hci_socket.c revision 1.1.2.6
1 1.1.2.6 yamt /* $NetBSD: hci_socket.c,v 1.1.2.6 2007/11/15 11:45:04 yamt Exp $ */ 2 1.1.2.2 yamt 3 1.1.2.2 yamt /*- 4 1.1.2.2 yamt * Copyright (c) 2005 Iain Hibbert. 5 1.1.2.2 yamt * Copyright (c) 2006 Itronix Inc. 6 1.1.2.2 yamt * All rights reserved. 7 1.1.2.2 yamt * 8 1.1.2.2 yamt * Redistribution and use in source and binary forms, with or without 9 1.1.2.2 yamt * modification, are permitted provided that the following conditions 10 1.1.2.2 yamt * are met: 11 1.1.2.2 yamt * 1. Redistributions of source code must retain the above copyright 12 1.1.2.2 yamt * notice, this list of conditions and the following disclaimer. 13 1.1.2.2 yamt * 2. Redistributions in binary form must reproduce the above copyright 14 1.1.2.2 yamt * notice, this list of conditions and the following disclaimer in the 15 1.1.2.2 yamt * documentation and/or other materials provided with the distribution. 16 1.1.2.2 yamt * 3. The name of Itronix Inc. may not be used to endorse 17 1.1.2.2 yamt * or promote products derived from this software without specific 18 1.1.2.2 yamt * prior written permission. 19 1.1.2.2 yamt * 20 1.1.2.2 yamt * THIS SOFTWARE IS PROVIDED BY ITRONIX INC. ``AS IS'' AND 21 1.1.2.2 yamt * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED 22 1.1.2.2 yamt * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 23 1.1.2.2 yamt * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL ITRONIX INC. BE LIABLE FOR ANY 24 1.1.2.2 yamt * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES 25 1.1.2.2 yamt * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 26 1.1.2.2 yamt * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND 27 1.1.2.2 yamt * ON ANY THEORY OF LIABILITY, WHETHER IN 28 1.1.2.2 yamt * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 29 1.1.2.2 yamt * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 30 1.1.2.2 yamt * POSSIBILITY OF SUCH DAMAGE. 31 1.1.2.2 yamt */ 32 1.1.2.2 yamt 33 1.1.2.2 yamt #include <sys/cdefs.h> 34 1.1.2.6 yamt __KERNEL_RCSID(0, "$NetBSD: hci_socket.c,v 1.1.2.6 2007/11/15 11:45:04 yamt Exp $"); 35 1.1.2.2 yamt 36 1.1.2.5 yamt /* load symbolic names */ 37 1.1.2.2 yamt #ifdef BLUETOOTH_DEBUG 38 1.1.2.5 yamt #define PRUREQUESTS 39 1.1.2.2 yamt #define PRCOREQUESTS 40 1.1.2.2 yamt #endif 41 1.1.2.2 yamt 42 1.1.2.2 yamt #include <sys/param.h> 43 1.1.2.2 yamt #include <sys/domain.h> 44 1.1.2.2 yamt #include <sys/kauth.h> 45 1.1.2.2 yamt #include <sys/kernel.h> 46 1.1.2.2 yamt #include <sys/mbuf.h> 47 1.1.2.2 yamt #include <sys/proc.h> 48 1.1.2.2 yamt #include <sys/protosw.h> 49 1.1.2.2 yamt #include <sys/socket.h> 50 1.1.2.2 yamt #include <sys/socketvar.h> 51 1.1.2.2 yamt #include <sys/systm.h> 52 1.1.2.2 yamt 53 1.1.2.2 yamt #include <netbt/bluetooth.h> 54 1.1.2.2 yamt #include <netbt/hci.h> 55 1.1.2.2 yamt 56 1.1.2.2 yamt /******************************************************************************* 57 1.1.2.2 yamt * 58 1.1.2.2 yamt * HCI SOCK_RAW Sockets - for control of Bluetooth Devices 59 1.1.2.2 yamt * 60 1.1.2.2 yamt */ 61 1.1.2.2 yamt 62 1.1.2.2 yamt /* 63 1.1.2.2 yamt * the raw HCI protocol control block 64 1.1.2.2 yamt */ 65 1.1.2.2 yamt struct hci_pcb { 66 1.1.2.2 yamt struct socket *hp_socket; /* socket */ 67 1.1.2.2 yamt unsigned int hp_flags; /* flags */ 68 1.1.2.2 yamt bdaddr_t hp_laddr; /* local address */ 69 1.1.2.2 yamt bdaddr_t hp_raddr; /* remote address */ 70 1.1.2.2 yamt struct hci_filter hp_efilter; /* user event filter */ 71 1.1.2.2 yamt struct hci_filter hp_pfilter; /* user packet filter */ 72 1.1.2.2 yamt LIST_ENTRY(hci_pcb) hp_next; /* next HCI pcb */ 73 1.1.2.2 yamt }; 74 1.1.2.2 yamt 75 1.1.2.2 yamt /* hp_flags */ 76 1.1.2.2 yamt #define HCI_PRIVILEGED (1<<0) /* no security filter for root */ 77 1.1.2.2 yamt #define HCI_DIRECTION (1<<1) /* direction control messages */ 78 1.1.2.2 yamt #define HCI_PROMISCUOUS (1<<2) /* listen to all units */ 79 1.1.2.2 yamt 80 1.1.2.2 yamt LIST_HEAD(hci_pcb_list, hci_pcb) hci_pcb = LIST_HEAD_INITIALIZER(hci_pcb); 81 1.1.2.2 yamt 82 1.1.2.2 yamt /* sysctl defaults */ 83 1.1.2.2 yamt int hci_sendspace = HCI_CMD_PKT_SIZE; 84 1.1.2.2 yamt int hci_recvspace = 4096; 85 1.1.2.2 yamt 86 1.1.2.2 yamt /* 87 1.1.2.3 yamt * Security filter routines for unprivileged users. 88 1.1.2.3 yamt * Allow all but a few critical events, and only permit read commands. 89 1.1.2.2 yamt */ 90 1.1.2.2 yamt 91 1.1.2.3 yamt static int 92 1.1.2.2 yamt hci_security_check_opcode(uint16_t opcode) 93 1.1.2.2 yamt { 94 1.1.2.2 yamt 95 1.1.2.3 yamt switch (opcode) { 96 1.1.2.3 yamt /* Link control */ 97 1.1.2.3 yamt case HCI_CMD_INQUIRY: 98 1.1.2.5 yamt return sizeof(hci_inquiry_cp); 99 1.1.2.3 yamt case HCI_CMD_REMOTE_NAME_REQ: 100 1.1.2.5 yamt return sizeof(hci_remote_name_req_cp); 101 1.1.2.3 yamt case HCI_CMD_READ_REMOTE_FEATURES: 102 1.1.2.5 yamt return sizeof(hci_read_remote_features_cp); 103 1.1.2.3 yamt case HCI_CMD_READ_REMOTE_EXTENDED_FEATURES: 104 1.1.2.5 yamt return sizeof(hci_read_remote_extended_features_cp); 105 1.1.2.3 yamt case HCI_CMD_READ_REMOTE_VER_INFO: 106 1.1.2.5 yamt return sizeof(hci_read_remote_ver_info_cp); 107 1.1.2.3 yamt case HCI_CMD_READ_CLOCK_OFFSET: 108 1.1.2.5 yamt return sizeof(hci_read_clock_offset_cp); 109 1.1.2.3 yamt case HCI_CMD_READ_LMP_HANDLE: 110 1.1.2.5 yamt return sizeof(hci_read_lmp_handle_cp); 111 1.1.2.3 yamt 112 1.1.2.3 yamt /* Link policy */ 113 1.1.2.3 yamt case HCI_CMD_ROLE_DISCOVERY: 114 1.1.2.5 yamt return sizeof(hci_role_discovery_cp); 115 1.1.2.3 yamt case HCI_CMD_READ_LINK_POLICY_SETTINGS: 116 1.1.2.5 yamt return sizeof(hci_read_link_policy_settings_cp); 117 1.1.2.3 yamt case HCI_CMD_READ_DEFAULT_LINK_POLICY_SETTINGS: 118 1.1.2.5 yamt return 0; /* No command parameters */ 119 1.1.2.3 yamt 120 1.1.2.3 yamt /* Host controller and baseband */ 121 1.1.2.3 yamt case HCI_CMD_READ_PIN_TYPE: 122 1.1.2.3 yamt case HCI_CMD_READ_LOCAL_NAME: 123 1.1.2.3 yamt case HCI_CMD_READ_CON_ACCEPT_TIMEOUT: 124 1.1.2.3 yamt case HCI_CMD_READ_PAGE_TIMEOUT: 125 1.1.2.3 yamt case HCI_CMD_READ_SCAN_ENABLE: 126 1.1.2.3 yamt case HCI_CMD_READ_PAGE_SCAN_ACTIVITY: 127 1.1.2.3 yamt case HCI_CMD_READ_INQUIRY_SCAN_ACTIVITY: 128 1.1.2.3 yamt case HCI_CMD_READ_AUTH_ENABLE: 129 1.1.2.3 yamt case HCI_CMD_READ_ENCRYPTION_MODE: 130 1.1.2.3 yamt case HCI_CMD_READ_UNIT_CLASS: 131 1.1.2.3 yamt case HCI_CMD_READ_VOICE_SETTING: 132 1.1.2.5 yamt return 0; /* No command parameters */ 133 1.1.2.3 yamt case HCI_CMD_READ_AUTO_FLUSH_TIMEOUT: 134 1.1.2.5 yamt return sizeof(hci_read_auto_flush_timeout_cp); 135 1.1.2.3 yamt case HCI_CMD_READ_NUM_BROADCAST_RETRANS: 136 1.1.2.3 yamt case HCI_CMD_READ_HOLD_MODE_ACTIVITY: 137 1.1.2.5 yamt return 0; /* No command parameters */ 138 1.1.2.3 yamt case HCI_CMD_READ_XMIT_LEVEL: 139 1.1.2.5 yamt return sizeof(hci_read_xmit_level_cp); 140 1.1.2.3 yamt case HCI_CMD_READ_SCO_FLOW_CONTROL: 141 1.1.2.5 yamt return 0; /* No command parameters */ 142 1.1.2.3 yamt case HCI_CMD_READ_LINK_SUPERVISION_TIMEOUT: 143 1.1.2.5 yamt return sizeof(hci_read_link_supervision_timeout_cp); 144 1.1.2.3 yamt case HCI_CMD_READ_NUM_SUPPORTED_IAC: 145 1.1.2.3 yamt case HCI_CMD_READ_IAC_LAP: 146 1.1.2.3 yamt case HCI_CMD_READ_PAGE_SCAN_PERIOD: 147 1.1.2.3 yamt case HCI_CMD_READ_PAGE_SCAN: 148 1.1.2.3 yamt case HCI_CMD_READ_INQUIRY_SCAN_TYPE: 149 1.1.2.3 yamt case HCI_CMD_READ_INQUIRY_MODE: 150 1.1.2.3 yamt case HCI_CMD_READ_PAGE_SCAN_TYPE: 151 1.1.2.3 yamt case HCI_CMD_READ_AFH_ASSESSMENT: 152 1.1.2.5 yamt return 0; /* No command parameters */ 153 1.1.2.3 yamt 154 1.1.2.3 yamt /* Informational */ 155 1.1.2.3 yamt case HCI_CMD_READ_LOCAL_VER: 156 1.1.2.3 yamt case HCI_CMD_READ_LOCAL_COMMANDS: 157 1.1.2.3 yamt case HCI_CMD_READ_LOCAL_FEATURES: 158 1.1.2.5 yamt return 0; /* No command parameters */ 159 1.1.2.3 yamt case HCI_CMD_READ_LOCAL_EXTENDED_FEATURES: 160 1.1.2.5 yamt return sizeof(hci_read_local_extended_features_cp); 161 1.1.2.3 yamt case HCI_CMD_READ_BUFFER_SIZE: 162 1.1.2.3 yamt case HCI_CMD_READ_COUNTRY_CODE: 163 1.1.2.3 yamt case HCI_CMD_READ_BDADDR: 164 1.1.2.5 yamt return 0; /* No command parameters */ 165 1.1.2.3 yamt 166 1.1.2.3 yamt /* Status */ 167 1.1.2.3 yamt case HCI_CMD_READ_FAILED_CONTACT_CNTR: 168 1.1.2.5 yamt return sizeof(hci_read_failed_contact_cntr_cp); 169 1.1.2.3 yamt case HCI_CMD_READ_LINK_QUALITY: 170 1.1.2.5 yamt return sizeof(hci_read_link_quality_cp); 171 1.1.2.3 yamt case HCI_CMD_READ_RSSI: 172 1.1.2.5 yamt return sizeof(hci_read_rssi_cp); 173 1.1.2.3 yamt case HCI_CMD_READ_AFH_CHANNEL_MAP: 174 1.1.2.5 yamt return sizeof(hci_read_afh_channel_map_cp); 175 1.1.2.3 yamt case HCI_CMD_READ_CLOCK: 176 1.1.2.5 yamt return sizeof(hci_read_clock_cp); 177 1.1.2.3 yamt 178 1.1.2.3 yamt /* Testing */ 179 1.1.2.3 yamt case HCI_CMD_READ_LOOPBACK_MODE: 180 1.1.2.5 yamt return 0; /* No command parameters */ 181 1.1.2.3 yamt } 182 1.1.2.2 yamt 183 1.1.2.5 yamt return -1; /* disallowed */ 184 1.1.2.2 yamt } 185 1.1.2.2 yamt 186 1.1.2.2 yamt static int 187 1.1.2.3 yamt hci_security_check_event(uint8_t event) 188 1.1.2.2 yamt { 189 1.1.2.2 yamt 190 1.1.2.3 yamt switch (event) { 191 1.1.2.3 yamt case HCI_EVENT_RETURN_LINK_KEYS: 192 1.1.2.3 yamt case HCI_EVENT_LINK_KEY_NOTIFICATION: 193 1.1.2.3 yamt case HCI_EVENT_VENDOR: 194 1.1.2.5 yamt return -1; /* disallowed */ 195 1.1.2.3 yamt } 196 1.1.2.2 yamt 197 1.1.2.5 yamt return 0; /* ok */ 198 1.1.2.2 yamt } 199 1.1.2.2 yamt 200 1.1.2.2 yamt /* 201 1.1.2.2 yamt * When command packet reaches the device, we can drop 202 1.1.2.2 yamt * it from the socket buffer (called from hci_output_acl) 203 1.1.2.2 yamt */ 204 1.1.2.2 yamt void 205 1.1.2.2 yamt hci_drop(void *arg) 206 1.1.2.2 yamt { 207 1.1.2.2 yamt struct socket *so = arg; 208 1.1.2.2 yamt 209 1.1.2.2 yamt sbdroprecord(&so->so_snd); 210 1.1.2.2 yamt sowwakeup(so); 211 1.1.2.2 yamt } 212 1.1.2.2 yamt 213 1.1.2.2 yamt /* 214 1.1.2.2 yamt * HCI socket is going away and has some pending packets. We let them 215 1.1.2.2 yamt * go by design, but remove the context pointer as it will be invalid 216 1.1.2.2 yamt * and we no longer need to be notified. 217 1.1.2.2 yamt */ 218 1.1.2.2 yamt static void 219 1.1.2.2 yamt hci_cmdwait_flush(struct socket *so) 220 1.1.2.2 yamt { 221 1.1.2.2 yamt struct hci_unit *unit; 222 1.1.2.2 yamt struct socket *ctx; 223 1.1.2.2 yamt struct mbuf *m; 224 1.1.2.2 yamt 225 1.1.2.2 yamt DPRINTF("flushing %p\n", so); 226 1.1.2.2 yamt 227 1.1.2.2 yamt SIMPLEQ_FOREACH(unit, &hci_unit_list, hci_next) { 228 1.1.2.2 yamt m = MBUFQ_FIRST(&unit->hci_cmdwait); 229 1.1.2.2 yamt while (m != NULL) { 230 1.1.2.2 yamt ctx = M_GETCTX(m, struct socket *); 231 1.1.2.2 yamt if (ctx == so) 232 1.1.2.2 yamt M_SETCTX(m, NULL); 233 1.1.2.2 yamt 234 1.1.2.2 yamt m = MBUFQ_NEXT(m); 235 1.1.2.2 yamt } 236 1.1.2.2 yamt } 237 1.1.2.2 yamt } 238 1.1.2.2 yamt 239 1.1.2.2 yamt /* 240 1.1.2.2 yamt * HCI send packet 241 1.1.2.2 yamt * This came from userland, so check it out. 242 1.1.2.2 yamt */ 243 1.1.2.2 yamt static int 244 1.1.2.2 yamt hci_send(struct hci_pcb *pcb, struct mbuf *m, bdaddr_t *addr) 245 1.1.2.2 yamt { 246 1.1.2.2 yamt struct hci_unit *unit; 247 1.1.2.2 yamt struct mbuf *m0; 248 1.1.2.2 yamt hci_cmd_hdr_t hdr; 249 1.1.2.2 yamt int err; 250 1.1.2.2 yamt 251 1.1.2.5 yamt KASSERT(m != NULL); 252 1.1.2.5 yamt KASSERT(addr != NULL); 253 1.1.2.2 yamt 254 1.1.2.2 yamt /* wants at least a header to start with */ 255 1.1.2.2 yamt if (m->m_pkthdr.len < sizeof(hdr)) { 256 1.1.2.2 yamt err = EMSGSIZE; 257 1.1.2.2 yamt goto bad; 258 1.1.2.2 yamt } 259 1.1.2.2 yamt m_copydata(m, 0, sizeof(hdr), &hdr); 260 1.1.2.2 yamt 261 1.1.2.2 yamt /* only allows CMD packets to be sent */ 262 1.1.2.2 yamt if (hdr.type != HCI_CMD_PKT) { 263 1.1.2.2 yamt err = EINVAL; 264 1.1.2.2 yamt goto bad; 265 1.1.2.2 yamt } 266 1.1.2.2 yamt 267 1.1.2.2 yamt /* validates packet length */ 268 1.1.2.2 yamt if (m->m_pkthdr.len != sizeof(hdr) + hdr.length) { 269 1.1.2.2 yamt err = EMSGSIZE; 270 1.1.2.2 yamt goto bad; 271 1.1.2.2 yamt } 272 1.1.2.2 yamt 273 1.1.2.2 yamt /* security checks for unprivileged users */ 274 1.1.2.2 yamt if ((pcb->hp_flags & HCI_PRIVILEGED) == 0 275 1.1.2.5 yamt && hci_security_check_opcode(le16toh(hdr.opcode)) != hdr.length) { 276 1.1.2.2 yamt err = EPERM; 277 1.1.2.2 yamt goto bad; 278 1.1.2.2 yamt } 279 1.1.2.2 yamt 280 1.1.2.2 yamt /* finds destination */ 281 1.1.2.2 yamt unit = hci_unit_lookup(addr); 282 1.1.2.2 yamt if (unit == NULL) { 283 1.1.2.2 yamt err = ENETDOWN; 284 1.1.2.2 yamt goto bad; 285 1.1.2.2 yamt } 286 1.1.2.2 yamt 287 1.1.2.2 yamt /* makess a copy for precious to keep */ 288 1.1.2.2 yamt m0 = m_copypacket(m, M_DONTWAIT); 289 1.1.2.2 yamt if (m0 == NULL) { 290 1.1.2.2 yamt err = ENOMEM; 291 1.1.2.2 yamt goto bad; 292 1.1.2.2 yamt } 293 1.1.2.2 yamt sbappendrecord(&pcb->hp_socket->so_snd, m0); 294 1.1.2.2 yamt M_SETCTX(m, pcb->hp_socket); /* enable drop callback */ 295 1.1.2.2 yamt 296 1.1.2.6 yamt DPRINTFN(2, "(%s) opcode (%03x|%04x)\n", device_xname(unit->hci_dev), 297 1.1.2.2 yamt HCI_OGF(le16toh(hdr.opcode)), HCI_OCF(le16toh(hdr.opcode))); 298 1.1.2.2 yamt 299 1.1.2.2 yamt /* Sendss it */ 300 1.1.2.2 yamt if (unit->hci_num_cmd_pkts == 0) 301 1.1.2.2 yamt MBUFQ_ENQUEUE(&unit->hci_cmdwait, m); 302 1.1.2.2 yamt else 303 1.1.2.2 yamt hci_output_cmd(unit, m); 304 1.1.2.2 yamt 305 1.1.2.2 yamt return 0; 306 1.1.2.2 yamt 307 1.1.2.2 yamt bad: 308 1.1.2.2 yamt DPRINTF("packet (%d bytes) not sent (error %d)\n", 309 1.1.2.2 yamt m->m_pkthdr.len, err); 310 1.1.2.2 yamt if (m) m_freem(m); 311 1.1.2.2 yamt return err; 312 1.1.2.2 yamt } 313 1.1.2.2 yamt 314 1.1.2.2 yamt /* 315 1.1.2.2 yamt * User Request. 316 1.1.2.2 yamt * up is socket 317 1.1.2.2 yamt * m is either 318 1.1.2.2 yamt * optional mbuf chain containing message 319 1.1.2.2 yamt * ioctl command (PRU_CONTROL) 320 1.1.2.2 yamt * nam is either 321 1.1.2.2 yamt * optional mbuf chain containing an address 322 1.1.2.2 yamt * ioctl data (PRU_CONTROL) 323 1.1.2.2 yamt * optionally, protocol number (PRU_ATTACH) 324 1.1.2.2 yamt * ctl is optional mbuf chain containing socket options 325 1.1.2.2 yamt * l is pointer to process requesting action (if any) 326 1.1.2.2 yamt * 327 1.1.2.2 yamt * we are responsible for disposing of m and ctl if 328 1.1.2.2 yamt * they are mbuf chains 329 1.1.2.2 yamt */ 330 1.1.2.2 yamt int 331 1.1.2.2 yamt hci_usrreq(struct socket *up, int req, struct mbuf *m, 332 1.1.2.2 yamt struct mbuf *nam, struct mbuf *ctl, struct lwp *l) 333 1.1.2.2 yamt { 334 1.1.2.2 yamt struct hci_pcb *pcb = (struct hci_pcb *)up->so_pcb; 335 1.1.2.2 yamt struct sockaddr_bt *sa; 336 1.1.2.3 yamt int err = 0; 337 1.1.2.2 yamt 338 1.1.2.2 yamt DPRINTFN(2, "%s\n", prurequests[req]); 339 1.1.2.2 yamt 340 1.1.2.2 yamt switch(req) { 341 1.1.2.2 yamt case PRU_CONTROL: 342 1.1.2.3 yamt return hci_ioctl((unsigned long)m, (void *)nam, l); 343 1.1.2.2 yamt 344 1.1.2.2 yamt case PRU_PURGEIF: 345 1.1.2.2 yamt return EOPNOTSUPP; 346 1.1.2.2 yamt 347 1.1.2.2 yamt case PRU_ATTACH: 348 1.1.2.2 yamt if (pcb) 349 1.1.2.2 yamt return EINVAL; 350 1.1.2.2 yamt 351 1.1.2.2 yamt err = soreserve(up, hci_sendspace, hci_recvspace); 352 1.1.2.2 yamt if (err) 353 1.1.2.2 yamt return err; 354 1.1.2.2 yamt 355 1.1.2.2 yamt pcb = malloc(sizeof(struct hci_pcb), M_PCB, M_NOWAIT | M_ZERO); 356 1.1.2.2 yamt if (pcb == NULL) 357 1.1.2.2 yamt return ENOMEM; 358 1.1.2.2 yamt 359 1.1.2.2 yamt up->so_pcb = pcb; 360 1.1.2.2 yamt pcb->hp_socket = up; 361 1.1.2.3 yamt 362 1.1.2.4 yamt if (l == NULL || kauth_authorize_generic(l->l_cred, 363 1.1.2.4 yamt KAUTH_GENERIC_ISSUSER, NULL) == 0) 364 1.1.2.3 yamt pcb->hp_flags |= HCI_PRIVILEGED; 365 1.1.2.2 yamt 366 1.1.2.2 yamt /* 367 1.1.2.2 yamt * Set default user filter. By default, socket only passes 368 1.1.2.2 yamt * Command_Complete and Command_Status Events. 369 1.1.2.2 yamt */ 370 1.1.2.2 yamt hci_filter_set(HCI_EVENT_COMMAND_COMPL, &pcb->hp_efilter); 371 1.1.2.2 yamt hci_filter_set(HCI_EVENT_COMMAND_STATUS, &pcb->hp_efilter); 372 1.1.2.2 yamt hci_filter_set(HCI_EVENT_PKT, &pcb->hp_pfilter); 373 1.1.2.2 yamt 374 1.1.2.2 yamt LIST_INSERT_HEAD(&hci_pcb, pcb, hp_next); 375 1.1.2.2 yamt 376 1.1.2.2 yamt return 0; 377 1.1.2.2 yamt } 378 1.1.2.2 yamt 379 1.1.2.2 yamt /* anything after here *requires* a pcb */ 380 1.1.2.2 yamt if (pcb == NULL) { 381 1.1.2.2 yamt err = EINVAL; 382 1.1.2.2 yamt goto release; 383 1.1.2.2 yamt } 384 1.1.2.2 yamt 385 1.1.2.2 yamt switch(req) { 386 1.1.2.2 yamt case PRU_DISCONNECT: 387 1.1.2.2 yamt bdaddr_copy(&pcb->hp_raddr, BDADDR_ANY); 388 1.1.2.2 yamt 389 1.1.2.2 yamt /* XXX we cannot call soisdisconnected() here, as it sets 390 1.1.2.2 yamt * SS_CANTRCVMORE and SS_CANTSENDMORE. The problem being, 391 1.1.2.2 yamt * that soisconnected() does not clear these and if you 392 1.1.2.2 yamt * try to reconnect this socket (which is permitted) you 393 1.1.2.2 yamt * get a broken pipe when you try to write any data. 394 1.1.2.2 yamt */ 395 1.1.2.2 yamt up->so_state &= ~SS_ISCONNECTED; 396 1.1.2.2 yamt break; 397 1.1.2.2 yamt 398 1.1.2.2 yamt case PRU_ABORT: 399 1.1.2.2 yamt soisdisconnected(up); 400 1.1.2.2 yamt /* fall through to */ 401 1.1.2.2 yamt case PRU_DETACH: 402 1.1.2.2 yamt if (up->so_snd.sb_mb != NULL) 403 1.1.2.2 yamt hci_cmdwait_flush(up); 404 1.1.2.2 yamt 405 1.1.2.2 yamt up->so_pcb = NULL; 406 1.1.2.2 yamt LIST_REMOVE(pcb, hp_next); 407 1.1.2.2 yamt free(pcb, M_PCB); 408 1.1.2.2 yamt return 0; 409 1.1.2.2 yamt 410 1.1.2.2 yamt case PRU_BIND: 411 1.1.2.5 yamt KASSERT(nam != NULL); 412 1.1.2.2 yamt sa = mtod(nam, struct sockaddr_bt *); 413 1.1.2.2 yamt 414 1.1.2.2 yamt if (sa->bt_len != sizeof(struct sockaddr_bt)) 415 1.1.2.2 yamt return EINVAL; 416 1.1.2.2 yamt 417 1.1.2.2 yamt if (sa->bt_family != AF_BLUETOOTH) 418 1.1.2.2 yamt return EAFNOSUPPORT; 419 1.1.2.2 yamt 420 1.1.2.2 yamt bdaddr_copy(&pcb->hp_laddr, &sa->bt_bdaddr); 421 1.1.2.2 yamt 422 1.1.2.2 yamt if (bdaddr_any(&sa->bt_bdaddr)) 423 1.1.2.2 yamt pcb->hp_flags |= HCI_PROMISCUOUS; 424 1.1.2.2 yamt else 425 1.1.2.2 yamt pcb->hp_flags &= ~HCI_PROMISCUOUS; 426 1.1.2.2 yamt 427 1.1.2.2 yamt return 0; 428 1.1.2.2 yamt 429 1.1.2.2 yamt case PRU_CONNECT: 430 1.1.2.5 yamt KASSERT(nam != NULL); 431 1.1.2.2 yamt sa = mtod(nam, struct sockaddr_bt *); 432 1.1.2.2 yamt 433 1.1.2.2 yamt if (sa->bt_len != sizeof(struct sockaddr_bt)) 434 1.1.2.2 yamt return EINVAL; 435 1.1.2.2 yamt 436 1.1.2.2 yamt if (sa->bt_family != AF_BLUETOOTH) 437 1.1.2.2 yamt return EAFNOSUPPORT; 438 1.1.2.2 yamt 439 1.1.2.2 yamt if (hci_unit_lookup(&sa->bt_bdaddr) == NULL) 440 1.1.2.2 yamt return EADDRNOTAVAIL; 441 1.1.2.2 yamt 442 1.1.2.2 yamt bdaddr_copy(&pcb->hp_raddr, &sa->bt_bdaddr); 443 1.1.2.2 yamt soisconnected(up); 444 1.1.2.2 yamt return 0; 445 1.1.2.2 yamt 446 1.1.2.2 yamt case PRU_PEERADDR: 447 1.1.2.5 yamt KASSERT(nam != NULL); 448 1.1.2.2 yamt sa = mtod(nam, struct sockaddr_bt *); 449 1.1.2.2 yamt 450 1.1.2.2 yamt memset(sa, 0, sizeof(struct sockaddr_bt)); 451 1.1.2.2 yamt nam->m_len = 452 1.1.2.2 yamt sa->bt_len = sizeof(struct sockaddr_bt); 453 1.1.2.2 yamt sa->bt_family = AF_BLUETOOTH; 454 1.1.2.2 yamt bdaddr_copy(&sa->bt_bdaddr, &pcb->hp_raddr); 455 1.1.2.2 yamt return 0; 456 1.1.2.2 yamt 457 1.1.2.2 yamt case PRU_SOCKADDR: 458 1.1.2.5 yamt KASSERT(nam != NULL); 459 1.1.2.2 yamt sa = mtod(nam, struct sockaddr_bt *); 460 1.1.2.2 yamt 461 1.1.2.2 yamt memset(sa, 0, sizeof(struct sockaddr_bt)); 462 1.1.2.2 yamt nam->m_len = 463 1.1.2.2 yamt sa->bt_len = sizeof(struct sockaddr_bt); 464 1.1.2.2 yamt sa->bt_family = AF_BLUETOOTH; 465 1.1.2.2 yamt bdaddr_copy(&sa->bt_bdaddr, &pcb->hp_laddr); 466 1.1.2.2 yamt return 0; 467 1.1.2.2 yamt 468 1.1.2.2 yamt case PRU_SHUTDOWN: 469 1.1.2.2 yamt socantsendmore(up); 470 1.1.2.2 yamt break; 471 1.1.2.2 yamt 472 1.1.2.2 yamt case PRU_SEND: 473 1.1.2.2 yamt sa = NULL; 474 1.1.2.2 yamt if (nam) { 475 1.1.2.2 yamt sa = mtod(nam, struct sockaddr_bt *); 476 1.1.2.2 yamt 477 1.1.2.2 yamt if (sa->bt_len != sizeof(struct sockaddr_bt)) { 478 1.1.2.2 yamt err = EINVAL; 479 1.1.2.2 yamt goto release; 480 1.1.2.2 yamt } 481 1.1.2.2 yamt 482 1.1.2.2 yamt if (sa->bt_family != AF_BLUETOOTH) { 483 1.1.2.2 yamt err = EAFNOSUPPORT; 484 1.1.2.2 yamt goto release; 485 1.1.2.2 yamt } 486 1.1.2.2 yamt } 487 1.1.2.2 yamt 488 1.1.2.2 yamt if (ctl) /* have no use for this */ 489 1.1.2.2 yamt m_freem(ctl); 490 1.1.2.2 yamt 491 1.1.2.2 yamt return hci_send(pcb, m, (sa ? &sa->bt_bdaddr : &pcb->hp_raddr)); 492 1.1.2.2 yamt 493 1.1.2.2 yamt case PRU_SENSE: 494 1.1.2.2 yamt return 0; /* (no sense - Doh!) */ 495 1.1.2.2 yamt 496 1.1.2.2 yamt case PRU_RCVD: 497 1.1.2.2 yamt case PRU_RCVOOB: 498 1.1.2.2 yamt return EOPNOTSUPP; /* (no release) */ 499 1.1.2.2 yamt 500 1.1.2.2 yamt case PRU_ACCEPT: 501 1.1.2.2 yamt case PRU_CONNECT2: 502 1.1.2.2 yamt case PRU_LISTEN: 503 1.1.2.2 yamt case PRU_SENDOOB: 504 1.1.2.2 yamt case PRU_FASTTIMO: 505 1.1.2.2 yamt case PRU_SLOWTIMO: 506 1.1.2.2 yamt case PRU_PROTORCV: 507 1.1.2.2 yamt case PRU_PROTOSEND: 508 1.1.2.2 yamt err = EOPNOTSUPP; 509 1.1.2.2 yamt break; 510 1.1.2.2 yamt 511 1.1.2.2 yamt default: 512 1.1.2.2 yamt UNKNOWN(req); 513 1.1.2.2 yamt err = EOPNOTSUPP; 514 1.1.2.2 yamt break; 515 1.1.2.2 yamt } 516 1.1.2.2 yamt 517 1.1.2.2 yamt release: 518 1.1.2.3 yamt if (m) 519 1.1.2.3 yamt m_freem(m); 520 1.1.2.3 yamt if (ctl) 521 1.1.2.3 yamt m_freem(ctl); 522 1.1.2.2 yamt return err; 523 1.1.2.2 yamt } 524 1.1.2.2 yamt 525 1.1.2.2 yamt /* 526 1.1.2.2 yamt * get/set socket options 527 1.1.2.2 yamt */ 528 1.1.2.2 yamt int 529 1.1.2.2 yamt hci_ctloutput(int req, struct socket *so, int level, 530 1.1.2.2 yamt int optname, struct mbuf **opt) 531 1.1.2.2 yamt { 532 1.1.2.2 yamt struct hci_pcb *pcb = (struct hci_pcb *)so->so_pcb; 533 1.1.2.2 yamt struct mbuf *m; 534 1.1.2.2 yamt int err = 0; 535 1.1.2.2 yamt 536 1.1.2.2 yamt DPRINTFN(2, "req %s\n", prcorequests[req]); 537 1.1.2.2 yamt 538 1.1.2.2 yamt if (pcb == NULL) 539 1.1.2.2 yamt return EINVAL; 540 1.1.2.2 yamt 541 1.1.2.2 yamt if (level != BTPROTO_HCI) 542 1.1.2.5 yamt return ENOPROTOOPT; 543 1.1.2.2 yamt 544 1.1.2.2 yamt switch(req) { 545 1.1.2.2 yamt case PRCO_GETOPT: 546 1.1.2.2 yamt m = m_get(M_WAIT, MT_SOOPTS); 547 1.1.2.2 yamt switch (optname) { 548 1.1.2.2 yamt case SO_HCI_EVT_FILTER: 549 1.1.2.2 yamt m->m_len = sizeof(struct hci_filter); 550 1.1.2.2 yamt memcpy(mtod(m, void *), &pcb->hp_efilter, m->m_len); 551 1.1.2.2 yamt break; 552 1.1.2.2 yamt 553 1.1.2.2 yamt case SO_HCI_PKT_FILTER: 554 1.1.2.2 yamt m->m_len = sizeof(struct hci_filter); 555 1.1.2.2 yamt memcpy(mtod(m, void *), &pcb->hp_pfilter, m->m_len); 556 1.1.2.2 yamt break; 557 1.1.2.2 yamt 558 1.1.2.2 yamt case SO_HCI_DIRECTION: 559 1.1.2.2 yamt m->m_len = sizeof(int); 560 1.1.2.2 yamt if (pcb->hp_flags & HCI_DIRECTION) 561 1.1.2.2 yamt *mtod(m, int *) = 1; 562 1.1.2.2 yamt else 563 1.1.2.2 yamt *mtod(m, int *) = 0; 564 1.1.2.2 yamt break; 565 1.1.2.2 yamt 566 1.1.2.2 yamt default: 567 1.1.2.5 yamt err = ENOPROTOOPT; 568 1.1.2.2 yamt m_freem(m); 569 1.1.2.2 yamt m = NULL; 570 1.1.2.2 yamt break; 571 1.1.2.2 yamt } 572 1.1.2.2 yamt *opt = m; 573 1.1.2.2 yamt break; 574 1.1.2.2 yamt 575 1.1.2.2 yamt case PRCO_SETOPT: 576 1.1.2.2 yamt m = *opt; 577 1.1.2.2 yamt if (m) switch (optname) { 578 1.1.2.2 yamt case SO_HCI_EVT_FILTER: /* set event filter */ 579 1.1.2.2 yamt m->m_len = min(m->m_len, sizeof(struct hci_filter)); 580 1.1.2.2 yamt memcpy(&pcb->hp_efilter, mtod(m, void *), m->m_len); 581 1.1.2.2 yamt break; 582 1.1.2.2 yamt 583 1.1.2.2 yamt case SO_HCI_PKT_FILTER: /* set packet filter */ 584 1.1.2.2 yamt m->m_len = min(m->m_len, sizeof(struct hci_filter)); 585 1.1.2.2 yamt memcpy(&pcb->hp_pfilter, mtod(m, void *), m->m_len); 586 1.1.2.2 yamt break; 587 1.1.2.2 yamt 588 1.1.2.2 yamt case SO_HCI_DIRECTION: /* request direction ctl messages */ 589 1.1.2.2 yamt if (*mtod(m, int *)) 590 1.1.2.2 yamt pcb->hp_flags |= HCI_DIRECTION; 591 1.1.2.2 yamt else 592 1.1.2.2 yamt pcb->hp_flags &= ~HCI_DIRECTION; 593 1.1.2.2 yamt break; 594 1.1.2.2 yamt 595 1.1.2.2 yamt default: 596 1.1.2.5 yamt err = ENOPROTOOPT; 597 1.1.2.2 yamt break; 598 1.1.2.2 yamt } 599 1.1.2.2 yamt m_freem(m); 600 1.1.2.2 yamt break; 601 1.1.2.2 yamt 602 1.1.2.2 yamt default: 603 1.1.2.5 yamt err = ENOPROTOOPT; 604 1.1.2.2 yamt break; 605 1.1.2.2 yamt } 606 1.1.2.2 yamt 607 1.1.2.2 yamt return err; 608 1.1.2.2 yamt } 609 1.1.2.2 yamt 610 1.1.2.2 yamt /* 611 1.1.2.2 yamt * HCI mbuf tap routine 612 1.1.2.2 yamt * 613 1.1.2.2 yamt * copy packets to any raw HCI sockets that wish (and are 614 1.1.2.2 yamt * permitted) to see them 615 1.1.2.2 yamt */ 616 1.1.2.2 yamt void 617 1.1.2.2 yamt hci_mtap(struct mbuf *m, struct hci_unit *unit) 618 1.1.2.2 yamt { 619 1.1.2.2 yamt struct hci_pcb *pcb; 620 1.1.2.2 yamt struct mbuf *m0, *ctlmsg, **ctl; 621 1.1.2.2 yamt struct sockaddr_bt sa; 622 1.1.2.2 yamt uint8_t type; 623 1.1.2.2 yamt uint8_t event; 624 1.1.2.2 yamt uint16_t opcode; 625 1.1.2.2 yamt 626 1.1.2.2 yamt KASSERT(m->m_len >= sizeof(type)); 627 1.1.2.2 yamt 628 1.1.2.2 yamt type = *mtod(m, uint8_t *); 629 1.1.2.2 yamt 630 1.1.2.2 yamt memset(&sa, 0, sizeof(sa)); 631 1.1.2.2 yamt sa.bt_len = sizeof(struct sockaddr_bt); 632 1.1.2.2 yamt sa.bt_family = AF_BLUETOOTH; 633 1.1.2.2 yamt bdaddr_copy(&sa.bt_bdaddr, &unit->hci_bdaddr); 634 1.1.2.2 yamt 635 1.1.2.2 yamt LIST_FOREACH(pcb, &hci_pcb, hp_next) { 636 1.1.2.2 yamt /* 637 1.1.2.2 yamt * filter according to source address 638 1.1.2.2 yamt */ 639 1.1.2.2 yamt if ((pcb->hp_flags & HCI_PROMISCUOUS) == 0 640 1.1.2.2 yamt && bdaddr_same(&pcb->hp_laddr, &sa.bt_bdaddr) == 0) 641 1.1.2.2 yamt continue; 642 1.1.2.2 yamt 643 1.1.2.2 yamt /* 644 1.1.2.2 yamt * filter according to packet type filter 645 1.1.2.2 yamt */ 646 1.1.2.2 yamt if (hci_filter_test(type, &pcb->hp_pfilter) == 0) 647 1.1.2.2 yamt continue; 648 1.1.2.2 yamt 649 1.1.2.2 yamt /* 650 1.1.2.2 yamt * filter according to event/security filters 651 1.1.2.2 yamt */ 652 1.1.2.2 yamt switch(type) { 653 1.1.2.2 yamt case HCI_EVENT_PKT: 654 1.1.2.2 yamt KASSERT(m->m_len >= sizeof(hci_event_hdr_t)); 655 1.1.2.2 yamt 656 1.1.2.2 yamt event = mtod(m, hci_event_hdr_t *)->event; 657 1.1.2.2 yamt 658 1.1.2.2 yamt if (hci_filter_test(event, &pcb->hp_efilter) == 0) 659 1.1.2.2 yamt continue; 660 1.1.2.2 yamt 661 1.1.2.2 yamt if ((pcb->hp_flags & HCI_PRIVILEGED) == 0 662 1.1.2.5 yamt && hci_security_check_event(event) == -1) 663 1.1.2.2 yamt continue; 664 1.1.2.2 yamt break; 665 1.1.2.2 yamt 666 1.1.2.2 yamt case HCI_CMD_PKT: 667 1.1.2.2 yamt KASSERT(m->m_len >= sizeof(hci_cmd_hdr_t)); 668 1.1.2.2 yamt 669 1.1.2.2 yamt opcode = le16toh(mtod(m, hci_cmd_hdr_t *)->opcode); 670 1.1.2.2 yamt 671 1.1.2.2 yamt if ((pcb->hp_flags & HCI_PRIVILEGED) == 0 672 1.1.2.5 yamt && hci_security_check_opcode(opcode) == -1) 673 1.1.2.2 yamt continue; 674 1.1.2.2 yamt break; 675 1.1.2.2 yamt 676 1.1.2.2 yamt case HCI_ACL_DATA_PKT: 677 1.1.2.2 yamt case HCI_SCO_DATA_PKT: 678 1.1.2.2 yamt default: 679 1.1.2.2 yamt if ((pcb->hp_flags & HCI_PRIVILEGED) == 0) 680 1.1.2.2 yamt continue; 681 1.1.2.2 yamt 682 1.1.2.2 yamt break; 683 1.1.2.2 yamt } 684 1.1.2.2 yamt 685 1.1.2.2 yamt /* 686 1.1.2.2 yamt * create control messages 687 1.1.2.2 yamt */ 688 1.1.2.2 yamt ctlmsg = NULL; 689 1.1.2.2 yamt ctl = &ctlmsg; 690 1.1.2.2 yamt if (pcb->hp_flags & HCI_DIRECTION) { 691 1.1.2.2 yamt int dir = m->m_flags & M_LINK0 ? 1 : 0; 692 1.1.2.2 yamt 693 1.1.2.5 yamt *ctl = sbcreatecontrol(&dir, sizeof(dir), 694 1.1.2.2 yamt SCM_HCI_DIRECTION, BTPROTO_HCI); 695 1.1.2.2 yamt 696 1.1.2.2 yamt if (*ctl != NULL) 697 1.1.2.2 yamt ctl = &((*ctl)->m_next); 698 1.1.2.2 yamt } 699 1.1.2.2 yamt 700 1.1.2.2 yamt /* 701 1.1.2.2 yamt * copy to socket 702 1.1.2.2 yamt */ 703 1.1.2.2 yamt m0 = m_copypacket(m, M_DONTWAIT); 704 1.1.2.2 yamt if (m0 && sbappendaddr(&pcb->hp_socket->so_rcv, 705 1.1.2.2 yamt (struct sockaddr *)&sa, m0, ctlmsg)) { 706 1.1.2.2 yamt sorwakeup(pcb->hp_socket); 707 1.1.2.2 yamt } else { 708 1.1.2.2 yamt m_freem(ctlmsg); 709 1.1.2.2 yamt m_freem(m0); 710 1.1.2.2 yamt } 711 1.1.2.2 yamt } 712 1.1.2.2 yamt } 713
Indexes created Thu Oct 02 01:09:59 GMT 2025