274 	struct mgmt_rp_read_version rp;  in read_version()  local
278 	rp.version = MGMT_VERSION;  in read_version()
279 	rp.revision = cpu_to_le16(MGMT_REVISION);  in read_version()
282 				 &rp, sizeof(rp));  in read_version()
288 	struct mgmt_rp_read_commands *rp;  in read_commands()  local
303 	rp_size = sizeof(*rp) + ((num_commands + num_events) * sizeof(u16));  in read_commands()
305 	rp = kmalloc(rp_size, GFP_KERNEL);  in read_commands()
306 	if (!rp)  in read_commands()
309 	rp->num_commands = cpu_to_le16(num_commands);  in read_commands()
310 	rp->num_events = cpu_to_le16(num_events);  in read_commands()
313 		__le16 *opcode = rp->opcodes;  in read_commands()
321 		__le16 *opcode = rp->opcodes;  in read_commands()
331 				rp, rp_size);  in read_commands()
332 	kfree(rp);  in read_commands()
340 	struct mgmt_rp_read_index_list *rp;  in read_index_list()  local
357 	rp_len = sizeof(*rp) + (2 * count);  in read_index_list()
358 	rp = kmalloc(rp_len, GFP_ATOMIC);  in read_index_list()
359 	if (!rp) {  in read_index_list()
379 			rp->index[count++] = cpu_to_le16(d->id);  in read_index_list()
384 	rp->num_controllers = cpu_to_le16(count);  in read_index_list()
385 	rp_len = sizeof(*rp) + (2 * count);  in read_index_list()
390 				0, rp, rp_len);  in read_index_list()
392 	kfree(rp);  in read_index_list()
400 	struct mgmt_rp_read_unconf_index_list *rp;  in read_unconf_index_list()  local
417 	rp_len = sizeof(*rp) + (2 * count);  in read_unconf_index_list()
418 	rp = kmalloc(rp_len, GFP_ATOMIC);  in read_unconf_index_list()
419 	if (!rp) {  in read_unconf_index_list()
439 			rp->index[count++] = cpu_to_le16(d->id);  in read_unconf_index_list()
444 	rp->num_controllers = cpu_to_le16(count);  in read_unconf_index_list()
445 	rp_len = sizeof(*rp) + (2 * count);  in read_unconf_index_list()
450 				MGMT_OP_READ_UNCONF_INDEX_LIST, 0, rp, rp_len);  in read_unconf_index_list()
452 	kfree(rp);  in read_unconf_index_list()
460 	struct mgmt_rp_read_ext_index_list *rp;  in read_ext_index_list()  local
476 	rp_len = sizeof(*rp) + (sizeof(rp->entry[0]) * count);  in read_ext_index_list()
477 	rp = kmalloc(rp_len, GFP_ATOMIC);  in read_ext_index_list()
478 	if (!rp) {  in read_ext_index_list()
498 				rp->entry[count].type = 0x01;  in read_ext_index_list()
500 				rp->entry[count].type = 0x00;  in read_ext_index_list()
502 			rp->entry[count].type = 0x02;  in read_ext_index_list()
507 		rp->entry[count].bus = d->bus;  in read_ext_index_list()
508 		rp->entry[count++].index = cpu_to_le16(d->id);  in read_ext_index_list()
512 	rp->num_controllers = cpu_to_le16(count);  in read_ext_index_list()
513 	rp_len = sizeof(*rp) + (sizeof(rp->entry[0]) * count);  in read_ext_index_list()
526 				MGMT_OP_READ_EXT_INDEX_LIST, 0, rp, rp_len);  in read_ext_index_list()
528 	kfree(rp);  in read_ext_index_list()
580 	struct mgmt_rp_read_config_info rp;  in read_config_info()  local
587 	memset(&rp, 0, sizeof(rp));  in read_config_info()
588 	rp.manufacturer = cpu_to_le16(hdev->manufacturer);  in read_config_info()
596 	rp.supported_options = cpu_to_le32(options);  in read_config_info()
597 	rp.missing_options = get_missing_options(hdev);  in read_config_info()
602 				 &rp, sizeof(rp));  in read_config_info()
1354 	struct mgmt_rp_read_info rp;  in read_controller_info()  local
1360 	memset(&rp, 0, sizeof(rp));  in read_controller_info()
1362 	bacpy(&rp.bdaddr, &hdev->bdaddr);  in read_controller_info()
1364 	rp.version = hdev->hci_ver;  in read_controller_info()
1365 	rp.manufacturer = cpu_to_le16(hdev->manufacturer);  in read_controller_info()
1367 	rp.supported_settings = cpu_to_le32(get_supported_settings(hdev));  in read_controller_info()
1368 	rp.current_settings = cpu_to_le32(get_current_settings(hdev));  in read_controller_info()
1370 	memcpy(rp.dev_class, hdev->dev_class, 3);  in read_controller_info()
1372 	memcpy(rp.name, hdev->dev_name, sizeof(hdev->dev_name));  in read_controller_info()
1373 	memcpy(rp.short_name, hdev->short_name, sizeof(hdev->short_name));  in read_controller_info()
1377 	return mgmt_cmd_complete(sk, hdev->id, MGMT_OP_READ_INFO, 0, &rp,  in read_controller_info()
1378 				 sizeof(rp));  in read_controller_info()
2918 	struct mgmt_rp_unpair_device rp;  in unpair_device()  local
2924 	memset(&rp, 0, sizeof(rp));  in unpair_device()
2925 	bacpy(&rp.addr.bdaddr, &cp->addr.bdaddr);  in unpair_device()
2926 	rp.addr.type = cp->addr.type;  in unpair_device()
2931 					 &rp, sizeof(rp));  in unpair_device()
2936 					 &rp, sizeof(rp));  in unpair_device()
2942 					MGMT_STATUS_NOT_POWERED, &rp,  in unpair_device()
2943 					sizeof(rp));  in unpair_device()
2996 					MGMT_STATUS_NOT_PAIRED, &rp,  in unpair_device()
2997 					sizeof(rp));  in unpair_device()
3006 					&rp, sizeof(rp));  in unpair_device()
3035 	struct mgmt_rp_disconnect rp;  in disconnect()  local
3042 	memset(&rp, 0, sizeof(rp));  in disconnect()
3043 	bacpy(&rp.addr.bdaddr, &cp->addr.bdaddr);  in disconnect()
3044 	rp.addr.type = cp->addr.type;  in disconnect()
3049 					 &rp, sizeof(rp));  in disconnect()
3055 					MGMT_STATUS_NOT_POWERED, &rp,  in disconnect()
3056 					sizeof(rp));  in disconnect()
3062 					MGMT_STATUS_BUSY, &rp, sizeof(rp));  in disconnect()
3074 					MGMT_STATUS_NOT_CONNECTED, &rp,  in disconnect()
3075 					sizeof(rp));  in disconnect()
3118 	struct mgmt_rp_get_connections *rp;  in get_connections()  local
3140 	rp_len = sizeof(*rp) + (i * sizeof(struct mgmt_addr_info));  in get_connections()
3141 	rp = kmalloc(rp_len, GFP_KERNEL);  in get_connections()
3142 	if (!rp) {  in get_connections()
3151 		bacpy(&rp->addr[i].bdaddr, &c->dst);  in get_connections()
3152 		rp->addr[i].type = link_to_bdaddr(c->type, c->dst_type);  in get_connections()
3158 	rp->conn_count = cpu_to_le16(i);  in get_connections()
3161 	rp_len = sizeof(*rp) + (i * sizeof(struct mgmt_addr_info));  in get_connections()
3163 	err = mgmt_cmd_complete(sk, hdev->id, MGMT_OP_GET_CONNECTIONS, 0, rp,  in get_connections()
3166 	kfree(rp);  in get_connections()
3298 	struct mgmt_rp_pair_device rp;  in pairing_complete()  local
3302 	bacpy(&rp.addr.bdaddr, &conn->dst);  in pairing_complete()
3303 	rp.addr.type = link_to_bdaddr(conn->type, conn->dst_type);  in pairing_complete()
3306 				status, &rp, sizeof(rp));  in pairing_complete()
3376 	struct mgmt_rp_pair_device rp;  in pair_device()  local
3384 	memset(&rp, 0, sizeof(rp));  in pair_device()
3385 	bacpy(&rp.addr.bdaddr, &cp->addr.bdaddr);  in pair_device()
3386 	rp.addr.type = cp->addr.type;  in pair_device()
3391 					 &rp, sizeof(rp));  in pair_device()
3396 					 &rp, sizeof(rp));  in pair_device()
3402 					MGMT_STATUS_NOT_POWERED, &rp,  in pair_device()
3403 					sizeof(rp));  in pair_device()
3409 					MGMT_STATUS_ALREADY_PAIRED, &rp,  in pair_device()
3410 					sizeof(rp));  in pair_device()
3459 					status, &rp, sizeof(rp));  in pair_device()
3466 					MGMT_STATUS_BUSY, &rp, sizeof(rp));  in pair_device()
3812 		struct hci_rp_read_local_oob_data *rp = (void *) skb->data;  in read_local_oob_data_complete()  local
3814 		if (skb->len < sizeof(*rp)) {  in read_local_oob_data_complete()
3821 		memcpy(mgmt_rp.hash192, rp->hash, sizeof(rp->hash));  in read_local_oob_data_complete()
3822 		memcpy(mgmt_rp.rand192, rp->rand, sizeof(rp->rand));  in read_local_oob_data_complete()
3826 		struct hci_rp_read_local_oob_ext_data *rp = (void *) skb->data;  in read_local_oob_data_complete()  local
3828 		if (skb->len < sizeof(*rp)) {  in read_local_oob_data_complete()
3835 		memcpy(mgmt_rp.hash192, rp->hash192, sizeof(rp->hash192));  in read_local_oob_data_complete()
3836 		memcpy(mgmt_rp.rand192, rp->rand192, sizeof(rp->rand192));  in read_local_oob_data_complete()
3838 		memcpy(mgmt_rp.hash256, rp->hash256, sizeof(rp->hash256));  in read_local_oob_data_complete()
3839 		memcpy(mgmt_rp.rand256, rp->rand256, sizeof(rp->rand256));  in read_local_oob_data_complete()
5584 	struct mgmt_rp_get_conn_info rp;  in conn_info_cmd_complete()  local
5587 	memcpy(&rp.addr, cmd->param, sizeof(rp.addr));  in conn_info_cmd_complete()
5590 		rp.rssi = conn->rssi;  in conn_info_cmd_complete()
5591 		rp.tx_power = conn->tx_power;  in conn_info_cmd_complete()
5592 		rp.max_tx_power = conn->max_tx_power;  in conn_info_cmd_complete()
5594 		rp.rssi = HCI_RSSI_INVALID;  in conn_info_cmd_complete()
5595 		rp.tx_power = HCI_TX_POWER_INVALID;  in conn_info_cmd_complete()
5596 		rp.max_tx_power = HCI_TX_POWER_INVALID;  in conn_info_cmd_complete()
5600 				status, &rp, sizeof(rp));  in conn_info_cmd_complete()
5665 	struct mgmt_rp_get_conn_info rp;  in get_conn_info()  local
5672 	memset(&rp, 0, sizeof(rp));  in get_conn_info()
5673 	bacpy(&rp.addr.bdaddr, &cp->addr.bdaddr);  in get_conn_info()
5674 	rp.addr.type = cp->addr.type;  in get_conn_info()
5679 					 &rp, sizeof(rp));  in get_conn_info()
5685 					MGMT_STATUS_NOT_POWERED, &rp,  in get_conn_info()
5686 					sizeof(rp));  in get_conn_info()
5698 					MGMT_STATUS_NOT_CONNECTED, &rp,  in get_conn_info()
5699 					sizeof(rp));  in get_conn_info()
5705 					MGMT_STATUS_BUSY, &rp, sizeof(rp));  in get_conn_info()
5769 		rp.rssi = conn->rssi;  in get_conn_info()
5770 		rp.tx_power = conn->tx_power;  in get_conn_info()
5771 		rp.max_tx_power = conn->max_tx_power;  in get_conn_info()
5774 					MGMT_STATUS_SUCCESS, &rp, sizeof(rp));  in get_conn_info()
5785 	struct mgmt_rp_get_clock_info rp;  in clock_info_cmd_complete()  local
5789 	memset(&rp, 0, sizeof(rp));  in clock_info_cmd_complete()
5790 	memcpy(&rp.addr, &cmd->param, sizeof(rp.addr));  in clock_info_cmd_complete()
5797 		rp.local_clock = cpu_to_le32(hdev->clock);  in clock_info_cmd_complete()
5802 		rp.piconet_clock = cpu_to_le32(conn->clock);  in clock_info_cmd_complete()
5803 		rp.accuracy = cpu_to_le16(conn->clock_accuracy);  in clock_info_cmd_complete()
5807 	err = mgmt_cmd_complete(cmd->sk, cmd->index, cmd->opcode, status, &rp,  in clock_info_cmd_complete()
5808 				sizeof(rp));  in clock_info_cmd_complete()
5854 	struct mgmt_rp_get_clock_info rp;  in get_clock_info()  local
5863 	memset(&rp, 0, sizeof(rp));  in get_clock_info()
5864 	bacpy(&rp.addr.bdaddr, &cp->addr.bdaddr);  in get_clock_info()
5865 	rp.addr.type = cp->addr.type;  in get_clock_info()
5870 					 &rp, sizeof(rp));  in get_clock_info()
5876 					MGMT_STATUS_NOT_POWERED, &rp,  in get_clock_info()
5877 					sizeof(rp));  in get_clock_info()
5888 						&rp, sizeof(rp));  in get_clock_info()
6498 		struct hci_rp_read_local_oob_data *rp;  in read_local_oob_ext_data_complete()  local
6500 		if (skb->len != sizeof(*rp)) {  in read_local_oob_ext_data_complete()
6505 			rp = (void *)skb->data;  in read_local_oob_ext_data_complete()
6508 			h192 = rp->hash;  in read_local_oob_ext_data_complete()
6509 			r192 = rp->rand;  in read_local_oob_ext_data_complete()
6514 		struct hci_rp_read_local_oob_ext_data *rp;  in read_local_oob_ext_data_complete()  local
6516 		if (skb->len != sizeof(*rp)) {  in read_local_oob_ext_data_complete()
6521 			rp = (void *)skb->data;  in read_local_oob_ext_data_complete()
6529 				h192 = rp->hash192;  in read_local_oob_ext_data_complete()
6530 				r192 = rp->rand192;  in read_local_oob_ext_data_complete()
6533 			h256 = rp->hash256;  in read_local_oob_ext_data_complete()
6534 			r256 = rp->rand256;  in read_local_oob_ext_data_complete()
6614 	struct mgmt_rp_read_local_oob_ext_data *rp;  in read_local_oob_ext_data()  local
6648 	rp_len = sizeof(*rp) + eir_len;  in read_local_oob_ext_data()
6649 	rp = kmalloc(rp_len, GFP_ATOMIC);  in read_local_oob_ext_data()
6650 	if (!rp)  in read_local_oob_ext_data()
6670 			eir_len = eir_append_data(rp->eir, eir_len,  in read_local_oob_ext_data()
6710 		eir_len = eir_append_data(rp->eir, eir_len, EIR_LE_BDADDR,  in read_local_oob_ext_data()
6718 		eir_len = eir_append_data(rp->eir, eir_len, EIR_LE_ROLE,  in read_local_oob_ext_data()
6722 			eir_len = eir_append_data(rp->eir, eir_len,  in read_local_oob_ext_data()
6726 			eir_len = eir_append_data(rp->eir, eir_len,  in read_local_oob_ext_data()
6736 		eir_len = eir_append_data(rp->eir, eir_len, EIR_FLAGS,  in read_local_oob_ext_data()
6748 	rp->type = cp->type;  in read_local_oob_ext_data()
6749 	rp->eir_len = cpu_to_le16(eir_len);  in read_local_oob_ext_data()
6752 				status, rp, sizeof(*rp) + eir_len);  in read_local_oob_ext_data()
6757 				 rp, sizeof(*rp) + eir_len,  in read_local_oob_ext_data()
6761 	kfree(rp);  in read_local_oob_ext_data()
6784 	struct mgmt_rp_read_adv_features *rp;  in read_adv_features()  local
6798 	rp_len = sizeof(*rp);  in read_adv_features()
6807 	rp = kmalloc(rp_len, GFP_ATOMIC);  in read_adv_features()
6808 	if (!rp) {  in read_adv_features()
6815 	rp->supported_flags = cpu_to_le32(supported_flags);  in read_adv_features()
6816 	rp->max_adv_data_len = HCI_MAX_AD_LENGTH;  in read_adv_features()
6817 	rp->max_scan_rsp_len = HCI_MAX_AD_LENGTH;  in read_adv_features()
6818 	rp->max_instances = 1;  in read_adv_features()
6824 		rp->num_instances = 1;  in read_adv_features()
6825 		rp->instance[0] = 1;  in read_adv_features()
6827 		rp->num_instances = 0;  in read_adv_features()
6833 				MGMT_STATUS_SUCCESS, rp, rp_len);  in read_adv_features()
6835 	kfree(rp);  in read_adv_features()
6887 	struct mgmt_rp_add_advertising rp;  in add_advertising_complete()  local
6904 	rp.instance = 0x01;  in add_advertising_complete()
6911 				  mgmt_status(status), &rp, sizeof(rp));  in add_advertising_complete()
6935 	struct mgmt_rp_add_advertising rp;  in add_advertising()  local
7017 		rp.instance = 0x01;  in add_advertising()
7019 					MGMT_STATUS_SUCCESS, &rp, sizeof(rp));  in add_advertising()
7053 	struct mgmt_rp_remove_advertising rp;  in remove_advertising_complete()  local
7067 	rp.instance = 1;  in remove_advertising_complete()
7070 			  &rp, sizeof(rp));  in remove_advertising_complete()
7081 	struct mgmt_rp_remove_advertising rp;  in remove_advertising()  local
7125 		rp.instance = 1;  in remove_advertising()
7128 					MGMT_STATUS_SUCCESS, &rp, sizeof(rp));  in remove_advertising()