2 BlueZ - Bluetooth protocol stack for Linux
3 Copyright (c) 2000-2001, 2010, Code Aurora Forum. All rights reserved.
5 Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License version 2 as
9 published by the Free Software Foundation;
11 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
12 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
13 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
14 IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
15 CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
16 WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
17 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
18 OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
20 ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
21 COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
22 SOFTWARE IS DISCLAIMED.
25 /* Bluetooth HCI event handling. */
27 #include <asm/unaligned.h>
29 #include <net/bluetooth/bluetooth.h>
30 #include <net/bluetooth/hci_core.h>
31 #include <net/bluetooth/mgmt.h>
32 #include <net/bluetooth/a2mp.h>
33 #include <net/bluetooth/amp.h>
35 /* Handle HCI Event packets */
37 static void hci_cc_inquiry_cancel(struct hci_dev
*hdev
, struct sk_buff
*skb
)
39 __u8 status
= *((__u8
*) skb
->data
);
41 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
45 mgmt_stop_discovery_failed(hdev
, status
);
50 clear_bit(HCI_INQUIRY
, &hdev
->flags
);
53 hci_discovery_set_state(hdev
, DISCOVERY_STOPPED
);
56 hci_req_cmd_complete(hdev
, HCI_OP_INQUIRY
, status
);
58 hci_conn_check_pending(hdev
);
61 static void hci_cc_periodic_inq(struct hci_dev
*hdev
, struct sk_buff
*skb
)
63 __u8 status
= *((__u8
*) skb
->data
);
65 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
70 set_bit(HCI_PERIODIC_INQ
, &hdev
->dev_flags
);
73 static void hci_cc_exit_periodic_inq(struct hci_dev
*hdev
, struct sk_buff
*skb
)
75 __u8 status
= *((__u8
*) skb
->data
);
77 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
82 clear_bit(HCI_PERIODIC_INQ
, &hdev
->dev_flags
);
84 hci_conn_check_pending(hdev
);
87 static void hci_cc_remote_name_req_cancel(struct hci_dev
*hdev
,
90 BT_DBG("%s", hdev
->name
);
93 static void hci_cc_role_discovery(struct hci_dev
*hdev
, struct sk_buff
*skb
)
95 struct hci_rp_role_discovery
*rp
= (void *) skb
->data
;
96 struct hci_conn
*conn
;
98 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
105 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(rp
->handle
));
108 conn
->link_mode
&= ~HCI_LM_MASTER
;
110 conn
->link_mode
|= HCI_LM_MASTER
;
113 hci_dev_unlock(hdev
);
116 static void hci_cc_read_link_policy(struct hci_dev
*hdev
, struct sk_buff
*skb
)
118 struct hci_rp_read_link_policy
*rp
= (void *) skb
->data
;
119 struct hci_conn
*conn
;
121 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
128 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(rp
->handle
));
130 conn
->link_policy
= __le16_to_cpu(rp
->policy
);
132 hci_dev_unlock(hdev
);
135 static void hci_cc_write_link_policy(struct hci_dev
*hdev
, struct sk_buff
*skb
)
137 struct hci_rp_write_link_policy
*rp
= (void *) skb
->data
;
138 struct hci_conn
*conn
;
141 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
146 sent
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_LINK_POLICY
);
152 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(rp
->handle
));
154 conn
->link_policy
= get_unaligned_le16(sent
+ 2);
156 hci_dev_unlock(hdev
);
159 static void hci_cc_read_def_link_policy(struct hci_dev
*hdev
,
162 struct hci_rp_read_def_link_policy
*rp
= (void *) skb
->data
;
164 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
169 hdev
->link_policy
= __le16_to_cpu(rp
->policy
);
172 static void hci_cc_write_def_link_policy(struct hci_dev
*hdev
,
175 __u8 status
= *((__u8
*) skb
->data
);
178 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
180 sent
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_DEF_LINK_POLICY
);
185 hdev
->link_policy
= get_unaligned_le16(sent
);
188 static void hci_cc_reset(struct hci_dev
*hdev
, struct sk_buff
*skb
)
190 __u8 status
= *((__u8
*) skb
->data
);
192 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
194 clear_bit(HCI_RESET
, &hdev
->flags
);
196 /* Reset all non-persistent flags */
197 hdev
->dev_flags
&= ~HCI_PERSISTENT_MASK
;
199 hdev
->discovery
.state
= DISCOVERY_STOPPED
;
200 hdev
->inq_tx_power
= HCI_TX_POWER_INVALID
;
201 hdev
->adv_tx_power
= HCI_TX_POWER_INVALID
;
203 memset(hdev
->adv_data
, 0, sizeof(hdev
->adv_data
));
204 hdev
->adv_data_len
= 0;
207 static void hci_cc_write_local_name(struct hci_dev
*hdev
, struct sk_buff
*skb
)
209 __u8 status
= *((__u8
*) skb
->data
);
212 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
214 sent
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_LOCAL_NAME
);
220 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
221 mgmt_set_local_name_complete(hdev
, sent
, status
);
223 memcpy(hdev
->dev_name
, sent
, HCI_MAX_NAME_LENGTH
);
225 hci_dev_unlock(hdev
);
228 static void hci_cc_read_local_name(struct hci_dev
*hdev
, struct sk_buff
*skb
)
230 struct hci_rp_read_local_name
*rp
= (void *) skb
->data
;
232 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
237 if (test_bit(HCI_SETUP
, &hdev
->dev_flags
))
238 memcpy(hdev
->dev_name
, rp
->name
, HCI_MAX_NAME_LENGTH
);
241 static void hci_cc_write_auth_enable(struct hci_dev
*hdev
, struct sk_buff
*skb
)
243 __u8 status
= *((__u8
*) skb
->data
);
246 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
248 sent
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_AUTH_ENABLE
);
253 __u8 param
= *((__u8
*) sent
);
255 if (param
== AUTH_ENABLED
)
256 set_bit(HCI_AUTH
, &hdev
->flags
);
258 clear_bit(HCI_AUTH
, &hdev
->flags
);
261 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
262 mgmt_auth_enable_complete(hdev
, status
);
265 static void hci_cc_write_encrypt_mode(struct hci_dev
*hdev
, struct sk_buff
*skb
)
267 __u8 status
= *((__u8
*) skb
->data
);
270 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
272 sent
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_ENCRYPT_MODE
);
277 __u8 param
= *((__u8
*) sent
);
280 set_bit(HCI_ENCRYPT
, &hdev
->flags
);
282 clear_bit(HCI_ENCRYPT
, &hdev
->flags
);
286 static void hci_cc_write_scan_enable(struct hci_dev
*hdev
, struct sk_buff
*skb
)
288 __u8 param
, status
= *((__u8
*) skb
->data
);
289 int old_pscan
, old_iscan
;
292 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
294 sent
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_SCAN_ENABLE
);
298 param
= *((__u8
*) sent
);
303 mgmt_write_scan_failed(hdev
, param
, status
);
304 hdev
->discov_timeout
= 0;
308 old_pscan
= test_and_clear_bit(HCI_PSCAN
, &hdev
->flags
);
309 old_iscan
= test_and_clear_bit(HCI_ISCAN
, &hdev
->flags
);
311 if (param
& SCAN_INQUIRY
) {
312 set_bit(HCI_ISCAN
, &hdev
->flags
);
314 mgmt_discoverable(hdev
, 1);
315 if (hdev
->discov_timeout
> 0) {
316 int to
= msecs_to_jiffies(hdev
->discov_timeout
* 1000);
317 queue_delayed_work(hdev
->workqueue
, &hdev
->discov_off
,
320 } else if (old_iscan
)
321 mgmt_discoverable(hdev
, 0);
323 if (param
& SCAN_PAGE
) {
324 set_bit(HCI_PSCAN
, &hdev
->flags
);
326 mgmt_connectable(hdev
, 1);
327 } else if (old_pscan
)
328 mgmt_connectable(hdev
, 0);
331 hci_dev_unlock(hdev
);
334 static void hci_cc_read_class_of_dev(struct hci_dev
*hdev
, struct sk_buff
*skb
)
336 struct hci_rp_read_class_of_dev
*rp
= (void *) skb
->data
;
338 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
343 memcpy(hdev
->dev_class
, rp
->dev_class
, 3);
345 BT_DBG("%s class 0x%.2x%.2x%.2x", hdev
->name
,
346 hdev
->dev_class
[2], hdev
->dev_class
[1], hdev
->dev_class
[0]);
349 static void hci_cc_write_class_of_dev(struct hci_dev
*hdev
, struct sk_buff
*skb
)
351 __u8 status
= *((__u8
*) skb
->data
);
354 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
356 sent
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_CLASS_OF_DEV
);
363 memcpy(hdev
->dev_class
, sent
, 3);
365 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
366 mgmt_set_class_of_dev_complete(hdev
, sent
, status
);
368 hci_dev_unlock(hdev
);
371 static void hci_cc_read_voice_setting(struct hci_dev
*hdev
, struct sk_buff
*skb
)
373 struct hci_rp_read_voice_setting
*rp
= (void *) skb
->data
;
376 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
381 setting
= __le16_to_cpu(rp
->voice_setting
);
383 if (hdev
->voice_setting
== setting
)
386 hdev
->voice_setting
= setting
;
388 BT_DBG("%s voice setting 0x%4.4x", hdev
->name
, setting
);
391 hdev
->notify(hdev
, HCI_NOTIFY_VOICE_SETTING
);
394 static void hci_cc_write_voice_setting(struct hci_dev
*hdev
,
397 __u8 status
= *((__u8
*) skb
->data
);
401 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
406 sent
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_VOICE_SETTING
);
410 setting
= get_unaligned_le16(sent
);
412 if (hdev
->voice_setting
== setting
)
415 hdev
->voice_setting
= setting
;
417 BT_DBG("%s voice setting 0x%4.4x", hdev
->name
, setting
);
420 hdev
->notify(hdev
, HCI_NOTIFY_VOICE_SETTING
);
423 static void hci_cc_write_ssp_mode(struct hci_dev
*hdev
, struct sk_buff
*skb
)
425 __u8 status
= *((__u8
*) skb
->data
);
426 struct hci_cp_write_ssp_mode
*sent
;
428 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
430 sent
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_SSP_MODE
);
436 hdev
->host_features
[0] |= LMP_HOST_SSP
;
438 hdev
->host_features
[0] &= ~LMP_HOST_SSP
;
441 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
442 mgmt_ssp_enable_complete(hdev
, sent
->mode
, status
);
445 set_bit(HCI_SSP_ENABLED
, &hdev
->dev_flags
);
447 clear_bit(HCI_SSP_ENABLED
, &hdev
->dev_flags
);
451 static void hci_cc_read_local_version(struct hci_dev
*hdev
, struct sk_buff
*skb
)
453 struct hci_rp_read_local_version
*rp
= (void *) skb
->data
;
455 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
460 hdev
->hci_ver
= rp
->hci_ver
;
461 hdev
->hci_rev
= __le16_to_cpu(rp
->hci_rev
);
462 hdev
->lmp_ver
= rp
->lmp_ver
;
463 hdev
->manufacturer
= __le16_to_cpu(rp
->manufacturer
);
464 hdev
->lmp_subver
= __le16_to_cpu(rp
->lmp_subver
);
466 BT_DBG("%s manufacturer 0x%4.4x hci ver %d:%d", hdev
->name
,
467 hdev
->manufacturer
, hdev
->hci_ver
, hdev
->hci_rev
);
470 static void hci_cc_read_local_commands(struct hci_dev
*hdev
,
473 struct hci_rp_read_local_commands
*rp
= (void *) skb
->data
;
475 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
478 memcpy(hdev
->commands
, rp
->commands
, sizeof(hdev
->commands
));
481 static void hci_cc_read_local_features(struct hci_dev
*hdev
,
484 struct hci_rp_read_local_features
*rp
= (void *) skb
->data
;
486 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
491 memcpy(hdev
->features
, rp
->features
, 8);
493 /* Adjust default settings according to features
494 * supported by device. */
496 if (hdev
->features
[0] & LMP_3SLOT
)
497 hdev
->pkt_type
|= (HCI_DM3
| HCI_DH3
);
499 if (hdev
->features
[0] & LMP_5SLOT
)
500 hdev
->pkt_type
|= (HCI_DM5
| HCI_DH5
);
502 if (hdev
->features
[1] & LMP_HV2
) {
503 hdev
->pkt_type
|= (HCI_HV2
);
504 hdev
->esco_type
|= (ESCO_HV2
);
507 if (hdev
->features
[1] & LMP_HV3
) {
508 hdev
->pkt_type
|= (HCI_HV3
);
509 hdev
->esco_type
|= (ESCO_HV3
);
512 if (lmp_esco_capable(hdev
))
513 hdev
->esco_type
|= (ESCO_EV3
);
515 if (hdev
->features
[4] & LMP_EV4
)
516 hdev
->esco_type
|= (ESCO_EV4
);
518 if (hdev
->features
[4] & LMP_EV5
)
519 hdev
->esco_type
|= (ESCO_EV5
);
521 if (hdev
->features
[5] & LMP_EDR_ESCO_2M
)
522 hdev
->esco_type
|= (ESCO_2EV3
);
524 if (hdev
->features
[5] & LMP_EDR_ESCO_3M
)
525 hdev
->esco_type
|= (ESCO_3EV3
);
527 if (hdev
->features
[5] & LMP_EDR_3S_ESCO
)
528 hdev
->esco_type
|= (ESCO_2EV5
| ESCO_3EV5
);
530 BT_DBG("%s features 0x%.2x%.2x%.2x%.2x%.2x%.2x%.2x%.2x", hdev
->name
,
531 hdev
->features
[0], hdev
->features
[1],
532 hdev
->features
[2], hdev
->features
[3],
533 hdev
->features
[4], hdev
->features
[5],
534 hdev
->features
[6], hdev
->features
[7]);
537 static void hci_cc_read_local_ext_features(struct hci_dev
*hdev
,
540 struct hci_rp_read_local_ext_features
*rp
= (void *) skb
->data
;
542 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
549 memcpy(hdev
->features
, rp
->features
, 8);
552 memcpy(hdev
->host_features
, rp
->features
, 8);
557 static void hci_cc_read_flow_control_mode(struct hci_dev
*hdev
,
560 struct hci_rp_read_flow_control_mode
*rp
= (void *) skb
->data
;
562 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
565 hdev
->flow_ctl_mode
= rp
->mode
;
568 static void hci_cc_read_buffer_size(struct hci_dev
*hdev
, struct sk_buff
*skb
)
570 struct hci_rp_read_buffer_size
*rp
= (void *) skb
->data
;
572 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
577 hdev
->acl_mtu
= __le16_to_cpu(rp
->acl_mtu
);
578 hdev
->sco_mtu
= rp
->sco_mtu
;
579 hdev
->acl_pkts
= __le16_to_cpu(rp
->acl_max_pkt
);
580 hdev
->sco_pkts
= __le16_to_cpu(rp
->sco_max_pkt
);
582 if (test_bit(HCI_QUIRK_FIXUP_BUFFER_SIZE
, &hdev
->quirks
)) {
587 hdev
->acl_cnt
= hdev
->acl_pkts
;
588 hdev
->sco_cnt
= hdev
->sco_pkts
;
590 BT_DBG("%s acl mtu %d:%d sco mtu %d:%d", hdev
->name
, hdev
->acl_mtu
,
591 hdev
->acl_pkts
, hdev
->sco_mtu
, hdev
->sco_pkts
);
594 static void hci_cc_read_bd_addr(struct hci_dev
*hdev
, struct sk_buff
*skb
)
596 struct hci_rp_read_bd_addr
*rp
= (void *) skb
->data
;
598 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
601 bacpy(&hdev
->bdaddr
, &rp
->bdaddr
);
604 static void hci_cc_read_page_scan_activity(struct hci_dev
*hdev
,
607 struct hci_rp_read_page_scan_activity
*rp
= (void *) skb
->data
;
609 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
611 if (test_bit(HCI_INIT
, &hdev
->flags
) && !rp
->status
) {
612 hdev
->page_scan_interval
= __le16_to_cpu(rp
->interval
);
613 hdev
->page_scan_window
= __le16_to_cpu(rp
->window
);
617 static void hci_cc_write_page_scan_activity(struct hci_dev
*hdev
,
620 u8 status
= *((u8
*) skb
->data
);
621 struct hci_cp_write_page_scan_activity
*sent
;
623 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
628 sent
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_PAGE_SCAN_ACTIVITY
);
632 hdev
->page_scan_interval
= __le16_to_cpu(sent
->interval
);
633 hdev
->page_scan_window
= __le16_to_cpu(sent
->window
);
636 static void hci_cc_read_page_scan_type(struct hci_dev
*hdev
,
639 struct hci_rp_read_page_scan_type
*rp
= (void *) skb
->data
;
641 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
643 if (test_bit(HCI_INIT
, &hdev
->flags
) && !rp
->status
)
644 hdev
->page_scan_type
= rp
->type
;
647 static void hci_cc_write_page_scan_type(struct hci_dev
*hdev
,
650 u8 status
= *((u8
*) skb
->data
);
653 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
658 type
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_PAGE_SCAN_TYPE
);
660 hdev
->page_scan_type
= *type
;
663 static void hci_cc_read_data_block_size(struct hci_dev
*hdev
,
666 struct hci_rp_read_data_block_size
*rp
= (void *) skb
->data
;
668 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
673 hdev
->block_mtu
= __le16_to_cpu(rp
->max_acl_len
);
674 hdev
->block_len
= __le16_to_cpu(rp
->block_len
);
675 hdev
->num_blocks
= __le16_to_cpu(rp
->num_blocks
);
677 hdev
->block_cnt
= hdev
->num_blocks
;
679 BT_DBG("%s blk mtu %d cnt %d len %d", hdev
->name
, hdev
->block_mtu
,
680 hdev
->block_cnt
, hdev
->block_len
);
683 static void hci_cc_read_local_amp_info(struct hci_dev
*hdev
,
686 struct hci_rp_read_local_amp_info
*rp
= (void *) skb
->data
;
688 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
693 hdev
->amp_status
= rp
->amp_status
;
694 hdev
->amp_total_bw
= __le32_to_cpu(rp
->total_bw
);
695 hdev
->amp_max_bw
= __le32_to_cpu(rp
->max_bw
);
696 hdev
->amp_min_latency
= __le32_to_cpu(rp
->min_latency
);
697 hdev
->amp_max_pdu
= __le32_to_cpu(rp
->max_pdu
);
698 hdev
->amp_type
= rp
->amp_type
;
699 hdev
->amp_pal_cap
= __le16_to_cpu(rp
->pal_cap
);
700 hdev
->amp_assoc_size
= __le16_to_cpu(rp
->max_assoc_size
);
701 hdev
->amp_be_flush_to
= __le32_to_cpu(rp
->be_flush_to
);
702 hdev
->amp_max_flush_to
= __le32_to_cpu(rp
->max_flush_to
);
705 a2mp_send_getinfo_rsp(hdev
);
708 static void hci_cc_read_local_amp_assoc(struct hci_dev
*hdev
,
711 struct hci_rp_read_local_amp_assoc
*rp
= (void *) skb
->data
;
712 struct amp_assoc
*assoc
= &hdev
->loc_assoc
;
713 size_t rem_len
, frag_len
;
715 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
720 frag_len
= skb
->len
- sizeof(*rp
);
721 rem_len
= __le16_to_cpu(rp
->rem_len
);
723 if (rem_len
> frag_len
) {
724 BT_DBG("frag_len %zu rem_len %zu", frag_len
, rem_len
);
726 memcpy(assoc
->data
+ assoc
->offset
, rp
->frag
, frag_len
);
727 assoc
->offset
+= frag_len
;
729 /* Read other fragments */
730 amp_read_loc_assoc_frag(hdev
, rp
->phy_handle
);
735 memcpy(assoc
->data
+ assoc
->offset
, rp
->frag
, rem_len
);
736 assoc
->len
= assoc
->offset
+ rem_len
;
740 /* Send A2MP Rsp when all fragments are received */
741 a2mp_send_getampassoc_rsp(hdev
, rp
->status
);
742 a2mp_send_create_phy_link_req(hdev
, rp
->status
);
745 static void hci_cc_read_inq_rsp_tx_power(struct hci_dev
*hdev
,
748 struct hci_rp_read_inq_rsp_tx_power
*rp
= (void *) skb
->data
;
750 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
753 hdev
->inq_tx_power
= rp
->tx_power
;
756 static void hci_cc_pin_code_reply(struct hci_dev
*hdev
, struct sk_buff
*skb
)
758 struct hci_rp_pin_code_reply
*rp
= (void *) skb
->data
;
759 struct hci_cp_pin_code_reply
*cp
;
760 struct hci_conn
*conn
;
762 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
766 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
767 mgmt_pin_code_reply_complete(hdev
, &rp
->bdaddr
, rp
->status
);
772 cp
= hci_sent_cmd_data(hdev
, HCI_OP_PIN_CODE_REPLY
);
776 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &cp
->bdaddr
);
778 conn
->pin_length
= cp
->pin_len
;
781 hci_dev_unlock(hdev
);
784 static void hci_cc_pin_code_neg_reply(struct hci_dev
*hdev
, struct sk_buff
*skb
)
786 struct hci_rp_pin_code_neg_reply
*rp
= (void *) skb
->data
;
788 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
792 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
793 mgmt_pin_code_neg_reply_complete(hdev
, &rp
->bdaddr
,
796 hci_dev_unlock(hdev
);
799 static void hci_cc_le_read_buffer_size(struct hci_dev
*hdev
,
802 struct hci_rp_le_read_buffer_size
*rp
= (void *) skb
->data
;
804 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
809 hdev
->le_mtu
= __le16_to_cpu(rp
->le_mtu
);
810 hdev
->le_pkts
= rp
->le_max_pkt
;
812 hdev
->le_cnt
= hdev
->le_pkts
;
814 BT_DBG("%s le mtu %d:%d", hdev
->name
, hdev
->le_mtu
, hdev
->le_pkts
);
817 static void hci_cc_le_read_local_features(struct hci_dev
*hdev
,
820 struct hci_rp_le_read_local_features
*rp
= (void *) skb
->data
;
822 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
825 memcpy(hdev
->le_features
, rp
->features
, 8);
828 static void hci_cc_le_read_adv_tx_power(struct hci_dev
*hdev
,
831 struct hci_rp_le_read_adv_tx_power
*rp
= (void *) skb
->data
;
833 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
836 hdev
->adv_tx_power
= rp
->tx_power
;
839 static void hci_cc_user_confirm_reply(struct hci_dev
*hdev
, struct sk_buff
*skb
)
841 struct hci_rp_user_confirm_reply
*rp
= (void *) skb
->data
;
843 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
847 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
848 mgmt_user_confirm_reply_complete(hdev
, &rp
->bdaddr
, ACL_LINK
, 0,
851 hci_dev_unlock(hdev
);
854 static void hci_cc_user_confirm_neg_reply(struct hci_dev
*hdev
,
857 struct hci_rp_user_confirm_reply
*rp
= (void *) skb
->data
;
859 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
863 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
864 mgmt_user_confirm_neg_reply_complete(hdev
, &rp
->bdaddr
,
865 ACL_LINK
, 0, rp
->status
);
867 hci_dev_unlock(hdev
);
870 static void hci_cc_user_passkey_reply(struct hci_dev
*hdev
, struct sk_buff
*skb
)
872 struct hci_rp_user_confirm_reply
*rp
= (void *) skb
->data
;
874 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
878 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
879 mgmt_user_passkey_reply_complete(hdev
, &rp
->bdaddr
, ACL_LINK
,
882 hci_dev_unlock(hdev
);
885 static void hci_cc_user_passkey_neg_reply(struct hci_dev
*hdev
,
888 struct hci_rp_user_confirm_reply
*rp
= (void *) skb
->data
;
890 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
894 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
895 mgmt_user_passkey_neg_reply_complete(hdev
, &rp
->bdaddr
,
896 ACL_LINK
, 0, rp
->status
);
898 hci_dev_unlock(hdev
);
901 static void hci_cc_read_local_oob_data_reply(struct hci_dev
*hdev
,
904 struct hci_rp_read_local_oob_data
*rp
= (void *) skb
->data
;
906 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
909 mgmt_read_local_oob_data_reply_complete(hdev
, rp
->hash
,
910 rp
->randomizer
, rp
->status
);
911 hci_dev_unlock(hdev
);
914 static void hci_cc_le_set_adv_enable(struct hci_dev
*hdev
, struct sk_buff
*skb
)
916 __u8
*sent
, status
= *((__u8
*) skb
->data
);
918 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
920 sent
= hci_sent_cmd_data(hdev
, HCI_OP_LE_SET_ADV_ENABLE
);
928 set_bit(HCI_LE_PERIPHERAL
, &hdev
->dev_flags
);
930 clear_bit(HCI_LE_PERIPHERAL
, &hdev
->dev_flags
);
933 if (!test_bit(HCI_INIT
, &hdev
->flags
)) {
934 struct hci_request req
;
936 hci_req_init(&req
, hdev
);
938 hci_req_run(&req
, NULL
);
941 hci_dev_unlock(hdev
);
944 static void hci_cc_le_set_scan_param(struct hci_dev
*hdev
, struct sk_buff
*skb
)
946 __u8 status
= *((__u8
*) skb
->data
);
948 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
952 mgmt_start_discovery_failed(hdev
, status
);
953 hci_dev_unlock(hdev
);
958 static void hci_cc_le_set_scan_enable(struct hci_dev
*hdev
,
961 struct hci_cp_le_set_scan_enable
*cp
;
962 __u8 status
= *((__u8
*) skb
->data
);
964 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
966 cp
= hci_sent_cmd_data(hdev
, HCI_OP_LE_SET_SCAN_ENABLE
);
970 switch (cp
->enable
) {
971 case LE_SCANNING_ENABLED
:
974 mgmt_start_discovery_failed(hdev
, status
);
975 hci_dev_unlock(hdev
);
979 set_bit(HCI_LE_SCAN
, &hdev
->dev_flags
);
982 hci_discovery_set_state(hdev
, DISCOVERY_FINDING
);
983 hci_dev_unlock(hdev
);
986 case LE_SCANNING_DISABLED
:
989 mgmt_stop_discovery_failed(hdev
, status
);
990 hci_dev_unlock(hdev
);
994 clear_bit(HCI_LE_SCAN
, &hdev
->dev_flags
);
996 if (hdev
->discovery
.type
== DISCOV_TYPE_INTERLEAVED
&&
997 hdev
->discovery
.state
== DISCOVERY_FINDING
) {
998 mgmt_interleaved_discovery(hdev
);
1001 hci_discovery_set_state(hdev
, DISCOVERY_STOPPED
);
1002 hci_dev_unlock(hdev
);
1008 BT_ERR("Used reserved LE_Scan_Enable param %d", cp
->enable
);
1013 static void hci_cc_le_read_white_list_size(struct hci_dev
*hdev
,
1014 struct sk_buff
*skb
)
1016 struct hci_rp_le_read_white_list_size
*rp
= (void *) skb
->data
;
1018 BT_DBG("%s status 0x%2.2x size %u", hdev
->name
, rp
->status
, rp
->size
);
1021 hdev
->le_white_list_size
= rp
->size
;
1024 static void hci_cc_le_read_supported_states(struct hci_dev
*hdev
,
1025 struct sk_buff
*skb
)
1027 struct hci_rp_le_read_supported_states
*rp
= (void *) skb
->data
;
1029 BT_DBG("%s status 0x%2.2x", hdev
->name
, rp
->status
);
1032 memcpy(hdev
->le_states
, rp
->le_states
, 8);
1035 static void hci_cc_write_le_host_supported(struct hci_dev
*hdev
,
1036 struct sk_buff
*skb
)
1038 struct hci_cp_write_le_host_supported
*sent
;
1039 __u8 status
= *((__u8
*) skb
->data
);
1041 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1043 sent
= hci_sent_cmd_data(hdev
, HCI_OP_WRITE_LE_HOST_SUPPORTED
);
1049 hdev
->host_features
[0] |= LMP_HOST_LE
;
1051 hdev
->host_features
[0] &= ~LMP_HOST_LE
;
1054 hdev
->host_features
[0] |= LMP_HOST_LE_BREDR
;
1056 hdev
->host_features
[0] &= ~LMP_HOST_LE_BREDR
;
1059 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
) &&
1060 !test_bit(HCI_INIT
, &hdev
->flags
))
1061 mgmt_le_enable_complete(hdev
, sent
->le
, status
);
1064 static void hci_cc_write_remote_amp_assoc(struct hci_dev
*hdev
,
1065 struct sk_buff
*skb
)
1067 struct hci_rp_write_remote_amp_assoc
*rp
= (void *) skb
->data
;
1069 BT_DBG("%s status 0x%2.2x phy_handle 0x%2.2x",
1070 hdev
->name
, rp
->status
, rp
->phy_handle
);
1075 amp_write_rem_assoc_continue(hdev
, rp
->phy_handle
);
1078 static void hci_cs_inquiry(struct hci_dev
*hdev
, __u8 status
)
1080 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1083 hci_conn_check_pending(hdev
);
1085 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
1086 mgmt_start_discovery_failed(hdev
, status
);
1087 hci_dev_unlock(hdev
);
1091 set_bit(HCI_INQUIRY
, &hdev
->flags
);
1094 hci_discovery_set_state(hdev
, DISCOVERY_FINDING
);
1095 hci_dev_unlock(hdev
);
1098 static void hci_cs_create_conn(struct hci_dev
*hdev
, __u8 status
)
1100 struct hci_cp_create_conn
*cp
;
1101 struct hci_conn
*conn
;
1103 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1105 cp
= hci_sent_cmd_data(hdev
, HCI_OP_CREATE_CONN
);
1111 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &cp
->bdaddr
);
1113 BT_DBG("%s bdaddr %pMR hcon %p", hdev
->name
, &cp
->bdaddr
, conn
);
1116 if (conn
&& conn
->state
== BT_CONNECT
) {
1117 if (status
!= 0x0c || conn
->attempt
> 2) {
1118 conn
->state
= BT_CLOSED
;
1119 hci_proto_connect_cfm(conn
, status
);
1122 conn
->state
= BT_CONNECT2
;
1126 conn
= hci_conn_add(hdev
, ACL_LINK
, &cp
->bdaddr
);
1129 conn
->link_mode
|= HCI_LM_MASTER
;
1131 BT_ERR("No memory for new connection");
1135 hci_dev_unlock(hdev
);
1138 static void hci_cs_add_sco(struct hci_dev
*hdev
, __u8 status
)
1140 struct hci_cp_add_sco
*cp
;
1141 struct hci_conn
*acl
, *sco
;
1144 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1149 cp
= hci_sent_cmd_data(hdev
, HCI_OP_ADD_SCO
);
1153 handle
= __le16_to_cpu(cp
->handle
);
1155 BT_DBG("%s handle 0x%4.4x", hdev
->name
, handle
);
1159 acl
= hci_conn_hash_lookup_handle(hdev
, handle
);
1163 sco
->state
= BT_CLOSED
;
1165 hci_proto_connect_cfm(sco
, status
);
1170 hci_dev_unlock(hdev
);
1173 static void hci_cs_auth_requested(struct hci_dev
*hdev
, __u8 status
)
1175 struct hci_cp_auth_requested
*cp
;
1176 struct hci_conn
*conn
;
1178 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1183 cp
= hci_sent_cmd_data(hdev
, HCI_OP_AUTH_REQUESTED
);
1189 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(cp
->handle
));
1191 if (conn
->state
== BT_CONFIG
) {
1192 hci_proto_connect_cfm(conn
, status
);
1197 hci_dev_unlock(hdev
);
1200 static void hci_cs_set_conn_encrypt(struct hci_dev
*hdev
, __u8 status
)
1202 struct hci_cp_set_conn_encrypt
*cp
;
1203 struct hci_conn
*conn
;
1205 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1210 cp
= hci_sent_cmd_data(hdev
, HCI_OP_SET_CONN_ENCRYPT
);
1216 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(cp
->handle
));
1218 if (conn
->state
== BT_CONFIG
) {
1219 hci_proto_connect_cfm(conn
, status
);
1224 hci_dev_unlock(hdev
);
1227 static int hci_outgoing_auth_needed(struct hci_dev
*hdev
,
1228 struct hci_conn
*conn
)
1230 if (conn
->state
!= BT_CONFIG
|| !conn
->out
)
1233 if (conn
->pending_sec_level
== BT_SECURITY_SDP
)
1236 /* Only request authentication for SSP connections or non-SSP
1237 * devices with sec_level HIGH or if MITM protection is requested */
1238 if (!hci_conn_ssp_enabled(conn
) && !(conn
->auth_type
& 0x01) &&
1239 conn
->pending_sec_level
!= BT_SECURITY_HIGH
)
1245 static int hci_resolve_name(struct hci_dev
*hdev
,
1246 struct inquiry_entry
*e
)
1248 struct hci_cp_remote_name_req cp
;
1250 memset(&cp
, 0, sizeof(cp
));
1252 bacpy(&cp
.bdaddr
, &e
->data
.bdaddr
);
1253 cp
.pscan_rep_mode
= e
->data
.pscan_rep_mode
;
1254 cp
.pscan_mode
= e
->data
.pscan_mode
;
1255 cp
.clock_offset
= e
->data
.clock_offset
;
1257 return hci_send_cmd(hdev
, HCI_OP_REMOTE_NAME_REQ
, sizeof(cp
), &cp
);
1260 static bool hci_resolve_next_name(struct hci_dev
*hdev
)
1262 struct discovery_state
*discov
= &hdev
->discovery
;
1263 struct inquiry_entry
*e
;
1265 if (list_empty(&discov
->resolve
))
1268 e
= hci_inquiry_cache_lookup_resolve(hdev
, BDADDR_ANY
, NAME_NEEDED
);
1272 if (hci_resolve_name(hdev
, e
) == 0) {
1273 e
->name_state
= NAME_PENDING
;
1280 static void hci_check_pending_name(struct hci_dev
*hdev
, struct hci_conn
*conn
,
1281 bdaddr_t
*bdaddr
, u8
*name
, u8 name_len
)
1283 struct discovery_state
*discov
= &hdev
->discovery
;
1284 struct inquiry_entry
*e
;
1286 if (conn
&& !test_and_set_bit(HCI_CONN_MGMT_CONNECTED
, &conn
->flags
))
1287 mgmt_device_connected(hdev
, bdaddr
, ACL_LINK
, 0x00, 0, name
,
1288 name_len
, conn
->dev_class
);
1290 if (discov
->state
== DISCOVERY_STOPPED
)
1293 if (discov
->state
== DISCOVERY_STOPPING
)
1294 goto discov_complete
;
1296 if (discov
->state
!= DISCOVERY_RESOLVING
)
1299 e
= hci_inquiry_cache_lookup_resolve(hdev
, bdaddr
, NAME_PENDING
);
1300 /* If the device was not found in a list of found devices names of which
1301 * are pending. there is no need to continue resolving a next name as it
1302 * will be done upon receiving another Remote Name Request Complete
1309 e
->name_state
= NAME_KNOWN
;
1310 mgmt_remote_name(hdev
, bdaddr
, ACL_LINK
, 0x00,
1311 e
->data
.rssi
, name
, name_len
);
1313 e
->name_state
= NAME_NOT_KNOWN
;
1316 if (hci_resolve_next_name(hdev
))
1320 hci_discovery_set_state(hdev
, DISCOVERY_STOPPED
);
1323 static void hci_cs_remote_name_req(struct hci_dev
*hdev
, __u8 status
)
1325 struct hci_cp_remote_name_req
*cp
;
1326 struct hci_conn
*conn
;
1328 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1330 /* If successful wait for the name req complete event before
1331 * checking for the need to do authentication */
1335 cp
= hci_sent_cmd_data(hdev
, HCI_OP_REMOTE_NAME_REQ
);
1341 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &cp
->bdaddr
);
1343 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
1344 hci_check_pending_name(hdev
, conn
, &cp
->bdaddr
, NULL
, 0);
1349 if (!hci_outgoing_auth_needed(hdev
, conn
))
1352 if (!test_and_set_bit(HCI_CONN_AUTH_PEND
, &conn
->flags
)) {
1353 struct hci_cp_auth_requested cp
;
1354 cp
.handle
= __cpu_to_le16(conn
->handle
);
1355 hci_send_cmd(hdev
, HCI_OP_AUTH_REQUESTED
, sizeof(cp
), &cp
);
1359 hci_dev_unlock(hdev
);
1362 static void hci_cs_read_remote_features(struct hci_dev
*hdev
, __u8 status
)
1364 struct hci_cp_read_remote_features
*cp
;
1365 struct hci_conn
*conn
;
1367 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1372 cp
= hci_sent_cmd_data(hdev
, HCI_OP_READ_REMOTE_FEATURES
);
1378 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(cp
->handle
));
1380 if (conn
->state
== BT_CONFIG
) {
1381 hci_proto_connect_cfm(conn
, status
);
1386 hci_dev_unlock(hdev
);
1389 static void hci_cs_read_remote_ext_features(struct hci_dev
*hdev
, __u8 status
)
1391 struct hci_cp_read_remote_ext_features
*cp
;
1392 struct hci_conn
*conn
;
1394 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1399 cp
= hci_sent_cmd_data(hdev
, HCI_OP_READ_REMOTE_EXT_FEATURES
);
1405 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(cp
->handle
));
1407 if (conn
->state
== BT_CONFIG
) {
1408 hci_proto_connect_cfm(conn
, status
);
1413 hci_dev_unlock(hdev
);
1416 static void hci_cs_setup_sync_conn(struct hci_dev
*hdev
, __u8 status
)
1418 struct hci_cp_setup_sync_conn
*cp
;
1419 struct hci_conn
*acl
, *sco
;
1422 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1427 cp
= hci_sent_cmd_data(hdev
, HCI_OP_SETUP_SYNC_CONN
);
1431 handle
= __le16_to_cpu(cp
->handle
);
1433 BT_DBG("%s handle 0x%4.4x", hdev
->name
, handle
);
1437 acl
= hci_conn_hash_lookup_handle(hdev
, handle
);
1441 sco
->state
= BT_CLOSED
;
1443 hci_proto_connect_cfm(sco
, status
);
1448 hci_dev_unlock(hdev
);
1451 static void hci_cs_sniff_mode(struct hci_dev
*hdev
, __u8 status
)
1453 struct hci_cp_sniff_mode
*cp
;
1454 struct hci_conn
*conn
;
1456 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1461 cp
= hci_sent_cmd_data(hdev
, HCI_OP_SNIFF_MODE
);
1467 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(cp
->handle
));
1469 clear_bit(HCI_CONN_MODE_CHANGE_PEND
, &conn
->flags
);
1471 if (test_and_clear_bit(HCI_CONN_SCO_SETUP_PEND
, &conn
->flags
))
1472 hci_sco_setup(conn
, status
);
1475 hci_dev_unlock(hdev
);
1478 static void hci_cs_exit_sniff_mode(struct hci_dev
*hdev
, __u8 status
)
1480 struct hci_cp_exit_sniff_mode
*cp
;
1481 struct hci_conn
*conn
;
1483 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1488 cp
= hci_sent_cmd_data(hdev
, HCI_OP_EXIT_SNIFF_MODE
);
1494 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(cp
->handle
));
1496 clear_bit(HCI_CONN_MODE_CHANGE_PEND
, &conn
->flags
);
1498 if (test_and_clear_bit(HCI_CONN_SCO_SETUP_PEND
, &conn
->flags
))
1499 hci_sco_setup(conn
, status
);
1502 hci_dev_unlock(hdev
);
1505 static void hci_cs_disconnect(struct hci_dev
*hdev
, u8 status
)
1507 struct hci_cp_disconnect
*cp
;
1508 struct hci_conn
*conn
;
1513 cp
= hci_sent_cmd_data(hdev
, HCI_OP_DISCONNECT
);
1519 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(cp
->handle
));
1521 mgmt_disconnect_failed(hdev
, &conn
->dst
, conn
->type
,
1522 conn
->dst_type
, status
);
1524 hci_dev_unlock(hdev
);
1527 static void hci_cs_le_create_conn(struct hci_dev
*hdev
, __u8 status
)
1529 struct hci_conn
*conn
;
1531 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1536 conn
= hci_conn_hash_lookup_state(hdev
, LE_LINK
, BT_CONNECT
);
1538 hci_dev_unlock(hdev
);
1542 BT_DBG("%s bdaddr %pMR conn %p", hdev
->name
, &conn
->dst
, conn
);
1544 conn
->state
= BT_CLOSED
;
1545 mgmt_connect_failed(hdev
, &conn
->dst
, conn
->type
,
1546 conn
->dst_type
, status
);
1547 hci_proto_connect_cfm(conn
, status
);
1550 hci_dev_unlock(hdev
);
1554 static void hci_cs_create_phylink(struct hci_dev
*hdev
, u8 status
)
1556 struct hci_cp_create_phy_link
*cp
;
1558 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1560 cp
= hci_sent_cmd_data(hdev
, HCI_OP_CREATE_PHY_LINK
);
1567 struct hci_conn
*hcon
;
1569 hcon
= hci_conn_hash_lookup_handle(hdev
, cp
->phy_handle
);
1573 amp_write_remote_assoc(hdev
, cp
->phy_handle
);
1576 hci_dev_unlock(hdev
);
1579 static void hci_cs_accept_phylink(struct hci_dev
*hdev
, u8 status
)
1581 struct hci_cp_accept_phy_link
*cp
;
1583 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1588 cp
= hci_sent_cmd_data(hdev
, HCI_OP_ACCEPT_PHY_LINK
);
1592 amp_write_remote_assoc(hdev
, cp
->phy_handle
);
1595 static void hci_inquiry_complete_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
1597 __u8 status
= *((__u8
*) skb
->data
);
1598 struct discovery_state
*discov
= &hdev
->discovery
;
1599 struct inquiry_entry
*e
;
1601 BT_DBG("%s status 0x%2.2x", hdev
->name
, status
);
1603 hci_req_cmd_complete(hdev
, HCI_OP_INQUIRY
, status
);
1605 hci_conn_check_pending(hdev
);
1607 if (!test_and_clear_bit(HCI_INQUIRY
, &hdev
->flags
))
1610 if (!test_bit(HCI_MGMT
, &hdev
->dev_flags
))
1615 if (discov
->state
!= DISCOVERY_FINDING
)
1618 if (list_empty(&discov
->resolve
)) {
1619 hci_discovery_set_state(hdev
, DISCOVERY_STOPPED
);
1623 e
= hci_inquiry_cache_lookup_resolve(hdev
, BDADDR_ANY
, NAME_NEEDED
);
1624 if (e
&& hci_resolve_name(hdev
, e
) == 0) {
1625 e
->name_state
= NAME_PENDING
;
1626 hci_discovery_set_state(hdev
, DISCOVERY_RESOLVING
);
1628 hci_discovery_set_state(hdev
, DISCOVERY_STOPPED
);
1632 hci_dev_unlock(hdev
);
1635 static void hci_inquiry_result_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
1637 struct inquiry_data data
;
1638 struct inquiry_info
*info
= (void *) (skb
->data
+ 1);
1639 int num_rsp
= *((__u8
*) skb
->data
);
1641 BT_DBG("%s num_rsp %d", hdev
->name
, num_rsp
);
1646 if (test_bit(HCI_PERIODIC_INQ
, &hdev
->dev_flags
))
1651 for (; num_rsp
; num_rsp
--, info
++) {
1652 bool name_known
, ssp
;
1654 bacpy(&data
.bdaddr
, &info
->bdaddr
);
1655 data
.pscan_rep_mode
= info
->pscan_rep_mode
;
1656 data
.pscan_period_mode
= info
->pscan_period_mode
;
1657 data
.pscan_mode
= info
->pscan_mode
;
1658 memcpy(data
.dev_class
, info
->dev_class
, 3);
1659 data
.clock_offset
= info
->clock_offset
;
1661 data
.ssp_mode
= 0x00;
1663 name_known
= hci_inquiry_cache_update(hdev
, &data
, false, &ssp
);
1664 mgmt_device_found(hdev
, &info
->bdaddr
, ACL_LINK
, 0x00,
1665 info
->dev_class
, 0, !name_known
, ssp
, NULL
,
1669 hci_dev_unlock(hdev
);
1672 static void hci_conn_complete_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
1674 struct hci_ev_conn_complete
*ev
= (void *) skb
->data
;
1675 struct hci_conn
*conn
;
1677 BT_DBG("%s", hdev
->name
);
1681 conn
= hci_conn_hash_lookup_ba(hdev
, ev
->link_type
, &ev
->bdaddr
);
1683 if (ev
->link_type
!= SCO_LINK
)
1686 conn
= hci_conn_hash_lookup_ba(hdev
, ESCO_LINK
, &ev
->bdaddr
);
1690 conn
->type
= SCO_LINK
;
1694 conn
->handle
= __le16_to_cpu(ev
->handle
);
1696 if (conn
->type
== ACL_LINK
) {
1697 conn
->state
= BT_CONFIG
;
1698 hci_conn_hold(conn
);
1700 if (!conn
->out
&& !hci_conn_ssp_enabled(conn
) &&
1701 !hci_find_link_key(hdev
, &ev
->bdaddr
))
1702 conn
->disc_timeout
= HCI_PAIRING_TIMEOUT
;
1704 conn
->disc_timeout
= HCI_DISCONN_TIMEOUT
;
1706 conn
->state
= BT_CONNECTED
;
1708 hci_conn_hold_device(conn
);
1709 hci_conn_add_sysfs(conn
);
1711 if (test_bit(HCI_AUTH
, &hdev
->flags
))
1712 conn
->link_mode
|= HCI_LM_AUTH
;
1714 if (test_bit(HCI_ENCRYPT
, &hdev
->flags
))
1715 conn
->link_mode
|= HCI_LM_ENCRYPT
;
1717 /* Get remote features */
1718 if (conn
->type
== ACL_LINK
) {
1719 struct hci_cp_read_remote_features cp
;
1720 cp
.handle
= ev
->handle
;
1721 hci_send_cmd(hdev
, HCI_OP_READ_REMOTE_FEATURES
,
1725 /* Set packet type for incoming connection */
1726 if (!conn
->out
&& hdev
->hci_ver
< BLUETOOTH_VER_2_0
) {
1727 struct hci_cp_change_conn_ptype cp
;
1728 cp
.handle
= ev
->handle
;
1729 cp
.pkt_type
= cpu_to_le16(conn
->pkt_type
);
1730 hci_send_cmd(hdev
, HCI_OP_CHANGE_CONN_PTYPE
, sizeof(cp
),
1734 conn
->state
= BT_CLOSED
;
1735 if (conn
->type
== ACL_LINK
)
1736 mgmt_connect_failed(hdev
, &ev
->bdaddr
, conn
->type
,
1737 conn
->dst_type
, ev
->status
);
1740 if (conn
->type
== ACL_LINK
)
1741 hci_sco_setup(conn
, ev
->status
);
1744 hci_proto_connect_cfm(conn
, ev
->status
);
1746 } else if (ev
->link_type
!= ACL_LINK
)
1747 hci_proto_connect_cfm(conn
, ev
->status
);
1750 hci_dev_unlock(hdev
);
1752 hci_conn_check_pending(hdev
);
1755 void hci_conn_accept(struct hci_conn
*conn
, int mask
)
1757 struct hci_dev
*hdev
= conn
->hdev
;
1759 BT_DBG("conn %p", conn
);
1761 conn
->state
= BT_CONFIG
;
1763 if (!lmp_esco_capable(hdev
)) {
1764 struct hci_cp_accept_conn_req cp
;
1766 bacpy(&cp
.bdaddr
, &conn
->dst
);
1768 if (lmp_rswitch_capable(hdev
) && (mask
& HCI_LM_MASTER
))
1769 cp
.role
= 0x00; /* Become master */
1771 cp
.role
= 0x01; /* Remain slave */
1773 hci_send_cmd(hdev
, HCI_OP_ACCEPT_CONN_REQ
, sizeof(cp
), &cp
);
1774 } else /* lmp_esco_capable(hdev)) */ {
1775 struct hci_cp_accept_sync_conn_req cp
;
1777 bacpy(&cp
.bdaddr
, &conn
->dst
);
1778 cp
.pkt_type
= cpu_to_le16(conn
->pkt_type
);
1780 cp
.tx_bandwidth
= __constant_cpu_to_le32(0x00001f40);
1781 cp
.rx_bandwidth
= __constant_cpu_to_le32(0x00001f40);
1782 cp
.max_latency
= __constant_cpu_to_le16(0xffff);
1783 cp
.content_format
= cpu_to_le16(hdev
->voice_setting
);
1784 cp
.retrans_effort
= 0xff;
1786 hci_send_cmd(hdev
, HCI_OP_ACCEPT_SYNC_CONN_REQ
,
1791 static void hci_conn_request_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
1793 struct hci_ev_conn_request
*ev
= (void *) skb
->data
;
1794 int mask
= hdev
->link_mode
;
1797 BT_DBG("%s bdaddr %pMR type 0x%x", hdev
->name
, &ev
->bdaddr
,
1800 mask
|= hci_proto_connect_ind(hdev
, &ev
->bdaddr
, ev
->link_type
,
1803 if ((mask
& HCI_LM_ACCEPT
) &&
1804 !hci_blacklist_lookup(hdev
, &ev
->bdaddr
)) {
1805 /* Connection accepted */
1806 struct inquiry_entry
*ie
;
1807 struct hci_conn
*conn
;
1811 ie
= hci_inquiry_cache_lookup(hdev
, &ev
->bdaddr
);
1813 memcpy(ie
->data
.dev_class
, ev
->dev_class
, 3);
1815 conn
= hci_conn_hash_lookup_ba(hdev
, ev
->link_type
,
1818 conn
= hci_conn_add(hdev
, ev
->link_type
, &ev
->bdaddr
);
1820 BT_ERR("No memory for new connection");
1821 hci_dev_unlock(hdev
);
1826 memcpy(conn
->dev_class
, ev
->dev_class
, 3);
1828 hci_dev_unlock(hdev
);
1830 if (ev
->link_type
== ACL_LINK
||
1831 (!(flags
& HCI_PROTO_DEFER
) && !lmp_esco_capable(hdev
))) {
1832 struct hci_cp_accept_conn_req cp
;
1833 conn
->state
= BT_CONNECT
;
1835 bacpy(&cp
.bdaddr
, &ev
->bdaddr
);
1837 if (lmp_rswitch_capable(hdev
) && (mask
& HCI_LM_MASTER
))
1838 cp
.role
= 0x00; /* Become master */
1840 cp
.role
= 0x01; /* Remain slave */
1842 hci_send_cmd(hdev
, HCI_OP_ACCEPT_CONN_REQ
, sizeof(cp
),
1844 } else if (!(flags
& HCI_PROTO_DEFER
)) {
1845 struct hci_cp_accept_sync_conn_req cp
;
1846 conn
->state
= BT_CONNECT
;
1848 bacpy(&cp
.bdaddr
, &ev
->bdaddr
);
1849 cp
.pkt_type
= cpu_to_le16(conn
->pkt_type
);
1851 cp
.tx_bandwidth
= __constant_cpu_to_le32(0x00001f40);
1852 cp
.rx_bandwidth
= __constant_cpu_to_le32(0x00001f40);
1853 cp
.max_latency
= __constant_cpu_to_le16(0xffff);
1854 cp
.content_format
= cpu_to_le16(hdev
->voice_setting
);
1855 cp
.retrans_effort
= 0xff;
1857 hci_send_cmd(hdev
, HCI_OP_ACCEPT_SYNC_CONN_REQ
,
1860 conn
->state
= BT_CONNECT2
;
1861 hci_proto_connect_cfm(conn
, 0);
1865 /* Connection rejected */
1866 struct hci_cp_reject_conn_req cp
;
1868 bacpy(&cp
.bdaddr
, &ev
->bdaddr
);
1869 cp
.reason
= HCI_ERROR_REJ_BAD_ADDR
;
1870 hci_send_cmd(hdev
, HCI_OP_REJECT_CONN_REQ
, sizeof(cp
), &cp
);
1874 static u8
hci_to_mgmt_reason(u8 err
)
1877 case HCI_ERROR_CONNECTION_TIMEOUT
:
1878 return MGMT_DEV_DISCONN_TIMEOUT
;
1879 case HCI_ERROR_REMOTE_USER_TERM
:
1880 case HCI_ERROR_REMOTE_LOW_RESOURCES
:
1881 case HCI_ERROR_REMOTE_POWER_OFF
:
1882 return MGMT_DEV_DISCONN_REMOTE
;
1883 case HCI_ERROR_LOCAL_HOST_TERM
:
1884 return MGMT_DEV_DISCONN_LOCAL_HOST
;
1886 return MGMT_DEV_DISCONN_UNKNOWN
;
1890 static void hci_disconn_complete_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
1892 struct hci_ev_disconn_complete
*ev
= (void *) skb
->data
;
1893 struct hci_conn
*conn
;
1895 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
1899 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(ev
->handle
));
1903 if (ev
->status
== 0)
1904 conn
->state
= BT_CLOSED
;
1906 if (test_and_clear_bit(HCI_CONN_MGMT_CONNECTED
, &conn
->flags
) &&
1907 (conn
->type
== ACL_LINK
|| conn
->type
== LE_LINK
)) {
1909 mgmt_disconnect_failed(hdev
, &conn
->dst
, conn
->type
,
1910 conn
->dst_type
, ev
->status
);
1912 u8 reason
= hci_to_mgmt_reason(ev
->reason
);
1914 mgmt_device_disconnected(hdev
, &conn
->dst
, conn
->type
,
1915 conn
->dst_type
, reason
);
1919 if (ev
->status
== 0) {
1920 if (conn
->type
== ACL_LINK
&& conn
->flush_key
)
1921 hci_remove_link_key(hdev
, &conn
->dst
);
1922 hci_proto_disconn_cfm(conn
, ev
->reason
);
1927 hci_dev_unlock(hdev
);
1930 static void hci_auth_complete_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
1932 struct hci_ev_auth_complete
*ev
= (void *) skb
->data
;
1933 struct hci_conn
*conn
;
1935 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
1939 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(ev
->handle
));
1944 if (!hci_conn_ssp_enabled(conn
) &&
1945 test_bit(HCI_CONN_REAUTH_PEND
, &conn
->flags
)) {
1946 BT_INFO("re-auth of legacy device is not possible.");
1948 conn
->link_mode
|= HCI_LM_AUTH
;
1949 conn
->sec_level
= conn
->pending_sec_level
;
1952 mgmt_auth_failed(hdev
, &conn
->dst
, conn
->type
, conn
->dst_type
,
1956 clear_bit(HCI_CONN_AUTH_PEND
, &conn
->flags
);
1957 clear_bit(HCI_CONN_REAUTH_PEND
, &conn
->flags
);
1959 if (conn
->state
== BT_CONFIG
) {
1960 if (!ev
->status
&& hci_conn_ssp_enabled(conn
)) {
1961 struct hci_cp_set_conn_encrypt cp
;
1962 cp
.handle
= ev
->handle
;
1964 hci_send_cmd(hdev
, HCI_OP_SET_CONN_ENCRYPT
, sizeof(cp
),
1967 conn
->state
= BT_CONNECTED
;
1968 hci_proto_connect_cfm(conn
, ev
->status
);
1972 hci_auth_cfm(conn
, ev
->status
);
1974 hci_conn_hold(conn
);
1975 conn
->disc_timeout
= HCI_DISCONN_TIMEOUT
;
1979 if (test_bit(HCI_CONN_ENCRYPT_PEND
, &conn
->flags
)) {
1981 struct hci_cp_set_conn_encrypt cp
;
1982 cp
.handle
= ev
->handle
;
1984 hci_send_cmd(hdev
, HCI_OP_SET_CONN_ENCRYPT
, sizeof(cp
),
1987 clear_bit(HCI_CONN_ENCRYPT_PEND
, &conn
->flags
);
1988 hci_encrypt_cfm(conn
, ev
->status
, 0x00);
1993 hci_dev_unlock(hdev
);
1996 static void hci_remote_name_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
1998 struct hci_ev_remote_name
*ev
= (void *) skb
->data
;
1999 struct hci_conn
*conn
;
2001 BT_DBG("%s", hdev
->name
);
2003 hci_conn_check_pending(hdev
);
2007 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &ev
->bdaddr
);
2009 if (!test_bit(HCI_MGMT
, &hdev
->dev_flags
))
2012 if (ev
->status
== 0)
2013 hci_check_pending_name(hdev
, conn
, &ev
->bdaddr
, ev
->name
,
2014 strnlen(ev
->name
, HCI_MAX_NAME_LENGTH
));
2016 hci_check_pending_name(hdev
, conn
, &ev
->bdaddr
, NULL
, 0);
2022 if (!hci_outgoing_auth_needed(hdev
, conn
))
2025 if (!test_and_set_bit(HCI_CONN_AUTH_PEND
, &conn
->flags
)) {
2026 struct hci_cp_auth_requested cp
;
2027 cp
.handle
= __cpu_to_le16(conn
->handle
);
2028 hci_send_cmd(hdev
, HCI_OP_AUTH_REQUESTED
, sizeof(cp
), &cp
);
2032 hci_dev_unlock(hdev
);
2035 static void hci_encrypt_change_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2037 struct hci_ev_encrypt_change
*ev
= (void *) skb
->data
;
2038 struct hci_conn
*conn
;
2040 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
2044 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(ev
->handle
));
2048 /* Encryption implies authentication */
2049 conn
->link_mode
|= HCI_LM_AUTH
;
2050 conn
->link_mode
|= HCI_LM_ENCRYPT
;
2051 conn
->sec_level
= conn
->pending_sec_level
;
2053 conn
->link_mode
&= ~HCI_LM_ENCRYPT
;
2056 clear_bit(HCI_CONN_ENCRYPT_PEND
, &conn
->flags
);
2058 if (ev
->status
&& conn
->state
== BT_CONNECTED
) {
2059 hci_disconnect(conn
, HCI_ERROR_AUTH_FAILURE
);
2064 if (conn
->state
== BT_CONFIG
) {
2066 conn
->state
= BT_CONNECTED
;
2068 hci_proto_connect_cfm(conn
, ev
->status
);
2071 hci_encrypt_cfm(conn
, ev
->status
, ev
->encrypt
);
2075 hci_dev_unlock(hdev
);
2078 static void hci_change_link_key_complete_evt(struct hci_dev
*hdev
,
2079 struct sk_buff
*skb
)
2081 struct hci_ev_change_link_key_complete
*ev
= (void *) skb
->data
;
2082 struct hci_conn
*conn
;
2084 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
2088 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(ev
->handle
));
2091 conn
->link_mode
|= HCI_LM_SECURE
;
2093 clear_bit(HCI_CONN_AUTH_PEND
, &conn
->flags
);
2095 hci_key_change_cfm(conn
, ev
->status
);
2098 hci_dev_unlock(hdev
);
2101 static void hci_remote_features_evt(struct hci_dev
*hdev
,
2102 struct sk_buff
*skb
)
2104 struct hci_ev_remote_features
*ev
= (void *) skb
->data
;
2105 struct hci_conn
*conn
;
2107 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
2111 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(ev
->handle
));
2116 memcpy(conn
->features
, ev
->features
, 8);
2118 if (conn
->state
!= BT_CONFIG
)
2121 if (!ev
->status
&& lmp_ssp_capable(hdev
) && lmp_ssp_capable(conn
)) {
2122 struct hci_cp_read_remote_ext_features cp
;
2123 cp
.handle
= ev
->handle
;
2125 hci_send_cmd(hdev
, HCI_OP_READ_REMOTE_EXT_FEATURES
,
2130 if (!ev
->status
&& !test_bit(HCI_CONN_MGMT_CONNECTED
, &conn
->flags
)) {
2131 struct hci_cp_remote_name_req cp
;
2132 memset(&cp
, 0, sizeof(cp
));
2133 bacpy(&cp
.bdaddr
, &conn
->dst
);
2134 cp
.pscan_rep_mode
= 0x02;
2135 hci_send_cmd(hdev
, HCI_OP_REMOTE_NAME_REQ
, sizeof(cp
), &cp
);
2136 } else if (!test_and_set_bit(HCI_CONN_MGMT_CONNECTED
, &conn
->flags
))
2137 mgmt_device_connected(hdev
, &conn
->dst
, conn
->type
,
2138 conn
->dst_type
, 0, NULL
, 0,
2141 if (!hci_outgoing_auth_needed(hdev
, conn
)) {
2142 conn
->state
= BT_CONNECTED
;
2143 hci_proto_connect_cfm(conn
, ev
->status
);
2148 hci_dev_unlock(hdev
);
2151 static void hci_cmd_complete_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2153 struct hci_ev_cmd_complete
*ev
= (void *) skb
->data
;
2154 u8 status
= skb
->data
[sizeof(*ev
)];
2157 skb_pull(skb
, sizeof(*ev
));
2159 opcode
= __le16_to_cpu(ev
->opcode
);
2162 case HCI_OP_INQUIRY_CANCEL
:
2163 hci_cc_inquiry_cancel(hdev
, skb
);
2166 case HCI_OP_PERIODIC_INQ
:
2167 hci_cc_periodic_inq(hdev
, skb
);
2170 case HCI_OP_EXIT_PERIODIC_INQ
:
2171 hci_cc_exit_periodic_inq(hdev
, skb
);
2174 case HCI_OP_REMOTE_NAME_REQ_CANCEL
:
2175 hci_cc_remote_name_req_cancel(hdev
, skb
);
2178 case HCI_OP_ROLE_DISCOVERY
:
2179 hci_cc_role_discovery(hdev
, skb
);
2182 case HCI_OP_READ_LINK_POLICY
:
2183 hci_cc_read_link_policy(hdev
, skb
);
2186 case HCI_OP_WRITE_LINK_POLICY
:
2187 hci_cc_write_link_policy(hdev
, skb
);
2190 case HCI_OP_READ_DEF_LINK_POLICY
:
2191 hci_cc_read_def_link_policy(hdev
, skb
);
2194 case HCI_OP_WRITE_DEF_LINK_POLICY
:
2195 hci_cc_write_def_link_policy(hdev
, skb
);
2199 hci_cc_reset(hdev
, skb
);
2202 case HCI_OP_WRITE_LOCAL_NAME
:
2203 hci_cc_write_local_name(hdev
, skb
);
2206 case HCI_OP_READ_LOCAL_NAME
:
2207 hci_cc_read_local_name(hdev
, skb
);
2210 case HCI_OP_WRITE_AUTH_ENABLE
:
2211 hci_cc_write_auth_enable(hdev
, skb
);
2214 case HCI_OP_WRITE_ENCRYPT_MODE
:
2215 hci_cc_write_encrypt_mode(hdev
, skb
);
2218 case HCI_OP_WRITE_SCAN_ENABLE
:
2219 hci_cc_write_scan_enable(hdev
, skb
);
2222 case HCI_OP_READ_CLASS_OF_DEV
:
2223 hci_cc_read_class_of_dev(hdev
, skb
);
2226 case HCI_OP_WRITE_CLASS_OF_DEV
:
2227 hci_cc_write_class_of_dev(hdev
, skb
);
2230 case HCI_OP_READ_VOICE_SETTING
:
2231 hci_cc_read_voice_setting(hdev
, skb
);
2234 case HCI_OP_WRITE_VOICE_SETTING
:
2235 hci_cc_write_voice_setting(hdev
, skb
);
2238 case HCI_OP_WRITE_SSP_MODE
:
2239 hci_cc_write_ssp_mode(hdev
, skb
);
2242 case HCI_OP_READ_LOCAL_VERSION
:
2243 hci_cc_read_local_version(hdev
, skb
);
2246 case HCI_OP_READ_LOCAL_COMMANDS
:
2247 hci_cc_read_local_commands(hdev
, skb
);
2250 case HCI_OP_READ_LOCAL_FEATURES
:
2251 hci_cc_read_local_features(hdev
, skb
);
2254 case HCI_OP_READ_LOCAL_EXT_FEATURES
:
2255 hci_cc_read_local_ext_features(hdev
, skb
);
2258 case HCI_OP_READ_BUFFER_SIZE
:
2259 hci_cc_read_buffer_size(hdev
, skb
);
2262 case HCI_OP_READ_BD_ADDR
:
2263 hci_cc_read_bd_addr(hdev
, skb
);
2266 case HCI_OP_READ_PAGE_SCAN_ACTIVITY
:
2267 hci_cc_read_page_scan_activity(hdev
, skb
);
2270 case HCI_OP_WRITE_PAGE_SCAN_ACTIVITY
:
2271 hci_cc_write_page_scan_activity(hdev
, skb
);
2274 case HCI_OP_READ_PAGE_SCAN_TYPE
:
2275 hci_cc_read_page_scan_type(hdev
, skb
);
2278 case HCI_OP_WRITE_PAGE_SCAN_TYPE
:
2279 hci_cc_write_page_scan_type(hdev
, skb
);
2282 case HCI_OP_READ_DATA_BLOCK_SIZE
:
2283 hci_cc_read_data_block_size(hdev
, skb
);
2286 case HCI_OP_READ_FLOW_CONTROL_MODE
:
2287 hci_cc_read_flow_control_mode(hdev
, skb
);
2290 case HCI_OP_READ_LOCAL_AMP_INFO
:
2291 hci_cc_read_local_amp_info(hdev
, skb
);
2294 case HCI_OP_READ_LOCAL_AMP_ASSOC
:
2295 hci_cc_read_local_amp_assoc(hdev
, skb
);
2298 case HCI_OP_READ_INQ_RSP_TX_POWER
:
2299 hci_cc_read_inq_rsp_tx_power(hdev
, skb
);
2302 case HCI_OP_PIN_CODE_REPLY
:
2303 hci_cc_pin_code_reply(hdev
, skb
);
2306 case HCI_OP_PIN_CODE_NEG_REPLY
:
2307 hci_cc_pin_code_neg_reply(hdev
, skb
);
2310 case HCI_OP_READ_LOCAL_OOB_DATA
:
2311 hci_cc_read_local_oob_data_reply(hdev
, skb
);
2314 case HCI_OP_LE_READ_BUFFER_SIZE
:
2315 hci_cc_le_read_buffer_size(hdev
, skb
);
2318 case HCI_OP_LE_READ_LOCAL_FEATURES
:
2319 hci_cc_le_read_local_features(hdev
, skb
);
2322 case HCI_OP_LE_READ_ADV_TX_POWER
:
2323 hci_cc_le_read_adv_tx_power(hdev
, skb
);
2326 case HCI_OP_USER_CONFIRM_REPLY
:
2327 hci_cc_user_confirm_reply(hdev
, skb
);
2330 case HCI_OP_USER_CONFIRM_NEG_REPLY
:
2331 hci_cc_user_confirm_neg_reply(hdev
, skb
);
2334 case HCI_OP_USER_PASSKEY_REPLY
:
2335 hci_cc_user_passkey_reply(hdev
, skb
);
2338 case HCI_OP_USER_PASSKEY_NEG_REPLY
:
2339 hci_cc_user_passkey_neg_reply(hdev
, skb
);
2342 case HCI_OP_LE_SET_SCAN_PARAM
:
2343 hci_cc_le_set_scan_param(hdev
, skb
);
2346 case HCI_OP_LE_SET_ADV_ENABLE
:
2347 hci_cc_le_set_adv_enable(hdev
, skb
);
2350 case HCI_OP_LE_SET_SCAN_ENABLE
:
2351 hci_cc_le_set_scan_enable(hdev
, skb
);
2354 case HCI_OP_LE_READ_WHITE_LIST_SIZE
:
2355 hci_cc_le_read_white_list_size(hdev
, skb
);
2358 case HCI_OP_LE_READ_SUPPORTED_STATES
:
2359 hci_cc_le_read_supported_states(hdev
, skb
);
2362 case HCI_OP_WRITE_LE_HOST_SUPPORTED
:
2363 hci_cc_write_le_host_supported(hdev
, skb
);
2366 case HCI_OP_WRITE_REMOTE_AMP_ASSOC
:
2367 hci_cc_write_remote_amp_assoc(hdev
, skb
);
2371 BT_DBG("%s opcode 0x%4.4x", hdev
->name
, opcode
);
2375 if (opcode
!= HCI_OP_NOP
)
2376 del_timer(&hdev
->cmd_timer
);
2378 hci_req_cmd_complete(hdev
, opcode
, status
);
2380 if (ev
->ncmd
&& !test_bit(HCI_RESET
, &hdev
->flags
)) {
2381 atomic_set(&hdev
->cmd_cnt
, 1);
2382 if (!skb_queue_empty(&hdev
->cmd_q
))
2383 queue_work(hdev
->workqueue
, &hdev
->cmd_work
);
2387 static void hci_cmd_status_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2389 struct hci_ev_cmd_status
*ev
= (void *) skb
->data
;
2392 skb_pull(skb
, sizeof(*ev
));
2394 opcode
= __le16_to_cpu(ev
->opcode
);
2397 case HCI_OP_INQUIRY
:
2398 hci_cs_inquiry(hdev
, ev
->status
);
2401 case HCI_OP_CREATE_CONN
:
2402 hci_cs_create_conn(hdev
, ev
->status
);
2405 case HCI_OP_ADD_SCO
:
2406 hci_cs_add_sco(hdev
, ev
->status
);
2409 case HCI_OP_AUTH_REQUESTED
:
2410 hci_cs_auth_requested(hdev
, ev
->status
);
2413 case HCI_OP_SET_CONN_ENCRYPT
:
2414 hci_cs_set_conn_encrypt(hdev
, ev
->status
);
2417 case HCI_OP_REMOTE_NAME_REQ
:
2418 hci_cs_remote_name_req(hdev
, ev
->status
);
2421 case HCI_OP_READ_REMOTE_FEATURES
:
2422 hci_cs_read_remote_features(hdev
, ev
->status
);
2425 case HCI_OP_READ_REMOTE_EXT_FEATURES
:
2426 hci_cs_read_remote_ext_features(hdev
, ev
->status
);
2429 case HCI_OP_SETUP_SYNC_CONN
:
2430 hci_cs_setup_sync_conn(hdev
, ev
->status
);
2433 case HCI_OP_SNIFF_MODE
:
2434 hci_cs_sniff_mode(hdev
, ev
->status
);
2437 case HCI_OP_EXIT_SNIFF_MODE
:
2438 hci_cs_exit_sniff_mode(hdev
, ev
->status
);
2441 case HCI_OP_DISCONNECT
:
2442 hci_cs_disconnect(hdev
, ev
->status
);
2445 case HCI_OP_LE_CREATE_CONN
:
2446 hci_cs_le_create_conn(hdev
, ev
->status
);
2449 case HCI_OP_CREATE_PHY_LINK
:
2450 hci_cs_create_phylink(hdev
, ev
->status
);
2453 case HCI_OP_ACCEPT_PHY_LINK
:
2454 hci_cs_accept_phylink(hdev
, ev
->status
);
2458 BT_DBG("%s opcode 0x%4.4x", hdev
->name
, opcode
);
2462 if (opcode
!= HCI_OP_NOP
)
2463 del_timer(&hdev
->cmd_timer
);
2465 hci_req_cmd_status(hdev
, opcode
, ev
->status
);
2467 if (ev
->ncmd
&& !test_bit(HCI_RESET
, &hdev
->flags
)) {
2468 atomic_set(&hdev
->cmd_cnt
, 1);
2469 if (!skb_queue_empty(&hdev
->cmd_q
))
2470 queue_work(hdev
->workqueue
, &hdev
->cmd_work
);
2474 static void hci_role_change_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2476 struct hci_ev_role_change
*ev
= (void *) skb
->data
;
2477 struct hci_conn
*conn
;
2479 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
2483 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &ev
->bdaddr
);
2487 conn
->link_mode
&= ~HCI_LM_MASTER
;
2489 conn
->link_mode
|= HCI_LM_MASTER
;
2492 clear_bit(HCI_CONN_RSWITCH_PEND
, &conn
->flags
);
2494 hci_role_switch_cfm(conn
, ev
->status
, ev
->role
);
2497 hci_dev_unlock(hdev
);
2500 static void hci_num_comp_pkts_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2502 struct hci_ev_num_comp_pkts
*ev
= (void *) skb
->data
;
2505 if (hdev
->flow_ctl_mode
!= HCI_FLOW_CTL_MODE_PACKET_BASED
) {
2506 BT_ERR("Wrong event for mode %d", hdev
->flow_ctl_mode
);
2510 if (skb
->len
< sizeof(*ev
) || skb
->len
< sizeof(*ev
) +
2511 ev
->num_hndl
* sizeof(struct hci_comp_pkts_info
)) {
2512 BT_DBG("%s bad parameters", hdev
->name
);
2516 BT_DBG("%s num_hndl %d", hdev
->name
, ev
->num_hndl
);
2518 for (i
= 0; i
< ev
->num_hndl
; i
++) {
2519 struct hci_comp_pkts_info
*info
= &ev
->handles
[i
];
2520 struct hci_conn
*conn
;
2521 __u16 handle
, count
;
2523 handle
= __le16_to_cpu(info
->handle
);
2524 count
= __le16_to_cpu(info
->count
);
2526 conn
= hci_conn_hash_lookup_handle(hdev
, handle
);
2530 conn
->sent
-= count
;
2532 switch (conn
->type
) {
2534 hdev
->acl_cnt
+= count
;
2535 if (hdev
->acl_cnt
> hdev
->acl_pkts
)
2536 hdev
->acl_cnt
= hdev
->acl_pkts
;
2540 if (hdev
->le_pkts
) {
2541 hdev
->le_cnt
+= count
;
2542 if (hdev
->le_cnt
> hdev
->le_pkts
)
2543 hdev
->le_cnt
= hdev
->le_pkts
;
2545 hdev
->acl_cnt
+= count
;
2546 if (hdev
->acl_cnt
> hdev
->acl_pkts
)
2547 hdev
->acl_cnt
= hdev
->acl_pkts
;
2552 hdev
->sco_cnt
+= count
;
2553 if (hdev
->sco_cnt
> hdev
->sco_pkts
)
2554 hdev
->sco_cnt
= hdev
->sco_pkts
;
2558 BT_ERR("Unknown type %d conn %p", conn
->type
, conn
);
2563 queue_work(hdev
->workqueue
, &hdev
->tx_work
);
2566 static struct hci_conn
*__hci_conn_lookup_handle(struct hci_dev
*hdev
,
2569 struct hci_chan
*chan
;
2571 switch (hdev
->dev_type
) {
2573 return hci_conn_hash_lookup_handle(hdev
, handle
);
2575 chan
= hci_chan_lookup_handle(hdev
, handle
);
2580 BT_ERR("%s unknown dev_type %d", hdev
->name
, hdev
->dev_type
);
2587 static void hci_num_comp_blocks_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2589 struct hci_ev_num_comp_blocks
*ev
= (void *) skb
->data
;
2592 if (hdev
->flow_ctl_mode
!= HCI_FLOW_CTL_MODE_BLOCK_BASED
) {
2593 BT_ERR("Wrong event for mode %d", hdev
->flow_ctl_mode
);
2597 if (skb
->len
< sizeof(*ev
) || skb
->len
< sizeof(*ev
) +
2598 ev
->num_hndl
* sizeof(struct hci_comp_blocks_info
)) {
2599 BT_DBG("%s bad parameters", hdev
->name
);
2603 BT_DBG("%s num_blocks %d num_hndl %d", hdev
->name
, ev
->num_blocks
,
2606 for (i
= 0; i
< ev
->num_hndl
; i
++) {
2607 struct hci_comp_blocks_info
*info
= &ev
->handles
[i
];
2608 struct hci_conn
*conn
= NULL
;
2609 __u16 handle
, block_count
;
2611 handle
= __le16_to_cpu(info
->handle
);
2612 block_count
= __le16_to_cpu(info
->blocks
);
2614 conn
= __hci_conn_lookup_handle(hdev
, handle
);
2618 conn
->sent
-= block_count
;
2620 switch (conn
->type
) {
2623 hdev
->block_cnt
+= block_count
;
2624 if (hdev
->block_cnt
> hdev
->num_blocks
)
2625 hdev
->block_cnt
= hdev
->num_blocks
;
2629 BT_ERR("Unknown type %d conn %p", conn
->type
, conn
);
2634 queue_work(hdev
->workqueue
, &hdev
->tx_work
);
2637 static void hci_mode_change_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2639 struct hci_ev_mode_change
*ev
= (void *) skb
->data
;
2640 struct hci_conn
*conn
;
2642 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
2646 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(ev
->handle
));
2648 conn
->mode
= ev
->mode
;
2649 conn
->interval
= __le16_to_cpu(ev
->interval
);
2651 if (!test_and_clear_bit(HCI_CONN_MODE_CHANGE_PEND
,
2653 if (conn
->mode
== HCI_CM_ACTIVE
)
2654 set_bit(HCI_CONN_POWER_SAVE
, &conn
->flags
);
2656 clear_bit(HCI_CONN_POWER_SAVE
, &conn
->flags
);
2659 if (test_and_clear_bit(HCI_CONN_SCO_SETUP_PEND
, &conn
->flags
))
2660 hci_sco_setup(conn
, ev
->status
);
2663 hci_dev_unlock(hdev
);
2666 static void hci_pin_code_request_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2668 struct hci_ev_pin_code_req
*ev
= (void *) skb
->data
;
2669 struct hci_conn
*conn
;
2671 BT_DBG("%s", hdev
->name
);
2675 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &ev
->bdaddr
);
2679 if (conn
->state
== BT_CONNECTED
) {
2680 hci_conn_hold(conn
);
2681 conn
->disc_timeout
= HCI_PAIRING_TIMEOUT
;
2685 if (!test_bit(HCI_PAIRABLE
, &hdev
->dev_flags
))
2686 hci_send_cmd(hdev
, HCI_OP_PIN_CODE_NEG_REPLY
,
2687 sizeof(ev
->bdaddr
), &ev
->bdaddr
);
2688 else if (test_bit(HCI_MGMT
, &hdev
->dev_flags
)) {
2691 if (conn
->pending_sec_level
== BT_SECURITY_HIGH
)
2696 mgmt_pin_code_request(hdev
, &ev
->bdaddr
, secure
);
2700 hci_dev_unlock(hdev
);
2703 static void hci_link_key_request_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2705 struct hci_ev_link_key_req
*ev
= (void *) skb
->data
;
2706 struct hci_cp_link_key_reply cp
;
2707 struct hci_conn
*conn
;
2708 struct link_key
*key
;
2710 BT_DBG("%s", hdev
->name
);
2712 if (!test_bit(HCI_LINK_KEYS
, &hdev
->dev_flags
))
2717 key
= hci_find_link_key(hdev
, &ev
->bdaddr
);
2719 BT_DBG("%s link key not found for %pMR", hdev
->name
,
2724 BT_DBG("%s found key type %u for %pMR", hdev
->name
, key
->type
,
2727 if (!test_bit(HCI_DEBUG_KEYS
, &hdev
->dev_flags
) &&
2728 key
->type
== HCI_LK_DEBUG_COMBINATION
) {
2729 BT_DBG("%s ignoring debug key", hdev
->name
);
2733 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &ev
->bdaddr
);
2735 if (key
->type
== HCI_LK_UNAUTH_COMBINATION
&&
2736 conn
->auth_type
!= 0xff && (conn
->auth_type
& 0x01)) {
2737 BT_DBG("%s ignoring unauthenticated key", hdev
->name
);
2741 if (key
->type
== HCI_LK_COMBINATION
&& key
->pin_len
< 16 &&
2742 conn
->pending_sec_level
== BT_SECURITY_HIGH
) {
2743 BT_DBG("%s ignoring key unauthenticated for high security",
2748 conn
->key_type
= key
->type
;
2749 conn
->pin_length
= key
->pin_len
;
2752 bacpy(&cp
.bdaddr
, &ev
->bdaddr
);
2753 memcpy(cp
.link_key
, key
->val
, HCI_LINK_KEY_SIZE
);
2755 hci_send_cmd(hdev
, HCI_OP_LINK_KEY_REPLY
, sizeof(cp
), &cp
);
2757 hci_dev_unlock(hdev
);
2762 hci_send_cmd(hdev
, HCI_OP_LINK_KEY_NEG_REPLY
, 6, &ev
->bdaddr
);
2763 hci_dev_unlock(hdev
);
2766 static void hci_link_key_notify_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2768 struct hci_ev_link_key_notify
*ev
= (void *) skb
->data
;
2769 struct hci_conn
*conn
;
2772 BT_DBG("%s", hdev
->name
);
2776 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &ev
->bdaddr
);
2778 hci_conn_hold(conn
);
2779 conn
->disc_timeout
= HCI_DISCONN_TIMEOUT
;
2780 pin_len
= conn
->pin_length
;
2782 if (ev
->key_type
!= HCI_LK_CHANGED_COMBINATION
)
2783 conn
->key_type
= ev
->key_type
;
2788 if (test_bit(HCI_LINK_KEYS
, &hdev
->dev_flags
))
2789 hci_add_link_key(hdev
, conn
, 1, &ev
->bdaddr
, ev
->link_key
,
2790 ev
->key_type
, pin_len
);
2792 hci_dev_unlock(hdev
);
2795 static void hci_clock_offset_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2797 struct hci_ev_clock_offset
*ev
= (void *) skb
->data
;
2798 struct hci_conn
*conn
;
2800 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
2804 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(ev
->handle
));
2805 if (conn
&& !ev
->status
) {
2806 struct inquiry_entry
*ie
;
2808 ie
= hci_inquiry_cache_lookup(hdev
, &conn
->dst
);
2810 ie
->data
.clock_offset
= ev
->clock_offset
;
2811 ie
->timestamp
= jiffies
;
2815 hci_dev_unlock(hdev
);
2818 static void hci_pkt_type_change_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2820 struct hci_ev_pkt_type_change
*ev
= (void *) skb
->data
;
2821 struct hci_conn
*conn
;
2823 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
2827 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(ev
->handle
));
2828 if (conn
&& !ev
->status
)
2829 conn
->pkt_type
= __le16_to_cpu(ev
->pkt_type
);
2831 hci_dev_unlock(hdev
);
2834 static void hci_pscan_rep_mode_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
2836 struct hci_ev_pscan_rep_mode
*ev
= (void *) skb
->data
;
2837 struct inquiry_entry
*ie
;
2839 BT_DBG("%s", hdev
->name
);
2843 ie
= hci_inquiry_cache_lookup(hdev
, &ev
->bdaddr
);
2845 ie
->data
.pscan_rep_mode
= ev
->pscan_rep_mode
;
2846 ie
->timestamp
= jiffies
;
2849 hci_dev_unlock(hdev
);
2852 static void hci_inquiry_result_with_rssi_evt(struct hci_dev
*hdev
,
2853 struct sk_buff
*skb
)
2855 struct inquiry_data data
;
2856 int num_rsp
= *((__u8
*) skb
->data
);
2857 bool name_known
, ssp
;
2859 BT_DBG("%s num_rsp %d", hdev
->name
, num_rsp
);
2864 if (test_bit(HCI_PERIODIC_INQ
, &hdev
->dev_flags
))
2869 if ((skb
->len
- 1) / num_rsp
!= sizeof(struct inquiry_info_with_rssi
)) {
2870 struct inquiry_info_with_rssi_and_pscan_mode
*info
;
2871 info
= (void *) (skb
->data
+ 1);
2873 for (; num_rsp
; num_rsp
--, info
++) {
2874 bacpy(&data
.bdaddr
, &info
->bdaddr
);
2875 data
.pscan_rep_mode
= info
->pscan_rep_mode
;
2876 data
.pscan_period_mode
= info
->pscan_period_mode
;
2877 data
.pscan_mode
= info
->pscan_mode
;
2878 memcpy(data
.dev_class
, info
->dev_class
, 3);
2879 data
.clock_offset
= info
->clock_offset
;
2880 data
.rssi
= info
->rssi
;
2881 data
.ssp_mode
= 0x00;
2883 name_known
= hci_inquiry_cache_update(hdev
, &data
,
2885 mgmt_device_found(hdev
, &info
->bdaddr
, ACL_LINK
, 0x00,
2886 info
->dev_class
, info
->rssi
,
2887 !name_known
, ssp
, NULL
, 0);
2890 struct inquiry_info_with_rssi
*info
= (void *) (skb
->data
+ 1);
2892 for (; num_rsp
; num_rsp
--, info
++) {
2893 bacpy(&data
.bdaddr
, &info
->bdaddr
);
2894 data
.pscan_rep_mode
= info
->pscan_rep_mode
;
2895 data
.pscan_period_mode
= info
->pscan_period_mode
;
2896 data
.pscan_mode
= 0x00;
2897 memcpy(data
.dev_class
, info
->dev_class
, 3);
2898 data
.clock_offset
= info
->clock_offset
;
2899 data
.rssi
= info
->rssi
;
2900 data
.ssp_mode
= 0x00;
2901 name_known
= hci_inquiry_cache_update(hdev
, &data
,
2903 mgmt_device_found(hdev
, &info
->bdaddr
, ACL_LINK
, 0x00,
2904 info
->dev_class
, info
->rssi
,
2905 !name_known
, ssp
, NULL
, 0);
2909 hci_dev_unlock(hdev
);
2912 static void hci_remote_ext_features_evt(struct hci_dev
*hdev
,
2913 struct sk_buff
*skb
)
2915 struct hci_ev_remote_ext_features
*ev
= (void *) skb
->data
;
2916 struct hci_conn
*conn
;
2918 BT_DBG("%s", hdev
->name
);
2922 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(ev
->handle
));
2926 if (!ev
->status
&& ev
->page
== 0x01) {
2927 struct inquiry_entry
*ie
;
2929 ie
= hci_inquiry_cache_lookup(hdev
, &conn
->dst
);
2931 ie
->data
.ssp_mode
= (ev
->features
[0] & LMP_HOST_SSP
);
2933 if (ev
->features
[0] & LMP_HOST_SSP
)
2934 set_bit(HCI_CONN_SSP_ENABLED
, &conn
->flags
);
2937 if (conn
->state
!= BT_CONFIG
)
2940 if (!ev
->status
&& !test_bit(HCI_CONN_MGMT_CONNECTED
, &conn
->flags
)) {
2941 struct hci_cp_remote_name_req cp
;
2942 memset(&cp
, 0, sizeof(cp
));
2943 bacpy(&cp
.bdaddr
, &conn
->dst
);
2944 cp
.pscan_rep_mode
= 0x02;
2945 hci_send_cmd(hdev
, HCI_OP_REMOTE_NAME_REQ
, sizeof(cp
), &cp
);
2946 } else if (!test_and_set_bit(HCI_CONN_MGMT_CONNECTED
, &conn
->flags
))
2947 mgmt_device_connected(hdev
, &conn
->dst
, conn
->type
,
2948 conn
->dst_type
, 0, NULL
, 0,
2951 if (!hci_outgoing_auth_needed(hdev
, conn
)) {
2952 conn
->state
= BT_CONNECTED
;
2953 hci_proto_connect_cfm(conn
, ev
->status
);
2958 hci_dev_unlock(hdev
);
2961 static void hci_sync_conn_complete_evt(struct hci_dev
*hdev
,
2962 struct sk_buff
*skb
)
2964 struct hci_ev_sync_conn_complete
*ev
= (void *) skb
->data
;
2965 struct hci_conn
*conn
;
2967 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
2971 conn
= hci_conn_hash_lookup_ba(hdev
, ev
->link_type
, &ev
->bdaddr
);
2973 if (ev
->link_type
== ESCO_LINK
)
2976 conn
= hci_conn_hash_lookup_ba(hdev
, ESCO_LINK
, &ev
->bdaddr
);
2980 conn
->type
= SCO_LINK
;
2983 switch (ev
->status
) {
2985 conn
->handle
= __le16_to_cpu(ev
->handle
);
2986 conn
->state
= BT_CONNECTED
;
2988 hci_conn_hold_device(conn
);
2989 hci_conn_add_sysfs(conn
);
2992 case 0x11: /* Unsupported Feature or Parameter Value */
2993 case 0x1c: /* SCO interval rejected */
2994 case 0x1a: /* Unsupported Remote Feature */
2995 case 0x1f: /* Unspecified error */
2996 if (conn
->out
&& conn
->attempt
< 2) {
2997 conn
->pkt_type
= (hdev
->esco_type
& SCO_ESCO_MASK
) |
2998 (hdev
->esco_type
& EDR_ESCO_MASK
);
2999 hci_setup_sync(conn
, conn
->link
->handle
);
3005 conn
->state
= BT_CLOSED
;
3009 hci_proto_connect_cfm(conn
, ev
->status
);
3014 hci_dev_unlock(hdev
);
3017 static void hci_extended_inquiry_result_evt(struct hci_dev
*hdev
,
3018 struct sk_buff
*skb
)
3020 struct inquiry_data data
;
3021 struct extended_inquiry_info
*info
= (void *) (skb
->data
+ 1);
3022 int num_rsp
= *((__u8
*) skb
->data
);
3025 BT_DBG("%s num_rsp %d", hdev
->name
, num_rsp
);
3030 if (test_bit(HCI_PERIODIC_INQ
, &hdev
->dev_flags
))
3035 for (; num_rsp
; num_rsp
--, info
++) {
3036 bool name_known
, ssp
;
3038 bacpy(&data
.bdaddr
, &info
->bdaddr
);
3039 data
.pscan_rep_mode
= info
->pscan_rep_mode
;
3040 data
.pscan_period_mode
= info
->pscan_period_mode
;
3041 data
.pscan_mode
= 0x00;
3042 memcpy(data
.dev_class
, info
->dev_class
, 3);
3043 data
.clock_offset
= info
->clock_offset
;
3044 data
.rssi
= info
->rssi
;
3045 data
.ssp_mode
= 0x01;
3047 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
3048 name_known
= eir_has_data_type(info
->data
,
3054 name_known
= hci_inquiry_cache_update(hdev
, &data
, name_known
,
3056 eir_len
= eir_get_length(info
->data
, sizeof(info
->data
));
3057 mgmt_device_found(hdev
, &info
->bdaddr
, ACL_LINK
, 0x00,
3058 info
->dev_class
, info
->rssi
, !name_known
,
3059 ssp
, info
->data
, eir_len
);
3062 hci_dev_unlock(hdev
);
3065 static void hci_key_refresh_complete_evt(struct hci_dev
*hdev
,
3066 struct sk_buff
*skb
)
3068 struct hci_ev_key_refresh_complete
*ev
= (void *) skb
->data
;
3069 struct hci_conn
*conn
;
3071 BT_DBG("%s status 0x%2.2x handle 0x%4.4x", hdev
->name
, ev
->status
,
3072 __le16_to_cpu(ev
->handle
));
3076 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(ev
->handle
));
3081 conn
->sec_level
= conn
->pending_sec_level
;
3083 clear_bit(HCI_CONN_ENCRYPT_PEND
, &conn
->flags
);
3085 if (ev
->status
&& conn
->state
== BT_CONNECTED
) {
3086 hci_disconnect(conn
, HCI_ERROR_AUTH_FAILURE
);
3091 if (conn
->state
== BT_CONFIG
) {
3093 conn
->state
= BT_CONNECTED
;
3095 hci_proto_connect_cfm(conn
, ev
->status
);
3098 hci_auth_cfm(conn
, ev
->status
);
3100 hci_conn_hold(conn
);
3101 conn
->disc_timeout
= HCI_DISCONN_TIMEOUT
;
3106 hci_dev_unlock(hdev
);
3109 static u8
hci_get_auth_req(struct hci_conn
*conn
)
3111 /* If remote requests dedicated bonding follow that lead */
3112 if (conn
->remote_auth
== 0x02 || conn
->remote_auth
== 0x03) {
3113 /* If both remote and local IO capabilities allow MITM
3114 * protection then require it, otherwise don't */
3115 if (conn
->remote_cap
== 0x03 || conn
->io_capability
== 0x03)
3121 /* If remote requests no-bonding follow that lead */
3122 if (conn
->remote_auth
== 0x00 || conn
->remote_auth
== 0x01)
3123 return conn
->remote_auth
| (conn
->auth_type
& 0x01);
3125 return conn
->auth_type
;
3128 static void hci_io_capa_request_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
3130 struct hci_ev_io_capa_request
*ev
= (void *) skb
->data
;
3131 struct hci_conn
*conn
;
3133 BT_DBG("%s", hdev
->name
);
3137 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &ev
->bdaddr
);
3141 hci_conn_hold(conn
);
3143 if (!test_bit(HCI_MGMT
, &hdev
->dev_flags
))
3146 if (test_bit(HCI_PAIRABLE
, &hdev
->dev_flags
) ||
3147 (conn
->remote_auth
& ~0x01) == HCI_AT_NO_BONDING
) {
3148 struct hci_cp_io_capability_reply cp
;
3150 bacpy(&cp
.bdaddr
, &ev
->bdaddr
);
3151 /* Change the IO capability from KeyboardDisplay
3152 * to DisplayYesNo as it is not supported by BT spec. */
3153 cp
.capability
= (conn
->io_capability
== 0x04) ?
3154 0x01 : conn
->io_capability
;
3155 conn
->auth_type
= hci_get_auth_req(conn
);
3156 cp
.authentication
= conn
->auth_type
;
3158 if (hci_find_remote_oob_data(hdev
, &conn
->dst
) &&
3159 (conn
->out
|| test_bit(HCI_CONN_REMOTE_OOB
, &conn
->flags
)))
3164 hci_send_cmd(hdev
, HCI_OP_IO_CAPABILITY_REPLY
,
3167 struct hci_cp_io_capability_neg_reply cp
;
3169 bacpy(&cp
.bdaddr
, &ev
->bdaddr
);
3170 cp
.reason
= HCI_ERROR_PAIRING_NOT_ALLOWED
;
3172 hci_send_cmd(hdev
, HCI_OP_IO_CAPABILITY_NEG_REPLY
,
3177 hci_dev_unlock(hdev
);
3180 static void hci_io_capa_reply_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
3182 struct hci_ev_io_capa_reply
*ev
= (void *) skb
->data
;
3183 struct hci_conn
*conn
;
3185 BT_DBG("%s", hdev
->name
);
3189 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &ev
->bdaddr
);
3193 conn
->remote_cap
= ev
->capability
;
3194 conn
->remote_auth
= ev
->authentication
;
3196 set_bit(HCI_CONN_REMOTE_OOB
, &conn
->flags
);
3199 hci_dev_unlock(hdev
);
3202 static void hci_user_confirm_request_evt(struct hci_dev
*hdev
,
3203 struct sk_buff
*skb
)
3205 struct hci_ev_user_confirm_req
*ev
= (void *) skb
->data
;
3206 int loc_mitm
, rem_mitm
, confirm_hint
= 0;
3207 struct hci_conn
*conn
;
3209 BT_DBG("%s", hdev
->name
);
3213 if (!test_bit(HCI_MGMT
, &hdev
->dev_flags
))
3216 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &ev
->bdaddr
);
3220 loc_mitm
= (conn
->auth_type
& 0x01);
3221 rem_mitm
= (conn
->remote_auth
& 0x01);
3223 /* If we require MITM but the remote device can't provide that
3224 * (it has NoInputNoOutput) then reject the confirmation
3225 * request. The only exception is when we're dedicated bonding
3226 * initiators (connect_cfm_cb set) since then we always have the MITM
3228 if (!conn
->connect_cfm_cb
&& loc_mitm
&& conn
->remote_cap
== 0x03) {
3229 BT_DBG("Rejecting request: remote device can't provide MITM");
3230 hci_send_cmd(hdev
, HCI_OP_USER_CONFIRM_NEG_REPLY
,
3231 sizeof(ev
->bdaddr
), &ev
->bdaddr
);
3235 /* If no side requires MITM protection; auto-accept */
3236 if ((!loc_mitm
|| conn
->remote_cap
== 0x03) &&
3237 (!rem_mitm
|| conn
->io_capability
== 0x03)) {
3239 /* If we're not the initiators request authorization to
3240 * proceed from user space (mgmt_user_confirm with
3241 * confirm_hint set to 1). */
3242 if (!test_bit(HCI_CONN_AUTH_PEND
, &conn
->flags
)) {
3243 BT_DBG("Confirming auto-accept as acceptor");
3248 BT_DBG("Auto-accept of user confirmation with %ums delay",
3249 hdev
->auto_accept_delay
);
3251 if (hdev
->auto_accept_delay
> 0) {
3252 int delay
= msecs_to_jiffies(hdev
->auto_accept_delay
);
3253 mod_timer(&conn
->auto_accept_timer
, jiffies
+ delay
);
3257 hci_send_cmd(hdev
, HCI_OP_USER_CONFIRM_REPLY
,
3258 sizeof(ev
->bdaddr
), &ev
->bdaddr
);
3263 mgmt_user_confirm_request(hdev
, &ev
->bdaddr
, ACL_LINK
, 0, ev
->passkey
,
3267 hci_dev_unlock(hdev
);
3270 static void hci_user_passkey_request_evt(struct hci_dev
*hdev
,
3271 struct sk_buff
*skb
)
3273 struct hci_ev_user_passkey_req
*ev
= (void *) skb
->data
;
3275 BT_DBG("%s", hdev
->name
);
3277 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
3278 mgmt_user_passkey_request(hdev
, &ev
->bdaddr
, ACL_LINK
, 0);
3281 static void hci_user_passkey_notify_evt(struct hci_dev
*hdev
,
3282 struct sk_buff
*skb
)
3284 struct hci_ev_user_passkey_notify
*ev
= (void *) skb
->data
;
3285 struct hci_conn
*conn
;
3287 BT_DBG("%s", hdev
->name
);
3289 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &ev
->bdaddr
);
3293 conn
->passkey_notify
= __le32_to_cpu(ev
->passkey
);
3294 conn
->passkey_entered
= 0;
3296 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
3297 mgmt_user_passkey_notify(hdev
, &conn
->dst
, conn
->type
,
3298 conn
->dst_type
, conn
->passkey_notify
,
3299 conn
->passkey_entered
);
3302 static void hci_keypress_notify_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
3304 struct hci_ev_keypress_notify
*ev
= (void *) skb
->data
;
3305 struct hci_conn
*conn
;
3307 BT_DBG("%s", hdev
->name
);
3309 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &ev
->bdaddr
);
3314 case HCI_KEYPRESS_STARTED
:
3315 conn
->passkey_entered
= 0;
3318 case HCI_KEYPRESS_ENTERED
:
3319 conn
->passkey_entered
++;
3322 case HCI_KEYPRESS_ERASED
:
3323 conn
->passkey_entered
--;
3326 case HCI_KEYPRESS_CLEARED
:
3327 conn
->passkey_entered
= 0;
3330 case HCI_KEYPRESS_COMPLETED
:
3334 if (test_bit(HCI_MGMT
, &hdev
->dev_flags
))
3335 mgmt_user_passkey_notify(hdev
, &conn
->dst
, conn
->type
,
3336 conn
->dst_type
, conn
->passkey_notify
,
3337 conn
->passkey_entered
);
3340 static void hci_simple_pair_complete_evt(struct hci_dev
*hdev
,
3341 struct sk_buff
*skb
)
3343 struct hci_ev_simple_pair_complete
*ev
= (void *) skb
->data
;
3344 struct hci_conn
*conn
;
3346 BT_DBG("%s", hdev
->name
);
3350 conn
= hci_conn_hash_lookup_ba(hdev
, ACL_LINK
, &ev
->bdaddr
);
3354 /* To avoid duplicate auth_failed events to user space we check
3355 * the HCI_CONN_AUTH_PEND flag which will be set if we
3356 * initiated the authentication. A traditional auth_complete
3357 * event gets always produced as initiator and is also mapped to
3358 * the mgmt_auth_failed event */
3359 if (!test_bit(HCI_CONN_AUTH_PEND
, &conn
->flags
) && ev
->status
)
3360 mgmt_auth_failed(hdev
, &conn
->dst
, conn
->type
, conn
->dst_type
,
3366 hci_dev_unlock(hdev
);
3369 static void hci_remote_host_features_evt(struct hci_dev
*hdev
,
3370 struct sk_buff
*skb
)
3372 struct hci_ev_remote_host_features
*ev
= (void *) skb
->data
;
3373 struct inquiry_entry
*ie
;
3375 BT_DBG("%s", hdev
->name
);
3379 ie
= hci_inquiry_cache_lookup(hdev
, &ev
->bdaddr
);
3381 ie
->data
.ssp_mode
= (ev
->features
[0] & LMP_HOST_SSP
);
3383 hci_dev_unlock(hdev
);
3386 static void hci_remote_oob_data_request_evt(struct hci_dev
*hdev
,
3387 struct sk_buff
*skb
)
3389 struct hci_ev_remote_oob_data_request
*ev
= (void *) skb
->data
;
3390 struct oob_data
*data
;
3392 BT_DBG("%s", hdev
->name
);
3396 if (!test_bit(HCI_MGMT
, &hdev
->dev_flags
))
3399 data
= hci_find_remote_oob_data(hdev
, &ev
->bdaddr
);
3401 struct hci_cp_remote_oob_data_reply cp
;
3403 bacpy(&cp
.bdaddr
, &ev
->bdaddr
);
3404 memcpy(cp
.hash
, data
->hash
, sizeof(cp
.hash
));
3405 memcpy(cp
.randomizer
, data
->randomizer
, sizeof(cp
.randomizer
));
3407 hci_send_cmd(hdev
, HCI_OP_REMOTE_OOB_DATA_REPLY
, sizeof(cp
),
3410 struct hci_cp_remote_oob_data_neg_reply cp
;
3412 bacpy(&cp
.bdaddr
, &ev
->bdaddr
);
3413 hci_send_cmd(hdev
, HCI_OP_REMOTE_OOB_DATA_NEG_REPLY
, sizeof(cp
),
3418 hci_dev_unlock(hdev
);
3421 static void hci_phy_link_complete_evt(struct hci_dev
*hdev
,
3422 struct sk_buff
*skb
)
3424 struct hci_ev_phy_link_complete
*ev
= (void *) skb
->data
;
3425 struct hci_conn
*hcon
, *bredr_hcon
;
3427 BT_DBG("%s handle 0x%2.2x status 0x%2.2x", hdev
->name
, ev
->phy_handle
,
3432 hcon
= hci_conn_hash_lookup_handle(hdev
, ev
->phy_handle
);
3434 hci_dev_unlock(hdev
);
3440 hci_dev_unlock(hdev
);
3444 bredr_hcon
= hcon
->amp_mgr
->l2cap_conn
->hcon
;
3446 hcon
->state
= BT_CONNECTED
;
3447 bacpy(&hcon
->dst
, &bredr_hcon
->dst
);
3449 hci_conn_hold(hcon
);
3450 hcon
->disc_timeout
= HCI_DISCONN_TIMEOUT
;
3453 hci_conn_hold_device(hcon
);
3454 hci_conn_add_sysfs(hcon
);
3456 amp_physical_cfm(bredr_hcon
, hcon
);
3458 hci_dev_unlock(hdev
);
3461 static void hci_loglink_complete_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
3463 struct hci_ev_logical_link_complete
*ev
= (void *) skb
->data
;
3464 struct hci_conn
*hcon
;
3465 struct hci_chan
*hchan
;
3466 struct amp_mgr
*mgr
;
3468 BT_DBG("%s log_handle 0x%4.4x phy_handle 0x%2.2x status 0x%2.2x",
3469 hdev
->name
, le16_to_cpu(ev
->handle
), ev
->phy_handle
,
3472 hcon
= hci_conn_hash_lookup_handle(hdev
, ev
->phy_handle
);
3476 /* Create AMP hchan */
3477 hchan
= hci_chan_create(hcon
);
3481 hchan
->handle
= le16_to_cpu(ev
->handle
);
3483 BT_DBG("hcon %p mgr %p hchan %p", hcon
, hcon
->amp_mgr
, hchan
);
3485 mgr
= hcon
->amp_mgr
;
3486 if (mgr
&& mgr
->bredr_chan
) {
3487 struct l2cap_chan
*bredr_chan
= mgr
->bredr_chan
;
3489 l2cap_chan_lock(bredr_chan
);
3491 bredr_chan
->conn
->mtu
= hdev
->block_mtu
;
3492 l2cap_logical_cfm(bredr_chan
, hchan
, 0);
3493 hci_conn_hold(hcon
);
3495 l2cap_chan_unlock(bredr_chan
);
3499 static void hci_disconn_loglink_complete_evt(struct hci_dev
*hdev
,
3500 struct sk_buff
*skb
)
3502 struct hci_ev_disconn_logical_link_complete
*ev
= (void *) skb
->data
;
3503 struct hci_chan
*hchan
;
3505 BT_DBG("%s log handle 0x%4.4x status 0x%2.2x", hdev
->name
,
3506 le16_to_cpu(ev
->handle
), ev
->status
);
3513 hchan
= hci_chan_lookup_handle(hdev
, le16_to_cpu(ev
->handle
));
3517 amp_destroy_logical_link(hchan
, ev
->reason
);
3520 hci_dev_unlock(hdev
);
3523 static void hci_disconn_phylink_complete_evt(struct hci_dev
*hdev
,
3524 struct sk_buff
*skb
)
3526 struct hci_ev_disconn_phy_link_complete
*ev
= (void *) skb
->data
;
3527 struct hci_conn
*hcon
;
3529 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
3536 hcon
= hci_conn_hash_lookup_handle(hdev
, ev
->phy_handle
);
3538 hcon
->state
= BT_CLOSED
;
3542 hci_dev_unlock(hdev
);
3545 static void hci_le_conn_complete_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
3547 struct hci_ev_le_conn_complete
*ev
= (void *) skb
->data
;
3548 struct hci_conn
*conn
;
3550 BT_DBG("%s status 0x%2.2x", hdev
->name
, ev
->status
);
3554 conn
= hci_conn_hash_lookup_state(hdev
, LE_LINK
, BT_CONNECT
);
3556 conn
= hci_conn_add(hdev
, LE_LINK
, &ev
->bdaddr
);
3558 BT_ERR("No memory for new connection");
3562 conn
->dst_type
= ev
->bdaddr_type
;
3564 if (ev
->role
== LE_CONN_ROLE_MASTER
) {
3566 conn
->link_mode
|= HCI_LM_MASTER
;
3571 mgmt_connect_failed(hdev
, &conn
->dst
, conn
->type
,
3572 conn
->dst_type
, ev
->status
);
3573 hci_proto_connect_cfm(conn
, ev
->status
);
3574 conn
->state
= BT_CLOSED
;
3579 if (!test_and_set_bit(HCI_CONN_MGMT_CONNECTED
, &conn
->flags
))
3580 mgmt_device_connected(hdev
, &ev
->bdaddr
, conn
->type
,
3581 conn
->dst_type
, 0, NULL
, 0, NULL
);
3583 conn
->sec_level
= BT_SECURITY_LOW
;
3584 conn
->handle
= __le16_to_cpu(ev
->handle
);
3585 conn
->state
= BT_CONNECTED
;
3587 hci_conn_hold_device(conn
);
3588 hci_conn_add_sysfs(conn
);
3590 hci_proto_connect_cfm(conn
, ev
->status
);
3593 hci_dev_unlock(hdev
);
3596 static void hci_le_adv_report_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
3598 u8 num_reports
= skb
->data
[0];
3599 void *ptr
= &skb
->data
[1];
3602 while (num_reports
--) {
3603 struct hci_ev_le_advertising_info
*ev
= ptr
;
3605 rssi
= ev
->data
[ev
->length
];
3606 mgmt_device_found(hdev
, &ev
->bdaddr
, LE_LINK
, ev
->bdaddr_type
,
3607 NULL
, rssi
, 0, 1, ev
->data
, ev
->length
);
3609 ptr
+= sizeof(*ev
) + ev
->length
+ 1;
3613 static void hci_le_ltk_request_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
3615 struct hci_ev_le_ltk_req
*ev
= (void *) skb
->data
;
3616 struct hci_cp_le_ltk_reply cp
;
3617 struct hci_cp_le_ltk_neg_reply neg
;
3618 struct hci_conn
*conn
;
3619 struct smp_ltk
*ltk
;
3621 BT_DBG("%s handle 0x%4.4x", hdev
->name
, __le16_to_cpu(ev
->handle
));
3625 conn
= hci_conn_hash_lookup_handle(hdev
, __le16_to_cpu(ev
->handle
));
3629 ltk
= hci_find_ltk(hdev
, ev
->ediv
, ev
->random
);
3633 memcpy(cp
.ltk
, ltk
->val
, sizeof(ltk
->val
));
3634 cp
.handle
= cpu_to_le16(conn
->handle
);
3636 if (ltk
->authenticated
)
3637 conn
->sec_level
= BT_SECURITY_HIGH
;
3639 hci_send_cmd(hdev
, HCI_OP_LE_LTK_REPLY
, sizeof(cp
), &cp
);
3641 if (ltk
->type
& HCI_SMP_STK
) {
3642 list_del(<k
->list
);
3646 hci_dev_unlock(hdev
);
3651 neg
.handle
= ev
->handle
;
3652 hci_send_cmd(hdev
, HCI_OP_LE_LTK_NEG_REPLY
, sizeof(neg
), &neg
);
3653 hci_dev_unlock(hdev
);
3656 static void hci_le_meta_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
3658 struct hci_ev_le_meta
*le_ev
= (void *) skb
->data
;
3660 skb_pull(skb
, sizeof(*le_ev
));
3662 switch (le_ev
->subevent
) {
3663 case HCI_EV_LE_CONN_COMPLETE
:
3664 hci_le_conn_complete_evt(hdev
, skb
);
3667 case HCI_EV_LE_ADVERTISING_REPORT
:
3668 hci_le_adv_report_evt(hdev
, skb
);
3671 case HCI_EV_LE_LTK_REQ
:
3672 hci_le_ltk_request_evt(hdev
, skb
);
3680 static void hci_chan_selected_evt(struct hci_dev
*hdev
, struct sk_buff
*skb
)
3682 struct hci_ev_channel_selected
*ev
= (void *) skb
->data
;
3683 struct hci_conn
*hcon
;
3685 BT_DBG("%s handle 0x%2.2x", hdev
->name
, ev
->phy_handle
);
3687 skb_pull(skb
, sizeof(*ev
));
3689 hcon
= hci_conn_hash_lookup_handle(hdev
, ev
->phy_handle
);
3693 amp_read_loc_assoc_final_data(hdev
, hcon
);
3696 void hci_event_packet(struct hci_dev
*hdev
, struct sk_buff
*skb
)
3698 struct hci_event_hdr
*hdr
= (void *) skb
->data
;
3699 __u8 event
= hdr
->evt
;
3701 skb_pull(skb
, HCI_EVENT_HDR_SIZE
);
3704 case HCI_EV_INQUIRY_COMPLETE
:
3705 hci_inquiry_complete_evt(hdev
, skb
);
3708 case HCI_EV_INQUIRY_RESULT
:
3709 hci_inquiry_result_evt(hdev
, skb
);
3712 case HCI_EV_CONN_COMPLETE
:
3713 hci_conn_complete_evt(hdev
, skb
);
3716 case HCI_EV_CONN_REQUEST
:
3717 hci_conn_request_evt(hdev
, skb
);
3720 case HCI_EV_DISCONN_COMPLETE
:
3721 hci_disconn_complete_evt(hdev
, skb
);
3724 case HCI_EV_AUTH_COMPLETE
:
3725 hci_auth_complete_evt(hdev
, skb
);
3728 case HCI_EV_REMOTE_NAME
:
3729 hci_remote_name_evt(hdev
, skb
);
3732 case HCI_EV_ENCRYPT_CHANGE
:
3733 hci_encrypt_change_evt(hdev
, skb
);
3736 case HCI_EV_CHANGE_LINK_KEY_COMPLETE
:
3737 hci_change_link_key_complete_evt(hdev
, skb
);
3740 case HCI_EV_REMOTE_FEATURES
:
3741 hci_remote_features_evt(hdev
, skb
);
3744 case HCI_EV_CMD_COMPLETE
:
3745 hci_cmd_complete_evt(hdev
, skb
);
3748 case HCI_EV_CMD_STATUS
:
3749 hci_cmd_status_evt(hdev
, skb
);
3752 case HCI_EV_ROLE_CHANGE
:
3753 hci_role_change_evt(hdev
, skb
);
3756 case HCI_EV_NUM_COMP_PKTS
:
3757 hci_num_comp_pkts_evt(hdev
, skb
);
3760 case HCI_EV_MODE_CHANGE
:
3761 hci_mode_change_evt(hdev
, skb
);
3764 case HCI_EV_PIN_CODE_REQ
:
3765 hci_pin_code_request_evt(hdev
, skb
);
3768 case HCI_EV_LINK_KEY_REQ
:
3769 hci_link_key_request_evt(hdev
, skb
);
3772 case HCI_EV_LINK_KEY_NOTIFY
:
3773 hci_link_key_notify_evt(hdev
, skb
);
3776 case HCI_EV_CLOCK_OFFSET
:
3777 hci_clock_offset_evt(hdev
, skb
);
3780 case HCI_EV_PKT_TYPE_CHANGE
:
3781 hci_pkt_type_change_evt(hdev
, skb
);
3784 case HCI_EV_PSCAN_REP_MODE
:
3785 hci_pscan_rep_mode_evt(hdev
, skb
);
3788 case HCI_EV_INQUIRY_RESULT_WITH_RSSI
:
3789 hci_inquiry_result_with_rssi_evt(hdev
, skb
);
3792 case HCI_EV_REMOTE_EXT_FEATURES
:
3793 hci_remote_ext_features_evt(hdev
, skb
);
3796 case HCI_EV_SYNC_CONN_COMPLETE
:
3797 hci_sync_conn_complete_evt(hdev
, skb
);
3800 case HCI_EV_EXTENDED_INQUIRY_RESULT
:
3801 hci_extended_inquiry_result_evt(hdev
, skb
);
3804 case HCI_EV_KEY_REFRESH_COMPLETE
:
3805 hci_key_refresh_complete_evt(hdev
, skb
);
3808 case HCI_EV_IO_CAPA_REQUEST
:
3809 hci_io_capa_request_evt(hdev
, skb
);
3812 case HCI_EV_IO_CAPA_REPLY
:
3813 hci_io_capa_reply_evt(hdev
, skb
);
3816 case HCI_EV_USER_CONFIRM_REQUEST
:
3817 hci_user_confirm_request_evt(hdev
, skb
);
3820 case HCI_EV_USER_PASSKEY_REQUEST
:
3821 hci_user_passkey_request_evt(hdev
, skb
);
3824 case HCI_EV_USER_PASSKEY_NOTIFY
:
3825 hci_user_passkey_notify_evt(hdev
, skb
);
3828 case HCI_EV_KEYPRESS_NOTIFY
:
3829 hci_keypress_notify_evt(hdev
, skb
);
3832 case HCI_EV_SIMPLE_PAIR_COMPLETE
:
3833 hci_simple_pair_complete_evt(hdev
, skb
);
3836 case HCI_EV_REMOTE_HOST_FEATURES
:
3837 hci_remote_host_features_evt(hdev
, skb
);
3840 case HCI_EV_LE_META
:
3841 hci_le_meta_evt(hdev
, skb
);
3844 case HCI_EV_CHANNEL_SELECTED
:
3845 hci_chan_selected_evt(hdev
, skb
);
3848 case HCI_EV_REMOTE_OOB_DATA_REQUEST
:
3849 hci_remote_oob_data_request_evt(hdev
, skb
);
3852 case HCI_EV_PHY_LINK_COMPLETE
:
3853 hci_phy_link_complete_evt(hdev
, skb
);
3856 case HCI_EV_LOGICAL_LINK_COMPLETE
:
3857 hci_loglink_complete_evt(hdev
, skb
);
3860 case HCI_EV_DISCONN_LOGICAL_LINK_COMPLETE
:
3861 hci_disconn_loglink_complete_evt(hdev
, skb
);
3864 case HCI_EV_DISCONN_PHY_LINK_COMPLETE
:
3865 hci_disconn_phylink_complete_evt(hdev
, skb
);
3868 case HCI_EV_NUM_COMP_BLOCKS
:
3869 hci_num_comp_blocks_evt(hdev
, skb
);
3873 BT_DBG("%s event 0x%2.2x", hdev
->name
, event
);
3878 hdev
->stat
.evt_rx
++;