include/hw/bt.h

   1 /*
   2  * QEMU Bluetooth HCI helpers.
   3  *
   4  * Copyright (C) 2007 OpenMoko, Inc.
   5  * Written by Andrzej Zaborowski <[email protected]>
   6  *
   7  * Useful definitions taken from BlueZ project's headers.
   8  * Copyright (C) 2000-2001  Qualcomm Incorporated
   9  * Copyright (C) 2002-2003  Maxim Krasnyansky <[email protected]>
  10  * Copyright (C) 2002-2006  Marcel Holtmann <[email protected]>
  11  *
  12  * This program is free software; you can redistribute it and/or
  13  * modify it under the terms of the GNU General Public License as
  14  * published by the Free Software Foundation; either version 2 of
  15  * the License, or (at your option) any later version.
  16  *
  17  * This program is distributed in the hope that it will be useful,
  18  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  19  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  20  * GNU General Public License for more details.
  21  *
  22  * You should have received a copy of the GNU General Public License
  23  * along with this program; if not, see <http://www.gnu.org/licenses/>.
  24  */
  25
  26 #ifndef HW_BT_H
  27 #define HW_BT_H
  28
  29
  30 /* BD Address */
  31 typedef struct {
  32     uint8_t b[6];
  33 } QEMU_PACKED bdaddr_t;
  34
  35 #define BDADDR_ANY      (&(bdaddr_t) {{0, 0, 0, 0, 0, 0}})
  36 #define BDADDR_ALL      (&(bdaddr_t) {{0xff, 0xff, 0xff, 0xff, 0xff, 0xff}})
  37 #define BDADDR_LOCAL    (&(bdaddr_t) {{0, 0, 0, 0xff, 0xff, 0xff}})
  38
  39 /* Copy, swap, convert BD Address */
  40 static inline int bacmp(const bdaddr_t *ba1, const bdaddr_t *ba2)
  41 {
  42     return memcmp(ba1, ba2, sizeof(bdaddr_t));
  43 }
  44 static inline void bacpy(bdaddr_t *dst, const bdaddr_t *src)
  45 {
  46     memcpy(dst, src, sizeof(bdaddr_t));
  47 }
  48
  49 #define BAINIT(orig)    { .b = {                \
  50     (orig)->b[0], (orig)->b[1], (orig)->b[2],   \
  51     (orig)->b[3], (orig)->b[4], (orig)->b[5],   \
  52 }, }
  53
  54 /* The twisted structures of a bluetooth environment */
  55 struct bt_device_s;
  56 struct bt_scatternet_s;
  57 struct bt_piconet_s;
  58 struct bt_link_s;
  59
  60 struct bt_scatternet_s {
  61     struct bt_device_s *slave;
  62 };
  63
  64 struct bt_link_s {
  65     struct bt_device_s *slave, *host;
  66     uint16_t handle;            /* Master (host) side handle */
  67     uint16_t acl_interval;
  68     enum {
  69         acl_active,
  70         acl_hold,
  71         acl_sniff,
  72         acl_parked,
  73     } acl_mode;
  74 };
  75
  76 struct bt_device_s {
  77     int lt_addr;
  78     bdaddr_t bd_addr;
  79     int mtu;
  80     int setup;
  81     struct bt_scatternet_s *net;
  82
  83     uint8_t key[16];
  84     int key_present;
  85     uint8_t class[3];
  86
  87     uint8_t reject_reason;
  88
  89     uint64_t lmp_caps;
  90     const char *lmp_name;
  91     void (*lmp_connection_request)(struct bt_link_s *link);
  92     void (*lmp_connection_complete)(struct bt_link_s *link);
  93     void (*lmp_disconnect_master)(struct bt_link_s *link);
  94     void (*lmp_disconnect_slave)(struct bt_link_s *link);
  95     void (*lmp_acl_data)(struct bt_link_s *link, const uint8_t *data,
  96                     int start, int len);
  97     void (*lmp_acl_resp)(struct bt_link_s *link, const uint8_t *data,
  98                     int start, int len);
  99     void (*lmp_mode_change)(struct bt_link_s *link);
 100
 101     void (*handle_destroy)(struct bt_device_s *device);
 102     struct bt_device_s *next;   /* Next in the piconet/scatternet */
 103
 104     int inquiry_scan;
 105     int page_scan;
 106
 107     uint16_t clkoff;    /* Note: Always little-endian */
 108 };
 109
 110 extern struct HCIInfo null_hci;
 111 /* bt.c */
 112 void bt_device_init(struct bt_device_s *dev, struct bt_scatternet_s *net);
 113 void bt_device_done(struct bt_device_s *dev);
 114 struct bt_scatternet_s *qemu_find_bt_vlan(int id);
 115
 116 /* bt-hci.c */
 117 struct HCIInfo *bt_new_hci(struct bt_scatternet_s *net);
 118 struct HCIInfo *hci_init(const char *str);
 119
 120 /* bt-vhci.c */
 121 void bt_vhci_init(struct HCIInfo *info);
 122
 123 /* bt-hci-csr.c */
 124 enum {
 125     csrhci_pin_reset,
 126     csrhci_pin_wakeup,
 127     __csrhci_pins,
 128 };
 129 qemu_irq *csrhci_pins_get(Chardev *chr);
 130 Chardev *uart_hci_init(void);
 131
 132 /* bt-l2cap.c */
 133 struct bt_l2cap_device_s;
 134 struct bt_l2cap_conn_params_s;
 135 struct bt_l2cap_psm_s;
 136 void bt_l2cap_device_init(struct bt_l2cap_device_s *dev,
 137                 struct bt_scatternet_s *net);
 138 void bt_l2cap_device_done(struct bt_l2cap_device_s *dev);
 139 void bt_l2cap_psm_register(struct bt_l2cap_device_s *dev, int psm,
 140                 int min_mtu, int (*new_channel)(struct bt_l2cap_device_s *dev,
 141                         struct bt_l2cap_conn_params_s *params));
 142
 143 struct bt_l2cap_device_s {
 144     struct bt_device_s device;
 145     struct bt_l2cap_psm_s *first_psm;
 146 };
 147
 148 struct bt_l2cap_conn_params_s {
 149     /* Input */
 150     uint8_t *(*sdu_out)(struct bt_l2cap_conn_params_s *chan, int len);
 151     void (*sdu_submit)(struct bt_l2cap_conn_params_s *chan);
 152     int remote_mtu;
 153     /* Output */
 154     void *opaque;
 155     void (*sdu_in)(void *opaque, const uint8_t *data, int len);
 156     void (*close)(void *opaque);
 157 };
 158
 159 enum bt_l2cap_psm_predef {
 160     BT_PSM_SDP          = 0x0001,
 161     BT_PSM_RFCOMM       = 0x0003,
 162     BT_PSM_TELEPHONY    = 0x0005,
 163     BT_PSM_TCS          = 0x0007,
 164     BT_PSM_BNEP         = 0x000f,
 165     BT_PSM_HID_CTRL     = 0x0011,
 166     BT_PSM_HID_INTR     = 0x0013,
 167     BT_PSM_UPNP         = 0x0015,
 168     BT_PSM_AVCTP        = 0x0017,
 169     BT_PSM_AVDTP        = 0x0019,
 170 };
 171
 172 /* bt-sdp.c */
 173 void bt_l2cap_sdp_init(struct bt_l2cap_device_s *dev);
 174
 175 /* bt-hid.c */
 176 struct bt_device_s *bt_keyboard_init(struct bt_scatternet_s *net);
 177
 178 /* Link Management Protocol layer defines */
 179
 180 #define LLID_ACLU_CONT          0x1
 181 #define LLID_ACLU_START         0x2
 182 #define LLID_ACLC               0x3
 183
 184 enum lmp_pdu_type {
 185     LMP_NAME_REQ                = 0x0001,
 186     LMP_NAME_RES                = 0x0002,
 187     LMP_ACCEPTED                = 0x0003,
 188     LMP_NOT_ACCEPTED            = 0x0004,
 189     LMP_CLKOFFSET_REQ           = 0x0005,
 190     LMP_CLKOFFSET_RES           = 0x0006,
 191     LMP_DETACH                  = 0x0007,
 192     LMP_IN_RAND                 = 0x0008,
 193     LMP_COMB_KEY                = 0x0009,
 194     LMP_UNIT_KEY                = 0x000a,
 195     LMP_AU_RAND                 = 0x000b,
 196     LMP_SRES                    = 0x000c,
 197     LMP_TEMP_RAND               = 0x000d,
 198     LMP_TEMP_KEY                = 0x000e,
 199     LMP_CRYPT_MODE_REQ          = 0x000f,
 200     LMP_CRYPT_KEY_SIZE_REQ      = 0x0010,
 201     LMP_START_ENCRYPT_REQ       = 0x0011,
 202     LMP_STOP_ENCRYPT_REQ        = 0x0012,
 203     LMP_SWITCH_REQ              = 0x0013,
 204     LMP_HOLD                    = 0x0014,
 205     LMP_HOLD_REQ                = 0x0015,
 206     LMP_SNIFF_REQ               = 0x0017,
 207     LMP_UNSNIFF_REQ             = 0x0018,
 208     LMP_LMP_PARK_REQ            = 0x0019,
 209     LMP_SET_BCAST_SCAN_WND      = 0x001b,
 210     LMP_MODIFY_BEACON           = 0x001c,
 211     LMP_UNPARK_BD_ADDR_REQ      = 0x001d,
 212     LMP_UNPARK_PM_ADDR_REQ      = 0x001e,
 213     LMP_INCR_POWER_REQ          = 0x001f,
 214     LMP_DECR_POWER_REQ          = 0x0020,
 215     LMP_MAX_POWER               = 0x0021,
 216     LMP_MIN_POWER               = 0x0022,
 217     LMP_AUTO_RATE               = 0x0023,
 218     LMP_PREFERRED_RATE          = 0x0024,
 219     LMP_VERSION_REQ             = 0x0025,
 220     LMP_VERSION_RES             = 0x0026,
 221     LMP_FEATURES_REQ            = 0x0027,
 222     LMP_FEATURES_RES            = 0x0028,
 223     LMP_QUALITY_OF_SERVICE      = 0x0029,
 224     LMP_QOS_REQ                 = 0x002a,
 225     LMP_RM_SCO_LINK_REQ         = 0x002b,
 226     LMP_SCO_LINK_REQ            = 0x002c,
 227     LMP_MAX_SLOT                = 0x002d,
 228     LMP_MAX_SLOT_REQ            = 0x002e,
 229     LMP_TIMING_ACCURACY_REQ     = 0x002f,
 230     LMP_TIMING_ACCURACY_RES     = 0x0030,
 231     LMP_SETUP_COMPLETE          = 0x0031,
 232     LMP_USE_SEMIPERM_KEY        = 0x0032,
 233     LMP_HOST_CONNECTION_REQ     = 0x0033,
 234     LMP_SLOT_OFFSET             = 0x0034,
 235     LMP_PAGE_MODE_REQ           = 0x0035,
 236     LMP_PAGE_SCAN_MODE_REQ      = 0x0036,
 237     LMP_SUPERVISION_TIMEOUT     = 0x0037,
 238     LMP_TEST_ACTIVATE           = 0x0038,
 239     LMP_TEST_CONTROL            = 0x0039,
 240     LMP_CRYPT_KEY_MASK_REQ      = 0x003a,
 241     LMP_CRYPT_KEY_MASK_RES      = 0x003b,
 242     LMP_SET_AFH                 = 0x003c,
 243     LMP_ACCEPTED_EXT            = 0x7f01,
 244     LMP_NOT_ACCEPTED_EXT        = 0x7f02,
 245     LMP_FEATURES_REQ_EXT        = 0x7f03,
 246     LMP_FEATURES_RES_EXT        = 0x7f04,
 247     LMP_PACKET_TYPE_TBL_REQ     = 0x7f0b,
 248     LMP_ESCO_LINK_REQ           = 0x7f0c,
 249     LMP_RM_ESCO_LINK_REQ        = 0x7f0d,
 250     LMP_CHANNEL_CLASS_REQ       = 0x7f10,
 251     LMP_CHANNEL_CLASS           = 0x7f11,
 252 };
 253
 254 /* Host Controller Interface layer defines */
 255
 256 enum hci_packet_type {
 257     HCI_COMMAND_PKT             = 0x01,
 258     HCI_ACLDATA_PKT             = 0x02,
 259     HCI_SCODATA_PKT             = 0x03,
 260     HCI_EVENT_PKT               = 0x04,
 261     HCI_VENDOR_PKT              = 0xff,
 262 };
 263
 264 enum bt_packet_type {
 265     HCI_2DH1    = 1 << 1,
 266     HCI_3DH1    = 1 << 2,
 267     HCI_DM1     = 1 << 3,
 268     HCI_DH1     = 1 << 4,
 269     HCI_2DH3    = 1 << 8,
 270     HCI_3DH3    = 1 << 9,
 271     HCI_DM3     = 1 << 10,
 272     HCI_DH3     = 1 << 11,
 273     HCI_2DH5    = 1 << 12,
 274     HCI_3DH5    = 1 << 13,
 275     HCI_DM5     = 1 << 14,
 276     HCI_DH5     = 1 << 15,
 277 };
 278
 279 enum sco_packet_type {
 280     HCI_HV1     = 1 << 5,
 281     HCI_HV2     = 1 << 6,
 282     HCI_HV3     = 1 << 7,
 283 };
 284
 285 enum ev_packet_type {
 286     HCI_EV3     = 1 << 3,
 287     HCI_EV4     = 1 << 4,
 288     HCI_EV5     = 1 << 5,
 289     HCI_2EV3    = 1 << 6,
 290     HCI_3EV3    = 1 << 7,
 291     HCI_2EV5    = 1 << 8,
 292     HCI_3EV5    = 1 << 9,
 293 };
 294
 295 enum hci_error_code {
 296     HCI_SUCCESS                         = 0x00,
 297     HCI_UNKNOWN_COMMAND                 = 0x01,
 298     HCI_NO_CONNECTION                   = 0x02,
 299     HCI_HARDWARE_FAILURE                = 0x03,
 300     HCI_PAGE_TIMEOUT                    = 0x04,
 301     HCI_AUTHENTICATION_FAILURE          = 0x05,
 302     HCI_PIN_OR_KEY_MISSING              = 0x06,
 303     HCI_MEMORY_FULL                     = 0x07,
 304     HCI_CONNECTION_TIMEOUT              = 0x08,
 305     HCI_MAX_NUMBER_OF_CONNECTIONS       = 0x09,
 306     HCI_MAX_NUMBER_OF_SCO_CONNECTIONS   = 0x0a,
 307     HCI_ACL_CONNECTION_EXISTS           = 0x0b,
 308     HCI_COMMAND_DISALLOWED              = 0x0c,
 309     HCI_REJECTED_LIMITED_RESOURCES      = 0x0d,
 310     HCI_REJECTED_SECURITY               = 0x0e,
 311     HCI_REJECTED_PERSONAL               = 0x0f,
 312     HCI_HOST_TIMEOUT                    = 0x10,
 313     HCI_UNSUPPORTED_FEATURE             = 0x11,
 314     HCI_INVALID_PARAMETERS              = 0x12,
 315     HCI_OE_USER_ENDED_CONNECTION        = 0x13,
 316     HCI_OE_LOW_RESOURCES                = 0x14,
 317     HCI_OE_POWER_OFF                    = 0x15,
 318     HCI_CONNECTION_TERMINATED           = 0x16,
 319     HCI_REPEATED_ATTEMPTS               = 0x17,
 320     HCI_PAIRING_NOT_ALLOWED             = 0x18,
 321     HCI_UNKNOWN_LMP_PDU                 = 0x19,
 322     HCI_UNSUPPORTED_REMOTE_FEATURE      = 0x1a,
 323     HCI_SCO_OFFSET_REJECTED             = 0x1b,
 324     HCI_SCO_INTERVAL_REJECTED           = 0x1c,
 325     HCI_AIR_MODE_REJECTED               = 0x1d,
 326     HCI_INVALID_LMP_PARAMETERS          = 0x1e,
 327     HCI_UNSPECIFIED_ERROR               = 0x1f,
 328     HCI_UNSUPPORTED_LMP_PARAMETER_VALUE = 0x20,
 329     HCI_ROLE_CHANGE_NOT_ALLOWED         = 0x21,
 330     HCI_LMP_RESPONSE_TIMEOUT            = 0x22,
 331     HCI_LMP_ERROR_TRANSACTION_COLLISION = 0x23,
 332     HCI_LMP_PDU_NOT_ALLOWED             = 0x24,
 333     HCI_ENCRYPTION_MODE_NOT_ACCEPTED    = 0x25,
 334     HCI_UNIT_LINK_KEY_USED              = 0x26,
 335     HCI_QOS_NOT_SUPPORTED               = 0x27,
 336     HCI_INSTANT_PASSED                  = 0x28,
 337     HCI_PAIRING_NOT_SUPPORTED           = 0x29,
 338     HCI_TRANSACTION_COLLISION           = 0x2a,
 339     HCI_QOS_UNACCEPTABLE_PARAMETER      = 0x2c,
 340     HCI_QOS_REJECTED                    = 0x2d,
 341     HCI_CLASSIFICATION_NOT_SUPPORTED    = 0x2e,
 342     HCI_INSUFFICIENT_SECURITY           = 0x2f,
 343     HCI_PARAMETER_OUT_OF_RANGE          = 0x30,
 344     HCI_ROLE_SWITCH_PENDING             = 0x32,
 345     HCI_SLOT_VIOLATION                  = 0x34,
 346     HCI_ROLE_SWITCH_FAILED              = 0x35,
 347 };
 348
 349 enum acl_flag_bits {
 350     ACL_CONT            = 1 << 0,
 351     ACL_START           = 1 << 1,
 352     ACL_ACTIVE_BCAST    = 1 << 2,
 353     ACL_PICO_BCAST      = 1 << 3,
 354 };
 355
 356 enum baseband_link_type {
 357     SCO_LINK            = 0x00,
 358     ACL_LINK            = 0x01,
 359 };
 360
 361 enum lmp_feature_bits0 {
 362     LMP_3SLOT           = 1 << 0,
 363     LMP_5SLOT           = 1 << 1,
 364     LMP_ENCRYPT         = 1 << 2,
 365     LMP_SOFFSET         = 1 << 3,
 366     LMP_TACCURACY       = 1 << 4,
 367     LMP_RSWITCH         = 1 << 5,
 368     LMP_HOLD_MODE       = 1 << 6,
 369     LMP_SNIFF_MODE      = 1 << 7,
 370 };
 371
 372 enum lmp_feature_bits1 {
 373     LMP_PARK            = 1 << 0,
 374     LMP_RSSI            = 1 << 1,
 375     LMP_QUALITY         = 1 << 2,
 376     LMP_SCO             = 1 << 3,
 377     LMP_HV2             = 1 << 4,
 378     LMP_HV3             = 1 << 5,
 379     LMP_ULAW            = 1 << 6,
 380     LMP_ALAW            = 1 << 7,
 381 };
 382
 383 enum lmp_feature_bits2 {
 384     LMP_CVSD            = 1 << 0,
 385     LMP_PSCHEME         = 1 << 1,
 386     LMP_PCONTROL        = 1 << 2,
 387     LMP_TRSP_SCO        = 1 << 3,
 388     LMP_BCAST_ENC       = 1 << 7,
 389 };
 390
 391 enum lmp_feature_bits3 {
 392     LMP_EDR_ACL_2M      = 1 << 1,
 393     LMP_EDR_ACL_3M      = 1 << 2,
 394     LMP_ENH_ISCAN       = 1 << 3,
 395     LMP_ILACE_ISCAN     = 1 << 4,
 396     LMP_ILACE_PSCAN     = 1 << 5,
 397     LMP_RSSI_INQ        = 1 << 6,
 398     LMP_ESCO            = 1 << 7,
 399 };
 400
 401 enum lmp_feature_bits4 {
 402     LMP_EV4             = 1 << 0,
 403     LMP_EV5             = 1 << 1,
 404     LMP_AFH_CAP_SLV     = 1 << 3,
 405     LMP_AFH_CLS_SLV     = 1 << 4,
 406     LMP_EDR_3SLOT       = 1 << 7,
 407 };
 408
 409 enum lmp_feature_bits5 {
 410     LMP_EDR_5SLOT       = 1 << 0,
 411     LMP_SNIFF_SUBR      = 1 << 1,
 412     LMP_AFH_CAP_MST     = 1 << 3,
 413     LMP_AFH_CLS_MST     = 1 << 4,
 414     LMP_EDR_ESCO_2M     = 1 << 5,
 415     LMP_EDR_ESCO_3M     = 1 << 6,
 416     LMP_EDR_3S_ESCO     = 1 << 7,
 417 };
 418
 419 enum lmp_feature_bits6 {
 420     LMP_EXT_INQ         = 1 << 0,
 421 };
 422
 423 enum lmp_feature_bits7 {
 424     LMP_EXT_FEAT        = 1 << 7,
 425 };
 426
 427 enum hci_link_policy {
 428     HCI_LP_RSWITCH      = 1 << 0,
 429     HCI_LP_HOLD         = 1 << 1,
 430     HCI_LP_SNIFF        = 1 << 2,
 431     HCI_LP_PARK         = 1 << 3,
 432 };
 433
 434 enum hci_link_mode {
 435     HCI_LM_ACCEPT       = 1 << 15,
 436     HCI_LM_MASTER       = 1 << 0,
 437     HCI_LM_AUTH         = 1 << 1,
 438     HCI_LM_ENCRYPT      = 1 << 2,
 439     HCI_LM_TRUSTED      = 1 << 3,
 440     HCI_LM_RELIABLE     = 1 << 4,
 441     HCI_LM_SECURE       = 1 << 5,
 442 };
 443
 444 /* HCI Commands */
 445
 446 /* Link Control */
 447 #define OGF_LINK_CTL            0x01
 448
 449 #define OCF_INQUIRY                     0x0001
 450 typedef struct {
 451     uint8_t     lap[3];
 452     uint8_t     length;         /* 1.28s units */
 453     uint8_t     num_rsp;
 454 } QEMU_PACKED inquiry_cp;
 455 #define INQUIRY_CP_SIZE 5
 456
 457 typedef struct {
 458     uint8_t             status;
 459     bdaddr_t    bdaddr;
 460 } QEMU_PACKED status_bdaddr_rp;
 461 #define STATUS_BDADDR_RP_SIZE 7
 462
 463 #define OCF_INQUIRY_CANCEL              0x0002
 464
 465 #define OCF_PERIODIC_INQUIRY            0x0003
 466 typedef struct {
 467     uint16_t    max_period;     /* 1.28s units */
 468     uint16_t    min_period;     /* 1.28s units */
 469     uint8_t     lap[3];
 470     uint8_t     length;         /* 1.28s units */
 471     uint8_t     num_rsp;
 472 } QEMU_PACKED periodic_inquiry_cp;
 473 #define PERIODIC_INQUIRY_CP_SIZE 9
 474
 475 #define OCF_EXIT_PERIODIC_INQUIRY       0x0004
 476
 477 #define OCF_CREATE_CONN                 0x0005
 478 typedef struct {
 479     bdaddr_t    bdaddr;
 480     uint16_t    pkt_type;
 481     uint8_t     pscan_rep_mode;
 482     uint8_t     pscan_mode;
 483     uint16_t    clock_offset;
 484     uint8_t     role_switch;
 485 } QEMU_PACKED create_conn_cp;
 486 #define CREATE_CONN_CP_SIZE 13
 487
 488 #define OCF_DISCONNECT                  0x0006
 489 typedef struct {
 490     uint16_t    handle;
 491     uint8_t     reason;
 492 } QEMU_PACKED disconnect_cp;
 493 #define DISCONNECT_CP_SIZE 3
 494
 495 #define OCF_ADD_SCO                     0x0007
 496 typedef struct {
 497     uint16_t    handle;
 498     uint16_t    pkt_type;
 499 } QEMU_PACKED add_sco_cp;
 500 #define ADD_SCO_CP_SIZE 4
 501
 502 #define OCF_CREATE_CONN_CANCEL          0x0008
 503 typedef struct {
 504     bdaddr_t    bdaddr;
 505 } QEMU_PACKED create_conn_cancel_cp;
 506 #define CREATE_CONN_CANCEL_CP_SIZE 6
 507
 508 typedef struct {
 509     uint8_t     status;
 510     bdaddr_t    bdaddr;
 511 } QEMU_PACKED create_conn_cancel_rp;
 512 #define CREATE_CONN_CANCEL_RP_SIZE 7
 513
 514 #define OCF_ACCEPT_CONN_REQ             0x0009
 515 typedef struct {
 516     bdaddr_t    bdaddr;
 517     uint8_t     role;
 518 } QEMU_PACKED accept_conn_req_cp;
 519 #define ACCEPT_CONN_REQ_CP_SIZE 7
 520
 521 #define OCF_REJECT_CONN_REQ             0x000A
 522 typedef struct {
 523     bdaddr_t    bdaddr;
 524     uint8_t     reason;
 525 } QEMU_PACKED reject_conn_req_cp;
 526 #define REJECT_CONN_REQ_CP_SIZE 7
 527
 528 #define OCF_LINK_KEY_REPLY              0x000B
 529 typedef struct {
 530     bdaddr_t    bdaddr;
 531     uint8_t     link_key[16];
 532 } QEMU_PACKED link_key_reply_cp;
 533 #define LINK_KEY_REPLY_CP_SIZE 22
 534
 535 #define OCF_LINK_KEY_NEG_REPLY          0x000C
 536
 537 #define OCF_PIN_CODE_REPLY              0x000D
 538 typedef struct {
 539     bdaddr_t    bdaddr;
 540     uint8_t     pin_len;
 541     uint8_t     pin_code[16];
 542 } QEMU_PACKED pin_code_reply_cp;
 543 #define PIN_CODE_REPLY_CP_SIZE 23
 544
 545 #define OCF_PIN_CODE_NEG_REPLY          0x000E
 546
 547 #define OCF_SET_CONN_PTYPE              0x000F
 548 typedef struct {
 549     uint16_t     handle;
 550     uint16_t     pkt_type;
 551 } QEMU_PACKED set_conn_ptype_cp;
 552 #define SET_CONN_PTYPE_CP_SIZE 4
 553
 554 #define OCF_AUTH_REQUESTED              0x0011
 555 typedef struct {
 556     uint16_t     handle;
 557 } QEMU_PACKED auth_requested_cp;
 558 #define AUTH_REQUESTED_CP_SIZE 2
 559
 560 #define OCF_SET_CONN_ENCRYPT            0x0013
 561 typedef struct {
 562     uint16_t    handle;
 563     uint8_t     encrypt;
 564 } QEMU_PACKED set_conn_encrypt_cp;
 565 #define SET_CONN_ENCRYPT_CP_SIZE 3
 566
 567 #define OCF_CHANGE_CONN_LINK_KEY        0x0015
 568 typedef struct {
 569     uint16_t    handle;
 570 } QEMU_PACKED change_conn_link_key_cp;
 571 #define CHANGE_CONN_LINK_KEY_CP_SIZE 2
 572
 573 #define OCF_MASTER_LINK_KEY             0x0017
 574 typedef struct {
 575     uint8_t     key_flag;
 576 } QEMU_PACKED master_link_key_cp;
 577 #define MASTER_LINK_KEY_CP_SIZE 1
 578
 579 #define OCF_REMOTE_NAME_REQ             0x0019
 580 typedef struct {
 581     bdaddr_t    bdaddr;
 582     uint8_t     pscan_rep_mode;
 583     uint8_t     pscan_mode;
 584     uint16_t    clock_offset;
 585 } QEMU_PACKED remote_name_req_cp;
 586 #define REMOTE_NAME_REQ_CP_SIZE 10
 587
 588 #define OCF_REMOTE_NAME_REQ_CANCEL      0x001A
 589 typedef struct {
 590     bdaddr_t    bdaddr;
 591 } QEMU_PACKED remote_name_req_cancel_cp;
 592 #define REMOTE_NAME_REQ_CANCEL_CP_SIZE 6
 593
 594 typedef struct {
 595     uint8_t             status;
 596     bdaddr_t    bdaddr;
 597 } QEMU_PACKED remote_name_req_cancel_rp;
 598 #define REMOTE_NAME_REQ_CANCEL_RP_SIZE 7
 599
 600 #define OCF_READ_REMOTE_FEATURES        0x001B
 601 typedef struct {
 602     uint16_t    handle;
 603 } QEMU_PACKED read_remote_features_cp;
 604 #define READ_REMOTE_FEATURES_CP_SIZE 2
 605
 606 #define OCF_READ_REMOTE_EXT_FEATURES    0x001C
 607 typedef struct {
 608     uint16_t    handle;
 609     uint8_t     page_num;
 610 } QEMU_PACKED read_remote_ext_features_cp;
 611 #define READ_REMOTE_EXT_FEATURES_CP_SIZE 3
 612
 613 #define OCF_READ_REMOTE_VERSION         0x001D
 614 typedef struct {
 615     uint16_t    handle;
 616 } QEMU_PACKED read_remote_version_cp;
 617 #define READ_REMOTE_VERSION_CP_SIZE 2
 618
 619 #define OCF_READ_CLOCK_OFFSET           0x001F
 620 typedef struct {
 621     uint16_t    handle;
 622 } QEMU_PACKED read_clock_offset_cp;
 623 #define READ_CLOCK_OFFSET_CP_SIZE 2
 624
 625 #define OCF_READ_LMP_HANDLE             0x0020
 626 typedef struct {
 627     uint16_t    handle;
 628 } QEMU_PACKED read_lmp_handle_cp;
 629 #define READ_LMP_HANDLE_CP_SIZE 2
 630
 631 typedef struct {
 632     uint8_t     status;
 633     uint16_t    handle;
 634     uint8_t     lmp_handle;
 635     uint32_t    reserved;
 636 } QEMU_PACKED read_lmp_handle_rp;
 637 #define READ_LMP_HANDLE_RP_SIZE 8
 638
 639 #define OCF_SETUP_SYNC_CONN             0x0028
 640 typedef struct {
 641     uint16_t    handle;
 642     uint32_t    tx_bandwidth;
 643     uint32_t    rx_bandwidth;
 644     uint16_t    max_latency;
 645     uint16_t    voice_setting;
 646     uint8_t     retrans_effort;
 647     uint16_t    pkt_type;
 648 } QEMU_PACKED setup_sync_conn_cp;
 649 #define SETUP_SYNC_CONN_CP_SIZE 17
 650
 651 #define OCF_ACCEPT_SYNC_CONN_REQ        0x0029
 652 typedef struct {
 653     bdaddr_t    bdaddr;
 654     uint32_t    tx_bandwidth;
 655     uint32_t    rx_bandwidth;
 656     uint16_t    max_latency;
 657     uint16_t    voice_setting;
 658     uint8_t     retrans_effort;
 659     uint16_t    pkt_type;
 660 } QEMU_PACKED accept_sync_conn_req_cp;
 661 #define ACCEPT_SYNC_CONN_REQ_CP_SIZE 21
 662
 663 #define OCF_REJECT_SYNC_CONN_REQ        0x002A
 664 typedef struct {
 665     bdaddr_t    bdaddr;
 666     uint8_t     reason;
 667 } QEMU_PACKED reject_sync_conn_req_cp;
 668 #define REJECT_SYNC_CONN_REQ_CP_SIZE 7
 669
 670 /* Link Policy */
 671 #define OGF_LINK_POLICY         0x02
 672
 673 #define OCF_HOLD_MODE                   0x0001
 674 typedef struct {
 675     uint16_t    handle;
 676     uint16_t    max_interval;
 677     uint16_t    min_interval;
 678 } QEMU_PACKED hold_mode_cp;
 679 #define HOLD_MODE_CP_SIZE 6
 680
 681 #define OCF_SNIFF_MODE                  0x0003
 682 typedef struct {
 683     uint16_t    handle;
 684     uint16_t    max_interval;
 685     uint16_t    min_interval;
 686     uint16_t    attempt;
 687     uint16_t    timeout;
 688 } QEMU_PACKED sniff_mode_cp;
 689 #define SNIFF_MODE_CP_SIZE 10
 690
 691 #define OCF_EXIT_SNIFF_MODE             0x0004
 692 typedef struct {
 693     uint16_t    handle;
 694 } QEMU_PACKED exit_sniff_mode_cp;
 695 #define EXIT_SNIFF_MODE_CP_SIZE 2
 696
 697 #define OCF_PARK_MODE                   0x0005
 698 typedef struct {
 699     uint16_t    handle;
 700     uint16_t    max_interval;
 701     uint16_t    min_interval;
 702 } QEMU_PACKED park_mode_cp;
 703 #define PARK_MODE_CP_SIZE 6
 704
 705 #define OCF_EXIT_PARK_MODE              0x0006
 706 typedef struct {
 707     uint16_t    handle;
 708 } QEMU_PACKED exit_park_mode_cp;
 709 #define EXIT_PARK_MODE_CP_SIZE 2
 710
 711 #define OCF_QOS_SETUP                   0x0007
 712 typedef struct {
 713     uint8_t     service_type;           /* 1 = best effort */
 714     uint32_t    token_rate;             /* Byte per seconds */
 715     uint32_t    peak_bandwidth;         /* Byte per seconds */
 716     uint32_t    latency;                /* Microseconds */
 717     uint32_t    delay_variation;        /* Microseconds */
 718 } QEMU_PACKED hci_qos;
 719 #define HCI_QOS_CP_SIZE 17
 720 typedef struct {
 721     uint16_t    handle;
 722     uint8_t     flags;                  /* Reserved */
 723     hci_qos     qos;
 724 } QEMU_PACKED qos_setup_cp;
 725 #define QOS_SETUP_CP_SIZE (3 + HCI_QOS_CP_SIZE)
 726
 727 #define OCF_ROLE_DISCOVERY              0x0009
 728 typedef struct {
 729     uint16_t    handle;
 730 } QEMU_PACKED role_discovery_cp;
 731 #define ROLE_DISCOVERY_CP_SIZE 2
 732 typedef struct {
 733     uint8_t     status;
 734     uint16_t    handle;
 735     uint8_t     role;
 736 } QEMU_PACKED role_discovery_rp;
 737 #define ROLE_DISCOVERY_RP_SIZE 4
 738
 739 #define OCF_SWITCH_ROLE                 0x000B
 740 typedef struct {
 741     bdaddr_t    bdaddr;
 742     uint8_t     role;
 743 } QEMU_PACKED switch_role_cp;
 744 #define SWITCH_ROLE_CP_SIZE 7
 745
 746 #define OCF_READ_LINK_POLICY            0x000C
 747 typedef struct {
 748     uint16_t    handle;
 749 } QEMU_PACKED read_link_policy_cp;
 750 #define READ_LINK_POLICY_CP_SIZE 2
 751 typedef struct {
 752     uint8_t     status;
 753     uint16_t    handle;
 754     uint16_t    policy;
 755 } QEMU_PACKED read_link_policy_rp;
 756 #define READ_LINK_POLICY_RP_SIZE 5
 757
 758 #define OCF_WRITE_LINK_POLICY           0x000D
 759 typedef struct {
 760     uint16_t    handle;
 761     uint16_t    policy;
 762 } QEMU_PACKED write_link_policy_cp;
 763 #define WRITE_LINK_POLICY_CP_SIZE 4
 764 typedef struct {
 765     uint8_t     status;
 766     uint16_t    handle;
 767 } QEMU_PACKED write_link_policy_rp;
 768 #define WRITE_LINK_POLICY_RP_SIZE 3
 769
 770 #define OCF_READ_DEFAULT_LINK_POLICY    0x000E
 771
 772 #define OCF_WRITE_DEFAULT_LINK_POLICY   0x000F
 773
 774 #define OCF_FLOW_SPECIFICATION          0x0010
 775
 776 #define OCF_SNIFF_SUBRATE               0x0011
 777 typedef struct {
 778     uint16_t    handle;
 779     uint16_t    max_remote_latency;
 780     uint16_t    max_local_latency;
 781     uint16_t    min_remote_timeout;
 782     uint16_t    min_local_timeout;
 783 } QEMU_PACKED sniff_subrate_cp;
 784 #define SNIFF_SUBRATE_CP_SIZE 10
 785
 786 /* Host Controller and Baseband */
 787 #define OGF_HOST_CTL            0x03
 788
 789 #define OCF_SET_EVENT_MASK              0x0001
 790 typedef struct {
 791     uint8_t     mask[8];
 792 } QEMU_PACKED set_event_mask_cp;
 793 #define SET_EVENT_MASK_CP_SIZE 8
 794
 795 #define OCF_RESET                       0x0003
 796
 797 #define OCF_SET_EVENT_FLT               0x0005
 798 typedef struct {
 799     uint8_t     flt_type;
 800     uint8_t     cond_type;
 801     uint8_t     condition[0];
 802 } QEMU_PACKED set_event_flt_cp;
 803 #define SET_EVENT_FLT_CP_SIZE 2
 804
 805 enum bt_filter_type {
 806     FLT_CLEAR_ALL               = 0x00,
 807     FLT_INQ_RESULT              = 0x01,
 808     FLT_CONN_SETUP              = 0x02,
 809 };
 810 enum inq_result_cond_type {
 811     INQ_RESULT_RETURN_ALL       = 0x00,
 812     INQ_RESULT_RETURN_CLASS     = 0x01,
 813     INQ_RESULT_RETURN_BDADDR    = 0x02,
 814 };
 815 enum conn_setup_cond_type {
 816     CONN_SETUP_ALLOW_ALL        = 0x00,
 817     CONN_SETUP_ALLOW_CLASS      = 0x01,
 818     CONN_SETUP_ALLOW_BDADDR     = 0x02,
 819 };
 820 enum conn_setup_cond {
 821     CONN_SETUP_AUTO_OFF         = 0x01,
 822     CONN_SETUP_AUTO_ON          = 0x02,
 823 };
 824
 825 #define OCF_FLUSH                       0x0008
 826 typedef struct {
 827     uint16_t    handle;
 828 } QEMU_PACKED flush_cp;
 829 #define FLUSH_CP_SIZE 2
 830
 831 typedef struct {
 832     uint8_t     status;
 833     uint16_t    handle;
 834 } QEMU_PACKED flush_rp;
 835 #define FLUSH_RP_SIZE 3
 836
 837 #define OCF_READ_PIN_TYPE               0x0009
 838 typedef struct {
 839     uint8_t     status;
 840     uint8_t     pin_type;
 841 } QEMU_PACKED read_pin_type_rp;
 842 #define READ_PIN_TYPE_RP_SIZE 2
 843
 844 #define OCF_WRITE_PIN_TYPE              0x000A
 845 typedef struct {
 846     uint8_t     pin_type;
 847 } QEMU_PACKED write_pin_type_cp;
 848 #define WRITE_PIN_TYPE_CP_SIZE 1
 849
 850 #define OCF_CREATE_NEW_UNIT_KEY         0x000B
 851
 852 #define OCF_READ_STORED_LINK_KEY        0x000D
 853 typedef struct {
 854     bdaddr_t    bdaddr;
 855     uint8_t     read_all;
 856 } QEMU_PACKED read_stored_link_key_cp;
 857 #define READ_STORED_LINK_KEY_CP_SIZE 7
 858 typedef struct {
 859     uint8_t     status;
 860     uint16_t    max_keys;
 861     uint16_t    num_keys;
 862 } QEMU_PACKED read_stored_link_key_rp;
 863 #define READ_STORED_LINK_KEY_RP_SIZE 5
 864
 865 #define OCF_WRITE_STORED_LINK_KEY       0x0011
 866 typedef struct {
 867     uint8_t     num_keys;
 868     /* variable length part */
 869 } QEMU_PACKED write_stored_link_key_cp;
 870 #define WRITE_STORED_LINK_KEY_CP_SIZE 1
 871 typedef struct {
 872     uint8_t     status;
 873     uint8_t     num_keys;
 874 } QEMU_PACKED write_stored_link_key_rp;
 875 #define READ_WRITE_LINK_KEY_RP_SIZE 2
 876
 877 #define OCF_DELETE_STORED_LINK_KEY      0x0012
 878 typedef struct {
 879     bdaddr_t    bdaddr;
 880     uint8_t     delete_all;
 881 } QEMU_PACKED delete_stored_link_key_cp;
 882 #define DELETE_STORED_LINK_KEY_CP_SIZE 7
 883 typedef struct {
 884     uint8_t     status;
 885     uint16_t    num_keys;
 886 } QEMU_PACKED delete_stored_link_key_rp;
 887 #define DELETE_STORED_LINK_KEY_RP_SIZE 3
 888
 889 #define OCF_CHANGE_LOCAL_NAME           0x0013
 890 typedef struct {
 891     char        name[248];
 892 } QEMU_PACKED change_local_name_cp;
 893 #define CHANGE_LOCAL_NAME_CP_SIZE 248
 894
 895 #define OCF_READ_LOCAL_NAME             0x0014
 896 typedef struct {
 897     uint8_t     status;
 898     char        name[248];
 899 } QEMU_PACKED read_local_name_rp;
 900 #define READ_LOCAL_NAME_RP_SIZE 249
 901
 902 #define OCF_READ_CONN_ACCEPT_TIMEOUT    0x0015
 903 typedef struct {
 904     uint8_t     status;
 905     uint16_t    timeout;
 906 } QEMU_PACKED read_conn_accept_timeout_rp;
 907 #define READ_CONN_ACCEPT_TIMEOUT_RP_SIZE 3
 908
 909 #define OCF_WRITE_CONN_ACCEPT_TIMEOUT   0x0016
 910 typedef struct {
 911     uint16_t    timeout;
 912 } QEMU_PACKED write_conn_accept_timeout_cp;
 913 #define WRITE_CONN_ACCEPT_TIMEOUT_CP_SIZE 2
 914
 915 #define OCF_READ_PAGE_TIMEOUT           0x0017
 916 typedef struct {
 917     uint8_t     status;
 918     uint16_t    timeout;
 919 } QEMU_PACKED read_page_timeout_rp;
 920 #define READ_PAGE_TIMEOUT_RP_SIZE 3
 921
 922 #define OCF_WRITE_PAGE_TIMEOUT          0x0018
 923 typedef struct {
 924     uint16_t    timeout;
 925 } QEMU_PACKED write_page_timeout_cp;
 926 #define WRITE_PAGE_TIMEOUT_CP_SIZE 2
 927
 928 #define OCF_READ_SCAN_ENABLE            0x0019
 929 typedef struct {
 930     uint8_t     status;
 931     uint8_t     enable;
 932 } QEMU_PACKED read_scan_enable_rp;
 933 #define READ_SCAN_ENABLE_RP_SIZE 2
 934
 935 #define OCF_WRITE_SCAN_ENABLE           0x001A
 936 typedef struct {
 937     uint8_t     scan_enable;
 938 } QEMU_PACKED write_scan_enable_cp;
 939 #define WRITE_SCAN_ENABLE_CP_SIZE 1
 940
 941 enum scan_enable_bits {
 942     SCAN_DISABLED               = 0,
 943     SCAN_INQUIRY                = 1 << 0,
 944     SCAN_PAGE                   = 1 << 1,
 945 };
 946
 947 #define OCF_READ_PAGE_ACTIVITY          0x001B
 948 typedef struct {
 949     uint8_t     status;
 950     uint16_t    interval;
 951     uint16_t    window;
 952 } QEMU_PACKED read_page_activity_rp;
 953 #define READ_PAGE_ACTIVITY_RP_SIZE 5
 954
 955 #define OCF_WRITE_PAGE_ACTIVITY         0x001C
 956 typedef struct {
 957     uint16_t    interval;
 958     uint16_t    window;
 959 } QEMU_PACKED write_page_activity_cp;
 960 #define WRITE_PAGE_ACTIVITY_CP_SIZE 4
 961
 962 #define OCF_READ_INQ_ACTIVITY           0x001D
 963 typedef struct {
 964     uint8_t     status;
 965     uint16_t    interval;
 966     uint16_t    window;
 967 } QEMU_PACKED read_inq_activity_rp;
 968 #define READ_INQ_ACTIVITY_RP_SIZE 5
 969
 970 #define OCF_WRITE_INQ_ACTIVITY          0x001E
 971 typedef struct {
 972     uint16_t    interval;
 973     uint16_t    window;
 974 } QEMU_PACKED write_inq_activity_cp;
 975 #define WRITE_INQ_ACTIVITY_CP_SIZE 4
 976
 977 #define OCF_READ_AUTH_ENABLE            0x001F
 978
 979 #define OCF_WRITE_AUTH_ENABLE           0x0020
 980
 981 #define AUTH_DISABLED           0x00
 982 #define AUTH_ENABLED            0x01
 983
 984 #define OCF_READ_ENCRYPT_MODE           0x0021
 985
 986 #define OCF_WRITE_ENCRYPT_MODE          0x0022
 987
 988 #define ENCRYPT_DISABLED        0x00
 989 #define ENCRYPT_P2P             0x01
 990 #define ENCRYPT_BOTH            0x02
 991
 992 #define OCF_READ_CLASS_OF_DEV           0x0023
 993 typedef struct {
 994     uint8_t     status;
 995     uint8_t     dev_class[3];
 996 } QEMU_PACKED read_class_of_dev_rp;
 997 #define READ_CLASS_OF_DEV_RP_SIZE 4
 998
 999 #define OCF_WRITE_CLASS_OF_DEV          0x0024
1000 typedef struct {
1001     uint8_t     dev_class[3];
1002 } QEMU_PACKED write_class_of_dev_cp;
1003 #define WRITE_CLASS_OF_DEV_CP_SIZE 3
1004
1005 #define OCF_READ_VOICE_SETTING          0x0025
1006 typedef struct {
1007     uint8_t     status;
1008     uint16_t    voice_setting;
1009 } QEMU_PACKED read_voice_setting_rp;
1010 #define READ_VOICE_SETTING_RP_SIZE 3
1011
1012 #define OCF_WRITE_VOICE_SETTING         0x0026
1013 typedef struct {
1014     uint16_t    voice_setting;
1015 } QEMU_PACKED write_voice_setting_cp;
1016 #define WRITE_VOICE_SETTING_CP_SIZE 2
1017
1018 #define OCF_READ_AUTOMATIC_FLUSH_TIMEOUT        0x0027
1019
1020 #define OCF_WRITE_AUTOMATIC_FLUSH_TIMEOUT       0x0028
1021
1022 #define OCF_READ_NUM_BROADCAST_RETRANS  0x0029
1023
1024 #define OCF_WRITE_NUM_BROADCAST_RETRANS 0x002A
1025
1026 #define OCF_READ_HOLD_MODE_ACTIVITY     0x002B
1027
1028 #define OCF_WRITE_HOLD_MODE_ACTIVITY    0x002C
1029
1030 #define OCF_READ_TRANSMIT_POWER_LEVEL   0x002D
1031 typedef struct {
1032     uint16_t    handle;
1033     uint8_t     type;
1034 } QEMU_PACKED read_transmit_power_level_cp;
1035 #define READ_TRANSMIT_POWER_LEVEL_CP_SIZE 3
1036 typedef struct {
1037     uint8_t     status;
1038     uint16_t    handle;
1039     int8_t      level;
1040 } QEMU_PACKED read_transmit_power_level_rp;
1041 #define READ_TRANSMIT_POWER_LEVEL_RP_SIZE 4
1042
1043 #define OCF_HOST_BUFFER_SIZE            0x0033
1044 typedef struct {
1045     uint16_t    acl_mtu;
1046     uint8_t     sco_mtu;
1047     uint16_t    acl_max_pkt;
1048     uint16_t    sco_max_pkt;
1049 } QEMU_PACKED host_buffer_size_cp;
1050 #define HOST_BUFFER_SIZE_CP_SIZE 7
1051
1052 #define OCF_HOST_NUMBER_OF_COMPLETED_PACKETS    0x0035
1053
1054 #define OCF_READ_LINK_SUPERVISION_TIMEOUT       0x0036
1055 typedef struct {
1056     uint8_t     status;
1057     uint16_t    handle;
1058     uint16_t    link_sup_to;
1059 } QEMU_PACKED read_link_supervision_timeout_rp;
1060 #define READ_LINK_SUPERVISION_TIMEOUT_RP_SIZE 5
1061
1062 #define OCF_WRITE_LINK_SUPERVISION_TIMEOUT      0x0037
1063 typedef struct {
1064     uint16_t    handle;
1065     uint16_t    link_sup_to;
1066 } QEMU_PACKED write_link_supervision_timeout_cp;
1067 #define WRITE_LINK_SUPERVISION_TIMEOUT_CP_SIZE 4
1068 typedef struct {
1069     uint8_t     status;
1070     uint16_t    handle;
1071 } QEMU_PACKED write_link_supervision_timeout_rp;
1072 #define WRITE_LINK_SUPERVISION_TIMEOUT_RP_SIZE 3
1073
1074 #define OCF_READ_NUM_SUPPORTED_IAC      0x0038
1075
1076 #define MAX_IAC_LAP 0x40
1077 #define OCF_READ_CURRENT_IAC_LAP        0x0039
1078 typedef struct {
1079     uint8_t     status;
1080     uint8_t     num_current_iac;
1081     uint8_t     lap[MAX_IAC_LAP][3];
1082 } QEMU_PACKED read_current_iac_lap_rp;
1083 #define READ_CURRENT_IAC_LAP_RP_SIZE 2+3*MAX_IAC_LAP
1084
1085 #define OCF_WRITE_CURRENT_IAC_LAP       0x003A
1086 typedef struct {
1087     uint8_t     num_current_iac;
1088     uint8_t     lap[MAX_IAC_LAP][3];
1089 } QEMU_PACKED write_current_iac_lap_cp;
1090 #define WRITE_CURRENT_IAC_LAP_CP_SIZE 1+3*MAX_IAC_LAP
1091
1092 #define OCF_READ_PAGE_SCAN_PERIOD_MODE  0x003B
1093
1094 #define OCF_WRITE_PAGE_SCAN_PERIOD_MODE 0x003C
1095
1096 #define OCF_READ_PAGE_SCAN_MODE         0x003D
1097
1098 #define OCF_WRITE_PAGE_SCAN_MODE        0x003E
1099
1100 #define OCF_SET_AFH_CLASSIFICATION      0x003F
1101 typedef struct {
1102     uint8_t     map[10];
1103 } QEMU_PACKED set_afh_classification_cp;
1104 #define SET_AFH_CLASSIFICATION_CP_SIZE 10
1105 typedef struct {
1106     uint8_t     status;
1107 } QEMU_PACKED set_afh_classification_rp;
1108 #define SET_AFH_CLASSIFICATION_RP_SIZE 1
1109
1110 #define OCF_READ_INQUIRY_SCAN_TYPE      0x0042
1111 typedef struct {
1112     uint8_t     status;
1113     uint8_t     type;
1114 } QEMU_PACKED read_inquiry_scan_type_rp;
1115 #define READ_INQUIRY_SCAN_TYPE_RP_SIZE 2
1116
1117 #define OCF_WRITE_INQUIRY_SCAN_TYPE     0x0043
1118 typedef struct {
1119     uint8_t     type;
1120 } QEMU_PACKED write_inquiry_scan_type_cp;
1121 #define WRITE_INQUIRY_SCAN_TYPE_CP_SIZE 1
1122 typedef struct {
1123     uint8_t     status;
1124 } QEMU_PACKED write_inquiry_scan_type_rp;
1125 #define WRITE_INQUIRY_SCAN_TYPE_RP_SIZE 1
1126
1127 #define OCF_READ_INQUIRY_MODE           0x0044
1128 typedef struct {
1129     uint8_t     status;
1130     uint8_t     mode;
1131 } QEMU_PACKED read_inquiry_mode_rp;
1132 #define READ_INQUIRY_MODE_RP_SIZE 2
1133
1134 #define OCF_WRITE_INQUIRY_MODE          0x0045
1135 typedef struct {
1136     uint8_t     mode;
1137 } QEMU_PACKED write_inquiry_mode_cp;
1138 #define WRITE_INQUIRY_MODE_CP_SIZE 1
1139 typedef struct {
1140     uint8_t     status;
1141 } QEMU_PACKED write_inquiry_mode_rp;
1142 #define WRITE_INQUIRY_MODE_RP_SIZE 1
1143
1144 #define OCF_READ_PAGE_SCAN_TYPE         0x0046
1145
1146 #define OCF_WRITE_PAGE_SCAN_TYPE        0x0047
1147
1148 #define OCF_READ_AFH_MODE               0x0048
1149 typedef struct {
1150     uint8_t     status;
1151     uint8_t     mode;
1152 } QEMU_PACKED read_afh_mode_rp;
1153 #define READ_AFH_MODE_RP_SIZE 2
1154
1155 #define OCF_WRITE_AFH_MODE              0x0049
1156 typedef struct {
1157     uint8_t     mode;
1158 } QEMU_PACKED write_afh_mode_cp;
1159 #define WRITE_AFH_MODE_CP_SIZE 1
1160 typedef struct {
1161     uint8_t     status;
1162 } QEMU_PACKED write_afh_mode_rp;
1163 #define WRITE_AFH_MODE_RP_SIZE 1
1164
1165 #define OCF_READ_EXT_INQUIRY_RESPONSE   0x0051
1166 typedef struct {
1167     uint8_t     status;
1168     uint8_t     fec;
1169     uint8_t     data[240];
1170 } QEMU_PACKED read_ext_inquiry_response_rp;
1171 #define READ_EXT_INQUIRY_RESPONSE_RP_SIZE 242
1172
1173 #define OCF_WRITE_EXT_INQUIRY_RESPONSE  0x0052
1174 typedef struct {
1175     uint8_t     fec;
1176     uint8_t     data[240];
1177 } QEMU_PACKED write_ext_inquiry_response_cp;
1178 #define WRITE_EXT_INQUIRY_RESPONSE_CP_SIZE 241
1179 typedef struct {
1180     uint8_t     status;
1181 } QEMU_PACKED write_ext_inquiry_response_rp;
1182 #define WRITE_EXT_INQUIRY_RESPONSE_RP_SIZE 1
1183
1184 /* Informational Parameters */
1185 #define OGF_INFO_PARAM          0x04
1186
1187 #define OCF_READ_LOCAL_VERSION          0x0001
1188 typedef struct {
1189     uint8_t     status;
1190     uint8_t     hci_ver;
1191     uint16_t    hci_rev;
1192     uint8_t     lmp_ver;
1193     uint16_t    manufacturer;
1194     uint16_t    lmp_subver;
1195 } QEMU_PACKED read_local_version_rp;
1196 #define READ_LOCAL_VERSION_RP_SIZE 9
1197
1198 #define OCF_READ_LOCAL_COMMANDS         0x0002
1199 typedef struct {
1200     uint8_t     status;
1201     uint8_t     commands[64];
1202 } QEMU_PACKED read_local_commands_rp;
1203 #define READ_LOCAL_COMMANDS_RP_SIZE 65
1204
1205 #define OCF_READ_LOCAL_FEATURES         0x0003
1206 typedef struct {
1207     uint8_t     status;
1208     uint8_t     features[8];
1209 } QEMU_PACKED read_local_features_rp;
1210 #define READ_LOCAL_FEATURES_RP_SIZE 9
1211
1212 #define OCF_READ_LOCAL_EXT_FEATURES     0x0004
1213 typedef struct {
1214     uint8_t     page_num;
1215 } QEMU_PACKED read_local_ext_features_cp;
1216 #define READ_LOCAL_EXT_FEATURES_CP_SIZE 1
1217 typedef struct {
1218     uint8_t     status;
1219     uint8_t     page_num;
1220     uint8_t     max_page_num;
1221     uint8_t     features[8];
1222 } QEMU_PACKED read_local_ext_features_rp;
1223 #define READ_LOCAL_EXT_FEATURES_RP_SIZE 11
1224
1225 #define OCF_READ_BUFFER_SIZE            0x0005
1226 typedef struct {
1227     uint8_t     status;
1228     uint16_t    acl_mtu;
1229     uint8_t     sco_mtu;
1230     uint16_t    acl_max_pkt;
1231     uint16_t    sco_max_pkt;
1232 } QEMU_PACKED read_buffer_size_rp;
1233 #define READ_BUFFER_SIZE_RP_SIZE 8
1234
1235 #define OCF_READ_COUNTRY_CODE           0x0007
1236 typedef struct {
1237     uint8_t     status;
1238     uint8_t     country_code;
1239 } QEMU_PACKED read_country_code_rp;
1240 #define READ_COUNTRY_CODE_RP_SIZE 2
1241
1242 #define OCF_READ_BD_ADDR                0x0009
1243 typedef struct {
1244     uint8_t     status;
1245     bdaddr_t    bdaddr;
1246 } QEMU_PACKED read_bd_addr_rp;
1247 #define READ_BD_ADDR_RP_SIZE 7
1248
1249 /* Status params */
1250 #define OGF_STATUS_PARAM        0x05
1251
1252 #define OCF_READ_FAILED_CONTACT_COUNTER         0x0001
1253 typedef struct {
1254     uint8_t     status;
1255     uint16_t    handle;
1256     uint8_t     counter;
1257 } QEMU_PACKED read_failed_contact_counter_rp;
1258 #define READ_FAILED_CONTACT_COUNTER_RP_SIZE 4
1259
1260 #define OCF_RESET_FAILED_CONTACT_COUNTER        0x0002
1261 typedef struct {
1262     uint8_t     status;
1263     uint16_t    handle;
1264 } QEMU_PACKED reset_failed_contact_counter_rp;
1265 #define RESET_FAILED_CONTACT_COUNTER_RP_SIZE 3
1266
1267 #define OCF_READ_LINK_QUALITY           0x0003
1268 typedef struct {
1269     uint16_t    handle;
1270 } QEMU_PACKED read_link_quality_cp;
1271 #define READ_LINK_QUALITY_CP_SIZE 2
1272
1273 typedef struct {
1274     uint8_t     status;
1275     uint16_t    handle;
1276     uint8_t     link_quality;
1277 } QEMU_PACKED read_link_quality_rp;
1278 #define READ_LINK_QUALITY_RP_SIZE 4
1279
1280 #define OCF_READ_RSSI                   0x0005
1281 typedef struct {
1282     uint8_t     status;
1283     uint16_t    handle;
1284     int8_t      rssi;
1285 } QEMU_PACKED read_rssi_rp;
1286 #define READ_RSSI_RP_SIZE 4
1287
1288 #define OCF_READ_AFH_MAP                0x0006
1289 typedef struct {
1290     uint8_t     status;
1291     uint16_t    handle;
1292     uint8_t     mode;
1293     uint8_t     map[10];
1294 } QEMU_PACKED read_afh_map_rp;
1295 #define READ_AFH_MAP_RP_SIZE 14
1296
1297 #define OCF_READ_CLOCK                  0x0007
1298 typedef struct {
1299     uint16_t    handle;
1300     uint8_t     which_clock;
1301 } QEMU_PACKED read_clock_cp;
1302 #define READ_CLOCK_CP_SIZE 3
1303 typedef struct {
1304     uint8_t     status;
1305     uint16_t    handle;
1306     uint32_t    clock;
1307     uint16_t    accuracy;
1308 } QEMU_PACKED read_clock_rp;
1309 #define READ_CLOCK_RP_SIZE 9
1310
1311 /* Testing commands */
1312 #define OGF_TESTING_CMD         0x3e
1313
1314 /* Vendor specific commands */
1315 #define OGF_VENDOR_CMD          0x3f
1316
1317 /* HCI Events */
1318
1319 #define EVT_INQUIRY_COMPLETE            0x01
1320
1321 #define EVT_INQUIRY_RESULT              0x02
1322 typedef struct {
1323     uint8_t     num_responses;
1324     bdaddr_t    bdaddr;
1325     uint8_t     pscan_rep_mode;
1326     uint8_t     pscan_period_mode;
1327     uint8_t     pscan_mode;
1328     uint8_t     dev_class[3];
1329     uint16_t    clock_offset;
1330 } QEMU_PACKED inquiry_info;
1331 #define INQUIRY_INFO_SIZE 15
1332
1333 #define EVT_CONN_COMPLETE               0x03
1334 typedef struct {
1335     uint8_t     status;
1336     uint16_t    handle;
1337     bdaddr_t    bdaddr;
1338     uint8_t     link_type;
1339     uint8_t     encr_mode;
1340 } QEMU_PACKED evt_conn_complete;
1341 #define EVT_CONN_COMPLETE_SIZE 11
1342
1343 #define EVT_CONN_REQUEST                0x04
1344 typedef struct {
1345     bdaddr_t    bdaddr;
1346     uint8_t     dev_class[3];
1347     uint8_t     link_type;
1348 } QEMU_PACKED evt_conn_request;
1349 #define EVT_CONN_REQUEST_SIZE 10
1350
1351 #define EVT_DISCONN_COMPLETE            0x05
1352 typedef struct {
1353     uint8_t     status;
1354     uint16_t    handle;
1355     uint8_t     reason;
1356 } QEMU_PACKED evt_disconn_complete;
1357 #define EVT_DISCONN_COMPLETE_SIZE 4
1358
1359 #define EVT_AUTH_COMPLETE               0x06
1360 typedef struct {
1361     uint8_t     status;
1362     uint16_t    handle;
1363 } QEMU_PACKED evt_auth_complete;
1364 #define EVT_AUTH_COMPLETE_SIZE 3
1365
1366 #define EVT_REMOTE_NAME_REQ_COMPLETE    0x07
1367 typedef struct {
1368     uint8_t     status;
1369     bdaddr_t    bdaddr;
1370     char        name[248];
1371 } QEMU_PACKED evt_remote_name_req_complete;
1372 #define EVT_REMOTE_NAME_REQ_COMPLETE_SIZE 255
1373
1374 #define EVT_ENCRYPT_CHANGE              0x08
1375 typedef struct {
1376     uint8_t     status;
1377     uint16_t    handle;
1378     uint8_t     encrypt;
1379 } QEMU_PACKED evt_encrypt_change;
1380 #define EVT_ENCRYPT_CHANGE_SIZE 4
1381
1382 #define EVT_CHANGE_CONN_LINK_KEY_COMPLETE       0x09
1383 typedef struct {
1384     uint8_t     status;
1385     uint16_t    handle;
1386 }  QEMU_PACKED evt_change_conn_link_key_complete;
1387 #define EVT_CHANGE_CONN_LINK_KEY_COMPLETE_SIZE 3
1388
1389 #define EVT_MASTER_LINK_KEY_COMPLETE            0x0A
1390 typedef struct {
1391     uint8_t     status;
1392     uint16_t    handle;
1393     uint8_t     key_flag;
1394 } QEMU_PACKED evt_master_link_key_complete;
1395 #define EVT_MASTER_LINK_KEY_COMPLETE_SIZE 4
1396
1397 #define EVT_READ_REMOTE_FEATURES_COMPLETE       0x0B
1398 typedef struct {
1399     uint8_t     status;
1400     uint16_t    handle;
1401     uint8_t     features[8];
1402 } QEMU_PACKED evt_read_remote_features_complete;
1403 #define EVT_READ_REMOTE_FEATURES_COMPLETE_SIZE 11
1404
1405 #define EVT_READ_REMOTE_VERSION_COMPLETE        0x0C
1406 typedef struct {
1407     uint8_t     status;
1408     uint16_t    handle;
1409     uint8_t     lmp_ver;
1410     uint16_t    manufacturer;
1411     uint16_t    lmp_subver;
1412 } QEMU_PACKED evt_read_remote_version_complete;
1413 #define EVT_READ_REMOTE_VERSION_COMPLETE_SIZE 8
1414
1415 #define EVT_QOS_SETUP_COMPLETE          0x0D
1416 typedef struct {
1417     uint8_t     status;
1418     uint16_t    handle;
1419     uint8_t     flags;                  /* Reserved */
1420     hci_qos     qos;
1421 } QEMU_PACKED evt_qos_setup_complete;
1422 #define EVT_QOS_SETUP_COMPLETE_SIZE (4 + HCI_QOS_CP_SIZE)
1423
1424 #define EVT_CMD_COMPLETE                0x0E
1425 typedef struct {
1426     uint8_t     ncmd;
1427     uint16_t    opcode;
1428 } QEMU_PACKED evt_cmd_complete;
1429 #define EVT_CMD_COMPLETE_SIZE 3
1430
1431 #define EVT_CMD_STATUS                  0x0F
1432 typedef struct {
1433     uint8_t     status;
1434     uint8_t     ncmd;
1435     uint16_t    opcode;
1436 } QEMU_PACKED evt_cmd_status;
1437 #define EVT_CMD_STATUS_SIZE 4
1438
1439 #define EVT_HARDWARE_ERROR              0x10
1440 typedef struct {
1441     uint8_t     code;
1442 } QEMU_PACKED evt_hardware_error;
1443 #define EVT_HARDWARE_ERROR_SIZE 1
1444
1445 #define EVT_FLUSH_OCCURRED              0x11
1446 typedef struct {
1447     uint16_t    handle;
1448 } QEMU_PACKED evt_flush_occurred;
1449 #define EVT_FLUSH_OCCURRED_SIZE 2
1450
1451 #define EVT_ROLE_CHANGE                 0x12
1452 typedef struct {
1453     uint8_t     status;
1454     bdaddr_t    bdaddr;
1455     uint8_t     role;
1456 } QEMU_PACKED evt_role_change;
1457 #define EVT_ROLE_CHANGE_SIZE 8
1458
1459 #define EVT_NUM_COMP_PKTS               0x13
1460 typedef struct {
1461     uint8_t     num_hndl;
1462     struct {
1463         uint16_t handle;
1464         uint16_t num_packets;
1465     } connection[0];
1466 } QEMU_PACKED evt_num_comp_pkts;
1467 #define EVT_NUM_COMP_PKTS_SIZE(num_hndl) (1 + 4 * (num_hndl))
1468
1469 #define EVT_MODE_CHANGE                 0x14
1470 typedef struct {
1471     uint8_t     status;
1472     uint16_t    handle;
1473     uint8_t     mode;
1474     uint16_t    interval;
1475 } QEMU_PACKED evt_mode_change;
1476 #define EVT_MODE_CHANGE_SIZE 6
1477
1478 #define EVT_RETURN_LINK_KEYS            0x15
1479 typedef struct {
1480     uint8_t     num_keys;
1481     /* variable length part */
1482 } QEMU_PACKED evt_return_link_keys;
1483 #define EVT_RETURN_LINK_KEYS_SIZE 1
1484
1485 #define EVT_PIN_CODE_REQ                0x16
1486 typedef struct {
1487     bdaddr_t    bdaddr;
1488 } QEMU_PACKED evt_pin_code_req;
1489 #define EVT_PIN_CODE_REQ_SIZE 6
1490
1491 #define EVT_LINK_KEY_REQ                0x17
1492 typedef struct {
1493     bdaddr_t    bdaddr;
1494 } QEMU_PACKED evt_link_key_req;
1495 #define EVT_LINK_KEY_REQ_SIZE 6
1496
1497 #define EVT_LINK_KEY_NOTIFY             0x18
1498 typedef struct {
1499     bdaddr_t    bdaddr;
1500     uint8_t     link_key[16];
1501     uint8_t     key_type;
1502 } QEMU_PACKED evt_link_key_notify;
1503 #define EVT_LINK_KEY_NOTIFY_SIZE 23
1504
1505 #define EVT_LOOPBACK_COMMAND            0x19
1506
1507 #define EVT_DATA_BUFFER_OVERFLOW        0x1A
1508 typedef struct {
1509     uint8_t     link_type;
1510 } QEMU_PACKED evt_data_buffer_overflow;
1511 #define EVT_DATA_BUFFER_OVERFLOW_SIZE 1
1512
1513 #define EVT_MAX_SLOTS_CHANGE            0x1B
1514 typedef struct {
1515     uint16_t    handle;
1516     uint8_t     max_slots;
1517 } QEMU_PACKED evt_max_slots_change;
1518 #define EVT_MAX_SLOTS_CHANGE_SIZE 3
1519
1520 #define EVT_READ_CLOCK_OFFSET_COMPLETE  0x1C
1521 typedef struct {
1522     uint8_t     status;
1523     uint16_t    handle;
1524     uint16_t    clock_offset;
1525 } QEMU_PACKED evt_read_clock_offset_complete;
1526 #define EVT_READ_CLOCK_OFFSET_COMPLETE_SIZE 5
1527
1528 #define EVT_CONN_PTYPE_CHANGED          0x1D
1529 typedef struct {
1530     uint8_t     status;
1531     uint16_t    handle;
1532     uint16_t    ptype;
1533 } QEMU_PACKED evt_conn_ptype_changed;
1534 #define EVT_CONN_PTYPE_CHANGED_SIZE 5
1535
1536 #define EVT_QOS_VIOLATION               0x1E
1537 typedef struct {
1538     uint16_t    handle;
1539 } QEMU_PACKED evt_qos_violation;
1540 #define EVT_QOS_VIOLATION_SIZE 2
1541
1542 #define EVT_PSCAN_REP_MODE_CHANGE       0x20
1543 typedef struct {
1544     bdaddr_t    bdaddr;
1545     uint8_t     pscan_rep_mode;
1546 } QEMU_PACKED evt_pscan_rep_mode_change;
1547 #define EVT_PSCAN_REP_MODE_CHANGE_SIZE 7
1548
1549 #define EVT_FLOW_SPEC_COMPLETE          0x21
1550 typedef struct {
1551     uint8_t     status;
1552     uint16_t    handle;
1553     uint8_t     flags;
1554     uint8_t     direction;
1555     hci_qos     qos;
1556 } QEMU_PACKED evt_flow_spec_complete;
1557 #define EVT_FLOW_SPEC_COMPLETE_SIZE (5 + HCI_QOS_CP_SIZE)
1558
1559 #define EVT_INQUIRY_RESULT_WITH_RSSI    0x22
1560 typedef struct {
1561     uint8_t     num_responses;
1562     bdaddr_t    bdaddr;
1563     uint8_t     pscan_rep_mode;
1564     uint8_t     pscan_period_mode;
1565     uint8_t     dev_class[3];
1566     uint16_t    clock_offset;
1567     int8_t      rssi;
1568 } QEMU_PACKED inquiry_info_with_rssi;
1569 #define INQUIRY_INFO_WITH_RSSI_SIZE 15
1570 typedef struct {
1571     uint8_t     num_responses;
1572     bdaddr_t    bdaddr;
1573     uint8_t     pscan_rep_mode;
1574     uint8_t     pscan_period_mode;
1575     uint8_t     pscan_mode;
1576     uint8_t     dev_class[3];
1577     uint16_t    clock_offset;
1578     int8_t      rssi;
1579 } QEMU_PACKED inquiry_info_with_rssi_and_pscan_mode;
1580 #define INQUIRY_INFO_WITH_RSSI_AND_PSCAN_MODE_SIZE 16
1581
1582 #define EVT_READ_REMOTE_EXT_FEATURES_COMPLETE   0x23
1583 typedef struct {
1584     uint8_t     status;
1585     uint16_t    handle;
1586     uint8_t     page_num;
1587     uint8_t     max_page_num;
1588     uint8_t     features[8];
1589 } QEMU_PACKED evt_read_remote_ext_features_complete;
1590 #define EVT_READ_REMOTE_EXT_FEATURES_COMPLETE_SIZE 13
1591
1592 #define EVT_SYNC_CONN_COMPLETE          0x2C
1593 typedef struct {
1594     uint8_t     status;
1595     uint16_t    handle;
1596     bdaddr_t    bdaddr;
1597     uint8_t     link_type;
1598     uint8_t     trans_interval;
1599     uint8_t     retrans_window;
1600     uint16_t    rx_pkt_len;
1601     uint16_t    tx_pkt_len;
1602     uint8_t     air_mode;
1603 } QEMU_PACKED evt_sync_conn_complete;
1604 #define EVT_SYNC_CONN_COMPLETE_SIZE 17
1605
1606 #define EVT_SYNC_CONN_CHANGED           0x2D
1607 typedef struct {
1608     uint8_t     status;
1609     uint16_t    handle;
1610     uint8_t     trans_interval;
1611     uint8_t     retrans_window;
1612     uint16_t    rx_pkt_len;
1613     uint16_t    tx_pkt_len;
1614 } QEMU_PACKED evt_sync_conn_changed;
1615 #define EVT_SYNC_CONN_CHANGED_SIZE 9
1616
1617 #define EVT_SNIFF_SUBRATE               0x2E
1618 typedef struct {
1619     uint8_t     status;
1620     uint16_t    handle;
1621     uint16_t    max_remote_latency;
1622     uint16_t    max_local_latency;
1623     uint16_t    min_remote_timeout;
1624     uint16_t    min_local_timeout;
1625 } QEMU_PACKED evt_sniff_subrate;
1626 #define EVT_SNIFF_SUBRATE_SIZE 11
1627
1628 #define EVT_TESTING                     0xFE
1629
1630 #define EVT_VENDOR                      0xFF
1631
1632 /* Command opcode pack/unpack */
1633 #define cmd_opcode_pack(ogf, ocf)       (uint16_t)((ocf & 0x03ff)|(ogf << 10))
1634 #define cmd_opcode_ogf(op)              (op >> 10)
1635 #define cmd_opcode_ocf(op)              (op & 0x03ff)
1636
1637 /* ACL handle and flags pack/unpack */
1638 #define acl_handle_pack(h, f)   (uint16_t)(((h) & 0x0fff)|((f) << 12))
1639 #define acl_handle(h)           ((h) & 0x0fff)
1640 #define acl_flags(h)            ((h) >> 12)
1641
1642 /* HCI Packet structures */
1643 #define HCI_COMMAND_HDR_SIZE    3
1644 #define HCI_EVENT_HDR_SIZE      2
1645 #define HCI_ACL_HDR_SIZE        4
1646 #define HCI_SCO_HDR_SIZE        3
1647
1648 struct hci_command_hdr {
1649     uint16_t    opcode;         /* OCF & OGF */
1650     uint8_t     plen;
1651 } QEMU_PACKED;
1652
1653 struct hci_event_hdr {
1654     uint8_t     evt;
1655     uint8_t     plen;
1656 } QEMU_PACKED;
1657
1658 struct hci_acl_hdr {
1659     uint16_t    handle;         /* Handle & Flags(PB, BC) */
1660     uint16_t    dlen;
1661 } QEMU_PACKED;
1662
1663 struct hci_sco_hdr {
1664     uint16_t    handle;
1665     uint8_t     dlen;
1666 } QEMU_PACKED;
1667
1668 /* L2CAP layer defines */
1669
1670 enum bt_l2cap_lm_bits {
1671     L2CAP_LM_MASTER     = 1 << 0,
1672     L2CAP_LM_AUTH       = 1 << 1,
1673     L2CAP_LM_ENCRYPT    = 1 << 2,
1674     L2CAP_LM_TRUSTED    = 1 << 3,
1675     L2CAP_LM_RELIABLE   = 1 << 4,
1676     L2CAP_LM_SECURE     = 1 << 5,
1677 };
1678
1679 enum bt_l2cap_cid_predef {
1680     L2CAP_CID_INVALID   = 0x0000,
1681     L2CAP_CID_SIGNALLING= 0x0001,
1682     L2CAP_CID_GROUP     = 0x0002,
1683     L2CAP_CID_ALLOC     = 0x0040,
1684 };
1685
1686 /* L2CAP command codes */
1687 enum bt_l2cap_cmd {
1688     L2CAP_COMMAND_REJ   = 1,
1689     L2CAP_CONN_REQ,
1690     L2CAP_CONN_RSP,
1691     L2CAP_CONF_REQ,
1692     L2CAP_CONF_RSP,
1693     L2CAP_DISCONN_REQ,
1694     L2CAP_DISCONN_RSP,
1695     L2CAP_ECHO_REQ,
1696     L2CAP_ECHO_RSP,
1697     L2CAP_INFO_REQ,
1698     L2CAP_INFO_RSP,
1699 };
1700
1701 enum bt_l2cap_sar_bits {
1702     L2CAP_SAR_NO_SEG    = 0,
1703     L2CAP_SAR_START,
1704     L2CAP_SAR_END,
1705     L2CAP_SAR_CONT,
1706 };
1707
1708 /* L2CAP structures */
1709 typedef struct {
1710     uint16_t    len;
1711     uint16_t    cid;
1712     uint8_t     data[0];
1713 } QEMU_PACKED l2cap_hdr;
1714 #define L2CAP_HDR_SIZE 4
1715
1716 typedef struct {
1717     uint8_t     code;
1718     uint8_t     ident;
1719     uint16_t    len;
1720 } QEMU_PACKED l2cap_cmd_hdr;
1721 #define L2CAP_CMD_HDR_SIZE 4
1722
1723 typedef struct {
1724     uint16_t    reason;
1725 } QEMU_PACKED l2cap_cmd_rej;
1726 #define L2CAP_CMD_REJ_SIZE 2
1727
1728 typedef struct {
1729     uint16_t    dcid;
1730     uint16_t    scid;
1731 } QEMU_PACKED l2cap_cmd_rej_cid;
1732 #define L2CAP_CMD_REJ_CID_SIZE 4
1733
1734 /* reject reason */
1735 enum bt_l2cap_rej_reason {
1736     L2CAP_REJ_CMD_NOT_UNDERSTOOD = 0,
1737     L2CAP_REJ_SIG_TOOBIG,
1738     L2CAP_REJ_CID_INVAL,
1739 };
1740
1741 typedef struct {
1742     uint16_t    psm;
1743     uint16_t    scid;
1744 } QEMU_PACKED l2cap_conn_req;
1745 #define L2CAP_CONN_REQ_SIZE 4
1746
1747 typedef struct {
1748     uint16_t    dcid;
1749     uint16_t    scid;
1750     uint16_t    result;
1751     uint16_t    status;
1752 } QEMU_PACKED l2cap_conn_rsp;
1753 #define L2CAP_CONN_RSP_SIZE 8
1754
1755 /* connect result */
1756 enum bt_l2cap_conn_res {
1757     L2CAP_CR_SUCCESS    = 0,
1758     L2CAP_CR_PEND,
1759     L2CAP_CR_BAD_PSM,
1760     L2CAP_CR_SEC_BLOCK,
1761     L2CAP_CR_NO_MEM,
1762 };
1763
1764 /* connect status */
1765 enum bt_l2cap_conn_stat {
1766     L2CAP_CS_NO_INFO    = 0,
1767     L2CAP_CS_AUTHEN_PEND,
1768     L2CAP_CS_AUTHOR_PEND,
1769 };
1770
1771 typedef struct {
1772     uint16_t    dcid;
1773     uint16_t    flags;
1774     uint8_t     data[0];
1775 } QEMU_PACKED l2cap_conf_req;
1776 #define L2CAP_CONF_REQ_SIZE(datalen) (4 + (datalen))
1777
1778 typedef struct {
1779     uint16_t    scid;
1780     uint16_t    flags;
1781     uint16_t    result;
1782     uint8_t     data[0];
1783 } QEMU_PACKED l2cap_conf_rsp;
1784 #define L2CAP_CONF_RSP_SIZE(datalen) (6 + datalen)
1785
1786 enum bt_l2cap_conf_res {
1787     L2CAP_CONF_SUCCESS  = 0,
1788     L2CAP_CONF_UNACCEPT,
1789     L2CAP_CONF_REJECT,
1790     L2CAP_CONF_UNKNOWN,
1791 };
1792
1793 typedef struct {
1794     uint8_t     type;
1795     uint8_t     len;
1796     uint8_t     val[0];
1797 } QEMU_PACKED l2cap_conf_opt;
1798 #define L2CAP_CONF_OPT_SIZE 2
1799
1800 enum bt_l2cap_conf_val {
1801     L2CAP_CONF_MTU      = 1,
1802     L2CAP_CONF_FLUSH_TO,
1803     L2CAP_CONF_QOS,
1804     L2CAP_CONF_RFC,
1805     L2CAP_CONF_RFC_MODE = L2CAP_CONF_RFC,
1806 };
1807
1808 typedef struct {
1809     uint8_t     flags;
1810     uint8_t     service_type;
1811     uint32_t    token_rate;
1812     uint32_t    token_bucket_size;
1813     uint32_t    peak_bandwidth;
1814     uint32_t    latency;
1815     uint32_t    delay_variation;
1816 } QEMU_PACKED l2cap_conf_opt_qos;
1817 #define L2CAP_CONF_OPT_QOS_SIZE 22
1818
1819 enum bt_l2cap_conf_opt_qos_st {
1820     L2CAP_CONF_QOS_NO_TRAFFIC = 0x00,
1821     L2CAP_CONF_QOS_BEST_EFFORT,
1822     L2CAP_CONF_QOS_GUARANTEED,
1823 };
1824
1825 #define L2CAP_CONF_QOS_WILDCARD 0xffffffff
1826
1827 enum bt_l2cap_mode {
1828     L2CAP_MODE_BASIC    = 0,
1829     L2CAP_MODE_RETRANS  = 1,
1830     L2CAP_MODE_FLOWCTL  = 2,
1831 };
1832
1833 typedef struct {
1834     uint16_t    dcid;
1835     uint16_t    scid;
1836 } QEMU_PACKED l2cap_disconn_req;
1837 #define L2CAP_DISCONN_REQ_SIZE 4
1838
1839 typedef struct {
1840     uint16_t    dcid;
1841     uint16_t    scid;
1842 } QEMU_PACKED l2cap_disconn_rsp;
1843 #define L2CAP_DISCONN_RSP_SIZE 4
1844
1845 typedef struct {
1846     uint16_t    type;
1847 } QEMU_PACKED l2cap_info_req;
1848 #define L2CAP_INFO_REQ_SIZE 2
1849
1850 typedef struct {
1851     uint16_t    type;
1852     uint16_t    result;
1853     uint8_t     data[0];
1854 } QEMU_PACKED l2cap_info_rsp;
1855 #define L2CAP_INFO_RSP_SIZE 4
1856
1857 /* info type */
1858 enum bt_l2cap_info_type {
1859     L2CAP_IT_CL_MTU     = 1,
1860     L2CAP_IT_FEAT_MASK,
1861 };
1862
1863 /* info result */
1864 enum bt_l2cap_info_result {
1865     L2CAP_IR_SUCCESS    = 0,
1866     L2CAP_IR_NOTSUPP,
1867 };
1868
1869 /* Service Discovery Protocol defines */
1870 /* Note that all multibyte values in lower layer protocols (above in this file)
1871  * are little-endian while SDP is big-endian.  */
1872
1873 /* Protocol UUIDs */
1874 enum sdp_proto_uuid {
1875     SDP_UUID            = 0x0001,
1876     UDP_UUID            = 0x0002,
1877     RFCOMM_UUID         = 0x0003,
1878     TCP_UUID            = 0x0004,
1879     TCS_BIN_UUID        = 0x0005,
1880     TCS_AT_UUID         = 0x0006,
1881     OBEX_UUID           = 0x0008,
1882     IP_UUID             = 0x0009,
1883     FTP_UUID            = 0x000a,
1884     HTTP_UUID           = 0x000c,
1885     WSP_UUID            = 0x000e,
1886     BNEP_UUID           = 0x000f,
1887     UPNP_UUID           = 0x0010,
1888     HIDP_UUID           = 0x0011,
1889     HCRP_CTRL_UUID      = 0x0012,
1890     HCRP_DATA_UUID      = 0x0014,
1891     HCRP_NOTE_UUID      = 0x0016,
1892     AVCTP_UUID          = 0x0017,
1893     AVDTP_UUID          = 0x0019,
1894     CMTP_UUID           = 0x001b,
1895     UDI_UUID            = 0x001d,
1896     MCAP_CTRL_UUID      = 0x001e,
1897     MCAP_DATA_UUID      = 0x001f,
1898     L2CAP_UUID          = 0x0100,
1899 };
1900
1901 /*
1902  * Service class identifiers of standard services and service groups
1903  */
1904 enum service_class_id {
1905     SDP_SERVER_SVCLASS_ID               = 0x1000,
1906     BROWSE_GRP_DESC_SVCLASS_ID          = 0x1001,
1907     PUBLIC_BROWSE_GROUP                 = 0x1002,
1908     SERIAL_PORT_SVCLASS_ID              = 0x1101,
1909     LAN_ACCESS_SVCLASS_ID               = 0x1102,
1910     DIALUP_NET_SVCLASS_ID               = 0x1103,
1911     IRMC_SYNC_SVCLASS_ID                = 0x1104,
1912     OBEX_OBJPUSH_SVCLASS_ID             = 0x1105,
1913     OBEX_FILETRANS_SVCLASS_ID           = 0x1106,
1914     IRMC_SYNC_CMD_SVCLASS_ID            = 0x1107,
1915     HEADSET_SVCLASS_ID                  = 0x1108,
1916     CORDLESS_TELEPHONY_SVCLASS_ID       = 0x1109,
1917     AUDIO_SOURCE_SVCLASS_ID             = 0x110a,
1918     AUDIO_SINK_SVCLASS_ID               = 0x110b,
1919     AV_REMOTE_TARGET_SVCLASS_ID         = 0x110c,
1920     ADVANCED_AUDIO_SVCLASS_ID           = 0x110d,
1921     AV_REMOTE_SVCLASS_ID                = 0x110e,
1922     VIDEO_CONF_SVCLASS_ID               = 0x110f,
1923     INTERCOM_SVCLASS_ID                 = 0x1110,
1924     FAX_SVCLASS_ID                      = 0x1111,
1925     HEADSET_AGW_SVCLASS_ID              = 0x1112,
1926     WAP_SVCLASS_ID                      = 0x1113,
1927     WAP_CLIENT_SVCLASS_ID               = 0x1114,
1928     PANU_SVCLASS_ID                     = 0x1115,
1929     NAP_SVCLASS_ID                      = 0x1116,
1930     GN_SVCLASS_ID                       = 0x1117,
1931     DIRECT_PRINTING_SVCLASS_ID          = 0x1118,
1932     REFERENCE_PRINTING_SVCLASS_ID       = 0x1119,
1933     IMAGING_SVCLASS_ID                  = 0x111a,
1934     IMAGING_RESPONDER_SVCLASS_ID        = 0x111b,
1935     IMAGING_ARCHIVE_SVCLASS_ID          = 0x111c,
1936     IMAGING_REFOBJS_SVCLASS_ID          = 0x111d,
1937     HANDSFREE_SVCLASS_ID                = 0x111e,
1938     HANDSFREE_AGW_SVCLASS_ID            = 0x111f,
1939     DIRECT_PRT_REFOBJS_SVCLASS_ID       = 0x1120,
1940     REFLECTED_UI_SVCLASS_ID             = 0x1121,
1941     BASIC_PRINTING_SVCLASS_ID           = 0x1122,
1942     PRINTING_STATUS_SVCLASS_ID          = 0x1123,
1943     HID_SVCLASS_ID                      = 0x1124,
1944     HCR_SVCLASS_ID                      = 0x1125,
1945     HCR_PRINT_SVCLASS_ID                = 0x1126,
1946     HCR_SCAN_SVCLASS_ID                 = 0x1127,
1947     CIP_SVCLASS_ID                      = 0x1128,
1948     VIDEO_CONF_GW_SVCLASS_ID            = 0x1129,
1949     UDI_MT_SVCLASS_ID                   = 0x112a,
1950     UDI_TA_SVCLASS_ID                   = 0x112b,
1951     AV_SVCLASS_ID                       = 0x112c,
1952     SAP_SVCLASS_ID                      = 0x112d,
1953     PBAP_PCE_SVCLASS_ID                 = 0x112e,
1954     PBAP_PSE_SVCLASS_ID                 = 0x112f,
1955     PBAP_SVCLASS_ID                     = 0x1130,
1956     PNP_INFO_SVCLASS_ID                 = 0x1200,
1957     GENERIC_NETWORKING_SVCLASS_ID       = 0x1201,
1958     GENERIC_FILETRANS_SVCLASS_ID        = 0x1202,
1959     GENERIC_AUDIO_SVCLASS_ID            = 0x1203,
1960     GENERIC_TELEPHONY_SVCLASS_ID        = 0x1204,
1961     UPNP_SVCLASS_ID                     = 0x1205,
1962     UPNP_IP_SVCLASS_ID                  = 0x1206,
1963     UPNP_PAN_SVCLASS_ID                 = 0x1300,
1964     UPNP_LAP_SVCLASS_ID                 = 0x1301,
1965     UPNP_L2CAP_SVCLASS_ID               = 0x1302,
1966     VIDEO_SOURCE_SVCLASS_ID             = 0x1303,
1967     VIDEO_SINK_SVCLASS_ID               = 0x1304,
1968     VIDEO_DISTRIBUTION_SVCLASS_ID       = 0x1305,
1969     MDP_SVCLASS_ID                      = 0x1400,
1970     MDP_SOURCE_SVCLASS_ID               = 0x1401,
1971     MDP_SINK_SVCLASS_ID                 = 0x1402,
1972     APPLE_AGENT_SVCLASS_ID              = 0x2112,
1973 };
1974
1975 /*
1976  * Standard profile descriptor identifiers; note these
1977  * may be identical to some of the service classes defined above
1978  */
1979 #define SDP_SERVER_PROFILE_ID           SDP_SERVER_SVCLASS_ID
1980 #define BROWSE_GRP_DESC_PROFILE_ID      BROWSE_GRP_DESC_SVCLASS_ID
1981 #define SERIAL_PORT_PROFILE_ID          SERIAL_PORT_SVCLASS_ID
1982 #define LAN_ACCESS_PROFILE_ID           LAN_ACCESS_SVCLASS_ID
1983 #define DIALUP_NET_PROFILE_ID           DIALUP_NET_SVCLASS_ID
1984 #define IRMC_SYNC_PROFILE_ID            IRMC_SYNC_SVCLASS_ID
1985 #define OBEX_OBJPUSH_PROFILE_ID         OBEX_OBJPUSH_SVCLASS_ID
1986 #define OBEX_FILETRANS_PROFILE_ID       OBEX_FILETRANS_SVCLASS_ID
1987 #define IRMC_SYNC_CMD_PROFILE_ID        IRMC_SYNC_CMD_SVCLASS_ID
1988 #define HEADSET_PROFILE_ID              HEADSET_SVCLASS_ID
1989 #define CORDLESS_TELEPHONY_PROFILE_ID   CORDLESS_TELEPHONY_SVCLASS_ID
1990 #define AUDIO_SOURCE_PROFILE_ID         AUDIO_SOURCE_SVCLASS_ID
1991 #define AUDIO_SINK_PROFILE_ID           AUDIO_SINK_SVCLASS_ID
1992 #define AV_REMOTE_TARGET_PROFILE_ID     AV_REMOTE_TARGET_SVCLASS_ID
1993 #define ADVANCED_AUDIO_PROFILE_ID       ADVANCED_AUDIO_SVCLASS_ID
1994 #define AV_REMOTE_PROFILE_ID            AV_REMOTE_SVCLASS_ID
1995 #define VIDEO_CONF_PROFILE_ID           VIDEO_CONF_SVCLASS_ID
1996 #define INTERCOM_PROFILE_ID             INTERCOM_SVCLASS_ID
1997 #define FAX_PROFILE_ID                  FAX_SVCLASS_ID
1998 #define HEADSET_AGW_PROFILE_ID          HEADSET_AGW_SVCLASS_ID
1999 #define WAP_PROFILE_ID                  WAP_SVCLASS_ID
2000 #define WAP_CLIENT_PROFILE_ID           WAP_CLIENT_SVCLASS_ID
2001 #define PANU_PROFILE_ID                 PANU_SVCLASS_ID
2002 #define NAP_PROFILE_ID                  NAP_SVCLASS_ID
2003 #define GN_PROFILE_ID                   GN_SVCLASS_ID
2004 #define DIRECT_PRINTING_PROFILE_ID      DIRECT_PRINTING_SVCLASS_ID
2005 #define REFERENCE_PRINTING_PROFILE_ID   REFERENCE_PRINTING_SVCLASS_ID
2006 #define IMAGING_PROFILE_ID              IMAGING_SVCLASS_ID
2007 #define IMAGING_RESPONDER_PROFILE_ID    IMAGING_RESPONDER_SVCLASS_ID
2008 #define IMAGING_ARCHIVE_PROFILE_ID      IMAGING_ARCHIVE_SVCLASS_ID
2009 #define IMAGING_REFOBJS_PROFILE_ID      IMAGING_REFOBJS_SVCLASS_ID
2010 #define HANDSFREE_PROFILE_ID            HANDSFREE_SVCLASS_ID
2011 #define HANDSFREE_AGW_PROFILE_ID        HANDSFREE_AGW_SVCLASS_ID
2012 #define DIRECT_PRT_REFOBJS_PROFILE_ID   DIRECT_PRT_REFOBJS_SVCLASS_ID
2013 #define REFLECTED_UI_PROFILE_ID         REFLECTED_UI_SVCLASS_ID
2014 #define BASIC_PRINTING_PROFILE_ID       BASIC_PRINTING_SVCLASS_ID
2015 #define PRINTING_STATUS_PROFILE_ID      PRINTING_STATUS_SVCLASS_ID
2016 #define HID_PROFILE_ID                  HID_SVCLASS_ID
2017 #define HCR_PROFILE_ID                  HCR_SCAN_SVCLASS_ID
2018 #define HCR_PRINT_PROFILE_ID            HCR_PRINT_SVCLASS_ID
2019 #define HCR_SCAN_PROFILE_ID             HCR_SCAN_SVCLASS_ID
2020 #define CIP_PROFILE_ID                  CIP_SVCLASS_ID
2021 #define VIDEO_CONF_GW_PROFILE_ID        VIDEO_CONF_GW_SVCLASS_ID
2022 #define UDI_MT_PROFILE_ID               UDI_MT_SVCLASS_ID
2023 #define UDI_TA_PROFILE_ID               UDI_TA_SVCLASS_ID
2024 #define AV_PROFILE_ID                   AV_SVCLASS_ID
2025 #define SAP_PROFILE_ID                  SAP_SVCLASS_ID
2026 #define PBAP_PCE_PROFILE_ID             PBAP_PCE_SVCLASS_ID
2027 #define PBAP_PSE_PROFILE_ID             PBAP_PSE_SVCLASS_ID
2028 #define PBAP_PROFILE_ID                 PBAP_SVCLASS_ID
2029 #define PNP_INFO_PROFILE_ID             PNP_INFO_SVCLASS_ID
2030 #define GENERIC_NETWORKING_PROFILE_ID   GENERIC_NETWORKING_SVCLASS_ID
2031 #define GENERIC_FILETRANS_PROFILE_ID    GENERIC_FILETRANS_SVCLASS_ID
2032 #define GENERIC_AUDIO_PROFILE_ID        GENERIC_AUDIO_SVCLASS_ID
2033 #define GENERIC_TELEPHONY_PROFILE_ID    GENERIC_TELEPHONY_SVCLASS_ID
2034 #define UPNP_PROFILE_ID                 UPNP_SVCLASS_ID
2035 #define UPNP_IP_PROFILE_ID              UPNP_IP_SVCLASS_ID
2036 #define UPNP_PAN_PROFILE_ID             UPNP_PAN_SVCLASS_ID
2037 #define UPNP_LAP_PROFILE_ID             UPNP_LAP_SVCLASS_ID
2038 #define UPNP_L2CAP_PROFILE_ID           UPNP_L2CAP_SVCLASS_ID
2039 #define VIDEO_SOURCE_PROFILE_ID         VIDEO_SOURCE_SVCLASS_ID
2040 #define VIDEO_SINK_PROFILE_ID           VIDEO_SINK_SVCLASS_ID
2041 #define VIDEO_DISTRIBUTION_PROFILE_ID   VIDEO_DISTRIBUTION_SVCLASS_ID
2042 #define MDP_PROFILE_ID                  MDP_SVCLASS_ID
2043 #define MDP_SOURCE_PROFILE_ID           MDP_SROUCE_SVCLASS_ID
2044 #define MDP_SINK_PROFILE_ID             MDP_SINK_SVCLASS_ID
2045 #define APPLE_AGENT_PROFILE_ID          APPLE_AGENT_SVCLASS_ID
2046
2047 /* Data Representation */
2048 enum bt_sdp_data_type {
2049     SDP_DTYPE_NIL       = 0 << 3,
2050     SDP_DTYPE_UINT      = 1 << 3,
2051     SDP_DTYPE_SINT      = 2 << 3,
2052     SDP_DTYPE_UUID      = 3 << 3,
2053     SDP_DTYPE_STRING    = 4 << 3,
2054     SDP_DTYPE_BOOL      = 5 << 3,
2055     SDP_DTYPE_SEQ       = 6 << 3,
2056     SDP_DTYPE_ALT       = 7 << 3,
2057     SDP_DTYPE_URL       = 8 << 3,
2058 };
2059
2060 enum bt_sdp_data_size {
2061     SDP_DSIZE_1         = 0,
2062     SDP_DSIZE_2,
2063     SDP_DSIZE_4,
2064     SDP_DSIZE_8,
2065     SDP_DSIZE_16,
2066     SDP_DSIZE_NEXT1,
2067     SDP_DSIZE_NEXT2,
2068     SDP_DSIZE_NEXT4,
2069     SDP_DSIZE_MASK = SDP_DSIZE_NEXT4,
2070 };
2071
2072 enum bt_sdp_cmd {
2073     SDP_ERROR_RSP               = 0x01,
2074     SDP_SVC_SEARCH_REQ          = 0x02,
2075     SDP_SVC_SEARCH_RSP          = 0x03,
2076     SDP_SVC_ATTR_REQ            = 0x04,
2077     SDP_SVC_ATTR_RSP            = 0x05,
2078     SDP_SVC_SEARCH_ATTR_REQ     = 0x06,
2079     SDP_SVC_SEARCH_ATTR_RSP     = 0x07,
2080 };
2081
2082 enum bt_sdp_errorcode {
2083     SDP_INVALID_VERSION         = 0x0001,
2084     SDP_INVALID_RECORD_HANDLE   = 0x0002,
2085     SDP_INVALID_SYNTAX          = 0x0003,
2086     SDP_INVALID_PDU_SIZE        = 0x0004,
2087     SDP_INVALID_CSTATE          = 0x0005,
2088 };
2089
2090 /*
2091  * String identifiers are based on the SDP spec stating that
2092  * "base attribute id of the primary (universal) language must be 0x0100"
2093  *
2094  * Other languages should have their own offset; e.g.:
2095  * #define XXXLangBase yyyy
2096  * #define AttrServiceName_XXX  0x0000+XXXLangBase
2097  */
2098 #define SDP_PRIMARY_LANG_BASE           0x0100
2099
2100 enum bt_sdp_attribute_id {
2101     SDP_ATTR_RECORD_HANDLE                      = 0x0000,
2102     SDP_ATTR_SVCLASS_ID_LIST                    = 0x0001,
2103     SDP_ATTR_RECORD_STATE                       = 0x0002,
2104     SDP_ATTR_SERVICE_ID                         = 0x0003,
2105     SDP_ATTR_PROTO_DESC_LIST                    = 0x0004,
2106     SDP_ATTR_BROWSE_GRP_LIST                    = 0x0005,
2107     SDP_ATTR_LANG_BASE_ATTR_ID_LIST             = 0x0006,
2108     SDP_ATTR_SVCINFO_TTL                        = 0x0007,
2109     SDP_ATTR_SERVICE_AVAILABILITY               = 0x0008,
2110     SDP_ATTR_PFILE_DESC_LIST                    = 0x0009,
2111     SDP_ATTR_DOC_URL                            = 0x000a,
2112     SDP_ATTR_CLNT_EXEC_URL                      = 0x000b,
2113     SDP_ATTR_ICON_URL                           = 0x000c,
2114     SDP_ATTR_ADD_PROTO_DESC_LIST                = 0x000d,
2115
2116     SDP_ATTR_SVCNAME_PRIMARY                    = SDP_PRIMARY_LANG_BASE + 0,
2117     SDP_ATTR_SVCDESC_PRIMARY                    = SDP_PRIMARY_LANG_BASE + 1,
2118     SDP_ATTR_SVCPROV_PRIMARY                    = SDP_PRIMARY_LANG_BASE + 2,
2119
2120     SDP_ATTR_GROUP_ID                           = 0x0200,
2121     SDP_ATTR_IP_SUBNET                          = 0x0200,
2122
2123     /* SDP */
2124     SDP_ATTR_VERSION_NUM_LIST                   = 0x0200,
2125     SDP_ATTR_SVCDB_STATE                        = 0x0201,
2126
2127     SDP_ATTR_SERVICE_VERSION                    = 0x0300,
2128     SDP_ATTR_EXTERNAL_NETWORK                   = 0x0301,
2129     SDP_ATTR_SUPPORTED_DATA_STORES_LIST         = 0x0301,
2130     SDP_ATTR_FAX_CLASS1_SUPPORT                 = 0x0302,
2131     SDP_ATTR_REMOTE_AUDIO_VOLUME_CONTROL        = 0x0302,
2132     SDP_ATTR_FAX_CLASS20_SUPPORT                = 0x0303,
2133     SDP_ATTR_SUPPORTED_FORMATS_LIST             = 0x0303,
2134     SDP_ATTR_FAX_CLASS2_SUPPORT                 = 0x0304,
2135     SDP_ATTR_AUDIO_FEEDBACK_SUPPORT             = 0x0305,
2136     SDP_ATTR_NETWORK_ADDRESS                    = 0x0306,
2137     SDP_ATTR_WAP_GATEWAY                        = 0x0307,
2138     SDP_ATTR_HOMEPAGE_URL                       = 0x0308,
2139     SDP_ATTR_WAP_STACK_TYPE                     = 0x0309,
2140     SDP_ATTR_SECURITY_DESC                      = 0x030a,
2141     SDP_ATTR_NET_ACCESS_TYPE                    = 0x030b,
2142     SDP_ATTR_MAX_NET_ACCESSRATE                 = 0x030c,
2143     SDP_ATTR_IP4_SUBNET                         = 0x030d,
2144     SDP_ATTR_IP6_SUBNET                         = 0x030e,
2145     SDP_ATTR_SUPPORTED_CAPABILITIES             = 0x0310,
2146     SDP_ATTR_SUPPORTED_FEATURES                 = 0x0311,
2147     SDP_ATTR_SUPPORTED_FUNCTIONS                = 0x0312,
2148     SDP_ATTR_TOTAL_IMAGING_DATA_CAPACITY        = 0x0313,
2149     SDP_ATTR_SUPPORTED_REPOSITORIES             = 0x0314,
2150
2151     /* PnP Information */
2152     SDP_ATTR_SPECIFICATION_ID                   = 0x0200,
2153     SDP_ATTR_VENDOR_ID                          = 0x0201,
2154     SDP_ATTR_PRODUCT_ID                         = 0x0202,
2155     SDP_ATTR_VERSION                            = 0x0203,
2156     SDP_ATTR_PRIMARY_RECORD                     = 0x0204,
2157     SDP_ATTR_VENDOR_ID_SOURCE                   = 0x0205,
2158
2159     /* BT HID */
2160     SDP_ATTR_DEVICE_RELEASE_NUMBER              = 0x0200,
2161     SDP_ATTR_PARSER_VERSION                     = 0x0201,
2162     SDP_ATTR_DEVICE_SUBCLASS                    = 0x0202,
2163     SDP_ATTR_COUNTRY_CODE                       = 0x0203,
2164     SDP_ATTR_VIRTUAL_CABLE                      = 0x0204,
2165     SDP_ATTR_RECONNECT_INITIATE                 = 0x0205,
2166     SDP_ATTR_DESCRIPTOR_LIST                    = 0x0206,
2167     SDP_ATTR_LANG_ID_BASE_LIST                  = 0x0207,
2168     SDP_ATTR_SDP_DISABLE                        = 0x0208,
2169     SDP_ATTR_BATTERY_POWER                      = 0x0209,
2170     SDP_ATTR_REMOTE_WAKEUP                      = 0x020a,
2171     SDP_ATTR_PROFILE_VERSION                    = 0x020b,
2172     SDP_ATTR_SUPERVISION_TIMEOUT                = 0x020c,
2173     SDP_ATTR_NORMALLY_CONNECTABLE               = 0x020d,
2174     SDP_ATTR_BOOT_DEVICE                        = 0x020e,
2175 };
2176
2177 #endif