12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072207320742075207620772078207920802081208220832084208520862087208820892090209120922093209420952096209720982099210021012102210321042105210621072108210921102111211221132114211521162117211821192120212121222123212421252126212721282129213021312132213321342135213621372138213921402141214221432144214521462147214821492150215121522153215421552156215721582159216021612162216321642165216621672168216921702171217221732174217521762177217821792180218121822183218421852186218721882189219021912192219321942195219621972198219922002201220222032204220522062207220822092210221122122213221422152216221722182219222022212222222322242225222622272228222922302231223222332234223522362237223822392240224122422243224422452246224722482249225022512252225322542255225622572258225922602261226222632264226522662267226822692270227122722273227422752276227722782279228022812282228322842285228622872288228922902291229222932294229522962297229822992300230123022303230423052306230723082309231023112312231323142315231623172318231923202321232223232324232523262327232823292330233123322333233423352336233723382339234023412342234323442345234623472348234923502351235223532354235523562357235823592360236123622363236423652366236723682369237023712372237323742375237623772378237923802381238223832384238523862387238823892390239123922393239423952396239723982399240024012402240324042405240624072408240924102411241224132414241524162417241824192420242124222423242424252426242724282429243024312432243324342435243624372438243924402441244224432444244524462447244824492450245124522453245424552456245724582459246024612462246324642465246624672468246924702471247224732474247524762477247824792480248124822483248424852486248724882489249024912492249324942495249624972498249925002501250225032504250525062507250825092510251125122513251425152516251725182519252025212522252325242525252625272528252925302531253225332534253525362537253825392540254125422543254425452546254725482549255025512552255325542555255625572558255925602561256225632564256525662567256825692570257125722573257425752576257725782579258025812582258325842585258625872588258925902591259225932594259525962597259825992600260126022603260426052606260726082609261026112612261326142615261626172618261926202621262226232624262526262627262826292630263126322633263426352636263726382639264026412642264326442645264626472648264926502651265226532654265526562657265826592660266126622663266426652666266726682669267026712672267326742675267626772678267926802681268226832684268526862687268826892690269126922693269426952696269726982699270027012702270327042705270627072708270927102711271227132714271527162717271827192720272127222723272427252726272727282729273027312732273327342735273627372738273927402741274227432744274527462747274827492750275127522753275427552756275727582759276027612762276327642765276627672768276927702771277227732774277527762777277827792780278127822783278427852786278727882789279027912792279327942795279627972798279928002801280228032804280528062807280828092810281128122813281428152816281728182819282028212822282328242825282628272828282928302831283228332834283528362837283828392840284128422843284428452846284728482849285028512852285328542855285628572858285928602861286228632864286528662867286828692870287128722873287428752876287728782879288028812882288328842885288628872888288928902891289228932894289528962897289828992900290129022903290429052906290729082909291029112912291329142915291629172918291929202921292229232924292529262927292829292930293129322933293429352936293729382939294029412942294329442945294629472948294929502951295229532954295529562957295829592960296129622963296429652966296729682969297029712972297329742975297629772978297929802981298229832984298529862987298829892990299129922993299429952996299729982999300030013002300330043005300630073008300930103011301230133014301530163017301830193020302130223023302430253026302730283029303030313032303330343035303630373038303930403041304230433044304530463047304830493050305130523053305430553056305730583059306030613062306330643065306630673068306930703071307230733074307530763077307830793080308130823083308430853086308730883089309030913092309330943095309630973098309931003101310231033104310531063107310831093110311131123113311431153116311731183119312031213122312331243125312631273128312931303131313231333134313531363137313831393140314131423143314431453146314731483149315031513152315331543155315631573158315931603161316231633164316531663167316831693170317131723173317431753176317731783179318031813182318331843185318631873188318931903191319231933194319531963197319831993200320132023203320432053206320732083209321032113212321332143215321632173218321932203221322232233224322532263227322832293230323132323233323432353236323732383239324032413242324332443245324632473248324932503251325232533254325532563257325832593260326132623263326432653266326732683269327032713272327332743275327632773278327932803281328232833284328532863287328832893290329132923293329432953296329732983299330033013302330333043305330633073308330933103311331233133314331533163317331833193320332133223323332433253326332733283329333033313332333333343335333633373338333933403341334233433344334533463347334833493350335133523353335433553356335733583359336033613362336333643365336633673368336933703371337233733374337533763377337833793380338133823383338433853386338733883389339033913392339333943395339633973398339934003401340234033404340534063407340834093410341134123413341434153416341734183419342034213422342334243425342634273428342934303431343234333434343534363437343834393440344134423443344434453446344734483449345034513452345334543455345634573458345934603461346234633464346534663467346834693470347134723473347434753476347734783479348034813482348334843485348634873488348934903491349234933494349534963497349834993500350135023503350435053506350735083509351035113512351335143515351635173518351935203521352235233524352535263527352835293530353135323533353435353536353735383539354035413542354335443545354635473548354935503551355235533554355535563557355835593560356135623563356435653566356735683569357035713572357335743575357635773578357935803581358235833584358535863587358835893590359135923593359435953596359735983599360036013602360336043605360636073608360936103611361236133614361536163617361836193620362136223623362436253626362736283629363036313632363336343635363636373638363936403641364236433644364536463647364836493650365136523653365436553656365736583659366036613662366336643665366636673668366936703671367236733674367536763677367836793680368136823683368436853686368736883689369036913692369336943695369636973698369937003701370237033704370537063707370837093710371137123713371437153716371737183719372037213722372337243725372637273728372937303731373237333734373537363737373837393740374137423743374437453746374737483749375037513752375337543755375637573758375937603761376237633764376537663767376837693770377137723773377437753776377737783779378037813782378337843785378637873788378937903791379237933794379537963797379837993800380138023803380438053806380738083809381038113812381338143815381638173818381938203821382238233824382538263827382838293830383138323833383438353836383738383839384038413842384338443845384638473848384938503851385238533854385538563857385838593860386138623863386438653866386738683869387038713872387338743875387638773878387938803881388238833884388538863887388838893890389138923893389438953896389738983899390039013902390339043905390639073908390939103911391239133914391539163917391839193920392139223923392439253926392739283929393039313932393339343935393639373938393939403941394239433944394539463947394839493950395139523953395439553956395739583959396039613962396339643965396639673968396939703971397239733974397539763977397839793980398139823983398439853986398739883989399039913992399339943995399639973998399940004001400240034004400540064007400840094010401140124013401440154016401740184019402040214022402340244025402640274028402940304031403240334034403540364037403840394040404140424043404440454046404740484049405040514052405340544055405640574058405940604061406240634064406540664067406840694070407140724073407440754076407740784079408040814082408340844085408640874088408940904091409240934094409540964097409840994100410141024103410441054106410741084109411041114112411341144115411641174118411941204121412241234124412541264127412841294130413141324133413441354136413741384139414041414142414341444145414641474148414941504151415241534154415541564157415841594160416141624163416441654166416741684169417041714172417341744175417641774178417941804181418241834184418541864187418841894190419141924193419441954196419741984199420042014202420342044205420642074208420942104211421242134214421542164217421842194220422142224223422442254226422742284229423042314232423342344235423642374238423942404241424242434244424542464247424842494250425142524253425442554256425742584259426042614262426342644265426642674268426942704271427242734274427542764277427842794280428142824283428442854286428742884289429042914292429342944295429642974298429943004301430243034304430543064307430843094310431143124313431443154316431743184319432043214322432343244325432643274328432943304331433243334334433543364337433843394340434143424343434443454346434743484349435043514352435343544355435643574358435943604361436243634364436543664367436843694370437143724373437443754376437743784379438043814382438343844385438643874388438943904391439243934394439543964397439843994400440144024403440444054406440744084409441044114412441344144415441644174418441944204421442244234424442544264427442844294430443144324433443444354436443744384439444044414442444344444445444644474448444944504451445244534454445544564457445844594460446144624463446444654466446744684469447044714472447344744475447644774478447944804481448244834484448544864487448844894490449144924493449444954496449744984499450045014502450345044505450645074508450945104511451245134514451545164517451845194520452145224523452445254526452745284529453045314532453345344535453645374538453945404541454245434544454545464547454845494550455145524553455445554556455745584559456045614562456345644565456645674568456945704571457245734574457545764577457845794580458145824583458445854586458745884589459045914592459345944595459645974598459946004601460246034604460546064607460846094610461146124613461446154616461746184619462046214622462346244625462646274628462946304631463246334634463546364637463846394640464146424643464446454646464746484649465046514652465346544655465646574658465946604661466246634664466546664667466846694670467146724673467446754676467746784679468046814682468346844685468646874688468946904691469246934694469546964697469846994700470147024703470447054706470747084709471047114712471347144715471647174718471947204721472247234724472547264727472847294730473147324733473447354736473747384739474047414742474347444745474647474748474947504751475247534754475547564757475847594760476147624763476447654766476747684769477047714772477347744775477647774778477947804781478247834784478547864787478847894790479147924793479447954796479747984799480048014802480348044805480648074808480948104811481248134814481548164817481848194820482148224823482448254826482748284829483048314832483348344835483648374838483948404841484248434844484548464847484848494850485148524853485448554856485748584859486048614862486348644865486648674868486948704871487248734874487548764877487848794880488148824883488448854886488748884889489048914892489348944895489648974898489949004901490249034904490549064907490849094910491149124913491449154916491749184919492049214922492349244925492649274928492949304931493249334934493549364937493849394940494149424943494449454946494749484949495049514952495349544955495649574958495949604961496249634964496549664967496849694970497149724973497449754976497749784979498049814982498349844985498649874988498949904991499249934994499549964997499849995000500150025003500450055006500750085009501050115012501350145015501650175018501950205021502250235024502550265027502850295030503150325033503450355036503750385039504050415042504350445045504650475048504950505051505250535054505550565057505850595060506150625063506450655066506750685069507050715072507350745075507650775078507950805081508250835084508550865087508850895090509150925093509450955096509750985099510051015102510351045105510651075108510951105111511251135114511551165117511851195120512151225123512451255126512751285129513051315132513351345135513651375138513951405141514251435144514551465147514851495150515151525153515451555156515751585159516051615162516351645165516651675168516951705171517251735174517551765177517851795180518151825183518451855186518751885189519051915192519351945195519651975198519952005201520252035204520552065207520852095210521152125213521452155216521752185219522052215222522352245225522652275228522952305231523252335234523552365237523852395240524152425243524452455246524752485249525052515252525352545255525652575258525952605261526252635264526552665267526852695270527152725273527452755276527752785279528052815282528352845285528652875288528952905291529252935294529552965297529852995300530153025303530453055306530753085309531053115312531353145315531653175318531953205321532253235324532553265327532853295330533153325333533453355336533753385339534053415342534353445345534653475348534953505351535253535354535553565357535853595360536153625363536453655366536753685369537053715372537353745375537653775378537953805381538253835384538553865387538853895390539153925393539453955396539753985399540054015402540354045405540654075408540954105411541254135414541554165417541854195420542154225423542454255426542754285429543054315432543354345435543654375438543954405441544254435444544554465447544854495450545154525453545454555456545754585459546054615462546354645465546654675468546954705471547254735474547554765477547854795480548154825483548454855486548754885489549054915492549354945495549654975498549955005501550255035504550555065507550855095510551155125513551455155516551755185519552055215522552355245525552655275528552955305531553255335534553555365537553855395540554155425543554455455546554755485549555055515552555355545555555655575558555955605561556255635564556555665567556855695570557155725573557455755576557755785579558055815582558355845585558655875588558955905591559255935594559555965597559855995600560156025603560456055606560756085609561056115612561356145615561656175618561956205621562256235624562556265627562856295630563156325633563456355636563756385639564056415642564356445645564656475648564956505651565256535654565556565657565856595660566156625663566456655666566756685669567056715672567356745675567656775678567956805681568256835684568556865687568856895690569156925693569456955696569756985699570057015702570357045705570657075708570957105711571257135714571557165717571857195720572157225723572457255726572757285729573057315732573357345735573657375738573957405741574257435744574557465747574857495750575157525753575457555756575757585759576057615762576357645765576657675768576957705771577257735774577557765777577857795780578157825783578457855786578757885789579057915792579357945795579657975798579958005801580258035804580558065807580858095810581158125813581458155816581758185819582058215822582358245825582658275828582958305831583258335834583558365837583858395840584158425843584458455846584758485849585058515852585358545855585658575858585958605861586258635864586558665867586858695870587158725873587458755876587758785879588058815882588358845885588658875888588958905891589258935894589558965897589858995900590159025903590459055906590759085909591059115912591359145915591659175918591959205921592259235924592559265927592859295930593159325933593459355936593759385939594059415942594359445945594659475948594959505951595259535954595559565957595859595960596159625963596459655966596759685969597059715972597359745975597659775978597959805981598259835984598559865987598859895990599159925993599459955996599759985999600060016002600360046005600660076008600960106011601260136014601560166017601860196020602160226023602460256026602760286029603060316032603360346035603660376038603960406041604260436044604560466047604860496050605160526053605460556056605760586059606060616062606360646065606660676068606960706071607260736074607560766077607860796080608160826083608460856086608760886089609060916092609360946095609660976098609961006101610261036104610561066107610861096110611161126113611461156116611761186119612061216122612361246125612661276128612961306131613261336134613561366137613861396140614161426143614461456146614761486149615061516152615361546155615661576158615961606161616261636164616561666167616861696170617161726173617461756176617761786179618061816182618361846185618661876188618961906191619261936194619561966197619861996200620162026203620462056206620762086209621062116212621362146215621662176218621962206221622262236224622562266227622862296230623162326233623462356236623762386239624062416242624362446245624662476248624962506251625262536254625562566257625862596260626162626263626462656266626762686269627062716272627362746275627662776278627962806281628262836284628562866287628862896290629162926293629462956296629762986299630063016302630363046305630663076308630963106311631263136314631563166317631863196320632163226323632463256326632763286329633063316332633363346335633663376338633963406341634263436344634563466347634863496350635163526353635463556356635763586359636063616362636363646365636663676368636963706371637263736374637563766377637863796380638163826383638463856386638763886389639063916392639363946395639663976398639964006401640264036404640564066407640864096410641164126413641464156416641764186419642064216422642364246425642664276428642964306431643264336434643564366437643864396440644164426443644464456446644764486449645064516452645364546455645664576458645964606461646264636464646564666467646864696470647164726473647464756476647764786479648064816482648364846485648664876488648964906491649264936494649564966497649864996500650165026503650465056506650765086509651065116512651365146515651665176518651965206521652265236524652565266527652865296530653165326533653465356536653765386539654065416542654365446545654665476548654965506551655265536554655565566557655865596560656165626563656465656566656765686569657065716572657365746575657665776578657965806581658265836584658565866587658865896590659165926593659465956596659765986599660066016602660366046605660666076608660966106611661266136614661566166617661866196620662166226623662466256626662766286629663066316632663366346635663666376638663966406641664266436644664566466647664866496650665166526653665466556656665766586659666066616662666366646665666666676668666966706671667266736674667566766677667866796680668166826683668466856686668766886689669066916692669366946695669666976698669967006701670267036704670567066707670867096710671167126713671467156716671767186719672067216722672367246725672667276728672967306731673267336734673567366737673867396740674167426743674467456746674767486749675067516752675367546755675667576758675967606761676267636764676567666767676867696770677167726773677467756776677767786779678067816782678367846785678667876788678967906791679267936794679567966797679867996800680168026803680468056806680768086809681068116812681368146815681668176818681968206821682268236824682568266827682868296830683168326833683468356836683768386839684068416842684368446845684668476848684968506851685268536854685568566857685868596860686168626863686468656866686768686869687068716872687368746875687668776878687968806881688268836884688568866887688868896890689168926893689468956896689768986899690069016902690369046905690669076908690969106911691269136914691569166917691869196920692169226923692469256926692769286929693069316932693369346935693669376938693969406941694269436944694569466947694869496950695169526953695469556956695769586959696069616962696369646965696669676968696969706971697269736974697569766977697869796980698169826983698469856986698769886989699069916992699369946995699669976998699970007001700270037004700570067007700870097010701170127013701470157016701770187019702070217022702370247025702670277028702970307031703270337034703570367037703870397040704170427043704470457046704770487049705070517052705370547055705670577058705970607061706270637064706570667067706870697070707170727073707470757076707770787079708070817082708370847085708670877088708970907091709270937094709570967097709870997100710171027103710471057106710771087109711071117112711371147115711671177118711971207121712271237124712571267127712871297130713171327133713471357136713771387139714071417142714371447145714671477148714971507151715271537154715571567157715871597160716171627163716471657166716771687169717071717172717371747175717671777178717971807181718271837184718571867187718871897190719171927193719471957196719771987199720072017202720372047205720672077208720972107211721272137214721572167217721872197220722172227223722472257226722772287229723072317232723372347235723672377238723972407241724272437244724572467247724872497250725172527253725472557256725772587259726072617262726372647265726672677268726972707271727272737274727572767277727872797280728172827283728472857286728772887289729072917292729372947295729672977298729973007301730273037304730573067307730873097310731173127313731473157316731773187319732073217322732373247325732673277328732973307331733273337334733573367337733873397340734173427343734473457346734773487349735073517352735373547355735673577358735973607361736273637364736573667367736873697370737173727373737473757376737773787379738073817382738373847385738673877388738973907391739273937394739573967397739873997400740174027403740474057406740774087409741074117412741374147415741674177418741974207421742274237424742574267427742874297430743174327433743474357436743774387439744074417442744374447445744674477448744974507451745274537454745574567457745874597460746174627463746474657466746774687469747074717472747374747475747674777478747974807481748274837484748574867487748874897490749174927493749474957496749774987499750075017502750375047505750675077508750975107511751275137514751575167517751875197520752175227523752475257526752775287529753075317532753375347535753675377538753975407541754275437544754575467547754875497550755175527553755475557556755775587559756075617562756375647565756675677568756975707571757275737574757575767577757875797580758175827583758475857586758775887589759075917592759375947595759675977598759976007601760276037604760576067607760876097610761176127613761476157616761776187619762076217622762376247625762676277628762976307631763276337634763576367637763876397640764176427643764476457646764776487649765076517652765376547655765676577658765976607661766276637664766576667667766876697670767176727673767476757676767776787679768076817682768376847685768676877688768976907691769276937694769576967697769876997700770177027703770477057706770777087709771077117712771377147715771677177718771977207721772277237724772577267727772877297730773177327733773477357736773777387739774077417742774377447745774677477748774977507751775277537754775577567757775877597760776177627763776477657766776777687769777077717772777377747775777677777778777977807781778277837784778577867787778877897790779177927793779477957796779777987799780078017802780378047805780678077808780978107811781278137814781578167817781878197820782178227823782478257826782778287829783078317832783378347835783678377838783978407841784278437844784578467847784878497850785178527853785478557856785778587859786078617862786378647865786678677868786978707871787278737874787578767877787878797880788178827883788478857886788778887889789078917892789378947895789678977898789979007901790279037904790579067907790879097910791179127913791479157916791779187919792079217922792379247925792679277928792979307931793279337934793579367937793879397940794179427943794479457946794779487949795079517952795379547955795679577958795979607961796279637964796579667967796879697970797179727973797479757976797779787979798079817982798379847985798679877988798979907991799279937994799579967997799879998000800180028003800480058006800780088009801080118012801380148015801680178018801980208021802280238024802580268027802880298030803180328033803480358036803780388039804080418042804380448045804680478048804980508051805280538054805580568057805880598060806180628063806480658066806780688069807080718072807380748075807680778078807980808081808280838084808580868087808880898090809180928093809480958096809780988099810081018102810381048105810681078108810981108111811281138114811581168117811881198120812181228123812481258126812781288129813081318132813381348135813681378138813981408141814281438144814581468147814881498150815181528153815481558156815781588159816081618162816381648165816681678168816981708171817281738174817581768177817881798180818181828183818481858186818781888189819081918192819381948195819681978198819982008201820282038204820582068207820882098210821182128213821482158216821782188219822082218222822382248225822682278228822982308231823282338234823582368237823882398240824182428243824482458246824782488249825082518252825382548255825682578258825982608261826282638264826582668267826882698270827182728273827482758276827782788279828082818282828382848285828682878288828982908291829282938294829582968297829882998300830183028303830483058306830783088309831083118312831383148315831683178318831983208321832283238324832583268327832883298330833183328333833483358336833783388339834083418342834383448345834683478348834983508351835283538354835583568357835883598360836183628363836483658366836783688369837083718372837383748375837683778378837983808381838283838384838583868387838883898390839183928393839483958396839783988399840084018402840384048405840684078408840984108411841284138414841584168417841884198420842184228423842484258426842784288429843084318432843384348435843684378438843984408441844284438444844584468447844884498450845184528453845484558456845784588459846084618462846384648465846684678468846984708471847284738474847584768477847884798480848184828483848484858486848784888489849084918492849384948495849684978498849985008501850285038504850585068507850885098510851185128513851485158516851785188519852085218522852385248525852685278528852985308531853285338534853585368537853885398540854185428543854485458546854785488549855085518552855385548555855685578558855985608561856285638564856585668567856885698570857185728573857485758576857785788579858085818582858385848585858685878588858985908591859285938594859585968597859885998600860186028603860486058606860786088609861086118612861386148615861686178618861986208621862286238624862586268627862886298630863186328633863486358636863786388639864086418642864386448645864686478648864986508651865286538654 |
- /*
- BlueZ - Bluetooth protocol stack for Linux
- Copyright (C) 2010 Nokia Corporation
- Copyright (C) 2011-2012 Intel Corporation
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License version 2 as
- published by the Free Software Foundation;
- THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
- OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
- IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
- CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
- WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
- ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
- OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
- ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
- COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
- SOFTWARE IS DISCLAIMED.
- */
- /* Bluetooth HCI Management interface */
- #include <linux/module.h>
- #include <asm/unaligned.h>
- #include <net/bluetooth/bluetooth.h>
- #include <net/bluetooth/hci_core.h>
- #include <net/bluetooth/hci_sock.h>
- #include <net/bluetooth/l2cap.h>
- #include <net/bluetooth/mgmt.h>
- #include "hci_request.h"
- #include "smp.h"
- #include "mgmt_util.h"
- #define MGMT_VERSION 1
- #define MGMT_REVISION 10
- static const u16 mgmt_commands[] = {
- MGMT_OP_READ_INDEX_LIST,
- MGMT_OP_READ_INFO,
- MGMT_OP_SET_POWERED,
- MGMT_OP_SET_DISCOVERABLE,
- MGMT_OP_SET_CONNECTABLE,
- MGMT_OP_SET_FAST_CONNECTABLE,
- MGMT_OP_SET_BONDABLE,
- MGMT_OP_SET_LINK_SECURITY,
- MGMT_OP_SET_SSP,
- MGMT_OP_SET_HS,
- MGMT_OP_SET_LE,
- MGMT_OP_SET_DEV_CLASS,
- MGMT_OP_SET_LOCAL_NAME,
- MGMT_OP_ADD_UUID,
- MGMT_OP_REMOVE_UUID,
- MGMT_OP_LOAD_LINK_KEYS,
- MGMT_OP_LOAD_LONG_TERM_KEYS,
- MGMT_OP_DISCONNECT,
- MGMT_OP_GET_CONNECTIONS,
- MGMT_OP_PIN_CODE_REPLY,
- MGMT_OP_PIN_CODE_NEG_REPLY,
- MGMT_OP_SET_IO_CAPABILITY,
- MGMT_OP_PAIR_DEVICE,
- MGMT_OP_CANCEL_PAIR_DEVICE,
- MGMT_OP_UNPAIR_DEVICE,
- MGMT_OP_USER_CONFIRM_REPLY,
- MGMT_OP_USER_CONFIRM_NEG_REPLY,
- MGMT_OP_USER_PASSKEY_REPLY,
- MGMT_OP_USER_PASSKEY_NEG_REPLY,
- MGMT_OP_READ_LOCAL_OOB_DATA,
- MGMT_OP_ADD_REMOTE_OOB_DATA,
- MGMT_OP_REMOVE_REMOTE_OOB_DATA,
- MGMT_OP_START_DISCOVERY,
- MGMT_OP_STOP_DISCOVERY,
- MGMT_OP_CONFIRM_NAME,
- MGMT_OP_BLOCK_DEVICE,
- MGMT_OP_UNBLOCK_DEVICE,
- MGMT_OP_SET_DEVICE_ID,
- MGMT_OP_SET_ADVERTISING,
- MGMT_OP_SET_BREDR,
- MGMT_OP_SET_STATIC_ADDRESS,
- MGMT_OP_SET_SCAN_PARAMS,
- MGMT_OP_SET_SECURE_CONN,
- MGMT_OP_SET_DEBUG_KEYS,
- MGMT_OP_SET_PRIVACY,
- MGMT_OP_LOAD_IRKS,
- MGMT_OP_GET_CONN_INFO,
- MGMT_OP_GET_CLOCK_INFO,
- MGMT_OP_ADD_DEVICE,
- MGMT_OP_REMOVE_DEVICE,
- MGMT_OP_LOAD_CONN_PARAM,
- MGMT_OP_READ_UNCONF_INDEX_LIST,
- MGMT_OP_READ_CONFIG_INFO,
- MGMT_OP_SET_EXTERNAL_CONFIG,
- MGMT_OP_SET_PUBLIC_ADDRESS,
- MGMT_OP_START_SERVICE_DISCOVERY,
- MGMT_OP_READ_LOCAL_OOB_EXT_DATA,
- MGMT_OP_READ_EXT_INDEX_LIST,
- MGMT_OP_READ_ADV_FEATURES,
- MGMT_OP_ADD_ADVERTISING,
- MGMT_OP_REMOVE_ADVERTISING,
- };
- static const u16 mgmt_events[] = {
- MGMT_EV_CONTROLLER_ERROR,
- MGMT_EV_INDEX_ADDED,
- MGMT_EV_INDEX_REMOVED,
- MGMT_EV_NEW_SETTINGS,
- MGMT_EV_CLASS_OF_DEV_CHANGED,
- MGMT_EV_LOCAL_NAME_CHANGED,
- MGMT_EV_NEW_LINK_KEY,
- MGMT_EV_NEW_LONG_TERM_KEY,
- MGMT_EV_DEVICE_CONNECTED,
- MGMT_EV_DEVICE_DISCONNECTED,
- MGMT_EV_CONNECT_FAILED,
- MGMT_EV_PIN_CODE_REQUEST,
- MGMT_EV_USER_CONFIRM_REQUEST,
- MGMT_EV_USER_PASSKEY_REQUEST,
- MGMT_EV_AUTH_FAILED,
- MGMT_EV_DEVICE_FOUND,
- MGMT_EV_DISCOVERING,
- MGMT_EV_DEVICE_BLOCKED,
- MGMT_EV_DEVICE_UNBLOCKED,
- MGMT_EV_DEVICE_UNPAIRED,
- MGMT_EV_PASSKEY_NOTIFY,
- MGMT_EV_NEW_IRK,
- MGMT_EV_NEW_CSRK,
- MGMT_EV_DEVICE_ADDED,
- MGMT_EV_DEVICE_REMOVED,
- MGMT_EV_NEW_CONN_PARAM,
- MGMT_EV_UNCONF_INDEX_ADDED,
- MGMT_EV_UNCONF_INDEX_REMOVED,
- MGMT_EV_NEW_CONFIG_OPTIONS,
- MGMT_EV_EXT_INDEX_ADDED,
- MGMT_EV_EXT_INDEX_REMOVED,
- MGMT_EV_LOCAL_OOB_DATA_UPDATED,
- MGMT_EV_ADVERTISING_ADDED,
- MGMT_EV_ADVERTISING_REMOVED,
- };
- static const u16 mgmt_untrusted_commands[] = {
- MGMT_OP_READ_INDEX_LIST,
- MGMT_OP_READ_INFO,
- MGMT_OP_READ_UNCONF_INDEX_LIST,
- MGMT_OP_READ_CONFIG_INFO,
- MGMT_OP_READ_EXT_INDEX_LIST,
- };
- static const u16 mgmt_untrusted_events[] = {
- MGMT_EV_INDEX_ADDED,
- MGMT_EV_INDEX_REMOVED,
- MGMT_EV_NEW_SETTINGS,
- MGMT_EV_CLASS_OF_DEV_CHANGED,
- MGMT_EV_LOCAL_NAME_CHANGED,
- MGMT_EV_UNCONF_INDEX_ADDED,
- MGMT_EV_UNCONF_INDEX_REMOVED,
- MGMT_EV_NEW_CONFIG_OPTIONS,
- MGMT_EV_EXT_INDEX_ADDED,
- MGMT_EV_EXT_INDEX_REMOVED,
- };
- #define CACHE_TIMEOUT msecs_to_jiffies(2 * 1000)
- #define ZERO_KEY "\x00\x00\x00\x00\x00\x00\x00\x00" \
- "\x00\x00\x00\x00\x00\x00\x00\x00"
- /* HCI to MGMT error code conversion table */
- static u8 mgmt_status_table[] = {
- MGMT_STATUS_SUCCESS,
- MGMT_STATUS_UNKNOWN_COMMAND, /* Unknown Command */
- MGMT_STATUS_NOT_CONNECTED, /* No Connection */
- MGMT_STATUS_FAILED, /* Hardware Failure */
- MGMT_STATUS_CONNECT_FAILED, /* Page Timeout */
- MGMT_STATUS_AUTH_FAILED, /* Authentication Failed */
- MGMT_STATUS_AUTH_FAILED, /* PIN or Key Missing */
- MGMT_STATUS_NO_RESOURCES, /* Memory Full */
- MGMT_STATUS_TIMEOUT, /* Connection Timeout */
- MGMT_STATUS_NO_RESOURCES, /* Max Number of Connections */
- MGMT_STATUS_NO_RESOURCES, /* Max Number of SCO Connections */
- MGMT_STATUS_ALREADY_CONNECTED, /* ACL Connection Exists */
- MGMT_STATUS_BUSY, /* Command Disallowed */
- MGMT_STATUS_NO_RESOURCES, /* Rejected Limited Resources */
- MGMT_STATUS_REJECTED, /* Rejected Security */
- MGMT_STATUS_REJECTED, /* Rejected Personal */
- MGMT_STATUS_TIMEOUT, /* Host Timeout */
- MGMT_STATUS_NOT_SUPPORTED, /* Unsupported Feature */
- MGMT_STATUS_INVALID_PARAMS, /* Invalid Parameters */
- MGMT_STATUS_DISCONNECTED, /* OE User Ended Connection */
- MGMT_STATUS_NO_RESOURCES, /* OE Low Resources */
- MGMT_STATUS_DISCONNECTED, /* OE Power Off */
- MGMT_STATUS_DISCONNECTED, /* Connection Terminated */
- MGMT_STATUS_BUSY, /* Repeated Attempts */
- MGMT_STATUS_REJECTED, /* Pairing Not Allowed */
- MGMT_STATUS_FAILED, /* Unknown LMP PDU */
- MGMT_STATUS_NOT_SUPPORTED, /* Unsupported Remote Feature */
- MGMT_STATUS_REJECTED, /* SCO Offset Rejected */
- MGMT_STATUS_REJECTED, /* SCO Interval Rejected */
- MGMT_STATUS_REJECTED, /* Air Mode Rejected */
- MGMT_STATUS_INVALID_PARAMS, /* Invalid LMP Parameters */
- MGMT_STATUS_FAILED, /* Unspecified Error */
- MGMT_STATUS_NOT_SUPPORTED, /* Unsupported LMP Parameter Value */
- MGMT_STATUS_FAILED, /* Role Change Not Allowed */
- MGMT_STATUS_TIMEOUT, /* LMP Response Timeout */
- MGMT_STATUS_FAILED, /* LMP Error Transaction Collision */
- MGMT_STATUS_FAILED, /* LMP PDU Not Allowed */
- MGMT_STATUS_REJECTED, /* Encryption Mode Not Accepted */
- MGMT_STATUS_FAILED, /* Unit Link Key Used */
- MGMT_STATUS_NOT_SUPPORTED, /* QoS Not Supported */
- MGMT_STATUS_TIMEOUT, /* Instant Passed */
- MGMT_STATUS_NOT_SUPPORTED, /* Pairing Not Supported */
- MGMT_STATUS_FAILED, /* Transaction Collision */
- MGMT_STATUS_INVALID_PARAMS, /* Unacceptable Parameter */
- MGMT_STATUS_REJECTED, /* QoS Rejected */
- MGMT_STATUS_NOT_SUPPORTED, /* Classification Not Supported */
- MGMT_STATUS_REJECTED, /* Insufficient Security */
- MGMT_STATUS_INVALID_PARAMS, /* Parameter Out Of Range */
- MGMT_STATUS_BUSY, /* Role Switch Pending */
- MGMT_STATUS_FAILED, /* Slot Violation */
- MGMT_STATUS_FAILED, /* Role Switch Failed */
- MGMT_STATUS_INVALID_PARAMS, /* EIR Too Large */
- MGMT_STATUS_NOT_SUPPORTED, /* Simple Pairing Not Supported */
- MGMT_STATUS_BUSY, /* Host Busy Pairing */
- MGMT_STATUS_REJECTED, /* Rejected, No Suitable Channel */
- MGMT_STATUS_BUSY, /* Controller Busy */
- MGMT_STATUS_INVALID_PARAMS, /* Unsuitable Connection Interval */
- MGMT_STATUS_TIMEOUT, /* Directed Advertising Timeout */
- MGMT_STATUS_AUTH_FAILED, /* Terminated Due to MIC Failure */
- MGMT_STATUS_CONNECT_FAILED, /* Connection Establishment Failed */
- MGMT_STATUS_CONNECT_FAILED, /* MAC Connection Failed */
- };
- static u8 mgmt_status(u8 hci_status)
- {
- if (hci_status < ARRAY_SIZE(mgmt_status_table))
- return mgmt_status_table[hci_status];
- return MGMT_STATUS_FAILED;
- }
- static int mgmt_index_event(u16 event, struct hci_dev *hdev, void *data,
- u16 len, int flag)
- {
- return mgmt_send_event(event, hdev, HCI_CHANNEL_CONTROL, data, len,
- flag, NULL);
- }
- static int mgmt_limited_event(u16 event, struct hci_dev *hdev, void *data,
- u16 len, int flag, struct sock *skip_sk)
- {
- return mgmt_send_event(event, hdev, HCI_CHANNEL_CONTROL, data, len,
- flag, skip_sk);
- }
- static int mgmt_generic_event(u16 event, struct hci_dev *hdev, void *data,
- u16 len, struct sock *skip_sk)
- {
- return mgmt_send_event(event, hdev, HCI_CHANNEL_CONTROL, data, len,
- HCI_MGMT_GENERIC_EVENTS, skip_sk);
- }
- static int mgmt_event(u16 event, struct hci_dev *hdev, void *data, u16 len,
- struct sock *skip_sk)
- {
- return mgmt_send_event(event, hdev, HCI_CHANNEL_CONTROL, data, len,
- HCI_SOCK_TRUSTED, skip_sk);
- }
- static u8 le_addr_type(u8 mgmt_addr_type)
- {
- if (mgmt_addr_type == BDADDR_LE_PUBLIC)
- return ADDR_LE_DEV_PUBLIC;
- else
- return ADDR_LE_DEV_RANDOM;
- }
- static int read_version(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 data_len)
- {
- struct mgmt_rp_read_version rp;
- BT_DBG("sock %p", sk);
- rp.version = MGMT_VERSION;
- rp.revision = cpu_to_le16(MGMT_REVISION);
- return mgmt_cmd_complete(sk, MGMT_INDEX_NONE, MGMT_OP_READ_VERSION, 0,
- &rp, sizeof(rp));
- }
- static int read_commands(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 data_len)
- {
- struct mgmt_rp_read_commands *rp;
- u16 num_commands, num_events;
- size_t rp_size;
- int i, err;
- BT_DBG("sock %p", sk);
- if (hci_sock_test_flag(sk, HCI_SOCK_TRUSTED)) {
- num_commands = ARRAY_SIZE(mgmt_commands);
- num_events = ARRAY_SIZE(mgmt_events);
- } else {
- num_commands = ARRAY_SIZE(mgmt_untrusted_commands);
- num_events = ARRAY_SIZE(mgmt_untrusted_events);
- }
- rp_size = sizeof(*rp) + ((num_commands + num_events) * sizeof(u16));
- rp = kmalloc(rp_size, GFP_KERNEL);
- if (!rp)
- return -ENOMEM;
- rp->num_commands = cpu_to_le16(num_commands);
- rp->num_events = cpu_to_le16(num_events);
- if (hci_sock_test_flag(sk, HCI_SOCK_TRUSTED)) {
- __le16 *opcode = rp->opcodes;
- for (i = 0; i < num_commands; i++, opcode++)
- put_unaligned_le16(mgmt_commands[i], opcode);
- for (i = 0; i < num_events; i++, opcode++)
- put_unaligned_le16(mgmt_events[i], opcode);
- } else {
- __le16 *opcode = rp->opcodes;
- for (i = 0; i < num_commands; i++, opcode++)
- put_unaligned_le16(mgmt_untrusted_commands[i], opcode);
- for (i = 0; i < num_events; i++, opcode++)
- put_unaligned_le16(mgmt_untrusted_events[i], opcode);
- }
- err = mgmt_cmd_complete(sk, MGMT_INDEX_NONE, MGMT_OP_READ_COMMANDS, 0,
- rp, rp_size);
- kfree(rp);
- return err;
- }
- static int read_index_list(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 data_len)
- {
- struct mgmt_rp_read_index_list *rp;
- struct hci_dev *d;
- size_t rp_len;
- u16 count;
- int err;
- BT_DBG("sock %p", sk);
- read_lock(&hci_dev_list_lock);
- count = 0;
- list_for_each_entry(d, &hci_dev_list, list) {
- if (d->dev_type == HCI_BREDR &&
- !hci_dev_test_flag(d, HCI_UNCONFIGURED))
- count++;
- }
- rp_len = sizeof(*rp) + (2 * count);
- rp = kmalloc(rp_len, GFP_ATOMIC);
- if (!rp) {
- read_unlock(&hci_dev_list_lock);
- return -ENOMEM;
- }
- count = 0;
- list_for_each_entry(d, &hci_dev_list, list) {
- if (hci_dev_test_flag(d, HCI_SETUP) ||
- hci_dev_test_flag(d, HCI_CONFIG) ||
- hci_dev_test_flag(d, HCI_USER_CHANNEL))
- continue;
- /* Devices marked as raw-only are neither configured
- * nor unconfigured controllers.
- */
- if (test_bit(HCI_QUIRK_RAW_DEVICE, &d->quirks))
- continue;
- if (d->dev_type == HCI_BREDR &&
- !hci_dev_test_flag(d, HCI_UNCONFIGURED)) {
- rp->index[count++] = cpu_to_le16(d->id);
- BT_DBG("Added hci%u", d->id);
- }
- }
- rp->num_controllers = cpu_to_le16(count);
- rp_len = sizeof(*rp) + (2 * count);
- read_unlock(&hci_dev_list_lock);
- err = mgmt_cmd_complete(sk, MGMT_INDEX_NONE, MGMT_OP_READ_INDEX_LIST,
- 0, rp, rp_len);
- kfree(rp);
- return err;
- }
- static int read_unconf_index_list(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 data_len)
- {
- struct mgmt_rp_read_unconf_index_list *rp;
- struct hci_dev *d;
- size_t rp_len;
- u16 count;
- int err;
- BT_DBG("sock %p", sk);
- read_lock(&hci_dev_list_lock);
- count = 0;
- list_for_each_entry(d, &hci_dev_list, list) {
- if (d->dev_type == HCI_BREDR &&
- hci_dev_test_flag(d, HCI_UNCONFIGURED))
- count++;
- }
- rp_len = sizeof(*rp) + (2 * count);
- rp = kmalloc(rp_len, GFP_ATOMIC);
- if (!rp) {
- read_unlock(&hci_dev_list_lock);
- return -ENOMEM;
- }
- count = 0;
- list_for_each_entry(d, &hci_dev_list, list) {
- if (hci_dev_test_flag(d, HCI_SETUP) ||
- hci_dev_test_flag(d, HCI_CONFIG) ||
- hci_dev_test_flag(d, HCI_USER_CHANNEL))
- continue;
- /* Devices marked as raw-only are neither configured
- * nor unconfigured controllers.
- */
- if (test_bit(HCI_QUIRK_RAW_DEVICE, &d->quirks))
- continue;
- if (d->dev_type == HCI_BREDR &&
- hci_dev_test_flag(d, HCI_UNCONFIGURED)) {
- rp->index[count++] = cpu_to_le16(d->id);
- BT_DBG("Added hci%u", d->id);
- }
- }
- rp->num_controllers = cpu_to_le16(count);
- rp_len = sizeof(*rp) + (2 * count);
- read_unlock(&hci_dev_list_lock);
- err = mgmt_cmd_complete(sk, MGMT_INDEX_NONE,
- MGMT_OP_READ_UNCONF_INDEX_LIST, 0, rp, rp_len);
- kfree(rp);
- return err;
- }
- static int read_ext_index_list(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 data_len)
- {
- struct mgmt_rp_read_ext_index_list *rp;
- struct hci_dev *d;
- size_t rp_len;
- u16 count;
- int err;
- BT_DBG("sock %p", sk);
- read_lock(&hci_dev_list_lock);
- count = 0;
- list_for_each_entry(d, &hci_dev_list, list) {
- if (d->dev_type == HCI_BREDR || d->dev_type == HCI_AMP)
- count++;
- }
- rp_len = sizeof(*rp) + (sizeof(rp->entry[0]) * count);
- rp = kmalloc(rp_len, GFP_ATOMIC);
- if (!rp) {
- read_unlock(&hci_dev_list_lock);
- return -ENOMEM;
- }
- count = 0;
- list_for_each_entry(d, &hci_dev_list, list) {
- if (hci_dev_test_flag(d, HCI_SETUP) ||
- hci_dev_test_flag(d, HCI_CONFIG) ||
- hci_dev_test_flag(d, HCI_USER_CHANNEL))
- continue;
- /* Devices marked as raw-only are neither configured
- * nor unconfigured controllers.
- */
- if (test_bit(HCI_QUIRK_RAW_DEVICE, &d->quirks))
- continue;
- if (d->dev_type == HCI_BREDR) {
- if (hci_dev_test_flag(d, HCI_UNCONFIGURED))
- rp->entry[count].type = 0x01;
- else
- rp->entry[count].type = 0x00;
- } else if (d->dev_type == HCI_AMP) {
- rp->entry[count].type = 0x02;
- } else {
- continue;
- }
- rp->entry[count].bus = d->bus;
- rp->entry[count++].index = cpu_to_le16(d->id);
- BT_DBG("Added hci%u", d->id);
- }
- rp->num_controllers = cpu_to_le16(count);
- rp_len = sizeof(*rp) + (sizeof(rp->entry[0]) * count);
- read_unlock(&hci_dev_list_lock);
- /* If this command is called at least once, then all the
- * default index and unconfigured index events are disabled
- * and from now on only extended index events are used.
- */
- hci_sock_set_flag(sk, HCI_MGMT_EXT_INDEX_EVENTS);
- hci_sock_clear_flag(sk, HCI_MGMT_INDEX_EVENTS);
- hci_sock_clear_flag(sk, HCI_MGMT_UNCONF_INDEX_EVENTS);
- err = mgmt_cmd_complete(sk, MGMT_INDEX_NONE,
- MGMT_OP_READ_EXT_INDEX_LIST, 0, rp, rp_len);
- kfree(rp);
- return err;
- }
- static bool is_configured(struct hci_dev *hdev)
- {
- if (test_bit(HCI_QUIRK_EXTERNAL_CONFIG, &hdev->quirks) &&
- !hci_dev_test_flag(hdev, HCI_EXT_CONFIGURED))
- return false;
- if (test_bit(HCI_QUIRK_INVALID_BDADDR, &hdev->quirks) &&
- !bacmp(&hdev->public_addr, BDADDR_ANY))
- return false;
- return true;
- }
- static __le32 get_missing_options(struct hci_dev *hdev)
- {
- u32 options = 0;
- if (test_bit(HCI_QUIRK_EXTERNAL_CONFIG, &hdev->quirks) &&
- !hci_dev_test_flag(hdev, HCI_EXT_CONFIGURED))
- options |= MGMT_OPTION_EXTERNAL_CONFIG;
- if (test_bit(HCI_QUIRK_INVALID_BDADDR, &hdev->quirks) &&
- !bacmp(&hdev->public_addr, BDADDR_ANY))
- options |= MGMT_OPTION_PUBLIC_ADDRESS;
- return cpu_to_le32(options);
- }
- static int new_options(struct hci_dev *hdev, struct sock *skip)
- {
- __le32 options = get_missing_options(hdev);
- return mgmt_generic_event(MGMT_EV_NEW_CONFIG_OPTIONS, hdev, &options,
- sizeof(options), skip);
- }
- static int send_options_rsp(struct sock *sk, u16 opcode, struct hci_dev *hdev)
- {
- __le32 options = get_missing_options(hdev);
- return mgmt_cmd_complete(sk, hdev->id, opcode, 0, &options,
- sizeof(options));
- }
- static int read_config_info(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 data_len)
- {
- struct mgmt_rp_read_config_info rp;
- u32 options = 0;
- BT_DBG("sock %p %s", sk, hdev->name);
- hci_dev_lock(hdev);
- memset(&rp, 0, sizeof(rp));
- rp.manufacturer = cpu_to_le16(hdev->manufacturer);
- if (test_bit(HCI_QUIRK_EXTERNAL_CONFIG, &hdev->quirks))
- options |= MGMT_OPTION_EXTERNAL_CONFIG;
- if (hdev->set_bdaddr)
- options |= MGMT_OPTION_PUBLIC_ADDRESS;
- rp.supported_options = cpu_to_le32(options);
- rp.missing_options = get_missing_options(hdev);
- hci_dev_unlock(hdev);
- return mgmt_cmd_complete(sk, hdev->id, MGMT_OP_READ_CONFIG_INFO, 0,
- &rp, sizeof(rp));
- }
- static u32 get_supported_settings(struct hci_dev *hdev)
- {
- u32 settings = 0;
- settings |= MGMT_SETTING_POWERED;
- settings |= MGMT_SETTING_BONDABLE;
- settings |= MGMT_SETTING_DEBUG_KEYS;
- settings |= MGMT_SETTING_CONNECTABLE;
- settings |= MGMT_SETTING_DISCOVERABLE;
- if (lmp_bredr_capable(hdev)) {
- if (hdev->hci_ver >= BLUETOOTH_VER_1_2)
- settings |= MGMT_SETTING_FAST_CONNECTABLE;
- settings |= MGMT_SETTING_BREDR;
- settings |= MGMT_SETTING_LINK_SECURITY;
- if (lmp_ssp_capable(hdev)) {
- settings |= MGMT_SETTING_SSP;
- settings |= MGMT_SETTING_HS;
- }
- if (lmp_sc_capable(hdev))
- settings |= MGMT_SETTING_SECURE_CONN;
- }
- if (lmp_le_capable(hdev)) {
- settings |= MGMT_SETTING_LE;
- settings |= MGMT_SETTING_ADVERTISING;
- settings |= MGMT_SETTING_SECURE_CONN;
- settings |= MGMT_SETTING_PRIVACY;
- settings |= MGMT_SETTING_STATIC_ADDRESS;
- }
- if (test_bit(HCI_QUIRK_EXTERNAL_CONFIG, &hdev->quirks) ||
- hdev->set_bdaddr)
- settings |= MGMT_SETTING_CONFIGURATION;
- return settings;
- }
- static u32 get_current_settings(struct hci_dev *hdev)
- {
- u32 settings = 0;
- if (hdev_is_powered(hdev))
- settings |= MGMT_SETTING_POWERED;
- if (hci_dev_test_flag(hdev, HCI_CONNECTABLE))
- settings |= MGMT_SETTING_CONNECTABLE;
- if (hci_dev_test_flag(hdev, HCI_FAST_CONNECTABLE))
- settings |= MGMT_SETTING_FAST_CONNECTABLE;
- if (hci_dev_test_flag(hdev, HCI_DISCOVERABLE))
- settings |= MGMT_SETTING_DISCOVERABLE;
- if (hci_dev_test_flag(hdev, HCI_BONDABLE))
- settings |= MGMT_SETTING_BONDABLE;
- if (hci_dev_test_flag(hdev, HCI_BREDR_ENABLED))
- settings |= MGMT_SETTING_BREDR;
- if (hci_dev_test_flag(hdev, HCI_LE_ENABLED))
- settings |= MGMT_SETTING_LE;
- if (hci_dev_test_flag(hdev, HCI_LINK_SECURITY))
- settings |= MGMT_SETTING_LINK_SECURITY;
- if (hci_dev_test_flag(hdev, HCI_SSP_ENABLED))
- settings |= MGMT_SETTING_SSP;
- if (hci_dev_test_flag(hdev, HCI_HS_ENABLED))
- settings |= MGMT_SETTING_HS;
- if (hci_dev_test_flag(hdev, HCI_ADVERTISING))
- settings |= MGMT_SETTING_ADVERTISING;
- if (hci_dev_test_flag(hdev, HCI_SC_ENABLED))
- settings |= MGMT_SETTING_SECURE_CONN;
- if (hci_dev_test_flag(hdev, HCI_KEEP_DEBUG_KEYS))
- settings |= MGMT_SETTING_DEBUG_KEYS;
- if (hci_dev_test_flag(hdev, HCI_PRIVACY))
- settings |= MGMT_SETTING_PRIVACY;
- /* The current setting for static address has two purposes. The
- * first is to indicate if the static address will be used and
- * the second is to indicate if it is actually set.
- *
- * This means if the static address is not configured, this flag
- * will never be set. If the address is configured, then if the
- * address is actually used decides if the flag is set or not.
- *
- * For single mode LE only controllers and dual-mode controllers
- * with BR/EDR disabled, the existence of the static address will
- * be evaluated.
- */
- if (hci_dev_test_flag(hdev, HCI_FORCE_STATIC_ADDR) ||
- !hci_dev_test_flag(hdev, HCI_BREDR_ENABLED) ||
- !bacmp(&hdev->bdaddr, BDADDR_ANY)) {
- if (bacmp(&hdev->static_addr, BDADDR_ANY))
- settings |= MGMT_SETTING_STATIC_ADDRESS;
- }
- return settings;
- }
- #define PNP_INFO_SVCLASS_ID 0x1200
- static u8 *create_uuid16_list(struct hci_dev *hdev, u8 *data, ptrdiff_t len)
- {
- u8 *ptr = data, *uuids_start = NULL;
- struct bt_uuid *uuid;
- if (len < 4)
- return ptr;
- list_for_each_entry(uuid, &hdev->uuids, list) {
- u16 uuid16;
- if (uuid->size != 16)
- continue;
- uuid16 = get_unaligned_le16(&uuid->uuid[12]);
- if (uuid16 < 0x1100)
- continue;
- if (uuid16 == PNP_INFO_SVCLASS_ID)
- continue;
- if (!uuids_start) {
- uuids_start = ptr;
- uuids_start[0] = 1;
- uuids_start[1] = EIR_UUID16_ALL;
- ptr += 2;
- }
- /* Stop if not enough space to put next UUID */
- if ((ptr - data) + sizeof(u16) > len) {
- uuids_start[1] = EIR_UUID16_SOME;
- break;
- }
- *ptr++ = (uuid16 & 0x00ff);
- *ptr++ = (uuid16 & 0xff00) >> 8;
- uuids_start[0] += sizeof(uuid16);
- }
- return ptr;
- }
- static u8 *create_uuid32_list(struct hci_dev *hdev, u8 *data, ptrdiff_t len)
- {
- u8 *ptr = data, *uuids_start = NULL;
- struct bt_uuid *uuid;
- if (len < 6)
- return ptr;
- list_for_each_entry(uuid, &hdev->uuids, list) {
- if (uuid->size != 32)
- continue;
- if (!uuids_start) {
- uuids_start = ptr;
- uuids_start[0] = 1;
- uuids_start[1] = EIR_UUID32_ALL;
- ptr += 2;
- }
- /* Stop if not enough space to put next UUID */
- if ((ptr - data) + sizeof(u32) > len) {
- uuids_start[1] = EIR_UUID32_SOME;
- break;
- }
- memcpy(ptr, &uuid->uuid[12], sizeof(u32));
- ptr += sizeof(u32);
- uuids_start[0] += sizeof(u32);
- }
- return ptr;
- }
- static u8 *create_uuid128_list(struct hci_dev *hdev, u8 *data, ptrdiff_t len)
- {
- u8 *ptr = data, *uuids_start = NULL;
- struct bt_uuid *uuid;
- if (len < 18)
- return ptr;
- list_for_each_entry(uuid, &hdev->uuids, list) {
- if (uuid->size != 128)
- continue;
- if (!uuids_start) {
- uuids_start = ptr;
- uuids_start[0] = 1;
- uuids_start[1] = EIR_UUID128_ALL;
- ptr += 2;
- }
- /* Stop if not enough space to put next UUID */
- if ((ptr - data) + 16 > len) {
- uuids_start[1] = EIR_UUID128_SOME;
- break;
- }
- memcpy(ptr, uuid->uuid, 16);
- ptr += 16;
- uuids_start[0] += 16;
- }
- return ptr;
- }
- static struct mgmt_pending_cmd *pending_find(u16 opcode, struct hci_dev *hdev)
- {
- return mgmt_pending_find(HCI_CHANNEL_CONTROL, opcode, hdev);
- }
- static struct mgmt_pending_cmd *pending_find_data(u16 opcode,
- struct hci_dev *hdev,
- const void *data)
- {
- return mgmt_pending_find_data(HCI_CHANNEL_CONTROL, opcode, hdev, data);
- }
- static u8 get_current_adv_instance(struct hci_dev *hdev)
- {
- /* The "Set Advertising" setting supersedes the "Add Advertising"
- * setting. Here we set the advertising data based on which
- * setting was set. When neither apply, default to the global settings,
- * represented by instance "0".
- */
- if (hci_dev_test_flag(hdev, HCI_ADVERTISING_INSTANCE) &&
- !hci_dev_test_flag(hdev, HCI_ADVERTISING))
- return hdev->cur_adv_instance;
- return 0x00;
- }
- static u8 create_default_scan_rsp_data(struct hci_dev *hdev, u8 *ptr)
- {
- u8 ad_len = 0;
- size_t name_len;
- name_len = strlen(hdev->dev_name);
- if (name_len > 0) {
- size_t max_len = HCI_MAX_AD_LENGTH - ad_len - 2;
- if (name_len > max_len) {
- name_len = max_len;
- ptr[1] = EIR_NAME_SHORT;
- } else
- ptr[1] = EIR_NAME_COMPLETE;
- ptr[0] = name_len + 1;
- memcpy(ptr + 2, hdev->dev_name, name_len);
- ad_len += (name_len + 2);
- ptr += (name_len + 2);
- }
- return ad_len;
- }
- static u8 create_instance_scan_rsp_data(struct hci_dev *hdev, u8 instance,
- u8 *ptr)
- {
- struct adv_info *adv_instance;
- adv_instance = hci_find_adv_instance(hdev, instance);
- if (!adv_instance)
- return 0;
- /* TODO: Set the appropriate entries based on advertising instance flags
- * here once flags other than 0 are supported.
- */
- memcpy(ptr, adv_instance->scan_rsp_data,
- adv_instance->scan_rsp_len);
- return adv_instance->scan_rsp_len;
- }
- static void update_inst_scan_rsp_data(struct hci_request *req, u8 instance)
- {
- struct hci_dev *hdev = req->hdev;
- struct hci_cp_le_set_scan_rsp_data cp;
- u8 len;
- if (!hci_dev_test_flag(hdev, HCI_LE_ENABLED))
- return;
- memset(&cp, 0, sizeof(cp));
- if (instance)
- len = create_instance_scan_rsp_data(hdev, instance, cp.data);
- else
- len = create_default_scan_rsp_data(hdev, cp.data);
- if (hdev->scan_rsp_data_len == len &&
- !memcmp(cp.data, hdev->scan_rsp_data, len))
- return;
- memcpy(hdev->scan_rsp_data, cp.data, sizeof(cp.data));
- hdev->scan_rsp_data_len = len;
- cp.length = len;
- hci_req_add(req, HCI_OP_LE_SET_SCAN_RSP_DATA, sizeof(cp), &cp);
- }
- static void update_scan_rsp_data(struct hci_request *req)
- {
- update_inst_scan_rsp_data(req, get_current_adv_instance(req->hdev));
- }
- static u8 get_adv_discov_flags(struct hci_dev *hdev)
- {
- struct mgmt_pending_cmd *cmd;
- /* If there's a pending mgmt command the flags will not yet have
- * their final values, so check for this first.
- */
- cmd = pending_find(MGMT_OP_SET_DISCOVERABLE, hdev);
- if (cmd) {
- struct mgmt_mode *cp = cmd->param;
- if (cp->val == 0x01)
- return LE_AD_GENERAL;
- else if (cp->val == 0x02)
- return LE_AD_LIMITED;
- } else {
- if (hci_dev_test_flag(hdev, HCI_LIMITED_DISCOVERABLE))
- return LE_AD_LIMITED;
- else if (hci_dev_test_flag(hdev, HCI_DISCOVERABLE))
- return LE_AD_GENERAL;
- }
- return 0;
- }
- static bool get_connectable(struct hci_dev *hdev)
- {
- struct mgmt_pending_cmd *cmd;
- /* If there's a pending mgmt command the flag will not yet have
- * it's final value, so check for this first.
- */
- cmd = pending_find(MGMT_OP_SET_CONNECTABLE, hdev);
- if (cmd) {
- struct mgmt_mode *cp = cmd->param;
- return cp->val;
- }
- return hci_dev_test_flag(hdev, HCI_CONNECTABLE);
- }
- static u32 get_adv_instance_flags(struct hci_dev *hdev, u8 instance)
- {
- u32 flags;
- struct adv_info *adv_instance;
- if (instance == 0x00) {
- /* Instance 0 always manages the "Tx Power" and "Flags"
- * fields
- */
- flags = MGMT_ADV_FLAG_TX_POWER | MGMT_ADV_FLAG_MANAGED_FLAGS;
- /* For instance 0, the HCI_ADVERTISING_CONNECTABLE setting
- * corresponds to the "connectable" instance flag.
- */
- if (hci_dev_test_flag(hdev, HCI_ADVERTISING_CONNECTABLE))
- flags |= MGMT_ADV_FLAG_CONNECTABLE;
- return flags;
- }
- adv_instance = hci_find_adv_instance(hdev, instance);
- /* Return 0 when we got an invalid instance identifier. */
- if (!adv_instance)
- return 0;
- return adv_instance->flags;
- }
- static u8 get_cur_adv_instance_scan_rsp_len(struct hci_dev *hdev)
- {
- u8 instance = get_current_adv_instance(hdev);
- struct adv_info *adv_instance;
- /* Ignore instance 0 */
- if (instance == 0x00)
- return 0;
- adv_instance = hci_find_adv_instance(hdev, instance);
- if (!adv_instance)
- return 0;
- /* TODO: Take into account the "appearance" and "local-name" flags here.
- * These are currently being ignored as they are not supported.
- */
- return adv_instance->scan_rsp_len;
- }
- static u8 create_instance_adv_data(struct hci_dev *hdev, u8 instance, u8 *ptr)
- {
- struct adv_info *adv_instance = NULL;
- u8 ad_len = 0, flags = 0;
- u32 instance_flags;
- /* Return 0 when the current instance identifier is invalid. */
- if (instance) {
- adv_instance = hci_find_adv_instance(hdev, instance);
- if (!adv_instance)
- return 0;
- }
- instance_flags = get_adv_instance_flags(hdev, instance);
- /* The Add Advertising command allows userspace to set both the general
- * and limited discoverable flags.
- */
- if (instance_flags & MGMT_ADV_FLAG_DISCOV)
- flags |= LE_AD_GENERAL;
- if (instance_flags & MGMT_ADV_FLAG_LIMITED_DISCOV)
- flags |= LE_AD_LIMITED;
- if (flags || (instance_flags & MGMT_ADV_FLAG_MANAGED_FLAGS)) {
- /* If a discovery flag wasn't provided, simply use the global
- * settings.
- */
- if (!flags)
- flags |= get_adv_discov_flags(hdev);
- if (!hci_dev_test_flag(hdev, HCI_BREDR_ENABLED))
- flags |= LE_AD_NO_BREDR;
- /* If flags would still be empty, then there is no need to
- * include the "Flags" AD field".
- */
- if (flags) {
- ptr[0] = 0x02;
- ptr[1] = EIR_FLAGS;
- ptr[2] = flags;
- ad_len += 3;
- ptr += 3;
- }
- }
- if (adv_instance) {
- memcpy(ptr, adv_instance->adv_data,
- adv_instance->adv_data_len);
- ad_len += adv_instance->adv_data_len;
- ptr += adv_instance->adv_data_len;
- }
- /* Provide Tx Power only if we can provide a valid value for it */
- if (hdev->adv_tx_power != HCI_TX_POWER_INVALID &&
- (instance_flags & MGMT_ADV_FLAG_TX_POWER)) {
- ptr[0] = 0x02;
- ptr[1] = EIR_TX_POWER;
- ptr[2] = (u8)hdev->adv_tx_power;
- ad_len += 3;
- ptr += 3;
- }
- return ad_len;
- }
- static void update_inst_adv_data(struct hci_request *req, u8 instance)
- {
- struct hci_dev *hdev = req->hdev;
- struct hci_cp_le_set_adv_data cp;
- u8 len;
- if (!hci_dev_test_flag(hdev, HCI_LE_ENABLED))
- return;
- memset(&cp, 0, sizeof(cp));
- len = create_instance_adv_data(hdev, instance, cp.data);
- /* There's nothing to do if the data hasn't changed */
- if (hdev->adv_data_len == len &&
- memcmp(cp.data, hdev->adv_data, len) == 0)
- return;
- memcpy(hdev->adv_data, cp.data, sizeof(cp.data));
- hdev->adv_data_len = len;
- cp.length = len;
- hci_req_add(req, HCI_OP_LE_SET_ADV_DATA, sizeof(cp), &cp);
- }
- static void update_adv_data(struct hci_request *req)
- {
- update_inst_adv_data(req, get_current_adv_instance(req->hdev));
- }
- int mgmt_update_adv_data(struct hci_dev *hdev)
- {
- struct hci_request req;
- hci_req_init(&req, hdev);
- update_adv_data(&req);
- return hci_req_run(&req, NULL);
- }
- static void create_eir(struct hci_dev *hdev, u8 *data)
- {
- u8 *ptr = data;
- size_t name_len;
- name_len = strlen(hdev->dev_name);
- if (name_len > 0) {
- /* EIR Data type */
- if (name_len > 48) {
- name_len = 48;
- ptr[1] = EIR_NAME_SHORT;
- } else
- ptr[1] = EIR_NAME_COMPLETE;
- /* EIR Data length */
- ptr[0] = name_len + 1;
- memcpy(ptr + 2, hdev->dev_name, name_len);
- ptr += (name_len + 2);
- }
- if (hdev->inq_tx_power != HCI_TX_POWER_INVALID) {
- ptr[0] = 2;
- ptr[1] = EIR_TX_POWER;
- ptr[2] = (u8) hdev->inq_tx_power;
- ptr += 3;
- }
- if (hdev->devid_source > 0) {
- ptr[0] = 9;
- ptr[1] = EIR_DEVICE_ID;
- put_unaligned_le16(hdev->devid_source, ptr + 2);
- put_unaligned_le16(hdev->devid_vendor, ptr + 4);
- put_unaligned_le16(hdev->devid_product, ptr + 6);
- put_unaligned_le16(hdev->devid_version, ptr + 8);
- ptr += 10;
- }
- ptr = create_uuid16_list(hdev, ptr, HCI_MAX_EIR_LENGTH - (ptr - data));
- ptr = create_uuid32_list(hdev, ptr, HCI_MAX_EIR_LENGTH - (ptr - data));
- ptr = create_uuid128_list(hdev, ptr, HCI_MAX_EIR_LENGTH - (ptr - data));
- }
- static void update_eir(struct hci_request *req)
- {
- struct hci_dev *hdev = req->hdev;
- struct hci_cp_write_eir cp;
- if (!hdev_is_powered(hdev))
- return;
- if (!lmp_ext_inq_capable(hdev))
- return;
- if (!hci_dev_test_flag(hdev, HCI_SSP_ENABLED))
- return;
- if (hci_dev_test_flag(hdev, HCI_SERVICE_CACHE))
- return;
- memset(&cp, 0, sizeof(cp));
- create_eir(hdev, cp.data);
- if (memcmp(cp.data, hdev->eir, sizeof(cp.data)) == 0)
- return;
- memcpy(hdev->eir, cp.data, sizeof(cp.data));
- hci_req_add(req, HCI_OP_WRITE_EIR, sizeof(cp), &cp);
- }
- static u8 get_service_classes(struct hci_dev *hdev)
- {
- struct bt_uuid *uuid;
- u8 val = 0;
- list_for_each_entry(uuid, &hdev->uuids, list)
- val |= uuid->svc_hint;
- return val;
- }
- static void update_class(struct hci_request *req)
- {
- struct hci_dev *hdev = req->hdev;
- u8 cod[3];
- BT_DBG("%s", hdev->name);
- if (!hdev_is_powered(hdev))
- return;
- if (!hci_dev_test_flag(hdev, HCI_BREDR_ENABLED))
- return;
- if (hci_dev_test_flag(hdev, HCI_SERVICE_CACHE))
- return;
- cod[0] = hdev->minor_class;
- cod[1] = hdev->major_class;
- cod[2] = get_service_classes(hdev);
- if (hci_dev_test_flag(hdev, HCI_LIMITED_DISCOVERABLE))
- cod[1] |= 0x20;
- if (memcmp(cod, hdev->dev_class, 3) == 0)
- return;
- hci_req_add(req, HCI_OP_WRITE_CLASS_OF_DEV, sizeof(cod), cod);
- }
- static void disable_advertising(struct hci_request *req)
- {
- u8 enable = 0x00;
- hci_req_add(req, HCI_OP_LE_SET_ADV_ENABLE, sizeof(enable), &enable);
- }
- static void enable_advertising(struct hci_request *req)
- {
- struct hci_dev *hdev = req->hdev;
- struct hci_cp_le_set_adv_param cp;
- u8 own_addr_type, enable = 0x01;
- bool connectable;
- u8 instance;
- u32 flags;
- if (hci_conn_num(hdev, LE_LINK) > 0)
- return;
- if (hci_dev_test_flag(hdev, HCI_LE_ADV))
- disable_advertising(req);
- /* Clear the HCI_LE_ADV bit temporarily so that the
- * hci_update_random_address knows that it's safe to go ahead
- * and write a new random address. The flag will be set back on
- * as soon as the SET_ADV_ENABLE HCI command completes.
- */
- hci_dev_clear_flag(hdev, HCI_LE_ADV);
- instance = get_current_adv_instance(hdev);
- flags = get_adv_instance_flags(hdev, instance);
- /* If the "connectable" instance flag was not set, then choose between
- * ADV_IND and ADV_NONCONN_IND based on the global connectable setting.
- */
- connectable = (flags & MGMT_ADV_FLAG_CONNECTABLE) ||
- get_connectable(hdev);
- /* Set require_privacy to true only when non-connectable
- * advertising is used. In that case it is fine to use a
- * non-resolvable private address.
- */
- if (hci_update_random_address(req, !connectable, &own_addr_type) < 0)
- return;
- memset(&cp, 0, sizeof(cp));
- cp.min_interval = cpu_to_le16(hdev->le_adv_min_interval);
- cp.max_interval = cpu_to_le16(hdev->le_adv_max_interval);
- if (connectable)
- cp.type = LE_ADV_IND;
- else if (get_cur_adv_instance_scan_rsp_len(hdev))
- cp.type = LE_ADV_SCAN_IND;
- else
- cp.type = LE_ADV_NONCONN_IND;
- cp.own_address_type = own_addr_type;
- cp.channel_map = hdev->le_adv_channel_map;
- hci_req_add(req, HCI_OP_LE_SET_ADV_PARAM, sizeof(cp), &cp);
- hci_req_add(req, HCI_OP_LE_SET_ADV_ENABLE, sizeof(enable), &enable);
- }
- static void service_cache_off(struct work_struct *work)
- {
- struct hci_dev *hdev = container_of(work, struct hci_dev,
- service_cache.work);
- struct hci_request req;
- if (!hci_dev_test_and_clear_flag(hdev, HCI_SERVICE_CACHE))
- return;
- hci_req_init(&req, hdev);
- hci_dev_lock(hdev);
- update_eir(&req);
- update_class(&req);
- hci_dev_unlock(hdev);
- hci_req_run(&req, NULL);
- }
- static void rpa_expired(struct work_struct *work)
- {
- struct hci_dev *hdev = container_of(work, struct hci_dev,
- rpa_expired.work);
- struct hci_request req;
- BT_DBG("");
- hci_dev_set_flag(hdev, HCI_RPA_EXPIRED);
- if (!hci_dev_test_flag(hdev, HCI_ADVERTISING))
- return;
- /* The generation of a new RPA and programming it into the
- * controller happens in the enable_advertising() function.
- */
- hci_req_init(&req, hdev);
- enable_advertising(&req);
- hci_req_run(&req, NULL);
- }
- static void mgmt_init_hdev(struct sock *sk, struct hci_dev *hdev)
- {
- if (hci_dev_test_and_set_flag(hdev, HCI_MGMT))
- return;
- INIT_DELAYED_WORK(&hdev->service_cache, service_cache_off);
- INIT_DELAYED_WORK(&hdev->rpa_expired, rpa_expired);
- /* Non-mgmt controlled devices get this bit set
- * implicitly so that pairing works for them, however
- * for mgmt we require user-space to explicitly enable
- * it
- */
- hci_dev_clear_flag(hdev, HCI_BONDABLE);
- }
- static int read_controller_info(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 data_len)
- {
- struct mgmt_rp_read_info rp;
- BT_DBG("sock %p %s", sk, hdev->name);
- hci_dev_lock(hdev);
- memset(&rp, 0, sizeof(rp));
- bacpy(&rp.bdaddr, &hdev->bdaddr);
- rp.version = hdev->hci_ver;
- rp.manufacturer = cpu_to_le16(hdev->manufacturer);
- rp.supported_settings = cpu_to_le32(get_supported_settings(hdev));
- rp.current_settings = cpu_to_le32(get_current_settings(hdev));
- memcpy(rp.dev_class, hdev->dev_class, 3);
- memcpy(rp.name, hdev->dev_name, sizeof(hdev->dev_name));
- memcpy(rp.short_name, hdev->short_name, sizeof(hdev->short_name));
- hci_dev_unlock(hdev);
- return mgmt_cmd_complete(sk, hdev->id, MGMT_OP_READ_INFO, 0, &rp,
- sizeof(rp));
- }
- static int send_settings_rsp(struct sock *sk, u16 opcode, struct hci_dev *hdev)
- {
- __le32 settings = cpu_to_le32(get_current_settings(hdev));
- return mgmt_cmd_complete(sk, hdev->id, opcode, 0, &settings,
- sizeof(settings));
- }
- static void clean_up_hci_complete(struct hci_dev *hdev, u8 status, u16 opcode)
- {
- BT_DBG("%s status 0x%02x", hdev->name, status);
- if (hci_conn_count(hdev) == 0) {
- cancel_delayed_work(&hdev->power_off);
- queue_work(hdev->req_workqueue, &hdev->power_off.work);
- }
- }
- static bool hci_stop_discovery(struct hci_request *req)
- {
- struct hci_dev *hdev = req->hdev;
- struct hci_cp_remote_name_req_cancel cp;
- struct inquiry_entry *e;
- switch (hdev->discovery.state) {
- case DISCOVERY_FINDING:
- if (test_bit(HCI_INQUIRY, &hdev->flags))
- hci_req_add(req, HCI_OP_INQUIRY_CANCEL, 0, NULL);
- if (hci_dev_test_flag(hdev, HCI_LE_SCAN)) {
- cancel_delayed_work(&hdev->le_scan_disable);
- hci_req_add_le_scan_disable(req);
- }
- return true;
- case DISCOVERY_RESOLVING:
- e = hci_inquiry_cache_lookup_resolve(hdev, BDADDR_ANY,
- NAME_PENDING);
- if (!e)
- break;
- bacpy(&cp.bdaddr, &e->data.bdaddr);
- hci_req_add(req, HCI_OP_REMOTE_NAME_REQ_CANCEL, sizeof(cp),
- &cp);
- return true;
- default:
- /* Passive scanning */
- if (hci_dev_test_flag(hdev, HCI_LE_SCAN)) {
- hci_req_add_le_scan_disable(req);
- return true;
- }
- break;
- }
- return false;
- }
- static void advertising_added(struct sock *sk, struct hci_dev *hdev,
- u8 instance)
- {
- struct mgmt_ev_advertising_added ev;
- ev.instance = instance;
- mgmt_event(MGMT_EV_ADVERTISING_ADDED, hdev, &ev, sizeof(ev), sk);
- }
- static void advertising_removed(struct sock *sk, struct hci_dev *hdev,
- u8 instance)
- {
- struct mgmt_ev_advertising_removed ev;
- ev.instance = instance;
- mgmt_event(MGMT_EV_ADVERTISING_REMOVED, hdev, &ev, sizeof(ev), sk);
- }
- static int schedule_adv_instance(struct hci_request *req, u8 instance,
- bool force) {
- struct hci_dev *hdev = req->hdev;
- struct adv_info *adv_instance = NULL;
- u16 timeout;
- if (hci_dev_test_flag(hdev, HCI_ADVERTISING) ||
- !hci_dev_test_flag(hdev, HCI_ADVERTISING_INSTANCE))
- return -EPERM;
- if (hdev->adv_instance_timeout)
- return -EBUSY;
- adv_instance = hci_find_adv_instance(hdev, instance);
- if (!adv_instance)
- return -ENOENT;
- /* A zero timeout means unlimited advertising. As long as there is
- * only one instance, duration should be ignored. We still set a timeout
- * in case further instances are being added later on.
- *
- * If the remaining lifetime of the instance is more than the duration
- * then the timeout corresponds to the duration, otherwise it will be
- * reduced to the remaining instance lifetime.
- */
- if (adv_instance->timeout == 0 ||
- adv_instance->duration <= adv_instance->remaining_time)
- timeout = adv_instance->duration;
- else
- timeout = adv_instance->remaining_time;
- /* The remaining time is being reduced unless the instance is being
- * advertised without time limit.
- */
- if (adv_instance->timeout)
- adv_instance->remaining_time =
- adv_instance->remaining_time - timeout;
- hdev->adv_instance_timeout = timeout;
- queue_delayed_work(hdev->workqueue,
- &hdev->adv_instance_expire,
- msecs_to_jiffies(timeout * 1000));
- /* If we're just re-scheduling the same instance again then do not
- * execute any HCI commands. This happens when a single instance is
- * being advertised.
- */
- if (!force && hdev->cur_adv_instance == instance &&
- hci_dev_test_flag(hdev, HCI_LE_ADV))
- return 0;
- hdev->cur_adv_instance = instance;
- update_adv_data(req);
- update_scan_rsp_data(req);
- enable_advertising(req);
- return 0;
- }
- static void cancel_adv_timeout(struct hci_dev *hdev)
- {
- if (hdev->adv_instance_timeout) {
- hdev->adv_instance_timeout = 0;
- cancel_delayed_work(&hdev->adv_instance_expire);
- }
- }
- /* For a single instance:
- * - force == true: The instance will be removed even when its remaining
- * lifetime is not zero.
- * - force == false: the instance will be deactivated but kept stored unless
- * the remaining lifetime is zero.
- *
- * For instance == 0x00:
- * - force == true: All instances will be removed regardless of their timeout
- * setting.
- * - force == false: Only instances that have a timeout will be removed.
- */
- static void clear_adv_instance(struct hci_dev *hdev, struct hci_request *req,
- u8 instance, bool force)
- {
- struct adv_info *adv_instance, *n, *next_instance = NULL;
- int err;
- u8 rem_inst;
- /* Cancel any timeout concerning the removed instance(s). */
- if (!instance || hdev->cur_adv_instance == instance)
- cancel_adv_timeout(hdev);
- /* Get the next instance to advertise BEFORE we remove
- * the current one. This can be the same instance again
- * if there is only one instance.
- */
- if (instance && hdev->cur_adv_instance == instance)
- next_instance = hci_get_next_instance(hdev, instance);
- if (instance == 0x00) {
- list_for_each_entry_safe(adv_instance, n, &hdev->adv_instances,
- list) {
- if (!(force || adv_instance->timeout))
- continue;
- rem_inst = adv_instance->instance;
- err = hci_remove_adv_instance(hdev, rem_inst);
- if (!err)
- advertising_removed(NULL, hdev, rem_inst);
- }
- hdev->cur_adv_instance = 0x00;
- } else {
- adv_instance = hci_find_adv_instance(hdev, instance);
- if (force || (adv_instance && adv_instance->timeout &&
- !adv_instance->remaining_time)) {
- /* Don't advertise a removed instance. */
- if (next_instance &&
- next_instance->instance == instance)
- next_instance = NULL;
- err = hci_remove_adv_instance(hdev, instance);
- if (!err)
- advertising_removed(NULL, hdev, instance);
- }
- }
- if (list_empty(&hdev->adv_instances)) {
- hdev->cur_adv_instance = 0x00;
- hci_dev_clear_flag(hdev, HCI_ADVERTISING_INSTANCE);
- }
- if (!req || !hdev_is_powered(hdev) ||
- hci_dev_test_flag(hdev, HCI_ADVERTISING))
- return;
- if (next_instance)
- schedule_adv_instance(req, next_instance->instance, false);
- }
- static int clean_up_hci_state(struct hci_dev *hdev)
- {
- struct hci_request req;
- struct hci_conn *conn;
- bool discov_stopped;
- int err;
- hci_req_init(&req, hdev);
- if (test_bit(HCI_ISCAN, &hdev->flags) ||
- test_bit(HCI_PSCAN, &hdev->flags)) {
- u8 scan = 0x00;
- hci_req_add(&req, HCI_OP_WRITE_SCAN_ENABLE, 1, &scan);
- }
- clear_adv_instance(hdev, NULL, 0x00, false);
- if (hci_dev_test_flag(hdev, HCI_LE_ADV))
- disable_advertising(&req);
- discov_stopped = hci_stop_discovery(&req);
- list_for_each_entry(conn, &hdev->conn_hash.list, list) {
- /* 0x15 == Terminated due to Power Off */
- __hci_abort_conn(&req, conn, 0x15);
- }
- err = hci_req_run(&req, clean_up_hci_complete);
- if (!err && discov_stopped)
- hci_discovery_set_state(hdev, DISCOVERY_STOPPING);
- return err;
- }
- static int set_powered(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_mode *cp = data;
- struct mgmt_pending_cmd *cmd;
- int err;
- BT_DBG("request for %s", hdev->name);
- if (cp->val != 0x00 && cp->val != 0x01)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_POWERED,
- MGMT_STATUS_INVALID_PARAMS);
- hci_dev_lock(hdev);
- if (pending_find(MGMT_OP_SET_POWERED, hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_POWERED,
- MGMT_STATUS_BUSY);
- goto failed;
- }
- if (hci_dev_test_and_clear_flag(hdev, HCI_AUTO_OFF)) {
- cancel_delayed_work(&hdev->power_off);
- if (cp->val) {
- mgmt_pending_add(sk, MGMT_OP_SET_POWERED, hdev,
- data, len);
- err = mgmt_powered(hdev, 1);
- goto failed;
- }
- }
- if (!!cp->val == hdev_is_powered(hdev)) {
- err = send_settings_rsp(sk, MGMT_OP_SET_POWERED, hdev);
- goto failed;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_SET_POWERED, hdev, data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto failed;
- }
- if (cp->val) {
- queue_work(hdev->req_workqueue, &hdev->power_on);
- err = 0;
- } else {
- /* Disconnect connections, stop scans, etc */
- err = clean_up_hci_state(hdev);
- if (!err)
- queue_delayed_work(hdev->req_workqueue, &hdev->power_off,
- HCI_POWER_OFF_TIMEOUT);
- /* ENODATA means there were no HCI commands queued */
- if (err == -ENODATA) {
- cancel_delayed_work(&hdev->power_off);
- queue_work(hdev->req_workqueue, &hdev->power_off.work);
- err = 0;
- }
- }
- failed:
- hci_dev_unlock(hdev);
- return err;
- }
- static int new_settings(struct hci_dev *hdev, struct sock *skip)
- {
- __le32 ev = cpu_to_le32(get_current_settings(hdev));
- return mgmt_generic_event(MGMT_EV_NEW_SETTINGS, hdev, &ev,
- sizeof(ev), skip);
- }
- int mgmt_new_settings(struct hci_dev *hdev)
- {
- return new_settings(hdev, NULL);
- }
- struct cmd_lookup {
- struct sock *sk;
- struct hci_dev *hdev;
- u8 mgmt_status;
- };
- static void settings_rsp(struct mgmt_pending_cmd *cmd, void *data)
- {
- struct cmd_lookup *match = data;
- send_settings_rsp(cmd->sk, cmd->opcode, match->hdev);
- list_del(&cmd->list);
- if (match->sk == NULL) {
- match->sk = cmd->sk;
- sock_hold(match->sk);
- }
- mgmt_pending_free(cmd);
- }
- static void cmd_status_rsp(struct mgmt_pending_cmd *cmd, void *data)
- {
- u8 *status = data;
- mgmt_cmd_status(cmd->sk, cmd->index, cmd->opcode, *status);
- mgmt_pending_remove(cmd);
- }
- static void cmd_complete_rsp(struct mgmt_pending_cmd *cmd, void *data)
- {
- if (cmd->cmd_complete) {
- u8 *status = data;
- cmd->cmd_complete(cmd, *status);
- mgmt_pending_remove(cmd);
- return;
- }
- cmd_status_rsp(cmd, data);
- }
- static int generic_cmd_complete(struct mgmt_pending_cmd *cmd, u8 status)
- {
- return mgmt_cmd_complete(cmd->sk, cmd->index, cmd->opcode, status,
- cmd->param, cmd->param_len);
- }
- static int addr_cmd_complete(struct mgmt_pending_cmd *cmd, u8 status)
- {
- return mgmt_cmd_complete(cmd->sk, cmd->index, cmd->opcode, status,
- cmd->param, sizeof(struct mgmt_addr_info));
- }
- static u8 mgmt_bredr_support(struct hci_dev *hdev)
- {
- if (!lmp_bredr_capable(hdev))
- return MGMT_STATUS_NOT_SUPPORTED;
- else if (!hci_dev_test_flag(hdev, HCI_BREDR_ENABLED))
- return MGMT_STATUS_REJECTED;
- else
- return MGMT_STATUS_SUCCESS;
- }
- static u8 mgmt_le_support(struct hci_dev *hdev)
- {
- if (!lmp_le_capable(hdev))
- return MGMT_STATUS_NOT_SUPPORTED;
- else if (!hci_dev_test_flag(hdev, HCI_LE_ENABLED))
- return MGMT_STATUS_REJECTED;
- else
- return MGMT_STATUS_SUCCESS;
- }
- static void set_discoverable_complete(struct hci_dev *hdev, u8 status,
- u16 opcode)
- {
- struct mgmt_pending_cmd *cmd;
- struct mgmt_mode *cp;
- struct hci_request req;
- bool changed;
- BT_DBG("status 0x%02x", status);
- hci_dev_lock(hdev);
- cmd = pending_find(MGMT_OP_SET_DISCOVERABLE, hdev);
- if (!cmd)
- goto unlock;
- if (status) {
- u8 mgmt_err = mgmt_status(status);
- mgmt_cmd_status(cmd->sk, cmd->index, cmd->opcode, mgmt_err);
- hci_dev_clear_flag(hdev, HCI_LIMITED_DISCOVERABLE);
- goto remove_cmd;
- }
- cp = cmd->param;
- if (cp->val) {
- changed = !hci_dev_test_and_set_flag(hdev, HCI_DISCOVERABLE);
- if (hdev->discov_timeout > 0) {
- int to = msecs_to_jiffies(hdev->discov_timeout * 1000);
- queue_delayed_work(hdev->workqueue, &hdev->discov_off,
- to);
- }
- } else {
- changed = hci_dev_test_and_clear_flag(hdev, HCI_DISCOVERABLE);
- }
- send_settings_rsp(cmd->sk, MGMT_OP_SET_DISCOVERABLE, hdev);
- if (changed)
- new_settings(hdev, cmd->sk);
- /* When the discoverable mode gets changed, make sure
- * that class of device has the limited discoverable
- * bit correctly set. Also update page scan based on whitelist
- * entries.
- */
- hci_req_init(&req, hdev);
- __hci_update_page_scan(&req);
- update_class(&req);
- hci_req_run(&req, NULL);
- remove_cmd:
- mgmt_pending_remove(cmd);
- unlock:
- hci_dev_unlock(hdev);
- }
- static int set_discoverable(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_cp_set_discoverable *cp = data;
- struct mgmt_pending_cmd *cmd;
- struct hci_request req;
- u16 timeout;
- u8 scan;
- int err;
- BT_DBG("request for %s", hdev->name);
- if (!hci_dev_test_flag(hdev, HCI_LE_ENABLED) &&
- !hci_dev_test_flag(hdev, HCI_BREDR_ENABLED))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_DISCOVERABLE,
- MGMT_STATUS_REJECTED);
- if (cp->val != 0x00 && cp->val != 0x01 && cp->val != 0x02)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_DISCOVERABLE,
- MGMT_STATUS_INVALID_PARAMS);
- timeout = __le16_to_cpu(cp->timeout);
- /* Disabling discoverable requires that no timeout is set,
- * and enabling limited discoverable requires a timeout.
- */
- if ((cp->val == 0x00 && timeout > 0) ||
- (cp->val == 0x02 && timeout == 0))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_DISCOVERABLE,
- MGMT_STATUS_INVALID_PARAMS);
- hci_dev_lock(hdev);
- if (!hdev_is_powered(hdev) && timeout > 0) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_DISCOVERABLE,
- MGMT_STATUS_NOT_POWERED);
- goto failed;
- }
- if (pending_find(MGMT_OP_SET_DISCOVERABLE, hdev) ||
- pending_find(MGMT_OP_SET_CONNECTABLE, hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_DISCOVERABLE,
- MGMT_STATUS_BUSY);
- goto failed;
- }
- if (!hci_dev_test_flag(hdev, HCI_CONNECTABLE)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_DISCOVERABLE,
- MGMT_STATUS_REJECTED);
- goto failed;
- }
- if (!hdev_is_powered(hdev)) {
- bool changed = false;
- /* Setting limited discoverable when powered off is
- * not a valid operation since it requires a timeout
- * and so no need to check HCI_LIMITED_DISCOVERABLE.
- */
- if (!!cp->val != hci_dev_test_flag(hdev, HCI_DISCOVERABLE)) {
- hci_dev_change_flag(hdev, HCI_DISCOVERABLE);
- changed = true;
- }
- err = send_settings_rsp(sk, MGMT_OP_SET_DISCOVERABLE, hdev);
- if (err < 0)
- goto failed;
- if (changed)
- err = new_settings(hdev, sk);
- goto failed;
- }
- /* If the current mode is the same, then just update the timeout
- * value with the new value. And if only the timeout gets updated,
- * then no need for any HCI transactions.
- */
- if (!!cp->val == hci_dev_test_flag(hdev, HCI_DISCOVERABLE) &&
- (cp->val == 0x02) == hci_dev_test_flag(hdev,
- HCI_LIMITED_DISCOVERABLE)) {
- cancel_delayed_work(&hdev->discov_off);
- hdev->discov_timeout = timeout;
- if (cp->val && hdev->discov_timeout > 0) {
- int to = msecs_to_jiffies(hdev->discov_timeout * 1000);
- queue_delayed_work(hdev->workqueue, &hdev->discov_off,
- to);
- }
- err = send_settings_rsp(sk, MGMT_OP_SET_DISCOVERABLE, hdev);
- goto failed;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_SET_DISCOVERABLE, hdev, data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto failed;
- }
- /* Cancel any potential discoverable timeout that might be
- * still active and store new timeout value. The arming of
- * the timeout happens in the complete handler.
- */
- cancel_delayed_work(&hdev->discov_off);
- hdev->discov_timeout = timeout;
- /* Limited discoverable mode */
- if (cp->val == 0x02)
- hci_dev_set_flag(hdev, HCI_LIMITED_DISCOVERABLE);
- else
- hci_dev_clear_flag(hdev, HCI_LIMITED_DISCOVERABLE);
- hci_req_init(&req, hdev);
- /* The procedure for LE-only controllers is much simpler - just
- * update the advertising data.
- */
- if (!hci_dev_test_flag(hdev, HCI_BREDR_ENABLED))
- goto update_ad;
- scan = SCAN_PAGE;
- if (cp->val) {
- struct hci_cp_write_current_iac_lap hci_cp;
- if (cp->val == 0x02) {
- /* Limited discoverable mode */
- hci_cp.num_iac = min_t(u8, hdev->num_iac, 2);
- hci_cp.iac_lap[0] = 0x00; /* LIAC */
- hci_cp.iac_lap[1] = 0x8b;
- hci_cp.iac_lap[2] = 0x9e;
- hci_cp.iac_lap[3] = 0x33; /* GIAC */
- hci_cp.iac_lap[4] = 0x8b;
- hci_cp.iac_lap[5] = 0x9e;
- } else {
- /* General discoverable mode */
- hci_cp.num_iac = 1;
- hci_cp.iac_lap[0] = 0x33; /* GIAC */
- hci_cp.iac_lap[1] = 0x8b;
- hci_cp.iac_lap[2] = 0x9e;
- }
- hci_req_add(&req, HCI_OP_WRITE_CURRENT_IAC_LAP,
- (hci_cp.num_iac * 3) + 1, &hci_cp);
- scan |= SCAN_INQUIRY;
- } else {
- hci_dev_clear_flag(hdev, HCI_LIMITED_DISCOVERABLE);
- }
- hci_req_add(&req, HCI_OP_WRITE_SCAN_ENABLE, sizeof(scan), &scan);
- update_ad:
- update_adv_data(&req);
- err = hci_req_run(&req, set_discoverable_complete);
- if (err < 0)
- mgmt_pending_remove(cmd);
- failed:
- hci_dev_unlock(hdev);
- return err;
- }
- static void write_fast_connectable(struct hci_request *req, bool enable)
- {
- struct hci_dev *hdev = req->hdev;
- struct hci_cp_write_page_scan_activity acp;
- u8 type;
- if (!hci_dev_test_flag(hdev, HCI_BREDR_ENABLED))
- return;
- if (hdev->hci_ver < BLUETOOTH_VER_1_2)
- return;
- if (enable) {
- type = PAGE_SCAN_TYPE_INTERLACED;
- /* 160 msec page scan interval */
- acp.interval = cpu_to_le16(0x0100);
- } else {
- type = PAGE_SCAN_TYPE_STANDARD; /* default */
- /* default 1.28 sec page scan */
- acp.interval = cpu_to_le16(0x0800);
- }
- acp.window = cpu_to_le16(0x0012);
- if (__cpu_to_le16(hdev->page_scan_interval) != acp.interval ||
- __cpu_to_le16(hdev->page_scan_window) != acp.window)
- hci_req_add(req, HCI_OP_WRITE_PAGE_SCAN_ACTIVITY,
- sizeof(acp), &acp);
- if (hdev->page_scan_type != type)
- hci_req_add(req, HCI_OP_WRITE_PAGE_SCAN_TYPE, 1, &type);
- }
- static void set_connectable_complete(struct hci_dev *hdev, u8 status,
- u16 opcode)
- {
- struct mgmt_pending_cmd *cmd;
- struct mgmt_mode *cp;
- bool conn_changed, discov_changed;
- BT_DBG("status 0x%02x", status);
- hci_dev_lock(hdev);
- cmd = pending_find(MGMT_OP_SET_CONNECTABLE, hdev);
- if (!cmd)
- goto unlock;
- if (status) {
- u8 mgmt_err = mgmt_status(status);
- mgmt_cmd_status(cmd->sk, cmd->index, cmd->opcode, mgmt_err);
- goto remove_cmd;
- }
- cp = cmd->param;
- if (cp->val) {
- conn_changed = !hci_dev_test_and_set_flag(hdev,
- HCI_CONNECTABLE);
- discov_changed = false;
- } else {
- conn_changed = hci_dev_test_and_clear_flag(hdev,
- HCI_CONNECTABLE);
- discov_changed = hci_dev_test_and_clear_flag(hdev,
- HCI_DISCOVERABLE);
- }
- send_settings_rsp(cmd->sk, MGMT_OP_SET_CONNECTABLE, hdev);
- if (conn_changed || discov_changed) {
- new_settings(hdev, cmd->sk);
- hci_update_page_scan(hdev);
- if (discov_changed)
- mgmt_update_adv_data(hdev);
- hci_update_background_scan(hdev);
- }
- remove_cmd:
- mgmt_pending_remove(cmd);
- unlock:
- hci_dev_unlock(hdev);
- }
- static int set_connectable_update_settings(struct hci_dev *hdev,
- struct sock *sk, u8 val)
- {
- bool changed = false;
- int err;
- if (!!val != hci_dev_test_flag(hdev, HCI_CONNECTABLE))
- changed = true;
- if (val) {
- hci_dev_set_flag(hdev, HCI_CONNECTABLE);
- } else {
- hci_dev_clear_flag(hdev, HCI_CONNECTABLE);
- hci_dev_clear_flag(hdev, HCI_DISCOVERABLE);
- }
- err = send_settings_rsp(sk, MGMT_OP_SET_CONNECTABLE, hdev);
- if (err < 0)
- return err;
- if (changed) {
- hci_update_page_scan(hdev);
- hci_update_background_scan(hdev);
- return new_settings(hdev, sk);
- }
- return 0;
- }
- static int set_connectable(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_mode *cp = data;
- struct mgmt_pending_cmd *cmd;
- struct hci_request req;
- u8 scan;
- int err;
- BT_DBG("request for %s", hdev->name);
- if (!hci_dev_test_flag(hdev, HCI_LE_ENABLED) &&
- !hci_dev_test_flag(hdev, HCI_BREDR_ENABLED))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_CONNECTABLE,
- MGMT_STATUS_REJECTED);
- if (cp->val != 0x00 && cp->val != 0x01)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_CONNECTABLE,
- MGMT_STATUS_INVALID_PARAMS);
- hci_dev_lock(hdev);
- if (!hdev_is_powered(hdev)) {
- err = set_connectable_update_settings(hdev, sk, cp->val);
- goto failed;
- }
- if (pending_find(MGMT_OP_SET_DISCOVERABLE, hdev) ||
- pending_find(MGMT_OP_SET_CONNECTABLE, hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_CONNECTABLE,
- MGMT_STATUS_BUSY);
- goto failed;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_SET_CONNECTABLE, hdev, data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto failed;
- }
- hci_req_init(&req, hdev);
- /* If BR/EDR is not enabled and we disable advertising as a
- * by-product of disabling connectable, we need to update the
- * advertising flags.
- */
- if (!hci_dev_test_flag(hdev, HCI_BREDR_ENABLED)) {
- if (!cp->val) {
- hci_dev_clear_flag(hdev, HCI_LIMITED_DISCOVERABLE);
- hci_dev_clear_flag(hdev, HCI_DISCOVERABLE);
- }
- update_adv_data(&req);
- } else if (cp->val != test_bit(HCI_PSCAN, &hdev->flags)) {
- if (cp->val) {
- scan = SCAN_PAGE;
- } else {
- /* If we don't have any whitelist entries just
- * disable all scanning. If there are entries
- * and we had both page and inquiry scanning
- * enabled then fall back to only page scanning.
- * Otherwise no changes are needed.
- */
- if (list_empty(&hdev->whitelist))
- scan = SCAN_DISABLED;
- else if (test_bit(HCI_ISCAN, &hdev->flags))
- scan = SCAN_PAGE;
- else
- goto no_scan_update;
- if (test_bit(HCI_ISCAN, &hdev->flags) &&
- hdev->discov_timeout > 0)
- cancel_delayed_work(&hdev->discov_off);
- }
- hci_req_add(&req, HCI_OP_WRITE_SCAN_ENABLE, 1, &scan);
- }
- no_scan_update:
- /* Update the advertising parameters if necessary */
- if (hci_dev_test_flag(hdev, HCI_ADVERTISING) ||
- hci_dev_test_flag(hdev, HCI_ADVERTISING_INSTANCE))
- enable_advertising(&req);
- err = hci_req_run(&req, set_connectable_complete);
- if (err < 0) {
- mgmt_pending_remove(cmd);
- if (err == -ENODATA)
- err = set_connectable_update_settings(hdev, sk,
- cp->val);
- goto failed;
- }
- failed:
- hci_dev_unlock(hdev);
- return err;
- }
- static int set_bondable(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_mode *cp = data;
- bool changed;
- int err;
- BT_DBG("request for %s", hdev->name);
- if (cp->val != 0x00 && cp->val != 0x01)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_BONDABLE,
- MGMT_STATUS_INVALID_PARAMS);
- hci_dev_lock(hdev);
- if (cp->val)
- changed = !hci_dev_test_and_set_flag(hdev, HCI_BONDABLE);
- else
- changed = hci_dev_test_and_clear_flag(hdev, HCI_BONDABLE);
- err = send_settings_rsp(sk, MGMT_OP_SET_BONDABLE, hdev);
- if (err < 0)
- goto unlock;
- if (changed)
- err = new_settings(hdev, sk);
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static int set_link_security(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_mode *cp = data;
- struct mgmt_pending_cmd *cmd;
- u8 val, status;
- int err;
- BT_DBG("request for %s", hdev->name);
- status = mgmt_bredr_support(hdev);
- if (status)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_LINK_SECURITY,
- status);
- if (cp->val != 0x00 && cp->val != 0x01)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_LINK_SECURITY,
- MGMT_STATUS_INVALID_PARAMS);
- hci_dev_lock(hdev);
- if (!hdev_is_powered(hdev)) {
- bool changed = false;
- if (!!cp->val != hci_dev_test_flag(hdev, HCI_LINK_SECURITY)) {
- hci_dev_change_flag(hdev, HCI_LINK_SECURITY);
- changed = true;
- }
- err = send_settings_rsp(sk, MGMT_OP_SET_LINK_SECURITY, hdev);
- if (err < 0)
- goto failed;
- if (changed)
- err = new_settings(hdev, sk);
- goto failed;
- }
- if (pending_find(MGMT_OP_SET_LINK_SECURITY, hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_LINK_SECURITY,
- MGMT_STATUS_BUSY);
- goto failed;
- }
- val = !!cp->val;
- if (test_bit(HCI_AUTH, &hdev->flags) == val) {
- err = send_settings_rsp(sk, MGMT_OP_SET_LINK_SECURITY, hdev);
- goto failed;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_SET_LINK_SECURITY, hdev, data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto failed;
- }
- err = hci_send_cmd(hdev, HCI_OP_WRITE_AUTH_ENABLE, sizeof(val), &val);
- if (err < 0) {
- mgmt_pending_remove(cmd);
- goto failed;
- }
- failed:
- hci_dev_unlock(hdev);
- return err;
- }
- static int set_ssp(struct sock *sk, struct hci_dev *hdev, void *data, u16 len)
- {
- struct mgmt_mode *cp = data;
- struct mgmt_pending_cmd *cmd;
- u8 status;
- int err;
- BT_DBG("request for %s", hdev->name);
- status = mgmt_bredr_support(hdev);
- if (status)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_SSP, status);
- if (!lmp_ssp_capable(hdev))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_SSP,
- MGMT_STATUS_NOT_SUPPORTED);
- if (cp->val != 0x00 && cp->val != 0x01)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_SSP,
- MGMT_STATUS_INVALID_PARAMS);
- hci_dev_lock(hdev);
- if (!hdev_is_powered(hdev)) {
- bool changed;
- if (cp->val) {
- changed = !hci_dev_test_and_set_flag(hdev,
- HCI_SSP_ENABLED);
- } else {
- changed = hci_dev_test_and_clear_flag(hdev,
- HCI_SSP_ENABLED);
- if (!changed)
- changed = hci_dev_test_and_clear_flag(hdev,
- HCI_HS_ENABLED);
- else
- hci_dev_clear_flag(hdev, HCI_HS_ENABLED);
- }
- err = send_settings_rsp(sk, MGMT_OP_SET_SSP, hdev);
- if (err < 0)
- goto failed;
- if (changed)
- err = new_settings(hdev, sk);
- goto failed;
- }
- if (pending_find(MGMT_OP_SET_SSP, hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_SSP,
- MGMT_STATUS_BUSY);
- goto failed;
- }
- if (!!cp->val == hci_dev_test_flag(hdev, HCI_SSP_ENABLED)) {
- err = send_settings_rsp(sk, MGMT_OP_SET_SSP, hdev);
- goto failed;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_SET_SSP, hdev, data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto failed;
- }
- if (!cp->val && hci_dev_test_flag(hdev, HCI_USE_DEBUG_KEYS))
- hci_send_cmd(hdev, HCI_OP_WRITE_SSP_DEBUG_MODE,
- sizeof(cp->val), &cp->val);
- err = hci_send_cmd(hdev, HCI_OP_WRITE_SSP_MODE, 1, &cp->val);
- if (err < 0) {
- mgmt_pending_remove(cmd);
- goto failed;
- }
- failed:
- hci_dev_unlock(hdev);
- return err;
- }
- static int set_hs(struct sock *sk, struct hci_dev *hdev, void *data, u16 len)
- {
- struct mgmt_mode *cp = data;
- bool changed;
- u8 status;
- int err;
- BT_DBG("request for %s", hdev->name);
- status = mgmt_bredr_support(hdev);
- if (status)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_HS, status);
- if (!lmp_ssp_capable(hdev))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_HS,
- MGMT_STATUS_NOT_SUPPORTED);
- if (!hci_dev_test_flag(hdev, HCI_SSP_ENABLED))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_HS,
- MGMT_STATUS_REJECTED);
- if (cp->val != 0x00 && cp->val != 0x01)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_HS,
- MGMT_STATUS_INVALID_PARAMS);
- hci_dev_lock(hdev);
- if (pending_find(MGMT_OP_SET_SSP, hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_HS,
- MGMT_STATUS_BUSY);
- goto unlock;
- }
- if (cp->val) {
- changed = !hci_dev_test_and_set_flag(hdev, HCI_HS_ENABLED);
- } else {
- if (hdev_is_powered(hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_HS,
- MGMT_STATUS_REJECTED);
- goto unlock;
- }
- changed = hci_dev_test_and_clear_flag(hdev, HCI_HS_ENABLED);
- }
- err = send_settings_rsp(sk, MGMT_OP_SET_HS, hdev);
- if (err < 0)
- goto unlock;
- if (changed)
- err = new_settings(hdev, sk);
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static void le_enable_complete(struct hci_dev *hdev, u8 status, u16 opcode)
- {
- struct cmd_lookup match = { NULL, hdev };
- hci_dev_lock(hdev);
- if (status) {
- u8 mgmt_err = mgmt_status(status);
- mgmt_pending_foreach(MGMT_OP_SET_LE, hdev, cmd_status_rsp,
- &mgmt_err);
- goto unlock;
- }
- mgmt_pending_foreach(MGMT_OP_SET_LE, hdev, settings_rsp, &match);
- new_settings(hdev, match.sk);
- if (match.sk)
- sock_put(match.sk);
- /* Make sure the controller has a good default for
- * advertising data. Restrict the update to when LE
- * has actually been enabled. During power on, the
- * update in powered_update_hci will take care of it.
- */
- if (hci_dev_test_flag(hdev, HCI_LE_ENABLED)) {
- struct hci_request req;
- hci_req_init(&req, hdev);
- update_adv_data(&req);
- update_scan_rsp_data(&req);
- __hci_update_background_scan(&req);
- hci_req_run(&req, NULL);
- }
- unlock:
- hci_dev_unlock(hdev);
- }
- static int set_le(struct sock *sk, struct hci_dev *hdev, void *data, u16 len)
- {
- struct mgmt_mode *cp = data;
- struct hci_cp_write_le_host_supported hci_cp;
- struct mgmt_pending_cmd *cmd;
- struct hci_request req;
- int err;
- u8 val, enabled;
- BT_DBG("request for %s", hdev->name);
- if (!lmp_le_capable(hdev))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_LE,
- MGMT_STATUS_NOT_SUPPORTED);
- if (cp->val != 0x00 && cp->val != 0x01)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_LE,
- MGMT_STATUS_INVALID_PARAMS);
- /* Bluetooth single mode LE only controllers or dual-mode
- * controllers configured as LE only devices, do not allow
- * switching LE off. These have either LE enabled explicitly
- * or BR/EDR has been previously switched off.
- *
- * When trying to enable an already enabled LE, then gracefully
- * send a positive response. Trying to disable it however will
- * result into rejection.
- */
- if (!hci_dev_test_flag(hdev, HCI_BREDR_ENABLED)) {
- if (cp->val == 0x01)
- return send_settings_rsp(sk, MGMT_OP_SET_LE, hdev);
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_LE,
- MGMT_STATUS_REJECTED);
- }
- hci_dev_lock(hdev);
- val = !!cp->val;
- enabled = lmp_host_le_capable(hdev);
- if (!val)
- clear_adv_instance(hdev, NULL, 0x00, true);
- if (!hdev_is_powered(hdev) || val == enabled) {
- bool changed = false;
- if (val != hci_dev_test_flag(hdev, HCI_LE_ENABLED)) {
- hci_dev_change_flag(hdev, HCI_LE_ENABLED);
- changed = true;
- }
- if (!val && hci_dev_test_flag(hdev, HCI_ADVERTISING)) {
- hci_dev_clear_flag(hdev, HCI_ADVERTISING);
- changed = true;
- }
- err = send_settings_rsp(sk, MGMT_OP_SET_LE, hdev);
- if (err < 0)
- goto unlock;
- if (changed)
- err = new_settings(hdev, sk);
- goto unlock;
- }
- if (pending_find(MGMT_OP_SET_LE, hdev) ||
- pending_find(MGMT_OP_SET_ADVERTISING, hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_LE,
- MGMT_STATUS_BUSY);
- goto unlock;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_SET_LE, hdev, data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto unlock;
- }
- hci_req_init(&req, hdev);
- memset(&hci_cp, 0, sizeof(hci_cp));
- if (val) {
- hci_cp.le = val;
- hci_cp.simul = 0x00;
- } else {
- if (hci_dev_test_flag(hdev, HCI_LE_ADV))
- disable_advertising(&req);
- }
- hci_req_add(&req, HCI_OP_WRITE_LE_HOST_SUPPORTED, sizeof(hci_cp),
- &hci_cp);
- err = hci_req_run(&req, le_enable_complete);
- if (err < 0)
- mgmt_pending_remove(cmd);
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- /* This is a helper function to test for pending mgmt commands that can
- * cause CoD or EIR HCI commands. We can only allow one such pending
- * mgmt command at a time since otherwise we cannot easily track what
- * the current values are, will be, and based on that calculate if a new
- * HCI command needs to be sent and if yes with what value.
- */
- static bool pending_eir_or_class(struct hci_dev *hdev)
- {
- struct mgmt_pending_cmd *cmd;
- list_for_each_entry(cmd, &hdev->mgmt_pending, list) {
- switch (cmd->opcode) {
- case MGMT_OP_ADD_UUID:
- case MGMT_OP_REMOVE_UUID:
- case MGMT_OP_SET_DEV_CLASS:
- case MGMT_OP_SET_POWERED:
- return true;
- }
- }
- return false;
- }
- static const u8 bluetooth_base_uuid[] = {
- 0xfb, 0x34, 0x9b, 0x5f, 0x80, 0x00, 0x00, 0x80,
- 0x00, 0x10, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
- };
- static u8 get_uuid_size(const u8 *uuid)
- {
- u32 val;
- if (memcmp(uuid, bluetooth_base_uuid, 12))
- return 128;
- val = get_unaligned_le32(&uuid[12]);
- if (val > 0xffff)
- return 32;
- return 16;
- }
- static void mgmt_class_complete(struct hci_dev *hdev, u16 mgmt_op, u8 status)
- {
- struct mgmt_pending_cmd *cmd;
- hci_dev_lock(hdev);
- cmd = pending_find(mgmt_op, hdev);
- if (!cmd)
- goto unlock;
- mgmt_cmd_complete(cmd->sk, cmd->index, cmd->opcode,
- mgmt_status(status), hdev->dev_class, 3);
- mgmt_pending_remove(cmd);
- unlock:
- hci_dev_unlock(hdev);
- }
- static void add_uuid_complete(struct hci_dev *hdev, u8 status, u16 opcode)
- {
- BT_DBG("status 0x%02x", status);
- mgmt_class_complete(hdev, MGMT_OP_ADD_UUID, status);
- }
- static int add_uuid(struct sock *sk, struct hci_dev *hdev, void *data, u16 len)
- {
- struct mgmt_cp_add_uuid *cp = data;
- struct mgmt_pending_cmd *cmd;
- struct hci_request req;
- struct bt_uuid *uuid;
- int err;
- BT_DBG("request for %s", hdev->name);
- hci_dev_lock(hdev);
- if (pending_eir_or_class(hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_ADD_UUID,
- MGMT_STATUS_BUSY);
- goto failed;
- }
- uuid = kmalloc(sizeof(*uuid), GFP_KERNEL);
- if (!uuid) {
- err = -ENOMEM;
- goto failed;
- }
- memcpy(uuid->uuid, cp->uuid, 16);
- uuid->svc_hint = cp->svc_hint;
- uuid->size = get_uuid_size(cp->uuid);
- list_add_tail(&uuid->list, &hdev->uuids);
- hci_req_init(&req, hdev);
- update_class(&req);
- update_eir(&req);
- err = hci_req_run(&req, add_uuid_complete);
- if (err < 0) {
- if (err != -ENODATA)
- goto failed;
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_ADD_UUID, 0,
- hdev->dev_class, 3);
- goto failed;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_ADD_UUID, hdev, data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto failed;
- }
- err = 0;
- failed:
- hci_dev_unlock(hdev);
- return err;
- }
- static bool enable_service_cache(struct hci_dev *hdev)
- {
- if (!hdev_is_powered(hdev))
- return false;
- if (!hci_dev_test_and_set_flag(hdev, HCI_SERVICE_CACHE)) {
- queue_delayed_work(hdev->workqueue, &hdev->service_cache,
- CACHE_TIMEOUT);
- return true;
- }
- return false;
- }
- static void remove_uuid_complete(struct hci_dev *hdev, u8 status, u16 opcode)
- {
- BT_DBG("status 0x%02x", status);
- mgmt_class_complete(hdev, MGMT_OP_REMOVE_UUID, status);
- }
- static int remove_uuid(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_cp_remove_uuid *cp = data;
- struct mgmt_pending_cmd *cmd;
- struct bt_uuid *match, *tmp;
- u8 bt_uuid_any[] = { 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 };
- struct hci_request req;
- int err, found;
- BT_DBG("request for %s", hdev->name);
- hci_dev_lock(hdev);
- if (pending_eir_or_class(hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_REMOVE_UUID,
- MGMT_STATUS_BUSY);
- goto unlock;
- }
- if (memcmp(cp->uuid, bt_uuid_any, 16) == 0) {
- hci_uuids_clear(hdev);
- if (enable_service_cache(hdev)) {
- err = mgmt_cmd_complete(sk, hdev->id,
- MGMT_OP_REMOVE_UUID,
- 0, hdev->dev_class, 3);
- goto unlock;
- }
- goto update_class;
- }
- found = 0;
- list_for_each_entry_safe(match, tmp, &hdev->uuids, list) {
- if (memcmp(match->uuid, cp->uuid, 16) != 0)
- continue;
- list_del(&match->list);
- kfree(match);
- found++;
- }
- if (found == 0) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_REMOVE_UUID,
- MGMT_STATUS_INVALID_PARAMS);
- goto unlock;
- }
- update_class:
- hci_req_init(&req, hdev);
- update_class(&req);
- update_eir(&req);
- err = hci_req_run(&req, remove_uuid_complete);
- if (err < 0) {
- if (err != -ENODATA)
- goto unlock;
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_REMOVE_UUID, 0,
- hdev->dev_class, 3);
- goto unlock;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_REMOVE_UUID, hdev, data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto unlock;
- }
- err = 0;
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static void set_class_complete(struct hci_dev *hdev, u8 status, u16 opcode)
- {
- BT_DBG("status 0x%02x", status);
- mgmt_class_complete(hdev, MGMT_OP_SET_DEV_CLASS, status);
- }
- static int set_dev_class(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_cp_set_dev_class *cp = data;
- struct mgmt_pending_cmd *cmd;
- struct hci_request req;
- int err;
- BT_DBG("request for %s", hdev->name);
- if (!lmp_bredr_capable(hdev))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_DEV_CLASS,
- MGMT_STATUS_NOT_SUPPORTED);
- hci_dev_lock(hdev);
- if (pending_eir_or_class(hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_DEV_CLASS,
- MGMT_STATUS_BUSY);
- goto unlock;
- }
- if ((cp->minor & 0x03) != 0 || (cp->major & 0xe0) != 0) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_DEV_CLASS,
- MGMT_STATUS_INVALID_PARAMS);
- goto unlock;
- }
- hdev->major_class = cp->major;
- hdev->minor_class = cp->minor;
- if (!hdev_is_powered(hdev)) {
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_SET_DEV_CLASS, 0,
- hdev->dev_class, 3);
- goto unlock;
- }
- hci_req_init(&req, hdev);
- if (hci_dev_test_and_clear_flag(hdev, HCI_SERVICE_CACHE)) {
- hci_dev_unlock(hdev);
- cancel_delayed_work_sync(&hdev->service_cache);
- hci_dev_lock(hdev);
- update_eir(&req);
- }
- update_class(&req);
- err = hci_req_run(&req, set_class_complete);
- if (err < 0) {
- if (err != -ENODATA)
- goto unlock;
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_SET_DEV_CLASS, 0,
- hdev->dev_class, 3);
- goto unlock;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_SET_DEV_CLASS, hdev, data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto unlock;
- }
- err = 0;
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static int load_link_keys(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_cp_load_link_keys *cp = data;
- const u16 max_key_count = ((U16_MAX - sizeof(*cp)) /
- sizeof(struct mgmt_link_key_info));
- u16 key_count, expected_len;
- bool changed;
- int i;
- BT_DBG("request for %s", hdev->name);
- if (!lmp_bredr_capable(hdev))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_LOAD_LINK_KEYS,
- MGMT_STATUS_NOT_SUPPORTED);
- key_count = __le16_to_cpu(cp->key_count);
- if (key_count > max_key_count) {
- BT_ERR("load_link_keys: too big key_count value %u",
- key_count);
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_LOAD_LINK_KEYS,
- MGMT_STATUS_INVALID_PARAMS);
- }
- expected_len = sizeof(*cp) + key_count *
- sizeof(struct mgmt_link_key_info);
- if (expected_len != len) {
- BT_ERR("load_link_keys: expected %u bytes, got %u bytes",
- expected_len, len);
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_LOAD_LINK_KEYS,
- MGMT_STATUS_INVALID_PARAMS);
- }
- if (cp->debug_keys != 0x00 && cp->debug_keys != 0x01)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_LOAD_LINK_KEYS,
- MGMT_STATUS_INVALID_PARAMS);
- BT_DBG("%s debug_keys %u key_count %u", hdev->name, cp->debug_keys,
- key_count);
- for (i = 0; i < key_count; i++) {
- struct mgmt_link_key_info *key = &cp->keys[i];
- if (key->addr.type != BDADDR_BREDR || key->type > 0x08)
- return mgmt_cmd_status(sk, hdev->id,
- MGMT_OP_LOAD_LINK_KEYS,
- MGMT_STATUS_INVALID_PARAMS);
- }
- hci_dev_lock(hdev);
- hci_link_keys_clear(hdev);
- if (cp->debug_keys)
- changed = !hci_dev_test_and_set_flag(hdev, HCI_KEEP_DEBUG_KEYS);
- else
- changed = hci_dev_test_and_clear_flag(hdev,
- HCI_KEEP_DEBUG_KEYS);
- if (changed)
- new_settings(hdev, NULL);
- for (i = 0; i < key_count; i++) {
- struct mgmt_link_key_info *key = &cp->keys[i];
- /* Always ignore debug keys and require a new pairing if
- * the user wants to use them.
- */
- if (key->type == HCI_LK_DEBUG_COMBINATION)
- continue;
- hci_add_link_key(hdev, NULL, &key->addr.bdaddr, key->val,
- key->type, key->pin_len, NULL);
- }
- mgmt_cmd_complete(sk, hdev->id, MGMT_OP_LOAD_LINK_KEYS, 0, NULL, 0);
- hci_dev_unlock(hdev);
- return 0;
- }
- static int device_unpaired(struct hci_dev *hdev, bdaddr_t *bdaddr,
- u8 addr_type, struct sock *skip_sk)
- {
- struct mgmt_ev_device_unpaired ev;
- bacpy(&ev.addr.bdaddr, bdaddr);
- ev.addr.type = addr_type;
- return mgmt_event(MGMT_EV_DEVICE_UNPAIRED, hdev, &ev, sizeof(ev),
- skip_sk);
- }
- static int unpair_device(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_cp_unpair_device *cp = data;
- struct mgmt_rp_unpair_device rp;
- struct hci_conn_params *params;
- struct mgmt_pending_cmd *cmd;
- struct hci_conn *conn;
- u8 addr_type;
- int err;
- memset(&rp, 0, sizeof(rp));
- bacpy(&rp.addr.bdaddr, &cp->addr.bdaddr);
- rp.addr.type = cp->addr.type;
- if (!bdaddr_type_is_valid(cp->addr.type))
- return mgmt_cmd_complete(sk, hdev->id, MGMT_OP_UNPAIR_DEVICE,
- MGMT_STATUS_INVALID_PARAMS,
- &rp, sizeof(rp));
- if (cp->disconnect != 0x00 && cp->disconnect != 0x01)
- return mgmt_cmd_complete(sk, hdev->id, MGMT_OP_UNPAIR_DEVICE,
- MGMT_STATUS_INVALID_PARAMS,
- &rp, sizeof(rp));
- hci_dev_lock(hdev);
- if (!hdev_is_powered(hdev)) {
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_UNPAIR_DEVICE,
- MGMT_STATUS_NOT_POWERED, &rp,
- sizeof(rp));
- goto unlock;
- }
- if (cp->addr.type == BDADDR_BREDR) {
- /* If disconnection is requested, then look up the
- * connection. If the remote device is connected, it
- * will be later used to terminate the link.
- *
- * Setting it to NULL explicitly will cause no
- * termination of the link.
- */
- if (cp->disconnect)
- conn = hci_conn_hash_lookup_ba(hdev, ACL_LINK,
- &cp->addr.bdaddr);
- else
- conn = NULL;
- err = hci_remove_link_key(hdev, &cp->addr.bdaddr);
- if (err < 0) {
- err = mgmt_cmd_complete(sk, hdev->id,
- MGMT_OP_UNPAIR_DEVICE,
- MGMT_STATUS_NOT_PAIRED, &rp,
- sizeof(rp));
- goto unlock;
- }
- goto done;
- }
- /* LE address type */
- addr_type = le_addr_type(cp->addr.type);
- /* Abort any ongoing SMP pairing. Removes ltk and irk if they exist. */
- err = smp_cancel_and_remove_pairing(hdev, &cp->addr.bdaddr, addr_type);
- if (err < 0) {
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_UNPAIR_DEVICE,
- MGMT_STATUS_NOT_PAIRED, &rp,
- sizeof(rp));
- goto unlock;
- }
- conn = hci_conn_hash_lookup_le(hdev, &cp->addr.bdaddr, addr_type);
- if (!conn) {
- hci_conn_params_del(hdev, &cp->addr.bdaddr, addr_type);
- goto done;
- }
- /* Defer clearing up the connection parameters until closing to
- * give a chance of keeping them if a repairing happens.
- */
- set_bit(HCI_CONN_PARAM_REMOVAL_PEND, &conn->flags);
- /* Disable auto-connection parameters if present */
- params = hci_conn_params_lookup(hdev, &cp->addr.bdaddr, addr_type);
- if (params) {
- if (params->explicit_connect)
- params->auto_connect = HCI_AUTO_CONN_EXPLICIT;
- else
- params->auto_connect = HCI_AUTO_CONN_DISABLED;
- }
- /* If disconnection is not requested, then clear the connection
- * variable so that the link is not terminated.
- */
- if (!cp->disconnect)
- conn = NULL;
- done:
- /* If the connection variable is set, then termination of the
- * link is requested.
- */
- if (!conn) {
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_UNPAIR_DEVICE, 0,
- &rp, sizeof(rp));
- device_unpaired(hdev, &cp->addr.bdaddr, cp->addr.type, sk);
- goto unlock;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_UNPAIR_DEVICE, hdev, cp,
- sizeof(*cp));
- if (!cmd) {
- err = -ENOMEM;
- goto unlock;
- }
- cmd->cmd_complete = addr_cmd_complete;
- err = hci_abort_conn(conn, HCI_ERROR_REMOTE_USER_TERM);
- if (err < 0)
- mgmt_pending_remove(cmd);
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static int disconnect(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_cp_disconnect *cp = data;
- struct mgmt_rp_disconnect rp;
- struct mgmt_pending_cmd *cmd;
- struct hci_conn *conn;
- int err;
- BT_DBG("");
- memset(&rp, 0, sizeof(rp));
- bacpy(&rp.addr.bdaddr, &cp->addr.bdaddr);
- rp.addr.type = cp->addr.type;
- if (!bdaddr_type_is_valid(cp->addr.type))
- return mgmt_cmd_complete(sk, hdev->id, MGMT_OP_DISCONNECT,
- MGMT_STATUS_INVALID_PARAMS,
- &rp, sizeof(rp));
- hci_dev_lock(hdev);
- if (!test_bit(HCI_UP, &hdev->flags)) {
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_DISCONNECT,
- MGMT_STATUS_NOT_POWERED, &rp,
- sizeof(rp));
- goto failed;
- }
- if (pending_find(MGMT_OP_DISCONNECT, hdev)) {
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_DISCONNECT,
- MGMT_STATUS_BUSY, &rp, sizeof(rp));
- goto failed;
- }
- if (cp->addr.type == BDADDR_BREDR)
- conn = hci_conn_hash_lookup_ba(hdev, ACL_LINK,
- &cp->addr.bdaddr);
- else
- conn = hci_conn_hash_lookup_le(hdev, &cp->addr.bdaddr,
- le_addr_type(cp->addr.type));
- if (!conn || conn->state == BT_OPEN || conn->state == BT_CLOSED) {
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_DISCONNECT,
- MGMT_STATUS_NOT_CONNECTED, &rp,
- sizeof(rp));
- goto failed;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_DISCONNECT, hdev, data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto failed;
- }
- cmd->cmd_complete = generic_cmd_complete;
- err = hci_disconnect(conn, HCI_ERROR_REMOTE_USER_TERM);
- if (err < 0)
- mgmt_pending_remove(cmd);
- failed:
- hci_dev_unlock(hdev);
- return err;
- }
- static u8 link_to_bdaddr(u8 link_type, u8 addr_type)
- {
- switch (link_type) {
- case LE_LINK:
- switch (addr_type) {
- case ADDR_LE_DEV_PUBLIC:
- return BDADDR_LE_PUBLIC;
- default:
- /* Fallback to LE Random address type */
- return BDADDR_LE_RANDOM;
- }
- default:
- /* Fallback to BR/EDR type */
- return BDADDR_BREDR;
- }
- }
- static int get_connections(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 data_len)
- {
- struct mgmt_rp_get_connections *rp;
- struct hci_conn *c;
- size_t rp_len;
- int err;
- u16 i;
- BT_DBG("");
- hci_dev_lock(hdev);
- if (!hdev_is_powered(hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_GET_CONNECTIONS,
- MGMT_STATUS_NOT_POWERED);
- goto unlock;
- }
- i = 0;
- list_for_each_entry(c, &hdev->conn_hash.list, list) {
- if (test_bit(HCI_CONN_MGMT_CONNECTED, &c->flags))
- i++;
- }
- rp_len = sizeof(*rp) + (i * sizeof(struct mgmt_addr_info));
- rp = kmalloc(rp_len, GFP_KERNEL);
- if (!rp) {
- err = -ENOMEM;
- goto unlock;
- }
- i = 0;
- list_for_each_entry(c, &hdev->conn_hash.list, list) {
- if (!test_bit(HCI_CONN_MGMT_CONNECTED, &c->flags))
- continue;
- bacpy(&rp->addr[i].bdaddr, &c->dst);
- rp->addr[i].type = link_to_bdaddr(c->type, c->dst_type);
- if (c->type == SCO_LINK || c->type == ESCO_LINK)
- continue;
- i++;
- }
- rp->conn_count = cpu_to_le16(i);
- /* Recalculate length in case of filtered SCO connections, etc */
- rp_len = sizeof(*rp) + (i * sizeof(struct mgmt_addr_info));
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_GET_CONNECTIONS, 0, rp,
- rp_len);
- kfree(rp);
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static int send_pin_code_neg_reply(struct sock *sk, struct hci_dev *hdev,
- struct mgmt_cp_pin_code_neg_reply *cp)
- {
- struct mgmt_pending_cmd *cmd;
- int err;
- cmd = mgmt_pending_add(sk, MGMT_OP_PIN_CODE_NEG_REPLY, hdev, cp,
- sizeof(*cp));
- if (!cmd)
- return -ENOMEM;
- err = hci_send_cmd(hdev, HCI_OP_PIN_CODE_NEG_REPLY,
- sizeof(cp->addr.bdaddr), &cp->addr.bdaddr);
- if (err < 0)
- mgmt_pending_remove(cmd);
- return err;
- }
- static int pin_code_reply(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct hci_conn *conn;
- struct mgmt_cp_pin_code_reply *cp = data;
- struct hci_cp_pin_code_reply reply;
- struct mgmt_pending_cmd *cmd;
- int err;
- BT_DBG("");
- hci_dev_lock(hdev);
- if (!hdev_is_powered(hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_PIN_CODE_REPLY,
- MGMT_STATUS_NOT_POWERED);
- goto failed;
- }
- conn = hci_conn_hash_lookup_ba(hdev, ACL_LINK, &cp->addr.bdaddr);
- if (!conn) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_PIN_CODE_REPLY,
- MGMT_STATUS_NOT_CONNECTED);
- goto failed;
- }
- if (conn->pending_sec_level == BT_SECURITY_HIGH && cp->pin_len != 16) {
- struct mgmt_cp_pin_code_neg_reply ncp;
- memcpy(&ncp.addr, &cp->addr, sizeof(ncp.addr));
- BT_ERR("PIN code is not 16 bytes long");
- err = send_pin_code_neg_reply(sk, hdev, &ncp);
- if (err >= 0)
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_PIN_CODE_REPLY,
- MGMT_STATUS_INVALID_PARAMS);
- goto failed;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_PIN_CODE_REPLY, hdev, data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto failed;
- }
- cmd->cmd_complete = addr_cmd_complete;
- bacpy(&reply.bdaddr, &cp->addr.bdaddr);
- reply.pin_len = cp->pin_len;
- memcpy(reply.pin_code, cp->pin_code, sizeof(reply.pin_code));
- err = hci_send_cmd(hdev, HCI_OP_PIN_CODE_REPLY, sizeof(reply), &reply);
- if (err < 0)
- mgmt_pending_remove(cmd);
- failed:
- hci_dev_unlock(hdev);
- return err;
- }
- static int set_io_capability(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_cp_set_io_capability *cp = data;
- BT_DBG("");
- if (cp->io_capability > SMP_IO_KEYBOARD_DISPLAY)
- return mgmt_cmd_complete(sk, hdev->id, MGMT_OP_SET_IO_CAPABILITY,
- MGMT_STATUS_INVALID_PARAMS, NULL, 0);
- hci_dev_lock(hdev);
- hdev->io_capability = cp->io_capability;
- BT_DBG("%s IO capability set to 0x%02x", hdev->name,
- hdev->io_capability);
- hci_dev_unlock(hdev);
- return mgmt_cmd_complete(sk, hdev->id, MGMT_OP_SET_IO_CAPABILITY, 0,
- NULL, 0);
- }
- static struct mgmt_pending_cmd *find_pairing(struct hci_conn *conn)
- {
- struct hci_dev *hdev = conn->hdev;
- struct mgmt_pending_cmd *cmd;
- list_for_each_entry(cmd, &hdev->mgmt_pending, list) {
- if (cmd->opcode != MGMT_OP_PAIR_DEVICE)
- continue;
- if (cmd->user_data != conn)
- continue;
- return cmd;
- }
- return NULL;
- }
- static int pairing_complete(struct mgmt_pending_cmd *cmd, u8 status)
- {
- struct mgmt_rp_pair_device rp;
- struct hci_conn *conn = cmd->user_data;
- int err;
- bacpy(&rp.addr.bdaddr, &conn->dst);
- rp.addr.type = link_to_bdaddr(conn->type, conn->dst_type);
- err = mgmt_cmd_complete(cmd->sk, cmd->index, MGMT_OP_PAIR_DEVICE,
- status, &rp, sizeof(rp));
- /* So we don't get further callbacks for this connection */
- conn->connect_cfm_cb = NULL;
- conn->security_cfm_cb = NULL;
- conn->disconn_cfm_cb = NULL;
- hci_conn_drop(conn);
- /* The device is paired so there is no need to remove
- * its connection parameters anymore.
- */
- clear_bit(HCI_CONN_PARAM_REMOVAL_PEND, &conn->flags);
- hci_conn_put(conn);
- return err;
- }
- void mgmt_smp_complete(struct hci_conn *conn, bool complete)
- {
- u8 status = complete ? MGMT_STATUS_SUCCESS : MGMT_STATUS_FAILED;
- struct mgmt_pending_cmd *cmd;
- cmd = find_pairing(conn);
- if (cmd) {
- cmd->cmd_complete(cmd, status);
- mgmt_pending_remove(cmd);
- }
- }
- static void pairing_complete_cb(struct hci_conn *conn, u8 status)
- {
- struct mgmt_pending_cmd *cmd;
- BT_DBG("status %u", status);
- cmd = find_pairing(conn);
- if (!cmd) {
- BT_DBG("Unable to find a pending command");
- return;
- }
- cmd->cmd_complete(cmd, mgmt_status(status));
- mgmt_pending_remove(cmd);
- }
- static void le_pairing_complete_cb(struct hci_conn *conn, u8 status)
- {
- struct mgmt_pending_cmd *cmd;
- BT_DBG("status %u", status);
- if (!status)
- return;
- cmd = find_pairing(conn);
- if (!cmd) {
- BT_DBG("Unable to find a pending command");
- return;
- }
- cmd->cmd_complete(cmd, mgmt_status(status));
- mgmt_pending_remove(cmd);
- }
- static int pair_device(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_cp_pair_device *cp = data;
- struct mgmt_rp_pair_device rp;
- struct mgmt_pending_cmd *cmd;
- u8 sec_level, auth_type;
- struct hci_conn *conn;
- int err;
- BT_DBG("");
- memset(&rp, 0, sizeof(rp));
- bacpy(&rp.addr.bdaddr, &cp->addr.bdaddr);
- rp.addr.type = cp->addr.type;
- if (!bdaddr_type_is_valid(cp->addr.type))
- return mgmt_cmd_complete(sk, hdev->id, MGMT_OP_PAIR_DEVICE,
- MGMT_STATUS_INVALID_PARAMS,
- &rp, sizeof(rp));
- if (cp->io_cap > SMP_IO_KEYBOARD_DISPLAY)
- return mgmt_cmd_complete(sk, hdev->id, MGMT_OP_PAIR_DEVICE,
- MGMT_STATUS_INVALID_PARAMS,
- &rp, sizeof(rp));
- hci_dev_lock(hdev);
- if (!hdev_is_powered(hdev)) {
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_PAIR_DEVICE,
- MGMT_STATUS_NOT_POWERED, &rp,
- sizeof(rp));
- goto unlock;
- }
- if (hci_bdaddr_is_paired(hdev, &cp->addr.bdaddr, cp->addr.type)) {
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_PAIR_DEVICE,
- MGMT_STATUS_ALREADY_PAIRED, &rp,
- sizeof(rp));
- goto unlock;
- }
- sec_level = BT_SECURITY_MEDIUM;
- auth_type = HCI_AT_DEDICATED_BONDING;
- if (cp->addr.type == BDADDR_BREDR) {
- conn = hci_connect_acl(hdev, &cp->addr.bdaddr, sec_level,
- auth_type);
- } else {
- u8 addr_type = le_addr_type(cp->addr.type);
- struct hci_conn_params *p;
- /* When pairing a new device, it is expected to remember
- * this device for future connections. Adding the connection
- * parameter information ahead of time allows tracking
- * of the slave preferred values and will speed up any
- * further connection establishment.
- *
- * If connection parameters already exist, then they
- * will be kept and this function does nothing.
- */
- p = hci_conn_params_add(hdev, &cp->addr.bdaddr, addr_type);
- if (p->auto_connect == HCI_AUTO_CONN_EXPLICIT)
- p->auto_connect = HCI_AUTO_CONN_DISABLED;
- conn = hci_connect_le_scan(hdev, &cp->addr.bdaddr,
- addr_type, sec_level,
- HCI_LE_CONN_TIMEOUT,
- HCI_ROLE_MASTER);
- }
- if (IS_ERR(conn)) {
- int status;
- if (PTR_ERR(conn) == -EBUSY)
- status = MGMT_STATUS_BUSY;
- else if (PTR_ERR(conn) == -EOPNOTSUPP)
- status = MGMT_STATUS_NOT_SUPPORTED;
- else if (PTR_ERR(conn) == -ECONNREFUSED)
- status = MGMT_STATUS_REJECTED;
- else
- status = MGMT_STATUS_CONNECT_FAILED;
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_PAIR_DEVICE,
- status, &rp, sizeof(rp));
- goto unlock;
- }
- if (conn->connect_cfm_cb) {
- hci_conn_drop(conn);
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_PAIR_DEVICE,
- MGMT_STATUS_BUSY, &rp, sizeof(rp));
- goto unlock;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_PAIR_DEVICE, hdev, data, len);
- if (!cmd) {
- err = -ENOMEM;
- hci_conn_drop(conn);
- goto unlock;
- }
- cmd->cmd_complete = pairing_complete;
- /* For LE, just connecting isn't a proof that the pairing finished */
- if (cp->addr.type == BDADDR_BREDR) {
- conn->connect_cfm_cb = pairing_complete_cb;
- conn->security_cfm_cb = pairing_complete_cb;
- conn->disconn_cfm_cb = pairing_complete_cb;
- } else {
- conn->connect_cfm_cb = le_pairing_complete_cb;
- conn->security_cfm_cb = le_pairing_complete_cb;
- conn->disconn_cfm_cb = le_pairing_complete_cb;
- }
- conn->io_capability = cp->io_cap;
- cmd->user_data = hci_conn_get(conn);
- if ((conn->state == BT_CONNECTED || conn->state == BT_CONFIG) &&
- hci_conn_security(conn, sec_level, auth_type, true)) {
- cmd->cmd_complete(cmd, 0);
- mgmt_pending_remove(cmd);
- }
- err = 0;
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static int cancel_pair_device(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_addr_info *addr = data;
- struct mgmt_pending_cmd *cmd;
- struct hci_conn *conn;
- int err;
- BT_DBG("");
- hci_dev_lock(hdev);
- if (!hdev_is_powered(hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_CANCEL_PAIR_DEVICE,
- MGMT_STATUS_NOT_POWERED);
- goto unlock;
- }
- cmd = pending_find(MGMT_OP_PAIR_DEVICE, hdev);
- if (!cmd) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_CANCEL_PAIR_DEVICE,
- MGMT_STATUS_INVALID_PARAMS);
- goto unlock;
- }
- conn = cmd->user_data;
- if (bacmp(&addr->bdaddr, &conn->dst) != 0) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_CANCEL_PAIR_DEVICE,
- MGMT_STATUS_INVALID_PARAMS);
- goto unlock;
- }
- cmd->cmd_complete(cmd, MGMT_STATUS_CANCELLED);
- mgmt_pending_remove(cmd);
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_CANCEL_PAIR_DEVICE, 0,
- addr, sizeof(*addr));
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static int user_pairing_resp(struct sock *sk, struct hci_dev *hdev,
- struct mgmt_addr_info *addr, u16 mgmt_op,
- u16 hci_op, __le32 passkey)
- {
- struct mgmt_pending_cmd *cmd;
- struct hci_conn *conn;
- int err;
- hci_dev_lock(hdev);
- if (!hdev_is_powered(hdev)) {
- err = mgmt_cmd_complete(sk, hdev->id, mgmt_op,
- MGMT_STATUS_NOT_POWERED, addr,
- sizeof(*addr));
- goto done;
- }
- if (addr->type == BDADDR_BREDR)
- conn = hci_conn_hash_lookup_ba(hdev, ACL_LINK, &addr->bdaddr);
- else
- conn = hci_conn_hash_lookup_le(hdev, &addr->bdaddr,
- le_addr_type(addr->type));
- if (!conn) {
- err = mgmt_cmd_complete(sk, hdev->id, mgmt_op,
- MGMT_STATUS_NOT_CONNECTED, addr,
- sizeof(*addr));
- goto done;
- }
- if (addr->type == BDADDR_LE_PUBLIC || addr->type == BDADDR_LE_RANDOM) {
- err = smp_user_confirm_reply(conn, mgmt_op, passkey);
- if (!err)
- err = mgmt_cmd_complete(sk, hdev->id, mgmt_op,
- MGMT_STATUS_SUCCESS, addr,
- sizeof(*addr));
- else
- err = mgmt_cmd_complete(sk, hdev->id, mgmt_op,
- MGMT_STATUS_FAILED, addr,
- sizeof(*addr));
- goto done;
- }
- cmd = mgmt_pending_add(sk, mgmt_op, hdev, addr, sizeof(*addr));
- if (!cmd) {
- err = -ENOMEM;
- goto done;
- }
- cmd->cmd_complete = addr_cmd_complete;
- /* Continue with pairing via HCI */
- if (hci_op == HCI_OP_USER_PASSKEY_REPLY) {
- struct hci_cp_user_passkey_reply cp;
- bacpy(&cp.bdaddr, &addr->bdaddr);
- cp.passkey = passkey;
- err = hci_send_cmd(hdev, hci_op, sizeof(cp), &cp);
- } else
- err = hci_send_cmd(hdev, hci_op, sizeof(addr->bdaddr),
- &addr->bdaddr);
- if (err < 0)
- mgmt_pending_remove(cmd);
- done:
- hci_dev_unlock(hdev);
- return err;
- }
- static int pin_code_neg_reply(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 len)
- {
- struct mgmt_cp_pin_code_neg_reply *cp = data;
- BT_DBG("");
- return user_pairing_resp(sk, hdev, &cp->addr,
- MGMT_OP_PIN_CODE_NEG_REPLY,
- HCI_OP_PIN_CODE_NEG_REPLY, 0);
- }
- static int user_confirm_reply(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_cp_user_confirm_reply *cp = data;
- BT_DBG("");
- if (len != sizeof(*cp))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_USER_CONFIRM_REPLY,
- MGMT_STATUS_INVALID_PARAMS);
- return user_pairing_resp(sk, hdev, &cp->addr,
- MGMT_OP_USER_CONFIRM_REPLY,
- HCI_OP_USER_CONFIRM_REPLY, 0);
- }
- static int user_confirm_neg_reply(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 len)
- {
- struct mgmt_cp_user_confirm_neg_reply *cp = data;
- BT_DBG("");
- return user_pairing_resp(sk, hdev, &cp->addr,
- MGMT_OP_USER_CONFIRM_NEG_REPLY,
- HCI_OP_USER_CONFIRM_NEG_REPLY, 0);
- }
- static int user_passkey_reply(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_cp_user_passkey_reply *cp = data;
- BT_DBG("");
- return user_pairing_resp(sk, hdev, &cp->addr,
- MGMT_OP_USER_PASSKEY_REPLY,
- HCI_OP_USER_PASSKEY_REPLY, cp->passkey);
- }
- static int user_passkey_neg_reply(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 len)
- {
- struct mgmt_cp_user_passkey_neg_reply *cp = data;
- BT_DBG("");
- return user_pairing_resp(sk, hdev, &cp->addr,
- MGMT_OP_USER_PASSKEY_NEG_REPLY,
- HCI_OP_USER_PASSKEY_NEG_REPLY, 0);
- }
- static void update_name(struct hci_request *req)
- {
- struct hci_dev *hdev = req->hdev;
- struct hci_cp_write_local_name cp;
- memcpy(cp.name, hdev->dev_name, sizeof(cp.name));
- hci_req_add(req, HCI_OP_WRITE_LOCAL_NAME, sizeof(cp), &cp);
- }
- static void set_name_complete(struct hci_dev *hdev, u8 status, u16 opcode)
- {
- struct mgmt_cp_set_local_name *cp;
- struct mgmt_pending_cmd *cmd;
- BT_DBG("status 0x%02x", status);
- hci_dev_lock(hdev);
- cmd = pending_find(MGMT_OP_SET_LOCAL_NAME, hdev);
- if (!cmd)
- goto unlock;
- cp = cmd->param;
- if (status)
- mgmt_cmd_status(cmd->sk, hdev->id, MGMT_OP_SET_LOCAL_NAME,
- mgmt_status(status));
- else
- mgmt_cmd_complete(cmd->sk, hdev->id, MGMT_OP_SET_LOCAL_NAME, 0,
- cp, sizeof(*cp));
- mgmt_pending_remove(cmd);
- unlock:
- hci_dev_unlock(hdev);
- }
- static int set_local_name(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_cp_set_local_name *cp = data;
- struct mgmt_pending_cmd *cmd;
- struct hci_request req;
- int err;
- BT_DBG("");
- hci_dev_lock(hdev);
- /* If the old values are the same as the new ones just return a
- * direct command complete event.
- */
- if (!memcmp(hdev->dev_name, cp->name, sizeof(hdev->dev_name)) &&
- !memcmp(hdev->short_name, cp->short_name,
- sizeof(hdev->short_name))) {
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_SET_LOCAL_NAME, 0,
- data, len);
- goto failed;
- }
- memcpy(hdev->short_name, cp->short_name, sizeof(hdev->short_name));
- if (!hdev_is_powered(hdev)) {
- memcpy(hdev->dev_name, cp->name, sizeof(hdev->dev_name));
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_SET_LOCAL_NAME, 0,
- data, len);
- if (err < 0)
- goto failed;
- err = mgmt_generic_event(MGMT_EV_LOCAL_NAME_CHANGED, hdev,
- data, len, sk);
- goto failed;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_SET_LOCAL_NAME, hdev, data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto failed;
- }
- memcpy(hdev->dev_name, cp->name, sizeof(hdev->dev_name));
- hci_req_init(&req, hdev);
- if (lmp_bredr_capable(hdev)) {
- update_name(&req);
- update_eir(&req);
- }
- /* The name is stored in the scan response data and so
- * no need to udpate the advertising data here.
- */
- if (lmp_le_capable(hdev))
- update_scan_rsp_data(&req);
- err = hci_req_run(&req, set_name_complete);
- if (err < 0)
- mgmt_pending_remove(cmd);
- failed:
- hci_dev_unlock(hdev);
- return err;
- }
- static void read_local_oob_data_complete(struct hci_dev *hdev, u8 status,
- u16 opcode, struct sk_buff *skb)
- {
- struct mgmt_rp_read_local_oob_data mgmt_rp;
- size_t rp_size = sizeof(mgmt_rp);
- struct mgmt_pending_cmd *cmd;
- BT_DBG("%s status %u", hdev->name, status);
- cmd = pending_find(MGMT_OP_READ_LOCAL_OOB_DATA, hdev);
- if (!cmd)
- return;
- if (status || !skb) {
- mgmt_cmd_status(cmd->sk, hdev->id, MGMT_OP_READ_LOCAL_OOB_DATA,
- status ? mgmt_status(status) : MGMT_STATUS_FAILED);
- goto remove;
- }
- memset(&mgmt_rp, 0, sizeof(mgmt_rp));
- if (opcode == HCI_OP_READ_LOCAL_OOB_DATA) {
- struct hci_rp_read_local_oob_data *rp = (void *) skb->data;
- if (skb->len < sizeof(*rp)) {
- mgmt_cmd_status(cmd->sk, hdev->id,
- MGMT_OP_READ_LOCAL_OOB_DATA,
- MGMT_STATUS_FAILED);
- goto remove;
- }
- memcpy(mgmt_rp.hash192, rp->hash, sizeof(rp->hash));
- memcpy(mgmt_rp.rand192, rp->rand, sizeof(rp->rand));
- rp_size -= sizeof(mgmt_rp.hash256) + sizeof(mgmt_rp.rand256);
- } else {
- struct hci_rp_read_local_oob_ext_data *rp = (void *) skb->data;
- if (skb->len < sizeof(*rp)) {
- mgmt_cmd_status(cmd->sk, hdev->id,
- MGMT_OP_READ_LOCAL_OOB_DATA,
- MGMT_STATUS_FAILED);
- goto remove;
- }
- memcpy(mgmt_rp.hash192, rp->hash192, sizeof(rp->hash192));
- memcpy(mgmt_rp.rand192, rp->rand192, sizeof(rp->rand192));
- memcpy(mgmt_rp.hash256, rp->hash256, sizeof(rp->hash256));
- memcpy(mgmt_rp.rand256, rp->rand256, sizeof(rp->rand256));
- }
- mgmt_cmd_complete(cmd->sk, hdev->id, MGMT_OP_READ_LOCAL_OOB_DATA,
- MGMT_STATUS_SUCCESS, &mgmt_rp, rp_size);
- remove:
- mgmt_pending_remove(cmd);
- }
- static int read_local_oob_data(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 data_len)
- {
- struct mgmt_pending_cmd *cmd;
- struct hci_request req;
- int err;
- BT_DBG("%s", hdev->name);
- hci_dev_lock(hdev);
- if (!hdev_is_powered(hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_READ_LOCAL_OOB_DATA,
- MGMT_STATUS_NOT_POWERED);
- goto unlock;
- }
- if (!lmp_ssp_capable(hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_READ_LOCAL_OOB_DATA,
- MGMT_STATUS_NOT_SUPPORTED);
- goto unlock;
- }
- if (pending_find(MGMT_OP_READ_LOCAL_OOB_DATA, hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_READ_LOCAL_OOB_DATA,
- MGMT_STATUS_BUSY);
- goto unlock;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_READ_LOCAL_OOB_DATA, hdev, NULL, 0);
- if (!cmd) {
- err = -ENOMEM;
- goto unlock;
- }
- hci_req_init(&req, hdev);
- if (bredr_sc_enabled(hdev))
- hci_req_add(&req, HCI_OP_READ_LOCAL_OOB_EXT_DATA, 0, NULL);
- else
- hci_req_add(&req, HCI_OP_READ_LOCAL_OOB_DATA, 0, NULL);
- err = hci_req_run_skb(&req, read_local_oob_data_complete);
- if (err < 0)
- mgmt_pending_remove(cmd);
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static int add_remote_oob_data(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 len)
- {
- struct mgmt_addr_info *addr = data;
- int err;
- BT_DBG("%s ", hdev->name);
- if (!bdaddr_type_is_valid(addr->type))
- return mgmt_cmd_complete(sk, hdev->id,
- MGMT_OP_ADD_REMOTE_OOB_DATA,
- MGMT_STATUS_INVALID_PARAMS,
- addr, sizeof(*addr));
- hci_dev_lock(hdev);
- if (len == MGMT_ADD_REMOTE_OOB_DATA_SIZE) {
- struct mgmt_cp_add_remote_oob_data *cp = data;
- u8 status;
- if (cp->addr.type != BDADDR_BREDR) {
- err = mgmt_cmd_complete(sk, hdev->id,
- MGMT_OP_ADD_REMOTE_OOB_DATA,
- MGMT_STATUS_INVALID_PARAMS,
- &cp->addr, sizeof(cp->addr));
- goto unlock;
- }
- err = hci_add_remote_oob_data(hdev, &cp->addr.bdaddr,
- cp->addr.type, cp->hash,
- cp->rand, NULL, NULL);
- if (err < 0)
- status = MGMT_STATUS_FAILED;
- else
- status = MGMT_STATUS_SUCCESS;
- err = mgmt_cmd_complete(sk, hdev->id,
- MGMT_OP_ADD_REMOTE_OOB_DATA, status,
- &cp->addr, sizeof(cp->addr));
- } else if (len == MGMT_ADD_REMOTE_OOB_EXT_DATA_SIZE) {
- struct mgmt_cp_add_remote_oob_ext_data *cp = data;
- u8 *rand192, *hash192, *rand256, *hash256;
- u8 status;
- if (bdaddr_type_is_le(cp->addr.type)) {
- /* Enforce zero-valued 192-bit parameters as
- * long as legacy SMP OOB isn't implemented.
- */
- if (memcmp(cp->rand192, ZERO_KEY, 16) ||
- memcmp(cp->hash192, ZERO_KEY, 16)) {
- err = mgmt_cmd_complete(sk, hdev->id,
- MGMT_OP_ADD_REMOTE_OOB_DATA,
- MGMT_STATUS_INVALID_PARAMS,
- addr, sizeof(*addr));
- goto unlock;
- }
- rand192 = NULL;
- hash192 = NULL;
- } else {
- /* In case one of the P-192 values is set to zero,
- * then just disable OOB data for P-192.
- */
- if (!memcmp(cp->rand192, ZERO_KEY, 16) ||
- !memcmp(cp->hash192, ZERO_KEY, 16)) {
- rand192 = NULL;
- hash192 = NULL;
- } else {
- rand192 = cp->rand192;
- hash192 = cp->hash192;
- }
- }
- /* In case one of the P-256 values is set to zero, then just
- * disable OOB data for P-256.
- */
- if (!memcmp(cp->rand256, ZERO_KEY, 16) ||
- !memcmp(cp->hash256, ZERO_KEY, 16)) {
- rand256 = NULL;
- hash256 = NULL;
- } else {
- rand256 = cp->rand256;
- hash256 = cp->hash256;
- }
- err = hci_add_remote_oob_data(hdev, &cp->addr.bdaddr,
- cp->addr.type, hash192, rand192,
- hash256, rand256);
- if (err < 0)
- status = MGMT_STATUS_FAILED;
- else
- status = MGMT_STATUS_SUCCESS;
- err = mgmt_cmd_complete(sk, hdev->id,
- MGMT_OP_ADD_REMOTE_OOB_DATA,
- status, &cp->addr, sizeof(cp->addr));
- } else {
- BT_ERR("add_remote_oob_data: invalid length of %u bytes", len);
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_ADD_REMOTE_OOB_DATA,
- MGMT_STATUS_INVALID_PARAMS);
- }
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static int remove_remote_oob_data(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 len)
- {
- struct mgmt_cp_remove_remote_oob_data *cp = data;
- u8 status;
- int err;
- BT_DBG("%s", hdev->name);
- if (cp->addr.type != BDADDR_BREDR)
- return mgmt_cmd_complete(sk, hdev->id,
- MGMT_OP_REMOVE_REMOTE_OOB_DATA,
- MGMT_STATUS_INVALID_PARAMS,
- &cp->addr, sizeof(cp->addr));
- hci_dev_lock(hdev);
- if (!bacmp(&cp->addr.bdaddr, BDADDR_ANY)) {
- hci_remote_oob_data_clear(hdev);
- status = MGMT_STATUS_SUCCESS;
- goto done;
- }
- err = hci_remove_remote_oob_data(hdev, &cp->addr.bdaddr, cp->addr.type);
- if (err < 0)
- status = MGMT_STATUS_INVALID_PARAMS;
- else
- status = MGMT_STATUS_SUCCESS;
- done:
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_REMOVE_REMOTE_OOB_DATA,
- status, &cp->addr, sizeof(cp->addr));
- hci_dev_unlock(hdev);
- return err;
- }
- static bool trigger_bredr_inquiry(struct hci_request *req, u8 *status)
- {
- struct hci_dev *hdev = req->hdev;
- struct hci_cp_inquiry cp;
- /* General inquiry access code (GIAC) */
- u8 lap[3] = { 0x33, 0x8b, 0x9e };
- *status = mgmt_bredr_support(hdev);
- if (*status)
- return false;
- if (hci_dev_test_flag(hdev, HCI_INQUIRY)) {
- *status = MGMT_STATUS_BUSY;
- return false;
- }
- hci_inquiry_cache_flush(hdev);
- memset(&cp, 0, sizeof(cp));
- memcpy(&cp.lap, lap, sizeof(cp.lap));
- cp.length = DISCOV_BREDR_INQUIRY_LEN;
- hci_req_add(req, HCI_OP_INQUIRY, sizeof(cp), &cp);
- return true;
- }
- static bool trigger_le_scan(struct hci_request *req, u16 interval, u8 *status)
- {
- struct hci_dev *hdev = req->hdev;
- struct hci_cp_le_set_scan_param param_cp;
- struct hci_cp_le_set_scan_enable enable_cp;
- u8 own_addr_type;
- int err;
- *status = mgmt_le_support(hdev);
- if (*status)
- return false;
- if (hci_dev_test_flag(hdev, HCI_LE_ADV)) {
- /* Don't let discovery abort an outgoing connection attempt
- * that's using directed advertising.
- */
- if (hci_lookup_le_connect(hdev)) {
- *status = MGMT_STATUS_REJECTED;
- return false;
- }
- cancel_adv_timeout(hdev);
- disable_advertising(req);
- }
- /* If controller is scanning, it means the background scanning is
- * running. Thus, we should temporarily stop it in order to set the
- * discovery scanning parameters.
- */
- if (hci_dev_test_flag(hdev, HCI_LE_SCAN))
- hci_req_add_le_scan_disable(req);
- /* All active scans will be done with either a resolvable private
- * address (when privacy feature has been enabled) or non-resolvable
- * private address.
- */
- err = hci_update_random_address(req, true, &own_addr_type);
- if (err < 0) {
- *status = MGMT_STATUS_FAILED;
- return false;
- }
- memset(¶m_cp, 0, sizeof(param_cp));
- param_cp.type = LE_SCAN_ACTIVE;
- param_cp.interval = cpu_to_le16(interval);
- param_cp.window = cpu_to_le16(DISCOV_LE_SCAN_WIN);
- param_cp.own_address_type = own_addr_type;
- hci_req_add(req, HCI_OP_LE_SET_SCAN_PARAM, sizeof(param_cp),
- ¶m_cp);
- memset(&enable_cp, 0, sizeof(enable_cp));
- enable_cp.enable = LE_SCAN_ENABLE;
- enable_cp.filter_dup = LE_SCAN_FILTER_DUP_ENABLE;
- hci_req_add(req, HCI_OP_LE_SET_SCAN_ENABLE, sizeof(enable_cp),
- &enable_cp);
- return true;
- }
- static bool trigger_discovery(struct hci_request *req, u8 *status)
- {
- struct hci_dev *hdev = req->hdev;
- switch (hdev->discovery.type) {
- case DISCOV_TYPE_BREDR:
- if (!trigger_bredr_inquiry(req, status))
- return false;
- break;
- case DISCOV_TYPE_INTERLEAVED:
- if (test_bit(HCI_QUIRK_SIMULTANEOUS_DISCOVERY,
- &hdev->quirks)) {
- /* During simultaneous discovery, we double LE scan
- * interval. We must leave some time for the controller
- * to do BR/EDR inquiry.
- */
- if (!trigger_le_scan(req, DISCOV_LE_SCAN_INT * 2,
- status))
- return false;
- if (!trigger_bredr_inquiry(req, status))
- return false;
- return true;
- }
- if (!hci_dev_test_flag(hdev, HCI_BREDR_ENABLED)) {
- *status = MGMT_STATUS_NOT_SUPPORTED;
- return false;
- }
- /* fall through */
- case DISCOV_TYPE_LE:
- if (!trigger_le_scan(req, DISCOV_LE_SCAN_INT, status))
- return false;
- break;
- default:
- *status = MGMT_STATUS_INVALID_PARAMS;
- return false;
- }
- return true;
- }
- static void start_discovery_complete(struct hci_dev *hdev, u8 status,
- u16 opcode)
- {
- struct mgmt_pending_cmd *cmd;
- unsigned long timeout;
- BT_DBG("status %d", status);
- hci_dev_lock(hdev);
- cmd = pending_find(MGMT_OP_START_DISCOVERY, hdev);
- if (!cmd)
- cmd = pending_find(MGMT_OP_START_SERVICE_DISCOVERY, hdev);
- if (cmd) {
- cmd->cmd_complete(cmd, mgmt_status(status));
- mgmt_pending_remove(cmd);
- }
- if (status) {
- hci_discovery_set_state(hdev, DISCOVERY_STOPPED);
- goto unlock;
- }
- hci_discovery_set_state(hdev, DISCOVERY_FINDING);
- /* If the scan involves LE scan, pick proper timeout to schedule
- * hdev->le_scan_disable that will stop it.
- */
- switch (hdev->discovery.type) {
- case DISCOV_TYPE_LE:
- timeout = msecs_to_jiffies(DISCOV_LE_TIMEOUT);
- break;
- case DISCOV_TYPE_INTERLEAVED:
- /* When running simultaneous discovery, the LE scanning time
- * should occupy the whole discovery time sine BR/EDR inquiry
- * and LE scanning are scheduled by the controller.
- *
- * For interleaving discovery in comparison, BR/EDR inquiry
- * and LE scanning are done sequentially with separate
- * timeouts.
- */
- if (test_bit(HCI_QUIRK_SIMULTANEOUS_DISCOVERY, &hdev->quirks))
- timeout = msecs_to_jiffies(DISCOV_LE_TIMEOUT);
- else
- timeout = msecs_to_jiffies(hdev->discov_interleaved_timeout);
- break;
- case DISCOV_TYPE_BREDR:
- timeout = 0;
- break;
- default:
- BT_ERR("Invalid discovery type %d", hdev->discovery.type);
- timeout = 0;
- break;
- }
- if (timeout) {
- /* When service discovery is used and the controller has
- * a strict duplicate filter, it is important to remember
- * the start and duration of the scan. This is required
- * for restarting scanning during the discovery phase.
- */
- if (test_bit(HCI_QUIRK_STRICT_DUPLICATE_FILTER,
- &hdev->quirks) &&
- hdev->discovery.result_filtering) {
- hdev->discovery.scan_start = jiffies;
- hdev->discovery.scan_duration = timeout;
- }
- queue_delayed_work(hdev->workqueue,
- &hdev->le_scan_disable, timeout);
- }
- unlock:
- hci_dev_unlock(hdev);
- }
- static int start_discovery(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 len)
- {
- struct mgmt_cp_start_discovery *cp = data;
- struct mgmt_pending_cmd *cmd;
- struct hci_request req;
- u8 status;
- int err;
- BT_DBG("%s", hdev->name);
- hci_dev_lock(hdev);
- if (!hdev_is_powered(hdev)) {
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_START_DISCOVERY,
- MGMT_STATUS_NOT_POWERED,
- &cp->type, sizeof(cp->type));
- goto failed;
- }
- if (hdev->discovery.state != DISCOVERY_STOPPED ||
- hci_dev_test_flag(hdev, HCI_PERIODIC_INQ)) {
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_START_DISCOVERY,
- MGMT_STATUS_BUSY, &cp->type,
- sizeof(cp->type));
- goto failed;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_START_DISCOVERY, hdev, data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto failed;
- }
- cmd->cmd_complete = generic_cmd_complete;
- /* Clear the discovery filter first to free any previously
- * allocated memory for the UUID list.
- */
- hci_discovery_filter_clear(hdev);
- hdev->discovery.type = cp->type;
- hdev->discovery.report_invalid_rssi = false;
- hci_req_init(&req, hdev);
- if (!trigger_discovery(&req, &status)) {
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_START_DISCOVERY,
- status, &cp->type, sizeof(cp->type));
- mgmt_pending_remove(cmd);
- goto failed;
- }
- err = hci_req_run(&req, start_discovery_complete);
- if (err < 0) {
- mgmt_pending_remove(cmd);
- goto failed;
- }
- hci_discovery_set_state(hdev, DISCOVERY_STARTING);
- failed:
- hci_dev_unlock(hdev);
- return err;
- }
- static int service_discovery_cmd_complete(struct mgmt_pending_cmd *cmd,
- u8 status)
- {
- return mgmt_cmd_complete(cmd->sk, cmd->index, cmd->opcode, status,
- cmd->param, 1);
- }
- static int start_service_discovery(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 len)
- {
- struct mgmt_cp_start_service_discovery *cp = data;
- struct mgmt_pending_cmd *cmd;
- struct hci_request req;
- const u16 max_uuid_count = ((U16_MAX - sizeof(*cp)) / 16);
- u16 uuid_count, expected_len;
- u8 status;
- int err;
- BT_DBG("%s", hdev->name);
- hci_dev_lock(hdev);
- if (!hdev_is_powered(hdev)) {
- err = mgmt_cmd_complete(sk, hdev->id,
- MGMT_OP_START_SERVICE_DISCOVERY,
- MGMT_STATUS_NOT_POWERED,
- &cp->type, sizeof(cp->type));
- goto failed;
- }
- if (hdev->discovery.state != DISCOVERY_STOPPED ||
- hci_dev_test_flag(hdev, HCI_PERIODIC_INQ)) {
- err = mgmt_cmd_complete(sk, hdev->id,
- MGMT_OP_START_SERVICE_DISCOVERY,
- MGMT_STATUS_BUSY, &cp->type,
- sizeof(cp->type));
- goto failed;
- }
- uuid_count = __le16_to_cpu(cp->uuid_count);
- if (uuid_count > max_uuid_count) {
- BT_ERR("service_discovery: too big uuid_count value %u",
- uuid_count);
- err = mgmt_cmd_complete(sk, hdev->id,
- MGMT_OP_START_SERVICE_DISCOVERY,
- MGMT_STATUS_INVALID_PARAMS, &cp->type,
- sizeof(cp->type));
- goto failed;
- }
- expected_len = sizeof(*cp) + uuid_count * 16;
- if (expected_len != len) {
- BT_ERR("service_discovery: expected %u bytes, got %u bytes",
- expected_len, len);
- err = mgmt_cmd_complete(sk, hdev->id,
- MGMT_OP_START_SERVICE_DISCOVERY,
- MGMT_STATUS_INVALID_PARAMS, &cp->type,
- sizeof(cp->type));
- goto failed;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_START_SERVICE_DISCOVERY,
- hdev, data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto failed;
- }
- cmd->cmd_complete = service_discovery_cmd_complete;
- /* Clear the discovery filter first to free any previously
- * allocated memory for the UUID list.
- */
- hci_discovery_filter_clear(hdev);
- hdev->discovery.result_filtering = true;
- hdev->discovery.type = cp->type;
- hdev->discovery.rssi = cp->rssi;
- hdev->discovery.uuid_count = uuid_count;
- if (uuid_count > 0) {
- hdev->discovery.uuids = kmemdup(cp->uuids, uuid_count * 16,
- GFP_KERNEL);
- if (!hdev->discovery.uuids) {
- err = mgmt_cmd_complete(sk, hdev->id,
- MGMT_OP_START_SERVICE_DISCOVERY,
- MGMT_STATUS_FAILED,
- &cp->type, sizeof(cp->type));
- mgmt_pending_remove(cmd);
- goto failed;
- }
- }
- hci_req_init(&req, hdev);
- if (!trigger_discovery(&req, &status)) {
- err = mgmt_cmd_complete(sk, hdev->id,
- MGMT_OP_START_SERVICE_DISCOVERY,
- status, &cp->type, sizeof(cp->type));
- mgmt_pending_remove(cmd);
- goto failed;
- }
- err = hci_req_run(&req, start_discovery_complete);
- if (err < 0) {
- mgmt_pending_remove(cmd);
- goto failed;
- }
- hci_discovery_set_state(hdev, DISCOVERY_STARTING);
- failed:
- hci_dev_unlock(hdev);
- return err;
- }
- static void stop_discovery_complete(struct hci_dev *hdev, u8 status, u16 opcode)
- {
- struct mgmt_pending_cmd *cmd;
- BT_DBG("status %d", status);
- hci_dev_lock(hdev);
- cmd = pending_find(MGMT_OP_STOP_DISCOVERY, hdev);
- if (cmd) {
- cmd->cmd_complete(cmd, mgmt_status(status));
- mgmt_pending_remove(cmd);
- }
- if (!status)
- hci_discovery_set_state(hdev, DISCOVERY_STOPPED);
- hci_dev_unlock(hdev);
- }
- static int stop_discovery(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_cp_stop_discovery *mgmt_cp = data;
- struct mgmt_pending_cmd *cmd;
- struct hci_request req;
- int err;
- BT_DBG("%s", hdev->name);
- hci_dev_lock(hdev);
- if (!hci_discovery_active(hdev)) {
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_STOP_DISCOVERY,
- MGMT_STATUS_REJECTED, &mgmt_cp->type,
- sizeof(mgmt_cp->type));
- goto unlock;
- }
- if (hdev->discovery.type != mgmt_cp->type) {
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_STOP_DISCOVERY,
- MGMT_STATUS_INVALID_PARAMS,
- &mgmt_cp->type, sizeof(mgmt_cp->type));
- goto unlock;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_STOP_DISCOVERY, hdev, data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto unlock;
- }
- cmd->cmd_complete = generic_cmd_complete;
- hci_req_init(&req, hdev);
- hci_stop_discovery(&req);
- err = hci_req_run(&req, stop_discovery_complete);
- if (!err) {
- hci_discovery_set_state(hdev, DISCOVERY_STOPPING);
- goto unlock;
- }
- mgmt_pending_remove(cmd);
- /* If no HCI commands were sent we're done */
- if (err == -ENODATA) {
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_STOP_DISCOVERY, 0,
- &mgmt_cp->type, sizeof(mgmt_cp->type));
- hci_discovery_set_state(hdev, DISCOVERY_STOPPED);
- }
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static int confirm_name(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_cp_confirm_name *cp = data;
- struct inquiry_entry *e;
- int err;
- BT_DBG("%s", hdev->name);
- hci_dev_lock(hdev);
- if (!hci_discovery_active(hdev)) {
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_CONFIRM_NAME,
- MGMT_STATUS_FAILED, &cp->addr,
- sizeof(cp->addr));
- goto failed;
- }
- e = hci_inquiry_cache_lookup_unknown(hdev, &cp->addr.bdaddr);
- if (!e) {
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_CONFIRM_NAME,
- MGMT_STATUS_INVALID_PARAMS, &cp->addr,
- sizeof(cp->addr));
- goto failed;
- }
- if (cp->name_known) {
- e->name_state = NAME_KNOWN;
- list_del(&e->list);
- } else {
- e->name_state = NAME_NEEDED;
- hci_inquiry_cache_update_resolve(hdev, e);
- }
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_CONFIRM_NAME, 0,
- &cp->addr, sizeof(cp->addr));
- failed:
- hci_dev_unlock(hdev);
- return err;
- }
- static int block_device(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_cp_block_device *cp = data;
- u8 status;
- int err;
- BT_DBG("%s", hdev->name);
- if (!bdaddr_type_is_valid(cp->addr.type))
- return mgmt_cmd_complete(sk, hdev->id, MGMT_OP_BLOCK_DEVICE,
- MGMT_STATUS_INVALID_PARAMS,
- &cp->addr, sizeof(cp->addr));
- hci_dev_lock(hdev);
- err = hci_bdaddr_list_add(&hdev->blacklist, &cp->addr.bdaddr,
- cp->addr.type);
- if (err < 0) {
- status = MGMT_STATUS_FAILED;
- goto done;
- }
- mgmt_event(MGMT_EV_DEVICE_BLOCKED, hdev, &cp->addr, sizeof(cp->addr),
- sk);
- status = MGMT_STATUS_SUCCESS;
- done:
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_BLOCK_DEVICE, status,
- &cp->addr, sizeof(cp->addr));
- hci_dev_unlock(hdev);
- return err;
- }
- static int unblock_device(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_cp_unblock_device *cp = data;
- u8 status;
- int err;
- BT_DBG("%s", hdev->name);
- if (!bdaddr_type_is_valid(cp->addr.type))
- return mgmt_cmd_complete(sk, hdev->id, MGMT_OP_UNBLOCK_DEVICE,
- MGMT_STATUS_INVALID_PARAMS,
- &cp->addr, sizeof(cp->addr));
- hci_dev_lock(hdev);
- err = hci_bdaddr_list_del(&hdev->blacklist, &cp->addr.bdaddr,
- cp->addr.type);
- if (err < 0) {
- status = MGMT_STATUS_INVALID_PARAMS;
- goto done;
- }
- mgmt_event(MGMT_EV_DEVICE_UNBLOCKED, hdev, &cp->addr, sizeof(cp->addr),
- sk);
- status = MGMT_STATUS_SUCCESS;
- done:
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_UNBLOCK_DEVICE, status,
- &cp->addr, sizeof(cp->addr));
- hci_dev_unlock(hdev);
- return err;
- }
- static int set_device_id(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_cp_set_device_id *cp = data;
- struct hci_request req;
- int err;
- __u16 source;
- BT_DBG("%s", hdev->name);
- source = __le16_to_cpu(cp->source);
- if (source > 0x0002)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_DEVICE_ID,
- MGMT_STATUS_INVALID_PARAMS);
- hci_dev_lock(hdev);
- hdev->devid_source = source;
- hdev->devid_vendor = __le16_to_cpu(cp->vendor);
- hdev->devid_product = __le16_to_cpu(cp->product);
- hdev->devid_version = __le16_to_cpu(cp->version);
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_SET_DEVICE_ID, 0,
- NULL, 0);
- hci_req_init(&req, hdev);
- update_eir(&req);
- hci_req_run(&req, NULL);
- hci_dev_unlock(hdev);
- return err;
- }
- static void enable_advertising_instance(struct hci_dev *hdev, u8 status,
- u16 opcode)
- {
- BT_DBG("status %d", status);
- }
- static void set_advertising_complete(struct hci_dev *hdev, u8 status,
- u16 opcode)
- {
- struct cmd_lookup match = { NULL, hdev };
- struct hci_request req;
- u8 instance;
- struct adv_info *adv_instance;
- int err;
- hci_dev_lock(hdev);
- if (status) {
- u8 mgmt_err = mgmt_status(status);
- mgmt_pending_foreach(MGMT_OP_SET_ADVERTISING, hdev,
- cmd_status_rsp, &mgmt_err);
- goto unlock;
- }
- if (hci_dev_test_flag(hdev, HCI_LE_ADV))
- hci_dev_set_flag(hdev, HCI_ADVERTISING);
- else
- hci_dev_clear_flag(hdev, HCI_ADVERTISING);
- mgmt_pending_foreach(MGMT_OP_SET_ADVERTISING, hdev, settings_rsp,
- &match);
- new_settings(hdev, match.sk);
- if (match.sk)
- sock_put(match.sk);
- /* If "Set Advertising" was just disabled and instance advertising was
- * set up earlier, then re-enable multi-instance advertising.
- */
- if (hci_dev_test_flag(hdev, HCI_ADVERTISING) ||
- !hci_dev_test_flag(hdev, HCI_ADVERTISING_INSTANCE) ||
- list_empty(&hdev->adv_instances))
- goto unlock;
- instance = hdev->cur_adv_instance;
- if (!instance) {
- adv_instance = list_first_entry_or_null(&hdev->adv_instances,
- struct adv_info, list);
- if (!adv_instance)
- goto unlock;
- instance = adv_instance->instance;
- }
- hci_req_init(&req, hdev);
- err = schedule_adv_instance(&req, instance, true);
- if (!err)
- err = hci_req_run(&req, enable_advertising_instance);
- if (err)
- BT_ERR("Failed to re-configure advertising");
- unlock:
- hci_dev_unlock(hdev);
- }
- static int set_advertising(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_mode *cp = data;
- struct mgmt_pending_cmd *cmd;
- struct hci_request req;
- u8 val, status;
- int err;
- BT_DBG("request for %s", hdev->name);
- status = mgmt_le_support(hdev);
- if (status)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_ADVERTISING,
- status);
- if (cp->val != 0x00 && cp->val != 0x01 && cp->val != 0x02)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_ADVERTISING,
- MGMT_STATUS_INVALID_PARAMS);
- hci_dev_lock(hdev);
- val = !!cp->val;
- /* The following conditions are ones which mean that we should
- * not do any HCI communication but directly send a mgmt
- * response to user space (after toggling the flag if
- * necessary).
- */
- if (!hdev_is_powered(hdev) ||
- (val == hci_dev_test_flag(hdev, HCI_ADVERTISING) &&
- (cp->val == 0x02) == hci_dev_test_flag(hdev, HCI_ADVERTISING_CONNECTABLE)) ||
- hci_conn_num(hdev, LE_LINK) > 0 ||
- (hci_dev_test_flag(hdev, HCI_LE_SCAN) &&
- hdev->le_scan_type == LE_SCAN_ACTIVE)) {
- bool changed;
- if (cp->val) {
- changed = !hci_dev_test_and_set_flag(hdev, HCI_ADVERTISING);
- if (cp->val == 0x02)
- hci_dev_set_flag(hdev, HCI_ADVERTISING_CONNECTABLE);
- else
- hci_dev_clear_flag(hdev, HCI_ADVERTISING_CONNECTABLE);
- } else {
- changed = hci_dev_test_and_clear_flag(hdev, HCI_ADVERTISING);
- hci_dev_clear_flag(hdev, HCI_ADVERTISING_CONNECTABLE);
- }
- err = send_settings_rsp(sk, MGMT_OP_SET_ADVERTISING, hdev);
- if (err < 0)
- goto unlock;
- if (changed)
- err = new_settings(hdev, sk);
- goto unlock;
- }
- if (pending_find(MGMT_OP_SET_ADVERTISING, hdev) ||
- pending_find(MGMT_OP_SET_LE, hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_ADVERTISING,
- MGMT_STATUS_BUSY);
- goto unlock;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_SET_ADVERTISING, hdev, data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto unlock;
- }
- hci_req_init(&req, hdev);
- if (cp->val == 0x02)
- hci_dev_set_flag(hdev, HCI_ADVERTISING_CONNECTABLE);
- else
- hci_dev_clear_flag(hdev, HCI_ADVERTISING_CONNECTABLE);
- cancel_adv_timeout(hdev);
- if (val) {
- /* Switch to instance "0" for the Set Advertising setting.
- * We cannot use update_[adv|scan_rsp]_data() here as the
- * HCI_ADVERTISING flag is not yet set.
- */
- update_inst_adv_data(&req, 0x00);
- update_inst_scan_rsp_data(&req, 0x00);
- enable_advertising(&req);
- } else {
- disable_advertising(&req);
- }
- err = hci_req_run(&req, set_advertising_complete);
- if (err < 0)
- mgmt_pending_remove(cmd);
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static int set_static_address(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 len)
- {
- struct mgmt_cp_set_static_address *cp = data;
- int err;
- BT_DBG("%s", hdev->name);
- if (!lmp_le_capable(hdev))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_STATIC_ADDRESS,
- MGMT_STATUS_NOT_SUPPORTED);
- if (hdev_is_powered(hdev))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_STATIC_ADDRESS,
- MGMT_STATUS_REJECTED);
- if (bacmp(&cp->bdaddr, BDADDR_ANY)) {
- if (!bacmp(&cp->bdaddr, BDADDR_NONE))
- return mgmt_cmd_status(sk, hdev->id,
- MGMT_OP_SET_STATIC_ADDRESS,
- MGMT_STATUS_INVALID_PARAMS);
- /* Two most significant bits shall be set */
- if ((cp->bdaddr.b[5] & 0xc0) != 0xc0)
- return mgmt_cmd_status(sk, hdev->id,
- MGMT_OP_SET_STATIC_ADDRESS,
- MGMT_STATUS_INVALID_PARAMS);
- }
- hci_dev_lock(hdev);
- bacpy(&hdev->static_addr, &cp->bdaddr);
- err = send_settings_rsp(sk, MGMT_OP_SET_STATIC_ADDRESS, hdev);
- if (err < 0)
- goto unlock;
- err = new_settings(hdev, sk);
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static int set_scan_params(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 len)
- {
- struct mgmt_cp_set_scan_params *cp = data;
- __u16 interval, window;
- int err;
- BT_DBG("%s", hdev->name);
- if (!lmp_le_capable(hdev))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_SCAN_PARAMS,
- MGMT_STATUS_NOT_SUPPORTED);
- interval = __le16_to_cpu(cp->interval);
- if (interval < 0x0004 || interval > 0x4000)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_SCAN_PARAMS,
- MGMT_STATUS_INVALID_PARAMS);
- window = __le16_to_cpu(cp->window);
- if (window < 0x0004 || window > 0x4000)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_SCAN_PARAMS,
- MGMT_STATUS_INVALID_PARAMS);
- if (window > interval)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_SCAN_PARAMS,
- MGMT_STATUS_INVALID_PARAMS);
- hci_dev_lock(hdev);
- hdev->le_scan_interval = interval;
- hdev->le_scan_window = window;
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_SET_SCAN_PARAMS, 0,
- NULL, 0);
- /* If background scan is running, restart it so new parameters are
- * loaded.
- */
- if (hci_dev_test_flag(hdev, HCI_LE_SCAN) &&
- hdev->discovery.state == DISCOVERY_STOPPED) {
- struct hci_request req;
- hci_req_init(&req, hdev);
- hci_req_add_le_scan_disable(&req);
- hci_req_add_le_passive_scan(&req);
- hci_req_run(&req, NULL);
- }
- hci_dev_unlock(hdev);
- return err;
- }
- static void fast_connectable_complete(struct hci_dev *hdev, u8 status,
- u16 opcode)
- {
- struct mgmt_pending_cmd *cmd;
- BT_DBG("status 0x%02x", status);
- hci_dev_lock(hdev);
- cmd = pending_find(MGMT_OP_SET_FAST_CONNECTABLE, hdev);
- if (!cmd)
- goto unlock;
- if (status) {
- mgmt_cmd_status(cmd->sk, hdev->id, MGMT_OP_SET_FAST_CONNECTABLE,
- mgmt_status(status));
- } else {
- struct mgmt_mode *cp = cmd->param;
- if (cp->val)
- hci_dev_set_flag(hdev, HCI_FAST_CONNECTABLE);
- else
- hci_dev_clear_flag(hdev, HCI_FAST_CONNECTABLE);
- send_settings_rsp(cmd->sk, MGMT_OP_SET_FAST_CONNECTABLE, hdev);
- new_settings(hdev, cmd->sk);
- }
- mgmt_pending_remove(cmd);
- unlock:
- hci_dev_unlock(hdev);
- }
- static int set_fast_connectable(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 len)
- {
- struct mgmt_mode *cp = data;
- struct mgmt_pending_cmd *cmd;
- struct hci_request req;
- int err;
- BT_DBG("%s", hdev->name);
- if (!hci_dev_test_flag(hdev, HCI_BREDR_ENABLED) ||
- hdev->hci_ver < BLUETOOTH_VER_1_2)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_FAST_CONNECTABLE,
- MGMT_STATUS_NOT_SUPPORTED);
- if (cp->val != 0x00 && cp->val != 0x01)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_FAST_CONNECTABLE,
- MGMT_STATUS_INVALID_PARAMS);
- hci_dev_lock(hdev);
- if (pending_find(MGMT_OP_SET_FAST_CONNECTABLE, hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_FAST_CONNECTABLE,
- MGMT_STATUS_BUSY);
- goto unlock;
- }
- if (!!cp->val == hci_dev_test_flag(hdev, HCI_FAST_CONNECTABLE)) {
- err = send_settings_rsp(sk, MGMT_OP_SET_FAST_CONNECTABLE,
- hdev);
- goto unlock;
- }
- if (!hdev_is_powered(hdev)) {
- hci_dev_change_flag(hdev, HCI_FAST_CONNECTABLE);
- err = send_settings_rsp(sk, MGMT_OP_SET_FAST_CONNECTABLE,
- hdev);
- new_settings(hdev, sk);
- goto unlock;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_SET_FAST_CONNECTABLE, hdev,
- data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto unlock;
- }
- hci_req_init(&req, hdev);
- write_fast_connectable(&req, cp->val);
- err = hci_req_run(&req, fast_connectable_complete);
- if (err < 0) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_FAST_CONNECTABLE,
- MGMT_STATUS_FAILED);
- mgmt_pending_remove(cmd);
- }
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static void set_bredr_complete(struct hci_dev *hdev, u8 status, u16 opcode)
- {
- struct mgmt_pending_cmd *cmd;
- BT_DBG("status 0x%02x", status);
- hci_dev_lock(hdev);
- cmd = pending_find(MGMT_OP_SET_BREDR, hdev);
- if (!cmd)
- goto unlock;
- if (status) {
- u8 mgmt_err = mgmt_status(status);
- /* We need to restore the flag if related HCI commands
- * failed.
- */
- hci_dev_clear_flag(hdev, HCI_BREDR_ENABLED);
- mgmt_cmd_status(cmd->sk, cmd->index, cmd->opcode, mgmt_err);
- } else {
- send_settings_rsp(cmd->sk, MGMT_OP_SET_BREDR, hdev);
- new_settings(hdev, cmd->sk);
- }
- mgmt_pending_remove(cmd);
- unlock:
- hci_dev_unlock(hdev);
- }
- static int set_bredr(struct sock *sk, struct hci_dev *hdev, void *data, u16 len)
- {
- struct mgmt_mode *cp = data;
- struct mgmt_pending_cmd *cmd;
- struct hci_request req;
- int err;
- BT_DBG("request for %s", hdev->name);
- if (!lmp_bredr_capable(hdev) || !lmp_le_capable(hdev))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_BREDR,
- MGMT_STATUS_NOT_SUPPORTED);
- if (!hci_dev_test_flag(hdev, HCI_LE_ENABLED))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_BREDR,
- MGMT_STATUS_REJECTED);
- if (cp->val != 0x00 && cp->val != 0x01)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_BREDR,
- MGMT_STATUS_INVALID_PARAMS);
- hci_dev_lock(hdev);
- if (cp->val == hci_dev_test_flag(hdev, HCI_BREDR_ENABLED)) {
- err = send_settings_rsp(sk, MGMT_OP_SET_BREDR, hdev);
- goto unlock;
- }
- if (!hdev_is_powered(hdev)) {
- if (!cp->val) {
- hci_dev_clear_flag(hdev, HCI_DISCOVERABLE);
- hci_dev_clear_flag(hdev, HCI_SSP_ENABLED);
- hci_dev_clear_flag(hdev, HCI_LINK_SECURITY);
- hci_dev_clear_flag(hdev, HCI_FAST_CONNECTABLE);
- hci_dev_clear_flag(hdev, HCI_HS_ENABLED);
- }
- hci_dev_change_flag(hdev, HCI_BREDR_ENABLED);
- err = send_settings_rsp(sk, MGMT_OP_SET_BREDR, hdev);
- if (err < 0)
- goto unlock;
- err = new_settings(hdev, sk);
- goto unlock;
- }
- /* Reject disabling when powered on */
- if (!cp->val) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_BREDR,
- MGMT_STATUS_REJECTED);
- goto unlock;
- } else {
- /* When configuring a dual-mode controller to operate
- * with LE only and using a static address, then switching
- * BR/EDR back on is not allowed.
- *
- * Dual-mode controllers shall operate with the public
- * address as its identity address for BR/EDR and LE. So
- * reject the attempt to create an invalid configuration.
- *
- * The same restrictions applies when secure connections
- * has been enabled. For BR/EDR this is a controller feature
- * while for LE it is a host stack feature. This means that
- * switching BR/EDR back on when secure connections has been
- * enabled is not a supported transaction.
- */
- if (!hci_dev_test_flag(hdev, HCI_BREDR_ENABLED) &&
- (bacmp(&hdev->static_addr, BDADDR_ANY) ||
- hci_dev_test_flag(hdev, HCI_SC_ENABLED))) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_BREDR,
- MGMT_STATUS_REJECTED);
- goto unlock;
- }
- }
- if (pending_find(MGMT_OP_SET_BREDR, hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_BREDR,
- MGMT_STATUS_BUSY);
- goto unlock;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_SET_BREDR, hdev, data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto unlock;
- }
- /* We need to flip the bit already here so that update_adv_data
- * generates the correct flags.
- */
- hci_dev_set_flag(hdev, HCI_BREDR_ENABLED);
- hci_req_init(&req, hdev);
- write_fast_connectable(&req, false);
- __hci_update_page_scan(&req);
- /* Since only the advertising data flags will change, there
- * is no need to update the scan response data.
- */
- update_adv_data(&req);
- err = hci_req_run(&req, set_bredr_complete);
- if (err < 0)
- mgmt_pending_remove(cmd);
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static void sc_enable_complete(struct hci_dev *hdev, u8 status, u16 opcode)
- {
- struct mgmt_pending_cmd *cmd;
- struct mgmt_mode *cp;
- BT_DBG("%s status %u", hdev->name, status);
- hci_dev_lock(hdev);
- cmd = pending_find(MGMT_OP_SET_SECURE_CONN, hdev);
- if (!cmd)
- goto unlock;
- if (status) {
- mgmt_cmd_status(cmd->sk, cmd->index, cmd->opcode,
- mgmt_status(status));
- goto remove;
- }
- cp = cmd->param;
- switch (cp->val) {
- case 0x00:
- hci_dev_clear_flag(hdev, HCI_SC_ENABLED);
- hci_dev_clear_flag(hdev, HCI_SC_ONLY);
- break;
- case 0x01:
- hci_dev_set_flag(hdev, HCI_SC_ENABLED);
- hci_dev_clear_flag(hdev, HCI_SC_ONLY);
- break;
- case 0x02:
- hci_dev_set_flag(hdev, HCI_SC_ENABLED);
- hci_dev_set_flag(hdev, HCI_SC_ONLY);
- break;
- }
- send_settings_rsp(cmd->sk, MGMT_OP_SET_SECURE_CONN, hdev);
- new_settings(hdev, cmd->sk);
- remove:
- mgmt_pending_remove(cmd);
- unlock:
- hci_dev_unlock(hdev);
- }
- static int set_secure_conn(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 len)
- {
- struct mgmt_mode *cp = data;
- struct mgmt_pending_cmd *cmd;
- struct hci_request req;
- u8 val;
- int err;
- BT_DBG("request for %s", hdev->name);
- if (!lmp_sc_capable(hdev) &&
- !hci_dev_test_flag(hdev, HCI_LE_ENABLED))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_SECURE_CONN,
- MGMT_STATUS_NOT_SUPPORTED);
- if (hci_dev_test_flag(hdev, HCI_BREDR_ENABLED) &&
- lmp_sc_capable(hdev) &&
- !hci_dev_test_flag(hdev, HCI_SSP_ENABLED))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_SECURE_CONN,
- MGMT_STATUS_REJECTED);
- if (cp->val != 0x00 && cp->val != 0x01 && cp->val != 0x02)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_SECURE_CONN,
- MGMT_STATUS_INVALID_PARAMS);
- hci_dev_lock(hdev);
- if (!hdev_is_powered(hdev) || !lmp_sc_capable(hdev) ||
- !hci_dev_test_flag(hdev, HCI_BREDR_ENABLED)) {
- bool changed;
- if (cp->val) {
- changed = !hci_dev_test_and_set_flag(hdev,
- HCI_SC_ENABLED);
- if (cp->val == 0x02)
- hci_dev_set_flag(hdev, HCI_SC_ONLY);
- else
- hci_dev_clear_flag(hdev, HCI_SC_ONLY);
- } else {
- changed = hci_dev_test_and_clear_flag(hdev,
- HCI_SC_ENABLED);
- hci_dev_clear_flag(hdev, HCI_SC_ONLY);
- }
- err = send_settings_rsp(sk, MGMT_OP_SET_SECURE_CONN, hdev);
- if (err < 0)
- goto failed;
- if (changed)
- err = new_settings(hdev, sk);
- goto failed;
- }
- if (pending_find(MGMT_OP_SET_SECURE_CONN, hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_SECURE_CONN,
- MGMT_STATUS_BUSY);
- goto failed;
- }
- val = !!cp->val;
- if (val == hci_dev_test_flag(hdev, HCI_SC_ENABLED) &&
- (cp->val == 0x02) == hci_dev_test_flag(hdev, HCI_SC_ONLY)) {
- err = send_settings_rsp(sk, MGMT_OP_SET_SECURE_CONN, hdev);
- goto failed;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_SET_SECURE_CONN, hdev, data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto failed;
- }
- hci_req_init(&req, hdev);
- hci_req_add(&req, HCI_OP_WRITE_SC_SUPPORT, 1, &val);
- err = hci_req_run(&req, sc_enable_complete);
- if (err < 0) {
- mgmt_pending_remove(cmd);
- goto failed;
- }
- failed:
- hci_dev_unlock(hdev);
- return err;
- }
- static int set_debug_keys(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 len)
- {
- struct mgmt_mode *cp = data;
- bool changed, use_changed;
- int err;
- BT_DBG("request for %s", hdev->name);
- if (cp->val != 0x00 && cp->val != 0x01 && cp->val != 0x02)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_DEBUG_KEYS,
- MGMT_STATUS_INVALID_PARAMS);
- hci_dev_lock(hdev);
- if (cp->val)
- changed = !hci_dev_test_and_set_flag(hdev, HCI_KEEP_DEBUG_KEYS);
- else
- changed = hci_dev_test_and_clear_flag(hdev,
- HCI_KEEP_DEBUG_KEYS);
- if (cp->val == 0x02)
- use_changed = !hci_dev_test_and_set_flag(hdev,
- HCI_USE_DEBUG_KEYS);
- else
- use_changed = hci_dev_test_and_clear_flag(hdev,
- HCI_USE_DEBUG_KEYS);
- if (hdev_is_powered(hdev) && use_changed &&
- hci_dev_test_flag(hdev, HCI_SSP_ENABLED)) {
- u8 mode = (cp->val == 0x02) ? 0x01 : 0x00;
- hci_send_cmd(hdev, HCI_OP_WRITE_SSP_DEBUG_MODE,
- sizeof(mode), &mode);
- }
- err = send_settings_rsp(sk, MGMT_OP_SET_DEBUG_KEYS, hdev);
- if (err < 0)
- goto unlock;
- if (changed)
- err = new_settings(hdev, sk);
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static int set_privacy(struct sock *sk, struct hci_dev *hdev, void *cp_data,
- u16 len)
- {
- struct mgmt_cp_set_privacy *cp = cp_data;
- bool changed;
- int err;
- BT_DBG("request for %s", hdev->name);
- if (!lmp_le_capable(hdev))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_PRIVACY,
- MGMT_STATUS_NOT_SUPPORTED);
- if (cp->privacy != 0x00 && cp->privacy != 0x01)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_PRIVACY,
- MGMT_STATUS_INVALID_PARAMS);
- if (hdev_is_powered(hdev))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_PRIVACY,
- MGMT_STATUS_REJECTED);
- hci_dev_lock(hdev);
- /* If user space supports this command it is also expected to
- * handle IRKs. Therefore, set the HCI_RPA_RESOLVING flag.
- */
- hci_dev_set_flag(hdev, HCI_RPA_RESOLVING);
- if (cp->privacy) {
- changed = !hci_dev_test_and_set_flag(hdev, HCI_PRIVACY);
- memcpy(hdev->irk, cp->irk, sizeof(hdev->irk));
- hci_dev_set_flag(hdev, HCI_RPA_EXPIRED);
- } else {
- changed = hci_dev_test_and_clear_flag(hdev, HCI_PRIVACY);
- memset(hdev->irk, 0, sizeof(hdev->irk));
- hci_dev_clear_flag(hdev, HCI_RPA_EXPIRED);
- }
- err = send_settings_rsp(sk, MGMT_OP_SET_PRIVACY, hdev);
- if (err < 0)
- goto unlock;
- if (changed)
- err = new_settings(hdev, sk);
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static bool irk_is_valid(struct mgmt_irk_info *irk)
- {
- switch (irk->addr.type) {
- case BDADDR_LE_PUBLIC:
- return true;
- case BDADDR_LE_RANDOM:
- /* Two most significant bits shall be set */
- if ((irk->addr.bdaddr.b[5] & 0xc0) != 0xc0)
- return false;
- return true;
- }
- return false;
- }
- static int load_irks(struct sock *sk, struct hci_dev *hdev, void *cp_data,
- u16 len)
- {
- struct mgmt_cp_load_irks *cp = cp_data;
- const u16 max_irk_count = ((U16_MAX - sizeof(*cp)) /
- sizeof(struct mgmt_irk_info));
- u16 irk_count, expected_len;
- int i, err;
- BT_DBG("request for %s", hdev->name);
- if (!lmp_le_capable(hdev))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_LOAD_IRKS,
- MGMT_STATUS_NOT_SUPPORTED);
- irk_count = __le16_to_cpu(cp->irk_count);
- if (irk_count > max_irk_count) {
- BT_ERR("load_irks: too big irk_count value %u", irk_count);
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_LOAD_IRKS,
- MGMT_STATUS_INVALID_PARAMS);
- }
- expected_len = sizeof(*cp) + irk_count * sizeof(struct mgmt_irk_info);
- if (expected_len != len) {
- BT_ERR("load_irks: expected %u bytes, got %u bytes",
- expected_len, len);
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_LOAD_IRKS,
- MGMT_STATUS_INVALID_PARAMS);
- }
- BT_DBG("%s irk_count %u", hdev->name, irk_count);
- for (i = 0; i < irk_count; i++) {
- struct mgmt_irk_info *key = &cp->irks[i];
- if (!irk_is_valid(key))
- return mgmt_cmd_status(sk, hdev->id,
- MGMT_OP_LOAD_IRKS,
- MGMT_STATUS_INVALID_PARAMS);
- }
- hci_dev_lock(hdev);
- hci_smp_irks_clear(hdev);
- for (i = 0; i < irk_count; i++) {
- struct mgmt_irk_info *irk = &cp->irks[i];
- hci_add_irk(hdev, &irk->addr.bdaddr,
- le_addr_type(irk->addr.type), irk->val,
- BDADDR_ANY);
- }
- hci_dev_set_flag(hdev, HCI_RPA_RESOLVING);
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_LOAD_IRKS, 0, NULL, 0);
- hci_dev_unlock(hdev);
- return err;
- }
- static bool ltk_is_valid(struct mgmt_ltk_info *key)
- {
- if (key->master != 0x00 && key->master != 0x01)
- return false;
- switch (key->addr.type) {
- case BDADDR_LE_PUBLIC:
- return true;
- case BDADDR_LE_RANDOM:
- /* Two most significant bits shall be set */
- if ((key->addr.bdaddr.b[5] & 0xc0) != 0xc0)
- return false;
- return true;
- }
- return false;
- }
- static int load_long_term_keys(struct sock *sk, struct hci_dev *hdev,
- void *cp_data, u16 len)
- {
- struct mgmt_cp_load_long_term_keys *cp = cp_data;
- const u16 max_key_count = ((U16_MAX - sizeof(*cp)) /
- sizeof(struct mgmt_ltk_info));
- u16 key_count, expected_len;
- int i, err;
- BT_DBG("request for %s", hdev->name);
- if (!lmp_le_capable(hdev))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_LOAD_LONG_TERM_KEYS,
- MGMT_STATUS_NOT_SUPPORTED);
- key_count = __le16_to_cpu(cp->key_count);
- if (key_count > max_key_count) {
- BT_ERR("load_ltks: too big key_count value %u", key_count);
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_LOAD_LONG_TERM_KEYS,
- MGMT_STATUS_INVALID_PARAMS);
- }
- expected_len = sizeof(*cp) + key_count *
- sizeof(struct mgmt_ltk_info);
- if (expected_len != len) {
- BT_ERR("load_keys: expected %u bytes, got %u bytes",
- expected_len, len);
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_LOAD_LONG_TERM_KEYS,
- MGMT_STATUS_INVALID_PARAMS);
- }
- BT_DBG("%s key_count %u", hdev->name, key_count);
- for (i = 0; i < key_count; i++) {
- struct mgmt_ltk_info *key = &cp->keys[i];
- if (!ltk_is_valid(key))
- return mgmt_cmd_status(sk, hdev->id,
- MGMT_OP_LOAD_LONG_TERM_KEYS,
- MGMT_STATUS_INVALID_PARAMS);
- }
- hci_dev_lock(hdev);
- hci_smp_ltks_clear(hdev);
- for (i = 0; i < key_count; i++) {
- struct mgmt_ltk_info *key = &cp->keys[i];
- u8 type, authenticated;
- switch (key->type) {
- case MGMT_LTK_UNAUTHENTICATED:
- authenticated = 0x00;
- type = key->master ? SMP_LTK : SMP_LTK_SLAVE;
- break;
- case MGMT_LTK_AUTHENTICATED:
- authenticated = 0x01;
- type = key->master ? SMP_LTK : SMP_LTK_SLAVE;
- break;
- case MGMT_LTK_P256_UNAUTH:
- authenticated = 0x00;
- type = SMP_LTK_P256;
- break;
- case MGMT_LTK_P256_AUTH:
- authenticated = 0x01;
- type = SMP_LTK_P256;
- break;
- case MGMT_LTK_P256_DEBUG:
- authenticated = 0x00;
- type = SMP_LTK_P256_DEBUG;
- default:
- continue;
- }
- hci_add_ltk(hdev, &key->addr.bdaddr,
- le_addr_type(key->addr.type), type, authenticated,
- key->val, key->enc_size, key->ediv, key->rand);
- }
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_LOAD_LONG_TERM_KEYS, 0,
- NULL, 0);
- hci_dev_unlock(hdev);
- return err;
- }
- static int conn_info_cmd_complete(struct mgmt_pending_cmd *cmd, u8 status)
- {
- struct hci_conn *conn = cmd->user_data;
- struct mgmt_rp_get_conn_info rp;
- int err;
- memcpy(&rp.addr, cmd->param, sizeof(rp.addr));
- if (status == MGMT_STATUS_SUCCESS) {
- rp.rssi = conn->rssi;
- rp.tx_power = conn->tx_power;
- rp.max_tx_power = conn->max_tx_power;
- } else {
- rp.rssi = HCI_RSSI_INVALID;
- rp.tx_power = HCI_TX_POWER_INVALID;
- rp.max_tx_power = HCI_TX_POWER_INVALID;
- }
- err = mgmt_cmd_complete(cmd->sk, cmd->index, MGMT_OP_GET_CONN_INFO,
- status, &rp, sizeof(rp));
- hci_conn_drop(conn);
- hci_conn_put(conn);
- return err;
- }
- static void conn_info_refresh_complete(struct hci_dev *hdev, u8 hci_status,
- u16 opcode)
- {
- struct hci_cp_read_rssi *cp;
- struct mgmt_pending_cmd *cmd;
- struct hci_conn *conn;
- u16 handle;
- u8 status;
- BT_DBG("status 0x%02x", hci_status);
- hci_dev_lock(hdev);
- /* Commands sent in request are either Read RSSI or Read Transmit Power
- * Level so we check which one was last sent to retrieve connection
- * handle. Both commands have handle as first parameter so it's safe to
- * cast data on the same command struct.
- *
- * First command sent is always Read RSSI and we fail only if it fails.
- * In other case we simply override error to indicate success as we
- * already remembered if TX power value is actually valid.
- */
- cp = hci_sent_cmd_data(hdev, HCI_OP_READ_RSSI);
- if (!cp) {
- cp = hci_sent_cmd_data(hdev, HCI_OP_READ_TX_POWER);
- status = MGMT_STATUS_SUCCESS;
- } else {
- status = mgmt_status(hci_status);
- }
- if (!cp) {
- BT_ERR("invalid sent_cmd in conn_info response");
- goto unlock;
- }
- handle = __le16_to_cpu(cp->handle);
- conn = hci_conn_hash_lookup_handle(hdev, handle);
- if (!conn) {
- BT_ERR("unknown handle (%d) in conn_info response", handle);
- goto unlock;
- }
- cmd = pending_find_data(MGMT_OP_GET_CONN_INFO, hdev, conn);
- if (!cmd)
- goto unlock;
- cmd->cmd_complete(cmd, status);
- mgmt_pending_remove(cmd);
- unlock:
- hci_dev_unlock(hdev);
- }
- static int get_conn_info(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_cp_get_conn_info *cp = data;
- struct mgmt_rp_get_conn_info rp;
- struct hci_conn *conn;
- unsigned long conn_info_age;
- int err = 0;
- BT_DBG("%s", hdev->name);
- memset(&rp, 0, sizeof(rp));
- bacpy(&rp.addr.bdaddr, &cp->addr.bdaddr);
- rp.addr.type = cp->addr.type;
- if (!bdaddr_type_is_valid(cp->addr.type))
- return mgmt_cmd_complete(sk, hdev->id, MGMT_OP_GET_CONN_INFO,
- MGMT_STATUS_INVALID_PARAMS,
- &rp, sizeof(rp));
- hci_dev_lock(hdev);
- if (!hdev_is_powered(hdev)) {
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_GET_CONN_INFO,
- MGMT_STATUS_NOT_POWERED, &rp,
- sizeof(rp));
- goto unlock;
- }
- if (cp->addr.type == BDADDR_BREDR)
- conn = hci_conn_hash_lookup_ba(hdev, ACL_LINK,
- &cp->addr.bdaddr);
- else
- conn = hci_conn_hash_lookup_ba(hdev, LE_LINK, &cp->addr.bdaddr);
- if (!conn || conn->state != BT_CONNECTED) {
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_GET_CONN_INFO,
- MGMT_STATUS_NOT_CONNECTED, &rp,
- sizeof(rp));
- goto unlock;
- }
- if (pending_find_data(MGMT_OP_GET_CONN_INFO, hdev, conn)) {
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_GET_CONN_INFO,
- MGMT_STATUS_BUSY, &rp, sizeof(rp));
- goto unlock;
- }
- /* To avoid client trying to guess when to poll again for information we
- * calculate conn info age as random value between min/max set in hdev.
- */
- conn_info_age = hdev->conn_info_min_age +
- prandom_u32_max(hdev->conn_info_max_age -
- hdev->conn_info_min_age);
- /* Query controller to refresh cached values if they are too old or were
- * never read.
- */
- if (time_after(jiffies, conn->conn_info_timestamp +
- msecs_to_jiffies(conn_info_age)) ||
- !conn->conn_info_timestamp) {
- struct hci_request req;
- struct hci_cp_read_tx_power req_txp_cp;
- struct hci_cp_read_rssi req_rssi_cp;
- struct mgmt_pending_cmd *cmd;
- hci_req_init(&req, hdev);
- req_rssi_cp.handle = cpu_to_le16(conn->handle);
- hci_req_add(&req, HCI_OP_READ_RSSI, sizeof(req_rssi_cp),
- &req_rssi_cp);
- /* For LE links TX power does not change thus we don't need to
- * query for it once value is known.
- */
- if (!bdaddr_type_is_le(cp->addr.type) ||
- conn->tx_power == HCI_TX_POWER_INVALID) {
- req_txp_cp.handle = cpu_to_le16(conn->handle);
- req_txp_cp.type = 0x00;
- hci_req_add(&req, HCI_OP_READ_TX_POWER,
- sizeof(req_txp_cp), &req_txp_cp);
- }
- /* Max TX power needs to be read only once per connection */
- if (conn->max_tx_power == HCI_TX_POWER_INVALID) {
- req_txp_cp.handle = cpu_to_le16(conn->handle);
- req_txp_cp.type = 0x01;
- hci_req_add(&req, HCI_OP_READ_TX_POWER,
- sizeof(req_txp_cp), &req_txp_cp);
- }
- err = hci_req_run(&req, conn_info_refresh_complete);
- if (err < 0)
- goto unlock;
- cmd = mgmt_pending_add(sk, MGMT_OP_GET_CONN_INFO, hdev,
- data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto unlock;
- }
- hci_conn_hold(conn);
- cmd->user_data = hci_conn_get(conn);
- cmd->cmd_complete = conn_info_cmd_complete;
- conn->conn_info_timestamp = jiffies;
- } else {
- /* Cache is valid, just reply with values cached in hci_conn */
- rp.rssi = conn->rssi;
- rp.tx_power = conn->tx_power;
- rp.max_tx_power = conn->max_tx_power;
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_GET_CONN_INFO,
- MGMT_STATUS_SUCCESS, &rp, sizeof(rp));
- }
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static int clock_info_cmd_complete(struct mgmt_pending_cmd *cmd, u8 status)
- {
- struct hci_conn *conn = cmd->user_data;
- struct mgmt_rp_get_clock_info rp;
- struct hci_dev *hdev;
- int err;
- memset(&rp, 0, sizeof(rp));
- memcpy(&rp.addr, &cmd->param, sizeof(rp.addr));
- if (status)
- goto complete;
- hdev = hci_dev_get(cmd->index);
- if (hdev) {
- rp.local_clock = cpu_to_le32(hdev->clock);
- hci_dev_put(hdev);
- }
- if (conn) {
- rp.piconet_clock = cpu_to_le32(conn->clock);
- rp.accuracy = cpu_to_le16(conn->clock_accuracy);
- }
- complete:
- err = mgmt_cmd_complete(cmd->sk, cmd->index, cmd->opcode, status, &rp,
- sizeof(rp));
- if (conn) {
- hci_conn_drop(conn);
- hci_conn_put(conn);
- }
- return err;
- }
- static void get_clock_info_complete(struct hci_dev *hdev, u8 status, u16 opcode)
- {
- struct hci_cp_read_clock *hci_cp;
- struct mgmt_pending_cmd *cmd;
- struct hci_conn *conn;
- BT_DBG("%s status %u", hdev->name, status);
- hci_dev_lock(hdev);
- hci_cp = hci_sent_cmd_data(hdev, HCI_OP_READ_CLOCK);
- if (!hci_cp)
- goto unlock;
- if (hci_cp->which) {
- u16 handle = __le16_to_cpu(hci_cp->handle);
- conn = hci_conn_hash_lookup_handle(hdev, handle);
- } else {
- conn = NULL;
- }
- cmd = pending_find_data(MGMT_OP_GET_CLOCK_INFO, hdev, conn);
- if (!cmd)
- goto unlock;
- cmd->cmd_complete(cmd, mgmt_status(status));
- mgmt_pending_remove(cmd);
- unlock:
- hci_dev_unlock(hdev);
- }
- static int get_clock_info(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_cp_get_clock_info *cp = data;
- struct mgmt_rp_get_clock_info rp;
- struct hci_cp_read_clock hci_cp;
- struct mgmt_pending_cmd *cmd;
- struct hci_request req;
- struct hci_conn *conn;
- int err;
- BT_DBG("%s", hdev->name);
- memset(&rp, 0, sizeof(rp));
- bacpy(&rp.addr.bdaddr, &cp->addr.bdaddr);
- rp.addr.type = cp->addr.type;
- if (cp->addr.type != BDADDR_BREDR)
- return mgmt_cmd_complete(sk, hdev->id, MGMT_OP_GET_CLOCK_INFO,
- MGMT_STATUS_INVALID_PARAMS,
- &rp, sizeof(rp));
- hci_dev_lock(hdev);
- if (!hdev_is_powered(hdev)) {
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_GET_CLOCK_INFO,
- MGMT_STATUS_NOT_POWERED, &rp,
- sizeof(rp));
- goto unlock;
- }
- if (bacmp(&cp->addr.bdaddr, BDADDR_ANY)) {
- conn = hci_conn_hash_lookup_ba(hdev, ACL_LINK,
- &cp->addr.bdaddr);
- if (!conn || conn->state != BT_CONNECTED) {
- err = mgmt_cmd_complete(sk, hdev->id,
- MGMT_OP_GET_CLOCK_INFO,
- MGMT_STATUS_NOT_CONNECTED,
- &rp, sizeof(rp));
- goto unlock;
- }
- } else {
- conn = NULL;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_GET_CLOCK_INFO, hdev, data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto unlock;
- }
- cmd->cmd_complete = clock_info_cmd_complete;
- hci_req_init(&req, hdev);
- memset(&hci_cp, 0, sizeof(hci_cp));
- hci_req_add(&req, HCI_OP_READ_CLOCK, sizeof(hci_cp), &hci_cp);
- if (conn) {
- hci_conn_hold(conn);
- cmd->user_data = hci_conn_get(conn);
- hci_cp.handle = cpu_to_le16(conn->handle);
- hci_cp.which = 0x01; /* Piconet clock */
- hci_req_add(&req, HCI_OP_READ_CLOCK, sizeof(hci_cp), &hci_cp);
- }
- err = hci_req_run(&req, get_clock_info_complete);
- if (err < 0)
- mgmt_pending_remove(cmd);
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static bool is_connected(struct hci_dev *hdev, bdaddr_t *addr, u8 type)
- {
- struct hci_conn *conn;
- conn = hci_conn_hash_lookup_ba(hdev, LE_LINK, addr);
- if (!conn)
- return false;
- if (conn->dst_type != type)
- return false;
- if (conn->state != BT_CONNECTED)
- return false;
- return true;
- }
- /* This function requires the caller holds hdev->lock */
- static int hci_conn_params_set(struct hci_request *req, bdaddr_t *addr,
- u8 addr_type, u8 auto_connect)
- {
- struct hci_dev *hdev = req->hdev;
- struct hci_conn_params *params;
- params = hci_conn_params_add(hdev, addr, addr_type);
- if (!params)
- return -EIO;
- if (params->auto_connect == auto_connect)
- return 0;
- list_del_init(¶ms->action);
- switch (auto_connect) {
- case HCI_AUTO_CONN_DISABLED:
- case HCI_AUTO_CONN_LINK_LOSS:
- /* If auto connect is being disabled when we're trying to
- * connect to device, keep connecting.
- */
- if (params->explicit_connect)
- list_add(¶ms->action, &hdev->pend_le_conns);
- __hci_update_background_scan(req);
- break;
- case HCI_AUTO_CONN_REPORT:
- if (params->explicit_connect)
- list_add(¶ms->action, &hdev->pend_le_conns);
- else
- list_add(¶ms->action, &hdev->pend_le_reports);
- __hci_update_background_scan(req);
- break;
- case HCI_AUTO_CONN_DIRECT:
- case HCI_AUTO_CONN_ALWAYS:
- if (!is_connected(hdev, addr, addr_type)) {
- list_add(¶ms->action, &hdev->pend_le_conns);
- /* If we are in scan phase of connecting, we were
- * already added to pend_le_conns and scanning.
- */
- if (params->auto_connect != HCI_AUTO_CONN_EXPLICIT)
- __hci_update_background_scan(req);
- }
- break;
- }
- params->auto_connect = auto_connect;
- BT_DBG("addr %pMR (type %u) auto_connect %u", addr, addr_type,
- auto_connect);
- return 0;
- }
- static void device_added(struct sock *sk, struct hci_dev *hdev,
- bdaddr_t *bdaddr, u8 type, u8 action)
- {
- struct mgmt_ev_device_added ev;
- bacpy(&ev.addr.bdaddr, bdaddr);
- ev.addr.type = type;
- ev.action = action;
- mgmt_event(MGMT_EV_DEVICE_ADDED, hdev, &ev, sizeof(ev), sk);
- }
- static void add_device_complete(struct hci_dev *hdev, u8 status, u16 opcode)
- {
- struct mgmt_pending_cmd *cmd;
- BT_DBG("status 0x%02x", status);
- hci_dev_lock(hdev);
- cmd = pending_find(MGMT_OP_ADD_DEVICE, hdev);
- if (!cmd)
- goto unlock;
- cmd->cmd_complete(cmd, mgmt_status(status));
- mgmt_pending_remove(cmd);
- unlock:
- hci_dev_unlock(hdev);
- }
- static int add_device(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 len)
- {
- struct mgmt_cp_add_device *cp = data;
- struct mgmt_pending_cmd *cmd;
- struct hci_request req;
- u8 auto_conn, addr_type;
- int err;
- BT_DBG("%s", hdev->name);
- if (!bdaddr_type_is_valid(cp->addr.type) ||
- !bacmp(&cp->addr.bdaddr, BDADDR_ANY))
- return mgmt_cmd_complete(sk, hdev->id, MGMT_OP_ADD_DEVICE,
- MGMT_STATUS_INVALID_PARAMS,
- &cp->addr, sizeof(cp->addr));
- if (cp->action != 0x00 && cp->action != 0x01 && cp->action != 0x02)
- return mgmt_cmd_complete(sk, hdev->id, MGMT_OP_ADD_DEVICE,
- MGMT_STATUS_INVALID_PARAMS,
- &cp->addr, sizeof(cp->addr));
- hci_req_init(&req, hdev);
- hci_dev_lock(hdev);
- cmd = mgmt_pending_add(sk, MGMT_OP_ADD_DEVICE, hdev, data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto unlock;
- }
- cmd->cmd_complete = addr_cmd_complete;
- if (cp->addr.type == BDADDR_BREDR) {
- /* Only incoming connections action is supported for now */
- if (cp->action != 0x01) {
- err = cmd->cmd_complete(cmd,
- MGMT_STATUS_INVALID_PARAMS);
- mgmt_pending_remove(cmd);
- goto unlock;
- }
- err = hci_bdaddr_list_add(&hdev->whitelist, &cp->addr.bdaddr,
- cp->addr.type);
- if (err)
- goto unlock;
- __hci_update_page_scan(&req);
- goto added;
- }
- addr_type = le_addr_type(cp->addr.type);
- if (cp->action == 0x02)
- auto_conn = HCI_AUTO_CONN_ALWAYS;
- else if (cp->action == 0x01)
- auto_conn = HCI_AUTO_CONN_DIRECT;
- else
- auto_conn = HCI_AUTO_CONN_REPORT;
- /* Kernel internally uses conn_params with resolvable private
- * address, but Add Device allows only identity addresses.
- * Make sure it is enforced before calling
- * hci_conn_params_lookup.
- */
- if (!hci_is_identity_address(&cp->addr.bdaddr, addr_type)) {
- err = cmd->cmd_complete(cmd, MGMT_STATUS_INVALID_PARAMS);
- mgmt_pending_remove(cmd);
- goto unlock;
- }
- /* If the connection parameters don't exist for this device,
- * they will be created and configured with defaults.
- */
- if (hci_conn_params_set(&req, &cp->addr.bdaddr, addr_type,
- auto_conn) < 0) {
- err = cmd->cmd_complete(cmd, MGMT_STATUS_FAILED);
- mgmt_pending_remove(cmd);
- goto unlock;
- }
- added:
- device_added(sk, hdev, &cp->addr.bdaddr, cp->addr.type, cp->action);
- err = hci_req_run(&req, add_device_complete);
- if (err < 0) {
- /* ENODATA means no HCI commands were needed (e.g. if
- * the adapter is powered off).
- */
- if (err == -ENODATA)
- err = cmd->cmd_complete(cmd, MGMT_STATUS_SUCCESS);
- mgmt_pending_remove(cmd);
- }
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static void device_removed(struct sock *sk, struct hci_dev *hdev,
- bdaddr_t *bdaddr, u8 type)
- {
- struct mgmt_ev_device_removed ev;
- bacpy(&ev.addr.bdaddr, bdaddr);
- ev.addr.type = type;
- mgmt_event(MGMT_EV_DEVICE_REMOVED, hdev, &ev, sizeof(ev), sk);
- }
- static void remove_device_complete(struct hci_dev *hdev, u8 status, u16 opcode)
- {
- struct mgmt_pending_cmd *cmd;
- BT_DBG("status 0x%02x", status);
- hci_dev_lock(hdev);
- cmd = pending_find(MGMT_OP_REMOVE_DEVICE, hdev);
- if (!cmd)
- goto unlock;
- cmd->cmd_complete(cmd, mgmt_status(status));
- mgmt_pending_remove(cmd);
- unlock:
- hci_dev_unlock(hdev);
- }
- static int remove_device(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 len)
- {
- struct mgmt_cp_remove_device *cp = data;
- struct mgmt_pending_cmd *cmd;
- struct hci_request req;
- int err;
- BT_DBG("%s", hdev->name);
- hci_req_init(&req, hdev);
- hci_dev_lock(hdev);
- cmd = mgmt_pending_add(sk, MGMT_OP_REMOVE_DEVICE, hdev, data, len);
- if (!cmd) {
- err = -ENOMEM;
- goto unlock;
- }
- cmd->cmd_complete = addr_cmd_complete;
- if (bacmp(&cp->addr.bdaddr, BDADDR_ANY)) {
- struct hci_conn_params *params;
- u8 addr_type;
- if (!bdaddr_type_is_valid(cp->addr.type)) {
- err = cmd->cmd_complete(cmd,
- MGMT_STATUS_INVALID_PARAMS);
- mgmt_pending_remove(cmd);
- goto unlock;
- }
- if (cp->addr.type == BDADDR_BREDR) {
- err = hci_bdaddr_list_del(&hdev->whitelist,
- &cp->addr.bdaddr,
- cp->addr.type);
- if (err) {
- err = cmd->cmd_complete(cmd,
- MGMT_STATUS_INVALID_PARAMS);
- mgmt_pending_remove(cmd);
- goto unlock;
- }
- __hci_update_page_scan(&req);
- device_removed(sk, hdev, &cp->addr.bdaddr,
- cp->addr.type);
- goto complete;
- }
- addr_type = le_addr_type(cp->addr.type);
- /* Kernel internally uses conn_params with resolvable private
- * address, but Remove Device allows only identity addresses.
- * Make sure it is enforced before calling
- * hci_conn_params_lookup.
- */
- if (!hci_is_identity_address(&cp->addr.bdaddr, addr_type)) {
- err = cmd->cmd_complete(cmd,
- MGMT_STATUS_INVALID_PARAMS);
- mgmt_pending_remove(cmd);
- goto unlock;
- }
- params = hci_conn_params_lookup(hdev, &cp->addr.bdaddr,
- addr_type);
- if (!params) {
- err = cmd->cmd_complete(cmd,
- MGMT_STATUS_INVALID_PARAMS);
- mgmt_pending_remove(cmd);
- goto unlock;
- }
- if (params->auto_connect == HCI_AUTO_CONN_DISABLED ||
- params->auto_connect == HCI_AUTO_CONN_EXPLICIT) {
- err = cmd->cmd_complete(cmd,
- MGMT_STATUS_INVALID_PARAMS);
- mgmt_pending_remove(cmd);
- goto unlock;
- }
- list_del(¶ms->action);
- list_del(¶ms->list);
- kfree(params);
- __hci_update_background_scan(&req);
- device_removed(sk, hdev, &cp->addr.bdaddr, cp->addr.type);
- } else {
- struct hci_conn_params *p, *tmp;
- struct bdaddr_list *b, *btmp;
- if (cp->addr.type) {
- err = cmd->cmd_complete(cmd,
- MGMT_STATUS_INVALID_PARAMS);
- mgmt_pending_remove(cmd);
- goto unlock;
- }
- list_for_each_entry_safe(b, btmp, &hdev->whitelist, list) {
- device_removed(sk, hdev, &b->bdaddr, b->bdaddr_type);
- list_del(&b->list);
- kfree(b);
- }
- __hci_update_page_scan(&req);
- list_for_each_entry_safe(p, tmp, &hdev->le_conn_params, list) {
- if (p->auto_connect == HCI_AUTO_CONN_DISABLED)
- continue;
- device_removed(sk, hdev, &p->addr, p->addr_type);
- if (p->explicit_connect) {
- p->auto_connect = HCI_AUTO_CONN_EXPLICIT;
- continue;
- }
- list_del(&p->action);
- list_del(&p->list);
- kfree(p);
- }
- BT_DBG("All LE connection parameters were removed");
- __hci_update_background_scan(&req);
- }
- complete:
- err = hci_req_run(&req, remove_device_complete);
- if (err < 0) {
- /* ENODATA means no HCI commands were needed (e.g. if
- * the adapter is powered off).
- */
- if (err == -ENODATA)
- err = cmd->cmd_complete(cmd, MGMT_STATUS_SUCCESS);
- mgmt_pending_remove(cmd);
- }
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static int load_conn_param(struct sock *sk, struct hci_dev *hdev, void *data,
- u16 len)
- {
- struct mgmt_cp_load_conn_param *cp = data;
- const u16 max_param_count = ((U16_MAX - sizeof(*cp)) /
- sizeof(struct mgmt_conn_param));
- u16 param_count, expected_len;
- int i;
- if (!lmp_le_capable(hdev))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_LOAD_CONN_PARAM,
- MGMT_STATUS_NOT_SUPPORTED);
- param_count = __le16_to_cpu(cp->param_count);
- if (param_count > max_param_count) {
- BT_ERR("load_conn_param: too big param_count value %u",
- param_count);
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_LOAD_CONN_PARAM,
- MGMT_STATUS_INVALID_PARAMS);
- }
- expected_len = sizeof(*cp) + param_count *
- sizeof(struct mgmt_conn_param);
- if (expected_len != len) {
- BT_ERR("load_conn_param: expected %u bytes, got %u bytes",
- expected_len, len);
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_LOAD_CONN_PARAM,
- MGMT_STATUS_INVALID_PARAMS);
- }
- BT_DBG("%s param_count %u", hdev->name, param_count);
- hci_dev_lock(hdev);
- hci_conn_params_clear_disabled(hdev);
- for (i = 0; i < param_count; i++) {
- struct mgmt_conn_param *param = &cp->params[i];
- struct hci_conn_params *hci_param;
- u16 min, max, latency, timeout;
- u8 addr_type;
- BT_DBG("Adding %pMR (type %u)", ¶m->addr.bdaddr,
- param->addr.type);
- if (param->addr.type == BDADDR_LE_PUBLIC) {
- addr_type = ADDR_LE_DEV_PUBLIC;
- } else if (param->addr.type == BDADDR_LE_RANDOM) {
- addr_type = ADDR_LE_DEV_RANDOM;
- } else {
- BT_ERR("Ignoring invalid connection parameters");
- continue;
- }
- min = le16_to_cpu(param->min_interval);
- max = le16_to_cpu(param->max_interval);
- latency = le16_to_cpu(param->latency);
- timeout = le16_to_cpu(param->timeout);
- BT_DBG("min 0x%04x max 0x%04x latency 0x%04x timeout 0x%04x",
- min, max, latency, timeout);
- if (hci_check_conn_params(min, max, latency, timeout) < 0) {
- BT_ERR("Ignoring invalid connection parameters");
- continue;
- }
- hci_param = hci_conn_params_add(hdev, ¶m->addr.bdaddr,
- addr_type);
- if (!hci_param) {
- BT_ERR("Failed to add connection parameters");
- continue;
- }
- hci_param->conn_min_interval = min;
- hci_param->conn_max_interval = max;
- hci_param->conn_latency = latency;
- hci_param->supervision_timeout = timeout;
- }
- hci_dev_unlock(hdev);
- return mgmt_cmd_complete(sk, hdev->id, MGMT_OP_LOAD_CONN_PARAM, 0,
- NULL, 0);
- }
- static int set_external_config(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 len)
- {
- struct mgmt_cp_set_external_config *cp = data;
- bool changed;
- int err;
- BT_DBG("%s", hdev->name);
- if (hdev_is_powered(hdev))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_EXTERNAL_CONFIG,
- MGMT_STATUS_REJECTED);
- if (cp->config != 0x00 && cp->config != 0x01)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_EXTERNAL_CONFIG,
- MGMT_STATUS_INVALID_PARAMS);
- if (!test_bit(HCI_QUIRK_EXTERNAL_CONFIG, &hdev->quirks))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_EXTERNAL_CONFIG,
- MGMT_STATUS_NOT_SUPPORTED);
- hci_dev_lock(hdev);
- if (cp->config)
- changed = !hci_dev_test_and_set_flag(hdev, HCI_EXT_CONFIGURED);
- else
- changed = hci_dev_test_and_clear_flag(hdev, HCI_EXT_CONFIGURED);
- err = send_options_rsp(sk, MGMT_OP_SET_EXTERNAL_CONFIG, hdev);
- if (err < 0)
- goto unlock;
- if (!changed)
- goto unlock;
- err = new_options(hdev, sk);
- if (hci_dev_test_flag(hdev, HCI_UNCONFIGURED) == is_configured(hdev)) {
- mgmt_index_removed(hdev);
- if (hci_dev_test_and_change_flag(hdev, HCI_UNCONFIGURED)) {
- hci_dev_set_flag(hdev, HCI_CONFIG);
- hci_dev_set_flag(hdev, HCI_AUTO_OFF);
- queue_work(hdev->req_workqueue, &hdev->power_on);
- } else {
- set_bit(HCI_RAW, &hdev->flags);
- mgmt_index_added(hdev);
- }
- }
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static int set_public_address(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 len)
- {
- struct mgmt_cp_set_public_address *cp = data;
- bool changed;
- int err;
- BT_DBG("%s", hdev->name);
- if (hdev_is_powered(hdev))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_PUBLIC_ADDRESS,
- MGMT_STATUS_REJECTED);
- if (!bacmp(&cp->bdaddr, BDADDR_ANY))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_PUBLIC_ADDRESS,
- MGMT_STATUS_INVALID_PARAMS);
- if (!hdev->set_bdaddr)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_SET_PUBLIC_ADDRESS,
- MGMT_STATUS_NOT_SUPPORTED);
- hci_dev_lock(hdev);
- changed = !!bacmp(&hdev->public_addr, &cp->bdaddr);
- bacpy(&hdev->public_addr, &cp->bdaddr);
- err = send_options_rsp(sk, MGMT_OP_SET_PUBLIC_ADDRESS, hdev);
- if (err < 0)
- goto unlock;
- if (!changed)
- goto unlock;
- if (hci_dev_test_flag(hdev, HCI_UNCONFIGURED))
- err = new_options(hdev, sk);
- if (is_configured(hdev)) {
- mgmt_index_removed(hdev);
- hci_dev_clear_flag(hdev, HCI_UNCONFIGURED);
- hci_dev_set_flag(hdev, HCI_CONFIG);
- hci_dev_set_flag(hdev, HCI_AUTO_OFF);
- queue_work(hdev->req_workqueue, &hdev->power_on);
- }
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static inline u16 eir_append_data(u8 *eir, u16 eir_len, u8 type, u8 *data,
- u8 data_len)
- {
- eir[eir_len++] = sizeof(type) + data_len;
- eir[eir_len++] = type;
- memcpy(&eir[eir_len], data, data_len);
- eir_len += data_len;
- return eir_len;
- }
- static void read_local_oob_ext_data_complete(struct hci_dev *hdev, u8 status,
- u16 opcode, struct sk_buff *skb)
- {
- const struct mgmt_cp_read_local_oob_ext_data *mgmt_cp;
- struct mgmt_rp_read_local_oob_ext_data *mgmt_rp;
- u8 *h192, *r192, *h256, *r256;
- struct mgmt_pending_cmd *cmd;
- u16 eir_len;
- int err;
- BT_DBG("%s status %u", hdev->name, status);
- cmd = pending_find(MGMT_OP_READ_LOCAL_OOB_EXT_DATA, hdev);
- if (!cmd)
- return;
- mgmt_cp = cmd->param;
- if (status) {
- status = mgmt_status(status);
- eir_len = 0;
- h192 = NULL;
- r192 = NULL;
- h256 = NULL;
- r256 = NULL;
- } else if (opcode == HCI_OP_READ_LOCAL_OOB_DATA) {
- struct hci_rp_read_local_oob_data *rp;
- if (skb->len != sizeof(*rp)) {
- status = MGMT_STATUS_FAILED;
- eir_len = 0;
- } else {
- status = MGMT_STATUS_SUCCESS;
- rp = (void *)skb->data;
- eir_len = 5 + 18 + 18;
- h192 = rp->hash;
- r192 = rp->rand;
- h256 = NULL;
- r256 = NULL;
- }
- } else {
- struct hci_rp_read_local_oob_ext_data *rp;
- if (skb->len != sizeof(*rp)) {
- status = MGMT_STATUS_FAILED;
- eir_len = 0;
- } else {
- status = MGMT_STATUS_SUCCESS;
- rp = (void *)skb->data;
- if (hci_dev_test_flag(hdev, HCI_SC_ONLY)) {
- eir_len = 5 + 18 + 18;
- h192 = NULL;
- r192 = NULL;
- } else {
- eir_len = 5 + 18 + 18 + 18 + 18;
- h192 = rp->hash192;
- r192 = rp->rand192;
- }
- h256 = rp->hash256;
- r256 = rp->rand256;
- }
- }
- mgmt_rp = kmalloc(sizeof(*mgmt_rp) + eir_len, GFP_KERNEL);
- if (!mgmt_rp)
- goto done;
- if (status)
- goto send_rsp;
- eir_len = eir_append_data(mgmt_rp->eir, 0, EIR_CLASS_OF_DEV,
- hdev->dev_class, 3);
- if (h192 && r192) {
- eir_len = eir_append_data(mgmt_rp->eir, eir_len,
- EIR_SSP_HASH_C192, h192, 16);
- eir_len = eir_append_data(mgmt_rp->eir, eir_len,
- EIR_SSP_RAND_R192, r192, 16);
- }
- if (h256 && r256) {
- eir_len = eir_append_data(mgmt_rp->eir, eir_len,
- EIR_SSP_HASH_C256, h256, 16);
- eir_len = eir_append_data(mgmt_rp->eir, eir_len,
- EIR_SSP_RAND_R256, r256, 16);
- }
- send_rsp:
- mgmt_rp->type = mgmt_cp->type;
- mgmt_rp->eir_len = cpu_to_le16(eir_len);
- err = mgmt_cmd_complete(cmd->sk, hdev->id,
- MGMT_OP_READ_LOCAL_OOB_EXT_DATA, status,
- mgmt_rp, sizeof(*mgmt_rp) + eir_len);
- if (err < 0 || status)
- goto done;
- hci_sock_set_flag(cmd->sk, HCI_MGMT_OOB_DATA_EVENTS);
- err = mgmt_limited_event(MGMT_EV_LOCAL_OOB_DATA_UPDATED, hdev,
- mgmt_rp, sizeof(*mgmt_rp) + eir_len,
- HCI_MGMT_OOB_DATA_EVENTS, cmd->sk);
- done:
- kfree(mgmt_rp);
- mgmt_pending_remove(cmd);
- }
- static int read_local_ssp_oob_req(struct hci_dev *hdev, struct sock *sk,
- struct mgmt_cp_read_local_oob_ext_data *cp)
- {
- struct mgmt_pending_cmd *cmd;
- struct hci_request req;
- int err;
- cmd = mgmt_pending_add(sk, MGMT_OP_READ_LOCAL_OOB_EXT_DATA, hdev,
- cp, sizeof(*cp));
- if (!cmd)
- return -ENOMEM;
- hci_req_init(&req, hdev);
- if (bredr_sc_enabled(hdev))
- hci_req_add(&req, HCI_OP_READ_LOCAL_OOB_EXT_DATA, 0, NULL);
- else
- hci_req_add(&req, HCI_OP_READ_LOCAL_OOB_DATA, 0, NULL);
- err = hci_req_run_skb(&req, read_local_oob_ext_data_complete);
- if (err < 0) {
- mgmt_pending_remove(cmd);
- return err;
- }
- return 0;
- }
- static int read_local_oob_ext_data(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 data_len)
- {
- struct mgmt_cp_read_local_oob_ext_data *cp = data;
- struct mgmt_rp_read_local_oob_ext_data *rp;
- size_t rp_len;
- u16 eir_len;
- u8 status, flags, role, addr[7], hash[16], rand[16];
- int err;
- BT_DBG("%s", hdev->name);
- if (hdev_is_powered(hdev)) {
- switch (cp->type) {
- case BIT(BDADDR_BREDR):
- status = mgmt_bredr_support(hdev);
- if (status)
- eir_len = 0;
- else
- eir_len = 5;
- break;
- case (BIT(BDADDR_LE_PUBLIC) | BIT(BDADDR_LE_RANDOM)):
- status = mgmt_le_support(hdev);
- if (status)
- eir_len = 0;
- else
- eir_len = 9 + 3 + 18 + 18 + 3;
- break;
- default:
- status = MGMT_STATUS_INVALID_PARAMS;
- eir_len = 0;
- break;
- }
- } else {
- status = MGMT_STATUS_NOT_POWERED;
- eir_len = 0;
- }
- rp_len = sizeof(*rp) + eir_len;
- rp = kmalloc(rp_len, GFP_ATOMIC);
- if (!rp)
- return -ENOMEM;
- if (status)
- goto complete;
- hci_dev_lock(hdev);
- eir_len = 0;
- switch (cp->type) {
- case BIT(BDADDR_BREDR):
- if (hci_dev_test_flag(hdev, HCI_SSP_ENABLED)) {
- err = read_local_ssp_oob_req(hdev, sk, cp);
- hci_dev_unlock(hdev);
- if (!err)
- goto done;
- status = MGMT_STATUS_FAILED;
- goto complete;
- } else {
- eir_len = eir_append_data(rp->eir, eir_len,
- EIR_CLASS_OF_DEV,
- hdev->dev_class, 3);
- }
- break;
- case (BIT(BDADDR_LE_PUBLIC) | BIT(BDADDR_LE_RANDOM)):
- if (hci_dev_test_flag(hdev, HCI_SC_ENABLED) &&
- smp_generate_oob(hdev, hash, rand) < 0) {
- hci_dev_unlock(hdev);
- status = MGMT_STATUS_FAILED;
- goto complete;
- }
- /* This should return the active RPA, but since the RPA
- * is only programmed on demand, it is really hard to fill
- * this in at the moment. For now disallow retrieving
- * local out-of-band data when privacy is in use.
- *
- * Returning the identity address will not help here since
- * pairing happens before the identity resolving key is
- * known and thus the connection establishment happens
- * based on the RPA and not the identity address.
- */
- if (hci_dev_test_flag(hdev, HCI_PRIVACY)) {
- hci_dev_unlock(hdev);
- status = MGMT_STATUS_REJECTED;
- goto complete;
- }
- if (hci_dev_test_flag(hdev, HCI_FORCE_STATIC_ADDR) ||
- !bacmp(&hdev->bdaddr, BDADDR_ANY) ||
- (!hci_dev_test_flag(hdev, HCI_BREDR_ENABLED) &&
- bacmp(&hdev->static_addr, BDADDR_ANY))) {
- memcpy(addr, &hdev->static_addr, 6);
- addr[6] = 0x01;
- } else {
- memcpy(addr, &hdev->bdaddr, 6);
- addr[6] = 0x00;
- }
- eir_len = eir_append_data(rp->eir, eir_len, EIR_LE_BDADDR,
- addr, sizeof(addr));
- if (hci_dev_test_flag(hdev, HCI_ADVERTISING))
- role = 0x02;
- else
- role = 0x01;
- eir_len = eir_append_data(rp->eir, eir_len, EIR_LE_ROLE,
- &role, sizeof(role));
- if (hci_dev_test_flag(hdev, HCI_SC_ENABLED)) {
- eir_len = eir_append_data(rp->eir, eir_len,
- EIR_LE_SC_CONFIRM,
- hash, sizeof(hash));
- eir_len = eir_append_data(rp->eir, eir_len,
- EIR_LE_SC_RANDOM,
- rand, sizeof(rand));
- }
- flags = get_adv_discov_flags(hdev);
- if (!hci_dev_test_flag(hdev, HCI_BREDR_ENABLED))
- flags |= LE_AD_NO_BREDR;
- eir_len = eir_append_data(rp->eir, eir_len, EIR_FLAGS,
- &flags, sizeof(flags));
- break;
- }
- hci_dev_unlock(hdev);
- hci_sock_set_flag(sk, HCI_MGMT_OOB_DATA_EVENTS);
- status = MGMT_STATUS_SUCCESS;
- complete:
- rp->type = cp->type;
- rp->eir_len = cpu_to_le16(eir_len);
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_READ_LOCAL_OOB_EXT_DATA,
- status, rp, sizeof(*rp) + eir_len);
- if (err < 0 || status)
- goto done;
- err = mgmt_limited_event(MGMT_EV_LOCAL_OOB_DATA_UPDATED, hdev,
- rp, sizeof(*rp) + eir_len,
- HCI_MGMT_OOB_DATA_EVENTS, sk);
- done:
- kfree(rp);
- return err;
- }
- static u32 get_supported_adv_flags(struct hci_dev *hdev)
- {
- u32 flags = 0;
- flags |= MGMT_ADV_FLAG_CONNECTABLE;
- flags |= MGMT_ADV_FLAG_DISCOV;
- flags |= MGMT_ADV_FLAG_LIMITED_DISCOV;
- flags |= MGMT_ADV_FLAG_MANAGED_FLAGS;
- if (hdev->adv_tx_power != HCI_TX_POWER_INVALID)
- flags |= MGMT_ADV_FLAG_TX_POWER;
- return flags;
- }
- static int read_adv_features(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 data_len)
- {
- struct mgmt_rp_read_adv_features *rp;
- size_t rp_len;
- int err, i;
- bool instance;
- struct adv_info *adv_instance;
- u32 supported_flags;
- BT_DBG("%s", hdev->name);
- if (!lmp_le_capable(hdev))
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_READ_ADV_FEATURES,
- MGMT_STATUS_REJECTED);
- hci_dev_lock(hdev);
- rp_len = sizeof(*rp);
- instance = hci_dev_test_flag(hdev, HCI_ADVERTISING_INSTANCE);
- if (instance)
- rp_len += hdev->adv_instance_cnt;
- rp = kmalloc(rp_len, GFP_ATOMIC);
- if (!rp) {
- hci_dev_unlock(hdev);
- return -ENOMEM;
- }
- supported_flags = get_supported_adv_flags(hdev);
- rp->supported_flags = cpu_to_le32(supported_flags);
- rp->max_adv_data_len = HCI_MAX_AD_LENGTH;
- rp->max_scan_rsp_len = HCI_MAX_AD_LENGTH;
- rp->max_instances = HCI_MAX_ADV_INSTANCES;
- if (instance) {
- i = 0;
- list_for_each_entry(adv_instance, &hdev->adv_instances, list) {
- if (i >= hdev->adv_instance_cnt)
- break;
- rp->instance[i] = adv_instance->instance;
- i++;
- }
- rp->num_instances = hdev->adv_instance_cnt;
- } else {
- rp->num_instances = 0;
- }
- hci_dev_unlock(hdev);
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_READ_ADV_FEATURES,
- MGMT_STATUS_SUCCESS, rp, rp_len);
- kfree(rp);
- return err;
- }
- static bool tlv_data_is_valid(struct hci_dev *hdev, u32 adv_flags, u8 *data,
- u8 len, bool is_adv_data)
- {
- u8 max_len = HCI_MAX_AD_LENGTH;
- int i, cur_len;
- bool flags_managed = false;
- bool tx_power_managed = false;
- u32 flags_params = MGMT_ADV_FLAG_DISCOV | MGMT_ADV_FLAG_LIMITED_DISCOV |
- MGMT_ADV_FLAG_MANAGED_FLAGS;
- if (is_adv_data && (adv_flags & flags_params)) {
- flags_managed = true;
- max_len -= 3;
- }
- if (is_adv_data && (adv_flags & MGMT_ADV_FLAG_TX_POWER)) {
- tx_power_managed = true;
- max_len -= 3;
- }
- if (len > max_len)
- return false;
- /* Make sure that the data is correctly formatted. */
- for (i = 0, cur_len = 0; i < len; i += (cur_len + 1)) {
- cur_len = data[i];
- if (flags_managed && data[i + 1] == EIR_FLAGS)
- return false;
- if (tx_power_managed && data[i + 1] == EIR_TX_POWER)
- return false;
- /* If the current field length would exceed the total data
- * length, then it's invalid.
- */
- if (i + cur_len >= len)
- return false;
- }
- return true;
- }
- static void add_advertising_complete(struct hci_dev *hdev, u8 status,
- u16 opcode)
- {
- struct mgmt_pending_cmd *cmd;
- struct mgmt_cp_add_advertising *cp;
- struct mgmt_rp_add_advertising rp;
- struct adv_info *adv_instance, *n;
- u8 instance;
- BT_DBG("status %d", status);
- hci_dev_lock(hdev);
- cmd = pending_find(MGMT_OP_ADD_ADVERTISING, hdev);
- if (status)
- hci_dev_clear_flag(hdev, HCI_ADVERTISING_INSTANCE);
- list_for_each_entry_safe(adv_instance, n, &hdev->adv_instances, list) {
- if (!adv_instance->pending)
- continue;
- if (!status) {
- adv_instance->pending = false;
- continue;
- }
- instance = adv_instance->instance;
- if (hdev->cur_adv_instance == instance)
- cancel_adv_timeout(hdev);
- hci_remove_adv_instance(hdev, instance);
- advertising_removed(cmd ? cmd->sk : NULL, hdev, instance);
- }
- if (!cmd)
- goto unlock;
- cp = cmd->param;
- rp.instance = cp->instance;
- if (status)
- mgmt_cmd_status(cmd->sk, cmd->index, cmd->opcode,
- mgmt_status(status));
- else
- mgmt_cmd_complete(cmd->sk, cmd->index, cmd->opcode,
- mgmt_status(status), &rp, sizeof(rp));
- mgmt_pending_remove(cmd);
- unlock:
- hci_dev_unlock(hdev);
- }
- void mgmt_adv_timeout_expired(struct hci_dev *hdev)
- {
- u8 instance;
- struct hci_request req;
- hdev->adv_instance_timeout = 0;
- instance = get_current_adv_instance(hdev);
- if (instance == 0x00)
- return;
- hci_dev_lock(hdev);
- hci_req_init(&req, hdev);
- clear_adv_instance(hdev, &req, instance, false);
- if (list_empty(&hdev->adv_instances))
- disable_advertising(&req);
- if (!skb_queue_empty(&req.cmd_q))
- hci_req_run(&req, NULL);
- hci_dev_unlock(hdev);
- }
- static int add_advertising(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 data_len)
- {
- struct mgmt_cp_add_advertising *cp = data;
- struct mgmt_rp_add_advertising rp;
- u32 flags;
- u32 supported_flags;
- u8 status;
- u16 timeout, duration;
- unsigned int prev_instance_cnt = hdev->adv_instance_cnt;
- u8 schedule_instance = 0;
- struct adv_info *next_instance;
- int err;
- struct mgmt_pending_cmd *cmd;
- struct hci_request req;
- BT_DBG("%s", hdev->name);
- status = mgmt_le_support(hdev);
- if (status)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_ADD_ADVERTISING,
- status);
- if (data_len != sizeof(*cp) + cp->adv_data_len + cp->scan_rsp_len)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_ADD_ADVERTISING,
- MGMT_STATUS_INVALID_PARAMS);
- flags = __le32_to_cpu(cp->flags);
- timeout = __le16_to_cpu(cp->timeout);
- duration = __le16_to_cpu(cp->duration);
- /* The current implementation only supports a subset of the specified
- * flags.
- */
- supported_flags = get_supported_adv_flags(hdev);
- if (flags & ~supported_flags)
- return mgmt_cmd_status(sk, hdev->id, MGMT_OP_ADD_ADVERTISING,
- MGMT_STATUS_INVALID_PARAMS);
- hci_dev_lock(hdev);
- if (timeout && !hdev_is_powered(hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_ADD_ADVERTISING,
- MGMT_STATUS_REJECTED);
- goto unlock;
- }
- if (pending_find(MGMT_OP_ADD_ADVERTISING, hdev) ||
- pending_find(MGMT_OP_REMOVE_ADVERTISING, hdev) ||
- pending_find(MGMT_OP_SET_LE, hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_ADD_ADVERTISING,
- MGMT_STATUS_BUSY);
- goto unlock;
- }
- if (!tlv_data_is_valid(hdev, flags, cp->data, cp->adv_data_len, true) ||
- !tlv_data_is_valid(hdev, flags, cp->data + cp->adv_data_len,
- cp->scan_rsp_len, false)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_ADD_ADVERTISING,
- MGMT_STATUS_INVALID_PARAMS);
- goto unlock;
- }
- err = hci_add_adv_instance(hdev, cp->instance, flags,
- cp->adv_data_len, cp->data,
- cp->scan_rsp_len,
- cp->data + cp->adv_data_len,
- timeout, duration);
- if (err < 0) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_ADD_ADVERTISING,
- MGMT_STATUS_FAILED);
- goto unlock;
- }
- /* Only trigger an advertising added event if a new instance was
- * actually added.
- */
- if (hdev->adv_instance_cnt > prev_instance_cnt)
- advertising_added(sk, hdev, cp->instance);
- hci_dev_set_flag(hdev, HCI_ADVERTISING_INSTANCE);
- if (hdev->cur_adv_instance == cp->instance) {
- /* If the currently advertised instance is being changed then
- * cancel the current advertising and schedule the next
- * instance. If there is only one instance then the overridden
- * advertising data will be visible right away.
- */
- cancel_adv_timeout(hdev);
- next_instance = hci_get_next_instance(hdev, cp->instance);
- if (next_instance)
- schedule_instance = next_instance->instance;
- } else if (!hdev->adv_instance_timeout) {
- /* Immediately advertise the new instance if no other
- * instance is currently being advertised.
- */
- schedule_instance = cp->instance;
- }
- /* If the HCI_ADVERTISING flag is set or the device isn't powered or
- * there is no instance to be advertised then we have no HCI
- * communication to make. Simply return.
- */
- if (!hdev_is_powered(hdev) ||
- hci_dev_test_flag(hdev, HCI_ADVERTISING) ||
- !schedule_instance) {
- rp.instance = cp->instance;
- err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_ADD_ADVERTISING,
- MGMT_STATUS_SUCCESS, &rp, sizeof(rp));
- goto unlock;
- }
- /* We're good to go, update advertising data, parameters, and start
- * advertising.
- */
- cmd = mgmt_pending_add(sk, MGMT_OP_ADD_ADVERTISING, hdev, data,
- data_len);
- if (!cmd) {
- err = -ENOMEM;
- goto unlock;
- }
- hci_req_init(&req, hdev);
- err = schedule_adv_instance(&req, schedule_instance, true);
- if (!err)
- err = hci_req_run(&req, add_advertising_complete);
- if (err < 0)
- mgmt_pending_remove(cmd);
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static void remove_advertising_complete(struct hci_dev *hdev, u8 status,
- u16 opcode)
- {
- struct mgmt_pending_cmd *cmd;
- struct mgmt_cp_remove_advertising *cp;
- struct mgmt_rp_remove_advertising rp;
- BT_DBG("status %d", status);
- hci_dev_lock(hdev);
- /* A failure status here only means that we failed to disable
- * advertising. Otherwise, the advertising instance has been removed,
- * so report success.
- */
- cmd = pending_find(MGMT_OP_REMOVE_ADVERTISING, hdev);
- if (!cmd)
- goto unlock;
- cp = cmd->param;
- rp.instance = cp->instance;
- mgmt_cmd_complete(cmd->sk, cmd->index, cmd->opcode, MGMT_STATUS_SUCCESS,
- &rp, sizeof(rp));
- mgmt_pending_remove(cmd);
- unlock:
- hci_dev_unlock(hdev);
- }
- static int remove_advertising(struct sock *sk, struct hci_dev *hdev,
- void *data, u16 data_len)
- {
- struct mgmt_cp_remove_advertising *cp = data;
- struct mgmt_rp_remove_advertising rp;
- struct mgmt_pending_cmd *cmd;
- struct hci_request req;
- int err;
- BT_DBG("%s", hdev->name);
- hci_dev_lock(hdev);
- if (cp->instance && !hci_find_adv_instance(hdev, cp->instance)) {
- err = mgmt_cmd_status(sk, hdev->id,
- MGMT_OP_REMOVE_ADVERTISING,
- MGMT_STATUS_INVALID_PARAMS);
- goto unlock;
- }
- if (pending_find(MGMT_OP_ADD_ADVERTISING, hdev) ||
- pending_find(MGMT_OP_REMOVE_ADVERTISING, hdev) ||
- pending_find(MGMT_OP_SET_LE, hdev)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_REMOVE_ADVERTISING,
- MGMT_STATUS_BUSY);
- goto unlock;
- }
- if (!hci_dev_test_flag(hdev, HCI_ADVERTISING_INSTANCE)) {
- err = mgmt_cmd_status(sk, hdev->id, MGMT_OP_REMOVE_ADVERTISING,
- MGMT_STATUS_INVALID_PARAMS);
- goto unlock;
- }
- hci_req_init(&req, hdev);
- clear_adv_instance(hdev, &req, cp->instance, true);
- if (list_empty(&hdev->adv_instances))
- disable_advertising(&req);
- /* If no HCI commands have been collected so far or the HCI_ADVERTISING
- * flag is set or the device isn't powered then we have no HCI
- * communication to make. Simply return.
- */
- if (skb_queue_empty(&req.cmd_q) ||
- !hdev_is_powered(hdev) ||
- hci_dev_test_flag(hdev, HCI_ADVERTISING)) {
- rp.instance = cp->instance;
- err = mgmt_cmd_complete(sk, hdev->id,
- MGMT_OP_REMOVE_ADVERTISING,
- MGMT_STATUS_SUCCESS, &rp, sizeof(rp));
- goto unlock;
- }
- cmd = mgmt_pending_add(sk, MGMT_OP_REMOVE_ADVERTISING, hdev, data,
- data_len);
- if (!cmd) {
- err = -ENOMEM;
- goto unlock;
- }
- err = hci_req_run(&req, remove_advertising_complete);
- if (err < 0)
- mgmt_pending_remove(cmd);
- unlock:
- hci_dev_unlock(hdev);
- return err;
- }
- static const struct hci_mgmt_handler mgmt_handlers[] = {
- { NULL }, /* 0x0000 (no command) */
- { read_version, MGMT_READ_VERSION_SIZE,
- HCI_MGMT_NO_HDEV |
- HCI_MGMT_UNTRUSTED },
- { read_commands, MGMT_READ_COMMANDS_SIZE,
- HCI_MGMT_NO_HDEV |
- HCI_MGMT_UNTRUSTED },
- { read_index_list, MGMT_READ_INDEX_LIST_SIZE,
- HCI_MGMT_NO_HDEV |
- HCI_MGMT_UNTRUSTED },
- { read_controller_info, MGMT_READ_INFO_SIZE,
- HCI_MGMT_UNTRUSTED },
- { set_powered, MGMT_SETTING_SIZE },
- { set_discoverable, MGMT_SET_DISCOVERABLE_SIZE },
- { set_connectable, MGMT_SETTING_SIZE },
- { set_fast_connectable, MGMT_SETTING_SIZE },
- { set_bondable, MGMT_SETTING_SIZE },
- { set_link_security, MGMT_SETTING_SIZE },
- { set_ssp, MGMT_SETTING_SIZE },
- { set_hs, MGMT_SETTING_SIZE },
- { set_le, MGMT_SETTING_SIZE },
- { set_dev_class, MGMT_SET_DEV_CLASS_SIZE },
- { set_local_name, MGMT_SET_LOCAL_NAME_SIZE },
- { add_uuid, MGMT_ADD_UUID_SIZE },
- { remove_uuid, MGMT_REMOVE_UUID_SIZE },
- { load_link_keys, MGMT_LOAD_LINK_KEYS_SIZE,
- HCI_MGMT_VAR_LEN },
- { load_long_term_keys, MGMT_LOAD_LONG_TERM_KEYS_SIZE,
- HCI_MGMT_VAR_LEN },
- { disconnect, MGMT_DISCONNECT_SIZE },
- { get_connections, MGMT_GET_CONNECTIONS_SIZE },
- { pin_code_reply, MGMT_PIN_CODE_REPLY_SIZE },
- { pin_code_neg_reply, MGMT_PIN_CODE_NEG_REPLY_SIZE },
- { set_io_capability, MGMT_SET_IO_CAPABILITY_SIZE },
- { pair_device, MGMT_PAIR_DEVICE_SIZE },
- { cancel_pair_device, MGMT_CANCEL_PAIR_DEVICE_SIZE },
- { unpair_device, MGMT_UNPAIR_DEVICE_SIZE },
- { user_confirm_reply, MGMT_USER_CONFIRM_REPLY_SIZE },
- { user_confirm_neg_reply, MGMT_USER_CONFIRM_NEG_REPLY_SIZE },
- { user_passkey_reply, MGMT_USER_PASSKEY_REPLY_SIZE },
- { user_passkey_neg_reply, MGMT_USER_PASSKEY_NEG_REPLY_SIZE },
- { read_local_oob_data, MGMT_READ_LOCAL_OOB_DATA_SIZE },
- { add_remote_oob_data, MGMT_ADD_REMOTE_OOB_DATA_SIZE,
- HCI_MGMT_VAR_LEN },
- { remove_remote_oob_data, MGMT_REMOVE_REMOTE_OOB_DATA_SIZE },
- { start_discovery, MGMT_START_DISCOVERY_SIZE },
- { stop_discovery, MGMT_STOP_DISCOVERY_SIZE },
- { confirm_name, MGMT_CONFIRM_NAME_SIZE },
- { block_device, MGMT_BLOCK_DEVICE_SIZE },
- { unblock_device, MGMT_UNBLOCK_DEVICE_SIZE },
- { set_device_id, MGMT_SET_DEVICE_ID_SIZE },
- { set_advertising, MGMT_SETTING_SIZE },
- { set_bredr, MGMT_SETTING_SIZE },
- { set_static_address, MGMT_SET_STATIC_ADDRESS_SIZE },
- { set_scan_params, MGMT_SET_SCAN_PARAMS_SIZE },
- { set_secure_conn, MGMT_SETTING_SIZE },
- { set_debug_keys, MGMT_SETTING_SIZE },
- { set_privacy, MGMT_SET_PRIVACY_SIZE },
- { load_irks, MGMT_LOAD_IRKS_SIZE,
- HCI_MGMT_VAR_LEN },
- { get_conn_info, MGMT_GET_CONN_INFO_SIZE },
- { get_clock_info, MGMT_GET_CLOCK_INFO_SIZE },
- { add_device, MGMT_ADD_DEVICE_SIZE },
- { remove_device, MGMT_REMOVE_DEVICE_SIZE },
- { load_conn_param, MGMT_LOAD_CONN_PARAM_SIZE,
- HCI_MGMT_VAR_LEN },
- { read_unconf_index_list, MGMT_READ_UNCONF_INDEX_LIST_SIZE,
- HCI_MGMT_NO_HDEV |
- HCI_MGMT_UNTRUSTED },
- { read_config_info, MGMT_READ_CONFIG_INFO_SIZE,
- HCI_MGMT_UNCONFIGURED |
- HCI_MGMT_UNTRUSTED },
- { set_external_config, MGMT_SET_EXTERNAL_CONFIG_SIZE,
- HCI_MGMT_UNCONFIGURED },
- { set_public_address, MGMT_SET_PUBLIC_ADDRESS_SIZE,
- HCI_MGMT_UNCONFIGURED },
- { start_service_discovery, MGMT_START_SERVICE_DISCOVERY_SIZE,
- HCI_MGMT_VAR_LEN },
- { read_local_oob_ext_data, MGMT_READ_LOCAL_OOB_EXT_DATA_SIZE },
- { read_ext_index_list, MGMT_READ_EXT_INDEX_LIST_SIZE,
- HCI_MGMT_NO_HDEV |
- HCI_MGMT_UNTRUSTED },
- { read_adv_features, MGMT_READ_ADV_FEATURES_SIZE },
- { add_advertising, MGMT_ADD_ADVERTISING_SIZE,
- HCI_MGMT_VAR_LEN },
- { remove_advertising, MGMT_REMOVE_ADVERTISING_SIZE },
- };
- void mgmt_index_added(struct hci_dev *hdev)
- {
- struct mgmt_ev_ext_index ev;
- if (test_bit(HCI_QUIRK_RAW_DEVICE, &hdev->quirks))
- return;
- switch (hdev->dev_type) {
- case HCI_BREDR:
- if (hci_dev_test_flag(hdev, HCI_UNCONFIGURED)) {
- mgmt_index_event(MGMT_EV_UNCONF_INDEX_ADDED, hdev,
- NULL, 0, HCI_MGMT_UNCONF_INDEX_EVENTS);
- ev.type = 0x01;
- } else {
- mgmt_index_event(MGMT_EV_INDEX_ADDED, hdev, NULL, 0,
- HCI_MGMT_INDEX_EVENTS);
- ev.type = 0x00;
- }
- break;
- case HCI_AMP:
- ev.type = 0x02;
- break;
- default:
- return;
- }
- ev.bus = hdev->bus;
- mgmt_index_event(MGMT_EV_EXT_INDEX_ADDED, hdev, &ev, sizeof(ev),
- HCI_MGMT_EXT_INDEX_EVENTS);
- }
- void mgmt_index_removed(struct hci_dev *hdev)
- {
- struct mgmt_ev_ext_index ev;
- u8 status = MGMT_STATUS_INVALID_INDEX;
- if (test_bit(HCI_QUIRK_RAW_DEVICE, &hdev->quirks))
- return;
- switch (hdev->dev_type) {
- case HCI_BREDR:
- mgmt_pending_foreach(0, hdev, cmd_complete_rsp, &status);
- if (hci_dev_test_flag(hdev, HCI_UNCONFIGURED)) {
- mgmt_index_event(MGMT_EV_UNCONF_INDEX_REMOVED, hdev,
- NULL, 0, HCI_MGMT_UNCONF_INDEX_EVENTS);
- ev.type = 0x01;
- } else {
- mgmt_index_event(MGMT_EV_INDEX_REMOVED, hdev, NULL, 0,
- HCI_MGMT_INDEX_EVENTS);
- ev.type = 0x00;
- }
- break;
- case HCI_AMP:
- ev.type = 0x02;
- break;
- default:
- return;
- }
- ev.bus = hdev->bus;
- mgmt_index_event(MGMT_EV_EXT_INDEX_REMOVED, hdev, &ev, sizeof(ev),
- HCI_MGMT_EXT_INDEX_EVENTS);
- }
- /* This function requires the caller holds hdev->lock */
- static void restart_le_actions(struct hci_request *req)
- {
- struct hci_dev *hdev = req->hdev;
- struct hci_conn_params *p;
- list_for_each_entry(p, &hdev->le_conn_params, list) {
- /* Needed for AUTO_OFF case where might not "really"
- * have been powered off.
- */
- list_del_init(&p->action);
- switch (p->auto_connect) {
- case HCI_AUTO_CONN_DIRECT:
- case HCI_AUTO_CONN_ALWAYS:
- list_add(&p->action, &hdev->pend_le_conns);
- break;
- case HCI_AUTO_CONN_REPORT:
- list_add(&p->action, &hdev->pend_le_reports);
- break;
- default:
- break;
- }
- }
- __hci_update_background_scan(req);
- }
- static void powered_complete(struct hci_dev *hdev, u8 status, u16 opcode)
- {
- struct cmd_lookup match = { NULL, hdev };
- BT_DBG("status 0x%02x", status);
- if (!status) {
- /* Register the available SMP channels (BR/EDR and LE) only
- * when successfully powering on the controller. This late
- * registration is required so that LE SMP can clearly
- * decide if the public address or static address is used.
- */
- smp_register(hdev);
- }
- hci_dev_lock(hdev);
- mgmt_pending_foreach(MGMT_OP_SET_POWERED, hdev, settings_rsp, &match);
- new_settings(hdev, match.sk);
- hci_dev_unlock(hdev);
- if (match.sk)
- sock_put(match.sk);
- }
- static int powered_update_hci(struct hci_dev *hdev)
- {
- struct hci_request req;
- struct adv_info *adv_instance;
- u8 link_sec;
- hci_req_init(&req, hdev);
- if (hci_dev_test_flag(hdev, HCI_SSP_ENABLED) &&
- !lmp_host_ssp_capable(hdev)) {
- u8 mode = 0x01;
- hci_req_add(&req, HCI_OP_WRITE_SSP_MODE, sizeof(mode), &mode);
- if (bredr_sc_enabled(hdev) && !lmp_host_sc_capable(hdev)) {
- u8 support = 0x01;
- hci_req_add(&req, HCI_OP_WRITE_SC_SUPPORT,
- sizeof(support), &support);
- }
- }
- if (hci_dev_test_flag(hdev, HCI_LE_ENABLED) &&
- lmp_bredr_capable(hdev)) {
- struct hci_cp_write_le_host_supported cp;
- cp.le = 0x01;
- cp.simul = 0x00;
- /* Check first if we already have the right
- * host state (host features set)
- */
- if (cp.le != lmp_host_le_capable(hdev) ||
- cp.simul != lmp_host_le_br_capable(hdev))
- hci_req_add(&req, HCI_OP_WRITE_LE_HOST_SUPPORTED,
- sizeof(cp), &cp);
- }
- if (lmp_le_capable(hdev)) {
- /* Make sure the controller has a good default for
- * advertising data. This also applies to the case
- * where BR/EDR was toggled during the AUTO_OFF phase.
- */
- if (hci_dev_test_flag(hdev, HCI_LE_ENABLED) &&
- (hci_dev_test_flag(hdev, HCI_ADVERTISING) ||
- !hci_dev_test_flag(hdev, HCI_ADVERTISING_INSTANCE))) {
- update_adv_data(&req);
- update_scan_rsp_data(&req);
- }
- if (hci_dev_test_flag(hdev, HCI_ADVERTISING_INSTANCE) &&
- hdev->cur_adv_instance == 0x00 &&
- !list_empty(&hdev->adv_instances)) {
- adv_instance = list_first_entry(&hdev->adv_instances,
- struct adv_info, list);
- hdev->cur_adv_instance = adv_instance->instance;
- }
- if (hci_dev_test_flag(hdev, HCI_ADVERTISING))
- enable_advertising(&req);
- else if (hci_dev_test_flag(hdev, HCI_ADVERTISING_INSTANCE) &&
- hdev->cur_adv_instance)
- schedule_adv_instance(&req, hdev->cur_adv_instance,
- true);
- restart_le_actions(&req);
- }
- link_sec = hci_dev_test_flag(hdev, HCI_LINK_SECURITY);
- if (link_sec != test_bit(HCI_AUTH, &hdev->flags))
- hci_req_add(&req, HCI_OP_WRITE_AUTH_ENABLE,
- sizeof(link_sec), &link_sec);
- if (lmp_bredr_capable(hdev)) {
- if (hci_dev_test_flag(hdev, HCI_FAST_CONNECTABLE))
- write_fast_connectable(&req, true);
- else
- write_fast_connectable(&req, false);
- __hci_update_page_scan(&req);
- update_class(&req);
- update_name(&req);
- update_eir(&req);
- }
- return hci_req_run(&req, powered_complete);
- }
- int mgmt_powered(struct hci_dev *hdev, u8 powered)
- {
- struct cmd_lookup match = { NULL, hdev };
- u8 status, zero_cod[] = { 0, 0, 0 };
- int err;
- if (!hci_dev_test_flag(hdev, HCI_MGMT))
- return 0;
- if (powered) {
- if (powered_update_hci(hdev) == 0)
- return 0;
- mgmt_pending_foreach(MGMT_OP_SET_POWERED, hdev, settings_rsp,
- &match);
- goto new_settings;
- }
- mgmt_pending_foreach(MGMT_OP_SET_POWERED, hdev, settings_rsp, &match);
- /* If the power off is because of hdev unregistration let
- * use the appropriate INVALID_INDEX status. Otherwise use
- * NOT_POWERED. We cover both scenarios here since later in
- * mgmt_index_removed() any hci_conn callbacks will have already
- * been triggered, potentially causing misleading DISCONNECTED
- * status responses.
- */
- if (hci_dev_test_flag(hdev, HCI_UNREGISTER))
- status = MGMT_STATUS_INVALID_INDEX;
- else
- status = MGMT_STATUS_NOT_POWERED;
- mgmt_pending_foreach(0, hdev, cmd_complete_rsp, &status);
- if (memcmp(hdev->dev_class, zero_cod, sizeof(zero_cod)) != 0)
- mgmt_generic_event(MGMT_EV_CLASS_OF_DEV_CHANGED, hdev,
- zero_cod, sizeof(zero_cod), NULL);
- new_settings:
- err = new_settings(hdev, match.sk);
- if (match.sk)
- sock_put(match.sk);
- return err;
- }
- void mgmt_set_powered_failed(struct hci_dev *hdev, int err)
- {
- struct mgmt_pending_cmd *cmd;
- u8 status;
- cmd = pending_find(MGMT_OP_SET_POWERED, hdev);
- if (!cmd)
- return;
- if (err == -ERFKILL)
- status = MGMT_STATUS_RFKILLED;
- else
- status = MGMT_STATUS_FAILED;
- mgmt_cmd_status(cmd->sk, hdev->id, MGMT_OP_SET_POWERED, status);
- mgmt_pending_remove(cmd);
- }
- void mgmt_discoverable_timeout(struct hci_dev *hdev)
- {
- struct hci_request req;
- hci_dev_lock(hdev);
- /* When discoverable timeout triggers, then just make sure
- * the limited discoverable flag is cleared. Even in the case
- * of a timeout triggered from general discoverable, it is
- * safe to unconditionally clear the flag.
- */
- hci_dev_clear_flag(hdev, HCI_LIMITED_DISCOVERABLE);
- hci_dev_clear_flag(hdev, HCI_DISCOVERABLE);
- hci_req_init(&req, hdev);
- if (hci_dev_test_flag(hdev, HCI_BREDR_ENABLED)) {
- u8 scan = SCAN_PAGE;
- hci_req_add(&req, HCI_OP_WRITE_SCAN_ENABLE,
- sizeof(scan), &scan);
- }
- update_class(&req);
- /* Advertising instances don't use the global discoverable setting, so
- * only update AD if advertising was enabled using Set Advertising.
- */
- if (hci_dev_test_flag(hdev, HCI_ADVERTISING))
- update_adv_data(&req);
- hci_req_run(&req, NULL);
- hdev->discov_timeout = 0;
- new_settings(hdev, NULL);
- hci_dev_unlock(hdev);
- }
- void mgmt_new_link_key(struct hci_dev *hdev, struct link_key *key,
- bool persistent)
- {
- struct mgmt_ev_new_link_key ev;
- memset(&ev, 0, sizeof(ev));
- ev.store_hint = persistent;
- bacpy(&ev.key.addr.bdaddr, &key->bdaddr);
- ev.key.addr.type = BDADDR_BREDR;
- ev.key.type = key->type;
- memcpy(ev.key.val, key->val, HCI_LINK_KEY_SIZE);
- ev.key.pin_len = key->pin_len;
- mgmt_event(MGMT_EV_NEW_LINK_KEY, hdev, &ev, sizeof(ev), NULL);
- }
- static u8 mgmt_ltk_type(struct smp_ltk *ltk)
- {
- switch (ltk->type) {
- case SMP_LTK:
- case SMP_LTK_SLAVE:
- if (ltk->authenticated)
- return MGMT_LTK_AUTHENTICATED;
- return MGMT_LTK_UNAUTHENTICATED;
- case SMP_LTK_P256:
- if (ltk->authenticated)
- return MGMT_LTK_P256_AUTH;
- return MGMT_LTK_P256_UNAUTH;
- case SMP_LTK_P256_DEBUG:
- return MGMT_LTK_P256_DEBUG;
- }
- return MGMT_LTK_UNAUTHENTICATED;
- }
- void mgmt_new_ltk(struct hci_dev *hdev, struct smp_ltk *key, bool persistent)
- {
- struct mgmt_ev_new_long_term_key ev;
- memset(&ev, 0, sizeof(ev));
- /* Devices using resolvable or non-resolvable random addresses
- * without providing an identity resolving key don't require
- * to store long term keys. Their addresses will change the
- * next time around.
- *
- * Only when a remote device provides an identity address
- * make sure the long term key is stored. If the remote
- * identity is known, the long term keys are internally
- * mapped to the identity address. So allow static random
- * and public addresses here.
- */
- if (key->bdaddr_type == ADDR_LE_DEV_RANDOM &&
- (key->bdaddr.b[5] & 0xc0) != 0xc0)
- ev.store_hint = 0x00;
- else
- ev.store_hint = persistent;
- bacpy(&ev.key.addr.bdaddr, &key->bdaddr);
- ev.key.addr.type = link_to_bdaddr(LE_LINK, key->bdaddr_type);
- ev.key.type = mgmt_ltk_type(key);
- ev.key.enc_size = key->enc_size;
- ev.key.ediv = key->ediv;
- ev.key.rand = key->rand;
- if (key->type == SMP_LTK)
- ev.key.master = 1;
- /* Make sure we copy only the significant bytes based on the
- * encryption key size, and set the rest of the value to zeroes.
- */
- memcpy(ev.key.val, key->val, key->enc_size);
- memset(ev.key.val + key->enc_size, 0,
- sizeof(ev.key.val) - key->enc_size);
- mgmt_event(MGMT_EV_NEW_LONG_TERM_KEY, hdev, &ev, sizeof(ev), NULL);
- }
- void mgmt_new_irk(struct hci_dev *hdev, struct smp_irk *irk, bool persistent)
- {
- struct mgmt_ev_new_irk ev;
- memset(&ev, 0, sizeof(ev));
- ev.store_hint = persistent;
- bacpy(&ev.rpa, &irk->rpa);
- bacpy(&ev.irk.addr.bdaddr, &irk->bdaddr);
- ev.irk.addr.type = link_to_bdaddr(LE_LINK, irk->addr_type);
- memcpy(ev.irk.val, irk->val, sizeof(irk->val));
- mgmt_event(MGMT_EV_NEW_IRK, hdev, &ev, sizeof(ev), NULL);
- }
- void mgmt_new_csrk(struct hci_dev *hdev, struct smp_csrk *csrk,
- bool persistent)
- {
- struct mgmt_ev_new_csrk ev;
- memset(&ev, 0, sizeof(ev));
- /* Devices using resolvable or non-resolvable random addresses
- * without providing an identity resolving key don't require
- * to store signature resolving keys. Their addresses will change
- * the next time around.
- *
- * Only when a remote device provides an identity address
- * make sure the signature resolving key is stored. So allow
- * static random and public addresses here.
- */
- if (csrk->bdaddr_type == ADDR_LE_DEV_RANDOM &&
- (csrk->bdaddr.b[5] & 0xc0) != 0xc0)
- ev.store_hint = 0x00;
- else
- ev.store_hint = persistent;
- bacpy(&ev.key.addr.bdaddr, &csrk->bdaddr);
- ev.key.addr.type = link_to_bdaddr(LE_LINK, csrk->bdaddr_type);
- ev.key.type = csrk->type;
- memcpy(ev.key.val, csrk->val, sizeof(csrk->val));
- mgmt_event(MGMT_EV_NEW_CSRK, hdev, &ev, sizeof(ev), NULL);
- }
- void mgmt_new_conn_param(struct hci_dev *hdev, bdaddr_t *bdaddr,
- u8 bdaddr_type, u8 store_hint, u16 min_interval,
- u16 max_interval, u16 latency, u16 timeout)
- {
- struct mgmt_ev_new_conn_param ev;
- if (!hci_is_identity_address(bdaddr, bdaddr_type))
- return;
- memset(&ev, 0, sizeof(ev));
- bacpy(&ev.addr.bdaddr, bdaddr);
- ev.addr.type = link_to_bdaddr(LE_LINK, bdaddr_type);
- ev.store_hint = store_hint;
- ev.min_interval = cpu_to_le16(min_interval);
- ev.max_interval = cpu_to_le16(max_interval);
- ev.latency = cpu_to_le16(latency);
- ev.timeout = cpu_to_le16(timeout);
- mgmt_event(MGMT_EV_NEW_CONN_PARAM, hdev, &ev, sizeof(ev), NULL);
- }
- void mgmt_device_connected(struct hci_dev *hdev, struct hci_conn *conn,
- u32 flags, u8 *name, u8 name_len)
- {
- char buf[512];
- struct mgmt_ev_device_connected *ev = (void *) buf;
- u16 eir_len = 0;
- bacpy(&ev->addr.bdaddr, &conn->dst);
- ev->addr.type = link_to_bdaddr(conn->type, conn->dst_type);
- ev->flags = __cpu_to_le32(flags);
- /* We must ensure that the EIR Data fields are ordered and
- * unique. Keep it simple for now and avoid the problem by not
- * adding any BR/EDR data to the LE adv.
- */
- if (conn->le_adv_data_len > 0) {
- memcpy(&ev->eir[eir_len],
- conn->le_adv_data, conn->le_adv_data_len);
- eir_len = conn->le_adv_data_len;
- } else {
- if (name_len > 0)
- eir_len = eir_append_data(ev->eir, 0, EIR_NAME_COMPLETE,
- name, name_len);
- if (memcmp(conn->dev_class, "\0\0\0", 3) != 0)
- eir_len = eir_append_data(ev->eir, eir_len,
- EIR_CLASS_OF_DEV,
- conn->dev_class, 3);
- }
- ev->eir_len = cpu_to_le16(eir_len);
- mgmt_event(MGMT_EV_DEVICE_CONNECTED, hdev, buf,
- sizeof(*ev) + eir_len, NULL);
- }
- static void disconnect_rsp(struct mgmt_pending_cmd *cmd, void *data)
- {
- struct sock **sk = data;
- cmd->cmd_complete(cmd, 0);
- *sk = cmd->sk;
- sock_hold(*sk);
- mgmt_pending_remove(cmd);
- }
- static void unpair_device_rsp(struct mgmt_pending_cmd *cmd, void *data)
- {
- struct hci_dev *hdev = data;
- struct mgmt_cp_unpair_device *cp = cmd->param;
- device_unpaired(hdev, &cp->addr.bdaddr, cp->addr.type, cmd->sk);
- cmd->cmd_complete(cmd, 0);
- mgmt_pending_remove(cmd);
- }
- bool mgmt_powering_down(struct hci_dev *hdev)
- {
- struct mgmt_pending_cmd *cmd;
- struct mgmt_mode *cp;
- cmd = pending_find(MGMT_OP_SET_POWERED, hdev);
- if (!cmd)
- return false;
- cp = cmd->param;
- if (!cp->val)
- return true;
- return false;
- }
- void mgmt_device_disconnected(struct hci_dev *hdev, bdaddr_t *bdaddr,
- u8 link_type, u8 addr_type, u8 reason,
- bool mgmt_connected)
- {
- struct mgmt_ev_device_disconnected ev;
- struct sock *sk = NULL;
- /* The connection is still in hci_conn_hash so test for 1
- * instead of 0 to know if this is the last one.
- */
- if (mgmt_powering_down(hdev) && hci_conn_count(hdev) == 1) {
- cancel_delayed_work(&hdev->power_off);
- queue_work(hdev->req_workqueue, &hdev->power_off.work);
- }
- if (!mgmt_connected)
- return;
- if (link_type != ACL_LINK && link_type != LE_LINK)
- return;
- mgmt_pending_foreach(MGMT_OP_DISCONNECT, hdev, disconnect_rsp, &sk);
- bacpy(&ev.addr.bdaddr, bdaddr);
- ev.addr.type = link_to_bdaddr(link_type, addr_type);
- ev.reason = reason;
- mgmt_event(MGMT_EV_DEVICE_DISCONNECTED, hdev, &ev, sizeof(ev), sk);
- if (sk)
- sock_put(sk);
- mgmt_pending_foreach(MGMT_OP_UNPAIR_DEVICE, hdev, unpair_device_rsp,
- hdev);
- }
- void mgmt_disconnect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr,
- u8 link_type, u8 addr_type, u8 status)
- {
- u8 bdaddr_type = link_to_bdaddr(link_type, addr_type);
- struct mgmt_cp_disconnect *cp;
- struct mgmt_pending_cmd *cmd;
- mgmt_pending_foreach(MGMT_OP_UNPAIR_DEVICE, hdev, unpair_device_rsp,
- hdev);
- cmd = pending_find(MGMT_OP_DISCONNECT, hdev);
- if (!cmd)
- return;
- cp = cmd->param;
- if (bacmp(bdaddr, &cp->addr.bdaddr))
- return;
- if (cp->addr.type != bdaddr_type)
- return;
- cmd->cmd_complete(cmd, mgmt_status(status));
- mgmt_pending_remove(cmd);
- }
- void mgmt_connect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
- u8 addr_type, u8 status)
- {
- struct mgmt_ev_connect_failed ev;
- /* The connection is still in hci_conn_hash so test for 1
- * instead of 0 to know if this is the last one.
- */
- if (mgmt_powering_down(hdev) && hci_conn_count(hdev) == 1) {
- cancel_delayed_work(&hdev->power_off);
- queue_work(hdev->req_workqueue, &hdev->power_off.work);
- }
- bacpy(&ev.addr.bdaddr, bdaddr);
- ev.addr.type = link_to_bdaddr(link_type, addr_type);
- ev.status = mgmt_status(status);
- mgmt_event(MGMT_EV_CONNECT_FAILED, hdev, &ev, sizeof(ev), NULL);
- }
- void mgmt_pin_code_request(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 secure)
- {
- struct mgmt_ev_pin_code_request ev;
- bacpy(&ev.addr.bdaddr, bdaddr);
- ev.addr.type = BDADDR_BREDR;
- ev.secure = secure;
- mgmt_event(MGMT_EV_PIN_CODE_REQUEST, hdev, &ev, sizeof(ev), NULL);
- }
- void mgmt_pin_code_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
- u8 status)
- {
- struct mgmt_pending_cmd *cmd;
- cmd = pending_find(MGMT_OP_PIN_CODE_REPLY, hdev);
- if (!cmd)
- return;
- cmd->cmd_complete(cmd, mgmt_status(status));
- mgmt_pending_remove(cmd);
- }
- void mgmt_pin_code_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
- u8 status)
- {
- struct mgmt_pending_cmd *cmd;
- cmd = pending_find(MGMT_OP_PIN_CODE_NEG_REPLY, hdev);
- if (!cmd)
- return;
- cmd->cmd_complete(cmd, mgmt_status(status));
- mgmt_pending_remove(cmd);
- }
- int mgmt_user_confirm_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
- u8 link_type, u8 addr_type, u32 value,
- u8 confirm_hint)
- {
- struct mgmt_ev_user_confirm_request ev;
- BT_DBG("%s", hdev->name);
- bacpy(&ev.addr.bdaddr, bdaddr);
- ev.addr.type = link_to_bdaddr(link_type, addr_type);
- ev.confirm_hint = confirm_hint;
- ev.value = cpu_to_le32(value);
- return mgmt_event(MGMT_EV_USER_CONFIRM_REQUEST, hdev, &ev, sizeof(ev),
- NULL);
- }
- int mgmt_user_passkey_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
- u8 link_type, u8 addr_type)
- {
- struct mgmt_ev_user_passkey_request ev;
- BT_DBG("%s", hdev->name);
- bacpy(&ev.addr.bdaddr, bdaddr);
- ev.addr.type = link_to_bdaddr(link_type, addr_type);
- return mgmt_event(MGMT_EV_USER_PASSKEY_REQUEST, hdev, &ev, sizeof(ev),
- NULL);
- }
- static int user_pairing_resp_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
- u8 link_type, u8 addr_type, u8 status,
- u8 opcode)
- {
- struct mgmt_pending_cmd *cmd;
- cmd = pending_find(opcode, hdev);
- if (!cmd)
- return -ENOENT;
- cmd->cmd_complete(cmd, mgmt_status(status));
- mgmt_pending_remove(cmd);
- return 0;
- }
- int mgmt_user_confirm_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
- u8 link_type, u8 addr_type, u8 status)
- {
- return user_pairing_resp_complete(hdev, bdaddr, link_type, addr_type,
- status, MGMT_OP_USER_CONFIRM_REPLY);
- }
- int mgmt_user_confirm_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
- u8 link_type, u8 addr_type, u8 status)
- {
- return user_pairing_resp_complete(hdev, bdaddr, link_type, addr_type,
- status,
- MGMT_OP_USER_CONFIRM_NEG_REPLY);
- }
- int mgmt_user_passkey_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
- u8 link_type, u8 addr_type, u8 status)
- {
- return user_pairing_resp_complete(hdev, bdaddr, link_type, addr_type,
- status, MGMT_OP_USER_PASSKEY_REPLY);
- }
- int mgmt_user_passkey_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
- u8 link_type, u8 addr_type, u8 status)
- {
- return user_pairing_resp_complete(hdev, bdaddr, link_type, addr_type,
- status,
- MGMT_OP_USER_PASSKEY_NEG_REPLY);
- }
- int mgmt_user_passkey_notify(struct hci_dev *hdev, bdaddr_t *bdaddr,
- u8 link_type, u8 addr_type, u32 passkey,
- u8 entered)
- {
- struct mgmt_ev_passkey_notify ev;
- BT_DBG("%s", hdev->name);
- bacpy(&ev.addr.bdaddr, bdaddr);
- ev.addr.type = link_to_bdaddr(link_type, addr_type);
- ev.passkey = __cpu_to_le32(passkey);
- ev.entered = entered;
- return mgmt_event(MGMT_EV_PASSKEY_NOTIFY, hdev, &ev, sizeof(ev), NULL);
- }
- void mgmt_auth_failed(struct hci_conn *conn, u8 hci_status)
- {
- struct mgmt_ev_auth_failed ev;
- struct mgmt_pending_cmd *cmd;
- u8 status = mgmt_status(hci_status);
- bacpy(&ev.addr.bdaddr, &conn->dst);
- ev.addr.type = link_to_bdaddr(conn->type, conn->dst_type);
- ev.status = status;
- cmd = find_pairing(conn);
- mgmt_event(MGMT_EV_AUTH_FAILED, conn->hdev, &ev, sizeof(ev),
- cmd ? cmd->sk : NULL);
- if (cmd) {
- cmd->cmd_complete(cmd, status);
- mgmt_pending_remove(cmd);
- }
- }
- void mgmt_auth_enable_complete(struct hci_dev *hdev, u8 status)
- {
- struct cmd_lookup match = { NULL, hdev };
- bool changed;
- if (status) {
- u8 mgmt_err = mgmt_status(status);
- mgmt_pending_foreach(MGMT_OP_SET_LINK_SECURITY, hdev,
- cmd_status_rsp, &mgmt_err);
- return;
- }
- if (test_bit(HCI_AUTH, &hdev->flags))
- changed = !hci_dev_test_and_set_flag(hdev, HCI_LINK_SECURITY);
- else
- changed = hci_dev_test_and_clear_flag(hdev, HCI_LINK_SECURITY);
- mgmt_pending_foreach(MGMT_OP_SET_LINK_SECURITY, hdev, settings_rsp,
- &match);
- if (changed)
- new_settings(hdev, match.sk);
- if (match.sk)
- sock_put(match.sk);
- }
- static void clear_eir(struct hci_request *req)
- {
- struct hci_dev *hdev = req->hdev;
- struct hci_cp_write_eir cp;
- if (!lmp_ext_inq_capable(hdev))
- return;
- memset(hdev->eir, 0, sizeof(hdev->eir));
- memset(&cp, 0, sizeof(cp));
- hci_req_add(req, HCI_OP_WRITE_EIR, sizeof(cp), &cp);
- }
- void mgmt_ssp_enable_complete(struct hci_dev *hdev, u8 enable, u8 status)
- {
- struct cmd_lookup match = { NULL, hdev };
- struct hci_request req;
- bool changed = false;
- if (status) {
- u8 mgmt_err = mgmt_status(status);
- if (enable && hci_dev_test_and_clear_flag(hdev,
- HCI_SSP_ENABLED)) {
- hci_dev_clear_flag(hdev, HCI_HS_ENABLED);
- new_settings(hdev, NULL);
- }
- mgmt_pending_foreach(MGMT_OP_SET_SSP, hdev, cmd_status_rsp,
- &mgmt_err);
- return;
- }
- if (enable) {
- changed = !hci_dev_test_and_set_flag(hdev, HCI_SSP_ENABLED);
- } else {
- changed = hci_dev_test_and_clear_flag(hdev, HCI_SSP_ENABLED);
- if (!changed)
- changed = hci_dev_test_and_clear_flag(hdev,
- HCI_HS_ENABLED);
- else
- hci_dev_clear_flag(hdev, HCI_HS_ENABLED);
- }
- mgmt_pending_foreach(MGMT_OP_SET_SSP, hdev, settings_rsp, &match);
- if (changed)
- new_settings(hdev, match.sk);
- if (match.sk)
- sock_put(match.sk);
- hci_req_init(&req, hdev);
- if (hci_dev_test_flag(hdev, HCI_SSP_ENABLED)) {
- if (hci_dev_test_flag(hdev, HCI_USE_DEBUG_KEYS))
- hci_req_add(&req, HCI_OP_WRITE_SSP_DEBUG_MODE,
- sizeof(enable), &enable);
- update_eir(&req);
- } else {
- clear_eir(&req);
- }
- hci_req_run(&req, NULL);
- }
- static void sk_lookup(struct mgmt_pending_cmd *cmd, void *data)
- {
- struct cmd_lookup *match = data;
- if (match->sk == NULL) {
- match->sk = cmd->sk;
- sock_hold(match->sk);
- }
- }
- void mgmt_set_class_of_dev_complete(struct hci_dev *hdev, u8 *dev_class,
- u8 status)
- {
- struct cmd_lookup match = { NULL, hdev, mgmt_status(status) };
- mgmt_pending_foreach(MGMT_OP_SET_DEV_CLASS, hdev, sk_lookup, &match);
- mgmt_pending_foreach(MGMT_OP_ADD_UUID, hdev, sk_lookup, &match);
- mgmt_pending_foreach(MGMT_OP_REMOVE_UUID, hdev, sk_lookup, &match);
- if (!status)
- mgmt_generic_event(MGMT_EV_CLASS_OF_DEV_CHANGED, hdev,
- dev_class, 3, NULL);
- if (match.sk)
- sock_put(match.sk);
- }
- void mgmt_set_local_name_complete(struct hci_dev *hdev, u8 *name, u8 status)
- {
- struct mgmt_cp_set_local_name ev;
- struct mgmt_pending_cmd *cmd;
- if (status)
- return;
- memset(&ev, 0, sizeof(ev));
- memcpy(ev.name, name, HCI_MAX_NAME_LENGTH);
- memcpy(ev.short_name, hdev->short_name, HCI_MAX_SHORT_NAME_LENGTH);
- cmd = pending_find(MGMT_OP_SET_LOCAL_NAME, hdev);
- if (!cmd) {
- memcpy(hdev->dev_name, name, sizeof(hdev->dev_name));
- /* If this is a HCI command related to powering on the
- * HCI dev don't send any mgmt signals.
- */
- if (pending_find(MGMT_OP_SET_POWERED, hdev))
- return;
- }
- mgmt_generic_event(MGMT_EV_LOCAL_NAME_CHANGED, hdev, &ev, sizeof(ev),
- cmd ? cmd->sk : NULL);
- }
- static inline bool has_uuid(u8 *uuid, u16 uuid_count, u8 (*uuids)[16])
- {
- int i;
- for (i = 0; i < uuid_count; i++) {
- if (!memcmp(uuid, uuids[i], 16))
- return true;
- }
- return false;
- }
- static bool eir_has_uuids(u8 *eir, u16 eir_len, u16 uuid_count, u8 (*uuids)[16])
- {
- u16 parsed = 0;
- while (parsed < eir_len) {
- u8 field_len = eir[0];
- u8 uuid[16];
- int i;
- if (field_len == 0)
- break;
- if (eir_len - parsed < field_len + 1)
- break;
- switch (eir[1]) {
- case EIR_UUID16_ALL:
- case EIR_UUID16_SOME:
- for (i = 0; i + 3 <= field_len; i += 2) {
- memcpy(uuid, bluetooth_base_uuid, 16);
- uuid[13] = eir[i + 3];
- uuid[12] = eir[i + 2];
- if (has_uuid(uuid, uuid_count, uuids))
- return true;
- }
- break;
- case EIR_UUID32_ALL:
- case EIR_UUID32_SOME:
- for (i = 0; i + 5 <= field_len; i += 4) {
- memcpy(uuid, bluetooth_base_uuid, 16);
- uuid[15] = eir[i + 5];
- uuid[14] = eir[i + 4];
- uuid[13] = eir[i + 3];
- uuid[12] = eir[i + 2];
- if (has_uuid(uuid, uuid_count, uuids))
- return true;
- }
- break;
- case EIR_UUID128_ALL:
- case EIR_UUID128_SOME:
- for (i = 0; i + 17 <= field_len; i += 16) {
- memcpy(uuid, eir + i + 2, 16);
- if (has_uuid(uuid, uuid_count, uuids))
- return true;
- }
- break;
- }
- parsed += field_len + 1;
- eir += field_len + 1;
- }
- return false;
- }
- static void restart_le_scan(struct hci_dev *hdev)
- {
- /* If controller is not scanning we are done. */
- if (!hci_dev_test_flag(hdev, HCI_LE_SCAN))
- return;
- if (time_after(jiffies + DISCOV_LE_RESTART_DELAY,
- hdev->discovery.scan_start +
- hdev->discovery.scan_duration))
- return;
- queue_delayed_work(hdev->workqueue, &hdev->le_scan_restart,
- DISCOV_LE_RESTART_DELAY);
- }
- static bool is_filter_match(struct hci_dev *hdev, s8 rssi, u8 *eir,
- u16 eir_len, u8 *scan_rsp, u8 scan_rsp_len)
- {
- /* If a RSSI threshold has been specified, and
- * HCI_QUIRK_STRICT_DUPLICATE_FILTER is not set, then all results with
- * a RSSI smaller than the RSSI threshold will be dropped. If the quirk
- * is set, let it through for further processing, as we might need to
- * restart the scan.
- *
- * For BR/EDR devices (pre 1.2) providing no RSSI during inquiry,
- * the results are also dropped.
- */
- if (hdev->discovery.rssi != HCI_RSSI_INVALID &&
- (rssi == HCI_RSSI_INVALID ||
- (rssi < hdev->discovery.rssi &&
- !test_bit(HCI_QUIRK_STRICT_DUPLICATE_FILTER, &hdev->quirks))))
- return false;
- if (hdev->discovery.uuid_count != 0) {
- /* If a list of UUIDs is provided in filter, results with no
- * matching UUID should be dropped.
- */
- if (!eir_has_uuids(eir, eir_len, hdev->discovery.uuid_count,
- hdev->discovery.uuids) &&
- !eir_has_uuids(scan_rsp, scan_rsp_len,
- hdev->discovery.uuid_count,
- hdev->discovery.uuids))
- return false;
- }
- /* If duplicate filtering does not report RSSI changes, then restart
- * scanning to ensure updated result with updated RSSI values.
- */
- if (test_bit(HCI_QUIRK_STRICT_DUPLICATE_FILTER, &hdev->quirks)) {
- restart_le_scan(hdev);
- /* Validate RSSI value against the RSSI threshold once more. */
- if (hdev->discovery.rssi != HCI_RSSI_INVALID &&
- rssi < hdev->discovery.rssi)
- return false;
- }
- return true;
- }
- void mgmt_device_found(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
- u8 addr_type, u8 *dev_class, s8 rssi, u32 flags,
- u8 *eir, u16 eir_len, u8 *scan_rsp, u8 scan_rsp_len)
- {
- char buf[512];
- struct mgmt_ev_device_found *ev = (void *)buf;
- size_t ev_size;
- /* Don't send events for a non-kernel initiated discovery. With
- * LE one exception is if we have pend_le_reports > 0 in which
- * case we're doing passive scanning and want these events.
- */
- if (!hci_discovery_active(hdev)) {
- if (link_type == ACL_LINK)
- return;
- if (link_type == LE_LINK && list_empty(&hdev->pend_le_reports))
- return;
- }
- if (hdev->discovery.result_filtering) {
- /* We are using service discovery */
- if (!is_filter_match(hdev, rssi, eir, eir_len, scan_rsp,
- scan_rsp_len))
- return;
- }
- /* Make sure that the buffer is big enough. The 5 extra bytes
- * are for the potential CoD field.
- */
- if (sizeof(*ev) + eir_len + scan_rsp_len + 5 > sizeof(buf))
- return;
- memset(buf, 0, sizeof(buf));
- /* In case of device discovery with BR/EDR devices (pre 1.2), the
- * RSSI value was reported as 0 when not available. This behavior
- * is kept when using device discovery. This is required for full
- * backwards compatibility with the API.
- *
- * However when using service discovery, the value 127 will be
- * returned when the RSSI is not available.
- */
- if (rssi == HCI_RSSI_INVALID && !hdev->discovery.report_invalid_rssi &&
- link_type == ACL_LINK)
- rssi = 0;
- bacpy(&ev->addr.bdaddr, bdaddr);
- ev->addr.type = link_to_bdaddr(link_type, addr_type);
- ev->rssi = rssi;
- ev->flags = cpu_to_le32(flags);
- if (eir_len > 0)
- /* Copy EIR or advertising data into event */
- memcpy(ev->eir, eir, eir_len);
- if (dev_class && !eir_has_data_type(ev->eir, eir_len, EIR_CLASS_OF_DEV))
- eir_len = eir_append_data(ev->eir, eir_len, EIR_CLASS_OF_DEV,
- dev_class, 3);
- if (scan_rsp_len > 0)
- /* Append scan response data to event */
- memcpy(ev->eir + eir_len, scan_rsp, scan_rsp_len);
- ev->eir_len = cpu_to_le16(eir_len + scan_rsp_len);
- ev_size = sizeof(*ev) + eir_len + scan_rsp_len;
- mgmt_event(MGMT_EV_DEVICE_FOUND, hdev, ev, ev_size, NULL);
- }
- void mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
- u8 addr_type, s8 rssi, u8 *name, u8 name_len)
- {
- struct mgmt_ev_device_found *ev;
- char buf[sizeof(*ev) + HCI_MAX_NAME_LENGTH + 2];
- u16 eir_len;
- ev = (struct mgmt_ev_device_found *) buf;
- memset(buf, 0, sizeof(buf));
- bacpy(&ev->addr.bdaddr, bdaddr);
- ev->addr.type = link_to_bdaddr(link_type, addr_type);
- ev->rssi = rssi;
- eir_len = eir_append_data(ev->eir, 0, EIR_NAME_COMPLETE, name,
- name_len);
- ev->eir_len = cpu_to_le16(eir_len);
- mgmt_event(MGMT_EV_DEVICE_FOUND, hdev, ev, sizeof(*ev) + eir_len, NULL);
- }
- void mgmt_discovering(struct hci_dev *hdev, u8 discovering)
- {
- struct mgmt_ev_discovering ev;
- BT_DBG("%s discovering %u", hdev->name, discovering);
- memset(&ev, 0, sizeof(ev));
- ev.type = hdev->discovery.type;
- ev.discovering = discovering;
- mgmt_event(MGMT_EV_DISCOVERING, hdev, &ev, sizeof(ev), NULL);
- }
- static void adv_enable_complete(struct hci_dev *hdev, u8 status, u16 opcode)
- {
- BT_DBG("%s status %u", hdev->name, status);
- }
- void mgmt_reenable_advertising(struct hci_dev *hdev)
- {
- struct hci_request req;
- u8 instance;
- if (!hci_dev_test_flag(hdev, HCI_ADVERTISING) &&
- !hci_dev_test_flag(hdev, HCI_ADVERTISING_INSTANCE))
- return;
- instance = get_current_adv_instance(hdev);
- hci_req_init(&req, hdev);
- if (instance) {
- schedule_adv_instance(&req, instance, true);
- } else {
- update_adv_data(&req);
- update_scan_rsp_data(&req);
- enable_advertising(&req);
- }
- hci_req_run(&req, adv_enable_complete);
- }
- static struct hci_mgmt_chan chan = {
- .channel = HCI_CHANNEL_CONTROL,
- .handler_count = ARRAY_SIZE(mgmt_handlers),
- .handlers = mgmt_handlers,
- .hdev_init = mgmt_init_hdev,
- };
- int mgmt_init(void)
- {
- return hci_mgmt_chan_register(&chan);
- }
- void mgmt_exit(void)
- {
- hci_mgmt_chan_unregister(&chan);
- }
|