10a708f8fSGustavo F. Padovan /* 20a708f8fSGustavo F. Padovan BlueZ - Bluetooth protocol stack for Linux 30a708f8fSGustavo F. Padovan Copyright (C) 2000-2001 Qualcomm Incorporated 40a708f8fSGustavo F. Padovan Copyright (C) 2009-2010 Gustavo F. Padovan <gustavo@padovan.org> 50a708f8fSGustavo F. Padovan Copyright (C) 2010 Google Inc. 6590051deSGustavo F. Padovan Copyright (C) 2011 ProFUSION Embedded Systems 7422e925bSMat Martineau Copyright (c) 2012 Code Aurora Forum. All rights reserved. 80a708f8fSGustavo F. Padovan 90a708f8fSGustavo F. Padovan Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com> 100a708f8fSGustavo F. Padovan 110a708f8fSGustavo F. Padovan This program is free software; you can redistribute it and/or modify 120a708f8fSGustavo F. Padovan it under the terms of the GNU General Public License version 2 as 130a708f8fSGustavo F. Padovan published by the Free Software Foundation; 140a708f8fSGustavo F. Padovan 150a708f8fSGustavo F. Padovan THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS 160a708f8fSGustavo F. Padovan OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 170a708f8fSGustavo F. Padovan FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS. 180a708f8fSGustavo F. Padovan IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY 190a708f8fSGustavo F. Padovan CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES 200a708f8fSGustavo F. Padovan WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 210a708f8fSGustavo F. Padovan ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 220a708f8fSGustavo F. Padovan OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 230a708f8fSGustavo F. Padovan 240a708f8fSGustavo F. Padovan ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS, 250a708f8fSGustavo F. Padovan COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS 260a708f8fSGustavo F. Padovan SOFTWARE IS DISCLAIMED. 270a708f8fSGustavo F. Padovan */ 280a708f8fSGustavo F. Padovan 29bb58f747SGustavo F. Padovan /* Bluetooth L2CAP core. */ 300a708f8fSGustavo F. Padovan 310a708f8fSGustavo F. Padovan #include <linux/module.h> 320a708f8fSGustavo F. Padovan 330a708f8fSGustavo F. Padovan #include <linux/debugfs.h> 340a708f8fSGustavo F. Padovan #include <linux/crc16.h> 350a708f8fSGustavo F. Padovan 360a708f8fSGustavo F. Padovan #include <net/bluetooth/bluetooth.h> 370a708f8fSGustavo F. Padovan #include <net/bluetooth/hci_core.h> 380a708f8fSGustavo F. Padovan #include <net/bluetooth/l2cap.h> 397ef9fbf0SMarcel Holtmann 40ac4b7236SMarcel Holtmann #include "smp.h" 417024728eSMarcel Holtmann #include "a2mp.h" 427ef9fbf0SMarcel Holtmann #include "amp.h" 430a708f8fSGustavo F. Padovan 440f1bfe4eSJohan Hedberg #define LE_FLOWCTL_MAX_CREDITS 65535 450f1bfe4eSJohan Hedberg 46d1de6d46SMat Martineau bool disable_ertm; 470a708f8fSGustavo F. Padovan 48547d1032SMarcel Holtmann static u32 l2cap_feat_mask = L2CAP_FEAT_FIXED_CHAN | L2CAP_FEAT_UCD; 490a708f8fSGustavo F. Padovan 50b5ad8b7fSJohannes Berg static LIST_HEAD(chan_list); 51b5ad8b7fSJohannes Berg static DEFINE_RWLOCK(chan_list_lock); 520a708f8fSGustavo F. Padovan 53f15b8ecfSJohan Hedberg static u16 le_max_credits = L2CAP_LE_MAX_CREDITS; 54f15b8ecfSJohan Hedberg static u16 le_default_mps = L2CAP_LE_DEFAULT_MPS; 55f15b8ecfSJohan Hedberg 560a708f8fSGustavo F. Padovan static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn, 570a708f8fSGustavo F. Padovan u8 code, u8 ident, u16 dlen, void *data); 584519de9aSGustavo F. Padovan static void l2cap_send_cmd(struct l2cap_conn *conn, u8 ident, u8 code, u16 len, 594519de9aSGustavo F. Padovan void *data); 60710f9b0aSGustavo F. Padovan static int l2cap_build_conf_req(struct l2cap_chan *chan, void *data); 615e4e3972SAndrei Emeltchenko static void l2cap_send_disconn_req(struct l2cap_chan *chan, int err); 620a708f8fSGustavo F. Padovan 63d660366dSGustavo Padovan static void l2cap_tx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 64608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event); 65608bcc6dSMat Martineau 664f1654e0SMarcel Holtmann static inline __u8 bdaddr_type(struct hci_conn *hcon, __u8 type) 674f1654e0SMarcel Holtmann { 684f1654e0SMarcel Holtmann if (hcon->type == LE_LINK) { 694f1654e0SMarcel Holtmann if (type == ADDR_LE_DEV_PUBLIC) 704f1654e0SMarcel Holtmann return BDADDR_LE_PUBLIC; 714f1654e0SMarcel Holtmann else 724f1654e0SMarcel Holtmann return BDADDR_LE_RANDOM; 734f1654e0SMarcel Holtmann } 744f1654e0SMarcel Holtmann 754f1654e0SMarcel Holtmann return BDADDR_BREDR; 764f1654e0SMarcel Holtmann } 774f1654e0SMarcel Holtmann 780a708f8fSGustavo F. Padovan /* ---- L2CAP channels ---- */ 7971ba0e56SGustavo F. Padovan 802d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_dcid(struct l2cap_conn *conn, 812d792818SGustavo Padovan u16 cid) 820a708f8fSGustavo F. Padovan { 833df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 84baa7e1faSGustavo F. Padovan 853df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 863df91ea2SAndrei Emeltchenko if (c->dcid == cid) 873df91ea2SAndrei Emeltchenko return c; 880a708f8fSGustavo F. Padovan } 893df91ea2SAndrei Emeltchenko return NULL; 90baa7e1faSGustavo F. Padovan } 910a708f8fSGustavo F. Padovan 922d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_scid(struct l2cap_conn *conn, 932d792818SGustavo Padovan u16 cid) 940a708f8fSGustavo F. Padovan { 953df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 96baa7e1faSGustavo F. Padovan 973df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 983df91ea2SAndrei Emeltchenko if (c->scid == cid) 993df91ea2SAndrei Emeltchenko return c; 1000a708f8fSGustavo F. Padovan } 1013df91ea2SAndrei Emeltchenko return NULL; 102baa7e1faSGustavo F. Padovan } 1030a708f8fSGustavo F. Padovan 1040a708f8fSGustavo F. Padovan /* Find channel with given SCID. 105ef191adeSMat Martineau * Returns locked channel. */ 1062d792818SGustavo Padovan static struct l2cap_chan *l2cap_get_chan_by_scid(struct l2cap_conn *conn, 1072d792818SGustavo Padovan u16 cid) 1080a708f8fSGustavo F. Padovan { 10948454079SGustavo F. Padovan struct l2cap_chan *c; 110baa7e1faSGustavo F. Padovan 1113df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 112baa7e1faSGustavo F. Padovan c = __l2cap_get_chan_by_scid(conn, cid); 113ef191adeSMat Martineau if (c) 114ef191adeSMat Martineau l2cap_chan_lock(c); 1153df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 1163df91ea2SAndrei Emeltchenko 11748454079SGustavo F. Padovan return c; 1180a708f8fSGustavo F. Padovan } 1190a708f8fSGustavo F. Padovan 120b1a130b7SMat Martineau /* Find channel with given DCID. 121b1a130b7SMat Martineau * Returns locked channel. 122b1a130b7SMat Martineau */ 123b1a130b7SMat Martineau static struct l2cap_chan *l2cap_get_chan_by_dcid(struct l2cap_conn *conn, 124b1a130b7SMat Martineau u16 cid) 125b1a130b7SMat Martineau { 126b1a130b7SMat Martineau struct l2cap_chan *c; 127b1a130b7SMat Martineau 128b1a130b7SMat Martineau mutex_lock(&conn->chan_lock); 129b1a130b7SMat Martineau c = __l2cap_get_chan_by_dcid(conn, cid); 130b1a130b7SMat Martineau if (c) 131b1a130b7SMat Martineau l2cap_chan_lock(c); 132b1a130b7SMat Martineau mutex_unlock(&conn->chan_lock); 133b1a130b7SMat Martineau 134b1a130b7SMat Martineau return c; 135b1a130b7SMat Martineau } 136b1a130b7SMat Martineau 1372d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_ident(struct l2cap_conn *conn, 1382d792818SGustavo Padovan u8 ident) 1390a708f8fSGustavo F. Padovan { 1403df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 141baa7e1faSGustavo F. Padovan 1423df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 1433df91ea2SAndrei Emeltchenko if (c->ident == ident) 1443df91ea2SAndrei Emeltchenko return c; 1450a708f8fSGustavo F. Padovan } 1463df91ea2SAndrei Emeltchenko return NULL; 147baa7e1faSGustavo F. Padovan } 1480a708f8fSGustavo F. Padovan 1495b155ef9SMat Martineau static struct l2cap_chan *l2cap_get_chan_by_ident(struct l2cap_conn *conn, 1505b155ef9SMat Martineau u8 ident) 1515b155ef9SMat Martineau { 1525b155ef9SMat Martineau struct l2cap_chan *c; 1535b155ef9SMat Martineau 1545b155ef9SMat Martineau mutex_lock(&conn->chan_lock); 1555b155ef9SMat Martineau c = __l2cap_get_chan_by_ident(conn, ident); 1565b155ef9SMat Martineau if (c) 1575b155ef9SMat Martineau l2cap_chan_lock(c); 1585b155ef9SMat Martineau mutex_unlock(&conn->chan_lock); 1595b155ef9SMat Martineau 1605b155ef9SMat Martineau return c; 1615b155ef9SMat Martineau } 1625b155ef9SMat Martineau 16323691d75SGustavo F. Padovan static struct l2cap_chan *__l2cap_global_chan_by_addr(__le16 psm, bdaddr_t *src) 1649e4425ffSGustavo F. Padovan { 16523691d75SGustavo F. Padovan struct l2cap_chan *c; 1669e4425ffSGustavo F. Padovan 16723691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 1687eafc59eSMarcel Holtmann if (c->sport == psm && !bacmp(&c->src, src)) 16923691d75SGustavo F. Padovan return c; 1709e4425ffSGustavo F. Padovan } 171250938cbSSzymon Janc return NULL; 172250938cbSSzymon Janc } 1739e4425ffSGustavo F. Padovan 1749e4425ffSGustavo F. Padovan int l2cap_add_psm(struct l2cap_chan *chan, bdaddr_t *src, __le16 psm) 1759e4425ffSGustavo F. Padovan { 17673b2ec18SGustavo F. Padovan int err; 17773b2ec18SGustavo F. Padovan 178333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 1799e4425ffSGustavo F. Padovan 18023691d75SGustavo F. Padovan if (psm && __l2cap_global_chan_by_addr(psm, src)) { 18173b2ec18SGustavo F. Padovan err = -EADDRINUSE; 18273b2ec18SGustavo F. Padovan goto done; 1839e4425ffSGustavo F. Padovan } 1849e4425ffSGustavo F. Padovan 18573b2ec18SGustavo F. Padovan if (psm) { 1869e4425ffSGustavo F. Padovan chan->psm = psm; 1879e4425ffSGustavo F. Padovan chan->sport = psm; 18873b2ec18SGustavo F. Padovan err = 0; 18973b2ec18SGustavo F. Padovan } else { 19073b2ec18SGustavo F. Padovan u16 p; 1919e4425ffSGustavo F. Padovan 19273b2ec18SGustavo F. Padovan err = -EINVAL; 19373b2ec18SGustavo F. Padovan for (p = 0x1001; p < 0x1100; p += 2) 19423691d75SGustavo F. Padovan if (!__l2cap_global_chan_by_addr(cpu_to_le16(p), src)) { 19573b2ec18SGustavo F. Padovan chan->psm = cpu_to_le16(p); 19673b2ec18SGustavo F. Padovan chan->sport = cpu_to_le16(p); 19773b2ec18SGustavo F. Padovan err = 0; 19873b2ec18SGustavo F. Padovan break; 19973b2ec18SGustavo F. Padovan } 20073b2ec18SGustavo F. Padovan } 20173b2ec18SGustavo F. Padovan 20273b2ec18SGustavo F. Padovan done: 203333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 20473b2ec18SGustavo F. Padovan return err; 2059e4425ffSGustavo F. Padovan } 2066b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_add_psm); 2079e4425ffSGustavo F. Padovan 2089e4425ffSGustavo F. Padovan int l2cap_add_scid(struct l2cap_chan *chan, __u16 scid) 2099e4425ffSGustavo F. Padovan { 210333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 2119e4425ffSGustavo F. Padovan 21214824308SJohan Hedberg /* Override the defaults (which are for conn-oriented) */ 21314824308SJohan Hedberg chan->omtu = L2CAP_DEFAULT_MTU; 21414824308SJohan Hedberg chan->chan_type = L2CAP_CHAN_FIXED; 21514824308SJohan Hedberg 2169e4425ffSGustavo F. Padovan chan->scid = scid; 2179e4425ffSGustavo F. Padovan 218333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 2199e4425ffSGustavo F. Padovan 2209e4425ffSGustavo F. Padovan return 0; 2219e4425ffSGustavo F. Padovan } 2229e4425ffSGustavo F. Padovan 223baa7e1faSGustavo F. Padovan static u16 l2cap_alloc_cid(struct l2cap_conn *conn) 2240a708f8fSGustavo F. Padovan { 225e77af755SJohan Hedberg u16 cid, dyn_end; 2260a708f8fSGustavo F. Padovan 227e77af755SJohan Hedberg if (conn->hcon->type == LE_LINK) 228e77af755SJohan Hedberg dyn_end = L2CAP_CID_LE_DYN_END; 229e77af755SJohan Hedberg else 230e77af755SJohan Hedberg dyn_end = L2CAP_CID_DYN_END; 231e77af755SJohan Hedberg 232e77af755SJohan Hedberg for (cid = L2CAP_CID_DYN_START; cid < dyn_end; cid++) { 233baa7e1faSGustavo F. Padovan if (!__l2cap_get_chan_by_scid(conn, cid)) 2340a708f8fSGustavo F. Padovan return cid; 2350a708f8fSGustavo F. Padovan } 2360a708f8fSGustavo F. Padovan 2370a708f8fSGustavo F. Padovan return 0; 2380a708f8fSGustavo F. Padovan } 2390a708f8fSGustavo F. Padovan 240f93fa273SGustavo Padovan static void l2cap_state_change(struct l2cap_chan *chan, int state) 24189bc500eSGustavo F. Padovan { 24242d2d87cSAndrei Emeltchenko BT_DBG("chan %p %s -> %s", chan, state_to_string(chan->state), 243badaaa00SGustavo F. Padovan state_to_string(state)); 244badaaa00SGustavo F. Padovan 24589bc500eSGustavo F. Padovan chan->state = state; 24653f52121SGustavo Padovan chan->ops->state_change(chan, state, 0); 24789bc500eSGustavo F. Padovan } 24889bc500eSGustavo F. Padovan 249f8e73017SGustavo Padovan static inline void l2cap_state_change_and_error(struct l2cap_chan *chan, 250f8e73017SGustavo Padovan int state, int err) 2512e0052e4SAndrei Emeltchenko { 252f8e73017SGustavo Padovan chan->state = state; 25353f52121SGustavo Padovan chan->ops->state_change(chan, chan->state, err); 2542e0052e4SAndrei Emeltchenko } 2552e0052e4SAndrei Emeltchenko 2562e0052e4SAndrei Emeltchenko static inline void l2cap_chan_set_err(struct l2cap_chan *chan, int err) 2572e0052e4SAndrei Emeltchenko { 258f8e73017SGustavo Padovan chan->ops->state_change(chan, chan->state, err); 2592e0052e4SAndrei Emeltchenko } 2602e0052e4SAndrei Emeltchenko 2614239d16fSMat Martineau static void __set_retrans_timer(struct l2cap_chan *chan) 2624239d16fSMat Martineau { 2634239d16fSMat Martineau if (!delayed_work_pending(&chan->monitor_timer) && 2644239d16fSMat Martineau chan->retrans_timeout) { 2654239d16fSMat Martineau l2cap_set_timer(chan, &chan->retrans_timer, 2664239d16fSMat Martineau msecs_to_jiffies(chan->retrans_timeout)); 2674239d16fSMat Martineau } 2684239d16fSMat Martineau } 2694239d16fSMat Martineau 2704239d16fSMat Martineau static void __set_monitor_timer(struct l2cap_chan *chan) 2714239d16fSMat Martineau { 2724239d16fSMat Martineau __clear_retrans_timer(chan); 2734239d16fSMat Martineau if (chan->monitor_timeout) { 2744239d16fSMat Martineau l2cap_set_timer(chan, &chan->monitor_timer, 2754239d16fSMat Martineau msecs_to_jiffies(chan->monitor_timeout)); 2764239d16fSMat Martineau } 2774239d16fSMat Martineau } 2784239d16fSMat Martineau 279608bcc6dSMat Martineau static struct sk_buff *l2cap_ertm_seq_in_queue(struct sk_buff_head *head, 280608bcc6dSMat Martineau u16 seq) 281608bcc6dSMat Martineau { 282608bcc6dSMat Martineau struct sk_buff *skb; 283608bcc6dSMat Martineau 284608bcc6dSMat Martineau skb_queue_walk(head, skb) { 285608bcc6dSMat Martineau if (bt_cb(skb)->control.txseq == seq) 286608bcc6dSMat Martineau return skb; 287608bcc6dSMat Martineau } 288608bcc6dSMat Martineau 289608bcc6dSMat Martineau return NULL; 290608bcc6dSMat Martineau } 291608bcc6dSMat Martineau 2923c588192SMat Martineau /* ---- L2CAP sequence number lists ---- */ 2933c588192SMat Martineau 2943c588192SMat Martineau /* For ERTM, ordered lists of sequence numbers must be tracked for 2953c588192SMat Martineau * SREJ requests that are received and for frames that are to be 2963c588192SMat Martineau * retransmitted. These seq_list functions implement a singly-linked 2973c588192SMat Martineau * list in an array, where membership in the list can also be checked 2983c588192SMat Martineau * in constant time. Items can also be added to the tail of the list 2993c588192SMat Martineau * and removed from the head in constant time, without further memory 3003c588192SMat Martineau * allocs or frees. 3013c588192SMat Martineau */ 3023c588192SMat Martineau 3033c588192SMat Martineau static int l2cap_seq_list_init(struct l2cap_seq_list *seq_list, u16 size) 3043c588192SMat Martineau { 3053c588192SMat Martineau size_t alloc_size, i; 3063c588192SMat Martineau 3073c588192SMat Martineau /* Allocated size is a power of 2 to map sequence numbers 3083c588192SMat Martineau * (which may be up to 14 bits) in to a smaller array that is 3093c588192SMat Martineau * sized for the negotiated ERTM transmit windows. 3103c588192SMat Martineau */ 3113c588192SMat Martineau alloc_size = roundup_pow_of_two(size); 3123c588192SMat Martineau 3133c588192SMat Martineau seq_list->list = kmalloc(sizeof(u16) * alloc_size, GFP_KERNEL); 3143c588192SMat Martineau if (!seq_list->list) 3153c588192SMat Martineau return -ENOMEM; 3163c588192SMat Martineau 3173c588192SMat Martineau seq_list->mask = alloc_size - 1; 3183c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3193c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3203c588192SMat Martineau for (i = 0; i < alloc_size; i++) 3213c588192SMat Martineau seq_list->list[i] = L2CAP_SEQ_LIST_CLEAR; 3223c588192SMat Martineau 3233c588192SMat Martineau return 0; 3243c588192SMat Martineau } 3253c588192SMat Martineau 3263c588192SMat Martineau static inline void l2cap_seq_list_free(struct l2cap_seq_list *seq_list) 3273c588192SMat Martineau { 3283c588192SMat Martineau kfree(seq_list->list); 3293c588192SMat Martineau } 3303c588192SMat Martineau 3313c588192SMat Martineau static inline bool l2cap_seq_list_contains(struct l2cap_seq_list *seq_list, 3323c588192SMat Martineau u16 seq) 3333c588192SMat Martineau { 3343c588192SMat Martineau /* Constant-time check for list membership */ 3353c588192SMat Martineau return seq_list->list[seq & seq_list->mask] != L2CAP_SEQ_LIST_CLEAR; 3363c588192SMat Martineau } 3373c588192SMat Martineau 33803a0c5d6SJohan Hedberg static inline u16 l2cap_seq_list_pop(struct l2cap_seq_list *seq_list) 3393c588192SMat Martineau { 34003a0c5d6SJohan Hedberg u16 seq = seq_list->head; 3413c588192SMat Martineau u16 mask = seq_list->mask; 3423c588192SMat Martineau 3433c588192SMat Martineau seq_list->head = seq_list->list[seq & mask]; 3443c588192SMat Martineau seq_list->list[seq & mask] = L2CAP_SEQ_LIST_CLEAR; 3453c588192SMat Martineau 3463c588192SMat Martineau if (seq_list->head == L2CAP_SEQ_LIST_TAIL) { 3473c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3483c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3493c588192SMat Martineau } 3503c588192SMat Martineau 3513c588192SMat Martineau return seq; 3523c588192SMat Martineau } 3533c588192SMat Martineau 3543c588192SMat Martineau static void l2cap_seq_list_clear(struct l2cap_seq_list *seq_list) 3553c588192SMat Martineau { 3563c588192SMat Martineau u16 i; 357f522ae36SGustavo Padovan 358f522ae36SGustavo Padovan if (seq_list->head == L2CAP_SEQ_LIST_CLEAR) 359f522ae36SGustavo Padovan return; 360f522ae36SGustavo Padovan 3613c588192SMat Martineau for (i = 0; i <= seq_list->mask; i++) 3623c588192SMat Martineau seq_list->list[i] = L2CAP_SEQ_LIST_CLEAR; 3633c588192SMat Martineau 3643c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3653c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3663c588192SMat Martineau } 3673c588192SMat Martineau 3683c588192SMat Martineau static void l2cap_seq_list_append(struct l2cap_seq_list *seq_list, u16 seq) 3693c588192SMat Martineau { 3703c588192SMat Martineau u16 mask = seq_list->mask; 3713c588192SMat Martineau 3723c588192SMat Martineau /* All appends happen in constant time */ 3733c588192SMat Martineau 374f522ae36SGustavo Padovan if (seq_list->list[seq & mask] != L2CAP_SEQ_LIST_CLEAR) 375f522ae36SGustavo Padovan return; 376f522ae36SGustavo Padovan 3773c588192SMat Martineau if (seq_list->tail == L2CAP_SEQ_LIST_CLEAR) 3783c588192SMat Martineau seq_list->head = seq; 3793c588192SMat Martineau else 3803c588192SMat Martineau seq_list->list[seq_list->tail & mask] = seq; 3813c588192SMat Martineau 3823c588192SMat Martineau seq_list->tail = seq; 3833c588192SMat Martineau seq_list->list[seq & mask] = L2CAP_SEQ_LIST_TAIL; 3843c588192SMat Martineau } 3853c588192SMat Martineau 386721c4181SGustavo F. Padovan static void l2cap_chan_timeout(struct work_struct *work) 387ab07801dSGustavo F. Padovan { 388721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 389721c4181SGustavo F. Padovan chan_timer.work); 3903df91ea2SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 391ab07801dSGustavo F. Padovan int reason; 392ab07801dSGustavo F. Padovan 393e05dcc32SAndrei Emeltchenko BT_DBG("chan %p state %s", chan, state_to_string(chan->state)); 394ab07801dSGustavo F. Padovan 3953df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 3966be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 397ab07801dSGustavo F. Padovan 39889bc500eSGustavo F. Padovan if (chan->state == BT_CONNECTED || chan->state == BT_CONFIG) 399ab07801dSGustavo F. Padovan reason = ECONNREFUSED; 40089bc500eSGustavo F. Padovan else if (chan->state == BT_CONNECT && 401ab07801dSGustavo F. Padovan chan->sec_level != BT_SECURITY_SDP) 402ab07801dSGustavo F. Padovan reason = ECONNREFUSED; 403ab07801dSGustavo F. Padovan else 404ab07801dSGustavo F. Padovan reason = ETIMEDOUT; 405ab07801dSGustavo F. Padovan 4060f852724SGustavo F. Padovan l2cap_chan_close(chan, reason); 407ab07801dSGustavo F. Padovan 4086be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 409ab07801dSGustavo F. Padovan 41080b98027SGustavo Padovan chan->ops->close(chan); 4113df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 4123df91ea2SAndrei Emeltchenko 413371fd835SUlisses Furquim l2cap_chan_put(chan); 414ab07801dSGustavo F. Padovan } 415ab07801dSGustavo F. Padovan 416eef1d9b6SGustavo Padovan struct l2cap_chan *l2cap_chan_create(void) 4170a708f8fSGustavo F. Padovan { 41848454079SGustavo F. Padovan struct l2cap_chan *chan; 4190a708f8fSGustavo F. Padovan 42048454079SGustavo F. Padovan chan = kzalloc(sizeof(*chan), GFP_ATOMIC); 42148454079SGustavo F. Padovan if (!chan) 42248454079SGustavo F. Padovan return NULL; 4230a708f8fSGustavo F. Padovan 424c03b355eSAndrei Emeltchenko mutex_init(&chan->lock); 425c03b355eSAndrei Emeltchenko 426ff714119SJohan Hedberg /* Set default lock nesting level */ 427ff714119SJohan Hedberg atomic_set(&chan->nesting, L2CAP_NESTING_NORMAL); 428ff714119SJohan Hedberg 429333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 43023691d75SGustavo F. Padovan list_add(&chan->global_l, &chan_list); 431333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 43223691d75SGustavo F. Padovan 433721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->chan_timer, l2cap_chan_timeout); 434ab07801dSGustavo F. Padovan 43589bc500eSGustavo F. Padovan chan->state = BT_OPEN; 43689bc500eSGustavo F. Padovan 437144ad330SSyam Sidhardhan kref_init(&chan->kref); 43871ba0e56SGustavo F. Padovan 4392827011fSMat Martineau /* This flag is cleared in l2cap_chan_ready() */ 4402827011fSMat Martineau set_bit(CONF_NOT_COMPLETE, &chan->conf_state); 4412827011fSMat Martineau 442eef1d9b6SGustavo Padovan BT_DBG("chan %p", chan); 443abc545b8SSzymon Janc 44448454079SGustavo F. Padovan return chan; 4450a708f8fSGustavo F. Padovan } 4466b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_create); 4470a708f8fSGustavo F. Padovan 448144ad330SSyam Sidhardhan static void l2cap_chan_destroy(struct kref *kref) 4496ff5abbfSGustavo F. Padovan { 450144ad330SSyam Sidhardhan struct l2cap_chan *chan = container_of(kref, struct l2cap_chan, kref); 451144ad330SSyam Sidhardhan 4524af66c69SJaganath Kanakkassery BT_DBG("chan %p", chan); 4534af66c69SJaganath Kanakkassery 454333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 45523691d75SGustavo F. Padovan list_del(&chan->global_l); 456333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 45723691d75SGustavo F. Padovan 4584af66c69SJaganath Kanakkassery kfree(chan); 4596ff5abbfSGustavo F. Padovan } 4606ff5abbfSGustavo F. Padovan 46130648372SJaganath Kanakkassery void l2cap_chan_hold(struct l2cap_chan *c) 46230648372SJaganath Kanakkassery { 463144ad330SSyam Sidhardhan BT_DBG("chan %p orig refcnt %d", c, atomic_read(&c->kref.refcount)); 46430648372SJaganath Kanakkassery 465144ad330SSyam Sidhardhan kref_get(&c->kref); 46630648372SJaganath Kanakkassery } 46730648372SJaganath Kanakkassery 46830648372SJaganath Kanakkassery void l2cap_chan_put(struct l2cap_chan *c) 46930648372SJaganath Kanakkassery { 470144ad330SSyam Sidhardhan BT_DBG("chan %p orig refcnt %d", c, atomic_read(&c->kref.refcount)); 47130648372SJaganath Kanakkassery 472144ad330SSyam Sidhardhan kref_put(&c->kref, l2cap_chan_destroy); 47330648372SJaganath Kanakkassery } 4746b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_put); 47530648372SJaganath Kanakkassery 476bd4b1653SAndrei Emeltchenko void l2cap_chan_set_defaults(struct l2cap_chan *chan) 477bd4b1653SAndrei Emeltchenko { 478bd4b1653SAndrei Emeltchenko chan->fcs = L2CAP_FCS_CRC16; 479bd4b1653SAndrei Emeltchenko chan->max_tx = L2CAP_DEFAULT_MAX_TX; 480bd4b1653SAndrei Emeltchenko chan->tx_win = L2CAP_DEFAULT_TX_WINDOW; 481bd4b1653SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_TX_WINDOW; 4826a5e8165SJukka Rissanen chan->remote_max_tx = chan->max_tx; 4836a5e8165SJukka Rissanen chan->remote_tx_win = chan->tx_win; 484c20f8e35SMat Martineau chan->ack_win = L2CAP_DEFAULT_TX_WINDOW; 485bd4b1653SAndrei Emeltchenko chan->sec_level = BT_SECURITY_LOW; 4866a5e8165SJukka Rissanen chan->flush_to = L2CAP_DEFAULT_FLUSH_TO; 4876a5e8165SJukka Rissanen chan->retrans_timeout = L2CAP_DEFAULT_RETRANS_TO; 4886a5e8165SJukka Rissanen chan->monitor_timeout = L2CAP_DEFAULT_MONITOR_TO; 4896a5e8165SJukka Rissanen chan->conf_state = 0; 490bd4b1653SAndrei Emeltchenko 491bd4b1653SAndrei Emeltchenko set_bit(FLAG_FORCE_ACTIVE, &chan->flags); 492bd4b1653SAndrei Emeltchenko } 4936b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_set_defaults); 494bd4b1653SAndrei Emeltchenko 4950ce43ce6SJohan Hedberg static void l2cap_le_flowctl_init(struct l2cap_chan *chan) 49638319713SJohan Hedberg { 4970ce43ce6SJohan Hedberg chan->sdu = NULL; 4980ce43ce6SJohan Hedberg chan->sdu_last_frag = NULL; 4990ce43ce6SJohan Hedberg chan->sdu_len = 0; 5000cd75f7eSJohan Hedberg chan->tx_credits = 0; 501f15b8ecfSJohan Hedberg chan->rx_credits = le_max_credits; 502d1d79413SJohan Hedberg chan->mps = min_t(u16, chan->imtu, le_default_mps); 5030ce43ce6SJohan Hedberg 5040ce43ce6SJohan Hedberg skb_queue_head_init(&chan->tx_q); 50538319713SJohan Hedberg } 50638319713SJohan Hedberg 50793c3e8f5SAndrei Emeltchenko void __l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan) 5080a708f8fSGustavo F. Padovan { 5090a708f8fSGustavo F. Padovan BT_DBG("conn %p, psm 0x%2.2x, dcid 0x%4.4x", conn, 510097db76cSAndrei Emeltchenko __le16_to_cpu(chan->psm), chan->dcid); 5110a708f8fSGustavo F. Padovan 5129f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_REMOTE_USER_TERM; 5130a708f8fSGustavo F. Padovan 5148c1d787bSGustavo F. Padovan chan->conn = conn; 5150a708f8fSGustavo F. Padovan 5165491120eSAndrei Emeltchenko switch (chan->chan_type) { 5175491120eSAndrei Emeltchenko case L2CAP_CHAN_CONN_ORIENTED: 5180a708f8fSGustavo F. Padovan /* Alloc CID for connection-oriented socket */ 519fe4128e0SGustavo F. Padovan chan->scid = l2cap_alloc_cid(conn); 52021626e62SJohan Hedberg if (conn->hcon->type == ACL_LINK) 5210c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 5225491120eSAndrei Emeltchenko break; 5235491120eSAndrei Emeltchenko 5245491120eSAndrei Emeltchenko case L2CAP_CHAN_CONN_LESS: 5250a708f8fSGustavo F. Padovan /* Connectionless socket */ 526fe4128e0SGustavo F. Padovan chan->scid = L2CAP_CID_CONN_LESS; 527fe4128e0SGustavo F. Padovan chan->dcid = L2CAP_CID_CONN_LESS; 5280c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 5295491120eSAndrei Emeltchenko break; 5305491120eSAndrei Emeltchenko 5312338a7e0SJohan Hedberg case L2CAP_CHAN_FIXED: 5322338a7e0SJohan Hedberg /* Caller will set CID and CID specific MTU values */ 533416fa752SAndrei Emeltchenko break; 534416fa752SAndrei Emeltchenko 5355491120eSAndrei Emeltchenko default: 5360a708f8fSGustavo F. Padovan /* Raw socket can send/recv signalling messages only */ 537fe4128e0SGustavo F. Padovan chan->scid = L2CAP_CID_SIGNALING; 538fe4128e0SGustavo F. Padovan chan->dcid = L2CAP_CID_SIGNALING; 5390c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 5400a708f8fSGustavo F. Padovan } 5410a708f8fSGustavo F. Padovan 5428f7975b1SAndrei Emeltchenko chan->local_id = L2CAP_BESTEFFORT_ID; 5438f7975b1SAndrei Emeltchenko chan->local_stype = L2CAP_SERV_BESTEFFORT; 5448f7975b1SAndrei Emeltchenko chan->local_msdu = L2CAP_DEFAULT_MAX_SDU_SIZE; 5458f7975b1SAndrei Emeltchenko chan->local_sdu_itime = L2CAP_DEFAULT_SDU_ITIME; 5468f7975b1SAndrei Emeltchenko chan->local_acc_lat = L2CAP_DEFAULT_ACC_LAT; 5478936fa6dSAndrei Emeltchenko chan->local_flush_to = L2CAP_EFS_DEFAULT_FLUSH_TO; 5488f7975b1SAndrei Emeltchenko 549371fd835SUlisses Furquim l2cap_chan_hold(chan); 550baa7e1faSGustavo F. Padovan 551c16900cfSJohan Hedberg /* Only keep a reference for fixed channels if they requested it */ 552c16900cfSJohan Hedberg if (chan->chan_type != L2CAP_CHAN_FIXED || 553c16900cfSJohan Hedberg test_bit(FLAG_HOLD_HCI_CONN, &chan->flags)) 5545ee9891dSJohan Hedberg hci_conn_hold(conn->hcon); 5555ee9891dSJohan Hedberg 5563df91ea2SAndrei Emeltchenko list_add(&chan->list, &conn->chan_l); 557643162a8SAndrei Emeltchenko } 558643162a8SAndrei Emeltchenko 559466f8004SAndrei Emeltchenko void l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan) 560643162a8SAndrei Emeltchenko { 561643162a8SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 562643162a8SAndrei Emeltchenko __l2cap_chan_add(conn, chan); 5633df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 5640a708f8fSGustavo F. Padovan } 5650a708f8fSGustavo F. Padovan 566466f8004SAndrei Emeltchenko void l2cap_chan_del(struct l2cap_chan *chan, int err) 5670a708f8fSGustavo F. Padovan { 5688c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 5690a708f8fSGustavo F. Padovan 570c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 5710a708f8fSGustavo F. Padovan 57249d11741SJohan Hedberg BT_DBG("chan %p, conn %p, err %d, state %s", chan, conn, err, 57349d11741SJohan Hedberg state_to_string(chan->state)); 5740a708f8fSGustavo F. Padovan 57572847ce0SJohan Hedberg chan->ops->teardown(chan, err); 57672847ce0SJohan Hedberg 5770a708f8fSGustavo F. Padovan if (conn) { 57856f60984SAndrei Emeltchenko struct amp_mgr *mgr = conn->hcon->amp_mgr; 579baa7e1faSGustavo F. Padovan /* Delete from channel list */ 5803df91ea2SAndrei Emeltchenko list_del(&chan->list); 5813d57dc68SGustavo F. Padovan 582371fd835SUlisses Furquim l2cap_chan_put(chan); 583baa7e1faSGustavo F. Padovan 5848c1d787bSGustavo F. Padovan chan->conn = NULL; 5853cabbfdaSAndrei Emeltchenko 586c16900cfSJohan Hedberg /* Reference was only held for non-fixed channels or 587c16900cfSJohan Hedberg * fixed channels that explicitly requested it using the 588c16900cfSJohan Hedberg * FLAG_HOLD_HCI_CONN flag. 589c16900cfSJohan Hedberg */ 590c16900cfSJohan Hedberg if (chan->chan_type != L2CAP_CHAN_FIXED || 591c16900cfSJohan Hedberg test_bit(FLAG_HOLD_HCI_CONN, &chan->flags)) 59276a68ba0SDavid Herrmann hci_conn_drop(conn->hcon); 59356f60984SAndrei Emeltchenko 59456f60984SAndrei Emeltchenko if (mgr && mgr->bredr_chan == chan) 59556f60984SAndrei Emeltchenko mgr->bredr_chan = NULL; 5960a708f8fSGustavo F. Padovan } 5970a708f8fSGustavo F. Padovan 598419e08c1SAndrei Emeltchenko if (chan->hs_hchan) { 599419e08c1SAndrei Emeltchenko struct hci_chan *hs_hchan = chan->hs_hchan; 600419e08c1SAndrei Emeltchenko 601419e08c1SAndrei Emeltchenko BT_DBG("chan %p disconnect hs_hchan %p", chan, hs_hchan); 602419e08c1SAndrei Emeltchenko amp_disconnect_logical_link(hs_hchan); 603419e08c1SAndrei Emeltchenko } 604419e08c1SAndrei Emeltchenko 6052827011fSMat Martineau if (test_bit(CONF_NOT_COMPLETE, &chan->conf_state)) 6066ff5abbfSGustavo F. Padovan return; 6072ead70b8SGustavo F. Padovan 608ee556f66SGustavo Padovan switch(chan->mode) { 609ee556f66SGustavo Padovan case L2CAP_MODE_BASIC: 610ee556f66SGustavo Padovan break; 6110a708f8fSGustavo F. Padovan 61238319713SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 613177f8f2bSJohan Hedberg skb_queue_purge(&chan->tx_q); 61438319713SJohan Hedberg break; 61538319713SJohan Hedberg 616ee556f66SGustavo Padovan case L2CAP_MODE_ERTM: 6171a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 6181a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 6191a09bcb9SGustavo F. Padovan __clear_ack_timer(chan); 6200a708f8fSGustavo F. Padovan 621f1c6775bSGustavo F. Padovan skb_queue_purge(&chan->srej_q); 6220a708f8fSGustavo F. Padovan 6233c588192SMat Martineau l2cap_seq_list_free(&chan->srej_list); 6243c588192SMat Martineau l2cap_seq_list_free(&chan->retrans_list); 625ee556f66SGustavo Padovan 626ee556f66SGustavo Padovan /* fall through */ 627ee556f66SGustavo Padovan 628ee556f66SGustavo Padovan case L2CAP_MODE_STREAMING: 629ee556f66SGustavo Padovan skb_queue_purge(&chan->tx_q); 630ee556f66SGustavo Padovan break; 6310a708f8fSGustavo F. Padovan } 632ee556f66SGustavo Padovan 633ee556f66SGustavo Padovan return; 6340a708f8fSGustavo F. Padovan } 6356b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_del); 6360a708f8fSGustavo F. Padovan 637f3d82d0cSJohan Hedberg static void l2cap_conn_update_id_addr(struct work_struct *work) 638387a33e3SJohan Hedberg { 639f3d82d0cSJohan Hedberg struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 640f3d82d0cSJohan Hedberg id_addr_update_work); 641f3d82d0cSJohan Hedberg struct hci_conn *hcon = conn->hcon; 642387a33e3SJohan Hedberg struct l2cap_chan *chan; 643387a33e3SJohan Hedberg 644387a33e3SJohan Hedberg mutex_lock(&conn->chan_lock); 645387a33e3SJohan Hedberg 646387a33e3SJohan Hedberg list_for_each_entry(chan, &conn->chan_l, list) { 647387a33e3SJohan Hedberg l2cap_chan_lock(chan); 648387a33e3SJohan Hedberg bacpy(&chan->dst, &hcon->dst); 649387a33e3SJohan Hedberg chan->dst_type = bdaddr_type(hcon, hcon->dst_type); 650387a33e3SJohan Hedberg l2cap_chan_unlock(chan); 651387a33e3SJohan Hedberg } 652387a33e3SJohan Hedberg 653387a33e3SJohan Hedberg mutex_unlock(&conn->chan_lock); 654387a33e3SJohan Hedberg } 655387a33e3SJohan Hedberg 65627e2d4c8SJohan Hedberg static void l2cap_chan_le_connect_reject(struct l2cap_chan *chan) 65727e2d4c8SJohan Hedberg { 65827e2d4c8SJohan Hedberg struct l2cap_conn *conn = chan->conn; 65927e2d4c8SJohan Hedberg struct l2cap_le_conn_rsp rsp; 66027e2d4c8SJohan Hedberg u16 result; 66127e2d4c8SJohan Hedberg 66227e2d4c8SJohan Hedberg if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) 66327e2d4c8SJohan Hedberg result = L2CAP_CR_AUTHORIZATION; 66427e2d4c8SJohan Hedberg else 66527e2d4c8SJohan Hedberg result = L2CAP_CR_BAD_PSM; 66627e2d4c8SJohan Hedberg 66727e2d4c8SJohan Hedberg l2cap_state_change(chan, BT_DISCONN); 66827e2d4c8SJohan Hedberg 66927e2d4c8SJohan Hedberg rsp.dcid = cpu_to_le16(chan->scid); 67027e2d4c8SJohan Hedberg rsp.mtu = cpu_to_le16(chan->imtu); 6713916aed8SJohan Hedberg rsp.mps = cpu_to_le16(chan->mps); 6720cd75f7eSJohan Hedberg rsp.credits = cpu_to_le16(chan->rx_credits); 67327e2d4c8SJohan Hedberg rsp.result = cpu_to_le16(result); 67427e2d4c8SJohan Hedberg 67527e2d4c8SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CONN_RSP, sizeof(rsp), 67627e2d4c8SJohan Hedberg &rsp); 67727e2d4c8SJohan Hedberg } 67827e2d4c8SJohan Hedberg 679791d60f7SJohan Hedberg static void l2cap_chan_connect_reject(struct l2cap_chan *chan) 680791d60f7SJohan Hedberg { 681791d60f7SJohan Hedberg struct l2cap_conn *conn = chan->conn; 682791d60f7SJohan Hedberg struct l2cap_conn_rsp rsp; 683791d60f7SJohan Hedberg u16 result; 684791d60f7SJohan Hedberg 685791d60f7SJohan Hedberg if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) 686791d60f7SJohan Hedberg result = L2CAP_CR_SEC_BLOCK; 687791d60f7SJohan Hedberg else 688791d60f7SJohan Hedberg result = L2CAP_CR_BAD_PSM; 689791d60f7SJohan Hedberg 690791d60f7SJohan Hedberg l2cap_state_change(chan, BT_DISCONN); 691791d60f7SJohan Hedberg 692791d60f7SJohan Hedberg rsp.scid = cpu_to_le16(chan->dcid); 693791d60f7SJohan Hedberg rsp.dcid = cpu_to_le16(chan->scid); 694791d60f7SJohan Hedberg rsp.result = cpu_to_le16(result); 695dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 696791d60f7SJohan Hedberg 697791d60f7SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, sizeof(rsp), &rsp); 698791d60f7SJohan Hedberg } 699791d60f7SJohan Hedberg 7000f852724SGustavo F. Padovan void l2cap_chan_close(struct l2cap_chan *chan, int reason) 7014519de9aSGustavo F. Padovan { 7024519de9aSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 7034519de9aSGustavo F. Padovan 7047eafc59eSMarcel Holtmann BT_DBG("chan %p state %s", chan, state_to_string(chan->state)); 7054519de9aSGustavo F. Padovan 70689bc500eSGustavo F. Padovan switch (chan->state) { 7074519de9aSGustavo F. Padovan case BT_LISTEN: 708c0df7f6eSAndrei Emeltchenko chan->ops->teardown(chan, 0); 7094519de9aSGustavo F. Padovan break; 7104519de9aSGustavo F. Padovan 7114519de9aSGustavo F. Padovan case BT_CONNECTED: 7124519de9aSGustavo F. Padovan case BT_CONFIG: 7137b25c9b3SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED) { 7148d836d71SGustavo Padovan __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 7155e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, reason); 7164519de9aSGustavo F. Padovan } else 7174519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 7184519de9aSGustavo F. Padovan break; 7194519de9aSGustavo F. Padovan 7204519de9aSGustavo F. Padovan case BT_CONNECT2: 721791d60f7SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED) { 722791d60f7SJohan Hedberg if (conn->hcon->type == ACL_LINK) 723791d60f7SJohan Hedberg l2cap_chan_connect_reject(chan); 72427e2d4c8SJohan Hedberg else if (conn->hcon->type == LE_LINK) 72527e2d4c8SJohan Hedberg l2cap_chan_le_connect_reject(chan); 7264519de9aSGustavo F. Padovan } 7274519de9aSGustavo F. Padovan 7284519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 7294519de9aSGustavo F. Padovan break; 7304519de9aSGustavo F. Padovan 7314519de9aSGustavo F. Padovan case BT_CONNECT: 7324519de9aSGustavo F. Padovan case BT_DISCONN: 7334519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 7344519de9aSGustavo F. Padovan break; 7354519de9aSGustavo F. Padovan 7364519de9aSGustavo F. Padovan default: 737c0df7f6eSAndrei Emeltchenko chan->ops->teardown(chan, 0); 7384519de9aSGustavo F. Padovan break; 7394519de9aSGustavo F. Padovan } 7404519de9aSGustavo F. Padovan } 7416b8d4a6aSJukka Rissanen EXPORT_SYMBOL(l2cap_chan_close); 7424519de9aSGustavo F. Padovan 7434343478fSGustavo F. Padovan static inline u8 l2cap_get_auth_type(struct l2cap_chan *chan) 7440a708f8fSGustavo F. Padovan { 7456a974b50SMarcel Holtmann switch (chan->chan_type) { 7466a974b50SMarcel Holtmann case L2CAP_CHAN_RAW: 7474343478fSGustavo F. Padovan switch (chan->sec_level) { 7480a708f8fSGustavo F. Padovan case BT_SECURITY_HIGH: 7497d513e92SMarcel Holtmann case BT_SECURITY_FIPS: 7500a708f8fSGustavo F. Padovan return HCI_AT_DEDICATED_BONDING_MITM; 7510a708f8fSGustavo F. Padovan case BT_SECURITY_MEDIUM: 7520a708f8fSGustavo F. Padovan return HCI_AT_DEDICATED_BONDING; 7530a708f8fSGustavo F. Padovan default: 7540a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 7550a708f8fSGustavo F. Padovan } 7566a974b50SMarcel Holtmann break; 7573124b843SMarcel Holtmann case L2CAP_CHAN_CONN_LESS: 758dcf4adbfSJoe Perches if (chan->psm == cpu_to_le16(L2CAP_PSM_3DSP)) { 7593124b843SMarcel Holtmann if (chan->sec_level == BT_SECURITY_LOW) 7603124b843SMarcel Holtmann chan->sec_level = BT_SECURITY_SDP; 7613124b843SMarcel Holtmann } 7627d513e92SMarcel Holtmann if (chan->sec_level == BT_SECURITY_HIGH || 7637d513e92SMarcel Holtmann chan->sec_level == BT_SECURITY_FIPS) 7643124b843SMarcel Holtmann return HCI_AT_NO_BONDING_MITM; 7653124b843SMarcel Holtmann else 7663124b843SMarcel Holtmann return HCI_AT_NO_BONDING; 7673124b843SMarcel Holtmann break; 7686a974b50SMarcel Holtmann case L2CAP_CHAN_CONN_ORIENTED: 769dcf4adbfSJoe Perches if (chan->psm == cpu_to_le16(L2CAP_PSM_SDP)) { 7704343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_LOW) 7714343478fSGustavo F. Padovan chan->sec_level = BT_SECURITY_SDP; 7720a708f8fSGustavo F. Padovan 7737d513e92SMarcel Holtmann if (chan->sec_level == BT_SECURITY_HIGH || 7747d513e92SMarcel Holtmann chan->sec_level == BT_SECURITY_FIPS) 7750a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING_MITM; 7760a708f8fSGustavo F. Padovan else 7770a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 7786a974b50SMarcel Holtmann } 7796a974b50SMarcel Holtmann /* fall through */ 7806a974b50SMarcel Holtmann default: 7814343478fSGustavo F. Padovan switch (chan->sec_level) { 7820a708f8fSGustavo F. Padovan case BT_SECURITY_HIGH: 7837d513e92SMarcel Holtmann case BT_SECURITY_FIPS: 7840a708f8fSGustavo F. Padovan return HCI_AT_GENERAL_BONDING_MITM; 7850a708f8fSGustavo F. Padovan case BT_SECURITY_MEDIUM: 7860a708f8fSGustavo F. Padovan return HCI_AT_GENERAL_BONDING; 7870a708f8fSGustavo F. Padovan default: 7880a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 7890a708f8fSGustavo F. Padovan } 7906a974b50SMarcel Holtmann break; 7910a708f8fSGustavo F. Padovan } 7920a708f8fSGustavo F. Padovan } 7930a708f8fSGustavo F. Padovan 7940a708f8fSGustavo F. Padovan /* Service level security */ 795e7cafc45SJohan Hedberg int l2cap_chan_check_security(struct l2cap_chan *chan, bool initiator) 7960a708f8fSGustavo F. Padovan { 7978c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 7980a708f8fSGustavo F. Padovan __u8 auth_type; 7990a708f8fSGustavo F. Padovan 800a17de2feSJohan Hedberg if (conn->hcon->type == LE_LINK) 801a17de2feSJohan Hedberg return smp_conn_security(conn->hcon, chan->sec_level); 802a17de2feSJohan Hedberg 8034343478fSGustavo F. Padovan auth_type = l2cap_get_auth_type(chan); 8040a708f8fSGustavo F. Padovan 805e7cafc45SJohan Hedberg return hci_conn_security(conn->hcon, chan->sec_level, auth_type, 806e7cafc45SJohan Hedberg initiator); 8070a708f8fSGustavo F. Padovan } 8080a708f8fSGustavo F. Padovan 809b5ad8b7fSJohannes Berg static u8 l2cap_get_ident(struct l2cap_conn *conn) 8100a708f8fSGustavo F. Padovan { 8110a708f8fSGustavo F. Padovan u8 id; 8120a708f8fSGustavo F. Padovan 8130a708f8fSGustavo F. Padovan /* Get next available identificator. 8140a708f8fSGustavo F. Padovan * 1 - 128 are used by kernel. 8150a708f8fSGustavo F. Padovan * 129 - 199 are reserved. 8160a708f8fSGustavo F. Padovan * 200 - 254 are used by utilities like l2ping, etc. 8170a708f8fSGustavo F. Padovan */ 8180a708f8fSGustavo F. Padovan 8195a54e7c8SMarcel Holtmann mutex_lock(&conn->ident_lock); 8200a708f8fSGustavo F. Padovan 8210a708f8fSGustavo F. Padovan if (++conn->tx_ident > 128) 8220a708f8fSGustavo F. Padovan conn->tx_ident = 1; 8230a708f8fSGustavo F. Padovan 8240a708f8fSGustavo F. Padovan id = conn->tx_ident; 8250a708f8fSGustavo F. Padovan 8265a54e7c8SMarcel Holtmann mutex_unlock(&conn->ident_lock); 8270a708f8fSGustavo F. Padovan 8280a708f8fSGustavo F. Padovan return id; 8290a708f8fSGustavo F. Padovan } 8300a708f8fSGustavo F. Padovan 8312d792818SGustavo Padovan static void l2cap_send_cmd(struct l2cap_conn *conn, u8 ident, u8 code, u16 len, 8322d792818SGustavo Padovan void *data) 8330a708f8fSGustavo F. Padovan { 8340a708f8fSGustavo F. Padovan struct sk_buff *skb = l2cap_build_cmd(conn, code, ident, len, data); 8350a708f8fSGustavo F. Padovan u8 flags; 8360a708f8fSGustavo F. Padovan 8370a708f8fSGustavo F. Padovan BT_DBG("code 0x%2.2x", code); 8380a708f8fSGustavo F. Padovan 8390a708f8fSGustavo F. Padovan if (!skb) 8400a708f8fSGustavo F. Padovan return; 8410a708f8fSGustavo F. Padovan 842f6af675eSSteven Walter /* Use NO_FLUSH if supported or we have an LE link (which does 843f6af675eSSteven Walter * not support auto-flushing packets) */ 844f6af675eSSteven Walter if (lmp_no_flush_capable(conn->hcon->hdev) || 845f6af675eSSteven Walter conn->hcon->type == LE_LINK) 8460a708f8fSGustavo F. Padovan flags = ACL_START_NO_FLUSH; 8470a708f8fSGustavo F. Padovan else 8480a708f8fSGustavo F. Padovan flags = ACL_START; 8490a708f8fSGustavo F. Padovan 85014b12d0bSJaikumar Ganesh bt_cb(skb)->force_active = BT_POWER_FORCE_ACTIVE_ON; 8515e59b791SLuiz Augusto von Dentz skb->priority = HCI_PRIO_MAX; 85214b12d0bSJaikumar Ganesh 85373d80debSLuiz Augusto von Dentz hci_send_acl(conn->hchan, skb, flags); 8540a708f8fSGustavo F. Padovan } 8550a708f8fSGustavo F. Padovan 85602b0fbb9SMat Martineau static bool __chan_is_moving(struct l2cap_chan *chan) 85702b0fbb9SMat Martineau { 85802b0fbb9SMat Martineau return chan->move_state != L2CAP_MOVE_STABLE && 85902b0fbb9SMat Martineau chan->move_state != L2CAP_MOVE_WAIT_PREPARE; 86002b0fbb9SMat Martineau } 86102b0fbb9SMat Martineau 86273d80debSLuiz Augusto von Dentz static void l2cap_do_send(struct l2cap_chan *chan, struct sk_buff *skb) 86373d80debSLuiz Augusto von Dentz { 86473d80debSLuiz Augusto von Dentz struct hci_conn *hcon = chan->conn->hcon; 86573d80debSLuiz Augusto von Dentz u16 flags; 86673d80debSLuiz Augusto von Dentz 86773d80debSLuiz Augusto von Dentz BT_DBG("chan %p, skb %p len %d priority %u", chan, skb, skb->len, 86873d80debSLuiz Augusto von Dentz skb->priority); 86973d80debSLuiz Augusto von Dentz 870d5f8a75dSMat Martineau if (chan->hs_hcon && !__chan_is_moving(chan)) { 871d5f8a75dSMat Martineau if (chan->hs_hchan) 872d5f8a75dSMat Martineau hci_send_acl(chan->hs_hchan, skb, ACL_COMPLETE); 873d5f8a75dSMat Martineau else 874d5f8a75dSMat Martineau kfree_skb(skb); 875d5f8a75dSMat Martineau 876d5f8a75dSMat Martineau return; 877d5f8a75dSMat Martineau } 878d5f8a75dSMat Martineau 879f6af675eSSteven Walter /* Use NO_FLUSH for LE links (where this is the only option) or 880f6af675eSSteven Walter * if the BR/EDR link supports it and flushing has not been 881f6af675eSSteven Walter * explicitly requested (through FLAG_FLUSHABLE). 882f6af675eSSteven Walter */ 883f6af675eSSteven Walter if (hcon->type == LE_LINK || 884f6af675eSSteven Walter (!test_bit(FLAG_FLUSHABLE, &chan->flags) && 885f6af675eSSteven Walter lmp_no_flush_capable(hcon->hdev))) 88673d80debSLuiz Augusto von Dentz flags = ACL_START_NO_FLUSH; 88773d80debSLuiz Augusto von Dentz else 88873d80debSLuiz Augusto von Dentz flags = ACL_START; 88973d80debSLuiz Augusto von Dentz 89073d80debSLuiz Augusto von Dentz bt_cb(skb)->force_active = test_bit(FLAG_FORCE_ACTIVE, &chan->flags); 89173d80debSLuiz Augusto von Dentz hci_send_acl(chan->conn->hchan, skb, flags); 8920a708f8fSGustavo F. Padovan } 8930a708f8fSGustavo F. Padovan 894b5c6aaedSMat Martineau static void __unpack_enhanced_control(u16 enh, struct l2cap_ctrl *control) 895b5c6aaedSMat Martineau { 896b5c6aaedSMat Martineau control->reqseq = (enh & L2CAP_CTRL_REQSEQ) >> L2CAP_CTRL_REQSEQ_SHIFT; 897b5c6aaedSMat Martineau control->final = (enh & L2CAP_CTRL_FINAL) >> L2CAP_CTRL_FINAL_SHIFT; 898b5c6aaedSMat Martineau 899b5c6aaedSMat Martineau if (enh & L2CAP_CTRL_FRAME_TYPE) { 900b5c6aaedSMat Martineau /* S-Frame */ 901b5c6aaedSMat Martineau control->sframe = 1; 902b5c6aaedSMat Martineau control->poll = (enh & L2CAP_CTRL_POLL) >> L2CAP_CTRL_POLL_SHIFT; 903b5c6aaedSMat Martineau control->super = (enh & L2CAP_CTRL_SUPERVISE) >> L2CAP_CTRL_SUPER_SHIFT; 904b5c6aaedSMat Martineau 905b5c6aaedSMat Martineau control->sar = 0; 906b5c6aaedSMat Martineau control->txseq = 0; 907b5c6aaedSMat Martineau } else { 908b5c6aaedSMat Martineau /* I-Frame */ 909b5c6aaedSMat Martineau control->sframe = 0; 910b5c6aaedSMat Martineau control->sar = (enh & L2CAP_CTRL_SAR) >> L2CAP_CTRL_SAR_SHIFT; 911b5c6aaedSMat Martineau control->txseq = (enh & L2CAP_CTRL_TXSEQ) >> L2CAP_CTRL_TXSEQ_SHIFT; 912b5c6aaedSMat Martineau 913b5c6aaedSMat Martineau control->poll = 0; 914b5c6aaedSMat Martineau control->super = 0; 915b5c6aaedSMat Martineau } 916b5c6aaedSMat Martineau } 917b5c6aaedSMat Martineau 918b5c6aaedSMat Martineau static void __unpack_extended_control(u32 ext, struct l2cap_ctrl *control) 919b5c6aaedSMat Martineau { 920b5c6aaedSMat Martineau control->reqseq = (ext & L2CAP_EXT_CTRL_REQSEQ) >> L2CAP_EXT_CTRL_REQSEQ_SHIFT; 921b5c6aaedSMat Martineau control->final = (ext & L2CAP_EXT_CTRL_FINAL) >> L2CAP_EXT_CTRL_FINAL_SHIFT; 922b5c6aaedSMat Martineau 923b5c6aaedSMat Martineau if (ext & L2CAP_EXT_CTRL_FRAME_TYPE) { 924b5c6aaedSMat Martineau /* S-Frame */ 925b5c6aaedSMat Martineau control->sframe = 1; 926b5c6aaedSMat Martineau control->poll = (ext & L2CAP_EXT_CTRL_POLL) >> L2CAP_EXT_CTRL_POLL_SHIFT; 927b5c6aaedSMat Martineau control->super = (ext & L2CAP_EXT_CTRL_SUPERVISE) >> L2CAP_EXT_CTRL_SUPER_SHIFT; 928b5c6aaedSMat Martineau 929b5c6aaedSMat Martineau control->sar = 0; 930b5c6aaedSMat Martineau control->txseq = 0; 931b5c6aaedSMat Martineau } else { 932b5c6aaedSMat Martineau /* I-Frame */ 933b5c6aaedSMat Martineau control->sframe = 0; 934b5c6aaedSMat Martineau control->sar = (ext & L2CAP_EXT_CTRL_SAR) >> L2CAP_EXT_CTRL_SAR_SHIFT; 935b5c6aaedSMat Martineau control->txseq = (ext & L2CAP_EXT_CTRL_TXSEQ) >> L2CAP_EXT_CTRL_TXSEQ_SHIFT; 936b5c6aaedSMat Martineau 937b5c6aaedSMat Martineau control->poll = 0; 938b5c6aaedSMat Martineau control->super = 0; 939b5c6aaedSMat Martineau } 940b5c6aaedSMat Martineau } 941b5c6aaedSMat Martineau 942b5c6aaedSMat Martineau static inline void __unpack_control(struct l2cap_chan *chan, 943b5c6aaedSMat Martineau struct sk_buff *skb) 944b5c6aaedSMat Martineau { 945b5c6aaedSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 946b5c6aaedSMat Martineau __unpack_extended_control(get_unaligned_le32(skb->data), 947b5c6aaedSMat Martineau &bt_cb(skb)->control); 948cec8ab6eSMat Martineau skb_pull(skb, L2CAP_EXT_CTRL_SIZE); 949b5c6aaedSMat Martineau } else { 950b5c6aaedSMat Martineau __unpack_enhanced_control(get_unaligned_le16(skb->data), 951b5c6aaedSMat Martineau &bt_cb(skb)->control); 952cec8ab6eSMat Martineau skb_pull(skb, L2CAP_ENH_CTRL_SIZE); 953b5c6aaedSMat Martineau } 954b5c6aaedSMat Martineau } 955b5c6aaedSMat Martineau 956b5c6aaedSMat Martineau static u32 __pack_extended_control(struct l2cap_ctrl *control) 957b5c6aaedSMat Martineau { 958b5c6aaedSMat Martineau u32 packed; 959b5c6aaedSMat Martineau 960b5c6aaedSMat Martineau packed = control->reqseq << L2CAP_EXT_CTRL_REQSEQ_SHIFT; 961b5c6aaedSMat Martineau packed |= control->final << L2CAP_EXT_CTRL_FINAL_SHIFT; 962b5c6aaedSMat Martineau 963b5c6aaedSMat Martineau if (control->sframe) { 964b5c6aaedSMat Martineau packed |= control->poll << L2CAP_EXT_CTRL_POLL_SHIFT; 965b5c6aaedSMat Martineau packed |= control->super << L2CAP_EXT_CTRL_SUPER_SHIFT; 966b5c6aaedSMat Martineau packed |= L2CAP_EXT_CTRL_FRAME_TYPE; 967b5c6aaedSMat Martineau } else { 968b5c6aaedSMat Martineau packed |= control->sar << L2CAP_EXT_CTRL_SAR_SHIFT; 969b5c6aaedSMat Martineau packed |= control->txseq << L2CAP_EXT_CTRL_TXSEQ_SHIFT; 970b5c6aaedSMat Martineau } 971b5c6aaedSMat Martineau 972b5c6aaedSMat Martineau return packed; 973b5c6aaedSMat Martineau } 974b5c6aaedSMat Martineau 975b5c6aaedSMat Martineau static u16 __pack_enhanced_control(struct l2cap_ctrl *control) 976b5c6aaedSMat Martineau { 977b5c6aaedSMat Martineau u16 packed; 978b5c6aaedSMat Martineau 979b5c6aaedSMat Martineau packed = control->reqseq << L2CAP_CTRL_REQSEQ_SHIFT; 980b5c6aaedSMat Martineau packed |= control->final << L2CAP_CTRL_FINAL_SHIFT; 981b5c6aaedSMat Martineau 982b5c6aaedSMat Martineau if (control->sframe) { 983b5c6aaedSMat Martineau packed |= control->poll << L2CAP_CTRL_POLL_SHIFT; 984b5c6aaedSMat Martineau packed |= control->super << L2CAP_CTRL_SUPER_SHIFT; 985b5c6aaedSMat Martineau packed |= L2CAP_CTRL_FRAME_TYPE; 986b5c6aaedSMat Martineau } else { 987b5c6aaedSMat Martineau packed |= control->sar << L2CAP_CTRL_SAR_SHIFT; 988b5c6aaedSMat Martineau packed |= control->txseq << L2CAP_CTRL_TXSEQ_SHIFT; 989b5c6aaedSMat Martineau } 990b5c6aaedSMat Martineau 991b5c6aaedSMat Martineau return packed; 992b5c6aaedSMat Martineau } 993b5c6aaedSMat Martineau 994b5c6aaedSMat Martineau static inline void __pack_control(struct l2cap_chan *chan, 995b5c6aaedSMat Martineau struct l2cap_ctrl *control, 996b5c6aaedSMat Martineau struct sk_buff *skb) 997b5c6aaedSMat Martineau { 998b5c6aaedSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 999b5c6aaedSMat Martineau put_unaligned_le32(__pack_extended_control(control), 1000b5c6aaedSMat Martineau skb->data + L2CAP_HDR_SIZE); 1001b5c6aaedSMat Martineau } else { 1002b5c6aaedSMat Martineau put_unaligned_le16(__pack_enhanced_control(control), 1003b5c6aaedSMat Martineau skb->data + L2CAP_HDR_SIZE); 1004b5c6aaedSMat Martineau } 1005b5c6aaedSMat Martineau } 1006b5c6aaedSMat Martineau 1007ba7aa64fSGustavo Padovan static inline unsigned int __ertm_hdr_size(struct l2cap_chan *chan) 1008ba7aa64fSGustavo Padovan { 1009ba7aa64fSGustavo Padovan if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 1010ba7aa64fSGustavo Padovan return L2CAP_EXT_HDR_SIZE; 1011ba7aa64fSGustavo Padovan else 1012ba7aa64fSGustavo Padovan return L2CAP_ENH_HDR_SIZE; 1013ba7aa64fSGustavo Padovan } 1014ba7aa64fSGustavo Padovan 1015a67d7f6fSMat Martineau static struct sk_buff *l2cap_create_sframe_pdu(struct l2cap_chan *chan, 1016a67d7f6fSMat Martineau u32 control) 10170a708f8fSGustavo F. Padovan { 10180a708f8fSGustavo F. Padovan struct sk_buff *skb; 10190a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 1020ba7aa64fSGustavo Padovan int hlen = __ertm_hdr_size(chan); 10210a708f8fSGustavo F. Padovan 10220a708f8fSGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 102303a51213SAndrei Emeltchenko hlen += L2CAP_FCS_SIZE; 10240a708f8fSGustavo F. Padovan 1025a67d7f6fSMat Martineau skb = bt_skb_alloc(hlen, GFP_KERNEL); 10260a708f8fSGustavo F. Padovan 10270a708f8fSGustavo F. Padovan if (!skb) 1028a67d7f6fSMat Martineau return ERR_PTR(-ENOMEM); 10290a708f8fSGustavo F. Padovan 10300a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 10310a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(hlen - L2CAP_HDR_SIZE); 1032fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 103388843ab0SAndrei Emeltchenko 1034a67d7f6fSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 1035a67d7f6fSMat Martineau put_unaligned_le32(control, skb_put(skb, L2CAP_EXT_CTRL_SIZE)); 1036a67d7f6fSMat Martineau else 1037a67d7f6fSMat Martineau put_unaligned_le16(control, skb_put(skb, L2CAP_ENH_CTRL_SIZE)); 10380a708f8fSGustavo F. Padovan 103947d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 1040a67d7f6fSMat Martineau u16 fcs = crc16(0, (u8 *)skb->data, skb->len); 104103a51213SAndrei Emeltchenko put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 10420a708f8fSGustavo F. Padovan } 10430a708f8fSGustavo F. Padovan 104473d80debSLuiz Augusto von Dentz skb->priority = HCI_PRIO_MAX; 1045a67d7f6fSMat Martineau return skb; 1046a67d7f6fSMat Martineau } 1047a67d7f6fSMat Martineau 1048a67d7f6fSMat Martineau static void l2cap_send_sframe(struct l2cap_chan *chan, 1049a67d7f6fSMat Martineau struct l2cap_ctrl *control) 1050a67d7f6fSMat Martineau { 1051a67d7f6fSMat Martineau struct sk_buff *skb; 1052a67d7f6fSMat Martineau u32 control_field; 1053a67d7f6fSMat Martineau 1054a67d7f6fSMat Martineau BT_DBG("chan %p, control %p", chan, control); 1055a67d7f6fSMat Martineau 1056a67d7f6fSMat Martineau if (!control->sframe) 1057a67d7f6fSMat Martineau return; 1058a67d7f6fSMat Martineau 1059b99e13adSMat Martineau if (__chan_is_moving(chan)) 1060b99e13adSMat Martineau return; 1061b99e13adSMat Martineau 1062a67d7f6fSMat Martineau if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state) && 1063a67d7f6fSMat Martineau !control->poll) 1064a67d7f6fSMat Martineau control->final = 1; 1065a67d7f6fSMat Martineau 1066a67d7f6fSMat Martineau if (control->super == L2CAP_SUPER_RR) 1067a67d7f6fSMat Martineau clear_bit(CONN_RNR_SENT, &chan->conn_state); 1068a67d7f6fSMat Martineau else if (control->super == L2CAP_SUPER_RNR) 1069a67d7f6fSMat Martineau set_bit(CONN_RNR_SENT, &chan->conn_state); 1070a67d7f6fSMat Martineau 1071a67d7f6fSMat Martineau if (control->super != L2CAP_SUPER_SREJ) { 1072a67d7f6fSMat Martineau chan->last_acked_seq = control->reqseq; 1073a67d7f6fSMat Martineau __clear_ack_timer(chan); 1074a67d7f6fSMat Martineau } 1075a67d7f6fSMat Martineau 1076a67d7f6fSMat Martineau BT_DBG("reqseq %d, final %d, poll %d, super %d", control->reqseq, 1077a67d7f6fSMat Martineau control->final, control->poll, control->super); 1078a67d7f6fSMat Martineau 1079a67d7f6fSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 1080a67d7f6fSMat Martineau control_field = __pack_extended_control(control); 1081a67d7f6fSMat Martineau else 1082a67d7f6fSMat Martineau control_field = __pack_enhanced_control(control); 1083a67d7f6fSMat Martineau 1084a67d7f6fSMat Martineau skb = l2cap_create_sframe_pdu(chan, control_field); 1085a67d7f6fSMat Martineau if (!IS_ERR(skb)) 108673d80debSLuiz Augusto von Dentz l2cap_do_send(chan, skb); 10870a708f8fSGustavo F. Padovan } 10880a708f8fSGustavo F. Padovan 1089c9e3d5e0SMat Martineau static void l2cap_send_rr_or_rnr(struct l2cap_chan *chan, bool poll) 10900a708f8fSGustavo F. Padovan { 1091c9e3d5e0SMat Martineau struct l2cap_ctrl control; 10920a708f8fSGustavo F. Padovan 1093c9e3d5e0SMat Martineau BT_DBG("chan %p, poll %d", chan, poll); 1094c9e3d5e0SMat Martineau 1095c9e3d5e0SMat Martineau memset(&control, 0, sizeof(control)); 1096c9e3d5e0SMat Martineau control.sframe = 1; 1097c9e3d5e0SMat Martineau control.poll = poll; 1098c9e3d5e0SMat Martineau 1099c9e3d5e0SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) 1100c9e3d5e0SMat Martineau control.super = L2CAP_SUPER_RNR; 1101c9e3d5e0SMat Martineau else 1102c9e3d5e0SMat Martineau control.super = L2CAP_SUPER_RR; 1103c9e3d5e0SMat Martineau 1104c9e3d5e0SMat Martineau control.reqseq = chan->buffer_seq; 1105c9e3d5e0SMat Martineau l2cap_send_sframe(chan, &control); 11060a708f8fSGustavo F. Padovan } 11070a708f8fSGustavo F. Padovan 1108b4450035SGustavo F. Padovan static inline int __l2cap_no_conn_pending(struct l2cap_chan *chan) 11090a708f8fSGustavo F. Padovan { 11105ff6f34dSJohan Hedberg if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) 11115ff6f34dSJohan Hedberg return true; 11125ff6f34dSJohan Hedberg 1113c1360a1cSGustavo F. Padovan return !test_bit(CONF_CONNECT_PEND, &chan->conf_state); 11140a708f8fSGustavo F. Padovan } 11150a708f8fSGustavo F. Padovan 111693c3e8f5SAndrei Emeltchenko static bool __amp_capable(struct l2cap_chan *chan) 111793c3e8f5SAndrei Emeltchenko { 111893c3e8f5SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 11191df7b17aSMarcel Holtmann struct hci_dev *hdev; 11201df7b17aSMarcel Holtmann bool amp_available = false; 112193c3e8f5SAndrei Emeltchenko 1122*0bd49fc7SJohan Hedberg if (!(conn->local_fixed_chan & L2CAP_FC_A2MP)) 11231df7b17aSMarcel Holtmann return false; 11241df7b17aSMarcel Holtmann 1125*0bd49fc7SJohan Hedberg if (!(conn->remote_fixed_chan & L2CAP_FC_A2MP)) 11261df7b17aSMarcel Holtmann return false; 11271df7b17aSMarcel Holtmann 11281df7b17aSMarcel Holtmann read_lock(&hci_dev_list_lock); 11291df7b17aSMarcel Holtmann list_for_each_entry(hdev, &hci_dev_list, list) { 11301df7b17aSMarcel Holtmann if (hdev->amp_type != AMP_TYPE_BREDR && 11311df7b17aSMarcel Holtmann test_bit(HCI_UP, &hdev->flags)) { 11321df7b17aSMarcel Holtmann amp_available = true; 11331df7b17aSMarcel Holtmann break; 11341df7b17aSMarcel Holtmann } 11351df7b17aSMarcel Holtmann } 11361df7b17aSMarcel Holtmann read_unlock(&hci_dev_list_lock); 11371df7b17aSMarcel Holtmann 11381df7b17aSMarcel Holtmann if (chan->chan_policy == BT_CHANNEL_POLICY_AMP_PREFERRED) 11391df7b17aSMarcel Holtmann return amp_available; 1140848566b3SMarcel Holtmann 114193c3e8f5SAndrei Emeltchenko return false; 114293c3e8f5SAndrei Emeltchenko } 114393c3e8f5SAndrei Emeltchenko 11445ce66b59SAndrei Emeltchenko static bool l2cap_check_efs(struct l2cap_chan *chan) 11455ce66b59SAndrei Emeltchenko { 11465ce66b59SAndrei Emeltchenko /* Check EFS parameters */ 11475ce66b59SAndrei Emeltchenko return true; 11485ce66b59SAndrei Emeltchenko } 11495ce66b59SAndrei Emeltchenko 11502766be48SAndrei Emeltchenko void l2cap_send_conn_req(struct l2cap_chan *chan) 11519b27f350SAndrei Emeltchenko { 11529b27f350SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 11539b27f350SAndrei Emeltchenko struct l2cap_conn_req req; 11549b27f350SAndrei Emeltchenko 11559b27f350SAndrei Emeltchenko req.scid = cpu_to_le16(chan->scid); 11569b27f350SAndrei Emeltchenko req.psm = chan->psm; 11579b27f350SAndrei Emeltchenko 11589b27f350SAndrei Emeltchenko chan->ident = l2cap_get_ident(conn); 11599b27f350SAndrei Emeltchenko 11609b27f350SAndrei Emeltchenko set_bit(CONF_CONNECT_PEND, &chan->conf_state); 11619b27f350SAndrei Emeltchenko 11629b27f350SAndrei Emeltchenko l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_REQ, sizeof(req), &req); 11639b27f350SAndrei Emeltchenko } 11649b27f350SAndrei Emeltchenko 11658eb200bdSMat Martineau static void l2cap_send_create_chan_req(struct l2cap_chan *chan, u8 amp_id) 11668eb200bdSMat Martineau { 11678eb200bdSMat Martineau struct l2cap_create_chan_req req; 11688eb200bdSMat Martineau req.scid = cpu_to_le16(chan->scid); 11698eb200bdSMat Martineau req.psm = chan->psm; 11708eb200bdSMat Martineau req.amp_id = amp_id; 11718eb200bdSMat Martineau 11728eb200bdSMat Martineau chan->ident = l2cap_get_ident(chan->conn); 11738eb200bdSMat Martineau 11748eb200bdSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_CREATE_CHAN_REQ, 11758eb200bdSMat Martineau sizeof(req), &req); 11768eb200bdSMat Martineau } 11778eb200bdSMat Martineau 117802b0fbb9SMat Martineau static void l2cap_move_setup(struct l2cap_chan *chan) 117902b0fbb9SMat Martineau { 118002b0fbb9SMat Martineau struct sk_buff *skb; 118102b0fbb9SMat Martineau 118202b0fbb9SMat Martineau BT_DBG("chan %p", chan); 118302b0fbb9SMat Martineau 118402b0fbb9SMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 118502b0fbb9SMat Martineau return; 118602b0fbb9SMat Martineau 118702b0fbb9SMat Martineau __clear_retrans_timer(chan); 118802b0fbb9SMat Martineau __clear_monitor_timer(chan); 118902b0fbb9SMat Martineau __clear_ack_timer(chan); 119002b0fbb9SMat Martineau 119102b0fbb9SMat Martineau chan->retry_count = 0; 119202b0fbb9SMat Martineau skb_queue_walk(&chan->tx_q, skb) { 119302b0fbb9SMat Martineau if (bt_cb(skb)->control.retries) 119402b0fbb9SMat Martineau bt_cb(skb)->control.retries = 1; 119502b0fbb9SMat Martineau else 119602b0fbb9SMat Martineau break; 119702b0fbb9SMat Martineau } 119802b0fbb9SMat Martineau 119902b0fbb9SMat Martineau chan->expected_tx_seq = chan->buffer_seq; 120002b0fbb9SMat Martineau 120102b0fbb9SMat Martineau clear_bit(CONN_REJ_ACT, &chan->conn_state); 120202b0fbb9SMat Martineau clear_bit(CONN_SREJ_ACT, &chan->conn_state); 120302b0fbb9SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 120402b0fbb9SMat Martineau l2cap_seq_list_clear(&chan->srej_list); 120502b0fbb9SMat Martineau skb_queue_purge(&chan->srej_q); 120602b0fbb9SMat Martineau 120702b0fbb9SMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 120802b0fbb9SMat Martineau chan->rx_state = L2CAP_RX_STATE_MOVE; 120902b0fbb9SMat Martineau 121002b0fbb9SMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 121102b0fbb9SMat Martineau } 121202b0fbb9SMat Martineau 12135f3847a4SMat Martineau static void l2cap_move_done(struct l2cap_chan *chan) 12145f3847a4SMat Martineau { 12155f3847a4SMat Martineau u8 move_role = chan->move_role; 12165f3847a4SMat Martineau BT_DBG("chan %p", chan); 12175f3847a4SMat Martineau 12185f3847a4SMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 12195f3847a4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 12205f3847a4SMat Martineau 12215f3847a4SMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 12225f3847a4SMat Martineau return; 12235f3847a4SMat Martineau 12245f3847a4SMat Martineau switch (move_role) { 12255f3847a4SMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 12265f3847a4SMat Martineau l2cap_tx(chan, NULL, NULL, L2CAP_EV_EXPLICIT_POLL); 12275f3847a4SMat Martineau chan->rx_state = L2CAP_RX_STATE_WAIT_F; 12285f3847a4SMat Martineau break; 12295f3847a4SMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 12305f3847a4SMat Martineau chan->rx_state = L2CAP_RX_STATE_WAIT_P; 12315f3847a4SMat Martineau break; 12325f3847a4SMat Martineau } 12335f3847a4SMat Martineau } 12345f3847a4SMat Martineau 12359f0caeb1SVinicius Costa Gomes static void l2cap_chan_ready(struct l2cap_chan *chan) 12369f0caeb1SVinicius Costa Gomes { 12372827011fSMat Martineau /* This clears all conf flags, including CONF_NOT_COMPLETE */ 12389f0caeb1SVinicius Costa Gomes chan->conf_state = 0; 12399f0caeb1SVinicius Costa Gomes __clear_chan_timer(chan); 12409f0caeb1SVinicius Costa Gomes 12410ce43ce6SJohan Hedberg if (chan->mode == L2CAP_MODE_LE_FLOWCTL && !chan->tx_credits) 12420ce43ce6SJohan Hedberg chan->ops->suspend(chan); 1243177f8f2bSJohan Hedberg 124454a59aa2SAndrei Emeltchenko chan->state = BT_CONNECTED; 12459f0caeb1SVinicius Costa Gomes 124654a59aa2SAndrei Emeltchenko chan->ops->ready(chan); 12479f0caeb1SVinicius Costa Gomes } 12489f0caeb1SVinicius Costa Gomes 1249f1496deeSJohan Hedberg static void l2cap_le_connect(struct l2cap_chan *chan) 1250f1496deeSJohan Hedberg { 1251f1496deeSJohan Hedberg struct l2cap_conn *conn = chan->conn; 1252f1496deeSJohan Hedberg struct l2cap_le_conn_req req; 1253f1496deeSJohan Hedberg 1254595177f3SJohan Hedberg if (test_and_set_bit(FLAG_LE_CONN_REQ_SENT, &chan->flags)) 1255595177f3SJohan Hedberg return; 1256595177f3SJohan Hedberg 1257f1496deeSJohan Hedberg req.psm = chan->psm; 1258f1496deeSJohan Hedberg req.scid = cpu_to_le16(chan->scid); 1259f1496deeSJohan Hedberg req.mtu = cpu_to_le16(chan->imtu); 12603916aed8SJohan Hedberg req.mps = cpu_to_le16(chan->mps); 12610cd75f7eSJohan Hedberg req.credits = cpu_to_le16(chan->rx_credits); 1262f1496deeSJohan Hedberg 1263f1496deeSJohan Hedberg chan->ident = l2cap_get_ident(conn); 1264f1496deeSJohan Hedberg 1265f1496deeSJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CONN_REQ, 1266f1496deeSJohan Hedberg sizeof(req), &req); 1267f1496deeSJohan Hedberg } 1268f1496deeSJohan Hedberg 1269f1496deeSJohan Hedberg static void l2cap_le_start(struct l2cap_chan *chan) 1270f1496deeSJohan Hedberg { 1271f1496deeSJohan Hedberg struct l2cap_conn *conn = chan->conn; 1272f1496deeSJohan Hedberg 1273f1496deeSJohan Hedberg if (!smp_conn_security(conn->hcon, chan->sec_level)) 1274f1496deeSJohan Hedberg return; 1275f1496deeSJohan Hedberg 1276f1496deeSJohan Hedberg if (!chan->psm) { 1277f1496deeSJohan Hedberg l2cap_chan_ready(chan); 1278f1496deeSJohan Hedberg return; 1279f1496deeSJohan Hedberg } 1280f1496deeSJohan Hedberg 1281f1496deeSJohan Hedberg if (chan->state == BT_CONNECT) 1282f1496deeSJohan Hedberg l2cap_le_connect(chan); 1283f1496deeSJohan Hedberg } 1284f1496deeSJohan Hedberg 128593c3e8f5SAndrei Emeltchenko static void l2cap_start_connection(struct l2cap_chan *chan) 128693c3e8f5SAndrei Emeltchenko { 128793c3e8f5SAndrei Emeltchenko if (__amp_capable(chan)) { 128893c3e8f5SAndrei Emeltchenko BT_DBG("chan %p AMP capable: discover AMPs", chan); 128993c3e8f5SAndrei Emeltchenko a2mp_discover_amp(chan); 1290f1496deeSJohan Hedberg } else if (chan->conn->hcon->type == LE_LINK) { 1291f1496deeSJohan Hedberg l2cap_le_start(chan); 129293c3e8f5SAndrei Emeltchenko } else { 129393c3e8f5SAndrei Emeltchenko l2cap_send_conn_req(chan); 129493c3e8f5SAndrei Emeltchenko } 129593c3e8f5SAndrei Emeltchenko } 129693c3e8f5SAndrei Emeltchenko 1297aeaeb4bbSJohan Hedberg static void l2cap_request_info(struct l2cap_conn *conn) 12980a708f8fSGustavo F. Padovan { 12990a708f8fSGustavo F. Padovan struct l2cap_info_req req; 1300aeaeb4bbSJohan Hedberg 1301aeaeb4bbSJohan Hedberg if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) 1302aeaeb4bbSJohan Hedberg return; 1303aeaeb4bbSJohan Hedberg 1304dcf4adbfSJoe Perches req.type = cpu_to_le16(L2CAP_IT_FEAT_MASK); 13050a708f8fSGustavo F. Padovan 13060a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_SENT; 13070a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 13080a708f8fSGustavo F. Padovan 1309ba13ccd9SMarcel Holtmann schedule_delayed_work(&conn->info_timer, L2CAP_INFO_TIMEOUT); 13100a708f8fSGustavo F. Padovan 13112d792818SGustavo Padovan l2cap_send_cmd(conn, conn->info_ident, L2CAP_INFO_REQ, 13122d792818SGustavo Padovan sizeof(req), &req); 13130a708f8fSGustavo F. Padovan } 1314aeaeb4bbSJohan Hedberg 1315aeaeb4bbSJohan Hedberg static void l2cap_do_start(struct l2cap_chan *chan) 1316aeaeb4bbSJohan Hedberg { 1317aeaeb4bbSJohan Hedberg struct l2cap_conn *conn = chan->conn; 1318aeaeb4bbSJohan Hedberg 1319aeaeb4bbSJohan Hedberg if (conn->hcon->type == LE_LINK) { 1320aeaeb4bbSJohan Hedberg l2cap_le_start(chan); 1321aeaeb4bbSJohan Hedberg return; 1322aeaeb4bbSJohan Hedberg } 1323aeaeb4bbSJohan Hedberg 1324aeaeb4bbSJohan Hedberg if (!(conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT)) { 1325aeaeb4bbSJohan Hedberg l2cap_request_info(conn); 1326aeaeb4bbSJohan Hedberg return; 1327aeaeb4bbSJohan Hedberg } 1328aeaeb4bbSJohan Hedberg 1329aeaeb4bbSJohan Hedberg if (!(conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE)) 1330aeaeb4bbSJohan Hedberg return; 1331aeaeb4bbSJohan Hedberg 1332aeaeb4bbSJohan Hedberg if (l2cap_chan_check_security(chan, true) && 1333aeaeb4bbSJohan Hedberg __l2cap_no_conn_pending(chan)) 1334aeaeb4bbSJohan Hedberg l2cap_start_connection(chan); 13350a708f8fSGustavo F. Padovan } 13360a708f8fSGustavo F. Padovan 13370a708f8fSGustavo F. Padovan static inline int l2cap_mode_supported(__u8 mode, __u32 feat_mask) 13380a708f8fSGustavo F. Padovan { 13390a708f8fSGustavo F. Padovan u32 local_feat_mask = l2cap_feat_mask; 13400a708f8fSGustavo F. Padovan if (!disable_ertm) 13410a708f8fSGustavo F. Padovan local_feat_mask |= L2CAP_FEAT_ERTM | L2CAP_FEAT_STREAMING; 13420a708f8fSGustavo F. Padovan 13430a708f8fSGustavo F. Padovan switch (mode) { 13440a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 13450a708f8fSGustavo F. Padovan return L2CAP_FEAT_ERTM & feat_mask & local_feat_mask; 13460a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 13470a708f8fSGustavo F. Padovan return L2CAP_FEAT_STREAMING & feat_mask & local_feat_mask; 13480a708f8fSGustavo F. Padovan default: 13490a708f8fSGustavo F. Padovan return 0x00; 13500a708f8fSGustavo F. Padovan } 13510a708f8fSGustavo F. Padovan } 13520a708f8fSGustavo F. Padovan 13535e4e3972SAndrei Emeltchenko static void l2cap_send_disconn_req(struct l2cap_chan *chan, int err) 13540a708f8fSGustavo F. Padovan { 13555e4e3972SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 13560a708f8fSGustavo F. Padovan struct l2cap_disconn_req req; 13570a708f8fSGustavo F. Padovan 13580a708f8fSGustavo F. Padovan if (!conn) 13590a708f8fSGustavo F. Padovan return; 13600a708f8fSGustavo F. Padovan 1361aad3d0e3SAndrei Emeltchenko if (chan->mode == L2CAP_MODE_ERTM && chan->state == BT_CONNECTED) { 13621a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 13631a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 13641a09bcb9SGustavo F. Padovan __clear_ack_timer(chan); 13650a708f8fSGustavo F. Padovan } 13660a708f8fSGustavo F. Padovan 13672338a7e0SJohan Hedberg if (chan->scid == L2CAP_CID_A2MP) { 1368d117773cSGustavo Padovan l2cap_state_change(chan, BT_DISCONN); 1369416fa752SAndrei Emeltchenko return; 1370416fa752SAndrei Emeltchenko } 1371416fa752SAndrei Emeltchenko 1372fe4128e0SGustavo F. Padovan req.dcid = cpu_to_le16(chan->dcid); 1373fe4128e0SGustavo F. Padovan req.scid = cpu_to_le16(chan->scid); 13742d792818SGustavo Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_DISCONN_REQ, 13752d792818SGustavo Padovan sizeof(req), &req); 13760a708f8fSGustavo F. Padovan 1377f8e73017SGustavo Padovan l2cap_state_change_and_error(chan, BT_DISCONN, err); 13780a708f8fSGustavo F. Padovan } 13790a708f8fSGustavo F. Padovan 13800a708f8fSGustavo F. Padovan /* ---- L2CAP connections ---- */ 13810a708f8fSGustavo F. Padovan static void l2cap_conn_start(struct l2cap_conn *conn) 13820a708f8fSGustavo F. Padovan { 13833df91ea2SAndrei Emeltchenko struct l2cap_chan *chan, *tmp; 13840a708f8fSGustavo F. Padovan 13850a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 13860a708f8fSGustavo F. Padovan 13873df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 13880a708f8fSGustavo F. Padovan 13893df91ea2SAndrei Emeltchenko list_for_each_entry_safe(chan, tmp, &conn->chan_l, list) { 13906be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 13910a708f8fSGustavo F. Padovan 1392715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 1393aeaeb4bbSJohan Hedberg l2cap_chan_ready(chan); 13946be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 13950a708f8fSGustavo F. Padovan continue; 13960a708f8fSGustavo F. Padovan } 13970a708f8fSGustavo F. Padovan 139889bc500eSGustavo F. Padovan if (chan->state == BT_CONNECT) { 1399e7cafc45SJohan Hedberg if (!l2cap_chan_check_security(chan, true) || 1400b4450035SGustavo F. Padovan !__l2cap_no_conn_pending(chan)) { 14016be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 14020a708f8fSGustavo F. Padovan continue; 14030a708f8fSGustavo F. Padovan } 14040a708f8fSGustavo F. Padovan 1405c1360a1cSGustavo F. Padovan if (!l2cap_mode_supported(chan->mode, conn->feat_mask) 1406c1360a1cSGustavo F. Padovan && test_bit(CONF_STATE2_DEVICE, 1407c1360a1cSGustavo F. Padovan &chan->conf_state)) { 14080f852724SGustavo F. Padovan l2cap_chan_close(chan, ECONNRESET); 14096be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 14100a708f8fSGustavo F. Padovan continue; 14110a708f8fSGustavo F. Padovan } 14120a708f8fSGustavo F. Padovan 141393c3e8f5SAndrei Emeltchenko l2cap_start_connection(chan); 14140a708f8fSGustavo F. Padovan 141589bc500eSGustavo F. Padovan } else if (chan->state == BT_CONNECT2) { 14160a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 14170a708f8fSGustavo F. Padovan char buf[128]; 1418fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 1419fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 14200a708f8fSGustavo F. Padovan 1421e7cafc45SJohan Hedberg if (l2cap_chan_check_security(chan, false)) { 1422bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 1423dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_PEND); 1424dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_AUTHOR_PEND); 14252dc4e510SGustavo Padovan chan->ops->defer(chan); 14260a708f8fSGustavo F. Padovan 14270a708f8fSGustavo F. Padovan } else { 1428acdcabf5SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 1429dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 1430dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 14310a708f8fSGustavo F. Padovan } 14320a708f8fSGustavo F. Padovan } else { 1433dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_PEND); 1434dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_AUTHEN_PEND); 14350a708f8fSGustavo F. Padovan } 14360a708f8fSGustavo F. Padovan 1437fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 1438fc7f8a7eSGustavo F. Padovan sizeof(rsp), &rsp); 14390a708f8fSGustavo F. Padovan 1440c1360a1cSGustavo F. Padovan if (test_bit(CONF_REQ_SENT, &chan->conf_state) || 14410a708f8fSGustavo F. Padovan rsp.result != L2CAP_CR_SUCCESS) { 14426be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 14430a708f8fSGustavo F. Padovan continue; 14440a708f8fSGustavo F. Padovan } 14450a708f8fSGustavo F. Padovan 1446c1360a1cSGustavo F. Padovan set_bit(CONF_REQ_SENT, &chan->conf_state); 14470a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 144873ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 144973ffa904SGustavo F. Padovan chan->num_conf_req++; 14500a708f8fSGustavo F. Padovan } 14510a708f8fSGustavo F. Padovan 14526be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 14530a708f8fSGustavo F. Padovan } 14540a708f8fSGustavo F. Padovan 14553df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 14560a708f8fSGustavo F. Padovan } 14570a708f8fSGustavo F. Padovan 1458b62f328bSVille Tervo static void l2cap_le_conn_ready(struct l2cap_conn *conn) 1459b62f328bSVille Tervo { 1460cc8dba2bSMarcel Holtmann struct hci_conn *hcon = conn->hcon; 1461dcc36c16SJohan Hedberg struct hci_dev *hdev = hcon->hdev; 1462b62f328bSVille Tervo 1463e760ec12SJohan Hedberg BT_DBG("%s conn %p", hdev->name, conn); 1464b62f328bSVille Tervo 1465e760ec12SJohan Hedberg /* For outgoing pairing which doesn't necessarily have an 1466e760ec12SJohan Hedberg * associated socket (e.g. mgmt_pair_device). 1467e760ec12SJohan Hedberg */ 1468e760ec12SJohan Hedberg if (hcon->out) 1469e760ec12SJohan Hedberg smp_conn_security(hcon, hcon->pending_sec_level); 1470cc8dba2bSMarcel Holtmann 147180afeb6cSMarcel Holtmann /* For LE slave connections, make sure the connection interval 147280afeb6cSMarcel Holtmann * is in the range of the minium and maximum interval that has 147380afeb6cSMarcel Holtmann * been configured for this connection. If not, then trigger 147480afeb6cSMarcel Holtmann * the connection update procedure. 147580afeb6cSMarcel Holtmann */ 147640bef302SJohan Hedberg if (hcon->role == HCI_ROLE_SLAVE && 147780afeb6cSMarcel Holtmann (hcon->le_conn_interval < hcon->le_conn_min_interval || 147880afeb6cSMarcel Holtmann hcon->le_conn_interval > hcon->le_conn_max_interval)) { 147980afeb6cSMarcel Holtmann struct l2cap_conn_param_update_req req; 148080afeb6cSMarcel Holtmann 148180afeb6cSMarcel Holtmann req.min = cpu_to_le16(hcon->le_conn_min_interval); 148280afeb6cSMarcel Holtmann req.max = cpu_to_le16(hcon->le_conn_max_interval); 148380afeb6cSMarcel Holtmann req.latency = cpu_to_le16(hcon->le_conn_latency); 148480afeb6cSMarcel Holtmann req.to_multiplier = cpu_to_le16(hcon->le_supv_timeout); 148580afeb6cSMarcel Holtmann 148680afeb6cSMarcel Holtmann l2cap_send_cmd(conn, l2cap_get_ident(conn), 148780afeb6cSMarcel Holtmann L2CAP_CONN_PARAM_UPDATE_REQ, sizeof(req), &req); 148880afeb6cSMarcel Holtmann } 1489b62f328bSVille Tervo } 1490b62f328bSVille Tervo 14910a708f8fSGustavo F. Padovan static void l2cap_conn_ready(struct l2cap_conn *conn) 14920a708f8fSGustavo F. Padovan { 149348454079SGustavo F. Padovan struct l2cap_chan *chan; 1494cc110922SVinicius Costa Gomes struct hci_conn *hcon = conn->hcon; 14950a708f8fSGustavo F. Padovan 14960a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 14970a708f8fSGustavo F. Padovan 1498aeaeb4bbSJohan Hedberg if (hcon->type == ACL_LINK) 1499aeaeb4bbSJohan Hedberg l2cap_request_info(conn); 1500aeaeb4bbSJohan Hedberg 1501e760ec12SJohan Hedberg mutex_lock(&conn->chan_lock); 1502e760ec12SJohan Hedberg 15033df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 1504baa7e1faSGustavo F. Padovan 15056be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 15060a708f8fSGustavo F. Padovan 15072338a7e0SJohan Hedberg if (chan->scid == L2CAP_CID_A2MP) { 1508416fa752SAndrei Emeltchenko l2cap_chan_unlock(chan); 1509416fa752SAndrei Emeltchenko continue; 1510416fa752SAndrei Emeltchenko } 1511416fa752SAndrei Emeltchenko 1512cc110922SVinicius Costa Gomes if (hcon->type == LE_LINK) { 1513f1496deeSJohan Hedberg l2cap_le_start(chan); 151463128451SVinicius Costa Gomes } else if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 1515aeaeb4bbSJohan Hedberg if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) 151674e75740SGustavo Padovan l2cap_chan_ready(chan); 15171c244f79SGustavo Padovan } else if (chan->state == BT_CONNECT) { 1518fc7f8a7eSGustavo F. Padovan l2cap_do_start(chan); 15191c244f79SGustavo Padovan } 15200a708f8fSGustavo F. Padovan 15216be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 15220a708f8fSGustavo F. Padovan } 15230a708f8fSGustavo F. Padovan 15243df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 152561a939c6SJohan Hedberg 152679a05727SJohan Hedberg if (hcon->type == LE_LINK) 152779a05727SJohan Hedberg l2cap_le_conn_ready(conn); 152879a05727SJohan Hedberg 152961a939c6SJohan Hedberg queue_work(hcon->hdev->workqueue, &conn->pending_rx_work); 15300a708f8fSGustavo F. Padovan } 15310a708f8fSGustavo F. Padovan 15320a708f8fSGustavo F. Padovan /* Notify sockets that we cannot guaranty reliability anymore */ 15330a708f8fSGustavo F. Padovan static void l2cap_conn_unreliable(struct l2cap_conn *conn, int err) 15340a708f8fSGustavo F. Padovan { 153548454079SGustavo F. Padovan struct l2cap_chan *chan; 15360a708f8fSGustavo F. Padovan 15370a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 15380a708f8fSGustavo F. Padovan 15393df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 15400a708f8fSGustavo F. Padovan 15413df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 1542ecf61bdbSAndrei Emeltchenko if (test_bit(FLAG_FORCE_RELIABLE, &chan->flags)) 15431d8b1fd5SGustavo Padovan l2cap_chan_set_err(chan, err); 15440a708f8fSGustavo F. Padovan } 15450a708f8fSGustavo F. Padovan 15463df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 15470a708f8fSGustavo F. Padovan } 15480a708f8fSGustavo F. Padovan 1549f878fcadSGustavo F. Padovan static void l2cap_info_timeout(struct work_struct *work) 15500a708f8fSGustavo F. Padovan { 1551f878fcadSGustavo F. Padovan struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 1552030013d8SGustavo F. Padovan info_timer.work); 15530a708f8fSGustavo F. Padovan 15540a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 15550a708f8fSGustavo F. Padovan conn->info_ident = 0; 15560a708f8fSGustavo F. Padovan 15570a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 15580a708f8fSGustavo F. Padovan } 15590a708f8fSGustavo F. Padovan 15602c8e1411SDavid Herrmann /* 15612c8e1411SDavid Herrmann * l2cap_user 15622c8e1411SDavid Herrmann * External modules can register l2cap_user objects on l2cap_conn. The ->probe 15632c8e1411SDavid Herrmann * callback is called during registration. The ->remove callback is called 15642c8e1411SDavid Herrmann * during unregistration. 15652c8e1411SDavid Herrmann * An l2cap_user object can either be explicitly unregistered or when the 15662c8e1411SDavid Herrmann * underlying l2cap_conn object is deleted. This guarantees that l2cap->hcon, 15672c8e1411SDavid Herrmann * l2cap->hchan, .. are valid as long as the remove callback hasn't been called. 15682c8e1411SDavid Herrmann * External modules must own a reference to the l2cap_conn object if they intend 15692c8e1411SDavid Herrmann * to call l2cap_unregister_user(). The l2cap_conn object might get destroyed at 15702c8e1411SDavid Herrmann * any time if they don't. 15712c8e1411SDavid Herrmann */ 15722c8e1411SDavid Herrmann 15732c8e1411SDavid Herrmann int l2cap_register_user(struct l2cap_conn *conn, struct l2cap_user *user) 15742c8e1411SDavid Herrmann { 15752c8e1411SDavid Herrmann struct hci_dev *hdev = conn->hcon->hdev; 15762c8e1411SDavid Herrmann int ret; 15772c8e1411SDavid Herrmann 15782c8e1411SDavid Herrmann /* We need to check whether l2cap_conn is registered. If it is not, we 15792c8e1411SDavid Herrmann * must not register the l2cap_user. l2cap_conn_del() is unregisters 15802c8e1411SDavid Herrmann * l2cap_conn objects, but doesn't provide its own locking. Instead, it 15812c8e1411SDavid Herrmann * relies on the parent hci_conn object to be locked. This itself relies 15822c8e1411SDavid Herrmann * on the hci_dev object to be locked. So we must lock the hci device 15832c8e1411SDavid Herrmann * here, too. */ 15842c8e1411SDavid Herrmann 15852c8e1411SDavid Herrmann hci_dev_lock(hdev); 15862c8e1411SDavid Herrmann 15872c8e1411SDavid Herrmann if (user->list.next || user->list.prev) { 15882c8e1411SDavid Herrmann ret = -EINVAL; 15892c8e1411SDavid Herrmann goto out_unlock; 15902c8e1411SDavid Herrmann } 15912c8e1411SDavid Herrmann 15922c8e1411SDavid Herrmann /* conn->hchan is NULL after l2cap_conn_del() was called */ 15932c8e1411SDavid Herrmann if (!conn->hchan) { 15942c8e1411SDavid Herrmann ret = -ENODEV; 15952c8e1411SDavid Herrmann goto out_unlock; 15962c8e1411SDavid Herrmann } 15972c8e1411SDavid Herrmann 15982c8e1411SDavid Herrmann ret = user->probe(conn, user); 15992c8e1411SDavid Herrmann if (ret) 16002c8e1411SDavid Herrmann goto out_unlock; 16012c8e1411SDavid Herrmann 16022c8e1411SDavid Herrmann list_add(&user->list, &conn->users); 16032c8e1411SDavid Herrmann ret = 0; 16042c8e1411SDavid Herrmann 16052c8e1411SDavid Herrmann out_unlock: 16062c8e1411SDavid Herrmann hci_dev_unlock(hdev); 16072c8e1411SDavid Herrmann return ret; 16082c8e1411SDavid Herrmann } 16092c8e1411SDavid Herrmann EXPORT_SYMBOL(l2cap_register_user); 16102c8e1411SDavid Herrmann 16112c8e1411SDavid Herrmann void l2cap_unregister_user(struct l2cap_conn *conn, struct l2cap_user *user) 16122c8e1411SDavid Herrmann { 16132c8e1411SDavid Herrmann struct hci_dev *hdev = conn->hcon->hdev; 16142c8e1411SDavid Herrmann 16152c8e1411SDavid Herrmann hci_dev_lock(hdev); 16162c8e1411SDavid Herrmann 16172c8e1411SDavid Herrmann if (!user->list.next || !user->list.prev) 16182c8e1411SDavid Herrmann goto out_unlock; 16192c8e1411SDavid Herrmann 16202c8e1411SDavid Herrmann list_del(&user->list); 16212c8e1411SDavid Herrmann user->list.next = NULL; 16222c8e1411SDavid Herrmann user->list.prev = NULL; 16232c8e1411SDavid Herrmann user->remove(conn, user); 16242c8e1411SDavid Herrmann 16252c8e1411SDavid Herrmann out_unlock: 16262c8e1411SDavid Herrmann hci_dev_unlock(hdev); 16272c8e1411SDavid Herrmann } 16282c8e1411SDavid Herrmann EXPORT_SYMBOL(l2cap_unregister_user); 16292c8e1411SDavid Herrmann 16302c8e1411SDavid Herrmann static void l2cap_unregister_all_users(struct l2cap_conn *conn) 16312c8e1411SDavid Herrmann { 16322c8e1411SDavid Herrmann struct l2cap_user *user; 16332c8e1411SDavid Herrmann 16342c8e1411SDavid Herrmann while (!list_empty(&conn->users)) { 16352c8e1411SDavid Herrmann user = list_first_entry(&conn->users, struct l2cap_user, list); 16362c8e1411SDavid Herrmann list_del(&user->list); 16372c8e1411SDavid Herrmann user->list.next = NULL; 16382c8e1411SDavid Herrmann user->list.prev = NULL; 16392c8e1411SDavid Herrmann user->remove(conn, user); 16402c8e1411SDavid Herrmann } 16412c8e1411SDavid Herrmann } 16422c8e1411SDavid Herrmann 16435d3de7dfSVinicius Costa Gomes static void l2cap_conn_del(struct hci_conn *hcon, int err) 16445d3de7dfSVinicius Costa Gomes { 16455d3de7dfSVinicius Costa Gomes struct l2cap_conn *conn = hcon->l2cap_data; 16465d3de7dfSVinicius Costa Gomes struct l2cap_chan *chan, *l; 16475d3de7dfSVinicius Costa Gomes 16485d3de7dfSVinicius Costa Gomes if (!conn) 16495d3de7dfSVinicius Costa Gomes return; 16505d3de7dfSVinicius Costa Gomes 16515d3de7dfSVinicius Costa Gomes BT_DBG("hcon %p conn %p, err %d", hcon, conn, err); 16525d3de7dfSVinicius Costa Gomes 16535d3de7dfSVinicius Costa Gomes kfree_skb(conn->rx_skb); 16545d3de7dfSVinicius Costa Gomes 165561a939c6SJohan Hedberg skb_queue_purge(&conn->pending_rx); 16567ab56c3aSJukka Taimisto 16577ab56c3aSJukka Taimisto /* We can not call flush_work(&conn->pending_rx_work) here since we 16587ab56c3aSJukka Taimisto * might block if we are running on a worker from the same workqueue 16597ab56c3aSJukka Taimisto * pending_rx_work is waiting on. 16607ab56c3aSJukka Taimisto */ 16617ab56c3aSJukka Taimisto if (work_pending(&conn->pending_rx_work)) 16627ab56c3aSJukka Taimisto cancel_work_sync(&conn->pending_rx_work); 166361a939c6SJohan Hedberg 1664f3d82d0cSJohan Hedberg if (work_pending(&conn->id_addr_update_work)) 1665f3d82d0cSJohan Hedberg cancel_work_sync(&conn->id_addr_update_work); 1666f3d82d0cSJohan Hedberg 16672c8e1411SDavid Herrmann l2cap_unregister_all_users(conn); 16682c8e1411SDavid Herrmann 1669e31fb860SJohan Hedberg /* Force the connection to be immediately dropped */ 1670e31fb860SJohan Hedberg hcon->disc_timeout = 0; 1671e31fb860SJohan Hedberg 16723df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 16733df91ea2SAndrei Emeltchenko 16745d3de7dfSVinicius Costa Gomes /* Kill channels */ 16755d3de7dfSVinicius Costa Gomes list_for_each_entry_safe(chan, l, &conn->chan_l, list) { 167661d6ef3eSMat Martineau l2cap_chan_hold(chan); 16776be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 16786be36555SAndrei Emeltchenko 16795d3de7dfSVinicius Costa Gomes l2cap_chan_del(chan, err); 16806be36555SAndrei Emeltchenko 16816be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 16826be36555SAndrei Emeltchenko 168380b98027SGustavo Padovan chan->ops->close(chan); 168461d6ef3eSMat Martineau l2cap_chan_put(chan); 16855d3de7dfSVinicius Costa Gomes } 16865d3de7dfSVinicius Costa Gomes 16873df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 16883df91ea2SAndrei Emeltchenko 168973d80debSLuiz Augusto von Dentz hci_chan_del(conn->hchan); 169073d80debSLuiz Augusto von Dentz 16915d3de7dfSVinicius Costa Gomes if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) 1692127074bfSUlisses Furquim cancel_delayed_work_sync(&conn->info_timer); 16935d3de7dfSVinicius Costa Gomes 16945d3de7dfSVinicius Costa Gomes hcon->l2cap_data = NULL; 16959c903e37SDavid Herrmann conn->hchan = NULL; 16969c903e37SDavid Herrmann l2cap_conn_put(conn); 16975d3de7dfSVinicius Costa Gomes } 16985d3de7dfSVinicius Costa Gomes 16999c903e37SDavid Herrmann static void l2cap_conn_free(struct kref *ref) 17009c903e37SDavid Herrmann { 17019c903e37SDavid Herrmann struct l2cap_conn *conn = container_of(ref, struct l2cap_conn, ref); 17029c903e37SDavid Herrmann 17039c903e37SDavid Herrmann hci_conn_put(conn->hcon); 17049c903e37SDavid Herrmann kfree(conn); 17059c903e37SDavid Herrmann } 17069c903e37SDavid Herrmann 170751bb8457SJohan Hedberg struct l2cap_conn *l2cap_conn_get(struct l2cap_conn *conn) 17089c903e37SDavid Herrmann { 17099c903e37SDavid Herrmann kref_get(&conn->ref); 171051bb8457SJohan Hedberg return conn; 17119c903e37SDavid Herrmann } 17129c903e37SDavid Herrmann EXPORT_SYMBOL(l2cap_conn_get); 17139c903e37SDavid Herrmann 17149c903e37SDavid Herrmann void l2cap_conn_put(struct l2cap_conn *conn) 17159c903e37SDavid Herrmann { 17169c903e37SDavid Herrmann kref_put(&conn->ref, l2cap_conn_free); 17179c903e37SDavid Herrmann } 17189c903e37SDavid Herrmann EXPORT_SYMBOL(l2cap_conn_put); 17199c903e37SDavid Herrmann 17200a708f8fSGustavo F. Padovan /* ---- Socket interface ---- */ 17210a708f8fSGustavo F. Padovan 1722c2287681SIdo Yariv /* Find socket with psm and source / destination bdaddr. 17230a708f8fSGustavo F. Padovan * Returns closest match. 17240a708f8fSGustavo F. Padovan */ 1725c2287681SIdo Yariv static struct l2cap_chan *l2cap_global_chan_by_psm(int state, __le16 psm, 1726c2287681SIdo Yariv bdaddr_t *src, 1727bf20fd4eSJohan Hedberg bdaddr_t *dst, 1728bf20fd4eSJohan Hedberg u8 link_type) 17290a708f8fSGustavo F. Padovan { 173023691d75SGustavo F. Padovan struct l2cap_chan *c, *c1 = NULL; 17310a708f8fSGustavo F. Padovan 173223691d75SGustavo F. Padovan read_lock(&chan_list_lock); 17330a708f8fSGustavo F. Padovan 173423691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 173589bc500eSGustavo F. Padovan if (state && c->state != state) 17360a708f8fSGustavo F. Padovan continue; 17370a708f8fSGustavo F. Padovan 1738bf20fd4eSJohan Hedberg if (link_type == ACL_LINK && c->src_type != BDADDR_BREDR) 1739bf20fd4eSJohan Hedberg continue; 1740bf20fd4eSJohan Hedberg 1741bf20fd4eSJohan Hedberg if (link_type == LE_LINK && c->src_type == BDADDR_BREDR) 1742bf20fd4eSJohan Hedberg continue; 1743bf20fd4eSJohan Hedberg 174423691d75SGustavo F. Padovan if (c->psm == psm) { 1745c2287681SIdo Yariv int src_match, dst_match; 1746c2287681SIdo Yariv int src_any, dst_any; 1747c2287681SIdo Yariv 17480a708f8fSGustavo F. Padovan /* Exact match. */ 17497eafc59eSMarcel Holtmann src_match = !bacmp(&c->src, src); 17507eafc59eSMarcel Holtmann dst_match = !bacmp(&c->dst, dst); 1751c2287681SIdo Yariv if (src_match && dst_match) { 1752a24cce14SJohan Hedberg l2cap_chan_hold(c); 1753a7567b20SJohannes Berg read_unlock(&chan_list_lock); 175423691d75SGustavo F. Padovan return c; 175523691d75SGustavo F. Padovan } 17560a708f8fSGustavo F. Padovan 17570a708f8fSGustavo F. Padovan /* Closest match */ 17587eafc59eSMarcel Holtmann src_any = !bacmp(&c->src, BDADDR_ANY); 17597eafc59eSMarcel Holtmann dst_any = !bacmp(&c->dst, BDADDR_ANY); 1760c2287681SIdo Yariv if ((src_match && dst_any) || (src_any && dst_match) || 1761c2287681SIdo Yariv (src_any && dst_any)) 176223691d75SGustavo F. Padovan c1 = c; 17630a708f8fSGustavo F. Padovan } 17640a708f8fSGustavo F. Padovan } 17650a708f8fSGustavo F. Padovan 1766a24cce14SJohan Hedberg if (c1) 1767a24cce14SJohan Hedberg l2cap_chan_hold(c1); 1768a24cce14SJohan Hedberg 176923691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 17700a708f8fSGustavo F. Padovan 177123691d75SGustavo F. Padovan return c1; 17720a708f8fSGustavo F. Padovan } 17730a708f8fSGustavo F. Padovan 1774721c4181SGustavo F. Padovan static void l2cap_monitor_timeout(struct work_struct *work) 17750a708f8fSGustavo F. Padovan { 1776721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 1777721c4181SGustavo F. Padovan monitor_timer.work); 17780a708f8fSGustavo F. Padovan 1779525cd185SGustavo F. Padovan BT_DBG("chan %p", chan); 17800a708f8fSGustavo F. Padovan 17816be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 17826be36555SAndrei Emeltchenko 178380909e04SMat Martineau if (!chan->conn) { 17846be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 17858d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 17860a708f8fSGustavo F. Padovan return; 17870a708f8fSGustavo F. Padovan } 17880a708f8fSGustavo F. Padovan 1789401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, L2CAP_EV_MONITOR_TO); 17900a708f8fSGustavo F. Padovan 17916be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 17928d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 17930a708f8fSGustavo F. Padovan } 17940a708f8fSGustavo F. Padovan 1795721c4181SGustavo F. Padovan static void l2cap_retrans_timeout(struct work_struct *work) 17960a708f8fSGustavo F. Padovan { 1797721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 1798721c4181SGustavo F. Padovan retrans_timer.work); 17990a708f8fSGustavo F. Padovan 180049208c9cSGustavo F. Padovan BT_DBG("chan %p", chan); 18010a708f8fSGustavo F. Padovan 18026be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 18036be36555SAndrei Emeltchenko 180480909e04SMat Martineau if (!chan->conn) { 180580909e04SMat Martineau l2cap_chan_unlock(chan); 180680909e04SMat Martineau l2cap_chan_put(chan); 180780909e04SMat Martineau return; 180880909e04SMat Martineau } 18090a708f8fSGustavo F. Padovan 1810401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, L2CAP_EV_RETRANS_TO); 18116be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 18128d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 18130a708f8fSGustavo F. Padovan } 18140a708f8fSGustavo F. Padovan 1815d660366dSGustavo Padovan static void l2cap_streaming_send(struct l2cap_chan *chan, 18163733937dSMat Martineau struct sk_buff_head *skbs) 18170a708f8fSGustavo F. Padovan { 18180a708f8fSGustavo F. Padovan struct sk_buff *skb; 18193733937dSMat Martineau struct l2cap_ctrl *control; 18200a708f8fSGustavo F. Padovan 18213733937dSMat Martineau BT_DBG("chan %p, skbs %p", chan, skbs); 18223733937dSMat Martineau 1823b99e13adSMat Martineau if (__chan_is_moving(chan)) 1824b99e13adSMat Martineau return; 1825b99e13adSMat Martineau 18263733937dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 18273733937dSMat Martineau 18283733937dSMat Martineau while (!skb_queue_empty(&chan->tx_q)) { 18293733937dSMat Martineau 18303733937dSMat Martineau skb = skb_dequeue(&chan->tx_q); 18313733937dSMat Martineau 18323733937dSMat Martineau bt_cb(skb)->control.retries = 1; 18333733937dSMat Martineau control = &bt_cb(skb)->control; 18343733937dSMat Martineau 18353733937dSMat Martineau control->reqseq = 0; 18363733937dSMat Martineau control->txseq = chan->next_tx_seq; 18373733937dSMat Martineau 18383733937dSMat Martineau __pack_control(chan, control, skb); 18390a708f8fSGustavo F. Padovan 184047d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 18413733937dSMat Martineau u16 fcs = crc16(0, (u8 *) skb->data, skb->len); 18423733937dSMat Martineau put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 18430a708f8fSGustavo F. Padovan } 18440a708f8fSGustavo F. Padovan 18454343478fSGustavo F. Padovan l2cap_do_send(chan, skb); 18460a708f8fSGustavo F. Padovan 1847b4400672SAndrei Emeltchenko BT_DBG("Sent txseq %u", control->txseq); 18483733937dSMat Martineau 1849836be934SAndrei Emeltchenko chan->next_tx_seq = __next_seq(chan, chan->next_tx_seq); 18503733937dSMat Martineau chan->frames_sent++; 18510a708f8fSGustavo F. Padovan } 18520a708f8fSGustavo F. Padovan } 18530a708f8fSGustavo F. Padovan 185467c9e840SSzymon Janc static int l2cap_ertm_send(struct l2cap_chan *chan) 18550a708f8fSGustavo F. Padovan { 18560a708f8fSGustavo F. Padovan struct sk_buff *skb, *tx_skb; 185718a48e76SMat Martineau struct l2cap_ctrl *control; 185818a48e76SMat Martineau int sent = 0; 185918a48e76SMat Martineau 186018a48e76SMat Martineau BT_DBG("chan %p", chan); 18610a708f8fSGustavo F. Padovan 186289bc500eSGustavo F. Padovan if (chan->state != BT_CONNECTED) 18630a708f8fSGustavo F. Padovan return -ENOTCONN; 18640a708f8fSGustavo F. Padovan 186594122bbeSMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 186694122bbeSMat Martineau return 0; 186794122bbeSMat Martineau 1868b99e13adSMat Martineau if (__chan_is_moving(chan)) 1869b99e13adSMat Martineau return 0; 1870b99e13adSMat Martineau 187118a48e76SMat Martineau while (chan->tx_send_head && 187218a48e76SMat Martineau chan->unacked_frames < chan->remote_tx_win && 187318a48e76SMat Martineau chan->tx_state == L2CAP_TX_STATE_XMIT) { 18740a708f8fSGustavo F. Padovan 187518a48e76SMat Martineau skb = chan->tx_send_head; 18760a708f8fSGustavo F. Padovan 187718a48e76SMat Martineau bt_cb(skb)->control.retries = 1; 187818a48e76SMat Martineau control = &bt_cb(skb)->control; 18790a708f8fSGustavo F. Padovan 1880e2ab4353SGustavo F. Padovan if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state)) 188118a48e76SMat Martineau control->final = 1; 1882e2ab4353SGustavo F. Padovan 188318a48e76SMat Martineau control->reqseq = chan->buffer_seq; 188418a48e76SMat Martineau chan->last_acked_seq = chan->buffer_seq; 188518a48e76SMat Martineau control->txseq = chan->next_tx_seq; 18860a708f8fSGustavo F. Padovan 188718a48e76SMat Martineau __pack_control(chan, control, skb); 18880a708f8fSGustavo F. Padovan 188947d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 189018a48e76SMat Martineau u16 fcs = crc16(0, (u8 *) skb->data, skb->len); 189118a48e76SMat Martineau put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 18920a708f8fSGustavo F. Padovan } 18930a708f8fSGustavo F. Padovan 189418a48e76SMat Martineau /* Clone after data has been modified. Data is assumed to be 189518a48e76SMat Martineau read-only (for locking purposes) on cloned sk_buffs. 189618a48e76SMat Martineau */ 189718a48e76SMat Martineau tx_skb = skb_clone(skb, GFP_KERNEL); 189818a48e76SMat Martineau 189918a48e76SMat Martineau if (!tx_skb) 190018a48e76SMat Martineau break; 19010a708f8fSGustavo F. Padovan 19021a09bcb9SGustavo F. Padovan __set_retrans_timer(chan); 19030a708f8fSGustavo F. Padovan 1904836be934SAndrei Emeltchenko chan->next_tx_seq = __next_seq(chan, chan->next_tx_seq); 19056a026610SGustavo F. Padovan chan->unacked_frames++; 19066a026610SGustavo F. Padovan chan->frames_sent++; 190718a48e76SMat Martineau sent++; 19080a708f8fSGustavo F. Padovan 190958d35f87SGustavo F. Padovan if (skb_queue_is_last(&chan->tx_q, skb)) 191058d35f87SGustavo F. Padovan chan->tx_send_head = NULL; 19110a708f8fSGustavo F. Padovan else 191258d35f87SGustavo F. Padovan chan->tx_send_head = skb_queue_next(&chan->tx_q, skb); 191318a48e76SMat Martineau 191418a48e76SMat Martineau l2cap_do_send(chan, tx_skb); 1915b4400672SAndrei Emeltchenko BT_DBG("Sent txseq %u", control->txseq); 19160a708f8fSGustavo F. Padovan } 19170a708f8fSGustavo F. Padovan 1918b4400672SAndrei Emeltchenko BT_DBG("Sent %d, %u unacked, %u in ERTM queue", sent, 1919b4400672SAndrei Emeltchenko chan->unacked_frames, skb_queue_len(&chan->tx_q)); 192018a48e76SMat Martineau 192118a48e76SMat Martineau return sent; 19220a708f8fSGustavo F. Padovan } 19230a708f8fSGustavo F. Padovan 1924e1fbd4c1SMat Martineau static void l2cap_ertm_resend(struct l2cap_chan *chan) 1925e1fbd4c1SMat Martineau { 1926e1fbd4c1SMat Martineau struct l2cap_ctrl control; 1927e1fbd4c1SMat Martineau struct sk_buff *skb; 1928e1fbd4c1SMat Martineau struct sk_buff *tx_skb; 1929e1fbd4c1SMat Martineau u16 seq; 1930e1fbd4c1SMat Martineau 1931e1fbd4c1SMat Martineau BT_DBG("chan %p", chan); 1932e1fbd4c1SMat Martineau 1933e1fbd4c1SMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 1934e1fbd4c1SMat Martineau return; 1935e1fbd4c1SMat Martineau 1936b99e13adSMat Martineau if (__chan_is_moving(chan)) 1937b99e13adSMat Martineau return; 1938b99e13adSMat Martineau 1939e1fbd4c1SMat Martineau while (chan->retrans_list.head != L2CAP_SEQ_LIST_CLEAR) { 1940e1fbd4c1SMat Martineau seq = l2cap_seq_list_pop(&chan->retrans_list); 1941e1fbd4c1SMat Martineau 1942e1fbd4c1SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, seq); 1943e1fbd4c1SMat Martineau if (!skb) { 1944e1fbd4c1SMat Martineau BT_DBG("Error: Can't retransmit seq %d, frame missing", 1945e1fbd4c1SMat Martineau seq); 1946e1fbd4c1SMat Martineau continue; 1947e1fbd4c1SMat Martineau } 1948e1fbd4c1SMat Martineau 1949e1fbd4c1SMat Martineau bt_cb(skb)->control.retries++; 1950e1fbd4c1SMat Martineau control = bt_cb(skb)->control; 1951e1fbd4c1SMat Martineau 1952e1fbd4c1SMat Martineau if (chan->max_tx != 0 && 1953e1fbd4c1SMat Martineau bt_cb(skb)->control.retries > chan->max_tx) { 1954e1fbd4c1SMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 19555e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 1956e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 1957e1fbd4c1SMat Martineau break; 1958e1fbd4c1SMat Martineau } 1959e1fbd4c1SMat Martineau 1960e1fbd4c1SMat Martineau control.reqseq = chan->buffer_seq; 1961e1fbd4c1SMat Martineau if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state)) 1962e1fbd4c1SMat Martineau control.final = 1; 1963e1fbd4c1SMat Martineau else 1964e1fbd4c1SMat Martineau control.final = 0; 1965e1fbd4c1SMat Martineau 1966e1fbd4c1SMat Martineau if (skb_cloned(skb)) { 1967e1fbd4c1SMat Martineau /* Cloned sk_buffs are read-only, so we need a 1968e1fbd4c1SMat Martineau * writeable copy 1969e1fbd4c1SMat Martineau */ 19708bcde1f2SGustavo Padovan tx_skb = skb_copy(skb, GFP_KERNEL); 1971e1fbd4c1SMat Martineau } else { 19728bcde1f2SGustavo Padovan tx_skb = skb_clone(skb, GFP_KERNEL); 1973e1fbd4c1SMat Martineau } 1974e1fbd4c1SMat Martineau 1975e1fbd4c1SMat Martineau if (!tx_skb) { 1976e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 1977e1fbd4c1SMat Martineau break; 1978e1fbd4c1SMat Martineau } 1979e1fbd4c1SMat Martineau 1980e1fbd4c1SMat Martineau /* Update skb contents */ 1981e1fbd4c1SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 1982e1fbd4c1SMat Martineau put_unaligned_le32(__pack_extended_control(&control), 1983e1fbd4c1SMat Martineau tx_skb->data + L2CAP_HDR_SIZE); 1984e1fbd4c1SMat Martineau } else { 1985e1fbd4c1SMat Martineau put_unaligned_le16(__pack_enhanced_control(&control), 1986e1fbd4c1SMat Martineau tx_skb->data + L2CAP_HDR_SIZE); 1987e1fbd4c1SMat Martineau } 1988e1fbd4c1SMat Martineau 198913cac152SLukasz Rymanowski /* Update FCS */ 1990e1fbd4c1SMat Martineau if (chan->fcs == L2CAP_FCS_CRC16) { 199113cac152SLukasz Rymanowski u16 fcs = crc16(0, (u8 *) tx_skb->data, 199213cac152SLukasz Rymanowski tx_skb->len - L2CAP_FCS_SIZE); 199313cac152SLukasz Rymanowski put_unaligned_le16(fcs, skb_tail_pointer(tx_skb) - 199413cac152SLukasz Rymanowski L2CAP_FCS_SIZE); 1995e1fbd4c1SMat Martineau } 1996e1fbd4c1SMat Martineau 1997e1fbd4c1SMat Martineau l2cap_do_send(chan, tx_skb); 1998e1fbd4c1SMat Martineau 1999e1fbd4c1SMat Martineau BT_DBG("Resent txseq %d", control.txseq); 2000e1fbd4c1SMat Martineau 2001e1fbd4c1SMat Martineau chan->last_acked_seq = chan->buffer_seq; 2002e1fbd4c1SMat Martineau } 2003e1fbd4c1SMat Martineau } 2004e1fbd4c1SMat Martineau 2005f80842a8SMat Martineau static void l2cap_retransmit(struct l2cap_chan *chan, 2006f80842a8SMat Martineau struct l2cap_ctrl *control) 2007f80842a8SMat Martineau { 2008f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2009f80842a8SMat Martineau 2010f80842a8SMat Martineau l2cap_seq_list_append(&chan->retrans_list, control->reqseq); 2011f80842a8SMat Martineau l2cap_ertm_resend(chan); 2012f80842a8SMat Martineau } 2013f80842a8SMat Martineau 2014d2a7ac5dSMat Martineau static void l2cap_retransmit_all(struct l2cap_chan *chan, 2015d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 2016d2a7ac5dSMat Martineau { 2017e1fbd4c1SMat Martineau struct sk_buff *skb; 2018e1fbd4c1SMat Martineau 2019e1fbd4c1SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2020e1fbd4c1SMat Martineau 2021e1fbd4c1SMat Martineau if (control->poll) 2022e1fbd4c1SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 2023e1fbd4c1SMat Martineau 2024e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 2025e1fbd4c1SMat Martineau 2026e1fbd4c1SMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 2027e1fbd4c1SMat Martineau return; 2028e1fbd4c1SMat Martineau 2029e1fbd4c1SMat Martineau if (chan->unacked_frames) { 2030e1fbd4c1SMat Martineau skb_queue_walk(&chan->tx_q, skb) { 2031e1fbd4c1SMat Martineau if (bt_cb(skb)->control.txseq == control->reqseq || 2032e1fbd4c1SMat Martineau skb == chan->tx_send_head) 2033e1fbd4c1SMat Martineau break; 2034e1fbd4c1SMat Martineau } 2035e1fbd4c1SMat Martineau 2036e1fbd4c1SMat Martineau skb_queue_walk_from(&chan->tx_q, skb) { 2037e1fbd4c1SMat Martineau if (skb == chan->tx_send_head) 2038e1fbd4c1SMat Martineau break; 2039e1fbd4c1SMat Martineau 2040e1fbd4c1SMat Martineau l2cap_seq_list_append(&chan->retrans_list, 2041e1fbd4c1SMat Martineau bt_cb(skb)->control.txseq); 2042e1fbd4c1SMat Martineau } 2043e1fbd4c1SMat Martineau 2044e1fbd4c1SMat Martineau l2cap_ertm_resend(chan); 2045e1fbd4c1SMat Martineau } 2046d2a7ac5dSMat Martineau } 2047d2a7ac5dSMat Martineau 2048b17e73bbSSzymon Janc static void l2cap_send_ack(struct l2cap_chan *chan) 2049b17e73bbSSzymon Janc { 20500a0aba42SMat Martineau struct l2cap_ctrl control; 20510a0aba42SMat Martineau u16 frames_to_ack = __seq_offset(chan, chan->buffer_seq, 20520a0aba42SMat Martineau chan->last_acked_seq); 20530a0aba42SMat Martineau int threshold; 20540a0aba42SMat Martineau 20550a0aba42SMat Martineau BT_DBG("chan %p last_acked_seq %d buffer_seq %d", 20560a0aba42SMat Martineau chan, chan->last_acked_seq, chan->buffer_seq); 20570a0aba42SMat Martineau 20580a0aba42SMat Martineau memset(&control, 0, sizeof(control)); 20590a0aba42SMat Martineau control.sframe = 1; 20600a0aba42SMat Martineau 20610a0aba42SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state) && 20620a0aba42SMat Martineau chan->rx_state == L2CAP_RX_STATE_RECV) { 2063b17e73bbSSzymon Janc __clear_ack_timer(chan); 20640a0aba42SMat Martineau control.super = L2CAP_SUPER_RNR; 20650a0aba42SMat Martineau control.reqseq = chan->buffer_seq; 20660a0aba42SMat Martineau l2cap_send_sframe(chan, &control); 20670a0aba42SMat Martineau } else { 20680a0aba42SMat Martineau if (!test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) { 20690a0aba42SMat Martineau l2cap_ertm_send(chan); 20700a0aba42SMat Martineau /* If any i-frames were sent, they included an ack */ 20710a0aba42SMat Martineau if (chan->buffer_seq == chan->last_acked_seq) 20720a0aba42SMat Martineau frames_to_ack = 0; 20730a0aba42SMat Martineau } 20740a0aba42SMat Martineau 2075c20f8e35SMat Martineau /* Ack now if the window is 3/4ths full. 20760a0aba42SMat Martineau * Calculate without mul or div 20770a0aba42SMat Martineau */ 2078c20f8e35SMat Martineau threshold = chan->ack_win; 20790a0aba42SMat Martineau threshold += threshold << 1; 20800a0aba42SMat Martineau threshold >>= 2; 20810a0aba42SMat Martineau 2082b4400672SAndrei Emeltchenko BT_DBG("frames_to_ack %u, threshold %d", frames_to_ack, 20830a0aba42SMat Martineau threshold); 20840a0aba42SMat Martineau 20850a0aba42SMat Martineau if (frames_to_ack >= threshold) { 20860a0aba42SMat Martineau __clear_ack_timer(chan); 20870a0aba42SMat Martineau control.super = L2CAP_SUPER_RR; 20880a0aba42SMat Martineau control.reqseq = chan->buffer_seq; 20890a0aba42SMat Martineau l2cap_send_sframe(chan, &control); 20900a0aba42SMat Martineau frames_to_ack = 0; 20910a0aba42SMat Martineau } 20920a0aba42SMat Martineau 20930a0aba42SMat Martineau if (frames_to_ack) 20940a0aba42SMat Martineau __set_ack_timer(chan); 20950a0aba42SMat Martineau } 2096b17e73bbSSzymon Janc } 2097b17e73bbSSzymon Janc 209804124681SGustavo F. Padovan static inline int l2cap_skbuff_fromiovec(struct l2cap_chan *chan, 209904124681SGustavo F. Padovan struct msghdr *msg, int len, 210004124681SGustavo F. Padovan int count, struct sk_buff *skb) 21010a708f8fSGustavo F. Padovan { 21020952a57aSAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 21030a708f8fSGustavo F. Padovan struct sk_buff **frag; 210490338947SGustavo Padovan int sent = 0; 21050a708f8fSGustavo F. Padovan 21060498878bSJukka Rissanen if (chan->ops->memcpy_fromiovec(chan, skb_put(skb, count), 21070498878bSJukka Rissanen msg->msg_iov, count)) 21080a708f8fSGustavo F. Padovan return -EFAULT; 21090a708f8fSGustavo F. Padovan 21100a708f8fSGustavo F. Padovan sent += count; 21110a708f8fSGustavo F. Padovan len -= count; 21120a708f8fSGustavo F. Padovan 21130a708f8fSGustavo F. Padovan /* Continuation fragments (no L2CAP header) */ 21140a708f8fSGustavo F. Padovan frag = &skb_shinfo(skb)->frag_list; 21150a708f8fSGustavo F. Padovan while (len) { 2116fbe00700SGustavo Padovan struct sk_buff *tmp; 2117fbe00700SGustavo Padovan 21180a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 21190a708f8fSGustavo F. Padovan 2120d9fbd02bSMarcel Holtmann tmp = chan->ops->alloc_skb(chan, 0, count, 212190338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 2122fbe00700SGustavo Padovan if (IS_ERR(tmp)) 2123fbe00700SGustavo Padovan return PTR_ERR(tmp); 21242f7719ceSAndrei Emeltchenko 2125fbe00700SGustavo Padovan *frag = tmp; 2126fbe00700SGustavo Padovan 21270498878bSJukka Rissanen if (chan->ops->memcpy_fromiovec(chan, skb_put(*frag, count), 21280498878bSJukka Rissanen msg->msg_iov, count)) 21290a708f8fSGustavo F. Padovan return -EFAULT; 21300a708f8fSGustavo F. Padovan 21310a708f8fSGustavo F. Padovan sent += count; 21320a708f8fSGustavo F. Padovan len -= count; 21330a708f8fSGustavo F. Padovan 21342d0ed3d5SGustavo Padovan skb->len += (*frag)->len; 21352d0ed3d5SGustavo Padovan skb->data_len += (*frag)->len; 21362d0ed3d5SGustavo Padovan 21370a708f8fSGustavo F. Padovan frag = &(*frag)->next; 21380a708f8fSGustavo F. Padovan } 21390a708f8fSGustavo F. Padovan 21400a708f8fSGustavo F. Padovan return sent; 21410a708f8fSGustavo F. Padovan } 21420a708f8fSGustavo F. Padovan 21435e59b791SLuiz Augusto von Dentz static struct sk_buff *l2cap_create_connless_pdu(struct l2cap_chan *chan, 21448d46321cSMarcel Holtmann struct msghdr *msg, size_t len) 21450a708f8fSGustavo F. Padovan { 21468c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 21470a708f8fSGustavo F. Padovan struct sk_buff *skb; 214803a51213SAndrei Emeltchenko int err, count, hlen = L2CAP_HDR_SIZE + L2CAP_PSMLEN_SIZE; 21490a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 21500a708f8fSGustavo F. Padovan 21518d46321cSMarcel Holtmann BT_DBG("chan %p psm 0x%2.2x len %zu", chan, 21528d46321cSMarcel Holtmann __le16_to_cpu(chan->psm), len); 21530a708f8fSGustavo F. Padovan 21540a708f8fSGustavo F. Padovan count = min_t(unsigned int, (conn->mtu - hlen), len); 21552f7719ceSAndrei Emeltchenko 2156d9fbd02bSMarcel Holtmann skb = chan->ops->alloc_skb(chan, hlen, count, 215790338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 215890338947SGustavo Padovan if (IS_ERR(skb)) 215990338947SGustavo Padovan return skb; 21600a708f8fSGustavo F. Padovan 21610a708f8fSGustavo F. Padovan /* Create L2CAP header */ 21620a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2163fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 2164daf6a78cSAndrei Emeltchenko lh->len = cpu_to_le16(len + L2CAP_PSMLEN_SIZE); 216543b1b8dfSMarcel Holtmann put_unaligned(chan->psm, (__le16 *) skb_put(skb, L2CAP_PSMLEN_SIZE)); 21660a708f8fSGustavo F. Padovan 21670952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 21680a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 21690a708f8fSGustavo F. Padovan kfree_skb(skb); 21700a708f8fSGustavo F. Padovan return ERR_PTR(err); 21710a708f8fSGustavo F. Padovan } 21720a708f8fSGustavo F. Padovan return skb; 21730a708f8fSGustavo F. Padovan } 21740a708f8fSGustavo F. Padovan 21755e59b791SLuiz Augusto von Dentz static struct sk_buff *l2cap_create_basic_pdu(struct l2cap_chan *chan, 21768d46321cSMarcel Holtmann struct msghdr *msg, size_t len) 21770a708f8fSGustavo F. Padovan { 21788c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 21790a708f8fSGustavo F. Padovan struct sk_buff *skb; 2180f2ba7faeSGustavo Padovan int err, count; 21810a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 21820a708f8fSGustavo F. Padovan 2183b4400672SAndrei Emeltchenko BT_DBG("chan %p len %zu", chan, len); 21840a708f8fSGustavo F. Padovan 2185f2ba7faeSGustavo Padovan count = min_t(unsigned int, (conn->mtu - L2CAP_HDR_SIZE), len); 21862f7719ceSAndrei Emeltchenko 2187d9fbd02bSMarcel Holtmann skb = chan->ops->alloc_skb(chan, L2CAP_HDR_SIZE, count, 218890338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 218990338947SGustavo Padovan if (IS_ERR(skb)) 219090338947SGustavo Padovan return skb; 21910a708f8fSGustavo F. Padovan 21920a708f8fSGustavo F. Padovan /* Create L2CAP header */ 21930a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2194fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 21956ff9b5efSGustavo Padovan lh->len = cpu_to_le16(len); 21960a708f8fSGustavo F. Padovan 21970952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 21980a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 21990a708f8fSGustavo F. Padovan kfree_skb(skb); 22000a708f8fSGustavo F. Padovan return ERR_PTR(err); 22010a708f8fSGustavo F. Padovan } 22020a708f8fSGustavo F. Padovan return skb; 22030a708f8fSGustavo F. Padovan } 22040a708f8fSGustavo F. Padovan 2205ab0ff76dSLuiz Augusto von Dentz static struct sk_buff *l2cap_create_iframe_pdu(struct l2cap_chan *chan, 2206ab0ff76dSLuiz Augusto von Dentz struct msghdr *msg, size_t len, 220794122bbeSMat Martineau u16 sdulen) 22080a708f8fSGustavo F. Padovan { 22098c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 22100a708f8fSGustavo F. Padovan struct sk_buff *skb; 2211e4ca6d98SAndrei Emeltchenko int err, count, hlen; 22120a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 22130a708f8fSGustavo F. Padovan 2214b4400672SAndrei Emeltchenko BT_DBG("chan %p len %zu", chan, len); 22150a708f8fSGustavo F. Padovan 22160a708f8fSGustavo F. Padovan if (!conn) 22170a708f8fSGustavo F. Padovan return ERR_PTR(-ENOTCONN); 22180a708f8fSGustavo F. Padovan 2219ba7aa64fSGustavo Padovan hlen = __ertm_hdr_size(chan); 2220e4ca6d98SAndrei Emeltchenko 22210a708f8fSGustavo F. Padovan if (sdulen) 222203a51213SAndrei Emeltchenko hlen += L2CAP_SDULEN_SIZE; 22230a708f8fSGustavo F. Padovan 222447d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 222503a51213SAndrei Emeltchenko hlen += L2CAP_FCS_SIZE; 22260a708f8fSGustavo F. Padovan 22270a708f8fSGustavo F. Padovan count = min_t(unsigned int, (conn->mtu - hlen), len); 22282f7719ceSAndrei Emeltchenko 2229d9fbd02bSMarcel Holtmann skb = chan->ops->alloc_skb(chan, hlen, count, 223090338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 223190338947SGustavo Padovan if (IS_ERR(skb)) 223290338947SGustavo Padovan return skb; 22330a708f8fSGustavo F. Padovan 22340a708f8fSGustavo F. Padovan /* Create L2CAP header */ 22350a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2236fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 22370a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(len + (hlen - L2CAP_HDR_SIZE)); 223888843ab0SAndrei Emeltchenko 223918a48e76SMat Martineau /* Control header is populated later */ 224018a48e76SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 224118a48e76SMat Martineau put_unaligned_le32(0, skb_put(skb, L2CAP_EXT_CTRL_SIZE)); 224218a48e76SMat Martineau else 224318a48e76SMat Martineau put_unaligned_le16(0, skb_put(skb, L2CAP_ENH_CTRL_SIZE)); 224488843ab0SAndrei Emeltchenko 22450a708f8fSGustavo F. Padovan if (sdulen) 224603a51213SAndrei Emeltchenko put_unaligned_le16(sdulen, skb_put(skb, L2CAP_SDULEN_SIZE)); 22470a708f8fSGustavo F. Padovan 22480952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 22490a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 22500a708f8fSGustavo F. Padovan kfree_skb(skb); 22510a708f8fSGustavo F. Padovan return ERR_PTR(err); 22520a708f8fSGustavo F. Padovan } 22530a708f8fSGustavo F. Padovan 225418a48e76SMat Martineau bt_cb(skb)->control.fcs = chan->fcs; 22553ce3514fSMat Martineau bt_cb(skb)->control.retries = 0; 22560a708f8fSGustavo F. Padovan return skb; 22570a708f8fSGustavo F. Padovan } 22580a708f8fSGustavo F. Padovan 225994122bbeSMat Martineau static int l2cap_segment_sdu(struct l2cap_chan *chan, 226094122bbeSMat Martineau struct sk_buff_head *seg_queue, 226194122bbeSMat Martineau struct msghdr *msg, size_t len) 22620a708f8fSGustavo F. Padovan { 22630a708f8fSGustavo F. Padovan struct sk_buff *skb; 226494122bbeSMat Martineau u16 sdu_len; 226594122bbeSMat Martineau size_t pdu_len; 226694122bbeSMat Martineau u8 sar; 22670a708f8fSGustavo F. Padovan 2268b4400672SAndrei Emeltchenko BT_DBG("chan %p, msg %p, len %zu", chan, msg, len); 22690a708f8fSGustavo F. Padovan 227094122bbeSMat Martineau /* It is critical that ERTM PDUs fit in a single HCI fragment, 227194122bbeSMat Martineau * so fragmented skbs are not used. The HCI layer's handling 227294122bbeSMat Martineau * of fragmented skbs is not compatible with ERTM's queueing. 227394122bbeSMat Martineau */ 227494122bbeSMat Martineau 227594122bbeSMat Martineau /* PDU size is derived from the HCI MTU */ 227694122bbeSMat Martineau pdu_len = chan->conn->mtu; 227794122bbeSMat Martineau 2278a549574dSMat Martineau /* Constrain PDU size for BR/EDR connections */ 2279a549574dSMat Martineau if (!chan->hs_hcon) 228094122bbeSMat Martineau pdu_len = min_t(size_t, pdu_len, L2CAP_BREDR_MAX_PAYLOAD); 228194122bbeSMat Martineau 228294122bbeSMat Martineau /* Adjust for largest possible L2CAP overhead. */ 228335d401dfSGustavo Padovan if (chan->fcs) 228435d401dfSGustavo Padovan pdu_len -= L2CAP_FCS_SIZE; 228535d401dfSGustavo Padovan 2286ba7aa64fSGustavo Padovan pdu_len -= __ertm_hdr_size(chan); 228794122bbeSMat Martineau 228894122bbeSMat Martineau /* Remote device may have requested smaller PDUs */ 228994122bbeSMat Martineau pdu_len = min_t(size_t, pdu_len, chan->remote_mps); 229094122bbeSMat Martineau 229194122bbeSMat Martineau if (len <= pdu_len) { 229294122bbeSMat Martineau sar = L2CAP_SAR_UNSEGMENTED; 229394122bbeSMat Martineau sdu_len = 0; 229494122bbeSMat Martineau pdu_len = len; 229594122bbeSMat Martineau } else { 229694122bbeSMat Martineau sar = L2CAP_SAR_START; 229794122bbeSMat Martineau sdu_len = len; 229894122bbeSMat Martineau } 22990a708f8fSGustavo F. Padovan 23000a708f8fSGustavo F. Padovan while (len > 0) { 230194122bbeSMat Martineau skb = l2cap_create_iframe_pdu(chan, msg, pdu_len, sdu_len); 23020a708f8fSGustavo F. Padovan 23030a708f8fSGustavo F. Padovan if (IS_ERR(skb)) { 230494122bbeSMat Martineau __skb_queue_purge(seg_queue); 23050a708f8fSGustavo F. Padovan return PTR_ERR(skb); 23060a708f8fSGustavo F. Padovan } 23070a708f8fSGustavo F. Padovan 230894122bbeSMat Martineau bt_cb(skb)->control.sar = sar; 230994122bbeSMat Martineau __skb_queue_tail(seg_queue, skb); 23100a708f8fSGustavo F. Padovan 231194122bbeSMat Martineau len -= pdu_len; 2312069cb270SLukasz Rymanowski if (sdu_len) 231394122bbeSMat Martineau sdu_len = 0; 231494122bbeSMat Martineau 231594122bbeSMat Martineau if (len <= pdu_len) { 231694122bbeSMat Martineau sar = L2CAP_SAR_END; 231794122bbeSMat Martineau pdu_len = len; 231894122bbeSMat Martineau } else { 231994122bbeSMat Martineau sar = L2CAP_SAR_CONTINUE; 232094122bbeSMat Martineau } 232194122bbeSMat Martineau } 232294122bbeSMat Martineau 2323f0f62799SGustavo Padovan return 0; 23240a708f8fSGustavo F. Padovan } 23250a708f8fSGustavo F. Padovan 2326177f8f2bSJohan Hedberg static struct sk_buff *l2cap_create_le_flowctl_pdu(struct l2cap_chan *chan, 2327177f8f2bSJohan Hedberg struct msghdr *msg, 2328177f8f2bSJohan Hedberg size_t len, u16 sdulen) 2329177f8f2bSJohan Hedberg { 2330177f8f2bSJohan Hedberg struct l2cap_conn *conn = chan->conn; 2331177f8f2bSJohan Hedberg struct sk_buff *skb; 2332177f8f2bSJohan Hedberg int err, count, hlen; 2333177f8f2bSJohan Hedberg struct l2cap_hdr *lh; 2334177f8f2bSJohan Hedberg 2335177f8f2bSJohan Hedberg BT_DBG("chan %p len %zu", chan, len); 2336177f8f2bSJohan Hedberg 2337177f8f2bSJohan Hedberg if (!conn) 2338177f8f2bSJohan Hedberg return ERR_PTR(-ENOTCONN); 2339177f8f2bSJohan Hedberg 2340177f8f2bSJohan Hedberg hlen = L2CAP_HDR_SIZE; 2341177f8f2bSJohan Hedberg 2342177f8f2bSJohan Hedberg if (sdulen) 2343177f8f2bSJohan Hedberg hlen += L2CAP_SDULEN_SIZE; 2344177f8f2bSJohan Hedberg 2345177f8f2bSJohan Hedberg count = min_t(unsigned int, (conn->mtu - hlen), len); 2346177f8f2bSJohan Hedberg 2347d9fbd02bSMarcel Holtmann skb = chan->ops->alloc_skb(chan, hlen, count, 2348177f8f2bSJohan Hedberg msg->msg_flags & MSG_DONTWAIT); 2349177f8f2bSJohan Hedberg if (IS_ERR(skb)) 2350177f8f2bSJohan Hedberg return skb; 2351177f8f2bSJohan Hedberg 2352177f8f2bSJohan Hedberg /* Create L2CAP header */ 2353177f8f2bSJohan Hedberg lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2354177f8f2bSJohan Hedberg lh->cid = cpu_to_le16(chan->dcid); 2355177f8f2bSJohan Hedberg lh->len = cpu_to_le16(len + (hlen - L2CAP_HDR_SIZE)); 2356177f8f2bSJohan Hedberg 2357177f8f2bSJohan Hedberg if (sdulen) 2358177f8f2bSJohan Hedberg put_unaligned_le16(sdulen, skb_put(skb, L2CAP_SDULEN_SIZE)); 2359177f8f2bSJohan Hedberg 2360177f8f2bSJohan Hedberg err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 2361177f8f2bSJohan Hedberg if (unlikely(err < 0)) { 2362177f8f2bSJohan Hedberg kfree_skb(skb); 2363177f8f2bSJohan Hedberg return ERR_PTR(err); 2364177f8f2bSJohan Hedberg } 2365177f8f2bSJohan Hedberg 2366177f8f2bSJohan Hedberg return skb; 2367177f8f2bSJohan Hedberg } 2368177f8f2bSJohan Hedberg 2369177f8f2bSJohan Hedberg static int l2cap_segment_le_sdu(struct l2cap_chan *chan, 2370177f8f2bSJohan Hedberg struct sk_buff_head *seg_queue, 2371177f8f2bSJohan Hedberg struct msghdr *msg, size_t len) 2372177f8f2bSJohan Hedberg { 2373177f8f2bSJohan Hedberg struct sk_buff *skb; 2374177f8f2bSJohan Hedberg size_t pdu_len; 2375177f8f2bSJohan Hedberg u16 sdu_len; 2376177f8f2bSJohan Hedberg 2377177f8f2bSJohan Hedberg BT_DBG("chan %p, msg %p, len %zu", chan, msg, len); 2378177f8f2bSJohan Hedberg 2379177f8f2bSJohan Hedberg sdu_len = len; 238072c6fb91SJohan Hedberg pdu_len = chan->remote_mps - L2CAP_SDULEN_SIZE; 2381177f8f2bSJohan Hedberg 2382177f8f2bSJohan Hedberg while (len > 0) { 2383177f8f2bSJohan Hedberg if (len <= pdu_len) 2384177f8f2bSJohan Hedberg pdu_len = len; 2385177f8f2bSJohan Hedberg 2386177f8f2bSJohan Hedberg skb = l2cap_create_le_flowctl_pdu(chan, msg, pdu_len, sdu_len); 2387177f8f2bSJohan Hedberg if (IS_ERR(skb)) { 2388177f8f2bSJohan Hedberg __skb_queue_purge(seg_queue); 2389177f8f2bSJohan Hedberg return PTR_ERR(skb); 2390177f8f2bSJohan Hedberg } 2391177f8f2bSJohan Hedberg 2392177f8f2bSJohan Hedberg __skb_queue_tail(seg_queue, skb); 2393177f8f2bSJohan Hedberg 2394177f8f2bSJohan Hedberg len -= pdu_len; 2395177f8f2bSJohan Hedberg 2396177f8f2bSJohan Hedberg if (sdu_len) { 2397177f8f2bSJohan Hedberg sdu_len = 0; 2398177f8f2bSJohan Hedberg pdu_len += L2CAP_SDULEN_SIZE; 2399177f8f2bSJohan Hedberg } 2400177f8f2bSJohan Hedberg } 2401177f8f2bSJohan Hedberg 2402177f8f2bSJohan Hedberg return 0; 2403177f8f2bSJohan Hedberg } 2404177f8f2bSJohan Hedberg 24058d46321cSMarcel Holtmann int l2cap_chan_send(struct l2cap_chan *chan, struct msghdr *msg, size_t len) 24069a91a04aSGustavo F. Padovan { 24079a91a04aSGustavo F. Padovan struct sk_buff *skb; 24089a91a04aSGustavo F. Padovan int err; 240994122bbeSMat Martineau struct sk_buff_head seg_queue; 24109a91a04aSGustavo F. Padovan 241131e8ce80SSeung-Woo Kim if (!chan->conn) 241231e8ce80SSeung-Woo Kim return -ENOTCONN; 241331e8ce80SSeung-Woo Kim 24149a91a04aSGustavo F. Padovan /* Connectionless channel */ 2415715ec005SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_LESS) { 24168d46321cSMarcel Holtmann skb = l2cap_create_connless_pdu(chan, msg, len); 24179a91a04aSGustavo F. Padovan if (IS_ERR(skb)) 24189a91a04aSGustavo F. Padovan return PTR_ERR(skb); 24199a91a04aSGustavo F. Padovan 2420ede81a2aSAndrzej Kaczmarek /* Channel lock is released before requesting new skb and then 2421ede81a2aSAndrzej Kaczmarek * reacquired thus we need to recheck channel state. 2422ede81a2aSAndrzej Kaczmarek */ 2423ede81a2aSAndrzej Kaczmarek if (chan->state != BT_CONNECTED) { 2424ede81a2aSAndrzej Kaczmarek kfree_skb(skb); 2425ede81a2aSAndrzej Kaczmarek return -ENOTCONN; 2426ede81a2aSAndrzej Kaczmarek } 2427ede81a2aSAndrzej Kaczmarek 24289a91a04aSGustavo F. Padovan l2cap_do_send(chan, skb); 24299a91a04aSGustavo F. Padovan return len; 24309a91a04aSGustavo F. Padovan } 24319a91a04aSGustavo F. Padovan 24329a91a04aSGustavo F. Padovan switch (chan->mode) { 243338319713SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 2434177f8f2bSJohan Hedberg /* Check outgoing MTU */ 2435177f8f2bSJohan Hedberg if (len > chan->omtu) 2436177f8f2bSJohan Hedberg return -EMSGSIZE; 2437177f8f2bSJohan Hedberg 2438fad5fc89SJohan Hedberg if (!chan->tx_credits) 2439fad5fc89SJohan Hedberg return -EAGAIN; 2440fad5fc89SJohan Hedberg 2441177f8f2bSJohan Hedberg __skb_queue_head_init(&seg_queue); 2442177f8f2bSJohan Hedberg 2443177f8f2bSJohan Hedberg err = l2cap_segment_le_sdu(chan, &seg_queue, msg, len); 2444177f8f2bSJohan Hedberg 2445177f8f2bSJohan Hedberg if (chan->state != BT_CONNECTED) { 2446177f8f2bSJohan Hedberg __skb_queue_purge(&seg_queue); 2447177f8f2bSJohan Hedberg err = -ENOTCONN; 2448177f8f2bSJohan Hedberg } 2449177f8f2bSJohan Hedberg 2450177f8f2bSJohan Hedberg if (err) 2451177f8f2bSJohan Hedberg return err; 2452177f8f2bSJohan Hedberg 2453177f8f2bSJohan Hedberg skb_queue_splice_tail_init(&seg_queue, &chan->tx_q); 2454177f8f2bSJohan Hedberg 2455177f8f2bSJohan Hedberg while (chan->tx_credits && !skb_queue_empty(&chan->tx_q)) { 2456177f8f2bSJohan Hedberg l2cap_do_send(chan, skb_dequeue(&chan->tx_q)); 2457177f8f2bSJohan Hedberg chan->tx_credits--; 2458177f8f2bSJohan Hedberg } 2459177f8f2bSJohan Hedberg 2460177f8f2bSJohan Hedberg if (!chan->tx_credits) 2461177f8f2bSJohan Hedberg chan->ops->suspend(chan); 2462177f8f2bSJohan Hedberg 2463177f8f2bSJohan Hedberg err = len; 2464177f8f2bSJohan Hedberg 2465177f8f2bSJohan Hedberg break; 2466177f8f2bSJohan Hedberg 2467fad5fc89SJohan Hedberg case L2CAP_MODE_BASIC: 24689a91a04aSGustavo F. Padovan /* Check outgoing MTU */ 24699a91a04aSGustavo F. Padovan if (len > chan->omtu) 24709a91a04aSGustavo F. Padovan return -EMSGSIZE; 24719a91a04aSGustavo F. Padovan 24729a91a04aSGustavo F. Padovan /* Create a basic PDU */ 24738d46321cSMarcel Holtmann skb = l2cap_create_basic_pdu(chan, msg, len); 24749a91a04aSGustavo F. Padovan if (IS_ERR(skb)) 24759a91a04aSGustavo F. Padovan return PTR_ERR(skb); 24769a91a04aSGustavo F. Padovan 2477ede81a2aSAndrzej Kaczmarek /* Channel lock is released before requesting new skb and then 2478ede81a2aSAndrzej Kaczmarek * reacquired thus we need to recheck channel state. 2479ede81a2aSAndrzej Kaczmarek */ 2480ede81a2aSAndrzej Kaczmarek if (chan->state != BT_CONNECTED) { 2481ede81a2aSAndrzej Kaczmarek kfree_skb(skb); 2482ede81a2aSAndrzej Kaczmarek return -ENOTCONN; 2483ede81a2aSAndrzej Kaczmarek } 2484ede81a2aSAndrzej Kaczmarek 24859a91a04aSGustavo F. Padovan l2cap_do_send(chan, skb); 24869a91a04aSGustavo F. Padovan err = len; 24879a91a04aSGustavo F. Padovan break; 24889a91a04aSGustavo F. Padovan 24899a91a04aSGustavo F. Padovan case L2CAP_MODE_ERTM: 24909a91a04aSGustavo F. Padovan case L2CAP_MODE_STREAMING: 249194122bbeSMat Martineau /* Check outgoing MTU */ 249294122bbeSMat Martineau if (len > chan->omtu) { 249394122bbeSMat Martineau err = -EMSGSIZE; 24949a91a04aSGustavo F. Padovan break; 24959a91a04aSGustavo F. Padovan } 24969a91a04aSGustavo F. Padovan 249794122bbeSMat Martineau __skb_queue_head_init(&seg_queue); 249894122bbeSMat Martineau 249994122bbeSMat Martineau /* Do segmentation before calling in to the state machine, 250094122bbeSMat Martineau * since it's possible to block while waiting for memory 250194122bbeSMat Martineau * allocation. 250294122bbeSMat Martineau */ 250394122bbeSMat Martineau err = l2cap_segment_sdu(chan, &seg_queue, msg, len); 250494122bbeSMat Martineau 250594122bbeSMat Martineau /* The channel could have been closed while segmenting, 250694122bbeSMat Martineau * check that it is still connected. 250794122bbeSMat Martineau */ 250894122bbeSMat Martineau if (chan->state != BT_CONNECTED) { 250994122bbeSMat Martineau __skb_queue_purge(&seg_queue); 251094122bbeSMat Martineau err = -ENOTCONN; 25119a91a04aSGustavo F. Padovan } 25129a91a04aSGustavo F. Padovan 251394122bbeSMat Martineau if (err) 251494122bbeSMat Martineau break; 251594122bbeSMat Martineau 25163733937dSMat Martineau if (chan->mode == L2CAP_MODE_ERTM) 2517d660366dSGustavo Padovan l2cap_tx(chan, NULL, &seg_queue, L2CAP_EV_DATA_REQUEST); 25183733937dSMat Martineau else 2519d660366dSGustavo Padovan l2cap_streaming_send(chan, &seg_queue); 252094122bbeSMat Martineau 25219a91a04aSGustavo F. Padovan err = len; 25229a91a04aSGustavo F. Padovan 252394122bbeSMat Martineau /* If the skbs were not queued for sending, they'll still be in 252494122bbeSMat Martineau * seg_queue and need to be purged. 252594122bbeSMat Martineau */ 252694122bbeSMat Martineau __skb_queue_purge(&seg_queue); 25279a91a04aSGustavo F. Padovan break; 25289a91a04aSGustavo F. Padovan 25299a91a04aSGustavo F. Padovan default: 25309a91a04aSGustavo F. Padovan BT_DBG("bad state %1.1x", chan->mode); 25319a91a04aSGustavo F. Padovan err = -EBADFD; 25329a91a04aSGustavo F. Padovan } 25339a91a04aSGustavo F. Padovan 25349a91a04aSGustavo F. Padovan return err; 25359a91a04aSGustavo F. Padovan } 25366b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_send); 25379a91a04aSGustavo F. Padovan 2538d2a7ac5dSMat Martineau static void l2cap_send_srej(struct l2cap_chan *chan, u16 txseq) 2539d2a7ac5dSMat Martineau { 2540bed68bdeSMat Martineau struct l2cap_ctrl control; 2541bed68bdeSMat Martineau u16 seq; 2542bed68bdeSMat Martineau 2543b4400672SAndrei Emeltchenko BT_DBG("chan %p, txseq %u", chan, txseq); 2544bed68bdeSMat Martineau 2545bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2546bed68bdeSMat Martineau control.sframe = 1; 2547bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2548bed68bdeSMat Martineau 2549bed68bdeSMat Martineau for (seq = chan->expected_tx_seq; seq != txseq; 2550bed68bdeSMat Martineau seq = __next_seq(chan, seq)) { 2551bed68bdeSMat Martineau if (!l2cap_ertm_seq_in_queue(&chan->srej_q, seq)) { 2552bed68bdeSMat Martineau control.reqseq = seq; 2553bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2554bed68bdeSMat Martineau l2cap_seq_list_append(&chan->srej_list, seq); 2555bed68bdeSMat Martineau } 2556bed68bdeSMat Martineau } 2557bed68bdeSMat Martineau 2558bed68bdeSMat Martineau chan->expected_tx_seq = __next_seq(chan, txseq); 2559d2a7ac5dSMat Martineau } 2560d2a7ac5dSMat Martineau 2561d2a7ac5dSMat Martineau static void l2cap_send_srej_tail(struct l2cap_chan *chan) 2562d2a7ac5dSMat Martineau { 2563bed68bdeSMat Martineau struct l2cap_ctrl control; 2564bed68bdeSMat Martineau 2565bed68bdeSMat Martineau BT_DBG("chan %p", chan); 2566bed68bdeSMat Martineau 2567bed68bdeSMat Martineau if (chan->srej_list.tail == L2CAP_SEQ_LIST_CLEAR) 2568bed68bdeSMat Martineau return; 2569bed68bdeSMat Martineau 2570bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2571bed68bdeSMat Martineau control.sframe = 1; 2572bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2573bed68bdeSMat Martineau control.reqseq = chan->srej_list.tail; 2574bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2575d2a7ac5dSMat Martineau } 2576d2a7ac5dSMat Martineau 2577d2a7ac5dSMat Martineau static void l2cap_send_srej_list(struct l2cap_chan *chan, u16 txseq) 2578d2a7ac5dSMat Martineau { 2579bed68bdeSMat Martineau struct l2cap_ctrl control; 2580bed68bdeSMat Martineau u16 initial_head; 2581bed68bdeSMat Martineau u16 seq; 2582bed68bdeSMat Martineau 2583b4400672SAndrei Emeltchenko BT_DBG("chan %p, txseq %u", chan, txseq); 2584bed68bdeSMat Martineau 2585bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2586bed68bdeSMat Martineau control.sframe = 1; 2587bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2588bed68bdeSMat Martineau 2589bed68bdeSMat Martineau /* Capture initial list head to allow only one pass through the list. */ 2590bed68bdeSMat Martineau initial_head = chan->srej_list.head; 2591bed68bdeSMat Martineau 2592bed68bdeSMat Martineau do { 2593bed68bdeSMat Martineau seq = l2cap_seq_list_pop(&chan->srej_list); 2594bed68bdeSMat Martineau if (seq == txseq || seq == L2CAP_SEQ_LIST_CLEAR) 2595bed68bdeSMat Martineau break; 2596bed68bdeSMat Martineau 2597bed68bdeSMat Martineau control.reqseq = seq; 2598bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2599bed68bdeSMat Martineau l2cap_seq_list_append(&chan->srej_list, seq); 2600bed68bdeSMat Martineau } while (chan->srej_list.head != initial_head); 2601d2a7ac5dSMat Martineau } 2602d2a7ac5dSMat Martineau 2603608bcc6dSMat Martineau static void l2cap_process_reqseq(struct l2cap_chan *chan, u16 reqseq) 2604608bcc6dSMat Martineau { 2605608bcc6dSMat Martineau struct sk_buff *acked_skb; 2606608bcc6dSMat Martineau u16 ackseq; 2607608bcc6dSMat Martineau 2608b4400672SAndrei Emeltchenko BT_DBG("chan %p, reqseq %u", chan, reqseq); 2609608bcc6dSMat Martineau 2610608bcc6dSMat Martineau if (chan->unacked_frames == 0 || reqseq == chan->expected_ack_seq) 2611608bcc6dSMat Martineau return; 2612608bcc6dSMat Martineau 2613b4400672SAndrei Emeltchenko BT_DBG("expected_ack_seq %u, unacked_frames %u", 2614608bcc6dSMat Martineau chan->expected_ack_seq, chan->unacked_frames); 2615608bcc6dSMat Martineau 2616608bcc6dSMat Martineau for (ackseq = chan->expected_ack_seq; ackseq != reqseq; 2617608bcc6dSMat Martineau ackseq = __next_seq(chan, ackseq)) { 2618608bcc6dSMat Martineau 2619608bcc6dSMat Martineau acked_skb = l2cap_ertm_seq_in_queue(&chan->tx_q, ackseq); 2620608bcc6dSMat Martineau if (acked_skb) { 2621608bcc6dSMat Martineau skb_unlink(acked_skb, &chan->tx_q); 2622608bcc6dSMat Martineau kfree_skb(acked_skb); 2623608bcc6dSMat Martineau chan->unacked_frames--; 2624608bcc6dSMat Martineau } 2625608bcc6dSMat Martineau } 2626608bcc6dSMat Martineau 2627608bcc6dSMat Martineau chan->expected_ack_seq = reqseq; 2628608bcc6dSMat Martineau 2629608bcc6dSMat Martineau if (chan->unacked_frames == 0) 2630608bcc6dSMat Martineau __clear_retrans_timer(chan); 2631608bcc6dSMat Martineau 2632b4400672SAndrei Emeltchenko BT_DBG("unacked_frames %u", chan->unacked_frames); 2633608bcc6dSMat Martineau } 2634608bcc6dSMat Martineau 2635608bcc6dSMat Martineau static void l2cap_abort_rx_srej_sent(struct l2cap_chan *chan) 2636608bcc6dSMat Martineau { 2637608bcc6dSMat Martineau BT_DBG("chan %p", chan); 2638608bcc6dSMat Martineau 2639608bcc6dSMat Martineau chan->expected_tx_seq = chan->buffer_seq; 2640608bcc6dSMat Martineau l2cap_seq_list_clear(&chan->srej_list); 2641608bcc6dSMat Martineau skb_queue_purge(&chan->srej_q); 2642608bcc6dSMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 2643608bcc6dSMat Martineau } 2644608bcc6dSMat Martineau 2645d660366dSGustavo Padovan static void l2cap_tx_state_xmit(struct l2cap_chan *chan, 2646608bcc6dSMat Martineau struct l2cap_ctrl *control, 2647608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2648608bcc6dSMat Martineau { 2649608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d", chan, control, skbs, 2650608bcc6dSMat Martineau event); 2651608bcc6dSMat Martineau 2652608bcc6dSMat Martineau switch (event) { 2653608bcc6dSMat Martineau case L2CAP_EV_DATA_REQUEST: 2654608bcc6dSMat Martineau if (chan->tx_send_head == NULL) 2655608bcc6dSMat Martineau chan->tx_send_head = skb_peek(skbs); 2656608bcc6dSMat Martineau 2657608bcc6dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 2658608bcc6dSMat Martineau l2cap_ertm_send(chan); 2659608bcc6dSMat Martineau break; 2660608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_DETECTED: 2661608bcc6dSMat Martineau BT_DBG("Enter LOCAL_BUSY"); 2662608bcc6dSMat Martineau set_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2663608bcc6dSMat Martineau 2664608bcc6dSMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 2665608bcc6dSMat Martineau /* The SREJ_SENT state must be aborted if we are to 2666608bcc6dSMat Martineau * enter the LOCAL_BUSY state. 2667608bcc6dSMat Martineau */ 2668608bcc6dSMat Martineau l2cap_abort_rx_srej_sent(chan); 2669608bcc6dSMat Martineau } 2670608bcc6dSMat Martineau 2671608bcc6dSMat Martineau l2cap_send_ack(chan); 2672608bcc6dSMat Martineau 2673608bcc6dSMat Martineau break; 2674608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_CLEAR: 2675608bcc6dSMat Martineau BT_DBG("Exit LOCAL_BUSY"); 2676608bcc6dSMat Martineau clear_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2677608bcc6dSMat Martineau 2678608bcc6dSMat Martineau if (test_bit(CONN_RNR_SENT, &chan->conn_state)) { 2679608bcc6dSMat Martineau struct l2cap_ctrl local_control; 2680608bcc6dSMat Martineau 2681608bcc6dSMat Martineau memset(&local_control, 0, sizeof(local_control)); 2682608bcc6dSMat Martineau local_control.sframe = 1; 2683608bcc6dSMat Martineau local_control.super = L2CAP_SUPER_RR; 2684608bcc6dSMat Martineau local_control.poll = 1; 2685608bcc6dSMat Martineau local_control.reqseq = chan->buffer_seq; 2686a67d7f6fSMat Martineau l2cap_send_sframe(chan, &local_control); 2687608bcc6dSMat Martineau 2688608bcc6dSMat Martineau chan->retry_count = 1; 2689608bcc6dSMat Martineau __set_monitor_timer(chan); 2690608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2691608bcc6dSMat Martineau } 2692608bcc6dSMat Martineau break; 2693608bcc6dSMat Martineau case L2CAP_EV_RECV_REQSEQ_AND_FBIT: 2694608bcc6dSMat Martineau l2cap_process_reqseq(chan, control->reqseq); 2695608bcc6dSMat Martineau break; 2696608bcc6dSMat Martineau case L2CAP_EV_EXPLICIT_POLL: 2697608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2698608bcc6dSMat Martineau chan->retry_count = 1; 2699608bcc6dSMat Martineau __set_monitor_timer(chan); 2700608bcc6dSMat Martineau __clear_ack_timer(chan); 2701608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2702608bcc6dSMat Martineau break; 2703608bcc6dSMat Martineau case L2CAP_EV_RETRANS_TO: 2704608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2705608bcc6dSMat Martineau chan->retry_count = 1; 2706608bcc6dSMat Martineau __set_monitor_timer(chan); 2707608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2708608bcc6dSMat Martineau break; 2709608bcc6dSMat Martineau case L2CAP_EV_RECV_FBIT: 2710608bcc6dSMat Martineau /* Nothing to process */ 2711608bcc6dSMat Martineau break; 2712608bcc6dSMat Martineau default: 2713608bcc6dSMat Martineau break; 2714608bcc6dSMat Martineau } 2715608bcc6dSMat Martineau } 2716608bcc6dSMat Martineau 2717d660366dSGustavo Padovan static void l2cap_tx_state_wait_f(struct l2cap_chan *chan, 2718608bcc6dSMat Martineau struct l2cap_ctrl *control, 2719608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2720608bcc6dSMat Martineau { 2721608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d", chan, control, skbs, 2722608bcc6dSMat Martineau event); 2723608bcc6dSMat Martineau 2724608bcc6dSMat Martineau switch (event) { 2725608bcc6dSMat Martineau case L2CAP_EV_DATA_REQUEST: 2726608bcc6dSMat Martineau if (chan->tx_send_head == NULL) 2727608bcc6dSMat Martineau chan->tx_send_head = skb_peek(skbs); 2728608bcc6dSMat Martineau /* Queue data, but don't send. */ 2729608bcc6dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 2730608bcc6dSMat Martineau break; 2731608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_DETECTED: 2732608bcc6dSMat Martineau BT_DBG("Enter LOCAL_BUSY"); 2733608bcc6dSMat Martineau set_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2734608bcc6dSMat Martineau 2735608bcc6dSMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 2736608bcc6dSMat Martineau /* The SREJ_SENT state must be aborted if we are to 2737608bcc6dSMat Martineau * enter the LOCAL_BUSY state. 2738608bcc6dSMat Martineau */ 2739608bcc6dSMat Martineau l2cap_abort_rx_srej_sent(chan); 2740608bcc6dSMat Martineau } 2741608bcc6dSMat Martineau 2742608bcc6dSMat Martineau l2cap_send_ack(chan); 2743608bcc6dSMat Martineau 2744608bcc6dSMat Martineau break; 2745608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_CLEAR: 2746608bcc6dSMat Martineau BT_DBG("Exit LOCAL_BUSY"); 2747608bcc6dSMat Martineau clear_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2748608bcc6dSMat Martineau 2749608bcc6dSMat Martineau if (test_bit(CONN_RNR_SENT, &chan->conn_state)) { 2750608bcc6dSMat Martineau struct l2cap_ctrl local_control; 2751608bcc6dSMat Martineau memset(&local_control, 0, sizeof(local_control)); 2752608bcc6dSMat Martineau local_control.sframe = 1; 2753608bcc6dSMat Martineau local_control.super = L2CAP_SUPER_RR; 2754608bcc6dSMat Martineau local_control.poll = 1; 2755608bcc6dSMat Martineau local_control.reqseq = chan->buffer_seq; 2756a67d7f6fSMat Martineau l2cap_send_sframe(chan, &local_control); 2757608bcc6dSMat Martineau 2758608bcc6dSMat Martineau chan->retry_count = 1; 2759608bcc6dSMat Martineau __set_monitor_timer(chan); 2760608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2761608bcc6dSMat Martineau } 2762608bcc6dSMat Martineau break; 2763608bcc6dSMat Martineau case L2CAP_EV_RECV_REQSEQ_AND_FBIT: 2764608bcc6dSMat Martineau l2cap_process_reqseq(chan, control->reqseq); 2765608bcc6dSMat Martineau 2766608bcc6dSMat Martineau /* Fall through */ 2767608bcc6dSMat Martineau 2768608bcc6dSMat Martineau case L2CAP_EV_RECV_FBIT: 2769608bcc6dSMat Martineau if (control && control->final) { 2770608bcc6dSMat Martineau __clear_monitor_timer(chan); 2771608bcc6dSMat Martineau if (chan->unacked_frames > 0) 2772608bcc6dSMat Martineau __set_retrans_timer(chan); 2773608bcc6dSMat Martineau chan->retry_count = 0; 2774608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 2775608bcc6dSMat Martineau BT_DBG("recv fbit tx_state 0x2.2%x", chan->tx_state); 2776608bcc6dSMat Martineau } 2777608bcc6dSMat Martineau break; 2778608bcc6dSMat Martineau case L2CAP_EV_EXPLICIT_POLL: 2779608bcc6dSMat Martineau /* Ignore */ 2780608bcc6dSMat Martineau break; 2781608bcc6dSMat Martineau case L2CAP_EV_MONITOR_TO: 2782608bcc6dSMat Martineau if (chan->max_tx == 0 || chan->retry_count < chan->max_tx) { 2783608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2784608bcc6dSMat Martineau __set_monitor_timer(chan); 2785608bcc6dSMat Martineau chan->retry_count++; 2786608bcc6dSMat Martineau } else { 27875e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNABORTED); 2788608bcc6dSMat Martineau } 2789608bcc6dSMat Martineau break; 2790608bcc6dSMat Martineau default: 2791608bcc6dSMat Martineau break; 2792608bcc6dSMat Martineau } 2793608bcc6dSMat Martineau } 2794608bcc6dSMat Martineau 2795d660366dSGustavo Padovan static void l2cap_tx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 2796608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2797608bcc6dSMat Martineau { 2798608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d, state %d", 2799608bcc6dSMat Martineau chan, control, skbs, event, chan->tx_state); 2800608bcc6dSMat Martineau 2801608bcc6dSMat Martineau switch (chan->tx_state) { 2802608bcc6dSMat Martineau case L2CAP_TX_STATE_XMIT: 2803d660366dSGustavo Padovan l2cap_tx_state_xmit(chan, control, skbs, event); 2804608bcc6dSMat Martineau break; 2805608bcc6dSMat Martineau case L2CAP_TX_STATE_WAIT_F: 2806d660366dSGustavo Padovan l2cap_tx_state_wait_f(chan, control, skbs, event); 2807608bcc6dSMat Martineau break; 2808608bcc6dSMat Martineau default: 2809608bcc6dSMat Martineau /* Ignore event */ 2810608bcc6dSMat Martineau break; 2811608bcc6dSMat Martineau } 2812608bcc6dSMat Martineau } 2813608bcc6dSMat Martineau 28144b51dae9SMat Martineau static void l2cap_pass_to_tx(struct l2cap_chan *chan, 28154b51dae9SMat Martineau struct l2cap_ctrl *control) 28164b51dae9SMat Martineau { 28174b51dae9SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2818401bb1f7SAndrei Emeltchenko l2cap_tx(chan, control, NULL, L2CAP_EV_RECV_REQSEQ_AND_FBIT); 28194b51dae9SMat Martineau } 28204b51dae9SMat Martineau 2821f80842a8SMat Martineau static void l2cap_pass_to_tx_fbit(struct l2cap_chan *chan, 2822f80842a8SMat Martineau struct l2cap_ctrl *control) 2823f80842a8SMat Martineau { 2824f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2825401bb1f7SAndrei Emeltchenko l2cap_tx(chan, control, NULL, L2CAP_EV_RECV_FBIT); 2826f80842a8SMat Martineau } 2827f80842a8SMat Martineau 28280a708f8fSGustavo F. Padovan /* Copy frame to all raw sockets on that connection */ 28290a708f8fSGustavo F. Padovan static void l2cap_raw_recv(struct l2cap_conn *conn, struct sk_buff *skb) 28300a708f8fSGustavo F. Padovan { 28310a708f8fSGustavo F. Padovan struct sk_buff *nskb; 283248454079SGustavo F. Padovan struct l2cap_chan *chan; 28330a708f8fSGustavo F. Padovan 28340a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 28350a708f8fSGustavo F. Padovan 28363df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 28373d57dc68SGustavo F. Padovan 28383df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 2839715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_RAW) 28400a708f8fSGustavo F. Padovan continue; 28410a708f8fSGustavo F. Padovan 28427f5396a7SGustavo Padovan /* Don't send frame to the channel it came from */ 28437f5396a7SGustavo Padovan if (bt_cb(skb)->chan == chan) 28440a708f8fSGustavo F. Padovan continue; 28457f5396a7SGustavo Padovan 28468bcde1f2SGustavo Padovan nskb = skb_clone(skb, GFP_KERNEL); 28470a708f8fSGustavo F. Padovan if (!nskb) 28480a708f8fSGustavo F. Padovan continue; 284980b98027SGustavo Padovan if (chan->ops->recv(chan, nskb)) 28500a708f8fSGustavo F. Padovan kfree_skb(nskb); 28510a708f8fSGustavo F. Padovan } 28523d57dc68SGustavo F. Padovan 28533df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 28540a708f8fSGustavo F. Padovan } 28550a708f8fSGustavo F. Padovan 28560a708f8fSGustavo F. Padovan /* ---- L2CAP signalling commands ---- */ 2857b4400672SAndrei Emeltchenko static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn, u8 code, 2858b4400672SAndrei Emeltchenko u8 ident, u16 dlen, void *data) 28590a708f8fSGustavo F. Padovan { 28600a708f8fSGustavo F. Padovan struct sk_buff *skb, **frag; 28610a708f8fSGustavo F. Padovan struct l2cap_cmd_hdr *cmd; 28620a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 28630a708f8fSGustavo F. Padovan int len, count; 28640a708f8fSGustavo F. Padovan 2865b4400672SAndrei Emeltchenko BT_DBG("conn %p, code 0x%2.2x, ident 0x%2.2x, len %u", 28660a708f8fSGustavo F. Padovan conn, code, ident, dlen); 28670a708f8fSGustavo F. Padovan 2868300b962eSAnderson Lizardo if (conn->mtu < L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE) 2869300b962eSAnderson Lizardo return NULL; 2870300b962eSAnderson Lizardo 28710a708f8fSGustavo F. Padovan len = L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE + dlen; 28720a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 28730a708f8fSGustavo F. Padovan 28748bcde1f2SGustavo Padovan skb = bt_skb_alloc(count, GFP_KERNEL); 28750a708f8fSGustavo F. Padovan if (!skb) 28760a708f8fSGustavo F. Padovan return NULL; 28770a708f8fSGustavo F. Padovan 28780a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 28790a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(L2CAP_CMD_HDR_SIZE + dlen); 28803300d9a9SClaudio Takahasi 28813300d9a9SClaudio Takahasi if (conn->hcon->type == LE_LINK) 2882dcf4adbfSJoe Perches lh->cid = cpu_to_le16(L2CAP_CID_LE_SIGNALING); 28833300d9a9SClaudio Takahasi else 2884dcf4adbfSJoe Perches lh->cid = cpu_to_le16(L2CAP_CID_SIGNALING); 28850a708f8fSGustavo F. Padovan 28860a708f8fSGustavo F. Padovan cmd = (struct l2cap_cmd_hdr *) skb_put(skb, L2CAP_CMD_HDR_SIZE); 28870a708f8fSGustavo F. Padovan cmd->code = code; 28880a708f8fSGustavo F. Padovan cmd->ident = ident; 28890a708f8fSGustavo F. Padovan cmd->len = cpu_to_le16(dlen); 28900a708f8fSGustavo F. Padovan 28910a708f8fSGustavo F. Padovan if (dlen) { 28920a708f8fSGustavo F. Padovan count -= L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE; 28930a708f8fSGustavo F. Padovan memcpy(skb_put(skb, count), data, count); 28940a708f8fSGustavo F. Padovan data += count; 28950a708f8fSGustavo F. Padovan } 28960a708f8fSGustavo F. Padovan 28970a708f8fSGustavo F. Padovan len -= skb->len; 28980a708f8fSGustavo F. Padovan 28990a708f8fSGustavo F. Padovan /* Continuation fragments (no L2CAP header) */ 29000a708f8fSGustavo F. Padovan frag = &skb_shinfo(skb)->frag_list; 29010a708f8fSGustavo F. Padovan while (len) { 29020a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 29030a708f8fSGustavo F. Padovan 29048bcde1f2SGustavo Padovan *frag = bt_skb_alloc(count, GFP_KERNEL); 29050a708f8fSGustavo F. Padovan if (!*frag) 29060a708f8fSGustavo F. Padovan goto fail; 29070a708f8fSGustavo F. Padovan 29080a708f8fSGustavo F. Padovan memcpy(skb_put(*frag, count), data, count); 29090a708f8fSGustavo F. Padovan 29100a708f8fSGustavo F. Padovan len -= count; 29110a708f8fSGustavo F. Padovan data += count; 29120a708f8fSGustavo F. Padovan 29130a708f8fSGustavo F. Padovan frag = &(*frag)->next; 29140a708f8fSGustavo F. Padovan } 29150a708f8fSGustavo F. Padovan 29160a708f8fSGustavo F. Padovan return skb; 29170a708f8fSGustavo F. Padovan 29180a708f8fSGustavo F. Padovan fail: 29190a708f8fSGustavo F. Padovan kfree_skb(skb); 29200a708f8fSGustavo F. Padovan return NULL; 29210a708f8fSGustavo F. Padovan } 29220a708f8fSGustavo F. Padovan 29232d792818SGustavo Padovan static inline int l2cap_get_conf_opt(void **ptr, int *type, int *olen, 29242d792818SGustavo Padovan unsigned long *val) 29250a708f8fSGustavo F. Padovan { 29260a708f8fSGustavo F. Padovan struct l2cap_conf_opt *opt = *ptr; 29270a708f8fSGustavo F. Padovan int len; 29280a708f8fSGustavo F. Padovan 29290a708f8fSGustavo F. Padovan len = L2CAP_CONF_OPT_SIZE + opt->len; 29300a708f8fSGustavo F. Padovan *ptr += len; 29310a708f8fSGustavo F. Padovan 29320a708f8fSGustavo F. Padovan *type = opt->type; 29330a708f8fSGustavo F. Padovan *olen = opt->len; 29340a708f8fSGustavo F. Padovan 29350a708f8fSGustavo F. Padovan switch (opt->len) { 29360a708f8fSGustavo F. Padovan case 1: 29370a708f8fSGustavo F. Padovan *val = *((u8 *) opt->val); 29380a708f8fSGustavo F. Padovan break; 29390a708f8fSGustavo F. Padovan 29400a708f8fSGustavo F. Padovan case 2: 29410a708f8fSGustavo F. Padovan *val = get_unaligned_le16(opt->val); 29420a708f8fSGustavo F. Padovan break; 29430a708f8fSGustavo F. Padovan 29440a708f8fSGustavo F. Padovan case 4: 29450a708f8fSGustavo F. Padovan *val = get_unaligned_le32(opt->val); 29460a708f8fSGustavo F. Padovan break; 29470a708f8fSGustavo F. Padovan 29480a708f8fSGustavo F. Padovan default: 29490a708f8fSGustavo F. Padovan *val = (unsigned long) opt->val; 29500a708f8fSGustavo F. Padovan break; 29510a708f8fSGustavo F. Padovan } 29520a708f8fSGustavo F. Padovan 2953b4400672SAndrei Emeltchenko BT_DBG("type 0x%2.2x len %u val 0x%lx", *type, opt->len, *val); 29540a708f8fSGustavo F. Padovan return len; 29550a708f8fSGustavo F. Padovan } 29560a708f8fSGustavo F. Padovan 29570a708f8fSGustavo F. Padovan static void l2cap_add_conf_opt(void **ptr, u8 type, u8 len, unsigned long val) 29580a708f8fSGustavo F. Padovan { 29590a708f8fSGustavo F. Padovan struct l2cap_conf_opt *opt = *ptr; 29600a708f8fSGustavo F. Padovan 2961b4400672SAndrei Emeltchenko BT_DBG("type 0x%2.2x len %u val 0x%lx", type, len, val); 29620a708f8fSGustavo F. Padovan 29630a708f8fSGustavo F. Padovan opt->type = type; 29640a708f8fSGustavo F. Padovan opt->len = len; 29650a708f8fSGustavo F. Padovan 29660a708f8fSGustavo F. Padovan switch (len) { 29670a708f8fSGustavo F. Padovan case 1: 29680a708f8fSGustavo F. Padovan *((u8 *) opt->val) = val; 29690a708f8fSGustavo F. Padovan break; 29700a708f8fSGustavo F. Padovan 29710a708f8fSGustavo F. Padovan case 2: 29720a708f8fSGustavo F. Padovan put_unaligned_le16(val, opt->val); 29730a708f8fSGustavo F. Padovan break; 29740a708f8fSGustavo F. Padovan 29750a708f8fSGustavo F. Padovan case 4: 29760a708f8fSGustavo F. Padovan put_unaligned_le32(val, opt->val); 29770a708f8fSGustavo F. Padovan break; 29780a708f8fSGustavo F. Padovan 29790a708f8fSGustavo F. Padovan default: 29800a708f8fSGustavo F. Padovan memcpy(opt->val, (void *) val, len); 29810a708f8fSGustavo F. Padovan break; 29820a708f8fSGustavo F. Padovan } 29830a708f8fSGustavo F. Padovan 29840a708f8fSGustavo F. Padovan *ptr += L2CAP_CONF_OPT_SIZE + len; 29850a708f8fSGustavo F. Padovan } 29860a708f8fSGustavo F. Padovan 2987f89cef09SAndrei Emeltchenko static void l2cap_add_opt_efs(void **ptr, struct l2cap_chan *chan) 2988f89cef09SAndrei Emeltchenko { 2989f89cef09SAndrei Emeltchenko struct l2cap_conf_efs efs; 2990f89cef09SAndrei Emeltchenko 2991f89cef09SAndrei Emeltchenko switch (chan->mode) { 2992f89cef09SAndrei Emeltchenko case L2CAP_MODE_ERTM: 2993f89cef09SAndrei Emeltchenko efs.id = chan->local_id; 2994f89cef09SAndrei Emeltchenko efs.stype = chan->local_stype; 2995f89cef09SAndrei Emeltchenko efs.msdu = cpu_to_le16(chan->local_msdu); 2996f89cef09SAndrei Emeltchenko efs.sdu_itime = cpu_to_le32(chan->local_sdu_itime); 2997dcf4adbfSJoe Perches efs.acc_lat = cpu_to_le32(L2CAP_DEFAULT_ACC_LAT); 2998dcf4adbfSJoe Perches efs.flush_to = cpu_to_le32(L2CAP_EFS_DEFAULT_FLUSH_TO); 2999f89cef09SAndrei Emeltchenko break; 3000f89cef09SAndrei Emeltchenko 3001f89cef09SAndrei Emeltchenko case L2CAP_MODE_STREAMING: 3002f89cef09SAndrei Emeltchenko efs.id = 1; 3003f89cef09SAndrei Emeltchenko efs.stype = L2CAP_SERV_BESTEFFORT; 3004f89cef09SAndrei Emeltchenko efs.msdu = cpu_to_le16(chan->local_msdu); 3005f89cef09SAndrei Emeltchenko efs.sdu_itime = cpu_to_le32(chan->local_sdu_itime); 3006f89cef09SAndrei Emeltchenko efs.acc_lat = 0; 3007f89cef09SAndrei Emeltchenko efs.flush_to = 0; 3008f89cef09SAndrei Emeltchenko break; 3009f89cef09SAndrei Emeltchenko 3010f89cef09SAndrei Emeltchenko default: 3011f89cef09SAndrei Emeltchenko return; 3012f89cef09SAndrei Emeltchenko } 3013f89cef09SAndrei Emeltchenko 3014f89cef09SAndrei Emeltchenko l2cap_add_conf_opt(ptr, L2CAP_CONF_EFS, sizeof(efs), 3015f89cef09SAndrei Emeltchenko (unsigned long) &efs); 3016f89cef09SAndrei Emeltchenko } 3017f89cef09SAndrei Emeltchenko 3018721c4181SGustavo F. Padovan static void l2cap_ack_timeout(struct work_struct *work) 30190a708f8fSGustavo F. Padovan { 3020721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 3021721c4181SGustavo F. Padovan ack_timer.work); 30220362520bSMat Martineau u16 frames_to_ack; 30230a708f8fSGustavo F. Padovan 30242fb9b3d4SGustavo F. Padovan BT_DBG("chan %p", chan); 30252fb9b3d4SGustavo F. Padovan 30266be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 30276be36555SAndrei Emeltchenko 30280362520bSMat Martineau frames_to_ack = __seq_offset(chan, chan->buffer_seq, 30290362520bSMat Martineau chan->last_acked_seq); 30300362520bSMat Martineau 30310362520bSMat Martineau if (frames_to_ack) 30320362520bSMat Martineau l2cap_send_rr_or_rnr(chan, 0); 30336be36555SAndrei Emeltchenko 30346be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 303509bfb2eeSSzymon Janc l2cap_chan_put(chan); 30360a708f8fSGustavo F. Padovan } 30370a708f8fSGustavo F. Padovan 3038466f8004SAndrei Emeltchenko int l2cap_ertm_init(struct l2cap_chan *chan) 30390a708f8fSGustavo F. Padovan { 30403c588192SMat Martineau int err; 30413c588192SMat Martineau 3042105bdf9eSMat Martineau chan->next_tx_seq = 0; 3043105bdf9eSMat Martineau chan->expected_tx_seq = 0; 304442e5c802SGustavo F. Padovan chan->expected_ack_seq = 0; 30456a026610SGustavo F. Padovan chan->unacked_frames = 0; 304642e5c802SGustavo F. Padovan chan->buffer_seq = 0; 30476a026610SGustavo F. Padovan chan->frames_sent = 0; 3048105bdf9eSMat Martineau chan->last_acked_seq = 0; 3049105bdf9eSMat Martineau chan->sdu = NULL; 3050105bdf9eSMat Martineau chan->sdu_last_frag = NULL; 3051105bdf9eSMat Martineau chan->sdu_len = 0; 3052105bdf9eSMat Martineau 3053d34c34fbSMat Martineau skb_queue_head_init(&chan->tx_q); 3054d34c34fbSMat Martineau 30556ed971caSMarcel Holtmann chan->local_amp_id = AMP_ID_BREDR; 30566ed971caSMarcel Holtmann chan->move_id = AMP_ID_BREDR; 305708333283SMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 305808333283SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 305908333283SMat Martineau 3060105bdf9eSMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 3061105bdf9eSMat Martineau return 0; 3062105bdf9eSMat Martineau 3063105bdf9eSMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 3064105bdf9eSMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 30650a708f8fSGustavo F. Padovan 3066721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->retrans_timer, l2cap_retrans_timeout); 3067721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->monitor_timer, l2cap_monitor_timeout); 3068721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->ack_timer, l2cap_ack_timeout); 30690a708f8fSGustavo F. Padovan 3070f1c6775bSGustavo F. Padovan skb_queue_head_init(&chan->srej_q); 30710a708f8fSGustavo F. Padovan 30723c588192SMat Martineau err = l2cap_seq_list_init(&chan->srej_list, chan->tx_win); 30733c588192SMat Martineau if (err < 0) 30743c588192SMat Martineau return err; 30753c588192SMat Martineau 30769dc9affcSMat Martineau err = l2cap_seq_list_init(&chan->retrans_list, chan->remote_tx_win); 30779dc9affcSMat Martineau if (err < 0) 30789dc9affcSMat Martineau l2cap_seq_list_free(&chan->srej_list); 30799dc9affcSMat Martineau 30809dc9affcSMat Martineau return err; 30810a708f8fSGustavo F. Padovan } 30820a708f8fSGustavo F. Padovan 30830a708f8fSGustavo F. Padovan static inline __u8 l2cap_select_mode(__u8 mode, __u16 remote_feat_mask) 30840a708f8fSGustavo F. Padovan { 30850a708f8fSGustavo F. Padovan switch (mode) { 30860a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 30870a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 30880a708f8fSGustavo F. Padovan if (l2cap_mode_supported(mode, remote_feat_mask)) 30890a708f8fSGustavo F. Padovan return mode; 30900a708f8fSGustavo F. Padovan /* fall through */ 30910a708f8fSGustavo F. Padovan default: 30920a708f8fSGustavo F. Padovan return L2CAP_MODE_BASIC; 30930a708f8fSGustavo F. Padovan } 30940a708f8fSGustavo F. Padovan } 30950a708f8fSGustavo F. Padovan 3096848566b3SMarcel Holtmann static inline bool __l2cap_ews_supported(struct l2cap_conn *conn) 30976327eb98SAndrei Emeltchenko { 3098*0bd49fc7SJohan Hedberg return ((conn->local_fixed_chan & L2CAP_FC_A2MP) && 3099*0bd49fc7SJohan Hedberg (conn->feat_mask & L2CAP_FEAT_EXT_WINDOW)); 31006327eb98SAndrei Emeltchenko } 31016327eb98SAndrei Emeltchenko 3102848566b3SMarcel Holtmann static inline bool __l2cap_efs_supported(struct l2cap_conn *conn) 3103f89cef09SAndrei Emeltchenko { 3104*0bd49fc7SJohan Hedberg return ((conn->local_fixed_chan & L2CAP_FC_A2MP) && 3105*0bd49fc7SJohan Hedberg (conn->feat_mask & L2CAP_FEAT_EXT_FLOW)); 3106f89cef09SAndrei Emeltchenko } 3107f89cef09SAndrei Emeltchenko 310836c86c85SMat Martineau static void __l2cap_set_ertm_timeouts(struct l2cap_chan *chan, 310936c86c85SMat Martineau struct l2cap_conf_rfc *rfc) 311036c86c85SMat Martineau { 31116ed971caSMarcel Holtmann if (chan->local_amp_id != AMP_ID_BREDR && chan->hs_hcon) { 311236c86c85SMat Martineau u64 ertm_to = chan->hs_hcon->hdev->amp_be_flush_to; 311336c86c85SMat Martineau 311436c86c85SMat Martineau /* Class 1 devices have must have ERTM timeouts 311536c86c85SMat Martineau * exceeding the Link Supervision Timeout. The 311636c86c85SMat Martineau * default Link Supervision Timeout for AMP 311736c86c85SMat Martineau * controllers is 10 seconds. 311836c86c85SMat Martineau * 311936c86c85SMat Martineau * Class 1 devices use 0xffffffff for their 312036c86c85SMat Martineau * best-effort flush timeout, so the clamping logic 312136c86c85SMat Martineau * will result in a timeout that meets the above 312236c86c85SMat Martineau * requirement. ERTM timeouts are 16-bit values, so 312336c86c85SMat Martineau * the maximum timeout is 65.535 seconds. 312436c86c85SMat Martineau */ 312536c86c85SMat Martineau 312636c86c85SMat Martineau /* Convert timeout to milliseconds and round */ 312736c86c85SMat Martineau ertm_to = DIV_ROUND_UP_ULL(ertm_to, 1000); 312836c86c85SMat Martineau 312936c86c85SMat Martineau /* This is the recommended formula for class 2 devices 313036c86c85SMat Martineau * that start ERTM timers when packets are sent to the 313136c86c85SMat Martineau * controller. 313236c86c85SMat Martineau */ 313336c86c85SMat Martineau ertm_to = 3 * ertm_to + 500; 313436c86c85SMat Martineau 313536c86c85SMat Martineau if (ertm_to > 0xffff) 313636c86c85SMat Martineau ertm_to = 0xffff; 313736c86c85SMat Martineau 313836c86c85SMat Martineau rfc->retrans_timeout = cpu_to_le16((u16) ertm_to); 313936c86c85SMat Martineau rfc->monitor_timeout = rfc->retrans_timeout; 314036c86c85SMat Martineau } else { 3141dcf4adbfSJoe Perches rfc->retrans_timeout = cpu_to_le16(L2CAP_DEFAULT_RETRANS_TO); 3142dcf4adbfSJoe Perches rfc->monitor_timeout = cpu_to_le16(L2CAP_DEFAULT_MONITOR_TO); 314336c86c85SMat Martineau } 314436c86c85SMat Martineau } 314536c86c85SMat Martineau 31466327eb98SAndrei Emeltchenko static inline void l2cap_txwin_setup(struct l2cap_chan *chan) 31476327eb98SAndrei Emeltchenko { 31486327eb98SAndrei Emeltchenko if (chan->tx_win > L2CAP_DEFAULT_TX_WINDOW && 3149848566b3SMarcel Holtmann __l2cap_ews_supported(chan->conn)) { 31506327eb98SAndrei Emeltchenko /* use extended control field */ 31516327eb98SAndrei Emeltchenko set_bit(FLAG_EXT_CTRL, &chan->flags); 3152836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_EXT_WINDOW; 3153836be934SAndrei Emeltchenko } else { 31546327eb98SAndrei Emeltchenko chan->tx_win = min_t(u16, chan->tx_win, 31556327eb98SAndrei Emeltchenko L2CAP_DEFAULT_TX_WINDOW); 3156836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_TX_WINDOW; 3157836be934SAndrei Emeltchenko } 3158c20f8e35SMat Martineau chan->ack_win = chan->tx_win; 31596327eb98SAndrei Emeltchenko } 31606327eb98SAndrei Emeltchenko 3161710f9b0aSGustavo F. Padovan static int l2cap_build_conf_req(struct l2cap_chan *chan, void *data) 31620a708f8fSGustavo F. Padovan { 31630a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = data; 31640c1bc5c6SGustavo F. Padovan struct l2cap_conf_rfc rfc = { .mode = chan->mode }; 31650a708f8fSGustavo F. Padovan void *ptr = req->data; 3166c8f79162SAndrei Emeltchenko u16 size; 31670a708f8fSGustavo F. Padovan 316849208c9cSGustavo F. Padovan BT_DBG("chan %p", chan); 31690a708f8fSGustavo F. Padovan 317073ffa904SGustavo F. Padovan if (chan->num_conf_req || chan->num_conf_rsp) 31710a708f8fSGustavo F. Padovan goto done; 31720a708f8fSGustavo F. Padovan 31730c1bc5c6SGustavo F. Padovan switch (chan->mode) { 31740a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 31750a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 3176c1360a1cSGustavo F. Padovan if (test_bit(CONF_STATE2_DEVICE, &chan->conf_state)) 31770a708f8fSGustavo F. Padovan break; 31780a708f8fSGustavo F. Padovan 3179848566b3SMarcel Holtmann if (__l2cap_efs_supported(chan->conn)) 3180f89cef09SAndrei Emeltchenko set_bit(FLAG_EFS_ENABLE, &chan->flags); 3181f89cef09SAndrei Emeltchenko 31820a708f8fSGustavo F. Padovan /* fall through */ 31830a708f8fSGustavo F. Padovan default: 31848c1d787bSGustavo F. Padovan chan->mode = l2cap_select_mode(rfc.mode, chan->conn->feat_mask); 31850a708f8fSGustavo F. Padovan break; 31860a708f8fSGustavo F. Padovan } 31870a708f8fSGustavo F. Padovan 31880a708f8fSGustavo F. Padovan done: 31890c1bc5c6SGustavo F. Padovan if (chan->imtu != L2CAP_DEFAULT_MTU) 31900c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->imtu); 31910a708f8fSGustavo F. Padovan 31920c1bc5c6SGustavo F. Padovan switch (chan->mode) { 31930a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 31946fea7ad1SMarcel Holtmann if (disable_ertm) 31956fea7ad1SMarcel Holtmann break; 31966fea7ad1SMarcel Holtmann 31978c1d787bSGustavo F. Padovan if (!(chan->conn->feat_mask & L2CAP_FEAT_ERTM) && 31988c1d787bSGustavo F. Padovan !(chan->conn->feat_mask & L2CAP_FEAT_STREAMING)) 31990a708f8fSGustavo F. Padovan break; 32000a708f8fSGustavo F. Padovan 32010a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_BASIC; 32020a708f8fSGustavo F. Padovan rfc.txwin_size = 0; 32030a708f8fSGustavo F. Padovan rfc.max_transmit = 0; 32040a708f8fSGustavo F. Padovan rfc.retrans_timeout = 0; 32050a708f8fSGustavo F. Padovan rfc.monitor_timeout = 0; 32060a708f8fSGustavo F. Padovan rfc.max_pdu_size = 0; 32070a708f8fSGustavo F. Padovan 32080a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 32090a708f8fSGustavo F. Padovan (unsigned long) &rfc); 32100a708f8fSGustavo F. Padovan break; 32110a708f8fSGustavo F. Padovan 32120a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 32130a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_ERTM; 321447d1ec61SGustavo F. Padovan rfc.max_transmit = chan->max_tx; 321536c86c85SMat Martineau 321636c86c85SMat Martineau __l2cap_set_ertm_timeouts(chan, &rfc); 3217c8f79162SAndrei Emeltchenko 3218c8f79162SAndrei Emeltchenko size = min_t(u16, L2CAP_DEFAULT_MAX_PDU_SIZE, chan->conn->mtu - 32192d792818SGustavo Padovan L2CAP_EXT_HDR_SIZE - L2CAP_SDULEN_SIZE - 3220c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 3221c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 32220a708f8fSGustavo F. Padovan 32236327eb98SAndrei Emeltchenko l2cap_txwin_setup(chan); 32246327eb98SAndrei Emeltchenko 32256327eb98SAndrei Emeltchenko rfc.txwin_size = min_t(u16, chan->tx_win, 32266327eb98SAndrei Emeltchenko L2CAP_DEFAULT_TX_WINDOW); 32270a708f8fSGustavo F. Padovan 32280a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 32290a708f8fSGustavo F. Padovan (unsigned long) &rfc); 32300a708f8fSGustavo F. Padovan 3231f89cef09SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) 3232f89cef09SAndrei Emeltchenko l2cap_add_opt_efs(&ptr, chan); 3233f89cef09SAndrei Emeltchenko 32346327eb98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 32356327eb98SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EWS, 2, 32366327eb98SAndrei Emeltchenko chan->tx_win); 323760918918SAndrei Emeltchenko 323860918918SAndrei Emeltchenko if (chan->conn->feat_mask & L2CAP_FEAT_FCS) 323960918918SAndrei Emeltchenko if (chan->fcs == L2CAP_FCS_NONE || 3240f2592d3eSAndrei Emeltchenko test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) { 324160918918SAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 324260918918SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_FCS, 1, 324360918918SAndrei Emeltchenko chan->fcs); 324460918918SAndrei Emeltchenko } 32450a708f8fSGustavo F. Padovan break; 32460a708f8fSGustavo F. Padovan 32470a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 3248273759e2SMat Martineau l2cap_txwin_setup(chan); 32490a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_STREAMING; 32500a708f8fSGustavo F. Padovan rfc.txwin_size = 0; 32510a708f8fSGustavo F. Padovan rfc.max_transmit = 0; 32520a708f8fSGustavo F. Padovan rfc.retrans_timeout = 0; 32530a708f8fSGustavo F. Padovan rfc.monitor_timeout = 0; 3254c8f79162SAndrei Emeltchenko 3255c8f79162SAndrei Emeltchenko size = min_t(u16, L2CAP_DEFAULT_MAX_PDU_SIZE, chan->conn->mtu - 32562d792818SGustavo Padovan L2CAP_EXT_HDR_SIZE - L2CAP_SDULEN_SIZE - 3257c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 3258c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 32590a708f8fSGustavo F. Padovan 32600a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 32610a708f8fSGustavo F. Padovan (unsigned long) &rfc); 32620a708f8fSGustavo F. Padovan 3263f89cef09SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) 3264f89cef09SAndrei Emeltchenko l2cap_add_opt_efs(&ptr, chan); 3265f89cef09SAndrei Emeltchenko 326660918918SAndrei Emeltchenko if (chan->conn->feat_mask & L2CAP_FEAT_FCS) 326747d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_NONE || 3268f2592d3eSAndrei Emeltchenko test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) { 326947d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 327060918918SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_FCS, 1, 327160918918SAndrei Emeltchenko chan->fcs); 32720a708f8fSGustavo F. Padovan } 32730a708f8fSGustavo F. Padovan break; 32740a708f8fSGustavo F. Padovan } 32750a708f8fSGustavo F. Padovan 3276fe4128e0SGustavo F. Padovan req->dcid = cpu_to_le16(chan->dcid); 3277dcf4adbfSJoe Perches req->flags = cpu_to_le16(0); 32780a708f8fSGustavo F. Padovan 32790a708f8fSGustavo F. Padovan return ptr - data; 32800a708f8fSGustavo F. Padovan } 32810a708f8fSGustavo F. Padovan 328273ffa904SGustavo F. Padovan static int l2cap_parse_conf_req(struct l2cap_chan *chan, void *data) 32830a708f8fSGustavo F. Padovan { 32840a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = data; 32850a708f8fSGustavo F. Padovan void *ptr = rsp->data; 328673ffa904SGustavo F. Padovan void *req = chan->conf_req; 328773ffa904SGustavo F. Padovan int len = chan->conf_len; 32880a708f8fSGustavo F. Padovan int type, hint, olen; 32890a708f8fSGustavo F. Padovan unsigned long val; 32900a708f8fSGustavo F. Padovan struct l2cap_conf_rfc rfc = { .mode = L2CAP_MODE_BASIC }; 329142dceae2SAndrei Emeltchenko struct l2cap_conf_efs efs; 329242dceae2SAndrei Emeltchenko u8 remote_efs = 0; 32930a708f8fSGustavo F. Padovan u16 mtu = L2CAP_DEFAULT_MTU; 32940a708f8fSGustavo F. Padovan u16 result = L2CAP_CONF_SUCCESS; 3295c8f79162SAndrei Emeltchenko u16 size; 32960a708f8fSGustavo F. Padovan 329773ffa904SGustavo F. Padovan BT_DBG("chan %p", chan); 32980a708f8fSGustavo F. Padovan 32990a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 33000a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&req, &type, &olen, &val); 33010a708f8fSGustavo F. Padovan 33020a708f8fSGustavo F. Padovan hint = type & L2CAP_CONF_HINT; 33030a708f8fSGustavo F. Padovan type &= L2CAP_CONF_MASK; 33040a708f8fSGustavo F. Padovan 33050a708f8fSGustavo F. Padovan switch (type) { 33060a708f8fSGustavo F. Padovan case L2CAP_CONF_MTU: 33070a708f8fSGustavo F. Padovan mtu = val; 33080a708f8fSGustavo F. Padovan break; 33090a708f8fSGustavo F. Padovan 33100a708f8fSGustavo F. Padovan case L2CAP_CONF_FLUSH_TO: 33110c1bc5c6SGustavo F. Padovan chan->flush_to = val; 33120a708f8fSGustavo F. Padovan break; 33130a708f8fSGustavo F. Padovan 33140a708f8fSGustavo F. Padovan case L2CAP_CONF_QOS: 33150a708f8fSGustavo F. Padovan break; 33160a708f8fSGustavo F. Padovan 33170a708f8fSGustavo F. Padovan case L2CAP_CONF_RFC: 33180a708f8fSGustavo F. Padovan if (olen == sizeof(rfc)) 33190a708f8fSGustavo F. Padovan memcpy(&rfc, (void *) val, olen); 33200a708f8fSGustavo F. Padovan break; 33210a708f8fSGustavo F. Padovan 33220a708f8fSGustavo F. Padovan case L2CAP_CONF_FCS: 33230a708f8fSGustavo F. Padovan if (val == L2CAP_FCS_NONE) 3324f2592d3eSAndrei Emeltchenko set_bit(CONF_RECV_NO_FCS, &chan->conf_state); 332542dceae2SAndrei Emeltchenko break; 33260a708f8fSGustavo F. Padovan 332742dceae2SAndrei Emeltchenko case L2CAP_CONF_EFS: 332842dceae2SAndrei Emeltchenko remote_efs = 1; 332942dceae2SAndrei Emeltchenko if (olen == sizeof(efs)) 333042dceae2SAndrei Emeltchenko memcpy(&efs, (void *) val, olen); 33310a708f8fSGustavo F. Padovan break; 33320a708f8fSGustavo F. Padovan 33336327eb98SAndrei Emeltchenko case L2CAP_CONF_EWS: 3334*0bd49fc7SJohan Hedberg if (!(chan->conn->local_fixed_chan & L2CAP_FC_A2MP)) 33356327eb98SAndrei Emeltchenko return -ECONNREFUSED; 33366327eb98SAndrei Emeltchenko 33376327eb98SAndrei Emeltchenko set_bit(FLAG_EXT_CTRL, &chan->flags); 33386327eb98SAndrei Emeltchenko set_bit(CONF_EWS_RECV, &chan->conf_state); 3339836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_EXT_WINDOW; 33406327eb98SAndrei Emeltchenko chan->remote_tx_win = val; 33410a708f8fSGustavo F. Padovan break; 33420a708f8fSGustavo F. Padovan 33430a708f8fSGustavo F. Padovan default: 33440a708f8fSGustavo F. Padovan if (hint) 33450a708f8fSGustavo F. Padovan break; 33460a708f8fSGustavo F. Padovan 33470a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNKNOWN; 33480a708f8fSGustavo F. Padovan *((u8 *) ptr++) = type; 33490a708f8fSGustavo F. Padovan break; 33500a708f8fSGustavo F. Padovan } 33510a708f8fSGustavo F. Padovan } 33520a708f8fSGustavo F. Padovan 335373ffa904SGustavo F. Padovan if (chan->num_conf_rsp || chan->num_conf_req > 1) 33540a708f8fSGustavo F. Padovan goto done; 33550a708f8fSGustavo F. Padovan 33560c1bc5c6SGustavo F. Padovan switch (chan->mode) { 33570a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 33580a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 3359c1360a1cSGustavo F. Padovan if (!test_bit(CONF_STATE2_DEVICE, &chan->conf_state)) { 33600c1bc5c6SGustavo F. Padovan chan->mode = l2cap_select_mode(rfc.mode, 33618c1d787bSGustavo F. Padovan chan->conn->feat_mask); 33620a708f8fSGustavo F. Padovan break; 33630a708f8fSGustavo F. Padovan } 33640a708f8fSGustavo F. Padovan 336542dceae2SAndrei Emeltchenko if (remote_efs) { 3366848566b3SMarcel Holtmann if (__l2cap_efs_supported(chan->conn)) 336742dceae2SAndrei Emeltchenko set_bit(FLAG_EFS_ENABLE, &chan->flags); 336842dceae2SAndrei Emeltchenko else 336942dceae2SAndrei Emeltchenko return -ECONNREFUSED; 337042dceae2SAndrei Emeltchenko } 337142dceae2SAndrei Emeltchenko 33720c1bc5c6SGustavo F. Padovan if (chan->mode != rfc.mode) 33730a708f8fSGustavo F. Padovan return -ECONNREFUSED; 33740a708f8fSGustavo F. Padovan 33750a708f8fSGustavo F. Padovan break; 33760a708f8fSGustavo F. Padovan } 33770a708f8fSGustavo F. Padovan 33780a708f8fSGustavo F. Padovan done: 33790c1bc5c6SGustavo F. Padovan if (chan->mode != rfc.mode) { 33800a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 33810c1bc5c6SGustavo F. Padovan rfc.mode = chan->mode; 33820a708f8fSGustavo F. Padovan 338373ffa904SGustavo F. Padovan if (chan->num_conf_rsp == 1) 33840a708f8fSGustavo F. Padovan return -ECONNREFUSED; 33850a708f8fSGustavo F. Padovan 33862d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 33872d792818SGustavo Padovan (unsigned long) &rfc); 33880a708f8fSGustavo F. Padovan } 33890a708f8fSGustavo F. Padovan 33900a708f8fSGustavo F. Padovan if (result == L2CAP_CONF_SUCCESS) { 33910a708f8fSGustavo F. Padovan /* Configure output options and let the other side know 33920a708f8fSGustavo F. Padovan * which ones we don't like. */ 33930a708f8fSGustavo F. Padovan 33940a708f8fSGustavo F. Padovan if (mtu < L2CAP_DEFAULT_MIN_MTU) 33950a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 33960a708f8fSGustavo F. Padovan else { 33970c1bc5c6SGustavo F. Padovan chan->omtu = mtu; 3398c1360a1cSGustavo F. Padovan set_bit(CONF_MTU_DONE, &chan->conf_state); 33990a708f8fSGustavo F. Padovan } 34000c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->omtu); 34010a708f8fSGustavo F. Padovan 340242dceae2SAndrei Emeltchenko if (remote_efs) { 340342dceae2SAndrei Emeltchenko if (chan->local_stype != L2CAP_SERV_NOTRAFIC && 340442dceae2SAndrei Emeltchenko efs.stype != L2CAP_SERV_NOTRAFIC && 340542dceae2SAndrei Emeltchenko efs.stype != chan->local_stype) { 340642dceae2SAndrei Emeltchenko 340742dceae2SAndrei Emeltchenko result = L2CAP_CONF_UNACCEPT; 340842dceae2SAndrei Emeltchenko 340942dceae2SAndrei Emeltchenko if (chan->num_conf_req >= 1) 341042dceae2SAndrei Emeltchenko return -ECONNREFUSED; 341142dceae2SAndrei Emeltchenko 341242dceae2SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, 341342dceae2SAndrei Emeltchenko sizeof(efs), 341442dceae2SAndrei Emeltchenko (unsigned long) &efs); 34150e8b207eSAndrei Emeltchenko } else { 34163e6b3b95SGustavo F. Padovan /* Send PENDING Conf Rsp */ 34170e8b207eSAndrei Emeltchenko result = L2CAP_CONF_PENDING; 34180e8b207eSAndrei Emeltchenko set_bit(CONF_LOC_CONF_PEND, &chan->conf_state); 341942dceae2SAndrei Emeltchenko } 342042dceae2SAndrei Emeltchenko } 342142dceae2SAndrei Emeltchenko 34220a708f8fSGustavo F. Padovan switch (rfc.mode) { 34230a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 342447d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 3425c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 34260a708f8fSGustavo F. Padovan break; 34270a708f8fSGustavo F. Padovan 34280a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 34296327eb98SAndrei Emeltchenko if (!test_bit(CONF_EWS_RECV, &chan->conf_state)) 34302c03a7a4SGustavo F. Padovan chan->remote_tx_win = rfc.txwin_size; 34316327eb98SAndrei Emeltchenko else 34326327eb98SAndrei Emeltchenko rfc.txwin_size = L2CAP_DEFAULT_TX_WINDOW; 34336327eb98SAndrei Emeltchenko 34342c03a7a4SGustavo F. Padovan chan->remote_max_tx = rfc.max_transmit; 34350a708f8fSGustavo F. Padovan 3436c8f79162SAndrei Emeltchenko size = min_t(u16, le16_to_cpu(rfc.max_pdu_size), 34372d792818SGustavo Padovan chan->conn->mtu - L2CAP_EXT_HDR_SIZE - 34382d792818SGustavo Padovan L2CAP_SDULEN_SIZE - L2CAP_FCS_SIZE); 3439c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 3440c8f79162SAndrei Emeltchenko chan->remote_mps = size; 34410a708f8fSGustavo F. Padovan 344236c86c85SMat Martineau __l2cap_set_ertm_timeouts(chan, &rfc); 34430a708f8fSGustavo F. Padovan 3444c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 34450a708f8fSGustavo F. Padovan 34460a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 34470a708f8fSGustavo F. Padovan sizeof(rfc), (unsigned long) &rfc); 34480a708f8fSGustavo F. Padovan 344942dceae2SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) { 345042dceae2SAndrei Emeltchenko chan->remote_id = efs.id; 345142dceae2SAndrei Emeltchenko chan->remote_stype = efs.stype; 345242dceae2SAndrei Emeltchenko chan->remote_msdu = le16_to_cpu(efs.msdu); 345342dceae2SAndrei Emeltchenko chan->remote_flush_to = 345442dceae2SAndrei Emeltchenko le32_to_cpu(efs.flush_to); 345542dceae2SAndrei Emeltchenko chan->remote_acc_lat = 345642dceae2SAndrei Emeltchenko le32_to_cpu(efs.acc_lat); 345742dceae2SAndrei Emeltchenko chan->remote_sdu_itime = 345842dceae2SAndrei Emeltchenko le32_to_cpu(efs.sdu_itime); 345942dceae2SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, 34602d792818SGustavo Padovan sizeof(efs), 34612d792818SGustavo Padovan (unsigned long) &efs); 346242dceae2SAndrei Emeltchenko } 34630a708f8fSGustavo F. Padovan break; 34640a708f8fSGustavo F. Padovan 34650a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 3466c8f79162SAndrei Emeltchenko size = min_t(u16, le16_to_cpu(rfc.max_pdu_size), 34672d792818SGustavo Padovan chan->conn->mtu - L2CAP_EXT_HDR_SIZE - 34682d792818SGustavo Padovan L2CAP_SDULEN_SIZE - L2CAP_FCS_SIZE); 3469c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 3470c8f79162SAndrei Emeltchenko chan->remote_mps = size; 34710a708f8fSGustavo F. Padovan 3472c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 34730a708f8fSGustavo F. Padovan 34742d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 34752d792818SGustavo Padovan (unsigned long) &rfc); 34760a708f8fSGustavo F. Padovan 34770a708f8fSGustavo F. Padovan break; 34780a708f8fSGustavo F. Padovan 34790a708f8fSGustavo F. Padovan default: 34800a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 34810a708f8fSGustavo F. Padovan 34820a708f8fSGustavo F. Padovan memset(&rfc, 0, sizeof(rfc)); 34830c1bc5c6SGustavo F. Padovan rfc.mode = chan->mode; 34840a708f8fSGustavo F. Padovan } 34850a708f8fSGustavo F. Padovan 34860a708f8fSGustavo F. Padovan if (result == L2CAP_CONF_SUCCESS) 3487c1360a1cSGustavo F. Padovan set_bit(CONF_OUTPUT_DONE, &chan->conf_state); 34880a708f8fSGustavo F. Padovan } 3489fe4128e0SGustavo F. Padovan rsp->scid = cpu_to_le16(chan->dcid); 34900a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(result); 3491dcf4adbfSJoe Perches rsp->flags = cpu_to_le16(0); 34920a708f8fSGustavo F. Padovan 34930a708f8fSGustavo F. Padovan return ptr - data; 34940a708f8fSGustavo F. Padovan } 34950a708f8fSGustavo F. Padovan 34962d792818SGustavo Padovan static int l2cap_parse_conf_rsp(struct l2cap_chan *chan, void *rsp, int len, 34972d792818SGustavo Padovan void *data, u16 *result) 34980a708f8fSGustavo F. Padovan { 34990a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = data; 35000a708f8fSGustavo F. Padovan void *ptr = req->data; 35010a708f8fSGustavo F. Padovan int type, olen; 35020a708f8fSGustavo F. Padovan unsigned long val; 350336e999a8SMat Martineau struct l2cap_conf_rfc rfc = { .mode = L2CAP_MODE_BASIC }; 350466af7aafSAndrei Emeltchenko struct l2cap_conf_efs efs; 35050a708f8fSGustavo F. Padovan 3506fe4128e0SGustavo F. Padovan BT_DBG("chan %p, rsp %p, len %d, req %p", chan, rsp, len, data); 35070a708f8fSGustavo F. Padovan 35080a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 35090a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&rsp, &type, &olen, &val); 35100a708f8fSGustavo F. Padovan 35110a708f8fSGustavo F. Padovan switch (type) { 35120a708f8fSGustavo F. Padovan case L2CAP_CONF_MTU: 35130a708f8fSGustavo F. Padovan if (val < L2CAP_DEFAULT_MIN_MTU) { 35140a708f8fSGustavo F. Padovan *result = L2CAP_CONF_UNACCEPT; 35150c1bc5c6SGustavo F. Padovan chan->imtu = L2CAP_DEFAULT_MIN_MTU; 35160a708f8fSGustavo F. Padovan } else 35170c1bc5c6SGustavo F. Padovan chan->imtu = val; 35180c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->imtu); 35190a708f8fSGustavo F. Padovan break; 35200a708f8fSGustavo F. Padovan 35210a708f8fSGustavo F. Padovan case L2CAP_CONF_FLUSH_TO: 35220c1bc5c6SGustavo F. Padovan chan->flush_to = val; 35230a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_FLUSH_TO, 35240c1bc5c6SGustavo F. Padovan 2, chan->flush_to); 35250a708f8fSGustavo F. Padovan break; 35260a708f8fSGustavo F. Padovan 35270a708f8fSGustavo F. Padovan case L2CAP_CONF_RFC: 35280a708f8fSGustavo F. Padovan if (olen == sizeof(rfc)) 35290a708f8fSGustavo F. Padovan memcpy(&rfc, (void *)val, olen); 35300a708f8fSGustavo F. Padovan 3531c1360a1cSGustavo F. Padovan if (test_bit(CONF_STATE2_DEVICE, &chan->conf_state) && 35320c1bc5c6SGustavo F. Padovan rfc.mode != chan->mode) 35330a708f8fSGustavo F. Padovan return -ECONNREFUSED; 35340a708f8fSGustavo F. Padovan 353547d1ec61SGustavo F. Padovan chan->fcs = 0; 35360a708f8fSGustavo F. Padovan 35370a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 35380a708f8fSGustavo F. Padovan sizeof(rfc), (unsigned long) &rfc); 35390a708f8fSGustavo F. Padovan break; 35406327eb98SAndrei Emeltchenko 35416327eb98SAndrei Emeltchenko case L2CAP_CONF_EWS: 3542c20f8e35SMat Martineau chan->ack_win = min_t(u16, val, chan->ack_win); 35433e6b3b95SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_EWS, 2, 35443e6b3b95SGustavo F. Padovan chan->tx_win); 35456327eb98SAndrei Emeltchenko break; 354666af7aafSAndrei Emeltchenko 354766af7aafSAndrei Emeltchenko case L2CAP_CONF_EFS: 354866af7aafSAndrei Emeltchenko if (olen == sizeof(efs)) 354966af7aafSAndrei Emeltchenko memcpy(&efs, (void *)val, olen); 355066af7aafSAndrei Emeltchenko 355166af7aafSAndrei Emeltchenko if (chan->local_stype != L2CAP_SERV_NOTRAFIC && 355266af7aafSAndrei Emeltchenko efs.stype != L2CAP_SERV_NOTRAFIC && 355366af7aafSAndrei Emeltchenko efs.stype != chan->local_stype) 355466af7aafSAndrei Emeltchenko return -ECONNREFUSED; 355566af7aafSAndrei Emeltchenko 35562d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, sizeof(efs), 35572d792818SGustavo Padovan (unsigned long) &efs); 355866af7aafSAndrei Emeltchenko break; 3559cbabee78SAndrei Emeltchenko 3560cbabee78SAndrei Emeltchenko case L2CAP_CONF_FCS: 3561cbabee78SAndrei Emeltchenko if (*result == L2CAP_CONF_PENDING) 3562cbabee78SAndrei Emeltchenko if (val == L2CAP_FCS_NONE) 3563f2592d3eSAndrei Emeltchenko set_bit(CONF_RECV_NO_FCS, 3564cbabee78SAndrei Emeltchenko &chan->conf_state); 3565cbabee78SAndrei Emeltchenko break; 35660a708f8fSGustavo F. Padovan } 35670a708f8fSGustavo F. Padovan } 35680a708f8fSGustavo F. Padovan 35690c1bc5c6SGustavo F. Padovan if (chan->mode == L2CAP_MODE_BASIC && chan->mode != rfc.mode) 35700a708f8fSGustavo F. Padovan return -ECONNREFUSED; 35710a708f8fSGustavo F. Padovan 35720c1bc5c6SGustavo F. Padovan chan->mode = rfc.mode; 35730a708f8fSGustavo F. Padovan 35740e8b207eSAndrei Emeltchenko if (*result == L2CAP_CONF_SUCCESS || *result == L2CAP_CONF_PENDING) { 35750a708f8fSGustavo F. Padovan switch (rfc.mode) { 35760a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 357747d1ec61SGustavo F. Padovan chan->retrans_timeout = le16_to_cpu(rfc.retrans_timeout); 357847d1ec61SGustavo F. Padovan chan->monitor_timeout = le16_to_cpu(rfc.monitor_timeout); 357947d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 3580c20f8e35SMat Martineau if (!test_bit(FLAG_EXT_CTRL, &chan->flags)) 3581c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, 3582c20f8e35SMat Martineau rfc.txwin_size); 358366af7aafSAndrei Emeltchenko 358466af7aafSAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) { 358566af7aafSAndrei Emeltchenko chan->local_msdu = le16_to_cpu(efs.msdu); 358666af7aafSAndrei Emeltchenko chan->local_sdu_itime = 358766af7aafSAndrei Emeltchenko le32_to_cpu(efs.sdu_itime); 358866af7aafSAndrei Emeltchenko chan->local_acc_lat = le32_to_cpu(efs.acc_lat); 358966af7aafSAndrei Emeltchenko chan->local_flush_to = 359066af7aafSAndrei Emeltchenko le32_to_cpu(efs.flush_to); 359166af7aafSAndrei Emeltchenko } 35920a708f8fSGustavo F. Padovan break; 359366af7aafSAndrei Emeltchenko 35940a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 359547d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 35960a708f8fSGustavo F. Padovan } 35970a708f8fSGustavo F. Padovan } 35980a708f8fSGustavo F. Padovan 3599fe4128e0SGustavo F. Padovan req->dcid = cpu_to_le16(chan->dcid); 3600dcf4adbfSJoe Perches req->flags = cpu_to_le16(0); 36010a708f8fSGustavo F. Padovan 36020a708f8fSGustavo F. Padovan return ptr - data; 36030a708f8fSGustavo F. Padovan } 36040a708f8fSGustavo F. Padovan 36052d792818SGustavo Padovan static int l2cap_build_conf_rsp(struct l2cap_chan *chan, void *data, 36062d792818SGustavo Padovan u16 result, u16 flags) 36070a708f8fSGustavo F. Padovan { 36080a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = data; 36090a708f8fSGustavo F. Padovan void *ptr = rsp->data; 36100a708f8fSGustavo F. Padovan 3611fe4128e0SGustavo F. Padovan BT_DBG("chan %p", chan); 36120a708f8fSGustavo F. Padovan 3613fe4128e0SGustavo F. Padovan rsp->scid = cpu_to_le16(chan->dcid); 36140a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(result); 36150a708f8fSGustavo F. Padovan rsp->flags = cpu_to_le16(flags); 36160a708f8fSGustavo F. Padovan 36170a708f8fSGustavo F. Padovan return ptr - data; 36180a708f8fSGustavo F. Padovan } 36190a708f8fSGustavo F. Padovan 362027e2d4c8SJohan Hedberg void __l2cap_le_connect_rsp_defer(struct l2cap_chan *chan) 362127e2d4c8SJohan Hedberg { 362227e2d4c8SJohan Hedberg struct l2cap_le_conn_rsp rsp; 362327e2d4c8SJohan Hedberg struct l2cap_conn *conn = chan->conn; 362427e2d4c8SJohan Hedberg 362527e2d4c8SJohan Hedberg BT_DBG("chan %p", chan); 362627e2d4c8SJohan Hedberg 362727e2d4c8SJohan Hedberg rsp.dcid = cpu_to_le16(chan->scid); 362827e2d4c8SJohan Hedberg rsp.mtu = cpu_to_le16(chan->imtu); 36293916aed8SJohan Hedberg rsp.mps = cpu_to_le16(chan->mps); 36300cd75f7eSJohan Hedberg rsp.credits = cpu_to_le16(chan->rx_credits); 3631dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 363227e2d4c8SJohan Hedberg 363327e2d4c8SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CONN_RSP, sizeof(rsp), 363427e2d4c8SJohan Hedberg &rsp); 363527e2d4c8SJohan Hedberg } 363627e2d4c8SJohan Hedberg 36378c1d787bSGustavo F. Padovan void __l2cap_connect_rsp_defer(struct l2cap_chan *chan) 3638710f9b0aSGustavo F. Padovan { 3639710f9b0aSGustavo F. Padovan struct l2cap_conn_rsp rsp; 36408c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 3641710f9b0aSGustavo F. Padovan u8 buf[128]; 3642439f34acSAndrei Emeltchenko u8 rsp_code; 3643710f9b0aSGustavo F. Padovan 3644fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 3645fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 3646dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 3647dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 3648439f34acSAndrei Emeltchenko 3649439f34acSAndrei Emeltchenko if (chan->hs_hcon) 3650439f34acSAndrei Emeltchenko rsp_code = L2CAP_CREATE_CHAN_RSP; 3651439f34acSAndrei Emeltchenko else 3652439f34acSAndrei Emeltchenko rsp_code = L2CAP_CONN_RSP; 3653439f34acSAndrei Emeltchenko 3654439f34acSAndrei Emeltchenko BT_DBG("chan %p rsp_code %u", chan, rsp_code); 3655439f34acSAndrei Emeltchenko 3656439f34acSAndrei Emeltchenko l2cap_send_cmd(conn, chan->ident, rsp_code, sizeof(rsp), &rsp); 3657710f9b0aSGustavo F. Padovan 3658c1360a1cSGustavo F. Padovan if (test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) 3659710f9b0aSGustavo F. Padovan return; 3660710f9b0aSGustavo F. Padovan 3661710f9b0aSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 3662710f9b0aSGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 3663710f9b0aSGustavo F. Padovan chan->num_conf_req++; 3664710f9b0aSGustavo F. Padovan } 3665710f9b0aSGustavo F. Padovan 366647d1ec61SGustavo F. Padovan static void l2cap_conf_rfc_get(struct l2cap_chan *chan, void *rsp, int len) 36670a708f8fSGustavo F. Padovan { 36680a708f8fSGustavo F. Padovan int type, olen; 36690a708f8fSGustavo F. Padovan unsigned long val; 3670c20f8e35SMat Martineau /* Use sane default values in case a misbehaving remote device 3671c20f8e35SMat Martineau * did not send an RFC or extended window size option. 3672c20f8e35SMat Martineau */ 3673c20f8e35SMat Martineau u16 txwin_ext = chan->ack_win; 3674c20f8e35SMat Martineau struct l2cap_conf_rfc rfc = { 3675c20f8e35SMat Martineau .mode = chan->mode, 3676dcf4adbfSJoe Perches .retrans_timeout = cpu_to_le16(L2CAP_DEFAULT_RETRANS_TO), 3677dcf4adbfSJoe Perches .monitor_timeout = cpu_to_le16(L2CAP_DEFAULT_MONITOR_TO), 3678c20f8e35SMat Martineau .max_pdu_size = cpu_to_le16(chan->imtu), 3679c20f8e35SMat Martineau .txwin_size = min_t(u16, chan->ack_win, L2CAP_DEFAULT_TX_WINDOW), 3680c20f8e35SMat Martineau }; 36810a708f8fSGustavo F. Padovan 368247d1ec61SGustavo F. Padovan BT_DBG("chan %p, rsp %p, len %d", chan, rsp, len); 36830a708f8fSGustavo F. Padovan 36840c1bc5c6SGustavo F. Padovan if ((chan->mode != L2CAP_MODE_ERTM) && (chan->mode != L2CAP_MODE_STREAMING)) 36850a708f8fSGustavo F. Padovan return; 36860a708f8fSGustavo F. Padovan 36870a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 36880a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&rsp, &type, &olen, &val); 36890a708f8fSGustavo F. Padovan 3690c20f8e35SMat Martineau switch (type) { 3691c20f8e35SMat Martineau case L2CAP_CONF_RFC: 3692c20f8e35SMat Martineau if (olen == sizeof(rfc)) 36930a708f8fSGustavo F. Padovan memcpy(&rfc, (void *)val, olen); 3694c20f8e35SMat Martineau break; 3695c20f8e35SMat Martineau case L2CAP_CONF_EWS: 3696c20f8e35SMat Martineau txwin_ext = val; 3697c20f8e35SMat Martineau break; 3698c20f8e35SMat Martineau } 36990a708f8fSGustavo F. Padovan } 37000a708f8fSGustavo F. Padovan 37010a708f8fSGustavo F. Padovan switch (rfc.mode) { 37020a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 370347d1ec61SGustavo F. Padovan chan->retrans_timeout = le16_to_cpu(rfc.retrans_timeout); 370447d1ec61SGustavo F. Padovan chan->monitor_timeout = le16_to_cpu(rfc.monitor_timeout); 370547d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 3706c20f8e35SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 3707c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, txwin_ext); 3708c20f8e35SMat Martineau else 3709c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, 3710c20f8e35SMat Martineau rfc.txwin_size); 37110a708f8fSGustavo F. Padovan break; 37120a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 371347d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 37140a708f8fSGustavo F. Padovan } 37150a708f8fSGustavo F. Padovan } 37160a708f8fSGustavo F. Padovan 37172d792818SGustavo Padovan static inline int l2cap_command_rej(struct l2cap_conn *conn, 3718cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 3719cb3b3152SJohan Hedberg u8 *data) 37200a708f8fSGustavo F. Padovan { 3721e2fd318eSIlia Kolomisnky struct l2cap_cmd_rej_unk *rej = (struct l2cap_cmd_rej_unk *) data; 37220a708f8fSGustavo F. Padovan 3723cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rej)) 3724cb3b3152SJohan Hedberg return -EPROTO; 3725cb3b3152SJohan Hedberg 3726e2fd318eSIlia Kolomisnky if (rej->reason != L2CAP_REJ_NOT_UNDERSTOOD) 37270a708f8fSGustavo F. Padovan return 0; 37280a708f8fSGustavo F. Padovan 37290a708f8fSGustavo F. Padovan if ((conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) && 37300a708f8fSGustavo F. Padovan cmd->ident == conn->info_ident) { 373117cd3f37SUlisses Furquim cancel_delayed_work(&conn->info_timer); 37320a708f8fSGustavo F. Padovan 37330a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 37340a708f8fSGustavo F. Padovan conn->info_ident = 0; 37350a708f8fSGustavo F. Padovan 37360a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 37370a708f8fSGustavo F. Padovan } 37380a708f8fSGustavo F. Padovan 37390a708f8fSGustavo F. Padovan return 0; 37400a708f8fSGustavo F. Padovan } 37410a708f8fSGustavo F. Padovan 37421700915fSMat Martineau static struct l2cap_chan *l2cap_connect(struct l2cap_conn *conn, 37431700915fSMat Martineau struct l2cap_cmd_hdr *cmd, 37444c89b6aaSMat Martineau u8 *data, u8 rsp_code, u8 amp_id) 37450a708f8fSGustavo F. Padovan { 37460a708f8fSGustavo F. Padovan struct l2cap_conn_req *req = (struct l2cap_conn_req *) data; 37470a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 374823691d75SGustavo F. Padovan struct l2cap_chan *chan = NULL, *pchan; 37490a708f8fSGustavo F. Padovan int result, status = L2CAP_CS_NO_INFO; 37500a708f8fSGustavo F. Padovan 37510a708f8fSGustavo F. Padovan u16 dcid = 0, scid = __le16_to_cpu(req->scid); 37520a708f8fSGustavo F. Padovan __le16 psm = req->psm; 37530a708f8fSGustavo F. Padovan 3754097db76cSAndrei Emeltchenko BT_DBG("psm 0x%2.2x scid 0x%4.4x", __le16_to_cpu(psm), scid); 37550a708f8fSGustavo F. Padovan 37560a708f8fSGustavo F. Padovan /* Check if we have socket listening on psm */ 37576f59b904SMarcel Holtmann pchan = l2cap_global_chan_by_psm(BT_LISTEN, psm, &conn->hcon->src, 3758bf20fd4eSJohan Hedberg &conn->hcon->dst, ACL_LINK); 375923691d75SGustavo F. Padovan if (!pchan) { 37600a708f8fSGustavo F. Padovan result = L2CAP_CR_BAD_PSM; 37610a708f8fSGustavo F. Padovan goto sendresp; 37620a708f8fSGustavo F. Padovan } 37630a708f8fSGustavo F. Padovan 37643df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 37658ffb9290SGustavo Padovan l2cap_chan_lock(pchan); 37660a708f8fSGustavo F. Padovan 37670a708f8fSGustavo F. Padovan /* Check if the ACL is secure enough (if not SDP) */ 3768dcf4adbfSJoe Perches if (psm != cpu_to_le16(L2CAP_PSM_SDP) && 37690a708f8fSGustavo F. Padovan !hci_conn_check_link_mode(conn->hcon)) { 37709f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_AUTH_FAILURE; 37710a708f8fSGustavo F. Padovan result = L2CAP_CR_SEC_BLOCK; 37720a708f8fSGustavo F. Padovan goto response; 37730a708f8fSGustavo F. Padovan } 37740a708f8fSGustavo F. Padovan 37750a708f8fSGustavo F. Padovan result = L2CAP_CR_NO_MEM; 37760a708f8fSGustavo F. Padovan 37772dfa1003SGustavo Padovan /* Check if we already have channel with that dcid */ 37782dfa1003SGustavo Padovan if (__l2cap_get_chan_by_dcid(conn, scid)) 37792dfa1003SGustavo Padovan goto response; 37802dfa1003SGustavo Padovan 378180b98027SGustavo Padovan chan = pchan->ops->new_connection(pchan); 378280808e43SGustavo F. Padovan if (!chan) 37830a708f8fSGustavo F. Padovan goto response; 37840a708f8fSGustavo F. Padovan 3785330b6c15SSyam Sidhardhan /* For certain devices (ex: HID mouse), support for authentication, 3786330b6c15SSyam Sidhardhan * pairing and bonding is optional. For such devices, inorder to avoid 3787330b6c15SSyam Sidhardhan * the ACL alive for too long after L2CAP disconnection, reset the ACL 3788330b6c15SSyam Sidhardhan * disc_timeout back to HCI_DISCONN_TIMEOUT during L2CAP connect. 3789330b6c15SSyam Sidhardhan */ 3790330b6c15SSyam Sidhardhan conn->hcon->disc_timeout = HCI_DISCONN_TIMEOUT; 3791330b6c15SSyam Sidhardhan 37927eafc59eSMarcel Holtmann bacpy(&chan->src, &conn->hcon->src); 37937eafc59eSMarcel Holtmann bacpy(&chan->dst, &conn->hcon->dst); 37944f1654e0SMarcel Holtmann chan->src_type = bdaddr_type(conn->hcon, conn->hcon->src_type); 37954f1654e0SMarcel Holtmann chan->dst_type = bdaddr_type(conn->hcon, conn->hcon->dst_type); 3796fe4128e0SGustavo F. Padovan chan->psm = psm; 3797fe4128e0SGustavo F. Padovan chan->dcid = scid; 37981700915fSMat Martineau chan->local_amp_id = amp_id; 37990a708f8fSGustavo F. Padovan 38006be36555SAndrei Emeltchenko __l2cap_chan_add(conn, chan); 380148454079SGustavo F. Padovan 3802fe4128e0SGustavo F. Padovan dcid = chan->scid; 38030a708f8fSGustavo F. Padovan 38048d836d71SGustavo Padovan __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 38050a708f8fSGustavo F. Padovan 3806fc7f8a7eSGustavo F. Padovan chan->ident = cmd->ident; 38070a708f8fSGustavo F. Padovan 38080a708f8fSGustavo F. Padovan if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) { 3809e7cafc45SJohan Hedberg if (l2cap_chan_check_security(chan, false)) { 3810bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 3811f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38120a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 38130a708f8fSGustavo F. Padovan status = L2CAP_CS_AUTHOR_PEND; 38142dc4e510SGustavo Padovan chan->ops->defer(chan); 38150a708f8fSGustavo F. Padovan } else { 38161700915fSMat Martineau /* Force pending result for AMP controllers. 38171700915fSMat Martineau * The connection will succeed after the 38181700915fSMat Martineau * physical link is up. 38191700915fSMat Martineau */ 38206ed971caSMarcel Holtmann if (amp_id == AMP_ID_BREDR) { 3821f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 38220a708f8fSGustavo F. Padovan result = L2CAP_CR_SUCCESS; 38236ed971caSMarcel Holtmann } else { 3824f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38256ed971caSMarcel Holtmann result = L2CAP_CR_PEND; 38261700915fSMat Martineau } 38270a708f8fSGustavo F. Padovan status = L2CAP_CS_NO_INFO; 38280a708f8fSGustavo F. Padovan } 38290a708f8fSGustavo F. Padovan } else { 3830f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38310a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 38320a708f8fSGustavo F. Padovan status = L2CAP_CS_AUTHEN_PEND; 38330a708f8fSGustavo F. Padovan } 38340a708f8fSGustavo F. Padovan } else { 3835f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38360a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 38370a708f8fSGustavo F. Padovan status = L2CAP_CS_NO_INFO; 38380a708f8fSGustavo F. Padovan } 38390a708f8fSGustavo F. Padovan 38400a708f8fSGustavo F. Padovan response: 38418ffb9290SGustavo Padovan l2cap_chan_unlock(pchan); 38423df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 3843a24cce14SJohan Hedberg l2cap_chan_put(pchan); 38440a708f8fSGustavo F. Padovan 38450a708f8fSGustavo F. Padovan sendresp: 38460a708f8fSGustavo F. Padovan rsp.scid = cpu_to_le16(scid); 38470a708f8fSGustavo F. Padovan rsp.dcid = cpu_to_le16(dcid); 38480a708f8fSGustavo F. Padovan rsp.result = cpu_to_le16(result); 38490a708f8fSGustavo F. Padovan rsp.status = cpu_to_le16(status); 38504c89b6aaSMat Martineau l2cap_send_cmd(conn, cmd->ident, rsp_code, sizeof(rsp), &rsp); 38510a708f8fSGustavo F. Padovan 38520a708f8fSGustavo F. Padovan if (result == L2CAP_CR_PEND && status == L2CAP_CS_NO_INFO) { 38530a708f8fSGustavo F. Padovan struct l2cap_info_req info; 3854dcf4adbfSJoe Perches info.type = cpu_to_le16(L2CAP_IT_FEAT_MASK); 38550a708f8fSGustavo F. Padovan 38560a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_SENT; 38570a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 38580a708f8fSGustavo F. Padovan 3859ba13ccd9SMarcel Holtmann schedule_delayed_work(&conn->info_timer, L2CAP_INFO_TIMEOUT); 38600a708f8fSGustavo F. Padovan 38612d792818SGustavo Padovan l2cap_send_cmd(conn, conn->info_ident, L2CAP_INFO_REQ, 38622d792818SGustavo Padovan sizeof(info), &info); 38630a708f8fSGustavo F. Padovan } 38640a708f8fSGustavo F. Padovan 3865c1360a1cSGustavo F. Padovan if (chan && !test_bit(CONF_REQ_SENT, &chan->conf_state) && 38660a708f8fSGustavo F. Padovan result == L2CAP_CR_SUCCESS) { 38670a708f8fSGustavo F. Padovan u8 buf[128]; 3868c1360a1cSGustavo F. Padovan set_bit(CONF_REQ_SENT, &chan->conf_state); 38690a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 387073ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 387173ffa904SGustavo F. Padovan chan->num_conf_req++; 38720a708f8fSGustavo F. Padovan } 38731700915fSMat Martineau 38741700915fSMat Martineau return chan; 38754c89b6aaSMat Martineau } 38760a708f8fSGustavo F. Padovan 38774c89b6aaSMat Martineau static int l2cap_connect_req(struct l2cap_conn *conn, 3878cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, u8 *data) 38794c89b6aaSMat Martineau { 38807b064edaSJaganath Kanakkassery struct hci_dev *hdev = conn->hcon->hdev; 38817b064edaSJaganath Kanakkassery struct hci_conn *hcon = conn->hcon; 38827b064edaSJaganath Kanakkassery 3883cb3b3152SJohan Hedberg if (cmd_len < sizeof(struct l2cap_conn_req)) 3884cb3b3152SJohan Hedberg return -EPROTO; 3885cb3b3152SJohan Hedberg 38867b064edaSJaganath Kanakkassery hci_dev_lock(hdev); 38877b064edaSJaganath Kanakkassery if (test_bit(HCI_MGMT, &hdev->dev_flags) && 38887b064edaSJaganath Kanakkassery !test_and_set_bit(HCI_CONN_MGMT_CONNECTED, &hcon->flags)) 388948ec92faSAlfonso Acosta mgmt_device_connected(hdev, hcon, 0, NULL, 0); 38907b064edaSJaganath Kanakkassery hci_dev_unlock(hdev); 38917b064edaSJaganath Kanakkassery 3892300229f9SGustavo Padovan l2cap_connect(conn, cmd, data, L2CAP_CONN_RSP, 0); 38930a708f8fSGustavo F. Padovan return 0; 38940a708f8fSGustavo F. Padovan } 38950a708f8fSGustavo F. Padovan 38965909cf30SMat Martineau static int l2cap_connect_create_rsp(struct l2cap_conn *conn, 3897cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 3898cb3b3152SJohan Hedberg u8 *data) 38990a708f8fSGustavo F. Padovan { 39000a708f8fSGustavo F. Padovan struct l2cap_conn_rsp *rsp = (struct l2cap_conn_rsp *) data; 39010a708f8fSGustavo F. Padovan u16 scid, dcid, result, status; 390248454079SGustavo F. Padovan struct l2cap_chan *chan; 39030a708f8fSGustavo F. Padovan u8 req[128]; 39043df91ea2SAndrei Emeltchenko int err; 39050a708f8fSGustavo F. Padovan 3906cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rsp)) 3907cb3b3152SJohan Hedberg return -EPROTO; 3908cb3b3152SJohan Hedberg 39090a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 39100a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(rsp->dcid); 39110a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 39120a708f8fSGustavo F. Padovan status = __le16_to_cpu(rsp->status); 39130a708f8fSGustavo F. Padovan 39141b009c98SAndrei Emeltchenko BT_DBG("dcid 0x%4.4x scid 0x%4.4x result 0x%2.2x status 0x%2.2x", 39151b009c98SAndrei Emeltchenko dcid, scid, result, status); 39160a708f8fSGustavo F. Padovan 39173df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 39183df91ea2SAndrei Emeltchenko 39190a708f8fSGustavo F. Padovan if (scid) { 39203df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, scid); 39213df91ea2SAndrei Emeltchenko if (!chan) { 392221870b52SJohan Hedberg err = -EBADSLT; 39233df91ea2SAndrei Emeltchenko goto unlock; 39243df91ea2SAndrei Emeltchenko } 39250a708f8fSGustavo F. Padovan } else { 39263df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_ident(conn, cmd->ident); 39273df91ea2SAndrei Emeltchenko if (!chan) { 392821870b52SJohan Hedberg err = -EBADSLT; 39293df91ea2SAndrei Emeltchenko goto unlock; 39303df91ea2SAndrei Emeltchenko } 39310a708f8fSGustavo F. Padovan } 39320a708f8fSGustavo F. Padovan 39333df91ea2SAndrei Emeltchenko err = 0; 39343df91ea2SAndrei Emeltchenko 39356be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 393648454079SGustavo F. Padovan 39370a708f8fSGustavo F. Padovan switch (result) { 39380a708f8fSGustavo F. Padovan case L2CAP_CR_SUCCESS: 393989bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONFIG); 3940fc7f8a7eSGustavo F. Padovan chan->ident = 0; 3941fe4128e0SGustavo F. Padovan chan->dcid = dcid; 3942c1360a1cSGustavo F. Padovan clear_bit(CONF_CONNECT_PEND, &chan->conf_state); 39430a708f8fSGustavo F. Padovan 3944c1360a1cSGustavo F. Padovan if (test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) 39450a708f8fSGustavo F. Padovan break; 39460a708f8fSGustavo F. Padovan 39470a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 394873ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, req), req); 394973ffa904SGustavo F. Padovan chan->num_conf_req++; 39500a708f8fSGustavo F. Padovan break; 39510a708f8fSGustavo F. Padovan 39520a708f8fSGustavo F. Padovan case L2CAP_CR_PEND: 3953c1360a1cSGustavo F. Padovan set_bit(CONF_CONNECT_PEND, &chan->conf_state); 39540a708f8fSGustavo F. Padovan break; 39550a708f8fSGustavo F. Padovan 39560a708f8fSGustavo F. Padovan default: 395748454079SGustavo F. Padovan l2cap_chan_del(chan, ECONNREFUSED); 39580a708f8fSGustavo F. Padovan break; 39590a708f8fSGustavo F. Padovan } 39600a708f8fSGustavo F. Padovan 39616be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 39623df91ea2SAndrei Emeltchenko 39633df91ea2SAndrei Emeltchenko unlock: 39643df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 39653df91ea2SAndrei Emeltchenko 39663df91ea2SAndrei Emeltchenko return err; 39670a708f8fSGustavo F. Padovan } 39680a708f8fSGustavo F. Padovan 396947d1ec61SGustavo F. Padovan static inline void set_default_fcs(struct l2cap_chan *chan) 39700a708f8fSGustavo F. Padovan { 39710a708f8fSGustavo F. Padovan /* FCS is enabled only in ERTM or streaming mode, if one or both 39720a708f8fSGustavo F. Padovan * sides request it. 39730a708f8fSGustavo F. Padovan */ 39740c1bc5c6SGustavo F. Padovan if (chan->mode != L2CAP_MODE_ERTM && chan->mode != L2CAP_MODE_STREAMING) 397547d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 3976f2592d3eSAndrei Emeltchenko else if (!test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) 397747d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_CRC16; 39780a708f8fSGustavo F. Padovan } 39790a708f8fSGustavo F. Padovan 398029d8a590SAndrei Emeltchenko static void l2cap_send_efs_conf_rsp(struct l2cap_chan *chan, void *data, 398129d8a590SAndrei Emeltchenko u8 ident, u16 flags) 398229d8a590SAndrei Emeltchenko { 398329d8a590SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 398429d8a590SAndrei Emeltchenko 398529d8a590SAndrei Emeltchenko BT_DBG("conn %p chan %p ident %d flags 0x%4.4x", conn, chan, ident, 398629d8a590SAndrei Emeltchenko flags); 398729d8a590SAndrei Emeltchenko 398829d8a590SAndrei Emeltchenko clear_bit(CONF_LOC_CONF_PEND, &chan->conf_state); 398929d8a590SAndrei Emeltchenko set_bit(CONF_OUTPUT_DONE, &chan->conf_state); 399029d8a590SAndrei Emeltchenko 399129d8a590SAndrei Emeltchenko l2cap_send_cmd(conn, ident, L2CAP_CONF_RSP, 399229d8a590SAndrei Emeltchenko l2cap_build_conf_rsp(chan, data, 399329d8a590SAndrei Emeltchenko L2CAP_CONF_SUCCESS, flags), data); 399429d8a590SAndrei Emeltchenko } 399529d8a590SAndrei Emeltchenko 3996662d652dSJohan Hedberg static void cmd_reject_invalid_cid(struct l2cap_conn *conn, u8 ident, 3997662d652dSJohan Hedberg u16 scid, u16 dcid) 3998662d652dSJohan Hedberg { 3999662d652dSJohan Hedberg struct l2cap_cmd_rej_cid rej; 4000662d652dSJohan Hedberg 4001dcf4adbfSJoe Perches rej.reason = cpu_to_le16(L2CAP_REJ_INVALID_CID); 4002662d652dSJohan Hedberg rej.scid = __cpu_to_le16(scid); 4003662d652dSJohan Hedberg rej.dcid = __cpu_to_le16(dcid); 4004662d652dSJohan Hedberg 4005662d652dSJohan Hedberg l2cap_send_cmd(conn, ident, L2CAP_COMMAND_REJ, sizeof(rej), &rej); 4006662d652dSJohan Hedberg } 4007662d652dSJohan Hedberg 40082d792818SGustavo Padovan static inline int l2cap_config_req(struct l2cap_conn *conn, 40092d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, u16 cmd_len, 40102d792818SGustavo Padovan u8 *data) 40110a708f8fSGustavo F. Padovan { 40120a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = (struct l2cap_conf_req *) data; 40130a708f8fSGustavo F. Padovan u16 dcid, flags; 40140a708f8fSGustavo F. Padovan u8 rsp[64]; 401548454079SGustavo F. Padovan struct l2cap_chan *chan; 40163c588192SMat Martineau int len, err = 0; 40170a708f8fSGustavo F. Padovan 4018cb3b3152SJohan Hedberg if (cmd_len < sizeof(*req)) 4019cb3b3152SJohan Hedberg return -EPROTO; 4020cb3b3152SJohan Hedberg 40210a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(req->dcid); 40220a708f8fSGustavo F. Padovan flags = __le16_to_cpu(req->flags); 40230a708f8fSGustavo F. Padovan 40240a708f8fSGustavo F. Padovan BT_DBG("dcid 0x%4.4x flags 0x%2.2x", dcid, flags); 40250a708f8fSGustavo F. Padovan 4026baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, dcid); 4027662d652dSJohan Hedberg if (!chan) { 4028662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, dcid, 0); 4029662d652dSJohan Hedberg return 0; 4030662d652dSJohan Hedberg } 40310a708f8fSGustavo F. Padovan 4032033b1142SDavid S. Miller if (chan->state != BT_CONFIG && chan->state != BT_CONNECT2) { 4033662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, chan->scid, 4034662d652dSJohan Hedberg chan->dcid); 40350a708f8fSGustavo F. Padovan goto unlock; 40360a708f8fSGustavo F. Padovan } 40370a708f8fSGustavo F. Padovan 40380a708f8fSGustavo F. Padovan /* Reject if config buffer is too small. */ 40390a708f8fSGustavo F. Padovan len = cmd_len - sizeof(*req); 4040cb3b3152SJohan Hedberg if (chan->conf_len + len > sizeof(chan->conf_req)) { 40410a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 4042fe4128e0SGustavo F. Padovan l2cap_build_conf_rsp(chan, rsp, 40430a708f8fSGustavo F. Padovan L2CAP_CONF_REJECT, flags), rsp); 40440a708f8fSGustavo F. Padovan goto unlock; 40450a708f8fSGustavo F. Padovan } 40460a708f8fSGustavo F. Padovan 40470a708f8fSGustavo F. Padovan /* Store config. */ 404873ffa904SGustavo F. Padovan memcpy(chan->conf_req + chan->conf_len, req->data, len); 404973ffa904SGustavo F. Padovan chan->conf_len += len; 40500a708f8fSGustavo F. Padovan 405159e54bd1SAndrei Emeltchenko if (flags & L2CAP_CONF_FLAG_CONTINUATION) { 40520a708f8fSGustavo F. Padovan /* Incomplete config. Send empty response. */ 40530a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 4054fe4128e0SGustavo F. Padovan l2cap_build_conf_rsp(chan, rsp, 40555325e5bbSAndrei Emeltchenko L2CAP_CONF_SUCCESS, flags), rsp); 40560a708f8fSGustavo F. Padovan goto unlock; 40570a708f8fSGustavo F. Padovan } 40580a708f8fSGustavo F. Padovan 40590a708f8fSGustavo F. Padovan /* Complete config. */ 406073ffa904SGustavo F. Padovan len = l2cap_parse_conf_req(chan, rsp); 40610a708f8fSGustavo F. Padovan if (len < 0) { 40625e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 40630a708f8fSGustavo F. Padovan goto unlock; 40640a708f8fSGustavo F. Padovan } 40650a708f8fSGustavo F. Padovan 40661500109bSMat Martineau chan->ident = cmd->ident; 40670a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, len, rsp); 406873ffa904SGustavo F. Padovan chan->num_conf_rsp++; 40690a708f8fSGustavo F. Padovan 40700a708f8fSGustavo F. Padovan /* Reset config buffer. */ 407173ffa904SGustavo F. Padovan chan->conf_len = 0; 40720a708f8fSGustavo F. Padovan 4073c1360a1cSGustavo F. Padovan if (!test_bit(CONF_OUTPUT_DONE, &chan->conf_state)) 40740a708f8fSGustavo F. Padovan goto unlock; 40750a708f8fSGustavo F. Padovan 4076c1360a1cSGustavo F. Padovan if (test_bit(CONF_INPUT_DONE, &chan->conf_state)) { 407747d1ec61SGustavo F. Padovan set_default_fcs(chan); 40780a708f8fSGustavo F. Padovan 4079105bdf9eSMat Martineau if (chan->mode == L2CAP_MODE_ERTM || 4080105bdf9eSMat Martineau chan->mode == L2CAP_MODE_STREAMING) 40813c588192SMat Martineau err = l2cap_ertm_init(chan); 40820a708f8fSGustavo F. Padovan 40833c588192SMat Martineau if (err < 0) 40845e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 40853c588192SMat Martineau else 4086cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 40873c588192SMat Martineau 40880a708f8fSGustavo F. Padovan goto unlock; 40890a708f8fSGustavo F. Padovan } 40900a708f8fSGustavo F. Padovan 4091c1360a1cSGustavo F. Padovan if (!test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) { 40920a708f8fSGustavo F. Padovan u8 buf[64]; 40930a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 409473ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 409573ffa904SGustavo F. Padovan chan->num_conf_req++; 40960a708f8fSGustavo F. Padovan } 40970a708f8fSGustavo F. Padovan 409849c922bbSStephen Hemminger /* Got Conf Rsp PENDING from remote side and assume we sent 40990e8b207eSAndrei Emeltchenko Conf Rsp PENDING in the code above */ 41000e8b207eSAndrei Emeltchenko if (test_bit(CONF_REM_CONF_PEND, &chan->conf_state) && 41010e8b207eSAndrei Emeltchenko test_bit(CONF_LOC_CONF_PEND, &chan->conf_state)) { 41020e8b207eSAndrei Emeltchenko 41030e8b207eSAndrei Emeltchenko /* check compatibility */ 41040e8b207eSAndrei Emeltchenko 410579de886dSAndrei Emeltchenko /* Send rsp for BR/EDR channel */ 4106f351bc72SAndrei Emeltchenko if (!chan->hs_hcon) 410729d8a590SAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, rsp, cmd->ident, flags); 410879de886dSAndrei Emeltchenko else 410979de886dSAndrei Emeltchenko chan->ident = cmd->ident; 41100e8b207eSAndrei Emeltchenko } 41110e8b207eSAndrei Emeltchenko 41120a708f8fSGustavo F. Padovan unlock: 41136be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 41143c588192SMat Martineau return err; 41150a708f8fSGustavo F. Padovan } 41160a708f8fSGustavo F. Padovan 41172d792818SGustavo Padovan static inline int l2cap_config_rsp(struct l2cap_conn *conn, 4118cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4119cb3b3152SJohan Hedberg u8 *data) 41200a708f8fSGustavo F. Padovan { 41210a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = (struct l2cap_conf_rsp *)data; 41220a708f8fSGustavo F. Padovan u16 scid, flags, result; 412348454079SGustavo F. Padovan struct l2cap_chan *chan; 4124cb3b3152SJohan Hedberg int len = cmd_len - sizeof(*rsp); 41253c588192SMat Martineau int err = 0; 41260a708f8fSGustavo F. Padovan 4127cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rsp)) 4128cb3b3152SJohan Hedberg return -EPROTO; 4129cb3b3152SJohan Hedberg 41300a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 41310a708f8fSGustavo F. Padovan flags = __le16_to_cpu(rsp->flags); 41320a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 41330a708f8fSGustavo F. Padovan 413461386cbaSAndrei Emeltchenko BT_DBG("scid 0x%4.4x flags 0x%2.2x result 0x%2.2x len %d", scid, flags, 413561386cbaSAndrei Emeltchenko result, len); 41360a708f8fSGustavo F. Padovan 4137baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, scid); 413848454079SGustavo F. Padovan if (!chan) 41390a708f8fSGustavo F. Padovan return 0; 41400a708f8fSGustavo F. Padovan 41410a708f8fSGustavo F. Padovan switch (result) { 41420a708f8fSGustavo F. Padovan case L2CAP_CONF_SUCCESS: 414347d1ec61SGustavo F. Padovan l2cap_conf_rfc_get(chan, rsp->data, len); 41440e8b207eSAndrei Emeltchenko clear_bit(CONF_REM_CONF_PEND, &chan->conf_state); 41450a708f8fSGustavo F. Padovan break; 41460a708f8fSGustavo F. Padovan 41470e8b207eSAndrei Emeltchenko case L2CAP_CONF_PENDING: 41480e8b207eSAndrei Emeltchenko set_bit(CONF_REM_CONF_PEND, &chan->conf_state); 41490e8b207eSAndrei Emeltchenko 41500e8b207eSAndrei Emeltchenko if (test_bit(CONF_LOC_CONF_PEND, &chan->conf_state)) { 41510e8b207eSAndrei Emeltchenko char buf[64]; 41520e8b207eSAndrei Emeltchenko 41530e8b207eSAndrei Emeltchenko len = l2cap_parse_conf_rsp(chan, rsp->data, len, 41540e8b207eSAndrei Emeltchenko buf, &result); 41550e8b207eSAndrei Emeltchenko if (len < 0) { 41565e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 41570e8b207eSAndrei Emeltchenko goto done; 41580e8b207eSAndrei Emeltchenko } 41590e8b207eSAndrei Emeltchenko 4160f351bc72SAndrei Emeltchenko if (!chan->hs_hcon) { 416179de886dSAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, buf, cmd->ident, 416279de886dSAndrei Emeltchenko 0); 41635ce66b59SAndrei Emeltchenko } else { 41645ce66b59SAndrei Emeltchenko if (l2cap_check_efs(chan)) { 41655ce66b59SAndrei Emeltchenko amp_create_logical_link(chan); 416679de886dSAndrei Emeltchenko chan->ident = cmd->ident; 41670e8b207eSAndrei Emeltchenko } 41685ce66b59SAndrei Emeltchenko } 41695ce66b59SAndrei Emeltchenko } 41700e8b207eSAndrei Emeltchenko goto done; 41710e8b207eSAndrei Emeltchenko 41720a708f8fSGustavo F. Padovan case L2CAP_CONF_UNACCEPT: 417373ffa904SGustavo F. Padovan if (chan->num_conf_rsp <= L2CAP_CONF_MAX_CONF_RSP) { 41740a708f8fSGustavo F. Padovan char req[64]; 41750a708f8fSGustavo F. Padovan 41760a708f8fSGustavo F. Padovan if (len > sizeof(req) - sizeof(struct l2cap_conf_req)) { 41775e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 41780a708f8fSGustavo F. Padovan goto done; 41790a708f8fSGustavo F. Padovan } 41800a708f8fSGustavo F. Padovan 41810a708f8fSGustavo F. Padovan /* throw out any old stored conf requests */ 41820a708f8fSGustavo F. Padovan result = L2CAP_CONF_SUCCESS; 4183b4450035SGustavo F. Padovan len = l2cap_parse_conf_rsp(chan, rsp->data, len, 4184b4450035SGustavo F. Padovan req, &result); 41850a708f8fSGustavo F. Padovan if (len < 0) { 41865e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 41870a708f8fSGustavo F. Padovan goto done; 41880a708f8fSGustavo F. Padovan } 41890a708f8fSGustavo F. Padovan 41900a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), 41910a708f8fSGustavo F. Padovan L2CAP_CONF_REQ, len, req); 419273ffa904SGustavo F. Padovan chan->num_conf_req++; 41930a708f8fSGustavo F. Padovan if (result != L2CAP_CONF_SUCCESS) 41940a708f8fSGustavo F. Padovan goto done; 41950a708f8fSGustavo F. Padovan break; 41960a708f8fSGustavo F. Padovan } 41970a708f8fSGustavo F. Padovan 41980a708f8fSGustavo F. Padovan default: 41996be36555SAndrei Emeltchenko l2cap_chan_set_err(chan, ECONNRESET); 42002e0052e4SAndrei Emeltchenko 4201ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_REJ_TIMEOUT); 42025e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 42030a708f8fSGustavo F. Padovan goto done; 42040a708f8fSGustavo F. Padovan } 42050a708f8fSGustavo F. Padovan 420659e54bd1SAndrei Emeltchenko if (flags & L2CAP_CONF_FLAG_CONTINUATION) 42070a708f8fSGustavo F. Padovan goto done; 42080a708f8fSGustavo F. Padovan 4209c1360a1cSGustavo F. Padovan set_bit(CONF_INPUT_DONE, &chan->conf_state); 42100a708f8fSGustavo F. Padovan 4211c1360a1cSGustavo F. Padovan if (test_bit(CONF_OUTPUT_DONE, &chan->conf_state)) { 421247d1ec61SGustavo F. Padovan set_default_fcs(chan); 42130a708f8fSGustavo F. Padovan 4214105bdf9eSMat Martineau if (chan->mode == L2CAP_MODE_ERTM || 4215105bdf9eSMat Martineau chan->mode == L2CAP_MODE_STREAMING) 42163c588192SMat Martineau err = l2cap_ertm_init(chan); 42170a708f8fSGustavo F. Padovan 42183c588192SMat Martineau if (err < 0) 42195e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 42203c588192SMat Martineau else 4221cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 42220a708f8fSGustavo F. Padovan } 42230a708f8fSGustavo F. Padovan 42240a708f8fSGustavo F. Padovan done: 42256be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 42263c588192SMat Martineau return err; 42270a708f8fSGustavo F. Padovan } 42280a708f8fSGustavo F. Padovan 42292d792818SGustavo Padovan static inline int l2cap_disconnect_req(struct l2cap_conn *conn, 4230cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4231cb3b3152SJohan Hedberg u8 *data) 42320a708f8fSGustavo F. Padovan { 42330a708f8fSGustavo F. Padovan struct l2cap_disconn_req *req = (struct l2cap_disconn_req *) data; 42340a708f8fSGustavo F. Padovan struct l2cap_disconn_rsp rsp; 42350a708f8fSGustavo F. Padovan u16 dcid, scid; 423648454079SGustavo F. Padovan struct l2cap_chan *chan; 42370a708f8fSGustavo F. Padovan 4238cb3b3152SJohan Hedberg if (cmd_len != sizeof(*req)) 4239cb3b3152SJohan Hedberg return -EPROTO; 4240cb3b3152SJohan Hedberg 42410a708f8fSGustavo F. Padovan scid = __le16_to_cpu(req->scid); 42420a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(req->dcid); 42430a708f8fSGustavo F. Padovan 42440a708f8fSGustavo F. Padovan BT_DBG("scid 0x%4.4x dcid 0x%4.4x", scid, dcid); 42450a708f8fSGustavo F. Padovan 42463df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 42473df91ea2SAndrei Emeltchenko 42483df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, dcid); 42493df91ea2SAndrei Emeltchenko if (!chan) { 42503df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 4251662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, dcid, scid); 4252662d652dSJohan Hedberg return 0; 42533df91ea2SAndrei Emeltchenko } 42540a708f8fSGustavo F. Padovan 42556be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 42566be36555SAndrei Emeltchenko 4257fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 4258fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 42590a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_DISCONN_RSP, sizeof(rsp), &rsp); 42600a708f8fSGustavo F. Padovan 42615ec1bbe5SGustavo Padovan chan->ops->set_shutdown(chan); 42620a708f8fSGustavo F. Padovan 426361d6ef3eSMat Martineau l2cap_chan_hold(chan); 426448454079SGustavo F. Padovan l2cap_chan_del(chan, ECONNRESET); 42656be36555SAndrei Emeltchenko 42666be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 42670a708f8fSGustavo F. Padovan 426880b98027SGustavo Padovan chan->ops->close(chan); 426961d6ef3eSMat Martineau l2cap_chan_put(chan); 42703df91ea2SAndrei Emeltchenko 42713df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 42723df91ea2SAndrei Emeltchenko 42730a708f8fSGustavo F. Padovan return 0; 42740a708f8fSGustavo F. Padovan } 42750a708f8fSGustavo F. Padovan 42762d792818SGustavo Padovan static inline int l2cap_disconnect_rsp(struct l2cap_conn *conn, 4277cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4278cb3b3152SJohan Hedberg u8 *data) 42790a708f8fSGustavo F. Padovan { 42800a708f8fSGustavo F. Padovan struct l2cap_disconn_rsp *rsp = (struct l2cap_disconn_rsp *) data; 42810a708f8fSGustavo F. Padovan u16 dcid, scid; 428248454079SGustavo F. Padovan struct l2cap_chan *chan; 42830a708f8fSGustavo F. Padovan 4284cb3b3152SJohan Hedberg if (cmd_len != sizeof(*rsp)) 4285cb3b3152SJohan Hedberg return -EPROTO; 4286cb3b3152SJohan Hedberg 42870a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 42880a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(rsp->dcid); 42890a708f8fSGustavo F. Padovan 42900a708f8fSGustavo F. Padovan BT_DBG("dcid 0x%4.4x scid 0x%4.4x", dcid, scid); 42910a708f8fSGustavo F. Padovan 42923df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 42933df91ea2SAndrei Emeltchenko 42943df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, scid); 42953df91ea2SAndrei Emeltchenko if (!chan) { 42963df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 42970a708f8fSGustavo F. Padovan return 0; 42983df91ea2SAndrei Emeltchenko } 42990a708f8fSGustavo F. Padovan 43006be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 430148454079SGustavo F. Padovan 430261d6ef3eSMat Martineau l2cap_chan_hold(chan); 430348454079SGustavo F. Padovan l2cap_chan_del(chan, 0); 43046be36555SAndrei Emeltchenko 43056be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 43060a708f8fSGustavo F. Padovan 430780b98027SGustavo Padovan chan->ops->close(chan); 430861d6ef3eSMat Martineau l2cap_chan_put(chan); 43093df91ea2SAndrei Emeltchenko 43103df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 43113df91ea2SAndrei Emeltchenko 43120a708f8fSGustavo F. Padovan return 0; 43130a708f8fSGustavo F. Padovan } 43140a708f8fSGustavo F. Padovan 43152d792818SGustavo Padovan static inline int l2cap_information_req(struct l2cap_conn *conn, 4316cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4317cb3b3152SJohan Hedberg u8 *data) 43180a708f8fSGustavo F. Padovan { 43190a708f8fSGustavo F. Padovan struct l2cap_info_req *req = (struct l2cap_info_req *) data; 43200a708f8fSGustavo F. Padovan u16 type; 43210a708f8fSGustavo F. Padovan 4322cb3b3152SJohan Hedberg if (cmd_len != sizeof(*req)) 4323cb3b3152SJohan Hedberg return -EPROTO; 4324cb3b3152SJohan Hedberg 43250a708f8fSGustavo F. Padovan type = __le16_to_cpu(req->type); 43260a708f8fSGustavo F. Padovan 43270a708f8fSGustavo F. Padovan BT_DBG("type 0x%4.4x", type); 43280a708f8fSGustavo F. Padovan 43290a708f8fSGustavo F. Padovan if (type == L2CAP_IT_FEAT_MASK) { 43300a708f8fSGustavo F. Padovan u8 buf[8]; 43310a708f8fSGustavo F. Padovan u32 feat_mask = l2cap_feat_mask; 43320a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) buf; 4333dcf4adbfSJoe Perches rsp->type = cpu_to_le16(L2CAP_IT_FEAT_MASK); 4334dcf4adbfSJoe Perches rsp->result = cpu_to_le16(L2CAP_IR_SUCCESS); 43350a708f8fSGustavo F. Padovan if (!disable_ertm) 43360a708f8fSGustavo F. Padovan feat_mask |= L2CAP_FEAT_ERTM | L2CAP_FEAT_STREAMING 43370a708f8fSGustavo F. Padovan | L2CAP_FEAT_FCS; 4338*0bd49fc7SJohan Hedberg if (conn->local_fixed_chan & L2CAP_FC_A2MP) 43396327eb98SAndrei Emeltchenko feat_mask |= L2CAP_FEAT_EXT_FLOW 43406327eb98SAndrei Emeltchenko | L2CAP_FEAT_EXT_WINDOW; 4341a5fd6f30SAndrei Emeltchenko 43420a708f8fSGustavo F. Padovan put_unaligned_le32(feat_mask, rsp->data); 43432d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(buf), 43442d792818SGustavo Padovan buf); 43450a708f8fSGustavo F. Padovan } else if (type == L2CAP_IT_FIXED_CHAN) { 43460a708f8fSGustavo F. Padovan u8 buf[12]; 43470a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) buf; 434850a147cdSMat Martineau 4349dcf4adbfSJoe Perches rsp->type = cpu_to_le16(L2CAP_IT_FIXED_CHAN); 4350dcf4adbfSJoe Perches rsp->result = cpu_to_le16(L2CAP_IR_SUCCESS); 4351*0bd49fc7SJohan Hedberg rsp->data[0] = conn->local_fixed_chan; 4352*0bd49fc7SJohan Hedberg memset(rsp->data + 1, 0, 7); 43532d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(buf), 43542d792818SGustavo Padovan buf); 43550a708f8fSGustavo F. Padovan } else { 43560a708f8fSGustavo F. Padovan struct l2cap_info_rsp rsp; 43570a708f8fSGustavo F. Padovan rsp.type = cpu_to_le16(type); 4358dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_IR_NOTSUPP); 43592d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(rsp), 43602d792818SGustavo Padovan &rsp); 43610a708f8fSGustavo F. Padovan } 43620a708f8fSGustavo F. Padovan 43630a708f8fSGustavo F. Padovan return 0; 43640a708f8fSGustavo F. Padovan } 43650a708f8fSGustavo F. Padovan 43662d792818SGustavo Padovan static inline int l2cap_information_rsp(struct l2cap_conn *conn, 4367cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4368cb3b3152SJohan Hedberg u8 *data) 43690a708f8fSGustavo F. Padovan { 43700a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) data; 43710a708f8fSGustavo F. Padovan u16 type, result; 43720a708f8fSGustavo F. Padovan 43733f6fa3d4SJaganath Kanakkassery if (cmd_len < sizeof(*rsp)) 4374cb3b3152SJohan Hedberg return -EPROTO; 4375cb3b3152SJohan Hedberg 43760a708f8fSGustavo F. Padovan type = __le16_to_cpu(rsp->type); 43770a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 43780a708f8fSGustavo F. Padovan 43790a708f8fSGustavo F. Padovan BT_DBG("type 0x%4.4x result 0x%2.2x", type, result); 43800a708f8fSGustavo F. Padovan 4381e90165beSAndrei Emeltchenko /* L2CAP Info req/rsp are unbound to channels, add extra checks */ 4382e90165beSAndrei Emeltchenko if (cmd->ident != conn->info_ident || 4383e90165beSAndrei Emeltchenko conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) 4384e90165beSAndrei Emeltchenko return 0; 4385e90165beSAndrei Emeltchenko 438617cd3f37SUlisses Furquim cancel_delayed_work(&conn->info_timer); 43870a708f8fSGustavo F. Padovan 43880a708f8fSGustavo F. Padovan if (result != L2CAP_IR_SUCCESS) { 43890a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 43900a708f8fSGustavo F. Padovan conn->info_ident = 0; 43910a708f8fSGustavo F. Padovan 43920a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 43930a708f8fSGustavo F. Padovan 43940a708f8fSGustavo F. Padovan return 0; 43950a708f8fSGustavo F. Padovan } 43960a708f8fSGustavo F. Padovan 4397978c93b9SAndrei Emeltchenko switch (type) { 4398978c93b9SAndrei Emeltchenko case L2CAP_IT_FEAT_MASK: 43990a708f8fSGustavo F. Padovan conn->feat_mask = get_unaligned_le32(rsp->data); 44000a708f8fSGustavo F. Padovan 44010a708f8fSGustavo F. Padovan if (conn->feat_mask & L2CAP_FEAT_FIXED_CHAN) { 44020a708f8fSGustavo F. Padovan struct l2cap_info_req req; 4403dcf4adbfSJoe Perches req.type = cpu_to_le16(L2CAP_IT_FIXED_CHAN); 44040a708f8fSGustavo F. Padovan 44050a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 44060a708f8fSGustavo F. Padovan 44070a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, conn->info_ident, 44080a708f8fSGustavo F. Padovan L2CAP_INFO_REQ, sizeof(req), &req); 44090a708f8fSGustavo F. Padovan } else { 44100a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 44110a708f8fSGustavo F. Padovan conn->info_ident = 0; 44120a708f8fSGustavo F. Padovan 44130a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 44140a708f8fSGustavo F. Padovan } 4415978c93b9SAndrei Emeltchenko break; 4416978c93b9SAndrei Emeltchenko 4417978c93b9SAndrei Emeltchenko case L2CAP_IT_FIXED_CHAN: 4418*0bd49fc7SJohan Hedberg conn->remote_fixed_chan = rsp->data[0]; 44190a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 44200a708f8fSGustavo F. Padovan conn->info_ident = 0; 44210a708f8fSGustavo F. Padovan 44220a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 4423978c93b9SAndrei Emeltchenko break; 44240a708f8fSGustavo F. Padovan } 44250a708f8fSGustavo F. Padovan 44260a708f8fSGustavo F. Padovan return 0; 44270a708f8fSGustavo F. Padovan } 44280a708f8fSGustavo F. Padovan 44291700915fSMat Martineau static int l2cap_create_channel_req(struct l2cap_conn *conn, 44302d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, 44312d792818SGustavo Padovan u16 cmd_len, void *data) 4432f94ff6ffSMat Martineau { 4433f94ff6ffSMat Martineau struct l2cap_create_chan_req *req = data; 44346e1df6a6SAndrei Emeltchenko struct l2cap_create_chan_rsp rsp; 44351700915fSMat Martineau struct l2cap_chan *chan; 44366e1df6a6SAndrei Emeltchenko struct hci_dev *hdev; 4437f94ff6ffSMat Martineau u16 psm, scid; 4438f94ff6ffSMat Martineau 4439f94ff6ffSMat Martineau if (cmd_len != sizeof(*req)) 4440f94ff6ffSMat Martineau return -EPROTO; 4441f94ff6ffSMat Martineau 4442*0bd49fc7SJohan Hedberg if (!(conn->local_fixed_chan & L2CAP_FC_A2MP)) 4443f94ff6ffSMat Martineau return -EINVAL; 4444f94ff6ffSMat Martineau 4445f94ff6ffSMat Martineau psm = le16_to_cpu(req->psm); 4446f94ff6ffSMat Martineau scid = le16_to_cpu(req->scid); 4447f94ff6ffSMat Martineau 4448ad0ac6caSAndrei Emeltchenko BT_DBG("psm 0x%2.2x, scid 0x%4.4x, amp_id %d", psm, scid, req->amp_id); 4449f94ff6ffSMat Martineau 44506e1df6a6SAndrei Emeltchenko /* For controller id 0 make BR/EDR connection */ 44516ed971caSMarcel Holtmann if (req->amp_id == AMP_ID_BREDR) { 44526e1df6a6SAndrei Emeltchenko l2cap_connect(conn, cmd, data, L2CAP_CREATE_CHAN_RSP, 44536e1df6a6SAndrei Emeltchenko req->amp_id); 44546e1df6a6SAndrei Emeltchenko return 0; 44556e1df6a6SAndrei Emeltchenko } 44561700915fSMat Martineau 44571700915fSMat Martineau /* Validate AMP controller id */ 44581700915fSMat Martineau hdev = hci_dev_get(req->amp_id); 44596e1df6a6SAndrei Emeltchenko if (!hdev) 44606e1df6a6SAndrei Emeltchenko goto error; 44611700915fSMat Martineau 44626e1df6a6SAndrei Emeltchenko if (hdev->dev_type != HCI_AMP || !test_bit(HCI_UP, &hdev->flags)) { 44636e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 44646e1df6a6SAndrei Emeltchenko goto error; 44656e1df6a6SAndrei Emeltchenko } 44666e1df6a6SAndrei Emeltchenko 44676e1df6a6SAndrei Emeltchenko chan = l2cap_connect(conn, cmd, data, L2CAP_CREATE_CHAN_RSP, 44686e1df6a6SAndrei Emeltchenko req->amp_id); 44696e1df6a6SAndrei Emeltchenko if (chan) { 44706e1df6a6SAndrei Emeltchenko struct amp_mgr *mgr = conn->hcon->amp_mgr; 44716e1df6a6SAndrei Emeltchenko struct hci_conn *hs_hcon; 44726e1df6a6SAndrei Emeltchenko 447398e0f7eaSMarcel Holtmann hs_hcon = hci_conn_hash_lookup_ba(hdev, AMP_LINK, 447498e0f7eaSMarcel Holtmann &conn->hcon->dst); 44756e1df6a6SAndrei Emeltchenko if (!hs_hcon) { 44766e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 4477662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, chan->scid, 4478662d652dSJohan Hedberg chan->dcid); 4479662d652dSJohan Hedberg return 0; 44806e1df6a6SAndrei Emeltchenko } 44816e1df6a6SAndrei Emeltchenko 44826e1df6a6SAndrei Emeltchenko BT_DBG("mgr %p bredr_chan %p hs_hcon %p", mgr, chan, hs_hcon); 44836e1df6a6SAndrei Emeltchenko 44846e1df6a6SAndrei Emeltchenko mgr->bredr_chan = chan; 44856e1df6a6SAndrei Emeltchenko chan->hs_hcon = hs_hcon; 4486fd45bf4cSAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 44876e1df6a6SAndrei Emeltchenko conn->mtu = hdev->block_mtu; 44886e1df6a6SAndrei Emeltchenko } 44896e1df6a6SAndrei Emeltchenko 44906e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 44916e1df6a6SAndrei Emeltchenko 44926e1df6a6SAndrei Emeltchenko return 0; 44936e1df6a6SAndrei Emeltchenko 44946e1df6a6SAndrei Emeltchenko error: 4495f94ff6ffSMat Martineau rsp.dcid = 0; 4496f94ff6ffSMat Martineau rsp.scid = cpu_to_le16(scid); 4497dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_BAD_AMP); 4498dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 4499f94ff6ffSMat Martineau 4500f94ff6ffSMat Martineau l2cap_send_cmd(conn, cmd->ident, L2CAP_CREATE_CHAN_RSP, 4501f94ff6ffSMat Martineau sizeof(rsp), &rsp); 4502f94ff6ffSMat Martineau 4503dc280801SJohan Hedberg return 0; 4504f94ff6ffSMat Martineau } 4505f94ff6ffSMat Martineau 45068eb200bdSMat Martineau static void l2cap_send_move_chan_req(struct l2cap_chan *chan, u8 dest_amp_id) 45078eb200bdSMat Martineau { 45088eb200bdSMat Martineau struct l2cap_move_chan_req req; 45098eb200bdSMat Martineau u8 ident; 45108eb200bdSMat Martineau 45118eb200bdSMat Martineau BT_DBG("chan %p, dest_amp_id %d", chan, dest_amp_id); 45128eb200bdSMat Martineau 45138eb200bdSMat Martineau ident = l2cap_get_ident(chan->conn); 45148eb200bdSMat Martineau chan->ident = ident; 45158eb200bdSMat Martineau 45168eb200bdSMat Martineau req.icid = cpu_to_le16(chan->scid); 45178eb200bdSMat Martineau req.dest_amp_id = dest_amp_id; 45188eb200bdSMat Martineau 45198eb200bdSMat Martineau l2cap_send_cmd(chan->conn, ident, L2CAP_MOVE_CHAN_REQ, sizeof(req), 45208eb200bdSMat Martineau &req); 45218eb200bdSMat Martineau 45228eb200bdSMat Martineau __set_chan_timer(chan, L2CAP_MOVE_TIMEOUT); 45238eb200bdSMat Martineau } 45248eb200bdSMat Martineau 45251500109bSMat Martineau static void l2cap_send_move_chan_rsp(struct l2cap_chan *chan, u16 result) 45268d5a04a1SMat Martineau { 45278d5a04a1SMat Martineau struct l2cap_move_chan_rsp rsp; 45288d5a04a1SMat Martineau 45291500109bSMat Martineau BT_DBG("chan %p, result 0x%4.4x", chan, result); 45308d5a04a1SMat Martineau 45311500109bSMat Martineau rsp.icid = cpu_to_le16(chan->dcid); 45328d5a04a1SMat Martineau rsp.result = cpu_to_le16(result); 45338d5a04a1SMat Martineau 45341500109bSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_MOVE_CHAN_RSP, 45351500109bSMat Martineau sizeof(rsp), &rsp); 45368d5a04a1SMat Martineau } 45378d5a04a1SMat Martineau 45385b155ef9SMat Martineau static void l2cap_send_move_chan_cfm(struct l2cap_chan *chan, u16 result) 45398d5a04a1SMat Martineau { 45408d5a04a1SMat Martineau struct l2cap_move_chan_cfm cfm; 45418d5a04a1SMat Martineau 45425b155ef9SMat Martineau BT_DBG("chan %p, result 0x%4.4x", chan, result); 45438d5a04a1SMat Martineau 45445b155ef9SMat Martineau chan->ident = l2cap_get_ident(chan->conn); 45458d5a04a1SMat Martineau 45465b155ef9SMat Martineau cfm.icid = cpu_to_le16(chan->scid); 45478d5a04a1SMat Martineau cfm.result = cpu_to_le16(result); 45488d5a04a1SMat Martineau 45495b155ef9SMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_MOVE_CHAN_CFM, 45505b155ef9SMat Martineau sizeof(cfm), &cfm); 45515b155ef9SMat Martineau 45525b155ef9SMat Martineau __set_chan_timer(chan, L2CAP_MOVE_TIMEOUT); 45535b155ef9SMat Martineau } 45545b155ef9SMat Martineau 45555b155ef9SMat Martineau static void l2cap_send_move_chan_cfm_icid(struct l2cap_conn *conn, u16 icid) 45565b155ef9SMat Martineau { 45575b155ef9SMat Martineau struct l2cap_move_chan_cfm cfm; 45585b155ef9SMat Martineau 45595b155ef9SMat Martineau BT_DBG("conn %p, icid 0x%4.4x", conn, icid); 45605b155ef9SMat Martineau 45615b155ef9SMat Martineau cfm.icid = cpu_to_le16(icid); 4562dcf4adbfSJoe Perches cfm.result = cpu_to_le16(L2CAP_MC_UNCONFIRMED); 45635b155ef9SMat Martineau 45645b155ef9SMat Martineau l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_MOVE_CHAN_CFM, 45655b155ef9SMat Martineau sizeof(cfm), &cfm); 45668d5a04a1SMat Martineau } 45678d5a04a1SMat Martineau 45688d5a04a1SMat Martineau static void l2cap_send_move_chan_cfm_rsp(struct l2cap_conn *conn, u8 ident, 45698d5a04a1SMat Martineau u16 icid) 45708d5a04a1SMat Martineau { 45718d5a04a1SMat Martineau struct l2cap_move_chan_cfm_rsp rsp; 45728d5a04a1SMat Martineau 4573ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x", icid); 45748d5a04a1SMat Martineau 45758d5a04a1SMat Martineau rsp.icid = cpu_to_le16(icid); 45768d5a04a1SMat Martineau l2cap_send_cmd(conn, ident, L2CAP_MOVE_CHAN_CFM_RSP, sizeof(rsp), &rsp); 45778d5a04a1SMat Martineau } 45788d5a04a1SMat Martineau 45795f3847a4SMat Martineau static void __release_logical_link(struct l2cap_chan *chan) 45805f3847a4SMat Martineau { 45815f3847a4SMat Martineau chan->hs_hchan = NULL; 45825f3847a4SMat Martineau chan->hs_hcon = NULL; 45835f3847a4SMat Martineau 45845f3847a4SMat Martineau /* Placeholder - release the logical link */ 45855f3847a4SMat Martineau } 45865f3847a4SMat Martineau 45871500109bSMat Martineau static void l2cap_logical_fail(struct l2cap_chan *chan) 45881500109bSMat Martineau { 45891500109bSMat Martineau /* Logical link setup failed */ 45901500109bSMat Martineau if (chan->state != BT_CONNECTED) { 45911500109bSMat Martineau /* Create channel failure, disconnect */ 45925e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 45931500109bSMat Martineau return; 45941500109bSMat Martineau } 45951500109bSMat Martineau 45961500109bSMat Martineau switch (chan->move_role) { 45971500109bSMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 45981500109bSMat Martineau l2cap_move_done(chan); 45991500109bSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_NOT_SUPP); 46001500109bSMat Martineau break; 46011500109bSMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 46021500109bSMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_LOGICAL_COMP || 46031500109bSMat Martineau chan->move_state == L2CAP_MOVE_WAIT_LOGICAL_CFM) { 46041500109bSMat Martineau /* Remote has only sent pending or 46051500109bSMat Martineau * success responses, clean up 46061500109bSMat Martineau */ 46071500109bSMat Martineau l2cap_move_done(chan); 46081500109bSMat Martineau } 46091500109bSMat Martineau 46101500109bSMat Martineau /* Other amp move states imply that the move 46111500109bSMat Martineau * has already aborted 46121500109bSMat Martineau */ 46131500109bSMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 46141500109bSMat Martineau break; 46151500109bSMat Martineau } 46161500109bSMat Martineau } 46171500109bSMat Martineau 46181500109bSMat Martineau static void l2cap_logical_finish_create(struct l2cap_chan *chan, 46191500109bSMat Martineau struct hci_chan *hchan) 46201500109bSMat Martineau { 46211500109bSMat Martineau struct l2cap_conf_rsp rsp; 46221500109bSMat Martineau 4623336178a3SAndrei Emeltchenko chan->hs_hchan = hchan; 46241500109bSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 46251500109bSMat Martineau 462635ba9561SAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, &rsp, chan->ident, 0); 46271500109bSMat Martineau 46281500109bSMat Martineau if (test_bit(CONF_INPUT_DONE, &chan->conf_state)) { 4629fe79c6feSAndrei Emeltchenko int err; 46301500109bSMat Martineau 46311500109bSMat Martineau set_default_fcs(chan); 46321500109bSMat Martineau 46331500109bSMat Martineau err = l2cap_ertm_init(chan); 46341500109bSMat Martineau if (err < 0) 46355e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 46361500109bSMat Martineau else 46371500109bSMat Martineau l2cap_chan_ready(chan); 46381500109bSMat Martineau } 46391500109bSMat Martineau } 46401500109bSMat Martineau 46411500109bSMat Martineau static void l2cap_logical_finish_move(struct l2cap_chan *chan, 46421500109bSMat Martineau struct hci_chan *hchan) 46431500109bSMat Martineau { 46441500109bSMat Martineau chan->hs_hcon = hchan->conn; 46451500109bSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 46461500109bSMat Martineau 46471500109bSMat Martineau BT_DBG("move_state %d", chan->move_state); 46481500109bSMat Martineau 46491500109bSMat Martineau switch (chan->move_state) { 46501500109bSMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_COMP: 46511500109bSMat Martineau /* Move confirm will be sent after a success 46521500109bSMat Martineau * response is received 46531500109bSMat Martineau */ 46541500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 46551500109bSMat Martineau break; 46561500109bSMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_CFM: 46571500109bSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 46581500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 46591500109bSMat Martineau } else if (chan->move_role == L2CAP_MOVE_ROLE_INITIATOR) { 46601500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM_RSP; 46611500109bSMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 46621500109bSMat Martineau } else if (chan->move_role == L2CAP_MOVE_ROLE_RESPONDER) { 46631500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 46641500109bSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_SUCCESS); 46651500109bSMat Martineau } 46661500109bSMat Martineau break; 46671500109bSMat Martineau default: 46681500109bSMat Martineau /* Move was not in expected state, free the channel */ 46691500109bSMat Martineau __release_logical_link(chan); 46701500109bSMat Martineau 46711500109bSMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 46721500109bSMat Martineau } 46731500109bSMat Martineau } 46741500109bSMat Martineau 46751500109bSMat Martineau /* Call with chan locked */ 467627695fb4SAndrei Emeltchenko void l2cap_logical_cfm(struct l2cap_chan *chan, struct hci_chan *hchan, 46775b155ef9SMat Martineau u8 status) 46785b155ef9SMat Martineau { 46791500109bSMat Martineau BT_DBG("chan %p, hchan %p, status %d", chan, hchan, status); 46801500109bSMat Martineau 46811500109bSMat Martineau if (status) { 46821500109bSMat Martineau l2cap_logical_fail(chan); 46831500109bSMat Martineau __release_logical_link(chan); 46845b155ef9SMat Martineau return; 46855b155ef9SMat Martineau } 46865b155ef9SMat Martineau 46871500109bSMat Martineau if (chan->state != BT_CONNECTED) { 46881500109bSMat Martineau /* Ignore logical link if channel is on BR/EDR */ 46896ed971caSMarcel Holtmann if (chan->local_amp_id != AMP_ID_BREDR) 46901500109bSMat Martineau l2cap_logical_finish_create(chan, hchan); 46911500109bSMat Martineau } else { 46921500109bSMat Martineau l2cap_logical_finish_move(chan, hchan); 46931500109bSMat Martineau } 46941500109bSMat Martineau } 46951500109bSMat Martineau 46963f7a56c4SMat Martineau void l2cap_move_start(struct l2cap_chan *chan) 46973f7a56c4SMat Martineau { 46983f7a56c4SMat Martineau BT_DBG("chan %p", chan); 46993f7a56c4SMat Martineau 47006ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR) { 47013f7a56c4SMat Martineau if (chan->chan_policy != BT_CHANNEL_POLICY_AMP_PREFERRED) 47023f7a56c4SMat Martineau return; 47033f7a56c4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_INITIATOR; 47043f7a56c4SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_PREPARE; 47053f7a56c4SMat Martineau /* Placeholder - start physical link setup */ 47063f7a56c4SMat Martineau } else { 47073f7a56c4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_INITIATOR; 47083f7a56c4SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 47093f7a56c4SMat Martineau chan->move_id = 0; 47103f7a56c4SMat Martineau l2cap_move_setup(chan); 47113f7a56c4SMat Martineau l2cap_send_move_chan_req(chan, 0); 47123f7a56c4SMat Martineau } 47133f7a56c4SMat Martineau } 47143f7a56c4SMat Martineau 47158eb200bdSMat Martineau static void l2cap_do_create(struct l2cap_chan *chan, int result, 47168eb200bdSMat Martineau u8 local_amp_id, u8 remote_amp_id) 47178eb200bdSMat Martineau { 471862748ca1SAndrei Emeltchenko BT_DBG("chan %p state %s %u -> %u", chan, state_to_string(chan->state), 471962748ca1SAndrei Emeltchenko local_amp_id, remote_amp_id); 472062748ca1SAndrei Emeltchenko 472112d6cc60SAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 472212d6cc60SAndrei Emeltchenko 472362748ca1SAndrei Emeltchenko /* Outgoing channel on AMP */ 472462748ca1SAndrei Emeltchenko if (chan->state == BT_CONNECT) { 472562748ca1SAndrei Emeltchenko if (result == L2CAP_CR_SUCCESS) { 472662748ca1SAndrei Emeltchenko chan->local_amp_id = local_amp_id; 472762748ca1SAndrei Emeltchenko l2cap_send_create_chan_req(chan, remote_amp_id); 472862748ca1SAndrei Emeltchenko } else { 472962748ca1SAndrei Emeltchenko /* Revert to BR/EDR connect */ 473062748ca1SAndrei Emeltchenko l2cap_send_conn_req(chan); 473162748ca1SAndrei Emeltchenko } 473262748ca1SAndrei Emeltchenko 473362748ca1SAndrei Emeltchenko return; 473462748ca1SAndrei Emeltchenko } 473562748ca1SAndrei Emeltchenko 473662748ca1SAndrei Emeltchenko /* Incoming channel on AMP */ 473762748ca1SAndrei Emeltchenko if (__l2cap_no_conn_pending(chan)) { 47388eb200bdSMat Martineau struct l2cap_conn_rsp rsp; 47398eb200bdSMat Martineau char buf[128]; 47408eb200bdSMat Martineau rsp.scid = cpu_to_le16(chan->dcid); 47418eb200bdSMat Martineau rsp.dcid = cpu_to_le16(chan->scid); 47428eb200bdSMat Martineau 47438eb200bdSMat Martineau if (result == L2CAP_CR_SUCCESS) { 47448eb200bdSMat Martineau /* Send successful response */ 4745dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 4746dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 47478eb200bdSMat Martineau } else { 47488eb200bdSMat Martineau /* Send negative response */ 4749dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_NO_MEM); 4750dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 47518eb200bdSMat Martineau } 47528eb200bdSMat Martineau 47538eb200bdSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_CREATE_CHAN_RSP, 47548eb200bdSMat Martineau sizeof(rsp), &rsp); 47558eb200bdSMat Martineau 47568eb200bdSMat Martineau if (result == L2CAP_CR_SUCCESS) { 4757f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 47588eb200bdSMat Martineau set_bit(CONF_REQ_SENT, &chan->conf_state); 47598eb200bdSMat Martineau l2cap_send_cmd(chan->conn, l2cap_get_ident(chan->conn), 47608eb200bdSMat Martineau L2CAP_CONF_REQ, 47618eb200bdSMat Martineau l2cap_build_conf_req(chan, buf), buf); 47628eb200bdSMat Martineau chan->num_conf_req++; 47638eb200bdSMat Martineau } 47648eb200bdSMat Martineau } 47658eb200bdSMat Martineau } 47668eb200bdSMat Martineau 47678eb200bdSMat Martineau static void l2cap_do_move_initiate(struct l2cap_chan *chan, u8 local_amp_id, 47688eb200bdSMat Martineau u8 remote_amp_id) 47698eb200bdSMat Martineau { 47708eb200bdSMat Martineau l2cap_move_setup(chan); 47718eb200bdSMat Martineau chan->move_id = local_amp_id; 47728eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP; 47738eb200bdSMat Martineau 47748eb200bdSMat Martineau l2cap_send_move_chan_req(chan, remote_amp_id); 47758eb200bdSMat Martineau } 47768eb200bdSMat Martineau 47778eb200bdSMat Martineau static void l2cap_do_move_respond(struct l2cap_chan *chan, int result) 47788eb200bdSMat Martineau { 47798eb200bdSMat Martineau struct hci_chan *hchan = NULL; 47808eb200bdSMat Martineau 47818eb200bdSMat Martineau /* Placeholder - get hci_chan for logical link */ 47828eb200bdSMat Martineau 47838eb200bdSMat Martineau if (hchan) { 47848eb200bdSMat Martineau if (hchan->state == BT_CONNECTED) { 47858eb200bdSMat Martineau /* Logical link is ready to go */ 47868eb200bdSMat Martineau chan->hs_hcon = hchan->conn; 47878eb200bdSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 47888eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 47898eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_SUCCESS); 47908eb200bdSMat Martineau 47918eb200bdSMat Martineau l2cap_logical_cfm(chan, hchan, L2CAP_MR_SUCCESS); 47928eb200bdSMat Martineau } else { 47938eb200bdSMat Martineau /* Wait for logical link to be ready */ 47948eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 47958eb200bdSMat Martineau } 47968eb200bdSMat Martineau } else { 47978eb200bdSMat Martineau /* Logical link not available */ 47988eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_NOT_ALLOWED); 47998eb200bdSMat Martineau } 48008eb200bdSMat Martineau } 48018eb200bdSMat Martineau 48028eb200bdSMat Martineau static void l2cap_do_move_cancel(struct l2cap_chan *chan, int result) 48038eb200bdSMat Martineau { 48048eb200bdSMat Martineau if (chan->move_role == L2CAP_MOVE_ROLE_RESPONDER) { 48058eb200bdSMat Martineau u8 rsp_result; 48068eb200bdSMat Martineau if (result == -EINVAL) 48078eb200bdSMat Martineau rsp_result = L2CAP_MR_BAD_ID; 48088eb200bdSMat Martineau else 48098eb200bdSMat Martineau rsp_result = L2CAP_MR_NOT_ALLOWED; 48108eb200bdSMat Martineau 48118eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, rsp_result); 48128eb200bdSMat Martineau } 48138eb200bdSMat Martineau 48148eb200bdSMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 48158eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 48168eb200bdSMat Martineau 48178eb200bdSMat Martineau /* Restart data transmission */ 48188eb200bdSMat Martineau l2cap_ertm_send(chan); 48198eb200bdSMat Martineau } 48208eb200bdSMat Martineau 4821a514b17fSAndrei Emeltchenko /* Invoke with locked chan */ 4822a514b17fSAndrei Emeltchenko void __l2cap_physical_cfm(struct l2cap_chan *chan, int result) 48238eb200bdSMat Martineau { 4824770bfefaSAndrei Emeltchenko u8 local_amp_id = chan->local_amp_id; 4825fffadc08SAndrei Emeltchenko u8 remote_amp_id = chan->remote_amp_id; 4826770bfefaSAndrei Emeltchenko 48278eb200bdSMat Martineau BT_DBG("chan %p, result %d, local_amp_id %d, remote_amp_id %d", 48288eb200bdSMat Martineau chan, result, local_amp_id, remote_amp_id); 48298eb200bdSMat Martineau 48308eb200bdSMat Martineau if (chan->state == BT_DISCONN || chan->state == BT_CLOSED) { 48318eb200bdSMat Martineau l2cap_chan_unlock(chan); 48328eb200bdSMat Martineau return; 48338eb200bdSMat Martineau } 48348eb200bdSMat Martineau 48358eb200bdSMat Martineau if (chan->state != BT_CONNECTED) { 48368eb200bdSMat Martineau l2cap_do_create(chan, result, local_amp_id, remote_amp_id); 48378eb200bdSMat Martineau } else if (result != L2CAP_MR_SUCCESS) { 48388eb200bdSMat Martineau l2cap_do_move_cancel(chan, result); 48398eb200bdSMat Martineau } else { 48408eb200bdSMat Martineau switch (chan->move_role) { 48418eb200bdSMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 48428eb200bdSMat Martineau l2cap_do_move_initiate(chan, local_amp_id, 48438eb200bdSMat Martineau remote_amp_id); 48448eb200bdSMat Martineau break; 48458eb200bdSMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 48468eb200bdSMat Martineau l2cap_do_move_respond(chan, result); 48478eb200bdSMat Martineau break; 48488eb200bdSMat Martineau default: 48498eb200bdSMat Martineau l2cap_do_move_cancel(chan, result); 48508eb200bdSMat Martineau break; 48518eb200bdSMat Martineau } 48528eb200bdSMat Martineau } 48538eb200bdSMat Martineau } 48548eb200bdSMat Martineau 48558d5a04a1SMat Martineau static inline int l2cap_move_channel_req(struct l2cap_conn *conn, 4856ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 4857ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 48588d5a04a1SMat Martineau { 48598d5a04a1SMat Martineau struct l2cap_move_chan_req *req = data; 48601500109bSMat Martineau struct l2cap_move_chan_rsp rsp; 486102b0fbb9SMat Martineau struct l2cap_chan *chan; 48628d5a04a1SMat Martineau u16 icid = 0; 48638d5a04a1SMat Martineau u16 result = L2CAP_MR_NOT_ALLOWED; 48648d5a04a1SMat Martineau 48658d5a04a1SMat Martineau if (cmd_len != sizeof(*req)) 48668d5a04a1SMat Martineau return -EPROTO; 48678d5a04a1SMat Martineau 48688d5a04a1SMat Martineau icid = le16_to_cpu(req->icid); 48698d5a04a1SMat Martineau 4870ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, dest_amp_id %d", icid, req->dest_amp_id); 48718d5a04a1SMat Martineau 4872*0bd49fc7SJohan Hedberg if (!(conn->local_fixed_chan & L2CAP_FC_A2MP)) 48738d5a04a1SMat Martineau return -EINVAL; 48748d5a04a1SMat Martineau 487502b0fbb9SMat Martineau chan = l2cap_get_chan_by_dcid(conn, icid); 487602b0fbb9SMat Martineau if (!chan) { 48771500109bSMat Martineau rsp.icid = cpu_to_le16(icid); 4878dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_MR_NOT_ALLOWED); 48791500109bSMat Martineau l2cap_send_cmd(conn, cmd->ident, L2CAP_MOVE_CHAN_RSP, 48801500109bSMat Martineau sizeof(rsp), &rsp); 488102b0fbb9SMat Martineau return 0; 488202b0fbb9SMat Martineau } 488302b0fbb9SMat Martineau 48841500109bSMat Martineau chan->ident = cmd->ident; 48851500109bSMat Martineau 488602b0fbb9SMat Martineau if (chan->scid < L2CAP_CID_DYN_START || 488702b0fbb9SMat Martineau chan->chan_policy == BT_CHANNEL_POLICY_BREDR_ONLY || 488802b0fbb9SMat Martineau (chan->mode != L2CAP_MODE_ERTM && 488902b0fbb9SMat Martineau chan->mode != L2CAP_MODE_STREAMING)) { 489002b0fbb9SMat Martineau result = L2CAP_MR_NOT_ALLOWED; 489102b0fbb9SMat Martineau goto send_move_response; 489202b0fbb9SMat Martineau } 489302b0fbb9SMat Martineau 489402b0fbb9SMat Martineau if (chan->local_amp_id == req->dest_amp_id) { 489502b0fbb9SMat Martineau result = L2CAP_MR_SAME_ID; 489602b0fbb9SMat Martineau goto send_move_response; 489702b0fbb9SMat Martineau } 489802b0fbb9SMat Martineau 48996ed971caSMarcel Holtmann if (req->dest_amp_id != AMP_ID_BREDR) { 490002b0fbb9SMat Martineau struct hci_dev *hdev; 490102b0fbb9SMat Martineau hdev = hci_dev_get(req->dest_amp_id); 490202b0fbb9SMat Martineau if (!hdev || hdev->dev_type != HCI_AMP || 490302b0fbb9SMat Martineau !test_bit(HCI_UP, &hdev->flags)) { 490402b0fbb9SMat Martineau if (hdev) 490502b0fbb9SMat Martineau hci_dev_put(hdev); 490602b0fbb9SMat Martineau 490702b0fbb9SMat Martineau result = L2CAP_MR_BAD_ID; 490802b0fbb9SMat Martineau goto send_move_response; 490902b0fbb9SMat Martineau } 491002b0fbb9SMat Martineau hci_dev_put(hdev); 491102b0fbb9SMat Martineau } 491202b0fbb9SMat Martineau 491302b0fbb9SMat Martineau /* Detect a move collision. Only send a collision response 491402b0fbb9SMat Martineau * if this side has "lost", otherwise proceed with the move. 491502b0fbb9SMat Martineau * The winner has the larger bd_addr. 491602b0fbb9SMat Martineau */ 491702b0fbb9SMat Martineau if ((__chan_is_moving(chan) || 491802b0fbb9SMat Martineau chan->move_role != L2CAP_MOVE_ROLE_NONE) && 49196f59b904SMarcel Holtmann bacmp(&conn->hcon->src, &conn->hcon->dst) > 0) { 492002b0fbb9SMat Martineau result = L2CAP_MR_COLLISION; 492102b0fbb9SMat Martineau goto send_move_response; 492202b0fbb9SMat Martineau } 492302b0fbb9SMat Martineau 492402b0fbb9SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_RESPONDER; 492502b0fbb9SMat Martineau l2cap_move_setup(chan); 492602b0fbb9SMat Martineau chan->move_id = req->dest_amp_id; 492702b0fbb9SMat Martineau icid = chan->dcid; 492802b0fbb9SMat Martineau 49296ed971caSMarcel Holtmann if (req->dest_amp_id == AMP_ID_BREDR) { 493002b0fbb9SMat Martineau /* Moving to BR/EDR */ 493102b0fbb9SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 493202b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 493302b0fbb9SMat Martineau result = L2CAP_MR_PEND; 493402b0fbb9SMat Martineau } else { 493502b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 493602b0fbb9SMat Martineau result = L2CAP_MR_SUCCESS; 493702b0fbb9SMat Martineau } 493802b0fbb9SMat Martineau } else { 493902b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_PREPARE; 494002b0fbb9SMat Martineau /* Placeholder - uncomment when amp functions are available */ 494102b0fbb9SMat Martineau /*amp_accept_physical(chan, req->dest_amp_id);*/ 494202b0fbb9SMat Martineau result = L2CAP_MR_PEND; 494302b0fbb9SMat Martineau } 494402b0fbb9SMat Martineau 494502b0fbb9SMat Martineau send_move_response: 49461500109bSMat Martineau l2cap_send_move_chan_rsp(chan, result); 49478d5a04a1SMat Martineau 494802b0fbb9SMat Martineau l2cap_chan_unlock(chan); 494902b0fbb9SMat Martineau 49508d5a04a1SMat Martineau return 0; 49518d5a04a1SMat Martineau } 49528d5a04a1SMat Martineau 49535b155ef9SMat Martineau static void l2cap_move_continue(struct l2cap_conn *conn, u16 icid, u16 result) 49545b155ef9SMat Martineau { 49555b155ef9SMat Martineau struct l2cap_chan *chan; 49565b155ef9SMat Martineau struct hci_chan *hchan = NULL; 49575b155ef9SMat Martineau 49585b155ef9SMat Martineau chan = l2cap_get_chan_by_scid(conn, icid); 49595b155ef9SMat Martineau if (!chan) { 49605b155ef9SMat Martineau l2cap_send_move_chan_cfm_icid(conn, icid); 49615b155ef9SMat Martineau return; 49625b155ef9SMat Martineau } 49635b155ef9SMat Martineau 49645b155ef9SMat Martineau __clear_chan_timer(chan); 49655b155ef9SMat Martineau if (result == L2CAP_MR_PEND) 49665b155ef9SMat Martineau __set_chan_timer(chan, L2CAP_MOVE_ERTX_TIMEOUT); 49675b155ef9SMat Martineau 49685b155ef9SMat Martineau switch (chan->move_state) { 49695b155ef9SMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_COMP: 49705b155ef9SMat Martineau /* Move confirm will be sent when logical link 49715b155ef9SMat Martineau * is complete. 49725b155ef9SMat Martineau */ 49735b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 49745b155ef9SMat Martineau break; 49755b155ef9SMat Martineau case L2CAP_MOVE_WAIT_RSP_SUCCESS: 49765b155ef9SMat Martineau if (result == L2CAP_MR_PEND) { 49775b155ef9SMat Martineau break; 49785b155ef9SMat Martineau } else if (test_bit(CONN_LOCAL_BUSY, 49795b155ef9SMat Martineau &chan->conn_state)) { 49805b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 49815b155ef9SMat Martineau } else { 49825b155ef9SMat Martineau /* Logical link is up or moving to BR/EDR, 49835b155ef9SMat Martineau * proceed with move 49845b155ef9SMat Martineau */ 49855b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM_RSP; 49865b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 49875b155ef9SMat Martineau } 49885b155ef9SMat Martineau break; 49895b155ef9SMat Martineau case L2CAP_MOVE_WAIT_RSP: 49905b155ef9SMat Martineau /* Moving to AMP */ 49915b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS) { 49925b155ef9SMat Martineau /* Remote is ready, send confirm immediately 49935b155ef9SMat Martineau * after logical link is ready 49945b155ef9SMat Martineau */ 49955b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 49965b155ef9SMat Martineau } else { 49975b155ef9SMat Martineau /* Both logical link and move success 49985b155ef9SMat Martineau * are required to confirm 49995b155ef9SMat Martineau */ 50005b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_COMP; 50015b155ef9SMat Martineau } 50025b155ef9SMat Martineau 50035b155ef9SMat Martineau /* Placeholder - get hci_chan for logical link */ 50045b155ef9SMat Martineau if (!hchan) { 50055b155ef9SMat Martineau /* Logical link not available */ 50065b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 50075b155ef9SMat Martineau break; 50085b155ef9SMat Martineau } 50095b155ef9SMat Martineau 50105b155ef9SMat Martineau /* If the logical link is not yet connected, do not 50115b155ef9SMat Martineau * send confirmation. 50125b155ef9SMat Martineau */ 50135b155ef9SMat Martineau if (hchan->state != BT_CONNECTED) 50145b155ef9SMat Martineau break; 50155b155ef9SMat Martineau 50165b155ef9SMat Martineau /* Logical link is already ready to go */ 50175b155ef9SMat Martineau 50185b155ef9SMat Martineau chan->hs_hcon = hchan->conn; 50195b155ef9SMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 50205b155ef9SMat Martineau 50215b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS) { 50225b155ef9SMat Martineau /* Can confirm now */ 50235b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 50245b155ef9SMat Martineau } else { 50255b155ef9SMat Martineau /* Now only need move success 50265b155ef9SMat Martineau * to confirm 50275b155ef9SMat Martineau */ 50285b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 50295b155ef9SMat Martineau } 50305b155ef9SMat Martineau 50315b155ef9SMat Martineau l2cap_logical_cfm(chan, hchan, L2CAP_MR_SUCCESS); 50325b155ef9SMat Martineau break; 50335b155ef9SMat Martineau default: 50345b155ef9SMat Martineau /* Any other amp move state means the move failed. */ 50355b155ef9SMat Martineau chan->move_id = chan->local_amp_id; 50365b155ef9SMat Martineau l2cap_move_done(chan); 50375b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 50385b155ef9SMat Martineau } 50395b155ef9SMat Martineau 50405b155ef9SMat Martineau l2cap_chan_unlock(chan); 50415b155ef9SMat Martineau } 50425b155ef9SMat Martineau 50435b155ef9SMat Martineau static void l2cap_move_fail(struct l2cap_conn *conn, u8 ident, u16 icid, 50445b155ef9SMat Martineau u16 result) 50455b155ef9SMat Martineau { 50465b155ef9SMat Martineau struct l2cap_chan *chan; 50475b155ef9SMat Martineau 50485b155ef9SMat Martineau chan = l2cap_get_chan_by_ident(conn, ident); 50495b155ef9SMat Martineau if (!chan) { 50505b155ef9SMat Martineau /* Could not locate channel, icid is best guess */ 50515b155ef9SMat Martineau l2cap_send_move_chan_cfm_icid(conn, icid); 50525b155ef9SMat Martineau return; 50535b155ef9SMat Martineau } 50545b155ef9SMat Martineau 50555b155ef9SMat Martineau __clear_chan_timer(chan); 50565b155ef9SMat Martineau 50575b155ef9SMat Martineau if (chan->move_role == L2CAP_MOVE_ROLE_INITIATOR) { 50585b155ef9SMat Martineau if (result == L2CAP_MR_COLLISION) { 50595b155ef9SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_RESPONDER; 50605b155ef9SMat Martineau } else { 50615b155ef9SMat Martineau /* Cleanup - cancel move */ 50625b155ef9SMat Martineau chan->move_id = chan->local_amp_id; 50635b155ef9SMat Martineau l2cap_move_done(chan); 50645b155ef9SMat Martineau } 50655b155ef9SMat Martineau } 50665b155ef9SMat Martineau 50675b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 50685b155ef9SMat Martineau 50695b155ef9SMat Martineau l2cap_chan_unlock(chan); 50705b155ef9SMat Martineau } 50715b155ef9SMat Martineau 50725b155ef9SMat Martineau static int l2cap_move_channel_rsp(struct l2cap_conn *conn, 5073ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5074ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 50758d5a04a1SMat Martineau { 50768d5a04a1SMat Martineau struct l2cap_move_chan_rsp *rsp = data; 50778d5a04a1SMat Martineau u16 icid, result; 50788d5a04a1SMat Martineau 50798d5a04a1SMat Martineau if (cmd_len != sizeof(*rsp)) 50808d5a04a1SMat Martineau return -EPROTO; 50818d5a04a1SMat Martineau 50828d5a04a1SMat Martineau icid = le16_to_cpu(rsp->icid); 50838d5a04a1SMat Martineau result = le16_to_cpu(rsp->result); 50848d5a04a1SMat Martineau 5085ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, result 0x%4.4x", icid, result); 50868d5a04a1SMat Martineau 50875b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS || result == L2CAP_MR_PEND) 50885b155ef9SMat Martineau l2cap_move_continue(conn, icid, result); 50895b155ef9SMat Martineau else 50905b155ef9SMat Martineau l2cap_move_fail(conn, cmd->ident, icid, result); 50918d5a04a1SMat Martineau 50928d5a04a1SMat Martineau return 0; 50938d5a04a1SMat Martineau } 50948d5a04a1SMat Martineau 50955f3847a4SMat Martineau static int l2cap_move_channel_confirm(struct l2cap_conn *conn, 5096ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5097ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 50988d5a04a1SMat Martineau { 50998d5a04a1SMat Martineau struct l2cap_move_chan_cfm *cfm = data; 51005f3847a4SMat Martineau struct l2cap_chan *chan; 51018d5a04a1SMat Martineau u16 icid, result; 51028d5a04a1SMat Martineau 51038d5a04a1SMat Martineau if (cmd_len != sizeof(*cfm)) 51048d5a04a1SMat Martineau return -EPROTO; 51058d5a04a1SMat Martineau 51068d5a04a1SMat Martineau icid = le16_to_cpu(cfm->icid); 51078d5a04a1SMat Martineau result = le16_to_cpu(cfm->result); 51088d5a04a1SMat Martineau 5109ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, result 0x%4.4x", icid, result); 51108d5a04a1SMat Martineau 51115f3847a4SMat Martineau chan = l2cap_get_chan_by_dcid(conn, icid); 51125f3847a4SMat Martineau if (!chan) { 51135f3847a4SMat Martineau /* Spec requires a response even if the icid was not found */ 51148d5a04a1SMat Martineau l2cap_send_move_chan_cfm_rsp(conn, cmd->ident, icid); 51155f3847a4SMat Martineau return 0; 51165f3847a4SMat Martineau } 51175f3847a4SMat Martineau 51185f3847a4SMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_CONFIRM) { 51195f3847a4SMat Martineau if (result == L2CAP_MC_CONFIRMED) { 51205f3847a4SMat Martineau chan->local_amp_id = chan->move_id; 51216ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR) 51225f3847a4SMat Martineau __release_logical_link(chan); 51235f3847a4SMat Martineau } else { 51245f3847a4SMat Martineau chan->move_id = chan->local_amp_id; 51255f3847a4SMat Martineau } 51265f3847a4SMat Martineau 51275f3847a4SMat Martineau l2cap_move_done(chan); 51285f3847a4SMat Martineau } 51295f3847a4SMat Martineau 51305f3847a4SMat Martineau l2cap_send_move_chan_cfm_rsp(conn, cmd->ident, icid); 51315f3847a4SMat Martineau 51325f3847a4SMat Martineau l2cap_chan_unlock(chan); 51338d5a04a1SMat Martineau 51348d5a04a1SMat Martineau return 0; 51358d5a04a1SMat Martineau } 51368d5a04a1SMat Martineau 51378d5a04a1SMat Martineau static inline int l2cap_move_channel_confirm_rsp(struct l2cap_conn *conn, 5138ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5139ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 51408d5a04a1SMat Martineau { 51418d5a04a1SMat Martineau struct l2cap_move_chan_cfm_rsp *rsp = data; 51423fd71a0aSMat Martineau struct l2cap_chan *chan; 51438d5a04a1SMat Martineau u16 icid; 51448d5a04a1SMat Martineau 51458d5a04a1SMat Martineau if (cmd_len != sizeof(*rsp)) 51468d5a04a1SMat Martineau return -EPROTO; 51478d5a04a1SMat Martineau 51488d5a04a1SMat Martineau icid = le16_to_cpu(rsp->icid); 51498d5a04a1SMat Martineau 5150ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x", icid); 51518d5a04a1SMat Martineau 51523fd71a0aSMat Martineau chan = l2cap_get_chan_by_scid(conn, icid); 51533fd71a0aSMat Martineau if (!chan) 51543fd71a0aSMat Martineau return 0; 51553fd71a0aSMat Martineau 51563fd71a0aSMat Martineau __clear_chan_timer(chan); 51573fd71a0aSMat Martineau 51583fd71a0aSMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_CONFIRM_RSP) { 51593fd71a0aSMat Martineau chan->local_amp_id = chan->move_id; 51603fd71a0aSMat Martineau 51616ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR && chan->hs_hchan) 51623fd71a0aSMat Martineau __release_logical_link(chan); 51633fd71a0aSMat Martineau 51643fd71a0aSMat Martineau l2cap_move_done(chan); 51653fd71a0aSMat Martineau } 51663fd71a0aSMat Martineau 51673fd71a0aSMat Martineau l2cap_chan_unlock(chan); 51683fd71a0aSMat Martineau 51698d5a04a1SMat Martineau return 0; 51708d5a04a1SMat Martineau } 51718d5a04a1SMat Martineau 5172de73115aSClaudio Takahasi static inline int l2cap_conn_param_update_req(struct l2cap_conn *conn, 51732d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, 5174203e639eSJohan Hedberg u16 cmd_len, u8 *data) 5175de73115aSClaudio Takahasi { 5176de73115aSClaudio Takahasi struct hci_conn *hcon = conn->hcon; 5177de73115aSClaudio Takahasi struct l2cap_conn_param_update_req *req; 5178de73115aSClaudio Takahasi struct l2cap_conn_param_update_rsp rsp; 5179203e639eSJohan Hedberg u16 min, max, latency, to_multiplier; 51802ce603ebSClaudio Takahasi int err; 5181de73115aSClaudio Takahasi 518240bef302SJohan Hedberg if (hcon->role != HCI_ROLE_MASTER) 5183de73115aSClaudio Takahasi return -EINVAL; 5184de73115aSClaudio Takahasi 5185de73115aSClaudio Takahasi if (cmd_len != sizeof(struct l2cap_conn_param_update_req)) 5186de73115aSClaudio Takahasi return -EPROTO; 5187de73115aSClaudio Takahasi 5188de73115aSClaudio Takahasi req = (struct l2cap_conn_param_update_req *) data; 5189de73115aSClaudio Takahasi min = __le16_to_cpu(req->min); 5190de73115aSClaudio Takahasi max = __le16_to_cpu(req->max); 5191de73115aSClaudio Takahasi latency = __le16_to_cpu(req->latency); 5192de73115aSClaudio Takahasi to_multiplier = __le16_to_cpu(req->to_multiplier); 5193de73115aSClaudio Takahasi 5194de73115aSClaudio Takahasi BT_DBG("min 0x%4.4x max 0x%4.4x latency: 0x%4.4x Timeout: 0x%4.4x", 5195de73115aSClaudio Takahasi min, max, latency, to_multiplier); 5196de73115aSClaudio Takahasi 5197de73115aSClaudio Takahasi memset(&rsp, 0, sizeof(rsp)); 51982ce603ebSClaudio Takahasi 5199d4905f24SAndre Guedes err = hci_check_conn_params(min, max, latency, to_multiplier); 52002ce603ebSClaudio Takahasi if (err) 5201dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CONN_PARAM_REJECTED); 5202de73115aSClaudio Takahasi else 5203dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CONN_PARAM_ACCEPTED); 5204de73115aSClaudio Takahasi 5205de73115aSClaudio Takahasi l2cap_send_cmd(conn, cmd->ident, L2CAP_CONN_PARAM_UPDATE_RSP, 5206de73115aSClaudio Takahasi sizeof(rsp), &rsp); 5207de73115aSClaudio Takahasi 5208ffb5a827SAndre Guedes if (!err) { 5209f4869e2aSJohan Hedberg u8 store_hint; 5210ffb5a827SAndre Guedes 5211f4869e2aSJohan Hedberg store_hint = hci_le_conn_update(hcon, min, max, latency, 5212f4869e2aSJohan Hedberg to_multiplier); 5213f4869e2aSJohan Hedberg mgmt_new_conn_param(hcon->hdev, &hcon->dst, hcon->dst_type, 5214f4869e2aSJohan Hedberg store_hint, min, max, latency, 5215f4869e2aSJohan Hedberg to_multiplier); 5216f4869e2aSJohan Hedberg 5217ffb5a827SAndre Guedes } 52182ce603ebSClaudio Takahasi 5219de73115aSClaudio Takahasi return 0; 5220de73115aSClaudio Takahasi } 5221de73115aSClaudio Takahasi 5222f1496deeSJohan Hedberg static int l2cap_le_connect_rsp(struct l2cap_conn *conn, 5223f1496deeSJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 5224f1496deeSJohan Hedberg u8 *data) 5225f1496deeSJohan Hedberg { 5226f1496deeSJohan Hedberg struct l2cap_le_conn_rsp *rsp = (struct l2cap_le_conn_rsp *) data; 52273e64b7bdSJohan Hedberg struct hci_conn *hcon = conn->hcon; 5228f1496deeSJohan Hedberg u16 dcid, mtu, mps, credits, result; 5229f1496deeSJohan Hedberg struct l2cap_chan *chan; 52303e64b7bdSJohan Hedberg int err, sec_level; 5231f1496deeSJohan Hedberg 5232f1496deeSJohan Hedberg if (cmd_len < sizeof(*rsp)) 5233f1496deeSJohan Hedberg return -EPROTO; 5234f1496deeSJohan Hedberg 5235f1496deeSJohan Hedberg dcid = __le16_to_cpu(rsp->dcid); 5236f1496deeSJohan Hedberg mtu = __le16_to_cpu(rsp->mtu); 5237f1496deeSJohan Hedberg mps = __le16_to_cpu(rsp->mps); 5238f1496deeSJohan Hedberg credits = __le16_to_cpu(rsp->credits); 5239f1496deeSJohan Hedberg result = __le16_to_cpu(rsp->result); 5240f1496deeSJohan Hedberg 5241f1496deeSJohan Hedberg if (result == L2CAP_CR_SUCCESS && (mtu < 23 || mps < 23)) 5242f1496deeSJohan Hedberg return -EPROTO; 5243f1496deeSJohan Hedberg 5244f1496deeSJohan Hedberg BT_DBG("dcid 0x%4.4x mtu %u mps %u credits %u result 0x%2.2x", 5245f1496deeSJohan Hedberg dcid, mtu, mps, credits, result); 5246f1496deeSJohan Hedberg 5247f1496deeSJohan Hedberg mutex_lock(&conn->chan_lock); 5248f1496deeSJohan Hedberg 5249f1496deeSJohan Hedberg chan = __l2cap_get_chan_by_ident(conn, cmd->ident); 5250f1496deeSJohan Hedberg if (!chan) { 5251f1496deeSJohan Hedberg err = -EBADSLT; 5252f1496deeSJohan Hedberg goto unlock; 5253f1496deeSJohan Hedberg } 5254f1496deeSJohan Hedberg 5255f1496deeSJohan Hedberg err = 0; 5256f1496deeSJohan Hedberg 5257f1496deeSJohan Hedberg l2cap_chan_lock(chan); 5258f1496deeSJohan Hedberg 5259f1496deeSJohan Hedberg switch (result) { 5260f1496deeSJohan Hedberg case L2CAP_CR_SUCCESS: 5261f1496deeSJohan Hedberg chan->ident = 0; 5262f1496deeSJohan Hedberg chan->dcid = dcid; 5263f1496deeSJohan Hedberg chan->omtu = mtu; 5264f1496deeSJohan Hedberg chan->remote_mps = mps; 52650cd75f7eSJohan Hedberg chan->tx_credits = credits; 5266f1496deeSJohan Hedberg l2cap_chan_ready(chan); 5267f1496deeSJohan Hedberg break; 5268f1496deeSJohan Hedberg 52693e64b7bdSJohan Hedberg case L2CAP_CR_AUTHENTICATION: 52703e64b7bdSJohan Hedberg case L2CAP_CR_ENCRYPTION: 52713e64b7bdSJohan Hedberg /* If we already have MITM protection we can't do 52723e64b7bdSJohan Hedberg * anything. 52733e64b7bdSJohan Hedberg */ 52743e64b7bdSJohan Hedberg if (hcon->sec_level > BT_SECURITY_MEDIUM) { 52753e64b7bdSJohan Hedberg l2cap_chan_del(chan, ECONNREFUSED); 52763e64b7bdSJohan Hedberg break; 52773e64b7bdSJohan Hedberg } 52783e64b7bdSJohan Hedberg 52793e64b7bdSJohan Hedberg sec_level = hcon->sec_level + 1; 52803e64b7bdSJohan Hedberg if (chan->sec_level < sec_level) 52813e64b7bdSJohan Hedberg chan->sec_level = sec_level; 52823e64b7bdSJohan Hedberg 52833e64b7bdSJohan Hedberg /* We'll need to send a new Connect Request */ 52843e64b7bdSJohan Hedberg clear_bit(FLAG_LE_CONN_REQ_SENT, &chan->flags); 52853e64b7bdSJohan Hedberg 52863e64b7bdSJohan Hedberg smp_conn_security(hcon, chan->sec_level); 52873e64b7bdSJohan Hedberg break; 52883e64b7bdSJohan Hedberg 5289f1496deeSJohan Hedberg default: 5290f1496deeSJohan Hedberg l2cap_chan_del(chan, ECONNREFUSED); 5291f1496deeSJohan Hedberg break; 5292f1496deeSJohan Hedberg } 5293f1496deeSJohan Hedberg 5294f1496deeSJohan Hedberg l2cap_chan_unlock(chan); 5295f1496deeSJohan Hedberg 5296f1496deeSJohan Hedberg unlock: 5297f1496deeSJohan Hedberg mutex_unlock(&conn->chan_lock); 5298f1496deeSJohan Hedberg 5299f1496deeSJohan Hedberg return err; 5300f1496deeSJohan Hedberg } 5301f1496deeSJohan Hedberg 53023300d9a9SClaudio Takahasi static inline int l2cap_bredr_sig_cmd(struct l2cap_conn *conn, 53032d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, u16 cmd_len, 53042d792818SGustavo Padovan u8 *data) 53053300d9a9SClaudio Takahasi { 53063300d9a9SClaudio Takahasi int err = 0; 53073300d9a9SClaudio Takahasi 53083300d9a9SClaudio Takahasi switch (cmd->code) { 53093300d9a9SClaudio Takahasi case L2CAP_COMMAND_REJ: 5310cb3b3152SJohan Hedberg l2cap_command_rej(conn, cmd, cmd_len, data); 53113300d9a9SClaudio Takahasi break; 53123300d9a9SClaudio Takahasi 53133300d9a9SClaudio Takahasi case L2CAP_CONN_REQ: 5314cb3b3152SJohan Hedberg err = l2cap_connect_req(conn, cmd, cmd_len, data); 53153300d9a9SClaudio Takahasi break; 53163300d9a9SClaudio Takahasi 53173300d9a9SClaudio Takahasi case L2CAP_CONN_RSP: 5318f5a2598dSMat Martineau case L2CAP_CREATE_CHAN_RSP: 53199245e737SJohan Hedberg l2cap_connect_create_rsp(conn, cmd, cmd_len, data); 53203300d9a9SClaudio Takahasi break; 53213300d9a9SClaudio Takahasi 53223300d9a9SClaudio Takahasi case L2CAP_CONF_REQ: 53233300d9a9SClaudio Takahasi err = l2cap_config_req(conn, cmd, cmd_len, data); 53243300d9a9SClaudio Takahasi break; 53253300d9a9SClaudio Takahasi 53263300d9a9SClaudio Takahasi case L2CAP_CONF_RSP: 53279245e737SJohan Hedberg l2cap_config_rsp(conn, cmd, cmd_len, data); 53283300d9a9SClaudio Takahasi break; 53293300d9a9SClaudio Takahasi 53303300d9a9SClaudio Takahasi case L2CAP_DISCONN_REQ: 5331cb3b3152SJohan Hedberg err = l2cap_disconnect_req(conn, cmd, cmd_len, data); 53323300d9a9SClaudio Takahasi break; 53333300d9a9SClaudio Takahasi 53343300d9a9SClaudio Takahasi case L2CAP_DISCONN_RSP: 53359245e737SJohan Hedberg l2cap_disconnect_rsp(conn, cmd, cmd_len, data); 53363300d9a9SClaudio Takahasi break; 53373300d9a9SClaudio Takahasi 53383300d9a9SClaudio Takahasi case L2CAP_ECHO_REQ: 53393300d9a9SClaudio Takahasi l2cap_send_cmd(conn, cmd->ident, L2CAP_ECHO_RSP, cmd_len, data); 53403300d9a9SClaudio Takahasi break; 53413300d9a9SClaudio Takahasi 53423300d9a9SClaudio Takahasi case L2CAP_ECHO_RSP: 53433300d9a9SClaudio Takahasi break; 53443300d9a9SClaudio Takahasi 53453300d9a9SClaudio Takahasi case L2CAP_INFO_REQ: 5346cb3b3152SJohan Hedberg err = l2cap_information_req(conn, cmd, cmd_len, data); 53473300d9a9SClaudio Takahasi break; 53483300d9a9SClaudio Takahasi 53493300d9a9SClaudio Takahasi case L2CAP_INFO_RSP: 53509245e737SJohan Hedberg l2cap_information_rsp(conn, cmd, cmd_len, data); 53513300d9a9SClaudio Takahasi break; 53523300d9a9SClaudio Takahasi 5353f94ff6ffSMat Martineau case L2CAP_CREATE_CHAN_REQ: 5354f94ff6ffSMat Martineau err = l2cap_create_channel_req(conn, cmd, cmd_len, data); 5355f94ff6ffSMat Martineau break; 5356f94ff6ffSMat Martineau 53578d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_REQ: 53588d5a04a1SMat Martineau err = l2cap_move_channel_req(conn, cmd, cmd_len, data); 53598d5a04a1SMat Martineau break; 53608d5a04a1SMat Martineau 53618d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_RSP: 53629245e737SJohan Hedberg l2cap_move_channel_rsp(conn, cmd, cmd_len, data); 53638d5a04a1SMat Martineau break; 53648d5a04a1SMat Martineau 53658d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_CFM: 53668d5a04a1SMat Martineau err = l2cap_move_channel_confirm(conn, cmd, cmd_len, data); 53678d5a04a1SMat Martineau break; 53688d5a04a1SMat Martineau 53698d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_CFM_RSP: 53709245e737SJohan Hedberg l2cap_move_channel_confirm_rsp(conn, cmd, cmd_len, data); 53718d5a04a1SMat Martineau break; 53728d5a04a1SMat Martineau 53733300d9a9SClaudio Takahasi default: 53743300d9a9SClaudio Takahasi BT_ERR("Unknown BR/EDR signaling command 0x%2.2x", cmd->code); 53753300d9a9SClaudio Takahasi err = -EINVAL; 53763300d9a9SClaudio Takahasi break; 53773300d9a9SClaudio Takahasi } 53783300d9a9SClaudio Takahasi 53793300d9a9SClaudio Takahasi return err; 53803300d9a9SClaudio Takahasi } 53813300d9a9SClaudio Takahasi 538227e2d4c8SJohan Hedberg static int l2cap_le_connect_req(struct l2cap_conn *conn, 538327e2d4c8SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 538427e2d4c8SJohan Hedberg u8 *data) 538527e2d4c8SJohan Hedberg { 538627e2d4c8SJohan Hedberg struct l2cap_le_conn_req *req = (struct l2cap_le_conn_req *) data; 538727e2d4c8SJohan Hedberg struct l2cap_le_conn_rsp rsp; 538827e2d4c8SJohan Hedberg struct l2cap_chan *chan, *pchan; 53890cd75f7eSJohan Hedberg u16 dcid, scid, credits, mtu, mps; 539027e2d4c8SJohan Hedberg __le16 psm; 539127e2d4c8SJohan Hedberg u8 result; 539227e2d4c8SJohan Hedberg 539327e2d4c8SJohan Hedberg if (cmd_len != sizeof(*req)) 539427e2d4c8SJohan Hedberg return -EPROTO; 539527e2d4c8SJohan Hedberg 539627e2d4c8SJohan Hedberg scid = __le16_to_cpu(req->scid); 539727e2d4c8SJohan Hedberg mtu = __le16_to_cpu(req->mtu); 539827e2d4c8SJohan Hedberg mps = __le16_to_cpu(req->mps); 539927e2d4c8SJohan Hedberg psm = req->psm; 540027e2d4c8SJohan Hedberg dcid = 0; 54010cd75f7eSJohan Hedberg credits = 0; 540227e2d4c8SJohan Hedberg 540327e2d4c8SJohan Hedberg if (mtu < 23 || mps < 23) 540427e2d4c8SJohan Hedberg return -EPROTO; 540527e2d4c8SJohan Hedberg 540627e2d4c8SJohan Hedberg BT_DBG("psm 0x%2.2x scid 0x%4.4x mtu %u mps %u", __le16_to_cpu(psm), 540727e2d4c8SJohan Hedberg scid, mtu, mps); 540827e2d4c8SJohan Hedberg 540927e2d4c8SJohan Hedberg /* Check if we have socket listening on psm */ 541027e2d4c8SJohan Hedberg pchan = l2cap_global_chan_by_psm(BT_LISTEN, psm, &conn->hcon->src, 541127e2d4c8SJohan Hedberg &conn->hcon->dst, LE_LINK); 541227e2d4c8SJohan Hedberg if (!pchan) { 541327e2d4c8SJohan Hedberg result = L2CAP_CR_BAD_PSM; 541427e2d4c8SJohan Hedberg chan = NULL; 541527e2d4c8SJohan Hedberg goto response; 541627e2d4c8SJohan Hedberg } 541727e2d4c8SJohan Hedberg 541827e2d4c8SJohan Hedberg mutex_lock(&conn->chan_lock); 541927e2d4c8SJohan Hedberg l2cap_chan_lock(pchan); 542027e2d4c8SJohan Hedberg 542135dc6f83SJohan Hedberg if (!smp_sufficient_security(conn->hcon, pchan->sec_level, 542235dc6f83SJohan Hedberg SMP_ALLOW_STK)) { 542327e2d4c8SJohan Hedberg result = L2CAP_CR_AUTHENTICATION; 542427e2d4c8SJohan Hedberg chan = NULL; 542527e2d4c8SJohan Hedberg goto response_unlock; 542627e2d4c8SJohan Hedberg } 542727e2d4c8SJohan Hedberg 542827e2d4c8SJohan Hedberg /* Check if we already have channel with that dcid */ 542927e2d4c8SJohan Hedberg if (__l2cap_get_chan_by_dcid(conn, scid)) { 543027e2d4c8SJohan Hedberg result = L2CAP_CR_NO_MEM; 543127e2d4c8SJohan Hedberg chan = NULL; 543227e2d4c8SJohan Hedberg goto response_unlock; 543327e2d4c8SJohan Hedberg } 543427e2d4c8SJohan Hedberg 543527e2d4c8SJohan Hedberg chan = pchan->ops->new_connection(pchan); 543627e2d4c8SJohan Hedberg if (!chan) { 543727e2d4c8SJohan Hedberg result = L2CAP_CR_NO_MEM; 543827e2d4c8SJohan Hedberg goto response_unlock; 543927e2d4c8SJohan Hedberg } 544027e2d4c8SJohan Hedberg 54410ce43ce6SJohan Hedberg l2cap_le_flowctl_init(chan); 54420ce43ce6SJohan Hedberg 544327e2d4c8SJohan Hedberg bacpy(&chan->src, &conn->hcon->src); 544427e2d4c8SJohan Hedberg bacpy(&chan->dst, &conn->hcon->dst); 544527e2d4c8SJohan Hedberg chan->src_type = bdaddr_type(conn->hcon, conn->hcon->src_type); 544627e2d4c8SJohan Hedberg chan->dst_type = bdaddr_type(conn->hcon, conn->hcon->dst_type); 544727e2d4c8SJohan Hedberg chan->psm = psm; 544827e2d4c8SJohan Hedberg chan->dcid = scid; 544927e2d4c8SJohan Hedberg chan->omtu = mtu; 545027e2d4c8SJohan Hedberg chan->remote_mps = mps; 54510cd75f7eSJohan Hedberg chan->tx_credits = __le16_to_cpu(req->credits); 545227e2d4c8SJohan Hedberg 545327e2d4c8SJohan Hedberg __l2cap_chan_add(conn, chan); 545427e2d4c8SJohan Hedberg dcid = chan->scid; 54550cd75f7eSJohan Hedberg credits = chan->rx_credits; 545627e2d4c8SJohan Hedberg 545727e2d4c8SJohan Hedberg __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 545827e2d4c8SJohan Hedberg 545927e2d4c8SJohan Hedberg chan->ident = cmd->ident; 546027e2d4c8SJohan Hedberg 546127e2d4c8SJohan Hedberg if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 546227e2d4c8SJohan Hedberg l2cap_state_change(chan, BT_CONNECT2); 5463434714dcSJohan Hedberg /* The following result value is actually not defined 5464434714dcSJohan Hedberg * for LE CoC but we use it to let the function know 5465434714dcSJohan Hedberg * that it should bail out after doing its cleanup 5466434714dcSJohan Hedberg * instead of sending a response. 5467434714dcSJohan Hedberg */ 546827e2d4c8SJohan Hedberg result = L2CAP_CR_PEND; 546927e2d4c8SJohan Hedberg chan->ops->defer(chan); 547027e2d4c8SJohan Hedberg } else { 547127e2d4c8SJohan Hedberg l2cap_chan_ready(chan); 547227e2d4c8SJohan Hedberg result = L2CAP_CR_SUCCESS; 547327e2d4c8SJohan Hedberg } 547427e2d4c8SJohan Hedberg 547527e2d4c8SJohan Hedberg response_unlock: 547627e2d4c8SJohan Hedberg l2cap_chan_unlock(pchan); 547727e2d4c8SJohan Hedberg mutex_unlock(&conn->chan_lock); 5478a24cce14SJohan Hedberg l2cap_chan_put(pchan); 547927e2d4c8SJohan Hedberg 548027e2d4c8SJohan Hedberg if (result == L2CAP_CR_PEND) 548127e2d4c8SJohan Hedberg return 0; 548227e2d4c8SJohan Hedberg 548327e2d4c8SJohan Hedberg response: 548427e2d4c8SJohan Hedberg if (chan) { 548527e2d4c8SJohan Hedberg rsp.mtu = cpu_to_le16(chan->imtu); 54863916aed8SJohan Hedberg rsp.mps = cpu_to_le16(chan->mps); 548727e2d4c8SJohan Hedberg } else { 548827e2d4c8SJohan Hedberg rsp.mtu = 0; 548927e2d4c8SJohan Hedberg rsp.mps = 0; 549027e2d4c8SJohan Hedberg } 549127e2d4c8SJohan Hedberg 549227e2d4c8SJohan Hedberg rsp.dcid = cpu_to_le16(dcid); 54930cd75f7eSJohan Hedberg rsp.credits = cpu_to_le16(credits); 549427e2d4c8SJohan Hedberg rsp.result = cpu_to_le16(result); 549527e2d4c8SJohan Hedberg 549627e2d4c8SJohan Hedberg l2cap_send_cmd(conn, cmd->ident, L2CAP_LE_CONN_RSP, sizeof(rsp), &rsp); 549727e2d4c8SJohan Hedberg 549827e2d4c8SJohan Hedberg return 0; 549927e2d4c8SJohan Hedberg } 550027e2d4c8SJohan Hedberg 5501fad5fc89SJohan Hedberg static inline int l2cap_le_credits(struct l2cap_conn *conn, 5502fad5fc89SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 5503fad5fc89SJohan Hedberg u8 *data) 5504fad5fc89SJohan Hedberg { 5505fad5fc89SJohan Hedberg struct l2cap_le_credits *pkt; 5506fad5fc89SJohan Hedberg struct l2cap_chan *chan; 55070f1bfe4eSJohan Hedberg u16 cid, credits, max_credits; 5508fad5fc89SJohan Hedberg 5509fad5fc89SJohan Hedberg if (cmd_len != sizeof(*pkt)) 5510fad5fc89SJohan Hedberg return -EPROTO; 5511fad5fc89SJohan Hedberg 5512fad5fc89SJohan Hedberg pkt = (struct l2cap_le_credits *) data; 5513fad5fc89SJohan Hedberg cid = __le16_to_cpu(pkt->cid); 5514fad5fc89SJohan Hedberg credits = __le16_to_cpu(pkt->credits); 5515fad5fc89SJohan Hedberg 5516fad5fc89SJohan Hedberg BT_DBG("cid 0x%4.4x credits 0x%4.4x", cid, credits); 5517fad5fc89SJohan Hedberg 5518fad5fc89SJohan Hedberg chan = l2cap_get_chan_by_dcid(conn, cid); 5519fad5fc89SJohan Hedberg if (!chan) 5520fad5fc89SJohan Hedberg return -EBADSLT; 5521fad5fc89SJohan Hedberg 55220f1bfe4eSJohan Hedberg max_credits = LE_FLOWCTL_MAX_CREDITS - chan->tx_credits; 55230f1bfe4eSJohan Hedberg if (credits > max_credits) { 55240f1bfe4eSJohan Hedberg BT_ERR("LE credits overflow"); 55250f1bfe4eSJohan Hedberg l2cap_send_disconn_req(chan, ECONNRESET); 5526ee93053dSMartin Townsend l2cap_chan_unlock(chan); 55270f1bfe4eSJohan Hedberg 55280f1bfe4eSJohan Hedberg /* Return 0 so that we don't trigger an unnecessary 55290f1bfe4eSJohan Hedberg * command reject packet. 55300f1bfe4eSJohan Hedberg */ 55310f1bfe4eSJohan Hedberg return 0; 55320f1bfe4eSJohan Hedberg } 55330f1bfe4eSJohan Hedberg 5534fad5fc89SJohan Hedberg chan->tx_credits += credits; 5535fad5fc89SJohan Hedberg 5536fad5fc89SJohan Hedberg while (chan->tx_credits && !skb_queue_empty(&chan->tx_q)) { 5537fad5fc89SJohan Hedberg l2cap_do_send(chan, skb_dequeue(&chan->tx_q)); 5538fad5fc89SJohan Hedberg chan->tx_credits--; 5539fad5fc89SJohan Hedberg } 5540fad5fc89SJohan Hedberg 5541fad5fc89SJohan Hedberg if (chan->tx_credits) 5542fad5fc89SJohan Hedberg chan->ops->resume(chan); 5543fad5fc89SJohan Hedberg 5544fad5fc89SJohan Hedberg l2cap_chan_unlock(chan); 5545fad5fc89SJohan Hedberg 5546fad5fc89SJohan Hedberg return 0; 5547fad5fc89SJohan Hedberg } 5548fad5fc89SJohan Hedberg 554971fb4197SJohan Hedberg static inline int l2cap_le_command_rej(struct l2cap_conn *conn, 555071fb4197SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 555171fb4197SJohan Hedberg u8 *data) 555271fb4197SJohan Hedberg { 555371fb4197SJohan Hedberg struct l2cap_cmd_rej_unk *rej = (struct l2cap_cmd_rej_unk *) data; 555471fb4197SJohan Hedberg struct l2cap_chan *chan; 555571fb4197SJohan Hedberg 555671fb4197SJohan Hedberg if (cmd_len < sizeof(*rej)) 555771fb4197SJohan Hedberg return -EPROTO; 555871fb4197SJohan Hedberg 555971fb4197SJohan Hedberg mutex_lock(&conn->chan_lock); 556071fb4197SJohan Hedberg 556171fb4197SJohan Hedberg chan = __l2cap_get_chan_by_ident(conn, cmd->ident); 556271fb4197SJohan Hedberg if (!chan) 556371fb4197SJohan Hedberg goto done; 556471fb4197SJohan Hedberg 556571fb4197SJohan Hedberg l2cap_chan_lock(chan); 556671fb4197SJohan Hedberg l2cap_chan_del(chan, ECONNREFUSED); 556771fb4197SJohan Hedberg l2cap_chan_unlock(chan); 556871fb4197SJohan Hedberg 556971fb4197SJohan Hedberg done: 557071fb4197SJohan Hedberg mutex_unlock(&conn->chan_lock); 557171fb4197SJohan Hedberg return 0; 557271fb4197SJohan Hedberg } 557371fb4197SJohan Hedberg 55743300d9a9SClaudio Takahasi static inline int l2cap_le_sig_cmd(struct l2cap_conn *conn, 5575203e639eSJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 5576203e639eSJohan Hedberg u8 *data) 55773300d9a9SClaudio Takahasi { 5578b5ecba64SJohan Hedberg int err = 0; 5579b5ecba64SJohan Hedberg 55803300d9a9SClaudio Takahasi switch (cmd->code) { 55813300d9a9SClaudio Takahasi case L2CAP_COMMAND_REJ: 558271fb4197SJohan Hedberg l2cap_le_command_rej(conn, cmd, cmd_len, data); 5583b5ecba64SJohan Hedberg break; 55843300d9a9SClaudio Takahasi 55853300d9a9SClaudio Takahasi case L2CAP_CONN_PARAM_UPDATE_REQ: 5586b5ecba64SJohan Hedberg err = l2cap_conn_param_update_req(conn, cmd, cmd_len, data); 5587b5ecba64SJohan Hedberg break; 55883300d9a9SClaudio Takahasi 55893300d9a9SClaudio Takahasi case L2CAP_CONN_PARAM_UPDATE_RSP: 5590b5ecba64SJohan Hedberg break; 55913300d9a9SClaudio Takahasi 5592f1496deeSJohan Hedberg case L2CAP_LE_CONN_RSP: 5593f1496deeSJohan Hedberg l2cap_le_connect_rsp(conn, cmd, cmd_len, data); 5594b5ecba64SJohan Hedberg break; 5595f1496deeSJohan Hedberg 559627e2d4c8SJohan Hedberg case L2CAP_LE_CONN_REQ: 5597b5ecba64SJohan Hedberg err = l2cap_le_connect_req(conn, cmd, cmd_len, data); 5598b5ecba64SJohan Hedberg break; 559927e2d4c8SJohan Hedberg 5600fad5fc89SJohan Hedberg case L2CAP_LE_CREDITS: 5601fad5fc89SJohan Hedberg err = l2cap_le_credits(conn, cmd, cmd_len, data); 5602fad5fc89SJohan Hedberg break; 5603fad5fc89SJohan Hedberg 56043defe01aSJohan Hedberg case L2CAP_DISCONN_REQ: 5605b5ecba64SJohan Hedberg err = l2cap_disconnect_req(conn, cmd, cmd_len, data); 5606b5ecba64SJohan Hedberg break; 56073defe01aSJohan Hedberg 56083defe01aSJohan Hedberg case L2CAP_DISCONN_RSP: 56093defe01aSJohan Hedberg l2cap_disconnect_rsp(conn, cmd, cmd_len, data); 5610b5ecba64SJohan Hedberg break; 56113defe01aSJohan Hedberg 56123300d9a9SClaudio Takahasi default: 56133300d9a9SClaudio Takahasi BT_ERR("Unknown LE signaling command 0x%2.2x", cmd->code); 5614b5ecba64SJohan Hedberg err = -EINVAL; 5615b5ecba64SJohan Hedberg break; 56163300d9a9SClaudio Takahasi } 5617b5ecba64SJohan Hedberg 5618b5ecba64SJohan Hedberg return err; 56193300d9a9SClaudio Takahasi } 56203300d9a9SClaudio Takahasi 5621c5623556SJohan Hedberg static inline void l2cap_le_sig_channel(struct l2cap_conn *conn, 5622c5623556SJohan Hedberg struct sk_buff *skb) 5623c5623556SJohan Hedberg { 562469c4e4e8SJohan Hedberg struct hci_conn *hcon = conn->hcon; 56254f3e219dSMarcel Holtmann struct l2cap_cmd_hdr *cmd; 56264f3e219dSMarcel Holtmann u16 len; 5627c5623556SJohan Hedberg int err; 5628c5623556SJohan Hedberg 562969c4e4e8SJohan Hedberg if (hcon->type != LE_LINK) 56303b166295SMarcel Holtmann goto drop; 563169c4e4e8SJohan Hedberg 56324f3e219dSMarcel Holtmann if (skb->len < L2CAP_CMD_HDR_SIZE) 56334f3e219dSMarcel Holtmann goto drop; 5634c5623556SJohan Hedberg 56354f3e219dSMarcel Holtmann cmd = (void *) skb->data; 56364f3e219dSMarcel Holtmann skb_pull(skb, L2CAP_CMD_HDR_SIZE); 5637c5623556SJohan Hedberg 56384f3e219dSMarcel Holtmann len = le16_to_cpu(cmd->len); 5639c5623556SJohan Hedberg 56404f3e219dSMarcel Holtmann BT_DBG("code 0x%2.2x len %d id 0x%2.2x", cmd->code, len, cmd->ident); 56414f3e219dSMarcel Holtmann 56424f3e219dSMarcel Holtmann if (len != skb->len || !cmd->ident) { 5643c5623556SJohan Hedberg BT_DBG("corrupted command"); 56444f3e219dSMarcel Holtmann goto drop; 5645c5623556SJohan Hedberg } 5646c5623556SJohan Hedberg 5647203e639eSJohan Hedberg err = l2cap_le_sig_cmd(conn, cmd, len, skb->data); 5648c5623556SJohan Hedberg if (err) { 5649c5623556SJohan Hedberg struct l2cap_cmd_rej_unk rej; 5650c5623556SJohan Hedberg 5651c5623556SJohan Hedberg BT_ERR("Wrong link type (%d)", err); 5652c5623556SJohan Hedberg 5653dcf4adbfSJoe Perches rej.reason = cpu_to_le16(L2CAP_REJ_NOT_UNDERSTOOD); 56544f3e219dSMarcel Holtmann l2cap_send_cmd(conn, cmd->ident, L2CAP_COMMAND_REJ, 5655c5623556SJohan Hedberg sizeof(rej), &rej); 5656c5623556SJohan Hedberg } 5657c5623556SJohan Hedberg 56583b166295SMarcel Holtmann drop: 5659c5623556SJohan Hedberg kfree_skb(skb); 5660c5623556SJohan Hedberg } 5661c5623556SJohan Hedberg 56623300d9a9SClaudio Takahasi static inline void l2cap_sig_channel(struct l2cap_conn *conn, 56633300d9a9SClaudio Takahasi struct sk_buff *skb) 56640a708f8fSGustavo F. Padovan { 566569c4e4e8SJohan Hedberg struct hci_conn *hcon = conn->hcon; 56660a708f8fSGustavo F. Padovan u8 *data = skb->data; 56670a708f8fSGustavo F. Padovan int len = skb->len; 56680a708f8fSGustavo F. Padovan struct l2cap_cmd_hdr cmd; 56693300d9a9SClaudio Takahasi int err; 56700a708f8fSGustavo F. Padovan 56710a708f8fSGustavo F. Padovan l2cap_raw_recv(conn, skb); 56720a708f8fSGustavo F. Padovan 567369c4e4e8SJohan Hedberg if (hcon->type != ACL_LINK) 56743b166295SMarcel Holtmann goto drop; 567569c4e4e8SJohan Hedberg 56760a708f8fSGustavo F. Padovan while (len >= L2CAP_CMD_HDR_SIZE) { 56770a708f8fSGustavo F. Padovan u16 cmd_len; 56780a708f8fSGustavo F. Padovan memcpy(&cmd, data, L2CAP_CMD_HDR_SIZE); 56790a708f8fSGustavo F. Padovan data += L2CAP_CMD_HDR_SIZE; 56800a708f8fSGustavo F. Padovan len -= L2CAP_CMD_HDR_SIZE; 56810a708f8fSGustavo F. Padovan 56820a708f8fSGustavo F. Padovan cmd_len = le16_to_cpu(cmd.len); 56830a708f8fSGustavo F. Padovan 56842d792818SGustavo Padovan BT_DBG("code 0x%2.2x len %d id 0x%2.2x", cmd.code, cmd_len, 56852d792818SGustavo Padovan cmd.ident); 56860a708f8fSGustavo F. Padovan 56870a708f8fSGustavo F. Padovan if (cmd_len > len || !cmd.ident) { 56880a708f8fSGustavo F. Padovan BT_DBG("corrupted command"); 56890a708f8fSGustavo F. Padovan break; 56900a708f8fSGustavo F. Padovan } 56910a708f8fSGustavo F. Padovan 56923300d9a9SClaudio Takahasi err = l2cap_bredr_sig_cmd(conn, &cmd, cmd_len, data); 56930a708f8fSGustavo F. Padovan if (err) { 5694e2fd318eSIlia Kolomisnky struct l2cap_cmd_rej_unk rej; 56952c6d1a2eSGustavo F. Padovan 56962c6d1a2eSGustavo F. Padovan BT_ERR("Wrong link type (%d)", err); 56970a708f8fSGustavo F. Padovan 5698dcf4adbfSJoe Perches rej.reason = cpu_to_le16(L2CAP_REJ_NOT_UNDERSTOOD); 56992d792818SGustavo Padovan l2cap_send_cmd(conn, cmd.ident, L2CAP_COMMAND_REJ, 57002d792818SGustavo Padovan sizeof(rej), &rej); 57010a708f8fSGustavo F. Padovan } 57020a708f8fSGustavo F. Padovan 57030a708f8fSGustavo F. Padovan data += cmd_len; 57040a708f8fSGustavo F. Padovan len -= cmd_len; 57050a708f8fSGustavo F. Padovan } 57060a708f8fSGustavo F. Padovan 57073b166295SMarcel Holtmann drop: 57080a708f8fSGustavo F. Padovan kfree_skb(skb); 57090a708f8fSGustavo F. Padovan } 57100a708f8fSGustavo F. Padovan 571147d1ec61SGustavo F. Padovan static int l2cap_check_fcs(struct l2cap_chan *chan, struct sk_buff *skb) 57120a708f8fSGustavo F. Padovan { 57130a708f8fSGustavo F. Padovan u16 our_fcs, rcv_fcs; 5714e4ca6d98SAndrei Emeltchenko int hdr_size; 5715e4ca6d98SAndrei Emeltchenko 5716e4ca6d98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 5717e4ca6d98SAndrei Emeltchenko hdr_size = L2CAP_EXT_HDR_SIZE; 5718e4ca6d98SAndrei Emeltchenko else 5719e4ca6d98SAndrei Emeltchenko hdr_size = L2CAP_ENH_HDR_SIZE; 57200a708f8fSGustavo F. Padovan 572147d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 572203a51213SAndrei Emeltchenko skb_trim(skb, skb->len - L2CAP_FCS_SIZE); 57230a708f8fSGustavo F. Padovan rcv_fcs = get_unaligned_le16(skb->data + skb->len); 57240a708f8fSGustavo F. Padovan our_fcs = crc16(0, skb->data - hdr_size, skb->len + hdr_size); 57250a708f8fSGustavo F. Padovan 57260a708f8fSGustavo F. Padovan if (our_fcs != rcv_fcs) 57270a708f8fSGustavo F. Padovan return -EBADMSG; 57280a708f8fSGustavo F. Padovan } 57290a708f8fSGustavo F. Padovan return 0; 57300a708f8fSGustavo F. Padovan } 57310a708f8fSGustavo F. Padovan 57326ea00485SMat Martineau static void l2cap_send_i_or_rr_or_rnr(struct l2cap_chan *chan) 57330a708f8fSGustavo F. Padovan { 5734e31f7633SMat Martineau struct l2cap_ctrl control; 57350a708f8fSGustavo F. Padovan 5736e31f7633SMat Martineau BT_DBG("chan %p", chan); 57370a708f8fSGustavo F. Padovan 5738e31f7633SMat Martineau memset(&control, 0, sizeof(control)); 5739e31f7633SMat Martineau control.sframe = 1; 5740e31f7633SMat Martineau control.final = 1; 5741e31f7633SMat Martineau control.reqseq = chan->buffer_seq; 5742e31f7633SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 57430a708f8fSGustavo F. Padovan 5744e2ab4353SGustavo F. Padovan if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 5745e31f7633SMat Martineau control.super = L2CAP_SUPER_RNR; 5746e31f7633SMat Martineau l2cap_send_sframe(chan, &control); 57470a708f8fSGustavo F. Padovan } 57480a708f8fSGustavo F. Padovan 5749e31f7633SMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, &chan->conn_state) && 5750e31f7633SMat Martineau chan->unacked_frames > 0) 5751e31f7633SMat Martineau __set_retrans_timer(chan); 57520a708f8fSGustavo F. Padovan 5753e31f7633SMat Martineau /* Send pending iframes */ 5754525cd185SGustavo F. Padovan l2cap_ertm_send(chan); 57550a708f8fSGustavo F. Padovan 5756e2ab4353SGustavo F. Padovan if (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state) && 5757e31f7633SMat Martineau test_bit(CONN_SEND_FBIT, &chan->conn_state)) { 5758e31f7633SMat Martineau /* F-bit wasn't sent in an s-frame or i-frame yet, so 5759e31f7633SMat Martineau * send it now. 5760e31f7633SMat Martineau */ 5761e31f7633SMat Martineau control.super = L2CAP_SUPER_RR; 5762e31f7633SMat Martineau l2cap_send_sframe(chan, &control); 57630a708f8fSGustavo F. Padovan } 57640a708f8fSGustavo F. Padovan } 57650a708f8fSGustavo F. Padovan 57662d792818SGustavo Padovan static void append_skb_frag(struct sk_buff *skb, struct sk_buff *new_frag, 57672d792818SGustavo Padovan struct sk_buff **last_frag) 57680a708f8fSGustavo F. Padovan { 576984084a31SMat Martineau /* skb->len reflects data in skb as well as all fragments 577084084a31SMat Martineau * skb->data_len reflects only data in fragments 577184084a31SMat Martineau */ 577284084a31SMat Martineau if (!skb_has_frag_list(skb)) 577384084a31SMat Martineau skb_shinfo(skb)->frag_list = new_frag; 577484084a31SMat Martineau 577584084a31SMat Martineau new_frag->next = NULL; 577684084a31SMat Martineau 577784084a31SMat Martineau (*last_frag)->next = new_frag; 577884084a31SMat Martineau *last_frag = new_frag; 577984084a31SMat Martineau 578084084a31SMat Martineau skb->len += new_frag->len; 578184084a31SMat Martineau skb->data_len += new_frag->len; 578284084a31SMat Martineau skb->truesize += new_frag->truesize; 578384084a31SMat Martineau } 578484084a31SMat Martineau 57854b51dae9SMat Martineau static int l2cap_reassemble_sdu(struct l2cap_chan *chan, struct sk_buff *skb, 57864b51dae9SMat Martineau struct l2cap_ctrl *control) 578784084a31SMat Martineau { 578884084a31SMat Martineau int err = -EINVAL; 57890a708f8fSGustavo F. Padovan 57904b51dae9SMat Martineau switch (control->sar) { 57917e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_UNSEGMENTED: 579284084a31SMat Martineau if (chan->sdu) 579384084a31SMat Martineau break; 57940a708f8fSGustavo F. Padovan 579580b98027SGustavo Padovan err = chan->ops->recv(chan, skb); 579684084a31SMat Martineau break; 57970a708f8fSGustavo F. Padovan 57987e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_START: 579984084a31SMat Martineau if (chan->sdu) 580084084a31SMat Martineau break; 58010a708f8fSGustavo F. Padovan 58026f61fd47SGustavo F. Padovan chan->sdu_len = get_unaligned_le16(skb->data); 580303a51213SAndrei Emeltchenko skb_pull(skb, L2CAP_SDULEN_SIZE); 58040a708f8fSGustavo F. Padovan 580584084a31SMat Martineau if (chan->sdu_len > chan->imtu) { 580684084a31SMat Martineau err = -EMSGSIZE; 580784084a31SMat Martineau break; 580884084a31SMat Martineau } 58090a708f8fSGustavo F. Padovan 581084084a31SMat Martineau if (skb->len >= chan->sdu_len) 581184084a31SMat Martineau break; 581284084a31SMat Martineau 581384084a31SMat Martineau chan->sdu = skb; 581484084a31SMat Martineau chan->sdu_last_frag = skb; 581584084a31SMat Martineau 581684084a31SMat Martineau skb = NULL; 581784084a31SMat Martineau err = 0; 58180a708f8fSGustavo F. Padovan break; 58190a708f8fSGustavo F. Padovan 58207e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_CONTINUE: 58216f61fd47SGustavo F. Padovan if (!chan->sdu) 582284084a31SMat Martineau break; 58230a708f8fSGustavo F. Padovan 582484084a31SMat Martineau append_skb_frag(chan->sdu, skb, 582584084a31SMat Martineau &chan->sdu_last_frag); 582684084a31SMat Martineau skb = NULL; 58270a708f8fSGustavo F. Padovan 582884084a31SMat Martineau if (chan->sdu->len >= chan->sdu_len) 582984084a31SMat Martineau break; 58300a708f8fSGustavo F. Padovan 583184084a31SMat Martineau err = 0; 58320a708f8fSGustavo F. Padovan break; 58330a708f8fSGustavo F. Padovan 58347e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_END: 58356f61fd47SGustavo F. Padovan if (!chan->sdu) 583684084a31SMat Martineau break; 58370a708f8fSGustavo F. Padovan 583884084a31SMat Martineau append_skb_frag(chan->sdu, skb, 583984084a31SMat Martineau &chan->sdu_last_frag); 584084084a31SMat Martineau skb = NULL; 58410a708f8fSGustavo F. Padovan 584284084a31SMat Martineau if (chan->sdu->len != chan->sdu_len) 584384084a31SMat Martineau break; 58440a708f8fSGustavo F. Padovan 584580b98027SGustavo Padovan err = chan->ops->recv(chan, chan->sdu); 58460a708f8fSGustavo F. Padovan 584784084a31SMat Martineau if (!err) { 584884084a31SMat Martineau /* Reassembly complete */ 584984084a31SMat Martineau chan->sdu = NULL; 585084084a31SMat Martineau chan->sdu_last_frag = NULL; 585184084a31SMat Martineau chan->sdu_len = 0; 58520a708f8fSGustavo F. Padovan } 58530a708f8fSGustavo F. Padovan break; 58540a708f8fSGustavo F. Padovan } 58550a708f8fSGustavo F. Padovan 585684084a31SMat Martineau if (err) { 58570a708f8fSGustavo F. Padovan kfree_skb(skb); 58586f61fd47SGustavo F. Padovan kfree_skb(chan->sdu); 58596f61fd47SGustavo F. Padovan chan->sdu = NULL; 586084084a31SMat Martineau chan->sdu_last_frag = NULL; 586184084a31SMat Martineau chan->sdu_len = 0; 586284084a31SMat Martineau } 58630a708f8fSGustavo F. Padovan 586484084a31SMat Martineau return err; 58650a708f8fSGustavo F. Padovan } 58660a708f8fSGustavo F. Padovan 586732b32735SMat Martineau static int l2cap_resegment(struct l2cap_chan *chan) 586832b32735SMat Martineau { 586932b32735SMat Martineau /* Placeholder */ 587032b32735SMat Martineau return 0; 587132b32735SMat Martineau } 587232b32735SMat Martineau 5873e328140fSMat Martineau void l2cap_chan_busy(struct l2cap_chan *chan, int busy) 58740a708f8fSGustavo F. Padovan { 587561aa4f5bSMat Martineau u8 event; 587661aa4f5bSMat Martineau 587761aa4f5bSMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 587861aa4f5bSMat Martineau return; 587961aa4f5bSMat Martineau 588061aa4f5bSMat Martineau event = busy ? L2CAP_EV_LOCAL_BUSY_DETECTED : L2CAP_EV_LOCAL_BUSY_CLEAR; 5881401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, event); 58820a708f8fSGustavo F. Padovan } 58830a708f8fSGustavo F. Padovan 5884d2a7ac5dSMat Martineau static int l2cap_rx_queued_iframes(struct l2cap_chan *chan) 5885d2a7ac5dSMat Martineau { 588663838725SMat Martineau int err = 0; 588763838725SMat Martineau /* Pass sequential frames to l2cap_reassemble_sdu() 588863838725SMat Martineau * until a gap is encountered. 588963838725SMat Martineau */ 589063838725SMat Martineau 589163838725SMat Martineau BT_DBG("chan %p", chan); 589263838725SMat Martineau 589363838725SMat Martineau while (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 589463838725SMat Martineau struct sk_buff *skb; 589563838725SMat Martineau BT_DBG("Searching for skb with txseq %d (queue len %d)", 589663838725SMat Martineau chan->buffer_seq, skb_queue_len(&chan->srej_q)); 589763838725SMat Martineau 589863838725SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->srej_q, chan->buffer_seq); 589963838725SMat Martineau 590063838725SMat Martineau if (!skb) 590163838725SMat Martineau break; 590263838725SMat Martineau 590363838725SMat Martineau skb_unlink(skb, &chan->srej_q); 590463838725SMat Martineau chan->buffer_seq = __next_seq(chan, chan->buffer_seq); 590563838725SMat Martineau err = l2cap_reassemble_sdu(chan, skb, &bt_cb(skb)->control); 590663838725SMat Martineau if (err) 590763838725SMat Martineau break; 590863838725SMat Martineau } 590963838725SMat Martineau 591063838725SMat Martineau if (skb_queue_empty(&chan->srej_q)) { 591163838725SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 591263838725SMat Martineau l2cap_send_ack(chan); 591363838725SMat Martineau } 591463838725SMat Martineau 591563838725SMat Martineau return err; 5916d2a7ac5dSMat Martineau } 5917d2a7ac5dSMat Martineau 5918d2a7ac5dSMat Martineau static void l2cap_handle_srej(struct l2cap_chan *chan, 5919d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 5920d2a7ac5dSMat Martineau { 5921f80842a8SMat Martineau struct sk_buff *skb; 5922f80842a8SMat Martineau 5923f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 5924f80842a8SMat Martineau 5925f80842a8SMat Martineau if (control->reqseq == chan->next_tx_seq) { 5926f80842a8SMat Martineau BT_DBG("Invalid reqseq %d, disconnecting", control->reqseq); 59275e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5928f80842a8SMat Martineau return; 5929f80842a8SMat Martineau } 5930f80842a8SMat Martineau 5931f80842a8SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, control->reqseq); 5932f80842a8SMat Martineau 5933f80842a8SMat Martineau if (skb == NULL) { 5934f80842a8SMat Martineau BT_DBG("Seq %d not available for retransmission", 5935f80842a8SMat Martineau control->reqseq); 5936f80842a8SMat Martineau return; 5937f80842a8SMat Martineau } 5938f80842a8SMat Martineau 5939f80842a8SMat Martineau if (chan->max_tx != 0 && bt_cb(skb)->control.retries >= chan->max_tx) { 5940f80842a8SMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 59415e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5942f80842a8SMat Martineau return; 5943f80842a8SMat Martineau } 5944f80842a8SMat Martineau 5945f80842a8SMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 5946f80842a8SMat Martineau 5947f80842a8SMat Martineau if (control->poll) { 5948f80842a8SMat Martineau l2cap_pass_to_tx(chan, control); 5949f80842a8SMat Martineau 5950f80842a8SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 5951f80842a8SMat Martineau l2cap_retransmit(chan, control); 5952f80842a8SMat Martineau l2cap_ertm_send(chan); 5953f80842a8SMat Martineau 5954f80842a8SMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) { 5955f80842a8SMat Martineau set_bit(CONN_SREJ_ACT, &chan->conn_state); 5956f80842a8SMat Martineau chan->srej_save_reqseq = control->reqseq; 5957f80842a8SMat Martineau } 5958f80842a8SMat Martineau } else { 5959f80842a8SMat Martineau l2cap_pass_to_tx_fbit(chan, control); 5960f80842a8SMat Martineau 5961f80842a8SMat Martineau if (control->final) { 5962f80842a8SMat Martineau if (chan->srej_save_reqseq != control->reqseq || 5963f80842a8SMat Martineau !test_and_clear_bit(CONN_SREJ_ACT, 5964f80842a8SMat Martineau &chan->conn_state)) 5965f80842a8SMat Martineau l2cap_retransmit(chan, control); 5966f80842a8SMat Martineau } else { 5967f80842a8SMat Martineau l2cap_retransmit(chan, control); 5968f80842a8SMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) { 5969f80842a8SMat Martineau set_bit(CONN_SREJ_ACT, &chan->conn_state); 5970f80842a8SMat Martineau chan->srej_save_reqseq = control->reqseq; 5971f80842a8SMat Martineau } 5972f80842a8SMat Martineau } 5973f80842a8SMat Martineau } 5974d2a7ac5dSMat Martineau } 5975d2a7ac5dSMat Martineau 5976d2a7ac5dSMat Martineau static void l2cap_handle_rej(struct l2cap_chan *chan, 5977d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 5978d2a7ac5dSMat Martineau { 5979fcd289dfSMat Martineau struct sk_buff *skb; 5980fcd289dfSMat Martineau 5981fcd289dfSMat Martineau BT_DBG("chan %p, control %p", chan, control); 5982fcd289dfSMat Martineau 5983fcd289dfSMat Martineau if (control->reqseq == chan->next_tx_seq) { 5984fcd289dfSMat Martineau BT_DBG("Invalid reqseq %d, disconnecting", control->reqseq); 59855e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5986fcd289dfSMat Martineau return; 5987fcd289dfSMat Martineau } 5988fcd289dfSMat Martineau 5989fcd289dfSMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, control->reqseq); 5990fcd289dfSMat Martineau 5991fcd289dfSMat Martineau if (chan->max_tx && skb && 5992fcd289dfSMat Martineau bt_cb(skb)->control.retries >= chan->max_tx) { 5993fcd289dfSMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 59945e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5995fcd289dfSMat Martineau return; 5996fcd289dfSMat Martineau } 5997fcd289dfSMat Martineau 5998fcd289dfSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 5999fcd289dfSMat Martineau 6000fcd289dfSMat Martineau l2cap_pass_to_tx(chan, control); 6001fcd289dfSMat Martineau 6002fcd289dfSMat Martineau if (control->final) { 6003fcd289dfSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, &chan->conn_state)) 6004fcd289dfSMat Martineau l2cap_retransmit_all(chan, control); 6005fcd289dfSMat Martineau } else { 6006fcd289dfSMat Martineau l2cap_retransmit_all(chan, control); 6007fcd289dfSMat Martineau l2cap_ertm_send(chan); 6008fcd289dfSMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) 6009fcd289dfSMat Martineau set_bit(CONN_REJ_ACT, &chan->conn_state); 6010fcd289dfSMat Martineau } 6011d2a7ac5dSMat Martineau } 6012d2a7ac5dSMat Martineau 60134b51dae9SMat Martineau static u8 l2cap_classify_txseq(struct l2cap_chan *chan, u16 txseq) 60144b51dae9SMat Martineau { 60154b51dae9SMat Martineau BT_DBG("chan %p, txseq %d", chan, txseq); 60164b51dae9SMat Martineau 60174b51dae9SMat Martineau BT_DBG("last_acked_seq %d, expected_tx_seq %d", chan->last_acked_seq, 60184b51dae9SMat Martineau chan->expected_tx_seq); 60194b51dae9SMat Martineau 60204b51dae9SMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 60214b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= 60224b51dae9SMat Martineau chan->tx_win) { 60234b51dae9SMat Martineau /* See notes below regarding "double poll" and 60244b51dae9SMat Martineau * invalid packets. 60254b51dae9SMat Martineau */ 60264b51dae9SMat Martineau if (chan->tx_win <= ((chan->tx_win_max + 1) >> 1)) { 60274b51dae9SMat Martineau BT_DBG("Invalid/Ignore - after SREJ"); 60284b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID_IGNORE; 60294b51dae9SMat Martineau } else { 60304b51dae9SMat Martineau BT_DBG("Invalid - in window after SREJ sent"); 60314b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 60324b51dae9SMat Martineau } 60334b51dae9SMat Martineau } 60344b51dae9SMat Martineau 60354b51dae9SMat Martineau if (chan->srej_list.head == txseq) { 60364b51dae9SMat Martineau BT_DBG("Expected SREJ"); 60374b51dae9SMat Martineau return L2CAP_TXSEQ_EXPECTED_SREJ; 60384b51dae9SMat Martineau } 60394b51dae9SMat Martineau 60404b51dae9SMat Martineau if (l2cap_ertm_seq_in_queue(&chan->srej_q, txseq)) { 60414b51dae9SMat Martineau BT_DBG("Duplicate SREJ - txseq already stored"); 60424b51dae9SMat Martineau return L2CAP_TXSEQ_DUPLICATE_SREJ; 60434b51dae9SMat Martineau } 60444b51dae9SMat Martineau 60454b51dae9SMat Martineau if (l2cap_seq_list_contains(&chan->srej_list, txseq)) { 60464b51dae9SMat Martineau BT_DBG("Unexpected SREJ - not requested"); 60474b51dae9SMat Martineau return L2CAP_TXSEQ_UNEXPECTED_SREJ; 60484b51dae9SMat Martineau } 60494b51dae9SMat Martineau } 60504b51dae9SMat Martineau 60514b51dae9SMat Martineau if (chan->expected_tx_seq == txseq) { 60524b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= 60534b51dae9SMat Martineau chan->tx_win) { 60544b51dae9SMat Martineau BT_DBG("Invalid - txseq outside tx window"); 60554b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 60564b51dae9SMat Martineau } else { 60574b51dae9SMat Martineau BT_DBG("Expected"); 60584b51dae9SMat Martineau return L2CAP_TXSEQ_EXPECTED; 60594b51dae9SMat Martineau } 60604b51dae9SMat Martineau } 60614b51dae9SMat Martineau 60624b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) < 60632d792818SGustavo Padovan __seq_offset(chan, chan->expected_tx_seq, chan->last_acked_seq)) { 60644b51dae9SMat Martineau BT_DBG("Duplicate - expected_tx_seq later than txseq"); 60654b51dae9SMat Martineau return L2CAP_TXSEQ_DUPLICATE; 60664b51dae9SMat Martineau } 60674b51dae9SMat Martineau 60684b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= chan->tx_win) { 60694b51dae9SMat Martineau /* A source of invalid packets is a "double poll" condition, 60704b51dae9SMat Martineau * where delays cause us to send multiple poll packets. If 60714b51dae9SMat Martineau * the remote stack receives and processes both polls, 60724b51dae9SMat Martineau * sequence numbers can wrap around in such a way that a 60734b51dae9SMat Martineau * resent frame has a sequence number that looks like new data 60744b51dae9SMat Martineau * with a sequence gap. This would trigger an erroneous SREJ 60754b51dae9SMat Martineau * request. 60764b51dae9SMat Martineau * 60774b51dae9SMat Martineau * Fortunately, this is impossible with a tx window that's 60784b51dae9SMat Martineau * less than half of the maximum sequence number, which allows 60794b51dae9SMat Martineau * invalid frames to be safely ignored. 60804b51dae9SMat Martineau * 60814b51dae9SMat Martineau * With tx window sizes greater than half of the tx window 60824b51dae9SMat Martineau * maximum, the frame is invalid and cannot be ignored. This 60834b51dae9SMat Martineau * causes a disconnect. 60844b51dae9SMat Martineau */ 60854b51dae9SMat Martineau 60864b51dae9SMat Martineau if (chan->tx_win <= ((chan->tx_win_max + 1) >> 1)) { 60874b51dae9SMat Martineau BT_DBG("Invalid/Ignore - txseq outside tx window"); 60884b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID_IGNORE; 60894b51dae9SMat Martineau } else { 60904b51dae9SMat Martineau BT_DBG("Invalid - txseq outside tx window"); 60914b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 60924b51dae9SMat Martineau } 60934b51dae9SMat Martineau } else { 60944b51dae9SMat Martineau BT_DBG("Unexpected - txseq indicates missing frames"); 60954b51dae9SMat Martineau return L2CAP_TXSEQ_UNEXPECTED; 60964b51dae9SMat Martineau } 60974b51dae9SMat Martineau } 60984b51dae9SMat Martineau 6099d2a7ac5dSMat Martineau static int l2cap_rx_state_recv(struct l2cap_chan *chan, 6100d2a7ac5dSMat Martineau struct l2cap_ctrl *control, 6101d2a7ac5dSMat Martineau struct sk_buff *skb, u8 event) 6102d2a7ac5dSMat Martineau { 6103d2a7ac5dSMat Martineau int err = 0; 6104941247f9SPeter Senna Tschudin bool skb_in_use = false; 6105d2a7ac5dSMat Martineau 6106d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 6107d2a7ac5dSMat Martineau event); 6108d2a7ac5dSMat Martineau 6109d2a7ac5dSMat Martineau switch (event) { 6110d2a7ac5dSMat Martineau case L2CAP_EV_RECV_IFRAME: 6111d2a7ac5dSMat Martineau switch (l2cap_classify_txseq(chan, control->txseq)) { 6112d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED: 6113d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6114d2a7ac5dSMat Martineau 6115d2a7ac5dSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 6116d2a7ac5dSMat Martineau BT_DBG("Busy, discarding expected seq %d", 6117d2a7ac5dSMat Martineau control->txseq); 6118d2a7ac5dSMat Martineau break; 6119d2a7ac5dSMat Martineau } 6120d2a7ac5dSMat Martineau 6121d2a7ac5dSMat Martineau chan->expected_tx_seq = __next_seq(chan, 6122d2a7ac5dSMat Martineau control->txseq); 6123d2a7ac5dSMat Martineau 6124d2a7ac5dSMat Martineau chan->buffer_seq = chan->expected_tx_seq; 6125941247f9SPeter Senna Tschudin skb_in_use = true; 6126d2a7ac5dSMat Martineau 6127d2a7ac5dSMat Martineau err = l2cap_reassemble_sdu(chan, skb, control); 6128d2a7ac5dSMat Martineau if (err) 6129d2a7ac5dSMat Martineau break; 6130d2a7ac5dSMat Martineau 6131d2a7ac5dSMat Martineau if (control->final) { 6132d2a7ac5dSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, 6133d2a7ac5dSMat Martineau &chan->conn_state)) { 6134d2a7ac5dSMat Martineau control->final = 0; 6135d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 6136d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6137d2a7ac5dSMat Martineau } 6138d2a7ac5dSMat Martineau } 6139d2a7ac5dSMat Martineau 6140d2a7ac5dSMat Martineau if (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) 6141d2a7ac5dSMat Martineau l2cap_send_ack(chan); 6142d2a7ac5dSMat Martineau break; 6143d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED: 6144d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6145d2a7ac5dSMat Martineau 6146d2a7ac5dSMat Martineau /* Can't issue SREJ frames in the local busy state. 6147d2a7ac5dSMat Martineau * Drop this frame, it will be seen as missing 6148d2a7ac5dSMat Martineau * when local busy is exited. 6149d2a7ac5dSMat Martineau */ 6150d2a7ac5dSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 6151d2a7ac5dSMat Martineau BT_DBG("Busy, discarding unexpected seq %d", 6152d2a7ac5dSMat Martineau control->txseq); 6153d2a7ac5dSMat Martineau break; 6154d2a7ac5dSMat Martineau } 6155d2a7ac5dSMat Martineau 6156d2a7ac5dSMat Martineau /* There was a gap in the sequence, so an SREJ 6157d2a7ac5dSMat Martineau * must be sent for each missing frame. The 6158d2a7ac5dSMat Martineau * current frame is stored for later use. 6159d2a7ac5dSMat Martineau */ 6160d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6161941247f9SPeter Senna Tschudin skb_in_use = true; 6162d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6163d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6164d2a7ac5dSMat Martineau 6165d2a7ac5dSMat Martineau clear_bit(CONN_SREJ_ACT, &chan->conn_state); 6166d2a7ac5dSMat Martineau l2cap_seq_list_clear(&chan->srej_list); 6167d2a7ac5dSMat Martineau l2cap_send_srej(chan, control->txseq); 6168d2a7ac5dSMat Martineau 6169d2a7ac5dSMat Martineau chan->rx_state = L2CAP_RX_STATE_SREJ_SENT; 6170d2a7ac5dSMat Martineau break; 6171d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE: 6172d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6173d2a7ac5dSMat Martineau break; 6174d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID_IGNORE: 6175d2a7ac5dSMat Martineau break; 6176d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID: 6177d2a7ac5dSMat Martineau default: 61785e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6179d2a7ac5dSMat Martineau break; 6180d2a7ac5dSMat Martineau } 6181d2a7ac5dSMat Martineau break; 6182d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RR: 6183d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6184d2a7ac5dSMat Martineau if (control->final) { 6185d2a7ac5dSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6186d2a7ac5dSMat Martineau 6187e6a3ee6eSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, &chan->conn_state) && 6188e6a3ee6eSMat Martineau !__chan_is_moving(chan)) { 6189d2a7ac5dSMat Martineau control->final = 0; 6190d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 6191d2a7ac5dSMat Martineau } 6192d2a7ac5dSMat Martineau 6193d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6194d2a7ac5dSMat Martineau } else if (control->poll) { 6195d2a7ac5dSMat Martineau l2cap_send_i_or_rr_or_rnr(chan); 6196d2a7ac5dSMat Martineau } else { 6197d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 6198d2a7ac5dSMat Martineau &chan->conn_state) && 6199d2a7ac5dSMat Martineau chan->unacked_frames) 6200d2a7ac5dSMat Martineau __set_retrans_timer(chan); 6201d2a7ac5dSMat Martineau 6202d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6203d2a7ac5dSMat Martineau } 6204d2a7ac5dSMat Martineau break; 6205d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RNR: 6206d2a7ac5dSMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6207d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6208d2a7ac5dSMat Martineau if (control && control->poll) { 6209d2a7ac5dSMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 6210d2a7ac5dSMat Martineau l2cap_send_rr_or_rnr(chan, 0); 6211d2a7ac5dSMat Martineau } 6212d2a7ac5dSMat Martineau __clear_retrans_timer(chan); 6213d2a7ac5dSMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 6214d2a7ac5dSMat Martineau break; 6215d2a7ac5dSMat Martineau case L2CAP_EV_RECV_REJ: 6216d2a7ac5dSMat Martineau l2cap_handle_rej(chan, control); 6217d2a7ac5dSMat Martineau break; 6218d2a7ac5dSMat Martineau case L2CAP_EV_RECV_SREJ: 6219d2a7ac5dSMat Martineau l2cap_handle_srej(chan, control); 6220d2a7ac5dSMat Martineau break; 6221d2a7ac5dSMat Martineau default: 6222d2a7ac5dSMat Martineau break; 6223d2a7ac5dSMat Martineau } 6224d2a7ac5dSMat Martineau 6225d2a7ac5dSMat Martineau if (skb && !skb_in_use) { 6226d2a7ac5dSMat Martineau BT_DBG("Freeing %p", skb); 6227d2a7ac5dSMat Martineau kfree_skb(skb); 6228d2a7ac5dSMat Martineau } 6229d2a7ac5dSMat Martineau 6230d2a7ac5dSMat Martineau return err; 6231d2a7ac5dSMat Martineau } 6232d2a7ac5dSMat Martineau 6233d2a7ac5dSMat Martineau static int l2cap_rx_state_srej_sent(struct l2cap_chan *chan, 6234d2a7ac5dSMat Martineau struct l2cap_ctrl *control, 6235d2a7ac5dSMat Martineau struct sk_buff *skb, u8 event) 6236d2a7ac5dSMat Martineau { 6237d2a7ac5dSMat Martineau int err = 0; 6238d2a7ac5dSMat Martineau u16 txseq = control->txseq; 6239941247f9SPeter Senna Tschudin bool skb_in_use = false; 6240d2a7ac5dSMat Martineau 6241d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 6242d2a7ac5dSMat Martineau event); 6243d2a7ac5dSMat Martineau 6244d2a7ac5dSMat Martineau switch (event) { 6245d2a7ac5dSMat Martineau case L2CAP_EV_RECV_IFRAME: 6246d2a7ac5dSMat Martineau switch (l2cap_classify_txseq(chan, txseq)) { 6247d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED: 6248d2a7ac5dSMat Martineau /* Keep frame for reassembly later */ 6249d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6250d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6251941247f9SPeter Senna Tschudin skb_in_use = true; 6252d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6253d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6254d2a7ac5dSMat Martineau 6255d2a7ac5dSMat Martineau chan->expected_tx_seq = __next_seq(chan, txseq); 6256d2a7ac5dSMat Martineau break; 6257d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED_SREJ: 6258d2a7ac5dSMat Martineau l2cap_seq_list_pop(&chan->srej_list); 6259d2a7ac5dSMat Martineau 6260d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6261d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6262941247f9SPeter Senna Tschudin skb_in_use = true; 6263d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6264d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6265d2a7ac5dSMat Martineau 6266d2a7ac5dSMat Martineau err = l2cap_rx_queued_iframes(chan); 6267d2a7ac5dSMat Martineau if (err) 6268d2a7ac5dSMat Martineau break; 6269d2a7ac5dSMat Martineau 6270d2a7ac5dSMat Martineau break; 6271d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED: 6272d2a7ac5dSMat Martineau /* Got a frame that can't be reassembled yet. 6273d2a7ac5dSMat Martineau * Save it for later, and send SREJs to cover 6274d2a7ac5dSMat Martineau * the missing frames. 6275d2a7ac5dSMat Martineau */ 6276d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6277941247f9SPeter Senna Tschudin skb_in_use = true; 6278d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6279d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6280d2a7ac5dSMat Martineau 6281d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6282d2a7ac5dSMat Martineau l2cap_send_srej(chan, control->txseq); 6283d2a7ac5dSMat Martineau break; 6284d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED_SREJ: 6285d2a7ac5dSMat Martineau /* This frame was requested with an SREJ, but 6286d2a7ac5dSMat Martineau * some expected retransmitted frames are 6287d2a7ac5dSMat Martineau * missing. Request retransmission of missing 6288d2a7ac5dSMat Martineau * SREJ'd frames. 6289d2a7ac5dSMat Martineau */ 6290d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6291941247f9SPeter Senna Tschudin skb_in_use = true; 6292d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6293d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6294d2a7ac5dSMat Martineau 6295d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6296d2a7ac5dSMat Martineau l2cap_send_srej_list(chan, control->txseq); 6297d2a7ac5dSMat Martineau break; 6298d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE_SREJ: 6299d2a7ac5dSMat Martineau /* We've already queued this frame. Drop this copy. */ 6300d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6301d2a7ac5dSMat Martineau break; 6302d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE: 6303d2a7ac5dSMat Martineau /* Expecting a later sequence number, so this frame 6304d2a7ac5dSMat Martineau * was already received. Ignore it completely. 6305d2a7ac5dSMat Martineau */ 6306d2a7ac5dSMat Martineau break; 6307d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID_IGNORE: 6308d2a7ac5dSMat Martineau break; 6309d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID: 6310d2a7ac5dSMat Martineau default: 63115e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6312d2a7ac5dSMat Martineau break; 6313d2a7ac5dSMat Martineau } 6314d2a7ac5dSMat Martineau break; 6315d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RR: 6316d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6317d2a7ac5dSMat Martineau if (control->final) { 6318d2a7ac5dSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6319d2a7ac5dSMat Martineau 6320d2a7ac5dSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, 6321d2a7ac5dSMat Martineau &chan->conn_state)) { 6322d2a7ac5dSMat Martineau control->final = 0; 6323d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 6324d2a7ac5dSMat Martineau } 6325d2a7ac5dSMat Martineau 6326d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6327d2a7ac5dSMat Martineau } else if (control->poll) { 6328d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 6329d2a7ac5dSMat Martineau &chan->conn_state) && 6330d2a7ac5dSMat Martineau chan->unacked_frames) { 6331d2a7ac5dSMat Martineau __set_retrans_timer(chan); 6332d2a7ac5dSMat Martineau } 6333d2a7ac5dSMat Martineau 6334d2a7ac5dSMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 6335d2a7ac5dSMat Martineau l2cap_send_srej_tail(chan); 6336d2a7ac5dSMat Martineau } else { 6337d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 6338d2a7ac5dSMat Martineau &chan->conn_state) && 6339d2a7ac5dSMat Martineau chan->unacked_frames) 6340d2a7ac5dSMat Martineau __set_retrans_timer(chan); 6341d2a7ac5dSMat Martineau 6342d2a7ac5dSMat Martineau l2cap_send_ack(chan); 6343d2a7ac5dSMat Martineau } 6344d2a7ac5dSMat Martineau break; 6345d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RNR: 6346d2a7ac5dSMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6347d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6348d2a7ac5dSMat Martineau if (control->poll) { 6349d2a7ac5dSMat Martineau l2cap_send_srej_tail(chan); 6350d2a7ac5dSMat Martineau } else { 6351d2a7ac5dSMat Martineau struct l2cap_ctrl rr_control; 6352d2a7ac5dSMat Martineau memset(&rr_control, 0, sizeof(rr_control)); 6353d2a7ac5dSMat Martineau rr_control.sframe = 1; 6354d2a7ac5dSMat Martineau rr_control.super = L2CAP_SUPER_RR; 6355d2a7ac5dSMat Martineau rr_control.reqseq = chan->buffer_seq; 6356d2a7ac5dSMat Martineau l2cap_send_sframe(chan, &rr_control); 6357d2a7ac5dSMat Martineau } 6358d2a7ac5dSMat Martineau 6359d2a7ac5dSMat Martineau break; 6360d2a7ac5dSMat Martineau case L2CAP_EV_RECV_REJ: 6361d2a7ac5dSMat Martineau l2cap_handle_rej(chan, control); 6362d2a7ac5dSMat Martineau break; 6363d2a7ac5dSMat Martineau case L2CAP_EV_RECV_SREJ: 6364d2a7ac5dSMat Martineau l2cap_handle_srej(chan, control); 6365d2a7ac5dSMat Martineau break; 6366d2a7ac5dSMat Martineau } 6367d2a7ac5dSMat Martineau 6368d2a7ac5dSMat Martineau if (skb && !skb_in_use) { 6369d2a7ac5dSMat Martineau BT_DBG("Freeing %p", skb); 6370d2a7ac5dSMat Martineau kfree_skb(skb); 6371d2a7ac5dSMat Martineau } 6372d2a7ac5dSMat Martineau 6373d2a7ac5dSMat Martineau return err; 6374d2a7ac5dSMat Martineau } 6375d2a7ac5dSMat Martineau 637632b32735SMat Martineau static int l2cap_finish_move(struct l2cap_chan *chan) 637732b32735SMat Martineau { 637832b32735SMat Martineau BT_DBG("chan %p", chan); 637932b32735SMat Martineau 638032b32735SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 638132b32735SMat Martineau 638232b32735SMat Martineau if (chan->hs_hcon) 638332b32735SMat Martineau chan->conn->mtu = chan->hs_hcon->hdev->block_mtu; 638432b32735SMat Martineau else 638532b32735SMat Martineau chan->conn->mtu = chan->conn->hcon->hdev->acl_mtu; 638632b32735SMat Martineau 638732b32735SMat Martineau return l2cap_resegment(chan); 638832b32735SMat Martineau } 638932b32735SMat Martineau 639032b32735SMat Martineau static int l2cap_rx_state_wait_p(struct l2cap_chan *chan, 639132b32735SMat Martineau struct l2cap_ctrl *control, 639232b32735SMat Martineau struct sk_buff *skb, u8 event) 639332b32735SMat Martineau { 639432b32735SMat Martineau int err; 639532b32735SMat Martineau 639632b32735SMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 639732b32735SMat Martineau event); 639832b32735SMat Martineau 639932b32735SMat Martineau if (!control->poll) 640032b32735SMat Martineau return -EPROTO; 640132b32735SMat Martineau 640232b32735SMat Martineau l2cap_process_reqseq(chan, control->reqseq); 640332b32735SMat Martineau 640432b32735SMat Martineau if (!skb_queue_empty(&chan->tx_q)) 640532b32735SMat Martineau chan->tx_send_head = skb_peek(&chan->tx_q); 640632b32735SMat Martineau else 640732b32735SMat Martineau chan->tx_send_head = NULL; 640832b32735SMat Martineau 640932b32735SMat Martineau /* Rewind next_tx_seq to the point expected 641032b32735SMat Martineau * by the receiver. 641132b32735SMat Martineau */ 641232b32735SMat Martineau chan->next_tx_seq = control->reqseq; 641332b32735SMat Martineau chan->unacked_frames = 0; 641432b32735SMat Martineau 641532b32735SMat Martineau err = l2cap_finish_move(chan); 641632b32735SMat Martineau if (err) 641732b32735SMat Martineau return err; 641832b32735SMat Martineau 641932b32735SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 642032b32735SMat Martineau l2cap_send_i_or_rr_or_rnr(chan); 642132b32735SMat Martineau 642232b32735SMat Martineau if (event == L2CAP_EV_RECV_IFRAME) 642332b32735SMat Martineau return -EPROTO; 642432b32735SMat Martineau 642532b32735SMat Martineau return l2cap_rx_state_recv(chan, control, NULL, event); 642632b32735SMat Martineau } 642732b32735SMat Martineau 642832b32735SMat Martineau static int l2cap_rx_state_wait_f(struct l2cap_chan *chan, 642932b32735SMat Martineau struct l2cap_ctrl *control, 643032b32735SMat Martineau struct sk_buff *skb, u8 event) 643132b32735SMat Martineau { 643232b32735SMat Martineau int err; 643332b32735SMat Martineau 643432b32735SMat Martineau if (!control->final) 643532b32735SMat Martineau return -EPROTO; 643632b32735SMat Martineau 643732b32735SMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 643832b32735SMat Martineau 643932b32735SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 644032b32735SMat Martineau l2cap_process_reqseq(chan, control->reqseq); 644132b32735SMat Martineau 644232b32735SMat Martineau if (!skb_queue_empty(&chan->tx_q)) 644332b32735SMat Martineau chan->tx_send_head = skb_peek(&chan->tx_q); 644432b32735SMat Martineau else 644532b32735SMat Martineau chan->tx_send_head = NULL; 644632b32735SMat Martineau 644732b32735SMat Martineau /* Rewind next_tx_seq to the point expected 644832b32735SMat Martineau * by the receiver. 644932b32735SMat Martineau */ 645032b32735SMat Martineau chan->next_tx_seq = control->reqseq; 645132b32735SMat Martineau chan->unacked_frames = 0; 645232b32735SMat Martineau 645332b32735SMat Martineau if (chan->hs_hcon) 645432b32735SMat Martineau chan->conn->mtu = chan->hs_hcon->hdev->block_mtu; 645532b32735SMat Martineau else 645632b32735SMat Martineau chan->conn->mtu = chan->conn->hcon->hdev->acl_mtu; 645732b32735SMat Martineau 645832b32735SMat Martineau err = l2cap_resegment(chan); 645932b32735SMat Martineau 646032b32735SMat Martineau if (!err) 646132b32735SMat Martineau err = l2cap_rx_state_recv(chan, control, skb, event); 646232b32735SMat Martineau 646332b32735SMat Martineau return err; 646432b32735SMat Martineau } 646532b32735SMat Martineau 6466d2a7ac5dSMat Martineau static bool __valid_reqseq(struct l2cap_chan *chan, u16 reqseq) 6467d2a7ac5dSMat Martineau { 6468d2a7ac5dSMat Martineau /* Make sure reqseq is for a packet that has been sent but not acked */ 6469d2a7ac5dSMat Martineau u16 unacked; 6470d2a7ac5dSMat Martineau 6471d2a7ac5dSMat Martineau unacked = __seq_offset(chan, chan->next_tx_seq, chan->expected_ack_seq); 6472d2a7ac5dSMat Martineau return __seq_offset(chan, chan->next_tx_seq, reqseq) <= unacked; 6473d2a7ac5dSMat Martineau } 6474d2a7ac5dSMat Martineau 6475cec8ab6eSMat Martineau static int l2cap_rx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 6476cec8ab6eSMat Martineau struct sk_buff *skb, u8 event) 64770a708f8fSGustavo F. Padovan { 6478d2a7ac5dSMat Martineau int err = 0; 6479d2a7ac5dSMat Martineau 6480d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d, state %d", chan, 6481d2a7ac5dSMat Martineau control, skb, event, chan->rx_state); 6482d2a7ac5dSMat Martineau 6483d2a7ac5dSMat Martineau if (__valid_reqseq(chan, control->reqseq)) { 6484d2a7ac5dSMat Martineau switch (chan->rx_state) { 6485d2a7ac5dSMat Martineau case L2CAP_RX_STATE_RECV: 6486d2a7ac5dSMat Martineau err = l2cap_rx_state_recv(chan, control, skb, event); 6487d2a7ac5dSMat Martineau break; 6488d2a7ac5dSMat Martineau case L2CAP_RX_STATE_SREJ_SENT: 6489d2a7ac5dSMat Martineau err = l2cap_rx_state_srej_sent(chan, control, skb, 6490d2a7ac5dSMat Martineau event); 6491d2a7ac5dSMat Martineau break; 649232b32735SMat Martineau case L2CAP_RX_STATE_WAIT_P: 649332b32735SMat Martineau err = l2cap_rx_state_wait_p(chan, control, skb, event); 649432b32735SMat Martineau break; 649532b32735SMat Martineau case L2CAP_RX_STATE_WAIT_F: 649632b32735SMat Martineau err = l2cap_rx_state_wait_f(chan, control, skb, event); 649732b32735SMat Martineau break; 6498d2a7ac5dSMat Martineau default: 6499d2a7ac5dSMat Martineau /* shut it down */ 6500d2a7ac5dSMat Martineau break; 6501d2a7ac5dSMat Martineau } 6502d2a7ac5dSMat Martineau } else { 6503d2a7ac5dSMat Martineau BT_DBG("Invalid reqseq %d (next_tx_seq %d, expected_ack_seq %d", 6504d2a7ac5dSMat Martineau control->reqseq, chan->next_tx_seq, 6505d2a7ac5dSMat Martineau chan->expected_ack_seq); 65065e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6507d2a7ac5dSMat Martineau } 6508d2a7ac5dSMat Martineau 6509d2a7ac5dSMat Martineau return err; 6510cec8ab6eSMat Martineau } 6511cec8ab6eSMat Martineau 6512cec8ab6eSMat Martineau static int l2cap_stream_rx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 6513cec8ab6eSMat Martineau struct sk_buff *skb) 6514cec8ab6eSMat Martineau { 65154b51dae9SMat Martineau int err = 0; 65164b51dae9SMat Martineau 65174b51dae9SMat Martineau BT_DBG("chan %p, control %p, skb %p, state %d", chan, control, skb, 65184b51dae9SMat Martineau chan->rx_state); 65194b51dae9SMat Martineau 65204b51dae9SMat Martineau if (l2cap_classify_txseq(chan, control->txseq) == 65214b51dae9SMat Martineau L2CAP_TXSEQ_EXPECTED) { 65224b51dae9SMat Martineau l2cap_pass_to_tx(chan, control); 65234b51dae9SMat Martineau 65244b51dae9SMat Martineau BT_DBG("buffer_seq %d->%d", chan->buffer_seq, 65254b51dae9SMat Martineau __next_seq(chan, chan->buffer_seq)); 65264b51dae9SMat Martineau 65274b51dae9SMat Martineau chan->buffer_seq = __next_seq(chan, chan->buffer_seq); 65284b51dae9SMat Martineau 65294b51dae9SMat Martineau l2cap_reassemble_sdu(chan, skb, control); 65304b51dae9SMat Martineau } else { 65314b51dae9SMat Martineau if (chan->sdu) { 65324b51dae9SMat Martineau kfree_skb(chan->sdu); 65334b51dae9SMat Martineau chan->sdu = NULL; 65344b51dae9SMat Martineau } 65354b51dae9SMat Martineau chan->sdu_last_frag = NULL; 65364b51dae9SMat Martineau chan->sdu_len = 0; 65374b51dae9SMat Martineau 65384b51dae9SMat Martineau if (skb) { 65394b51dae9SMat Martineau BT_DBG("Freeing %p", skb); 65404b51dae9SMat Martineau kfree_skb(skb); 65414b51dae9SMat Martineau } 65424b51dae9SMat Martineau } 65434b51dae9SMat Martineau 65444b51dae9SMat Martineau chan->last_acked_seq = control->txseq; 65454b51dae9SMat Martineau chan->expected_tx_seq = __next_seq(chan, control->txseq); 65464b51dae9SMat Martineau 65474b51dae9SMat Martineau return err; 6548cec8ab6eSMat Martineau } 6549cec8ab6eSMat Martineau 6550cec8ab6eSMat Martineau static int l2cap_data_rcv(struct l2cap_chan *chan, struct sk_buff *skb) 6551cec8ab6eSMat Martineau { 6552cec8ab6eSMat Martineau struct l2cap_ctrl *control = &bt_cb(skb)->control; 6553cec8ab6eSMat Martineau u16 len; 6554cec8ab6eSMat Martineau u8 event; 65550a708f8fSGustavo F. Padovan 6556b76bbd66SMat Martineau __unpack_control(chan, skb); 6557b76bbd66SMat Martineau 65580a708f8fSGustavo F. Padovan len = skb->len; 65590a708f8fSGustavo F. Padovan 65600a708f8fSGustavo F. Padovan /* 65610a708f8fSGustavo F. Padovan * We can just drop the corrupted I-frame here. 65620a708f8fSGustavo F. Padovan * Receiver will miss it and start proper recovery 6563cec8ab6eSMat Martineau * procedures and ask for retransmission. 65640a708f8fSGustavo F. Padovan */ 656547d1ec61SGustavo F. Padovan if (l2cap_check_fcs(chan, skb)) 65660a708f8fSGustavo F. Padovan goto drop; 65670a708f8fSGustavo F. Padovan 6568cec8ab6eSMat Martineau if (!control->sframe && control->sar == L2CAP_SAR_START) 656903a51213SAndrei Emeltchenko len -= L2CAP_SDULEN_SIZE; 65700a708f8fSGustavo F. Padovan 657147d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 657203a51213SAndrei Emeltchenko len -= L2CAP_FCS_SIZE; 65730a708f8fSGustavo F. Padovan 657447d1ec61SGustavo F. Padovan if (len > chan->mps) { 65755e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 65760a708f8fSGustavo F. Padovan goto drop; 65770a708f8fSGustavo F. Padovan } 65780a708f8fSGustavo F. Padovan 6579cec8ab6eSMat Martineau if (!control->sframe) { 6580cec8ab6eSMat Martineau int err; 65810a708f8fSGustavo F. Padovan 6582cec8ab6eSMat Martineau BT_DBG("iframe sar %d, reqseq %d, final %d, txseq %d", 6583cec8ab6eSMat Martineau control->sar, control->reqseq, control->final, 6584cec8ab6eSMat Martineau control->txseq); 6585836be934SAndrei Emeltchenko 6586cec8ab6eSMat Martineau /* Validate F-bit - F=0 always valid, F=1 only 6587cec8ab6eSMat Martineau * valid in TX WAIT_F 6588cec8ab6eSMat Martineau */ 6589cec8ab6eSMat Martineau if (control->final && chan->tx_state != L2CAP_TX_STATE_WAIT_F) 65900a708f8fSGustavo F. Padovan goto drop; 65910a708f8fSGustavo F. Padovan 6592cec8ab6eSMat Martineau if (chan->mode != L2CAP_MODE_STREAMING) { 6593cec8ab6eSMat Martineau event = L2CAP_EV_RECV_IFRAME; 6594cec8ab6eSMat Martineau err = l2cap_rx(chan, control, skb, event); 65950a708f8fSGustavo F. Padovan } else { 6596cec8ab6eSMat Martineau err = l2cap_stream_rx(chan, control, skb); 6597cec8ab6eSMat Martineau } 6598cec8ab6eSMat Martineau 6599cec8ab6eSMat Martineau if (err) 66005e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6601cec8ab6eSMat Martineau } else { 6602cec8ab6eSMat Martineau const u8 rx_func_to_event[4] = { 6603cec8ab6eSMat Martineau L2CAP_EV_RECV_RR, L2CAP_EV_RECV_REJ, 6604cec8ab6eSMat Martineau L2CAP_EV_RECV_RNR, L2CAP_EV_RECV_SREJ 6605cec8ab6eSMat Martineau }; 6606cec8ab6eSMat Martineau 6607cec8ab6eSMat Martineau /* Only I-frames are expected in streaming mode */ 6608cec8ab6eSMat Martineau if (chan->mode == L2CAP_MODE_STREAMING) 6609cec8ab6eSMat Martineau goto drop; 6610cec8ab6eSMat Martineau 6611cec8ab6eSMat Martineau BT_DBG("sframe reqseq %d, final %d, poll %d, super %d", 6612cec8ab6eSMat Martineau control->reqseq, control->final, control->poll, 6613cec8ab6eSMat Martineau control->super); 6614cec8ab6eSMat Martineau 66150a708f8fSGustavo F. Padovan if (len != 0) { 66161bb166e6SAndrei Emeltchenko BT_ERR("Trailing bytes: %d in sframe", len); 66175e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 66180a708f8fSGustavo F. Padovan goto drop; 66190a708f8fSGustavo F. Padovan } 66200a708f8fSGustavo F. Padovan 6621cec8ab6eSMat Martineau /* Validate F and P bits */ 6622cec8ab6eSMat Martineau if (control->final && (control->poll || 6623cec8ab6eSMat Martineau chan->tx_state != L2CAP_TX_STATE_WAIT_F)) 6624cec8ab6eSMat Martineau goto drop; 6625cec8ab6eSMat Martineau 6626cec8ab6eSMat Martineau event = rx_func_to_event[control->super]; 6627cec8ab6eSMat Martineau if (l2cap_rx(chan, control, skb, event)) 66285e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 66290a708f8fSGustavo F. Padovan } 66300a708f8fSGustavo F. Padovan 66310a708f8fSGustavo F. Padovan return 0; 66320a708f8fSGustavo F. Padovan 66330a708f8fSGustavo F. Padovan drop: 66340a708f8fSGustavo F. Padovan kfree_skb(skb); 66350a708f8fSGustavo F. Padovan return 0; 66360a708f8fSGustavo F. Padovan } 66370a708f8fSGustavo F. Padovan 6638b1c325c2SJohan Hedberg static void l2cap_chan_le_send_credits(struct l2cap_chan *chan) 6639b1c325c2SJohan Hedberg { 6640b1c325c2SJohan Hedberg struct l2cap_conn *conn = chan->conn; 6641b1c325c2SJohan Hedberg struct l2cap_le_credits pkt; 6642b1c325c2SJohan Hedberg u16 return_credits; 6643b1c325c2SJohan Hedberg 6644b1c325c2SJohan Hedberg /* We return more credits to the sender only after the amount of 6645b1c325c2SJohan Hedberg * credits falls below half of the initial amount. 6646b1c325c2SJohan Hedberg */ 6647f15b8ecfSJohan Hedberg if (chan->rx_credits >= (le_max_credits + 1) / 2) 6648b1c325c2SJohan Hedberg return; 6649b1c325c2SJohan Hedberg 6650f15b8ecfSJohan Hedberg return_credits = le_max_credits - chan->rx_credits; 6651b1c325c2SJohan Hedberg 6652b1c325c2SJohan Hedberg BT_DBG("chan %p returning %u credits to sender", chan, return_credits); 6653b1c325c2SJohan Hedberg 6654b1c325c2SJohan Hedberg chan->rx_credits += return_credits; 6655b1c325c2SJohan Hedberg 6656b1c325c2SJohan Hedberg pkt.cid = cpu_to_le16(chan->scid); 6657b1c325c2SJohan Hedberg pkt.credits = cpu_to_le16(return_credits); 6658b1c325c2SJohan Hedberg 6659b1c325c2SJohan Hedberg chan->ident = l2cap_get_ident(conn); 6660b1c325c2SJohan Hedberg 6661b1c325c2SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CREDITS, sizeof(pkt), &pkt); 6662b1c325c2SJohan Hedberg } 6663b1c325c2SJohan Hedberg 6664fad5fc89SJohan Hedberg static int l2cap_le_data_rcv(struct l2cap_chan *chan, struct sk_buff *skb) 6665fad5fc89SJohan Hedberg { 6666aac23bf6SJohan Hedberg int err; 6667fad5fc89SJohan Hedberg 6668aac23bf6SJohan Hedberg if (!chan->rx_credits) { 6669aac23bf6SJohan Hedberg BT_ERR("No credits to receive LE L2CAP data"); 6670dfd9774cSJohan Hedberg l2cap_send_disconn_req(chan, ECONNRESET); 6671fad5fc89SJohan Hedberg return -ENOBUFS; 6672aac23bf6SJohan Hedberg } 6673aac23bf6SJohan Hedberg 6674aac23bf6SJohan Hedberg if (chan->imtu < skb->len) { 6675aac23bf6SJohan Hedberg BT_ERR("Too big LE L2CAP PDU"); 6676aac23bf6SJohan Hedberg return -ENOBUFS; 6677aac23bf6SJohan Hedberg } 6678fad5fc89SJohan Hedberg 6679fad5fc89SJohan Hedberg chan->rx_credits--; 6680fad5fc89SJohan Hedberg BT_DBG("rx_credits %u -> %u", chan->rx_credits + 1, chan->rx_credits); 6681fad5fc89SJohan Hedberg 6682fad5fc89SJohan Hedberg l2cap_chan_le_send_credits(chan); 6683fad5fc89SJohan Hedberg 6684aac23bf6SJohan Hedberg err = 0; 6685aac23bf6SJohan Hedberg 6686aac23bf6SJohan Hedberg if (!chan->sdu) { 6687aac23bf6SJohan Hedberg u16 sdu_len; 6688aac23bf6SJohan Hedberg 6689aac23bf6SJohan Hedberg sdu_len = get_unaligned_le16(skb->data); 6690aac23bf6SJohan Hedberg skb_pull(skb, L2CAP_SDULEN_SIZE); 6691aac23bf6SJohan Hedberg 6692aac23bf6SJohan Hedberg BT_DBG("Start of new SDU. sdu_len %u skb->len %u imtu %u", 6693aac23bf6SJohan Hedberg sdu_len, skb->len, chan->imtu); 6694aac23bf6SJohan Hedberg 6695aac23bf6SJohan Hedberg if (sdu_len > chan->imtu) { 6696aac23bf6SJohan Hedberg BT_ERR("Too big LE L2CAP SDU length received"); 6697aac23bf6SJohan Hedberg err = -EMSGSIZE; 6698aac23bf6SJohan Hedberg goto failed; 6699aac23bf6SJohan Hedberg } 6700aac23bf6SJohan Hedberg 6701aac23bf6SJohan Hedberg if (skb->len > sdu_len) { 6702aac23bf6SJohan Hedberg BT_ERR("Too much LE L2CAP data received"); 6703aac23bf6SJohan Hedberg err = -EINVAL; 6704aac23bf6SJohan Hedberg goto failed; 6705aac23bf6SJohan Hedberg } 6706aac23bf6SJohan Hedberg 6707aac23bf6SJohan Hedberg if (skb->len == sdu_len) 6708fad5fc89SJohan Hedberg return chan->ops->recv(chan, skb); 6709aac23bf6SJohan Hedberg 6710aac23bf6SJohan Hedberg chan->sdu = skb; 6711aac23bf6SJohan Hedberg chan->sdu_len = sdu_len; 6712aac23bf6SJohan Hedberg chan->sdu_last_frag = skb; 6713aac23bf6SJohan Hedberg 6714aac23bf6SJohan Hedberg return 0; 6715aac23bf6SJohan Hedberg } 6716aac23bf6SJohan Hedberg 6717aac23bf6SJohan Hedberg BT_DBG("SDU fragment. chan->sdu->len %u skb->len %u chan->sdu_len %u", 6718aac23bf6SJohan Hedberg chan->sdu->len, skb->len, chan->sdu_len); 6719aac23bf6SJohan Hedberg 6720aac23bf6SJohan Hedberg if (chan->sdu->len + skb->len > chan->sdu_len) { 6721aac23bf6SJohan Hedberg BT_ERR("Too much LE L2CAP data received"); 6722aac23bf6SJohan Hedberg err = -EINVAL; 6723aac23bf6SJohan Hedberg goto failed; 6724aac23bf6SJohan Hedberg } 6725aac23bf6SJohan Hedberg 6726aac23bf6SJohan Hedberg append_skb_frag(chan->sdu, skb, &chan->sdu_last_frag); 6727aac23bf6SJohan Hedberg skb = NULL; 6728aac23bf6SJohan Hedberg 6729aac23bf6SJohan Hedberg if (chan->sdu->len == chan->sdu_len) { 6730aac23bf6SJohan Hedberg err = chan->ops->recv(chan, chan->sdu); 6731aac23bf6SJohan Hedberg if (!err) { 6732aac23bf6SJohan Hedberg chan->sdu = NULL; 6733aac23bf6SJohan Hedberg chan->sdu_last_frag = NULL; 6734aac23bf6SJohan Hedberg chan->sdu_len = 0; 6735aac23bf6SJohan Hedberg } 6736aac23bf6SJohan Hedberg } 6737aac23bf6SJohan Hedberg 6738aac23bf6SJohan Hedberg failed: 6739aac23bf6SJohan Hedberg if (err) { 6740aac23bf6SJohan Hedberg kfree_skb(skb); 6741aac23bf6SJohan Hedberg kfree_skb(chan->sdu); 6742aac23bf6SJohan Hedberg chan->sdu = NULL; 6743aac23bf6SJohan Hedberg chan->sdu_last_frag = NULL; 6744aac23bf6SJohan Hedberg chan->sdu_len = 0; 6745aac23bf6SJohan Hedberg } 6746aac23bf6SJohan Hedberg 6747aac23bf6SJohan Hedberg /* We can't return an error here since we took care of the skb 6748aac23bf6SJohan Hedberg * freeing internally. An error return would cause the caller to 6749aac23bf6SJohan Hedberg * do a double-free of the skb. 6750aac23bf6SJohan Hedberg */ 6751aac23bf6SJohan Hedberg return 0; 6752fad5fc89SJohan Hedberg } 6753fad5fc89SJohan Hedberg 675413ca56e0SAndrei Emeltchenko static void l2cap_data_channel(struct l2cap_conn *conn, u16 cid, 675513ca56e0SAndrei Emeltchenko struct sk_buff *skb) 67560a708f8fSGustavo F. Padovan { 675748454079SGustavo F. Padovan struct l2cap_chan *chan; 67580a708f8fSGustavo F. Padovan 6759baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, cid); 676048454079SGustavo F. Padovan if (!chan) { 676197e8e89dSAndrei Emeltchenko if (cid == L2CAP_CID_A2MP) { 676297e8e89dSAndrei Emeltchenko chan = a2mp_channel_create(conn, skb); 676397e8e89dSAndrei Emeltchenko if (!chan) { 676497e8e89dSAndrei Emeltchenko kfree_skb(skb); 676513ca56e0SAndrei Emeltchenko return; 676697e8e89dSAndrei Emeltchenko } 676797e8e89dSAndrei Emeltchenko 676897e8e89dSAndrei Emeltchenko l2cap_chan_lock(chan); 676997e8e89dSAndrei Emeltchenko } else { 67700a708f8fSGustavo F. Padovan BT_DBG("unknown cid 0x%4.4x", cid); 67716be36555SAndrei Emeltchenko /* Drop packet and return */ 67723379013bSDan Carpenter kfree_skb(skb); 677313ca56e0SAndrei Emeltchenko return; 67740a708f8fSGustavo F. Padovan } 677597e8e89dSAndrei Emeltchenko } 67760a708f8fSGustavo F. Padovan 677749208c9cSGustavo F. Padovan BT_DBG("chan %p, len %d", chan, skb->len); 67780a708f8fSGustavo F. Padovan 677989bc500eSGustavo F. Padovan if (chan->state != BT_CONNECTED) 67800a708f8fSGustavo F. Padovan goto drop; 67810a708f8fSGustavo F. Padovan 67820c1bc5c6SGustavo F. Padovan switch (chan->mode) { 678338319713SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 6784fad5fc89SJohan Hedberg if (l2cap_le_data_rcv(chan, skb) < 0) 6785fad5fc89SJohan Hedberg goto drop; 6786fad5fc89SJohan Hedberg 6787fad5fc89SJohan Hedberg goto done; 6788fad5fc89SJohan Hedberg 67890a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 67900a708f8fSGustavo F. Padovan /* If socket recv buffers overflows we drop data here 67910a708f8fSGustavo F. Padovan * which is *bad* because L2CAP has to be reliable. 67920a708f8fSGustavo F. Padovan * But we don't have any other choice. L2CAP doesn't 67930a708f8fSGustavo F. Padovan * provide flow control mechanism. */ 67940a708f8fSGustavo F. Padovan 67952c96e03dSSzymon Janc if (chan->imtu < skb->len) { 67962c96e03dSSzymon Janc BT_ERR("Dropping L2CAP data: receive buffer overflow"); 67970a708f8fSGustavo F. Padovan goto drop; 67982c96e03dSSzymon Janc } 67990a708f8fSGustavo F. Padovan 680080b98027SGustavo Padovan if (!chan->ops->recv(chan, skb)) 68010a708f8fSGustavo F. Padovan goto done; 68020a708f8fSGustavo F. Padovan break; 68030a708f8fSGustavo F. Padovan 68040a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 68050a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 6806cec8ab6eSMat Martineau l2cap_data_rcv(chan, skb); 68070a708f8fSGustavo F. Padovan goto done; 68080a708f8fSGustavo F. Padovan 68090a708f8fSGustavo F. Padovan default: 68100c1bc5c6SGustavo F. Padovan BT_DBG("chan %p: bad mode 0x%2.2x", chan, chan->mode); 68110a708f8fSGustavo F. Padovan break; 68120a708f8fSGustavo F. Padovan } 68130a708f8fSGustavo F. Padovan 68140a708f8fSGustavo F. Padovan drop: 68150a708f8fSGustavo F. Padovan kfree_skb(skb); 68160a708f8fSGustavo F. Padovan 68170a708f8fSGustavo F. Padovan done: 68186be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 68190a708f8fSGustavo F. Padovan } 68200a708f8fSGustavo F. Padovan 682184104b24SAndrei Emeltchenko static void l2cap_conless_channel(struct l2cap_conn *conn, __le16 psm, 682284104b24SAndrei Emeltchenko struct sk_buff *skb) 68230a708f8fSGustavo F. Padovan { 6824ae4fd2d3SMarcel Holtmann struct hci_conn *hcon = conn->hcon; 682523691d75SGustavo F. Padovan struct l2cap_chan *chan; 68260a708f8fSGustavo F. Padovan 6827ae4fd2d3SMarcel Holtmann if (hcon->type != ACL_LINK) 6828a24cce14SJohan Hedberg goto free_skb; 6829ae4fd2d3SMarcel Holtmann 6830bf20fd4eSJohan Hedberg chan = l2cap_global_chan_by_psm(0, psm, &hcon->src, &hcon->dst, 6831bf20fd4eSJohan Hedberg ACL_LINK); 683223691d75SGustavo F. Padovan if (!chan) 6833a24cce14SJohan Hedberg goto free_skb; 68340a708f8fSGustavo F. Padovan 68355b4cedaaSAndrei Emeltchenko BT_DBG("chan %p, len %d", chan, skb->len); 68360a708f8fSGustavo F. Padovan 683789bc500eSGustavo F. Padovan if (chan->state != BT_BOUND && chan->state != BT_CONNECTED) 68380a708f8fSGustavo F. Padovan goto drop; 68390a708f8fSGustavo F. Padovan 6840e13e21dcSVinicius Costa Gomes if (chan->imtu < skb->len) 68410a708f8fSGustavo F. Padovan goto drop; 68420a708f8fSGustavo F. Padovan 68432edf870dSMarcel Holtmann /* Store remote BD_ADDR and PSM for msg_name */ 684406ae3314SMarcel Holtmann bacpy(&bt_cb(skb)->bdaddr, &hcon->dst); 68452edf870dSMarcel Holtmann bt_cb(skb)->psm = psm; 68462edf870dSMarcel Holtmann 6847a24cce14SJohan Hedberg if (!chan->ops->recv(chan, skb)) { 6848a24cce14SJohan Hedberg l2cap_chan_put(chan); 684984104b24SAndrei Emeltchenko return; 6850a24cce14SJohan Hedberg } 68510a708f8fSGustavo F. Padovan 68520a708f8fSGustavo F. Padovan drop: 6853a24cce14SJohan Hedberg l2cap_chan_put(chan); 6854a24cce14SJohan Hedberg free_skb: 68550a708f8fSGustavo F. Padovan kfree_skb(skb); 68560a708f8fSGustavo F. Padovan } 68570a708f8fSGustavo F. Padovan 68580a708f8fSGustavo F. Padovan static void l2cap_recv_frame(struct l2cap_conn *conn, struct sk_buff *skb) 68590a708f8fSGustavo F. Padovan { 68600a708f8fSGustavo F. Padovan struct l2cap_hdr *lh = (void *) skb->data; 686161a939c6SJohan Hedberg struct hci_conn *hcon = conn->hcon; 68620a708f8fSGustavo F. Padovan u16 cid, len; 68630a708f8fSGustavo F. Padovan __le16 psm; 68640a708f8fSGustavo F. Padovan 686561a939c6SJohan Hedberg if (hcon->state != BT_CONNECTED) { 686661a939c6SJohan Hedberg BT_DBG("queueing pending rx skb"); 686761a939c6SJohan Hedberg skb_queue_tail(&conn->pending_rx, skb); 686861a939c6SJohan Hedberg return; 686961a939c6SJohan Hedberg } 687061a939c6SJohan Hedberg 68710a708f8fSGustavo F. Padovan skb_pull(skb, L2CAP_HDR_SIZE); 68720a708f8fSGustavo F. Padovan cid = __le16_to_cpu(lh->cid); 68730a708f8fSGustavo F. Padovan len = __le16_to_cpu(lh->len); 68740a708f8fSGustavo F. Padovan 68750a708f8fSGustavo F. Padovan if (len != skb->len) { 68760a708f8fSGustavo F. Padovan kfree_skb(skb); 68770a708f8fSGustavo F. Padovan return; 68780a708f8fSGustavo F. Padovan } 68790a708f8fSGustavo F. Padovan 68809e1d7e15SJohan Hedberg /* Since we can't actively block incoming LE connections we must 68819e1d7e15SJohan Hedberg * at least ensure that we ignore incoming data from them. 68829e1d7e15SJohan Hedberg */ 68839e1d7e15SJohan Hedberg if (hcon->type == LE_LINK && 6884dcc36c16SJohan Hedberg hci_bdaddr_list_lookup(&hcon->hdev->blacklist, &hcon->dst, 6885e493150eSJohan Hedberg bdaddr_type(hcon, hcon->dst_type))) { 6886e493150eSJohan Hedberg kfree_skb(skb); 6887e493150eSJohan Hedberg return; 6888e493150eSJohan Hedberg } 6889e493150eSJohan Hedberg 68900a708f8fSGustavo F. Padovan BT_DBG("len %d, cid 0x%4.4x", len, cid); 68910a708f8fSGustavo F. Padovan 68920a708f8fSGustavo F. Padovan switch (cid) { 68930a708f8fSGustavo F. Padovan case L2CAP_CID_SIGNALING: 68940a708f8fSGustavo F. Padovan l2cap_sig_channel(conn, skb); 68950a708f8fSGustavo F. Padovan break; 68960a708f8fSGustavo F. Padovan 68970a708f8fSGustavo F. Padovan case L2CAP_CID_CONN_LESS: 6898097db76cSAndrei Emeltchenko psm = get_unaligned((__le16 *) skb->data); 68990181a70fSAndrei Emeltchenko skb_pull(skb, L2CAP_PSMLEN_SIZE); 69000a708f8fSGustavo F. Padovan l2cap_conless_channel(conn, psm, skb); 69010a708f8fSGustavo F. Padovan break; 69020a708f8fSGustavo F. Padovan 6903a2877629SMarcel Holtmann case L2CAP_CID_LE_SIGNALING: 6904a2877629SMarcel Holtmann l2cap_le_sig_channel(conn, skb); 6905a2877629SMarcel Holtmann break; 6906a2877629SMarcel Holtmann 69070a708f8fSGustavo F. Padovan default: 69080a708f8fSGustavo F. Padovan l2cap_data_channel(conn, cid, skb); 69090a708f8fSGustavo F. Padovan break; 69100a708f8fSGustavo F. Padovan } 69110a708f8fSGustavo F. Padovan } 69120a708f8fSGustavo F. Padovan 691361a939c6SJohan Hedberg static void process_pending_rx(struct work_struct *work) 691461a939c6SJohan Hedberg { 691561a939c6SJohan Hedberg struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 691661a939c6SJohan Hedberg pending_rx_work); 691761a939c6SJohan Hedberg struct sk_buff *skb; 691861a939c6SJohan Hedberg 691961a939c6SJohan Hedberg BT_DBG(""); 692061a939c6SJohan Hedberg 692161a939c6SJohan Hedberg while ((skb = skb_dequeue(&conn->pending_rx))) 692261a939c6SJohan Hedberg l2cap_recv_frame(conn, skb); 692361a939c6SJohan Hedberg } 692461a939c6SJohan Hedberg 6925162b49e7SJohan Hedberg static struct l2cap_conn *l2cap_conn_add(struct hci_conn *hcon) 6926162b49e7SJohan Hedberg { 6927162b49e7SJohan Hedberg struct l2cap_conn *conn = hcon->l2cap_data; 6928162b49e7SJohan Hedberg struct hci_chan *hchan; 6929162b49e7SJohan Hedberg 6930162b49e7SJohan Hedberg if (conn) 6931162b49e7SJohan Hedberg return conn; 6932162b49e7SJohan Hedberg 6933162b49e7SJohan Hedberg hchan = hci_chan_create(hcon); 6934162b49e7SJohan Hedberg if (!hchan) 6935162b49e7SJohan Hedberg return NULL; 6936162b49e7SJohan Hedberg 693727f70f3eSJohan Hedberg conn = kzalloc(sizeof(*conn), GFP_KERNEL); 6938162b49e7SJohan Hedberg if (!conn) { 6939162b49e7SJohan Hedberg hci_chan_del(hchan); 6940162b49e7SJohan Hedberg return NULL; 6941162b49e7SJohan Hedberg } 6942162b49e7SJohan Hedberg 6943162b49e7SJohan Hedberg kref_init(&conn->ref); 6944162b49e7SJohan Hedberg hcon->l2cap_data = conn; 694551bb8457SJohan Hedberg conn->hcon = hci_conn_get(hcon); 6946162b49e7SJohan Hedberg conn->hchan = hchan; 6947162b49e7SJohan Hedberg 6948162b49e7SJohan Hedberg BT_DBG("hcon %p conn %p hchan %p", hcon, conn, hchan); 6949162b49e7SJohan Hedberg 6950162b49e7SJohan Hedberg switch (hcon->type) { 6951162b49e7SJohan Hedberg case LE_LINK: 6952162b49e7SJohan Hedberg if (hcon->hdev->le_mtu) { 6953162b49e7SJohan Hedberg conn->mtu = hcon->hdev->le_mtu; 6954162b49e7SJohan Hedberg break; 6955162b49e7SJohan Hedberg } 6956162b49e7SJohan Hedberg /* fall through */ 6957162b49e7SJohan Hedberg default: 6958162b49e7SJohan Hedberg conn->mtu = hcon->hdev->acl_mtu; 6959162b49e7SJohan Hedberg break; 6960162b49e7SJohan Hedberg } 6961162b49e7SJohan Hedberg 6962162b49e7SJohan Hedberg conn->feat_mask = 0; 6963162b49e7SJohan Hedberg 6964*0bd49fc7SJohan Hedberg conn->local_fixed_chan = L2CAP_FC_SIG_BREDR | L2CAP_FC_CONNLESS; 6965*0bd49fc7SJohan Hedberg 6966*0bd49fc7SJohan Hedberg if (hcon->type == ACL_LINK && 6967*0bd49fc7SJohan Hedberg test_bit(HCI_HS_ENABLED, &hcon->hdev->dev_flags)) 6968*0bd49fc7SJohan Hedberg conn->local_fixed_chan |= L2CAP_FC_A2MP; 6969162b49e7SJohan Hedberg 69705a54e7c8SMarcel Holtmann mutex_init(&conn->ident_lock); 6971162b49e7SJohan Hedberg mutex_init(&conn->chan_lock); 6972162b49e7SJohan Hedberg 6973162b49e7SJohan Hedberg INIT_LIST_HEAD(&conn->chan_l); 6974162b49e7SJohan Hedberg INIT_LIST_HEAD(&conn->users); 6975162b49e7SJohan Hedberg 6976162b49e7SJohan Hedberg INIT_DELAYED_WORK(&conn->info_timer, l2cap_info_timeout); 6977162b49e7SJohan Hedberg 697861a939c6SJohan Hedberg skb_queue_head_init(&conn->pending_rx); 697961a939c6SJohan Hedberg INIT_WORK(&conn->pending_rx_work, process_pending_rx); 6980f3d82d0cSJohan Hedberg INIT_WORK(&conn->id_addr_update_work, l2cap_conn_update_id_addr); 698161a939c6SJohan Hedberg 6982162b49e7SJohan Hedberg conn->disc_reason = HCI_ERROR_REMOTE_USER_TERM; 6983162b49e7SJohan Hedberg 6984162b49e7SJohan Hedberg return conn; 6985162b49e7SJohan Hedberg } 6986162b49e7SJohan Hedberg 6987162b49e7SJohan Hedberg static bool is_valid_psm(u16 psm, u8 dst_type) { 6988162b49e7SJohan Hedberg if (!psm) 6989162b49e7SJohan Hedberg return false; 6990162b49e7SJohan Hedberg 6991162b49e7SJohan Hedberg if (bdaddr_type_is_le(dst_type)) 6992162b49e7SJohan Hedberg return (psm <= 0x00ff); 6993162b49e7SJohan Hedberg 6994162b49e7SJohan Hedberg /* PSM must be odd and lsb of upper byte must be 0 */ 6995162b49e7SJohan Hedberg return ((psm & 0x0101) == 0x0001); 6996162b49e7SJohan Hedberg } 6997162b49e7SJohan Hedberg 6998162b49e7SJohan Hedberg int l2cap_chan_connect(struct l2cap_chan *chan, __le16 psm, u16 cid, 6999162b49e7SJohan Hedberg bdaddr_t *dst, u8 dst_type) 7000162b49e7SJohan Hedberg { 7001162b49e7SJohan Hedberg struct l2cap_conn *conn; 7002162b49e7SJohan Hedberg struct hci_conn *hcon; 7003162b49e7SJohan Hedberg struct hci_dev *hdev; 7004162b49e7SJohan Hedberg int err; 7005162b49e7SJohan Hedberg 7006162b49e7SJohan Hedberg BT_DBG("%pMR -> %pMR (type %u) psm 0x%2.2x", &chan->src, dst, 7007162b49e7SJohan Hedberg dst_type, __le16_to_cpu(psm)); 7008162b49e7SJohan Hedberg 7009162b49e7SJohan Hedberg hdev = hci_get_route(dst, &chan->src); 7010162b49e7SJohan Hedberg if (!hdev) 7011162b49e7SJohan Hedberg return -EHOSTUNREACH; 7012162b49e7SJohan Hedberg 7013162b49e7SJohan Hedberg hci_dev_lock(hdev); 7014162b49e7SJohan Hedberg 7015162b49e7SJohan Hedberg if (!is_valid_psm(__le16_to_cpu(psm), dst_type) && !cid && 7016162b49e7SJohan Hedberg chan->chan_type != L2CAP_CHAN_RAW) { 7017162b49e7SJohan Hedberg err = -EINVAL; 7018162b49e7SJohan Hedberg goto done; 7019162b49e7SJohan Hedberg } 7020162b49e7SJohan Hedberg 702121626e62SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED && !psm) { 702221626e62SJohan Hedberg err = -EINVAL; 702321626e62SJohan Hedberg goto done; 702421626e62SJohan Hedberg } 702521626e62SJohan Hedberg 702621626e62SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_FIXED && !cid) { 7027162b49e7SJohan Hedberg err = -EINVAL; 7028162b49e7SJohan Hedberg goto done; 7029162b49e7SJohan Hedberg } 7030162b49e7SJohan Hedberg 7031162b49e7SJohan Hedberg switch (chan->mode) { 7032162b49e7SJohan Hedberg case L2CAP_MODE_BASIC: 7033162b49e7SJohan Hedberg break; 7034162b49e7SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 7035162b49e7SJohan Hedberg l2cap_le_flowctl_init(chan); 7036162b49e7SJohan Hedberg break; 7037162b49e7SJohan Hedberg case L2CAP_MODE_ERTM: 7038162b49e7SJohan Hedberg case L2CAP_MODE_STREAMING: 7039162b49e7SJohan Hedberg if (!disable_ertm) 7040162b49e7SJohan Hedberg break; 7041162b49e7SJohan Hedberg /* fall through */ 7042162b49e7SJohan Hedberg default: 7043beb19e4cSJohan Hedberg err = -EOPNOTSUPP; 7044162b49e7SJohan Hedberg goto done; 7045162b49e7SJohan Hedberg } 7046162b49e7SJohan Hedberg 7047162b49e7SJohan Hedberg switch (chan->state) { 7048162b49e7SJohan Hedberg case BT_CONNECT: 7049162b49e7SJohan Hedberg case BT_CONNECT2: 7050162b49e7SJohan Hedberg case BT_CONFIG: 7051162b49e7SJohan Hedberg /* Already connecting */ 7052162b49e7SJohan Hedberg err = 0; 7053162b49e7SJohan Hedberg goto done; 7054162b49e7SJohan Hedberg 7055162b49e7SJohan Hedberg case BT_CONNECTED: 7056162b49e7SJohan Hedberg /* Already connected */ 7057162b49e7SJohan Hedberg err = -EISCONN; 7058162b49e7SJohan Hedberg goto done; 7059162b49e7SJohan Hedberg 7060162b49e7SJohan Hedberg case BT_OPEN: 7061162b49e7SJohan Hedberg case BT_BOUND: 7062162b49e7SJohan Hedberg /* Can connect */ 7063162b49e7SJohan Hedberg break; 7064162b49e7SJohan Hedberg 7065162b49e7SJohan Hedberg default: 7066162b49e7SJohan Hedberg err = -EBADFD; 7067162b49e7SJohan Hedberg goto done; 7068162b49e7SJohan Hedberg } 7069162b49e7SJohan Hedberg 7070162b49e7SJohan Hedberg /* Set destination address and psm */ 7071162b49e7SJohan Hedberg bacpy(&chan->dst, dst); 7072162b49e7SJohan Hedberg chan->dst_type = dst_type; 7073162b49e7SJohan Hedberg 7074162b49e7SJohan Hedberg chan->psm = psm; 7075162b49e7SJohan Hedberg chan->dcid = cid; 7076162b49e7SJohan Hedberg 70776f77d8c7SAndre Guedes if (bdaddr_type_is_le(dst_type)) { 7078e804d25dSJohan Hedberg u8 role; 7079cdd6275eSJohan Hedberg 70806f77d8c7SAndre Guedes /* Convert from L2CAP channel address type to HCI address type 70816f77d8c7SAndre Guedes */ 70826f77d8c7SAndre Guedes if (dst_type == BDADDR_LE_PUBLIC) 70836f77d8c7SAndre Guedes dst_type = ADDR_LE_DEV_PUBLIC; 70846f77d8c7SAndre Guedes else 70856f77d8c7SAndre Guedes dst_type = ADDR_LE_DEV_RANDOM; 70866f77d8c7SAndre Guedes 7087e804d25dSJohan Hedberg if (test_bit(HCI_ADVERTISING, &hdev->dev_flags)) 7088e804d25dSJohan Hedberg role = HCI_ROLE_SLAVE; 7089e804d25dSJohan Hedberg else 7090e804d25dSJohan Hedberg role = HCI_ROLE_MASTER; 7091cdd6275eSJohan Hedberg 709204a6c589SAndre Guedes hcon = hci_connect_le(hdev, dst, dst_type, chan->sec_level, 7093e804d25dSJohan Hedberg HCI_LE_CONN_TIMEOUT, role); 70946f77d8c7SAndre Guedes } else { 7095d93375a8SJohan Hedberg u8 auth_type = l2cap_get_auth_type(chan); 709604a6c589SAndre Guedes hcon = hci_connect_acl(hdev, dst, chan->sec_level, auth_type); 70976f77d8c7SAndre Guedes } 7098162b49e7SJohan Hedberg 7099162b49e7SJohan Hedberg if (IS_ERR(hcon)) { 7100162b49e7SJohan Hedberg err = PTR_ERR(hcon); 7101162b49e7SJohan Hedberg goto done; 7102162b49e7SJohan Hedberg } 7103162b49e7SJohan Hedberg 7104162b49e7SJohan Hedberg conn = l2cap_conn_add(hcon); 7105162b49e7SJohan Hedberg if (!conn) { 7106162b49e7SJohan Hedberg hci_conn_drop(hcon); 7107162b49e7SJohan Hedberg err = -ENOMEM; 7108162b49e7SJohan Hedberg goto done; 7109162b49e7SJohan Hedberg } 7110162b49e7SJohan Hedberg 711102e246aeSJohan Hedberg mutex_lock(&conn->chan_lock); 711202e246aeSJohan Hedberg l2cap_chan_lock(chan); 711302e246aeSJohan Hedberg 7114162b49e7SJohan Hedberg if (cid && __l2cap_get_chan_by_dcid(conn, cid)) { 7115162b49e7SJohan Hedberg hci_conn_drop(hcon); 7116162b49e7SJohan Hedberg err = -EBUSY; 711702e246aeSJohan Hedberg goto chan_unlock; 7118162b49e7SJohan Hedberg } 7119162b49e7SJohan Hedberg 7120162b49e7SJohan Hedberg /* Update source addr of the socket */ 7121162b49e7SJohan Hedberg bacpy(&chan->src, &hcon->src); 7122162b49e7SJohan Hedberg chan->src_type = bdaddr_type(hcon, hcon->src_type); 7123162b49e7SJohan Hedberg 712402e246aeSJohan Hedberg __l2cap_chan_add(conn, chan); 7125162b49e7SJohan Hedberg 7126162b49e7SJohan Hedberg /* l2cap_chan_add takes its own ref so we can drop this one */ 7127162b49e7SJohan Hedberg hci_conn_drop(hcon); 7128162b49e7SJohan Hedberg 7129162b49e7SJohan Hedberg l2cap_state_change(chan, BT_CONNECT); 7130162b49e7SJohan Hedberg __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 7131162b49e7SJohan Hedberg 713261202e4dSJohan Hedberg /* Release chan->sport so that it can be reused by other 713361202e4dSJohan Hedberg * sockets (as it's only used for listening sockets). 713461202e4dSJohan Hedberg */ 713561202e4dSJohan Hedberg write_lock(&chan_list_lock); 713661202e4dSJohan Hedberg chan->sport = 0; 713761202e4dSJohan Hedberg write_unlock(&chan_list_lock); 713861202e4dSJohan Hedberg 7139162b49e7SJohan Hedberg if (hcon->state == BT_CONNECTED) { 7140162b49e7SJohan Hedberg if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 7141162b49e7SJohan Hedberg __clear_chan_timer(chan); 7142e7cafc45SJohan Hedberg if (l2cap_chan_check_security(chan, true)) 7143162b49e7SJohan Hedberg l2cap_state_change(chan, BT_CONNECTED); 7144162b49e7SJohan Hedberg } else 7145162b49e7SJohan Hedberg l2cap_do_start(chan); 7146162b49e7SJohan Hedberg } 7147162b49e7SJohan Hedberg 7148162b49e7SJohan Hedberg err = 0; 7149162b49e7SJohan Hedberg 715002e246aeSJohan Hedberg chan_unlock: 7151162b49e7SJohan Hedberg l2cap_chan_unlock(chan); 715202e246aeSJohan Hedberg mutex_unlock(&conn->chan_lock); 715302e246aeSJohan Hedberg done: 7154162b49e7SJohan Hedberg hci_dev_unlock(hdev); 7155162b49e7SJohan Hedberg hci_dev_put(hdev); 7156162b49e7SJohan Hedberg return err; 7157162b49e7SJohan Hedberg } 71586b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_connect); 7159162b49e7SJohan Hedberg 71600a708f8fSGustavo F. Padovan /* ---- L2CAP interface with lower layer (HCI) ---- */ 71610a708f8fSGustavo F. Padovan 7162686ebf28SUlisses Furquim int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr) 71630a708f8fSGustavo F. Padovan { 71640a708f8fSGustavo F. Padovan int exact = 0, lm1 = 0, lm2 = 0; 716523691d75SGustavo F. Padovan struct l2cap_chan *c; 71660a708f8fSGustavo F. Padovan 71676ed93dc6SAndrei Emeltchenko BT_DBG("hdev %s, bdaddr %pMR", hdev->name, bdaddr); 71680a708f8fSGustavo F. Padovan 71690a708f8fSGustavo F. Padovan /* Find listening sockets and check their link_mode */ 717023691d75SGustavo F. Padovan read_lock(&chan_list_lock); 717123691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 717289bc500eSGustavo F. Padovan if (c->state != BT_LISTEN) 71730a708f8fSGustavo F. Padovan continue; 71740a708f8fSGustavo F. Padovan 71757eafc59eSMarcel Holtmann if (!bacmp(&c->src, &hdev->bdaddr)) { 71760a708f8fSGustavo F. Padovan lm1 |= HCI_LM_ACCEPT; 717743bd0f32SAndrei Emeltchenko if (test_bit(FLAG_ROLE_SWITCH, &c->flags)) 71780a708f8fSGustavo F. Padovan lm1 |= HCI_LM_MASTER; 71790a708f8fSGustavo F. Padovan exact++; 71807eafc59eSMarcel Holtmann } else if (!bacmp(&c->src, BDADDR_ANY)) { 71810a708f8fSGustavo F. Padovan lm2 |= HCI_LM_ACCEPT; 718243bd0f32SAndrei Emeltchenko if (test_bit(FLAG_ROLE_SWITCH, &c->flags)) 71830a708f8fSGustavo F. Padovan lm2 |= HCI_LM_MASTER; 71840a708f8fSGustavo F. Padovan } 71850a708f8fSGustavo F. Padovan } 718623691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 71870a708f8fSGustavo F. Padovan 71880a708f8fSGustavo F. Padovan return exact ? lm1 : lm2; 71890a708f8fSGustavo F. Padovan } 71900a708f8fSGustavo F. Padovan 7191e760ec12SJohan Hedberg /* Find the next fixed channel in BT_LISTEN state, continue iteration 7192e760ec12SJohan Hedberg * from an existing channel in the list or from the beginning of the 7193e760ec12SJohan Hedberg * global list (by passing NULL as first parameter). 7194e760ec12SJohan Hedberg */ 7195e760ec12SJohan Hedberg static struct l2cap_chan *l2cap_global_fixed_chan(struct l2cap_chan *c, 719654a1b626SJohan Hedberg bdaddr_t *src, u8 link_type) 7197e760ec12SJohan Hedberg { 7198e760ec12SJohan Hedberg read_lock(&chan_list_lock); 7199e760ec12SJohan Hedberg 7200e760ec12SJohan Hedberg if (c) 7201e760ec12SJohan Hedberg c = list_next_entry(c, global_l); 7202e760ec12SJohan Hedberg else 7203e760ec12SJohan Hedberg c = list_entry(chan_list.next, typeof(*c), global_l); 7204e760ec12SJohan Hedberg 7205e760ec12SJohan Hedberg list_for_each_entry_from(c, &chan_list, global_l) { 7206e760ec12SJohan Hedberg if (c->chan_type != L2CAP_CHAN_FIXED) 7207e760ec12SJohan Hedberg continue; 7208e760ec12SJohan Hedberg if (c->state != BT_LISTEN) 7209e760ec12SJohan Hedberg continue; 7210e760ec12SJohan Hedberg if (bacmp(&c->src, src) && bacmp(&c->src, BDADDR_ANY)) 7211e760ec12SJohan Hedberg continue; 721254a1b626SJohan Hedberg if (link_type == ACL_LINK && c->src_type != BDADDR_BREDR) 721354a1b626SJohan Hedberg continue; 721454a1b626SJohan Hedberg if (link_type == LE_LINK && c->src_type == BDADDR_BREDR) 721554a1b626SJohan Hedberg continue; 7216e760ec12SJohan Hedberg 7217e760ec12SJohan Hedberg l2cap_chan_hold(c); 7218e760ec12SJohan Hedberg read_unlock(&chan_list_lock); 7219e760ec12SJohan Hedberg return c; 7220e760ec12SJohan Hedberg } 7221e760ec12SJohan Hedberg 7222e760ec12SJohan Hedberg read_unlock(&chan_list_lock); 7223e760ec12SJohan Hedberg 7224e760ec12SJohan Hedberg return NULL; 7225e760ec12SJohan Hedberg } 7226e760ec12SJohan Hedberg 72279e664631SAndrei Emeltchenko void l2cap_connect_cfm(struct hci_conn *hcon, u8 status) 72280a708f8fSGustavo F. Padovan { 7229e760ec12SJohan Hedberg struct hci_dev *hdev = hcon->hdev; 72300a708f8fSGustavo F. Padovan struct l2cap_conn *conn; 7231e760ec12SJohan Hedberg struct l2cap_chan *pchan; 7232e760ec12SJohan Hedberg u8 dst_type; 72330a708f8fSGustavo F. Padovan 72346ed93dc6SAndrei Emeltchenko BT_DBG("hcon %p bdaddr %pMR status %d", hcon, &hcon->dst, status); 72350a708f8fSGustavo F. Padovan 7236dc0f5088SJohan Hedberg if (status) { 7237e175072fSJoe Perches l2cap_conn_del(hcon, bt_to_errno(status)); 7238dc0f5088SJohan Hedberg return; 7239ba6fc317SAndrei Emeltchenko } 7240dc0f5088SJohan Hedberg 7241dc0f5088SJohan Hedberg conn = l2cap_conn_add(hcon); 7242dc0f5088SJohan Hedberg if (!conn) 7243dc0f5088SJohan Hedberg return; 7244dc0f5088SJohan Hedberg 7245e760ec12SJohan Hedberg dst_type = bdaddr_type(hcon, hcon->dst_type); 7246e760ec12SJohan Hedberg 7247e760ec12SJohan Hedberg /* If device is blocked, do not create channels for it */ 7248e760ec12SJohan Hedberg if (hci_bdaddr_list_lookup(&hdev->blacklist, &hcon->dst, dst_type)) 7249e760ec12SJohan Hedberg return; 7250e760ec12SJohan Hedberg 7251e760ec12SJohan Hedberg /* Find fixed channels and notify them of the new connection. We 7252e760ec12SJohan Hedberg * use multiple individual lookups, continuing each time where 7253e760ec12SJohan Hedberg * we left off, because the list lock would prevent calling the 7254e760ec12SJohan Hedberg * potentially sleeping l2cap_chan_lock() function. 7255e760ec12SJohan Hedberg */ 725654a1b626SJohan Hedberg pchan = l2cap_global_fixed_chan(NULL, &hdev->bdaddr, hcon->type); 7257e760ec12SJohan Hedberg while (pchan) { 7258e760ec12SJohan Hedberg struct l2cap_chan *chan, *next; 7259e760ec12SJohan Hedberg 7260e760ec12SJohan Hedberg /* Client fixed channels should override server ones */ 7261e760ec12SJohan Hedberg if (__l2cap_get_chan_by_dcid(conn, pchan->scid)) 7262e760ec12SJohan Hedberg goto next; 7263e760ec12SJohan Hedberg 7264e760ec12SJohan Hedberg l2cap_chan_lock(pchan); 7265e760ec12SJohan Hedberg chan = pchan->ops->new_connection(pchan); 7266e760ec12SJohan Hedberg if (chan) { 7267e760ec12SJohan Hedberg bacpy(&chan->src, &hcon->src); 7268e760ec12SJohan Hedberg bacpy(&chan->dst, &hcon->dst); 7269e760ec12SJohan Hedberg chan->src_type = bdaddr_type(hcon, hcon->src_type); 7270e760ec12SJohan Hedberg chan->dst_type = dst_type; 7271e760ec12SJohan Hedberg 7272e760ec12SJohan Hedberg __l2cap_chan_add(conn, chan); 7273e760ec12SJohan Hedberg } 7274e760ec12SJohan Hedberg 7275e760ec12SJohan Hedberg l2cap_chan_unlock(pchan); 7276e760ec12SJohan Hedberg next: 727754a1b626SJohan Hedberg next = l2cap_global_fixed_chan(pchan, &hdev->bdaddr, 727854a1b626SJohan Hedberg hcon->type); 7279e760ec12SJohan Hedberg l2cap_chan_put(pchan); 7280e760ec12SJohan Hedberg pchan = next; 7281e760ec12SJohan Hedberg } 7282e760ec12SJohan Hedberg 7283dc0f5088SJohan Hedberg l2cap_conn_ready(conn); 72840a708f8fSGustavo F. Padovan } 72850a708f8fSGustavo F. Padovan 7286686ebf28SUlisses Furquim int l2cap_disconn_ind(struct hci_conn *hcon) 72870a708f8fSGustavo F. Padovan { 72880a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 72890a708f8fSGustavo F. Padovan 72900a708f8fSGustavo F. Padovan BT_DBG("hcon %p", hcon); 72910a708f8fSGustavo F. Padovan 7292686ebf28SUlisses Furquim if (!conn) 72939f5a0d7bSAndrei Emeltchenko return HCI_ERROR_REMOTE_USER_TERM; 72940a708f8fSGustavo F. Padovan return conn->disc_reason; 72950a708f8fSGustavo F. Padovan } 72960a708f8fSGustavo F. Padovan 72979e664631SAndrei Emeltchenko void l2cap_disconn_cfm(struct hci_conn *hcon, u8 reason) 72980a708f8fSGustavo F. Padovan { 72990a708f8fSGustavo F. Padovan BT_DBG("hcon %p reason %d", hcon, reason); 73000a708f8fSGustavo F. Padovan 7301e175072fSJoe Perches l2cap_conn_del(hcon, bt_to_errno(reason)); 73020a708f8fSGustavo F. Padovan } 73030a708f8fSGustavo F. Padovan 73044343478fSGustavo F. Padovan static inline void l2cap_check_encryption(struct l2cap_chan *chan, u8 encrypt) 73050a708f8fSGustavo F. Padovan { 7306715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) 73070a708f8fSGustavo F. Padovan return; 73080a708f8fSGustavo F. Padovan 73090a708f8fSGustavo F. Padovan if (encrypt == 0x00) { 73104343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_MEDIUM) { 7311ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_ENC_TIMEOUT); 73127d513e92SMarcel Holtmann } else if (chan->sec_level == BT_SECURITY_HIGH || 73137d513e92SMarcel Holtmann chan->sec_level == BT_SECURITY_FIPS) 73140f852724SGustavo F. Padovan l2cap_chan_close(chan, ECONNREFUSED); 73150a708f8fSGustavo F. Padovan } else { 73164343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_MEDIUM) 7317c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 73180a708f8fSGustavo F. Padovan } 73190a708f8fSGustavo F. Padovan } 73200a708f8fSGustavo F. Padovan 7321686ebf28SUlisses Furquim int l2cap_security_cfm(struct hci_conn *hcon, u8 status, u8 encrypt) 73220a708f8fSGustavo F. Padovan { 73230a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 732448454079SGustavo F. Padovan struct l2cap_chan *chan; 73250a708f8fSGustavo F. Padovan 73260a708f8fSGustavo F. Padovan if (!conn) 73270a708f8fSGustavo F. Padovan return 0; 73280a708f8fSGustavo F. Padovan 732989d8b407SAndrei Emeltchenko BT_DBG("conn %p status 0x%2.2x encrypt %u", conn, status, encrypt); 73300a708f8fSGustavo F. Padovan 73313df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 73320a708f8fSGustavo F. Padovan 73333df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 73346be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 73350a708f8fSGustavo F. Padovan 733689d8b407SAndrei Emeltchenko BT_DBG("chan %p scid 0x%4.4x state %s", chan, chan->scid, 733789d8b407SAndrei Emeltchenko state_to_string(chan->state)); 7338f1cb9af5SVinicius Costa Gomes 73392338a7e0SJohan Hedberg if (chan->scid == L2CAP_CID_A2MP) { 734078eb2f98SAndrei Emeltchenko l2cap_chan_unlock(chan); 734178eb2f98SAndrei Emeltchenko continue; 734278eb2f98SAndrei Emeltchenko } 734378eb2f98SAndrei Emeltchenko 7344191eb398SJohan Hedberg if (!status && encrypt) 7345f1cb9af5SVinicius Costa Gomes chan->sec_level = hcon->sec_level; 7346f1cb9af5SVinicius Costa Gomes 734796eff46eSAndrei Emeltchenko if (!__l2cap_no_conn_pending(chan)) { 73486be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 73490a708f8fSGustavo F. Padovan continue; 73500a708f8fSGustavo F. Padovan } 73510a708f8fSGustavo F. Padovan 735289bc500eSGustavo F. Padovan if (!status && (chan->state == BT_CONNECTED || 735389bc500eSGustavo F. Padovan chan->state == BT_CONFIG)) { 7354d97c899bSMarcel Holtmann chan->ops->resume(chan); 73554343478fSGustavo F. Padovan l2cap_check_encryption(chan, encrypt); 73566be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 73570a708f8fSGustavo F. Padovan continue; 73580a708f8fSGustavo F. Padovan } 73590a708f8fSGustavo F. Padovan 736089bc500eSGustavo F. Padovan if (chan->state == BT_CONNECT) { 73616d3c15daSJohan Hedberg if (!status) 736293c3e8f5SAndrei Emeltchenko l2cap_start_connection(chan); 73636d3c15daSJohan Hedberg else 7364ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_TIMEOUT); 7365fa37c1aaSJohan Hedberg } else if (chan->state == BT_CONNECT2 && 7366fa37c1aaSJohan Hedberg chan->mode != L2CAP_MODE_LE_FLOWCTL) { 73670a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 7368df3c3931SJohan Hedberg __u16 res, stat; 73690a708f8fSGustavo F. Padovan 73700a708f8fSGustavo F. Padovan if (!status) { 7371bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 7372df3c3931SJohan Hedberg res = L2CAP_CR_PEND; 7373df3c3931SJohan Hedberg stat = L2CAP_CS_AUTHOR_PEND; 73742dc4e510SGustavo Padovan chan->ops->defer(chan); 7375df3c3931SJohan Hedberg } else { 7376acdcabf5SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 7377df3c3931SJohan Hedberg res = L2CAP_CR_SUCCESS; 7378df3c3931SJohan Hedberg stat = L2CAP_CS_NO_INFO; 7379df3c3931SJohan Hedberg } 73800a708f8fSGustavo F. Padovan } else { 7381acdcabf5SGustavo Padovan l2cap_state_change(chan, BT_DISCONN); 7382ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_TIMEOUT); 7383df3c3931SJohan Hedberg res = L2CAP_CR_SEC_BLOCK; 7384df3c3931SJohan Hedberg stat = L2CAP_CS_NO_INFO; 73850a708f8fSGustavo F. Padovan } 73860a708f8fSGustavo F. Padovan 7387fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 7388fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 7389df3c3931SJohan Hedberg rsp.result = cpu_to_le16(res); 7390df3c3931SJohan Hedberg rsp.status = cpu_to_le16(stat); 7391fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 7392fc7f8a7eSGustavo F. Padovan sizeof(rsp), &rsp); 73932d369359SMat Martineau 73942d369359SMat Martineau if (!test_bit(CONF_REQ_SENT, &chan->conf_state) && 73952d369359SMat Martineau res == L2CAP_CR_SUCCESS) { 73962d369359SMat Martineau char buf[128]; 73972d369359SMat Martineau set_bit(CONF_REQ_SENT, &chan->conf_state); 73982d369359SMat Martineau l2cap_send_cmd(conn, l2cap_get_ident(conn), 73992d369359SMat Martineau L2CAP_CONF_REQ, 74002d369359SMat Martineau l2cap_build_conf_req(chan, buf), 74012d369359SMat Martineau buf); 74022d369359SMat Martineau chan->num_conf_req++; 74032d369359SMat Martineau } 74040a708f8fSGustavo F. Padovan } 74050a708f8fSGustavo F. Padovan 74066be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 74070a708f8fSGustavo F. Padovan } 74080a708f8fSGustavo F. Padovan 74093df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 74100a708f8fSGustavo F. Padovan 74110a708f8fSGustavo F. Padovan return 0; 74120a708f8fSGustavo F. Padovan } 74130a708f8fSGustavo F. Padovan 7414686ebf28SUlisses Furquim int l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags) 74150a708f8fSGustavo F. Padovan { 74160a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 7417d73a0988SAndrei Emeltchenko struct l2cap_hdr *hdr; 7418d73a0988SAndrei Emeltchenko int len; 74190a708f8fSGustavo F. Padovan 74201d13a254SAndrei Emeltchenko /* For AMP controller do not create l2cap conn */ 74211d13a254SAndrei Emeltchenko if (!conn && hcon->hdev->dev_type != HCI_BREDR) 74221d13a254SAndrei Emeltchenko goto drop; 74230a708f8fSGustavo F. Padovan 74240a708f8fSGustavo F. Padovan if (!conn) 7425baf43251SClaudio Takahasi conn = l2cap_conn_add(hcon); 74260a708f8fSGustavo F. Padovan 74270a708f8fSGustavo F. Padovan if (!conn) 74280a708f8fSGustavo F. Padovan goto drop; 74290a708f8fSGustavo F. Padovan 74300a708f8fSGustavo F. Padovan BT_DBG("conn %p len %d flags 0x%x", conn, skb->len, flags); 74310a708f8fSGustavo F. Padovan 7432d73a0988SAndrei Emeltchenko switch (flags) { 7433d73a0988SAndrei Emeltchenko case ACL_START: 7434d73a0988SAndrei Emeltchenko case ACL_START_NO_FLUSH: 7435d73a0988SAndrei Emeltchenko case ACL_COMPLETE: 74360a708f8fSGustavo F. Padovan if (conn->rx_len) { 74370a708f8fSGustavo F. Padovan BT_ERR("Unexpected start frame (len %d)", skb->len); 74380a708f8fSGustavo F. Padovan kfree_skb(conn->rx_skb); 74390a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 74400a708f8fSGustavo F. Padovan conn->rx_len = 0; 74410a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 74420a708f8fSGustavo F. Padovan } 74430a708f8fSGustavo F. Padovan 74440a708f8fSGustavo F. Padovan /* Start fragment always begin with Basic L2CAP header */ 74450a708f8fSGustavo F. Padovan if (skb->len < L2CAP_HDR_SIZE) { 74460a708f8fSGustavo F. Padovan BT_ERR("Frame is too short (len %d)", skb->len); 74470a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 74480a708f8fSGustavo F. Padovan goto drop; 74490a708f8fSGustavo F. Padovan } 74500a708f8fSGustavo F. Padovan 74510a708f8fSGustavo F. Padovan hdr = (struct l2cap_hdr *) skb->data; 74520a708f8fSGustavo F. Padovan len = __le16_to_cpu(hdr->len) + L2CAP_HDR_SIZE; 74530a708f8fSGustavo F. Padovan 74540a708f8fSGustavo F. Padovan if (len == skb->len) { 74550a708f8fSGustavo F. Padovan /* Complete frame received */ 74560a708f8fSGustavo F. Padovan l2cap_recv_frame(conn, skb); 74570a708f8fSGustavo F. Padovan return 0; 74580a708f8fSGustavo F. Padovan } 74590a708f8fSGustavo F. Padovan 74600a708f8fSGustavo F. Padovan BT_DBG("Start: total len %d, frag len %d", len, skb->len); 74610a708f8fSGustavo F. Padovan 74620a708f8fSGustavo F. Padovan if (skb->len > len) { 74630a708f8fSGustavo F. Padovan BT_ERR("Frame is too long (len %d, expected len %d)", 74640a708f8fSGustavo F. Padovan skb->len, len); 74650a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 74660a708f8fSGustavo F. Padovan goto drop; 74670a708f8fSGustavo F. Padovan } 74680a708f8fSGustavo F. Padovan 74690a708f8fSGustavo F. Padovan /* Allocate skb for the complete frame (with header) */ 74708bcde1f2SGustavo Padovan conn->rx_skb = bt_skb_alloc(len, GFP_KERNEL); 74710a708f8fSGustavo F. Padovan if (!conn->rx_skb) 74720a708f8fSGustavo F. Padovan goto drop; 74730a708f8fSGustavo F. Padovan 74740a708f8fSGustavo F. Padovan skb_copy_from_linear_data(skb, skb_put(conn->rx_skb, skb->len), 74750a708f8fSGustavo F. Padovan skb->len); 74760a708f8fSGustavo F. Padovan conn->rx_len = len - skb->len; 7477d73a0988SAndrei Emeltchenko break; 7478d73a0988SAndrei Emeltchenko 7479d73a0988SAndrei Emeltchenko case ACL_CONT: 74800a708f8fSGustavo F. Padovan BT_DBG("Cont: frag len %d (expecting %d)", skb->len, conn->rx_len); 74810a708f8fSGustavo F. Padovan 74820a708f8fSGustavo F. Padovan if (!conn->rx_len) { 74830a708f8fSGustavo F. Padovan BT_ERR("Unexpected continuation frame (len %d)", skb->len); 74840a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 74850a708f8fSGustavo F. Padovan goto drop; 74860a708f8fSGustavo F. Padovan } 74870a708f8fSGustavo F. Padovan 74880a708f8fSGustavo F. Padovan if (skb->len > conn->rx_len) { 74890a708f8fSGustavo F. Padovan BT_ERR("Fragment is too long (len %d, expected %d)", 74900a708f8fSGustavo F. Padovan skb->len, conn->rx_len); 74910a708f8fSGustavo F. Padovan kfree_skb(conn->rx_skb); 74920a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 74930a708f8fSGustavo F. Padovan conn->rx_len = 0; 74940a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 74950a708f8fSGustavo F. Padovan goto drop; 74960a708f8fSGustavo F. Padovan } 74970a708f8fSGustavo F. Padovan 74980a708f8fSGustavo F. Padovan skb_copy_from_linear_data(skb, skb_put(conn->rx_skb, skb->len), 74990a708f8fSGustavo F. Padovan skb->len); 75000a708f8fSGustavo F. Padovan conn->rx_len -= skb->len; 75010a708f8fSGustavo F. Padovan 75020a708f8fSGustavo F. Padovan if (!conn->rx_len) { 7503c4e5bafaSJohan Hedberg /* Complete frame received. l2cap_recv_frame 7504c4e5bafaSJohan Hedberg * takes ownership of the skb so set the global 7505c4e5bafaSJohan Hedberg * rx_skb pointer to NULL first. 7506c4e5bafaSJohan Hedberg */ 7507c4e5bafaSJohan Hedberg struct sk_buff *rx_skb = conn->rx_skb; 75080a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 7509c4e5bafaSJohan Hedberg l2cap_recv_frame(conn, rx_skb); 75100a708f8fSGustavo F. Padovan } 7511d73a0988SAndrei Emeltchenko break; 75120a708f8fSGustavo F. Padovan } 75130a708f8fSGustavo F. Padovan 75140a708f8fSGustavo F. Padovan drop: 75150a708f8fSGustavo F. Padovan kfree_skb(skb); 75160a708f8fSGustavo F. Padovan return 0; 75170a708f8fSGustavo F. Padovan } 75180a708f8fSGustavo F. Padovan 75190a708f8fSGustavo F. Padovan static int l2cap_debugfs_show(struct seq_file *f, void *p) 75200a708f8fSGustavo F. Padovan { 752123691d75SGustavo F. Padovan struct l2cap_chan *c; 75220a708f8fSGustavo F. Padovan 7523333055f2SGustavo F. Padovan read_lock(&chan_list_lock); 75240a708f8fSGustavo F. Padovan 752523691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 7526fcb73338SAndrei Emeltchenko seq_printf(f, "%pMR %pMR %d %d 0x%4.4x 0x%4.4x %d %d %d %d\n", 75277eafc59eSMarcel Holtmann &c->src, &c->dst, 752889bc500eSGustavo F. Padovan c->state, __le16_to_cpu(c->psm), 752923691d75SGustavo F. Padovan c->scid, c->dcid, c->imtu, c->omtu, 753023691d75SGustavo F. Padovan c->sec_level, c->mode); 75310a708f8fSGustavo F. Padovan } 75320a708f8fSGustavo F. Padovan 7533333055f2SGustavo F. Padovan read_unlock(&chan_list_lock); 75340a708f8fSGustavo F. Padovan 75350a708f8fSGustavo F. Padovan return 0; 75360a708f8fSGustavo F. Padovan } 75370a708f8fSGustavo F. Padovan 75380a708f8fSGustavo F. Padovan static int l2cap_debugfs_open(struct inode *inode, struct file *file) 75390a708f8fSGustavo F. Padovan { 75400a708f8fSGustavo F. Padovan return single_open(file, l2cap_debugfs_show, inode->i_private); 75410a708f8fSGustavo F. Padovan } 75420a708f8fSGustavo F. Padovan 75430a708f8fSGustavo F. Padovan static const struct file_operations l2cap_debugfs_fops = { 75440a708f8fSGustavo F. Padovan .open = l2cap_debugfs_open, 75450a708f8fSGustavo F. Padovan .read = seq_read, 75460a708f8fSGustavo F. Padovan .llseek = seq_lseek, 75470a708f8fSGustavo F. Padovan .release = single_release, 75480a708f8fSGustavo F. Padovan }; 75490a708f8fSGustavo F. Padovan 75500a708f8fSGustavo F. Padovan static struct dentry *l2cap_debugfs; 75510a708f8fSGustavo F. Padovan 755264274518SGustavo F. Padovan int __init l2cap_init(void) 75530a708f8fSGustavo F. Padovan { 75540a708f8fSGustavo F. Padovan int err; 75550a708f8fSGustavo F. Padovan 7556bb58f747SGustavo F. Padovan err = l2cap_init_sockets(); 75570a708f8fSGustavo F. Padovan if (err < 0) 75580a708f8fSGustavo F. Padovan return err; 75590a708f8fSGustavo F. Padovan 75601120e4bfSMarcel Holtmann if (IS_ERR_OR_NULL(bt_debugfs)) 75611120e4bfSMarcel Holtmann return 0; 75621120e4bfSMarcel Holtmann 75632d792818SGustavo Padovan l2cap_debugfs = debugfs_create_file("l2cap", 0444, bt_debugfs, 75642d792818SGustavo Padovan NULL, &l2cap_debugfs_fops); 75650a708f8fSGustavo F. Padovan 756640b9397aSSamuel Ortiz debugfs_create_u16("l2cap_le_max_credits", 0644, bt_debugfs, 7567f15b8ecfSJohan Hedberg &le_max_credits); 756840b9397aSSamuel Ortiz debugfs_create_u16("l2cap_le_default_mps", 0644, bt_debugfs, 7569f15b8ecfSJohan Hedberg &le_default_mps); 7570f15b8ecfSJohan Hedberg 75710a708f8fSGustavo F. Padovan return 0; 75720a708f8fSGustavo F. Padovan } 75730a708f8fSGustavo F. Padovan 757464274518SGustavo F. Padovan void l2cap_exit(void) 75750a708f8fSGustavo F. Padovan { 75760a708f8fSGustavo F. Padovan debugfs_remove(l2cap_debugfs); 7577bb58f747SGustavo F. Padovan l2cap_cleanup_sockets(); 75780a708f8fSGustavo F. Padovan } 75790a708f8fSGustavo F. Padovan 75800a708f8fSGustavo F. Padovan module_param(disable_ertm, bool, 0644); 75810a708f8fSGustavo F. Padovan MODULE_PARM_DESC(disable_ertm, "Disable enhanced retransmission mode"); 7582