projects / GitHub / mt8127 / android_kernel_alcatel_ttab.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
Bluetooth: clean up sco code
[GitHub/mt8127/android_kernel_alcatel_ttab.git] / net / bluetooth / rfcomm / sock.c
CommitLineData
8e87d142 1/*
1da177e4
LT		 2 RFCOMM implementation for Linux Bluetooth stack (BlueZ).
3 Copyright (C) 2002 Maxim Krasnyansky <maxk@qualcomm.com>
4 Copyright (C) 2002 Marcel Holtmann <marcel@holtmann.org>
5
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License version 2 as
8 published by the Free Software Foundation;
9
10 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
11 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
12 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
13 IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
8e87d142
YH		 14 CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
15 WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
16 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
1da177e4
LT		 17 OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
18
8e87d142
YH		 19 ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
20 COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
1da177e4
LT		 21 SOFTWARE IS DISCLAIMED.
22*/
23
24/*
25 * RFCOMM sockets.
1da177e4
LT		 26 */
27
1da177e4
LT		 28#include <linux/module.h>
29
30#include <linux/types.h>
31#include <linux/errno.h>
32#include <linux/kernel.h>
1da177e4
LT		 33#include <linux/sched.h>
34#include <linux/slab.h>
35#include <linux/poll.h>
36#include <linux/fcntl.h>
37#include <linux/init.h>
38#include <linux/interrupt.h>
39#include <linux/socket.h>
40#include <linux/skbuff.h>
41#include <linux/list.h>
be9d1227 42#include <linux/device.h>
aef7d97c
MH		 43#include <linux/debugfs.h>
44#include <linux/seq_file.h>
1da177e4
LT		 45#include <net/sock.h>
46
47#include <asm/system.h>
48#include <asm/uaccess.h>
49
50#include <net/bluetooth/bluetooth.h>
51#include <net/bluetooth/hci_core.h>
52#include <net/bluetooth/l2cap.h>
53#include <net/bluetooth/rfcomm.h>
54
90ddc4f0 55static const struct proto_ops rfcomm_sock_ops;
1da177e4
LT		 56
57static struct bt_sock_list rfcomm_sk_list = {
d5fb2962 58 .lock = __RW_LOCK_UNLOCKED(rfcomm_sk_list.lock)
1da177e4
LT		 59};
60
61static void rfcomm_sock_close(struct sock *sk);
62static void rfcomm_sock_kill(struct sock *sk);
63
64/* ---- DLC callbacks ----
65 *
66 * called under rfcomm_dlc_lock()
67 */
68static void rfcomm_sk_data_ready(struct rfcomm_dlc *d, struct sk_buff *skb)
69{
70 struct sock *sk = d->owner;
71 if (!sk)
72 return;
73
74 atomic_add(skb->len, &sk->sk_rmem_alloc);
75 skb_queue_tail(&sk->sk_receive_queue, skb);
76 sk->sk_data_ready(sk, skb->len);
77
78 if (atomic_read(&sk->sk_rmem_alloc) >= sk->sk_rcvbuf)
79 rfcomm_dlc_throttle(d);
80}
81
82static void rfcomm_sk_state_change(struct rfcomm_dlc *d, int err)
83{
84 struct sock *sk = d->owner, *parent;
fad003b6
GP		 85 unsigned long flags;
86
1da177e4
LT		 87 if (!sk)
88 return;
89
90 BT_DBG("dlc %p state %ld err %d", d, d->state, err);
91
fad003b6 92 local_irq_save(flags);
1da177e4
LT		 93 bh_lock_sock(sk);
94
95 if (err)
96 sk->sk_err = err;
97
98 sk->sk_state = d->state;
99
100 parent = bt_sk(sk)->parent;
101 if (parent) {
102 if (d->state == BT_CLOSED) {
103 sock_set_flag(sk, SOCK_ZAPPED);
104 bt_accept_unlink(sk);
105 }
106 parent->sk_data_ready(parent, 0);
107 } else {
108 if (d->state == BT_CONNECTED)
109 rfcomm_session_getaddr(d->session, &bt_sk(sk)->src, NULL);
110 sk->sk_state_change(sk);
111 }
112
113 bh_unlock_sock(sk);
fad003b6 114 local_irq_restore(flags);
1da177e4
LT		 115
116 if (parent && sock_flag(sk, SOCK_ZAPPED)) {
117 /* We have to drop DLC lock here, otherwise
118 * rfcomm_sock_destruct() will dead lock. */
119 rfcomm_dlc_unlock(d);
120 rfcomm_sock_kill(sk);
121 rfcomm_dlc_lock(d);
122 }
123}
124
125/* ---- Socket functions ---- */
126static struct sock *__rfcomm_get_sock_by_addr(u8 channel, bdaddr_t *src)
127{
128 struct sock *sk = NULL;
129 struct hlist_node *node;
130
131 sk_for_each(sk, node, &rfcomm_sk_list.head) {
8e87d142 132 if (rfcomm_pi(sk)->channel == channel &&
1da177e4
LT		 133 !bacmp(&bt_sk(sk)->src, src))
134 break;
135 }
136
137 return node ? sk : NULL;
138}
139
140/* Find socket with channel and source bdaddr.
141 * Returns closest match.
142 */
eeb36656 143static struct sock *rfcomm_get_sock_by_channel(int state, u8 channel, bdaddr_t *src)
1da177e4
LT		 144{
145 struct sock *sk = NULL, *sk1 = NULL;
146 struct hlist_node *node;
147
eeb36656
GP		 148 read_lock(&rfcomm_sk_list.lock);
149
1da177e4
LT		 150 sk_for_each(sk, node, &rfcomm_sk_list.head) {
151 if (state && sk->sk_state != state)
152 continue;
153
154 if (rfcomm_pi(sk)->channel == channel) {
155 /* Exact match. */
156 if (!bacmp(&bt_sk(sk)->src, src))
157 break;
158
159 /* Closest match */
160 if (!bacmp(&bt_sk(sk)->src, BDADDR_ANY))
161 sk1 = sk;
162 }
163 }
1da177e4 164
1da177e4 165 read_unlock(&rfcomm_sk_list.lock);
eeb36656
GP		 166
167 return node ? sk : sk1;
1da177e4
LT		 168}
169
170static void rfcomm_sock_destruct(struct sock *sk)
171{
172 struct rfcomm_dlc *d = rfcomm_pi(sk)->dlc;
173
174 BT_DBG("sk %p dlc %p", sk, d);
175
176 skb_queue_purge(&sk->sk_receive_queue);
177 skb_queue_purge(&sk->sk_write_queue);
178
179 rfcomm_dlc_lock(d);
180 rfcomm_pi(sk)->dlc = NULL;
181
182 /* Detach DLC if it's owned by this socket */
183 if (d->owner == sk)
184 d->owner = NULL;
185 rfcomm_dlc_unlock(d);
186
187 rfcomm_dlc_put(d);
188}
189
190static void rfcomm_sock_cleanup_listen(struct sock *parent)
191{
192 struct sock *sk;
193
194 BT_DBG("parent %p", parent);
195
196 /* Close not yet accepted dlcs */
197 while ((sk = bt_accept_dequeue(parent, NULL))) {
198 rfcomm_sock_close(sk);
199 rfcomm_sock_kill(sk);
200 }
201
202 parent->sk_state = BT_CLOSED;
203 sock_set_flag(parent, SOCK_ZAPPED);
204}
205
206/* Kill socket (only if zapped and orphan)
207 * Must be called on unlocked socket.
208 */
209static void rfcomm_sock_kill(struct sock *sk)
210{
211 if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket)
212 return;
213
214 BT_DBG("sk %p state %d refcnt %d", sk, sk->sk_state, atomic_read(&sk->sk_refcnt));
215
216 /* Kill poor orphan */
217 bt_sock_unlink(&rfcomm_sk_list, sk);
218 sock_set_flag(sk, SOCK_DEAD);
219 sock_put(sk);
220}
221
222static void __rfcomm_sock_close(struct sock *sk)
223{
224 struct rfcomm_dlc *d = rfcomm_pi(sk)->dlc;
225
226 BT_DBG("sk %p state %d socket %p", sk, sk->sk_state, sk->sk_socket);
227
228 switch (sk->sk_state) {
229 case BT_LISTEN:
230 rfcomm_sock_cleanup_listen(sk);
231 break;
232
233 case BT_CONNECT:
234 case BT_CONNECT2:
235 case BT_CONFIG:
236 case BT_CONNECTED:
237 rfcomm_dlc_close(d, 0);
238
239 default:
240 sock_set_flag(sk, SOCK_ZAPPED);
241 break;
242 }
243}
244
245/* Close socket.
246 * Must be called on unlocked socket.
247 */
248static void rfcomm_sock_close(struct sock *sk)
249{
250 lock_sock(sk);
251 __rfcomm_sock_close(sk);
252 release_sock(sk);
253}
254
255static void rfcomm_sock_init(struct sock *sk, struct sock *parent)
256{
257 struct rfcomm_pinfo *pi = rfcomm_pi(sk);
258
259 BT_DBG("sk %p", sk);
260
261 if (parent) {
262 sk->sk_type = parent->sk_type;
bb23c0ab 263 pi->dlc->defer_setup = bt_sk(parent)->defer_setup;
9f2c8a03
MH		 264
265 pi->sec_level = rfcomm_pi(parent)->sec_level;
266 pi->role_switch = rfcomm_pi(parent)->role_switch;
1da177e4 267 } else {
bb23c0ab 268 pi->dlc->defer_setup = 0;
9f2c8a03
MH		 269
270 pi->sec_level = BT_SECURITY_LOW;
271 pi->role_switch = 0;
1da177e4
LT		 272 }
273
9f2c8a03
MH		 274 pi->dlc->sec_level = pi->sec_level;
275 pi->dlc->role_switch = pi->role_switch;
1da177e4
LT		 276}
277
278static struct proto rfcomm_proto = {
279 .name = "RFCOMM",
280 .owner = THIS_MODULE,
281 .obj_size = sizeof(struct rfcomm_pinfo)
282};
283
1b8d7ae4 284static struct sock *rfcomm_sock_alloc(struct net *net, struct socket *sock, int proto, gfp_t prio)
1da177e4
LT		 285{
286 struct rfcomm_dlc *d;
287 struct sock *sk;
288
6257ff21 289 sk = sk_alloc(net, PF_BLUETOOTH, prio, &rfcomm_proto);
1da177e4
LT		 290 if (!sk)
291 return NULL;
292
293 sock_init_data(sock, sk);
294 INIT_LIST_HEAD(&bt_sk(sk)->accept_q);
295
296 d = rfcomm_dlc_alloc(prio);
297 if (!d) {
298 sk_free(sk);
299 return NULL;
300 }
301
302 d->data_ready = rfcomm_sk_data_ready;
303 d->state_change = rfcomm_sk_state_change;
304
305 rfcomm_pi(sk)->dlc = d;
306 d->owner = sk;
307
308 sk->sk_destruct = rfcomm_sock_destruct;
309 sk->sk_sndtimeo = RFCOMM_CONN_TIMEOUT;
310
77db1980
MH		 311 sk->sk_sndbuf = RFCOMM_MAX_CREDITS * RFCOMM_DEFAULT_MTU * 10;
312 sk->sk_rcvbuf = RFCOMM_MAX_CREDITS * RFCOMM_DEFAULT_MTU * 10;
1da177e4
LT		 313
314 sock_reset_flag(sk, SOCK_ZAPPED);
315
316 sk->sk_protocol = proto;
77db1980 317 sk->sk_state = BT_OPEN;
1da177e4
LT		 318
319 bt_sock_link(&rfcomm_sk_list, sk);
320
321 BT_DBG("sk %p", sk);
322 return sk;
323}
324
3f378b68
EP		 325static int rfcomm_sock_create(struct net *net, struct socket *sock,
326 int protocol, int kern)
1da177e4
LT		 327{
328 struct sock *sk;
329
330 BT_DBG("sock %p", sock);
331
332 sock->state = SS_UNCONNECTED;
333
334 if (sock->type != SOCK_STREAM && sock->type != SOCK_RAW)
335 return -ESOCKTNOSUPPORT;
336
337 sock->ops = &rfcomm_sock_ops;
338
1b8d7ae4 339 sk = rfcomm_sock_alloc(net, sock, protocol, GFP_ATOMIC);
74da626a 340 if (!sk)
1da177e4
LT		 341 return -ENOMEM;
342
343 rfcomm_sock_init(sk, NULL);
344 return 0;
345}
346
347static int rfcomm_sock_bind(struct socket *sock, struct sockaddr *addr, int addr_len)
348{
349 struct sockaddr_rc *sa = (struct sockaddr_rc *) addr;
350 struct sock *sk = sock->sk;
351 int err = 0;
352
353 BT_DBG("sk %p %s", sk, batostr(&sa->rc_bdaddr));
354
355 if (!addr || addr->sa_family != AF_BLUETOOTH)
356 return -EINVAL;
357
358 lock_sock(sk);
359
360 if (sk->sk_state != BT_OPEN) {
361 err = -EBADFD;
362 goto done;
363 }
364
354d28d5
MH		 365 if (sk->sk_type != SOCK_STREAM) {
366 err = -EINVAL;
367 goto done;
368 }
369
1da177e4
LT		 370 write_lock_bh(&rfcomm_sk_list.lock);
371
372 if (sa->rc_channel && __rfcomm_get_sock_by_addr(sa->rc_channel, &sa->rc_bdaddr)) {
373 err = -EADDRINUSE;
374 } else {
375 /* Save source address */
376 bacpy(&bt_sk(sk)->src, &sa->rc_bdaddr);
377 rfcomm_pi(sk)->channel = sa->rc_channel;
378 sk->sk_state = BT_BOUND;
379 }
380
381 write_unlock_bh(&rfcomm_sk_list.lock);
382
383done:
384 release_sock(sk);
385 return err;
386}
387
388static int rfcomm_sock_connect(struct socket *sock, struct sockaddr *addr, int alen, int flags)
389{
390 struct sockaddr_rc *sa = (struct sockaddr_rc *) addr;
391 struct sock *sk = sock->sk;
392 struct rfcomm_dlc *d = rfcomm_pi(sk)->dlc;
393 int err = 0;
394
395 BT_DBG("sk %p", sk);
396
6503d961
CG		 397 if (alen < sizeof(struct sockaddr_rc) ||
398 addr->sa_family != AF_BLUETOOTH)
1da177e4
LT		 399 return -EINVAL;
400
354d28d5 401 lock_sock(sk);
1da177e4 402
354d28d5
MH		 403 if (sk->sk_state != BT_OPEN && sk->sk_state != BT_BOUND) {
404 err = -EBADFD;
405 goto done;
406 }
1da177e4 407
354d28d5
MH		 408 if (sk->sk_type != SOCK_STREAM) {
409 err = -EINVAL;
410 goto done;
411 }
1da177e4
LT		 412
413 sk->sk_state = BT_CONNECT;
414 bacpy(&bt_sk(sk)->dst, &sa->rc_bdaddr);
415 rfcomm_pi(sk)->channel = sa->rc_channel;
416
9f2c8a03
MH		 417 d->sec_level = rfcomm_pi(sk)->sec_level;
418 d->role_switch = rfcomm_pi(sk)->role_switch;
77db1980 419
1da177e4
LT		 420 err = rfcomm_dlc_open(d, &bt_sk(sk)->src, &sa->rc_bdaddr, sa->rc_channel);
421 if (!err)
422 err = bt_sock_wait_state(sk, BT_CONNECTED,
423 sock_sndtimeo(sk, flags & O_NONBLOCK));
424
354d28d5 425done:
1da177e4
LT		 426 release_sock(sk);
427 return err;
428}
429
430static int rfcomm_sock_listen(struct socket *sock, int backlog)
431{
432 struct sock *sk = sock->sk;
433 int err = 0;
434
435 BT_DBG("sk %p backlog %d", sk, backlog);
436
437 lock_sock(sk);
438
439 if (sk->sk_state != BT_BOUND) {
440 err = -EBADFD;
441 goto done;
442 }
443
354d28d5
MH		 444 if (sk->sk_type != SOCK_STREAM) {
445 err = -EINVAL;
446 goto done;
447 }
448
1da177e4
LT		 449 if (!rfcomm_pi(sk)->channel) {
450 bdaddr_t *src = &bt_sk(sk)->src;
451 u8 channel;
452
453 err = -EINVAL;
454
455 write_lock_bh(&rfcomm_sk_list.lock);
456
457 for (channel = 1; channel < 31; channel++)
458 if (!__rfcomm_get_sock_by_addr(channel, src)) {
459 rfcomm_pi(sk)->channel = channel;
460 err = 0;
461 break;
462 }
463
464 write_unlock_bh(&rfcomm_sk_list.lock);
465
466 if (err < 0)
467 goto done;
468 }
469
470 sk->sk_max_ack_backlog = backlog;
471 sk->sk_ack_backlog = 0;
472 sk->sk_state = BT_LISTEN;
473
474done:
475 release_sock(sk);
476 return err;
477}
478
479static int rfcomm_sock_accept(struct socket *sock, struct socket *newsock, int flags)
480{
481 DECLARE_WAITQUEUE(wait, current);
482 struct sock *sk = sock->sk, *nsk;
483 long timeo;
484 int err = 0;
485
486 lock_sock(sk);
487
488 if (sk->sk_state != BT_LISTEN) {
489 err = -EBADFD;
490 goto done;
491 }
492
354d28d5
MH		 493 if (sk->sk_type != SOCK_STREAM) {
494 err = -EINVAL;
495 goto done;
496 }
497
1da177e4
LT		 498 timeo = sock_rcvtimeo(sk, flags & O_NONBLOCK);
499
500 BT_DBG("sk %p timeo %ld", sk, timeo);
501
502 /* Wait for an incoming connection. (wake-one). */
aa395145 503 add_wait_queue_exclusive(sk_sleep(sk), &wait);
1da177e4
LT		 504 while (!(nsk = bt_accept_dequeue(sk, newsock))) {
505 set_current_state(TASK_INTERRUPTIBLE);
506 if (!timeo) {
507 err = -EAGAIN;
508 break;
509 }
510
511 release_sock(sk);
512 timeo = schedule_timeout(timeo);
513 lock_sock(sk);
514
515 if (sk->sk_state != BT_LISTEN) {
516 err = -EBADFD;
517 break;
518 }
519
520 if (signal_pending(current)) {
521 err = sock_intr_errno(timeo);
522 break;
523 }
524 }
525 set_current_state(TASK_RUNNING);
aa395145 526 remove_wait_queue(sk_sleep(sk), &wait);
1da177e4
LT		 527
528 if (err)
529 goto done;
530
531 newsock->state = SS_CONNECTED;
532
533 BT_DBG("new socket %p", nsk);
534
535done:
536 release_sock(sk);
537 return err;
538}
539
540static int rfcomm_sock_getname(struct socket *sock, struct sockaddr *addr, int *len, int peer)
541{
542 struct sockaddr_rc *sa = (struct sockaddr_rc *) addr;
543 struct sock *sk = sock->sk;
544
545 BT_DBG("sock %p, sk %p", sock, sk);
546
547 sa->rc_family = AF_BLUETOOTH;
548 sa->rc_channel = rfcomm_pi(sk)->channel;
549 if (peer)
550 bacpy(&sa->rc_bdaddr, &bt_sk(sk)->dst);
551 else
552 bacpy(&sa->rc_bdaddr, &bt_sk(sk)->src);
553
554 *len = sizeof(struct sockaddr_rc);
555 return 0;
556}
557
558static int rfcomm_sock_sendmsg(struct kiocb *iocb, struct socket *sock,
559 struct msghdr *msg, size_t len)
560{
561 struct sock *sk = sock->sk;
562 struct rfcomm_dlc *d = rfcomm_pi(sk)->dlc;
563 struct sk_buff *skb;
1da177e4
LT		 564 int sent = 0;
565
bb23c0ab
MH		 566 if (test_bit(RFCOMM_DEFER_SETUP, &d->flags))
567 return -ENOTCONN;
568
1da177e4
LT		 569 if (msg->msg_flags & MSG_OOB)
570 return -EOPNOTSUPP;
571
572 if (sk->sk_shutdown & SEND_SHUTDOWN)
573 return -EPIPE;
574
575 BT_DBG("sock %p, sk %p", sock, sk);
576
577 lock_sock(sk);
578
579 while (len) {
580 size_t size = min_t(size_t, len, d->mtu);
4d6a2188 581 int err;
8e87d142 582
1da177e4
LT		 583 skb = sock_alloc_send_skb(sk, size + RFCOMM_SKB_RESERVE,
584 msg->msg_flags & MSG_DONTWAIT, &err);
91aa35a5
VS		 585 if (!skb) {
586 if (sent == 0)
587 sent = err;
1da177e4 588 break;
91aa35a5 589 }
1da177e4
LT		 590 skb_reserve(skb, RFCOMM_SKB_HEAD_RESERVE);
591
592 err = memcpy_fromiovec(skb_put(skb, size), msg->msg_iov, size);
593 if (err) {
594 kfree_skb(skb);
4d6a2188
MH		 595 if (sent == 0)
596 sent = err;
1da177e4
LT		 597 break;
598 }
599
600 err = rfcomm_dlc_send(d, skb);
601 if (err < 0) {
602 kfree_skb(skb);
4d6a2188
MH		 603 if (sent == 0)
604 sent = err;
1da177e4
LT		 605 break;
606 }
607
608 sent += size;
609 len -= size;
610 }
611
612 release_sock(sk);
613
4d6a2188 614 return sent;
1da177e4
LT		 615}
616
1da177e4
LT		 617static int rfcomm_sock_recvmsg(struct kiocb *iocb, struct socket *sock,
618 struct msghdr *msg, size_t size, int flags)
619{
620 struct sock *sk = sock->sk;
bb23c0ab 621 struct rfcomm_dlc *d = rfcomm_pi(sk)->dlc;
3d7d01df 622 int len;
1da177e4 623
bb23c0ab
MH		 624 if (test_and_clear_bit(RFCOMM_DEFER_SETUP, &d->flags)) {
625 rfcomm_dlc_accept(d);
626 return 0;
627 }
628
3d7d01df 629 len = bt_sock_stream_recvmsg(iocb, sock, msg, size, flags);
1da177e4
LT		 630
631 lock_sock(sk);
3d7d01df
MM		 632 if (!(flags & MSG_PEEK) && len > 0)
633 atomic_sub(len, &sk->sk_rmem_alloc);
1da177e4 634
1da177e4
LT		 635 if (atomic_read(&sk->sk_rmem_alloc) <= (sk->sk_rcvbuf >> 2))
636 rfcomm_dlc_unthrottle(rfcomm_pi(sk)->dlc);
1da177e4 637 release_sock(sk);
3d7d01df
MM		 638
639 return len;
1da177e4
LT		 640}
641
b7058842 642static int rfcomm_sock_setsockopt_old(struct socket *sock, int optname, char __user *optval, unsigned int optlen)
1da177e4
LT		 643{
644 struct sock *sk = sock->sk;
645 int err = 0;
646 u32 opt;
647
648 BT_DBG("sk %p", sk);
649
650 lock_sock(sk);
651
652 switch (optname) {
653 case RFCOMM_LM:
654 if (get_user(opt, (u32 __user *) optval)) {
655 err = -EFAULT;
656 break;
657 }
658
9f2c8a03
MH		 659 if (opt & RFCOMM_LM_AUTH)
660 rfcomm_pi(sk)->sec_level = BT_SECURITY_LOW;
661 if (opt & RFCOMM_LM_ENCRYPT)
662 rfcomm_pi(sk)->sec_level = BT_SECURITY_MEDIUM;
663 if (opt & RFCOMM_LM_SECURE)
664 rfcomm_pi(sk)->sec_level = BT_SECURITY_HIGH;
665
666 rfcomm_pi(sk)->role_switch = (opt & RFCOMM_LM_MASTER);
1da177e4
LT		 667 break;
668
669 default:
670 err = -ENOPROTOOPT;
671 break;
672 }
673
674 release_sock(sk);
675 return err;
676}
677
b7058842 678static int rfcomm_sock_setsockopt(struct socket *sock, int level, int optname, char __user *optval, unsigned int optlen)
d58daf42
MH		 679{
680 struct sock *sk = sock->sk;
9f2c8a03
MH		 681 struct bt_security sec;
682 int len, err = 0;
bb23c0ab 683 u32 opt;
d58daf42
MH		 684
685 BT_DBG("sk %p", sk);
686
687 if (level == SOL_RFCOMM)
688 return rfcomm_sock_setsockopt_old(sock, optname, optval, optlen);
689
0588d94f
MH		 690 if (level != SOL_BLUETOOTH)
691 return -ENOPROTOOPT;
692
d58daf42
MH		 693 lock_sock(sk);
694
695 switch (optname) {
9f2c8a03 696 case BT_SECURITY:
0588d94f
MH		 697 if (sk->sk_type != SOCK_STREAM) {
698 err = -EINVAL;
699 break;
700 }
701
9f2c8a03
MH		 702 sec.level = BT_SECURITY_LOW;
703
704 len = min_t(unsigned int, sizeof(sec), optlen);
705 if (copy_from_user((char *) &sec, optval, len)) {
706 err = -EFAULT;
707 break;
708 }
709
710 if (sec.level > BT_SECURITY_HIGH) {
711 err = -EINVAL;
712 break;
713 }
714
715 rfcomm_pi(sk)->sec_level = sec.level;
716 break;
717
bb23c0ab
MH		 718 case BT_DEFER_SETUP:
719 if (sk->sk_state != BT_BOUND && sk->sk_state != BT_LISTEN) {
720 err = -EINVAL;
721 break;
722 }
723
724 if (get_user(opt, (u32 __user *) optval)) {
725 err = -EFAULT;
726 break;
727 }
728
729 bt_sk(sk)->defer_setup = opt;
730 break;
731
d58daf42
MH		 732 default:
733 err = -ENOPROTOOPT;
734 break;
735 }
736
737 release_sock(sk);
738 return err;
739}
740
741static int rfcomm_sock_getsockopt_old(struct socket *sock, int optname, char __user *optval, int __user *optlen)
1da177e4
LT		 742{
743 struct sock *sk = sock->sk;
744 struct sock *l2cap_sk;
745 struct rfcomm_conninfo cinfo;
746 int len, err = 0;
9f2c8a03 747 u32 opt;
1da177e4
LT		 748
749 BT_DBG("sk %p", sk);
750
751 if (get_user(len, optlen))
752 return -EFAULT;
753
754 lock_sock(sk);
755
756 switch (optname) {
757 case RFCOMM_LM:
9f2c8a03
MH		 758 switch (rfcomm_pi(sk)->sec_level) {
759 case BT_SECURITY_LOW:
760 opt = RFCOMM_LM_AUTH;
761 break;
762 case BT_SECURITY_MEDIUM:
763 opt = RFCOMM_LM_AUTH | RFCOMM_LM_ENCRYPT;
764 break;
765 case BT_SECURITY_HIGH:
766 opt = RFCOMM_LM_AUTH | RFCOMM_LM_ENCRYPT |
767 RFCOMM_LM_SECURE;
768 break;
769 default:
770 opt = 0;
771 break;
772 }
773
774 if (rfcomm_pi(sk)->role_switch)
775 opt |= RFCOMM_LM_MASTER;
776
777 if (put_user(opt, (u32 __user *) optval))
1da177e4
LT		 778 err = -EFAULT;
779 break;
780
781 case RFCOMM_CONNINFO:
bb23c0ab
MH		 782 if (sk->sk_state != BT_CONNECTED &&
783 !rfcomm_pi(sk)->dlc->defer_setup) {
1da177e4
LT		 784 err = -ENOTCONN;
785 break;
786 }
787
788 l2cap_sk = rfcomm_pi(sk)->dlc->session->sock->sk;
789
790 cinfo.hci_handle = l2cap_pi(l2cap_sk)->conn->hcon->handle;
791 memcpy(cinfo.dev_class, l2cap_pi(l2cap_sk)->conn->hcon->dev_class, 3);
792
793 len = min_t(unsigned int, len, sizeof(cinfo));
794 if (copy_to_user(optval, (char *) &cinfo, len))
795 err = -EFAULT;
796
797 break;
798
799 default:
800 err = -ENOPROTOOPT;
801 break;
802 }
803
804 release_sock(sk);
d58daf42
MH		 805 return err;
806}
807
808static int rfcomm_sock_getsockopt(struct socket *sock, int level, int optname, char __user *optval, int __user *optlen)
809{
810 struct sock *sk = sock->sk;
9f2c8a03 811 struct bt_security sec;
d58daf42
MH		 812 int len, err = 0;
813
814 BT_DBG("sk %p", sk);
815
816 if (level == SOL_RFCOMM)
817 return rfcomm_sock_getsockopt_old(sock, optname, optval, optlen);
818
0588d94f
MH		 819 if (level != SOL_BLUETOOTH)
820 return -ENOPROTOOPT;
821
d58daf42
MH		 822 if (get_user(len, optlen))
823 return -EFAULT;
824
825 lock_sock(sk);
826
827 switch (optname) {
9f2c8a03 828 case BT_SECURITY:
0588d94f
MH		 829 if (sk->sk_type != SOCK_STREAM) {
830 err = -EINVAL;
831 break;
832 }
833
9f2c8a03
MH		 834 sec.level = rfcomm_pi(sk)->sec_level;
835
836 len = min_t(unsigned int, len, sizeof(sec));
837 if (copy_to_user(optval, (char *) &sec, len))
838 err = -EFAULT;
839
840 break;
841
bb23c0ab
MH		 842 case BT_DEFER_SETUP:
843 if (sk->sk_state != BT_BOUND && sk->sk_state != BT_LISTEN) {
844 err = -EINVAL;
845 break;
846 }
847
848 if (put_user(bt_sk(sk)->defer_setup, (u32 __user *) optval))
849 err = -EFAULT;
850
851 break;
852
d58daf42
MH		 853 default:
854 err = -ENOPROTOOPT;
855 break;
856 }
857
858 release_sock(sk);
1da177e4
LT		 859 return err;
860}
861
862static int rfcomm_sock_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
863{
e19caae7 864 struct sock *sk __maybe_unused = sock->sk;
1da177e4
LT		 865 int err;
866
e19caae7 867 BT_DBG("sk %p cmd %x arg %lx", sk, cmd, arg);
1da177e4 868
3241ad82 869 err = bt_sock_ioctl(sock, cmd, arg);
1da177e4 870
3241ad82 871 if (err == -ENOIOCTLCMD) {
1da177e4 872#ifdef CONFIG_BT_RFCOMM_TTY
3241ad82
MH		 873 lock_sock(sk);
874 err = rfcomm_dev_ioctl(sk, cmd, (void __user *) arg);
875 release_sock(sk);
1da177e4 876#else
3241ad82 877 err = -EOPNOTSUPP;
1da177e4 878#endif
3241ad82 879 }
1da177e4 880
1da177e4
LT		 881 return err;
882}
883
884static int rfcomm_sock_shutdown(struct socket *sock, int how)
885{
886 struct sock *sk = sock->sk;
887 int err = 0;
888
889 BT_DBG("sock %p, sk %p", sock, sk);
890
891 if (!sk) return 0;
892
893 lock_sock(sk);
894 if (!sk->sk_shutdown) {
895 sk->sk_shutdown = SHUTDOWN_MASK;
896 __rfcomm_sock_close(sk);
897
898 if (sock_flag(sk, SOCK_LINGER) && sk->sk_lingertime)
899 err = bt_sock_wait_state(sk, BT_CLOSED, sk->sk_lingertime);
900 }
901 release_sock(sk);
902 return err;
903}
904
905static int rfcomm_sock_release(struct socket *sock)
906{
907 struct sock *sk = sock->sk;
908 int err;
909
910 BT_DBG("sock %p, sk %p", sock, sk);
911
912 if (!sk)
913 return 0;
914
915 err = rfcomm_sock_shutdown(sock, 2);
916
917 sock_orphan(sk);
918 rfcomm_sock_kill(sk);
919 return err;
920}
921
8e87d142 922/* ---- RFCOMM core layer callbacks ----
1da177e4
LT		 923 *
924 * called under rfcomm_lock()
925 */
926int rfcomm_connect_ind(struct rfcomm_session *s, u8 channel, struct rfcomm_dlc **d)
927{
928 struct sock *sk, *parent;
929 bdaddr_t src, dst;
930 int result = 0;
931
932 BT_DBG("session %p channel %d", s, channel);
933
934 rfcomm_session_getaddr(s, &src, &dst);
935
936 /* Check if we have socket listening on channel */
937 parent = rfcomm_get_sock_by_channel(BT_LISTEN, channel, &src);
938 if (!parent)
939 return 0;
940
eeb36656
GP		 941 bh_lock_sock(parent);
942
1da177e4
LT		 943 /* Check for backlog size */
944 if (sk_acceptq_is_full(parent)) {
8e87d142 945 BT_DBG("backlog full %d", parent->sk_ack_backlog);
1da177e4
LT		 946 goto done;
947 }
948
3b1e0a65 949 sk = rfcomm_sock_alloc(sock_net(parent), NULL, BTPROTO_RFCOMM, GFP_ATOMIC);
1da177e4
LT		 950 if (!sk)
951 goto done;
952
953 rfcomm_sock_init(sk, parent);
954 bacpy(&bt_sk(sk)->src, &src);
955 bacpy(&bt_sk(sk)->dst, &dst);
956 rfcomm_pi(sk)->channel = channel;
957
958 sk->sk_state = BT_CONFIG;
959 bt_accept_enqueue(parent, sk);
960
961 /* Accept connection and return socket DLC */
962 *d = rfcomm_pi(sk)->dlc;
963 result = 1;
964
965done:
966 bh_unlock_sock(parent);
bb23c0ab
MH		 967
968 if (bt_sk(parent)->defer_setup)
969 parent->sk_state_change(parent);
970
1da177e4
LT		 971 return result;
972}
973
aef7d97c 974static int rfcomm_sock_debugfs_show(struct seq_file *f, void *p)
1da177e4
LT		 975{
976 struct sock *sk;
977 struct hlist_node *node;
1da177e4
LT		 978
979 read_lock_bh(&rfcomm_sk_list.lock);
980
be9d1227 981 sk_for_each(sk, node, &rfcomm_sk_list.head) {
aef7d97c
MH		 982 seq_printf(f, "%s %s %d %d\n",
983 batostr(&bt_sk(sk)->src),
984 batostr(&bt_sk(sk)->dst),
be9d1227
MH		 985 sk->sk_state, rfcomm_pi(sk)->channel);
986 }
1da177e4 987
1da177e4 988 read_unlock_bh(&rfcomm_sk_list.lock);
1da177e4 989
aef7d97c 990 return 0;
1da177e4
LT		 991}
992
aef7d97c
MH		 993static int rfcomm_sock_debugfs_open(struct inode *inode, struct file *file)
994{
995 return single_open(file, rfcomm_sock_debugfs_show, inode->i_private);
996}
997
998static const struct file_operations rfcomm_sock_debugfs_fops = {
999 .open = rfcomm_sock_debugfs_open,
1000 .read = seq_read,
1001 .llseek = seq_lseek,
1002 .release = single_release,
1003};
1004
1005static struct dentry *rfcomm_sock_debugfs;
1da177e4 1006
90ddc4f0 1007static const struct proto_ops rfcomm_sock_ops = {
1da177e4
LT		 1008 .family = PF_BLUETOOTH,
1009 .owner = THIS_MODULE,
1010 .release = rfcomm_sock_release,
1011 .bind = rfcomm_sock_bind,
1012 .connect = rfcomm_sock_connect,
1013 .listen = rfcomm_sock_listen,
1014 .accept = rfcomm_sock_accept,
1015 .getname = rfcomm_sock_getname,
1016 .sendmsg = rfcomm_sock_sendmsg,
1017 .recvmsg = rfcomm_sock_recvmsg,
1018 .shutdown = rfcomm_sock_shutdown,
1019 .setsockopt = rfcomm_sock_setsockopt,
1020 .getsockopt = rfcomm_sock_getsockopt,
1021 .ioctl = rfcomm_sock_ioctl,
1022 .poll = bt_sock_poll,
1023 .socketpair = sock_no_socketpair,
1024 .mmap = sock_no_mmap
1025};
1026
ec1b4cf7 1027static const struct net_proto_family rfcomm_sock_family_ops = {
1da177e4
LT		 1028 .family = PF_BLUETOOTH,
1029 .owner = THIS_MODULE,
1030 .create = rfcomm_sock_create
1031};
1032
be9d1227 1033int __init rfcomm_init_sockets(void)
1da177e4
LT		 1034{
1035 int err;
1036
1037 err = proto_register(&rfcomm_proto, 0);
1038 if (err < 0)
1039 return err;
1040
1041 err = bt_sock_register(BTPROTO_RFCOMM, &rfcomm_sock_family_ops);
1042 if (err < 0)
1043 goto error;
1044
aef7d97c
MH		 1045 if (bt_debugfs) {
1046 rfcomm_sock_debugfs = debugfs_create_file("rfcomm", 0444,
1047 bt_debugfs, NULL, &rfcomm_sock_debugfs_fops);
1048 if (!rfcomm_sock_debugfs)
1049 BT_ERR("Failed to create RFCOMM debug file");
1050 }
1da177e4
LT		 1051
1052 BT_INFO("RFCOMM socket layer initialized");
1053
1054 return 0;
1055
1056error:
1057 BT_ERR("RFCOMM socket layer registration failed");
1058 proto_unregister(&rfcomm_proto);
1059 return err;
1060}
1061
2f8362af 1062void __exit rfcomm_cleanup_sockets(void)
1da177e4 1063{
aef7d97c 1064 debugfs_remove(rfcomm_sock_debugfs);
1da177e4
LT		 1065
1066 if (bt_sock_unregister(BTPROTO_RFCOMM) < 0)
1067 BT_ERR("RFCOMM socket layer unregistration failed");
1068
1069 proto_unregister(&rfcomm_proto);
1070}
kernel source for telekom puls (alcatel/mediatek)