1 /*
2 * ng_btsocket_hci_raw.c
3 */
4
5 /*-
6 * Copyright (c) 2001-2002 Maksim Yevmenkin <m_evmenkin@yahoo.com>
7 * All rights reserved.
8 *
9 * Redistribution and use in source and binary forms, with or without
10 * modification, are permitted provided that the following conditions
11 * are met:
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
14 * 2. Redistributions in binary form must reproduce the above copyright
15 * notice, this list of conditions and the following disclaimer in the
16 * documentation and/or other materials provided with the distribution.
17 *
18 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
19 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
20 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
21 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
22 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
23 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
24 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
25 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
26 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
27 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
28 * SUCH DAMAGE.
29 *
30 * $Id: ng_btsocket_hci_raw.c,v 1.14 2003/09/14 23:29:06 max Exp $
31 * $FreeBSD: src/sys/netgraph/bluetooth/socket/ng_btsocket_hci_raw.c,v 1.23 2006/11/06 13:42:04 rwatson Exp $
32 */
33
34 #include <sys/param.h>
35 #include <sys/systm.h>
36 #include <sys/bitstring.h>
37 #include <sys/domain.h>
38 #include <sys/endian.h>
39 #include <sys/errno.h>
40 #include <sys/filedesc.h>
41 #include <sys/kernel.h>
42 #include <sys/lock.h>
43 #include <sys/malloc.h>
44 #include <sys/mbuf.h>
45 #include <sys/caps.h>
46 #include <sys/protosw.h>
47 #include <sys/queue.h>
48 #include <sys/socket.h>
49 #include <sys/socketvar.h>
50 #include <sys/sysctl.h>
51 #include <sys/taskqueue.h>
52 #include <sys/msgport2.h>
53 #include <sys/refcount.h>
54 #include <netgraph7/ng_message.h>
55 #include <netgraph7/netgraph.h>
56 #include <netgraph7/netgraph2.h>
57 #include <netgraph7/bluetooth/include/ng_bluetooth.h>
58 #include <netgraph7/bluetooth/include/ng_hci.h>
59 #include <netgraph7/bluetooth/include/ng_l2cap.h>
60 #include <netgraph7/bluetooth/include/ng_btsocket.h>
61 #include <netgraph7/bluetooth/include/ng_btsocket_hci_raw.h>
62
63 /* MALLOC define */
64 #ifdef NG_SEPARATE_MALLOC
65 MALLOC_DEFINE(M_NETGRAPH_BTSOCKET_HCI_RAW, "netgraph_btsocks_hci_raw",
66 "Netgraph Bluetooth raw HCI sockets");
67 #else
68 #define M_NETGRAPH_BTSOCKET_HCI_RAW M_NETGRAPH
69 #endif /* NG_SEPARATE_MALLOC */
70
71 /* Netgraph node methods */
72 static ng_constructor_t ng_btsocket_hci_raw_node_constructor;
73 static ng_rcvmsg_t ng_btsocket_hci_raw_node_rcvmsg;
74 static ng_shutdown_t ng_btsocket_hci_raw_node_shutdown;
75 static ng_newhook_t ng_btsocket_hci_raw_node_newhook;
76 static ng_connect_t ng_btsocket_hci_raw_node_connect;
77 static ng_rcvdata_t ng_btsocket_hci_raw_node_rcvdata;
78 static ng_disconnect_t ng_btsocket_hci_raw_node_disconnect;
79
80 static void ng_btsocket_hci_raw_input (void *, int);
81 static void ng_btsocket_hci_raw_output(node_p, hook_p, void *, int);
82 static void ng_btsocket_hci_raw_savctl(ng_btsocket_hci_raw_pcb_p,
83 struct mbuf **,
84 struct mbuf *);
85 static int ng_btsocket_hci_raw_filter(ng_btsocket_hci_raw_pcb_p,
86 struct mbuf *, int);
87
88 #define ng_btsocket_hci_raw_wakeup_input_task() \
89 taskqueue_enqueue(taskqueue_swi, &ng_btsocket_hci_raw_task)
90
91 /* Security filter */
92 struct ng_btsocket_hci_raw_sec_filter {
93 bitstr_t bit_decl(events, 0xff);
94 bitstr_t bit_decl(commands[0x3f], 0x3ff);
95 };
96
97 /* Netgraph type descriptor */
98 static struct ng_type typestruct = {
99 .version = NG_ABI_VERSION,
100 .name = NG_BTSOCKET_HCI_RAW_NODE_TYPE,
101 .constructor = ng_btsocket_hci_raw_node_constructor,
102 .rcvmsg = ng_btsocket_hci_raw_node_rcvmsg,
103 .shutdown = ng_btsocket_hci_raw_node_shutdown,
104 .newhook = ng_btsocket_hci_raw_node_newhook,
105 .connect = ng_btsocket_hci_raw_node_connect,
106 .rcvdata = ng_btsocket_hci_raw_node_rcvdata,
107 .disconnect = ng_btsocket_hci_raw_node_disconnect,
108 };
109
110 /* Globals */
111 extern int ifqmaxlen;
112 static u_int32_t ng_btsocket_hci_raw_debug_level;
113 static u_int32_t ng_btsocket_hci_raw_ioctl_timeout;
114 static node_p ng_btsocket_hci_raw_node;
115 static struct ng_bt_itemq ng_btsocket_hci_raw_queue;
116 static struct lock ng_btsocket_hci_raw_queue_lock;
117 static struct task ng_btsocket_hci_raw_task;
118 static LIST_HEAD(, ng_btsocket_hci_raw_pcb) ng_btsocket_hci_raw_sockets;
119 static struct lock ng_btsocket_hci_raw_sockets_lock;
120 static u_int32_t ng_btsocket_hci_raw_token;
121 static struct lock ng_btsocket_hci_raw_token_lock;
122 static struct ng_btsocket_hci_raw_sec_filter *ng_btsocket_hci_raw_sec_filter;
123
124 /* Sysctl tree */
125 SYSCTL_DECL(_net_bluetooth_hci_sockets);
126 SYSCTL_NODE(_net_bluetooth_hci_sockets, OID_AUTO, raw, CTLFLAG_RW,
127 0, "Bluetooth raw HCI sockets family");
128 SYSCTL_INT(_net_bluetooth_hci_sockets_raw, OID_AUTO, debug_level, CTLFLAG_RW,
129 &ng_btsocket_hci_raw_debug_level, NG_BTSOCKET_WARN_LEVEL,
130 "Bluetooth raw HCI sockets debug level");
131 SYSCTL_INT(_net_bluetooth_hci_sockets_raw, OID_AUTO, ioctl_timeout, CTLFLAG_RW,
132 &ng_btsocket_hci_raw_ioctl_timeout, 5,
133 "Bluetooth raw HCI sockets ioctl timeout");
134 SYSCTL_INT(_net_bluetooth_hci_sockets_raw, OID_AUTO, queue_len, CTLFLAG_RD,
135 &ng_btsocket_hci_raw_queue.len, 0,
136 "Bluetooth raw HCI sockets input queue length");
137 SYSCTL_INT(_net_bluetooth_hci_sockets_raw, OID_AUTO, queue_maxlen, CTLFLAG_RD,
138 &ng_btsocket_hci_raw_queue.maxlen, 0,
139 "Bluetooth raw HCI sockets input queue max. length");
140 SYSCTL_INT(_net_bluetooth_hci_sockets_raw, OID_AUTO, queue_drops, CTLFLAG_RD,
141 &ng_btsocket_hci_raw_queue.drops, 0,
142 "Bluetooth raw HCI sockets input queue drops");
143
144 /* Debug */
145 #define NG_BTSOCKET_HCI_RAW_INFO \
146 if (ng_btsocket_hci_raw_debug_level >= NG_BTSOCKET_INFO_LEVEL) \
147 kprintf
148
149 #define NG_BTSOCKET_HCI_RAW_WARN \
150 if (ng_btsocket_hci_raw_debug_level >= NG_BTSOCKET_WARN_LEVEL) \
151 kprintf
152
153 #define NG_BTSOCKET_HCI_RAW_ERR \
154 if (ng_btsocket_hci_raw_debug_level >= NG_BTSOCKET_ERR_LEVEL) \
155 kprintf
156
157 #define NG_BTSOCKET_HCI_RAW_ALERT \
158 if (ng_btsocket_hci_raw_debug_level >= NG_BTSOCKET_ALERT_LEVEL) \
159 kprintf
160
161 /****************************************************************************
162 ****************************************************************************
163 ** Netgraph specific
164 ****************************************************************************
165 ****************************************************************************/
166
167 /*
168 * Netgraph node constructor. Do not allow to create node of this type.
169 */
170
171 static int
ng_btsocket_hci_raw_node_constructor(node_p node)172 ng_btsocket_hci_raw_node_constructor(node_p node)
173 {
174 return (EINVAL);
175 } /* ng_btsocket_hci_raw_node_constructor */
176
177 /*
178 * Netgraph node destructor. Just let old node go and create new fresh one.
179 */
180
181 static int
ng_btsocket_hci_raw_node_shutdown(node_p node)182 ng_btsocket_hci_raw_node_shutdown(node_p node)
183 {
184 int error = 0;
185
186 NG_NODE_UNREF(node);
187
188 error = ng_make_node_common(&typestruct, &ng_btsocket_hci_raw_node);
189 if (error != 0) {
190 NG_BTSOCKET_HCI_RAW_ALERT(
191 "%s: Could not create Netgraph node, error=%d\n", __func__, error);
192
193 ng_btsocket_hci_raw_node = NULL;
194
195 return (ENOMEM);
196 }
197
198 error = ng_name_node(ng_btsocket_hci_raw_node,
199 NG_BTSOCKET_HCI_RAW_NODE_TYPE);
200 if (error != 0) {
201 NG_BTSOCKET_HCI_RAW_ALERT(
202 "%s: Could not name Netgraph node, error=%d\n", __func__, error);
203
204 NG_NODE_UNREF(ng_btsocket_hci_raw_node);
205 ng_btsocket_hci_raw_node = NULL;
206
207 return (EINVAL);
208 }
209
210 return (0);
211 } /* ng_btsocket_hci_raw_node_shutdown */
212
213 /*
214 * Create new hook. Just say "yes"
215 */
216
217 static int
ng_btsocket_hci_raw_node_newhook(node_p node,hook_p hook,char const * name)218 ng_btsocket_hci_raw_node_newhook(node_p node, hook_p hook, char const *name)
219 {
220 return (0);
221 } /* ng_btsocket_hci_raw_node_newhook */
222
223 /*
224 * Connect hook. Just say "yes"
225 */
226
227 static int
ng_btsocket_hci_raw_node_connect(hook_p hook)228 ng_btsocket_hci_raw_node_connect(hook_p hook)
229 {
230 return (0);
231 } /* ng_btsocket_hci_raw_node_connect */
232
233 /*
234 * Disconnect hook
235 */
236
237 static int
ng_btsocket_hci_raw_node_disconnect(hook_p hook)238 ng_btsocket_hci_raw_node_disconnect(hook_p hook)
239 {
240 return (0);
241 } /* ng_btsocket_hci_raw_node_disconnect */
242
243 /*
244 * Receive control message.
245 * Make sure it is a message from HCI node and it is a response.
246 * Enqueue item and schedule input task.
247 */
248
249 static int
ng_btsocket_hci_raw_node_rcvmsg(node_p node,item_p item,hook_p lasthook)250 ng_btsocket_hci_raw_node_rcvmsg(node_p node, item_p item, hook_p lasthook)
251 {
252 struct ng_mesg *msg = NGI_MSG(item); /* item still has message */
253 int error = 0;
254
255 /*
256 * Check for empty sockets list creates LOR when both sender and
257 * receiver device are connected to the same host, so remove it
258 * for now
259 */
260
261 if (msg != NULL &&
262 (msg->header.typecookie == NGM_HCI_COOKIE ||
263 msg->header.typecookie == NGM_GENERIC_COOKIE) &&
264 msg->header.flags & NGF_RESP) {
265 if (msg->header.token == 0) {
266 NG_FREE_ITEM(item);
267 return (0);
268 }
269
270 lockmgr(&ng_btsocket_hci_raw_queue_lock, LK_EXCLUSIVE);
271 if (NG_BT_ITEMQ_FULL(&ng_btsocket_hci_raw_queue)) {
272 NG_BTSOCKET_HCI_RAW_ERR(
273 "%s: Input queue is full\n", __func__);
274
275 NG_BT_ITEMQ_DROP(&ng_btsocket_hci_raw_queue);
276 NG_FREE_ITEM(item);
277 error = ENOBUFS;
278 } else {
279 ng_ref_item(item);
280 NG_BT_ITEMQ_ENQUEUE(&ng_btsocket_hci_raw_queue, item);
281 error = ng_btsocket_hci_raw_wakeup_input_task();
282 }
283 lockmgr(&ng_btsocket_hci_raw_queue_lock, LK_RELEASE);
284 } else {
285 NG_FREE_ITEM(item);
286 error = EINVAL;
287 }
288
289 return (error);
290 } /* ng_btsocket_hci_raw_node_rcvmsg */
291
292 /*
293 * Receive packet from the one of our hook.
294 * Prepend every packet with sockaddr_hci and record sender's node name.
295 * Enqueue item and schedule input task.
296 */
297
298 static int
ng_btsocket_hci_raw_node_rcvdata(hook_p hook,item_p item)299 ng_btsocket_hci_raw_node_rcvdata(hook_p hook, item_p item)
300 {
301 struct mbuf *nam = NULL;
302 int error;
303
304 /*
305 * Check for empty sockets list creates LOR when both sender and
306 * receiver device are connected to the same host, so remove it
307 * for now
308 */
309
310 MGET(nam, M_NOWAIT, MT_SONAME);
311 if (nam != NULL) {
312 struct sockaddr_hci *sa = mtod(nam, struct sockaddr_hci *);
313
314 nam->m_len = sizeof(struct sockaddr_hci);
315
316 sa->hci_len = sizeof(*sa);
317 sa->hci_family = AF_BLUETOOTH;
318 strlcpy(sa->hci_node, NG_PEER_NODE_NAME(hook),
319 sizeof(sa->hci_node));
320
321 NGI_GET_M(item, nam->m_next);
322 NGI_M(item) = nam;
323
324 lockmgr(&ng_btsocket_hci_raw_queue_lock, LK_EXCLUSIVE);
325 if (NG_BT_ITEMQ_FULL(&ng_btsocket_hci_raw_queue)) {
326 NG_BTSOCKET_HCI_RAW_ERR(
327 "%s: Input queue is full\n", __func__);
328
329 NG_BT_ITEMQ_DROP(&ng_btsocket_hci_raw_queue);
330 NG_FREE_ITEM(item);
331 error = ENOBUFS;
332 } else {
333 ng_ref_item(item);
334 NG_BT_ITEMQ_ENQUEUE(&ng_btsocket_hci_raw_queue, item);
335 error = ng_btsocket_hci_raw_wakeup_input_task();
336 }
337 lockmgr(&ng_btsocket_hci_raw_queue_lock, LK_RELEASE);
338 } else {
339 NG_BTSOCKET_HCI_RAW_ERR(
340 "%s: Failed to allocate address mbuf\n", __func__);
341
342 NG_FREE_ITEM(item);
343 error = ENOBUFS;
344 }
345
346 return (error);
347 } /* ng_btsocket_hci_raw_node_rcvdata */
348
349 /****************************************************************************
350 ****************************************************************************
351 ** Sockets specific
352 ****************************************************************************
353 ****************************************************************************/
354
355 /*
356 * Get next token. We need token to avoid theoretical race where process
357 * submits ioctl() message then interrupts ioctl() and re-submits another
358 * ioctl() on the same socket *before* first ioctl() complete.
359 */
360
361 static void
ng_btsocket_hci_raw_get_token(u_int32_t * token)362 ng_btsocket_hci_raw_get_token(u_int32_t *token)
363 {
364 lockmgr(&ng_btsocket_hci_raw_token_lock, LK_EXCLUSIVE);
365
366 if (++ ng_btsocket_hci_raw_token == 0)
367 ng_btsocket_hci_raw_token = 1;
368
369 *token = ng_btsocket_hci_raw_token;
370
371 lockmgr(&ng_btsocket_hci_raw_token_lock, LK_RELEASE);
372 } /* ng_btsocket_hci_raw_get_token */
373
374 /*
375 * Send Netgraph message to the node - do not expect reply
376 */
377
378 static int
ng_btsocket_hci_raw_send_ngmsg(char * path,int cmd,void * arg,int arglen)379 ng_btsocket_hci_raw_send_ngmsg(char *path, int cmd, void *arg, int arglen)
380 {
381 struct ng_mesg *msg = NULL;
382 int error = 0;
383
384 NG_MKMESSAGE(msg, NGM_HCI_COOKIE, cmd, arglen, M_WAITOK | M_NULLOK);
385 if (msg == NULL)
386 return (ENOMEM);
387
388 if (arg != NULL && arglen > 0)
389 bcopy(arg, msg->data, arglen);
390
391 NG_SEND_MSG_PATH(error, ng_btsocket_hci_raw_node, msg, path, 0);
392
393 return (error);
394 } /* ng_btsocket_hci_raw_send_ngmsg */
395
396 /*
397 * Send Netgraph message to the node (no data) and wait for reply
398 */
399
400 static int
ng_btsocket_hci_raw_send_sync_ngmsg(ng_btsocket_hci_raw_pcb_p pcb,char * path,int cmd,void * rsp,int rsplen)401 ng_btsocket_hci_raw_send_sync_ngmsg(ng_btsocket_hci_raw_pcb_p pcb, char *path,
402 int cmd, void *rsp, int rsplen)
403 {
404 struct ng_mesg *msg = NULL;
405 int error = 0;
406
407 KKASSERT(lockowned(&pcb->pcb_lock) != 0);
408
409 NG_MKMESSAGE(msg, NGM_HCI_COOKIE, cmd, 0, M_WAITOK | M_NULLOK);
410 if (msg == NULL)
411 return (ENOMEM);
412
413 ng_btsocket_hci_raw_get_token(&msg->header.token);
414 pcb->token = msg->header.token;
415 pcb->msg = NULL;
416
417 NG_SEND_MSG_PATH(error, ng_btsocket_hci_raw_node, msg, path, 0);
418 if (error != 0) {
419 pcb->token = 0;
420 return (error);
421 }
422
423 error = lksleep(&pcb->msg, &pcb->pcb_lock, PCATCH, "hcictl",
424 ng_btsocket_hci_raw_ioctl_timeout * hz);
425 pcb->token = 0;
426
427 if (error != 0)
428 return (error);
429
430 if (pcb->msg != NULL && pcb->msg->header.cmd == cmd)
431 bcopy(pcb->msg->data, rsp, rsplen);
432 else
433 error = EINVAL;
434
435 NG_FREE_MSG(pcb->msg); /* checks for != NULL */
436
437 return (0);
438 } /* ng_btsocket_hci_raw_send_sync_ngmsg */
439
440 /*
441 * Create control information for the packet
442 */
443
444 static void
ng_btsocket_hci_raw_savctl(ng_btsocket_hci_raw_pcb_p pcb,struct mbuf ** ctl,struct mbuf * m)445 ng_btsocket_hci_raw_savctl(ng_btsocket_hci_raw_pcb_p pcb, struct mbuf **ctl,
446 struct mbuf *m)
447 {
448 int dir;
449 struct timeval tv;
450
451 KKASSERT(lockowned(&pcb->pcb_lock) != 0);
452
453 if (pcb->flags & NG_BTSOCKET_HCI_RAW_DIRECTION) {
454 dir = (m->m_flags & M_PROTO1)? 1 : 0;
455 *ctl = sbcreatecontrol(&dir, sizeof(dir),
456 SCM_HCI_RAW_DIRECTION, SOL_HCI_RAW);
457 if (*ctl != NULL)
458 ctl = &((*ctl)->m_next);
459 }
460
461 if (pcb->so->so_options & SO_TIMESTAMP) {
462 microtime(&tv);
463 *ctl = sbcreatecontrol(&tv, sizeof(tv),
464 SCM_TIMESTAMP, SOL_SOCKET);
465 if (*ctl != NULL)
466 ctl = &((*ctl)->m_next);
467 }
468 } /* ng_btsocket_hci_raw_savctl */
469
470 /*
471 * Raw HCI sockets data input routine
472 */
473
474 static void
ng_btsocket_hci_raw_data_input(struct mbuf * nam)475 ng_btsocket_hci_raw_data_input(struct mbuf *nam)
476 {
477 ng_btsocket_hci_raw_pcb_p pcb = NULL;
478 struct mbuf *m0 = NULL, *m = NULL;
479 struct sockaddr_hci *sa = NULL;
480
481 m0 = nam->m_next;
482 nam->m_next = NULL;
483
484 KASSERT((nam->m_type == MT_SONAME),
485 ("%s: m_type=%d\n", __func__, nam->m_type));
486 KASSERT((m0->m_flags & M_PKTHDR),
487 ("%s: m_flags=%#x\n", __func__, m0->m_flags));
488
489 sa = mtod(nam, struct sockaddr_hci *);
490
491 lockmgr(&ng_btsocket_hci_raw_sockets_lock, LK_EXCLUSIVE);
492
493 LIST_FOREACH(pcb, &ng_btsocket_hci_raw_sockets, next) {
494
495 lockmgr(&pcb->pcb_lock, LK_EXCLUSIVE);
496
497 /*
498 * If socket was bound then check address and
499 * make sure it matches.
500 */
501
502 if (pcb->addr.hci_node[0] != 0 &&
503 strcmp(sa->hci_node, pcb->addr.hci_node) != 0)
504 goto next;
505
506 /*
507 * Check packet against filters
508 * XXX do we have to call m_pullup() here?
509 */
510
511 if (ng_btsocket_hci_raw_filter(pcb, m0, 1) != 0)
512 goto next;
513
514 /*
515 * Make a copy of the packet, append to the socket's
516 * receive queue and wakeup socket. sbappendaddr()
517 * will check if socket has enough buffer space.
518 */
519
520 m = m_dup(m0, M_NOWAIT);
521 if (m != NULL) {
522 struct mbuf *ctl = NULL;
523
524 ng_btsocket_hci_raw_savctl(pcb, &ctl, m);
525
526 if (sbappendaddr(&pcb->so->so_rcv.sb,
527 (struct sockaddr *) sa, m, ctl))
528 sorwakeup(pcb->so);
529 else {
530 NG_BTSOCKET_HCI_RAW_INFO(
531 "%s: sbappendaddr() failed\n", __func__);
532
533 NG_FREE_M(m);
534 NG_FREE_M(ctl);
535 }
536 }
537 next:
538 lockmgr(&pcb->pcb_lock, LK_RELEASE);
539 }
540
541 lockmgr(&ng_btsocket_hci_raw_sockets_lock, LK_RELEASE);
542
543 NG_FREE_M(nam);
544 NG_FREE_M(m0);
545 } /* ng_btsocket_hci_raw_data_input */
546
547 /*
548 * Raw HCI sockets message input routine
549 */
550
551 static void
ng_btsocket_hci_raw_msg_input(struct ng_mesg * msg)552 ng_btsocket_hci_raw_msg_input(struct ng_mesg *msg)
553 {
554 ng_btsocket_hci_raw_pcb_p pcb = NULL;
555
556 lockmgr(&ng_btsocket_hci_raw_sockets_lock, LK_EXCLUSIVE);
557
558 LIST_FOREACH(pcb, &ng_btsocket_hci_raw_sockets, next) {
559 lockmgr(&pcb->pcb_lock, LK_EXCLUSIVE);
560
561 if (msg->header.token == pcb->token) {
562 pcb->msg = msg;
563 wakeup(&pcb->msg);
564
565 lockmgr(&pcb->pcb_lock, LK_RELEASE);
566 lockmgr(&ng_btsocket_hci_raw_sockets_lock, LK_RELEASE);
567
568 return;
569 }
570
571 lockmgr(&pcb->pcb_lock, LK_RELEASE);
572 }
573
574 lockmgr(&ng_btsocket_hci_raw_sockets_lock, LK_RELEASE);
575
576 NG_FREE_MSG(msg); /* checks for != NULL */
577 } /* ng_btsocket_hci_raw_msg_input */
578
579 /*
580 * Raw HCI sockets input routines
581 */
582
583 static void
ng_btsocket_hci_raw_input(void * context,int pending)584 ng_btsocket_hci_raw_input(void *context, int pending)
585 {
586 item_p item = NULL;
587
588 for (;;) {
589 lockmgr(&ng_btsocket_hci_raw_queue_lock, LK_EXCLUSIVE);
590 NG_BT_ITEMQ_DEQUEUE(&ng_btsocket_hci_raw_queue, item);
591 lockmgr(&ng_btsocket_hci_raw_queue_lock, LK_RELEASE);
592
593 if (item == NULL)
594 break;
595
596 switch(item->el_flags & NGQF_TYPE) {
597 case NGQF_DATA: {
598 struct mbuf *m = NULL;
599
600 NGI_GET_M(item, m);
601 ng_btsocket_hci_raw_data_input(m);
602 } break;
603
604 case NGQF_MESG: {
605 struct ng_mesg *msg = NULL;
606
607 NGI_GET_MSG(item, msg);
608 ng_btsocket_hci_raw_msg_input(msg);
609 } break;
610
611 default:
612 KASSERT(0,
613 ("%s: invalid item type=%ld\n", __func__, (item->el_flags & NGQF_TYPE)));
614 break;
615 }
616
617 NG_FREE_ITEM(item);
618 ng_unref_item(item, 0);
619 }
620 } /* ng_btsocket_hci_raw_input */
621
622 /*
623 * Raw HCI sockets output routine
624 */
625
626 static void
ng_btsocket_hci_raw_output(node_p node,hook_p hook,void * arg1,int arg2)627 ng_btsocket_hci_raw_output(node_p node, hook_p hook, void *arg1, int arg2)
628 {
629 struct mbuf *nam = (struct mbuf *) arg1, *m = NULL;
630 struct sockaddr_hci *sa = NULL;
631 int error;
632
633 m = nam->m_next;
634 nam->m_next = NULL;
635
636 KASSERT((nam->m_type == MT_SONAME),
637 ("%s: m_type=%d\n", __func__, nam->m_type));
638 KASSERT((m->m_flags & M_PKTHDR),
639 ("%s: m_flags=%#x\n", __func__, m->m_flags));
640
641 sa = mtod(nam, struct sockaddr_hci *);
642
643 /*
644 * Find downstream hook
645 * XXX For now access node hook list directly. Should be safe because
646 * we used ng_send_fn() and we should have exclusive lock on the node.
647 */
648
649 LIST_FOREACH(hook, &node->nd_hooks, hk_hooks) {
650 if (hook == NULL || NG_HOOK_NOT_VALID(hook) ||
651 NG_NODE_NOT_VALID(NG_PEER_NODE(hook)))
652 continue;
653
654 if (strcmp(sa->hci_node, NG_PEER_NODE_NAME(hook)) == 0) {
655 NG_SEND_DATA_ONLY(error, hook, m); /* sets m to NULL */
656 break;
657 }
658 }
659
660 NG_FREE_M(nam); /* check for != NULL */
661 NG_FREE_M(m);
662 } /* ng_btsocket_hci_raw_output */
663
664 /*
665 * Check frame against security and socket filters.
666 * d (direction bit) == 1 means incoming frame.
667 */
668
669 static int
ng_btsocket_hci_raw_filter(ng_btsocket_hci_raw_pcb_p pcb,struct mbuf * m,int d)670 ng_btsocket_hci_raw_filter(ng_btsocket_hci_raw_pcb_p pcb, struct mbuf *m, int d)
671 {
672 int type, event, opcode;
673
674 KKASSERT(lockowned(&pcb->pcb_lock) != 0);
675
676 switch ((type = *mtod(m, u_int8_t *))) {
677 case NG_HCI_CMD_PKT:
678 if (!(pcb->flags & NG_BTSOCKET_HCI_RAW_PRIVILEGED)) {
679 opcode = le16toh(mtod(m, ng_hci_cmd_pkt_t *)->opcode);
680
681 if (!bit_test(
682 ng_btsocket_hci_raw_sec_filter->commands[NG_HCI_OGF(opcode) - 1],
683 NG_HCI_OCF(opcode) - 1))
684 return (EPERM);
685 }
686
687 if (d && !bit_test(pcb->filter.packet_mask, NG_HCI_CMD_PKT - 1))
688 return (EPERM);
689 break;
690
691 case NG_HCI_ACL_DATA_PKT:
692 case NG_HCI_SCO_DATA_PKT:
693 if (!(pcb->flags & NG_BTSOCKET_HCI_RAW_PRIVILEGED) ||
694 !bit_test(pcb->filter.packet_mask, type - 1) ||
695 !d)
696 return (EPERM);
697 break;
698
699 case NG_HCI_EVENT_PKT:
700 if (!d)
701 return (EINVAL);
702
703 event = mtod(m, ng_hci_event_pkt_t *)->event - 1;
704
705 if (!(pcb->flags & NG_BTSOCKET_HCI_RAW_PRIVILEGED))
706 if (!bit_test(ng_btsocket_hci_raw_sec_filter->events, event))
707 return (EPERM);
708
709 if (!bit_test(pcb->filter.event_mask, event))
710 return (EPERM);
711 break;
712
713 default:
714 return (EINVAL);
715 }
716
717 return (0);
718 } /* ng_btsocket_hci_raw_filter */
719
720 /*
721 * Initialize everything
722 */
723
724 void
ng_btsocket_hci_raw_init(void)725 ng_btsocket_hci_raw_init(void)
726 {
727 bitstr_t *f = NULL;
728 int error = 0;
729
730 ng_btsocket_hci_raw_node = NULL;
731 ng_btsocket_hci_raw_debug_level = NG_BTSOCKET_WARN_LEVEL;
732 ng_btsocket_hci_raw_ioctl_timeout = 5;
733
734 /* Register Netgraph node type */
735 error = ng_newtype(&typestruct);
736 if (error != 0) {
737 NG_BTSOCKET_HCI_RAW_ALERT(
738 "%s: Could not register Netgraph node type, error=%d\n", __func__, error);
739
740 return;
741 }
742
743 /* Create Netgrapg node */
744 error = ng_make_node_common(&typestruct, &ng_btsocket_hci_raw_node);
745 if (error != 0) {
746 NG_BTSOCKET_HCI_RAW_ALERT(
747 "%s: Could not create Netgraph node, error=%d\n", __func__, error);
748
749 ng_btsocket_hci_raw_node = NULL;
750
751 return;
752 }
753
754 error = ng_name_node(ng_btsocket_hci_raw_node,
755 NG_BTSOCKET_HCI_RAW_NODE_TYPE);
756 if (error != 0) {
757 NG_BTSOCKET_HCI_RAW_ALERT(
758 "%s: Could not name Netgraph node, error=%d\n", __func__, error);
759
760 NG_NODE_UNREF(ng_btsocket_hci_raw_node);
761 ng_btsocket_hci_raw_node = NULL;
762
763 return;
764 }
765
766 /* Create input queue */
767 NG_BT_ITEMQ_INIT(&ng_btsocket_hci_raw_queue, ifqmaxlen);
768 lockinit(&ng_btsocket_hci_raw_queue_lock,
769 "btsocks_hci_raw_queue_lock", 0, 0);
770 TASK_INIT(&ng_btsocket_hci_raw_task, 0,
771 ng_btsocket_hci_raw_input, NULL);
772
773 /* Create list of sockets */
774 LIST_INIT(&ng_btsocket_hci_raw_sockets);
775 lockinit(&ng_btsocket_hci_raw_sockets_lock,
776 "btsocks_hci_raw_sockets_lock", 0, 0);
777
778 /* Tokens */
779 ng_btsocket_hci_raw_token = 0;
780 lockinit(&ng_btsocket_hci_raw_token_lock,
781 "btsocks_hci_raw_token_lock", 0, 0);
782
783 /*
784 * Security filter
785 * XXX never FREE()ed
786 */
787
788 ng_btsocket_hci_raw_sec_filter = NULL;
789
790 ng_btsocket_hci_raw_sec_filter = kmalloc(sizeof(struct ng_btsocket_hci_raw_sec_filter),
791 M_NETGRAPH_BTSOCKET_HCI_RAW,
792 M_WAITOK | M_NULLOK | M_ZERO);
793 if (ng_btsocket_hci_raw_sec_filter == NULL) {
794 kprintf("%s: Could not allocate security filter!\n", __func__);
795 return;
796 }
797
798 /*
799 * XXX How paranoid can we get?
800 *
801 * Initialize security filter. If bit is set in the mask then
802 * unprivileged socket is allowed to send (receive) this command
803 * (event).
804 */
805
806 /* Enable all events */
807 memset(&ng_btsocket_hci_raw_sec_filter->events, 0xff,
808 sizeof(ng_btsocket_hci_raw_sec_filter->events));
809
810 /* Disable some critical events */
811 f = ng_btsocket_hci_raw_sec_filter->events;
812 bit_clear(f, NG_HCI_EVENT_RETURN_LINK_KEYS - 1);
813 bit_clear(f, NG_HCI_EVENT_LINK_KEY_NOTIFICATION - 1);
814 bit_clear(f, NG_HCI_EVENT_VENDOR - 1);
815
816 /* Commands - Link control */
817 f = ng_btsocket_hci_raw_sec_filter->commands[NG_HCI_OGF_LINK_CONTROL-1];
818 bit_set(f, NG_HCI_OCF_INQUIRY - 1);
819 bit_set(f, NG_HCI_OCF_INQUIRY_CANCEL - 1);
820 bit_set(f, NG_HCI_OCF_PERIODIC_INQUIRY - 1);
821 bit_set(f, NG_HCI_OCF_EXIT_PERIODIC_INQUIRY - 1);
822 bit_set(f, NG_HCI_OCF_REMOTE_NAME_REQ - 1);
823 bit_set(f, NG_HCI_OCF_READ_REMOTE_FEATURES - 1);
824 bit_set(f, NG_HCI_OCF_READ_REMOTE_VER_INFO - 1);
825 bit_set(f, NG_HCI_OCF_READ_CLOCK_OFFSET - 1);
826
827 /* Commands - Link policy */
828 f = ng_btsocket_hci_raw_sec_filter->commands[NG_HCI_OGF_LINK_POLICY-1];
829 bit_set(f, NG_HCI_OCF_ROLE_DISCOVERY - 1);
830 bit_set(f, NG_HCI_OCF_READ_LINK_POLICY_SETTINGS - 1);
831
832 /* Commands - Host controller and baseband */
833 f = ng_btsocket_hci_raw_sec_filter->commands[NG_HCI_OGF_HC_BASEBAND-1];
834 bit_set(f, NG_HCI_OCF_READ_PIN_TYPE - 1);
835 bit_set(f, NG_HCI_OCF_READ_LOCAL_NAME - 1);
836 bit_set(f, NG_HCI_OCF_READ_CON_ACCEPT_TIMO - 1);
837 bit_set(f, NG_HCI_OCF_READ_PAGE_TIMO - 1);
838 bit_set(f, NG_HCI_OCF_READ_SCAN_ENABLE - 1);
839 bit_set(f, NG_HCI_OCF_READ_PAGE_SCAN_ACTIVITY - 1);
840 bit_set(f, NG_HCI_OCF_READ_INQUIRY_SCAN_ACTIVITY - 1);
841 bit_set(f, NG_HCI_OCF_READ_AUTH_ENABLE - 1);
842 bit_set(f, NG_HCI_OCF_READ_ENCRYPTION_MODE - 1);
843 bit_set(f, NG_HCI_OCF_READ_UNIT_CLASS - 1);
844 bit_set(f, NG_HCI_OCF_READ_VOICE_SETTINGS - 1);
845 bit_set(f, NG_HCI_OCF_READ_AUTO_FLUSH_TIMO - 1);
846 bit_set(f, NG_HCI_OCF_READ_NUM_BROADCAST_RETRANS - 1);
847 bit_set(f, NG_HCI_OCF_READ_HOLD_MODE_ACTIVITY - 1);
848 bit_set(f, NG_HCI_OCF_READ_XMIT_LEVEL - 1);
849 bit_set(f, NG_HCI_OCF_READ_SCO_FLOW_CONTROL - 1);
850 bit_set(f, NG_HCI_OCF_READ_LINK_SUPERVISION_TIMO - 1);
851 bit_set(f, NG_HCI_OCF_READ_SUPPORTED_IAC_NUM - 1);
852 bit_set(f, NG_HCI_OCF_READ_IAC_LAP - 1);
853 bit_set(f, NG_HCI_OCF_READ_PAGE_SCAN_PERIOD - 1);
854 bit_set(f, NG_HCI_OCF_READ_PAGE_SCAN - 1);
855
856 /* Commands - Informational */
857 f = ng_btsocket_hci_raw_sec_filter->commands[NG_HCI_OGF_INFO - 1];
858 bit_set(f, NG_HCI_OCF_READ_LOCAL_VER - 1);
859 bit_set(f, NG_HCI_OCF_READ_LOCAL_FEATURES - 1);
860 bit_set(f, NG_HCI_OCF_READ_BUFFER_SIZE - 1);
861 bit_set(f, NG_HCI_OCF_READ_COUNTRY_CODE - 1);
862 bit_set(f, NG_HCI_OCF_READ_BDADDR - 1);
863
864 /* Commands - Status */
865 f = ng_btsocket_hci_raw_sec_filter->commands[NG_HCI_OGF_STATUS - 1];
866 bit_set(f, NG_HCI_OCF_READ_FAILED_CONTACT_CNTR - 1);
867 bit_set(f, NG_HCI_OCF_GET_LINK_QUALITY - 1);
868 bit_set(f, NG_HCI_OCF_READ_RSSI - 1);
869
870 /* Commands - Testing */
871 f = ng_btsocket_hci_raw_sec_filter->commands[NG_HCI_OGF_TESTING - 1];
872 bit_set(f, NG_HCI_OCF_READ_LOOPBACK_MODE - 1);
873 } /* ng_btsocket_hci_raw_init */
874
875 /*
876 * Abort connection on socket
877 */
878
879 void
ng_btsocket_hci_raw_abort(netmsg_t msg)880 ng_btsocket_hci_raw_abort(netmsg_t msg)
881 {
882 } /* ng_btsocket_hci_raw_abort */
883
884 #if 0 /* XXX */
885 void
886 ng_btsocket_hci_raw_close(struct socket *so)
887 {
888 } /* ng_btsocket_hci_raw_close */
889 #endif
890
891 /*
892 * Create new raw HCI socket
893 */
894
895 void
ng_btsocket_hci_raw_attach(netmsg_t msg)896 ng_btsocket_hci_raw_attach(netmsg_t msg)
897 {
898 struct socket *so = msg->attach.base.nm_so;
899 int proto = msg->attach.nm_proto;
900 ng_btsocket_hci_raw_pcb_p pcb = so2hci_raw_pcb(so);
901 int error = 0;
902
903 if (pcb != NULL) {
904 error = EISCONN;
905 goto out;
906 }
907
908 if (ng_btsocket_hci_raw_node == NULL) {
909 error = EPROTONOSUPPORT;
910 goto out;
911 }
912 if (proto != BLUETOOTH_PROTO_HCI) {
913 error = EPROTONOSUPPORT;
914 goto out;
915 }
916 if (so->so_type != SOCK_RAW) {
917 error = ESOCKTNOSUPPORT;
918 goto out;
919 }
920
921 error = soreserve(so, NG_BTSOCKET_HCI_RAW_SENDSPACE,
922 NG_BTSOCKET_HCI_RAW_RECVSPACE, NULL);
923 if (error != 0)
924 goto out;
925
926 pcb = kmalloc(sizeof(*pcb), M_NETGRAPH_BTSOCKET_HCI_RAW,
927 M_WAITOK | M_NULLOK | M_ZERO);
928 if (pcb == NULL) {
929 error = ENOMEM;
930 goto out;
931 }
932
933 so->so_pcb = (caddr_t) pcb;
934 pcb->so = so;
935
936 if (curproc == NULL ||
937 caps_priv_check_self(SYSCAP_NONET_BT_RAW) == 0)
938 pcb->flags |= NG_BTSOCKET_HCI_RAW_PRIVILEGED;
939
940 /*
941 * Set default socket filter. By default socket only accepts HCI
942 * Command_Complete and Command_Status event packets.
943 */
944
945 bit_set(pcb->filter.event_mask, NG_HCI_EVENT_COMMAND_COMPL - 1);
946 bit_set(pcb->filter.event_mask, NG_HCI_EVENT_COMMAND_STATUS - 1);
947
948 lockinit(&pcb->pcb_lock, "btsocks_hci_raw_pcb_lock", 0, 0);
949
950 lockmgr(&ng_btsocket_hci_raw_sockets_lock, LK_EXCLUSIVE);
951 LIST_INSERT_HEAD(&ng_btsocket_hci_raw_sockets, pcb, next);
952 lockmgr(&ng_btsocket_hci_raw_sockets_lock, LK_RELEASE);
953
954 out:
955 lwkt_replymsg(&msg->attach.base.lmsg, error);
956 } /* ng_btsocket_hci_raw_attach */
957
958 /*
959 * Bind raw HCI socket
960 */
961
962 void
ng_btsocket_hci_raw_bind(netmsg_t msg)963 ng_btsocket_hci_raw_bind(netmsg_t msg)
964 {
965 struct socket *so = msg->bind.base.nm_so;
966 struct sockaddr *nam = msg->bind.nm_nam;
967 ng_btsocket_hci_raw_pcb_p pcb = so2hci_raw_pcb(so);
968 struct sockaddr_hci *sa = (struct sockaddr_hci *) nam;
969 int error = 0;
970
971 if (pcb == NULL) {
972 error = EINVAL;
973 goto out;
974 }
975 if (ng_btsocket_hci_raw_node == NULL) {
976 error = EINVAL;
977 goto out;
978 }
979
980 if (sa == NULL) {
981 error = EINVAL;
982 goto out;
983 }
984 if (sa->hci_family != AF_BLUETOOTH) {
985 error = EAFNOSUPPORT;
986 goto out;
987 }
988 if (sa->hci_len != sizeof(*sa)) {
989 error = EINVAL;
990 goto out;
991 }
992 if (sa->hci_node[0] == 0) {
993 error = EINVAL;
994 goto out;
995 }
996
997 lockmgr(&pcb->pcb_lock, LK_EXCLUSIVE);
998 bcopy(sa, &pcb->addr, sizeof(pcb->addr));
999 lockmgr(&pcb->pcb_lock, LK_RELEASE);
1000
1001 out:
1002 lwkt_replymsg(&msg->bind.base.lmsg, error);
1003 } /* ng_btsocket_hci_raw_bind */
1004
1005 /*
1006 * Connect raw HCI socket
1007 */
1008
1009 void
ng_btsocket_hci_raw_connect(netmsg_t msg)1010 ng_btsocket_hci_raw_connect(netmsg_t msg)
1011 {
1012 struct socket *so = msg->connect.base.nm_so;
1013 struct sockaddr *nam = msg->connect.nm_nam;
1014 ng_btsocket_hci_raw_pcb_p pcb = so2hci_raw_pcb(so);
1015 struct sockaddr_hci *sa = (struct sockaddr_hci *) nam;
1016 int error = 0;
1017
1018 if (pcb == NULL) {
1019 error = EINVAL;
1020 goto out;
1021 }
1022 if (ng_btsocket_hci_raw_node == NULL) {
1023 error = EINVAL;
1024 goto out;
1025 }
1026
1027 if (sa == NULL) {
1028 error = EINVAL;
1029 goto out;
1030 }
1031 if (sa->hci_family != AF_BLUETOOTH) {
1032 error = EAFNOSUPPORT;
1033 goto out;
1034 }
1035 if (sa->hci_len != sizeof(*sa)) {
1036 error = EINVAL;
1037 goto out;
1038 }
1039 if (sa->hci_node[0] == 0) {
1040 error = EDESTADDRREQ;
1041 goto out;
1042 }
1043
1044 lockmgr(&pcb->pcb_lock, LK_EXCLUSIVE);
1045
1046 if (bcmp(sa, &pcb->addr, sizeof(pcb->addr)) != 0) {
1047 lockmgr(&pcb->pcb_lock, LK_RELEASE);
1048 error = EADDRNOTAVAIL;
1049 goto out;
1050 }
1051
1052 soisconnected(so);
1053
1054 lockmgr(&pcb->pcb_lock, LK_RELEASE);
1055
1056 out:
1057 lwkt_replymsg(&msg->connect.base.lmsg, error);
1058 } /* ng_btsocket_hci_raw_connect */
1059
1060 /*
1061 * Process ioctl on socket
1062 */
1063
1064 void
ng_btsocket_hci_raw_control(netmsg_t msg)1065 ng_btsocket_hci_raw_control(netmsg_t msg)
1066 {
1067 struct socket *so = msg->control.base.nm_so;
1068 u_long cmd = msg->control.nm_cmd;
1069 caddr_t data = msg->control.nm_data;
1070 ng_btsocket_hci_raw_pcb_p pcb = so2hci_raw_pcb(so);
1071 char path[NG_NODESIZ + 1];
1072 struct ng_mesg *ngmsg = NULL;
1073 int error = 0;
1074
1075 if (pcb == NULL) {
1076 error = EINVAL;
1077 goto out;
1078 }
1079 if (ng_btsocket_hci_raw_node == NULL) {
1080 error = EINVAL;
1081 goto out;
1082 }
1083
1084 lockmgr(&pcb->pcb_lock, LK_EXCLUSIVE);
1085
1086 /* Check if we have device name */
1087 if (pcb->addr.hci_node[0] == 0) {
1088 lockmgr(&pcb->pcb_lock, LK_RELEASE);
1089 error = EHOSTUNREACH;
1090 goto out;
1091 }
1092
1093 /* Check if we have pending ioctl() */
1094 if (pcb->token != 0) {
1095 lockmgr(&pcb->pcb_lock, LK_RELEASE);
1096 error = EBUSY;
1097 goto out;
1098 }
1099
1100 ksnprintf(path, sizeof(path), "%s:", pcb->addr.hci_node);
1101
1102 switch (cmd) {
1103 case SIOC_HCI_RAW_NODE_GET_STATE: {
1104 struct ng_btsocket_hci_raw_node_state *p =
1105 (struct ng_btsocket_hci_raw_node_state *) data;
1106
1107 error = ng_btsocket_hci_raw_send_sync_ngmsg(pcb, path,
1108 NGM_HCI_NODE_GET_STATE,
1109 &p->state, sizeof(p->state));
1110 } break;
1111
1112 case SIOC_HCI_RAW_NODE_INIT:
1113 if (pcb->flags & NG_BTSOCKET_HCI_RAW_PRIVILEGED)
1114 error = ng_btsocket_hci_raw_send_ngmsg(path,
1115 NGM_HCI_NODE_INIT, NULL, 0);
1116 else
1117 error = EPERM;
1118 break;
1119
1120 case SIOC_HCI_RAW_NODE_GET_DEBUG: {
1121 struct ng_btsocket_hci_raw_node_debug *p =
1122 (struct ng_btsocket_hci_raw_node_debug *) data;
1123
1124 error = ng_btsocket_hci_raw_send_sync_ngmsg(pcb, path,
1125 NGM_HCI_NODE_GET_DEBUG,
1126 &p->debug, sizeof(p->debug));
1127 } break;
1128
1129 case SIOC_HCI_RAW_NODE_SET_DEBUG: {
1130 struct ng_btsocket_hci_raw_node_debug *p =
1131 (struct ng_btsocket_hci_raw_node_debug *) data;
1132
1133 if (pcb->flags & NG_BTSOCKET_HCI_RAW_PRIVILEGED)
1134 error = ng_btsocket_hci_raw_send_ngmsg(path,
1135 NGM_HCI_NODE_SET_DEBUG, &p->debug,
1136 sizeof(p->debug));
1137 else
1138 error = EPERM;
1139 } break;
1140
1141 case SIOC_HCI_RAW_NODE_GET_BUFFER: {
1142 struct ng_btsocket_hci_raw_node_buffer *p =
1143 (struct ng_btsocket_hci_raw_node_buffer *) data;
1144
1145 error = ng_btsocket_hci_raw_send_sync_ngmsg(pcb, path,
1146 NGM_HCI_NODE_GET_BUFFER,
1147 &p->buffer, sizeof(p->buffer));
1148 } break;
1149
1150 case SIOC_HCI_RAW_NODE_GET_BDADDR: {
1151 struct ng_btsocket_hci_raw_node_bdaddr *p =
1152 (struct ng_btsocket_hci_raw_node_bdaddr *) data;
1153
1154 error = ng_btsocket_hci_raw_send_sync_ngmsg(pcb, path,
1155 NGM_HCI_NODE_GET_BDADDR,
1156 &p->bdaddr, sizeof(p->bdaddr));
1157 } break;
1158
1159 case SIOC_HCI_RAW_NODE_GET_FEATURES: {
1160 struct ng_btsocket_hci_raw_node_features *p =
1161 (struct ng_btsocket_hci_raw_node_features *) data;
1162
1163 error = ng_btsocket_hci_raw_send_sync_ngmsg(pcb, path,
1164 NGM_HCI_NODE_GET_FEATURES,
1165 &p->features, sizeof(p->features));
1166 } break;
1167
1168 case SIOC_HCI_RAW_NODE_GET_STAT: {
1169 struct ng_btsocket_hci_raw_node_stat *p =
1170 (struct ng_btsocket_hci_raw_node_stat *) data;
1171
1172 error = ng_btsocket_hci_raw_send_sync_ngmsg(pcb, path,
1173 NGM_HCI_NODE_GET_STAT,
1174 &p->stat, sizeof(p->stat));
1175 } break;
1176
1177 case SIOC_HCI_RAW_NODE_RESET_STAT:
1178 if (pcb->flags & NG_BTSOCKET_HCI_RAW_PRIVILEGED)
1179 error = ng_btsocket_hci_raw_send_ngmsg(path,
1180 NGM_HCI_NODE_RESET_STAT, NULL, 0);
1181 else
1182 error = EPERM;
1183 break;
1184
1185 case SIOC_HCI_RAW_NODE_FLUSH_NEIGHBOR_CACHE:
1186 if (pcb->flags & NG_BTSOCKET_HCI_RAW_PRIVILEGED)
1187 error = ng_btsocket_hci_raw_send_ngmsg(path,
1188 NGM_HCI_NODE_FLUSH_NEIGHBOR_CACHE,
1189 NULL, 0);
1190 else
1191 error = EPERM;
1192 break;
1193
1194 case SIOC_HCI_RAW_NODE_GET_NEIGHBOR_CACHE: {
1195 struct ng_btsocket_hci_raw_node_neighbor_cache *p =
1196 (struct ng_btsocket_hci_raw_node_neighbor_cache *) data;
1197 ng_hci_node_get_neighbor_cache_ep *p1 = NULL;
1198 ng_hci_node_neighbor_cache_entry_ep *p2 = NULL;
1199
1200 if (p->num_entries <= 0 ||
1201 p->num_entries > NG_HCI_MAX_NEIGHBOR_NUM ||
1202 p->entries == NULL) {
1203 error = EINVAL;
1204 break;
1205 }
1206
1207 NG_MKMESSAGE(ngmsg, NGM_HCI_COOKIE,
1208 NGM_HCI_NODE_GET_NEIGHBOR_CACHE, 0, M_WAITOK | M_NULLOK);
1209 if (ngmsg == NULL) {
1210 error = ENOMEM;
1211 break;
1212 }
1213 ng_btsocket_hci_raw_get_token(&ngmsg->header.token);
1214 pcb->token = ngmsg->header.token;
1215 pcb->msg = NULL;
1216
1217 NG_SEND_MSG_PATH(error, ng_btsocket_hci_raw_node, ngmsg, path, 0);
1218 if (error != 0) {
1219 pcb->token = 0;
1220 break;
1221 }
1222
1223 error = lksleep(&pcb->msg, &pcb->pcb_lock,
1224 PCATCH, "hcictl",
1225 ng_btsocket_hci_raw_ioctl_timeout * hz);
1226 pcb->token = 0;
1227
1228 if (error != 0)
1229 break;
1230
1231 if (pcb->msg != NULL &&
1232 pcb->msg->header.cmd == NGM_HCI_NODE_GET_NEIGHBOR_CACHE) {
1233 /* Return data back to user space */
1234 p1 = (ng_hci_node_get_neighbor_cache_ep *)
1235 (pcb->msg->data);
1236 p2 = (ng_hci_node_neighbor_cache_entry_ep *)
1237 (p1 + 1);
1238
1239 p->num_entries = min(p->num_entries, p1->num_entries);
1240 if (p->num_entries > 0)
1241 error = copyout((caddr_t) p2,
1242 (caddr_t) p->entries,
1243 p->num_entries * sizeof(*p2));
1244 } else
1245 error = EINVAL;
1246
1247 NG_FREE_MSG(pcb->msg); /* checks for != NULL */
1248 }break;
1249
1250 case SIOC_HCI_RAW_NODE_GET_CON_LIST: {
1251 struct ng_btsocket_hci_raw_con_list *p =
1252 (struct ng_btsocket_hci_raw_con_list *) data;
1253 ng_hci_node_con_list_ep *p1 = NULL;
1254 ng_hci_node_con_ep *p2 = NULL;
1255
1256 if (p->num_connections == 0 ||
1257 p->num_connections > NG_HCI_MAX_CON_NUM ||
1258 p->connections == NULL) {
1259 error = EINVAL;
1260 break;
1261 }
1262
1263 NG_MKMESSAGE(ngmsg, NGM_HCI_COOKIE, NGM_HCI_NODE_GET_CON_LIST,
1264 0, M_WAITOK | M_NULLOK);
1265 if (ngmsg == NULL) {
1266 error = ENOMEM;
1267 break;
1268 }
1269 ng_btsocket_hci_raw_get_token(&ngmsg->header.token);
1270 pcb->token = ngmsg->header.token;
1271 pcb->msg = NULL;
1272
1273 NG_SEND_MSG_PATH(error, ng_btsocket_hci_raw_node, ngmsg, path, 0);
1274 if (error != 0) {
1275 pcb->token = 0;
1276 break;
1277 }
1278
1279 error = lksleep(&pcb->msg, &pcb->pcb_lock,
1280 PCATCH, "hcictl",
1281 ng_btsocket_hci_raw_ioctl_timeout * hz);
1282 pcb->token = 0;
1283
1284 if (error != 0)
1285 break;
1286
1287 if (pcb->msg != NULL &&
1288 pcb->msg->header.cmd == NGM_HCI_NODE_GET_CON_LIST) {
1289 /* Return data back to user space */
1290 p1 = (ng_hci_node_con_list_ep *)(pcb->msg->data);
1291 p2 = (ng_hci_node_con_ep *)(p1 + 1);
1292
1293 p->num_connections = min(p->num_connections,
1294 p1->num_connections);
1295 if (p->num_connections > 0)
1296 error = copyout((caddr_t) p2,
1297 (caddr_t) p->connections,
1298 p->num_connections * sizeof(*p2));
1299 } else
1300 error = EINVAL;
1301
1302 NG_FREE_MSG(pcb->msg); /* checks for != NULL */
1303 } break;
1304
1305 case SIOC_HCI_RAW_NODE_GET_LINK_POLICY_MASK: {
1306 struct ng_btsocket_hci_raw_node_link_policy_mask *p =
1307 (struct ng_btsocket_hci_raw_node_link_policy_mask *)
1308 data;
1309
1310 error = ng_btsocket_hci_raw_send_sync_ngmsg(pcb, path,
1311 NGM_HCI_NODE_GET_LINK_POLICY_SETTINGS_MASK,
1312 &p->policy_mask, sizeof(p->policy_mask));
1313 } break;
1314
1315 case SIOC_HCI_RAW_NODE_SET_LINK_POLICY_MASK: {
1316 struct ng_btsocket_hci_raw_node_link_policy_mask *p =
1317 (struct ng_btsocket_hci_raw_node_link_policy_mask *)
1318 data;
1319
1320 if (pcb->flags & NG_BTSOCKET_HCI_RAW_PRIVILEGED)
1321 error = ng_btsocket_hci_raw_send_ngmsg(path,
1322 NGM_HCI_NODE_SET_LINK_POLICY_SETTINGS_MASK,
1323 &p->policy_mask,
1324 sizeof(p->policy_mask));
1325 else
1326 error = EPERM;
1327 } break;
1328
1329 case SIOC_HCI_RAW_NODE_GET_PACKET_MASK: {
1330 struct ng_btsocket_hci_raw_node_packet_mask *p =
1331 (struct ng_btsocket_hci_raw_node_packet_mask *) data;
1332
1333 error = ng_btsocket_hci_raw_send_sync_ngmsg(pcb, path,
1334 NGM_HCI_NODE_GET_PACKET_MASK,
1335 &p->packet_mask, sizeof(p->packet_mask));
1336 } break;
1337
1338 case SIOC_HCI_RAW_NODE_SET_PACKET_MASK: {
1339 struct ng_btsocket_hci_raw_node_packet_mask *p =
1340 (struct ng_btsocket_hci_raw_node_packet_mask *) data;
1341
1342 if (pcb->flags & NG_BTSOCKET_HCI_RAW_PRIVILEGED)
1343 error = ng_btsocket_hci_raw_send_ngmsg(path,
1344 NGM_HCI_NODE_SET_PACKET_MASK,
1345 &p->packet_mask,
1346 sizeof(p->packet_mask));
1347 else
1348 error = EPERM;
1349 } break;
1350
1351 case SIOC_HCI_RAW_NODE_GET_ROLE_SWITCH: {
1352 struct ng_btsocket_hci_raw_node_role_switch *p =
1353 (struct ng_btsocket_hci_raw_node_role_switch *) data;
1354
1355 error = ng_btsocket_hci_raw_send_sync_ngmsg(pcb, path,
1356 NGM_HCI_NODE_GET_ROLE_SWITCH,
1357 &p->role_switch, sizeof(p->role_switch));
1358 } break;
1359
1360 case SIOC_HCI_RAW_NODE_SET_ROLE_SWITCH: {
1361 struct ng_btsocket_hci_raw_node_role_switch *p =
1362 (struct ng_btsocket_hci_raw_node_role_switch *) data;
1363
1364 if (pcb->flags & NG_BTSOCKET_HCI_RAW_PRIVILEGED)
1365 error = ng_btsocket_hci_raw_send_ngmsg(path,
1366 NGM_HCI_NODE_SET_ROLE_SWITCH,
1367 &p->role_switch,
1368 sizeof(p->role_switch));
1369 else
1370 error = EPERM;
1371 } break;
1372
1373 case SIOC_HCI_RAW_NODE_LIST_NAMES: {
1374 struct ng_btsocket_hci_raw_node_list_names *nl =
1375 (struct ng_btsocket_hci_raw_node_list_names *) data;
1376 struct nodeinfo *ni = nl->names;
1377
1378 if (nl->num_names == 0) {
1379 error = EINVAL;
1380 break;
1381 }
1382
1383 NG_MKMESSAGE(ngmsg, NGM_GENERIC_COOKIE, NGM_LISTNAMES,
1384 0, M_WAITOK | M_NULLOK);
1385 if (ngmsg == NULL) {
1386 error = ENOMEM;
1387 break;
1388 }
1389 ng_btsocket_hci_raw_get_token(&ngmsg->header.token);
1390 pcb->token = ngmsg->header.token;
1391 pcb->msg = NULL;
1392
1393 NG_SEND_MSG_PATH(error, ng_btsocket_hci_raw_node, ngmsg, ".:", 0);
1394 if (error != 0) {
1395 pcb->token = 0;
1396 break;
1397 }
1398
1399 error = lksleep(&pcb->msg, &pcb->pcb_lock,
1400 PCATCH, "hcictl",
1401 ng_btsocket_hci_raw_ioctl_timeout * hz);
1402 pcb->token = 0;
1403
1404 if (error != 0)
1405 break;
1406
1407 if (pcb->msg != NULL && pcb->msg->header.cmd == NGM_LISTNAMES) {
1408 /* Return data back to user space */
1409 struct namelist *nl1 = (struct namelist *) pcb->msg->data;
1410 struct nodeinfo *ni1 = &nl1->nodeinfo[0];
1411
1412 while (nl->num_names > 0 && nl1->numnames > 0) {
1413 if (strcmp(ni1->type, NG_HCI_NODE_TYPE) == 0) {
1414 error = copyout((caddr_t) ni1,
1415 (caddr_t) ni,
1416 sizeof(*ni));
1417 if (error != 0)
1418 break;
1419
1420 nl->num_names --;
1421 ni ++;
1422 }
1423
1424 nl1->numnames --;
1425 ni1 ++;
1426 }
1427
1428 nl->num_names = ni - nl->names;
1429 } else
1430 error = EINVAL;
1431
1432 NG_FREE_MSG(pcb->msg); /* checks for != NULL */
1433 } break;
1434
1435 default:
1436 error = EINVAL;
1437 break;
1438 }
1439
1440 lockmgr(&pcb->pcb_lock, LK_RELEASE);
1441
1442 out:
1443 lwkt_replymsg(&msg->control.base.lmsg, error);
1444 } /* ng_btsocket_hci_raw_control */
1445
1446 /*
1447 * Process getsockopt/setsockopt system calls
1448 */
1449
1450 void
ng_btsocket_hci_raw_ctloutput(netmsg_t msg)1451 ng_btsocket_hci_raw_ctloutput(netmsg_t msg)
1452 {
1453 struct socket *so = msg->ctloutput.base.nm_so;
1454 struct sockopt *sopt = msg->ctloutput.nm_sopt;
1455 ng_btsocket_hci_raw_pcb_p pcb = so2hci_raw_pcb(so);
1456 struct ng_btsocket_hci_raw_filter filter;
1457 int error = 0, dir;
1458
1459 if (pcb == NULL) {
1460 error = EINVAL;
1461 goto out;
1462 }
1463 if (ng_btsocket_hci_raw_node == NULL) {
1464 error = EINVAL;
1465 goto out;
1466 }
1467
1468 if (sopt->sopt_level != SOL_HCI_RAW)
1469 goto out;
1470
1471 lockmgr(&pcb->pcb_lock, LK_EXCLUSIVE);
1472
1473 switch (sopt->sopt_dir) {
1474 case SOPT_GET:
1475 switch (sopt->sopt_name) {
1476 case SO_HCI_RAW_FILTER:
1477 error = sooptcopyout(sopt, &pcb->filter,
1478 sizeof(pcb->filter));
1479 break;
1480
1481 case SO_HCI_RAW_DIRECTION:
1482 dir = (pcb->flags & NG_BTSOCKET_HCI_RAW_DIRECTION)?1:0;
1483 error = sooptcopyout(sopt, &dir, sizeof(dir));
1484 break;
1485
1486 default:
1487 error = EINVAL;
1488 break;
1489 }
1490 break;
1491
1492 case SOPT_SET:
1493 switch (sopt->sopt_name) {
1494 case SO_HCI_RAW_FILTER:
1495 error = sooptcopyin(sopt, &filter, sizeof(filter),
1496 sizeof(filter));
1497 if (error == 0)
1498 bcopy(&filter, &pcb->filter,
1499 sizeof(pcb->filter));
1500 break;
1501
1502 case SO_HCI_RAW_DIRECTION:
1503 error = sooptcopyin(sopt, &dir, sizeof(dir),
1504 sizeof(dir));
1505 if (error != 0)
1506 break;
1507
1508 if (dir)
1509 pcb->flags |= NG_BTSOCKET_HCI_RAW_DIRECTION;
1510 else
1511 pcb->flags &= ~NG_BTSOCKET_HCI_RAW_DIRECTION;
1512 break;
1513
1514 default:
1515 error = EINVAL;
1516 break;
1517 }
1518 break;
1519
1520 default:
1521 error = EINVAL;
1522 break;
1523 }
1524
1525 lockmgr(&pcb->pcb_lock, LK_RELEASE);
1526
1527 out:
1528 lwkt_replymsg(&msg->ctloutput.base.lmsg, error);
1529 } /* ng_btsocket_hci_raw_ctloutput */
1530
1531 /*
1532 * Detach raw HCI socket
1533 */
1534
1535 void
ng_btsocket_hci_raw_detach(netmsg_t msg)1536 ng_btsocket_hci_raw_detach(netmsg_t msg)
1537 {
1538 struct socket *so = msg->detach.base.nm_so;
1539 ng_btsocket_hci_raw_pcb_p pcb = so2hci_raw_pcb(so);
1540 int error = 0;
1541
1542 KASSERT(pcb != NULL, ("ng_btsocket_hci_raw_detach: pcb == NULL"));
1543
1544 if (ng_btsocket_hci_raw_node == NULL)
1545 goto out;
1546
1547 lockmgr(&ng_btsocket_hci_raw_sockets_lock, LK_EXCLUSIVE);
1548 lockmgr(&pcb->pcb_lock, LK_EXCLUSIVE);
1549
1550 LIST_REMOVE(pcb, next);
1551
1552 lockmgr(&pcb->pcb_lock, LK_RELEASE);
1553 lockmgr(&ng_btsocket_hci_raw_sockets_lock, LK_RELEASE);
1554
1555 lockuninit(&pcb->pcb_lock);
1556
1557 bzero(pcb, sizeof(*pcb));
1558 kfree(pcb, M_NETGRAPH_BTSOCKET_HCI_RAW);
1559
1560 so->so_pcb = NULL;
1561
1562 out:
1563 lwkt_replymsg(&msg->detach.base.lmsg, error);
1564 } /* ng_btsocket_hci_raw_detach */
1565
1566 /*
1567 * Disconnect raw HCI socket
1568 */
1569
1570 void
ng_btsocket_hci_raw_disconnect(netmsg_t msg)1571 ng_btsocket_hci_raw_disconnect(netmsg_t msg)
1572 {
1573 struct socket *so = msg->disconnect.base.nm_so;
1574 ng_btsocket_hci_raw_pcb_p pcb = so2hci_raw_pcb(so);
1575 int error = 0;
1576
1577 if (pcb == NULL) {
1578 error = EINVAL;
1579 goto out;
1580 }
1581 if (ng_btsocket_hci_raw_node == NULL) {
1582 error = EINVAL;
1583 goto out;
1584 }
1585
1586 lockmgr(&pcb->pcb_lock, LK_EXCLUSIVE);
1587 soisdisconnected(so);
1588 lockmgr(&pcb->pcb_lock, LK_RELEASE);
1589
1590 out:
1591 lwkt_replymsg(&msg->disconnect.base.lmsg, error);
1592 } /* ng_btsocket_hci_raw_disconnect */
1593
1594 /*
1595 * Get socket peer's address
1596 */
1597
1598 void
ng_btsocket_hci_raw_peeraddr(netmsg_t msg)1599 ng_btsocket_hci_raw_peeraddr(netmsg_t msg)
1600 {
1601 return (ng_btsocket_hci_raw_sockaddr(msg));
1602 } /* ng_btsocket_hci_raw_peeraddr */
1603
1604 /*
1605 * Send data
1606 */
1607
1608 void
ng_btsocket_hci_raw_send(netmsg_t msg)1609 ng_btsocket_hci_raw_send(netmsg_t msg)
1610 {
1611 struct socket *so = msg->send.base.nm_so;
1612 struct mbuf *control = msg->send.nm_control;
1613 struct mbuf *m = msg->send.nm_m;
1614 struct sockaddr *sa = msg->send.nm_addr;
1615 ng_btsocket_hci_raw_pcb_p pcb = so2hci_raw_pcb(so);
1616 struct mbuf *nam = NULL;
1617 int error = 0;
1618
1619 if (ng_btsocket_hci_raw_node == NULL) {
1620 error = ENETDOWN;
1621 goto drop;
1622 }
1623 if (pcb == NULL) {
1624 error = EINVAL;
1625 goto drop;
1626 }
1627 if (control != NULL) {
1628 error = EINVAL;
1629 goto drop;
1630 }
1631
1632 if (m->m_pkthdr.len < sizeof(ng_hci_cmd_pkt_t) ||
1633 m->m_pkthdr.len > sizeof(ng_hci_cmd_pkt_t) + NG_HCI_CMD_PKT_SIZE) {
1634 error = EMSGSIZE;
1635 goto drop;
1636 }
1637
1638 if (m->m_len < sizeof(ng_hci_cmd_pkt_t)) {
1639 if ((m = m_pullup(m, sizeof(ng_hci_cmd_pkt_t))) == NULL) {
1640 error = ENOBUFS;
1641 goto drop;
1642 }
1643 }
1644 if (*mtod(m, u_int8_t *) != NG_HCI_CMD_PKT) {
1645 error = ENOTSUP;
1646 goto drop;
1647 }
1648
1649 lockmgr(&pcb->pcb_lock, LK_EXCLUSIVE);
1650
1651 error = ng_btsocket_hci_raw_filter(pcb, m, 0);
1652 if (error != 0) {
1653 lockmgr(&pcb->pcb_lock, LK_RELEASE);
1654 goto drop;
1655 }
1656
1657 if (sa == NULL) {
1658 if (pcb->addr.hci_node[0] == 0) {
1659 lockmgr(&pcb->pcb_lock, LK_RELEASE);
1660 error = EDESTADDRREQ;
1661 goto drop;
1662 }
1663
1664 sa = (struct sockaddr *) &pcb->addr;
1665 }
1666
1667 MGET(nam, M_NOWAIT, MT_SONAME);
1668 if (nam == NULL) {
1669 lockmgr(&pcb->pcb_lock, LK_RELEASE);
1670 error = ENOBUFS;
1671 goto drop;
1672 }
1673
1674 nam->m_len = sizeof(struct sockaddr_hci);
1675 bcopy(sa,mtod(nam, struct sockaddr_hci *),sizeof(struct sockaddr_hci));
1676
1677 nam->m_next = m;
1678 m = NULL;
1679
1680 lockmgr(&pcb->pcb_lock, LK_RELEASE);
1681
1682 error = ng_send_fn(ng_btsocket_hci_raw_node, NULL,
1683 ng_btsocket_hci_raw_output, nam, 0);
1684 goto out;
1685
1686 drop:
1687 NG_FREE_M(control); /* NG_FREE_M checks for != NULL */
1688 NG_FREE_M(nam);
1689 NG_FREE_M(m);
1690
1691 out:
1692 lwkt_replymsg(&msg->send.base.lmsg, error);
1693 } /* ng_btsocket_hci_raw_send */
1694
1695 /*
1696 * Get socket address
1697 */
1698
1699 void
ng_btsocket_hci_raw_sockaddr(netmsg_t msg)1700 ng_btsocket_hci_raw_sockaddr(netmsg_t msg)
1701 {
1702 struct socket *so = msg->sockaddr.base.nm_so;
1703 struct sockaddr **nam = msg->sockaddr.nm_nam;
1704 ng_btsocket_hci_raw_pcb_p pcb = so2hci_raw_pcb(so);
1705 struct sockaddr_hci sa;
1706 int error = 0;
1707
1708 if (pcb == NULL) {
1709 error = EINVAL;
1710 goto out;
1711 }
1712 if (ng_btsocket_hci_raw_node == NULL) {
1713 error = EINVAL;
1714 goto out;
1715 }
1716
1717 bzero(&sa, sizeof(sa));
1718 sa.hci_len = sizeof(sa);
1719 sa.hci_family = AF_BLUETOOTH;
1720
1721 lockmgr(&pcb->pcb_lock, LK_EXCLUSIVE);
1722 strlcpy(sa.hci_node, pcb->addr.hci_node, sizeof(sa.hci_node));
1723 lockmgr(&pcb->pcb_lock, LK_RELEASE);
1724
1725 *nam = dup_sockaddr((struct sockaddr *) &sa);
1726
1727 if (*nam == NULL)
1728 error = ENOMEM;
1729
1730 out:
1731 lwkt_replymsg(&msg->sockaddr.base.lmsg, error);
1732 } /* ng_btsocket_hci_raw_sockaddr */
1733
1734