Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put
[linux-2.6-block.git] / include / net / bluetooth / l2cap.h
CommitLineData
be21871f 1/*
1da177e4
LT
2 BlueZ - Bluetooth protocol stack for Linux
3 Copyright (C) 2000-2001 Qualcomm Incorporated
ce5706bd 4 Copyright (C) 2009-2010 Gustavo F. Padovan <gustavo@padovan.org>
5d8868ff 5 Copyright (C) 2010 Google Inc.
1da177e4
LT
6
7 Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
8
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License version 2 as
11 published by the Free Software Foundation;
12
13 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
14 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
15 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
16 IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
be21871f
AE
17 CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
18 WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
19 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
1da177e4
LT
20 OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
21
be21871f
AE
22 ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
23 COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
1da177e4
LT
24 SOFTWARE IS DISCLAIMED.
25*/
26
27#ifndef __L2CAP_H
28#define __L2CAP_H
29
88843ab0 30#include <asm/unaligned.h>
abe84903 31#include <linux/atomic.h>
88843ab0 32
1da177e4 33/* L2CAP defaults */
47ec1dcd 34#define L2CAP_DEFAULT_MTU 672
f2fcfcd6 35#define L2CAP_DEFAULT_MIN_MTU 48
8936fa6d
AE
36#define L2CAP_DEFAULT_FLUSH_TO 0xFFFF
37#define L2CAP_EFS_DEFAULT_FLUSH_TO 0xFFFFFFFF
1c2acffb 38#define L2CAP_DEFAULT_TX_WINDOW 63
6327eb98 39#define L2CAP_DEFAULT_EXT_WINDOW 0x3FFF
e90bac06 40#define L2CAP_DEFAULT_MAX_TX 3
fa235562 41#define L2CAP_DEFAULT_RETRANS_TO 2000 /* 2 seconds */
e90bac06 42#define L2CAP_DEFAULT_MONITOR_TO 12000 /* 12 seconds */
0b4558e3 43#define L2CAP_DEFAULT_MAX_PDU_SIZE 1492 /* Sized for AMP packet */
c1b4f43b 44#define L2CAP_DEFAULT_ACK_TO 200
8f7975b1
AE
45#define L2CAP_DEFAULT_MAX_SDU_SIZE 0xFFFF
46#define L2CAP_DEFAULT_SDU_ITIME 0xFFFFFFFF
47#define L2CAP_DEFAULT_ACC_LAT 0xFFFFFFFF
94122bbe 48#define L2CAP_BREDR_MAX_PAYLOAD 1019 /* 3-DH5 packet */
8c3a4f00 49#define L2CAP_LE_MIN_MTU 23
da49b602 50#define L2CAP_ECRED_CONN_SCID_MAX 5
1da177e4 51
ba13ccd9
MH
52#define L2CAP_DISC_TIMEOUT msecs_to_jiffies(100)
53#define L2CAP_DISC_REJ_TIMEOUT msecs_to_jiffies(5000)
54#define L2CAP_ENC_TIMEOUT msecs_to_jiffies(5000)
55#define L2CAP_CONN_TIMEOUT msecs_to_jiffies(40000)
56#define L2CAP_INFO_TIMEOUT msecs_to_jiffies(4000)
5b155ef9
MM
57#define L2CAP_MOVE_TIMEOUT msecs_to_jiffies(4000)
58#define L2CAP_MOVE_ERTX_TIMEOUT msecs_to_jiffies(60000)
cb02a255 59#define L2CAP_WAIT_ACK_POLL_PERIOD msecs_to_jiffies(200)
e432c72c 60#define L2CAP_WAIT_ACK_TIMEOUT msecs_to_jiffies(10000)
1da177e4 61
466f8004
AE
62#define L2CAP_A2MP_DEFAULT_MTU 670
63
1da177e4
LT
64/* L2CAP socket address */
65struct sockaddr_l2 {
66 sa_family_t l2_family;
8e036fc3 67 __le16 l2_psm;
1da177e4 68 bdaddr_t l2_bdaddr;
f29972de 69 __le16 l2_cid;
43ef0b8b 70 __u8 l2_bdaddr_type;
1da177e4
LT
71};
72
73/* L2CAP socket options */
74#define L2CAP_OPTIONS 0x01
75struct l2cap_options {
76 __u16 omtu;
77 __u16 imtu;
78 __u16 flush_to;
79 __u8 mode;
fcc203c3 80 __u8 fcs;
68d7f0ce 81 __u8 max_tx;
14b5aa71 82 __u16 txwin_size;
1da177e4
LT
83};
84
85#define L2CAP_CONNINFO 0x02
86struct l2cap_conninfo {
87 __u16 hci_handle;
88 __u8 dev_class[3];
89};
90
91#define L2CAP_LM 0x03
92#define L2CAP_LM_MASTER 0x0001
93#define L2CAP_LM_AUTH 0x0002
94#define L2CAP_LM_ENCRYPT 0x0004
95#define L2CAP_LM_TRUSTED 0x0008
96#define L2CAP_LM_RELIABLE 0x0010
97#define L2CAP_LM_SECURE 0x0020
7d513e92 98#define L2CAP_LM_FIPS 0x0040
1da177e4
LT
99
100/* L2CAP command codes */
47ec1dcd
MH
101#define L2CAP_COMMAND_REJ 0x01
102#define L2CAP_CONN_REQ 0x02
103#define L2CAP_CONN_RSP 0x03
104#define L2CAP_CONF_REQ 0x04
105#define L2CAP_CONF_RSP 0x05
106#define L2CAP_DISCONN_REQ 0x06
107#define L2CAP_DISCONN_RSP 0x07
108#define L2CAP_ECHO_REQ 0x08
109#define L2CAP_ECHO_RSP 0x09
110#define L2CAP_INFO_REQ 0x0a
111#define L2CAP_INFO_RSP 0x0b
38094c75
MM
112#define L2CAP_CREATE_CHAN_REQ 0x0c
113#define L2CAP_CREATE_CHAN_RSP 0x0d
114#define L2CAP_MOVE_CHAN_REQ 0x0e
115#define L2CAP_MOVE_CHAN_RSP 0x0f
116#define L2CAP_MOVE_CHAN_CFM 0x10
117#define L2CAP_MOVE_CHAN_CFM_RSP 0x11
3300d9a9
CT
118#define L2CAP_CONN_PARAM_UPDATE_REQ 0x12
119#define L2CAP_CONN_PARAM_UPDATE_RSP 0x13
ee5ec5cf
JH
120#define L2CAP_LE_CONN_REQ 0x14
121#define L2CAP_LE_CONN_RSP 0x15
122#define L2CAP_LE_CREDITS 0x16
14572096
LAD
123#define L2CAP_ECRED_CONN_REQ 0x17
124#define L2CAP_ECRED_CONN_RSP 0x18
125#define L2CAP_ECRED_RECONF_REQ 0x19
126#define L2CAP_ECRED_RECONF_RSP 0x1a
47ec1dcd 127
a858393b 128/* L2CAP extended feature mask */
47ec1dcd
MH
129#define L2CAP_FEAT_FLOWCTL 0x00000001
130#define L2CAP_FEAT_RETRANS 0x00000002
a858393b 131#define L2CAP_FEAT_BIDIR_QOS 0x00000004
47ec1dcd
MH
132#define L2CAP_FEAT_ERTM 0x00000008
133#define L2CAP_FEAT_STREAMING 0x00000010
134#define L2CAP_FEAT_FCS 0x00000020
a858393b 135#define L2CAP_FEAT_EXT_FLOW 0x00000040
47ec1dcd 136#define L2CAP_FEAT_FIXED_CHAN 0x00000080
a858393b
AE
137#define L2CAP_FEAT_EXT_WINDOW 0x00000100
138#define L2CAP_FEAT_UCD 0x00000200
47ec1dcd
MH
139
140/* L2CAP checksum option */
141#define L2CAP_FCS_NONE 0x00
142#define L2CAP_FCS_CRC16 0x01
1da177e4 143
d835ac0f 144/* L2CAP fixed channels */
a6801ca9 145#define L2CAP_FC_SIG_BREDR 0x02
d40bffbc 146#define L2CAP_FC_CONNLESS 0x04
d835ac0f 147#define L2CAP_FC_A2MP 0x08
a6801ca9
MH
148#define L2CAP_FC_ATT 0x10
149#define L2CAP_FC_SIG_LE 0x20
150#define L2CAP_FC_SMP_LE 0x40
ef8efe4b 151#define L2CAP_FC_SMP_BREDR 0x80
d835ac0f 152
1c2acffb 153/* L2CAP Control Field bit masks */
57253fd8
AE
154#define L2CAP_CTRL_SAR 0xC000
155#define L2CAP_CTRL_REQSEQ 0x3F00
156#define L2CAP_CTRL_TXSEQ 0x007E
157#define L2CAP_CTRL_SUPERVISE 0x000C
158
159#define L2CAP_CTRL_RETRANS 0x0080
160#define L2CAP_CTRL_FINAL 0x0080
161#define L2CAP_CTRL_POLL 0x0010
162#define L2CAP_CTRL_FRAME_TYPE 0x0001 /* I- or S-Frame */
163
164#define L2CAP_CTRL_TXSEQ_SHIFT 1
165#define L2CAP_CTRL_SUPER_SHIFT 2
d5f7ac38
MM
166#define L2CAP_CTRL_POLL_SHIFT 4
167#define L2CAP_CTRL_FINAL_SHIFT 7
57253fd8
AE
168#define L2CAP_CTRL_REQSEQ_SHIFT 8
169#define L2CAP_CTRL_SAR_SHIFT 14
170
171/* L2CAP Extended Control Field bit mask */
172#define L2CAP_EXT_CTRL_TXSEQ 0xFFFC0000
173#define L2CAP_EXT_CTRL_SAR 0x00030000
174#define L2CAP_EXT_CTRL_SUPERVISE 0x00030000
175#define L2CAP_EXT_CTRL_REQSEQ 0x0000FFFC
176
177#define L2CAP_EXT_CTRL_POLL 0x00040000
178#define L2CAP_EXT_CTRL_FINAL 0x00000002
179#define L2CAP_EXT_CTRL_FRAME_TYPE 0x00000001 /* I- or S-Frame */
180
d5f7ac38 181#define L2CAP_EXT_CTRL_FINAL_SHIFT 1
57253fd8
AE
182#define L2CAP_EXT_CTRL_REQSEQ_SHIFT 2
183#define L2CAP_EXT_CTRL_SAR_SHIFT 16
184#define L2CAP_EXT_CTRL_SUPER_SHIFT 16
d5f7ac38 185#define L2CAP_EXT_CTRL_POLL_SHIFT 18
57253fd8 186#define L2CAP_EXT_CTRL_TXSEQ_SHIFT 18
1c2acffb
GP
187
188/* L2CAP Supervisory Function */
ab784b73
AE
189#define L2CAP_SUPER_RR 0x00
190#define L2CAP_SUPER_REJ 0x01
191#define L2CAP_SUPER_RNR 0x02
192#define L2CAP_SUPER_SREJ 0x03
1c2acffb
GP
193
194/* L2CAP Segmentation and Reassembly */
7e0ef6ee
AE
195#define L2CAP_SAR_UNSEGMENTED 0x00
196#define L2CAP_SAR_START 0x01
197#define L2CAP_SAR_END 0x02
198#define L2CAP_SAR_CONTINUE 0x03
1c2acffb 199
e2fd318e 200/* L2CAP Command rej. reasons */
8d6765aa
AE
201#define L2CAP_REJ_NOT_UNDERSTOOD 0x0000
202#define L2CAP_REJ_MTU_EXCEEDED 0x0001
203#define L2CAP_REJ_INVALID_CID 0x0002
e2fd318e 204
1da177e4
LT
205/* L2CAP structures */
206struct l2cap_hdr {
8e036fc3
AV
207 __le16 len;
208 __le16 cid;
66c853cc 209} __packed;
4d7ea8ee 210#define L2CAP_LEN_SIZE 2
1da177e4 211#define L2CAP_HDR_SIZE 4
d43cb289
AE
212#define L2CAP_ENH_HDR_SIZE 6
213#define L2CAP_EXT_HDR_SIZE 8
214
215#define L2CAP_FCS_SIZE 2
216#define L2CAP_SDULEN_SIZE 2
217#define L2CAP_PSMLEN_SIZE 2
d5f7ac38
MM
218#define L2CAP_ENH_CTRL_SIZE 2
219#define L2CAP_EXT_CTRL_SIZE 4
1da177e4
LT
220
221struct l2cap_cmd_hdr {
222 __u8 code;
223 __u8 ident;
8e036fc3 224 __le16 len;
66c853cc 225} __packed;
1da177e4
LT
226#define L2CAP_CMD_HDR_SIZE 4
227
e2fd318e
IK
228struct l2cap_cmd_rej_unk {
229 __le16 reason;
230} __packed;
231
232struct l2cap_cmd_rej_mtu {
8e036fc3 233 __le16 reason;
e2fd318e
IK
234 __le16 max_mtu;
235} __packed;
236
237struct l2cap_cmd_rej_cid {
238 __le16 reason;
239 __le16 scid;
240 __le16 dcid;
66c853cc 241} __packed;
1da177e4
LT
242
243struct l2cap_conn_req {
8e036fc3
AV
244 __le16 psm;
245 __le16 scid;
66c853cc 246} __packed;
1da177e4
LT
247
248struct l2cap_conn_rsp {
8e036fc3
AV
249 __le16 dcid;
250 __le16 scid;
251 __le16 result;
252 __le16 status;
66c853cc 253} __packed;
1da177e4 254
2983fd68
AE
255/* protocol/service multiplexer (PSM) */
256#define L2CAP_PSM_SDP 0x0001
257#define L2CAP_PSM_RFCOMM 0x0003
3124b843 258#define L2CAP_PSM_3DSP 0x0021
cab9e3a0 259#define L2CAP_PSM_IPSP 0x0023 /* 6LoWPAN */
2983fd68 260
114f9f1e
JH
261#define L2CAP_PSM_DYN_START 0x1001
262#define L2CAP_PSM_DYN_END 0xffff
263#define L2CAP_PSM_AUTO_END 0x10ff
264#define L2CAP_PSM_LE_DYN_START 0x0080
265#define L2CAP_PSM_LE_DYN_END 0x00ff
266
3f79410c 267/* channel identifier */
8db4dc46
GP
268#define L2CAP_CID_SIGNALING 0x0001
269#define L2CAP_CID_CONN_LESS 0x0002
466f8004 270#define L2CAP_CID_A2MP 0x0003
073d1cf3 271#define L2CAP_CID_ATT 0x0004
acd7d370
VT
272#define L2CAP_CID_LE_SIGNALING 0x0005
273#define L2CAP_CID_SMP 0x0006
ef8efe4b 274#define L2CAP_CID_SMP_BREDR 0x0007
8db4dc46
GP
275#define L2CAP_CID_DYN_START 0x0040
276#define L2CAP_CID_DYN_END 0xffff
e77af755 277#define L2CAP_CID_LE_DYN_END 0x007f
8db4dc46 278
38094c75 279/* connect/create channel results */
47ec1dcd
MH
280#define L2CAP_CR_SUCCESS 0x0000
281#define L2CAP_CR_PEND 0x0001
282#define L2CAP_CR_BAD_PSM 0x0002
283#define L2CAP_CR_SEC_BLOCK 0x0003
284#define L2CAP_CR_NO_MEM 0x0004
38094c75 285#define L2CAP_CR_BAD_AMP 0x0005
dd1a8f8a
MP
286#define L2CAP_CR_INVALID_SCID 0x0006
287#define L2CAP_CR_SCID_IN_USE 0x0007
571f7390
MP
288
289/* credit based connect results */
290#define L2CAP_CR_LE_SUCCESS 0x0000
291#define L2CAP_CR_LE_BAD_PSM 0x0002
292#define L2CAP_CR_LE_NO_MEM 0x0004
293#define L2CAP_CR_LE_AUTHENTICATION 0x0005
294#define L2CAP_CR_LE_AUTHORIZATION 0x0006
295#define L2CAP_CR_LE_BAD_KEY_SIZE 0x0007
296#define L2CAP_CR_LE_ENCRYPTION 0x0008
297#define L2CAP_CR_LE_INVALID_SCID 0x0009
298#define L2CAP_CR_LE_SCID_IN_USE 0X000A
15f02b91
LAD
299#define L2CAP_CR_LE_UNACCEPT_PARAMS 0X000B
300#define L2CAP_CR_LE_INVALID_PARAMS 0X000C
1da177e4 301
38094c75 302/* connect/create channel status */
47ec1dcd
MH
303#define L2CAP_CS_NO_INFO 0x0000
304#define L2CAP_CS_AUTHEN_PEND 0x0001
305#define L2CAP_CS_AUTHOR_PEND 0x0002
1da177e4
LT
306
307struct l2cap_conf_req {
8e036fc3
AV
308 __le16 dcid;
309 __le16 flags;
a7e45454 310 __u8 data[];
66c853cc 311} __packed;
1da177e4
LT
312
313struct l2cap_conf_rsp {
8e036fc3
AV
314 __le16 scid;
315 __le16 flags;
316 __le16 result;
a7e45454 317 __u8 data[];
66c853cc 318} __packed;
1da177e4 319
5dee9e7c
MH
320#define L2CAP_CONF_SUCCESS 0x0000
321#define L2CAP_CONF_UNACCEPT 0x0001
322#define L2CAP_CONF_REJECT 0x0002
323#define L2CAP_CONF_UNKNOWN 0x0003
0e8b207e 324#define L2CAP_CONF_PENDING 0x0004
5a9e7057 325#define L2CAP_CONF_EFS_REJECT 0x0005
1da177e4 326
59e54bd1
AE
327/* configuration req/rsp continuation flag */
328#define L2CAP_CONF_FLAG_CONTINUATION 0x0001
329
1da177e4
LT
330struct l2cap_conf_opt {
331 __u8 type;
332 __u8 len;
a7e45454 333 __u8 val[];
66c853cc 334} __packed;
1da177e4
LT
335#define L2CAP_CONF_OPT_SIZE 2
336
589d2746 337#define L2CAP_CONF_HINT 0x80
47ec1dcd 338#define L2CAP_CONF_MASK 0x7f
589d2746 339
1da177e4
LT
340#define L2CAP_CONF_MTU 0x01
341#define L2CAP_CONF_FLUSH_TO 0x02
342#define L2CAP_CONF_QOS 0x03
343#define L2CAP_CONF_RFC 0x04
47ec1dcd 344#define L2CAP_CONF_FCS 0x05
5a9e7057 345#define L2CAP_CONF_EFS 0x06
6327eb98 346#define L2CAP_CONF_EWS 0x07
1da177e4
LT
347
348#define L2CAP_CONF_MAX_SIZE 22
349
6464f35f
MH
350struct l2cap_conf_rfc {
351 __u8 mode;
352 __u8 txwin_size;
353 __u8 max_transmit;
354 __le16 retrans_timeout;
355 __le16 monitor_timeout;
356 __le16 max_pdu_size;
66c853cc 357} __packed;
6464f35f
MH
358
359#define L2CAP_MODE_BASIC 0x00
360#define L2CAP_MODE_RETRANS 0x01
361#define L2CAP_MODE_FLOWCTL 0x02
47ec1dcd 362#define L2CAP_MODE_ERTM 0x03
c6b03cf9 363#define L2CAP_MODE_STREAMING 0x04
6464f35f 364
38319713
JH
365/* Unlike the above this one doesn't actually map to anything that would
366 * ever be sent over the air. Therefore, use a value that's unlikely to
367 * ever be used in the BR/EDR configuration phase.
368 */
369#define L2CAP_MODE_LE_FLOWCTL 0x80
14572096 370#define L2CAP_MODE_EXT_FLOWCTL 0x81
38319713 371
5a9e7057
AE
372struct l2cap_conf_efs {
373 __u8 id;
374 __u8 stype;
375 __le16 msdu;
376 __le32 sdu_itime;
377 __le32 acc_lat;
378 __le32 flush_to;
379} __packed;
380
8f7975b1
AE
381#define L2CAP_SERV_NOTRAFIC 0x00
382#define L2CAP_SERV_BESTEFFORT 0x01
383#define L2CAP_SERV_GUARANTEED 0x02
384
385#define L2CAP_BESTEFFORT_ID 0x01
386
1da177e4 387struct l2cap_disconn_req {
8e036fc3
AV
388 __le16 dcid;
389 __le16 scid;
66c853cc 390} __packed;
1da177e4
LT
391
392struct l2cap_disconn_rsp {
8e036fc3
AV
393 __le16 dcid;
394 __le16 scid;
66c853cc 395} __packed;
1da177e4
LT
396
397struct l2cap_info_req {
8e036fc3 398 __le16 type;
66c853cc 399} __packed;
1da177e4
LT
400
401struct l2cap_info_rsp {
8e036fc3
AV
402 __le16 type;
403 __le16 result;
a7e45454 404 __u8 data[];
66c853cc 405} __packed;
1da177e4 406
38094c75
MM
407struct l2cap_create_chan_req {
408 __le16 psm;
409 __le16 scid;
410 __u8 amp_id;
411} __packed;
412
413struct l2cap_create_chan_rsp {
414 __le16 dcid;
415 __le16 scid;
416 __le16 result;
417 __le16 status;
418} __packed;
419
420struct l2cap_move_chan_req {
421 __le16 icid;
422 __u8 dest_amp_id;
423} __packed;
424
425struct l2cap_move_chan_rsp {
426 __le16 icid;
427 __le16 result;
428} __packed;
429
430#define L2CAP_MR_SUCCESS 0x0000
431#define L2CAP_MR_PEND 0x0001
432#define L2CAP_MR_BAD_ID 0x0002
433#define L2CAP_MR_SAME_ID 0x0003
434#define L2CAP_MR_NOT_SUPP 0x0004
435#define L2CAP_MR_COLLISION 0x0005
436#define L2CAP_MR_NOT_ALLOWED 0x0006
437
438struct l2cap_move_chan_cfm {
439 __le16 icid;
440 __le16 result;
441} __packed;
442
443#define L2CAP_MC_CONFIRMED 0x0000
444#define L2CAP_MC_UNCONFIRMED 0x0001
445
446struct l2cap_move_chan_cfm_rsp {
447 __le16 icid;
448} __packed;
449
1da177e4 450/* info type */
8d6765aa
AE
451#define L2CAP_IT_CL_MTU 0x0001
452#define L2CAP_IT_FEAT_MASK 0x0002
453#define L2CAP_IT_FIXED_CHAN 0x0003
1da177e4
LT
454
455/* info result */
8d6765aa
AE
456#define L2CAP_IR_SUCCESS 0x0000
457#define L2CAP_IR_NOTSUPP 0x0001
1da177e4 458
de73115a
CT
459struct l2cap_conn_param_update_req {
460 __le16 min;
461 __le16 max;
462 __le16 latency;
463 __le16 to_multiplier;
464} __packed;
465
466struct l2cap_conn_param_update_rsp {
467 __le16 result;
468} __packed;
469
470/* Connection Parameters result */
471#define L2CAP_CONN_PARAM_ACCEPTED 0x0000
472#define L2CAP_CONN_PARAM_REJECTED 0x0001
473
ee5ec5cf
JH
474struct l2cap_le_conn_req {
475 __le16 psm;
476 __le16 scid;
477 __le16 mtu;
478 __le16 mps;
479 __le16 credits;
480} __packed;
481
482struct l2cap_le_conn_rsp {
483 __le16 dcid;
484 __le16 mtu;
485 __le16 mps;
486 __le16 credits;
487 __le16 result;
488} __packed;
489
490struct l2cap_le_credits {
491 __le16 cid;
492 __le16 credits;
493} __packed;
494
14572096
LAD
495#define L2CAP_ECRED_MIN_MTU 64
496#define L2CAP_ECRED_MIN_MPS 64
7cf3b1dd 497#define L2CAP_ECRED_MAX_CID 5
14572096
LAD
498
499struct l2cap_ecred_conn_req {
500 __le16 psm;
501 __le16 mtu;
502 __le16 mps;
503 __le16 credits;
631512f8 504 __le16 scid[];
14572096
LAD
505} __packed;
506
507struct l2cap_ecred_conn_rsp {
508 __le16 mtu;
509 __le16 mps;
510 __le16 credits;
511 __le16 result;
631512f8 512 __le16 dcid[];
14572096
LAD
513};
514
515struct l2cap_ecred_reconf_req {
516 __le16 mtu;
517 __le16 mps;
631512f8 518 __le16 scid[];
14572096
LAD
519} __packed;
520
521#define L2CAP_RECONF_SUCCESS 0x0000
522#define L2CAP_RECONF_INVALID_MTU 0x0001
523#define L2CAP_RECONF_INVALID_MPS 0x0002
524
525struct l2cap_ecred_reconf_rsp {
526 __le16 result;
527} __packed;
528
48454079 529/* ----- L2CAP channels and connections ----- */
3c588192
MM
530struct l2cap_seq_list {
531 __u16 head;
532 __u16 tail;
533 __u16 mask;
534 __u16 *list;
535};
536
537#define L2CAP_SEQ_LIST_CLEAR 0xFFFF
538#define L2CAP_SEQ_LIST_TAIL 0x8000
539
48454079 540struct l2cap_chan {
8c1d787b 541 struct l2cap_conn *conn;
08333283
MM
542 struct hci_conn *hs_hcon;
543 struct hci_chan *hs_hchan;
144ad330 544 struct kref kref;
abe84903 545 atomic_t nesting;
8c1d787b 546
89bc500e
GP
547 __u8 state;
548
7eafc59e 549 bdaddr_t dst;
4f1654e0 550 __u8 dst_type;
7eafc59e 551 bdaddr_t src;
4f1654e0 552 __u8 src_type;
fe4128e0 553 __le16 psm;
4f1654e0 554 __le16 sport;
fe4128e0
GP
555 __u16 dcid;
556 __u16 scid;
4343478f 557
0c1bc5c6
GP
558 __u16 imtu;
559 __u16 omtu;
560 __u16 flush_to;
561 __u8 mode;
715ec005 562 __u8 chan_type;
2ea66482 563 __u8 chan_policy;
0c1bc5c6 564
4343478f 565 __u8 sec_level;
4343478f 566
fc7f8a7e
GP
567 __u8 ident;
568
73ffa904
GP
569 __u8 conf_req[64];
570 __u8 conf_len;
571 __u8 num_conf_req;
572 __u8 num_conf_rsp;
573
47d1ec61
GP
574 __u8 fcs;
575
6327eb98 576 __u16 tx_win;
836be934 577 __u16 tx_win_max;
c20f8e35 578 __u16 ack_win;
47d1ec61
GP
579 __u8 max_tx;
580 __u16 retrans_timeout;
581 __u16 monitor_timeout;
582 __u16 mps;
583
0cd75f7e
JH
584 __u16 tx_credits;
585 __u16 rx_credits;
586
d5f7ac38
MM
587 __u8 tx_state;
588 __u8 rx_state;
589
c1360a1c 590 unsigned long conf_state;
e2ab4353 591 unsigned long conn_state;
d57b0e8b 592 unsigned long flags;
525cd185 593
fffadc08 594 __u8 remote_amp_id;
08333283
MM
595 __u8 local_amp_id;
596 __u8 move_id;
597 __u8 move_state;
598 __u8 move_role;
599
fb45de7d
AE
600 __u16 next_tx_seq;
601 __u16 expected_ack_seq;
602 __u16 expected_tx_seq;
0b209fae 603 __u16 buffer_seq;
fb45de7d 604 __u16 srej_save_reqseq;
d5f7ac38 605 __u16 last_acked_seq;
fb45de7d
AE
606 __u16 frames_sent;
607 __u16 unacked_frames;
6a026610 608 __u8 retry_count;
6f61fd47 609 __u16 sdu_len;
6f61fd47 610 struct sk_buff *sdu;
84084a31 611 struct sk_buff *sdu_last_frag;
6f61fd47 612
6327eb98 613 __u16 remote_tx_win;
2c03a7a4
GP
614 __u8 remote_max_tx;
615 __u16 remote_mps;
42e5c802 616
5a9e7057
AE
617 __u8 local_id;
618 __u8 local_stype;
619 __u16 local_msdu;
620 __u32 local_sdu_itime;
621 __u32 local_acc_lat;
622 __u32 local_flush_to;
623
624 __u8 remote_id;
625 __u8 remote_stype;
626 __u16 remote_msdu;
627 __u32 remote_sdu_itime;
628 __u32 remote_acc_lat;
629 __u32 remote_flush_to;
630
721c4181
GP
631 struct delayed_work chan_timer;
632 struct delayed_work retrans_timer;
633 struct delayed_work monitor_timer;
634 struct delayed_work ack_timer;
635
58d35f87
GP
636 struct sk_buff *tx_send_head;
637 struct sk_buff_head tx_q;
f1c6775b 638 struct sk_buff_head srej_q;
3c588192
MM
639 struct l2cap_seq_list srej_list;
640 struct l2cap_seq_list retrans_list;
e92c8e70 641
f64b993f
GP
642 struct list_head list;
643 struct list_head global_l;
80808e43 644
f64b993f 645 void *data;
67f86a45 646 const struct l2cap_ops *ops;
c03b355e 647 struct mutex lock;
80808e43
GP
648};
649
650struct l2cap_ops {
f64b993f 651 char *name;
80808e43 652
80b98027
GP
653 struct l2cap_chan *(*new_connection) (struct l2cap_chan *chan);
654 int (*recv) (struct l2cap_chan * chan,
655 struct sk_buff *skb);
c0df7f6e 656 void (*teardown) (struct l2cap_chan *chan, int err);
80b98027
GP
657 void (*close) (struct l2cap_chan *chan);
658 void (*state_change) (struct l2cap_chan *chan,
53f52121 659 int state, int err);
54a59aa2 660 void (*ready) (struct l2cap_chan *chan);
2dc4e510 661 void (*defer) (struct l2cap_chan *chan);
d97c899b 662 void (*resume) (struct l2cap_chan *chan);
837776f7 663 void (*suspend) (struct l2cap_chan *chan);
5ec1bbe5 664 void (*set_shutdown) (struct l2cap_chan *chan);
8d836d71 665 long (*get_sndtimeo) (struct l2cap_chan *chan);
b48596d1 666 struct pid *(*get_peer_pid) (struct l2cap_chan *chan);
2f7719ce 667 struct sk_buff *(*alloc_skb) (struct l2cap_chan *chan,
d9fbd02b 668 unsigned long hdr_len,
90338947 669 unsigned long len, int nb);
f1942564
LAD
670 int (*filter) (struct l2cap_chan * chan,
671 struct sk_buff *skb);
1da177e4
LT
672};
673
674struct l2cap_conn {
f64b993f
GP
675 struct hci_conn *hcon;
676 struct hci_chan *hchan;
1da177e4 677
f64b993f 678 unsigned int mtu;
1da177e4 679
f64b993f 680 __u32 feat_mask;
0bd49fc7
JH
681 __u8 remote_fixed_chan;
682 __u8 local_fixed_chan;
4e8402a3 683
f64b993f
GP
684 __u8 info_state;
685 __u8 info_ident;
4e8402a3 686
f64b993f 687 struct delayed_work info_timer;
4e8402a3 688
f64b993f
GP
689 struct sk_buff *rx_skb;
690 __u32 rx_len;
691 __u8 tx_ident;
5a54e7c8 692 struct mutex ident_lock;
1da177e4 693
61a939c6
JH
694 struct sk_buff_head pending_rx;
695 struct work_struct pending_rx_work;
696
f3d82d0c
JH
697 struct work_struct id_addr_update_work;
698
f64b993f 699 __u8 disc_reason;
2950f21a 700
70db83c4 701 struct l2cap_chan *smp;
5d3de7df 702
f64b993f
GP
703 struct list_head chan_l;
704 struct mutex chan_lock;
9c903e37 705 struct kref ref;
2c8e1411
DH
706 struct list_head users;
707};
708
709struct l2cap_user {
710 struct list_head list;
711 int (*probe) (struct l2cap_conn *conn, struct l2cap_user *user);
712 void (*remove) (struct l2cap_conn *conn, struct l2cap_user *user);
1da177e4
LT
713};
714
4e8402a3 715#define L2CAP_INFO_CL_MTU_REQ_SENT 0x01
984947dc
MH
716#define L2CAP_INFO_FEAT_MASK_REQ_SENT 0x04
717#define L2CAP_INFO_FEAT_MASK_REQ_DONE 0x08
4e8402a3 718
715ec005
GP
719#define L2CAP_CHAN_RAW 1
720#define L2CAP_CHAN_CONN_LESS 2
721#define L2CAP_CHAN_CONN_ORIENTED 3
2338a7e0 722#define L2CAP_CHAN_FIXED 4
715ec005 723
48454079 724/* ----- L2CAP socket info ----- */
1da177e4
LT
725#define l2cap_pi(sk) ((struct l2cap_pinfo *) sk)
726
727struct l2cap_pinfo {
f64b993f 728 struct bt_sock bt;
48454079 729 struct l2cap_chan *chan;
f64b993f 730 struct sk_buff *rx_busy_skb;
1da177e4
LT
731};
732
c1360a1c
GP
733enum {
734 CONF_REQ_SENT,
735 CONF_INPUT_DONE,
736 CONF_OUTPUT_DONE,
737 CONF_MTU_DONE,
738 CONF_MODE_DONE,
739 CONF_CONNECT_PEND,
f2592d3e 740 CONF_RECV_NO_FCS,
c1360a1c 741 CONF_STATE2_DEVICE,
6327eb98 742 CONF_EWS_RECV,
0e8b207e
AE
743 CONF_LOC_CONF_PEND,
744 CONF_REM_CONF_PEND,
2827011f 745 CONF_NOT_COMPLETE,
c1360a1c 746};
f2fcfcd6
GP
747
748#define L2CAP_CONF_MAX_CONF_REQ 2
749#define L2CAP_CONF_MAX_CONF_RSP 2
861d6882 750
e2ab4353 751enum {
e2ab4353
GP
752 CONN_SREJ_SENT,
753 CONN_WAIT_F,
754 CONN_SREJ_ACT,
755 CONN_SEND_PBIT,
756 CONN_REMOTE_BUSY,
757 CONN_LOCAL_BUSY,
758 CONN_REJ_ACT,
759 CONN_SEND_FBIT,
760 CONN_RNR_SENT,
e2ab4353 761};
e90bac06 762
d57b0e8b
AE
763/* Definitions for flags in l2cap_chan */
764enum {
43bd0f32 765 FLAG_ROLE_SWITCH,
15770b1a 766 FLAG_FORCE_ACTIVE,
ecf61bdb 767 FLAG_FORCE_RELIABLE,
d57b0e8b 768 FLAG_FLUSHABLE,
6327eb98 769 FLAG_EXT_CTRL,
5a9e7057 770 FLAG_EFS_ENABLE,
bdc25783 771 FLAG_DEFER_SETUP,
595177f3 772 FLAG_LE_CONN_REQ_SENT,
14572096 773 FLAG_ECRED_CONN_REQ_SENT,
d52deb17 774 FLAG_PENDING_SECURITY,
c16900cf 775 FLAG_HOLD_HCI_CONN,
d57b0e8b
AE
776};
777
abe84903
JH
778/* Lock nesting levels for L2CAP channels. We need these because lockdep
779 * otherwise considers all channels equal and will e.g. complain about a
780 * connection oriented channel triggering SMP procedures or a listening
781 * channel creating and locking a child channel.
782 */
783enum {
784 L2CAP_NESTING_SMP,
785 L2CAP_NESTING_NORMAL,
786 L2CAP_NESTING_PARENT,
787};
788
d5f7ac38
MM
789enum {
790 L2CAP_TX_STATE_XMIT,
791 L2CAP_TX_STATE_WAIT_F,
792};
793
794enum {
795 L2CAP_RX_STATE_RECV,
796 L2CAP_RX_STATE_SREJ_SENT,
08333283
MM
797 L2CAP_RX_STATE_MOVE,
798 L2CAP_RX_STATE_WAIT_P,
799 L2CAP_RX_STATE_WAIT_F,
d5f7ac38
MM
800};
801
802enum {
803 L2CAP_TXSEQ_EXPECTED,
804 L2CAP_TXSEQ_EXPECTED_SREJ,
805 L2CAP_TXSEQ_UNEXPECTED,
806 L2CAP_TXSEQ_UNEXPECTED_SREJ,
807 L2CAP_TXSEQ_DUPLICATE,
808 L2CAP_TXSEQ_DUPLICATE_SREJ,
809 L2CAP_TXSEQ_INVALID,
810 L2CAP_TXSEQ_INVALID_IGNORE,
811};
812
813enum {
814 L2CAP_EV_DATA_REQUEST,
815 L2CAP_EV_LOCAL_BUSY_DETECTED,
816 L2CAP_EV_LOCAL_BUSY_CLEAR,
817 L2CAP_EV_RECV_REQSEQ_AND_FBIT,
818 L2CAP_EV_RECV_FBIT,
819 L2CAP_EV_RETRANS_TO,
820 L2CAP_EV_MONITOR_TO,
821 L2CAP_EV_EXPLICIT_POLL,
822 L2CAP_EV_RECV_IFRAME,
823 L2CAP_EV_RECV_RR,
824 L2CAP_EV_RECV_REJ,
825 L2CAP_EV_RECV_RNR,
826 L2CAP_EV_RECV_SREJ,
827 L2CAP_EV_RECV_FRAME,
828};
829
08333283
MM
830enum {
831 L2CAP_MOVE_ROLE_NONE,
832 L2CAP_MOVE_ROLE_INITIATOR,
833 L2CAP_MOVE_ROLE_RESPONDER,
834};
835
836enum {
837 L2CAP_MOVE_STABLE,
838 L2CAP_MOVE_WAIT_REQ,
839 L2CAP_MOVE_WAIT_RSP,
840 L2CAP_MOVE_WAIT_RSP_SUCCESS,
841 L2CAP_MOVE_WAIT_CONFIRM,
842 L2CAP_MOVE_WAIT_CONFIRM_RSP,
843 L2CAP_MOVE_WAIT_LOGICAL_COMP,
844 L2CAP_MOVE_WAIT_LOGICAL_CFM,
845 L2CAP_MOVE_WAIT_LOCAL_BUSY,
846 L2CAP_MOVE_WAIT_PREPARE,
847};
848
30648372 849void l2cap_chan_hold(struct l2cap_chan *c);
d0be8347 850struct l2cap_chan *l2cap_chan_hold_unless_zero(struct l2cap_chan *c);
30648372 851void l2cap_chan_put(struct l2cap_chan *c);
371fd835 852
c03b355e
AE
853static inline void l2cap_chan_lock(struct l2cap_chan *chan)
854{
abe84903 855 mutex_lock_nested(&chan->lock, atomic_read(&chan->nesting));
c03b355e
AE
856}
857
858static inline void l2cap_chan_unlock(struct l2cap_chan *chan)
859{
860 mutex_unlock(&chan->lock);
861}
862
c2ec9c1b 863static inline void l2cap_set_timer(struct l2cap_chan *chan,
6f74b6f3 864 struct delayed_work *work, long timeout)
c2ec9c1b 865{
e05dcc32 866 BT_DBG("chan %p state %s timeout %ld", chan,
6f74b6f3 867 state_to_string(chan->state), timeout);
c2ec9c1b 868
6f74b6f3
AE
869 /* If delayed work cancelled do not hold(chan)
870 since it is already done with previous set_timer */
17cd3f37 871 if (!cancel_delayed_work(work))
371fd835 872 l2cap_chan_hold(chan);
6f74b6f3 873
c2ec9c1b
GP
874 schedule_delayed_work(work, timeout);
875}
876
75b93b59 877static inline bool l2cap_clear_timer(struct l2cap_chan *chan,
6f74b6f3 878 struct delayed_work *work)
c2ec9c1b 879{
75b93b59
SJ
880 bool ret;
881
6f74b6f3
AE
882 /* put(chan) if delayed work cancelled otherwise it
883 is done in delayed work function */
17cd3f37 884 ret = cancel_delayed_work(work);
75b93b59 885 if (ret)
371fd835 886 l2cap_chan_put(chan);
75b93b59
SJ
887
888 return ret;
c2ec9c1b
GP
889}
890
c9b66675
GP
891#define __set_chan_timer(c, t) l2cap_set_timer(c, &c->chan_timer, (t))
892#define __clear_chan_timer(c) l2cap_clear_timer(c, &c->chan_timer)
1a09bcb9 893#define __clear_retrans_timer(c) l2cap_clear_timer(c, &c->retrans_timer)
1a09bcb9
GP
894#define __clear_monitor_timer(c) l2cap_clear_timer(c, &c->monitor_timer)
895#define __set_ack_timer(c) l2cap_set_timer(c, &chan->ack_timer, \
b83ddfe2 896 msecs_to_jiffies(L2CAP_DEFAULT_ACK_TO));
1a09bcb9 897#define __clear_ack_timer(c) l2cap_clear_timer(c, &c->ack_timer)
c74e560c 898
836be934
AE
899static inline int __seq_offset(struct l2cap_chan *chan, __u16 seq1, __u16 seq2)
900{
5a364bd3
MM
901 if (seq1 >= seq2)
902 return seq1 - seq2;
903 else
904 return chan->tx_win_max + 1 - seq2 + seq1;
836be934
AE
905}
906
907static inline __u16 __next_seq(struct l2cap_chan *chan, __u16 seq)
908{
909 return (seq + 1) % (chan->tx_win_max + 1);
910}
911
7e1af8a3
GP
912static inline struct l2cap_chan *l2cap_chan_no_new_connection(struct l2cap_chan *chan)
913{
914 return NULL;
915}
916
f193844c
JH
917static inline int l2cap_chan_no_recv(struct l2cap_chan *chan, struct sk_buff *skb)
918{
919 return -ENOSYS;
920}
921
922static inline struct sk_buff *l2cap_chan_no_alloc_skb(struct l2cap_chan *chan,
923 unsigned long hdr_len,
924 unsigned long len, int nb)
925{
926 return ERR_PTR(-ENOSYS);
927}
928
7e1af8a3
GP
929static inline void l2cap_chan_no_teardown(struct l2cap_chan *chan, int err)
930{
931}
932
f193844c
JH
933static inline void l2cap_chan_no_close(struct l2cap_chan *chan)
934{
935}
936
7e1af8a3
GP
937static inline void l2cap_chan_no_ready(struct l2cap_chan *chan)
938{
939}
1da177e4 940
f193844c
JH
941static inline void l2cap_chan_no_state_change(struct l2cap_chan *chan,
942 int state, int err)
943{
944}
945
2dc4e510
GP
946static inline void l2cap_chan_no_defer(struct l2cap_chan *chan)
947{
948}
949
f193844c
JH
950static inline void l2cap_chan_no_suspend(struct l2cap_chan *chan)
951{
952}
953
2ce5fb51
MH
954static inline void l2cap_chan_no_resume(struct l2cap_chan *chan)
955{
956}
957
5ec1bbe5
GP
958static inline void l2cap_chan_no_set_shutdown(struct l2cap_chan *chan)
959{
960}
961
8d836d71
GP
962static inline long l2cap_chan_no_get_sndtimeo(struct l2cap_chan *chan)
963{
964 return 0;
965}
966
eb939922 967extern bool disable_ertm;
4be5ca67 968extern bool enable_ecred;
bb58f747
GP
969
970int l2cap_init_sockets(void);
971void l2cap_cleanup_sockets(void);
b3916db3 972bool l2cap_is_socket(struct socket *sock);
bb58f747 973
27e2d4c8 974void __l2cap_le_connect_rsp_defer(struct l2cap_chan *chan);
15f02b91 975void __l2cap_ecred_conn_rsp_defer(struct l2cap_chan *chan);
8c1d787b 976void __l2cap_connect_rsp_defer(struct l2cap_chan *chan);
68983259 977
9e4425ff
GP
978int l2cap_add_psm(struct l2cap_chan *chan, bdaddr_t *src, __le16 psm);
979int l2cap_add_scid(struct l2cap_chan *chan, __u16 scid);
980
eef1d9b6 981struct l2cap_chan *l2cap_chan_create(void);
0f852724 982void l2cap_chan_close(struct l2cap_chan *chan, int reason);
cbe8fed4 983int l2cap_chan_connect(struct l2cap_chan *chan, __le16 psm, u16 cid,
8e9f9892 984 bdaddr_t *dst, u8 dst_type);
15f02b91 985int l2cap_chan_reconfigure(struct l2cap_chan *chan, __u16 mtu);
8d46321c 986int l2cap_chan_send(struct l2cap_chan *chan, struct msghdr *msg, size_t len);
e328140f 987void l2cap_chan_busy(struct l2cap_chan *chan, int busy);
e7cafc45 988int l2cap_chan_check_security(struct l2cap_chan *chan, bool initiator);
bd4b1653 989void l2cap_chan_set_defaults(struct l2cap_chan *chan);
466f8004
AE
990int l2cap_ertm_init(struct l2cap_chan *chan);
991void l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan);
93c3e8f5 992void __l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan);
da49b602
LAD
993typedef void (*l2cap_chan_func_t)(struct l2cap_chan *chan, void *data);
994void l2cap_chan_list(struct l2cap_conn *conn, l2cap_chan_func_t func,
995 void *data);
466f8004 996void l2cap_chan_del(struct l2cap_chan *chan, int err);
2766be48 997void l2cap_send_conn_req(struct l2cap_chan *chan);
3f7a56c4 998void l2cap_move_start(struct l2cap_chan *chan);
27695fb4
AE
999void l2cap_logical_cfm(struct l2cap_chan *chan, struct hci_chan *hchan,
1000 u8 status);
a514b17f 1001void __l2cap_physical_cfm(struct l2cap_chan *chan, int result);
bb58f747 1002
51bb8457 1003struct l2cap_conn *l2cap_conn_get(struct l2cap_conn *conn);
9c903e37
DH
1004void l2cap_conn_put(struct l2cap_conn *conn);
1005
2c8e1411
DH
1006int l2cap_register_user(struct l2cap_conn *conn, struct l2cap_user *user);
1007void l2cap_unregister_user(struct l2cap_conn *conn, struct l2cap_user *user);
1008
1da177e4 1009#endif /* __L2CAP_H */