1 /*
2  *
3  *  Bluetooth HCI UART driver
4  *
5  *  Copyright (C) 2000-2001  Qualcomm Incorporated
6  *  Copyright (C) 2002-2003  Maxim Krasnyansky <maxk@qualcomm.com>
7  *  Copyright (C) 2004-2005  Marcel Holtmann <marcel@holtmann.org>
8  *
9  *
10  *  This program is free software; you can redistribute it and/or modify
11  *  it under the terms of the GNU General Public License as published by
12  *  the Free Software Foundation; either version 2 of the License, or
13  *  (at your option) any later version.
14  *
15  *  This program is distributed in the hope that it will be useful,
16  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
17  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
18  *  GNU General Public License for more details.
19  *
20  *  You should have received a copy of the GNU General Public License
21  *  along with this program; if not, write to the Free Software
22  *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
23  *
24  */
25 
26 #include <linux/module.h>
27 
28 #include <linux/kernel.h>
29 #include <linux/init.h>
30 #include <linux/types.h>
31 #include <linux/fcntl.h>
32 #include <linux/interrupt.h>
33 #include <linux/ptrace.h>
34 #include <linux/poll.h>
35 
36 #include <linux/slab.h>
37 #include <linux/tty.h>
38 #include <linux/errno.h>
39 #include <linux/string.h>
40 #include <linux/signal.h>
41 #include <linux/ioctl.h>
42 #include <linux/skbuff.h>
43 #include <linux/firmware.h>
44 #include <linux/serdev.h>
45 
46 #include <net/bluetooth/bluetooth.h>
47 #include <net/bluetooth/hci_core.h>
48 
49 #include "btintel.h"
50 #include "btbcm.h"
51 #include "hci_uart.h"
52 
53 #define VERSION "2.3"
54 
55 static const struct hci_uart_proto *hup[HCI_UART_MAX_PROTO];
56 
hci_uart_register_proto(const struct hci_uart_proto * p)57 int hci_uart_register_proto(const struct hci_uart_proto *p)
58 {
59 	if (p->id >= HCI_UART_MAX_PROTO)
60 		return -EINVAL;
61 
62 	if (hup[p->id])
63 		return -EEXIST;
64 
65 	hup[p->id] = p;
66 
67 	BT_INFO("HCI UART protocol %s registered", p->name);
68 
69 	return 0;
70 }
71 
hci_uart_unregister_proto(const struct hci_uart_proto * p)72 int hci_uart_unregister_proto(const struct hci_uart_proto *p)
73 {
74 	if (p->id >= HCI_UART_MAX_PROTO)
75 		return -EINVAL;
76 
77 	if (!hup[p->id])
78 		return -EINVAL;
79 
80 	hup[p->id] = NULL;
81 
82 	return 0;
83 }
84 
hci_uart_get_proto(unsigned int id)85 static const struct hci_uart_proto *hci_uart_get_proto(unsigned int id)
86 {
87 	if (id >= HCI_UART_MAX_PROTO)
88 		return NULL;
89 
90 	return hup[id];
91 }
92 
hci_uart_tx_complete(struct hci_uart * hu,int pkt_type)93 static inline void hci_uart_tx_complete(struct hci_uart *hu, int pkt_type)
94 {
95 	struct hci_dev *hdev = hu->hdev;
96 
97 	/* Update HCI stat counters */
98 	switch (pkt_type) {
99 	case HCI_COMMAND_PKT:
100 		hdev->stat.cmd_tx++;
101 		break;
102 
103 	case HCI_ACLDATA_PKT:
104 		hdev->stat.acl_tx++;
105 		break;
106 
107 	case HCI_SCODATA_PKT:
108 		hdev->stat.sco_tx++;
109 		break;
110 	}
111 }
112 
hci_uart_dequeue(struct hci_uart * hu)113 static inline struct sk_buff *hci_uart_dequeue(struct hci_uart *hu)
114 {
115 	struct sk_buff *skb = hu->tx_skb;
116 
117 	if (!skb) {
118 		percpu_down_read(&hu->proto_lock);
119 
120 		if (test_bit(HCI_UART_PROTO_READY, &hu->flags))
121 			skb = hu->proto->dequeue(hu);
122 
123 		percpu_up_read(&hu->proto_lock);
124 	} else {
125 		hu->tx_skb = NULL;
126 	}
127 
128 	return skb;
129 }
130 
hci_uart_tx_wakeup(struct hci_uart * hu)131 int hci_uart_tx_wakeup(struct hci_uart *hu)
132 {
133 	/* This may be called in an IRQ context, so we can't sleep. Therefore
134 	 * we try to acquire the lock only, and if that fails we assume the
135 	 * tty is being closed because that is the only time the write lock is
136 	 * acquired. If, however, at some point in the future the write lock
137 	 * is also acquired in other situations, then this must be revisited.
138 	 */
139 	if (!percpu_down_read_trylock(&hu->proto_lock))
140 		return 0;
141 
142 	if (!test_bit(HCI_UART_PROTO_READY, &hu->flags))
143 		goto no_schedule;
144 
145 	if (test_and_set_bit(HCI_UART_SENDING, &hu->tx_state)) {
146 		set_bit(HCI_UART_TX_WAKEUP, &hu->tx_state);
147 		goto no_schedule;
148 	}
149 
150 	BT_DBG("");
151 
152 	schedule_work(&hu->write_work);
153 
154 no_schedule:
155 	percpu_up_read(&hu->proto_lock);
156 
157 	return 0;
158 }
159 EXPORT_SYMBOL_GPL(hci_uart_tx_wakeup);
160 
hci_uart_write_work(struct work_struct * work)161 static void hci_uart_write_work(struct work_struct *work)
162 {
163 	struct hci_uart *hu = container_of(work, struct hci_uart, write_work);
164 	struct tty_struct *tty = hu->tty;
165 	struct hci_dev *hdev = hu->hdev;
166 	struct sk_buff *skb;
167 
168 	/* REVISIT: should we cope with bad skbs or ->write() returning
169 	 * and error value ?
170 	 */
171 
172 restart:
173 	clear_bit(HCI_UART_TX_WAKEUP, &hu->tx_state);
174 
175 	while ((skb = hci_uart_dequeue(hu))) {
176 		int len;
177 
178 		set_bit(TTY_DO_WRITE_WAKEUP, &tty->flags);
179 		len = tty->ops->write(tty, skb->data, skb->len);
180 		hdev->stat.byte_tx += len;
181 
182 		skb_pull(skb, len);
183 		if (skb->len) {
184 			hu->tx_skb = skb;
185 			break;
186 		}
187 
188 		hci_uart_tx_complete(hu, hci_skb_pkt_type(skb));
189 		kfree_skb(skb);
190 	}
191 
192 	if (test_bit(HCI_UART_TX_WAKEUP, &hu->tx_state))
193 		goto restart;
194 
195 	clear_bit(HCI_UART_SENDING, &hu->tx_state);
196 }
197 
hci_uart_init_work(struct work_struct * work)198 void hci_uart_init_work(struct work_struct *work)
199 {
200 	struct hci_uart *hu = container_of(work, struct hci_uart, init_ready);
201 	int err;
202 	struct hci_dev *hdev;
203 
204 	if (!test_and_clear_bit(HCI_UART_INIT_PENDING, &hu->hdev_flags))
205 		return;
206 
207 	err = hci_register_dev(hu->hdev);
208 	if (err < 0) {
209 		BT_ERR("Can't register HCI device");
210 		clear_bit(HCI_UART_PROTO_READY, &hu->flags);
211 		hu->proto->close(hu);
212 		hdev = hu->hdev;
213 		hu->hdev = NULL;
214 		hci_free_dev(hdev);
215 		return;
216 	}
217 
218 	set_bit(HCI_UART_REGISTERED, &hu->flags);
219 }
220 
hci_uart_init_ready(struct hci_uart * hu)221 int hci_uart_init_ready(struct hci_uart *hu)
222 {
223 	if (!test_bit(HCI_UART_INIT_PENDING, &hu->hdev_flags))
224 		return -EALREADY;
225 
226 	schedule_work(&hu->init_ready);
227 
228 	return 0;
229 }
230 
231 /* ------- Interface to HCI layer ------ */
232 /* Reset device */
hci_uart_flush(struct hci_dev * hdev)233 static int hci_uart_flush(struct hci_dev *hdev)
234 {
235 	struct hci_uart *hu  = hci_get_drvdata(hdev);
236 	struct tty_struct *tty = hu->tty;
237 
238 	BT_DBG("hdev %p tty %p", hdev, tty);
239 
240 	if (hu->tx_skb) {
241 		kfree_skb(hu->tx_skb); hu->tx_skb = NULL;
242 	}
243 
244 	/* Flush any pending characters in the driver and discipline. */
245 	tty_ldisc_flush(tty);
246 	tty_driver_flush_buffer(tty);
247 
248 	percpu_down_read(&hu->proto_lock);
249 
250 	if (test_bit(HCI_UART_PROTO_READY, &hu->flags))
251 		hu->proto->flush(hu);
252 
253 	percpu_up_read(&hu->proto_lock);
254 
255 	return 0;
256 }
257 
258 /* Initialize device */
hci_uart_open(struct hci_dev * hdev)259 static int hci_uart_open(struct hci_dev *hdev)
260 {
261 	BT_DBG("%s %p", hdev->name, hdev);
262 
263 	/* Undo clearing this from hci_uart_close() */
264 	hdev->flush = hci_uart_flush;
265 
266 	return 0;
267 }
268 
269 /* Close device */
hci_uart_close(struct hci_dev * hdev)270 static int hci_uart_close(struct hci_dev *hdev)
271 {
272 	BT_DBG("hdev %p", hdev);
273 
274 	hci_uart_flush(hdev);
275 	hdev->flush = NULL;
276 	return 0;
277 }
278 
279 /* Send frames from HCI layer */
hci_uart_send_frame(struct hci_dev * hdev,struct sk_buff * skb)280 static int hci_uart_send_frame(struct hci_dev *hdev, struct sk_buff *skb)
281 {
282 	struct hci_uart *hu = hci_get_drvdata(hdev);
283 
284 	BT_DBG("%s: type %d len %d", hdev->name, hci_skb_pkt_type(skb),
285 	       skb->len);
286 
287 	percpu_down_read(&hu->proto_lock);
288 
289 	if (!test_bit(HCI_UART_PROTO_READY, &hu->flags)) {
290 		percpu_up_read(&hu->proto_lock);
291 		return -EUNATCH;
292 	}
293 
294 	hu->proto->enqueue(hu, skb);
295 	percpu_up_read(&hu->proto_lock);
296 
297 	hci_uart_tx_wakeup(hu);
298 
299 	return 0;
300 }
301 
302 /* Check the underlying device or tty has flow control support */
hci_uart_has_flow_control(struct hci_uart * hu)303 bool hci_uart_has_flow_control(struct hci_uart *hu)
304 {
305 	/* serdev nodes check if the needed operations are present */
306 	if (hu->serdev)
307 		return true;
308 
309 	if (hu->tty->driver->ops->tiocmget && hu->tty->driver->ops->tiocmset)
310 		return true;
311 
312 	return false;
313 }
314 
315 /* Flow control or un-flow control the device */
hci_uart_set_flow_control(struct hci_uart * hu,bool enable)316 void hci_uart_set_flow_control(struct hci_uart *hu, bool enable)
317 {
318 	struct tty_struct *tty = hu->tty;
319 	struct ktermios ktermios;
320 	int status;
321 	unsigned int set = 0;
322 	unsigned int clear = 0;
323 
324 	if (hu->serdev) {
325 		serdev_device_set_flow_control(hu->serdev, !enable);
326 		serdev_device_set_rts(hu->serdev, !enable);
327 		return;
328 	}
329 
330 	if (enable) {
331 		/* Disable hardware flow control */
332 		ktermios = tty->termios;
333 		ktermios.c_cflag &= ~CRTSCTS;
334 		status = tty_set_termios(tty, &ktermios);
335 		BT_DBG("Disabling hardware flow control: %s",
336 		       status ? "failed" : "success");
337 
338 		/* Clear RTS to prevent the device from sending */
339 		/* Most UARTs need OUT2 to enable interrupts */
340 		status = tty->driver->ops->tiocmget(tty);
341 		BT_DBG("Current tiocm 0x%x", status);
342 
343 		set &= ~(TIOCM_OUT2 | TIOCM_RTS);
344 		clear = ~set;
345 		set &= TIOCM_DTR | TIOCM_RTS | TIOCM_OUT1 |
346 		       TIOCM_OUT2 | TIOCM_LOOP;
347 		clear &= TIOCM_DTR | TIOCM_RTS | TIOCM_OUT1 |
348 			 TIOCM_OUT2 | TIOCM_LOOP;
349 		status = tty->driver->ops->tiocmset(tty, set, clear);
350 		BT_DBG("Clearing RTS: %s", status ? "failed" : "success");
351 	} else {
352 		/* Set RTS to allow the device to send again */
353 		status = tty->driver->ops->tiocmget(tty);
354 		BT_DBG("Current tiocm 0x%x", status);
355 
356 		set |= (TIOCM_OUT2 | TIOCM_RTS);
357 		clear = ~set;
358 		set &= TIOCM_DTR | TIOCM_RTS | TIOCM_OUT1 |
359 		       TIOCM_OUT2 | TIOCM_LOOP;
360 		clear &= TIOCM_DTR | TIOCM_RTS | TIOCM_OUT1 |
361 			 TIOCM_OUT2 | TIOCM_LOOP;
362 		status = tty->driver->ops->tiocmset(tty, set, clear);
363 		BT_DBG("Setting RTS: %s", status ? "failed" : "success");
364 
365 		/* Re-enable hardware flow control */
366 		ktermios = tty->termios;
367 		ktermios.c_cflag |= CRTSCTS;
368 		status = tty_set_termios(tty, &ktermios);
369 		BT_DBG("Enabling hardware flow control: %s",
370 		       status ? "failed" : "success");
371 	}
372 }
373 
hci_uart_set_speeds(struct hci_uart * hu,unsigned int init_speed,unsigned int oper_speed)374 void hci_uart_set_speeds(struct hci_uart *hu, unsigned int init_speed,
375 			 unsigned int oper_speed)
376 {
377 	hu->init_speed = init_speed;
378 	hu->oper_speed = oper_speed;
379 }
380 
hci_uart_set_baudrate(struct hci_uart * hu,unsigned int speed)381 void hci_uart_set_baudrate(struct hci_uart *hu, unsigned int speed)
382 {
383 	struct tty_struct *tty = hu->tty;
384 	struct ktermios ktermios;
385 
386 	ktermios = tty->termios;
387 	ktermios.c_cflag &= ~CBAUD;
388 	tty_termios_encode_baud_rate(&ktermios, speed, speed);
389 
390 	/* tty_set_termios() return not checked as it is always 0 */
391 	tty_set_termios(tty, &ktermios);
392 
393 	BT_DBG("%s: New tty speeds: %d/%d", hu->hdev->name,
394 	       tty->termios.c_ispeed, tty->termios.c_ospeed);
395 }
396 
hci_uart_setup(struct hci_dev * hdev)397 static int hci_uart_setup(struct hci_dev *hdev)
398 {
399 	struct hci_uart *hu = hci_get_drvdata(hdev);
400 	struct hci_rp_read_local_version *ver;
401 	struct sk_buff *skb;
402 	unsigned int speed;
403 	int err;
404 
405 	/* Init speed if any */
406 	if (hu->init_speed)
407 		speed = hu->init_speed;
408 	else if (hu->proto->init_speed)
409 		speed = hu->proto->init_speed;
410 	else
411 		speed = 0;
412 
413 	if (speed)
414 		hci_uart_set_baudrate(hu, speed);
415 
416 	/* Operational speed if any */
417 	if (hu->oper_speed)
418 		speed = hu->oper_speed;
419 	else if (hu->proto->oper_speed)
420 		speed = hu->proto->oper_speed;
421 	else
422 		speed = 0;
423 
424 	if (hu->proto->set_baudrate && speed) {
425 		err = hu->proto->set_baudrate(hu, speed);
426 		if (!err)
427 			hci_uart_set_baudrate(hu, speed);
428 	}
429 
430 	if (hu->proto->setup)
431 		return hu->proto->setup(hu);
432 
433 	if (!test_bit(HCI_UART_VND_DETECT, &hu->hdev_flags))
434 		return 0;
435 
436 	skb = __hci_cmd_sync(hdev, HCI_OP_READ_LOCAL_VERSION, 0, NULL,
437 			     HCI_INIT_TIMEOUT);
438 	if (IS_ERR(skb)) {
439 		BT_ERR("%s: Reading local version information failed (%ld)",
440 		       hdev->name, PTR_ERR(skb));
441 		return 0;
442 	}
443 
444 	if (skb->len != sizeof(*ver)) {
445 		BT_ERR("%s: Event length mismatch for version information",
446 		       hdev->name);
447 		goto done;
448 	}
449 
450 	ver = (struct hci_rp_read_local_version *)skb->data;
451 
452 	switch (le16_to_cpu(ver->manufacturer)) {
453 #ifdef CONFIG_BT_HCIUART_INTEL
454 	case 2:
455 		hdev->set_bdaddr = btintel_set_bdaddr;
456 		btintel_check_bdaddr(hdev);
457 		break;
458 #endif
459 #ifdef CONFIG_BT_HCIUART_BCM
460 	case 15:
461 		hdev->set_bdaddr = btbcm_set_bdaddr;
462 		btbcm_check_bdaddr(hdev);
463 		break;
464 #endif
465 	default:
466 		break;
467 	}
468 
469 done:
470 	kfree_skb(skb);
471 	return 0;
472 }
473 
474 /* ------ LDISC part ------ */
475 /* hci_uart_tty_open
476  *
477  *     Called when line discipline changed to HCI_UART.
478  *
479  * Arguments:
480  *     tty    pointer to tty info structure
481  * Return Value:
482  *     0 if success, otherwise error code
483  */
hci_uart_tty_open(struct tty_struct * tty)484 static int hci_uart_tty_open(struct tty_struct *tty)
485 {
486 	struct hci_uart *hu;
487 
488 	BT_DBG("tty %p", tty);
489 
490 	/* Error if the tty has no write op instead of leaving an exploitable
491 	 * hole
492 	 */
493 	if (tty->ops->write == NULL)
494 		return -EOPNOTSUPP;
495 
496 	hu = kzalloc(sizeof(struct hci_uart), GFP_KERNEL);
497 	if (!hu) {
498 		BT_ERR("Can't allocate control structure");
499 		return -ENFILE;
500 	}
501 
502 	tty->disc_data = hu;
503 	hu->tty = tty;
504 	tty->receive_room = 65536;
505 
506 	/* disable alignment support by default */
507 	hu->alignment = 1;
508 	hu->padding = 0;
509 
510 	INIT_WORK(&hu->init_ready, hci_uart_init_work);
511 	INIT_WORK(&hu->write_work, hci_uart_write_work);
512 
513 	percpu_init_rwsem(&hu->proto_lock);
514 
515 	/* Flush any pending characters in the driver */
516 	tty_driver_flush_buffer(tty);
517 
518 	return 0;
519 }
520 
521 /* hci_uart_tty_close()
522  *
523  *    Called when the line discipline is changed to something
524  *    else, the tty is closed, or the tty detects a hangup.
525  */
hci_uart_tty_close(struct tty_struct * tty)526 static void hci_uart_tty_close(struct tty_struct *tty)
527 {
528 	struct hci_uart *hu = tty->disc_data;
529 	struct hci_dev *hdev;
530 
531 	BT_DBG("tty %p", tty);
532 
533 	/* Detach from the tty */
534 	tty->disc_data = NULL;
535 
536 	if (!hu)
537 		return;
538 
539 	hdev = hu->hdev;
540 	if (hdev)
541 		hci_uart_close(hdev);
542 
543 	if (test_bit(HCI_UART_PROTO_READY, &hu->flags)) {
544 		percpu_down_write(&hu->proto_lock);
545 		clear_bit(HCI_UART_PROTO_READY, &hu->flags);
546 		percpu_up_write(&hu->proto_lock);
547 
548 		cancel_work_sync(&hu->init_ready);
549 		cancel_work_sync(&hu->write_work);
550 
551 		if (hdev) {
552 			if (test_bit(HCI_UART_REGISTERED, &hu->flags))
553 				hci_unregister_dev(hdev);
554 			hci_free_dev(hdev);
555 		}
556 		hu->proto->close(hu);
557 	}
558 	clear_bit(HCI_UART_PROTO_SET, &hu->flags);
559 
560 	percpu_free_rwsem(&hu->proto_lock);
561 
562 	kfree(hu);
563 }
564 
565 /* hci_uart_tty_wakeup()
566  *
567  *    Callback for transmit wakeup. Called when low level
568  *    device driver can accept more send data.
569  *
570  * Arguments:        tty    pointer to associated tty instance data
571  * Return Value:    None
572  */
hci_uart_tty_wakeup(struct tty_struct * tty)573 static void hci_uart_tty_wakeup(struct tty_struct *tty)
574 {
575 	struct hci_uart *hu = tty->disc_data;
576 
577 	BT_DBG("");
578 
579 	if (!hu)
580 		return;
581 
582 	clear_bit(TTY_DO_WRITE_WAKEUP, &tty->flags);
583 
584 	if (tty != hu->tty)
585 		return;
586 
587 	if (test_bit(HCI_UART_PROTO_READY, &hu->flags))
588 		hci_uart_tx_wakeup(hu);
589 }
590 
591 /* hci_uart_tty_receive()
592  *
593  *     Called by tty low level driver when receive data is
594  *     available.
595  *
596  * Arguments:  tty          pointer to tty isntance data
597  *             data         pointer to received data
598  *             flags        pointer to flags for data
599  *             count        count of received data in bytes
600  *
601  * Return Value:    None
602  */
hci_uart_tty_receive(struct tty_struct * tty,const u8 * data,char * flags,int count)603 static void hci_uart_tty_receive(struct tty_struct *tty, const u8 *data,
604 				 char *flags, int count)
605 {
606 	struct hci_uart *hu = tty->disc_data;
607 
608 	if (!hu || tty != hu->tty)
609 		return;
610 
611 	percpu_down_read(&hu->proto_lock);
612 
613 	if (!test_bit(HCI_UART_PROTO_READY, &hu->flags)) {
614 		percpu_up_read(&hu->proto_lock);
615 		return;
616 	}
617 
618 	/* It does not need a lock here as it is already protected by a mutex in
619 	 * tty caller
620 	 */
621 	hu->proto->recv(hu, data, count);
622 	percpu_up_read(&hu->proto_lock);
623 
624 	if (hu->hdev)
625 		hu->hdev->stat.byte_rx += count;
626 
627 	tty_unthrottle(tty);
628 }
629 
hci_uart_register_dev(struct hci_uart * hu)630 static int hci_uart_register_dev(struct hci_uart *hu)
631 {
632 	struct hci_dev *hdev;
633 	int err;
634 
635 	BT_DBG("");
636 
637 	/* Initialize and register HCI device */
638 	hdev = hci_alloc_dev();
639 	if (!hdev) {
640 		BT_ERR("Can't allocate HCI device");
641 		return -ENOMEM;
642 	}
643 
644 	hu->hdev = hdev;
645 
646 	hdev->bus = HCI_UART;
647 	hci_set_drvdata(hdev, hu);
648 
649 	/* Only when vendor specific setup callback is provided, consider
650 	 * the manufacturer information valid. This avoids filling in the
651 	 * value for Ericsson when nothing is specified.
652 	 */
653 	if (hu->proto->setup)
654 		hdev->manufacturer = hu->proto->manufacturer;
655 
656 	hdev->open  = hci_uart_open;
657 	hdev->close = hci_uart_close;
658 	hdev->flush = hci_uart_flush;
659 	hdev->send  = hci_uart_send_frame;
660 	hdev->setup = hci_uart_setup;
661 	SET_HCIDEV_DEV(hdev, hu->tty->dev);
662 
663 	if (test_bit(HCI_UART_RAW_DEVICE, &hu->hdev_flags))
664 		set_bit(HCI_QUIRK_RAW_DEVICE, &hdev->quirks);
665 
666 	if (test_bit(HCI_UART_EXT_CONFIG, &hu->hdev_flags))
667 		set_bit(HCI_QUIRK_EXTERNAL_CONFIG, &hdev->quirks);
668 
669 	if (!test_bit(HCI_UART_RESET_ON_INIT, &hu->hdev_flags))
670 		set_bit(HCI_QUIRK_RESET_ON_CLOSE, &hdev->quirks);
671 
672 	if (test_bit(HCI_UART_CREATE_AMP, &hu->hdev_flags))
673 		hdev->dev_type = HCI_AMP;
674 	else
675 		hdev->dev_type = HCI_PRIMARY;
676 
677 	/* Only call open() for the protocol after hdev is fully initialized as
678 	 * open() (or a timer/workqueue it starts) may attempt to reference it.
679 	 */
680 	err = hu->proto->open(hu);
681 	if (err) {
682 		hu->hdev = NULL;
683 		hci_free_dev(hdev);
684 		return err;
685 	}
686 
687 	if (test_bit(HCI_UART_INIT_PENDING, &hu->hdev_flags))
688 		return 0;
689 
690 	if (hci_register_dev(hdev) < 0) {
691 		BT_ERR("Can't register HCI device");
692 		hu->proto->close(hu);
693 		hu->hdev = NULL;
694 		hci_free_dev(hdev);
695 		return -ENODEV;
696 	}
697 
698 	set_bit(HCI_UART_REGISTERED, &hu->flags);
699 
700 	return 0;
701 }
702 
hci_uart_set_proto(struct hci_uart * hu,int id)703 static int hci_uart_set_proto(struct hci_uart *hu, int id)
704 {
705 	const struct hci_uart_proto *p;
706 	int err;
707 
708 	p = hci_uart_get_proto(id);
709 	if (!p)
710 		return -EPROTONOSUPPORT;
711 
712 	hu->proto = p;
713 
714 	err = hci_uart_register_dev(hu);
715 	if (err) {
716 		return err;
717 	}
718 
719 	set_bit(HCI_UART_PROTO_READY, &hu->flags);
720 	return 0;
721 }
722 
hci_uart_set_flags(struct hci_uart * hu,unsigned long flags)723 static int hci_uart_set_flags(struct hci_uart *hu, unsigned long flags)
724 {
725 	unsigned long valid_flags = BIT(HCI_UART_RAW_DEVICE) |
726 				    BIT(HCI_UART_RESET_ON_INIT) |
727 				    BIT(HCI_UART_CREATE_AMP) |
728 				    BIT(HCI_UART_INIT_PENDING) |
729 				    BIT(HCI_UART_EXT_CONFIG) |
730 				    BIT(HCI_UART_VND_DETECT);
731 
732 	if (flags & ~valid_flags)
733 		return -EINVAL;
734 
735 	hu->hdev_flags = flags;
736 
737 	return 0;
738 }
739 
740 /* hci_uart_tty_ioctl()
741  *
742  *    Process IOCTL system call for the tty device.
743  *
744  * Arguments:
745  *
746  *    tty        pointer to tty instance data
747  *    file       pointer to open file object for device
748  *    cmd        IOCTL command code
749  *    arg        argument for IOCTL call (cmd dependent)
750  *
751  * Return Value:    Command dependent
752  */
hci_uart_tty_ioctl(struct tty_struct * tty,struct file * file,unsigned int cmd,unsigned long arg)753 static int hci_uart_tty_ioctl(struct tty_struct *tty, struct file *file,
754 			      unsigned int cmd, unsigned long arg)
755 {
756 	struct hci_uart *hu = tty->disc_data;
757 	int err = 0;
758 
759 	BT_DBG("");
760 
761 	/* Verify the status of the device */
762 	if (!hu)
763 		return -EBADF;
764 
765 	switch (cmd) {
766 	case HCIUARTSETPROTO:
767 		if (!test_and_set_bit(HCI_UART_PROTO_SET, &hu->flags)) {
768 			err = hci_uart_set_proto(hu, arg);
769 			if (err)
770 				clear_bit(HCI_UART_PROTO_SET, &hu->flags);
771 		} else
772 			err = -EBUSY;
773 		break;
774 
775 	case HCIUARTGETPROTO:
776 		if (test_bit(HCI_UART_PROTO_SET, &hu->flags))
777 			err = hu->proto->id;
778 		else
779 			err = -EUNATCH;
780 		break;
781 
782 	case HCIUARTGETDEVICE:
783 		if (test_bit(HCI_UART_REGISTERED, &hu->flags))
784 			err = hu->hdev->id;
785 		else
786 			err = -EUNATCH;
787 		break;
788 
789 	case HCIUARTSETFLAGS:
790 		if (test_bit(HCI_UART_PROTO_SET, &hu->flags))
791 			err = -EBUSY;
792 		else
793 			err = hci_uart_set_flags(hu, arg);
794 		break;
795 
796 	case HCIUARTGETFLAGS:
797 		err = hu->hdev_flags;
798 		break;
799 
800 	default:
801 		err = n_tty_ioctl_helper(tty, file, cmd, arg);
802 		break;
803 	}
804 
805 	return err;
806 }
807 
808 /*
809  * We don't provide read/write/poll interface for user space.
810  */
hci_uart_tty_read(struct tty_struct * tty,struct file * file,unsigned char __user * buf,size_t nr)811 static ssize_t hci_uart_tty_read(struct tty_struct *tty, struct file *file,
812 				 unsigned char __user *buf, size_t nr)
813 {
814 	return 0;
815 }
816 
hci_uart_tty_write(struct tty_struct * tty,struct file * file,const unsigned char * data,size_t count)817 static ssize_t hci_uart_tty_write(struct tty_struct *tty, struct file *file,
818 				  const unsigned char *data, size_t count)
819 {
820 	return 0;
821 }
822 
hci_uart_tty_poll(struct tty_struct * tty,struct file * filp,poll_table * wait)823 static __poll_t hci_uart_tty_poll(struct tty_struct *tty,
824 				      struct file *filp, poll_table *wait)
825 {
826 	return 0;
827 }
828 
hci_uart_init(void)829 static int __init hci_uart_init(void)
830 {
831 	static struct tty_ldisc_ops hci_uart_ldisc;
832 	int err;
833 
834 	BT_INFO("HCI UART driver ver %s", VERSION);
835 
836 	/* Register the tty discipline */
837 
838 	memset(&hci_uart_ldisc, 0, sizeof(hci_uart_ldisc));
839 	hci_uart_ldisc.magic		= TTY_LDISC_MAGIC;
840 	hci_uart_ldisc.name		= "n_hci";
841 	hci_uart_ldisc.open		= hci_uart_tty_open;
842 	hci_uart_ldisc.close		= hci_uart_tty_close;
843 	hci_uart_ldisc.read		= hci_uart_tty_read;
844 	hci_uart_ldisc.write		= hci_uart_tty_write;
845 	hci_uart_ldisc.ioctl		= hci_uart_tty_ioctl;
846 	hci_uart_ldisc.poll		= hci_uart_tty_poll;
847 	hci_uart_ldisc.receive_buf	= hci_uart_tty_receive;
848 	hci_uart_ldisc.write_wakeup	= hci_uart_tty_wakeup;
849 	hci_uart_ldisc.owner		= THIS_MODULE;
850 
851 	err = tty_register_ldisc(N_HCI, &hci_uart_ldisc);
852 	if (err) {
853 		BT_ERR("HCI line discipline registration failed. (%d)", err);
854 		return err;
855 	}
856 
857 #ifdef CONFIG_BT_HCIUART_H4
858 	h4_init();
859 #endif
860 #ifdef CONFIG_BT_HCIUART_BCSP
861 	bcsp_init();
862 #endif
863 #ifdef CONFIG_BT_HCIUART_LL
864 	ll_init();
865 #endif
866 #ifdef CONFIG_BT_HCIUART_ATH3K
867 	ath_init();
868 #endif
869 #ifdef CONFIG_BT_HCIUART_3WIRE
870 	h5_init();
871 #endif
872 #ifdef CONFIG_BT_HCIUART_INTEL
873 	intel_init();
874 #endif
875 #ifdef CONFIG_BT_HCIUART_BCM
876 	bcm_init();
877 #endif
878 #ifdef CONFIG_BT_HCIUART_QCA
879 	qca_init();
880 #endif
881 #ifdef CONFIG_BT_HCIUART_AG6XX
882 	ag6xx_init();
883 #endif
884 #ifdef CONFIG_BT_HCIUART_MRVL
885 	mrvl_init();
886 #endif
887 
888 	return 0;
889 }
890 
hci_uart_exit(void)891 static void __exit hci_uart_exit(void)
892 {
893 	int err;
894 
895 #ifdef CONFIG_BT_HCIUART_H4
896 	h4_deinit();
897 #endif
898 #ifdef CONFIG_BT_HCIUART_BCSP
899 	bcsp_deinit();
900 #endif
901 #ifdef CONFIG_BT_HCIUART_LL
902 	ll_deinit();
903 #endif
904 #ifdef CONFIG_BT_HCIUART_ATH3K
905 	ath_deinit();
906 #endif
907 #ifdef CONFIG_BT_HCIUART_3WIRE
908 	h5_deinit();
909 #endif
910 #ifdef CONFIG_BT_HCIUART_INTEL
911 	intel_deinit();
912 #endif
913 #ifdef CONFIG_BT_HCIUART_BCM
914 	bcm_deinit();
915 #endif
916 #ifdef CONFIG_BT_HCIUART_QCA
917 	qca_deinit();
918 #endif
919 #ifdef CONFIG_BT_HCIUART_AG6XX
920 	ag6xx_deinit();
921 #endif
922 #ifdef CONFIG_BT_HCIUART_MRVL
923 	mrvl_deinit();
924 #endif
925 
926 	/* Release tty registration of line discipline */
927 	err = tty_unregister_ldisc(N_HCI);
928 	if (err)
929 		BT_ERR("Can't unregister HCI line discipline (%d)", err);
930 }
931 
932 module_init(hci_uart_init);
933 module_exit(hci_uart_exit);
934 
935 MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>");
936 MODULE_DESCRIPTION("Bluetooth HCI UART driver ver " VERSION);
937 MODULE_VERSION(VERSION);
938 MODULE_LICENSE("GPL");
939 MODULE_ALIAS_LDISC(N_HCI);
940