• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /*
2    BlueZ - Bluetooth protocol stack for Linux
3    Copyright (C) 2000-2001 Qualcomm Incorporated
4    Copyright (C) 2009-2010 Gustavo F. Padovan <gustavo@padovan.org>
5    Copyright (C) 2010 Google Inc.
6 
7    Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
8 
9    This program is free software; you can redistribute it and/or modify
10    it under the terms of the GNU General Public License version 2 as
11    published by the Free Software Foundation;
12 
13    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
14    OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
15    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
16    IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
17    CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
18    WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
19    ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
20    OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
21 
22    ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
23    COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
24    SOFTWARE IS DISCLAIMED.
25 */
26 
27 #ifndef __L2CAP_H
28 #define __L2CAP_H
29 
30 #include <linux/unaligned.h>
31 #include <linux/atomic.h>
32 #include <linux/android_kabi.h>
33 
34 /* L2CAP defaults */
35 #define L2CAP_DEFAULT_MTU		672
36 #define L2CAP_DEFAULT_MIN_MTU		48
37 #define L2CAP_DEFAULT_FLUSH_TO		0xFFFF
38 #define L2CAP_EFS_DEFAULT_FLUSH_TO	0xFFFFFFFF
39 #define L2CAP_DEFAULT_TX_WINDOW		63
40 #define L2CAP_DEFAULT_EXT_WINDOW	0x3FFF
41 #define L2CAP_DEFAULT_MAX_TX		3
42 #define L2CAP_DEFAULT_RETRANS_TO	2000    /* 2 seconds */
43 #define L2CAP_DEFAULT_MONITOR_TO	12000   /* 12 seconds */
44 #define L2CAP_DEFAULT_MAX_PDU_SIZE	1492    /* Sized for AMP packet */
45 #define L2CAP_DEFAULT_ACK_TO		200
46 #define L2CAP_DEFAULT_MAX_SDU_SIZE	0xFFFF
47 #define L2CAP_DEFAULT_SDU_ITIME		0xFFFFFFFF
48 #define L2CAP_DEFAULT_ACC_LAT		0xFFFFFFFF
49 #define L2CAP_BREDR_MAX_PAYLOAD		1019    /* 3-DH5 packet */
50 #define L2CAP_LE_MIN_MTU		23
51 #define L2CAP_ECRED_CONN_SCID_MAX	5
52 
53 #define L2CAP_DISC_TIMEOUT		msecs_to_jiffies(100)
54 #define L2CAP_DISC_REJ_TIMEOUT		msecs_to_jiffies(5000)
55 #define L2CAP_ENC_TIMEOUT		msecs_to_jiffies(5000)
56 #define L2CAP_CONN_TIMEOUT		msecs_to_jiffies(40000)
57 #define L2CAP_INFO_TIMEOUT		msecs_to_jiffies(4000)
58 #define L2CAP_MOVE_TIMEOUT		msecs_to_jiffies(4000)
59 #define L2CAP_MOVE_ERTX_TIMEOUT		msecs_to_jiffies(60000)
60 #define L2CAP_WAIT_ACK_POLL_PERIOD	msecs_to_jiffies(200)
61 #define L2CAP_WAIT_ACK_TIMEOUT		msecs_to_jiffies(10000)
62 
63 /* L2CAP socket address */
64 struct sockaddr_l2 {
65 	sa_family_t	l2_family;
66 	__le16		l2_psm;
67 	bdaddr_t	l2_bdaddr;
68 	__le16		l2_cid;
69 	__u8		l2_bdaddr_type;
70 };
71 
72 /* L2CAP socket options */
73 #define L2CAP_OPTIONS	0x01
74 struct l2cap_options {
75 	__u16 omtu;
76 	__u16 imtu;
77 	__u16 flush_to;
78 	__u8  mode;
79 	__u8  fcs;
80 	__u8  max_tx;
81 	__u16 txwin_size;
82 };
83 
84 #define L2CAP_CONNINFO	0x02
85 struct l2cap_conninfo {
86 	__u16 hci_handle;
87 	__u8  dev_class[3];
88 };
89 
90 #define L2CAP_LM	0x03
91 #define L2CAP_LM_MASTER		0x0001
92 #define L2CAP_LM_AUTH		0x0002
93 #define L2CAP_LM_ENCRYPT	0x0004
94 #define L2CAP_LM_TRUSTED	0x0008
95 #define L2CAP_LM_RELIABLE	0x0010
96 #define L2CAP_LM_SECURE		0x0020
97 #define L2CAP_LM_FIPS		0x0040
98 
99 /* L2CAP command codes */
100 #define L2CAP_COMMAND_REJ	0x01
101 #define L2CAP_CONN_REQ		0x02
102 #define L2CAP_CONN_RSP		0x03
103 #define L2CAP_CONF_REQ		0x04
104 #define L2CAP_CONF_RSP		0x05
105 #define L2CAP_DISCONN_REQ	0x06
106 #define L2CAP_DISCONN_RSP	0x07
107 #define L2CAP_ECHO_REQ		0x08
108 #define L2CAP_ECHO_RSP		0x09
109 #define L2CAP_INFO_REQ		0x0a
110 #define L2CAP_INFO_RSP		0x0b
111 #define L2CAP_CONN_PARAM_UPDATE_REQ	0x12
112 #define L2CAP_CONN_PARAM_UPDATE_RSP	0x13
113 #define L2CAP_LE_CONN_REQ	0x14
114 #define L2CAP_LE_CONN_RSP	0x15
115 #define L2CAP_LE_CREDITS	0x16
116 #define L2CAP_ECRED_CONN_REQ	0x17
117 #define L2CAP_ECRED_CONN_RSP	0x18
118 #define L2CAP_ECRED_RECONF_REQ	0x19
119 #define L2CAP_ECRED_RECONF_RSP	0x1a
120 
121 /* L2CAP extended feature mask */
122 #define L2CAP_FEAT_FLOWCTL	0x00000001
123 #define L2CAP_FEAT_RETRANS	0x00000002
124 #define L2CAP_FEAT_BIDIR_QOS	0x00000004
125 #define L2CAP_FEAT_ERTM		0x00000008
126 #define L2CAP_FEAT_STREAMING	0x00000010
127 #define L2CAP_FEAT_FCS		0x00000020
128 #define L2CAP_FEAT_EXT_FLOW	0x00000040
129 #define L2CAP_FEAT_FIXED_CHAN	0x00000080
130 #define L2CAP_FEAT_EXT_WINDOW	0x00000100
131 #define L2CAP_FEAT_UCD		0x00000200
132 
133 /* L2CAP checksum option */
134 #define L2CAP_FCS_NONE		0x00
135 #define L2CAP_FCS_CRC16		0x01
136 
137 /* L2CAP fixed channels */
138 #define L2CAP_FC_SIG_BREDR	0x02
139 #define L2CAP_FC_CONNLESS	0x04
140 #define L2CAP_FC_ATT		0x10
141 #define L2CAP_FC_SIG_LE		0x20
142 #define L2CAP_FC_SMP_LE		0x40
143 #define L2CAP_FC_SMP_BREDR	0x80
144 
145 /* L2CAP Control Field bit masks */
146 #define L2CAP_CTRL_SAR			0xC000
147 #define L2CAP_CTRL_REQSEQ		0x3F00
148 #define L2CAP_CTRL_TXSEQ		0x007E
149 #define L2CAP_CTRL_SUPERVISE		0x000C
150 
151 #define L2CAP_CTRL_RETRANS		0x0080
152 #define L2CAP_CTRL_FINAL		0x0080
153 #define L2CAP_CTRL_POLL			0x0010
154 #define L2CAP_CTRL_FRAME_TYPE		0x0001 /* I- or S-Frame */
155 
156 #define L2CAP_CTRL_TXSEQ_SHIFT		1
157 #define L2CAP_CTRL_SUPER_SHIFT		2
158 #define L2CAP_CTRL_POLL_SHIFT		4
159 #define L2CAP_CTRL_FINAL_SHIFT		7
160 #define L2CAP_CTRL_REQSEQ_SHIFT		8
161 #define L2CAP_CTRL_SAR_SHIFT		14
162 
163 /* L2CAP Extended Control Field bit mask */
164 #define L2CAP_EXT_CTRL_TXSEQ		0xFFFC0000
165 #define L2CAP_EXT_CTRL_SAR		0x00030000
166 #define L2CAP_EXT_CTRL_SUPERVISE	0x00030000
167 #define L2CAP_EXT_CTRL_REQSEQ		0x0000FFFC
168 
169 #define L2CAP_EXT_CTRL_POLL		0x00040000
170 #define L2CAP_EXT_CTRL_FINAL		0x00000002
171 #define L2CAP_EXT_CTRL_FRAME_TYPE	0x00000001 /* I- or S-Frame */
172 
173 #define L2CAP_EXT_CTRL_FINAL_SHIFT	1
174 #define L2CAP_EXT_CTRL_REQSEQ_SHIFT	2
175 #define L2CAP_EXT_CTRL_SAR_SHIFT	16
176 #define L2CAP_EXT_CTRL_SUPER_SHIFT	16
177 #define L2CAP_EXT_CTRL_POLL_SHIFT	18
178 #define L2CAP_EXT_CTRL_TXSEQ_SHIFT	18
179 
180 /* L2CAP Supervisory Function */
181 #define L2CAP_SUPER_RR		0x00
182 #define L2CAP_SUPER_REJ		0x01
183 #define L2CAP_SUPER_RNR		0x02
184 #define L2CAP_SUPER_SREJ	0x03
185 
186 /* L2CAP Segmentation and Reassembly */
187 #define L2CAP_SAR_UNSEGMENTED	0x00
188 #define L2CAP_SAR_START		0x01
189 #define L2CAP_SAR_END		0x02
190 #define L2CAP_SAR_CONTINUE	0x03
191 
192 /* L2CAP Command rej. reasons */
193 #define L2CAP_REJ_NOT_UNDERSTOOD	0x0000
194 #define L2CAP_REJ_MTU_EXCEEDED		0x0001
195 #define L2CAP_REJ_INVALID_CID		0x0002
196 
197 /* L2CAP structures */
198 struct l2cap_hdr {
199 	__le16     len;
200 	__le16     cid;
201 } __packed;
202 #define L2CAP_LEN_SIZE		2
203 #define L2CAP_HDR_SIZE		4
204 #define L2CAP_ENH_HDR_SIZE	6
205 #define L2CAP_EXT_HDR_SIZE	8
206 
207 #define L2CAP_FCS_SIZE		2
208 #define L2CAP_SDULEN_SIZE	2
209 #define L2CAP_PSMLEN_SIZE	2
210 #define L2CAP_ENH_CTRL_SIZE	2
211 #define L2CAP_EXT_CTRL_SIZE	4
212 
213 struct l2cap_cmd_hdr {
214 	__u8       code;
215 	__u8       ident;
216 	__le16     len;
217 } __packed;
218 #define L2CAP_CMD_HDR_SIZE	4
219 
220 struct l2cap_cmd_rej_unk {
221 	__le16     reason;
222 } __packed;
223 
224 struct l2cap_cmd_rej_mtu {
225 	__le16     reason;
226 	__le16     max_mtu;
227 } __packed;
228 
229 struct l2cap_cmd_rej_cid {
230 	__le16     reason;
231 	__le16     scid;
232 	__le16     dcid;
233 } __packed;
234 
235 struct l2cap_conn_req {
236 	__le16     psm;
237 	__le16     scid;
238 } __packed;
239 
240 struct l2cap_conn_rsp {
241 	__le16     dcid;
242 	__le16     scid;
243 	__le16     result;
244 	__le16     status;
245 } __packed;
246 
247 /* protocol/service multiplexer (PSM) */
248 #define L2CAP_PSM_SDP		0x0001
249 #define L2CAP_PSM_RFCOMM	0x0003
250 #define L2CAP_PSM_3DSP		0x0021
251 #define L2CAP_PSM_IPSP		0x0023 /* 6LoWPAN */
252 
253 #define L2CAP_PSM_DYN_START	0x1001
254 #define L2CAP_PSM_DYN_END	0xffff
255 #define L2CAP_PSM_AUTO_END	0x10ff
256 #define L2CAP_PSM_LE_DYN_START  0x0080
257 #define L2CAP_PSM_LE_DYN_END	0x00ff
258 
259 /* channel identifier */
260 #define L2CAP_CID_SIGNALING	0x0001
261 #define L2CAP_CID_CONN_LESS	0x0002
262 #define L2CAP_CID_ATT		0x0004
263 #define L2CAP_CID_LE_SIGNALING	0x0005
264 #define L2CAP_CID_SMP		0x0006
265 #define L2CAP_CID_SMP_BREDR	0x0007
266 #define L2CAP_CID_DYN_START	0x0040
267 #define L2CAP_CID_DYN_END	0xffff
268 #define L2CAP_CID_LE_DYN_END	0x007f
269 
270 /* connect/create channel results */
271 #define L2CAP_CR_SUCCESS	0x0000
272 #define L2CAP_CR_PEND		0x0001
273 #define L2CAP_CR_BAD_PSM	0x0002
274 #define L2CAP_CR_SEC_BLOCK	0x0003
275 #define L2CAP_CR_NO_MEM		0x0004
276 #define L2CAP_CR_INVALID_SCID	0x0006
277 #define L2CAP_CR_SCID_IN_USE	0x0007
278 
279 /* credit based connect results */
280 #define L2CAP_CR_LE_SUCCESS		0x0000
281 #define L2CAP_CR_LE_BAD_PSM		0x0002
282 #define L2CAP_CR_LE_NO_MEM		0x0004
283 #define L2CAP_CR_LE_AUTHENTICATION	0x0005
284 #define L2CAP_CR_LE_AUTHORIZATION	0x0006
285 #define L2CAP_CR_LE_BAD_KEY_SIZE	0x0007
286 #define L2CAP_CR_LE_ENCRYPTION		0x0008
287 #define L2CAP_CR_LE_INVALID_SCID	0x0009
288 #define L2CAP_CR_LE_SCID_IN_USE		0X000A
289 #define L2CAP_CR_LE_UNACCEPT_PARAMS	0X000B
290 #define L2CAP_CR_LE_INVALID_PARAMS	0X000C
291 
292 /* connect/create channel status */
293 #define L2CAP_CS_NO_INFO	0x0000
294 #define L2CAP_CS_AUTHEN_PEND	0x0001
295 #define L2CAP_CS_AUTHOR_PEND	0x0002
296 
297 struct l2cap_conf_req {
298 	__le16     dcid;
299 	__le16     flags;
300 	__u8       data[];
301 } __packed;
302 
303 struct l2cap_conf_rsp {
304 	__le16     scid;
305 	__le16     flags;
306 	__le16     result;
307 	__u8       data[];
308 } __packed;
309 
310 #define L2CAP_CONF_SUCCESS	0x0000
311 #define L2CAP_CONF_UNACCEPT	0x0001
312 #define L2CAP_CONF_REJECT	0x0002
313 #define L2CAP_CONF_UNKNOWN	0x0003
314 #define L2CAP_CONF_PENDING	0x0004
315 #define L2CAP_CONF_EFS_REJECT	0x0005
316 
317 /* configuration req/rsp continuation flag */
318 #define L2CAP_CONF_FLAG_CONTINUATION	0x0001
319 
320 struct l2cap_conf_opt {
321 	__u8       type;
322 	__u8       len;
323 	__u8       val[];
324 } __packed;
325 #define L2CAP_CONF_OPT_SIZE	2
326 
327 #define L2CAP_CONF_HINT		0x80
328 #define L2CAP_CONF_MASK		0x7f
329 
330 #define L2CAP_CONF_MTU		0x01
331 #define L2CAP_CONF_FLUSH_TO	0x02
332 #define L2CAP_CONF_QOS		0x03
333 #define L2CAP_CONF_RFC		0x04
334 #define L2CAP_CONF_FCS		0x05
335 #define L2CAP_CONF_EFS		0x06
336 #define L2CAP_CONF_EWS		0x07
337 
338 #define L2CAP_CONF_MAX_SIZE	22
339 
340 struct l2cap_conf_rfc {
341 	__u8       mode;
342 	__u8       txwin_size;
343 	__u8       max_transmit;
344 	__le16     retrans_timeout;
345 	__le16     monitor_timeout;
346 	__le16     max_pdu_size;
347 } __packed;
348 
349 #define L2CAP_MODE_BASIC	0x00
350 #define L2CAP_MODE_RETRANS	0x01
351 #define L2CAP_MODE_FLOWCTL	0x02
352 #define L2CAP_MODE_ERTM		0x03
353 #define L2CAP_MODE_STREAMING	0x04
354 
355 /* Unlike the above this one doesn't actually map to anything that would
356  * ever be sent over the air. Therefore, use a value that's unlikely to
357  * ever be used in the BR/EDR configuration phase.
358  */
359 #define L2CAP_MODE_LE_FLOWCTL	0x80
360 #define L2CAP_MODE_EXT_FLOWCTL	0x81
361 
362 struct l2cap_conf_efs {
363 	__u8	id;
364 	__u8	stype;
365 	__le16	msdu;
366 	__le32	sdu_itime;
367 	__le32	acc_lat;
368 	__le32	flush_to;
369 } __packed;
370 
371 #define L2CAP_SERV_NOTRAFIC	0x00
372 #define L2CAP_SERV_BESTEFFORT	0x01
373 #define L2CAP_SERV_GUARANTEED	0x02
374 
375 #define L2CAP_BESTEFFORT_ID	0x01
376 
377 struct l2cap_disconn_req {
378 	__le16     dcid;
379 	__le16     scid;
380 } __packed;
381 
382 struct l2cap_disconn_rsp {
383 	__le16     dcid;
384 	__le16     scid;
385 } __packed;
386 
387 struct l2cap_info_req {
388 	__le16      type;
389 } __packed;
390 
391 struct l2cap_info_rsp {
392 	__le16      type;
393 	__le16      result;
394 	__u8        data[];
395 } __packed;
396 
397 #define L2CAP_MR_SUCCESS	0x0000
398 #define L2CAP_MR_PEND		0x0001
399 #define L2CAP_MR_BAD_ID		0x0002
400 #define L2CAP_MR_SAME_ID	0x0003
401 #define L2CAP_MR_NOT_SUPP	0x0004
402 #define L2CAP_MR_COLLISION	0x0005
403 #define L2CAP_MR_NOT_ALLOWED	0x0006
404 
405 struct l2cap_move_chan_cfm {
406 	__le16      icid;
407 	__le16      result;
408 } __packed;
409 
410 #define L2CAP_MC_CONFIRMED	0x0000
411 #define L2CAP_MC_UNCONFIRMED	0x0001
412 
413 struct l2cap_move_chan_cfm_rsp {
414 	__le16      icid;
415 } __packed;
416 
417 /* info type */
418 #define L2CAP_IT_CL_MTU		0x0001
419 #define L2CAP_IT_FEAT_MASK	0x0002
420 #define L2CAP_IT_FIXED_CHAN	0x0003
421 
422 /* info result */
423 #define L2CAP_IR_SUCCESS	0x0000
424 #define L2CAP_IR_NOTSUPP	0x0001
425 
426 struct l2cap_conn_param_update_req {
427 	__le16      min;
428 	__le16      max;
429 	__le16      latency;
430 	__le16      to_multiplier;
431 } __packed;
432 
433 struct l2cap_conn_param_update_rsp {
434 	__le16      result;
435 } __packed;
436 
437 /* Connection Parameters result */
438 #define L2CAP_CONN_PARAM_ACCEPTED	0x0000
439 #define L2CAP_CONN_PARAM_REJECTED	0x0001
440 
441 struct l2cap_le_conn_req {
442 	__le16     psm;
443 	__le16     scid;
444 	__le16     mtu;
445 	__le16     mps;
446 	__le16     credits;
447 } __packed;
448 
449 struct l2cap_le_conn_rsp {
450 	__le16     dcid;
451 	__le16     mtu;
452 	__le16     mps;
453 	__le16     credits;
454 	__le16     result;
455 } __packed;
456 
457 struct l2cap_le_credits {
458 	__le16     cid;
459 	__le16     credits;
460 } __packed;
461 
462 #define L2CAP_ECRED_MIN_MTU		64
463 #define L2CAP_ECRED_MIN_MPS		64
464 #define L2CAP_ECRED_MAX_CID		5
465 
466 struct l2cap_ecred_conn_req {
467 	/* New members must be added within the struct_group() macro below. */
468 	__struct_group(l2cap_ecred_conn_req_hdr, hdr, __packed,
469 		__le16 psm;
470 		__le16 mtu;
471 		__le16 mps;
472 		__le16 credits;
473 	);
474 	__le16 scid[];
475 } __packed;
476 
477 struct l2cap_ecred_conn_rsp {
478 	/* New members must be added within the struct_group() macro below. */
479 	struct_group_tagged(l2cap_ecred_conn_rsp_hdr, hdr,
480 		__le16 mtu;
481 		__le16 mps;
482 		__le16 credits;
483 		__le16 result;
484 	);
485 	__le16 dcid[];
486 };
487 
488 struct l2cap_ecred_reconf_req {
489 	__le16 mtu;
490 	__le16 mps;
491 	__le16 scid[];
492 } __packed;
493 
494 #define L2CAP_RECONF_SUCCESS		0x0000
495 #define L2CAP_RECONF_INVALID_MTU	0x0001
496 #define L2CAP_RECONF_INVALID_MPS	0x0002
497 
498 struct l2cap_ecred_reconf_rsp {
499 	__le16 result;
500 } __packed;
501 
502 /* ----- L2CAP channels and connections ----- */
503 struct l2cap_seq_list {
504 	__u16	head;
505 	__u16	tail;
506 	__u16	mask;
507 	__u16	*list;
508 };
509 
510 #define L2CAP_SEQ_LIST_CLEAR	0xFFFF
511 #define L2CAP_SEQ_LIST_TAIL	0x8000
512 
513 struct l2cap_chan {
514 	struct l2cap_conn	*conn;
515 	struct kref	kref;
516 	atomic_t	nesting;
517 
518 	__u8		state;
519 
520 	bdaddr_t	dst;
521 	__u8		dst_type;
522 	bdaddr_t	src;
523 	__u8		src_type;
524 	__le16		psm;
525 	__le16		sport;
526 	__u16		dcid;
527 	__u16		scid;
528 
529 	__u16		imtu;
530 	__u16		omtu;
531 	__u16		flush_to;
532 	__u8		mode;
533 	__u8		chan_type;
534 	__u8		chan_policy;
535 
536 	__u8		sec_level;
537 
538 	__u8		ident;
539 
540 	__u8		conf_req[64];
541 	__u8		conf_len;
542 	__u8		num_conf_req;
543 	__u8		num_conf_rsp;
544 
545 	__u8		fcs;
546 
547 	__u16		tx_win;
548 	__u16		tx_win_max;
549 	__u16		ack_win;
550 	__u8		max_tx;
551 	__u16		retrans_timeout;
552 	__u16		monitor_timeout;
553 	__u16		mps;
554 
555 	__u16		tx_credits;
556 	__u16		rx_credits;
557 
558 	/* estimated available receive buffer space or -1 if unknown */
559 	ssize_t		rx_avail;
560 
561 	__u8		tx_state;
562 	__u8		rx_state;
563 
564 	unsigned long	conf_state;
565 	unsigned long	conn_state;
566 	unsigned long	flags;
567 
568 	__u16		next_tx_seq;
569 	__u16		expected_ack_seq;
570 	__u16		expected_tx_seq;
571 	__u16		buffer_seq;
572 	__u16		srej_save_reqseq;
573 	__u16		last_acked_seq;
574 	__u16		frames_sent;
575 	__u16		unacked_frames;
576 	__u8		retry_count;
577 	__u16		sdu_len;
578 	struct sk_buff	*sdu;
579 	struct sk_buff	*sdu_last_frag;
580 
581 	__u16		remote_tx_win;
582 	__u8		remote_max_tx;
583 	__u16		remote_mps;
584 
585 	__u8		local_id;
586 	__u8		local_stype;
587 	__u16		local_msdu;
588 	__u32		local_sdu_itime;
589 	__u32		local_acc_lat;
590 	__u32		local_flush_to;
591 
592 	__u8		remote_id;
593 	__u8		remote_stype;
594 	__u16		remote_msdu;
595 	__u32		remote_sdu_itime;
596 	__u32		remote_acc_lat;
597 	__u32		remote_flush_to;
598 
599 	struct delayed_work	chan_timer;
600 	struct delayed_work	retrans_timer;
601 	struct delayed_work	monitor_timer;
602 	struct delayed_work	ack_timer;
603 
604 	struct sk_buff		*tx_send_head;
605 	struct sk_buff_head	tx_q;
606 	struct sk_buff_head	srej_q;
607 	struct l2cap_seq_list	srej_list;
608 	struct l2cap_seq_list	retrans_list;
609 
610 	struct list_head	list;
611 	struct list_head	global_l;
612 
613 	void			*data;
614 	const struct l2cap_ops	*ops;
615 	struct mutex		lock;
616 
617 	ANDROID_KABI_RESERVE(1);
618 	ANDROID_KABI_RESERVE(2);
619 };
620 
621 struct l2cap_ops {
622 	char			*name;
623 
624 	struct l2cap_chan	*(*new_connection) (struct l2cap_chan *chan);
625 	int			(*recv) (struct l2cap_chan * chan,
626 					 struct sk_buff *skb);
627 	void			(*teardown) (struct l2cap_chan *chan, int err);
628 	void			(*close) (struct l2cap_chan *chan);
629 	void			(*state_change) (struct l2cap_chan *chan,
630 						 int state, int err);
631 	void			(*ready) (struct l2cap_chan *chan);
632 	void			(*defer) (struct l2cap_chan *chan);
633 	void			(*resume) (struct l2cap_chan *chan);
634 	void			(*suspend) (struct l2cap_chan *chan);
635 	void			(*set_shutdown) (struct l2cap_chan *chan);
636 	long			(*get_sndtimeo) (struct l2cap_chan *chan);
637 	struct pid		*(*get_peer_pid) (struct l2cap_chan *chan);
638 	struct sk_buff		*(*alloc_skb) (struct l2cap_chan *chan,
639 					       unsigned long hdr_len,
640 					       unsigned long len, int nb);
641 	int			(*filter) (struct l2cap_chan * chan,
642 					   struct sk_buff *skb);
643 
644 	ANDROID_KABI_RESERVE(1);
645 	ANDROID_KABI_RESERVE(2);
646 };
647 
648 struct l2cap_conn {
649 	struct hci_conn		*hcon;
650 	struct hci_chan		*hchan;
651 
652 	unsigned int		mtu;
653 
654 	__u32			feat_mask;
655 	__u8			remote_fixed_chan;
656 	__u8			local_fixed_chan;
657 
658 	__u8			info_state;
659 	__u8			info_ident;
660 
661 	struct delayed_work	info_timer;
662 
663 	struct sk_buff		*rx_skb;
664 	__u32			rx_len;
665 	__u8			tx_ident;
666 	struct mutex		ident_lock;
667 
668 	struct sk_buff_head	pending_rx;
669 	struct work_struct	pending_rx_work;
670 
671 	struct delayed_work	id_addr_timer;
672 
673 	__u8			disc_reason;
674 
675 	struct l2cap_chan	*smp;
676 
677 	struct list_head	chan_l;
678 	struct mutex		lock;
679 	struct kref		ref;
680 	struct list_head	users;
681 
682 	ANDROID_KABI_RESERVE(1);
683 	ANDROID_KABI_RESERVE(2);
684 };
685 
686 struct l2cap_user {
687 	struct list_head list;
688 	int (*probe) (struct l2cap_conn *conn, struct l2cap_user *user);
689 	void (*remove) (struct l2cap_conn *conn, struct l2cap_user *user);
690 };
691 
692 #define L2CAP_INFO_CL_MTU_REQ_SENT	0x01
693 #define L2CAP_INFO_FEAT_MASK_REQ_SENT	0x04
694 #define L2CAP_INFO_FEAT_MASK_REQ_DONE	0x08
695 
696 #define L2CAP_CHAN_RAW			1
697 #define L2CAP_CHAN_CONN_LESS		2
698 #define L2CAP_CHAN_CONN_ORIENTED	3
699 #define L2CAP_CHAN_FIXED		4
700 
701 /* ----- L2CAP socket info ----- */
702 #define l2cap_pi(sk) ((struct l2cap_pinfo *) sk)
703 
704 struct l2cap_rx_busy {
705 	struct list_head	list;
706 	struct sk_buff		*skb;
707 };
708 
709 struct l2cap_pinfo {
710 	struct bt_sock		bt;
711 	struct l2cap_chan	*chan;
712 	struct list_head	rx_busy;
713 };
714 
715 enum {
716 	CONF_REQ_SENT,
717 	CONF_INPUT_DONE,
718 	CONF_OUTPUT_DONE,
719 	CONF_MTU_DONE,
720 	CONF_MODE_DONE,
721 	CONF_CONNECT_PEND,
722 	CONF_RECV_NO_FCS,
723 	CONF_STATE2_DEVICE,
724 	CONF_EWS_RECV,
725 	CONF_LOC_CONF_PEND,
726 	CONF_REM_CONF_PEND,
727 	CONF_NOT_COMPLETE,
728 };
729 
730 #define L2CAP_CONF_MAX_CONF_REQ 2
731 #define L2CAP_CONF_MAX_CONF_RSP 2
732 
733 enum {
734 	CONN_SREJ_SENT,
735 	CONN_WAIT_F,
736 	CONN_SREJ_ACT,
737 	CONN_SEND_PBIT,
738 	CONN_REMOTE_BUSY,
739 	CONN_LOCAL_BUSY,
740 	CONN_REJ_ACT,
741 	CONN_SEND_FBIT,
742 	CONN_RNR_SENT,
743 };
744 
745 /* Definitions for flags in l2cap_chan */
746 enum {
747 	FLAG_ROLE_SWITCH,
748 	FLAG_FORCE_ACTIVE,
749 	FLAG_FORCE_RELIABLE,
750 	FLAG_FLUSHABLE,
751 	FLAG_EXT_CTRL,
752 	FLAG_EFS_ENABLE,
753 	FLAG_DEFER_SETUP,
754 	FLAG_LE_CONN_REQ_SENT,
755 	FLAG_ECRED_CONN_REQ_SENT,
756 	FLAG_PENDING_SECURITY,
757 	FLAG_HOLD_HCI_CONN,
758 };
759 
760 /* Lock nesting levels for L2CAP channels. We need these because lockdep
761  * otherwise considers all channels equal and will e.g. complain about a
762  * connection oriented channel triggering SMP procedures or a listening
763  * channel creating and locking a child channel.
764  */
765 enum {
766 	L2CAP_NESTING_SMP,
767 	L2CAP_NESTING_NORMAL,
768 	L2CAP_NESTING_PARENT,
769 };
770 
771 enum {
772 	L2CAP_TX_STATE_XMIT,
773 	L2CAP_TX_STATE_WAIT_F,
774 };
775 
776 enum {
777 	L2CAP_RX_STATE_RECV,
778 	L2CAP_RX_STATE_SREJ_SENT,
779 	L2CAP_RX_STATE_MOVE,
780 	L2CAP_RX_STATE_WAIT_P,
781 	L2CAP_RX_STATE_WAIT_F,
782 };
783 
784 enum {
785 	L2CAP_TXSEQ_EXPECTED,
786 	L2CAP_TXSEQ_EXPECTED_SREJ,
787 	L2CAP_TXSEQ_UNEXPECTED,
788 	L2CAP_TXSEQ_UNEXPECTED_SREJ,
789 	L2CAP_TXSEQ_DUPLICATE,
790 	L2CAP_TXSEQ_DUPLICATE_SREJ,
791 	L2CAP_TXSEQ_INVALID,
792 	L2CAP_TXSEQ_INVALID_IGNORE,
793 };
794 
795 enum {
796 	L2CAP_EV_DATA_REQUEST,
797 	L2CAP_EV_LOCAL_BUSY_DETECTED,
798 	L2CAP_EV_LOCAL_BUSY_CLEAR,
799 	L2CAP_EV_RECV_REQSEQ_AND_FBIT,
800 	L2CAP_EV_RECV_FBIT,
801 	L2CAP_EV_RETRANS_TO,
802 	L2CAP_EV_MONITOR_TO,
803 	L2CAP_EV_EXPLICIT_POLL,
804 	L2CAP_EV_RECV_IFRAME,
805 	L2CAP_EV_RECV_RR,
806 	L2CAP_EV_RECV_REJ,
807 	L2CAP_EV_RECV_RNR,
808 	L2CAP_EV_RECV_SREJ,
809 	L2CAP_EV_RECV_FRAME,
810 };
811 
812 enum {
813 	L2CAP_MOVE_ROLE_NONE,
814 	L2CAP_MOVE_ROLE_INITIATOR,
815 	L2CAP_MOVE_ROLE_RESPONDER,
816 };
817 
818 enum {
819 	L2CAP_MOVE_STABLE,
820 	L2CAP_MOVE_WAIT_REQ,
821 	L2CAP_MOVE_WAIT_RSP,
822 	L2CAP_MOVE_WAIT_RSP_SUCCESS,
823 	L2CAP_MOVE_WAIT_CONFIRM,
824 	L2CAP_MOVE_WAIT_CONFIRM_RSP,
825 	L2CAP_MOVE_WAIT_LOGICAL_COMP,
826 	L2CAP_MOVE_WAIT_LOGICAL_CFM,
827 	L2CAP_MOVE_WAIT_LOCAL_BUSY,
828 	L2CAP_MOVE_WAIT_PREPARE,
829 };
830 
831 void l2cap_chan_hold(struct l2cap_chan *c);
832 struct l2cap_chan *l2cap_chan_hold_unless_zero(struct l2cap_chan *c);
833 void l2cap_chan_put(struct l2cap_chan *c);
834 
l2cap_chan_lock(struct l2cap_chan * chan)835 static inline void l2cap_chan_lock(struct l2cap_chan *chan)
836 {
837 	mutex_lock_nested(&chan->lock, atomic_read(&chan->nesting));
838 }
839 
l2cap_chan_unlock(struct l2cap_chan * chan)840 static inline void l2cap_chan_unlock(struct l2cap_chan *chan)
841 {
842 	mutex_unlock(&chan->lock);
843 }
844 
l2cap_set_timer(struct l2cap_chan * chan,struct delayed_work * work,long timeout)845 static inline void l2cap_set_timer(struct l2cap_chan *chan,
846 				   struct delayed_work *work, long timeout)
847 {
848 	BT_DBG("chan %p state %s timeout %ld", chan,
849 	       state_to_string(chan->state), timeout);
850 
851 	/* If delayed work cancelled do not hold(chan)
852 	   since it is already done with previous set_timer */
853 	if (!cancel_delayed_work(work))
854 		l2cap_chan_hold(chan);
855 
856 	schedule_delayed_work(work, timeout);
857 }
858 
l2cap_clear_timer(struct l2cap_chan * chan,struct delayed_work * work)859 static inline bool l2cap_clear_timer(struct l2cap_chan *chan,
860 				     struct delayed_work *work)
861 {
862 	bool ret;
863 
864 	/* put(chan) if delayed work cancelled otherwise it
865 	   is done in delayed work function */
866 	ret = cancel_delayed_work(work);
867 	if (ret)
868 		l2cap_chan_put(chan);
869 
870 	return ret;
871 }
872 
873 #define __set_chan_timer(c, t) l2cap_set_timer(c, &c->chan_timer, (t))
874 #define __clear_chan_timer(c) l2cap_clear_timer(c, &c->chan_timer)
875 #define __clear_retrans_timer(c) l2cap_clear_timer(c, &c->retrans_timer)
876 #define __clear_monitor_timer(c) l2cap_clear_timer(c, &c->monitor_timer)
877 #define __set_ack_timer(c) l2cap_set_timer(c, &chan->ack_timer, \
878 		msecs_to_jiffies(L2CAP_DEFAULT_ACK_TO));
879 #define __clear_ack_timer(c) l2cap_clear_timer(c, &c->ack_timer)
880 
__seq_offset(struct l2cap_chan * chan,__u16 seq1,__u16 seq2)881 static inline int __seq_offset(struct l2cap_chan *chan, __u16 seq1, __u16 seq2)
882 {
883 	if (seq1 >= seq2)
884 		return seq1 - seq2;
885 	else
886 		return chan->tx_win_max + 1 - seq2 + seq1;
887 }
888 
__next_seq(struct l2cap_chan * chan,__u16 seq)889 static inline __u16 __next_seq(struct l2cap_chan *chan, __u16 seq)
890 {
891 	return (seq + 1) % (chan->tx_win_max + 1);
892 }
893 
l2cap_chan_no_new_connection(struct l2cap_chan * chan)894 static inline struct l2cap_chan *l2cap_chan_no_new_connection(struct l2cap_chan *chan)
895 {
896 	return NULL;
897 }
898 
l2cap_chan_no_recv(struct l2cap_chan * chan,struct sk_buff * skb)899 static inline int l2cap_chan_no_recv(struct l2cap_chan *chan, struct sk_buff *skb)
900 {
901 	return -ENOSYS;
902 }
903 
l2cap_chan_no_alloc_skb(struct l2cap_chan * chan,unsigned long hdr_len,unsigned long len,int nb)904 static inline struct sk_buff *l2cap_chan_no_alloc_skb(struct l2cap_chan *chan,
905 						      unsigned long hdr_len,
906 						      unsigned long len, int nb)
907 {
908 	return ERR_PTR(-ENOSYS);
909 }
910 
l2cap_chan_no_teardown(struct l2cap_chan * chan,int err)911 static inline void l2cap_chan_no_teardown(struct l2cap_chan *chan, int err)
912 {
913 }
914 
l2cap_chan_no_close(struct l2cap_chan * chan)915 static inline void l2cap_chan_no_close(struct l2cap_chan *chan)
916 {
917 }
918 
l2cap_chan_no_ready(struct l2cap_chan * chan)919 static inline void l2cap_chan_no_ready(struct l2cap_chan *chan)
920 {
921 }
922 
l2cap_chan_no_state_change(struct l2cap_chan * chan,int state,int err)923 static inline void l2cap_chan_no_state_change(struct l2cap_chan *chan,
924 					      int state, int err)
925 {
926 }
927 
l2cap_chan_no_defer(struct l2cap_chan * chan)928 static inline void l2cap_chan_no_defer(struct l2cap_chan *chan)
929 {
930 }
931 
l2cap_chan_no_suspend(struct l2cap_chan * chan)932 static inline void l2cap_chan_no_suspend(struct l2cap_chan *chan)
933 {
934 }
935 
l2cap_chan_no_resume(struct l2cap_chan * chan)936 static inline void l2cap_chan_no_resume(struct l2cap_chan *chan)
937 {
938 }
939 
l2cap_chan_no_set_shutdown(struct l2cap_chan * chan)940 static inline void l2cap_chan_no_set_shutdown(struct l2cap_chan *chan)
941 {
942 }
943 
l2cap_chan_no_get_sndtimeo(struct l2cap_chan * chan)944 static inline long l2cap_chan_no_get_sndtimeo(struct l2cap_chan *chan)
945 {
946 	return 0;
947 }
948 
949 extern bool disable_ertm;
950 extern bool enable_ecred;
951 
952 int l2cap_init_sockets(void);
953 void l2cap_cleanup_sockets(void);
954 bool l2cap_is_socket(struct socket *sock);
955 
956 void __l2cap_le_connect_rsp_defer(struct l2cap_chan *chan);
957 void __l2cap_ecred_conn_rsp_defer(struct l2cap_chan *chan);
958 void __l2cap_connect_rsp_defer(struct l2cap_chan *chan);
959 
960 int l2cap_add_psm(struct l2cap_chan *chan, bdaddr_t *src, __le16 psm);
961 int l2cap_add_scid(struct l2cap_chan *chan,  __u16 scid);
962 
963 struct l2cap_chan *l2cap_chan_create(void);
964 void l2cap_chan_close(struct l2cap_chan *chan, int reason);
965 int l2cap_chan_connect(struct l2cap_chan *chan, __le16 psm, u16 cid,
966 		       bdaddr_t *dst, u8 dst_type, u16 timeout);
967 int l2cap_chan_reconfigure(struct l2cap_chan *chan, __u16 mtu);
968 int l2cap_chan_send(struct l2cap_chan *chan, struct msghdr *msg, size_t len);
969 void l2cap_chan_busy(struct l2cap_chan *chan, int busy);
970 void l2cap_chan_rx_avail(struct l2cap_chan *chan, ssize_t rx_avail);
971 int l2cap_chan_check_security(struct l2cap_chan *chan, bool initiator);
972 void l2cap_chan_set_defaults(struct l2cap_chan *chan);
973 int l2cap_ertm_init(struct l2cap_chan *chan);
974 void l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan);
975 void __l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan);
976 typedef void (*l2cap_chan_func_t)(struct l2cap_chan *chan, void *data);
977 void l2cap_chan_list(struct l2cap_conn *conn, l2cap_chan_func_t func,
978 		     void *data);
979 void l2cap_chan_del(struct l2cap_chan *chan, int err);
980 void l2cap_send_conn_req(struct l2cap_chan *chan);
981 
982 struct l2cap_conn *l2cap_conn_get(struct l2cap_conn *conn);
983 struct l2cap_conn *l2cap_conn_hold_unless_zero(struct l2cap_conn *conn);
984 void l2cap_conn_put(struct l2cap_conn *conn);
985 
986 int l2cap_register_user(struct l2cap_conn *conn, struct l2cap_user *user);
987 void l2cap_unregister_user(struct l2cap_conn *conn, struct l2cap_user *user);
988 
989 #endif /* __L2CAP_H */
990