blob: b2eb2b93580ff56ed8d4898e8501c24451f66786 [file] [log] [blame]
YOSHIFUJI Hideaki8e87d142007-02-09 23:24:33 +09001/*
Linus Torvalds1da177e2005-04-16 15:20:36 -07002 BlueZ - Bluetooth protocol stack for Linux
3 Copyright (C) 2000-2001 Qualcomm Incorporated
4
5 Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
6
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License version 2 as
9 published by the Free Software Foundation;
10
11 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
12 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
13 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
14 IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
YOSHIFUJI Hideaki8e87d142007-02-09 23:24:33 +090015 CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
16 WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
17 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
Linus Torvalds1da177e2005-04-16 15:20:36 -070018 OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
19
YOSHIFUJI Hideaki8e87d142007-02-09 23:24:33 +090020 ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
21 COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
Linus Torvalds1da177e2005-04-16 15:20:36 -070022 SOFTWARE IS DISCLAIMED.
23*/
24
25/* Bluetooth HCI sockets. */
26
Linus Torvalds1da177e2005-04-16 15:20:36 -070027#include <linux/module.h>
28
29#include <linux/types.h>
Randy Dunlap4fc268d2006-01-11 12:17:47 -080030#include <linux/capability.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070031#include <linux/errno.h>
32#include <linux/kernel.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070033#include <linux/slab.h>
34#include <linux/poll.h>
35#include <linux/fcntl.h>
36#include <linux/init.h>
37#include <linux/skbuff.h>
38#include <linux/workqueue.h>
39#include <linux/interrupt.h>
Marcel Holtmann767c5eb2007-09-09 08:39:34 +020040#include <linux/compat.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070041#include <linux/socket.h>
42#include <linux/ioctl.h>
43#include <net/sock.h>
44
45#include <asm/system.h>
Andrei Emeltchenko70f230202010-12-01 16:58:25 +020046#include <linux/uaccess.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070047#include <asm/unaligned.h>
48
49#include <net/bluetooth/bluetooth.h>
50#include <net/bluetooth/hci_core.h>
51
Rusty Russelleb939922011-12-19 14:08:01 +000052static bool enable_mgmt;
Johan Hedberg03811012010-12-08 00:21:06 +020053
Linus Torvalds1da177e2005-04-16 15:20:36 -070054/* ----- HCI socket interface ----- */
55
56static inline int hci_test_bit(int nr, void *addr)
57{
58 return *((__u32 *) addr + (nr >> 5)) & ((__u32) 1 << (nr & 31));
59}
60
61/* Security filter */
62static struct hci_sec_filter hci_sec_filter = {
63 /* Packet types */
64 0x10,
65 /* Events */
Marcel Holtmanndd7f5522005-10-28 19:20:53 +020066 { 0x1000d9fe, 0x0000b00c },
Linus Torvalds1da177e2005-04-16 15:20:36 -070067 /* Commands */
68 {
69 { 0x0 },
70 /* OGF_LINK_CTL */
Marcel Holtmann7c631a62007-09-09 08:39:43 +020071 { 0xbe000006, 0x00000001, 0x00000000, 0x00 },
Linus Torvalds1da177e2005-04-16 15:20:36 -070072 /* OGF_LINK_POLICY */
Marcel Holtmann7c631a62007-09-09 08:39:43 +020073 { 0x00005200, 0x00000000, 0x00000000, 0x00 },
Linus Torvalds1da177e2005-04-16 15:20:36 -070074 /* OGF_HOST_CTL */
Marcel Holtmann7c631a62007-09-09 08:39:43 +020075 { 0xaab00200, 0x2b402aaa, 0x05220154, 0x00 },
Linus Torvalds1da177e2005-04-16 15:20:36 -070076 /* OGF_INFO_PARAM */
Marcel Holtmann7c631a62007-09-09 08:39:43 +020077 { 0x000002be, 0x00000000, 0x00000000, 0x00 },
Linus Torvalds1da177e2005-04-16 15:20:36 -070078 /* OGF_STATUS_PARAM */
Marcel Holtmann7c631a62007-09-09 08:39:43 +020079 { 0x000000ea, 0x00000000, 0x00000000, 0x00 }
Linus Torvalds1da177e2005-04-16 15:20:36 -070080 }
81};
82
83static struct bt_sock_list hci_sk_list = {
Robert P. J. Dayd5fb2962008-03-28 16:17:38 -070084 .lock = __RW_LOCK_UNLOCKED(hci_sk_list.lock)
Linus Torvalds1da177e2005-04-16 15:20:36 -070085};
86
87/* Send frame to RAW socket */
Johan Hedbergeec8d2b2010-12-16 10:17:38 +020088void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb,
89 struct sock *skip_sk)
Linus Torvalds1da177e2005-04-16 15:20:36 -070090{
91 struct sock *sk;
92 struct hlist_node *node;
93
94 BT_DBG("hdev %p len %d", hdev, skb->len);
95
96 read_lock(&hci_sk_list.lock);
97 sk_for_each(sk, node, &hci_sk_list.head) {
98 struct hci_filter *flt;
99 struct sk_buff *nskb;
100
Johan Hedbergeec8d2b2010-12-16 10:17:38 +0200101 if (sk == skip_sk)
102 continue;
103
Linus Torvalds1da177e2005-04-16 15:20:36 -0700104 if (sk->sk_state != BT_BOUND || hci_pi(sk)->hdev != hdev)
105 continue;
106
107 /* Don't send frame to the socket it came from */
108 if (skb->sk == sk)
109 continue;
110
Johan Hedberga40c4062010-12-08 00:21:07 +0200111 if (bt_cb(skb)->channel != hci_pi(sk)->channel)
112 continue;
113
114 if (bt_cb(skb)->channel == HCI_CHANNEL_CONTROL)
115 goto clone;
116
Linus Torvalds1da177e2005-04-16 15:20:36 -0700117 /* Apply filter */
118 flt = &hci_pi(sk)->filter;
119
Marcel Holtmann0d48d932005-08-09 20:30:28 -0700120 if (!test_bit((bt_cb(skb)->pkt_type == HCI_VENDOR_PKT) ?
121 0 : (bt_cb(skb)->pkt_type & HCI_FLT_TYPE_BITS), &flt->type_mask))
Linus Torvalds1da177e2005-04-16 15:20:36 -0700122 continue;
123
Marcel Holtmann0d48d932005-08-09 20:30:28 -0700124 if (bt_cb(skb)->pkt_type == HCI_EVENT_PKT) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700125 register int evt = (*(__u8 *)skb->data & HCI_FLT_EVENT_BITS);
126
127 if (!hci_test_bit(evt, &flt->event_mask))
128 continue;
129
David S. Miller4498c802006-11-21 16:17:41 -0800130 if (flt->opcode &&
131 ((evt == HCI_EV_CMD_COMPLETE &&
132 flt->opcode !=
Al Viro905f3ed2006-12-13 00:35:01 -0800133 get_unaligned((__le16 *)(skb->data + 3))) ||
David S. Miller4498c802006-11-21 16:17:41 -0800134 (evt == HCI_EV_CMD_STATUS &&
135 flt->opcode !=
Al Viro905f3ed2006-12-13 00:35:01 -0800136 get_unaligned((__le16 *)(skb->data + 4)))))
Linus Torvalds1da177e2005-04-16 15:20:36 -0700137 continue;
138 }
139
Johan Hedberga40c4062010-12-08 00:21:07 +0200140clone:
Andrei Emeltchenko70f230202010-12-01 16:58:25 +0200141 nskb = skb_clone(skb, GFP_ATOMIC);
142 if (!nskb)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700143 continue;
144
145 /* Put type byte before the data */
Johan Hedberga40c4062010-12-08 00:21:07 +0200146 if (bt_cb(skb)->channel == HCI_CHANNEL_RAW)
147 memcpy(skb_push(nskb, 1), &bt_cb(nskb)->pkt_type, 1);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700148
149 if (sock_queue_rcv_skb(sk, nskb))
150 kfree_skb(nskb);
151 }
152 read_unlock(&hci_sk_list.lock);
153}
154
155static int hci_sock_release(struct socket *sock)
156{
157 struct sock *sk = sock->sk;
Marcel Holtmann7b005bd2006-02-13 11:40:03 +0100158 struct hci_dev *hdev;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700159
160 BT_DBG("sock %p sk %p", sock, sk);
161
162 if (!sk)
163 return 0;
164
Marcel Holtmann7b005bd2006-02-13 11:40:03 +0100165 hdev = hci_pi(sk)->hdev;
166
Linus Torvalds1da177e2005-04-16 15:20:36 -0700167 bt_sock_unlink(&hci_sk_list, sk);
168
169 if (hdev) {
170 atomic_dec(&hdev->promisc);
171 hci_dev_put(hdev);
172 }
173
174 sock_orphan(sk);
175
176 skb_queue_purge(&sk->sk_receive_queue);
177 skb_queue_purge(&sk->sk_write_queue);
178
179 sock_put(sk);
180 return 0;
181}
182
Antti Julkub2a66aa2011-06-15 12:01:14 +0300183static int hci_sock_blacklist_add(struct hci_dev *hdev, void __user *arg)
Johan Hedbergf0358562010-05-18 13:20:32 +0200184{
185 bdaddr_t bdaddr;
Antti Julku5e762442011-08-25 16:48:02 +0300186 int err;
Johan Hedbergf0358562010-05-18 13:20:32 +0200187
188 if (copy_from_user(&bdaddr, arg, sizeof(bdaddr)))
189 return -EFAULT;
190
Gustavo F. Padovan09fd0de2011-06-17 13:03:21 -0300191 hci_dev_lock(hdev);
Antti Julku5e762442011-08-25 16:48:02 +0300192
193 err = hci_blacklist_add(hdev, &bdaddr);
194
Gustavo F. Padovan09fd0de2011-06-17 13:03:21 -0300195 hci_dev_unlock(hdev);
Antti Julku5e762442011-08-25 16:48:02 +0300196
197 return err;
Johan Hedbergf0358562010-05-18 13:20:32 +0200198}
199
Antti Julkub2a66aa2011-06-15 12:01:14 +0300200static int hci_sock_blacklist_del(struct hci_dev *hdev, void __user *arg)
Johan Hedbergf0358562010-05-18 13:20:32 +0200201{
202 bdaddr_t bdaddr;
Antti Julku5e762442011-08-25 16:48:02 +0300203 int err;
Johan Hedbergf0358562010-05-18 13:20:32 +0200204
205 if (copy_from_user(&bdaddr, arg, sizeof(bdaddr)))
206 return -EFAULT;
207
Gustavo F. Padovan09fd0de2011-06-17 13:03:21 -0300208 hci_dev_lock(hdev);
Antti Julku5e762442011-08-25 16:48:02 +0300209
210 err = hci_blacklist_del(hdev, &bdaddr);
211
Gustavo F. Padovan09fd0de2011-06-17 13:03:21 -0300212 hci_dev_unlock(hdev);
Antti Julku5e762442011-08-25 16:48:02 +0300213
214 return err;
Johan Hedbergf0358562010-05-18 13:20:32 +0200215}
216
YOSHIFUJI Hideaki8e87d142007-02-09 23:24:33 +0900217/* Ioctls that require bound socket */
Linus Torvalds1da177e2005-04-16 15:20:36 -0700218static inline int hci_sock_bound_ioctl(struct sock *sk, unsigned int cmd, unsigned long arg)
219{
220 struct hci_dev *hdev = hci_pi(sk)->hdev;
221
222 if (!hdev)
223 return -EBADFD;
224
225 switch (cmd) {
226 case HCISETRAW:
227 if (!capable(CAP_NET_ADMIN))
228 return -EACCES;
229
230 if (test_bit(HCI_QUIRK_RAW_DEVICE, &hdev->quirks))
231 return -EPERM;
232
233 if (arg)
234 set_bit(HCI_RAW, &hdev->flags);
235 else
236 clear_bit(HCI_RAW, &hdev->flags);
237
238 return 0;
239
Linus Torvalds1da177e2005-04-16 15:20:36 -0700240 case HCIGETCONNINFO:
Marcel Holtmann40be4922008-07-14 20:13:50 +0200241 return hci_get_conn_info(hdev, (void __user *) arg);
242
243 case HCIGETAUTHINFO:
244 return hci_get_auth_info(hdev, (void __user *) arg);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700245
Johan Hedbergf0358562010-05-18 13:20:32 +0200246 case HCIBLOCKADDR:
247 if (!capable(CAP_NET_ADMIN))
248 return -EACCES;
Antti Julkub2a66aa2011-06-15 12:01:14 +0300249 return hci_sock_blacklist_add(hdev, (void __user *) arg);
Johan Hedbergf0358562010-05-18 13:20:32 +0200250
251 case HCIUNBLOCKADDR:
252 if (!capable(CAP_NET_ADMIN))
253 return -EACCES;
Antti Julkub2a66aa2011-06-15 12:01:14 +0300254 return hci_sock_blacklist_del(hdev, (void __user *) arg);
Johan Hedbergf0358562010-05-18 13:20:32 +0200255
Linus Torvalds1da177e2005-04-16 15:20:36 -0700256 default:
257 if (hdev->ioctl)
258 return hdev->ioctl(hdev, cmd, arg);
259 return -EINVAL;
260 }
261}
262
263static int hci_sock_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
264{
265 struct sock *sk = sock->sk;
Marcel Holtmann40be4922008-07-14 20:13:50 +0200266 void __user *argp = (void __user *) arg;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700267 int err;
268
269 BT_DBG("cmd %x arg %lx", cmd, arg);
270
271 switch (cmd) {
272 case HCIGETDEVLIST:
273 return hci_get_dev_list(argp);
274
275 case HCIGETDEVINFO:
276 return hci_get_dev_info(argp);
277
278 case HCIGETCONNLIST:
279 return hci_get_conn_list(argp);
280
281 case HCIDEVUP:
282 if (!capable(CAP_NET_ADMIN))
283 return -EACCES;
284 return hci_dev_open(arg);
285
286 case HCIDEVDOWN:
287 if (!capable(CAP_NET_ADMIN))
288 return -EACCES;
289 return hci_dev_close(arg);
290
291 case HCIDEVRESET:
292 if (!capable(CAP_NET_ADMIN))
293 return -EACCES;
294 return hci_dev_reset(arg);
295
296 case HCIDEVRESTAT:
297 if (!capable(CAP_NET_ADMIN))
298 return -EACCES;
299 return hci_dev_reset_stat(arg);
300
301 case HCISETSCAN:
302 case HCISETAUTH:
303 case HCISETENCRYPT:
304 case HCISETPTYPE:
305 case HCISETLINKPOL:
306 case HCISETLINKMODE:
307 case HCISETACLMTU:
308 case HCISETSCOMTU:
309 if (!capable(CAP_NET_ADMIN))
310 return -EACCES;
311 return hci_dev_cmd(cmd, argp);
312
313 case HCIINQUIRY:
314 return hci_inquiry(argp);
315
316 default:
317 lock_sock(sk);
318 err = hci_sock_bound_ioctl(sk, cmd, arg);
319 release_sock(sk);
320 return err;
321 }
322}
323
324static int hci_sock_bind(struct socket *sock, struct sockaddr *addr, int addr_len)
325{
Johan Hedberg03811012010-12-08 00:21:06 +0200326 struct sockaddr_hci haddr;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700327 struct sock *sk = sock->sk;
328 struct hci_dev *hdev = NULL;
Johan Hedberg03811012010-12-08 00:21:06 +0200329 int len, err = 0;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700330
331 BT_DBG("sock %p sk %p", sock, sk);
332
Johan Hedberg03811012010-12-08 00:21:06 +0200333 if (!addr)
334 return -EINVAL;
335
336 memset(&haddr, 0, sizeof(haddr));
337 len = min_t(unsigned int, sizeof(haddr), addr_len);
338 memcpy(&haddr, addr, len);
339
340 if (haddr.hci_family != AF_BLUETOOTH)
341 return -EINVAL;
342
Gustavo F. Padovan17f9cc32010-12-22 23:00:34 -0200343 if (haddr.hci_channel > HCI_CHANNEL_CONTROL)
344 return -EINVAL;
345
Johan Hedberg14c0b602011-12-15 00:47:37 +0200346 if (haddr.hci_channel == HCI_CHANNEL_CONTROL) {
347 if (!enable_mgmt)
348 return -EINVAL;
349 set_bit(HCI_PI_MGMT_INIT, &hci_pi(sk)->flags);
350 }
Linus Torvalds1da177e2005-04-16 15:20:36 -0700351
352 lock_sock(sk);
353
Johan Hedberg03811012010-12-08 00:21:06 +0200354 if (sk->sk_state == BT_BOUND || hci_pi(sk)->hdev) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700355 err = -EALREADY;
356 goto done;
357 }
358
Johan Hedberg03811012010-12-08 00:21:06 +0200359 if (haddr.hci_dev != HCI_DEV_NONE) {
360 hdev = hci_dev_get(haddr.hci_dev);
Andrei Emeltchenko70f230202010-12-01 16:58:25 +0200361 if (!hdev) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700362 err = -ENODEV;
363 goto done;
364 }
365
366 atomic_inc(&hdev->promisc);
367 }
368
Johan Hedberg03811012010-12-08 00:21:06 +0200369 hci_pi(sk)->channel = haddr.hci_channel;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700370 hci_pi(sk)->hdev = hdev;
371 sk->sk_state = BT_BOUND;
372
373done:
374 release_sock(sk);
375 return err;
376}
377
378static int hci_sock_getname(struct socket *sock, struct sockaddr *addr, int *addr_len, int peer)
379{
380 struct sockaddr_hci *haddr = (struct sockaddr_hci *) addr;
381 struct sock *sk = sock->sk;
Marcel Holtmann7b005bd2006-02-13 11:40:03 +0100382 struct hci_dev *hdev = hci_pi(sk)->hdev;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700383
384 BT_DBG("sock %p sk %p", sock, sk);
385
Marcel Holtmann7b005bd2006-02-13 11:40:03 +0100386 if (!hdev)
387 return -EBADFD;
388
Linus Torvalds1da177e2005-04-16 15:20:36 -0700389 lock_sock(sk);
390
391 *addr_len = sizeof(*haddr);
392 haddr->hci_family = AF_BLUETOOTH;
Marcel Holtmann7b005bd2006-02-13 11:40:03 +0100393 haddr->hci_dev = hdev->id;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700394
395 release_sock(sk);
396 return 0;
397}
398
399static inline void hci_sock_cmsg(struct sock *sk, struct msghdr *msg, struct sk_buff *skb)
400{
401 __u32 mask = hci_pi(sk)->cmsg_mask;
402
Marcel Holtmann0d48d932005-08-09 20:30:28 -0700403 if (mask & HCI_CMSG_DIR) {
404 int incoming = bt_cb(skb)->incoming;
405 put_cmsg(msg, SOL_HCI, HCI_CMSG_DIR, sizeof(incoming), &incoming);
406 }
Linus Torvalds1da177e2005-04-16 15:20:36 -0700407
Patrick McHardya61bbcf2005-08-14 17:24:31 -0700408 if (mask & HCI_CMSG_TSTAMP) {
Johann Felix Sodenf6e623a2010-02-15 22:23:48 +0100409#ifdef CONFIG_COMPAT
410 struct compat_timeval ctv;
411#endif
Patrick McHardya61bbcf2005-08-14 17:24:31 -0700412 struct timeval tv;
Marcel Holtmann767c5eb2007-09-09 08:39:34 +0200413 void *data;
414 int len;
Patrick McHardya61bbcf2005-08-14 17:24:31 -0700415
416 skb_get_timestamp(skb, &tv);
Marcel Holtmann767c5eb2007-09-09 08:39:34 +0200417
David S. Miller1da97f82007-09-12 14:10:58 +0200418 data = &tv;
419 len = sizeof(tv);
420#ifdef CONFIG_COMPAT
H. J. Luda88cea2012-02-10 14:12:15 -0800421 if (!COMPAT_USE_64BIT_TIME &&
422 (msg->msg_flags & MSG_CMSG_COMPAT)) {
Marcel Holtmann767c5eb2007-09-09 08:39:34 +0200423 ctv.tv_sec = tv.tv_sec;
424 ctv.tv_usec = tv.tv_usec;
425 data = &ctv;
426 len = sizeof(ctv);
Marcel Holtmann767c5eb2007-09-09 08:39:34 +0200427 }
David S. Miller1da97f82007-09-12 14:10:58 +0200428#endif
Marcel Holtmann767c5eb2007-09-09 08:39:34 +0200429
430 put_cmsg(msg, SOL_HCI, HCI_CMSG_TSTAMP, len, data);
Patrick McHardya61bbcf2005-08-14 17:24:31 -0700431 }
Linus Torvalds1da177e2005-04-16 15:20:36 -0700432}
YOSHIFUJI Hideaki8e87d142007-02-09 23:24:33 +0900433
434static int hci_sock_recvmsg(struct kiocb *iocb, struct socket *sock,
Linus Torvalds1da177e2005-04-16 15:20:36 -0700435 struct msghdr *msg, size_t len, int flags)
436{
437 int noblock = flags & MSG_DONTWAIT;
438 struct sock *sk = sock->sk;
439 struct sk_buff *skb;
440 int copied, err;
441
442 BT_DBG("sock %p, sk %p", sock, sk);
443
444 if (flags & (MSG_OOB))
445 return -EOPNOTSUPP;
446
447 if (sk->sk_state == BT_CLOSED)
448 return 0;
449
Andrei Emeltchenko70f230202010-12-01 16:58:25 +0200450 skb = skb_recv_datagram(sk, flags, noblock, &err);
451 if (!skb)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700452 return err;
453
454 msg->msg_namelen = 0;
455
456 copied = skb->len;
457 if (len < copied) {
458 msg->msg_flags |= MSG_TRUNC;
459 copied = len;
460 }
461
Arnaldo Carvalho de Melobadff6d2007-03-13 13:06:52 -0300462 skb_reset_transport_header(skb);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700463 err = skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied);
464
465 hci_sock_cmsg(sk, msg, skb);
466
467 skb_free_datagram(sk, skb);
468
469 return err ? : copied;
470}
471
YOSHIFUJI Hideaki8e87d142007-02-09 23:24:33 +0900472static int hci_sock_sendmsg(struct kiocb *iocb, struct socket *sock,
Linus Torvalds1da177e2005-04-16 15:20:36 -0700473 struct msghdr *msg, size_t len)
474{
475 struct sock *sk = sock->sk;
476 struct hci_dev *hdev;
477 struct sk_buff *skb;
478 int err;
479
480 BT_DBG("sock %p sk %p", sock, sk);
481
482 if (msg->msg_flags & MSG_OOB)
483 return -EOPNOTSUPP;
484
485 if (msg->msg_flags & ~(MSG_DONTWAIT|MSG_NOSIGNAL|MSG_ERRQUEUE))
486 return -EINVAL;
487
488 if (len < 4 || len > HCI_MAX_FRAME_SIZE)
489 return -EINVAL;
490
491 lock_sock(sk);
492
Johan Hedberg03811012010-12-08 00:21:06 +0200493 switch (hci_pi(sk)->channel) {
494 case HCI_CHANNEL_RAW:
495 break;
496 case HCI_CHANNEL_CONTROL:
497 err = mgmt_control(sk, msg, len);
498 goto done;
499 default:
500 err = -EINVAL;
501 goto done;
502 }
503
Andrei Emeltchenko70f230202010-12-01 16:58:25 +0200504 hdev = hci_pi(sk)->hdev;
505 if (!hdev) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700506 err = -EBADFD;
507 goto done;
508 }
509
Marcel Holtmann7e21add2009-11-18 01:05:00 +0100510 if (!test_bit(HCI_UP, &hdev->flags)) {
511 err = -ENETDOWN;
512 goto done;
513 }
514
Andrei Emeltchenko70f230202010-12-01 16:58:25 +0200515 skb = bt_skb_send_alloc(sk, len, msg->msg_flags & MSG_DONTWAIT, &err);
516 if (!skb)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700517 goto done;
518
519 if (memcpy_fromiovec(skb_put(skb, len), msg->msg_iov, len)) {
520 err = -EFAULT;
521 goto drop;
522 }
523
Marcel Holtmann0d48d932005-08-09 20:30:28 -0700524 bt_cb(skb)->pkt_type = *((unsigned char *) skb->data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700525 skb_pull(skb, 1);
526 skb->dev = (void *) hdev;
527
Marcel Holtmann0d48d932005-08-09 20:30:28 -0700528 if (bt_cb(skb)->pkt_type == HCI_COMMAND_PKT) {
Harvey Harrison83985312008-05-02 16:25:46 -0700529 u16 opcode = get_unaligned_le16(skb->data);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700530 u16 ogf = hci_opcode_ogf(opcode);
531 u16 ocf = hci_opcode_ocf(opcode);
532
533 if (((ogf > HCI_SFLT_MAX_OGF) ||
534 !hci_test_bit(ocf & HCI_FLT_OCF_BITS, &hci_sec_filter.ocf_mask[ogf])) &&
535 !capable(CAP_NET_RAW)) {
536 err = -EPERM;
537 goto drop;
538 }
539
Marcel Holtmanna9de9242007-10-20 13:33:56 +0200540 if (test_bit(HCI_RAW, &hdev->flags) || (ogf == 0x3f)) {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700541 skb_queue_tail(&hdev->raw_q, skb);
Gustavo F. Padovan3eff45e2011-12-15 00:50:02 -0200542 queue_work(hdev->workqueue, &hdev->tx_work);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700543 } else {
544 skb_queue_tail(&hdev->cmd_q, skb);
Gustavo F. Padovanc347b762011-12-14 23:53:47 -0200545 queue_work(hdev->workqueue, &hdev->cmd_work);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700546 }
547 } else {
548 if (!capable(CAP_NET_RAW)) {
549 err = -EPERM;
550 goto drop;
551 }
552
553 skb_queue_tail(&hdev->raw_q, skb);
Gustavo F. Padovan3eff45e2011-12-15 00:50:02 -0200554 queue_work(hdev->workqueue, &hdev->tx_work);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700555 }
556
557 err = len;
558
559done:
560 release_sock(sk);
561 return err;
562
563drop:
564 kfree_skb(skb);
565 goto done;
566}
567
David S. Millerb7058842009-09-30 16:12:20 -0700568static int hci_sock_setsockopt(struct socket *sock, int level, int optname, char __user *optval, unsigned int len)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700569{
570 struct hci_ufilter uf = { .opcode = 0 };
571 struct sock *sk = sock->sk;
572 int err = 0, opt = 0;
573
574 BT_DBG("sk %p, opt %d", sk, optname);
575
576 lock_sock(sk);
577
578 switch (optname) {
579 case HCI_DATA_DIR:
580 if (get_user(opt, (int __user *)optval)) {
581 err = -EFAULT;
582 break;
583 }
584
585 if (opt)
586 hci_pi(sk)->cmsg_mask |= HCI_CMSG_DIR;
587 else
588 hci_pi(sk)->cmsg_mask &= ~HCI_CMSG_DIR;
589 break;
590
591 case HCI_TIME_STAMP:
592 if (get_user(opt, (int __user *)optval)) {
593 err = -EFAULT;
594 break;
595 }
596
597 if (opt)
598 hci_pi(sk)->cmsg_mask |= HCI_CMSG_TSTAMP;
599 else
600 hci_pi(sk)->cmsg_mask &= ~HCI_CMSG_TSTAMP;
601 break;
602
603 case HCI_FILTER:
Marcel Holtmann0878b662007-05-05 00:35:59 +0200604 {
605 struct hci_filter *f = &hci_pi(sk)->filter;
606
607 uf.type_mask = f->type_mask;
608 uf.opcode = f->opcode;
609 uf.event_mask[0] = *((u32 *) f->event_mask + 0);
610 uf.event_mask[1] = *((u32 *) f->event_mask + 1);
611 }
612
Linus Torvalds1da177e2005-04-16 15:20:36 -0700613 len = min_t(unsigned int, len, sizeof(uf));
614 if (copy_from_user(&uf, optval, len)) {
615 err = -EFAULT;
616 break;
617 }
618
619 if (!capable(CAP_NET_RAW)) {
620 uf.type_mask &= hci_sec_filter.type_mask;
621 uf.event_mask[0] &= *((u32 *) hci_sec_filter.event_mask + 0);
622 uf.event_mask[1] &= *((u32 *) hci_sec_filter.event_mask + 1);
623 }
624
625 {
626 struct hci_filter *f = &hci_pi(sk)->filter;
627
628 f->type_mask = uf.type_mask;
629 f->opcode = uf.opcode;
630 *((u32 *) f->event_mask + 0) = uf.event_mask[0];
631 *((u32 *) f->event_mask + 1) = uf.event_mask[1];
632 }
YOSHIFUJI Hideaki8e87d142007-02-09 23:24:33 +0900633 break;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700634
635 default:
636 err = -ENOPROTOOPT;
637 break;
638 }
639
640 release_sock(sk);
641 return err;
642}
643
644static int hci_sock_getsockopt(struct socket *sock, int level, int optname, char __user *optval, int __user *optlen)
645{
646 struct hci_ufilter uf;
647 struct sock *sk = sock->sk;
YOSHIFUJI Hideaki8e87d142007-02-09 23:24:33 +0900648 int len, opt;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700649
650 if (get_user(len, optlen))
651 return -EFAULT;
652
653 switch (optname) {
654 case HCI_DATA_DIR:
655 if (hci_pi(sk)->cmsg_mask & HCI_CMSG_DIR)
656 opt = 1;
YOSHIFUJI Hideaki8e87d142007-02-09 23:24:33 +0900657 else
Linus Torvalds1da177e2005-04-16 15:20:36 -0700658 opt = 0;
659
660 if (put_user(opt, optval))
661 return -EFAULT;
662 break;
663
664 case HCI_TIME_STAMP:
665 if (hci_pi(sk)->cmsg_mask & HCI_CMSG_TSTAMP)
666 opt = 1;
YOSHIFUJI Hideaki8e87d142007-02-09 23:24:33 +0900667 else
Linus Torvalds1da177e2005-04-16 15:20:36 -0700668 opt = 0;
669
670 if (put_user(opt, optval))
671 return -EFAULT;
672 break;
673
674 case HCI_FILTER:
675 {
676 struct hci_filter *f = &hci_pi(sk)->filter;
677
678 uf.type_mask = f->type_mask;
679 uf.opcode = f->opcode;
680 uf.event_mask[0] = *((u32 *) f->event_mask + 0);
681 uf.event_mask[1] = *((u32 *) f->event_mask + 1);
682 }
683
684 len = min_t(unsigned int, len, sizeof(uf));
685 if (copy_to_user(optval, &uf, len))
686 return -EFAULT;
687 break;
688
689 default:
690 return -ENOPROTOOPT;
691 break;
692 }
693
694 return 0;
695}
696
Eric Dumazet90ddc4f2005-12-22 12:49:22 -0800697static const struct proto_ops hci_sock_ops = {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700698 .family = PF_BLUETOOTH,
699 .owner = THIS_MODULE,
700 .release = hci_sock_release,
701 .bind = hci_sock_bind,
702 .getname = hci_sock_getname,
703 .sendmsg = hci_sock_sendmsg,
704 .recvmsg = hci_sock_recvmsg,
705 .ioctl = hci_sock_ioctl,
706 .poll = datagram_poll,
707 .listen = sock_no_listen,
708 .shutdown = sock_no_shutdown,
709 .setsockopt = hci_sock_setsockopt,
710 .getsockopt = hci_sock_getsockopt,
711 .connect = sock_no_connect,
712 .socketpair = sock_no_socketpair,
713 .accept = sock_no_accept,
714 .mmap = sock_no_mmap
715};
716
717static struct proto hci_sk_proto = {
718 .name = "HCI",
719 .owner = THIS_MODULE,
720 .obj_size = sizeof(struct hci_pinfo)
721};
722
Eric Paris3f378b62009-11-05 22:18:14 -0800723static int hci_sock_create(struct net *net, struct socket *sock, int protocol,
724 int kern)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700725{
726 struct sock *sk;
727
728 BT_DBG("sock %p", sock);
729
730 if (sock->type != SOCK_RAW)
731 return -ESOCKTNOSUPPORT;
732
733 sock->ops = &hci_sock_ops;
734
Pavel Emelyanov6257ff22007-11-01 00:39:31 -0700735 sk = sk_alloc(net, PF_BLUETOOTH, GFP_ATOMIC, &hci_sk_proto);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700736 if (!sk)
737 return -ENOMEM;
738
739 sock_init_data(sock, sk);
740
741 sock_reset_flag(sk, SOCK_ZAPPED);
742
743 sk->sk_protocol = protocol;
744
745 sock->state = SS_UNCONNECTED;
746 sk->sk_state = BT_OPEN;
747
748 bt_sock_link(&hci_sk_list, sk);
749 return 0;
750}
751
752static int hci_sock_dev_event(struct notifier_block *this, unsigned long event, void *ptr)
753{
754 struct hci_dev *hdev = (struct hci_dev *) ptr;
755 struct hci_ev_si_device ev;
756
757 BT_DBG("hdev %s event %ld", hdev->name, event);
758
759 /* Send event to sockets */
760 ev.event = event;
761 ev.dev_id = hdev->id;
762 hci_si_event(NULL, HCI_EV_SI_DEVICE, sizeof(ev), &ev);
763
764 if (event == HCI_DEV_UNREG) {
765 struct sock *sk;
766 struct hlist_node *node;
767
768 /* Detach sockets from device */
769 read_lock(&hci_sk_list.lock);
770 sk_for_each(sk, node, &hci_sk_list.head) {
Satyam Sharma4ce61d12007-05-16 23:50:16 -0700771 bh_lock_sock_nested(sk);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700772 if (hci_pi(sk)->hdev == hdev) {
773 hci_pi(sk)->hdev = NULL;
774 sk->sk_err = EPIPE;
775 sk->sk_state = BT_OPEN;
776 sk->sk_state_change(sk);
777
778 hci_dev_put(hdev);
779 }
Satyam Sharma4ce61d12007-05-16 23:50:16 -0700780 bh_unlock_sock(sk);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700781 }
782 read_unlock(&hci_sk_list.lock);
783 }
784
785 return NOTIFY_DONE;
786}
787
Stephen Hemmingerec1b4cf2009-10-05 05:58:39 +0000788static const struct net_proto_family hci_sock_family_ops = {
Linus Torvalds1da177e2005-04-16 15:20:36 -0700789 .family = PF_BLUETOOTH,
790 .owner = THIS_MODULE,
791 .create = hci_sock_create,
792};
793
794static struct notifier_block hci_sock_nblock = {
795 .notifier_call = hci_sock_dev_event
796};
797
798int __init hci_sock_init(void)
799{
800 int err;
801
802 err = proto_register(&hci_sk_proto, 0);
803 if (err < 0)
804 return err;
805
806 err = bt_sock_register(BTPROTO_HCI, &hci_sock_family_ops);
807 if (err < 0)
808 goto error;
809
810 hci_register_notifier(&hci_sock_nblock);
811
812 BT_INFO("HCI socket layer initialized");
813
814 return 0;
815
816error:
817 BT_ERR("HCI socket registration failed");
818 proto_unregister(&hci_sk_proto);
819 return err;
820}
821
Anand Gadiyarb7440a142011-02-22 12:43:09 +0530822void hci_sock_cleanup(void)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700823{
824 if (bt_sock_unregister(BTPROTO_HCI) < 0)
825 BT_ERR("HCI socket unregistration failed");
826
827 hci_unregister_notifier(&hci_sock_nblock);
828
829 proto_unregister(&hci_sk_proto);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700830}
Johan Hedberg03811012010-12-08 00:21:06 +0200831
832module_param(enable_mgmt, bool, 0644);
833MODULE_PARM_DESC(enable_mgmt, "Enable Management interface");