1 /*
2    BlueZ - Bluetooth protocol stack for Linux
3    Copyright (C) 2000-2001 Qualcomm Incorporated
4    Copyright (C) 2009-2010 Gustavo F. Padovan <gustavo@padovan.org>
5    Copyright (C) 2010 Google Inc.
6 
7    Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
8 
9    This program is free software; you can redistribute it and/or modify
10    it under the terms of the GNU General Public License version 2 as
11    published by the Free Software Foundation;
12 
13    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
14    OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
15    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
16    IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
17    CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
18    WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
19    ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
20    OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
21 
22    ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
23    COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
24    SOFTWARE IS DISCLAIMED.
25 */
26 
27 #ifndef __L2CAP_H
28 #define __L2CAP_H
29 
30 #include <asm/unaligned.h>
31 #include <linux/atomic.h>
32 
33 /* L2CAP defaults */
34 #define L2CAP_DEFAULT_MTU		672
35 #define L2CAP_DEFAULT_MIN_MTU		48
36 #define L2CAP_DEFAULT_FLUSH_TO		0xFFFF
37 #define L2CAP_EFS_DEFAULT_FLUSH_TO	0xFFFFFFFF
38 #define L2CAP_DEFAULT_TX_WINDOW		63
39 #define L2CAP_DEFAULT_EXT_WINDOW	0x3FFF
40 #define L2CAP_DEFAULT_MAX_TX		3
41 #define L2CAP_DEFAULT_RETRANS_TO	2000    /* 2 seconds */
42 #define L2CAP_DEFAULT_MONITOR_TO	12000   /* 12 seconds */
43 #define L2CAP_DEFAULT_MAX_PDU_SIZE	1492    /* Sized for AMP packet */
44 #define L2CAP_DEFAULT_ACK_TO		200
45 #define L2CAP_DEFAULT_MAX_SDU_SIZE	0xFFFF
46 #define L2CAP_DEFAULT_SDU_ITIME		0xFFFFFFFF
47 #define L2CAP_DEFAULT_ACC_LAT		0xFFFFFFFF
48 #define L2CAP_BREDR_MAX_PAYLOAD		1019    /* 3-DH5 packet */
49 #define L2CAP_LE_MIN_MTU		23
50 
51 #define L2CAP_DISC_TIMEOUT		msecs_to_jiffies(100)
52 #define L2CAP_DISC_REJ_TIMEOUT		msecs_to_jiffies(5000)
53 #define L2CAP_ENC_TIMEOUT		msecs_to_jiffies(5000)
54 #define L2CAP_CONN_TIMEOUT		msecs_to_jiffies(40000)
55 #define L2CAP_INFO_TIMEOUT		msecs_to_jiffies(4000)
56 #define L2CAP_MOVE_TIMEOUT		msecs_to_jiffies(4000)
57 #define L2CAP_MOVE_ERTX_TIMEOUT		msecs_to_jiffies(60000)
58 #define L2CAP_WAIT_ACK_POLL_PERIOD	msecs_to_jiffies(200)
59 #define L2CAP_WAIT_ACK_TIMEOUT		msecs_to_jiffies(10000)
60 
61 #define L2CAP_A2MP_DEFAULT_MTU		670
62 
63 /* L2CAP socket address */
64 struct sockaddr_l2 {
65 	sa_family_t	l2_family;
66 	__le16		l2_psm;
67 	bdaddr_t	l2_bdaddr;
68 	__le16		l2_cid;
69 	__u8		l2_bdaddr_type;
70 };
71 
72 /* L2CAP socket options */
73 #define L2CAP_OPTIONS	0x01
74 struct l2cap_options {
75 	__u16 omtu;
76 	__u16 imtu;
77 	__u16 flush_to;
78 	__u8  mode;
79 	__u8  fcs;
80 	__u8  max_tx;
81 	__u16 txwin_size;
82 };
83 
84 #define L2CAP_CONNINFO	0x02
85 struct l2cap_conninfo {
86 	__u16 hci_handle;
87 	__u8  dev_class[3];
88 };
89 
90 #define L2CAP_LM	0x03
91 #define L2CAP_LM_MASTER		0x0001
92 #define L2CAP_LM_AUTH		0x0002
93 #define L2CAP_LM_ENCRYPT	0x0004
94 #define L2CAP_LM_TRUSTED	0x0008
95 #define L2CAP_LM_RELIABLE	0x0010
96 #define L2CAP_LM_SECURE		0x0020
97 #define L2CAP_LM_FIPS		0x0040
98 
99 /* L2CAP command codes */
100 #define L2CAP_COMMAND_REJ	0x01
101 #define L2CAP_CONN_REQ		0x02
102 #define L2CAP_CONN_RSP		0x03
103 #define L2CAP_CONF_REQ		0x04
104 #define L2CAP_CONF_RSP		0x05
105 #define L2CAP_DISCONN_REQ	0x06
106 #define L2CAP_DISCONN_RSP	0x07
107 #define L2CAP_ECHO_REQ		0x08
108 #define L2CAP_ECHO_RSP		0x09
109 #define L2CAP_INFO_REQ		0x0a
110 #define L2CAP_INFO_RSP		0x0b
111 #define L2CAP_CREATE_CHAN_REQ	0x0c
112 #define L2CAP_CREATE_CHAN_RSP	0x0d
113 #define L2CAP_MOVE_CHAN_REQ	0x0e
114 #define L2CAP_MOVE_CHAN_RSP	0x0f
115 #define L2CAP_MOVE_CHAN_CFM	0x10
116 #define L2CAP_MOVE_CHAN_CFM_RSP	0x11
117 #define L2CAP_CONN_PARAM_UPDATE_REQ	0x12
118 #define L2CAP_CONN_PARAM_UPDATE_RSP	0x13
119 #define L2CAP_LE_CONN_REQ	0x14
120 #define L2CAP_LE_CONN_RSP	0x15
121 #define L2CAP_LE_CREDITS	0x16
122 
123 /* L2CAP extended feature mask */
124 #define L2CAP_FEAT_FLOWCTL	0x00000001
125 #define L2CAP_FEAT_RETRANS	0x00000002
126 #define L2CAP_FEAT_BIDIR_QOS	0x00000004
127 #define L2CAP_FEAT_ERTM		0x00000008
128 #define L2CAP_FEAT_STREAMING	0x00000010
129 #define L2CAP_FEAT_FCS		0x00000020
130 #define L2CAP_FEAT_EXT_FLOW	0x00000040
131 #define L2CAP_FEAT_FIXED_CHAN	0x00000080
132 #define L2CAP_FEAT_EXT_WINDOW	0x00000100
133 #define L2CAP_FEAT_UCD		0x00000200
134 
135 /* L2CAP checksum option */
136 #define L2CAP_FCS_NONE		0x00
137 #define L2CAP_FCS_CRC16		0x01
138 
139 /* L2CAP fixed channels */
140 #define L2CAP_FC_SIG_BREDR	0x02
141 #define L2CAP_FC_CONNLESS	0x04
142 #define L2CAP_FC_A2MP		0x08
143 #define L2CAP_FC_ATT		0x10
144 #define L2CAP_FC_SIG_LE		0x20
145 #define L2CAP_FC_SMP_LE		0x40
146 #define L2CAP_FC_SMP_BREDR	0x80
147 
148 /* L2CAP Control Field bit masks */
149 #define L2CAP_CTRL_SAR			0xC000
150 #define L2CAP_CTRL_REQSEQ		0x3F00
151 #define L2CAP_CTRL_TXSEQ		0x007E
152 #define L2CAP_CTRL_SUPERVISE		0x000C
153 
154 #define L2CAP_CTRL_RETRANS		0x0080
155 #define L2CAP_CTRL_FINAL		0x0080
156 #define L2CAP_CTRL_POLL			0x0010
157 #define L2CAP_CTRL_FRAME_TYPE		0x0001 /* I- or S-Frame */
158 
159 #define L2CAP_CTRL_TXSEQ_SHIFT		1
160 #define L2CAP_CTRL_SUPER_SHIFT		2
161 #define L2CAP_CTRL_POLL_SHIFT		4
162 #define L2CAP_CTRL_FINAL_SHIFT		7
163 #define L2CAP_CTRL_REQSEQ_SHIFT		8
164 #define L2CAP_CTRL_SAR_SHIFT		14
165 
166 /* L2CAP Extended Control Field bit mask */
167 #define L2CAP_EXT_CTRL_TXSEQ		0xFFFC0000
168 #define L2CAP_EXT_CTRL_SAR		0x00030000
169 #define L2CAP_EXT_CTRL_SUPERVISE	0x00030000
170 #define L2CAP_EXT_CTRL_REQSEQ		0x0000FFFC
171 
172 #define L2CAP_EXT_CTRL_POLL		0x00040000
173 #define L2CAP_EXT_CTRL_FINAL		0x00000002
174 #define L2CAP_EXT_CTRL_FRAME_TYPE	0x00000001 /* I- or S-Frame */
175 
176 #define L2CAP_EXT_CTRL_FINAL_SHIFT	1
177 #define L2CAP_EXT_CTRL_REQSEQ_SHIFT	2
178 #define L2CAP_EXT_CTRL_SAR_SHIFT	16
179 #define L2CAP_EXT_CTRL_SUPER_SHIFT	16
180 #define L2CAP_EXT_CTRL_POLL_SHIFT	18
181 #define L2CAP_EXT_CTRL_TXSEQ_SHIFT	18
182 
183 /* L2CAP Supervisory Function */
184 #define L2CAP_SUPER_RR		0x00
185 #define L2CAP_SUPER_REJ		0x01
186 #define L2CAP_SUPER_RNR		0x02
187 #define L2CAP_SUPER_SREJ	0x03
188 
189 /* L2CAP Segmentation and Reassembly */
190 #define L2CAP_SAR_UNSEGMENTED	0x00
191 #define L2CAP_SAR_START		0x01
192 #define L2CAP_SAR_END		0x02
193 #define L2CAP_SAR_CONTINUE	0x03
194 
195 /* L2CAP Command rej. reasons */
196 #define L2CAP_REJ_NOT_UNDERSTOOD	0x0000
197 #define L2CAP_REJ_MTU_EXCEEDED		0x0001
198 #define L2CAP_REJ_INVALID_CID		0x0002
199 
200 /* L2CAP structures */
201 struct l2cap_hdr {
202 	__le16     len;
203 	__le16     cid;
204 } __packed;
205 #define L2CAP_HDR_SIZE		4
206 #define L2CAP_ENH_HDR_SIZE	6
207 #define L2CAP_EXT_HDR_SIZE	8
208 
209 #define L2CAP_FCS_SIZE		2
210 #define L2CAP_SDULEN_SIZE	2
211 #define L2CAP_PSMLEN_SIZE	2
212 #define L2CAP_ENH_CTRL_SIZE	2
213 #define L2CAP_EXT_CTRL_SIZE	4
214 
215 struct l2cap_cmd_hdr {
216 	__u8       code;
217 	__u8       ident;
218 	__le16     len;
219 } __packed;
220 #define L2CAP_CMD_HDR_SIZE	4
221 
222 struct l2cap_cmd_rej_unk {
223 	__le16     reason;
224 } __packed;
225 
226 struct l2cap_cmd_rej_mtu {
227 	__le16     reason;
228 	__le16     max_mtu;
229 } __packed;
230 
231 struct l2cap_cmd_rej_cid {
232 	__le16     reason;
233 	__le16     scid;
234 	__le16     dcid;
235 } __packed;
236 
237 struct l2cap_conn_req {
238 	__le16     psm;
239 	__le16     scid;
240 } __packed;
241 
242 struct l2cap_conn_rsp {
243 	__le16     dcid;
244 	__le16     scid;
245 	__le16     result;
246 	__le16     status;
247 } __packed;
248 
249 /* protocol/service multiplexer (PSM) */
250 #define L2CAP_PSM_SDP		0x0001
251 #define L2CAP_PSM_RFCOMM	0x0003
252 #define L2CAP_PSM_3DSP		0x0021
253 #define L2CAP_PSM_IPSP		0x0023 /* 6LoWPAN */
254 
255 #define L2CAP_PSM_DYN_START	0x1001
256 #define L2CAP_PSM_DYN_END	0xffff
257 #define L2CAP_PSM_AUTO_END	0x10ff
258 #define L2CAP_PSM_LE_DYN_START  0x0080
259 #define L2CAP_PSM_LE_DYN_END	0x00ff
260 
261 /* channel identifier */
262 #define L2CAP_CID_SIGNALING	0x0001
263 #define L2CAP_CID_CONN_LESS	0x0002
264 #define L2CAP_CID_A2MP		0x0003
265 #define L2CAP_CID_ATT		0x0004
266 #define L2CAP_CID_LE_SIGNALING	0x0005
267 #define L2CAP_CID_SMP		0x0006
268 #define L2CAP_CID_SMP_BREDR	0x0007
269 #define L2CAP_CID_DYN_START	0x0040
270 #define L2CAP_CID_DYN_END	0xffff
271 #define L2CAP_CID_LE_DYN_END	0x007f
272 
273 /* connect/create channel results */
274 #define L2CAP_CR_SUCCESS	0x0000
275 #define L2CAP_CR_PEND		0x0001
276 #define L2CAP_CR_BAD_PSM	0x0002
277 #define L2CAP_CR_SEC_BLOCK	0x0003
278 #define L2CAP_CR_NO_MEM		0x0004
279 #define L2CAP_CR_BAD_AMP	0x0005
280 #define L2CAP_CR_AUTHENTICATION	0x0005
281 #define L2CAP_CR_AUTHORIZATION	0x0006
282 #define L2CAP_CR_BAD_KEY_SIZE	0x0007
283 #define L2CAP_CR_ENCRYPTION	0x0008
284 #define L2CAP_CR_INVALID_SCID	0x0009
285 #define L2CAP_CR_SCID_IN_USE	0x000A
286 
287 /* connect/create channel status */
288 #define L2CAP_CS_NO_INFO	0x0000
289 #define L2CAP_CS_AUTHEN_PEND	0x0001
290 #define L2CAP_CS_AUTHOR_PEND	0x0002
291 
292 struct l2cap_conf_req {
293 	__le16     dcid;
294 	__le16     flags;
295 	__u8       data[0];
296 } __packed;
297 
298 struct l2cap_conf_rsp {
299 	__le16     scid;
300 	__le16     flags;
301 	__le16     result;
302 	__u8       data[0];
303 } __packed;
304 
305 #define L2CAP_CONF_SUCCESS	0x0000
306 #define L2CAP_CONF_UNACCEPT	0x0001
307 #define L2CAP_CONF_REJECT	0x0002
308 #define L2CAP_CONF_UNKNOWN	0x0003
309 #define L2CAP_CONF_PENDING	0x0004
310 #define L2CAP_CONF_EFS_REJECT	0x0005
311 
312 /* configuration req/rsp continuation flag */
313 #define L2CAP_CONF_FLAG_CONTINUATION	0x0001
314 
315 struct l2cap_conf_opt {
316 	__u8       type;
317 	__u8       len;
318 	__u8       val[0];
319 } __packed;
320 #define L2CAP_CONF_OPT_SIZE	2
321 
322 #define L2CAP_CONF_HINT		0x80
323 #define L2CAP_CONF_MASK		0x7f
324 
325 #define L2CAP_CONF_MTU		0x01
326 #define L2CAP_CONF_FLUSH_TO	0x02
327 #define L2CAP_CONF_QOS		0x03
328 #define L2CAP_CONF_RFC		0x04
329 #define L2CAP_CONF_FCS		0x05
330 #define L2CAP_CONF_EFS		0x06
331 #define L2CAP_CONF_EWS		0x07
332 
333 #define L2CAP_CONF_MAX_SIZE	22
334 
335 struct l2cap_conf_rfc {
336 	__u8       mode;
337 	__u8       txwin_size;
338 	__u8       max_transmit;
339 	__le16     retrans_timeout;
340 	__le16     monitor_timeout;
341 	__le16     max_pdu_size;
342 } __packed;
343 
344 #define L2CAP_MODE_BASIC	0x00
345 #define L2CAP_MODE_RETRANS	0x01
346 #define L2CAP_MODE_FLOWCTL	0x02
347 #define L2CAP_MODE_ERTM		0x03
348 #define L2CAP_MODE_STREAMING	0x04
349 
350 /* Unlike the above this one doesn't actually map to anything that would
351  * ever be sent over the air. Therefore, use a value that's unlikely to
352  * ever be used in the BR/EDR configuration phase.
353  */
354 #define L2CAP_MODE_LE_FLOWCTL	0x80
355 
356 struct l2cap_conf_efs {
357 	__u8	id;
358 	__u8	stype;
359 	__le16	msdu;
360 	__le32	sdu_itime;
361 	__le32	acc_lat;
362 	__le32	flush_to;
363 } __packed;
364 
365 #define L2CAP_SERV_NOTRAFIC	0x00
366 #define L2CAP_SERV_BESTEFFORT	0x01
367 #define L2CAP_SERV_GUARANTEED	0x02
368 
369 #define L2CAP_BESTEFFORT_ID	0x01
370 
371 struct l2cap_disconn_req {
372 	__le16     dcid;
373 	__le16     scid;
374 } __packed;
375 
376 struct l2cap_disconn_rsp {
377 	__le16     dcid;
378 	__le16     scid;
379 } __packed;
380 
381 struct l2cap_info_req {
382 	__le16      type;
383 } __packed;
384 
385 struct l2cap_info_rsp {
386 	__le16      type;
387 	__le16      result;
388 	__u8        data[0];
389 } __packed;
390 
391 struct l2cap_create_chan_req {
392 	__le16      psm;
393 	__le16      scid;
394 	__u8        amp_id;
395 } __packed;
396 
397 struct l2cap_create_chan_rsp {
398 	__le16      dcid;
399 	__le16      scid;
400 	__le16      result;
401 	__le16      status;
402 } __packed;
403 
404 struct l2cap_move_chan_req {
405 	__le16      icid;
406 	__u8        dest_amp_id;
407 } __packed;
408 
409 struct l2cap_move_chan_rsp {
410 	__le16      icid;
411 	__le16      result;
412 } __packed;
413 
414 #define L2CAP_MR_SUCCESS	0x0000
415 #define L2CAP_MR_PEND		0x0001
416 #define L2CAP_MR_BAD_ID		0x0002
417 #define L2CAP_MR_SAME_ID	0x0003
418 #define L2CAP_MR_NOT_SUPP	0x0004
419 #define L2CAP_MR_COLLISION	0x0005
420 #define L2CAP_MR_NOT_ALLOWED	0x0006
421 
422 struct l2cap_move_chan_cfm {
423 	__le16      icid;
424 	__le16      result;
425 } __packed;
426 
427 #define L2CAP_MC_CONFIRMED	0x0000
428 #define L2CAP_MC_UNCONFIRMED	0x0001
429 
430 struct l2cap_move_chan_cfm_rsp {
431 	__le16      icid;
432 } __packed;
433 
434 /* info type */
435 #define L2CAP_IT_CL_MTU		0x0001
436 #define L2CAP_IT_FEAT_MASK	0x0002
437 #define L2CAP_IT_FIXED_CHAN	0x0003
438 
439 /* info result */
440 #define L2CAP_IR_SUCCESS	0x0000
441 #define L2CAP_IR_NOTSUPP	0x0001
442 
443 struct l2cap_conn_param_update_req {
444 	__le16      min;
445 	__le16      max;
446 	__le16      latency;
447 	__le16      to_multiplier;
448 } __packed;
449 
450 struct l2cap_conn_param_update_rsp {
451 	__le16      result;
452 } __packed;
453 
454 /* Connection Parameters result */
455 #define L2CAP_CONN_PARAM_ACCEPTED	0x0000
456 #define L2CAP_CONN_PARAM_REJECTED	0x0001
457 
458 #define L2CAP_LE_MAX_CREDITS		10
459 #define L2CAP_LE_DEFAULT_MPS		230
460 
461 struct l2cap_le_conn_req {
462 	__le16     psm;
463 	__le16     scid;
464 	__le16     mtu;
465 	__le16     mps;
466 	__le16     credits;
467 } __packed;
468 
469 struct l2cap_le_conn_rsp {
470 	__le16     dcid;
471 	__le16     mtu;
472 	__le16     mps;
473 	__le16     credits;
474 	__le16     result;
475 } __packed;
476 
477 struct l2cap_le_credits {
478 	__le16     cid;
479 	__le16     credits;
480 } __packed;
481 
482 /* ----- L2CAP channels and connections ----- */
483 struct l2cap_seq_list {
484 	__u16	head;
485 	__u16	tail;
486 	__u16	mask;
487 	__u16	*list;
488 };
489 
490 #define L2CAP_SEQ_LIST_CLEAR	0xFFFF
491 #define L2CAP_SEQ_LIST_TAIL	0x8000
492 
493 struct l2cap_chan {
494 	struct l2cap_conn	*conn;
495 	struct hci_conn		*hs_hcon;
496 	struct hci_chan		*hs_hchan;
497 	struct kref	kref;
498 	atomic_t	nesting;
499 
500 	__u8		state;
501 
502 	bdaddr_t	dst;
503 	__u8		dst_type;
504 	bdaddr_t	src;
505 	__u8		src_type;
506 	__le16		psm;
507 	__le16		sport;
508 	__u16		dcid;
509 	__u16		scid;
510 
511 	__u16		imtu;
512 	__u16		omtu;
513 	__u16		flush_to;
514 	__u8		mode;
515 	__u8		chan_type;
516 	__u8		chan_policy;
517 
518 	__u8		sec_level;
519 
520 	__u8		ident;
521 
522 	__u8		conf_req[64];
523 	__u8		conf_len;
524 	__u8		num_conf_req;
525 	__u8		num_conf_rsp;
526 
527 	__u8		fcs;
528 
529 	__u16		tx_win;
530 	__u16		tx_win_max;
531 	__u16		ack_win;
532 	__u8		max_tx;
533 	__u16		retrans_timeout;
534 	__u16		monitor_timeout;
535 	__u16		mps;
536 
537 	__u16		tx_credits;
538 	__u16		rx_credits;
539 
540 	__u8		tx_state;
541 	__u8		rx_state;
542 
543 	unsigned long	conf_state;
544 	unsigned long	conn_state;
545 	unsigned long	flags;
546 
547 	__u8		remote_amp_id;
548 	__u8		local_amp_id;
549 	__u8		move_id;
550 	__u8		move_state;
551 	__u8		move_role;
552 
553 	__u16		next_tx_seq;
554 	__u16		expected_ack_seq;
555 	__u16		expected_tx_seq;
556 	__u16		buffer_seq;
557 	__u16		srej_save_reqseq;
558 	__u16		last_acked_seq;
559 	__u16		frames_sent;
560 	__u16		unacked_frames;
561 	__u8		retry_count;
562 	__u16		sdu_len;
563 	struct sk_buff	*sdu;
564 	struct sk_buff	*sdu_last_frag;
565 
566 	__u16		remote_tx_win;
567 	__u8		remote_max_tx;
568 	__u16		remote_mps;
569 
570 	__u8		local_id;
571 	__u8		local_stype;
572 	__u16		local_msdu;
573 	__u32		local_sdu_itime;
574 	__u32		local_acc_lat;
575 	__u32		local_flush_to;
576 
577 	__u8		remote_id;
578 	__u8		remote_stype;
579 	__u16		remote_msdu;
580 	__u32		remote_sdu_itime;
581 	__u32		remote_acc_lat;
582 	__u32		remote_flush_to;
583 
584 	struct delayed_work	chan_timer;
585 	struct delayed_work	retrans_timer;
586 	struct delayed_work	monitor_timer;
587 	struct delayed_work	ack_timer;
588 
589 	struct sk_buff		*tx_send_head;
590 	struct sk_buff_head	tx_q;
591 	struct sk_buff_head	srej_q;
592 	struct l2cap_seq_list	srej_list;
593 	struct l2cap_seq_list	retrans_list;
594 
595 	struct list_head	list;
596 	struct list_head	global_l;
597 
598 	void			*data;
599 	const struct l2cap_ops	*ops;
600 	struct mutex		lock;
601 };
602 
603 struct l2cap_ops {
604 	char			*name;
605 
606 	struct l2cap_chan	*(*new_connection) (struct l2cap_chan *chan);
607 	int			(*recv) (struct l2cap_chan * chan,
608 					 struct sk_buff *skb);
609 	void			(*teardown) (struct l2cap_chan *chan, int err);
610 	void			(*close) (struct l2cap_chan *chan);
611 	void			(*state_change) (struct l2cap_chan *chan,
612 						 int state, int err);
613 	void			(*ready) (struct l2cap_chan *chan);
614 	void			(*defer) (struct l2cap_chan *chan);
615 	void			(*resume) (struct l2cap_chan *chan);
616 	void			(*suspend) (struct l2cap_chan *chan);
617 	void			(*set_shutdown) (struct l2cap_chan *chan);
618 	long			(*get_sndtimeo) (struct l2cap_chan *chan);
619 	struct sk_buff		*(*alloc_skb) (struct l2cap_chan *chan,
620 					       unsigned long hdr_len,
621 					       unsigned long len, int nb);
622 	int			(*filter) (struct l2cap_chan * chan,
623 					   struct sk_buff *skb);
624 };
625 
626 struct l2cap_conn {
627 	struct hci_conn		*hcon;
628 	struct hci_chan		*hchan;
629 
630 	unsigned int		mtu;
631 
632 	__u32			feat_mask;
633 	__u8			remote_fixed_chan;
634 	__u8			local_fixed_chan;
635 
636 	__u8			info_state;
637 	__u8			info_ident;
638 
639 	struct delayed_work	info_timer;
640 
641 	struct sk_buff		*rx_skb;
642 	__u32			rx_len;
643 	__u8			tx_ident;
644 	struct mutex		ident_lock;
645 
646 	struct sk_buff_head	pending_rx;
647 	struct work_struct	pending_rx_work;
648 
649 	struct work_struct	id_addr_update_work;
650 
651 	__u8			disc_reason;
652 
653 	struct l2cap_chan	*smp;
654 
655 	struct list_head	chan_l;
656 	struct mutex		chan_lock;
657 	struct kref		ref;
658 	struct list_head	users;
659 };
660 
661 struct l2cap_user {
662 	struct list_head list;
663 	int (*probe) (struct l2cap_conn *conn, struct l2cap_user *user);
664 	void (*remove) (struct l2cap_conn *conn, struct l2cap_user *user);
665 };
666 
667 #define L2CAP_INFO_CL_MTU_REQ_SENT	0x01
668 #define L2CAP_INFO_FEAT_MASK_REQ_SENT	0x04
669 #define L2CAP_INFO_FEAT_MASK_REQ_DONE	0x08
670 
671 #define L2CAP_CHAN_RAW			1
672 #define L2CAP_CHAN_CONN_LESS		2
673 #define L2CAP_CHAN_CONN_ORIENTED	3
674 #define L2CAP_CHAN_FIXED		4
675 
676 /* ----- L2CAP socket info ----- */
677 #define l2cap_pi(sk) ((struct l2cap_pinfo *) sk)
678 
679 struct l2cap_pinfo {
680 	struct bt_sock		bt;
681 	struct l2cap_chan	*chan;
682 	struct sk_buff		*rx_busy_skb;
683 };
684 
685 enum {
686 	CONF_REQ_SENT,
687 	CONF_INPUT_DONE,
688 	CONF_OUTPUT_DONE,
689 	CONF_MTU_DONE,
690 	CONF_MODE_DONE,
691 	CONF_CONNECT_PEND,
692 	CONF_RECV_NO_FCS,
693 	CONF_STATE2_DEVICE,
694 	CONF_EWS_RECV,
695 	CONF_LOC_CONF_PEND,
696 	CONF_REM_CONF_PEND,
697 	CONF_NOT_COMPLETE,
698 };
699 
700 #define L2CAP_CONF_MAX_CONF_REQ 2
701 #define L2CAP_CONF_MAX_CONF_RSP 2
702 
703 enum {
704 	CONN_SREJ_SENT,
705 	CONN_WAIT_F,
706 	CONN_SREJ_ACT,
707 	CONN_SEND_PBIT,
708 	CONN_REMOTE_BUSY,
709 	CONN_LOCAL_BUSY,
710 	CONN_REJ_ACT,
711 	CONN_SEND_FBIT,
712 	CONN_RNR_SENT,
713 };
714 
715 /* Definitions for flags in l2cap_chan */
716 enum {
717 	FLAG_ROLE_SWITCH,
718 	FLAG_FORCE_ACTIVE,
719 	FLAG_FORCE_RELIABLE,
720 	FLAG_FLUSHABLE,
721 	FLAG_EXT_CTRL,
722 	FLAG_EFS_ENABLE,
723 	FLAG_DEFER_SETUP,
724 	FLAG_LE_CONN_REQ_SENT,
725 	FLAG_PENDING_SECURITY,
726 	FLAG_HOLD_HCI_CONN,
727 };
728 
729 /* Lock nesting levels for L2CAP channels. We need these because lockdep
730  * otherwise considers all channels equal and will e.g. complain about a
731  * connection oriented channel triggering SMP procedures or a listening
732  * channel creating and locking a child channel.
733  */
734 enum {
735 	L2CAP_NESTING_SMP,
736 	L2CAP_NESTING_NORMAL,
737 	L2CAP_NESTING_PARENT,
738 };
739 
740 enum {
741 	L2CAP_TX_STATE_XMIT,
742 	L2CAP_TX_STATE_WAIT_F,
743 };
744 
745 enum {
746 	L2CAP_RX_STATE_RECV,
747 	L2CAP_RX_STATE_SREJ_SENT,
748 	L2CAP_RX_STATE_MOVE,
749 	L2CAP_RX_STATE_WAIT_P,
750 	L2CAP_RX_STATE_WAIT_F,
751 };
752 
753 enum {
754 	L2CAP_TXSEQ_EXPECTED,
755 	L2CAP_TXSEQ_EXPECTED_SREJ,
756 	L2CAP_TXSEQ_UNEXPECTED,
757 	L2CAP_TXSEQ_UNEXPECTED_SREJ,
758 	L2CAP_TXSEQ_DUPLICATE,
759 	L2CAP_TXSEQ_DUPLICATE_SREJ,
760 	L2CAP_TXSEQ_INVALID,
761 	L2CAP_TXSEQ_INVALID_IGNORE,
762 };
763 
764 enum {
765 	L2CAP_EV_DATA_REQUEST,
766 	L2CAP_EV_LOCAL_BUSY_DETECTED,
767 	L2CAP_EV_LOCAL_BUSY_CLEAR,
768 	L2CAP_EV_RECV_REQSEQ_AND_FBIT,
769 	L2CAP_EV_RECV_FBIT,
770 	L2CAP_EV_RETRANS_TO,
771 	L2CAP_EV_MONITOR_TO,
772 	L2CAP_EV_EXPLICIT_POLL,
773 	L2CAP_EV_RECV_IFRAME,
774 	L2CAP_EV_RECV_RR,
775 	L2CAP_EV_RECV_REJ,
776 	L2CAP_EV_RECV_RNR,
777 	L2CAP_EV_RECV_SREJ,
778 	L2CAP_EV_RECV_FRAME,
779 };
780 
781 enum {
782 	L2CAP_MOVE_ROLE_NONE,
783 	L2CAP_MOVE_ROLE_INITIATOR,
784 	L2CAP_MOVE_ROLE_RESPONDER,
785 };
786 
787 enum {
788 	L2CAP_MOVE_STABLE,
789 	L2CAP_MOVE_WAIT_REQ,
790 	L2CAP_MOVE_WAIT_RSP,
791 	L2CAP_MOVE_WAIT_RSP_SUCCESS,
792 	L2CAP_MOVE_WAIT_CONFIRM,
793 	L2CAP_MOVE_WAIT_CONFIRM_RSP,
794 	L2CAP_MOVE_WAIT_LOGICAL_COMP,
795 	L2CAP_MOVE_WAIT_LOGICAL_CFM,
796 	L2CAP_MOVE_WAIT_LOCAL_BUSY,
797 	L2CAP_MOVE_WAIT_PREPARE,
798 };
799 
800 void l2cap_chan_hold(struct l2cap_chan *c);
801 struct l2cap_chan *l2cap_chan_hold_unless_zero(struct l2cap_chan *c);
802 void l2cap_chan_put(struct l2cap_chan *c);
803 
l2cap_chan_lock(struct l2cap_chan * chan)804 static inline void l2cap_chan_lock(struct l2cap_chan *chan)
805 {
806 	mutex_lock_nested(&chan->lock, atomic_read(&chan->nesting));
807 }
808 
l2cap_chan_unlock(struct l2cap_chan * chan)809 static inline void l2cap_chan_unlock(struct l2cap_chan *chan)
810 {
811 	mutex_unlock(&chan->lock);
812 }
813 
l2cap_set_timer(struct l2cap_chan * chan,struct delayed_work * work,long timeout)814 static inline void l2cap_set_timer(struct l2cap_chan *chan,
815 				   struct delayed_work *work, long timeout)
816 {
817 	BT_DBG("chan %p state %s timeout %ld", chan,
818 	       state_to_string(chan->state), timeout);
819 
820 	/* If delayed work cancelled do not hold(chan)
821 	   since it is already done with previous set_timer */
822 	if (!cancel_delayed_work(work))
823 		l2cap_chan_hold(chan);
824 
825 	schedule_delayed_work(work, timeout);
826 }
827 
l2cap_clear_timer(struct l2cap_chan * chan,struct delayed_work * work)828 static inline bool l2cap_clear_timer(struct l2cap_chan *chan,
829 				     struct delayed_work *work)
830 {
831 	bool ret;
832 
833 	/* put(chan) if delayed work cancelled otherwise it
834 	   is done in delayed work function */
835 	ret = cancel_delayed_work(work);
836 	if (ret)
837 		l2cap_chan_put(chan);
838 
839 	return ret;
840 }
841 
842 #define __set_chan_timer(c, t) l2cap_set_timer(c, &c->chan_timer, (t))
843 #define __clear_chan_timer(c) l2cap_clear_timer(c, &c->chan_timer)
844 #define __clear_retrans_timer(c) l2cap_clear_timer(c, &c->retrans_timer)
845 #define __clear_monitor_timer(c) l2cap_clear_timer(c, &c->monitor_timer)
846 #define __set_ack_timer(c) l2cap_set_timer(c, &chan->ack_timer, \
847 		msecs_to_jiffies(L2CAP_DEFAULT_ACK_TO));
848 #define __clear_ack_timer(c) l2cap_clear_timer(c, &c->ack_timer)
849 
__seq_offset(struct l2cap_chan * chan,__u16 seq1,__u16 seq2)850 static inline int __seq_offset(struct l2cap_chan *chan, __u16 seq1, __u16 seq2)
851 {
852 	if (seq1 >= seq2)
853 		return seq1 - seq2;
854 	else
855 		return chan->tx_win_max + 1 - seq2 + seq1;
856 }
857 
__next_seq(struct l2cap_chan * chan,__u16 seq)858 static inline __u16 __next_seq(struct l2cap_chan *chan, __u16 seq)
859 {
860 	return (seq + 1) % (chan->tx_win_max + 1);
861 }
862 
l2cap_chan_no_new_connection(struct l2cap_chan * chan)863 static inline struct l2cap_chan *l2cap_chan_no_new_connection(struct l2cap_chan *chan)
864 {
865 	return NULL;
866 }
867 
l2cap_chan_no_recv(struct l2cap_chan * chan,struct sk_buff * skb)868 static inline int l2cap_chan_no_recv(struct l2cap_chan *chan, struct sk_buff *skb)
869 {
870 	return -ENOSYS;
871 }
872 
l2cap_chan_no_alloc_skb(struct l2cap_chan * chan,unsigned long hdr_len,unsigned long len,int nb)873 static inline struct sk_buff *l2cap_chan_no_alloc_skb(struct l2cap_chan *chan,
874 						      unsigned long hdr_len,
875 						      unsigned long len, int nb)
876 {
877 	return ERR_PTR(-ENOSYS);
878 }
879 
l2cap_chan_no_teardown(struct l2cap_chan * chan,int err)880 static inline void l2cap_chan_no_teardown(struct l2cap_chan *chan, int err)
881 {
882 }
883 
l2cap_chan_no_close(struct l2cap_chan * chan)884 static inline void l2cap_chan_no_close(struct l2cap_chan *chan)
885 {
886 }
887 
l2cap_chan_no_ready(struct l2cap_chan * chan)888 static inline void l2cap_chan_no_ready(struct l2cap_chan *chan)
889 {
890 }
891 
l2cap_chan_no_state_change(struct l2cap_chan * chan,int state,int err)892 static inline void l2cap_chan_no_state_change(struct l2cap_chan *chan,
893 					      int state, int err)
894 {
895 }
896 
l2cap_chan_no_defer(struct l2cap_chan * chan)897 static inline void l2cap_chan_no_defer(struct l2cap_chan *chan)
898 {
899 }
900 
l2cap_chan_no_suspend(struct l2cap_chan * chan)901 static inline void l2cap_chan_no_suspend(struct l2cap_chan *chan)
902 {
903 }
904 
l2cap_chan_no_resume(struct l2cap_chan * chan)905 static inline void l2cap_chan_no_resume(struct l2cap_chan *chan)
906 {
907 }
908 
l2cap_chan_no_set_shutdown(struct l2cap_chan * chan)909 static inline void l2cap_chan_no_set_shutdown(struct l2cap_chan *chan)
910 {
911 }
912 
l2cap_chan_no_get_sndtimeo(struct l2cap_chan * chan)913 static inline long l2cap_chan_no_get_sndtimeo(struct l2cap_chan *chan)
914 {
915 	return 0;
916 }
917 
918 extern bool disable_ertm;
919 
920 int l2cap_init_sockets(void);
921 void l2cap_cleanup_sockets(void);
922 bool l2cap_is_socket(struct socket *sock);
923 
924 void __l2cap_le_connect_rsp_defer(struct l2cap_chan *chan);
925 void __l2cap_connect_rsp_defer(struct l2cap_chan *chan);
926 
927 int l2cap_add_psm(struct l2cap_chan *chan, bdaddr_t *src, __le16 psm);
928 int l2cap_add_scid(struct l2cap_chan *chan,  __u16 scid);
929 
930 struct l2cap_chan *l2cap_chan_create(void);
931 void l2cap_chan_close(struct l2cap_chan *chan, int reason);
932 int l2cap_chan_connect(struct l2cap_chan *chan, __le16 psm, u16 cid,
933 		       bdaddr_t *dst, u8 dst_type);
934 int l2cap_chan_send(struct l2cap_chan *chan, struct msghdr *msg, size_t len);
935 void l2cap_chan_busy(struct l2cap_chan *chan, int busy);
936 int l2cap_chan_check_security(struct l2cap_chan *chan, bool initiator);
937 void l2cap_chan_set_defaults(struct l2cap_chan *chan);
938 int l2cap_ertm_init(struct l2cap_chan *chan);
939 void l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan);
940 void __l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan);
941 void l2cap_chan_del(struct l2cap_chan *chan, int err);
942 void l2cap_send_conn_req(struct l2cap_chan *chan);
943 void l2cap_move_start(struct l2cap_chan *chan);
944 void l2cap_logical_cfm(struct l2cap_chan *chan, struct hci_chan *hchan,
945 		       u8 status);
946 void __l2cap_physical_cfm(struct l2cap_chan *chan, int result);
947 
948 struct l2cap_conn *l2cap_conn_get(struct l2cap_conn *conn);
949 void l2cap_conn_put(struct l2cap_conn *conn);
950 
951 int l2cap_register_user(struct l2cap_conn *conn, struct l2cap_user *user);
952 void l2cap_unregister_user(struct l2cap_conn *conn, struct l2cap_user *user);
953 
954 #endif /* __L2CAP_H */
955