10a708f8fSGustavo F. Padovan /* 20a708f8fSGustavo F. Padovan BlueZ - Bluetooth protocol stack for Linux 30a708f8fSGustavo F. Padovan Copyright (C) 2000-2001 Qualcomm Incorporated 40a708f8fSGustavo F. Padovan Copyright (C) 2009-2010 Gustavo F. Padovan <gustavo@padovan.org> 50a708f8fSGustavo F. Padovan Copyright (C) 2010 Google Inc. 6590051deSGustavo F. Padovan Copyright (C) 2011 ProFUSION Embedded Systems 7422e925bSMat Martineau Copyright (c) 2012 Code Aurora Forum. All rights reserved. 80a708f8fSGustavo F. Padovan 90a708f8fSGustavo F. Padovan Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com> 100a708f8fSGustavo F. Padovan 110a708f8fSGustavo F. Padovan This program is free software; you can redistribute it and/or modify 120a708f8fSGustavo F. Padovan it under the terms of the GNU General Public License version 2 as 130a708f8fSGustavo F. Padovan published by the Free Software Foundation; 140a708f8fSGustavo F. Padovan 150a708f8fSGustavo F. Padovan THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS 160a708f8fSGustavo F. Padovan OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 170a708f8fSGustavo F. Padovan FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS. 180a708f8fSGustavo F. Padovan IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY 190a708f8fSGustavo F. Padovan CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES 200a708f8fSGustavo F. Padovan WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 210a708f8fSGustavo F. Padovan ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 220a708f8fSGustavo F. Padovan OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 230a708f8fSGustavo F. Padovan 240a708f8fSGustavo F. Padovan ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS, 250a708f8fSGustavo F. Padovan COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS 260a708f8fSGustavo F. Padovan SOFTWARE IS DISCLAIMED. 270a708f8fSGustavo F. Padovan */ 280a708f8fSGustavo F. Padovan 29bb58f747SGustavo F. Padovan /* Bluetooth L2CAP core. */ 300a708f8fSGustavo F. Padovan 310a708f8fSGustavo F. Padovan #include <linux/module.h> 320a708f8fSGustavo F. Padovan 330a708f8fSGustavo F. Padovan #include <linux/debugfs.h> 340a708f8fSGustavo F. Padovan #include <linux/crc16.h> 350a708f8fSGustavo F. Padovan 360a708f8fSGustavo F. Padovan #include <net/bluetooth/bluetooth.h> 370a708f8fSGustavo F. Padovan #include <net/bluetooth/hci_core.h> 380a708f8fSGustavo F. Padovan #include <net/bluetooth/l2cap.h> 397ef9fbf0SMarcel Holtmann 40ac4b7236SMarcel Holtmann #include "smp.h" 417024728eSMarcel Holtmann #include "a2mp.h" 427ef9fbf0SMarcel Holtmann #include "amp.h" 430a708f8fSGustavo F. Padovan 44d1de6d46SMat Martineau bool disable_ertm; 450a708f8fSGustavo F. Padovan 46547d1032SMarcel Holtmann static u32 l2cap_feat_mask = L2CAP_FEAT_FIXED_CHAN | L2CAP_FEAT_UCD; 47d40bffbcSMarcel Holtmann static u8 l2cap_fixed_chan[8] = { L2CAP_FC_L2CAP | L2CAP_FC_CONNLESS, }; 480a708f8fSGustavo F. Padovan 49b5ad8b7fSJohannes Berg static LIST_HEAD(chan_list); 50b5ad8b7fSJohannes Berg static DEFINE_RWLOCK(chan_list_lock); 510a708f8fSGustavo F. Padovan 520a708f8fSGustavo F. Padovan static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn, 530a708f8fSGustavo F. Padovan u8 code, u8 ident, u16 dlen, void *data); 544519de9aSGustavo F. Padovan static void l2cap_send_cmd(struct l2cap_conn *conn, u8 ident, u8 code, u16 len, 554519de9aSGustavo F. Padovan void *data); 56710f9b0aSGustavo F. Padovan static int l2cap_build_conf_req(struct l2cap_chan *chan, void *data); 575e4e3972SAndrei Emeltchenko static void l2cap_send_disconn_req(struct l2cap_chan *chan, int err); 580a708f8fSGustavo F. Padovan 59d660366dSGustavo Padovan static void l2cap_tx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 60608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event); 61608bcc6dSMat Martineau 624f1654e0SMarcel Holtmann static inline __u8 bdaddr_type(struct hci_conn *hcon, __u8 type) 634f1654e0SMarcel Holtmann { 644f1654e0SMarcel Holtmann if (hcon->type == LE_LINK) { 654f1654e0SMarcel Holtmann if (type == ADDR_LE_DEV_PUBLIC) 664f1654e0SMarcel Holtmann return BDADDR_LE_PUBLIC; 674f1654e0SMarcel Holtmann else 684f1654e0SMarcel Holtmann return BDADDR_LE_RANDOM; 694f1654e0SMarcel Holtmann } 704f1654e0SMarcel Holtmann 714f1654e0SMarcel Holtmann return BDADDR_BREDR; 724f1654e0SMarcel Holtmann } 734f1654e0SMarcel Holtmann 740a708f8fSGustavo F. Padovan /* ---- L2CAP channels ---- */ 7571ba0e56SGustavo F. Padovan 762d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_dcid(struct l2cap_conn *conn, 772d792818SGustavo Padovan u16 cid) 780a708f8fSGustavo F. Padovan { 793df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 80baa7e1faSGustavo F. Padovan 813df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 823df91ea2SAndrei Emeltchenko if (c->dcid == cid) 833df91ea2SAndrei Emeltchenko return c; 840a708f8fSGustavo F. Padovan } 853df91ea2SAndrei Emeltchenko return NULL; 86baa7e1faSGustavo F. Padovan } 870a708f8fSGustavo F. Padovan 882d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_scid(struct l2cap_conn *conn, 892d792818SGustavo Padovan u16 cid) 900a708f8fSGustavo F. Padovan { 913df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 92baa7e1faSGustavo F. Padovan 933df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 943df91ea2SAndrei Emeltchenko if (c->scid == cid) 953df91ea2SAndrei Emeltchenko return c; 960a708f8fSGustavo F. Padovan } 973df91ea2SAndrei Emeltchenko return NULL; 98baa7e1faSGustavo F. Padovan } 990a708f8fSGustavo F. Padovan 1000a708f8fSGustavo F. Padovan /* Find channel with given SCID. 101ef191adeSMat Martineau * Returns locked channel. */ 1022d792818SGustavo Padovan static struct l2cap_chan *l2cap_get_chan_by_scid(struct l2cap_conn *conn, 1032d792818SGustavo Padovan u16 cid) 1040a708f8fSGustavo F. Padovan { 10548454079SGustavo F. Padovan struct l2cap_chan *c; 106baa7e1faSGustavo F. Padovan 1073df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 108baa7e1faSGustavo F. Padovan c = __l2cap_get_chan_by_scid(conn, cid); 109ef191adeSMat Martineau if (c) 110ef191adeSMat Martineau l2cap_chan_lock(c); 1113df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 1123df91ea2SAndrei Emeltchenko 11348454079SGustavo F. Padovan return c; 1140a708f8fSGustavo F. Padovan } 1150a708f8fSGustavo F. Padovan 116b1a130b7SMat Martineau /* Find channel with given DCID. 117b1a130b7SMat Martineau * Returns locked channel. 118b1a130b7SMat Martineau */ 119b1a130b7SMat Martineau static struct l2cap_chan *l2cap_get_chan_by_dcid(struct l2cap_conn *conn, 120b1a130b7SMat Martineau u16 cid) 121b1a130b7SMat Martineau { 122b1a130b7SMat Martineau struct l2cap_chan *c; 123b1a130b7SMat Martineau 124b1a130b7SMat Martineau mutex_lock(&conn->chan_lock); 125b1a130b7SMat Martineau c = __l2cap_get_chan_by_dcid(conn, cid); 126b1a130b7SMat Martineau if (c) 127b1a130b7SMat Martineau l2cap_chan_lock(c); 128b1a130b7SMat Martineau mutex_unlock(&conn->chan_lock); 129b1a130b7SMat Martineau 130b1a130b7SMat Martineau return c; 131b1a130b7SMat Martineau } 132b1a130b7SMat Martineau 1332d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_ident(struct l2cap_conn *conn, 1342d792818SGustavo Padovan u8 ident) 1350a708f8fSGustavo F. Padovan { 1363df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 137baa7e1faSGustavo F. Padovan 1383df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 1393df91ea2SAndrei Emeltchenko if (c->ident == ident) 1403df91ea2SAndrei Emeltchenko return c; 1410a708f8fSGustavo F. Padovan } 1423df91ea2SAndrei Emeltchenko return NULL; 143baa7e1faSGustavo F. Padovan } 1440a708f8fSGustavo F. Padovan 1455b155ef9SMat Martineau static struct l2cap_chan *l2cap_get_chan_by_ident(struct l2cap_conn *conn, 1465b155ef9SMat Martineau u8 ident) 1475b155ef9SMat Martineau { 1485b155ef9SMat Martineau struct l2cap_chan *c; 1495b155ef9SMat Martineau 1505b155ef9SMat Martineau mutex_lock(&conn->chan_lock); 1515b155ef9SMat Martineau c = __l2cap_get_chan_by_ident(conn, ident); 1525b155ef9SMat Martineau if (c) 1535b155ef9SMat Martineau l2cap_chan_lock(c); 1545b155ef9SMat Martineau mutex_unlock(&conn->chan_lock); 1555b155ef9SMat Martineau 1565b155ef9SMat Martineau return c; 1575b155ef9SMat Martineau } 1585b155ef9SMat Martineau 15923691d75SGustavo F. Padovan static struct l2cap_chan *__l2cap_global_chan_by_addr(__le16 psm, bdaddr_t *src) 1609e4425ffSGustavo F. Padovan { 16123691d75SGustavo F. Padovan struct l2cap_chan *c; 1629e4425ffSGustavo F. Padovan 16323691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 1647eafc59eSMarcel Holtmann if (c->sport == psm && !bacmp(&c->src, src)) 16523691d75SGustavo F. Padovan return c; 1669e4425ffSGustavo F. Padovan } 167250938cbSSzymon Janc return NULL; 168250938cbSSzymon Janc } 1699e4425ffSGustavo F. Padovan 1709e4425ffSGustavo F. Padovan int l2cap_add_psm(struct l2cap_chan *chan, bdaddr_t *src, __le16 psm) 1719e4425ffSGustavo F. Padovan { 17273b2ec18SGustavo F. Padovan int err; 17373b2ec18SGustavo F. Padovan 174333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 1759e4425ffSGustavo F. Padovan 17623691d75SGustavo F. Padovan if (psm && __l2cap_global_chan_by_addr(psm, src)) { 17773b2ec18SGustavo F. Padovan err = -EADDRINUSE; 17873b2ec18SGustavo F. Padovan goto done; 1799e4425ffSGustavo F. Padovan } 1809e4425ffSGustavo F. Padovan 18173b2ec18SGustavo F. Padovan if (psm) { 1829e4425ffSGustavo F. Padovan chan->psm = psm; 1839e4425ffSGustavo F. Padovan chan->sport = psm; 18473b2ec18SGustavo F. Padovan err = 0; 18573b2ec18SGustavo F. Padovan } else { 18673b2ec18SGustavo F. Padovan u16 p; 1879e4425ffSGustavo F. Padovan 18873b2ec18SGustavo F. Padovan err = -EINVAL; 18973b2ec18SGustavo F. Padovan for (p = 0x1001; p < 0x1100; p += 2) 19023691d75SGustavo F. Padovan if (!__l2cap_global_chan_by_addr(cpu_to_le16(p), src)) { 19173b2ec18SGustavo F. Padovan chan->psm = cpu_to_le16(p); 19273b2ec18SGustavo F. Padovan chan->sport = cpu_to_le16(p); 19373b2ec18SGustavo F. Padovan err = 0; 19473b2ec18SGustavo F. Padovan break; 19573b2ec18SGustavo F. Padovan } 19673b2ec18SGustavo F. Padovan } 19773b2ec18SGustavo F. Padovan 19873b2ec18SGustavo F. Padovan done: 199333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 20073b2ec18SGustavo F. Padovan return err; 2019e4425ffSGustavo F. Padovan } 2029e4425ffSGustavo F. Padovan 2039e4425ffSGustavo F. Padovan int l2cap_add_scid(struct l2cap_chan *chan, __u16 scid) 2049e4425ffSGustavo F. Padovan { 205333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 2069e4425ffSGustavo F. Padovan 2079e4425ffSGustavo F. Padovan chan->scid = scid; 2089e4425ffSGustavo F. Padovan 209333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 2109e4425ffSGustavo F. Padovan 2119e4425ffSGustavo F. Padovan return 0; 2129e4425ffSGustavo F. Padovan } 2139e4425ffSGustavo F. Padovan 214baa7e1faSGustavo F. Padovan static u16 l2cap_alloc_cid(struct l2cap_conn *conn) 2150a708f8fSGustavo F. Padovan { 2160a708f8fSGustavo F. Padovan u16 cid = L2CAP_CID_DYN_START; 2170a708f8fSGustavo F. Padovan 2180a708f8fSGustavo F. Padovan for (; cid < L2CAP_CID_DYN_END; cid++) { 219baa7e1faSGustavo F. Padovan if (!__l2cap_get_chan_by_scid(conn, cid)) 2200a708f8fSGustavo F. Padovan return cid; 2210a708f8fSGustavo F. Padovan } 2220a708f8fSGustavo F. Padovan 2230a708f8fSGustavo F. Padovan return 0; 2240a708f8fSGustavo F. Padovan } 2250a708f8fSGustavo F. Padovan 2260e587be7SAndrei Emeltchenko static void __l2cap_state_change(struct l2cap_chan *chan, int state) 22789bc500eSGustavo F. Padovan { 22842d2d87cSAndrei Emeltchenko BT_DBG("chan %p %s -> %s", chan, state_to_string(chan->state), 229badaaa00SGustavo F. Padovan state_to_string(state)); 230badaaa00SGustavo F. Padovan 23189bc500eSGustavo F. Padovan chan->state = state; 23253f52121SGustavo Padovan chan->ops->state_change(chan, state, 0); 23389bc500eSGustavo F. Padovan } 23489bc500eSGustavo F. Padovan 2350e587be7SAndrei Emeltchenko static void l2cap_state_change(struct l2cap_chan *chan, int state) 2360e587be7SAndrei Emeltchenko { 2370e587be7SAndrei Emeltchenko struct sock *sk = chan->sk; 2380e587be7SAndrei Emeltchenko 2390e587be7SAndrei Emeltchenko lock_sock(sk); 2400e587be7SAndrei Emeltchenko __l2cap_state_change(chan, state); 2410e587be7SAndrei Emeltchenko release_sock(sk); 2420e587be7SAndrei Emeltchenko } 2430e587be7SAndrei Emeltchenko 244f8e73017SGustavo Padovan static inline void l2cap_state_change_and_error(struct l2cap_chan *chan, 245f8e73017SGustavo Padovan int state, int err) 2462e0052e4SAndrei Emeltchenko { 247f8e73017SGustavo Padovan struct sock *sk = chan->sk; 248f8e73017SGustavo Padovan 249f8e73017SGustavo Padovan lock_sock(sk); 250f8e73017SGustavo Padovan chan->state = state; 25153f52121SGustavo Padovan chan->ops->state_change(chan, chan->state, err); 252f8e73017SGustavo Padovan release_sock(sk); 2532e0052e4SAndrei Emeltchenko } 2542e0052e4SAndrei Emeltchenko 2552e0052e4SAndrei Emeltchenko static inline void l2cap_chan_set_err(struct l2cap_chan *chan, int err) 2562e0052e4SAndrei Emeltchenko { 2572e0052e4SAndrei Emeltchenko struct sock *sk = chan->sk; 2582e0052e4SAndrei Emeltchenko 2592e0052e4SAndrei Emeltchenko lock_sock(sk); 260f8e73017SGustavo Padovan chan->ops->state_change(chan, chan->state, err); 2612e0052e4SAndrei Emeltchenko release_sock(sk); 2622e0052e4SAndrei Emeltchenko } 2632e0052e4SAndrei Emeltchenko 2644239d16fSMat Martineau static void __set_retrans_timer(struct l2cap_chan *chan) 2654239d16fSMat Martineau { 2664239d16fSMat Martineau if (!delayed_work_pending(&chan->monitor_timer) && 2674239d16fSMat Martineau chan->retrans_timeout) { 2684239d16fSMat Martineau l2cap_set_timer(chan, &chan->retrans_timer, 2694239d16fSMat Martineau msecs_to_jiffies(chan->retrans_timeout)); 2704239d16fSMat Martineau } 2714239d16fSMat Martineau } 2724239d16fSMat Martineau 2734239d16fSMat Martineau static void __set_monitor_timer(struct l2cap_chan *chan) 2744239d16fSMat Martineau { 2754239d16fSMat Martineau __clear_retrans_timer(chan); 2764239d16fSMat Martineau if (chan->monitor_timeout) { 2774239d16fSMat Martineau l2cap_set_timer(chan, &chan->monitor_timer, 2784239d16fSMat Martineau msecs_to_jiffies(chan->monitor_timeout)); 2794239d16fSMat Martineau } 2804239d16fSMat Martineau } 2814239d16fSMat Martineau 282608bcc6dSMat Martineau static struct sk_buff *l2cap_ertm_seq_in_queue(struct sk_buff_head *head, 283608bcc6dSMat Martineau u16 seq) 284608bcc6dSMat Martineau { 285608bcc6dSMat Martineau struct sk_buff *skb; 286608bcc6dSMat Martineau 287608bcc6dSMat Martineau skb_queue_walk(head, skb) { 288608bcc6dSMat Martineau if (bt_cb(skb)->control.txseq == seq) 289608bcc6dSMat Martineau return skb; 290608bcc6dSMat Martineau } 291608bcc6dSMat Martineau 292608bcc6dSMat Martineau return NULL; 293608bcc6dSMat Martineau } 294608bcc6dSMat Martineau 2953c588192SMat Martineau /* ---- L2CAP sequence number lists ---- */ 2963c588192SMat Martineau 2973c588192SMat Martineau /* For ERTM, ordered lists of sequence numbers must be tracked for 2983c588192SMat Martineau * SREJ requests that are received and for frames that are to be 2993c588192SMat Martineau * retransmitted. These seq_list functions implement a singly-linked 3003c588192SMat Martineau * list in an array, where membership in the list can also be checked 3013c588192SMat Martineau * in constant time. Items can also be added to the tail of the list 3023c588192SMat Martineau * and removed from the head in constant time, without further memory 3033c588192SMat Martineau * allocs or frees. 3043c588192SMat Martineau */ 3053c588192SMat Martineau 3063c588192SMat Martineau static int l2cap_seq_list_init(struct l2cap_seq_list *seq_list, u16 size) 3073c588192SMat Martineau { 3083c588192SMat Martineau size_t alloc_size, i; 3093c588192SMat Martineau 3103c588192SMat Martineau /* Allocated size is a power of 2 to map sequence numbers 3113c588192SMat Martineau * (which may be up to 14 bits) in to a smaller array that is 3123c588192SMat Martineau * sized for the negotiated ERTM transmit windows. 3133c588192SMat Martineau */ 3143c588192SMat Martineau alloc_size = roundup_pow_of_two(size); 3153c588192SMat Martineau 3163c588192SMat Martineau seq_list->list = kmalloc(sizeof(u16) * alloc_size, GFP_KERNEL); 3173c588192SMat Martineau if (!seq_list->list) 3183c588192SMat Martineau return -ENOMEM; 3193c588192SMat Martineau 3203c588192SMat Martineau seq_list->mask = alloc_size - 1; 3213c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3223c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3233c588192SMat Martineau for (i = 0; i < alloc_size; i++) 3243c588192SMat Martineau seq_list->list[i] = L2CAP_SEQ_LIST_CLEAR; 3253c588192SMat Martineau 3263c588192SMat Martineau return 0; 3273c588192SMat Martineau } 3283c588192SMat Martineau 3293c588192SMat Martineau static inline void l2cap_seq_list_free(struct l2cap_seq_list *seq_list) 3303c588192SMat Martineau { 3313c588192SMat Martineau kfree(seq_list->list); 3323c588192SMat Martineau } 3333c588192SMat Martineau 3343c588192SMat Martineau static inline bool l2cap_seq_list_contains(struct l2cap_seq_list *seq_list, 3353c588192SMat Martineau u16 seq) 3363c588192SMat Martineau { 3373c588192SMat Martineau /* Constant-time check for list membership */ 3383c588192SMat Martineau return seq_list->list[seq & seq_list->mask] != L2CAP_SEQ_LIST_CLEAR; 3393c588192SMat Martineau } 3403c588192SMat Martineau 3413c588192SMat Martineau static u16 l2cap_seq_list_remove(struct l2cap_seq_list *seq_list, u16 seq) 3423c588192SMat Martineau { 3433c588192SMat Martineau u16 mask = seq_list->mask; 3443c588192SMat Martineau 3453c588192SMat Martineau if (seq_list->head == L2CAP_SEQ_LIST_CLEAR) { 3463c588192SMat Martineau /* In case someone tries to pop the head of an empty list */ 3473c588192SMat Martineau return L2CAP_SEQ_LIST_CLEAR; 3483c588192SMat Martineau } else if (seq_list->head == seq) { 3493c588192SMat Martineau /* Head can be removed in constant time */ 3503c588192SMat Martineau seq_list->head = seq_list->list[seq & mask]; 3513c588192SMat Martineau seq_list->list[seq & mask] = L2CAP_SEQ_LIST_CLEAR; 3523c588192SMat Martineau 3533c588192SMat Martineau if (seq_list->head == L2CAP_SEQ_LIST_TAIL) { 3543c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3553c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3563c588192SMat Martineau } 3573c588192SMat Martineau } else { 3583c588192SMat Martineau /* Walk the list to find the sequence number */ 3593c588192SMat Martineau u16 prev = seq_list->head; 3603c588192SMat Martineau while (seq_list->list[prev & mask] != seq) { 3613c588192SMat Martineau prev = seq_list->list[prev & mask]; 3623c588192SMat Martineau if (prev == L2CAP_SEQ_LIST_TAIL) 3633c588192SMat Martineau return L2CAP_SEQ_LIST_CLEAR; 3643c588192SMat Martineau } 3653c588192SMat Martineau 3663c588192SMat Martineau /* Unlink the number from the list and clear it */ 3673c588192SMat Martineau seq_list->list[prev & mask] = seq_list->list[seq & mask]; 3683c588192SMat Martineau seq_list->list[seq & mask] = L2CAP_SEQ_LIST_CLEAR; 3693c588192SMat Martineau if (seq_list->tail == seq) 3703c588192SMat Martineau seq_list->tail = prev; 3713c588192SMat Martineau } 3723c588192SMat Martineau return seq; 3733c588192SMat Martineau } 3743c588192SMat Martineau 3753c588192SMat Martineau static inline u16 l2cap_seq_list_pop(struct l2cap_seq_list *seq_list) 3763c588192SMat Martineau { 3773c588192SMat Martineau /* Remove the head in constant time */ 3783c588192SMat Martineau return l2cap_seq_list_remove(seq_list, seq_list->head); 3793c588192SMat Martineau } 3803c588192SMat Martineau 3813c588192SMat Martineau static void l2cap_seq_list_clear(struct l2cap_seq_list *seq_list) 3823c588192SMat Martineau { 3833c588192SMat Martineau u16 i; 384f522ae36SGustavo Padovan 385f522ae36SGustavo Padovan if (seq_list->head == L2CAP_SEQ_LIST_CLEAR) 386f522ae36SGustavo Padovan return; 387f522ae36SGustavo Padovan 3883c588192SMat Martineau for (i = 0; i <= seq_list->mask; i++) 3893c588192SMat Martineau seq_list->list[i] = L2CAP_SEQ_LIST_CLEAR; 3903c588192SMat Martineau 3913c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3923c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3933c588192SMat Martineau } 3943c588192SMat Martineau 3953c588192SMat Martineau static void l2cap_seq_list_append(struct l2cap_seq_list *seq_list, u16 seq) 3963c588192SMat Martineau { 3973c588192SMat Martineau u16 mask = seq_list->mask; 3983c588192SMat Martineau 3993c588192SMat Martineau /* All appends happen in constant time */ 4003c588192SMat Martineau 401f522ae36SGustavo Padovan if (seq_list->list[seq & mask] != L2CAP_SEQ_LIST_CLEAR) 402f522ae36SGustavo Padovan return; 403f522ae36SGustavo Padovan 4043c588192SMat Martineau if (seq_list->tail == L2CAP_SEQ_LIST_CLEAR) 4053c588192SMat Martineau seq_list->head = seq; 4063c588192SMat Martineau else 4073c588192SMat Martineau seq_list->list[seq_list->tail & mask] = seq; 4083c588192SMat Martineau 4093c588192SMat Martineau seq_list->tail = seq; 4103c588192SMat Martineau seq_list->list[seq & mask] = L2CAP_SEQ_LIST_TAIL; 4113c588192SMat Martineau } 4123c588192SMat Martineau 413721c4181SGustavo F. Padovan static void l2cap_chan_timeout(struct work_struct *work) 414ab07801dSGustavo F. Padovan { 415721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 416721c4181SGustavo F. Padovan chan_timer.work); 4173df91ea2SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 418ab07801dSGustavo F. Padovan int reason; 419ab07801dSGustavo F. Padovan 420e05dcc32SAndrei Emeltchenko BT_DBG("chan %p state %s", chan, state_to_string(chan->state)); 421ab07801dSGustavo F. Padovan 4223df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 4236be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 424ab07801dSGustavo F. Padovan 42589bc500eSGustavo F. Padovan if (chan->state == BT_CONNECTED || chan->state == BT_CONFIG) 426ab07801dSGustavo F. Padovan reason = ECONNREFUSED; 42789bc500eSGustavo F. Padovan else if (chan->state == BT_CONNECT && 428ab07801dSGustavo F. Padovan chan->sec_level != BT_SECURITY_SDP) 429ab07801dSGustavo F. Padovan reason = ECONNREFUSED; 430ab07801dSGustavo F. Padovan else 431ab07801dSGustavo F. Padovan reason = ETIMEDOUT; 432ab07801dSGustavo F. Padovan 4330f852724SGustavo F. Padovan l2cap_chan_close(chan, reason); 434ab07801dSGustavo F. Padovan 4356be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 436ab07801dSGustavo F. Padovan 43780b98027SGustavo Padovan chan->ops->close(chan); 4383df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 4393df91ea2SAndrei Emeltchenko 440371fd835SUlisses Furquim l2cap_chan_put(chan); 441ab07801dSGustavo F. Padovan } 442ab07801dSGustavo F. Padovan 443eef1d9b6SGustavo Padovan struct l2cap_chan *l2cap_chan_create(void) 4440a708f8fSGustavo F. Padovan { 44548454079SGustavo F. Padovan struct l2cap_chan *chan; 4460a708f8fSGustavo F. Padovan 44748454079SGustavo F. Padovan chan = kzalloc(sizeof(*chan), GFP_ATOMIC); 44848454079SGustavo F. Padovan if (!chan) 44948454079SGustavo F. Padovan return NULL; 4500a708f8fSGustavo F. Padovan 451c03b355eSAndrei Emeltchenko mutex_init(&chan->lock); 452c03b355eSAndrei Emeltchenko 453333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 45423691d75SGustavo F. Padovan list_add(&chan->global_l, &chan_list); 455333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 45623691d75SGustavo F. Padovan 457721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->chan_timer, l2cap_chan_timeout); 458ab07801dSGustavo F. Padovan 45989bc500eSGustavo F. Padovan chan->state = BT_OPEN; 46089bc500eSGustavo F. Padovan 461144ad330SSyam Sidhardhan kref_init(&chan->kref); 46271ba0e56SGustavo F. Padovan 4632827011fSMat Martineau /* This flag is cleared in l2cap_chan_ready() */ 4642827011fSMat Martineau set_bit(CONF_NOT_COMPLETE, &chan->conf_state); 4652827011fSMat Martineau 466eef1d9b6SGustavo Padovan BT_DBG("chan %p", chan); 467abc545b8SSzymon Janc 46848454079SGustavo F. Padovan return chan; 4690a708f8fSGustavo F. Padovan } 4700a708f8fSGustavo F. Padovan 471144ad330SSyam Sidhardhan static void l2cap_chan_destroy(struct kref *kref) 4726ff5abbfSGustavo F. Padovan { 473144ad330SSyam Sidhardhan struct l2cap_chan *chan = container_of(kref, struct l2cap_chan, kref); 474144ad330SSyam Sidhardhan 4754af66c69SJaganath Kanakkassery BT_DBG("chan %p", chan); 4764af66c69SJaganath Kanakkassery 477333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 47823691d75SGustavo F. Padovan list_del(&chan->global_l); 479333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 48023691d75SGustavo F. Padovan 4814af66c69SJaganath Kanakkassery kfree(chan); 4826ff5abbfSGustavo F. Padovan } 4836ff5abbfSGustavo F. Padovan 48430648372SJaganath Kanakkassery void l2cap_chan_hold(struct l2cap_chan *c) 48530648372SJaganath Kanakkassery { 486144ad330SSyam Sidhardhan BT_DBG("chan %p orig refcnt %d", c, atomic_read(&c->kref.refcount)); 48730648372SJaganath Kanakkassery 488144ad330SSyam Sidhardhan kref_get(&c->kref); 48930648372SJaganath Kanakkassery } 49030648372SJaganath Kanakkassery 49130648372SJaganath Kanakkassery void l2cap_chan_put(struct l2cap_chan *c) 49230648372SJaganath Kanakkassery { 493144ad330SSyam Sidhardhan BT_DBG("chan %p orig refcnt %d", c, atomic_read(&c->kref.refcount)); 49430648372SJaganath Kanakkassery 495144ad330SSyam Sidhardhan kref_put(&c->kref, l2cap_chan_destroy); 49630648372SJaganath Kanakkassery } 49730648372SJaganath Kanakkassery 498bd4b1653SAndrei Emeltchenko void l2cap_chan_set_defaults(struct l2cap_chan *chan) 499bd4b1653SAndrei Emeltchenko { 500bd4b1653SAndrei Emeltchenko chan->fcs = L2CAP_FCS_CRC16; 501bd4b1653SAndrei Emeltchenko chan->max_tx = L2CAP_DEFAULT_MAX_TX; 502bd4b1653SAndrei Emeltchenko chan->tx_win = L2CAP_DEFAULT_TX_WINDOW; 503bd4b1653SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_TX_WINDOW; 504c20f8e35SMat Martineau chan->ack_win = L2CAP_DEFAULT_TX_WINDOW; 505bd4b1653SAndrei Emeltchenko chan->sec_level = BT_SECURITY_LOW; 506bd4b1653SAndrei Emeltchenko 507bd4b1653SAndrei Emeltchenko set_bit(FLAG_FORCE_ACTIVE, &chan->flags); 508bd4b1653SAndrei Emeltchenko } 509bd4b1653SAndrei Emeltchenko 51093c3e8f5SAndrei Emeltchenko void __l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan) 5110a708f8fSGustavo F. Padovan { 5120a708f8fSGustavo F. Padovan BT_DBG("conn %p, psm 0x%2.2x, dcid 0x%4.4x", conn, 513097db76cSAndrei Emeltchenko __le16_to_cpu(chan->psm), chan->dcid); 5140a708f8fSGustavo F. Padovan 5159f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_REMOTE_USER_TERM; 5160a708f8fSGustavo F. Padovan 5178c1d787bSGustavo F. Padovan chan->conn = conn; 5180a708f8fSGustavo F. Padovan 5195491120eSAndrei Emeltchenko switch (chan->chan_type) { 5205491120eSAndrei Emeltchenko case L2CAP_CHAN_CONN_ORIENTED: 521b62f328bSVille Tervo if (conn->hcon->type == LE_LINK) { 522b62f328bSVille Tervo /* LE connection */ 5236fcb06a2SAndre Guedes chan->omtu = L2CAP_DEFAULT_MTU; 5249f22398cSJohan Hedberg if (chan->dcid == L2CAP_CID_ATT) 525073d1cf3SJohan Hedberg chan->scid = L2CAP_CID_ATT; 5269f22398cSJohan Hedberg else 5279f22398cSJohan Hedberg chan->scid = l2cap_alloc_cid(conn); 528b62f328bSVille Tervo } else { 5290a708f8fSGustavo F. Padovan /* Alloc CID for connection-oriented socket */ 530fe4128e0SGustavo F. Padovan chan->scid = l2cap_alloc_cid(conn); 5310c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 532b62f328bSVille Tervo } 5335491120eSAndrei Emeltchenko break; 5345491120eSAndrei Emeltchenko 5355491120eSAndrei Emeltchenko case L2CAP_CHAN_CONN_LESS: 5360a708f8fSGustavo F. Padovan /* Connectionless socket */ 537fe4128e0SGustavo F. Padovan chan->scid = L2CAP_CID_CONN_LESS; 538fe4128e0SGustavo F. Padovan chan->dcid = L2CAP_CID_CONN_LESS; 5390c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 5405491120eSAndrei Emeltchenko break; 5415491120eSAndrei Emeltchenko 542416fa752SAndrei Emeltchenko case L2CAP_CHAN_CONN_FIX_A2MP: 543416fa752SAndrei Emeltchenko chan->scid = L2CAP_CID_A2MP; 544416fa752SAndrei Emeltchenko chan->dcid = L2CAP_CID_A2MP; 545416fa752SAndrei Emeltchenko chan->omtu = L2CAP_A2MP_DEFAULT_MTU; 546416fa752SAndrei Emeltchenko chan->imtu = L2CAP_A2MP_DEFAULT_MTU; 547416fa752SAndrei Emeltchenko break; 548416fa752SAndrei Emeltchenko 5495491120eSAndrei Emeltchenko default: 5500a708f8fSGustavo F. Padovan /* Raw socket can send/recv signalling messages only */ 551fe4128e0SGustavo F. Padovan chan->scid = L2CAP_CID_SIGNALING; 552fe4128e0SGustavo F. Padovan chan->dcid = L2CAP_CID_SIGNALING; 5530c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 5540a708f8fSGustavo F. Padovan } 5550a708f8fSGustavo F. Padovan 5568f7975b1SAndrei Emeltchenko chan->local_id = L2CAP_BESTEFFORT_ID; 5578f7975b1SAndrei Emeltchenko chan->local_stype = L2CAP_SERV_BESTEFFORT; 5588f7975b1SAndrei Emeltchenko chan->local_msdu = L2CAP_DEFAULT_MAX_SDU_SIZE; 5598f7975b1SAndrei Emeltchenko chan->local_sdu_itime = L2CAP_DEFAULT_SDU_ITIME; 5608f7975b1SAndrei Emeltchenko chan->local_acc_lat = L2CAP_DEFAULT_ACC_LAT; 5618936fa6dSAndrei Emeltchenko chan->local_flush_to = L2CAP_EFS_DEFAULT_FLUSH_TO; 5628f7975b1SAndrei Emeltchenko 563371fd835SUlisses Furquim l2cap_chan_hold(chan); 564baa7e1faSGustavo F. Padovan 5655ee9891dSJohan Hedberg hci_conn_hold(conn->hcon); 5665ee9891dSJohan Hedberg 5673df91ea2SAndrei Emeltchenko list_add(&chan->list, &conn->chan_l); 568643162a8SAndrei Emeltchenko } 569643162a8SAndrei Emeltchenko 570466f8004SAndrei Emeltchenko void l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan) 571643162a8SAndrei Emeltchenko { 572643162a8SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 573643162a8SAndrei Emeltchenko __l2cap_chan_add(conn, chan); 5743df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 5750a708f8fSGustavo F. Padovan } 5760a708f8fSGustavo F. Padovan 577466f8004SAndrei Emeltchenko void l2cap_chan_del(struct l2cap_chan *chan, int err) 5780a708f8fSGustavo F. Padovan { 5798c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 5800a708f8fSGustavo F. Padovan 581c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 5820a708f8fSGustavo F. Padovan 58349208c9cSGustavo F. Padovan BT_DBG("chan %p, conn %p, err %d", chan, conn, err); 5840a708f8fSGustavo F. Padovan 5850a708f8fSGustavo F. Padovan if (conn) { 58656f60984SAndrei Emeltchenko struct amp_mgr *mgr = conn->hcon->amp_mgr; 587baa7e1faSGustavo F. Padovan /* Delete from channel list */ 5883df91ea2SAndrei Emeltchenko list_del(&chan->list); 5893d57dc68SGustavo F. Padovan 590371fd835SUlisses Furquim l2cap_chan_put(chan); 591baa7e1faSGustavo F. Padovan 5928c1d787bSGustavo F. Padovan chan->conn = NULL; 5933cabbfdaSAndrei Emeltchenko 5943cabbfdaSAndrei Emeltchenko if (chan->chan_type != L2CAP_CHAN_CONN_FIX_A2MP) 59576a68ba0SDavid Herrmann hci_conn_drop(conn->hcon); 59656f60984SAndrei Emeltchenko 59756f60984SAndrei Emeltchenko if (mgr && mgr->bredr_chan == chan) 59856f60984SAndrei Emeltchenko mgr->bredr_chan = NULL; 5990a708f8fSGustavo F. Padovan } 6000a708f8fSGustavo F. Padovan 601419e08c1SAndrei Emeltchenko if (chan->hs_hchan) { 602419e08c1SAndrei Emeltchenko struct hci_chan *hs_hchan = chan->hs_hchan; 603419e08c1SAndrei Emeltchenko 604419e08c1SAndrei Emeltchenko BT_DBG("chan %p disconnect hs_hchan %p", chan, hs_hchan); 605419e08c1SAndrei Emeltchenko amp_disconnect_logical_link(hs_hchan); 606419e08c1SAndrei Emeltchenko } 607419e08c1SAndrei Emeltchenko 608c0df7f6eSAndrei Emeltchenko chan->ops->teardown(chan, err); 6096be36555SAndrei Emeltchenko 6102827011fSMat Martineau if (test_bit(CONF_NOT_COMPLETE, &chan->conf_state)) 6116ff5abbfSGustavo F. Padovan return; 6122ead70b8SGustavo F. Padovan 613ee556f66SGustavo Padovan switch(chan->mode) { 614ee556f66SGustavo Padovan case L2CAP_MODE_BASIC: 615ee556f66SGustavo Padovan break; 6160a708f8fSGustavo F. Padovan 617ee556f66SGustavo Padovan case L2CAP_MODE_ERTM: 6181a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 6191a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 6201a09bcb9SGustavo F. Padovan __clear_ack_timer(chan); 6210a708f8fSGustavo F. Padovan 622f1c6775bSGustavo F. Padovan skb_queue_purge(&chan->srej_q); 6230a708f8fSGustavo F. Padovan 6243c588192SMat Martineau l2cap_seq_list_free(&chan->srej_list); 6253c588192SMat Martineau l2cap_seq_list_free(&chan->retrans_list); 626ee556f66SGustavo Padovan 627ee556f66SGustavo Padovan /* fall through */ 628ee556f66SGustavo Padovan 629ee556f66SGustavo Padovan case L2CAP_MODE_STREAMING: 630ee556f66SGustavo Padovan skb_queue_purge(&chan->tx_q); 631ee556f66SGustavo Padovan break; 6320a708f8fSGustavo F. Padovan } 633ee556f66SGustavo Padovan 634ee556f66SGustavo Padovan return; 6350a708f8fSGustavo F. Padovan } 6360a708f8fSGustavo F. Padovan 6370f852724SGustavo F. Padovan void l2cap_chan_close(struct l2cap_chan *chan, int reason) 6384519de9aSGustavo F. Padovan { 6394519de9aSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 6404519de9aSGustavo F. Padovan 6417eafc59eSMarcel Holtmann BT_DBG("chan %p state %s", chan, state_to_string(chan->state)); 6424519de9aSGustavo F. Padovan 64389bc500eSGustavo F. Padovan switch (chan->state) { 6444519de9aSGustavo F. Padovan case BT_LISTEN: 645c0df7f6eSAndrei Emeltchenko chan->ops->teardown(chan, 0); 6464519de9aSGustavo F. Padovan break; 6474519de9aSGustavo F. Padovan 6484519de9aSGustavo F. Padovan case BT_CONNECTED: 6494519de9aSGustavo F. Padovan case BT_CONFIG: 650715ec005SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED && 6514519de9aSGustavo F. Padovan conn->hcon->type == ACL_LINK) { 6528d836d71SGustavo Padovan __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 6535e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, reason); 6544519de9aSGustavo F. Padovan } else 6554519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 6564519de9aSGustavo F. Padovan break; 6574519de9aSGustavo F. Padovan 6584519de9aSGustavo F. Padovan case BT_CONNECT2: 659715ec005SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED && 6604519de9aSGustavo F. Padovan conn->hcon->type == ACL_LINK) { 6614519de9aSGustavo F. Padovan struct l2cap_conn_rsp rsp; 6624519de9aSGustavo F. Padovan __u16 result; 6634519de9aSGustavo F. Padovan 664bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) 6654519de9aSGustavo F. Padovan result = L2CAP_CR_SEC_BLOCK; 6664519de9aSGustavo F. Padovan else 6674519de9aSGustavo F. Padovan result = L2CAP_CR_BAD_PSM; 668bdc25783SMarcel Holtmann 66989bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_DISCONN); 6704519de9aSGustavo F. Padovan 6714519de9aSGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 6724519de9aSGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 6734519de9aSGustavo F. Padovan rsp.result = cpu_to_le16(result); 674ac73498cSAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_NO_INFO); 6754519de9aSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 6764519de9aSGustavo F. Padovan sizeof(rsp), &rsp); 6774519de9aSGustavo F. Padovan } 6784519de9aSGustavo F. Padovan 6794519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 6804519de9aSGustavo F. Padovan break; 6814519de9aSGustavo F. Padovan 6824519de9aSGustavo F. Padovan case BT_CONNECT: 6834519de9aSGustavo F. Padovan case BT_DISCONN: 6844519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 6854519de9aSGustavo F. Padovan break; 6864519de9aSGustavo F. Padovan 6874519de9aSGustavo F. Padovan default: 688c0df7f6eSAndrei Emeltchenko chan->ops->teardown(chan, 0); 6894519de9aSGustavo F. Padovan break; 6904519de9aSGustavo F. Padovan } 6914519de9aSGustavo F. Padovan } 6924519de9aSGustavo F. Padovan 6934343478fSGustavo F. Padovan static inline u8 l2cap_get_auth_type(struct l2cap_chan *chan) 6940a708f8fSGustavo F. Padovan { 6956a974b50SMarcel Holtmann switch (chan->chan_type) { 6966a974b50SMarcel Holtmann case L2CAP_CHAN_RAW: 6974343478fSGustavo F. Padovan switch (chan->sec_level) { 6980a708f8fSGustavo F. Padovan case BT_SECURITY_HIGH: 6990a708f8fSGustavo F. Padovan return HCI_AT_DEDICATED_BONDING_MITM; 7000a708f8fSGustavo F. Padovan case BT_SECURITY_MEDIUM: 7010a708f8fSGustavo F. Padovan return HCI_AT_DEDICATED_BONDING; 7020a708f8fSGustavo F. Padovan default: 7030a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 7040a708f8fSGustavo F. Padovan } 7056a974b50SMarcel Holtmann break; 7063124b843SMarcel Holtmann case L2CAP_CHAN_CONN_LESS: 7073124b843SMarcel Holtmann if (chan->psm == __constant_cpu_to_le16(L2CAP_PSM_3DSP)) { 7083124b843SMarcel Holtmann if (chan->sec_level == BT_SECURITY_LOW) 7093124b843SMarcel Holtmann chan->sec_level = BT_SECURITY_SDP; 7103124b843SMarcel Holtmann } 7113124b843SMarcel Holtmann if (chan->sec_level == BT_SECURITY_HIGH) 7123124b843SMarcel Holtmann return HCI_AT_NO_BONDING_MITM; 7133124b843SMarcel Holtmann else 7143124b843SMarcel Holtmann return HCI_AT_NO_BONDING; 7153124b843SMarcel Holtmann break; 7166a974b50SMarcel Holtmann case L2CAP_CHAN_CONN_ORIENTED: 7176a974b50SMarcel Holtmann if (chan->psm == __constant_cpu_to_le16(L2CAP_PSM_SDP)) { 7184343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_LOW) 7194343478fSGustavo F. Padovan chan->sec_level = BT_SECURITY_SDP; 7200a708f8fSGustavo F. Padovan 7214343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_HIGH) 7220a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING_MITM; 7230a708f8fSGustavo F. Padovan else 7240a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 7256a974b50SMarcel Holtmann } 7266a974b50SMarcel Holtmann /* fall through */ 7276a974b50SMarcel Holtmann default: 7284343478fSGustavo F. Padovan switch (chan->sec_level) { 7290a708f8fSGustavo F. Padovan case BT_SECURITY_HIGH: 7300a708f8fSGustavo F. Padovan return HCI_AT_GENERAL_BONDING_MITM; 7310a708f8fSGustavo F. Padovan case BT_SECURITY_MEDIUM: 7320a708f8fSGustavo F. Padovan return HCI_AT_GENERAL_BONDING; 7330a708f8fSGustavo F. Padovan default: 7340a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 7350a708f8fSGustavo F. Padovan } 7366a974b50SMarcel Holtmann break; 7370a708f8fSGustavo F. Padovan } 7380a708f8fSGustavo F. Padovan } 7390a708f8fSGustavo F. Padovan 7400a708f8fSGustavo F. Padovan /* Service level security */ 741d45fc423SGustavo F. Padovan int l2cap_chan_check_security(struct l2cap_chan *chan) 7420a708f8fSGustavo F. Padovan { 7438c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 7440a708f8fSGustavo F. Padovan __u8 auth_type; 7450a708f8fSGustavo F. Padovan 7464343478fSGustavo F. Padovan auth_type = l2cap_get_auth_type(chan); 7470a708f8fSGustavo F. Padovan 7484343478fSGustavo F. Padovan return hci_conn_security(conn->hcon, chan->sec_level, auth_type); 7490a708f8fSGustavo F. Padovan } 7500a708f8fSGustavo F. Padovan 751b5ad8b7fSJohannes Berg static u8 l2cap_get_ident(struct l2cap_conn *conn) 7520a708f8fSGustavo F. Padovan { 7530a708f8fSGustavo F. Padovan u8 id; 7540a708f8fSGustavo F. Padovan 7550a708f8fSGustavo F. Padovan /* Get next available identificator. 7560a708f8fSGustavo F. Padovan * 1 - 128 are used by kernel. 7570a708f8fSGustavo F. Padovan * 129 - 199 are reserved. 7580a708f8fSGustavo F. Padovan * 200 - 254 are used by utilities like l2ping, etc. 7590a708f8fSGustavo F. Padovan */ 7600a708f8fSGustavo F. Padovan 761333055f2SGustavo F. Padovan spin_lock(&conn->lock); 7620a708f8fSGustavo F. Padovan 7630a708f8fSGustavo F. Padovan if (++conn->tx_ident > 128) 7640a708f8fSGustavo F. Padovan conn->tx_ident = 1; 7650a708f8fSGustavo F. Padovan 7660a708f8fSGustavo F. Padovan id = conn->tx_ident; 7670a708f8fSGustavo F. Padovan 768333055f2SGustavo F. Padovan spin_unlock(&conn->lock); 7690a708f8fSGustavo F. Padovan 7700a708f8fSGustavo F. Padovan return id; 7710a708f8fSGustavo F. Padovan } 7720a708f8fSGustavo F. Padovan 7732d792818SGustavo Padovan static void l2cap_send_cmd(struct l2cap_conn *conn, u8 ident, u8 code, u16 len, 7742d792818SGustavo Padovan void *data) 7750a708f8fSGustavo F. Padovan { 7760a708f8fSGustavo F. Padovan struct sk_buff *skb = l2cap_build_cmd(conn, code, ident, len, data); 7770a708f8fSGustavo F. Padovan u8 flags; 7780a708f8fSGustavo F. Padovan 7790a708f8fSGustavo F. Padovan BT_DBG("code 0x%2.2x", code); 7800a708f8fSGustavo F. Padovan 7810a708f8fSGustavo F. Padovan if (!skb) 7820a708f8fSGustavo F. Padovan return; 7830a708f8fSGustavo F. Padovan 7840a708f8fSGustavo F. Padovan if (lmp_no_flush_capable(conn->hcon->hdev)) 7850a708f8fSGustavo F. Padovan flags = ACL_START_NO_FLUSH; 7860a708f8fSGustavo F. Padovan else 7870a708f8fSGustavo F. Padovan flags = ACL_START; 7880a708f8fSGustavo F. Padovan 78914b12d0bSJaikumar Ganesh bt_cb(skb)->force_active = BT_POWER_FORCE_ACTIVE_ON; 7905e59b791SLuiz Augusto von Dentz skb->priority = HCI_PRIO_MAX; 79114b12d0bSJaikumar Ganesh 79273d80debSLuiz Augusto von Dentz hci_send_acl(conn->hchan, skb, flags); 7930a708f8fSGustavo F. Padovan } 7940a708f8fSGustavo F. Padovan 79502b0fbb9SMat Martineau static bool __chan_is_moving(struct l2cap_chan *chan) 79602b0fbb9SMat Martineau { 79702b0fbb9SMat Martineau return chan->move_state != L2CAP_MOVE_STABLE && 79802b0fbb9SMat Martineau chan->move_state != L2CAP_MOVE_WAIT_PREPARE; 79902b0fbb9SMat Martineau } 80002b0fbb9SMat Martineau 80173d80debSLuiz Augusto von Dentz static void l2cap_do_send(struct l2cap_chan *chan, struct sk_buff *skb) 80273d80debSLuiz Augusto von Dentz { 80373d80debSLuiz Augusto von Dentz struct hci_conn *hcon = chan->conn->hcon; 80473d80debSLuiz Augusto von Dentz u16 flags; 80573d80debSLuiz Augusto von Dentz 80673d80debSLuiz Augusto von Dentz BT_DBG("chan %p, skb %p len %d priority %u", chan, skb, skb->len, 80773d80debSLuiz Augusto von Dentz skb->priority); 80873d80debSLuiz Augusto von Dentz 809d5f8a75dSMat Martineau if (chan->hs_hcon && !__chan_is_moving(chan)) { 810d5f8a75dSMat Martineau if (chan->hs_hchan) 811d5f8a75dSMat Martineau hci_send_acl(chan->hs_hchan, skb, ACL_COMPLETE); 812d5f8a75dSMat Martineau else 813d5f8a75dSMat Martineau kfree_skb(skb); 814d5f8a75dSMat Martineau 815d5f8a75dSMat Martineau return; 816d5f8a75dSMat Martineau } 817d5f8a75dSMat Martineau 81873d80debSLuiz Augusto von Dentz if (!test_bit(FLAG_FLUSHABLE, &chan->flags) && 81973d80debSLuiz Augusto von Dentz lmp_no_flush_capable(hcon->hdev)) 82073d80debSLuiz Augusto von Dentz flags = ACL_START_NO_FLUSH; 82173d80debSLuiz Augusto von Dentz else 82273d80debSLuiz Augusto von Dentz flags = ACL_START; 82373d80debSLuiz Augusto von Dentz 82473d80debSLuiz Augusto von Dentz bt_cb(skb)->force_active = test_bit(FLAG_FORCE_ACTIVE, &chan->flags); 82573d80debSLuiz Augusto von Dentz hci_send_acl(chan->conn->hchan, skb, flags); 8260a708f8fSGustavo F. Padovan } 8270a708f8fSGustavo F. Padovan 828b5c6aaedSMat Martineau static void __unpack_enhanced_control(u16 enh, struct l2cap_ctrl *control) 829b5c6aaedSMat Martineau { 830b5c6aaedSMat Martineau control->reqseq = (enh & L2CAP_CTRL_REQSEQ) >> L2CAP_CTRL_REQSEQ_SHIFT; 831b5c6aaedSMat Martineau control->final = (enh & L2CAP_CTRL_FINAL) >> L2CAP_CTRL_FINAL_SHIFT; 832b5c6aaedSMat Martineau 833b5c6aaedSMat Martineau if (enh & L2CAP_CTRL_FRAME_TYPE) { 834b5c6aaedSMat Martineau /* S-Frame */ 835b5c6aaedSMat Martineau control->sframe = 1; 836b5c6aaedSMat Martineau control->poll = (enh & L2CAP_CTRL_POLL) >> L2CAP_CTRL_POLL_SHIFT; 837b5c6aaedSMat Martineau control->super = (enh & L2CAP_CTRL_SUPERVISE) >> L2CAP_CTRL_SUPER_SHIFT; 838b5c6aaedSMat Martineau 839b5c6aaedSMat Martineau control->sar = 0; 840b5c6aaedSMat Martineau control->txseq = 0; 841b5c6aaedSMat Martineau } else { 842b5c6aaedSMat Martineau /* I-Frame */ 843b5c6aaedSMat Martineau control->sframe = 0; 844b5c6aaedSMat Martineau control->sar = (enh & L2CAP_CTRL_SAR) >> L2CAP_CTRL_SAR_SHIFT; 845b5c6aaedSMat Martineau control->txseq = (enh & L2CAP_CTRL_TXSEQ) >> L2CAP_CTRL_TXSEQ_SHIFT; 846b5c6aaedSMat Martineau 847b5c6aaedSMat Martineau control->poll = 0; 848b5c6aaedSMat Martineau control->super = 0; 849b5c6aaedSMat Martineau } 850b5c6aaedSMat Martineau } 851b5c6aaedSMat Martineau 852b5c6aaedSMat Martineau static void __unpack_extended_control(u32 ext, struct l2cap_ctrl *control) 853b5c6aaedSMat Martineau { 854b5c6aaedSMat Martineau control->reqseq = (ext & L2CAP_EXT_CTRL_REQSEQ) >> L2CAP_EXT_CTRL_REQSEQ_SHIFT; 855b5c6aaedSMat Martineau control->final = (ext & L2CAP_EXT_CTRL_FINAL) >> L2CAP_EXT_CTRL_FINAL_SHIFT; 856b5c6aaedSMat Martineau 857b5c6aaedSMat Martineau if (ext & L2CAP_EXT_CTRL_FRAME_TYPE) { 858b5c6aaedSMat Martineau /* S-Frame */ 859b5c6aaedSMat Martineau control->sframe = 1; 860b5c6aaedSMat Martineau control->poll = (ext & L2CAP_EXT_CTRL_POLL) >> L2CAP_EXT_CTRL_POLL_SHIFT; 861b5c6aaedSMat Martineau control->super = (ext & L2CAP_EXT_CTRL_SUPERVISE) >> L2CAP_EXT_CTRL_SUPER_SHIFT; 862b5c6aaedSMat Martineau 863b5c6aaedSMat Martineau control->sar = 0; 864b5c6aaedSMat Martineau control->txseq = 0; 865b5c6aaedSMat Martineau } else { 866b5c6aaedSMat Martineau /* I-Frame */ 867b5c6aaedSMat Martineau control->sframe = 0; 868b5c6aaedSMat Martineau control->sar = (ext & L2CAP_EXT_CTRL_SAR) >> L2CAP_EXT_CTRL_SAR_SHIFT; 869b5c6aaedSMat Martineau control->txseq = (ext & L2CAP_EXT_CTRL_TXSEQ) >> L2CAP_EXT_CTRL_TXSEQ_SHIFT; 870b5c6aaedSMat Martineau 871b5c6aaedSMat Martineau control->poll = 0; 872b5c6aaedSMat Martineau control->super = 0; 873b5c6aaedSMat Martineau } 874b5c6aaedSMat Martineau } 875b5c6aaedSMat Martineau 876b5c6aaedSMat Martineau static inline void __unpack_control(struct l2cap_chan *chan, 877b5c6aaedSMat Martineau struct sk_buff *skb) 878b5c6aaedSMat Martineau { 879b5c6aaedSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 880b5c6aaedSMat Martineau __unpack_extended_control(get_unaligned_le32(skb->data), 881b5c6aaedSMat Martineau &bt_cb(skb)->control); 882cec8ab6eSMat Martineau skb_pull(skb, L2CAP_EXT_CTRL_SIZE); 883b5c6aaedSMat Martineau } else { 884b5c6aaedSMat Martineau __unpack_enhanced_control(get_unaligned_le16(skb->data), 885b5c6aaedSMat Martineau &bt_cb(skb)->control); 886cec8ab6eSMat Martineau skb_pull(skb, L2CAP_ENH_CTRL_SIZE); 887b5c6aaedSMat Martineau } 888b5c6aaedSMat Martineau } 889b5c6aaedSMat Martineau 890b5c6aaedSMat Martineau static u32 __pack_extended_control(struct l2cap_ctrl *control) 891b5c6aaedSMat Martineau { 892b5c6aaedSMat Martineau u32 packed; 893b5c6aaedSMat Martineau 894b5c6aaedSMat Martineau packed = control->reqseq << L2CAP_EXT_CTRL_REQSEQ_SHIFT; 895b5c6aaedSMat Martineau packed |= control->final << L2CAP_EXT_CTRL_FINAL_SHIFT; 896b5c6aaedSMat Martineau 897b5c6aaedSMat Martineau if (control->sframe) { 898b5c6aaedSMat Martineau packed |= control->poll << L2CAP_EXT_CTRL_POLL_SHIFT; 899b5c6aaedSMat Martineau packed |= control->super << L2CAP_EXT_CTRL_SUPER_SHIFT; 900b5c6aaedSMat Martineau packed |= L2CAP_EXT_CTRL_FRAME_TYPE; 901b5c6aaedSMat Martineau } else { 902b5c6aaedSMat Martineau packed |= control->sar << L2CAP_EXT_CTRL_SAR_SHIFT; 903b5c6aaedSMat Martineau packed |= control->txseq << L2CAP_EXT_CTRL_TXSEQ_SHIFT; 904b5c6aaedSMat Martineau } 905b5c6aaedSMat Martineau 906b5c6aaedSMat Martineau return packed; 907b5c6aaedSMat Martineau } 908b5c6aaedSMat Martineau 909b5c6aaedSMat Martineau static u16 __pack_enhanced_control(struct l2cap_ctrl *control) 910b5c6aaedSMat Martineau { 911b5c6aaedSMat Martineau u16 packed; 912b5c6aaedSMat Martineau 913b5c6aaedSMat Martineau packed = control->reqseq << L2CAP_CTRL_REQSEQ_SHIFT; 914b5c6aaedSMat Martineau packed |= control->final << L2CAP_CTRL_FINAL_SHIFT; 915b5c6aaedSMat Martineau 916b5c6aaedSMat Martineau if (control->sframe) { 917b5c6aaedSMat Martineau packed |= control->poll << L2CAP_CTRL_POLL_SHIFT; 918b5c6aaedSMat Martineau packed |= control->super << L2CAP_CTRL_SUPER_SHIFT; 919b5c6aaedSMat Martineau packed |= L2CAP_CTRL_FRAME_TYPE; 920b5c6aaedSMat Martineau } else { 921b5c6aaedSMat Martineau packed |= control->sar << L2CAP_CTRL_SAR_SHIFT; 922b5c6aaedSMat Martineau packed |= control->txseq << L2CAP_CTRL_TXSEQ_SHIFT; 923b5c6aaedSMat Martineau } 924b5c6aaedSMat Martineau 925b5c6aaedSMat Martineau return packed; 926b5c6aaedSMat Martineau } 927b5c6aaedSMat Martineau 928b5c6aaedSMat Martineau static inline void __pack_control(struct l2cap_chan *chan, 929b5c6aaedSMat Martineau struct l2cap_ctrl *control, 930b5c6aaedSMat Martineau struct sk_buff *skb) 931b5c6aaedSMat Martineau { 932b5c6aaedSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 933b5c6aaedSMat Martineau put_unaligned_le32(__pack_extended_control(control), 934b5c6aaedSMat Martineau skb->data + L2CAP_HDR_SIZE); 935b5c6aaedSMat Martineau } else { 936b5c6aaedSMat Martineau put_unaligned_le16(__pack_enhanced_control(control), 937b5c6aaedSMat Martineau skb->data + L2CAP_HDR_SIZE); 938b5c6aaedSMat Martineau } 939b5c6aaedSMat Martineau } 940b5c6aaedSMat Martineau 941ba7aa64fSGustavo Padovan static inline unsigned int __ertm_hdr_size(struct l2cap_chan *chan) 942ba7aa64fSGustavo Padovan { 943ba7aa64fSGustavo Padovan if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 944ba7aa64fSGustavo Padovan return L2CAP_EXT_HDR_SIZE; 945ba7aa64fSGustavo Padovan else 946ba7aa64fSGustavo Padovan return L2CAP_ENH_HDR_SIZE; 947ba7aa64fSGustavo Padovan } 948ba7aa64fSGustavo Padovan 949a67d7f6fSMat Martineau static struct sk_buff *l2cap_create_sframe_pdu(struct l2cap_chan *chan, 950a67d7f6fSMat Martineau u32 control) 9510a708f8fSGustavo F. Padovan { 9520a708f8fSGustavo F. Padovan struct sk_buff *skb; 9530a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 954ba7aa64fSGustavo Padovan int hlen = __ertm_hdr_size(chan); 9550a708f8fSGustavo F. Padovan 9560a708f8fSGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 95703a51213SAndrei Emeltchenko hlen += L2CAP_FCS_SIZE; 9580a708f8fSGustavo F. Padovan 959a67d7f6fSMat Martineau skb = bt_skb_alloc(hlen, GFP_KERNEL); 9600a708f8fSGustavo F. Padovan 9610a708f8fSGustavo F. Padovan if (!skb) 962a67d7f6fSMat Martineau return ERR_PTR(-ENOMEM); 9630a708f8fSGustavo F. Padovan 9640a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 9650a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(hlen - L2CAP_HDR_SIZE); 966fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 96788843ab0SAndrei Emeltchenko 968a67d7f6fSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 969a67d7f6fSMat Martineau put_unaligned_le32(control, skb_put(skb, L2CAP_EXT_CTRL_SIZE)); 970a67d7f6fSMat Martineau else 971a67d7f6fSMat Martineau put_unaligned_le16(control, skb_put(skb, L2CAP_ENH_CTRL_SIZE)); 9720a708f8fSGustavo F. Padovan 97347d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 974a67d7f6fSMat Martineau u16 fcs = crc16(0, (u8 *)skb->data, skb->len); 97503a51213SAndrei Emeltchenko put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 9760a708f8fSGustavo F. Padovan } 9770a708f8fSGustavo F. Padovan 97873d80debSLuiz Augusto von Dentz skb->priority = HCI_PRIO_MAX; 979a67d7f6fSMat Martineau return skb; 980a67d7f6fSMat Martineau } 981a67d7f6fSMat Martineau 982a67d7f6fSMat Martineau static void l2cap_send_sframe(struct l2cap_chan *chan, 983a67d7f6fSMat Martineau struct l2cap_ctrl *control) 984a67d7f6fSMat Martineau { 985a67d7f6fSMat Martineau struct sk_buff *skb; 986a67d7f6fSMat Martineau u32 control_field; 987a67d7f6fSMat Martineau 988a67d7f6fSMat Martineau BT_DBG("chan %p, control %p", chan, control); 989a67d7f6fSMat Martineau 990a67d7f6fSMat Martineau if (!control->sframe) 991a67d7f6fSMat Martineau return; 992a67d7f6fSMat Martineau 993b99e13adSMat Martineau if (__chan_is_moving(chan)) 994b99e13adSMat Martineau return; 995b99e13adSMat Martineau 996a67d7f6fSMat Martineau if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state) && 997a67d7f6fSMat Martineau !control->poll) 998a67d7f6fSMat Martineau control->final = 1; 999a67d7f6fSMat Martineau 1000a67d7f6fSMat Martineau if (control->super == L2CAP_SUPER_RR) 1001a67d7f6fSMat Martineau clear_bit(CONN_RNR_SENT, &chan->conn_state); 1002a67d7f6fSMat Martineau else if (control->super == L2CAP_SUPER_RNR) 1003a67d7f6fSMat Martineau set_bit(CONN_RNR_SENT, &chan->conn_state); 1004a67d7f6fSMat Martineau 1005a67d7f6fSMat Martineau if (control->super != L2CAP_SUPER_SREJ) { 1006a67d7f6fSMat Martineau chan->last_acked_seq = control->reqseq; 1007a67d7f6fSMat Martineau __clear_ack_timer(chan); 1008a67d7f6fSMat Martineau } 1009a67d7f6fSMat Martineau 1010a67d7f6fSMat Martineau BT_DBG("reqseq %d, final %d, poll %d, super %d", control->reqseq, 1011a67d7f6fSMat Martineau control->final, control->poll, control->super); 1012a67d7f6fSMat Martineau 1013a67d7f6fSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 1014a67d7f6fSMat Martineau control_field = __pack_extended_control(control); 1015a67d7f6fSMat Martineau else 1016a67d7f6fSMat Martineau control_field = __pack_enhanced_control(control); 1017a67d7f6fSMat Martineau 1018a67d7f6fSMat Martineau skb = l2cap_create_sframe_pdu(chan, control_field); 1019a67d7f6fSMat Martineau if (!IS_ERR(skb)) 102073d80debSLuiz Augusto von Dentz l2cap_do_send(chan, skb); 10210a708f8fSGustavo F. Padovan } 10220a708f8fSGustavo F. Padovan 1023c9e3d5e0SMat Martineau static void l2cap_send_rr_or_rnr(struct l2cap_chan *chan, bool poll) 10240a708f8fSGustavo F. Padovan { 1025c9e3d5e0SMat Martineau struct l2cap_ctrl control; 10260a708f8fSGustavo F. Padovan 1027c9e3d5e0SMat Martineau BT_DBG("chan %p, poll %d", chan, poll); 1028c9e3d5e0SMat Martineau 1029c9e3d5e0SMat Martineau memset(&control, 0, sizeof(control)); 1030c9e3d5e0SMat Martineau control.sframe = 1; 1031c9e3d5e0SMat Martineau control.poll = poll; 1032c9e3d5e0SMat Martineau 1033c9e3d5e0SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) 1034c9e3d5e0SMat Martineau control.super = L2CAP_SUPER_RNR; 1035c9e3d5e0SMat Martineau else 1036c9e3d5e0SMat Martineau control.super = L2CAP_SUPER_RR; 1037c9e3d5e0SMat Martineau 1038c9e3d5e0SMat Martineau control.reqseq = chan->buffer_seq; 1039c9e3d5e0SMat Martineau l2cap_send_sframe(chan, &control); 10400a708f8fSGustavo F. Padovan } 10410a708f8fSGustavo F. Padovan 1042b4450035SGustavo F. Padovan static inline int __l2cap_no_conn_pending(struct l2cap_chan *chan) 10430a708f8fSGustavo F. Padovan { 1044c1360a1cSGustavo F. Padovan return !test_bit(CONF_CONNECT_PEND, &chan->conf_state); 10450a708f8fSGustavo F. Padovan } 10460a708f8fSGustavo F. Padovan 104793c3e8f5SAndrei Emeltchenko static bool __amp_capable(struct l2cap_chan *chan) 104893c3e8f5SAndrei Emeltchenko { 104993c3e8f5SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 10501df7b17aSMarcel Holtmann struct hci_dev *hdev; 10511df7b17aSMarcel Holtmann bool amp_available = false; 105293c3e8f5SAndrei Emeltchenko 10531df7b17aSMarcel Holtmann if (!conn->hs_enabled) 10541df7b17aSMarcel Holtmann return false; 10551df7b17aSMarcel Holtmann 10561df7b17aSMarcel Holtmann if (!(conn->fixed_chan_mask & L2CAP_FC_A2MP)) 10571df7b17aSMarcel Holtmann return false; 10581df7b17aSMarcel Holtmann 10591df7b17aSMarcel Holtmann read_lock(&hci_dev_list_lock); 10601df7b17aSMarcel Holtmann list_for_each_entry(hdev, &hci_dev_list, list) { 10611df7b17aSMarcel Holtmann if (hdev->amp_type != AMP_TYPE_BREDR && 10621df7b17aSMarcel Holtmann test_bit(HCI_UP, &hdev->flags)) { 10631df7b17aSMarcel Holtmann amp_available = true; 10641df7b17aSMarcel Holtmann break; 10651df7b17aSMarcel Holtmann } 10661df7b17aSMarcel Holtmann } 10671df7b17aSMarcel Holtmann read_unlock(&hci_dev_list_lock); 10681df7b17aSMarcel Holtmann 10691df7b17aSMarcel Holtmann if (chan->chan_policy == BT_CHANNEL_POLICY_AMP_PREFERRED) 10701df7b17aSMarcel Holtmann return amp_available; 1071848566b3SMarcel Holtmann 107293c3e8f5SAndrei Emeltchenko return false; 107393c3e8f5SAndrei Emeltchenko } 107493c3e8f5SAndrei Emeltchenko 10755ce66b59SAndrei Emeltchenko static bool l2cap_check_efs(struct l2cap_chan *chan) 10765ce66b59SAndrei Emeltchenko { 10775ce66b59SAndrei Emeltchenko /* Check EFS parameters */ 10785ce66b59SAndrei Emeltchenko return true; 10795ce66b59SAndrei Emeltchenko } 10805ce66b59SAndrei Emeltchenko 10812766be48SAndrei Emeltchenko void l2cap_send_conn_req(struct l2cap_chan *chan) 10829b27f350SAndrei Emeltchenko { 10839b27f350SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 10849b27f350SAndrei Emeltchenko struct l2cap_conn_req req; 10859b27f350SAndrei Emeltchenko 10869b27f350SAndrei Emeltchenko req.scid = cpu_to_le16(chan->scid); 10879b27f350SAndrei Emeltchenko req.psm = chan->psm; 10889b27f350SAndrei Emeltchenko 10899b27f350SAndrei Emeltchenko chan->ident = l2cap_get_ident(conn); 10909b27f350SAndrei Emeltchenko 10919b27f350SAndrei Emeltchenko set_bit(CONF_CONNECT_PEND, &chan->conf_state); 10929b27f350SAndrei Emeltchenko 10939b27f350SAndrei Emeltchenko l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_REQ, sizeof(req), &req); 10949b27f350SAndrei Emeltchenko } 10959b27f350SAndrei Emeltchenko 10968eb200bdSMat Martineau static void l2cap_send_create_chan_req(struct l2cap_chan *chan, u8 amp_id) 10978eb200bdSMat Martineau { 10988eb200bdSMat Martineau struct l2cap_create_chan_req req; 10998eb200bdSMat Martineau req.scid = cpu_to_le16(chan->scid); 11008eb200bdSMat Martineau req.psm = chan->psm; 11018eb200bdSMat Martineau req.amp_id = amp_id; 11028eb200bdSMat Martineau 11038eb200bdSMat Martineau chan->ident = l2cap_get_ident(chan->conn); 11048eb200bdSMat Martineau 11058eb200bdSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_CREATE_CHAN_REQ, 11068eb200bdSMat Martineau sizeof(req), &req); 11078eb200bdSMat Martineau } 11088eb200bdSMat Martineau 110902b0fbb9SMat Martineau static void l2cap_move_setup(struct l2cap_chan *chan) 111002b0fbb9SMat Martineau { 111102b0fbb9SMat Martineau struct sk_buff *skb; 111202b0fbb9SMat Martineau 111302b0fbb9SMat Martineau BT_DBG("chan %p", chan); 111402b0fbb9SMat Martineau 111502b0fbb9SMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 111602b0fbb9SMat Martineau return; 111702b0fbb9SMat Martineau 111802b0fbb9SMat Martineau __clear_retrans_timer(chan); 111902b0fbb9SMat Martineau __clear_monitor_timer(chan); 112002b0fbb9SMat Martineau __clear_ack_timer(chan); 112102b0fbb9SMat Martineau 112202b0fbb9SMat Martineau chan->retry_count = 0; 112302b0fbb9SMat Martineau skb_queue_walk(&chan->tx_q, skb) { 112402b0fbb9SMat Martineau if (bt_cb(skb)->control.retries) 112502b0fbb9SMat Martineau bt_cb(skb)->control.retries = 1; 112602b0fbb9SMat Martineau else 112702b0fbb9SMat Martineau break; 112802b0fbb9SMat Martineau } 112902b0fbb9SMat Martineau 113002b0fbb9SMat Martineau chan->expected_tx_seq = chan->buffer_seq; 113102b0fbb9SMat Martineau 113202b0fbb9SMat Martineau clear_bit(CONN_REJ_ACT, &chan->conn_state); 113302b0fbb9SMat Martineau clear_bit(CONN_SREJ_ACT, &chan->conn_state); 113402b0fbb9SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 113502b0fbb9SMat Martineau l2cap_seq_list_clear(&chan->srej_list); 113602b0fbb9SMat Martineau skb_queue_purge(&chan->srej_q); 113702b0fbb9SMat Martineau 113802b0fbb9SMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 113902b0fbb9SMat Martineau chan->rx_state = L2CAP_RX_STATE_MOVE; 114002b0fbb9SMat Martineau 114102b0fbb9SMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 114202b0fbb9SMat Martineau } 114302b0fbb9SMat Martineau 11445f3847a4SMat Martineau static void l2cap_move_done(struct l2cap_chan *chan) 11455f3847a4SMat Martineau { 11465f3847a4SMat Martineau u8 move_role = chan->move_role; 11475f3847a4SMat Martineau BT_DBG("chan %p", chan); 11485f3847a4SMat Martineau 11495f3847a4SMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 11505f3847a4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 11515f3847a4SMat Martineau 11525f3847a4SMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 11535f3847a4SMat Martineau return; 11545f3847a4SMat Martineau 11555f3847a4SMat Martineau switch (move_role) { 11565f3847a4SMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 11575f3847a4SMat Martineau l2cap_tx(chan, NULL, NULL, L2CAP_EV_EXPLICIT_POLL); 11585f3847a4SMat Martineau chan->rx_state = L2CAP_RX_STATE_WAIT_F; 11595f3847a4SMat Martineau break; 11605f3847a4SMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 11615f3847a4SMat Martineau chan->rx_state = L2CAP_RX_STATE_WAIT_P; 11625f3847a4SMat Martineau break; 11635f3847a4SMat Martineau } 11645f3847a4SMat Martineau } 11655f3847a4SMat Martineau 11669f0caeb1SVinicius Costa Gomes static void l2cap_chan_ready(struct l2cap_chan *chan) 11679f0caeb1SVinicius Costa Gomes { 11682827011fSMat Martineau /* This clears all conf flags, including CONF_NOT_COMPLETE */ 11699f0caeb1SVinicius Costa Gomes chan->conf_state = 0; 11709f0caeb1SVinicius Costa Gomes __clear_chan_timer(chan); 11719f0caeb1SVinicius Costa Gomes 117254a59aa2SAndrei Emeltchenko chan->state = BT_CONNECTED; 11739f0caeb1SVinicius Costa Gomes 117454a59aa2SAndrei Emeltchenko chan->ops->ready(chan); 11759f0caeb1SVinicius Costa Gomes } 11769f0caeb1SVinicius Costa Gomes 117793c3e8f5SAndrei Emeltchenko static void l2cap_start_connection(struct l2cap_chan *chan) 117893c3e8f5SAndrei Emeltchenko { 117993c3e8f5SAndrei Emeltchenko if (__amp_capable(chan)) { 118093c3e8f5SAndrei Emeltchenko BT_DBG("chan %p AMP capable: discover AMPs", chan); 118193c3e8f5SAndrei Emeltchenko a2mp_discover_amp(chan); 118293c3e8f5SAndrei Emeltchenko } else { 118393c3e8f5SAndrei Emeltchenko l2cap_send_conn_req(chan); 118493c3e8f5SAndrei Emeltchenko } 118593c3e8f5SAndrei Emeltchenko } 118693c3e8f5SAndrei Emeltchenko 1187fc7f8a7eSGustavo F. Padovan static void l2cap_do_start(struct l2cap_chan *chan) 11880a708f8fSGustavo F. Padovan { 11898c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 11900a708f8fSGustavo F. Padovan 11919f0caeb1SVinicius Costa Gomes if (conn->hcon->type == LE_LINK) { 11929f0caeb1SVinicius Costa Gomes l2cap_chan_ready(chan); 11939f0caeb1SVinicius Costa Gomes return; 11949f0caeb1SVinicius Costa Gomes } 11959f0caeb1SVinicius Costa Gomes 11960a708f8fSGustavo F. Padovan if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) { 11970a708f8fSGustavo F. Padovan if (!(conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE)) 11980a708f8fSGustavo F. Padovan return; 11990a708f8fSGustavo F. Padovan 1200d45fc423SGustavo F. Padovan if (l2cap_chan_check_security(chan) && 120193c3e8f5SAndrei Emeltchenko __l2cap_no_conn_pending(chan)) { 120293c3e8f5SAndrei Emeltchenko l2cap_start_connection(chan); 120393c3e8f5SAndrei Emeltchenko } 12040a708f8fSGustavo F. Padovan } else { 12050a708f8fSGustavo F. Padovan struct l2cap_info_req req; 1206ac73498cSAndrei Emeltchenko req.type = __constant_cpu_to_le16(L2CAP_IT_FEAT_MASK); 12070a708f8fSGustavo F. Padovan 12080a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_SENT; 12090a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 12100a708f8fSGustavo F. Padovan 1211ba13ccd9SMarcel Holtmann schedule_delayed_work(&conn->info_timer, L2CAP_INFO_TIMEOUT); 12120a708f8fSGustavo F. Padovan 12132d792818SGustavo Padovan l2cap_send_cmd(conn, conn->info_ident, L2CAP_INFO_REQ, 12142d792818SGustavo Padovan sizeof(req), &req); 12150a708f8fSGustavo F. Padovan } 12160a708f8fSGustavo F. Padovan } 12170a708f8fSGustavo F. Padovan 12180a708f8fSGustavo F. Padovan static inline int l2cap_mode_supported(__u8 mode, __u32 feat_mask) 12190a708f8fSGustavo F. Padovan { 12200a708f8fSGustavo F. Padovan u32 local_feat_mask = l2cap_feat_mask; 12210a708f8fSGustavo F. Padovan if (!disable_ertm) 12220a708f8fSGustavo F. Padovan local_feat_mask |= L2CAP_FEAT_ERTM | L2CAP_FEAT_STREAMING; 12230a708f8fSGustavo F. Padovan 12240a708f8fSGustavo F. Padovan switch (mode) { 12250a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 12260a708f8fSGustavo F. Padovan return L2CAP_FEAT_ERTM & feat_mask & local_feat_mask; 12270a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 12280a708f8fSGustavo F. Padovan return L2CAP_FEAT_STREAMING & feat_mask & local_feat_mask; 12290a708f8fSGustavo F. Padovan default: 12300a708f8fSGustavo F. Padovan return 0x00; 12310a708f8fSGustavo F. Padovan } 12320a708f8fSGustavo F. Padovan } 12330a708f8fSGustavo F. Padovan 12345e4e3972SAndrei Emeltchenko static void l2cap_send_disconn_req(struct l2cap_chan *chan, int err) 12350a708f8fSGustavo F. Padovan { 12365e4e3972SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 12370a708f8fSGustavo F. Padovan struct l2cap_disconn_req req; 12380a708f8fSGustavo F. Padovan 12390a708f8fSGustavo F. Padovan if (!conn) 12400a708f8fSGustavo F. Padovan return; 12410a708f8fSGustavo F. Padovan 1242aad3d0e3SAndrei Emeltchenko if (chan->mode == L2CAP_MODE_ERTM && chan->state == BT_CONNECTED) { 12431a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 12441a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 12451a09bcb9SGustavo F. Padovan __clear_ack_timer(chan); 12460a708f8fSGustavo F. Padovan } 12470a708f8fSGustavo F. Padovan 1248416fa752SAndrei Emeltchenko if (chan->chan_type == L2CAP_CHAN_CONN_FIX_A2MP) { 1249d117773cSGustavo Padovan l2cap_state_change(chan, BT_DISCONN); 1250416fa752SAndrei Emeltchenko return; 1251416fa752SAndrei Emeltchenko } 1252416fa752SAndrei Emeltchenko 1253fe4128e0SGustavo F. Padovan req.dcid = cpu_to_le16(chan->dcid); 1254fe4128e0SGustavo F. Padovan req.scid = cpu_to_le16(chan->scid); 12552d792818SGustavo Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_DISCONN_REQ, 12562d792818SGustavo Padovan sizeof(req), &req); 12570a708f8fSGustavo F. Padovan 1258f8e73017SGustavo Padovan l2cap_state_change_and_error(chan, BT_DISCONN, err); 12590a708f8fSGustavo F. Padovan } 12600a708f8fSGustavo F. Padovan 12610a708f8fSGustavo F. Padovan /* ---- L2CAP connections ---- */ 12620a708f8fSGustavo F. Padovan static void l2cap_conn_start(struct l2cap_conn *conn) 12630a708f8fSGustavo F. Padovan { 12643df91ea2SAndrei Emeltchenko struct l2cap_chan *chan, *tmp; 12650a708f8fSGustavo F. Padovan 12660a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 12670a708f8fSGustavo F. Padovan 12683df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 12690a708f8fSGustavo F. Padovan 12703df91ea2SAndrei Emeltchenko list_for_each_entry_safe(chan, tmp, &conn->chan_l, list) { 12716be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 12720a708f8fSGustavo F. Padovan 1273715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 12746be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 12750a708f8fSGustavo F. Padovan continue; 12760a708f8fSGustavo F. Padovan } 12770a708f8fSGustavo F. Padovan 127889bc500eSGustavo F. Padovan if (chan->state == BT_CONNECT) { 1279d45fc423SGustavo F. Padovan if (!l2cap_chan_check_security(chan) || 1280b4450035SGustavo F. Padovan !__l2cap_no_conn_pending(chan)) { 12816be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 12820a708f8fSGustavo F. Padovan continue; 12830a708f8fSGustavo F. Padovan } 12840a708f8fSGustavo F. Padovan 1285c1360a1cSGustavo F. Padovan if (!l2cap_mode_supported(chan->mode, conn->feat_mask) 1286c1360a1cSGustavo F. Padovan && test_bit(CONF_STATE2_DEVICE, 1287c1360a1cSGustavo F. Padovan &chan->conf_state)) { 12880f852724SGustavo F. Padovan l2cap_chan_close(chan, ECONNRESET); 12896be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 12900a708f8fSGustavo F. Padovan continue; 12910a708f8fSGustavo F. Padovan } 12920a708f8fSGustavo F. Padovan 129393c3e8f5SAndrei Emeltchenko l2cap_start_connection(chan); 12940a708f8fSGustavo F. Padovan 129589bc500eSGustavo F. Padovan } else if (chan->state == BT_CONNECT2) { 12960a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 12970a708f8fSGustavo F. Padovan char buf[128]; 1298fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 1299fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 13000a708f8fSGustavo F. Padovan 1301d45fc423SGustavo F. Padovan if (l2cap_chan_check_security(chan)) { 1302bdc25783SMarcel Holtmann struct sock *sk = chan->sk; 1303bdc25783SMarcel Holtmann 13046be36555SAndrei Emeltchenko lock_sock(sk); 1305bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 1306ac73498cSAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CR_PEND); 1307ac73498cSAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_AUTHOR_PEND); 13082dc4e510SGustavo Padovan chan->ops->defer(chan); 13090a708f8fSGustavo F. Padovan 13100a708f8fSGustavo F. Padovan } else { 13110e587be7SAndrei Emeltchenko __l2cap_state_change(chan, BT_CONFIG); 1312ac73498cSAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CR_SUCCESS); 1313ac73498cSAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_NO_INFO); 13140a708f8fSGustavo F. Padovan } 13156be36555SAndrei Emeltchenko release_sock(sk); 13160a708f8fSGustavo F. Padovan } else { 1317ac73498cSAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CR_PEND); 1318ac73498cSAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_AUTHEN_PEND); 13190a708f8fSGustavo F. Padovan } 13200a708f8fSGustavo F. Padovan 1321fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 1322fc7f8a7eSGustavo F. Padovan sizeof(rsp), &rsp); 13230a708f8fSGustavo F. Padovan 1324c1360a1cSGustavo F. Padovan if (test_bit(CONF_REQ_SENT, &chan->conf_state) || 13250a708f8fSGustavo F. Padovan rsp.result != L2CAP_CR_SUCCESS) { 13266be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 13270a708f8fSGustavo F. Padovan continue; 13280a708f8fSGustavo F. Padovan } 13290a708f8fSGustavo F. Padovan 1330c1360a1cSGustavo F. Padovan set_bit(CONF_REQ_SENT, &chan->conf_state); 13310a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 133273ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 133373ffa904SGustavo F. Padovan chan->num_conf_req++; 13340a708f8fSGustavo F. Padovan } 13350a708f8fSGustavo F. Padovan 13366be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 13370a708f8fSGustavo F. Padovan } 13380a708f8fSGustavo F. Padovan 13393df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 13400a708f8fSGustavo F. Padovan } 13410a708f8fSGustavo F. Padovan 1342c2287681SIdo Yariv /* Find socket with cid and source/destination bdaddr. 1343b62f328bSVille Tervo * Returns closest match, locked. 1344b62f328bSVille Tervo */ 1345d9b88702SAndrei Emeltchenko static struct l2cap_chan *l2cap_global_chan_by_scid(int state, u16 cid, 1346c2287681SIdo Yariv bdaddr_t *src, 1347c2287681SIdo Yariv bdaddr_t *dst) 1348b62f328bSVille Tervo { 134923691d75SGustavo F. Padovan struct l2cap_chan *c, *c1 = NULL; 1350b62f328bSVille Tervo 135123691d75SGustavo F. Padovan read_lock(&chan_list_lock); 1352b62f328bSVille Tervo 135323691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 135489bc500eSGustavo F. Padovan if (state && c->state != state) 1355b62f328bSVille Tervo continue; 1356b62f328bSVille Tervo 135723691d75SGustavo F. Padovan if (c->scid == cid) { 1358c2287681SIdo Yariv int src_match, dst_match; 1359c2287681SIdo Yariv int src_any, dst_any; 1360c2287681SIdo Yariv 1361b62f328bSVille Tervo /* Exact match. */ 13627eafc59eSMarcel Holtmann src_match = !bacmp(&c->src, src); 13637eafc59eSMarcel Holtmann dst_match = !bacmp(&c->dst, dst); 1364c2287681SIdo Yariv if (src_match && dst_match) { 136523691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 136623691d75SGustavo F. Padovan return c; 136723691d75SGustavo F. Padovan } 1368b62f328bSVille Tervo 1369b62f328bSVille Tervo /* Closest match */ 13707eafc59eSMarcel Holtmann src_any = !bacmp(&c->src, BDADDR_ANY); 13717eafc59eSMarcel Holtmann dst_any = !bacmp(&c->dst, BDADDR_ANY); 1372c2287681SIdo Yariv if ((src_match && dst_any) || (src_any && dst_match) || 1373c2287681SIdo Yariv (src_any && dst_any)) 137423691d75SGustavo F. Padovan c1 = c; 1375b62f328bSVille Tervo } 1376b62f328bSVille Tervo } 1377280f294fSGustavo F. Padovan 137823691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 1379b62f328bSVille Tervo 138023691d75SGustavo F. Padovan return c1; 1381b62f328bSVille Tervo } 1382b62f328bSVille Tervo 1383b62f328bSVille Tervo static void l2cap_le_conn_ready(struct l2cap_conn *conn) 1384b62f328bSVille Tervo { 138560bac184SJohan Hedberg struct sock *parent; 138623691d75SGustavo F. Padovan struct l2cap_chan *chan, *pchan; 1387b62f328bSVille Tervo 1388b62f328bSVille Tervo BT_DBG(""); 1389b62f328bSVille Tervo 1390b62f328bSVille Tervo /* Check if we have socket listening on cid */ 1391073d1cf3SJohan Hedberg pchan = l2cap_global_chan_by_scid(BT_LISTEN, L2CAP_CID_ATT, 13926f59b904SMarcel Holtmann &conn->hcon->src, &conn->hcon->dst); 139323691d75SGustavo F. Padovan if (!pchan) 1394b62f328bSVille Tervo return; 1395b62f328bSVille Tervo 139644f3b0fbSJohan Hedberg /* Client ATT sockets should override the server one */ 139744f3b0fbSJohan Hedberg if (__l2cap_get_chan_by_dcid(conn, L2CAP_CID_ATT)) 139844f3b0fbSJohan Hedberg return; 139944f3b0fbSJohan Hedberg 140023691d75SGustavo F. Padovan parent = pchan->sk; 140123691d75SGustavo F. Padovan 1402aa2ac881SGustavo F. Padovan lock_sock(parent); 140362f3a2cfSGustavo F. Padovan 140480b98027SGustavo Padovan chan = pchan->ops->new_connection(pchan); 140580808e43SGustavo F. Padovan if (!chan) 1406b62f328bSVille Tervo goto clean; 1407b62f328bSVille Tervo 14089f22398cSJohan Hedberg chan->dcid = L2CAP_CID_ATT; 14099f22398cSJohan Hedberg 14107eafc59eSMarcel Holtmann bacpy(&chan->src, &conn->hcon->src); 14117eafc59eSMarcel Holtmann bacpy(&chan->dst, &conn->hcon->dst); 14124f1654e0SMarcel Holtmann chan->src_type = bdaddr_type(conn->hcon, conn->hcon->src_type); 14134f1654e0SMarcel Holtmann chan->dst_type = bdaddr_type(conn->hcon, conn->hcon->dst_type); 1414b62f328bSVille Tervo 141544f3b0fbSJohan Hedberg __l2cap_chan_add(conn, chan); 141648454079SGustavo F. Padovan 1417b62f328bSVille Tervo clean: 1418aa2ac881SGustavo F. Padovan release_sock(parent); 1419b62f328bSVille Tervo } 1420b62f328bSVille Tervo 14210a708f8fSGustavo F. Padovan static void l2cap_conn_ready(struct l2cap_conn *conn) 14220a708f8fSGustavo F. Padovan { 142348454079SGustavo F. Padovan struct l2cap_chan *chan; 1424cc110922SVinicius Costa Gomes struct hci_conn *hcon = conn->hcon; 14250a708f8fSGustavo F. Padovan 14260a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 14270a708f8fSGustavo F. Padovan 1428d8729922SJohan Hedberg /* For outgoing pairing which doesn't necessarily have an 1429d8729922SJohan Hedberg * associated socket (e.g. mgmt_pair_device). 1430d8729922SJohan Hedberg */ 1431cc110922SVinicius Costa Gomes if (hcon->out && hcon->type == LE_LINK) 1432cc110922SVinicius Costa Gomes smp_conn_security(hcon, hcon->pending_sec_level); 1433160dc6acSVinicius Costa Gomes 14343df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 14350a708f8fSGustavo F. Padovan 143644f3b0fbSJohan Hedberg if (hcon->type == LE_LINK) 143744f3b0fbSJohan Hedberg l2cap_le_conn_ready(conn); 143844f3b0fbSJohan Hedberg 14393df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 1440baa7e1faSGustavo F. Padovan 14416be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 14420a708f8fSGustavo F. Padovan 1443416fa752SAndrei Emeltchenko if (chan->chan_type == L2CAP_CHAN_CONN_FIX_A2MP) { 1444416fa752SAndrei Emeltchenko l2cap_chan_unlock(chan); 1445416fa752SAndrei Emeltchenko continue; 1446416fa752SAndrei Emeltchenko } 1447416fa752SAndrei Emeltchenko 1448cc110922SVinicius Costa Gomes if (hcon->type == LE_LINK) { 1449cc110922SVinicius Costa Gomes if (smp_conn_security(hcon, chan->sec_level)) 1450cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 1451acd7d370SVille Tervo 145263128451SVinicius Costa Gomes } else if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 145374e75740SGustavo Padovan l2cap_chan_ready(chan); 1454b501d6a1SAnderson Briglia 14551c244f79SGustavo Padovan } else if (chan->state == BT_CONNECT) { 1456fc7f8a7eSGustavo F. Padovan l2cap_do_start(chan); 14571c244f79SGustavo Padovan } 14580a708f8fSGustavo F. Padovan 14596be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 14600a708f8fSGustavo F. Padovan } 14610a708f8fSGustavo F. Padovan 14623df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 14630a708f8fSGustavo F. Padovan } 14640a708f8fSGustavo F. Padovan 14650a708f8fSGustavo F. Padovan /* Notify sockets that we cannot guaranty reliability anymore */ 14660a708f8fSGustavo F. Padovan static void l2cap_conn_unreliable(struct l2cap_conn *conn, int err) 14670a708f8fSGustavo F. Padovan { 146848454079SGustavo F. Padovan struct l2cap_chan *chan; 14690a708f8fSGustavo F. Padovan 14700a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 14710a708f8fSGustavo F. Padovan 14723df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 14730a708f8fSGustavo F. Padovan 14743df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 1475ecf61bdbSAndrei Emeltchenko if (test_bit(FLAG_FORCE_RELIABLE, &chan->flags)) 14761d8b1fd5SGustavo Padovan l2cap_chan_set_err(chan, err); 14770a708f8fSGustavo F. Padovan } 14780a708f8fSGustavo F. Padovan 14793df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 14800a708f8fSGustavo F. Padovan } 14810a708f8fSGustavo F. Padovan 1482f878fcadSGustavo F. Padovan static void l2cap_info_timeout(struct work_struct *work) 14830a708f8fSGustavo F. Padovan { 1484f878fcadSGustavo F. Padovan struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 1485030013d8SGustavo F. Padovan info_timer.work); 14860a708f8fSGustavo F. Padovan 14870a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 14880a708f8fSGustavo F. Padovan conn->info_ident = 0; 14890a708f8fSGustavo F. Padovan 14900a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 14910a708f8fSGustavo F. Padovan } 14920a708f8fSGustavo F. Padovan 14932c8e1411SDavid Herrmann /* 14942c8e1411SDavid Herrmann * l2cap_user 14952c8e1411SDavid Herrmann * External modules can register l2cap_user objects on l2cap_conn. The ->probe 14962c8e1411SDavid Herrmann * callback is called during registration. The ->remove callback is called 14972c8e1411SDavid Herrmann * during unregistration. 14982c8e1411SDavid Herrmann * An l2cap_user object can either be explicitly unregistered or when the 14992c8e1411SDavid Herrmann * underlying l2cap_conn object is deleted. This guarantees that l2cap->hcon, 15002c8e1411SDavid Herrmann * l2cap->hchan, .. are valid as long as the remove callback hasn't been called. 15012c8e1411SDavid Herrmann * External modules must own a reference to the l2cap_conn object if they intend 15022c8e1411SDavid Herrmann * to call l2cap_unregister_user(). The l2cap_conn object might get destroyed at 15032c8e1411SDavid Herrmann * any time if they don't. 15042c8e1411SDavid Herrmann */ 15052c8e1411SDavid Herrmann 15062c8e1411SDavid Herrmann int l2cap_register_user(struct l2cap_conn *conn, struct l2cap_user *user) 15072c8e1411SDavid Herrmann { 15082c8e1411SDavid Herrmann struct hci_dev *hdev = conn->hcon->hdev; 15092c8e1411SDavid Herrmann int ret; 15102c8e1411SDavid Herrmann 15112c8e1411SDavid Herrmann /* We need to check whether l2cap_conn is registered. If it is not, we 15122c8e1411SDavid Herrmann * must not register the l2cap_user. l2cap_conn_del() is unregisters 15132c8e1411SDavid Herrmann * l2cap_conn objects, but doesn't provide its own locking. Instead, it 15142c8e1411SDavid Herrmann * relies on the parent hci_conn object to be locked. This itself relies 15152c8e1411SDavid Herrmann * on the hci_dev object to be locked. So we must lock the hci device 15162c8e1411SDavid Herrmann * here, too. */ 15172c8e1411SDavid Herrmann 15182c8e1411SDavid Herrmann hci_dev_lock(hdev); 15192c8e1411SDavid Herrmann 15202c8e1411SDavid Herrmann if (user->list.next || user->list.prev) { 15212c8e1411SDavid Herrmann ret = -EINVAL; 15222c8e1411SDavid Herrmann goto out_unlock; 15232c8e1411SDavid Herrmann } 15242c8e1411SDavid Herrmann 15252c8e1411SDavid Herrmann /* conn->hchan is NULL after l2cap_conn_del() was called */ 15262c8e1411SDavid Herrmann if (!conn->hchan) { 15272c8e1411SDavid Herrmann ret = -ENODEV; 15282c8e1411SDavid Herrmann goto out_unlock; 15292c8e1411SDavid Herrmann } 15302c8e1411SDavid Herrmann 15312c8e1411SDavid Herrmann ret = user->probe(conn, user); 15322c8e1411SDavid Herrmann if (ret) 15332c8e1411SDavid Herrmann goto out_unlock; 15342c8e1411SDavid Herrmann 15352c8e1411SDavid Herrmann list_add(&user->list, &conn->users); 15362c8e1411SDavid Herrmann ret = 0; 15372c8e1411SDavid Herrmann 15382c8e1411SDavid Herrmann out_unlock: 15392c8e1411SDavid Herrmann hci_dev_unlock(hdev); 15402c8e1411SDavid Herrmann return ret; 15412c8e1411SDavid Herrmann } 15422c8e1411SDavid Herrmann EXPORT_SYMBOL(l2cap_register_user); 15432c8e1411SDavid Herrmann 15442c8e1411SDavid Herrmann void l2cap_unregister_user(struct l2cap_conn *conn, struct l2cap_user *user) 15452c8e1411SDavid Herrmann { 15462c8e1411SDavid Herrmann struct hci_dev *hdev = conn->hcon->hdev; 15472c8e1411SDavid Herrmann 15482c8e1411SDavid Herrmann hci_dev_lock(hdev); 15492c8e1411SDavid Herrmann 15502c8e1411SDavid Herrmann if (!user->list.next || !user->list.prev) 15512c8e1411SDavid Herrmann goto out_unlock; 15522c8e1411SDavid Herrmann 15532c8e1411SDavid Herrmann list_del(&user->list); 15542c8e1411SDavid Herrmann user->list.next = NULL; 15552c8e1411SDavid Herrmann user->list.prev = NULL; 15562c8e1411SDavid Herrmann user->remove(conn, user); 15572c8e1411SDavid Herrmann 15582c8e1411SDavid Herrmann out_unlock: 15592c8e1411SDavid Herrmann hci_dev_unlock(hdev); 15602c8e1411SDavid Herrmann } 15612c8e1411SDavid Herrmann EXPORT_SYMBOL(l2cap_unregister_user); 15622c8e1411SDavid Herrmann 15632c8e1411SDavid Herrmann static void l2cap_unregister_all_users(struct l2cap_conn *conn) 15642c8e1411SDavid Herrmann { 15652c8e1411SDavid Herrmann struct l2cap_user *user; 15662c8e1411SDavid Herrmann 15672c8e1411SDavid Herrmann while (!list_empty(&conn->users)) { 15682c8e1411SDavid Herrmann user = list_first_entry(&conn->users, struct l2cap_user, list); 15692c8e1411SDavid Herrmann list_del(&user->list); 15702c8e1411SDavid Herrmann user->list.next = NULL; 15712c8e1411SDavid Herrmann user->list.prev = NULL; 15722c8e1411SDavid Herrmann user->remove(conn, user); 15732c8e1411SDavid Herrmann } 15742c8e1411SDavid Herrmann } 15752c8e1411SDavid Herrmann 15765d3de7dfSVinicius Costa Gomes static void l2cap_conn_del(struct hci_conn *hcon, int err) 15775d3de7dfSVinicius Costa Gomes { 15785d3de7dfSVinicius Costa Gomes struct l2cap_conn *conn = hcon->l2cap_data; 15795d3de7dfSVinicius Costa Gomes struct l2cap_chan *chan, *l; 15805d3de7dfSVinicius Costa Gomes 15815d3de7dfSVinicius Costa Gomes if (!conn) 15825d3de7dfSVinicius Costa Gomes return; 15835d3de7dfSVinicius Costa Gomes 15845d3de7dfSVinicius Costa Gomes BT_DBG("hcon %p conn %p, err %d", hcon, conn, err); 15855d3de7dfSVinicius Costa Gomes 15865d3de7dfSVinicius Costa Gomes kfree_skb(conn->rx_skb); 15875d3de7dfSVinicius Costa Gomes 15882c8e1411SDavid Herrmann l2cap_unregister_all_users(conn); 15892c8e1411SDavid Herrmann 15903df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 15913df91ea2SAndrei Emeltchenko 15925d3de7dfSVinicius Costa Gomes /* Kill channels */ 15935d3de7dfSVinicius Costa Gomes list_for_each_entry_safe(chan, l, &conn->chan_l, list) { 159461d6ef3eSMat Martineau l2cap_chan_hold(chan); 15956be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 15966be36555SAndrei Emeltchenko 15975d3de7dfSVinicius Costa Gomes l2cap_chan_del(chan, err); 15986be36555SAndrei Emeltchenko 15996be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 16006be36555SAndrei Emeltchenko 160180b98027SGustavo Padovan chan->ops->close(chan); 160261d6ef3eSMat Martineau l2cap_chan_put(chan); 16035d3de7dfSVinicius Costa Gomes } 16045d3de7dfSVinicius Costa Gomes 16053df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 16063df91ea2SAndrei Emeltchenko 160773d80debSLuiz Augusto von Dentz hci_chan_del(conn->hchan); 160873d80debSLuiz Augusto von Dentz 16095d3de7dfSVinicius Costa Gomes if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) 1610127074bfSUlisses Furquim cancel_delayed_work_sync(&conn->info_timer); 16115d3de7dfSVinicius Costa Gomes 161251a8efd7SJohan Hedberg if (test_and_clear_bit(HCI_CONN_LE_SMP_PEND, &hcon->flags)) { 1613127074bfSUlisses Furquim cancel_delayed_work_sync(&conn->security_timer); 16148aab4757SVinicius Costa Gomes smp_chan_destroy(conn); 1615d26a2345SVinicius Costa Gomes } 16165d3de7dfSVinicius Costa Gomes 16175d3de7dfSVinicius Costa Gomes hcon->l2cap_data = NULL; 16189c903e37SDavid Herrmann conn->hchan = NULL; 16199c903e37SDavid Herrmann l2cap_conn_put(conn); 16205d3de7dfSVinicius Costa Gomes } 16215d3de7dfSVinicius Costa Gomes 16226c9d42a1SGustavo F. Padovan static void security_timeout(struct work_struct *work) 16235d3de7dfSVinicius Costa Gomes { 16246c9d42a1SGustavo F. Padovan struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 16256c9d42a1SGustavo F. Padovan security_timer.work); 16265d3de7dfSVinicius Costa Gomes 1627d06cc416SJohan Hedberg BT_DBG("conn %p", conn); 1628d06cc416SJohan Hedberg 1629d06cc416SJohan Hedberg if (test_and_clear_bit(HCI_CONN_LE_SMP_PEND, &conn->hcon->flags)) { 1630d06cc416SJohan Hedberg smp_chan_destroy(conn); 16315d3de7dfSVinicius Costa Gomes l2cap_conn_del(conn->hcon, ETIMEDOUT); 16325d3de7dfSVinicius Costa Gomes } 1633d06cc416SJohan Hedberg } 16345d3de7dfSVinicius Costa Gomes 1635baf43251SClaudio Takahasi static struct l2cap_conn *l2cap_conn_add(struct hci_conn *hcon) 16360a708f8fSGustavo F. Padovan { 16370a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 163873d80debSLuiz Augusto von Dentz struct hci_chan *hchan; 16390a708f8fSGustavo F. Padovan 1640baf43251SClaudio Takahasi if (conn) 16410a708f8fSGustavo F. Padovan return conn; 16420a708f8fSGustavo F. Padovan 164373d80debSLuiz Augusto von Dentz hchan = hci_chan_create(hcon); 164473d80debSLuiz Augusto von Dentz if (!hchan) 16450a708f8fSGustavo F. Padovan return NULL; 16460a708f8fSGustavo F. Padovan 16478bcde1f2SGustavo Padovan conn = kzalloc(sizeof(struct l2cap_conn), GFP_KERNEL); 164873d80debSLuiz Augusto von Dentz if (!conn) { 164973d80debSLuiz Augusto von Dentz hci_chan_del(hchan); 165073d80debSLuiz Augusto von Dentz return NULL; 165173d80debSLuiz Augusto von Dentz } 165273d80debSLuiz Augusto von Dentz 16539c903e37SDavid Herrmann kref_init(&conn->ref); 16540a708f8fSGustavo F. Padovan hcon->l2cap_data = conn; 16550a708f8fSGustavo F. Padovan conn->hcon = hcon; 16569c903e37SDavid Herrmann hci_conn_get(conn->hcon); 165773d80debSLuiz Augusto von Dentz conn->hchan = hchan; 16580a708f8fSGustavo F. Padovan 165973d80debSLuiz Augusto von Dentz BT_DBG("hcon %p conn %p hchan %p", hcon, conn, hchan); 16600a708f8fSGustavo F. Padovan 1661dcc042d5SAndrei Emeltchenko switch (hcon->type) { 1662dcc042d5SAndrei Emeltchenko case LE_LINK: 1663dcc042d5SAndrei Emeltchenko if (hcon->hdev->le_mtu) { 1664acd7d370SVille Tervo conn->mtu = hcon->hdev->le_mtu; 1665dcc042d5SAndrei Emeltchenko break; 1666dcc042d5SAndrei Emeltchenko } 1667dcc042d5SAndrei Emeltchenko /* fall through */ 1668dcc042d5SAndrei Emeltchenko default: 16690a708f8fSGustavo F. Padovan conn->mtu = hcon->hdev->acl_mtu; 1670dcc042d5SAndrei Emeltchenko break; 1671dcc042d5SAndrei Emeltchenko } 1672acd7d370SVille Tervo 16730a708f8fSGustavo F. Padovan conn->feat_mask = 0; 16740a708f8fSGustavo F. Padovan 1675848566b3SMarcel Holtmann if (hcon->type == ACL_LINK) 1676848566b3SMarcel Holtmann conn->hs_enabled = test_bit(HCI_HS_ENABLED, 1677848566b3SMarcel Holtmann &hcon->hdev->dev_flags); 1678848566b3SMarcel Holtmann 16790a708f8fSGustavo F. Padovan spin_lock_init(&conn->lock); 16803df91ea2SAndrei Emeltchenko mutex_init(&conn->chan_lock); 1681baa7e1faSGustavo F. Padovan 1682baa7e1faSGustavo F. Padovan INIT_LIST_HEAD(&conn->chan_l); 16832c8e1411SDavid Herrmann INIT_LIST_HEAD(&conn->users); 16840a708f8fSGustavo F. Padovan 16855d3de7dfSVinicius Costa Gomes if (hcon->type == LE_LINK) 16866c9d42a1SGustavo F. Padovan INIT_DELAYED_WORK(&conn->security_timer, security_timeout); 16875d3de7dfSVinicius Costa Gomes else 1688030013d8SGustavo F. Padovan INIT_DELAYED_WORK(&conn->info_timer, l2cap_info_timeout); 16890a708f8fSGustavo F. Padovan 16909f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_REMOTE_USER_TERM; 16910a708f8fSGustavo F. Padovan 16920a708f8fSGustavo F. Padovan return conn; 16930a708f8fSGustavo F. Padovan } 16940a708f8fSGustavo F. Padovan 16959c903e37SDavid Herrmann static void l2cap_conn_free(struct kref *ref) 16969c903e37SDavid Herrmann { 16979c903e37SDavid Herrmann struct l2cap_conn *conn = container_of(ref, struct l2cap_conn, ref); 16989c903e37SDavid Herrmann 16999c903e37SDavid Herrmann hci_conn_put(conn->hcon); 17009c903e37SDavid Herrmann kfree(conn); 17019c903e37SDavid Herrmann } 17029c903e37SDavid Herrmann 17039c903e37SDavid Herrmann void l2cap_conn_get(struct l2cap_conn *conn) 17049c903e37SDavid Herrmann { 17059c903e37SDavid Herrmann kref_get(&conn->ref); 17069c903e37SDavid Herrmann } 17079c903e37SDavid Herrmann EXPORT_SYMBOL(l2cap_conn_get); 17089c903e37SDavid Herrmann 17099c903e37SDavid Herrmann void l2cap_conn_put(struct l2cap_conn *conn) 17109c903e37SDavid Herrmann { 17119c903e37SDavid Herrmann kref_put(&conn->ref, l2cap_conn_free); 17129c903e37SDavid Herrmann } 17139c903e37SDavid Herrmann EXPORT_SYMBOL(l2cap_conn_put); 17149c903e37SDavid Herrmann 17150a708f8fSGustavo F. Padovan /* ---- Socket interface ---- */ 17160a708f8fSGustavo F. Padovan 1717c2287681SIdo Yariv /* Find socket with psm and source / destination bdaddr. 17180a708f8fSGustavo F. Padovan * Returns closest match. 17190a708f8fSGustavo F. Padovan */ 1720c2287681SIdo Yariv static struct l2cap_chan *l2cap_global_chan_by_psm(int state, __le16 psm, 1721c2287681SIdo Yariv bdaddr_t *src, 1722c2287681SIdo Yariv bdaddr_t *dst) 17230a708f8fSGustavo F. Padovan { 172423691d75SGustavo F. Padovan struct l2cap_chan *c, *c1 = NULL; 17250a708f8fSGustavo F. Padovan 172623691d75SGustavo F. Padovan read_lock(&chan_list_lock); 17270a708f8fSGustavo F. Padovan 172823691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 172989bc500eSGustavo F. Padovan if (state && c->state != state) 17300a708f8fSGustavo F. Padovan continue; 17310a708f8fSGustavo F. Padovan 173223691d75SGustavo F. Padovan if (c->psm == psm) { 1733c2287681SIdo Yariv int src_match, dst_match; 1734c2287681SIdo Yariv int src_any, dst_any; 1735c2287681SIdo Yariv 17360a708f8fSGustavo F. Padovan /* Exact match. */ 17377eafc59eSMarcel Holtmann src_match = !bacmp(&c->src, src); 17387eafc59eSMarcel Holtmann dst_match = !bacmp(&c->dst, dst); 1739c2287681SIdo Yariv if (src_match && dst_match) { 1740a7567b20SJohannes Berg read_unlock(&chan_list_lock); 174123691d75SGustavo F. Padovan return c; 174223691d75SGustavo F. Padovan } 17430a708f8fSGustavo F. Padovan 17440a708f8fSGustavo F. Padovan /* Closest match */ 17457eafc59eSMarcel Holtmann src_any = !bacmp(&c->src, BDADDR_ANY); 17467eafc59eSMarcel Holtmann dst_any = !bacmp(&c->dst, BDADDR_ANY); 1747c2287681SIdo Yariv if ((src_match && dst_any) || (src_any && dst_match) || 1748c2287681SIdo Yariv (src_any && dst_any)) 174923691d75SGustavo F. Padovan c1 = c; 17500a708f8fSGustavo F. Padovan } 17510a708f8fSGustavo F. Padovan } 17520a708f8fSGustavo F. Padovan 175323691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 17540a708f8fSGustavo F. Padovan 175523691d75SGustavo F. Padovan return c1; 17560a708f8fSGustavo F. Padovan } 17570a708f8fSGustavo F. Padovan 17588e9f9892SAndre Guedes int l2cap_chan_connect(struct l2cap_chan *chan, __le16 psm, u16 cid, 17598e9f9892SAndre Guedes bdaddr_t *dst, u8 dst_type) 17600a708f8fSGustavo F. Padovan { 17610a708f8fSGustavo F. Padovan struct l2cap_conn *conn; 17620a708f8fSGustavo F. Padovan struct hci_conn *hcon; 17630a708f8fSGustavo F. Padovan struct hci_dev *hdev; 17640a708f8fSGustavo F. Padovan __u8 auth_type; 17650a708f8fSGustavo F. Padovan int err; 17660a708f8fSGustavo F. Padovan 17677eafc59eSMarcel Holtmann BT_DBG("%pMR -> %pMR (type %u) psm 0x%2.2x", &chan->src, dst, 1768ab19516aSSyam Sidhardhan dst_type, __le16_to_cpu(psm)); 17690a708f8fSGustavo F. Padovan 17707eafc59eSMarcel Holtmann hdev = hci_get_route(dst, &chan->src); 17710a708f8fSGustavo F. Padovan if (!hdev) 17720a708f8fSGustavo F. Padovan return -EHOSTUNREACH; 17730a708f8fSGustavo F. Padovan 177409fd0de5SGustavo F. Padovan hci_dev_lock(hdev); 17750a708f8fSGustavo F. Padovan 17766be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 177703a00194SGustavo F. Padovan 177803a00194SGustavo F. Padovan /* PSM must be odd and lsb of upper byte must be 0 */ 177903a00194SGustavo F. Padovan if ((__le16_to_cpu(psm) & 0x0101) != 0x0001 && !cid && 178003a00194SGustavo F. Padovan chan->chan_type != L2CAP_CHAN_RAW) { 178103a00194SGustavo F. Padovan err = -EINVAL; 178203a00194SGustavo F. Padovan goto done; 178303a00194SGustavo F. Padovan } 178403a00194SGustavo F. Padovan 178503a00194SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED && !(psm || cid)) { 178603a00194SGustavo F. Padovan err = -EINVAL; 178703a00194SGustavo F. Padovan goto done; 178803a00194SGustavo F. Padovan } 178903a00194SGustavo F. Padovan 179003a00194SGustavo F. Padovan switch (chan->mode) { 179103a00194SGustavo F. Padovan case L2CAP_MODE_BASIC: 179203a00194SGustavo F. Padovan break; 179303a00194SGustavo F. Padovan case L2CAP_MODE_ERTM: 179403a00194SGustavo F. Padovan case L2CAP_MODE_STREAMING: 179503a00194SGustavo F. Padovan if (!disable_ertm) 179603a00194SGustavo F. Padovan break; 179703a00194SGustavo F. Padovan /* fall through */ 179803a00194SGustavo F. Padovan default: 179903a00194SGustavo F. Padovan err = -ENOTSUPP; 180003a00194SGustavo F. Padovan goto done; 180103a00194SGustavo F. Padovan } 180203a00194SGustavo F. Padovan 18030797e01dSGustavo Padovan switch (chan->state) { 180403a00194SGustavo F. Padovan case BT_CONNECT: 180503a00194SGustavo F. Padovan case BT_CONNECT2: 180603a00194SGustavo F. Padovan case BT_CONFIG: 180703a00194SGustavo F. Padovan /* Already connecting */ 180803a00194SGustavo F. Padovan err = 0; 180903a00194SGustavo F. Padovan goto done; 181003a00194SGustavo F. Padovan 181103a00194SGustavo F. Padovan case BT_CONNECTED: 181203a00194SGustavo F. Padovan /* Already connected */ 181303a00194SGustavo F. Padovan err = -EISCONN; 181403a00194SGustavo F. Padovan goto done; 181503a00194SGustavo F. Padovan 181603a00194SGustavo F. Padovan case BT_OPEN: 181703a00194SGustavo F. Padovan case BT_BOUND: 181803a00194SGustavo F. Padovan /* Can connect */ 181903a00194SGustavo F. Padovan break; 182003a00194SGustavo F. Padovan 182103a00194SGustavo F. Padovan default: 182203a00194SGustavo F. Padovan err = -EBADFD; 182303a00194SGustavo F. Padovan goto done; 182403a00194SGustavo F. Padovan } 182503a00194SGustavo F. Padovan 182603a00194SGustavo F. Padovan /* Set destination address and psm */ 18277eafc59eSMarcel Holtmann bacpy(&chan->dst, dst); 18284f1654e0SMarcel Holtmann chan->dst_type = dst_type; 18296be36555SAndrei Emeltchenko 183003a00194SGustavo F. Padovan chan->psm = psm; 183103a00194SGustavo F. Padovan chan->dcid = cid; 18320a708f8fSGustavo F. Padovan 18334343478fSGustavo F. Padovan auth_type = l2cap_get_auth_type(chan); 18340a708f8fSGustavo F. Padovan 1835f224ca5fSJohan Hedberg if (bdaddr_type_is_le(dst_type)) 18368e9f9892SAndre Guedes hcon = hci_connect(hdev, LE_LINK, dst, dst_type, 18374343478fSGustavo F. Padovan chan->sec_level, auth_type); 1838acd7d370SVille Tervo else 18398e9f9892SAndre Guedes hcon = hci_connect(hdev, ACL_LINK, dst, dst_type, 18404343478fSGustavo F. Padovan chan->sec_level, auth_type); 1841acd7d370SVille Tervo 184230e76272SVille Tervo if (IS_ERR(hcon)) { 184330e76272SVille Tervo err = PTR_ERR(hcon); 18440a708f8fSGustavo F. Padovan goto done; 184530e76272SVille Tervo } 18460a708f8fSGustavo F. Padovan 1847baf43251SClaudio Takahasi conn = l2cap_conn_add(hcon); 18480a708f8fSGustavo F. Padovan if (!conn) { 184976a68ba0SDavid Herrmann hci_conn_drop(hcon); 185030e76272SVille Tervo err = -ENOMEM; 18510a708f8fSGustavo F. Padovan goto done; 18520a708f8fSGustavo F. Padovan } 18530a708f8fSGustavo F. Padovan 1854141d5706SJohan Hedberg if (cid && __l2cap_get_chan_by_dcid(conn, cid)) { 185576a68ba0SDavid Herrmann hci_conn_drop(hcon); 1856141d5706SJohan Hedberg err = -EBUSY; 18579f0caeb1SVinicius Costa Gomes goto done; 18589f0caeb1SVinicius Costa Gomes } 18599f0caeb1SVinicius Costa Gomes 18600a708f8fSGustavo F. Padovan /* Update source addr of the socket */ 18617eafc59eSMarcel Holtmann bacpy(&chan->src, &hcon->src); 18624f1654e0SMarcel Holtmann chan->src_type = bdaddr_type(hcon, hcon->src_type); 18630a708f8fSGustavo F. Padovan 18646be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 186548454079SGustavo F. Padovan l2cap_chan_add(conn, chan); 18666be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 186748454079SGustavo F. Padovan 18685ee9891dSJohan Hedberg /* l2cap_chan_add takes its own ref so we can drop this one */ 18695ee9891dSJohan Hedberg hci_conn_drop(hcon); 18705ee9891dSJohan Hedberg 18716be36555SAndrei Emeltchenko l2cap_state_change(chan, BT_CONNECT); 18728d836d71SGustavo Padovan __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 18730a708f8fSGustavo F. Padovan 18740a708f8fSGustavo F. Padovan if (hcon->state == BT_CONNECTED) { 1875715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 1876c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 1877d45fc423SGustavo F. Padovan if (l2cap_chan_check_security(chan)) 18786be36555SAndrei Emeltchenko l2cap_state_change(chan, BT_CONNECTED); 18790a708f8fSGustavo F. Padovan } else 1880fc7f8a7eSGustavo F. Padovan l2cap_do_start(chan); 18810a708f8fSGustavo F. Padovan } 18820a708f8fSGustavo F. Padovan 188330e76272SVille Tervo err = 0; 188430e76272SVille Tervo 18850a708f8fSGustavo F. Padovan done: 18866be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 188709fd0de5SGustavo F. Padovan hci_dev_unlock(hdev); 18880a708f8fSGustavo F. Padovan hci_dev_put(hdev); 18890a708f8fSGustavo F. Padovan return err; 18900a708f8fSGustavo F. Padovan } 18910a708f8fSGustavo F. Padovan 1892721c4181SGustavo F. Padovan static void l2cap_monitor_timeout(struct work_struct *work) 18930a708f8fSGustavo F. Padovan { 1894721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 1895721c4181SGustavo F. Padovan monitor_timer.work); 18960a708f8fSGustavo F. Padovan 1897525cd185SGustavo F. Padovan BT_DBG("chan %p", chan); 18980a708f8fSGustavo F. Padovan 18996be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 19006be36555SAndrei Emeltchenko 190180909e04SMat Martineau if (!chan->conn) { 19026be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 19038d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 19040a708f8fSGustavo F. Padovan return; 19050a708f8fSGustavo F. Padovan } 19060a708f8fSGustavo F. Padovan 1907401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, L2CAP_EV_MONITOR_TO); 19080a708f8fSGustavo F. Padovan 19096be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 19108d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 19110a708f8fSGustavo F. Padovan } 19120a708f8fSGustavo F. Padovan 1913721c4181SGustavo F. Padovan static void l2cap_retrans_timeout(struct work_struct *work) 19140a708f8fSGustavo F. Padovan { 1915721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 1916721c4181SGustavo F. Padovan retrans_timer.work); 19170a708f8fSGustavo F. Padovan 191849208c9cSGustavo F. Padovan BT_DBG("chan %p", chan); 19190a708f8fSGustavo F. Padovan 19206be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 19216be36555SAndrei Emeltchenko 192280909e04SMat Martineau if (!chan->conn) { 192380909e04SMat Martineau l2cap_chan_unlock(chan); 192480909e04SMat Martineau l2cap_chan_put(chan); 192580909e04SMat Martineau return; 192680909e04SMat Martineau } 19270a708f8fSGustavo F. Padovan 1928401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, L2CAP_EV_RETRANS_TO); 19296be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 19308d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 19310a708f8fSGustavo F. Padovan } 19320a708f8fSGustavo F. Padovan 1933d660366dSGustavo Padovan static void l2cap_streaming_send(struct l2cap_chan *chan, 19343733937dSMat Martineau struct sk_buff_head *skbs) 19350a708f8fSGustavo F. Padovan { 19360a708f8fSGustavo F. Padovan struct sk_buff *skb; 19373733937dSMat Martineau struct l2cap_ctrl *control; 19380a708f8fSGustavo F. Padovan 19393733937dSMat Martineau BT_DBG("chan %p, skbs %p", chan, skbs); 19403733937dSMat Martineau 1941b99e13adSMat Martineau if (__chan_is_moving(chan)) 1942b99e13adSMat Martineau return; 1943b99e13adSMat Martineau 19443733937dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 19453733937dSMat Martineau 19463733937dSMat Martineau while (!skb_queue_empty(&chan->tx_q)) { 19473733937dSMat Martineau 19483733937dSMat Martineau skb = skb_dequeue(&chan->tx_q); 19493733937dSMat Martineau 19503733937dSMat Martineau bt_cb(skb)->control.retries = 1; 19513733937dSMat Martineau control = &bt_cb(skb)->control; 19523733937dSMat Martineau 19533733937dSMat Martineau control->reqseq = 0; 19543733937dSMat Martineau control->txseq = chan->next_tx_seq; 19553733937dSMat Martineau 19563733937dSMat Martineau __pack_control(chan, control, skb); 19570a708f8fSGustavo F. Padovan 195847d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 19593733937dSMat Martineau u16 fcs = crc16(0, (u8 *) skb->data, skb->len); 19603733937dSMat Martineau put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 19610a708f8fSGustavo F. Padovan } 19620a708f8fSGustavo F. Padovan 19634343478fSGustavo F. Padovan l2cap_do_send(chan, skb); 19640a708f8fSGustavo F. Padovan 1965b4400672SAndrei Emeltchenko BT_DBG("Sent txseq %u", control->txseq); 19663733937dSMat Martineau 1967836be934SAndrei Emeltchenko chan->next_tx_seq = __next_seq(chan, chan->next_tx_seq); 19683733937dSMat Martineau chan->frames_sent++; 19690a708f8fSGustavo F. Padovan } 19700a708f8fSGustavo F. Padovan } 19710a708f8fSGustavo F. Padovan 197267c9e840SSzymon Janc static int l2cap_ertm_send(struct l2cap_chan *chan) 19730a708f8fSGustavo F. Padovan { 19740a708f8fSGustavo F. Padovan struct sk_buff *skb, *tx_skb; 197518a48e76SMat Martineau struct l2cap_ctrl *control; 197618a48e76SMat Martineau int sent = 0; 197718a48e76SMat Martineau 197818a48e76SMat Martineau BT_DBG("chan %p", chan); 19790a708f8fSGustavo F. Padovan 198089bc500eSGustavo F. Padovan if (chan->state != BT_CONNECTED) 19810a708f8fSGustavo F. Padovan return -ENOTCONN; 19820a708f8fSGustavo F. Padovan 198394122bbeSMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 198494122bbeSMat Martineau return 0; 198594122bbeSMat Martineau 1986b99e13adSMat Martineau if (__chan_is_moving(chan)) 1987b99e13adSMat Martineau return 0; 1988b99e13adSMat Martineau 198918a48e76SMat Martineau while (chan->tx_send_head && 199018a48e76SMat Martineau chan->unacked_frames < chan->remote_tx_win && 199118a48e76SMat Martineau chan->tx_state == L2CAP_TX_STATE_XMIT) { 19920a708f8fSGustavo F. Padovan 199318a48e76SMat Martineau skb = chan->tx_send_head; 19940a708f8fSGustavo F. Padovan 199518a48e76SMat Martineau bt_cb(skb)->control.retries = 1; 199618a48e76SMat Martineau control = &bt_cb(skb)->control; 19970a708f8fSGustavo F. Padovan 1998e2ab4353SGustavo F. Padovan if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state)) 199918a48e76SMat Martineau control->final = 1; 2000e2ab4353SGustavo F. Padovan 200118a48e76SMat Martineau control->reqseq = chan->buffer_seq; 200218a48e76SMat Martineau chan->last_acked_seq = chan->buffer_seq; 200318a48e76SMat Martineau control->txseq = chan->next_tx_seq; 20040a708f8fSGustavo F. Padovan 200518a48e76SMat Martineau __pack_control(chan, control, skb); 20060a708f8fSGustavo F. Padovan 200747d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 200818a48e76SMat Martineau u16 fcs = crc16(0, (u8 *) skb->data, skb->len); 200918a48e76SMat Martineau put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 20100a708f8fSGustavo F. Padovan } 20110a708f8fSGustavo F. Padovan 201218a48e76SMat Martineau /* Clone after data has been modified. Data is assumed to be 201318a48e76SMat Martineau read-only (for locking purposes) on cloned sk_buffs. 201418a48e76SMat Martineau */ 201518a48e76SMat Martineau tx_skb = skb_clone(skb, GFP_KERNEL); 201618a48e76SMat Martineau 201718a48e76SMat Martineau if (!tx_skb) 201818a48e76SMat Martineau break; 20190a708f8fSGustavo F. Padovan 20201a09bcb9SGustavo F. Padovan __set_retrans_timer(chan); 20210a708f8fSGustavo F. Padovan 2022836be934SAndrei Emeltchenko chan->next_tx_seq = __next_seq(chan, chan->next_tx_seq); 20236a026610SGustavo F. Padovan chan->unacked_frames++; 20246a026610SGustavo F. Padovan chan->frames_sent++; 202518a48e76SMat Martineau sent++; 20260a708f8fSGustavo F. Padovan 202758d35f87SGustavo F. Padovan if (skb_queue_is_last(&chan->tx_q, skb)) 202858d35f87SGustavo F. Padovan chan->tx_send_head = NULL; 20290a708f8fSGustavo F. Padovan else 203058d35f87SGustavo F. Padovan chan->tx_send_head = skb_queue_next(&chan->tx_q, skb); 203118a48e76SMat Martineau 203218a48e76SMat Martineau l2cap_do_send(chan, tx_skb); 2033b4400672SAndrei Emeltchenko BT_DBG("Sent txseq %u", control->txseq); 20340a708f8fSGustavo F. Padovan } 20350a708f8fSGustavo F. Padovan 2036b4400672SAndrei Emeltchenko BT_DBG("Sent %d, %u unacked, %u in ERTM queue", sent, 2037b4400672SAndrei Emeltchenko chan->unacked_frames, skb_queue_len(&chan->tx_q)); 203818a48e76SMat Martineau 203918a48e76SMat Martineau return sent; 20400a708f8fSGustavo F. Padovan } 20410a708f8fSGustavo F. Padovan 2042e1fbd4c1SMat Martineau static void l2cap_ertm_resend(struct l2cap_chan *chan) 2043e1fbd4c1SMat Martineau { 2044e1fbd4c1SMat Martineau struct l2cap_ctrl control; 2045e1fbd4c1SMat Martineau struct sk_buff *skb; 2046e1fbd4c1SMat Martineau struct sk_buff *tx_skb; 2047e1fbd4c1SMat Martineau u16 seq; 2048e1fbd4c1SMat Martineau 2049e1fbd4c1SMat Martineau BT_DBG("chan %p", chan); 2050e1fbd4c1SMat Martineau 2051e1fbd4c1SMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 2052e1fbd4c1SMat Martineau return; 2053e1fbd4c1SMat Martineau 2054b99e13adSMat Martineau if (__chan_is_moving(chan)) 2055b99e13adSMat Martineau return; 2056b99e13adSMat Martineau 2057e1fbd4c1SMat Martineau while (chan->retrans_list.head != L2CAP_SEQ_LIST_CLEAR) { 2058e1fbd4c1SMat Martineau seq = l2cap_seq_list_pop(&chan->retrans_list); 2059e1fbd4c1SMat Martineau 2060e1fbd4c1SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, seq); 2061e1fbd4c1SMat Martineau if (!skb) { 2062e1fbd4c1SMat Martineau BT_DBG("Error: Can't retransmit seq %d, frame missing", 2063e1fbd4c1SMat Martineau seq); 2064e1fbd4c1SMat Martineau continue; 2065e1fbd4c1SMat Martineau } 2066e1fbd4c1SMat Martineau 2067e1fbd4c1SMat Martineau bt_cb(skb)->control.retries++; 2068e1fbd4c1SMat Martineau control = bt_cb(skb)->control; 2069e1fbd4c1SMat Martineau 2070e1fbd4c1SMat Martineau if (chan->max_tx != 0 && 2071e1fbd4c1SMat Martineau bt_cb(skb)->control.retries > chan->max_tx) { 2072e1fbd4c1SMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 20735e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 2074e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 2075e1fbd4c1SMat Martineau break; 2076e1fbd4c1SMat Martineau } 2077e1fbd4c1SMat Martineau 2078e1fbd4c1SMat Martineau control.reqseq = chan->buffer_seq; 2079e1fbd4c1SMat Martineau if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state)) 2080e1fbd4c1SMat Martineau control.final = 1; 2081e1fbd4c1SMat Martineau else 2082e1fbd4c1SMat Martineau control.final = 0; 2083e1fbd4c1SMat Martineau 2084e1fbd4c1SMat Martineau if (skb_cloned(skb)) { 2085e1fbd4c1SMat Martineau /* Cloned sk_buffs are read-only, so we need a 2086e1fbd4c1SMat Martineau * writeable copy 2087e1fbd4c1SMat Martineau */ 20888bcde1f2SGustavo Padovan tx_skb = skb_copy(skb, GFP_KERNEL); 2089e1fbd4c1SMat Martineau } else { 20908bcde1f2SGustavo Padovan tx_skb = skb_clone(skb, GFP_KERNEL); 2091e1fbd4c1SMat Martineau } 2092e1fbd4c1SMat Martineau 2093e1fbd4c1SMat Martineau if (!tx_skb) { 2094e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 2095e1fbd4c1SMat Martineau break; 2096e1fbd4c1SMat Martineau } 2097e1fbd4c1SMat Martineau 2098e1fbd4c1SMat Martineau /* Update skb contents */ 2099e1fbd4c1SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 2100e1fbd4c1SMat Martineau put_unaligned_le32(__pack_extended_control(&control), 2101e1fbd4c1SMat Martineau tx_skb->data + L2CAP_HDR_SIZE); 2102e1fbd4c1SMat Martineau } else { 2103e1fbd4c1SMat Martineau put_unaligned_le16(__pack_enhanced_control(&control), 2104e1fbd4c1SMat Martineau tx_skb->data + L2CAP_HDR_SIZE); 2105e1fbd4c1SMat Martineau } 2106e1fbd4c1SMat Martineau 2107e1fbd4c1SMat Martineau if (chan->fcs == L2CAP_FCS_CRC16) { 2108e1fbd4c1SMat Martineau u16 fcs = crc16(0, (u8 *) tx_skb->data, tx_skb->len); 2109e1fbd4c1SMat Martineau put_unaligned_le16(fcs, skb_put(tx_skb, 2110e1fbd4c1SMat Martineau L2CAP_FCS_SIZE)); 2111e1fbd4c1SMat Martineau } 2112e1fbd4c1SMat Martineau 2113e1fbd4c1SMat Martineau l2cap_do_send(chan, tx_skb); 2114e1fbd4c1SMat Martineau 2115e1fbd4c1SMat Martineau BT_DBG("Resent txseq %d", control.txseq); 2116e1fbd4c1SMat Martineau 2117e1fbd4c1SMat Martineau chan->last_acked_seq = chan->buffer_seq; 2118e1fbd4c1SMat Martineau } 2119e1fbd4c1SMat Martineau } 2120e1fbd4c1SMat Martineau 2121f80842a8SMat Martineau static void l2cap_retransmit(struct l2cap_chan *chan, 2122f80842a8SMat Martineau struct l2cap_ctrl *control) 2123f80842a8SMat Martineau { 2124f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2125f80842a8SMat Martineau 2126f80842a8SMat Martineau l2cap_seq_list_append(&chan->retrans_list, control->reqseq); 2127f80842a8SMat Martineau l2cap_ertm_resend(chan); 2128f80842a8SMat Martineau } 2129f80842a8SMat Martineau 2130d2a7ac5dSMat Martineau static void l2cap_retransmit_all(struct l2cap_chan *chan, 2131d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 2132d2a7ac5dSMat Martineau { 2133e1fbd4c1SMat Martineau struct sk_buff *skb; 2134e1fbd4c1SMat Martineau 2135e1fbd4c1SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2136e1fbd4c1SMat Martineau 2137e1fbd4c1SMat Martineau if (control->poll) 2138e1fbd4c1SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 2139e1fbd4c1SMat Martineau 2140e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 2141e1fbd4c1SMat Martineau 2142e1fbd4c1SMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 2143e1fbd4c1SMat Martineau return; 2144e1fbd4c1SMat Martineau 2145e1fbd4c1SMat Martineau if (chan->unacked_frames) { 2146e1fbd4c1SMat Martineau skb_queue_walk(&chan->tx_q, skb) { 2147e1fbd4c1SMat Martineau if (bt_cb(skb)->control.txseq == control->reqseq || 2148e1fbd4c1SMat Martineau skb == chan->tx_send_head) 2149e1fbd4c1SMat Martineau break; 2150e1fbd4c1SMat Martineau } 2151e1fbd4c1SMat Martineau 2152e1fbd4c1SMat Martineau skb_queue_walk_from(&chan->tx_q, skb) { 2153e1fbd4c1SMat Martineau if (skb == chan->tx_send_head) 2154e1fbd4c1SMat Martineau break; 2155e1fbd4c1SMat Martineau 2156e1fbd4c1SMat Martineau l2cap_seq_list_append(&chan->retrans_list, 2157e1fbd4c1SMat Martineau bt_cb(skb)->control.txseq); 2158e1fbd4c1SMat Martineau } 2159e1fbd4c1SMat Martineau 2160e1fbd4c1SMat Martineau l2cap_ertm_resend(chan); 2161e1fbd4c1SMat Martineau } 2162d2a7ac5dSMat Martineau } 2163d2a7ac5dSMat Martineau 2164b17e73bbSSzymon Janc static void l2cap_send_ack(struct l2cap_chan *chan) 2165b17e73bbSSzymon Janc { 21660a0aba42SMat Martineau struct l2cap_ctrl control; 21670a0aba42SMat Martineau u16 frames_to_ack = __seq_offset(chan, chan->buffer_seq, 21680a0aba42SMat Martineau chan->last_acked_seq); 21690a0aba42SMat Martineau int threshold; 21700a0aba42SMat Martineau 21710a0aba42SMat Martineau BT_DBG("chan %p last_acked_seq %d buffer_seq %d", 21720a0aba42SMat Martineau chan, chan->last_acked_seq, chan->buffer_seq); 21730a0aba42SMat Martineau 21740a0aba42SMat Martineau memset(&control, 0, sizeof(control)); 21750a0aba42SMat Martineau control.sframe = 1; 21760a0aba42SMat Martineau 21770a0aba42SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state) && 21780a0aba42SMat Martineau chan->rx_state == L2CAP_RX_STATE_RECV) { 2179b17e73bbSSzymon Janc __clear_ack_timer(chan); 21800a0aba42SMat Martineau control.super = L2CAP_SUPER_RNR; 21810a0aba42SMat Martineau control.reqseq = chan->buffer_seq; 21820a0aba42SMat Martineau l2cap_send_sframe(chan, &control); 21830a0aba42SMat Martineau } else { 21840a0aba42SMat Martineau if (!test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) { 21850a0aba42SMat Martineau l2cap_ertm_send(chan); 21860a0aba42SMat Martineau /* If any i-frames were sent, they included an ack */ 21870a0aba42SMat Martineau if (chan->buffer_seq == chan->last_acked_seq) 21880a0aba42SMat Martineau frames_to_ack = 0; 21890a0aba42SMat Martineau } 21900a0aba42SMat Martineau 2191c20f8e35SMat Martineau /* Ack now if the window is 3/4ths full. 21920a0aba42SMat Martineau * Calculate without mul or div 21930a0aba42SMat Martineau */ 2194c20f8e35SMat Martineau threshold = chan->ack_win; 21950a0aba42SMat Martineau threshold += threshold << 1; 21960a0aba42SMat Martineau threshold >>= 2; 21970a0aba42SMat Martineau 2198b4400672SAndrei Emeltchenko BT_DBG("frames_to_ack %u, threshold %d", frames_to_ack, 21990a0aba42SMat Martineau threshold); 22000a0aba42SMat Martineau 22010a0aba42SMat Martineau if (frames_to_ack >= threshold) { 22020a0aba42SMat Martineau __clear_ack_timer(chan); 22030a0aba42SMat Martineau control.super = L2CAP_SUPER_RR; 22040a0aba42SMat Martineau control.reqseq = chan->buffer_seq; 22050a0aba42SMat Martineau l2cap_send_sframe(chan, &control); 22060a0aba42SMat Martineau frames_to_ack = 0; 22070a0aba42SMat Martineau } 22080a0aba42SMat Martineau 22090a0aba42SMat Martineau if (frames_to_ack) 22100a0aba42SMat Martineau __set_ack_timer(chan); 22110a0aba42SMat Martineau } 2212b17e73bbSSzymon Janc } 2213b17e73bbSSzymon Janc 221404124681SGustavo F. Padovan static inline int l2cap_skbuff_fromiovec(struct l2cap_chan *chan, 221504124681SGustavo F. Padovan struct msghdr *msg, int len, 221604124681SGustavo F. Padovan int count, struct sk_buff *skb) 22170a708f8fSGustavo F. Padovan { 22180952a57aSAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 22190a708f8fSGustavo F. Padovan struct sk_buff **frag; 222090338947SGustavo Padovan int sent = 0; 22210a708f8fSGustavo F. Padovan 22220a708f8fSGustavo F. Padovan if (memcpy_fromiovec(skb_put(skb, count), msg->msg_iov, count)) 22230a708f8fSGustavo F. Padovan return -EFAULT; 22240a708f8fSGustavo F. Padovan 22250a708f8fSGustavo F. Padovan sent += count; 22260a708f8fSGustavo F. Padovan len -= count; 22270a708f8fSGustavo F. Padovan 22280a708f8fSGustavo F. Padovan /* Continuation fragments (no L2CAP header) */ 22290a708f8fSGustavo F. Padovan frag = &skb_shinfo(skb)->frag_list; 22300a708f8fSGustavo F. Padovan while (len) { 2231fbe00700SGustavo Padovan struct sk_buff *tmp; 2232fbe00700SGustavo Padovan 22330a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 22340a708f8fSGustavo F. Padovan 2235fbe00700SGustavo Padovan tmp = chan->ops->alloc_skb(chan, count, 223690338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 2237fbe00700SGustavo Padovan if (IS_ERR(tmp)) 2238fbe00700SGustavo Padovan return PTR_ERR(tmp); 22392f7719ceSAndrei Emeltchenko 2240fbe00700SGustavo Padovan *frag = tmp; 2241fbe00700SGustavo Padovan 22420a708f8fSGustavo F. Padovan if (memcpy_fromiovec(skb_put(*frag, count), msg->msg_iov, count)) 22430a708f8fSGustavo F. Padovan return -EFAULT; 22440a708f8fSGustavo F. Padovan 22455e59b791SLuiz Augusto von Dentz (*frag)->priority = skb->priority; 22465e59b791SLuiz Augusto von Dentz 22470a708f8fSGustavo F. Padovan sent += count; 22480a708f8fSGustavo F. Padovan len -= count; 22490a708f8fSGustavo F. Padovan 22502d0ed3d5SGustavo Padovan skb->len += (*frag)->len; 22512d0ed3d5SGustavo Padovan skb->data_len += (*frag)->len; 22522d0ed3d5SGustavo Padovan 22530a708f8fSGustavo F. Padovan frag = &(*frag)->next; 22540a708f8fSGustavo F. Padovan } 22550a708f8fSGustavo F. Padovan 22560a708f8fSGustavo F. Padovan return sent; 22570a708f8fSGustavo F. Padovan } 22580a708f8fSGustavo F. Padovan 22595e59b791SLuiz Augusto von Dentz static struct sk_buff *l2cap_create_connless_pdu(struct l2cap_chan *chan, 22605e59b791SLuiz Augusto von Dentz struct msghdr *msg, size_t len, 22615e59b791SLuiz Augusto von Dentz u32 priority) 22620a708f8fSGustavo F. Padovan { 22638c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 22640a708f8fSGustavo F. Padovan struct sk_buff *skb; 226503a51213SAndrei Emeltchenko int err, count, hlen = L2CAP_HDR_SIZE + L2CAP_PSMLEN_SIZE; 22660a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 22670a708f8fSGustavo F. Padovan 226843b1b8dfSMarcel Holtmann BT_DBG("chan %p psm 0x%2.2x len %zu priority %u", chan, 226943b1b8dfSMarcel Holtmann __le16_to_cpu(chan->psm), len, priority); 22700a708f8fSGustavo F. Padovan 22710a708f8fSGustavo F. Padovan count = min_t(unsigned int, (conn->mtu - hlen), len); 22722f7719ceSAndrei Emeltchenko 22732f7719ceSAndrei Emeltchenko skb = chan->ops->alloc_skb(chan, count + hlen, 227490338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 227590338947SGustavo Padovan if (IS_ERR(skb)) 227690338947SGustavo Padovan return skb; 22770a708f8fSGustavo F. Padovan 22785e59b791SLuiz Augusto von Dentz skb->priority = priority; 22795e59b791SLuiz Augusto von Dentz 22800a708f8fSGustavo F. Padovan /* Create L2CAP header */ 22810a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2282fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 2283daf6a78cSAndrei Emeltchenko lh->len = cpu_to_le16(len + L2CAP_PSMLEN_SIZE); 228443b1b8dfSMarcel Holtmann put_unaligned(chan->psm, (__le16 *) skb_put(skb, L2CAP_PSMLEN_SIZE)); 22850a708f8fSGustavo F. Padovan 22860952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 22870a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 22880a708f8fSGustavo F. Padovan kfree_skb(skb); 22890a708f8fSGustavo F. Padovan return ERR_PTR(err); 22900a708f8fSGustavo F. Padovan } 22910a708f8fSGustavo F. Padovan return skb; 22920a708f8fSGustavo F. Padovan } 22930a708f8fSGustavo F. Padovan 22945e59b791SLuiz Augusto von Dentz static struct sk_buff *l2cap_create_basic_pdu(struct l2cap_chan *chan, 22955e59b791SLuiz Augusto von Dentz struct msghdr *msg, size_t len, 22965e59b791SLuiz Augusto von Dentz u32 priority) 22970a708f8fSGustavo F. Padovan { 22988c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 22990a708f8fSGustavo F. Padovan struct sk_buff *skb; 2300f2ba7faeSGustavo Padovan int err, count; 23010a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 23020a708f8fSGustavo F. Padovan 2303b4400672SAndrei Emeltchenko BT_DBG("chan %p len %zu", chan, len); 23040a708f8fSGustavo F. Padovan 2305f2ba7faeSGustavo Padovan count = min_t(unsigned int, (conn->mtu - L2CAP_HDR_SIZE), len); 23062f7719ceSAndrei Emeltchenko 2307f2ba7faeSGustavo Padovan skb = chan->ops->alloc_skb(chan, count + L2CAP_HDR_SIZE, 230890338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 230990338947SGustavo Padovan if (IS_ERR(skb)) 231090338947SGustavo Padovan return skb; 23110a708f8fSGustavo F. Padovan 23125e59b791SLuiz Augusto von Dentz skb->priority = priority; 23135e59b791SLuiz Augusto von Dentz 23140a708f8fSGustavo F. Padovan /* Create L2CAP header */ 23150a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2316fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 23176ff9b5efSGustavo Padovan lh->len = cpu_to_le16(len); 23180a708f8fSGustavo F. Padovan 23190952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 23200a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 23210a708f8fSGustavo F. Padovan kfree_skb(skb); 23220a708f8fSGustavo F. Padovan return ERR_PTR(err); 23230a708f8fSGustavo F. Padovan } 23240a708f8fSGustavo F. Padovan return skb; 23250a708f8fSGustavo F. Padovan } 23260a708f8fSGustavo F. Padovan 2327ab0ff76dSLuiz Augusto von Dentz static struct sk_buff *l2cap_create_iframe_pdu(struct l2cap_chan *chan, 2328ab0ff76dSLuiz Augusto von Dentz struct msghdr *msg, size_t len, 232994122bbeSMat Martineau u16 sdulen) 23300a708f8fSGustavo F. Padovan { 23318c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 23320a708f8fSGustavo F. Padovan struct sk_buff *skb; 2333e4ca6d98SAndrei Emeltchenko int err, count, hlen; 23340a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 23350a708f8fSGustavo F. Padovan 2336b4400672SAndrei Emeltchenko BT_DBG("chan %p len %zu", chan, len); 23370a708f8fSGustavo F. Padovan 23380a708f8fSGustavo F. Padovan if (!conn) 23390a708f8fSGustavo F. Padovan return ERR_PTR(-ENOTCONN); 23400a708f8fSGustavo F. Padovan 2341ba7aa64fSGustavo Padovan hlen = __ertm_hdr_size(chan); 2342e4ca6d98SAndrei Emeltchenko 23430a708f8fSGustavo F. Padovan if (sdulen) 234403a51213SAndrei Emeltchenko hlen += L2CAP_SDULEN_SIZE; 23450a708f8fSGustavo F. Padovan 234647d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 234703a51213SAndrei Emeltchenko hlen += L2CAP_FCS_SIZE; 23480a708f8fSGustavo F. Padovan 23490a708f8fSGustavo F. Padovan count = min_t(unsigned int, (conn->mtu - hlen), len); 23502f7719ceSAndrei Emeltchenko 23512f7719ceSAndrei Emeltchenko skb = chan->ops->alloc_skb(chan, count + hlen, 235290338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 235390338947SGustavo Padovan if (IS_ERR(skb)) 235490338947SGustavo Padovan return skb; 23550a708f8fSGustavo F. Padovan 23560a708f8fSGustavo F. Padovan /* Create L2CAP header */ 23570a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2358fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 23590a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(len + (hlen - L2CAP_HDR_SIZE)); 236088843ab0SAndrei Emeltchenko 236118a48e76SMat Martineau /* Control header is populated later */ 236218a48e76SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 236318a48e76SMat Martineau put_unaligned_le32(0, skb_put(skb, L2CAP_EXT_CTRL_SIZE)); 236418a48e76SMat Martineau else 236518a48e76SMat Martineau put_unaligned_le16(0, skb_put(skb, L2CAP_ENH_CTRL_SIZE)); 236688843ab0SAndrei Emeltchenko 23670a708f8fSGustavo F. Padovan if (sdulen) 236803a51213SAndrei Emeltchenko put_unaligned_le16(sdulen, skb_put(skb, L2CAP_SDULEN_SIZE)); 23690a708f8fSGustavo F. Padovan 23700952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 23710a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 23720a708f8fSGustavo F. Padovan kfree_skb(skb); 23730a708f8fSGustavo F. Padovan return ERR_PTR(err); 23740a708f8fSGustavo F. Padovan } 23750a708f8fSGustavo F. Padovan 237618a48e76SMat Martineau bt_cb(skb)->control.fcs = chan->fcs; 23773ce3514fSMat Martineau bt_cb(skb)->control.retries = 0; 23780a708f8fSGustavo F. Padovan return skb; 23790a708f8fSGustavo F. Padovan } 23800a708f8fSGustavo F. Padovan 238194122bbeSMat Martineau static int l2cap_segment_sdu(struct l2cap_chan *chan, 238294122bbeSMat Martineau struct sk_buff_head *seg_queue, 238394122bbeSMat Martineau struct msghdr *msg, size_t len) 23840a708f8fSGustavo F. Padovan { 23850a708f8fSGustavo F. Padovan struct sk_buff *skb; 238694122bbeSMat Martineau u16 sdu_len; 238794122bbeSMat Martineau size_t pdu_len; 238894122bbeSMat Martineau u8 sar; 23890a708f8fSGustavo F. Padovan 2390b4400672SAndrei Emeltchenko BT_DBG("chan %p, msg %p, len %zu", chan, msg, len); 23910a708f8fSGustavo F. Padovan 239294122bbeSMat Martineau /* It is critical that ERTM PDUs fit in a single HCI fragment, 239394122bbeSMat Martineau * so fragmented skbs are not used. The HCI layer's handling 239494122bbeSMat Martineau * of fragmented skbs is not compatible with ERTM's queueing. 239594122bbeSMat Martineau */ 239694122bbeSMat Martineau 239794122bbeSMat Martineau /* PDU size is derived from the HCI MTU */ 239894122bbeSMat Martineau pdu_len = chan->conn->mtu; 239994122bbeSMat Martineau 2400a549574dSMat Martineau /* Constrain PDU size for BR/EDR connections */ 2401a549574dSMat Martineau if (!chan->hs_hcon) 240294122bbeSMat Martineau pdu_len = min_t(size_t, pdu_len, L2CAP_BREDR_MAX_PAYLOAD); 240394122bbeSMat Martineau 240494122bbeSMat Martineau /* Adjust for largest possible L2CAP overhead. */ 240535d401dfSGustavo Padovan if (chan->fcs) 240635d401dfSGustavo Padovan pdu_len -= L2CAP_FCS_SIZE; 240735d401dfSGustavo Padovan 2408ba7aa64fSGustavo Padovan pdu_len -= __ertm_hdr_size(chan); 240994122bbeSMat Martineau 241094122bbeSMat Martineau /* Remote device may have requested smaller PDUs */ 241194122bbeSMat Martineau pdu_len = min_t(size_t, pdu_len, chan->remote_mps); 241294122bbeSMat Martineau 241394122bbeSMat Martineau if (len <= pdu_len) { 241494122bbeSMat Martineau sar = L2CAP_SAR_UNSEGMENTED; 241594122bbeSMat Martineau sdu_len = 0; 241694122bbeSMat Martineau pdu_len = len; 241794122bbeSMat Martineau } else { 241894122bbeSMat Martineau sar = L2CAP_SAR_START; 241994122bbeSMat Martineau sdu_len = len; 242094122bbeSMat Martineau pdu_len -= L2CAP_SDULEN_SIZE; 242194122bbeSMat Martineau } 24220a708f8fSGustavo F. Padovan 24230a708f8fSGustavo F. Padovan while (len > 0) { 242494122bbeSMat Martineau skb = l2cap_create_iframe_pdu(chan, msg, pdu_len, sdu_len); 24250a708f8fSGustavo F. Padovan 24260a708f8fSGustavo F. Padovan if (IS_ERR(skb)) { 242794122bbeSMat Martineau __skb_queue_purge(seg_queue); 24280a708f8fSGustavo F. Padovan return PTR_ERR(skb); 24290a708f8fSGustavo F. Padovan } 24300a708f8fSGustavo F. Padovan 243194122bbeSMat Martineau bt_cb(skb)->control.sar = sar; 243294122bbeSMat Martineau __skb_queue_tail(seg_queue, skb); 24330a708f8fSGustavo F. Padovan 243494122bbeSMat Martineau len -= pdu_len; 243594122bbeSMat Martineau if (sdu_len) { 243694122bbeSMat Martineau sdu_len = 0; 243794122bbeSMat Martineau pdu_len += L2CAP_SDULEN_SIZE; 243894122bbeSMat Martineau } 243994122bbeSMat Martineau 244094122bbeSMat Martineau if (len <= pdu_len) { 244194122bbeSMat Martineau sar = L2CAP_SAR_END; 244294122bbeSMat Martineau pdu_len = len; 244394122bbeSMat Martineau } else { 244494122bbeSMat Martineau sar = L2CAP_SAR_CONTINUE; 244594122bbeSMat Martineau } 244694122bbeSMat Martineau } 244794122bbeSMat Martineau 2448f0f62799SGustavo Padovan return 0; 24490a708f8fSGustavo F. Padovan } 24500a708f8fSGustavo F. Padovan 24515e59b791SLuiz Augusto von Dentz int l2cap_chan_send(struct l2cap_chan *chan, struct msghdr *msg, size_t len, 24525e59b791SLuiz Augusto von Dentz u32 priority) 24539a91a04aSGustavo F. Padovan { 24549a91a04aSGustavo F. Padovan struct sk_buff *skb; 24559a91a04aSGustavo F. Padovan int err; 245694122bbeSMat Martineau struct sk_buff_head seg_queue; 24579a91a04aSGustavo F. Padovan 24589a91a04aSGustavo F. Padovan /* Connectionless channel */ 2459715ec005SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_LESS) { 24605e59b791SLuiz Augusto von Dentz skb = l2cap_create_connless_pdu(chan, msg, len, priority); 24619a91a04aSGustavo F. Padovan if (IS_ERR(skb)) 24629a91a04aSGustavo F. Padovan return PTR_ERR(skb); 24639a91a04aSGustavo F. Padovan 24649a91a04aSGustavo F. Padovan l2cap_do_send(chan, skb); 24659a91a04aSGustavo F. Padovan return len; 24669a91a04aSGustavo F. Padovan } 24679a91a04aSGustavo F. Padovan 24689a91a04aSGustavo F. Padovan switch (chan->mode) { 24699a91a04aSGustavo F. Padovan case L2CAP_MODE_BASIC: 24709a91a04aSGustavo F. Padovan /* Check outgoing MTU */ 24719a91a04aSGustavo F. Padovan if (len > chan->omtu) 24729a91a04aSGustavo F. Padovan return -EMSGSIZE; 24739a91a04aSGustavo F. Padovan 24749a91a04aSGustavo F. Padovan /* Create a basic PDU */ 24755e59b791SLuiz Augusto von Dentz skb = l2cap_create_basic_pdu(chan, msg, len, priority); 24769a91a04aSGustavo F. Padovan if (IS_ERR(skb)) 24779a91a04aSGustavo F. Padovan return PTR_ERR(skb); 24789a91a04aSGustavo F. Padovan 24799a91a04aSGustavo F. Padovan l2cap_do_send(chan, skb); 24809a91a04aSGustavo F. Padovan err = len; 24819a91a04aSGustavo F. Padovan break; 24829a91a04aSGustavo F. Padovan 24839a91a04aSGustavo F. Padovan case L2CAP_MODE_ERTM: 24849a91a04aSGustavo F. Padovan case L2CAP_MODE_STREAMING: 248594122bbeSMat Martineau /* Check outgoing MTU */ 248694122bbeSMat Martineau if (len > chan->omtu) { 248794122bbeSMat Martineau err = -EMSGSIZE; 24889a91a04aSGustavo F. Padovan break; 24899a91a04aSGustavo F. Padovan } 24909a91a04aSGustavo F. Padovan 249194122bbeSMat Martineau __skb_queue_head_init(&seg_queue); 249294122bbeSMat Martineau 249394122bbeSMat Martineau /* Do segmentation before calling in to the state machine, 249494122bbeSMat Martineau * since it's possible to block while waiting for memory 249594122bbeSMat Martineau * allocation. 249694122bbeSMat Martineau */ 249794122bbeSMat Martineau err = l2cap_segment_sdu(chan, &seg_queue, msg, len); 249894122bbeSMat Martineau 249994122bbeSMat Martineau /* The channel could have been closed while segmenting, 250094122bbeSMat Martineau * check that it is still connected. 250194122bbeSMat Martineau */ 250294122bbeSMat Martineau if (chan->state != BT_CONNECTED) { 250394122bbeSMat Martineau __skb_queue_purge(&seg_queue); 250494122bbeSMat Martineau err = -ENOTCONN; 25059a91a04aSGustavo F. Padovan } 25069a91a04aSGustavo F. Padovan 250794122bbeSMat Martineau if (err) 250894122bbeSMat Martineau break; 250994122bbeSMat Martineau 25103733937dSMat Martineau if (chan->mode == L2CAP_MODE_ERTM) 2511d660366dSGustavo Padovan l2cap_tx(chan, NULL, &seg_queue, L2CAP_EV_DATA_REQUEST); 25123733937dSMat Martineau else 2513d660366dSGustavo Padovan l2cap_streaming_send(chan, &seg_queue); 251494122bbeSMat Martineau 25159a91a04aSGustavo F. Padovan err = len; 25169a91a04aSGustavo F. Padovan 251794122bbeSMat Martineau /* If the skbs were not queued for sending, they'll still be in 251894122bbeSMat Martineau * seg_queue and need to be purged. 251994122bbeSMat Martineau */ 252094122bbeSMat Martineau __skb_queue_purge(&seg_queue); 25219a91a04aSGustavo F. Padovan break; 25229a91a04aSGustavo F. Padovan 25239a91a04aSGustavo F. Padovan default: 25249a91a04aSGustavo F. Padovan BT_DBG("bad state %1.1x", chan->mode); 25259a91a04aSGustavo F. Padovan err = -EBADFD; 25269a91a04aSGustavo F. Padovan } 25279a91a04aSGustavo F. Padovan 25289a91a04aSGustavo F. Padovan return err; 25299a91a04aSGustavo F. Padovan } 25309a91a04aSGustavo F. Padovan 2531d2a7ac5dSMat Martineau static void l2cap_send_srej(struct l2cap_chan *chan, u16 txseq) 2532d2a7ac5dSMat Martineau { 2533bed68bdeSMat Martineau struct l2cap_ctrl control; 2534bed68bdeSMat Martineau u16 seq; 2535bed68bdeSMat Martineau 2536b4400672SAndrei Emeltchenko BT_DBG("chan %p, txseq %u", chan, txseq); 2537bed68bdeSMat Martineau 2538bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2539bed68bdeSMat Martineau control.sframe = 1; 2540bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2541bed68bdeSMat Martineau 2542bed68bdeSMat Martineau for (seq = chan->expected_tx_seq; seq != txseq; 2543bed68bdeSMat Martineau seq = __next_seq(chan, seq)) { 2544bed68bdeSMat Martineau if (!l2cap_ertm_seq_in_queue(&chan->srej_q, seq)) { 2545bed68bdeSMat Martineau control.reqseq = seq; 2546bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2547bed68bdeSMat Martineau l2cap_seq_list_append(&chan->srej_list, seq); 2548bed68bdeSMat Martineau } 2549bed68bdeSMat Martineau } 2550bed68bdeSMat Martineau 2551bed68bdeSMat Martineau chan->expected_tx_seq = __next_seq(chan, txseq); 2552d2a7ac5dSMat Martineau } 2553d2a7ac5dSMat Martineau 2554d2a7ac5dSMat Martineau static void l2cap_send_srej_tail(struct l2cap_chan *chan) 2555d2a7ac5dSMat Martineau { 2556bed68bdeSMat Martineau struct l2cap_ctrl control; 2557bed68bdeSMat Martineau 2558bed68bdeSMat Martineau BT_DBG("chan %p", chan); 2559bed68bdeSMat Martineau 2560bed68bdeSMat Martineau if (chan->srej_list.tail == L2CAP_SEQ_LIST_CLEAR) 2561bed68bdeSMat Martineau return; 2562bed68bdeSMat Martineau 2563bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2564bed68bdeSMat Martineau control.sframe = 1; 2565bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2566bed68bdeSMat Martineau control.reqseq = chan->srej_list.tail; 2567bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2568d2a7ac5dSMat Martineau } 2569d2a7ac5dSMat Martineau 2570d2a7ac5dSMat Martineau static void l2cap_send_srej_list(struct l2cap_chan *chan, u16 txseq) 2571d2a7ac5dSMat Martineau { 2572bed68bdeSMat Martineau struct l2cap_ctrl control; 2573bed68bdeSMat Martineau u16 initial_head; 2574bed68bdeSMat Martineau u16 seq; 2575bed68bdeSMat Martineau 2576b4400672SAndrei Emeltchenko BT_DBG("chan %p, txseq %u", chan, txseq); 2577bed68bdeSMat Martineau 2578bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2579bed68bdeSMat Martineau control.sframe = 1; 2580bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2581bed68bdeSMat Martineau 2582bed68bdeSMat Martineau /* Capture initial list head to allow only one pass through the list. */ 2583bed68bdeSMat Martineau initial_head = chan->srej_list.head; 2584bed68bdeSMat Martineau 2585bed68bdeSMat Martineau do { 2586bed68bdeSMat Martineau seq = l2cap_seq_list_pop(&chan->srej_list); 2587bed68bdeSMat Martineau if (seq == txseq || seq == L2CAP_SEQ_LIST_CLEAR) 2588bed68bdeSMat Martineau break; 2589bed68bdeSMat Martineau 2590bed68bdeSMat Martineau control.reqseq = seq; 2591bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2592bed68bdeSMat Martineau l2cap_seq_list_append(&chan->srej_list, seq); 2593bed68bdeSMat Martineau } while (chan->srej_list.head != initial_head); 2594d2a7ac5dSMat Martineau } 2595d2a7ac5dSMat Martineau 2596608bcc6dSMat Martineau static void l2cap_process_reqseq(struct l2cap_chan *chan, u16 reqseq) 2597608bcc6dSMat Martineau { 2598608bcc6dSMat Martineau struct sk_buff *acked_skb; 2599608bcc6dSMat Martineau u16 ackseq; 2600608bcc6dSMat Martineau 2601b4400672SAndrei Emeltchenko BT_DBG("chan %p, reqseq %u", chan, reqseq); 2602608bcc6dSMat Martineau 2603608bcc6dSMat Martineau if (chan->unacked_frames == 0 || reqseq == chan->expected_ack_seq) 2604608bcc6dSMat Martineau return; 2605608bcc6dSMat Martineau 2606b4400672SAndrei Emeltchenko BT_DBG("expected_ack_seq %u, unacked_frames %u", 2607608bcc6dSMat Martineau chan->expected_ack_seq, chan->unacked_frames); 2608608bcc6dSMat Martineau 2609608bcc6dSMat Martineau for (ackseq = chan->expected_ack_seq; ackseq != reqseq; 2610608bcc6dSMat Martineau ackseq = __next_seq(chan, ackseq)) { 2611608bcc6dSMat Martineau 2612608bcc6dSMat Martineau acked_skb = l2cap_ertm_seq_in_queue(&chan->tx_q, ackseq); 2613608bcc6dSMat Martineau if (acked_skb) { 2614608bcc6dSMat Martineau skb_unlink(acked_skb, &chan->tx_q); 2615608bcc6dSMat Martineau kfree_skb(acked_skb); 2616608bcc6dSMat Martineau chan->unacked_frames--; 2617608bcc6dSMat Martineau } 2618608bcc6dSMat Martineau } 2619608bcc6dSMat Martineau 2620608bcc6dSMat Martineau chan->expected_ack_seq = reqseq; 2621608bcc6dSMat Martineau 2622608bcc6dSMat Martineau if (chan->unacked_frames == 0) 2623608bcc6dSMat Martineau __clear_retrans_timer(chan); 2624608bcc6dSMat Martineau 2625b4400672SAndrei Emeltchenko BT_DBG("unacked_frames %u", chan->unacked_frames); 2626608bcc6dSMat Martineau } 2627608bcc6dSMat Martineau 2628608bcc6dSMat Martineau static void l2cap_abort_rx_srej_sent(struct l2cap_chan *chan) 2629608bcc6dSMat Martineau { 2630608bcc6dSMat Martineau BT_DBG("chan %p", chan); 2631608bcc6dSMat Martineau 2632608bcc6dSMat Martineau chan->expected_tx_seq = chan->buffer_seq; 2633608bcc6dSMat Martineau l2cap_seq_list_clear(&chan->srej_list); 2634608bcc6dSMat Martineau skb_queue_purge(&chan->srej_q); 2635608bcc6dSMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 2636608bcc6dSMat Martineau } 2637608bcc6dSMat Martineau 2638d660366dSGustavo Padovan static void l2cap_tx_state_xmit(struct l2cap_chan *chan, 2639608bcc6dSMat Martineau struct l2cap_ctrl *control, 2640608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2641608bcc6dSMat Martineau { 2642608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d", chan, control, skbs, 2643608bcc6dSMat Martineau event); 2644608bcc6dSMat Martineau 2645608bcc6dSMat Martineau switch (event) { 2646608bcc6dSMat Martineau case L2CAP_EV_DATA_REQUEST: 2647608bcc6dSMat Martineau if (chan->tx_send_head == NULL) 2648608bcc6dSMat Martineau chan->tx_send_head = skb_peek(skbs); 2649608bcc6dSMat Martineau 2650608bcc6dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 2651608bcc6dSMat Martineau l2cap_ertm_send(chan); 2652608bcc6dSMat Martineau break; 2653608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_DETECTED: 2654608bcc6dSMat Martineau BT_DBG("Enter LOCAL_BUSY"); 2655608bcc6dSMat Martineau set_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2656608bcc6dSMat Martineau 2657608bcc6dSMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 2658608bcc6dSMat Martineau /* The SREJ_SENT state must be aborted if we are to 2659608bcc6dSMat Martineau * enter the LOCAL_BUSY state. 2660608bcc6dSMat Martineau */ 2661608bcc6dSMat Martineau l2cap_abort_rx_srej_sent(chan); 2662608bcc6dSMat Martineau } 2663608bcc6dSMat Martineau 2664608bcc6dSMat Martineau l2cap_send_ack(chan); 2665608bcc6dSMat Martineau 2666608bcc6dSMat Martineau break; 2667608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_CLEAR: 2668608bcc6dSMat Martineau BT_DBG("Exit LOCAL_BUSY"); 2669608bcc6dSMat Martineau clear_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2670608bcc6dSMat Martineau 2671608bcc6dSMat Martineau if (test_bit(CONN_RNR_SENT, &chan->conn_state)) { 2672608bcc6dSMat Martineau struct l2cap_ctrl local_control; 2673608bcc6dSMat Martineau 2674608bcc6dSMat Martineau memset(&local_control, 0, sizeof(local_control)); 2675608bcc6dSMat Martineau local_control.sframe = 1; 2676608bcc6dSMat Martineau local_control.super = L2CAP_SUPER_RR; 2677608bcc6dSMat Martineau local_control.poll = 1; 2678608bcc6dSMat Martineau local_control.reqseq = chan->buffer_seq; 2679a67d7f6fSMat Martineau l2cap_send_sframe(chan, &local_control); 2680608bcc6dSMat Martineau 2681608bcc6dSMat Martineau chan->retry_count = 1; 2682608bcc6dSMat Martineau __set_monitor_timer(chan); 2683608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2684608bcc6dSMat Martineau } 2685608bcc6dSMat Martineau break; 2686608bcc6dSMat Martineau case L2CAP_EV_RECV_REQSEQ_AND_FBIT: 2687608bcc6dSMat Martineau l2cap_process_reqseq(chan, control->reqseq); 2688608bcc6dSMat Martineau break; 2689608bcc6dSMat Martineau case L2CAP_EV_EXPLICIT_POLL: 2690608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2691608bcc6dSMat Martineau chan->retry_count = 1; 2692608bcc6dSMat Martineau __set_monitor_timer(chan); 2693608bcc6dSMat Martineau __clear_ack_timer(chan); 2694608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2695608bcc6dSMat Martineau break; 2696608bcc6dSMat Martineau case L2CAP_EV_RETRANS_TO: 2697608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2698608bcc6dSMat Martineau chan->retry_count = 1; 2699608bcc6dSMat Martineau __set_monitor_timer(chan); 2700608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2701608bcc6dSMat Martineau break; 2702608bcc6dSMat Martineau case L2CAP_EV_RECV_FBIT: 2703608bcc6dSMat Martineau /* Nothing to process */ 2704608bcc6dSMat Martineau break; 2705608bcc6dSMat Martineau default: 2706608bcc6dSMat Martineau break; 2707608bcc6dSMat Martineau } 2708608bcc6dSMat Martineau } 2709608bcc6dSMat Martineau 2710d660366dSGustavo Padovan static void l2cap_tx_state_wait_f(struct l2cap_chan *chan, 2711608bcc6dSMat Martineau struct l2cap_ctrl *control, 2712608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2713608bcc6dSMat Martineau { 2714608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d", chan, control, skbs, 2715608bcc6dSMat Martineau event); 2716608bcc6dSMat Martineau 2717608bcc6dSMat Martineau switch (event) { 2718608bcc6dSMat Martineau case L2CAP_EV_DATA_REQUEST: 2719608bcc6dSMat Martineau if (chan->tx_send_head == NULL) 2720608bcc6dSMat Martineau chan->tx_send_head = skb_peek(skbs); 2721608bcc6dSMat Martineau /* Queue data, but don't send. */ 2722608bcc6dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 2723608bcc6dSMat Martineau break; 2724608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_DETECTED: 2725608bcc6dSMat Martineau BT_DBG("Enter LOCAL_BUSY"); 2726608bcc6dSMat Martineau set_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2727608bcc6dSMat Martineau 2728608bcc6dSMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 2729608bcc6dSMat Martineau /* The SREJ_SENT state must be aborted if we are to 2730608bcc6dSMat Martineau * enter the LOCAL_BUSY state. 2731608bcc6dSMat Martineau */ 2732608bcc6dSMat Martineau l2cap_abort_rx_srej_sent(chan); 2733608bcc6dSMat Martineau } 2734608bcc6dSMat Martineau 2735608bcc6dSMat Martineau l2cap_send_ack(chan); 2736608bcc6dSMat Martineau 2737608bcc6dSMat Martineau break; 2738608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_CLEAR: 2739608bcc6dSMat Martineau BT_DBG("Exit LOCAL_BUSY"); 2740608bcc6dSMat Martineau clear_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2741608bcc6dSMat Martineau 2742608bcc6dSMat Martineau if (test_bit(CONN_RNR_SENT, &chan->conn_state)) { 2743608bcc6dSMat Martineau struct l2cap_ctrl local_control; 2744608bcc6dSMat Martineau memset(&local_control, 0, sizeof(local_control)); 2745608bcc6dSMat Martineau local_control.sframe = 1; 2746608bcc6dSMat Martineau local_control.super = L2CAP_SUPER_RR; 2747608bcc6dSMat Martineau local_control.poll = 1; 2748608bcc6dSMat Martineau local_control.reqseq = chan->buffer_seq; 2749a67d7f6fSMat Martineau l2cap_send_sframe(chan, &local_control); 2750608bcc6dSMat Martineau 2751608bcc6dSMat Martineau chan->retry_count = 1; 2752608bcc6dSMat Martineau __set_monitor_timer(chan); 2753608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2754608bcc6dSMat Martineau } 2755608bcc6dSMat Martineau break; 2756608bcc6dSMat Martineau case L2CAP_EV_RECV_REQSEQ_AND_FBIT: 2757608bcc6dSMat Martineau l2cap_process_reqseq(chan, control->reqseq); 2758608bcc6dSMat Martineau 2759608bcc6dSMat Martineau /* Fall through */ 2760608bcc6dSMat Martineau 2761608bcc6dSMat Martineau case L2CAP_EV_RECV_FBIT: 2762608bcc6dSMat Martineau if (control && control->final) { 2763608bcc6dSMat Martineau __clear_monitor_timer(chan); 2764608bcc6dSMat Martineau if (chan->unacked_frames > 0) 2765608bcc6dSMat Martineau __set_retrans_timer(chan); 2766608bcc6dSMat Martineau chan->retry_count = 0; 2767608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 2768608bcc6dSMat Martineau BT_DBG("recv fbit tx_state 0x2.2%x", chan->tx_state); 2769608bcc6dSMat Martineau } 2770608bcc6dSMat Martineau break; 2771608bcc6dSMat Martineau case L2CAP_EV_EXPLICIT_POLL: 2772608bcc6dSMat Martineau /* Ignore */ 2773608bcc6dSMat Martineau break; 2774608bcc6dSMat Martineau case L2CAP_EV_MONITOR_TO: 2775608bcc6dSMat Martineau if (chan->max_tx == 0 || chan->retry_count < chan->max_tx) { 2776608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2777608bcc6dSMat Martineau __set_monitor_timer(chan); 2778608bcc6dSMat Martineau chan->retry_count++; 2779608bcc6dSMat Martineau } else { 27805e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNABORTED); 2781608bcc6dSMat Martineau } 2782608bcc6dSMat Martineau break; 2783608bcc6dSMat Martineau default: 2784608bcc6dSMat Martineau break; 2785608bcc6dSMat Martineau } 2786608bcc6dSMat Martineau } 2787608bcc6dSMat Martineau 2788d660366dSGustavo Padovan static void l2cap_tx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 2789608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2790608bcc6dSMat Martineau { 2791608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d, state %d", 2792608bcc6dSMat Martineau chan, control, skbs, event, chan->tx_state); 2793608bcc6dSMat Martineau 2794608bcc6dSMat Martineau switch (chan->tx_state) { 2795608bcc6dSMat Martineau case L2CAP_TX_STATE_XMIT: 2796d660366dSGustavo Padovan l2cap_tx_state_xmit(chan, control, skbs, event); 2797608bcc6dSMat Martineau break; 2798608bcc6dSMat Martineau case L2CAP_TX_STATE_WAIT_F: 2799d660366dSGustavo Padovan l2cap_tx_state_wait_f(chan, control, skbs, event); 2800608bcc6dSMat Martineau break; 2801608bcc6dSMat Martineau default: 2802608bcc6dSMat Martineau /* Ignore event */ 2803608bcc6dSMat Martineau break; 2804608bcc6dSMat Martineau } 2805608bcc6dSMat Martineau } 2806608bcc6dSMat Martineau 28074b51dae9SMat Martineau static void l2cap_pass_to_tx(struct l2cap_chan *chan, 28084b51dae9SMat Martineau struct l2cap_ctrl *control) 28094b51dae9SMat Martineau { 28104b51dae9SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2811401bb1f7SAndrei Emeltchenko l2cap_tx(chan, control, NULL, L2CAP_EV_RECV_REQSEQ_AND_FBIT); 28124b51dae9SMat Martineau } 28134b51dae9SMat Martineau 2814f80842a8SMat Martineau static void l2cap_pass_to_tx_fbit(struct l2cap_chan *chan, 2815f80842a8SMat Martineau struct l2cap_ctrl *control) 2816f80842a8SMat Martineau { 2817f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2818401bb1f7SAndrei Emeltchenko l2cap_tx(chan, control, NULL, L2CAP_EV_RECV_FBIT); 2819f80842a8SMat Martineau } 2820f80842a8SMat Martineau 28210a708f8fSGustavo F. Padovan /* Copy frame to all raw sockets on that connection */ 28220a708f8fSGustavo F. Padovan static void l2cap_raw_recv(struct l2cap_conn *conn, struct sk_buff *skb) 28230a708f8fSGustavo F. Padovan { 28240a708f8fSGustavo F. Padovan struct sk_buff *nskb; 282548454079SGustavo F. Padovan struct l2cap_chan *chan; 28260a708f8fSGustavo F. Padovan 28270a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 28280a708f8fSGustavo F. Padovan 28293df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 28303d57dc68SGustavo F. Padovan 28313df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 283248454079SGustavo F. Padovan struct sock *sk = chan->sk; 2833715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_RAW) 28340a708f8fSGustavo F. Padovan continue; 28350a708f8fSGustavo F. Padovan 28360a708f8fSGustavo F. Padovan /* Don't send frame to the socket it came from */ 28370a708f8fSGustavo F. Padovan if (skb->sk == sk) 28380a708f8fSGustavo F. Padovan continue; 28398bcde1f2SGustavo Padovan nskb = skb_clone(skb, GFP_KERNEL); 28400a708f8fSGustavo F. Padovan if (!nskb) 28410a708f8fSGustavo F. Padovan continue; 28420a708f8fSGustavo F. Padovan 284380b98027SGustavo Padovan if (chan->ops->recv(chan, nskb)) 28440a708f8fSGustavo F. Padovan kfree_skb(nskb); 28450a708f8fSGustavo F. Padovan } 28463d57dc68SGustavo F. Padovan 28473df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 28480a708f8fSGustavo F. Padovan } 28490a708f8fSGustavo F. Padovan 28500a708f8fSGustavo F. Padovan /* ---- L2CAP signalling commands ---- */ 2851b4400672SAndrei Emeltchenko static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn, u8 code, 2852b4400672SAndrei Emeltchenko u8 ident, u16 dlen, void *data) 28530a708f8fSGustavo F. Padovan { 28540a708f8fSGustavo F. Padovan struct sk_buff *skb, **frag; 28550a708f8fSGustavo F. Padovan struct l2cap_cmd_hdr *cmd; 28560a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 28570a708f8fSGustavo F. Padovan int len, count; 28580a708f8fSGustavo F. Padovan 2859b4400672SAndrei Emeltchenko BT_DBG("conn %p, code 0x%2.2x, ident 0x%2.2x, len %u", 28600a708f8fSGustavo F. Padovan conn, code, ident, dlen); 28610a708f8fSGustavo F. Padovan 2862300b962eSAnderson Lizardo if (conn->mtu < L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE) 2863300b962eSAnderson Lizardo return NULL; 2864300b962eSAnderson Lizardo 28650a708f8fSGustavo F. Padovan len = L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE + dlen; 28660a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 28670a708f8fSGustavo F. Padovan 28688bcde1f2SGustavo Padovan skb = bt_skb_alloc(count, GFP_KERNEL); 28690a708f8fSGustavo F. Padovan if (!skb) 28700a708f8fSGustavo F. Padovan return NULL; 28710a708f8fSGustavo F. Padovan 28720a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 28730a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(L2CAP_CMD_HDR_SIZE + dlen); 28743300d9a9SClaudio Takahasi 28753300d9a9SClaudio Takahasi if (conn->hcon->type == LE_LINK) 2876ac73498cSAndrei Emeltchenko lh->cid = __constant_cpu_to_le16(L2CAP_CID_LE_SIGNALING); 28773300d9a9SClaudio Takahasi else 2878ac73498cSAndrei Emeltchenko lh->cid = __constant_cpu_to_le16(L2CAP_CID_SIGNALING); 28790a708f8fSGustavo F. Padovan 28800a708f8fSGustavo F. Padovan cmd = (struct l2cap_cmd_hdr *) skb_put(skb, L2CAP_CMD_HDR_SIZE); 28810a708f8fSGustavo F. Padovan cmd->code = code; 28820a708f8fSGustavo F. Padovan cmd->ident = ident; 28830a708f8fSGustavo F. Padovan cmd->len = cpu_to_le16(dlen); 28840a708f8fSGustavo F. Padovan 28850a708f8fSGustavo F. Padovan if (dlen) { 28860a708f8fSGustavo F. Padovan count -= L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE; 28870a708f8fSGustavo F. Padovan memcpy(skb_put(skb, count), data, count); 28880a708f8fSGustavo F. Padovan data += count; 28890a708f8fSGustavo F. Padovan } 28900a708f8fSGustavo F. Padovan 28910a708f8fSGustavo F. Padovan len -= skb->len; 28920a708f8fSGustavo F. Padovan 28930a708f8fSGustavo F. Padovan /* Continuation fragments (no L2CAP header) */ 28940a708f8fSGustavo F. Padovan frag = &skb_shinfo(skb)->frag_list; 28950a708f8fSGustavo F. Padovan while (len) { 28960a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 28970a708f8fSGustavo F. Padovan 28988bcde1f2SGustavo Padovan *frag = bt_skb_alloc(count, GFP_KERNEL); 28990a708f8fSGustavo F. Padovan if (!*frag) 29000a708f8fSGustavo F. Padovan goto fail; 29010a708f8fSGustavo F. Padovan 29020a708f8fSGustavo F. Padovan memcpy(skb_put(*frag, count), data, count); 29030a708f8fSGustavo F. Padovan 29040a708f8fSGustavo F. Padovan len -= count; 29050a708f8fSGustavo F. Padovan data += count; 29060a708f8fSGustavo F. Padovan 29070a708f8fSGustavo F. Padovan frag = &(*frag)->next; 29080a708f8fSGustavo F. Padovan } 29090a708f8fSGustavo F. Padovan 29100a708f8fSGustavo F. Padovan return skb; 29110a708f8fSGustavo F. Padovan 29120a708f8fSGustavo F. Padovan fail: 29130a708f8fSGustavo F. Padovan kfree_skb(skb); 29140a708f8fSGustavo F. Padovan return NULL; 29150a708f8fSGustavo F. Padovan } 29160a708f8fSGustavo F. Padovan 29172d792818SGustavo Padovan static inline int l2cap_get_conf_opt(void **ptr, int *type, int *olen, 29182d792818SGustavo Padovan unsigned long *val) 29190a708f8fSGustavo F. Padovan { 29200a708f8fSGustavo F. Padovan struct l2cap_conf_opt *opt = *ptr; 29210a708f8fSGustavo F. Padovan int len; 29220a708f8fSGustavo F. Padovan 29230a708f8fSGustavo F. Padovan len = L2CAP_CONF_OPT_SIZE + opt->len; 29240a708f8fSGustavo F. Padovan *ptr += len; 29250a708f8fSGustavo F. Padovan 29260a708f8fSGustavo F. Padovan *type = opt->type; 29270a708f8fSGustavo F. Padovan *olen = opt->len; 29280a708f8fSGustavo F. Padovan 29290a708f8fSGustavo F. Padovan switch (opt->len) { 29300a708f8fSGustavo F. Padovan case 1: 29310a708f8fSGustavo F. Padovan *val = *((u8 *) opt->val); 29320a708f8fSGustavo F. Padovan break; 29330a708f8fSGustavo F. Padovan 29340a708f8fSGustavo F. Padovan case 2: 29350a708f8fSGustavo F. Padovan *val = get_unaligned_le16(opt->val); 29360a708f8fSGustavo F. Padovan break; 29370a708f8fSGustavo F. Padovan 29380a708f8fSGustavo F. Padovan case 4: 29390a708f8fSGustavo F. Padovan *val = get_unaligned_le32(opt->val); 29400a708f8fSGustavo F. Padovan break; 29410a708f8fSGustavo F. Padovan 29420a708f8fSGustavo F. Padovan default: 29430a708f8fSGustavo F. Padovan *val = (unsigned long) opt->val; 29440a708f8fSGustavo F. Padovan break; 29450a708f8fSGustavo F. Padovan } 29460a708f8fSGustavo F. Padovan 2947b4400672SAndrei Emeltchenko BT_DBG("type 0x%2.2x len %u val 0x%lx", *type, opt->len, *val); 29480a708f8fSGustavo F. Padovan return len; 29490a708f8fSGustavo F. Padovan } 29500a708f8fSGustavo F. Padovan 29510a708f8fSGustavo F. Padovan static void l2cap_add_conf_opt(void **ptr, u8 type, u8 len, unsigned long val) 29520a708f8fSGustavo F. Padovan { 29530a708f8fSGustavo F. Padovan struct l2cap_conf_opt *opt = *ptr; 29540a708f8fSGustavo F. Padovan 2955b4400672SAndrei Emeltchenko BT_DBG("type 0x%2.2x len %u val 0x%lx", type, len, val); 29560a708f8fSGustavo F. Padovan 29570a708f8fSGustavo F. Padovan opt->type = type; 29580a708f8fSGustavo F. Padovan opt->len = len; 29590a708f8fSGustavo F. Padovan 29600a708f8fSGustavo F. Padovan switch (len) { 29610a708f8fSGustavo F. Padovan case 1: 29620a708f8fSGustavo F. Padovan *((u8 *) opt->val) = val; 29630a708f8fSGustavo F. Padovan break; 29640a708f8fSGustavo F. Padovan 29650a708f8fSGustavo F. Padovan case 2: 29660a708f8fSGustavo F. Padovan put_unaligned_le16(val, opt->val); 29670a708f8fSGustavo F. Padovan break; 29680a708f8fSGustavo F. Padovan 29690a708f8fSGustavo F. Padovan case 4: 29700a708f8fSGustavo F. Padovan put_unaligned_le32(val, opt->val); 29710a708f8fSGustavo F. Padovan break; 29720a708f8fSGustavo F. Padovan 29730a708f8fSGustavo F. Padovan default: 29740a708f8fSGustavo F. Padovan memcpy(opt->val, (void *) val, len); 29750a708f8fSGustavo F. Padovan break; 29760a708f8fSGustavo F. Padovan } 29770a708f8fSGustavo F. Padovan 29780a708f8fSGustavo F. Padovan *ptr += L2CAP_CONF_OPT_SIZE + len; 29790a708f8fSGustavo F. Padovan } 29800a708f8fSGustavo F. Padovan 2981f89cef09SAndrei Emeltchenko static void l2cap_add_opt_efs(void **ptr, struct l2cap_chan *chan) 2982f89cef09SAndrei Emeltchenko { 2983f89cef09SAndrei Emeltchenko struct l2cap_conf_efs efs; 2984f89cef09SAndrei Emeltchenko 2985f89cef09SAndrei Emeltchenko switch (chan->mode) { 2986f89cef09SAndrei Emeltchenko case L2CAP_MODE_ERTM: 2987f89cef09SAndrei Emeltchenko efs.id = chan->local_id; 2988f89cef09SAndrei Emeltchenko efs.stype = chan->local_stype; 2989f89cef09SAndrei Emeltchenko efs.msdu = cpu_to_le16(chan->local_msdu); 2990f89cef09SAndrei Emeltchenko efs.sdu_itime = cpu_to_le32(chan->local_sdu_itime); 2991ac73498cSAndrei Emeltchenko efs.acc_lat = __constant_cpu_to_le32(L2CAP_DEFAULT_ACC_LAT); 29928936fa6dSAndrei Emeltchenko efs.flush_to = __constant_cpu_to_le32(L2CAP_EFS_DEFAULT_FLUSH_TO); 2993f89cef09SAndrei Emeltchenko break; 2994f89cef09SAndrei Emeltchenko 2995f89cef09SAndrei Emeltchenko case L2CAP_MODE_STREAMING: 2996f89cef09SAndrei Emeltchenko efs.id = 1; 2997f89cef09SAndrei Emeltchenko efs.stype = L2CAP_SERV_BESTEFFORT; 2998f89cef09SAndrei Emeltchenko efs.msdu = cpu_to_le16(chan->local_msdu); 2999f89cef09SAndrei Emeltchenko efs.sdu_itime = cpu_to_le32(chan->local_sdu_itime); 3000f89cef09SAndrei Emeltchenko efs.acc_lat = 0; 3001f89cef09SAndrei Emeltchenko efs.flush_to = 0; 3002f89cef09SAndrei Emeltchenko break; 3003f89cef09SAndrei Emeltchenko 3004f89cef09SAndrei Emeltchenko default: 3005f89cef09SAndrei Emeltchenko return; 3006f89cef09SAndrei Emeltchenko } 3007f89cef09SAndrei Emeltchenko 3008f89cef09SAndrei Emeltchenko l2cap_add_conf_opt(ptr, L2CAP_CONF_EFS, sizeof(efs), 3009f89cef09SAndrei Emeltchenko (unsigned long) &efs); 3010f89cef09SAndrei Emeltchenko } 3011f89cef09SAndrei Emeltchenko 3012721c4181SGustavo F. Padovan static void l2cap_ack_timeout(struct work_struct *work) 30130a708f8fSGustavo F. Padovan { 3014721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 3015721c4181SGustavo F. Padovan ack_timer.work); 30160362520bSMat Martineau u16 frames_to_ack; 30170a708f8fSGustavo F. Padovan 30182fb9b3d4SGustavo F. Padovan BT_DBG("chan %p", chan); 30192fb9b3d4SGustavo F. Padovan 30206be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 30216be36555SAndrei Emeltchenko 30220362520bSMat Martineau frames_to_ack = __seq_offset(chan, chan->buffer_seq, 30230362520bSMat Martineau chan->last_acked_seq); 30240362520bSMat Martineau 30250362520bSMat Martineau if (frames_to_ack) 30260362520bSMat Martineau l2cap_send_rr_or_rnr(chan, 0); 30276be36555SAndrei Emeltchenko 30286be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 302909bfb2eeSSzymon Janc l2cap_chan_put(chan); 30300a708f8fSGustavo F. Padovan } 30310a708f8fSGustavo F. Padovan 3032466f8004SAndrei Emeltchenko int l2cap_ertm_init(struct l2cap_chan *chan) 30330a708f8fSGustavo F. Padovan { 30343c588192SMat Martineau int err; 30353c588192SMat Martineau 3036105bdf9eSMat Martineau chan->next_tx_seq = 0; 3037105bdf9eSMat Martineau chan->expected_tx_seq = 0; 303842e5c802SGustavo F. Padovan chan->expected_ack_seq = 0; 30396a026610SGustavo F. Padovan chan->unacked_frames = 0; 304042e5c802SGustavo F. Padovan chan->buffer_seq = 0; 30416a026610SGustavo F. Padovan chan->frames_sent = 0; 3042105bdf9eSMat Martineau chan->last_acked_seq = 0; 3043105bdf9eSMat Martineau chan->sdu = NULL; 3044105bdf9eSMat Martineau chan->sdu_last_frag = NULL; 3045105bdf9eSMat Martineau chan->sdu_len = 0; 3046105bdf9eSMat Martineau 3047d34c34fbSMat Martineau skb_queue_head_init(&chan->tx_q); 3048d34c34fbSMat Martineau 30496ed971caSMarcel Holtmann chan->local_amp_id = AMP_ID_BREDR; 30506ed971caSMarcel Holtmann chan->move_id = AMP_ID_BREDR; 305108333283SMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 305208333283SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 305308333283SMat Martineau 3054105bdf9eSMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 3055105bdf9eSMat Martineau return 0; 3056105bdf9eSMat Martineau 3057105bdf9eSMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 3058105bdf9eSMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 30590a708f8fSGustavo F. Padovan 3060721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->retrans_timer, l2cap_retrans_timeout); 3061721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->monitor_timer, l2cap_monitor_timeout); 3062721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->ack_timer, l2cap_ack_timeout); 30630a708f8fSGustavo F. Padovan 3064f1c6775bSGustavo F. Padovan skb_queue_head_init(&chan->srej_q); 30650a708f8fSGustavo F. Padovan 30663c588192SMat Martineau err = l2cap_seq_list_init(&chan->srej_list, chan->tx_win); 30673c588192SMat Martineau if (err < 0) 30683c588192SMat Martineau return err; 30693c588192SMat Martineau 30709dc9affcSMat Martineau err = l2cap_seq_list_init(&chan->retrans_list, chan->remote_tx_win); 30719dc9affcSMat Martineau if (err < 0) 30729dc9affcSMat Martineau l2cap_seq_list_free(&chan->srej_list); 30739dc9affcSMat Martineau 30749dc9affcSMat Martineau return err; 30750a708f8fSGustavo F. Padovan } 30760a708f8fSGustavo F. Padovan 30770a708f8fSGustavo F. Padovan static inline __u8 l2cap_select_mode(__u8 mode, __u16 remote_feat_mask) 30780a708f8fSGustavo F. Padovan { 30790a708f8fSGustavo F. Padovan switch (mode) { 30800a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 30810a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 30820a708f8fSGustavo F. Padovan if (l2cap_mode_supported(mode, remote_feat_mask)) 30830a708f8fSGustavo F. Padovan return mode; 30840a708f8fSGustavo F. Padovan /* fall through */ 30850a708f8fSGustavo F. Padovan default: 30860a708f8fSGustavo F. Padovan return L2CAP_MODE_BASIC; 30870a708f8fSGustavo F. Padovan } 30880a708f8fSGustavo F. Padovan } 30890a708f8fSGustavo F. Padovan 3090848566b3SMarcel Holtmann static inline bool __l2cap_ews_supported(struct l2cap_conn *conn) 30916327eb98SAndrei Emeltchenko { 3092848566b3SMarcel Holtmann return conn->hs_enabled && conn->feat_mask & L2CAP_FEAT_EXT_WINDOW; 30936327eb98SAndrei Emeltchenko } 30946327eb98SAndrei Emeltchenko 3095848566b3SMarcel Holtmann static inline bool __l2cap_efs_supported(struct l2cap_conn *conn) 3096f89cef09SAndrei Emeltchenko { 3097848566b3SMarcel Holtmann return conn->hs_enabled && conn->feat_mask & L2CAP_FEAT_EXT_FLOW; 3098f89cef09SAndrei Emeltchenko } 3099f89cef09SAndrei Emeltchenko 310036c86c85SMat Martineau static void __l2cap_set_ertm_timeouts(struct l2cap_chan *chan, 310136c86c85SMat Martineau struct l2cap_conf_rfc *rfc) 310236c86c85SMat Martineau { 31036ed971caSMarcel Holtmann if (chan->local_amp_id != AMP_ID_BREDR && chan->hs_hcon) { 310436c86c85SMat Martineau u64 ertm_to = chan->hs_hcon->hdev->amp_be_flush_to; 310536c86c85SMat Martineau 310636c86c85SMat Martineau /* Class 1 devices have must have ERTM timeouts 310736c86c85SMat Martineau * exceeding the Link Supervision Timeout. The 310836c86c85SMat Martineau * default Link Supervision Timeout for AMP 310936c86c85SMat Martineau * controllers is 10 seconds. 311036c86c85SMat Martineau * 311136c86c85SMat Martineau * Class 1 devices use 0xffffffff for their 311236c86c85SMat Martineau * best-effort flush timeout, so the clamping logic 311336c86c85SMat Martineau * will result in a timeout that meets the above 311436c86c85SMat Martineau * requirement. ERTM timeouts are 16-bit values, so 311536c86c85SMat Martineau * the maximum timeout is 65.535 seconds. 311636c86c85SMat Martineau */ 311736c86c85SMat Martineau 311836c86c85SMat Martineau /* Convert timeout to milliseconds and round */ 311936c86c85SMat Martineau ertm_to = DIV_ROUND_UP_ULL(ertm_to, 1000); 312036c86c85SMat Martineau 312136c86c85SMat Martineau /* This is the recommended formula for class 2 devices 312236c86c85SMat Martineau * that start ERTM timers when packets are sent to the 312336c86c85SMat Martineau * controller. 312436c86c85SMat Martineau */ 312536c86c85SMat Martineau ertm_to = 3 * ertm_to + 500; 312636c86c85SMat Martineau 312736c86c85SMat Martineau if (ertm_to > 0xffff) 312836c86c85SMat Martineau ertm_to = 0xffff; 312936c86c85SMat Martineau 313036c86c85SMat Martineau rfc->retrans_timeout = cpu_to_le16((u16) ertm_to); 313136c86c85SMat Martineau rfc->monitor_timeout = rfc->retrans_timeout; 313236c86c85SMat Martineau } else { 313336c86c85SMat Martineau rfc->retrans_timeout = __constant_cpu_to_le16(L2CAP_DEFAULT_RETRANS_TO); 313436c86c85SMat Martineau rfc->monitor_timeout = __constant_cpu_to_le16(L2CAP_DEFAULT_MONITOR_TO); 313536c86c85SMat Martineau } 313636c86c85SMat Martineau } 313736c86c85SMat Martineau 31386327eb98SAndrei Emeltchenko static inline void l2cap_txwin_setup(struct l2cap_chan *chan) 31396327eb98SAndrei Emeltchenko { 31406327eb98SAndrei Emeltchenko if (chan->tx_win > L2CAP_DEFAULT_TX_WINDOW && 3141848566b3SMarcel Holtmann __l2cap_ews_supported(chan->conn)) { 31426327eb98SAndrei Emeltchenko /* use extended control field */ 31436327eb98SAndrei Emeltchenko set_bit(FLAG_EXT_CTRL, &chan->flags); 3144836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_EXT_WINDOW; 3145836be934SAndrei Emeltchenko } else { 31466327eb98SAndrei Emeltchenko chan->tx_win = min_t(u16, chan->tx_win, 31476327eb98SAndrei Emeltchenko L2CAP_DEFAULT_TX_WINDOW); 3148836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_TX_WINDOW; 3149836be934SAndrei Emeltchenko } 3150c20f8e35SMat Martineau chan->ack_win = chan->tx_win; 31516327eb98SAndrei Emeltchenko } 31526327eb98SAndrei Emeltchenko 3153710f9b0aSGustavo F. Padovan static int l2cap_build_conf_req(struct l2cap_chan *chan, void *data) 31540a708f8fSGustavo F. Padovan { 31550a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = data; 31560c1bc5c6SGustavo F. Padovan struct l2cap_conf_rfc rfc = { .mode = chan->mode }; 31570a708f8fSGustavo F. Padovan void *ptr = req->data; 3158c8f79162SAndrei Emeltchenko u16 size; 31590a708f8fSGustavo F. Padovan 316049208c9cSGustavo F. Padovan BT_DBG("chan %p", chan); 31610a708f8fSGustavo F. Padovan 316273ffa904SGustavo F. Padovan if (chan->num_conf_req || chan->num_conf_rsp) 31630a708f8fSGustavo F. Padovan goto done; 31640a708f8fSGustavo F. Padovan 31650c1bc5c6SGustavo F. Padovan switch (chan->mode) { 31660a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 31670a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 3168c1360a1cSGustavo F. Padovan if (test_bit(CONF_STATE2_DEVICE, &chan->conf_state)) 31690a708f8fSGustavo F. Padovan break; 31700a708f8fSGustavo F. Padovan 3171848566b3SMarcel Holtmann if (__l2cap_efs_supported(chan->conn)) 3172f89cef09SAndrei Emeltchenko set_bit(FLAG_EFS_ENABLE, &chan->flags); 3173f89cef09SAndrei Emeltchenko 31740a708f8fSGustavo F. Padovan /* fall through */ 31750a708f8fSGustavo F. Padovan default: 31768c1d787bSGustavo F. Padovan chan->mode = l2cap_select_mode(rfc.mode, chan->conn->feat_mask); 31770a708f8fSGustavo F. Padovan break; 31780a708f8fSGustavo F. Padovan } 31790a708f8fSGustavo F. Padovan 31800a708f8fSGustavo F. Padovan done: 31810c1bc5c6SGustavo F. Padovan if (chan->imtu != L2CAP_DEFAULT_MTU) 31820c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->imtu); 31830a708f8fSGustavo F. Padovan 31840c1bc5c6SGustavo F. Padovan switch (chan->mode) { 31850a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 31868c1d787bSGustavo F. Padovan if (!(chan->conn->feat_mask & L2CAP_FEAT_ERTM) && 31878c1d787bSGustavo F. Padovan !(chan->conn->feat_mask & L2CAP_FEAT_STREAMING)) 31880a708f8fSGustavo F. Padovan break; 31890a708f8fSGustavo F. Padovan 31900a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_BASIC; 31910a708f8fSGustavo F. Padovan rfc.txwin_size = 0; 31920a708f8fSGustavo F. Padovan rfc.max_transmit = 0; 31930a708f8fSGustavo F. Padovan rfc.retrans_timeout = 0; 31940a708f8fSGustavo F. Padovan rfc.monitor_timeout = 0; 31950a708f8fSGustavo F. Padovan rfc.max_pdu_size = 0; 31960a708f8fSGustavo F. Padovan 31970a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 31980a708f8fSGustavo F. Padovan (unsigned long) &rfc); 31990a708f8fSGustavo F. Padovan break; 32000a708f8fSGustavo F. Padovan 32010a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 32020a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_ERTM; 320347d1ec61SGustavo F. Padovan rfc.max_transmit = chan->max_tx; 320436c86c85SMat Martineau 320536c86c85SMat Martineau __l2cap_set_ertm_timeouts(chan, &rfc); 3206c8f79162SAndrei Emeltchenko 3207c8f79162SAndrei Emeltchenko size = min_t(u16, L2CAP_DEFAULT_MAX_PDU_SIZE, chan->conn->mtu - 32082d792818SGustavo Padovan L2CAP_EXT_HDR_SIZE - L2CAP_SDULEN_SIZE - 3209c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 3210c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 32110a708f8fSGustavo F. Padovan 32126327eb98SAndrei Emeltchenko l2cap_txwin_setup(chan); 32136327eb98SAndrei Emeltchenko 32146327eb98SAndrei Emeltchenko rfc.txwin_size = min_t(u16, chan->tx_win, 32156327eb98SAndrei Emeltchenko L2CAP_DEFAULT_TX_WINDOW); 32160a708f8fSGustavo F. Padovan 32170a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 32180a708f8fSGustavo F. Padovan (unsigned long) &rfc); 32190a708f8fSGustavo F. Padovan 3220f89cef09SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) 3221f89cef09SAndrei Emeltchenko l2cap_add_opt_efs(&ptr, chan); 3222f89cef09SAndrei Emeltchenko 32236327eb98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 32246327eb98SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EWS, 2, 32256327eb98SAndrei Emeltchenko chan->tx_win); 322660918918SAndrei Emeltchenko 322760918918SAndrei Emeltchenko if (chan->conn->feat_mask & L2CAP_FEAT_FCS) 322860918918SAndrei Emeltchenko if (chan->fcs == L2CAP_FCS_NONE || 3229f2592d3eSAndrei Emeltchenko test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) { 323060918918SAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 323160918918SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_FCS, 1, 323260918918SAndrei Emeltchenko chan->fcs); 323360918918SAndrei Emeltchenko } 32340a708f8fSGustavo F. Padovan break; 32350a708f8fSGustavo F. Padovan 32360a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 3237273759e2SMat Martineau l2cap_txwin_setup(chan); 32380a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_STREAMING; 32390a708f8fSGustavo F. Padovan rfc.txwin_size = 0; 32400a708f8fSGustavo F. Padovan rfc.max_transmit = 0; 32410a708f8fSGustavo F. Padovan rfc.retrans_timeout = 0; 32420a708f8fSGustavo F. Padovan rfc.monitor_timeout = 0; 3243c8f79162SAndrei Emeltchenko 3244c8f79162SAndrei Emeltchenko size = min_t(u16, L2CAP_DEFAULT_MAX_PDU_SIZE, chan->conn->mtu - 32452d792818SGustavo Padovan L2CAP_EXT_HDR_SIZE - L2CAP_SDULEN_SIZE - 3246c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 3247c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 32480a708f8fSGustavo F. Padovan 32490a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 32500a708f8fSGustavo F. Padovan (unsigned long) &rfc); 32510a708f8fSGustavo F. Padovan 3252f89cef09SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) 3253f89cef09SAndrei Emeltchenko l2cap_add_opt_efs(&ptr, chan); 3254f89cef09SAndrei Emeltchenko 325560918918SAndrei Emeltchenko if (chan->conn->feat_mask & L2CAP_FEAT_FCS) 325647d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_NONE || 3257f2592d3eSAndrei Emeltchenko test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) { 325847d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 325960918918SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_FCS, 1, 326060918918SAndrei Emeltchenko chan->fcs); 32610a708f8fSGustavo F. Padovan } 32620a708f8fSGustavo F. Padovan break; 32630a708f8fSGustavo F. Padovan } 32640a708f8fSGustavo F. Padovan 3265fe4128e0SGustavo F. Padovan req->dcid = cpu_to_le16(chan->dcid); 326659e54bd1SAndrei Emeltchenko req->flags = __constant_cpu_to_le16(0); 32670a708f8fSGustavo F. Padovan 32680a708f8fSGustavo F. Padovan return ptr - data; 32690a708f8fSGustavo F. Padovan } 32700a708f8fSGustavo F. Padovan 327173ffa904SGustavo F. Padovan static int l2cap_parse_conf_req(struct l2cap_chan *chan, void *data) 32720a708f8fSGustavo F. Padovan { 32730a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = data; 32740a708f8fSGustavo F. Padovan void *ptr = rsp->data; 327573ffa904SGustavo F. Padovan void *req = chan->conf_req; 327673ffa904SGustavo F. Padovan int len = chan->conf_len; 32770a708f8fSGustavo F. Padovan int type, hint, olen; 32780a708f8fSGustavo F. Padovan unsigned long val; 32790a708f8fSGustavo F. Padovan struct l2cap_conf_rfc rfc = { .mode = L2CAP_MODE_BASIC }; 328042dceae2SAndrei Emeltchenko struct l2cap_conf_efs efs; 328142dceae2SAndrei Emeltchenko u8 remote_efs = 0; 32820a708f8fSGustavo F. Padovan u16 mtu = L2CAP_DEFAULT_MTU; 32830a708f8fSGustavo F. Padovan u16 result = L2CAP_CONF_SUCCESS; 3284c8f79162SAndrei Emeltchenko u16 size; 32850a708f8fSGustavo F. Padovan 328673ffa904SGustavo F. Padovan BT_DBG("chan %p", chan); 32870a708f8fSGustavo F. Padovan 32880a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 32890a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&req, &type, &olen, &val); 32900a708f8fSGustavo F. Padovan 32910a708f8fSGustavo F. Padovan hint = type & L2CAP_CONF_HINT; 32920a708f8fSGustavo F. Padovan type &= L2CAP_CONF_MASK; 32930a708f8fSGustavo F. Padovan 32940a708f8fSGustavo F. Padovan switch (type) { 32950a708f8fSGustavo F. Padovan case L2CAP_CONF_MTU: 32960a708f8fSGustavo F. Padovan mtu = val; 32970a708f8fSGustavo F. Padovan break; 32980a708f8fSGustavo F. Padovan 32990a708f8fSGustavo F. Padovan case L2CAP_CONF_FLUSH_TO: 33000c1bc5c6SGustavo F. Padovan chan->flush_to = val; 33010a708f8fSGustavo F. Padovan break; 33020a708f8fSGustavo F. Padovan 33030a708f8fSGustavo F. Padovan case L2CAP_CONF_QOS: 33040a708f8fSGustavo F. Padovan break; 33050a708f8fSGustavo F. Padovan 33060a708f8fSGustavo F. Padovan case L2CAP_CONF_RFC: 33070a708f8fSGustavo F. Padovan if (olen == sizeof(rfc)) 33080a708f8fSGustavo F. Padovan memcpy(&rfc, (void *) val, olen); 33090a708f8fSGustavo F. Padovan break; 33100a708f8fSGustavo F. Padovan 33110a708f8fSGustavo F. Padovan case L2CAP_CONF_FCS: 33120a708f8fSGustavo F. Padovan if (val == L2CAP_FCS_NONE) 3313f2592d3eSAndrei Emeltchenko set_bit(CONF_RECV_NO_FCS, &chan->conf_state); 331442dceae2SAndrei Emeltchenko break; 33150a708f8fSGustavo F. Padovan 331642dceae2SAndrei Emeltchenko case L2CAP_CONF_EFS: 331742dceae2SAndrei Emeltchenko remote_efs = 1; 331842dceae2SAndrei Emeltchenko if (olen == sizeof(efs)) 331942dceae2SAndrei Emeltchenko memcpy(&efs, (void *) val, olen); 33200a708f8fSGustavo F. Padovan break; 33210a708f8fSGustavo F. Padovan 33226327eb98SAndrei Emeltchenko case L2CAP_CONF_EWS: 3323848566b3SMarcel Holtmann if (!chan->conn->hs_enabled) 33246327eb98SAndrei Emeltchenko return -ECONNREFUSED; 33256327eb98SAndrei Emeltchenko 33266327eb98SAndrei Emeltchenko set_bit(FLAG_EXT_CTRL, &chan->flags); 33276327eb98SAndrei Emeltchenko set_bit(CONF_EWS_RECV, &chan->conf_state); 3328836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_EXT_WINDOW; 33296327eb98SAndrei Emeltchenko chan->remote_tx_win = val; 33300a708f8fSGustavo F. Padovan break; 33310a708f8fSGustavo F. Padovan 33320a708f8fSGustavo F. Padovan default: 33330a708f8fSGustavo F. Padovan if (hint) 33340a708f8fSGustavo F. Padovan break; 33350a708f8fSGustavo F. Padovan 33360a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNKNOWN; 33370a708f8fSGustavo F. Padovan *((u8 *) ptr++) = type; 33380a708f8fSGustavo F. Padovan break; 33390a708f8fSGustavo F. Padovan } 33400a708f8fSGustavo F. Padovan } 33410a708f8fSGustavo F. Padovan 334273ffa904SGustavo F. Padovan if (chan->num_conf_rsp || chan->num_conf_req > 1) 33430a708f8fSGustavo F. Padovan goto done; 33440a708f8fSGustavo F. Padovan 33450c1bc5c6SGustavo F. Padovan switch (chan->mode) { 33460a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 33470a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 3348c1360a1cSGustavo F. Padovan if (!test_bit(CONF_STATE2_DEVICE, &chan->conf_state)) { 33490c1bc5c6SGustavo F. Padovan chan->mode = l2cap_select_mode(rfc.mode, 33508c1d787bSGustavo F. Padovan chan->conn->feat_mask); 33510a708f8fSGustavo F. Padovan break; 33520a708f8fSGustavo F. Padovan } 33530a708f8fSGustavo F. Padovan 335442dceae2SAndrei Emeltchenko if (remote_efs) { 3355848566b3SMarcel Holtmann if (__l2cap_efs_supported(chan->conn)) 335642dceae2SAndrei Emeltchenko set_bit(FLAG_EFS_ENABLE, &chan->flags); 335742dceae2SAndrei Emeltchenko else 335842dceae2SAndrei Emeltchenko return -ECONNREFUSED; 335942dceae2SAndrei Emeltchenko } 336042dceae2SAndrei Emeltchenko 33610c1bc5c6SGustavo F. Padovan if (chan->mode != rfc.mode) 33620a708f8fSGustavo F. Padovan return -ECONNREFUSED; 33630a708f8fSGustavo F. Padovan 33640a708f8fSGustavo F. Padovan break; 33650a708f8fSGustavo F. Padovan } 33660a708f8fSGustavo F. Padovan 33670a708f8fSGustavo F. Padovan done: 33680c1bc5c6SGustavo F. Padovan if (chan->mode != rfc.mode) { 33690a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 33700c1bc5c6SGustavo F. Padovan rfc.mode = chan->mode; 33710a708f8fSGustavo F. Padovan 337273ffa904SGustavo F. Padovan if (chan->num_conf_rsp == 1) 33730a708f8fSGustavo F. Padovan return -ECONNREFUSED; 33740a708f8fSGustavo F. Padovan 33752d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 33762d792818SGustavo Padovan (unsigned long) &rfc); 33770a708f8fSGustavo F. Padovan } 33780a708f8fSGustavo F. Padovan 33790a708f8fSGustavo F. Padovan if (result == L2CAP_CONF_SUCCESS) { 33800a708f8fSGustavo F. Padovan /* Configure output options and let the other side know 33810a708f8fSGustavo F. Padovan * which ones we don't like. */ 33820a708f8fSGustavo F. Padovan 33830a708f8fSGustavo F. Padovan if (mtu < L2CAP_DEFAULT_MIN_MTU) 33840a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 33850a708f8fSGustavo F. Padovan else { 33860c1bc5c6SGustavo F. Padovan chan->omtu = mtu; 3387c1360a1cSGustavo F. Padovan set_bit(CONF_MTU_DONE, &chan->conf_state); 33880a708f8fSGustavo F. Padovan } 33890c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->omtu); 33900a708f8fSGustavo F. Padovan 339142dceae2SAndrei Emeltchenko if (remote_efs) { 339242dceae2SAndrei Emeltchenko if (chan->local_stype != L2CAP_SERV_NOTRAFIC && 339342dceae2SAndrei Emeltchenko efs.stype != L2CAP_SERV_NOTRAFIC && 339442dceae2SAndrei Emeltchenko efs.stype != chan->local_stype) { 339542dceae2SAndrei Emeltchenko 339642dceae2SAndrei Emeltchenko result = L2CAP_CONF_UNACCEPT; 339742dceae2SAndrei Emeltchenko 339842dceae2SAndrei Emeltchenko if (chan->num_conf_req >= 1) 339942dceae2SAndrei Emeltchenko return -ECONNREFUSED; 340042dceae2SAndrei Emeltchenko 340142dceae2SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, 340242dceae2SAndrei Emeltchenko sizeof(efs), 340342dceae2SAndrei Emeltchenko (unsigned long) &efs); 34040e8b207eSAndrei Emeltchenko } else { 34053e6b3b95SGustavo F. Padovan /* Send PENDING Conf Rsp */ 34060e8b207eSAndrei Emeltchenko result = L2CAP_CONF_PENDING; 34070e8b207eSAndrei Emeltchenko set_bit(CONF_LOC_CONF_PEND, &chan->conf_state); 340842dceae2SAndrei Emeltchenko } 340942dceae2SAndrei Emeltchenko } 341042dceae2SAndrei Emeltchenko 34110a708f8fSGustavo F. Padovan switch (rfc.mode) { 34120a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 341347d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 3414c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 34150a708f8fSGustavo F. Padovan break; 34160a708f8fSGustavo F. Padovan 34170a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 34186327eb98SAndrei Emeltchenko if (!test_bit(CONF_EWS_RECV, &chan->conf_state)) 34192c03a7a4SGustavo F. Padovan chan->remote_tx_win = rfc.txwin_size; 34206327eb98SAndrei Emeltchenko else 34216327eb98SAndrei Emeltchenko rfc.txwin_size = L2CAP_DEFAULT_TX_WINDOW; 34226327eb98SAndrei Emeltchenko 34232c03a7a4SGustavo F. Padovan chan->remote_max_tx = rfc.max_transmit; 34240a708f8fSGustavo F. Padovan 3425c8f79162SAndrei Emeltchenko size = min_t(u16, le16_to_cpu(rfc.max_pdu_size), 34262d792818SGustavo Padovan chan->conn->mtu - L2CAP_EXT_HDR_SIZE - 34272d792818SGustavo Padovan L2CAP_SDULEN_SIZE - L2CAP_FCS_SIZE); 3428c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 3429c8f79162SAndrei Emeltchenko chan->remote_mps = size; 34300a708f8fSGustavo F. Padovan 343136c86c85SMat Martineau __l2cap_set_ertm_timeouts(chan, &rfc); 34320a708f8fSGustavo F. Padovan 3433c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 34340a708f8fSGustavo F. Padovan 34350a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 34360a708f8fSGustavo F. Padovan sizeof(rfc), (unsigned long) &rfc); 34370a708f8fSGustavo F. Padovan 343842dceae2SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) { 343942dceae2SAndrei Emeltchenko chan->remote_id = efs.id; 344042dceae2SAndrei Emeltchenko chan->remote_stype = efs.stype; 344142dceae2SAndrei Emeltchenko chan->remote_msdu = le16_to_cpu(efs.msdu); 344242dceae2SAndrei Emeltchenko chan->remote_flush_to = 344342dceae2SAndrei Emeltchenko le32_to_cpu(efs.flush_to); 344442dceae2SAndrei Emeltchenko chan->remote_acc_lat = 344542dceae2SAndrei Emeltchenko le32_to_cpu(efs.acc_lat); 344642dceae2SAndrei Emeltchenko chan->remote_sdu_itime = 344742dceae2SAndrei Emeltchenko le32_to_cpu(efs.sdu_itime); 344842dceae2SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, 34492d792818SGustavo Padovan sizeof(efs), 34502d792818SGustavo Padovan (unsigned long) &efs); 345142dceae2SAndrei Emeltchenko } 34520a708f8fSGustavo F. Padovan break; 34530a708f8fSGustavo F. Padovan 34540a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 3455c8f79162SAndrei Emeltchenko size = min_t(u16, le16_to_cpu(rfc.max_pdu_size), 34562d792818SGustavo Padovan chan->conn->mtu - L2CAP_EXT_HDR_SIZE - 34572d792818SGustavo Padovan L2CAP_SDULEN_SIZE - L2CAP_FCS_SIZE); 3458c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 3459c8f79162SAndrei Emeltchenko chan->remote_mps = size; 34600a708f8fSGustavo F. Padovan 3461c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 34620a708f8fSGustavo F. Padovan 34632d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 34642d792818SGustavo Padovan (unsigned long) &rfc); 34650a708f8fSGustavo F. Padovan 34660a708f8fSGustavo F. Padovan break; 34670a708f8fSGustavo F. Padovan 34680a708f8fSGustavo F. Padovan default: 34690a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 34700a708f8fSGustavo F. Padovan 34710a708f8fSGustavo F. Padovan memset(&rfc, 0, sizeof(rfc)); 34720c1bc5c6SGustavo F. Padovan rfc.mode = chan->mode; 34730a708f8fSGustavo F. Padovan } 34740a708f8fSGustavo F. Padovan 34750a708f8fSGustavo F. Padovan if (result == L2CAP_CONF_SUCCESS) 3476c1360a1cSGustavo F. Padovan set_bit(CONF_OUTPUT_DONE, &chan->conf_state); 34770a708f8fSGustavo F. Padovan } 3478fe4128e0SGustavo F. Padovan rsp->scid = cpu_to_le16(chan->dcid); 34790a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(result); 348059e54bd1SAndrei Emeltchenko rsp->flags = __constant_cpu_to_le16(0); 34810a708f8fSGustavo F. Padovan 34820a708f8fSGustavo F. Padovan return ptr - data; 34830a708f8fSGustavo F. Padovan } 34840a708f8fSGustavo F. Padovan 34852d792818SGustavo Padovan static int l2cap_parse_conf_rsp(struct l2cap_chan *chan, void *rsp, int len, 34862d792818SGustavo Padovan void *data, u16 *result) 34870a708f8fSGustavo F. Padovan { 34880a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = data; 34890a708f8fSGustavo F. Padovan void *ptr = req->data; 34900a708f8fSGustavo F. Padovan int type, olen; 34910a708f8fSGustavo F. Padovan unsigned long val; 349236e999a8SMat Martineau struct l2cap_conf_rfc rfc = { .mode = L2CAP_MODE_BASIC }; 349366af7aafSAndrei Emeltchenko struct l2cap_conf_efs efs; 34940a708f8fSGustavo F. Padovan 3495fe4128e0SGustavo F. Padovan BT_DBG("chan %p, rsp %p, len %d, req %p", chan, rsp, len, data); 34960a708f8fSGustavo F. Padovan 34970a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 34980a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&rsp, &type, &olen, &val); 34990a708f8fSGustavo F. Padovan 35000a708f8fSGustavo F. Padovan switch (type) { 35010a708f8fSGustavo F. Padovan case L2CAP_CONF_MTU: 35020a708f8fSGustavo F. Padovan if (val < L2CAP_DEFAULT_MIN_MTU) { 35030a708f8fSGustavo F. Padovan *result = L2CAP_CONF_UNACCEPT; 35040c1bc5c6SGustavo F. Padovan chan->imtu = L2CAP_DEFAULT_MIN_MTU; 35050a708f8fSGustavo F. Padovan } else 35060c1bc5c6SGustavo F. Padovan chan->imtu = val; 35070c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->imtu); 35080a708f8fSGustavo F. Padovan break; 35090a708f8fSGustavo F. Padovan 35100a708f8fSGustavo F. Padovan case L2CAP_CONF_FLUSH_TO: 35110c1bc5c6SGustavo F. Padovan chan->flush_to = val; 35120a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_FLUSH_TO, 35130c1bc5c6SGustavo F. Padovan 2, chan->flush_to); 35140a708f8fSGustavo F. Padovan break; 35150a708f8fSGustavo F. Padovan 35160a708f8fSGustavo F. Padovan case L2CAP_CONF_RFC: 35170a708f8fSGustavo F. Padovan if (olen == sizeof(rfc)) 35180a708f8fSGustavo F. Padovan memcpy(&rfc, (void *)val, olen); 35190a708f8fSGustavo F. Padovan 3520c1360a1cSGustavo F. Padovan if (test_bit(CONF_STATE2_DEVICE, &chan->conf_state) && 35210c1bc5c6SGustavo F. Padovan rfc.mode != chan->mode) 35220a708f8fSGustavo F. Padovan return -ECONNREFUSED; 35230a708f8fSGustavo F. Padovan 352447d1ec61SGustavo F. Padovan chan->fcs = 0; 35250a708f8fSGustavo F. Padovan 35260a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 35270a708f8fSGustavo F. Padovan sizeof(rfc), (unsigned long) &rfc); 35280a708f8fSGustavo F. Padovan break; 35296327eb98SAndrei Emeltchenko 35306327eb98SAndrei Emeltchenko case L2CAP_CONF_EWS: 3531c20f8e35SMat Martineau chan->ack_win = min_t(u16, val, chan->ack_win); 35323e6b3b95SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_EWS, 2, 35333e6b3b95SGustavo F. Padovan chan->tx_win); 35346327eb98SAndrei Emeltchenko break; 353566af7aafSAndrei Emeltchenko 353666af7aafSAndrei Emeltchenko case L2CAP_CONF_EFS: 353766af7aafSAndrei Emeltchenko if (olen == sizeof(efs)) 353866af7aafSAndrei Emeltchenko memcpy(&efs, (void *)val, olen); 353966af7aafSAndrei Emeltchenko 354066af7aafSAndrei Emeltchenko if (chan->local_stype != L2CAP_SERV_NOTRAFIC && 354166af7aafSAndrei Emeltchenko efs.stype != L2CAP_SERV_NOTRAFIC && 354266af7aafSAndrei Emeltchenko efs.stype != chan->local_stype) 354366af7aafSAndrei Emeltchenko return -ECONNREFUSED; 354466af7aafSAndrei Emeltchenko 35452d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, sizeof(efs), 35462d792818SGustavo Padovan (unsigned long) &efs); 354766af7aafSAndrei Emeltchenko break; 3548cbabee78SAndrei Emeltchenko 3549cbabee78SAndrei Emeltchenko case L2CAP_CONF_FCS: 3550cbabee78SAndrei Emeltchenko if (*result == L2CAP_CONF_PENDING) 3551cbabee78SAndrei Emeltchenko if (val == L2CAP_FCS_NONE) 3552f2592d3eSAndrei Emeltchenko set_bit(CONF_RECV_NO_FCS, 3553cbabee78SAndrei Emeltchenko &chan->conf_state); 3554cbabee78SAndrei Emeltchenko break; 35550a708f8fSGustavo F. Padovan } 35560a708f8fSGustavo F. Padovan } 35570a708f8fSGustavo F. Padovan 35580c1bc5c6SGustavo F. Padovan if (chan->mode == L2CAP_MODE_BASIC && chan->mode != rfc.mode) 35590a708f8fSGustavo F. Padovan return -ECONNREFUSED; 35600a708f8fSGustavo F. Padovan 35610c1bc5c6SGustavo F. Padovan chan->mode = rfc.mode; 35620a708f8fSGustavo F. Padovan 35630e8b207eSAndrei Emeltchenko if (*result == L2CAP_CONF_SUCCESS || *result == L2CAP_CONF_PENDING) { 35640a708f8fSGustavo F. Padovan switch (rfc.mode) { 35650a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 356647d1ec61SGustavo F. Padovan chan->retrans_timeout = le16_to_cpu(rfc.retrans_timeout); 356747d1ec61SGustavo F. Padovan chan->monitor_timeout = le16_to_cpu(rfc.monitor_timeout); 356847d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 3569c20f8e35SMat Martineau if (!test_bit(FLAG_EXT_CTRL, &chan->flags)) 3570c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, 3571c20f8e35SMat Martineau rfc.txwin_size); 357266af7aafSAndrei Emeltchenko 357366af7aafSAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) { 357466af7aafSAndrei Emeltchenko chan->local_msdu = le16_to_cpu(efs.msdu); 357566af7aafSAndrei Emeltchenko chan->local_sdu_itime = 357666af7aafSAndrei Emeltchenko le32_to_cpu(efs.sdu_itime); 357766af7aafSAndrei Emeltchenko chan->local_acc_lat = le32_to_cpu(efs.acc_lat); 357866af7aafSAndrei Emeltchenko chan->local_flush_to = 357966af7aafSAndrei Emeltchenko le32_to_cpu(efs.flush_to); 358066af7aafSAndrei Emeltchenko } 35810a708f8fSGustavo F. Padovan break; 358266af7aafSAndrei Emeltchenko 35830a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 358447d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 35850a708f8fSGustavo F. Padovan } 35860a708f8fSGustavo F. Padovan } 35870a708f8fSGustavo F. Padovan 3588fe4128e0SGustavo F. Padovan req->dcid = cpu_to_le16(chan->dcid); 358959e54bd1SAndrei Emeltchenko req->flags = __constant_cpu_to_le16(0); 35900a708f8fSGustavo F. Padovan 35910a708f8fSGustavo F. Padovan return ptr - data; 35920a708f8fSGustavo F. Padovan } 35930a708f8fSGustavo F. Padovan 35942d792818SGustavo Padovan static int l2cap_build_conf_rsp(struct l2cap_chan *chan, void *data, 35952d792818SGustavo Padovan u16 result, u16 flags) 35960a708f8fSGustavo F. Padovan { 35970a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = data; 35980a708f8fSGustavo F. Padovan void *ptr = rsp->data; 35990a708f8fSGustavo F. Padovan 3600fe4128e0SGustavo F. Padovan BT_DBG("chan %p", chan); 36010a708f8fSGustavo F. Padovan 3602fe4128e0SGustavo F. Padovan rsp->scid = cpu_to_le16(chan->dcid); 36030a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(result); 36040a708f8fSGustavo F. Padovan rsp->flags = cpu_to_le16(flags); 36050a708f8fSGustavo F. Padovan 36060a708f8fSGustavo F. Padovan return ptr - data; 36070a708f8fSGustavo F. Padovan } 36080a708f8fSGustavo F. Padovan 36098c1d787bSGustavo F. Padovan void __l2cap_connect_rsp_defer(struct l2cap_chan *chan) 3610710f9b0aSGustavo F. Padovan { 3611710f9b0aSGustavo F. Padovan struct l2cap_conn_rsp rsp; 36128c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 3613710f9b0aSGustavo F. Padovan u8 buf[128]; 3614439f34acSAndrei Emeltchenko u8 rsp_code; 3615710f9b0aSGustavo F. Padovan 3616fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 3617fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 3618ac73498cSAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CR_SUCCESS); 3619ac73498cSAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_NO_INFO); 3620439f34acSAndrei Emeltchenko 3621439f34acSAndrei Emeltchenko if (chan->hs_hcon) 3622439f34acSAndrei Emeltchenko rsp_code = L2CAP_CREATE_CHAN_RSP; 3623439f34acSAndrei Emeltchenko else 3624439f34acSAndrei Emeltchenko rsp_code = L2CAP_CONN_RSP; 3625439f34acSAndrei Emeltchenko 3626439f34acSAndrei Emeltchenko BT_DBG("chan %p rsp_code %u", chan, rsp_code); 3627439f34acSAndrei Emeltchenko 3628439f34acSAndrei Emeltchenko l2cap_send_cmd(conn, chan->ident, rsp_code, sizeof(rsp), &rsp); 3629710f9b0aSGustavo F. Padovan 3630c1360a1cSGustavo F. Padovan if (test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) 3631710f9b0aSGustavo F. Padovan return; 3632710f9b0aSGustavo F. Padovan 3633710f9b0aSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 3634710f9b0aSGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 3635710f9b0aSGustavo F. Padovan chan->num_conf_req++; 3636710f9b0aSGustavo F. Padovan } 3637710f9b0aSGustavo F. Padovan 363847d1ec61SGustavo F. Padovan static void l2cap_conf_rfc_get(struct l2cap_chan *chan, void *rsp, int len) 36390a708f8fSGustavo F. Padovan { 36400a708f8fSGustavo F. Padovan int type, olen; 36410a708f8fSGustavo F. Padovan unsigned long val; 3642c20f8e35SMat Martineau /* Use sane default values in case a misbehaving remote device 3643c20f8e35SMat Martineau * did not send an RFC or extended window size option. 3644c20f8e35SMat Martineau */ 3645c20f8e35SMat Martineau u16 txwin_ext = chan->ack_win; 3646c20f8e35SMat Martineau struct l2cap_conf_rfc rfc = { 3647c20f8e35SMat Martineau .mode = chan->mode, 3648c20f8e35SMat Martineau .retrans_timeout = __constant_cpu_to_le16(L2CAP_DEFAULT_RETRANS_TO), 3649c20f8e35SMat Martineau .monitor_timeout = __constant_cpu_to_le16(L2CAP_DEFAULT_MONITOR_TO), 3650c20f8e35SMat Martineau .max_pdu_size = cpu_to_le16(chan->imtu), 3651c20f8e35SMat Martineau .txwin_size = min_t(u16, chan->ack_win, L2CAP_DEFAULT_TX_WINDOW), 3652c20f8e35SMat Martineau }; 36530a708f8fSGustavo F. Padovan 365447d1ec61SGustavo F. Padovan BT_DBG("chan %p, rsp %p, len %d", chan, rsp, len); 36550a708f8fSGustavo F. Padovan 36560c1bc5c6SGustavo F. Padovan if ((chan->mode != L2CAP_MODE_ERTM) && (chan->mode != L2CAP_MODE_STREAMING)) 36570a708f8fSGustavo F. Padovan return; 36580a708f8fSGustavo F. Padovan 36590a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 36600a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&rsp, &type, &olen, &val); 36610a708f8fSGustavo F. Padovan 3662c20f8e35SMat Martineau switch (type) { 3663c20f8e35SMat Martineau case L2CAP_CONF_RFC: 3664c20f8e35SMat Martineau if (olen == sizeof(rfc)) 36650a708f8fSGustavo F. Padovan memcpy(&rfc, (void *)val, olen); 3666c20f8e35SMat Martineau break; 3667c20f8e35SMat Martineau case L2CAP_CONF_EWS: 3668c20f8e35SMat Martineau txwin_ext = val; 3669c20f8e35SMat Martineau break; 3670c20f8e35SMat Martineau } 36710a708f8fSGustavo F. Padovan } 36720a708f8fSGustavo F. Padovan 36730a708f8fSGustavo F. Padovan switch (rfc.mode) { 36740a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 367547d1ec61SGustavo F. Padovan chan->retrans_timeout = le16_to_cpu(rfc.retrans_timeout); 367647d1ec61SGustavo F. Padovan chan->monitor_timeout = le16_to_cpu(rfc.monitor_timeout); 367747d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 3678c20f8e35SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 3679c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, txwin_ext); 3680c20f8e35SMat Martineau else 3681c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, 3682c20f8e35SMat Martineau rfc.txwin_size); 36830a708f8fSGustavo F. Padovan break; 36840a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 368547d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 36860a708f8fSGustavo F. Padovan } 36870a708f8fSGustavo F. Padovan } 36880a708f8fSGustavo F. Padovan 36892d792818SGustavo Padovan static inline int l2cap_command_rej(struct l2cap_conn *conn, 3690cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 3691cb3b3152SJohan Hedberg u8 *data) 36920a708f8fSGustavo F. Padovan { 3693e2fd318eSIlia Kolomisnky struct l2cap_cmd_rej_unk *rej = (struct l2cap_cmd_rej_unk *) data; 36940a708f8fSGustavo F. Padovan 3695cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rej)) 3696cb3b3152SJohan Hedberg return -EPROTO; 3697cb3b3152SJohan Hedberg 3698e2fd318eSIlia Kolomisnky if (rej->reason != L2CAP_REJ_NOT_UNDERSTOOD) 36990a708f8fSGustavo F. Padovan return 0; 37000a708f8fSGustavo F. Padovan 37010a708f8fSGustavo F. Padovan if ((conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) && 37020a708f8fSGustavo F. Padovan cmd->ident == conn->info_ident) { 370317cd3f37SUlisses Furquim cancel_delayed_work(&conn->info_timer); 37040a708f8fSGustavo F. Padovan 37050a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 37060a708f8fSGustavo F. Padovan conn->info_ident = 0; 37070a708f8fSGustavo F. Padovan 37080a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 37090a708f8fSGustavo F. Padovan } 37100a708f8fSGustavo F. Padovan 37110a708f8fSGustavo F. Padovan return 0; 37120a708f8fSGustavo F. Padovan } 37130a708f8fSGustavo F. Padovan 37141700915fSMat Martineau static struct l2cap_chan *l2cap_connect(struct l2cap_conn *conn, 37151700915fSMat Martineau struct l2cap_cmd_hdr *cmd, 37164c89b6aaSMat Martineau u8 *data, u8 rsp_code, u8 amp_id) 37170a708f8fSGustavo F. Padovan { 37180a708f8fSGustavo F. Padovan struct l2cap_conn_req *req = (struct l2cap_conn_req *) data; 37190a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 372023691d75SGustavo F. Padovan struct l2cap_chan *chan = NULL, *pchan; 37210a708f8fSGustavo F. Padovan struct sock *parent, *sk = NULL; 37220a708f8fSGustavo F. Padovan int result, status = L2CAP_CS_NO_INFO; 37230a708f8fSGustavo F. Padovan 37240a708f8fSGustavo F. Padovan u16 dcid = 0, scid = __le16_to_cpu(req->scid); 37250a708f8fSGustavo F. Padovan __le16 psm = req->psm; 37260a708f8fSGustavo F. Padovan 3727097db76cSAndrei Emeltchenko BT_DBG("psm 0x%2.2x scid 0x%4.4x", __le16_to_cpu(psm), scid); 37280a708f8fSGustavo F. Padovan 37290a708f8fSGustavo F. Padovan /* Check if we have socket listening on psm */ 37306f59b904SMarcel Holtmann pchan = l2cap_global_chan_by_psm(BT_LISTEN, psm, &conn->hcon->src, 373198e0f7eaSMarcel Holtmann &conn->hcon->dst); 373223691d75SGustavo F. Padovan if (!pchan) { 37330a708f8fSGustavo F. Padovan result = L2CAP_CR_BAD_PSM; 37340a708f8fSGustavo F. Padovan goto sendresp; 37350a708f8fSGustavo F. Padovan } 37360a708f8fSGustavo F. Padovan 373723691d75SGustavo F. Padovan parent = pchan->sk; 373823691d75SGustavo F. Padovan 37393df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 3740aa2ac881SGustavo F. Padovan lock_sock(parent); 37410a708f8fSGustavo F. Padovan 37420a708f8fSGustavo F. Padovan /* Check if the ACL is secure enough (if not SDP) */ 37432983fd68SAndrei Emeltchenko if (psm != __constant_cpu_to_le16(L2CAP_PSM_SDP) && 37440a708f8fSGustavo F. Padovan !hci_conn_check_link_mode(conn->hcon)) { 37459f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_AUTH_FAILURE; 37460a708f8fSGustavo F. Padovan result = L2CAP_CR_SEC_BLOCK; 37470a708f8fSGustavo F. Padovan goto response; 37480a708f8fSGustavo F. Padovan } 37490a708f8fSGustavo F. Padovan 37500a708f8fSGustavo F. Padovan result = L2CAP_CR_NO_MEM; 37510a708f8fSGustavo F. Padovan 37522dfa1003SGustavo Padovan /* Check if we already have channel with that dcid */ 37532dfa1003SGustavo Padovan if (__l2cap_get_chan_by_dcid(conn, scid)) 37542dfa1003SGustavo Padovan goto response; 37552dfa1003SGustavo Padovan 375680b98027SGustavo Padovan chan = pchan->ops->new_connection(pchan); 375780808e43SGustavo F. Padovan if (!chan) 37580a708f8fSGustavo F. Padovan goto response; 37590a708f8fSGustavo F. Padovan 376080808e43SGustavo F. Padovan sk = chan->sk; 376180808e43SGustavo F. Padovan 3762330b6c15SSyam Sidhardhan /* For certain devices (ex: HID mouse), support for authentication, 3763330b6c15SSyam Sidhardhan * pairing and bonding is optional. For such devices, inorder to avoid 3764330b6c15SSyam Sidhardhan * the ACL alive for too long after L2CAP disconnection, reset the ACL 3765330b6c15SSyam Sidhardhan * disc_timeout back to HCI_DISCONN_TIMEOUT during L2CAP connect. 3766330b6c15SSyam Sidhardhan */ 3767330b6c15SSyam Sidhardhan conn->hcon->disc_timeout = HCI_DISCONN_TIMEOUT; 3768330b6c15SSyam Sidhardhan 37697eafc59eSMarcel Holtmann bacpy(&chan->src, &conn->hcon->src); 37707eafc59eSMarcel Holtmann bacpy(&chan->dst, &conn->hcon->dst); 37714f1654e0SMarcel Holtmann chan->src_type = bdaddr_type(conn->hcon, conn->hcon->src_type); 37724f1654e0SMarcel Holtmann chan->dst_type = bdaddr_type(conn->hcon, conn->hcon->dst_type); 3773fe4128e0SGustavo F. Padovan chan->psm = psm; 3774fe4128e0SGustavo F. Padovan chan->dcid = scid; 37751700915fSMat Martineau chan->local_amp_id = amp_id; 37760a708f8fSGustavo F. Padovan 37776be36555SAndrei Emeltchenko __l2cap_chan_add(conn, chan); 377848454079SGustavo F. Padovan 3779fe4128e0SGustavo F. Padovan dcid = chan->scid; 37800a708f8fSGustavo F. Padovan 37818d836d71SGustavo Padovan __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 37820a708f8fSGustavo F. Padovan 3783fc7f8a7eSGustavo F. Padovan chan->ident = cmd->ident; 37840a708f8fSGustavo F. Padovan 37850a708f8fSGustavo F. Padovan if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) { 3786d45fc423SGustavo F. Padovan if (l2cap_chan_check_security(chan)) { 3787bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 37880e587be7SAndrei Emeltchenko __l2cap_state_change(chan, BT_CONNECT2); 37890a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 37900a708f8fSGustavo F. Padovan status = L2CAP_CS_AUTHOR_PEND; 37912dc4e510SGustavo Padovan chan->ops->defer(chan); 37920a708f8fSGustavo F. Padovan } else { 37931700915fSMat Martineau /* Force pending result for AMP controllers. 37941700915fSMat Martineau * The connection will succeed after the 37951700915fSMat Martineau * physical link is up. 37961700915fSMat Martineau */ 37976ed971caSMarcel Holtmann if (amp_id == AMP_ID_BREDR) { 37980e587be7SAndrei Emeltchenko __l2cap_state_change(chan, BT_CONFIG); 37990a708f8fSGustavo F. Padovan result = L2CAP_CR_SUCCESS; 38006ed971caSMarcel Holtmann } else { 38016ed971caSMarcel Holtmann __l2cap_state_change(chan, BT_CONNECT2); 38026ed971caSMarcel Holtmann result = L2CAP_CR_PEND; 38031700915fSMat Martineau } 38040a708f8fSGustavo F. Padovan status = L2CAP_CS_NO_INFO; 38050a708f8fSGustavo F. Padovan } 38060a708f8fSGustavo F. Padovan } else { 38070e587be7SAndrei Emeltchenko __l2cap_state_change(chan, BT_CONNECT2); 38080a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 38090a708f8fSGustavo F. Padovan status = L2CAP_CS_AUTHEN_PEND; 38100a708f8fSGustavo F. Padovan } 38110a708f8fSGustavo F. Padovan } else { 38120e587be7SAndrei Emeltchenko __l2cap_state_change(chan, BT_CONNECT2); 38130a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 38140a708f8fSGustavo F. Padovan status = L2CAP_CS_NO_INFO; 38150a708f8fSGustavo F. Padovan } 38160a708f8fSGustavo F. Padovan 38170a708f8fSGustavo F. Padovan response: 3818aa2ac881SGustavo F. Padovan release_sock(parent); 38193df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 38200a708f8fSGustavo F. Padovan 38210a708f8fSGustavo F. Padovan sendresp: 38220a708f8fSGustavo F. Padovan rsp.scid = cpu_to_le16(scid); 38230a708f8fSGustavo F. Padovan rsp.dcid = cpu_to_le16(dcid); 38240a708f8fSGustavo F. Padovan rsp.result = cpu_to_le16(result); 38250a708f8fSGustavo F. Padovan rsp.status = cpu_to_le16(status); 38264c89b6aaSMat Martineau l2cap_send_cmd(conn, cmd->ident, rsp_code, sizeof(rsp), &rsp); 38270a708f8fSGustavo F. Padovan 38280a708f8fSGustavo F. Padovan if (result == L2CAP_CR_PEND && status == L2CAP_CS_NO_INFO) { 38290a708f8fSGustavo F. Padovan struct l2cap_info_req info; 3830ac73498cSAndrei Emeltchenko info.type = __constant_cpu_to_le16(L2CAP_IT_FEAT_MASK); 38310a708f8fSGustavo F. Padovan 38320a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_SENT; 38330a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 38340a708f8fSGustavo F. Padovan 3835ba13ccd9SMarcel Holtmann schedule_delayed_work(&conn->info_timer, L2CAP_INFO_TIMEOUT); 38360a708f8fSGustavo F. Padovan 38372d792818SGustavo Padovan l2cap_send_cmd(conn, conn->info_ident, L2CAP_INFO_REQ, 38382d792818SGustavo Padovan sizeof(info), &info); 38390a708f8fSGustavo F. Padovan } 38400a708f8fSGustavo F. Padovan 3841c1360a1cSGustavo F. Padovan if (chan && !test_bit(CONF_REQ_SENT, &chan->conf_state) && 38420a708f8fSGustavo F. Padovan result == L2CAP_CR_SUCCESS) { 38430a708f8fSGustavo F. Padovan u8 buf[128]; 3844c1360a1cSGustavo F. Padovan set_bit(CONF_REQ_SENT, &chan->conf_state); 38450a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 384673ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 384773ffa904SGustavo F. Padovan chan->num_conf_req++; 38480a708f8fSGustavo F. Padovan } 38491700915fSMat Martineau 38501700915fSMat Martineau return chan; 38514c89b6aaSMat Martineau } 38520a708f8fSGustavo F. Padovan 38534c89b6aaSMat Martineau static int l2cap_connect_req(struct l2cap_conn *conn, 3854cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, u8 *data) 38554c89b6aaSMat Martineau { 38567b064edaSJaganath Kanakkassery struct hci_dev *hdev = conn->hcon->hdev; 38577b064edaSJaganath Kanakkassery struct hci_conn *hcon = conn->hcon; 38587b064edaSJaganath Kanakkassery 3859cb3b3152SJohan Hedberg if (cmd_len < sizeof(struct l2cap_conn_req)) 3860cb3b3152SJohan Hedberg return -EPROTO; 3861cb3b3152SJohan Hedberg 38627b064edaSJaganath Kanakkassery hci_dev_lock(hdev); 38637b064edaSJaganath Kanakkassery if (test_bit(HCI_MGMT, &hdev->dev_flags) && 38647b064edaSJaganath Kanakkassery !test_and_set_bit(HCI_CONN_MGMT_CONNECTED, &hcon->flags)) 38657b064edaSJaganath Kanakkassery mgmt_device_connected(hdev, &hcon->dst, hcon->type, 38667b064edaSJaganath Kanakkassery hcon->dst_type, 0, NULL, 0, 38677b064edaSJaganath Kanakkassery hcon->dev_class); 38687b064edaSJaganath Kanakkassery hci_dev_unlock(hdev); 38697b064edaSJaganath Kanakkassery 3870300229f9SGustavo Padovan l2cap_connect(conn, cmd, data, L2CAP_CONN_RSP, 0); 38710a708f8fSGustavo F. Padovan return 0; 38720a708f8fSGustavo F. Padovan } 38730a708f8fSGustavo F. Padovan 38745909cf30SMat Martineau static int l2cap_connect_create_rsp(struct l2cap_conn *conn, 3875cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 3876cb3b3152SJohan Hedberg u8 *data) 38770a708f8fSGustavo F. Padovan { 38780a708f8fSGustavo F. Padovan struct l2cap_conn_rsp *rsp = (struct l2cap_conn_rsp *) data; 38790a708f8fSGustavo F. Padovan u16 scid, dcid, result, status; 388048454079SGustavo F. Padovan struct l2cap_chan *chan; 38810a708f8fSGustavo F. Padovan u8 req[128]; 38823df91ea2SAndrei Emeltchenko int err; 38830a708f8fSGustavo F. Padovan 3884cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rsp)) 3885cb3b3152SJohan Hedberg return -EPROTO; 3886cb3b3152SJohan Hedberg 38870a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 38880a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(rsp->dcid); 38890a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 38900a708f8fSGustavo F. Padovan status = __le16_to_cpu(rsp->status); 38910a708f8fSGustavo F. Padovan 38921b009c98SAndrei Emeltchenko BT_DBG("dcid 0x%4.4x scid 0x%4.4x result 0x%2.2x status 0x%2.2x", 38931b009c98SAndrei Emeltchenko dcid, scid, result, status); 38940a708f8fSGustavo F. Padovan 38953df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 38963df91ea2SAndrei Emeltchenko 38970a708f8fSGustavo F. Padovan if (scid) { 38983df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, scid); 38993df91ea2SAndrei Emeltchenko if (!chan) { 390021870b52SJohan Hedberg err = -EBADSLT; 39013df91ea2SAndrei Emeltchenko goto unlock; 39023df91ea2SAndrei Emeltchenko } 39030a708f8fSGustavo F. Padovan } else { 39043df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_ident(conn, cmd->ident); 39053df91ea2SAndrei Emeltchenko if (!chan) { 390621870b52SJohan Hedberg err = -EBADSLT; 39073df91ea2SAndrei Emeltchenko goto unlock; 39083df91ea2SAndrei Emeltchenko } 39090a708f8fSGustavo F. Padovan } 39100a708f8fSGustavo F. Padovan 39113df91ea2SAndrei Emeltchenko err = 0; 39123df91ea2SAndrei Emeltchenko 39136be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 391448454079SGustavo F. Padovan 39150a708f8fSGustavo F. Padovan switch (result) { 39160a708f8fSGustavo F. Padovan case L2CAP_CR_SUCCESS: 391789bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONFIG); 3918fc7f8a7eSGustavo F. Padovan chan->ident = 0; 3919fe4128e0SGustavo F. Padovan chan->dcid = dcid; 3920c1360a1cSGustavo F. Padovan clear_bit(CONF_CONNECT_PEND, &chan->conf_state); 39210a708f8fSGustavo F. Padovan 3922c1360a1cSGustavo F. Padovan if (test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) 39230a708f8fSGustavo F. Padovan break; 39240a708f8fSGustavo F. Padovan 39250a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 392673ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, req), req); 392773ffa904SGustavo F. Padovan chan->num_conf_req++; 39280a708f8fSGustavo F. Padovan break; 39290a708f8fSGustavo F. Padovan 39300a708f8fSGustavo F. Padovan case L2CAP_CR_PEND: 3931c1360a1cSGustavo F. Padovan set_bit(CONF_CONNECT_PEND, &chan->conf_state); 39320a708f8fSGustavo F. Padovan break; 39330a708f8fSGustavo F. Padovan 39340a708f8fSGustavo F. Padovan default: 393548454079SGustavo F. Padovan l2cap_chan_del(chan, ECONNREFUSED); 39360a708f8fSGustavo F. Padovan break; 39370a708f8fSGustavo F. Padovan } 39380a708f8fSGustavo F. Padovan 39396be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 39403df91ea2SAndrei Emeltchenko 39413df91ea2SAndrei Emeltchenko unlock: 39423df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 39433df91ea2SAndrei Emeltchenko 39443df91ea2SAndrei Emeltchenko return err; 39450a708f8fSGustavo F. Padovan } 39460a708f8fSGustavo F. Padovan 394747d1ec61SGustavo F. Padovan static inline void set_default_fcs(struct l2cap_chan *chan) 39480a708f8fSGustavo F. Padovan { 39490a708f8fSGustavo F. Padovan /* FCS is enabled only in ERTM or streaming mode, if one or both 39500a708f8fSGustavo F. Padovan * sides request it. 39510a708f8fSGustavo F. Padovan */ 39520c1bc5c6SGustavo F. Padovan if (chan->mode != L2CAP_MODE_ERTM && chan->mode != L2CAP_MODE_STREAMING) 395347d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 3954f2592d3eSAndrei Emeltchenko else if (!test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) 395547d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_CRC16; 39560a708f8fSGustavo F. Padovan } 39570a708f8fSGustavo F. Padovan 395829d8a590SAndrei Emeltchenko static void l2cap_send_efs_conf_rsp(struct l2cap_chan *chan, void *data, 395929d8a590SAndrei Emeltchenko u8 ident, u16 flags) 396029d8a590SAndrei Emeltchenko { 396129d8a590SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 396229d8a590SAndrei Emeltchenko 396329d8a590SAndrei Emeltchenko BT_DBG("conn %p chan %p ident %d flags 0x%4.4x", conn, chan, ident, 396429d8a590SAndrei Emeltchenko flags); 396529d8a590SAndrei Emeltchenko 396629d8a590SAndrei Emeltchenko clear_bit(CONF_LOC_CONF_PEND, &chan->conf_state); 396729d8a590SAndrei Emeltchenko set_bit(CONF_OUTPUT_DONE, &chan->conf_state); 396829d8a590SAndrei Emeltchenko 396929d8a590SAndrei Emeltchenko l2cap_send_cmd(conn, ident, L2CAP_CONF_RSP, 397029d8a590SAndrei Emeltchenko l2cap_build_conf_rsp(chan, data, 397129d8a590SAndrei Emeltchenko L2CAP_CONF_SUCCESS, flags), data); 397229d8a590SAndrei Emeltchenko } 397329d8a590SAndrei Emeltchenko 3974662d652dSJohan Hedberg static void cmd_reject_invalid_cid(struct l2cap_conn *conn, u8 ident, 3975662d652dSJohan Hedberg u16 scid, u16 dcid) 3976662d652dSJohan Hedberg { 3977662d652dSJohan Hedberg struct l2cap_cmd_rej_cid rej; 3978662d652dSJohan Hedberg 3979662d652dSJohan Hedberg rej.reason = __constant_cpu_to_le16(L2CAP_REJ_INVALID_CID); 3980662d652dSJohan Hedberg rej.scid = __cpu_to_le16(scid); 3981662d652dSJohan Hedberg rej.dcid = __cpu_to_le16(dcid); 3982662d652dSJohan Hedberg 3983662d652dSJohan Hedberg l2cap_send_cmd(conn, ident, L2CAP_COMMAND_REJ, sizeof(rej), &rej); 3984662d652dSJohan Hedberg } 3985662d652dSJohan Hedberg 39862d792818SGustavo Padovan static inline int l2cap_config_req(struct l2cap_conn *conn, 39872d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, u16 cmd_len, 39882d792818SGustavo Padovan u8 *data) 39890a708f8fSGustavo F. Padovan { 39900a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = (struct l2cap_conf_req *) data; 39910a708f8fSGustavo F. Padovan u16 dcid, flags; 39920a708f8fSGustavo F. Padovan u8 rsp[64]; 399348454079SGustavo F. Padovan struct l2cap_chan *chan; 39943c588192SMat Martineau int len, err = 0; 39950a708f8fSGustavo F. Padovan 3996cb3b3152SJohan Hedberg if (cmd_len < sizeof(*req)) 3997cb3b3152SJohan Hedberg return -EPROTO; 3998cb3b3152SJohan Hedberg 39990a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(req->dcid); 40000a708f8fSGustavo F. Padovan flags = __le16_to_cpu(req->flags); 40010a708f8fSGustavo F. Padovan 40020a708f8fSGustavo F. Padovan BT_DBG("dcid 0x%4.4x flags 0x%2.2x", dcid, flags); 40030a708f8fSGustavo F. Padovan 4004baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, dcid); 4005662d652dSJohan Hedberg if (!chan) { 4006662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, dcid, 0); 4007662d652dSJohan Hedberg return 0; 4008662d652dSJohan Hedberg } 40090a708f8fSGustavo F. Padovan 4010033b1142SDavid S. Miller if (chan->state != BT_CONFIG && chan->state != BT_CONNECT2) { 4011662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, chan->scid, 4012662d652dSJohan Hedberg chan->dcid); 40130a708f8fSGustavo F. Padovan goto unlock; 40140a708f8fSGustavo F. Padovan } 40150a708f8fSGustavo F. Padovan 40160a708f8fSGustavo F. Padovan /* Reject if config buffer is too small. */ 40170a708f8fSGustavo F. Padovan len = cmd_len - sizeof(*req); 4018cb3b3152SJohan Hedberg if (chan->conf_len + len > sizeof(chan->conf_req)) { 40190a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 4020fe4128e0SGustavo F. Padovan l2cap_build_conf_rsp(chan, rsp, 40210a708f8fSGustavo F. Padovan L2CAP_CONF_REJECT, flags), rsp); 40220a708f8fSGustavo F. Padovan goto unlock; 40230a708f8fSGustavo F. Padovan } 40240a708f8fSGustavo F. Padovan 40250a708f8fSGustavo F. Padovan /* Store config. */ 402673ffa904SGustavo F. Padovan memcpy(chan->conf_req + chan->conf_len, req->data, len); 402773ffa904SGustavo F. Padovan chan->conf_len += len; 40280a708f8fSGustavo F. Padovan 402959e54bd1SAndrei Emeltchenko if (flags & L2CAP_CONF_FLAG_CONTINUATION) { 40300a708f8fSGustavo F. Padovan /* Incomplete config. Send empty response. */ 40310a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 4032fe4128e0SGustavo F. Padovan l2cap_build_conf_rsp(chan, rsp, 40335325e5bbSAndrei Emeltchenko L2CAP_CONF_SUCCESS, flags), rsp); 40340a708f8fSGustavo F. Padovan goto unlock; 40350a708f8fSGustavo F. Padovan } 40360a708f8fSGustavo F. Padovan 40370a708f8fSGustavo F. Padovan /* Complete config. */ 403873ffa904SGustavo F. Padovan len = l2cap_parse_conf_req(chan, rsp); 40390a708f8fSGustavo F. Padovan if (len < 0) { 40405e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 40410a708f8fSGustavo F. Padovan goto unlock; 40420a708f8fSGustavo F. Padovan } 40430a708f8fSGustavo F. Padovan 40441500109bSMat Martineau chan->ident = cmd->ident; 40450a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, len, rsp); 404673ffa904SGustavo F. Padovan chan->num_conf_rsp++; 40470a708f8fSGustavo F. Padovan 40480a708f8fSGustavo F. Padovan /* Reset config buffer. */ 404973ffa904SGustavo F. Padovan chan->conf_len = 0; 40500a708f8fSGustavo F. Padovan 4051c1360a1cSGustavo F. Padovan if (!test_bit(CONF_OUTPUT_DONE, &chan->conf_state)) 40520a708f8fSGustavo F. Padovan goto unlock; 40530a708f8fSGustavo F. Padovan 4054c1360a1cSGustavo F. Padovan if (test_bit(CONF_INPUT_DONE, &chan->conf_state)) { 405547d1ec61SGustavo F. Padovan set_default_fcs(chan); 40560a708f8fSGustavo F. Padovan 4057105bdf9eSMat Martineau if (chan->mode == L2CAP_MODE_ERTM || 4058105bdf9eSMat Martineau chan->mode == L2CAP_MODE_STREAMING) 40593c588192SMat Martineau err = l2cap_ertm_init(chan); 40600a708f8fSGustavo F. Padovan 40613c588192SMat Martineau if (err < 0) 40625e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 40633c588192SMat Martineau else 4064cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 40653c588192SMat Martineau 40660a708f8fSGustavo F. Padovan goto unlock; 40670a708f8fSGustavo F. Padovan } 40680a708f8fSGustavo F. Padovan 4069c1360a1cSGustavo F. Padovan if (!test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) { 40700a708f8fSGustavo F. Padovan u8 buf[64]; 40710a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 407273ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 407373ffa904SGustavo F. Padovan chan->num_conf_req++; 40740a708f8fSGustavo F. Padovan } 40750a708f8fSGustavo F. Padovan 40760e8b207eSAndrei Emeltchenko /* Got Conf Rsp PENDING from remote side and asume we sent 40770e8b207eSAndrei Emeltchenko Conf Rsp PENDING in the code above */ 40780e8b207eSAndrei Emeltchenko if (test_bit(CONF_REM_CONF_PEND, &chan->conf_state) && 40790e8b207eSAndrei Emeltchenko test_bit(CONF_LOC_CONF_PEND, &chan->conf_state)) { 40800e8b207eSAndrei Emeltchenko 40810e8b207eSAndrei Emeltchenko /* check compatibility */ 40820e8b207eSAndrei Emeltchenko 408379de886dSAndrei Emeltchenko /* Send rsp for BR/EDR channel */ 4084f351bc72SAndrei Emeltchenko if (!chan->hs_hcon) 408529d8a590SAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, rsp, cmd->ident, flags); 408679de886dSAndrei Emeltchenko else 408779de886dSAndrei Emeltchenko chan->ident = cmd->ident; 40880e8b207eSAndrei Emeltchenko } 40890e8b207eSAndrei Emeltchenko 40900a708f8fSGustavo F. Padovan unlock: 40916be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 40923c588192SMat Martineau return err; 40930a708f8fSGustavo F. Padovan } 40940a708f8fSGustavo F. Padovan 40952d792818SGustavo Padovan static inline int l2cap_config_rsp(struct l2cap_conn *conn, 4096cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4097cb3b3152SJohan Hedberg u8 *data) 40980a708f8fSGustavo F. Padovan { 40990a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = (struct l2cap_conf_rsp *)data; 41000a708f8fSGustavo F. Padovan u16 scid, flags, result; 410148454079SGustavo F. Padovan struct l2cap_chan *chan; 4102cb3b3152SJohan Hedberg int len = cmd_len - sizeof(*rsp); 41033c588192SMat Martineau int err = 0; 41040a708f8fSGustavo F. Padovan 4105cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rsp)) 4106cb3b3152SJohan Hedberg return -EPROTO; 4107cb3b3152SJohan Hedberg 41080a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 41090a708f8fSGustavo F. Padovan flags = __le16_to_cpu(rsp->flags); 41100a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 41110a708f8fSGustavo F. Padovan 411261386cbaSAndrei Emeltchenko BT_DBG("scid 0x%4.4x flags 0x%2.2x result 0x%2.2x len %d", scid, flags, 411361386cbaSAndrei Emeltchenko result, len); 41140a708f8fSGustavo F. Padovan 4115baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, scid); 411648454079SGustavo F. Padovan if (!chan) 41170a708f8fSGustavo F. Padovan return 0; 41180a708f8fSGustavo F. Padovan 41190a708f8fSGustavo F. Padovan switch (result) { 41200a708f8fSGustavo F. Padovan case L2CAP_CONF_SUCCESS: 412147d1ec61SGustavo F. Padovan l2cap_conf_rfc_get(chan, rsp->data, len); 41220e8b207eSAndrei Emeltchenko clear_bit(CONF_REM_CONF_PEND, &chan->conf_state); 41230a708f8fSGustavo F. Padovan break; 41240a708f8fSGustavo F. Padovan 41250e8b207eSAndrei Emeltchenko case L2CAP_CONF_PENDING: 41260e8b207eSAndrei Emeltchenko set_bit(CONF_REM_CONF_PEND, &chan->conf_state); 41270e8b207eSAndrei Emeltchenko 41280e8b207eSAndrei Emeltchenko if (test_bit(CONF_LOC_CONF_PEND, &chan->conf_state)) { 41290e8b207eSAndrei Emeltchenko char buf[64]; 41300e8b207eSAndrei Emeltchenko 41310e8b207eSAndrei Emeltchenko len = l2cap_parse_conf_rsp(chan, rsp->data, len, 41320e8b207eSAndrei Emeltchenko buf, &result); 41330e8b207eSAndrei Emeltchenko if (len < 0) { 41345e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 41350e8b207eSAndrei Emeltchenko goto done; 41360e8b207eSAndrei Emeltchenko } 41370e8b207eSAndrei Emeltchenko 4138f351bc72SAndrei Emeltchenko if (!chan->hs_hcon) { 413979de886dSAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, buf, cmd->ident, 414079de886dSAndrei Emeltchenko 0); 41415ce66b59SAndrei Emeltchenko } else { 41425ce66b59SAndrei Emeltchenko if (l2cap_check_efs(chan)) { 41435ce66b59SAndrei Emeltchenko amp_create_logical_link(chan); 414479de886dSAndrei Emeltchenko chan->ident = cmd->ident; 41450e8b207eSAndrei Emeltchenko } 41465ce66b59SAndrei Emeltchenko } 41475ce66b59SAndrei Emeltchenko } 41480e8b207eSAndrei Emeltchenko goto done; 41490e8b207eSAndrei Emeltchenko 41500a708f8fSGustavo F. Padovan case L2CAP_CONF_UNACCEPT: 415173ffa904SGustavo F. Padovan if (chan->num_conf_rsp <= L2CAP_CONF_MAX_CONF_RSP) { 41520a708f8fSGustavo F. Padovan char req[64]; 41530a708f8fSGustavo F. Padovan 41540a708f8fSGustavo F. Padovan if (len > sizeof(req) - sizeof(struct l2cap_conf_req)) { 41555e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 41560a708f8fSGustavo F. Padovan goto done; 41570a708f8fSGustavo F. Padovan } 41580a708f8fSGustavo F. Padovan 41590a708f8fSGustavo F. Padovan /* throw out any old stored conf requests */ 41600a708f8fSGustavo F. Padovan result = L2CAP_CONF_SUCCESS; 4161b4450035SGustavo F. Padovan len = l2cap_parse_conf_rsp(chan, rsp->data, len, 4162b4450035SGustavo F. Padovan req, &result); 41630a708f8fSGustavo F. Padovan if (len < 0) { 41645e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 41650a708f8fSGustavo F. Padovan goto done; 41660a708f8fSGustavo F. Padovan } 41670a708f8fSGustavo F. Padovan 41680a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), 41690a708f8fSGustavo F. Padovan L2CAP_CONF_REQ, len, req); 417073ffa904SGustavo F. Padovan chan->num_conf_req++; 41710a708f8fSGustavo F. Padovan if (result != L2CAP_CONF_SUCCESS) 41720a708f8fSGustavo F. Padovan goto done; 41730a708f8fSGustavo F. Padovan break; 41740a708f8fSGustavo F. Padovan } 41750a708f8fSGustavo F. Padovan 41760a708f8fSGustavo F. Padovan default: 41776be36555SAndrei Emeltchenko l2cap_chan_set_err(chan, ECONNRESET); 41782e0052e4SAndrei Emeltchenko 4179ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_REJ_TIMEOUT); 41805e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 41810a708f8fSGustavo F. Padovan goto done; 41820a708f8fSGustavo F. Padovan } 41830a708f8fSGustavo F. Padovan 418459e54bd1SAndrei Emeltchenko if (flags & L2CAP_CONF_FLAG_CONTINUATION) 41850a708f8fSGustavo F. Padovan goto done; 41860a708f8fSGustavo F. Padovan 4187c1360a1cSGustavo F. Padovan set_bit(CONF_INPUT_DONE, &chan->conf_state); 41880a708f8fSGustavo F. Padovan 4189c1360a1cSGustavo F. Padovan if (test_bit(CONF_OUTPUT_DONE, &chan->conf_state)) { 419047d1ec61SGustavo F. Padovan set_default_fcs(chan); 41910a708f8fSGustavo F. Padovan 4192105bdf9eSMat Martineau if (chan->mode == L2CAP_MODE_ERTM || 4193105bdf9eSMat Martineau chan->mode == L2CAP_MODE_STREAMING) 41943c588192SMat Martineau err = l2cap_ertm_init(chan); 41950a708f8fSGustavo F. Padovan 41963c588192SMat Martineau if (err < 0) 41975e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 41983c588192SMat Martineau else 4199cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 42000a708f8fSGustavo F. Padovan } 42010a708f8fSGustavo F. Padovan 42020a708f8fSGustavo F. Padovan done: 42036be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 42043c588192SMat Martineau return err; 42050a708f8fSGustavo F. Padovan } 42060a708f8fSGustavo F. Padovan 42072d792818SGustavo Padovan static inline int l2cap_disconnect_req(struct l2cap_conn *conn, 4208cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4209cb3b3152SJohan Hedberg u8 *data) 42100a708f8fSGustavo F. Padovan { 42110a708f8fSGustavo F. Padovan struct l2cap_disconn_req *req = (struct l2cap_disconn_req *) data; 42120a708f8fSGustavo F. Padovan struct l2cap_disconn_rsp rsp; 42130a708f8fSGustavo F. Padovan u16 dcid, scid; 421448454079SGustavo F. Padovan struct l2cap_chan *chan; 42150a708f8fSGustavo F. Padovan 4216cb3b3152SJohan Hedberg if (cmd_len != sizeof(*req)) 4217cb3b3152SJohan Hedberg return -EPROTO; 4218cb3b3152SJohan Hedberg 42190a708f8fSGustavo F. Padovan scid = __le16_to_cpu(req->scid); 42200a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(req->dcid); 42210a708f8fSGustavo F. Padovan 42220a708f8fSGustavo F. Padovan BT_DBG("scid 0x%4.4x dcid 0x%4.4x", scid, dcid); 42230a708f8fSGustavo F. Padovan 42243df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 42253df91ea2SAndrei Emeltchenko 42263df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, dcid); 42273df91ea2SAndrei Emeltchenko if (!chan) { 42283df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 4229662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, dcid, scid); 4230662d652dSJohan Hedberg return 0; 42313df91ea2SAndrei Emeltchenko } 42320a708f8fSGustavo F. Padovan 42336be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 42346be36555SAndrei Emeltchenko 4235fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 4236fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 42370a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_DISCONN_RSP, sizeof(rsp), &rsp); 42380a708f8fSGustavo F. Padovan 42395ec1bbe5SGustavo Padovan chan->ops->set_shutdown(chan); 42400a708f8fSGustavo F. Padovan 424161d6ef3eSMat Martineau l2cap_chan_hold(chan); 424248454079SGustavo F. Padovan l2cap_chan_del(chan, ECONNRESET); 42436be36555SAndrei Emeltchenko 42446be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 42450a708f8fSGustavo F. Padovan 424680b98027SGustavo Padovan chan->ops->close(chan); 424761d6ef3eSMat Martineau l2cap_chan_put(chan); 42483df91ea2SAndrei Emeltchenko 42493df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 42503df91ea2SAndrei Emeltchenko 42510a708f8fSGustavo F. Padovan return 0; 42520a708f8fSGustavo F. Padovan } 42530a708f8fSGustavo F. Padovan 42542d792818SGustavo Padovan static inline int l2cap_disconnect_rsp(struct l2cap_conn *conn, 4255cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4256cb3b3152SJohan Hedberg u8 *data) 42570a708f8fSGustavo F. Padovan { 42580a708f8fSGustavo F. Padovan struct l2cap_disconn_rsp *rsp = (struct l2cap_disconn_rsp *) data; 42590a708f8fSGustavo F. Padovan u16 dcid, scid; 426048454079SGustavo F. Padovan struct l2cap_chan *chan; 42610a708f8fSGustavo F. Padovan 4262cb3b3152SJohan Hedberg if (cmd_len != sizeof(*rsp)) 4263cb3b3152SJohan Hedberg return -EPROTO; 4264cb3b3152SJohan Hedberg 42650a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 42660a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(rsp->dcid); 42670a708f8fSGustavo F. Padovan 42680a708f8fSGustavo F. Padovan BT_DBG("dcid 0x%4.4x scid 0x%4.4x", dcid, scid); 42690a708f8fSGustavo F. Padovan 42703df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 42713df91ea2SAndrei Emeltchenko 42723df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, scid); 42733df91ea2SAndrei Emeltchenko if (!chan) { 42743df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 42750a708f8fSGustavo F. Padovan return 0; 42763df91ea2SAndrei Emeltchenko } 42770a708f8fSGustavo F. Padovan 42786be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 427948454079SGustavo F. Padovan 428061d6ef3eSMat Martineau l2cap_chan_hold(chan); 428148454079SGustavo F. Padovan l2cap_chan_del(chan, 0); 42826be36555SAndrei Emeltchenko 42836be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 42840a708f8fSGustavo F. Padovan 428580b98027SGustavo Padovan chan->ops->close(chan); 428661d6ef3eSMat Martineau l2cap_chan_put(chan); 42873df91ea2SAndrei Emeltchenko 42883df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 42893df91ea2SAndrei Emeltchenko 42900a708f8fSGustavo F. Padovan return 0; 42910a708f8fSGustavo F. Padovan } 42920a708f8fSGustavo F. Padovan 42932d792818SGustavo Padovan static inline int l2cap_information_req(struct l2cap_conn *conn, 4294cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4295cb3b3152SJohan Hedberg u8 *data) 42960a708f8fSGustavo F. Padovan { 42970a708f8fSGustavo F. Padovan struct l2cap_info_req *req = (struct l2cap_info_req *) data; 42980a708f8fSGustavo F. Padovan u16 type; 42990a708f8fSGustavo F. Padovan 4300cb3b3152SJohan Hedberg if (cmd_len != sizeof(*req)) 4301cb3b3152SJohan Hedberg return -EPROTO; 4302cb3b3152SJohan Hedberg 43030a708f8fSGustavo F. Padovan type = __le16_to_cpu(req->type); 43040a708f8fSGustavo F. Padovan 43050a708f8fSGustavo F. Padovan BT_DBG("type 0x%4.4x", type); 43060a708f8fSGustavo F. Padovan 43070a708f8fSGustavo F. Padovan if (type == L2CAP_IT_FEAT_MASK) { 43080a708f8fSGustavo F. Padovan u8 buf[8]; 43090a708f8fSGustavo F. Padovan u32 feat_mask = l2cap_feat_mask; 43100a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) buf; 4311ac73498cSAndrei Emeltchenko rsp->type = __constant_cpu_to_le16(L2CAP_IT_FEAT_MASK); 4312ac73498cSAndrei Emeltchenko rsp->result = __constant_cpu_to_le16(L2CAP_IR_SUCCESS); 43130a708f8fSGustavo F. Padovan if (!disable_ertm) 43140a708f8fSGustavo F. Padovan feat_mask |= L2CAP_FEAT_ERTM | L2CAP_FEAT_STREAMING 43150a708f8fSGustavo F. Padovan | L2CAP_FEAT_FCS; 4316848566b3SMarcel Holtmann if (conn->hs_enabled) 43176327eb98SAndrei Emeltchenko feat_mask |= L2CAP_FEAT_EXT_FLOW 43186327eb98SAndrei Emeltchenko | L2CAP_FEAT_EXT_WINDOW; 4319a5fd6f30SAndrei Emeltchenko 43200a708f8fSGustavo F. Padovan put_unaligned_le32(feat_mask, rsp->data); 43212d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(buf), 43222d792818SGustavo Padovan buf); 43230a708f8fSGustavo F. Padovan } else if (type == L2CAP_IT_FIXED_CHAN) { 43240a708f8fSGustavo F. Padovan u8 buf[12]; 43250a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) buf; 432650a147cdSMat Martineau 4327848566b3SMarcel Holtmann if (conn->hs_enabled) 432850a147cdSMat Martineau l2cap_fixed_chan[0] |= L2CAP_FC_A2MP; 432950a147cdSMat Martineau else 433050a147cdSMat Martineau l2cap_fixed_chan[0] &= ~L2CAP_FC_A2MP; 433150a147cdSMat Martineau 4332ac73498cSAndrei Emeltchenko rsp->type = __constant_cpu_to_le16(L2CAP_IT_FIXED_CHAN); 4333ac73498cSAndrei Emeltchenko rsp->result = __constant_cpu_to_le16(L2CAP_IR_SUCCESS); 4334c6337ea6SAndrei Emeltchenko memcpy(rsp->data, l2cap_fixed_chan, sizeof(l2cap_fixed_chan)); 43352d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(buf), 43362d792818SGustavo Padovan buf); 43370a708f8fSGustavo F. Padovan } else { 43380a708f8fSGustavo F. Padovan struct l2cap_info_rsp rsp; 43390a708f8fSGustavo F. Padovan rsp.type = cpu_to_le16(type); 4340ac73498cSAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_IR_NOTSUPP); 43412d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(rsp), 43422d792818SGustavo Padovan &rsp); 43430a708f8fSGustavo F. Padovan } 43440a708f8fSGustavo F. Padovan 43450a708f8fSGustavo F. Padovan return 0; 43460a708f8fSGustavo F. Padovan } 43470a708f8fSGustavo F. Padovan 43482d792818SGustavo Padovan static inline int l2cap_information_rsp(struct l2cap_conn *conn, 4349cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4350cb3b3152SJohan Hedberg u8 *data) 43510a708f8fSGustavo F. Padovan { 43520a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) data; 43530a708f8fSGustavo F. Padovan u16 type, result; 43540a708f8fSGustavo F. Padovan 43553f6fa3d4SJaganath Kanakkassery if (cmd_len < sizeof(*rsp)) 4356cb3b3152SJohan Hedberg return -EPROTO; 4357cb3b3152SJohan Hedberg 43580a708f8fSGustavo F. Padovan type = __le16_to_cpu(rsp->type); 43590a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 43600a708f8fSGustavo F. Padovan 43610a708f8fSGustavo F. Padovan BT_DBG("type 0x%4.4x result 0x%2.2x", type, result); 43620a708f8fSGustavo F. Padovan 4363e90165beSAndrei Emeltchenko /* L2CAP Info req/rsp are unbound to channels, add extra checks */ 4364e90165beSAndrei Emeltchenko if (cmd->ident != conn->info_ident || 4365e90165beSAndrei Emeltchenko conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) 4366e90165beSAndrei Emeltchenko return 0; 4367e90165beSAndrei Emeltchenko 436817cd3f37SUlisses Furquim cancel_delayed_work(&conn->info_timer); 43690a708f8fSGustavo F. Padovan 43700a708f8fSGustavo F. Padovan if (result != L2CAP_IR_SUCCESS) { 43710a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 43720a708f8fSGustavo F. Padovan conn->info_ident = 0; 43730a708f8fSGustavo F. Padovan 43740a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 43750a708f8fSGustavo F. Padovan 43760a708f8fSGustavo F. Padovan return 0; 43770a708f8fSGustavo F. Padovan } 43780a708f8fSGustavo F. Padovan 4379978c93b9SAndrei Emeltchenko switch (type) { 4380978c93b9SAndrei Emeltchenko case L2CAP_IT_FEAT_MASK: 43810a708f8fSGustavo F. Padovan conn->feat_mask = get_unaligned_le32(rsp->data); 43820a708f8fSGustavo F. Padovan 43830a708f8fSGustavo F. Padovan if (conn->feat_mask & L2CAP_FEAT_FIXED_CHAN) { 43840a708f8fSGustavo F. Padovan struct l2cap_info_req req; 4385ac73498cSAndrei Emeltchenko req.type = __constant_cpu_to_le16(L2CAP_IT_FIXED_CHAN); 43860a708f8fSGustavo F. Padovan 43870a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 43880a708f8fSGustavo F. Padovan 43890a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, conn->info_ident, 43900a708f8fSGustavo F. Padovan L2CAP_INFO_REQ, sizeof(req), &req); 43910a708f8fSGustavo F. Padovan } else { 43920a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 43930a708f8fSGustavo F. Padovan conn->info_ident = 0; 43940a708f8fSGustavo F. Padovan 43950a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 43960a708f8fSGustavo F. Padovan } 4397978c93b9SAndrei Emeltchenko break; 4398978c93b9SAndrei Emeltchenko 4399978c93b9SAndrei Emeltchenko case L2CAP_IT_FIXED_CHAN: 4400978c93b9SAndrei Emeltchenko conn->fixed_chan_mask = rsp->data[0]; 44010a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 44020a708f8fSGustavo F. Padovan conn->info_ident = 0; 44030a708f8fSGustavo F. Padovan 44040a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 4405978c93b9SAndrei Emeltchenko break; 44060a708f8fSGustavo F. Padovan } 44070a708f8fSGustavo F. Padovan 44080a708f8fSGustavo F. Padovan return 0; 44090a708f8fSGustavo F. Padovan } 44100a708f8fSGustavo F. Padovan 44111700915fSMat Martineau static int l2cap_create_channel_req(struct l2cap_conn *conn, 44122d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, 44132d792818SGustavo Padovan u16 cmd_len, void *data) 4414f94ff6ffSMat Martineau { 4415f94ff6ffSMat Martineau struct l2cap_create_chan_req *req = data; 44166e1df6a6SAndrei Emeltchenko struct l2cap_create_chan_rsp rsp; 44171700915fSMat Martineau struct l2cap_chan *chan; 44186e1df6a6SAndrei Emeltchenko struct hci_dev *hdev; 4419f94ff6ffSMat Martineau u16 psm, scid; 4420f94ff6ffSMat Martineau 4421f94ff6ffSMat Martineau if (cmd_len != sizeof(*req)) 4422f94ff6ffSMat Martineau return -EPROTO; 4423f94ff6ffSMat Martineau 4424848566b3SMarcel Holtmann if (!conn->hs_enabled) 4425f94ff6ffSMat Martineau return -EINVAL; 4426f94ff6ffSMat Martineau 4427f94ff6ffSMat Martineau psm = le16_to_cpu(req->psm); 4428f94ff6ffSMat Martineau scid = le16_to_cpu(req->scid); 4429f94ff6ffSMat Martineau 4430ad0ac6caSAndrei Emeltchenko BT_DBG("psm 0x%2.2x, scid 0x%4.4x, amp_id %d", psm, scid, req->amp_id); 4431f94ff6ffSMat Martineau 44326e1df6a6SAndrei Emeltchenko /* For controller id 0 make BR/EDR connection */ 44336ed971caSMarcel Holtmann if (req->amp_id == AMP_ID_BREDR) { 44346e1df6a6SAndrei Emeltchenko l2cap_connect(conn, cmd, data, L2CAP_CREATE_CHAN_RSP, 44356e1df6a6SAndrei Emeltchenko req->amp_id); 44366e1df6a6SAndrei Emeltchenko return 0; 44376e1df6a6SAndrei Emeltchenko } 44381700915fSMat Martineau 44391700915fSMat Martineau /* Validate AMP controller id */ 44401700915fSMat Martineau hdev = hci_dev_get(req->amp_id); 44416e1df6a6SAndrei Emeltchenko if (!hdev) 44426e1df6a6SAndrei Emeltchenko goto error; 44431700915fSMat Martineau 44446e1df6a6SAndrei Emeltchenko if (hdev->dev_type != HCI_AMP || !test_bit(HCI_UP, &hdev->flags)) { 44456e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 44466e1df6a6SAndrei Emeltchenko goto error; 44476e1df6a6SAndrei Emeltchenko } 44486e1df6a6SAndrei Emeltchenko 44496e1df6a6SAndrei Emeltchenko chan = l2cap_connect(conn, cmd, data, L2CAP_CREATE_CHAN_RSP, 44506e1df6a6SAndrei Emeltchenko req->amp_id); 44516e1df6a6SAndrei Emeltchenko if (chan) { 44526e1df6a6SAndrei Emeltchenko struct amp_mgr *mgr = conn->hcon->amp_mgr; 44536e1df6a6SAndrei Emeltchenko struct hci_conn *hs_hcon; 44546e1df6a6SAndrei Emeltchenko 445598e0f7eaSMarcel Holtmann hs_hcon = hci_conn_hash_lookup_ba(hdev, AMP_LINK, 445698e0f7eaSMarcel Holtmann &conn->hcon->dst); 44576e1df6a6SAndrei Emeltchenko if (!hs_hcon) { 44586e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 4459662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, chan->scid, 4460662d652dSJohan Hedberg chan->dcid); 4461662d652dSJohan Hedberg return 0; 44626e1df6a6SAndrei Emeltchenko } 44636e1df6a6SAndrei Emeltchenko 44646e1df6a6SAndrei Emeltchenko BT_DBG("mgr %p bredr_chan %p hs_hcon %p", mgr, chan, hs_hcon); 44656e1df6a6SAndrei Emeltchenko 44666e1df6a6SAndrei Emeltchenko mgr->bredr_chan = chan; 44676e1df6a6SAndrei Emeltchenko chan->hs_hcon = hs_hcon; 4468fd45bf4cSAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 44696e1df6a6SAndrei Emeltchenko conn->mtu = hdev->block_mtu; 44706e1df6a6SAndrei Emeltchenko } 44716e1df6a6SAndrei Emeltchenko 44726e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 44736e1df6a6SAndrei Emeltchenko 44746e1df6a6SAndrei Emeltchenko return 0; 44756e1df6a6SAndrei Emeltchenko 44766e1df6a6SAndrei Emeltchenko error: 4477f94ff6ffSMat Martineau rsp.dcid = 0; 4478f94ff6ffSMat Martineau rsp.scid = cpu_to_le16(scid); 44791700915fSMat Martineau rsp.result = __constant_cpu_to_le16(L2CAP_CR_BAD_AMP); 44808ce0c498SAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_NO_INFO); 4481f94ff6ffSMat Martineau 4482f94ff6ffSMat Martineau l2cap_send_cmd(conn, cmd->ident, L2CAP_CREATE_CHAN_RSP, 4483f94ff6ffSMat Martineau sizeof(rsp), &rsp); 4484f94ff6ffSMat Martineau 4485dc280801SJohan Hedberg return 0; 4486f94ff6ffSMat Martineau } 4487f94ff6ffSMat Martineau 44888eb200bdSMat Martineau static void l2cap_send_move_chan_req(struct l2cap_chan *chan, u8 dest_amp_id) 44898eb200bdSMat Martineau { 44908eb200bdSMat Martineau struct l2cap_move_chan_req req; 44918eb200bdSMat Martineau u8 ident; 44928eb200bdSMat Martineau 44938eb200bdSMat Martineau BT_DBG("chan %p, dest_amp_id %d", chan, dest_amp_id); 44948eb200bdSMat Martineau 44958eb200bdSMat Martineau ident = l2cap_get_ident(chan->conn); 44968eb200bdSMat Martineau chan->ident = ident; 44978eb200bdSMat Martineau 44988eb200bdSMat Martineau req.icid = cpu_to_le16(chan->scid); 44998eb200bdSMat Martineau req.dest_amp_id = dest_amp_id; 45008eb200bdSMat Martineau 45018eb200bdSMat Martineau l2cap_send_cmd(chan->conn, ident, L2CAP_MOVE_CHAN_REQ, sizeof(req), 45028eb200bdSMat Martineau &req); 45038eb200bdSMat Martineau 45048eb200bdSMat Martineau __set_chan_timer(chan, L2CAP_MOVE_TIMEOUT); 45058eb200bdSMat Martineau } 45068eb200bdSMat Martineau 45071500109bSMat Martineau static void l2cap_send_move_chan_rsp(struct l2cap_chan *chan, u16 result) 45088d5a04a1SMat Martineau { 45098d5a04a1SMat Martineau struct l2cap_move_chan_rsp rsp; 45108d5a04a1SMat Martineau 45111500109bSMat Martineau BT_DBG("chan %p, result 0x%4.4x", chan, result); 45128d5a04a1SMat Martineau 45131500109bSMat Martineau rsp.icid = cpu_to_le16(chan->dcid); 45148d5a04a1SMat Martineau rsp.result = cpu_to_le16(result); 45158d5a04a1SMat Martineau 45161500109bSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_MOVE_CHAN_RSP, 45171500109bSMat Martineau sizeof(rsp), &rsp); 45188d5a04a1SMat Martineau } 45198d5a04a1SMat Martineau 45205b155ef9SMat Martineau static void l2cap_send_move_chan_cfm(struct l2cap_chan *chan, u16 result) 45218d5a04a1SMat Martineau { 45228d5a04a1SMat Martineau struct l2cap_move_chan_cfm cfm; 45238d5a04a1SMat Martineau 45245b155ef9SMat Martineau BT_DBG("chan %p, result 0x%4.4x", chan, result); 45258d5a04a1SMat Martineau 45265b155ef9SMat Martineau chan->ident = l2cap_get_ident(chan->conn); 45278d5a04a1SMat Martineau 45285b155ef9SMat Martineau cfm.icid = cpu_to_le16(chan->scid); 45298d5a04a1SMat Martineau cfm.result = cpu_to_le16(result); 45308d5a04a1SMat Martineau 45315b155ef9SMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_MOVE_CHAN_CFM, 45325b155ef9SMat Martineau sizeof(cfm), &cfm); 45335b155ef9SMat Martineau 45345b155ef9SMat Martineau __set_chan_timer(chan, L2CAP_MOVE_TIMEOUT); 45355b155ef9SMat Martineau } 45365b155ef9SMat Martineau 45375b155ef9SMat Martineau static void l2cap_send_move_chan_cfm_icid(struct l2cap_conn *conn, u16 icid) 45385b155ef9SMat Martineau { 45395b155ef9SMat Martineau struct l2cap_move_chan_cfm cfm; 45405b155ef9SMat Martineau 45415b155ef9SMat Martineau BT_DBG("conn %p, icid 0x%4.4x", conn, icid); 45425b155ef9SMat Martineau 45435b155ef9SMat Martineau cfm.icid = cpu_to_le16(icid); 45445b155ef9SMat Martineau cfm.result = __constant_cpu_to_le16(L2CAP_MC_UNCONFIRMED); 45455b155ef9SMat Martineau 45465b155ef9SMat Martineau l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_MOVE_CHAN_CFM, 45475b155ef9SMat Martineau sizeof(cfm), &cfm); 45488d5a04a1SMat Martineau } 45498d5a04a1SMat Martineau 45508d5a04a1SMat Martineau static void l2cap_send_move_chan_cfm_rsp(struct l2cap_conn *conn, u8 ident, 45518d5a04a1SMat Martineau u16 icid) 45528d5a04a1SMat Martineau { 45538d5a04a1SMat Martineau struct l2cap_move_chan_cfm_rsp rsp; 45548d5a04a1SMat Martineau 4555ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x", icid); 45568d5a04a1SMat Martineau 45578d5a04a1SMat Martineau rsp.icid = cpu_to_le16(icid); 45588d5a04a1SMat Martineau l2cap_send_cmd(conn, ident, L2CAP_MOVE_CHAN_CFM_RSP, sizeof(rsp), &rsp); 45598d5a04a1SMat Martineau } 45608d5a04a1SMat Martineau 45615f3847a4SMat Martineau static void __release_logical_link(struct l2cap_chan *chan) 45625f3847a4SMat Martineau { 45635f3847a4SMat Martineau chan->hs_hchan = NULL; 45645f3847a4SMat Martineau chan->hs_hcon = NULL; 45655f3847a4SMat Martineau 45665f3847a4SMat Martineau /* Placeholder - release the logical link */ 45675f3847a4SMat Martineau } 45685f3847a4SMat Martineau 45691500109bSMat Martineau static void l2cap_logical_fail(struct l2cap_chan *chan) 45701500109bSMat Martineau { 45711500109bSMat Martineau /* Logical link setup failed */ 45721500109bSMat Martineau if (chan->state != BT_CONNECTED) { 45731500109bSMat Martineau /* Create channel failure, disconnect */ 45745e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 45751500109bSMat Martineau return; 45761500109bSMat Martineau } 45771500109bSMat Martineau 45781500109bSMat Martineau switch (chan->move_role) { 45791500109bSMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 45801500109bSMat Martineau l2cap_move_done(chan); 45811500109bSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_NOT_SUPP); 45821500109bSMat Martineau break; 45831500109bSMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 45841500109bSMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_LOGICAL_COMP || 45851500109bSMat Martineau chan->move_state == L2CAP_MOVE_WAIT_LOGICAL_CFM) { 45861500109bSMat Martineau /* Remote has only sent pending or 45871500109bSMat Martineau * success responses, clean up 45881500109bSMat Martineau */ 45891500109bSMat Martineau l2cap_move_done(chan); 45901500109bSMat Martineau } 45911500109bSMat Martineau 45921500109bSMat Martineau /* Other amp move states imply that the move 45931500109bSMat Martineau * has already aborted 45941500109bSMat Martineau */ 45951500109bSMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 45961500109bSMat Martineau break; 45971500109bSMat Martineau } 45981500109bSMat Martineau } 45991500109bSMat Martineau 46001500109bSMat Martineau static void l2cap_logical_finish_create(struct l2cap_chan *chan, 46011500109bSMat Martineau struct hci_chan *hchan) 46021500109bSMat Martineau { 46031500109bSMat Martineau struct l2cap_conf_rsp rsp; 46041500109bSMat Martineau 4605336178a3SAndrei Emeltchenko chan->hs_hchan = hchan; 46061500109bSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 46071500109bSMat Martineau 460835ba9561SAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, &rsp, chan->ident, 0); 46091500109bSMat Martineau 46101500109bSMat Martineau if (test_bit(CONF_INPUT_DONE, &chan->conf_state)) { 4611fe79c6feSAndrei Emeltchenko int err; 46121500109bSMat Martineau 46131500109bSMat Martineau set_default_fcs(chan); 46141500109bSMat Martineau 46151500109bSMat Martineau err = l2cap_ertm_init(chan); 46161500109bSMat Martineau if (err < 0) 46175e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 46181500109bSMat Martineau else 46191500109bSMat Martineau l2cap_chan_ready(chan); 46201500109bSMat Martineau } 46211500109bSMat Martineau } 46221500109bSMat Martineau 46231500109bSMat Martineau static void l2cap_logical_finish_move(struct l2cap_chan *chan, 46241500109bSMat Martineau struct hci_chan *hchan) 46251500109bSMat Martineau { 46261500109bSMat Martineau chan->hs_hcon = hchan->conn; 46271500109bSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 46281500109bSMat Martineau 46291500109bSMat Martineau BT_DBG("move_state %d", chan->move_state); 46301500109bSMat Martineau 46311500109bSMat Martineau switch (chan->move_state) { 46321500109bSMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_COMP: 46331500109bSMat Martineau /* Move confirm will be sent after a success 46341500109bSMat Martineau * response is received 46351500109bSMat Martineau */ 46361500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 46371500109bSMat Martineau break; 46381500109bSMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_CFM: 46391500109bSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 46401500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 46411500109bSMat Martineau } else if (chan->move_role == L2CAP_MOVE_ROLE_INITIATOR) { 46421500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM_RSP; 46431500109bSMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 46441500109bSMat Martineau } else if (chan->move_role == L2CAP_MOVE_ROLE_RESPONDER) { 46451500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 46461500109bSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_SUCCESS); 46471500109bSMat Martineau } 46481500109bSMat Martineau break; 46491500109bSMat Martineau default: 46501500109bSMat Martineau /* Move was not in expected state, free the channel */ 46511500109bSMat Martineau __release_logical_link(chan); 46521500109bSMat Martineau 46531500109bSMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 46541500109bSMat Martineau } 46551500109bSMat Martineau } 46561500109bSMat Martineau 46571500109bSMat Martineau /* Call with chan locked */ 465827695fb4SAndrei Emeltchenko void l2cap_logical_cfm(struct l2cap_chan *chan, struct hci_chan *hchan, 46595b155ef9SMat Martineau u8 status) 46605b155ef9SMat Martineau { 46611500109bSMat Martineau BT_DBG("chan %p, hchan %p, status %d", chan, hchan, status); 46621500109bSMat Martineau 46631500109bSMat Martineau if (status) { 46641500109bSMat Martineau l2cap_logical_fail(chan); 46651500109bSMat Martineau __release_logical_link(chan); 46665b155ef9SMat Martineau return; 46675b155ef9SMat Martineau } 46685b155ef9SMat Martineau 46691500109bSMat Martineau if (chan->state != BT_CONNECTED) { 46701500109bSMat Martineau /* Ignore logical link if channel is on BR/EDR */ 46716ed971caSMarcel Holtmann if (chan->local_amp_id != AMP_ID_BREDR) 46721500109bSMat Martineau l2cap_logical_finish_create(chan, hchan); 46731500109bSMat Martineau } else { 46741500109bSMat Martineau l2cap_logical_finish_move(chan, hchan); 46751500109bSMat Martineau } 46761500109bSMat Martineau } 46771500109bSMat Martineau 46783f7a56c4SMat Martineau void l2cap_move_start(struct l2cap_chan *chan) 46793f7a56c4SMat Martineau { 46803f7a56c4SMat Martineau BT_DBG("chan %p", chan); 46813f7a56c4SMat Martineau 46826ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR) { 46833f7a56c4SMat Martineau if (chan->chan_policy != BT_CHANNEL_POLICY_AMP_PREFERRED) 46843f7a56c4SMat Martineau return; 46853f7a56c4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_INITIATOR; 46863f7a56c4SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_PREPARE; 46873f7a56c4SMat Martineau /* Placeholder - start physical link setup */ 46883f7a56c4SMat Martineau } else { 46893f7a56c4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_INITIATOR; 46903f7a56c4SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 46913f7a56c4SMat Martineau chan->move_id = 0; 46923f7a56c4SMat Martineau l2cap_move_setup(chan); 46933f7a56c4SMat Martineau l2cap_send_move_chan_req(chan, 0); 46943f7a56c4SMat Martineau } 46953f7a56c4SMat Martineau } 46963f7a56c4SMat Martineau 46978eb200bdSMat Martineau static void l2cap_do_create(struct l2cap_chan *chan, int result, 46988eb200bdSMat Martineau u8 local_amp_id, u8 remote_amp_id) 46998eb200bdSMat Martineau { 470062748ca1SAndrei Emeltchenko BT_DBG("chan %p state %s %u -> %u", chan, state_to_string(chan->state), 470162748ca1SAndrei Emeltchenko local_amp_id, remote_amp_id); 470262748ca1SAndrei Emeltchenko 470312d6cc60SAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 470412d6cc60SAndrei Emeltchenko 470562748ca1SAndrei Emeltchenko /* Outgoing channel on AMP */ 470662748ca1SAndrei Emeltchenko if (chan->state == BT_CONNECT) { 470762748ca1SAndrei Emeltchenko if (result == L2CAP_CR_SUCCESS) { 470862748ca1SAndrei Emeltchenko chan->local_amp_id = local_amp_id; 470962748ca1SAndrei Emeltchenko l2cap_send_create_chan_req(chan, remote_amp_id); 471062748ca1SAndrei Emeltchenko } else { 471162748ca1SAndrei Emeltchenko /* Revert to BR/EDR connect */ 471262748ca1SAndrei Emeltchenko l2cap_send_conn_req(chan); 471362748ca1SAndrei Emeltchenko } 471462748ca1SAndrei Emeltchenko 471562748ca1SAndrei Emeltchenko return; 471662748ca1SAndrei Emeltchenko } 471762748ca1SAndrei Emeltchenko 471862748ca1SAndrei Emeltchenko /* Incoming channel on AMP */ 471962748ca1SAndrei Emeltchenko if (__l2cap_no_conn_pending(chan)) { 47208eb200bdSMat Martineau struct l2cap_conn_rsp rsp; 47218eb200bdSMat Martineau char buf[128]; 47228eb200bdSMat Martineau rsp.scid = cpu_to_le16(chan->dcid); 47238eb200bdSMat Martineau rsp.dcid = cpu_to_le16(chan->scid); 47248eb200bdSMat Martineau 47258eb200bdSMat Martineau if (result == L2CAP_CR_SUCCESS) { 47268eb200bdSMat Martineau /* Send successful response */ 472762cd50e2SAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CR_SUCCESS); 472862cd50e2SAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_NO_INFO); 47298eb200bdSMat Martineau } else { 47308eb200bdSMat Martineau /* Send negative response */ 473162cd50e2SAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CR_NO_MEM); 473262cd50e2SAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_NO_INFO); 47338eb200bdSMat Martineau } 47348eb200bdSMat Martineau 47358eb200bdSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_CREATE_CHAN_RSP, 47368eb200bdSMat Martineau sizeof(rsp), &rsp); 47378eb200bdSMat Martineau 47388eb200bdSMat Martineau if (result == L2CAP_CR_SUCCESS) { 47398eb200bdSMat Martineau __l2cap_state_change(chan, BT_CONFIG); 47408eb200bdSMat Martineau set_bit(CONF_REQ_SENT, &chan->conf_state); 47418eb200bdSMat Martineau l2cap_send_cmd(chan->conn, l2cap_get_ident(chan->conn), 47428eb200bdSMat Martineau L2CAP_CONF_REQ, 47438eb200bdSMat Martineau l2cap_build_conf_req(chan, buf), buf); 47448eb200bdSMat Martineau chan->num_conf_req++; 47458eb200bdSMat Martineau } 47468eb200bdSMat Martineau } 47478eb200bdSMat Martineau } 47488eb200bdSMat Martineau 47498eb200bdSMat Martineau static void l2cap_do_move_initiate(struct l2cap_chan *chan, u8 local_amp_id, 47508eb200bdSMat Martineau u8 remote_amp_id) 47518eb200bdSMat Martineau { 47528eb200bdSMat Martineau l2cap_move_setup(chan); 47538eb200bdSMat Martineau chan->move_id = local_amp_id; 47548eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP; 47558eb200bdSMat Martineau 47568eb200bdSMat Martineau l2cap_send_move_chan_req(chan, remote_amp_id); 47578eb200bdSMat Martineau } 47588eb200bdSMat Martineau 47598eb200bdSMat Martineau static void l2cap_do_move_respond(struct l2cap_chan *chan, int result) 47608eb200bdSMat Martineau { 47618eb200bdSMat Martineau struct hci_chan *hchan = NULL; 47628eb200bdSMat Martineau 47638eb200bdSMat Martineau /* Placeholder - get hci_chan for logical link */ 47648eb200bdSMat Martineau 47658eb200bdSMat Martineau if (hchan) { 47668eb200bdSMat Martineau if (hchan->state == BT_CONNECTED) { 47678eb200bdSMat Martineau /* Logical link is ready to go */ 47688eb200bdSMat Martineau chan->hs_hcon = hchan->conn; 47698eb200bdSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 47708eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 47718eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_SUCCESS); 47728eb200bdSMat Martineau 47738eb200bdSMat Martineau l2cap_logical_cfm(chan, hchan, L2CAP_MR_SUCCESS); 47748eb200bdSMat Martineau } else { 47758eb200bdSMat Martineau /* Wait for logical link to be ready */ 47768eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 47778eb200bdSMat Martineau } 47788eb200bdSMat Martineau } else { 47798eb200bdSMat Martineau /* Logical link not available */ 47808eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_NOT_ALLOWED); 47818eb200bdSMat Martineau } 47828eb200bdSMat Martineau } 47838eb200bdSMat Martineau 47848eb200bdSMat Martineau static void l2cap_do_move_cancel(struct l2cap_chan *chan, int result) 47858eb200bdSMat Martineau { 47868eb200bdSMat Martineau if (chan->move_role == L2CAP_MOVE_ROLE_RESPONDER) { 47878eb200bdSMat Martineau u8 rsp_result; 47888eb200bdSMat Martineau if (result == -EINVAL) 47898eb200bdSMat Martineau rsp_result = L2CAP_MR_BAD_ID; 47908eb200bdSMat Martineau else 47918eb200bdSMat Martineau rsp_result = L2CAP_MR_NOT_ALLOWED; 47928eb200bdSMat Martineau 47938eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, rsp_result); 47948eb200bdSMat Martineau } 47958eb200bdSMat Martineau 47968eb200bdSMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 47978eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 47988eb200bdSMat Martineau 47998eb200bdSMat Martineau /* Restart data transmission */ 48008eb200bdSMat Martineau l2cap_ertm_send(chan); 48018eb200bdSMat Martineau } 48028eb200bdSMat Martineau 4803a514b17fSAndrei Emeltchenko /* Invoke with locked chan */ 4804a514b17fSAndrei Emeltchenko void __l2cap_physical_cfm(struct l2cap_chan *chan, int result) 48058eb200bdSMat Martineau { 4806770bfefaSAndrei Emeltchenko u8 local_amp_id = chan->local_amp_id; 4807fffadc08SAndrei Emeltchenko u8 remote_amp_id = chan->remote_amp_id; 4808770bfefaSAndrei Emeltchenko 48098eb200bdSMat Martineau BT_DBG("chan %p, result %d, local_amp_id %d, remote_amp_id %d", 48108eb200bdSMat Martineau chan, result, local_amp_id, remote_amp_id); 48118eb200bdSMat Martineau 48128eb200bdSMat Martineau if (chan->state == BT_DISCONN || chan->state == BT_CLOSED) { 48138eb200bdSMat Martineau l2cap_chan_unlock(chan); 48148eb200bdSMat Martineau return; 48158eb200bdSMat Martineau } 48168eb200bdSMat Martineau 48178eb200bdSMat Martineau if (chan->state != BT_CONNECTED) { 48188eb200bdSMat Martineau l2cap_do_create(chan, result, local_amp_id, remote_amp_id); 48198eb200bdSMat Martineau } else if (result != L2CAP_MR_SUCCESS) { 48208eb200bdSMat Martineau l2cap_do_move_cancel(chan, result); 48218eb200bdSMat Martineau } else { 48228eb200bdSMat Martineau switch (chan->move_role) { 48238eb200bdSMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 48248eb200bdSMat Martineau l2cap_do_move_initiate(chan, local_amp_id, 48258eb200bdSMat Martineau remote_amp_id); 48268eb200bdSMat Martineau break; 48278eb200bdSMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 48288eb200bdSMat Martineau l2cap_do_move_respond(chan, result); 48298eb200bdSMat Martineau break; 48308eb200bdSMat Martineau default: 48318eb200bdSMat Martineau l2cap_do_move_cancel(chan, result); 48328eb200bdSMat Martineau break; 48338eb200bdSMat Martineau } 48348eb200bdSMat Martineau } 48358eb200bdSMat Martineau } 48368eb200bdSMat Martineau 48378d5a04a1SMat Martineau static inline int l2cap_move_channel_req(struct l2cap_conn *conn, 4838ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 4839ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 48408d5a04a1SMat Martineau { 48418d5a04a1SMat Martineau struct l2cap_move_chan_req *req = data; 48421500109bSMat Martineau struct l2cap_move_chan_rsp rsp; 484302b0fbb9SMat Martineau struct l2cap_chan *chan; 48448d5a04a1SMat Martineau u16 icid = 0; 48458d5a04a1SMat Martineau u16 result = L2CAP_MR_NOT_ALLOWED; 48468d5a04a1SMat Martineau 48478d5a04a1SMat Martineau if (cmd_len != sizeof(*req)) 48488d5a04a1SMat Martineau return -EPROTO; 48498d5a04a1SMat Martineau 48508d5a04a1SMat Martineau icid = le16_to_cpu(req->icid); 48518d5a04a1SMat Martineau 4852ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, dest_amp_id %d", icid, req->dest_amp_id); 48538d5a04a1SMat Martineau 4854848566b3SMarcel Holtmann if (!conn->hs_enabled) 48558d5a04a1SMat Martineau return -EINVAL; 48568d5a04a1SMat Martineau 485702b0fbb9SMat Martineau chan = l2cap_get_chan_by_dcid(conn, icid); 485802b0fbb9SMat Martineau if (!chan) { 48591500109bSMat Martineau rsp.icid = cpu_to_le16(icid); 48601500109bSMat Martineau rsp.result = __constant_cpu_to_le16(L2CAP_MR_NOT_ALLOWED); 48611500109bSMat Martineau l2cap_send_cmd(conn, cmd->ident, L2CAP_MOVE_CHAN_RSP, 48621500109bSMat Martineau sizeof(rsp), &rsp); 486302b0fbb9SMat Martineau return 0; 486402b0fbb9SMat Martineau } 486502b0fbb9SMat Martineau 48661500109bSMat Martineau chan->ident = cmd->ident; 48671500109bSMat Martineau 486802b0fbb9SMat Martineau if (chan->scid < L2CAP_CID_DYN_START || 486902b0fbb9SMat Martineau chan->chan_policy == BT_CHANNEL_POLICY_BREDR_ONLY || 487002b0fbb9SMat Martineau (chan->mode != L2CAP_MODE_ERTM && 487102b0fbb9SMat Martineau chan->mode != L2CAP_MODE_STREAMING)) { 487202b0fbb9SMat Martineau result = L2CAP_MR_NOT_ALLOWED; 487302b0fbb9SMat Martineau goto send_move_response; 487402b0fbb9SMat Martineau } 487502b0fbb9SMat Martineau 487602b0fbb9SMat Martineau if (chan->local_amp_id == req->dest_amp_id) { 487702b0fbb9SMat Martineau result = L2CAP_MR_SAME_ID; 487802b0fbb9SMat Martineau goto send_move_response; 487902b0fbb9SMat Martineau } 488002b0fbb9SMat Martineau 48816ed971caSMarcel Holtmann if (req->dest_amp_id != AMP_ID_BREDR) { 488202b0fbb9SMat Martineau struct hci_dev *hdev; 488302b0fbb9SMat Martineau hdev = hci_dev_get(req->dest_amp_id); 488402b0fbb9SMat Martineau if (!hdev || hdev->dev_type != HCI_AMP || 488502b0fbb9SMat Martineau !test_bit(HCI_UP, &hdev->flags)) { 488602b0fbb9SMat Martineau if (hdev) 488702b0fbb9SMat Martineau hci_dev_put(hdev); 488802b0fbb9SMat Martineau 488902b0fbb9SMat Martineau result = L2CAP_MR_BAD_ID; 489002b0fbb9SMat Martineau goto send_move_response; 489102b0fbb9SMat Martineau } 489202b0fbb9SMat Martineau hci_dev_put(hdev); 489302b0fbb9SMat Martineau } 489402b0fbb9SMat Martineau 489502b0fbb9SMat Martineau /* Detect a move collision. Only send a collision response 489602b0fbb9SMat Martineau * if this side has "lost", otherwise proceed with the move. 489702b0fbb9SMat Martineau * The winner has the larger bd_addr. 489802b0fbb9SMat Martineau */ 489902b0fbb9SMat Martineau if ((__chan_is_moving(chan) || 490002b0fbb9SMat Martineau chan->move_role != L2CAP_MOVE_ROLE_NONE) && 49016f59b904SMarcel Holtmann bacmp(&conn->hcon->src, &conn->hcon->dst) > 0) { 490202b0fbb9SMat Martineau result = L2CAP_MR_COLLISION; 490302b0fbb9SMat Martineau goto send_move_response; 490402b0fbb9SMat Martineau } 490502b0fbb9SMat Martineau 490602b0fbb9SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_RESPONDER; 490702b0fbb9SMat Martineau l2cap_move_setup(chan); 490802b0fbb9SMat Martineau chan->move_id = req->dest_amp_id; 490902b0fbb9SMat Martineau icid = chan->dcid; 491002b0fbb9SMat Martineau 49116ed971caSMarcel Holtmann if (req->dest_amp_id == AMP_ID_BREDR) { 491202b0fbb9SMat Martineau /* Moving to BR/EDR */ 491302b0fbb9SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 491402b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 491502b0fbb9SMat Martineau result = L2CAP_MR_PEND; 491602b0fbb9SMat Martineau } else { 491702b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 491802b0fbb9SMat Martineau result = L2CAP_MR_SUCCESS; 491902b0fbb9SMat Martineau } 492002b0fbb9SMat Martineau } else { 492102b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_PREPARE; 492202b0fbb9SMat Martineau /* Placeholder - uncomment when amp functions are available */ 492302b0fbb9SMat Martineau /*amp_accept_physical(chan, req->dest_amp_id);*/ 492402b0fbb9SMat Martineau result = L2CAP_MR_PEND; 492502b0fbb9SMat Martineau } 492602b0fbb9SMat Martineau 492702b0fbb9SMat Martineau send_move_response: 49281500109bSMat Martineau l2cap_send_move_chan_rsp(chan, result); 49298d5a04a1SMat Martineau 493002b0fbb9SMat Martineau l2cap_chan_unlock(chan); 493102b0fbb9SMat Martineau 49328d5a04a1SMat Martineau return 0; 49338d5a04a1SMat Martineau } 49348d5a04a1SMat Martineau 49355b155ef9SMat Martineau static void l2cap_move_continue(struct l2cap_conn *conn, u16 icid, u16 result) 49365b155ef9SMat Martineau { 49375b155ef9SMat Martineau struct l2cap_chan *chan; 49385b155ef9SMat Martineau struct hci_chan *hchan = NULL; 49395b155ef9SMat Martineau 49405b155ef9SMat Martineau chan = l2cap_get_chan_by_scid(conn, icid); 49415b155ef9SMat Martineau if (!chan) { 49425b155ef9SMat Martineau l2cap_send_move_chan_cfm_icid(conn, icid); 49435b155ef9SMat Martineau return; 49445b155ef9SMat Martineau } 49455b155ef9SMat Martineau 49465b155ef9SMat Martineau __clear_chan_timer(chan); 49475b155ef9SMat Martineau if (result == L2CAP_MR_PEND) 49485b155ef9SMat Martineau __set_chan_timer(chan, L2CAP_MOVE_ERTX_TIMEOUT); 49495b155ef9SMat Martineau 49505b155ef9SMat Martineau switch (chan->move_state) { 49515b155ef9SMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_COMP: 49525b155ef9SMat Martineau /* Move confirm will be sent when logical link 49535b155ef9SMat Martineau * is complete. 49545b155ef9SMat Martineau */ 49555b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 49565b155ef9SMat Martineau break; 49575b155ef9SMat Martineau case L2CAP_MOVE_WAIT_RSP_SUCCESS: 49585b155ef9SMat Martineau if (result == L2CAP_MR_PEND) { 49595b155ef9SMat Martineau break; 49605b155ef9SMat Martineau } else if (test_bit(CONN_LOCAL_BUSY, 49615b155ef9SMat Martineau &chan->conn_state)) { 49625b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 49635b155ef9SMat Martineau } else { 49645b155ef9SMat Martineau /* Logical link is up or moving to BR/EDR, 49655b155ef9SMat Martineau * proceed with move 49665b155ef9SMat Martineau */ 49675b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM_RSP; 49685b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 49695b155ef9SMat Martineau } 49705b155ef9SMat Martineau break; 49715b155ef9SMat Martineau case L2CAP_MOVE_WAIT_RSP: 49725b155ef9SMat Martineau /* Moving to AMP */ 49735b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS) { 49745b155ef9SMat Martineau /* Remote is ready, send confirm immediately 49755b155ef9SMat Martineau * after logical link is ready 49765b155ef9SMat Martineau */ 49775b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 49785b155ef9SMat Martineau } else { 49795b155ef9SMat Martineau /* Both logical link and move success 49805b155ef9SMat Martineau * are required to confirm 49815b155ef9SMat Martineau */ 49825b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_COMP; 49835b155ef9SMat Martineau } 49845b155ef9SMat Martineau 49855b155ef9SMat Martineau /* Placeholder - get hci_chan for logical link */ 49865b155ef9SMat Martineau if (!hchan) { 49875b155ef9SMat Martineau /* Logical link not available */ 49885b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 49895b155ef9SMat Martineau break; 49905b155ef9SMat Martineau } 49915b155ef9SMat Martineau 49925b155ef9SMat Martineau /* If the logical link is not yet connected, do not 49935b155ef9SMat Martineau * send confirmation. 49945b155ef9SMat Martineau */ 49955b155ef9SMat Martineau if (hchan->state != BT_CONNECTED) 49965b155ef9SMat Martineau break; 49975b155ef9SMat Martineau 49985b155ef9SMat Martineau /* Logical link is already ready to go */ 49995b155ef9SMat Martineau 50005b155ef9SMat Martineau chan->hs_hcon = hchan->conn; 50015b155ef9SMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 50025b155ef9SMat Martineau 50035b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS) { 50045b155ef9SMat Martineau /* Can confirm now */ 50055b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 50065b155ef9SMat Martineau } else { 50075b155ef9SMat Martineau /* Now only need move success 50085b155ef9SMat Martineau * to confirm 50095b155ef9SMat Martineau */ 50105b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 50115b155ef9SMat Martineau } 50125b155ef9SMat Martineau 50135b155ef9SMat Martineau l2cap_logical_cfm(chan, hchan, L2CAP_MR_SUCCESS); 50145b155ef9SMat Martineau break; 50155b155ef9SMat Martineau default: 50165b155ef9SMat Martineau /* Any other amp move state means the move failed. */ 50175b155ef9SMat Martineau chan->move_id = chan->local_amp_id; 50185b155ef9SMat Martineau l2cap_move_done(chan); 50195b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 50205b155ef9SMat Martineau } 50215b155ef9SMat Martineau 50225b155ef9SMat Martineau l2cap_chan_unlock(chan); 50235b155ef9SMat Martineau } 50245b155ef9SMat Martineau 50255b155ef9SMat Martineau static void l2cap_move_fail(struct l2cap_conn *conn, u8 ident, u16 icid, 50265b155ef9SMat Martineau u16 result) 50275b155ef9SMat Martineau { 50285b155ef9SMat Martineau struct l2cap_chan *chan; 50295b155ef9SMat Martineau 50305b155ef9SMat Martineau chan = l2cap_get_chan_by_ident(conn, ident); 50315b155ef9SMat Martineau if (!chan) { 50325b155ef9SMat Martineau /* Could not locate channel, icid is best guess */ 50335b155ef9SMat Martineau l2cap_send_move_chan_cfm_icid(conn, icid); 50345b155ef9SMat Martineau return; 50355b155ef9SMat Martineau } 50365b155ef9SMat Martineau 50375b155ef9SMat Martineau __clear_chan_timer(chan); 50385b155ef9SMat Martineau 50395b155ef9SMat Martineau if (chan->move_role == L2CAP_MOVE_ROLE_INITIATOR) { 50405b155ef9SMat Martineau if (result == L2CAP_MR_COLLISION) { 50415b155ef9SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_RESPONDER; 50425b155ef9SMat Martineau } else { 50435b155ef9SMat Martineau /* Cleanup - cancel move */ 50445b155ef9SMat Martineau chan->move_id = chan->local_amp_id; 50455b155ef9SMat Martineau l2cap_move_done(chan); 50465b155ef9SMat Martineau } 50475b155ef9SMat Martineau } 50485b155ef9SMat Martineau 50495b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 50505b155ef9SMat Martineau 50515b155ef9SMat Martineau l2cap_chan_unlock(chan); 50525b155ef9SMat Martineau } 50535b155ef9SMat Martineau 50545b155ef9SMat Martineau static int l2cap_move_channel_rsp(struct l2cap_conn *conn, 5055ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5056ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 50578d5a04a1SMat Martineau { 50588d5a04a1SMat Martineau struct l2cap_move_chan_rsp *rsp = data; 50598d5a04a1SMat Martineau u16 icid, result; 50608d5a04a1SMat Martineau 50618d5a04a1SMat Martineau if (cmd_len != sizeof(*rsp)) 50628d5a04a1SMat Martineau return -EPROTO; 50638d5a04a1SMat Martineau 50648d5a04a1SMat Martineau icid = le16_to_cpu(rsp->icid); 50658d5a04a1SMat Martineau result = le16_to_cpu(rsp->result); 50668d5a04a1SMat Martineau 5067ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, result 0x%4.4x", icid, result); 50688d5a04a1SMat Martineau 50695b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS || result == L2CAP_MR_PEND) 50705b155ef9SMat Martineau l2cap_move_continue(conn, icid, result); 50715b155ef9SMat Martineau else 50725b155ef9SMat Martineau l2cap_move_fail(conn, cmd->ident, icid, result); 50738d5a04a1SMat Martineau 50748d5a04a1SMat Martineau return 0; 50758d5a04a1SMat Martineau } 50768d5a04a1SMat Martineau 50775f3847a4SMat Martineau static int l2cap_move_channel_confirm(struct l2cap_conn *conn, 5078ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5079ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 50808d5a04a1SMat Martineau { 50818d5a04a1SMat Martineau struct l2cap_move_chan_cfm *cfm = data; 50825f3847a4SMat Martineau struct l2cap_chan *chan; 50838d5a04a1SMat Martineau u16 icid, result; 50848d5a04a1SMat Martineau 50858d5a04a1SMat Martineau if (cmd_len != sizeof(*cfm)) 50868d5a04a1SMat Martineau return -EPROTO; 50878d5a04a1SMat Martineau 50888d5a04a1SMat Martineau icid = le16_to_cpu(cfm->icid); 50898d5a04a1SMat Martineau result = le16_to_cpu(cfm->result); 50908d5a04a1SMat Martineau 5091ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, result 0x%4.4x", icid, result); 50928d5a04a1SMat Martineau 50935f3847a4SMat Martineau chan = l2cap_get_chan_by_dcid(conn, icid); 50945f3847a4SMat Martineau if (!chan) { 50955f3847a4SMat Martineau /* Spec requires a response even if the icid was not found */ 50968d5a04a1SMat Martineau l2cap_send_move_chan_cfm_rsp(conn, cmd->ident, icid); 50975f3847a4SMat Martineau return 0; 50985f3847a4SMat Martineau } 50995f3847a4SMat Martineau 51005f3847a4SMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_CONFIRM) { 51015f3847a4SMat Martineau if (result == L2CAP_MC_CONFIRMED) { 51025f3847a4SMat Martineau chan->local_amp_id = chan->move_id; 51036ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR) 51045f3847a4SMat Martineau __release_logical_link(chan); 51055f3847a4SMat Martineau } else { 51065f3847a4SMat Martineau chan->move_id = chan->local_amp_id; 51075f3847a4SMat Martineau } 51085f3847a4SMat Martineau 51095f3847a4SMat Martineau l2cap_move_done(chan); 51105f3847a4SMat Martineau } 51115f3847a4SMat Martineau 51125f3847a4SMat Martineau l2cap_send_move_chan_cfm_rsp(conn, cmd->ident, icid); 51135f3847a4SMat Martineau 51145f3847a4SMat Martineau l2cap_chan_unlock(chan); 51158d5a04a1SMat Martineau 51168d5a04a1SMat Martineau return 0; 51178d5a04a1SMat Martineau } 51188d5a04a1SMat Martineau 51198d5a04a1SMat Martineau static inline int l2cap_move_channel_confirm_rsp(struct l2cap_conn *conn, 5120ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5121ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 51228d5a04a1SMat Martineau { 51238d5a04a1SMat Martineau struct l2cap_move_chan_cfm_rsp *rsp = data; 51243fd71a0aSMat Martineau struct l2cap_chan *chan; 51258d5a04a1SMat Martineau u16 icid; 51268d5a04a1SMat Martineau 51278d5a04a1SMat Martineau if (cmd_len != sizeof(*rsp)) 51288d5a04a1SMat Martineau return -EPROTO; 51298d5a04a1SMat Martineau 51308d5a04a1SMat Martineau icid = le16_to_cpu(rsp->icid); 51318d5a04a1SMat Martineau 5132ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x", icid); 51338d5a04a1SMat Martineau 51343fd71a0aSMat Martineau chan = l2cap_get_chan_by_scid(conn, icid); 51353fd71a0aSMat Martineau if (!chan) 51363fd71a0aSMat Martineau return 0; 51373fd71a0aSMat Martineau 51383fd71a0aSMat Martineau __clear_chan_timer(chan); 51393fd71a0aSMat Martineau 51403fd71a0aSMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_CONFIRM_RSP) { 51413fd71a0aSMat Martineau chan->local_amp_id = chan->move_id; 51423fd71a0aSMat Martineau 51436ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR && chan->hs_hchan) 51443fd71a0aSMat Martineau __release_logical_link(chan); 51453fd71a0aSMat Martineau 51463fd71a0aSMat Martineau l2cap_move_done(chan); 51473fd71a0aSMat Martineau } 51483fd71a0aSMat Martineau 51493fd71a0aSMat Martineau l2cap_chan_unlock(chan); 51503fd71a0aSMat Martineau 51518d5a04a1SMat Martineau return 0; 51528d5a04a1SMat Martineau } 51538d5a04a1SMat Martineau 5154e2174ca4SGustavo F. Padovan static inline int l2cap_check_conn_param(u16 min, u16 max, u16 latency, 5155de73115aSClaudio Takahasi u16 to_multiplier) 5156de73115aSClaudio Takahasi { 5157de73115aSClaudio Takahasi u16 max_latency; 5158de73115aSClaudio Takahasi 5159de73115aSClaudio Takahasi if (min > max || min < 6 || max > 3200) 5160de73115aSClaudio Takahasi return -EINVAL; 5161de73115aSClaudio Takahasi 5162de73115aSClaudio Takahasi if (to_multiplier < 10 || to_multiplier > 3200) 5163de73115aSClaudio Takahasi return -EINVAL; 5164de73115aSClaudio Takahasi 5165de73115aSClaudio Takahasi if (max >= to_multiplier * 8) 5166de73115aSClaudio Takahasi return -EINVAL; 5167de73115aSClaudio Takahasi 5168de73115aSClaudio Takahasi max_latency = (to_multiplier * 8 / max) - 1; 5169de73115aSClaudio Takahasi if (latency > 499 || latency > max_latency) 5170de73115aSClaudio Takahasi return -EINVAL; 5171de73115aSClaudio Takahasi 5172de73115aSClaudio Takahasi return 0; 5173de73115aSClaudio Takahasi } 5174de73115aSClaudio Takahasi 5175de73115aSClaudio Takahasi static inline int l2cap_conn_param_update_req(struct l2cap_conn *conn, 51762d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, 51772d792818SGustavo Padovan u8 *data) 5178de73115aSClaudio Takahasi { 5179de73115aSClaudio Takahasi struct hci_conn *hcon = conn->hcon; 5180de73115aSClaudio Takahasi struct l2cap_conn_param_update_req *req; 5181de73115aSClaudio Takahasi struct l2cap_conn_param_update_rsp rsp; 5182de73115aSClaudio Takahasi u16 min, max, latency, to_multiplier, cmd_len; 51832ce603ebSClaudio Takahasi int err; 5184de73115aSClaudio Takahasi 5185de73115aSClaudio Takahasi if (!(hcon->link_mode & HCI_LM_MASTER)) 5186de73115aSClaudio Takahasi return -EINVAL; 5187de73115aSClaudio Takahasi 5188de73115aSClaudio Takahasi cmd_len = __le16_to_cpu(cmd->len); 5189de73115aSClaudio Takahasi if (cmd_len != sizeof(struct l2cap_conn_param_update_req)) 5190de73115aSClaudio Takahasi return -EPROTO; 5191de73115aSClaudio Takahasi 5192de73115aSClaudio Takahasi req = (struct l2cap_conn_param_update_req *) data; 5193de73115aSClaudio Takahasi min = __le16_to_cpu(req->min); 5194de73115aSClaudio Takahasi max = __le16_to_cpu(req->max); 5195de73115aSClaudio Takahasi latency = __le16_to_cpu(req->latency); 5196de73115aSClaudio Takahasi to_multiplier = __le16_to_cpu(req->to_multiplier); 5197de73115aSClaudio Takahasi 5198de73115aSClaudio Takahasi BT_DBG("min 0x%4.4x max 0x%4.4x latency: 0x%4.4x Timeout: 0x%4.4x", 5199de73115aSClaudio Takahasi min, max, latency, to_multiplier); 5200de73115aSClaudio Takahasi 5201de73115aSClaudio Takahasi memset(&rsp, 0, sizeof(rsp)); 52022ce603ebSClaudio Takahasi 52032ce603ebSClaudio Takahasi err = l2cap_check_conn_param(min, max, latency, to_multiplier); 52042ce603ebSClaudio Takahasi if (err) 5205ac73498cSAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CONN_PARAM_REJECTED); 5206de73115aSClaudio Takahasi else 5207ac73498cSAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CONN_PARAM_ACCEPTED); 5208de73115aSClaudio Takahasi 5209de73115aSClaudio Takahasi l2cap_send_cmd(conn, cmd->ident, L2CAP_CONN_PARAM_UPDATE_RSP, 5210de73115aSClaudio Takahasi sizeof(rsp), &rsp); 5211de73115aSClaudio Takahasi 52122ce603ebSClaudio Takahasi if (!err) 52132ce603ebSClaudio Takahasi hci_le_conn_update(hcon, min, max, latency, to_multiplier); 52142ce603ebSClaudio Takahasi 5215de73115aSClaudio Takahasi return 0; 5216de73115aSClaudio Takahasi } 5217de73115aSClaudio Takahasi 52183300d9a9SClaudio Takahasi static inline int l2cap_bredr_sig_cmd(struct l2cap_conn *conn, 52192d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, u16 cmd_len, 52202d792818SGustavo Padovan u8 *data) 52213300d9a9SClaudio Takahasi { 52223300d9a9SClaudio Takahasi int err = 0; 52233300d9a9SClaudio Takahasi 52243300d9a9SClaudio Takahasi switch (cmd->code) { 52253300d9a9SClaudio Takahasi case L2CAP_COMMAND_REJ: 5226cb3b3152SJohan Hedberg l2cap_command_rej(conn, cmd, cmd_len, data); 52273300d9a9SClaudio Takahasi break; 52283300d9a9SClaudio Takahasi 52293300d9a9SClaudio Takahasi case L2CAP_CONN_REQ: 5230cb3b3152SJohan Hedberg err = l2cap_connect_req(conn, cmd, cmd_len, data); 52313300d9a9SClaudio Takahasi break; 52323300d9a9SClaudio Takahasi 52333300d9a9SClaudio Takahasi case L2CAP_CONN_RSP: 5234f5a2598dSMat Martineau case L2CAP_CREATE_CHAN_RSP: 52359245e737SJohan Hedberg l2cap_connect_create_rsp(conn, cmd, cmd_len, data); 52363300d9a9SClaudio Takahasi break; 52373300d9a9SClaudio Takahasi 52383300d9a9SClaudio Takahasi case L2CAP_CONF_REQ: 52393300d9a9SClaudio Takahasi err = l2cap_config_req(conn, cmd, cmd_len, data); 52403300d9a9SClaudio Takahasi break; 52413300d9a9SClaudio Takahasi 52423300d9a9SClaudio Takahasi case L2CAP_CONF_RSP: 52439245e737SJohan Hedberg l2cap_config_rsp(conn, cmd, cmd_len, data); 52443300d9a9SClaudio Takahasi break; 52453300d9a9SClaudio Takahasi 52463300d9a9SClaudio Takahasi case L2CAP_DISCONN_REQ: 5247cb3b3152SJohan Hedberg err = l2cap_disconnect_req(conn, cmd, cmd_len, data); 52483300d9a9SClaudio Takahasi break; 52493300d9a9SClaudio Takahasi 52503300d9a9SClaudio Takahasi case L2CAP_DISCONN_RSP: 52519245e737SJohan Hedberg l2cap_disconnect_rsp(conn, cmd, cmd_len, data); 52523300d9a9SClaudio Takahasi break; 52533300d9a9SClaudio Takahasi 52543300d9a9SClaudio Takahasi case L2CAP_ECHO_REQ: 52553300d9a9SClaudio Takahasi l2cap_send_cmd(conn, cmd->ident, L2CAP_ECHO_RSP, cmd_len, data); 52563300d9a9SClaudio Takahasi break; 52573300d9a9SClaudio Takahasi 52583300d9a9SClaudio Takahasi case L2CAP_ECHO_RSP: 52593300d9a9SClaudio Takahasi break; 52603300d9a9SClaudio Takahasi 52613300d9a9SClaudio Takahasi case L2CAP_INFO_REQ: 5262cb3b3152SJohan Hedberg err = l2cap_information_req(conn, cmd, cmd_len, data); 52633300d9a9SClaudio Takahasi break; 52643300d9a9SClaudio Takahasi 52653300d9a9SClaudio Takahasi case L2CAP_INFO_RSP: 52669245e737SJohan Hedberg l2cap_information_rsp(conn, cmd, cmd_len, data); 52673300d9a9SClaudio Takahasi break; 52683300d9a9SClaudio Takahasi 5269f94ff6ffSMat Martineau case L2CAP_CREATE_CHAN_REQ: 5270f94ff6ffSMat Martineau err = l2cap_create_channel_req(conn, cmd, cmd_len, data); 5271f94ff6ffSMat Martineau break; 5272f94ff6ffSMat Martineau 52738d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_REQ: 52748d5a04a1SMat Martineau err = l2cap_move_channel_req(conn, cmd, cmd_len, data); 52758d5a04a1SMat Martineau break; 52768d5a04a1SMat Martineau 52778d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_RSP: 52789245e737SJohan Hedberg l2cap_move_channel_rsp(conn, cmd, cmd_len, data); 52798d5a04a1SMat Martineau break; 52808d5a04a1SMat Martineau 52818d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_CFM: 52828d5a04a1SMat Martineau err = l2cap_move_channel_confirm(conn, cmd, cmd_len, data); 52838d5a04a1SMat Martineau break; 52848d5a04a1SMat Martineau 52858d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_CFM_RSP: 52869245e737SJohan Hedberg l2cap_move_channel_confirm_rsp(conn, cmd, cmd_len, data); 52878d5a04a1SMat Martineau break; 52888d5a04a1SMat Martineau 52893300d9a9SClaudio Takahasi default: 52903300d9a9SClaudio Takahasi BT_ERR("Unknown BR/EDR signaling command 0x%2.2x", cmd->code); 52913300d9a9SClaudio Takahasi err = -EINVAL; 52923300d9a9SClaudio Takahasi break; 52933300d9a9SClaudio Takahasi } 52943300d9a9SClaudio Takahasi 52953300d9a9SClaudio Takahasi return err; 52963300d9a9SClaudio Takahasi } 52973300d9a9SClaudio Takahasi 52983300d9a9SClaudio Takahasi static inline int l2cap_le_sig_cmd(struct l2cap_conn *conn, 52993300d9a9SClaudio Takahasi struct l2cap_cmd_hdr *cmd, u8 *data) 53003300d9a9SClaudio Takahasi { 53013300d9a9SClaudio Takahasi switch (cmd->code) { 53023300d9a9SClaudio Takahasi case L2CAP_COMMAND_REJ: 53033300d9a9SClaudio Takahasi return 0; 53043300d9a9SClaudio Takahasi 53053300d9a9SClaudio Takahasi case L2CAP_CONN_PARAM_UPDATE_REQ: 5306de73115aSClaudio Takahasi return l2cap_conn_param_update_req(conn, cmd, data); 53073300d9a9SClaudio Takahasi 53083300d9a9SClaudio Takahasi case L2CAP_CONN_PARAM_UPDATE_RSP: 53093300d9a9SClaudio Takahasi return 0; 53103300d9a9SClaudio Takahasi 53113300d9a9SClaudio Takahasi default: 53123300d9a9SClaudio Takahasi BT_ERR("Unknown LE signaling command 0x%2.2x", cmd->code); 53133300d9a9SClaudio Takahasi return -EINVAL; 53143300d9a9SClaudio Takahasi } 53153300d9a9SClaudio Takahasi } 53163300d9a9SClaudio Takahasi 5317c5623556SJohan Hedberg static inline void l2cap_le_sig_channel(struct l2cap_conn *conn, 5318c5623556SJohan Hedberg struct sk_buff *skb) 5319c5623556SJohan Hedberg { 532069c4e4e8SJohan Hedberg struct hci_conn *hcon = conn->hcon; 53214f3e219dSMarcel Holtmann struct l2cap_cmd_hdr *cmd; 53224f3e219dSMarcel Holtmann u16 len; 5323c5623556SJohan Hedberg int err; 5324c5623556SJohan Hedberg 532569c4e4e8SJohan Hedberg if (hcon->type != LE_LINK) 53263b166295SMarcel Holtmann goto drop; 532769c4e4e8SJohan Hedberg 53284f3e219dSMarcel Holtmann if (skb->len < L2CAP_CMD_HDR_SIZE) 53294f3e219dSMarcel Holtmann goto drop; 5330c5623556SJohan Hedberg 53314f3e219dSMarcel Holtmann cmd = (void *) skb->data; 53324f3e219dSMarcel Holtmann skb_pull(skb, L2CAP_CMD_HDR_SIZE); 5333c5623556SJohan Hedberg 53344f3e219dSMarcel Holtmann len = le16_to_cpu(cmd->len); 5335c5623556SJohan Hedberg 53364f3e219dSMarcel Holtmann BT_DBG("code 0x%2.2x len %d id 0x%2.2x", cmd->code, len, cmd->ident); 53374f3e219dSMarcel Holtmann 53384f3e219dSMarcel Holtmann if (len != skb->len || !cmd->ident) { 5339c5623556SJohan Hedberg BT_DBG("corrupted command"); 53404f3e219dSMarcel Holtmann goto drop; 5341c5623556SJohan Hedberg } 5342c5623556SJohan Hedberg 53434f3e219dSMarcel Holtmann err = l2cap_le_sig_cmd(conn, cmd, skb->data); 5344c5623556SJohan Hedberg if (err) { 5345c5623556SJohan Hedberg struct l2cap_cmd_rej_unk rej; 5346c5623556SJohan Hedberg 5347c5623556SJohan Hedberg BT_ERR("Wrong link type (%d)", err); 5348c5623556SJohan Hedberg 5349a521149aSJohan Hedberg rej.reason = __constant_cpu_to_le16(L2CAP_REJ_NOT_UNDERSTOOD); 53504f3e219dSMarcel Holtmann l2cap_send_cmd(conn, cmd->ident, L2CAP_COMMAND_REJ, 5351c5623556SJohan Hedberg sizeof(rej), &rej); 5352c5623556SJohan Hedberg } 5353c5623556SJohan Hedberg 53543b166295SMarcel Holtmann drop: 5355c5623556SJohan Hedberg kfree_skb(skb); 5356c5623556SJohan Hedberg } 5357c5623556SJohan Hedberg 53583300d9a9SClaudio Takahasi static inline void l2cap_sig_channel(struct l2cap_conn *conn, 53593300d9a9SClaudio Takahasi struct sk_buff *skb) 53600a708f8fSGustavo F. Padovan { 536169c4e4e8SJohan Hedberg struct hci_conn *hcon = conn->hcon; 53620a708f8fSGustavo F. Padovan u8 *data = skb->data; 53630a708f8fSGustavo F. Padovan int len = skb->len; 53640a708f8fSGustavo F. Padovan struct l2cap_cmd_hdr cmd; 53653300d9a9SClaudio Takahasi int err; 53660a708f8fSGustavo F. Padovan 53670a708f8fSGustavo F. Padovan l2cap_raw_recv(conn, skb); 53680a708f8fSGustavo F. Padovan 536969c4e4e8SJohan Hedberg if (hcon->type != ACL_LINK) 53703b166295SMarcel Holtmann goto drop; 537169c4e4e8SJohan Hedberg 53720a708f8fSGustavo F. Padovan while (len >= L2CAP_CMD_HDR_SIZE) { 53730a708f8fSGustavo F. Padovan u16 cmd_len; 53740a708f8fSGustavo F. Padovan memcpy(&cmd, data, L2CAP_CMD_HDR_SIZE); 53750a708f8fSGustavo F. Padovan data += L2CAP_CMD_HDR_SIZE; 53760a708f8fSGustavo F. Padovan len -= L2CAP_CMD_HDR_SIZE; 53770a708f8fSGustavo F. Padovan 53780a708f8fSGustavo F. Padovan cmd_len = le16_to_cpu(cmd.len); 53790a708f8fSGustavo F. Padovan 53802d792818SGustavo Padovan BT_DBG("code 0x%2.2x len %d id 0x%2.2x", cmd.code, cmd_len, 53812d792818SGustavo Padovan cmd.ident); 53820a708f8fSGustavo F. Padovan 53830a708f8fSGustavo F. Padovan if (cmd_len > len || !cmd.ident) { 53840a708f8fSGustavo F. Padovan BT_DBG("corrupted command"); 53850a708f8fSGustavo F. Padovan break; 53860a708f8fSGustavo F. Padovan } 53870a708f8fSGustavo F. Padovan 53883300d9a9SClaudio Takahasi err = l2cap_bredr_sig_cmd(conn, &cmd, cmd_len, data); 53890a708f8fSGustavo F. Padovan if (err) { 5390e2fd318eSIlia Kolomisnky struct l2cap_cmd_rej_unk rej; 53912c6d1a2eSGustavo F. Padovan 53922c6d1a2eSGustavo F. Padovan BT_ERR("Wrong link type (%d)", err); 53930a708f8fSGustavo F. Padovan 5394a521149aSJohan Hedberg rej.reason = __constant_cpu_to_le16(L2CAP_REJ_NOT_UNDERSTOOD); 53952d792818SGustavo Padovan l2cap_send_cmd(conn, cmd.ident, L2CAP_COMMAND_REJ, 53962d792818SGustavo Padovan sizeof(rej), &rej); 53970a708f8fSGustavo F. Padovan } 53980a708f8fSGustavo F. Padovan 53990a708f8fSGustavo F. Padovan data += cmd_len; 54000a708f8fSGustavo F. Padovan len -= cmd_len; 54010a708f8fSGustavo F. Padovan } 54020a708f8fSGustavo F. Padovan 54033b166295SMarcel Holtmann drop: 54040a708f8fSGustavo F. Padovan kfree_skb(skb); 54050a708f8fSGustavo F. Padovan } 54060a708f8fSGustavo F. Padovan 540747d1ec61SGustavo F. Padovan static int l2cap_check_fcs(struct l2cap_chan *chan, struct sk_buff *skb) 54080a708f8fSGustavo F. Padovan { 54090a708f8fSGustavo F. Padovan u16 our_fcs, rcv_fcs; 5410e4ca6d98SAndrei Emeltchenko int hdr_size; 5411e4ca6d98SAndrei Emeltchenko 5412e4ca6d98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 5413e4ca6d98SAndrei Emeltchenko hdr_size = L2CAP_EXT_HDR_SIZE; 5414e4ca6d98SAndrei Emeltchenko else 5415e4ca6d98SAndrei Emeltchenko hdr_size = L2CAP_ENH_HDR_SIZE; 54160a708f8fSGustavo F. Padovan 541747d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 541803a51213SAndrei Emeltchenko skb_trim(skb, skb->len - L2CAP_FCS_SIZE); 54190a708f8fSGustavo F. Padovan rcv_fcs = get_unaligned_le16(skb->data + skb->len); 54200a708f8fSGustavo F. Padovan our_fcs = crc16(0, skb->data - hdr_size, skb->len + hdr_size); 54210a708f8fSGustavo F. Padovan 54220a708f8fSGustavo F. Padovan if (our_fcs != rcv_fcs) 54230a708f8fSGustavo F. Padovan return -EBADMSG; 54240a708f8fSGustavo F. Padovan } 54250a708f8fSGustavo F. Padovan return 0; 54260a708f8fSGustavo F. Padovan } 54270a708f8fSGustavo F. Padovan 54286ea00485SMat Martineau static void l2cap_send_i_or_rr_or_rnr(struct l2cap_chan *chan) 54290a708f8fSGustavo F. Padovan { 5430e31f7633SMat Martineau struct l2cap_ctrl control; 54310a708f8fSGustavo F. Padovan 5432e31f7633SMat Martineau BT_DBG("chan %p", chan); 54330a708f8fSGustavo F. Padovan 5434e31f7633SMat Martineau memset(&control, 0, sizeof(control)); 5435e31f7633SMat Martineau control.sframe = 1; 5436e31f7633SMat Martineau control.final = 1; 5437e31f7633SMat Martineau control.reqseq = chan->buffer_seq; 5438e31f7633SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 54390a708f8fSGustavo F. Padovan 5440e2ab4353SGustavo F. Padovan if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 5441e31f7633SMat Martineau control.super = L2CAP_SUPER_RNR; 5442e31f7633SMat Martineau l2cap_send_sframe(chan, &control); 54430a708f8fSGustavo F. Padovan } 54440a708f8fSGustavo F. Padovan 5445e31f7633SMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, &chan->conn_state) && 5446e31f7633SMat Martineau chan->unacked_frames > 0) 5447e31f7633SMat Martineau __set_retrans_timer(chan); 54480a708f8fSGustavo F. Padovan 5449e31f7633SMat Martineau /* Send pending iframes */ 5450525cd185SGustavo F. Padovan l2cap_ertm_send(chan); 54510a708f8fSGustavo F. Padovan 5452e2ab4353SGustavo F. Padovan if (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state) && 5453e31f7633SMat Martineau test_bit(CONN_SEND_FBIT, &chan->conn_state)) { 5454e31f7633SMat Martineau /* F-bit wasn't sent in an s-frame or i-frame yet, so 5455e31f7633SMat Martineau * send it now. 5456e31f7633SMat Martineau */ 5457e31f7633SMat Martineau control.super = L2CAP_SUPER_RR; 5458e31f7633SMat Martineau l2cap_send_sframe(chan, &control); 54590a708f8fSGustavo F. Padovan } 54600a708f8fSGustavo F. Padovan } 54610a708f8fSGustavo F. Padovan 54622d792818SGustavo Padovan static void append_skb_frag(struct sk_buff *skb, struct sk_buff *new_frag, 54632d792818SGustavo Padovan struct sk_buff **last_frag) 54640a708f8fSGustavo F. Padovan { 546584084a31SMat Martineau /* skb->len reflects data in skb as well as all fragments 546684084a31SMat Martineau * skb->data_len reflects only data in fragments 546784084a31SMat Martineau */ 546884084a31SMat Martineau if (!skb_has_frag_list(skb)) 546984084a31SMat Martineau skb_shinfo(skb)->frag_list = new_frag; 547084084a31SMat Martineau 547184084a31SMat Martineau new_frag->next = NULL; 547284084a31SMat Martineau 547384084a31SMat Martineau (*last_frag)->next = new_frag; 547484084a31SMat Martineau *last_frag = new_frag; 547584084a31SMat Martineau 547684084a31SMat Martineau skb->len += new_frag->len; 547784084a31SMat Martineau skb->data_len += new_frag->len; 547884084a31SMat Martineau skb->truesize += new_frag->truesize; 547984084a31SMat Martineau } 548084084a31SMat Martineau 54814b51dae9SMat Martineau static int l2cap_reassemble_sdu(struct l2cap_chan *chan, struct sk_buff *skb, 54824b51dae9SMat Martineau struct l2cap_ctrl *control) 548384084a31SMat Martineau { 548484084a31SMat Martineau int err = -EINVAL; 54850a708f8fSGustavo F. Padovan 54864b51dae9SMat Martineau switch (control->sar) { 54877e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_UNSEGMENTED: 548884084a31SMat Martineau if (chan->sdu) 548984084a31SMat Martineau break; 54900a708f8fSGustavo F. Padovan 549180b98027SGustavo Padovan err = chan->ops->recv(chan, skb); 549284084a31SMat Martineau break; 54930a708f8fSGustavo F. Padovan 54947e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_START: 549584084a31SMat Martineau if (chan->sdu) 549684084a31SMat Martineau break; 54970a708f8fSGustavo F. Padovan 54986f61fd47SGustavo F. Padovan chan->sdu_len = get_unaligned_le16(skb->data); 549903a51213SAndrei Emeltchenko skb_pull(skb, L2CAP_SDULEN_SIZE); 55000a708f8fSGustavo F. Padovan 550184084a31SMat Martineau if (chan->sdu_len > chan->imtu) { 550284084a31SMat Martineau err = -EMSGSIZE; 550384084a31SMat Martineau break; 550484084a31SMat Martineau } 55050a708f8fSGustavo F. Padovan 550684084a31SMat Martineau if (skb->len >= chan->sdu_len) 550784084a31SMat Martineau break; 550884084a31SMat Martineau 550984084a31SMat Martineau chan->sdu = skb; 551084084a31SMat Martineau chan->sdu_last_frag = skb; 551184084a31SMat Martineau 551284084a31SMat Martineau skb = NULL; 551384084a31SMat Martineau err = 0; 55140a708f8fSGustavo F. Padovan break; 55150a708f8fSGustavo F. Padovan 55167e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_CONTINUE: 55176f61fd47SGustavo F. Padovan if (!chan->sdu) 551884084a31SMat Martineau break; 55190a708f8fSGustavo F. Padovan 552084084a31SMat Martineau append_skb_frag(chan->sdu, skb, 552184084a31SMat Martineau &chan->sdu_last_frag); 552284084a31SMat Martineau skb = NULL; 55230a708f8fSGustavo F. Padovan 552484084a31SMat Martineau if (chan->sdu->len >= chan->sdu_len) 552584084a31SMat Martineau break; 55260a708f8fSGustavo F. Padovan 552784084a31SMat Martineau err = 0; 55280a708f8fSGustavo F. Padovan break; 55290a708f8fSGustavo F. Padovan 55307e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_END: 55316f61fd47SGustavo F. Padovan if (!chan->sdu) 553284084a31SMat Martineau break; 55330a708f8fSGustavo F. Padovan 553484084a31SMat Martineau append_skb_frag(chan->sdu, skb, 553584084a31SMat Martineau &chan->sdu_last_frag); 553684084a31SMat Martineau skb = NULL; 55370a708f8fSGustavo F. Padovan 553884084a31SMat Martineau if (chan->sdu->len != chan->sdu_len) 553984084a31SMat Martineau break; 55400a708f8fSGustavo F. Padovan 554180b98027SGustavo Padovan err = chan->ops->recv(chan, chan->sdu); 55420a708f8fSGustavo F. Padovan 554384084a31SMat Martineau if (!err) { 554484084a31SMat Martineau /* Reassembly complete */ 554584084a31SMat Martineau chan->sdu = NULL; 554684084a31SMat Martineau chan->sdu_last_frag = NULL; 554784084a31SMat Martineau chan->sdu_len = 0; 55480a708f8fSGustavo F. Padovan } 55490a708f8fSGustavo F. Padovan break; 55500a708f8fSGustavo F. Padovan } 55510a708f8fSGustavo F. Padovan 555284084a31SMat Martineau if (err) { 55530a708f8fSGustavo F. Padovan kfree_skb(skb); 55546f61fd47SGustavo F. Padovan kfree_skb(chan->sdu); 55556f61fd47SGustavo F. Padovan chan->sdu = NULL; 555684084a31SMat Martineau chan->sdu_last_frag = NULL; 555784084a31SMat Martineau chan->sdu_len = 0; 555884084a31SMat Martineau } 55590a708f8fSGustavo F. Padovan 556084084a31SMat Martineau return err; 55610a708f8fSGustavo F. Padovan } 55620a708f8fSGustavo F. Padovan 556332b32735SMat Martineau static int l2cap_resegment(struct l2cap_chan *chan) 556432b32735SMat Martineau { 556532b32735SMat Martineau /* Placeholder */ 556632b32735SMat Martineau return 0; 556732b32735SMat Martineau } 556832b32735SMat Martineau 5569e328140fSMat Martineau void l2cap_chan_busy(struct l2cap_chan *chan, int busy) 55700a708f8fSGustavo F. Padovan { 557161aa4f5bSMat Martineau u8 event; 557261aa4f5bSMat Martineau 557361aa4f5bSMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 557461aa4f5bSMat Martineau return; 557561aa4f5bSMat Martineau 557661aa4f5bSMat Martineau event = busy ? L2CAP_EV_LOCAL_BUSY_DETECTED : L2CAP_EV_LOCAL_BUSY_CLEAR; 5577401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, event); 55780a708f8fSGustavo F. Padovan } 55790a708f8fSGustavo F. Padovan 5580d2a7ac5dSMat Martineau static int l2cap_rx_queued_iframes(struct l2cap_chan *chan) 5581d2a7ac5dSMat Martineau { 558263838725SMat Martineau int err = 0; 558363838725SMat Martineau /* Pass sequential frames to l2cap_reassemble_sdu() 558463838725SMat Martineau * until a gap is encountered. 558563838725SMat Martineau */ 558663838725SMat Martineau 558763838725SMat Martineau BT_DBG("chan %p", chan); 558863838725SMat Martineau 558963838725SMat Martineau while (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 559063838725SMat Martineau struct sk_buff *skb; 559163838725SMat Martineau BT_DBG("Searching for skb with txseq %d (queue len %d)", 559263838725SMat Martineau chan->buffer_seq, skb_queue_len(&chan->srej_q)); 559363838725SMat Martineau 559463838725SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->srej_q, chan->buffer_seq); 559563838725SMat Martineau 559663838725SMat Martineau if (!skb) 559763838725SMat Martineau break; 559863838725SMat Martineau 559963838725SMat Martineau skb_unlink(skb, &chan->srej_q); 560063838725SMat Martineau chan->buffer_seq = __next_seq(chan, chan->buffer_seq); 560163838725SMat Martineau err = l2cap_reassemble_sdu(chan, skb, &bt_cb(skb)->control); 560263838725SMat Martineau if (err) 560363838725SMat Martineau break; 560463838725SMat Martineau } 560563838725SMat Martineau 560663838725SMat Martineau if (skb_queue_empty(&chan->srej_q)) { 560763838725SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 560863838725SMat Martineau l2cap_send_ack(chan); 560963838725SMat Martineau } 561063838725SMat Martineau 561163838725SMat Martineau return err; 5612d2a7ac5dSMat Martineau } 5613d2a7ac5dSMat Martineau 5614d2a7ac5dSMat Martineau static void l2cap_handle_srej(struct l2cap_chan *chan, 5615d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 5616d2a7ac5dSMat Martineau { 5617f80842a8SMat Martineau struct sk_buff *skb; 5618f80842a8SMat Martineau 5619f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 5620f80842a8SMat Martineau 5621f80842a8SMat Martineau if (control->reqseq == chan->next_tx_seq) { 5622f80842a8SMat Martineau BT_DBG("Invalid reqseq %d, disconnecting", control->reqseq); 56235e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5624f80842a8SMat Martineau return; 5625f80842a8SMat Martineau } 5626f80842a8SMat Martineau 5627f80842a8SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, control->reqseq); 5628f80842a8SMat Martineau 5629f80842a8SMat Martineau if (skb == NULL) { 5630f80842a8SMat Martineau BT_DBG("Seq %d not available for retransmission", 5631f80842a8SMat Martineau control->reqseq); 5632f80842a8SMat Martineau return; 5633f80842a8SMat Martineau } 5634f80842a8SMat Martineau 5635f80842a8SMat Martineau if (chan->max_tx != 0 && bt_cb(skb)->control.retries >= chan->max_tx) { 5636f80842a8SMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 56375e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5638f80842a8SMat Martineau return; 5639f80842a8SMat Martineau } 5640f80842a8SMat Martineau 5641f80842a8SMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 5642f80842a8SMat Martineau 5643f80842a8SMat Martineau if (control->poll) { 5644f80842a8SMat Martineau l2cap_pass_to_tx(chan, control); 5645f80842a8SMat Martineau 5646f80842a8SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 5647f80842a8SMat Martineau l2cap_retransmit(chan, control); 5648f80842a8SMat Martineau l2cap_ertm_send(chan); 5649f80842a8SMat Martineau 5650f80842a8SMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) { 5651f80842a8SMat Martineau set_bit(CONN_SREJ_ACT, &chan->conn_state); 5652f80842a8SMat Martineau chan->srej_save_reqseq = control->reqseq; 5653f80842a8SMat Martineau } 5654f80842a8SMat Martineau } else { 5655f80842a8SMat Martineau l2cap_pass_to_tx_fbit(chan, control); 5656f80842a8SMat Martineau 5657f80842a8SMat Martineau if (control->final) { 5658f80842a8SMat Martineau if (chan->srej_save_reqseq != control->reqseq || 5659f80842a8SMat Martineau !test_and_clear_bit(CONN_SREJ_ACT, 5660f80842a8SMat Martineau &chan->conn_state)) 5661f80842a8SMat Martineau l2cap_retransmit(chan, control); 5662f80842a8SMat Martineau } else { 5663f80842a8SMat Martineau l2cap_retransmit(chan, control); 5664f80842a8SMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) { 5665f80842a8SMat Martineau set_bit(CONN_SREJ_ACT, &chan->conn_state); 5666f80842a8SMat Martineau chan->srej_save_reqseq = control->reqseq; 5667f80842a8SMat Martineau } 5668f80842a8SMat Martineau } 5669f80842a8SMat Martineau } 5670d2a7ac5dSMat Martineau } 5671d2a7ac5dSMat Martineau 5672d2a7ac5dSMat Martineau static void l2cap_handle_rej(struct l2cap_chan *chan, 5673d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 5674d2a7ac5dSMat Martineau { 5675fcd289dfSMat Martineau struct sk_buff *skb; 5676fcd289dfSMat Martineau 5677fcd289dfSMat Martineau BT_DBG("chan %p, control %p", chan, control); 5678fcd289dfSMat Martineau 5679fcd289dfSMat Martineau if (control->reqseq == chan->next_tx_seq) { 5680fcd289dfSMat Martineau BT_DBG("Invalid reqseq %d, disconnecting", control->reqseq); 56815e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5682fcd289dfSMat Martineau return; 5683fcd289dfSMat Martineau } 5684fcd289dfSMat Martineau 5685fcd289dfSMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, control->reqseq); 5686fcd289dfSMat Martineau 5687fcd289dfSMat Martineau if (chan->max_tx && skb && 5688fcd289dfSMat Martineau bt_cb(skb)->control.retries >= chan->max_tx) { 5689fcd289dfSMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 56905e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5691fcd289dfSMat Martineau return; 5692fcd289dfSMat Martineau } 5693fcd289dfSMat Martineau 5694fcd289dfSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 5695fcd289dfSMat Martineau 5696fcd289dfSMat Martineau l2cap_pass_to_tx(chan, control); 5697fcd289dfSMat Martineau 5698fcd289dfSMat Martineau if (control->final) { 5699fcd289dfSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, &chan->conn_state)) 5700fcd289dfSMat Martineau l2cap_retransmit_all(chan, control); 5701fcd289dfSMat Martineau } else { 5702fcd289dfSMat Martineau l2cap_retransmit_all(chan, control); 5703fcd289dfSMat Martineau l2cap_ertm_send(chan); 5704fcd289dfSMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) 5705fcd289dfSMat Martineau set_bit(CONN_REJ_ACT, &chan->conn_state); 5706fcd289dfSMat Martineau } 5707d2a7ac5dSMat Martineau } 5708d2a7ac5dSMat Martineau 57094b51dae9SMat Martineau static u8 l2cap_classify_txseq(struct l2cap_chan *chan, u16 txseq) 57104b51dae9SMat Martineau { 57114b51dae9SMat Martineau BT_DBG("chan %p, txseq %d", chan, txseq); 57124b51dae9SMat Martineau 57134b51dae9SMat Martineau BT_DBG("last_acked_seq %d, expected_tx_seq %d", chan->last_acked_seq, 57144b51dae9SMat Martineau chan->expected_tx_seq); 57154b51dae9SMat Martineau 57164b51dae9SMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 57174b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= 57184b51dae9SMat Martineau chan->tx_win) { 57194b51dae9SMat Martineau /* See notes below regarding "double poll" and 57204b51dae9SMat Martineau * invalid packets. 57214b51dae9SMat Martineau */ 57224b51dae9SMat Martineau if (chan->tx_win <= ((chan->tx_win_max + 1) >> 1)) { 57234b51dae9SMat Martineau BT_DBG("Invalid/Ignore - after SREJ"); 57244b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID_IGNORE; 57254b51dae9SMat Martineau } else { 57264b51dae9SMat Martineau BT_DBG("Invalid - in window after SREJ sent"); 57274b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 57284b51dae9SMat Martineau } 57294b51dae9SMat Martineau } 57304b51dae9SMat Martineau 57314b51dae9SMat Martineau if (chan->srej_list.head == txseq) { 57324b51dae9SMat Martineau BT_DBG("Expected SREJ"); 57334b51dae9SMat Martineau return L2CAP_TXSEQ_EXPECTED_SREJ; 57344b51dae9SMat Martineau } 57354b51dae9SMat Martineau 57364b51dae9SMat Martineau if (l2cap_ertm_seq_in_queue(&chan->srej_q, txseq)) { 57374b51dae9SMat Martineau BT_DBG("Duplicate SREJ - txseq already stored"); 57384b51dae9SMat Martineau return L2CAP_TXSEQ_DUPLICATE_SREJ; 57394b51dae9SMat Martineau } 57404b51dae9SMat Martineau 57414b51dae9SMat Martineau if (l2cap_seq_list_contains(&chan->srej_list, txseq)) { 57424b51dae9SMat Martineau BT_DBG("Unexpected SREJ - not requested"); 57434b51dae9SMat Martineau return L2CAP_TXSEQ_UNEXPECTED_SREJ; 57444b51dae9SMat Martineau } 57454b51dae9SMat Martineau } 57464b51dae9SMat Martineau 57474b51dae9SMat Martineau if (chan->expected_tx_seq == txseq) { 57484b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= 57494b51dae9SMat Martineau chan->tx_win) { 57504b51dae9SMat Martineau BT_DBG("Invalid - txseq outside tx window"); 57514b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 57524b51dae9SMat Martineau } else { 57534b51dae9SMat Martineau BT_DBG("Expected"); 57544b51dae9SMat Martineau return L2CAP_TXSEQ_EXPECTED; 57554b51dae9SMat Martineau } 57564b51dae9SMat Martineau } 57574b51dae9SMat Martineau 57584b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) < 57592d792818SGustavo Padovan __seq_offset(chan, chan->expected_tx_seq, chan->last_acked_seq)) { 57604b51dae9SMat Martineau BT_DBG("Duplicate - expected_tx_seq later than txseq"); 57614b51dae9SMat Martineau return L2CAP_TXSEQ_DUPLICATE; 57624b51dae9SMat Martineau } 57634b51dae9SMat Martineau 57644b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= chan->tx_win) { 57654b51dae9SMat Martineau /* A source of invalid packets is a "double poll" condition, 57664b51dae9SMat Martineau * where delays cause us to send multiple poll packets. If 57674b51dae9SMat Martineau * the remote stack receives and processes both polls, 57684b51dae9SMat Martineau * sequence numbers can wrap around in such a way that a 57694b51dae9SMat Martineau * resent frame has a sequence number that looks like new data 57704b51dae9SMat Martineau * with a sequence gap. This would trigger an erroneous SREJ 57714b51dae9SMat Martineau * request. 57724b51dae9SMat Martineau * 57734b51dae9SMat Martineau * Fortunately, this is impossible with a tx window that's 57744b51dae9SMat Martineau * less than half of the maximum sequence number, which allows 57754b51dae9SMat Martineau * invalid frames to be safely ignored. 57764b51dae9SMat Martineau * 57774b51dae9SMat Martineau * With tx window sizes greater than half of the tx window 57784b51dae9SMat Martineau * maximum, the frame is invalid and cannot be ignored. This 57794b51dae9SMat Martineau * causes a disconnect. 57804b51dae9SMat Martineau */ 57814b51dae9SMat Martineau 57824b51dae9SMat Martineau if (chan->tx_win <= ((chan->tx_win_max + 1) >> 1)) { 57834b51dae9SMat Martineau BT_DBG("Invalid/Ignore - txseq outside tx window"); 57844b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID_IGNORE; 57854b51dae9SMat Martineau } else { 57864b51dae9SMat Martineau BT_DBG("Invalid - txseq outside tx window"); 57874b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 57884b51dae9SMat Martineau } 57894b51dae9SMat Martineau } else { 57904b51dae9SMat Martineau BT_DBG("Unexpected - txseq indicates missing frames"); 57914b51dae9SMat Martineau return L2CAP_TXSEQ_UNEXPECTED; 57924b51dae9SMat Martineau } 57934b51dae9SMat Martineau } 57944b51dae9SMat Martineau 5795d2a7ac5dSMat Martineau static int l2cap_rx_state_recv(struct l2cap_chan *chan, 5796d2a7ac5dSMat Martineau struct l2cap_ctrl *control, 5797d2a7ac5dSMat Martineau struct sk_buff *skb, u8 event) 5798d2a7ac5dSMat Martineau { 5799d2a7ac5dSMat Martineau int err = 0; 5800941247f9SPeter Senna Tschudin bool skb_in_use = false; 5801d2a7ac5dSMat Martineau 5802d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 5803d2a7ac5dSMat Martineau event); 5804d2a7ac5dSMat Martineau 5805d2a7ac5dSMat Martineau switch (event) { 5806d2a7ac5dSMat Martineau case L2CAP_EV_RECV_IFRAME: 5807d2a7ac5dSMat Martineau switch (l2cap_classify_txseq(chan, control->txseq)) { 5808d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED: 5809d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 5810d2a7ac5dSMat Martineau 5811d2a7ac5dSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 5812d2a7ac5dSMat Martineau BT_DBG("Busy, discarding expected seq %d", 5813d2a7ac5dSMat Martineau control->txseq); 5814d2a7ac5dSMat Martineau break; 5815d2a7ac5dSMat Martineau } 5816d2a7ac5dSMat Martineau 5817d2a7ac5dSMat Martineau chan->expected_tx_seq = __next_seq(chan, 5818d2a7ac5dSMat Martineau control->txseq); 5819d2a7ac5dSMat Martineau 5820d2a7ac5dSMat Martineau chan->buffer_seq = chan->expected_tx_seq; 5821941247f9SPeter Senna Tschudin skb_in_use = true; 5822d2a7ac5dSMat Martineau 5823d2a7ac5dSMat Martineau err = l2cap_reassemble_sdu(chan, skb, control); 5824d2a7ac5dSMat Martineau if (err) 5825d2a7ac5dSMat Martineau break; 5826d2a7ac5dSMat Martineau 5827d2a7ac5dSMat Martineau if (control->final) { 5828d2a7ac5dSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, 5829d2a7ac5dSMat Martineau &chan->conn_state)) { 5830d2a7ac5dSMat Martineau control->final = 0; 5831d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 5832d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 5833d2a7ac5dSMat Martineau } 5834d2a7ac5dSMat Martineau } 5835d2a7ac5dSMat Martineau 5836d2a7ac5dSMat Martineau if (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) 5837d2a7ac5dSMat Martineau l2cap_send_ack(chan); 5838d2a7ac5dSMat Martineau break; 5839d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED: 5840d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 5841d2a7ac5dSMat Martineau 5842d2a7ac5dSMat Martineau /* Can't issue SREJ frames in the local busy state. 5843d2a7ac5dSMat Martineau * Drop this frame, it will be seen as missing 5844d2a7ac5dSMat Martineau * when local busy is exited. 5845d2a7ac5dSMat Martineau */ 5846d2a7ac5dSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 5847d2a7ac5dSMat Martineau BT_DBG("Busy, discarding unexpected seq %d", 5848d2a7ac5dSMat Martineau control->txseq); 5849d2a7ac5dSMat Martineau break; 5850d2a7ac5dSMat Martineau } 5851d2a7ac5dSMat Martineau 5852d2a7ac5dSMat Martineau /* There was a gap in the sequence, so an SREJ 5853d2a7ac5dSMat Martineau * must be sent for each missing frame. The 5854d2a7ac5dSMat Martineau * current frame is stored for later use. 5855d2a7ac5dSMat Martineau */ 5856d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 5857941247f9SPeter Senna Tschudin skb_in_use = true; 5858d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 5859d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 5860d2a7ac5dSMat Martineau 5861d2a7ac5dSMat Martineau clear_bit(CONN_SREJ_ACT, &chan->conn_state); 5862d2a7ac5dSMat Martineau l2cap_seq_list_clear(&chan->srej_list); 5863d2a7ac5dSMat Martineau l2cap_send_srej(chan, control->txseq); 5864d2a7ac5dSMat Martineau 5865d2a7ac5dSMat Martineau chan->rx_state = L2CAP_RX_STATE_SREJ_SENT; 5866d2a7ac5dSMat Martineau break; 5867d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE: 5868d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 5869d2a7ac5dSMat Martineau break; 5870d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID_IGNORE: 5871d2a7ac5dSMat Martineau break; 5872d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID: 5873d2a7ac5dSMat Martineau default: 58745e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5875d2a7ac5dSMat Martineau break; 5876d2a7ac5dSMat Martineau } 5877d2a7ac5dSMat Martineau break; 5878d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RR: 5879d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 5880d2a7ac5dSMat Martineau if (control->final) { 5881d2a7ac5dSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 5882d2a7ac5dSMat Martineau 5883e6a3ee6eSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, &chan->conn_state) && 5884e6a3ee6eSMat Martineau !__chan_is_moving(chan)) { 5885d2a7ac5dSMat Martineau control->final = 0; 5886d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 5887d2a7ac5dSMat Martineau } 5888d2a7ac5dSMat Martineau 5889d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 5890d2a7ac5dSMat Martineau } else if (control->poll) { 5891d2a7ac5dSMat Martineau l2cap_send_i_or_rr_or_rnr(chan); 5892d2a7ac5dSMat Martineau } else { 5893d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 5894d2a7ac5dSMat Martineau &chan->conn_state) && 5895d2a7ac5dSMat Martineau chan->unacked_frames) 5896d2a7ac5dSMat Martineau __set_retrans_timer(chan); 5897d2a7ac5dSMat Martineau 5898d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 5899d2a7ac5dSMat Martineau } 5900d2a7ac5dSMat Martineau break; 5901d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RNR: 5902d2a7ac5dSMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 5903d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 5904d2a7ac5dSMat Martineau if (control && control->poll) { 5905d2a7ac5dSMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 5906d2a7ac5dSMat Martineau l2cap_send_rr_or_rnr(chan, 0); 5907d2a7ac5dSMat Martineau } 5908d2a7ac5dSMat Martineau __clear_retrans_timer(chan); 5909d2a7ac5dSMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 5910d2a7ac5dSMat Martineau break; 5911d2a7ac5dSMat Martineau case L2CAP_EV_RECV_REJ: 5912d2a7ac5dSMat Martineau l2cap_handle_rej(chan, control); 5913d2a7ac5dSMat Martineau break; 5914d2a7ac5dSMat Martineau case L2CAP_EV_RECV_SREJ: 5915d2a7ac5dSMat Martineau l2cap_handle_srej(chan, control); 5916d2a7ac5dSMat Martineau break; 5917d2a7ac5dSMat Martineau default: 5918d2a7ac5dSMat Martineau break; 5919d2a7ac5dSMat Martineau } 5920d2a7ac5dSMat Martineau 5921d2a7ac5dSMat Martineau if (skb && !skb_in_use) { 5922d2a7ac5dSMat Martineau BT_DBG("Freeing %p", skb); 5923d2a7ac5dSMat Martineau kfree_skb(skb); 5924d2a7ac5dSMat Martineau } 5925d2a7ac5dSMat Martineau 5926d2a7ac5dSMat Martineau return err; 5927d2a7ac5dSMat Martineau } 5928d2a7ac5dSMat Martineau 5929d2a7ac5dSMat Martineau static int l2cap_rx_state_srej_sent(struct l2cap_chan *chan, 5930d2a7ac5dSMat Martineau struct l2cap_ctrl *control, 5931d2a7ac5dSMat Martineau struct sk_buff *skb, u8 event) 5932d2a7ac5dSMat Martineau { 5933d2a7ac5dSMat Martineau int err = 0; 5934d2a7ac5dSMat Martineau u16 txseq = control->txseq; 5935941247f9SPeter Senna Tschudin bool skb_in_use = false; 5936d2a7ac5dSMat Martineau 5937d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 5938d2a7ac5dSMat Martineau event); 5939d2a7ac5dSMat Martineau 5940d2a7ac5dSMat Martineau switch (event) { 5941d2a7ac5dSMat Martineau case L2CAP_EV_RECV_IFRAME: 5942d2a7ac5dSMat Martineau switch (l2cap_classify_txseq(chan, txseq)) { 5943d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED: 5944d2a7ac5dSMat Martineau /* Keep frame for reassembly later */ 5945d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 5946d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 5947941247f9SPeter Senna Tschudin skb_in_use = true; 5948d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 5949d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 5950d2a7ac5dSMat Martineau 5951d2a7ac5dSMat Martineau chan->expected_tx_seq = __next_seq(chan, txseq); 5952d2a7ac5dSMat Martineau break; 5953d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED_SREJ: 5954d2a7ac5dSMat Martineau l2cap_seq_list_pop(&chan->srej_list); 5955d2a7ac5dSMat Martineau 5956d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 5957d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 5958941247f9SPeter Senna Tschudin skb_in_use = true; 5959d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 5960d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 5961d2a7ac5dSMat Martineau 5962d2a7ac5dSMat Martineau err = l2cap_rx_queued_iframes(chan); 5963d2a7ac5dSMat Martineau if (err) 5964d2a7ac5dSMat Martineau break; 5965d2a7ac5dSMat Martineau 5966d2a7ac5dSMat Martineau break; 5967d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED: 5968d2a7ac5dSMat Martineau /* Got a frame that can't be reassembled yet. 5969d2a7ac5dSMat Martineau * Save it for later, and send SREJs to cover 5970d2a7ac5dSMat Martineau * the missing frames. 5971d2a7ac5dSMat Martineau */ 5972d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 5973941247f9SPeter Senna Tschudin skb_in_use = true; 5974d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 5975d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 5976d2a7ac5dSMat Martineau 5977d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 5978d2a7ac5dSMat Martineau l2cap_send_srej(chan, control->txseq); 5979d2a7ac5dSMat Martineau break; 5980d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED_SREJ: 5981d2a7ac5dSMat Martineau /* This frame was requested with an SREJ, but 5982d2a7ac5dSMat Martineau * some expected retransmitted frames are 5983d2a7ac5dSMat Martineau * missing. Request retransmission of missing 5984d2a7ac5dSMat Martineau * SREJ'd frames. 5985d2a7ac5dSMat Martineau */ 5986d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 5987941247f9SPeter Senna Tschudin skb_in_use = true; 5988d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 5989d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 5990d2a7ac5dSMat Martineau 5991d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 5992d2a7ac5dSMat Martineau l2cap_send_srej_list(chan, control->txseq); 5993d2a7ac5dSMat Martineau break; 5994d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE_SREJ: 5995d2a7ac5dSMat Martineau /* We've already queued this frame. Drop this copy. */ 5996d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 5997d2a7ac5dSMat Martineau break; 5998d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE: 5999d2a7ac5dSMat Martineau /* Expecting a later sequence number, so this frame 6000d2a7ac5dSMat Martineau * was already received. Ignore it completely. 6001d2a7ac5dSMat Martineau */ 6002d2a7ac5dSMat Martineau break; 6003d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID_IGNORE: 6004d2a7ac5dSMat Martineau break; 6005d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID: 6006d2a7ac5dSMat Martineau default: 60075e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6008d2a7ac5dSMat Martineau break; 6009d2a7ac5dSMat Martineau } 6010d2a7ac5dSMat Martineau break; 6011d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RR: 6012d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6013d2a7ac5dSMat Martineau if (control->final) { 6014d2a7ac5dSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6015d2a7ac5dSMat Martineau 6016d2a7ac5dSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, 6017d2a7ac5dSMat Martineau &chan->conn_state)) { 6018d2a7ac5dSMat Martineau control->final = 0; 6019d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 6020d2a7ac5dSMat Martineau } 6021d2a7ac5dSMat Martineau 6022d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6023d2a7ac5dSMat Martineau } else if (control->poll) { 6024d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 6025d2a7ac5dSMat Martineau &chan->conn_state) && 6026d2a7ac5dSMat Martineau chan->unacked_frames) { 6027d2a7ac5dSMat Martineau __set_retrans_timer(chan); 6028d2a7ac5dSMat Martineau } 6029d2a7ac5dSMat Martineau 6030d2a7ac5dSMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 6031d2a7ac5dSMat Martineau l2cap_send_srej_tail(chan); 6032d2a7ac5dSMat Martineau } else { 6033d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 6034d2a7ac5dSMat Martineau &chan->conn_state) && 6035d2a7ac5dSMat Martineau chan->unacked_frames) 6036d2a7ac5dSMat Martineau __set_retrans_timer(chan); 6037d2a7ac5dSMat Martineau 6038d2a7ac5dSMat Martineau l2cap_send_ack(chan); 6039d2a7ac5dSMat Martineau } 6040d2a7ac5dSMat Martineau break; 6041d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RNR: 6042d2a7ac5dSMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6043d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6044d2a7ac5dSMat Martineau if (control->poll) { 6045d2a7ac5dSMat Martineau l2cap_send_srej_tail(chan); 6046d2a7ac5dSMat Martineau } else { 6047d2a7ac5dSMat Martineau struct l2cap_ctrl rr_control; 6048d2a7ac5dSMat Martineau memset(&rr_control, 0, sizeof(rr_control)); 6049d2a7ac5dSMat Martineau rr_control.sframe = 1; 6050d2a7ac5dSMat Martineau rr_control.super = L2CAP_SUPER_RR; 6051d2a7ac5dSMat Martineau rr_control.reqseq = chan->buffer_seq; 6052d2a7ac5dSMat Martineau l2cap_send_sframe(chan, &rr_control); 6053d2a7ac5dSMat Martineau } 6054d2a7ac5dSMat Martineau 6055d2a7ac5dSMat Martineau break; 6056d2a7ac5dSMat Martineau case L2CAP_EV_RECV_REJ: 6057d2a7ac5dSMat Martineau l2cap_handle_rej(chan, control); 6058d2a7ac5dSMat Martineau break; 6059d2a7ac5dSMat Martineau case L2CAP_EV_RECV_SREJ: 6060d2a7ac5dSMat Martineau l2cap_handle_srej(chan, control); 6061d2a7ac5dSMat Martineau break; 6062d2a7ac5dSMat Martineau } 6063d2a7ac5dSMat Martineau 6064d2a7ac5dSMat Martineau if (skb && !skb_in_use) { 6065d2a7ac5dSMat Martineau BT_DBG("Freeing %p", skb); 6066d2a7ac5dSMat Martineau kfree_skb(skb); 6067d2a7ac5dSMat Martineau } 6068d2a7ac5dSMat Martineau 6069d2a7ac5dSMat Martineau return err; 6070d2a7ac5dSMat Martineau } 6071d2a7ac5dSMat Martineau 607232b32735SMat Martineau static int l2cap_finish_move(struct l2cap_chan *chan) 607332b32735SMat Martineau { 607432b32735SMat Martineau BT_DBG("chan %p", chan); 607532b32735SMat Martineau 607632b32735SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 607732b32735SMat Martineau 607832b32735SMat Martineau if (chan->hs_hcon) 607932b32735SMat Martineau chan->conn->mtu = chan->hs_hcon->hdev->block_mtu; 608032b32735SMat Martineau else 608132b32735SMat Martineau chan->conn->mtu = chan->conn->hcon->hdev->acl_mtu; 608232b32735SMat Martineau 608332b32735SMat Martineau return l2cap_resegment(chan); 608432b32735SMat Martineau } 608532b32735SMat Martineau 608632b32735SMat Martineau static int l2cap_rx_state_wait_p(struct l2cap_chan *chan, 608732b32735SMat Martineau struct l2cap_ctrl *control, 608832b32735SMat Martineau struct sk_buff *skb, u8 event) 608932b32735SMat Martineau { 609032b32735SMat Martineau int err; 609132b32735SMat Martineau 609232b32735SMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 609332b32735SMat Martineau event); 609432b32735SMat Martineau 609532b32735SMat Martineau if (!control->poll) 609632b32735SMat Martineau return -EPROTO; 609732b32735SMat Martineau 609832b32735SMat Martineau l2cap_process_reqseq(chan, control->reqseq); 609932b32735SMat Martineau 610032b32735SMat Martineau if (!skb_queue_empty(&chan->tx_q)) 610132b32735SMat Martineau chan->tx_send_head = skb_peek(&chan->tx_q); 610232b32735SMat Martineau else 610332b32735SMat Martineau chan->tx_send_head = NULL; 610432b32735SMat Martineau 610532b32735SMat Martineau /* Rewind next_tx_seq to the point expected 610632b32735SMat Martineau * by the receiver. 610732b32735SMat Martineau */ 610832b32735SMat Martineau chan->next_tx_seq = control->reqseq; 610932b32735SMat Martineau chan->unacked_frames = 0; 611032b32735SMat Martineau 611132b32735SMat Martineau err = l2cap_finish_move(chan); 611232b32735SMat Martineau if (err) 611332b32735SMat Martineau return err; 611432b32735SMat Martineau 611532b32735SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 611632b32735SMat Martineau l2cap_send_i_or_rr_or_rnr(chan); 611732b32735SMat Martineau 611832b32735SMat Martineau if (event == L2CAP_EV_RECV_IFRAME) 611932b32735SMat Martineau return -EPROTO; 612032b32735SMat Martineau 612132b32735SMat Martineau return l2cap_rx_state_recv(chan, control, NULL, event); 612232b32735SMat Martineau } 612332b32735SMat Martineau 612432b32735SMat Martineau static int l2cap_rx_state_wait_f(struct l2cap_chan *chan, 612532b32735SMat Martineau struct l2cap_ctrl *control, 612632b32735SMat Martineau struct sk_buff *skb, u8 event) 612732b32735SMat Martineau { 612832b32735SMat Martineau int err; 612932b32735SMat Martineau 613032b32735SMat Martineau if (!control->final) 613132b32735SMat Martineau return -EPROTO; 613232b32735SMat Martineau 613332b32735SMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 613432b32735SMat Martineau 613532b32735SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 613632b32735SMat Martineau l2cap_process_reqseq(chan, control->reqseq); 613732b32735SMat Martineau 613832b32735SMat Martineau if (!skb_queue_empty(&chan->tx_q)) 613932b32735SMat Martineau chan->tx_send_head = skb_peek(&chan->tx_q); 614032b32735SMat Martineau else 614132b32735SMat Martineau chan->tx_send_head = NULL; 614232b32735SMat Martineau 614332b32735SMat Martineau /* Rewind next_tx_seq to the point expected 614432b32735SMat Martineau * by the receiver. 614532b32735SMat Martineau */ 614632b32735SMat Martineau chan->next_tx_seq = control->reqseq; 614732b32735SMat Martineau chan->unacked_frames = 0; 614832b32735SMat Martineau 614932b32735SMat Martineau if (chan->hs_hcon) 615032b32735SMat Martineau chan->conn->mtu = chan->hs_hcon->hdev->block_mtu; 615132b32735SMat Martineau else 615232b32735SMat Martineau chan->conn->mtu = chan->conn->hcon->hdev->acl_mtu; 615332b32735SMat Martineau 615432b32735SMat Martineau err = l2cap_resegment(chan); 615532b32735SMat Martineau 615632b32735SMat Martineau if (!err) 615732b32735SMat Martineau err = l2cap_rx_state_recv(chan, control, skb, event); 615832b32735SMat Martineau 615932b32735SMat Martineau return err; 616032b32735SMat Martineau } 616132b32735SMat Martineau 6162d2a7ac5dSMat Martineau static bool __valid_reqseq(struct l2cap_chan *chan, u16 reqseq) 6163d2a7ac5dSMat Martineau { 6164d2a7ac5dSMat Martineau /* Make sure reqseq is for a packet that has been sent but not acked */ 6165d2a7ac5dSMat Martineau u16 unacked; 6166d2a7ac5dSMat Martineau 6167d2a7ac5dSMat Martineau unacked = __seq_offset(chan, chan->next_tx_seq, chan->expected_ack_seq); 6168d2a7ac5dSMat Martineau return __seq_offset(chan, chan->next_tx_seq, reqseq) <= unacked; 6169d2a7ac5dSMat Martineau } 6170d2a7ac5dSMat Martineau 6171cec8ab6eSMat Martineau static int l2cap_rx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 6172cec8ab6eSMat Martineau struct sk_buff *skb, u8 event) 61730a708f8fSGustavo F. Padovan { 6174d2a7ac5dSMat Martineau int err = 0; 6175d2a7ac5dSMat Martineau 6176d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d, state %d", chan, 6177d2a7ac5dSMat Martineau control, skb, event, chan->rx_state); 6178d2a7ac5dSMat Martineau 6179d2a7ac5dSMat Martineau if (__valid_reqseq(chan, control->reqseq)) { 6180d2a7ac5dSMat Martineau switch (chan->rx_state) { 6181d2a7ac5dSMat Martineau case L2CAP_RX_STATE_RECV: 6182d2a7ac5dSMat Martineau err = l2cap_rx_state_recv(chan, control, skb, event); 6183d2a7ac5dSMat Martineau break; 6184d2a7ac5dSMat Martineau case L2CAP_RX_STATE_SREJ_SENT: 6185d2a7ac5dSMat Martineau err = l2cap_rx_state_srej_sent(chan, control, skb, 6186d2a7ac5dSMat Martineau event); 6187d2a7ac5dSMat Martineau break; 618832b32735SMat Martineau case L2CAP_RX_STATE_WAIT_P: 618932b32735SMat Martineau err = l2cap_rx_state_wait_p(chan, control, skb, event); 619032b32735SMat Martineau break; 619132b32735SMat Martineau case L2CAP_RX_STATE_WAIT_F: 619232b32735SMat Martineau err = l2cap_rx_state_wait_f(chan, control, skb, event); 619332b32735SMat Martineau break; 6194d2a7ac5dSMat Martineau default: 6195d2a7ac5dSMat Martineau /* shut it down */ 6196d2a7ac5dSMat Martineau break; 6197d2a7ac5dSMat Martineau } 6198d2a7ac5dSMat Martineau } else { 6199d2a7ac5dSMat Martineau BT_DBG("Invalid reqseq %d (next_tx_seq %d, expected_ack_seq %d", 6200d2a7ac5dSMat Martineau control->reqseq, chan->next_tx_seq, 6201d2a7ac5dSMat Martineau chan->expected_ack_seq); 62025e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6203d2a7ac5dSMat Martineau } 6204d2a7ac5dSMat Martineau 6205d2a7ac5dSMat Martineau return err; 6206cec8ab6eSMat Martineau } 6207cec8ab6eSMat Martineau 6208cec8ab6eSMat Martineau static int l2cap_stream_rx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 6209cec8ab6eSMat Martineau struct sk_buff *skb) 6210cec8ab6eSMat Martineau { 62114b51dae9SMat Martineau int err = 0; 62124b51dae9SMat Martineau 62134b51dae9SMat Martineau BT_DBG("chan %p, control %p, skb %p, state %d", chan, control, skb, 62144b51dae9SMat Martineau chan->rx_state); 62154b51dae9SMat Martineau 62164b51dae9SMat Martineau if (l2cap_classify_txseq(chan, control->txseq) == 62174b51dae9SMat Martineau L2CAP_TXSEQ_EXPECTED) { 62184b51dae9SMat Martineau l2cap_pass_to_tx(chan, control); 62194b51dae9SMat Martineau 62204b51dae9SMat Martineau BT_DBG("buffer_seq %d->%d", chan->buffer_seq, 62214b51dae9SMat Martineau __next_seq(chan, chan->buffer_seq)); 62224b51dae9SMat Martineau 62234b51dae9SMat Martineau chan->buffer_seq = __next_seq(chan, chan->buffer_seq); 62244b51dae9SMat Martineau 62254b51dae9SMat Martineau l2cap_reassemble_sdu(chan, skb, control); 62264b51dae9SMat Martineau } else { 62274b51dae9SMat Martineau if (chan->sdu) { 62284b51dae9SMat Martineau kfree_skb(chan->sdu); 62294b51dae9SMat Martineau chan->sdu = NULL; 62304b51dae9SMat Martineau } 62314b51dae9SMat Martineau chan->sdu_last_frag = NULL; 62324b51dae9SMat Martineau chan->sdu_len = 0; 62334b51dae9SMat Martineau 62344b51dae9SMat Martineau if (skb) { 62354b51dae9SMat Martineau BT_DBG("Freeing %p", skb); 62364b51dae9SMat Martineau kfree_skb(skb); 62374b51dae9SMat Martineau } 62384b51dae9SMat Martineau } 62394b51dae9SMat Martineau 62404b51dae9SMat Martineau chan->last_acked_seq = control->txseq; 62414b51dae9SMat Martineau chan->expected_tx_seq = __next_seq(chan, control->txseq); 62424b51dae9SMat Martineau 62434b51dae9SMat Martineau return err; 6244cec8ab6eSMat Martineau } 6245cec8ab6eSMat Martineau 6246cec8ab6eSMat Martineau static int l2cap_data_rcv(struct l2cap_chan *chan, struct sk_buff *skb) 6247cec8ab6eSMat Martineau { 6248cec8ab6eSMat Martineau struct l2cap_ctrl *control = &bt_cb(skb)->control; 6249cec8ab6eSMat Martineau u16 len; 6250cec8ab6eSMat Martineau u8 event; 62510a708f8fSGustavo F. Padovan 6252b76bbd66SMat Martineau __unpack_control(chan, skb); 6253b76bbd66SMat Martineau 62540a708f8fSGustavo F. Padovan len = skb->len; 62550a708f8fSGustavo F. Padovan 62560a708f8fSGustavo F. Padovan /* 62570a708f8fSGustavo F. Padovan * We can just drop the corrupted I-frame here. 62580a708f8fSGustavo F. Padovan * Receiver will miss it and start proper recovery 6259cec8ab6eSMat Martineau * procedures and ask for retransmission. 62600a708f8fSGustavo F. Padovan */ 626147d1ec61SGustavo F. Padovan if (l2cap_check_fcs(chan, skb)) 62620a708f8fSGustavo F. Padovan goto drop; 62630a708f8fSGustavo F. Padovan 6264cec8ab6eSMat Martineau if (!control->sframe && control->sar == L2CAP_SAR_START) 626503a51213SAndrei Emeltchenko len -= L2CAP_SDULEN_SIZE; 62660a708f8fSGustavo F. Padovan 626747d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 626803a51213SAndrei Emeltchenko len -= L2CAP_FCS_SIZE; 62690a708f8fSGustavo F. Padovan 627047d1ec61SGustavo F. Padovan if (len > chan->mps) { 62715e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 62720a708f8fSGustavo F. Padovan goto drop; 62730a708f8fSGustavo F. Padovan } 62740a708f8fSGustavo F. Padovan 6275cec8ab6eSMat Martineau if (!control->sframe) { 6276cec8ab6eSMat Martineau int err; 62770a708f8fSGustavo F. Padovan 6278cec8ab6eSMat Martineau BT_DBG("iframe sar %d, reqseq %d, final %d, txseq %d", 6279cec8ab6eSMat Martineau control->sar, control->reqseq, control->final, 6280cec8ab6eSMat Martineau control->txseq); 6281836be934SAndrei Emeltchenko 6282cec8ab6eSMat Martineau /* Validate F-bit - F=0 always valid, F=1 only 6283cec8ab6eSMat Martineau * valid in TX WAIT_F 6284cec8ab6eSMat Martineau */ 6285cec8ab6eSMat Martineau if (control->final && chan->tx_state != L2CAP_TX_STATE_WAIT_F) 62860a708f8fSGustavo F. Padovan goto drop; 62870a708f8fSGustavo F. Padovan 6288cec8ab6eSMat Martineau if (chan->mode != L2CAP_MODE_STREAMING) { 6289cec8ab6eSMat Martineau event = L2CAP_EV_RECV_IFRAME; 6290cec8ab6eSMat Martineau err = l2cap_rx(chan, control, skb, event); 62910a708f8fSGustavo F. Padovan } else { 6292cec8ab6eSMat Martineau err = l2cap_stream_rx(chan, control, skb); 6293cec8ab6eSMat Martineau } 6294cec8ab6eSMat Martineau 6295cec8ab6eSMat Martineau if (err) 62965e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6297cec8ab6eSMat Martineau } else { 6298cec8ab6eSMat Martineau const u8 rx_func_to_event[4] = { 6299cec8ab6eSMat Martineau L2CAP_EV_RECV_RR, L2CAP_EV_RECV_REJ, 6300cec8ab6eSMat Martineau L2CAP_EV_RECV_RNR, L2CAP_EV_RECV_SREJ 6301cec8ab6eSMat Martineau }; 6302cec8ab6eSMat Martineau 6303cec8ab6eSMat Martineau /* Only I-frames are expected in streaming mode */ 6304cec8ab6eSMat Martineau if (chan->mode == L2CAP_MODE_STREAMING) 6305cec8ab6eSMat Martineau goto drop; 6306cec8ab6eSMat Martineau 6307cec8ab6eSMat Martineau BT_DBG("sframe reqseq %d, final %d, poll %d, super %d", 6308cec8ab6eSMat Martineau control->reqseq, control->final, control->poll, 6309cec8ab6eSMat Martineau control->super); 6310cec8ab6eSMat Martineau 63110a708f8fSGustavo F. Padovan if (len != 0) { 63121bb166e6SAndrei Emeltchenko BT_ERR("Trailing bytes: %d in sframe", len); 63135e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 63140a708f8fSGustavo F. Padovan goto drop; 63150a708f8fSGustavo F. Padovan } 63160a708f8fSGustavo F. Padovan 6317cec8ab6eSMat Martineau /* Validate F and P bits */ 6318cec8ab6eSMat Martineau if (control->final && (control->poll || 6319cec8ab6eSMat Martineau chan->tx_state != L2CAP_TX_STATE_WAIT_F)) 6320cec8ab6eSMat Martineau goto drop; 6321cec8ab6eSMat Martineau 6322cec8ab6eSMat Martineau event = rx_func_to_event[control->super]; 6323cec8ab6eSMat Martineau if (l2cap_rx(chan, control, skb, event)) 63245e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 63250a708f8fSGustavo F. Padovan } 63260a708f8fSGustavo F. Padovan 63270a708f8fSGustavo F. Padovan return 0; 63280a708f8fSGustavo F. Padovan 63290a708f8fSGustavo F. Padovan drop: 63300a708f8fSGustavo F. Padovan kfree_skb(skb); 63310a708f8fSGustavo F. Padovan return 0; 63320a708f8fSGustavo F. Padovan } 63330a708f8fSGustavo F. Padovan 633413ca56e0SAndrei Emeltchenko static void l2cap_data_channel(struct l2cap_conn *conn, u16 cid, 633513ca56e0SAndrei Emeltchenko struct sk_buff *skb) 63360a708f8fSGustavo F. Padovan { 633748454079SGustavo F. Padovan struct l2cap_chan *chan; 63380a708f8fSGustavo F. Padovan 6339baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, cid); 634048454079SGustavo F. Padovan if (!chan) { 634197e8e89dSAndrei Emeltchenko if (cid == L2CAP_CID_A2MP) { 634297e8e89dSAndrei Emeltchenko chan = a2mp_channel_create(conn, skb); 634397e8e89dSAndrei Emeltchenko if (!chan) { 634497e8e89dSAndrei Emeltchenko kfree_skb(skb); 634513ca56e0SAndrei Emeltchenko return; 634697e8e89dSAndrei Emeltchenko } 634797e8e89dSAndrei Emeltchenko 634897e8e89dSAndrei Emeltchenko l2cap_chan_lock(chan); 634997e8e89dSAndrei Emeltchenko } else { 63500a708f8fSGustavo F. Padovan BT_DBG("unknown cid 0x%4.4x", cid); 63516be36555SAndrei Emeltchenko /* Drop packet and return */ 63523379013bSDan Carpenter kfree_skb(skb); 635313ca56e0SAndrei Emeltchenko return; 63540a708f8fSGustavo F. Padovan } 635597e8e89dSAndrei Emeltchenko } 63560a708f8fSGustavo F. Padovan 635749208c9cSGustavo F. Padovan BT_DBG("chan %p, len %d", chan, skb->len); 63580a708f8fSGustavo F. Padovan 635989bc500eSGustavo F. Padovan if (chan->state != BT_CONNECTED) 63600a708f8fSGustavo F. Padovan goto drop; 63610a708f8fSGustavo F. Padovan 63620c1bc5c6SGustavo F. Padovan switch (chan->mode) { 63630a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 63640a708f8fSGustavo F. Padovan /* If socket recv buffers overflows we drop data here 63650a708f8fSGustavo F. Padovan * which is *bad* because L2CAP has to be reliable. 63660a708f8fSGustavo F. Padovan * But we don't have any other choice. L2CAP doesn't 63670a708f8fSGustavo F. Padovan * provide flow control mechanism. */ 63680a708f8fSGustavo F. Padovan 63690c1bc5c6SGustavo F. Padovan if (chan->imtu < skb->len) 63700a708f8fSGustavo F. Padovan goto drop; 63710a708f8fSGustavo F. Padovan 637280b98027SGustavo Padovan if (!chan->ops->recv(chan, skb)) 63730a708f8fSGustavo F. Padovan goto done; 63740a708f8fSGustavo F. Padovan break; 63750a708f8fSGustavo F. Padovan 63760a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 63770a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 6378cec8ab6eSMat Martineau l2cap_data_rcv(chan, skb); 63790a708f8fSGustavo F. Padovan goto done; 63800a708f8fSGustavo F. Padovan 63810a708f8fSGustavo F. Padovan default: 63820c1bc5c6SGustavo F. Padovan BT_DBG("chan %p: bad mode 0x%2.2x", chan, chan->mode); 63830a708f8fSGustavo F. Padovan break; 63840a708f8fSGustavo F. Padovan } 63850a708f8fSGustavo F. Padovan 63860a708f8fSGustavo F. Padovan drop: 63870a708f8fSGustavo F. Padovan kfree_skb(skb); 63880a708f8fSGustavo F. Padovan 63890a708f8fSGustavo F. Padovan done: 63906be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 63910a708f8fSGustavo F. Padovan } 63920a708f8fSGustavo F. Padovan 639384104b24SAndrei Emeltchenko static void l2cap_conless_channel(struct l2cap_conn *conn, __le16 psm, 639484104b24SAndrei Emeltchenko struct sk_buff *skb) 63950a708f8fSGustavo F. Padovan { 6396ae4fd2d3SMarcel Holtmann struct hci_conn *hcon = conn->hcon; 639723691d75SGustavo F. Padovan struct l2cap_chan *chan; 63980a708f8fSGustavo F. Padovan 6399ae4fd2d3SMarcel Holtmann if (hcon->type != ACL_LINK) 6400ae4fd2d3SMarcel Holtmann goto drop; 6401ae4fd2d3SMarcel Holtmann 64026f59b904SMarcel Holtmann chan = l2cap_global_chan_by_psm(0, psm, &conn->hcon->src, 640398e0f7eaSMarcel Holtmann &conn->hcon->dst); 640423691d75SGustavo F. Padovan if (!chan) 64050a708f8fSGustavo F. Padovan goto drop; 64060a708f8fSGustavo F. Padovan 64075b4cedaaSAndrei Emeltchenko BT_DBG("chan %p, len %d", chan, skb->len); 64080a708f8fSGustavo F. Padovan 640989bc500eSGustavo F. Padovan if (chan->state != BT_BOUND && chan->state != BT_CONNECTED) 64100a708f8fSGustavo F. Padovan goto drop; 64110a708f8fSGustavo F. Padovan 6412e13e21dcSVinicius Costa Gomes if (chan->imtu < skb->len) 64130a708f8fSGustavo F. Padovan goto drop; 64140a708f8fSGustavo F. Padovan 64152edf870dSMarcel Holtmann /* Store remote BD_ADDR and PSM for msg_name */ 64162edf870dSMarcel Holtmann bacpy(&bt_cb(skb)->bdaddr, &conn->hcon->dst); 64172edf870dSMarcel Holtmann bt_cb(skb)->psm = psm; 64182edf870dSMarcel Holtmann 641980b98027SGustavo Padovan if (!chan->ops->recv(chan, skb)) 642084104b24SAndrei Emeltchenko return; 64210a708f8fSGustavo F. Padovan 64220a708f8fSGustavo F. Padovan drop: 64230a708f8fSGustavo F. Padovan kfree_skb(skb); 64240a708f8fSGustavo F. Padovan } 64250a708f8fSGustavo F. Padovan 642672f78356SMarcel Holtmann static void l2cap_att_channel(struct l2cap_conn *conn, 6427d9b88702SAndrei Emeltchenko struct sk_buff *skb) 64289f69bda6SGustavo F. Padovan { 6429b99707d7SMarcel Holtmann struct hci_conn *hcon = conn->hcon; 643023691d75SGustavo F. Padovan struct l2cap_chan *chan; 64319f69bda6SGustavo F. Padovan 6432b99707d7SMarcel Holtmann if (hcon->type != LE_LINK) 6433b99707d7SMarcel Holtmann goto drop; 6434b99707d7SMarcel Holtmann 6435af1c0134SJohan Hedberg chan = l2cap_global_chan_by_scid(BT_CONNECTED, L2CAP_CID_ATT, 64366f59b904SMarcel Holtmann &conn->hcon->src, &conn->hcon->dst); 643723691d75SGustavo F. Padovan if (!chan) 64389f69bda6SGustavo F. Padovan goto drop; 64399f69bda6SGustavo F. Padovan 64405b4cedaaSAndrei Emeltchenko BT_DBG("chan %p, len %d", chan, skb->len); 64419f69bda6SGustavo F. Padovan 6442e13e21dcSVinicius Costa Gomes if (chan->imtu < skb->len) 64439f69bda6SGustavo F. Padovan goto drop; 64449f69bda6SGustavo F. Padovan 644580b98027SGustavo Padovan if (!chan->ops->recv(chan, skb)) 64466810fca7SAndrei Emeltchenko return; 64479f69bda6SGustavo F. Padovan 64489f69bda6SGustavo F. Padovan drop: 64499f69bda6SGustavo F. Padovan kfree_skb(skb); 64509f69bda6SGustavo F. Padovan } 64519f69bda6SGustavo F. Padovan 64520a708f8fSGustavo F. Padovan static void l2cap_recv_frame(struct l2cap_conn *conn, struct sk_buff *skb) 64530a708f8fSGustavo F. Padovan { 64540a708f8fSGustavo F. Padovan struct l2cap_hdr *lh = (void *) skb->data; 64550a708f8fSGustavo F. Padovan u16 cid, len; 64560a708f8fSGustavo F. Padovan __le16 psm; 64570a708f8fSGustavo F. Padovan 64580a708f8fSGustavo F. Padovan skb_pull(skb, L2CAP_HDR_SIZE); 64590a708f8fSGustavo F. Padovan cid = __le16_to_cpu(lh->cid); 64600a708f8fSGustavo F. Padovan len = __le16_to_cpu(lh->len); 64610a708f8fSGustavo F. Padovan 64620a708f8fSGustavo F. Padovan if (len != skb->len) { 64630a708f8fSGustavo F. Padovan kfree_skb(skb); 64640a708f8fSGustavo F. Padovan return; 64650a708f8fSGustavo F. Padovan } 64660a708f8fSGustavo F. Padovan 64670a708f8fSGustavo F. Padovan BT_DBG("len %d, cid 0x%4.4x", len, cid); 64680a708f8fSGustavo F. Padovan 64690a708f8fSGustavo F. Padovan switch (cid) { 64700a708f8fSGustavo F. Padovan case L2CAP_CID_SIGNALING: 64710a708f8fSGustavo F. Padovan l2cap_sig_channel(conn, skb); 64720a708f8fSGustavo F. Padovan break; 64730a708f8fSGustavo F. Padovan 64740a708f8fSGustavo F. Padovan case L2CAP_CID_CONN_LESS: 6475097db76cSAndrei Emeltchenko psm = get_unaligned((__le16 *) skb->data); 64760181a70fSAndrei Emeltchenko skb_pull(skb, L2CAP_PSMLEN_SIZE); 64770a708f8fSGustavo F. Padovan l2cap_conless_channel(conn, psm, skb); 64780a708f8fSGustavo F. Padovan break; 64790a708f8fSGustavo F. Padovan 6480073d1cf3SJohan Hedberg case L2CAP_CID_ATT: 648172f78356SMarcel Holtmann l2cap_att_channel(conn, skb); 64829f69bda6SGustavo F. Padovan break; 64839f69bda6SGustavo F. Padovan 6484a2877629SMarcel Holtmann case L2CAP_CID_LE_SIGNALING: 6485a2877629SMarcel Holtmann l2cap_le_sig_channel(conn, skb); 6486a2877629SMarcel Holtmann break; 6487a2877629SMarcel Holtmann 6488b501d6a1SAnderson Briglia case L2CAP_CID_SMP: 6489b501d6a1SAnderson Briglia if (smp_sig_channel(conn, skb)) 6490b501d6a1SAnderson Briglia l2cap_conn_del(conn->hcon, EACCES); 6491b501d6a1SAnderson Briglia break; 6492b501d6a1SAnderson Briglia 64930a708f8fSGustavo F. Padovan default: 64940a708f8fSGustavo F. Padovan l2cap_data_channel(conn, cid, skb); 64950a708f8fSGustavo F. Padovan break; 64960a708f8fSGustavo F. Padovan } 64970a708f8fSGustavo F. Padovan } 64980a708f8fSGustavo F. Padovan 64990a708f8fSGustavo F. Padovan /* ---- L2CAP interface with lower layer (HCI) ---- */ 65000a708f8fSGustavo F. Padovan 6501686ebf28SUlisses Furquim int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr) 65020a708f8fSGustavo F. Padovan { 65030a708f8fSGustavo F. Padovan int exact = 0, lm1 = 0, lm2 = 0; 650423691d75SGustavo F. Padovan struct l2cap_chan *c; 65050a708f8fSGustavo F. Padovan 65066ed93dc6SAndrei Emeltchenko BT_DBG("hdev %s, bdaddr %pMR", hdev->name, bdaddr); 65070a708f8fSGustavo F. Padovan 65080a708f8fSGustavo F. Padovan /* Find listening sockets and check their link_mode */ 650923691d75SGustavo F. Padovan read_lock(&chan_list_lock); 651023691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 651189bc500eSGustavo F. Padovan if (c->state != BT_LISTEN) 65120a708f8fSGustavo F. Padovan continue; 65130a708f8fSGustavo F. Padovan 65147eafc59eSMarcel Holtmann if (!bacmp(&c->src, &hdev->bdaddr)) { 65150a708f8fSGustavo F. Padovan lm1 |= HCI_LM_ACCEPT; 651643bd0f32SAndrei Emeltchenko if (test_bit(FLAG_ROLE_SWITCH, &c->flags)) 65170a708f8fSGustavo F. Padovan lm1 |= HCI_LM_MASTER; 65180a708f8fSGustavo F. Padovan exact++; 65197eafc59eSMarcel Holtmann } else if (!bacmp(&c->src, BDADDR_ANY)) { 65200a708f8fSGustavo F. Padovan lm2 |= HCI_LM_ACCEPT; 652143bd0f32SAndrei Emeltchenko if (test_bit(FLAG_ROLE_SWITCH, &c->flags)) 65220a708f8fSGustavo F. Padovan lm2 |= HCI_LM_MASTER; 65230a708f8fSGustavo F. Padovan } 65240a708f8fSGustavo F. Padovan } 652523691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 65260a708f8fSGustavo F. Padovan 65270a708f8fSGustavo F. Padovan return exact ? lm1 : lm2; 65280a708f8fSGustavo F. Padovan } 65290a708f8fSGustavo F. Padovan 65309e664631SAndrei Emeltchenko void l2cap_connect_cfm(struct hci_conn *hcon, u8 status) 65310a708f8fSGustavo F. Padovan { 65320a708f8fSGustavo F. Padovan struct l2cap_conn *conn; 65330a708f8fSGustavo F. Padovan 65346ed93dc6SAndrei Emeltchenko BT_DBG("hcon %p bdaddr %pMR status %d", hcon, &hcon->dst, status); 65350a708f8fSGustavo F. Padovan 65360a708f8fSGustavo F. Padovan if (!status) { 6537baf43251SClaudio Takahasi conn = l2cap_conn_add(hcon); 65380a708f8fSGustavo F. Padovan if (conn) 65390a708f8fSGustavo F. Padovan l2cap_conn_ready(conn); 6540ba6fc317SAndrei Emeltchenko } else { 6541e175072fSJoe Perches l2cap_conn_del(hcon, bt_to_errno(status)); 6542ba6fc317SAndrei Emeltchenko } 65430a708f8fSGustavo F. Padovan } 65440a708f8fSGustavo F. Padovan 6545686ebf28SUlisses Furquim int l2cap_disconn_ind(struct hci_conn *hcon) 65460a708f8fSGustavo F. Padovan { 65470a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 65480a708f8fSGustavo F. Padovan 65490a708f8fSGustavo F. Padovan BT_DBG("hcon %p", hcon); 65500a708f8fSGustavo F. Padovan 6551686ebf28SUlisses Furquim if (!conn) 65529f5a0d7bSAndrei Emeltchenko return HCI_ERROR_REMOTE_USER_TERM; 65530a708f8fSGustavo F. Padovan return conn->disc_reason; 65540a708f8fSGustavo F. Padovan } 65550a708f8fSGustavo F. Padovan 65569e664631SAndrei Emeltchenko void l2cap_disconn_cfm(struct hci_conn *hcon, u8 reason) 65570a708f8fSGustavo F. Padovan { 65580a708f8fSGustavo F. Padovan BT_DBG("hcon %p reason %d", hcon, reason); 65590a708f8fSGustavo F. Padovan 6560e175072fSJoe Perches l2cap_conn_del(hcon, bt_to_errno(reason)); 65610a708f8fSGustavo F. Padovan } 65620a708f8fSGustavo F. Padovan 65634343478fSGustavo F. Padovan static inline void l2cap_check_encryption(struct l2cap_chan *chan, u8 encrypt) 65640a708f8fSGustavo F. Padovan { 6565715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) 65660a708f8fSGustavo F. Padovan return; 65670a708f8fSGustavo F. Padovan 65680a708f8fSGustavo F. Padovan if (encrypt == 0x00) { 65694343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_MEDIUM) { 6570ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_ENC_TIMEOUT); 65714343478fSGustavo F. Padovan } else if (chan->sec_level == BT_SECURITY_HIGH) 65720f852724SGustavo F. Padovan l2cap_chan_close(chan, ECONNREFUSED); 65730a708f8fSGustavo F. Padovan } else { 65744343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_MEDIUM) 6575c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 65760a708f8fSGustavo F. Padovan } 65770a708f8fSGustavo F. Padovan } 65780a708f8fSGustavo F. Padovan 6579686ebf28SUlisses Furquim int l2cap_security_cfm(struct hci_conn *hcon, u8 status, u8 encrypt) 65800a708f8fSGustavo F. Padovan { 65810a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 658248454079SGustavo F. Padovan struct l2cap_chan *chan; 65830a708f8fSGustavo F. Padovan 65840a708f8fSGustavo F. Padovan if (!conn) 65850a708f8fSGustavo F. Padovan return 0; 65860a708f8fSGustavo F. Padovan 658789d8b407SAndrei Emeltchenko BT_DBG("conn %p status 0x%2.2x encrypt %u", conn, status, encrypt); 65880a708f8fSGustavo F. Padovan 6589160dc6acSVinicius Costa Gomes if (hcon->type == LE_LINK) { 659035d4adccSHemant Gupta if (!status && encrypt) 6591160dc6acSVinicius Costa Gomes smp_distribute_keys(conn, 0); 659217cd3f37SUlisses Furquim cancel_delayed_work(&conn->security_timer); 6593160dc6acSVinicius Costa Gomes } 6594160dc6acSVinicius Costa Gomes 65953df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 65960a708f8fSGustavo F. Padovan 65973df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 65986be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 65990a708f8fSGustavo F. Padovan 660089d8b407SAndrei Emeltchenko BT_DBG("chan %p scid 0x%4.4x state %s", chan, chan->scid, 660189d8b407SAndrei Emeltchenko state_to_string(chan->state)); 6602f1cb9af5SVinicius Costa Gomes 660378eb2f98SAndrei Emeltchenko if (chan->chan_type == L2CAP_CHAN_CONN_FIX_A2MP) { 660478eb2f98SAndrei Emeltchenko l2cap_chan_unlock(chan); 660578eb2f98SAndrei Emeltchenko continue; 660678eb2f98SAndrei Emeltchenko } 660778eb2f98SAndrei Emeltchenko 6608073d1cf3SJohan Hedberg if (chan->scid == L2CAP_CID_ATT) { 6609f1cb9af5SVinicius Costa Gomes if (!status && encrypt) { 6610f1cb9af5SVinicius Costa Gomes chan->sec_level = hcon->sec_level; 6611cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 6612f1cb9af5SVinicius Costa Gomes } 6613f1cb9af5SVinicius Costa Gomes 66146be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 6615f1cb9af5SVinicius Costa Gomes continue; 6616f1cb9af5SVinicius Costa Gomes } 6617f1cb9af5SVinicius Costa Gomes 661896eff46eSAndrei Emeltchenko if (!__l2cap_no_conn_pending(chan)) { 66196be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 66200a708f8fSGustavo F. Padovan continue; 66210a708f8fSGustavo F. Padovan } 66220a708f8fSGustavo F. Padovan 662389bc500eSGustavo F. Padovan if (!status && (chan->state == BT_CONNECTED || 662489bc500eSGustavo F. Padovan chan->state == BT_CONFIG)) { 6625d97c899bSMarcel Holtmann chan->ops->resume(chan); 66264343478fSGustavo F. Padovan l2cap_check_encryption(chan, encrypt); 66276be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 66280a708f8fSGustavo F. Padovan continue; 66290a708f8fSGustavo F. Padovan } 66300a708f8fSGustavo F. Padovan 663189bc500eSGustavo F. Padovan if (chan->state == BT_CONNECT) { 66320a708f8fSGustavo F. Padovan if (!status) { 663393c3e8f5SAndrei Emeltchenko l2cap_start_connection(chan); 66340a708f8fSGustavo F. Padovan } else { 6635ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_TIMEOUT); 66360a708f8fSGustavo F. Padovan } 663789bc500eSGustavo F. Padovan } else if (chan->state == BT_CONNECT2) { 66386be36555SAndrei Emeltchenko struct sock *sk = chan->sk; 66390a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 6640df3c3931SJohan Hedberg __u16 res, stat; 66410a708f8fSGustavo F. Padovan 66426be36555SAndrei Emeltchenko lock_sock(sk); 66436be36555SAndrei Emeltchenko 66440a708f8fSGustavo F. Padovan if (!status) { 6645bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 6646df3c3931SJohan Hedberg res = L2CAP_CR_PEND; 6647df3c3931SJohan Hedberg stat = L2CAP_CS_AUTHOR_PEND; 66482dc4e510SGustavo Padovan chan->ops->defer(chan); 6649df3c3931SJohan Hedberg } else { 66500e587be7SAndrei Emeltchenko __l2cap_state_change(chan, BT_CONFIG); 6651df3c3931SJohan Hedberg res = L2CAP_CR_SUCCESS; 6652df3c3931SJohan Hedberg stat = L2CAP_CS_NO_INFO; 6653df3c3931SJohan Hedberg } 66540a708f8fSGustavo F. Padovan } else { 66550e587be7SAndrei Emeltchenko __l2cap_state_change(chan, BT_DISCONN); 6656ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_TIMEOUT); 6657df3c3931SJohan Hedberg res = L2CAP_CR_SEC_BLOCK; 6658df3c3931SJohan Hedberg stat = L2CAP_CS_NO_INFO; 66590a708f8fSGustavo F. Padovan } 66600a708f8fSGustavo F. Padovan 66616be36555SAndrei Emeltchenko release_sock(sk); 66626be36555SAndrei Emeltchenko 6663fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 6664fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 6665df3c3931SJohan Hedberg rsp.result = cpu_to_le16(res); 6666df3c3931SJohan Hedberg rsp.status = cpu_to_le16(stat); 6667fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 6668fc7f8a7eSGustavo F. Padovan sizeof(rsp), &rsp); 66692d369359SMat Martineau 66702d369359SMat Martineau if (!test_bit(CONF_REQ_SENT, &chan->conf_state) && 66712d369359SMat Martineau res == L2CAP_CR_SUCCESS) { 66722d369359SMat Martineau char buf[128]; 66732d369359SMat Martineau set_bit(CONF_REQ_SENT, &chan->conf_state); 66742d369359SMat Martineau l2cap_send_cmd(conn, l2cap_get_ident(conn), 66752d369359SMat Martineau L2CAP_CONF_REQ, 66762d369359SMat Martineau l2cap_build_conf_req(chan, buf), 66772d369359SMat Martineau buf); 66782d369359SMat Martineau chan->num_conf_req++; 66792d369359SMat Martineau } 66800a708f8fSGustavo F. Padovan } 66810a708f8fSGustavo F. Padovan 66826be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 66830a708f8fSGustavo F. Padovan } 66840a708f8fSGustavo F. Padovan 66853df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 66860a708f8fSGustavo F. Padovan 66870a708f8fSGustavo F. Padovan return 0; 66880a708f8fSGustavo F. Padovan } 66890a708f8fSGustavo F. Padovan 6690686ebf28SUlisses Furquim int l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags) 66910a708f8fSGustavo F. Padovan { 66920a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 6693d73a0988SAndrei Emeltchenko struct l2cap_hdr *hdr; 6694d73a0988SAndrei Emeltchenko int len; 66950a708f8fSGustavo F. Padovan 66961d13a254SAndrei Emeltchenko /* For AMP controller do not create l2cap conn */ 66971d13a254SAndrei Emeltchenko if (!conn && hcon->hdev->dev_type != HCI_BREDR) 66981d13a254SAndrei Emeltchenko goto drop; 66990a708f8fSGustavo F. Padovan 67000a708f8fSGustavo F. Padovan if (!conn) 6701baf43251SClaudio Takahasi conn = l2cap_conn_add(hcon); 67020a708f8fSGustavo F. Padovan 67030a708f8fSGustavo F. Padovan if (!conn) 67040a708f8fSGustavo F. Padovan goto drop; 67050a708f8fSGustavo F. Padovan 67060a708f8fSGustavo F. Padovan BT_DBG("conn %p len %d flags 0x%x", conn, skb->len, flags); 67070a708f8fSGustavo F. Padovan 6708d73a0988SAndrei Emeltchenko switch (flags) { 6709d73a0988SAndrei Emeltchenko case ACL_START: 6710d73a0988SAndrei Emeltchenko case ACL_START_NO_FLUSH: 6711d73a0988SAndrei Emeltchenko case ACL_COMPLETE: 67120a708f8fSGustavo F. Padovan if (conn->rx_len) { 67130a708f8fSGustavo F. Padovan BT_ERR("Unexpected start frame (len %d)", skb->len); 67140a708f8fSGustavo F. Padovan kfree_skb(conn->rx_skb); 67150a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 67160a708f8fSGustavo F. Padovan conn->rx_len = 0; 67170a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 67180a708f8fSGustavo F. Padovan } 67190a708f8fSGustavo F. Padovan 67200a708f8fSGustavo F. Padovan /* Start fragment always begin with Basic L2CAP header */ 67210a708f8fSGustavo F. Padovan if (skb->len < L2CAP_HDR_SIZE) { 67220a708f8fSGustavo F. Padovan BT_ERR("Frame is too short (len %d)", skb->len); 67230a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 67240a708f8fSGustavo F. Padovan goto drop; 67250a708f8fSGustavo F. Padovan } 67260a708f8fSGustavo F. Padovan 67270a708f8fSGustavo F. Padovan hdr = (struct l2cap_hdr *) skb->data; 67280a708f8fSGustavo F. Padovan len = __le16_to_cpu(hdr->len) + L2CAP_HDR_SIZE; 67290a708f8fSGustavo F. Padovan 67300a708f8fSGustavo F. Padovan if (len == skb->len) { 67310a708f8fSGustavo F. Padovan /* Complete frame received */ 67320a708f8fSGustavo F. Padovan l2cap_recv_frame(conn, skb); 67330a708f8fSGustavo F. Padovan return 0; 67340a708f8fSGustavo F. Padovan } 67350a708f8fSGustavo F. Padovan 67360a708f8fSGustavo F. Padovan BT_DBG("Start: total len %d, frag len %d", len, skb->len); 67370a708f8fSGustavo F. Padovan 67380a708f8fSGustavo F. Padovan if (skb->len > len) { 67390a708f8fSGustavo F. Padovan BT_ERR("Frame is too long (len %d, expected len %d)", 67400a708f8fSGustavo F. Padovan skb->len, len); 67410a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 67420a708f8fSGustavo F. Padovan goto drop; 67430a708f8fSGustavo F. Padovan } 67440a708f8fSGustavo F. Padovan 67450a708f8fSGustavo F. Padovan /* Allocate skb for the complete frame (with header) */ 67468bcde1f2SGustavo Padovan conn->rx_skb = bt_skb_alloc(len, GFP_KERNEL); 67470a708f8fSGustavo F. Padovan if (!conn->rx_skb) 67480a708f8fSGustavo F. Padovan goto drop; 67490a708f8fSGustavo F. Padovan 67500a708f8fSGustavo F. Padovan skb_copy_from_linear_data(skb, skb_put(conn->rx_skb, skb->len), 67510a708f8fSGustavo F. Padovan skb->len); 67520a708f8fSGustavo F. Padovan conn->rx_len = len - skb->len; 6753d73a0988SAndrei Emeltchenko break; 6754d73a0988SAndrei Emeltchenko 6755d73a0988SAndrei Emeltchenko case ACL_CONT: 67560a708f8fSGustavo F. Padovan BT_DBG("Cont: frag len %d (expecting %d)", skb->len, conn->rx_len); 67570a708f8fSGustavo F. Padovan 67580a708f8fSGustavo F. Padovan if (!conn->rx_len) { 67590a708f8fSGustavo F. Padovan BT_ERR("Unexpected continuation frame (len %d)", skb->len); 67600a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 67610a708f8fSGustavo F. Padovan goto drop; 67620a708f8fSGustavo F. Padovan } 67630a708f8fSGustavo F. Padovan 67640a708f8fSGustavo F. Padovan if (skb->len > conn->rx_len) { 67650a708f8fSGustavo F. Padovan BT_ERR("Fragment is too long (len %d, expected %d)", 67660a708f8fSGustavo F. Padovan skb->len, conn->rx_len); 67670a708f8fSGustavo F. Padovan kfree_skb(conn->rx_skb); 67680a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 67690a708f8fSGustavo F. Padovan conn->rx_len = 0; 67700a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 67710a708f8fSGustavo F. Padovan goto drop; 67720a708f8fSGustavo F. Padovan } 67730a708f8fSGustavo F. Padovan 67740a708f8fSGustavo F. Padovan skb_copy_from_linear_data(skb, skb_put(conn->rx_skb, skb->len), 67750a708f8fSGustavo F. Padovan skb->len); 67760a708f8fSGustavo F. Padovan conn->rx_len -= skb->len; 67770a708f8fSGustavo F. Padovan 67780a708f8fSGustavo F. Padovan if (!conn->rx_len) { 6779c4e5bafaSJohan Hedberg /* Complete frame received. l2cap_recv_frame 6780c4e5bafaSJohan Hedberg * takes ownership of the skb so set the global 6781c4e5bafaSJohan Hedberg * rx_skb pointer to NULL first. 6782c4e5bafaSJohan Hedberg */ 6783c4e5bafaSJohan Hedberg struct sk_buff *rx_skb = conn->rx_skb; 67840a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 6785c4e5bafaSJohan Hedberg l2cap_recv_frame(conn, rx_skb); 67860a708f8fSGustavo F. Padovan } 6787d73a0988SAndrei Emeltchenko break; 67880a708f8fSGustavo F. Padovan } 67890a708f8fSGustavo F. Padovan 67900a708f8fSGustavo F. Padovan drop: 67910a708f8fSGustavo F. Padovan kfree_skb(skb); 67920a708f8fSGustavo F. Padovan return 0; 67930a708f8fSGustavo F. Padovan } 67940a708f8fSGustavo F. Padovan 67950a708f8fSGustavo F. Padovan static int l2cap_debugfs_show(struct seq_file *f, void *p) 67960a708f8fSGustavo F. Padovan { 679723691d75SGustavo F. Padovan struct l2cap_chan *c; 67980a708f8fSGustavo F. Padovan 6799333055f2SGustavo F. Padovan read_lock(&chan_list_lock); 68000a708f8fSGustavo F. Padovan 680123691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 6802fcb73338SAndrei Emeltchenko seq_printf(f, "%pMR %pMR %d %d 0x%4.4x 0x%4.4x %d %d %d %d\n", 68037eafc59eSMarcel Holtmann &c->src, &c->dst, 680489bc500eSGustavo F. Padovan c->state, __le16_to_cpu(c->psm), 680523691d75SGustavo F. Padovan c->scid, c->dcid, c->imtu, c->omtu, 680623691d75SGustavo F. Padovan c->sec_level, c->mode); 68070a708f8fSGustavo F. Padovan } 68080a708f8fSGustavo F. Padovan 6809333055f2SGustavo F. Padovan read_unlock(&chan_list_lock); 68100a708f8fSGustavo F. Padovan 68110a708f8fSGustavo F. Padovan return 0; 68120a708f8fSGustavo F. Padovan } 68130a708f8fSGustavo F. Padovan 68140a708f8fSGustavo F. Padovan static int l2cap_debugfs_open(struct inode *inode, struct file *file) 68150a708f8fSGustavo F. Padovan { 68160a708f8fSGustavo F. Padovan return single_open(file, l2cap_debugfs_show, inode->i_private); 68170a708f8fSGustavo F. Padovan } 68180a708f8fSGustavo F. Padovan 68190a708f8fSGustavo F. Padovan static const struct file_operations l2cap_debugfs_fops = { 68200a708f8fSGustavo F. Padovan .open = l2cap_debugfs_open, 68210a708f8fSGustavo F. Padovan .read = seq_read, 68220a708f8fSGustavo F. Padovan .llseek = seq_lseek, 68230a708f8fSGustavo F. Padovan .release = single_release, 68240a708f8fSGustavo F. Padovan }; 68250a708f8fSGustavo F. Padovan 68260a708f8fSGustavo F. Padovan static struct dentry *l2cap_debugfs; 68270a708f8fSGustavo F. Padovan 682864274518SGustavo F. Padovan int __init l2cap_init(void) 68290a708f8fSGustavo F. Padovan { 68300a708f8fSGustavo F. Padovan int err; 68310a708f8fSGustavo F. Padovan 6832bb58f747SGustavo F. Padovan err = l2cap_init_sockets(); 68330a708f8fSGustavo F. Padovan if (err < 0) 68340a708f8fSGustavo F. Padovan return err; 68350a708f8fSGustavo F. Padovan 68361120e4bfSMarcel Holtmann if (IS_ERR_OR_NULL(bt_debugfs)) 68371120e4bfSMarcel Holtmann return 0; 68381120e4bfSMarcel Holtmann 68392d792818SGustavo Padovan l2cap_debugfs = debugfs_create_file("l2cap", 0444, bt_debugfs, 68402d792818SGustavo Padovan NULL, &l2cap_debugfs_fops); 68410a708f8fSGustavo F. Padovan 68420a708f8fSGustavo F. Padovan return 0; 68430a708f8fSGustavo F. Padovan } 68440a708f8fSGustavo F. Padovan 684564274518SGustavo F. Padovan void l2cap_exit(void) 68460a708f8fSGustavo F. Padovan { 68470a708f8fSGustavo F. Padovan debugfs_remove(l2cap_debugfs); 6848bb58f747SGustavo F. Padovan l2cap_cleanup_sockets(); 68490a708f8fSGustavo F. Padovan } 68500a708f8fSGustavo F. Padovan 68510a708f8fSGustavo F. Padovan module_param(disable_ertm, bool, 0644); 68520a708f8fSGustavo F. Padovan MODULE_PARM_DESC(disable_ertm, "Disable enhanced retransmission mode"); 6853