bluetooth: Lock down creation of AF_BLUETOOTH sockets.
[linux-2.6/android.git] / net / bluetooth / af_bluetooth.c
blobdc58d94bfc7d082b50f3e915aed1192bbb2a77ae
1 /*
2 BlueZ - Bluetooth protocol stack for Linux
3 Copyright (C) 2000-2001 Qualcomm Incorporated
5 Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License version 2 as
9 published by the Free Software Foundation;
11 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
12 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
13 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
14 IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
15 CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
16 WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
17 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
18 OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
20 ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
21 COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
22 SOFTWARE IS DISCLAIMED.
25 /* Bluetooth address family and sockets. */
27 #include <linux/module.h>
29 #include <linux/types.h>
30 #include <linux/list.h>
31 #include <linux/errno.h>
32 #include <linux/kernel.h>
33 #include <linux/sched.h>
34 #include <linux/slab.h>
35 #include <linux/skbuff.h>
36 #include <linux/init.h>
37 #include <linux/poll.h>
38 #include <net/sock.h>
40 #if defined(CONFIG_KMOD)
41 #include <linux/kmod.h>
42 #endif
44 #include <net/bluetooth/bluetooth.h>
46 #ifdef CONFIG_ANDROID_PARANOID_BLUETOOTH
47 #include <linux/android_aid.h>
48 #endif
50 #ifndef CONFIG_BT_SOCK_DEBUG
51 #undef BT_DBG
52 #define BT_DBG(D...)
53 #endif
55 #define VERSION "2.11"
57 /* Bluetooth sockets */
58 #define BT_MAX_PROTO 8
59 static struct net_proto_family *bt_proto[BT_MAX_PROTO];
60 static DEFINE_RWLOCK(bt_proto_lock);
62 int bt_sock_register(int proto, struct net_proto_family *ops)
64 int err = 0;
66 if (proto < 0 || proto >= BT_MAX_PROTO)
67 return -EINVAL;
69 write_lock(&bt_proto_lock);
71 if (bt_proto[proto])
72 err = -EEXIST;
73 else
74 bt_proto[proto] = ops;
76 write_unlock(&bt_proto_lock);
78 return err;
80 EXPORT_SYMBOL(bt_sock_register);
82 int bt_sock_unregister(int proto)
84 int err = 0;
86 if (proto < 0 || proto >= BT_MAX_PROTO)
87 return -EINVAL;
89 write_lock(&bt_proto_lock);
91 if (!bt_proto[proto])
92 err = -ENOENT;
93 else
94 bt_proto[proto] = NULL;
96 write_unlock(&bt_proto_lock);
98 return err;
100 EXPORT_SYMBOL(bt_sock_unregister);
102 #ifdef CONFIG_ANDROID_PARANOID_BLUETOOTH
103 static int is_bt_admin(void) {
104 return !current->uid || current->gid == AID_NET_BT_ADMIN ||
105 groups_search(current->group_info, AID_NET_BT_ADMIN);
108 static int is_bt_user_or_admin(void) {
109 return is_bt_admin() || current->gid == AID_NET_BT ||
110 groups_search(current->group_info, AID_NET_BT);
112 #endif
114 static int bt_sock_create(struct net *net, struct socket *sock, int proto)
116 int err;
118 #ifdef CONFIG_ANDROID_PARANOID_BLUETOOTH
119 if (proto == BTPROTO_RFCOMM || proto == BTPROTO_SCO ||
120 proto == BTPROTO_L2CAP) {
121 if (!is_bt_user_or_admin())
122 return -EPERM;
123 } else if (!is_bt_admin()) {
124 return -EPERM;
126 #endif
128 if (net != &init_net)
129 return -EAFNOSUPPORT;
131 if (proto < 0 || proto >= BT_MAX_PROTO)
132 return -EINVAL;
134 #if defined(CONFIG_KMOD)
135 if (!bt_proto[proto]) {
136 request_module("bt-proto-%d", proto);
138 #endif
140 err = -EPROTONOSUPPORT;
142 read_lock(&bt_proto_lock);
144 if (bt_proto[proto] && try_module_get(bt_proto[proto]->owner)) {
145 err = bt_proto[proto]->create(net, sock, proto);
146 module_put(bt_proto[proto]->owner);
149 read_unlock(&bt_proto_lock);
151 return err;
154 void bt_sock_link(struct bt_sock_list *l, struct sock *sk)
156 write_lock_bh(&l->lock);
157 sk_add_node(sk, &l->head);
158 write_unlock_bh(&l->lock);
160 EXPORT_SYMBOL(bt_sock_link);
162 void bt_sock_unlink(struct bt_sock_list *l, struct sock *sk)
164 write_lock_bh(&l->lock);
165 sk_del_node_init(sk);
166 write_unlock_bh(&l->lock);
168 EXPORT_SYMBOL(bt_sock_unlink);
170 void bt_accept_enqueue(struct sock *parent, struct sock *sk)
172 BT_DBG("parent %p, sk %p", parent, sk);
174 sock_hold(sk);
175 list_add_tail(&bt_sk(sk)->accept_q, &bt_sk(parent)->accept_q);
176 bt_sk(sk)->parent = parent;
177 parent->sk_ack_backlog++;
179 EXPORT_SYMBOL(bt_accept_enqueue);
181 void bt_accept_unlink(struct sock *sk)
183 BT_DBG("sk %p state %d", sk, sk->sk_state);
185 list_del_init(&bt_sk(sk)->accept_q);
186 bt_sk(sk)->parent->sk_ack_backlog--;
187 bt_sk(sk)->parent = NULL;
188 sock_put(sk);
190 EXPORT_SYMBOL(bt_accept_unlink);
192 struct sock *bt_accept_dequeue(struct sock *parent, struct socket *newsock)
194 struct list_head *p, *n;
195 struct sock *sk;
197 BT_DBG("parent %p", parent);
199 list_for_each_safe(p, n, &bt_sk(parent)->accept_q) {
200 sk = (struct sock *) list_entry(p, struct bt_sock, accept_q);
202 lock_sock(sk);
204 /* FIXME: Is this check still needed */
205 if (sk->sk_state == BT_CLOSED) {
206 release_sock(sk);
207 bt_accept_unlink(sk);
208 continue;
211 if (sk->sk_state == BT_CONNECTED || !newsock) {
212 bt_accept_unlink(sk);
213 if (newsock)
214 sock_graft(sk, newsock);
215 release_sock(sk);
216 return sk;
219 release_sock(sk);
221 return NULL;
223 EXPORT_SYMBOL(bt_accept_dequeue);
225 int bt_sock_recvmsg(struct kiocb *iocb, struct socket *sock,
226 struct msghdr *msg, size_t len, int flags)
228 int noblock = flags & MSG_DONTWAIT;
229 struct sock *sk = sock->sk;
230 struct sk_buff *skb;
231 size_t copied;
232 int err;
234 BT_DBG("sock %p sk %p len %d", sock, sk, len);
236 if (flags & (MSG_OOB))
237 return -EOPNOTSUPP;
239 if (!(skb = skb_recv_datagram(sk, flags, noblock, &err))) {
240 if (sk->sk_shutdown & RCV_SHUTDOWN)
241 return 0;
242 return err;
245 msg->msg_namelen = 0;
247 copied = skb->len;
248 if (len < copied) {
249 msg->msg_flags |= MSG_TRUNC;
250 copied = len;
253 skb_reset_transport_header(skb);
254 err = skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied);
256 skb_free_datagram(sk, skb);
258 return err ? : copied;
260 EXPORT_SYMBOL(bt_sock_recvmsg);
262 static inline unsigned int bt_accept_poll(struct sock *parent)
264 struct list_head *p, *n;
265 struct sock *sk;
267 list_for_each_safe(p, n, &bt_sk(parent)->accept_q) {
268 sk = (struct sock *) list_entry(p, struct bt_sock, accept_q);
269 if (sk->sk_state == BT_CONNECTED)
270 return POLLIN | POLLRDNORM;
273 return 0;
276 unsigned int bt_sock_poll(struct file * file, struct socket *sock, poll_table *wait)
278 struct sock *sk = sock->sk;
279 unsigned int mask = 0;
281 BT_DBG("sock %p, sk %p", sock, sk);
283 poll_wait(file, sk->sk_sleep, wait);
285 if (sk->sk_state == BT_LISTEN)
286 return bt_accept_poll(sk);
288 if (sk->sk_err || !skb_queue_empty(&sk->sk_error_queue))
289 mask |= POLLERR;
291 if (sk->sk_shutdown & RCV_SHUTDOWN)
292 mask |= POLLRDHUP;
294 if (sk->sk_shutdown == SHUTDOWN_MASK)
295 mask |= POLLHUP;
297 if (!skb_queue_empty(&sk->sk_receive_queue) ||
298 (sk->sk_shutdown & RCV_SHUTDOWN))
299 mask |= POLLIN | POLLRDNORM;
301 if (sk->sk_state == BT_CLOSED)
302 mask |= POLLHUP;
304 if (sk->sk_state == BT_CONNECT ||
305 sk->sk_state == BT_CONNECT2 ||
306 sk->sk_state == BT_CONFIG)
307 return mask;
309 if (sock_writeable(sk))
310 mask |= POLLOUT | POLLWRNORM | POLLWRBAND;
311 else
312 set_bit(SOCK_ASYNC_NOSPACE, &sk->sk_socket->flags);
314 return mask;
316 EXPORT_SYMBOL(bt_sock_poll);
318 int bt_sock_wait_state(struct sock *sk, int state, unsigned long timeo)
320 DECLARE_WAITQUEUE(wait, current);
321 int err = 0;
323 BT_DBG("sk %p", sk);
325 add_wait_queue(sk->sk_sleep, &wait);
326 while (sk->sk_state != state) {
327 set_current_state(TASK_INTERRUPTIBLE);
329 if (!timeo) {
330 err = -EINPROGRESS;
331 break;
334 if (signal_pending(current)) {
335 err = sock_intr_errno(timeo);
336 break;
339 release_sock(sk);
340 timeo = schedule_timeout(timeo);
341 lock_sock(sk);
343 err = sock_error(sk);
344 if (err)
345 break;
347 set_current_state(TASK_RUNNING);
348 remove_wait_queue(sk->sk_sleep, &wait);
349 return err;
351 EXPORT_SYMBOL(bt_sock_wait_state);
353 static struct net_proto_family bt_sock_family_ops = {
354 .owner = THIS_MODULE,
355 .family = PF_BLUETOOTH,
356 .create = bt_sock_create,
359 static int __init bt_init(void)
361 int err;
363 BT_INFO("Core ver %s", VERSION);
365 err = bt_sysfs_init();
366 if (err < 0)
367 return err;
369 err = sock_register(&bt_sock_family_ops);
370 if (err < 0) {
371 bt_sysfs_cleanup();
372 return err;
375 BT_INFO("HCI device and connection manager initialized");
377 hci_sock_init();
379 return 0;
382 static void __exit bt_exit(void)
384 hci_sock_cleanup();
386 sock_unregister(PF_BLUETOOTH);
388 bt_sysfs_cleanup();
391 subsys_initcall(bt_init);
392 module_exit(bt_exit);
394 MODULE_AUTHOR("Maxim Krasnyansky <maxk@qualcomm.com>, Marcel Holtmann <marcel@holtmann.org>");
395 MODULE_DESCRIPTION("Bluetooth Core ver " VERSION);
396 MODULE_VERSION(VERSION);
397 MODULE_LICENSE("GPL");
398 MODULE_ALIAS_NETPROTO(PF_BLUETOOTH);