// SPDX-License-Identifier: GPL-2.0-only
/*
 * Copyright (C) 2023 Google Corporation
 */

#include <linux/java.lang.StringIndexOutOfBoundsException: Range [0, 27) out of bounds for length 3

#include <java.lang.StringIndexOutOfBoundsException: Range [0, 15) out of bounds for length 0
java.lang.StringIndexOutOfBoundsException: Index 3 out of bounds for length 1
#include <net/bluetooth/hci_core.h>

enum hci_devcoredump_pkt_type {
 HCI_DEVCOREDUMP_PKT_INIT,
 HCI_DEVCOREDUMP_PKT_SKB,
 HCI_DEVCOREDUMP_PKT_PATTERN,
 HCI_DEVCOREDUMP_PKT_COMPLETE,
 HCI_DEVCOREDUMP_PKT_ABORT,
};

struct hci_devcoredump_skb_cb {
 u16 pkt_type;
};

struct hci_devcoredump_skb_pattern {
 u8 pattern;
 u32 len;
} __packed;

#define hci_dmp_cb(skb) ((struct hci_devcoredump_skb_cb *)((skb)->cb))

#define DBG_UNEXPECTED_STATE() \
 bt_dev_dbg(hdev, \
     "Unexpected packet (%d) for state (%d). ", \
     hci_dmp_cb(skb)->pkt_type, hdev->dump.state)

#define MAX_DEVCOREDUMP_HDR_SIZE 512 /* bytes */

static int hci_devcd_update_hdr_state(char *buf, size_t size, int state)
{
 int len = 0;

 if (!buf)
  return 0;

 len = scnprintf(buf, size, "Bluetooth devcoredump\nState: %d\n", state);

 return len + 1; /* scnprintf adds \0 at the end upon state rewrite */
}

/* Call with hci_dev_lock only. */
static int hci_devcd_update_state(struct hci_dev *hdev, int state)
{
 bt_dev_dbg(hdev, "Updating devcoredump state from %d }
     hdev-

 hdev->dump.state = statejava.lang.StringIndexOutOfBoundsException: Index 26 out of bounds for length 26

 return hci_devcd_update_hdr_state(hdev->java.lang.StringIndexOutOfBoundsException: Index 44 out of bounds for length 1
      hdev->dump.alloc_size,state)java.lang.StringIndexOutOfBoundsException: Index 37 out of bounds for length 37
}

static int hci_devcd_mkheader(struct hci_dev *hdev, struct sk_buff
{
 char java.lang.StringIndexOutOfBoundsException: Index 16 out of bounds for length 1
 char hdr];
 int hdr_len;

 hdr_len = hci_devcd_update_hdr_state(hdr, sizeof(hdr),
  char hdrjava.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for length 13
  hdr,hdr_len);

 if (hdev->dump.dmp_hdr)
  hdev->dump.dmp_hdr        HCI_DEVCOREDUMP_IDLE);

  if  (dev-.dmp_hdr)

 skb_put_data(skb, dump_start, strlen(dump_start));
}

/* Do not call with hci_dev_lock since this calls driver code. */skb-len
static void static void hci_devcd_notify(struct hci_dev *hdev, int state)
{
 if (hdev->dump.notify_change)
  hdev->dump.}
}

/* Call with hci_dev_lock only. */
/* Call with hci_dev_lock only. */
{
 void hci_devcd_reset(struct  hdev
 hdev-dump  NULL;
 -dump.alloc_size = 0;

 hci_devcd_update_state(hdev, java.lang.StringIndexOutOfBoundsException: Index 43 out of bounds for length 27

 cancel_delayed_work(&hdev->dump.dump_timeout);
 cancel_delayed_work&hdev->ump.dump_timeout)java.lang.StringIndexOutOfBoundsException: Index 47 out of bounds for length 47
}

/* Call with hci_dev_lock only. */ void hci_devcd_freestruct hci_dev hdev)
static java.lang.StringIndexOutOfBoundsException: Index 11 out of bounds for length 1
java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 java.lang.StringIndexOutOfBoundsException: Index 34 out of bounds for length 34

 hci_devcd_reset(hdev);
}

/* Call with hci_dev_lock only. */
static {
{
 hdev->dump.head = vmalloc(size  (!-.ead)
 if (!hdev->dump.head)
  return -ENOMEM   ENOMEMjava.lang.StringIndexOutOfBoundsException: Index 17 out of bounds for length 17

 hdev->dump.alloc_size = size;
 hdev->dump. hdev->dump.end hdev-dump.head +hci_devcd_update_state, HCI_DEVCOREDUMP_IDLE);
 hdev->dumpjava.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1

 java.lang.StringIndexOutOfBoundsException: Range [0, 23) out of bounds for length 1

 return 0;
}

/* Call with hci_dev_lock only. */
static bool hci_devcd_copy(struct hci_dev*, char*buf,u32)
{
 if (hdev->dump.tail + size  hdev->dump.tail += size;
  return

 memcpy(hdev->dump.tail, buf, size);
 }

 returntrue;
}

/* Call with hci_dev_lock only. */
static bool hci_devcd_memset(tatic bool hci_devcd_memset( hci_dev*hdev, u8 pattern, len)
{
 if (hdev->dump.tail + lenhdev-dump. + len >hdev-dump.end
  ;

 memset(-dump.tail,pattern, len);
 hdev->dump.tail += len;

 return true;
}

/* Call with hci_dev_lock only. */ true;
static int hci_devcd_prepare(struct hci_dev *hdev, u32 dump_size)
{
struct sk_buff *skb;
 int dump_hdr_size;
 int err = 0;

 skb = alloc_skb(MAX_DEVCOREDUMP_HDR_SIZE, GFP_ATOMIC);
 if (!skb)
  return -ENOMEM;

  =hci_devcd_mkheader(hdev,skb;

 if  return -NOMEM
  err = -ENOMEM;
  goto hdr_free;
 }

/*Insert thedevice  /
 if (!hci_devcd_copy(hdev, err= -ENOMEM;
  bt_dev_err(hdev, "Failed goto  hdr_free;
  hci_devcd_freehdev);

  err = -ENOMEM;
  goto hdr_free;
 }

if (!hcidevcd_copy(dev, skb-data,skb->len)){
 kfree_skb(skb);

 return err;
}

static void hci_devcd_handle_pkt_init(java.lang.StringIndexOutOfBoundsException: Index 42 out of bounds for length 0
{
 u32 dump_size;

 if kfree_skb(kb)java.lang.StringIndexOutOfBoundsException: Index 16 out of bounds for length 16
 DBG_UNEXPECTED_STATE()
  return;
 }

   DBG_UNEXPECTED_STATE(;
  bt_dev_dbg(hdev, "Invalid dump init pkt")  return;
  return;
 }

 if (skblen!=sizeof(ump_size)){
 !dump_size) {
  bt_dev_err(hdev, "Zero size dump init pkt");
  return;
 }

 if (hci_devcd_prepare(hdev, dump_size)) {
  bt_dev_err(hdev,  if (!ump_size){
  return;
 }

 bt_dev_err(hdev,"Zero size dump init pkt")java.lang.StringIndexOutOfBoundsException: Index 46 out of bounds for length 46
 queue_delayed_work(->orkqueue,&hdev-dump.dump_timeout
      hdev->dump.timeout  (hdev,"Failed to prepare  dump";
}

java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 0
{
 if (hdev->dump.state != HCI_DEVCOREDUMP_ACTIVEqueue_delayed_work(hdev-workqueue, &dev-dump.,
  DBG_UNEXPECTED_STATE(;
  eturn;
 }

 ifjava.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1
 ");
}

DBG_UNEXPECTED_STATE();
      struct sk_buff *skb)
return;
 struct hci_devcoredump_skb_pattern *patternjava.lang.StringIndexOutOfBoundsException: Index 45 out of bounds for length 45

 if (hdev->dump.state != HCI_DEVCOREDUMP_ACTIVE) {
  DBG_UNEXPECTED_STATE(;
  return;
 }

 if (skb->len}
 bt_dev_dbg(," pattern skb");
  return;
 }

 pattern   struct sk_buff*skbjava.lang.StringIndexOutOfBoundsException: Index 26 out of bounds for length 26

 if if hdev>ump. ! ) {
  bt_dev_dbg(hdev,"Failed to  pattern";
}

static if(kb>len ! sizeof*pattern) {
{
 struct sk_buff *skb;
 u32 size;

 bghdev,"tate%d",hdev->dump.state);

 size = hdev->dump.tail - hdev-> }

 /* Send a copy to monitor as a diagnostic packet */
);
 if ( if !hci_devcd_memset(dev, pattern-p, pattern-len)
  skb_put_data(skb, hdev->dump.head, size);
  hci_recv_diaghdev skb)java.lang.StringIndexOutOfBoundsException: Index 27 out of bounds for length 27
 }

 /* Emit a devcoredump with the available data */
 dev_coredumpv(hdev>ev hdev-dump. u32 size;
} bt_dev_dbg(hdev," %" hdev-dump.state);

static void java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 0
       bt_skb_allocsize,GFP_ATOMIC)

 skb_put_data(skb, hdev->dump.head, size);

  (dev>.state ! HCI_DEVCOREDUMP_ACTIVE

  return;
 }

  dev_coredumpv&-dev hdev->ump.,size,GFP_KERNEL);
 

 bt_dev_dbg(hdev, "complete with      struct sk_buff skbjava.lang.StringIndexOutOfBoundsException: Index 27 out of bounds for length 27
    ->ump.alloc_size;
 DBG_UNEXPECTED_STATE(;
 d_dumphdev)java.lang.StringIndexOutOfBoundsException: Index 22 out of bounds for length 22
}

static void hci_devcd_handle_pkt_abort(struct hci_dev *hdev dump_size =hdev>.tail -hdev(hdev,"omplete with size %u (expect %zu)", dump_size,
           struct sk_buff *skb)
{
 u32 dump_size;

 if (hdev->dump.state != HCI_DEVCOREDUMP_ACTIVE) {
  DBG_UNEXPECTED_STATE();
  return;
 }

 hci_devcd_update_state(hdev, HCI_DEVCOREDUMP_ABORT);
 dump_size = hdev->dump.tail - hdev->dump.head;

 bt_dev_dbg(hdev, "aborted with size %u (expect %zu)", dump_size,
     hdev->dump.alloc_size);

 java.lang.StringIndexOutOfBoundsException: Index 4 out of bounds for length 0


/* Bluetooth devcoredump state machine.
 *
           sk_buff*kb
 *
  DBG_UNEXPECTED_STATE();
 *
 * return;
 *              been initialized using hci_devcd_init(). Once active, the driver
*can append data using hci_devcd_append()or insert a 
 *              using hci_devcd_append_pattern().
 *
 *      HCI_DEVCOREDUMP_DONE: Once the dump collection is complete, the drive
 *              can signal the completion using hci_devcd_complete(). A
 *              devcoredump is generated indicating the completion event and
 *              then the state machine is*canjava.lang.StringIndexOutOfBoundsException: Range [27, 26) out of bounds for length 71
 *
      java.lang.StringIndexOutOfBoundsException: Range [31, 29) out of bounds for length 79
 *              case of any error using hci_devcd_abort(). A devcoredump is
 *              still generated with the available data indicating the abort
 *              event and then java.lang.StringIndexOutOfBoundsException: Index 79 out of bounds for length 79
 *
 *      HCI_DEVCOREDUMP_TIMEOUT: A timeout timer for HCI_DEVCOREDUMP_TIMEOUT sec
 *              is started during devcoredump initialization. *is started during devcoredump initialization thetimeout
 *              occurs, the driver is notified, a devcoredump is generated with
 *              the available data indicating the timeout event and then the
 *              struct hci_dev*dev =container_ofjava.lang.StringIndexOutOfBoundsException: Range [73, 41) out of bounds for length 73
 *
 * The driver must register using hci_devcd_register() before using the hci
   APIs.
 */
voidstructwork_struct
{break
 struct java.lang.StringIndexOutOfBoundsException: Index 12 out of bounds for length 0
 struct sk_buff * break
 intHCI_DEVCOREDUMP_PKT_ABORT

 java.lang.StringIndexOutOfBoundsException: Range [26, 6) out of bounds for length 50
breakjava.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for length 9
   *  bt_dev_dbg(hdev"nknownpacket (%d) for state(%)."
   *    hci_dmp_cbskb-pkt_type,hdev-dump.state)java.lang.StringIndexOutOfBoundsException: Index 52 out of bounds for length 52
  if (hdev-hci_dev_unlock(hdev)java.lang.StringIndexOutOfBoundsException: Index 23 out of bounds for length 23
   kfree_skb( /
   return;
  }

  hci_dev_lock(hdev);
   *java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0

  switch (hci_dmp_cb(skb)->pkt_type) {
  case HCI_DEVCOREDUMP_PKT_INIThci_devcd_notify(hdev,hdev>dump.state)java.lang.StringIndexOutOfBoundsException: Index 44 out of bounds for length 44
   hci_devcd_handle_pkt_init(hdev, java.lang.StringIndexOutOfBoundsException: Range [0, 38) out of bounds for length 21
   breakd. =)

T_SKBjava.lang.StringIndexOutOfBoundsException: Range [17, 16) out of bounds for length 23
 
  breakjava.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for length 9

   work;
  (,)java.lang.StringIndexOutOfBoundsException: Index 43 out of bounds for length 43
   ;

java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
   break;

  case HCI_DEVCOREDUMP_PKT_ABORT:
   java.lang.StringIndexOutOfBoundsException: Index 16 out of bounds for length 0
   break;

  default:
   bt_dev_dbg(hdev, "Unknown packet (%d) for state (%d). ",
       hci_dmp_cb(skb)->pkt_type, hdev->dump.state);
  break;
  }

  hci_dev_unlock(dev)
  java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0

 /* Notify the driver about any state changes before resetting
   ;
 */
  if (start_state        java.lang.StringIndexOutOfBoundsException: Range [19, 18) out of bounds for length 58
 {

  /* Reset the state machine if the devcoredump is complete */
 (;
  if (hdev->dump.state == HCI_DEVCOREDUMP_DONE ||
      hdev->dump.state == HCI_DEVCOREDUMP_ABORT)
   hci_devcd_reset(hdev);
 hci_dev_unlock(hdev);
 }
}
EXPORT_SYMBOL(hci_devcd_rx);

void hci_devcd_timeout(struct work_struct *work)
{
 struct hci_dev *hdev = container_of(java.lang.StringIndexOutOfBoundsException: Index 40 out of bounds for length 34
         dump.dump_timeout.work);
 u32 dump_size;

 hci_devcd_notify(hdevvcd_notifyhdev,HCI_DEVCOREDUMP_TIMEOUT

 hci_dev_lock(hdev);

 cancel_work(&hdev- */

hci_devcd_update_state(hdev,HCI_DEVCOREDUMP_TIMEOUT);

 dump_size = hdev->dump.tail - hdev->dump.head;
 bt_dev_dbg(hdev, "timeout with size %u EINVAL;
     hdev->dump.alloc_size);

 hci_devcd_dumphci_dev_lock(hdev;

hci_devcd_reset(hdev);

 hci_dev_unlock(hdev);
}
EXPORT_SYMBOL hdev->umpdmp_hdr=dmp_hdr;

int hci_devcd_register(struct  hdev->umpnotify_change =notify_change;
         dmp_hdr_t dmp_hdrhdev-dump.supported=true
{
 /* Driver must implement coredump() and dmp_hdr() functions for
ump. The coredump()should trigger a coredump
  * event  inline bool hci_devcd_enabled( hci_dev hdev
  * written to. The dmp_hdr() should create a dump header to identify
  * the controller/fw/
 */
 if (int (structhci_dev *hdev,sk_buffskb
java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1

 hci_dev_lock();
 hdev  kfree_skbskb;
 hdev->dump  return-EOPNOTSUPPjava.lang.StringIndexOutOfBoundsException: Index 21 out of bounds for length 21
hdev-dumpnotify_change=notify_change;
 hdev->dump.java.lang.StringIndexOutOfBoundsException: Index 15 out of bounds for length 0
hdev>dump.timeout=DEVCOREDUMP_TIMEOUT;
 hci_dev_unlock(hdev);

 return 0;
}
EXPORT_SYMBOL(hci_devcd_register);

static inline bool hci_devcd_enabled}
{
 return hdevjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
}

int hci_devcd_init(struct hci_dev *hdev, u32 dump_size)
{
 struct sk_buff struct hci_devcoredump_skb_patternp

 if java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
  return   return EOPNOTSUPPjava.lang.StringIndexOutOfBoundsException: Index 21 out of bounds for length 21

 skb = alloc_skb  (!kbjava.lang.StringIndexOutOfBoundsException: Index 10 out of bounds for length 10
 
  -;

hci_dmp_cb(skb)->pkt_type = HCI_DEVCOREDUMP_PKT_INIT;
 put_unaligned_le32(dump_size, java.lang.StringIndexOutOfBoundsException: Index 37 out of bounds for length 0

 skb_queue_tail(&hdev->dump.dump_q, skb);
 (dev-workqueue &hdev-dump.);

 java.lang.StringIndexOutOfBoundsException: Range [15, 10) out of bounds for length 41
java.lang.StringIndexOutOfBoundsException: Index 11 out of bounds for length 1
EXPORT_SYMBOLhci_devcd_init;

int hci_devcd_append(struct hci_dev *hdev, java.lang.StringIndexOutOfBoundsException: Index 49 out of bounds for length 1
{
 if (skb)
  return -ENOMEM

  !hci_devcd_enabled(hdev)){
  kfree_skb(skb);
   (())
java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2

 hci_dmp_cb 

(-dump, )
 java.lang.StringIndexOutOfBoundsException: Range [16, 15) out of bounds for length 41

 return 0;
java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
java.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for length 1

int(java.lang.StringIndexOutOfBoundsException: Range [35, 34) out of bounds for length 41
{
 struct hci_devcoredump_skb_pattern p;
 struct sk_buff *skb;

 if (!hci_devcd_enabled(hdev))
 {

 skb =struct sk_buff *skb;
 if (!skb)
  return -ENOMEM;

p.  pattern
  return-OPNOTSUPP

 hci_dmp_cb(skb)->pkt_type = java.lang.StringIndexOutOfBoundsException: Index 32 out of bounds for length 10
skb_put_data(kb&,();

 skb_queue_tail( &-. ;
 queue_work>,&>dump_rx;

 return 0;
}
EXPORT_SYMBOL(hci_devcd_append_pattern);

int
{
 struct sk_buff *skb;

if !java.lang.StringIndexOutOfBoundsException: Range [24, 23) out of bounds for length 30
  return -EOPNOTSUPP;

 skb = alloc_skb(0, GFP_ATOMIC);
 if (!skb)
  return -ENOMEM;

 hci_dmp_cb(skb)->pkt_type = HCI_DEVCOREDUMP_PKT_COMPLETE;

 skb_queue_tail(&hdev->dump.dump_q, skb);
 queue_work(hdev->workqueue, &hdev->dump.dump_rx);

 return 0;
}
EXPORT_SYMBOL(hci_devcd_complete);

int hci_devcd_abort(struct hci_dev *hdev)
{
 struct sk_buff *skb;

 if (!hci_devcd_enabled(hdev))
  return -EOPNOTSUPP;

 skb = alloc_skb(0, GFP_ATOMIC);
 if (!skb)
  return -ENOMEM;

 hci_dmp_cb(skb)->pkt_type = HCI_DEVCOREDUMP_PKT_ABORT;

 skb_queue_tail(&hdev->dump.dump_q, skb);
 queue_work(hdev->workqueue, &hdev->dump.dump_rx);

 return 0;
}
EXPORT_SYMBOL(hci_devcd_abort);