2 BlueZ - Bluetooth protocol stack for Linux
3 Copyright (c) 2000-2001, 2010, Code Aurora Forum. All rights reserved.
5 Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License version 2 as
9 published by the Free Software Foundation;
11 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
12 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
13 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
14 IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
15 CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
16 WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
17 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
18 OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
20 ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
21 COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
22 SOFTWARE IS DISCLAIMED.
25 /* Bluetooth HCI event handling. */
27 #include <asm/unaligned.h>
29 #include <net/bluetooth/bluetooth.h>
30 #include <net/bluetooth/hci_core.h>
31 #include <net/bluetooth/mgmt.h>
32 #include <net/bluetooth/a2mp.h>
33 #include <net/bluetooth/amp.h>
35 /* Handle HCI Event packets */
37 static void hci_cc_inquiry_cancel(struct hci_dev
*hdev
, struct sk_buff
*skb
)
39 __u8 status
= *((__u8
*) skb
->data
);
41 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
45 mgmt_stop_discovery_failed(hdev
, status
);
50 clear_bit(HCI_INQUIRY
, &hdev
->flags
);
51 smp_mb__after_clear_bit(); /* wake_up_bit advises about this barrier */
52 wake_up_bit(&hdev
->flags
, HCI_INQUIRY
);
55 hci_discovery_set_state(hdev
, DISCOVERY_STOPPED
);
58 hci_conn_check_pending(hdev
);
61 static void hci_cc_periodic_inq(struct hci_dev
*hdev
, struct sk_buff
*skb
)
63 __u8 status
= *((__u8
*) skb
->data
);
65 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
70 set_bit(HCI_PERIODIC_INQ
, &hdev
->dev_flags
);
73 static void hci_cc_exit_periodic_inq(struct hci_dev
*hdev
, struct sk_buff
*skb
)
75 __u8 status
= *((__u8
*) skb
->data
);
77 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
82 clear_bit(HCI_PERIODIC_INQ
, &hdev
->dev_flags
);
84 hci_conn_check_pending(hdev
);
87 static void hci_cc_remote_name_req_cancel(struct hci_dev
*hdev
,
90 BT_DBG("%s", hdev
->name
);
93 static void hci_cc_role_discovery(struct hci_dev
*hdev
, struct sk_buff
*skb
)
95 struct hci_rp_role_discovery
*rp
= (void *) skb
->data
;
96 struct hci_conn
*conn
;
98 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
105 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(rp
->handle
));
108 conn
->link_mode
&= ~HCI_LM_MASTER
;
110 conn
->link_mode
|= HCI_LM_MASTER
;
113 hci_dev_unlock(hdev
);
116 static void hci_cc_read_link_policy(struct hci_dev
*hdev
, struct sk_buff
*skb
)
118 struct hci_rp_read_link_policy
*rp
= (void *) skb
->data
;
119 struct hci_conn
*conn
;
121 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
128 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(rp
->handle
));
130 conn
->link_policy
= __le16_to_cpu(rp
->policy
);
132 hci_dev_unlock(hdev
);
135 static void hci_cc_write_link_policy(struct hci_dev
*hdev
, struct sk_buff
*skb
)
137 struct hci_rp_write_link_policy
*rp
= (void *) skb
->data
;
138 struct hci_conn
*conn
;
141 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
146 sent
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_LINK_POLICY
);
152 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(rp
->handle
));
154 conn
->link_policy
= get_unaligned_le16(sent
+ 2);
156 hci_dev_unlock(hdev
);
159 static void hci_cc_read_def_link_policy(struct hci_dev
*hdev
,
162 struct hci_rp_read_def_link_policy
*rp
= (void *) skb
->data
;
164 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
169 hdev
->link_policy
= __le16_to_cpu(rp
->policy
);
172 static void hci_cc_write_def_link_policy(struct hci_dev
*hdev
,
175 __u8 status
= *((__u8
*) skb
->data
);
178 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
180 sent
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_DEF_LINK_POLICY
);
185 hdev
->link_policy
= get_unaligned_le16(sent
);
188 static void hci_cc_reset(struct hci_dev
*hdev
, struct sk_buff
*skb
)
190 __u8 status
= *((__u8
*) skb
->data
);
192 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
194 clear_bit(HCI_RESET
, &hdev
->flags
);
196 /* Reset all non-persistent flags */
197 hdev
->dev_flags
&= ~HCI_PERSISTENT_MASK
;
199 hdev
->discovery
.state
= DISCOVERY_STOPPED
;
200 hdev
->inq_tx_power
= HCI_TX_POWER_INVALID
;
201 hdev
->adv_tx_power
= HCI_TX_POWER_INVALID
;
203 memset(hdev
->adv_data
, 0, sizeof(hdev
->adv_data
));
204 hdev
->adv_data_len
= 0;
207 static void hci_cc_write_local_name(struct hci_dev
*hdev
, struct sk_buff
*skb
)
209 __u8 status
= *((__u8
*) skb
->data
);
212 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
214 sent
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_LOCAL_NAME
);
220 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
221 mgmt_set_local_name_complete(hdev
, sent
, status
);
223 memcpy(hdev
->dev_name
, sent
, HCI_MAX_NAME_LENGTH
);
225 hci_dev_unlock(hdev
);
228 static void hci_cc_read_local_name(struct hci_dev
*hdev
, struct sk_buff
*skb
)
230 struct hci_rp_read_local_name
*rp
= (void *) skb
->data
;
232 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
237 if (test_bit(HCI_SETUP
, &hdev
->dev_flags
))
238 memcpy(hdev
->dev_name
, rp
->name
, HCI_MAX_NAME_LENGTH
);
241 static void hci_cc_write_auth_enable(struct hci_dev
*hdev
, struct sk_buff
*skb
)
243 __u8 status
= *((__u8
*) skb
->data
);
246 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
248 sent
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_AUTH_ENABLE
);
253 __u8 param
= *((__u8
*) sent
);
255 if (param
== AUTH_ENABLED
)
256 set_bit(HCI_AUTH
, &hdev
->flags
);
258 clear_bit(HCI_AUTH
, &hdev
->flags
);
261 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
262 mgmt_auth_enable_complete(hdev
, status
);
265 static void hci_cc_write_encrypt_mode(struct hci_dev
*hdev
, struct sk_buff
*skb
)
267 __u8 status
= *((__u8
*) skb
->data
);
270 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
272 sent
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_ENCRYPT_MODE
);
277 __u8 param
= *((__u8
*) sent
);
280 set_bit(HCI_ENCRYPT
, &hdev
->flags
);
282 clear_bit(HCI_ENCRYPT
, &hdev
->flags
);
286 static void hci_cc_write_scan_enable(struct hci_dev
*hdev
, struct sk_buff
*skb
)
288 __u8 param
, status
= *((__u8
*) skb
->data
);
289 int old_pscan
, old_iscan
;
292 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
294 sent
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_SCAN_ENABLE
);
298 param
= *((__u8
*) sent
);
303 mgmt_write_scan_failed(hdev
, param
, status
);
304 hdev
->discov_timeout
= 0;
308 old_pscan
= test_and_clear_bit(HCI_PSCAN
, &hdev
->flags
);
309 old_iscan
= test_and_clear_bit(HCI_ISCAN
, &hdev
->flags
);
311 if (param
& SCAN_INQUIRY
) {
312 set_bit(HCI_ISCAN
, &hdev
->flags
);
314 mgmt_discoverable(hdev
, 1);
315 if (hdev
->discov_timeout
> 0) {
316 int to
= msecs_to_jiffies(hdev
->discov_timeout
* 1000);
317 queue_delayed_work(hdev
->workqueue
, &hdev
->discov_off
,
320 } else if (old_iscan
)
321 mgmt_discoverable(hdev
, 0);
323 if (param
& SCAN_PAGE
) {
324 set_bit(HCI_PSCAN
, &hdev
->flags
);
326 mgmt_connectable(hdev
, 1);
327 } else if (old_pscan
)
328 mgmt_connectable(hdev
, 0);
331 hci_dev_unlock(hdev
);
334 static void hci_cc_read_class_of_dev(struct hci_dev
*hdev
, struct sk_buff
*skb
)
336 struct hci_rp_read_class_of_dev
*rp
= (void *) skb
->data
;
338 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
343 memcpy(hdev
->dev_class
, rp
->dev_class
, 3);
345 BT_DBG("%s class 0x%.2x%.2x%.2x", hdev
->name
,
346 hdev
->dev_class
[2], hdev
->dev_class
[1], hdev
->dev_class
[0]);
349 static void hci_cc_write_class_of_dev(struct hci_dev
*hdev
, struct sk_buff
*skb
)
351 __u8 status
= *((__u8
*) skb
->data
);
354 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
356 sent
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_CLASS_OF_DEV
);
363 memcpy(hdev
->dev_class
, sent
, 3);
365 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
366 mgmt_set_class_of_dev_complete(hdev
, sent
, status
);
368 hci_dev_unlock(hdev
);
371 static void hci_cc_read_voice_setting(struct hci_dev
*hdev
, struct sk_buff
*skb
)
373 struct hci_rp_read_voice_setting
*rp
= (void *) skb
->data
;
376 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
381 setting
= __le16_to_cpu(rp
->voice_setting
);
383 if (hdev
->voice_setting
== setting
)
386 hdev
->voice_setting
= setting
;
388 BT_DBG("%s voice setting 0x%4.4x", hdev
->name
, setting
);
391 hdev
->notify(hdev
, HCI_NOTIFY_VOICE_SETTING
);
394 static void hci_cc_write_voice_setting(struct hci_dev
*hdev
,
397 __u8 status
= *((__u8
*) skb
->data
);
401 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
406 sent
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_VOICE_SETTING
);
410 setting
= get_unaligned_le16(sent
);
412 if (hdev
->voice_setting
== setting
)
415 hdev
->voice_setting
= setting
;
417 BT_DBG("%s voice setting 0x%4.4x", hdev
->name
, setting
);
420 hdev
->notify(hdev
, HCI_NOTIFY_VOICE_SETTING
);
423 static void hci_cc_write_ssp_mode(struct hci_dev
*hdev
, struct sk_buff
*skb
)
425 __u8 status
= *((__u8
*) skb
->data
);
426 struct hci_cp_write_ssp_mode
*sent
;
428 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
430 sent
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_SSP_MODE
);
436 hdev
->host_features
[0] |= LMP_HOST_SSP
;
438 hdev
->host_features
[0] &= ~LMP_HOST_SSP
;
441 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
442 mgmt_ssp_enable_complete(hdev
, sent
->mode
, status
);
445 set_bit(HCI_SSP_ENABLED
, &hdev
->dev_flags
);
447 clear_bit(HCI_SSP_ENABLED
, &hdev
->dev_flags
);
451 static void hci_cc_read_local_version(struct hci_dev
*hdev
, struct sk_buff
*skb
)
453 struct hci_rp_read_local_version
*rp
= (void *) skb
->data
;
455 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
460 hdev
->hci_ver
= rp
->hci_ver
;
461 hdev
->hci_rev
= __le16_to_cpu(rp
->hci_rev
);
462 hdev
->lmp_ver
= rp
->lmp_ver
;
463 hdev
->manufacturer
= __le16_to_cpu(rp
->manufacturer
);
464 hdev
->lmp_subver
= __le16_to_cpu(rp
->lmp_subver
);
466 BT_DBG("%s manufacturer 0x%4.4x hci ver %d:%d", hdev
->name
,
467 hdev
->manufacturer
, hdev
->hci_ver
, hdev
->hci_rev
);
470 static void hci_cc_read_local_commands(struct hci_dev
*hdev
,
473 struct hci_rp_read_local_commands
*rp
= (void *) skb
->data
;
475 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
478 memcpy(hdev
->commands
, rp
->commands
, sizeof(hdev
->commands
));
481 static void hci_cc_read_local_features(struct hci_dev
*hdev
,
484 struct hci_rp_read_local_features
*rp
= (void *) skb
->data
;
486 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
491 memcpy(hdev
->features
, rp
->features
, 8);
493 /* Adjust default settings according to features
494 * supported by device. */
496 if (hdev
->features
[0] & LMP_3SLOT
)
497 hdev
->pkt_type
|= (HCI_DM3
| HCI_DH3
);
499 if (hdev
->features
[0] & LMP_5SLOT
)
500 hdev
->pkt_type
|= (HCI_DM5
| HCI_DH5
);
502 if (hdev
->features
[1] & LMP_HV2
) {
503 hdev
->pkt_type
|= (HCI_HV2
);
504 hdev
->esco_type
|= (ESCO_HV2
);
507 if (hdev
->features
[1] & LMP_HV3
) {
508 hdev
->pkt_type
|= (HCI_HV3
);
509 hdev
->esco_type
|= (ESCO_HV3
);
512 if (lmp_esco_capable(hdev
))
513 hdev
->esco_type
|= (ESCO_EV3
);
515 if (hdev
->features
[4] & LMP_EV4
)
516 hdev
->esco_type
|= (ESCO_EV4
);
518 if (hdev
->features
[4] & LMP_EV5
)
519 hdev
->esco_type
|= (ESCO_EV5
);
521 if (hdev
->features
[5] & LMP_EDR_ESCO_2M
)
522 hdev
->esco_type
|= (ESCO_2EV3
);
524 if (hdev
->features
[5] & LMP_EDR_ESCO_3M
)
525 hdev
->esco_type
|= (ESCO_3EV3
);
527 if (hdev
->features
[5] & LMP_EDR_3S_ESCO
)
528 hdev
->esco_type
|= (ESCO_2EV5
| ESCO_3EV5
);
530 BT_DBG("%s features 0x%.2x%.2x%.2x%.2x%.2x%.2x%.2x%.2x", hdev
->name
,
531 hdev
->features
[0], hdev
->features
[1],
532 hdev
->features
[2], hdev
->features
[3],
533 hdev
->features
[4], hdev
->features
[5],
534 hdev
->features
[6], hdev
->features
[7]);
537 static void hci_cc_read_local_ext_features(struct hci_dev
*hdev
,
540 struct hci_rp_read_local_ext_features
*rp
= (void *) skb
->data
;
542 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
549 memcpy(hdev
->features
, rp
->features
, 8);
552 memcpy(hdev
->host_features
, rp
->features
, 8);
557 static void hci_cc_read_flow_control_mode(struct hci_dev
*hdev
,
560 struct hci_rp_read_flow_control_mode
*rp
= (void *) skb
->data
;
562 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
565 hdev
->flow_ctl_mode
= rp
->mode
;
568 static void hci_cc_read_buffer_size(struct hci_dev
*hdev
, struct sk_buff
*skb
)
570 struct hci_rp_read_buffer_size
*rp
= (void *) skb
->data
;
572 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
577 hdev
->acl_mtu
= __le16_to_cpu(rp
->acl_mtu
);
578 hdev
->sco_mtu
= rp
->sco_mtu
;
579 hdev
->acl_pkts
= __le16_to_cpu(rp
->acl_max_pkt
);
580 hdev
->sco_pkts
= __le16_to_cpu(rp
->sco_max_pkt
);
582 if (test_bit(HCI_QUIRK_FIXUP_BUFFER_SIZE
, &hdev
->quirks
)) {
587 hdev
->acl_cnt
= hdev
->acl_pkts
;
588 hdev
->sco_cnt
= hdev
->sco_pkts
;
590 BT_DBG("%s acl mtu %d:%d sco mtu %d:%d", hdev
->name
, hdev
->acl_mtu
,
591 hdev
->acl_pkts
, hdev
->sco_mtu
, hdev
->sco_pkts
);
594 static void hci_cc_read_bd_addr(struct hci_dev
*hdev
, struct sk_buff
*skb
)
596 struct hci_rp_read_bd_addr
*rp
= (void *) skb
->data
;
598 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
601 bacpy(&hdev
->bdaddr
, &rp
->bdaddr
);
604 static void hci_cc_read_page_scan_activity(struct hci_dev
*hdev
,
607 struct hci_rp_read_page_scan_activity
*rp
= (void *) skb
->data
;
609 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
611 if (test_bit(HCI_INIT
, &hdev
->flags
) && !rp
->status
) {
612 hdev
->page_scan_interval
= __le16_to_cpu(rp
->interval
);
613 hdev
->page_scan_window
= __le16_to_cpu(rp
->window
);
617 static void hci_cc_write_page_scan_activity(struct hci_dev
*hdev
,
620 u8 status
= *((u8
*) skb
->data
);
621 struct hci_cp_write_page_scan_activity
*sent
;
623 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
628 sent
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_PAGE_SCAN_ACTIVITY
);
632 hdev
->page_scan_interval
= __le16_to_cpu(sent
->interval
);
633 hdev
->page_scan_window
= __le16_to_cpu(sent
->window
);
636 static void hci_cc_read_page_scan_type(struct hci_dev
*hdev
,
639 struct hci_rp_read_page_scan_type
*rp
= (void *) skb
->data
;
641 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
643 if (test_bit(HCI_INIT
, &hdev
->flags
) && !rp
->status
)
644 hdev
->page_scan_type
= rp
->type
;
647 static void hci_cc_write_page_scan_type(struct hci_dev
*hdev
,
650 u8 status
= *((u8
*) skb
->data
);
653 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
658 type
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_PAGE_SCAN_TYPE
);
660 hdev
->page_scan_type
= *type
;
663 static void hci_cc_read_data_block_size(struct hci_dev
*hdev
,
666 struct hci_rp_read_data_block_size
*rp
= (void *) skb
->data
;
668 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
673 hdev
->block_mtu
= __le16_to_cpu(rp
->max_acl_len
);
674 hdev
->block_len
= __le16_to_cpu(rp
->block_len
);
675 hdev
->num_blocks
= __le16_to_cpu(rp
->num_blocks
);
677 hdev
->block_cnt
= hdev
->num_blocks
;
679 BT_DBG("%s blk mtu %d cnt %d len %d", hdev
->name
, hdev
->block_mtu
,
680 hdev
->block_cnt
, hdev
->block_len
);
683 static void hci_cc_read_local_amp_info(struct hci_dev
*hdev
,
686 struct hci_rp_read_local_amp_info
*rp
= (void *) skb
->data
;
688 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
693 hdev
->amp_status
= rp
->amp_status
;
694 hdev
->amp_total_bw
= __le32_to_cpu(rp
->total_bw
);
695 hdev
->amp_max_bw
= __le32_to_cpu(rp
->max_bw
);
696 hdev
->amp_min_latency
= __le32_to_cpu(rp
->min_latency
);
697 hdev
->amp_max_pdu
= __le32_to_cpu(rp
->max_pdu
);
698 hdev
->amp_type
= rp
->amp_type
;
699 hdev
->amp_pal_cap
= __le16_to_cpu(rp
->pal_cap
);
700 hdev
->amp_assoc_size
= __le16_to_cpu(rp
->max_assoc_size
);
701 hdev
->amp_be_flush_to
= __le32_to_cpu(rp
->be_flush_to
);
702 hdev
->amp_max_flush_to
= __le32_to_cpu(rp
->max_flush_to
);
705 a2mp_send_getinfo_rsp(hdev
);
708 static void hci_cc_read_local_amp_assoc(struct hci_dev
*hdev
,
711 struct hci_rp_read_local_amp_assoc
*rp
= (void *) skb
->data
;
712 struct amp_assoc
*assoc
= &hdev
->loc_assoc
;
713 size_t rem_len
, frag_len
;
715 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
720 frag_len
= skb
->len
- sizeof(*rp
);
721 rem_len
= __le16_to_cpu(rp
->rem_len
);
723 if (rem_len
> frag_len
) {
724 BT_DBG("frag_len %zu rem_len %zu", frag_len
, rem_len
);
726 memcpy(assoc
->data
+ assoc
->offset
, rp
->frag
, frag_len
);
727 assoc
->offset
+= frag_len
;
729 /* Read other fragments */
730 amp_read_loc_assoc_frag(hdev
, rp
->phy_handle
);
735 memcpy(assoc
->data
+ assoc
->offset
, rp
->frag
, rem_len
);
736 assoc
->len
= assoc
->offset
+ rem_len
;
740 /* Send A2MP Rsp when all fragments are received */
741 a2mp_send_getampassoc_rsp(hdev
, rp
->status
);
742 a2mp_send_create_phy_link_req(hdev
, rp
->status
);
745 static void hci_cc_read_inq_rsp_tx_power(struct hci_dev
*hdev
,
748 struct hci_rp_read_inq_rsp_tx_power
*rp
= (void *) skb
->data
;
750 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
753 hdev
->inq_tx_power
= rp
->tx_power
;
756 static void hci_cc_pin_code_reply(struct hci_dev
*hdev
, struct sk_buff
*skb
)
758 struct hci_rp_pin_code_reply
*rp
= (void *) skb
->data
;
759 struct hci_cp_pin_code_reply
*cp
;
760 struct hci_conn
*conn
;
762 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
766 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
767 mgmt_pin_code_reply_complete(hdev
, &rp
->bdaddr
, rp
->status
);
772 cp
= hci_sent_cmd_data(hdev
, HCI_OP_PIN_CODE_REPLY
);
776 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &cp
->bdaddr
);
778 conn
->pin_length
= cp
->pin_len
;
781 hci_dev_unlock(hdev
);
784 static void hci_cc_pin_code_neg_reply(struct hci_dev
*hdev
, struct sk_buff
*skb
)
786 struct hci_rp_pin_code_neg_reply
*rp
= (void *) skb
->data
;
788 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
792 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
793 mgmt_pin_code_neg_reply_complete(hdev
, &rp
->bdaddr
,
796 hci_dev_unlock(hdev
);
799 static void hci_cc_le_read_buffer_size(struct hci_dev
*hdev
,
802 struct hci_rp_le_read_buffer_size
*rp
= (void *) skb
->data
;
804 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
809 hdev
->le_mtu
= __le16_to_cpu(rp
->le_mtu
);
810 hdev
->le_pkts
= rp
->le_max_pkt
;
812 hdev
->le_cnt
= hdev
->le_pkts
;
814 BT_DBG("%s le mtu %d:%d", hdev
->name
, hdev
->le_mtu
, hdev
->le_pkts
);
817 static void hci_cc_le_read_local_features(struct hci_dev
*hdev
,
820 struct hci_rp_le_read_local_features
*rp
= (void *) skb
->data
;
822 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
825 memcpy(hdev
->le_features
, rp
->features
, 8);
828 static void hci_cc_le_read_adv_tx_power(struct hci_dev
*hdev
,
831 struct hci_rp_le_read_adv_tx_power
*rp
= (void *) skb
->data
;
833 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
836 hdev
->adv_tx_power
= rp
->tx_power
;
839 static void hci_cc_user_confirm_reply(struct hci_dev
*hdev
, struct sk_buff
*skb
)
841 struct hci_rp_user_confirm_reply
*rp
= (void *) skb
->data
;
843 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
847 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
848 mgmt_user_confirm_reply_complete(hdev
, &rp
->bdaddr
, ACL_LINK
, 0,
851 hci_dev_unlock(hdev
);
854 static void hci_cc_user_confirm_neg_reply(struct hci_dev
*hdev
,
857 struct hci_rp_user_confirm_reply
*rp
= (void *) skb
->data
;
859 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
863 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
864 mgmt_user_confirm_neg_reply_complete(hdev
, &rp
->bdaddr
,
865 ACL_LINK
, 0, rp
->status
);
867 hci_dev_unlock(hdev
);
870 static void hci_cc_user_passkey_reply(struct hci_dev
*hdev
, struct sk_buff
*skb
)
872 struct hci_rp_user_confirm_reply
*rp
= (void *) skb
->data
;
874 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
878 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
879 mgmt_user_passkey_reply_complete(hdev
, &rp
->bdaddr
, ACL_LINK
,
882 hci_dev_unlock(hdev
);
885 static void hci_cc_user_passkey_neg_reply(struct hci_dev
*hdev
,
888 struct hci_rp_user_confirm_reply
*rp
= (void *) skb
->data
;
890 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
894 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
895 mgmt_user_passkey_neg_reply_complete(hdev
, &rp
->bdaddr
,
896 ACL_LINK
, 0, rp
->status
);
898 hci_dev_unlock(hdev
);
901 static void hci_cc_read_local_oob_data_reply(struct hci_dev
*hdev
,
904 struct hci_rp_read_local_oob_data
*rp
= (void *) skb
->data
;
906 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
909 mgmt_read_local_oob_data_reply_complete(hdev
, rp
->hash
,
910 rp
->randomizer
, rp
->status
);
911 hci_dev_unlock(hdev
);
914 static void hci_cc_le_set_adv_enable(struct hci_dev
*hdev
, struct sk_buff
*skb
)
916 __u8
*sent
, status
= *((__u8
*) skb
->data
);
918 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
920 sent
= hci_sent_cmd_data(hdev
, HCI_OP_LE_SET_ADV_ENABLE
);
928 set_bit(HCI_LE_PERIPHERAL
, &hdev
->dev_flags
);
930 clear_bit(HCI_LE_PERIPHERAL
, &hdev
->dev_flags
);
933 if (!test_bit(HCI_INIT
, &hdev
->flags
)) {
934 struct hci_request req
;
936 hci_req_init(&req
, hdev
);
938 hci_req_run(&req
, NULL
);
941 hci_dev_unlock(hdev
);
944 static void hci_cc_le_set_scan_param(struct hci_dev
*hdev
, struct sk_buff
*skb
)
946 __u8 status
= *((__u8
*) skb
->data
);
948 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
952 mgmt_start_discovery_failed(hdev
, status
);
953 hci_dev_unlock(hdev
);
958 static void hci_cc_le_set_scan_enable(struct hci_dev
*hdev
,
961 struct hci_cp_le_set_scan_enable
*cp
;
962 __u8 status
= *((__u8
*) skb
->data
);
964 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
966 cp
= hci_sent_cmd_data(hdev
, HCI_OP_LE_SET_SCAN_ENABLE
);
970 switch (cp
->enable
) {
971 case LE_SCANNING_ENABLED
:
974 mgmt_start_discovery_failed(hdev
, status
);
975 hci_dev_unlock(hdev
);
979 set_bit(HCI_LE_SCAN
, &hdev
->dev_flags
);
982 hci_discovery_set_state(hdev
, DISCOVERY_FINDING
);
983 hci_dev_unlock(hdev
);
986 case LE_SCANNING_DISABLED
:
989 mgmt_stop_discovery_failed(hdev
, status
);
990 hci_dev_unlock(hdev
);
994 clear_bit(HCI_LE_SCAN
, &hdev
->dev_flags
);
996 if (hdev
->discovery
.type
== DISCOV_TYPE_INTERLEAVED
&&
997 hdev
->discovery
.state
== DISCOVERY_FINDING
) {
998 mgmt_interleaved_discovery(hdev
);
1001 hci_discovery_set_state(hdev
, DISCOVERY_STOPPED
);
1002 hci_dev_unlock(hdev
);
1008 BT_ERR("Used reserved LE_Scan_Enable param %d", cp
->enable
);
1013 static void hci_cc_le_read_white_list_size(struct hci_dev
*hdev
,
1014 struct sk_buff
*skb
)
1016 struct hci_rp_le_read_white_list_size
*rp
= (void *) skb
->data
;
1018 BT_DBG("%s status 0x%2.2x size %u", hdev
->name
, rp
->status
, rp
->size
);
1021 hdev
->le_white_list_size
= rp
->size
;
1024 static void hci_cc_le_read_supported_states(struct hci_dev
*hdev
,
1025 struct sk_buff
*skb
)
1027 struct hci_rp_le_read_supported_states
*rp
= (void *) skb
->data
;
1029 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
1032 memcpy(hdev
->le_states
, rp
->le_states
, 8);
1035 static void hci_cc_write_le_host_supported(struct hci_dev
*hdev
,
1036 struct sk_buff
*skb
)
1038 struct hci_cp_write_le_host_supported
*sent
;
1039 __u8 status
= *((__u8
*) skb
->data
);
1041 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1043 sent
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_LE_HOST_SUPPORTED
);
1049 hdev
->host_features
[0] |= LMP_HOST_LE
;
1051 hdev
->host_features
[0] &= ~LMP_HOST_LE
;
1054 hdev
->host_features
[0] |= LMP_HOST_LE_BREDR
;
1056 hdev
->host_features
[0] &= ~LMP_HOST_LE_BREDR
;
1059 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
) &&
1060 !test_bit(HCI_INIT
, &hdev
->flags
))
1061 mgmt_le_enable_complete(hdev
, sent
->le
, status
);
1064 static void hci_cc_write_remote_amp_assoc(struct hci_dev
*hdev
,
1065 struct sk_buff
*skb
)
1067 struct hci_rp_write_remote_amp_assoc
*rp
= (void *) skb
->data
;
1069 BT_DBG("%s status 0x%2.2x phy_handle 0x%2.2x",
1070 hdev
->name
, rp
->status
, rp
->phy_handle
);
1075 amp_write_rem_assoc_continue(hdev
, rp
->phy_handle
);
1078 static void hci_cs_inquiry(struct hci_dev
*hdev
, __u8 status
)
1080 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1083 hci_conn_check_pending(hdev
);
1085 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
1086 mgmt_start_discovery_failed(hdev
, status
);
1087 hci_dev_unlock(hdev
);
1091 set_bit(HCI_INQUIRY
, &hdev
->flags
);
1094 hci_discovery_set_state(hdev
, DISCOVERY_FINDING
);
1095 hci_dev_unlock(hdev
);
1098 static void hci_cs_create_conn(struct hci_dev
*hdev
, __u8 status
)
1100 struct hci_cp_create_conn
*cp
;
1101 struct hci_conn
*conn
;
1103 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1105 cp
= hci_sent_cmd_data(hdev
, HCI_OP_CREATE_CONN
);
1111 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &cp
->bdaddr
);
1113 BT_DBG("%s bdaddr %pMR hcon %p", hdev
->name
, &cp
->bdaddr
, conn
);
1116 if (conn
&& conn
->state
== BT_CONNECT
) {
1117 if (status
!= 0x0c || conn
->attempt
> 2) {
1118 conn
->state
= BT_CLOSED
;
1119 hci_proto_connect_cfm(conn
, status
);
1122 conn
->state
= BT_CONNECT2
;
1126 conn
= hci_conn_add(hdev
, ACL_LINK
, &cp
->bdaddr
);
1129 conn
->link_mode
|= HCI_LM_MASTER
;
1131 BT_ERR("No memory for new connection");
1135 hci_dev_unlock(hdev
);
1138 static void hci_cs_add_sco(struct hci_dev
*hdev
, __u8 status
)
1140 struct hci_cp_add_sco
*cp
;
1141 struct hci_conn
*acl
, *sco
;
1144 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1149 cp
= hci_sent_cmd_data(hdev
, HCI_OP_ADD_SCO
);
1153 handle
= __le16_to_cpu(cp
->handle
);
1155 BT_DBG("%s handle 0x%4.4x", hdev
->name
, handle
);
1159 acl
= hci_conn_hash_lookup_handle(hdev
, handle
);
1163 sco
->state
= BT_CLOSED
;
1165 hci_proto_connect_cfm(sco
, status
);
1170 hci_dev_unlock(hdev
);
1173 static void hci_cs_auth_requested(struct hci_dev
*hdev
, __u8 status
)
1175 struct hci_cp_auth_requested
*cp
;
1176 struct hci_conn
*conn
;
1178 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1183 cp
= hci_sent_cmd_data(hdev
, HCI_OP_AUTH_REQUESTED
);
1189 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(cp
->handle
));
1191 if (conn
->state
== BT_CONFIG
) {
1192 hci_proto_connect_cfm(conn
, status
);
1193 hci_conn_drop(conn
);
1197 hci_dev_unlock(hdev
);
1200 static void hci_cs_set_conn_encrypt(struct hci_dev
*hdev
, __u8 status
)
1202 struct hci_cp_set_conn_encrypt
*cp
;
1203 struct hci_conn
*conn
;
1205 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1210 cp
= hci_sent_cmd_data(hdev
, HCI_OP_SET_CONN_ENCRYPT
);
1216 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(cp
->handle
));
1218 if (conn
->state
== BT_CONFIG
) {
1219 hci_proto_connect_cfm(conn
, status
);
1220 hci_conn_drop(conn
);
1224 hci_dev_unlock(hdev
);
1227 static int hci_outgoing_auth_needed(struct hci_dev
*hdev
,
1228 struct hci_conn
*conn
)
1230 if (conn
->state
!= BT_CONFIG
|| !conn
->out
)
1233 if (conn
->pending_sec_level
== BT_SECURITY_SDP
)
1236 /* Only request authentication for SSP connections or non-SSP
1237 * devices with sec_level HIGH or if MITM protection is requested */
1238 if (!hci_conn_ssp_enabled(conn
) && !(conn
->auth_type
& 0x01) &&
1239 conn
->pending_sec_level
!= BT_SECURITY_HIGH
)
1245 static int hci_resolve_name(struct hci_dev
*hdev
,
1246 struct inquiry_entry
*e
)
1248 struct hci_cp_remote_name_req cp
;
1250 memset(&cp
, 0, sizeof(cp
));
1252 bacpy(&cp
.bdaddr
, &e
->data
.bdaddr
);
1253 cp
.pscan_rep_mode
= e
->data
.pscan_rep_mode
;
1254 cp
.pscan_mode
= e
->data
.pscan_mode
;
1255 cp
.clock_offset
= e
->data
.clock_offset
;
1257 return hci_send_cmd(hdev
, HCI_OP_REMOTE_NAME_REQ
, sizeof(cp
), &cp
);
1260 static bool hci_resolve_next_name(struct hci_dev
*hdev
)
1262 struct discovery_state
*discov
= &hdev
->discovery
;
1263 struct inquiry_entry
*e
;
1265 if (list_empty(&discov
->resolve
))
1268 e
= hci_inquiry_cache_lookup_resolve(hdev
, BDADDR_ANY
, NAME_NEEDED
);
1272 if (hci_resolve_name(hdev
, e
) == 0) {
1273 e
->name_state
= NAME_PENDING
;
1280 static void hci_check_pending_name(struct hci_dev
*hdev
, struct hci_conn
*conn
,
1281 bdaddr_t
*bdaddr
, u8
*name
, u8 name_len
)
1283 struct discovery_state
*discov
= &hdev
->discovery
;
1284 struct inquiry_entry
*e
;
1286 if (conn
&& !test_and_set_bit(HCI_CONN_MGMT_CONNECTED
, &conn
->flags
))
1287 mgmt_device_connected(hdev
, bdaddr
, ACL_LINK
, 0x00, 0, name
,
1288 name_len
, conn
->dev_class
);
1290 if (discov
->state
== DISCOVERY_STOPPED
)
1293 if (discov
->state
== DISCOVERY_STOPPING
)
1294 goto discov_complete
;
1296 if (discov
->state
!= DISCOVERY_RESOLVING
)
1299 e
= hci_inquiry_cache_lookup_resolve(hdev
, bdaddr
, NAME_PENDING
);
1300 /* If the device was not found in a list of found devices names of which
1301 * are pending. there is no need to continue resolving a next name as it
1302 * will be done upon receiving another Remote Name Request Complete
1309 e
->name_state
= NAME_KNOWN
;
1310 mgmt_remote_name(hdev
, bdaddr
, ACL_LINK
, 0x00,
1311 e
->data
.rssi
, name
, name_len
);
1313 e
->name_state
= NAME_NOT_KNOWN
;
1316 if (hci_resolve_next_name(hdev
))
1320 hci_discovery_set_state(hdev
, DISCOVERY_STOPPED
);
1323 static void hci_cs_remote_name_req(struct hci_dev
*hdev
, __u8 status
)
1325 struct hci_cp_remote_name_req
*cp
;
1326 struct hci_conn
*conn
;
1328 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1330 /* If successful wait for the name req complete event before
1331 * checking for the need to do authentication */
1335 cp
= hci_sent_cmd_data(hdev
, HCI_OP_REMOTE_NAME_REQ
);
1341 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &cp
->bdaddr
);
1343 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
1344 hci_check_pending_name(hdev
, conn
, &cp
->bdaddr
, NULL
, 0);
1349 if (!hci_outgoing_auth_needed(hdev
, conn
))
1352 if (!test_and_set_bit(HCI_CONN_AUTH_PEND
, &conn
->flags
)) {
1353 struct hci_cp_auth_requested cp
;
1354 cp
.handle
= __cpu_to_le16(conn
->handle
);
1355 hci_send_cmd(hdev
, HCI_OP_AUTH_REQUESTED
, sizeof(cp
), &cp
);
1359 hci_dev_unlock(hdev
);
1362 static void hci_cs_read_remote_features(struct hci_dev
*hdev
, __u8 status
)
1364 struct hci_cp_read_remote_features
*cp
;
1365 struct hci_conn
*conn
;
1367 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1372 cp
= hci_sent_cmd_data(hdev
, HCI_OP_READ_REMOTE_FEATURES
);
1378 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(cp
->handle
));
1380 if (conn
->state
== BT_CONFIG
) {
1381 hci_proto_connect_cfm(conn
, status
);
1382 hci_conn_drop(conn
);
1386 hci_dev_unlock(hdev
);
1389 static void hci_cs_read_remote_ext_features(struct hci_dev
*hdev
, __u8 status
)
1391 struct hci_cp_read_remote_ext_features
*cp
;
1392 struct hci_conn
*conn
;
1394 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1399 cp
= hci_sent_cmd_data(hdev
, HCI_OP_READ_REMOTE_EXT_FEATURES
);
1405 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(cp
->handle
));
1407 if (conn
->state
== BT_CONFIG
) {
1408 hci_proto_connect_cfm(conn
, status
);
1409 hci_conn_drop(conn
);
1413 hci_dev_unlock(hdev
);
1416 static void hci_cs_setup_sync_conn(struct hci_dev
*hdev
, __u8 status
)
1418 struct hci_cp_setup_sync_conn
*cp
;
1419 struct hci_conn
*acl
, *sco
;
1422 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1427 cp
= hci_sent_cmd_data(hdev
, HCI_OP_SETUP_SYNC_CONN
);
1431 handle
= __le16_to_cpu(cp
->handle
);
1433 BT_DBG("%s handle 0x%4.4x", hdev
->name
, handle
);
1437 acl
= hci_conn_hash_lookup_handle(hdev
, handle
);
1441 sco
->state
= BT_CLOSED
;
1443 hci_proto_connect_cfm(sco
, status
);
1448 hci_dev_unlock(hdev
);
1451 static void hci_cs_sniff_mode(struct hci_dev
*hdev
, __u8 status
)
1453 struct hci_cp_sniff_mode
*cp
;
1454 struct hci_conn
*conn
;
1456 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1461 cp
= hci_sent_cmd_data(hdev
, HCI_OP_SNIFF_MODE
);
1467 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(cp
->handle
));
1469 clear_bit(HCI_CONN_MODE_CHANGE_PEND
, &conn
->flags
);
1471 if (test_and_clear_bit(HCI_CONN_SCO_SETUP_PEND
, &conn
->flags
))
1472 hci_sco_setup(conn
, status
);
1475 hci_dev_unlock(hdev
);
1478 static void hci_cs_exit_sniff_mode(struct hci_dev
*hdev
, __u8 status
)
1480 struct hci_cp_exit_sniff_mode
*cp
;
1481 struct hci_conn
*conn
;
1483 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1488 cp
= hci_sent_cmd_data(hdev
, HCI_OP_EXIT_SNIFF_MODE
);
1494 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(cp
->handle
));
1496 clear_bit(HCI_CONN_MODE_CHANGE_PEND
, &conn
->flags
);
1498 if (test_and_clear_bit(HCI_CONN_SCO_SETUP_PEND
, &conn
->flags
))
1499 hci_sco_setup(conn
, status
);
1502 hci_dev_unlock(hdev
);
1505 static void hci_cs_disconnect(struct hci_dev
*hdev
, u8 status
)
1507 struct hci_cp_disconnect
*cp
;
1508 struct hci_conn
*conn
;
1513 cp
= hci_sent_cmd_data(hdev
, HCI_OP_DISCONNECT
);
1519 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(cp
->handle
));
1521 mgmt_disconnect_failed(hdev
, &conn
->dst
, conn
->type
,
1522 conn
->dst_type
, status
);
1524 hci_dev_unlock(hdev
);
1527 static void hci_cs_le_create_conn(struct hci_dev
*hdev
, __u8 status
)
1529 struct hci_conn
*conn
;
1531 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1536 conn
= hci_conn_hash_lookup_state(hdev
, LE_LINK
, BT_CONNECT
);
1538 hci_dev_unlock(hdev
);
1542 BT_DBG("%s bdaddr %pMR conn %p", hdev
->name
, &conn
->dst
, conn
);
1544 conn
->state
= BT_CLOSED
;
1545 mgmt_connect_failed(hdev
, &conn
->dst
, conn
->type
,
1546 conn
->dst_type
, status
);
1547 hci_proto_connect_cfm(conn
, status
);
1550 hci_dev_unlock(hdev
);
1554 static void hci_cs_create_phylink(struct hci_dev
*hdev
, u8 status
)
1556 struct hci_cp_create_phy_link
*cp
;
1558 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1560 cp
= hci_sent_cmd_data(hdev
, HCI_OP_CREATE_PHY_LINK
);
1567 struct hci_conn
*hcon
;
1569 hcon
= hci_conn_hash_lookup_handle(hdev
, cp
->phy_handle
);
1573 amp_write_remote_assoc(hdev
, cp
->phy_handle
);
1576 hci_dev_unlock(hdev
);
1579 static void hci_cs_accept_phylink(struct hci_dev
*hdev
, u8 status
)
1581 struct hci_cp_accept_phy_link
*cp
;
1583 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1588 cp
= hci_sent_cmd_data(hdev
, HCI_OP_ACCEPT_PHY_LINK
);
1592 amp_write_remote_assoc(hdev
, cp
->phy_handle
);
1595 static void hci_inquiry_complete_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
1597 __u8 status
= *((__u8
*) skb
->data
);
1598 struct discovery_state
*discov
= &hdev
->discovery
;
1599 struct inquiry_entry
*e
;
1601 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1603 hci_conn_check_pending(hdev
);
1605 if (!test_and_clear_bit(HCI_INQUIRY
, &hdev
->flags
))
1608 smp_mb__after_clear_bit(); /* wake_up_bit advises about this barrier */
1609 wake_up_bit(&hdev
->flags
, HCI_INQUIRY
);
1611 if (!test_bit(HCI_MGMT
, &hdev
->dev_flags
))
1616 if (discov
->state
!= DISCOVERY_FINDING
)
1619 if (list_empty(&discov
->resolve
)) {
1620 hci_discovery_set_state(hdev
, DISCOVERY_STOPPED
);
1624 e
= hci_inquiry_cache_lookup_resolve(hdev
, BDADDR_ANY
, NAME_NEEDED
);
1625 if (e
&& hci_resolve_name(hdev
, e
) == 0) {
1626 e
->name_state
= NAME_PENDING
;
1627 hci_discovery_set_state(hdev
, DISCOVERY_RESOLVING
);
1629 hci_discovery_set_state(hdev
, DISCOVERY_STOPPED
);
1633 hci_dev_unlock(hdev
);
1636 static void hci_inquiry_result_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
1638 struct inquiry_data data
;
1639 struct inquiry_info
*info
= (void *) (skb
->data
+ 1);
1640 int num_rsp
= *((__u8
*) skb
->data
);
1642 BT_DBG("%s num_rsp %d", hdev
->name
, num_rsp
);
1647 if (test_bit(HCI_PERIODIC_INQ
, &hdev
->dev_flags
))
1652 for (; num_rsp
; num_rsp
--, info
++) {
1653 bool name_known
, ssp
;
1655 bacpy(&data
.bdaddr
, &info
->bdaddr
);
1656 data
.pscan_rep_mode
= info
->pscan_rep_mode
;
1657 data
.pscan_period_mode
= info
->pscan_period_mode
;
1658 data
.pscan_mode
= info
->pscan_mode
;
1659 memcpy(data
.dev_class
, info
->dev_class
, 3);
1660 data
.clock_offset
= info
->clock_offset
;
1662 data
.ssp_mode
= 0x00;
1664 name_known
= hci_inquiry_cache_update(hdev
, &data
, false, &ssp
);
1665 mgmt_device_found(hdev
, &info
->bdaddr
, ACL_LINK
, 0x00,
1666 info
->dev_class
, 0, !name_known
, ssp
, NULL
,
1670 hci_dev_unlock(hdev
);
1673 static void hci_conn_complete_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
1675 struct hci_ev_conn_complete
*ev
= (void *) skb
->data
;
1676 struct hci_conn
*conn
;
1678 BT_DBG("%s", hdev
->name
);
1682 conn
= hci_conn_hash_lookup_ba(hdev
, ev
->link_type
, &ev
->bdaddr
);
1684 if (ev
->link_type
!= SCO_LINK
)
1687 conn
= hci_conn_hash_lookup_ba(hdev
, ESCO_LINK
, &ev
->bdaddr
);
1691 conn
->type
= SCO_LINK
;
1695 conn
->handle
= __le16_to_cpu(ev
->handle
);
1697 if (conn
->type
== ACL_LINK
) {
1698 conn
->state
= BT_CONFIG
;
1699 hci_conn_hold(conn
);
1701 if (!conn
->out
&& !hci_conn_ssp_enabled(conn
) &&
1702 !hci_find_link_key(hdev
, &ev
->bdaddr
))
1703 conn
->disc_timeout
= HCI_PAIRING_TIMEOUT
;
1705 conn
->disc_timeout
= HCI_DISCONN_TIMEOUT
;
1707 conn
->state
= BT_CONNECTED
;
1709 hci_conn_hold_device(conn
);
1710 hci_conn_add_sysfs(conn
);
1712 if (test_bit(HCI_AUTH
, &hdev
->flags
))
1713 conn
->link_mode
|= HCI_LM_AUTH
;
1715 if (test_bit(HCI_ENCRYPT
, &hdev
->flags
))
1716 conn
->link_mode
|= HCI_LM_ENCRYPT
;
1718 /* Get remote features */
1719 if (conn
->type
== ACL_LINK
) {
1720 struct hci_cp_read_remote_features cp
;
1721 cp
.handle
= ev
->handle
;
1722 hci_send_cmd(hdev
, HCI_OP_READ_REMOTE_FEATURES
,
1726 /* Set packet type for incoming connection */
1727 if (!conn
->out
&& hdev
->hci_ver
< BLUETOOTH_VER_2_0
) {
1728 struct hci_cp_change_conn_ptype cp
;
1729 cp
.handle
= ev
->handle
;
1730 cp
.pkt_type
= cpu_to_le16(conn
->pkt_type
);
1731 hci_send_cmd(hdev
, HCI_OP_CHANGE_CONN_PTYPE
, sizeof(cp
),
1735 conn
->state
= BT_CLOSED
;
1736 if (conn
->type
== ACL_LINK
)
1737 mgmt_connect_failed(hdev
, &ev
->bdaddr
, conn
->type
,
1738 conn
->dst_type
, ev
->status
);
1741 if (conn
->type
== ACL_LINK
)
1742 hci_sco_setup(conn
, ev
->status
);
1745 hci_proto_connect_cfm(conn
, ev
->status
);
1747 } else if (ev
->link_type
!= ACL_LINK
)
1748 hci_proto_connect_cfm(conn
, ev
->status
);
1751 hci_dev_unlock(hdev
);
1753 hci_conn_check_pending(hdev
);
1756 void hci_conn_accept(struct hci_conn
*conn
, int mask
)
1758 struct hci_dev
*hdev
= conn
->hdev
;
1760 BT_DBG("conn %p", conn
);
1762 conn
->state
= BT_CONFIG
;
1764 if (!lmp_esco_capable(hdev
)) {
1765 struct hci_cp_accept_conn_req cp
;
1767 bacpy(&cp
.bdaddr
, &conn
->dst
);
1769 if (lmp_rswitch_capable(hdev
) && (mask
& HCI_LM_MASTER
))
1770 cp
.role
= 0x00; /* Become master */
1772 cp
.role
= 0x01; /* Remain slave */
1774 hci_send_cmd(hdev
, HCI_OP_ACCEPT_CONN_REQ
, sizeof(cp
), &cp
);
1775 } else /* lmp_esco_capable(hdev)) */ {
1776 struct hci_cp_accept_sync_conn_req cp
;
1778 bacpy(&cp
.bdaddr
, &conn
->dst
);
1779 cp
.pkt_type
= cpu_to_le16(conn
->pkt_type
);
1781 cp
.tx_bandwidth
= __constant_cpu_to_le32(0x00001f40);
1782 cp
.rx_bandwidth
= __constant_cpu_to_le32(0x00001f40);
1783 cp
.max_latency
= __constant_cpu_to_le16(0xffff);
1784 cp
.content_format
= cpu_to_le16(hdev
->voice_setting
);
1785 cp
.retrans_effort
= 0xff;
1787 hci_send_cmd(hdev
, HCI_OP_ACCEPT_SYNC_CONN_REQ
,
1792 static void hci_conn_request_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
1794 struct hci_ev_conn_request
*ev
= (void *) skb
->data
;
1795 int mask
= hdev
->link_mode
;
1798 BT_DBG("%s bdaddr %pMR type 0x%x", hdev
->name
, &ev
->bdaddr
,
1801 mask
|= hci_proto_connect_ind(hdev
, &ev
->bdaddr
, ev
->link_type
,
1804 if ((mask
& HCI_LM_ACCEPT
) &&
1805 !hci_blacklist_lookup(hdev
, &ev
->bdaddr
)) {
1806 /* Connection accepted */
1807 struct inquiry_entry
*ie
;
1808 struct hci_conn
*conn
;
1812 ie
= hci_inquiry_cache_lookup(hdev
, &ev
->bdaddr
);
1814 memcpy(ie
->data
.dev_class
, ev
->dev_class
, 3);
1816 conn
= hci_conn_hash_lookup_ba(hdev
, ev
->link_type
,
1819 conn
= hci_conn_add(hdev
, ev
->link_type
, &ev
->bdaddr
);
1821 BT_ERR("No memory for new connection");
1822 hci_dev_unlock(hdev
);
1827 memcpy(conn
->dev_class
, ev
->dev_class
, 3);
1829 hci_dev_unlock(hdev
);
1831 if (ev
->link_type
== ACL_LINK
||
1832 (!(flags
& HCI_PROTO_DEFER
) && !lmp_esco_capable(hdev
))) {
1833 struct hci_cp_accept_conn_req cp
;
1834 conn
->state
= BT_CONNECT
;
1836 bacpy(&cp
.bdaddr
, &ev
->bdaddr
);
1838 if (lmp_rswitch_capable(hdev
) && (mask
& HCI_LM_MASTER
))
1839 cp
.role
= 0x00; /* Become master */
1841 cp
.role
= 0x01; /* Remain slave */
1843 hci_send_cmd(hdev
, HCI_OP_ACCEPT_CONN_REQ
, sizeof(cp
),
1845 } else if (!(flags
& HCI_PROTO_DEFER
)) {
1846 struct hci_cp_accept_sync_conn_req cp
;
1847 conn
->state
= BT_CONNECT
;
1849 bacpy(&cp
.bdaddr
, &ev
->bdaddr
);
1850 cp
.pkt_type
= cpu_to_le16(conn
->pkt_type
);
1852 cp
.tx_bandwidth
= __constant_cpu_to_le32(0x00001f40);
1853 cp
.rx_bandwidth
= __constant_cpu_to_le32(0x00001f40);
1854 cp
.max_latency
= __constant_cpu_to_le16(0xffff);
1855 cp
.content_format
= cpu_to_le16(hdev
->voice_setting
);
1856 cp
.retrans_effort
= 0xff;
1858 hci_send_cmd(hdev
, HCI_OP_ACCEPT_SYNC_CONN_REQ
,
1861 conn
->state
= BT_CONNECT2
;
1862 hci_proto_connect_cfm(conn
, 0);
1863 hci_conn_drop(conn
);
1866 /* Connection rejected */
1867 struct hci_cp_reject_conn_req cp
;
1869 bacpy(&cp
.bdaddr
, &ev
->bdaddr
);
1870 cp
.reason
= HCI_ERROR_REJ_BAD_ADDR
;
1871 hci_send_cmd(hdev
, HCI_OP_REJECT_CONN_REQ
, sizeof(cp
), &cp
);
1875 static u8
hci_to_mgmt_reason(u8 err
)
1878 case HCI_ERROR_CONNECTION_TIMEOUT
:
1879 return MGMT_DEV_DISCONN_TIMEOUT
;
1880 case HCI_ERROR_REMOTE_USER_TERM
:
1881 case HCI_ERROR_REMOTE_LOW_RESOURCES
:
1882 case HCI_ERROR_REMOTE_POWER_OFF
:
1883 return MGMT_DEV_DISCONN_REMOTE
;
1884 case HCI_ERROR_LOCAL_HOST_TERM
:
1885 return MGMT_DEV_DISCONN_LOCAL_HOST
;
1887 return MGMT_DEV_DISCONN_UNKNOWN
;
1891 static void hci_disconn_complete_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
1893 struct hci_ev_disconn_complete
*ev
= (void *) skb
->data
;
1894 struct hci_conn
*conn
;
1896 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
1900 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(ev
->handle
));
1904 if (ev
->status
== 0)
1905 conn
->state
= BT_CLOSED
;
1907 if (test_and_clear_bit(HCI_CONN_MGMT_CONNECTED
, &conn
->flags
) &&
1908 (conn
->type
== ACL_LINK
|| conn
->type
== LE_LINK
)) {
1910 mgmt_disconnect_failed(hdev
, &conn
->dst
, conn
->type
,
1911 conn
->dst_type
, ev
->status
);
1913 u8 reason
= hci_to_mgmt_reason(ev
->reason
);
1915 mgmt_device_disconnected(hdev
, &conn
->dst
, conn
->type
,
1916 conn
->dst_type
, reason
);
1920 if (ev
->status
== 0) {
1921 if (conn
->type
== ACL_LINK
&& conn
->flush_key
)
1922 hci_remove_link_key(hdev
, &conn
->dst
);
1923 hci_proto_disconn_cfm(conn
, ev
->reason
);
1928 hci_dev_unlock(hdev
);
1931 static void hci_auth_complete_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
1933 struct hci_ev_auth_complete
*ev
= (void *) skb
->data
;
1934 struct hci_conn
*conn
;
1936 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
1940 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(ev
->handle
));
1945 if (!hci_conn_ssp_enabled(conn
) &&
1946 test_bit(HCI_CONN_REAUTH_PEND
, &conn
->flags
)) {
1947 BT_INFO("re-auth of legacy device is not possible.");
1949 conn
->link_mode
|= HCI_LM_AUTH
;
1950 conn
->sec_level
= conn
->pending_sec_level
;
1953 mgmt_auth_failed(hdev
, &conn
->dst
, conn
->type
, conn
->dst_type
,
1957 clear_bit(HCI_CONN_AUTH_PEND
, &conn
->flags
);
1958 clear_bit(HCI_CONN_REAUTH_PEND
, &conn
->flags
);
1960 if (conn
->state
== BT_CONFIG
) {
1961 if (!ev
->status
&& hci_conn_ssp_enabled(conn
)) {
1962 struct hci_cp_set_conn_encrypt cp
;
1963 cp
.handle
= ev
->handle
;
1965 hci_send_cmd(hdev
, HCI_OP_SET_CONN_ENCRYPT
, sizeof(cp
),
1968 conn
->state
= BT_CONNECTED
;
1969 hci_proto_connect_cfm(conn
, ev
->status
);
1970 hci_conn_drop(conn
);
1973 hci_auth_cfm(conn
, ev
->status
);
1975 hci_conn_hold(conn
);
1976 conn
->disc_timeout
= HCI_DISCONN_TIMEOUT
;
1977 hci_conn_drop(conn
);
1980 if (test_bit(HCI_CONN_ENCRYPT_PEND
, &conn
->flags
)) {
1982 struct hci_cp_set_conn_encrypt cp
;
1983 cp
.handle
= ev
->handle
;
1985 hci_send_cmd(hdev
, HCI_OP_SET_CONN_ENCRYPT
, sizeof(cp
),
1988 clear_bit(HCI_CONN_ENCRYPT_PEND
, &conn
->flags
);
1989 hci_encrypt_cfm(conn
, ev
->status
, 0x00);
1994 hci_dev_unlock(hdev
);
1997 static void hci_remote_name_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
1999 struct hci_ev_remote_name
*ev
= (void *) skb
->data
;
2000 struct hci_conn
*conn
;
2002 BT_DBG("%s", hdev
->name
);
2004 hci_conn_check_pending(hdev
);
2008 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &ev
->bdaddr
);
2010 if (!test_bit(HCI_MGMT
, &hdev
->dev_flags
))
2013 if (ev
->status
== 0)
2014 hci_check_pending_name(hdev
, conn
, &ev
->bdaddr
, ev
->name
,
2015 strnlen(ev
->name
, HCI_MAX_NAME_LENGTH
));
2017 hci_check_pending_name(hdev
, conn
, &ev
->bdaddr
, NULL
, 0);
2023 if (!hci_outgoing_auth_needed(hdev
, conn
))
2026 if (!test_and_set_bit(HCI_CONN_AUTH_PEND
, &conn
->flags
)) {
2027 struct hci_cp_auth_requested cp
;
2028 cp
.handle
= __cpu_to_le16(conn
->handle
);
2029 hci_send_cmd(hdev
, HCI_OP_AUTH_REQUESTED
, sizeof(cp
), &cp
);
2033 hci_dev_unlock(hdev
);
2036 static void hci_encrypt_change_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2038 struct hci_ev_encrypt_change
*ev
= (void *) skb
->data
;
2039 struct hci_conn
*conn
;
2041 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
2045 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(ev
->handle
));
2049 /* Encryption implies authentication */
2050 conn
->link_mode
|= HCI_LM_AUTH
;
2051 conn
->link_mode
|= HCI_LM_ENCRYPT
;
2052 conn
->sec_level
= conn
->pending_sec_level
;
2054 conn
->link_mode
&= ~HCI_LM_ENCRYPT
;
2057 clear_bit(HCI_CONN_ENCRYPT_PEND
, &conn
->flags
);
2059 if (ev
->status
&& conn
->state
== BT_CONNECTED
) {
2060 hci_disconnect(conn
, HCI_ERROR_AUTH_FAILURE
);
2061 hci_conn_drop(conn
);
2065 if (conn
->state
== BT_CONFIG
) {
2067 conn
->state
= BT_CONNECTED
;
2069 hci_proto_connect_cfm(conn
, ev
->status
);
2070 hci_conn_drop(conn
);
2072 hci_encrypt_cfm(conn
, ev
->status
, ev
->encrypt
);
2076 hci_dev_unlock(hdev
);
2079 static void hci_change_link_key_complete_evt(struct hci_dev
*hdev
,
2080 struct sk_buff
*skb
)
2082 struct hci_ev_change_link_key_complete
*ev
= (void *) skb
->data
;
2083 struct hci_conn
*conn
;
2085 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
2089 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(ev
->handle
));
2092 conn
->link_mode
|= HCI_LM_SECURE
;
2094 clear_bit(HCI_CONN_AUTH_PEND
, &conn
->flags
);
2096 hci_key_change_cfm(conn
, ev
->status
);
2099 hci_dev_unlock(hdev
);
2102 static void hci_remote_features_evt(struct hci_dev
*hdev
,
2103 struct sk_buff
*skb
)
2105 struct hci_ev_remote_features
*ev
= (void *) skb
->data
;
2106 struct hci_conn
*conn
;
2108 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
2112 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(ev
->handle
));
2117 memcpy(conn
->features
, ev
->features
, 8);
2119 if (conn
->state
!= BT_CONFIG
)
2122 if (!ev
->status
&& lmp_ssp_capable(hdev
) && lmp_ssp_capable(conn
)) {
2123 struct hci_cp_read_remote_ext_features cp
;
2124 cp
.handle
= ev
->handle
;
2126 hci_send_cmd(hdev
, HCI_OP_READ_REMOTE_EXT_FEATURES
,
2131 if (!ev
->status
&& !test_bit(HCI_CONN_MGMT_CONNECTED
, &conn
->flags
)) {
2132 struct hci_cp_remote_name_req cp
;
2133 memset(&cp
, 0, sizeof(cp
));
2134 bacpy(&cp
.bdaddr
, &conn
->dst
);
2135 cp
.pscan_rep_mode
= 0x02;
2136 hci_send_cmd(hdev
, HCI_OP_REMOTE_NAME_REQ
, sizeof(cp
), &cp
);
2137 } else if (!test_and_set_bit(HCI_CONN_MGMT_CONNECTED
, &conn
->flags
))
2138 mgmt_device_connected(hdev
, &conn
->dst
, conn
->type
,
2139 conn
->dst_type
, 0, NULL
, 0,
2142 if (!hci_outgoing_auth_needed(hdev
, conn
)) {
2143 conn
->state
= BT_CONNECTED
;
2144 hci_proto_connect_cfm(conn
, ev
->status
);
2145 hci_conn_drop(conn
);
2149 hci_dev_unlock(hdev
);
2152 static void hci_cmd_complete_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2154 struct hci_ev_cmd_complete
*ev
= (void *) skb
->data
;
2155 u8 status
= skb
->data
[sizeof(*ev
)];
2158 skb_pull(skb
, sizeof(*ev
));
2160 opcode
= __le16_to_cpu(ev
->opcode
);
2163 case HCI_OP_INQUIRY_CANCEL
:
2164 hci_cc_inquiry_cancel(hdev
, skb
);
2167 case HCI_OP_PERIODIC_INQ
:
2168 hci_cc_periodic_inq(hdev
, skb
);
2171 case HCI_OP_EXIT_PERIODIC_INQ
:
2172 hci_cc_exit_periodic_inq(hdev
, skb
);
2175 case HCI_OP_REMOTE_NAME_REQ_CANCEL
:
2176 hci_cc_remote_name_req_cancel(hdev
, skb
);
2179 case HCI_OP_ROLE_DISCOVERY
:
2180 hci_cc_role_discovery(hdev
, skb
);
2183 case HCI_OP_READ_LINK_POLICY
:
2184 hci_cc_read_link_policy(hdev
, skb
);
2187 case HCI_OP_WRITE_LINK_POLICY
:
2188 hci_cc_write_link_policy(hdev
, skb
);
2191 case HCI_OP_READ_DEF_LINK_POLICY
:
2192 hci_cc_read_def_link_policy(hdev
, skb
);
2195 case HCI_OP_WRITE_DEF_LINK_POLICY
:
2196 hci_cc_write_def_link_policy(hdev
, skb
);
2200 hci_cc_reset(hdev
, skb
);
2203 case HCI_OP_WRITE_LOCAL_NAME
:
2204 hci_cc_write_local_name(hdev
, skb
);
2207 case HCI_OP_READ_LOCAL_NAME
:
2208 hci_cc_read_local_name(hdev
, skb
);
2211 case HCI_OP_WRITE_AUTH_ENABLE
:
2212 hci_cc_write_auth_enable(hdev
, skb
);
2215 case HCI_OP_WRITE_ENCRYPT_MODE
:
2216 hci_cc_write_encrypt_mode(hdev
, skb
);
2219 case HCI_OP_WRITE_SCAN_ENABLE
:
2220 hci_cc_write_scan_enable(hdev
, skb
);
2223 case HCI_OP_READ_CLASS_OF_DEV
:
2224 hci_cc_read_class_of_dev(hdev
, skb
);
2227 case HCI_OP_WRITE_CLASS_OF_DEV
:
2228 hci_cc_write_class_of_dev(hdev
, skb
);
2231 case HCI_OP_READ_VOICE_SETTING
:
2232 hci_cc_read_voice_setting(hdev
, skb
);
2235 case HCI_OP_WRITE_VOICE_SETTING
:
2236 hci_cc_write_voice_setting(hdev
, skb
);
2239 case HCI_OP_WRITE_SSP_MODE
:
2240 hci_cc_write_ssp_mode(hdev
, skb
);
2243 case HCI_OP_READ_LOCAL_VERSION
:
2244 hci_cc_read_local_version(hdev
, skb
);
2247 case HCI_OP_READ_LOCAL_COMMANDS
:
2248 hci_cc_read_local_commands(hdev
, skb
);
2251 case HCI_OP_READ_LOCAL_FEATURES
:
2252 hci_cc_read_local_features(hdev
, skb
);
2255 case HCI_OP_READ_LOCAL_EXT_FEATURES
:
2256 hci_cc_read_local_ext_features(hdev
, skb
);
2259 case HCI_OP_READ_BUFFER_SIZE
:
2260 hci_cc_read_buffer_size(hdev
, skb
);
2263 case HCI_OP_READ_BD_ADDR
:
2264 hci_cc_read_bd_addr(hdev
, skb
);
2267 case HCI_OP_READ_PAGE_SCAN_ACTIVITY
:
2268 hci_cc_read_page_scan_activity(hdev
, skb
);
2271 case HCI_OP_WRITE_PAGE_SCAN_ACTIVITY
:
2272 hci_cc_write_page_scan_activity(hdev
, skb
);
2275 case HCI_OP_READ_PAGE_SCAN_TYPE
:
2276 hci_cc_read_page_scan_type(hdev
, skb
);
2279 case HCI_OP_WRITE_PAGE_SCAN_TYPE
:
2280 hci_cc_write_page_scan_type(hdev
, skb
);
2283 case HCI_OP_READ_DATA_BLOCK_SIZE
:
2284 hci_cc_read_data_block_size(hdev
, skb
);
2287 case HCI_OP_READ_FLOW_CONTROL_MODE
:
2288 hci_cc_read_flow_control_mode(hdev
, skb
);
2291 case HCI_OP_READ_LOCAL_AMP_INFO
:
2292 hci_cc_read_local_amp_info(hdev
, skb
);
2295 case HCI_OP_READ_LOCAL_AMP_ASSOC
:
2296 hci_cc_read_local_amp_assoc(hdev
, skb
);
2299 case HCI_OP_READ_INQ_RSP_TX_POWER
:
2300 hci_cc_read_inq_rsp_tx_power(hdev
, skb
);
2303 case HCI_OP_PIN_CODE_REPLY
:
2304 hci_cc_pin_code_reply(hdev
, skb
);
2307 case HCI_OP_PIN_CODE_NEG_REPLY
:
2308 hci_cc_pin_code_neg_reply(hdev
, skb
);
2311 case HCI_OP_READ_LOCAL_OOB_DATA
:
2312 hci_cc_read_local_oob_data_reply(hdev
, skb
);
2315 case HCI_OP_LE_READ_BUFFER_SIZE
:
2316 hci_cc_le_read_buffer_size(hdev
, skb
);
2319 case HCI_OP_LE_READ_LOCAL_FEATURES
:
2320 hci_cc_le_read_local_features(hdev
, skb
);
2323 case HCI_OP_LE_READ_ADV_TX_POWER
:
2324 hci_cc_le_read_adv_tx_power(hdev
, skb
);
2327 case HCI_OP_USER_CONFIRM_REPLY
:
2328 hci_cc_user_confirm_reply(hdev
, skb
);
2331 case HCI_OP_USER_CONFIRM_NEG_REPLY
:
2332 hci_cc_user_confirm_neg_reply(hdev
, skb
);
2335 case HCI_OP_USER_PASSKEY_REPLY
:
2336 hci_cc_user_passkey_reply(hdev
, skb
);
2339 case HCI_OP_USER_PASSKEY_NEG_REPLY
:
2340 hci_cc_user_passkey_neg_reply(hdev
, skb
);
2343 case HCI_OP_LE_SET_SCAN_PARAM
:
2344 hci_cc_le_set_scan_param(hdev
, skb
);
2347 case HCI_OP_LE_SET_ADV_ENABLE
:
2348 hci_cc_le_set_adv_enable(hdev
, skb
);
2351 case HCI_OP_LE_SET_SCAN_ENABLE
:
2352 hci_cc_le_set_scan_enable(hdev
, skb
);
2355 case HCI_OP_LE_READ_WHITE_LIST_SIZE
:
2356 hci_cc_le_read_white_list_size(hdev
, skb
);
2359 case HCI_OP_LE_READ_SUPPORTED_STATES
:
2360 hci_cc_le_read_supported_states(hdev
, skb
);
2363 case HCI_OP_WRITE_LE_HOST_SUPPORTED
:
2364 hci_cc_write_le_host_supported(hdev
, skb
);
2367 case HCI_OP_WRITE_REMOTE_AMP_ASSOC
:
2368 hci_cc_write_remote_amp_assoc(hdev
, skb
);
2372 BT_DBG("%s opcode 0x%4.4x", hdev
->name
, opcode
);
2376 if (opcode
!= HCI_OP_NOP
)
2377 del_timer(&hdev
->cmd_timer
);
2379 hci_req_cmd_complete(hdev
, opcode
, status
);
2381 if (ev
->ncmd
&& !test_bit(HCI_RESET
, &hdev
->flags
)) {
2382 atomic_set(&hdev
->cmd_cnt
, 1);
2383 if (!skb_queue_empty(&hdev
->cmd_q
))
2384 queue_work(hdev
->workqueue
, &hdev
->cmd_work
);
2388 static void hci_cmd_status_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2390 struct hci_ev_cmd_status
*ev
= (void *) skb
->data
;
2393 skb_pull(skb
, sizeof(*ev
));
2395 opcode
= __le16_to_cpu(ev
->opcode
);
2398 case HCI_OP_INQUIRY
:
2399 hci_cs_inquiry(hdev
, ev
->status
);
2402 case HCI_OP_CREATE_CONN
:
2403 hci_cs_create_conn(hdev
, ev
->status
);
2406 case HCI_OP_ADD_SCO
:
2407 hci_cs_add_sco(hdev
, ev
->status
);
2410 case HCI_OP_AUTH_REQUESTED
:
2411 hci_cs_auth_requested(hdev
, ev
->status
);
2414 case HCI_OP_SET_CONN_ENCRYPT
:
2415 hci_cs_set_conn_encrypt(hdev
, ev
->status
);
2418 case HCI_OP_REMOTE_NAME_REQ
:
2419 hci_cs_remote_name_req(hdev
, ev
->status
);
2422 case HCI_OP_READ_REMOTE_FEATURES
:
2423 hci_cs_read_remote_features(hdev
, ev
->status
);
2426 case HCI_OP_READ_REMOTE_EXT_FEATURES
:
2427 hci_cs_read_remote_ext_features(hdev
, ev
->status
);
2430 case HCI_OP_SETUP_SYNC_CONN
:
2431 hci_cs_setup_sync_conn(hdev
, ev
->status
);
2434 case HCI_OP_SNIFF_MODE
:
2435 hci_cs_sniff_mode(hdev
, ev
->status
);
2438 case HCI_OP_EXIT_SNIFF_MODE
:
2439 hci_cs_exit_sniff_mode(hdev
, ev
->status
);
2442 case HCI_OP_DISCONNECT
:
2443 hci_cs_disconnect(hdev
, ev
->status
);
2446 case HCI_OP_LE_CREATE_CONN
:
2447 hci_cs_le_create_conn(hdev
, ev
->status
);
2450 case HCI_OP_CREATE_PHY_LINK
:
2451 hci_cs_create_phylink(hdev
, ev
->status
);
2454 case HCI_OP_ACCEPT_PHY_LINK
:
2455 hci_cs_accept_phylink(hdev
, ev
->status
);
2459 BT_DBG("%s opcode 0x%4.4x", hdev
->name
, opcode
);
2463 if (opcode
!= HCI_OP_NOP
)
2464 del_timer(&hdev
->cmd_timer
);
2467 (hdev
->sent_cmd
&& !bt_cb(hdev
->sent_cmd
)->req
.event
))
2468 hci_req_cmd_complete(hdev
, opcode
, ev
->status
);
2470 if (ev
->ncmd
&& !test_bit(HCI_RESET
, &hdev
->flags
)) {
2471 atomic_set(&hdev
->cmd_cnt
, 1);
2472 if (!skb_queue_empty(&hdev
->cmd_q
))
2473 queue_work(hdev
->workqueue
, &hdev
->cmd_work
);
2477 static void hci_role_change_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2479 struct hci_ev_role_change
*ev
= (void *) skb
->data
;
2480 struct hci_conn
*conn
;
2482 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
2486 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &ev
->bdaddr
);
2490 conn
->link_mode
&= ~HCI_LM_MASTER
;
2492 conn
->link_mode
|= HCI_LM_MASTER
;
2495 clear_bit(HCI_CONN_RSWITCH_PEND
, &conn
->flags
);
2497 hci_role_switch_cfm(conn
, ev
->status
, ev
->role
);
2500 hci_dev_unlock(hdev
);
2503 static void hci_num_comp_pkts_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2505 struct hci_ev_num_comp_pkts
*ev
= (void *) skb
->data
;
2508 if (hdev
->flow_ctl_mode
!= HCI_FLOW_CTL_MODE_PACKET_BASED
) {
2509 BT_ERR("Wrong event for mode %d", hdev
->flow_ctl_mode
);
2513 if (skb
->len
< sizeof(*ev
) || skb
->len
< sizeof(*ev
) +
2514 ev
->num_hndl
* sizeof(struct hci_comp_pkts_info
)) {
2515 BT_DBG("%s bad parameters", hdev
->name
);
2519 BT_DBG("%s num_hndl %d", hdev
->name
, ev
->num_hndl
);
2521 for (i
= 0; i
< ev
->num_hndl
; i
++) {
2522 struct hci_comp_pkts_info
*info
= &ev
->handles
[i
];
2523 struct hci_conn
*conn
;
2524 __u16 handle
, count
;
2526 handle
= __le16_to_cpu(info
->handle
);
2527 count
= __le16_to_cpu(info
->count
);
2529 conn
= hci_conn_hash_lookup_handle(hdev
, handle
);
2533 conn
->sent
-= count
;
2535 switch (conn
->type
) {
2537 hdev
->acl_cnt
+= count
;
2538 if (hdev
->acl_cnt
> hdev
->acl_pkts
)
2539 hdev
->acl_cnt
= hdev
->acl_pkts
;
2543 if (hdev
->le_pkts
) {
2544 hdev
->le_cnt
+= count
;
2545 if (hdev
->le_cnt
> hdev
->le_pkts
)
2546 hdev
->le_cnt
= hdev
->le_pkts
;
2548 hdev
->acl_cnt
+= count
;
2549 if (hdev
->acl_cnt
> hdev
->acl_pkts
)
2550 hdev
->acl_cnt
= hdev
->acl_pkts
;
2555 hdev
->sco_cnt
+= count
;
2556 if (hdev
->sco_cnt
> hdev
->sco_pkts
)
2557 hdev
->sco_cnt
= hdev
->sco_pkts
;
2561 BT_ERR("Unknown type %d conn %p", conn
->type
, conn
);
2566 queue_work(hdev
->workqueue
, &hdev
->tx_work
);
2569 static struct hci_conn
*__hci_conn_lookup_handle(struct hci_dev
*hdev
,
2572 struct hci_chan
*chan
;
2574 switch (hdev
->dev_type
) {
2576 return hci_conn_hash_lookup_handle(hdev
, handle
);
2578 chan
= hci_chan_lookup_handle(hdev
, handle
);
2583 BT_ERR("%s unknown dev_type %d", hdev
->name
, hdev
->dev_type
);
2590 static void hci_num_comp_blocks_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2592 struct hci_ev_num_comp_blocks
*ev
= (void *) skb
->data
;
2595 if (hdev
->flow_ctl_mode
!= HCI_FLOW_CTL_MODE_BLOCK_BASED
) {
2596 BT_ERR("Wrong event for mode %d", hdev
->flow_ctl_mode
);
2600 if (skb
->len
< sizeof(*ev
) || skb
->len
< sizeof(*ev
) +
2601 ev
->num_hndl
* sizeof(struct hci_comp_blocks_info
)) {
2602 BT_DBG("%s bad parameters", hdev
->name
);
2606 BT_DBG("%s num_blocks %d num_hndl %d", hdev
->name
, ev
->num_blocks
,
2609 for (i
= 0; i
< ev
->num_hndl
; i
++) {
2610 struct hci_comp_blocks_info
*info
= &ev
->handles
[i
];
2611 struct hci_conn
*conn
= NULL
;
2612 __u16 handle
, block_count
;
2614 handle
= __le16_to_cpu(info
->handle
);
2615 block_count
= __le16_to_cpu(info
->blocks
);
2617 conn
= __hci_conn_lookup_handle(hdev
, handle
);
2621 conn
->sent
-= block_count
;
2623 switch (conn
->type
) {
2626 hdev
->block_cnt
+= block_count
;
2627 if (hdev
->block_cnt
> hdev
->num_blocks
)
2628 hdev
->block_cnt
= hdev
->num_blocks
;
2632 BT_ERR("Unknown type %d conn %p", conn
->type
, conn
);
2637 queue_work(hdev
->workqueue
, &hdev
->tx_work
);
2640 static void hci_mode_change_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2642 struct hci_ev_mode_change
*ev
= (void *) skb
->data
;
2643 struct hci_conn
*conn
;
2645 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
2649 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(ev
->handle
));
2651 conn
->mode
= ev
->mode
;
2652 conn
->interval
= __le16_to_cpu(ev
->interval
);
2654 if (!test_and_clear_bit(HCI_CONN_MODE_CHANGE_PEND
,
2656 if (conn
->mode
== HCI_CM_ACTIVE
)
2657 set_bit(HCI_CONN_POWER_SAVE
, &conn
->flags
);
2659 clear_bit(HCI_CONN_POWER_SAVE
, &conn
->flags
);
2662 if (test_and_clear_bit(HCI_CONN_SCO_SETUP_PEND
, &conn
->flags
))
2663 hci_sco_setup(conn
, ev
->status
);
2666 hci_dev_unlock(hdev
);
2669 static void hci_pin_code_request_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2671 struct hci_ev_pin_code_req
*ev
= (void *) skb
->data
;
2672 struct hci_conn
*conn
;
2674 BT_DBG("%s", hdev
->name
);
2678 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &ev
->bdaddr
);
2682 if (conn
->state
== BT_CONNECTED
) {
2683 hci_conn_hold(conn
);
2684 conn
->disc_timeout
= HCI_PAIRING_TIMEOUT
;
2685 hci_conn_drop(conn
);
2688 if (!test_bit(HCI_PAIRABLE
, &hdev
->dev_flags
))
2689 hci_send_cmd(hdev
, HCI_OP_PIN_CODE_NEG_REPLY
,
2690 sizeof(ev
->bdaddr
), &ev
->bdaddr
);
2691 else if (test_bit(HCI_MGMT
, &hdev
->dev_flags
)) {
2694 if (conn
->pending_sec_level
== BT_SECURITY_HIGH
)
2699 mgmt_pin_code_request(hdev
, &ev
->bdaddr
, secure
);
2703 hci_dev_unlock(hdev
);
2706 static void hci_link_key_request_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2708 struct hci_ev_link_key_req
*ev
= (void *) skb
->data
;
2709 struct hci_cp_link_key_reply cp
;
2710 struct hci_conn
*conn
;
2711 struct link_key
*key
;
2713 BT_DBG("%s", hdev
->name
);
2715 if (!test_bit(HCI_LINK_KEYS
, &hdev
->dev_flags
))
2720 key
= hci_find_link_key(hdev
, &ev
->bdaddr
);
2722 BT_DBG("%s link key not found for %pMR", hdev
->name
,
2727 BT_DBG("%s found key type %u for %pMR", hdev
->name
, key
->type
,
2730 if (!test_bit(HCI_DEBUG_KEYS
, &hdev
->dev_flags
) &&
2731 key
->type
== HCI_LK_DEBUG_COMBINATION
) {
2732 BT_DBG("%s ignoring debug key", hdev
->name
);
2736 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &ev
->bdaddr
);
2738 if (key
->type
== HCI_LK_UNAUTH_COMBINATION
&&
2739 conn
->auth_type
!= 0xff && (conn
->auth_type
& 0x01)) {
2740 BT_DBG("%s ignoring unauthenticated key", hdev
->name
);
2744 if (key
->type
== HCI_LK_COMBINATION
&& key
->pin_len
< 16 &&
2745 conn
->pending_sec_level
== BT_SECURITY_HIGH
) {
2746 BT_DBG("%s ignoring key unauthenticated for high security",
2751 conn
->key_type
= key
->type
;
2752 conn
->pin_length
= key
->pin_len
;
2755 bacpy(&cp
.bdaddr
, &ev
->bdaddr
);
2756 memcpy(cp
.link_key
, key
->val
, HCI_LINK_KEY_SIZE
);
2758 hci_send_cmd(hdev
, HCI_OP_LINK_KEY_REPLY
, sizeof(cp
), &cp
);
2760 hci_dev_unlock(hdev
);
2765 hci_send_cmd(hdev
, HCI_OP_LINK_KEY_NEG_REPLY
, 6, &ev
->bdaddr
);
2766 hci_dev_unlock(hdev
);
2769 static void hci_link_key_notify_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2771 struct hci_ev_link_key_notify
*ev
= (void *) skb
->data
;
2772 struct hci_conn
*conn
;
2775 BT_DBG("%s", hdev
->name
);
2779 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &ev
->bdaddr
);
2781 hci_conn_hold(conn
);
2782 conn
->disc_timeout
= HCI_DISCONN_TIMEOUT
;
2783 pin_len
= conn
->pin_length
;
2785 if (ev
->key_type
!= HCI_LK_CHANGED_COMBINATION
)
2786 conn
->key_type
= ev
->key_type
;
2788 hci_conn_drop(conn
);
2791 if (test_bit(HCI_LINK_KEYS
, &hdev
->dev_flags
))
2792 hci_add_link_key(hdev
, conn
, 1, &ev
->bdaddr
, ev
->link_key
,
2793 ev
->key_type
, pin_len
);
2795 hci_dev_unlock(hdev
);
2798 static void hci_clock_offset_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2800 struct hci_ev_clock_offset
*ev
= (void *) skb
->data
;
2801 struct hci_conn
*conn
;
2803 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
2807 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(ev
->handle
));
2808 if (conn
&& !ev
->status
) {
2809 struct inquiry_entry
*ie
;
2811 ie
= hci_inquiry_cache_lookup(hdev
, &conn
->dst
);
2813 ie
->data
.clock_offset
= ev
->clock_offset
;
2814 ie
->timestamp
= jiffies
;
2818 hci_dev_unlock(hdev
);
2821 static void hci_pkt_type_change_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2823 struct hci_ev_pkt_type_change
*ev
= (void *) skb
->data
;
2824 struct hci_conn
*conn
;
2826 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
2830 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(ev
->handle
));
2831 if (conn
&& !ev
->status
)
2832 conn
->pkt_type
= __le16_to_cpu(ev
->pkt_type
);
2834 hci_dev_unlock(hdev
);
2837 static void hci_pscan_rep_mode_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2839 struct hci_ev_pscan_rep_mode
*ev
= (void *) skb
->data
;
2840 struct inquiry_entry
*ie
;
2842 BT_DBG("%s", hdev
->name
);
2846 ie
= hci_inquiry_cache_lookup(hdev
, &ev
->bdaddr
);
2848 ie
->data
.pscan_rep_mode
= ev
->pscan_rep_mode
;
2849 ie
->timestamp
= jiffies
;
2852 hci_dev_unlock(hdev
);
2855 static void hci_inquiry_result_with_rssi_evt(struct hci_dev
*hdev
,
2856 struct sk_buff
*skb
)
2858 struct inquiry_data data
;
2859 int num_rsp
= *((__u8
*) skb
->data
);
2860 bool name_known
, ssp
;
2862 BT_DBG("%s num_rsp %d", hdev
->name
, num_rsp
);
2867 if (test_bit(HCI_PERIODIC_INQ
, &hdev
->dev_flags
))
2872 if ((skb
->len
- 1) / num_rsp
!= sizeof(struct inquiry_info_with_rssi
)) {
2873 struct inquiry_info_with_rssi_and_pscan_mode
*info
;
2874 info
= (void *) (skb
->data
+ 1);
2876 for (; num_rsp
; num_rsp
--, info
++) {
2877 bacpy(&data
.bdaddr
, &info
->bdaddr
);
2878 data
.pscan_rep_mode
= info
->pscan_rep_mode
;
2879 data
.pscan_period_mode
= info
->pscan_period_mode
;
2880 data
.pscan_mode
= info
->pscan_mode
;
2881 memcpy(data
.dev_class
, info
->dev_class
, 3);
2882 data
.clock_offset
= info
->clock_offset
;
2883 data
.rssi
= info
->rssi
;
2884 data
.ssp_mode
= 0x00;
2886 name_known
= hci_inquiry_cache_update(hdev
, &data
,
2888 mgmt_device_found(hdev
, &info
->bdaddr
, ACL_LINK
, 0x00,
2889 info
->dev_class
, info
->rssi
,
2890 !name_known
, ssp
, NULL
, 0);
2893 struct inquiry_info_with_rssi
*info
= (void *) (skb
->data
+ 1);
2895 for (; num_rsp
; num_rsp
--, info
++) {
2896 bacpy(&data
.bdaddr
, &info
->bdaddr
);
2897 data
.pscan_rep_mode
= info
->pscan_rep_mode
;
2898 data
.pscan_period_mode
= info
->pscan_period_mode
;
2899 data
.pscan_mode
= 0x00;
2900 memcpy(data
.dev_class
, info
->dev_class
, 3);
2901 data
.clock_offset
= info
->clock_offset
;
2902 data
.rssi
= info
->rssi
;
2903 data
.ssp_mode
= 0x00;
2904 name_known
= hci_inquiry_cache_update(hdev
, &data
,
2906 mgmt_device_found(hdev
, &info
->bdaddr
, ACL_LINK
, 0x00,
2907 info
->dev_class
, info
->rssi
,
2908 !name_known
, ssp
, NULL
, 0);
2912 hci_dev_unlock(hdev
);
2915 static void hci_remote_ext_features_evt(struct hci_dev
*hdev
,
2916 struct sk_buff
*skb
)
2918 struct hci_ev_remote_ext_features
*ev
= (void *) skb
->data
;
2919 struct hci_conn
*conn
;
2921 BT_DBG("%s", hdev
->name
);
2925 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(ev
->handle
));
2929 if (!ev
->status
&& ev
->page
== 0x01) {
2930 struct inquiry_entry
*ie
;
2932 ie
= hci_inquiry_cache_lookup(hdev
, &conn
->dst
);
2934 ie
->data
.ssp_mode
= (ev
->features
[0] & LMP_HOST_SSP
);
2936 if (ev
->features
[0] & LMP_HOST_SSP
)
2937 set_bit(HCI_CONN_SSP_ENABLED
, &conn
->flags
);
2940 if (conn
->state
!= BT_CONFIG
)
2943 if (!ev
->status
&& !test_bit(HCI_CONN_MGMT_CONNECTED
, &conn
->flags
)) {
2944 struct hci_cp_remote_name_req cp
;
2945 memset(&cp
, 0, sizeof(cp
));
2946 bacpy(&cp
.bdaddr
, &conn
->dst
);
2947 cp
.pscan_rep_mode
= 0x02;
2948 hci_send_cmd(hdev
, HCI_OP_REMOTE_NAME_REQ
, sizeof(cp
), &cp
);
2949 } else if (!test_and_set_bit(HCI_CONN_MGMT_CONNECTED
, &conn
->flags
))
2950 mgmt_device_connected(hdev
, &conn
->dst
, conn
->type
,
2951 conn
->dst_type
, 0, NULL
, 0,
2954 if (!hci_outgoing_auth_needed(hdev
, conn
)) {
2955 conn
->state
= BT_CONNECTED
;
2956 hci_proto_connect_cfm(conn
, ev
->status
);
2957 hci_conn_drop(conn
);
2961 hci_dev_unlock(hdev
);
2964 static void hci_sync_conn_complete_evt(struct hci_dev
*hdev
,
2965 struct sk_buff
*skb
)
2967 struct hci_ev_sync_conn_complete
*ev
= (void *) skb
->data
;
2968 struct hci_conn
*conn
;
2970 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
2974 conn
= hci_conn_hash_lookup_ba(hdev
, ev
->link_type
, &ev
->bdaddr
);
2976 if (ev
->link_type
== ESCO_LINK
)
2979 conn
= hci_conn_hash_lookup_ba(hdev
, ESCO_LINK
, &ev
->bdaddr
);
2983 conn
->type
= SCO_LINK
;
2986 switch (ev
->status
) {
2988 conn
->handle
= __le16_to_cpu(ev
->handle
);
2989 conn
->state
= BT_CONNECTED
;
2991 hci_conn_hold_device(conn
);
2992 hci_conn_add_sysfs(conn
);
2995 case 0x11: /* Unsupported Feature or Parameter Value */
2996 case 0x1c: /* SCO interval rejected */
2997 case 0x1a: /* Unsupported Remote Feature */
2998 case 0x1f: /* Unspecified error */
2999 if (conn
->out
&& conn
->attempt
< 2) {
3000 conn
->pkt_type
= (hdev
->esco_type
& SCO_ESCO_MASK
) |
3001 (hdev
->esco_type
& EDR_ESCO_MASK
);
3002 hci_setup_sync(conn
, conn
->link
->handle
);
3008 conn
->state
= BT_CLOSED
;
3012 hci_proto_connect_cfm(conn
, ev
->status
);
3017 hci_dev_unlock(hdev
);
3020 static void hci_extended_inquiry_result_evt(struct hci_dev
*hdev
,
3021 struct sk_buff
*skb
)
3023 struct inquiry_data data
;
3024 struct extended_inquiry_info
*info
= (void *) (skb
->data
+ 1);
3025 int num_rsp
= *((__u8
*) skb
->data
);
3028 BT_DBG("%s num_rsp %d", hdev
->name
, num_rsp
);
3033 if (test_bit(HCI_PERIODIC_INQ
, &hdev
->dev_flags
))
3038 for (; num_rsp
; num_rsp
--, info
++) {
3039 bool name_known
, ssp
;
3041 bacpy(&data
.bdaddr
, &info
->bdaddr
);
3042 data
.pscan_rep_mode
= info
->pscan_rep_mode
;
3043 data
.pscan_period_mode
= info
->pscan_period_mode
;
3044 data
.pscan_mode
= 0x00;
3045 memcpy(data
.dev_class
, info
->dev_class
, 3);
3046 data
.clock_offset
= info
->clock_offset
;
3047 data
.rssi
= info
->rssi
;
3048 data
.ssp_mode
= 0x01;
3050 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
3051 name_known
= eir_has_data_type(info
->data
,
3057 name_known
= hci_inquiry_cache_update(hdev
, &data
, name_known
,
3059 eir_len
= eir_get_length(info
->data
, sizeof(info
->data
));
3060 mgmt_device_found(hdev
, &info
->bdaddr
, ACL_LINK
, 0x00,
3061 info
->dev_class
, info
->rssi
, !name_known
,
3062 ssp
, info
->data
, eir_len
);
3065 hci_dev_unlock(hdev
);
3068 static void hci_key_refresh_complete_evt(struct hci_dev
*hdev
,
3069 struct sk_buff
*skb
)
3071 struct hci_ev_key_refresh_complete
*ev
= (void *) skb
->data
;
3072 struct hci_conn
*conn
;
3074 BT_DBG("%s status 0x%2.2x handle 0x%4.4x", hdev
->name
, ev
->status
,
3075 __le16_to_cpu(ev
->handle
));
3079 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(ev
->handle
));
3084 conn
->sec_level
= conn
->pending_sec_level
;
3086 clear_bit(HCI_CONN_ENCRYPT_PEND
, &conn
->flags
);
3088 if (ev
->status
&& conn
->state
== BT_CONNECTED
) {
3089 hci_disconnect(conn
, HCI_ERROR_AUTH_FAILURE
);
3090 hci_conn_drop(conn
);
3094 if (conn
->state
== BT_CONFIG
) {
3096 conn
->state
= BT_CONNECTED
;
3098 hci_proto_connect_cfm(conn
, ev
->status
);
3099 hci_conn_drop(conn
);
3101 hci_auth_cfm(conn
, ev
->status
);
3103 hci_conn_hold(conn
);
3104 conn
->disc_timeout
= HCI_DISCONN_TIMEOUT
;
3105 hci_conn_drop(conn
);
3109 hci_dev_unlock(hdev
);
3112 static u8
hci_get_auth_req(struct hci_conn
*conn
)
3114 /* If remote requests dedicated bonding follow that lead */
3115 if (conn
->remote_auth
== 0x02 || conn
->remote_auth
== 0x03) {
3116 /* If both remote and local IO capabilities allow MITM
3117 * protection then require it, otherwise don't */
3118 if (conn
->remote_cap
== 0x03 || conn
->io_capability
== 0x03)
3124 /* If remote requests no-bonding follow that lead */
3125 if (conn
->remote_auth
== 0x00 || conn
->remote_auth
== 0x01)
3126 return conn
->remote_auth
| (conn
->auth_type
& 0x01);
3128 return conn
->auth_type
;
3131 static void hci_io_capa_request_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
3133 struct hci_ev_io_capa_request
*ev
= (void *) skb
->data
;
3134 struct hci_conn
*conn
;
3136 BT_DBG("%s", hdev
->name
);
3140 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &ev
->bdaddr
);
3144 hci_conn_hold(conn
);
3146 if (!test_bit(HCI_MGMT
, &hdev
->dev_flags
))
3149 if (test_bit(HCI_PAIRABLE
, &hdev
->dev_flags
) ||
3150 (conn
->remote_auth
& ~0x01) == HCI_AT_NO_BONDING
) {
3151 struct hci_cp_io_capability_reply cp
;
3153 bacpy(&cp
.bdaddr
, &ev
->bdaddr
);
3154 /* Change the IO capability from KeyboardDisplay
3155 * to DisplayYesNo as it is not supported by BT spec. */
3156 cp
.capability
= (conn
->io_capability
== 0x04) ?
3157 0x01 : conn
->io_capability
;
3158 conn
->auth_type
= hci_get_auth_req(conn
);
3159 cp
.authentication
= conn
->auth_type
;
3161 if (hci_find_remote_oob_data(hdev
, &conn
->dst
) &&
3162 (conn
->out
|| test_bit(HCI_CONN_REMOTE_OOB
, &conn
->flags
)))
3167 hci_send_cmd(hdev
, HCI_OP_IO_CAPABILITY_REPLY
,
3170 struct hci_cp_io_capability_neg_reply cp
;
3172 bacpy(&cp
.bdaddr
, &ev
->bdaddr
);
3173 cp
.reason
= HCI_ERROR_PAIRING_NOT_ALLOWED
;
3175 hci_send_cmd(hdev
, HCI_OP_IO_CAPABILITY_NEG_REPLY
,
3180 hci_dev_unlock(hdev
);
3183 static void hci_io_capa_reply_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
3185 struct hci_ev_io_capa_reply
*ev
= (void *) skb
->data
;
3186 struct hci_conn
*conn
;
3188 BT_DBG("%s", hdev
->name
);
3192 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &ev
->bdaddr
);
3196 conn
->remote_cap
= ev
->capability
;
3197 conn
->remote_auth
= ev
->authentication
;
3199 set_bit(HCI_CONN_REMOTE_OOB
, &conn
->flags
);
3202 hci_dev_unlock(hdev
);
3205 static void hci_user_confirm_request_evt(struct hci_dev
*hdev
,
3206 struct sk_buff
*skb
)
3208 struct hci_ev_user_confirm_req
*ev
= (void *) skb
->data
;
3209 int loc_mitm
, rem_mitm
, confirm_hint
= 0;
3210 struct hci_conn
*conn
;
3212 BT_DBG("%s", hdev
->name
);
3216 if (!test_bit(HCI_MGMT
, &hdev
->dev_flags
))
3219 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &ev
->bdaddr
);
3223 loc_mitm
= (conn
->auth_type
& 0x01);
3224 rem_mitm
= (conn
->remote_auth
& 0x01);
3226 /* If we require MITM but the remote device can't provide that
3227 * (it has NoInputNoOutput) then reject the confirmation
3228 * request. The only exception is when we're dedicated bonding
3229 * initiators (connect_cfm_cb set) since then we always have the MITM
3231 if (!conn
->connect_cfm_cb
&& loc_mitm
&& conn
->remote_cap
== 0x03) {
3232 BT_DBG("Rejecting request: remote device can't provide MITM");
3233 hci_send_cmd(hdev
, HCI_OP_USER_CONFIRM_NEG_REPLY
,
3234 sizeof(ev
->bdaddr
), &ev
->bdaddr
);
3238 /* If no side requires MITM protection; auto-accept */
3239 if ((!loc_mitm
|| conn
->remote_cap
== 0x03) &&
3240 (!rem_mitm
|| conn
->io_capability
== 0x03)) {
3242 /* If we're not the initiators request authorization to
3243 * proceed from user space (mgmt_user_confirm with
3244 * confirm_hint set to 1). */
3245 if (!test_bit(HCI_CONN_AUTH_PEND
, &conn
->flags
)) {
3246 BT_DBG("Confirming auto-accept as acceptor");
3251 BT_DBG("Auto-accept of user confirmation with %ums delay",
3252 hdev
->auto_accept_delay
);
3254 if (hdev
->auto_accept_delay
> 0) {
3255 int delay
= msecs_to_jiffies(hdev
->auto_accept_delay
);
3256 mod_timer(&conn
->auto_accept_timer
, jiffies
+ delay
);
3260 hci_send_cmd(hdev
, HCI_OP_USER_CONFIRM_REPLY
,
3261 sizeof(ev
->bdaddr
), &ev
->bdaddr
);
3266 mgmt_user_confirm_request(hdev
, &ev
->bdaddr
, ACL_LINK
, 0, ev
->passkey
,
3270 hci_dev_unlock(hdev
);
3273 static void hci_user_passkey_request_evt(struct hci_dev
*hdev
,
3274 struct sk_buff
*skb
)
3276 struct hci_ev_user_passkey_req
*ev
= (void *) skb
->data
;
3278 BT_DBG("%s", hdev
->name
);
3280 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
3281 mgmt_user_passkey_request(hdev
, &ev
->bdaddr
, ACL_LINK
, 0);
3284 static void hci_user_passkey_notify_evt(struct hci_dev
*hdev
,
3285 struct sk_buff
*skb
)
3287 struct hci_ev_user_passkey_notify
*ev
= (void *) skb
->data
;
3288 struct hci_conn
*conn
;
3290 BT_DBG("%s", hdev
->name
);
3292 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &ev
->bdaddr
);
3296 conn
->passkey_notify
= __le32_to_cpu(ev
->passkey
);
3297 conn
->passkey_entered
= 0;
3299 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
3300 mgmt_user_passkey_notify(hdev
, &conn
->dst
, conn
->type
,
3301 conn
->dst_type
, conn
->passkey_notify
,
3302 conn
->passkey_entered
);
3305 static void hci_keypress_notify_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
3307 struct hci_ev_keypress_notify
*ev
= (void *) skb
->data
;
3308 struct hci_conn
*conn
;
3310 BT_DBG("%s", hdev
->name
);
3312 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &ev
->bdaddr
);
3317 case HCI_KEYPRESS_STARTED
:
3318 conn
->passkey_entered
= 0;
3321 case HCI_KEYPRESS_ENTERED
:
3322 conn
->passkey_entered
++;
3325 case HCI_KEYPRESS_ERASED
:
3326 conn
->passkey_entered
--;
3329 case HCI_KEYPRESS_CLEARED
:
3330 conn
->passkey_entered
= 0;
3333 case HCI_KEYPRESS_COMPLETED
:
3337 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
3338 mgmt_user_passkey_notify(hdev
, &conn
->dst
, conn
->type
,
3339 conn
->dst_type
, conn
->passkey_notify
,
3340 conn
->passkey_entered
);
3343 static void hci_simple_pair_complete_evt(struct hci_dev
*hdev
,
3344 struct sk_buff
*skb
)
3346 struct hci_ev_simple_pair_complete
*ev
= (void *) skb
->data
;
3347 struct hci_conn
*conn
;
3349 BT_DBG("%s", hdev
->name
);
3353 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &ev
->bdaddr
);
3357 /* To avoid duplicate auth_failed events to user space we check
3358 * the HCI_CONN_AUTH_PEND flag which will be set if we
3359 * initiated the authentication. A traditional auth_complete
3360 * event gets always produced as initiator and is also mapped to
3361 * the mgmt_auth_failed event */
3362 if (!test_bit(HCI_CONN_AUTH_PEND
, &conn
->flags
) && ev
->status
)
3363 mgmt_auth_failed(hdev
, &conn
->dst
, conn
->type
, conn
->dst_type
,
3366 hci_conn_drop(conn
);
3369 hci_dev_unlock(hdev
);
3372 static void hci_remote_host_features_evt(struct hci_dev
*hdev
,
3373 struct sk_buff
*skb
)
3375 struct hci_ev_remote_host_features
*ev
= (void *) skb
->data
;
3376 struct inquiry_entry
*ie
;
3378 BT_DBG("%s", hdev
->name
);
3382 ie
= hci_inquiry_cache_lookup(hdev
, &ev
->bdaddr
);
3384 ie
->data
.ssp_mode
= (ev
->features
[0] & LMP_HOST_SSP
);
3386 hci_dev_unlock(hdev
);
3389 static void hci_remote_oob_data_request_evt(struct hci_dev
*hdev
,
3390 struct sk_buff
*skb
)
3392 struct hci_ev_remote_oob_data_request
*ev
= (void *) skb
->data
;
3393 struct oob_data
*data
;
3395 BT_DBG("%s", hdev
->name
);
3399 if (!test_bit(HCI_MGMT
, &hdev
->dev_flags
))
3402 data
= hci_find_remote_oob_data(hdev
, &ev
->bdaddr
);
3404 struct hci_cp_remote_oob_data_reply cp
;
3406 bacpy(&cp
.bdaddr
, &ev
->bdaddr
);
3407 memcpy(cp
.hash
, data
->hash
, sizeof(cp
.hash
));
3408 memcpy(cp
.randomizer
, data
->randomizer
, sizeof(cp
.randomizer
));
3410 hci_send_cmd(hdev
, HCI_OP_REMOTE_OOB_DATA_REPLY
, sizeof(cp
),
3413 struct hci_cp_remote_oob_data_neg_reply cp
;
3415 bacpy(&cp
.bdaddr
, &ev
->bdaddr
);
3416 hci_send_cmd(hdev
, HCI_OP_REMOTE_OOB_DATA_NEG_REPLY
, sizeof(cp
),
3421 hci_dev_unlock(hdev
);
3424 static void hci_phy_link_complete_evt(struct hci_dev
*hdev
,
3425 struct sk_buff
*skb
)
3427 struct hci_ev_phy_link_complete
*ev
= (void *) skb
->data
;
3428 struct hci_conn
*hcon
, *bredr_hcon
;
3430 BT_DBG("%s handle 0x%2.2x status 0x%2.2x", hdev
->name
, ev
->phy_handle
,
3435 hcon
= hci_conn_hash_lookup_handle(hdev
, ev
->phy_handle
);
3437 hci_dev_unlock(hdev
);
3443 hci_dev_unlock(hdev
);
3447 bredr_hcon
= hcon
->amp_mgr
->l2cap_conn
->hcon
;
3449 hcon
->state
= BT_CONNECTED
;
3450 bacpy(&hcon
->dst
, &bredr_hcon
->dst
);
3452 hci_conn_hold(hcon
);
3453 hcon
->disc_timeout
= HCI_DISCONN_TIMEOUT
;
3454 hci_conn_drop(hcon
);
3456 hci_conn_hold_device(hcon
);
3457 hci_conn_add_sysfs(hcon
);
3459 amp_physical_cfm(bredr_hcon
, hcon
);
3461 hci_dev_unlock(hdev
);
3464 static void hci_loglink_complete_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
3466 struct hci_ev_logical_link_complete
*ev
= (void *) skb
->data
;
3467 struct hci_conn
*hcon
;
3468 struct hci_chan
*hchan
;
3469 struct amp_mgr
*mgr
;
3471 BT_DBG("%s log_handle 0x%4.4x phy_handle 0x%2.2x status 0x%2.2x",
3472 hdev
->name
, le16_to_cpu(ev
->handle
), ev
->phy_handle
,
3475 hcon
= hci_conn_hash_lookup_handle(hdev
, ev
->phy_handle
);
3479 /* Create AMP hchan */
3480 hchan
= hci_chan_create(hcon
);
3484 hchan
->handle
= le16_to_cpu(ev
->handle
);
3486 BT_DBG("hcon %p mgr %p hchan %p", hcon
, hcon
->amp_mgr
, hchan
);
3488 mgr
= hcon
->amp_mgr
;
3489 if (mgr
&& mgr
->bredr_chan
) {
3490 struct l2cap_chan
*bredr_chan
= mgr
->bredr_chan
;
3492 l2cap_chan_lock(bredr_chan
);
3494 bredr_chan
->conn
->mtu
= hdev
->block_mtu
;
3495 l2cap_logical_cfm(bredr_chan
, hchan
, 0);
3496 hci_conn_hold(hcon
);
3498 l2cap_chan_unlock(bredr_chan
);
3502 static void hci_disconn_loglink_complete_evt(struct hci_dev
*hdev
,
3503 struct sk_buff
*skb
)
3505 struct hci_ev_disconn_logical_link_complete
*ev
= (void *) skb
->data
;
3506 struct hci_chan
*hchan
;
3508 BT_DBG("%s log handle 0x%4.4x status 0x%2.2x", hdev
->name
,
3509 le16_to_cpu(ev
->handle
), ev
->status
);
3516 hchan
= hci_chan_lookup_handle(hdev
, le16_to_cpu(ev
->handle
));
3520 amp_destroy_logical_link(hchan
, ev
->reason
);
3523 hci_dev_unlock(hdev
);
3526 static void hci_disconn_phylink_complete_evt(struct hci_dev
*hdev
,
3527 struct sk_buff
*skb
)
3529 struct hci_ev_disconn_phy_link_complete
*ev
= (void *) skb
->data
;
3530 struct hci_conn
*hcon
;
3532 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
3539 hcon
= hci_conn_hash_lookup_handle(hdev
, ev
->phy_handle
);
3541 hcon
->state
= BT_CLOSED
;
3545 hci_dev_unlock(hdev
);
3548 static void hci_le_conn_complete_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
3550 struct hci_ev_le_conn_complete
*ev
= (void *) skb
->data
;
3551 struct hci_conn
*conn
;
3553 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
3557 conn
= hci_conn_hash_lookup_state(hdev
, LE_LINK
, BT_CONNECT
);
3559 conn
= hci_conn_add(hdev
, LE_LINK
, &ev
->bdaddr
);
3561 BT_ERR("No memory for new connection");
3565 conn
->dst_type
= ev
->bdaddr_type
;
3567 if (ev
->role
== LE_CONN_ROLE_MASTER
) {
3569 conn
->link_mode
|= HCI_LM_MASTER
;
3574 mgmt_connect_failed(hdev
, &conn
->dst
, conn
->type
,
3575 conn
->dst_type
, ev
->status
);
3576 hci_proto_connect_cfm(conn
, ev
->status
);
3577 conn
->state
= BT_CLOSED
;
3582 if (!test_and_set_bit(HCI_CONN_MGMT_CONNECTED
, &conn
->flags
))
3583 mgmt_device_connected(hdev
, &ev
->bdaddr
, conn
->type
,
3584 conn
->dst_type
, 0, NULL
, 0, NULL
);
3586 conn
->sec_level
= BT_SECURITY_LOW
;
3587 conn
->handle
= __le16_to_cpu(ev
->handle
);
3588 conn
->state
= BT_CONNECTED
;
3590 hci_conn_hold_device(conn
);
3591 hci_conn_add_sysfs(conn
);
3593 hci_proto_connect_cfm(conn
, ev
->status
);
3596 hci_dev_unlock(hdev
);
3599 static void hci_le_adv_report_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
3601 u8 num_reports
= skb
->data
[0];
3602 void *ptr
= &skb
->data
[1];
3605 while (num_reports
--) {
3606 struct hci_ev_le_advertising_info
*ev
= ptr
;
3608 rssi
= ev
->data
[ev
->length
];
3609 mgmt_device_found(hdev
, &ev
->bdaddr
, LE_LINK
, ev
->bdaddr_type
,
3610 NULL
, rssi
, 0, 1, ev
->data
, ev
->length
);
3612 ptr
+= sizeof(*ev
) + ev
->length
+ 1;
3616 static void hci_le_ltk_request_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
3618 struct hci_ev_le_ltk_req
*ev
= (void *) skb
->data
;
3619 struct hci_cp_le_ltk_reply cp
;
3620 struct hci_cp_le_ltk_neg_reply neg
;
3621 struct hci_conn
*conn
;
3622 struct smp_ltk
*ltk
;
3624 BT_DBG("%s handle 0x%4.4x", hdev
->name
, __le16_to_cpu(ev
->handle
));
3628 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(ev
->handle
));
3632 ltk
= hci_find_ltk(hdev
, ev
->ediv
, ev
->random
);
3636 memcpy(cp
.ltk
, ltk
->val
, sizeof(ltk
->val
));
3637 cp
.handle
= cpu_to_le16(conn
->handle
);
3639 if (ltk
->authenticated
)
3640 conn
->sec_level
= BT_SECURITY_HIGH
;
3642 hci_send_cmd(hdev
, HCI_OP_LE_LTK_REPLY
, sizeof(cp
), &cp
);
3644 if (ltk
->type
& HCI_SMP_STK
) {
3645 list_del(<k
->list
);
3649 hci_dev_unlock(hdev
);
3654 neg
.handle
= ev
->handle
;
3655 hci_send_cmd(hdev
, HCI_OP_LE_LTK_NEG_REPLY
, sizeof(neg
), &neg
);
3656 hci_dev_unlock(hdev
);
3659 static void hci_le_meta_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
3661 struct hci_ev_le_meta
*le_ev
= (void *) skb
->data
;
3663 skb_pull(skb
, sizeof(*le_ev
));
3665 switch (le_ev
->subevent
) {
3666 case HCI_EV_LE_CONN_COMPLETE
:
3667 hci_le_conn_complete_evt(hdev
, skb
);
3670 case HCI_EV_LE_ADVERTISING_REPORT
:
3671 hci_le_adv_report_evt(hdev
, skb
);
3674 case HCI_EV_LE_LTK_REQ
:
3675 hci_le_ltk_request_evt(hdev
, skb
);
3683 static void hci_chan_selected_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
3685 struct hci_ev_channel_selected
*ev
= (void *) skb
->data
;
3686 struct hci_conn
*hcon
;
3688 BT_DBG("%s handle 0x%2.2x", hdev
->name
, ev
->phy_handle
);
3690 skb_pull(skb
, sizeof(*ev
));
3692 hcon
= hci_conn_hash_lookup_handle(hdev
, ev
->phy_handle
);
3696 amp_read_loc_assoc_final_data(hdev
, hcon
);
3699 void hci_event_packet(struct hci_dev
*hdev
, struct sk_buff
*skb
)
3701 struct hci_event_hdr
*hdr
= (void *) skb
->data
;
3702 __u8 event
= hdr
->evt
;
3706 /* Received events are (currently) only needed when a request is
3707 * ongoing so avoid unnecessary memory allocation.
3709 if (hdev
->req_status
== HCI_REQ_PEND
) {
3710 kfree_skb(hdev
->recv_evt
);
3711 hdev
->recv_evt
= skb_clone(skb
, GFP_KERNEL
);
3714 hci_dev_unlock(hdev
);
3716 skb_pull(skb
, HCI_EVENT_HDR_SIZE
);
3718 if (hdev
->sent_cmd
&& bt_cb(hdev
->sent_cmd
)->req
.event
== event
) {
3719 struct hci_command_hdr
*hdr
= (void *) hdev
->sent_cmd
->data
;
3720 u16 opcode
= __le16_to_cpu(hdr
->opcode
);
3722 hci_req_cmd_complete(hdev
, opcode
, 0);
3726 case HCI_EV_INQUIRY_COMPLETE
:
3727 hci_inquiry_complete_evt(hdev
, skb
);
3730 case HCI_EV_INQUIRY_RESULT
:
3731 hci_inquiry_result_evt(hdev
, skb
);
3734 case HCI_EV_CONN_COMPLETE
:
3735 hci_conn_complete_evt(hdev
, skb
);
3738 case HCI_EV_CONN_REQUEST
:
3739 hci_conn_request_evt(hdev
, skb
);
3742 case HCI_EV_DISCONN_COMPLETE
:
3743 hci_disconn_complete_evt(hdev
, skb
);
3746 case HCI_EV_AUTH_COMPLETE
:
3747 hci_auth_complete_evt(hdev
, skb
);
3750 case HCI_EV_REMOTE_NAME
:
3751 hci_remote_name_evt(hdev
, skb
);
3754 case HCI_EV_ENCRYPT_CHANGE
:
3755 hci_encrypt_change_evt(hdev
, skb
);
3758 case HCI_EV_CHANGE_LINK_KEY_COMPLETE
:
3759 hci_change_link_key_complete_evt(hdev
, skb
);
3762 case HCI_EV_REMOTE_FEATURES
:
3763 hci_remote_features_evt(hdev
, skb
);
3766 case HCI_EV_CMD_COMPLETE
:
3767 hci_cmd_complete_evt(hdev
, skb
);
3770 case HCI_EV_CMD_STATUS
:
3771 hci_cmd_status_evt(hdev
, skb
);
3774 case HCI_EV_ROLE_CHANGE
:
3775 hci_role_change_evt(hdev
, skb
);
3778 case HCI_EV_NUM_COMP_PKTS
:
3779 hci_num_comp_pkts_evt(hdev
, skb
);
3782 case HCI_EV_MODE_CHANGE
:
3783 hci_mode_change_evt(hdev
, skb
);
3786 case HCI_EV_PIN_CODE_REQ
:
3787 hci_pin_code_request_evt(hdev
, skb
);
3790 case HCI_EV_LINK_KEY_REQ
:
3791 hci_link_key_request_evt(hdev
, skb
);
3794 case HCI_EV_LINK_KEY_NOTIFY
:
3795 hci_link_key_notify_evt(hdev
, skb
);
3798 case HCI_EV_CLOCK_OFFSET
:
3799 hci_clock_offset_evt(hdev
, skb
);
3802 case HCI_EV_PKT_TYPE_CHANGE
:
3803 hci_pkt_type_change_evt(hdev
, skb
);
3806 case HCI_EV_PSCAN_REP_MODE
:
3807 hci_pscan_rep_mode_evt(hdev
, skb
);
3810 case HCI_EV_INQUIRY_RESULT_WITH_RSSI
:
3811 hci_inquiry_result_with_rssi_evt(hdev
, skb
);
3814 case HCI_EV_REMOTE_EXT_FEATURES
:
3815 hci_remote_ext_features_evt(hdev
, skb
);
3818 case HCI_EV_SYNC_CONN_COMPLETE
:
3819 hci_sync_conn_complete_evt(hdev
, skb
);
3822 case HCI_EV_EXTENDED_INQUIRY_RESULT
:
3823 hci_extended_inquiry_result_evt(hdev
, skb
);
3826 case HCI_EV_KEY_REFRESH_COMPLETE
:
3827 hci_key_refresh_complete_evt(hdev
, skb
);
3830 case HCI_EV_IO_CAPA_REQUEST
:
3831 hci_io_capa_request_evt(hdev
, skb
);
3834 case HCI_EV_IO_CAPA_REPLY
:
3835 hci_io_capa_reply_evt(hdev
, skb
);
3838 case HCI_EV_USER_CONFIRM_REQUEST
:
3839 hci_user_confirm_request_evt(hdev
, skb
);
3842 case HCI_EV_USER_PASSKEY_REQUEST
:
3843 hci_user_passkey_request_evt(hdev
, skb
);
3846 case HCI_EV_USER_PASSKEY_NOTIFY
:
3847 hci_user_passkey_notify_evt(hdev
, skb
);
3850 case HCI_EV_KEYPRESS_NOTIFY
:
3851 hci_keypress_notify_evt(hdev
, skb
);
3854 case HCI_EV_SIMPLE_PAIR_COMPLETE
:
3855 hci_simple_pair_complete_evt(hdev
, skb
);
3858 case HCI_EV_REMOTE_HOST_FEATURES
:
3859 hci_remote_host_features_evt(hdev
, skb
);
3862 case HCI_EV_LE_META
:
3863 hci_le_meta_evt(hdev
, skb
);
3866 case HCI_EV_CHANNEL_SELECTED
:
3867 hci_chan_selected_evt(hdev
, skb
);
3870 case HCI_EV_REMOTE_OOB_DATA_REQUEST
:
3871 hci_remote_oob_data_request_evt(hdev
, skb
);
3874 case HCI_EV_PHY_LINK_COMPLETE
:
3875 hci_phy_link_complete_evt(hdev
, skb
);
3878 case HCI_EV_LOGICAL_LINK_COMPLETE
:
3879 hci_loglink_complete_evt(hdev
, skb
);
3882 case HCI_EV_DISCONN_LOGICAL_LINK_COMPLETE
:
3883 hci_disconn_loglink_complete_evt(hdev
, skb
);
3886 case HCI_EV_DISCONN_PHY_LINK_COMPLETE
:
3887 hci_disconn_phylink_complete_evt(hdev
, skb
);
3890 case HCI_EV_NUM_COMP_BLOCKS
:
3891 hci_num_comp_blocks_evt(hdev
, skb
);
3895 BT_DBG("%s event 0x%2.2x", hdev
->name
, event
);
3900 hdev
->stat
.evt_rx
++;