2 BlueZ - Bluetooth protocol stack for Linux
3 Copyright (C) 2000-2001 Qualcomm Incorporated
5 Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License version 2 as
9 published by the Free Software Foundation;
11 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
12 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
13 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
14 IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
15 CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
16 WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
17 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
18 OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
20 ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
21 COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
22 SOFTWARE IS DISCLAIMED.
25 /* Bluetooth HCI sockets. */
27 #include <linux/config.h>
28 #include <linux/module.h>
30 #include <linux/types.h>
31 #include <linux/errno.h>
32 #include <linux/kernel.h>
33 #include <linux/sched.h>
34 #include <linux/slab.h>
35 #include <linux/poll.h>
36 #include <linux/fcntl.h>
37 #include <linux/init.h>
38 #include <linux/skbuff.h>
39 #include <linux/workqueue.h>
40 #include <linux/interrupt.h>
41 #include <linux/socket.h>
42 #include <linux/ioctl.h>
45 #include <asm/system.h>
46 #include <asm/uaccess.h>
47 #include <asm/unaligned.h>
49 #include <net/bluetooth/bluetooth.h>
50 #include <net/bluetooth/hci_core.h>
52 #ifndef CONFIG_BT_HCI_SOCK_DEBUG
57 /* ----- HCI socket interface ----- */
59 static inline int hci_test_bit(int nr, void *addr)
61 return *((__u32 *) addr + (nr >> 5)) & ((__u32) 1 << (nr & 31));
65 static struct hci_sec_filter hci_sec_filter = {
69 { 0x1000d9fe, 0x0000b00c },
74 { 0xbe000006, 0x00000001, 0x000000, 0x00 },
76 { 0x00005200, 0x00000000, 0x000000, 0x00 },
78 { 0xaab00200, 0x2b402aaa, 0x020154, 0x00 },
80 { 0x000002be, 0x00000000, 0x000000, 0x00 },
81 /* OGF_STATUS_PARAM */
82 { 0x000000ea, 0x00000000, 0x000000, 0x00 }
86 static struct bt_sock_list hci_sk_list = {
87 .lock = RW_LOCK_UNLOCKED
90 /* Send frame to RAW socket */
91 void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb)
94 struct hlist_node *node;
96 BT_DBG("hdev %p len %d", hdev, skb->len);
98 read_lock(&hci_sk_list.lock);
99 sk_for_each(sk, node, &hci_sk_list.head) {
100 struct hci_filter *flt;
101 struct sk_buff *nskb;
103 if (sk->sk_state != BT_BOUND || hci_pi(sk)->hdev != hdev)
106 /* Don't send frame to the socket it came from */
111 flt = &hci_pi(sk)->filter;
113 if (!test_bit((bt_cb(skb)->pkt_type == HCI_VENDOR_PKT) ?
114 0 : (bt_cb(skb)->pkt_type & HCI_FLT_TYPE_BITS), &flt->type_mask))
117 if (bt_cb(skb)->pkt_type == HCI_EVENT_PKT) {
118 register int evt = (*(__u8 *)skb->data & HCI_FLT_EVENT_BITS);
120 if (!hci_test_bit(evt, &flt->event_mask))
123 if (flt->opcode && ((evt == HCI_EV_CMD_COMPLETE &&
124 flt->opcode != *(__u16 *)(skb->data + 3)) ||
125 (evt == HCI_EV_CMD_STATUS &&
126 flt->opcode != *(__u16 *)(skb->data + 4))))
130 if (!(nskb = skb_clone(skb, GFP_ATOMIC)))
133 /* Put type byte before the data */
134 memcpy(skb_push(nskb, 1), &bt_cb(nskb)->pkt_type, 1);
136 if (sock_queue_rcv_skb(sk, nskb))
139 read_unlock(&hci_sk_list.lock);
142 static int hci_sock_release(struct socket *sock)
144 struct sock *sk = sock->sk;
145 struct hci_dev *hdev = hci_pi(sk)->hdev;
147 BT_DBG("sock %p sk %p", sock, sk);
152 bt_sock_unlink(&hci_sk_list, sk);
155 atomic_dec(&hdev->promisc);
161 skb_queue_purge(&sk->sk_receive_queue);
162 skb_queue_purge(&sk->sk_write_queue);
168 /* Ioctls that require bound socket */
169 static inline int hci_sock_bound_ioctl(struct sock *sk, unsigned int cmd, unsigned long arg)
171 struct hci_dev *hdev = hci_pi(sk)->hdev;
178 if (!capable(CAP_NET_ADMIN))
181 if (test_bit(HCI_QUIRK_RAW_DEVICE, &hdev->quirks))
185 set_bit(HCI_RAW, &hdev->flags);
187 clear_bit(HCI_RAW, &hdev->flags);
192 if (!capable(CAP_NET_ADMIN))
196 set_bit(HCI_SECMGR, &hdev->flags);
198 clear_bit(HCI_SECMGR, &hdev->flags);
203 return hci_get_conn_info(hdev, (void __user *)arg);
207 return hdev->ioctl(hdev, cmd, arg);
212 static int hci_sock_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
214 struct sock *sk = sock->sk;
215 void __user *argp = (void __user *)arg;
218 BT_DBG("cmd %x arg %lx", cmd, arg);
222 return hci_get_dev_list(argp);
225 return hci_get_dev_info(argp);
228 return hci_get_conn_list(argp);
231 if (!capable(CAP_NET_ADMIN))
233 return hci_dev_open(arg);
236 if (!capable(CAP_NET_ADMIN))
238 return hci_dev_close(arg);
241 if (!capable(CAP_NET_ADMIN))
243 return hci_dev_reset(arg);
246 if (!capable(CAP_NET_ADMIN))
248 return hci_dev_reset_stat(arg);
258 if (!capable(CAP_NET_ADMIN))
260 return hci_dev_cmd(cmd, argp);
263 return hci_inquiry(argp);
267 err = hci_sock_bound_ioctl(sk, cmd, arg);
273 static int hci_sock_bind(struct socket *sock, struct sockaddr *addr, int addr_len)
275 struct sockaddr_hci *haddr = (struct sockaddr_hci *) addr;
276 struct sock *sk = sock->sk;
277 struct hci_dev *hdev = NULL;
280 BT_DBG("sock %p sk %p", sock, sk);
282 if (!haddr || haddr->hci_family != AF_BLUETOOTH)
287 if (hci_pi(sk)->hdev) {
292 if (haddr->hci_dev != HCI_DEV_NONE) {
293 if (!(hdev = hci_dev_get(haddr->hci_dev))) {
298 atomic_inc(&hdev->promisc);
301 hci_pi(sk)->hdev = hdev;
302 sk->sk_state = BT_BOUND;
309 static int hci_sock_getname(struct socket *sock, struct sockaddr *addr, int *addr_len, int peer)
311 struct sockaddr_hci *haddr = (struct sockaddr_hci *) addr;
312 struct sock *sk = sock->sk;
314 BT_DBG("sock %p sk %p", sock, sk);
318 *addr_len = sizeof(*haddr);
319 haddr->hci_family = AF_BLUETOOTH;
320 haddr->hci_dev = hci_pi(sk)->hdev->id;
326 static inline void hci_sock_cmsg(struct sock *sk, struct msghdr *msg, struct sk_buff *skb)
328 __u32 mask = hci_pi(sk)->cmsg_mask;
330 if (mask & HCI_CMSG_DIR) {
331 int incoming = bt_cb(skb)->incoming;
332 put_cmsg(msg, SOL_HCI, HCI_CMSG_DIR, sizeof(incoming), &incoming);
335 if (mask & HCI_CMSG_TSTAMP) {
338 skb_get_timestamp(skb, &tv);
339 put_cmsg(msg, SOL_HCI, HCI_CMSG_TSTAMP, sizeof(tv), &tv);
343 static int hci_sock_recvmsg(struct kiocb *iocb, struct socket *sock,
344 struct msghdr *msg, size_t len, int flags)
346 int noblock = flags & MSG_DONTWAIT;
347 struct sock *sk = sock->sk;
351 BT_DBG("sock %p, sk %p", sock, sk);
353 if (flags & (MSG_OOB))
356 if (sk->sk_state == BT_CLOSED)
359 if (!(skb = skb_recv_datagram(sk, flags, noblock, &err)))
362 msg->msg_namelen = 0;
366 msg->msg_flags |= MSG_TRUNC;
370 skb->h.raw = skb->data;
371 err = skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied);
373 hci_sock_cmsg(sk, msg, skb);
375 skb_free_datagram(sk, skb);
377 return err ? : copied;
380 static int hci_sock_sendmsg(struct kiocb *iocb, struct socket *sock,
381 struct msghdr *msg, size_t len)
383 struct sock *sk = sock->sk;
384 struct hci_dev *hdev;
388 BT_DBG("sock %p sk %p", sock, sk);
390 if (msg->msg_flags & MSG_OOB)
393 if (msg->msg_flags & ~(MSG_DONTWAIT|MSG_NOSIGNAL|MSG_ERRQUEUE))
396 if (len < 4 || len > HCI_MAX_FRAME_SIZE)
401 if (!(hdev = hci_pi(sk)->hdev)) {
406 if (!(skb = bt_skb_send_alloc(sk, len, msg->msg_flags & MSG_DONTWAIT, &err)))
409 if (memcpy_fromiovec(skb_put(skb, len), msg->msg_iov, len)) {
414 bt_cb(skb)->pkt_type = *((unsigned char *) skb->data);
416 skb->dev = (void *) hdev;
418 if (bt_cb(skb)->pkt_type == HCI_COMMAND_PKT) {
419 u16 opcode = __le16_to_cpu(get_unaligned((__le16 *) skb->data));
420 u16 ogf = hci_opcode_ogf(opcode);
421 u16 ocf = hci_opcode_ocf(opcode);
423 if (((ogf > HCI_SFLT_MAX_OGF) ||
424 !hci_test_bit(ocf & HCI_FLT_OCF_BITS, &hci_sec_filter.ocf_mask[ogf])) &&
425 !capable(CAP_NET_RAW)) {
430 if (test_bit(HCI_RAW, &hdev->flags) || (ogf == OGF_VENDOR_CMD)) {
431 skb_queue_tail(&hdev->raw_q, skb);
434 skb_queue_tail(&hdev->cmd_q, skb);
438 if (!capable(CAP_NET_RAW)) {
443 skb_queue_tail(&hdev->raw_q, skb);
458 static int hci_sock_setsockopt(struct socket *sock, int level, int optname, char __user *optval, int len)
460 struct hci_ufilter uf = { .opcode = 0 };
461 struct sock *sk = sock->sk;
462 int err = 0, opt = 0;
464 BT_DBG("sk %p, opt %d", sk, optname);
470 if (get_user(opt, (int __user *)optval)) {
476 hci_pi(sk)->cmsg_mask |= HCI_CMSG_DIR;
478 hci_pi(sk)->cmsg_mask &= ~HCI_CMSG_DIR;
482 if (get_user(opt, (int __user *)optval)) {
488 hci_pi(sk)->cmsg_mask |= HCI_CMSG_TSTAMP;
490 hci_pi(sk)->cmsg_mask &= ~HCI_CMSG_TSTAMP;
494 len = min_t(unsigned int, len, sizeof(uf));
495 if (copy_from_user(&uf, optval, len)) {
500 if (!capable(CAP_NET_RAW)) {
501 uf.type_mask &= hci_sec_filter.type_mask;
502 uf.event_mask[0] &= *((u32 *) hci_sec_filter.event_mask + 0);
503 uf.event_mask[1] &= *((u32 *) hci_sec_filter.event_mask + 1);
507 struct hci_filter *f = &hci_pi(sk)->filter;
509 f->type_mask = uf.type_mask;
510 f->opcode = uf.opcode;
511 *((u32 *) f->event_mask + 0) = uf.event_mask[0];
512 *((u32 *) f->event_mask + 1) = uf.event_mask[1];
525 static int hci_sock_getsockopt(struct socket *sock, int level, int optname, char __user *optval, int __user *optlen)
527 struct hci_ufilter uf;
528 struct sock *sk = sock->sk;
531 if (get_user(len, optlen))
536 if (hci_pi(sk)->cmsg_mask & HCI_CMSG_DIR)
541 if (put_user(opt, optval))
546 if (hci_pi(sk)->cmsg_mask & HCI_CMSG_TSTAMP)
551 if (put_user(opt, optval))
557 struct hci_filter *f = &hci_pi(sk)->filter;
559 uf.type_mask = f->type_mask;
560 uf.opcode = f->opcode;
561 uf.event_mask[0] = *((u32 *) f->event_mask + 0);
562 uf.event_mask[1] = *((u32 *) f->event_mask + 1);
565 len = min_t(unsigned int, len, sizeof(uf));
566 if (copy_to_user(optval, &uf, len))
578 static struct proto_ops hci_sock_ops = {
579 .family = PF_BLUETOOTH,
580 .owner = THIS_MODULE,
581 .release = hci_sock_release,
582 .bind = hci_sock_bind,
583 .getname = hci_sock_getname,
584 .sendmsg = hci_sock_sendmsg,
585 .recvmsg = hci_sock_recvmsg,
586 .ioctl = hci_sock_ioctl,
587 .poll = datagram_poll,
588 .listen = sock_no_listen,
589 .shutdown = sock_no_shutdown,
590 .setsockopt = hci_sock_setsockopt,
591 .getsockopt = hci_sock_getsockopt,
592 .connect = sock_no_connect,
593 .socketpair = sock_no_socketpair,
594 .accept = sock_no_accept,
598 static struct proto hci_sk_proto = {
600 .owner = THIS_MODULE,
601 .obj_size = sizeof(struct hci_pinfo)
604 static int hci_sock_create(struct socket *sock, int protocol)
608 BT_DBG("sock %p", sock);
610 if (sock->type != SOCK_RAW)
611 return -ESOCKTNOSUPPORT;
613 sock->ops = &hci_sock_ops;
615 sk = sk_alloc(PF_BLUETOOTH, GFP_KERNEL, &hci_sk_proto, 1);
619 sock_init_data(sock, sk);
621 sock_reset_flag(sk, SOCK_ZAPPED);
623 sk->sk_protocol = protocol;
625 sock->state = SS_UNCONNECTED;
626 sk->sk_state = BT_OPEN;
628 bt_sock_link(&hci_sk_list, sk);
632 static int hci_sock_dev_event(struct notifier_block *this, unsigned long event, void *ptr)
634 struct hci_dev *hdev = (struct hci_dev *) ptr;
635 struct hci_ev_si_device ev;
637 BT_DBG("hdev %s event %ld", hdev->name, event);
639 /* Send event to sockets */
641 ev.dev_id = hdev->id;
642 hci_si_event(NULL, HCI_EV_SI_DEVICE, sizeof(ev), &ev);
644 if (event == HCI_DEV_UNREG) {
646 struct hlist_node *node;
648 /* Detach sockets from device */
649 read_lock(&hci_sk_list.lock);
650 sk_for_each(sk, node, &hci_sk_list.head) {
652 if (hci_pi(sk)->hdev == hdev) {
653 hci_pi(sk)->hdev = NULL;
655 sk->sk_state = BT_OPEN;
656 sk->sk_state_change(sk);
662 read_unlock(&hci_sk_list.lock);
668 static struct net_proto_family hci_sock_family_ops = {
669 .family = PF_BLUETOOTH,
670 .owner = THIS_MODULE,
671 .create = hci_sock_create,
674 static struct notifier_block hci_sock_nblock = {
675 .notifier_call = hci_sock_dev_event
678 int __init hci_sock_init(void)
682 err = proto_register(&hci_sk_proto, 0);
686 err = bt_sock_register(BTPROTO_HCI, &hci_sock_family_ops);
690 hci_register_notifier(&hci_sock_nblock);
692 BT_INFO("HCI socket layer initialized");
697 BT_ERR("HCI socket registration failed");
698 proto_unregister(&hci_sk_proto);
702 int __exit hci_sock_cleanup(void)
704 if (bt_sock_unregister(BTPROTO_HCI) < 0)
705 BT_ERR("HCI socket unregistration failed");
707 hci_unregister_notifier(&hci_sock_nblock);
709 proto_unregister(&hci_sk_proto);