2 BlueZ - Bluetooth protocol stack for Linux
3 Copyright (C) 2000-2001 Qualcomm Incorporated
5 Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License version 2 as
9 published by the Free Software Foundation;
11 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
12 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
13 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
14 IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
15 CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
16 WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
17 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
18 OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
20 ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
21 COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
22 SOFTWARE IS DISCLAIMED.
25 /* Bluetooth HCI sockets. */
27 #include <linux/config.h>
28 #include <linux/module.h>
30 #include <linux/types.h>
31 #include <linux/errno.h>
32 #include <linux/kernel.h>
33 #include <linux/sched.h>
34 #include <linux/slab.h>
35 #include <linux/poll.h>
36 #include <linux/fcntl.h>
37 #include <linux/init.h>
38 #include <linux/skbuff.h>
39 #include <linux/workqueue.h>
40 #include <linux/interrupt.h>
41 #include <linux/socket.h>
42 #include <linux/ioctl.h>
45 #include <asm/system.h>
46 #include <asm/uaccess.h>
47 #include <asm/unaligned.h>
49 #include <net/bluetooth/bluetooth.h>
50 #include <net/bluetooth/hci_core.h>
52 #ifndef CONFIG_BT_HCI_SOCK_DEBUG
57 /* ----- HCI socket interface ----- */
59 static inline int hci_test_bit(int nr, void *addr)
61 return *((__u32 *) addr + (nr >> 5)) & ((__u32) 1 << (nr & 31));
65 static struct hci_sec_filter hci_sec_filter = {
69 { 0x1000d9fe, 0x0000300c },
74 { 0xbe000006, 0x00000001, 0x0000, 0x00 },
76 { 0x00005200, 0x00000000, 0x0000, 0x00 },
78 { 0xaab00200, 0x2b402aaa, 0x0154, 0x00 },
80 { 0x000002be, 0x00000000, 0x0000, 0x00 },
81 /* OGF_STATUS_PARAM */
82 { 0x000000ea, 0x00000000, 0x0000, 0x00 }
86 static struct bt_sock_list hci_sk_list = {
87 .lock = RW_LOCK_UNLOCKED
90 /* Send frame to RAW socket */
91 void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb)
94 struct hlist_node *node;
96 BT_DBG("hdev %p len %d", hdev, skb->len);
98 read_lock(&hci_sk_list.lock);
99 sk_for_each(sk, node, &hci_sk_list.head) {
100 struct hci_filter *flt;
101 struct sk_buff *nskb;
103 if (sk->sk_state != BT_BOUND || hci_pi(sk)->hdev != hdev)
106 /* Don't send frame to the socket it came from */
111 flt = &hci_pi(sk)->filter;
113 if (!test_bit((bt_cb(skb)->pkt_type == HCI_VENDOR_PKT) ?
114 0 : (bt_cb(skb)->pkt_type & HCI_FLT_TYPE_BITS), &flt->type_mask))
117 if (bt_cb(skb)->pkt_type == HCI_EVENT_PKT) {
118 register int evt = (*(__u8 *)skb->data & HCI_FLT_EVENT_BITS);
120 if (!hci_test_bit(evt, &flt->event_mask))
123 if (flt->opcode && ((evt == HCI_EV_CMD_COMPLETE &&
124 flt->opcode != *(__u16 *)(skb->data + 3)) ||
125 (evt == HCI_EV_CMD_STATUS &&
126 flt->opcode != *(__u16 *)(skb->data + 4))))
130 if (!(nskb = skb_clone(skb, GFP_ATOMIC)))
133 /* Put type byte before the data */
134 memcpy(skb_push(nskb, 1), &bt_cb(nskb)->pkt_type, 1);
136 if (sock_queue_rcv_skb(sk, nskb))
139 read_unlock(&hci_sk_list.lock);
142 static int hci_sock_release(struct socket *sock)
144 struct sock *sk = sock->sk;
145 struct hci_dev *hdev = hci_pi(sk)->hdev;
147 BT_DBG("sock %p sk %p", sock, sk);
152 bt_sock_unlink(&hci_sk_list, sk);
155 atomic_dec(&hdev->promisc);
161 skb_queue_purge(&sk->sk_receive_queue);
162 skb_queue_purge(&sk->sk_write_queue);
168 /* Ioctls that require bound socket */
169 static inline int hci_sock_bound_ioctl(struct sock *sk, unsigned int cmd, unsigned long arg)
171 struct hci_dev *hdev = hci_pi(sk)->hdev;
178 if (!capable(CAP_NET_ADMIN))
181 if (test_bit(HCI_QUIRK_RAW_DEVICE, &hdev->quirks))
185 set_bit(HCI_RAW, &hdev->flags);
187 clear_bit(HCI_RAW, &hdev->flags);
192 if (!capable(CAP_NET_ADMIN))
196 set_bit(HCI_SECMGR, &hdev->flags);
198 clear_bit(HCI_SECMGR, &hdev->flags);
203 return hci_get_conn_info(hdev, (void __user *)arg);
207 return hdev->ioctl(hdev, cmd, arg);
212 static int hci_sock_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
214 struct sock *sk = sock->sk;
215 void __user *argp = (void __user *)arg;
218 BT_DBG("cmd %x arg %lx", cmd, arg);
222 return hci_get_dev_list(argp);
225 return hci_get_dev_info(argp);
228 return hci_get_conn_list(argp);
231 if (!capable(CAP_NET_ADMIN))
233 return hci_dev_open(arg);
236 if (!capable(CAP_NET_ADMIN))
238 return hci_dev_close(arg);
241 if (!capable(CAP_NET_ADMIN))
243 return hci_dev_reset(arg);
246 if (!capable(CAP_NET_ADMIN))
248 return hci_dev_reset_stat(arg);
258 if (!capable(CAP_NET_ADMIN))
260 return hci_dev_cmd(cmd, argp);
263 return hci_inquiry(argp);
267 err = hci_sock_bound_ioctl(sk, cmd, arg);
273 static int hci_sock_bind(struct socket *sock, struct sockaddr *addr, int addr_len)
275 struct sockaddr_hci *haddr = (struct sockaddr_hci *) addr;
276 struct sock *sk = sock->sk;
277 struct hci_dev *hdev = NULL;
280 BT_DBG("sock %p sk %p", sock, sk);
282 if (!haddr || haddr->hci_family != AF_BLUETOOTH)
287 if (hci_pi(sk)->hdev) {
292 if (haddr->hci_dev != HCI_DEV_NONE) {
293 if (!(hdev = hci_dev_get(haddr->hci_dev))) {
298 atomic_inc(&hdev->promisc);
301 hci_pi(sk)->hdev = hdev;
302 sk->sk_state = BT_BOUND;
309 static int hci_sock_getname(struct socket *sock, struct sockaddr *addr, int *addr_len, int peer)
311 struct sockaddr_hci *haddr = (struct sockaddr_hci *) addr;
312 struct sock *sk = sock->sk;
314 BT_DBG("sock %p sk %p", sock, sk);
318 *addr_len = sizeof(*haddr);
319 haddr->hci_family = AF_BLUETOOTH;
320 haddr->hci_dev = hci_pi(sk)->hdev->id;
326 static inline void hci_sock_cmsg(struct sock *sk, struct msghdr *msg, struct sk_buff *skb)
328 __u32 mask = hci_pi(sk)->cmsg_mask;
330 if (mask & HCI_CMSG_DIR) {
331 int incoming = bt_cb(skb)->incoming;
332 put_cmsg(msg, SOL_HCI, HCI_CMSG_DIR, sizeof(incoming), &incoming);
335 if (mask & HCI_CMSG_TSTAMP)
336 put_cmsg(msg, SOL_HCI, HCI_CMSG_TSTAMP, sizeof(skb->stamp), &skb->stamp);
339 static int hci_sock_recvmsg(struct kiocb *iocb, struct socket *sock,
340 struct msghdr *msg, size_t len, int flags)
342 int noblock = flags & MSG_DONTWAIT;
343 struct sock *sk = sock->sk;
347 BT_DBG("sock %p, sk %p", sock, sk);
349 if (flags & (MSG_OOB))
352 if (sk->sk_state == BT_CLOSED)
355 if (!(skb = skb_recv_datagram(sk, flags, noblock, &err)))
358 msg->msg_namelen = 0;
362 msg->msg_flags |= MSG_TRUNC;
366 skb->h.raw = skb->data;
367 err = skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied);
369 hci_sock_cmsg(sk, msg, skb);
371 skb_free_datagram(sk, skb);
373 return err ? : copied;
376 static int hci_sock_sendmsg(struct kiocb *iocb, struct socket *sock,
377 struct msghdr *msg, size_t len)
379 struct sock *sk = sock->sk;
380 struct hci_dev *hdev;
384 BT_DBG("sock %p sk %p", sock, sk);
386 if (msg->msg_flags & MSG_OOB)
389 if (msg->msg_flags & ~(MSG_DONTWAIT|MSG_NOSIGNAL|MSG_ERRQUEUE))
392 if (len < 4 || len > HCI_MAX_FRAME_SIZE)
397 if (!(hdev = hci_pi(sk)->hdev)) {
402 if (!(skb = bt_skb_send_alloc(sk, len, msg->msg_flags & MSG_DONTWAIT, &err)))
405 if (memcpy_fromiovec(skb_put(skb, len), msg->msg_iov, len)) {
410 bt_cb(skb)->pkt_type = *((unsigned char *) skb->data);
412 skb->dev = (void *) hdev;
414 if (bt_cb(skb)->pkt_type == HCI_COMMAND_PKT) {
415 u16 opcode = __le16_to_cpu(get_unaligned((u16 *)skb->data));
416 u16 ogf = hci_opcode_ogf(opcode);
417 u16 ocf = hci_opcode_ocf(opcode);
419 if (((ogf > HCI_SFLT_MAX_OGF) ||
420 !hci_test_bit(ocf & HCI_FLT_OCF_BITS, &hci_sec_filter.ocf_mask[ogf])) &&
421 !capable(CAP_NET_RAW)) {
426 if (test_bit(HCI_RAW, &hdev->flags) || (ogf == OGF_VENDOR_CMD)) {
427 skb_queue_tail(&hdev->raw_q, skb);
430 skb_queue_tail(&hdev->cmd_q, skb);
434 if (!capable(CAP_NET_RAW)) {
439 skb_queue_tail(&hdev->raw_q, skb);
454 static int hci_sock_setsockopt(struct socket *sock, int level, int optname, char __user *optval, int len)
456 struct hci_ufilter uf = { .opcode = 0 };
457 struct sock *sk = sock->sk;
458 int err = 0, opt = 0;
460 BT_DBG("sk %p, opt %d", sk, optname);
466 if (get_user(opt, (int __user *)optval)) {
472 hci_pi(sk)->cmsg_mask |= HCI_CMSG_DIR;
474 hci_pi(sk)->cmsg_mask &= ~HCI_CMSG_DIR;
478 if (get_user(opt, (int __user *)optval)) {
484 hci_pi(sk)->cmsg_mask |= HCI_CMSG_TSTAMP;
486 hci_pi(sk)->cmsg_mask &= ~HCI_CMSG_TSTAMP;
490 len = min_t(unsigned int, len, sizeof(uf));
491 if (copy_from_user(&uf, optval, len)) {
496 if (!capable(CAP_NET_RAW)) {
497 uf.type_mask &= hci_sec_filter.type_mask;
498 uf.event_mask[0] &= *((u32 *) hci_sec_filter.event_mask + 0);
499 uf.event_mask[1] &= *((u32 *) hci_sec_filter.event_mask + 1);
503 struct hci_filter *f = &hci_pi(sk)->filter;
505 f->type_mask = uf.type_mask;
506 f->opcode = uf.opcode;
507 *((u32 *) f->event_mask + 0) = uf.event_mask[0];
508 *((u32 *) f->event_mask + 1) = uf.event_mask[1];
521 static int hci_sock_getsockopt(struct socket *sock, int level, int optname, char __user *optval, int __user *optlen)
523 struct hci_ufilter uf;
524 struct sock *sk = sock->sk;
527 if (get_user(len, optlen))
532 if (hci_pi(sk)->cmsg_mask & HCI_CMSG_DIR)
537 if (put_user(opt, optval))
542 if (hci_pi(sk)->cmsg_mask & HCI_CMSG_TSTAMP)
547 if (put_user(opt, optval))
553 struct hci_filter *f = &hci_pi(sk)->filter;
555 uf.type_mask = f->type_mask;
556 uf.opcode = f->opcode;
557 uf.event_mask[0] = *((u32 *) f->event_mask + 0);
558 uf.event_mask[1] = *((u32 *) f->event_mask + 1);
561 len = min_t(unsigned int, len, sizeof(uf));
562 if (copy_to_user(optval, &uf, len))
574 static struct proto_ops hci_sock_ops = {
575 .family = PF_BLUETOOTH,
576 .owner = THIS_MODULE,
577 .release = hci_sock_release,
578 .bind = hci_sock_bind,
579 .getname = hci_sock_getname,
580 .sendmsg = hci_sock_sendmsg,
581 .recvmsg = hci_sock_recvmsg,
582 .ioctl = hci_sock_ioctl,
583 .poll = datagram_poll,
584 .listen = sock_no_listen,
585 .shutdown = sock_no_shutdown,
586 .setsockopt = hci_sock_setsockopt,
587 .getsockopt = hci_sock_getsockopt,
588 .connect = sock_no_connect,
589 .socketpair = sock_no_socketpair,
590 .accept = sock_no_accept,
594 static struct proto hci_sk_proto = {
596 .owner = THIS_MODULE,
597 .obj_size = sizeof(struct hci_pinfo)
600 static int hci_sock_create(struct socket *sock, int protocol)
604 BT_DBG("sock %p", sock);
606 if (sock->type != SOCK_RAW)
607 return -ESOCKTNOSUPPORT;
609 sock->ops = &hci_sock_ops;
611 sk = sk_alloc(PF_BLUETOOTH, GFP_KERNEL, &hci_sk_proto, 1);
615 sock_init_data(sock, sk);
617 sock_reset_flag(sk, SOCK_ZAPPED);
619 sk->sk_protocol = protocol;
621 sock->state = SS_UNCONNECTED;
622 sk->sk_state = BT_OPEN;
624 bt_sock_link(&hci_sk_list, sk);
628 static int hci_sock_dev_event(struct notifier_block *this, unsigned long event, void *ptr)
630 struct hci_dev *hdev = (struct hci_dev *) ptr;
631 struct hci_ev_si_device ev;
633 BT_DBG("hdev %s event %ld", hdev->name, event);
635 /* Send event to sockets */
637 ev.dev_id = hdev->id;
638 hci_si_event(NULL, HCI_EV_SI_DEVICE, sizeof(ev), &ev);
640 if (event == HCI_DEV_UNREG) {
642 struct hlist_node *node;
644 /* Detach sockets from device */
645 read_lock(&hci_sk_list.lock);
646 sk_for_each(sk, node, &hci_sk_list.head) {
648 if (hci_pi(sk)->hdev == hdev) {
649 hci_pi(sk)->hdev = NULL;
651 sk->sk_state = BT_OPEN;
652 sk->sk_state_change(sk);
658 read_unlock(&hci_sk_list.lock);
664 static struct net_proto_family hci_sock_family_ops = {
665 .family = PF_BLUETOOTH,
666 .owner = THIS_MODULE,
667 .create = hci_sock_create,
670 static struct notifier_block hci_sock_nblock = {
671 .notifier_call = hci_sock_dev_event
674 int __init hci_sock_init(void)
678 err = proto_register(&hci_sk_proto, 0);
682 err = bt_sock_register(BTPROTO_HCI, &hci_sock_family_ops);
686 hci_register_notifier(&hci_sock_nblock);
688 BT_INFO("HCI socket layer initialized");
693 BT_ERR("HCI socket registration failed");
694 proto_unregister(&hci_sk_proto);
698 int __exit hci_sock_cleanup(void)
700 if (bt_sock_unregister(BTPROTO_HCI) < 0)
701 BT_ERR("HCI socket unregistration failed");
703 hci_unregister_notifier(&hci_sock_nblock);
705 proto_unregister(&hci_sk_proto);