?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
Merge master.kernel.org:/home/rmk/linux-2.6-arm
[linux-2.6.22.y-op.git] / net / bluetooth / hci_event.c
blobeb64555d1fb346d90ff34dad9ed16ef4700d0fdc
1 /*
2 BlueZ - Bluetooth protocol stack for Linux
3 Copyright (C) 2000-2001 Qualcomm Incorporated
4
5 Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
6
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License version 2 as
9 published by the Free Software Foundation;
10
11 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
12 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
13 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
14 IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
15 CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
16 WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
17 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
18 OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
19
20 ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
21 COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
22 SOFTWARE IS DISCLAIMED.
23 */
24
25 /* Bluetooth HCI event handling. */
26
27 #include <linux/config.h>
28 #include <linux/module.h>
29
30 #include <linux/types.h>
31 #include <linux/errno.h>
32 #include <linux/kernel.h>
33 #include <linux/sched.h>
34 #include <linux/slab.h>
35 #include <linux/poll.h>
36 #include <linux/fcntl.h>
37 #include <linux/init.h>
38 #include <linux/skbuff.h>
39 #include <linux/interrupt.h>
40 #include <linux/notifier.h>
41 #include <net/sock.h>
42
43 #include <asm/system.h>
44 #include <asm/uaccess.h>
45 #include <asm/unaligned.h>
46
47 #include <net/bluetooth/bluetooth.h>
48 #include <net/bluetooth/hci_core.h>
49
50 #ifndef CONFIG_BT_HCI_CORE_DEBUG
51 #undef BT_DBG
52 #define BT_DBG(D...)
53 #endif
54
55 /* Handle HCI Event packets */
56
57 /* Command Complete OGF LINK_CTL */
58 static void hci_cc_link_ctl(struct hci_dev *hdev, __u16 ocf, struct sk_buff *skb)
59 {
60 __u8 status;
61
62 BT_DBG("%s ocf 0x%x", hdev->name, ocf);
63
64 switch (ocf) {
65 case OCF_INQUIRY_CANCEL:
66 status = *((__u8 *) skb->data);
67
68 if (status) {
69 BT_DBG("%s Inquiry cancel error: status 0x%x", hdev->name, status);
70 } else {
71 clear_bit(HCI_INQUIRY, &hdev->flags);
72 hci_req_complete(hdev, status);
73 }
74 break;
75
76 default:
77 BT_DBG("%s Command complete: ogf LINK_CTL ocf %x", hdev->name, ocf);
78 break;
79 }
80 }
81
82 /* Command Complete OGF LINK_POLICY */
83 static void hci_cc_link_policy(struct hci_dev *hdev, __u16 ocf, struct sk_buff *skb)
84 {
85 struct hci_conn *conn;
86 struct hci_rp_role_discovery *rd;
87
88 BT_DBG("%s ocf 0x%x", hdev->name, ocf);
89
90 switch (ocf) {
91 case OCF_ROLE_DISCOVERY:
92 rd = (void *) skb->data;
93
94 if (rd->status)
95 break;
96
97 hci_dev_lock(hdev);
98
99 conn = hci_conn_hash_lookup_handle(hdev, __le16_to_cpu(rd->handle));
100 if (conn) {
101 if (rd->role)
102 conn->link_mode &= ~HCI_LM_MASTER;
103 else
104 conn->link_mode |= HCI_LM_MASTER;
105 }
106
107 hci_dev_unlock(hdev);
108 break;
109
110 default:
111 BT_DBG("%s: Command complete: ogf LINK_POLICY ocf %x",
112 hdev->name, ocf);
113 break;
114 }
115 }
116
117 /* Command Complete OGF HOST_CTL */
118 static void hci_cc_host_ctl(struct hci_dev *hdev, __u16 ocf, struct sk_buff *skb)
119 {
120 __u8 status, param;
121 __u16 setting;
122 struct hci_rp_read_voice_setting *vs;
123 void *sent;
124
125 BT_DBG("%s ocf 0x%x", hdev->name, ocf);
126
127 switch (ocf) {
128 case OCF_RESET:
129 status = *((__u8 *) skb->data);
130 hci_req_complete(hdev, status);
131 break;
132
133 case OCF_SET_EVENT_FLT:
134 status = *((__u8 *) skb->data);
135 if (status) {
136 BT_DBG("%s SET_EVENT_FLT failed %d", hdev->name, status);
137 } else {
138 BT_DBG("%s SET_EVENT_FLT succeseful", hdev->name);
139 }
140 break;
141
142 case OCF_WRITE_AUTH_ENABLE:
143 sent = hci_sent_cmd_data(hdev, OGF_HOST_CTL, OCF_WRITE_AUTH_ENABLE);
144 if (!sent)
145 break;
146
147 status = *((__u8 *) skb->data);
148 param = *((__u8 *) sent);
149
150 if (!status) {
151 if (param == AUTH_ENABLED)
152 set_bit(HCI_AUTH, &hdev->flags);
153 else
154 clear_bit(HCI_AUTH, &hdev->flags);
155 }
156 hci_req_complete(hdev, status);
157 break;
158
159 case OCF_WRITE_ENCRYPT_MODE:
160 sent = hci_sent_cmd_data(hdev, OGF_HOST_CTL, OCF_WRITE_ENCRYPT_MODE);
161 if (!sent)
162 break;
163
164 status = *((__u8 *) skb->data);
165 param = *((__u8 *) sent);
166
167 if (!status) {
168 if (param)
169 set_bit(HCI_ENCRYPT, &hdev->flags);
170 else
171 clear_bit(HCI_ENCRYPT, &hdev->flags);
172 }
173 hci_req_complete(hdev, status);
174 break;
175
176 case OCF_WRITE_CA_TIMEOUT:
177 status = *((__u8 *) skb->data);
178 if (status) {
179 BT_DBG("%s OCF_WRITE_CA_TIMEOUT failed %d", hdev->name, status);
180 } else {
181 BT_DBG("%s OCF_WRITE_CA_TIMEOUT succeseful", hdev->name);
182 }
183 break;
184
185 case OCF_WRITE_PG_TIMEOUT:
186 status = *((__u8 *) skb->data);
187 if (status) {
188 BT_DBG("%s OCF_WRITE_PG_TIMEOUT failed %d", hdev->name, status);
189 } else {
190 BT_DBG("%s: OCF_WRITE_PG_TIMEOUT succeseful", hdev->name);
191 }
192 break;
193
194 case OCF_WRITE_SCAN_ENABLE:
195 sent = hci_sent_cmd_data(hdev, OGF_HOST_CTL, OCF_WRITE_SCAN_ENABLE);
196 if (!sent)
197 break;
198
199 status = *((__u8 *) skb->data);
200 param = *((__u8 *) sent);
201
202 BT_DBG("param 0x%x", param);
203
204 if (!status) {
205 clear_bit(HCI_PSCAN, &hdev->flags);
206 clear_bit(HCI_ISCAN, &hdev->flags);
207 if (param & SCAN_INQUIRY)
208 set_bit(HCI_ISCAN, &hdev->flags);
209
210 if (param & SCAN_PAGE)
211 set_bit(HCI_PSCAN, &hdev->flags);
212 }
213 hci_req_complete(hdev, status);
214 break;
215
216 case OCF_READ_VOICE_SETTING:
217 vs = (struct hci_rp_read_voice_setting *) skb->data;
218
219 if (vs->status) {
220 BT_DBG("%s READ_VOICE_SETTING failed %d", hdev->name, vs->status);
221 break;
222 }
223
224 setting = __le16_to_cpu(vs->voice_setting);
225
226 if (hdev->voice_setting != setting ) {
227 hdev->voice_setting = setting;
228
229 BT_DBG("%s: voice setting 0x%04x", hdev->name, setting);
230
231 if (hdev->notify) {
232 tasklet_disable(&hdev->tx_task);
233 hdev->notify(hdev, HCI_NOTIFY_VOICE_SETTING);
234 tasklet_enable(&hdev->tx_task);
235 }
236 }
237 break;
238
239 case OCF_WRITE_VOICE_SETTING:
240 sent = hci_sent_cmd_data(hdev, OGF_HOST_CTL, OCF_WRITE_VOICE_SETTING);
241 if (!sent)
242 break;
243
244 status = *((__u8 *) skb->data);
245 setting = __le16_to_cpu(get_unaligned((__le16 *) sent));
246
247 if (!status && hdev->voice_setting != setting) {
248 hdev->voice_setting = setting;
249
250 BT_DBG("%s: voice setting 0x%04x", hdev->name, setting);
251
252 if (hdev->notify) {
253 tasklet_disable(&hdev->tx_task);
254 hdev->notify(hdev, HCI_NOTIFY_VOICE_SETTING);
255 tasklet_enable(&hdev->tx_task);
256 }
257 }
258 hci_req_complete(hdev, status);
259 break;
260
261 case OCF_HOST_BUFFER_SIZE:
262 status = *((__u8 *) skb->data);
263 if (status) {
264 BT_DBG("%s OCF_BUFFER_SIZE failed %d", hdev->name, status);
265 hci_req_complete(hdev, status);
266 }
267 break;
268
269 default:
270 BT_DBG("%s Command complete: ogf HOST_CTL ocf %x", hdev->name, ocf);
271 break;
272 }
273 }
274
275 /* Command Complete OGF INFO_PARAM */
276 static void hci_cc_info_param(struct hci_dev *hdev, __u16 ocf, struct sk_buff *skb)
277 {
278 struct hci_rp_read_loc_features *lf;
279 struct hci_rp_read_buffer_size *bs;
280 struct hci_rp_read_bd_addr *ba;
281
282 BT_DBG("%s ocf 0x%x", hdev->name, ocf);
283
284 switch (ocf) {
285 case OCF_READ_LOCAL_FEATURES:
286 lf = (struct hci_rp_read_loc_features *) skb->data;
287
288 if (lf->status) {
289 BT_DBG("%s READ_LOCAL_FEATURES failed %d", hdev->name, lf->status);
290 break;
291 }
292
293 memcpy(hdev->features, lf->features, sizeof(hdev->features));
294
295 /* Adjust default settings according to features
296 * supported by device. */
297 if (hdev->features[0] & LMP_3SLOT)
298 hdev->pkt_type |= (HCI_DM3 | HCI_DH3);
299
300 if (hdev->features[0] & LMP_5SLOT)
301 hdev->pkt_type |= (HCI_DM5 | HCI_DH5);
302
303 if (hdev->features[1] & LMP_HV2)
304 hdev->pkt_type |= (HCI_HV2);
305
306 if (hdev->features[1] & LMP_HV3)
307 hdev->pkt_type |= (HCI_HV3);
308
309 BT_DBG("%s: features 0x%x 0x%x 0x%x", hdev->name, lf->features[0], lf->features[1], lf->features[2]);
310
311 break;
312
313 case OCF_READ_BUFFER_SIZE:
314 bs = (struct hci_rp_read_buffer_size *) skb->data;
315
316 if (bs->status) {
317 BT_DBG("%s READ_BUFFER_SIZE failed %d", hdev->name, bs->status);
318 hci_req_complete(hdev, bs->status);
319 break;
320 }
321
322 hdev->acl_mtu = __le16_to_cpu(bs->acl_mtu);
323 hdev->sco_mtu = bs->sco_mtu ? bs->sco_mtu : 64;
324 hdev->acl_pkts = hdev->acl_cnt = __le16_to_cpu(bs->acl_max_pkt);
325 hdev->sco_pkts = hdev->sco_cnt = __le16_to_cpu(bs->sco_max_pkt);
326
327 BT_DBG("%s mtu: acl %d, sco %d max_pkt: acl %d, sco %d", hdev->name,
328 hdev->acl_mtu, hdev->sco_mtu, hdev->acl_pkts, hdev->sco_pkts);
329 break;
330
331 case OCF_READ_BD_ADDR:
332 ba = (struct hci_rp_read_bd_addr *) skb->data;
333
334 if (!ba->status) {
335 bacpy(&hdev->bdaddr, &ba->bdaddr);
336 } else {
337 BT_DBG("%s: READ_BD_ADDR failed %d", hdev->name, ba->status);
338 }
339
340 hci_req_complete(hdev, ba->status);
341 break;
342
343 default:
344 BT_DBG("%s Command complete: ogf INFO_PARAM ocf %x", hdev->name, ocf);
345 break;
346 }
347 }
348
349 /* Command Status OGF LINK_CTL */
350 static inline void hci_cs_create_conn(struct hci_dev *hdev, __u8 status)
351 {
352 struct hci_conn *conn;
353 struct hci_cp_create_conn *cp = hci_sent_cmd_data(hdev, OGF_LINK_CTL, OCF_CREATE_CONN);
354
355 if (!cp)
356 return;
357
358 hci_dev_lock(hdev);
359
360 conn = hci_conn_hash_lookup_ba(hdev, ACL_LINK, &cp->bdaddr);
361
362 BT_DBG("%s status 0x%x bdaddr %s conn %p", hdev->name,
363 status, batostr(&cp->bdaddr), conn);
364
365 if (status) {
366 if (conn && conn->state == BT_CONNECT) {
367 conn->state = BT_CLOSED;
368 hci_proto_connect_cfm(conn, status);
369 hci_conn_del(conn);
370 }
371 } else {
372 if (!conn) {
373 conn = hci_conn_add(hdev, ACL_LINK, &cp->bdaddr);
374 if (conn) {
375 conn->out = 1;
376 conn->link_mode |= HCI_LM_MASTER;
377 } else
378 BT_ERR("No memmory for new connection");
379 }
380 }
381
382 hci_dev_unlock(hdev);
383 }
384
385 static void hci_cs_link_ctl(struct hci_dev *hdev, __u16 ocf, __u8 status)
386 {
387 BT_DBG("%s ocf 0x%x", hdev->name, ocf);
388
389 switch (ocf) {
390 case OCF_CREATE_CONN:
391 hci_cs_create_conn(hdev, status);
392 break;
393
394 case OCF_ADD_SCO:
395 if (status) {
396 struct hci_conn *acl, *sco;
397 struct hci_cp_add_sco *cp = hci_sent_cmd_data(hdev, OGF_LINK_CTL, OCF_ADD_SCO);
398 __u16 handle;
399
400 if (!cp)
401 break;
402
403 handle = __le16_to_cpu(cp->handle);
404
405 BT_DBG("%s Add SCO error: handle %d status 0x%x", hdev->name, handle, status);
406
407 hci_dev_lock(hdev);
408
409 acl = hci_conn_hash_lookup_handle(hdev, handle);
410 if (acl && (sco = acl->link)) {
411 sco->state = BT_CLOSED;
412
413 hci_proto_connect_cfm(sco, status);
414 hci_conn_del(sco);
415 }
416
417 hci_dev_unlock(hdev);
418 }
419 break;
420
421 case OCF_INQUIRY:
422 if (status) {
423 BT_DBG("%s Inquiry error: status 0x%x", hdev->name, status);
424 hci_req_complete(hdev, status);
425 } else {
426 set_bit(HCI_INQUIRY, &hdev->flags);
427 }
428 break;
429
430 default:
431 BT_DBG("%s Command status: ogf LINK_CTL ocf %x status %d",
432 hdev->name, ocf, status);
433 break;
434 }
435 }
436
437 /* Command Status OGF LINK_POLICY */
438 static void hci_cs_link_policy(struct hci_dev *hdev, __u16 ocf, __u8 status)
439 {
440 BT_DBG("%s ocf 0x%x", hdev->name, ocf);
441
442 switch (ocf) {
443 default:
444 BT_DBG("%s Command status: ogf HOST_POLICY ocf %x", hdev->name, ocf);
445 break;
446 }
447 }
448
449 /* Command Status OGF HOST_CTL */
450 static void hci_cs_host_ctl(struct hci_dev *hdev, __u16 ocf, __u8 status)
451 {
452 BT_DBG("%s ocf 0x%x", hdev->name, ocf);
453
454 switch (ocf) {
455 default:
456 BT_DBG("%s Command status: ogf HOST_CTL ocf %x", hdev->name, ocf);
457 break;
458 }
459 }
460
461 /* Command Status OGF INFO_PARAM */
462 static void hci_cs_info_param(struct hci_dev *hdev, __u16 ocf, __u8 status)
463 {
464 BT_DBG("%s: hci_cs_info_param: ocf 0x%x", hdev->name, ocf);
465
466 switch (ocf) {
467 default:
468 BT_DBG("%s Command status: ogf INFO_PARAM ocf %x", hdev->name, ocf);
469 break;
470 }
471 }
472
473 /* Inquiry Complete */
474 static inline void hci_inquiry_complete_evt(struct hci_dev *hdev, struct sk_buff *skb)
475 {
476 __u8 status = *((__u8 *) skb->data);
477
478 BT_DBG("%s status %d", hdev->name, status);
479
480 clear_bit(HCI_INQUIRY, &hdev->flags);
481 hci_req_complete(hdev, status);
482 }
483
484 /* Inquiry Result */
485 static inline void hci_inquiry_result_evt(struct hci_dev *hdev, struct sk_buff *skb)
486 {
487 struct inquiry_data data;
488 struct inquiry_info *info = (struct inquiry_info *) (skb->data + 1);
489 int num_rsp = *((__u8 *) skb->data);
490
491 BT_DBG("%s num_rsp %d", hdev->name, num_rsp);
492
493 if (!num_rsp)
494 return;
495
496 hci_dev_lock(hdev);
497
498 for (; num_rsp; num_rsp--) {
499 bacpy(&data.bdaddr, &info->bdaddr);
500 data.pscan_rep_mode = info->pscan_rep_mode;
501 data.pscan_period_mode = info->pscan_period_mode;
502 data.pscan_mode = info->pscan_mode;
503 memcpy(data.dev_class, info->dev_class, 3);
504 data.clock_offset = info->clock_offset;
505 data.rssi = 0x00;
506 info++;
507 hci_inquiry_cache_update(hdev, &data);
508 }
509
510 hci_dev_unlock(hdev);
511 }
512
513 /* Inquiry Result With RSSI */
514 static inline void hci_inquiry_result_with_rssi_evt(struct hci_dev *hdev, struct sk_buff *skb)
515 {
516 struct inquiry_data data;
517 int num_rsp = *((__u8 *) skb->data);
518
519 BT_DBG("%s num_rsp %d", hdev->name, num_rsp);
520
521 if (!num_rsp)
522 return;
523
524 hci_dev_lock(hdev);
525
526 if ((skb->len - 1) / num_rsp != sizeof(struct inquiry_info_with_rssi)) {
527 struct inquiry_info_with_rssi_and_pscan_mode *info =
528 (struct inquiry_info_with_rssi_and_pscan_mode *) (skb->data + 1);
529
530 for (; num_rsp; num_rsp--) {
531 bacpy(&data.bdaddr, &info->bdaddr);
532 data.pscan_rep_mode = info->pscan_rep_mode;
533 data.pscan_period_mode = info->pscan_period_mode;
534 data.pscan_mode = info->pscan_mode;
535 memcpy(data.dev_class, info->dev_class, 3);
536 data.clock_offset = info->clock_offset;
537 data.rssi = info->rssi;
538 info++;
539 hci_inquiry_cache_update(hdev, &data);
540 }
541 } else {
542 struct inquiry_info_with_rssi *info =
543 (struct inquiry_info_with_rssi *) (skb->data + 1);
544
545 for (; num_rsp; num_rsp--) {
546 bacpy(&data.bdaddr, &info->bdaddr);
547 data.pscan_rep_mode = info->pscan_rep_mode;
548 data.pscan_period_mode = info->pscan_period_mode;
549 data.pscan_mode = 0x00;
550 memcpy(data.dev_class, info->dev_class, 3);
551 data.clock_offset = info->clock_offset;
552 data.rssi = info->rssi;
553 info++;
554 hci_inquiry_cache_update(hdev, &data);
555 }
556 }
557
558 hci_dev_unlock(hdev);
559 }
560
561 /* Extended Inquiry Result */
562 static inline void hci_extended_inquiry_result_evt(struct hci_dev *hdev, struct sk_buff *skb)
563 {
564 struct inquiry_data data;
565 struct extended_inquiry_info *info = (struct extended_inquiry_info *) (skb->data + 1);
566 int num_rsp = *((__u8 *) skb->data);
567
568 BT_DBG("%s num_rsp %d", hdev->name, num_rsp);
569
570 if (!num_rsp)
571 return;
572
573 hci_dev_lock(hdev);
574
575 for (; num_rsp; num_rsp--) {
576 bacpy(&data.bdaddr, &info->bdaddr);
577 data.pscan_rep_mode = info->pscan_rep_mode;
578 data.pscan_period_mode = info->pscan_period_mode;
579 data.pscan_mode = 0x00;
580 memcpy(data.dev_class, info->dev_class, 3);
581 data.clock_offset = info->clock_offset;
582 data.rssi = info->rssi;
583 info++;
584 hci_inquiry_cache_update(hdev, &data);
585 }
586
587 hci_dev_unlock(hdev);
588 }
589
590 /* Connect Request */
591 static inline void hci_conn_request_evt(struct hci_dev *hdev, struct sk_buff *skb)
592 {
593 struct hci_ev_conn_request *ev = (struct hci_ev_conn_request *) skb->data;
594 int mask = hdev->link_mode;
595
596 BT_DBG("%s Connection request: %s type 0x%x", hdev->name,
597 batostr(&ev->bdaddr), ev->link_type);
598
599 mask |= hci_proto_connect_ind(hdev, &ev->bdaddr, ev->link_type);
600
601 if (mask & HCI_LM_ACCEPT) {
602 /* Connection accepted */
603 struct hci_conn *conn;
604 struct hci_cp_accept_conn_req cp;
605
606 hci_dev_lock(hdev);
607 conn = hci_conn_hash_lookup_ba(hdev, ev->link_type, &ev->bdaddr);
608 if (!conn) {
609 if (!(conn = hci_conn_add(hdev, ev->link_type, &ev->bdaddr))) {
610 BT_ERR("No memmory for new connection");
611 hci_dev_unlock(hdev);
612 return;
613 }
614 }
615 memcpy(conn->dev_class, ev->dev_class, 3);
616 conn->state = BT_CONNECT;
617 hci_dev_unlock(hdev);
618
619 bacpy(&cp.bdaddr, &ev->bdaddr);
620
621 if (lmp_rswitch_capable(hdev) && (mask & HCI_LM_MASTER))
622 cp.role = 0x00; /* Become master */
623 else
624 cp.role = 0x01; /* Remain slave */
625
626 hci_send_cmd(hdev, OGF_LINK_CTL, OCF_ACCEPT_CONN_REQ, sizeof(cp), &cp);
627 } else {
628 /* Connection rejected */
629 struct hci_cp_reject_conn_req cp;
630
631 bacpy(&cp.bdaddr, &ev->bdaddr);
632 cp.reason = 0x0f;
633 hci_send_cmd(hdev, OGF_LINK_CTL, OCF_REJECT_CONN_REQ, sizeof(cp), &cp);
634 }
635 }
636
637 /* Connect Complete */
638 static inline void hci_conn_complete_evt(struct hci_dev *hdev, struct sk_buff *skb)
639 {
640 struct hci_ev_conn_complete *ev = (struct hci_ev_conn_complete *) skb->data;
641 struct hci_conn *conn = NULL;
642
643 BT_DBG("%s", hdev->name);
644
645 hci_dev_lock(hdev);
646
647 conn = hci_conn_hash_lookup_ba(hdev, ev->link_type, &ev->bdaddr);
648 if (!conn) {
649 hci_dev_unlock(hdev);
650 return;
651 }
652
653 if (!ev->status) {
654 conn->handle = __le16_to_cpu(ev->handle);
655 conn->state = BT_CONNECTED;
656
657 if (test_bit(HCI_AUTH, &hdev->flags))
658 conn->link_mode |= HCI_LM_AUTH;
659
660 if (test_bit(HCI_ENCRYPT, &hdev->flags))
661 conn->link_mode |= HCI_LM_ENCRYPT;
662
663 /* Set link policy */
664 if (conn->type == ACL_LINK && hdev->link_policy) {
665 struct hci_cp_write_link_policy cp;
666 cp.handle = ev->handle;
667 cp.policy = __cpu_to_le16(hdev->link_policy);
668 hci_send_cmd(hdev, OGF_LINK_POLICY, OCF_WRITE_LINK_POLICY, sizeof(cp), &cp);
669 }
670
671 /* Set packet type for incoming connection */
672 if (!conn->out) {
673 struct hci_cp_change_conn_ptype cp;
674 cp.handle = ev->handle;
675 cp.pkt_type = (conn->type == ACL_LINK) ?
676 __cpu_to_le16(hdev->pkt_type & ACL_PTYPE_MASK):
677 __cpu_to_le16(hdev->pkt_type & SCO_PTYPE_MASK);
678
679 hci_send_cmd(hdev, OGF_LINK_CTL, OCF_CHANGE_CONN_PTYPE, sizeof(cp), &cp);
680 }
681 } else
682 conn->state = BT_CLOSED;
683
684 if (conn->type == ACL_LINK) {
685 struct hci_conn *sco = conn->link;
686 if (sco) {
687 if (!ev->status)
688 hci_add_sco(sco, conn->handle);
689 else {
690 hci_proto_connect_cfm(sco, ev->status);
691 hci_conn_del(sco);
692 }
693 }
694 }
695
696 hci_proto_connect_cfm(conn, ev->status);
697 if (ev->status)
698 hci_conn_del(conn);
699
700 hci_dev_unlock(hdev);
701 }
702
703 /* Disconnect Complete */
704 static inline void hci_disconn_complete_evt(struct hci_dev *hdev, struct sk_buff *skb)
705 {
706 struct hci_ev_disconn_complete *ev = (struct hci_ev_disconn_complete *) skb->data;
707 struct hci_conn *conn = NULL;
708 __u16 handle = __le16_to_cpu(ev->handle);
709
710 BT_DBG("%s status %d", hdev->name, ev->status);
711
712 if (ev->status)
713 return;
714
715 hci_dev_lock(hdev);
716
717 conn = hci_conn_hash_lookup_handle(hdev, handle);
718 if (conn) {
719 conn->state = BT_CLOSED;
720 hci_proto_disconn_ind(conn, ev->reason);
721 hci_conn_del(conn);
722 }
723
724 hci_dev_unlock(hdev);
725 }
726
727 /* Number of completed packets */
728 static inline void hci_num_comp_pkts_evt(struct hci_dev *hdev, struct sk_buff *skb)
729 {
730 struct hci_ev_num_comp_pkts *ev = (struct hci_ev_num_comp_pkts *) skb->data;
731 __le16 *ptr;
732 int i;
733
734 skb_pull(skb, sizeof(*ev));
735
736 BT_DBG("%s num_hndl %d", hdev->name, ev->num_hndl);
737
738 if (skb->len < ev->num_hndl * 4) {
739 BT_DBG("%s bad parameters", hdev->name);
740 return;
741 }
742
743 tasklet_disable(&hdev->tx_task);
744
745 for (i = 0, ptr = (__le16 *) skb->data; i < ev->num_hndl; i++) {
746 struct hci_conn *conn;
747 __u16 handle, count;
748
749 handle = __le16_to_cpu(get_unaligned(ptr++));
750 count = __le16_to_cpu(get_unaligned(ptr++));
751
752 conn = hci_conn_hash_lookup_handle(hdev, handle);
753 if (conn) {
754 conn->sent -= count;
755
756 if (conn->type == SCO_LINK) {
757 if ((hdev->sco_cnt += count) > hdev->sco_pkts)
758 hdev->sco_cnt = hdev->sco_pkts;
759 } else {
760 if ((hdev->acl_cnt += count) > hdev->acl_pkts)
761 hdev->acl_cnt = hdev->acl_pkts;
762 }
763 }
764 }
765 hci_sched_tx(hdev);
766
767 tasklet_enable(&hdev->tx_task);
768 }
769
770 /* Role Change */
771 static inline void hci_role_change_evt(struct hci_dev *hdev, struct sk_buff *skb)
772 {
773 struct hci_ev_role_change *ev = (struct hci_ev_role_change *) skb->data;
774 struct hci_conn *conn = NULL;
775
776 BT_DBG("%s status %d", hdev->name, ev->status);
777
778 hci_dev_lock(hdev);
779
780 conn = hci_conn_hash_lookup_ba(hdev, ACL_LINK, &ev->bdaddr);
781 if (conn) {
782 if (!ev->status) {
783 if (ev->role)
784 conn->link_mode &= ~HCI_LM_MASTER;
785 else
786 conn->link_mode |= HCI_LM_MASTER;
787 }
788
789 clear_bit(HCI_CONN_RSWITCH_PEND, &conn->pend);
790
791 hci_role_switch_cfm(conn, ev->status, ev->role);
792 }
793
794 hci_dev_unlock(hdev);
795 }
796
797 /* Authentication Complete */
798 static inline void hci_auth_complete_evt(struct hci_dev *hdev, struct sk_buff *skb)
799 {
800 struct hci_ev_auth_complete *ev = (struct hci_ev_auth_complete *) skb->data;
801 struct hci_conn *conn = NULL;
802 __u16 handle = __le16_to_cpu(ev->handle);
803
804 BT_DBG("%s status %d", hdev->name, ev->status);
805
806 hci_dev_lock(hdev);
807
808 conn = hci_conn_hash_lookup_handle(hdev, handle);
809 if (conn) {
810 if (!ev->status)
811 conn->link_mode |= HCI_LM_AUTH;
812
813 clear_bit(HCI_CONN_AUTH_PEND, &conn->pend);
814
815 hci_auth_cfm(conn, ev->status);
816
817 if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->pend)) {
818 if (!ev->status) {
819 struct hci_cp_set_conn_encrypt cp;
820 cp.handle = __cpu_to_le16(conn->handle);
821 cp.encrypt = 1;
822 hci_send_cmd(conn->hdev, OGF_LINK_CTL,
823 OCF_SET_CONN_ENCRYPT,
824 sizeof(cp), &cp);
825 } else {
826 clear_bit(HCI_CONN_ENCRYPT_PEND, &conn->pend);
827 hci_encrypt_cfm(conn, ev->status, 0x00);
828 }
829 }
830 }
831
832 hci_dev_unlock(hdev);
833 }
834
835 /* Encryption Change */
836 static inline void hci_encrypt_change_evt(struct hci_dev *hdev, struct sk_buff *skb)
837 {
838 struct hci_ev_encrypt_change *ev = (struct hci_ev_encrypt_change *) skb->data;
839 struct hci_conn *conn = NULL;
840 __u16 handle = __le16_to_cpu(ev->handle);
841
842 BT_DBG("%s status %d", hdev->name, ev->status);
843
844 hci_dev_lock(hdev);
845
846 conn = hci_conn_hash_lookup_handle(hdev, handle);
847 if (conn) {
848 if (!ev->status) {
849 if (ev->encrypt)
850 conn->link_mode |= HCI_LM_ENCRYPT;
851 else
852 conn->link_mode &= ~HCI_LM_ENCRYPT;
853 }
854
855 clear_bit(HCI_CONN_ENCRYPT_PEND, &conn->pend);
856
857 hci_encrypt_cfm(conn, ev->status, ev->encrypt);
858 }
859
860 hci_dev_unlock(hdev);
861 }
862
863 /* Change Connection Link Key Complete */
864 static inline void hci_change_conn_link_key_complete_evt(struct hci_dev *hdev, struct sk_buff *skb)
865 {
866 struct hci_ev_change_conn_link_key_complete *ev = (struct hci_ev_change_conn_link_key_complete *) skb->data;
867 struct hci_conn *conn = NULL;
868 __u16 handle = __le16_to_cpu(ev->handle);
869
870 BT_DBG("%s status %d", hdev->name, ev->status);
871
872 hci_dev_lock(hdev);
873
874 conn = hci_conn_hash_lookup_handle(hdev, handle);
875 if (conn) {
876 if (!ev->status)
877 conn->link_mode |= HCI_LM_SECURE;
878
879 clear_bit(HCI_CONN_AUTH_PEND, &conn->pend);
880
881 hci_key_change_cfm(conn, ev->status);
882 }
883
884 hci_dev_unlock(hdev);
885 }
886
887 /* Pin Code Request*/
888 static inline void hci_pin_code_request_evt(struct hci_dev *hdev, struct sk_buff *skb)
889 {
890 }
891
892 /* Link Key Request */
893 static inline void hci_link_key_request_evt(struct hci_dev *hdev, struct sk_buff *skb)
894 {
895 }
896
897 /* Link Key Notification */
898 static inline void hci_link_key_notify_evt(struct hci_dev *hdev, struct sk_buff *skb)
899 {
900 }
901
902 /* Clock Offset */
903 static inline void hci_clock_offset_evt(struct hci_dev *hdev, struct sk_buff *skb)
904 {
905 struct hci_ev_clock_offset *ev = (struct hci_ev_clock_offset *) skb->data;
906 struct hci_conn *conn = NULL;
907 __u16 handle = __le16_to_cpu(ev->handle);
908
909 BT_DBG("%s status %d", hdev->name, ev->status);
910
911 hci_dev_lock(hdev);
912
913 conn = hci_conn_hash_lookup_handle(hdev, handle);
914 if (conn && !ev->status) {
915 struct inquiry_entry *ie;
916
917 if ((ie = hci_inquiry_cache_lookup(hdev, &conn->dst))) {
918 ie->data.clock_offset = ev->clock_offset;
919 ie->timestamp = jiffies;
920 }
921 }
922
923 hci_dev_unlock(hdev);
924 }
925
926 /* Page Scan Repetition Mode */
927 static inline void hci_pscan_rep_mode_evt(struct hci_dev *hdev, struct sk_buff *skb)
928 {
929 struct hci_ev_pscan_rep_mode *ev = (struct hci_ev_pscan_rep_mode *) skb->data;
930 struct inquiry_entry *ie;
931
932 BT_DBG("%s", hdev->name);
933
934 hci_dev_lock(hdev);
935
936 if ((ie = hci_inquiry_cache_lookup(hdev, &ev->bdaddr))) {
937 ie->data.pscan_rep_mode = ev->pscan_rep_mode;
938 ie->timestamp = jiffies;
939 }
940
941 hci_dev_unlock(hdev);
942 }
943
944 void hci_event_packet(struct hci_dev *hdev, struct sk_buff *skb)
945 {
946 struct hci_event_hdr *hdr = (struct hci_event_hdr *) skb->data;
947 struct hci_ev_cmd_complete *ec;
948 struct hci_ev_cmd_status *cs;
949 u16 opcode, ocf, ogf;
950
951 skb_pull(skb, HCI_EVENT_HDR_SIZE);
952
953 BT_DBG("%s evt 0x%x", hdev->name, hdr->evt);
954
955 switch (hdr->evt) {
956 case HCI_EV_NUM_COMP_PKTS:
957 hci_num_comp_pkts_evt(hdev, skb);
958 break;
959
960 case HCI_EV_INQUIRY_COMPLETE:
961 hci_inquiry_complete_evt(hdev, skb);
962 break;
963
964 case HCI_EV_INQUIRY_RESULT:
965 hci_inquiry_result_evt(hdev, skb);
966 break;
967
968 case HCI_EV_INQUIRY_RESULT_WITH_RSSI:
969 hci_inquiry_result_with_rssi_evt(hdev, skb);
970 break;
971
972 case HCI_EV_EXTENDED_INQUIRY_RESULT:
973 hci_extended_inquiry_result_evt(hdev, skb);
974 break;
975
976 case HCI_EV_CONN_REQUEST:
977 hci_conn_request_evt(hdev, skb);
978 break;
979
980 case HCI_EV_CONN_COMPLETE:
981 hci_conn_complete_evt(hdev, skb);
982 break;
983
984 case HCI_EV_DISCONN_COMPLETE:
985 hci_disconn_complete_evt(hdev, skb);
986 break;
987
988 case HCI_EV_ROLE_CHANGE:
989 hci_role_change_evt(hdev, skb);
990 break;
991
992 case HCI_EV_AUTH_COMPLETE:
993 hci_auth_complete_evt(hdev, skb);
994 break;
995
996 case HCI_EV_ENCRYPT_CHANGE:
997 hci_encrypt_change_evt(hdev, skb);
998 break;
999
1000 case HCI_EV_CHANGE_CONN_LINK_KEY_COMPLETE:
1001 hci_change_conn_link_key_complete_evt(hdev, skb);
1002 break;
1003
1004 case HCI_EV_PIN_CODE_REQ:
1005 hci_pin_code_request_evt(hdev, skb);
1006 break;
1007
1008 case HCI_EV_LINK_KEY_REQ:
1009 hci_link_key_request_evt(hdev, skb);
1010 break;
1011
1012 case HCI_EV_LINK_KEY_NOTIFY:
1013 hci_link_key_notify_evt(hdev, skb);
1014 break;
1015
1016 case HCI_EV_CLOCK_OFFSET:
1017 hci_clock_offset_evt(hdev, skb);
1018 break;
1019
1020 case HCI_EV_PSCAN_REP_MODE:
1021 hci_pscan_rep_mode_evt(hdev, skb);
1022 break;
1023
1024 case HCI_EV_CMD_STATUS:
1025 cs = (struct hci_ev_cmd_status *) skb->data;
1026 skb_pull(skb, sizeof(cs));
1027
1028 opcode = __le16_to_cpu(cs->opcode);
1029 ogf = hci_opcode_ogf(opcode);
1030 ocf = hci_opcode_ocf(opcode);
1031
1032 switch (ogf) {
1033 case OGF_INFO_PARAM:
1034 hci_cs_info_param(hdev, ocf, cs->status);
1035 break;
1036
1037 case OGF_HOST_CTL:
1038 hci_cs_host_ctl(hdev, ocf, cs->status);
1039 break;
1040
1041 case OGF_LINK_CTL:
1042 hci_cs_link_ctl(hdev, ocf, cs->status);
1043 break;
1044
1045 case OGF_LINK_POLICY:
1046 hci_cs_link_policy(hdev, ocf, cs->status);
1047 break;
1048
1049 default:
1050 BT_DBG("%s Command Status OGF %x", hdev->name, ogf);
1051 break;
1052 }
1053
1054 if (cs->ncmd) {
1055 atomic_set(&hdev->cmd_cnt, 1);
1056 if (!skb_queue_empty(&hdev->cmd_q))
1057 hci_sched_cmd(hdev);
1058 }
1059 break;
1060
1061 case HCI_EV_CMD_COMPLETE:
1062 ec = (struct hci_ev_cmd_complete *) skb->data;
1063 skb_pull(skb, sizeof(*ec));
1064
1065 opcode = __le16_to_cpu(ec->opcode);
1066 ogf = hci_opcode_ogf(opcode);
1067 ocf = hci_opcode_ocf(opcode);
1068
1069 switch (ogf) {
1070 case OGF_INFO_PARAM:
1071 hci_cc_info_param(hdev, ocf, skb);
1072 break;
1073
1074 case OGF_HOST_CTL:
1075 hci_cc_host_ctl(hdev, ocf, skb);
1076 break;
1077
1078 case OGF_LINK_CTL:
1079 hci_cc_link_ctl(hdev, ocf, skb);
1080 break;
1081
1082 case OGF_LINK_POLICY:
1083 hci_cc_link_policy(hdev, ocf, skb);
1084 break;
1085
1086 default:
1087 BT_DBG("%s Command Completed OGF %x", hdev->name, ogf);
1088 break;
1089 }
1090
1091 if (ec->ncmd) {
1092 atomic_set(&hdev->cmd_cnt, 1);
1093 if (!skb_queue_empty(&hdev->cmd_q))
1094 hci_sched_cmd(hdev);
1095 }
1096 break;
1097 }
1098
1099 kfree_skb(skb);
1100 hdev->stat.evt_rx++;
1101 }
1102
1103 /* Generate internal stack event */
1104 void hci_si_event(struct hci_dev *hdev, int type, int dlen, void *data)
1105 {
1106 struct hci_event_hdr *hdr;
1107 struct hci_ev_stack_internal *ev;
1108 struct sk_buff *skb;
1109
1110 skb = bt_skb_alloc(HCI_EVENT_HDR_SIZE + sizeof(*ev) + dlen, GFP_ATOMIC);
1111 if (!skb)
1112 return;
1113
1114 hdr = (void *) skb_put(skb, HCI_EVENT_HDR_SIZE);
1115 hdr->evt = HCI_EV_STACK_INTERNAL;
1116 hdr->plen = sizeof(*ev) + dlen;
1117
1118 ev = (void *) skb_put(skb, sizeof(*ev) + dlen);
1119 ev->type = type;
1120 memcpy(ev->data, data, dlen);
1121
1122 bt_cb(skb)->incoming = 1;
1123 __net_timestamp(skb);
1124
1125 bt_cb(skb)->pkt_type = HCI_EVENT_PKT;
1126 skb->dev = (void *) hdev;
1127 hci_send_to_sock(hdev, skb);
1128 kfree_skb(skb);
1129 }
linux v2.6.22.y-op