bluez/emulator/bthost.c
Andrzej Kaczmarek 1a4cb1a207 emulator/bthost: Add support to set auth_req for bthost
This patch makes possible to set Authentication_Requirements to be used
in io_capa_request_reply when replying for io_capa_request_evt.
2014-05-19 14:14:14 +03:00

2301 lines
51 KiB
C

/*
*
* BlueZ - Bluetooth protocol stack for Linux
*
* Copyright (C) 2011-2012 Intel Corporation
* Copyright (C) 2004-2010 Marcel Holtmann <marcel@holtmann.org>
*
*
* This library is free software; you can redistribute it and/or
* modify it under the terms of the GNU Lesser General Public
* License as published by the Free Software Foundation; either
* version 2.1 of the License, or (at your option) any later version.
*
* This library is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public
* License along with this library; if not, write to the Free Software
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
*
*/
#ifdef HAVE_CONFIG_H
#include <config.h>
#endif
#include <stdio.h>
#include <ctype.h>
#include <stdlib.h>
#include <string.h>
#include <endian.h>
#include <stdbool.h>
#include "bluetooth/bluetooth.h"
#include "src/shared/util.h"
#include "monitor/bt.h"
#include "monitor/rfcomm.h"
#include "bthost.h"
/* ACL handle and flags pack/unpack */
#define acl_handle_pack(h, f) (uint16_t)((h & 0x0fff)|(f << 12))
#define acl_handle(h) (h & 0x0fff)
#define acl_flags(h) (h >> 12)
/* RFCOMM setters */
#define RFCOMM_ADDR(cr, dlci) (((dlci & 0x3f) << 2) | (cr << 1) | 0x01)
#define RFCOMM_CTRL(type, pf) (((type & 0xef) | (pf << 4)))
#define RFCOMM_LEN8(len) (((len) << 1) | 1)
#define RFCOMM_LEN16(len) ((len) << 1)
#define RFCOMM_MCC_TYPE(cr, type) (((type << 2) | (cr << 1) | 0x01))
/* RFCOMM FCS calculation */
#define CRC(data) (rfcomm_crc_table[rfcomm_crc_table[0xff ^ data[0]] ^ data[1]])
static unsigned char rfcomm_crc_table[256] = {
0x00, 0x91, 0xe3, 0x72, 0x07, 0x96, 0xe4, 0x75,
0x0e, 0x9f, 0xed, 0x7c, 0x09, 0x98, 0xea, 0x7b,
0x1c, 0x8d, 0xff, 0x6e, 0x1b, 0x8a, 0xf8, 0x69,
0x12, 0x83, 0xf1, 0x60, 0x15, 0x84, 0xf6, 0x67,
0x38, 0xa9, 0xdb, 0x4a, 0x3f, 0xae, 0xdc, 0x4d,
0x36, 0xa7, 0xd5, 0x44, 0x31, 0xa0, 0xd2, 0x43,
0x24, 0xb5, 0xc7, 0x56, 0x23, 0xb2, 0xc0, 0x51,
0x2a, 0xbb, 0xc9, 0x58, 0x2d, 0xbc, 0xce, 0x5f,
0x70, 0xe1, 0x93, 0x02, 0x77, 0xe6, 0x94, 0x05,
0x7e, 0xef, 0x9d, 0x0c, 0x79, 0xe8, 0x9a, 0x0b,
0x6c, 0xfd, 0x8f, 0x1e, 0x6b, 0xfa, 0x88, 0x19,
0x62, 0xf3, 0x81, 0x10, 0x65, 0xf4, 0x86, 0x17,
0x48, 0xd9, 0xab, 0x3a, 0x4f, 0xde, 0xac, 0x3d,
0x46, 0xd7, 0xa5, 0x34, 0x41, 0xd0, 0xa2, 0x33,
0x54, 0xc5, 0xb7, 0x26, 0x53, 0xc2, 0xb0, 0x21,
0x5a, 0xcb, 0xb9, 0x28, 0x5d, 0xcc, 0xbe, 0x2f,
0xe0, 0x71, 0x03, 0x92, 0xe7, 0x76, 0x04, 0x95,
0xee, 0x7f, 0x0d, 0x9c, 0xe9, 0x78, 0x0a, 0x9b,
0xfc, 0x6d, 0x1f, 0x8e, 0xfb, 0x6a, 0x18, 0x89,
0xf2, 0x63, 0x11, 0x80, 0xf5, 0x64, 0x16, 0x87,
0xd8, 0x49, 0x3b, 0xaa, 0xdf, 0x4e, 0x3c, 0xad,
0xd6, 0x47, 0x35, 0xa4, 0xd1, 0x40, 0x32, 0xa3,
0xc4, 0x55, 0x27, 0xb6, 0xc3, 0x52, 0x20, 0xb1,
0xca, 0x5b, 0x29, 0xb8, 0xcd, 0x5c, 0x2e, 0xbf,
0x90, 0x01, 0x73, 0xe2, 0x97, 0x06, 0x74, 0xe5,
0x9e, 0x0f, 0x7d, 0xec, 0x99, 0x08, 0x7a, 0xeb,
0x8c, 0x1d, 0x6f, 0xfe, 0x8b, 0x1a, 0x68, 0xf9,
0x82, 0x13, 0x61, 0xf0, 0x85, 0x14, 0x66, 0xf7,
0xa8, 0x39, 0x4b, 0xda, 0xaf, 0x3e, 0x4c, 0xdd,
0xa6, 0x37, 0x45, 0xd4, 0xa1, 0x30, 0x42, 0xd3,
0xb4, 0x25, 0x57, 0xc6, 0xb3, 0x22, 0x50, 0xc1,
0xba, 0x2b, 0x59, 0xc8, 0xbd, 0x2c, 0x5e, 0xcf
};
static uint8_t rfcomm_fcs2(uint8_t *data)
{
return 0xff - rfcomm_crc_table[CRC(data) ^ data[2]];
}
static uint8_t rfcomm_fcs(uint8_t *data)
{
return 0xff - CRC(data);
}
struct cmd {
struct cmd *next;
struct cmd *prev;
uint8_t data[256 + sizeof(struct bt_hci_cmd_hdr)];
uint16_t len;
};
struct cmd_queue {
struct cmd *head;
struct cmd *tail;
};
struct cid_hook {
uint16_t cid;
bthost_cid_hook_func_t func;
void *user_data;
struct cid_hook *next;
};
struct rfcomm_chan_hook {
uint8_t channel;
bthost_rfcomm_chan_hook_func_t func;
void *user_data;
struct rfcomm_chan_hook *next;
};
struct btconn {
uint16_t handle;
uint8_t bdaddr[6];
uint8_t addr_type;
uint8_t encr_mode;
uint16_t next_cid;
struct l2conn *l2conns;
struct rcconn *rcconns;
struct cid_hook *cid_hooks;
struct rfcomm_chan_hook *rfcomm_chan_hooks;
struct btconn *next;
void *smp_data;
};
struct l2conn {
uint16_t scid;
uint16_t dcid;
uint16_t psm;
struct l2conn *next;
};
struct rcconn {
uint8_t channel;
uint16_t scid;
struct rcconn *next;
};
struct l2cap_pending_req {
uint8_t ident;
bthost_l2cap_rsp_cb cb;
void *user_data;
struct l2cap_pending_req *next;
};
struct l2cap_conn_cb_data {
uint16_t psm;
bthost_l2cap_connect_cb func;
void *user_data;
struct l2cap_conn_cb_data *next;
};
struct rfcomm_conn_cb_data {
uint8_t channel;
bthost_rfcomm_connect_cb func;
void *user_data;
struct rfcomm_conn_cb_data *next;
};
struct rfcomm_connection_data {
uint8_t channel;
struct btconn *conn;
bthost_rfcomm_connect_cb cb;
void *user_data;
};
struct bthost {
uint8_t bdaddr[6];
bthost_send_func send_handler;
void *send_data;
struct cmd_queue cmd_q;
uint8_t ncmd;
struct btconn *conns;
bthost_cmd_complete_cb cmd_complete_cb;
void *cmd_complete_data;
bthost_new_conn_cb new_conn_cb;
void *new_conn_data;
struct rfcomm_connection_data *rfcomm_conn_data;
struct l2cap_conn_cb_data *new_l2cap_conn_data;
struct rfcomm_conn_cb_data *new_rfcomm_conn_data;
struct l2cap_pending_req *l2reqs;
uint8_t pin[16];
uint8_t pin_len;
uint8_t io_capability;
uint8_t auth_req;
bool reject_user_confirm;
void *smp_data;
bool conn_init;
};
struct bthost *bthost_create(void)
{
struct bthost *bthost;
bthost = malloc(sizeof(*bthost));
if (!bthost)
return NULL;
memset(bthost, 0, sizeof(*bthost));
return bthost;
}
static void l2conn_free(struct l2conn *conn)
{
free(conn);
}
static void btconn_free(struct btconn *conn)
{
if (conn->smp_data)
smp_conn_del(conn->smp_data);
while (conn->l2conns) {
struct l2conn *l2conn = conn->l2conns;
conn->l2conns = l2conn->next;
l2conn_free(l2conn);
}
while (conn->cid_hooks) {
struct cid_hook *hook = conn->cid_hooks;
conn->cid_hooks = hook->next;
free(hook);
}
while (conn->rcconns) {
struct rcconn *rcconn = conn->rcconns;
conn->rcconns = rcconn->next;
free(rcconn);
}
while (conn->rfcomm_chan_hooks) {
struct rfcomm_chan_hook *hook = conn->rfcomm_chan_hooks;
conn->rfcomm_chan_hooks = hook->next;
free(hook);
}
free(conn);
}
static struct btconn *bthost_find_conn(struct bthost *bthost, uint16_t handle)
{
struct btconn *conn;
for (conn = bthost->conns; conn != NULL; conn = conn->next) {
if (conn->handle == handle)
return conn;
}
return NULL;
}
static struct btconn *bthost_find_conn_by_bdaddr(struct bthost *bthost,
const uint8_t *bdaddr)
{
struct btconn *conn;
for (conn = bthost->conns; conn != NULL; conn = conn->next) {
if (!memcmp(conn->bdaddr, bdaddr, 6))
return conn;
}
return NULL;
}
static struct l2conn *bthost_add_l2cap_conn(struct bthost *bthost,
struct btconn *conn,
uint16_t scid, uint16_t dcid,
uint16_t psm)
{
struct l2conn *l2conn;
l2conn = malloc(sizeof(*l2conn));
if (!l2conn)
return NULL;
memset(l2conn, 0, sizeof(*l2conn));
l2conn->psm = psm;
l2conn->scid = scid;
l2conn->dcid = dcid;
l2conn->next = conn->l2conns;
conn->l2conns = l2conn;
return l2conn;
}
static struct rcconn *bthost_add_rfcomm_conn(struct bthost *bthost,
struct btconn *conn,
struct l2conn *l2conn,
uint8_t channel)
{
struct rcconn *rcconn;
rcconn = malloc(sizeof(*rcconn));
if (!rcconn)
return NULL;
memset(rcconn, 0, sizeof(*rcconn));
rcconn->channel = channel;
rcconn->scid = l2conn->scid;
rcconn->next = conn->rcconns;
conn->rcconns = rcconn;
return rcconn;
}
static struct rcconn *btconn_find_rfcomm_conn_by_channel(struct btconn *conn,
uint8_t chan)
{
struct rcconn *rcconn;
for (rcconn = conn->rcconns; rcconn != NULL; rcconn = rcconn->next) {
if (rcconn->channel == chan)
return rcconn;
}
return NULL;
}
static struct l2conn *btconn_find_l2cap_conn_by_scid(struct btconn *conn,
uint16_t scid)
{
struct l2conn *l2conn;
for (l2conn = conn->l2conns; l2conn != NULL; l2conn = l2conn->next) {
if (l2conn->scid == scid)
return l2conn;
}
return NULL;
}
static struct l2cap_conn_cb_data *bthost_find_l2cap_cb_by_psm(
struct bthost *bthost, uint16_t psm)
{
struct l2cap_conn_cb_data *cb;
for (cb = bthost->new_l2cap_conn_data; cb != NULL; cb = cb->next) {
if (cb->psm == psm)
return cb;
}
return NULL;
}
static struct rfcomm_conn_cb_data *bthost_find_rfcomm_cb_by_channel(
struct bthost *bthost, uint8_t channel)
{
struct rfcomm_conn_cb_data *cb;
for (cb = bthost->new_rfcomm_conn_data; cb != NULL; cb = cb->next) {
if (cb->channel == channel)
return cb;
}
return NULL;
}
void bthost_destroy(struct bthost *bthost)
{
if (!bthost)
return;
while (bthost->cmd_q.tail) {
struct cmd *cmd = bthost->cmd_q.tail;
bthost->cmd_q.tail = cmd->prev;
free(cmd);
}
while (bthost->conns) {
struct btconn *conn = bthost->conns;
bthost->conns = conn->next;
btconn_free(conn);
}
while (bthost->l2reqs) {
struct l2cap_pending_req *req = bthost->l2reqs;
bthost->l2reqs = req->next;
req->cb(0, NULL, 0, req->user_data);
free(req);
}
while (bthost->new_l2cap_conn_data) {
struct l2cap_conn_cb_data *cb = bthost->new_l2cap_conn_data;
bthost->new_l2cap_conn_data = cb->next;
free(cb);
}
while (bthost->new_rfcomm_conn_data) {
struct rfcomm_conn_cb_data *cb = bthost->new_rfcomm_conn_data;
bthost->new_rfcomm_conn_data = cb->next;
free(cb);
}
if (bthost->rfcomm_conn_data)
free(bthost->rfcomm_conn_data);
free(bthost);
}
void bthost_set_send_handler(struct bthost *bthost, bthost_send_func handler,
void *user_data)
{
if (!bthost)
return;
bthost->send_handler = handler;
bthost->send_data = user_data;
}
static void queue_command(struct bthost *bthost, const void *data,
uint16_t len)
{
struct cmd_queue *cmd_q = &bthost->cmd_q;
struct cmd *cmd;
cmd = malloc(sizeof(*cmd));
if (!cmd)
return;
memset(cmd, 0, sizeof(*cmd));
memcpy(cmd->data, data, len);
cmd->len = len;
if (cmd_q->tail)
cmd_q->tail->next = cmd;
else
cmd_q->head = cmd;
cmd->prev = cmd_q->tail;
cmd_q->tail = cmd;
}
static void send_packet(struct bthost *bthost, const void *data, uint16_t len)
{
if (!bthost->send_handler)
return;
bthost->send_handler(data, len, bthost->send_data);
}
static void send_acl(struct bthost *bthost, uint16_t handle, uint16_t cid,
const void *data, uint16_t len)
{
struct bt_hci_acl_hdr *acl_hdr;
struct bt_l2cap_hdr *l2_hdr;
uint16_t pkt_len;
void *pkt_data;
pkt_len = 1 + sizeof(*acl_hdr) + sizeof(*l2_hdr) + len;
pkt_data = malloc(pkt_len);
if (!pkt_data)
return;
((uint8_t *) pkt_data)[0] = BT_H4_ACL_PKT;
acl_hdr = pkt_data + 1;
acl_hdr->handle = acl_handle_pack(handle, 0);
acl_hdr->dlen = cpu_to_le16(len + sizeof(*l2_hdr));
l2_hdr = pkt_data + 1 + sizeof(*acl_hdr);
l2_hdr->cid = cpu_to_le16(cid);
l2_hdr->len = cpu_to_le16(len);
if (len > 0)
memcpy(pkt_data + 1 + sizeof(*acl_hdr) + sizeof(*l2_hdr),
data, len);
send_packet(bthost, pkt_data, pkt_len);
free(pkt_data);
}
static uint8_t l2cap_sig_send(struct bthost *bthost, struct btconn *conn,
uint8_t code, uint8_t ident,
const void *data, uint16_t len)
{
static uint8_t next_ident = 1;
struct bt_l2cap_hdr_sig *hdr;
uint16_t pkt_len, cid;
void *pkt_data;
pkt_len = sizeof(*hdr) + len;
pkt_data = malloc(pkt_len);
if (!pkt_data)
return 0;
if (!ident) {
ident = next_ident++;
if (!ident)
ident = next_ident++;
}
hdr = pkt_data;
hdr->code = code;
hdr->ident = ident;
hdr->len = cpu_to_le16(len);
if (len > 0)
memcpy(pkt_data + sizeof(*hdr), data, len);
if (conn->addr_type == BDADDR_BREDR)
cid = 0x0001;
else
cid = 0x0005;
send_acl(bthost, conn->handle, cid, pkt_data, pkt_len);
free(pkt_data);
return ident;
}
void bthost_add_cid_hook(struct bthost *bthost, uint16_t handle, uint16_t cid,
bthost_cid_hook_func_t func, void *user_data)
{
struct cid_hook *hook;
struct btconn *conn;
conn = bthost_find_conn(bthost, handle);
if (!conn)
return;
hook = malloc(sizeof(*hook));
if (!hook)
return;
memset(hook, 0, sizeof(*hook));
hook->cid = cid;
hook->func = func;
hook->user_data = user_data;
hook->next = conn->cid_hooks;
conn->cid_hooks = hook;
}
void bthost_send_cid(struct bthost *bthost, uint16_t handle, uint16_t cid,
const void *data, uint16_t len)
{
struct btconn *conn;
conn = bthost_find_conn(bthost, handle);
if (!conn)
return;
send_acl(bthost, handle, cid, data, len);
}
bool bthost_l2cap_req(struct bthost *bthost, uint16_t handle, uint8_t code,
const void *data, uint16_t len,
bthost_l2cap_rsp_cb cb, void *user_data)
{
struct l2cap_pending_req *req;
struct btconn *conn;
uint8_t ident;
conn = bthost_find_conn(bthost, handle);
if (!conn)
return false;
if (code == BT_L2CAP_PDU_CONN_REQ &&
len == sizeof(struct bt_l2cap_pdu_conn_req)) {
const struct bt_l2cap_pdu_conn_req *req = data;
bthost_add_l2cap_conn(bthost, conn, le16_to_cpu(req->scid),
le16_to_cpu(req->scid),
le16_to_cpu(req->psm));
}
ident = l2cap_sig_send(bthost, conn, code, 0, data, len);
if (!ident)
return false;
if (!cb)
return true;
req = malloc(sizeof(*req));
if (!req)
return false;
memset(req, 0, sizeof(*req));
req->ident = ident;
req->cb = cb;
req->user_data = user_data;
req->next = bthost->l2reqs;
bthost->l2reqs = req;
return true;
}
static void send_command(struct bthost *bthost, uint16_t opcode,
const void *data, uint8_t len)
{
struct bt_hci_cmd_hdr *hdr;
uint16_t pkt_len;
void *pkt_data;
pkt_len = 1 + sizeof(*hdr) + len;
pkt_data = malloc(pkt_len);
if (!pkt_data)
return;
((uint8_t *) pkt_data)[0] = BT_H4_CMD_PKT;
hdr = pkt_data + 1;
hdr->opcode = cpu_to_le16(opcode);
hdr->plen = len;
if (len > 0)
memcpy(pkt_data + 1 + sizeof(*hdr), data, len);
if (bthost->ncmd) {
send_packet(bthost, pkt_data, pkt_len);
bthost->ncmd--;
} else {
queue_command(bthost, pkt_data, pkt_len);
}
free(pkt_data);
}
static void next_cmd(struct bthost *bthost)
{
struct cmd_queue *cmd_q = &bthost->cmd_q;
struct cmd *cmd = cmd_q->head;
struct cmd *next;
if (!cmd)
return;
next = cmd->next;
if (!bthost->ncmd)
return;
send_packet(bthost, cmd->data, cmd->len);
bthost->ncmd--;
if (next)
next->prev = NULL;
else
cmd_q->tail = NULL;
cmd_q->head = next;
free(cmd);
}
static void read_bd_addr_complete(struct bthost *bthost, const void *data,
uint8_t len)
{
const struct bt_hci_rsp_read_bd_addr *ev = data;
if (len < sizeof(*ev))
return;
if (ev->status)
return;
memcpy(bthost->bdaddr, ev->bdaddr, 6);
}
static void evt_cmd_complete(struct bthost *bthost, const void *data,
uint8_t len)
{
const struct bt_hci_evt_cmd_complete *ev = data;
const void *param;
uint16_t opcode;
if (len < sizeof(*ev))
return;
param = data + sizeof(*ev);
bthost->ncmd = ev->ncmd;
opcode = le16toh(ev->opcode);
switch (opcode) {
case BT_HCI_CMD_RESET:
break;
case BT_HCI_CMD_READ_BD_ADDR:
read_bd_addr_complete(bthost, param, len - sizeof(*ev));
break;
case BT_HCI_CMD_WRITE_SCAN_ENABLE:
break;
case BT_HCI_CMD_LE_SET_ADV_ENABLE:
break;
case BT_HCI_CMD_LE_SET_ADV_PARAMETERS:
break;
case BT_HCI_CMD_PIN_CODE_REQUEST_REPLY:
break;
case BT_HCI_CMD_PIN_CODE_REQUEST_NEG_REPLY:
break;
case BT_HCI_CMD_LINK_KEY_REQUEST_NEG_REPLY:
break;
case BT_HCI_CMD_WRITE_SIMPLE_PAIRING_MODE:
break;
case BT_HCI_CMD_IO_CAPABILITY_REQUEST_REPLY:
break;
case BT_HCI_CMD_USER_CONFIRM_REQUEST_REPLY:
break;
case BT_HCI_CMD_LE_LTK_REQ_REPLY:
break;
case BT_HCI_CMD_LE_LTK_REQ_NEG_REPLY:
break;
default:
printf("Unhandled cmd_complete opcode 0x%04x\n", opcode);
break;
}
if (bthost->cmd_complete_cb)
bthost->cmd_complete_cb(opcode, 0, param, len - sizeof(*ev),
bthost->cmd_complete_data);
next_cmd(bthost);
}
static void evt_cmd_status(struct bthost *bthost, const void *data,
uint8_t len)
{
const struct bt_hci_evt_cmd_status *ev = data;
uint16_t opcode;
if (len < sizeof(*ev))
return;
bthost->ncmd = ev->ncmd;
opcode = le16toh(ev->opcode);
if (ev->status && bthost->cmd_complete_cb)
bthost->cmd_complete_cb(opcode, ev->status, NULL, 0,
bthost->cmd_complete_data);
next_cmd(bthost);
}
static void evt_conn_request(struct bthost *bthost, const void *data,
uint8_t len)
{
const struct bt_hci_evt_conn_request *ev = data;
struct bt_hci_cmd_accept_conn_request cmd;
if (len < sizeof(*ev))
return;
memset(&cmd, 0, sizeof(cmd));
memcpy(cmd.bdaddr, ev->bdaddr, sizeof(ev->bdaddr));
send_command(bthost, BT_HCI_CMD_ACCEPT_CONN_REQUEST, &cmd,
sizeof(cmd));
}
static void init_conn(struct bthost *bthost, uint16_t handle,
const uint8_t *bdaddr, uint8_t addr_type)
{
struct btconn *conn;
const uint8_t *ia, *ra;
conn = malloc(sizeof(*conn));
if (!conn)
return;
memset(conn, 0, sizeof(*conn));
conn->handle = handle;
memcpy(conn->bdaddr, bdaddr, 6);
conn->addr_type = addr_type;
conn->next_cid = 0x0040;
conn->next = bthost->conns;
bthost->conns = conn;
if (bthost->conn_init) {
ia = bthost->bdaddr;
ra = conn->bdaddr;
} else {
ia = conn->bdaddr;
ra = bthost->bdaddr;
}
conn->smp_data = smp_conn_add(bthost->smp_data, handle, ia, ra,
bthost->conn_init);
if (bthost->new_conn_cb)
bthost->new_conn_cb(conn->handle, bthost->new_conn_data);
}
static void evt_conn_complete(struct bthost *bthost, const void *data,
uint8_t len)
{
const struct bt_hci_evt_conn_complete *ev = data;
if (len < sizeof(*ev))
return;
if (ev->status)
return;
init_conn(bthost, le16_to_cpu(ev->handle), ev->bdaddr, BDADDR_BREDR);
}
static void evt_disconn_complete(struct bthost *bthost, const void *data,
uint8_t len)
{
const struct bt_hci_evt_disconnect_complete *ev = data;
struct btconn **curr;
uint16_t handle;
if (len < sizeof(*ev))
return;
if (ev->status)
return;
handle = le16_to_cpu(ev->handle);
for (curr = &bthost->conns; *curr;) {
struct btconn *conn = *curr;
if (conn->handle == handle) {
*curr = conn->next;
btconn_free(conn);
} else {
curr = &conn->next;
}
}
}
static void evt_num_completed_packets(struct bthost *bthost, const void *data,
uint8_t len)
{
const struct bt_hci_evt_num_completed_packets *ev = data;
if (len < sizeof(*ev))
return;
}
static void evt_auth_complete(struct bthost *bthost, const void *data,
uint8_t len)
{
const struct bt_hci_evt_auth_complete *ev = data;
struct bt_hci_cmd_set_conn_encrypt cp;
if (len < sizeof(*ev))
return;
if (ev->status)
return;
cp.handle = ev->handle;
cp.encr_mode = 0x01;
send_command(bthost, BT_HCI_CMD_SET_CONN_ENCRYPT, &cp, sizeof(cp));
}
static void evt_pin_code_request(struct bthost *bthost, const void *data,
uint8_t len)
{
const struct bt_hci_evt_pin_code_request *ev = data;
if (len < sizeof(*ev))
return;
if (bthost->pin_len > 0) {
struct bt_hci_cmd_pin_code_request_reply cp;
memset(&cp, 0, sizeof(cp));
memcpy(cp.bdaddr, ev->bdaddr, 6);
cp.pin_len = bthost->pin_len;
memcpy(cp.pin_code, bthost->pin, bthost->pin_len);
send_command(bthost, BT_HCI_CMD_PIN_CODE_REQUEST_REPLY,
&cp, sizeof(cp));
} else {
struct bt_hci_cmd_pin_code_request_neg_reply cp;
memcpy(cp.bdaddr, ev->bdaddr, 6);
send_command(bthost, BT_HCI_CMD_PIN_CODE_REQUEST_NEG_REPLY,
&cp, sizeof(cp));
}
}
static void evt_link_key_request(struct bthost *bthost, const void *data,
uint8_t len)
{
const struct bt_hci_evt_link_key_request *ev = data;
struct bt_hci_cmd_link_key_request_neg_reply cp;
if (len < sizeof(*ev))
return;
memset(&cp, 0, sizeof(cp));
memcpy(cp.bdaddr, ev->bdaddr, 6);
send_command(bthost, BT_HCI_CMD_LINK_KEY_REQUEST_NEG_REPLY,
&cp, sizeof(cp));
}
static void evt_link_key_notify(struct bthost *bthost, const void *data,
uint8_t len)
{
const struct bt_hci_evt_link_key_notify *ev = data;
if (len < sizeof(*ev))
return;
}
static void evt_encrypt_change(struct bthost *bthost, const void *data,
uint8_t len)
{
const struct bt_hci_evt_encrypt_change *ev = data;
struct btconn *conn;
uint16_t handle;
if (len < sizeof(*ev))
return;
handle = acl_handle(ev->handle);
conn = bthost_find_conn(bthost, handle);
if (!conn)
return;
conn->encr_mode = ev->encr_mode;
}
static void evt_io_cap_response(struct bthost *bthost, const void *data,
uint8_t len)
{
const struct bt_hci_evt_io_capability_response *ev = data;
struct btconn *conn;
if (len < sizeof(*ev))
return;
conn = bthost_find_conn_by_bdaddr(bthost, ev->bdaddr);
if (!conn)
return;
}
static void evt_io_cap_request(struct bthost *bthost, const void *data,
uint8_t len)
{
const struct bt_hci_evt_io_capability_request *ev = data;
struct bt_hci_cmd_io_capability_request_reply cp;
struct btconn *conn;
if (len < sizeof(*ev))
return;
conn = bthost_find_conn_by_bdaddr(bthost, ev->bdaddr);
if (!conn)
return;
memcpy(cp.bdaddr, ev->bdaddr, 6);
cp.capability = bthost->io_capability;
cp.oob_data = 0x00;
cp.authentication = bthost->auth_req;
send_command(bthost, BT_HCI_CMD_IO_CAPABILITY_REQUEST_REPLY,
&cp, sizeof(cp));
}
static void evt_user_confirm_request(struct bthost *bthost, const void *data,
uint8_t len)
{
const struct bt_hci_evt_user_confirm_request *ev = data;
struct btconn *conn;
if (len < sizeof(*ev))
return;
conn = bthost_find_conn_by_bdaddr(bthost, ev->bdaddr);
if (!conn)
return;
if (bthost->reject_user_confirm) {
send_command(bthost, BT_HCI_CMD_USER_CONFIRM_REQUEST_NEG_REPLY,
ev->bdaddr, 6);
return;
}
send_command(bthost, BT_HCI_CMD_USER_CONFIRM_REQUEST_REPLY,
ev->bdaddr, 6);
}
static void evt_simple_pairing_complete(struct bthost *bthost, const void *data,
uint8_t len)
{
const struct bt_hci_evt_simple_pairing_complete *ev = data;
if (len < sizeof(*ev))
return;
}
static void evt_le_conn_complete(struct bthost *bthost, const void *data,
uint8_t len)
{
const struct bt_hci_evt_le_conn_complete *ev = data;
uint8_t addr_type;
if (len < sizeof(*ev))
return;
if (ev->status)
return;
if (ev->peer_addr_type == 0x00)
addr_type = BDADDR_LE_PUBLIC;
else
addr_type = BDADDR_LE_RANDOM;
init_conn(bthost, le16_to_cpu(ev->handle), ev->peer_addr, addr_type);
}
static void evt_le_ltk_request(struct bthost *bthost, const void *data,
uint8_t len)
{
const struct bt_hci_evt_le_long_term_key_request *ev = data;
struct bt_hci_cmd_le_ltk_req_reply cp;
struct bt_hci_cmd_le_ltk_req_neg_reply *neg_cp = (void *) &cp;
uint16_t handle, ediv;
uint64_t rand;
struct btconn *conn;
int err;
if (len < sizeof(*ev))
return;
handle = acl_handle(ev->handle);
conn = bthost_find_conn(bthost, handle);
if (!conn)
return;
rand = le64_to_cpu(ev->rand);
ediv = le16_to_cpu(ev->ediv);
cp.handle = ev->handle;
err = smp_get_ltk(conn->smp_data, rand, ediv, cp.ltk);
if (err < 0)
send_command(bthost, BT_HCI_CMD_LE_LTK_REQ_NEG_REPLY,
neg_cp, sizeof(*neg_cp));
else
send_command(bthost, BT_HCI_CMD_LE_LTK_REQ_REPLY, &cp,
sizeof(cp));
}
static void evt_le_meta_event(struct bthost *bthost, const void *data,
uint8_t len)
{
const uint8_t *event = data;
const void *evt_data = data + 1;
if (len < 1)
return;
switch (*event) {
case BT_HCI_EVT_LE_CONN_COMPLETE:
evt_le_conn_complete(bthost, evt_data, len - 1);
break;
case BT_HCI_EVT_LE_LONG_TERM_KEY_REQUEST:
evt_le_ltk_request(bthost, evt_data, len - 1);
break;
default:
printf("Unsupported LE Meta event 0x%2.2x\n", *event);
break;
}
}
static void process_evt(struct bthost *bthost, const void *data, uint16_t len)
{
const struct bt_hci_evt_hdr *hdr = data;
const void *param;
if (len < sizeof(*hdr))
return;
if (sizeof(*hdr) + hdr->plen != len)
return;
param = data + sizeof(*hdr);
switch (hdr->evt) {
case BT_HCI_EVT_CMD_COMPLETE:
evt_cmd_complete(bthost, param, hdr->plen);
break;
case BT_HCI_EVT_CMD_STATUS:
evt_cmd_status(bthost, param, hdr->plen);
break;
case BT_HCI_EVT_CONN_REQUEST:
evt_conn_request(bthost, param, hdr->plen);
break;
case BT_HCI_EVT_CONN_COMPLETE:
evt_conn_complete(bthost, param, hdr->plen);
break;
case BT_HCI_EVT_DISCONNECT_COMPLETE:
evt_disconn_complete(bthost, param, hdr->plen);
break;
case BT_HCI_EVT_NUM_COMPLETED_PACKETS:
evt_num_completed_packets(bthost, param, hdr->plen);
break;
case BT_HCI_EVT_AUTH_COMPLETE:
evt_auth_complete(bthost, param, hdr->plen);
break;
case BT_HCI_EVT_PIN_CODE_REQUEST:
evt_pin_code_request(bthost, param, hdr->plen);
break;
case BT_HCI_EVT_LINK_KEY_REQUEST:
evt_link_key_request(bthost, param, hdr->plen);
break;
case BT_HCI_EVT_LINK_KEY_NOTIFY:
evt_link_key_notify(bthost, param, hdr->plen);
break;
case BT_HCI_EVT_ENCRYPT_CHANGE:
evt_encrypt_change(bthost, param, hdr->plen);
break;
case BT_HCI_EVT_IO_CAPABILITY_RESPONSE:
evt_io_cap_response(bthost, param, hdr->plen);
break;
case BT_HCI_EVT_IO_CAPABILITY_REQUEST:
evt_io_cap_request(bthost, param, hdr->plen);
break;
case BT_HCI_EVT_USER_CONFIRM_REQUEST:
evt_user_confirm_request(bthost, param, hdr->plen);
break;
case BT_HCI_EVT_SIMPLE_PAIRING_COMPLETE:
evt_simple_pairing_complete(bthost, param, hdr->plen);
break;
case BT_HCI_EVT_LE_META_EVENT:
evt_le_meta_event(bthost, param, hdr->plen);
break;
default:
printf("Unsupported event 0x%2.2x\n", hdr->evt);
break;
}
}
static bool l2cap_cmd_rej(struct bthost *bthost, struct btconn *conn,
uint8_t ident, const void *data, uint16_t len)
{
const struct bt_l2cap_pdu_cmd_reject *rsp = data;
if (len < sizeof(*rsp))
return false;
return true;
}
static bool l2cap_conn_req(struct bthost *bthost, struct btconn *conn,
uint8_t ident, const void *data, uint16_t len)
{
const struct bt_l2cap_pdu_conn_req *req = data;
struct l2cap_conn_cb_data *cb_data;
struct bt_l2cap_pdu_conn_rsp rsp;
uint16_t psm;
if (len < sizeof(*req))
return false;
psm = le16_to_cpu(req->psm);
memset(&rsp, 0, sizeof(rsp));
rsp.scid = req->scid;
cb_data = bthost_find_l2cap_cb_by_psm(bthost, psm);
if (cb_data)
rsp.dcid = cpu_to_le16(conn->next_cid++);
else
rsp.result = cpu_to_le16(0x0002); /* PSM Not Supported */
l2cap_sig_send(bthost, conn, BT_L2CAP_PDU_CONN_RSP, ident, &rsp,
sizeof(rsp));
if (!rsp.result) {
struct bt_l2cap_pdu_config_req conf_req;
struct l2conn *l2conn;
l2conn = bthost_add_l2cap_conn(bthost, conn,
le16_to_cpu(rsp.dcid),
le16_to_cpu(rsp.scid),
le16_to_cpu(psm));
memset(&conf_req, 0, sizeof(conf_req));
conf_req.dcid = rsp.scid;
l2cap_sig_send(bthost, conn, BT_L2CAP_PDU_CONFIG_REQ, 0,
&conf_req, sizeof(conf_req));
if (cb_data && l2conn->psm == cb_data->psm && cb_data->func)
cb_data->func(conn->handle, l2conn->dcid,
cb_data->user_data);
}
return true;
}
static void rfcomm_sabm_send(struct bthost *bthost, struct btconn *conn,
struct l2conn *l2conn, uint8_t cr, uint8_t dlci)
{
struct rfcomm_cmd cmd;
cmd.address = RFCOMM_ADDR(cr, dlci);
cmd.control = RFCOMM_CTRL(RFCOMM_SABM, 1);
cmd.length = RFCOMM_LEN8(0);
cmd.fcs = rfcomm_fcs2((uint8_t *)&cmd);
send_acl(bthost, conn->handle, l2conn->dcid, &cmd, sizeof(cmd));
}
static bool l2cap_conn_rsp(struct bthost *bthost, struct btconn *conn,
uint8_t ident, const void *data, uint16_t len)
{
const struct bt_l2cap_pdu_conn_rsp *rsp = data;
struct l2conn *l2conn;
if (len < sizeof(*rsp))
return false;
l2conn = btconn_find_l2cap_conn_by_scid(conn, le16_to_cpu(rsp->scid));
if (l2conn)
l2conn->dcid = le16_to_cpu(rsp->dcid);
else
return false;
if (le16_to_cpu(rsp->result) == 0x0001) {
struct bt_l2cap_pdu_config_req req;
memset(&req, 0, sizeof(req));
req.dcid = rsp->dcid;
l2cap_sig_send(bthost, conn, BT_L2CAP_PDU_CONFIG_REQ, 0,
&req, sizeof(req));
} else if (l2conn->psm == 0x0003 && !rsp->result && !rsp->status &&
bthost->rfcomm_conn_data) {
rfcomm_sabm_send(bthost, conn, l2conn, 1, 0);
}
return true;
}
static bool l2cap_config_req(struct bthost *bthost, struct btconn *conn,
uint8_t ident, const void *data, uint16_t len)
{
const struct bt_l2cap_pdu_config_req *req = data;
struct bt_l2cap_pdu_config_rsp rsp;
struct l2conn *l2conn;
uint16_t dcid;
if (len < sizeof(*req))
return false;
dcid = le16_to_cpu(req->dcid);
l2conn = btconn_find_l2cap_conn_by_scid(conn, dcid);
if (!l2conn)
return false;
memset(&rsp, 0, sizeof(rsp));
rsp.scid = cpu_to_le16(l2conn->dcid);
rsp.flags = req->flags;
l2cap_sig_send(bthost, conn, BT_L2CAP_PDU_CONFIG_RSP, ident, &rsp,
sizeof(rsp));
return true;
}
static bool l2cap_config_rsp(struct bthost *bthost, struct btconn *conn,
uint8_t ident, const void *data, uint16_t len)
{
const struct bt_l2cap_pdu_config_rsp *rsp = data;
if (len < sizeof(*rsp))
return false;
return true;
}
static bool l2cap_disconn_req(struct bthost *bthost, struct btconn *conn,
uint8_t ident, const void *data, uint16_t len)
{
const struct bt_l2cap_pdu_disconn_req *req = data;
struct bt_l2cap_pdu_disconn_rsp rsp;
if (len < sizeof(*req))
return false;
memset(&rsp, 0, sizeof(rsp));
rsp.dcid = req->dcid;
rsp.scid = req->scid;
l2cap_sig_send(bthost, conn, BT_L2CAP_PDU_DISCONN_RSP, ident, &rsp,
sizeof(rsp));
return true;
}
static bool l2cap_info_req(struct bthost *bthost, struct btconn *conn,
uint8_t ident, const void *data, uint16_t len)
{
const struct bt_l2cap_pdu_info_req *req = data;
struct bt_l2cap_pdu_info_rsp rsp;
if (len < sizeof(*req))
return false;
rsp.type = req->type;
rsp.result = cpu_to_le16(0x0001); /* Not Supported */
l2cap_sig_send(bthost, conn, BT_L2CAP_PDU_INFO_RSP, ident, &rsp,
sizeof(rsp));
return true;
}
static void handle_pending_l2reqs(struct bthost *bthost, struct btconn *conn,
uint8_t ident, uint8_t code,
const void *data, uint16_t len)
{
struct l2cap_pending_req **curr;
for (curr = &bthost->l2reqs; *curr != NULL;) {
struct l2cap_pending_req *req = *curr;
if (req->ident != ident) {
curr = &req->next;
continue;
}
*curr = req->next;
req->cb(code, data, len, req->user_data);
free(req);
}
}
static void l2cap_sig(struct bthost *bthost, struct btconn *conn,
const void *data, uint16_t len)
{
const struct bt_l2cap_hdr_sig *hdr = data;
struct bt_l2cap_pdu_cmd_reject rej;
uint16_t hdr_len;
bool ret;
if (len < sizeof(*hdr))
goto reject;
hdr_len = le16_to_cpu(hdr->len);
if (sizeof(*hdr) + hdr_len != len)
goto reject;
switch (hdr->code) {
case BT_L2CAP_PDU_CMD_REJECT:
ret = l2cap_cmd_rej(bthost, conn, hdr->ident,
data + sizeof(*hdr), hdr_len);
break;
case BT_L2CAP_PDU_CONN_REQ:
ret = l2cap_conn_req(bthost, conn, hdr->ident,
data + sizeof(*hdr), hdr_len);
break;
case BT_L2CAP_PDU_CONN_RSP:
ret = l2cap_conn_rsp(bthost, conn, hdr->ident,
data + sizeof(*hdr), hdr_len);
break;
case BT_L2CAP_PDU_CONFIG_REQ:
ret = l2cap_config_req(bthost, conn, hdr->ident,
data + sizeof(*hdr), hdr_len);
break;
case BT_L2CAP_PDU_CONFIG_RSP:
ret = l2cap_config_rsp(bthost, conn, hdr->ident,
data + sizeof(*hdr), hdr_len);
break;
case BT_L2CAP_PDU_DISCONN_REQ:
ret = l2cap_disconn_req(bthost, conn, hdr->ident,
data + sizeof(*hdr), hdr_len);
break;
case BT_L2CAP_PDU_INFO_REQ:
ret = l2cap_info_req(bthost, conn, hdr->ident,
data + sizeof(*hdr), hdr_len);
break;
default:
printf("Unknown L2CAP code 0x%02x\n", hdr->code);
ret = false;
}
handle_pending_l2reqs(bthost, conn, hdr->ident, hdr->code,
data + sizeof(*hdr), hdr_len);
if (ret)
return;
reject:
memset(&rej, 0, sizeof(rej));
l2cap_sig_send(bthost, conn, BT_L2CAP_PDU_CMD_REJECT, 0,
&rej, sizeof(rej));
}
static bool l2cap_conn_param_req(struct bthost *bthost, struct btconn *conn,
uint8_t ident, const void *data, uint16_t len)
{
const struct bt_l2cap_pdu_conn_param_req *req = data;
struct bt_l2cap_pdu_conn_param_rsp rsp;
struct bt_hci_cmd_le_conn_update hci_cmd;
if (len < sizeof(*req))
return false;
memset(&hci_cmd, 0, sizeof(hci_cmd));
hci_cmd.handle = cpu_to_le16(conn->handle);
hci_cmd.min_interval = req->min_interval;
hci_cmd.max_interval = req->max_interval;
hci_cmd.latency = req->latency;
hci_cmd.supv_timeout = req->timeout;
hci_cmd.min_length = cpu_to_le16(0x0001);
hci_cmd.max_length = cpu_to_le16(0x0001);
send_command(bthost, BT_HCI_CMD_LE_CONN_UPDATE,
&hci_cmd, sizeof(hci_cmd));
memset(&rsp, 0, sizeof(rsp));
l2cap_sig_send(bthost, conn, BT_L2CAP_PDU_CONN_PARAM_RSP, ident,
&rsp, sizeof(rsp));
return true;
}
static bool l2cap_conn_param_rsp(struct bthost *bthost, struct btconn *conn,
uint8_t ident, const void *data, uint16_t len)
{
const struct bt_l2cap_pdu_conn_param_req *rsp = data;
if (len < sizeof(*rsp))
return false;
return true;
}
static bool l2cap_le_conn_req(struct bthost *bthost, struct btconn *conn,
uint8_t ident, const void *data, uint16_t len)
{
const struct bt_l2cap_pdu_le_conn_req *req = data;
struct bt_l2cap_pdu_le_conn_rsp rsp;
uint16_t psm;
if (len < sizeof(*req))
return false;
psm = le16_to_cpu(req->psm);
memset(&rsp, 0, sizeof(rsp));
rsp.mtu = 23;
rsp.mps = 23;
rsp.credits = 1;
if (bthost_find_l2cap_cb_by_psm(bthost, psm))
rsp.dcid = cpu_to_le16(conn->next_cid++);
else
rsp.result = cpu_to_le16(0x0002); /* PSM Not Supported */
l2cap_sig_send(bthost, conn, BT_L2CAP_PDU_LE_CONN_RSP, ident, &rsp,
sizeof(rsp));
return true;
}
static bool l2cap_le_conn_rsp(struct bthost *bthost, struct btconn *conn,
uint8_t ident, const void *data, uint16_t len)
{
const struct bt_l2cap_pdu_le_conn_rsp *rsp = data;
if (len < sizeof(*rsp))
return false;
/* TODO add L2CAP connection before with proper PSM */
bthost_add_l2cap_conn(bthost, conn, 0, le16_to_cpu(rsp->dcid), 0);
return true;
}
static void l2cap_le_sig(struct bthost *bthost, struct btconn *conn,
const void *data, uint16_t len)
{
const struct bt_l2cap_hdr_sig *hdr = data;
struct bt_l2cap_pdu_cmd_reject rej;
uint16_t hdr_len;
bool ret;
if (len < sizeof(*hdr))
goto reject;
hdr_len = le16_to_cpu(hdr->len);
if (sizeof(*hdr) + hdr_len != len)
goto reject;
switch (hdr->code) {
case BT_L2CAP_PDU_CMD_REJECT:
ret = l2cap_cmd_rej(bthost, conn, hdr->ident,
data + sizeof(*hdr), hdr_len);
break;
case BT_L2CAP_PDU_DISCONN_REQ:
ret = l2cap_disconn_req(bthost, conn, hdr->ident,
data + sizeof(*hdr), hdr_len);
break;
case BT_L2CAP_PDU_CONN_PARAM_REQ:
ret = l2cap_conn_param_req(bthost, conn, hdr->ident,
data + sizeof(*hdr), hdr_len);
break;
case BT_L2CAP_PDU_CONN_PARAM_RSP:
ret = l2cap_conn_param_rsp(bthost, conn, hdr->ident,
data + sizeof(*hdr), hdr_len);
break;
case BT_L2CAP_PDU_LE_CONN_REQ:
ret = l2cap_le_conn_req(bthost, conn, hdr->ident,
data + sizeof(*hdr), hdr_len);
break;
case BT_L2CAP_PDU_LE_CONN_RSP:
ret = l2cap_le_conn_rsp(bthost, conn, hdr->ident,
data + sizeof(*hdr), hdr_len);
break;
default:
printf("Unknown L2CAP code 0x%02x\n", hdr->code);
ret = false;
}
handle_pending_l2reqs(bthost, conn, hdr->ident, hdr->code,
data + sizeof(*hdr), hdr_len);
if (ret)
return;
reject:
memset(&rej, 0, sizeof(rej));
l2cap_sig_send(bthost, conn, BT_L2CAP_PDU_CMD_REJECT, 0,
&rej, sizeof(rej));
}
static struct cid_hook *find_cid_hook(struct btconn *conn, uint16_t cid)
{
struct cid_hook *hook;
for (hook = conn->cid_hooks; hook != NULL; hook = hook->next) {
if (hook->cid == cid)
return hook;
}
return NULL;
}
static struct rfcomm_chan_hook *find_rfcomm_chan_hook(struct btconn *conn,
uint8_t channel)
{
struct rfcomm_chan_hook *hook;
for (hook = conn->rfcomm_chan_hooks; hook != NULL; hook = hook->next)
if (hook->channel == channel)
return hook;
return NULL;
}
static void rfcomm_ua_send(struct bthost *bthost, struct btconn *conn,
struct l2conn *l2conn, uint8_t cr, uint8_t dlci)
{
struct rfcomm_cmd cmd;
cmd.address = RFCOMM_ADDR(cr, dlci);
cmd.control = RFCOMM_CTRL(RFCOMM_UA, 1);
cmd.length = RFCOMM_LEN8(0);
cmd.fcs = rfcomm_fcs2((uint8_t *)&cmd);
send_acl(bthost, conn->handle, l2conn->dcid, &cmd, sizeof(cmd));
}
static void rfcomm_dm_send(struct bthost *bthost, struct btconn *conn,
struct l2conn *l2conn, uint8_t cr, uint8_t dlci)
{
struct rfcomm_cmd cmd;
cmd.address = RFCOMM_ADDR(cr, dlci);
cmd.control = RFCOMM_CTRL(RFCOMM_DM, 1);
cmd.length = RFCOMM_LEN8(0);
cmd.fcs = rfcomm_fcs2((uint8_t *)&cmd);
send_acl(bthost, conn->handle, l2conn->dcid, &cmd, sizeof(cmd));
}
static void rfcomm_sabm_recv(struct bthost *bthost, struct btconn *conn,
struct l2conn *l2conn, const void *data,
uint16_t len)
{
const struct rfcomm_cmd *hdr = data;
uint8_t dlci;
struct rfcomm_conn_cb_data *cb;
uint8_t chan;
if (len < sizeof(*hdr))
return;
chan = RFCOMM_GET_CHANNEL(hdr->address);
dlci = RFCOMM_GET_DLCI(hdr->address);
cb = bthost_find_rfcomm_cb_by_channel(bthost, chan);
if (!dlci || cb) {
bthost_add_rfcomm_conn(bthost, conn, l2conn, chan);
rfcomm_ua_send(bthost, conn, l2conn, 1, dlci);
if (cb && cb->func)
cb->func(conn->handle, l2conn->scid, cb->user_data,
true);
} else {
rfcomm_dm_send(bthost, conn, l2conn, 1, dlci);
}
}
static void rfcomm_disc_recv(struct bthost *bthost, struct btconn *conn,
struct l2conn *l2conn, const void *data,
uint16_t len)
{
const struct rfcomm_cmd *hdr = data;
uint8_t dlci;
if (len < sizeof(*hdr))
return;
dlci = RFCOMM_GET_DLCI(hdr->address);
rfcomm_ua_send(bthost, conn, l2conn, 0, dlci);
}
static void rfcomm_ua_recv(struct bthost *bthost, struct btconn *conn,
struct l2conn *l2conn, const void *data,
uint16_t len)
{
const struct rfcomm_cmd *ua_hdr = data;
uint8_t channel;
struct rfcomm_connection_data *conn_data = bthost->rfcomm_conn_data;
uint8_t type;
uint8_t buf[14];
struct rfcomm_hdr *hdr;
struct rfcomm_mcc *mcc;
struct rfcomm_pn *pn_cmd;
if (len < sizeof(*ua_hdr))
return;
channel = RFCOMM_GET_CHANNEL(ua_hdr->address);
type = RFCOMM_GET_TYPE(ua_hdr->control);
if (channel && conn_data && conn_data->channel == channel) {
bthost_add_rfcomm_conn(bthost, conn, l2conn, channel);
if (conn_data->cb)
conn_data->cb(conn->handle, l2conn->scid,
conn_data->user_data, true);
free(bthost->rfcomm_conn_data);
bthost->rfcomm_conn_data = NULL;
return;
}
if (!conn_data || !RFCOMM_TEST_CR(type))
return;
bthost_add_rfcomm_conn(bthost, conn, l2conn, channel);
memset(buf, 0, sizeof(buf));
hdr = (struct rfcomm_hdr *) buf;
mcc = (struct rfcomm_mcc *) (buf + sizeof(*hdr));
pn_cmd = (struct rfcomm_pn *) (buf + sizeof(*hdr) + sizeof(*mcc));
hdr->address = RFCOMM_ADDR(1, 0);
hdr->control = RFCOMM_CTRL(RFCOMM_UIH, 0);
hdr->length = RFCOMM_LEN8(sizeof(*mcc) + sizeof(*pn_cmd));
mcc->type = RFCOMM_MCC_TYPE(1, RFCOMM_PN);
mcc->length = RFCOMM_LEN8(sizeof(*pn_cmd));
pn_cmd->dlci = conn_data->channel * 2;
pn_cmd->priority = 7;
pn_cmd->ack_timer = 0;
pn_cmd->max_retrans = 0;
pn_cmd->mtu = 667;
pn_cmd->credits = 7;
buf[sizeof(*hdr) + sizeof(*mcc) + sizeof(*pn_cmd)] = rfcomm_fcs(buf);
send_acl(bthost, conn->handle, l2conn->dcid, buf, sizeof(buf));
}
static void rfcomm_dm_recv(struct bthost *bthost, struct btconn *conn,
struct l2conn *l2conn, const void *data,
uint16_t len)
{
const struct rfcomm_cmd *hdr = data;
uint8_t channel;
struct rfcomm_connection_data *conn_data = bthost->rfcomm_conn_data;
if (len < sizeof(*hdr))
return;
channel = RFCOMM_GET_CHANNEL(hdr->address);
if (conn_data && conn_data->channel == channel) {
if (conn_data->cb)
conn_data->cb(conn->handle, l2conn->scid,
conn_data->user_data, false);
free(bthost->rfcomm_conn_data);
bthost->rfcomm_conn_data = NULL;
}
}
static void rfcomm_msc_recv(struct bthost *bthost, struct btconn *conn,
struct l2conn *l2conn, uint8_t cr,
const struct rfcomm_msc *msc)
{
uint8_t buf[8];
struct rfcomm_hdr *hdr = (struct rfcomm_hdr *) buf;
struct rfcomm_mcc *mcc = (struct rfcomm_mcc *) (buf + sizeof(*hdr));
struct rfcomm_msc *msc_cmd = (struct rfcomm_msc *) (buf +
sizeof(*hdr) +
sizeof(*mcc));
hdr->address = RFCOMM_ADDR(0, 0);
hdr->control = RFCOMM_CTRL(RFCOMM_UIH, 0);
hdr->length = RFCOMM_LEN8(sizeof(*mcc) + sizeof(*msc));
mcc->type = RFCOMM_MCC_TYPE(cr, RFCOMM_MSC);
mcc->length = RFCOMM_LEN8(sizeof(*msc));
msc_cmd->dlci = msc->dlci;
msc_cmd->v24_sig = msc->v24_sig;
buf[sizeof(*hdr) + sizeof(*mcc) + sizeof(*msc_cmd)] = rfcomm_fcs(buf);
send_acl(bthost, conn->handle, l2conn->dcid, buf, sizeof(buf));
}
static void rfcomm_pn_recv(struct bthost *bthost, struct btconn *conn,
struct l2conn *l2conn, uint8_t cr,
const struct rfcomm_pn *pn)
{
uint8_t buf[14];
struct rfcomm_hdr *hdr;
struct rfcomm_mcc *mcc;
struct rfcomm_pn *pn_cmd;
if (!cr) {
rfcomm_sabm_send(bthost, conn, l2conn, 1,
bthost->rfcomm_conn_data->channel * 2);
return;
}
hdr = (struct rfcomm_hdr *) buf;
mcc = (struct rfcomm_mcc *) (buf + sizeof(*hdr));
pn_cmd = (struct rfcomm_pn *) (buf + sizeof(*hdr) + sizeof(*mcc));
memset(buf, 0, sizeof(buf));
hdr->address = RFCOMM_ADDR(1, 0);
hdr->control = RFCOMM_CTRL(RFCOMM_UIH, 0);
hdr->length = RFCOMM_LEN8(sizeof(*mcc) + sizeof(*pn_cmd));
mcc->type = RFCOMM_MCC_TYPE(0, RFCOMM_PN);
mcc->length = RFCOMM_LEN8(sizeof(*pn_cmd));
pn_cmd->dlci = pn->dlci;
pn_cmd->priority = pn->priority;
pn_cmd->ack_timer = pn->ack_timer;
pn_cmd->max_retrans = pn->max_retrans;
pn_cmd->mtu = pn->mtu;
pn_cmd->credits = pn->credits;
buf[sizeof(*hdr) + sizeof(*mcc) + sizeof(*pn_cmd)] = rfcomm_fcs(buf);
send_acl(bthost, conn->handle, l2conn->dcid, buf, sizeof(buf));
}
static void rfcomm_mcc_recv(struct bthost *bthost, struct btconn *conn,
struct l2conn *l2conn, const void *data, uint16_t len)
{
const struct rfcomm_mcc *mcc = data;
const struct rfcomm_msc *msc;
const struct rfcomm_pn *pn;
if (len < sizeof(*mcc))
return;
switch (RFCOMM_GET_MCC_TYPE(mcc->type)) {
case RFCOMM_MSC:
if (len - sizeof(*mcc) < sizeof(*msc))
break;
msc = data + sizeof(*mcc);
rfcomm_msc_recv(bthost, conn, l2conn,
RFCOMM_TEST_CR(mcc->type) / 2, msc);
break;
case RFCOMM_PN:
if (len - sizeof(*mcc) < sizeof(*pn))
break;
pn = data + sizeof(*mcc);
rfcomm_pn_recv(bthost, conn, l2conn,
RFCOMM_TEST_CR(mcc->type) / 2, pn);
break;
default:
break;
}
}
static void rfcomm_uih_recv(struct bthost *bthost, struct btconn *conn,
struct l2conn *l2conn, const void *data,
uint16_t len)
{
const struct rfcomm_hdr *hdr = data;
uint16_t hdr_len;
const void *p;
if (len < sizeof(*hdr))
return;
if (RFCOMM_TEST_EA(hdr->length))
hdr_len = sizeof(*hdr);
else
hdr_len = sizeof(*hdr) + sizeof(uint8_t);
if (len < hdr_len)
return;
p = data + hdr_len;
if (RFCOMM_GET_DLCI(hdr->address)) {
struct rfcomm_chan_hook *hook;
hook = find_rfcomm_chan_hook(conn,
RFCOMM_GET_CHANNEL(hdr->address));
if (!hook)
return;
hook->func(p, len - hdr_len - sizeof(uint8_t),
hook->user_data);
} else {
rfcomm_mcc_recv(bthost, conn, l2conn, p, len - hdr_len);
}
}
static void process_rfcomm(struct bthost *bthost, struct btconn *conn,
struct l2conn *l2conn, const void *data,
uint16_t len)
{
const struct rfcomm_hdr *hdr = data;
switch (RFCOMM_GET_TYPE(hdr->control)) {
case RFCOMM_SABM:
rfcomm_sabm_recv(bthost, conn, l2conn, data, len);
break;
case RFCOMM_DISC:
rfcomm_disc_recv(bthost, conn, l2conn, data, len);
break;
case RFCOMM_UA:
rfcomm_ua_recv(bthost, conn, l2conn, data, len);
break;
case RFCOMM_DM:
rfcomm_dm_recv(bthost, conn, l2conn, data, len);
break;
case RFCOMM_UIH:
rfcomm_uih_recv(bthost, conn, l2conn, data, len);
break;
default:
printf("Unknown frame type\n");
break;
}
}
static void process_acl(struct bthost *bthost, const void *data, uint16_t len)
{
const struct bt_hci_acl_hdr *acl_hdr = data;
const struct bt_l2cap_hdr *l2_hdr = data + sizeof(*acl_hdr);
uint16_t handle, cid, acl_len, l2_len;
struct cid_hook *hook;
struct btconn *conn;
struct l2conn *l2conn;
const void *l2_data;
if (len < sizeof(*acl_hdr) + sizeof(*l2_hdr))
return;
acl_len = le16_to_cpu(acl_hdr->dlen);
if (len != sizeof(*acl_hdr) + acl_len)
return;
handle = acl_handle(acl_hdr->handle);
conn = bthost_find_conn(bthost, handle);
if (!conn) {
printf("ACL data for unknown handle 0x%04x\n", handle);
return;
}
l2_len = le16_to_cpu(l2_hdr->len);
if (len - sizeof(*acl_hdr) != sizeof(*l2_hdr) + l2_len)
return;
l2_data = data + sizeof(*acl_hdr) + sizeof(*l2_hdr);
cid = le16_to_cpu(l2_hdr->cid);
hook = find_cid_hook(conn, cid);
if (hook) {
hook->func(l2_data, l2_len, hook->user_data);
return;
}
switch (cid) {
case 0x0001:
l2cap_sig(bthost, conn, l2_data, l2_len);
break;
case 0x0005:
l2cap_le_sig(bthost, conn, l2_data, l2_len);
break;
case 0x0006:
smp_data(conn->smp_data, l2_data, l2_len);
break;
default:
l2conn = btconn_find_l2cap_conn_by_scid(conn, cid);
if (l2conn && l2conn->psm == 0x0003)
process_rfcomm(bthost, conn, l2conn, l2_data, l2_len);
else
printf("Packet for unknown CID 0x%04x (%u)\n", cid,
cid);
break;
}
}
void bthost_receive_h4(struct bthost *bthost, const void *data, uint16_t len)
{
uint8_t pkt_type;
if (!bthost)
return;
if (len < 1)
return;
pkt_type = ((const uint8_t *) data)[0];
switch (pkt_type) {
case BT_H4_EVT_PKT:
process_evt(bthost, data + 1, len - 1);
break;
case BT_H4_ACL_PKT:
process_acl(bthost, data + 1, len - 1);
break;
default:
printf("Unsupported packet 0x%2.2x\n", pkt_type);
break;
}
}
void bthost_set_cmd_complete_cb(struct bthost *bthost,
bthost_cmd_complete_cb cb, void *user_data)
{
bthost->cmd_complete_cb = cb;
bthost->cmd_complete_data = user_data;
}
void bthost_set_connect_cb(struct bthost *bthost, bthost_new_conn_cb cb,
void *user_data)
{
bthost->new_conn_cb = cb;
bthost->new_conn_data = user_data;
}
void bthost_hci_connect(struct bthost *bthost, const uint8_t *bdaddr,
uint8_t addr_type)
{
bthost->conn_init = true;
if (addr_type == BDADDR_BREDR) {
struct bt_hci_cmd_create_conn cc;
memset(&cc, 0, sizeof(cc));
memcpy(cc.bdaddr, bdaddr, sizeof(cc.bdaddr));
send_command(bthost, BT_HCI_CMD_CREATE_CONN, &cc, sizeof(cc));
} else {
struct bt_hci_cmd_le_create_conn cc;
memset(&cc, 0, sizeof(cc));
memcpy(cc.peer_addr, bdaddr, sizeof(cc.peer_addr));
if (addr_type == BDADDR_LE_RANDOM)
cc.peer_addr_type = 0x01;
send_command(bthost, BT_HCI_CMD_LE_CREATE_CONN,
&cc, sizeof(cc));
}
}
void bthost_write_scan_enable(struct bthost *bthost, uint8_t scan)
{
send_command(bthost, BT_HCI_CMD_WRITE_SCAN_ENABLE, &scan, 1);
}
void bthost_set_adv_enable(struct bthost *bthost, uint8_t enable)
{
struct bt_hci_cmd_le_set_adv_parameters cp;
memset(&cp, 0, sizeof(cp));
send_command(bthost, BT_HCI_CMD_LE_SET_ADV_PARAMETERS,
&cp, sizeof(cp));
send_command(bthost, BT_HCI_CMD_LE_SET_ADV_ENABLE, &enable, 1);
}
void bthost_write_ssp_mode(struct bthost *bthost, uint8_t mode)
{
send_command(bthost, BT_HCI_CMD_WRITE_SIMPLE_PAIRING_MODE, &mode, 1);
}
void bthost_request_auth(struct bthost *bthost, uint16_t handle)
{
struct btconn *conn;
conn = bthost_find_conn(bthost, handle);
if (!conn)
return;
if (conn->addr_type == BDADDR_BREDR) {
struct bt_hci_cmd_auth_requested cp;
cp.handle = cpu_to_le16(handle);
send_command(bthost, BT_HCI_CMD_AUTH_REQUESTED, &cp, sizeof(cp));
} else {
smp_pair(conn->smp_data);
}
}
void bthost_le_start_encrypt(struct bthost *bthost, uint16_t handle,
const uint8_t ltk[16])
{
struct bt_hci_cmd_le_start_encrypt cmd;
memset(&cmd, 0, sizeof(cmd));
cmd.handle = htobs(handle);
memcpy(cmd.ltk, ltk, 16);
send_command(bthost, BT_HCI_CMD_LE_START_ENCRYPT, &cmd, sizeof(cmd));
}
void bthost_add_l2cap_server(struct bthost *bthost, uint16_t psm,
bthost_l2cap_connect_cb func, void *user_data)
{
struct l2cap_conn_cb_data *data;
data = malloc(sizeof(struct l2cap_conn_cb_data));
if (!data)
return;
data->psm = psm;
data->user_data = user_data;
data->func = func;
data->next = bthost->new_l2cap_conn_data;
bthost->new_l2cap_conn_data = data;
}
void bthost_set_pin_code(struct bthost *bthost, const uint8_t *pin,
uint8_t pin_len)
{
memcpy(bthost->pin, pin, pin_len);
bthost->pin_len = pin_len;
}
void bthost_set_io_capability(struct bthost *bthost, uint8_t io_capability)
{
bthost->io_capability = io_capability;
}
void bthost_set_auth_req(struct bthost *bthost, uint8_t auth_req)
{
bthost->auth_req = auth_req;
}
void bthost_set_reject_user_confirm(struct bthost *bthost, bool reject)
{
bthost->reject_user_confirm = reject;
}
void bthost_add_rfcomm_server(struct bthost *bthost, uint8_t channel,
bthost_rfcomm_connect_cb func, void *user_data)
{
struct rfcomm_conn_cb_data *data;
data = malloc(sizeof(struct rfcomm_conn_cb_data));
if (!data)
return;
data->channel = channel;
data->user_data = user_data;
data->func = func;
data->next = bthost->new_rfcomm_conn_data;
bthost->new_rfcomm_conn_data = data;
}
void bthost_start(struct bthost *bthost)
{
if (!bthost)
return;
bthost->smp_data = smp_start(bthost);
bthost->ncmd = 1;
send_command(bthost, BT_HCI_CMD_RESET, NULL, 0);
send_command(bthost, BT_HCI_CMD_READ_BD_ADDR, NULL, 0);
}
bool bthost_connect_rfcomm(struct bthost *bthost, uint16_t handle,
uint8_t channel, bthost_rfcomm_connect_cb func,
void *user_data)
{
struct rfcomm_connection_data *data;
struct bt_l2cap_pdu_conn_req req;
struct btconn *conn;
if (bthost->rfcomm_conn_data)
return false;
conn = bthost_find_conn(bthost, handle);
if (!conn)
return false;
data = malloc(sizeof(struct rfcomm_connection_data));
if (!data)
return false;
data->channel = channel;
data->conn = conn;
data->cb = func;
data->user_data = user_data;
bthost->rfcomm_conn_data = data;
req.psm = cpu_to_le16(0x0003);
req.scid = cpu_to_le16(conn->next_cid++);
return bthost_l2cap_req(bthost, handle, BT_L2CAP_PDU_CONN_REQ,
&req, sizeof(req), NULL, NULL);
}
void bthost_add_rfcomm_chan_hook(struct bthost *bthost, uint16_t handle,
uint8_t channel,
bthost_rfcomm_chan_hook_func_t func,
void *user_data)
{
struct rfcomm_chan_hook *hook;
struct btconn *conn;
conn = bthost_find_conn(bthost, handle);
if (!conn)
return;
hook = malloc(sizeof(*hook));
if (!hook)
return;
memset(hook, 0, sizeof(*hook));
hook->channel = channel;
hook->func = func;
hook->user_data = user_data;
hook->next = conn->rfcomm_chan_hooks;
conn->rfcomm_chan_hooks = hook;
}
void bthost_send_rfcomm_data(struct bthost *bthost, uint16_t handle,
uint8_t channel, const void *data,
uint16_t len)
{
struct btconn *conn;
struct rcconn *rcconn;
struct rfcomm_hdr *hdr;
uint8_t *uih_frame;
uint16_t uih_len;
conn = bthost_find_conn(bthost, handle);
if (!conn)
return;
rcconn = btconn_find_rfcomm_conn_by_channel(conn, channel);
if (!rcconn)
return;
if (len > 127)
uih_len = len + sizeof(struct rfcomm_cmd) + sizeof(uint8_t);
else
uih_len = len + sizeof(struct rfcomm_cmd);
uih_frame = malloc(uih_len);
if (!uih_frame)
return;
hdr = (struct rfcomm_hdr *) uih_frame;
hdr->address = RFCOMM_ADDR(1, channel * 2);
hdr->control = RFCOMM_CTRL(RFCOMM_UIH, 0);
if (len > 127) {
hdr->length = RFCOMM_LEN16(cpu_to_le16(sizeof(*hdr) + len));
memcpy(uih_frame + sizeof(*hdr) + 1, data, len);
} else {
hdr->length = RFCOMM_LEN8(sizeof(*hdr) + len);
memcpy(uih_frame + sizeof(*hdr), data, len);
}
uih_frame[uih_len - 1] = rfcomm_fcs((void *)hdr);
send_acl(bthost, handle, rcconn->scid, uih_frame, uih_len);
free(uih_frame);
}
void bthost_stop(struct bthost *bthost)
{
if (bthost->smp_data) {
smp_stop(bthost->smp_data);
bthost->smp_data = NULL;
}
}