net/bluetooth/hci_event.c

   1 /*
   2    BlueZ - Bluetooth protocol stack for Linux
   3    Copyright (C) 2000-2001 Qualcomm Incorporated
   4
   5    Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
   6
   7    This program is free software; you can redistribute it and/or modify
   8    it under the terms of the GNU General Public License version 2 as
   9    published by the Free Software Foundation;
  10
  11    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
  12    OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  13    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
  14    IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
  15    CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
  16    WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  17    ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  18    OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  19
  20    ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
  21    COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
  22    SOFTWARE IS DISCLAIMED.
  23 */
  24
  25 /* Bluetooth HCI event handling. */
  26
  27 #include <linux/module.h>
  28
  29 #include <linux/types.h>
  30 #include <linux/errno.h>
  31 #include <linux/kernel.h>
  32 #include <linux/slab.h>
  33 #include <linux/poll.h>
  34 #include <linux/fcntl.h>
  35 #include <linux/init.h>
  36 #include <linux/skbuff.h>
  37 #include <linux/interrupt.h>
  38 #include <linux/notifier.h>
  39 #include <net/sock.h>
  40
  41 #include <asm/system.h>
  42 #include <asm/uaccess.h>
  43 #include <asm/unaligned.h>
  44
  45 #include <net/bluetooth/bluetooth.h>
  46 #include <net/bluetooth/hci_core.h>
  47
  48 #ifndef CONFIG_BT_HCI_CORE_DEBUG
  49 #undef  BT_DBG
  50 #define BT_DBG(D...)
  51 #endif
  52
  53 /* Handle HCI Event packets */
  54
  55 static void hci_cc_inquiry_cancel(struct hci_dev *hdev, struct sk_buff *skb)
  56 {
  57         __u8 status = *((__u8 *) skb->data);
  58
  59         BT_DBG("%s status 0x%x", hdev->name, status);
  60
  61         if (status)
  62                 return;
  63
  64         clear_bit(HCI_INQUIRY, &hdev->flags);
  65
  66         hci_req_complete(hdev, status);
  67
  68         hci_conn_check_pending(hdev);
  69 }
  70
  71 static void hci_cc_exit_periodic_inq(struct hci_dev *hdev, struct sk_buff *skb)
  72 {
  73         __u8 status = *((__u8 *) skb->data);
  74
  75         BT_DBG("%s status 0x%x", hdev->name, status);
  76
  77         if (status)
  78                 return;
  79
  80         clear_bit(HCI_INQUIRY, &hdev->flags);
  81
  82         hci_conn_check_pending(hdev);
  83 }
  84
  85 static void hci_cc_remote_name_req_cancel(struct hci_dev *hdev, struct sk_buff *skb)
  86 {
  87         BT_DBG("%s", hdev->name);
  88 }
  89
  90 static void hci_cc_role_discovery(struct hci_dev *hdev, struct sk_buff *skb)
  91 {
  92         struct hci_rp_role_discovery *rp = (void *) skb->data;
  93         struct hci_conn *conn;
  94
  95         BT_DBG("%s status 0x%x", hdev->name, rp->status);
  96
  97         if (rp->status)
  98                 return;
  99
 100         hci_dev_lock(hdev);
 101
 102         conn = hci_conn_hash_lookup_handle(hdev, __le16_to_cpu(rp->handle));
 103         if (conn) {
 104                 if (rp->role)
 105                         conn->link_mode &= ~HCI_LM_MASTER;
 106                 else
 107                         conn->link_mode |= HCI_LM_MASTER;
 108         }
 109
 110         hci_dev_unlock(hdev);
 111 }
 112
 113 static void hci_cc_write_link_policy(struct hci_dev *hdev, struct sk_buff *skb)
 114 {
 115         struct hci_rp_write_link_policy *rp = (void *) skb->data;
 116         struct hci_conn *conn;
 117         void *sent;
 118
 119         BT_DBG("%s status 0x%x", hdev->name, rp->status);
 120
 121         if (rp->status)
 122                 return;
 123
 124         sent = hci_sent_cmd_data(hdev, HCI_OP_WRITE_LINK_POLICY);
 125         if (!sent)
 126                 return;
 127
 128         hci_dev_lock(hdev);
 129
 130         conn = hci_conn_hash_lookup_handle(hdev, __le16_to_cpu(rp->handle));
 131         if (conn) {
 132                 __le16 policy = get_unaligned((__le16 *) (sent + 2));
 133                 conn->link_policy = __le16_to_cpu(policy);
 134         }
 135
 136         hci_dev_unlock(hdev);
 137 }
 138
 139 static void hci_cc_reset(struct hci_dev *hdev, struct sk_buff *skb)
 140 {
 141         __u8 status = *((__u8 *) skb->data);
 142
 143         BT_DBG("%s status 0x%x", hdev->name, status);
 144
 145         hci_req_complete(hdev, status);
 146 }
 147
 148 static void hci_cc_write_local_name(struct hci_dev *hdev, struct sk_buff *skb)
 149 {
 150         __u8 status = *((__u8 *) skb->data);
 151         void *sent;
 152
 153         BT_DBG("%s status 0x%x", hdev->name, status);
 154
 155         sent = hci_sent_cmd_data(hdev, HCI_OP_WRITE_LOCAL_NAME);
 156         if (!sent)
 157                 return;
 158
 159         if (!status)
 160                 memcpy(hdev->dev_name, sent, 248);
 161 }
 162
 163 static void hci_cc_read_local_name(struct hci_dev *hdev, struct sk_buff *skb)
 164 {
 165         struct hci_rp_read_local_name *rp = (void *) skb->data;
 166
 167         BT_DBG("%s status 0x%x", hdev->name, rp->status);
 168
 169         if (rp->status)
 170                 return;
 171
 172         memcpy(hdev->dev_name, rp->name, 248);
 173 }
 174
 175 static void hci_cc_write_auth_enable(struct hci_dev *hdev, struct sk_buff *skb)
 176 {
 177         __u8 status = *((__u8 *) skb->data);
 178         void *sent;
 179
 180         BT_DBG("%s status 0x%x", hdev->name, status);
 181
 182         sent = hci_sent_cmd_data(hdev, HCI_OP_WRITE_AUTH_ENABLE);
 183         if (!sent)
 184                 return;
 185
 186         if (!status) {
 187                 __u8 param = *((__u8 *) sent);
 188
 189                 if (param == AUTH_ENABLED)
 190                         set_bit(HCI_AUTH, &hdev->flags);
 191                 else
 192                         clear_bit(HCI_AUTH, &hdev->flags);
 193         }
 194
 195         hci_req_complete(hdev, status);
 196 }
 197
 198 static void hci_cc_write_encrypt_mode(struct hci_dev *hdev, struct sk_buff *skb)
 199 {
 200         __u8 status = *((__u8 *) skb->data);
 201         void *sent;
 202
 203         BT_DBG("%s status 0x%x", hdev->name, status);
 204
 205         sent = hci_sent_cmd_data(hdev, HCI_OP_WRITE_ENCRYPT_MODE);
 206         if (!sent)
 207                 return;
 208
 209         if (!status) {
 210                 __u8 param = *((__u8 *) sent);
 211
 212                 if (param)
 213                         set_bit(HCI_ENCRYPT, &hdev->flags);
 214                 else
 215                         clear_bit(HCI_ENCRYPT, &hdev->flags);
 216         }
 217
 218         hci_req_complete(hdev, status);
 219 }
 220
 221 static void hci_cc_write_scan_enable(struct hci_dev *hdev, struct sk_buff *skb)
 222 {
 223         __u8 status = *((__u8 *) skb->data);
 224         void *sent;
 225
 226         BT_DBG("%s status 0x%x", hdev->name, status);
 227
 228         sent = hci_sent_cmd_data(hdev, HCI_OP_WRITE_SCAN_ENABLE);
 229         if (!sent)
 230                 return;
 231
 232         if (!status) {
 233                 __u8 param = *((__u8 *) sent);
 234
 235                 clear_bit(HCI_PSCAN, &hdev->flags);
 236                 clear_bit(HCI_ISCAN, &hdev->flags);
 237
 238                 if (param & SCAN_INQUIRY)
 239                         set_bit(HCI_ISCAN, &hdev->flags);
 240
 241                 if (param & SCAN_PAGE)
 242                         set_bit(HCI_PSCAN, &hdev->flags);
 243         }
 244
 245         hci_req_complete(hdev, status);
 246 }
 247
 248 static void hci_cc_read_class_of_dev(struct hci_dev *hdev, struct sk_buff *skb)
 249 {
 250         struct hci_rp_read_class_of_dev *rp = (void *) skb->data;
 251
 252         BT_DBG("%s status 0x%x", hdev->name, rp->status);
 253
 254         if (rp->status)
 255                 return;
 256
 257         memcpy(hdev->dev_class, rp->dev_class, 3);
 258
 259         BT_DBG("%s class 0x%.2x%.2x%.2x", hdev->name,
 260                 hdev->dev_class[2], hdev->dev_class[1], hdev->dev_class[0]);
 261 }
 262
 263 static void hci_cc_write_class_of_dev(struct hci_dev *hdev, struct sk_buff *skb)
 264 {
 265         __u8 status = *((__u8 *) skb->data);
 266         void *sent;
 267
 268         BT_DBG("%s status 0x%x", hdev->name, status);
 269
 270         sent = hci_sent_cmd_data(hdev, HCI_OP_WRITE_CLASS_OF_DEV);
 271         if (!sent)
 272                 return;
 273
 274         if (!status)
 275                 memcpy(hdev->dev_class, sent, 3);
 276 }
 277
 278 static void hci_cc_read_voice_setting(struct hci_dev *hdev, struct sk_buff *skb)
 279 {
 280         struct hci_rp_read_voice_setting *rp = (void *) skb->data;
 281         __u16 setting;
 282
 283         BT_DBG("%s status 0x%x", hdev->name, rp->status);
 284
 285         if (rp->status)
 286                 return;
 287
 288         setting = __le16_to_cpu(rp->voice_setting);
 289
 290         if (hdev->voice_setting == setting )
 291                 return;
 292
 293         hdev->voice_setting = setting;
 294
 295         BT_DBG("%s voice setting 0x%04x", hdev->name, setting);
 296
 297         if (hdev->notify) {
 298                 tasklet_disable(&hdev->tx_task);
 299                 hdev->notify(hdev, HCI_NOTIFY_VOICE_SETTING);
 300                 tasklet_enable(&hdev->tx_task);
 301         }
 302 }
 303
 304 static void hci_cc_write_voice_setting(struct hci_dev *hdev, struct sk_buff *skb)
 305 {
 306         __u8 status = *((__u8 *) skb->data);
 307         void *sent;
 308
 309         BT_DBG("%s status 0x%x", hdev->name, status);
 310
 311         sent = hci_sent_cmd_data(hdev, HCI_OP_WRITE_VOICE_SETTING);
 312         if (!sent)
 313                 return;
 314
 315         if (!status) {
 316                 __u16 setting = __le16_to_cpu(get_unaligned((__le16 *) sent));
 317
 318                 if (hdev->voice_setting != setting) {
 319                         hdev->voice_setting = setting;
 320
 321                         BT_DBG("%s voice setting 0x%04x", hdev->name, setting);
 322
 323                         if (hdev->notify) {
 324                                 tasklet_disable(&hdev->tx_task);
 325                                 hdev->notify(hdev, HCI_NOTIFY_VOICE_SETTING);
 326                                 tasklet_enable(&hdev->tx_task);
 327                         }
 328                 }
 329         }
 330 }
 331
 332 static void hci_cc_host_buffer_size(struct hci_dev *hdev, struct sk_buff *skb)
 333 {
 334         __u8 status = *((__u8 *) skb->data);
 335
 336         BT_DBG("%s status 0x%x", hdev->name, status);
 337
 338         hci_req_complete(hdev, status);
 339 }
 340
 341 static void hci_cc_read_local_version(struct hci_dev *hdev, struct sk_buff *skb)
 342 {
 343         struct hci_rp_read_local_version *rp = (void *) skb->data;
 344
 345         BT_DBG("%s status 0x%x", hdev->name, rp->status);
 346
 347         if (rp->status)
 348                 return;
 349
 350         hdev->hci_ver = rp->hci_ver;
 351         hdev->hci_rev = btohs(rp->hci_rev);
 352         hdev->manufacturer = btohs(rp->manufacturer);
 353
 354         BT_DBG("%s manufacturer %d hci ver %d:%d", hdev->name,
 355                                         hdev->manufacturer,
 356                                         hdev->hci_ver, hdev->hci_rev);
 357 }
 358
 359 static void hci_cc_read_local_commands(struct hci_dev *hdev, struct sk_buff *skb)
 360 {
 361         struct hci_rp_read_local_commands *rp = (void *) skb->data;
 362
 363         BT_DBG("%s status 0x%x", hdev->name, rp->status);
 364
 365         if (rp->status)
 366                 return;
 367
 368         memcpy(hdev->commands, rp->commands, sizeof(hdev->commands));
 369 }
 370
 371 static void hci_cc_read_local_features(struct hci_dev *hdev, struct sk_buff *skb)
 372 {
 373         struct hci_rp_read_local_features *rp = (void *) skb->data;
 374
 375         BT_DBG("%s status 0x%x", hdev->name, rp->status);
 376
 377         if (rp->status)
 378                 return;
 379
 380         memcpy(hdev->features, rp->features, 8);
 381
 382         /* Adjust default settings according to features
 383          * supported by device. */
 384
 385         if (hdev->features[0] & LMP_3SLOT)
 386                 hdev->pkt_type |= (HCI_DM3 | HCI_DH3);
 387
 388         if (hdev->features[0] & LMP_5SLOT)
 389                 hdev->pkt_type |= (HCI_DM5 | HCI_DH5);
 390
 391         if (hdev->features[1] & LMP_HV2) {
 392                 hdev->pkt_type  |= (HCI_HV2);
 393                 hdev->esco_type |= (ESCO_HV2);
 394         }
 395
 396         if (hdev->features[1] & LMP_HV3) {
 397                 hdev->pkt_type  |= (HCI_HV3);
 398                 hdev->esco_type |= (ESCO_HV3);
 399         }
 400
 401         if (hdev->features[3] & LMP_ESCO)
 402                 hdev->esco_type |= (ESCO_EV3);
 403
 404         if (hdev->features[4] & LMP_EV4)
 405                 hdev->esco_type |= (ESCO_EV4);
 406
 407         if (hdev->features[4] & LMP_EV5)
 408                 hdev->esco_type |= (ESCO_EV5);
 409
 410         BT_DBG("%s features 0x%.2x%.2x%.2x%.2x%.2x%.2x%.2x%.2x", hdev->name,
 411                                         hdev->features[0], hdev->features[1],
 412                                         hdev->features[2], hdev->features[3],
 413                                         hdev->features[4], hdev->features[5],
 414                                         hdev->features[6], hdev->features[7]);
 415 }
 416
 417 static void hci_cc_read_buffer_size(struct hci_dev *hdev, struct sk_buff *skb)
 418 {
 419         struct hci_rp_read_buffer_size *rp = (void *) skb->data;
 420
 421         BT_DBG("%s status 0x%x", hdev->name, rp->status);
 422
 423         if (rp->status)
 424                 return;
 425
 426         hdev->acl_mtu  = __le16_to_cpu(rp->acl_mtu);
 427         hdev->sco_mtu  = rp->sco_mtu;
 428         hdev->acl_pkts = __le16_to_cpu(rp->acl_max_pkt);
 429         hdev->sco_pkts = __le16_to_cpu(rp->sco_max_pkt);
 430
 431         if (test_bit(HCI_QUIRK_FIXUP_BUFFER_SIZE, &hdev->quirks)) {
 432                 hdev->sco_mtu  = 64;
 433                 hdev->sco_pkts = 8;
 434         }
 435
 436         hdev->acl_cnt = hdev->acl_pkts;
 437         hdev->sco_cnt = hdev->sco_pkts;
 438
 439         BT_DBG("%s acl mtu %d:%d sco mtu %d:%d", hdev->name,
 440                                         hdev->acl_mtu, hdev->acl_pkts,
 441                                         hdev->sco_mtu, hdev->sco_pkts);
 442 }
 443
 444 static void hci_cc_read_bd_addr(struct hci_dev *hdev, struct sk_buff *skb)
 445 {
 446         struct hci_rp_read_bd_addr *rp = (void *) skb->data;
 447
 448         BT_DBG("%s status 0x%x", hdev->name, rp->status);
 449
 450         if (!rp->status)
 451                 bacpy(&hdev->bdaddr, &rp->bdaddr);
 452
 453         hci_req_complete(hdev, rp->status);
 454 }
 455
 456 static inline void hci_cs_inquiry(struct hci_dev *hdev, __u8 status)
 457 {
 458         BT_DBG("%s status 0x%x", hdev->name, status);
 459
 460         if (status) {
 461                 hci_req_complete(hdev, status);
 462
 463                 hci_conn_check_pending(hdev);
 464         } else
 465                 set_bit(HCI_INQUIRY, &hdev->flags);
 466 }
 467
 468 static inline void hci_cs_create_conn(struct hci_dev *hdev, __u8 status)
 469 {
 470         struct hci_cp_create_conn *cp;
 471         struct hci_conn *conn;
 472
 473         BT_DBG("%s status 0x%x", hdev->name, status);
 474
 475         cp = hci_sent_cmd_data(hdev, HCI_OP_CREATE_CONN);
 476         if (!cp)
 477                 return;
 478
 479         hci_dev_lock(hdev);
 480
 481         conn = hci_conn_hash_lookup_ba(hdev, ACL_LINK, &cp->bdaddr);
 482
 483         BT_DBG("%s bdaddr %s conn %p", hdev->name, batostr(&cp->bdaddr), conn);
 484
 485         if (status) {
 486                 if (conn && conn->state == BT_CONNECT) {
 487                         if (status != 0x0c || conn->attempt > 2) {
 488                                 conn->state = BT_CLOSED;
 489                                 hci_proto_connect_cfm(conn, status);
 490                                 hci_conn_del(conn);
 491                         } else
 492                                 conn->state = BT_CONNECT2;
 493                 }
 494         } else {
 495                 if (!conn) {
 496                         conn = hci_conn_add(hdev, ACL_LINK, &cp->bdaddr);
 497                         if (conn) {
 498                                 conn->out = 1;
 499                                 conn->link_mode |= HCI_LM_MASTER;
 500                         } else
 501                                 BT_ERR("No memmory for new connection");
 502                 }
 503         }
 504
 505         hci_dev_unlock(hdev);
 506 }
 507
 508 static void hci_cs_add_sco(struct hci_dev *hdev, __u8 status)
 509 {
 510         struct hci_cp_add_sco *cp;
 511         struct hci_conn *acl, *sco;
 512         __u16 handle;
 513
 514         BT_DBG("%s status 0x%x", hdev->name, status);
 515
 516         if (!status)
 517                 return;
 518
 519         cp = hci_sent_cmd_data(hdev, HCI_OP_ADD_SCO);
 520         if (!cp)
 521                 return;
 522
 523         handle = __le16_to_cpu(cp->handle);
 524
 525         BT_DBG("%s handle %d", hdev->name, handle);
 526
 527         hci_dev_lock(hdev);
 528
 529         acl = hci_conn_hash_lookup_handle(hdev, handle);
 530         if (acl && (sco = acl->link)) {
 531                 sco->state = BT_CLOSED;
 532
 533                 hci_proto_connect_cfm(sco, status);
 534                 hci_conn_del(sco);
 535         }
 536
 537         hci_dev_unlock(hdev);
 538 }
 539
 540 static void hci_cs_remote_name_req(struct hci_dev *hdev, __u8 status)
 541 {
 542         BT_DBG("%s status 0x%x", hdev->name, status);
 543 }
 544
 545 static void hci_cs_setup_sync_conn(struct hci_dev *hdev, __u8 status)
 546 {
 547         struct hci_cp_setup_sync_conn *cp;
 548         struct hci_conn *acl, *sco;
 549         __u16 handle;
 550
 551         BT_DBG("%s status 0x%x", hdev->name, status);
 552
 553         if (!status)
 554                 return;
 555
 556         cp = hci_sent_cmd_data(hdev, HCI_OP_SETUP_SYNC_CONN);
 557         if (!cp)
 558                 return;
 559
 560         handle = __le16_to_cpu(cp->handle);
 561
 562         BT_DBG("%s handle %d", hdev->name, handle);
 563
 564         hci_dev_lock(hdev);
 565
 566         acl = hci_conn_hash_lookup_handle(hdev, handle);
 567         if (acl && (sco = acl->link)) {
 568                 sco->state = BT_CLOSED;
 569
 570                 hci_proto_connect_cfm(sco, status);
 571                 hci_conn_del(sco);
 572         }
 573
 574         hci_dev_unlock(hdev);
 575 }
 576
 577 static void hci_cs_sniff_mode(struct hci_dev *hdev, __u8 status)
 578 {
 579         struct hci_cp_sniff_mode *cp;
 580         struct hci_conn *conn;
 581
 582         BT_DBG("%s status 0x%x", hdev->name, status);
 583
 584         if (!status)
 585                 return;
 586
 587         cp = hci_sent_cmd_data(hdev, HCI_OP_SNIFF_MODE);
 588         if (!cp)
 589                 return;
 590
 591         hci_dev_lock(hdev);
 592
 593         conn = hci_conn_hash_lookup_handle(hdev, __le16_to_cpu(cp->handle));
 594         if (conn)
 595                 clear_bit(HCI_CONN_MODE_CHANGE_PEND, &conn->pend);
 596
 597         hci_dev_unlock(hdev);
 598 }
 599
 600 static void hci_cs_exit_sniff_mode(struct hci_dev *hdev, __u8 status)
 601 {
 602         struct hci_cp_exit_sniff_mode *cp;
 603         struct hci_conn *conn;
 604
 605         BT_DBG("%s status 0x%x", hdev->name, status);
 606
 607         if (!status)
 608                 return;
 609
 610         cp = hci_sent_cmd_data(hdev, HCI_OP_EXIT_SNIFF_MODE);
 611         if (!cp)
 612                 return;
 613
 614         hci_dev_lock(hdev);
 615
 616         conn = hci_conn_hash_lookup_handle(hdev, __le16_to_cpu(cp->handle));
 617         if (conn)
 618                 clear_bit(HCI_CONN_MODE_CHANGE_PEND, &conn->pend);
 619
 620         hci_dev_unlock(hdev);
 621 }
 622
 623 static inline void hci_inquiry_complete_evt(struct hci_dev *hdev, struct sk_buff *skb)
 624 {
 625         __u8 status = *((__u8 *) skb->data);
 626
 627         BT_DBG("%s status %d", hdev->name, status);
 628
 629         clear_bit(HCI_INQUIRY, &hdev->flags);
 630
 631         hci_req_complete(hdev, status);
 632
 633         hci_conn_check_pending(hdev);
 634 }
 635
 636 static inline void hci_inquiry_result_evt(struct hci_dev *hdev, struct sk_buff *skb)
 637 {
 638         struct inquiry_data data;
 639         struct inquiry_info *info = (void *) (skb->data + 1);
 640         int num_rsp = *((__u8 *) skb->data);
 641
 642         BT_DBG("%s num_rsp %d", hdev->name, num_rsp);
 643
 644         if (!num_rsp)
 645                 return;
 646
 647         hci_dev_lock(hdev);
 648
 649         for (; num_rsp; num_rsp--) {
 650                 bacpy(&data.bdaddr, &info->bdaddr);
 651                 data.pscan_rep_mode     = info->pscan_rep_mode;
 652                 data.pscan_period_mode  = info->pscan_period_mode;
 653                 data.pscan_mode         = info->pscan_mode;
 654                 memcpy(data.dev_class, info->dev_class, 3);
 655                 data.clock_offset       = info->clock_offset;
 656                 data.rssi               = 0x00;
 657                 info++;
 658                 hci_inquiry_cache_update(hdev, &data);
 659         }
 660
 661         hci_dev_unlock(hdev);
 662 }
 663
 664 static inline void hci_conn_complete_evt(struct hci_dev *hdev, struct sk_buff *skb)
 665 {
 666         struct hci_ev_conn_complete *ev = (void *) skb->data;
 667         struct hci_conn *conn;
 668
 669         BT_DBG("%s", hdev->name);
 670
 671         hci_dev_lock(hdev);
 672
 673         conn = hci_conn_hash_lookup_ba(hdev, ev->link_type, &ev->bdaddr);
 674         if (!conn)
 675                 goto unlock;
 676
 677         if (!ev->status) {
 678                 conn->handle = __le16_to_cpu(ev->handle);
 679                 conn->state  = BT_CONNECTED;
 680
 681                 if (test_bit(HCI_AUTH, &hdev->flags))
 682                         conn->link_mode |= HCI_LM_AUTH;
 683
 684                 if (test_bit(HCI_ENCRYPT, &hdev->flags))
 685                         conn->link_mode |= HCI_LM_ENCRYPT;
 686
 687                 /* Get remote features */
 688                 if (conn->type == ACL_LINK) {
 689                         struct hci_cp_read_remote_features cp;
 690                         cp.handle = ev->handle;
 691                         hci_send_cmd(hdev, HCI_OP_READ_REMOTE_FEATURES, sizeof(cp), &cp);
 692                 }
 693
 694                 /* Set link policy */
 695                 if (conn->type == ACL_LINK && hdev->link_policy) {
 696                         struct hci_cp_write_link_policy cp;
 697                         cp.handle = ev->handle;
 698                         cp.policy = cpu_to_le16(hdev->link_policy);
 699                         hci_send_cmd(hdev, HCI_OP_WRITE_LINK_POLICY, sizeof(cp), &cp);
 700                 }
 701
 702                 /* Set packet type for incoming connection */
 703                 if (!conn->out) {
 704                         struct hci_cp_change_conn_ptype cp;
 705                         cp.handle = ev->handle;
 706                         cp.pkt_type = (conn->type == ACL_LINK) ?
 707                                 cpu_to_le16(hdev->pkt_type & ACL_PTYPE_MASK):
 708                                 cpu_to_le16(hdev->pkt_type & SCO_PTYPE_MASK);
 709
 710                         hci_send_cmd(hdev, HCI_OP_CHANGE_CONN_PTYPE, sizeof(cp), &cp);
 711                 } else {
 712                         /* Update disconnect timer */
 713                         hci_conn_hold(conn);
 714                         hci_conn_put(conn);
 715                 }
 716         } else
 717                 conn->state = BT_CLOSED;
 718
 719         if (conn->type == ACL_LINK) {
 720                 struct hci_conn *sco = conn->link;
 721                 if (sco) {
 722                         if (!ev->status) {
 723                                 if (lmp_esco_capable(hdev))
 724                                         hci_setup_sync(sco, conn->handle);
 725                                 else
 726                                         hci_add_sco(sco, conn->handle);
 727                         } else {
 728                                 hci_proto_connect_cfm(sco, ev->status);
 729                                 hci_conn_del(sco);
 730                         }
 731                 }
 732         }
 733
 734         hci_proto_connect_cfm(conn, ev->status);
 735         if (ev->status)
 736                 hci_conn_del(conn);
 737
 738 unlock:
 739         hci_dev_unlock(hdev);
 740
 741         hci_conn_check_pending(hdev);
 742 }
 743
 744 static inline void hci_conn_request_evt(struct hci_dev *hdev, struct sk_buff *skb)
 745 {
 746         struct hci_ev_conn_request *ev = (void *) skb->data;
 747         int mask = hdev->link_mode;
 748
 749         BT_DBG("%s bdaddr %s type 0x%x", hdev->name,
 750                                         batostr(&ev->bdaddr), ev->link_type);
 751
 752         mask |= hci_proto_connect_ind(hdev, &ev->bdaddr, ev->link_type);
 753
 754         if (mask & HCI_LM_ACCEPT) {
 755                 /* Connection accepted */
 756                 struct hci_conn *conn;
 757
 758                 hci_dev_lock(hdev);
 759
 760                 conn = hci_conn_hash_lookup_ba(hdev, ev->link_type, &ev->bdaddr);
 761                 if (!conn) {
 762                         if (!(conn = hci_conn_add(hdev, ev->link_type, &ev->bdaddr))) {
 763                                 BT_ERR("No memmory for new connection");
 764                                 hci_dev_unlock(hdev);
 765                                 return;
 766                         }
 767                 }
 768
 769                 memcpy(conn->dev_class, ev->dev_class, 3);
 770                 conn->state = BT_CONNECT;
 771
 772                 hci_dev_unlock(hdev);
 773
 774                 if (ev->link_type == ACL_LINK || !lmp_esco_capable(hdev)) {
 775                         struct hci_cp_accept_conn_req cp;
 776
 777                         bacpy(&cp.bdaddr, &ev->bdaddr);
 778
 779                         if (lmp_rswitch_capable(hdev) && (mask & HCI_LM_MASTER))
 780                                 cp.role = 0x00; /* Become master */
 781                         else
 782                                 cp.role = 0x01; /* Remain slave */
 783
 784                         hci_send_cmd(hdev, HCI_OP_ACCEPT_CONN_REQ,
 785                                                         sizeof(cp), &cp);
 786                 } else {
 787                         struct hci_cp_accept_sync_conn_req cp;
 788
 789                         bacpy(&cp.bdaddr, &ev->bdaddr);
 790                         cp.pkt_type = cpu_to_le16(hdev->esco_type);
 791
 792                         cp.tx_bandwidth   = cpu_to_le32(0x00001f40);
 793                         cp.rx_bandwidth   = cpu_to_le32(0x00001f40);
 794                         cp.max_latency    = cpu_to_le16(0xffff);
 795                         cp.content_format = cpu_to_le16(hdev->voice_setting);
 796                         cp.retrans_effort = 0xff;
 797
 798                         hci_send_cmd(hdev, HCI_OP_ACCEPT_SYNC_CONN_REQ,
 799                                                         sizeof(cp), &cp);
 800                 }
 801         } else {
 802                 /* Connection rejected */
 803                 struct hci_cp_reject_conn_req cp;
 804
 805                 bacpy(&cp.bdaddr, &ev->bdaddr);
 806                 cp.reason = 0x0f;
 807                 hci_send_cmd(hdev, HCI_OP_REJECT_CONN_REQ, sizeof(cp), &cp);
 808         }
 809 }
 810
 811 static inline void hci_disconn_complete_evt(struct hci_dev *hdev, struct sk_buff *skb)
 812 {
 813         struct hci_ev_disconn_complete *ev = (void *) skb->data;
 814         struct hci_conn *conn;
 815
 816         BT_DBG("%s status %d", hdev->name, ev->status);
 817
 818         if (ev->status)
 819                 return;
 820
 821         hci_dev_lock(hdev);
 822
 823         conn = hci_conn_hash_lookup_handle(hdev, __le16_to_cpu(ev->handle));
 824         if (conn) {
 825                 conn->state = BT_CLOSED;
 826                 hci_proto_disconn_ind(conn, ev->reason);
 827                 hci_conn_del(conn);
 828         }
 829
 830         hci_dev_unlock(hdev);
 831 }
 832
 833 static inline void hci_auth_complete_evt(struct hci_dev *hdev, struct sk_buff *skb)
 834 {
 835         struct hci_ev_auth_complete *ev = (void *) skb->data;
 836         struct hci_conn *conn;
 837
 838         BT_DBG("%s status %d", hdev->name, ev->status);
 839
 840         hci_dev_lock(hdev);
 841
 842         conn = hci_conn_hash_lookup_handle(hdev, __le16_to_cpu(ev->handle));
 843         if (conn) {
 844                 if (!ev->status)
 845                         conn->link_mode |= HCI_LM_AUTH;
 846
 847                 clear_bit(HCI_CONN_AUTH_PEND, &conn->pend);
 848
 849                 hci_auth_cfm(conn, ev->status);
 850
 851                 if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->pend)) {
 852                         if (!ev->status) {
 853                                 struct hci_cp_set_conn_encrypt cp;
 854                                 cp.handle  = cpu_to_le16(conn->handle);
 855                                 cp.encrypt = 1;
 856                                 hci_send_cmd(conn->hdev,
 857                                         HCI_OP_SET_CONN_ENCRYPT, sizeof(cp), &cp);
 858                         } else {
 859                                 clear_bit(HCI_CONN_ENCRYPT_PEND, &conn->pend);
 860                                 hci_encrypt_cfm(conn, ev->status, 0x00);
 861                         }
 862                 }
 863         }
 864
 865         hci_dev_unlock(hdev);
 866 }
 867
 868 static inline void hci_remote_name_evt(struct hci_dev *hdev, struct sk_buff *skb)
 869 {
 870         BT_DBG("%s", hdev->name);
 871
 872         hci_conn_check_pending(hdev);
 873 }
 874
 875 static inline void hci_encrypt_change_evt(struct hci_dev *hdev, struct sk_buff *skb)
 876 {
 877         struct hci_ev_encrypt_change *ev = (void *) skb->data;
 878         struct hci_conn *conn;
 879
 880         BT_DBG("%s status %d", hdev->name, ev->status);
 881
 882         hci_dev_lock(hdev);
 883
 884         conn = hci_conn_hash_lookup_handle(hdev, __le16_to_cpu(ev->handle));
 885         if (conn) {
 886                 if (!ev->status) {
 887                         if (ev->encrypt)
 888                                 conn->link_mode |= HCI_LM_ENCRYPT;
 889                         else
 890                                 conn->link_mode &= ~HCI_LM_ENCRYPT;
 891                 }
 892
 893                 clear_bit(HCI_CONN_ENCRYPT_PEND, &conn->pend);
 894
 895                 hci_encrypt_cfm(conn, ev->status, ev->encrypt);
 896         }
 897
 898         hci_dev_unlock(hdev);
 899 }
 900
 901 static inline void hci_change_link_key_complete_evt(struct hci_dev *hdev, struct sk_buff *skb)
 902 {
 903         struct hci_ev_change_link_key_complete *ev = (void *) skb->data;
 904         struct hci_conn *conn;
 905
 906         BT_DBG("%s status %d", hdev->name, ev->status);
 907
 908         hci_dev_lock(hdev);
 909
 910         conn = hci_conn_hash_lookup_handle(hdev, __le16_to_cpu(ev->handle));
 911         if (conn) {
 912                 if (!ev->status)
 913                         conn->link_mode |= HCI_LM_SECURE;
 914
 915                 clear_bit(HCI_CONN_AUTH_PEND, &conn->pend);
 916
 917                 hci_key_change_cfm(conn, ev->status);
 918         }
 919
 920         hci_dev_unlock(hdev);
 921 }
 922
 923 static inline void hci_remote_features_evt(struct hci_dev *hdev, struct sk_buff *skb)
 924 {
 925         struct hci_ev_remote_features *ev = (void *) skb->data;
 926         struct hci_conn *conn;
 927
 928         BT_DBG("%s status %d", hdev->name, ev->status);
 929
 930         if (ev->status)
 931                 return;
 932
 933         hci_dev_lock(hdev);
 934
 935         conn = hci_conn_hash_lookup_handle(hdev, __le16_to_cpu(ev->handle));
 936         if (conn)
 937                 memcpy(conn->features, ev->features, 8);
 938
 939         hci_dev_unlock(hdev);
 940 }
 941
 942 static inline void hci_remote_version_evt(struct hci_dev *hdev, struct sk_buff *skb)
 943 {
 944         BT_DBG("%s", hdev->name);
 945 }
 946
 947 static inline void hci_qos_setup_complete_evt(struct hci_dev *hdev, struct sk_buff *skb)
 948 {
 949         BT_DBG("%s", hdev->name);
 950 }
 951
 952 static inline void hci_cmd_complete_evt(struct hci_dev *hdev, struct sk_buff *skb)
 953 {
 954         struct hci_ev_cmd_complete *ev = (void *) skb->data;
 955         __u16 opcode;
 956
 957         skb_pull(skb, sizeof(*ev));
 958
 959         opcode = __le16_to_cpu(ev->opcode);
 960
 961         switch (opcode) {
 962         case HCI_OP_INQUIRY_CANCEL:
 963                 hci_cc_inquiry_cancel(hdev, skb);
 964                 break;
 965
 966         case HCI_OP_EXIT_PERIODIC_INQ:
 967                 hci_cc_exit_periodic_inq(hdev, skb);
 968                 break;
 969
 970         case HCI_OP_REMOTE_NAME_REQ_CANCEL:
 971                 hci_cc_remote_name_req_cancel(hdev, skb);
 972                 break;
 973
 974         case HCI_OP_ROLE_DISCOVERY:
 975                 hci_cc_role_discovery(hdev, skb);
 976                 break;
 977
 978         case HCI_OP_WRITE_LINK_POLICY:
 979                 hci_cc_write_link_policy(hdev, skb);
 980                 break;
 981
 982         case HCI_OP_RESET:
 983                 hci_cc_reset(hdev, skb);
 984                 break;
 985
 986         case HCI_OP_WRITE_LOCAL_NAME:
 987                 hci_cc_write_local_name(hdev, skb);
 988                 break;
 989
 990         case HCI_OP_READ_LOCAL_NAME:
 991                 hci_cc_read_local_name(hdev, skb);
 992                 break;
 993
 994         case HCI_OP_WRITE_AUTH_ENABLE:
 995                 hci_cc_write_auth_enable(hdev, skb);
 996                 break;
 997
 998         case HCI_OP_WRITE_ENCRYPT_MODE:
 999                 hci_cc_write_encrypt_mode(hdev, skb);
1000                 break;
1001
1002         case HCI_OP_WRITE_SCAN_ENABLE:
1003                 hci_cc_write_scan_enable(hdev, skb);
1004                 break;
1005
1006         case HCI_OP_READ_CLASS_OF_DEV:
1007                 hci_cc_read_class_of_dev(hdev, skb);
1008                 break;
1009
1010         case HCI_OP_WRITE_CLASS_OF_DEV:
1011                 hci_cc_write_class_of_dev(hdev, skb);
1012                 break;
1013
1014         case HCI_OP_READ_VOICE_SETTING:
1015                 hci_cc_read_voice_setting(hdev, skb);
1016                 break;
1017
1018         case HCI_OP_WRITE_VOICE_SETTING:
1019                 hci_cc_write_voice_setting(hdev, skb);
1020                 break;
1021
1022         case HCI_OP_HOST_BUFFER_SIZE:
1023                 hci_cc_host_buffer_size(hdev, skb);
1024                 break;
1025
1026         case HCI_OP_READ_LOCAL_VERSION:
1027                 hci_cc_read_local_version(hdev, skb);
1028                 break;
1029
1030         case HCI_OP_READ_LOCAL_COMMANDS:
1031                 hci_cc_read_local_commands(hdev, skb);
1032                 break;
1033
1034         case HCI_OP_READ_LOCAL_FEATURES:
1035                 hci_cc_read_local_features(hdev, skb);
1036                 break;
1037
1038         case HCI_OP_READ_BUFFER_SIZE:
1039                 hci_cc_read_buffer_size(hdev, skb);
1040                 break;
1041
1042         case HCI_OP_READ_BD_ADDR:
1043                 hci_cc_read_bd_addr(hdev, skb);
1044                 break;
1045
1046         default:
1047                 BT_DBG("%s opcode 0x%x", hdev->name, opcode);
1048                 break;
1049         }
1050
1051         if (ev->ncmd) {
1052                 atomic_set(&hdev->cmd_cnt, 1);
1053                 if (!skb_queue_empty(&hdev->cmd_q))
1054                         hci_sched_cmd(hdev);
1055         }
1056 }
1057
1058 static inline void hci_cmd_status_evt(struct hci_dev *hdev, struct sk_buff *skb)
1059 {
1060         struct hci_ev_cmd_status *ev = (void *) skb->data;
1061         __u16 opcode;
1062
1063         skb_pull(skb, sizeof(*ev));
1064
1065         opcode = __le16_to_cpu(ev->opcode);
1066
1067         switch (opcode) {
1068         case HCI_OP_INQUIRY:
1069                 hci_cs_inquiry(hdev, ev->status);
1070                 break;
1071
1072         case HCI_OP_CREATE_CONN:
1073                 hci_cs_create_conn(hdev, ev->status);
1074                 break;
1075
1076         case HCI_OP_ADD_SCO:
1077                 hci_cs_add_sco(hdev, ev->status);
1078                 break;
1079
1080         case HCI_OP_REMOTE_NAME_REQ:
1081                 hci_cs_remote_name_req(hdev, ev->status);
1082                 break;
1083
1084         case HCI_OP_SETUP_SYNC_CONN:
1085                 hci_cs_setup_sync_conn(hdev, ev->status);
1086                 break;
1087
1088         case HCI_OP_SNIFF_MODE:
1089                 hci_cs_sniff_mode(hdev, ev->status);
1090                 break;
1091
1092         case HCI_OP_EXIT_SNIFF_MODE:
1093                 hci_cs_exit_sniff_mode(hdev, ev->status);
1094                 break;
1095
1096         default:
1097                 BT_DBG("%s opcode 0x%x", hdev->name, opcode);
1098                 break;
1099         }
1100
1101         if (ev->ncmd) {
1102                 atomic_set(&hdev->cmd_cnt, 1);
1103                 if (!skb_queue_empty(&hdev->cmd_q))
1104                         hci_sched_cmd(hdev);
1105         }
1106 }
1107
1108 static inline void hci_role_change_evt(struct hci_dev *hdev, struct sk_buff *skb)
1109 {
1110         struct hci_ev_role_change *ev = (void *) skb->data;
1111         struct hci_conn *conn;
1112
1113         BT_DBG("%s status %d", hdev->name, ev->status);
1114
1115         hci_dev_lock(hdev);
1116
1117         conn = hci_conn_hash_lookup_ba(hdev, ACL_LINK, &ev->bdaddr);
1118         if (conn) {
1119                 if (!ev->status) {
1120                         if (ev->role)
1121                                 conn->link_mode &= ~HCI_LM_MASTER;
1122                         else
1123                                 conn->link_mode |= HCI_LM_MASTER;
1124                 }
1125
1126                 clear_bit(HCI_CONN_RSWITCH_PEND, &conn->pend);
1127
1128                 hci_role_switch_cfm(conn, ev->status, ev->role);
1129         }
1130
1131         hci_dev_unlock(hdev);
1132 }
1133
1134 static inline void hci_num_comp_pkts_evt(struct hci_dev *hdev, struct sk_buff *skb)
1135 {
1136         struct hci_ev_num_comp_pkts *ev = (void *) skb->data;
1137         __le16 *ptr;
1138         int i;
1139
1140         skb_pull(skb, sizeof(*ev));
1141
1142         BT_DBG("%s num_hndl %d", hdev->name, ev->num_hndl);
1143
1144         if (skb->len < ev->num_hndl * 4) {
1145                 BT_DBG("%s bad parameters", hdev->name);
1146                 return;
1147         }
1148
1149         tasklet_disable(&hdev->tx_task);
1150
1151         for (i = 0, ptr = (__le16 *) skb->data; i < ev->num_hndl; i++) {
1152                 struct hci_conn *conn;
1153                 __u16  handle, count;
1154
1155                 handle = __le16_to_cpu(get_unaligned(ptr++));
1156                 count  = __le16_to_cpu(get_unaligned(ptr++));
1157
1158                 conn = hci_conn_hash_lookup_handle(hdev, handle);
1159                 if (conn) {
1160                         conn->sent -= count;
1161
1162                         if (conn->type == ACL_LINK) {
1163                                 if ((hdev->acl_cnt += count) > hdev->acl_pkts)
1164                                         hdev->acl_cnt = hdev->acl_pkts;
1165                         } else {
1166                                 if ((hdev->sco_cnt += count) > hdev->sco_pkts)
1167                                         hdev->sco_cnt = hdev->sco_pkts;
1168                         }
1169                 }
1170         }
1171
1172         hci_sched_tx(hdev);
1173
1174         tasklet_enable(&hdev->tx_task);
1175 }
1176
1177 static inline void hci_mode_change_evt(struct hci_dev *hdev, struct sk_buff *skb)
1178 {
1179         struct hci_ev_mode_change *ev = (void *) skb->data;
1180         struct hci_conn *conn;
1181
1182         BT_DBG("%s status %d", hdev->name, ev->status);
1183
1184         hci_dev_lock(hdev);
1185
1186         conn = hci_conn_hash_lookup_handle(hdev, __le16_to_cpu(ev->handle));
1187         if (conn) {
1188                 conn->mode = ev->mode;
1189                 conn->interval = __le16_to_cpu(ev->interval);
1190
1191                 if (!test_and_clear_bit(HCI_CONN_MODE_CHANGE_PEND, &conn->pend)) {
1192                         if (conn->mode == HCI_CM_ACTIVE)
1193                                 conn->power_save = 1;
1194                         else
1195                                 conn->power_save = 0;
1196                 }
1197         }
1198
1199         hci_dev_unlock(hdev);
1200 }
1201
1202 static inline void hci_pin_code_request_evt(struct hci_dev *hdev, struct sk_buff *skb)
1203 {
1204         BT_DBG("%s", hdev->name);
1205 }
1206
1207 static inline void hci_link_key_request_evt(struct hci_dev *hdev, struct sk_buff *skb)
1208 {
1209         BT_DBG("%s", hdev->name);
1210 }
1211
1212 static inline void hci_link_key_notify_evt(struct hci_dev *hdev, struct sk_buff *skb)
1213 {
1214         BT_DBG("%s", hdev->name);
1215 }
1216
1217 static inline void hci_clock_offset_evt(struct hci_dev *hdev, struct sk_buff *skb)
1218 {
1219         struct hci_ev_clock_offset *ev = (void *) skb->data;
1220         struct hci_conn *conn;
1221
1222         BT_DBG("%s status %d", hdev->name, ev->status);
1223
1224         hci_dev_lock(hdev);
1225
1226         conn = hci_conn_hash_lookup_handle(hdev, __le16_to_cpu(ev->handle));
1227         if (conn && !ev->status) {
1228                 struct inquiry_entry *ie;
1229
1230                 if ((ie = hci_inquiry_cache_lookup(hdev, &conn->dst))) {
1231                         ie->data.clock_offset = ev->clock_offset;
1232                         ie->timestamp = jiffies;
1233                 }
1234         }
1235
1236         hci_dev_unlock(hdev);
1237 }
1238
1239 static inline void hci_pscan_rep_mode_evt(struct hci_dev *hdev, struct sk_buff *skb)
1240 {
1241         struct hci_ev_pscan_rep_mode *ev = (void *) skb->data;
1242         struct inquiry_entry *ie;
1243
1244         BT_DBG("%s", hdev->name);
1245
1246         hci_dev_lock(hdev);
1247
1248         if ((ie = hci_inquiry_cache_lookup(hdev, &ev->bdaddr))) {
1249                 ie->data.pscan_rep_mode = ev->pscan_rep_mode;
1250                 ie->timestamp = jiffies;
1251         }
1252
1253         hci_dev_unlock(hdev);
1254 }
1255
1256 static inline void hci_inquiry_result_with_rssi_evt(struct hci_dev *hdev, struct sk_buff *skb)
1257 {
1258         struct inquiry_data data;
1259         int num_rsp = *((__u8 *) skb->data);
1260
1261         BT_DBG("%s num_rsp %d", hdev->name, num_rsp);
1262
1263         if (!num_rsp)
1264                 return;
1265
1266         hci_dev_lock(hdev);
1267
1268         if ((skb->len - 1) / num_rsp != sizeof(struct inquiry_info_with_rssi)) {
1269                 struct inquiry_info_with_rssi_and_pscan_mode *info = (void *) (skb->data + 1);
1270
1271                 for (; num_rsp; num_rsp--) {
1272                         bacpy(&data.bdaddr, &info->bdaddr);
1273                         data.pscan_rep_mode     = info->pscan_rep_mode;
1274                         data.pscan_period_mode  = info->pscan_period_mode;
1275                         data.pscan_mode         = info->pscan_mode;
1276                         memcpy(data.dev_class, info->dev_class, 3);
1277                         data.clock_offset       = info->clock_offset;
1278                         data.rssi               = info->rssi;
1279                         info++;
1280                         hci_inquiry_cache_update(hdev, &data);
1281                 }
1282         } else {
1283                 struct inquiry_info_with_rssi *info = (void *) (skb->data + 1);
1284
1285                 for (; num_rsp; num_rsp--) {
1286                         bacpy(&data.bdaddr, &info->bdaddr);
1287                         data.pscan_rep_mode     = info->pscan_rep_mode;
1288                         data.pscan_period_mode  = info->pscan_period_mode;
1289                         data.pscan_mode         = 0x00;
1290                         memcpy(data.dev_class, info->dev_class, 3);
1291                         data.clock_offset       = info->clock_offset;
1292                         data.rssi               = info->rssi;
1293                         info++;
1294                         hci_inquiry_cache_update(hdev, &data);
1295                 }
1296         }
1297
1298         hci_dev_unlock(hdev);
1299 }
1300
1301 static inline void hci_remote_ext_features_evt(struct hci_dev *hdev, struct sk_buff *skb)
1302 {
1303         BT_DBG("%s", hdev->name);
1304 }
1305
1306 static inline void hci_sync_conn_complete_evt(struct hci_dev *hdev, struct sk_buff *skb)
1307 {
1308         struct hci_ev_sync_conn_complete *ev = (void *) skb->data;
1309         struct hci_conn *conn;
1310
1311         BT_DBG("%s status %d", hdev->name, ev->status);
1312
1313         hci_dev_lock(hdev);
1314
1315         conn = hci_conn_hash_lookup_ba(hdev, ev->link_type, &ev->bdaddr);
1316         if (!conn)
1317                 goto unlock;
1318
1319         if (!ev->status) {
1320                 conn->handle = __le16_to_cpu(ev->handle);
1321                 conn->state  = BT_CONNECTED;
1322         } else
1323                 conn->state = BT_CLOSED;
1324
1325         hci_proto_connect_cfm(conn, ev->status);
1326         if (ev->status)
1327                 hci_conn_del(conn);
1328
1329 unlock:
1330         hci_dev_unlock(hdev);
1331 }
1332
1333 static inline void hci_sync_conn_changed_evt(struct hci_dev *hdev, struct sk_buff *skb)
1334 {
1335         BT_DBG("%s", hdev->name);
1336 }
1337
1338 static inline void hci_sniff_subrate_evt(struct hci_dev *hdev, struct sk_buff *skb)
1339 {
1340         struct hci_ev_sniff_subrate *ev = (void *) skb->data;
1341         struct hci_conn *conn;
1342
1343         BT_DBG("%s status %d", hdev->name, ev->status);
1344
1345         hci_dev_lock(hdev);
1346
1347         conn = hci_conn_hash_lookup_handle(hdev, __le16_to_cpu(ev->handle));
1348         if (conn) {
1349         }
1350
1351         hci_dev_unlock(hdev);
1352 }
1353
1354 static inline void hci_extended_inquiry_result_evt(struct hci_dev *hdev, struct sk_buff *skb)
1355 {
1356         struct inquiry_data data;
1357         struct extended_inquiry_info *info = (void *) (skb->data + 1);
1358         int num_rsp = *((__u8 *) skb->data);
1359
1360         BT_DBG("%s num_rsp %d", hdev->name, num_rsp);
1361
1362         if (!num_rsp)
1363                 return;
1364
1365         hci_dev_lock(hdev);
1366
1367         for (; num_rsp; num_rsp--) {
1368                 bacpy(&data.bdaddr, &info->bdaddr);
1369                 data.pscan_rep_mode     = info->pscan_rep_mode;
1370                 data.pscan_period_mode  = info->pscan_period_mode;
1371                 data.pscan_mode         = 0x00;
1372                 memcpy(data.dev_class, info->dev_class, 3);
1373                 data.clock_offset       = info->clock_offset;
1374                 data.rssi               = info->rssi;
1375                 info++;
1376                 hci_inquiry_cache_update(hdev, &data);
1377         }
1378
1379         hci_dev_unlock(hdev);
1380 }
1381
1382 void hci_event_packet(struct hci_dev *hdev, struct sk_buff *skb)
1383 {
1384         struct hci_event_hdr *hdr = (void *) skb->data;
1385         __u8 event = hdr->evt;
1386
1387         skb_pull(skb, HCI_EVENT_HDR_SIZE);
1388
1389         switch (event) {
1390         case HCI_EV_INQUIRY_COMPLETE:
1391                 hci_inquiry_complete_evt(hdev, skb);
1392                 break;
1393
1394         case HCI_EV_INQUIRY_RESULT:
1395                 hci_inquiry_result_evt(hdev, skb);
1396                 break;
1397
1398         case HCI_EV_CONN_COMPLETE:
1399                 hci_conn_complete_evt(hdev, skb);
1400                 break;
1401
1402         case HCI_EV_CONN_REQUEST:
1403                 hci_conn_request_evt(hdev, skb);
1404                 break;
1405
1406         case HCI_EV_DISCONN_COMPLETE:
1407                 hci_disconn_complete_evt(hdev, skb);
1408                 break;
1409
1410         case HCI_EV_AUTH_COMPLETE:
1411                 hci_auth_complete_evt(hdev, skb);
1412                 break;
1413
1414         case HCI_EV_REMOTE_NAME:
1415                 hci_remote_name_evt(hdev, skb);
1416                 break;
1417
1418         case HCI_EV_ENCRYPT_CHANGE:
1419                 hci_encrypt_change_evt(hdev, skb);
1420                 break;
1421
1422         case HCI_EV_CHANGE_LINK_KEY_COMPLETE:
1423                 hci_change_link_key_complete_evt(hdev, skb);
1424                 break;
1425
1426         case HCI_EV_REMOTE_FEATURES:
1427                 hci_remote_features_evt(hdev, skb);
1428                 break;
1429
1430         case HCI_EV_REMOTE_VERSION:
1431                 hci_remote_version_evt(hdev, skb);
1432                 break;
1433
1434         case HCI_EV_QOS_SETUP_COMPLETE:
1435                 hci_qos_setup_complete_evt(hdev, skb);
1436                 break;
1437
1438         case HCI_EV_CMD_COMPLETE:
1439                 hci_cmd_complete_evt(hdev, skb);
1440                 break;
1441
1442         case HCI_EV_CMD_STATUS:
1443                 hci_cmd_status_evt(hdev, skb);
1444                 break;
1445
1446         case HCI_EV_ROLE_CHANGE:
1447                 hci_role_change_evt(hdev, skb);
1448                 break;
1449
1450         case HCI_EV_NUM_COMP_PKTS:
1451                 hci_num_comp_pkts_evt(hdev, skb);
1452                 break;
1453
1454         case HCI_EV_MODE_CHANGE:
1455                 hci_mode_change_evt(hdev, skb);
1456                 break;
1457
1458         case HCI_EV_PIN_CODE_REQ:
1459                 hci_pin_code_request_evt(hdev, skb);
1460                 break;
1461
1462         case HCI_EV_LINK_KEY_REQ:
1463                 hci_link_key_request_evt(hdev, skb);
1464                 break;
1465
1466         case HCI_EV_LINK_KEY_NOTIFY:
1467                 hci_link_key_notify_evt(hdev, skb);
1468                 break;
1469
1470         case HCI_EV_CLOCK_OFFSET:
1471                 hci_clock_offset_evt(hdev, skb);
1472                 break;
1473
1474         case HCI_EV_PSCAN_REP_MODE:
1475                 hci_pscan_rep_mode_evt(hdev, skb);
1476                 break;
1477
1478         case HCI_EV_INQUIRY_RESULT_WITH_RSSI:
1479                 hci_inquiry_result_with_rssi_evt(hdev, skb);
1480                 break;
1481
1482         case HCI_EV_REMOTE_EXT_FEATURES:
1483                 hci_remote_ext_features_evt(hdev, skb);
1484                 break;
1485
1486         case HCI_EV_SYNC_CONN_COMPLETE:
1487                 hci_sync_conn_complete_evt(hdev, skb);
1488                 break;
1489
1490         case HCI_EV_SYNC_CONN_CHANGED:
1491                 hci_sync_conn_changed_evt(hdev, skb);
1492                 break;
1493
1494         case HCI_EV_SNIFF_SUBRATE:
1495                 hci_sniff_subrate_evt(hdev, skb);
1496                 break;
1497
1498         case HCI_EV_EXTENDED_INQUIRY_RESULT:
1499                 hci_extended_inquiry_result_evt(hdev, skb);
1500                 break;
1501
1502         default:
1503                 BT_DBG("%s event 0x%x", hdev->name, event);
1504                 break;
1505         }
1506
1507         kfree_skb(skb);
1508         hdev->stat.evt_rx++;
1509 }
1510
1511 /* Generate internal stack event */
1512 void hci_si_event(struct hci_dev *hdev, int type, int dlen, void *data)
1513 {
1514         struct hci_event_hdr *hdr;
1515         struct hci_ev_stack_internal *ev;
1516         struct sk_buff *skb;
1517
1518         skb = bt_skb_alloc(HCI_EVENT_HDR_SIZE + sizeof(*ev) + dlen, GFP_ATOMIC);
1519         if (!skb)
1520                 return;
1521
1522         hdr = (void *) skb_put(skb, HCI_EVENT_HDR_SIZE);
1523         hdr->evt  = HCI_EV_STACK_INTERNAL;
1524         hdr->plen = sizeof(*ev) + dlen;
1525
1526         ev  = (void *) skb_put(skb, sizeof(*ev) + dlen);
1527         ev->type = type;
1528         memcpy(ev->data, data, dlen);
1529
1530         bt_cb(skb)->incoming = 1;
1531         __net_timestamp(skb);
1532
1533         bt_cb(skb)->pkt_type = HCI_EVENT_PKT;
1534         skb->dev = (void *) hdev;
1535         hci_send_to_sock(hdev, skb);
1536         kfree_skb(skb);
1537 }