bt-host.c

   1 /*
   2  * Wrap a host Bluetooth HCI socket in a struct HCIInfo.
   3  *
   4  * Copyright (C) 2008 Andrzej Zaborowski  <balrog@zabor.org>
   5  *
   6  * This program is free software; you can redistribute it and/or
   7  * modify it under the terms of the GNU General Public License as
   8  * published by the Free Software Foundation; either version 2 or
   9  * (at your option) version 3 of the License.
  10  *
  11  * This program is distributed in the hope that it will be useful,
  12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14  * GNU General Public License for more details.
  15  *
  16  * You should have received a copy of the GNU General Public License along
  17  * with this program; if not, see <http://www.gnu.org/licenses/>.
  18  */
  19
  20 #include "qemu-common.h"
  21 #include "qemu-char.h"
  22 #include "net.h"
  23 #include "bt-host.h"
  24
  25 #ifndef _WIN32
  26 # include <errno.h>
  27 # include <sys/ioctl.h>
  28 # include <sys/uio.h>
  29 # ifdef CONFIG_BLUEZ
  30 #  include <bluetooth/bluetooth.h>
  31 #  include <bluetooth/hci.h>
  32 #  include <bluetooth/hci_lib.h>
  33 # else
  34 #  include "hw/bt.h"
  35 #  define HCI_MAX_FRAME_SIZE    1028
  36 # endif
  37
  38 struct bt_host_hci_s {
  39     struct HCIInfo hci;
  40     int fd;
  41
  42     uint8_t hdr[HCI_MAX_FRAME_SIZE];
  43     int len;
  44 };
  45
  46 static void bt_host_send(struct HCIInfo *hci,
  47                 int type, const uint8_t *data, int len)
  48 {
  49     struct bt_host_hci_s *s = (struct bt_host_hci_s *) hci;
  50     uint8_t pkt = type;
  51     struct iovec iv[2];
  52
  53     iv[0].iov_base = (void *)&pkt;
  54     iv[0].iov_len  = 1;
  55     iv[1].iov_base = (void *) data;
  56     iv[1].iov_len  = len;
  57
  58     while (writev(s->fd, iv, 2) < 0) {
  59         if (errno != EAGAIN && errno != EINTR) {
  60             fprintf(stderr, "qemu: error %i writing bluetooth packet.\n",
  61                             errno);
  62             return;
  63         }
  64     }
  65 }
  66
  67 static void bt_host_cmd(struct HCIInfo *hci, const uint8_t *data, int len)
  68 {
  69     bt_host_send(hci, HCI_COMMAND_PKT, data, len);
  70 }
  71
  72 static void bt_host_acl(struct HCIInfo *hci, const uint8_t *data, int len)
  73 {
  74     bt_host_send(hci, HCI_ACLDATA_PKT, data, len);
  75 }
  76
  77 static void bt_host_sco(struct HCIInfo *hci, const uint8_t *data, int len)
  78 {
  79     bt_host_send(hci, HCI_SCODATA_PKT, data, len);
  80 }
  81
  82 static void bt_host_read(void *opaque)
  83 {
  84     struct bt_host_hci_s *s = (struct bt_host_hci_s *) opaque;
  85     uint8_t *pkt;
  86     int pktlen;
  87
  88     /* Seems that we can't read only the header first and then the amount
  89      * of data indicated in the header because Linux will discard everything
  90      * that's not been read in one go.  */
  91     s->len = read(s->fd, s->hdr, sizeof(s->hdr));
  92
  93     if (s->len < 0) {
  94         fprintf(stderr, "qemu: error %i reading HCI frame\n", errno);
  95         return;
  96     }
  97
  98     pkt = s->hdr;
  99     while (s->len --)
 100         switch (*pkt ++) {
 101         case HCI_EVENT_PKT:
 102             if (s->len < 2)
 103                 goto bad_pkt;
 104
 105             pktlen = MIN(pkt[1] + 2, s->len);
 106             s->hci.evt_recv(s->hci.opaque, pkt, pktlen);
 107             s->len -= pktlen;
 108             pkt += pktlen;
 109
 110             /* TODO: if this is an Inquiry Result event, it's also
 111              * interpreted by Linux kernel before we received it, possibly
 112              * we should clean the kernel Inquiry cache through
 113              * ioctl(s->fd, HCI_INQUIRY, ...).  */
 114             break;
 115
 116         case HCI_ACLDATA_PKT:
 117             if (s->len < 4)
 118                 goto bad_pkt;
 119
 120             pktlen = MIN(((pkt[3] << 8) | pkt[2]) + 4, s->len);
 121             s->hci.acl_recv(s->hci.opaque, pkt, pktlen);
 122             s->len -= pktlen;
 123             pkt += pktlen;
 124             break;
 125
 126         case HCI_SCODATA_PKT:
 127             if (s->len < 3)
 128                 goto bad_pkt;
 129
 130             pktlen = MIN(pkt[2] + 3, s->len);
 131             s->len -= pktlen;
 132             pkt += pktlen;
 133
 134         default:
 135         bad_pkt:
 136             fprintf(stderr, "qemu: bad HCI packet type %02x\n", pkt[-1]);
 137         }
 138 }
 139
 140 static int bt_host_bdaddr_set(struct HCIInfo *hci, const uint8_t *bd_addr)
 141 {
 142     return -ENOTSUP;
 143 }
 144
 145 struct HCIInfo *bt_host_hci(const char *id)
 146 {
 147     struct bt_host_hci_s *s;
 148     int fd = -1;
 149 # ifdef CONFIG_BLUEZ
 150     int dev_id = hci_devid(id);
 151     struct hci_filter flt;
 152
 153     if (dev_id < 0) {
 154         fprintf(stderr, "qemu: `%s' not available\n", id);
 155         return 0;
 156     }
 157
 158     fd = hci_open_dev(dev_id);
 159
 160     /* XXX: can we ensure nobody else has the device opened?  */
 161 # endif
 162
 163     if (fd < 0) {
 164         fprintf(stderr, "qemu: Can't open `%s': %s (%i)\n",
 165                         id, strerror(errno), errno);
 166         return NULL;
 167     }
 168
 169 # ifdef CONFIG_BLUEZ
 170     hci_filter_clear(&flt);
 171     hci_filter_all_ptypes(&flt);
 172     hci_filter_all_events(&flt);
 173
 174     if (setsockopt(fd, SOL_HCI, HCI_FILTER, &flt, sizeof(flt)) < 0) {
 175         fprintf(stderr, "qemu: Can't set HCI filter on socket (%i)\n", errno);
 176         return 0;
 177     }
 178 # endif
 179
 180     s = g_malloc0(sizeof(struct bt_host_hci_s));
 181     s->fd = fd;
 182     s->hci.cmd_send = bt_host_cmd;
 183     s->hci.sco_send = bt_host_sco;
 184     s->hci.acl_send = bt_host_acl;
 185     s->hci.bdaddr_set = bt_host_bdaddr_set;
 186
 187     qemu_set_fd_handler(s->fd, bt_host_read, NULL, s);
 188
 189     return &s->hci;
 190 }
 191 #else
 192 struct HCIInfo *bt_host_hci(const char *id)
 193 {
 194     fprintf(stderr, "qemu: bluetooth passthrough not supported (yet)\n");
 195
 196     return 0;
 197 }
 198 #endif