Commit | Line | Data |
---|---|---|
1da177e4 | 1 | /* |
1da177e4 | 2 | * |
4aa769b9 MH |
3 | * Bluetooth virtual HCI driver |
4 | * | |
9c724357 MH |
5 | * Copyright (C) 2000-2001 Qualcomm Incorporated |
6 | * Copyright (C) 2002-2003 Maxim Krasnyansky <maxk@qualcomm.com> | |
7 | * Copyright (C) 2004-2006 Marcel Holtmann <marcel@holtmann.org> | |
4aa769b9 MH |
8 | * |
9 | * | |
10 | * This program is free software; you can redistribute it and/or modify | |
11 | * it under the terms of the GNU General Public License as published by | |
12 | * the Free Software Foundation; either version 2 of the License, or | |
13 | * (at your option) any later version. | |
14 | * | |
15 | * This program is distributed in the hope that it will be useful, | |
16 | * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
17 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
18 | * GNU General Public License for more details. | |
19 | * | |
20 | * You should have received a copy of the GNU General Public License | |
21 | * along with this program; if not, write to the Free Software | |
22 | * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA | |
23 | * | |
1da177e4 | 24 | */ |
1da177e4 | 25 | |
1da177e4 | 26 | #include <linux/module.h> |
23424c0d | 27 | #include <asm/unaligned.h> |
1da177e4 | 28 | |
1da177e4 | 29 | #include <linux/kernel.h> |
4aa769b9 | 30 | #include <linux/init.h> |
1da177e4 | 31 | #include <linux/slab.h> |
4aa769b9 MH |
32 | #include <linux/types.h> |
33 | #include <linux/errno.h> | |
34 | #include <linux/sched.h> | |
1da177e4 | 35 | #include <linux/poll.h> |
1da177e4 LT |
36 | |
37 | #include <linux/skbuff.h> | |
38 | #include <linux/miscdevice.h> | |
39 | ||
1da177e4 LT |
40 | #include <net/bluetooth/bluetooth.h> |
41 | #include <net/bluetooth/hci_core.h> | |
1da177e4 | 42 | |
82a30cfc | 43 | #define VERSION "1.5" |
4aa769b9 | 44 | |
36acbb1a AE |
45 | static bool amp; |
46 | ||
4aa769b9 MH |
47 | struct vhci_data { |
48 | struct hci_dev *hdev; | |
49 | ||
4aa769b9 MH |
50 | wait_queue_head_t read_wait; |
51 | struct sk_buff_head readq; | |
23424c0d MH |
52 | |
53 | struct delayed_work open_timeout; | |
4aa769b9 MH |
54 | }; |
55 | ||
4aa769b9 | 56 | static int vhci_open_dev(struct hci_dev *hdev) |
1da177e4 LT |
57 | { |
58 | set_bit(HCI_RUNNING, &hdev->flags); | |
1da177e4 | 59 | |
1da177e4 LT |
60 | return 0; |
61 | } | |
62 | ||
4aa769b9 | 63 | static int vhci_close_dev(struct hci_dev *hdev) |
1da177e4 | 64 | { |
155961e8 | 65 | struct vhci_data *data = hci_get_drvdata(hdev); |
4aa769b9 | 66 | |
1da177e4 LT |
67 | if (!test_and_clear_bit(HCI_RUNNING, &hdev->flags)) |
68 | return 0; | |
69 | ||
9c724357 | 70 | skb_queue_purge(&data->readq); |
4aa769b9 | 71 | |
1da177e4 LT |
72 | return 0; |
73 | } | |
74 | ||
4aa769b9 | 75 | static int vhci_flush(struct hci_dev *hdev) |
1da177e4 | 76 | { |
155961e8 | 77 | struct vhci_data *data = hci_get_drvdata(hdev); |
1da177e4 | 78 | |
9c724357 | 79 | skb_queue_purge(&data->readq); |
1da177e4 | 80 | |
4aa769b9 | 81 | return 0; |
1da177e4 LT |
82 | } |
83 | ||
7bd8f09f | 84 | static int vhci_send_frame(struct hci_dev *hdev, struct sk_buff *skb) |
1da177e4 | 85 | { |
60298775 | 86 | struct vhci_data *data = hci_get_drvdata(hdev); |
1da177e4 LT |
87 | |
88 | if (!test_bit(HCI_RUNNING, &hdev->flags)) | |
89 | return -EBUSY; | |
90 | ||
0d48d939 | 91 | memcpy(skb_push(skb, 1), &bt_cb(skb)->pkt_type, 1); |
9c724357 | 92 | skb_queue_tail(&data->readq, skb); |
4aa769b9 | 93 | |
9c724357 | 94 | wake_up_interruptible(&data->read_wait); |
23424c0d MH |
95 | return 0; |
96 | } | |
97 | ||
82a30cfc | 98 | static int vhci_create_device(struct vhci_data *data, __u8 opcode) |
23424c0d MH |
99 | { |
100 | struct hci_dev *hdev; | |
101 | struct sk_buff *skb; | |
82a30cfc MH |
102 | __u8 dev_type; |
103 | ||
104 | /* bits 0-1 are dev_type (BR/EDR or AMP) */ | |
105 | dev_type = opcode & 0x03; | |
106 | ||
107 | if (dev_type != HCI_BREDR && dev_type != HCI_AMP) | |
108 | return -EINVAL; | |
109 | ||
0ad184ef MH |
110 | /* bits 2-5 are reserved (must be zero) */ |
111 | if (opcode & 0x3c) | |
82a30cfc | 112 | return -EINVAL; |
23424c0d MH |
113 | |
114 | skb = bt_skb_alloc(4, GFP_KERNEL); | |
115 | if (!skb) | |
116 | return -ENOMEM; | |
117 | ||
118 | hdev = hci_alloc_dev(); | |
119 | if (!hdev) { | |
120 | kfree_skb(skb); | |
121 | return -ENOMEM; | |
122 | } | |
123 | ||
124 | data->hdev = hdev; | |
125 | ||
126 | hdev->bus = HCI_VIRTUAL; | |
127 | hdev->dev_type = dev_type; | |
128 | hci_set_drvdata(hdev, data); | |
129 | ||
130 | hdev->open = vhci_open_dev; | |
131 | hdev->close = vhci_close_dev; | |
132 | hdev->flush = vhci_flush; | |
133 | hdev->send = vhci_send_frame; | |
1da177e4 | 134 | |
0ad184ef MH |
135 | /* bit 6 is for external configuration */ |
136 | if (opcode & 0x40) | |
137 | set_bit(HCI_QUIRK_EXTERNAL_CONFIG, &hdev->quirks); | |
138 | ||
82a30cfc MH |
139 | /* bit 7 is for raw device */ |
140 | if (opcode & 0x80) | |
141 | set_bit(HCI_QUIRK_RAW_DEVICE, &hdev->quirks); | |
142 | ||
23424c0d MH |
143 | if (hci_register_dev(hdev) < 0) { |
144 | BT_ERR("Can't register HCI device"); | |
145 | hci_free_dev(hdev); | |
146 | data->hdev = NULL; | |
147 | kfree_skb(skb); | |
148 | return -EBUSY; | |
149 | } | |
150 | ||
151 | bt_cb(skb)->pkt_type = HCI_VENDOR_PKT; | |
152 | ||
153 | *skb_put(skb, 1) = 0xff; | |
82a30cfc | 154 | *skb_put(skb, 1) = opcode; |
23424c0d MH |
155 | put_unaligned_le16(hdev->id, skb_put(skb, 2)); |
156 | skb_queue_tail(&data->readq, skb); | |
157 | ||
158 | wake_up_interruptible(&data->read_wait); | |
1da177e4 LT |
159 | return 0; |
160 | } | |
161 | ||
9c724357 | 162 | static inline ssize_t vhci_get_user(struct vhci_data *data, |
512b2268 | 163 | struct iov_iter *from) |
1da177e4 | 164 | { |
512b2268 | 165 | size_t len = iov_iter_count(from); |
1da177e4 | 166 | struct sk_buff *skb; |
82a30cfc | 167 | __u8 pkt_type, opcode; |
23424c0d | 168 | int ret; |
1da177e4 | 169 | |
5bc00b5c | 170 | if (len < 2 || len > HCI_MAX_FRAME_SIZE) |
1da177e4 LT |
171 | return -EINVAL; |
172 | ||
5bc00b5c | 173 | skb = bt_skb_alloc(len, GFP_KERNEL); |
4aa769b9 | 174 | if (!skb) |
1da177e4 | 175 | return -ENOMEM; |
4aa769b9 | 176 | |
512b2268 AV |
177 | if (copy_from_iter(skb_put(skb, len), len, from) != len) { |
178 | kfree_skb(skb); | |
179 | return -EFAULT; | |
1da177e4 LT |
180 | } |
181 | ||
23424c0d | 182 | pkt_type = *((__u8 *) skb->data); |
1da177e4 LT |
183 | skb_pull(skb, 1); |
184 | ||
23424c0d MH |
185 | switch (pkt_type) { |
186 | case HCI_EVENT_PKT: | |
187 | case HCI_ACLDATA_PKT: | |
188 | case HCI_SCODATA_PKT: | |
189 | if (!data->hdev) { | |
190 | kfree_skb(skb); | |
191 | return -ENODEV; | |
192 | } | |
193 | ||
23424c0d MH |
194 | bt_cb(skb)->pkt_type = pkt_type; |
195 | ||
e1a26170 | 196 | ret = hci_recv_frame(data->hdev, skb); |
23424c0d MH |
197 | break; |
198 | ||
199 | case HCI_VENDOR_PKT: | |
200 | if (data->hdev) { | |
201 | kfree_skb(skb); | |
202 | return -EBADFD; | |
203 | } | |
1da177e4 | 204 | |
23424c0d MH |
205 | cancel_delayed_work_sync(&data->open_timeout); |
206 | ||
82a30cfc | 207 | opcode = *((__u8 *) skb->data); |
23424c0d MH |
208 | skb_pull(skb, 1); |
209 | ||
210 | if (skb->len > 0) { | |
211 | kfree_skb(skb); | |
212 | return -EINVAL; | |
213 | } | |
214 | ||
215 | kfree_skb(skb); | |
216 | ||
82a30cfc | 217 | ret = vhci_create_device(data, opcode); |
23424c0d MH |
218 | break; |
219 | ||
220 | default: | |
221 | kfree_skb(skb); | |
222 | return -EINVAL; | |
223 | } | |
224 | ||
5bc00b5c | 225 | return (ret < 0) ? ret : len; |
1da177e4 LT |
226 | } |
227 | ||
9c724357 | 228 | static inline ssize_t vhci_put_user(struct vhci_data *data, |
23424c0d MH |
229 | struct sk_buff *skb, |
230 | char __user *buf, int count) | |
1da177e4 | 231 | { |
1da177e4 | 232 | char __user *ptr = buf; |
23424c0d | 233 | int len; |
4aa769b9 MH |
234 | |
235 | len = min_t(unsigned int, skb->len, count); | |
1da177e4 | 236 | |
1da177e4 LT |
237 | if (copy_to_user(ptr, skb->data, len)) |
238 | return -EFAULT; | |
4aa769b9 | 239 | |
23424c0d MH |
240 | if (!data->hdev) |
241 | return len; | |
1da177e4 | 242 | |
9c724357 | 243 | data->hdev->stat.byte_tx += len; |
4aa769b9 | 244 | |
0d48d939 MH |
245 | switch (bt_cb(skb)->pkt_type) { |
246 | case HCI_COMMAND_PKT: | |
9c724357 | 247 | data->hdev->stat.cmd_tx++; |
0d48d939 | 248 | break; |
0d48d939 | 249 | case HCI_ACLDATA_PKT: |
9c724357 | 250 | data->hdev->stat.acl_tx++; |
0d48d939 | 251 | break; |
0d48d939 | 252 | case HCI_SCODATA_PKT: |
4f7ac181 | 253 | data->hdev->stat.sco_tx++; |
0d48d939 | 254 | break; |
2c24d454 | 255 | } |
1da177e4 | 256 | |
23424c0d | 257 | return len; |
1da177e4 LT |
258 | } |
259 | ||
9c724357 | 260 | static ssize_t vhci_read(struct file *file, |
23424c0d | 261 | char __user *buf, size_t count, loff_t *pos) |
1da177e4 | 262 | { |
9c724357 | 263 | struct vhci_data *data = file->private_data; |
1da177e4 LT |
264 | struct sk_buff *skb; |
265 | ssize_t ret = 0; | |
266 | ||
1da177e4 | 267 | while (count) { |
9c724357 | 268 | skb = skb_dequeue(&data->readq); |
4db7589f MH |
269 | if (skb) { |
270 | ret = vhci_put_user(data, skb, buf, count); | |
271 | if (ret < 0) | |
272 | skb_queue_head(&data->readq, skb); | |
273 | else | |
274 | kfree_skb(skb); | |
275 | break; | |
1da177e4 LT |
276 | } |
277 | ||
4db7589f MH |
278 | if (file->f_flags & O_NONBLOCK) { |
279 | ret = -EAGAIN; | |
280 | break; | |
281 | } | |
1da177e4 | 282 | |
4db7589f | 283 | ret = wait_event_interruptible(data->read_wait, |
23424c0d | 284 | !skb_queue_empty(&data->readq)); |
4db7589f MH |
285 | if (ret < 0) |
286 | break; | |
1da177e4 | 287 | } |
1da177e4 LT |
288 | |
289 | return ret; | |
290 | } | |
291 | ||
512b2268 | 292 | static ssize_t vhci_write(struct kiocb *iocb, struct iov_iter *from) |
1da177e4 | 293 | { |
5bc00b5c | 294 | struct file *file = iocb->ki_filp; |
9c724357 | 295 | struct vhci_data *data = file->private_data; |
1da177e4 | 296 | |
512b2268 | 297 | return vhci_get_user(data, from); |
1da177e4 LT |
298 | } |
299 | ||
4aa769b9 | 300 | static unsigned int vhci_poll(struct file *file, poll_table *wait) |
1da177e4 | 301 | { |
9c724357 | 302 | struct vhci_data *data = file->private_data; |
1da177e4 | 303 | |
9c724357 | 304 | poll_wait(file, &data->read_wait, wait); |
1da177e4 | 305 | |
9c724357 | 306 | if (!skb_queue_empty(&data->readq)) |
4aa769b9 MH |
307 | return POLLIN | POLLRDNORM; |
308 | ||
309 | return POLLOUT | POLLWRNORM; | |
310 | } | |
311 | ||
23424c0d MH |
312 | static void vhci_open_timeout(struct work_struct *work) |
313 | { | |
314 | struct vhci_data *data = container_of(work, struct vhci_data, | |
315 | open_timeout.work); | |
316 | ||
317 | vhci_create_device(data, amp ? HCI_AMP : HCI_BREDR); | |
318 | } | |
319 | ||
4aa769b9 | 320 | static int vhci_open(struct inode *inode, struct file *file) |
1da177e4 | 321 | { |
9c724357 | 322 | struct vhci_data *data; |
1da177e4 | 323 | |
9c724357 MH |
324 | data = kzalloc(sizeof(struct vhci_data), GFP_KERNEL); |
325 | if (!data) | |
1da177e4 LT |
326 | return -ENOMEM; |
327 | ||
9c724357 MH |
328 | skb_queue_head_init(&data->readq); |
329 | init_waitqueue_head(&data->read_wait); | |
1da177e4 | 330 | |
23424c0d | 331 | INIT_DELAYED_WORK(&data->open_timeout, vhci_open_timeout); |
1da177e4 | 332 | |
9c724357 | 333 | file->private_data = data; |
0dea0141 | 334 | nonseekable_open(inode, file); |
4aa769b9 | 335 | |
23424c0d MH |
336 | schedule_delayed_work(&data->open_timeout, msecs_to_jiffies(1000)); |
337 | ||
0dea0141 | 338 | return 0; |
1da177e4 LT |
339 | } |
340 | ||
4aa769b9 | 341 | static int vhci_release(struct inode *inode, struct file *file) |
1da177e4 | 342 | { |
9c724357 MH |
343 | struct vhci_data *data = file->private_data; |
344 | struct hci_dev *hdev = data->hdev; | |
1da177e4 | 345 | |
23424c0d MH |
346 | cancel_delayed_work_sync(&data->open_timeout); |
347 | ||
348 | if (hdev) { | |
349 | hci_unregister_dev(hdev); | |
350 | hci_free_dev(hdev); | |
351 | } | |
1da177e4 LT |
352 | |
353 | file->private_data = NULL; | |
bf18c711 | 354 | kfree(data); |
4aa769b9 MH |
355 | |
356 | return 0; | |
357 | } | |
358 | ||
2b8693c0 | 359 | static const struct file_operations vhci_fops = { |
fed4c250 | 360 | .owner = THIS_MODULE, |
4aa769b9 | 361 | .read = vhci_read, |
512b2268 | 362 | .write_iter = vhci_write, |
4aa769b9 | 363 | .poll = vhci_poll, |
4aa769b9 MH |
364 | .open = vhci_open, |
365 | .release = vhci_release, | |
6038f373 | 366 | .llseek = no_llseek, |
1da177e4 LT |
367 | }; |
368 | ||
4aa769b9 | 369 | static struct miscdevice vhci_miscdev= { |
ac28494c MH |
370 | .name = "vhci", |
371 | .fops = &vhci_fops, | |
b075dd40 | 372 | .minor = VHCI_MINOR, |
1da177e4 LT |
373 | }; |
374 | ||
4aa769b9 | 375 | static int __init vhci_init(void) |
1da177e4 | 376 | { |
4aa769b9 | 377 | BT_INFO("Virtual HCI driver ver %s", VERSION); |
1da177e4 | 378 | |
329ab1b3 | 379 | return misc_register(&vhci_miscdev); |
1da177e4 LT |
380 | } |
381 | ||
4aa769b9 | 382 | static void __exit vhci_exit(void) |
1da177e4 | 383 | { |
329ab1b3 | 384 | misc_deregister(&vhci_miscdev); |
1da177e4 LT |
385 | } |
386 | ||
4aa769b9 MH |
387 | module_init(vhci_init); |
388 | module_exit(vhci_exit); | |
389 | ||
36acbb1a AE |
390 | module_param(amp, bool, 0644); |
391 | MODULE_PARM_DESC(amp, "Create AMP controller device"); | |
392 | ||
63fbd24e | 393 | MODULE_AUTHOR("Marcel Holtmann <marcel@holtmann.org>"); |
4aa769b9 MH |
394 | MODULE_DESCRIPTION("Bluetooth virtual HCI driver ver " VERSION); |
395 | MODULE_VERSION(VERSION); | |
396 | MODULE_LICENSE("GPL"); | |
bfacbb9a | 397 | MODULE_ALIAS("devname:vhci"); |
b075dd40 | 398 | MODULE_ALIAS_MISCDEV(VHCI_MINOR); |