdaddr_t *addr, u8 addr_type);
1705 void hci_conn_params_del(struct hci_dev *hdev, bdaddr_t *addr, u8 addr_type);
1706 void hci_conn_params_clear_disabled(struct hci_dev *hdev);
1707 void hci_conn_params_free(struct hci_conn_params *param);
1708
1709 void hci_pend_le_list_del_init(struct hci_conn_params *param);
1710 void hci_pend_le_list_add(struct hci_conn_params *param,
1711                           struct list_head *list);
1712 struct hci_conn_params *hci_pend_le_action_lookup(struct list_head *list,
1713                                                   bdaddr_t *addr,
1714                                                   u8 addr_type);
1715
1716 void hci_uuids_clear(struct hci_dev *hdev);
1717
1718 void hci_link_keys_clear(struct hci_dev *hdev);
1719 struct link_key *hci_find_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1720 struct link_key *hci_add_link_key(struct hci_dev *hdev, struct hci_conn *conn,
1721                                   bdaddr_t *bdaddr, u8 *val, u8 type,
1722                                   u8 pin_len, bool *persistent);
1723 struct smp_ltk *hci_add_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1724                             u8 addr_type, u8 type, u8 authenticated,
1725                             u8 tk[16], u8 enc_size, __le16 ediv, __le64 rand);
1726 struct smp_ltk *hci_find_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1727                              u8 addr_type, u8 role);
1728 int hci_remove_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 bdaddr_type);
1729 void hci_smp_ltks_clear(struct hci_dev *hdev);
1730 int hci_remove_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1731
1732 struct smp_irk *hci_find_irk_by_rpa(struct hci_dev *hdev, bdaddr_t *rpa);
1733 struct smp_irk *hci_find_irk_by_addr(struct hci_dev *hdev, bdaddr_t *bdaddr,
1734                                      u8 addr_type);
1735 struct smp_irk *hci_add_irk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1736                             u8 addr_type, u8 val[16], bdaddr_t *rpa);
1737 void hci_remove_irk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 addr_type);
1738 bool hci_is_blocked_key(struct hci_dev *hdev, u8 type, u8 val[16]);
1739 void hci_blocked_keys_clear(struct hci_dev *hdev);
1740 void hci_smp_irks_clear(struct hci_dev *hdev);
1741
1742 bool hci_bdaddr_is_paired(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type);
1743
1744 void hci_remote_oob_data_clear(struct hci_dev *hdev);
1745 struct oob_data *hci_find_remote_oob_data(struct hci_dev *hdev,
1746                                           bdaddr_t *bdaddr, u8 bdaddr_type);
1747 int hci_add_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1748                             u8 bdaddr_type, u8 *hash192, u8 *rand192,
1749                             u8 *hash256, u8 *rand256);
1750 int hci_remove_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1751                                u8 bdaddr_type);
1752
1753 void hci_adv_instances_clear(struct hci_dev *hdev);
1754 struct adv_info *hci_find_adv_instance(struct hci_dev *hdev, u8 instance);
1755 struct adv_info *hci_get_next_instance(struct hci_dev *hdev, u8 instance);
1756 struct adv_info *hci_add_adv_instance(struct hci_dev *hdev, u8 instance,
1757                                       u32 flags, u16 adv_data_len, u8 *adv_data,
1758                                       u16 scan_rsp_len, u8 *scan_rsp_data,
1759                                       u16 timeout, u16 duration, s8 tx_power,
1760                                       u32 min_interval, u32 max_interval,
1761                                       u8 mesh_handle);
1762 struct adv_info *hci_add_per_instance(struct hci_dev *hdev, u8 instance,
1763                                       u32 flags, u8 data_len, u8 *data,
1764                                       u32 min_interval, u32 max_interval);
1765 int hci_set_adv_instance_data(struct hci_dev *hdev, u8 instance,
1766                          u16 adv_data_len, u8 *adv_data,
1767                          u16 scan_rsp_len, u8 *scan_rsp_data);
1768 int hci_remove_adv_instance(struct hci_dev *hdev, u8 instance);
1769 void hci_adv_instances_set_rpa_expired(struct hci_dev *hdev, bool rpa_expired);
1770 u32 hci_adv_instance_flags(struct hci_dev *hdev, u8 instance);
1771 bool hci_adv_instance_is_scannable(struct hci_dev *hdev, u8 instance);
1772
1773 void hci_adv_monitors_clear(struct hci_dev *hdev);
1774 void hci_free_adv_monitor(struct hci_dev *hdev, struct adv_monitor *monitor);
1775 int hci_add_adv_monitor(struct hci_dev *hdev, struct adv_monitor *monitor);
1776 int hci_remove_single_adv_monitor(struct hci_dev *hdev, u16 handle);
1777 int hci_remove_all_adv_monitor(struct hci_dev *hdev);
1778 bool hci_is_adv_monitoring(struct hci_dev *hdev);
1779 int hci_get_adv_monitor_offload_ext(struct hci_dev *hdev);
1780
1781 void hci_event_packet(struct hci_dev *hdev, struct sk_buff *skb);
1782
1783 void hci_init_sysfs(struct hci_dev *hdev);
1784 void hci_conn_init_sysfs(struct hci_conn *conn);
1785 void hci_conn_add_sysfs(struct hci_conn *conn);
1786 void hci_conn_del_sysfs(struct hci_conn *conn);
1787
1788 #define SET_HCIDEV_DEV(hdev, pdev) ((hdev)->dev.parent = (pdev))
1789 #define GET_HCIDEV_DEV(hdev) ((hdev)->dev.parent)
1790
1791 /* ----- LMP capabilities ----- */
1792 #define lmp_encrypt_capable(dev)   ((dev)->features[0][0] & LMP_ENCRYPT)
1793 #define lmp_rswitch_capable(dev)   ((dev)->features[0][0] & LMP_RSWITCH)
1794 #define lmp_hold_capable(dev)      ((dev)->features[0][0] & LMP_HOLD)
1795 #define lmp_sniff_capable(dev)     ((dev)->features[0][0] & LMP_SNIFF)
1796 #define lmp_park_capable(dev)      ((dev)->features[0][1] & LMP_PARK)
1797 #define lmp_inq_rssi_capable(dev)  ((dev)->features[0][3] & LMP_RSSI_INQ)
1798 #define lmp_esco_capable(dev)      ((dev)->features[0][3] & LMP_ESCO)
1799 #define lmp_bredr_capable(dev)     (!((dev)->features[0][4] & LMP_NO_BREDR))
1800 #define lmp_le_capable(dev)        ((dev)->features[0][4] & LMP_LE)
1801 #define lmp_sniffsubr_capable(dev) ((dev)->features[0][5] & LMP_SNIFF_SUBR)
1802 #define lmp_pause_enc_capable(dev) ((dev)->features[0][5] & LMP_PAUSE_ENC)
1803 #define lmp_esco_2m_capable(dev)   ((dev)->features[0][5] & LMP_EDR_ESCO_2M)
1804 #define lmp_ext_inq_capable(dev)   ((dev)->features[0][6] & LMP_EXT_INQ)
1805 #define lmp_le_br_capable(dev)     (!!((dev)->features[0][6] & LMP_SIMUL_LE_BR))
1806 #define lmp_ssp_capable(dev)       ((dev)->features[0][6] & LMP_SIMPLE_PAIR)
1807 #define lmp_no_flush_capable(dev)  ((dev)->features[0][6] & LMP_NO_FLUSH)
1808 #define lmp_lsto_capable(dev)      ((dev)->features[0][7] & LMP_LSTO)
1809 #define lmp_inq_tx_pwr_capable(dev) ((dev)->features[0][7] & LMP_INQ_TX_PWR)
1810 #define lmp_ext_feat_capable(dev)  ((dev)->features[0][7] & LMP_EXTFEATURES)
1811 #define lmp_transp_capable(dev)    ((dev)->features[0][2] & LMP_TRANSPARENT)
1812 #define lmp_edr_2m_capable(dev)    ((dev)->features[0][3] & LMP_EDR_2M)
1813 #define lmp_edr_3m_capable(dev)    ((dev)->features[0][3] & LMP_EDR_3M)
1814 #define lmp_edr_3slot_capable(dev) ((dev)->features[0][4] & LMP_EDR_3SLOT)
1815 #define lmp_edr_5slot_capable(dev) ((dev)->features[0][5] & LMP_EDR_5SLOT)
1816
1817 /* ----- Extended LMP capabilities ----- */
1818 #define lmp_cpb_central_capable(dev) ((dev)->features[2][0] & LMP_CPB_CENTRAL)
1819 #define lmp_cpb_peripheral_capable(dev) ((dev)->features[2][0] & LMP_CPB_PERIPHERAL)
1820 #define lmp_sync_train_capable(dev) ((dev)->features[2][0] & LMP_SYNC_TRAIN)
1821 #define lmp_sync_scan_capable(dev)  ((dev)->features[2][0] & LMP_SYNC_SCAN)
1822 #define lmp_sc_capable(dev)         ((dev)->features[2][1] & LMP_SC)
1823 #define lmp_ping_capable(dev)       ((dev)->features[2][1] & LMP_PING)
1824
1825 /* ----- Host capabilities ----- */
1826 #define lmp_host_ssp_capable(dev)  ((dev)->features[1][0] & LMP_HOST_SSP)
1827 #define lmp_host_sc_capable(dev)   ((dev)->features[1][0] & LMP_HOST_SC)
1828 #define lmp_host_le_capable(dev)   (!!((dev)->features[1][0] & LMP_HOST_LE))
1829 #define lmp_host_le_br_capable(dev) (!!((dev)->features[1][0] & LMP_HOST_LE_BREDR))
1830
1831 #define hdev_is_powered(dev)   (test_bit(HCI_UP, &(dev)->flags) && \
1832                                 !hci_dev_test_flag(dev, HCI_AUTO_OFF))
1833 #define bredr_sc_enabled(dev)  (lmp_sc_capable(dev) && \
1834                                 hci_dev_test_flag(dev, HCI_SC_ENABLED))
1835 #define rpa_valid(dev)         (bacmp(&dev->rpa, BDADDR_ANY) && \
1836                                 !hci_dev_test_flag(dev, HCI_RPA_EXPIRED))
1837 #define adv_rpa_valid(adv)     (bacmp(&adv->random_addr, BDADDR_ANY) && \
1838                                 !adv->rpa_expired)
1839
1840 #define scan_1m(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_1M) || \
1841                       ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_1M))
1842
1843 #define le_2m_capable(dev) (((dev)->le_features[1] & HCI_LE_PHY_2M))
1844
1845 #define scan_2m(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_2M) || \
1846                       ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_2M))
1847
1848 #define le_coded_capable(dev) (((dev)->le_features[1] & HCI_LE_PHY_CODED) && \
1849                                !test_bit(HCI_QUIRK_BROKEN_LE_CODED, \
1850                                          &(dev)->quirks))
1851
1852 #define scan_coded(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_CODED) || \
1853                          ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_CODED))
1854
1855 #define ll_privacy_capable(dev) ((dev)->le_features[0] & HCI_LE_LL_PRIVACY)
1856
1857 /* Use LL Privacy based address resolution if supported */
1858 #define use_ll_privacy(dev) (ll_privacy_capable(dev) && \
1859                              hci_dev_test_flag(dev, HCI_ENABLE_LL_PRIVACY))
1860
1861 #define privacy_mode_capable(dev) (use_ll_privacy(dev) && \
1862                                    (hdev->commands[39] & 0x04))
1863
1864 /* Use enhanced synchronous connection if command is supported and its quirk
1865  * has not been set.
1866  */
1867 #define enhanced_sync_conn_capable(dev) \
1868         (((dev)->commands[29] & 0x08) && \
1869          !test_bit(HCI_QUIRK_BROKEN_ENHANCED_SETUP_SYNC_CONN, &(dev)->quirks))
1870
1871 /* Use ext scanning if set ext scan param and ext scan enable is supported */
1872 #define use_ext_scan(dev) (((dev)->commands[37] & 0x20) && \
1873                            ((dev)->commands[37] & 0x40) && \
1874                            !test_bit(HCI_QUIRK_BROKEN_EXT_SCAN, &(dev)->quirks))
1875
1876 /* Use ext create connection if command is supported */
1877 #define use_ext_conn(dev) ((dev)->commands[37] & 0x80)
1878
1879 /* Extended advertising support */
1880 #define ext_adv_capable(dev) (((dev)->le_features[1] & HCI_LE_EXT_ADV))
1881
1882 /* Maximum advertising length */
1883 #define max_adv_len(dev) \
1884         (ext_adv_capable(dev) ? HCI_MAX_EXT_AD_LENGTH : HCI_MAX_AD_LENGTH)
1885
1886 /* BLUETOOTH CORE SPECIFICATION Version 5.3 | Vol 4, Part E page 1789:
1887  *
1888  * C24: Mandatory if the LE Controller supports Connection State and either
1889  * LE Feature (LL Privacy) or LE Feature (Extended Advertising) is supported
1890  */
1891 #define use_enhanced_conn_complete(dev) (ll_privacy_capable(dev) || \
1892                                          ext_adv_capable(dev))
1893
1894 /* Periodic advertising support */
1895 #define per_adv_capable(dev) (((dev)->le_features[1] & HCI_LE_PERIODIC_ADV))
1896
1897 /* CIS Master/Slave and BIS support */
1898 #define iso_capable(dev) (cis_capable(dev) || bis_capable(dev))
1899 #define cis_capable(dev) \
1900         (cis_central_capable(dev) || cis_peripheral_capable(dev))
1901 #define cis_central_capable(dev) \
1902         ((dev)->le_features[3] & HCI_LE_CIS_CENTRAL)
1903 #define cis_peripheral_capable(dev) \
1904         ((dev)->le_features[3] & HCI_LE_CIS_PERIPHERAL)
1905 #define bis_capable(dev) ((dev)->le_features[3] & HCI_LE_ISO_BROADCASTER)
1906 #define sync_recv_capable(dev) ((dev)->le_features[3] & HCI_LE_ISO_SYNC_RECEIVER)
1907
1908 #define mws_transport_config_capable(dev) (((dev)->commands[30] & 0x08) && \
1909         (!test_bit(HCI_QUIRK_BROKEN_MWS_TRANSPORT_CONFIG, &(dev)->quirks)))
1910
1911 /* ----- HCI protocols ----- */
1912 #define HCI_PROTO_DEFER             0x01
1913
1914 static inline int hci_proto_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
1915                                         __u8 type, __u8 *flags)
1916 {
1917         switch (type) {
1918         case ACL_LINK:
1919                 return l2cap_connect_ind(hdev, bdaddr);
1920
1921         case SCO_LINK:
1922         case ESCO_LINK:
1923                 return sco_connect_ind(hdev, bdaddr, flags);
1924
1925         case ISO_LINK:
1926                 return iso_connect_ind(hdev, bdaddr, flags);
1927
1928         default:
1929                 BT_ERR("unknown link type %d", type);
1930                 return -EINVAL;
1931         }
1932 }
1933
1934 static inline int hci_proto_disconn_ind(struct hci_conn *conn)
1935 {
1936         if (conn->type != ACL_LINK && conn->type != LE_LINK)
1937                 return HCI_ERROR_REMOTE_USER_TERM;
1938
1939         return l2cap_disconn_ind(conn);
1940 }
1941
1942 /* ----- HCI callbacks ----- */
1943 struct hci_cb {
1944         struct list_head list;
1945
1946         char *name;
1947
1948         void (*connect_cfm)     (struct hci_conn *conn, __u8 status);
1949         void (*disconn_cfm)     (struct hci_conn *conn, __u8 status);
1950         void (*security_cfm)    (struct hci_conn *conn, __u8 status,
1951                                                                 __u8 encrypt);
1952         void (*key_change_cfm)  (struct hci_conn *conn, __u8 status);
1953         void (*role_switch_cfm) (struct hci_conn *conn, __u8 status, __u8 role);
1954 };
1955
1956 static inline void hci_connect_cfm(struct hci_conn *conn, __u8 status)
1957 {
1958         struct hci_cb *cb;
1959
1960         mutex_lock(&hci_cb_list_lock);
1961         list_for_each_entry(cb, &hci_cb_list, list) {
1962                 if (cb->connect_cfm)
1963                         cb->connect_cfm(conn, status);
1964         }
1965         mutex_unlock(&hci_cb_list_lock);
1966
1967         if (conn->connect_cfm_cb)
1968                 conn->connect_cfm_cb(conn, status);
1969 }
1970
1971 static inline void hci_disconn_cfm(struct hci_conn *conn, __u8 reason)
1972 {
1973         struct hci_cb *cb;
1974
1975         mutex_lock(&hci_cb_list_lock);
1976         list_for_each_entry(cb, &hci_cb_list, list) {
1977                 if (cb->disconn_cfm)
1978                         cb->disconn_cfm(conn, reason);
1979         }
1980         mutex_unlock(&hci_cb_list_lock);
1981
1982         if (conn->disconn_cfm_cb)
1983                 conn->disconn_cfm_cb(conn, reason);
1984 }
1985
1986 static inline void hci_auth_cfm(struct hci_conn *conn, __u8 status)
1987 {
1988         struct hci_cb *cb;
1989         __u8 encrypt;
1990
1991         if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->flags))
1992                 return;
1993
1994         encrypt = test_bit(HCI_CONN_ENCRYPT, &conn->flags) ? 0x01 : 0x00;
1995
1996         mutex_lock(&hci_cb_list_lock);
1997         list_for_each_entry(cb, &hci_cb_list, list) {
1998                 if (cb->security_cfm)
1999                         cb->security_cfm(conn, status, encrypt);
2000         }
2001         mutex_unlock(&hci_cb_list_lock);
2002
2003         if (conn->security_cfm_cb)
2004                 conn->security_cfm_cb(conn, status);
2005 }
2006
2007 static inline void hci_encrypt_cfm(struct hci_conn *conn, __u8 status)
2008 {
2009         struct hci_cb *cb;
2010         __u8 encrypt;
2011
2012         if (conn->state == BT_CONFIG) {
2013                 if (!status)
2014                         conn->state = BT_CONNECTED;
2015
2016                 hci_connect_cfm(conn, status);
2017                 hci_conn_drop(conn);
2018                 return;
2019         }
2020
2021         if (!test_bit(HCI_CONN_ENCRYPT, &conn->flags))
2022                 encrypt = 0x00;
2023         else if (test_bit(HCI_CONN_AES_CCM, &conn->flags))
2024                 encrypt = 0x02;
2025         else
2026                 encrypt = 0x01;
2027
2028         if (!status) {
2029                 if (conn->sec_level == BT_SECURITY_SDP)
2030                         conn->sec_level = BT_SECURITY_LOW;
2031
2032                 if (conn->pending_sec_level > conn->sec_level)
2033                         conn->sec_level = conn->pending_sec_level;
2034         }
2035
2036         mutex_lock(&hci_cb_list_lock);
2037         list_for_each_entry(cb, &hci_cb_list, list) {
2038                 if (cb->security_cfm)
2039                         cb->security_cfm(conn, status, encrypt);
2040         }
2041         mutex_unlock(&hci_cb_list_lock);
2042
2043         if (conn->security_cfm_cb)
2044                 conn->security_cfm_cb(conn, status);
2045 }
2046
2047 static inline void hci_key_change_cfm(struct hci_conn *conn, __u8 status)
2048 {
2049         struct hci_cb *cb;
2050
2051         mutex_lock(&hci_cb_list_lock);
2052         list_for_each_entry(cb, &hci_cb_list, list) {
2053                 if (cb->key_change_cfm)
2054                         cb->key_change_cfm(conn, status);
2055         }
2056         mutex_unlock(&hci_cb_list_lock);
2057 }
2058
2059 static inline void hci_role_switch_cfm(struct hci_conn *conn, __u8 status,
2060                                                                 __u8 role)
2061 {
2062         struct hci_cb *cb;
2063
2064         mutex_lock(&hci_cb_list_lock);
2065         list_for_each_entry(cb, &hci_cb_list, list) {
2066                 if (cb->role_switch_cfm)
2067                         cb->role_switch_cfm(conn, status, role);
2068         }
2069         mutex_unlock(&hci_cb_list_lock);
2070 }
2071
2072 static inline bool hci_bdaddr_is_rpa(bdaddr_t *bdaddr, u8 addr_type)
2073 {
2074         if (addr_type != ADDR_LE_DEV_RANDOM)
2075                 return false;
2076
2077         if ((bdaddr->b[5] & 0xc0) == 0x40)
2078                return true;
2079
2080         return false;
2081 }
2082
2083 static inline bool hci_is_identity_address(bdaddr_t *addr, u8 addr_type)
2084 {
2085         if (addr_type == ADDR_LE_DEV_PUBLIC)
2086                 return true;
2087
2088         /* Check for Random Static address type */
2089         if ((addr->b[5] & 0xc0) == 0xc0)
2090                 return true;
2091
2092         return false;
2093 }
2094
2095 static inline struct smp_irk *hci_get_irk(struct hci_dev *hdev,
2096                                           bdaddr_t *bdaddr, u8 addr_type)
2097 {
2098         if (!hci_bdaddr_is_rpa(bdaddr, addr_type))
2099                 return NULL;
2100
2101         return hci_find_irk_by_rpa(hdev, bdaddr);
2102 }
2103
2104 static inline int hci_check_conn_params(u16 min, u16 max, u16 latency,
2105                                         u16 to_multiplier)
2106 {
2107         u16 max_latency;
2108
2109         if (min > max || min < 6 || max > 3200)
2110                 return -EINVAL;
2111
2112         if (to_multiplier < 10 || to_multiplier > 3200)
2113                 return -EINVAL;
2114
2115         if (max >= to_multiplier * 8)
2116                 return -EINVAL;
2117
2118         max_latency = (to_multiplier * 4 / max) - 1;
2119         if (latency > 499 || latency > max_latency)
2120                 return -EINVAL;
2121
2122         return 0;
2123 }
2124
2125 int hci_register_cb(struct hci_cb *hcb);
2126 int hci_unregister_cb(struct hci_cb *hcb);
2127
2128 int __hci_cmd_send(struct hci_dev *hdev, u16 opcode, u32 plen,
2129                    const void *param);
2130
2131 int hci_send_cmd(struct hci_dev *hdev, __u16 opcode, __u32 plen,
2132                  const void *param);
2133 void hci_send_acl(struct hci_chan *chan, struct sk_buff *skb, __u16 flags);
2134 void hci_send_sco(struct hci_conn *conn, struct sk_buff *skb);
2135 void hci_send_iso(struct hci_conn *conn, struct sk_buff *skb);
2136
2137 void *hci_sent_cmd_data(struct hci_dev *hdev, __u16 opcode);
2138 void *hci_recv_event_data(struct hci_dev *hdev, __u8 event);
2139
2140 u32 hci_conn_get_phy(struct hci_conn *conn);
2141
2142 /* ----- HCI Sockets ----- */
2143 void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb);
2144 void hci_send_to_channel(unsigned short channel, struct sk_buff *skb,
2145                          int flag, struct sock *skip_sk);
2146 void hci_send_to_monitor(struct hci_dev *hdev, struct sk_buff *skb);
2147 void hci_send_monitor_ctrl_event(struct hci_dev *hdev, u16 event,
2148                                  void *data, u16 data_len, ktime_t tstamp,
2149                                  int flag, struct sock *skip_sk);
2150
2151 void hci_sock_dev_event(struct hci_dev *hdev, int event);
2152
2153 #define HCI_MGMT_VAR_LEN        BIT(0)
2154 #define HCI_MGMT_NO_HDEV        BIT(1)
2155 #define HCI_MGMT_UNTRUSTED      BIT(2)
2156 #define HCI_MGMT_UNCONFIGURED   BIT(3)
2157 #define HCI_MGMT_HDEV_OPTIONAL  BIT(4)
2158
2159 struct hci_mgmt_handler {
2160         int (*func) (struct sock *sk, struct hci_dev *hdev, void *data,
2161                      u16 data_len);
2162         size_t data_len;
2163         unsigned long flags;
2164 };
2165
2166 struct hci_mgmt_chan {
2167         struct list_head list;
2168         unsigned short channel;
2169         size_t handler_count;
2170         const struct hci_mgmt_handler *handlers;
2171         void (*hdev_init) (struct sock *sk, struct hci_dev *hdev);
2172 };
2173
2174 int hci_mgmt_chan_register(struct hci_mgmt_chan *c);
2175 void hci_mgmt_chan_unregister(struct hci_mgmt_chan *c);
2176
2177 /* Management interface */
2178 #define DISCOV_TYPE_BREDR               (BIT(BDADDR_BREDR))
2179 #define DISCOV_TYPE_LE                  (BIT(BDADDR_LE_PUBLIC) | \
2180                                          BIT(BDADDR_LE_RANDOM))
2181 #define DISCOV_TYPE_INTERLEAVED         (BIT(BDADDR_BREDR) | \
2182                                          BIT(BDADDR_LE_PUBLIC) | \
2183                                          BIT(BDADDR_LE_RANDOM))
2184
2185 /* These LE scan and inquiry parameters were chosen according to LE General
2186  * Discovery Procedure specification.
2187  */
2188 #define DISCOV_LE_SCAN_WIN              0x12
2189 #define DISCOV_LE_SCAN_INT              0x12
2190 #define DISCOV_LE_TIMEOUT               10240   /* msec */
2191 #define DISCOV_INTERLEAVED_TIMEOUT      5120    /* msec */
2192 #define DISCOV_INTERLEAVED_INQUIRY_LEN  0x04
2193 #define DISCOV_BREDR_INQUIRY_LEN        0x08
2194 #define DISCOV_LE_RESTART_DELAY         msecs_to_jiffies(200)   /* msec */
2195 #define DISCOV_LE_FAST_ADV_INT_MIN      0x00A0  /* 100 msec */
2196 #define DISCOV_LE_FAST_ADV_INT_MAX      0x00F0  /* 150 msec */
2197 #define DISCOV_LE_PER_ADV_INT_MIN       0x00A0  /* 200 msec */
2198 #define DISCOV_LE_PER_ADV_INT_MAX       0x00A0  /* 200 msec */
2199 #define DISCOV_LE_ADV_MESH_MIN          0x00A0  /* 100 msec */
2200 #define DISCOV_LE_ADV_MESH_MAX          0x00A0  /* 100 msec */
2201 #define INTERVAL_TO_MS(x)               (((x) * 10) / 0x10)
2202
2203 #define NAME_RESOLVE_DURATION           msecs_to_jiffies(10240) /* 10.24 sec */
2204
2205 void mgmt_fill_version_info(void *ver);
2206 int mgmt_new_settings(struct hci_dev *hdev);
2207 void mgmt_index_added(struct hci_dev *hdev);
2208 void mgmt_index_removed(struct hci_dev *hdev);
2209 void mgmt_set_powered_failed(struct hci_dev *hdev, int err);
2210 void mgmt_power_on(struct hci_dev *hdev, int err);
2211 void __mgmt_power_off(struct hci_dev *hdev);
2212 void mgmt_new_link_key(struct hci_dev *hdev, struct link_key *key,
2213                        bool persistent);
2214 void mgmt_device_connected(struct hci_dev *hdev, struct hci_conn *conn,
2215                            u8 *name, u8 name_len);
2216 void mgmt_device_disconnected(struct hci_dev *hdev, bdaddr_t *bdaddr,
2217                               u8 link_type, u8 addr_type, u8 reason,
2218                               bool mgmt_connected);
2219 void mgmt_disconnect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr,
2220                             u8 link_type, u8 addr_type, u8 status);
2221 void mgmt_connect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2222                          u8 addr_type, u8 status);
2223 void mgmt_pin_code_request(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 secure);
2224 void mgmt_pin_code_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2225                                   u8 status);
2226 void mgmt_pin_code_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2227                                       u8 status);
2228 int mgmt_user_confirm_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
2229                               u8 link_type, u8 addr_type, u32 value,
2230                               u8 confirm_hint);
2231 int mgmt_user_confirm_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2232                                      u8 link_type, u8 addr_type, u8 status);
2233 int mgmt_user_confirm_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2234                                          u8 link_type, u8 addr_type, u8 status);
2235 int mgmt_user_passkey_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
2236                               u8 link_type, u8 addr_type);
2237 int mgmt_user_passkey_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2238                                      u8 link_type, u8 addr_type, u8 status);
2239 int mgmt_user_passkey_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2240                                          u8 link_type, u8 addr_type, u8 status);
2241 int mgmt_user_passkey_notify(struct hci_dev *hdev, bdaddr_t *bdaddr,
2242                              u8 link_type, u8 addr_type, u32 passkey,
2243                              u8 entered);
2244 void mgmt_auth_failed(struct hci_conn *conn, u8 status);
2245 void mgmt_auth_enable_complete(struct hci_dev *hdev, u8 status);
2246 void mgmt_set_class_of_dev_complete(struct hci_dev *hdev, u8 *dev_class,
2247                                     u8 status);
2248 void mgmt_set_local_name_complete(struct hci_dev *hdev, u8 *name, u8 status);
2249 void mgmt_start_discovery_complete(struct hci_dev *hdev, u8 status);
2250 void mgmt_stop_discovery_complete(struct hci_dev *hdev, u8 status);
2251 void mgmt_device_found(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2252                        u8 addr_type, u8 *dev_class, s8 rssi, u32 flags,
2253                        u8 *eir, u16 eir_len, u8 *scan_rsp, u8 scan_rsp_len,
2254                        u64 instant);
2255 void mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2256                       u8 addr_type, s8 rssi, u8 *name, u8 name_len);
2257 void mgmt_discovering(struct hci_dev *hdev, u8 discovering);
2258 void mgmt_suspending(struct hci_dev *hdev, u8 state);
2259 void mgmt_resuming(struct hci_dev *hdev, u8 reason, bdaddr_t *bdaddr,
2260                    u8 addr_type);
2261 bool mgmt_powering_down(struct hci_dev *hdev);
2262 void mgmt_new_ltk(struct hci_dev *hdev, struct smp_ltk *key, bool persistent);
2263 void mgmt_new_irk(struct hci_dev *hdev, struct smp_irk *irk, bool persistent);
2264 void mgmt_new_csrk(struct hci_dev *hdev, struct smp_csrk *csrk,
2265                    bool persistent);
2266 void mgmt_new_conn_param(struct hci_dev *hdev, bdaddr_t *bdaddr,
2267                          u8 bdaddr_type, u8 store_hint, u16 min_interval,
2268                          u16 max_interval, u16 latency, u16 timeout);
2269 void mgmt_smp_complete(struct hci_conn *conn, bool complete);
2270 bool mgmt_get_connectable(struct hci_dev *hdev);
2271 u8 mgmt_get_adv_discov_flags(struct hci_dev *hdev);
2272 void mgmt_advertising_added(struct sock *sk, struct hci_dev *hdev,
2273                             u8 instance);
2274 void mgmt_advertising_removed(struct sock *sk, struct hci_dev *hdev,
2275                               u8 instance);
2276 void mgmt_adv_monitor_removed(struct hci_dev *hdev, u16 handle);
2277 int mgmt_phy_configuration_changed(struct hci_dev *hdev, struct sock *skip);
2278 void mgmt_adv_monitor_device_lost(struct hci_dev *hdev, u16 handle,
2279                                   bdaddr_t *bdaddr, u8 addr_type);
2280
2281 int hci_abort_conn(struct hci_conn *conn, u8 reason);
2282 u8 hci_le_conn_update(struct hci_conn *conn, u16 min, u16 max, u16 latency,
2283                       u16 to_multiplier);
2284 void hci_le_start_enc(struct hci_conn *conn, __le16 ediv, __le64 rand,
2285                       __u8 ltk[16], __u8 key_size);
2286
2287 void hci_copy_identity_address(struct hci_dev *hdev, bdaddr_t *bdaddr,
2288                                u8 *bdaddr_type);
2289
2290 #define SCO_AIRMODE_MASK       0x0003
2291 #define SCO_AIRMODE_CVSD       0x0000
2292 #define SCO_AIRMODE_TRANSP     0x0003
2293
2294 #define LOCAL_CODEC_ACL_MASK    BIT(0)
2295 #define LOCAL_CODEC_SCO_MASK    BIT(1)
2296
2297 #define TRANSPORT_TYPE_MAX      0x04
2298
2299 #endif /* __HCI_CORE_H */