1 /* 2 Copyright (c) 2013-2014 Intel Corp. 3 4 This program is free software; you can redistribute it and/or modify 5 it under the terms of the GNU General Public License version 2 and 6 only version 2 as published by the Free Software Foundation. 7 8 This program is distributed in the hope that it will be useful, 9 but WITHOUT ANY WARRANTY; without even the implied warranty of 10 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 11 GNU General Public License for more details. 12 */ 13 14 #include <linux/if_arp.h> 15 #include <linux/netdevice.h> 16 #include <linux/etherdevice.h> 17 #include <linux/module.h> 18 #include <linux/debugfs.h> 19 20 #include <net/ipv6.h> 21 #include <net/ip6_route.h> 22 #include <net/addrconf.h> 23 24 #include <net/bluetooth/bluetooth.h> 25 #include <net/bluetooth/hci_core.h> 26 #include <net/bluetooth/l2cap.h> 27 28 #include <net/6lowpan.h> /* for the compression support */ 29 30 #define VERSION "0.1" 31 32 static struct dentry *lowpan_enable_debugfs; 33 static struct dentry *lowpan_control_debugfs; 34 35 #define IFACE_NAME_TEMPLATE "bt%d" 36 37 struct skb_cb { 38 struct in6_addr addr; 39 struct in6_addr gw; 40 struct l2cap_chan *chan; 41 int status; 42 }; 43 #define lowpan_cb(skb) ((struct skb_cb *)((skb)->cb)) 44 45 /* The devices list contains those devices that we are acting 46 * as a proxy. The BT 6LoWPAN device is a virtual device that 47 * connects to the Bluetooth LE device. The real connection to 48 * BT device is done via l2cap layer. There exists one 49 * virtual device / one BT 6LoWPAN network (=hciX device). 50 * The list contains struct lowpan_dev elements. 51 */ 52 static LIST_HEAD(bt_6lowpan_devices); 53 static DEFINE_SPINLOCK(devices_lock); 54 55 static bool enable_6lowpan; 56 57 /* We are listening incoming connections via this channel 58 */ 59 static struct l2cap_chan *listen_chan; 60 61 struct lowpan_peer { 62 struct list_head list; 63 struct rcu_head rcu; 64 struct l2cap_chan *chan; 65 66 /* peer addresses in various formats */ 67 unsigned char eui64_addr[EUI64_ADDR_LEN]; 68 struct in6_addr peer_addr; 69 }; 70 71 struct lowpan_btle_dev { 72 struct list_head list; 73 74 struct hci_dev *hdev; 75 struct net_device *netdev; 76 struct list_head peers; 77 atomic_t peer_count; /* number of items in peers list */ 78 79 struct work_struct delete_netdev; 80 struct delayed_work notify_peers; 81 }; 82 83 static inline struct lowpan_btle_dev * 84 lowpan_btle_dev(const struct net_device *netdev) 85 { 86 return (struct lowpan_btle_dev *)lowpan_dev(netdev)->priv; 87 } 88 89 static inline void peer_add(struct lowpan_btle_dev *dev, 90 struct lowpan_peer *peer) 91 { 92 list_add_rcu(&peer->list, &dev->peers); 93 atomic_inc(&dev->peer_count); 94 } 95 96 static inline bool peer_del(struct lowpan_btle_dev *dev, 97 struct lowpan_peer *peer) 98 { 99 list_del_rcu(&peer->list); 100 kfree_rcu(peer, rcu); 101 102 module_put(THIS_MODULE); 103 104 if (atomic_dec_and_test(&dev->peer_count)) { 105 BT_DBG("last peer"); 106 return true; 107 } 108 109 return false; 110 } 111 112 static inline struct lowpan_peer *peer_lookup_ba(struct lowpan_btle_dev *dev, 113 bdaddr_t *ba, __u8 type) 114 { 115 struct lowpan_peer *peer; 116 117 BT_DBG("peers %d addr %pMR type %d", atomic_read(&dev->peer_count), 118 ba, type); 119 120 rcu_read_lock(); 121 122 list_for_each_entry_rcu(peer, &dev->peers, list) { 123 BT_DBG("dst addr %pMR dst type %d", 124 &peer->chan->dst, peer->chan->dst_type); 125 126 if (bacmp(&peer->chan->dst, ba)) 127 continue; 128 129 if (type == peer->chan->dst_type) { 130 rcu_read_unlock(); 131 return peer; 132 } 133 } 134 135 rcu_read_unlock(); 136 137 return NULL; 138 } 139 140 static inline struct lowpan_peer * 141 __peer_lookup_chan(struct lowpan_btle_dev *dev, struct l2cap_chan *chan) 142 { 143 struct lowpan_peer *peer; 144 145 list_for_each_entry_rcu(peer, &dev->peers, list) { 146 if (peer->chan == chan) 147 return peer; 148 } 149 150 return NULL; 151 } 152 153 static inline struct lowpan_peer * 154 __peer_lookup_conn(struct lowpan_btle_dev *dev, struct l2cap_conn *conn) 155 { 156 struct lowpan_peer *peer; 157 158 list_for_each_entry_rcu(peer, &dev->peers, list) { 159 if (peer->chan->conn == conn) 160 return peer; 161 } 162 163 return NULL; 164 } 165 166 static inline struct lowpan_peer *peer_lookup_dst(struct lowpan_btle_dev *dev, 167 struct in6_addr *daddr, 168 struct sk_buff *skb) 169 { 170 struct lowpan_peer *peer; 171 struct in6_addr *nexthop; 172 struct rt6_info *rt = (struct rt6_info *)skb_dst(skb); 173 int count = atomic_read(&dev->peer_count); 174 175 BT_DBG("peers %d addr %pI6c rt %p", count, daddr, rt); 176 177 /* If we have multiple 6lowpan peers, then check where we should 178 * send the packet. If only one peer exists, then we can send the 179 * packet right away. 180 */ 181 if (count == 1) { 182 rcu_read_lock(); 183 peer = list_first_or_null_rcu(&dev->peers, struct lowpan_peer, 184 list); 185 rcu_read_unlock(); 186 return peer; 187 } 188 189 if (!rt) { 190 nexthop = &lowpan_cb(skb)->gw; 191 192 if (ipv6_addr_any(nexthop)) 193 return NULL; 194 } else { 195 nexthop = rt6_nexthop(rt, daddr); 196 197 /* We need to remember the address because it is needed 198 * by bt_xmit() when sending the packet. In bt_xmit(), the 199 * destination routing info is not set. 200 */ 201 memcpy(&lowpan_cb(skb)->gw, nexthop, sizeof(struct in6_addr)); 202 } 203 204 BT_DBG("gw %pI6c", nexthop); 205 206 rcu_read_lock(); 207 208 list_for_each_entry_rcu(peer, &dev->peers, list) { 209 BT_DBG("dst addr %pMR dst type %d ip %pI6c", 210 &peer->chan->dst, peer->chan->dst_type, 211 &peer->peer_addr); 212 213 if (!ipv6_addr_cmp(&peer->peer_addr, nexthop)) { 214 rcu_read_unlock(); 215 return peer; 216 } 217 } 218 219 rcu_read_unlock(); 220 221 return NULL; 222 } 223 224 static struct lowpan_peer *lookup_peer(struct l2cap_conn *conn) 225 { 226 struct lowpan_btle_dev *entry; 227 struct lowpan_peer *peer = NULL; 228 229 rcu_read_lock(); 230 231 list_for_each_entry_rcu(entry, &bt_6lowpan_devices, list) { 232 peer = __peer_lookup_conn(entry, conn); 233 if (peer) 234 break; 235 } 236 237 rcu_read_unlock(); 238 239 return peer; 240 } 241 242 static struct lowpan_btle_dev *lookup_dev(struct l2cap_conn *conn) 243 { 244 struct lowpan_btle_dev *entry; 245 struct lowpan_btle_dev *dev = NULL; 246 247 rcu_read_lock(); 248 249 list_for_each_entry_rcu(entry, &bt_6lowpan_devices, list) { 250 if (conn->hcon->hdev == entry->hdev) { 251 dev = entry; 252 break; 253 } 254 } 255 256 rcu_read_unlock(); 257 258 return dev; 259 } 260 261 static int give_skb_to_upper(struct sk_buff *skb, struct net_device *dev) 262 { 263 struct sk_buff *skb_cp; 264 265 skb_cp = skb_copy(skb, GFP_ATOMIC); 266 if (!skb_cp) 267 return NET_RX_DROP; 268 269 return netif_rx_ni(skb_cp); 270 } 271 272 static int iphc_decompress(struct sk_buff *skb, struct net_device *netdev, 273 struct l2cap_chan *chan) 274 { 275 const u8 *saddr, *daddr; 276 struct lowpan_btle_dev *dev; 277 struct lowpan_peer *peer; 278 279 dev = lowpan_btle_dev(netdev); 280 281 rcu_read_lock(); 282 peer = __peer_lookup_chan(dev, chan); 283 rcu_read_unlock(); 284 if (!peer) 285 return -EINVAL; 286 287 saddr = peer->eui64_addr; 288 daddr = dev->netdev->dev_addr; 289 290 return lowpan_header_decompress(skb, netdev, daddr, saddr); 291 } 292 293 static int recv_pkt(struct sk_buff *skb, struct net_device *dev, 294 struct l2cap_chan *chan) 295 { 296 struct sk_buff *local_skb; 297 int ret; 298 299 if (!netif_running(dev)) 300 goto drop; 301 302 if (dev->type != ARPHRD_6LOWPAN || !skb->len) 303 goto drop; 304 305 skb_reset_network_header(skb); 306 307 skb = skb_share_check(skb, GFP_ATOMIC); 308 if (!skb) 309 goto drop; 310 311 /* check that it's our buffer */ 312 if (lowpan_is_ipv6(*skb_network_header(skb))) { 313 /* Pull off the 1-byte of 6lowpan header. */ 314 skb_pull(skb, 1); 315 316 /* Copy the packet so that the IPv6 header is 317 * properly aligned. 318 */ 319 local_skb = skb_copy_expand(skb, NET_SKB_PAD - 1, 320 skb_tailroom(skb), GFP_ATOMIC); 321 if (!local_skb) 322 goto drop; 323 324 local_skb->protocol = htons(ETH_P_IPV6); 325 local_skb->pkt_type = PACKET_HOST; 326 local_skb->dev = dev; 327 328 skb_set_transport_header(local_skb, sizeof(struct ipv6hdr)); 329 330 if (give_skb_to_upper(local_skb, dev) != NET_RX_SUCCESS) { 331 kfree_skb(local_skb); 332 goto drop; 333 } 334 335 dev->stats.rx_bytes += skb->len; 336 dev->stats.rx_packets++; 337 338 consume_skb(local_skb); 339 consume_skb(skb); 340 } else if (lowpan_is_iphc(*skb_network_header(skb))) { 341 local_skb = skb_clone(skb, GFP_ATOMIC); 342 if (!local_skb) 343 goto drop; 344 345 local_skb->dev = dev; 346 347 ret = iphc_decompress(local_skb, dev, chan); 348 if (ret < 0) { 349 kfree_skb(local_skb); 350 goto drop; 351 } 352 353 local_skb->protocol = htons(ETH_P_IPV6); 354 local_skb->pkt_type = PACKET_HOST; 355 356 if (give_skb_to_upper(local_skb, dev) 357 != NET_RX_SUCCESS) { 358 kfree_skb(local_skb); 359 goto drop; 360 } 361 362 dev->stats.rx_bytes += skb->len; 363 dev->stats.rx_packets++; 364 365 consume_skb(local_skb); 366 consume_skb(skb); 367 } else { 368 goto drop; 369 } 370 371 return NET_RX_SUCCESS; 372 373 drop: 374 dev->stats.rx_dropped++; 375 return NET_RX_DROP; 376 } 377 378 /* Packet from BT LE device */ 379 static int chan_recv_cb(struct l2cap_chan *chan, struct sk_buff *skb) 380 { 381 struct lowpan_btle_dev *dev; 382 struct lowpan_peer *peer; 383 int err; 384 385 peer = lookup_peer(chan->conn); 386 if (!peer) 387 return -ENOENT; 388 389 dev = lookup_dev(chan->conn); 390 if (!dev || !dev->netdev) 391 return -ENOENT; 392 393 err = recv_pkt(skb, dev->netdev, chan); 394 if (err) { 395 BT_DBG("recv pkt %d", err); 396 err = -EAGAIN; 397 } 398 399 return err; 400 } 401 402 static u8 get_addr_type_from_eui64(u8 byte) 403 { 404 /* Is universal(0) or local(1) bit */ 405 return ((byte & 0x02) ? BDADDR_LE_RANDOM : BDADDR_LE_PUBLIC); 406 } 407 408 static void copy_to_bdaddr(struct in6_addr *ip6_daddr, bdaddr_t *addr) 409 { 410 u8 *eui64 = ip6_daddr->s6_addr + 8; 411 412 addr->b[0] = eui64[7]; 413 addr->b[1] = eui64[6]; 414 addr->b[2] = eui64[5]; 415 addr->b[3] = eui64[2]; 416 addr->b[4] = eui64[1]; 417 addr->b[5] = eui64[0]; 418 } 419 420 static void convert_dest_bdaddr(struct in6_addr *ip6_daddr, 421 bdaddr_t *addr, u8 *addr_type) 422 { 423 copy_to_bdaddr(ip6_daddr, addr); 424 425 /* We need to toggle the U/L bit that we got from IPv6 address 426 * so that we get the proper address and type of the BD address. 427 */ 428 addr->b[5] ^= 0x02; 429 430 *addr_type = get_addr_type_from_eui64(addr->b[5]); 431 } 432 433 static int setup_header(struct sk_buff *skb, struct net_device *netdev, 434 bdaddr_t *peer_addr, u8 *peer_addr_type) 435 { 436 struct in6_addr ipv6_daddr; 437 struct ipv6hdr *hdr; 438 struct lowpan_btle_dev *dev; 439 struct lowpan_peer *peer; 440 bdaddr_t addr, *any = BDADDR_ANY; 441 u8 *daddr = any->b; 442 int err, status = 0; 443 444 hdr = ipv6_hdr(skb); 445 446 dev = lowpan_btle_dev(netdev); 447 448 memcpy(&ipv6_daddr, &hdr->daddr, sizeof(ipv6_daddr)); 449 450 if (ipv6_addr_is_multicast(&ipv6_daddr)) { 451 lowpan_cb(skb)->chan = NULL; 452 } else { 453 u8 addr_type; 454 455 /* Get destination BT device from skb. 456 * If there is no such peer then discard the packet. 457 */ 458 convert_dest_bdaddr(&ipv6_daddr, &addr, &addr_type); 459 460 BT_DBG("dest addr %pMR type %d IP %pI6c", &addr, 461 addr_type, &ipv6_daddr); 462 463 peer = peer_lookup_ba(dev, &addr, addr_type); 464 if (!peer) { 465 /* The packet might be sent to 6lowpan interface 466 * because of routing (either via default route 467 * or user set route) so get peer according to 468 * the destination address. 469 */ 470 peer = peer_lookup_dst(dev, &ipv6_daddr, skb); 471 if (!peer) { 472 BT_DBG("no such peer %pMR found", &addr); 473 return -ENOENT; 474 } 475 } 476 477 daddr = peer->eui64_addr; 478 *peer_addr = addr; 479 *peer_addr_type = addr_type; 480 lowpan_cb(skb)->chan = peer->chan; 481 482 status = 1; 483 } 484 485 lowpan_header_compress(skb, netdev, daddr, dev->netdev->dev_addr); 486 487 err = dev_hard_header(skb, netdev, ETH_P_IPV6, NULL, NULL, 0); 488 if (err < 0) 489 return err; 490 491 return status; 492 } 493 494 static int header_create(struct sk_buff *skb, struct net_device *netdev, 495 unsigned short type, const void *_daddr, 496 const void *_saddr, unsigned int len) 497 { 498 if (type != ETH_P_IPV6) 499 return -EINVAL; 500 501 return 0; 502 } 503 504 /* Packet to BT LE device */ 505 static int send_pkt(struct l2cap_chan *chan, struct sk_buff *skb, 506 struct net_device *netdev) 507 { 508 struct msghdr msg; 509 struct kvec iv; 510 int err; 511 512 /* Remember the skb so that we can send EAGAIN to the caller if 513 * we run out of credits. 514 */ 515 chan->data = skb; 516 517 iv.iov_base = skb->data; 518 iv.iov_len = skb->len; 519 520 memset(&msg, 0, sizeof(msg)); 521 iov_iter_kvec(&msg.msg_iter, WRITE | ITER_KVEC, &iv, 1, skb->len); 522 523 err = l2cap_chan_send(chan, &msg, skb->len); 524 if (err > 0) { 525 netdev->stats.tx_bytes += err; 526 netdev->stats.tx_packets++; 527 return 0; 528 } 529 530 if (!err) 531 err = lowpan_cb(skb)->status; 532 533 if (err < 0) { 534 if (err == -EAGAIN) 535 netdev->stats.tx_dropped++; 536 else 537 netdev->stats.tx_errors++; 538 } 539 540 return err; 541 } 542 543 static int send_mcast_pkt(struct sk_buff *skb, struct net_device *netdev) 544 { 545 struct sk_buff *local_skb; 546 struct lowpan_btle_dev *entry; 547 int err = 0; 548 549 rcu_read_lock(); 550 551 list_for_each_entry_rcu(entry, &bt_6lowpan_devices, list) { 552 struct lowpan_peer *pentry; 553 struct lowpan_btle_dev *dev; 554 555 if (entry->netdev != netdev) 556 continue; 557 558 dev = lowpan_btle_dev(entry->netdev); 559 560 list_for_each_entry_rcu(pentry, &dev->peers, list) { 561 int ret; 562 563 local_skb = skb_clone(skb, GFP_ATOMIC); 564 565 BT_DBG("xmit %s to %pMR type %d IP %pI6c chan %p", 566 netdev->name, 567 &pentry->chan->dst, pentry->chan->dst_type, 568 &pentry->peer_addr, pentry->chan); 569 ret = send_pkt(pentry->chan, local_skb, netdev); 570 if (ret < 0) 571 err = ret; 572 573 kfree_skb(local_skb); 574 } 575 } 576 577 rcu_read_unlock(); 578 579 return err; 580 } 581 582 static netdev_tx_t bt_xmit(struct sk_buff *skb, struct net_device *netdev) 583 { 584 int err = 0; 585 bdaddr_t addr; 586 u8 addr_type; 587 588 /* We must take a copy of the skb before we modify/replace the ipv6 589 * header as the header could be used elsewhere 590 */ 591 skb = skb_unshare(skb, GFP_ATOMIC); 592 if (!skb) 593 return NET_XMIT_DROP; 594 595 /* Return values from setup_header() 596 * <0 - error, packet is dropped 597 * 0 - this is a multicast packet 598 * 1 - this is unicast packet 599 */ 600 err = setup_header(skb, netdev, &addr, &addr_type); 601 if (err < 0) { 602 kfree_skb(skb); 603 return NET_XMIT_DROP; 604 } 605 606 if (err) { 607 if (lowpan_cb(skb)->chan) { 608 BT_DBG("xmit %s to %pMR type %d IP %pI6c chan %p", 609 netdev->name, &addr, addr_type, 610 &lowpan_cb(skb)->addr, lowpan_cb(skb)->chan); 611 err = send_pkt(lowpan_cb(skb)->chan, skb, netdev); 612 } else { 613 err = -ENOENT; 614 } 615 } else { 616 /* We need to send the packet to every device behind this 617 * interface. 618 */ 619 err = send_mcast_pkt(skb, netdev); 620 } 621 622 dev_kfree_skb(skb); 623 624 if (err) 625 BT_DBG("ERROR: xmit failed (%d)", err); 626 627 return err < 0 ? NET_XMIT_DROP : err; 628 } 629 630 static struct lock_class_key bt_tx_busylock; 631 static struct lock_class_key bt_netdev_xmit_lock_key; 632 static struct lock_class_key bt_qdisc_running_key; 633 634 static void bt_set_lockdep_class_one(struct net_device *dev, 635 struct netdev_queue *txq, 636 void *_unused) 637 { 638 lockdep_set_class(&txq->_xmit_lock, &bt_netdev_xmit_lock_key); 639 } 640 641 static int bt_dev_init(struct net_device *dev) 642 { 643 netdev_for_each_tx_queue(dev, bt_set_lockdep_class_one, NULL); 644 dev->qdisc_tx_busylock = &bt_tx_busylock; 645 dev->qdisc_running_key = &bt_qdisc_running_key; 646 647 return 0; 648 } 649 650 static const struct net_device_ops netdev_ops = { 651 .ndo_init = bt_dev_init, 652 .ndo_start_xmit = bt_xmit, 653 }; 654 655 static struct header_ops header_ops = { 656 .create = header_create, 657 }; 658 659 static void netdev_setup(struct net_device *dev) 660 { 661 dev->hard_header_len = 0; 662 dev->needed_tailroom = 0; 663 dev->flags = IFF_RUNNING | IFF_POINTOPOINT | 664 IFF_MULTICAST; 665 dev->watchdog_timeo = 0; 666 667 dev->netdev_ops = &netdev_ops; 668 dev->header_ops = &header_ops; 669 dev->destructor = free_netdev; 670 } 671 672 static struct device_type bt_type = { 673 .name = "bluetooth", 674 }; 675 676 static void set_addr(u8 *eui, u8 *addr, u8 addr_type) 677 { 678 /* addr is the BT address in little-endian format */ 679 eui[0] = addr[5]; 680 eui[1] = addr[4]; 681 eui[2] = addr[3]; 682 eui[3] = 0xFF; 683 eui[4] = 0xFE; 684 eui[5] = addr[2]; 685 eui[6] = addr[1]; 686 eui[7] = addr[0]; 687 688 /* Universal/local bit set, BT 6lowpan draft ch. 3.2.1 */ 689 if (addr_type == BDADDR_LE_PUBLIC) 690 eui[0] &= ~0x02; 691 else 692 eui[0] |= 0x02; 693 694 BT_DBG("type %d addr %*phC", addr_type, 8, eui); 695 } 696 697 static void set_dev_addr(struct net_device *netdev, bdaddr_t *addr, 698 u8 addr_type) 699 { 700 netdev->addr_assign_type = NET_ADDR_PERM; 701 set_addr(netdev->dev_addr, addr->b, addr_type); 702 } 703 704 static void ifup(struct net_device *netdev) 705 { 706 int err; 707 708 rtnl_lock(); 709 err = dev_open(netdev); 710 if (err < 0) 711 BT_INFO("iface %s cannot be opened (%d)", netdev->name, err); 712 rtnl_unlock(); 713 } 714 715 static void ifdown(struct net_device *netdev) 716 { 717 int err; 718 719 rtnl_lock(); 720 err = dev_close(netdev); 721 if (err < 0) 722 BT_INFO("iface %s cannot be closed (%d)", netdev->name, err); 723 rtnl_unlock(); 724 } 725 726 static void do_notify_peers(struct work_struct *work) 727 { 728 struct lowpan_btle_dev *dev = container_of(work, struct lowpan_btle_dev, 729 notify_peers.work); 730 731 netdev_notify_peers(dev->netdev); /* send neighbour adv at startup */ 732 } 733 734 static bool is_bt_6lowpan(struct hci_conn *hcon) 735 { 736 if (hcon->type != LE_LINK) 737 return false; 738 739 if (!enable_6lowpan) 740 return false; 741 742 return true; 743 } 744 745 static struct l2cap_chan *chan_create(void) 746 { 747 struct l2cap_chan *chan; 748 749 chan = l2cap_chan_create(); 750 if (!chan) 751 return NULL; 752 753 l2cap_chan_set_defaults(chan); 754 755 chan->chan_type = L2CAP_CHAN_CONN_ORIENTED; 756 chan->mode = L2CAP_MODE_LE_FLOWCTL; 757 chan->imtu = 1280; 758 759 return chan; 760 } 761 762 static void set_ip_addr_bits(u8 addr_type, u8 *addr) 763 { 764 if (addr_type == BDADDR_LE_PUBLIC) 765 *addr |= 0x02; 766 else 767 *addr &= ~0x02; 768 } 769 770 static struct l2cap_chan *add_peer_chan(struct l2cap_chan *chan, 771 struct lowpan_btle_dev *dev) 772 { 773 struct lowpan_peer *peer; 774 775 peer = kzalloc(sizeof(*peer), GFP_ATOMIC); 776 if (!peer) 777 return NULL; 778 779 peer->chan = chan; 780 memset(&peer->peer_addr, 0, sizeof(struct in6_addr)); 781 782 /* RFC 2464 ch. 5 */ 783 peer->peer_addr.s6_addr[0] = 0xFE; 784 peer->peer_addr.s6_addr[1] = 0x80; 785 set_addr((u8 *)&peer->peer_addr.s6_addr + 8, chan->dst.b, 786 chan->dst_type); 787 788 memcpy(&peer->eui64_addr, (u8 *)&peer->peer_addr.s6_addr + 8, 789 EUI64_ADDR_LEN); 790 791 /* IPv6 address needs to have the U/L bit set properly so toggle 792 * it back here. 793 */ 794 set_ip_addr_bits(chan->dst_type, (u8 *)&peer->peer_addr.s6_addr + 8); 795 796 spin_lock(&devices_lock); 797 INIT_LIST_HEAD(&peer->list); 798 peer_add(dev, peer); 799 spin_unlock(&devices_lock); 800 801 /* Notifying peers about us needs to be done without locks held */ 802 INIT_DELAYED_WORK(&dev->notify_peers, do_notify_peers); 803 schedule_delayed_work(&dev->notify_peers, msecs_to_jiffies(100)); 804 805 return peer->chan; 806 } 807 808 static int setup_netdev(struct l2cap_chan *chan, struct lowpan_btle_dev **dev) 809 { 810 struct net_device *netdev; 811 int err = 0; 812 813 netdev = alloc_netdev(LOWPAN_PRIV_SIZE(sizeof(struct lowpan_btle_dev)), 814 IFACE_NAME_TEMPLATE, NET_NAME_UNKNOWN, 815 netdev_setup); 816 if (!netdev) 817 return -ENOMEM; 818 819 set_dev_addr(netdev, &chan->src, chan->src_type); 820 821 netdev->netdev_ops = &netdev_ops; 822 SET_NETDEV_DEV(netdev, &chan->conn->hcon->hdev->dev); 823 SET_NETDEV_DEVTYPE(netdev, &bt_type); 824 825 *dev = lowpan_btle_dev(netdev); 826 (*dev)->netdev = netdev; 827 (*dev)->hdev = chan->conn->hcon->hdev; 828 INIT_LIST_HEAD(&(*dev)->peers); 829 830 spin_lock(&devices_lock); 831 INIT_LIST_HEAD(&(*dev)->list); 832 list_add_rcu(&(*dev)->list, &bt_6lowpan_devices); 833 spin_unlock(&devices_lock); 834 835 err = lowpan_register_netdev(netdev, LOWPAN_LLTYPE_BTLE); 836 if (err < 0) { 837 BT_INFO("register_netdev failed %d", err); 838 spin_lock(&devices_lock); 839 list_del_rcu(&(*dev)->list); 840 spin_unlock(&devices_lock); 841 free_netdev(netdev); 842 goto out; 843 } 844 845 BT_DBG("ifindex %d peer bdaddr %pMR type %d my addr %pMR type %d", 846 netdev->ifindex, &chan->dst, chan->dst_type, 847 &chan->src, chan->src_type); 848 set_bit(__LINK_STATE_PRESENT, &netdev->state); 849 850 return 0; 851 852 out: 853 return err; 854 } 855 856 static inline void chan_ready_cb(struct l2cap_chan *chan) 857 { 858 struct lowpan_btle_dev *dev; 859 860 dev = lookup_dev(chan->conn); 861 862 BT_DBG("chan %p conn %p dev %p", chan, chan->conn, dev); 863 864 if (!dev) { 865 if (setup_netdev(chan, &dev) < 0) { 866 l2cap_chan_del(chan, -ENOENT); 867 return; 868 } 869 } 870 871 if (!try_module_get(THIS_MODULE)) 872 return; 873 874 add_peer_chan(chan, dev); 875 ifup(dev->netdev); 876 } 877 878 static inline struct l2cap_chan *chan_new_conn_cb(struct l2cap_chan *pchan) 879 { 880 struct l2cap_chan *chan; 881 882 chan = chan_create(); 883 if (!chan) 884 return NULL; 885 886 chan->ops = pchan->ops; 887 888 BT_DBG("chan %p pchan %p", chan, pchan); 889 890 return chan; 891 } 892 893 static void delete_netdev(struct work_struct *work) 894 { 895 struct lowpan_btle_dev *entry = container_of(work, 896 struct lowpan_btle_dev, 897 delete_netdev); 898 899 lowpan_unregister_netdev(entry->netdev); 900 901 /* The entry pointer is deleted by the netdev destructor. */ 902 } 903 904 static void chan_close_cb(struct l2cap_chan *chan) 905 { 906 struct lowpan_btle_dev *entry; 907 struct lowpan_btle_dev *dev = NULL; 908 struct lowpan_peer *peer; 909 int err = -ENOENT; 910 bool last = false, remove = true; 911 912 BT_DBG("chan %p conn %p", chan, chan->conn); 913 914 if (chan->conn && chan->conn->hcon) { 915 if (!is_bt_6lowpan(chan->conn->hcon)) 916 return; 917 918 /* If conn is set, then the netdev is also there and we should 919 * not remove it. 920 */ 921 remove = false; 922 } 923 924 spin_lock(&devices_lock); 925 926 list_for_each_entry_rcu(entry, &bt_6lowpan_devices, list) { 927 dev = lowpan_btle_dev(entry->netdev); 928 peer = __peer_lookup_chan(dev, chan); 929 if (peer) { 930 last = peer_del(dev, peer); 931 err = 0; 932 933 BT_DBG("dev %p removing %speer %p", dev, 934 last ? "last " : "1 ", peer); 935 BT_DBG("chan %p orig refcnt %d", chan, 936 atomic_read(&chan->kref.refcount)); 937 938 l2cap_chan_put(chan); 939 break; 940 } 941 } 942 943 if (!err && last && dev && !atomic_read(&dev->peer_count)) { 944 spin_unlock(&devices_lock); 945 946 cancel_delayed_work_sync(&dev->notify_peers); 947 948 ifdown(dev->netdev); 949 950 if (remove) { 951 INIT_WORK(&entry->delete_netdev, delete_netdev); 952 schedule_work(&entry->delete_netdev); 953 } 954 } else { 955 spin_unlock(&devices_lock); 956 } 957 958 return; 959 } 960 961 static void chan_state_change_cb(struct l2cap_chan *chan, int state, int err) 962 { 963 BT_DBG("chan %p conn %p state %s err %d", chan, chan->conn, 964 state_to_string(state), err); 965 } 966 967 static struct sk_buff *chan_alloc_skb_cb(struct l2cap_chan *chan, 968 unsigned long hdr_len, 969 unsigned long len, int nb) 970 { 971 /* Note that we must allocate using GFP_ATOMIC here as 972 * this function is called originally from netdev hard xmit 973 * function in atomic context. 974 */ 975 return bt_skb_alloc(hdr_len + len, GFP_ATOMIC); 976 } 977 978 static void chan_suspend_cb(struct l2cap_chan *chan) 979 { 980 struct sk_buff *skb = chan->data; 981 982 BT_DBG("chan %p conn %p skb %p", chan, chan->conn, skb); 983 984 if (!skb) 985 return; 986 987 lowpan_cb(skb)->status = -EAGAIN; 988 } 989 990 static void chan_resume_cb(struct l2cap_chan *chan) 991 { 992 struct sk_buff *skb = chan->data; 993 994 BT_DBG("chan %p conn %p skb %p", chan, chan->conn, skb); 995 996 if (!skb) 997 return; 998 999 lowpan_cb(skb)->status = 0; 1000 } 1001 1002 static long chan_get_sndtimeo_cb(struct l2cap_chan *chan) 1003 { 1004 return L2CAP_CONN_TIMEOUT; 1005 } 1006 1007 static const struct l2cap_ops bt_6lowpan_chan_ops = { 1008 .name = "L2CAP 6LoWPAN channel", 1009 .new_connection = chan_new_conn_cb, 1010 .recv = chan_recv_cb, 1011 .close = chan_close_cb, 1012 .state_change = chan_state_change_cb, 1013 .ready = chan_ready_cb, 1014 .resume = chan_resume_cb, 1015 .suspend = chan_suspend_cb, 1016 .get_sndtimeo = chan_get_sndtimeo_cb, 1017 .alloc_skb = chan_alloc_skb_cb, 1018 1019 .teardown = l2cap_chan_no_teardown, 1020 .defer = l2cap_chan_no_defer, 1021 .set_shutdown = l2cap_chan_no_set_shutdown, 1022 }; 1023 1024 static inline __u8 bdaddr_type(__u8 type) 1025 { 1026 if (type == ADDR_LE_DEV_PUBLIC) 1027 return BDADDR_LE_PUBLIC; 1028 else 1029 return BDADDR_LE_RANDOM; 1030 } 1031 1032 static int bt_6lowpan_connect(bdaddr_t *addr, u8 dst_type) 1033 { 1034 struct l2cap_chan *chan; 1035 int err; 1036 1037 chan = chan_create(); 1038 if (!chan) 1039 return -EINVAL; 1040 1041 chan->ops = &bt_6lowpan_chan_ops; 1042 1043 err = l2cap_chan_connect(chan, cpu_to_le16(L2CAP_PSM_IPSP), 0, 1044 addr, dst_type); 1045 1046 BT_DBG("chan %p err %d", chan, err); 1047 if (err < 0) 1048 l2cap_chan_put(chan); 1049 1050 return err; 1051 } 1052 1053 static int bt_6lowpan_disconnect(struct l2cap_conn *conn, u8 dst_type) 1054 { 1055 struct lowpan_peer *peer; 1056 1057 BT_DBG("conn %p dst type %d", conn, dst_type); 1058 1059 peer = lookup_peer(conn); 1060 if (!peer) 1061 return -ENOENT; 1062 1063 BT_DBG("peer %p chan %p", peer, peer->chan); 1064 1065 l2cap_chan_close(peer->chan, ENOENT); 1066 1067 return 0; 1068 } 1069 1070 static struct l2cap_chan *bt_6lowpan_listen(void) 1071 { 1072 bdaddr_t *addr = BDADDR_ANY; 1073 struct l2cap_chan *chan; 1074 int err; 1075 1076 if (!enable_6lowpan) 1077 return NULL; 1078 1079 chan = chan_create(); 1080 if (!chan) 1081 return NULL; 1082 1083 chan->ops = &bt_6lowpan_chan_ops; 1084 chan->state = BT_LISTEN; 1085 chan->src_type = BDADDR_LE_PUBLIC; 1086 1087 atomic_set(&chan->nesting, L2CAP_NESTING_PARENT); 1088 1089 BT_DBG("chan %p src type %d", chan, chan->src_type); 1090 1091 err = l2cap_add_psm(chan, addr, cpu_to_le16(L2CAP_PSM_IPSP)); 1092 if (err) { 1093 l2cap_chan_put(chan); 1094 BT_ERR("psm cannot be added err %d", err); 1095 return NULL; 1096 } 1097 1098 return chan; 1099 } 1100 1101 static int get_l2cap_conn(char *buf, bdaddr_t *addr, u8 *addr_type, 1102 struct l2cap_conn **conn) 1103 { 1104 struct hci_conn *hcon; 1105 struct hci_dev *hdev; 1106 bdaddr_t *src = BDADDR_ANY; 1107 int n; 1108 1109 n = sscanf(buf, "%hhx:%hhx:%hhx:%hhx:%hhx:%hhx %hhu", 1110 &addr->b[5], &addr->b[4], &addr->b[3], 1111 &addr->b[2], &addr->b[1], &addr->b[0], 1112 addr_type); 1113 1114 if (n < 7) 1115 return -EINVAL; 1116 1117 hdev = hci_get_route(addr, src); 1118 if (!hdev) 1119 return -ENOENT; 1120 1121 hci_dev_lock(hdev); 1122 hcon = hci_conn_hash_lookup_le(hdev, addr, *addr_type); 1123 hci_dev_unlock(hdev); 1124 1125 if (!hcon) 1126 return -ENOENT; 1127 1128 *conn = (struct l2cap_conn *)hcon->l2cap_data; 1129 1130 BT_DBG("conn %p dst %pMR type %d", *conn, &hcon->dst, hcon->dst_type); 1131 1132 return 0; 1133 } 1134 1135 static void disconnect_all_peers(void) 1136 { 1137 struct lowpan_btle_dev *entry; 1138 struct lowpan_peer *peer, *tmp_peer, *new_peer; 1139 struct list_head peers; 1140 1141 INIT_LIST_HEAD(&peers); 1142 1143 /* We make a separate list of peers as the close_cb() will 1144 * modify the device peers list so it is better not to mess 1145 * with the same list at the same time. 1146 */ 1147 1148 rcu_read_lock(); 1149 1150 list_for_each_entry_rcu(entry, &bt_6lowpan_devices, list) { 1151 list_for_each_entry_rcu(peer, &entry->peers, list) { 1152 new_peer = kmalloc(sizeof(*new_peer), GFP_ATOMIC); 1153 if (!new_peer) 1154 break; 1155 1156 new_peer->chan = peer->chan; 1157 INIT_LIST_HEAD(&new_peer->list); 1158 1159 list_add(&new_peer->list, &peers); 1160 } 1161 } 1162 1163 rcu_read_unlock(); 1164 1165 spin_lock(&devices_lock); 1166 list_for_each_entry_safe(peer, tmp_peer, &peers, list) { 1167 l2cap_chan_close(peer->chan, ENOENT); 1168 1169 list_del_rcu(&peer->list); 1170 kfree_rcu(peer, rcu); 1171 } 1172 spin_unlock(&devices_lock); 1173 } 1174 1175 struct set_enable { 1176 struct work_struct work; 1177 bool flag; 1178 }; 1179 1180 static void do_enable_set(struct work_struct *work) 1181 { 1182 struct set_enable *set_enable = container_of(work, 1183 struct set_enable, work); 1184 1185 if (!set_enable->flag || enable_6lowpan != set_enable->flag) 1186 /* Disconnect existing connections if 6lowpan is 1187 * disabled 1188 */ 1189 disconnect_all_peers(); 1190 1191 enable_6lowpan = set_enable->flag; 1192 1193 if (listen_chan) { 1194 l2cap_chan_close(listen_chan, 0); 1195 l2cap_chan_put(listen_chan); 1196 } 1197 1198 listen_chan = bt_6lowpan_listen(); 1199 1200 kfree(set_enable); 1201 } 1202 1203 static int lowpan_enable_set(void *data, u64 val) 1204 { 1205 struct set_enable *set_enable; 1206 1207 set_enable = kzalloc(sizeof(*set_enable), GFP_KERNEL); 1208 if (!set_enable) 1209 return -ENOMEM; 1210 1211 set_enable->flag = !!val; 1212 INIT_WORK(&set_enable->work, do_enable_set); 1213 1214 schedule_work(&set_enable->work); 1215 1216 return 0; 1217 } 1218 1219 static int lowpan_enable_get(void *data, u64 *val) 1220 { 1221 *val = enable_6lowpan; 1222 return 0; 1223 } 1224 1225 DEFINE_SIMPLE_ATTRIBUTE(lowpan_enable_fops, lowpan_enable_get, 1226 lowpan_enable_set, "%llu\n"); 1227 1228 static ssize_t lowpan_control_write(struct file *fp, 1229 const char __user *user_buffer, 1230 size_t count, 1231 loff_t *position) 1232 { 1233 char buf[32]; 1234 size_t buf_size = min(count, sizeof(buf) - 1); 1235 int ret; 1236 bdaddr_t addr; 1237 u8 addr_type; 1238 struct l2cap_conn *conn = NULL; 1239 1240 if (copy_from_user(buf, user_buffer, buf_size)) 1241 return -EFAULT; 1242 1243 buf[buf_size] = '\0'; 1244 1245 if (memcmp(buf, "connect ", 8) == 0) { 1246 ret = get_l2cap_conn(&buf[8], &addr, &addr_type, &conn); 1247 if (ret == -EINVAL) 1248 return ret; 1249 1250 if (listen_chan) { 1251 l2cap_chan_close(listen_chan, 0); 1252 l2cap_chan_put(listen_chan); 1253 listen_chan = NULL; 1254 } 1255 1256 if (conn) { 1257 struct lowpan_peer *peer; 1258 1259 if (!is_bt_6lowpan(conn->hcon)) 1260 return -EINVAL; 1261 1262 peer = lookup_peer(conn); 1263 if (peer) { 1264 BT_DBG("6LoWPAN connection already exists"); 1265 return -EALREADY; 1266 } 1267 1268 BT_DBG("conn %p dst %pMR type %d user %d", conn, 1269 &conn->hcon->dst, conn->hcon->dst_type, 1270 addr_type); 1271 } 1272 1273 ret = bt_6lowpan_connect(&addr, addr_type); 1274 if (ret < 0) 1275 return ret; 1276 1277 return count; 1278 } 1279 1280 if (memcmp(buf, "disconnect ", 11) == 0) { 1281 ret = get_l2cap_conn(&buf[11], &addr, &addr_type, &conn); 1282 if (ret < 0) 1283 return ret; 1284 1285 ret = bt_6lowpan_disconnect(conn, addr_type); 1286 if (ret < 0) 1287 return ret; 1288 1289 return count; 1290 } 1291 1292 return count; 1293 } 1294 1295 static int lowpan_control_show(struct seq_file *f, void *ptr) 1296 { 1297 struct lowpan_btle_dev *entry; 1298 struct lowpan_peer *peer; 1299 1300 spin_lock(&devices_lock); 1301 1302 list_for_each_entry(entry, &bt_6lowpan_devices, list) { 1303 list_for_each_entry(peer, &entry->peers, list) 1304 seq_printf(f, "%pMR (type %u)\n", 1305 &peer->chan->dst, peer->chan->dst_type); 1306 } 1307 1308 spin_unlock(&devices_lock); 1309 1310 return 0; 1311 } 1312 1313 static int lowpan_control_open(struct inode *inode, struct file *file) 1314 { 1315 return single_open(file, lowpan_control_show, inode->i_private); 1316 } 1317 1318 static const struct file_operations lowpan_control_fops = { 1319 .open = lowpan_control_open, 1320 .read = seq_read, 1321 .write = lowpan_control_write, 1322 .llseek = seq_lseek, 1323 .release = single_release, 1324 }; 1325 1326 static void disconnect_devices(void) 1327 { 1328 struct lowpan_btle_dev *entry, *tmp, *new_dev; 1329 struct list_head devices; 1330 1331 INIT_LIST_HEAD(&devices); 1332 1333 /* We make a separate list of devices because the unregister_netdev() 1334 * will call device_event() which will also want to modify the same 1335 * devices list. 1336 */ 1337 1338 rcu_read_lock(); 1339 1340 list_for_each_entry_rcu(entry, &bt_6lowpan_devices, list) { 1341 new_dev = kmalloc(sizeof(*new_dev), GFP_ATOMIC); 1342 if (!new_dev) 1343 break; 1344 1345 new_dev->netdev = entry->netdev; 1346 INIT_LIST_HEAD(&new_dev->list); 1347 1348 list_add_rcu(&new_dev->list, &devices); 1349 } 1350 1351 rcu_read_unlock(); 1352 1353 list_for_each_entry_safe(entry, tmp, &devices, list) { 1354 ifdown(entry->netdev); 1355 BT_DBG("Unregistering netdev %s %p", 1356 entry->netdev->name, entry->netdev); 1357 lowpan_unregister_netdev(entry->netdev); 1358 kfree(entry); 1359 } 1360 } 1361 1362 static int device_event(struct notifier_block *unused, 1363 unsigned long event, void *ptr) 1364 { 1365 struct net_device *netdev = netdev_notifier_info_to_dev(ptr); 1366 struct lowpan_btle_dev *entry; 1367 1368 if (netdev->type != ARPHRD_6LOWPAN) 1369 return NOTIFY_DONE; 1370 1371 switch (event) { 1372 case NETDEV_UNREGISTER: 1373 spin_lock(&devices_lock); 1374 list_for_each_entry(entry, &bt_6lowpan_devices, list) { 1375 if (entry->netdev == netdev) { 1376 BT_DBG("Unregistered netdev %s %p", 1377 netdev->name, netdev); 1378 list_del(&entry->list); 1379 break; 1380 } 1381 } 1382 spin_unlock(&devices_lock); 1383 break; 1384 } 1385 1386 return NOTIFY_DONE; 1387 } 1388 1389 static struct notifier_block bt_6lowpan_dev_notifier = { 1390 .notifier_call = device_event, 1391 }; 1392 1393 static int __init bt_6lowpan_init(void) 1394 { 1395 lowpan_enable_debugfs = debugfs_create_file("6lowpan_enable", 0644, 1396 bt_debugfs, NULL, 1397 &lowpan_enable_fops); 1398 lowpan_control_debugfs = debugfs_create_file("6lowpan_control", 0644, 1399 bt_debugfs, NULL, 1400 &lowpan_control_fops); 1401 1402 return register_netdevice_notifier(&bt_6lowpan_dev_notifier); 1403 } 1404 1405 static void __exit bt_6lowpan_exit(void) 1406 { 1407 debugfs_remove(lowpan_enable_debugfs); 1408 debugfs_remove(lowpan_control_debugfs); 1409 1410 if (listen_chan) { 1411 l2cap_chan_close(listen_chan, 0); 1412 l2cap_chan_put(listen_chan); 1413 } 1414 1415 disconnect_devices(); 1416 1417 unregister_netdevice_notifier(&bt_6lowpan_dev_notifier); 1418 } 1419 1420 module_init(bt_6lowpan_init); 1421 module_exit(bt_6lowpan_exit); 1422 1423 MODULE_AUTHOR("Jukka Rissanen <jukka.rissanen@linux.intel.com>"); 1424 MODULE_DESCRIPTION("Bluetooth 6LoWPAN"); 1425 MODULE_VERSION(VERSION); 1426 MODULE_LICENSE("GPL"); 1427