2 BlueZ - Bluetooth protocol stack for Linux
3 Copyright (C) 2000-2001 Qualcomm Incorporated
5 Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License version 2 as
9 published by the Free Software Foundation;
11 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
12 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
13 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
14 IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
15 CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
16 WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
17 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
18 OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
20 ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
21 COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
22 SOFTWARE IS DISCLAIMED.
25 /* Bluetooth HCI sockets. */
27 #include <linux/config.h>
28 #include <linux/module.h>
30 #include <linux/types.h>
31 #include <linux/errno.h>
32 #include <linux/kernel.h>
33 #include <linux/sched.h>
34 #include <linux/slab.h>
35 #include <linux/poll.h>
36 #include <linux/fcntl.h>
37 #include <linux/init.h>
38 #include <linux/skbuff.h>
39 #include <linux/workqueue.h>
40 #include <linux/interrupt.h>
41 #include <linux/socket.h>
42 #include <linux/ioctl.h>
45 #include <asm/system.h>
46 #include <asm/uaccess.h>
47 #include <asm/unaligned.h>
49 #include <net/bluetooth/bluetooth.h>
50 #include <net/bluetooth/hci_core.h>
52 #ifndef CONFIG_BT_HCI_SOCK_DEBUG
57 /* ----- HCI socket interface ----- */
59 static inline int hci_test_bit(int nr, void *addr)
61 return *((__u32 *) addr + (nr >> 5)) & ((__u32) 1 << (nr & 31));
65 static struct hci_sec_filter hci_sec_filter = {
69 { 0x1000d9fe, 0x0000300c },
74 { 0xbe000006, 0x00000001, 0x0000, 0x00 },
76 { 0x00005200, 0x00000000, 0x0000, 0x00 },
78 { 0xaab00200, 0x2b402aaa, 0x0154, 0x00 },
80 { 0x000002be, 0x00000000, 0x0000, 0x00 },
81 /* OGF_STATUS_PARAM */
82 { 0x000000ea, 0x00000000, 0x0000, 0x00 }
86 static struct bt_sock_list hci_sk_list = {
87 .lock = RW_LOCK_UNLOCKED
90 /* Send frame to RAW socket */
91 void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb)
94 struct hlist_node *node;
96 BT_DBG("hdev %p len %d", hdev, skb->len);
98 read_lock(&hci_sk_list.lock);
99 sk_for_each(sk, node, &hci_sk_list.head) {
100 struct hci_filter *flt;
101 struct sk_buff *nskb;
103 if (sk->sk_state != BT_BOUND || hci_pi(sk)->hdev != hdev)
106 /* Don't send frame to the socket it came from */
111 flt = &hci_pi(sk)->filter;
113 if (!test_bit((skb->pkt_type == HCI_VENDOR_PKT) ?
114 0 : (skb->pkt_type & HCI_FLT_TYPE_BITS), &flt->type_mask))
117 if (skb->pkt_type == HCI_EVENT_PKT) {
118 register int evt = (*(__u8 *)skb->data & HCI_FLT_EVENT_BITS);
120 if (!hci_test_bit(evt, &flt->event_mask))
123 if (flt->opcode && ((evt == HCI_EV_CMD_COMPLETE &&
124 flt->opcode != *(__u16 *)(skb->data + 3)) ||
125 (evt == HCI_EV_CMD_STATUS &&
126 flt->opcode != *(__u16 *)(skb->data + 4))))
130 if (!(nskb = skb_clone(skb, GFP_ATOMIC)))
133 /* Put type byte before the data */
134 memcpy(skb_push(nskb, 1), &nskb->pkt_type, 1);
136 if (sock_queue_rcv_skb(sk, nskb))
139 read_unlock(&hci_sk_list.lock);
142 static int hci_sock_release(struct socket *sock)
144 struct sock *sk = sock->sk;
145 struct hci_dev *hdev = hci_pi(sk)->hdev;
147 BT_DBG("sock %p sk %p", sock, sk);
152 bt_sock_unlink(&hci_sk_list, sk);
155 atomic_dec(&hdev->promisc);
161 skb_queue_purge(&sk->sk_receive_queue);
162 skb_queue_purge(&sk->sk_write_queue);
168 /* Ioctls that require bound socket */
169 static inline int hci_sock_bound_ioctl(struct sock *sk, unsigned int cmd, unsigned long arg)
171 struct hci_dev *hdev = hci_pi(sk)->hdev;
178 if (!capable(CAP_NET_ADMIN))
181 if (test_bit(HCI_QUIRK_RAW_DEVICE, &hdev->quirks))
185 set_bit(HCI_RAW, &hdev->flags);
187 clear_bit(HCI_RAW, &hdev->flags);
192 if (!capable(CAP_NET_ADMIN))
196 set_bit(HCI_SECMGR, &hdev->flags);
198 clear_bit(HCI_SECMGR, &hdev->flags);
203 return hci_get_conn_info(hdev, (void __user *)arg);
207 return hdev->ioctl(hdev, cmd, arg);
212 static int hci_sock_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
214 struct sock *sk = sock->sk;
215 void __user *argp = (void __user *)arg;
218 BT_DBG("cmd %x arg %lx", cmd, arg);
222 return hci_get_dev_list(argp);
225 return hci_get_dev_info(argp);
228 return hci_get_conn_list(argp);
231 if (!capable(CAP_NET_ADMIN))
233 return hci_dev_open(arg);
236 if (!capable(CAP_NET_ADMIN))
238 return hci_dev_close(arg);
241 if (!capable(CAP_NET_ADMIN))
243 return hci_dev_reset(arg);
246 if (!capable(CAP_NET_ADMIN))
248 return hci_dev_reset_stat(arg);
258 if (!capable(CAP_NET_ADMIN))
260 return hci_dev_cmd(cmd, argp);
263 return hci_inquiry(argp);
267 err = hci_sock_bound_ioctl(sk, cmd, arg);
273 static int hci_sock_bind(struct socket *sock, struct sockaddr *addr, int addr_len)
275 struct sockaddr_hci *haddr = (struct sockaddr_hci *) addr;
276 struct sock *sk = sock->sk;
277 struct hci_dev *hdev = NULL;
280 BT_DBG("sock %p sk %p", sock, sk);
282 if (!haddr || haddr->hci_family != AF_BLUETOOTH)
287 if (hci_pi(sk)->hdev) {
292 if (haddr->hci_dev != HCI_DEV_NONE) {
293 if (!(hdev = hci_dev_get(haddr->hci_dev))) {
298 atomic_inc(&hdev->promisc);
301 hci_pi(sk)->hdev = hdev;
302 sk->sk_state = BT_BOUND;
309 static int hci_sock_getname(struct socket *sock, struct sockaddr *addr, int *addr_len, int peer)
311 struct sockaddr_hci *haddr = (struct sockaddr_hci *) addr;
312 struct sock *sk = sock->sk;
314 BT_DBG("sock %p sk %p", sock, sk);
318 *addr_len = sizeof(*haddr);
319 haddr->hci_family = AF_BLUETOOTH;
320 haddr->hci_dev = hci_pi(sk)->hdev->id;
326 static inline void hci_sock_cmsg(struct sock *sk, struct msghdr *msg, struct sk_buff *skb)
328 __u32 mask = hci_pi(sk)->cmsg_mask;
330 if (mask & HCI_CMSG_DIR)
331 put_cmsg(msg, SOL_HCI, HCI_CMSG_DIR, sizeof(int), &bt_cb(skb)->incoming);
333 if (mask & HCI_CMSG_TSTAMP)
334 put_cmsg(msg, SOL_HCI, HCI_CMSG_TSTAMP, sizeof(skb->stamp), &skb->stamp);
337 static int hci_sock_recvmsg(struct kiocb *iocb, struct socket *sock,
338 struct msghdr *msg, size_t len, int flags)
340 int noblock = flags & MSG_DONTWAIT;
341 struct sock *sk = sock->sk;
345 BT_DBG("sock %p, sk %p", sock, sk);
347 if (flags & (MSG_OOB))
350 if (sk->sk_state == BT_CLOSED)
353 if (!(skb = skb_recv_datagram(sk, flags, noblock, &err)))
356 msg->msg_namelen = 0;
360 msg->msg_flags |= MSG_TRUNC;
364 skb->h.raw = skb->data;
365 err = skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied);
367 hci_sock_cmsg(sk, msg, skb);
369 skb_free_datagram(sk, skb);
371 return err ? : copied;
374 static int hci_sock_sendmsg(struct kiocb *iocb, struct socket *sock,
375 struct msghdr *msg, size_t len)
377 struct sock *sk = sock->sk;
378 struct hci_dev *hdev;
382 BT_DBG("sock %p sk %p", sock, sk);
384 if (msg->msg_flags & MSG_OOB)
387 if (msg->msg_flags & ~(MSG_DONTWAIT|MSG_NOSIGNAL|MSG_ERRQUEUE))
390 if (len < 4 || len > HCI_MAX_FRAME_SIZE)
395 if (!(hdev = hci_pi(sk)->hdev)) {
400 if (!(skb = bt_skb_send_alloc(sk, len, msg->msg_flags & MSG_DONTWAIT, &err)))
403 if (memcpy_fromiovec(skb_put(skb, len), msg->msg_iov, len)) {
408 skb->pkt_type = *((unsigned char *) skb->data);
410 skb->dev = (void *) hdev;
412 if (skb->pkt_type == HCI_COMMAND_PKT) {
413 u16 opcode = __le16_to_cpu(get_unaligned((u16 *)skb->data));
414 u16 ogf = hci_opcode_ogf(opcode);
415 u16 ocf = hci_opcode_ocf(opcode);
417 if (((ogf > HCI_SFLT_MAX_OGF) ||
418 !hci_test_bit(ocf & HCI_FLT_OCF_BITS, &hci_sec_filter.ocf_mask[ogf])) &&
419 !capable(CAP_NET_RAW)) {
424 if (test_bit(HCI_RAW, &hdev->flags) || (ogf == OGF_VENDOR_CMD)) {
425 skb_queue_tail(&hdev->raw_q, skb);
428 skb_queue_tail(&hdev->cmd_q, skb);
432 if (!capable(CAP_NET_RAW)) {
437 skb_queue_tail(&hdev->raw_q, skb);
452 static int hci_sock_setsockopt(struct socket *sock, int level, int optname, char __user *optval, int len)
454 struct hci_ufilter uf = { .opcode = 0 };
455 struct sock *sk = sock->sk;
456 int err = 0, opt = 0;
458 BT_DBG("sk %p, opt %d", sk, optname);
464 if (get_user(opt, (int __user *)optval)) {
470 hci_pi(sk)->cmsg_mask |= HCI_CMSG_DIR;
472 hci_pi(sk)->cmsg_mask &= ~HCI_CMSG_DIR;
476 if (get_user(opt, (int __user *)optval)) {
482 hci_pi(sk)->cmsg_mask |= HCI_CMSG_TSTAMP;
484 hci_pi(sk)->cmsg_mask &= ~HCI_CMSG_TSTAMP;
488 len = min_t(unsigned int, len, sizeof(uf));
489 if (copy_from_user(&uf, optval, len)) {
494 if (!capable(CAP_NET_RAW)) {
495 uf.type_mask &= hci_sec_filter.type_mask;
496 uf.event_mask[0] &= *((u32 *) hci_sec_filter.event_mask + 0);
497 uf.event_mask[1] &= *((u32 *) hci_sec_filter.event_mask + 1);
501 struct hci_filter *f = &hci_pi(sk)->filter;
503 f->type_mask = uf.type_mask;
504 f->opcode = uf.opcode;
505 *((u32 *) f->event_mask + 0) = uf.event_mask[0];
506 *((u32 *) f->event_mask + 1) = uf.event_mask[1];
519 static int hci_sock_getsockopt(struct socket *sock, int level, int optname, char __user *optval, int __user *optlen)
521 struct hci_ufilter uf;
522 struct sock *sk = sock->sk;
525 if (get_user(len, optlen))
530 if (hci_pi(sk)->cmsg_mask & HCI_CMSG_DIR)
535 if (put_user(opt, optval))
540 if (hci_pi(sk)->cmsg_mask & HCI_CMSG_TSTAMP)
545 if (put_user(opt, optval))
551 struct hci_filter *f = &hci_pi(sk)->filter;
553 uf.type_mask = f->type_mask;
554 uf.opcode = f->opcode;
555 uf.event_mask[0] = *((u32 *) f->event_mask + 0);
556 uf.event_mask[1] = *((u32 *) f->event_mask + 1);
559 len = min_t(unsigned int, len, sizeof(uf));
560 if (copy_to_user(optval, &uf, len))
572 static struct proto_ops hci_sock_ops = {
573 .family = PF_BLUETOOTH,
574 .owner = THIS_MODULE,
575 .release = hci_sock_release,
576 .bind = hci_sock_bind,
577 .getname = hci_sock_getname,
578 .sendmsg = hci_sock_sendmsg,
579 .recvmsg = hci_sock_recvmsg,
580 .ioctl = hci_sock_ioctl,
581 .poll = datagram_poll,
582 .listen = sock_no_listen,
583 .shutdown = sock_no_shutdown,
584 .setsockopt = hci_sock_setsockopt,
585 .getsockopt = hci_sock_getsockopt,
586 .connect = sock_no_connect,
587 .socketpair = sock_no_socketpair,
588 .accept = sock_no_accept,
592 static struct proto hci_sk_proto = {
594 .owner = THIS_MODULE,
595 .obj_size = sizeof(struct hci_pinfo)
598 static int hci_sock_create(struct socket *sock, int protocol)
602 BT_DBG("sock %p", sock);
604 if (sock->type != SOCK_RAW)
605 return -ESOCKTNOSUPPORT;
607 sock->ops = &hci_sock_ops;
609 sk = sk_alloc(PF_BLUETOOTH, GFP_KERNEL, &hci_sk_proto, 1);
613 sock_init_data(sock, sk);
615 sock_reset_flag(sk, SOCK_ZAPPED);
617 sk->sk_protocol = protocol;
619 sock->state = SS_UNCONNECTED;
620 sk->sk_state = BT_OPEN;
622 bt_sock_link(&hci_sk_list, sk);
626 static int hci_sock_dev_event(struct notifier_block *this, unsigned long event, void *ptr)
628 struct hci_dev *hdev = (struct hci_dev *) ptr;
629 struct hci_ev_si_device ev;
631 BT_DBG("hdev %s event %ld", hdev->name, event);
633 /* Send event to sockets */
635 ev.dev_id = hdev->id;
636 hci_si_event(NULL, HCI_EV_SI_DEVICE, sizeof(ev), &ev);
638 if (event == HCI_DEV_UNREG) {
640 struct hlist_node *node;
642 /* Detach sockets from device */
643 read_lock(&hci_sk_list.lock);
644 sk_for_each(sk, node, &hci_sk_list.head) {
646 if (hci_pi(sk)->hdev == hdev) {
647 hci_pi(sk)->hdev = NULL;
649 sk->sk_state = BT_OPEN;
650 sk->sk_state_change(sk);
656 read_unlock(&hci_sk_list.lock);
662 static struct net_proto_family hci_sock_family_ops = {
663 .family = PF_BLUETOOTH,
664 .owner = THIS_MODULE,
665 .create = hci_sock_create,
668 static struct notifier_block hci_sock_nblock = {
669 .notifier_call = hci_sock_dev_event
672 int __init hci_sock_init(void)
676 err = proto_register(&hci_sk_proto, 0);
680 err = bt_sock_register(BTPROTO_HCI, &hci_sock_family_ops);
684 hci_register_notifier(&hci_sock_nblock);
686 BT_INFO("HCI socket layer initialized");
691 BT_ERR("HCI socket registration failed");
692 proto_unregister(&hci_sk_proto);
696 int __exit hci_sock_cleanup(void)
698 if (bt_sock_unregister(BTPROTO_HCI) < 0)
699 BT_ERR("HCI socket unregistration failed");
701 hci_unregister_notifier(&hci_sock_nblock);
703 proto_unregister(&hci_sk_proto);