dcdaa4be7847cfe0230990d2c74daa0fe7ab9b8b
[pandora-kernel.git] / net / bluetooth / hci_conn.c
1 /*
2    BlueZ - Bluetooth protocol stack for Linux
3    Copyright (C) 2000-2001 Qualcomm Incorporated
4
5    Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
6
7    This program is free software; you can redistribute it and/or modify
8    it under the terms of the GNU General Public License version 2 as
9    published by the Free Software Foundation;
10
11    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
12    OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
13    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
14    IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
15    CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
16    WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
17    ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
18    OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
19
20    ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
21    COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
22    SOFTWARE IS DISCLAIMED.
23 */
24
25 /* Bluetooth HCI connection handling. */
26
27 #include <linux/module.h>
28
29 #include <linux/types.h>
30 #include <linux/errno.h>
31 #include <linux/kernel.h>
32 #include <linux/slab.h>
33 #include <linux/poll.h>
34 #include <linux/fcntl.h>
35 #include <linux/init.h>
36 #include <linux/skbuff.h>
37 #include <linux/interrupt.h>
38 #include <linux/notifier.h>
39 #include <net/sock.h>
40
41 #include <asm/system.h>
42 #include <asm/uaccess.h>
43 #include <asm/unaligned.h>
44
45 #include <net/bluetooth/bluetooth.h>
46 #include <net/bluetooth/hci_core.h>
47
48 void hci_acl_connect(struct hci_conn *conn)
49 {
50         struct hci_dev *hdev = conn->hdev;
51         struct inquiry_entry *ie;
52         struct hci_cp_create_conn cp;
53
54         BT_DBG("%p", conn);
55
56         conn->state = BT_CONNECT;
57         conn->out = 1;
58
59         conn->link_mode = HCI_LM_MASTER;
60
61         conn->attempt++;
62
63         conn->link_policy = hdev->link_policy;
64
65         memset(&cp, 0, sizeof(cp));
66         bacpy(&cp.bdaddr, &conn->dst);
67         cp.pscan_rep_mode = 0x02;
68
69         if ((ie = hci_inquiry_cache_lookup(hdev, &conn->dst))) {
70                 if (inquiry_entry_age(ie) <= INQUIRY_ENTRY_AGE_MAX) {
71                         cp.pscan_rep_mode = ie->data.pscan_rep_mode;
72                         cp.pscan_mode     = ie->data.pscan_mode;
73                         cp.clock_offset   = ie->data.clock_offset |
74                                                         cpu_to_le16(0x8000);
75                 }
76
77                 memcpy(conn->dev_class, ie->data.dev_class, 3);
78                 conn->ssp_mode = ie->data.ssp_mode;
79         }
80
81         cp.pkt_type = cpu_to_le16(conn->pkt_type);
82         if (lmp_rswitch_capable(hdev) && !(hdev->link_mode & HCI_LM_MASTER))
83                 cp.role_switch = 0x01;
84         else
85                 cp.role_switch = 0x00;
86
87         hci_send_cmd(hdev, HCI_OP_CREATE_CONN, sizeof(cp), &cp);
88 }
89
90 static void hci_acl_connect_cancel(struct hci_conn *conn)
91 {
92         struct hci_cp_create_conn_cancel cp;
93
94         BT_DBG("%p", conn);
95
96         if (conn->hdev->hci_ver < 2)
97                 return;
98
99         bacpy(&cp.bdaddr, &conn->dst);
100         hci_send_cmd(conn->hdev, HCI_OP_CREATE_CONN_CANCEL, sizeof(cp), &cp);
101 }
102
103 void hci_acl_disconn(struct hci_conn *conn, __u8 reason)
104 {
105         struct hci_cp_disconnect cp;
106
107         BT_DBG("%p", conn);
108
109         conn->state = BT_DISCONN;
110
111         cp.handle = cpu_to_le16(conn->handle);
112         cp.reason = reason;
113         hci_send_cmd(conn->hdev, HCI_OP_DISCONNECT, sizeof(cp), &cp);
114 }
115
116 void hci_add_sco(struct hci_conn *conn, __u16 handle)
117 {
118         struct hci_dev *hdev = conn->hdev;
119         struct hci_cp_add_sco cp;
120
121         BT_DBG("%p", conn);
122
123         conn->state = BT_CONNECT;
124         conn->out = 1;
125
126         conn->attempt++;
127
128         cp.handle   = cpu_to_le16(handle);
129         cp.pkt_type = cpu_to_le16(conn->pkt_type);
130
131         hci_send_cmd(hdev, HCI_OP_ADD_SCO, sizeof(cp), &cp);
132 }
133
134 void hci_setup_sync(struct hci_conn *conn, __u16 handle)
135 {
136         struct hci_dev *hdev = conn->hdev;
137         struct hci_cp_setup_sync_conn cp;
138
139         BT_DBG("%p", conn);
140
141         conn->state = BT_CONNECT;
142         conn->out = 1;
143
144         conn->attempt++;
145
146         cp.handle   = cpu_to_le16(handle);
147         cp.pkt_type = cpu_to_le16(conn->pkt_type);
148
149         cp.tx_bandwidth   = cpu_to_le32(0x00001f40);
150         cp.rx_bandwidth   = cpu_to_le32(0x00001f40);
151         cp.max_latency    = cpu_to_le16(0xffff);
152         cp.voice_setting  = cpu_to_le16(hdev->voice_setting);
153         cp.retrans_effort = 0xff;
154
155         hci_send_cmd(hdev, HCI_OP_SETUP_SYNC_CONN, sizeof(cp), &cp);
156 }
157
158 static void hci_conn_timeout(unsigned long arg)
159 {
160         struct hci_conn *conn = (void *) arg;
161         struct hci_dev *hdev = conn->hdev;
162
163         BT_DBG("conn %p state %d", conn, conn->state);
164
165         if (atomic_read(&conn->refcnt))
166                 return;
167
168         hci_dev_lock(hdev);
169
170         switch (conn->state) {
171         case BT_CONNECT:
172         case BT_CONNECT2:
173                 if (conn->type == ACL_LINK)
174                         hci_acl_connect_cancel(conn);
175                 else
176                         hci_acl_disconn(conn, 0x13);
177                 break;
178         case BT_CONFIG:
179         case BT_CONNECTED:
180                 hci_acl_disconn(conn, 0x13);
181                 break;
182         default:
183                 conn->state = BT_CLOSED;
184                 break;
185         }
186
187         hci_dev_unlock(hdev);
188 }
189
190 static void hci_conn_idle(unsigned long arg)
191 {
192         struct hci_conn *conn = (void *) arg;
193
194         BT_DBG("conn %p mode %d", conn, conn->mode);
195
196         hci_conn_enter_sniff_mode(conn);
197 }
198
199 struct hci_conn *hci_conn_add(struct hci_dev *hdev, int type, bdaddr_t *dst)
200 {
201         struct hci_conn *conn;
202
203         BT_DBG("%s dst %s", hdev->name, batostr(dst));
204
205         conn = kzalloc(sizeof(struct hci_conn), GFP_ATOMIC);
206         if (!conn)
207                 return NULL;
208
209         bacpy(&conn->dst, dst);
210         conn->hdev  = hdev;
211         conn->type  = type;
212         conn->mode  = HCI_CM_ACTIVE;
213         conn->state = BT_OPEN;
214
215         conn->power_save = 1;
216
217         switch (type) {
218         case ACL_LINK:
219                 conn->pkt_type = hdev->pkt_type & ACL_PTYPE_MASK;
220                 break;
221         case SCO_LINK:
222                 if (lmp_esco_capable(hdev))
223                         conn->pkt_type = (hdev->esco_type & SCO_ESCO_MASK) |
224                                         (hdev->esco_type & EDR_ESCO_MASK);
225                 else
226                         conn->pkt_type = hdev->pkt_type & SCO_PTYPE_MASK;
227                 break;
228         case ESCO_LINK:
229                 conn->pkt_type = hdev->esco_type & ~EDR_ESCO_MASK;
230                 break;
231         }
232
233         skb_queue_head_init(&conn->data_q);
234
235         setup_timer(&conn->disc_timer, hci_conn_timeout, (unsigned long)conn);
236         setup_timer(&conn->idle_timer, hci_conn_idle, (unsigned long)conn);
237
238         atomic_set(&conn->refcnt, 0);
239
240         hci_dev_hold(hdev);
241
242         tasklet_disable(&hdev->tx_task);
243
244         hci_conn_hash_add(hdev, conn);
245         if (hdev->notify)
246                 hdev->notify(hdev, HCI_NOTIFY_CONN_ADD);
247
248         tasklet_enable(&hdev->tx_task);
249
250         return conn;
251 }
252
253 int hci_conn_del(struct hci_conn *conn)
254 {
255         struct hci_dev *hdev = conn->hdev;
256
257         BT_DBG("%s conn %p handle %d", hdev->name, conn, conn->handle);
258
259         del_timer(&conn->idle_timer);
260
261         del_timer(&conn->disc_timer);
262
263         if (conn->type == ACL_LINK) {
264                 struct hci_conn *sco = conn->link;
265                 if (sco)
266                         sco->link = NULL;
267
268                 /* Unacked frames */
269                 hdev->acl_cnt += conn->sent;
270         } else {
271                 struct hci_conn *acl = conn->link;
272                 if (acl) {
273                         acl->link = NULL;
274                         hci_conn_put(acl);
275                 }
276         }
277
278         tasklet_disable(&hdev->tx_task);
279
280         hci_conn_hash_del(hdev, conn);
281         if (hdev->notify)
282                 hdev->notify(hdev, HCI_NOTIFY_CONN_DEL);
283
284         tasklet_enable(&hdev->tx_task);
285
286         skb_queue_purge(&conn->data_q);
287
288         return 0;
289 }
290
291 struct hci_dev *hci_get_route(bdaddr_t *dst, bdaddr_t *src)
292 {
293         int use_src = bacmp(src, BDADDR_ANY);
294         struct hci_dev *hdev = NULL;
295         struct list_head *p;
296
297         BT_DBG("%s -> %s", batostr(src), batostr(dst));
298
299         read_lock_bh(&hci_dev_list_lock);
300
301         list_for_each(p, &hci_dev_list) {
302                 struct hci_dev *d = list_entry(p, struct hci_dev, list);
303
304                 if (!test_bit(HCI_UP, &d->flags) || test_bit(HCI_RAW, &d->flags))
305                         continue;
306
307                 /* Simple routing:
308                  *   No source address - find interface with bdaddr != dst
309                  *   Source address    - find interface with bdaddr == src
310                  */
311
312                 if (use_src) {
313                         if (!bacmp(&d->bdaddr, src)) {
314                                 hdev = d; break;
315                         }
316                 } else {
317                         if (bacmp(&d->bdaddr, dst)) {
318                                 hdev = d; break;
319                         }
320                 }
321         }
322
323         if (hdev)
324                 hdev = hci_dev_hold(hdev);
325
326         read_unlock_bh(&hci_dev_list_lock);
327         return hdev;
328 }
329 EXPORT_SYMBOL(hci_get_route);
330
331 /* Create SCO or ACL connection.
332  * Device _must_ be locked */
333 struct hci_conn *hci_connect(struct hci_dev *hdev, int type, bdaddr_t *dst, __u8 sec_level, __u8 auth_type)
334 {
335         struct hci_conn *acl;
336         struct hci_conn *sco;
337
338         BT_DBG("%s dst %s", hdev->name, batostr(dst));
339
340         if (!(acl = hci_conn_hash_lookup_ba(hdev, ACL_LINK, dst))) {
341                 if (!(acl = hci_conn_add(hdev, ACL_LINK, dst)))
342                         return NULL;
343         }
344
345         hci_conn_hold(acl);
346
347         if (acl->state == BT_OPEN || acl->state == BT_CLOSED) {
348                 acl->sec_level = sec_level;
349                 acl->auth_type = auth_type;
350                 hci_acl_connect(acl);
351         }
352
353         if (type == ACL_LINK)
354                 return acl;
355
356         if (!(sco = hci_conn_hash_lookup_ba(hdev, type, dst))) {
357                 if (!(sco = hci_conn_add(hdev, type, dst))) {
358                         hci_conn_put(acl);
359                         return NULL;
360                 }
361         }
362
363         acl->link = sco;
364         sco->link = acl;
365
366         hci_conn_hold(sco);
367
368         if (acl->state == BT_CONNECTED &&
369                         (sco->state == BT_OPEN || sco->state == BT_CLOSED)) {
370                 if (lmp_esco_capable(hdev))
371                         hci_setup_sync(sco, acl->handle);
372                 else
373                         hci_add_sco(sco, acl->handle);
374         }
375
376         return sco;
377 }
378 EXPORT_SYMBOL(hci_connect);
379
380 /* Check link security requirement */
381 int hci_conn_check_link_mode(struct hci_conn *conn)
382 {
383         BT_DBG("conn %p", conn);
384
385         if (conn->ssp_mode > 0 && conn->hdev->ssp_mode > 0 &&
386                                         !(conn->link_mode & HCI_LM_ENCRYPT))
387                 return 0;
388
389         return 1;
390 }
391 EXPORT_SYMBOL(hci_conn_check_link_mode);
392
393 /* Authenticate remote device */
394 static int hci_conn_auth(struct hci_conn *conn, __u8 sec_level, __u8 auth_type)
395 {
396         BT_DBG("conn %p", conn);
397
398         if (sec_level > conn->sec_level) {
399                 conn->sec_level = sec_level;
400                 conn->auth_type = auth_type;
401         } else if (conn->link_mode & HCI_LM_AUTH)
402                 return 1;
403
404         if (!test_and_set_bit(HCI_CONN_AUTH_PEND, &conn->pend)) {
405                 struct hci_cp_auth_requested cp;
406                 cp.handle = cpu_to_le16(conn->handle);
407                 hci_send_cmd(conn->hdev, HCI_OP_AUTH_REQUESTED,
408                                                         sizeof(cp), &cp);
409         }
410
411         return 0;
412 }
413
414 /* Enable security */
415 int hci_conn_security(struct hci_conn *conn, __u8 sec_level, __u8 auth_type)
416 {
417         BT_DBG("conn %p", conn);
418
419         if (conn->auth_type == 0xff)
420                 conn->auth_type = auth_type;
421
422         if (sec_level == BT_SECURITY_SDP)
423                 return 1;
424
425         if (sec_level == BT_SECURITY_LOW) {
426                 if (conn->ssp_mode > 0 && conn->hdev->ssp_mode > 0)
427                         return hci_conn_auth(conn, sec_level, auth_type);
428                 else
429                         return 1;
430         }
431
432         if (conn->link_mode & HCI_LM_ENCRYPT)
433                 return hci_conn_auth(conn, sec_level, auth_type);
434
435         if (test_and_set_bit(HCI_CONN_ENCRYPT_PEND, &conn->pend))
436                 return 0;
437
438         if (hci_conn_auth(conn, sec_level, auth_type)) {
439                 struct hci_cp_set_conn_encrypt cp;
440                 cp.handle  = cpu_to_le16(conn->handle);
441                 cp.encrypt = 1;
442                 hci_send_cmd(conn->hdev, HCI_OP_SET_CONN_ENCRYPT,
443                                                         sizeof(cp), &cp);
444         }
445
446         return 0;
447 }
448 EXPORT_SYMBOL(hci_conn_security);
449
450 /* Change link key */
451 int hci_conn_change_link_key(struct hci_conn *conn)
452 {
453         BT_DBG("conn %p", conn);
454
455         if (!test_and_set_bit(HCI_CONN_AUTH_PEND, &conn->pend)) {
456                 struct hci_cp_change_conn_link_key cp;
457                 cp.handle = cpu_to_le16(conn->handle);
458                 hci_send_cmd(conn->hdev, HCI_OP_CHANGE_CONN_LINK_KEY,
459                                                         sizeof(cp), &cp);
460         }
461
462         return 0;
463 }
464 EXPORT_SYMBOL(hci_conn_change_link_key);
465
466 /* Switch role */
467 int hci_conn_switch_role(struct hci_conn *conn, __u8 role)
468 {
469         BT_DBG("conn %p", conn);
470
471         if (!role && conn->link_mode & HCI_LM_MASTER)
472                 return 1;
473
474         if (!test_and_set_bit(HCI_CONN_RSWITCH_PEND, &conn->pend)) {
475                 struct hci_cp_switch_role cp;
476                 bacpy(&cp.bdaddr, &conn->dst);
477                 cp.role = role;
478                 hci_send_cmd(conn->hdev, HCI_OP_SWITCH_ROLE, sizeof(cp), &cp);
479         }
480
481         return 0;
482 }
483 EXPORT_SYMBOL(hci_conn_switch_role);
484
485 /* Enter active mode */
486 void hci_conn_enter_active_mode(struct hci_conn *conn)
487 {
488         struct hci_dev *hdev = conn->hdev;
489
490         BT_DBG("conn %p mode %d", conn, conn->mode);
491
492         if (test_bit(HCI_RAW, &hdev->flags))
493                 return;
494
495         if (conn->mode != HCI_CM_SNIFF || !conn->power_save)
496                 goto timer;
497
498         if (!test_and_set_bit(HCI_CONN_MODE_CHANGE_PEND, &conn->pend)) {
499                 struct hci_cp_exit_sniff_mode cp;
500                 cp.handle = cpu_to_le16(conn->handle);
501                 hci_send_cmd(hdev, HCI_OP_EXIT_SNIFF_MODE, sizeof(cp), &cp);
502         }
503
504 timer:
505         if (hdev->idle_timeout > 0)
506                 mod_timer(&conn->idle_timer,
507                         jiffies + msecs_to_jiffies(hdev->idle_timeout));
508 }
509
510 /* Enter sniff mode */
511 void hci_conn_enter_sniff_mode(struct hci_conn *conn)
512 {
513         struct hci_dev *hdev = conn->hdev;
514
515         BT_DBG("conn %p mode %d", conn, conn->mode);
516
517         if (test_bit(HCI_RAW, &hdev->flags))
518                 return;
519
520         if (!lmp_sniff_capable(hdev) || !lmp_sniff_capable(conn))
521                 return;
522
523         if (conn->mode != HCI_CM_ACTIVE || !(conn->link_policy & HCI_LP_SNIFF))
524                 return;
525
526         if (lmp_sniffsubr_capable(hdev) && lmp_sniffsubr_capable(conn)) {
527                 struct hci_cp_sniff_subrate cp;
528                 cp.handle             = cpu_to_le16(conn->handle);
529                 cp.max_latency        = cpu_to_le16(0);
530                 cp.min_remote_timeout = cpu_to_le16(0);
531                 cp.min_local_timeout  = cpu_to_le16(0);
532                 hci_send_cmd(hdev, HCI_OP_SNIFF_SUBRATE, sizeof(cp), &cp);
533         }
534
535         if (!test_and_set_bit(HCI_CONN_MODE_CHANGE_PEND, &conn->pend)) {
536                 struct hci_cp_sniff_mode cp;
537                 cp.handle       = cpu_to_le16(conn->handle);
538                 cp.max_interval = cpu_to_le16(hdev->sniff_max_interval);
539                 cp.min_interval = cpu_to_le16(hdev->sniff_min_interval);
540                 cp.attempt      = cpu_to_le16(4);
541                 cp.timeout      = cpu_to_le16(1);
542                 hci_send_cmd(hdev, HCI_OP_SNIFF_MODE, sizeof(cp), &cp);
543         }
544 }
545
546 /* Drop all connection on the device */
547 void hci_conn_hash_flush(struct hci_dev *hdev)
548 {
549         struct hci_conn_hash *h = &hdev->conn_hash;
550         struct list_head *p;
551
552         BT_DBG("hdev %s", hdev->name);
553
554         p = h->list.next;
555         while (p != &h->list) {
556                 struct hci_conn *c;
557
558                 c = list_entry(p, struct hci_conn, list);
559                 p = p->next;
560
561                 c->state = BT_CLOSED;
562
563                 hci_conn_del_sysfs(c);
564
565                 hci_proto_disconn_ind(c, 0x16);
566                 hci_conn_del(c);
567         }
568 }
569
570 /* Check pending connect attempts */
571 void hci_conn_check_pending(struct hci_dev *hdev)
572 {
573         struct hci_conn *conn;
574
575         BT_DBG("hdev %s", hdev->name);
576
577         hci_dev_lock(hdev);
578
579         conn = hci_conn_hash_lookup_state(hdev, ACL_LINK, BT_CONNECT2);
580         if (conn)
581                 hci_acl_connect(conn);
582
583         hci_dev_unlock(hdev);
584 }
585
586 int hci_get_conn_list(void __user *arg)
587 {
588         struct hci_conn_list_req req, *cl;
589         struct hci_conn_info *ci;
590         struct hci_dev *hdev;
591         struct list_head *p;
592         int n = 0, size, err;
593
594         if (copy_from_user(&req, arg, sizeof(req)))
595                 return -EFAULT;
596
597         if (!req.conn_num || req.conn_num > (PAGE_SIZE * 2) / sizeof(*ci))
598                 return -EINVAL;
599
600         size = sizeof(req) + req.conn_num * sizeof(*ci);
601
602         if (!(cl = kmalloc(size, GFP_KERNEL)))
603                 return -ENOMEM;
604
605         if (!(hdev = hci_dev_get(req.dev_id))) {
606                 kfree(cl);
607                 return -ENODEV;
608         }
609
610         ci = cl->conn_info;
611
612         hci_dev_lock_bh(hdev);
613         list_for_each(p, &hdev->conn_hash.list) {
614                 register struct hci_conn *c;
615                 c = list_entry(p, struct hci_conn, list);
616
617                 bacpy(&(ci + n)->bdaddr, &c->dst);
618                 (ci + n)->handle = c->handle;
619                 (ci + n)->type  = c->type;
620                 (ci + n)->out   = c->out;
621                 (ci + n)->state = c->state;
622                 (ci + n)->link_mode = c->link_mode;
623                 if (++n >= req.conn_num)
624                         break;
625         }
626         hci_dev_unlock_bh(hdev);
627
628         cl->dev_id = hdev->id;
629         cl->conn_num = n;
630         size = sizeof(req) + n * sizeof(*ci);
631
632         hci_dev_put(hdev);
633
634         err = copy_to_user(arg, cl, size);
635         kfree(cl);
636
637         return err ? -EFAULT : 0;
638 }
639
640 int hci_get_conn_info(struct hci_dev *hdev, void __user *arg)
641 {
642         struct hci_conn_info_req req;
643         struct hci_conn_info ci;
644         struct hci_conn *conn;
645         char __user *ptr = arg + sizeof(req);
646
647         if (copy_from_user(&req, arg, sizeof(req)))
648                 return -EFAULT;
649
650         hci_dev_lock_bh(hdev);
651         conn = hci_conn_hash_lookup_ba(hdev, req.type, &req.bdaddr);
652         if (conn) {
653                 bacpy(&ci.bdaddr, &conn->dst);
654                 ci.handle = conn->handle;
655                 ci.type  = conn->type;
656                 ci.out   = conn->out;
657                 ci.state = conn->state;
658                 ci.link_mode = conn->link_mode;
659         }
660         hci_dev_unlock_bh(hdev);
661
662         if (!conn)
663                 return -ENOENT;
664
665         return copy_to_user(ptr, &ci, sizeof(ci)) ? -EFAULT : 0;
666 }
667
668 int hci_get_auth_info(struct hci_dev *hdev, void __user *arg)
669 {
670         struct hci_auth_info_req req;
671         struct hci_conn *conn;
672
673         if (copy_from_user(&req, arg, sizeof(req)))
674                 return -EFAULT;
675
676         hci_dev_lock_bh(hdev);
677         conn = hci_conn_hash_lookup_ba(hdev, ACL_LINK, &req.bdaddr);
678         if (conn)
679                 req.type = conn->auth_type;
680         hci_dev_unlock_bh(hdev);
681
682         if (!conn)
683                 return -ENOENT;
684
685         return copy_to_user(arg, &req, sizeof(req)) ? -EFAULT : 0;
686 }