mirror of
https://github.com/torvalds/linux.git
synced 2024-11-14 08:02:07 +00:00
515db09338
Conflicts: drivers/net/wireless/iwlegacy/iwl-debugfs.c drivers/net/wireless/iwlegacy/iwl-rx.c drivers/net/wireless/iwlegacy/iwl-scan.c drivers/net/wireless/iwlegacy/iwl-tx.c include/net/bluetooth/bluetooth.h
2436 lines
52 KiB
C
2436 lines
52 KiB
C
/*
|
|
BlueZ - Bluetooth protocol stack for Linux
|
|
Copyright (C) 2010 Nokia Corporation
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License version 2 as
|
|
published by the Free Software Foundation;
|
|
|
|
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
|
|
OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
|
|
IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
|
|
CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
|
|
WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
|
|
ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
|
|
OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
|
|
|
|
ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
|
|
COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
|
|
SOFTWARE IS DISCLAIMED.
|
|
*/
|
|
|
|
/* Bluetooth HCI Management interface */
|
|
|
|
#include <linux/uaccess.h>
|
|
#include <linux/module.h>
|
|
#include <asm/unaligned.h>
|
|
|
|
#include <net/bluetooth/bluetooth.h>
|
|
#include <net/bluetooth/hci_core.h>
|
|
#include <net/bluetooth/mgmt.h>
|
|
|
|
#define MGMT_VERSION 0
|
|
#define MGMT_REVISION 1
|
|
|
|
#define INQUIRY_LEN_BREDR 0x08 /* TGAP(100) */
|
|
|
|
struct pending_cmd {
|
|
struct list_head list;
|
|
u16 opcode;
|
|
int index;
|
|
void *param;
|
|
struct sock *sk;
|
|
void *user_data;
|
|
};
|
|
|
|
static int cmd_status(struct sock *sk, u16 index, u16 cmd, u8 status)
|
|
{
|
|
struct sk_buff *skb;
|
|
struct mgmt_hdr *hdr;
|
|
struct mgmt_ev_cmd_status *ev;
|
|
int err;
|
|
|
|
BT_DBG("sock %p, index %u, cmd %u, status %u", sk, index, cmd, status);
|
|
|
|
skb = alloc_skb(sizeof(*hdr) + sizeof(*ev), GFP_ATOMIC);
|
|
if (!skb)
|
|
return -ENOMEM;
|
|
|
|
hdr = (void *) skb_put(skb, sizeof(*hdr));
|
|
|
|
hdr->opcode = cpu_to_le16(MGMT_EV_CMD_STATUS);
|
|
hdr->index = cpu_to_le16(index);
|
|
hdr->len = cpu_to_le16(sizeof(*ev));
|
|
|
|
ev = (void *) skb_put(skb, sizeof(*ev));
|
|
ev->status = status;
|
|
put_unaligned_le16(cmd, &ev->opcode);
|
|
|
|
err = sock_queue_rcv_skb(sk, skb);
|
|
if (err < 0)
|
|
kfree_skb(skb);
|
|
|
|
return err;
|
|
}
|
|
|
|
static int cmd_complete(struct sock *sk, u16 index, u16 cmd, void *rp,
|
|
size_t rp_len)
|
|
{
|
|
struct sk_buff *skb;
|
|
struct mgmt_hdr *hdr;
|
|
struct mgmt_ev_cmd_complete *ev;
|
|
int err;
|
|
|
|
BT_DBG("sock %p", sk);
|
|
|
|
skb = alloc_skb(sizeof(*hdr) + sizeof(*ev) + rp_len, GFP_ATOMIC);
|
|
if (!skb)
|
|
return -ENOMEM;
|
|
|
|
hdr = (void *) skb_put(skb, sizeof(*hdr));
|
|
|
|
hdr->opcode = cpu_to_le16(MGMT_EV_CMD_COMPLETE);
|
|
hdr->index = cpu_to_le16(index);
|
|
hdr->len = cpu_to_le16(sizeof(*ev) + rp_len);
|
|
|
|
ev = (void *) skb_put(skb, sizeof(*ev) + rp_len);
|
|
put_unaligned_le16(cmd, &ev->opcode);
|
|
|
|
if (rp)
|
|
memcpy(ev->data, rp, rp_len);
|
|
|
|
err = sock_queue_rcv_skb(sk, skb);
|
|
if (err < 0)
|
|
kfree_skb(skb);
|
|
|
|
return err;;
|
|
}
|
|
|
|
static int read_version(struct sock *sk)
|
|
{
|
|
struct mgmt_rp_read_version rp;
|
|
|
|
BT_DBG("sock %p", sk);
|
|
|
|
rp.version = MGMT_VERSION;
|
|
put_unaligned_le16(MGMT_REVISION, &rp.revision);
|
|
|
|
return cmd_complete(sk, MGMT_INDEX_NONE, MGMT_OP_READ_VERSION, &rp,
|
|
sizeof(rp));
|
|
}
|
|
|
|
static int read_index_list(struct sock *sk)
|
|
{
|
|
struct mgmt_rp_read_index_list *rp;
|
|
struct list_head *p;
|
|
struct hci_dev *d;
|
|
size_t rp_len;
|
|
u16 count;
|
|
int i, err;
|
|
|
|
BT_DBG("sock %p", sk);
|
|
|
|
read_lock(&hci_dev_list_lock);
|
|
|
|
count = 0;
|
|
list_for_each(p, &hci_dev_list) {
|
|
count++;
|
|
}
|
|
|
|
rp_len = sizeof(*rp) + (2 * count);
|
|
rp = kmalloc(rp_len, GFP_ATOMIC);
|
|
if (!rp) {
|
|
read_unlock(&hci_dev_list_lock);
|
|
return -ENOMEM;
|
|
}
|
|
|
|
put_unaligned_le16(count, &rp->num_controllers);
|
|
|
|
i = 0;
|
|
list_for_each_entry(d, &hci_dev_list, list) {
|
|
if (test_and_clear_bit(HCI_AUTO_OFF, &d->flags))
|
|
cancel_delayed_work(&d->power_off);
|
|
|
|
if (test_bit(HCI_SETUP, &d->flags))
|
|
continue;
|
|
|
|
put_unaligned_le16(d->id, &rp->index[i++]);
|
|
BT_DBG("Added hci%u", d->id);
|
|
}
|
|
|
|
read_unlock(&hci_dev_list_lock);
|
|
|
|
err = cmd_complete(sk, MGMT_INDEX_NONE, MGMT_OP_READ_INDEX_LIST, rp,
|
|
rp_len);
|
|
|
|
kfree(rp);
|
|
|
|
return err;
|
|
}
|
|
|
|
static int read_controller_info(struct sock *sk, u16 index)
|
|
{
|
|
struct mgmt_rp_read_info rp;
|
|
struct hci_dev *hdev;
|
|
|
|
BT_DBG("sock %p hci%u", sk, index);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_READ_INFO, ENODEV);
|
|
|
|
if (test_and_clear_bit(HCI_AUTO_OFF, &hdev->flags))
|
|
cancel_delayed_work_sync(&hdev->power_off);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
set_bit(HCI_MGMT, &hdev->flags);
|
|
|
|
memset(&rp, 0, sizeof(rp));
|
|
|
|
rp.type = hdev->dev_type;
|
|
|
|
rp.powered = test_bit(HCI_UP, &hdev->flags);
|
|
rp.connectable = test_bit(HCI_PSCAN, &hdev->flags);
|
|
rp.discoverable = test_bit(HCI_ISCAN, &hdev->flags);
|
|
rp.pairable = test_bit(HCI_PSCAN, &hdev->flags);
|
|
|
|
if (test_bit(HCI_AUTH, &hdev->flags))
|
|
rp.sec_mode = 3;
|
|
else if (hdev->ssp_mode > 0)
|
|
rp.sec_mode = 4;
|
|
else
|
|
rp.sec_mode = 2;
|
|
|
|
bacpy(&rp.bdaddr, &hdev->bdaddr);
|
|
memcpy(rp.features, hdev->features, 8);
|
|
memcpy(rp.dev_class, hdev->dev_class, 3);
|
|
put_unaligned_le16(hdev->manufacturer, &rp.manufacturer);
|
|
rp.hci_ver = hdev->hci_ver;
|
|
put_unaligned_le16(hdev->hci_rev, &rp.hci_rev);
|
|
|
|
memcpy(rp.name, hdev->dev_name, sizeof(hdev->dev_name));
|
|
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return cmd_complete(sk, index, MGMT_OP_READ_INFO, &rp, sizeof(rp));
|
|
}
|
|
|
|
static void mgmt_pending_free(struct pending_cmd *cmd)
|
|
{
|
|
sock_put(cmd->sk);
|
|
kfree(cmd->param);
|
|
kfree(cmd);
|
|
}
|
|
|
|
static struct pending_cmd *mgmt_pending_add(struct sock *sk, u16 opcode,
|
|
struct hci_dev *hdev,
|
|
void *data, u16 len)
|
|
{
|
|
struct pending_cmd *cmd;
|
|
|
|
cmd = kmalloc(sizeof(*cmd), GFP_ATOMIC);
|
|
if (!cmd)
|
|
return NULL;
|
|
|
|
cmd->opcode = opcode;
|
|
cmd->index = hdev->id;
|
|
|
|
cmd->param = kmalloc(len, GFP_ATOMIC);
|
|
if (!cmd->param) {
|
|
kfree(cmd);
|
|
return NULL;
|
|
}
|
|
|
|
if (data)
|
|
memcpy(cmd->param, data, len);
|
|
|
|
cmd->sk = sk;
|
|
sock_hold(sk);
|
|
|
|
list_add(&cmd->list, &hdev->mgmt_pending);
|
|
|
|
return cmd;
|
|
}
|
|
|
|
static void mgmt_pending_foreach(u16 opcode, struct hci_dev *hdev,
|
|
void (*cb)(struct pending_cmd *cmd, void *data),
|
|
void *data)
|
|
{
|
|
struct list_head *p, *n;
|
|
|
|
list_for_each_safe(p, n, &hdev->mgmt_pending) {
|
|
struct pending_cmd *cmd;
|
|
|
|
cmd = list_entry(p, struct pending_cmd, list);
|
|
|
|
if (opcode > 0 && cmd->opcode != opcode)
|
|
continue;
|
|
|
|
cb(cmd, data);
|
|
}
|
|
}
|
|
|
|
static struct pending_cmd *mgmt_pending_find(u16 opcode, struct hci_dev *hdev)
|
|
{
|
|
struct pending_cmd *cmd;
|
|
|
|
list_for_each_entry(cmd, &hdev->mgmt_pending, list) {
|
|
if (cmd->opcode == opcode)
|
|
return cmd;
|
|
}
|
|
|
|
return NULL;
|
|
}
|
|
|
|
static void mgmt_pending_remove(struct pending_cmd *cmd)
|
|
{
|
|
list_del(&cmd->list);
|
|
mgmt_pending_free(cmd);
|
|
}
|
|
|
|
static int set_powered(struct sock *sk, u16 index, unsigned char *data, u16 len)
|
|
{
|
|
struct mgmt_mode *cp;
|
|
struct hci_dev *hdev;
|
|
struct pending_cmd *cmd;
|
|
int err, up;
|
|
|
|
cp = (void *) data;
|
|
|
|
BT_DBG("request for hci%u", index);
|
|
|
|
if (len != sizeof(*cp))
|
|
return cmd_status(sk, index, MGMT_OP_SET_POWERED, EINVAL);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_SET_POWERED, ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
up = test_bit(HCI_UP, &hdev->flags);
|
|
if ((cp->val && up) || (!cp->val && !up)) {
|
|
err = cmd_status(sk, index, MGMT_OP_SET_POWERED, EALREADY);
|
|
goto failed;
|
|
}
|
|
|
|
if (mgmt_pending_find(MGMT_OP_SET_POWERED, hdev)) {
|
|
err = cmd_status(sk, index, MGMT_OP_SET_POWERED, EBUSY);
|
|
goto failed;
|
|
}
|
|
|
|
cmd = mgmt_pending_add(sk, MGMT_OP_SET_POWERED, hdev, data, len);
|
|
if (!cmd) {
|
|
err = -ENOMEM;
|
|
goto failed;
|
|
}
|
|
|
|
if (cp->val)
|
|
queue_work(hdev->workqueue, &hdev->power_on);
|
|
else
|
|
queue_work(hdev->workqueue, &hdev->power_off.work);
|
|
|
|
err = 0;
|
|
|
|
failed:
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
return err;
|
|
}
|
|
|
|
static int set_discoverable(struct sock *sk, u16 index, unsigned char *data,
|
|
u16 len)
|
|
{
|
|
struct mgmt_cp_set_discoverable *cp;
|
|
struct hci_dev *hdev;
|
|
struct pending_cmd *cmd;
|
|
u8 scan;
|
|
int err;
|
|
|
|
cp = (void *) data;
|
|
|
|
BT_DBG("request for hci%u", index);
|
|
|
|
if (len != sizeof(*cp))
|
|
return cmd_status(sk, index, MGMT_OP_SET_DISCOVERABLE, EINVAL);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_SET_DISCOVERABLE, ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
if (!test_bit(HCI_UP, &hdev->flags)) {
|
|
err = cmd_status(sk, index, MGMT_OP_SET_DISCOVERABLE, ENETDOWN);
|
|
goto failed;
|
|
}
|
|
|
|
if (mgmt_pending_find(MGMT_OP_SET_DISCOVERABLE, hdev) ||
|
|
mgmt_pending_find(MGMT_OP_SET_CONNECTABLE, hdev)) {
|
|
err = cmd_status(sk, index, MGMT_OP_SET_DISCOVERABLE, EBUSY);
|
|
goto failed;
|
|
}
|
|
|
|
if (cp->val == test_bit(HCI_ISCAN, &hdev->flags) &&
|
|
test_bit(HCI_PSCAN, &hdev->flags)) {
|
|
err = cmd_status(sk, index, MGMT_OP_SET_DISCOVERABLE, EALREADY);
|
|
goto failed;
|
|
}
|
|
|
|
cmd = mgmt_pending_add(sk, MGMT_OP_SET_DISCOVERABLE, hdev, data, len);
|
|
if (!cmd) {
|
|
err = -ENOMEM;
|
|
goto failed;
|
|
}
|
|
|
|
scan = SCAN_PAGE;
|
|
|
|
if (cp->val)
|
|
scan |= SCAN_INQUIRY;
|
|
else
|
|
cancel_delayed_work(&hdev->discov_off);
|
|
|
|
err = hci_send_cmd(hdev, HCI_OP_WRITE_SCAN_ENABLE, 1, &scan);
|
|
if (err < 0)
|
|
mgmt_pending_remove(cmd);
|
|
|
|
if (cp->val)
|
|
hdev->discov_timeout = get_unaligned_le16(&cp->timeout);
|
|
|
|
failed:
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return err;
|
|
}
|
|
|
|
static int set_connectable(struct sock *sk, u16 index, unsigned char *data,
|
|
u16 len)
|
|
{
|
|
struct mgmt_mode *cp;
|
|
struct hci_dev *hdev;
|
|
struct pending_cmd *cmd;
|
|
u8 scan;
|
|
int err;
|
|
|
|
cp = (void *) data;
|
|
|
|
BT_DBG("request for hci%u", index);
|
|
|
|
if (len != sizeof(*cp))
|
|
return cmd_status(sk, index, MGMT_OP_SET_CONNECTABLE, EINVAL);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_SET_CONNECTABLE, ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
if (!test_bit(HCI_UP, &hdev->flags)) {
|
|
err = cmd_status(sk, index, MGMT_OP_SET_CONNECTABLE, ENETDOWN);
|
|
goto failed;
|
|
}
|
|
|
|
if (mgmt_pending_find(MGMT_OP_SET_DISCOVERABLE, hdev) ||
|
|
mgmt_pending_find(MGMT_OP_SET_CONNECTABLE, hdev)) {
|
|
err = cmd_status(sk, index, MGMT_OP_SET_CONNECTABLE, EBUSY);
|
|
goto failed;
|
|
}
|
|
|
|
if (cp->val == test_bit(HCI_PSCAN, &hdev->flags)) {
|
|
err = cmd_status(sk, index, MGMT_OP_SET_CONNECTABLE, EALREADY);
|
|
goto failed;
|
|
}
|
|
|
|
cmd = mgmt_pending_add(sk, MGMT_OP_SET_CONNECTABLE, hdev, data, len);
|
|
if (!cmd) {
|
|
err = -ENOMEM;
|
|
goto failed;
|
|
}
|
|
|
|
if (cp->val)
|
|
scan = SCAN_PAGE;
|
|
else
|
|
scan = 0;
|
|
|
|
err = hci_send_cmd(hdev, HCI_OP_WRITE_SCAN_ENABLE, 1, &scan);
|
|
if (err < 0)
|
|
mgmt_pending_remove(cmd);
|
|
|
|
failed:
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return err;
|
|
}
|
|
|
|
static int mgmt_event(u16 event, struct hci_dev *hdev, void *data,
|
|
u16 data_len, struct sock *skip_sk)
|
|
{
|
|
struct sk_buff *skb;
|
|
struct mgmt_hdr *hdr;
|
|
|
|
skb = alloc_skb(sizeof(*hdr) + data_len, GFP_ATOMIC);
|
|
if (!skb)
|
|
return -ENOMEM;
|
|
|
|
bt_cb(skb)->channel = HCI_CHANNEL_CONTROL;
|
|
|
|
hdr = (void *) skb_put(skb, sizeof(*hdr));
|
|
hdr->opcode = cpu_to_le16(event);
|
|
if (hdev)
|
|
hdr->index = cpu_to_le16(hdev->id);
|
|
else
|
|
hdr->index = cpu_to_le16(MGMT_INDEX_NONE);
|
|
hdr->len = cpu_to_le16(data_len);
|
|
|
|
if (data)
|
|
memcpy(skb_put(skb, data_len), data, data_len);
|
|
|
|
hci_send_to_sock(NULL, skb, skip_sk);
|
|
kfree_skb(skb);
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int send_mode_rsp(struct sock *sk, u16 opcode, u16 index, u8 val)
|
|
{
|
|
struct mgmt_mode rp;
|
|
|
|
rp.val = val;
|
|
|
|
return cmd_complete(sk, index, opcode, &rp, sizeof(rp));
|
|
}
|
|
|
|
static int set_pairable(struct sock *sk, u16 index, unsigned char *data,
|
|
u16 len)
|
|
{
|
|
struct mgmt_mode *cp, ev;
|
|
struct hci_dev *hdev;
|
|
int err;
|
|
|
|
cp = (void *) data;
|
|
|
|
BT_DBG("request for hci%u", index);
|
|
|
|
if (len != sizeof(*cp))
|
|
return cmd_status(sk, index, MGMT_OP_SET_PAIRABLE, EINVAL);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_SET_PAIRABLE, ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
if (cp->val)
|
|
set_bit(HCI_PAIRABLE, &hdev->flags);
|
|
else
|
|
clear_bit(HCI_PAIRABLE, &hdev->flags);
|
|
|
|
err = send_mode_rsp(sk, MGMT_OP_SET_PAIRABLE, index, cp->val);
|
|
if (err < 0)
|
|
goto failed;
|
|
|
|
ev.val = cp->val;
|
|
|
|
err = mgmt_event(MGMT_EV_PAIRABLE, hdev, &ev, sizeof(ev), sk);
|
|
|
|
failed:
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return err;
|
|
}
|
|
|
|
#define EIR_FLAGS 0x01 /* flags */
|
|
#define EIR_UUID16_SOME 0x02 /* 16-bit UUID, more available */
|
|
#define EIR_UUID16_ALL 0x03 /* 16-bit UUID, all listed */
|
|
#define EIR_UUID32_SOME 0x04 /* 32-bit UUID, more available */
|
|
#define EIR_UUID32_ALL 0x05 /* 32-bit UUID, all listed */
|
|
#define EIR_UUID128_SOME 0x06 /* 128-bit UUID, more available */
|
|
#define EIR_UUID128_ALL 0x07 /* 128-bit UUID, all listed */
|
|
#define EIR_NAME_SHORT 0x08 /* shortened local name */
|
|
#define EIR_NAME_COMPLETE 0x09 /* complete local name */
|
|
#define EIR_TX_POWER 0x0A /* transmit power level */
|
|
#define EIR_DEVICE_ID 0x10 /* device ID */
|
|
|
|
#define PNP_INFO_SVCLASS_ID 0x1200
|
|
|
|
static u8 bluetooth_base_uuid[] = {
|
|
0xFB, 0x34, 0x9B, 0x5F, 0x80, 0x00, 0x00, 0x80,
|
|
0x00, 0x10, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
|
|
};
|
|
|
|
static u16 get_uuid16(u8 *uuid128)
|
|
{
|
|
u32 val;
|
|
int i;
|
|
|
|
for (i = 0; i < 12; i++) {
|
|
if (bluetooth_base_uuid[i] != uuid128[i])
|
|
return 0;
|
|
}
|
|
|
|
memcpy(&val, &uuid128[12], 4);
|
|
|
|
val = le32_to_cpu(val);
|
|
if (val > 0xffff)
|
|
return 0;
|
|
|
|
return (u16) val;
|
|
}
|
|
|
|
static void create_eir(struct hci_dev *hdev, u8 *data)
|
|
{
|
|
u8 *ptr = data;
|
|
u16 eir_len = 0;
|
|
u16 uuid16_list[HCI_MAX_EIR_LENGTH / sizeof(u16)];
|
|
int i, truncated = 0;
|
|
struct bt_uuid *uuid;
|
|
size_t name_len;
|
|
|
|
name_len = strlen(hdev->dev_name);
|
|
|
|
if (name_len > 0) {
|
|
/* EIR Data type */
|
|
if (name_len > 48) {
|
|
name_len = 48;
|
|
ptr[1] = EIR_NAME_SHORT;
|
|
} else
|
|
ptr[1] = EIR_NAME_COMPLETE;
|
|
|
|
/* EIR Data length */
|
|
ptr[0] = name_len + 1;
|
|
|
|
memcpy(ptr + 2, hdev->dev_name, name_len);
|
|
|
|
eir_len += (name_len + 2);
|
|
ptr += (name_len + 2);
|
|
}
|
|
|
|
memset(uuid16_list, 0, sizeof(uuid16_list));
|
|
|
|
/* Group all UUID16 types */
|
|
list_for_each_entry(uuid, &hdev->uuids, list) {
|
|
u16 uuid16;
|
|
|
|
uuid16 = get_uuid16(uuid->uuid);
|
|
if (uuid16 == 0)
|
|
return;
|
|
|
|
if (uuid16 < 0x1100)
|
|
continue;
|
|
|
|
if (uuid16 == PNP_INFO_SVCLASS_ID)
|
|
continue;
|
|
|
|
/* Stop if not enough space to put next UUID */
|
|
if (eir_len + 2 + sizeof(u16) > HCI_MAX_EIR_LENGTH) {
|
|
truncated = 1;
|
|
break;
|
|
}
|
|
|
|
/* Check for duplicates */
|
|
for (i = 0; uuid16_list[i] != 0; i++)
|
|
if (uuid16_list[i] == uuid16)
|
|
break;
|
|
|
|
if (uuid16_list[i] == 0) {
|
|
uuid16_list[i] = uuid16;
|
|
eir_len += sizeof(u16);
|
|
}
|
|
}
|
|
|
|
if (uuid16_list[0] != 0) {
|
|
u8 *length = ptr;
|
|
|
|
/* EIR Data type */
|
|
ptr[1] = truncated ? EIR_UUID16_SOME : EIR_UUID16_ALL;
|
|
|
|
ptr += 2;
|
|
eir_len += 2;
|
|
|
|
for (i = 0; uuid16_list[i] != 0; i++) {
|
|
*ptr++ = (uuid16_list[i] & 0x00ff);
|
|
*ptr++ = (uuid16_list[i] & 0xff00) >> 8;
|
|
}
|
|
|
|
/* EIR Data length */
|
|
*length = (i * sizeof(u16)) + 1;
|
|
}
|
|
}
|
|
|
|
static int update_eir(struct hci_dev *hdev)
|
|
{
|
|
struct hci_cp_write_eir cp;
|
|
|
|
if (!(hdev->features[6] & LMP_EXT_INQ))
|
|
return 0;
|
|
|
|
if (hdev->ssp_mode == 0)
|
|
return 0;
|
|
|
|
if (test_bit(HCI_SERVICE_CACHE, &hdev->flags))
|
|
return 0;
|
|
|
|
memset(&cp, 0, sizeof(cp));
|
|
|
|
create_eir(hdev, cp.data);
|
|
|
|
if (memcmp(cp.data, hdev->eir, sizeof(cp.data)) == 0)
|
|
return 0;
|
|
|
|
memcpy(hdev->eir, cp.data, sizeof(cp.data));
|
|
|
|
return hci_send_cmd(hdev, HCI_OP_WRITE_EIR, sizeof(cp), &cp);
|
|
}
|
|
|
|
static u8 get_service_classes(struct hci_dev *hdev)
|
|
{
|
|
struct bt_uuid *uuid;
|
|
u8 val = 0;
|
|
|
|
list_for_each_entry(uuid, &hdev->uuids, list)
|
|
val |= uuid->svc_hint;
|
|
|
|
return val;
|
|
}
|
|
|
|
static int update_class(struct hci_dev *hdev)
|
|
{
|
|
u8 cod[3];
|
|
|
|
BT_DBG("%s", hdev->name);
|
|
|
|
if (test_bit(HCI_SERVICE_CACHE, &hdev->flags))
|
|
return 0;
|
|
|
|
cod[0] = hdev->minor_class;
|
|
cod[1] = hdev->major_class;
|
|
cod[2] = get_service_classes(hdev);
|
|
|
|
if (memcmp(cod, hdev->dev_class, 3) == 0)
|
|
return 0;
|
|
|
|
return hci_send_cmd(hdev, HCI_OP_WRITE_CLASS_OF_DEV, sizeof(cod), cod);
|
|
}
|
|
|
|
static int add_uuid(struct sock *sk, u16 index, unsigned char *data, u16 len)
|
|
{
|
|
struct mgmt_cp_add_uuid *cp;
|
|
struct hci_dev *hdev;
|
|
struct bt_uuid *uuid;
|
|
int err;
|
|
|
|
cp = (void *) data;
|
|
|
|
BT_DBG("request for hci%u", index);
|
|
|
|
if (len != sizeof(*cp))
|
|
return cmd_status(sk, index, MGMT_OP_ADD_UUID, EINVAL);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_ADD_UUID, ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
uuid = kmalloc(sizeof(*uuid), GFP_ATOMIC);
|
|
if (!uuid) {
|
|
err = -ENOMEM;
|
|
goto failed;
|
|
}
|
|
|
|
memcpy(uuid->uuid, cp->uuid, 16);
|
|
uuid->svc_hint = cp->svc_hint;
|
|
|
|
list_add(&uuid->list, &hdev->uuids);
|
|
|
|
err = update_class(hdev);
|
|
if (err < 0)
|
|
goto failed;
|
|
|
|
err = update_eir(hdev);
|
|
if (err < 0)
|
|
goto failed;
|
|
|
|
err = cmd_complete(sk, index, MGMT_OP_ADD_UUID, NULL, 0);
|
|
|
|
failed:
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return err;
|
|
}
|
|
|
|
static int remove_uuid(struct sock *sk, u16 index, unsigned char *data, u16 len)
|
|
{
|
|
struct list_head *p, *n;
|
|
struct mgmt_cp_remove_uuid *cp;
|
|
struct hci_dev *hdev;
|
|
u8 bt_uuid_any[] = { 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 };
|
|
int err, found;
|
|
|
|
cp = (void *) data;
|
|
|
|
BT_DBG("request for hci%u", index);
|
|
|
|
if (len != sizeof(*cp))
|
|
return cmd_status(sk, index, MGMT_OP_REMOVE_UUID, EINVAL);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_REMOVE_UUID, ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
if (memcmp(cp->uuid, bt_uuid_any, 16) == 0) {
|
|
err = hci_uuids_clear(hdev);
|
|
goto unlock;
|
|
}
|
|
|
|
found = 0;
|
|
|
|
list_for_each_safe(p, n, &hdev->uuids) {
|
|
struct bt_uuid *match = list_entry(p, struct bt_uuid, list);
|
|
|
|
if (memcmp(match->uuid, cp->uuid, 16) != 0)
|
|
continue;
|
|
|
|
list_del(&match->list);
|
|
found++;
|
|
}
|
|
|
|
if (found == 0) {
|
|
err = cmd_status(sk, index, MGMT_OP_REMOVE_UUID, ENOENT);
|
|
goto unlock;
|
|
}
|
|
|
|
err = update_class(hdev);
|
|
if (err < 0)
|
|
goto unlock;
|
|
|
|
err = update_eir(hdev);
|
|
if (err < 0)
|
|
goto unlock;
|
|
|
|
err = cmd_complete(sk, index, MGMT_OP_REMOVE_UUID, NULL, 0);
|
|
|
|
unlock:
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return err;
|
|
}
|
|
|
|
static int set_dev_class(struct sock *sk, u16 index, unsigned char *data,
|
|
u16 len)
|
|
{
|
|
struct hci_dev *hdev;
|
|
struct mgmt_cp_set_dev_class *cp;
|
|
int err;
|
|
|
|
cp = (void *) data;
|
|
|
|
BT_DBG("request for hci%u", index);
|
|
|
|
if (len != sizeof(*cp))
|
|
return cmd_status(sk, index, MGMT_OP_SET_DEV_CLASS, EINVAL);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_SET_DEV_CLASS, ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
hdev->major_class = cp->major;
|
|
hdev->minor_class = cp->minor;
|
|
|
|
err = update_class(hdev);
|
|
|
|
if (err == 0)
|
|
err = cmd_complete(sk, index, MGMT_OP_SET_DEV_CLASS, NULL, 0);
|
|
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return err;
|
|
}
|
|
|
|
static int set_service_cache(struct sock *sk, u16 index, unsigned char *data,
|
|
u16 len)
|
|
{
|
|
struct hci_dev *hdev;
|
|
struct mgmt_cp_set_service_cache *cp;
|
|
int err;
|
|
|
|
cp = (void *) data;
|
|
|
|
if (len != sizeof(*cp))
|
|
return cmd_status(sk, index, MGMT_OP_SET_SERVICE_CACHE, EINVAL);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_SET_SERVICE_CACHE, ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
BT_DBG("hci%u enable %d", index, cp->enable);
|
|
|
|
if (cp->enable) {
|
|
set_bit(HCI_SERVICE_CACHE, &hdev->flags);
|
|
err = 0;
|
|
} else {
|
|
clear_bit(HCI_SERVICE_CACHE, &hdev->flags);
|
|
err = update_class(hdev);
|
|
if (err == 0)
|
|
err = update_eir(hdev);
|
|
}
|
|
|
|
if (err == 0)
|
|
err = cmd_complete(sk, index, MGMT_OP_SET_SERVICE_CACHE, NULL,
|
|
0);
|
|
else
|
|
cmd_status(sk, index, MGMT_OP_SET_SERVICE_CACHE, -err);
|
|
|
|
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return err;
|
|
}
|
|
|
|
static int load_link_keys(struct sock *sk, u16 index, unsigned char *data,
|
|
u16 len)
|
|
{
|
|
struct hci_dev *hdev;
|
|
struct mgmt_cp_load_link_keys *cp;
|
|
u16 key_count, expected_len;
|
|
int i;
|
|
|
|
cp = (void *) data;
|
|
|
|
if (len < sizeof(*cp))
|
|
return cmd_status(sk, index, MGMT_OP_LOAD_LINK_KEYS, EINVAL);
|
|
|
|
key_count = get_unaligned_le16(&cp->key_count);
|
|
|
|
expected_len = sizeof(*cp) + key_count *
|
|
sizeof(struct mgmt_link_key_info);
|
|
if (expected_len != len) {
|
|
BT_ERR("load_link_keys: expected %u bytes, got %u bytes",
|
|
len, expected_len);
|
|
return cmd_status(sk, index, MGMT_OP_LOAD_LINK_KEYS, EINVAL);
|
|
}
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_LOAD_LINK_KEYS, ENODEV);
|
|
|
|
BT_DBG("hci%u debug_keys %u key_count %u", index, cp->debug_keys,
|
|
key_count);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
hci_link_keys_clear(hdev);
|
|
|
|
set_bit(HCI_LINK_KEYS, &hdev->flags);
|
|
|
|
if (cp->debug_keys)
|
|
set_bit(HCI_DEBUG_KEYS, &hdev->flags);
|
|
else
|
|
clear_bit(HCI_DEBUG_KEYS, &hdev->flags);
|
|
|
|
for (i = 0; i < key_count; i++) {
|
|
struct mgmt_link_key_info *key = &cp->keys[i];
|
|
|
|
hci_add_link_key(hdev, NULL, 0, &key->bdaddr, key->val, key->type,
|
|
key->pin_len);
|
|
}
|
|
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int remove_keys(struct sock *sk, u16 index, unsigned char *data,
|
|
u16 len)
|
|
{
|
|
struct hci_dev *hdev;
|
|
struct mgmt_cp_remove_keys *cp;
|
|
struct hci_conn *conn;
|
|
int err;
|
|
|
|
cp = (void *) data;
|
|
|
|
if (len != sizeof(*cp))
|
|
return cmd_status(sk, index, MGMT_OP_REMOVE_KEYS, EINVAL);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_REMOVE_KEYS, ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
err = hci_remove_link_key(hdev, &cp->bdaddr);
|
|
if (err < 0) {
|
|
err = cmd_status(sk, index, MGMT_OP_REMOVE_KEYS, -err);
|
|
goto unlock;
|
|
}
|
|
|
|
err = 0;
|
|
|
|
if (!test_bit(HCI_UP, &hdev->flags) || !cp->disconnect)
|
|
goto unlock;
|
|
|
|
conn = hci_conn_hash_lookup_ba(hdev, ACL_LINK, &cp->bdaddr);
|
|
if (conn) {
|
|
struct hci_cp_disconnect dc;
|
|
|
|
put_unaligned_le16(conn->handle, &dc.handle);
|
|
dc.reason = 0x13; /* Remote User Terminated Connection */
|
|
err = hci_send_cmd(hdev, HCI_OP_DISCONNECT, sizeof(dc), &dc);
|
|
}
|
|
|
|
unlock:
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return err;
|
|
}
|
|
|
|
static int disconnect(struct sock *sk, u16 index, unsigned char *data, u16 len)
|
|
{
|
|
struct hci_dev *hdev;
|
|
struct mgmt_cp_disconnect *cp;
|
|
struct hci_cp_disconnect dc;
|
|
struct pending_cmd *cmd;
|
|
struct hci_conn *conn;
|
|
int err;
|
|
|
|
BT_DBG("");
|
|
|
|
cp = (void *) data;
|
|
|
|
if (len != sizeof(*cp))
|
|
return cmd_status(sk, index, MGMT_OP_DISCONNECT, EINVAL);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_DISCONNECT, ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
if (!test_bit(HCI_UP, &hdev->flags)) {
|
|
err = cmd_status(sk, index, MGMT_OP_DISCONNECT, ENETDOWN);
|
|
goto failed;
|
|
}
|
|
|
|
if (mgmt_pending_find(MGMT_OP_DISCONNECT, hdev)) {
|
|
err = cmd_status(sk, index, MGMT_OP_DISCONNECT, EBUSY);
|
|
goto failed;
|
|
}
|
|
|
|
conn = hci_conn_hash_lookup_ba(hdev, ACL_LINK, &cp->bdaddr);
|
|
if (!conn)
|
|
conn = hci_conn_hash_lookup_ba(hdev, LE_LINK, &cp->bdaddr);
|
|
|
|
if (!conn) {
|
|
err = cmd_status(sk, index, MGMT_OP_DISCONNECT, ENOTCONN);
|
|
goto failed;
|
|
}
|
|
|
|
cmd = mgmt_pending_add(sk, MGMT_OP_DISCONNECT, hdev, data, len);
|
|
if (!cmd) {
|
|
err = -ENOMEM;
|
|
goto failed;
|
|
}
|
|
|
|
put_unaligned_le16(conn->handle, &dc.handle);
|
|
dc.reason = 0x13; /* Remote User Terminated Connection */
|
|
|
|
err = hci_send_cmd(hdev, HCI_OP_DISCONNECT, sizeof(dc), &dc);
|
|
if (err < 0)
|
|
mgmt_pending_remove(cmd);
|
|
|
|
failed:
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return err;
|
|
}
|
|
|
|
static u8 link_to_mgmt(u8 link_type)
|
|
{
|
|
switch (link_type) {
|
|
case LE_LINK:
|
|
return MGMT_ADDR_LE;
|
|
case ACL_LINK:
|
|
return MGMT_ADDR_BREDR;
|
|
default:
|
|
return MGMT_ADDR_INVALID;
|
|
}
|
|
}
|
|
|
|
static int get_connections(struct sock *sk, u16 index)
|
|
{
|
|
struct mgmt_rp_get_connections *rp;
|
|
struct hci_dev *hdev;
|
|
struct hci_conn *c;
|
|
struct list_head *p;
|
|
size_t rp_len;
|
|
u16 count;
|
|
int i, err;
|
|
|
|
BT_DBG("");
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_GET_CONNECTIONS, ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
count = 0;
|
|
list_for_each(p, &hdev->conn_hash.list) {
|
|
count++;
|
|
}
|
|
|
|
rp_len = sizeof(*rp) + (count * sizeof(struct mgmt_addr_info));
|
|
rp = kmalloc(rp_len, GFP_ATOMIC);
|
|
if (!rp) {
|
|
err = -ENOMEM;
|
|
goto unlock;
|
|
}
|
|
|
|
put_unaligned_le16(count, &rp->conn_count);
|
|
|
|
i = 0;
|
|
list_for_each_entry(c, &hdev->conn_hash.list, list) {
|
|
bacpy(&rp->addr[i].bdaddr, &c->dst);
|
|
rp->addr[i].type = link_to_mgmt(c->type);
|
|
if (rp->addr[i].type == MGMT_ADDR_INVALID)
|
|
continue;
|
|
i++;
|
|
}
|
|
|
|
/* Recalculate length in case of filtered SCO connections, etc */
|
|
rp_len = sizeof(*rp) + (i * sizeof(struct mgmt_addr_info));
|
|
|
|
err = cmd_complete(sk, index, MGMT_OP_GET_CONNECTIONS, rp, rp_len);
|
|
|
|
unlock:
|
|
kfree(rp);
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
return err;
|
|
}
|
|
|
|
static int send_pin_code_neg_reply(struct sock *sk, u16 index,
|
|
struct hci_dev *hdev, struct mgmt_cp_pin_code_neg_reply *cp)
|
|
{
|
|
struct pending_cmd *cmd;
|
|
int err;
|
|
|
|
cmd = mgmt_pending_add(sk, MGMT_OP_PIN_CODE_NEG_REPLY, hdev, cp,
|
|
sizeof(*cp));
|
|
if (!cmd)
|
|
return -ENOMEM;
|
|
|
|
err = hci_send_cmd(hdev, HCI_OP_PIN_CODE_NEG_REPLY, sizeof(cp->bdaddr),
|
|
&cp->bdaddr);
|
|
if (err < 0)
|
|
mgmt_pending_remove(cmd);
|
|
|
|
return err;
|
|
}
|
|
|
|
static int pin_code_reply(struct sock *sk, u16 index, unsigned char *data,
|
|
u16 len)
|
|
{
|
|
struct hci_dev *hdev;
|
|
struct hci_conn *conn;
|
|
struct mgmt_cp_pin_code_reply *cp;
|
|
struct mgmt_cp_pin_code_neg_reply ncp;
|
|
struct hci_cp_pin_code_reply reply;
|
|
struct pending_cmd *cmd;
|
|
int err;
|
|
|
|
BT_DBG("");
|
|
|
|
cp = (void *) data;
|
|
|
|
if (len != sizeof(*cp))
|
|
return cmd_status(sk, index, MGMT_OP_PIN_CODE_REPLY, EINVAL);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_PIN_CODE_REPLY, ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
if (!test_bit(HCI_UP, &hdev->flags)) {
|
|
err = cmd_status(sk, index, MGMT_OP_PIN_CODE_REPLY, ENETDOWN);
|
|
goto failed;
|
|
}
|
|
|
|
conn = hci_conn_hash_lookup_ba(hdev, ACL_LINK, &cp->bdaddr);
|
|
if (!conn) {
|
|
err = cmd_status(sk, index, MGMT_OP_PIN_CODE_REPLY, ENOTCONN);
|
|
goto failed;
|
|
}
|
|
|
|
if (conn->pending_sec_level == BT_SECURITY_HIGH && cp->pin_len != 16) {
|
|
bacpy(&ncp.bdaddr, &cp->bdaddr);
|
|
|
|
BT_ERR("PIN code is not 16 bytes long");
|
|
|
|
err = send_pin_code_neg_reply(sk, index, hdev, &ncp);
|
|
if (err >= 0)
|
|
err = cmd_status(sk, index, MGMT_OP_PIN_CODE_REPLY,
|
|
EINVAL);
|
|
|
|
goto failed;
|
|
}
|
|
|
|
cmd = mgmt_pending_add(sk, MGMT_OP_PIN_CODE_REPLY, hdev, data, len);
|
|
if (!cmd) {
|
|
err = -ENOMEM;
|
|
goto failed;
|
|
}
|
|
|
|
bacpy(&reply.bdaddr, &cp->bdaddr);
|
|
reply.pin_len = cp->pin_len;
|
|
memcpy(reply.pin_code, cp->pin_code, sizeof(reply.pin_code));
|
|
|
|
err = hci_send_cmd(hdev, HCI_OP_PIN_CODE_REPLY, sizeof(reply), &reply);
|
|
if (err < 0)
|
|
mgmt_pending_remove(cmd);
|
|
|
|
failed:
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return err;
|
|
}
|
|
|
|
static int pin_code_neg_reply(struct sock *sk, u16 index, unsigned char *data,
|
|
u16 len)
|
|
{
|
|
struct hci_dev *hdev;
|
|
struct mgmt_cp_pin_code_neg_reply *cp;
|
|
int err;
|
|
|
|
BT_DBG("");
|
|
|
|
cp = (void *) data;
|
|
|
|
if (len != sizeof(*cp))
|
|
return cmd_status(sk, index, MGMT_OP_PIN_CODE_NEG_REPLY,
|
|
EINVAL);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_PIN_CODE_NEG_REPLY,
|
|
ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
if (!test_bit(HCI_UP, &hdev->flags)) {
|
|
err = cmd_status(sk, index, MGMT_OP_PIN_CODE_NEG_REPLY,
|
|
ENETDOWN);
|
|
goto failed;
|
|
}
|
|
|
|
err = send_pin_code_neg_reply(sk, index, hdev, cp);
|
|
|
|
failed:
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return err;
|
|
}
|
|
|
|
static int set_io_capability(struct sock *sk, u16 index, unsigned char *data,
|
|
u16 len)
|
|
{
|
|
struct hci_dev *hdev;
|
|
struct mgmt_cp_set_io_capability *cp;
|
|
|
|
BT_DBG("");
|
|
|
|
cp = (void *) data;
|
|
|
|
if (len != sizeof(*cp))
|
|
return cmd_status(sk, index, MGMT_OP_SET_IO_CAPABILITY, EINVAL);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_SET_IO_CAPABILITY, ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
hdev->io_capability = cp->io_capability;
|
|
|
|
BT_DBG("%s IO capability set to 0x%02x", hdev->name,
|
|
hdev->io_capability);
|
|
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return cmd_complete(sk, index, MGMT_OP_SET_IO_CAPABILITY, NULL, 0);
|
|
}
|
|
|
|
static inline struct pending_cmd *find_pairing(struct hci_conn *conn)
|
|
{
|
|
struct hci_dev *hdev = conn->hdev;
|
|
struct pending_cmd *cmd;
|
|
|
|
list_for_each_entry(cmd, &hdev->mgmt_pending, list) {
|
|
if (cmd->opcode != MGMT_OP_PAIR_DEVICE)
|
|
continue;
|
|
|
|
if (cmd->user_data != conn)
|
|
continue;
|
|
|
|
return cmd;
|
|
}
|
|
|
|
return NULL;
|
|
}
|
|
|
|
static void pairing_complete(struct pending_cmd *cmd, u8 status)
|
|
{
|
|
struct mgmt_rp_pair_device rp;
|
|
struct hci_conn *conn = cmd->user_data;
|
|
|
|
bacpy(&rp.bdaddr, &conn->dst);
|
|
rp.status = status;
|
|
|
|
cmd_complete(cmd->sk, cmd->index, MGMT_OP_PAIR_DEVICE, &rp, sizeof(rp));
|
|
|
|
/* So we don't get further callbacks for this connection */
|
|
conn->connect_cfm_cb = NULL;
|
|
conn->security_cfm_cb = NULL;
|
|
conn->disconn_cfm_cb = NULL;
|
|
|
|
hci_conn_put(conn);
|
|
|
|
mgmt_pending_remove(cmd);
|
|
}
|
|
|
|
static void pairing_complete_cb(struct hci_conn *conn, u8 status)
|
|
{
|
|
struct pending_cmd *cmd;
|
|
struct hci_dev *hdev = conn->hdev;
|
|
|
|
BT_DBG("status %u", status);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
cmd = find_pairing(conn);
|
|
if (!cmd)
|
|
BT_DBG("Unable to find a pending command");
|
|
else
|
|
pairing_complete(cmd, status);
|
|
|
|
hci_dev_unlock_bh(hdev);
|
|
}
|
|
|
|
static int pair_device(struct sock *sk, u16 index, unsigned char *data, u16 len)
|
|
{
|
|
struct hci_dev *hdev;
|
|
struct mgmt_cp_pair_device *cp;
|
|
struct pending_cmd *cmd;
|
|
struct adv_entry *entry;
|
|
u8 sec_level, auth_type;
|
|
struct hci_conn *conn;
|
|
int err;
|
|
|
|
BT_DBG("");
|
|
|
|
cp = (void *) data;
|
|
|
|
if (len != sizeof(*cp))
|
|
return cmd_status(sk, index, MGMT_OP_PAIR_DEVICE, EINVAL);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_PAIR_DEVICE, ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
sec_level = BT_SECURITY_MEDIUM;
|
|
if (cp->io_cap == 0x03)
|
|
auth_type = HCI_AT_DEDICATED_BONDING;
|
|
else
|
|
auth_type = HCI_AT_DEDICATED_BONDING_MITM;
|
|
|
|
entry = hci_find_adv_entry(hdev, &cp->bdaddr);
|
|
if (entry)
|
|
conn = hci_connect(hdev, LE_LINK, &cp->bdaddr, sec_level,
|
|
auth_type);
|
|
else
|
|
conn = hci_connect(hdev, ACL_LINK, &cp->bdaddr, sec_level,
|
|
auth_type);
|
|
|
|
if (IS_ERR(conn)) {
|
|
err = PTR_ERR(conn);
|
|
goto unlock;
|
|
}
|
|
|
|
if (conn->connect_cfm_cb) {
|
|
hci_conn_put(conn);
|
|
err = cmd_status(sk, index, MGMT_OP_PAIR_DEVICE, EBUSY);
|
|
goto unlock;
|
|
}
|
|
|
|
cmd = mgmt_pending_add(sk, MGMT_OP_PAIR_DEVICE, hdev, data, len);
|
|
if (!cmd) {
|
|
err = -ENOMEM;
|
|
hci_conn_put(conn);
|
|
goto unlock;
|
|
}
|
|
|
|
/* For LE, just connecting isn't a proof that the pairing finished */
|
|
if (!entry)
|
|
conn->connect_cfm_cb = pairing_complete_cb;
|
|
|
|
conn->security_cfm_cb = pairing_complete_cb;
|
|
conn->disconn_cfm_cb = pairing_complete_cb;
|
|
conn->io_capability = cp->io_cap;
|
|
cmd->user_data = conn;
|
|
|
|
if (conn->state == BT_CONNECTED &&
|
|
hci_conn_security(conn, sec_level, auth_type))
|
|
pairing_complete(cmd, 0);
|
|
|
|
err = 0;
|
|
|
|
unlock:
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return err;
|
|
}
|
|
|
|
static int user_confirm_reply(struct sock *sk, u16 index, unsigned char *data,
|
|
u16 len, int success)
|
|
{
|
|
struct mgmt_cp_user_confirm_reply *cp = (void *) data;
|
|
u16 mgmt_op, hci_op;
|
|
struct pending_cmd *cmd;
|
|
struct hci_dev *hdev;
|
|
int err;
|
|
|
|
BT_DBG("");
|
|
|
|
if (success) {
|
|
mgmt_op = MGMT_OP_USER_CONFIRM_REPLY;
|
|
hci_op = HCI_OP_USER_CONFIRM_REPLY;
|
|
} else {
|
|
mgmt_op = MGMT_OP_USER_CONFIRM_NEG_REPLY;
|
|
hci_op = HCI_OP_USER_CONFIRM_NEG_REPLY;
|
|
}
|
|
|
|
if (len != sizeof(*cp))
|
|
return cmd_status(sk, index, mgmt_op, EINVAL);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, mgmt_op, ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
if (!test_bit(HCI_UP, &hdev->flags)) {
|
|
err = cmd_status(sk, index, mgmt_op, ENETDOWN);
|
|
goto failed;
|
|
}
|
|
|
|
cmd = mgmt_pending_add(sk, mgmt_op, hdev, data, len);
|
|
if (!cmd) {
|
|
err = -ENOMEM;
|
|
goto failed;
|
|
}
|
|
|
|
err = hci_send_cmd(hdev, hci_op, sizeof(cp->bdaddr), &cp->bdaddr);
|
|
if (err < 0)
|
|
mgmt_pending_remove(cmd);
|
|
|
|
failed:
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return err;
|
|
}
|
|
|
|
static int set_local_name(struct sock *sk, u16 index, unsigned char *data,
|
|
u16 len)
|
|
{
|
|
struct mgmt_cp_set_local_name *mgmt_cp = (void *) data;
|
|
struct hci_cp_write_local_name hci_cp;
|
|
struct hci_dev *hdev;
|
|
struct pending_cmd *cmd;
|
|
int err;
|
|
|
|
BT_DBG("");
|
|
|
|
if (len != sizeof(*mgmt_cp))
|
|
return cmd_status(sk, index, MGMT_OP_SET_LOCAL_NAME, EINVAL);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_SET_LOCAL_NAME, ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
cmd = mgmt_pending_add(sk, MGMT_OP_SET_LOCAL_NAME, hdev, data, len);
|
|
if (!cmd) {
|
|
err = -ENOMEM;
|
|
goto failed;
|
|
}
|
|
|
|
memcpy(hci_cp.name, mgmt_cp->name, sizeof(hci_cp.name));
|
|
err = hci_send_cmd(hdev, HCI_OP_WRITE_LOCAL_NAME, sizeof(hci_cp),
|
|
&hci_cp);
|
|
if (err < 0)
|
|
mgmt_pending_remove(cmd);
|
|
|
|
failed:
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return err;
|
|
}
|
|
|
|
static int read_local_oob_data(struct sock *sk, u16 index)
|
|
{
|
|
struct hci_dev *hdev;
|
|
struct pending_cmd *cmd;
|
|
int err;
|
|
|
|
BT_DBG("hci%u", index);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_READ_LOCAL_OOB_DATA,
|
|
ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
if (!test_bit(HCI_UP, &hdev->flags)) {
|
|
err = cmd_status(sk, index, MGMT_OP_READ_LOCAL_OOB_DATA,
|
|
ENETDOWN);
|
|
goto unlock;
|
|
}
|
|
|
|
if (!(hdev->features[6] & LMP_SIMPLE_PAIR)) {
|
|
err = cmd_status(sk, index, MGMT_OP_READ_LOCAL_OOB_DATA,
|
|
EOPNOTSUPP);
|
|
goto unlock;
|
|
}
|
|
|
|
if (mgmt_pending_find(MGMT_OP_READ_LOCAL_OOB_DATA, hdev)) {
|
|
err = cmd_status(sk, index, MGMT_OP_READ_LOCAL_OOB_DATA, EBUSY);
|
|
goto unlock;
|
|
}
|
|
|
|
cmd = mgmt_pending_add(sk, MGMT_OP_READ_LOCAL_OOB_DATA, hdev, NULL, 0);
|
|
if (!cmd) {
|
|
err = -ENOMEM;
|
|
goto unlock;
|
|
}
|
|
|
|
err = hci_send_cmd(hdev, HCI_OP_READ_LOCAL_OOB_DATA, 0, NULL);
|
|
if (err < 0)
|
|
mgmt_pending_remove(cmd);
|
|
|
|
unlock:
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return err;
|
|
}
|
|
|
|
static int add_remote_oob_data(struct sock *sk, u16 index, unsigned char *data,
|
|
u16 len)
|
|
{
|
|
struct hci_dev *hdev;
|
|
struct mgmt_cp_add_remote_oob_data *cp = (void *) data;
|
|
int err;
|
|
|
|
BT_DBG("hci%u ", index);
|
|
|
|
if (len != sizeof(*cp))
|
|
return cmd_status(sk, index, MGMT_OP_ADD_REMOTE_OOB_DATA,
|
|
EINVAL);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_ADD_REMOTE_OOB_DATA,
|
|
ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
err = hci_add_remote_oob_data(hdev, &cp->bdaddr, cp->hash,
|
|
cp->randomizer);
|
|
if (err < 0)
|
|
err = cmd_status(sk, index, MGMT_OP_ADD_REMOTE_OOB_DATA, -err);
|
|
else
|
|
err = cmd_complete(sk, index, MGMT_OP_ADD_REMOTE_OOB_DATA, NULL,
|
|
0);
|
|
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return err;
|
|
}
|
|
|
|
static int remove_remote_oob_data(struct sock *sk, u16 index,
|
|
unsigned char *data, u16 len)
|
|
{
|
|
struct hci_dev *hdev;
|
|
struct mgmt_cp_remove_remote_oob_data *cp = (void *) data;
|
|
int err;
|
|
|
|
BT_DBG("hci%u ", index);
|
|
|
|
if (len != sizeof(*cp))
|
|
return cmd_status(sk, index, MGMT_OP_REMOVE_REMOTE_OOB_DATA,
|
|
EINVAL);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_REMOVE_REMOTE_OOB_DATA,
|
|
ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
err = hci_remove_remote_oob_data(hdev, &cp->bdaddr);
|
|
if (err < 0)
|
|
err = cmd_status(sk, index, MGMT_OP_REMOVE_REMOTE_OOB_DATA,
|
|
-err);
|
|
else
|
|
err = cmd_complete(sk, index, MGMT_OP_REMOVE_REMOTE_OOB_DATA,
|
|
NULL, 0);
|
|
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return err;
|
|
}
|
|
|
|
static int start_discovery(struct sock *sk, u16 index)
|
|
{
|
|
struct pending_cmd *cmd;
|
|
struct hci_dev *hdev;
|
|
int err;
|
|
|
|
BT_DBG("hci%u", index);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_START_DISCOVERY, ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
if (!test_bit(HCI_UP, &hdev->flags)) {
|
|
err = cmd_status(sk, index, MGMT_OP_START_DISCOVERY, ENETDOWN);
|
|
goto failed;
|
|
}
|
|
|
|
cmd = mgmt_pending_add(sk, MGMT_OP_START_DISCOVERY, hdev, NULL, 0);
|
|
if (!cmd) {
|
|
err = -ENOMEM;
|
|
goto failed;
|
|
}
|
|
|
|
err = hci_do_inquiry(hdev, INQUIRY_LEN_BREDR);
|
|
if (err < 0)
|
|
mgmt_pending_remove(cmd);
|
|
|
|
failed:
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return err;
|
|
}
|
|
|
|
static int stop_discovery(struct sock *sk, u16 index)
|
|
{
|
|
struct hci_dev *hdev;
|
|
struct pending_cmd *cmd;
|
|
int err;
|
|
|
|
BT_DBG("hci%u", index);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_STOP_DISCOVERY, ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
cmd = mgmt_pending_add(sk, MGMT_OP_STOP_DISCOVERY, hdev, NULL, 0);
|
|
if (!cmd) {
|
|
err = -ENOMEM;
|
|
goto failed;
|
|
}
|
|
|
|
err = hci_cancel_inquiry(hdev);
|
|
if (err < 0)
|
|
mgmt_pending_remove(cmd);
|
|
|
|
failed:
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return err;
|
|
}
|
|
|
|
static int block_device(struct sock *sk, u16 index, unsigned char *data,
|
|
u16 len)
|
|
{
|
|
struct hci_dev *hdev;
|
|
struct mgmt_cp_block_device *cp = (void *) data;
|
|
int err;
|
|
|
|
BT_DBG("hci%u", index);
|
|
|
|
if (len != sizeof(*cp))
|
|
return cmd_status(sk, index, MGMT_OP_BLOCK_DEVICE,
|
|
EINVAL);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_BLOCK_DEVICE,
|
|
ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
err = hci_blacklist_add(hdev, &cp->bdaddr);
|
|
if (err < 0)
|
|
err = cmd_status(sk, index, MGMT_OP_BLOCK_DEVICE, -err);
|
|
else
|
|
err = cmd_complete(sk, index, MGMT_OP_BLOCK_DEVICE,
|
|
NULL, 0);
|
|
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return err;
|
|
}
|
|
|
|
static int unblock_device(struct sock *sk, u16 index, unsigned char *data,
|
|
u16 len)
|
|
{
|
|
struct hci_dev *hdev;
|
|
struct mgmt_cp_unblock_device *cp = (void *) data;
|
|
int err;
|
|
|
|
BT_DBG("hci%u", index);
|
|
|
|
if (len != sizeof(*cp))
|
|
return cmd_status(sk, index, MGMT_OP_UNBLOCK_DEVICE,
|
|
EINVAL);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_UNBLOCK_DEVICE,
|
|
ENODEV);
|
|
|
|
hci_dev_lock_bh(hdev);
|
|
|
|
err = hci_blacklist_del(hdev, &cp->bdaddr);
|
|
|
|
if (err < 0)
|
|
err = cmd_status(sk, index, MGMT_OP_UNBLOCK_DEVICE, -err);
|
|
else
|
|
err = cmd_complete(sk, index, MGMT_OP_UNBLOCK_DEVICE,
|
|
NULL, 0);
|
|
|
|
hci_dev_unlock_bh(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return err;
|
|
}
|
|
|
|
static int set_fast_connectable(struct sock *sk, u16 index,
|
|
unsigned char *data, u16 len)
|
|
{
|
|
struct hci_dev *hdev;
|
|
struct mgmt_cp_set_fast_connectable *cp = (void *) data;
|
|
struct hci_cp_write_page_scan_activity acp;
|
|
u8 type;
|
|
int err;
|
|
|
|
BT_DBG("hci%u", index);
|
|
|
|
if (len != sizeof(*cp))
|
|
return cmd_status(sk, index, MGMT_OP_SET_FAST_CONNECTABLE,
|
|
EINVAL);
|
|
|
|
hdev = hci_dev_get(index);
|
|
if (!hdev)
|
|
return cmd_status(sk, index, MGMT_OP_SET_FAST_CONNECTABLE,
|
|
ENODEV);
|
|
|
|
hci_dev_lock(hdev);
|
|
|
|
if (cp->enable) {
|
|
type = PAGE_SCAN_TYPE_INTERLACED;
|
|
acp.interval = 0x0024; /* 22.5 msec page scan interval */
|
|
} else {
|
|
type = PAGE_SCAN_TYPE_STANDARD; /* default */
|
|
acp.interval = 0x0800; /* default 1.28 sec page scan */
|
|
}
|
|
|
|
acp.window = 0x0012; /* default 11.25 msec page scan window */
|
|
|
|
err = hci_send_cmd(hdev, HCI_OP_WRITE_PAGE_SCAN_ACTIVITY,
|
|
sizeof(acp), &acp);
|
|
if (err < 0) {
|
|
err = cmd_status(sk, index, MGMT_OP_SET_FAST_CONNECTABLE,
|
|
-err);
|
|
goto done;
|
|
}
|
|
|
|
err = hci_send_cmd(hdev, HCI_OP_WRITE_PAGE_SCAN_TYPE, 1, &type);
|
|
if (err < 0) {
|
|
err = cmd_status(sk, index, MGMT_OP_SET_FAST_CONNECTABLE,
|
|
-err);
|
|
goto done;
|
|
}
|
|
|
|
err = cmd_complete(sk, index, MGMT_OP_SET_FAST_CONNECTABLE,
|
|
NULL, 0);
|
|
done:
|
|
hci_dev_unlock(hdev);
|
|
hci_dev_put(hdev);
|
|
|
|
return err;
|
|
}
|
|
|
|
int mgmt_control(struct sock *sk, struct msghdr *msg, size_t msglen)
|
|
{
|
|
unsigned char *buf;
|
|
struct mgmt_hdr *hdr;
|
|
u16 opcode, index, len;
|
|
int err;
|
|
|
|
BT_DBG("got %zu bytes", msglen);
|
|
|
|
if (msglen < sizeof(*hdr))
|
|
return -EINVAL;
|
|
|
|
buf = kmalloc(msglen, GFP_KERNEL);
|
|
if (!buf)
|
|
return -ENOMEM;
|
|
|
|
if (memcpy_fromiovec(buf, msg->msg_iov, msglen)) {
|
|
err = -EFAULT;
|
|
goto done;
|
|
}
|
|
|
|
hdr = (struct mgmt_hdr *) buf;
|
|
opcode = get_unaligned_le16(&hdr->opcode);
|
|
index = get_unaligned_le16(&hdr->index);
|
|
len = get_unaligned_le16(&hdr->len);
|
|
|
|
if (len != msglen - sizeof(*hdr)) {
|
|
err = -EINVAL;
|
|
goto done;
|
|
}
|
|
|
|
switch (opcode) {
|
|
case MGMT_OP_READ_VERSION:
|
|
err = read_version(sk);
|
|
break;
|
|
case MGMT_OP_READ_INDEX_LIST:
|
|
err = read_index_list(sk);
|
|
break;
|
|
case MGMT_OP_READ_INFO:
|
|
err = read_controller_info(sk, index);
|
|
break;
|
|
case MGMT_OP_SET_POWERED:
|
|
err = set_powered(sk, index, buf + sizeof(*hdr), len);
|
|
break;
|
|
case MGMT_OP_SET_DISCOVERABLE:
|
|
err = set_discoverable(sk, index, buf + sizeof(*hdr), len);
|
|
break;
|
|
case MGMT_OP_SET_CONNECTABLE:
|
|
err = set_connectable(sk, index, buf + sizeof(*hdr), len);
|
|
break;
|
|
case MGMT_OP_SET_PAIRABLE:
|
|
err = set_pairable(sk, index, buf + sizeof(*hdr), len);
|
|
break;
|
|
case MGMT_OP_ADD_UUID:
|
|
err = add_uuid(sk, index, buf + sizeof(*hdr), len);
|
|
break;
|
|
case MGMT_OP_REMOVE_UUID:
|
|
err = remove_uuid(sk, index, buf + sizeof(*hdr), len);
|
|
break;
|
|
case MGMT_OP_SET_DEV_CLASS:
|
|
err = set_dev_class(sk, index, buf + sizeof(*hdr), len);
|
|
break;
|
|
case MGMT_OP_SET_SERVICE_CACHE:
|
|
err = set_service_cache(sk, index, buf + sizeof(*hdr), len);
|
|
break;
|
|
case MGMT_OP_LOAD_LINK_KEYS:
|
|
err = load_link_keys(sk, index, buf + sizeof(*hdr), len);
|
|
break;
|
|
case MGMT_OP_REMOVE_KEYS:
|
|
err = remove_keys(sk, index, buf + sizeof(*hdr), len);
|
|
break;
|
|
case MGMT_OP_DISCONNECT:
|
|
err = disconnect(sk, index, buf + sizeof(*hdr), len);
|
|
break;
|
|
case MGMT_OP_GET_CONNECTIONS:
|
|
err = get_connections(sk, index);
|
|
break;
|
|
case MGMT_OP_PIN_CODE_REPLY:
|
|
err = pin_code_reply(sk, index, buf + sizeof(*hdr), len);
|
|
break;
|
|
case MGMT_OP_PIN_CODE_NEG_REPLY:
|
|
err = pin_code_neg_reply(sk, index, buf + sizeof(*hdr), len);
|
|
break;
|
|
case MGMT_OP_SET_IO_CAPABILITY:
|
|
err = set_io_capability(sk, index, buf + sizeof(*hdr), len);
|
|
break;
|
|
case MGMT_OP_PAIR_DEVICE:
|
|
err = pair_device(sk, index, buf + sizeof(*hdr), len);
|
|
break;
|
|
case MGMT_OP_USER_CONFIRM_REPLY:
|
|
err = user_confirm_reply(sk, index, buf + sizeof(*hdr), len, 1);
|
|
break;
|
|
case MGMT_OP_USER_CONFIRM_NEG_REPLY:
|
|
err = user_confirm_reply(sk, index, buf + sizeof(*hdr), len, 0);
|
|
break;
|
|
case MGMT_OP_SET_LOCAL_NAME:
|
|
err = set_local_name(sk, index, buf + sizeof(*hdr), len);
|
|
break;
|
|
case MGMT_OP_READ_LOCAL_OOB_DATA:
|
|
err = read_local_oob_data(sk, index);
|
|
break;
|
|
case MGMT_OP_ADD_REMOTE_OOB_DATA:
|
|
err = add_remote_oob_data(sk, index, buf + sizeof(*hdr), len);
|
|
break;
|
|
case MGMT_OP_REMOVE_REMOTE_OOB_DATA:
|
|
err = remove_remote_oob_data(sk, index, buf + sizeof(*hdr),
|
|
len);
|
|
break;
|
|
case MGMT_OP_START_DISCOVERY:
|
|
err = start_discovery(sk, index);
|
|
break;
|
|
case MGMT_OP_STOP_DISCOVERY:
|
|
err = stop_discovery(sk, index);
|
|
break;
|
|
case MGMT_OP_BLOCK_DEVICE:
|
|
err = block_device(sk, index, buf + sizeof(*hdr), len);
|
|
break;
|
|
case MGMT_OP_UNBLOCK_DEVICE:
|
|
err = unblock_device(sk, index, buf + sizeof(*hdr), len);
|
|
break;
|
|
case MGMT_OP_SET_FAST_CONNECTABLE:
|
|
err = set_fast_connectable(sk, index, buf + sizeof(*hdr),
|
|
len);
|
|
break;
|
|
default:
|
|
BT_DBG("Unknown op %u", opcode);
|
|
err = cmd_status(sk, index, opcode, 0x01);
|
|
break;
|
|
}
|
|
|
|
if (err < 0)
|
|
goto done;
|
|
|
|
err = msglen;
|
|
|
|
done:
|
|
kfree(buf);
|
|
return err;
|
|
}
|
|
|
|
static void cmd_status_rsp(struct pending_cmd *cmd, void *data)
|
|
{
|
|
u8 *status = data;
|
|
|
|
cmd_status(cmd->sk, cmd->index, cmd->opcode, *status);
|
|
mgmt_pending_remove(cmd);
|
|
}
|
|
|
|
int mgmt_index_added(struct hci_dev *hdev)
|
|
{
|
|
return mgmt_event(MGMT_EV_INDEX_ADDED, hdev, NULL, 0, NULL);
|
|
}
|
|
|
|
int mgmt_index_removed(struct hci_dev *hdev)
|
|
{
|
|
u8 status = ENODEV;
|
|
|
|
mgmt_pending_foreach(0, hdev, cmd_status_rsp, &status);
|
|
|
|
return mgmt_event(MGMT_EV_INDEX_REMOVED, hdev, NULL, 0, NULL);
|
|
}
|
|
|
|
struct cmd_lookup {
|
|
u8 val;
|
|
struct sock *sk;
|
|
};
|
|
|
|
static void mode_rsp(struct pending_cmd *cmd, void *data)
|
|
{
|
|
struct mgmt_mode *cp = cmd->param;
|
|
struct cmd_lookup *match = data;
|
|
|
|
if (cp->val != match->val)
|
|
return;
|
|
|
|
send_mode_rsp(cmd->sk, cmd->opcode, cmd->index, cp->val);
|
|
|
|
list_del(&cmd->list);
|
|
|
|
if (match->sk == NULL) {
|
|
match->sk = cmd->sk;
|
|
sock_hold(match->sk);
|
|
}
|
|
|
|
mgmt_pending_free(cmd);
|
|
}
|
|
|
|
int mgmt_powered(struct hci_dev *hdev, u8 powered)
|
|
{
|
|
struct mgmt_mode ev;
|
|
struct cmd_lookup match = { powered, NULL };
|
|
int ret;
|
|
|
|
mgmt_pending_foreach(MGMT_OP_SET_POWERED, hdev, mode_rsp, &match);
|
|
|
|
if (!powered) {
|
|
u8 status = ENETDOWN;
|
|
mgmt_pending_foreach(0, hdev, cmd_status_rsp, &status);
|
|
}
|
|
|
|
ev.val = powered;
|
|
|
|
ret = mgmt_event(MGMT_EV_POWERED, hdev, &ev, sizeof(ev), match.sk);
|
|
|
|
if (match.sk)
|
|
sock_put(match.sk);
|
|
|
|
return ret;
|
|
}
|
|
|
|
int mgmt_discoverable(struct hci_dev *hdev, u8 discoverable)
|
|
{
|
|
struct mgmt_mode ev;
|
|
struct cmd_lookup match = { discoverable, NULL };
|
|
int ret;
|
|
|
|
mgmt_pending_foreach(MGMT_OP_SET_DISCOVERABLE, hdev, mode_rsp, &match);
|
|
|
|
ev.val = discoverable;
|
|
|
|
ret = mgmt_event(MGMT_EV_DISCOVERABLE, hdev, &ev, sizeof(ev),
|
|
match.sk);
|
|
|
|
if (match.sk)
|
|
sock_put(match.sk);
|
|
|
|
return ret;
|
|
}
|
|
|
|
int mgmt_connectable(struct hci_dev *hdev, u8 connectable)
|
|
{
|
|
struct mgmt_mode ev;
|
|
struct cmd_lookup match = { connectable, NULL };
|
|
int ret;
|
|
|
|
mgmt_pending_foreach(MGMT_OP_SET_CONNECTABLE, hdev, mode_rsp, &match);
|
|
|
|
ev.val = connectable;
|
|
|
|
ret = mgmt_event(MGMT_EV_CONNECTABLE, hdev, &ev, sizeof(ev), match.sk);
|
|
|
|
if (match.sk)
|
|
sock_put(match.sk);
|
|
|
|
return ret;
|
|
}
|
|
|
|
int mgmt_write_scan_failed(struct hci_dev *hdev, u8 scan, u8 status)
|
|
{
|
|
if (scan & SCAN_PAGE)
|
|
mgmt_pending_foreach(MGMT_OP_SET_CONNECTABLE, hdev,
|
|
cmd_status_rsp, &status);
|
|
|
|
if (scan & SCAN_INQUIRY)
|
|
mgmt_pending_foreach(MGMT_OP_SET_DISCOVERABLE, hdev,
|
|
cmd_status_rsp, &status);
|
|
|
|
return 0;
|
|
}
|
|
|
|
int mgmt_new_link_key(struct hci_dev *hdev, struct link_key *key,
|
|
u8 persistent)
|
|
{
|
|
struct mgmt_ev_new_link_key ev;
|
|
|
|
memset(&ev, 0, sizeof(ev));
|
|
|
|
ev.store_hint = persistent;
|
|
bacpy(&ev.key.bdaddr, &key->bdaddr);
|
|
ev.key.type = key->type;
|
|
memcpy(ev.key.val, key->val, 16);
|
|
ev.key.pin_len = key->pin_len;
|
|
|
|
return mgmt_event(MGMT_EV_NEW_LINK_KEY, hdev, &ev, sizeof(ev), NULL);
|
|
}
|
|
|
|
int mgmt_connected(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type)
|
|
{
|
|
struct mgmt_addr_info ev;
|
|
|
|
bacpy(&ev.bdaddr, bdaddr);
|
|
ev.type = link_to_mgmt(link_type);
|
|
|
|
return mgmt_event(MGMT_EV_CONNECTED, hdev, &ev, sizeof(ev), NULL);
|
|
}
|
|
|
|
static void disconnect_rsp(struct pending_cmd *cmd, void *data)
|
|
{
|
|
struct mgmt_cp_disconnect *cp = cmd->param;
|
|
struct sock **sk = data;
|
|
struct mgmt_rp_disconnect rp;
|
|
|
|
bacpy(&rp.bdaddr, &cp->bdaddr);
|
|
|
|
cmd_complete(cmd->sk, cmd->index, MGMT_OP_DISCONNECT, &rp, sizeof(rp));
|
|
|
|
*sk = cmd->sk;
|
|
sock_hold(*sk);
|
|
|
|
mgmt_pending_remove(cmd);
|
|
}
|
|
|
|
int mgmt_disconnected(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type)
|
|
{
|
|
struct mgmt_addr_info ev;
|
|
struct sock *sk = NULL;
|
|
int err;
|
|
|
|
mgmt_pending_foreach(MGMT_OP_DISCONNECT, hdev, disconnect_rsp, &sk);
|
|
|
|
bacpy(&ev.bdaddr, bdaddr);
|
|
ev.type = link_to_mgmt(type);
|
|
|
|
err = mgmt_event(MGMT_EV_DISCONNECTED, hdev, &ev, sizeof(ev), sk);
|
|
|
|
if (sk)
|
|
sock_put(sk);
|
|
|
|
return err;
|
|
}
|
|
|
|
int mgmt_disconnect_failed(struct hci_dev *hdev)
|
|
{
|
|
struct pending_cmd *cmd;
|
|
int err;
|
|
|
|
cmd = mgmt_pending_find(MGMT_OP_DISCONNECT, hdev);
|
|
if (!cmd)
|
|
return -ENOENT;
|
|
|
|
err = cmd_status(cmd->sk, hdev->id, MGMT_OP_DISCONNECT, EIO);
|
|
|
|
mgmt_pending_remove(cmd);
|
|
|
|
return err;
|
|
}
|
|
|
|
int mgmt_connect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type,
|
|
u8 status)
|
|
{
|
|
struct mgmt_ev_connect_failed ev;
|
|
|
|
bacpy(&ev.addr.bdaddr, bdaddr);
|
|
ev.addr.type = link_to_mgmt(type);
|
|
ev.status = status;
|
|
|
|
return mgmt_event(MGMT_EV_CONNECT_FAILED, hdev, &ev, sizeof(ev), NULL);
|
|
}
|
|
|
|
int mgmt_pin_code_request(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 secure)
|
|
{
|
|
struct mgmt_ev_pin_code_request ev;
|
|
|
|
bacpy(&ev.bdaddr, bdaddr);
|
|
ev.secure = secure;
|
|
|
|
return mgmt_event(MGMT_EV_PIN_CODE_REQUEST, hdev, &ev, sizeof(ev),
|
|
NULL);
|
|
}
|
|
|
|
int mgmt_pin_code_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
|
|
u8 status)
|
|
{
|
|
struct pending_cmd *cmd;
|
|
struct mgmt_rp_pin_code_reply rp;
|
|
int err;
|
|
|
|
cmd = mgmt_pending_find(MGMT_OP_PIN_CODE_REPLY, hdev);
|
|
if (!cmd)
|
|
return -ENOENT;
|
|
|
|
bacpy(&rp.bdaddr, bdaddr);
|
|
rp.status = status;
|
|
|
|
err = cmd_complete(cmd->sk, hdev->id, MGMT_OP_PIN_CODE_REPLY, &rp,
|
|
sizeof(rp));
|
|
|
|
mgmt_pending_remove(cmd);
|
|
|
|
return err;
|
|
}
|
|
|
|
int mgmt_pin_code_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
|
|
u8 status)
|
|
{
|
|
struct pending_cmd *cmd;
|
|
struct mgmt_rp_pin_code_reply rp;
|
|
int err;
|
|
|
|
cmd = mgmt_pending_find(MGMT_OP_PIN_CODE_NEG_REPLY, hdev);
|
|
if (!cmd)
|
|
return -ENOENT;
|
|
|
|
bacpy(&rp.bdaddr, bdaddr);
|
|
rp.status = status;
|
|
|
|
err = cmd_complete(cmd->sk, hdev->id, MGMT_OP_PIN_CODE_NEG_REPLY, &rp,
|
|
sizeof(rp));
|
|
|
|
mgmt_pending_remove(cmd);
|
|
|
|
return err;
|
|
}
|
|
|
|
int mgmt_user_confirm_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
|
|
__le32 value, u8 confirm_hint)
|
|
{
|
|
struct mgmt_ev_user_confirm_request ev;
|
|
|
|
BT_DBG("%s", hdev->name);
|
|
|
|
bacpy(&ev.bdaddr, bdaddr);
|
|
ev.confirm_hint = confirm_hint;
|
|
put_unaligned_le32(value, &ev.value);
|
|
|
|
return mgmt_event(MGMT_EV_USER_CONFIRM_REQUEST, hdev, &ev, sizeof(ev),
|
|
NULL);
|
|
}
|
|
|
|
static int confirm_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
|
|
u8 status, u8 opcode)
|
|
{
|
|
struct pending_cmd *cmd;
|
|
struct mgmt_rp_user_confirm_reply rp;
|
|
int err;
|
|
|
|
cmd = mgmt_pending_find(opcode, hdev);
|
|
if (!cmd)
|
|
return -ENOENT;
|
|
|
|
bacpy(&rp.bdaddr, bdaddr);
|
|
rp.status = status;
|
|
err = cmd_complete(cmd->sk, hdev->id, opcode, &rp, sizeof(rp));
|
|
|
|
mgmt_pending_remove(cmd);
|
|
|
|
return err;
|
|
}
|
|
|
|
int mgmt_user_confirm_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
|
|
u8 status)
|
|
{
|
|
return confirm_reply_complete(hdev, bdaddr, status,
|
|
MGMT_OP_USER_CONFIRM_REPLY);
|
|
}
|
|
|
|
int mgmt_user_confirm_neg_reply_complete(struct hci_dev *hdev,
|
|
bdaddr_t *bdaddr, u8 status)
|
|
{
|
|
return confirm_reply_complete(hdev, bdaddr, status,
|
|
MGMT_OP_USER_CONFIRM_NEG_REPLY);
|
|
}
|
|
|
|
int mgmt_auth_failed(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 status)
|
|
{
|
|
struct mgmt_ev_auth_failed ev;
|
|
|
|
bacpy(&ev.bdaddr, bdaddr);
|
|
ev.status = status;
|
|
|
|
return mgmt_event(MGMT_EV_AUTH_FAILED, hdev, &ev, sizeof(ev), NULL);
|
|
}
|
|
|
|
int mgmt_set_local_name_complete(struct hci_dev *hdev, u8 *name, u8 status)
|
|
{
|
|
struct pending_cmd *cmd;
|
|
struct mgmt_cp_set_local_name ev;
|
|
int err;
|
|
|
|
memset(&ev, 0, sizeof(ev));
|
|
memcpy(ev.name, name, HCI_MAX_NAME_LENGTH);
|
|
|
|
cmd = mgmt_pending_find(MGMT_OP_SET_LOCAL_NAME, hdev);
|
|
if (!cmd)
|
|
goto send_event;
|
|
|
|
if (status) {
|
|
err = cmd_status(cmd->sk, hdev->id, MGMT_OP_SET_LOCAL_NAME,
|
|
EIO);
|
|
goto failed;
|
|
}
|
|
|
|
update_eir(hdev);
|
|
|
|
err = cmd_complete(cmd->sk, hdev->id, MGMT_OP_SET_LOCAL_NAME, &ev,
|
|
sizeof(ev));
|
|
if (err < 0)
|
|
goto failed;
|
|
|
|
send_event:
|
|
err = mgmt_event(MGMT_EV_LOCAL_NAME_CHANGED, hdev, &ev, sizeof(ev),
|
|
cmd ? cmd->sk : NULL);
|
|
|
|
failed:
|
|
if (cmd)
|
|
mgmt_pending_remove(cmd);
|
|
return err;
|
|
}
|
|
|
|
int mgmt_read_local_oob_data_reply_complete(struct hci_dev *hdev, u8 *hash,
|
|
u8 *randomizer, u8 status)
|
|
{
|
|
struct pending_cmd *cmd;
|
|
int err;
|
|
|
|
BT_DBG("%s status %u", hdev->name, status);
|
|
|
|
cmd = mgmt_pending_find(MGMT_OP_READ_LOCAL_OOB_DATA, hdev);
|
|
if (!cmd)
|
|
return -ENOENT;
|
|
|
|
if (status) {
|
|
err = cmd_status(cmd->sk, hdev->id,
|
|
MGMT_OP_READ_LOCAL_OOB_DATA, EIO);
|
|
} else {
|
|
struct mgmt_rp_read_local_oob_data rp;
|
|
|
|
memcpy(rp.hash, hash, sizeof(rp.hash));
|
|
memcpy(rp.randomizer, randomizer, sizeof(rp.randomizer));
|
|
|
|
err = cmd_complete(cmd->sk, hdev->id,
|
|
MGMT_OP_READ_LOCAL_OOB_DATA,
|
|
&rp, sizeof(rp));
|
|
}
|
|
|
|
mgmt_pending_remove(cmd);
|
|
|
|
return err;
|
|
}
|
|
|
|
int mgmt_device_found(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type,
|
|
u8 *dev_class, s8 rssi, u8 *eir)
|
|
{
|
|
struct mgmt_ev_device_found ev;
|
|
|
|
memset(&ev, 0, sizeof(ev));
|
|
|
|
bacpy(&ev.addr.bdaddr, bdaddr);
|
|
ev.addr.type = link_to_mgmt(type);
|
|
ev.rssi = rssi;
|
|
|
|
if (eir)
|
|
memcpy(ev.eir, eir, sizeof(ev.eir));
|
|
|
|
if (dev_class)
|
|
memcpy(ev.dev_class, dev_class, sizeof(ev.dev_class));
|
|
|
|
return mgmt_event(MGMT_EV_DEVICE_FOUND, hdev, &ev, sizeof(ev), NULL);
|
|
}
|
|
|
|
int mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 *name)
|
|
{
|
|
struct mgmt_ev_remote_name ev;
|
|
|
|
memset(&ev, 0, sizeof(ev));
|
|
|
|
bacpy(&ev.bdaddr, bdaddr);
|
|
memcpy(ev.name, name, HCI_MAX_NAME_LENGTH);
|
|
|
|
return mgmt_event(MGMT_EV_REMOTE_NAME, hdev, &ev, sizeof(ev), NULL);
|
|
}
|
|
|
|
int mgmt_inquiry_failed(struct hci_dev *hdev, u8 status)
|
|
{
|
|
struct pending_cmd *cmd;
|
|
int err;
|
|
|
|
cmd = mgmt_pending_find(MGMT_OP_START_DISCOVERY, hdev);
|
|
if (!cmd)
|
|
return -ENOENT;
|
|
|
|
err = cmd_status(cmd->sk, hdev->id, cmd->opcode, status);
|
|
mgmt_pending_remove(cmd);
|
|
|
|
return err;
|
|
}
|
|
|
|
int mgmt_discovering(struct hci_dev *hdev, u8 discovering)
|
|
{
|
|
struct pending_cmd *cmd;
|
|
|
|
if (discovering)
|
|
cmd = mgmt_pending_find(MGMT_OP_START_DISCOVERY, hdev);
|
|
else
|
|
cmd = mgmt_pending_find(MGMT_OP_STOP_DISCOVERY, hdev);
|
|
|
|
if (cmd != NULL) {
|
|
cmd_complete(cmd->sk, hdev->id, cmd->opcode, NULL, 0);
|
|
mgmt_pending_remove(cmd);
|
|
}
|
|
|
|
return mgmt_event(MGMT_EV_DISCOVERING, hdev, &discovering,
|
|
sizeof(discovering), NULL);
|
|
}
|
|
|
|
int mgmt_device_blocked(struct hci_dev *hdev, bdaddr_t *bdaddr)
|
|
{
|
|
struct pending_cmd *cmd;
|
|
struct mgmt_ev_device_blocked ev;
|
|
|
|
cmd = mgmt_pending_find(MGMT_OP_BLOCK_DEVICE, hdev);
|
|
|
|
bacpy(&ev.bdaddr, bdaddr);
|
|
|
|
return mgmt_event(MGMT_EV_DEVICE_BLOCKED, hdev, &ev, sizeof(ev),
|
|
cmd ? cmd->sk : NULL);
|
|
}
|
|
|
|
int mgmt_device_unblocked(struct hci_dev *hdev, bdaddr_t *bdaddr)
|
|
{
|
|
struct pending_cmd *cmd;
|
|
struct mgmt_ev_device_unblocked ev;
|
|
|
|
cmd = mgmt_pending_find(MGMT_OP_UNBLOCK_DEVICE, hdev);
|
|
|
|
bacpy(&ev.bdaddr, bdaddr);
|
|
|
|
return mgmt_event(MGMT_EV_DEVICE_UNBLOCKED, hdev, &ev, sizeof(ev),
|
|
cmd ? cmd->sk : NULL);
|
|
}
|