| /****************************************************************************** |
| * |
| * Copyright 2001-2012 Broadcom Corporation |
| * |
| * Licensed under the Apache License, Version 2.0 (the "License"); |
| * you may not use this file except in compliance with the License. |
| * You may obtain a copy of the License at: |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, |
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| * |
| ******************************************************************************/ |
| |
| /****************************************************************************** |
| * |
| * this file contains the main BNEP functions |
| * |
| ******************************************************************************/ |
| |
| #include <stdio.h> |
| #include <stdlib.h> |
| #include <string.h> |
| #include "bt_target.h" |
| |
| #include "bt_common.h" |
| #include "bt_types.h" |
| #include "hcidefs.h" |
| #include "hcimsgs.h" |
| |
| #include "l2c_api.h" |
| #include "l2cdefs.h" |
| #include "log/log.h" |
| |
| #include "btm_api.h" |
| #include "btu.h" |
| |
| #include "bnep_api.h" |
| #include "bnep_int.h" |
| #include "bt_utils.h" |
| |
| #include "device/include/controller.h" |
| #include "osi/include/osi.h" |
| |
| /******************************************************************************/ |
| /* G L O B A L B N E P D A T A */ |
| /******************************************************************************/ |
| tBNEP_CB bnep_cb; |
| |
| const uint16_t bnep_frame_hdr_sizes[] = {14, 1, 2, 8, 8}; |
| |
| /******************************************************************************/ |
| /* L O C A L F U N C T I O N P R O T O T Y P E S */ |
| /******************************************************************************/ |
| static void bnep_connect_ind(const RawAddress& bd_addr, uint16_t l2cap_cid, |
| uint16_t psm, uint8_t l2cap_id); |
| static void bnep_connect_cfm(uint16_t l2cap_cid, uint16_t result); |
| static void bnep_config_ind(uint16_t l2cap_cid, tL2CAP_CFG_INFO* p_cfg); |
| static void bnep_config_cfm(uint16_t l2cap_cid, tL2CAP_CFG_INFO* p_cfg); |
| static void bnep_disconnect_ind(uint16_t l2cap_cid, bool ack_needed); |
| static void bnep_disconnect_cfm(uint16_t l2cap_cid, uint16_t result); |
| static void bnep_data_ind(uint16_t l2cap_cid, BT_HDR* p_msg); |
| static void bnep_congestion_ind(uint16_t lcid, bool is_congested); |
| |
| /******************************************************************************* |
| * |
| * Function bnep_register_with_l2cap |
| * |
| * Description This function registers BNEP PSM with L2CAP |
| * |
| * Returns void |
| * |
| ******************************************************************************/ |
| tBNEP_RESULT bnep_register_with_l2cap(void) { |
| /* Initialize the L2CAP configuration. We only care about MTU and flush */ |
| memset(&bnep_cb.l2cap_my_cfg, 0, sizeof(tL2CAP_CFG_INFO)); |
| |
| bnep_cb.l2cap_my_cfg.mtu_present = true; |
| bnep_cb.l2cap_my_cfg.mtu = BNEP_MTU_SIZE; |
| bnep_cb.l2cap_my_cfg.flush_to_present = true; |
| bnep_cb.l2cap_my_cfg.flush_to = BNEP_FLUSH_TO; |
| |
| bnep_cb.reg_info.pL2CA_ConnectInd_Cb = bnep_connect_ind; |
| bnep_cb.reg_info.pL2CA_ConnectCfm_Cb = bnep_connect_cfm; |
| bnep_cb.reg_info.pL2CA_ConfigInd_Cb = bnep_config_ind; |
| bnep_cb.reg_info.pL2CA_ConfigCfm_Cb = bnep_config_cfm; |
| bnep_cb.reg_info.pL2CA_DisconnectInd_Cb = bnep_disconnect_ind; |
| bnep_cb.reg_info.pL2CA_DisconnectCfm_Cb = bnep_disconnect_cfm; |
| bnep_cb.reg_info.pL2CA_DataInd_Cb = bnep_data_ind; |
| bnep_cb.reg_info.pL2CA_CongestionStatus_Cb = bnep_congestion_ind; |
| |
| /* Now, register with L2CAP */ |
| if (!L2CA_Register(BT_PSM_BNEP, &bnep_cb.reg_info, |
| false /* enable_snoop */)) { |
| BNEP_TRACE_ERROR("BNEP - Registration failed"); |
| return BNEP_SECURITY_FAIL; |
| } |
| |
| return BNEP_SUCCESS; |
| } |
| |
| /******************************************************************************* |
| * |
| * Function bnep_connect_ind |
| * |
| * Description This function handles an inbound connection indication |
| * from L2CAP. This is the case where we are acting as a |
| * server. |
| * |
| * Returns void |
| * |
| ******************************************************************************/ |
| static void bnep_connect_ind(const RawAddress& bd_addr, uint16_t l2cap_cid, |
| UNUSED_ATTR uint16_t psm, uint8_t l2cap_id) { |
| tBNEP_CONN* p_bcb = bnepu_find_bcb_by_bd_addr(bd_addr); |
| |
| /* If we are not acting as server, or already have a connection, or have */ |
| /* no more resources to handle the connection, reject the connection. */ |
| if (!(bnep_cb.profile_registered) || (p_bcb) || |
| ((p_bcb = bnepu_allocate_bcb(bd_addr)) == NULL)) { |
| L2CA_ConnectRsp(bd_addr, l2cap_id, l2cap_cid, L2CAP_CONN_NO_PSM, 0); |
| return; |
| } |
| |
| /* Transition to the next appropriate state, waiting for config setup. */ |
| p_bcb->con_state = BNEP_STATE_CFG_SETUP; |
| |
| /* Save the L2CAP Channel ID. */ |
| p_bcb->l2cap_cid = l2cap_cid; |
| |
| /* Send response to the L2CAP layer. */ |
| L2CA_ConnectRsp(bd_addr, l2cap_id, l2cap_cid, L2CAP_CONN_OK, L2CAP_CONN_OK); |
| |
| /* Send a Configuration Request. */ |
| L2CA_ConfigReq(l2cap_cid, &bnep_cb.l2cap_my_cfg); |
| |
| /* Start timer waiting for config setup */ |
| alarm_set_on_mloop(p_bcb->conn_timer, BNEP_CONN_TIMEOUT_MS, |
| bnep_conn_timer_timeout, p_bcb); |
| |
| BNEP_TRACE_EVENT("BNEP - Rcvd L2CAP conn ind, CID: 0x%x", p_bcb->l2cap_cid); |
| } |
| |
| /******************************************************************************* |
| * |
| * Function bnep_connect_cfm |
| * |
| * Description This function handles the connect confirm events |
| * from L2CAP. This is the case when we are acting as a |
| * client and have sent a connect request. |
| * |
| * Returns void |
| * |
| ******************************************************************************/ |
| static void bnep_connect_cfm(uint16_t l2cap_cid, uint16_t result) { |
| tBNEP_CONN* p_bcb; |
| |
| /* Find CCB based on CID */ |
| p_bcb = bnepu_find_bcb_by_cid(l2cap_cid); |
| if (p_bcb == NULL) { |
| BNEP_TRACE_WARNING("BNEP - Rcvd conn cnf for unknown CID 0x%x", l2cap_cid); |
| return; |
| } |
| |
| /* If the connection response contains success status, then */ |
| /* Transition to the next state and startup the timer. */ |
| if ((result == L2CAP_CONN_OK) && |
| (p_bcb->con_state == BNEP_STATE_CONN_START)) { |
| p_bcb->con_state = BNEP_STATE_CFG_SETUP; |
| |
| /* Send a Configuration Request. */ |
| L2CA_ConfigReq(l2cap_cid, &bnep_cb.l2cap_my_cfg); |
| |
| /* Start timer waiting for config results */ |
| alarm_set_on_mloop(p_bcb->conn_timer, BNEP_CONN_TIMEOUT_MS, |
| bnep_conn_timer_timeout, p_bcb); |
| |
| BNEP_TRACE_EVENT("BNEP - got conn cnf, sent cfg req, CID: 0x%x", |
| p_bcb->l2cap_cid); |
| } else { |
| BNEP_TRACE_WARNING("BNEP - Rcvd conn cnf with error: 0x%x CID 0x%x", |
| result, p_bcb->l2cap_cid); |
| |
| /* Tell the upper layer, if he has a callback */ |
| if (bnep_cb.p_conn_state_cb && p_bcb->con_flags & BNEP_FLAGS_IS_ORIG) { |
| (*bnep_cb.p_conn_state_cb)(p_bcb->handle, p_bcb->rem_bda, |
| BNEP_CONN_FAILED, false); |
| } |
| |
| bnepu_release_bcb(p_bcb); |
| } |
| } |
| |
| /******************************************************************************* |
| * |
| * Function bnep_config_ind |
| * |
| * Description This function processes the L2CAP configuration indication |
| * event. |
| * |
| * Returns void |
| * |
| ******************************************************************************/ |
| static void bnep_config_ind(uint16_t l2cap_cid, tL2CAP_CFG_INFO* p_cfg) { |
| tBNEP_CONN* p_bcb; |
| uint16_t result, mtu = 0; |
| |
| /* Find CCB based on CID */ |
| p_bcb = bnepu_find_bcb_by_cid(l2cap_cid); |
| if (p_bcb == NULL) { |
| BNEP_TRACE_WARNING("BNEP - Rcvd L2CAP cfg ind, unknown CID: 0x%x", |
| l2cap_cid); |
| return; |
| } |
| |
| BNEP_TRACE_EVENT("BNEP - Rcvd cfg ind, CID: 0x%x", l2cap_cid); |
| |
| /* Remember the remote MTU size */ |
| if ((!p_cfg->mtu_present) || (p_cfg->mtu < BNEP_MIN_MTU_SIZE)) { |
| mtu = p_cfg->mtu; |
| p_cfg->flush_to_present = false; |
| p_cfg->mtu_present = true; |
| p_cfg->mtu = BNEP_MIN_MTU_SIZE; |
| p_cfg->result = result = L2CAP_CFG_UNACCEPTABLE_PARAMS; |
| } else { |
| if (p_cfg->mtu > BNEP_MTU_SIZE) |
| p_bcb->rem_mtu_size = BNEP_MTU_SIZE; |
| else |
| p_bcb->rem_mtu_size = p_cfg->mtu; |
| |
| /* For now, always accept configuration from the other side */ |
| p_cfg->flush_to_present = false; |
| p_cfg->mtu_present = false; |
| p_cfg->result = result = L2CAP_CFG_OK; |
| } |
| |
| L2CA_ConfigRsp(l2cap_cid, p_cfg); |
| |
| if (result != L2CAP_CFG_OK) { |
| BNEP_TRACE_EVENT("BNEP - Rcvd cfg ind with bad MTU %d, CID: 0x%x", mtu, |
| l2cap_cid); |
| return; |
| } |
| |
| p_bcb->con_flags |= BNEP_FLAGS_HIS_CFG_DONE; |
| |
| if (p_bcb->con_flags & BNEP_FLAGS_MY_CFG_DONE) { |
| p_bcb->con_state = BNEP_STATE_SEC_CHECKING; |
| |
| /* Start timer waiting for setup or response */ |
| alarm_set_on_mloop(p_bcb->conn_timer, BNEP_HOST_TIMEOUT_MS, |
| bnep_conn_timer_timeout, p_bcb); |
| |
| if (p_bcb->con_flags & BNEP_FLAGS_IS_ORIG) { |
| btm_sec_mx_access_request(p_bcb->rem_bda, BT_PSM_BNEP, true, |
| BTM_SEC_PROTO_BNEP, p_bcb->src_uuid.As32Bit(), |
| &bnep_sec_check_complete, p_bcb); |
| } |
| } |
| } |
| |
| /******************************************************************************* |
| * |
| * Function bnep_config_cfm |
| * |
| * Description This function processes the L2CAP configuration confirmation |
| * event. |
| * |
| * Returns void |
| * |
| ******************************************************************************/ |
| static void bnep_config_cfm(uint16_t l2cap_cid, tL2CAP_CFG_INFO* p_cfg) { |
| tBNEP_CONN* p_bcb; |
| |
| BNEP_TRACE_EVENT("BNEP - Rcvd cfg cfm, CID: 0x%x Result: %d", l2cap_cid, |
| p_cfg->result); |
| |
| /* Find CCB based on CID */ |
| p_bcb = bnepu_find_bcb_by_cid(l2cap_cid); |
| if (p_bcb == NULL) { |
| BNEP_TRACE_WARNING("BNEP - Rcvd L2CAP cfg ind, unknown CID: 0x%x", |
| l2cap_cid); |
| return; |
| } |
| |
| /* For now, always accept configuration from the other side */ |
| if (p_cfg->result == L2CAP_CFG_OK) { |
| p_bcb->con_flags |= BNEP_FLAGS_MY_CFG_DONE; |
| |
| if (p_bcb->con_flags & BNEP_FLAGS_HIS_CFG_DONE) { |
| p_bcb->con_state = BNEP_STATE_SEC_CHECKING; |
| |
| /* Start timer waiting for setup or response */ |
| alarm_set_on_mloop(p_bcb->conn_timer, BNEP_HOST_TIMEOUT_MS, |
| bnep_conn_timer_timeout, p_bcb); |
| |
| if (p_bcb->con_flags & BNEP_FLAGS_IS_ORIG) { |
| btm_sec_mx_access_request(p_bcb->rem_bda, BT_PSM_BNEP, true, |
| BTM_SEC_PROTO_BNEP, p_bcb->src_uuid.As32Bit(), |
| &bnep_sec_check_complete, p_bcb); |
| } |
| } |
| } else { |
| /* Tell the upper layer, if he has a callback */ |
| if ((p_bcb->con_flags & BNEP_FLAGS_IS_ORIG) && (bnep_cb.p_conn_state_cb)) { |
| (*bnep_cb.p_conn_state_cb)(p_bcb->handle, p_bcb->rem_bda, |
| BNEP_CONN_FAILED_CFG, false); |
| } |
| |
| L2CA_DisconnectReq(p_bcb->l2cap_cid); |
| |
| bnepu_release_bcb(p_bcb); |
| } |
| } |
| |
| /******************************************************************************* |
| * |
| * Function bnep_disconnect_ind |
| * |
| * Description This function handles a disconnect event from L2CAP. If |
| * requested to, we ack the disconnect before dropping the CCB |
| * |
| * Returns void |
| * |
| ******************************************************************************/ |
| static void bnep_disconnect_ind(uint16_t l2cap_cid, bool ack_needed) { |
| tBNEP_CONN* p_bcb; |
| |
| if (ack_needed) L2CA_DisconnectRsp(l2cap_cid); |
| |
| /* Find CCB based on CID */ |
| p_bcb = bnepu_find_bcb_by_cid(l2cap_cid); |
| if (p_bcb == NULL) { |
| BNEP_TRACE_WARNING("BNEP - Rcvd L2CAP disc, unknown CID: 0x%x", l2cap_cid); |
| return; |
| } |
| |
| BNEP_TRACE_EVENT("BNEP - Rcvd L2CAP disc, CID: 0x%x", l2cap_cid); |
| |
| /* Tell the user if he has a callback */ |
| if (p_bcb->con_state == BNEP_STATE_CONNECTED) { |
| if (bnep_cb.p_conn_state_cb) |
| (*bnep_cb.p_conn_state_cb)(p_bcb->handle, p_bcb->rem_bda, |
| BNEP_CONN_DISCONNECTED, false); |
| } else { |
| if ((bnep_cb.p_conn_state_cb) && |
| ((p_bcb->con_flags & BNEP_FLAGS_IS_ORIG) || |
| (p_bcb->con_flags & BNEP_FLAGS_CONN_COMPLETED))) |
| (*bnep_cb.p_conn_state_cb)(p_bcb->handle, p_bcb->rem_bda, |
| BNEP_CONN_FAILED, false); |
| } |
| |
| bnepu_release_bcb(p_bcb); |
| } |
| |
| /******************************************************************************* |
| * |
| * Function bnep_disconnect_cfm |
| * |
| * Description This function gets the disconnect confirm event from L2CAP |
| * |
| * Returns void |
| * |
| ******************************************************************************/ |
| static void bnep_disconnect_cfm(uint16_t l2cap_cid, uint16_t result) { |
| BNEP_TRACE_EVENT("BNEP - Rcvd L2CAP disc cfm, CID: 0x%x, Result 0x%x", |
| l2cap_cid, result); |
| } |
| |
| /******************************************************************************* |
| * |
| * Function bnep_congestion_ind |
| * |
| * Description This is a callback function called by L2CAP when |
| * congestion status changes |
| * |
| ******************************************************************************/ |
| static void bnep_congestion_ind(uint16_t l2cap_cid, bool is_congested) { |
| tBNEP_CONN* p_bcb; |
| |
| /* Find BCB based on CID */ |
| p_bcb = bnepu_find_bcb_by_cid(l2cap_cid); |
| if (p_bcb == NULL) { |
| BNEP_TRACE_WARNING("BNEP - Rcvd L2CAP cong, unknown CID: 0x%x", l2cap_cid); |
| return; |
| } |
| |
| if (is_congested) { |
| p_bcb->con_flags |= BNEP_FLAGS_L2CAP_CONGESTED; |
| if (bnep_cb.p_tx_data_flow_cb) { |
| bnep_cb.p_tx_data_flow_cb(p_bcb->handle, BNEP_TX_FLOW_OFF); |
| } |
| } else { |
| p_bcb->con_flags &= ~BNEP_FLAGS_L2CAP_CONGESTED; |
| |
| if (bnep_cb.p_tx_data_flow_cb) { |
| bnep_cb.p_tx_data_flow_cb(p_bcb->handle, BNEP_TX_FLOW_ON); |
| } |
| |
| /* While not congested, send as many buffers as we can */ |
| while (!(p_bcb->con_flags & BNEP_FLAGS_L2CAP_CONGESTED)) { |
| BT_HDR* p_buf = (BT_HDR*)fixed_queue_try_dequeue(p_bcb->xmit_q); |
| |
| if (!p_buf) break; |
| |
| L2CA_DataWrite(l2cap_cid, p_buf); |
| } |
| } |
| } |
| |
| /******************************************************************************* |
| * |
| * Function bnep_data_ind |
| * |
| * Description This function is called when data is received from L2CAP. |
| * if we are the originator of the connection, we are the SDP |
| * client, and the received message is queued for the client. |
| * |
| * If we are the destination of the connection, we are the SDP |
| * server, so the message is passed to the server processing |
| * function. |
| * |
| * Returns void |
| * |
| ******************************************************************************/ |
| static void bnep_data_ind(uint16_t l2cap_cid, BT_HDR* p_buf) { |
| tBNEP_CONN* p_bcb; |
| uint8_t* p = (uint8_t*)(p_buf + 1) + p_buf->offset; |
| uint16_t rem_len = p_buf->len; |
| if (rem_len == 0) { |
| android_errorWriteLog(0x534e4554, "78286118"); |
| osi_free(p_buf); |
| return; |
| } |
| uint8_t type, ctrl_type, ext_type = 0; |
| bool extension_present, fw_ext_present; |
| uint16_t protocol = 0; |
| |
| /* Find CCB based on CID */ |
| p_bcb = bnepu_find_bcb_by_cid(l2cap_cid); |
| if (p_bcb == NULL) { |
| BNEP_TRACE_WARNING("BNEP - Rcvd L2CAP data, unknown CID: 0x%x", l2cap_cid); |
| osi_free(p_buf); |
| return; |
| } |
| |
| /* Get the type and extension bits */ |
| type = *p++; |
| extension_present = type >> 7; |
| type &= 0x7f; |
| if (type >= sizeof(bnep_frame_hdr_sizes) / sizeof(bnep_frame_hdr_sizes[0])) { |
| BNEP_TRACE_EVENT("BNEP - rcvd frame, bad type: 0x%02x", type); |
| android_errorWriteLog(0x534e4554, "68818034"); |
| osi_free(p_buf); |
| return; |
| } |
| if ((rem_len <= bnep_frame_hdr_sizes[type]) || (rem_len > BNEP_MTU_SIZE)) { |
| BNEP_TRACE_EVENT("BNEP - rcvd frame, bad len: %d type: 0x%02x", p_buf->len, |
| type); |
| osi_free(p_buf); |
| return; |
| } |
| |
| rem_len--; |
| |
| if ((p_bcb->con_state != BNEP_STATE_CONNECTED) && |
| (!(p_bcb->con_flags & BNEP_FLAGS_CONN_COMPLETED)) && |
| (type != BNEP_FRAME_CONTROL)) { |
| BNEP_TRACE_WARNING( |
| "BNEP - Ignored L2CAP data while in state: %d, CID: 0x%x", |
| p_bcb->con_state, l2cap_cid); |
| |
| if (extension_present) { |
| /* |
| ** When there is no connection if a data packet is received |
| ** with unknown control extension headers then those should be processed |
| ** according to complain/ignore law |
| */ |
| uint8_t ext, length; |
| uint16_t org_len, new_len; |
| /* parse the extension headers and process unknown control headers */ |
| org_len = rem_len; |
| do { |
| if (org_len < 2) { |
| android_errorWriteLog(0x534e4554, "67863755"); |
| break; |
| } |
| ext = *p++; |
| length = *p++; |
| |
| new_len = (length + 2); |
| if (new_len > org_len) { |
| android_errorWriteLog(0x534e4554, "67863755"); |
| break; |
| } |
| |
| if ((ext & 0x7F) == BNEP_EXTENSION_FILTER_CONTROL) { |
| if (length == 0) { |
| android_errorWriteLog(0x534e4554, "79164722"); |
| break; |
| } |
| if (*p > BNEP_FILTER_MULTI_ADDR_RESPONSE_MSG) { |
| bnep_send_command_not_understood(p_bcb, *p); |
| } |
| } |
| |
| p += length; |
| |
| org_len -= new_len; |
| } while (ext & 0x80); |
| } |
| osi_free(p_buf); |
| return; |
| } |
| |
| if (type > BNEP_FRAME_COMPRESSED_ETHERNET_DEST_ONLY) { |
| BNEP_TRACE_EVENT("BNEP - rcvd frame, unknown type: 0x%02x", type); |
| osi_free(p_buf); |
| return; |
| } |
| |
| BNEP_TRACE_DEBUG("BNEP - rcv frame, type: %d len: %d Ext: %d", type, |
| p_buf->len, extension_present); |
| |
| /* Initialize addresses to 'not supplied' */ |
| const RawAddress *p_src_addr, *p_dst_addr; |
| p_src_addr = p_dst_addr = NULL; |
| |
| switch (type) { |
| case BNEP_FRAME_GENERAL_ETHERNET: |
| p_dst_addr = (RawAddress*)p; |
| p += BD_ADDR_LEN; |
| p_src_addr = (RawAddress*)p; |
| p += BD_ADDR_LEN; |
| BE_STREAM_TO_UINT16(protocol, p); |
| rem_len -= 14; |
| break; |
| |
| case BNEP_FRAME_CONTROL: |
| ctrl_type = *p; |
| p = bnep_process_control_packet(p_bcb, p, &rem_len, false); |
| |
| if (ctrl_type == BNEP_SETUP_CONNECTION_REQUEST_MSG && |
| p_bcb->con_state != BNEP_STATE_CONNECTED && extension_present && p && |
| rem_len) { |
| osi_free(p_bcb->p_pending_data); |
| p_bcb->p_pending_data = (BT_HDR*)osi_malloc(rem_len + sizeof(BT_HDR)); |
| memcpy((uint8_t*)(p_bcb->p_pending_data + 1), p, rem_len); |
| p_bcb->p_pending_data->len = rem_len; |
| p_bcb->p_pending_data->offset = 0; |
| } else { |
| while (extension_present && p && rem_len) { |
| ext_type = *p++; |
| rem_len--; |
| extension_present = ext_type >> 7; |
| ext_type &= 0x7F; |
| |
| /* if unknown extension present stop processing */ |
| if (ext_type != BNEP_EXTENSION_FILTER_CONTROL) break; |
| |
| android_errorWriteLog(0x534e4554, "69271284"); |
| p = bnep_process_control_packet(p_bcb, p, &rem_len, true); |
| } |
| } |
| osi_free(p_buf); |
| return; |
| |
| case BNEP_FRAME_COMPRESSED_ETHERNET: |
| BE_STREAM_TO_UINT16(protocol, p); |
| rem_len -= 2; |
| break; |
| |
| case BNEP_FRAME_COMPRESSED_ETHERNET_SRC_ONLY: |
| p_src_addr = (RawAddress*)p; |
| p += BD_ADDR_LEN; |
| BE_STREAM_TO_UINT16(protocol, p); |
| rem_len -= 8; |
| break; |
| |
| case BNEP_FRAME_COMPRESSED_ETHERNET_DEST_ONLY: |
| p_dst_addr = (RawAddress*)p; |
| p += BD_ADDR_LEN; |
| BE_STREAM_TO_UINT16(protocol, p); |
| rem_len -= 8; |
| break; |
| } |
| |
| /* Process the header extension if there is one */ |
| while (extension_present && p && rem_len) { |
| ext_type = *p; |
| extension_present = ext_type >> 7; |
| ext_type &= 0x7F; |
| |
| /* if unknown extension present stop processing */ |
| if (ext_type) { |
| BNEP_TRACE_EVENT("Data extension type 0x%x found", ext_type); |
| break; |
| } |
| |
| p++; |
| rem_len--; |
| p = bnep_process_control_packet(p_bcb, p, &rem_len, true); |
| } |
| |
| p_buf->offset += p_buf->len - rem_len; |
| p_buf->len = rem_len; |
| |
| /* Always give the upper layer MAC addresses */ |
| if (!p_src_addr) p_src_addr = &p_bcb->rem_bda; |
| |
| if (!p_dst_addr) p_dst_addr = controller_get_interface()->get_address(); |
| |
| /* check whether there are any extensions to be forwarded */ |
| if (ext_type) |
| fw_ext_present = true; |
| else |
| fw_ext_present = false; |
| |
| if (bnep_cb.p_data_buf_cb) { |
| (*bnep_cb.p_data_buf_cb)(p_bcb->handle, *p_src_addr, *p_dst_addr, protocol, |
| p_buf, fw_ext_present); |
| } else if (bnep_cb.p_data_ind_cb) { |
| (*bnep_cb.p_data_ind_cb)(p_bcb->handle, *p_src_addr, *p_dst_addr, protocol, |
| p, rem_len, fw_ext_present); |
| osi_free(p_buf); |
| } |
| } |
| |
| /******************************************************************************* |
| * |
| * Function bnep_conn_timer_timeout |
| * |
| * Description This function processes a timeout. If it is a startup |
| * timeout, we check for reading our BD address. If it |
| * is an L2CAP timeout, we send a disconnect req to L2CAP. |
| * |
| * Returns void |
| * |
| ******************************************************************************/ |
| void bnep_conn_timer_timeout(void* data) { |
| tBNEP_CONN* p_bcb = (tBNEP_CONN*)data; |
| |
| BNEP_TRACE_EVENT( |
| "BNEP - CCB timeout in state: %d CID: 0x%x flags %x, re_transmit %d", |
| p_bcb->con_state, p_bcb->l2cap_cid, p_bcb->con_flags, |
| p_bcb->re_transmits); |
| |
| if (p_bcb->con_state == BNEP_STATE_CONN_SETUP) { |
| BNEP_TRACE_EVENT("BNEP - CCB timeout in state: %d CID: 0x%x", |
| p_bcb->con_state, p_bcb->l2cap_cid); |
| |
| if (!(p_bcb->con_flags & BNEP_FLAGS_IS_ORIG)) { |
| L2CA_DisconnectReq(p_bcb->l2cap_cid); |
| |
| bnepu_release_bcb(p_bcb); |
| return; |
| } |
| |
| if (p_bcb->re_transmits++ != BNEP_MAX_RETRANSMITS) { |
| bnep_send_conn_req(p_bcb); |
| alarm_set_on_mloop(p_bcb->conn_timer, BNEP_CONN_TIMEOUT_MS, |
| bnep_conn_timer_timeout, p_bcb); |
| } else { |
| L2CA_DisconnectReq(p_bcb->l2cap_cid); |
| |
| if ((p_bcb->con_flags & BNEP_FLAGS_IS_ORIG) && (bnep_cb.p_conn_state_cb)) |
| (*bnep_cb.p_conn_state_cb)(p_bcb->handle, p_bcb->rem_bda, |
| BNEP_CONN_FAILED, false); |
| |
| bnepu_release_bcb(p_bcb); |
| return; |
| } |
| } else if (p_bcb->con_state != BNEP_STATE_CONNECTED) { |
| BNEP_TRACE_EVENT("BNEP - CCB timeout in state: %d CID: 0x%x", |
| p_bcb->con_state, p_bcb->l2cap_cid); |
| |
| L2CA_DisconnectReq(p_bcb->l2cap_cid); |
| |
| /* Tell the user if he has a callback */ |
| if ((p_bcb->con_flags & BNEP_FLAGS_IS_ORIG) && (bnep_cb.p_conn_state_cb)) |
| (*bnep_cb.p_conn_state_cb)(p_bcb->handle, p_bcb->rem_bda, |
| BNEP_CONN_FAILED, false); |
| |
| bnepu_release_bcb(p_bcb); |
| } else if (p_bcb->con_flags & BNEP_FLAGS_FILTER_RESP_PEND) { |
| if (p_bcb->re_transmits++ != BNEP_MAX_RETRANSMITS) { |
| bnepu_send_peer_our_filters(p_bcb); |
| alarm_set_on_mloop(p_bcb->conn_timer, BNEP_FILTER_SET_TIMEOUT_MS, |
| bnep_conn_timer_timeout, p_bcb); |
| } else { |
| L2CA_DisconnectReq(p_bcb->l2cap_cid); |
| |
| /* Tell the user if he has a callback */ |
| if (bnep_cb.p_conn_state_cb) |
| (*bnep_cb.p_conn_state_cb)(p_bcb->handle, p_bcb->rem_bda, |
| BNEP_SET_FILTER_FAIL, false); |
| |
| bnepu_release_bcb(p_bcb); |
| return; |
| } |
| } else if (p_bcb->con_flags & BNEP_FLAGS_MULTI_RESP_PEND) { |
| if (p_bcb->re_transmits++ != BNEP_MAX_RETRANSMITS) { |
| bnepu_send_peer_our_multi_filters(p_bcb); |
| alarm_set_on_mloop(p_bcb->conn_timer, BNEP_FILTER_SET_TIMEOUT_MS, |
| bnep_conn_timer_timeout, p_bcb); |
| } else { |
| L2CA_DisconnectReq(p_bcb->l2cap_cid); |
| |
| /* Tell the user if he has a callback */ |
| if (bnep_cb.p_conn_state_cb) |
| (*bnep_cb.p_conn_state_cb)(p_bcb->handle, p_bcb->rem_bda, |
| BNEP_SET_FILTER_FAIL, false); |
| |
| bnepu_release_bcb(p_bcb); |
| return; |
| } |
| } |
| } |
| |
| /******************************************************************************* |
| * |
| * Function bnep_connected |
| * |
| * Description This function is called when a connection is established |
| * (after config). |
| * |
| * Returns void |
| * |
| ******************************************************************************/ |
| void bnep_connected(tBNEP_CONN* p_bcb) { |
| bool is_role_change; |
| |
| if (p_bcb->con_flags & BNEP_FLAGS_CONN_COMPLETED) |
| is_role_change = true; |
| else |
| is_role_change = false; |
| |
| p_bcb->con_state = BNEP_STATE_CONNECTED; |
| p_bcb->con_flags |= BNEP_FLAGS_CONN_COMPLETED; |
| p_bcb->con_flags &= (~BNEP_FLAGS_SETUP_RCVD); |
| |
| /* Ensure timer is stopped */ |
| alarm_cancel(p_bcb->conn_timer); |
| p_bcb->re_transmits = 0; |
| |
| /* Tell the upper layer, if he has a callback */ |
| if (bnep_cb.p_conn_state_cb) |
| (*bnep_cb.p_conn_state_cb)(p_bcb->handle, p_bcb->rem_bda, BNEP_SUCCESS, |
| is_role_change); |
| } |