l2cap.c 45.6 KB
Newer Older
Linus Torvalds's avatar
Linus Torvalds committed
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25
/* 
   BlueZ - Bluetooth protocol stack for Linux
   Copyright (C) 2000-2001 Qualcomm Incorporated

   Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>

   This program is free software; you can redistribute it and/or modify
   it under the terms of the GNU General Public License version 2 as
   published by the Free Software Foundation;

   THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
   OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
   FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
   IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
   CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES 
   WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 
   ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 
   OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

   ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS, 
   COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS 
   SOFTWARE IS DISCLAIMED.
*/

/*
26
 * Bluetooth L2CAP core and sockets.
Linus Torvalds's avatar
Linus Torvalds committed
27
 *
28
 * $Id: l2cap.c,v 1.15 2002/09/09 01:14:52 maxk Exp $
Linus Torvalds's avatar
Linus Torvalds committed
29
 */
30
#define VERSION "2.1"
Linus Torvalds's avatar
Linus Torvalds committed
31 32 33 34 35 36 37 38 39

#include <linux/config.h>
#include <linux/module.h>

#include <linux/types.h>
#include <linux/errno.h>
#include <linux/kernel.h>
#include <linux/major.h>
#include <linux/sched.h>
Linus Torvalds's avatar
Linus Torvalds committed
40
#include <linux/slab.h>
Linus Torvalds's avatar
Linus Torvalds committed
41 42 43 44 45 46 47 48
#include <linux/poll.h>
#include <linux/fcntl.h>
#include <linux/init.h>
#include <linux/skbuff.h>
#include <linux/interrupt.h>
#include <linux/socket.h>
#include <linux/skbuff.h>
#include <linux/proc_fs.h>
49
#include <linux/seq_file.h>
Linus Torvalds's avatar
Linus Torvalds committed
50 51 52 53 54
#include <linux/list.h>
#include <net/sock.h>

#include <asm/system.h>
#include <asm/uaccess.h>
55
#include <asm/unaligned.h>
Linus Torvalds's avatar
Linus Torvalds committed
56 57 58 59 60

#include <net/bluetooth/bluetooth.h>
#include <net/bluetooth/hci_core.h>
#include <net/bluetooth/l2cap.h>

61
#ifndef CONFIG_BT_L2CAP_DEBUG
62 63
#undef  BT_DBG
#define BT_DBG( A... )
Linus Torvalds's avatar
Linus Torvalds committed
64 65
#endif

66
static struct proto_ops l2cap_sock_ops;
Linus Torvalds's avatar
Linus Torvalds committed
67

68
struct bt_sock_list l2cap_sk_list = {
69
	.lock = RW_LOCK_UNLOCKED
Linus Torvalds's avatar
Linus Torvalds committed
70 71
};

72
static int l2cap_conn_del(struct hci_conn *conn, int err);
Linus Torvalds's avatar
Linus Torvalds committed
73

74
static void __l2cap_chan_add(struct l2cap_conn *conn, struct sock *sk, struct sock *parent);
Linus Torvalds's avatar
Linus Torvalds committed
75 76
static void l2cap_chan_del(struct sock *sk, int err);

77
static void __l2cap_sock_close(struct sock *sk, int reason);
Linus Torvalds's avatar
Linus Torvalds committed
78 79 80
static void l2cap_sock_close(struct sock *sk);
static void l2cap_sock_kill(struct sock *sk);

81 82
static int l2cap_send_req(struct l2cap_conn *conn, u8 code, u16 len, void *data);
static int l2cap_send_rsp(struct l2cap_conn *conn, u8 ident, u8 code, u16 len, void *data);
Linus Torvalds's avatar
Linus Torvalds committed
83

84
/* ---- L2CAP timers ---- */
Linus Torvalds's avatar
Linus Torvalds committed
85
static void l2cap_sock_timeout(unsigned long arg)
Linus Torvalds's avatar
Linus Torvalds committed
86 87 88
{
	struct sock *sk = (struct sock *) arg;

89
	BT_DBG("sock %p state %d", sk, sk->state);
Linus Torvalds's avatar
Linus Torvalds committed
90 91

	bh_lock_sock(sk);
92
	__l2cap_sock_close(sk, ETIMEDOUT);
Linus Torvalds's avatar
Linus Torvalds committed
93 94 95 96 97 98
	bh_unlock_sock(sk);

	l2cap_sock_kill(sk);
	sock_put(sk);
}

Linus Torvalds's avatar
Linus Torvalds committed
99
static void l2cap_sock_set_timer(struct sock *sk, long timeout)
Linus Torvalds's avatar
Linus Torvalds committed
100
{
101
	BT_DBG("sk %p state %d timeout %ld", sk, sk->state, timeout);
Linus Torvalds's avatar
Linus Torvalds committed
102 103 104 105 106

	if (!mod_timer(&sk->timer, jiffies + timeout))
		sock_hold(sk);
}

Linus Torvalds's avatar
Linus Torvalds committed
107
static void l2cap_sock_clear_timer(struct sock *sk)
Linus Torvalds's avatar
Linus Torvalds committed
108
{
109
	BT_DBG("sock %p state %d", sk, sk->state);
Linus Torvalds's avatar
Linus Torvalds committed
110 111 112 113 114

	if (timer_pending(&sk->timer) && del_timer(&sk->timer))
		__sock_put(sk);
}

Linus Torvalds's avatar
Linus Torvalds committed
115
static void l2cap_sock_init_timer(struct sock *sk)
Linus Torvalds's avatar
Linus Torvalds committed
116 117
{
	init_timer(&sk->timer);
Linus Torvalds's avatar
Linus Torvalds committed
118
	sk->timer.function = l2cap_sock_timeout;
Linus Torvalds's avatar
Linus Torvalds committed
119 120 121
	sk->timer.data = (unsigned long)sk;
}

122 123
/* ---- L2CAP connections ---- */
static struct l2cap_conn *l2cap_conn_add(struct hci_conn *hcon, u8 status)
Linus Torvalds's avatar
Linus Torvalds committed
124 125 126
{
	struct l2cap_conn *conn;

127 128
	if ((conn = hcon->l2cap_data))
		return conn;
Linus Torvalds's avatar
Linus Torvalds committed
129

130 131
	if (status)
		return conn;
Linus Torvalds's avatar
Linus Torvalds committed
132

133 134 135
	if (!(conn = kmalloc(sizeof(struct l2cap_conn), GFP_ATOMIC)))
		return NULL;
	memset(conn, 0, sizeof(struct l2cap_conn));
Linus Torvalds's avatar
Linus Torvalds committed
136

137 138 139 140 141 142 143
	hcon->l2cap_data = conn;
	conn->hcon = hcon;
	
	conn->mtu = hcon->hdev->acl_mtu;
	conn->src = &hcon->hdev->bdaddr;
	conn->dst = &hcon->dst;
	
Linus Torvalds's avatar
Linus Torvalds committed
144 145 146
	spin_lock_init(&conn->lock);
	conn->chan_list.lock = RW_LOCK_UNLOCKED;

147
	BT_DBG("hcon %p conn %p", hcon, conn);
Linus Torvalds's avatar
Linus Torvalds committed
148 149 150 151 152

	MOD_INC_USE_COUNT;
	return conn;
}

153
static int l2cap_conn_del(struct hci_conn *hcon, int err)
Linus Torvalds's avatar
Linus Torvalds committed
154
{
155
	struct l2cap_conn *conn;
Linus Torvalds's avatar
Linus Torvalds committed
156 157
	struct sock *sk;

158 159
	if (!(conn = hcon->l2cap_data)) 
		return 0;
Linus Torvalds's avatar
Linus Torvalds committed
160

161
	BT_DBG("hcon %p conn %p, err %d", hcon, conn, err);
Linus Torvalds's avatar
Linus Torvalds committed
162 163

	if (conn->rx_skb)
Linus Torvalds's avatar
Linus Torvalds committed
164
		kfree_skb(conn->rx_skb);
Linus Torvalds's avatar
Linus Torvalds committed
165 166 167 168 169 170 171 172 173

	/* Kill channels */
	while ((sk = conn->chan_list.head)) {
		bh_lock_sock(sk);
		l2cap_chan_del(sk, err);
		bh_unlock_sock(sk);
		l2cap_sock_kill(sk);
	}

174
	hcon->l2cap_data = NULL;
Linus Torvalds's avatar
Linus Torvalds committed
175 176 177 178 179 180
	kfree(conn);

	MOD_DEC_USE_COUNT;
	return 0;
}

181 182 183 184 185 186 187 188
static inline void l2cap_chan_add(struct l2cap_conn *conn, struct sock *sk, struct sock *parent)
{
	struct l2cap_chan_list *l = &conn->chan_list;
	write_lock(&l->lock);
	__l2cap_chan_add(conn, sk, parent);
	write_unlock(&l->lock);
}

189 190
/* ---- Socket interface ---- */
static struct sock *__l2cap_get_sock_by_addr(u16 psm, bdaddr_t *src)
Linus Torvalds's avatar
Linus Torvalds committed
191 192 193
{
	struct sock *sk;
	for (sk = l2cap_sk_list.head; sk; sk = sk->next) {
194
		if (l2cap_pi(sk)->sport == psm && !bacmp(&bt_sk(sk)->src, src))
Linus Torvalds's avatar
Linus Torvalds committed
195 196 197 198 199
			break;
	}
	return sk;
}

200
/* Find socket with psm and source bdaddr.
Linus Torvalds's avatar
Linus Torvalds committed
201 202
 * Returns closest match.
 */
203
static struct sock *__l2cap_get_sock_by_psm(int state, u16 psm, bdaddr_t *src)
Linus Torvalds's avatar
Linus Torvalds committed
204 205 206 207
{
	struct sock *sk, *sk1 = NULL;

	for (sk = l2cap_sk_list.head; sk; sk = sk->next) {
208
		if (state && sk->state != state)
Linus Torvalds's avatar
Linus Torvalds committed
209 210
			continue;

211
		if (l2cap_pi(sk)->psm == psm) {
Linus Torvalds's avatar
Linus Torvalds committed
212
			/* Exact match. */
213
			if (!bacmp(&bt_sk(sk)->src, src))
Linus Torvalds's avatar
Linus Torvalds committed
214 215 216
				break;

			/* Closest match */
217
			if (!bacmp(&bt_sk(sk)->src, BDADDR_ANY))
Linus Torvalds's avatar
Linus Torvalds committed
218 219 220
				sk1 = sk;
		}
	}
221 222
	return sk ? sk : sk1;
}
Linus Torvalds's avatar
Linus Torvalds committed
223

224 225
/* Find socket with given address (psm, src).
 * Returns locked socket */
226
static inline struct sock *l2cap_get_sock_by_psm(int state, u16 psm, bdaddr_t *src)
227 228 229 230 231
{
	struct sock *s;
	read_lock(&l2cap_sk_list.lock);
	s = __l2cap_get_sock_by_psm(state, psm, src);
	if (s) bh_lock_sock(s);
Linus Torvalds's avatar
Linus Torvalds committed
232
	read_unlock(&l2cap_sk_list.lock);
233
	return s;
Linus Torvalds's avatar
Linus Torvalds committed
234 235 236 237
}

static void l2cap_sock_destruct(struct sock *sk)
{
238
	BT_DBG("sk %p", sk);
Linus Torvalds's avatar
Linus Torvalds committed
239

Linus Torvalds's avatar
Linus Torvalds committed
240 241
	skb_queue_purge(&sk->receive_queue);
	skb_queue_purge(&sk->write_queue);
242

243 244 245
	if (sk->protinfo)
		kfree(sk->protinfo);
	
Linus Torvalds's avatar
Linus Torvalds committed
246 247 248 249 250 251 252
	MOD_DEC_USE_COUNT;
}

static void l2cap_sock_cleanup_listen(struct sock *parent)
{
	struct sock *sk;

253
	BT_DBG("parent %p", parent);
Linus Torvalds's avatar
Linus Torvalds committed
254 255

	/* Close not yet accepted channels */
256
	while ((sk = bt_accept_dequeue(parent, NULL)))
Linus Torvalds's avatar
Linus Torvalds committed
257 258 259 260 261 262 263 264 265 266 267 268 269 270
		l2cap_sock_close(sk);

	parent->state  = BT_CLOSED;
	parent->zapped = 1;
}

/* Kill socket (only if zapped and orphan)
 * Must be called on unlocked socket.
 */
static void l2cap_sock_kill(struct sock *sk)
{
	if (!sk->zapped || sk->socket)
		return;

271
	BT_DBG("sk %p state %d", sk, sk->state);
Linus Torvalds's avatar
Linus Torvalds committed
272 273

	/* Kill poor orphan */
274
	bt_sock_unlink(&l2cap_sk_list, sk);
275
	__set_bit(SOCK_DEAD, &sk->flags);
Linus Torvalds's avatar
Linus Torvalds committed
276 277 278
	sock_put(sk);
}

279
static void __l2cap_sock_close(struct sock *sk, int reason)
Linus Torvalds's avatar
Linus Torvalds committed
280
{
281
	BT_DBG("sk %p state %d socket %p", sk, sk->state, sk->socket);
Linus Torvalds's avatar
Linus Torvalds committed
282 283 284 285 286 287 288 289

	switch (sk->state) {
	case BT_LISTEN:
		l2cap_sock_cleanup_listen(sk);
		break;

	case BT_CONNECTED:
	case BT_CONFIG:
290
	case BT_CONNECT2:
Linus Torvalds's avatar
Linus Torvalds committed
291
		if (sk->type == SOCK_SEQPACKET) {
292
			struct l2cap_conn *conn = l2cap_pi(sk)->conn;
293
			struct l2cap_disconn_req req;
Linus Torvalds's avatar
Linus Torvalds committed
294 295

			sk->state = BT_DISCONN;
296
			l2cap_sock_set_timer(sk, HZ * 5);
Linus Torvalds's avatar
Linus Torvalds committed
297 298 299

			req.dcid = __cpu_to_le16(l2cap_pi(sk)->dcid);
			req.scid = __cpu_to_le16(l2cap_pi(sk)->scid);
300
			l2cap_send_req(conn, L2CAP_DISCONN_REQ, sizeof(req), &req);
Linus Torvalds's avatar
Linus Torvalds committed
301
		} else {
302
			l2cap_chan_del(sk, reason);
Linus Torvalds's avatar
Linus Torvalds committed
303 304 305 306 307
		}
		break;

	case BT_CONNECT:
	case BT_DISCONN:
308
		l2cap_chan_del(sk, reason);
Linus Torvalds's avatar
Linus Torvalds committed
309 310 311 312 313
		break;

	default:
		sk->zapped = 1;
		break;
314
	}
315 316 317 318 319 320
}

/* Must be called on unlocked socket. */
static void l2cap_sock_close(struct sock *sk)
{
	l2cap_sock_clear_timer(sk);
Linus Torvalds's avatar
Linus Torvalds committed
321

322 323
	lock_sock(sk);
	__l2cap_sock_close(sk, ECONNRESET);
Linus Torvalds's avatar
Linus Torvalds committed
324 325 326 327 328 329 330 331 332
	release_sock(sk);

	l2cap_sock_kill(sk);
}

static void l2cap_sock_init(struct sock *sk, struct sock *parent)
{
	struct l2cap_pinfo *pi = l2cap_pi(sk);

333
	BT_DBG("sk %p", sk);
Linus Torvalds's avatar
Linus Torvalds committed
334 335 336 337 338

	if (parent) {
		sk->type = parent->type;
		pi->imtu = l2cap_pi(parent)->imtu;
		pi->omtu = l2cap_pi(parent)->omtu;
339
		pi->link_mode = l2cap_pi(parent)->link_mode;
Linus Torvalds's avatar
Linus Torvalds committed
340 341 342
	} else {
		pi->imtu = L2CAP_DEFAULT_MTU;
		pi->omtu = 0;
343
		pi->link_mode = 0;
Linus Torvalds's avatar
Linus Torvalds committed
344 345 346 347 348 349 350 351 352 353 354
	}

	/* Default config options */
	pi->conf_mtu = L2CAP_DEFAULT_MTU;
	pi->flush_to = L2CAP_DEFAULT_FLUSH_TO;
}

static struct sock *l2cap_sock_alloc(struct socket *sock, int proto, int prio)
{
	struct sock *sk;

355
	sk = bt_sock_alloc(sock, proto, sizeof(struct l2cap_pinfo), prio);
356
	if (!sk)
Linus Torvalds's avatar
Linus Torvalds committed
357 358 359 360
		return NULL;

	sk->destruct = l2cap_sock_destruct;
	sk->sndtimeo = L2CAP_CONN_TIMEOUT;
361 362

	sk->protocol = proto;
Linus Torvalds's avatar
Linus Torvalds committed
363 364
	sk->state    = BT_OPEN;

Linus Torvalds's avatar
Linus Torvalds committed
365
	l2cap_sock_init_timer(sk);
Linus Torvalds's avatar
Linus Torvalds committed
366

367
	bt_sock_link(&l2cap_sk_list, sk);
Linus Torvalds's avatar
Linus Torvalds committed
368 369 370 371 372 373 374 375 376

	MOD_INC_USE_COUNT;
	return sk;
}

static int l2cap_sock_create(struct socket *sock, int protocol)
{
	struct sock *sk;

377
	BT_DBG("sock %p", sock);
Linus Torvalds's avatar
Linus Torvalds committed
378

379 380 381
	sock->state = SS_UNCONNECTED;

	if (sock->type != SOCK_SEQPACKET && sock->type != SOCK_DGRAM && sock->type != SOCK_RAW)
Linus Torvalds's avatar
Linus Torvalds committed
382
		return -ESOCKTNOSUPPORT;
383 384 385 386
	
	if (sock->type == SOCK_RAW && !capable(CAP_NET_RAW))
		return -EPERM;
	
387
	sock->ops = &l2cap_sock_ops;
Linus Torvalds's avatar
Linus Torvalds committed
388

389 390
	sk = l2cap_sock_alloc(sock, protocol, GFP_KERNEL);
	if (!sk)
Linus Torvalds's avatar
Linus Torvalds committed
391 392 393 394 395 396 397 398 399 400 401 402
		return -ENOMEM;

	l2cap_sock_init(sk, NULL);
	return 0;
}

static int l2cap_sock_bind(struct socket *sock, struct sockaddr *addr, int addr_len)
{
	struct sockaddr_l2 *la = (struct sockaddr_l2 *) addr;
	struct sock *sk = sock->sk;
	int err = 0;

403
	BT_DBG("sk %p, %s %d", sk, batostr(&la->l2_bdaddr), la->l2_psm);
Linus Torvalds's avatar
Linus Torvalds committed
404 405 406 407 408 409 410 411 412 413 414

	if (!addr || addr->sa_family != AF_BLUETOOTH)
		return -EINVAL;

	lock_sock(sk);

	if (sk->state != BT_OPEN) {
		err = -EBADFD;
		goto done;
	}

415 416
	write_lock_bh(&l2cap_sk_list.lock);
	if (la->l2_psm && __l2cap_get_sock_by_addr(la->l2_psm, &la->l2_bdaddr)) {
Linus Torvalds's avatar
Linus Torvalds committed
417
		err = -EADDRINUSE;
418 419
	} else {
		/* Save source address */
420
		bacpy(&bt_sk(sk)->src, &la->l2_bdaddr);
421 422
		l2cap_pi(sk)->psm   = la->l2_psm;
		l2cap_pi(sk)->sport = la->l2_psm;
423
		sk->state = BT_BOUND;
Linus Torvalds's avatar
Linus Torvalds committed
424
	}
425
	write_unlock_bh(&l2cap_sk_list.lock);
Linus Torvalds's avatar
Linus Torvalds committed
426 427 428 429 430 431

done:
	release_sock(sk);
	return err;
}

432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487
static int l2cap_do_connect(struct sock *sk)
{
	bdaddr_t *src = &bt_sk(sk)->src;
	bdaddr_t *dst = &bt_sk(sk)->dst;
	struct l2cap_conn *conn;
	struct hci_conn   *hcon;
	struct hci_dev    *hdev;
	int err = 0;

	BT_DBG("%s -> %s psm 0x%2.2x", batostr(src), batostr(dst), l2cap_pi(sk)->psm);

	if (!(hdev = hci_get_route(dst, src)))
		return -EHOSTUNREACH;

	hci_dev_lock_bh(hdev);

	err = -ENOMEM;

	hcon = hci_connect(hdev, ACL_LINK, dst);
	if (!hcon)
		goto done;

	conn = l2cap_conn_add(hcon, 0);
	if (!conn) {
		hci_conn_put(hcon);
		goto done;
	}

	err = 0;

	/* Update source addr of the socket */
	bacpy(src, conn->src);

	l2cap_chan_add(conn, sk, NULL);

	sk->state = BT_CONNECT;
	l2cap_sock_set_timer(sk, sk->sndtimeo);

	if (hcon->state == BT_CONNECTED) {
		if (sk->type == SOCK_SEQPACKET) {
			struct l2cap_conn_req req;
			req.scid = __cpu_to_le16(l2cap_pi(sk)->scid);
			req.psm  = l2cap_pi(sk)->psm;
			l2cap_send_req(conn, L2CAP_CONN_REQ, sizeof(req), &req);
		} else {
			l2cap_sock_clear_timer(sk);
			sk->state = BT_CONNECTED;
		}
	}

done:
	hci_dev_unlock_bh(hdev);
	hci_dev_put(hdev);
	return err;
}

Linus Torvalds's avatar
Linus Torvalds committed
488 489 490 491 492 493 494 495
static int l2cap_sock_connect(struct socket *sock, struct sockaddr *addr, int alen, int flags)
{
	struct sockaddr_l2 *la = (struct sockaddr_l2 *) addr;
	struct sock *sk = sock->sk;
	int err = 0;

	lock_sock(sk);

496
	BT_DBG("sk %p", sk);
Linus Torvalds's avatar
Linus Torvalds committed
497 498 499 500 501 502

	if (addr->sa_family != AF_BLUETOOTH || alen < sizeof(struct sockaddr_l2)) {
		err = -EINVAL;
		goto done;
	}

503 504
	if (sk->type == SOCK_SEQPACKET && !la->l2_psm) {
		err = -EINVAL;
Linus Torvalds's avatar
Linus Torvalds committed
505 506 507
		goto done;
	}

508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525
	switch(sk->state) {
	case BT_CONNECT:
	case BT_CONNECT2:
	case BT_CONFIG:
		/* Already connecting */
		goto wait;

	case BT_CONNECTED:
		/* Already connected */
		goto done;

	case BT_OPEN:
	case BT_BOUND:
		/* Can connect */
		break;

	default:
		err = -EBADFD;
Linus Torvalds's avatar
Linus Torvalds committed
526 527 528 529
		goto done;
	}

	/* Set destination address and psm */
530
	bacpy(&bt_sk(sk)->dst, &la->l2_bdaddr);
Linus Torvalds's avatar
Linus Torvalds committed
531 532
	l2cap_pi(sk)->psm = la->l2_psm;

533
	if ((err = l2cap_do_connect(sk)))
Linus Torvalds's avatar
Linus Torvalds committed
534 535
		goto done;

536
wait:
537
	err = bt_sock_w4_connect(sk, flags);
Linus Torvalds's avatar
Linus Torvalds committed
538 539 540 541 542 543 544 545 546 547 548

done:
	release_sock(sk);
	return err;
}

int l2cap_sock_listen(struct socket *sock, int backlog)
{
	struct sock *sk = sock->sk;
	int err = 0;

549
	BT_DBG("sk %p backlog %d", sk, backlog);
Linus Torvalds's avatar
Linus Torvalds committed
550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574

	lock_sock(sk);

	if (sk->state != BT_BOUND || sock->type != SOCK_SEQPACKET) {
		err = -EBADFD;
		goto done;
	}

	if (!l2cap_pi(sk)->psm) {
		err = -EINVAL;
		goto done;
	}

	sk->max_ack_backlog = backlog;
	sk->ack_backlog = 0;
	sk->state = BT_LISTEN;

done:
	release_sock(sk);
	return err;
}

int l2cap_sock_accept(struct socket *sock, struct socket *newsock, int flags)
{
	DECLARE_WAITQUEUE(wait, current);
575
	struct sock *sk = sock->sk, *nsk;
Linus Torvalds's avatar
Linus Torvalds committed
576 577 578 579 580 581 582 583 584 585 586 587
	long timeo;
	int err = 0;

	lock_sock(sk);

	if (sk->state != BT_LISTEN) {
		err = -EBADFD;
		goto done;
	}

	timeo = sock_rcvtimeo(sk, flags & O_NONBLOCK);

588
	BT_DBG("sk %p timeo %ld", sk, timeo);
Linus Torvalds's avatar
Linus Torvalds committed
589 590 591

	/* Wait for an incoming connection. (wake-one). */
	add_wait_queue_exclusive(sk->sleep, &wait);
592
	while (!(nsk = bt_accept_dequeue(sk, newsock))) {
593
		set_current_state(TASK_INTERRUPTIBLE);
Linus Torvalds's avatar
Linus Torvalds committed
594 595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612
		if (!timeo) {
			err = -EAGAIN;
			break;
		}

		release_sock(sk);
		timeo = schedule_timeout(timeo);
		lock_sock(sk);

		if (sk->state != BT_LISTEN) {
			err = -EBADFD;
			break;
		}

		if (signal_pending(current)) {
			err = sock_intr_errno(timeo);
			break;
		}
	}
613
	set_current_state(TASK_RUNNING);
Linus Torvalds's avatar
Linus Torvalds committed
614 615 616 617 618 619 620
	remove_wait_queue(sk->sleep, &wait);

	if (err)
		goto done;

	newsock->state = SS_CONNECTED;

621
	BT_DBG("new socket %p", nsk);
Linus Torvalds's avatar
Linus Torvalds committed
622 623 624 625 626 627 628 629 630 631 632

done:
	release_sock(sk);
	return err;
}

static int l2cap_sock_getname(struct socket *sock, struct sockaddr *addr, int *len, int peer)
{
	struct sockaddr_l2 *la = (struct sockaddr_l2 *) addr;
	struct sock *sk = sock->sk;

633
	BT_DBG("sock %p, sk %p", sock, sk);
Linus Torvalds's avatar
Linus Torvalds committed
634 635 636 637 638

	addr->sa_family = AF_BLUETOOTH;
	*len = sizeof(struct sockaddr_l2);

	if (peer)
639
		bacpy(&la->l2_bdaddr, &bt_sk(sk)->dst);
Linus Torvalds's avatar
Linus Torvalds committed
640
	else
641
		bacpy(&la->l2_bdaddr, &bt_sk(sk)->src);
Linus Torvalds's avatar
Linus Torvalds committed
642 643 644 645 646

	la->l2_psm = l2cap_pi(sk)->psm;
	return 0;
}

647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714
static inline int l2cap_do_send(struct sock *sk, struct msghdr *msg, int len)
{
	struct l2cap_conn *conn = l2cap_pi(sk)->conn;
	struct sk_buff *skb, **frag;
	int err, hlen, count, sent=0;
	struct l2cap_hdr *lh;

	BT_DBG("sk %p len %d", sk, len);

	/* First fragment (with L2CAP header) */
	if (sk->type == SOCK_DGRAM)
		hlen = L2CAP_HDR_SIZE + 2;
	else
		hlen = L2CAP_HDR_SIZE;

	count = min_t(unsigned int, (conn->mtu - hlen), len);

	skb = bt_skb_send_alloc(sk, hlen + count,
			msg->msg_flags & MSG_DONTWAIT, &err);
	if (!skb)
		return err;

	/* Create L2CAP header */
	lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE);
	lh->cid = __cpu_to_le16(l2cap_pi(sk)->dcid);
	lh->len = __cpu_to_le16(len + (hlen - L2CAP_HDR_SIZE));

	if (sk->type == SOCK_DGRAM)
		put_unaligned(l2cap_pi(sk)->psm, (u16 *) skb_put(skb, 2));

	if (memcpy_fromiovec(skb_put(skb, count), msg->msg_iov, count)) {
		err = -EFAULT;
		goto fail;
	}

	sent += count;
	len  -= count;

	/* Continuation fragments (no L2CAP header) */
	frag = &skb_shinfo(skb)->frag_list;
	while (len) {
		count = min_t(unsigned int, conn->mtu, len);

		*frag = bt_skb_send_alloc(sk, count, msg->msg_flags & MSG_DONTWAIT, &err);
		if (!*frag)
			goto fail;
		
		if (memcpy_fromiovec(skb_put(*frag, count), msg->msg_iov, count)) {
			err = -EFAULT;
			goto fail;
		}

		sent += count;
		len  -= count;

		frag = &(*frag)->next;
	}

	if ((err = hci_send_acl(conn->hcon, skb, 0)) < 0)
		goto fail;

	return sent;

fail:
	kfree_skb(skb);
	return err;
}

715
static int l2cap_sock_sendmsg(struct kiocb *iocb, struct socket *sock, struct msghdr *msg, int len)
Linus Torvalds's avatar
Linus Torvalds committed
716 717 718 719
{
	struct sock *sk = sock->sk;
	int err = 0;

720
	BT_DBG("sock %p, sk %p", sock, sk);
Linus Torvalds's avatar
Linus Torvalds committed
721 722 723 724 725 726 727

	if (sk->err)
		return sock_error(sk);

	if (msg->msg_flags & MSG_OOB)
		return -EOPNOTSUPP;

728 729 730 731
	/* Check outgoing MTU */
	if (len > l2cap_pi(sk)->omtu)
		return -EINVAL;

Linus Torvalds's avatar
Linus Torvalds committed
732 733 734
	lock_sock(sk);

	if (sk->state == BT_CONNECTED)
735
		err = l2cap_do_send(sk, msg, len);
Linus Torvalds's avatar
Linus Torvalds committed
736 737 738 739 740 741 742
	else
		err = -ENOTCONN;

	release_sock(sk);
	return err;
}

743
static int l2cap_sock_setsockopt(struct socket *sock, int level, int optname, char *optval, int optlen)
Linus Torvalds's avatar
Linus Torvalds committed
744 745 746
{
	struct sock *sk = sock->sk;
	struct l2cap_options opts;
747
	int err = 0, len;
748
	u32 opt;
Linus Torvalds's avatar
Linus Torvalds committed
749

750
	BT_DBG("sk %p", sk);
Linus Torvalds's avatar
Linus Torvalds committed
751 752 753 754 755

	lock_sock(sk);

	switch (optname) {
	case L2CAP_OPTIONS:
756
		len = min_t(unsigned int, sizeof(opts), optlen);
757
		if (copy_from_user((char *)&opts, optval, len)) {
Linus Torvalds's avatar
Linus Torvalds committed
758 759 760
			err = -EFAULT;
			break;
		}
761 762 763 764 765
		l2cap_pi(sk)->imtu  = opts.imtu;
		l2cap_pi(sk)->omtu  = opts.omtu;
		break;

	case L2CAP_LM:
766
		if (get_user(opt, (u32 *)optval)) {
767 768 769 770 771
			err = -EFAULT;
			break;
		}

		l2cap_pi(sk)->link_mode = opt;
Linus Torvalds's avatar
Linus Torvalds committed
772 773 774 775 776
		break;

	default:
		err = -ENOPROTOOPT;
		break;
777
	}
Linus Torvalds's avatar
Linus Torvalds committed
778 779 780 781 782

	release_sock(sk);
	return err;
}

783
static int l2cap_sock_getsockopt(struct socket *sock, int level, int optname, char *optval, int *optlen)
Linus Torvalds's avatar
Linus Torvalds committed
784 785 786
{
	struct sock *sk = sock->sk;
	struct l2cap_options opts;
Linus Torvalds's avatar
Linus Torvalds committed
787 788
	struct l2cap_conninfo cinfo;
	int len, err = 0; 
Linus Torvalds's avatar
Linus Torvalds committed
789 790 791 792

	if (get_user(len, optlen))
		return -EFAULT;

Linus Torvalds's avatar
Linus Torvalds committed
793 794
	lock_sock(sk);

Linus Torvalds's avatar
Linus Torvalds committed
795 796 797 798 799 800
	switch (optname) {
	case L2CAP_OPTIONS:
		opts.imtu     = l2cap_pi(sk)->imtu;
		opts.omtu     = l2cap_pi(sk)->omtu;
		opts.flush_to = l2cap_pi(sk)->flush_to;

801
		len = min_t(unsigned int, len, sizeof(opts));
Linus Torvalds's avatar
Linus Torvalds committed
802
		if (copy_to_user(optval, (char *)&opts, len))
Linus Torvalds's avatar
Linus Torvalds committed
803 804 805 806
			err = -EFAULT;

		break;

807
	case L2CAP_LM:
808
		if (put_user(l2cap_pi(sk)->link_mode, (u32 *)optval))
809 810 811
			err = -EFAULT;
		break;

Linus Torvalds's avatar
Linus Torvalds committed
812 813 814 815 816 817
	case L2CAP_CONNINFO:
		if (sk->state != BT_CONNECTED) {
			err = -ENOTCONN;
			break;
		}

818
		cinfo.hci_handle = l2cap_pi(sk)->conn->hcon->handle;
Linus Torvalds's avatar
Linus Torvalds committed
819

820
		len = min_t(unsigned int, len, sizeof(cinfo));
Linus Torvalds's avatar
Linus Torvalds committed
821 822
		if (copy_to_user(optval, (char *)&cinfo, len))
			err = -EFAULT;
Linus Torvalds's avatar
Linus Torvalds committed
823 824 825 826

		break;

	default:
Linus Torvalds's avatar
Linus Torvalds committed
827
		err = -ENOPROTOOPT;
Linus Torvalds's avatar
Linus Torvalds committed
828
		break;
829
	}
Linus Torvalds's avatar
Linus Torvalds committed
830

831 832
	release_sock(sk);
	return err;
Linus Torvalds's avatar
Linus Torvalds committed
833 834
}

835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850 851 852
static int l2cap_sock_shutdown(struct socket *sock, int how)
{
	struct sock *sk = sock->sk;

	BT_DBG("sock %p, sk %p", sock, sk);

	if (!sk) return 0;

	l2cap_sock_clear_timer(sk);

	lock_sock(sk);
	sk->shutdown = SHUTDOWN_MASK;
	__l2cap_sock_close(sk, ECONNRESET);
	release_sock(sk);

	return 0;
}

Linus Torvalds's avatar
Linus Torvalds committed
853 854 855 856
static int l2cap_sock_release(struct socket *sock)
{
	struct sock *sk = sock->sk;

857
	BT_DBG("sock %p, sk %p", sock, sk);
Linus Torvalds's avatar
Linus Torvalds committed
858

859
	if (!sk) return 0;
Linus Torvalds's avatar
Linus Torvalds committed
860 861 862 863 864 865

	sock_orphan(sk);
	l2cap_sock_close(sk);
	return 0;
}

866 867
/* ---- L2CAP channels ---- */
static struct sock *__l2cap_get_chan_by_dcid(struct l2cap_chan_list *l, u16 cid)
Linus Torvalds's avatar
Linus Torvalds committed
868 869 870 871 872 873 874 875 876
{
	struct sock *s;
	for (s = l->head; s; s = l2cap_pi(s)->next_c) {
		if (l2cap_pi(s)->dcid == cid)
			break;
	}
	return s;
}

877
static struct sock *__l2cap_get_chan_by_scid(struct l2cap_chan_list *l, u16 cid)
Linus Torvalds's avatar
Linus Torvalds committed
878 879 880 881 882 883 884 885
{
	struct sock *s;
	for (s = l->head; s; s = l2cap_pi(s)->next_c) {
		if (l2cap_pi(s)->scid == cid)
			break;
	}
	return s;
}
886 887 888

/* Find channel with given SCID.
 * Returns locked socket */
889
static inline struct sock *l2cap_get_chan_by_scid(struct l2cap_chan_list *l, u16 cid)
Linus Torvalds's avatar
Linus Torvalds committed
890 891 892 893
{
	struct sock *s;
	read_lock(&l->lock);
	s = __l2cap_get_chan_by_scid(l, cid);
894
	if (s) bh_lock_sock(s);
Linus Torvalds's avatar
Linus Torvalds committed
895 896 897 898
	read_unlock(&l->lock);
	return s;
}

899
static u16 l2cap_alloc_cid(struct l2cap_chan_list *l)
Linus Torvalds's avatar
Linus Torvalds committed
900
{
901
	u16 cid = 0x0040;
Linus Torvalds's avatar
Linus Torvalds committed
902 903 904 905 906 907 908 909 910

	for (; cid < 0xffff; cid++) {
		if(!__l2cap_get_chan_by_scid(l, cid))
			return cid;
	}

	return 0;
}

Linus Torvalds's avatar
Linus Torvalds committed
911
static inline void __l2cap_chan_link(struct l2cap_chan_list *l, struct sock *sk)
Linus Torvalds's avatar
Linus Torvalds committed
912 913 914 915 916 917 918 919 920 921 922
{
	sock_hold(sk);

	if (l->head)
		l2cap_pi(l->head)->prev_c = sk;

	l2cap_pi(sk)->next_c = l->head;
	l2cap_pi(sk)->prev_c = NULL;
	l->head = sk;
}

Linus Torvalds's avatar
Linus Torvalds committed
923
static inline void l2cap_chan_unlink(struct l2cap_chan_list *l, struct sock *sk)
Linus Torvalds's avatar
Linus Torvalds committed
924 925 926 927 928 929 930 931 932 933 934 935 936 937 938 939 940 941 942 943
{
	struct sock *next = l2cap_pi(sk)->next_c, *prev = l2cap_pi(sk)->prev_c;

	write_lock(&l->lock);
	if (sk == l->head)
		l->head = next;

	if (next)
		l2cap_pi(next)->prev_c = prev;
	if (prev)
		l2cap_pi(prev)->next_c = next;
	write_unlock(&l->lock);

	__sock_put(sk);
}

static void __l2cap_chan_add(struct l2cap_conn *conn, struct sock *sk, struct sock *parent)
{
	struct l2cap_chan_list *l = &conn->chan_list;

944
	BT_DBG("conn %p, psm 0x%2.2x, dcid 0x%4.4x", conn, l2cap_pi(sk)->psm, l2cap_pi(sk)->dcid);
Linus Torvalds's avatar
Linus Torvalds committed
945 946 947 948

	l2cap_pi(sk)->conn = conn;

	if (sk->type == SOCK_SEQPACKET) {
949
		/* Alloc CID for connection-oriented socket */
Linus Torvalds's avatar
Linus Torvalds committed
950
		l2cap_pi(sk)->scid = l2cap_alloc_cid(l);
951 952 953 954 955
	} else if (sk->type == SOCK_DGRAM) {
		/* Connectionless socket */
		l2cap_pi(sk)->scid = 0x0002;
		l2cap_pi(sk)->dcid = 0x0002;
		l2cap_pi(sk)->omtu = L2CAP_DEFAULT_MTU;
Linus Torvalds's avatar
Linus Torvalds committed
956
	} else {
957
		/* Raw socket can send/recv signalling messages only */
Linus Torvalds's avatar
Linus Torvalds committed
958 959 960 961 962 963 964 965
		l2cap_pi(sk)->scid = 0x0001;
		l2cap_pi(sk)->dcid = 0x0001;
		l2cap_pi(sk)->omtu = L2CAP_DEFAULT_MTU;
	}

	__l2cap_chan_link(l, sk);

	if (parent)
966
		bt_accept_enqueue(parent, sk);
Linus Torvalds's avatar
Linus Torvalds committed
967 968
}

Linus Torvalds's avatar
Linus Torvalds committed
969 970
/* Delete channel. 
 * Must be called on the locked socket. */
Linus Torvalds's avatar
Linus Torvalds committed
971 972
static void l2cap_chan_del(struct sock *sk, int err)
{
973
	struct l2cap_conn *conn = l2cap_pi(sk)->conn;
974
	struct sock *parent = bt_sk(sk)->parent;
Linus Torvalds's avatar
Linus Torvalds committed
975

976
	l2cap_sock_clear_timer(sk);
Linus Torvalds's avatar
Linus Torvalds committed
977

978
	BT_DBG("sk %p, conn %p, err %d", sk, conn, err);
Linus Torvalds's avatar
Linus Torvalds committed
979

Linus Torvalds's avatar
Linus Torvalds committed
980
	if (conn) { 
Linus Torvalds's avatar
Linus Torvalds committed
981 982 983
		/* Unlink from channel list */
		l2cap_chan_unlink(&conn->chan_list, sk);
		l2cap_pi(sk)->conn = NULL;
984
		hci_conn_put(conn->hcon);
Linus Torvalds's avatar
Linus Torvalds committed
985 986
	}

987 988
	sk->state = BT_CLOSED;
	sk->err   = err;
Linus Torvalds's avatar
Linus Torvalds committed
989
	sk->zapped = 1;
990 991 992 993 994

	if (parent)
		parent->data_ready(parent, 0);
	else
		sk->state_change(sk);
Linus Torvalds's avatar
Linus Torvalds committed
995 996 997 998 999 1000 1001
}

static void l2cap_conn_ready(struct l2cap_conn *conn)
{
	struct l2cap_chan_list *l = &conn->chan_list;
	struct sock *sk;

1002
	BT_DBG("conn %p", conn);
Linus Torvalds's avatar
Linus Torvalds committed
1003 1004 1005 1006 1007 1008 1009

	read_lock(&l->lock);

	for (sk = l->head; sk; sk = l2cap_pi(sk)->next_c) {
		bh_lock_sock(sk);

		if (sk->type != SOCK_SEQPACKET) {
1010
			l2cap_sock_clear_timer(sk);
Linus Torvalds's avatar
Linus Torvalds committed
1011 1012 1013
			sk->state = BT_CONNECTED;
			sk->state_change(sk);
		} else if (sk->state == BT_CONNECT) {
1014
			struct l2cap_conn_req req;
Linus Torvalds's avatar
Linus Torvalds committed
1015 1016
			req.scid = __cpu_to_le16(l2cap_pi(sk)->scid);
			req.psm  = l2cap_pi(sk)->psm;
1017
			l2cap_send_req(conn, L2CAP_CONN_REQ, sizeof(req), &req);
Linus Torvalds's avatar
Linus Torvalds committed
1018 1019 1020 1021 1022 1023 1024 1025 1026 1027
		}

		bh_unlock_sock(sk);
	}

	read_unlock(&l->lock);
}

static void l2cap_chan_ready(struct sock *sk)
{
1028
	struct sock *parent = bt_sk(sk)->parent;
Linus Torvalds's avatar
Linus Torvalds committed
1029

1030
	BT_DBG("sk %p, parent %p", sk, parent);
Linus Torvalds's avatar
Linus Torvalds committed
1031 1032

	l2cap_pi(sk)->conf_state = 0;
Linus Torvalds's avatar
Linus Torvalds committed
1033
	l2cap_sock_clear_timer(sk);
Linus Torvalds's avatar
Linus Torvalds committed
1034 1035 1036 1037 1038 1039 1040 1041 1042 1043 1044

	if (!parent) {
		/* Outgoing channel.
		 * Wake up socket sleeping on connect.
		 */
		sk->state = BT_CONNECTED;
		sk->state_change(sk);
	} else {
		/* Incomming channel.
		 * Wake up socket sleeping on accept.
		 */
1045
		parent->data_ready(parent, 0);
Linus Torvalds's avatar
Linus Torvalds committed
1046 1047 1048 1049 1050 1051 1052 1053 1054 1055
	}
}

/* Copy frame to all raw sockets on that connection */
void l2cap_raw_recv(struct l2cap_conn *conn, struct sk_buff *skb)
{
	struct l2cap_chan_list *l = &conn->chan_list;
	struct sk_buff *nskb;
	struct sock * sk;

1056
	BT_DBG("conn %p", conn);
Linus Torvalds's avatar
Linus Torvalds committed
1057 1058 1059 1060 1061 1062 1063 1064 1065 1066

	read_lock(&l->lock);
	for (sk = l->head; sk; sk = l2cap_pi(sk)->next_c) {
		if (sk->type != SOCK_RAW)
			continue;

		/* Don't send frame to the socket it came from */
		if (skb->sk == sk)
			continue;

Linus Torvalds's avatar
Linus Torvalds committed
1067
		if (!(nskb = skb_clone(skb, GFP_ATOMIC)))
Linus Torvalds's avatar
Linus Torvalds committed
1068 1069
			continue;

1070 1071
		if (sock_queue_rcv_skb(sk, nskb))
			kfree_skb(nskb);
Linus Torvalds's avatar
Linus Torvalds committed
1072 1073 1074 1075
	}
	read_unlock(&l->lock);
}

1076 1077
/* ---- L2CAP signalling commands ---- */
static inline u8 l2cap_get_ident(struct l2cap_conn *conn)
Linus Torvalds's avatar
Linus Torvalds committed
1078
{
1079
	u8 id;
Linus Torvalds's avatar
Linus Torvalds committed
1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096 1097

	/* Get next available identificator.
	 *    1 - 199 are used by kernel.
	 *  200 - 254 are used by utilities like l2ping, etc 
	 */

	spin_lock(&conn->lock);

	if (++conn->tx_ident > 199)
		conn->tx_ident = 1;

	id = conn->tx_ident;

	spin_unlock(&conn->lock);

	return id;
}

1098
static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn,
1099
				u8 code, u8 ident, u16 dlen, void *data)
Linus Torvalds's avatar
Linus Torvalds committed
1100
{
1101
	struct sk_buff *skb, **frag;
1102 1103
	struct l2cap_cmd_hdr *cmd;
	struct l2cap_hdr *lh;
1104
	int len, count;
Linus Torvalds's avatar
Linus Torvalds committed
1105

1106
	BT_DBG("conn %p, code 0x%2.2x, ident 0x%2.2x, len %d", conn, code, ident, dlen);
Linus Torvalds's avatar
Linus Torvalds committed
1107

1108
	len = L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE + dlen;
1109
	count = min_t(unsigned int, conn->mtu, len);
1110
	
1111
	skb = bt_skb_alloc(count, GFP_ATOMIC);
1112
	if (!skb)
Linus Torvalds's avatar
Linus Torvalds committed
1113 1114
		return NULL;

1115
	lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE);
1116
	lh->len = __cpu_to_le16(L2CAP_CMD_HDR_SIZE + dlen);
Linus Torvalds's avatar
Linus Torvalds committed
1117 1118
	lh->cid = __cpu_to_le16(0x0001);

1119
	cmd = (struct l2cap_cmd_hdr *) skb_put(skb, L2CAP_CMD_HDR_SIZE);
Linus Torvalds's avatar
Linus Torvalds committed
1120 1121
	cmd->code  = code;
	cmd->ident = ident;
1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134
	cmd->len   = __cpu_to_le16(dlen);

	if (dlen) {
		count -= L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE;
		memcpy(skb_put(skb, count), data, count);
		data += count;
	}

	len -= skb->len;
	
	/* Continuation fragments (no L2CAP header) */
	frag = &skb_shinfo(skb)->frag_list;
	while (len) {
1135
		count = min_t(unsigned int, conn->mtu, len);
1136

1137
		*frag = bt_skb_alloc(count, GFP_ATOMIC);
1138 1139 1140 1141
		if (!*frag)
			goto fail;
		
		memcpy(skb_put(*frag, count), data, count);
Linus Torvalds's avatar
Linus Torvalds committed
1142

1143 1144 1145 1146 1147
		len  -= count;
		data += count;
		
		frag = &(*frag)->next;
	}
Linus Torvalds's avatar
Linus Torvalds committed
1148 1149

	return skb;
1150 1151 1152 1153

fail:
	kfree_skb(skb);
	return NULL;
Linus Torvalds's avatar
Linus Torvalds committed
1154 1155
}

1156
static int l2cap_send_req(struct l2cap_conn *conn, u8 code, u16 len, void *data)
Linus Torvalds's avatar
Linus Torvalds committed
1157
{
1158
	u8 ident = l2cap_get_ident(conn);
1159
	struct sk_buff *skb = l2cap_build_cmd(conn, code, ident, len, data);
Linus Torvalds's avatar
Linus Torvalds committed
1160

1161
	BT_DBG("code 0x%2.2x", code);
Linus Torvalds's avatar
Linus Torvalds committed
1162

1163
	if (!skb)
Linus Torvalds's avatar
Linus Torvalds committed
1164
		return -ENOMEM;
1165
	return hci_send_acl(conn->hcon, skb, 0);
Linus Torvalds's avatar
Linus Torvalds committed
1166 1167
}

1168
static int l2cap_send_rsp(struct l2cap_conn *conn, u8 ident, u8 code, u16 len, void *data)
Linus Torvalds's avatar
Linus Torvalds committed
1169
{
1170
	struct sk_buff *skb = l2cap_build_cmd(conn, code, ident, len, data);
Linus Torvalds's avatar
Linus Torvalds committed
1171

1172
	BT_DBG("code 0x%2.2x", code);
Linus Torvalds's avatar
Linus Torvalds committed
1173

1174
	if (!skb)
Linus Torvalds's avatar
Linus Torvalds committed
1175
		return -ENOMEM;
1176
	return hci_send_acl(conn->hcon, skb, 0);
Linus Torvalds's avatar
Linus Torvalds committed
1177 1178
}

1179
static inline int l2cap_get_conf_opt(void **ptr, int *type, int *olen, unsigned long *val)
Linus Torvalds's avatar
Linus Torvalds committed
1180
{
1181
	struct l2cap_conf_opt *opt = *ptr;
Linus Torvalds's avatar
Linus Torvalds committed
1182 1183
	int len;

1184 1185 1186
	len = L2CAP_CONF_OPT_SIZE + opt->len;
	*ptr += len;

Linus Torvalds's avatar
Linus Torvalds committed
1187
	*type = opt->type;
1188 1189
	*olen = opt->len;

Linus Torvalds's avatar
Linus Torvalds committed
1190 1191
	switch (opt->len) {
	case 1:
1192
		*val = *((u8 *) opt->val);
Linus Torvalds's avatar
Linus Torvalds committed
1193 1194 1195
		break;

	case 2:
1196
		*val = __le16_to_cpu(*((u16 *)opt->val));
Linus Torvalds's avatar
Linus Torvalds committed
1197 1198 1199
		break;

	case 4:
1200
		*val = __le32_to_cpu(*((u32 *)opt->val));
Linus Torvalds's avatar
Linus Torvalds committed
1201 1202 1203
		break;

	default:
1204
		*val = (unsigned long) opt->val;
Linus Torvalds's avatar
Linus Torvalds committed
1205
		break;
1206
	}
Linus Torvalds's avatar
Linus Torvalds committed
1207

1208
	BT_DBG("type 0x%2.2x len %d val 0x%lx", *type, opt->len, *val);
Linus Torvalds's avatar
Linus Torvalds committed
1209 1210 1211
	return len;
}

1212
static inline void l2cap_parse_conf_req(struct sock *sk, void *data, int len)
Linus Torvalds's avatar
Linus Torvalds committed
1213
{
1214 1215 1216
	int type, hint, olen; 
	unsigned long val;
	void *ptr = data;
Linus Torvalds's avatar
Linus Torvalds committed
1217

1218
	BT_DBG("sk %p len %d", sk, len);
Linus Torvalds's avatar
Linus Torvalds committed
1219 1220

	while (len >= L2CAP_CONF_OPT_SIZE) {
1221
		len -= l2cap_get_conf_opt(&ptr, &type, &olen, &val);
Linus Torvalds's avatar
Linus Torvalds committed
1222

Linus Torvalds's avatar
Linus Torvalds committed
1223 1224 1225
		hint  = type & 0x80;
		type &= 0x7f;

Linus Torvalds's avatar
Linus Torvalds committed
1226 1227 1228 1229 1230 1231 1232 1233 1234 1235 1236
		switch (type) {
		case L2CAP_CONF_MTU:
			l2cap_pi(sk)->conf_mtu = val;
			break;

		case L2CAP_CONF_FLUSH_TO:
			l2cap_pi(sk)->flush_to = val;
			break;

		case L2CAP_CONF_QOS:
			break;
Linus Torvalds's avatar
Linus Torvalds committed
1237 1238 1239 1240 1241
		
		default:
			if (hint)
				break;

1242
			/* FIXME: Reject unknown option */
Linus Torvalds's avatar
Linus Torvalds committed
1243
			break;
1244
		}
Linus Torvalds's avatar
Linus Torvalds committed
1245 1246 1247
	}
}

1248
static void l2cap_add_conf_opt(void **ptr, u8 type, u8 len, unsigned long val)
Linus Torvalds's avatar
Linus Torvalds committed
1249
{
1250
	struct l2cap_conf_opt *opt = *ptr;
Linus Torvalds's avatar
Linus Torvalds committed
1251

1252
	BT_DBG("type 0x%2.2x len %d val 0x%lx", type, len, val);
Linus Torvalds's avatar
Linus Torvalds committed
1253 1254 1255

	opt->type = type;
	opt->len  = len;
1256

Linus Torvalds's avatar
Linus Torvalds committed
1257 1258
	switch (len) {
	case 1:
1259
		*((u8 *) opt->val)  = val;
Linus Torvalds's avatar
Linus Torvalds committed
1260 1261 1262
		break;

	case 2:
1263
		*((u16 *) opt->val) = __cpu_to_le16(val);
Linus Torvalds's avatar
Linus Torvalds committed
1264 1265 1266
		break;

	case 4:
1267
		*((u32 *) opt->val) = __cpu_to_le32(val);
Linus Torvalds's avatar
Linus Torvalds committed
1268
		break;
1269 1270 1271 1272

	default:
		memcpy(opt->val, (void *) val, len);
		break;
1273
	}
Linus Torvalds's avatar
Linus Torvalds committed
1274 1275 1276 1277

	*ptr += L2CAP_CONF_OPT_SIZE + len;
}

1278
static int l2cap_build_conf_req(struct sock *sk, void *data)
Linus Torvalds's avatar
Linus Torvalds committed
1279 1280
{
	struct l2cap_pinfo *pi = l2cap_pi(sk);
1281
	struct l2cap_conf_req *req = data;
1282
	void *ptr = req->data;
Linus Torvalds's avatar
Linus Torvalds committed
1283

1284
	BT_DBG("sk %p", sk);
Linus Torvalds's avatar
Linus Torvalds committed
1285 1286 1287 1288 1289 1290 1291 1292 1293 1294 1295 1296 1297 1298

	if (pi->imtu != L2CAP_DEFAULT_MTU)
		l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, pi->imtu);

	/* FIXME. Need actual value of the flush timeout */
	//if (flush_to != L2CAP_DEFAULT_FLUSH_TO)
	//   l2cap_add_conf_opt(&ptr, L2CAP_CONF_FLUSH_TO, 2, pi->flush_to);

	req->dcid  = __cpu_to_le16(pi->dcid);
	req->flags = __cpu_to_le16(0);

	return ptr - data;
}

1299
static inline int l2cap_conf_output(struct sock *sk, void **ptr)
Linus Torvalds's avatar
Linus Torvalds committed
1300 1301 1302 1303
{
	struct l2cap_pinfo *pi = l2cap_pi(sk);
	int result = 0;

1304
	/* Configure output options and let the other side know
Linus Torvalds's avatar
Linus Torvalds committed
1305 1306 1307
	 * which ones we don't like.
	 */
	if (pi->conf_mtu < pi->omtu) {
1308
		l2cap_add_conf_opt(ptr, L2CAP_CONF_MTU, 2, pi->omtu);
Linus Torvalds's avatar
Linus Torvalds committed
1309 1310 1311 1312 1313
		result = L2CAP_CONF_UNACCEPT;
	} else {
		pi->omtu = pi->conf_mtu;
	}

1314
	BT_DBG("sk %p result %d", sk, result);
Linus Torvalds's avatar
Linus Torvalds committed
1315 1316 1317
	return result;
}

1318
static int l2cap_build_conf_rsp(struct sock *sk, void *data, int *result)
Linus Torvalds's avatar
Linus Torvalds committed
1319
{
1320
	struct l2cap_conf_rsp *rsp = data;
1321
	void *ptr = rsp->data;
Linus Torvalds's avatar
Linus Torvalds committed
1322

1323
	BT_DBG("sk %p complete %d", sk, result ? 1 : 0);
Linus Torvalds's avatar
Linus Torvalds committed
1324 1325 1326 1327 1328 1329 1330 1331 1332 1333 1334

	if (result)
		*result = l2cap_conf_output(sk, &ptr);

	rsp->scid   = __cpu_to_le16(l2cap_pi(sk)->dcid);
	rsp->result = __cpu_to_le16(result ? *result : 0);
	rsp->flags  = __cpu_to_le16(0);

	return ptr - data;
}

1335
static inline int l2cap_connect_req(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u8 *data)
Linus Torvalds's avatar
Linus Torvalds committed
1336 1337
{
	struct l2cap_chan_list *list = &conn->chan_list;
1338 1339
	struct l2cap_conn_req *req = (struct l2cap_conn_req *) data;
	struct l2cap_conn_rsp rsp;
Linus Torvalds's avatar
Linus Torvalds committed
1340
	struct sock *sk, *parent;
1341
	int result = 0, status = 0;
Linus Torvalds's avatar
Linus Torvalds committed
1342

1343 1344
	u16 dcid = 0, scid = __le16_to_cpu(req->scid);
	u16 psm  = req->psm;
Linus Torvalds's avatar
Linus Torvalds committed
1345

1346
	BT_DBG("psm 0x%2.2x scid 0x%4.4x", psm, scid);
Linus Torvalds's avatar
Linus Torvalds committed
1347 1348

	/* Check if we have socket listening on psm */
1349 1350
	parent = l2cap_get_sock_by_psm(BT_LISTEN, psm, conn->src);
	if (!parent) {
1351
		result = L2CAP_CR_BAD_PSM;
1352
		goto sendresp;
1353
	}
Linus Torvalds's avatar
Linus Torvalds committed
1354

1355
	result = L2CAP_CR_NO_MEM;
Linus Torvalds's avatar
Linus Torvalds committed
1356 1357

	/* Check for backlog size */
1358 1359
	if (parent->ack_backlog > parent->max_ack_backlog) {
		BT_DBG("backlog full %d", parent->ack_backlog); 
1360
		goto response;
1361
	}
Linus Torvalds's avatar
Linus Torvalds committed
1362

1363 1364 1365
	sk = l2cap_sock_alloc(NULL, BTPROTO_L2CAP, GFP_ATOMIC);
	if (!sk)
		goto response;
Linus Torvalds's avatar
Linus Torvalds committed
1366

1367 1368 1369 1370 1371 1372 1373 1374 1375
	write_lock(&list->lock);

	/* Check if we already have channel with that dcid */
	if (__l2cap_get_chan_by_dcid(list, scid)) {
		write_unlock(&list->lock);
		sk->zapped = 1;
		l2cap_sock_kill(sk);
		goto response;
	}
Linus Torvalds's avatar
Linus Torvalds committed
1376

1377 1378 1379
	hci_conn_hold(conn->hcon);

	l2cap_sock_init(sk, parent);
1380 1381
	bacpy(&bt_sk(sk)->src, conn->src);
	bacpy(&bt_sk(sk)->dst, conn->dst);
Linus Torvalds's avatar
Linus Torvalds committed
1382 1383 1384 1385
	l2cap_pi(sk)->psm  = psm;
	l2cap_pi(sk)->dcid = scid;

	__l2cap_chan_add(conn, sk, parent);
1386
	dcid = l2cap_pi(sk)->scid;
Linus Torvalds's avatar
Linus Torvalds committed
1387

1388
	l2cap_sock_set_timer(sk, sk->sndtimeo);
Linus Torvalds's avatar
Linus Torvalds committed
1389

1390 1391 1392 1393 1394 1395 1396 1397
	/* Service level security */
	result = L2CAP_CR_PEND;
	status = L2CAP_CS_AUTHEN_PEND;
	sk->state = BT_CONNECT2;
	l2cap_pi(sk)->ident = cmd->ident;
	
	if (l2cap_pi(sk)->link_mode & L2CAP_LM_ENCRYPT) {
		if (!hci_conn_encrypt(conn->hcon))
1398
			goto done;
1399 1400
	} else if (l2cap_pi(sk)->link_mode & L2CAP_LM_AUTH) {
		if (!hci_conn_auth(conn->hcon))
1401
			goto done;
1402
	}
Linus Torvalds's avatar
Linus Torvalds committed
1403

1404 1405
	sk->state = BT_CONFIG;
	result = status = 0;
Linus Torvalds's avatar
Linus Torvalds committed
1406

1407
done:
1408
	write_unlock(&list->lock);
Linus Torvalds's avatar
Linus Torvalds committed
1409

1410 1411 1412 1413
response:
	bh_unlock_sock(parent);

sendresp:
Linus Torvalds's avatar
Linus Torvalds committed
1414
	rsp.scid   = __cpu_to_le16(scid);
1415 1416 1417
	rsp.dcid   = __cpu_to_le16(dcid);
	rsp.result = __cpu_to_le16(result);
	rsp.status = __cpu_to_le16(status);
1418
	l2cap_send_rsp(conn, cmd->ident, L2CAP_CONN_RSP, sizeof(rsp), &rsp);
Linus Torvalds's avatar
Linus Torvalds committed
1419 1420 1421
	return 0;
}

1422
static inline int l2cap_connect_rsp(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u8 *data)
Linus Torvalds's avatar
Linus Torvalds committed
1423
{
1424 1425
	struct l2cap_conn_rsp *rsp = (struct l2cap_conn_rsp *) data;
	u16 scid, dcid, result, status;
Linus Torvalds's avatar
Linus Torvalds committed
1426
	struct sock *sk;
1427
	char req[128];
Linus Torvalds's avatar
Linus Torvalds committed
1428 1429 1430 1431 1432 1433

	scid   = __le16_to_cpu(rsp->scid);
	dcid   = __le16_to_cpu(rsp->dcid);
	result = __le16_to_cpu(rsp->result);
	status = __le16_to_cpu(rsp->status);

1434
	BT_DBG("dcid 0x%4.4x scid 0x%4.4x result 0x%2.2x status 0x%2.2x", dcid, scid, result, status);
Linus Torvalds's avatar
Linus Torvalds committed
1435 1436 1437 1438

	if (!(sk = l2cap_get_chan_by_scid(&conn->chan_list, scid)))
		return -ENOENT;

1439 1440
	switch (result) {
	case L2CAP_CR_SUCCESS:
Linus Torvalds's avatar
Linus Torvalds committed
1441
		sk->state = BT_CONFIG;
Linus Torvalds's avatar
Linus Torvalds committed
1442 1443
		l2cap_pi(sk)->dcid = dcid;
		l2cap_pi(sk)->conf_state |= CONF_REQ_SENT;
Linus Torvalds's avatar
Linus Torvalds committed
1444 1445

		l2cap_send_req(conn, L2CAP_CONF_REQ, l2cap_build_conf_req(sk, req), req);
1446 1447 1448 1449 1450 1451
		break;

	case L2CAP_CR_PEND:
		break;

	default:
Linus Torvalds's avatar
Linus Torvalds committed
1452
		l2cap_chan_del(sk, ECONNREFUSED);
1453
		break;
Linus Torvalds's avatar
Linus Torvalds committed
1454 1455 1456 1457 1458 1459
	}

	bh_unlock_sock(sk);
	return 0;
}

1460
static inline int l2cap_config_req(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u8 *data)
Linus Torvalds's avatar
Linus Torvalds committed
1461
{
1462 1463 1464
	struct l2cap_conf_req *req = (struct l2cap_conf_req *) data;
	u16 dcid, flags;
	u8  rsp[64];
Linus Torvalds's avatar
Linus Torvalds committed
1465 1466 1467 1468 1469 1470
	struct sock *sk;
	int result;

	dcid  = __le16_to_cpu(req->dcid);
	flags = __le16_to_cpu(req->flags);

1471
	BT_DBG("dcid 0x%4.4x flags 0x%2.2x", dcid, flags);
Linus Torvalds's avatar
Linus Torvalds committed
1472 1473 1474 1475

	if (!(sk = l2cap_get_chan_by_scid(&conn->chan_list, dcid)))
		return -ENOENT;

1476
	l2cap_parse_conf_req(sk, req->data, cmd->len - sizeof(*req));
Linus Torvalds's avatar
Linus Torvalds committed
1477 1478 1479 1480 1481 1482 1483 1484 1485 1486 1487 1488 1489 1490

	if (flags & 0x01) {
		/* Incomplete config. Send empty response. */
		l2cap_send_rsp(conn, cmd->ident, L2CAP_CONF_RSP, l2cap_build_conf_rsp(sk, rsp, NULL), rsp);
		goto unlock;
	}

	/* Complete config. */
	l2cap_send_rsp(conn, cmd->ident, L2CAP_CONF_RSP, l2cap_build_conf_rsp(sk, rsp, &result), rsp);

	if (result)
		goto unlock;

	/* Output config done */
Linus Torvalds's avatar
Linus Torvalds committed
1491
	l2cap_pi(sk)->conf_state |= CONF_OUTPUT_DONE;
Linus Torvalds's avatar
Linus Torvalds committed
1492

Linus Torvalds's avatar
Linus Torvalds committed
1493
	if (l2cap_pi(sk)->conf_state & CONF_INPUT_DONE) {
Linus Torvalds's avatar
Linus Torvalds committed
1494 1495
		sk->state = BT_CONNECTED;
		l2cap_chan_ready(sk);
Linus Torvalds's avatar
Linus Torvalds committed
1496
	} else if (!(l2cap_pi(sk)->conf_state & CONF_REQ_SENT)) {
1497
		u8 req[64];
Linus Torvalds's avatar
Linus Torvalds committed
1498 1499 1500 1501 1502 1503 1504 1505
		l2cap_send_req(conn, L2CAP_CONF_REQ, l2cap_build_conf_req(sk, req), req);
	}

unlock:
	bh_unlock_sock(sk);
	return 0;
}

1506
static inline int l2cap_config_rsp(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u8 *data)
Linus Torvalds's avatar
Linus Torvalds committed
1507
{
1508 1509
	struct l2cap_conf_rsp *rsp = (struct l2cap_conf_rsp *)data;
	u16 scid, flags, result;
Linus Torvalds's avatar
Linus Torvalds committed
1510 1511 1512 1513 1514 1515 1516
	struct sock *sk;
	int err = 0;

	scid   = __le16_to_cpu(rsp->scid);
	flags  = __le16_to_cpu(rsp->flags);
	result = __le16_to_cpu(rsp->result);

1517
	BT_DBG("scid 0x%4.4x flags 0x%2.2x result 0x%2.2x", scid, flags, result);
Linus Torvalds's avatar
Linus Torvalds committed
1518 1519 1520 1521 1522

	if (!(sk = l2cap_get_chan_by_scid(&conn->chan_list, scid)))
		return -ENOENT;

	if (result) {
1523
		struct l2cap_disconn_req req;
Linus Torvalds's avatar
Linus Torvalds committed
1524 1525 1526 1527 1528

		/* They didn't like our options. Well... we do not negotiate.
		 * Close channel.
		 */
		sk->state = BT_DISCONN;
1529
		l2cap_sock_set_timer(sk, HZ * 5);
Linus Torvalds's avatar
Linus Torvalds committed
1530 1531 1532

		req.dcid = __cpu_to_le16(l2cap_pi(sk)->dcid);
		req.scid = __cpu_to_le16(l2cap_pi(sk)->scid);
1533
		l2cap_send_req(conn, L2CAP_DISCONN_REQ, sizeof(req), &req);
Linus Torvalds's avatar
Linus Torvalds committed
1534 1535 1536 1537 1538 1539 1540
		goto done;
	}

	if (flags & 0x01)
		goto done;

	/* Input config done */
Linus Torvalds's avatar
Linus Torvalds committed
1541
	l2cap_pi(sk)->conf_state |= CONF_INPUT_DONE;
Linus Torvalds's avatar
Linus Torvalds committed
1542

Linus Torvalds's avatar
Linus Torvalds committed
1543
	if (l2cap_pi(sk)->conf_state & CONF_OUTPUT_DONE) {
Linus Torvalds's avatar
Linus Torvalds committed
1544 1545 1546 1547 1548 1549 1550 1551 1552
		sk->state = BT_CONNECTED;
		l2cap_chan_ready(sk);
	}

done:
	bh_unlock_sock(sk);
	return err;
}

1553
static inline int l2cap_disconnect_req(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u8 *data)
Linus Torvalds's avatar
Linus Torvalds committed
1554
{
1555 1556 1557
	struct l2cap_disconn_req *req = (struct l2cap_disconn_req *) data;
	struct l2cap_disconn_rsp rsp;
	u16 dcid, scid;
Linus Torvalds's avatar
Linus Torvalds committed
1558 1559 1560 1561 1562
	struct sock *sk;

	scid = __le16_to_cpu(req->scid);
	dcid = __le16_to_cpu(req->dcid);

1563
	BT_DBG("scid 0x%4.4x dcid 0x%4.4x", scid, dcid);
Linus Torvalds's avatar
Linus Torvalds committed
1564 1565 1566 1567 1568 1569

	if (!(sk = l2cap_get_chan_by_scid(&conn->chan_list, dcid)))
		return 0;

	rsp.dcid = __cpu_to_le16(l2cap_pi(sk)->scid);
	rsp.scid = __cpu_to_le16(l2cap_pi(sk)->dcid);
1570
	l2cap_send_rsp(conn, cmd->ident, L2CAP_DISCONN_RSP, sizeof(rsp), &rsp);
Linus Torvalds's avatar
Linus Torvalds committed
1571

1572 1573
	sk->shutdown = SHUTDOWN_MASK;
	
Linus Torvalds's avatar
Linus Torvalds committed
1574 1575 1576 1577 1578 1579 1580
	l2cap_chan_del(sk, ECONNRESET);
	bh_unlock_sock(sk);

	l2cap_sock_kill(sk);
	return 0;
}

1581
static inline int l2cap_disconnect_rsp(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u8 *data)
Linus Torvalds's avatar
Linus Torvalds committed
1582
{
1583 1584
	struct l2cap_disconn_rsp *rsp = (struct l2cap_disconn_rsp *) data;
	u16 dcid, scid;
Linus Torvalds's avatar
Linus Torvalds committed
1585 1586 1587 1588 1589
	struct sock *sk;

	scid = __le16_to_cpu(rsp->scid);
	dcid = __le16_to_cpu(rsp->dcid);

1590
	BT_DBG("dcid 0x%4.4x scid 0x%4.4x", dcid, scid);
Linus Torvalds's avatar
Linus Torvalds committed
1591 1592

	if (!(sk = l2cap_get_chan_by_scid(&conn->chan_list, scid)))
1593
		return 0;
Linus Torvalds's avatar
Linus Torvalds committed
1594 1595 1596 1597 1598 1599 1600
	l2cap_chan_del(sk, ECONNABORTED);
	bh_unlock_sock(sk);

	l2cap_sock_kill(sk);
	return 0;
}

Linus Torvalds's avatar
Linus Torvalds committed
1601
static inline void l2cap_sig_channel(struct l2cap_conn *conn, struct sk_buff *skb)
Linus Torvalds's avatar
Linus Torvalds committed
1602
{
1603
	u8 *data = skb->data;
Linus Torvalds's avatar
Linus Torvalds committed
1604
	int len = skb->len;
1605
	struct l2cap_cmd_hdr cmd;
Linus Torvalds's avatar
Linus Torvalds committed
1606 1607 1608 1609 1610 1611 1612
	int err = 0;

	while (len >= L2CAP_CMD_HDR_SIZE) {
		memcpy(&cmd, data, L2CAP_CMD_HDR_SIZE);
		data += L2CAP_CMD_HDR_SIZE;
		len  -= L2CAP_CMD_HDR_SIZE;

Linus Torvalds's avatar
Linus Torvalds committed
1613
		cmd.len = __le16_to_cpu(cmd.len);
Linus Torvalds's avatar
Linus Torvalds committed
1614

1615
		BT_DBG("code 0x%2.2x len %d id 0x%2.2x", cmd.code, cmd.len, cmd.ident);
Linus Torvalds's avatar
Linus Torvalds committed
1616 1617

		if (cmd.len > len || !cmd.ident) {
1618
			BT_DBG("corrupted command");
Linus Torvalds's avatar
Linus Torvalds committed
1619 1620 1621 1622 1623 1624 1625 1626 1627 1628 1629 1630 1631 1632 1633 1634 1635 1636 1637 1638 1639 1640 1641 1642 1643 1644 1645 1646 1647 1648 1649 1650 1651 1652 1653 1654 1655 1656 1657 1658 1659 1660 1661 1662
			break;
		}

		switch (cmd.code) {
		case L2CAP_CONN_REQ:
			err = l2cap_connect_req(conn, &cmd, data);
			break;

		case L2CAP_CONN_RSP:
			err = l2cap_connect_rsp(conn, &cmd, data);
			break;

		case L2CAP_CONF_REQ:
			err = l2cap_config_req(conn, &cmd, data);
			break;

		case L2CAP_CONF_RSP:
			err = l2cap_config_rsp(conn, &cmd, data);
			break;

		case L2CAP_DISCONN_REQ:
			err = l2cap_disconnect_req(conn, &cmd, data);
			break;

		case L2CAP_DISCONN_RSP:
			err = l2cap_disconnect_rsp(conn, &cmd, data);
			break;

		case L2CAP_COMMAND_REJ:
			/* FIXME: We should process this */
			l2cap_raw_recv(conn, skb);
			break;

		case L2CAP_ECHO_REQ:
			l2cap_send_rsp(conn, cmd.ident, L2CAP_ECHO_RSP, cmd.len, data);
			break;

		case L2CAP_ECHO_RSP:
		case L2CAP_INFO_REQ:
		case L2CAP_INFO_RSP:
			l2cap_raw_recv(conn, skb);
			break;

		default:
1663
			BT_ERR("Uknown signaling command 0x%2.2x", cmd.code);
Linus Torvalds's avatar
Linus Torvalds committed
1664 1665
			err = -EINVAL;
			break;
1666
		}
Linus Torvalds's avatar
Linus Torvalds committed
1667 1668

		if (err) {
1669
			struct l2cap_cmd_rej rej;
1670
			BT_DBG("error %d", err);
Linus Torvalds's avatar
Linus Torvalds committed
1671 1672

			/* FIXME: Map err to a valid reason. */
Linus Torvalds's avatar
Linus Torvalds committed
1673
			rej.reason = __cpu_to_le16(0);
1674
			l2cap_send_rsp(conn, cmd.ident, L2CAP_COMMAND_REJ, sizeof(rej), &rej);
Linus Torvalds's avatar
Linus Torvalds committed
1675 1676 1677 1678 1679 1680
		}

		data += cmd.len;
		len  -= cmd.len;
	}

Linus Torvalds's avatar
Linus Torvalds committed
1681
	kfree_skb(skb);
Linus Torvalds's avatar
Linus Torvalds committed
1682 1683
}

1684
static inline int l2cap_data_channel(struct l2cap_conn *conn, u16 cid, struct sk_buff *skb)
Linus Torvalds's avatar
Linus Torvalds committed
1685 1686 1687
{
	struct sock *sk;

1688 1689 1690
	sk = l2cap_get_chan_by_scid(&conn->chan_list, cid);
	if (!sk) {
		BT_DBG("unknown cid 0x%4.4x", cid);
Linus Torvalds's avatar
Linus Torvalds committed
1691 1692 1693
		goto drop;
	}

1694
	BT_DBG("sk %p, len %d", sk, skb->len);
Linus Torvalds's avatar
Linus Torvalds committed
1695 1696 1697 1698 1699 1700 1701

	if (sk->state != BT_CONNECTED)
		goto drop;

	if (l2cap_pi(sk)->imtu < skb->len)
		goto drop;

1702 1703 1704 1705 1706 1707 1708
	/* If socket recv buffers overflows we drop data here 
	 * which is *bad* because L2CAP has to be reliable. 
	 * But we don't have any other choice. L2CAP doesn't 
	 * provide flow control mechanism */ 
	
	if (!sock_queue_rcv_skb(sk, skb))
		goto done;
Linus Torvalds's avatar
Linus Torvalds committed
1709 1710

drop:
Linus Torvalds's avatar
Linus Torvalds committed
1711
	kfree_skb(skb);
Linus Torvalds's avatar
Linus Torvalds committed
1712

1713 1714
done:
	if (sk) bh_unlock_sock(sk);
Linus Torvalds's avatar
Linus Torvalds committed
1715 1716 1717
	return 0;
}

1718
static inline int l2cap_conless_channel(struct l2cap_conn *conn, u16 psm, struct sk_buff *skb)
1719 1720 1721 1722 1723 1724 1725 1726 1727 1728 1729 1730 1731 1732 1733 1734 1735 1736 1737 1738 1739 1740 1741 1742 1743 1744
{
	struct sock *sk;

	sk = l2cap_get_sock_by_psm(0, psm, conn->src);
	if (!sk)
		goto drop;

	BT_DBG("sk %p, len %d", sk, skb->len);

	if (sk->state != BT_BOUND && sk->state != BT_CONNECTED)
		goto drop;

	if (l2cap_pi(sk)->imtu < skb->len)
		goto drop;

	if (!sock_queue_rcv_skb(sk, skb))
		goto done;

drop:
	kfree_skb(skb);

done:
	if (sk) bh_unlock_sock(sk);
	return 0;
}

Linus Torvalds's avatar
Linus Torvalds committed
1745 1746
static void l2cap_recv_frame(struct l2cap_conn *conn, struct sk_buff *skb)
{
1747 1748
	struct l2cap_hdr *lh = (void *) skb->data;
	u16 cid, psm, len;
Linus Torvalds's avatar
Linus Torvalds committed
1749 1750

	skb_pull(skb, L2CAP_HDR_SIZE);
Linus Torvalds's avatar
Linus Torvalds committed
1751 1752
	cid = __le16_to_cpu(lh->cid);
	len = __le16_to_cpu(lh->len);
Linus Torvalds's avatar
Linus Torvalds committed
1753

1754
	BT_DBG("len %d, cid 0x%4.4x", len, cid);
Linus Torvalds's avatar
Linus Torvalds committed
1755

1756 1757
	switch (cid) {
	case 0x0001:
Linus Torvalds's avatar
Linus Torvalds committed
1758
		l2cap_sig_channel(conn, skb);
1759 1760 1761
		break;

	case 0x0002:
1762
		psm = get_unaligned((u16 *) skb->data);
1763 1764 1765 1766 1767
		skb_pull(skb, 2);
		l2cap_conless_channel(conn, psm, skb);
		break;
		
	default:
Linus Torvalds's avatar
Linus Torvalds committed
1768
		l2cap_data_channel(conn, cid, skb);
1769 1770
		break;
	}
Linus Torvalds's avatar
Linus Torvalds committed
1771 1772
}

1773
/* ---- L2CAP interface with lower layer (HCI) ---- */
Linus Torvalds's avatar
Linus Torvalds committed
1774

1775
static int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type)
1776 1777 1778
{
	int exact = 0, lm1 = 0, lm2 = 0;
	register struct sock *sk;
Linus Torvalds's avatar
Linus Torvalds committed
1779

1780 1781
	if (type != ACL_LINK)
		return 0;
Linus Torvalds's avatar
Linus Torvalds committed
1782

1783
	BT_DBG("hdev %s, bdaddr %s", hdev->name, batostr(bdaddr));
Linus Torvalds's avatar
Linus Torvalds committed
1784

1785 1786 1787 1788 1789
	/* Find listening sockets and check their link_mode */
	read_lock(&l2cap_sk_list.lock);
	for (sk = l2cap_sk_list.head; sk; sk = sk->next) {
		if (sk->state != BT_LISTEN)
			continue;
Linus Torvalds's avatar
Linus Torvalds committed
1790

1791
		if (!bacmp(&bt_sk(sk)->src, &hdev->bdaddr)) {
1792 1793
			lm1 |= (HCI_LM_ACCEPT | l2cap_pi(sk)->link_mode);
			exact++;
1794
		} else if (!bacmp(&bt_sk(sk)->src, BDADDR_ANY))
1795 1796 1797
			lm2 |= (HCI_LM_ACCEPT | l2cap_pi(sk)->link_mode);
	}
	read_unlock(&l2cap_sk_list.lock);
Linus Torvalds's avatar
Linus Torvalds committed
1798

1799
	return exact ? lm1 : lm2;
Linus Torvalds's avatar
Linus Torvalds committed
1800 1801
}

1802
static int l2cap_connect_cfm(struct hci_conn *hcon, u8 status)
Linus Torvalds's avatar
Linus Torvalds committed
1803
{
1804
	BT_DBG("hcon %p bdaddr %s status %d", hcon, batostr(&hcon->dst), status);
Linus Torvalds's avatar
Linus Torvalds committed
1805

1806
	if (hcon->type != ACL_LINK)
Linus Torvalds's avatar
Linus Torvalds committed
1807 1808
		return 0;

1809 1810 1811 1812 1813 1814 1815
	if (!status) {
		struct l2cap_conn *conn;

		conn = l2cap_conn_add(hcon, status);
		if (conn)
			l2cap_conn_ready(conn);
	} else 
1816
		l2cap_conn_del(hcon, bt_err(status));
1817 1818
	
	return 0;
Linus Torvalds's avatar
Linus Torvalds committed
1819 1820
}

1821
static int l2cap_disconn_ind(struct hci_conn *hcon, u8 reason)
Linus Torvalds's avatar
Linus Torvalds committed
1822
{
1823
	BT_DBG("hcon %p reason %d", hcon, reason);
Linus Torvalds's avatar
Linus Torvalds committed
1824

1825
	if (hcon->type != ACL_LINK)
Linus Torvalds's avatar
Linus Torvalds committed
1826 1827
		return 0;

1828
	l2cap_conn_del(hcon, bt_err(reason));
1829 1830
	return 0;
}
Linus Torvalds's avatar
Linus Torvalds committed
1831

1832
static int l2cap_auth_cfm(struct hci_conn *hcon, u8 status)
1833 1834 1835
{
	struct l2cap_chan_list *l;
	struct l2cap_conn *conn;
1836
	struct l2cap_conn_rsp rsp;
1837 1838 1839 1840 1841 1842
	struct sock *sk;
	int result;
	
	if (!(conn = hcon->l2cap_data))
		return 0;
	l = &conn->chan_list;
Linus Torvalds's avatar
Linus Torvalds committed
1843

1844
	BT_DBG("conn %p", conn);
Linus Torvalds's avatar
Linus Torvalds committed
1845

1846
	read_lock(&l->lock);
Linus Torvalds's avatar
Linus Torvalds committed
1847

1848 1849
	for (sk = l->head; sk; sk = l2cap_pi(sk)->next_c) {
		bh_lock_sock(sk);
Linus Torvalds's avatar
Linus Torvalds committed
1850

1851 1852 1853 1854
		if (sk->state != BT_CONNECT2 ||
				(l2cap_pi(sk)->link_mode & L2CAP_LM_ENCRYPT)) {
			bh_unlock_sock(sk);
			continue;
Linus Torvalds's avatar
Linus Torvalds committed
1855 1856
		}

1857 1858 1859 1860 1861 1862 1863
		if (!status) {
			sk->state = BT_CONFIG;
			result = 0;
		} else {
			sk->state = BT_DISCONN;
			l2cap_sock_set_timer(sk, HZ/10);
			result = L2CAP_CR_SEC_BLOCK;
Linus Torvalds's avatar
Linus Torvalds committed
1864 1865
		}

1866 1867 1868 1869
		rsp.scid   = __cpu_to_le16(l2cap_pi(sk)->dcid);
		rsp.dcid   = __cpu_to_le16(l2cap_pi(sk)->scid);
		rsp.result = __cpu_to_le16(result);
		rsp.status = __cpu_to_le16(0);
1870
		l2cap_send_rsp(conn, l2cap_pi(sk)->ident, L2CAP_CONN_RSP, sizeof(rsp), &rsp);
Linus Torvalds's avatar
Linus Torvalds committed
1871

1872
		bh_unlock_sock(sk);
Linus Torvalds's avatar
Linus Torvalds committed
1873 1874
	}

1875 1876
	read_unlock(&l->lock);
	return 0;
Linus Torvalds's avatar
Linus Torvalds committed
1877 1878
}

1879
static int l2cap_encrypt_cfm(struct hci_conn *hcon, u8 status)
Linus Torvalds's avatar
Linus Torvalds committed
1880
{
1881 1882
	struct l2cap_chan_list *l;
	struct l2cap_conn *conn;
1883
	struct l2cap_conn_rsp rsp;
1884 1885 1886 1887 1888 1889
	struct sock *sk;
	int result;
	
	if (!(conn = hcon->l2cap_data))
		return 0;
	l = &conn->chan_list;
Linus Torvalds's avatar
Linus Torvalds committed
1890

1891
	BT_DBG("conn %p", conn);
Linus Torvalds's avatar
Linus Torvalds committed
1892

1893 1894 1895 1896 1897 1898 1899 1900 1901 1902 1903 1904 1905 1906 1907 1908 1909 1910 1911 1912 1913 1914 1915
	read_lock(&l->lock);

	for (sk = l->head; sk; sk = l2cap_pi(sk)->next_c) {
		bh_lock_sock(sk);

		if (sk->state != BT_CONNECT2) {
			bh_unlock_sock(sk);
			continue;
		}

		if (!status) {
			sk->state = BT_CONFIG;
			result = 0;
		} else {
			sk->state = BT_DISCONN;
			l2cap_sock_set_timer(sk, HZ/10);
			result = L2CAP_CR_SEC_BLOCK;
		}

		rsp.scid   = __cpu_to_le16(l2cap_pi(sk)->dcid);
		rsp.dcid   = __cpu_to_le16(l2cap_pi(sk)->scid);
		rsp.result = __cpu_to_le16(result);
		rsp.status = __cpu_to_le16(0);
1916
		l2cap_send_rsp(conn, l2cap_pi(sk)->ident, L2CAP_CONN_RSP, sizeof(rsp), &rsp);
Linus Torvalds's avatar
Linus Torvalds committed
1917

1918 1919
		bh_unlock_sock(sk);
	}
Linus Torvalds's avatar
Linus Torvalds committed
1920

1921
	read_unlock(&l->lock);
Linus Torvalds's avatar
Linus Torvalds committed
1922 1923 1924
	return 0;
}

1925
static int l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags)
Linus Torvalds's avatar
Linus Torvalds committed
1926
{
1927
	struct l2cap_conn *conn = hcon->l2cap_data;
Linus Torvalds's avatar
Linus Torvalds committed
1928

1929
	if (!conn && !(conn = l2cap_conn_add(hcon, 0)))
Linus Torvalds's avatar
Linus Torvalds committed
1930 1931
		goto drop;

1932
	BT_DBG("conn %p len %d flags 0x%x", conn, skb->len, flags);
Linus Torvalds's avatar
Linus Torvalds committed
1933 1934

	if (flags & ACL_START) {
1935
		struct l2cap_hdr *hdr;
1936
		int len;
Linus Torvalds's avatar
Linus Torvalds committed
1937

Linus Torvalds's avatar
Linus Torvalds committed
1938
		if (conn->rx_len) {
1939 1940 1941
			BT_ERR("Unexpected start frame (len %d)", skb->len);
			kfree_skb(conn->rx_skb);
			conn->rx_skb = NULL;
Linus Torvalds's avatar
Linus Torvalds committed
1942 1943 1944
			conn->rx_len = 0;
		}

1945
		if (skb->len < 2) {
1946
			BT_ERR("Frame is too small (len %d)", skb->len);
Linus Torvalds's avatar
Linus Torvalds committed
1947 1948 1949
			goto drop;
		}

1950
		hdr = (struct l2cap_hdr *) skb->data;
1951
		len = __le16_to_cpu(hdr->len) + L2CAP_HDR_SIZE;
Linus Torvalds's avatar
Linus Torvalds committed
1952

1953
		BT_DBG("Start: total len %d, frag len %d", len, skb->len);
Linus Torvalds's avatar
Linus Torvalds committed
1954

1955
		if (len == skb->len) {
Linus Torvalds's avatar
Linus Torvalds committed
1956 1957 1958 1959 1960 1961
			/* Complete frame received */
			l2cap_recv_frame(conn, skb);
			return 0;
		}

		/* Allocate skb for the complete frame (with header) */
1962
		if (!(conn->rx_skb = bt_skb_alloc(len, GFP_ATOMIC)))
Linus Torvalds's avatar
Linus Torvalds committed
1963 1964 1965
			goto drop;

		memcpy(skb_put(conn->rx_skb, skb->len), skb->data, skb->len);
1966
		conn->rx_len = len - skb->len;
Linus Torvalds's avatar
Linus Torvalds committed
1967
	} else {
1968
		BT_DBG("Cont: frag len %d (expecting %d)", skb->len, conn->rx_len);
Linus Torvalds's avatar
Linus Torvalds committed
1969

Linus Torvalds's avatar
Linus Torvalds committed
1970
		if (!conn->rx_len) {
1971
			BT_ERR("Unexpected continuation frame (len %d)", skb->len);
Linus Torvalds's avatar
Linus Torvalds committed
1972 1973 1974
			goto drop;
		}

Linus Torvalds's avatar
Linus Torvalds committed
1975
		if (skb->len > conn->rx_len) {
1976 1977 1978 1979 1980
			BT_ERR("Fragment is too large (len %d, expect %d)",
					skb->len, conn->rx_len);
			kfree_skb(conn->rx_skb);
			conn->rx_skb = NULL;
			conn->rx_len = 0;
Linus Torvalds's avatar
Linus Torvalds committed
1981 1982 1983 1984 1985 1986 1987 1988 1989 1990 1991 1992 1993 1994
			goto drop;
		}

		memcpy(skb_put(conn->rx_skb, skb->len), skb->data, skb->len);
		conn->rx_len -= skb->len;

		if (!conn->rx_len) {
			/* Complete frame received */
			l2cap_recv_frame(conn, conn->rx_skb);
			conn->rx_skb = NULL;
		}
	}

drop:
Linus Torvalds's avatar
Linus Torvalds committed
1995
	kfree_skb(skb);
Linus Torvalds's avatar
Linus Torvalds committed
1996 1997 1998
	return 0;
}

1999
/* ---- Proc fs support ---- */
2000 2001
#ifdef CONFIG_PROC_FS
static void *l2cap_seq_start(struct seq_file *seq, loff_t *pos)
2002 2003
{
	struct sock *sk;
2004
	loff_t l = *pos;
2005

2006
	read_lock_bh(&l2cap_sk_list.lock);
2007

2008 2009 2010 2011 2012
	for (sk = l2cap_sk_list.head; sk; sk = sk->next)
		if (!l--)
			return sk;
	return NULL;
}
2013

2014 2015 2016 2017 2018 2019
static void *l2cap_seq_next(struct seq_file *seq, void *e, loff_t *pos)
{
	struct sock *sk = e;
	(*pos)++;
	return sk->next;
}
2020

2021 2022 2023
static void l2cap_seq_stop(struct seq_file *seq, void *e)
{
	read_unlock_bh(&l2cap_sk_list.lock);
2024 2025
}

2026
static int  l2cap_seq_show(struct seq_file *seq, void *e)
2027
{
2028 2029 2030 2031 2032 2033 2034 2035 2036 2037 2038 2039 2040 2041 2042 2043
	struct sock *sk = e;
	struct l2cap_pinfo *pi = l2cap_pi(sk);

	seq_printf(seq, "%s %s %d %d 0x%4.4x 0x%4.4x %d %d 0x%x\n",
			batostr(&bt_sk(sk)->src), batostr(&bt_sk(sk)->dst), 
			sk->state, pi->psm, pi->scid, pi->dcid, pi->imtu, pi->omtu,
			pi->link_mode);
	return 0;
}

static struct seq_operations l2cap_seq_ops = {
	.start  = l2cap_seq_start,
	.next   = l2cap_seq_next,
	.stop   = l2cap_seq_stop,
	.show   = l2cap_seq_show 
};
2044

2045 2046 2047 2048
static int l2cap_seq_open(struct inode *inode, struct file *file)
{
	return seq_open(file, &l2cap_seq_ops);
}
2049

2050 2051 2052 2053 2054 2055
static struct file_operations l2cap_seq_fops = {
	.open    = l2cap_seq_open,
	.read    = seq_read,
	.llseek  = seq_lseek,
	.release = seq_release,
};
2056

Maksim Krasnyanskiy's avatar
Maksim Krasnyanskiy committed
2057
static int  __init l2cap_proc_init(void)
2058 2059 2060 2061
{
        struct proc_dir_entry *p = create_proc_entry("l2cap", S_IRUGO, proc_bt);
        if (!p)
                return -ENOMEM;
Maksim Krasnyanskiy's avatar
Maksim Krasnyanskiy committed
2062
	p->owner     = THIS_MODULE;
2063 2064 2065
        p->proc_fops = &l2cap_seq_fops;
        return 0;
}
2066

Maksim Krasnyanskiy's avatar
Maksim Krasnyanskiy committed
2067
static void __exit l2cap_proc_cleanup(void)
2068 2069 2070
{
        remove_proc_entry("l2cap", proc_bt);
}
2071

2072
#else /* CONFIG_PROC_FS */
2073

Maksim Krasnyanskiy's avatar
Maksim Krasnyanskiy committed
2074
static int  __init l2cap_proc_init(void)
2075 2076 2077 2078
{
        return 0;
}

Maksim Krasnyanskiy's avatar
Maksim Krasnyanskiy committed
2079
static void __exit l2cap_proc_cleanup(void)
2080
{
2081
        return;
2082
}
2083
#endif /* CONFIG_PROC_FS */
2084 2085

static struct proto_ops l2cap_sock_ops = {
2086 2087 2088 2089 2090 2091 2092 2093
	.family  =      PF_BLUETOOTH,
	.release =      l2cap_sock_release,
	.bind    =      l2cap_sock_bind,
	.connect =      l2cap_sock_connect,
	.listen  =      l2cap_sock_listen,
	.accept  =      l2cap_sock_accept,
	.getname =      l2cap_sock_getname,
	.sendmsg =      l2cap_sock_sendmsg,
2094 2095
	.recvmsg =      bt_sock_recvmsg,
	.poll    =      bt_sock_poll,
2096 2097 2098 2099 2100 2101
	.mmap    =      sock_no_mmap,
	.socketpair =   sock_no_socketpair,
	.ioctl      =   sock_no_ioctl,
	.shutdown   =   l2cap_sock_shutdown,
	.setsockopt =   l2cap_sock_setsockopt,
	.getsockopt =   l2cap_sock_getsockopt
Linus Torvalds's avatar
Linus Torvalds committed
2102 2103
};

2104
static struct net_proto_family l2cap_sock_family_ops = {
2105
	.family =       PF_BLUETOOTH,
2106
	.create	=       l2cap_sock_create,
Linus Torvalds's avatar
Linus Torvalds committed
2107 2108
};

2109
static struct hci_proto l2cap_hci_proto = {
2110 2111 2112 2113 2114 2115 2116 2117
	.name =         "L2CAP",
	.id   =         HCI_PROTO_L2CAP,
	.connect_ind =  l2cap_connect_ind,
	.connect_cfm =  l2cap_connect_cfm,
	.disconn_ind =  l2cap_disconn_ind,
	.auth_cfm    =  l2cap_auth_cfm,
	.encrypt_cfm =  l2cap_encrypt_cfm,
	.recv_acldata =	l2cap_recv_acldata
Linus Torvalds's avatar
Linus Torvalds committed
2118 2119 2120 2121
};

int __init l2cap_init(void)
{
2122
	int err;
Linus Torvalds's avatar
Linus Torvalds committed
2123

2124
	if ((err = bt_sock_register(BTPROTO_L2CAP, &l2cap_sock_family_ops))) {
2125
		BT_ERR("L2CAP socket registration failed");
2126
		return err;
Linus Torvalds's avatar
Linus Torvalds committed
2127 2128
	}

2129
	if ((err = hci_register_proto(&l2cap_hci_proto))) {
2130
		BT_ERR("L2CAP protocol registration failed");
2131
		return err;
Linus Torvalds's avatar
Linus Torvalds committed
2132 2133 2134
	}


2135 2136
	l2cap_proc_init();
	
2137 2138 2139
	BT_INFO("L2CAP ver %s", VERSION);
	BT_INFO("L2CAP socket layer initialized");

Linus Torvalds's avatar
Linus Torvalds committed
2140 2141 2142
	return 0;
}

Maksim Krasnyanskiy's avatar
Maksim Krasnyanskiy committed
2143
void __exit l2cap_cleanup(void)
Linus Torvalds's avatar
Linus Torvalds committed
2144
{
2145
	l2cap_proc_cleanup();
Linus Torvalds's avatar
Linus Torvalds committed
2146

2147
	/* Unregister socket and protocol */
2148
	if (bt_sock_unregister(BTPROTO_L2CAP))
2149
		BT_ERR("L2CAP socket unregistration failed");
Linus Torvalds's avatar
Linus Torvalds committed
2150

2151
	if (hci_unregister_proto(&l2cap_hci_proto))
2152
		BT_ERR("L2CAP protocol unregistration failed");
Linus Torvalds's avatar
Linus Torvalds committed
2153 2154 2155 2156
}

module_init(l2cap_init);
module_exit(l2cap_cleanup);
Linus Torvalds's avatar
Linus Torvalds committed
2157 2158

MODULE_AUTHOR("Maxim Krasnyansky <maxk@qualcomm.com>");
2159
MODULE_DESCRIPTION("Bluetooth L2CAP ver " VERSION);
Linus Torvalds's avatar
Linus Torvalds committed
2160
MODULE_LICENSE("GPL");