kernel/netgraph7: Replace usage of MALLOC/FREE with kmalloc/kfree here too.
[dragonfly.git] / sys / netgraph7 / bluetooth / socket / ng_btsocket_hci_raw.c
1 /*
2  * ng_btsocket_hci_raw.c
3  */
4
5 /*-
6  * Copyright (c) 2001-2002 Maksim Yevmenkin <m_evmenkin@yahoo.com>
7  * All rights reserved.
8  *
9  * Redistribution and use in source and binary forms, with or without
10  * modification, are permitted provided that the following conditions
11  * are met:
12  * 1. Redistributions of source code must retain the above copyright
13  *    notice, this list of conditions and the following disclaimer.
14  * 2. Redistributions in binary form must reproduce the above copyright
15  *    notice, this list of conditions and the following disclaimer in the
16  *    documentation and/or other materials provided with the distribution.
17  *
18  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
19  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
20  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
21  * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
22  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
23  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
24  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
25  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
26  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
27  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
28  * SUCH DAMAGE.
29  *
30  * $Id: ng_btsocket_hci_raw.c,v 1.14 2003/09/14 23:29:06 max Exp $
31  * $FreeBSD: src/sys/netgraph/bluetooth/socket/ng_btsocket_hci_raw.c,v 1.23 2006/11/06 13:42:04 rwatson Exp $
32  * $DragonFly: src/sys/netgraph7/bluetooth/socket/ng_btsocket_hci_raw.c,v 1.2 2008/06/26 23:05:40 dillon Exp $
33  */
34
35 #include <sys/param.h>
36 #include <sys/systm.h>
37 #include <sys/bitstring.h>
38 #include <sys/domain.h>
39 #include <sys/endian.h>
40 #include <sys/errno.h>
41 #include <sys/filedesc.h>
42 #include <sys/kernel.h>
43 #include <sys/lock.h>
44 #include <sys/malloc.h>
45 #include <sys/mbuf.h>
46 #include <sys/mutex.h>
47 #include <sys/priv.h>
48 #include <sys/protosw.h>
49 #include <sys/queue.h>
50 #include <sys/socket.h>
51 #include <sys/socketvar.h>
52 #include <sys/sysctl.h>
53 #include <sys/taskqueue.h>
54 #include "ng_message.h"
55 #include "netgraph.h"
56 #include "bluetooth/include/ng_bluetooth.h"
57 #include "bluetooth/include/ng_hci.h"
58 #include "bluetooth/include/ng_l2cap.h"
59 #include "bluetooth/include/ng_btsocket.h"
60 #include "bluetooth/include/ng_btsocket_hci_raw.h"
61
62 /* MALLOC define */
63 #ifdef NG_SEPARATE_MALLOC
64 MALLOC_DEFINE(M_NETGRAPH_BTSOCKET_HCI_RAW, "netgraph_btsocks_hci_raw",
65         "Netgraph Bluetooth raw HCI sockets");
66 #else
67 #define M_NETGRAPH_BTSOCKET_HCI_RAW M_NETGRAPH
68 #endif /* NG_SEPARATE_MALLOC */
69
70 /* Netgraph node methods */
71 static ng_constructor_t ng_btsocket_hci_raw_node_constructor;
72 static ng_rcvmsg_t      ng_btsocket_hci_raw_node_rcvmsg;
73 static ng_shutdown_t    ng_btsocket_hci_raw_node_shutdown;
74 static ng_newhook_t     ng_btsocket_hci_raw_node_newhook;
75 static ng_connect_t     ng_btsocket_hci_raw_node_connect;
76 static ng_rcvdata_t     ng_btsocket_hci_raw_node_rcvdata;
77 static ng_disconnect_t  ng_btsocket_hci_raw_node_disconnect;
78
79 static void             ng_btsocket_hci_raw_input (void *, int);
80 static void             ng_btsocket_hci_raw_output(node_p, hook_p, void *, int);
81 static void             ng_btsocket_hci_raw_savctl(ng_btsocket_hci_raw_pcb_p, 
82                                                    struct mbuf **,
83                                                    struct mbuf *); 
84 static int              ng_btsocket_hci_raw_filter(ng_btsocket_hci_raw_pcb_p,
85                                                    struct mbuf *, int);
86
87 #define ng_btsocket_hci_raw_wakeup_input_task() \
88         taskqueue_enqueue(taskqueue_swi, &ng_btsocket_hci_raw_task)
89
90 /* Security filter */
91 struct ng_btsocket_hci_raw_sec_filter {
92         bitstr_t        bit_decl(events, 0xff);
93         bitstr_t        bit_decl(commands[0x3f], 0x3ff);
94 };
95
96 /* Netgraph type descriptor */
97 static struct ng_type typestruct = {
98         .version =      NG_ABI_VERSION,
99         .name =         NG_BTSOCKET_HCI_RAW_NODE_TYPE,
100         .constructor =  ng_btsocket_hci_raw_node_constructor,
101         .rcvmsg =       ng_btsocket_hci_raw_node_rcvmsg,
102         .shutdown =     ng_btsocket_hci_raw_node_shutdown,
103         .newhook =      ng_btsocket_hci_raw_node_newhook,
104         .connect =      ng_btsocket_hci_raw_node_connect,
105         .rcvdata =      ng_btsocket_hci_raw_node_rcvdata,
106         .disconnect =   ng_btsocket_hci_raw_node_disconnect,
107 };
108
109 /* Globals */
110 extern int                                      ifqmaxlen;
111 static u_int32_t                                ng_btsocket_hci_raw_debug_level;
112 static u_int32_t                                ng_btsocket_hci_raw_ioctl_timeout;
113 static node_p                                   ng_btsocket_hci_raw_node;
114 static struct ng_bt_itemq                       ng_btsocket_hci_raw_queue;
115 static struct mtx                               ng_btsocket_hci_raw_queue_mtx;
116 static struct task                              ng_btsocket_hci_raw_task;
117 static LIST_HEAD(, ng_btsocket_hci_raw_pcb)     ng_btsocket_hci_raw_sockets;
118 static struct mtx                               ng_btsocket_hci_raw_sockets_mtx;
119 static u_int32_t                                ng_btsocket_hci_raw_token;
120 static struct mtx                               ng_btsocket_hci_raw_token_mtx;
121 static struct ng_btsocket_hci_raw_sec_filter    *ng_btsocket_hci_raw_sec_filter;
122  
123 /* Sysctl tree */
124 SYSCTL_DECL(_net_bluetooth_hci_sockets);
125 SYSCTL_NODE(_net_bluetooth_hci_sockets, OID_AUTO, raw, CTLFLAG_RW,
126         0, "Bluetooth raw HCI sockets family");
127 SYSCTL_INT(_net_bluetooth_hci_sockets_raw, OID_AUTO, debug_level, CTLFLAG_RW,
128         &ng_btsocket_hci_raw_debug_level, NG_BTSOCKET_WARN_LEVEL,
129         "Bluetooth raw HCI sockets debug level");
130 SYSCTL_INT(_net_bluetooth_hci_sockets_raw, OID_AUTO, ioctl_timeout, CTLFLAG_RW,
131         &ng_btsocket_hci_raw_ioctl_timeout, 5,
132         "Bluetooth raw HCI sockets ioctl timeout");
133 SYSCTL_INT(_net_bluetooth_hci_sockets_raw, OID_AUTO, queue_len, CTLFLAG_RD,
134         &ng_btsocket_hci_raw_queue.len, 0,
135         "Bluetooth raw HCI sockets input queue length");
136 SYSCTL_INT(_net_bluetooth_hci_sockets_raw, OID_AUTO, queue_maxlen, CTLFLAG_RD,
137         &ng_btsocket_hci_raw_queue.maxlen, 0,
138         "Bluetooth raw HCI sockets input queue max. length");
139 SYSCTL_INT(_net_bluetooth_hci_sockets_raw, OID_AUTO, queue_drops, CTLFLAG_RD,
140         &ng_btsocket_hci_raw_queue.drops, 0,
141         "Bluetooth raw HCI sockets input queue drops");
142
143 /* Debug */
144 #define NG_BTSOCKET_HCI_RAW_INFO \
145         if (ng_btsocket_hci_raw_debug_level >= NG_BTSOCKET_INFO_LEVEL) \
146                 printf
147
148 #define NG_BTSOCKET_HCI_RAW_WARN \
149         if (ng_btsocket_hci_raw_debug_level >= NG_BTSOCKET_WARN_LEVEL) \
150                 printf
151
152 #define NG_BTSOCKET_HCI_RAW_ERR \
153         if (ng_btsocket_hci_raw_debug_level >= NG_BTSOCKET_ERR_LEVEL) \
154                 printf
155
156 #define NG_BTSOCKET_HCI_RAW_ALERT \
157         if (ng_btsocket_hci_raw_debug_level >= NG_BTSOCKET_ALERT_LEVEL) \
158                 printf
159
160 /****************************************************************************
161  ****************************************************************************
162  **                          Netgraph specific
163  ****************************************************************************
164  ****************************************************************************/
165
166 /*
167  * Netgraph node constructor. Do not allow to create node of this type.
168  */
169
170 static int
171 ng_btsocket_hci_raw_node_constructor(node_p node)
172 {
173         return (EINVAL);
174 } /* ng_btsocket_hci_raw_node_constructor */
175
176 /*
177  * Netgraph node destructor. Just let old node go and create new fresh one.
178  */
179
180 static int
181 ng_btsocket_hci_raw_node_shutdown(node_p node)
182 {
183         int     error = 0;
184
185         NG_NODE_UNREF(node);
186
187         error = ng_make_node_common(&typestruct, &ng_btsocket_hci_raw_node);
188         if (error  != 0) {
189                 NG_BTSOCKET_HCI_RAW_ALERT(
190 "%s: Could not create Netgraph node, error=%d\n", __func__, error);
191
192                 ng_btsocket_hci_raw_node = NULL;
193
194                 return (ENOMEM);
195         }
196
197         error = ng_name_node(ng_btsocket_hci_raw_node,
198                                 NG_BTSOCKET_HCI_RAW_NODE_TYPE);
199         if (error != 0) {
200                 NG_BTSOCKET_HCI_RAW_ALERT(
201 "%s: Could not name Netgraph node, error=%d\n", __func__, error);
202
203                 NG_NODE_UNREF(ng_btsocket_hci_raw_node);
204                 ng_btsocket_hci_raw_node = NULL;
205
206                 return (EINVAL);
207         }
208
209         return (0);
210 } /* ng_btsocket_hci_raw_node_shutdown */
211
212 /*
213  * Create new hook. Just say "yes"
214  */
215
216 static int
217 ng_btsocket_hci_raw_node_newhook(node_p node, hook_p hook, char const *name)
218 {
219         return (0);
220 } /* ng_btsocket_hci_raw_node_newhook */
221
222 /*
223  * Connect hook. Just say "yes"
224  */
225
226 static int
227 ng_btsocket_hci_raw_node_connect(hook_p hook)
228 {
229         return (0);
230 } /* ng_btsocket_hci_raw_node_connect */
231
232 /*
233  * Disconnect hook
234  */
235
236 static int
237 ng_btsocket_hci_raw_node_disconnect(hook_p hook)
238 {
239         return (0);
240 } /* ng_btsocket_hci_raw_node_disconnect */
241
242 /*
243  * Receive control message.
244  * Make sure it is a message from HCI node and it is a response.
245  * Enqueue item and schedule input task.
246  */
247
248 static int
249 ng_btsocket_hci_raw_node_rcvmsg(node_p node, item_p item, hook_p lasthook) 
250 {
251         struct ng_mesg  *msg = NGI_MSG(item); /* item still has message */
252         int              error = 0;
253
254         /*
255          * Check for empty sockets list creates LOR when both sender and
256          * receiver device are connected to the same host, so remove it
257          * for now
258          */
259
260         if (msg != NULL &&
261             (msg->header.typecookie == NGM_HCI_COOKIE ||
262              msg->header.typecookie == NGM_GENERIC_COOKIE) &&
263             msg->header.flags & NGF_RESP) {
264                 if (msg->header.token == 0) {
265                         NG_FREE_ITEM(item);
266                         return (0);
267                 }
268
269                 mtx_lock(&ng_btsocket_hci_raw_queue_mtx);
270                 if (NG_BT_ITEMQ_FULL(&ng_btsocket_hci_raw_queue)) {
271                         NG_BTSOCKET_HCI_RAW_ERR(
272 "%s: Input queue is full\n", __func__);
273
274                         NG_BT_ITEMQ_DROP(&ng_btsocket_hci_raw_queue);
275                         NG_FREE_ITEM(item);
276                         error = ENOBUFS;
277                 } else {
278                         NG_BT_ITEMQ_ENQUEUE(&ng_btsocket_hci_raw_queue, item);
279                         error = ng_btsocket_hci_raw_wakeup_input_task();
280                 }
281                 mtx_unlock(&ng_btsocket_hci_raw_queue_mtx);
282         } else {
283                 NG_FREE_ITEM(item);
284                 error = EINVAL;
285         }
286
287         return (error);
288 } /* ng_btsocket_hci_raw_node_rcvmsg */
289
290 /*
291  * Receive packet from the one of our hook.
292  * Prepend every packet with sockaddr_hci and record sender's node name.
293  * Enqueue item and schedule input task.
294  */
295
296 static int
297 ng_btsocket_hci_raw_node_rcvdata(hook_p hook, item_p item)
298 {
299         struct mbuf     *nam = NULL;
300         int              error;
301
302         /*
303          * Check for empty sockets list creates LOR when both sender and
304          * receiver device are connected to the same host, so remove it
305          * for now
306          */
307
308         MGET(nam, MB_DONTWAIT, MT_SONAME);
309         if (nam != NULL) {
310                 struct sockaddr_hci     *sa = mtod(nam, struct sockaddr_hci *);
311
312                 nam->m_len = sizeof(struct sockaddr_hci);
313
314                 sa->hci_len = sizeof(*sa);
315                 sa->hci_family = AF_BLUETOOTH;
316                 strlcpy(sa->hci_node, NG_PEER_NODE_NAME(hook),
317                         sizeof(sa->hci_node));
318
319                 NGI_GET_M(item, nam->m_next);
320                 NGI_M(item) = nam;
321
322                 mtx_lock(&ng_btsocket_hci_raw_queue_mtx);
323                 if (NG_BT_ITEMQ_FULL(&ng_btsocket_hci_raw_queue)) {
324                         NG_BTSOCKET_HCI_RAW_ERR(
325 "%s: Input queue is full\n", __func__);
326
327                         NG_BT_ITEMQ_DROP(&ng_btsocket_hci_raw_queue);
328                         NG_FREE_ITEM(item);
329                         error = ENOBUFS;
330                 } else {
331                         NG_BT_ITEMQ_ENQUEUE(&ng_btsocket_hci_raw_queue, item);
332                         error = ng_btsocket_hci_raw_wakeup_input_task();
333                 }
334                 mtx_unlock(&ng_btsocket_hci_raw_queue_mtx);
335         } else {
336                 NG_BTSOCKET_HCI_RAW_ERR(
337 "%s: Failed to allocate address mbuf\n", __func__);
338
339                 NG_FREE_ITEM(item);
340                 error = ENOBUFS;
341         }
342
343         return (error);
344 } /* ng_btsocket_hci_raw_node_rcvdata */
345
346 /****************************************************************************
347  ****************************************************************************
348  **                              Sockets specific
349  ****************************************************************************
350  ****************************************************************************/
351
352 /*
353  * Get next token. We need token to avoid theoretical race where process
354  * submits ioctl() message then interrupts ioctl() and re-submits another
355  * ioctl() on the same socket *before* first ioctl() complete.
356  */
357  
358 static void
359 ng_btsocket_hci_raw_get_token(u_int32_t *token)
360 {
361         mtx_lock(&ng_btsocket_hci_raw_token_mtx);
362   
363         if (++ ng_btsocket_hci_raw_token == 0)
364                 ng_btsocket_hci_raw_token = 1;
365  
366         *token = ng_btsocket_hci_raw_token;
367  
368         mtx_unlock(&ng_btsocket_hci_raw_token_mtx);
369 } /* ng_btsocket_hci_raw_get_token */
370
371 /*
372  * Send Netgraph message to the node - do not expect reply
373  */
374
375 static int
376 ng_btsocket_hci_raw_send_ngmsg(char *path, int cmd, void *arg, int arglen)
377 {
378         struct ng_mesg  *msg = NULL;
379         int              error = 0;
380
381         NG_MKMESSAGE(msg, NGM_HCI_COOKIE, cmd, arglen, M_WAITOK | M_NULLOK);
382         if (msg == NULL)
383                 return (ENOMEM);
384
385         if (arg != NULL && arglen > 0)
386                 bcopy(arg, msg->data, arglen);
387
388         NG_SEND_MSG_PATH(error, ng_btsocket_hci_raw_node, msg, path, 0);
389
390         return (error);
391 } /* ng_btsocket_hci_raw_send_ngmsg */
392
393 /*
394  * Send Netgraph message to the node (no data) and wait for reply 
395  */
396
397 static int
398 ng_btsocket_hci_raw_send_sync_ngmsg(ng_btsocket_hci_raw_pcb_p pcb, char *path,
399                 int cmd, void *rsp, int rsplen)
400 {
401         struct ng_mesg  *msg = NULL;
402         int              error = 0;
403
404         mtx_assert(&pcb->pcb_mtx, MA_OWNED);
405
406         NG_MKMESSAGE(msg, NGM_HCI_COOKIE, cmd, 0, M_WAITOK | M_NULLOK);
407         if (msg == NULL)
408                 return (ENOMEM);
409
410         ng_btsocket_hci_raw_get_token(&msg->header.token);
411         pcb->token = msg->header.token;
412         pcb->msg = NULL;
413
414         NG_SEND_MSG_PATH(error, ng_btsocket_hci_raw_node, msg, path, 0);
415         if (error != 0) {
416                 pcb->token = 0;
417                 return (error);
418         }
419
420         error = msleep(&pcb->msg, &pcb->pcb_mtx, PZERO|PCATCH, "hcictl", 
421                         ng_btsocket_hci_raw_ioctl_timeout * hz);
422         pcb->token = 0;
423
424         if (error != 0)
425                 return (error);
426
427         if (pcb->msg != NULL && pcb->msg->header.cmd == cmd)
428                 bcopy(pcb->msg->data, rsp, rsplen);
429         else
430                 error = EINVAL;
431
432         NG_FREE_MSG(pcb->msg); /* checks for != NULL */
433
434         return (0);
435 } /* ng_btsocket_hci_raw_send_sync_ngmsg */
436
437 /*
438  * Create control information for the packet
439  */
440
441 static void
442 ng_btsocket_hci_raw_savctl(ng_btsocket_hci_raw_pcb_p pcb, struct mbuf **ctl,
443                 struct mbuf *m) 
444 {
445         int             dir;
446         struct timeval  tv;
447
448         mtx_assert(&pcb->pcb_mtx, MA_OWNED);
449
450         if (pcb->flags & NG_BTSOCKET_HCI_RAW_DIRECTION) {
451                 dir = (m->m_flags & M_PROTO1)? 1 : 0;
452                 *ctl = sbcreatecontrol((caddr_t) &dir, sizeof(dir),
453                                         SCM_HCI_RAW_DIRECTION, SOL_HCI_RAW);
454                 if (*ctl != NULL)
455                         ctl = &((*ctl)->m_next);
456         }
457
458         if (pcb->so->so_options & SO_TIMESTAMP) {
459                 microtime(&tv);
460                 *ctl = sbcreatecontrol((caddr_t) &tv, sizeof(tv),
461                                         SCM_TIMESTAMP, SOL_SOCKET);
462                 if (*ctl != NULL)
463                         ctl = &((*ctl)->m_next);
464         }
465 } /* ng_btsocket_hci_raw_savctl */
466
467 /*
468  * Raw HCI sockets data input routine
469  */
470
471 static void
472 ng_btsocket_hci_raw_data_input(struct mbuf *nam)
473 {
474         ng_btsocket_hci_raw_pcb_p        pcb = NULL;
475         struct mbuf                     *m0 = NULL, *m = NULL;
476         struct sockaddr_hci             *sa = NULL;
477
478         m0 = nam->m_next;
479         nam->m_next = NULL;
480
481         KASSERT((nam->m_type == MT_SONAME),
482                 ("%s: m_type=%d\n", __func__, nam->m_type));
483         KASSERT((m0->m_flags & M_PKTHDR),
484                 ("%s: m_flags=%#x\n", __func__, m0->m_flags));
485
486         sa = mtod(nam, struct sockaddr_hci *);
487
488         mtx_lock(&ng_btsocket_hci_raw_sockets_mtx);
489
490         LIST_FOREACH(pcb, &ng_btsocket_hci_raw_sockets, next) {
491
492                 mtx_lock(&pcb->pcb_mtx);
493
494                 /*
495                  * If socket was bound then check address and
496                  *  make sure it matches.
497                  */
498
499                 if (pcb->addr.hci_node[0] != 0 &&
500                     strcmp(sa->hci_node, pcb->addr.hci_node) != 0)
501                         goto next;
502
503                 /*
504                  * Check packet against filters
505                  * XXX do we have to call m_pullup() here?
506                  */
507
508                 if (ng_btsocket_hci_raw_filter(pcb, m0, 1) != 0)
509                         goto next;
510
511                 /*
512                  * Make a copy of the packet, append to the socket's
513                  * receive queue and wakeup socket. sbappendaddr()
514                  * will check if socket has enough buffer space.
515                  */
516
517                 m = m_dup(m0, MB_DONTWAIT);
518                 if (m != NULL) {
519                         struct mbuf     *ctl = NULL;
520
521                         ng_btsocket_hci_raw_savctl(pcb, &ctl, m);
522
523                         if (sbappendaddr(&pcb->so->so_rcv, 
524                                         (struct sockaddr *) sa, m, ctl))
525                                 sorwakeup(pcb->so);
526                         else {
527                                 NG_BTSOCKET_HCI_RAW_INFO(
528 "%s: sbappendaddr() failed\n", __func__);
529
530                                 NG_FREE_M(m);
531                                 NG_FREE_M(ctl);
532                         }
533                 }
534 next:
535                 mtx_unlock(&pcb->pcb_mtx);
536         }
537
538         mtx_unlock(&ng_btsocket_hci_raw_sockets_mtx);
539
540         NG_FREE_M(nam);
541         NG_FREE_M(m0);
542 } /* ng_btsocket_hci_raw_data_input */ 
543
544 /*
545  * Raw HCI sockets message input routine
546  */
547
548 static void
549 ng_btsocket_hci_raw_msg_input(struct ng_mesg *msg)
550 {
551         ng_btsocket_hci_raw_pcb_p       pcb = NULL;
552
553         mtx_lock(&ng_btsocket_hci_raw_sockets_mtx);
554
555         LIST_FOREACH(pcb, &ng_btsocket_hci_raw_sockets, next) {
556                 mtx_lock(&pcb->pcb_mtx);
557
558                 if (msg->header.token == pcb->token) {
559                         pcb->msg = msg;
560                         wakeup(&pcb->msg);
561
562                         mtx_unlock(&pcb->pcb_mtx);
563                         mtx_unlock(&ng_btsocket_hci_raw_sockets_mtx);
564
565                         return;
566                 }
567
568                 mtx_unlock(&pcb->pcb_mtx);
569         }
570
571         mtx_unlock(&ng_btsocket_hci_raw_sockets_mtx);
572
573         NG_FREE_MSG(msg); /* checks for != NULL */
574 } /* ng_btsocket_hci_raw_msg_input */
575
576 /*
577  * Raw HCI sockets input routines
578  */
579
580 static void
581 ng_btsocket_hci_raw_input(void *context, int pending)
582 {
583         item_p  item = NULL;
584
585         for (;;) {
586                 mtx_lock(&ng_btsocket_hci_raw_queue_mtx);
587                 NG_BT_ITEMQ_DEQUEUE(&ng_btsocket_hci_raw_queue, item);
588                 mtx_unlock(&ng_btsocket_hci_raw_queue_mtx);
589
590                 if (item == NULL)
591                         break;
592
593                 switch(item->el_flags & NGQF_TYPE) {
594                 case NGQF_DATA: {
595                         struct mbuf     *m = NULL;
596
597                         NGI_GET_M(item, m);
598                         ng_btsocket_hci_raw_data_input(m);
599                         } break;
600
601                 case NGQF_MESG: {
602                         struct ng_mesg  *msg = NULL;
603
604                         NGI_GET_MSG(item, msg);
605                         ng_btsocket_hci_raw_msg_input(msg);
606                         } break;
607
608                 default:
609                         KASSERT(0, 
610 ("%s: invalid item type=%ld\n", __func__, (item->el_flags & NGQF_TYPE)));
611                         break;
612                 }
613
614                 NG_FREE_ITEM(item);
615         }
616 } /* ng_btsocket_hci_raw_input */
617
618 /*
619  * Raw HCI sockets output routine
620  */
621
622 static void
623 ng_btsocket_hci_raw_output(node_p node, hook_p hook, void *arg1, int arg2)
624 {
625         struct mbuf             *nam = (struct mbuf *) arg1, *m = NULL;
626         struct sockaddr_hci     *sa = NULL;
627         int                      error;
628
629         m = nam->m_next;
630         nam->m_next = NULL;
631
632         KASSERT((nam->m_type == MT_SONAME),
633                 ("%s: m_type=%d\n", __func__, nam->m_type));
634         KASSERT((m->m_flags & M_PKTHDR),
635                 ("%s: m_flags=%#x\n", __func__, m->m_flags));
636
637         sa = mtod(nam, struct sockaddr_hci *);
638
639         /*
640          * Find downstream hook
641          * XXX For now access node hook list directly. Should be safe because
642          * we used ng_send_fn() and we should have exclusive lock on the node.
643          */
644
645         LIST_FOREACH(hook, &node->nd_hooks, hk_hooks) {
646                 if (hook == NULL || NG_HOOK_NOT_VALID(hook) || 
647                     NG_NODE_NOT_VALID(NG_PEER_NODE(hook)))
648                         continue;
649
650                 if (strcmp(sa->hci_node, NG_PEER_NODE_NAME(hook)) == 0) {
651                         NG_SEND_DATA_ONLY(error, hook, m); /* sets m to NULL */
652                         break;
653                 }
654         }
655
656         NG_FREE_M(nam); /* check for != NULL */
657         NG_FREE_M(m);
658 } /* ng_btsocket_hci_raw_output */
659
660 /*
661  * Check frame against security and socket filters. 
662  * d (direction bit) == 1 means incoming frame.
663  */
664
665 static int
666 ng_btsocket_hci_raw_filter(ng_btsocket_hci_raw_pcb_p pcb, struct mbuf *m, int d)
667 {
668         int     type, event, opcode;
669
670         mtx_assert(&pcb->pcb_mtx, MA_OWNED);
671
672         switch ((type = *mtod(m, u_int8_t *))) {
673         case NG_HCI_CMD_PKT:
674                 if (!(pcb->flags & NG_BTSOCKET_HCI_RAW_PRIVILEGED)) {
675                         opcode = le16toh(mtod(m, ng_hci_cmd_pkt_t *)->opcode);
676                 
677                         if (!bit_test(
678 ng_btsocket_hci_raw_sec_filter->commands[NG_HCI_OGF(opcode) - 1],
679 NG_HCI_OCF(opcode) - 1))
680                                 return (EPERM);
681                 }
682
683                 if (d && !bit_test(pcb->filter.packet_mask, NG_HCI_CMD_PKT - 1))
684                         return (EPERM);
685                 break;
686
687         case NG_HCI_ACL_DATA_PKT:
688         case NG_HCI_SCO_DATA_PKT:
689                 if (!(pcb->flags & NG_BTSOCKET_HCI_RAW_PRIVILEGED) ||
690                     !bit_test(pcb->filter.packet_mask, type - 1) ||
691                     !d)
692                         return (EPERM);
693                 break;
694
695         case NG_HCI_EVENT_PKT:
696                 if (!d)
697                         return (EINVAL);
698
699                 event = mtod(m, ng_hci_event_pkt_t *)->event - 1;
700
701                 if (!(pcb->flags & NG_BTSOCKET_HCI_RAW_PRIVILEGED))
702                         if (!bit_test(ng_btsocket_hci_raw_sec_filter->events, event))
703                                 return (EPERM);
704
705                 if (!bit_test(pcb->filter.event_mask, event))
706                         return (EPERM);
707                 break;
708
709         default:
710                 return (EINVAL);
711         }
712
713         return (0);
714 } /* ng_btsocket_hci_raw_filter */
715
716 /*
717  * Initialize everything
718  */
719
720 void
721 ng_btsocket_hci_raw_init(void)
722 {
723         bitstr_t        *f = NULL;
724         int              error = 0;
725
726         ng_btsocket_hci_raw_node = NULL;
727         ng_btsocket_hci_raw_debug_level = NG_BTSOCKET_WARN_LEVEL;
728         ng_btsocket_hci_raw_ioctl_timeout = 5;
729
730         /* Register Netgraph node type */
731         error = ng_newtype(&typestruct);
732         if (error != 0) {
733                 NG_BTSOCKET_HCI_RAW_ALERT(
734 "%s: Could not register Netgraph node type, error=%d\n", __func__, error);
735
736                 return;
737         }
738
739         /* Create Netgrapg node */
740         error = ng_make_node_common(&typestruct, &ng_btsocket_hci_raw_node);
741         if (error != 0) {
742                 NG_BTSOCKET_HCI_RAW_ALERT(
743 "%s: Could not create Netgraph node, error=%d\n", __func__, error);
744
745                 ng_btsocket_hci_raw_node = NULL;
746
747                 return;
748         }
749
750         error = ng_name_node(ng_btsocket_hci_raw_node,
751                                 NG_BTSOCKET_HCI_RAW_NODE_TYPE);
752         if (error != 0) {
753                 NG_BTSOCKET_HCI_RAW_ALERT(
754 "%s: Could not name Netgraph node, error=%d\n", __func__, error);
755
756                 NG_NODE_UNREF(ng_btsocket_hci_raw_node);
757                 ng_btsocket_hci_raw_node = NULL;
758
759                 return;
760         }
761
762         /* Create input queue */
763         NG_BT_ITEMQ_INIT(&ng_btsocket_hci_raw_queue, ifqmaxlen);
764         mtx_init(&ng_btsocket_hci_raw_queue_mtx,
765                 "btsocks_hci_raw_queue_mtx", NULL, MTX_DEF);
766         TASK_INIT(&ng_btsocket_hci_raw_task, 0,
767                 ng_btsocket_hci_raw_input, NULL);
768
769         /* Create list of sockets */
770         LIST_INIT(&ng_btsocket_hci_raw_sockets);
771         mtx_init(&ng_btsocket_hci_raw_sockets_mtx,
772                 "btsocks_hci_raw_sockets_mtx", NULL, MTX_DEF);
773
774         /* Tokens */
775         ng_btsocket_hci_raw_token = 0;
776         mtx_init(&ng_btsocket_hci_raw_token_mtx,
777                 "btsocks_hci_raw_token_mtx", NULL, MTX_DEF);
778
779         /* 
780          * Security filter
781          * XXX never FREE()ed
782          */
783
784         ng_btsocket_hci_raw_sec_filter = NULL;
785
786         ng_btsocket_hci_raw_sec_filter = kmalloc(sizeof(struct ng_btsocket_hci_raw_sec_filter),
787                                                  M_NETGRAPH_BTSOCKET_HCI_RAW,
788                                                  M_WAITOK | M_NULLOK | M_ZERO);
789         if (ng_btsocket_hci_raw_sec_filter == NULL) {
790                 printf("%s: Could not allocate security filter!\n", __func__);
791                 return;
792         }
793
794         /*
795          * XXX How paranoid can we get? 
796          *
797          * Initialize security filter. If bit is set in the mask then
798          * unprivileged socket is allowed to send (receive) this command
799          * (event).
800          */
801
802         /* Enable all events */
803         memset(&ng_btsocket_hci_raw_sec_filter->events, 0xff,
804                 sizeof(ng_btsocket_hci_raw_sec_filter->events)/
805                         sizeof(ng_btsocket_hci_raw_sec_filter->events[0]));
806
807         /* Disable some critical events */
808         f = ng_btsocket_hci_raw_sec_filter->events;
809         bit_clear(f, NG_HCI_EVENT_RETURN_LINK_KEYS - 1);
810         bit_clear(f, NG_HCI_EVENT_LINK_KEY_NOTIFICATION - 1);
811         bit_clear(f, NG_HCI_EVENT_VENDOR - 1);
812
813         /* Commands - Link control */
814         f = ng_btsocket_hci_raw_sec_filter->commands[NG_HCI_OGF_LINK_CONTROL-1];
815         bit_set(f, NG_HCI_OCF_INQUIRY - 1);
816         bit_set(f, NG_HCI_OCF_INQUIRY_CANCEL - 1);
817         bit_set(f, NG_HCI_OCF_PERIODIC_INQUIRY - 1);
818         bit_set(f, NG_HCI_OCF_EXIT_PERIODIC_INQUIRY - 1);
819         bit_set(f, NG_HCI_OCF_REMOTE_NAME_REQ - 1);
820         bit_set(f, NG_HCI_OCF_READ_REMOTE_FEATURES - 1);
821         bit_set(f, NG_HCI_OCF_READ_REMOTE_VER_INFO - 1);
822         bit_set(f, NG_HCI_OCF_READ_CLOCK_OFFSET - 1);
823
824         /* Commands - Link policy */
825         f = ng_btsocket_hci_raw_sec_filter->commands[NG_HCI_OGF_LINK_POLICY-1];
826         bit_set(f, NG_HCI_OCF_ROLE_DISCOVERY - 1);
827         bit_set(f, NG_HCI_OCF_READ_LINK_POLICY_SETTINGS - 1);
828
829         /* Commands - Host controller and baseband */
830         f = ng_btsocket_hci_raw_sec_filter->commands[NG_HCI_OGF_HC_BASEBAND-1];
831         bit_set(f, NG_HCI_OCF_READ_PIN_TYPE - 1);
832         bit_set(f, NG_HCI_OCF_READ_LOCAL_NAME - 1);
833         bit_set(f, NG_HCI_OCF_READ_CON_ACCEPT_TIMO - 1);
834         bit_set(f, NG_HCI_OCF_READ_PAGE_TIMO - 1);
835         bit_set(f, NG_HCI_OCF_READ_SCAN_ENABLE - 1);
836         bit_set(f, NG_HCI_OCF_READ_PAGE_SCAN_ACTIVITY - 1);
837         bit_set(f, NG_HCI_OCF_READ_INQUIRY_SCAN_ACTIVITY - 1);
838         bit_set(f, NG_HCI_OCF_READ_AUTH_ENABLE - 1);
839         bit_set(f, NG_HCI_OCF_READ_ENCRYPTION_MODE - 1);
840         bit_set(f, NG_HCI_OCF_READ_UNIT_CLASS - 1);
841         bit_set(f, NG_HCI_OCF_READ_VOICE_SETTINGS - 1);
842         bit_set(f, NG_HCI_OCF_READ_AUTO_FLUSH_TIMO - 1);
843         bit_set(f, NG_HCI_OCF_READ_NUM_BROADCAST_RETRANS - 1);
844         bit_set(f, NG_HCI_OCF_READ_HOLD_MODE_ACTIVITY - 1);
845         bit_set(f, NG_HCI_OCF_READ_XMIT_LEVEL - 1);
846         bit_set(f, NG_HCI_OCF_READ_SCO_FLOW_CONTROL - 1);
847         bit_set(f, NG_HCI_OCF_READ_LINK_SUPERVISION_TIMO - 1);
848         bit_set(f, NG_HCI_OCF_READ_SUPPORTED_IAC_NUM - 1);
849         bit_set(f, NG_HCI_OCF_READ_IAC_LAP - 1);
850         bit_set(f, NG_HCI_OCF_READ_PAGE_SCAN_PERIOD - 1);
851         bit_set(f, NG_HCI_OCF_READ_PAGE_SCAN - 1);
852
853         /* Commands - Informational */
854         f = ng_btsocket_hci_raw_sec_filter->commands[NG_HCI_OGF_INFO - 1];
855         bit_set(f, NG_HCI_OCF_READ_LOCAL_VER - 1);
856         bit_set(f, NG_HCI_OCF_READ_LOCAL_FEATURES - 1);
857         bit_set(f, NG_HCI_OCF_READ_BUFFER_SIZE - 1);
858         bit_set(f, NG_HCI_OCF_READ_COUNTRY_CODE - 1);
859         bit_set(f, NG_HCI_OCF_READ_BDADDR - 1);
860
861         /* Commands - Status */
862         f = ng_btsocket_hci_raw_sec_filter->commands[NG_HCI_OGF_STATUS - 1];
863         bit_set(f, NG_HCI_OCF_READ_FAILED_CONTACT_CNTR - 1);
864         bit_set(f, NG_HCI_OCF_GET_LINK_QUALITY - 1);
865         bit_set(f, NG_HCI_OCF_READ_RSSI - 1);
866
867         /* Commands - Testing */
868         f = ng_btsocket_hci_raw_sec_filter->commands[NG_HCI_OGF_TESTING - 1];
869         bit_set(f, NG_HCI_OCF_READ_LOOPBACK_MODE - 1);
870 } /* ng_btsocket_hci_raw_init */
871
872 /*
873  * Abort connection on socket
874  */
875
876 void
877 ng_btsocket_hci_raw_abort(struct socket *so)
878 {
879 } /* ng_btsocket_hci_raw_abort */
880
881 void
882 ng_btsocket_hci_raw_close(struct socket *so)
883 {
884 } /* ng_btsocket_hci_raw_close */
885
886 /*
887  * Create new raw HCI socket
888  */
889
890 int
891 ng_btsocket_hci_raw_attach(struct socket *so, int proto, struct thread *td)
892 {
893         ng_btsocket_hci_raw_pcb_p       pcb = so2hci_raw_pcb(so);
894         int                             error = 0;
895
896         if (pcb != NULL)
897                 return (EISCONN);
898
899         if (ng_btsocket_hci_raw_node == NULL)
900                 return (EPROTONOSUPPORT);
901         if (proto != BLUETOOTH_PROTO_HCI)
902                 return (EPROTONOSUPPORT);
903         if (so->so_type != SOCK_RAW)
904                 return (ESOCKTNOSUPPORT);
905
906         error = soreserve(so, NG_BTSOCKET_HCI_RAW_SENDSPACE,
907                                 NG_BTSOCKET_HCI_RAW_RECVSPACE);
908         if (error != 0)
909                 return (error);
910
911         pcb = kmalloc(sizeof(*pcb), M_NETGRAPH_BTSOCKET_HCI_RAW,
912                       M_WAITOK | M_NULLOK | M_ZERO);
913         if (pcb == NULL)
914                 return (ENOMEM);
915
916         so->so_pcb = (caddr_t) pcb;
917         pcb->so = so;
918
919         if (priv_check(td, PRIV_NETBLUETOOTH_RAW) == 0)
920                 pcb->flags |= NG_BTSOCKET_HCI_RAW_PRIVILEGED;
921
922         /*
923          * Set default socket filter. By default socket only accepts HCI
924          * Command_Complete and Command_Status event packets.
925          */
926
927         bit_set(pcb->filter.event_mask, NG_HCI_EVENT_COMMAND_COMPL - 1);
928         bit_set(pcb->filter.event_mask, NG_HCI_EVENT_COMMAND_STATUS - 1);
929
930         mtx_init(&pcb->pcb_mtx, "btsocks_hci_raw_pcb_mtx", NULL, MTX_DEF);
931
932         mtx_lock(&ng_btsocket_hci_raw_sockets_mtx);
933         LIST_INSERT_HEAD(&ng_btsocket_hci_raw_sockets, pcb, next);
934         mtx_unlock(&ng_btsocket_hci_raw_sockets_mtx);
935
936         return (0);
937 } /* ng_btsocket_hci_raw_attach */
938
939 /*
940  * Bind raw HCI socket
941  */
942
943 int
944 ng_btsocket_hci_raw_bind(struct socket *so, struct sockaddr *nam,
945                 struct thread *td)
946 {
947         ng_btsocket_hci_raw_pcb_p        pcb = so2hci_raw_pcb(so);
948         struct sockaddr_hci             *sa = (struct sockaddr_hci *) nam;
949
950         if (pcb == NULL)
951                 return (EINVAL);
952         if (ng_btsocket_hci_raw_node == NULL)
953                 return (EINVAL);
954
955         if (sa == NULL)
956                 return (EINVAL);
957         if (sa->hci_family != AF_BLUETOOTH)
958                 return (EAFNOSUPPORT);
959         if (sa->hci_len != sizeof(*sa))
960                 return (EINVAL);
961         if (sa->hci_node[0] == 0)
962                 return (EINVAL);
963
964         mtx_lock(&pcb->pcb_mtx);
965         bcopy(sa, &pcb->addr, sizeof(pcb->addr));
966         mtx_unlock(&pcb->pcb_mtx);
967
968         return (0);
969 } /* ng_btsocket_hci_raw_bind */
970
971 /*
972  * Connect raw HCI socket
973  */
974
975 int
976 ng_btsocket_hci_raw_connect(struct socket *so, struct sockaddr *nam,
977                 struct thread *td)
978 {
979         ng_btsocket_hci_raw_pcb_p        pcb = so2hci_raw_pcb(so);
980         struct sockaddr_hci             *sa = (struct sockaddr_hci *) nam;
981
982         if (pcb == NULL)
983                 return (EINVAL);
984         if (ng_btsocket_hci_raw_node == NULL)
985                 return (EINVAL);
986
987         if (sa == NULL)
988                 return (EINVAL);
989         if (sa->hci_family != AF_BLUETOOTH)
990                 return (EAFNOSUPPORT);
991         if (sa->hci_len != sizeof(*sa))
992                 return (EINVAL);
993         if (sa->hci_node[0] == 0)
994                 return (EDESTADDRREQ);
995
996         mtx_lock(&pcb->pcb_mtx);
997
998         if (bcmp(sa, &pcb->addr, sizeof(pcb->addr)) != 0) {
999                 mtx_unlock(&pcb->pcb_mtx);
1000                 return (EADDRNOTAVAIL);
1001         }
1002
1003         soisconnected(so);
1004
1005         mtx_unlock(&pcb->pcb_mtx);
1006
1007         return (0);
1008 } /* ng_btsocket_hci_raw_connect */
1009
1010 /*
1011  * Process ioctl on socket
1012  */
1013
1014 int
1015 ng_btsocket_hci_raw_control(struct socket *so, u_long cmd, caddr_t data,
1016                 struct ifnet *ifp, struct thread *td)
1017 {
1018         ng_btsocket_hci_raw_pcb_p        pcb = so2hci_raw_pcb(so);
1019         char                             path[NG_NODESIZ + 1];
1020         struct ng_mesg                  *msg = NULL;
1021         int                              error = 0;
1022
1023         if (pcb == NULL)
1024                 return (EINVAL);
1025         if (ng_btsocket_hci_raw_node == NULL)
1026                 return (EINVAL);
1027
1028         mtx_lock(&pcb->pcb_mtx);
1029
1030         /* Check if we have device name */
1031         if (pcb->addr.hci_node[0] == 0) {
1032                 mtx_unlock(&pcb->pcb_mtx);
1033                 return (EHOSTUNREACH);
1034         }
1035
1036         /* Check if we have pending ioctl() */
1037         if (pcb->token != 0) {
1038                 mtx_unlock(&pcb->pcb_mtx);
1039                 return (EBUSY);
1040         }
1041
1042         snprintf(path, sizeof(path), "%s:", pcb->addr.hci_node);
1043
1044         switch (cmd) {
1045         case SIOC_HCI_RAW_NODE_GET_STATE: {
1046                 struct ng_btsocket_hci_raw_node_state   *p =
1047                         (struct ng_btsocket_hci_raw_node_state *) data;
1048
1049                 error = ng_btsocket_hci_raw_send_sync_ngmsg(pcb, path, 
1050                                 NGM_HCI_NODE_GET_STATE,
1051                                 &p->state, sizeof(p->state));
1052                 } break;
1053
1054         case SIOC_HCI_RAW_NODE_INIT:
1055                 if (pcb->flags & NG_BTSOCKET_HCI_RAW_PRIVILEGED)
1056                         error = ng_btsocket_hci_raw_send_ngmsg(path,
1057                                         NGM_HCI_NODE_INIT, NULL, 0);
1058                 else
1059                         error = EPERM;
1060                 break;
1061
1062         case SIOC_HCI_RAW_NODE_GET_DEBUG: {
1063                 struct ng_btsocket_hci_raw_node_debug   *p = 
1064                         (struct ng_btsocket_hci_raw_node_debug *) data;
1065
1066                 error = ng_btsocket_hci_raw_send_sync_ngmsg(pcb, path,
1067                                 NGM_HCI_NODE_GET_DEBUG,
1068                                 &p->debug, sizeof(p->debug));
1069                 } break;
1070
1071         case SIOC_HCI_RAW_NODE_SET_DEBUG: {
1072                 struct ng_btsocket_hci_raw_node_debug   *p = 
1073                         (struct ng_btsocket_hci_raw_node_debug *) data;
1074
1075                 if (pcb->flags & NG_BTSOCKET_HCI_RAW_PRIVILEGED)
1076                         error = ng_btsocket_hci_raw_send_ngmsg(path,
1077                                         NGM_HCI_NODE_SET_DEBUG, &p->debug,
1078                                         sizeof(p->debug));
1079                 else
1080                         error = EPERM;
1081                 } break;
1082
1083         case SIOC_HCI_RAW_NODE_GET_BUFFER: {
1084                 struct ng_btsocket_hci_raw_node_buffer  *p = 
1085                         (struct ng_btsocket_hci_raw_node_buffer *) data;
1086
1087                 error = ng_btsocket_hci_raw_send_sync_ngmsg(pcb, path,
1088                                 NGM_HCI_NODE_GET_BUFFER,
1089                                 &p->buffer, sizeof(p->buffer));
1090                 } break;
1091
1092         case SIOC_HCI_RAW_NODE_GET_BDADDR: {
1093                 struct ng_btsocket_hci_raw_node_bdaddr  *p = 
1094                         (struct ng_btsocket_hci_raw_node_bdaddr *) data;
1095
1096                 error = ng_btsocket_hci_raw_send_sync_ngmsg(pcb, path,
1097                                 NGM_HCI_NODE_GET_BDADDR,
1098                                 &p->bdaddr, sizeof(p->bdaddr));
1099                 } break;
1100
1101         case SIOC_HCI_RAW_NODE_GET_FEATURES: {
1102                 struct ng_btsocket_hci_raw_node_features        *p = 
1103                         (struct ng_btsocket_hci_raw_node_features *) data;
1104
1105                 error = ng_btsocket_hci_raw_send_sync_ngmsg(pcb, path,
1106                                 NGM_HCI_NODE_GET_FEATURES,
1107                                 &p->features, sizeof(p->features));
1108                 } break;
1109
1110         case SIOC_HCI_RAW_NODE_GET_STAT: {
1111                 struct ng_btsocket_hci_raw_node_stat    *p = 
1112                         (struct ng_btsocket_hci_raw_node_stat *) data;
1113
1114                 error = ng_btsocket_hci_raw_send_sync_ngmsg(pcb, path,
1115                                 NGM_HCI_NODE_GET_STAT,
1116                                 &p->stat, sizeof(p->stat));
1117                 } break;
1118
1119         case SIOC_HCI_RAW_NODE_RESET_STAT:
1120                 if (pcb->flags & NG_BTSOCKET_HCI_RAW_PRIVILEGED)
1121                         error = ng_btsocket_hci_raw_send_ngmsg(path,
1122                                         NGM_HCI_NODE_RESET_STAT, NULL, 0);
1123                 else
1124                         error = EPERM;
1125                 break;
1126
1127         case SIOC_HCI_RAW_NODE_FLUSH_NEIGHBOR_CACHE:
1128                 if (pcb->flags & NG_BTSOCKET_HCI_RAW_PRIVILEGED)
1129                         error = ng_btsocket_hci_raw_send_ngmsg(path,
1130                                         NGM_HCI_NODE_FLUSH_NEIGHBOR_CACHE,
1131                                         NULL, 0);
1132                 else
1133                         error = EPERM;
1134                 break;
1135
1136         case SIOC_HCI_RAW_NODE_GET_NEIGHBOR_CACHE:  {
1137                 struct ng_btsocket_hci_raw_node_neighbor_cache  *p = 
1138                         (struct ng_btsocket_hci_raw_node_neighbor_cache *) data;
1139                 ng_hci_node_get_neighbor_cache_ep               *p1 = NULL;
1140                 ng_hci_node_neighbor_cache_entry_ep             *p2 = NULL;
1141
1142                 if (p->num_entries <= 0 || 
1143                     p->num_entries > NG_HCI_MAX_NEIGHBOR_NUM ||
1144                     p->entries == NULL) {
1145                         error = EINVAL;
1146                         break;
1147                 }
1148
1149                 NG_MKMESSAGE(msg, NGM_HCI_COOKIE,
1150                         NGM_HCI_NODE_GET_NEIGHBOR_CACHE, 0, M_WAITOK | M_NULLOK);
1151                 if (msg == NULL) {
1152                         error = ENOMEM;
1153                         break;
1154                 }
1155                 ng_btsocket_hci_raw_get_token(&msg->header.token);
1156                 pcb->token = msg->header.token;
1157                 pcb->msg = NULL;
1158
1159                 NG_SEND_MSG_PATH(error, ng_btsocket_hci_raw_node, msg, path, 0);
1160                 if (error != 0) {
1161                         pcb->token = 0;
1162                         break;
1163                 }
1164
1165                 error = msleep(&pcb->msg, &pcb->pcb_mtx,
1166                                 PZERO|PCATCH, "hcictl", 
1167                                 ng_btsocket_hci_raw_ioctl_timeout * hz);
1168                 pcb->token = 0;
1169
1170                 if (error != 0)
1171                         break;
1172
1173                 if (pcb->msg != NULL &&
1174                     pcb->msg->header.cmd == NGM_HCI_NODE_GET_NEIGHBOR_CACHE) {
1175                         /* Return data back to user space */
1176                         p1 = (ng_hci_node_get_neighbor_cache_ep *)
1177                                 (pcb->msg->data);
1178                         p2 = (ng_hci_node_neighbor_cache_entry_ep *)
1179                                 (p1 + 1);
1180
1181                         p->num_entries = min(p->num_entries, p1->num_entries);
1182                         if (p->num_entries > 0)
1183                                 error = copyout((caddr_t) p2, 
1184                                                 (caddr_t) p->entries,
1185                                                 p->num_entries * sizeof(*p2));
1186                 } else
1187                         error = EINVAL;
1188
1189                 NG_FREE_MSG(pcb->msg); /* checks for != NULL */
1190                 }break;
1191
1192         case SIOC_HCI_RAW_NODE_GET_CON_LIST: {
1193                 struct ng_btsocket_hci_raw_con_list     *p = 
1194                         (struct ng_btsocket_hci_raw_con_list *) data;
1195                 ng_hci_node_con_list_ep                 *p1 = NULL;
1196                 ng_hci_node_con_ep                      *p2 = NULL;
1197
1198                 if (p->num_connections == 0 ||
1199                     p->num_connections > NG_HCI_MAX_CON_NUM ||
1200                     p->connections == NULL) {
1201                         error = EINVAL;
1202                         break;
1203                 }
1204
1205                 NG_MKMESSAGE(msg, NGM_HCI_COOKIE, NGM_HCI_NODE_GET_CON_LIST,
1206                         0, M_WAITOK | M_NULLOK);
1207                 if (msg == NULL) {
1208                         error = ENOMEM;
1209                         break;
1210                 }
1211                 ng_btsocket_hci_raw_get_token(&msg->header.token);
1212                 pcb->token = msg->header.token;
1213                 pcb->msg = NULL;
1214
1215                 NG_SEND_MSG_PATH(error, ng_btsocket_hci_raw_node, msg, path, 0);
1216                 if (error != 0) {
1217                         pcb->token = 0;
1218                         break;
1219                 }
1220
1221                 error = msleep(&pcb->msg, &pcb->pcb_mtx,
1222                                 PZERO|PCATCH, "hcictl", 
1223                                 ng_btsocket_hci_raw_ioctl_timeout * hz);
1224                 pcb->token = 0;
1225
1226                 if (error != 0)
1227                         break;
1228
1229                 if (pcb->msg != NULL &&
1230                     pcb->msg->header.cmd == NGM_HCI_NODE_GET_CON_LIST) {
1231                         /* Return data back to user space */
1232                         p1 = (ng_hci_node_con_list_ep *)(pcb->msg->data);
1233                         p2 = (ng_hci_node_con_ep *)(p1 + 1);
1234
1235                         p->num_connections = min(p->num_connections,
1236                                                 p1->num_connections);
1237                         if (p->num_connections > 0)
1238                                 error = copyout((caddr_t) p2, 
1239                                         (caddr_t) p->connections,
1240                                         p->num_connections * sizeof(*p2));
1241                 } else
1242                         error = EINVAL;
1243
1244                 NG_FREE_MSG(pcb->msg); /* checks for != NULL */
1245                 } break;
1246
1247         case SIOC_HCI_RAW_NODE_GET_LINK_POLICY_MASK: {
1248                 struct ng_btsocket_hci_raw_node_link_policy_mask        *p = 
1249                         (struct ng_btsocket_hci_raw_node_link_policy_mask *) 
1250                                 data;
1251
1252                 error = ng_btsocket_hci_raw_send_sync_ngmsg(pcb, path,
1253                                 NGM_HCI_NODE_GET_LINK_POLICY_SETTINGS_MASK,
1254                                 &p->policy_mask, sizeof(p->policy_mask));
1255                 } break;
1256
1257         case SIOC_HCI_RAW_NODE_SET_LINK_POLICY_MASK: {
1258                 struct ng_btsocket_hci_raw_node_link_policy_mask        *p = 
1259                         (struct ng_btsocket_hci_raw_node_link_policy_mask *) 
1260                                 data;
1261
1262                 if (pcb->flags & NG_BTSOCKET_HCI_RAW_PRIVILEGED)
1263                         error = ng_btsocket_hci_raw_send_ngmsg(path,
1264                                         NGM_HCI_NODE_SET_LINK_POLICY_SETTINGS_MASK,
1265                                         &p->policy_mask,
1266                                         sizeof(p->policy_mask));
1267                 else
1268                         error = EPERM;
1269                 } break;
1270
1271         case SIOC_HCI_RAW_NODE_GET_PACKET_MASK: {
1272                 struct ng_btsocket_hci_raw_node_packet_mask     *p = 
1273                         (struct ng_btsocket_hci_raw_node_packet_mask *) data;
1274
1275                 error = ng_btsocket_hci_raw_send_sync_ngmsg(pcb, path,
1276                                 NGM_HCI_NODE_GET_PACKET_MASK,
1277                                 &p->packet_mask, sizeof(p->packet_mask));
1278                 } break;
1279
1280         case SIOC_HCI_RAW_NODE_SET_PACKET_MASK: {
1281                 struct ng_btsocket_hci_raw_node_packet_mask     *p = 
1282                         (struct ng_btsocket_hci_raw_node_packet_mask *) data;
1283
1284                 if (pcb->flags & NG_BTSOCKET_HCI_RAW_PRIVILEGED)
1285                         error = ng_btsocket_hci_raw_send_ngmsg(path,
1286                                         NGM_HCI_NODE_SET_PACKET_MASK,
1287                                         &p->packet_mask,
1288                                         sizeof(p->packet_mask));
1289                 else
1290                         error = EPERM;
1291                 } break;
1292
1293         case SIOC_HCI_RAW_NODE_GET_ROLE_SWITCH: {
1294                 struct ng_btsocket_hci_raw_node_role_switch     *p = 
1295                         (struct ng_btsocket_hci_raw_node_role_switch *) data;
1296
1297                 error = ng_btsocket_hci_raw_send_sync_ngmsg(pcb, path,
1298                                 NGM_HCI_NODE_GET_ROLE_SWITCH,
1299                                 &p->role_switch, sizeof(p->role_switch));
1300                 } break;
1301
1302         case SIOC_HCI_RAW_NODE_SET_ROLE_SWITCH: {
1303                 struct ng_btsocket_hci_raw_node_role_switch     *p = 
1304                         (struct ng_btsocket_hci_raw_node_role_switch *) data;
1305
1306                 if (pcb->flags & NG_BTSOCKET_HCI_RAW_PRIVILEGED)
1307                         error = ng_btsocket_hci_raw_send_ngmsg(path,
1308                                         NGM_HCI_NODE_SET_ROLE_SWITCH,
1309                                         &p->role_switch,
1310                                         sizeof(p->role_switch));
1311                 else
1312                         error = EPERM;
1313                 } break;
1314
1315         case SIOC_HCI_RAW_NODE_LIST_NAMES: {
1316                 struct ng_btsocket_hci_raw_node_list_names      *nl =
1317                         (struct ng_btsocket_hci_raw_node_list_names *) data;
1318                 struct nodeinfo                                 *ni = nl->names;
1319
1320                 if (nl->num_names == 0) {
1321                         error = EINVAL;
1322                         break;
1323                 }
1324
1325                 NG_MKMESSAGE(msg, NGM_GENERIC_COOKIE, NGM_LISTNAMES,
1326                         0, M_WAITOK | M_NULLOK);
1327                 if (msg == NULL) {
1328                         error = ENOMEM;
1329                         break;
1330                 }
1331                 ng_btsocket_hci_raw_get_token(&msg->header.token);
1332                 pcb->token = msg->header.token;
1333                 pcb->msg = NULL;
1334
1335                 NG_SEND_MSG_PATH(error, ng_btsocket_hci_raw_node, msg, ".:", 0);
1336                 if (error != 0) {
1337                         pcb->token = 0;
1338                         break;
1339                 }
1340
1341                 error = msleep(&pcb->msg, &pcb->pcb_mtx,
1342                                 PZERO|PCATCH, "hcictl",
1343                                 ng_btsocket_hci_raw_ioctl_timeout * hz);
1344                 pcb->token = 0;
1345
1346                 if (error != 0)
1347                         break;
1348
1349                 if (pcb->msg != NULL && pcb->msg->header.cmd == NGM_LISTNAMES) {
1350                         /* Return data back to user space */
1351                         struct namelist *nl1 = (struct namelist *) pcb->msg->data;
1352                         struct nodeinfo *ni1 = &nl1->nodeinfo[0];
1353
1354                         while (nl->num_names > 0 && nl1->numnames > 0) {
1355                                 if (strcmp(ni1->type, NG_HCI_NODE_TYPE) == 0) {
1356                                         error = copyout((caddr_t) ni1,
1357                                                         (caddr_t) ni,
1358                                                         sizeof(*ni));
1359                                         if (error != 0)
1360                                                 break;
1361
1362                                         nl->num_names --;
1363                                         ni ++;
1364                                 }
1365
1366                                 nl1->numnames --;
1367                                 ni1 ++;
1368                         }
1369
1370                         nl->num_names = ni - nl->names;
1371                 } else
1372                         error = EINVAL;
1373
1374                 NG_FREE_MSG(pcb->msg); /* checks for != NULL */
1375                 } break;
1376
1377         default:
1378                 error = EINVAL;
1379                 break;
1380         }
1381
1382         mtx_unlock(&pcb->pcb_mtx);
1383
1384         return (error);
1385 } /* ng_btsocket_hci_raw_control */
1386
1387 /*
1388  * Process getsockopt/setsockopt system calls
1389  */
1390
1391 int
1392 ng_btsocket_hci_raw_ctloutput(struct socket *so, struct sockopt *sopt)
1393 {
1394         ng_btsocket_hci_raw_pcb_p               pcb = so2hci_raw_pcb(so);
1395         struct ng_btsocket_hci_raw_filter       filter;
1396         int                                     error = 0, dir;
1397
1398         if (pcb == NULL)
1399                 return (EINVAL);
1400         if (ng_btsocket_hci_raw_node == NULL)
1401                 return (EINVAL);
1402
1403         if (sopt->sopt_level != SOL_HCI_RAW)
1404                 return (0);
1405
1406         mtx_lock(&pcb->pcb_mtx);
1407
1408         switch (sopt->sopt_dir) {
1409         case SOPT_GET:
1410                 switch (sopt->sopt_name) {
1411                 case SO_HCI_RAW_FILTER:
1412                         error = sooptcopyout(sopt, &pcb->filter,
1413                                                 sizeof(pcb->filter));
1414                         break;
1415
1416                 case SO_HCI_RAW_DIRECTION:
1417                         dir = (pcb->flags & NG_BTSOCKET_HCI_RAW_DIRECTION)?1:0;
1418                         error = sooptcopyout(sopt, &dir, sizeof(dir));
1419                         break;
1420
1421                 default:
1422                         error = EINVAL;
1423                         break;
1424                 }
1425                 break;
1426
1427         case SOPT_SET:
1428                 switch (sopt->sopt_name) {
1429                 case SO_HCI_RAW_FILTER:
1430                         error = sooptcopyin(sopt, &filter, sizeof(filter),
1431                                                 sizeof(filter));
1432                         if (error == 0)
1433                                 bcopy(&filter, &pcb->filter,
1434                                                 sizeof(pcb->filter));
1435                         break;
1436
1437                 case SO_HCI_RAW_DIRECTION:
1438                         error = sooptcopyin(sopt, &dir, sizeof(dir),
1439                                                 sizeof(dir));
1440                         if (error != 0)
1441                                 break;
1442
1443                         if (dir)
1444                                 pcb->flags |= NG_BTSOCKET_HCI_RAW_DIRECTION;
1445                         else
1446                                 pcb->flags &= ~NG_BTSOCKET_HCI_RAW_DIRECTION;
1447                         break;
1448
1449                 default:
1450                         error = EINVAL;
1451                         break;
1452                 }
1453                 break;
1454
1455         default:
1456                 error = EINVAL;
1457                 break;
1458         }
1459
1460         mtx_unlock(&pcb->pcb_mtx);
1461         
1462         return (error);
1463 } /* ng_btsocket_hci_raw_ctloutput */
1464
1465 /*
1466  * Detach raw HCI socket
1467  */
1468
1469 void
1470 ng_btsocket_hci_raw_detach(struct socket *so)
1471 {
1472         ng_btsocket_hci_raw_pcb_p       pcb = so2hci_raw_pcb(so);
1473
1474         KASSERT(pcb != NULL, ("ng_btsocket_hci_raw_detach: pcb == NULL"));
1475
1476         if (ng_btsocket_hci_raw_node == NULL)
1477                 return;
1478
1479         mtx_lock(&ng_btsocket_hci_raw_sockets_mtx);
1480         mtx_lock(&pcb->pcb_mtx);
1481
1482         LIST_REMOVE(pcb, next);
1483
1484         mtx_unlock(&pcb->pcb_mtx);
1485         mtx_unlock(&ng_btsocket_hci_raw_sockets_mtx);
1486
1487         mtx_destroy(&pcb->pcb_mtx);
1488
1489         bzero(pcb, sizeof(*pcb));
1490         kfree(pcb, M_NETGRAPH_BTSOCKET_HCI_RAW);
1491
1492         so->so_pcb = NULL;
1493 } /* ng_btsocket_hci_raw_detach */
1494
1495 /*
1496  * Disconnect raw HCI socket
1497  */
1498
1499 int
1500 ng_btsocket_hci_raw_disconnect(struct socket *so)
1501 {
1502         ng_btsocket_hci_raw_pcb_p        pcb = so2hci_raw_pcb(so);
1503
1504         if (pcb == NULL)
1505                 return (EINVAL);
1506         if (ng_btsocket_hci_raw_node == NULL)
1507                 return (EINVAL);
1508
1509         mtx_lock(&pcb->pcb_mtx);
1510         soisdisconnected(so);
1511         mtx_unlock(&pcb->pcb_mtx);
1512
1513         return (0);
1514 } /* ng_btsocket_hci_raw_disconnect */
1515
1516 /*
1517  * Get socket peer's address
1518  */
1519
1520 int
1521 ng_btsocket_hci_raw_peeraddr(struct socket *so, struct sockaddr **nam)
1522 {
1523         return (ng_btsocket_hci_raw_sockaddr(so, nam));
1524 } /* ng_btsocket_hci_raw_peeraddr */
1525
1526 /*
1527  * Send data
1528  */
1529
1530 int
1531 ng_btsocket_hci_raw_send(struct socket *so, int flags, struct mbuf *m,
1532                 struct sockaddr *sa, struct mbuf *control, struct thread *td)
1533 {
1534         ng_btsocket_hci_raw_pcb_p        pcb = so2hci_raw_pcb(so);
1535         struct mbuf                     *nam = NULL;
1536         int                              error = 0;
1537
1538         if (ng_btsocket_hci_raw_node == NULL) {
1539                 error = ENETDOWN;
1540                 goto drop;
1541         }
1542         if (pcb == NULL) {
1543                 error = EINVAL;
1544                 goto drop;
1545         }
1546         if (control != NULL) {
1547                 error = EINVAL;
1548                 goto drop;
1549         }
1550
1551         if (m->m_pkthdr.len < sizeof(ng_hci_cmd_pkt_t) ||
1552             m->m_pkthdr.len > sizeof(ng_hci_cmd_pkt_t) + NG_HCI_CMD_PKT_SIZE) {
1553                 error = EMSGSIZE;
1554                 goto drop;
1555         }
1556
1557         if (m->m_len < sizeof(ng_hci_cmd_pkt_t)) {
1558                 if ((m = m_pullup(m, sizeof(ng_hci_cmd_pkt_t))) == NULL) {
1559                         error = ENOBUFS;
1560                         goto drop;
1561                 }
1562         }
1563         if (*mtod(m, u_int8_t *) != NG_HCI_CMD_PKT) {
1564                 error = ENOTSUP;
1565                 goto drop;
1566         }
1567
1568         mtx_lock(&pcb->pcb_mtx);
1569
1570         error = ng_btsocket_hci_raw_filter(pcb, m, 0);
1571         if (error != 0) {
1572                 mtx_unlock(&pcb->pcb_mtx);
1573                 goto drop;
1574         }
1575
1576         if (sa == NULL) {
1577                 if (pcb->addr.hci_node[0] == 0) {
1578                         mtx_unlock(&pcb->pcb_mtx);
1579                         error = EDESTADDRREQ;
1580                         goto drop;
1581                 }
1582
1583                 sa = (struct sockaddr *) &pcb->addr;
1584         }
1585
1586         MGET(nam, MB_DONTWAIT, MT_SONAME);
1587         if (nam == NULL) {
1588                 mtx_unlock(&pcb->pcb_mtx);
1589                 error = ENOBUFS;
1590                 goto drop;
1591         }
1592
1593         nam->m_len = sizeof(struct sockaddr_hci);
1594         bcopy(sa,mtod(nam, struct sockaddr_hci *),sizeof(struct sockaddr_hci));
1595
1596         nam->m_next = m;
1597         m = NULL;
1598
1599         mtx_unlock(&pcb->pcb_mtx);
1600
1601         return (ng_send_fn(ng_btsocket_hci_raw_node, NULL, 
1602                                 ng_btsocket_hci_raw_output, nam, 0));
1603 drop:
1604         NG_FREE_M(control); /* NG_FREE_M checks for != NULL */
1605         NG_FREE_M(nam);
1606         NG_FREE_M(m);
1607         
1608         return (error);
1609 } /* ng_btsocket_hci_raw_send */
1610
1611 /*
1612  * Get socket address
1613  */
1614
1615 int
1616 ng_btsocket_hci_raw_sockaddr(struct socket *so, struct sockaddr **nam)
1617 {
1618         ng_btsocket_hci_raw_pcb_p       pcb = so2hci_raw_pcb(so);
1619         struct sockaddr_hci             sa;
1620
1621         if (pcb == NULL)
1622                 return (EINVAL);
1623         if (ng_btsocket_hci_raw_node == NULL)
1624                 return (EINVAL);
1625
1626         bzero(&sa, sizeof(sa));
1627         sa.hci_len = sizeof(sa);
1628         sa.hci_family = AF_BLUETOOTH;
1629
1630         mtx_lock(&pcb->pcb_mtx);
1631         strlcpy(sa.hci_node, pcb->addr.hci_node, sizeof(sa.hci_node));
1632         mtx_unlock(&pcb->pcb_mtx);
1633
1634         *nam = sodupsockaddr((struct sockaddr *) &sa, M_WAITOK | M_NULLOK);
1635
1636         return ((*nam == NULL)? ENOMEM : 0);
1637 } /* ng_btsocket_hci_raw_sockaddr */
1638