URL https://opencores.org/ocsvn/or1k_soc_on_altera_embedded_dev_kit/or1k_soc_on_altera_embedded_dev_kit/trunk

Subversion Repositories or1k_soc_on_altera_embedded_dev_kit

[/] [or1k_soc_on_altera_embedded_dev_kit/] [trunk/] [linux-2.6/] [linux-2.6.24/] [net/] [bluetooth/] [hci_sock.c] - Blame information for rev 11

Go to most recent revision | Details | Compare with Previous | View Log


/*
   BlueZ - Bluetooth protocol stack for Linux
   Copyright (C) 2000-2001 Qualcomm Incorporated
 
   Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
 
   This program is free software; you can redistribute it and/or modify
   it under the terms of the GNU General Public License version 2 as
   published by the Free Software Foundation;
 
   THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
   OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
   FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
   IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
   CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
   WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
   ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
   OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 
   ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
   COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
   SOFTWARE IS DISCLAIMED.
*/
 
/* Bluetooth HCI sockets. */
 
#include <linux/module.h>
 
#include <linux/types.h>
#include <linux/capability.h>
#include <linux/errno.h>
#include <linux/kernel.h>
#include <linux/slab.h>
#include <linux/poll.h>
#include <linux/fcntl.h>
#include <linux/init.h>
#include <linux/skbuff.h>
#include <linux/workqueue.h>
#include <linux/interrupt.h>
#include <linux/compat.h>
#include <linux/socket.h>
#include <linux/ioctl.h>
#include <net/sock.h>
 
#include <asm/system.h>
#include <asm/uaccess.h>
#include <asm/unaligned.h>
 
#include <net/bluetooth/bluetooth.h>
#include <net/bluetooth/hci_core.h>
 
#ifndef CONFIG_BT_HCI_SOCK_DEBUG
#undef  BT_DBG
#define BT_DBG(D...)
#endif
 
/* ----- HCI socket interface ----- */
 
static inline int hci_test_bit(int nr, void *addr)
{
        return *((__u32 *) addr + (nr >> 5)) & ((__u32) 1 << (nr & 31));
}
 
/* Security filter */
static struct hci_sec_filter hci_sec_filter = {
        /* Packet types */
        0x10,
        /* Events */
        { 0x1000d9fe, 0x0000b00c },
        /* Commands */
        {
                { 0x0 },
                /* OGF_LINK_CTL */
                { 0xbe000006, 0x00000001, 0x00000000, 0x00 },
                /* OGF_LINK_POLICY */
                { 0x00005200, 0x00000000, 0x00000000, 0x00 },
                /* OGF_HOST_CTL */
                { 0xaab00200, 0x2b402aaa, 0x05220154, 0x00 },
                /* OGF_INFO_PARAM */
                { 0x000002be, 0x00000000, 0x00000000, 0x00 },
                /* OGF_STATUS_PARAM */
                { 0x000000ea, 0x00000000, 0x00000000, 0x00 }
        }
};
 
static struct bt_sock_list hci_sk_list = {
        .lock = RW_LOCK_UNLOCKED
};
 
/* Send frame to RAW socket */
void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb)
{
        struct sock *sk;
        struct hlist_node *node;
 
        BT_DBG("hdev %p len %d", hdev, skb->len);
 
        read_lock(&hci_sk_list.lock);
        sk_for_each(sk, node, &hci_sk_list.head) {
                struct hci_filter *flt;
                struct sk_buff *nskb;
 
                if (sk->sk_state != BT_BOUND || hci_pi(sk)->hdev != hdev)
                        continue;
 
                /* Don't send frame to the socket it came from */
                if (skb->sk == sk)
                        continue;
 
                /* Apply filter */
                flt = &hci_pi(sk)->filter;
 
                if (!test_bit((bt_cb(skb)->pkt_type == HCI_VENDOR_PKT) ?
 
                        continue;
 
                if (bt_cb(skb)->pkt_type == HCI_EVENT_PKT) {
                        register int evt = (*(__u8 *)skb->data & HCI_FLT_EVENT_BITS);
 
                        if (!hci_test_bit(evt, &flt->event_mask))
                                continue;
 
                        if (flt->opcode &&
                            ((evt == HCI_EV_CMD_COMPLETE &&
                              flt->opcode !=
                              get_unaligned((__le16 *)(skb->data + 3))) ||
                             (evt == HCI_EV_CMD_STATUS &&
                              flt->opcode !=
                              get_unaligned((__le16 *)(skb->data + 4)))))
                                continue;
                }
 
                if (!(nskb = skb_clone(skb, GFP_ATOMIC)))
                        continue;
 
                /* Put type byte before the data */
                memcpy(skb_push(nskb, 1), &bt_cb(nskb)->pkt_type, 1);
 
                if (sock_queue_rcv_skb(sk, nskb))
                        kfree_skb(nskb);
        }
        read_unlock(&hci_sk_list.lock);
}
 
static int hci_sock_release(struct socket *sock)
{
        struct sock *sk = sock->sk;
        struct hci_dev *hdev;
 
        BT_DBG("sock %p sk %p", sock, sk);
 
        if (!sk)
                return 0;
 
        hdev = hci_pi(sk)->hdev;
 
        bt_sock_unlink(&hci_sk_list, sk);
 
        if (hdev) {
                atomic_dec(&hdev->promisc);
                hci_dev_put(hdev);
        }
 
        sock_orphan(sk);
 
        skb_queue_purge(&sk->sk_receive_queue);
        skb_queue_purge(&sk->sk_write_queue);
 
        sock_put(sk);
        return 0;
}
 
/* Ioctls that require bound socket */
static inline int hci_sock_bound_ioctl(struct sock *sk, unsigned int cmd, unsigned long arg)
{
        struct hci_dev *hdev = hci_pi(sk)->hdev;
 
        if (!hdev)
                return -EBADFD;
 
        switch (cmd) {
        case HCISETRAW:
                if (!capable(CAP_NET_ADMIN))
                        return -EACCES;
 
                if (test_bit(HCI_QUIRK_RAW_DEVICE, &hdev->quirks))
                        return -EPERM;
 
                if (arg)
                        set_bit(HCI_RAW, &hdev->flags);
                else
                        clear_bit(HCI_RAW, &hdev->flags);
 
                return 0;
 
        case HCISETSECMGR:
                if (!capable(CAP_NET_ADMIN))
                        return -EACCES;
 
                if (arg)
                        set_bit(HCI_SECMGR, &hdev->flags);
                else
                        clear_bit(HCI_SECMGR, &hdev->flags);
 
                return 0;
 
        case HCIGETCONNINFO:
                return hci_get_conn_info(hdev, (void __user *)arg);
 
        default:
                if (hdev->ioctl)
                        return hdev->ioctl(hdev, cmd, arg);
                return -EINVAL;
        }
}
 
static int hci_sock_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
{
        struct sock *sk = sock->sk;
        void __user *argp = (void __user *)arg;
        int err;
 
        BT_DBG("cmd %x arg %lx", cmd, arg);
 
        switch (cmd) {
        case HCIGETDEVLIST:
                return hci_get_dev_list(argp);
 
        case HCIGETDEVINFO:
                return hci_get_dev_info(argp);
 
        case HCIGETCONNLIST:
                return hci_get_conn_list(argp);
 
        case HCIDEVUP:
                if (!capable(CAP_NET_ADMIN))
                        return -EACCES;
                return hci_dev_open(arg);
 
        case HCIDEVDOWN:
                if (!capable(CAP_NET_ADMIN))
                        return -EACCES;
                return hci_dev_close(arg);
 
        case HCIDEVRESET:
                if (!capable(CAP_NET_ADMIN))
                        return -EACCES;
                return hci_dev_reset(arg);
 
        case HCIDEVRESTAT:
                if (!capable(CAP_NET_ADMIN))
                        return -EACCES;
                return hci_dev_reset_stat(arg);
 
        case HCISETSCAN:
        case HCISETAUTH:
        case HCISETENCRYPT:
        case HCISETPTYPE:
        case HCISETLINKPOL:
        case HCISETLINKMODE:
        case HCISETACLMTU:
        case HCISETSCOMTU:
                if (!capable(CAP_NET_ADMIN))
                        return -EACCES;
                return hci_dev_cmd(cmd, argp);
 
        case HCIINQUIRY:
                return hci_inquiry(argp);
 
        default:
                lock_sock(sk);
                err = hci_sock_bound_ioctl(sk, cmd, arg);
                release_sock(sk);
                return err;
        }
}
 
static int hci_sock_bind(struct socket *sock, struct sockaddr *addr, int addr_len)
{
        struct sockaddr_hci *haddr = (struct sockaddr_hci *) addr;
        struct sock *sk = sock->sk;
        struct hci_dev *hdev = NULL;
        int err = 0;
 
        BT_DBG("sock %p sk %p", sock, sk);
 
        if (!haddr || haddr->hci_family != AF_BLUETOOTH)
                return -EINVAL;
 
        lock_sock(sk);
 
        if (hci_pi(sk)->hdev) {
                err = -EALREADY;
                goto done;
        }
 
        if (haddr->hci_dev != HCI_DEV_NONE) {
                if (!(hdev = hci_dev_get(haddr->hci_dev))) {
                        err = -ENODEV;
                        goto done;
                }
 
                atomic_inc(&hdev->promisc);
        }
 
        hci_pi(sk)->hdev = hdev;
        sk->sk_state = BT_BOUND;
 
done:
        release_sock(sk);
        return err;
}
 
static int hci_sock_getname(struct socket *sock, struct sockaddr *addr, int *addr_len, int peer)
{
        struct sockaddr_hci *haddr = (struct sockaddr_hci *) addr;
        struct sock *sk = sock->sk;
        struct hci_dev *hdev = hci_pi(sk)->hdev;
 
        BT_DBG("sock %p sk %p", sock, sk);
 
        if (!hdev)
                return -EBADFD;
 
        lock_sock(sk);
 
        *addr_len = sizeof(*haddr);
        haddr->hci_family = AF_BLUETOOTH;
        haddr->hci_dev    = hdev->id;
 
        release_sock(sk);
        return 0;
}
 
static inline void hci_sock_cmsg(struct sock *sk, struct msghdr *msg, struct sk_buff *skb)
{
        __u32 mask = hci_pi(sk)->cmsg_mask;
 
        if (mask & HCI_CMSG_DIR) {
                int incoming = bt_cb(skb)->incoming;
                put_cmsg(msg, SOL_HCI, HCI_CMSG_DIR, sizeof(incoming), &incoming);
        }
 
        if (mask & HCI_CMSG_TSTAMP) {
                struct timeval tv;
                void *data;
                int len;
 
                skb_get_timestamp(skb, &tv);
 
                data = &tv;
                len = sizeof(tv);
#ifdef CONFIG_COMPAT
                if (msg->msg_flags & MSG_CMSG_COMPAT) {
                        struct compat_timeval ctv;
                        ctv.tv_sec = tv.tv_sec;
                        ctv.tv_usec = tv.tv_usec;
                        data = &ctv;
                        len = sizeof(ctv);
                }
#endif
 
                put_cmsg(msg, SOL_HCI, HCI_CMSG_TSTAMP, len, data);
        }
}
 
static int hci_sock_recvmsg(struct kiocb *iocb, struct socket *sock,
                                struct msghdr *msg, size_t len, int flags)
{
        int noblock = flags & MSG_DONTWAIT;
        struct sock *sk = sock->sk;
        struct sk_buff *skb;
        int copied, err;
 
        BT_DBG("sock %p, sk %p", sock, sk);
 
        if (flags & (MSG_OOB))
                return -EOPNOTSUPP;
 
        if (sk->sk_state == BT_CLOSED)
                return 0;
 
        if (!(skb = skb_recv_datagram(sk, flags, noblock, &err)))
                return err;
 
        msg->msg_namelen = 0;
 
        copied = skb->len;
        if (len < copied) {
                msg->msg_flags |= MSG_TRUNC;
                copied = len;
        }
 
        skb_reset_transport_header(skb);
        err = skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied);
 
        hci_sock_cmsg(sk, msg, skb);
 
        skb_free_datagram(sk, skb);
 
        return err ? : copied;
}
 
static int hci_sock_sendmsg(struct kiocb *iocb, struct socket *sock,
                            struct msghdr *msg, size_t len)
{
        struct sock *sk = sock->sk;
        struct hci_dev *hdev;
        struct sk_buff *skb;
        int err;
 
        BT_DBG("sock %p sk %p", sock, sk);
 
        if (msg->msg_flags & MSG_OOB)
                return -EOPNOTSUPP;
 
        if (msg->msg_flags & ~(MSG_DONTWAIT|MSG_NOSIGNAL|MSG_ERRQUEUE))
                return -EINVAL;
 
        if (len < 4 || len > HCI_MAX_FRAME_SIZE)
                return -EINVAL;
 
        lock_sock(sk);
 
        if (!(hdev = hci_pi(sk)->hdev)) {
                err = -EBADFD;
                goto done;
        }
 
        if (!(skb = bt_skb_send_alloc(sk, len, msg->msg_flags & MSG_DONTWAIT, &err)))
                goto done;
 
        if (memcpy_fromiovec(skb_put(skb, len), msg->msg_iov, len)) {
                err = -EFAULT;
                goto drop;
        }
 
        bt_cb(skb)->pkt_type = *((unsigned char *) skb->data);
        skb_pull(skb, 1);
        skb->dev = (void *) hdev;
 
        if (bt_cb(skb)->pkt_type == HCI_COMMAND_PKT) {
                u16 opcode = __le16_to_cpu(get_unaligned((__le16 *) skb->data));
                u16 ogf = hci_opcode_ogf(opcode);
                u16 ocf = hci_opcode_ocf(opcode);
 
                if (((ogf > HCI_SFLT_MAX_OGF) ||
                                !hci_test_bit(ocf & HCI_FLT_OCF_BITS, &hci_sec_filter.ocf_mask[ogf])) &&
                                        !capable(CAP_NET_RAW)) {
                        err = -EPERM;
                        goto drop;
                }
 
                if (test_bit(HCI_RAW, &hdev->flags) || (ogf == 0x3f)) {
                        skb_queue_tail(&hdev->raw_q, skb);
                        hci_sched_tx(hdev);
                } else {
                        skb_queue_tail(&hdev->cmd_q, skb);
                        hci_sched_cmd(hdev);
                }
        } else {
                if (!capable(CAP_NET_RAW)) {
                        err = -EPERM;
                        goto drop;
                }
 
                skb_queue_tail(&hdev->raw_q, skb);
                hci_sched_tx(hdev);
        }
 
        err = len;
 
done:
        release_sock(sk);
        return err;
 
drop:
        kfree_skb(skb);
        goto done;
}
 
static int hci_sock_setsockopt(struct socket *sock, int level, int optname, char __user *optval, int len)
{
        struct hci_ufilter uf = { .opcode = 0 };
        struct sock *sk = sock->sk;
        int err = 0, opt = 0;
 
        BT_DBG("sk %p, opt %d", sk, optname);
 
        lock_sock(sk);
 
        switch (optname) {
        case HCI_DATA_DIR:
                if (get_user(opt, (int __user *)optval)) {
                        err = -EFAULT;
                        break;
                }
 
                if (opt)
                        hci_pi(sk)->cmsg_mask |= HCI_CMSG_DIR;
                else
                        hci_pi(sk)->cmsg_mask &= ~HCI_CMSG_DIR;
                break;
 
        case HCI_TIME_STAMP:
                if (get_user(opt, (int __user *)optval)) {
                        err = -EFAULT;
                        break;
                }
 
                if (opt)
                        hci_pi(sk)->cmsg_mask |= HCI_CMSG_TSTAMP;
                else
                        hci_pi(sk)->cmsg_mask &= ~HCI_CMSG_TSTAMP;
                break;
 
        case HCI_FILTER:
                {
                        struct hci_filter *f = &hci_pi(sk)->filter;
 
                        uf.type_mask = f->type_mask;
                        uf.opcode    = f->opcode;
                        uf.event_mask[0] = *((u32 *) f->event_mask + 0);
                        uf.event_mask[1] = *((u32 *) f->event_mask + 1);
                }
 
                len = min_t(unsigned int, len, sizeof(uf));
                if (copy_from_user(&uf, optval, len)) {
                        err = -EFAULT;
                        break;
                }
 
                if (!capable(CAP_NET_RAW)) {
                        uf.type_mask &= hci_sec_filter.type_mask;
                        uf.event_mask[0] &= *((u32 *) hci_sec_filter.event_mask + 0);
                        uf.event_mask[1] &= *((u32 *) hci_sec_filter.event_mask + 1);
                }
 
                {
                        struct hci_filter *f = &hci_pi(sk)->filter;
 
                        f->type_mask = uf.type_mask;
                        f->opcode    = uf.opcode;
                        *((u32 *) f->event_mask + 0) = uf.event_mask[0];
                        *((u32 *) f->event_mask + 1) = uf.event_mask[1];
                }
                break;
 
        default:
                err = -ENOPROTOOPT;
                break;
        }
 
        release_sock(sk);
        return err;
}
 
static int hci_sock_getsockopt(struct socket *sock, int level, int optname, char __user *optval, int __user *optlen)
{
        struct hci_ufilter uf;
        struct sock *sk = sock->sk;
        int len, opt;
 
        if (get_user(len, optlen))
                return -EFAULT;
 
        switch (optname) {
        case HCI_DATA_DIR:
                if (hci_pi(sk)->cmsg_mask & HCI_CMSG_DIR)
                        opt = 1;
                else
                        opt = 0;
 
                if (put_user(opt, optval))
                        return -EFAULT;
                break;
 
        case HCI_TIME_STAMP:
                if (hci_pi(sk)->cmsg_mask & HCI_CMSG_TSTAMP)
                        opt = 1;
                else
                        opt = 0;
 
                if (put_user(opt, optval))
                        return -EFAULT;
                break;
 
        case HCI_FILTER:
                {
                        struct hci_filter *f = &hci_pi(sk)->filter;
 
                        uf.type_mask = f->type_mask;
                        uf.opcode    = f->opcode;
                        uf.event_mask[0] = *((u32 *) f->event_mask + 0);
                        uf.event_mask[1] = *((u32 *) f->event_mask + 1);
                }
 
                len = min_t(unsigned int, len, sizeof(uf));
                if (copy_to_user(optval, &uf, len))
                        return -EFAULT;
                break;
 
        default:
                return -ENOPROTOOPT;
                break;
        }
 
        return 0;
}
 
static const struct proto_ops hci_sock_ops = {
        .family         = PF_BLUETOOTH,
        .owner          = THIS_MODULE,
        .release        = hci_sock_release,
        .bind           = hci_sock_bind,
        .getname        = hci_sock_getname,
        .sendmsg        = hci_sock_sendmsg,
        .recvmsg        = hci_sock_recvmsg,
        .ioctl          = hci_sock_ioctl,
        .poll           = datagram_poll,
        .listen         = sock_no_listen,
        .shutdown       = sock_no_shutdown,
        .setsockopt     = hci_sock_setsockopt,
        .getsockopt     = hci_sock_getsockopt,
        .connect        = sock_no_connect,
        .socketpair     = sock_no_socketpair,
        .accept         = sock_no_accept,
        .mmap           = sock_no_mmap
};
 
static struct proto hci_sk_proto = {
        .name           = "HCI",
        .owner          = THIS_MODULE,
        .obj_size       = sizeof(struct hci_pinfo)
};
 
static int hci_sock_create(struct net *net, struct socket *sock, int protocol)
{
        struct sock *sk;
 
        BT_DBG("sock %p", sock);
 
        if (sock->type != SOCK_RAW)
                return -ESOCKTNOSUPPORT;
 
        sock->ops = &hci_sock_ops;
 
        sk = sk_alloc(net, PF_BLUETOOTH, GFP_ATOMIC, &hci_sk_proto);
        if (!sk)
                return -ENOMEM;
 
        sock_init_data(sock, sk);
 
        sock_reset_flag(sk, SOCK_ZAPPED);
 
        sk->sk_protocol = protocol;
 
        sock->state = SS_UNCONNECTED;
        sk->sk_state = BT_OPEN;
 
        bt_sock_link(&hci_sk_list, sk);
        return 0;
}
 
static int hci_sock_dev_event(struct notifier_block *this, unsigned long event, void *ptr)
{
        struct hci_dev *hdev = (struct hci_dev *) ptr;
        struct hci_ev_si_device ev;
 
        BT_DBG("hdev %s event %ld", hdev->name, event);
 
        /* Send event to sockets */
        ev.event  = event;
        ev.dev_id = hdev->id;
        hci_si_event(NULL, HCI_EV_SI_DEVICE, sizeof(ev), &ev);
 
        if (event == HCI_DEV_UNREG) {
                struct sock *sk;
                struct hlist_node *node;
 
                /* Detach sockets from device */
                read_lock(&hci_sk_list.lock);
                sk_for_each(sk, node, &hci_sk_list.head) {
                        local_bh_disable();
                        bh_lock_sock_nested(sk);
                        if (hci_pi(sk)->hdev == hdev) {
                                hci_pi(sk)->hdev = NULL;
                                sk->sk_err = EPIPE;
                                sk->sk_state = BT_OPEN;
                                sk->sk_state_change(sk);
 
                                hci_dev_put(hdev);
                        }
                        bh_unlock_sock(sk);
                        local_bh_enable();
                }
                read_unlock(&hci_sk_list.lock);
        }
 
        return NOTIFY_DONE;
}
 
static struct net_proto_family hci_sock_family_ops = {
        .family = PF_BLUETOOTH,
        .owner  = THIS_MODULE,
        .create = hci_sock_create,
};
 
static struct notifier_block hci_sock_nblock = {
        .notifier_call = hci_sock_dev_event
};
 
int __init hci_sock_init(void)
{
        int err;
 
        err = proto_register(&hci_sk_proto, 0);
        if (err < 0)
                return err;
 
        err = bt_sock_register(BTPROTO_HCI, &hci_sock_family_ops);
        if (err < 0)
                goto error;
 
        hci_register_notifier(&hci_sock_nblock);
 
        BT_INFO("HCI socket layer initialized");
 
        return 0;
 
error:
        BT_ERR("HCI socket registration failed");
        proto_unregister(&hci_sk_proto);
        return err;
}
 
int __exit hci_sock_cleanup(void)
{
        if (bt_sock_unregister(BTPROTO_HCI) < 0)
                BT_ERR("HCI socket unregistration failed");
 
        hci_unregister_notifier(&hci_sock_nblock);
 
        proto_unregister(&hci_sk_proto);
 
        return 0;
}

Browse

Tools

Subversion Repositories or1k_soc_on_altera_embedded_dev_kit

[/] [or1k_soc_on_altera_embedded_dev_kit/] [trunk/] [linux-2.6/] [linux-2.6.24/] [net/] [bluetooth/] [hci_sock.c] - Blame information for rev 11

Line No.	Rev	Author	Line
1	3	xianfeng	`/*`
2			`BlueZ - Bluetooth protocol stack for Linux`
3			`Copyright (C) 2000-2001 Qualcomm Incorporated`
4
5			`Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>`
6
7			`This program is free software; you can redistribute it and/or modify`
8			`it under the terms of the GNU General Public License version 2 as`
9			`published by the Free Software Foundation;`
10
11			`THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS`
12			`OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,`
13			`FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.`
14			`IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY`
15			`CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES`
16			`WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN`
17			`ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF`
18			`OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.`
19
20			`ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,`
21			`COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS`
22			`SOFTWARE IS DISCLAIMED.`
23			`*/`
24
25			`/* Bluetooth HCI sockets. */`
26
27			`#include <linux/module.h>`
28
29			`#include <linux/types.h>`
30			`#include <linux/capability.h>`
31			`#include <linux/errno.h>`
32			`#include <linux/kernel.h>`
33			`#include <linux/slab.h>`
34			`#include <linux/poll.h>`
35			`#include <linux/fcntl.h>`
36			`#include <linux/init.h>`
37			`#include <linux/skbuff.h>`
38			`#include <linux/workqueue.h>`
39			`#include <linux/interrupt.h>`
40			`#include <linux/compat.h>`
41			`#include <linux/socket.h>`
42			`#include <linux/ioctl.h>`
43			`#include <net/sock.h>`
44
45			`#include <asm/system.h>`
46			`#include <asm/uaccess.h>`
47			`#include <asm/unaligned.h>`
48
49			`#include <net/bluetooth/bluetooth.h>`
50			`#include <net/bluetooth/hci_core.h>`
51
52			`#ifndef CONFIG_BT_HCI_SOCK_DEBUG`
53			`#undef BT_DBG`
54			`#define BT_DBG(D...)`
55			`#endif`
56
57			`/* ----- HCI socket interface ----- */`
58
59			`static inline int hci_test_bit(int nr, void *addr)`
60			`{`
61			`return ((__u32 ) addr + (nr >> 5)) & ((__u32) 1 << (nr & 31));`
62			`}`
63
64			`/* Security filter */`
65			`static struct hci_sec_filter hci_sec_filter = {`
66			`/* Packet types */`
67			`0x10,`
68			`/* Events */`
69			`{ 0x1000d9fe, 0x0000b00c },`
70			`/* Commands */`
71			`{`
72			`{ 0x0 },`
73			`/* OGF_LINK_CTL */`
74			`{ 0xbe000006, 0x00000001, 0x00000000, 0x00 },`
75			`/* OGF_LINK_POLICY */`
76			`{ 0x00005200, 0x00000000, 0x00000000, 0x00 },`
77			`/* OGF_HOST_CTL */`
78			`{ 0xaab00200, 0x2b402aaa, 0x05220154, 0x00 },`
79			`/* OGF_INFO_PARAM */`
80			`{ 0x000002be, 0x00000000, 0x00000000, 0x00 },`
81			`/* OGF_STATUS_PARAM */`
82			`{ 0x000000ea, 0x00000000, 0x00000000, 0x00 }`
83			`}`
84			`};`
85
86			`static struct bt_sock_list hci_sk_list = {`
87			`.lock = RW_LOCK_UNLOCKED`
88			`};`
89
90			`/* Send frame to RAW socket */`
91			`void hci_send_to_sock(struct hci_dev hdev, struct sk_buff skb)`
92			`{`
93			`struct sock *sk;`
94			`struct hlist_node *node;`
95
96			`BT_DBG("hdev %p len %d", hdev, skb->len);`
97
98			`read_lock(&hci_sk_list.lock);`
99			`sk_for_each(sk, node, &hci_sk_list.head) {`
100			`struct hci_filter *flt;`
101			`struct sk_buff *nskb;`
102
103			`if (sk->sk_state != BT_BOUND \|\| hci_pi(sk)->hdev != hdev)`
104			`continue;`
105
106			`/* Don't send frame to the socket it came from */`
107			`if (skb->sk == sk)`
108			`continue;`
109
110			`/* Apply filter */`
111			`flt = &hci_pi(sk)->filter;`
112
113			`if (!test_bit((bt_cb(skb)->pkt_type == HCI_VENDOR_PKT) ?`
114
115			`continue;`
116
117			`if (bt_cb(skb)->pkt_type == HCI_EVENT_PKT) {`
118			`register int evt = ((__u8 )skb->data & HCI_FLT_EVENT_BITS);`
119
120			`if (!hci_test_bit(evt, &flt->event_mask))`
121			`continue;`
122
123			`if (flt->opcode &&`
124			`((evt == HCI_EV_CMD_COMPLETE &&`
125			`flt->opcode !=`
126			`get_unaligned((__le16 *)(skb->data + 3))) \|\|`
127			`(evt == HCI_EV_CMD_STATUS &&`
128			`flt->opcode !=`
129			`get_unaligned((__le16 *)(skb->data + 4)))))`
130			`continue;`
131			`}`
132
133			`if (!(nskb = skb_clone(skb, GFP_ATOMIC)))`
134			`continue;`
135
136			`/* Put type byte before the data */`
137			`memcpy(skb_push(nskb, 1), &bt_cb(nskb)->pkt_type, 1);`
138
139			`if (sock_queue_rcv_skb(sk, nskb))`
140			`kfree_skb(nskb);`
141			`}`
142			`read_unlock(&hci_sk_list.lock);`
143			`}`
144
145			`static int hci_sock_release(struct socket *sock)`
146			`{`
147			`struct sock *sk = sock->sk;`
148			`struct hci_dev *hdev;`
149
150			`BT_DBG("sock %p sk %p", sock, sk);`
151
152			`if (!sk)`
153			`return 0;`
154
155			`hdev = hci_pi(sk)->hdev;`
156
157			`bt_sock_unlink(&hci_sk_list, sk);`
158
159			`if (hdev) {`
160			`atomic_dec(&hdev->promisc);`
161			`hci_dev_put(hdev);`
162			`}`
163
164			`sock_orphan(sk);`
165
166			`skb_queue_purge(&sk->sk_receive_queue);`
167			`skb_queue_purge(&sk->sk_write_queue);`
168
169			`sock_put(sk);`
170			`return 0;`
171			`}`
172
173			`/* Ioctls that require bound socket */`
174			`static inline int hci_sock_bound_ioctl(struct sock *sk, unsigned int cmd, unsigned long arg)`
175			`{`
176			`struct hci_dev *hdev = hci_pi(sk)->hdev;`
177
178			`if (!hdev)`
179			`return -EBADFD;`
180
181			`switch (cmd) {`
182			`case HCISETRAW:`
183			`if (!capable(CAP_NET_ADMIN))`
184			`return -EACCES;`
185
186			`if (test_bit(HCI_QUIRK_RAW_DEVICE, &hdev->quirks))`
187			`return -EPERM;`
188
189			`if (arg)`
190			`set_bit(HCI_RAW, &hdev->flags);`
191			`else`
192			`clear_bit(HCI_RAW, &hdev->flags);`
193
194			`return 0;`
195
196			`case HCISETSECMGR:`
197			`if (!capable(CAP_NET_ADMIN))`
198			`return -EACCES;`
199
200			`if (arg)`
201			`set_bit(HCI_SECMGR, &hdev->flags);`
202			`else`
203			`clear_bit(HCI_SECMGR, &hdev->flags);`
204
205			`return 0;`
206
207			`case HCIGETCONNINFO:`
208			`return hci_get_conn_info(hdev, (void __user *)arg);`
209
210			`default:`
211			`if (hdev->ioctl)`
212			`return hdev->ioctl(hdev, cmd, arg);`
213			`return -EINVAL;`
214			`}`
215			`}`
216
217			`static int hci_sock_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)`
218			`{`
219			`struct sock *sk = sock->sk;`
220			`void __user argp = (void __user )arg;`
221			`int err;`
222
223			`BT_DBG("cmd %x arg %lx", cmd, arg);`
224
225			`switch (cmd) {`
226			`case HCIGETDEVLIST:`
227			`return hci_get_dev_list(argp);`
228
229			`case HCIGETDEVINFO:`
230			`return hci_get_dev_info(argp);`
231
232			`case HCIGETCONNLIST:`
233			`return hci_get_conn_list(argp);`
234
235			`case HCIDEVUP:`
236			`if (!capable(CAP_NET_ADMIN))`
237			`return -EACCES;`
238			`return hci_dev_open(arg);`
239
240			`case HCIDEVDOWN:`
241			`if (!capable(CAP_NET_ADMIN))`
242			`return -EACCES;`
243			`return hci_dev_close(arg);`
244
245			`case HCIDEVRESET:`
246			`if (!capable(CAP_NET_ADMIN))`
247			`return -EACCES;`
248			`return hci_dev_reset(arg);`
249
250			`case HCIDEVRESTAT:`
251			`if (!capable(CAP_NET_ADMIN))`
252			`return -EACCES;`
253			`return hci_dev_reset_stat(arg);`
254
255			`case HCISETSCAN:`
256			`case HCISETAUTH:`
257			`case HCISETENCRYPT:`
258			`case HCISETPTYPE:`
259			`case HCISETLINKPOL:`
260			`case HCISETLINKMODE:`
261			`case HCISETACLMTU:`
262			`case HCISETSCOMTU:`
263			`if (!capable(CAP_NET_ADMIN))`
264			`return -EACCES;`
265			`return hci_dev_cmd(cmd, argp);`
266
267			`case HCIINQUIRY:`
268			`return hci_inquiry(argp);`
269
270			`default:`
271			`lock_sock(sk);`
272			`err = hci_sock_bound_ioctl(sk, cmd, arg);`
273			`release_sock(sk);`
274			`return err;`
275			`}`
276			`}`
277
278			`static int hci_sock_bind(struct socket sock, struct sockaddr addr, int addr_len)`
279			`{`
280			`struct sockaddr_hci haddr = (struct sockaddr_hci ) addr;`
281			`struct sock *sk = sock->sk;`
282			`struct hci_dev *hdev = NULL;`
283			`int err = 0;`
284
285			`BT_DBG("sock %p sk %p", sock, sk);`
286
287			`if (!haddr \|\| haddr->hci_family != AF_BLUETOOTH)`
288			`return -EINVAL;`
289
290			`lock_sock(sk);`
291
292			`if (hci_pi(sk)->hdev) {`
293			`err = -EALREADY;`
294			`goto done;`
295			`}`
296
297			`if (haddr->hci_dev != HCI_DEV_NONE) {`
298			`if (!(hdev = hci_dev_get(haddr->hci_dev))) {`
299			`err = -ENODEV;`
300			`goto done;`
301			`}`
302
303			`atomic_inc(&hdev->promisc);`
304			`}`
305
306			`hci_pi(sk)->hdev = hdev;`
307			`sk->sk_state = BT_BOUND;`
308
309			`done:`
310			`release_sock(sk);`
311			`return err;`
312			`}`
313
314			`static int hci_sock_getname(struct socket sock, struct sockaddr addr, int *addr_len, int peer)`
315			`{`
316			`struct sockaddr_hci haddr = (struct sockaddr_hci ) addr;`
317			`struct sock *sk = sock->sk;`
318			`struct hci_dev *hdev = hci_pi(sk)->hdev;`
319
320			`BT_DBG("sock %p sk %p", sock, sk);`
321
322			`if (!hdev)`
323			`return -EBADFD;`
324
325			`lock_sock(sk);`
326
327			`addr_len = sizeof(haddr);`
328			`haddr->hci_family = AF_BLUETOOTH;`
329			`haddr->hci_dev = hdev->id;`
330
331			`release_sock(sk);`
332			`return 0;`
333			`}`
334
335			`static inline void hci_sock_cmsg(struct sock sk, struct msghdr msg, struct sk_buff *skb)`
336			`{`
337			`__u32 mask = hci_pi(sk)->cmsg_mask;`
338
339			`if (mask & HCI_CMSG_DIR) {`
340			`int incoming = bt_cb(skb)->incoming;`
341			`put_cmsg(msg, SOL_HCI, HCI_CMSG_DIR, sizeof(incoming), &incoming);`
342			`}`
343
344			`if (mask & HCI_CMSG_TSTAMP) {`
345			`struct timeval tv;`
346			`void *data;`
347			`int len;`
348
349			`skb_get_timestamp(skb, &tv);`
350
351			`data = &tv;`
352			`len = sizeof(tv);`
353			`#ifdef CONFIG_COMPAT`
354			`if (msg->msg_flags & MSG_CMSG_COMPAT) {`
355			`struct compat_timeval ctv;`
356			`ctv.tv_sec = tv.tv_sec;`
357			`ctv.tv_usec = tv.tv_usec;`
358			`data = &ctv;`
359			`len = sizeof(ctv);`
360			`}`
361			`#endif`
362
363			`put_cmsg(msg, SOL_HCI, HCI_CMSG_TSTAMP, len, data);`
364			`}`
365			`}`
366
367			`static int hci_sock_recvmsg(struct kiocb iocb, struct socket sock,`
368			`struct msghdr *msg, size_t len, int flags)`
369			`{`
370			`int noblock = flags & MSG_DONTWAIT;`
371			`struct sock *sk = sock->sk;`
372			`struct sk_buff *skb;`
373			`int copied, err;`
374
375			`BT_DBG("sock %p, sk %p", sock, sk);`
376
377			`if (flags & (MSG_OOB))`
378			`return -EOPNOTSUPP;`
379
380			`if (sk->sk_state == BT_CLOSED)`
381			`return 0;`
382
383			`if (!(skb = skb_recv_datagram(sk, flags, noblock, &err)))`
384			`return err;`
385
386			`msg->msg_namelen = 0;`
387
388			`copied = skb->len;`
389			`if (len < copied) {`
390			`msg->msg_flags \|= MSG_TRUNC;`
391			`copied = len;`
392			`}`
393
394			`skb_reset_transport_header(skb);`
395			`err = skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied);`
396
397			`hci_sock_cmsg(sk, msg, skb);`
398
399			`skb_free_datagram(sk, skb);`
400
401			`return err ? : copied;`
402			`}`
403
404			`static int hci_sock_sendmsg(struct kiocb iocb, struct socket sock,`
405			`struct msghdr *msg, size_t len)`
406			`{`
407			`struct sock *sk = sock->sk;`
408			`struct hci_dev *hdev;`
409			`struct sk_buff *skb;`
410			`int err;`
411
412			`BT_DBG("sock %p sk %p", sock, sk);`
413
414			`if (msg->msg_flags & MSG_OOB)`
415			`return -EOPNOTSUPP;`
416
417			`if (msg->msg_flags & ~(MSG_DONTWAIT\|MSG_NOSIGNAL\|MSG_ERRQUEUE))`
418			`return -EINVAL;`
419
420			`if (len < 4 \|\| len > HCI_MAX_FRAME_SIZE)`
421			`return -EINVAL;`
422
423			`lock_sock(sk);`
424
425			`if (!(hdev = hci_pi(sk)->hdev)) {`
426			`err = -EBADFD;`
427			`goto done;`
428			`}`
429
430			`if (!(skb = bt_skb_send_alloc(sk, len, msg->msg_flags & MSG_DONTWAIT, &err)))`
431			`goto done;`
432
433			`if (memcpy_fromiovec(skb_put(skb, len), msg->msg_iov, len)) {`
434			`err = -EFAULT;`
435			`goto drop;`
436			`}`
437
438			`bt_cb(skb)->pkt_type = ((unsigned char ) skb->data);`
439			`skb_pull(skb, 1);`
440			`skb->dev = (void *) hdev;`
441
442			`if (bt_cb(skb)->pkt_type == HCI_COMMAND_PKT) {`
443			`u16 opcode = __le16_to_cpu(get_unaligned((__le16 *) skb->data));`
444			`u16 ogf = hci_opcode_ogf(opcode);`
445			`u16 ocf = hci_opcode_ocf(opcode);`
446
447			`if (((ogf > HCI_SFLT_MAX_OGF) \|\|`
448			`!hci_test_bit(ocf & HCI_FLT_OCF_BITS, &hci_sec_filter.ocf_mask[ogf])) &&`
449			`!capable(CAP_NET_RAW)) {`
450			`err = -EPERM;`
451			`goto drop;`
452			`}`
453
454			`if (test_bit(HCI_RAW, &hdev->flags) \|\| (ogf == 0x3f)) {`
455			`skb_queue_tail(&hdev->raw_q, skb);`
456			`hci_sched_tx(hdev);`
457			`} else {`
458			`skb_queue_tail(&hdev->cmd_q, skb);`
459			`hci_sched_cmd(hdev);`
460			`}`
461			`} else {`
462			`if (!capable(CAP_NET_RAW)) {`
463			`err = -EPERM;`
464			`goto drop;`
465			`}`
466
467			`skb_queue_tail(&hdev->raw_q, skb);`
468			`hci_sched_tx(hdev);`
469			`}`
470
471			`err = len;`
472
473			`done:`
474			`release_sock(sk);`
475			`return err;`
476
477			`drop:`
478			`kfree_skb(skb);`
479			`goto done;`
480			`}`
481
482			`static int hci_sock_setsockopt(struct socket sock, int level, int optname, char __user optval, int len)`
483			`{`
484			`struct hci_ufilter uf = { .opcode = 0 };`
485			`struct sock *sk = sock->sk;`
486			`int err = 0, opt = 0;`
487
488			`BT_DBG("sk %p, opt %d", sk, optname);`
489
490			`lock_sock(sk);`
491
492			`switch (optname) {`
493			`case HCI_DATA_DIR:`
494			`if (get_user(opt, (int __user *)optval)) {`
495			`err = -EFAULT;`
496			`break;`
497			`}`
498
499			`if (opt)`
500			`hci_pi(sk)->cmsg_mask \|= HCI_CMSG_DIR;`
501			`else`
502			`hci_pi(sk)->cmsg_mask &= ~HCI_CMSG_DIR;`
503			`break;`
504
505			`case HCI_TIME_STAMP:`
506			`if (get_user(opt, (int __user *)optval)) {`
507			`err = -EFAULT;`
508			`break;`
509			`}`
510
511			`if (opt)`
512			`hci_pi(sk)->cmsg_mask \|= HCI_CMSG_TSTAMP;`
513			`else`
514			`hci_pi(sk)->cmsg_mask &= ~HCI_CMSG_TSTAMP;`
515			`break;`
516
517			`case HCI_FILTER:`
518			`{`
519			`struct hci_filter *f = &hci_pi(sk)->filter;`
520
521			`uf.type_mask = f->type_mask;`
522			`uf.opcode = f->opcode;`
523			`uf.event_mask[0] = ((u32 ) f->event_mask + 0);`
524			`uf.event_mask[1] = ((u32 ) f->event_mask + 1);`
525			`}`
526
527			`len = min_t(unsigned int, len, sizeof(uf));`
528			`if (copy_from_user(&uf, optval, len)) {`
529			`err = -EFAULT;`
530			`break;`
531			`}`
532
533			`if (!capable(CAP_NET_RAW)) {`
534			`uf.type_mask &= hci_sec_filter.type_mask;`
535			`uf.event_mask[0] &= ((u32 ) hci_sec_filter.event_mask + 0);`
536			`uf.event_mask[1] &= ((u32 ) hci_sec_filter.event_mask + 1);`
537			`}`
538
539			`{`
540			`struct hci_filter *f = &hci_pi(sk)->filter;`
541
542			`f->type_mask = uf.type_mask;`
543			`f->opcode = uf.opcode;`
544			`((u32 ) f->event_mask + 0) = uf.event_mask[0];`
545			`((u32 ) f->event_mask + 1) = uf.event_mask[1];`
546			`}`
547			`break;`
548
549			`default:`
550			`err = -ENOPROTOOPT;`
551			`break;`
552			`}`
553
554			`release_sock(sk);`
555			`return err;`
556			`}`
557
558			`static int hci_sock_getsockopt(struct socket sock, int level, int optname, char __user optval, int __user *optlen)`
559			`{`
560			`struct hci_ufilter uf;`
561			`struct sock *sk = sock->sk;`
562			`int len, opt;`
563
564			`if (get_user(len, optlen))`
565			`return -EFAULT;`
566
567			`switch (optname) {`
568			`case HCI_DATA_DIR:`
569			`if (hci_pi(sk)->cmsg_mask & HCI_CMSG_DIR)`
570			`opt = 1;`
571			`else`
572			`opt = 0;`
573
574			`if (put_user(opt, optval))`
575			`return -EFAULT;`
576			`break;`
577
578			`case HCI_TIME_STAMP:`
579			`if (hci_pi(sk)->cmsg_mask & HCI_CMSG_TSTAMP)`
580			`opt = 1;`
581			`else`
582			`opt = 0;`
583
584			`if (put_user(opt, optval))`
585			`return -EFAULT;`
586			`break;`
587
588			`case HCI_FILTER:`
589			`{`
590			`struct hci_filter *f = &hci_pi(sk)->filter;`
591
592			`uf.type_mask = f->type_mask;`
593			`uf.opcode = f->opcode;`
594			`uf.event_mask[0] = ((u32 ) f->event_mask + 0);`
595			`uf.event_mask[1] = ((u32 ) f->event_mask + 1);`
596			`}`
597
598			`len = min_t(unsigned int, len, sizeof(uf));`
599			`if (copy_to_user(optval, &uf, len))`
600			`return -EFAULT;`
601			`break;`
602
603			`default:`
604			`return -ENOPROTOOPT;`
605			`break;`
606			`}`
607
608			`return 0;`
609			`}`
610
611			`static const struct proto_ops hci_sock_ops = {`
612			`.family = PF_BLUETOOTH,`
613			`.owner = THIS_MODULE,`
614			`.release = hci_sock_release,`
615			`.bind = hci_sock_bind,`
616			`.getname = hci_sock_getname,`
617			`.sendmsg = hci_sock_sendmsg,`
618			`.recvmsg = hci_sock_recvmsg,`
619			`.ioctl = hci_sock_ioctl,`
620			`.poll = datagram_poll,`
621			`.listen = sock_no_listen,`
622			`.shutdown = sock_no_shutdown,`
623			`.setsockopt = hci_sock_setsockopt,`
624			`.getsockopt = hci_sock_getsockopt,`
625			`.connect = sock_no_connect,`
626			`.socketpair = sock_no_socketpair,`
627			`.accept = sock_no_accept,`
628			`.mmap = sock_no_mmap`
629			`};`
630
631			`static struct proto hci_sk_proto = {`
632			`.name = "HCI",`
633			`.owner = THIS_MODULE,`
634			`.obj_size = sizeof(struct hci_pinfo)`
635			`};`
636
637			`static int hci_sock_create(struct net net, struct socket sock, int protocol)`
638			`{`
639			`struct sock *sk;`
640
641			`BT_DBG("sock %p", sock);`
642
643			`if (sock->type != SOCK_RAW)`
644			`return -ESOCKTNOSUPPORT;`
645
646			`sock->ops = &hci_sock_ops;`
647
648			`sk = sk_alloc(net, PF_BLUETOOTH, GFP_ATOMIC, &hci_sk_proto);`
649			`if (!sk)`
650			`return -ENOMEM;`
651
652			`sock_init_data(sock, sk);`
653
654			`sock_reset_flag(sk, SOCK_ZAPPED);`
655
656			`sk->sk_protocol = protocol;`
657
658			`sock->state = SS_UNCONNECTED;`
659			`sk->sk_state = BT_OPEN;`
660
661			`bt_sock_link(&hci_sk_list, sk);`
662			`return 0;`
663			`}`
664
665			`static int hci_sock_dev_event(struct notifier_block this, unsigned long event, void ptr)`
666			`{`
667			`struct hci_dev hdev = (struct hci_dev ) ptr;`
668			`struct hci_ev_si_device ev;`
669
670			`BT_DBG("hdev %s event %ld", hdev->name, event);`
671
672			`/* Send event to sockets */`
673			`ev.event = event;`
674			`ev.dev_id = hdev->id;`
675			`hci_si_event(NULL, HCI_EV_SI_DEVICE, sizeof(ev), &ev);`
676
677			`if (event == HCI_DEV_UNREG) {`
678			`struct sock *sk;`
679			`struct hlist_node *node;`
680
681			`/* Detach sockets from device */`
682			`read_lock(&hci_sk_list.lock);`
683			`sk_for_each(sk, node, &hci_sk_list.head) {`
684			`local_bh_disable();`
685			`bh_lock_sock_nested(sk);`
686			`if (hci_pi(sk)->hdev == hdev) {`
687			`hci_pi(sk)->hdev = NULL;`
688			`sk->sk_err = EPIPE;`
689			`sk->sk_state = BT_OPEN;`
690			`sk->sk_state_change(sk);`
691
692			`hci_dev_put(hdev);`
693			`}`
694			`bh_unlock_sock(sk);`
695			`local_bh_enable();`
696			`}`
697			`read_unlock(&hci_sk_list.lock);`
698			`}`
699
700			`return NOTIFY_DONE;`
701			`}`
702
703			`static struct net_proto_family hci_sock_family_ops = {`
704			`.family = PF_BLUETOOTH,`
705			`.owner = THIS_MODULE,`
706			`.create = hci_sock_create,`
707			`};`
708
709			`static struct notifier_block hci_sock_nblock = {`
710			`.notifier_call = hci_sock_dev_event`
711			`};`
712
713			`int __init hci_sock_init(void)`
714			`{`
715			`int err;`
716
717			`err = proto_register(&hci_sk_proto, 0);`
718			`if (err < 0)`
719			`return err;`
720
721			`err = bt_sock_register(BTPROTO_HCI, &hci_sock_family_ops);`
722			`if (err < 0)`
723			`goto error;`
724
725			`hci_register_notifier(&hci_sock_nblock);`
726
727			`BT_INFO("HCI socket layer initialized");`
728
729			`return 0;`
730
731			`error:`
732			`BT_ERR("HCI socket registration failed");`
733			`proto_unregister(&hci_sk_proto);`
734			`return err;`
735			`}`
736
737			`int __exit hci_sock_cleanup(void)`
738			`{`
739			`if (bt_sock_unregister(BTPROTO_HCI) < 0)`
740			`BT_ERR("HCI socket unregistration failed");`
741
742			`hci_unregister_notifier(&hci_sock_nblock);`
743
744			`proto_unregister(&hci_sk_proto);`
745
746			`return 0;`
747			`}`