10a708f8fSGustavo F. Padovan /* 20a708f8fSGustavo F. Padovan BlueZ - Bluetooth protocol stack for Linux 30a708f8fSGustavo F. Padovan Copyright (C) 2000-2001 Qualcomm Incorporated 40a708f8fSGustavo F. Padovan Copyright (C) 2009-2010 Gustavo F. Padovan <gustavo@padovan.org> 50a708f8fSGustavo F. Padovan Copyright (C) 2010 Google Inc. 6590051deSGustavo F. Padovan Copyright (C) 2011 ProFUSION Embedded Systems 7422e925bSMat Martineau Copyright (c) 2012 Code Aurora Forum. All rights reserved. 80a708f8fSGustavo F. Padovan 90a708f8fSGustavo F. Padovan Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com> 100a708f8fSGustavo F. Padovan 110a708f8fSGustavo F. Padovan This program is free software; you can redistribute it and/or modify 120a708f8fSGustavo F. Padovan it under the terms of the GNU General Public License version 2 as 130a708f8fSGustavo F. Padovan published by the Free Software Foundation; 140a708f8fSGustavo F. Padovan 150a708f8fSGustavo F. Padovan THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS 160a708f8fSGustavo F. Padovan OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 170a708f8fSGustavo F. Padovan FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS. 180a708f8fSGustavo F. Padovan IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY 190a708f8fSGustavo F. Padovan CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES 200a708f8fSGustavo F. Padovan WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 210a708f8fSGustavo F. Padovan ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 220a708f8fSGustavo F. Padovan OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 230a708f8fSGustavo F. Padovan 240a708f8fSGustavo F. Padovan ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS, 250a708f8fSGustavo F. Padovan COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS 260a708f8fSGustavo F. Padovan SOFTWARE IS DISCLAIMED. 270a708f8fSGustavo F. Padovan */ 280a708f8fSGustavo F. Padovan 29bb58f747SGustavo F. Padovan /* Bluetooth L2CAP core. */ 300a708f8fSGustavo F. Padovan 310a708f8fSGustavo F. Padovan #include <linux/module.h> 320a708f8fSGustavo F. Padovan 330a708f8fSGustavo F. Padovan #include <linux/debugfs.h> 340a708f8fSGustavo F. Padovan #include <linux/crc16.h> 350a708f8fSGustavo F. Padovan 360a708f8fSGustavo F. Padovan #include <net/bluetooth/bluetooth.h> 370a708f8fSGustavo F. Padovan #include <net/bluetooth/hci_core.h> 380a708f8fSGustavo F. Padovan #include <net/bluetooth/l2cap.h> 397ef9fbf0SMarcel Holtmann 40ac4b7236SMarcel Holtmann #include "smp.h" 417024728eSMarcel Holtmann #include "a2mp.h" 427ef9fbf0SMarcel Holtmann #include "amp.h" 430a708f8fSGustavo F. Padovan 44d1de6d46SMat Martineau bool disable_ertm; 450a708f8fSGustavo F. Padovan 46547d1032SMarcel Holtmann static u32 l2cap_feat_mask = L2CAP_FEAT_FIXED_CHAN | L2CAP_FEAT_UCD; 47d40bffbcSMarcel Holtmann static u8 l2cap_fixed_chan[8] = { L2CAP_FC_L2CAP | L2CAP_FC_CONNLESS, }; 480a708f8fSGustavo F. Padovan 49b5ad8b7fSJohannes Berg static LIST_HEAD(chan_list); 50b5ad8b7fSJohannes Berg static DEFINE_RWLOCK(chan_list_lock); 510a708f8fSGustavo F. Padovan 520a708f8fSGustavo F. Padovan static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn, 530a708f8fSGustavo F. Padovan u8 code, u8 ident, u16 dlen, void *data); 544519de9aSGustavo F. Padovan static void l2cap_send_cmd(struct l2cap_conn *conn, u8 ident, u8 code, u16 len, 554519de9aSGustavo F. Padovan void *data); 56710f9b0aSGustavo F. Padovan static int l2cap_build_conf_req(struct l2cap_chan *chan, void *data); 575e4e3972SAndrei Emeltchenko static void l2cap_send_disconn_req(struct l2cap_chan *chan, int err); 580a708f8fSGustavo F. Padovan 59d660366dSGustavo Padovan static void l2cap_tx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 60608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event); 61608bcc6dSMat Martineau 624f1654e0SMarcel Holtmann static inline __u8 bdaddr_type(struct hci_conn *hcon, __u8 type) 634f1654e0SMarcel Holtmann { 644f1654e0SMarcel Holtmann if (hcon->type == LE_LINK) { 654f1654e0SMarcel Holtmann if (type == ADDR_LE_DEV_PUBLIC) 664f1654e0SMarcel Holtmann return BDADDR_LE_PUBLIC; 674f1654e0SMarcel Holtmann else 684f1654e0SMarcel Holtmann return BDADDR_LE_RANDOM; 694f1654e0SMarcel Holtmann } 704f1654e0SMarcel Holtmann 714f1654e0SMarcel Holtmann return BDADDR_BREDR; 724f1654e0SMarcel Holtmann } 734f1654e0SMarcel Holtmann 740a708f8fSGustavo F. Padovan /* ---- L2CAP channels ---- */ 7571ba0e56SGustavo F. Padovan 762d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_dcid(struct l2cap_conn *conn, 772d792818SGustavo Padovan u16 cid) 780a708f8fSGustavo F. Padovan { 793df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 80baa7e1faSGustavo F. Padovan 813df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 823df91ea2SAndrei Emeltchenko if (c->dcid == cid) 833df91ea2SAndrei Emeltchenko return c; 840a708f8fSGustavo F. Padovan } 853df91ea2SAndrei Emeltchenko return NULL; 86baa7e1faSGustavo F. Padovan } 870a708f8fSGustavo F. Padovan 882d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_scid(struct l2cap_conn *conn, 892d792818SGustavo Padovan u16 cid) 900a708f8fSGustavo F. Padovan { 913df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 92baa7e1faSGustavo F. Padovan 933df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 943df91ea2SAndrei Emeltchenko if (c->scid == cid) 953df91ea2SAndrei Emeltchenko return c; 960a708f8fSGustavo F. Padovan } 973df91ea2SAndrei Emeltchenko return NULL; 98baa7e1faSGustavo F. Padovan } 990a708f8fSGustavo F. Padovan 1000a708f8fSGustavo F. Padovan /* Find channel with given SCID. 101ef191adeSMat Martineau * Returns locked channel. */ 1022d792818SGustavo Padovan static struct l2cap_chan *l2cap_get_chan_by_scid(struct l2cap_conn *conn, 1032d792818SGustavo Padovan u16 cid) 1040a708f8fSGustavo F. Padovan { 10548454079SGustavo F. Padovan struct l2cap_chan *c; 106baa7e1faSGustavo F. Padovan 1073df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 108baa7e1faSGustavo F. Padovan c = __l2cap_get_chan_by_scid(conn, cid); 109ef191adeSMat Martineau if (c) 110ef191adeSMat Martineau l2cap_chan_lock(c); 1113df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 1123df91ea2SAndrei Emeltchenko 11348454079SGustavo F. Padovan return c; 1140a708f8fSGustavo F. Padovan } 1150a708f8fSGustavo F. Padovan 116b1a130b7SMat Martineau /* Find channel with given DCID. 117b1a130b7SMat Martineau * Returns locked channel. 118b1a130b7SMat Martineau */ 119b1a130b7SMat Martineau static struct l2cap_chan *l2cap_get_chan_by_dcid(struct l2cap_conn *conn, 120b1a130b7SMat Martineau u16 cid) 121b1a130b7SMat Martineau { 122b1a130b7SMat Martineau struct l2cap_chan *c; 123b1a130b7SMat Martineau 124b1a130b7SMat Martineau mutex_lock(&conn->chan_lock); 125b1a130b7SMat Martineau c = __l2cap_get_chan_by_dcid(conn, cid); 126b1a130b7SMat Martineau if (c) 127b1a130b7SMat Martineau l2cap_chan_lock(c); 128b1a130b7SMat Martineau mutex_unlock(&conn->chan_lock); 129b1a130b7SMat Martineau 130b1a130b7SMat Martineau return c; 131b1a130b7SMat Martineau } 132b1a130b7SMat Martineau 1332d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_ident(struct l2cap_conn *conn, 1342d792818SGustavo Padovan u8 ident) 1350a708f8fSGustavo F. Padovan { 1363df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 137baa7e1faSGustavo F. Padovan 1383df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 1393df91ea2SAndrei Emeltchenko if (c->ident == ident) 1403df91ea2SAndrei Emeltchenko return c; 1410a708f8fSGustavo F. Padovan } 1423df91ea2SAndrei Emeltchenko return NULL; 143baa7e1faSGustavo F. Padovan } 1440a708f8fSGustavo F. Padovan 1455b155ef9SMat Martineau static struct l2cap_chan *l2cap_get_chan_by_ident(struct l2cap_conn *conn, 1465b155ef9SMat Martineau u8 ident) 1475b155ef9SMat Martineau { 1485b155ef9SMat Martineau struct l2cap_chan *c; 1495b155ef9SMat Martineau 1505b155ef9SMat Martineau mutex_lock(&conn->chan_lock); 1515b155ef9SMat Martineau c = __l2cap_get_chan_by_ident(conn, ident); 1525b155ef9SMat Martineau if (c) 1535b155ef9SMat Martineau l2cap_chan_lock(c); 1545b155ef9SMat Martineau mutex_unlock(&conn->chan_lock); 1555b155ef9SMat Martineau 1565b155ef9SMat Martineau return c; 1575b155ef9SMat Martineau } 1585b155ef9SMat Martineau 15923691d75SGustavo F. Padovan static struct l2cap_chan *__l2cap_global_chan_by_addr(__le16 psm, bdaddr_t *src) 1609e4425ffSGustavo F. Padovan { 16123691d75SGustavo F. Padovan struct l2cap_chan *c; 1629e4425ffSGustavo F. Padovan 16323691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 1647eafc59eSMarcel Holtmann if (c->sport == psm && !bacmp(&c->src, src)) 16523691d75SGustavo F. Padovan return c; 1669e4425ffSGustavo F. Padovan } 167250938cbSSzymon Janc return NULL; 168250938cbSSzymon Janc } 1699e4425ffSGustavo F. Padovan 1709e4425ffSGustavo F. Padovan int l2cap_add_psm(struct l2cap_chan *chan, bdaddr_t *src, __le16 psm) 1719e4425ffSGustavo F. Padovan { 17273b2ec18SGustavo F. Padovan int err; 17373b2ec18SGustavo F. Padovan 174333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 1759e4425ffSGustavo F. Padovan 17623691d75SGustavo F. Padovan if (psm && __l2cap_global_chan_by_addr(psm, src)) { 17773b2ec18SGustavo F. Padovan err = -EADDRINUSE; 17873b2ec18SGustavo F. Padovan goto done; 1799e4425ffSGustavo F. Padovan } 1809e4425ffSGustavo F. Padovan 18173b2ec18SGustavo F. Padovan if (psm) { 1829e4425ffSGustavo F. Padovan chan->psm = psm; 1839e4425ffSGustavo F. Padovan chan->sport = psm; 18473b2ec18SGustavo F. Padovan err = 0; 18573b2ec18SGustavo F. Padovan } else { 18673b2ec18SGustavo F. Padovan u16 p; 1879e4425ffSGustavo F. Padovan 18873b2ec18SGustavo F. Padovan err = -EINVAL; 18973b2ec18SGustavo F. Padovan for (p = 0x1001; p < 0x1100; p += 2) 19023691d75SGustavo F. Padovan if (!__l2cap_global_chan_by_addr(cpu_to_le16(p), src)) { 19173b2ec18SGustavo F. Padovan chan->psm = cpu_to_le16(p); 19273b2ec18SGustavo F. Padovan chan->sport = cpu_to_le16(p); 19373b2ec18SGustavo F. Padovan err = 0; 19473b2ec18SGustavo F. Padovan break; 19573b2ec18SGustavo F. Padovan } 19673b2ec18SGustavo F. Padovan } 19773b2ec18SGustavo F. Padovan 19873b2ec18SGustavo F. Padovan done: 199333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 20073b2ec18SGustavo F. Padovan return err; 2019e4425ffSGustavo F. Padovan } 2029e4425ffSGustavo F. Padovan 2039e4425ffSGustavo F. Padovan int l2cap_add_scid(struct l2cap_chan *chan, __u16 scid) 2049e4425ffSGustavo F. Padovan { 205333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 2069e4425ffSGustavo F. Padovan 2079e4425ffSGustavo F. Padovan chan->scid = scid; 2089e4425ffSGustavo F. Padovan 209333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 2109e4425ffSGustavo F. Padovan 2119e4425ffSGustavo F. Padovan return 0; 2129e4425ffSGustavo F. Padovan } 2139e4425ffSGustavo F. Padovan 214baa7e1faSGustavo F. Padovan static u16 l2cap_alloc_cid(struct l2cap_conn *conn) 2150a708f8fSGustavo F. Padovan { 2160a708f8fSGustavo F. Padovan u16 cid = L2CAP_CID_DYN_START; 2170a708f8fSGustavo F. Padovan 2180a708f8fSGustavo F. Padovan for (; cid < L2CAP_CID_DYN_END; cid++) { 219baa7e1faSGustavo F. Padovan if (!__l2cap_get_chan_by_scid(conn, cid)) 2200a708f8fSGustavo F. Padovan return cid; 2210a708f8fSGustavo F. Padovan } 2220a708f8fSGustavo F. Padovan 2230a708f8fSGustavo F. Padovan return 0; 2240a708f8fSGustavo F. Padovan } 2250a708f8fSGustavo F. Padovan 226f93fa273SGustavo Padovan static void l2cap_state_change(struct l2cap_chan *chan, int state) 22789bc500eSGustavo F. Padovan { 22842d2d87cSAndrei Emeltchenko BT_DBG("chan %p %s -> %s", chan, state_to_string(chan->state), 229badaaa00SGustavo F. Padovan state_to_string(state)); 230badaaa00SGustavo F. Padovan 23189bc500eSGustavo F. Padovan chan->state = state; 23253f52121SGustavo Padovan chan->ops->state_change(chan, state, 0); 23389bc500eSGustavo F. Padovan } 23489bc500eSGustavo F. Padovan 235f8e73017SGustavo Padovan static inline void l2cap_state_change_and_error(struct l2cap_chan *chan, 236f8e73017SGustavo Padovan int state, int err) 2372e0052e4SAndrei Emeltchenko { 238f8e73017SGustavo Padovan chan->state = state; 23953f52121SGustavo Padovan chan->ops->state_change(chan, chan->state, err); 2402e0052e4SAndrei Emeltchenko } 2412e0052e4SAndrei Emeltchenko 2422e0052e4SAndrei Emeltchenko static inline void l2cap_chan_set_err(struct l2cap_chan *chan, int err) 2432e0052e4SAndrei Emeltchenko { 244f8e73017SGustavo Padovan chan->ops->state_change(chan, chan->state, err); 2452e0052e4SAndrei Emeltchenko } 2462e0052e4SAndrei Emeltchenko 2474239d16fSMat Martineau static void __set_retrans_timer(struct l2cap_chan *chan) 2484239d16fSMat Martineau { 2494239d16fSMat Martineau if (!delayed_work_pending(&chan->monitor_timer) && 2504239d16fSMat Martineau chan->retrans_timeout) { 2514239d16fSMat Martineau l2cap_set_timer(chan, &chan->retrans_timer, 2524239d16fSMat Martineau msecs_to_jiffies(chan->retrans_timeout)); 2534239d16fSMat Martineau } 2544239d16fSMat Martineau } 2554239d16fSMat Martineau 2564239d16fSMat Martineau static void __set_monitor_timer(struct l2cap_chan *chan) 2574239d16fSMat Martineau { 2584239d16fSMat Martineau __clear_retrans_timer(chan); 2594239d16fSMat Martineau if (chan->monitor_timeout) { 2604239d16fSMat Martineau l2cap_set_timer(chan, &chan->monitor_timer, 2614239d16fSMat Martineau msecs_to_jiffies(chan->monitor_timeout)); 2624239d16fSMat Martineau } 2634239d16fSMat Martineau } 2644239d16fSMat Martineau 265608bcc6dSMat Martineau static struct sk_buff *l2cap_ertm_seq_in_queue(struct sk_buff_head *head, 266608bcc6dSMat Martineau u16 seq) 267608bcc6dSMat Martineau { 268608bcc6dSMat Martineau struct sk_buff *skb; 269608bcc6dSMat Martineau 270608bcc6dSMat Martineau skb_queue_walk(head, skb) { 271608bcc6dSMat Martineau if (bt_cb(skb)->control.txseq == seq) 272608bcc6dSMat Martineau return skb; 273608bcc6dSMat Martineau } 274608bcc6dSMat Martineau 275608bcc6dSMat Martineau return NULL; 276608bcc6dSMat Martineau } 277608bcc6dSMat Martineau 2783c588192SMat Martineau /* ---- L2CAP sequence number lists ---- */ 2793c588192SMat Martineau 2803c588192SMat Martineau /* For ERTM, ordered lists of sequence numbers must be tracked for 2813c588192SMat Martineau * SREJ requests that are received and for frames that are to be 2823c588192SMat Martineau * retransmitted. These seq_list functions implement a singly-linked 2833c588192SMat Martineau * list in an array, where membership in the list can also be checked 2843c588192SMat Martineau * in constant time. Items can also be added to the tail of the list 2853c588192SMat Martineau * and removed from the head in constant time, without further memory 2863c588192SMat Martineau * allocs or frees. 2873c588192SMat Martineau */ 2883c588192SMat Martineau 2893c588192SMat Martineau static int l2cap_seq_list_init(struct l2cap_seq_list *seq_list, u16 size) 2903c588192SMat Martineau { 2913c588192SMat Martineau size_t alloc_size, i; 2923c588192SMat Martineau 2933c588192SMat Martineau /* Allocated size is a power of 2 to map sequence numbers 2943c588192SMat Martineau * (which may be up to 14 bits) in to a smaller array that is 2953c588192SMat Martineau * sized for the negotiated ERTM transmit windows. 2963c588192SMat Martineau */ 2973c588192SMat Martineau alloc_size = roundup_pow_of_two(size); 2983c588192SMat Martineau 2993c588192SMat Martineau seq_list->list = kmalloc(sizeof(u16) * alloc_size, GFP_KERNEL); 3003c588192SMat Martineau if (!seq_list->list) 3013c588192SMat Martineau return -ENOMEM; 3023c588192SMat Martineau 3033c588192SMat Martineau seq_list->mask = alloc_size - 1; 3043c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3053c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3063c588192SMat Martineau for (i = 0; i < alloc_size; i++) 3073c588192SMat Martineau seq_list->list[i] = L2CAP_SEQ_LIST_CLEAR; 3083c588192SMat Martineau 3093c588192SMat Martineau return 0; 3103c588192SMat Martineau } 3113c588192SMat Martineau 3123c588192SMat Martineau static inline void l2cap_seq_list_free(struct l2cap_seq_list *seq_list) 3133c588192SMat Martineau { 3143c588192SMat Martineau kfree(seq_list->list); 3153c588192SMat Martineau } 3163c588192SMat Martineau 3173c588192SMat Martineau static inline bool l2cap_seq_list_contains(struct l2cap_seq_list *seq_list, 3183c588192SMat Martineau u16 seq) 3193c588192SMat Martineau { 3203c588192SMat Martineau /* Constant-time check for list membership */ 3213c588192SMat Martineau return seq_list->list[seq & seq_list->mask] != L2CAP_SEQ_LIST_CLEAR; 3223c588192SMat Martineau } 3233c588192SMat Martineau 3243c588192SMat Martineau static u16 l2cap_seq_list_remove(struct l2cap_seq_list *seq_list, u16 seq) 3253c588192SMat Martineau { 3263c588192SMat Martineau u16 mask = seq_list->mask; 3273c588192SMat Martineau 3283c588192SMat Martineau if (seq_list->head == L2CAP_SEQ_LIST_CLEAR) { 3293c588192SMat Martineau /* In case someone tries to pop the head of an empty list */ 3303c588192SMat Martineau return L2CAP_SEQ_LIST_CLEAR; 3313c588192SMat Martineau } else if (seq_list->head == seq) { 3323c588192SMat Martineau /* Head can be removed in constant time */ 3333c588192SMat Martineau seq_list->head = seq_list->list[seq & mask]; 3343c588192SMat Martineau seq_list->list[seq & mask] = L2CAP_SEQ_LIST_CLEAR; 3353c588192SMat Martineau 3363c588192SMat Martineau if (seq_list->head == L2CAP_SEQ_LIST_TAIL) { 3373c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3383c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3393c588192SMat Martineau } 3403c588192SMat Martineau } else { 3413c588192SMat Martineau /* Walk the list to find the sequence number */ 3423c588192SMat Martineau u16 prev = seq_list->head; 3433c588192SMat Martineau while (seq_list->list[prev & mask] != seq) { 3443c588192SMat Martineau prev = seq_list->list[prev & mask]; 3453c588192SMat Martineau if (prev == L2CAP_SEQ_LIST_TAIL) 3463c588192SMat Martineau return L2CAP_SEQ_LIST_CLEAR; 3473c588192SMat Martineau } 3483c588192SMat Martineau 3493c588192SMat Martineau /* Unlink the number from the list and clear it */ 3503c588192SMat Martineau seq_list->list[prev & mask] = seq_list->list[seq & mask]; 3513c588192SMat Martineau seq_list->list[seq & mask] = L2CAP_SEQ_LIST_CLEAR; 3523c588192SMat Martineau if (seq_list->tail == seq) 3533c588192SMat Martineau seq_list->tail = prev; 3543c588192SMat Martineau } 3553c588192SMat Martineau return seq; 3563c588192SMat Martineau } 3573c588192SMat Martineau 3583c588192SMat Martineau static inline u16 l2cap_seq_list_pop(struct l2cap_seq_list *seq_list) 3593c588192SMat Martineau { 3603c588192SMat Martineau /* Remove the head in constant time */ 3613c588192SMat Martineau return l2cap_seq_list_remove(seq_list, seq_list->head); 3623c588192SMat Martineau } 3633c588192SMat Martineau 3643c588192SMat Martineau static void l2cap_seq_list_clear(struct l2cap_seq_list *seq_list) 3653c588192SMat Martineau { 3663c588192SMat Martineau u16 i; 367f522ae36SGustavo Padovan 368f522ae36SGustavo Padovan if (seq_list->head == L2CAP_SEQ_LIST_CLEAR) 369f522ae36SGustavo Padovan return; 370f522ae36SGustavo Padovan 3713c588192SMat Martineau for (i = 0; i <= seq_list->mask; i++) 3723c588192SMat Martineau seq_list->list[i] = L2CAP_SEQ_LIST_CLEAR; 3733c588192SMat Martineau 3743c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3753c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3763c588192SMat Martineau } 3773c588192SMat Martineau 3783c588192SMat Martineau static void l2cap_seq_list_append(struct l2cap_seq_list *seq_list, u16 seq) 3793c588192SMat Martineau { 3803c588192SMat Martineau u16 mask = seq_list->mask; 3813c588192SMat Martineau 3823c588192SMat Martineau /* All appends happen in constant time */ 3833c588192SMat Martineau 384f522ae36SGustavo Padovan if (seq_list->list[seq & mask] != L2CAP_SEQ_LIST_CLEAR) 385f522ae36SGustavo Padovan return; 386f522ae36SGustavo Padovan 3873c588192SMat Martineau if (seq_list->tail == L2CAP_SEQ_LIST_CLEAR) 3883c588192SMat Martineau seq_list->head = seq; 3893c588192SMat Martineau else 3903c588192SMat Martineau seq_list->list[seq_list->tail & mask] = seq; 3913c588192SMat Martineau 3923c588192SMat Martineau seq_list->tail = seq; 3933c588192SMat Martineau seq_list->list[seq & mask] = L2CAP_SEQ_LIST_TAIL; 3943c588192SMat Martineau } 3953c588192SMat Martineau 396721c4181SGustavo F. Padovan static void l2cap_chan_timeout(struct work_struct *work) 397ab07801dSGustavo F. Padovan { 398721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 399721c4181SGustavo F. Padovan chan_timer.work); 4003df91ea2SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 401ab07801dSGustavo F. Padovan int reason; 402ab07801dSGustavo F. Padovan 403e05dcc32SAndrei Emeltchenko BT_DBG("chan %p state %s", chan, state_to_string(chan->state)); 404ab07801dSGustavo F. Padovan 4053df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 4066be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 407ab07801dSGustavo F. Padovan 40889bc500eSGustavo F. Padovan if (chan->state == BT_CONNECTED || chan->state == BT_CONFIG) 409ab07801dSGustavo F. Padovan reason = ECONNREFUSED; 41089bc500eSGustavo F. Padovan else if (chan->state == BT_CONNECT && 411ab07801dSGustavo F. Padovan chan->sec_level != BT_SECURITY_SDP) 412ab07801dSGustavo F. Padovan reason = ECONNREFUSED; 413ab07801dSGustavo F. Padovan else 414ab07801dSGustavo F. Padovan reason = ETIMEDOUT; 415ab07801dSGustavo F. Padovan 4160f852724SGustavo F. Padovan l2cap_chan_close(chan, reason); 417ab07801dSGustavo F. Padovan 4186be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 419ab07801dSGustavo F. Padovan 42080b98027SGustavo Padovan chan->ops->close(chan); 4213df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 4223df91ea2SAndrei Emeltchenko 423371fd835SUlisses Furquim l2cap_chan_put(chan); 424ab07801dSGustavo F. Padovan } 425ab07801dSGustavo F. Padovan 426eef1d9b6SGustavo Padovan struct l2cap_chan *l2cap_chan_create(void) 4270a708f8fSGustavo F. Padovan { 42848454079SGustavo F. Padovan struct l2cap_chan *chan; 4290a708f8fSGustavo F. Padovan 43048454079SGustavo F. Padovan chan = kzalloc(sizeof(*chan), GFP_ATOMIC); 43148454079SGustavo F. Padovan if (!chan) 43248454079SGustavo F. Padovan return NULL; 4330a708f8fSGustavo F. Padovan 434c03b355eSAndrei Emeltchenko mutex_init(&chan->lock); 435c03b355eSAndrei Emeltchenko 436333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 43723691d75SGustavo F. Padovan list_add(&chan->global_l, &chan_list); 438333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 43923691d75SGustavo F. Padovan 440721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->chan_timer, l2cap_chan_timeout); 441ab07801dSGustavo F. Padovan 44289bc500eSGustavo F. Padovan chan->state = BT_OPEN; 44389bc500eSGustavo F. Padovan 444144ad330SSyam Sidhardhan kref_init(&chan->kref); 44571ba0e56SGustavo F. Padovan 4462827011fSMat Martineau /* This flag is cleared in l2cap_chan_ready() */ 4472827011fSMat Martineau set_bit(CONF_NOT_COMPLETE, &chan->conf_state); 4482827011fSMat Martineau 449eef1d9b6SGustavo Padovan BT_DBG("chan %p", chan); 450abc545b8SSzymon Janc 45148454079SGustavo F. Padovan return chan; 4520a708f8fSGustavo F. Padovan } 4530a708f8fSGustavo F. Padovan 454144ad330SSyam Sidhardhan static void l2cap_chan_destroy(struct kref *kref) 4556ff5abbfSGustavo F. Padovan { 456144ad330SSyam Sidhardhan struct l2cap_chan *chan = container_of(kref, struct l2cap_chan, kref); 457144ad330SSyam Sidhardhan 4584af66c69SJaganath Kanakkassery BT_DBG("chan %p", chan); 4594af66c69SJaganath Kanakkassery 460333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 46123691d75SGustavo F. Padovan list_del(&chan->global_l); 462333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 46323691d75SGustavo F. Padovan 4644af66c69SJaganath Kanakkassery kfree(chan); 4656ff5abbfSGustavo F. Padovan } 4666ff5abbfSGustavo F. Padovan 46730648372SJaganath Kanakkassery void l2cap_chan_hold(struct l2cap_chan *c) 46830648372SJaganath Kanakkassery { 469144ad330SSyam Sidhardhan BT_DBG("chan %p orig refcnt %d", c, atomic_read(&c->kref.refcount)); 47030648372SJaganath Kanakkassery 471144ad330SSyam Sidhardhan kref_get(&c->kref); 47230648372SJaganath Kanakkassery } 47330648372SJaganath Kanakkassery 47430648372SJaganath Kanakkassery void l2cap_chan_put(struct l2cap_chan *c) 47530648372SJaganath Kanakkassery { 476144ad330SSyam Sidhardhan BT_DBG("chan %p orig refcnt %d", c, atomic_read(&c->kref.refcount)); 47730648372SJaganath Kanakkassery 478144ad330SSyam Sidhardhan kref_put(&c->kref, l2cap_chan_destroy); 47930648372SJaganath Kanakkassery } 48030648372SJaganath Kanakkassery 481bd4b1653SAndrei Emeltchenko void l2cap_chan_set_defaults(struct l2cap_chan *chan) 482bd4b1653SAndrei Emeltchenko { 483bd4b1653SAndrei Emeltchenko chan->fcs = L2CAP_FCS_CRC16; 484bd4b1653SAndrei Emeltchenko chan->max_tx = L2CAP_DEFAULT_MAX_TX; 485bd4b1653SAndrei Emeltchenko chan->tx_win = L2CAP_DEFAULT_TX_WINDOW; 486bd4b1653SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_TX_WINDOW; 487c20f8e35SMat Martineau chan->ack_win = L2CAP_DEFAULT_TX_WINDOW; 488bd4b1653SAndrei Emeltchenko chan->sec_level = BT_SECURITY_LOW; 489bd4b1653SAndrei Emeltchenko 490bd4b1653SAndrei Emeltchenko set_bit(FLAG_FORCE_ACTIVE, &chan->flags); 491bd4b1653SAndrei Emeltchenko } 492bd4b1653SAndrei Emeltchenko 49393c3e8f5SAndrei Emeltchenko void __l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan) 4940a708f8fSGustavo F. Padovan { 4950a708f8fSGustavo F. Padovan BT_DBG("conn %p, psm 0x%2.2x, dcid 0x%4.4x", conn, 496097db76cSAndrei Emeltchenko __le16_to_cpu(chan->psm), chan->dcid); 4970a708f8fSGustavo F. Padovan 4989f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_REMOTE_USER_TERM; 4990a708f8fSGustavo F. Padovan 5008c1d787bSGustavo F. Padovan chan->conn = conn; 5010a708f8fSGustavo F. Padovan 5025491120eSAndrei Emeltchenko switch (chan->chan_type) { 5035491120eSAndrei Emeltchenko case L2CAP_CHAN_CONN_ORIENTED: 504b62f328bSVille Tervo if (conn->hcon->type == LE_LINK) { 505b62f328bSVille Tervo /* LE connection */ 5066fcb06a2SAndre Guedes chan->omtu = L2CAP_DEFAULT_MTU; 5079f22398cSJohan Hedberg if (chan->dcid == L2CAP_CID_ATT) 508073d1cf3SJohan Hedberg chan->scid = L2CAP_CID_ATT; 5099f22398cSJohan Hedberg else 5109f22398cSJohan Hedberg chan->scid = l2cap_alloc_cid(conn); 511b62f328bSVille Tervo } else { 5120a708f8fSGustavo F. Padovan /* Alloc CID for connection-oriented socket */ 513fe4128e0SGustavo F. Padovan chan->scid = l2cap_alloc_cid(conn); 5140c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 515b62f328bSVille Tervo } 5165491120eSAndrei Emeltchenko break; 5175491120eSAndrei Emeltchenko 5185491120eSAndrei Emeltchenko case L2CAP_CHAN_CONN_LESS: 5190a708f8fSGustavo F. Padovan /* Connectionless socket */ 520fe4128e0SGustavo F. Padovan chan->scid = L2CAP_CID_CONN_LESS; 521fe4128e0SGustavo F. Padovan chan->dcid = L2CAP_CID_CONN_LESS; 5220c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 5235491120eSAndrei Emeltchenko break; 5245491120eSAndrei Emeltchenko 525416fa752SAndrei Emeltchenko case L2CAP_CHAN_CONN_FIX_A2MP: 526416fa752SAndrei Emeltchenko chan->scid = L2CAP_CID_A2MP; 527416fa752SAndrei Emeltchenko chan->dcid = L2CAP_CID_A2MP; 528416fa752SAndrei Emeltchenko chan->omtu = L2CAP_A2MP_DEFAULT_MTU; 529416fa752SAndrei Emeltchenko chan->imtu = L2CAP_A2MP_DEFAULT_MTU; 530416fa752SAndrei Emeltchenko break; 531416fa752SAndrei Emeltchenko 5325491120eSAndrei Emeltchenko default: 5330a708f8fSGustavo F. Padovan /* Raw socket can send/recv signalling messages only */ 534fe4128e0SGustavo F. Padovan chan->scid = L2CAP_CID_SIGNALING; 535fe4128e0SGustavo F. Padovan chan->dcid = L2CAP_CID_SIGNALING; 5360c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 5370a708f8fSGustavo F. Padovan } 5380a708f8fSGustavo F. Padovan 5398f7975b1SAndrei Emeltchenko chan->local_id = L2CAP_BESTEFFORT_ID; 5408f7975b1SAndrei Emeltchenko chan->local_stype = L2CAP_SERV_BESTEFFORT; 5418f7975b1SAndrei Emeltchenko chan->local_msdu = L2CAP_DEFAULT_MAX_SDU_SIZE; 5428f7975b1SAndrei Emeltchenko chan->local_sdu_itime = L2CAP_DEFAULT_SDU_ITIME; 5438f7975b1SAndrei Emeltchenko chan->local_acc_lat = L2CAP_DEFAULT_ACC_LAT; 5448936fa6dSAndrei Emeltchenko chan->local_flush_to = L2CAP_EFS_DEFAULT_FLUSH_TO; 5458f7975b1SAndrei Emeltchenko 546371fd835SUlisses Furquim l2cap_chan_hold(chan); 547baa7e1faSGustavo F. Padovan 5485ee9891dSJohan Hedberg hci_conn_hold(conn->hcon); 5495ee9891dSJohan Hedberg 5503df91ea2SAndrei Emeltchenko list_add(&chan->list, &conn->chan_l); 551643162a8SAndrei Emeltchenko } 552643162a8SAndrei Emeltchenko 553466f8004SAndrei Emeltchenko void l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan) 554643162a8SAndrei Emeltchenko { 555643162a8SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 556643162a8SAndrei Emeltchenko __l2cap_chan_add(conn, chan); 5573df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 5580a708f8fSGustavo F. Padovan } 5590a708f8fSGustavo F. Padovan 560466f8004SAndrei Emeltchenko void l2cap_chan_del(struct l2cap_chan *chan, int err) 5610a708f8fSGustavo F. Padovan { 5628c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 5630a708f8fSGustavo F. Padovan 564c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 5650a708f8fSGustavo F. Padovan 56649208c9cSGustavo F. Padovan BT_DBG("chan %p, conn %p, err %d", chan, conn, err); 5670a708f8fSGustavo F. Padovan 5680a708f8fSGustavo F. Padovan if (conn) { 56956f60984SAndrei Emeltchenko struct amp_mgr *mgr = conn->hcon->amp_mgr; 570baa7e1faSGustavo F. Padovan /* Delete from channel list */ 5713df91ea2SAndrei Emeltchenko list_del(&chan->list); 5723d57dc68SGustavo F. Padovan 573371fd835SUlisses Furquim l2cap_chan_put(chan); 574baa7e1faSGustavo F. Padovan 5758c1d787bSGustavo F. Padovan chan->conn = NULL; 5763cabbfdaSAndrei Emeltchenko 5773cabbfdaSAndrei Emeltchenko if (chan->chan_type != L2CAP_CHAN_CONN_FIX_A2MP) 57876a68ba0SDavid Herrmann hci_conn_drop(conn->hcon); 57956f60984SAndrei Emeltchenko 58056f60984SAndrei Emeltchenko if (mgr && mgr->bredr_chan == chan) 58156f60984SAndrei Emeltchenko mgr->bredr_chan = NULL; 5820a708f8fSGustavo F. Padovan } 5830a708f8fSGustavo F. Padovan 584419e08c1SAndrei Emeltchenko if (chan->hs_hchan) { 585419e08c1SAndrei Emeltchenko struct hci_chan *hs_hchan = chan->hs_hchan; 586419e08c1SAndrei Emeltchenko 587419e08c1SAndrei Emeltchenko BT_DBG("chan %p disconnect hs_hchan %p", chan, hs_hchan); 588419e08c1SAndrei Emeltchenko amp_disconnect_logical_link(hs_hchan); 589419e08c1SAndrei Emeltchenko } 590419e08c1SAndrei Emeltchenko 591c0df7f6eSAndrei Emeltchenko chan->ops->teardown(chan, err); 5926be36555SAndrei Emeltchenko 5932827011fSMat Martineau if (test_bit(CONF_NOT_COMPLETE, &chan->conf_state)) 5946ff5abbfSGustavo F. Padovan return; 5952ead70b8SGustavo F. Padovan 596ee556f66SGustavo Padovan switch(chan->mode) { 597ee556f66SGustavo Padovan case L2CAP_MODE_BASIC: 598ee556f66SGustavo Padovan break; 5990a708f8fSGustavo F. Padovan 600ee556f66SGustavo Padovan case L2CAP_MODE_ERTM: 6011a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 6021a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 6031a09bcb9SGustavo F. Padovan __clear_ack_timer(chan); 6040a708f8fSGustavo F. Padovan 605f1c6775bSGustavo F. Padovan skb_queue_purge(&chan->srej_q); 6060a708f8fSGustavo F. Padovan 6073c588192SMat Martineau l2cap_seq_list_free(&chan->srej_list); 6083c588192SMat Martineau l2cap_seq_list_free(&chan->retrans_list); 609ee556f66SGustavo Padovan 610ee556f66SGustavo Padovan /* fall through */ 611ee556f66SGustavo Padovan 612ee556f66SGustavo Padovan case L2CAP_MODE_STREAMING: 613ee556f66SGustavo Padovan skb_queue_purge(&chan->tx_q); 614ee556f66SGustavo Padovan break; 6150a708f8fSGustavo F. Padovan } 616ee556f66SGustavo Padovan 617ee556f66SGustavo Padovan return; 6180a708f8fSGustavo F. Padovan } 6190a708f8fSGustavo F. Padovan 6200f852724SGustavo F. Padovan void l2cap_chan_close(struct l2cap_chan *chan, int reason) 6214519de9aSGustavo F. Padovan { 6224519de9aSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 6234519de9aSGustavo F. Padovan 6247eafc59eSMarcel Holtmann BT_DBG("chan %p state %s", chan, state_to_string(chan->state)); 6254519de9aSGustavo F. Padovan 62689bc500eSGustavo F. Padovan switch (chan->state) { 6274519de9aSGustavo F. Padovan case BT_LISTEN: 628c0df7f6eSAndrei Emeltchenko chan->ops->teardown(chan, 0); 6294519de9aSGustavo F. Padovan break; 6304519de9aSGustavo F. Padovan 6314519de9aSGustavo F. Padovan case BT_CONNECTED: 6324519de9aSGustavo F. Padovan case BT_CONFIG: 633715ec005SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED && 6344519de9aSGustavo F. Padovan conn->hcon->type == ACL_LINK) { 6358d836d71SGustavo Padovan __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 6365e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, reason); 6374519de9aSGustavo F. Padovan } else 6384519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 6394519de9aSGustavo F. Padovan break; 6404519de9aSGustavo F. Padovan 6414519de9aSGustavo F. Padovan case BT_CONNECT2: 642715ec005SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED && 6434519de9aSGustavo F. Padovan conn->hcon->type == ACL_LINK) { 6444519de9aSGustavo F. Padovan struct l2cap_conn_rsp rsp; 6454519de9aSGustavo F. Padovan __u16 result; 6464519de9aSGustavo F. Padovan 647bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) 6484519de9aSGustavo F. Padovan result = L2CAP_CR_SEC_BLOCK; 6494519de9aSGustavo F. Padovan else 6504519de9aSGustavo F. Padovan result = L2CAP_CR_BAD_PSM; 651bdc25783SMarcel Holtmann 65289bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_DISCONN); 6534519de9aSGustavo F. Padovan 6544519de9aSGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 6554519de9aSGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 6564519de9aSGustavo F. Padovan rsp.result = cpu_to_le16(result); 657ac73498cSAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_NO_INFO); 6584519de9aSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 6594519de9aSGustavo F. Padovan sizeof(rsp), &rsp); 6604519de9aSGustavo F. Padovan } 6614519de9aSGustavo F. Padovan 6624519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 6634519de9aSGustavo F. Padovan break; 6644519de9aSGustavo F. Padovan 6654519de9aSGustavo F. Padovan case BT_CONNECT: 6664519de9aSGustavo F. Padovan case BT_DISCONN: 6674519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 6684519de9aSGustavo F. Padovan break; 6694519de9aSGustavo F. Padovan 6704519de9aSGustavo F. Padovan default: 671c0df7f6eSAndrei Emeltchenko chan->ops->teardown(chan, 0); 6724519de9aSGustavo F. Padovan break; 6734519de9aSGustavo F. Padovan } 6744519de9aSGustavo F. Padovan } 6754519de9aSGustavo F. Padovan 6764343478fSGustavo F. Padovan static inline u8 l2cap_get_auth_type(struct l2cap_chan *chan) 6770a708f8fSGustavo F. Padovan { 6786a974b50SMarcel Holtmann switch (chan->chan_type) { 6796a974b50SMarcel Holtmann case L2CAP_CHAN_RAW: 6804343478fSGustavo F. Padovan switch (chan->sec_level) { 6810a708f8fSGustavo F. Padovan case BT_SECURITY_HIGH: 6820a708f8fSGustavo F. Padovan return HCI_AT_DEDICATED_BONDING_MITM; 6830a708f8fSGustavo F. Padovan case BT_SECURITY_MEDIUM: 6840a708f8fSGustavo F. Padovan return HCI_AT_DEDICATED_BONDING; 6850a708f8fSGustavo F. Padovan default: 6860a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 6870a708f8fSGustavo F. Padovan } 6886a974b50SMarcel Holtmann break; 6893124b843SMarcel Holtmann case L2CAP_CHAN_CONN_LESS: 6903124b843SMarcel Holtmann if (chan->psm == __constant_cpu_to_le16(L2CAP_PSM_3DSP)) { 6913124b843SMarcel Holtmann if (chan->sec_level == BT_SECURITY_LOW) 6923124b843SMarcel Holtmann chan->sec_level = BT_SECURITY_SDP; 6933124b843SMarcel Holtmann } 6943124b843SMarcel Holtmann if (chan->sec_level == BT_SECURITY_HIGH) 6953124b843SMarcel Holtmann return HCI_AT_NO_BONDING_MITM; 6963124b843SMarcel Holtmann else 6973124b843SMarcel Holtmann return HCI_AT_NO_BONDING; 6983124b843SMarcel Holtmann break; 6996a974b50SMarcel Holtmann case L2CAP_CHAN_CONN_ORIENTED: 7006a974b50SMarcel Holtmann if (chan->psm == __constant_cpu_to_le16(L2CAP_PSM_SDP)) { 7014343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_LOW) 7024343478fSGustavo F. Padovan chan->sec_level = BT_SECURITY_SDP; 7030a708f8fSGustavo F. Padovan 7044343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_HIGH) 7050a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING_MITM; 7060a708f8fSGustavo F. Padovan else 7070a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 7086a974b50SMarcel Holtmann } 7096a974b50SMarcel Holtmann /* fall through */ 7106a974b50SMarcel Holtmann default: 7114343478fSGustavo F. Padovan switch (chan->sec_level) { 7120a708f8fSGustavo F. Padovan case BT_SECURITY_HIGH: 7130a708f8fSGustavo F. Padovan return HCI_AT_GENERAL_BONDING_MITM; 7140a708f8fSGustavo F. Padovan case BT_SECURITY_MEDIUM: 7150a708f8fSGustavo F. Padovan return HCI_AT_GENERAL_BONDING; 7160a708f8fSGustavo F. Padovan default: 7170a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 7180a708f8fSGustavo F. Padovan } 7196a974b50SMarcel Holtmann break; 7200a708f8fSGustavo F. Padovan } 7210a708f8fSGustavo F. Padovan } 7220a708f8fSGustavo F. Padovan 7230a708f8fSGustavo F. Padovan /* Service level security */ 724d45fc423SGustavo F. Padovan int l2cap_chan_check_security(struct l2cap_chan *chan) 7250a708f8fSGustavo F. Padovan { 7268c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 7270a708f8fSGustavo F. Padovan __u8 auth_type; 7280a708f8fSGustavo F. Padovan 729a17de2feSJohan Hedberg if (conn->hcon->type == LE_LINK) 730a17de2feSJohan Hedberg return smp_conn_security(conn->hcon, chan->sec_level); 731a17de2feSJohan Hedberg 7324343478fSGustavo F. Padovan auth_type = l2cap_get_auth_type(chan); 7330a708f8fSGustavo F. Padovan 7344343478fSGustavo F. Padovan return hci_conn_security(conn->hcon, chan->sec_level, auth_type); 7350a708f8fSGustavo F. Padovan } 7360a708f8fSGustavo F. Padovan 737b5ad8b7fSJohannes Berg static u8 l2cap_get_ident(struct l2cap_conn *conn) 7380a708f8fSGustavo F. Padovan { 7390a708f8fSGustavo F. Padovan u8 id; 7400a708f8fSGustavo F. Padovan 7410a708f8fSGustavo F. Padovan /* Get next available identificator. 7420a708f8fSGustavo F. Padovan * 1 - 128 are used by kernel. 7430a708f8fSGustavo F. Padovan * 129 - 199 are reserved. 7440a708f8fSGustavo F. Padovan * 200 - 254 are used by utilities like l2ping, etc. 7450a708f8fSGustavo F. Padovan */ 7460a708f8fSGustavo F. Padovan 747333055f2SGustavo F. Padovan spin_lock(&conn->lock); 7480a708f8fSGustavo F. Padovan 7490a708f8fSGustavo F. Padovan if (++conn->tx_ident > 128) 7500a708f8fSGustavo F. Padovan conn->tx_ident = 1; 7510a708f8fSGustavo F. Padovan 7520a708f8fSGustavo F. Padovan id = conn->tx_ident; 7530a708f8fSGustavo F. Padovan 754333055f2SGustavo F. Padovan spin_unlock(&conn->lock); 7550a708f8fSGustavo F. Padovan 7560a708f8fSGustavo F. Padovan return id; 7570a708f8fSGustavo F. Padovan } 7580a708f8fSGustavo F. Padovan 7592d792818SGustavo Padovan static void l2cap_send_cmd(struct l2cap_conn *conn, u8 ident, u8 code, u16 len, 7602d792818SGustavo Padovan void *data) 7610a708f8fSGustavo F. Padovan { 7620a708f8fSGustavo F. Padovan struct sk_buff *skb = l2cap_build_cmd(conn, code, ident, len, data); 7630a708f8fSGustavo F. Padovan u8 flags; 7640a708f8fSGustavo F. Padovan 7650a708f8fSGustavo F. Padovan BT_DBG("code 0x%2.2x", code); 7660a708f8fSGustavo F. Padovan 7670a708f8fSGustavo F. Padovan if (!skb) 7680a708f8fSGustavo F. Padovan return; 7690a708f8fSGustavo F. Padovan 7700a708f8fSGustavo F. Padovan if (lmp_no_flush_capable(conn->hcon->hdev)) 7710a708f8fSGustavo F. Padovan flags = ACL_START_NO_FLUSH; 7720a708f8fSGustavo F. Padovan else 7730a708f8fSGustavo F. Padovan flags = ACL_START; 7740a708f8fSGustavo F. Padovan 77514b12d0bSJaikumar Ganesh bt_cb(skb)->force_active = BT_POWER_FORCE_ACTIVE_ON; 7765e59b791SLuiz Augusto von Dentz skb->priority = HCI_PRIO_MAX; 77714b12d0bSJaikumar Ganesh 77873d80debSLuiz Augusto von Dentz hci_send_acl(conn->hchan, skb, flags); 7790a708f8fSGustavo F. Padovan } 7800a708f8fSGustavo F. Padovan 78102b0fbb9SMat Martineau static bool __chan_is_moving(struct l2cap_chan *chan) 78202b0fbb9SMat Martineau { 78302b0fbb9SMat Martineau return chan->move_state != L2CAP_MOVE_STABLE && 78402b0fbb9SMat Martineau chan->move_state != L2CAP_MOVE_WAIT_PREPARE; 78502b0fbb9SMat Martineau } 78602b0fbb9SMat Martineau 78773d80debSLuiz Augusto von Dentz static void l2cap_do_send(struct l2cap_chan *chan, struct sk_buff *skb) 78873d80debSLuiz Augusto von Dentz { 78973d80debSLuiz Augusto von Dentz struct hci_conn *hcon = chan->conn->hcon; 79073d80debSLuiz Augusto von Dentz u16 flags; 79173d80debSLuiz Augusto von Dentz 79273d80debSLuiz Augusto von Dentz BT_DBG("chan %p, skb %p len %d priority %u", chan, skb, skb->len, 79373d80debSLuiz Augusto von Dentz skb->priority); 79473d80debSLuiz Augusto von Dentz 795d5f8a75dSMat Martineau if (chan->hs_hcon && !__chan_is_moving(chan)) { 796d5f8a75dSMat Martineau if (chan->hs_hchan) 797d5f8a75dSMat Martineau hci_send_acl(chan->hs_hchan, skb, ACL_COMPLETE); 798d5f8a75dSMat Martineau else 799d5f8a75dSMat Martineau kfree_skb(skb); 800d5f8a75dSMat Martineau 801d5f8a75dSMat Martineau return; 802d5f8a75dSMat Martineau } 803d5f8a75dSMat Martineau 80473d80debSLuiz Augusto von Dentz if (!test_bit(FLAG_FLUSHABLE, &chan->flags) && 80573d80debSLuiz Augusto von Dentz lmp_no_flush_capable(hcon->hdev)) 80673d80debSLuiz Augusto von Dentz flags = ACL_START_NO_FLUSH; 80773d80debSLuiz Augusto von Dentz else 80873d80debSLuiz Augusto von Dentz flags = ACL_START; 80973d80debSLuiz Augusto von Dentz 81073d80debSLuiz Augusto von Dentz bt_cb(skb)->force_active = test_bit(FLAG_FORCE_ACTIVE, &chan->flags); 81173d80debSLuiz Augusto von Dentz hci_send_acl(chan->conn->hchan, skb, flags); 8120a708f8fSGustavo F. Padovan } 8130a708f8fSGustavo F. Padovan 814b5c6aaedSMat Martineau static void __unpack_enhanced_control(u16 enh, struct l2cap_ctrl *control) 815b5c6aaedSMat Martineau { 816b5c6aaedSMat Martineau control->reqseq = (enh & L2CAP_CTRL_REQSEQ) >> L2CAP_CTRL_REQSEQ_SHIFT; 817b5c6aaedSMat Martineau control->final = (enh & L2CAP_CTRL_FINAL) >> L2CAP_CTRL_FINAL_SHIFT; 818b5c6aaedSMat Martineau 819b5c6aaedSMat Martineau if (enh & L2CAP_CTRL_FRAME_TYPE) { 820b5c6aaedSMat Martineau /* S-Frame */ 821b5c6aaedSMat Martineau control->sframe = 1; 822b5c6aaedSMat Martineau control->poll = (enh & L2CAP_CTRL_POLL) >> L2CAP_CTRL_POLL_SHIFT; 823b5c6aaedSMat Martineau control->super = (enh & L2CAP_CTRL_SUPERVISE) >> L2CAP_CTRL_SUPER_SHIFT; 824b5c6aaedSMat Martineau 825b5c6aaedSMat Martineau control->sar = 0; 826b5c6aaedSMat Martineau control->txseq = 0; 827b5c6aaedSMat Martineau } else { 828b5c6aaedSMat Martineau /* I-Frame */ 829b5c6aaedSMat Martineau control->sframe = 0; 830b5c6aaedSMat Martineau control->sar = (enh & L2CAP_CTRL_SAR) >> L2CAP_CTRL_SAR_SHIFT; 831b5c6aaedSMat Martineau control->txseq = (enh & L2CAP_CTRL_TXSEQ) >> L2CAP_CTRL_TXSEQ_SHIFT; 832b5c6aaedSMat Martineau 833b5c6aaedSMat Martineau control->poll = 0; 834b5c6aaedSMat Martineau control->super = 0; 835b5c6aaedSMat Martineau } 836b5c6aaedSMat Martineau } 837b5c6aaedSMat Martineau 838b5c6aaedSMat Martineau static void __unpack_extended_control(u32 ext, struct l2cap_ctrl *control) 839b5c6aaedSMat Martineau { 840b5c6aaedSMat Martineau control->reqseq = (ext & L2CAP_EXT_CTRL_REQSEQ) >> L2CAP_EXT_CTRL_REQSEQ_SHIFT; 841b5c6aaedSMat Martineau control->final = (ext & L2CAP_EXT_CTRL_FINAL) >> L2CAP_EXT_CTRL_FINAL_SHIFT; 842b5c6aaedSMat Martineau 843b5c6aaedSMat Martineau if (ext & L2CAP_EXT_CTRL_FRAME_TYPE) { 844b5c6aaedSMat Martineau /* S-Frame */ 845b5c6aaedSMat Martineau control->sframe = 1; 846b5c6aaedSMat Martineau control->poll = (ext & L2CAP_EXT_CTRL_POLL) >> L2CAP_EXT_CTRL_POLL_SHIFT; 847b5c6aaedSMat Martineau control->super = (ext & L2CAP_EXT_CTRL_SUPERVISE) >> L2CAP_EXT_CTRL_SUPER_SHIFT; 848b5c6aaedSMat Martineau 849b5c6aaedSMat Martineau control->sar = 0; 850b5c6aaedSMat Martineau control->txseq = 0; 851b5c6aaedSMat Martineau } else { 852b5c6aaedSMat Martineau /* I-Frame */ 853b5c6aaedSMat Martineau control->sframe = 0; 854b5c6aaedSMat Martineau control->sar = (ext & L2CAP_EXT_CTRL_SAR) >> L2CAP_EXT_CTRL_SAR_SHIFT; 855b5c6aaedSMat Martineau control->txseq = (ext & L2CAP_EXT_CTRL_TXSEQ) >> L2CAP_EXT_CTRL_TXSEQ_SHIFT; 856b5c6aaedSMat Martineau 857b5c6aaedSMat Martineau control->poll = 0; 858b5c6aaedSMat Martineau control->super = 0; 859b5c6aaedSMat Martineau } 860b5c6aaedSMat Martineau } 861b5c6aaedSMat Martineau 862b5c6aaedSMat Martineau static inline void __unpack_control(struct l2cap_chan *chan, 863b5c6aaedSMat Martineau struct sk_buff *skb) 864b5c6aaedSMat Martineau { 865b5c6aaedSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 866b5c6aaedSMat Martineau __unpack_extended_control(get_unaligned_le32(skb->data), 867b5c6aaedSMat Martineau &bt_cb(skb)->control); 868cec8ab6eSMat Martineau skb_pull(skb, L2CAP_EXT_CTRL_SIZE); 869b5c6aaedSMat Martineau } else { 870b5c6aaedSMat Martineau __unpack_enhanced_control(get_unaligned_le16(skb->data), 871b5c6aaedSMat Martineau &bt_cb(skb)->control); 872cec8ab6eSMat Martineau skb_pull(skb, L2CAP_ENH_CTRL_SIZE); 873b5c6aaedSMat Martineau } 874b5c6aaedSMat Martineau } 875b5c6aaedSMat Martineau 876b5c6aaedSMat Martineau static u32 __pack_extended_control(struct l2cap_ctrl *control) 877b5c6aaedSMat Martineau { 878b5c6aaedSMat Martineau u32 packed; 879b5c6aaedSMat Martineau 880b5c6aaedSMat Martineau packed = control->reqseq << L2CAP_EXT_CTRL_REQSEQ_SHIFT; 881b5c6aaedSMat Martineau packed |= control->final << L2CAP_EXT_CTRL_FINAL_SHIFT; 882b5c6aaedSMat Martineau 883b5c6aaedSMat Martineau if (control->sframe) { 884b5c6aaedSMat Martineau packed |= control->poll << L2CAP_EXT_CTRL_POLL_SHIFT; 885b5c6aaedSMat Martineau packed |= control->super << L2CAP_EXT_CTRL_SUPER_SHIFT; 886b5c6aaedSMat Martineau packed |= L2CAP_EXT_CTRL_FRAME_TYPE; 887b5c6aaedSMat Martineau } else { 888b5c6aaedSMat Martineau packed |= control->sar << L2CAP_EXT_CTRL_SAR_SHIFT; 889b5c6aaedSMat Martineau packed |= control->txseq << L2CAP_EXT_CTRL_TXSEQ_SHIFT; 890b5c6aaedSMat Martineau } 891b5c6aaedSMat Martineau 892b5c6aaedSMat Martineau return packed; 893b5c6aaedSMat Martineau } 894b5c6aaedSMat Martineau 895b5c6aaedSMat Martineau static u16 __pack_enhanced_control(struct l2cap_ctrl *control) 896b5c6aaedSMat Martineau { 897b5c6aaedSMat Martineau u16 packed; 898b5c6aaedSMat Martineau 899b5c6aaedSMat Martineau packed = control->reqseq << L2CAP_CTRL_REQSEQ_SHIFT; 900b5c6aaedSMat Martineau packed |= control->final << L2CAP_CTRL_FINAL_SHIFT; 901b5c6aaedSMat Martineau 902b5c6aaedSMat Martineau if (control->sframe) { 903b5c6aaedSMat Martineau packed |= control->poll << L2CAP_CTRL_POLL_SHIFT; 904b5c6aaedSMat Martineau packed |= control->super << L2CAP_CTRL_SUPER_SHIFT; 905b5c6aaedSMat Martineau packed |= L2CAP_CTRL_FRAME_TYPE; 906b5c6aaedSMat Martineau } else { 907b5c6aaedSMat Martineau packed |= control->sar << L2CAP_CTRL_SAR_SHIFT; 908b5c6aaedSMat Martineau packed |= control->txseq << L2CAP_CTRL_TXSEQ_SHIFT; 909b5c6aaedSMat Martineau } 910b5c6aaedSMat Martineau 911b5c6aaedSMat Martineau return packed; 912b5c6aaedSMat Martineau } 913b5c6aaedSMat Martineau 914b5c6aaedSMat Martineau static inline void __pack_control(struct l2cap_chan *chan, 915b5c6aaedSMat Martineau struct l2cap_ctrl *control, 916b5c6aaedSMat Martineau struct sk_buff *skb) 917b5c6aaedSMat Martineau { 918b5c6aaedSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 919b5c6aaedSMat Martineau put_unaligned_le32(__pack_extended_control(control), 920b5c6aaedSMat Martineau skb->data + L2CAP_HDR_SIZE); 921b5c6aaedSMat Martineau } else { 922b5c6aaedSMat Martineau put_unaligned_le16(__pack_enhanced_control(control), 923b5c6aaedSMat Martineau skb->data + L2CAP_HDR_SIZE); 924b5c6aaedSMat Martineau } 925b5c6aaedSMat Martineau } 926b5c6aaedSMat Martineau 927ba7aa64fSGustavo Padovan static inline unsigned int __ertm_hdr_size(struct l2cap_chan *chan) 928ba7aa64fSGustavo Padovan { 929ba7aa64fSGustavo Padovan if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 930ba7aa64fSGustavo Padovan return L2CAP_EXT_HDR_SIZE; 931ba7aa64fSGustavo Padovan else 932ba7aa64fSGustavo Padovan return L2CAP_ENH_HDR_SIZE; 933ba7aa64fSGustavo Padovan } 934ba7aa64fSGustavo Padovan 935a67d7f6fSMat Martineau static struct sk_buff *l2cap_create_sframe_pdu(struct l2cap_chan *chan, 936a67d7f6fSMat Martineau u32 control) 9370a708f8fSGustavo F. Padovan { 9380a708f8fSGustavo F. Padovan struct sk_buff *skb; 9390a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 940ba7aa64fSGustavo Padovan int hlen = __ertm_hdr_size(chan); 9410a708f8fSGustavo F. Padovan 9420a708f8fSGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 94303a51213SAndrei Emeltchenko hlen += L2CAP_FCS_SIZE; 9440a708f8fSGustavo F. Padovan 945a67d7f6fSMat Martineau skb = bt_skb_alloc(hlen, GFP_KERNEL); 9460a708f8fSGustavo F. Padovan 9470a708f8fSGustavo F. Padovan if (!skb) 948a67d7f6fSMat Martineau return ERR_PTR(-ENOMEM); 9490a708f8fSGustavo F. Padovan 9500a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 9510a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(hlen - L2CAP_HDR_SIZE); 952fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 95388843ab0SAndrei Emeltchenko 954a67d7f6fSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 955a67d7f6fSMat Martineau put_unaligned_le32(control, skb_put(skb, L2CAP_EXT_CTRL_SIZE)); 956a67d7f6fSMat Martineau else 957a67d7f6fSMat Martineau put_unaligned_le16(control, skb_put(skb, L2CAP_ENH_CTRL_SIZE)); 9580a708f8fSGustavo F. Padovan 95947d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 960a67d7f6fSMat Martineau u16 fcs = crc16(0, (u8 *)skb->data, skb->len); 96103a51213SAndrei Emeltchenko put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 9620a708f8fSGustavo F. Padovan } 9630a708f8fSGustavo F. Padovan 96473d80debSLuiz Augusto von Dentz skb->priority = HCI_PRIO_MAX; 965a67d7f6fSMat Martineau return skb; 966a67d7f6fSMat Martineau } 967a67d7f6fSMat Martineau 968a67d7f6fSMat Martineau static void l2cap_send_sframe(struct l2cap_chan *chan, 969a67d7f6fSMat Martineau struct l2cap_ctrl *control) 970a67d7f6fSMat Martineau { 971a67d7f6fSMat Martineau struct sk_buff *skb; 972a67d7f6fSMat Martineau u32 control_field; 973a67d7f6fSMat Martineau 974a67d7f6fSMat Martineau BT_DBG("chan %p, control %p", chan, control); 975a67d7f6fSMat Martineau 976a67d7f6fSMat Martineau if (!control->sframe) 977a67d7f6fSMat Martineau return; 978a67d7f6fSMat Martineau 979b99e13adSMat Martineau if (__chan_is_moving(chan)) 980b99e13adSMat Martineau return; 981b99e13adSMat Martineau 982a67d7f6fSMat Martineau if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state) && 983a67d7f6fSMat Martineau !control->poll) 984a67d7f6fSMat Martineau control->final = 1; 985a67d7f6fSMat Martineau 986a67d7f6fSMat Martineau if (control->super == L2CAP_SUPER_RR) 987a67d7f6fSMat Martineau clear_bit(CONN_RNR_SENT, &chan->conn_state); 988a67d7f6fSMat Martineau else if (control->super == L2CAP_SUPER_RNR) 989a67d7f6fSMat Martineau set_bit(CONN_RNR_SENT, &chan->conn_state); 990a67d7f6fSMat Martineau 991a67d7f6fSMat Martineau if (control->super != L2CAP_SUPER_SREJ) { 992a67d7f6fSMat Martineau chan->last_acked_seq = control->reqseq; 993a67d7f6fSMat Martineau __clear_ack_timer(chan); 994a67d7f6fSMat Martineau } 995a67d7f6fSMat Martineau 996a67d7f6fSMat Martineau BT_DBG("reqseq %d, final %d, poll %d, super %d", control->reqseq, 997a67d7f6fSMat Martineau control->final, control->poll, control->super); 998a67d7f6fSMat Martineau 999a67d7f6fSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 1000a67d7f6fSMat Martineau control_field = __pack_extended_control(control); 1001a67d7f6fSMat Martineau else 1002a67d7f6fSMat Martineau control_field = __pack_enhanced_control(control); 1003a67d7f6fSMat Martineau 1004a67d7f6fSMat Martineau skb = l2cap_create_sframe_pdu(chan, control_field); 1005a67d7f6fSMat Martineau if (!IS_ERR(skb)) 100673d80debSLuiz Augusto von Dentz l2cap_do_send(chan, skb); 10070a708f8fSGustavo F. Padovan } 10080a708f8fSGustavo F. Padovan 1009c9e3d5e0SMat Martineau static void l2cap_send_rr_or_rnr(struct l2cap_chan *chan, bool poll) 10100a708f8fSGustavo F. Padovan { 1011c9e3d5e0SMat Martineau struct l2cap_ctrl control; 10120a708f8fSGustavo F. Padovan 1013c9e3d5e0SMat Martineau BT_DBG("chan %p, poll %d", chan, poll); 1014c9e3d5e0SMat Martineau 1015c9e3d5e0SMat Martineau memset(&control, 0, sizeof(control)); 1016c9e3d5e0SMat Martineau control.sframe = 1; 1017c9e3d5e0SMat Martineau control.poll = poll; 1018c9e3d5e0SMat Martineau 1019c9e3d5e0SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) 1020c9e3d5e0SMat Martineau control.super = L2CAP_SUPER_RNR; 1021c9e3d5e0SMat Martineau else 1022c9e3d5e0SMat Martineau control.super = L2CAP_SUPER_RR; 1023c9e3d5e0SMat Martineau 1024c9e3d5e0SMat Martineau control.reqseq = chan->buffer_seq; 1025c9e3d5e0SMat Martineau l2cap_send_sframe(chan, &control); 10260a708f8fSGustavo F. Padovan } 10270a708f8fSGustavo F. Padovan 1028b4450035SGustavo F. Padovan static inline int __l2cap_no_conn_pending(struct l2cap_chan *chan) 10290a708f8fSGustavo F. Padovan { 1030c1360a1cSGustavo F. Padovan return !test_bit(CONF_CONNECT_PEND, &chan->conf_state); 10310a708f8fSGustavo F. Padovan } 10320a708f8fSGustavo F. Padovan 103393c3e8f5SAndrei Emeltchenko static bool __amp_capable(struct l2cap_chan *chan) 103493c3e8f5SAndrei Emeltchenko { 103593c3e8f5SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 10361df7b17aSMarcel Holtmann struct hci_dev *hdev; 10371df7b17aSMarcel Holtmann bool amp_available = false; 103893c3e8f5SAndrei Emeltchenko 10391df7b17aSMarcel Holtmann if (!conn->hs_enabled) 10401df7b17aSMarcel Holtmann return false; 10411df7b17aSMarcel Holtmann 10421df7b17aSMarcel Holtmann if (!(conn->fixed_chan_mask & L2CAP_FC_A2MP)) 10431df7b17aSMarcel Holtmann return false; 10441df7b17aSMarcel Holtmann 10451df7b17aSMarcel Holtmann read_lock(&hci_dev_list_lock); 10461df7b17aSMarcel Holtmann list_for_each_entry(hdev, &hci_dev_list, list) { 10471df7b17aSMarcel Holtmann if (hdev->amp_type != AMP_TYPE_BREDR && 10481df7b17aSMarcel Holtmann test_bit(HCI_UP, &hdev->flags)) { 10491df7b17aSMarcel Holtmann amp_available = true; 10501df7b17aSMarcel Holtmann break; 10511df7b17aSMarcel Holtmann } 10521df7b17aSMarcel Holtmann } 10531df7b17aSMarcel Holtmann read_unlock(&hci_dev_list_lock); 10541df7b17aSMarcel Holtmann 10551df7b17aSMarcel Holtmann if (chan->chan_policy == BT_CHANNEL_POLICY_AMP_PREFERRED) 10561df7b17aSMarcel Holtmann return amp_available; 1057848566b3SMarcel Holtmann 105893c3e8f5SAndrei Emeltchenko return false; 105993c3e8f5SAndrei Emeltchenko } 106093c3e8f5SAndrei Emeltchenko 10615ce66b59SAndrei Emeltchenko static bool l2cap_check_efs(struct l2cap_chan *chan) 10625ce66b59SAndrei Emeltchenko { 10635ce66b59SAndrei Emeltchenko /* Check EFS parameters */ 10645ce66b59SAndrei Emeltchenko return true; 10655ce66b59SAndrei Emeltchenko } 10665ce66b59SAndrei Emeltchenko 10672766be48SAndrei Emeltchenko void l2cap_send_conn_req(struct l2cap_chan *chan) 10689b27f350SAndrei Emeltchenko { 10699b27f350SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 10709b27f350SAndrei Emeltchenko struct l2cap_conn_req req; 10719b27f350SAndrei Emeltchenko 10729b27f350SAndrei Emeltchenko req.scid = cpu_to_le16(chan->scid); 10739b27f350SAndrei Emeltchenko req.psm = chan->psm; 10749b27f350SAndrei Emeltchenko 10759b27f350SAndrei Emeltchenko chan->ident = l2cap_get_ident(conn); 10769b27f350SAndrei Emeltchenko 10779b27f350SAndrei Emeltchenko set_bit(CONF_CONNECT_PEND, &chan->conf_state); 10789b27f350SAndrei Emeltchenko 10799b27f350SAndrei Emeltchenko l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_REQ, sizeof(req), &req); 10809b27f350SAndrei Emeltchenko } 10819b27f350SAndrei Emeltchenko 10828eb200bdSMat Martineau static void l2cap_send_create_chan_req(struct l2cap_chan *chan, u8 amp_id) 10838eb200bdSMat Martineau { 10848eb200bdSMat Martineau struct l2cap_create_chan_req req; 10858eb200bdSMat Martineau req.scid = cpu_to_le16(chan->scid); 10868eb200bdSMat Martineau req.psm = chan->psm; 10878eb200bdSMat Martineau req.amp_id = amp_id; 10888eb200bdSMat Martineau 10898eb200bdSMat Martineau chan->ident = l2cap_get_ident(chan->conn); 10908eb200bdSMat Martineau 10918eb200bdSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_CREATE_CHAN_REQ, 10928eb200bdSMat Martineau sizeof(req), &req); 10938eb200bdSMat Martineau } 10948eb200bdSMat Martineau 109502b0fbb9SMat Martineau static void l2cap_move_setup(struct l2cap_chan *chan) 109602b0fbb9SMat Martineau { 109702b0fbb9SMat Martineau struct sk_buff *skb; 109802b0fbb9SMat Martineau 109902b0fbb9SMat Martineau BT_DBG("chan %p", chan); 110002b0fbb9SMat Martineau 110102b0fbb9SMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 110202b0fbb9SMat Martineau return; 110302b0fbb9SMat Martineau 110402b0fbb9SMat Martineau __clear_retrans_timer(chan); 110502b0fbb9SMat Martineau __clear_monitor_timer(chan); 110602b0fbb9SMat Martineau __clear_ack_timer(chan); 110702b0fbb9SMat Martineau 110802b0fbb9SMat Martineau chan->retry_count = 0; 110902b0fbb9SMat Martineau skb_queue_walk(&chan->tx_q, skb) { 111002b0fbb9SMat Martineau if (bt_cb(skb)->control.retries) 111102b0fbb9SMat Martineau bt_cb(skb)->control.retries = 1; 111202b0fbb9SMat Martineau else 111302b0fbb9SMat Martineau break; 111402b0fbb9SMat Martineau } 111502b0fbb9SMat Martineau 111602b0fbb9SMat Martineau chan->expected_tx_seq = chan->buffer_seq; 111702b0fbb9SMat Martineau 111802b0fbb9SMat Martineau clear_bit(CONN_REJ_ACT, &chan->conn_state); 111902b0fbb9SMat Martineau clear_bit(CONN_SREJ_ACT, &chan->conn_state); 112002b0fbb9SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 112102b0fbb9SMat Martineau l2cap_seq_list_clear(&chan->srej_list); 112202b0fbb9SMat Martineau skb_queue_purge(&chan->srej_q); 112302b0fbb9SMat Martineau 112402b0fbb9SMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 112502b0fbb9SMat Martineau chan->rx_state = L2CAP_RX_STATE_MOVE; 112602b0fbb9SMat Martineau 112702b0fbb9SMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 112802b0fbb9SMat Martineau } 112902b0fbb9SMat Martineau 11305f3847a4SMat Martineau static void l2cap_move_done(struct l2cap_chan *chan) 11315f3847a4SMat Martineau { 11325f3847a4SMat Martineau u8 move_role = chan->move_role; 11335f3847a4SMat Martineau BT_DBG("chan %p", chan); 11345f3847a4SMat Martineau 11355f3847a4SMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 11365f3847a4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 11375f3847a4SMat Martineau 11385f3847a4SMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 11395f3847a4SMat Martineau return; 11405f3847a4SMat Martineau 11415f3847a4SMat Martineau switch (move_role) { 11425f3847a4SMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 11435f3847a4SMat Martineau l2cap_tx(chan, NULL, NULL, L2CAP_EV_EXPLICIT_POLL); 11445f3847a4SMat Martineau chan->rx_state = L2CAP_RX_STATE_WAIT_F; 11455f3847a4SMat Martineau break; 11465f3847a4SMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 11475f3847a4SMat Martineau chan->rx_state = L2CAP_RX_STATE_WAIT_P; 11485f3847a4SMat Martineau break; 11495f3847a4SMat Martineau } 11505f3847a4SMat Martineau } 11515f3847a4SMat Martineau 11529f0caeb1SVinicius Costa Gomes static void l2cap_chan_ready(struct l2cap_chan *chan) 11539f0caeb1SVinicius Costa Gomes { 11542827011fSMat Martineau /* This clears all conf flags, including CONF_NOT_COMPLETE */ 11559f0caeb1SVinicius Costa Gomes chan->conf_state = 0; 11569f0caeb1SVinicius Costa Gomes __clear_chan_timer(chan); 11579f0caeb1SVinicius Costa Gomes 115854a59aa2SAndrei Emeltchenko chan->state = BT_CONNECTED; 11599f0caeb1SVinicius Costa Gomes 116054a59aa2SAndrei Emeltchenko chan->ops->ready(chan); 11619f0caeb1SVinicius Costa Gomes } 11629f0caeb1SVinicius Costa Gomes 116393c3e8f5SAndrei Emeltchenko static void l2cap_start_connection(struct l2cap_chan *chan) 116493c3e8f5SAndrei Emeltchenko { 116593c3e8f5SAndrei Emeltchenko if (__amp_capable(chan)) { 116693c3e8f5SAndrei Emeltchenko BT_DBG("chan %p AMP capable: discover AMPs", chan); 116793c3e8f5SAndrei Emeltchenko a2mp_discover_amp(chan); 116893c3e8f5SAndrei Emeltchenko } else { 116993c3e8f5SAndrei Emeltchenko l2cap_send_conn_req(chan); 117093c3e8f5SAndrei Emeltchenko } 117193c3e8f5SAndrei Emeltchenko } 117293c3e8f5SAndrei Emeltchenko 1173fc7f8a7eSGustavo F. Padovan static void l2cap_do_start(struct l2cap_chan *chan) 11740a708f8fSGustavo F. Padovan { 11758c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 11760a708f8fSGustavo F. Padovan 11779f0caeb1SVinicius Costa Gomes if (conn->hcon->type == LE_LINK) { 11789f0caeb1SVinicius Costa Gomes l2cap_chan_ready(chan); 11799f0caeb1SVinicius Costa Gomes return; 11809f0caeb1SVinicius Costa Gomes } 11819f0caeb1SVinicius Costa Gomes 11820a708f8fSGustavo F. Padovan if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) { 11830a708f8fSGustavo F. Padovan if (!(conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE)) 11840a708f8fSGustavo F. Padovan return; 11850a708f8fSGustavo F. Padovan 1186d45fc423SGustavo F. Padovan if (l2cap_chan_check_security(chan) && 118793c3e8f5SAndrei Emeltchenko __l2cap_no_conn_pending(chan)) { 118893c3e8f5SAndrei Emeltchenko l2cap_start_connection(chan); 118993c3e8f5SAndrei Emeltchenko } 11900a708f8fSGustavo F. Padovan } else { 11910a708f8fSGustavo F. Padovan struct l2cap_info_req req; 1192ac73498cSAndrei Emeltchenko req.type = __constant_cpu_to_le16(L2CAP_IT_FEAT_MASK); 11930a708f8fSGustavo F. Padovan 11940a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_SENT; 11950a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 11960a708f8fSGustavo F. Padovan 1197ba13ccd9SMarcel Holtmann schedule_delayed_work(&conn->info_timer, L2CAP_INFO_TIMEOUT); 11980a708f8fSGustavo F. Padovan 11992d792818SGustavo Padovan l2cap_send_cmd(conn, conn->info_ident, L2CAP_INFO_REQ, 12002d792818SGustavo Padovan sizeof(req), &req); 12010a708f8fSGustavo F. Padovan } 12020a708f8fSGustavo F. Padovan } 12030a708f8fSGustavo F. Padovan 12040a708f8fSGustavo F. Padovan static inline int l2cap_mode_supported(__u8 mode, __u32 feat_mask) 12050a708f8fSGustavo F. Padovan { 12060a708f8fSGustavo F. Padovan u32 local_feat_mask = l2cap_feat_mask; 12070a708f8fSGustavo F. Padovan if (!disable_ertm) 12080a708f8fSGustavo F. Padovan local_feat_mask |= L2CAP_FEAT_ERTM | L2CAP_FEAT_STREAMING; 12090a708f8fSGustavo F. Padovan 12100a708f8fSGustavo F. Padovan switch (mode) { 12110a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 12120a708f8fSGustavo F. Padovan return L2CAP_FEAT_ERTM & feat_mask & local_feat_mask; 12130a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 12140a708f8fSGustavo F. Padovan return L2CAP_FEAT_STREAMING & feat_mask & local_feat_mask; 12150a708f8fSGustavo F. Padovan default: 12160a708f8fSGustavo F. Padovan return 0x00; 12170a708f8fSGustavo F. Padovan } 12180a708f8fSGustavo F. Padovan } 12190a708f8fSGustavo F. Padovan 12205e4e3972SAndrei Emeltchenko static void l2cap_send_disconn_req(struct l2cap_chan *chan, int err) 12210a708f8fSGustavo F. Padovan { 12225e4e3972SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 12230a708f8fSGustavo F. Padovan struct l2cap_disconn_req req; 12240a708f8fSGustavo F. Padovan 12250a708f8fSGustavo F. Padovan if (!conn) 12260a708f8fSGustavo F. Padovan return; 12270a708f8fSGustavo F. Padovan 1228aad3d0e3SAndrei Emeltchenko if (chan->mode == L2CAP_MODE_ERTM && chan->state == BT_CONNECTED) { 12291a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 12301a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 12311a09bcb9SGustavo F. Padovan __clear_ack_timer(chan); 12320a708f8fSGustavo F. Padovan } 12330a708f8fSGustavo F. Padovan 1234416fa752SAndrei Emeltchenko if (chan->chan_type == L2CAP_CHAN_CONN_FIX_A2MP) { 1235d117773cSGustavo Padovan l2cap_state_change(chan, BT_DISCONN); 1236416fa752SAndrei Emeltchenko return; 1237416fa752SAndrei Emeltchenko } 1238416fa752SAndrei Emeltchenko 1239fe4128e0SGustavo F. Padovan req.dcid = cpu_to_le16(chan->dcid); 1240fe4128e0SGustavo F. Padovan req.scid = cpu_to_le16(chan->scid); 12412d792818SGustavo Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_DISCONN_REQ, 12422d792818SGustavo Padovan sizeof(req), &req); 12430a708f8fSGustavo F. Padovan 1244f8e73017SGustavo Padovan l2cap_state_change_and_error(chan, BT_DISCONN, err); 12450a708f8fSGustavo F. Padovan } 12460a708f8fSGustavo F. Padovan 12470a708f8fSGustavo F. Padovan /* ---- L2CAP connections ---- */ 12480a708f8fSGustavo F. Padovan static void l2cap_conn_start(struct l2cap_conn *conn) 12490a708f8fSGustavo F. Padovan { 12503df91ea2SAndrei Emeltchenko struct l2cap_chan *chan, *tmp; 12510a708f8fSGustavo F. Padovan 12520a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 12530a708f8fSGustavo F. Padovan 12543df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 12550a708f8fSGustavo F. Padovan 12563df91ea2SAndrei Emeltchenko list_for_each_entry_safe(chan, tmp, &conn->chan_l, list) { 12576be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 12580a708f8fSGustavo F. Padovan 1259715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 12606be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 12610a708f8fSGustavo F. Padovan continue; 12620a708f8fSGustavo F. Padovan } 12630a708f8fSGustavo F. Padovan 126489bc500eSGustavo F. Padovan if (chan->state == BT_CONNECT) { 1265d45fc423SGustavo F. Padovan if (!l2cap_chan_check_security(chan) || 1266b4450035SGustavo F. Padovan !__l2cap_no_conn_pending(chan)) { 12676be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 12680a708f8fSGustavo F. Padovan continue; 12690a708f8fSGustavo F. Padovan } 12700a708f8fSGustavo F. Padovan 1271c1360a1cSGustavo F. Padovan if (!l2cap_mode_supported(chan->mode, conn->feat_mask) 1272c1360a1cSGustavo F. Padovan && test_bit(CONF_STATE2_DEVICE, 1273c1360a1cSGustavo F. Padovan &chan->conf_state)) { 12740f852724SGustavo F. Padovan l2cap_chan_close(chan, ECONNRESET); 12756be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 12760a708f8fSGustavo F. Padovan continue; 12770a708f8fSGustavo F. Padovan } 12780a708f8fSGustavo F. Padovan 127993c3e8f5SAndrei Emeltchenko l2cap_start_connection(chan); 12800a708f8fSGustavo F. Padovan 128189bc500eSGustavo F. Padovan } else if (chan->state == BT_CONNECT2) { 12820a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 12830a708f8fSGustavo F. Padovan char buf[128]; 1284fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 1285fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 12860a708f8fSGustavo F. Padovan 1287d45fc423SGustavo F. Padovan if (l2cap_chan_check_security(chan)) { 1288bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 1289ac73498cSAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CR_PEND); 1290ac73498cSAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_AUTHOR_PEND); 12912dc4e510SGustavo Padovan chan->ops->defer(chan); 12920a708f8fSGustavo F. Padovan 12930a708f8fSGustavo F. Padovan } else { 1294acdcabf5SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 1295ac73498cSAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CR_SUCCESS); 1296ac73498cSAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_NO_INFO); 12970a708f8fSGustavo F. Padovan } 12980a708f8fSGustavo F. Padovan } else { 1299ac73498cSAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CR_PEND); 1300ac73498cSAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_AUTHEN_PEND); 13010a708f8fSGustavo F. Padovan } 13020a708f8fSGustavo F. Padovan 1303fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 1304fc7f8a7eSGustavo F. Padovan sizeof(rsp), &rsp); 13050a708f8fSGustavo F. Padovan 1306c1360a1cSGustavo F. Padovan if (test_bit(CONF_REQ_SENT, &chan->conf_state) || 13070a708f8fSGustavo F. Padovan rsp.result != L2CAP_CR_SUCCESS) { 13086be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 13090a708f8fSGustavo F. Padovan continue; 13100a708f8fSGustavo F. Padovan } 13110a708f8fSGustavo F. Padovan 1312c1360a1cSGustavo F. Padovan set_bit(CONF_REQ_SENT, &chan->conf_state); 13130a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 131473ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 131573ffa904SGustavo F. Padovan chan->num_conf_req++; 13160a708f8fSGustavo F. Padovan } 13170a708f8fSGustavo F. Padovan 13186be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 13190a708f8fSGustavo F. Padovan } 13200a708f8fSGustavo F. Padovan 13213df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 13220a708f8fSGustavo F. Padovan } 13230a708f8fSGustavo F. Padovan 1324c2287681SIdo Yariv /* Find socket with cid and source/destination bdaddr. 1325b62f328bSVille Tervo * Returns closest match, locked. 1326b62f328bSVille Tervo */ 1327d9b88702SAndrei Emeltchenko static struct l2cap_chan *l2cap_global_chan_by_scid(int state, u16 cid, 1328c2287681SIdo Yariv bdaddr_t *src, 1329c2287681SIdo Yariv bdaddr_t *dst) 1330b62f328bSVille Tervo { 133123691d75SGustavo F. Padovan struct l2cap_chan *c, *c1 = NULL; 1332b62f328bSVille Tervo 133323691d75SGustavo F. Padovan read_lock(&chan_list_lock); 1334b62f328bSVille Tervo 133523691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 133689bc500eSGustavo F. Padovan if (state && c->state != state) 1337b62f328bSVille Tervo continue; 1338b62f328bSVille Tervo 133923691d75SGustavo F. Padovan if (c->scid == cid) { 1340c2287681SIdo Yariv int src_match, dst_match; 1341c2287681SIdo Yariv int src_any, dst_any; 1342c2287681SIdo Yariv 1343b62f328bSVille Tervo /* Exact match. */ 13447eafc59eSMarcel Holtmann src_match = !bacmp(&c->src, src); 13457eafc59eSMarcel Holtmann dst_match = !bacmp(&c->dst, dst); 1346c2287681SIdo Yariv if (src_match && dst_match) { 134723691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 134823691d75SGustavo F. Padovan return c; 134923691d75SGustavo F. Padovan } 1350b62f328bSVille Tervo 1351b62f328bSVille Tervo /* Closest match */ 13527eafc59eSMarcel Holtmann src_any = !bacmp(&c->src, BDADDR_ANY); 13537eafc59eSMarcel Holtmann dst_any = !bacmp(&c->dst, BDADDR_ANY); 1354c2287681SIdo Yariv if ((src_match && dst_any) || (src_any && dst_match) || 1355c2287681SIdo Yariv (src_any && dst_any)) 135623691d75SGustavo F. Padovan c1 = c; 1357b62f328bSVille Tervo } 1358b62f328bSVille Tervo } 1359280f294fSGustavo F. Padovan 136023691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 1361b62f328bSVille Tervo 136223691d75SGustavo F. Padovan return c1; 1363b62f328bSVille Tervo } 1364b62f328bSVille Tervo 1365b62f328bSVille Tervo static void l2cap_le_conn_ready(struct l2cap_conn *conn) 1366b62f328bSVille Tervo { 1367cc8dba2bSMarcel Holtmann struct hci_conn *hcon = conn->hcon; 136823691d75SGustavo F. Padovan struct l2cap_chan *chan, *pchan; 1369cc8dba2bSMarcel Holtmann u8 dst_type; 1370b62f328bSVille Tervo 1371b62f328bSVille Tervo BT_DBG(""); 1372b62f328bSVille Tervo 1373b62f328bSVille Tervo /* Check if we have socket listening on cid */ 1374073d1cf3SJohan Hedberg pchan = l2cap_global_chan_by_scid(BT_LISTEN, L2CAP_CID_ATT, 1375cc8dba2bSMarcel Holtmann &hcon->src, &hcon->dst); 137623691d75SGustavo F. Padovan if (!pchan) 1377b62f328bSVille Tervo return; 1378b62f328bSVille Tervo 137944f3b0fbSJohan Hedberg /* Client ATT sockets should override the server one */ 138044f3b0fbSJohan Hedberg if (__l2cap_get_chan_by_dcid(conn, L2CAP_CID_ATT)) 138144f3b0fbSJohan Hedberg return; 138244f3b0fbSJohan Hedberg 1383cc8dba2bSMarcel Holtmann dst_type = bdaddr_type(hcon, hcon->dst_type); 1384cc8dba2bSMarcel Holtmann 1385cc8dba2bSMarcel Holtmann /* If device is blocked, do not create a channel for it */ 1386cc8dba2bSMarcel Holtmann if (hci_blacklist_lookup(hcon->hdev, &hcon->dst, dst_type)) 1387cc8dba2bSMarcel Holtmann return; 1388cc8dba2bSMarcel Holtmann 13898ffb9290SGustavo Padovan l2cap_chan_lock(pchan); 139062f3a2cfSGustavo F. Padovan 139180b98027SGustavo Padovan chan = pchan->ops->new_connection(pchan); 139280808e43SGustavo F. Padovan if (!chan) 1393b62f328bSVille Tervo goto clean; 1394b62f328bSVille Tervo 13959f22398cSJohan Hedberg chan->dcid = L2CAP_CID_ATT; 13969f22398cSJohan Hedberg 1397cc8dba2bSMarcel Holtmann bacpy(&chan->src, &hcon->src); 1398cc8dba2bSMarcel Holtmann bacpy(&chan->dst, &hcon->dst); 1399cc8dba2bSMarcel Holtmann chan->src_type = bdaddr_type(hcon, hcon->src_type); 1400cc8dba2bSMarcel Holtmann chan->dst_type = dst_type; 1401b62f328bSVille Tervo 140244f3b0fbSJohan Hedberg __l2cap_chan_add(conn, chan); 140348454079SGustavo F. Padovan 1404b62f328bSVille Tervo clean: 14058ffb9290SGustavo Padovan l2cap_chan_unlock(pchan); 1406b62f328bSVille Tervo } 1407b62f328bSVille Tervo 14080a708f8fSGustavo F. Padovan static void l2cap_conn_ready(struct l2cap_conn *conn) 14090a708f8fSGustavo F. Padovan { 141048454079SGustavo F. Padovan struct l2cap_chan *chan; 1411cc110922SVinicius Costa Gomes struct hci_conn *hcon = conn->hcon; 14120a708f8fSGustavo F. Padovan 14130a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 14140a708f8fSGustavo F. Padovan 1415d8729922SJohan Hedberg /* For outgoing pairing which doesn't necessarily have an 1416d8729922SJohan Hedberg * associated socket (e.g. mgmt_pair_device). 1417d8729922SJohan Hedberg */ 1418cc110922SVinicius Costa Gomes if (hcon->out && hcon->type == LE_LINK) 1419cc110922SVinicius Costa Gomes smp_conn_security(hcon, hcon->pending_sec_level); 1420160dc6acSVinicius Costa Gomes 14213df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 14220a708f8fSGustavo F. Padovan 142344f3b0fbSJohan Hedberg if (hcon->type == LE_LINK) 142444f3b0fbSJohan Hedberg l2cap_le_conn_ready(conn); 142544f3b0fbSJohan Hedberg 14263df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 1427baa7e1faSGustavo F. Padovan 14286be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 14290a708f8fSGustavo F. Padovan 1430416fa752SAndrei Emeltchenko if (chan->chan_type == L2CAP_CHAN_CONN_FIX_A2MP) { 1431416fa752SAndrei Emeltchenko l2cap_chan_unlock(chan); 1432416fa752SAndrei Emeltchenko continue; 1433416fa752SAndrei Emeltchenko } 1434416fa752SAndrei Emeltchenko 1435cc110922SVinicius Costa Gomes if (hcon->type == LE_LINK) { 1436cc110922SVinicius Costa Gomes if (smp_conn_security(hcon, chan->sec_level)) 1437cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 1438acd7d370SVille Tervo 143963128451SVinicius Costa Gomes } else if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 144074e75740SGustavo Padovan l2cap_chan_ready(chan); 1441b501d6a1SAnderson Briglia 14421c244f79SGustavo Padovan } else if (chan->state == BT_CONNECT) { 1443fc7f8a7eSGustavo F. Padovan l2cap_do_start(chan); 14441c244f79SGustavo Padovan } 14450a708f8fSGustavo F. Padovan 14466be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 14470a708f8fSGustavo F. Padovan } 14480a708f8fSGustavo F. Padovan 14493df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 14500a708f8fSGustavo F. Padovan } 14510a708f8fSGustavo F. Padovan 14520a708f8fSGustavo F. Padovan /* Notify sockets that we cannot guaranty reliability anymore */ 14530a708f8fSGustavo F. Padovan static void l2cap_conn_unreliable(struct l2cap_conn *conn, int err) 14540a708f8fSGustavo F. Padovan { 145548454079SGustavo F. Padovan struct l2cap_chan *chan; 14560a708f8fSGustavo F. Padovan 14570a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 14580a708f8fSGustavo F. Padovan 14593df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 14600a708f8fSGustavo F. Padovan 14613df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 1462ecf61bdbSAndrei Emeltchenko if (test_bit(FLAG_FORCE_RELIABLE, &chan->flags)) 14631d8b1fd5SGustavo Padovan l2cap_chan_set_err(chan, err); 14640a708f8fSGustavo F. Padovan } 14650a708f8fSGustavo F. Padovan 14663df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 14670a708f8fSGustavo F. Padovan } 14680a708f8fSGustavo F. Padovan 1469f878fcadSGustavo F. Padovan static void l2cap_info_timeout(struct work_struct *work) 14700a708f8fSGustavo F. Padovan { 1471f878fcadSGustavo F. Padovan struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 1472030013d8SGustavo F. Padovan info_timer.work); 14730a708f8fSGustavo F. Padovan 14740a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 14750a708f8fSGustavo F. Padovan conn->info_ident = 0; 14760a708f8fSGustavo F. Padovan 14770a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 14780a708f8fSGustavo F. Padovan } 14790a708f8fSGustavo F. Padovan 14802c8e1411SDavid Herrmann /* 14812c8e1411SDavid Herrmann * l2cap_user 14822c8e1411SDavid Herrmann * External modules can register l2cap_user objects on l2cap_conn. The ->probe 14832c8e1411SDavid Herrmann * callback is called during registration. The ->remove callback is called 14842c8e1411SDavid Herrmann * during unregistration. 14852c8e1411SDavid Herrmann * An l2cap_user object can either be explicitly unregistered or when the 14862c8e1411SDavid Herrmann * underlying l2cap_conn object is deleted. This guarantees that l2cap->hcon, 14872c8e1411SDavid Herrmann * l2cap->hchan, .. are valid as long as the remove callback hasn't been called. 14882c8e1411SDavid Herrmann * External modules must own a reference to the l2cap_conn object if they intend 14892c8e1411SDavid Herrmann * to call l2cap_unregister_user(). The l2cap_conn object might get destroyed at 14902c8e1411SDavid Herrmann * any time if they don't. 14912c8e1411SDavid Herrmann */ 14922c8e1411SDavid Herrmann 14932c8e1411SDavid Herrmann int l2cap_register_user(struct l2cap_conn *conn, struct l2cap_user *user) 14942c8e1411SDavid Herrmann { 14952c8e1411SDavid Herrmann struct hci_dev *hdev = conn->hcon->hdev; 14962c8e1411SDavid Herrmann int ret; 14972c8e1411SDavid Herrmann 14982c8e1411SDavid Herrmann /* We need to check whether l2cap_conn is registered. If it is not, we 14992c8e1411SDavid Herrmann * must not register the l2cap_user. l2cap_conn_del() is unregisters 15002c8e1411SDavid Herrmann * l2cap_conn objects, but doesn't provide its own locking. Instead, it 15012c8e1411SDavid Herrmann * relies on the parent hci_conn object to be locked. This itself relies 15022c8e1411SDavid Herrmann * on the hci_dev object to be locked. So we must lock the hci device 15032c8e1411SDavid Herrmann * here, too. */ 15042c8e1411SDavid Herrmann 15052c8e1411SDavid Herrmann hci_dev_lock(hdev); 15062c8e1411SDavid Herrmann 15072c8e1411SDavid Herrmann if (user->list.next || user->list.prev) { 15082c8e1411SDavid Herrmann ret = -EINVAL; 15092c8e1411SDavid Herrmann goto out_unlock; 15102c8e1411SDavid Herrmann } 15112c8e1411SDavid Herrmann 15122c8e1411SDavid Herrmann /* conn->hchan is NULL after l2cap_conn_del() was called */ 15132c8e1411SDavid Herrmann if (!conn->hchan) { 15142c8e1411SDavid Herrmann ret = -ENODEV; 15152c8e1411SDavid Herrmann goto out_unlock; 15162c8e1411SDavid Herrmann } 15172c8e1411SDavid Herrmann 15182c8e1411SDavid Herrmann ret = user->probe(conn, user); 15192c8e1411SDavid Herrmann if (ret) 15202c8e1411SDavid Herrmann goto out_unlock; 15212c8e1411SDavid Herrmann 15222c8e1411SDavid Herrmann list_add(&user->list, &conn->users); 15232c8e1411SDavid Herrmann ret = 0; 15242c8e1411SDavid Herrmann 15252c8e1411SDavid Herrmann out_unlock: 15262c8e1411SDavid Herrmann hci_dev_unlock(hdev); 15272c8e1411SDavid Herrmann return ret; 15282c8e1411SDavid Herrmann } 15292c8e1411SDavid Herrmann EXPORT_SYMBOL(l2cap_register_user); 15302c8e1411SDavid Herrmann 15312c8e1411SDavid Herrmann void l2cap_unregister_user(struct l2cap_conn *conn, struct l2cap_user *user) 15322c8e1411SDavid Herrmann { 15332c8e1411SDavid Herrmann struct hci_dev *hdev = conn->hcon->hdev; 15342c8e1411SDavid Herrmann 15352c8e1411SDavid Herrmann hci_dev_lock(hdev); 15362c8e1411SDavid Herrmann 15372c8e1411SDavid Herrmann if (!user->list.next || !user->list.prev) 15382c8e1411SDavid Herrmann goto out_unlock; 15392c8e1411SDavid Herrmann 15402c8e1411SDavid Herrmann list_del(&user->list); 15412c8e1411SDavid Herrmann user->list.next = NULL; 15422c8e1411SDavid Herrmann user->list.prev = NULL; 15432c8e1411SDavid Herrmann user->remove(conn, user); 15442c8e1411SDavid Herrmann 15452c8e1411SDavid Herrmann out_unlock: 15462c8e1411SDavid Herrmann hci_dev_unlock(hdev); 15472c8e1411SDavid Herrmann } 15482c8e1411SDavid Herrmann EXPORT_SYMBOL(l2cap_unregister_user); 15492c8e1411SDavid Herrmann 15502c8e1411SDavid Herrmann static void l2cap_unregister_all_users(struct l2cap_conn *conn) 15512c8e1411SDavid Herrmann { 15522c8e1411SDavid Herrmann struct l2cap_user *user; 15532c8e1411SDavid Herrmann 15542c8e1411SDavid Herrmann while (!list_empty(&conn->users)) { 15552c8e1411SDavid Herrmann user = list_first_entry(&conn->users, struct l2cap_user, list); 15562c8e1411SDavid Herrmann list_del(&user->list); 15572c8e1411SDavid Herrmann user->list.next = NULL; 15582c8e1411SDavid Herrmann user->list.prev = NULL; 15592c8e1411SDavid Herrmann user->remove(conn, user); 15602c8e1411SDavid Herrmann } 15612c8e1411SDavid Herrmann } 15622c8e1411SDavid Herrmann 15635d3de7dfSVinicius Costa Gomes static void l2cap_conn_del(struct hci_conn *hcon, int err) 15645d3de7dfSVinicius Costa Gomes { 15655d3de7dfSVinicius Costa Gomes struct l2cap_conn *conn = hcon->l2cap_data; 15665d3de7dfSVinicius Costa Gomes struct l2cap_chan *chan, *l; 15675d3de7dfSVinicius Costa Gomes 15685d3de7dfSVinicius Costa Gomes if (!conn) 15695d3de7dfSVinicius Costa Gomes return; 15705d3de7dfSVinicius Costa Gomes 15715d3de7dfSVinicius Costa Gomes BT_DBG("hcon %p conn %p, err %d", hcon, conn, err); 15725d3de7dfSVinicius Costa Gomes 15735d3de7dfSVinicius Costa Gomes kfree_skb(conn->rx_skb); 15745d3de7dfSVinicius Costa Gomes 15752c8e1411SDavid Herrmann l2cap_unregister_all_users(conn); 15762c8e1411SDavid Herrmann 15773df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 15783df91ea2SAndrei Emeltchenko 15795d3de7dfSVinicius Costa Gomes /* Kill channels */ 15805d3de7dfSVinicius Costa Gomes list_for_each_entry_safe(chan, l, &conn->chan_l, list) { 158161d6ef3eSMat Martineau l2cap_chan_hold(chan); 15826be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 15836be36555SAndrei Emeltchenko 15845d3de7dfSVinicius Costa Gomes l2cap_chan_del(chan, err); 15856be36555SAndrei Emeltchenko 15866be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 15876be36555SAndrei Emeltchenko 158880b98027SGustavo Padovan chan->ops->close(chan); 158961d6ef3eSMat Martineau l2cap_chan_put(chan); 15905d3de7dfSVinicius Costa Gomes } 15915d3de7dfSVinicius Costa Gomes 15923df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 15933df91ea2SAndrei Emeltchenko 159473d80debSLuiz Augusto von Dentz hci_chan_del(conn->hchan); 159573d80debSLuiz Augusto von Dentz 15965d3de7dfSVinicius Costa Gomes if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) 1597127074bfSUlisses Furquim cancel_delayed_work_sync(&conn->info_timer); 15985d3de7dfSVinicius Costa Gomes 159951a8efd7SJohan Hedberg if (test_and_clear_bit(HCI_CONN_LE_SMP_PEND, &hcon->flags)) { 1600127074bfSUlisses Furquim cancel_delayed_work_sync(&conn->security_timer); 16018aab4757SVinicius Costa Gomes smp_chan_destroy(conn); 1602d26a2345SVinicius Costa Gomes } 16035d3de7dfSVinicius Costa Gomes 16045d3de7dfSVinicius Costa Gomes hcon->l2cap_data = NULL; 16059c903e37SDavid Herrmann conn->hchan = NULL; 16069c903e37SDavid Herrmann l2cap_conn_put(conn); 16075d3de7dfSVinicius Costa Gomes } 16085d3de7dfSVinicius Costa Gomes 16096c9d42a1SGustavo F. Padovan static void security_timeout(struct work_struct *work) 16105d3de7dfSVinicius Costa Gomes { 16116c9d42a1SGustavo F. Padovan struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 16126c9d42a1SGustavo F. Padovan security_timer.work); 16135d3de7dfSVinicius Costa Gomes 1614d06cc416SJohan Hedberg BT_DBG("conn %p", conn); 1615d06cc416SJohan Hedberg 1616d06cc416SJohan Hedberg if (test_and_clear_bit(HCI_CONN_LE_SMP_PEND, &conn->hcon->flags)) { 1617d06cc416SJohan Hedberg smp_chan_destroy(conn); 16185d3de7dfSVinicius Costa Gomes l2cap_conn_del(conn->hcon, ETIMEDOUT); 16195d3de7dfSVinicius Costa Gomes } 1620d06cc416SJohan Hedberg } 16215d3de7dfSVinicius Costa Gomes 1622baf43251SClaudio Takahasi static struct l2cap_conn *l2cap_conn_add(struct hci_conn *hcon) 16230a708f8fSGustavo F. Padovan { 16240a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 162573d80debSLuiz Augusto von Dentz struct hci_chan *hchan; 16260a708f8fSGustavo F. Padovan 1627baf43251SClaudio Takahasi if (conn) 16280a708f8fSGustavo F. Padovan return conn; 16290a708f8fSGustavo F. Padovan 163073d80debSLuiz Augusto von Dentz hchan = hci_chan_create(hcon); 163173d80debSLuiz Augusto von Dentz if (!hchan) 16320a708f8fSGustavo F. Padovan return NULL; 16330a708f8fSGustavo F. Padovan 16348bcde1f2SGustavo Padovan conn = kzalloc(sizeof(struct l2cap_conn), GFP_KERNEL); 163573d80debSLuiz Augusto von Dentz if (!conn) { 163673d80debSLuiz Augusto von Dentz hci_chan_del(hchan); 163773d80debSLuiz Augusto von Dentz return NULL; 163873d80debSLuiz Augusto von Dentz } 163973d80debSLuiz Augusto von Dentz 16409c903e37SDavid Herrmann kref_init(&conn->ref); 16410a708f8fSGustavo F. Padovan hcon->l2cap_data = conn; 16420a708f8fSGustavo F. Padovan conn->hcon = hcon; 16439c903e37SDavid Herrmann hci_conn_get(conn->hcon); 164473d80debSLuiz Augusto von Dentz conn->hchan = hchan; 16450a708f8fSGustavo F. Padovan 164673d80debSLuiz Augusto von Dentz BT_DBG("hcon %p conn %p hchan %p", hcon, conn, hchan); 16470a708f8fSGustavo F. Padovan 1648dcc042d5SAndrei Emeltchenko switch (hcon->type) { 1649dcc042d5SAndrei Emeltchenko case LE_LINK: 1650dcc042d5SAndrei Emeltchenko if (hcon->hdev->le_mtu) { 1651acd7d370SVille Tervo conn->mtu = hcon->hdev->le_mtu; 1652dcc042d5SAndrei Emeltchenko break; 1653dcc042d5SAndrei Emeltchenko } 1654dcc042d5SAndrei Emeltchenko /* fall through */ 1655dcc042d5SAndrei Emeltchenko default: 16560a708f8fSGustavo F. Padovan conn->mtu = hcon->hdev->acl_mtu; 1657dcc042d5SAndrei Emeltchenko break; 1658dcc042d5SAndrei Emeltchenko } 1659acd7d370SVille Tervo 16600a708f8fSGustavo F. Padovan conn->feat_mask = 0; 16610a708f8fSGustavo F. Padovan 1662848566b3SMarcel Holtmann if (hcon->type == ACL_LINK) 1663848566b3SMarcel Holtmann conn->hs_enabled = test_bit(HCI_HS_ENABLED, 1664848566b3SMarcel Holtmann &hcon->hdev->dev_flags); 1665848566b3SMarcel Holtmann 16660a708f8fSGustavo F. Padovan spin_lock_init(&conn->lock); 16673df91ea2SAndrei Emeltchenko mutex_init(&conn->chan_lock); 1668baa7e1faSGustavo F. Padovan 1669baa7e1faSGustavo F. Padovan INIT_LIST_HEAD(&conn->chan_l); 16702c8e1411SDavid Herrmann INIT_LIST_HEAD(&conn->users); 16710a708f8fSGustavo F. Padovan 16725d3de7dfSVinicius Costa Gomes if (hcon->type == LE_LINK) 16736c9d42a1SGustavo F. Padovan INIT_DELAYED_WORK(&conn->security_timer, security_timeout); 16745d3de7dfSVinicius Costa Gomes else 1675030013d8SGustavo F. Padovan INIT_DELAYED_WORK(&conn->info_timer, l2cap_info_timeout); 16760a708f8fSGustavo F. Padovan 16779f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_REMOTE_USER_TERM; 16780a708f8fSGustavo F. Padovan 16790a708f8fSGustavo F. Padovan return conn; 16800a708f8fSGustavo F. Padovan } 16810a708f8fSGustavo F. Padovan 16829c903e37SDavid Herrmann static void l2cap_conn_free(struct kref *ref) 16839c903e37SDavid Herrmann { 16849c903e37SDavid Herrmann struct l2cap_conn *conn = container_of(ref, struct l2cap_conn, ref); 16859c903e37SDavid Herrmann 16869c903e37SDavid Herrmann hci_conn_put(conn->hcon); 16879c903e37SDavid Herrmann kfree(conn); 16889c903e37SDavid Herrmann } 16899c903e37SDavid Herrmann 16909c903e37SDavid Herrmann void l2cap_conn_get(struct l2cap_conn *conn) 16919c903e37SDavid Herrmann { 16929c903e37SDavid Herrmann kref_get(&conn->ref); 16939c903e37SDavid Herrmann } 16949c903e37SDavid Herrmann EXPORT_SYMBOL(l2cap_conn_get); 16959c903e37SDavid Herrmann 16969c903e37SDavid Herrmann void l2cap_conn_put(struct l2cap_conn *conn) 16979c903e37SDavid Herrmann { 16989c903e37SDavid Herrmann kref_put(&conn->ref, l2cap_conn_free); 16999c903e37SDavid Herrmann } 17009c903e37SDavid Herrmann EXPORT_SYMBOL(l2cap_conn_put); 17019c903e37SDavid Herrmann 17020a708f8fSGustavo F. Padovan /* ---- Socket interface ---- */ 17030a708f8fSGustavo F. Padovan 1704c2287681SIdo Yariv /* Find socket with psm and source / destination bdaddr. 17050a708f8fSGustavo F. Padovan * Returns closest match. 17060a708f8fSGustavo F. Padovan */ 1707c2287681SIdo Yariv static struct l2cap_chan *l2cap_global_chan_by_psm(int state, __le16 psm, 1708c2287681SIdo Yariv bdaddr_t *src, 1709bf20fd4eSJohan Hedberg bdaddr_t *dst, 1710bf20fd4eSJohan Hedberg u8 link_type) 17110a708f8fSGustavo F. Padovan { 171223691d75SGustavo F. Padovan struct l2cap_chan *c, *c1 = NULL; 17130a708f8fSGustavo F. Padovan 171423691d75SGustavo F. Padovan read_lock(&chan_list_lock); 17150a708f8fSGustavo F. Padovan 171623691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 171789bc500eSGustavo F. Padovan if (state && c->state != state) 17180a708f8fSGustavo F. Padovan continue; 17190a708f8fSGustavo F. Padovan 1720bf20fd4eSJohan Hedberg if (link_type == ACL_LINK && c->src_type != BDADDR_BREDR) 1721bf20fd4eSJohan Hedberg continue; 1722bf20fd4eSJohan Hedberg 1723bf20fd4eSJohan Hedberg if (link_type == LE_LINK && c->src_type == BDADDR_BREDR) 1724bf20fd4eSJohan Hedberg continue; 1725bf20fd4eSJohan Hedberg 172623691d75SGustavo F. Padovan if (c->psm == psm) { 1727c2287681SIdo Yariv int src_match, dst_match; 1728c2287681SIdo Yariv int src_any, dst_any; 1729c2287681SIdo Yariv 17300a708f8fSGustavo F. Padovan /* Exact match. */ 17317eafc59eSMarcel Holtmann src_match = !bacmp(&c->src, src); 17327eafc59eSMarcel Holtmann dst_match = !bacmp(&c->dst, dst); 1733c2287681SIdo Yariv if (src_match && dst_match) { 1734a7567b20SJohannes Berg read_unlock(&chan_list_lock); 173523691d75SGustavo F. Padovan return c; 173623691d75SGustavo F. Padovan } 17370a708f8fSGustavo F. Padovan 17380a708f8fSGustavo F. Padovan /* Closest match */ 17397eafc59eSMarcel Holtmann src_any = !bacmp(&c->src, BDADDR_ANY); 17407eafc59eSMarcel Holtmann dst_any = !bacmp(&c->dst, BDADDR_ANY); 1741c2287681SIdo Yariv if ((src_match && dst_any) || (src_any && dst_match) || 1742c2287681SIdo Yariv (src_any && dst_any)) 174323691d75SGustavo F. Padovan c1 = c; 17440a708f8fSGustavo F. Padovan } 17450a708f8fSGustavo F. Padovan } 17460a708f8fSGustavo F. Padovan 174723691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 17480a708f8fSGustavo F. Padovan 174923691d75SGustavo F. Padovan return c1; 17500a708f8fSGustavo F. Padovan } 17510a708f8fSGustavo F. Padovan 17528e9f9892SAndre Guedes int l2cap_chan_connect(struct l2cap_chan *chan, __le16 psm, u16 cid, 17538e9f9892SAndre Guedes bdaddr_t *dst, u8 dst_type) 17540a708f8fSGustavo F. Padovan { 17550a708f8fSGustavo F. Padovan struct l2cap_conn *conn; 17560a708f8fSGustavo F. Padovan struct hci_conn *hcon; 17570a708f8fSGustavo F. Padovan struct hci_dev *hdev; 17580a708f8fSGustavo F. Padovan __u8 auth_type; 17590a708f8fSGustavo F. Padovan int err; 17600a708f8fSGustavo F. Padovan 17617eafc59eSMarcel Holtmann BT_DBG("%pMR -> %pMR (type %u) psm 0x%2.2x", &chan->src, dst, 1762ab19516aSSyam Sidhardhan dst_type, __le16_to_cpu(psm)); 17630a708f8fSGustavo F. Padovan 17647eafc59eSMarcel Holtmann hdev = hci_get_route(dst, &chan->src); 17650a708f8fSGustavo F. Padovan if (!hdev) 17660a708f8fSGustavo F. Padovan return -EHOSTUNREACH; 17670a708f8fSGustavo F. Padovan 176809fd0de5SGustavo F. Padovan hci_dev_lock(hdev); 17690a708f8fSGustavo F. Padovan 17706be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 177103a00194SGustavo F. Padovan 177203a00194SGustavo F. Padovan /* PSM must be odd and lsb of upper byte must be 0 */ 177303a00194SGustavo F. Padovan if ((__le16_to_cpu(psm) & 0x0101) != 0x0001 && !cid && 177403a00194SGustavo F. Padovan chan->chan_type != L2CAP_CHAN_RAW) { 177503a00194SGustavo F. Padovan err = -EINVAL; 177603a00194SGustavo F. Padovan goto done; 177703a00194SGustavo F. Padovan } 177803a00194SGustavo F. Padovan 177903a00194SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED && !(psm || cid)) { 178003a00194SGustavo F. Padovan err = -EINVAL; 178103a00194SGustavo F. Padovan goto done; 178203a00194SGustavo F. Padovan } 178303a00194SGustavo F. Padovan 178403a00194SGustavo F. Padovan switch (chan->mode) { 178503a00194SGustavo F. Padovan case L2CAP_MODE_BASIC: 178603a00194SGustavo F. Padovan break; 178703a00194SGustavo F. Padovan case L2CAP_MODE_ERTM: 178803a00194SGustavo F. Padovan case L2CAP_MODE_STREAMING: 178903a00194SGustavo F. Padovan if (!disable_ertm) 179003a00194SGustavo F. Padovan break; 179103a00194SGustavo F. Padovan /* fall through */ 179203a00194SGustavo F. Padovan default: 179303a00194SGustavo F. Padovan err = -ENOTSUPP; 179403a00194SGustavo F. Padovan goto done; 179503a00194SGustavo F. Padovan } 179603a00194SGustavo F. Padovan 17970797e01dSGustavo Padovan switch (chan->state) { 179803a00194SGustavo F. Padovan case BT_CONNECT: 179903a00194SGustavo F. Padovan case BT_CONNECT2: 180003a00194SGustavo F. Padovan case BT_CONFIG: 180103a00194SGustavo F. Padovan /* Already connecting */ 180203a00194SGustavo F. Padovan err = 0; 180303a00194SGustavo F. Padovan goto done; 180403a00194SGustavo F. Padovan 180503a00194SGustavo F. Padovan case BT_CONNECTED: 180603a00194SGustavo F. Padovan /* Already connected */ 180703a00194SGustavo F. Padovan err = -EISCONN; 180803a00194SGustavo F. Padovan goto done; 180903a00194SGustavo F. Padovan 181003a00194SGustavo F. Padovan case BT_OPEN: 181103a00194SGustavo F. Padovan case BT_BOUND: 181203a00194SGustavo F. Padovan /* Can connect */ 181303a00194SGustavo F. Padovan break; 181403a00194SGustavo F. Padovan 181503a00194SGustavo F. Padovan default: 181603a00194SGustavo F. Padovan err = -EBADFD; 181703a00194SGustavo F. Padovan goto done; 181803a00194SGustavo F. Padovan } 181903a00194SGustavo F. Padovan 182003a00194SGustavo F. Padovan /* Set destination address and psm */ 18217eafc59eSMarcel Holtmann bacpy(&chan->dst, dst); 18224f1654e0SMarcel Holtmann chan->dst_type = dst_type; 18236be36555SAndrei Emeltchenko 182403a00194SGustavo F. Padovan chan->psm = psm; 182503a00194SGustavo F. Padovan chan->dcid = cid; 18260a708f8fSGustavo F. Padovan 18274343478fSGustavo F. Padovan auth_type = l2cap_get_auth_type(chan); 18280a708f8fSGustavo F. Padovan 1829f224ca5fSJohan Hedberg if (bdaddr_type_is_le(dst_type)) 18308e9f9892SAndre Guedes hcon = hci_connect(hdev, LE_LINK, dst, dst_type, 18314343478fSGustavo F. Padovan chan->sec_level, auth_type); 1832acd7d370SVille Tervo else 18338e9f9892SAndre Guedes hcon = hci_connect(hdev, ACL_LINK, dst, dst_type, 18344343478fSGustavo F. Padovan chan->sec_level, auth_type); 1835acd7d370SVille Tervo 183630e76272SVille Tervo if (IS_ERR(hcon)) { 183730e76272SVille Tervo err = PTR_ERR(hcon); 18380a708f8fSGustavo F. Padovan goto done; 183930e76272SVille Tervo } 18400a708f8fSGustavo F. Padovan 1841baf43251SClaudio Takahasi conn = l2cap_conn_add(hcon); 18420a708f8fSGustavo F. Padovan if (!conn) { 184376a68ba0SDavid Herrmann hci_conn_drop(hcon); 184430e76272SVille Tervo err = -ENOMEM; 18450a708f8fSGustavo F. Padovan goto done; 18460a708f8fSGustavo F. Padovan } 18470a708f8fSGustavo F. Padovan 1848141d5706SJohan Hedberg if (cid && __l2cap_get_chan_by_dcid(conn, cid)) { 184976a68ba0SDavid Herrmann hci_conn_drop(hcon); 1850141d5706SJohan Hedberg err = -EBUSY; 18519f0caeb1SVinicius Costa Gomes goto done; 18529f0caeb1SVinicius Costa Gomes } 18539f0caeb1SVinicius Costa Gomes 18540a708f8fSGustavo F. Padovan /* Update source addr of the socket */ 18557eafc59eSMarcel Holtmann bacpy(&chan->src, &hcon->src); 18564f1654e0SMarcel Holtmann chan->src_type = bdaddr_type(hcon, hcon->src_type); 18570a708f8fSGustavo F. Padovan 18586be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 185948454079SGustavo F. Padovan l2cap_chan_add(conn, chan); 18606be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 186148454079SGustavo F. Padovan 18625ee9891dSJohan Hedberg /* l2cap_chan_add takes its own ref so we can drop this one */ 18635ee9891dSJohan Hedberg hci_conn_drop(hcon); 18645ee9891dSJohan Hedberg 18656be36555SAndrei Emeltchenko l2cap_state_change(chan, BT_CONNECT); 18668d836d71SGustavo Padovan __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 18670a708f8fSGustavo F. Padovan 18680a708f8fSGustavo F. Padovan if (hcon->state == BT_CONNECTED) { 1869715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 1870c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 1871d45fc423SGustavo F. Padovan if (l2cap_chan_check_security(chan)) 18726be36555SAndrei Emeltchenko l2cap_state_change(chan, BT_CONNECTED); 18730a708f8fSGustavo F. Padovan } else 1874fc7f8a7eSGustavo F. Padovan l2cap_do_start(chan); 18750a708f8fSGustavo F. Padovan } 18760a708f8fSGustavo F. Padovan 187730e76272SVille Tervo err = 0; 187830e76272SVille Tervo 18790a708f8fSGustavo F. Padovan done: 18806be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 188109fd0de5SGustavo F. Padovan hci_dev_unlock(hdev); 18820a708f8fSGustavo F. Padovan hci_dev_put(hdev); 18830a708f8fSGustavo F. Padovan return err; 18840a708f8fSGustavo F. Padovan } 18850a708f8fSGustavo F. Padovan 1886721c4181SGustavo F. Padovan static void l2cap_monitor_timeout(struct work_struct *work) 18870a708f8fSGustavo F. Padovan { 1888721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 1889721c4181SGustavo F. Padovan monitor_timer.work); 18900a708f8fSGustavo F. Padovan 1891525cd185SGustavo F. Padovan BT_DBG("chan %p", chan); 18920a708f8fSGustavo F. Padovan 18936be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 18946be36555SAndrei Emeltchenko 189580909e04SMat Martineau if (!chan->conn) { 18966be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 18978d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 18980a708f8fSGustavo F. Padovan return; 18990a708f8fSGustavo F. Padovan } 19000a708f8fSGustavo F. Padovan 1901401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, L2CAP_EV_MONITOR_TO); 19020a708f8fSGustavo F. Padovan 19036be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 19048d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 19050a708f8fSGustavo F. Padovan } 19060a708f8fSGustavo F. Padovan 1907721c4181SGustavo F. Padovan static void l2cap_retrans_timeout(struct work_struct *work) 19080a708f8fSGustavo F. Padovan { 1909721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 1910721c4181SGustavo F. Padovan retrans_timer.work); 19110a708f8fSGustavo F. Padovan 191249208c9cSGustavo F. Padovan BT_DBG("chan %p", chan); 19130a708f8fSGustavo F. Padovan 19146be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 19156be36555SAndrei Emeltchenko 191680909e04SMat Martineau if (!chan->conn) { 191780909e04SMat Martineau l2cap_chan_unlock(chan); 191880909e04SMat Martineau l2cap_chan_put(chan); 191980909e04SMat Martineau return; 192080909e04SMat Martineau } 19210a708f8fSGustavo F. Padovan 1922401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, L2CAP_EV_RETRANS_TO); 19236be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 19248d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 19250a708f8fSGustavo F. Padovan } 19260a708f8fSGustavo F. Padovan 1927d660366dSGustavo Padovan static void l2cap_streaming_send(struct l2cap_chan *chan, 19283733937dSMat Martineau struct sk_buff_head *skbs) 19290a708f8fSGustavo F. Padovan { 19300a708f8fSGustavo F. Padovan struct sk_buff *skb; 19313733937dSMat Martineau struct l2cap_ctrl *control; 19320a708f8fSGustavo F. Padovan 19333733937dSMat Martineau BT_DBG("chan %p, skbs %p", chan, skbs); 19343733937dSMat Martineau 1935b99e13adSMat Martineau if (__chan_is_moving(chan)) 1936b99e13adSMat Martineau return; 1937b99e13adSMat Martineau 19383733937dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 19393733937dSMat Martineau 19403733937dSMat Martineau while (!skb_queue_empty(&chan->tx_q)) { 19413733937dSMat Martineau 19423733937dSMat Martineau skb = skb_dequeue(&chan->tx_q); 19433733937dSMat Martineau 19443733937dSMat Martineau bt_cb(skb)->control.retries = 1; 19453733937dSMat Martineau control = &bt_cb(skb)->control; 19463733937dSMat Martineau 19473733937dSMat Martineau control->reqseq = 0; 19483733937dSMat Martineau control->txseq = chan->next_tx_seq; 19493733937dSMat Martineau 19503733937dSMat Martineau __pack_control(chan, control, skb); 19510a708f8fSGustavo F. Padovan 195247d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 19533733937dSMat Martineau u16 fcs = crc16(0, (u8 *) skb->data, skb->len); 19543733937dSMat Martineau put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 19550a708f8fSGustavo F. Padovan } 19560a708f8fSGustavo F. Padovan 19574343478fSGustavo F. Padovan l2cap_do_send(chan, skb); 19580a708f8fSGustavo F. Padovan 1959b4400672SAndrei Emeltchenko BT_DBG("Sent txseq %u", control->txseq); 19603733937dSMat Martineau 1961836be934SAndrei Emeltchenko chan->next_tx_seq = __next_seq(chan, chan->next_tx_seq); 19623733937dSMat Martineau chan->frames_sent++; 19630a708f8fSGustavo F. Padovan } 19640a708f8fSGustavo F. Padovan } 19650a708f8fSGustavo F. Padovan 196667c9e840SSzymon Janc static int l2cap_ertm_send(struct l2cap_chan *chan) 19670a708f8fSGustavo F. Padovan { 19680a708f8fSGustavo F. Padovan struct sk_buff *skb, *tx_skb; 196918a48e76SMat Martineau struct l2cap_ctrl *control; 197018a48e76SMat Martineau int sent = 0; 197118a48e76SMat Martineau 197218a48e76SMat Martineau BT_DBG("chan %p", chan); 19730a708f8fSGustavo F. Padovan 197489bc500eSGustavo F. Padovan if (chan->state != BT_CONNECTED) 19750a708f8fSGustavo F. Padovan return -ENOTCONN; 19760a708f8fSGustavo F. Padovan 197794122bbeSMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 197894122bbeSMat Martineau return 0; 197994122bbeSMat Martineau 1980b99e13adSMat Martineau if (__chan_is_moving(chan)) 1981b99e13adSMat Martineau return 0; 1982b99e13adSMat Martineau 198318a48e76SMat Martineau while (chan->tx_send_head && 198418a48e76SMat Martineau chan->unacked_frames < chan->remote_tx_win && 198518a48e76SMat Martineau chan->tx_state == L2CAP_TX_STATE_XMIT) { 19860a708f8fSGustavo F. Padovan 198718a48e76SMat Martineau skb = chan->tx_send_head; 19880a708f8fSGustavo F. Padovan 198918a48e76SMat Martineau bt_cb(skb)->control.retries = 1; 199018a48e76SMat Martineau control = &bt_cb(skb)->control; 19910a708f8fSGustavo F. Padovan 1992e2ab4353SGustavo F. Padovan if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state)) 199318a48e76SMat Martineau control->final = 1; 1994e2ab4353SGustavo F. Padovan 199518a48e76SMat Martineau control->reqseq = chan->buffer_seq; 199618a48e76SMat Martineau chan->last_acked_seq = chan->buffer_seq; 199718a48e76SMat Martineau control->txseq = chan->next_tx_seq; 19980a708f8fSGustavo F. Padovan 199918a48e76SMat Martineau __pack_control(chan, control, skb); 20000a708f8fSGustavo F. Padovan 200147d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 200218a48e76SMat Martineau u16 fcs = crc16(0, (u8 *) skb->data, skb->len); 200318a48e76SMat Martineau put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 20040a708f8fSGustavo F. Padovan } 20050a708f8fSGustavo F. Padovan 200618a48e76SMat Martineau /* Clone after data has been modified. Data is assumed to be 200718a48e76SMat Martineau read-only (for locking purposes) on cloned sk_buffs. 200818a48e76SMat Martineau */ 200918a48e76SMat Martineau tx_skb = skb_clone(skb, GFP_KERNEL); 201018a48e76SMat Martineau 201118a48e76SMat Martineau if (!tx_skb) 201218a48e76SMat Martineau break; 20130a708f8fSGustavo F. Padovan 20141a09bcb9SGustavo F. Padovan __set_retrans_timer(chan); 20150a708f8fSGustavo F. Padovan 2016836be934SAndrei Emeltchenko chan->next_tx_seq = __next_seq(chan, chan->next_tx_seq); 20176a026610SGustavo F. Padovan chan->unacked_frames++; 20186a026610SGustavo F. Padovan chan->frames_sent++; 201918a48e76SMat Martineau sent++; 20200a708f8fSGustavo F. Padovan 202158d35f87SGustavo F. Padovan if (skb_queue_is_last(&chan->tx_q, skb)) 202258d35f87SGustavo F. Padovan chan->tx_send_head = NULL; 20230a708f8fSGustavo F. Padovan else 202458d35f87SGustavo F. Padovan chan->tx_send_head = skb_queue_next(&chan->tx_q, skb); 202518a48e76SMat Martineau 202618a48e76SMat Martineau l2cap_do_send(chan, tx_skb); 2027b4400672SAndrei Emeltchenko BT_DBG("Sent txseq %u", control->txseq); 20280a708f8fSGustavo F. Padovan } 20290a708f8fSGustavo F. Padovan 2030b4400672SAndrei Emeltchenko BT_DBG("Sent %d, %u unacked, %u in ERTM queue", sent, 2031b4400672SAndrei Emeltchenko chan->unacked_frames, skb_queue_len(&chan->tx_q)); 203218a48e76SMat Martineau 203318a48e76SMat Martineau return sent; 20340a708f8fSGustavo F. Padovan } 20350a708f8fSGustavo F. Padovan 2036e1fbd4c1SMat Martineau static void l2cap_ertm_resend(struct l2cap_chan *chan) 2037e1fbd4c1SMat Martineau { 2038e1fbd4c1SMat Martineau struct l2cap_ctrl control; 2039e1fbd4c1SMat Martineau struct sk_buff *skb; 2040e1fbd4c1SMat Martineau struct sk_buff *tx_skb; 2041e1fbd4c1SMat Martineau u16 seq; 2042e1fbd4c1SMat Martineau 2043e1fbd4c1SMat Martineau BT_DBG("chan %p", chan); 2044e1fbd4c1SMat Martineau 2045e1fbd4c1SMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 2046e1fbd4c1SMat Martineau return; 2047e1fbd4c1SMat Martineau 2048b99e13adSMat Martineau if (__chan_is_moving(chan)) 2049b99e13adSMat Martineau return; 2050b99e13adSMat Martineau 2051e1fbd4c1SMat Martineau while (chan->retrans_list.head != L2CAP_SEQ_LIST_CLEAR) { 2052e1fbd4c1SMat Martineau seq = l2cap_seq_list_pop(&chan->retrans_list); 2053e1fbd4c1SMat Martineau 2054e1fbd4c1SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, seq); 2055e1fbd4c1SMat Martineau if (!skb) { 2056e1fbd4c1SMat Martineau BT_DBG("Error: Can't retransmit seq %d, frame missing", 2057e1fbd4c1SMat Martineau seq); 2058e1fbd4c1SMat Martineau continue; 2059e1fbd4c1SMat Martineau } 2060e1fbd4c1SMat Martineau 2061e1fbd4c1SMat Martineau bt_cb(skb)->control.retries++; 2062e1fbd4c1SMat Martineau control = bt_cb(skb)->control; 2063e1fbd4c1SMat Martineau 2064e1fbd4c1SMat Martineau if (chan->max_tx != 0 && 2065e1fbd4c1SMat Martineau bt_cb(skb)->control.retries > chan->max_tx) { 2066e1fbd4c1SMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 20675e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 2068e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 2069e1fbd4c1SMat Martineau break; 2070e1fbd4c1SMat Martineau } 2071e1fbd4c1SMat Martineau 2072e1fbd4c1SMat Martineau control.reqseq = chan->buffer_seq; 2073e1fbd4c1SMat Martineau if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state)) 2074e1fbd4c1SMat Martineau control.final = 1; 2075e1fbd4c1SMat Martineau else 2076e1fbd4c1SMat Martineau control.final = 0; 2077e1fbd4c1SMat Martineau 2078e1fbd4c1SMat Martineau if (skb_cloned(skb)) { 2079e1fbd4c1SMat Martineau /* Cloned sk_buffs are read-only, so we need a 2080e1fbd4c1SMat Martineau * writeable copy 2081e1fbd4c1SMat Martineau */ 20828bcde1f2SGustavo Padovan tx_skb = skb_copy(skb, GFP_KERNEL); 2083e1fbd4c1SMat Martineau } else { 20848bcde1f2SGustavo Padovan tx_skb = skb_clone(skb, GFP_KERNEL); 2085e1fbd4c1SMat Martineau } 2086e1fbd4c1SMat Martineau 2087e1fbd4c1SMat Martineau if (!tx_skb) { 2088e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 2089e1fbd4c1SMat Martineau break; 2090e1fbd4c1SMat Martineau } 2091e1fbd4c1SMat Martineau 2092e1fbd4c1SMat Martineau /* Update skb contents */ 2093e1fbd4c1SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 2094e1fbd4c1SMat Martineau put_unaligned_le32(__pack_extended_control(&control), 2095e1fbd4c1SMat Martineau tx_skb->data + L2CAP_HDR_SIZE); 2096e1fbd4c1SMat Martineau } else { 2097e1fbd4c1SMat Martineau put_unaligned_le16(__pack_enhanced_control(&control), 2098e1fbd4c1SMat Martineau tx_skb->data + L2CAP_HDR_SIZE); 2099e1fbd4c1SMat Martineau } 2100e1fbd4c1SMat Martineau 2101e1fbd4c1SMat Martineau if (chan->fcs == L2CAP_FCS_CRC16) { 2102e1fbd4c1SMat Martineau u16 fcs = crc16(0, (u8 *) tx_skb->data, tx_skb->len); 2103e1fbd4c1SMat Martineau put_unaligned_le16(fcs, skb_put(tx_skb, 2104e1fbd4c1SMat Martineau L2CAP_FCS_SIZE)); 2105e1fbd4c1SMat Martineau } 2106e1fbd4c1SMat Martineau 2107e1fbd4c1SMat Martineau l2cap_do_send(chan, tx_skb); 2108e1fbd4c1SMat Martineau 2109e1fbd4c1SMat Martineau BT_DBG("Resent txseq %d", control.txseq); 2110e1fbd4c1SMat Martineau 2111e1fbd4c1SMat Martineau chan->last_acked_seq = chan->buffer_seq; 2112e1fbd4c1SMat Martineau } 2113e1fbd4c1SMat Martineau } 2114e1fbd4c1SMat Martineau 2115f80842a8SMat Martineau static void l2cap_retransmit(struct l2cap_chan *chan, 2116f80842a8SMat Martineau struct l2cap_ctrl *control) 2117f80842a8SMat Martineau { 2118f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2119f80842a8SMat Martineau 2120f80842a8SMat Martineau l2cap_seq_list_append(&chan->retrans_list, control->reqseq); 2121f80842a8SMat Martineau l2cap_ertm_resend(chan); 2122f80842a8SMat Martineau } 2123f80842a8SMat Martineau 2124d2a7ac5dSMat Martineau static void l2cap_retransmit_all(struct l2cap_chan *chan, 2125d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 2126d2a7ac5dSMat Martineau { 2127e1fbd4c1SMat Martineau struct sk_buff *skb; 2128e1fbd4c1SMat Martineau 2129e1fbd4c1SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2130e1fbd4c1SMat Martineau 2131e1fbd4c1SMat Martineau if (control->poll) 2132e1fbd4c1SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 2133e1fbd4c1SMat Martineau 2134e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 2135e1fbd4c1SMat Martineau 2136e1fbd4c1SMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 2137e1fbd4c1SMat Martineau return; 2138e1fbd4c1SMat Martineau 2139e1fbd4c1SMat Martineau if (chan->unacked_frames) { 2140e1fbd4c1SMat Martineau skb_queue_walk(&chan->tx_q, skb) { 2141e1fbd4c1SMat Martineau if (bt_cb(skb)->control.txseq == control->reqseq || 2142e1fbd4c1SMat Martineau skb == chan->tx_send_head) 2143e1fbd4c1SMat Martineau break; 2144e1fbd4c1SMat Martineau } 2145e1fbd4c1SMat Martineau 2146e1fbd4c1SMat Martineau skb_queue_walk_from(&chan->tx_q, skb) { 2147e1fbd4c1SMat Martineau if (skb == chan->tx_send_head) 2148e1fbd4c1SMat Martineau break; 2149e1fbd4c1SMat Martineau 2150e1fbd4c1SMat Martineau l2cap_seq_list_append(&chan->retrans_list, 2151e1fbd4c1SMat Martineau bt_cb(skb)->control.txseq); 2152e1fbd4c1SMat Martineau } 2153e1fbd4c1SMat Martineau 2154e1fbd4c1SMat Martineau l2cap_ertm_resend(chan); 2155e1fbd4c1SMat Martineau } 2156d2a7ac5dSMat Martineau } 2157d2a7ac5dSMat Martineau 2158b17e73bbSSzymon Janc static void l2cap_send_ack(struct l2cap_chan *chan) 2159b17e73bbSSzymon Janc { 21600a0aba42SMat Martineau struct l2cap_ctrl control; 21610a0aba42SMat Martineau u16 frames_to_ack = __seq_offset(chan, chan->buffer_seq, 21620a0aba42SMat Martineau chan->last_acked_seq); 21630a0aba42SMat Martineau int threshold; 21640a0aba42SMat Martineau 21650a0aba42SMat Martineau BT_DBG("chan %p last_acked_seq %d buffer_seq %d", 21660a0aba42SMat Martineau chan, chan->last_acked_seq, chan->buffer_seq); 21670a0aba42SMat Martineau 21680a0aba42SMat Martineau memset(&control, 0, sizeof(control)); 21690a0aba42SMat Martineau control.sframe = 1; 21700a0aba42SMat Martineau 21710a0aba42SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state) && 21720a0aba42SMat Martineau chan->rx_state == L2CAP_RX_STATE_RECV) { 2173b17e73bbSSzymon Janc __clear_ack_timer(chan); 21740a0aba42SMat Martineau control.super = L2CAP_SUPER_RNR; 21750a0aba42SMat Martineau control.reqseq = chan->buffer_seq; 21760a0aba42SMat Martineau l2cap_send_sframe(chan, &control); 21770a0aba42SMat Martineau } else { 21780a0aba42SMat Martineau if (!test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) { 21790a0aba42SMat Martineau l2cap_ertm_send(chan); 21800a0aba42SMat Martineau /* If any i-frames were sent, they included an ack */ 21810a0aba42SMat Martineau if (chan->buffer_seq == chan->last_acked_seq) 21820a0aba42SMat Martineau frames_to_ack = 0; 21830a0aba42SMat Martineau } 21840a0aba42SMat Martineau 2185c20f8e35SMat Martineau /* Ack now if the window is 3/4ths full. 21860a0aba42SMat Martineau * Calculate without mul or div 21870a0aba42SMat Martineau */ 2188c20f8e35SMat Martineau threshold = chan->ack_win; 21890a0aba42SMat Martineau threshold += threshold << 1; 21900a0aba42SMat Martineau threshold >>= 2; 21910a0aba42SMat Martineau 2192b4400672SAndrei Emeltchenko BT_DBG("frames_to_ack %u, threshold %d", frames_to_ack, 21930a0aba42SMat Martineau threshold); 21940a0aba42SMat Martineau 21950a0aba42SMat Martineau if (frames_to_ack >= threshold) { 21960a0aba42SMat Martineau __clear_ack_timer(chan); 21970a0aba42SMat Martineau control.super = L2CAP_SUPER_RR; 21980a0aba42SMat Martineau control.reqseq = chan->buffer_seq; 21990a0aba42SMat Martineau l2cap_send_sframe(chan, &control); 22000a0aba42SMat Martineau frames_to_ack = 0; 22010a0aba42SMat Martineau } 22020a0aba42SMat Martineau 22030a0aba42SMat Martineau if (frames_to_ack) 22040a0aba42SMat Martineau __set_ack_timer(chan); 22050a0aba42SMat Martineau } 2206b17e73bbSSzymon Janc } 2207b17e73bbSSzymon Janc 220804124681SGustavo F. Padovan static inline int l2cap_skbuff_fromiovec(struct l2cap_chan *chan, 220904124681SGustavo F. Padovan struct msghdr *msg, int len, 221004124681SGustavo F. Padovan int count, struct sk_buff *skb) 22110a708f8fSGustavo F. Padovan { 22120952a57aSAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 22130a708f8fSGustavo F. Padovan struct sk_buff **frag; 221490338947SGustavo Padovan int sent = 0; 22150a708f8fSGustavo F. Padovan 22160a708f8fSGustavo F. Padovan if (memcpy_fromiovec(skb_put(skb, count), msg->msg_iov, count)) 22170a708f8fSGustavo F. Padovan return -EFAULT; 22180a708f8fSGustavo F. Padovan 22190a708f8fSGustavo F. Padovan sent += count; 22200a708f8fSGustavo F. Padovan len -= count; 22210a708f8fSGustavo F. Padovan 22220a708f8fSGustavo F. Padovan /* Continuation fragments (no L2CAP header) */ 22230a708f8fSGustavo F. Padovan frag = &skb_shinfo(skb)->frag_list; 22240a708f8fSGustavo F. Padovan while (len) { 2225fbe00700SGustavo Padovan struct sk_buff *tmp; 2226fbe00700SGustavo Padovan 22270a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 22280a708f8fSGustavo F. Padovan 2229fbe00700SGustavo Padovan tmp = chan->ops->alloc_skb(chan, count, 223090338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 2231fbe00700SGustavo Padovan if (IS_ERR(tmp)) 2232fbe00700SGustavo Padovan return PTR_ERR(tmp); 22332f7719ceSAndrei Emeltchenko 2234fbe00700SGustavo Padovan *frag = tmp; 2235fbe00700SGustavo Padovan 22360a708f8fSGustavo F. Padovan if (memcpy_fromiovec(skb_put(*frag, count), msg->msg_iov, count)) 22370a708f8fSGustavo F. Padovan return -EFAULT; 22380a708f8fSGustavo F. Padovan 22395e59b791SLuiz Augusto von Dentz (*frag)->priority = skb->priority; 22405e59b791SLuiz Augusto von Dentz 22410a708f8fSGustavo F. Padovan sent += count; 22420a708f8fSGustavo F. Padovan len -= count; 22430a708f8fSGustavo F. Padovan 22442d0ed3d5SGustavo Padovan skb->len += (*frag)->len; 22452d0ed3d5SGustavo Padovan skb->data_len += (*frag)->len; 22462d0ed3d5SGustavo Padovan 22470a708f8fSGustavo F. Padovan frag = &(*frag)->next; 22480a708f8fSGustavo F. Padovan } 22490a708f8fSGustavo F. Padovan 22500a708f8fSGustavo F. Padovan return sent; 22510a708f8fSGustavo F. Padovan } 22520a708f8fSGustavo F. Padovan 22535e59b791SLuiz Augusto von Dentz static struct sk_buff *l2cap_create_connless_pdu(struct l2cap_chan *chan, 22545e59b791SLuiz Augusto von Dentz struct msghdr *msg, size_t len, 22555e59b791SLuiz Augusto von Dentz u32 priority) 22560a708f8fSGustavo F. Padovan { 22578c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 22580a708f8fSGustavo F. Padovan struct sk_buff *skb; 225903a51213SAndrei Emeltchenko int err, count, hlen = L2CAP_HDR_SIZE + L2CAP_PSMLEN_SIZE; 22600a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 22610a708f8fSGustavo F. Padovan 226243b1b8dfSMarcel Holtmann BT_DBG("chan %p psm 0x%2.2x len %zu priority %u", chan, 226343b1b8dfSMarcel Holtmann __le16_to_cpu(chan->psm), len, priority); 22640a708f8fSGustavo F. Padovan 22650a708f8fSGustavo F. Padovan count = min_t(unsigned int, (conn->mtu - hlen), len); 22662f7719ceSAndrei Emeltchenko 22672f7719ceSAndrei Emeltchenko skb = chan->ops->alloc_skb(chan, count + hlen, 226890338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 226990338947SGustavo Padovan if (IS_ERR(skb)) 227090338947SGustavo Padovan return skb; 22710a708f8fSGustavo F. Padovan 22725e59b791SLuiz Augusto von Dentz skb->priority = priority; 22735e59b791SLuiz Augusto von Dentz 22740a708f8fSGustavo F. Padovan /* Create L2CAP header */ 22750a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2276fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 2277daf6a78cSAndrei Emeltchenko lh->len = cpu_to_le16(len + L2CAP_PSMLEN_SIZE); 227843b1b8dfSMarcel Holtmann put_unaligned(chan->psm, (__le16 *) skb_put(skb, L2CAP_PSMLEN_SIZE)); 22790a708f8fSGustavo F. Padovan 22800952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 22810a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 22820a708f8fSGustavo F. Padovan kfree_skb(skb); 22830a708f8fSGustavo F. Padovan return ERR_PTR(err); 22840a708f8fSGustavo F. Padovan } 22850a708f8fSGustavo F. Padovan return skb; 22860a708f8fSGustavo F. Padovan } 22870a708f8fSGustavo F. Padovan 22885e59b791SLuiz Augusto von Dentz static struct sk_buff *l2cap_create_basic_pdu(struct l2cap_chan *chan, 22895e59b791SLuiz Augusto von Dentz struct msghdr *msg, size_t len, 22905e59b791SLuiz Augusto von Dentz u32 priority) 22910a708f8fSGustavo F. Padovan { 22928c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 22930a708f8fSGustavo F. Padovan struct sk_buff *skb; 2294f2ba7faeSGustavo Padovan int err, count; 22950a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 22960a708f8fSGustavo F. Padovan 2297b4400672SAndrei Emeltchenko BT_DBG("chan %p len %zu", chan, len); 22980a708f8fSGustavo F. Padovan 2299f2ba7faeSGustavo Padovan count = min_t(unsigned int, (conn->mtu - L2CAP_HDR_SIZE), len); 23002f7719ceSAndrei Emeltchenko 2301f2ba7faeSGustavo Padovan skb = chan->ops->alloc_skb(chan, count + L2CAP_HDR_SIZE, 230290338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 230390338947SGustavo Padovan if (IS_ERR(skb)) 230490338947SGustavo Padovan return skb; 23050a708f8fSGustavo F. Padovan 23065e59b791SLuiz Augusto von Dentz skb->priority = priority; 23075e59b791SLuiz Augusto von Dentz 23080a708f8fSGustavo F. Padovan /* Create L2CAP header */ 23090a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2310fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 23116ff9b5efSGustavo Padovan lh->len = cpu_to_le16(len); 23120a708f8fSGustavo F. Padovan 23130952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 23140a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 23150a708f8fSGustavo F. Padovan kfree_skb(skb); 23160a708f8fSGustavo F. Padovan return ERR_PTR(err); 23170a708f8fSGustavo F. Padovan } 23180a708f8fSGustavo F. Padovan return skb; 23190a708f8fSGustavo F. Padovan } 23200a708f8fSGustavo F. Padovan 2321ab0ff76dSLuiz Augusto von Dentz static struct sk_buff *l2cap_create_iframe_pdu(struct l2cap_chan *chan, 2322ab0ff76dSLuiz Augusto von Dentz struct msghdr *msg, size_t len, 232394122bbeSMat Martineau u16 sdulen) 23240a708f8fSGustavo F. Padovan { 23258c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 23260a708f8fSGustavo F. Padovan struct sk_buff *skb; 2327e4ca6d98SAndrei Emeltchenko int err, count, hlen; 23280a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 23290a708f8fSGustavo F. Padovan 2330b4400672SAndrei Emeltchenko BT_DBG("chan %p len %zu", chan, len); 23310a708f8fSGustavo F. Padovan 23320a708f8fSGustavo F. Padovan if (!conn) 23330a708f8fSGustavo F. Padovan return ERR_PTR(-ENOTCONN); 23340a708f8fSGustavo F. Padovan 2335ba7aa64fSGustavo Padovan hlen = __ertm_hdr_size(chan); 2336e4ca6d98SAndrei Emeltchenko 23370a708f8fSGustavo F. Padovan if (sdulen) 233803a51213SAndrei Emeltchenko hlen += L2CAP_SDULEN_SIZE; 23390a708f8fSGustavo F. Padovan 234047d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 234103a51213SAndrei Emeltchenko hlen += L2CAP_FCS_SIZE; 23420a708f8fSGustavo F. Padovan 23430a708f8fSGustavo F. Padovan count = min_t(unsigned int, (conn->mtu - hlen), len); 23442f7719ceSAndrei Emeltchenko 23452f7719ceSAndrei Emeltchenko skb = chan->ops->alloc_skb(chan, count + hlen, 234690338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 234790338947SGustavo Padovan if (IS_ERR(skb)) 234890338947SGustavo Padovan return skb; 23490a708f8fSGustavo F. Padovan 23500a708f8fSGustavo F. Padovan /* Create L2CAP header */ 23510a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2352fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 23530a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(len + (hlen - L2CAP_HDR_SIZE)); 235488843ab0SAndrei Emeltchenko 235518a48e76SMat Martineau /* Control header is populated later */ 235618a48e76SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 235718a48e76SMat Martineau put_unaligned_le32(0, skb_put(skb, L2CAP_EXT_CTRL_SIZE)); 235818a48e76SMat Martineau else 235918a48e76SMat Martineau put_unaligned_le16(0, skb_put(skb, L2CAP_ENH_CTRL_SIZE)); 236088843ab0SAndrei Emeltchenko 23610a708f8fSGustavo F. Padovan if (sdulen) 236203a51213SAndrei Emeltchenko put_unaligned_le16(sdulen, skb_put(skb, L2CAP_SDULEN_SIZE)); 23630a708f8fSGustavo F. Padovan 23640952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 23650a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 23660a708f8fSGustavo F. Padovan kfree_skb(skb); 23670a708f8fSGustavo F. Padovan return ERR_PTR(err); 23680a708f8fSGustavo F. Padovan } 23690a708f8fSGustavo F. Padovan 237018a48e76SMat Martineau bt_cb(skb)->control.fcs = chan->fcs; 23713ce3514fSMat Martineau bt_cb(skb)->control.retries = 0; 23720a708f8fSGustavo F. Padovan return skb; 23730a708f8fSGustavo F. Padovan } 23740a708f8fSGustavo F. Padovan 237594122bbeSMat Martineau static int l2cap_segment_sdu(struct l2cap_chan *chan, 237694122bbeSMat Martineau struct sk_buff_head *seg_queue, 237794122bbeSMat Martineau struct msghdr *msg, size_t len) 23780a708f8fSGustavo F. Padovan { 23790a708f8fSGustavo F. Padovan struct sk_buff *skb; 238094122bbeSMat Martineau u16 sdu_len; 238194122bbeSMat Martineau size_t pdu_len; 238294122bbeSMat Martineau u8 sar; 23830a708f8fSGustavo F. Padovan 2384b4400672SAndrei Emeltchenko BT_DBG("chan %p, msg %p, len %zu", chan, msg, len); 23850a708f8fSGustavo F. Padovan 238694122bbeSMat Martineau /* It is critical that ERTM PDUs fit in a single HCI fragment, 238794122bbeSMat Martineau * so fragmented skbs are not used. The HCI layer's handling 238894122bbeSMat Martineau * of fragmented skbs is not compatible with ERTM's queueing. 238994122bbeSMat Martineau */ 239094122bbeSMat Martineau 239194122bbeSMat Martineau /* PDU size is derived from the HCI MTU */ 239294122bbeSMat Martineau pdu_len = chan->conn->mtu; 239394122bbeSMat Martineau 2394a549574dSMat Martineau /* Constrain PDU size for BR/EDR connections */ 2395a549574dSMat Martineau if (!chan->hs_hcon) 239694122bbeSMat Martineau pdu_len = min_t(size_t, pdu_len, L2CAP_BREDR_MAX_PAYLOAD); 239794122bbeSMat Martineau 239894122bbeSMat Martineau /* Adjust for largest possible L2CAP overhead. */ 239935d401dfSGustavo Padovan if (chan->fcs) 240035d401dfSGustavo Padovan pdu_len -= L2CAP_FCS_SIZE; 240135d401dfSGustavo Padovan 2402ba7aa64fSGustavo Padovan pdu_len -= __ertm_hdr_size(chan); 240394122bbeSMat Martineau 240494122bbeSMat Martineau /* Remote device may have requested smaller PDUs */ 240594122bbeSMat Martineau pdu_len = min_t(size_t, pdu_len, chan->remote_mps); 240694122bbeSMat Martineau 240794122bbeSMat Martineau if (len <= pdu_len) { 240894122bbeSMat Martineau sar = L2CAP_SAR_UNSEGMENTED; 240994122bbeSMat Martineau sdu_len = 0; 241094122bbeSMat Martineau pdu_len = len; 241194122bbeSMat Martineau } else { 241294122bbeSMat Martineau sar = L2CAP_SAR_START; 241394122bbeSMat Martineau sdu_len = len; 241494122bbeSMat Martineau pdu_len -= L2CAP_SDULEN_SIZE; 241594122bbeSMat Martineau } 24160a708f8fSGustavo F. Padovan 24170a708f8fSGustavo F. Padovan while (len > 0) { 241894122bbeSMat Martineau skb = l2cap_create_iframe_pdu(chan, msg, pdu_len, sdu_len); 24190a708f8fSGustavo F. Padovan 24200a708f8fSGustavo F. Padovan if (IS_ERR(skb)) { 242194122bbeSMat Martineau __skb_queue_purge(seg_queue); 24220a708f8fSGustavo F. Padovan return PTR_ERR(skb); 24230a708f8fSGustavo F. Padovan } 24240a708f8fSGustavo F. Padovan 242594122bbeSMat Martineau bt_cb(skb)->control.sar = sar; 242694122bbeSMat Martineau __skb_queue_tail(seg_queue, skb); 24270a708f8fSGustavo F. Padovan 242894122bbeSMat Martineau len -= pdu_len; 242994122bbeSMat Martineau if (sdu_len) { 243094122bbeSMat Martineau sdu_len = 0; 243194122bbeSMat Martineau pdu_len += L2CAP_SDULEN_SIZE; 243294122bbeSMat Martineau } 243394122bbeSMat Martineau 243494122bbeSMat Martineau if (len <= pdu_len) { 243594122bbeSMat Martineau sar = L2CAP_SAR_END; 243694122bbeSMat Martineau pdu_len = len; 243794122bbeSMat Martineau } else { 243894122bbeSMat Martineau sar = L2CAP_SAR_CONTINUE; 243994122bbeSMat Martineau } 244094122bbeSMat Martineau } 244194122bbeSMat Martineau 2442f0f62799SGustavo Padovan return 0; 24430a708f8fSGustavo F. Padovan } 24440a708f8fSGustavo F. Padovan 24455e59b791SLuiz Augusto von Dentz int l2cap_chan_send(struct l2cap_chan *chan, struct msghdr *msg, size_t len, 24465e59b791SLuiz Augusto von Dentz u32 priority) 24479a91a04aSGustavo F. Padovan { 24489a91a04aSGustavo F. Padovan struct sk_buff *skb; 24499a91a04aSGustavo F. Padovan int err; 245094122bbeSMat Martineau struct sk_buff_head seg_queue; 24519a91a04aSGustavo F. Padovan 245231e8ce80SSeung-Woo Kim if (!chan->conn) 245331e8ce80SSeung-Woo Kim return -ENOTCONN; 245431e8ce80SSeung-Woo Kim 24559a91a04aSGustavo F. Padovan /* Connectionless channel */ 2456715ec005SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_LESS) { 24575e59b791SLuiz Augusto von Dentz skb = l2cap_create_connless_pdu(chan, msg, len, priority); 24589a91a04aSGustavo F. Padovan if (IS_ERR(skb)) 24599a91a04aSGustavo F. Padovan return PTR_ERR(skb); 24609a91a04aSGustavo F. Padovan 24619a91a04aSGustavo F. Padovan l2cap_do_send(chan, skb); 24629a91a04aSGustavo F. Padovan return len; 24639a91a04aSGustavo F. Padovan } 24649a91a04aSGustavo F. Padovan 24659a91a04aSGustavo F. Padovan switch (chan->mode) { 24669a91a04aSGustavo F. Padovan case L2CAP_MODE_BASIC: 24679a91a04aSGustavo F. Padovan /* Check outgoing MTU */ 24689a91a04aSGustavo F. Padovan if (len > chan->omtu) 24699a91a04aSGustavo F. Padovan return -EMSGSIZE; 24709a91a04aSGustavo F. Padovan 24719a91a04aSGustavo F. Padovan /* Create a basic PDU */ 24725e59b791SLuiz Augusto von Dentz skb = l2cap_create_basic_pdu(chan, msg, len, priority); 24739a91a04aSGustavo F. Padovan if (IS_ERR(skb)) 24749a91a04aSGustavo F. Padovan return PTR_ERR(skb); 24759a91a04aSGustavo F. Padovan 24769a91a04aSGustavo F. Padovan l2cap_do_send(chan, skb); 24779a91a04aSGustavo F. Padovan err = len; 24789a91a04aSGustavo F. Padovan break; 24799a91a04aSGustavo F. Padovan 24809a91a04aSGustavo F. Padovan case L2CAP_MODE_ERTM: 24819a91a04aSGustavo F. Padovan case L2CAP_MODE_STREAMING: 248294122bbeSMat Martineau /* Check outgoing MTU */ 248394122bbeSMat Martineau if (len > chan->omtu) { 248494122bbeSMat Martineau err = -EMSGSIZE; 24859a91a04aSGustavo F. Padovan break; 24869a91a04aSGustavo F. Padovan } 24879a91a04aSGustavo F. Padovan 248894122bbeSMat Martineau __skb_queue_head_init(&seg_queue); 248994122bbeSMat Martineau 249094122bbeSMat Martineau /* Do segmentation before calling in to the state machine, 249194122bbeSMat Martineau * since it's possible to block while waiting for memory 249294122bbeSMat Martineau * allocation. 249394122bbeSMat Martineau */ 249494122bbeSMat Martineau err = l2cap_segment_sdu(chan, &seg_queue, msg, len); 249594122bbeSMat Martineau 249694122bbeSMat Martineau /* The channel could have been closed while segmenting, 249794122bbeSMat Martineau * check that it is still connected. 249894122bbeSMat Martineau */ 249994122bbeSMat Martineau if (chan->state != BT_CONNECTED) { 250094122bbeSMat Martineau __skb_queue_purge(&seg_queue); 250194122bbeSMat Martineau err = -ENOTCONN; 25029a91a04aSGustavo F. Padovan } 25039a91a04aSGustavo F. Padovan 250494122bbeSMat Martineau if (err) 250594122bbeSMat Martineau break; 250694122bbeSMat Martineau 25073733937dSMat Martineau if (chan->mode == L2CAP_MODE_ERTM) 2508d660366dSGustavo Padovan l2cap_tx(chan, NULL, &seg_queue, L2CAP_EV_DATA_REQUEST); 25093733937dSMat Martineau else 2510d660366dSGustavo Padovan l2cap_streaming_send(chan, &seg_queue); 251194122bbeSMat Martineau 25129a91a04aSGustavo F. Padovan err = len; 25139a91a04aSGustavo F. Padovan 251494122bbeSMat Martineau /* If the skbs were not queued for sending, they'll still be in 251594122bbeSMat Martineau * seg_queue and need to be purged. 251694122bbeSMat Martineau */ 251794122bbeSMat Martineau __skb_queue_purge(&seg_queue); 25189a91a04aSGustavo F. Padovan break; 25199a91a04aSGustavo F. Padovan 25209a91a04aSGustavo F. Padovan default: 25219a91a04aSGustavo F. Padovan BT_DBG("bad state %1.1x", chan->mode); 25229a91a04aSGustavo F. Padovan err = -EBADFD; 25239a91a04aSGustavo F. Padovan } 25249a91a04aSGustavo F. Padovan 25259a91a04aSGustavo F. Padovan return err; 25269a91a04aSGustavo F. Padovan } 25279a91a04aSGustavo F. Padovan 2528d2a7ac5dSMat Martineau static void l2cap_send_srej(struct l2cap_chan *chan, u16 txseq) 2529d2a7ac5dSMat Martineau { 2530bed68bdeSMat Martineau struct l2cap_ctrl control; 2531bed68bdeSMat Martineau u16 seq; 2532bed68bdeSMat Martineau 2533b4400672SAndrei Emeltchenko BT_DBG("chan %p, txseq %u", chan, txseq); 2534bed68bdeSMat Martineau 2535bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2536bed68bdeSMat Martineau control.sframe = 1; 2537bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2538bed68bdeSMat Martineau 2539bed68bdeSMat Martineau for (seq = chan->expected_tx_seq; seq != txseq; 2540bed68bdeSMat Martineau seq = __next_seq(chan, seq)) { 2541bed68bdeSMat Martineau if (!l2cap_ertm_seq_in_queue(&chan->srej_q, seq)) { 2542bed68bdeSMat Martineau control.reqseq = seq; 2543bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2544bed68bdeSMat Martineau l2cap_seq_list_append(&chan->srej_list, seq); 2545bed68bdeSMat Martineau } 2546bed68bdeSMat Martineau } 2547bed68bdeSMat Martineau 2548bed68bdeSMat Martineau chan->expected_tx_seq = __next_seq(chan, txseq); 2549d2a7ac5dSMat Martineau } 2550d2a7ac5dSMat Martineau 2551d2a7ac5dSMat Martineau static void l2cap_send_srej_tail(struct l2cap_chan *chan) 2552d2a7ac5dSMat Martineau { 2553bed68bdeSMat Martineau struct l2cap_ctrl control; 2554bed68bdeSMat Martineau 2555bed68bdeSMat Martineau BT_DBG("chan %p", chan); 2556bed68bdeSMat Martineau 2557bed68bdeSMat Martineau if (chan->srej_list.tail == L2CAP_SEQ_LIST_CLEAR) 2558bed68bdeSMat Martineau return; 2559bed68bdeSMat Martineau 2560bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2561bed68bdeSMat Martineau control.sframe = 1; 2562bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2563bed68bdeSMat Martineau control.reqseq = chan->srej_list.tail; 2564bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2565d2a7ac5dSMat Martineau } 2566d2a7ac5dSMat Martineau 2567d2a7ac5dSMat Martineau static void l2cap_send_srej_list(struct l2cap_chan *chan, u16 txseq) 2568d2a7ac5dSMat Martineau { 2569bed68bdeSMat Martineau struct l2cap_ctrl control; 2570bed68bdeSMat Martineau u16 initial_head; 2571bed68bdeSMat Martineau u16 seq; 2572bed68bdeSMat Martineau 2573b4400672SAndrei Emeltchenko BT_DBG("chan %p, txseq %u", chan, txseq); 2574bed68bdeSMat Martineau 2575bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2576bed68bdeSMat Martineau control.sframe = 1; 2577bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2578bed68bdeSMat Martineau 2579bed68bdeSMat Martineau /* Capture initial list head to allow only one pass through the list. */ 2580bed68bdeSMat Martineau initial_head = chan->srej_list.head; 2581bed68bdeSMat Martineau 2582bed68bdeSMat Martineau do { 2583bed68bdeSMat Martineau seq = l2cap_seq_list_pop(&chan->srej_list); 2584bed68bdeSMat Martineau if (seq == txseq || seq == L2CAP_SEQ_LIST_CLEAR) 2585bed68bdeSMat Martineau break; 2586bed68bdeSMat Martineau 2587bed68bdeSMat Martineau control.reqseq = seq; 2588bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2589bed68bdeSMat Martineau l2cap_seq_list_append(&chan->srej_list, seq); 2590bed68bdeSMat Martineau } while (chan->srej_list.head != initial_head); 2591d2a7ac5dSMat Martineau } 2592d2a7ac5dSMat Martineau 2593608bcc6dSMat Martineau static void l2cap_process_reqseq(struct l2cap_chan *chan, u16 reqseq) 2594608bcc6dSMat Martineau { 2595608bcc6dSMat Martineau struct sk_buff *acked_skb; 2596608bcc6dSMat Martineau u16 ackseq; 2597608bcc6dSMat Martineau 2598b4400672SAndrei Emeltchenko BT_DBG("chan %p, reqseq %u", chan, reqseq); 2599608bcc6dSMat Martineau 2600608bcc6dSMat Martineau if (chan->unacked_frames == 0 || reqseq == chan->expected_ack_seq) 2601608bcc6dSMat Martineau return; 2602608bcc6dSMat Martineau 2603b4400672SAndrei Emeltchenko BT_DBG("expected_ack_seq %u, unacked_frames %u", 2604608bcc6dSMat Martineau chan->expected_ack_seq, chan->unacked_frames); 2605608bcc6dSMat Martineau 2606608bcc6dSMat Martineau for (ackseq = chan->expected_ack_seq; ackseq != reqseq; 2607608bcc6dSMat Martineau ackseq = __next_seq(chan, ackseq)) { 2608608bcc6dSMat Martineau 2609608bcc6dSMat Martineau acked_skb = l2cap_ertm_seq_in_queue(&chan->tx_q, ackseq); 2610608bcc6dSMat Martineau if (acked_skb) { 2611608bcc6dSMat Martineau skb_unlink(acked_skb, &chan->tx_q); 2612608bcc6dSMat Martineau kfree_skb(acked_skb); 2613608bcc6dSMat Martineau chan->unacked_frames--; 2614608bcc6dSMat Martineau } 2615608bcc6dSMat Martineau } 2616608bcc6dSMat Martineau 2617608bcc6dSMat Martineau chan->expected_ack_seq = reqseq; 2618608bcc6dSMat Martineau 2619608bcc6dSMat Martineau if (chan->unacked_frames == 0) 2620608bcc6dSMat Martineau __clear_retrans_timer(chan); 2621608bcc6dSMat Martineau 2622b4400672SAndrei Emeltchenko BT_DBG("unacked_frames %u", chan->unacked_frames); 2623608bcc6dSMat Martineau } 2624608bcc6dSMat Martineau 2625608bcc6dSMat Martineau static void l2cap_abort_rx_srej_sent(struct l2cap_chan *chan) 2626608bcc6dSMat Martineau { 2627608bcc6dSMat Martineau BT_DBG("chan %p", chan); 2628608bcc6dSMat Martineau 2629608bcc6dSMat Martineau chan->expected_tx_seq = chan->buffer_seq; 2630608bcc6dSMat Martineau l2cap_seq_list_clear(&chan->srej_list); 2631608bcc6dSMat Martineau skb_queue_purge(&chan->srej_q); 2632608bcc6dSMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 2633608bcc6dSMat Martineau } 2634608bcc6dSMat Martineau 2635d660366dSGustavo Padovan static void l2cap_tx_state_xmit(struct l2cap_chan *chan, 2636608bcc6dSMat Martineau struct l2cap_ctrl *control, 2637608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2638608bcc6dSMat Martineau { 2639608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d", chan, control, skbs, 2640608bcc6dSMat Martineau event); 2641608bcc6dSMat Martineau 2642608bcc6dSMat Martineau switch (event) { 2643608bcc6dSMat Martineau case L2CAP_EV_DATA_REQUEST: 2644608bcc6dSMat Martineau if (chan->tx_send_head == NULL) 2645608bcc6dSMat Martineau chan->tx_send_head = skb_peek(skbs); 2646608bcc6dSMat Martineau 2647608bcc6dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 2648608bcc6dSMat Martineau l2cap_ertm_send(chan); 2649608bcc6dSMat Martineau break; 2650608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_DETECTED: 2651608bcc6dSMat Martineau BT_DBG("Enter LOCAL_BUSY"); 2652608bcc6dSMat Martineau set_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2653608bcc6dSMat Martineau 2654608bcc6dSMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 2655608bcc6dSMat Martineau /* The SREJ_SENT state must be aborted if we are to 2656608bcc6dSMat Martineau * enter the LOCAL_BUSY state. 2657608bcc6dSMat Martineau */ 2658608bcc6dSMat Martineau l2cap_abort_rx_srej_sent(chan); 2659608bcc6dSMat Martineau } 2660608bcc6dSMat Martineau 2661608bcc6dSMat Martineau l2cap_send_ack(chan); 2662608bcc6dSMat Martineau 2663608bcc6dSMat Martineau break; 2664608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_CLEAR: 2665608bcc6dSMat Martineau BT_DBG("Exit LOCAL_BUSY"); 2666608bcc6dSMat Martineau clear_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2667608bcc6dSMat Martineau 2668608bcc6dSMat Martineau if (test_bit(CONN_RNR_SENT, &chan->conn_state)) { 2669608bcc6dSMat Martineau struct l2cap_ctrl local_control; 2670608bcc6dSMat Martineau 2671608bcc6dSMat Martineau memset(&local_control, 0, sizeof(local_control)); 2672608bcc6dSMat Martineau local_control.sframe = 1; 2673608bcc6dSMat Martineau local_control.super = L2CAP_SUPER_RR; 2674608bcc6dSMat Martineau local_control.poll = 1; 2675608bcc6dSMat Martineau local_control.reqseq = chan->buffer_seq; 2676a67d7f6fSMat Martineau l2cap_send_sframe(chan, &local_control); 2677608bcc6dSMat Martineau 2678608bcc6dSMat Martineau chan->retry_count = 1; 2679608bcc6dSMat Martineau __set_monitor_timer(chan); 2680608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2681608bcc6dSMat Martineau } 2682608bcc6dSMat Martineau break; 2683608bcc6dSMat Martineau case L2CAP_EV_RECV_REQSEQ_AND_FBIT: 2684608bcc6dSMat Martineau l2cap_process_reqseq(chan, control->reqseq); 2685608bcc6dSMat Martineau break; 2686608bcc6dSMat Martineau case L2CAP_EV_EXPLICIT_POLL: 2687608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2688608bcc6dSMat Martineau chan->retry_count = 1; 2689608bcc6dSMat Martineau __set_monitor_timer(chan); 2690608bcc6dSMat Martineau __clear_ack_timer(chan); 2691608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2692608bcc6dSMat Martineau break; 2693608bcc6dSMat Martineau case L2CAP_EV_RETRANS_TO: 2694608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2695608bcc6dSMat Martineau chan->retry_count = 1; 2696608bcc6dSMat Martineau __set_monitor_timer(chan); 2697608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2698608bcc6dSMat Martineau break; 2699608bcc6dSMat Martineau case L2CAP_EV_RECV_FBIT: 2700608bcc6dSMat Martineau /* Nothing to process */ 2701608bcc6dSMat Martineau break; 2702608bcc6dSMat Martineau default: 2703608bcc6dSMat Martineau break; 2704608bcc6dSMat Martineau } 2705608bcc6dSMat Martineau } 2706608bcc6dSMat Martineau 2707d660366dSGustavo Padovan static void l2cap_tx_state_wait_f(struct l2cap_chan *chan, 2708608bcc6dSMat Martineau struct l2cap_ctrl *control, 2709608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2710608bcc6dSMat Martineau { 2711608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d", chan, control, skbs, 2712608bcc6dSMat Martineau event); 2713608bcc6dSMat Martineau 2714608bcc6dSMat Martineau switch (event) { 2715608bcc6dSMat Martineau case L2CAP_EV_DATA_REQUEST: 2716608bcc6dSMat Martineau if (chan->tx_send_head == NULL) 2717608bcc6dSMat Martineau chan->tx_send_head = skb_peek(skbs); 2718608bcc6dSMat Martineau /* Queue data, but don't send. */ 2719608bcc6dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 2720608bcc6dSMat Martineau break; 2721608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_DETECTED: 2722608bcc6dSMat Martineau BT_DBG("Enter LOCAL_BUSY"); 2723608bcc6dSMat Martineau set_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2724608bcc6dSMat Martineau 2725608bcc6dSMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 2726608bcc6dSMat Martineau /* The SREJ_SENT state must be aborted if we are to 2727608bcc6dSMat Martineau * enter the LOCAL_BUSY state. 2728608bcc6dSMat Martineau */ 2729608bcc6dSMat Martineau l2cap_abort_rx_srej_sent(chan); 2730608bcc6dSMat Martineau } 2731608bcc6dSMat Martineau 2732608bcc6dSMat Martineau l2cap_send_ack(chan); 2733608bcc6dSMat Martineau 2734608bcc6dSMat Martineau break; 2735608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_CLEAR: 2736608bcc6dSMat Martineau BT_DBG("Exit LOCAL_BUSY"); 2737608bcc6dSMat Martineau clear_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2738608bcc6dSMat Martineau 2739608bcc6dSMat Martineau if (test_bit(CONN_RNR_SENT, &chan->conn_state)) { 2740608bcc6dSMat Martineau struct l2cap_ctrl local_control; 2741608bcc6dSMat Martineau memset(&local_control, 0, sizeof(local_control)); 2742608bcc6dSMat Martineau local_control.sframe = 1; 2743608bcc6dSMat Martineau local_control.super = L2CAP_SUPER_RR; 2744608bcc6dSMat Martineau local_control.poll = 1; 2745608bcc6dSMat Martineau local_control.reqseq = chan->buffer_seq; 2746a67d7f6fSMat Martineau l2cap_send_sframe(chan, &local_control); 2747608bcc6dSMat Martineau 2748608bcc6dSMat Martineau chan->retry_count = 1; 2749608bcc6dSMat Martineau __set_monitor_timer(chan); 2750608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2751608bcc6dSMat Martineau } 2752608bcc6dSMat Martineau break; 2753608bcc6dSMat Martineau case L2CAP_EV_RECV_REQSEQ_AND_FBIT: 2754608bcc6dSMat Martineau l2cap_process_reqseq(chan, control->reqseq); 2755608bcc6dSMat Martineau 2756608bcc6dSMat Martineau /* Fall through */ 2757608bcc6dSMat Martineau 2758608bcc6dSMat Martineau case L2CAP_EV_RECV_FBIT: 2759608bcc6dSMat Martineau if (control && control->final) { 2760608bcc6dSMat Martineau __clear_monitor_timer(chan); 2761608bcc6dSMat Martineau if (chan->unacked_frames > 0) 2762608bcc6dSMat Martineau __set_retrans_timer(chan); 2763608bcc6dSMat Martineau chan->retry_count = 0; 2764608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 2765608bcc6dSMat Martineau BT_DBG("recv fbit tx_state 0x2.2%x", chan->tx_state); 2766608bcc6dSMat Martineau } 2767608bcc6dSMat Martineau break; 2768608bcc6dSMat Martineau case L2CAP_EV_EXPLICIT_POLL: 2769608bcc6dSMat Martineau /* Ignore */ 2770608bcc6dSMat Martineau break; 2771608bcc6dSMat Martineau case L2CAP_EV_MONITOR_TO: 2772608bcc6dSMat Martineau if (chan->max_tx == 0 || chan->retry_count < chan->max_tx) { 2773608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2774608bcc6dSMat Martineau __set_monitor_timer(chan); 2775608bcc6dSMat Martineau chan->retry_count++; 2776608bcc6dSMat Martineau } else { 27775e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNABORTED); 2778608bcc6dSMat Martineau } 2779608bcc6dSMat Martineau break; 2780608bcc6dSMat Martineau default: 2781608bcc6dSMat Martineau break; 2782608bcc6dSMat Martineau } 2783608bcc6dSMat Martineau } 2784608bcc6dSMat Martineau 2785d660366dSGustavo Padovan static void l2cap_tx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 2786608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2787608bcc6dSMat Martineau { 2788608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d, state %d", 2789608bcc6dSMat Martineau chan, control, skbs, event, chan->tx_state); 2790608bcc6dSMat Martineau 2791608bcc6dSMat Martineau switch (chan->tx_state) { 2792608bcc6dSMat Martineau case L2CAP_TX_STATE_XMIT: 2793d660366dSGustavo Padovan l2cap_tx_state_xmit(chan, control, skbs, event); 2794608bcc6dSMat Martineau break; 2795608bcc6dSMat Martineau case L2CAP_TX_STATE_WAIT_F: 2796d660366dSGustavo Padovan l2cap_tx_state_wait_f(chan, control, skbs, event); 2797608bcc6dSMat Martineau break; 2798608bcc6dSMat Martineau default: 2799608bcc6dSMat Martineau /* Ignore event */ 2800608bcc6dSMat Martineau break; 2801608bcc6dSMat Martineau } 2802608bcc6dSMat Martineau } 2803608bcc6dSMat Martineau 28044b51dae9SMat Martineau static void l2cap_pass_to_tx(struct l2cap_chan *chan, 28054b51dae9SMat Martineau struct l2cap_ctrl *control) 28064b51dae9SMat Martineau { 28074b51dae9SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2808401bb1f7SAndrei Emeltchenko l2cap_tx(chan, control, NULL, L2CAP_EV_RECV_REQSEQ_AND_FBIT); 28094b51dae9SMat Martineau } 28104b51dae9SMat Martineau 2811f80842a8SMat Martineau static void l2cap_pass_to_tx_fbit(struct l2cap_chan *chan, 2812f80842a8SMat Martineau struct l2cap_ctrl *control) 2813f80842a8SMat Martineau { 2814f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2815401bb1f7SAndrei Emeltchenko l2cap_tx(chan, control, NULL, L2CAP_EV_RECV_FBIT); 2816f80842a8SMat Martineau } 2817f80842a8SMat Martineau 28180a708f8fSGustavo F. Padovan /* Copy frame to all raw sockets on that connection */ 28190a708f8fSGustavo F. Padovan static void l2cap_raw_recv(struct l2cap_conn *conn, struct sk_buff *skb) 28200a708f8fSGustavo F. Padovan { 28210a708f8fSGustavo F. Padovan struct sk_buff *nskb; 282248454079SGustavo F. Padovan struct l2cap_chan *chan; 28230a708f8fSGustavo F. Padovan 28240a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 28250a708f8fSGustavo F. Padovan 28263df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 28273d57dc68SGustavo F. Padovan 28283df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 2829715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_RAW) 28300a708f8fSGustavo F. Padovan continue; 28310a708f8fSGustavo F. Padovan 28327f5396a7SGustavo Padovan /* Don't send frame to the channel it came from */ 28337f5396a7SGustavo Padovan if (bt_cb(skb)->chan == chan) 28340a708f8fSGustavo F. Padovan continue; 28357f5396a7SGustavo Padovan 28368bcde1f2SGustavo Padovan nskb = skb_clone(skb, GFP_KERNEL); 28370a708f8fSGustavo F. Padovan if (!nskb) 28380a708f8fSGustavo F. Padovan continue; 283980b98027SGustavo Padovan if (chan->ops->recv(chan, nskb)) 28400a708f8fSGustavo F. Padovan kfree_skb(nskb); 28410a708f8fSGustavo F. Padovan } 28423d57dc68SGustavo F. Padovan 28433df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 28440a708f8fSGustavo F. Padovan } 28450a708f8fSGustavo F. Padovan 28460a708f8fSGustavo F. Padovan /* ---- L2CAP signalling commands ---- */ 2847b4400672SAndrei Emeltchenko static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn, u8 code, 2848b4400672SAndrei Emeltchenko u8 ident, u16 dlen, void *data) 28490a708f8fSGustavo F. Padovan { 28500a708f8fSGustavo F. Padovan struct sk_buff *skb, **frag; 28510a708f8fSGustavo F. Padovan struct l2cap_cmd_hdr *cmd; 28520a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 28530a708f8fSGustavo F. Padovan int len, count; 28540a708f8fSGustavo F. Padovan 2855b4400672SAndrei Emeltchenko BT_DBG("conn %p, code 0x%2.2x, ident 0x%2.2x, len %u", 28560a708f8fSGustavo F. Padovan conn, code, ident, dlen); 28570a708f8fSGustavo F. Padovan 2858300b962eSAnderson Lizardo if (conn->mtu < L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE) 2859300b962eSAnderson Lizardo return NULL; 2860300b962eSAnderson Lizardo 28610a708f8fSGustavo F. Padovan len = L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE + dlen; 28620a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 28630a708f8fSGustavo F. Padovan 28648bcde1f2SGustavo Padovan skb = bt_skb_alloc(count, GFP_KERNEL); 28650a708f8fSGustavo F. Padovan if (!skb) 28660a708f8fSGustavo F. Padovan return NULL; 28670a708f8fSGustavo F. Padovan 28680a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 28690a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(L2CAP_CMD_HDR_SIZE + dlen); 28703300d9a9SClaudio Takahasi 28713300d9a9SClaudio Takahasi if (conn->hcon->type == LE_LINK) 2872ac73498cSAndrei Emeltchenko lh->cid = __constant_cpu_to_le16(L2CAP_CID_LE_SIGNALING); 28733300d9a9SClaudio Takahasi else 2874ac73498cSAndrei Emeltchenko lh->cid = __constant_cpu_to_le16(L2CAP_CID_SIGNALING); 28750a708f8fSGustavo F. Padovan 28760a708f8fSGustavo F. Padovan cmd = (struct l2cap_cmd_hdr *) skb_put(skb, L2CAP_CMD_HDR_SIZE); 28770a708f8fSGustavo F. Padovan cmd->code = code; 28780a708f8fSGustavo F. Padovan cmd->ident = ident; 28790a708f8fSGustavo F. Padovan cmd->len = cpu_to_le16(dlen); 28800a708f8fSGustavo F. Padovan 28810a708f8fSGustavo F. Padovan if (dlen) { 28820a708f8fSGustavo F. Padovan count -= L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE; 28830a708f8fSGustavo F. Padovan memcpy(skb_put(skb, count), data, count); 28840a708f8fSGustavo F. Padovan data += count; 28850a708f8fSGustavo F. Padovan } 28860a708f8fSGustavo F. Padovan 28870a708f8fSGustavo F. Padovan len -= skb->len; 28880a708f8fSGustavo F. Padovan 28890a708f8fSGustavo F. Padovan /* Continuation fragments (no L2CAP header) */ 28900a708f8fSGustavo F. Padovan frag = &skb_shinfo(skb)->frag_list; 28910a708f8fSGustavo F. Padovan while (len) { 28920a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 28930a708f8fSGustavo F. Padovan 28948bcde1f2SGustavo Padovan *frag = bt_skb_alloc(count, GFP_KERNEL); 28950a708f8fSGustavo F. Padovan if (!*frag) 28960a708f8fSGustavo F. Padovan goto fail; 28970a708f8fSGustavo F. Padovan 28980a708f8fSGustavo F. Padovan memcpy(skb_put(*frag, count), data, count); 28990a708f8fSGustavo F. Padovan 29000a708f8fSGustavo F. Padovan len -= count; 29010a708f8fSGustavo F. Padovan data += count; 29020a708f8fSGustavo F. Padovan 29030a708f8fSGustavo F. Padovan frag = &(*frag)->next; 29040a708f8fSGustavo F. Padovan } 29050a708f8fSGustavo F. Padovan 29060a708f8fSGustavo F. Padovan return skb; 29070a708f8fSGustavo F. Padovan 29080a708f8fSGustavo F. Padovan fail: 29090a708f8fSGustavo F. Padovan kfree_skb(skb); 29100a708f8fSGustavo F. Padovan return NULL; 29110a708f8fSGustavo F. Padovan } 29120a708f8fSGustavo F. Padovan 29132d792818SGustavo Padovan static inline int l2cap_get_conf_opt(void **ptr, int *type, int *olen, 29142d792818SGustavo Padovan unsigned long *val) 29150a708f8fSGustavo F. Padovan { 29160a708f8fSGustavo F. Padovan struct l2cap_conf_opt *opt = *ptr; 29170a708f8fSGustavo F. Padovan int len; 29180a708f8fSGustavo F. Padovan 29190a708f8fSGustavo F. Padovan len = L2CAP_CONF_OPT_SIZE + opt->len; 29200a708f8fSGustavo F. Padovan *ptr += len; 29210a708f8fSGustavo F. Padovan 29220a708f8fSGustavo F. Padovan *type = opt->type; 29230a708f8fSGustavo F. Padovan *olen = opt->len; 29240a708f8fSGustavo F. Padovan 29250a708f8fSGustavo F. Padovan switch (opt->len) { 29260a708f8fSGustavo F. Padovan case 1: 29270a708f8fSGustavo F. Padovan *val = *((u8 *) opt->val); 29280a708f8fSGustavo F. Padovan break; 29290a708f8fSGustavo F. Padovan 29300a708f8fSGustavo F. Padovan case 2: 29310a708f8fSGustavo F. Padovan *val = get_unaligned_le16(opt->val); 29320a708f8fSGustavo F. Padovan break; 29330a708f8fSGustavo F. Padovan 29340a708f8fSGustavo F. Padovan case 4: 29350a708f8fSGustavo F. Padovan *val = get_unaligned_le32(opt->val); 29360a708f8fSGustavo F. Padovan break; 29370a708f8fSGustavo F. Padovan 29380a708f8fSGustavo F. Padovan default: 29390a708f8fSGustavo F. Padovan *val = (unsigned long) opt->val; 29400a708f8fSGustavo F. Padovan break; 29410a708f8fSGustavo F. Padovan } 29420a708f8fSGustavo F. Padovan 2943b4400672SAndrei Emeltchenko BT_DBG("type 0x%2.2x len %u val 0x%lx", *type, opt->len, *val); 29440a708f8fSGustavo F. Padovan return len; 29450a708f8fSGustavo F. Padovan } 29460a708f8fSGustavo F. Padovan 29470a708f8fSGustavo F. Padovan static void l2cap_add_conf_opt(void **ptr, u8 type, u8 len, unsigned long val) 29480a708f8fSGustavo F. Padovan { 29490a708f8fSGustavo F. Padovan struct l2cap_conf_opt *opt = *ptr; 29500a708f8fSGustavo F. Padovan 2951b4400672SAndrei Emeltchenko BT_DBG("type 0x%2.2x len %u val 0x%lx", type, len, val); 29520a708f8fSGustavo F. Padovan 29530a708f8fSGustavo F. Padovan opt->type = type; 29540a708f8fSGustavo F. Padovan opt->len = len; 29550a708f8fSGustavo F. Padovan 29560a708f8fSGustavo F. Padovan switch (len) { 29570a708f8fSGustavo F. Padovan case 1: 29580a708f8fSGustavo F. Padovan *((u8 *) opt->val) = val; 29590a708f8fSGustavo F. Padovan break; 29600a708f8fSGustavo F. Padovan 29610a708f8fSGustavo F. Padovan case 2: 29620a708f8fSGustavo F. Padovan put_unaligned_le16(val, opt->val); 29630a708f8fSGustavo F. Padovan break; 29640a708f8fSGustavo F. Padovan 29650a708f8fSGustavo F. Padovan case 4: 29660a708f8fSGustavo F. Padovan put_unaligned_le32(val, opt->val); 29670a708f8fSGustavo F. Padovan break; 29680a708f8fSGustavo F. Padovan 29690a708f8fSGustavo F. Padovan default: 29700a708f8fSGustavo F. Padovan memcpy(opt->val, (void *) val, len); 29710a708f8fSGustavo F. Padovan break; 29720a708f8fSGustavo F. Padovan } 29730a708f8fSGustavo F. Padovan 29740a708f8fSGustavo F. Padovan *ptr += L2CAP_CONF_OPT_SIZE + len; 29750a708f8fSGustavo F. Padovan } 29760a708f8fSGustavo F. Padovan 2977f89cef09SAndrei Emeltchenko static void l2cap_add_opt_efs(void **ptr, struct l2cap_chan *chan) 2978f89cef09SAndrei Emeltchenko { 2979f89cef09SAndrei Emeltchenko struct l2cap_conf_efs efs; 2980f89cef09SAndrei Emeltchenko 2981f89cef09SAndrei Emeltchenko switch (chan->mode) { 2982f89cef09SAndrei Emeltchenko case L2CAP_MODE_ERTM: 2983f89cef09SAndrei Emeltchenko efs.id = chan->local_id; 2984f89cef09SAndrei Emeltchenko efs.stype = chan->local_stype; 2985f89cef09SAndrei Emeltchenko efs.msdu = cpu_to_le16(chan->local_msdu); 2986f89cef09SAndrei Emeltchenko efs.sdu_itime = cpu_to_le32(chan->local_sdu_itime); 2987ac73498cSAndrei Emeltchenko efs.acc_lat = __constant_cpu_to_le32(L2CAP_DEFAULT_ACC_LAT); 29888936fa6dSAndrei Emeltchenko efs.flush_to = __constant_cpu_to_le32(L2CAP_EFS_DEFAULT_FLUSH_TO); 2989f89cef09SAndrei Emeltchenko break; 2990f89cef09SAndrei Emeltchenko 2991f89cef09SAndrei Emeltchenko case L2CAP_MODE_STREAMING: 2992f89cef09SAndrei Emeltchenko efs.id = 1; 2993f89cef09SAndrei Emeltchenko efs.stype = L2CAP_SERV_BESTEFFORT; 2994f89cef09SAndrei Emeltchenko efs.msdu = cpu_to_le16(chan->local_msdu); 2995f89cef09SAndrei Emeltchenko efs.sdu_itime = cpu_to_le32(chan->local_sdu_itime); 2996f89cef09SAndrei Emeltchenko efs.acc_lat = 0; 2997f89cef09SAndrei Emeltchenko efs.flush_to = 0; 2998f89cef09SAndrei Emeltchenko break; 2999f89cef09SAndrei Emeltchenko 3000f89cef09SAndrei Emeltchenko default: 3001f89cef09SAndrei Emeltchenko return; 3002f89cef09SAndrei Emeltchenko } 3003f89cef09SAndrei Emeltchenko 3004f89cef09SAndrei Emeltchenko l2cap_add_conf_opt(ptr, L2CAP_CONF_EFS, sizeof(efs), 3005f89cef09SAndrei Emeltchenko (unsigned long) &efs); 3006f89cef09SAndrei Emeltchenko } 3007f89cef09SAndrei Emeltchenko 3008721c4181SGustavo F. Padovan static void l2cap_ack_timeout(struct work_struct *work) 30090a708f8fSGustavo F. Padovan { 3010721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 3011721c4181SGustavo F. Padovan ack_timer.work); 30120362520bSMat Martineau u16 frames_to_ack; 30130a708f8fSGustavo F. Padovan 30142fb9b3d4SGustavo F. Padovan BT_DBG("chan %p", chan); 30152fb9b3d4SGustavo F. Padovan 30166be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 30176be36555SAndrei Emeltchenko 30180362520bSMat Martineau frames_to_ack = __seq_offset(chan, chan->buffer_seq, 30190362520bSMat Martineau chan->last_acked_seq); 30200362520bSMat Martineau 30210362520bSMat Martineau if (frames_to_ack) 30220362520bSMat Martineau l2cap_send_rr_or_rnr(chan, 0); 30236be36555SAndrei Emeltchenko 30246be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 302509bfb2eeSSzymon Janc l2cap_chan_put(chan); 30260a708f8fSGustavo F. Padovan } 30270a708f8fSGustavo F. Padovan 3028466f8004SAndrei Emeltchenko int l2cap_ertm_init(struct l2cap_chan *chan) 30290a708f8fSGustavo F. Padovan { 30303c588192SMat Martineau int err; 30313c588192SMat Martineau 3032105bdf9eSMat Martineau chan->next_tx_seq = 0; 3033105bdf9eSMat Martineau chan->expected_tx_seq = 0; 303442e5c802SGustavo F. Padovan chan->expected_ack_seq = 0; 30356a026610SGustavo F. Padovan chan->unacked_frames = 0; 303642e5c802SGustavo F. Padovan chan->buffer_seq = 0; 30376a026610SGustavo F. Padovan chan->frames_sent = 0; 3038105bdf9eSMat Martineau chan->last_acked_seq = 0; 3039105bdf9eSMat Martineau chan->sdu = NULL; 3040105bdf9eSMat Martineau chan->sdu_last_frag = NULL; 3041105bdf9eSMat Martineau chan->sdu_len = 0; 3042105bdf9eSMat Martineau 3043d34c34fbSMat Martineau skb_queue_head_init(&chan->tx_q); 3044d34c34fbSMat Martineau 30456ed971caSMarcel Holtmann chan->local_amp_id = AMP_ID_BREDR; 30466ed971caSMarcel Holtmann chan->move_id = AMP_ID_BREDR; 304708333283SMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 304808333283SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 304908333283SMat Martineau 3050105bdf9eSMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 3051105bdf9eSMat Martineau return 0; 3052105bdf9eSMat Martineau 3053105bdf9eSMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 3054105bdf9eSMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 30550a708f8fSGustavo F. Padovan 3056721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->retrans_timer, l2cap_retrans_timeout); 3057721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->monitor_timer, l2cap_monitor_timeout); 3058721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->ack_timer, l2cap_ack_timeout); 30590a708f8fSGustavo F. Padovan 3060f1c6775bSGustavo F. Padovan skb_queue_head_init(&chan->srej_q); 30610a708f8fSGustavo F. Padovan 30623c588192SMat Martineau err = l2cap_seq_list_init(&chan->srej_list, chan->tx_win); 30633c588192SMat Martineau if (err < 0) 30643c588192SMat Martineau return err; 30653c588192SMat Martineau 30669dc9affcSMat Martineau err = l2cap_seq_list_init(&chan->retrans_list, chan->remote_tx_win); 30679dc9affcSMat Martineau if (err < 0) 30689dc9affcSMat Martineau l2cap_seq_list_free(&chan->srej_list); 30699dc9affcSMat Martineau 30709dc9affcSMat Martineau return err; 30710a708f8fSGustavo F. Padovan } 30720a708f8fSGustavo F. Padovan 30730a708f8fSGustavo F. Padovan static inline __u8 l2cap_select_mode(__u8 mode, __u16 remote_feat_mask) 30740a708f8fSGustavo F. Padovan { 30750a708f8fSGustavo F. Padovan switch (mode) { 30760a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 30770a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 30780a708f8fSGustavo F. Padovan if (l2cap_mode_supported(mode, remote_feat_mask)) 30790a708f8fSGustavo F. Padovan return mode; 30800a708f8fSGustavo F. Padovan /* fall through */ 30810a708f8fSGustavo F. Padovan default: 30820a708f8fSGustavo F. Padovan return L2CAP_MODE_BASIC; 30830a708f8fSGustavo F. Padovan } 30840a708f8fSGustavo F. Padovan } 30850a708f8fSGustavo F. Padovan 3086848566b3SMarcel Holtmann static inline bool __l2cap_ews_supported(struct l2cap_conn *conn) 30876327eb98SAndrei Emeltchenko { 3088848566b3SMarcel Holtmann return conn->hs_enabled && conn->feat_mask & L2CAP_FEAT_EXT_WINDOW; 30896327eb98SAndrei Emeltchenko } 30906327eb98SAndrei Emeltchenko 3091848566b3SMarcel Holtmann static inline bool __l2cap_efs_supported(struct l2cap_conn *conn) 3092f89cef09SAndrei Emeltchenko { 3093848566b3SMarcel Holtmann return conn->hs_enabled && conn->feat_mask & L2CAP_FEAT_EXT_FLOW; 3094f89cef09SAndrei Emeltchenko } 3095f89cef09SAndrei Emeltchenko 309636c86c85SMat Martineau static void __l2cap_set_ertm_timeouts(struct l2cap_chan *chan, 309736c86c85SMat Martineau struct l2cap_conf_rfc *rfc) 309836c86c85SMat Martineau { 30996ed971caSMarcel Holtmann if (chan->local_amp_id != AMP_ID_BREDR && chan->hs_hcon) { 310036c86c85SMat Martineau u64 ertm_to = chan->hs_hcon->hdev->amp_be_flush_to; 310136c86c85SMat Martineau 310236c86c85SMat Martineau /* Class 1 devices have must have ERTM timeouts 310336c86c85SMat Martineau * exceeding the Link Supervision Timeout. The 310436c86c85SMat Martineau * default Link Supervision Timeout for AMP 310536c86c85SMat Martineau * controllers is 10 seconds. 310636c86c85SMat Martineau * 310736c86c85SMat Martineau * Class 1 devices use 0xffffffff for their 310836c86c85SMat Martineau * best-effort flush timeout, so the clamping logic 310936c86c85SMat Martineau * will result in a timeout that meets the above 311036c86c85SMat Martineau * requirement. ERTM timeouts are 16-bit values, so 311136c86c85SMat Martineau * the maximum timeout is 65.535 seconds. 311236c86c85SMat Martineau */ 311336c86c85SMat Martineau 311436c86c85SMat Martineau /* Convert timeout to milliseconds and round */ 311536c86c85SMat Martineau ertm_to = DIV_ROUND_UP_ULL(ertm_to, 1000); 311636c86c85SMat Martineau 311736c86c85SMat Martineau /* This is the recommended formula for class 2 devices 311836c86c85SMat Martineau * that start ERTM timers when packets are sent to the 311936c86c85SMat Martineau * controller. 312036c86c85SMat Martineau */ 312136c86c85SMat Martineau ertm_to = 3 * ertm_to + 500; 312236c86c85SMat Martineau 312336c86c85SMat Martineau if (ertm_to > 0xffff) 312436c86c85SMat Martineau ertm_to = 0xffff; 312536c86c85SMat Martineau 312636c86c85SMat Martineau rfc->retrans_timeout = cpu_to_le16((u16) ertm_to); 312736c86c85SMat Martineau rfc->monitor_timeout = rfc->retrans_timeout; 312836c86c85SMat Martineau } else { 312936c86c85SMat Martineau rfc->retrans_timeout = __constant_cpu_to_le16(L2CAP_DEFAULT_RETRANS_TO); 313036c86c85SMat Martineau rfc->monitor_timeout = __constant_cpu_to_le16(L2CAP_DEFAULT_MONITOR_TO); 313136c86c85SMat Martineau } 313236c86c85SMat Martineau } 313336c86c85SMat Martineau 31346327eb98SAndrei Emeltchenko static inline void l2cap_txwin_setup(struct l2cap_chan *chan) 31356327eb98SAndrei Emeltchenko { 31366327eb98SAndrei Emeltchenko if (chan->tx_win > L2CAP_DEFAULT_TX_WINDOW && 3137848566b3SMarcel Holtmann __l2cap_ews_supported(chan->conn)) { 31386327eb98SAndrei Emeltchenko /* use extended control field */ 31396327eb98SAndrei Emeltchenko set_bit(FLAG_EXT_CTRL, &chan->flags); 3140836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_EXT_WINDOW; 3141836be934SAndrei Emeltchenko } else { 31426327eb98SAndrei Emeltchenko chan->tx_win = min_t(u16, chan->tx_win, 31436327eb98SAndrei Emeltchenko L2CAP_DEFAULT_TX_WINDOW); 3144836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_TX_WINDOW; 3145836be934SAndrei Emeltchenko } 3146c20f8e35SMat Martineau chan->ack_win = chan->tx_win; 31476327eb98SAndrei Emeltchenko } 31486327eb98SAndrei Emeltchenko 3149710f9b0aSGustavo F. Padovan static int l2cap_build_conf_req(struct l2cap_chan *chan, void *data) 31500a708f8fSGustavo F. Padovan { 31510a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = data; 31520c1bc5c6SGustavo F. Padovan struct l2cap_conf_rfc rfc = { .mode = chan->mode }; 31530a708f8fSGustavo F. Padovan void *ptr = req->data; 3154c8f79162SAndrei Emeltchenko u16 size; 31550a708f8fSGustavo F. Padovan 315649208c9cSGustavo F. Padovan BT_DBG("chan %p", chan); 31570a708f8fSGustavo F. Padovan 315873ffa904SGustavo F. Padovan if (chan->num_conf_req || chan->num_conf_rsp) 31590a708f8fSGustavo F. Padovan goto done; 31600a708f8fSGustavo F. Padovan 31610c1bc5c6SGustavo F. Padovan switch (chan->mode) { 31620a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 31630a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 3164c1360a1cSGustavo F. Padovan if (test_bit(CONF_STATE2_DEVICE, &chan->conf_state)) 31650a708f8fSGustavo F. Padovan break; 31660a708f8fSGustavo F. Padovan 3167848566b3SMarcel Holtmann if (__l2cap_efs_supported(chan->conn)) 3168f89cef09SAndrei Emeltchenko set_bit(FLAG_EFS_ENABLE, &chan->flags); 3169f89cef09SAndrei Emeltchenko 31700a708f8fSGustavo F. Padovan /* fall through */ 31710a708f8fSGustavo F. Padovan default: 31728c1d787bSGustavo F. Padovan chan->mode = l2cap_select_mode(rfc.mode, chan->conn->feat_mask); 31730a708f8fSGustavo F. Padovan break; 31740a708f8fSGustavo F. Padovan } 31750a708f8fSGustavo F. Padovan 31760a708f8fSGustavo F. Padovan done: 31770c1bc5c6SGustavo F. Padovan if (chan->imtu != L2CAP_DEFAULT_MTU) 31780c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->imtu); 31790a708f8fSGustavo F. Padovan 31800c1bc5c6SGustavo F. Padovan switch (chan->mode) { 31810a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 31828c1d787bSGustavo F. Padovan if (!(chan->conn->feat_mask & L2CAP_FEAT_ERTM) && 31838c1d787bSGustavo F. Padovan !(chan->conn->feat_mask & L2CAP_FEAT_STREAMING)) 31840a708f8fSGustavo F. Padovan break; 31850a708f8fSGustavo F. Padovan 31860a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_BASIC; 31870a708f8fSGustavo F. Padovan rfc.txwin_size = 0; 31880a708f8fSGustavo F. Padovan rfc.max_transmit = 0; 31890a708f8fSGustavo F. Padovan rfc.retrans_timeout = 0; 31900a708f8fSGustavo F. Padovan rfc.monitor_timeout = 0; 31910a708f8fSGustavo F. Padovan rfc.max_pdu_size = 0; 31920a708f8fSGustavo F. Padovan 31930a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 31940a708f8fSGustavo F. Padovan (unsigned long) &rfc); 31950a708f8fSGustavo F. Padovan break; 31960a708f8fSGustavo F. Padovan 31970a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 31980a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_ERTM; 319947d1ec61SGustavo F. Padovan rfc.max_transmit = chan->max_tx; 320036c86c85SMat Martineau 320136c86c85SMat Martineau __l2cap_set_ertm_timeouts(chan, &rfc); 3202c8f79162SAndrei Emeltchenko 3203c8f79162SAndrei Emeltchenko size = min_t(u16, L2CAP_DEFAULT_MAX_PDU_SIZE, chan->conn->mtu - 32042d792818SGustavo Padovan L2CAP_EXT_HDR_SIZE - L2CAP_SDULEN_SIZE - 3205c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 3206c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 32070a708f8fSGustavo F. Padovan 32086327eb98SAndrei Emeltchenko l2cap_txwin_setup(chan); 32096327eb98SAndrei Emeltchenko 32106327eb98SAndrei Emeltchenko rfc.txwin_size = min_t(u16, chan->tx_win, 32116327eb98SAndrei Emeltchenko L2CAP_DEFAULT_TX_WINDOW); 32120a708f8fSGustavo F. Padovan 32130a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 32140a708f8fSGustavo F. Padovan (unsigned long) &rfc); 32150a708f8fSGustavo F. Padovan 3216f89cef09SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) 3217f89cef09SAndrei Emeltchenko l2cap_add_opt_efs(&ptr, chan); 3218f89cef09SAndrei Emeltchenko 32196327eb98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 32206327eb98SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EWS, 2, 32216327eb98SAndrei Emeltchenko chan->tx_win); 322260918918SAndrei Emeltchenko 322360918918SAndrei Emeltchenko if (chan->conn->feat_mask & L2CAP_FEAT_FCS) 322460918918SAndrei Emeltchenko if (chan->fcs == L2CAP_FCS_NONE || 3225f2592d3eSAndrei Emeltchenko test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) { 322660918918SAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 322760918918SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_FCS, 1, 322860918918SAndrei Emeltchenko chan->fcs); 322960918918SAndrei Emeltchenko } 32300a708f8fSGustavo F. Padovan break; 32310a708f8fSGustavo F. Padovan 32320a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 3233273759e2SMat Martineau l2cap_txwin_setup(chan); 32340a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_STREAMING; 32350a708f8fSGustavo F. Padovan rfc.txwin_size = 0; 32360a708f8fSGustavo F. Padovan rfc.max_transmit = 0; 32370a708f8fSGustavo F. Padovan rfc.retrans_timeout = 0; 32380a708f8fSGustavo F. Padovan rfc.monitor_timeout = 0; 3239c8f79162SAndrei Emeltchenko 3240c8f79162SAndrei Emeltchenko size = min_t(u16, L2CAP_DEFAULT_MAX_PDU_SIZE, chan->conn->mtu - 32412d792818SGustavo Padovan L2CAP_EXT_HDR_SIZE - L2CAP_SDULEN_SIZE - 3242c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 3243c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 32440a708f8fSGustavo F. Padovan 32450a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 32460a708f8fSGustavo F. Padovan (unsigned long) &rfc); 32470a708f8fSGustavo F. Padovan 3248f89cef09SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) 3249f89cef09SAndrei Emeltchenko l2cap_add_opt_efs(&ptr, chan); 3250f89cef09SAndrei Emeltchenko 325160918918SAndrei Emeltchenko if (chan->conn->feat_mask & L2CAP_FEAT_FCS) 325247d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_NONE || 3253f2592d3eSAndrei Emeltchenko test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) { 325447d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 325560918918SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_FCS, 1, 325660918918SAndrei Emeltchenko chan->fcs); 32570a708f8fSGustavo F. Padovan } 32580a708f8fSGustavo F. Padovan break; 32590a708f8fSGustavo F. Padovan } 32600a708f8fSGustavo F. Padovan 3261fe4128e0SGustavo F. Padovan req->dcid = cpu_to_le16(chan->dcid); 326259e54bd1SAndrei Emeltchenko req->flags = __constant_cpu_to_le16(0); 32630a708f8fSGustavo F. Padovan 32640a708f8fSGustavo F. Padovan return ptr - data; 32650a708f8fSGustavo F. Padovan } 32660a708f8fSGustavo F. Padovan 326773ffa904SGustavo F. Padovan static int l2cap_parse_conf_req(struct l2cap_chan *chan, void *data) 32680a708f8fSGustavo F. Padovan { 32690a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = data; 32700a708f8fSGustavo F. Padovan void *ptr = rsp->data; 327173ffa904SGustavo F. Padovan void *req = chan->conf_req; 327273ffa904SGustavo F. Padovan int len = chan->conf_len; 32730a708f8fSGustavo F. Padovan int type, hint, olen; 32740a708f8fSGustavo F. Padovan unsigned long val; 32750a708f8fSGustavo F. Padovan struct l2cap_conf_rfc rfc = { .mode = L2CAP_MODE_BASIC }; 327642dceae2SAndrei Emeltchenko struct l2cap_conf_efs efs; 327742dceae2SAndrei Emeltchenko u8 remote_efs = 0; 32780a708f8fSGustavo F. Padovan u16 mtu = L2CAP_DEFAULT_MTU; 32790a708f8fSGustavo F. Padovan u16 result = L2CAP_CONF_SUCCESS; 3280c8f79162SAndrei Emeltchenko u16 size; 32810a708f8fSGustavo F. Padovan 328273ffa904SGustavo F. Padovan BT_DBG("chan %p", chan); 32830a708f8fSGustavo F. Padovan 32840a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 32850a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&req, &type, &olen, &val); 32860a708f8fSGustavo F. Padovan 32870a708f8fSGustavo F. Padovan hint = type & L2CAP_CONF_HINT; 32880a708f8fSGustavo F. Padovan type &= L2CAP_CONF_MASK; 32890a708f8fSGustavo F. Padovan 32900a708f8fSGustavo F. Padovan switch (type) { 32910a708f8fSGustavo F. Padovan case L2CAP_CONF_MTU: 32920a708f8fSGustavo F. Padovan mtu = val; 32930a708f8fSGustavo F. Padovan break; 32940a708f8fSGustavo F. Padovan 32950a708f8fSGustavo F. Padovan case L2CAP_CONF_FLUSH_TO: 32960c1bc5c6SGustavo F. Padovan chan->flush_to = val; 32970a708f8fSGustavo F. Padovan break; 32980a708f8fSGustavo F. Padovan 32990a708f8fSGustavo F. Padovan case L2CAP_CONF_QOS: 33000a708f8fSGustavo F. Padovan break; 33010a708f8fSGustavo F. Padovan 33020a708f8fSGustavo F. Padovan case L2CAP_CONF_RFC: 33030a708f8fSGustavo F. Padovan if (olen == sizeof(rfc)) 33040a708f8fSGustavo F. Padovan memcpy(&rfc, (void *) val, olen); 33050a708f8fSGustavo F. Padovan break; 33060a708f8fSGustavo F. Padovan 33070a708f8fSGustavo F. Padovan case L2CAP_CONF_FCS: 33080a708f8fSGustavo F. Padovan if (val == L2CAP_FCS_NONE) 3309f2592d3eSAndrei Emeltchenko set_bit(CONF_RECV_NO_FCS, &chan->conf_state); 331042dceae2SAndrei Emeltchenko break; 33110a708f8fSGustavo F. Padovan 331242dceae2SAndrei Emeltchenko case L2CAP_CONF_EFS: 331342dceae2SAndrei Emeltchenko remote_efs = 1; 331442dceae2SAndrei Emeltchenko if (olen == sizeof(efs)) 331542dceae2SAndrei Emeltchenko memcpy(&efs, (void *) val, olen); 33160a708f8fSGustavo F. Padovan break; 33170a708f8fSGustavo F. Padovan 33186327eb98SAndrei Emeltchenko case L2CAP_CONF_EWS: 3319848566b3SMarcel Holtmann if (!chan->conn->hs_enabled) 33206327eb98SAndrei Emeltchenko return -ECONNREFUSED; 33216327eb98SAndrei Emeltchenko 33226327eb98SAndrei Emeltchenko set_bit(FLAG_EXT_CTRL, &chan->flags); 33236327eb98SAndrei Emeltchenko set_bit(CONF_EWS_RECV, &chan->conf_state); 3324836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_EXT_WINDOW; 33256327eb98SAndrei Emeltchenko chan->remote_tx_win = val; 33260a708f8fSGustavo F. Padovan break; 33270a708f8fSGustavo F. Padovan 33280a708f8fSGustavo F. Padovan default: 33290a708f8fSGustavo F. Padovan if (hint) 33300a708f8fSGustavo F. Padovan break; 33310a708f8fSGustavo F. Padovan 33320a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNKNOWN; 33330a708f8fSGustavo F. Padovan *((u8 *) ptr++) = type; 33340a708f8fSGustavo F. Padovan break; 33350a708f8fSGustavo F. Padovan } 33360a708f8fSGustavo F. Padovan } 33370a708f8fSGustavo F. Padovan 333873ffa904SGustavo F. Padovan if (chan->num_conf_rsp || chan->num_conf_req > 1) 33390a708f8fSGustavo F. Padovan goto done; 33400a708f8fSGustavo F. Padovan 33410c1bc5c6SGustavo F. Padovan switch (chan->mode) { 33420a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 33430a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 3344c1360a1cSGustavo F. Padovan if (!test_bit(CONF_STATE2_DEVICE, &chan->conf_state)) { 33450c1bc5c6SGustavo F. Padovan chan->mode = l2cap_select_mode(rfc.mode, 33468c1d787bSGustavo F. Padovan chan->conn->feat_mask); 33470a708f8fSGustavo F. Padovan break; 33480a708f8fSGustavo F. Padovan } 33490a708f8fSGustavo F. Padovan 335042dceae2SAndrei Emeltchenko if (remote_efs) { 3351848566b3SMarcel Holtmann if (__l2cap_efs_supported(chan->conn)) 335242dceae2SAndrei Emeltchenko set_bit(FLAG_EFS_ENABLE, &chan->flags); 335342dceae2SAndrei Emeltchenko else 335442dceae2SAndrei Emeltchenko return -ECONNREFUSED; 335542dceae2SAndrei Emeltchenko } 335642dceae2SAndrei Emeltchenko 33570c1bc5c6SGustavo F. Padovan if (chan->mode != rfc.mode) 33580a708f8fSGustavo F. Padovan return -ECONNREFUSED; 33590a708f8fSGustavo F. Padovan 33600a708f8fSGustavo F. Padovan break; 33610a708f8fSGustavo F. Padovan } 33620a708f8fSGustavo F. Padovan 33630a708f8fSGustavo F. Padovan done: 33640c1bc5c6SGustavo F. Padovan if (chan->mode != rfc.mode) { 33650a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 33660c1bc5c6SGustavo F. Padovan rfc.mode = chan->mode; 33670a708f8fSGustavo F. Padovan 336873ffa904SGustavo F. Padovan if (chan->num_conf_rsp == 1) 33690a708f8fSGustavo F. Padovan return -ECONNREFUSED; 33700a708f8fSGustavo F. Padovan 33712d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 33722d792818SGustavo Padovan (unsigned long) &rfc); 33730a708f8fSGustavo F. Padovan } 33740a708f8fSGustavo F. Padovan 33750a708f8fSGustavo F. Padovan if (result == L2CAP_CONF_SUCCESS) { 33760a708f8fSGustavo F. Padovan /* Configure output options and let the other side know 33770a708f8fSGustavo F. Padovan * which ones we don't like. */ 33780a708f8fSGustavo F. Padovan 33790a708f8fSGustavo F. Padovan if (mtu < L2CAP_DEFAULT_MIN_MTU) 33800a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 33810a708f8fSGustavo F. Padovan else { 33820c1bc5c6SGustavo F. Padovan chan->omtu = mtu; 3383c1360a1cSGustavo F. Padovan set_bit(CONF_MTU_DONE, &chan->conf_state); 33840a708f8fSGustavo F. Padovan } 33850c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->omtu); 33860a708f8fSGustavo F. Padovan 338742dceae2SAndrei Emeltchenko if (remote_efs) { 338842dceae2SAndrei Emeltchenko if (chan->local_stype != L2CAP_SERV_NOTRAFIC && 338942dceae2SAndrei Emeltchenko efs.stype != L2CAP_SERV_NOTRAFIC && 339042dceae2SAndrei Emeltchenko efs.stype != chan->local_stype) { 339142dceae2SAndrei Emeltchenko 339242dceae2SAndrei Emeltchenko result = L2CAP_CONF_UNACCEPT; 339342dceae2SAndrei Emeltchenko 339442dceae2SAndrei Emeltchenko if (chan->num_conf_req >= 1) 339542dceae2SAndrei Emeltchenko return -ECONNREFUSED; 339642dceae2SAndrei Emeltchenko 339742dceae2SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, 339842dceae2SAndrei Emeltchenko sizeof(efs), 339942dceae2SAndrei Emeltchenko (unsigned long) &efs); 34000e8b207eSAndrei Emeltchenko } else { 34013e6b3b95SGustavo F. Padovan /* Send PENDING Conf Rsp */ 34020e8b207eSAndrei Emeltchenko result = L2CAP_CONF_PENDING; 34030e8b207eSAndrei Emeltchenko set_bit(CONF_LOC_CONF_PEND, &chan->conf_state); 340442dceae2SAndrei Emeltchenko } 340542dceae2SAndrei Emeltchenko } 340642dceae2SAndrei Emeltchenko 34070a708f8fSGustavo F. Padovan switch (rfc.mode) { 34080a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 340947d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 3410c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 34110a708f8fSGustavo F. Padovan break; 34120a708f8fSGustavo F. Padovan 34130a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 34146327eb98SAndrei Emeltchenko if (!test_bit(CONF_EWS_RECV, &chan->conf_state)) 34152c03a7a4SGustavo F. Padovan chan->remote_tx_win = rfc.txwin_size; 34166327eb98SAndrei Emeltchenko else 34176327eb98SAndrei Emeltchenko rfc.txwin_size = L2CAP_DEFAULT_TX_WINDOW; 34186327eb98SAndrei Emeltchenko 34192c03a7a4SGustavo F. Padovan chan->remote_max_tx = rfc.max_transmit; 34200a708f8fSGustavo F. Padovan 3421c8f79162SAndrei Emeltchenko size = min_t(u16, le16_to_cpu(rfc.max_pdu_size), 34222d792818SGustavo Padovan chan->conn->mtu - L2CAP_EXT_HDR_SIZE - 34232d792818SGustavo Padovan L2CAP_SDULEN_SIZE - L2CAP_FCS_SIZE); 3424c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 3425c8f79162SAndrei Emeltchenko chan->remote_mps = size; 34260a708f8fSGustavo F. Padovan 342736c86c85SMat Martineau __l2cap_set_ertm_timeouts(chan, &rfc); 34280a708f8fSGustavo F. Padovan 3429c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 34300a708f8fSGustavo F. Padovan 34310a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 34320a708f8fSGustavo F. Padovan sizeof(rfc), (unsigned long) &rfc); 34330a708f8fSGustavo F. Padovan 343442dceae2SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) { 343542dceae2SAndrei Emeltchenko chan->remote_id = efs.id; 343642dceae2SAndrei Emeltchenko chan->remote_stype = efs.stype; 343742dceae2SAndrei Emeltchenko chan->remote_msdu = le16_to_cpu(efs.msdu); 343842dceae2SAndrei Emeltchenko chan->remote_flush_to = 343942dceae2SAndrei Emeltchenko le32_to_cpu(efs.flush_to); 344042dceae2SAndrei Emeltchenko chan->remote_acc_lat = 344142dceae2SAndrei Emeltchenko le32_to_cpu(efs.acc_lat); 344242dceae2SAndrei Emeltchenko chan->remote_sdu_itime = 344342dceae2SAndrei Emeltchenko le32_to_cpu(efs.sdu_itime); 344442dceae2SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, 34452d792818SGustavo Padovan sizeof(efs), 34462d792818SGustavo Padovan (unsigned long) &efs); 344742dceae2SAndrei Emeltchenko } 34480a708f8fSGustavo F. Padovan break; 34490a708f8fSGustavo F. Padovan 34500a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 3451c8f79162SAndrei Emeltchenko size = min_t(u16, le16_to_cpu(rfc.max_pdu_size), 34522d792818SGustavo Padovan chan->conn->mtu - L2CAP_EXT_HDR_SIZE - 34532d792818SGustavo Padovan L2CAP_SDULEN_SIZE - L2CAP_FCS_SIZE); 3454c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 3455c8f79162SAndrei Emeltchenko chan->remote_mps = size; 34560a708f8fSGustavo F. Padovan 3457c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 34580a708f8fSGustavo F. Padovan 34592d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 34602d792818SGustavo Padovan (unsigned long) &rfc); 34610a708f8fSGustavo F. Padovan 34620a708f8fSGustavo F. Padovan break; 34630a708f8fSGustavo F. Padovan 34640a708f8fSGustavo F. Padovan default: 34650a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 34660a708f8fSGustavo F. Padovan 34670a708f8fSGustavo F. Padovan memset(&rfc, 0, sizeof(rfc)); 34680c1bc5c6SGustavo F. Padovan rfc.mode = chan->mode; 34690a708f8fSGustavo F. Padovan } 34700a708f8fSGustavo F. Padovan 34710a708f8fSGustavo F. Padovan if (result == L2CAP_CONF_SUCCESS) 3472c1360a1cSGustavo F. Padovan set_bit(CONF_OUTPUT_DONE, &chan->conf_state); 34730a708f8fSGustavo F. Padovan } 3474fe4128e0SGustavo F. Padovan rsp->scid = cpu_to_le16(chan->dcid); 34750a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(result); 347659e54bd1SAndrei Emeltchenko rsp->flags = __constant_cpu_to_le16(0); 34770a708f8fSGustavo F. Padovan 34780a708f8fSGustavo F. Padovan return ptr - data; 34790a708f8fSGustavo F. Padovan } 34800a708f8fSGustavo F. Padovan 34812d792818SGustavo Padovan static int l2cap_parse_conf_rsp(struct l2cap_chan *chan, void *rsp, int len, 34822d792818SGustavo Padovan void *data, u16 *result) 34830a708f8fSGustavo F. Padovan { 34840a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = data; 34850a708f8fSGustavo F. Padovan void *ptr = req->data; 34860a708f8fSGustavo F. Padovan int type, olen; 34870a708f8fSGustavo F. Padovan unsigned long val; 348836e999a8SMat Martineau struct l2cap_conf_rfc rfc = { .mode = L2CAP_MODE_BASIC }; 348966af7aafSAndrei Emeltchenko struct l2cap_conf_efs efs; 34900a708f8fSGustavo F. Padovan 3491fe4128e0SGustavo F. Padovan BT_DBG("chan %p, rsp %p, len %d, req %p", chan, rsp, len, data); 34920a708f8fSGustavo F. Padovan 34930a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 34940a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&rsp, &type, &olen, &val); 34950a708f8fSGustavo F. Padovan 34960a708f8fSGustavo F. Padovan switch (type) { 34970a708f8fSGustavo F. Padovan case L2CAP_CONF_MTU: 34980a708f8fSGustavo F. Padovan if (val < L2CAP_DEFAULT_MIN_MTU) { 34990a708f8fSGustavo F. Padovan *result = L2CAP_CONF_UNACCEPT; 35000c1bc5c6SGustavo F. Padovan chan->imtu = L2CAP_DEFAULT_MIN_MTU; 35010a708f8fSGustavo F. Padovan } else 35020c1bc5c6SGustavo F. Padovan chan->imtu = val; 35030c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->imtu); 35040a708f8fSGustavo F. Padovan break; 35050a708f8fSGustavo F. Padovan 35060a708f8fSGustavo F. Padovan case L2CAP_CONF_FLUSH_TO: 35070c1bc5c6SGustavo F. Padovan chan->flush_to = val; 35080a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_FLUSH_TO, 35090c1bc5c6SGustavo F. Padovan 2, chan->flush_to); 35100a708f8fSGustavo F. Padovan break; 35110a708f8fSGustavo F. Padovan 35120a708f8fSGustavo F. Padovan case L2CAP_CONF_RFC: 35130a708f8fSGustavo F. Padovan if (olen == sizeof(rfc)) 35140a708f8fSGustavo F. Padovan memcpy(&rfc, (void *)val, olen); 35150a708f8fSGustavo F. Padovan 3516c1360a1cSGustavo F. Padovan if (test_bit(CONF_STATE2_DEVICE, &chan->conf_state) && 35170c1bc5c6SGustavo F. Padovan rfc.mode != chan->mode) 35180a708f8fSGustavo F. Padovan return -ECONNREFUSED; 35190a708f8fSGustavo F. Padovan 352047d1ec61SGustavo F. Padovan chan->fcs = 0; 35210a708f8fSGustavo F. Padovan 35220a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 35230a708f8fSGustavo F. Padovan sizeof(rfc), (unsigned long) &rfc); 35240a708f8fSGustavo F. Padovan break; 35256327eb98SAndrei Emeltchenko 35266327eb98SAndrei Emeltchenko case L2CAP_CONF_EWS: 3527c20f8e35SMat Martineau chan->ack_win = min_t(u16, val, chan->ack_win); 35283e6b3b95SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_EWS, 2, 35293e6b3b95SGustavo F. Padovan chan->tx_win); 35306327eb98SAndrei Emeltchenko break; 353166af7aafSAndrei Emeltchenko 353266af7aafSAndrei Emeltchenko case L2CAP_CONF_EFS: 353366af7aafSAndrei Emeltchenko if (olen == sizeof(efs)) 353466af7aafSAndrei Emeltchenko memcpy(&efs, (void *)val, olen); 353566af7aafSAndrei Emeltchenko 353666af7aafSAndrei Emeltchenko if (chan->local_stype != L2CAP_SERV_NOTRAFIC && 353766af7aafSAndrei Emeltchenko efs.stype != L2CAP_SERV_NOTRAFIC && 353866af7aafSAndrei Emeltchenko efs.stype != chan->local_stype) 353966af7aafSAndrei Emeltchenko return -ECONNREFUSED; 354066af7aafSAndrei Emeltchenko 35412d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, sizeof(efs), 35422d792818SGustavo Padovan (unsigned long) &efs); 354366af7aafSAndrei Emeltchenko break; 3544cbabee78SAndrei Emeltchenko 3545cbabee78SAndrei Emeltchenko case L2CAP_CONF_FCS: 3546cbabee78SAndrei Emeltchenko if (*result == L2CAP_CONF_PENDING) 3547cbabee78SAndrei Emeltchenko if (val == L2CAP_FCS_NONE) 3548f2592d3eSAndrei Emeltchenko set_bit(CONF_RECV_NO_FCS, 3549cbabee78SAndrei Emeltchenko &chan->conf_state); 3550cbabee78SAndrei Emeltchenko break; 35510a708f8fSGustavo F. Padovan } 35520a708f8fSGustavo F. Padovan } 35530a708f8fSGustavo F. Padovan 35540c1bc5c6SGustavo F. Padovan if (chan->mode == L2CAP_MODE_BASIC && chan->mode != rfc.mode) 35550a708f8fSGustavo F. Padovan return -ECONNREFUSED; 35560a708f8fSGustavo F. Padovan 35570c1bc5c6SGustavo F. Padovan chan->mode = rfc.mode; 35580a708f8fSGustavo F. Padovan 35590e8b207eSAndrei Emeltchenko if (*result == L2CAP_CONF_SUCCESS || *result == L2CAP_CONF_PENDING) { 35600a708f8fSGustavo F. Padovan switch (rfc.mode) { 35610a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 356247d1ec61SGustavo F. Padovan chan->retrans_timeout = le16_to_cpu(rfc.retrans_timeout); 356347d1ec61SGustavo F. Padovan chan->monitor_timeout = le16_to_cpu(rfc.monitor_timeout); 356447d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 3565c20f8e35SMat Martineau if (!test_bit(FLAG_EXT_CTRL, &chan->flags)) 3566c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, 3567c20f8e35SMat Martineau rfc.txwin_size); 356866af7aafSAndrei Emeltchenko 356966af7aafSAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) { 357066af7aafSAndrei Emeltchenko chan->local_msdu = le16_to_cpu(efs.msdu); 357166af7aafSAndrei Emeltchenko chan->local_sdu_itime = 357266af7aafSAndrei Emeltchenko le32_to_cpu(efs.sdu_itime); 357366af7aafSAndrei Emeltchenko chan->local_acc_lat = le32_to_cpu(efs.acc_lat); 357466af7aafSAndrei Emeltchenko chan->local_flush_to = 357566af7aafSAndrei Emeltchenko le32_to_cpu(efs.flush_to); 357666af7aafSAndrei Emeltchenko } 35770a708f8fSGustavo F. Padovan break; 357866af7aafSAndrei Emeltchenko 35790a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 358047d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 35810a708f8fSGustavo F. Padovan } 35820a708f8fSGustavo F. Padovan } 35830a708f8fSGustavo F. Padovan 3584fe4128e0SGustavo F. Padovan req->dcid = cpu_to_le16(chan->dcid); 358559e54bd1SAndrei Emeltchenko req->flags = __constant_cpu_to_le16(0); 35860a708f8fSGustavo F. Padovan 35870a708f8fSGustavo F. Padovan return ptr - data; 35880a708f8fSGustavo F. Padovan } 35890a708f8fSGustavo F. Padovan 35902d792818SGustavo Padovan static int l2cap_build_conf_rsp(struct l2cap_chan *chan, void *data, 35912d792818SGustavo Padovan u16 result, u16 flags) 35920a708f8fSGustavo F. Padovan { 35930a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = data; 35940a708f8fSGustavo F. Padovan void *ptr = rsp->data; 35950a708f8fSGustavo F. Padovan 3596fe4128e0SGustavo F. Padovan BT_DBG("chan %p", chan); 35970a708f8fSGustavo F. Padovan 3598fe4128e0SGustavo F. Padovan rsp->scid = cpu_to_le16(chan->dcid); 35990a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(result); 36000a708f8fSGustavo F. Padovan rsp->flags = cpu_to_le16(flags); 36010a708f8fSGustavo F. Padovan 36020a708f8fSGustavo F. Padovan return ptr - data; 36030a708f8fSGustavo F. Padovan } 36040a708f8fSGustavo F. Padovan 36058c1d787bSGustavo F. Padovan void __l2cap_connect_rsp_defer(struct l2cap_chan *chan) 3606710f9b0aSGustavo F. Padovan { 3607710f9b0aSGustavo F. Padovan struct l2cap_conn_rsp rsp; 36088c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 3609710f9b0aSGustavo F. Padovan u8 buf[128]; 3610439f34acSAndrei Emeltchenko u8 rsp_code; 3611710f9b0aSGustavo F. Padovan 3612fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 3613fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 3614ac73498cSAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CR_SUCCESS); 3615ac73498cSAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_NO_INFO); 3616439f34acSAndrei Emeltchenko 3617439f34acSAndrei Emeltchenko if (chan->hs_hcon) 3618439f34acSAndrei Emeltchenko rsp_code = L2CAP_CREATE_CHAN_RSP; 3619439f34acSAndrei Emeltchenko else 3620439f34acSAndrei Emeltchenko rsp_code = L2CAP_CONN_RSP; 3621439f34acSAndrei Emeltchenko 3622439f34acSAndrei Emeltchenko BT_DBG("chan %p rsp_code %u", chan, rsp_code); 3623439f34acSAndrei Emeltchenko 3624439f34acSAndrei Emeltchenko l2cap_send_cmd(conn, chan->ident, rsp_code, sizeof(rsp), &rsp); 3625710f9b0aSGustavo F. Padovan 3626c1360a1cSGustavo F. Padovan if (test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) 3627710f9b0aSGustavo F. Padovan return; 3628710f9b0aSGustavo F. Padovan 3629710f9b0aSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 3630710f9b0aSGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 3631710f9b0aSGustavo F. Padovan chan->num_conf_req++; 3632710f9b0aSGustavo F. Padovan } 3633710f9b0aSGustavo F. Padovan 363447d1ec61SGustavo F. Padovan static void l2cap_conf_rfc_get(struct l2cap_chan *chan, void *rsp, int len) 36350a708f8fSGustavo F. Padovan { 36360a708f8fSGustavo F. Padovan int type, olen; 36370a708f8fSGustavo F. Padovan unsigned long val; 3638c20f8e35SMat Martineau /* Use sane default values in case a misbehaving remote device 3639c20f8e35SMat Martineau * did not send an RFC or extended window size option. 3640c20f8e35SMat Martineau */ 3641c20f8e35SMat Martineau u16 txwin_ext = chan->ack_win; 3642c20f8e35SMat Martineau struct l2cap_conf_rfc rfc = { 3643c20f8e35SMat Martineau .mode = chan->mode, 3644c20f8e35SMat Martineau .retrans_timeout = __constant_cpu_to_le16(L2CAP_DEFAULT_RETRANS_TO), 3645c20f8e35SMat Martineau .monitor_timeout = __constant_cpu_to_le16(L2CAP_DEFAULT_MONITOR_TO), 3646c20f8e35SMat Martineau .max_pdu_size = cpu_to_le16(chan->imtu), 3647c20f8e35SMat Martineau .txwin_size = min_t(u16, chan->ack_win, L2CAP_DEFAULT_TX_WINDOW), 3648c20f8e35SMat Martineau }; 36490a708f8fSGustavo F. Padovan 365047d1ec61SGustavo F. Padovan BT_DBG("chan %p, rsp %p, len %d", chan, rsp, len); 36510a708f8fSGustavo F. Padovan 36520c1bc5c6SGustavo F. Padovan if ((chan->mode != L2CAP_MODE_ERTM) && (chan->mode != L2CAP_MODE_STREAMING)) 36530a708f8fSGustavo F. Padovan return; 36540a708f8fSGustavo F. Padovan 36550a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 36560a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&rsp, &type, &olen, &val); 36570a708f8fSGustavo F. Padovan 3658c20f8e35SMat Martineau switch (type) { 3659c20f8e35SMat Martineau case L2CAP_CONF_RFC: 3660c20f8e35SMat Martineau if (olen == sizeof(rfc)) 36610a708f8fSGustavo F. Padovan memcpy(&rfc, (void *)val, olen); 3662c20f8e35SMat Martineau break; 3663c20f8e35SMat Martineau case L2CAP_CONF_EWS: 3664c20f8e35SMat Martineau txwin_ext = val; 3665c20f8e35SMat Martineau break; 3666c20f8e35SMat Martineau } 36670a708f8fSGustavo F. Padovan } 36680a708f8fSGustavo F. Padovan 36690a708f8fSGustavo F. Padovan switch (rfc.mode) { 36700a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 367147d1ec61SGustavo F. Padovan chan->retrans_timeout = le16_to_cpu(rfc.retrans_timeout); 367247d1ec61SGustavo F. Padovan chan->monitor_timeout = le16_to_cpu(rfc.monitor_timeout); 367347d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 3674c20f8e35SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 3675c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, txwin_ext); 3676c20f8e35SMat Martineau else 3677c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, 3678c20f8e35SMat Martineau rfc.txwin_size); 36790a708f8fSGustavo F. Padovan break; 36800a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 368147d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 36820a708f8fSGustavo F. Padovan } 36830a708f8fSGustavo F. Padovan } 36840a708f8fSGustavo F. Padovan 36852d792818SGustavo Padovan static inline int l2cap_command_rej(struct l2cap_conn *conn, 3686cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 3687cb3b3152SJohan Hedberg u8 *data) 36880a708f8fSGustavo F. Padovan { 3689e2fd318eSIlia Kolomisnky struct l2cap_cmd_rej_unk *rej = (struct l2cap_cmd_rej_unk *) data; 36900a708f8fSGustavo F. Padovan 3691cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rej)) 3692cb3b3152SJohan Hedberg return -EPROTO; 3693cb3b3152SJohan Hedberg 3694e2fd318eSIlia Kolomisnky if (rej->reason != L2CAP_REJ_NOT_UNDERSTOOD) 36950a708f8fSGustavo F. Padovan return 0; 36960a708f8fSGustavo F. Padovan 36970a708f8fSGustavo F. Padovan if ((conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) && 36980a708f8fSGustavo F. Padovan cmd->ident == conn->info_ident) { 369917cd3f37SUlisses Furquim cancel_delayed_work(&conn->info_timer); 37000a708f8fSGustavo F. Padovan 37010a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 37020a708f8fSGustavo F. Padovan conn->info_ident = 0; 37030a708f8fSGustavo F. Padovan 37040a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 37050a708f8fSGustavo F. Padovan } 37060a708f8fSGustavo F. Padovan 37070a708f8fSGustavo F. Padovan return 0; 37080a708f8fSGustavo F. Padovan } 37090a708f8fSGustavo F. Padovan 37101700915fSMat Martineau static struct l2cap_chan *l2cap_connect(struct l2cap_conn *conn, 37111700915fSMat Martineau struct l2cap_cmd_hdr *cmd, 37124c89b6aaSMat Martineau u8 *data, u8 rsp_code, u8 amp_id) 37130a708f8fSGustavo F. Padovan { 37140a708f8fSGustavo F. Padovan struct l2cap_conn_req *req = (struct l2cap_conn_req *) data; 37150a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 371623691d75SGustavo F. Padovan struct l2cap_chan *chan = NULL, *pchan; 37170a708f8fSGustavo F. Padovan int result, status = L2CAP_CS_NO_INFO; 37180a708f8fSGustavo F. Padovan 37190a708f8fSGustavo F. Padovan u16 dcid = 0, scid = __le16_to_cpu(req->scid); 37200a708f8fSGustavo F. Padovan __le16 psm = req->psm; 37210a708f8fSGustavo F. Padovan 3722097db76cSAndrei Emeltchenko BT_DBG("psm 0x%2.2x scid 0x%4.4x", __le16_to_cpu(psm), scid); 37230a708f8fSGustavo F. Padovan 37240a708f8fSGustavo F. Padovan /* Check if we have socket listening on psm */ 37256f59b904SMarcel Holtmann pchan = l2cap_global_chan_by_psm(BT_LISTEN, psm, &conn->hcon->src, 3726bf20fd4eSJohan Hedberg &conn->hcon->dst, ACL_LINK); 372723691d75SGustavo F. Padovan if (!pchan) { 37280a708f8fSGustavo F. Padovan result = L2CAP_CR_BAD_PSM; 37290a708f8fSGustavo F. Padovan goto sendresp; 37300a708f8fSGustavo F. Padovan } 37310a708f8fSGustavo F. Padovan 37323df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 37338ffb9290SGustavo Padovan l2cap_chan_lock(pchan); 37340a708f8fSGustavo F. Padovan 37350a708f8fSGustavo F. Padovan /* Check if the ACL is secure enough (if not SDP) */ 37362983fd68SAndrei Emeltchenko if (psm != __constant_cpu_to_le16(L2CAP_PSM_SDP) && 37370a708f8fSGustavo F. Padovan !hci_conn_check_link_mode(conn->hcon)) { 37389f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_AUTH_FAILURE; 37390a708f8fSGustavo F. Padovan result = L2CAP_CR_SEC_BLOCK; 37400a708f8fSGustavo F. Padovan goto response; 37410a708f8fSGustavo F. Padovan } 37420a708f8fSGustavo F. Padovan 37430a708f8fSGustavo F. Padovan result = L2CAP_CR_NO_MEM; 37440a708f8fSGustavo F. Padovan 37452dfa1003SGustavo Padovan /* Check if we already have channel with that dcid */ 37462dfa1003SGustavo Padovan if (__l2cap_get_chan_by_dcid(conn, scid)) 37472dfa1003SGustavo Padovan goto response; 37482dfa1003SGustavo Padovan 374980b98027SGustavo Padovan chan = pchan->ops->new_connection(pchan); 375080808e43SGustavo F. Padovan if (!chan) 37510a708f8fSGustavo F. Padovan goto response; 37520a708f8fSGustavo F. Padovan 3753330b6c15SSyam Sidhardhan /* For certain devices (ex: HID mouse), support for authentication, 3754330b6c15SSyam Sidhardhan * pairing and bonding is optional. For such devices, inorder to avoid 3755330b6c15SSyam Sidhardhan * the ACL alive for too long after L2CAP disconnection, reset the ACL 3756330b6c15SSyam Sidhardhan * disc_timeout back to HCI_DISCONN_TIMEOUT during L2CAP connect. 3757330b6c15SSyam Sidhardhan */ 3758330b6c15SSyam Sidhardhan conn->hcon->disc_timeout = HCI_DISCONN_TIMEOUT; 3759330b6c15SSyam Sidhardhan 37607eafc59eSMarcel Holtmann bacpy(&chan->src, &conn->hcon->src); 37617eafc59eSMarcel Holtmann bacpy(&chan->dst, &conn->hcon->dst); 37624f1654e0SMarcel Holtmann chan->src_type = bdaddr_type(conn->hcon, conn->hcon->src_type); 37634f1654e0SMarcel Holtmann chan->dst_type = bdaddr_type(conn->hcon, conn->hcon->dst_type); 3764fe4128e0SGustavo F. Padovan chan->psm = psm; 3765fe4128e0SGustavo F. Padovan chan->dcid = scid; 37661700915fSMat Martineau chan->local_amp_id = amp_id; 37670a708f8fSGustavo F. Padovan 37686be36555SAndrei Emeltchenko __l2cap_chan_add(conn, chan); 376948454079SGustavo F. Padovan 3770fe4128e0SGustavo F. Padovan dcid = chan->scid; 37710a708f8fSGustavo F. Padovan 37728d836d71SGustavo Padovan __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 37730a708f8fSGustavo F. Padovan 3774fc7f8a7eSGustavo F. Padovan chan->ident = cmd->ident; 37750a708f8fSGustavo F. Padovan 37760a708f8fSGustavo F. Padovan if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) { 3777d45fc423SGustavo F. Padovan if (l2cap_chan_check_security(chan)) { 3778bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 3779f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 37800a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 37810a708f8fSGustavo F. Padovan status = L2CAP_CS_AUTHOR_PEND; 37822dc4e510SGustavo Padovan chan->ops->defer(chan); 37830a708f8fSGustavo F. Padovan } else { 37841700915fSMat Martineau /* Force pending result for AMP controllers. 37851700915fSMat Martineau * The connection will succeed after the 37861700915fSMat Martineau * physical link is up. 37871700915fSMat Martineau */ 37886ed971caSMarcel Holtmann if (amp_id == AMP_ID_BREDR) { 3789f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 37900a708f8fSGustavo F. Padovan result = L2CAP_CR_SUCCESS; 37916ed971caSMarcel Holtmann } else { 3792f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 37936ed971caSMarcel Holtmann result = L2CAP_CR_PEND; 37941700915fSMat Martineau } 37950a708f8fSGustavo F. Padovan status = L2CAP_CS_NO_INFO; 37960a708f8fSGustavo F. Padovan } 37970a708f8fSGustavo F. Padovan } else { 3798f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 37990a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 38000a708f8fSGustavo F. Padovan status = L2CAP_CS_AUTHEN_PEND; 38010a708f8fSGustavo F. Padovan } 38020a708f8fSGustavo F. Padovan } else { 3803f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38040a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 38050a708f8fSGustavo F. Padovan status = L2CAP_CS_NO_INFO; 38060a708f8fSGustavo F. Padovan } 38070a708f8fSGustavo F. Padovan 38080a708f8fSGustavo F. Padovan response: 38098ffb9290SGustavo Padovan l2cap_chan_unlock(pchan); 38103df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 38110a708f8fSGustavo F. Padovan 38120a708f8fSGustavo F. Padovan sendresp: 38130a708f8fSGustavo F. Padovan rsp.scid = cpu_to_le16(scid); 38140a708f8fSGustavo F. Padovan rsp.dcid = cpu_to_le16(dcid); 38150a708f8fSGustavo F. Padovan rsp.result = cpu_to_le16(result); 38160a708f8fSGustavo F. Padovan rsp.status = cpu_to_le16(status); 38174c89b6aaSMat Martineau l2cap_send_cmd(conn, cmd->ident, rsp_code, sizeof(rsp), &rsp); 38180a708f8fSGustavo F. Padovan 38190a708f8fSGustavo F. Padovan if (result == L2CAP_CR_PEND && status == L2CAP_CS_NO_INFO) { 38200a708f8fSGustavo F. Padovan struct l2cap_info_req info; 3821ac73498cSAndrei Emeltchenko info.type = __constant_cpu_to_le16(L2CAP_IT_FEAT_MASK); 38220a708f8fSGustavo F. Padovan 38230a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_SENT; 38240a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 38250a708f8fSGustavo F. Padovan 3826ba13ccd9SMarcel Holtmann schedule_delayed_work(&conn->info_timer, L2CAP_INFO_TIMEOUT); 38270a708f8fSGustavo F. Padovan 38282d792818SGustavo Padovan l2cap_send_cmd(conn, conn->info_ident, L2CAP_INFO_REQ, 38292d792818SGustavo Padovan sizeof(info), &info); 38300a708f8fSGustavo F. Padovan } 38310a708f8fSGustavo F. Padovan 3832c1360a1cSGustavo F. Padovan if (chan && !test_bit(CONF_REQ_SENT, &chan->conf_state) && 38330a708f8fSGustavo F. Padovan result == L2CAP_CR_SUCCESS) { 38340a708f8fSGustavo F. Padovan u8 buf[128]; 3835c1360a1cSGustavo F. Padovan set_bit(CONF_REQ_SENT, &chan->conf_state); 38360a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 383773ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 383873ffa904SGustavo F. Padovan chan->num_conf_req++; 38390a708f8fSGustavo F. Padovan } 38401700915fSMat Martineau 38411700915fSMat Martineau return chan; 38424c89b6aaSMat Martineau } 38430a708f8fSGustavo F. Padovan 38444c89b6aaSMat Martineau static int l2cap_connect_req(struct l2cap_conn *conn, 3845cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, u8 *data) 38464c89b6aaSMat Martineau { 38477b064edaSJaganath Kanakkassery struct hci_dev *hdev = conn->hcon->hdev; 38487b064edaSJaganath Kanakkassery struct hci_conn *hcon = conn->hcon; 38497b064edaSJaganath Kanakkassery 3850cb3b3152SJohan Hedberg if (cmd_len < sizeof(struct l2cap_conn_req)) 3851cb3b3152SJohan Hedberg return -EPROTO; 3852cb3b3152SJohan Hedberg 38537b064edaSJaganath Kanakkassery hci_dev_lock(hdev); 38547b064edaSJaganath Kanakkassery if (test_bit(HCI_MGMT, &hdev->dev_flags) && 38557b064edaSJaganath Kanakkassery !test_and_set_bit(HCI_CONN_MGMT_CONNECTED, &hcon->flags)) 38567b064edaSJaganath Kanakkassery mgmt_device_connected(hdev, &hcon->dst, hcon->type, 38577b064edaSJaganath Kanakkassery hcon->dst_type, 0, NULL, 0, 38587b064edaSJaganath Kanakkassery hcon->dev_class); 38597b064edaSJaganath Kanakkassery hci_dev_unlock(hdev); 38607b064edaSJaganath Kanakkassery 3861300229f9SGustavo Padovan l2cap_connect(conn, cmd, data, L2CAP_CONN_RSP, 0); 38620a708f8fSGustavo F. Padovan return 0; 38630a708f8fSGustavo F. Padovan } 38640a708f8fSGustavo F. Padovan 38655909cf30SMat Martineau static int l2cap_connect_create_rsp(struct l2cap_conn *conn, 3866cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 3867cb3b3152SJohan Hedberg u8 *data) 38680a708f8fSGustavo F. Padovan { 38690a708f8fSGustavo F. Padovan struct l2cap_conn_rsp *rsp = (struct l2cap_conn_rsp *) data; 38700a708f8fSGustavo F. Padovan u16 scid, dcid, result, status; 387148454079SGustavo F. Padovan struct l2cap_chan *chan; 38720a708f8fSGustavo F. Padovan u8 req[128]; 38733df91ea2SAndrei Emeltchenko int err; 38740a708f8fSGustavo F. Padovan 3875cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rsp)) 3876cb3b3152SJohan Hedberg return -EPROTO; 3877cb3b3152SJohan Hedberg 38780a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 38790a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(rsp->dcid); 38800a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 38810a708f8fSGustavo F. Padovan status = __le16_to_cpu(rsp->status); 38820a708f8fSGustavo F. Padovan 38831b009c98SAndrei Emeltchenko BT_DBG("dcid 0x%4.4x scid 0x%4.4x result 0x%2.2x status 0x%2.2x", 38841b009c98SAndrei Emeltchenko dcid, scid, result, status); 38850a708f8fSGustavo F. Padovan 38863df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 38873df91ea2SAndrei Emeltchenko 38880a708f8fSGustavo F. Padovan if (scid) { 38893df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, scid); 38903df91ea2SAndrei Emeltchenko if (!chan) { 389121870b52SJohan Hedberg err = -EBADSLT; 38923df91ea2SAndrei Emeltchenko goto unlock; 38933df91ea2SAndrei Emeltchenko } 38940a708f8fSGustavo F. Padovan } else { 38953df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_ident(conn, cmd->ident); 38963df91ea2SAndrei Emeltchenko if (!chan) { 389721870b52SJohan Hedberg err = -EBADSLT; 38983df91ea2SAndrei Emeltchenko goto unlock; 38993df91ea2SAndrei Emeltchenko } 39000a708f8fSGustavo F. Padovan } 39010a708f8fSGustavo F. Padovan 39023df91ea2SAndrei Emeltchenko err = 0; 39033df91ea2SAndrei Emeltchenko 39046be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 390548454079SGustavo F. Padovan 39060a708f8fSGustavo F. Padovan switch (result) { 39070a708f8fSGustavo F. Padovan case L2CAP_CR_SUCCESS: 390889bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONFIG); 3909fc7f8a7eSGustavo F. Padovan chan->ident = 0; 3910fe4128e0SGustavo F. Padovan chan->dcid = dcid; 3911c1360a1cSGustavo F. Padovan clear_bit(CONF_CONNECT_PEND, &chan->conf_state); 39120a708f8fSGustavo F. Padovan 3913c1360a1cSGustavo F. Padovan if (test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) 39140a708f8fSGustavo F. Padovan break; 39150a708f8fSGustavo F. Padovan 39160a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 391773ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, req), req); 391873ffa904SGustavo F. Padovan chan->num_conf_req++; 39190a708f8fSGustavo F. Padovan break; 39200a708f8fSGustavo F. Padovan 39210a708f8fSGustavo F. Padovan case L2CAP_CR_PEND: 3922c1360a1cSGustavo F. Padovan set_bit(CONF_CONNECT_PEND, &chan->conf_state); 39230a708f8fSGustavo F. Padovan break; 39240a708f8fSGustavo F. Padovan 39250a708f8fSGustavo F. Padovan default: 392648454079SGustavo F. Padovan l2cap_chan_del(chan, ECONNREFUSED); 39270a708f8fSGustavo F. Padovan break; 39280a708f8fSGustavo F. Padovan } 39290a708f8fSGustavo F. Padovan 39306be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 39313df91ea2SAndrei Emeltchenko 39323df91ea2SAndrei Emeltchenko unlock: 39333df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 39343df91ea2SAndrei Emeltchenko 39353df91ea2SAndrei Emeltchenko return err; 39360a708f8fSGustavo F. Padovan } 39370a708f8fSGustavo F. Padovan 393847d1ec61SGustavo F. Padovan static inline void set_default_fcs(struct l2cap_chan *chan) 39390a708f8fSGustavo F. Padovan { 39400a708f8fSGustavo F. Padovan /* FCS is enabled only in ERTM or streaming mode, if one or both 39410a708f8fSGustavo F. Padovan * sides request it. 39420a708f8fSGustavo F. Padovan */ 39430c1bc5c6SGustavo F. Padovan if (chan->mode != L2CAP_MODE_ERTM && chan->mode != L2CAP_MODE_STREAMING) 394447d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 3945f2592d3eSAndrei Emeltchenko else if (!test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) 394647d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_CRC16; 39470a708f8fSGustavo F. Padovan } 39480a708f8fSGustavo F. Padovan 394929d8a590SAndrei Emeltchenko static void l2cap_send_efs_conf_rsp(struct l2cap_chan *chan, void *data, 395029d8a590SAndrei Emeltchenko u8 ident, u16 flags) 395129d8a590SAndrei Emeltchenko { 395229d8a590SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 395329d8a590SAndrei Emeltchenko 395429d8a590SAndrei Emeltchenko BT_DBG("conn %p chan %p ident %d flags 0x%4.4x", conn, chan, ident, 395529d8a590SAndrei Emeltchenko flags); 395629d8a590SAndrei Emeltchenko 395729d8a590SAndrei Emeltchenko clear_bit(CONF_LOC_CONF_PEND, &chan->conf_state); 395829d8a590SAndrei Emeltchenko set_bit(CONF_OUTPUT_DONE, &chan->conf_state); 395929d8a590SAndrei Emeltchenko 396029d8a590SAndrei Emeltchenko l2cap_send_cmd(conn, ident, L2CAP_CONF_RSP, 396129d8a590SAndrei Emeltchenko l2cap_build_conf_rsp(chan, data, 396229d8a590SAndrei Emeltchenko L2CAP_CONF_SUCCESS, flags), data); 396329d8a590SAndrei Emeltchenko } 396429d8a590SAndrei Emeltchenko 3965662d652dSJohan Hedberg static void cmd_reject_invalid_cid(struct l2cap_conn *conn, u8 ident, 3966662d652dSJohan Hedberg u16 scid, u16 dcid) 3967662d652dSJohan Hedberg { 3968662d652dSJohan Hedberg struct l2cap_cmd_rej_cid rej; 3969662d652dSJohan Hedberg 3970662d652dSJohan Hedberg rej.reason = __constant_cpu_to_le16(L2CAP_REJ_INVALID_CID); 3971662d652dSJohan Hedberg rej.scid = __cpu_to_le16(scid); 3972662d652dSJohan Hedberg rej.dcid = __cpu_to_le16(dcid); 3973662d652dSJohan Hedberg 3974662d652dSJohan Hedberg l2cap_send_cmd(conn, ident, L2CAP_COMMAND_REJ, sizeof(rej), &rej); 3975662d652dSJohan Hedberg } 3976662d652dSJohan Hedberg 39772d792818SGustavo Padovan static inline int l2cap_config_req(struct l2cap_conn *conn, 39782d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, u16 cmd_len, 39792d792818SGustavo Padovan u8 *data) 39800a708f8fSGustavo F. Padovan { 39810a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = (struct l2cap_conf_req *) data; 39820a708f8fSGustavo F. Padovan u16 dcid, flags; 39830a708f8fSGustavo F. Padovan u8 rsp[64]; 398448454079SGustavo F. Padovan struct l2cap_chan *chan; 39853c588192SMat Martineau int len, err = 0; 39860a708f8fSGustavo F. Padovan 3987cb3b3152SJohan Hedberg if (cmd_len < sizeof(*req)) 3988cb3b3152SJohan Hedberg return -EPROTO; 3989cb3b3152SJohan Hedberg 39900a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(req->dcid); 39910a708f8fSGustavo F. Padovan flags = __le16_to_cpu(req->flags); 39920a708f8fSGustavo F. Padovan 39930a708f8fSGustavo F. Padovan BT_DBG("dcid 0x%4.4x flags 0x%2.2x", dcid, flags); 39940a708f8fSGustavo F. Padovan 3995baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, dcid); 3996662d652dSJohan Hedberg if (!chan) { 3997662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, dcid, 0); 3998662d652dSJohan Hedberg return 0; 3999662d652dSJohan Hedberg } 40000a708f8fSGustavo F. Padovan 4001033b1142SDavid S. Miller if (chan->state != BT_CONFIG && chan->state != BT_CONNECT2) { 4002662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, chan->scid, 4003662d652dSJohan Hedberg chan->dcid); 40040a708f8fSGustavo F. Padovan goto unlock; 40050a708f8fSGustavo F. Padovan } 40060a708f8fSGustavo F. Padovan 40070a708f8fSGustavo F. Padovan /* Reject if config buffer is too small. */ 40080a708f8fSGustavo F. Padovan len = cmd_len - sizeof(*req); 4009cb3b3152SJohan Hedberg if (chan->conf_len + len > sizeof(chan->conf_req)) { 40100a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 4011fe4128e0SGustavo F. Padovan l2cap_build_conf_rsp(chan, rsp, 40120a708f8fSGustavo F. Padovan L2CAP_CONF_REJECT, flags), rsp); 40130a708f8fSGustavo F. Padovan goto unlock; 40140a708f8fSGustavo F. Padovan } 40150a708f8fSGustavo F. Padovan 40160a708f8fSGustavo F. Padovan /* Store config. */ 401773ffa904SGustavo F. Padovan memcpy(chan->conf_req + chan->conf_len, req->data, len); 401873ffa904SGustavo F. Padovan chan->conf_len += len; 40190a708f8fSGustavo F. Padovan 402059e54bd1SAndrei Emeltchenko if (flags & L2CAP_CONF_FLAG_CONTINUATION) { 40210a708f8fSGustavo F. Padovan /* Incomplete config. Send empty response. */ 40220a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 4023fe4128e0SGustavo F. Padovan l2cap_build_conf_rsp(chan, rsp, 40245325e5bbSAndrei Emeltchenko L2CAP_CONF_SUCCESS, flags), rsp); 40250a708f8fSGustavo F. Padovan goto unlock; 40260a708f8fSGustavo F. Padovan } 40270a708f8fSGustavo F. Padovan 40280a708f8fSGustavo F. Padovan /* Complete config. */ 402973ffa904SGustavo F. Padovan len = l2cap_parse_conf_req(chan, rsp); 40300a708f8fSGustavo F. Padovan if (len < 0) { 40315e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 40320a708f8fSGustavo F. Padovan goto unlock; 40330a708f8fSGustavo F. Padovan } 40340a708f8fSGustavo F. Padovan 40351500109bSMat Martineau chan->ident = cmd->ident; 40360a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, len, rsp); 403773ffa904SGustavo F. Padovan chan->num_conf_rsp++; 40380a708f8fSGustavo F. Padovan 40390a708f8fSGustavo F. Padovan /* Reset config buffer. */ 404073ffa904SGustavo F. Padovan chan->conf_len = 0; 40410a708f8fSGustavo F. Padovan 4042c1360a1cSGustavo F. Padovan if (!test_bit(CONF_OUTPUT_DONE, &chan->conf_state)) 40430a708f8fSGustavo F. Padovan goto unlock; 40440a708f8fSGustavo F. Padovan 4045c1360a1cSGustavo F. Padovan if (test_bit(CONF_INPUT_DONE, &chan->conf_state)) { 404647d1ec61SGustavo F. Padovan set_default_fcs(chan); 40470a708f8fSGustavo F. Padovan 4048105bdf9eSMat Martineau if (chan->mode == L2CAP_MODE_ERTM || 4049105bdf9eSMat Martineau chan->mode == L2CAP_MODE_STREAMING) 40503c588192SMat Martineau err = l2cap_ertm_init(chan); 40510a708f8fSGustavo F. Padovan 40523c588192SMat Martineau if (err < 0) 40535e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 40543c588192SMat Martineau else 4055cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 40563c588192SMat Martineau 40570a708f8fSGustavo F. Padovan goto unlock; 40580a708f8fSGustavo F. Padovan } 40590a708f8fSGustavo F. Padovan 4060c1360a1cSGustavo F. Padovan if (!test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) { 40610a708f8fSGustavo F. Padovan u8 buf[64]; 40620a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 406373ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 406473ffa904SGustavo F. Padovan chan->num_conf_req++; 40650a708f8fSGustavo F. Padovan } 40660a708f8fSGustavo F. Padovan 40670e8b207eSAndrei Emeltchenko /* Got Conf Rsp PENDING from remote side and asume we sent 40680e8b207eSAndrei Emeltchenko Conf Rsp PENDING in the code above */ 40690e8b207eSAndrei Emeltchenko if (test_bit(CONF_REM_CONF_PEND, &chan->conf_state) && 40700e8b207eSAndrei Emeltchenko test_bit(CONF_LOC_CONF_PEND, &chan->conf_state)) { 40710e8b207eSAndrei Emeltchenko 40720e8b207eSAndrei Emeltchenko /* check compatibility */ 40730e8b207eSAndrei Emeltchenko 407479de886dSAndrei Emeltchenko /* Send rsp for BR/EDR channel */ 4075f351bc72SAndrei Emeltchenko if (!chan->hs_hcon) 407629d8a590SAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, rsp, cmd->ident, flags); 407779de886dSAndrei Emeltchenko else 407879de886dSAndrei Emeltchenko chan->ident = cmd->ident; 40790e8b207eSAndrei Emeltchenko } 40800e8b207eSAndrei Emeltchenko 40810a708f8fSGustavo F. Padovan unlock: 40826be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 40833c588192SMat Martineau return err; 40840a708f8fSGustavo F. Padovan } 40850a708f8fSGustavo F. Padovan 40862d792818SGustavo Padovan static inline int l2cap_config_rsp(struct l2cap_conn *conn, 4087cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4088cb3b3152SJohan Hedberg u8 *data) 40890a708f8fSGustavo F. Padovan { 40900a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = (struct l2cap_conf_rsp *)data; 40910a708f8fSGustavo F. Padovan u16 scid, flags, result; 409248454079SGustavo F. Padovan struct l2cap_chan *chan; 4093cb3b3152SJohan Hedberg int len = cmd_len - sizeof(*rsp); 40943c588192SMat Martineau int err = 0; 40950a708f8fSGustavo F. Padovan 4096cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rsp)) 4097cb3b3152SJohan Hedberg return -EPROTO; 4098cb3b3152SJohan Hedberg 40990a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 41000a708f8fSGustavo F. Padovan flags = __le16_to_cpu(rsp->flags); 41010a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 41020a708f8fSGustavo F. Padovan 410361386cbaSAndrei Emeltchenko BT_DBG("scid 0x%4.4x flags 0x%2.2x result 0x%2.2x len %d", scid, flags, 410461386cbaSAndrei Emeltchenko result, len); 41050a708f8fSGustavo F. Padovan 4106baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, scid); 410748454079SGustavo F. Padovan if (!chan) 41080a708f8fSGustavo F. Padovan return 0; 41090a708f8fSGustavo F. Padovan 41100a708f8fSGustavo F. Padovan switch (result) { 41110a708f8fSGustavo F. Padovan case L2CAP_CONF_SUCCESS: 411247d1ec61SGustavo F. Padovan l2cap_conf_rfc_get(chan, rsp->data, len); 41130e8b207eSAndrei Emeltchenko clear_bit(CONF_REM_CONF_PEND, &chan->conf_state); 41140a708f8fSGustavo F. Padovan break; 41150a708f8fSGustavo F. Padovan 41160e8b207eSAndrei Emeltchenko case L2CAP_CONF_PENDING: 41170e8b207eSAndrei Emeltchenko set_bit(CONF_REM_CONF_PEND, &chan->conf_state); 41180e8b207eSAndrei Emeltchenko 41190e8b207eSAndrei Emeltchenko if (test_bit(CONF_LOC_CONF_PEND, &chan->conf_state)) { 41200e8b207eSAndrei Emeltchenko char buf[64]; 41210e8b207eSAndrei Emeltchenko 41220e8b207eSAndrei Emeltchenko len = l2cap_parse_conf_rsp(chan, rsp->data, len, 41230e8b207eSAndrei Emeltchenko buf, &result); 41240e8b207eSAndrei Emeltchenko if (len < 0) { 41255e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 41260e8b207eSAndrei Emeltchenko goto done; 41270e8b207eSAndrei Emeltchenko } 41280e8b207eSAndrei Emeltchenko 4129f351bc72SAndrei Emeltchenko if (!chan->hs_hcon) { 413079de886dSAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, buf, cmd->ident, 413179de886dSAndrei Emeltchenko 0); 41325ce66b59SAndrei Emeltchenko } else { 41335ce66b59SAndrei Emeltchenko if (l2cap_check_efs(chan)) { 41345ce66b59SAndrei Emeltchenko amp_create_logical_link(chan); 413579de886dSAndrei Emeltchenko chan->ident = cmd->ident; 41360e8b207eSAndrei Emeltchenko } 41375ce66b59SAndrei Emeltchenko } 41385ce66b59SAndrei Emeltchenko } 41390e8b207eSAndrei Emeltchenko goto done; 41400e8b207eSAndrei Emeltchenko 41410a708f8fSGustavo F. Padovan case L2CAP_CONF_UNACCEPT: 414273ffa904SGustavo F. Padovan if (chan->num_conf_rsp <= L2CAP_CONF_MAX_CONF_RSP) { 41430a708f8fSGustavo F. Padovan char req[64]; 41440a708f8fSGustavo F. Padovan 41450a708f8fSGustavo F. Padovan if (len > sizeof(req) - sizeof(struct l2cap_conf_req)) { 41465e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 41470a708f8fSGustavo F. Padovan goto done; 41480a708f8fSGustavo F. Padovan } 41490a708f8fSGustavo F. Padovan 41500a708f8fSGustavo F. Padovan /* throw out any old stored conf requests */ 41510a708f8fSGustavo F. Padovan result = L2CAP_CONF_SUCCESS; 4152b4450035SGustavo F. Padovan len = l2cap_parse_conf_rsp(chan, rsp->data, len, 4153b4450035SGustavo F. Padovan req, &result); 41540a708f8fSGustavo F. Padovan if (len < 0) { 41555e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 41560a708f8fSGustavo F. Padovan goto done; 41570a708f8fSGustavo F. Padovan } 41580a708f8fSGustavo F. Padovan 41590a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), 41600a708f8fSGustavo F. Padovan L2CAP_CONF_REQ, len, req); 416173ffa904SGustavo F. Padovan chan->num_conf_req++; 41620a708f8fSGustavo F. Padovan if (result != L2CAP_CONF_SUCCESS) 41630a708f8fSGustavo F. Padovan goto done; 41640a708f8fSGustavo F. Padovan break; 41650a708f8fSGustavo F. Padovan } 41660a708f8fSGustavo F. Padovan 41670a708f8fSGustavo F. Padovan default: 41686be36555SAndrei Emeltchenko l2cap_chan_set_err(chan, ECONNRESET); 41692e0052e4SAndrei Emeltchenko 4170ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_REJ_TIMEOUT); 41715e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 41720a708f8fSGustavo F. Padovan goto done; 41730a708f8fSGustavo F. Padovan } 41740a708f8fSGustavo F. Padovan 417559e54bd1SAndrei Emeltchenko if (flags & L2CAP_CONF_FLAG_CONTINUATION) 41760a708f8fSGustavo F. Padovan goto done; 41770a708f8fSGustavo F. Padovan 4178c1360a1cSGustavo F. Padovan set_bit(CONF_INPUT_DONE, &chan->conf_state); 41790a708f8fSGustavo F. Padovan 4180c1360a1cSGustavo F. Padovan if (test_bit(CONF_OUTPUT_DONE, &chan->conf_state)) { 418147d1ec61SGustavo F. Padovan set_default_fcs(chan); 41820a708f8fSGustavo F. Padovan 4183105bdf9eSMat Martineau if (chan->mode == L2CAP_MODE_ERTM || 4184105bdf9eSMat Martineau chan->mode == L2CAP_MODE_STREAMING) 41853c588192SMat Martineau err = l2cap_ertm_init(chan); 41860a708f8fSGustavo F. Padovan 41873c588192SMat Martineau if (err < 0) 41885e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 41893c588192SMat Martineau else 4190cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 41910a708f8fSGustavo F. Padovan } 41920a708f8fSGustavo F. Padovan 41930a708f8fSGustavo F. Padovan done: 41946be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 41953c588192SMat Martineau return err; 41960a708f8fSGustavo F. Padovan } 41970a708f8fSGustavo F. Padovan 41982d792818SGustavo Padovan static inline int l2cap_disconnect_req(struct l2cap_conn *conn, 4199cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4200cb3b3152SJohan Hedberg u8 *data) 42010a708f8fSGustavo F. Padovan { 42020a708f8fSGustavo F. Padovan struct l2cap_disconn_req *req = (struct l2cap_disconn_req *) data; 42030a708f8fSGustavo F. Padovan struct l2cap_disconn_rsp rsp; 42040a708f8fSGustavo F. Padovan u16 dcid, scid; 420548454079SGustavo F. Padovan struct l2cap_chan *chan; 42060a708f8fSGustavo F. Padovan 4207cb3b3152SJohan Hedberg if (cmd_len != sizeof(*req)) 4208cb3b3152SJohan Hedberg return -EPROTO; 4209cb3b3152SJohan Hedberg 42100a708f8fSGustavo F. Padovan scid = __le16_to_cpu(req->scid); 42110a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(req->dcid); 42120a708f8fSGustavo F. Padovan 42130a708f8fSGustavo F. Padovan BT_DBG("scid 0x%4.4x dcid 0x%4.4x", scid, dcid); 42140a708f8fSGustavo F. Padovan 42153df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 42163df91ea2SAndrei Emeltchenko 42173df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, dcid); 42183df91ea2SAndrei Emeltchenko if (!chan) { 42193df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 4220662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, dcid, scid); 4221662d652dSJohan Hedberg return 0; 42223df91ea2SAndrei Emeltchenko } 42230a708f8fSGustavo F. Padovan 42246be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 42256be36555SAndrei Emeltchenko 4226fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 4227fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 42280a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_DISCONN_RSP, sizeof(rsp), &rsp); 42290a708f8fSGustavo F. Padovan 42305ec1bbe5SGustavo Padovan chan->ops->set_shutdown(chan); 42310a708f8fSGustavo F. Padovan 423261d6ef3eSMat Martineau l2cap_chan_hold(chan); 423348454079SGustavo F. Padovan l2cap_chan_del(chan, ECONNRESET); 42346be36555SAndrei Emeltchenko 42356be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 42360a708f8fSGustavo F. Padovan 423780b98027SGustavo Padovan chan->ops->close(chan); 423861d6ef3eSMat Martineau l2cap_chan_put(chan); 42393df91ea2SAndrei Emeltchenko 42403df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 42413df91ea2SAndrei Emeltchenko 42420a708f8fSGustavo F. Padovan return 0; 42430a708f8fSGustavo F. Padovan } 42440a708f8fSGustavo F. Padovan 42452d792818SGustavo Padovan static inline int l2cap_disconnect_rsp(struct l2cap_conn *conn, 4246cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4247cb3b3152SJohan Hedberg u8 *data) 42480a708f8fSGustavo F. Padovan { 42490a708f8fSGustavo F. Padovan struct l2cap_disconn_rsp *rsp = (struct l2cap_disconn_rsp *) data; 42500a708f8fSGustavo F. Padovan u16 dcid, scid; 425148454079SGustavo F. Padovan struct l2cap_chan *chan; 42520a708f8fSGustavo F. Padovan 4253cb3b3152SJohan Hedberg if (cmd_len != sizeof(*rsp)) 4254cb3b3152SJohan Hedberg return -EPROTO; 4255cb3b3152SJohan Hedberg 42560a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 42570a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(rsp->dcid); 42580a708f8fSGustavo F. Padovan 42590a708f8fSGustavo F. Padovan BT_DBG("dcid 0x%4.4x scid 0x%4.4x", dcid, scid); 42600a708f8fSGustavo F. Padovan 42613df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 42623df91ea2SAndrei Emeltchenko 42633df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, scid); 42643df91ea2SAndrei Emeltchenko if (!chan) { 42653df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 42660a708f8fSGustavo F. Padovan return 0; 42673df91ea2SAndrei Emeltchenko } 42680a708f8fSGustavo F. Padovan 42696be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 427048454079SGustavo F. Padovan 427161d6ef3eSMat Martineau l2cap_chan_hold(chan); 427248454079SGustavo F. Padovan l2cap_chan_del(chan, 0); 42736be36555SAndrei Emeltchenko 42746be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 42750a708f8fSGustavo F. Padovan 427680b98027SGustavo Padovan chan->ops->close(chan); 427761d6ef3eSMat Martineau l2cap_chan_put(chan); 42783df91ea2SAndrei Emeltchenko 42793df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 42803df91ea2SAndrei Emeltchenko 42810a708f8fSGustavo F. Padovan return 0; 42820a708f8fSGustavo F. Padovan } 42830a708f8fSGustavo F. Padovan 42842d792818SGustavo Padovan static inline int l2cap_information_req(struct l2cap_conn *conn, 4285cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4286cb3b3152SJohan Hedberg u8 *data) 42870a708f8fSGustavo F. Padovan { 42880a708f8fSGustavo F. Padovan struct l2cap_info_req *req = (struct l2cap_info_req *) data; 42890a708f8fSGustavo F. Padovan u16 type; 42900a708f8fSGustavo F. Padovan 4291cb3b3152SJohan Hedberg if (cmd_len != sizeof(*req)) 4292cb3b3152SJohan Hedberg return -EPROTO; 4293cb3b3152SJohan Hedberg 42940a708f8fSGustavo F. Padovan type = __le16_to_cpu(req->type); 42950a708f8fSGustavo F. Padovan 42960a708f8fSGustavo F. Padovan BT_DBG("type 0x%4.4x", type); 42970a708f8fSGustavo F. Padovan 42980a708f8fSGustavo F. Padovan if (type == L2CAP_IT_FEAT_MASK) { 42990a708f8fSGustavo F. Padovan u8 buf[8]; 43000a708f8fSGustavo F. Padovan u32 feat_mask = l2cap_feat_mask; 43010a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) buf; 4302ac73498cSAndrei Emeltchenko rsp->type = __constant_cpu_to_le16(L2CAP_IT_FEAT_MASK); 4303ac73498cSAndrei Emeltchenko rsp->result = __constant_cpu_to_le16(L2CAP_IR_SUCCESS); 43040a708f8fSGustavo F. Padovan if (!disable_ertm) 43050a708f8fSGustavo F. Padovan feat_mask |= L2CAP_FEAT_ERTM | L2CAP_FEAT_STREAMING 43060a708f8fSGustavo F. Padovan | L2CAP_FEAT_FCS; 4307848566b3SMarcel Holtmann if (conn->hs_enabled) 43086327eb98SAndrei Emeltchenko feat_mask |= L2CAP_FEAT_EXT_FLOW 43096327eb98SAndrei Emeltchenko | L2CAP_FEAT_EXT_WINDOW; 4310a5fd6f30SAndrei Emeltchenko 43110a708f8fSGustavo F. Padovan put_unaligned_le32(feat_mask, rsp->data); 43122d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(buf), 43132d792818SGustavo Padovan buf); 43140a708f8fSGustavo F. Padovan } else if (type == L2CAP_IT_FIXED_CHAN) { 43150a708f8fSGustavo F. Padovan u8 buf[12]; 43160a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) buf; 431750a147cdSMat Martineau 4318848566b3SMarcel Holtmann if (conn->hs_enabled) 431950a147cdSMat Martineau l2cap_fixed_chan[0] |= L2CAP_FC_A2MP; 432050a147cdSMat Martineau else 432150a147cdSMat Martineau l2cap_fixed_chan[0] &= ~L2CAP_FC_A2MP; 432250a147cdSMat Martineau 4323ac73498cSAndrei Emeltchenko rsp->type = __constant_cpu_to_le16(L2CAP_IT_FIXED_CHAN); 4324ac73498cSAndrei Emeltchenko rsp->result = __constant_cpu_to_le16(L2CAP_IR_SUCCESS); 4325c6337ea6SAndrei Emeltchenko memcpy(rsp->data, l2cap_fixed_chan, sizeof(l2cap_fixed_chan)); 43262d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(buf), 43272d792818SGustavo Padovan buf); 43280a708f8fSGustavo F. Padovan } else { 43290a708f8fSGustavo F. Padovan struct l2cap_info_rsp rsp; 43300a708f8fSGustavo F. Padovan rsp.type = cpu_to_le16(type); 4331ac73498cSAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_IR_NOTSUPP); 43322d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(rsp), 43332d792818SGustavo Padovan &rsp); 43340a708f8fSGustavo F. Padovan } 43350a708f8fSGustavo F. Padovan 43360a708f8fSGustavo F. Padovan return 0; 43370a708f8fSGustavo F. Padovan } 43380a708f8fSGustavo F. Padovan 43392d792818SGustavo Padovan static inline int l2cap_information_rsp(struct l2cap_conn *conn, 4340cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4341cb3b3152SJohan Hedberg u8 *data) 43420a708f8fSGustavo F. Padovan { 43430a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) data; 43440a708f8fSGustavo F. Padovan u16 type, result; 43450a708f8fSGustavo F. Padovan 43463f6fa3d4SJaganath Kanakkassery if (cmd_len < sizeof(*rsp)) 4347cb3b3152SJohan Hedberg return -EPROTO; 4348cb3b3152SJohan Hedberg 43490a708f8fSGustavo F. Padovan type = __le16_to_cpu(rsp->type); 43500a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 43510a708f8fSGustavo F. Padovan 43520a708f8fSGustavo F. Padovan BT_DBG("type 0x%4.4x result 0x%2.2x", type, result); 43530a708f8fSGustavo F. Padovan 4354e90165beSAndrei Emeltchenko /* L2CAP Info req/rsp are unbound to channels, add extra checks */ 4355e90165beSAndrei Emeltchenko if (cmd->ident != conn->info_ident || 4356e90165beSAndrei Emeltchenko conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) 4357e90165beSAndrei Emeltchenko return 0; 4358e90165beSAndrei Emeltchenko 435917cd3f37SUlisses Furquim cancel_delayed_work(&conn->info_timer); 43600a708f8fSGustavo F. Padovan 43610a708f8fSGustavo F. Padovan if (result != L2CAP_IR_SUCCESS) { 43620a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 43630a708f8fSGustavo F. Padovan conn->info_ident = 0; 43640a708f8fSGustavo F. Padovan 43650a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 43660a708f8fSGustavo F. Padovan 43670a708f8fSGustavo F. Padovan return 0; 43680a708f8fSGustavo F. Padovan } 43690a708f8fSGustavo F. Padovan 4370978c93b9SAndrei Emeltchenko switch (type) { 4371978c93b9SAndrei Emeltchenko case L2CAP_IT_FEAT_MASK: 43720a708f8fSGustavo F. Padovan conn->feat_mask = get_unaligned_le32(rsp->data); 43730a708f8fSGustavo F. Padovan 43740a708f8fSGustavo F. Padovan if (conn->feat_mask & L2CAP_FEAT_FIXED_CHAN) { 43750a708f8fSGustavo F. Padovan struct l2cap_info_req req; 4376ac73498cSAndrei Emeltchenko req.type = __constant_cpu_to_le16(L2CAP_IT_FIXED_CHAN); 43770a708f8fSGustavo F. Padovan 43780a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 43790a708f8fSGustavo F. Padovan 43800a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, conn->info_ident, 43810a708f8fSGustavo F. Padovan L2CAP_INFO_REQ, sizeof(req), &req); 43820a708f8fSGustavo F. Padovan } else { 43830a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 43840a708f8fSGustavo F. Padovan conn->info_ident = 0; 43850a708f8fSGustavo F. Padovan 43860a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 43870a708f8fSGustavo F. Padovan } 4388978c93b9SAndrei Emeltchenko break; 4389978c93b9SAndrei Emeltchenko 4390978c93b9SAndrei Emeltchenko case L2CAP_IT_FIXED_CHAN: 4391978c93b9SAndrei Emeltchenko conn->fixed_chan_mask = rsp->data[0]; 43920a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 43930a708f8fSGustavo F. Padovan conn->info_ident = 0; 43940a708f8fSGustavo F. Padovan 43950a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 4396978c93b9SAndrei Emeltchenko break; 43970a708f8fSGustavo F. Padovan } 43980a708f8fSGustavo F. Padovan 43990a708f8fSGustavo F. Padovan return 0; 44000a708f8fSGustavo F. Padovan } 44010a708f8fSGustavo F. Padovan 44021700915fSMat Martineau static int l2cap_create_channel_req(struct l2cap_conn *conn, 44032d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, 44042d792818SGustavo Padovan u16 cmd_len, void *data) 4405f94ff6ffSMat Martineau { 4406f94ff6ffSMat Martineau struct l2cap_create_chan_req *req = data; 44076e1df6a6SAndrei Emeltchenko struct l2cap_create_chan_rsp rsp; 44081700915fSMat Martineau struct l2cap_chan *chan; 44096e1df6a6SAndrei Emeltchenko struct hci_dev *hdev; 4410f94ff6ffSMat Martineau u16 psm, scid; 4411f94ff6ffSMat Martineau 4412f94ff6ffSMat Martineau if (cmd_len != sizeof(*req)) 4413f94ff6ffSMat Martineau return -EPROTO; 4414f94ff6ffSMat Martineau 4415848566b3SMarcel Holtmann if (!conn->hs_enabled) 4416f94ff6ffSMat Martineau return -EINVAL; 4417f94ff6ffSMat Martineau 4418f94ff6ffSMat Martineau psm = le16_to_cpu(req->psm); 4419f94ff6ffSMat Martineau scid = le16_to_cpu(req->scid); 4420f94ff6ffSMat Martineau 4421ad0ac6caSAndrei Emeltchenko BT_DBG("psm 0x%2.2x, scid 0x%4.4x, amp_id %d", psm, scid, req->amp_id); 4422f94ff6ffSMat Martineau 44236e1df6a6SAndrei Emeltchenko /* For controller id 0 make BR/EDR connection */ 44246ed971caSMarcel Holtmann if (req->amp_id == AMP_ID_BREDR) { 44256e1df6a6SAndrei Emeltchenko l2cap_connect(conn, cmd, data, L2CAP_CREATE_CHAN_RSP, 44266e1df6a6SAndrei Emeltchenko req->amp_id); 44276e1df6a6SAndrei Emeltchenko return 0; 44286e1df6a6SAndrei Emeltchenko } 44291700915fSMat Martineau 44301700915fSMat Martineau /* Validate AMP controller id */ 44311700915fSMat Martineau hdev = hci_dev_get(req->amp_id); 44326e1df6a6SAndrei Emeltchenko if (!hdev) 44336e1df6a6SAndrei Emeltchenko goto error; 44341700915fSMat Martineau 44356e1df6a6SAndrei Emeltchenko if (hdev->dev_type != HCI_AMP || !test_bit(HCI_UP, &hdev->flags)) { 44366e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 44376e1df6a6SAndrei Emeltchenko goto error; 44386e1df6a6SAndrei Emeltchenko } 44396e1df6a6SAndrei Emeltchenko 44406e1df6a6SAndrei Emeltchenko chan = l2cap_connect(conn, cmd, data, L2CAP_CREATE_CHAN_RSP, 44416e1df6a6SAndrei Emeltchenko req->amp_id); 44426e1df6a6SAndrei Emeltchenko if (chan) { 44436e1df6a6SAndrei Emeltchenko struct amp_mgr *mgr = conn->hcon->amp_mgr; 44446e1df6a6SAndrei Emeltchenko struct hci_conn *hs_hcon; 44456e1df6a6SAndrei Emeltchenko 444698e0f7eaSMarcel Holtmann hs_hcon = hci_conn_hash_lookup_ba(hdev, AMP_LINK, 444798e0f7eaSMarcel Holtmann &conn->hcon->dst); 44486e1df6a6SAndrei Emeltchenko if (!hs_hcon) { 44496e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 4450662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, chan->scid, 4451662d652dSJohan Hedberg chan->dcid); 4452662d652dSJohan Hedberg return 0; 44536e1df6a6SAndrei Emeltchenko } 44546e1df6a6SAndrei Emeltchenko 44556e1df6a6SAndrei Emeltchenko BT_DBG("mgr %p bredr_chan %p hs_hcon %p", mgr, chan, hs_hcon); 44566e1df6a6SAndrei Emeltchenko 44576e1df6a6SAndrei Emeltchenko mgr->bredr_chan = chan; 44586e1df6a6SAndrei Emeltchenko chan->hs_hcon = hs_hcon; 4459fd45bf4cSAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 44606e1df6a6SAndrei Emeltchenko conn->mtu = hdev->block_mtu; 44616e1df6a6SAndrei Emeltchenko } 44626e1df6a6SAndrei Emeltchenko 44636e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 44646e1df6a6SAndrei Emeltchenko 44656e1df6a6SAndrei Emeltchenko return 0; 44666e1df6a6SAndrei Emeltchenko 44676e1df6a6SAndrei Emeltchenko error: 4468f94ff6ffSMat Martineau rsp.dcid = 0; 4469f94ff6ffSMat Martineau rsp.scid = cpu_to_le16(scid); 44701700915fSMat Martineau rsp.result = __constant_cpu_to_le16(L2CAP_CR_BAD_AMP); 44718ce0c498SAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_NO_INFO); 4472f94ff6ffSMat Martineau 4473f94ff6ffSMat Martineau l2cap_send_cmd(conn, cmd->ident, L2CAP_CREATE_CHAN_RSP, 4474f94ff6ffSMat Martineau sizeof(rsp), &rsp); 4475f94ff6ffSMat Martineau 4476dc280801SJohan Hedberg return 0; 4477f94ff6ffSMat Martineau } 4478f94ff6ffSMat Martineau 44798eb200bdSMat Martineau static void l2cap_send_move_chan_req(struct l2cap_chan *chan, u8 dest_amp_id) 44808eb200bdSMat Martineau { 44818eb200bdSMat Martineau struct l2cap_move_chan_req req; 44828eb200bdSMat Martineau u8 ident; 44838eb200bdSMat Martineau 44848eb200bdSMat Martineau BT_DBG("chan %p, dest_amp_id %d", chan, dest_amp_id); 44858eb200bdSMat Martineau 44868eb200bdSMat Martineau ident = l2cap_get_ident(chan->conn); 44878eb200bdSMat Martineau chan->ident = ident; 44888eb200bdSMat Martineau 44898eb200bdSMat Martineau req.icid = cpu_to_le16(chan->scid); 44908eb200bdSMat Martineau req.dest_amp_id = dest_amp_id; 44918eb200bdSMat Martineau 44928eb200bdSMat Martineau l2cap_send_cmd(chan->conn, ident, L2CAP_MOVE_CHAN_REQ, sizeof(req), 44938eb200bdSMat Martineau &req); 44948eb200bdSMat Martineau 44958eb200bdSMat Martineau __set_chan_timer(chan, L2CAP_MOVE_TIMEOUT); 44968eb200bdSMat Martineau } 44978eb200bdSMat Martineau 44981500109bSMat Martineau static void l2cap_send_move_chan_rsp(struct l2cap_chan *chan, u16 result) 44998d5a04a1SMat Martineau { 45008d5a04a1SMat Martineau struct l2cap_move_chan_rsp rsp; 45018d5a04a1SMat Martineau 45021500109bSMat Martineau BT_DBG("chan %p, result 0x%4.4x", chan, result); 45038d5a04a1SMat Martineau 45041500109bSMat Martineau rsp.icid = cpu_to_le16(chan->dcid); 45058d5a04a1SMat Martineau rsp.result = cpu_to_le16(result); 45068d5a04a1SMat Martineau 45071500109bSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_MOVE_CHAN_RSP, 45081500109bSMat Martineau sizeof(rsp), &rsp); 45098d5a04a1SMat Martineau } 45108d5a04a1SMat Martineau 45115b155ef9SMat Martineau static void l2cap_send_move_chan_cfm(struct l2cap_chan *chan, u16 result) 45128d5a04a1SMat Martineau { 45138d5a04a1SMat Martineau struct l2cap_move_chan_cfm cfm; 45148d5a04a1SMat Martineau 45155b155ef9SMat Martineau BT_DBG("chan %p, result 0x%4.4x", chan, result); 45168d5a04a1SMat Martineau 45175b155ef9SMat Martineau chan->ident = l2cap_get_ident(chan->conn); 45188d5a04a1SMat Martineau 45195b155ef9SMat Martineau cfm.icid = cpu_to_le16(chan->scid); 45208d5a04a1SMat Martineau cfm.result = cpu_to_le16(result); 45218d5a04a1SMat Martineau 45225b155ef9SMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_MOVE_CHAN_CFM, 45235b155ef9SMat Martineau sizeof(cfm), &cfm); 45245b155ef9SMat Martineau 45255b155ef9SMat Martineau __set_chan_timer(chan, L2CAP_MOVE_TIMEOUT); 45265b155ef9SMat Martineau } 45275b155ef9SMat Martineau 45285b155ef9SMat Martineau static void l2cap_send_move_chan_cfm_icid(struct l2cap_conn *conn, u16 icid) 45295b155ef9SMat Martineau { 45305b155ef9SMat Martineau struct l2cap_move_chan_cfm cfm; 45315b155ef9SMat Martineau 45325b155ef9SMat Martineau BT_DBG("conn %p, icid 0x%4.4x", conn, icid); 45335b155ef9SMat Martineau 45345b155ef9SMat Martineau cfm.icid = cpu_to_le16(icid); 45355b155ef9SMat Martineau cfm.result = __constant_cpu_to_le16(L2CAP_MC_UNCONFIRMED); 45365b155ef9SMat Martineau 45375b155ef9SMat Martineau l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_MOVE_CHAN_CFM, 45385b155ef9SMat Martineau sizeof(cfm), &cfm); 45398d5a04a1SMat Martineau } 45408d5a04a1SMat Martineau 45418d5a04a1SMat Martineau static void l2cap_send_move_chan_cfm_rsp(struct l2cap_conn *conn, u8 ident, 45428d5a04a1SMat Martineau u16 icid) 45438d5a04a1SMat Martineau { 45448d5a04a1SMat Martineau struct l2cap_move_chan_cfm_rsp rsp; 45458d5a04a1SMat Martineau 4546ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x", icid); 45478d5a04a1SMat Martineau 45488d5a04a1SMat Martineau rsp.icid = cpu_to_le16(icid); 45498d5a04a1SMat Martineau l2cap_send_cmd(conn, ident, L2CAP_MOVE_CHAN_CFM_RSP, sizeof(rsp), &rsp); 45508d5a04a1SMat Martineau } 45518d5a04a1SMat Martineau 45525f3847a4SMat Martineau static void __release_logical_link(struct l2cap_chan *chan) 45535f3847a4SMat Martineau { 45545f3847a4SMat Martineau chan->hs_hchan = NULL; 45555f3847a4SMat Martineau chan->hs_hcon = NULL; 45565f3847a4SMat Martineau 45575f3847a4SMat Martineau /* Placeholder - release the logical link */ 45585f3847a4SMat Martineau } 45595f3847a4SMat Martineau 45601500109bSMat Martineau static void l2cap_logical_fail(struct l2cap_chan *chan) 45611500109bSMat Martineau { 45621500109bSMat Martineau /* Logical link setup failed */ 45631500109bSMat Martineau if (chan->state != BT_CONNECTED) { 45641500109bSMat Martineau /* Create channel failure, disconnect */ 45655e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 45661500109bSMat Martineau return; 45671500109bSMat Martineau } 45681500109bSMat Martineau 45691500109bSMat Martineau switch (chan->move_role) { 45701500109bSMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 45711500109bSMat Martineau l2cap_move_done(chan); 45721500109bSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_NOT_SUPP); 45731500109bSMat Martineau break; 45741500109bSMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 45751500109bSMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_LOGICAL_COMP || 45761500109bSMat Martineau chan->move_state == L2CAP_MOVE_WAIT_LOGICAL_CFM) { 45771500109bSMat Martineau /* Remote has only sent pending or 45781500109bSMat Martineau * success responses, clean up 45791500109bSMat Martineau */ 45801500109bSMat Martineau l2cap_move_done(chan); 45811500109bSMat Martineau } 45821500109bSMat Martineau 45831500109bSMat Martineau /* Other amp move states imply that the move 45841500109bSMat Martineau * has already aborted 45851500109bSMat Martineau */ 45861500109bSMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 45871500109bSMat Martineau break; 45881500109bSMat Martineau } 45891500109bSMat Martineau } 45901500109bSMat Martineau 45911500109bSMat Martineau static void l2cap_logical_finish_create(struct l2cap_chan *chan, 45921500109bSMat Martineau struct hci_chan *hchan) 45931500109bSMat Martineau { 45941500109bSMat Martineau struct l2cap_conf_rsp rsp; 45951500109bSMat Martineau 4596336178a3SAndrei Emeltchenko chan->hs_hchan = hchan; 45971500109bSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 45981500109bSMat Martineau 459935ba9561SAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, &rsp, chan->ident, 0); 46001500109bSMat Martineau 46011500109bSMat Martineau if (test_bit(CONF_INPUT_DONE, &chan->conf_state)) { 4602fe79c6feSAndrei Emeltchenko int err; 46031500109bSMat Martineau 46041500109bSMat Martineau set_default_fcs(chan); 46051500109bSMat Martineau 46061500109bSMat Martineau err = l2cap_ertm_init(chan); 46071500109bSMat Martineau if (err < 0) 46085e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 46091500109bSMat Martineau else 46101500109bSMat Martineau l2cap_chan_ready(chan); 46111500109bSMat Martineau } 46121500109bSMat Martineau } 46131500109bSMat Martineau 46141500109bSMat Martineau static void l2cap_logical_finish_move(struct l2cap_chan *chan, 46151500109bSMat Martineau struct hci_chan *hchan) 46161500109bSMat Martineau { 46171500109bSMat Martineau chan->hs_hcon = hchan->conn; 46181500109bSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 46191500109bSMat Martineau 46201500109bSMat Martineau BT_DBG("move_state %d", chan->move_state); 46211500109bSMat Martineau 46221500109bSMat Martineau switch (chan->move_state) { 46231500109bSMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_COMP: 46241500109bSMat Martineau /* Move confirm will be sent after a success 46251500109bSMat Martineau * response is received 46261500109bSMat Martineau */ 46271500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 46281500109bSMat Martineau break; 46291500109bSMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_CFM: 46301500109bSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 46311500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 46321500109bSMat Martineau } else if (chan->move_role == L2CAP_MOVE_ROLE_INITIATOR) { 46331500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM_RSP; 46341500109bSMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 46351500109bSMat Martineau } else if (chan->move_role == L2CAP_MOVE_ROLE_RESPONDER) { 46361500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 46371500109bSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_SUCCESS); 46381500109bSMat Martineau } 46391500109bSMat Martineau break; 46401500109bSMat Martineau default: 46411500109bSMat Martineau /* Move was not in expected state, free the channel */ 46421500109bSMat Martineau __release_logical_link(chan); 46431500109bSMat Martineau 46441500109bSMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 46451500109bSMat Martineau } 46461500109bSMat Martineau } 46471500109bSMat Martineau 46481500109bSMat Martineau /* Call with chan locked */ 464927695fb4SAndrei Emeltchenko void l2cap_logical_cfm(struct l2cap_chan *chan, struct hci_chan *hchan, 46505b155ef9SMat Martineau u8 status) 46515b155ef9SMat Martineau { 46521500109bSMat Martineau BT_DBG("chan %p, hchan %p, status %d", chan, hchan, status); 46531500109bSMat Martineau 46541500109bSMat Martineau if (status) { 46551500109bSMat Martineau l2cap_logical_fail(chan); 46561500109bSMat Martineau __release_logical_link(chan); 46575b155ef9SMat Martineau return; 46585b155ef9SMat Martineau } 46595b155ef9SMat Martineau 46601500109bSMat Martineau if (chan->state != BT_CONNECTED) { 46611500109bSMat Martineau /* Ignore logical link if channel is on BR/EDR */ 46626ed971caSMarcel Holtmann if (chan->local_amp_id != AMP_ID_BREDR) 46631500109bSMat Martineau l2cap_logical_finish_create(chan, hchan); 46641500109bSMat Martineau } else { 46651500109bSMat Martineau l2cap_logical_finish_move(chan, hchan); 46661500109bSMat Martineau } 46671500109bSMat Martineau } 46681500109bSMat Martineau 46693f7a56c4SMat Martineau void l2cap_move_start(struct l2cap_chan *chan) 46703f7a56c4SMat Martineau { 46713f7a56c4SMat Martineau BT_DBG("chan %p", chan); 46723f7a56c4SMat Martineau 46736ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR) { 46743f7a56c4SMat Martineau if (chan->chan_policy != BT_CHANNEL_POLICY_AMP_PREFERRED) 46753f7a56c4SMat Martineau return; 46763f7a56c4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_INITIATOR; 46773f7a56c4SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_PREPARE; 46783f7a56c4SMat Martineau /* Placeholder - start physical link setup */ 46793f7a56c4SMat Martineau } else { 46803f7a56c4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_INITIATOR; 46813f7a56c4SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 46823f7a56c4SMat Martineau chan->move_id = 0; 46833f7a56c4SMat Martineau l2cap_move_setup(chan); 46843f7a56c4SMat Martineau l2cap_send_move_chan_req(chan, 0); 46853f7a56c4SMat Martineau } 46863f7a56c4SMat Martineau } 46873f7a56c4SMat Martineau 46888eb200bdSMat Martineau static void l2cap_do_create(struct l2cap_chan *chan, int result, 46898eb200bdSMat Martineau u8 local_amp_id, u8 remote_amp_id) 46908eb200bdSMat Martineau { 469162748ca1SAndrei Emeltchenko BT_DBG("chan %p state %s %u -> %u", chan, state_to_string(chan->state), 469262748ca1SAndrei Emeltchenko local_amp_id, remote_amp_id); 469362748ca1SAndrei Emeltchenko 469412d6cc60SAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 469512d6cc60SAndrei Emeltchenko 469662748ca1SAndrei Emeltchenko /* Outgoing channel on AMP */ 469762748ca1SAndrei Emeltchenko if (chan->state == BT_CONNECT) { 469862748ca1SAndrei Emeltchenko if (result == L2CAP_CR_SUCCESS) { 469962748ca1SAndrei Emeltchenko chan->local_amp_id = local_amp_id; 470062748ca1SAndrei Emeltchenko l2cap_send_create_chan_req(chan, remote_amp_id); 470162748ca1SAndrei Emeltchenko } else { 470262748ca1SAndrei Emeltchenko /* Revert to BR/EDR connect */ 470362748ca1SAndrei Emeltchenko l2cap_send_conn_req(chan); 470462748ca1SAndrei Emeltchenko } 470562748ca1SAndrei Emeltchenko 470662748ca1SAndrei Emeltchenko return; 470762748ca1SAndrei Emeltchenko } 470862748ca1SAndrei Emeltchenko 470962748ca1SAndrei Emeltchenko /* Incoming channel on AMP */ 471062748ca1SAndrei Emeltchenko if (__l2cap_no_conn_pending(chan)) { 47118eb200bdSMat Martineau struct l2cap_conn_rsp rsp; 47128eb200bdSMat Martineau char buf[128]; 47138eb200bdSMat Martineau rsp.scid = cpu_to_le16(chan->dcid); 47148eb200bdSMat Martineau rsp.dcid = cpu_to_le16(chan->scid); 47158eb200bdSMat Martineau 47168eb200bdSMat Martineau if (result == L2CAP_CR_SUCCESS) { 47178eb200bdSMat Martineau /* Send successful response */ 471862cd50e2SAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CR_SUCCESS); 471962cd50e2SAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_NO_INFO); 47208eb200bdSMat Martineau } else { 47218eb200bdSMat Martineau /* Send negative response */ 472262cd50e2SAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CR_NO_MEM); 472362cd50e2SAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_NO_INFO); 47248eb200bdSMat Martineau } 47258eb200bdSMat Martineau 47268eb200bdSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_CREATE_CHAN_RSP, 47278eb200bdSMat Martineau sizeof(rsp), &rsp); 47288eb200bdSMat Martineau 47298eb200bdSMat Martineau if (result == L2CAP_CR_SUCCESS) { 4730f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 47318eb200bdSMat Martineau set_bit(CONF_REQ_SENT, &chan->conf_state); 47328eb200bdSMat Martineau l2cap_send_cmd(chan->conn, l2cap_get_ident(chan->conn), 47338eb200bdSMat Martineau L2CAP_CONF_REQ, 47348eb200bdSMat Martineau l2cap_build_conf_req(chan, buf), buf); 47358eb200bdSMat Martineau chan->num_conf_req++; 47368eb200bdSMat Martineau } 47378eb200bdSMat Martineau } 47388eb200bdSMat Martineau } 47398eb200bdSMat Martineau 47408eb200bdSMat Martineau static void l2cap_do_move_initiate(struct l2cap_chan *chan, u8 local_amp_id, 47418eb200bdSMat Martineau u8 remote_amp_id) 47428eb200bdSMat Martineau { 47438eb200bdSMat Martineau l2cap_move_setup(chan); 47448eb200bdSMat Martineau chan->move_id = local_amp_id; 47458eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP; 47468eb200bdSMat Martineau 47478eb200bdSMat Martineau l2cap_send_move_chan_req(chan, remote_amp_id); 47488eb200bdSMat Martineau } 47498eb200bdSMat Martineau 47508eb200bdSMat Martineau static void l2cap_do_move_respond(struct l2cap_chan *chan, int result) 47518eb200bdSMat Martineau { 47528eb200bdSMat Martineau struct hci_chan *hchan = NULL; 47538eb200bdSMat Martineau 47548eb200bdSMat Martineau /* Placeholder - get hci_chan for logical link */ 47558eb200bdSMat Martineau 47568eb200bdSMat Martineau if (hchan) { 47578eb200bdSMat Martineau if (hchan->state == BT_CONNECTED) { 47588eb200bdSMat Martineau /* Logical link is ready to go */ 47598eb200bdSMat Martineau chan->hs_hcon = hchan->conn; 47608eb200bdSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 47618eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 47628eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_SUCCESS); 47638eb200bdSMat Martineau 47648eb200bdSMat Martineau l2cap_logical_cfm(chan, hchan, L2CAP_MR_SUCCESS); 47658eb200bdSMat Martineau } else { 47668eb200bdSMat Martineau /* Wait for logical link to be ready */ 47678eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 47688eb200bdSMat Martineau } 47698eb200bdSMat Martineau } else { 47708eb200bdSMat Martineau /* Logical link not available */ 47718eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_NOT_ALLOWED); 47728eb200bdSMat Martineau } 47738eb200bdSMat Martineau } 47748eb200bdSMat Martineau 47758eb200bdSMat Martineau static void l2cap_do_move_cancel(struct l2cap_chan *chan, int result) 47768eb200bdSMat Martineau { 47778eb200bdSMat Martineau if (chan->move_role == L2CAP_MOVE_ROLE_RESPONDER) { 47788eb200bdSMat Martineau u8 rsp_result; 47798eb200bdSMat Martineau if (result == -EINVAL) 47808eb200bdSMat Martineau rsp_result = L2CAP_MR_BAD_ID; 47818eb200bdSMat Martineau else 47828eb200bdSMat Martineau rsp_result = L2CAP_MR_NOT_ALLOWED; 47838eb200bdSMat Martineau 47848eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, rsp_result); 47858eb200bdSMat Martineau } 47868eb200bdSMat Martineau 47878eb200bdSMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 47888eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 47898eb200bdSMat Martineau 47908eb200bdSMat Martineau /* Restart data transmission */ 47918eb200bdSMat Martineau l2cap_ertm_send(chan); 47928eb200bdSMat Martineau } 47938eb200bdSMat Martineau 4794a514b17fSAndrei Emeltchenko /* Invoke with locked chan */ 4795a514b17fSAndrei Emeltchenko void __l2cap_physical_cfm(struct l2cap_chan *chan, int result) 47968eb200bdSMat Martineau { 4797770bfefaSAndrei Emeltchenko u8 local_amp_id = chan->local_amp_id; 4798fffadc08SAndrei Emeltchenko u8 remote_amp_id = chan->remote_amp_id; 4799770bfefaSAndrei Emeltchenko 48008eb200bdSMat Martineau BT_DBG("chan %p, result %d, local_amp_id %d, remote_amp_id %d", 48018eb200bdSMat Martineau chan, result, local_amp_id, remote_amp_id); 48028eb200bdSMat Martineau 48038eb200bdSMat Martineau if (chan->state == BT_DISCONN || chan->state == BT_CLOSED) { 48048eb200bdSMat Martineau l2cap_chan_unlock(chan); 48058eb200bdSMat Martineau return; 48068eb200bdSMat Martineau } 48078eb200bdSMat Martineau 48088eb200bdSMat Martineau if (chan->state != BT_CONNECTED) { 48098eb200bdSMat Martineau l2cap_do_create(chan, result, local_amp_id, remote_amp_id); 48108eb200bdSMat Martineau } else if (result != L2CAP_MR_SUCCESS) { 48118eb200bdSMat Martineau l2cap_do_move_cancel(chan, result); 48128eb200bdSMat Martineau } else { 48138eb200bdSMat Martineau switch (chan->move_role) { 48148eb200bdSMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 48158eb200bdSMat Martineau l2cap_do_move_initiate(chan, local_amp_id, 48168eb200bdSMat Martineau remote_amp_id); 48178eb200bdSMat Martineau break; 48188eb200bdSMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 48198eb200bdSMat Martineau l2cap_do_move_respond(chan, result); 48208eb200bdSMat Martineau break; 48218eb200bdSMat Martineau default: 48228eb200bdSMat Martineau l2cap_do_move_cancel(chan, result); 48238eb200bdSMat Martineau break; 48248eb200bdSMat Martineau } 48258eb200bdSMat Martineau } 48268eb200bdSMat Martineau } 48278eb200bdSMat Martineau 48288d5a04a1SMat Martineau static inline int l2cap_move_channel_req(struct l2cap_conn *conn, 4829ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 4830ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 48318d5a04a1SMat Martineau { 48328d5a04a1SMat Martineau struct l2cap_move_chan_req *req = data; 48331500109bSMat Martineau struct l2cap_move_chan_rsp rsp; 483402b0fbb9SMat Martineau struct l2cap_chan *chan; 48358d5a04a1SMat Martineau u16 icid = 0; 48368d5a04a1SMat Martineau u16 result = L2CAP_MR_NOT_ALLOWED; 48378d5a04a1SMat Martineau 48388d5a04a1SMat Martineau if (cmd_len != sizeof(*req)) 48398d5a04a1SMat Martineau return -EPROTO; 48408d5a04a1SMat Martineau 48418d5a04a1SMat Martineau icid = le16_to_cpu(req->icid); 48428d5a04a1SMat Martineau 4843ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, dest_amp_id %d", icid, req->dest_amp_id); 48448d5a04a1SMat Martineau 4845848566b3SMarcel Holtmann if (!conn->hs_enabled) 48468d5a04a1SMat Martineau return -EINVAL; 48478d5a04a1SMat Martineau 484802b0fbb9SMat Martineau chan = l2cap_get_chan_by_dcid(conn, icid); 484902b0fbb9SMat Martineau if (!chan) { 48501500109bSMat Martineau rsp.icid = cpu_to_le16(icid); 48511500109bSMat Martineau rsp.result = __constant_cpu_to_le16(L2CAP_MR_NOT_ALLOWED); 48521500109bSMat Martineau l2cap_send_cmd(conn, cmd->ident, L2CAP_MOVE_CHAN_RSP, 48531500109bSMat Martineau sizeof(rsp), &rsp); 485402b0fbb9SMat Martineau return 0; 485502b0fbb9SMat Martineau } 485602b0fbb9SMat Martineau 48571500109bSMat Martineau chan->ident = cmd->ident; 48581500109bSMat Martineau 485902b0fbb9SMat Martineau if (chan->scid < L2CAP_CID_DYN_START || 486002b0fbb9SMat Martineau chan->chan_policy == BT_CHANNEL_POLICY_BREDR_ONLY || 486102b0fbb9SMat Martineau (chan->mode != L2CAP_MODE_ERTM && 486202b0fbb9SMat Martineau chan->mode != L2CAP_MODE_STREAMING)) { 486302b0fbb9SMat Martineau result = L2CAP_MR_NOT_ALLOWED; 486402b0fbb9SMat Martineau goto send_move_response; 486502b0fbb9SMat Martineau } 486602b0fbb9SMat Martineau 486702b0fbb9SMat Martineau if (chan->local_amp_id == req->dest_amp_id) { 486802b0fbb9SMat Martineau result = L2CAP_MR_SAME_ID; 486902b0fbb9SMat Martineau goto send_move_response; 487002b0fbb9SMat Martineau } 487102b0fbb9SMat Martineau 48726ed971caSMarcel Holtmann if (req->dest_amp_id != AMP_ID_BREDR) { 487302b0fbb9SMat Martineau struct hci_dev *hdev; 487402b0fbb9SMat Martineau hdev = hci_dev_get(req->dest_amp_id); 487502b0fbb9SMat Martineau if (!hdev || hdev->dev_type != HCI_AMP || 487602b0fbb9SMat Martineau !test_bit(HCI_UP, &hdev->flags)) { 487702b0fbb9SMat Martineau if (hdev) 487802b0fbb9SMat Martineau hci_dev_put(hdev); 487902b0fbb9SMat Martineau 488002b0fbb9SMat Martineau result = L2CAP_MR_BAD_ID; 488102b0fbb9SMat Martineau goto send_move_response; 488202b0fbb9SMat Martineau } 488302b0fbb9SMat Martineau hci_dev_put(hdev); 488402b0fbb9SMat Martineau } 488502b0fbb9SMat Martineau 488602b0fbb9SMat Martineau /* Detect a move collision. Only send a collision response 488702b0fbb9SMat Martineau * if this side has "lost", otherwise proceed with the move. 488802b0fbb9SMat Martineau * The winner has the larger bd_addr. 488902b0fbb9SMat Martineau */ 489002b0fbb9SMat Martineau if ((__chan_is_moving(chan) || 489102b0fbb9SMat Martineau chan->move_role != L2CAP_MOVE_ROLE_NONE) && 48926f59b904SMarcel Holtmann bacmp(&conn->hcon->src, &conn->hcon->dst) > 0) { 489302b0fbb9SMat Martineau result = L2CAP_MR_COLLISION; 489402b0fbb9SMat Martineau goto send_move_response; 489502b0fbb9SMat Martineau } 489602b0fbb9SMat Martineau 489702b0fbb9SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_RESPONDER; 489802b0fbb9SMat Martineau l2cap_move_setup(chan); 489902b0fbb9SMat Martineau chan->move_id = req->dest_amp_id; 490002b0fbb9SMat Martineau icid = chan->dcid; 490102b0fbb9SMat Martineau 49026ed971caSMarcel Holtmann if (req->dest_amp_id == AMP_ID_BREDR) { 490302b0fbb9SMat Martineau /* Moving to BR/EDR */ 490402b0fbb9SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 490502b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 490602b0fbb9SMat Martineau result = L2CAP_MR_PEND; 490702b0fbb9SMat Martineau } else { 490802b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 490902b0fbb9SMat Martineau result = L2CAP_MR_SUCCESS; 491002b0fbb9SMat Martineau } 491102b0fbb9SMat Martineau } else { 491202b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_PREPARE; 491302b0fbb9SMat Martineau /* Placeholder - uncomment when amp functions are available */ 491402b0fbb9SMat Martineau /*amp_accept_physical(chan, req->dest_amp_id);*/ 491502b0fbb9SMat Martineau result = L2CAP_MR_PEND; 491602b0fbb9SMat Martineau } 491702b0fbb9SMat Martineau 491802b0fbb9SMat Martineau send_move_response: 49191500109bSMat Martineau l2cap_send_move_chan_rsp(chan, result); 49208d5a04a1SMat Martineau 492102b0fbb9SMat Martineau l2cap_chan_unlock(chan); 492202b0fbb9SMat Martineau 49238d5a04a1SMat Martineau return 0; 49248d5a04a1SMat Martineau } 49258d5a04a1SMat Martineau 49265b155ef9SMat Martineau static void l2cap_move_continue(struct l2cap_conn *conn, u16 icid, u16 result) 49275b155ef9SMat Martineau { 49285b155ef9SMat Martineau struct l2cap_chan *chan; 49295b155ef9SMat Martineau struct hci_chan *hchan = NULL; 49305b155ef9SMat Martineau 49315b155ef9SMat Martineau chan = l2cap_get_chan_by_scid(conn, icid); 49325b155ef9SMat Martineau if (!chan) { 49335b155ef9SMat Martineau l2cap_send_move_chan_cfm_icid(conn, icid); 49345b155ef9SMat Martineau return; 49355b155ef9SMat Martineau } 49365b155ef9SMat Martineau 49375b155ef9SMat Martineau __clear_chan_timer(chan); 49385b155ef9SMat Martineau if (result == L2CAP_MR_PEND) 49395b155ef9SMat Martineau __set_chan_timer(chan, L2CAP_MOVE_ERTX_TIMEOUT); 49405b155ef9SMat Martineau 49415b155ef9SMat Martineau switch (chan->move_state) { 49425b155ef9SMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_COMP: 49435b155ef9SMat Martineau /* Move confirm will be sent when logical link 49445b155ef9SMat Martineau * is complete. 49455b155ef9SMat Martineau */ 49465b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 49475b155ef9SMat Martineau break; 49485b155ef9SMat Martineau case L2CAP_MOVE_WAIT_RSP_SUCCESS: 49495b155ef9SMat Martineau if (result == L2CAP_MR_PEND) { 49505b155ef9SMat Martineau break; 49515b155ef9SMat Martineau } else if (test_bit(CONN_LOCAL_BUSY, 49525b155ef9SMat Martineau &chan->conn_state)) { 49535b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 49545b155ef9SMat Martineau } else { 49555b155ef9SMat Martineau /* Logical link is up or moving to BR/EDR, 49565b155ef9SMat Martineau * proceed with move 49575b155ef9SMat Martineau */ 49585b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM_RSP; 49595b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 49605b155ef9SMat Martineau } 49615b155ef9SMat Martineau break; 49625b155ef9SMat Martineau case L2CAP_MOVE_WAIT_RSP: 49635b155ef9SMat Martineau /* Moving to AMP */ 49645b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS) { 49655b155ef9SMat Martineau /* Remote is ready, send confirm immediately 49665b155ef9SMat Martineau * after logical link is ready 49675b155ef9SMat Martineau */ 49685b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 49695b155ef9SMat Martineau } else { 49705b155ef9SMat Martineau /* Both logical link and move success 49715b155ef9SMat Martineau * are required to confirm 49725b155ef9SMat Martineau */ 49735b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_COMP; 49745b155ef9SMat Martineau } 49755b155ef9SMat Martineau 49765b155ef9SMat Martineau /* Placeholder - get hci_chan for logical link */ 49775b155ef9SMat Martineau if (!hchan) { 49785b155ef9SMat Martineau /* Logical link not available */ 49795b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 49805b155ef9SMat Martineau break; 49815b155ef9SMat Martineau } 49825b155ef9SMat Martineau 49835b155ef9SMat Martineau /* If the logical link is not yet connected, do not 49845b155ef9SMat Martineau * send confirmation. 49855b155ef9SMat Martineau */ 49865b155ef9SMat Martineau if (hchan->state != BT_CONNECTED) 49875b155ef9SMat Martineau break; 49885b155ef9SMat Martineau 49895b155ef9SMat Martineau /* Logical link is already ready to go */ 49905b155ef9SMat Martineau 49915b155ef9SMat Martineau chan->hs_hcon = hchan->conn; 49925b155ef9SMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 49935b155ef9SMat Martineau 49945b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS) { 49955b155ef9SMat Martineau /* Can confirm now */ 49965b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 49975b155ef9SMat Martineau } else { 49985b155ef9SMat Martineau /* Now only need move success 49995b155ef9SMat Martineau * to confirm 50005b155ef9SMat Martineau */ 50015b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 50025b155ef9SMat Martineau } 50035b155ef9SMat Martineau 50045b155ef9SMat Martineau l2cap_logical_cfm(chan, hchan, L2CAP_MR_SUCCESS); 50055b155ef9SMat Martineau break; 50065b155ef9SMat Martineau default: 50075b155ef9SMat Martineau /* Any other amp move state means the move failed. */ 50085b155ef9SMat Martineau chan->move_id = chan->local_amp_id; 50095b155ef9SMat Martineau l2cap_move_done(chan); 50105b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 50115b155ef9SMat Martineau } 50125b155ef9SMat Martineau 50135b155ef9SMat Martineau l2cap_chan_unlock(chan); 50145b155ef9SMat Martineau } 50155b155ef9SMat Martineau 50165b155ef9SMat Martineau static void l2cap_move_fail(struct l2cap_conn *conn, u8 ident, u16 icid, 50175b155ef9SMat Martineau u16 result) 50185b155ef9SMat Martineau { 50195b155ef9SMat Martineau struct l2cap_chan *chan; 50205b155ef9SMat Martineau 50215b155ef9SMat Martineau chan = l2cap_get_chan_by_ident(conn, ident); 50225b155ef9SMat Martineau if (!chan) { 50235b155ef9SMat Martineau /* Could not locate channel, icid is best guess */ 50245b155ef9SMat Martineau l2cap_send_move_chan_cfm_icid(conn, icid); 50255b155ef9SMat Martineau return; 50265b155ef9SMat Martineau } 50275b155ef9SMat Martineau 50285b155ef9SMat Martineau __clear_chan_timer(chan); 50295b155ef9SMat Martineau 50305b155ef9SMat Martineau if (chan->move_role == L2CAP_MOVE_ROLE_INITIATOR) { 50315b155ef9SMat Martineau if (result == L2CAP_MR_COLLISION) { 50325b155ef9SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_RESPONDER; 50335b155ef9SMat Martineau } else { 50345b155ef9SMat Martineau /* Cleanup - cancel move */ 50355b155ef9SMat Martineau chan->move_id = chan->local_amp_id; 50365b155ef9SMat Martineau l2cap_move_done(chan); 50375b155ef9SMat Martineau } 50385b155ef9SMat Martineau } 50395b155ef9SMat Martineau 50405b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 50415b155ef9SMat Martineau 50425b155ef9SMat Martineau l2cap_chan_unlock(chan); 50435b155ef9SMat Martineau } 50445b155ef9SMat Martineau 50455b155ef9SMat Martineau static int l2cap_move_channel_rsp(struct l2cap_conn *conn, 5046ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5047ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 50488d5a04a1SMat Martineau { 50498d5a04a1SMat Martineau struct l2cap_move_chan_rsp *rsp = data; 50508d5a04a1SMat Martineau u16 icid, result; 50518d5a04a1SMat Martineau 50528d5a04a1SMat Martineau if (cmd_len != sizeof(*rsp)) 50538d5a04a1SMat Martineau return -EPROTO; 50548d5a04a1SMat Martineau 50558d5a04a1SMat Martineau icid = le16_to_cpu(rsp->icid); 50568d5a04a1SMat Martineau result = le16_to_cpu(rsp->result); 50578d5a04a1SMat Martineau 5058ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, result 0x%4.4x", icid, result); 50598d5a04a1SMat Martineau 50605b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS || result == L2CAP_MR_PEND) 50615b155ef9SMat Martineau l2cap_move_continue(conn, icid, result); 50625b155ef9SMat Martineau else 50635b155ef9SMat Martineau l2cap_move_fail(conn, cmd->ident, icid, result); 50648d5a04a1SMat Martineau 50658d5a04a1SMat Martineau return 0; 50668d5a04a1SMat Martineau } 50678d5a04a1SMat Martineau 50685f3847a4SMat Martineau static int l2cap_move_channel_confirm(struct l2cap_conn *conn, 5069ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5070ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 50718d5a04a1SMat Martineau { 50728d5a04a1SMat Martineau struct l2cap_move_chan_cfm *cfm = data; 50735f3847a4SMat Martineau struct l2cap_chan *chan; 50748d5a04a1SMat Martineau u16 icid, result; 50758d5a04a1SMat Martineau 50768d5a04a1SMat Martineau if (cmd_len != sizeof(*cfm)) 50778d5a04a1SMat Martineau return -EPROTO; 50788d5a04a1SMat Martineau 50798d5a04a1SMat Martineau icid = le16_to_cpu(cfm->icid); 50808d5a04a1SMat Martineau result = le16_to_cpu(cfm->result); 50818d5a04a1SMat Martineau 5082ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, result 0x%4.4x", icid, result); 50838d5a04a1SMat Martineau 50845f3847a4SMat Martineau chan = l2cap_get_chan_by_dcid(conn, icid); 50855f3847a4SMat Martineau if (!chan) { 50865f3847a4SMat Martineau /* Spec requires a response even if the icid was not found */ 50878d5a04a1SMat Martineau l2cap_send_move_chan_cfm_rsp(conn, cmd->ident, icid); 50885f3847a4SMat Martineau return 0; 50895f3847a4SMat Martineau } 50905f3847a4SMat Martineau 50915f3847a4SMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_CONFIRM) { 50925f3847a4SMat Martineau if (result == L2CAP_MC_CONFIRMED) { 50935f3847a4SMat Martineau chan->local_amp_id = chan->move_id; 50946ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR) 50955f3847a4SMat Martineau __release_logical_link(chan); 50965f3847a4SMat Martineau } else { 50975f3847a4SMat Martineau chan->move_id = chan->local_amp_id; 50985f3847a4SMat Martineau } 50995f3847a4SMat Martineau 51005f3847a4SMat Martineau l2cap_move_done(chan); 51015f3847a4SMat Martineau } 51025f3847a4SMat Martineau 51035f3847a4SMat Martineau l2cap_send_move_chan_cfm_rsp(conn, cmd->ident, icid); 51045f3847a4SMat Martineau 51055f3847a4SMat Martineau l2cap_chan_unlock(chan); 51068d5a04a1SMat Martineau 51078d5a04a1SMat Martineau return 0; 51088d5a04a1SMat Martineau } 51098d5a04a1SMat Martineau 51108d5a04a1SMat Martineau static inline int l2cap_move_channel_confirm_rsp(struct l2cap_conn *conn, 5111ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5112ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 51138d5a04a1SMat Martineau { 51148d5a04a1SMat Martineau struct l2cap_move_chan_cfm_rsp *rsp = data; 51153fd71a0aSMat Martineau struct l2cap_chan *chan; 51168d5a04a1SMat Martineau u16 icid; 51178d5a04a1SMat Martineau 51188d5a04a1SMat Martineau if (cmd_len != sizeof(*rsp)) 51198d5a04a1SMat Martineau return -EPROTO; 51208d5a04a1SMat Martineau 51218d5a04a1SMat Martineau icid = le16_to_cpu(rsp->icid); 51228d5a04a1SMat Martineau 5123ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x", icid); 51248d5a04a1SMat Martineau 51253fd71a0aSMat Martineau chan = l2cap_get_chan_by_scid(conn, icid); 51263fd71a0aSMat Martineau if (!chan) 51273fd71a0aSMat Martineau return 0; 51283fd71a0aSMat Martineau 51293fd71a0aSMat Martineau __clear_chan_timer(chan); 51303fd71a0aSMat Martineau 51313fd71a0aSMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_CONFIRM_RSP) { 51323fd71a0aSMat Martineau chan->local_amp_id = chan->move_id; 51333fd71a0aSMat Martineau 51346ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR && chan->hs_hchan) 51353fd71a0aSMat Martineau __release_logical_link(chan); 51363fd71a0aSMat Martineau 51373fd71a0aSMat Martineau l2cap_move_done(chan); 51383fd71a0aSMat Martineau } 51393fd71a0aSMat Martineau 51403fd71a0aSMat Martineau l2cap_chan_unlock(chan); 51413fd71a0aSMat Martineau 51428d5a04a1SMat Martineau return 0; 51438d5a04a1SMat Martineau } 51448d5a04a1SMat Martineau 5145e2174ca4SGustavo F. Padovan static inline int l2cap_check_conn_param(u16 min, u16 max, u16 latency, 5146de73115aSClaudio Takahasi u16 to_multiplier) 5147de73115aSClaudio Takahasi { 5148de73115aSClaudio Takahasi u16 max_latency; 5149de73115aSClaudio Takahasi 5150de73115aSClaudio Takahasi if (min > max || min < 6 || max > 3200) 5151de73115aSClaudio Takahasi return -EINVAL; 5152de73115aSClaudio Takahasi 5153de73115aSClaudio Takahasi if (to_multiplier < 10 || to_multiplier > 3200) 5154de73115aSClaudio Takahasi return -EINVAL; 5155de73115aSClaudio Takahasi 5156de73115aSClaudio Takahasi if (max >= to_multiplier * 8) 5157de73115aSClaudio Takahasi return -EINVAL; 5158de73115aSClaudio Takahasi 5159de73115aSClaudio Takahasi max_latency = (to_multiplier * 8 / max) - 1; 5160de73115aSClaudio Takahasi if (latency > 499 || latency > max_latency) 5161de73115aSClaudio Takahasi return -EINVAL; 5162de73115aSClaudio Takahasi 5163de73115aSClaudio Takahasi return 0; 5164de73115aSClaudio Takahasi } 5165de73115aSClaudio Takahasi 5166de73115aSClaudio Takahasi static inline int l2cap_conn_param_update_req(struct l2cap_conn *conn, 51672d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, 5168203e639eSJohan Hedberg u16 cmd_len, u8 *data) 5169de73115aSClaudio Takahasi { 5170de73115aSClaudio Takahasi struct hci_conn *hcon = conn->hcon; 5171de73115aSClaudio Takahasi struct l2cap_conn_param_update_req *req; 5172de73115aSClaudio Takahasi struct l2cap_conn_param_update_rsp rsp; 5173203e639eSJohan Hedberg u16 min, max, latency, to_multiplier; 51742ce603ebSClaudio Takahasi int err; 5175de73115aSClaudio Takahasi 5176de73115aSClaudio Takahasi if (!(hcon->link_mode & HCI_LM_MASTER)) 5177de73115aSClaudio Takahasi return -EINVAL; 5178de73115aSClaudio Takahasi 5179de73115aSClaudio Takahasi if (cmd_len != sizeof(struct l2cap_conn_param_update_req)) 5180de73115aSClaudio Takahasi return -EPROTO; 5181de73115aSClaudio Takahasi 5182de73115aSClaudio Takahasi req = (struct l2cap_conn_param_update_req *) data; 5183de73115aSClaudio Takahasi min = __le16_to_cpu(req->min); 5184de73115aSClaudio Takahasi max = __le16_to_cpu(req->max); 5185de73115aSClaudio Takahasi latency = __le16_to_cpu(req->latency); 5186de73115aSClaudio Takahasi to_multiplier = __le16_to_cpu(req->to_multiplier); 5187de73115aSClaudio Takahasi 5188de73115aSClaudio Takahasi BT_DBG("min 0x%4.4x max 0x%4.4x latency: 0x%4.4x Timeout: 0x%4.4x", 5189de73115aSClaudio Takahasi min, max, latency, to_multiplier); 5190de73115aSClaudio Takahasi 5191de73115aSClaudio Takahasi memset(&rsp, 0, sizeof(rsp)); 51922ce603ebSClaudio Takahasi 51932ce603ebSClaudio Takahasi err = l2cap_check_conn_param(min, max, latency, to_multiplier); 51942ce603ebSClaudio Takahasi if (err) 5195ac73498cSAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CONN_PARAM_REJECTED); 5196de73115aSClaudio Takahasi else 5197ac73498cSAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CONN_PARAM_ACCEPTED); 5198de73115aSClaudio Takahasi 5199de73115aSClaudio Takahasi l2cap_send_cmd(conn, cmd->ident, L2CAP_CONN_PARAM_UPDATE_RSP, 5200de73115aSClaudio Takahasi sizeof(rsp), &rsp); 5201de73115aSClaudio Takahasi 52022ce603ebSClaudio Takahasi if (!err) 52032ce603ebSClaudio Takahasi hci_le_conn_update(hcon, min, max, latency, to_multiplier); 52042ce603ebSClaudio Takahasi 5205de73115aSClaudio Takahasi return 0; 5206de73115aSClaudio Takahasi } 5207de73115aSClaudio Takahasi 52083300d9a9SClaudio Takahasi static inline int l2cap_bredr_sig_cmd(struct l2cap_conn *conn, 52092d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, u16 cmd_len, 52102d792818SGustavo Padovan u8 *data) 52113300d9a9SClaudio Takahasi { 52123300d9a9SClaudio Takahasi int err = 0; 52133300d9a9SClaudio Takahasi 52143300d9a9SClaudio Takahasi switch (cmd->code) { 52153300d9a9SClaudio Takahasi case L2CAP_COMMAND_REJ: 5216cb3b3152SJohan Hedberg l2cap_command_rej(conn, cmd, cmd_len, data); 52173300d9a9SClaudio Takahasi break; 52183300d9a9SClaudio Takahasi 52193300d9a9SClaudio Takahasi case L2CAP_CONN_REQ: 5220cb3b3152SJohan Hedberg err = l2cap_connect_req(conn, cmd, cmd_len, data); 52213300d9a9SClaudio Takahasi break; 52223300d9a9SClaudio Takahasi 52233300d9a9SClaudio Takahasi case L2CAP_CONN_RSP: 5224f5a2598dSMat Martineau case L2CAP_CREATE_CHAN_RSP: 52259245e737SJohan Hedberg l2cap_connect_create_rsp(conn, cmd, cmd_len, data); 52263300d9a9SClaudio Takahasi break; 52273300d9a9SClaudio Takahasi 52283300d9a9SClaudio Takahasi case L2CAP_CONF_REQ: 52293300d9a9SClaudio Takahasi err = l2cap_config_req(conn, cmd, cmd_len, data); 52303300d9a9SClaudio Takahasi break; 52313300d9a9SClaudio Takahasi 52323300d9a9SClaudio Takahasi case L2CAP_CONF_RSP: 52339245e737SJohan Hedberg l2cap_config_rsp(conn, cmd, cmd_len, data); 52343300d9a9SClaudio Takahasi break; 52353300d9a9SClaudio Takahasi 52363300d9a9SClaudio Takahasi case L2CAP_DISCONN_REQ: 5237cb3b3152SJohan Hedberg err = l2cap_disconnect_req(conn, cmd, cmd_len, data); 52383300d9a9SClaudio Takahasi break; 52393300d9a9SClaudio Takahasi 52403300d9a9SClaudio Takahasi case L2CAP_DISCONN_RSP: 52419245e737SJohan Hedberg l2cap_disconnect_rsp(conn, cmd, cmd_len, data); 52423300d9a9SClaudio Takahasi break; 52433300d9a9SClaudio Takahasi 52443300d9a9SClaudio Takahasi case L2CAP_ECHO_REQ: 52453300d9a9SClaudio Takahasi l2cap_send_cmd(conn, cmd->ident, L2CAP_ECHO_RSP, cmd_len, data); 52463300d9a9SClaudio Takahasi break; 52473300d9a9SClaudio Takahasi 52483300d9a9SClaudio Takahasi case L2CAP_ECHO_RSP: 52493300d9a9SClaudio Takahasi break; 52503300d9a9SClaudio Takahasi 52513300d9a9SClaudio Takahasi case L2CAP_INFO_REQ: 5252cb3b3152SJohan Hedberg err = l2cap_information_req(conn, cmd, cmd_len, data); 52533300d9a9SClaudio Takahasi break; 52543300d9a9SClaudio Takahasi 52553300d9a9SClaudio Takahasi case L2CAP_INFO_RSP: 52569245e737SJohan Hedberg l2cap_information_rsp(conn, cmd, cmd_len, data); 52573300d9a9SClaudio Takahasi break; 52583300d9a9SClaudio Takahasi 5259f94ff6ffSMat Martineau case L2CAP_CREATE_CHAN_REQ: 5260f94ff6ffSMat Martineau err = l2cap_create_channel_req(conn, cmd, cmd_len, data); 5261f94ff6ffSMat Martineau break; 5262f94ff6ffSMat Martineau 52638d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_REQ: 52648d5a04a1SMat Martineau err = l2cap_move_channel_req(conn, cmd, cmd_len, data); 52658d5a04a1SMat Martineau break; 52668d5a04a1SMat Martineau 52678d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_RSP: 52689245e737SJohan Hedberg l2cap_move_channel_rsp(conn, cmd, cmd_len, data); 52698d5a04a1SMat Martineau break; 52708d5a04a1SMat Martineau 52718d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_CFM: 52728d5a04a1SMat Martineau err = l2cap_move_channel_confirm(conn, cmd, cmd_len, data); 52738d5a04a1SMat Martineau break; 52748d5a04a1SMat Martineau 52758d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_CFM_RSP: 52769245e737SJohan Hedberg l2cap_move_channel_confirm_rsp(conn, cmd, cmd_len, data); 52778d5a04a1SMat Martineau break; 52788d5a04a1SMat Martineau 52793300d9a9SClaudio Takahasi default: 52803300d9a9SClaudio Takahasi BT_ERR("Unknown BR/EDR signaling command 0x%2.2x", cmd->code); 52813300d9a9SClaudio Takahasi err = -EINVAL; 52823300d9a9SClaudio Takahasi break; 52833300d9a9SClaudio Takahasi } 52843300d9a9SClaudio Takahasi 52853300d9a9SClaudio Takahasi return err; 52863300d9a9SClaudio Takahasi } 52873300d9a9SClaudio Takahasi 52883300d9a9SClaudio Takahasi static inline int l2cap_le_sig_cmd(struct l2cap_conn *conn, 5289203e639eSJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 5290203e639eSJohan Hedberg u8 *data) 52913300d9a9SClaudio Takahasi { 52923300d9a9SClaudio Takahasi switch (cmd->code) { 52933300d9a9SClaudio Takahasi case L2CAP_COMMAND_REJ: 52943300d9a9SClaudio Takahasi return 0; 52953300d9a9SClaudio Takahasi 52963300d9a9SClaudio Takahasi case L2CAP_CONN_PARAM_UPDATE_REQ: 5297203e639eSJohan Hedberg return l2cap_conn_param_update_req(conn, cmd, cmd_len, data); 52983300d9a9SClaudio Takahasi 52993300d9a9SClaudio Takahasi case L2CAP_CONN_PARAM_UPDATE_RSP: 53003300d9a9SClaudio Takahasi return 0; 53013300d9a9SClaudio Takahasi 53023300d9a9SClaudio Takahasi default: 53033300d9a9SClaudio Takahasi BT_ERR("Unknown LE signaling command 0x%2.2x", cmd->code); 53043300d9a9SClaudio Takahasi return -EINVAL; 53053300d9a9SClaudio Takahasi } 53063300d9a9SClaudio Takahasi } 53073300d9a9SClaudio Takahasi 5308c5623556SJohan Hedberg static inline void l2cap_le_sig_channel(struct l2cap_conn *conn, 5309c5623556SJohan Hedberg struct sk_buff *skb) 5310c5623556SJohan Hedberg { 531169c4e4e8SJohan Hedberg struct hci_conn *hcon = conn->hcon; 53124f3e219dSMarcel Holtmann struct l2cap_cmd_hdr *cmd; 53134f3e219dSMarcel Holtmann u16 len; 5314c5623556SJohan Hedberg int err; 5315c5623556SJohan Hedberg 531669c4e4e8SJohan Hedberg if (hcon->type != LE_LINK) 53173b166295SMarcel Holtmann goto drop; 531869c4e4e8SJohan Hedberg 53194f3e219dSMarcel Holtmann if (skb->len < L2CAP_CMD_HDR_SIZE) 53204f3e219dSMarcel Holtmann goto drop; 5321c5623556SJohan Hedberg 53224f3e219dSMarcel Holtmann cmd = (void *) skb->data; 53234f3e219dSMarcel Holtmann skb_pull(skb, L2CAP_CMD_HDR_SIZE); 5324c5623556SJohan Hedberg 53254f3e219dSMarcel Holtmann len = le16_to_cpu(cmd->len); 5326c5623556SJohan Hedberg 53274f3e219dSMarcel Holtmann BT_DBG("code 0x%2.2x len %d id 0x%2.2x", cmd->code, len, cmd->ident); 53284f3e219dSMarcel Holtmann 53294f3e219dSMarcel Holtmann if (len != skb->len || !cmd->ident) { 5330c5623556SJohan Hedberg BT_DBG("corrupted command"); 53314f3e219dSMarcel Holtmann goto drop; 5332c5623556SJohan Hedberg } 5333c5623556SJohan Hedberg 5334203e639eSJohan Hedberg err = l2cap_le_sig_cmd(conn, cmd, len, skb->data); 5335c5623556SJohan Hedberg if (err) { 5336c5623556SJohan Hedberg struct l2cap_cmd_rej_unk rej; 5337c5623556SJohan Hedberg 5338c5623556SJohan Hedberg BT_ERR("Wrong link type (%d)", err); 5339c5623556SJohan Hedberg 5340a521149aSJohan Hedberg rej.reason = __constant_cpu_to_le16(L2CAP_REJ_NOT_UNDERSTOOD); 53414f3e219dSMarcel Holtmann l2cap_send_cmd(conn, cmd->ident, L2CAP_COMMAND_REJ, 5342c5623556SJohan Hedberg sizeof(rej), &rej); 5343c5623556SJohan Hedberg } 5344c5623556SJohan Hedberg 53453b166295SMarcel Holtmann drop: 5346c5623556SJohan Hedberg kfree_skb(skb); 5347c5623556SJohan Hedberg } 5348c5623556SJohan Hedberg 53493300d9a9SClaudio Takahasi static inline void l2cap_sig_channel(struct l2cap_conn *conn, 53503300d9a9SClaudio Takahasi struct sk_buff *skb) 53510a708f8fSGustavo F. Padovan { 535269c4e4e8SJohan Hedberg struct hci_conn *hcon = conn->hcon; 53530a708f8fSGustavo F. Padovan u8 *data = skb->data; 53540a708f8fSGustavo F. Padovan int len = skb->len; 53550a708f8fSGustavo F. Padovan struct l2cap_cmd_hdr cmd; 53563300d9a9SClaudio Takahasi int err; 53570a708f8fSGustavo F. Padovan 53580a708f8fSGustavo F. Padovan l2cap_raw_recv(conn, skb); 53590a708f8fSGustavo F. Padovan 536069c4e4e8SJohan Hedberg if (hcon->type != ACL_LINK) 53613b166295SMarcel Holtmann goto drop; 536269c4e4e8SJohan Hedberg 53630a708f8fSGustavo F. Padovan while (len >= L2CAP_CMD_HDR_SIZE) { 53640a708f8fSGustavo F. Padovan u16 cmd_len; 53650a708f8fSGustavo F. Padovan memcpy(&cmd, data, L2CAP_CMD_HDR_SIZE); 53660a708f8fSGustavo F. Padovan data += L2CAP_CMD_HDR_SIZE; 53670a708f8fSGustavo F. Padovan len -= L2CAP_CMD_HDR_SIZE; 53680a708f8fSGustavo F. Padovan 53690a708f8fSGustavo F. Padovan cmd_len = le16_to_cpu(cmd.len); 53700a708f8fSGustavo F. Padovan 53712d792818SGustavo Padovan BT_DBG("code 0x%2.2x len %d id 0x%2.2x", cmd.code, cmd_len, 53722d792818SGustavo Padovan cmd.ident); 53730a708f8fSGustavo F. Padovan 53740a708f8fSGustavo F. Padovan if (cmd_len > len || !cmd.ident) { 53750a708f8fSGustavo F. Padovan BT_DBG("corrupted command"); 53760a708f8fSGustavo F. Padovan break; 53770a708f8fSGustavo F. Padovan } 53780a708f8fSGustavo F. Padovan 53793300d9a9SClaudio Takahasi err = l2cap_bredr_sig_cmd(conn, &cmd, cmd_len, data); 53800a708f8fSGustavo F. Padovan if (err) { 5381e2fd318eSIlia Kolomisnky struct l2cap_cmd_rej_unk rej; 53822c6d1a2eSGustavo F. Padovan 53832c6d1a2eSGustavo F. Padovan BT_ERR("Wrong link type (%d)", err); 53840a708f8fSGustavo F. Padovan 5385a521149aSJohan Hedberg rej.reason = __constant_cpu_to_le16(L2CAP_REJ_NOT_UNDERSTOOD); 53862d792818SGustavo Padovan l2cap_send_cmd(conn, cmd.ident, L2CAP_COMMAND_REJ, 53872d792818SGustavo Padovan sizeof(rej), &rej); 53880a708f8fSGustavo F. Padovan } 53890a708f8fSGustavo F. Padovan 53900a708f8fSGustavo F. Padovan data += cmd_len; 53910a708f8fSGustavo F. Padovan len -= cmd_len; 53920a708f8fSGustavo F. Padovan } 53930a708f8fSGustavo F. Padovan 53943b166295SMarcel Holtmann drop: 53950a708f8fSGustavo F. Padovan kfree_skb(skb); 53960a708f8fSGustavo F. Padovan } 53970a708f8fSGustavo F. Padovan 539847d1ec61SGustavo F. Padovan static int l2cap_check_fcs(struct l2cap_chan *chan, struct sk_buff *skb) 53990a708f8fSGustavo F. Padovan { 54000a708f8fSGustavo F. Padovan u16 our_fcs, rcv_fcs; 5401e4ca6d98SAndrei Emeltchenko int hdr_size; 5402e4ca6d98SAndrei Emeltchenko 5403e4ca6d98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 5404e4ca6d98SAndrei Emeltchenko hdr_size = L2CAP_EXT_HDR_SIZE; 5405e4ca6d98SAndrei Emeltchenko else 5406e4ca6d98SAndrei Emeltchenko hdr_size = L2CAP_ENH_HDR_SIZE; 54070a708f8fSGustavo F. Padovan 540847d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 540903a51213SAndrei Emeltchenko skb_trim(skb, skb->len - L2CAP_FCS_SIZE); 54100a708f8fSGustavo F. Padovan rcv_fcs = get_unaligned_le16(skb->data + skb->len); 54110a708f8fSGustavo F. Padovan our_fcs = crc16(0, skb->data - hdr_size, skb->len + hdr_size); 54120a708f8fSGustavo F. Padovan 54130a708f8fSGustavo F. Padovan if (our_fcs != rcv_fcs) 54140a708f8fSGustavo F. Padovan return -EBADMSG; 54150a708f8fSGustavo F. Padovan } 54160a708f8fSGustavo F. Padovan return 0; 54170a708f8fSGustavo F. Padovan } 54180a708f8fSGustavo F. Padovan 54196ea00485SMat Martineau static void l2cap_send_i_or_rr_or_rnr(struct l2cap_chan *chan) 54200a708f8fSGustavo F. Padovan { 5421e31f7633SMat Martineau struct l2cap_ctrl control; 54220a708f8fSGustavo F. Padovan 5423e31f7633SMat Martineau BT_DBG("chan %p", chan); 54240a708f8fSGustavo F. Padovan 5425e31f7633SMat Martineau memset(&control, 0, sizeof(control)); 5426e31f7633SMat Martineau control.sframe = 1; 5427e31f7633SMat Martineau control.final = 1; 5428e31f7633SMat Martineau control.reqseq = chan->buffer_seq; 5429e31f7633SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 54300a708f8fSGustavo F. Padovan 5431e2ab4353SGustavo F. Padovan if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 5432e31f7633SMat Martineau control.super = L2CAP_SUPER_RNR; 5433e31f7633SMat Martineau l2cap_send_sframe(chan, &control); 54340a708f8fSGustavo F. Padovan } 54350a708f8fSGustavo F. Padovan 5436e31f7633SMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, &chan->conn_state) && 5437e31f7633SMat Martineau chan->unacked_frames > 0) 5438e31f7633SMat Martineau __set_retrans_timer(chan); 54390a708f8fSGustavo F. Padovan 5440e31f7633SMat Martineau /* Send pending iframes */ 5441525cd185SGustavo F. Padovan l2cap_ertm_send(chan); 54420a708f8fSGustavo F. Padovan 5443e2ab4353SGustavo F. Padovan if (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state) && 5444e31f7633SMat Martineau test_bit(CONN_SEND_FBIT, &chan->conn_state)) { 5445e31f7633SMat Martineau /* F-bit wasn't sent in an s-frame or i-frame yet, so 5446e31f7633SMat Martineau * send it now. 5447e31f7633SMat Martineau */ 5448e31f7633SMat Martineau control.super = L2CAP_SUPER_RR; 5449e31f7633SMat Martineau l2cap_send_sframe(chan, &control); 54500a708f8fSGustavo F. Padovan } 54510a708f8fSGustavo F. Padovan } 54520a708f8fSGustavo F. Padovan 54532d792818SGustavo Padovan static void append_skb_frag(struct sk_buff *skb, struct sk_buff *new_frag, 54542d792818SGustavo Padovan struct sk_buff **last_frag) 54550a708f8fSGustavo F. Padovan { 545684084a31SMat Martineau /* skb->len reflects data in skb as well as all fragments 545784084a31SMat Martineau * skb->data_len reflects only data in fragments 545884084a31SMat Martineau */ 545984084a31SMat Martineau if (!skb_has_frag_list(skb)) 546084084a31SMat Martineau skb_shinfo(skb)->frag_list = new_frag; 546184084a31SMat Martineau 546284084a31SMat Martineau new_frag->next = NULL; 546384084a31SMat Martineau 546484084a31SMat Martineau (*last_frag)->next = new_frag; 546584084a31SMat Martineau *last_frag = new_frag; 546684084a31SMat Martineau 546784084a31SMat Martineau skb->len += new_frag->len; 546884084a31SMat Martineau skb->data_len += new_frag->len; 546984084a31SMat Martineau skb->truesize += new_frag->truesize; 547084084a31SMat Martineau } 547184084a31SMat Martineau 54724b51dae9SMat Martineau static int l2cap_reassemble_sdu(struct l2cap_chan *chan, struct sk_buff *skb, 54734b51dae9SMat Martineau struct l2cap_ctrl *control) 547484084a31SMat Martineau { 547584084a31SMat Martineau int err = -EINVAL; 54760a708f8fSGustavo F. Padovan 54774b51dae9SMat Martineau switch (control->sar) { 54787e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_UNSEGMENTED: 547984084a31SMat Martineau if (chan->sdu) 548084084a31SMat Martineau break; 54810a708f8fSGustavo F. Padovan 548280b98027SGustavo Padovan err = chan->ops->recv(chan, skb); 548384084a31SMat Martineau break; 54840a708f8fSGustavo F. Padovan 54857e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_START: 548684084a31SMat Martineau if (chan->sdu) 548784084a31SMat Martineau break; 54880a708f8fSGustavo F. Padovan 54896f61fd47SGustavo F. Padovan chan->sdu_len = get_unaligned_le16(skb->data); 549003a51213SAndrei Emeltchenko skb_pull(skb, L2CAP_SDULEN_SIZE); 54910a708f8fSGustavo F. Padovan 549284084a31SMat Martineau if (chan->sdu_len > chan->imtu) { 549384084a31SMat Martineau err = -EMSGSIZE; 549484084a31SMat Martineau break; 549584084a31SMat Martineau } 54960a708f8fSGustavo F. Padovan 549784084a31SMat Martineau if (skb->len >= chan->sdu_len) 549884084a31SMat Martineau break; 549984084a31SMat Martineau 550084084a31SMat Martineau chan->sdu = skb; 550184084a31SMat Martineau chan->sdu_last_frag = skb; 550284084a31SMat Martineau 550384084a31SMat Martineau skb = NULL; 550484084a31SMat Martineau err = 0; 55050a708f8fSGustavo F. Padovan break; 55060a708f8fSGustavo F. Padovan 55077e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_CONTINUE: 55086f61fd47SGustavo F. Padovan if (!chan->sdu) 550984084a31SMat Martineau break; 55100a708f8fSGustavo F. Padovan 551184084a31SMat Martineau append_skb_frag(chan->sdu, skb, 551284084a31SMat Martineau &chan->sdu_last_frag); 551384084a31SMat Martineau skb = NULL; 55140a708f8fSGustavo F. Padovan 551584084a31SMat Martineau if (chan->sdu->len >= chan->sdu_len) 551684084a31SMat Martineau break; 55170a708f8fSGustavo F. Padovan 551884084a31SMat Martineau err = 0; 55190a708f8fSGustavo F. Padovan break; 55200a708f8fSGustavo F. Padovan 55217e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_END: 55226f61fd47SGustavo F. Padovan if (!chan->sdu) 552384084a31SMat Martineau break; 55240a708f8fSGustavo F. Padovan 552584084a31SMat Martineau append_skb_frag(chan->sdu, skb, 552684084a31SMat Martineau &chan->sdu_last_frag); 552784084a31SMat Martineau skb = NULL; 55280a708f8fSGustavo F. Padovan 552984084a31SMat Martineau if (chan->sdu->len != chan->sdu_len) 553084084a31SMat Martineau break; 55310a708f8fSGustavo F. Padovan 553280b98027SGustavo Padovan err = chan->ops->recv(chan, chan->sdu); 55330a708f8fSGustavo F. Padovan 553484084a31SMat Martineau if (!err) { 553584084a31SMat Martineau /* Reassembly complete */ 553684084a31SMat Martineau chan->sdu = NULL; 553784084a31SMat Martineau chan->sdu_last_frag = NULL; 553884084a31SMat Martineau chan->sdu_len = 0; 55390a708f8fSGustavo F. Padovan } 55400a708f8fSGustavo F. Padovan break; 55410a708f8fSGustavo F. Padovan } 55420a708f8fSGustavo F. Padovan 554384084a31SMat Martineau if (err) { 55440a708f8fSGustavo F. Padovan kfree_skb(skb); 55456f61fd47SGustavo F. Padovan kfree_skb(chan->sdu); 55466f61fd47SGustavo F. Padovan chan->sdu = NULL; 554784084a31SMat Martineau chan->sdu_last_frag = NULL; 554884084a31SMat Martineau chan->sdu_len = 0; 554984084a31SMat Martineau } 55500a708f8fSGustavo F. Padovan 555184084a31SMat Martineau return err; 55520a708f8fSGustavo F. Padovan } 55530a708f8fSGustavo F. Padovan 555432b32735SMat Martineau static int l2cap_resegment(struct l2cap_chan *chan) 555532b32735SMat Martineau { 555632b32735SMat Martineau /* Placeholder */ 555732b32735SMat Martineau return 0; 555832b32735SMat Martineau } 555932b32735SMat Martineau 5560e328140fSMat Martineau void l2cap_chan_busy(struct l2cap_chan *chan, int busy) 55610a708f8fSGustavo F. Padovan { 556261aa4f5bSMat Martineau u8 event; 556361aa4f5bSMat Martineau 556461aa4f5bSMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 556561aa4f5bSMat Martineau return; 556661aa4f5bSMat Martineau 556761aa4f5bSMat Martineau event = busy ? L2CAP_EV_LOCAL_BUSY_DETECTED : L2CAP_EV_LOCAL_BUSY_CLEAR; 5568401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, event); 55690a708f8fSGustavo F. Padovan } 55700a708f8fSGustavo F. Padovan 5571d2a7ac5dSMat Martineau static int l2cap_rx_queued_iframes(struct l2cap_chan *chan) 5572d2a7ac5dSMat Martineau { 557363838725SMat Martineau int err = 0; 557463838725SMat Martineau /* Pass sequential frames to l2cap_reassemble_sdu() 557563838725SMat Martineau * until a gap is encountered. 557663838725SMat Martineau */ 557763838725SMat Martineau 557863838725SMat Martineau BT_DBG("chan %p", chan); 557963838725SMat Martineau 558063838725SMat Martineau while (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 558163838725SMat Martineau struct sk_buff *skb; 558263838725SMat Martineau BT_DBG("Searching for skb with txseq %d (queue len %d)", 558363838725SMat Martineau chan->buffer_seq, skb_queue_len(&chan->srej_q)); 558463838725SMat Martineau 558563838725SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->srej_q, chan->buffer_seq); 558663838725SMat Martineau 558763838725SMat Martineau if (!skb) 558863838725SMat Martineau break; 558963838725SMat Martineau 559063838725SMat Martineau skb_unlink(skb, &chan->srej_q); 559163838725SMat Martineau chan->buffer_seq = __next_seq(chan, chan->buffer_seq); 559263838725SMat Martineau err = l2cap_reassemble_sdu(chan, skb, &bt_cb(skb)->control); 559363838725SMat Martineau if (err) 559463838725SMat Martineau break; 559563838725SMat Martineau } 559663838725SMat Martineau 559763838725SMat Martineau if (skb_queue_empty(&chan->srej_q)) { 559863838725SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 559963838725SMat Martineau l2cap_send_ack(chan); 560063838725SMat Martineau } 560163838725SMat Martineau 560263838725SMat Martineau return err; 5603d2a7ac5dSMat Martineau } 5604d2a7ac5dSMat Martineau 5605d2a7ac5dSMat Martineau static void l2cap_handle_srej(struct l2cap_chan *chan, 5606d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 5607d2a7ac5dSMat Martineau { 5608f80842a8SMat Martineau struct sk_buff *skb; 5609f80842a8SMat Martineau 5610f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 5611f80842a8SMat Martineau 5612f80842a8SMat Martineau if (control->reqseq == chan->next_tx_seq) { 5613f80842a8SMat Martineau BT_DBG("Invalid reqseq %d, disconnecting", control->reqseq); 56145e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5615f80842a8SMat Martineau return; 5616f80842a8SMat Martineau } 5617f80842a8SMat Martineau 5618f80842a8SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, control->reqseq); 5619f80842a8SMat Martineau 5620f80842a8SMat Martineau if (skb == NULL) { 5621f80842a8SMat Martineau BT_DBG("Seq %d not available for retransmission", 5622f80842a8SMat Martineau control->reqseq); 5623f80842a8SMat Martineau return; 5624f80842a8SMat Martineau } 5625f80842a8SMat Martineau 5626f80842a8SMat Martineau if (chan->max_tx != 0 && bt_cb(skb)->control.retries >= chan->max_tx) { 5627f80842a8SMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 56285e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5629f80842a8SMat Martineau return; 5630f80842a8SMat Martineau } 5631f80842a8SMat Martineau 5632f80842a8SMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 5633f80842a8SMat Martineau 5634f80842a8SMat Martineau if (control->poll) { 5635f80842a8SMat Martineau l2cap_pass_to_tx(chan, control); 5636f80842a8SMat Martineau 5637f80842a8SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 5638f80842a8SMat Martineau l2cap_retransmit(chan, control); 5639f80842a8SMat Martineau l2cap_ertm_send(chan); 5640f80842a8SMat Martineau 5641f80842a8SMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) { 5642f80842a8SMat Martineau set_bit(CONN_SREJ_ACT, &chan->conn_state); 5643f80842a8SMat Martineau chan->srej_save_reqseq = control->reqseq; 5644f80842a8SMat Martineau } 5645f80842a8SMat Martineau } else { 5646f80842a8SMat Martineau l2cap_pass_to_tx_fbit(chan, control); 5647f80842a8SMat Martineau 5648f80842a8SMat Martineau if (control->final) { 5649f80842a8SMat Martineau if (chan->srej_save_reqseq != control->reqseq || 5650f80842a8SMat Martineau !test_and_clear_bit(CONN_SREJ_ACT, 5651f80842a8SMat Martineau &chan->conn_state)) 5652f80842a8SMat Martineau l2cap_retransmit(chan, control); 5653f80842a8SMat Martineau } else { 5654f80842a8SMat Martineau l2cap_retransmit(chan, control); 5655f80842a8SMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) { 5656f80842a8SMat Martineau set_bit(CONN_SREJ_ACT, &chan->conn_state); 5657f80842a8SMat Martineau chan->srej_save_reqseq = control->reqseq; 5658f80842a8SMat Martineau } 5659f80842a8SMat Martineau } 5660f80842a8SMat Martineau } 5661d2a7ac5dSMat Martineau } 5662d2a7ac5dSMat Martineau 5663d2a7ac5dSMat Martineau static void l2cap_handle_rej(struct l2cap_chan *chan, 5664d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 5665d2a7ac5dSMat Martineau { 5666fcd289dfSMat Martineau struct sk_buff *skb; 5667fcd289dfSMat Martineau 5668fcd289dfSMat Martineau BT_DBG("chan %p, control %p", chan, control); 5669fcd289dfSMat Martineau 5670fcd289dfSMat Martineau if (control->reqseq == chan->next_tx_seq) { 5671fcd289dfSMat Martineau BT_DBG("Invalid reqseq %d, disconnecting", control->reqseq); 56725e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5673fcd289dfSMat Martineau return; 5674fcd289dfSMat Martineau } 5675fcd289dfSMat Martineau 5676fcd289dfSMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, control->reqseq); 5677fcd289dfSMat Martineau 5678fcd289dfSMat Martineau if (chan->max_tx && skb && 5679fcd289dfSMat Martineau bt_cb(skb)->control.retries >= chan->max_tx) { 5680fcd289dfSMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 56815e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5682fcd289dfSMat Martineau return; 5683fcd289dfSMat Martineau } 5684fcd289dfSMat Martineau 5685fcd289dfSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 5686fcd289dfSMat Martineau 5687fcd289dfSMat Martineau l2cap_pass_to_tx(chan, control); 5688fcd289dfSMat Martineau 5689fcd289dfSMat Martineau if (control->final) { 5690fcd289dfSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, &chan->conn_state)) 5691fcd289dfSMat Martineau l2cap_retransmit_all(chan, control); 5692fcd289dfSMat Martineau } else { 5693fcd289dfSMat Martineau l2cap_retransmit_all(chan, control); 5694fcd289dfSMat Martineau l2cap_ertm_send(chan); 5695fcd289dfSMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) 5696fcd289dfSMat Martineau set_bit(CONN_REJ_ACT, &chan->conn_state); 5697fcd289dfSMat Martineau } 5698d2a7ac5dSMat Martineau } 5699d2a7ac5dSMat Martineau 57004b51dae9SMat Martineau static u8 l2cap_classify_txseq(struct l2cap_chan *chan, u16 txseq) 57014b51dae9SMat Martineau { 57024b51dae9SMat Martineau BT_DBG("chan %p, txseq %d", chan, txseq); 57034b51dae9SMat Martineau 57044b51dae9SMat Martineau BT_DBG("last_acked_seq %d, expected_tx_seq %d", chan->last_acked_seq, 57054b51dae9SMat Martineau chan->expected_tx_seq); 57064b51dae9SMat Martineau 57074b51dae9SMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 57084b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= 57094b51dae9SMat Martineau chan->tx_win) { 57104b51dae9SMat Martineau /* See notes below regarding "double poll" and 57114b51dae9SMat Martineau * invalid packets. 57124b51dae9SMat Martineau */ 57134b51dae9SMat Martineau if (chan->tx_win <= ((chan->tx_win_max + 1) >> 1)) { 57144b51dae9SMat Martineau BT_DBG("Invalid/Ignore - after SREJ"); 57154b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID_IGNORE; 57164b51dae9SMat Martineau } else { 57174b51dae9SMat Martineau BT_DBG("Invalid - in window after SREJ sent"); 57184b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 57194b51dae9SMat Martineau } 57204b51dae9SMat Martineau } 57214b51dae9SMat Martineau 57224b51dae9SMat Martineau if (chan->srej_list.head == txseq) { 57234b51dae9SMat Martineau BT_DBG("Expected SREJ"); 57244b51dae9SMat Martineau return L2CAP_TXSEQ_EXPECTED_SREJ; 57254b51dae9SMat Martineau } 57264b51dae9SMat Martineau 57274b51dae9SMat Martineau if (l2cap_ertm_seq_in_queue(&chan->srej_q, txseq)) { 57284b51dae9SMat Martineau BT_DBG("Duplicate SREJ - txseq already stored"); 57294b51dae9SMat Martineau return L2CAP_TXSEQ_DUPLICATE_SREJ; 57304b51dae9SMat Martineau } 57314b51dae9SMat Martineau 57324b51dae9SMat Martineau if (l2cap_seq_list_contains(&chan->srej_list, txseq)) { 57334b51dae9SMat Martineau BT_DBG("Unexpected SREJ - not requested"); 57344b51dae9SMat Martineau return L2CAP_TXSEQ_UNEXPECTED_SREJ; 57354b51dae9SMat Martineau } 57364b51dae9SMat Martineau } 57374b51dae9SMat Martineau 57384b51dae9SMat Martineau if (chan->expected_tx_seq == txseq) { 57394b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= 57404b51dae9SMat Martineau chan->tx_win) { 57414b51dae9SMat Martineau BT_DBG("Invalid - txseq outside tx window"); 57424b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 57434b51dae9SMat Martineau } else { 57444b51dae9SMat Martineau BT_DBG("Expected"); 57454b51dae9SMat Martineau return L2CAP_TXSEQ_EXPECTED; 57464b51dae9SMat Martineau } 57474b51dae9SMat Martineau } 57484b51dae9SMat Martineau 57494b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) < 57502d792818SGustavo Padovan __seq_offset(chan, chan->expected_tx_seq, chan->last_acked_seq)) { 57514b51dae9SMat Martineau BT_DBG("Duplicate - expected_tx_seq later than txseq"); 57524b51dae9SMat Martineau return L2CAP_TXSEQ_DUPLICATE; 57534b51dae9SMat Martineau } 57544b51dae9SMat Martineau 57554b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= chan->tx_win) { 57564b51dae9SMat Martineau /* A source of invalid packets is a "double poll" condition, 57574b51dae9SMat Martineau * where delays cause us to send multiple poll packets. If 57584b51dae9SMat Martineau * the remote stack receives and processes both polls, 57594b51dae9SMat Martineau * sequence numbers can wrap around in such a way that a 57604b51dae9SMat Martineau * resent frame has a sequence number that looks like new data 57614b51dae9SMat Martineau * with a sequence gap. This would trigger an erroneous SREJ 57624b51dae9SMat Martineau * request. 57634b51dae9SMat Martineau * 57644b51dae9SMat Martineau * Fortunately, this is impossible with a tx window that's 57654b51dae9SMat Martineau * less than half of the maximum sequence number, which allows 57664b51dae9SMat Martineau * invalid frames to be safely ignored. 57674b51dae9SMat Martineau * 57684b51dae9SMat Martineau * With tx window sizes greater than half of the tx window 57694b51dae9SMat Martineau * maximum, the frame is invalid and cannot be ignored. This 57704b51dae9SMat Martineau * causes a disconnect. 57714b51dae9SMat Martineau */ 57724b51dae9SMat Martineau 57734b51dae9SMat Martineau if (chan->tx_win <= ((chan->tx_win_max + 1) >> 1)) { 57744b51dae9SMat Martineau BT_DBG("Invalid/Ignore - txseq outside tx window"); 57754b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID_IGNORE; 57764b51dae9SMat Martineau } else { 57774b51dae9SMat Martineau BT_DBG("Invalid - txseq outside tx window"); 57784b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 57794b51dae9SMat Martineau } 57804b51dae9SMat Martineau } else { 57814b51dae9SMat Martineau BT_DBG("Unexpected - txseq indicates missing frames"); 57824b51dae9SMat Martineau return L2CAP_TXSEQ_UNEXPECTED; 57834b51dae9SMat Martineau } 57844b51dae9SMat Martineau } 57854b51dae9SMat Martineau 5786d2a7ac5dSMat Martineau static int l2cap_rx_state_recv(struct l2cap_chan *chan, 5787d2a7ac5dSMat Martineau struct l2cap_ctrl *control, 5788d2a7ac5dSMat Martineau struct sk_buff *skb, u8 event) 5789d2a7ac5dSMat Martineau { 5790d2a7ac5dSMat Martineau int err = 0; 5791941247f9SPeter Senna Tschudin bool skb_in_use = false; 5792d2a7ac5dSMat Martineau 5793d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 5794d2a7ac5dSMat Martineau event); 5795d2a7ac5dSMat Martineau 5796d2a7ac5dSMat Martineau switch (event) { 5797d2a7ac5dSMat Martineau case L2CAP_EV_RECV_IFRAME: 5798d2a7ac5dSMat Martineau switch (l2cap_classify_txseq(chan, control->txseq)) { 5799d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED: 5800d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 5801d2a7ac5dSMat Martineau 5802d2a7ac5dSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 5803d2a7ac5dSMat Martineau BT_DBG("Busy, discarding expected seq %d", 5804d2a7ac5dSMat Martineau control->txseq); 5805d2a7ac5dSMat Martineau break; 5806d2a7ac5dSMat Martineau } 5807d2a7ac5dSMat Martineau 5808d2a7ac5dSMat Martineau chan->expected_tx_seq = __next_seq(chan, 5809d2a7ac5dSMat Martineau control->txseq); 5810d2a7ac5dSMat Martineau 5811d2a7ac5dSMat Martineau chan->buffer_seq = chan->expected_tx_seq; 5812941247f9SPeter Senna Tschudin skb_in_use = true; 5813d2a7ac5dSMat Martineau 5814d2a7ac5dSMat Martineau err = l2cap_reassemble_sdu(chan, skb, control); 5815d2a7ac5dSMat Martineau if (err) 5816d2a7ac5dSMat Martineau break; 5817d2a7ac5dSMat Martineau 5818d2a7ac5dSMat Martineau if (control->final) { 5819d2a7ac5dSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, 5820d2a7ac5dSMat Martineau &chan->conn_state)) { 5821d2a7ac5dSMat Martineau control->final = 0; 5822d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 5823d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 5824d2a7ac5dSMat Martineau } 5825d2a7ac5dSMat Martineau } 5826d2a7ac5dSMat Martineau 5827d2a7ac5dSMat Martineau if (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) 5828d2a7ac5dSMat Martineau l2cap_send_ack(chan); 5829d2a7ac5dSMat Martineau break; 5830d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED: 5831d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 5832d2a7ac5dSMat Martineau 5833d2a7ac5dSMat Martineau /* Can't issue SREJ frames in the local busy state. 5834d2a7ac5dSMat Martineau * Drop this frame, it will be seen as missing 5835d2a7ac5dSMat Martineau * when local busy is exited. 5836d2a7ac5dSMat Martineau */ 5837d2a7ac5dSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 5838d2a7ac5dSMat Martineau BT_DBG("Busy, discarding unexpected seq %d", 5839d2a7ac5dSMat Martineau control->txseq); 5840d2a7ac5dSMat Martineau break; 5841d2a7ac5dSMat Martineau } 5842d2a7ac5dSMat Martineau 5843d2a7ac5dSMat Martineau /* There was a gap in the sequence, so an SREJ 5844d2a7ac5dSMat Martineau * must be sent for each missing frame. The 5845d2a7ac5dSMat Martineau * current frame is stored for later use. 5846d2a7ac5dSMat Martineau */ 5847d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 5848941247f9SPeter Senna Tschudin skb_in_use = true; 5849d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 5850d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 5851d2a7ac5dSMat Martineau 5852d2a7ac5dSMat Martineau clear_bit(CONN_SREJ_ACT, &chan->conn_state); 5853d2a7ac5dSMat Martineau l2cap_seq_list_clear(&chan->srej_list); 5854d2a7ac5dSMat Martineau l2cap_send_srej(chan, control->txseq); 5855d2a7ac5dSMat Martineau 5856d2a7ac5dSMat Martineau chan->rx_state = L2CAP_RX_STATE_SREJ_SENT; 5857d2a7ac5dSMat Martineau break; 5858d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE: 5859d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 5860d2a7ac5dSMat Martineau break; 5861d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID_IGNORE: 5862d2a7ac5dSMat Martineau break; 5863d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID: 5864d2a7ac5dSMat Martineau default: 58655e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5866d2a7ac5dSMat Martineau break; 5867d2a7ac5dSMat Martineau } 5868d2a7ac5dSMat Martineau break; 5869d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RR: 5870d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 5871d2a7ac5dSMat Martineau if (control->final) { 5872d2a7ac5dSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 5873d2a7ac5dSMat Martineau 5874e6a3ee6eSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, &chan->conn_state) && 5875e6a3ee6eSMat Martineau !__chan_is_moving(chan)) { 5876d2a7ac5dSMat Martineau control->final = 0; 5877d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 5878d2a7ac5dSMat Martineau } 5879d2a7ac5dSMat Martineau 5880d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 5881d2a7ac5dSMat Martineau } else if (control->poll) { 5882d2a7ac5dSMat Martineau l2cap_send_i_or_rr_or_rnr(chan); 5883d2a7ac5dSMat Martineau } else { 5884d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 5885d2a7ac5dSMat Martineau &chan->conn_state) && 5886d2a7ac5dSMat Martineau chan->unacked_frames) 5887d2a7ac5dSMat Martineau __set_retrans_timer(chan); 5888d2a7ac5dSMat Martineau 5889d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 5890d2a7ac5dSMat Martineau } 5891d2a7ac5dSMat Martineau break; 5892d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RNR: 5893d2a7ac5dSMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 5894d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 5895d2a7ac5dSMat Martineau if (control && control->poll) { 5896d2a7ac5dSMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 5897d2a7ac5dSMat Martineau l2cap_send_rr_or_rnr(chan, 0); 5898d2a7ac5dSMat Martineau } 5899d2a7ac5dSMat Martineau __clear_retrans_timer(chan); 5900d2a7ac5dSMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 5901d2a7ac5dSMat Martineau break; 5902d2a7ac5dSMat Martineau case L2CAP_EV_RECV_REJ: 5903d2a7ac5dSMat Martineau l2cap_handle_rej(chan, control); 5904d2a7ac5dSMat Martineau break; 5905d2a7ac5dSMat Martineau case L2CAP_EV_RECV_SREJ: 5906d2a7ac5dSMat Martineau l2cap_handle_srej(chan, control); 5907d2a7ac5dSMat Martineau break; 5908d2a7ac5dSMat Martineau default: 5909d2a7ac5dSMat Martineau break; 5910d2a7ac5dSMat Martineau } 5911d2a7ac5dSMat Martineau 5912d2a7ac5dSMat Martineau if (skb && !skb_in_use) { 5913d2a7ac5dSMat Martineau BT_DBG("Freeing %p", skb); 5914d2a7ac5dSMat Martineau kfree_skb(skb); 5915d2a7ac5dSMat Martineau } 5916d2a7ac5dSMat Martineau 5917d2a7ac5dSMat Martineau return err; 5918d2a7ac5dSMat Martineau } 5919d2a7ac5dSMat Martineau 5920d2a7ac5dSMat Martineau static int l2cap_rx_state_srej_sent(struct l2cap_chan *chan, 5921d2a7ac5dSMat Martineau struct l2cap_ctrl *control, 5922d2a7ac5dSMat Martineau struct sk_buff *skb, u8 event) 5923d2a7ac5dSMat Martineau { 5924d2a7ac5dSMat Martineau int err = 0; 5925d2a7ac5dSMat Martineau u16 txseq = control->txseq; 5926941247f9SPeter Senna Tschudin bool skb_in_use = false; 5927d2a7ac5dSMat Martineau 5928d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 5929d2a7ac5dSMat Martineau event); 5930d2a7ac5dSMat Martineau 5931d2a7ac5dSMat Martineau switch (event) { 5932d2a7ac5dSMat Martineau case L2CAP_EV_RECV_IFRAME: 5933d2a7ac5dSMat Martineau switch (l2cap_classify_txseq(chan, txseq)) { 5934d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED: 5935d2a7ac5dSMat Martineau /* Keep frame for reassembly later */ 5936d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 5937d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 5938941247f9SPeter Senna Tschudin skb_in_use = true; 5939d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 5940d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 5941d2a7ac5dSMat Martineau 5942d2a7ac5dSMat Martineau chan->expected_tx_seq = __next_seq(chan, txseq); 5943d2a7ac5dSMat Martineau break; 5944d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED_SREJ: 5945d2a7ac5dSMat Martineau l2cap_seq_list_pop(&chan->srej_list); 5946d2a7ac5dSMat Martineau 5947d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 5948d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 5949941247f9SPeter Senna Tschudin skb_in_use = true; 5950d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 5951d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 5952d2a7ac5dSMat Martineau 5953d2a7ac5dSMat Martineau err = l2cap_rx_queued_iframes(chan); 5954d2a7ac5dSMat Martineau if (err) 5955d2a7ac5dSMat Martineau break; 5956d2a7ac5dSMat Martineau 5957d2a7ac5dSMat Martineau break; 5958d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED: 5959d2a7ac5dSMat Martineau /* Got a frame that can't be reassembled yet. 5960d2a7ac5dSMat Martineau * Save it for later, and send SREJs to cover 5961d2a7ac5dSMat Martineau * the missing frames. 5962d2a7ac5dSMat Martineau */ 5963d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 5964941247f9SPeter Senna Tschudin skb_in_use = true; 5965d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 5966d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 5967d2a7ac5dSMat Martineau 5968d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 5969d2a7ac5dSMat Martineau l2cap_send_srej(chan, control->txseq); 5970d2a7ac5dSMat Martineau break; 5971d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED_SREJ: 5972d2a7ac5dSMat Martineau /* This frame was requested with an SREJ, but 5973d2a7ac5dSMat Martineau * some expected retransmitted frames are 5974d2a7ac5dSMat Martineau * missing. Request retransmission of missing 5975d2a7ac5dSMat Martineau * SREJ'd frames. 5976d2a7ac5dSMat Martineau */ 5977d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 5978941247f9SPeter Senna Tschudin skb_in_use = true; 5979d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 5980d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 5981d2a7ac5dSMat Martineau 5982d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 5983d2a7ac5dSMat Martineau l2cap_send_srej_list(chan, control->txseq); 5984d2a7ac5dSMat Martineau break; 5985d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE_SREJ: 5986d2a7ac5dSMat Martineau /* We've already queued this frame. Drop this copy. */ 5987d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 5988d2a7ac5dSMat Martineau break; 5989d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE: 5990d2a7ac5dSMat Martineau /* Expecting a later sequence number, so this frame 5991d2a7ac5dSMat Martineau * was already received. Ignore it completely. 5992d2a7ac5dSMat Martineau */ 5993d2a7ac5dSMat Martineau break; 5994d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID_IGNORE: 5995d2a7ac5dSMat Martineau break; 5996d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID: 5997d2a7ac5dSMat Martineau default: 59985e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5999d2a7ac5dSMat Martineau break; 6000d2a7ac5dSMat Martineau } 6001d2a7ac5dSMat Martineau break; 6002d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RR: 6003d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6004d2a7ac5dSMat Martineau if (control->final) { 6005d2a7ac5dSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6006d2a7ac5dSMat Martineau 6007d2a7ac5dSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, 6008d2a7ac5dSMat Martineau &chan->conn_state)) { 6009d2a7ac5dSMat Martineau control->final = 0; 6010d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 6011d2a7ac5dSMat Martineau } 6012d2a7ac5dSMat Martineau 6013d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6014d2a7ac5dSMat Martineau } else if (control->poll) { 6015d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 6016d2a7ac5dSMat Martineau &chan->conn_state) && 6017d2a7ac5dSMat Martineau chan->unacked_frames) { 6018d2a7ac5dSMat Martineau __set_retrans_timer(chan); 6019d2a7ac5dSMat Martineau } 6020d2a7ac5dSMat Martineau 6021d2a7ac5dSMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 6022d2a7ac5dSMat Martineau l2cap_send_srej_tail(chan); 6023d2a7ac5dSMat Martineau } else { 6024d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 6025d2a7ac5dSMat Martineau &chan->conn_state) && 6026d2a7ac5dSMat Martineau chan->unacked_frames) 6027d2a7ac5dSMat Martineau __set_retrans_timer(chan); 6028d2a7ac5dSMat Martineau 6029d2a7ac5dSMat Martineau l2cap_send_ack(chan); 6030d2a7ac5dSMat Martineau } 6031d2a7ac5dSMat Martineau break; 6032d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RNR: 6033d2a7ac5dSMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6034d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6035d2a7ac5dSMat Martineau if (control->poll) { 6036d2a7ac5dSMat Martineau l2cap_send_srej_tail(chan); 6037d2a7ac5dSMat Martineau } else { 6038d2a7ac5dSMat Martineau struct l2cap_ctrl rr_control; 6039d2a7ac5dSMat Martineau memset(&rr_control, 0, sizeof(rr_control)); 6040d2a7ac5dSMat Martineau rr_control.sframe = 1; 6041d2a7ac5dSMat Martineau rr_control.super = L2CAP_SUPER_RR; 6042d2a7ac5dSMat Martineau rr_control.reqseq = chan->buffer_seq; 6043d2a7ac5dSMat Martineau l2cap_send_sframe(chan, &rr_control); 6044d2a7ac5dSMat Martineau } 6045d2a7ac5dSMat Martineau 6046d2a7ac5dSMat Martineau break; 6047d2a7ac5dSMat Martineau case L2CAP_EV_RECV_REJ: 6048d2a7ac5dSMat Martineau l2cap_handle_rej(chan, control); 6049d2a7ac5dSMat Martineau break; 6050d2a7ac5dSMat Martineau case L2CAP_EV_RECV_SREJ: 6051d2a7ac5dSMat Martineau l2cap_handle_srej(chan, control); 6052d2a7ac5dSMat Martineau break; 6053d2a7ac5dSMat Martineau } 6054d2a7ac5dSMat Martineau 6055d2a7ac5dSMat Martineau if (skb && !skb_in_use) { 6056d2a7ac5dSMat Martineau BT_DBG("Freeing %p", skb); 6057d2a7ac5dSMat Martineau kfree_skb(skb); 6058d2a7ac5dSMat Martineau } 6059d2a7ac5dSMat Martineau 6060d2a7ac5dSMat Martineau return err; 6061d2a7ac5dSMat Martineau } 6062d2a7ac5dSMat Martineau 606332b32735SMat Martineau static int l2cap_finish_move(struct l2cap_chan *chan) 606432b32735SMat Martineau { 606532b32735SMat Martineau BT_DBG("chan %p", chan); 606632b32735SMat Martineau 606732b32735SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 606832b32735SMat Martineau 606932b32735SMat Martineau if (chan->hs_hcon) 607032b32735SMat Martineau chan->conn->mtu = chan->hs_hcon->hdev->block_mtu; 607132b32735SMat Martineau else 607232b32735SMat Martineau chan->conn->mtu = chan->conn->hcon->hdev->acl_mtu; 607332b32735SMat Martineau 607432b32735SMat Martineau return l2cap_resegment(chan); 607532b32735SMat Martineau } 607632b32735SMat Martineau 607732b32735SMat Martineau static int l2cap_rx_state_wait_p(struct l2cap_chan *chan, 607832b32735SMat Martineau struct l2cap_ctrl *control, 607932b32735SMat Martineau struct sk_buff *skb, u8 event) 608032b32735SMat Martineau { 608132b32735SMat Martineau int err; 608232b32735SMat Martineau 608332b32735SMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 608432b32735SMat Martineau event); 608532b32735SMat Martineau 608632b32735SMat Martineau if (!control->poll) 608732b32735SMat Martineau return -EPROTO; 608832b32735SMat Martineau 608932b32735SMat Martineau l2cap_process_reqseq(chan, control->reqseq); 609032b32735SMat Martineau 609132b32735SMat Martineau if (!skb_queue_empty(&chan->tx_q)) 609232b32735SMat Martineau chan->tx_send_head = skb_peek(&chan->tx_q); 609332b32735SMat Martineau else 609432b32735SMat Martineau chan->tx_send_head = NULL; 609532b32735SMat Martineau 609632b32735SMat Martineau /* Rewind next_tx_seq to the point expected 609732b32735SMat Martineau * by the receiver. 609832b32735SMat Martineau */ 609932b32735SMat Martineau chan->next_tx_seq = control->reqseq; 610032b32735SMat Martineau chan->unacked_frames = 0; 610132b32735SMat Martineau 610232b32735SMat Martineau err = l2cap_finish_move(chan); 610332b32735SMat Martineau if (err) 610432b32735SMat Martineau return err; 610532b32735SMat Martineau 610632b32735SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 610732b32735SMat Martineau l2cap_send_i_or_rr_or_rnr(chan); 610832b32735SMat Martineau 610932b32735SMat Martineau if (event == L2CAP_EV_RECV_IFRAME) 611032b32735SMat Martineau return -EPROTO; 611132b32735SMat Martineau 611232b32735SMat Martineau return l2cap_rx_state_recv(chan, control, NULL, event); 611332b32735SMat Martineau } 611432b32735SMat Martineau 611532b32735SMat Martineau static int l2cap_rx_state_wait_f(struct l2cap_chan *chan, 611632b32735SMat Martineau struct l2cap_ctrl *control, 611732b32735SMat Martineau struct sk_buff *skb, u8 event) 611832b32735SMat Martineau { 611932b32735SMat Martineau int err; 612032b32735SMat Martineau 612132b32735SMat Martineau if (!control->final) 612232b32735SMat Martineau return -EPROTO; 612332b32735SMat Martineau 612432b32735SMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 612532b32735SMat Martineau 612632b32735SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 612732b32735SMat Martineau l2cap_process_reqseq(chan, control->reqseq); 612832b32735SMat Martineau 612932b32735SMat Martineau if (!skb_queue_empty(&chan->tx_q)) 613032b32735SMat Martineau chan->tx_send_head = skb_peek(&chan->tx_q); 613132b32735SMat Martineau else 613232b32735SMat Martineau chan->tx_send_head = NULL; 613332b32735SMat Martineau 613432b32735SMat Martineau /* Rewind next_tx_seq to the point expected 613532b32735SMat Martineau * by the receiver. 613632b32735SMat Martineau */ 613732b32735SMat Martineau chan->next_tx_seq = control->reqseq; 613832b32735SMat Martineau chan->unacked_frames = 0; 613932b32735SMat Martineau 614032b32735SMat Martineau if (chan->hs_hcon) 614132b32735SMat Martineau chan->conn->mtu = chan->hs_hcon->hdev->block_mtu; 614232b32735SMat Martineau else 614332b32735SMat Martineau chan->conn->mtu = chan->conn->hcon->hdev->acl_mtu; 614432b32735SMat Martineau 614532b32735SMat Martineau err = l2cap_resegment(chan); 614632b32735SMat Martineau 614732b32735SMat Martineau if (!err) 614832b32735SMat Martineau err = l2cap_rx_state_recv(chan, control, skb, event); 614932b32735SMat Martineau 615032b32735SMat Martineau return err; 615132b32735SMat Martineau } 615232b32735SMat Martineau 6153d2a7ac5dSMat Martineau static bool __valid_reqseq(struct l2cap_chan *chan, u16 reqseq) 6154d2a7ac5dSMat Martineau { 6155d2a7ac5dSMat Martineau /* Make sure reqseq is for a packet that has been sent but not acked */ 6156d2a7ac5dSMat Martineau u16 unacked; 6157d2a7ac5dSMat Martineau 6158d2a7ac5dSMat Martineau unacked = __seq_offset(chan, chan->next_tx_seq, chan->expected_ack_seq); 6159d2a7ac5dSMat Martineau return __seq_offset(chan, chan->next_tx_seq, reqseq) <= unacked; 6160d2a7ac5dSMat Martineau } 6161d2a7ac5dSMat Martineau 6162cec8ab6eSMat Martineau static int l2cap_rx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 6163cec8ab6eSMat Martineau struct sk_buff *skb, u8 event) 61640a708f8fSGustavo F. Padovan { 6165d2a7ac5dSMat Martineau int err = 0; 6166d2a7ac5dSMat Martineau 6167d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d, state %d", chan, 6168d2a7ac5dSMat Martineau control, skb, event, chan->rx_state); 6169d2a7ac5dSMat Martineau 6170d2a7ac5dSMat Martineau if (__valid_reqseq(chan, control->reqseq)) { 6171d2a7ac5dSMat Martineau switch (chan->rx_state) { 6172d2a7ac5dSMat Martineau case L2CAP_RX_STATE_RECV: 6173d2a7ac5dSMat Martineau err = l2cap_rx_state_recv(chan, control, skb, event); 6174d2a7ac5dSMat Martineau break; 6175d2a7ac5dSMat Martineau case L2CAP_RX_STATE_SREJ_SENT: 6176d2a7ac5dSMat Martineau err = l2cap_rx_state_srej_sent(chan, control, skb, 6177d2a7ac5dSMat Martineau event); 6178d2a7ac5dSMat Martineau break; 617932b32735SMat Martineau case L2CAP_RX_STATE_WAIT_P: 618032b32735SMat Martineau err = l2cap_rx_state_wait_p(chan, control, skb, event); 618132b32735SMat Martineau break; 618232b32735SMat Martineau case L2CAP_RX_STATE_WAIT_F: 618332b32735SMat Martineau err = l2cap_rx_state_wait_f(chan, control, skb, event); 618432b32735SMat Martineau break; 6185d2a7ac5dSMat Martineau default: 6186d2a7ac5dSMat Martineau /* shut it down */ 6187d2a7ac5dSMat Martineau break; 6188d2a7ac5dSMat Martineau } 6189d2a7ac5dSMat Martineau } else { 6190d2a7ac5dSMat Martineau BT_DBG("Invalid reqseq %d (next_tx_seq %d, expected_ack_seq %d", 6191d2a7ac5dSMat Martineau control->reqseq, chan->next_tx_seq, 6192d2a7ac5dSMat Martineau chan->expected_ack_seq); 61935e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6194d2a7ac5dSMat Martineau } 6195d2a7ac5dSMat Martineau 6196d2a7ac5dSMat Martineau return err; 6197cec8ab6eSMat Martineau } 6198cec8ab6eSMat Martineau 6199cec8ab6eSMat Martineau static int l2cap_stream_rx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 6200cec8ab6eSMat Martineau struct sk_buff *skb) 6201cec8ab6eSMat Martineau { 62024b51dae9SMat Martineau int err = 0; 62034b51dae9SMat Martineau 62044b51dae9SMat Martineau BT_DBG("chan %p, control %p, skb %p, state %d", chan, control, skb, 62054b51dae9SMat Martineau chan->rx_state); 62064b51dae9SMat Martineau 62074b51dae9SMat Martineau if (l2cap_classify_txseq(chan, control->txseq) == 62084b51dae9SMat Martineau L2CAP_TXSEQ_EXPECTED) { 62094b51dae9SMat Martineau l2cap_pass_to_tx(chan, control); 62104b51dae9SMat Martineau 62114b51dae9SMat Martineau BT_DBG("buffer_seq %d->%d", chan->buffer_seq, 62124b51dae9SMat Martineau __next_seq(chan, chan->buffer_seq)); 62134b51dae9SMat Martineau 62144b51dae9SMat Martineau chan->buffer_seq = __next_seq(chan, chan->buffer_seq); 62154b51dae9SMat Martineau 62164b51dae9SMat Martineau l2cap_reassemble_sdu(chan, skb, control); 62174b51dae9SMat Martineau } else { 62184b51dae9SMat Martineau if (chan->sdu) { 62194b51dae9SMat Martineau kfree_skb(chan->sdu); 62204b51dae9SMat Martineau chan->sdu = NULL; 62214b51dae9SMat Martineau } 62224b51dae9SMat Martineau chan->sdu_last_frag = NULL; 62234b51dae9SMat Martineau chan->sdu_len = 0; 62244b51dae9SMat Martineau 62254b51dae9SMat Martineau if (skb) { 62264b51dae9SMat Martineau BT_DBG("Freeing %p", skb); 62274b51dae9SMat Martineau kfree_skb(skb); 62284b51dae9SMat Martineau } 62294b51dae9SMat Martineau } 62304b51dae9SMat Martineau 62314b51dae9SMat Martineau chan->last_acked_seq = control->txseq; 62324b51dae9SMat Martineau chan->expected_tx_seq = __next_seq(chan, control->txseq); 62334b51dae9SMat Martineau 62344b51dae9SMat Martineau return err; 6235cec8ab6eSMat Martineau } 6236cec8ab6eSMat Martineau 6237cec8ab6eSMat Martineau static int l2cap_data_rcv(struct l2cap_chan *chan, struct sk_buff *skb) 6238cec8ab6eSMat Martineau { 6239cec8ab6eSMat Martineau struct l2cap_ctrl *control = &bt_cb(skb)->control; 6240cec8ab6eSMat Martineau u16 len; 6241cec8ab6eSMat Martineau u8 event; 62420a708f8fSGustavo F. Padovan 6243b76bbd66SMat Martineau __unpack_control(chan, skb); 6244b76bbd66SMat Martineau 62450a708f8fSGustavo F. Padovan len = skb->len; 62460a708f8fSGustavo F. Padovan 62470a708f8fSGustavo F. Padovan /* 62480a708f8fSGustavo F. Padovan * We can just drop the corrupted I-frame here. 62490a708f8fSGustavo F. Padovan * Receiver will miss it and start proper recovery 6250cec8ab6eSMat Martineau * procedures and ask for retransmission. 62510a708f8fSGustavo F. Padovan */ 625247d1ec61SGustavo F. Padovan if (l2cap_check_fcs(chan, skb)) 62530a708f8fSGustavo F. Padovan goto drop; 62540a708f8fSGustavo F. Padovan 6255cec8ab6eSMat Martineau if (!control->sframe && control->sar == L2CAP_SAR_START) 625603a51213SAndrei Emeltchenko len -= L2CAP_SDULEN_SIZE; 62570a708f8fSGustavo F. Padovan 625847d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 625903a51213SAndrei Emeltchenko len -= L2CAP_FCS_SIZE; 62600a708f8fSGustavo F. Padovan 626147d1ec61SGustavo F. Padovan if (len > chan->mps) { 62625e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 62630a708f8fSGustavo F. Padovan goto drop; 62640a708f8fSGustavo F. Padovan } 62650a708f8fSGustavo F. Padovan 6266cec8ab6eSMat Martineau if (!control->sframe) { 6267cec8ab6eSMat Martineau int err; 62680a708f8fSGustavo F. Padovan 6269cec8ab6eSMat Martineau BT_DBG("iframe sar %d, reqseq %d, final %d, txseq %d", 6270cec8ab6eSMat Martineau control->sar, control->reqseq, control->final, 6271cec8ab6eSMat Martineau control->txseq); 6272836be934SAndrei Emeltchenko 6273cec8ab6eSMat Martineau /* Validate F-bit - F=0 always valid, F=1 only 6274cec8ab6eSMat Martineau * valid in TX WAIT_F 6275cec8ab6eSMat Martineau */ 6276cec8ab6eSMat Martineau if (control->final && chan->tx_state != L2CAP_TX_STATE_WAIT_F) 62770a708f8fSGustavo F. Padovan goto drop; 62780a708f8fSGustavo F. Padovan 6279cec8ab6eSMat Martineau if (chan->mode != L2CAP_MODE_STREAMING) { 6280cec8ab6eSMat Martineau event = L2CAP_EV_RECV_IFRAME; 6281cec8ab6eSMat Martineau err = l2cap_rx(chan, control, skb, event); 62820a708f8fSGustavo F. Padovan } else { 6283cec8ab6eSMat Martineau err = l2cap_stream_rx(chan, control, skb); 6284cec8ab6eSMat Martineau } 6285cec8ab6eSMat Martineau 6286cec8ab6eSMat Martineau if (err) 62875e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6288cec8ab6eSMat Martineau } else { 6289cec8ab6eSMat Martineau const u8 rx_func_to_event[4] = { 6290cec8ab6eSMat Martineau L2CAP_EV_RECV_RR, L2CAP_EV_RECV_REJ, 6291cec8ab6eSMat Martineau L2CAP_EV_RECV_RNR, L2CAP_EV_RECV_SREJ 6292cec8ab6eSMat Martineau }; 6293cec8ab6eSMat Martineau 6294cec8ab6eSMat Martineau /* Only I-frames are expected in streaming mode */ 6295cec8ab6eSMat Martineau if (chan->mode == L2CAP_MODE_STREAMING) 6296cec8ab6eSMat Martineau goto drop; 6297cec8ab6eSMat Martineau 6298cec8ab6eSMat Martineau BT_DBG("sframe reqseq %d, final %d, poll %d, super %d", 6299cec8ab6eSMat Martineau control->reqseq, control->final, control->poll, 6300cec8ab6eSMat Martineau control->super); 6301cec8ab6eSMat Martineau 63020a708f8fSGustavo F. Padovan if (len != 0) { 63031bb166e6SAndrei Emeltchenko BT_ERR("Trailing bytes: %d in sframe", len); 63045e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 63050a708f8fSGustavo F. Padovan goto drop; 63060a708f8fSGustavo F. Padovan } 63070a708f8fSGustavo F. Padovan 6308cec8ab6eSMat Martineau /* Validate F and P bits */ 6309cec8ab6eSMat Martineau if (control->final && (control->poll || 6310cec8ab6eSMat Martineau chan->tx_state != L2CAP_TX_STATE_WAIT_F)) 6311cec8ab6eSMat Martineau goto drop; 6312cec8ab6eSMat Martineau 6313cec8ab6eSMat Martineau event = rx_func_to_event[control->super]; 6314cec8ab6eSMat Martineau if (l2cap_rx(chan, control, skb, event)) 63155e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 63160a708f8fSGustavo F. Padovan } 63170a708f8fSGustavo F. Padovan 63180a708f8fSGustavo F. Padovan return 0; 63190a708f8fSGustavo F. Padovan 63200a708f8fSGustavo F. Padovan drop: 63210a708f8fSGustavo F. Padovan kfree_skb(skb); 63220a708f8fSGustavo F. Padovan return 0; 63230a708f8fSGustavo F. Padovan } 63240a708f8fSGustavo F. Padovan 632513ca56e0SAndrei Emeltchenko static void l2cap_data_channel(struct l2cap_conn *conn, u16 cid, 632613ca56e0SAndrei Emeltchenko struct sk_buff *skb) 63270a708f8fSGustavo F. Padovan { 632848454079SGustavo F. Padovan struct l2cap_chan *chan; 63290a708f8fSGustavo F. Padovan 6330baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, cid); 633148454079SGustavo F. Padovan if (!chan) { 633297e8e89dSAndrei Emeltchenko if (cid == L2CAP_CID_A2MP) { 633397e8e89dSAndrei Emeltchenko chan = a2mp_channel_create(conn, skb); 633497e8e89dSAndrei Emeltchenko if (!chan) { 633597e8e89dSAndrei Emeltchenko kfree_skb(skb); 633613ca56e0SAndrei Emeltchenko return; 633797e8e89dSAndrei Emeltchenko } 633897e8e89dSAndrei Emeltchenko 633997e8e89dSAndrei Emeltchenko l2cap_chan_lock(chan); 634097e8e89dSAndrei Emeltchenko } else { 63410a708f8fSGustavo F. Padovan BT_DBG("unknown cid 0x%4.4x", cid); 63426be36555SAndrei Emeltchenko /* Drop packet and return */ 63433379013bSDan Carpenter kfree_skb(skb); 634413ca56e0SAndrei Emeltchenko return; 63450a708f8fSGustavo F. Padovan } 634697e8e89dSAndrei Emeltchenko } 63470a708f8fSGustavo F. Padovan 634849208c9cSGustavo F. Padovan BT_DBG("chan %p, len %d", chan, skb->len); 63490a708f8fSGustavo F. Padovan 635089bc500eSGustavo F. Padovan if (chan->state != BT_CONNECTED) 63510a708f8fSGustavo F. Padovan goto drop; 63520a708f8fSGustavo F. Padovan 63530c1bc5c6SGustavo F. Padovan switch (chan->mode) { 63540a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 63550a708f8fSGustavo F. Padovan /* If socket recv buffers overflows we drop data here 63560a708f8fSGustavo F. Padovan * which is *bad* because L2CAP has to be reliable. 63570a708f8fSGustavo F. Padovan * But we don't have any other choice. L2CAP doesn't 63580a708f8fSGustavo F. Padovan * provide flow control mechanism. */ 63590a708f8fSGustavo F. Padovan 63600c1bc5c6SGustavo F. Padovan if (chan->imtu < skb->len) 63610a708f8fSGustavo F. Padovan goto drop; 63620a708f8fSGustavo F. Padovan 636380b98027SGustavo Padovan if (!chan->ops->recv(chan, skb)) 63640a708f8fSGustavo F. Padovan goto done; 63650a708f8fSGustavo F. Padovan break; 63660a708f8fSGustavo F. Padovan 63670a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 63680a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 6369cec8ab6eSMat Martineau l2cap_data_rcv(chan, skb); 63700a708f8fSGustavo F. Padovan goto done; 63710a708f8fSGustavo F. Padovan 63720a708f8fSGustavo F. Padovan default: 63730c1bc5c6SGustavo F. Padovan BT_DBG("chan %p: bad mode 0x%2.2x", chan, chan->mode); 63740a708f8fSGustavo F. Padovan break; 63750a708f8fSGustavo F. Padovan } 63760a708f8fSGustavo F. Padovan 63770a708f8fSGustavo F. Padovan drop: 63780a708f8fSGustavo F. Padovan kfree_skb(skb); 63790a708f8fSGustavo F. Padovan 63800a708f8fSGustavo F. Padovan done: 63816be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 63820a708f8fSGustavo F. Padovan } 63830a708f8fSGustavo F. Padovan 638484104b24SAndrei Emeltchenko static void l2cap_conless_channel(struct l2cap_conn *conn, __le16 psm, 638584104b24SAndrei Emeltchenko struct sk_buff *skb) 63860a708f8fSGustavo F. Padovan { 6387ae4fd2d3SMarcel Holtmann struct hci_conn *hcon = conn->hcon; 638823691d75SGustavo F. Padovan struct l2cap_chan *chan; 63890a708f8fSGustavo F. Padovan 6390ae4fd2d3SMarcel Holtmann if (hcon->type != ACL_LINK) 6391ae4fd2d3SMarcel Holtmann goto drop; 6392ae4fd2d3SMarcel Holtmann 6393bf20fd4eSJohan Hedberg chan = l2cap_global_chan_by_psm(0, psm, &hcon->src, &hcon->dst, 6394bf20fd4eSJohan Hedberg ACL_LINK); 639523691d75SGustavo F. Padovan if (!chan) 63960a708f8fSGustavo F. Padovan goto drop; 63970a708f8fSGustavo F. Padovan 63985b4cedaaSAndrei Emeltchenko BT_DBG("chan %p, len %d", chan, skb->len); 63990a708f8fSGustavo F. Padovan 640089bc500eSGustavo F. Padovan if (chan->state != BT_BOUND && chan->state != BT_CONNECTED) 64010a708f8fSGustavo F. Padovan goto drop; 64020a708f8fSGustavo F. Padovan 6403e13e21dcSVinicius Costa Gomes if (chan->imtu < skb->len) 64040a708f8fSGustavo F. Padovan goto drop; 64050a708f8fSGustavo F. Padovan 64062edf870dSMarcel Holtmann /* Store remote BD_ADDR and PSM for msg_name */ 640706ae3314SMarcel Holtmann bacpy(&bt_cb(skb)->bdaddr, &hcon->dst); 64082edf870dSMarcel Holtmann bt_cb(skb)->psm = psm; 64092edf870dSMarcel Holtmann 641080b98027SGustavo Padovan if (!chan->ops->recv(chan, skb)) 641184104b24SAndrei Emeltchenko return; 64120a708f8fSGustavo F. Padovan 64130a708f8fSGustavo F. Padovan drop: 64140a708f8fSGustavo F. Padovan kfree_skb(skb); 64150a708f8fSGustavo F. Padovan } 64160a708f8fSGustavo F. Padovan 641772f78356SMarcel Holtmann static void l2cap_att_channel(struct l2cap_conn *conn, 6418d9b88702SAndrei Emeltchenko struct sk_buff *skb) 64199f69bda6SGustavo F. Padovan { 6420b99707d7SMarcel Holtmann struct hci_conn *hcon = conn->hcon; 642123691d75SGustavo F. Padovan struct l2cap_chan *chan; 64229f69bda6SGustavo F. Padovan 6423b99707d7SMarcel Holtmann if (hcon->type != LE_LINK) 6424b99707d7SMarcel Holtmann goto drop; 6425b99707d7SMarcel Holtmann 6426af1c0134SJohan Hedberg chan = l2cap_global_chan_by_scid(BT_CONNECTED, L2CAP_CID_ATT, 642706ae3314SMarcel Holtmann &hcon->src, &hcon->dst); 642823691d75SGustavo F. Padovan if (!chan) 64299f69bda6SGustavo F. Padovan goto drop; 64309f69bda6SGustavo F. Padovan 64315b4cedaaSAndrei Emeltchenko BT_DBG("chan %p, len %d", chan, skb->len); 64329f69bda6SGustavo F. Padovan 6433cc8dba2bSMarcel Holtmann if (hci_blacklist_lookup(hcon->hdev, &hcon->dst, hcon->dst_type)) 6434cc8dba2bSMarcel Holtmann goto drop; 6435cc8dba2bSMarcel Holtmann 6436e13e21dcSVinicius Costa Gomes if (chan->imtu < skb->len) 64379f69bda6SGustavo F. Padovan goto drop; 64389f69bda6SGustavo F. Padovan 643980b98027SGustavo Padovan if (!chan->ops->recv(chan, skb)) 64406810fca7SAndrei Emeltchenko return; 64419f69bda6SGustavo F. Padovan 64429f69bda6SGustavo F. Padovan drop: 64439f69bda6SGustavo F. Padovan kfree_skb(skb); 64449f69bda6SGustavo F. Padovan } 64459f69bda6SGustavo F. Padovan 64460a708f8fSGustavo F. Padovan static void l2cap_recv_frame(struct l2cap_conn *conn, struct sk_buff *skb) 64470a708f8fSGustavo F. Padovan { 64480a708f8fSGustavo F. Padovan struct l2cap_hdr *lh = (void *) skb->data; 64490a708f8fSGustavo F. Padovan u16 cid, len; 64500a708f8fSGustavo F. Padovan __le16 psm; 64510a708f8fSGustavo F. Padovan 64520a708f8fSGustavo F. Padovan skb_pull(skb, L2CAP_HDR_SIZE); 64530a708f8fSGustavo F. Padovan cid = __le16_to_cpu(lh->cid); 64540a708f8fSGustavo F. Padovan len = __le16_to_cpu(lh->len); 64550a708f8fSGustavo F. Padovan 64560a708f8fSGustavo F. Padovan if (len != skb->len) { 64570a708f8fSGustavo F. Padovan kfree_skb(skb); 64580a708f8fSGustavo F. Padovan return; 64590a708f8fSGustavo F. Padovan } 64600a708f8fSGustavo F. Padovan 64610a708f8fSGustavo F. Padovan BT_DBG("len %d, cid 0x%4.4x", len, cid); 64620a708f8fSGustavo F. Padovan 64630a708f8fSGustavo F. Padovan switch (cid) { 64640a708f8fSGustavo F. Padovan case L2CAP_CID_SIGNALING: 64650a708f8fSGustavo F. Padovan l2cap_sig_channel(conn, skb); 64660a708f8fSGustavo F. Padovan break; 64670a708f8fSGustavo F. Padovan 64680a708f8fSGustavo F. Padovan case L2CAP_CID_CONN_LESS: 6469097db76cSAndrei Emeltchenko psm = get_unaligned((__le16 *) skb->data); 64700181a70fSAndrei Emeltchenko skb_pull(skb, L2CAP_PSMLEN_SIZE); 64710a708f8fSGustavo F. Padovan l2cap_conless_channel(conn, psm, skb); 64720a708f8fSGustavo F. Padovan break; 64730a708f8fSGustavo F. Padovan 6474073d1cf3SJohan Hedberg case L2CAP_CID_ATT: 647572f78356SMarcel Holtmann l2cap_att_channel(conn, skb); 64769f69bda6SGustavo F. Padovan break; 64779f69bda6SGustavo F. Padovan 6478a2877629SMarcel Holtmann case L2CAP_CID_LE_SIGNALING: 6479a2877629SMarcel Holtmann l2cap_le_sig_channel(conn, skb); 6480a2877629SMarcel Holtmann break; 6481a2877629SMarcel Holtmann 6482b501d6a1SAnderson Briglia case L2CAP_CID_SMP: 6483b501d6a1SAnderson Briglia if (smp_sig_channel(conn, skb)) 6484b501d6a1SAnderson Briglia l2cap_conn_del(conn->hcon, EACCES); 6485b501d6a1SAnderson Briglia break; 6486b501d6a1SAnderson Briglia 64870a708f8fSGustavo F. Padovan default: 64880a708f8fSGustavo F. Padovan l2cap_data_channel(conn, cid, skb); 64890a708f8fSGustavo F. Padovan break; 64900a708f8fSGustavo F. Padovan } 64910a708f8fSGustavo F. Padovan } 64920a708f8fSGustavo F. Padovan 64930a708f8fSGustavo F. Padovan /* ---- L2CAP interface with lower layer (HCI) ---- */ 64940a708f8fSGustavo F. Padovan 6495686ebf28SUlisses Furquim int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr) 64960a708f8fSGustavo F. Padovan { 64970a708f8fSGustavo F. Padovan int exact = 0, lm1 = 0, lm2 = 0; 649823691d75SGustavo F. Padovan struct l2cap_chan *c; 64990a708f8fSGustavo F. Padovan 65006ed93dc6SAndrei Emeltchenko BT_DBG("hdev %s, bdaddr %pMR", hdev->name, bdaddr); 65010a708f8fSGustavo F. Padovan 65020a708f8fSGustavo F. Padovan /* Find listening sockets and check their link_mode */ 650323691d75SGustavo F. Padovan read_lock(&chan_list_lock); 650423691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 650589bc500eSGustavo F. Padovan if (c->state != BT_LISTEN) 65060a708f8fSGustavo F. Padovan continue; 65070a708f8fSGustavo F. Padovan 65087eafc59eSMarcel Holtmann if (!bacmp(&c->src, &hdev->bdaddr)) { 65090a708f8fSGustavo F. Padovan lm1 |= HCI_LM_ACCEPT; 651043bd0f32SAndrei Emeltchenko if (test_bit(FLAG_ROLE_SWITCH, &c->flags)) 65110a708f8fSGustavo F. Padovan lm1 |= HCI_LM_MASTER; 65120a708f8fSGustavo F. Padovan exact++; 65137eafc59eSMarcel Holtmann } else if (!bacmp(&c->src, BDADDR_ANY)) { 65140a708f8fSGustavo F. Padovan lm2 |= HCI_LM_ACCEPT; 651543bd0f32SAndrei Emeltchenko if (test_bit(FLAG_ROLE_SWITCH, &c->flags)) 65160a708f8fSGustavo F. Padovan lm2 |= HCI_LM_MASTER; 65170a708f8fSGustavo F. Padovan } 65180a708f8fSGustavo F. Padovan } 651923691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 65200a708f8fSGustavo F. Padovan 65210a708f8fSGustavo F. Padovan return exact ? lm1 : lm2; 65220a708f8fSGustavo F. Padovan } 65230a708f8fSGustavo F. Padovan 65249e664631SAndrei Emeltchenko void l2cap_connect_cfm(struct hci_conn *hcon, u8 status) 65250a708f8fSGustavo F. Padovan { 65260a708f8fSGustavo F. Padovan struct l2cap_conn *conn; 65270a708f8fSGustavo F. Padovan 65286ed93dc6SAndrei Emeltchenko BT_DBG("hcon %p bdaddr %pMR status %d", hcon, &hcon->dst, status); 65290a708f8fSGustavo F. Padovan 65300a708f8fSGustavo F. Padovan if (!status) { 6531baf43251SClaudio Takahasi conn = l2cap_conn_add(hcon); 65320a708f8fSGustavo F. Padovan if (conn) 65330a708f8fSGustavo F. Padovan l2cap_conn_ready(conn); 6534ba6fc317SAndrei Emeltchenko } else { 6535e175072fSJoe Perches l2cap_conn_del(hcon, bt_to_errno(status)); 6536ba6fc317SAndrei Emeltchenko } 65370a708f8fSGustavo F. Padovan } 65380a708f8fSGustavo F. Padovan 6539686ebf28SUlisses Furquim int l2cap_disconn_ind(struct hci_conn *hcon) 65400a708f8fSGustavo F. Padovan { 65410a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 65420a708f8fSGustavo F. Padovan 65430a708f8fSGustavo F. Padovan BT_DBG("hcon %p", hcon); 65440a708f8fSGustavo F. Padovan 6545686ebf28SUlisses Furquim if (!conn) 65469f5a0d7bSAndrei Emeltchenko return HCI_ERROR_REMOTE_USER_TERM; 65470a708f8fSGustavo F. Padovan return conn->disc_reason; 65480a708f8fSGustavo F. Padovan } 65490a708f8fSGustavo F. Padovan 65509e664631SAndrei Emeltchenko void l2cap_disconn_cfm(struct hci_conn *hcon, u8 reason) 65510a708f8fSGustavo F. Padovan { 65520a708f8fSGustavo F. Padovan BT_DBG("hcon %p reason %d", hcon, reason); 65530a708f8fSGustavo F. Padovan 6554e175072fSJoe Perches l2cap_conn_del(hcon, bt_to_errno(reason)); 65550a708f8fSGustavo F. Padovan } 65560a708f8fSGustavo F. Padovan 65574343478fSGustavo F. Padovan static inline void l2cap_check_encryption(struct l2cap_chan *chan, u8 encrypt) 65580a708f8fSGustavo F. Padovan { 6559715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) 65600a708f8fSGustavo F. Padovan return; 65610a708f8fSGustavo F. Padovan 65620a708f8fSGustavo F. Padovan if (encrypt == 0x00) { 65634343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_MEDIUM) { 6564ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_ENC_TIMEOUT); 65654343478fSGustavo F. Padovan } else if (chan->sec_level == BT_SECURITY_HIGH) 65660f852724SGustavo F. Padovan l2cap_chan_close(chan, ECONNREFUSED); 65670a708f8fSGustavo F. Padovan } else { 65684343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_MEDIUM) 6569c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 65700a708f8fSGustavo F. Padovan } 65710a708f8fSGustavo F. Padovan } 65720a708f8fSGustavo F. Padovan 6573686ebf28SUlisses Furquim int l2cap_security_cfm(struct hci_conn *hcon, u8 status, u8 encrypt) 65740a708f8fSGustavo F. Padovan { 65750a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 657648454079SGustavo F. Padovan struct l2cap_chan *chan; 65770a708f8fSGustavo F. Padovan 65780a708f8fSGustavo F. Padovan if (!conn) 65790a708f8fSGustavo F. Padovan return 0; 65800a708f8fSGustavo F. Padovan 658189d8b407SAndrei Emeltchenko BT_DBG("conn %p status 0x%2.2x encrypt %u", conn, status, encrypt); 65820a708f8fSGustavo F. Padovan 6583160dc6acSVinicius Costa Gomes if (hcon->type == LE_LINK) { 658435d4adccSHemant Gupta if (!status && encrypt) 6585160dc6acSVinicius Costa Gomes smp_distribute_keys(conn, 0); 658617cd3f37SUlisses Furquim cancel_delayed_work(&conn->security_timer); 6587160dc6acSVinicius Costa Gomes } 6588160dc6acSVinicius Costa Gomes 65893df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 65900a708f8fSGustavo F. Padovan 65913df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 65926be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 65930a708f8fSGustavo F. Padovan 659489d8b407SAndrei Emeltchenko BT_DBG("chan %p scid 0x%4.4x state %s", chan, chan->scid, 659589d8b407SAndrei Emeltchenko state_to_string(chan->state)); 6596f1cb9af5SVinicius Costa Gomes 659778eb2f98SAndrei Emeltchenko if (chan->chan_type == L2CAP_CHAN_CONN_FIX_A2MP) { 659878eb2f98SAndrei Emeltchenko l2cap_chan_unlock(chan); 659978eb2f98SAndrei Emeltchenko continue; 660078eb2f98SAndrei Emeltchenko } 660178eb2f98SAndrei Emeltchenko 6602073d1cf3SJohan Hedberg if (chan->scid == L2CAP_CID_ATT) { 6603f1cb9af5SVinicius Costa Gomes if (!status && encrypt) { 6604f1cb9af5SVinicius Costa Gomes chan->sec_level = hcon->sec_level; 6605cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 6606f1cb9af5SVinicius Costa Gomes } 6607f1cb9af5SVinicius Costa Gomes 66086be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 6609f1cb9af5SVinicius Costa Gomes continue; 6610f1cb9af5SVinicius Costa Gomes } 6611f1cb9af5SVinicius Costa Gomes 661296eff46eSAndrei Emeltchenko if (!__l2cap_no_conn_pending(chan)) { 66136be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 66140a708f8fSGustavo F. Padovan continue; 66150a708f8fSGustavo F. Padovan } 66160a708f8fSGustavo F. Padovan 661789bc500eSGustavo F. Padovan if (!status && (chan->state == BT_CONNECTED || 661889bc500eSGustavo F. Padovan chan->state == BT_CONFIG)) { 6619d97c899bSMarcel Holtmann chan->ops->resume(chan); 66204343478fSGustavo F. Padovan l2cap_check_encryption(chan, encrypt); 66216be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 66220a708f8fSGustavo F. Padovan continue; 66230a708f8fSGustavo F. Padovan } 66240a708f8fSGustavo F. Padovan 662589bc500eSGustavo F. Padovan if (chan->state == BT_CONNECT) { 66266d3c15daSJohan Hedberg if (!status) 662793c3e8f5SAndrei Emeltchenko l2cap_start_connection(chan); 66286d3c15daSJohan Hedberg else 6629ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_TIMEOUT); 663089bc500eSGustavo F. Padovan } else if (chan->state == BT_CONNECT2) { 66310a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 6632df3c3931SJohan Hedberg __u16 res, stat; 66330a708f8fSGustavo F. Padovan 66340a708f8fSGustavo F. Padovan if (!status) { 6635bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 6636df3c3931SJohan Hedberg res = L2CAP_CR_PEND; 6637df3c3931SJohan Hedberg stat = L2CAP_CS_AUTHOR_PEND; 66382dc4e510SGustavo Padovan chan->ops->defer(chan); 6639df3c3931SJohan Hedberg } else { 6640acdcabf5SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 6641df3c3931SJohan Hedberg res = L2CAP_CR_SUCCESS; 6642df3c3931SJohan Hedberg stat = L2CAP_CS_NO_INFO; 6643df3c3931SJohan Hedberg } 66440a708f8fSGustavo F. Padovan } else { 6645acdcabf5SGustavo Padovan l2cap_state_change(chan, BT_DISCONN); 6646ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_TIMEOUT); 6647df3c3931SJohan Hedberg res = L2CAP_CR_SEC_BLOCK; 6648df3c3931SJohan Hedberg stat = L2CAP_CS_NO_INFO; 66490a708f8fSGustavo F. Padovan } 66500a708f8fSGustavo F. Padovan 6651fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 6652fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 6653df3c3931SJohan Hedberg rsp.result = cpu_to_le16(res); 6654df3c3931SJohan Hedberg rsp.status = cpu_to_le16(stat); 6655fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 6656fc7f8a7eSGustavo F. Padovan sizeof(rsp), &rsp); 66572d369359SMat Martineau 66582d369359SMat Martineau if (!test_bit(CONF_REQ_SENT, &chan->conf_state) && 66592d369359SMat Martineau res == L2CAP_CR_SUCCESS) { 66602d369359SMat Martineau char buf[128]; 66612d369359SMat Martineau set_bit(CONF_REQ_SENT, &chan->conf_state); 66622d369359SMat Martineau l2cap_send_cmd(conn, l2cap_get_ident(conn), 66632d369359SMat Martineau L2CAP_CONF_REQ, 66642d369359SMat Martineau l2cap_build_conf_req(chan, buf), 66652d369359SMat Martineau buf); 66662d369359SMat Martineau chan->num_conf_req++; 66672d369359SMat Martineau } 66680a708f8fSGustavo F. Padovan } 66690a708f8fSGustavo F. Padovan 66706be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 66710a708f8fSGustavo F. Padovan } 66720a708f8fSGustavo F. Padovan 66733df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 66740a708f8fSGustavo F. Padovan 66750a708f8fSGustavo F. Padovan return 0; 66760a708f8fSGustavo F. Padovan } 66770a708f8fSGustavo F. Padovan 6678686ebf28SUlisses Furquim int l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags) 66790a708f8fSGustavo F. Padovan { 66800a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 6681d73a0988SAndrei Emeltchenko struct l2cap_hdr *hdr; 6682d73a0988SAndrei Emeltchenko int len; 66830a708f8fSGustavo F. Padovan 66841d13a254SAndrei Emeltchenko /* For AMP controller do not create l2cap conn */ 66851d13a254SAndrei Emeltchenko if (!conn && hcon->hdev->dev_type != HCI_BREDR) 66861d13a254SAndrei Emeltchenko goto drop; 66870a708f8fSGustavo F. Padovan 66880a708f8fSGustavo F. Padovan if (!conn) 6689baf43251SClaudio Takahasi conn = l2cap_conn_add(hcon); 66900a708f8fSGustavo F. Padovan 66910a708f8fSGustavo F. Padovan if (!conn) 66920a708f8fSGustavo F. Padovan goto drop; 66930a708f8fSGustavo F. Padovan 66940a708f8fSGustavo F. Padovan BT_DBG("conn %p len %d flags 0x%x", conn, skb->len, flags); 66950a708f8fSGustavo F. Padovan 6696d73a0988SAndrei Emeltchenko switch (flags) { 6697d73a0988SAndrei Emeltchenko case ACL_START: 6698d73a0988SAndrei Emeltchenko case ACL_START_NO_FLUSH: 6699d73a0988SAndrei Emeltchenko case ACL_COMPLETE: 67000a708f8fSGustavo F. Padovan if (conn->rx_len) { 67010a708f8fSGustavo F. Padovan BT_ERR("Unexpected start frame (len %d)", skb->len); 67020a708f8fSGustavo F. Padovan kfree_skb(conn->rx_skb); 67030a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 67040a708f8fSGustavo F. Padovan conn->rx_len = 0; 67050a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 67060a708f8fSGustavo F. Padovan } 67070a708f8fSGustavo F. Padovan 67080a708f8fSGustavo F. Padovan /* Start fragment always begin with Basic L2CAP header */ 67090a708f8fSGustavo F. Padovan if (skb->len < L2CAP_HDR_SIZE) { 67100a708f8fSGustavo F. Padovan BT_ERR("Frame is too short (len %d)", skb->len); 67110a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 67120a708f8fSGustavo F. Padovan goto drop; 67130a708f8fSGustavo F. Padovan } 67140a708f8fSGustavo F. Padovan 67150a708f8fSGustavo F. Padovan hdr = (struct l2cap_hdr *) skb->data; 67160a708f8fSGustavo F. Padovan len = __le16_to_cpu(hdr->len) + L2CAP_HDR_SIZE; 67170a708f8fSGustavo F. Padovan 67180a708f8fSGustavo F. Padovan if (len == skb->len) { 67190a708f8fSGustavo F. Padovan /* Complete frame received */ 67200a708f8fSGustavo F. Padovan l2cap_recv_frame(conn, skb); 67210a708f8fSGustavo F. Padovan return 0; 67220a708f8fSGustavo F. Padovan } 67230a708f8fSGustavo F. Padovan 67240a708f8fSGustavo F. Padovan BT_DBG("Start: total len %d, frag len %d", len, skb->len); 67250a708f8fSGustavo F. Padovan 67260a708f8fSGustavo F. Padovan if (skb->len > len) { 67270a708f8fSGustavo F. Padovan BT_ERR("Frame is too long (len %d, expected len %d)", 67280a708f8fSGustavo F. Padovan skb->len, len); 67290a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 67300a708f8fSGustavo F. Padovan goto drop; 67310a708f8fSGustavo F. Padovan } 67320a708f8fSGustavo F. Padovan 67330a708f8fSGustavo F. Padovan /* Allocate skb for the complete frame (with header) */ 67348bcde1f2SGustavo Padovan conn->rx_skb = bt_skb_alloc(len, GFP_KERNEL); 67350a708f8fSGustavo F. Padovan if (!conn->rx_skb) 67360a708f8fSGustavo F. Padovan goto drop; 67370a708f8fSGustavo F. Padovan 67380a708f8fSGustavo F. Padovan skb_copy_from_linear_data(skb, skb_put(conn->rx_skb, skb->len), 67390a708f8fSGustavo F. Padovan skb->len); 67400a708f8fSGustavo F. Padovan conn->rx_len = len - skb->len; 6741d73a0988SAndrei Emeltchenko break; 6742d73a0988SAndrei Emeltchenko 6743d73a0988SAndrei Emeltchenko case ACL_CONT: 67440a708f8fSGustavo F. Padovan BT_DBG("Cont: frag len %d (expecting %d)", skb->len, conn->rx_len); 67450a708f8fSGustavo F. Padovan 67460a708f8fSGustavo F. Padovan if (!conn->rx_len) { 67470a708f8fSGustavo F. Padovan BT_ERR("Unexpected continuation frame (len %d)", skb->len); 67480a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 67490a708f8fSGustavo F. Padovan goto drop; 67500a708f8fSGustavo F. Padovan } 67510a708f8fSGustavo F. Padovan 67520a708f8fSGustavo F. Padovan if (skb->len > conn->rx_len) { 67530a708f8fSGustavo F. Padovan BT_ERR("Fragment is too long (len %d, expected %d)", 67540a708f8fSGustavo F. Padovan skb->len, conn->rx_len); 67550a708f8fSGustavo F. Padovan kfree_skb(conn->rx_skb); 67560a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 67570a708f8fSGustavo F. Padovan conn->rx_len = 0; 67580a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 67590a708f8fSGustavo F. Padovan goto drop; 67600a708f8fSGustavo F. Padovan } 67610a708f8fSGustavo F. Padovan 67620a708f8fSGustavo F. Padovan skb_copy_from_linear_data(skb, skb_put(conn->rx_skb, skb->len), 67630a708f8fSGustavo F. Padovan skb->len); 67640a708f8fSGustavo F. Padovan conn->rx_len -= skb->len; 67650a708f8fSGustavo F. Padovan 67660a708f8fSGustavo F. Padovan if (!conn->rx_len) { 6767c4e5bafaSJohan Hedberg /* Complete frame received. l2cap_recv_frame 6768c4e5bafaSJohan Hedberg * takes ownership of the skb so set the global 6769c4e5bafaSJohan Hedberg * rx_skb pointer to NULL first. 6770c4e5bafaSJohan Hedberg */ 6771c4e5bafaSJohan Hedberg struct sk_buff *rx_skb = conn->rx_skb; 67720a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 6773c4e5bafaSJohan Hedberg l2cap_recv_frame(conn, rx_skb); 67740a708f8fSGustavo F. Padovan } 6775d73a0988SAndrei Emeltchenko break; 67760a708f8fSGustavo F. Padovan } 67770a708f8fSGustavo F. Padovan 67780a708f8fSGustavo F. Padovan drop: 67790a708f8fSGustavo F. Padovan kfree_skb(skb); 67800a708f8fSGustavo F. Padovan return 0; 67810a708f8fSGustavo F. Padovan } 67820a708f8fSGustavo F. Padovan 67830a708f8fSGustavo F. Padovan static int l2cap_debugfs_show(struct seq_file *f, void *p) 67840a708f8fSGustavo F. Padovan { 678523691d75SGustavo F. Padovan struct l2cap_chan *c; 67860a708f8fSGustavo F. Padovan 6787333055f2SGustavo F. Padovan read_lock(&chan_list_lock); 67880a708f8fSGustavo F. Padovan 678923691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 6790fcb73338SAndrei Emeltchenko seq_printf(f, "%pMR %pMR %d %d 0x%4.4x 0x%4.4x %d %d %d %d\n", 67917eafc59eSMarcel Holtmann &c->src, &c->dst, 679289bc500eSGustavo F. Padovan c->state, __le16_to_cpu(c->psm), 679323691d75SGustavo F. Padovan c->scid, c->dcid, c->imtu, c->omtu, 679423691d75SGustavo F. Padovan c->sec_level, c->mode); 67950a708f8fSGustavo F. Padovan } 67960a708f8fSGustavo F. Padovan 6797333055f2SGustavo F. Padovan read_unlock(&chan_list_lock); 67980a708f8fSGustavo F. Padovan 67990a708f8fSGustavo F. Padovan return 0; 68000a708f8fSGustavo F. Padovan } 68010a708f8fSGustavo F. Padovan 68020a708f8fSGustavo F. Padovan static int l2cap_debugfs_open(struct inode *inode, struct file *file) 68030a708f8fSGustavo F. Padovan { 68040a708f8fSGustavo F. Padovan return single_open(file, l2cap_debugfs_show, inode->i_private); 68050a708f8fSGustavo F. Padovan } 68060a708f8fSGustavo F. Padovan 68070a708f8fSGustavo F. Padovan static const struct file_operations l2cap_debugfs_fops = { 68080a708f8fSGustavo F. Padovan .open = l2cap_debugfs_open, 68090a708f8fSGustavo F. Padovan .read = seq_read, 68100a708f8fSGustavo F. Padovan .llseek = seq_lseek, 68110a708f8fSGustavo F. Padovan .release = single_release, 68120a708f8fSGustavo F. Padovan }; 68130a708f8fSGustavo F. Padovan 68140a708f8fSGustavo F. Padovan static struct dentry *l2cap_debugfs; 68150a708f8fSGustavo F. Padovan 681664274518SGustavo F. Padovan int __init l2cap_init(void) 68170a708f8fSGustavo F. Padovan { 68180a708f8fSGustavo F. Padovan int err; 68190a708f8fSGustavo F. Padovan 6820bb58f747SGustavo F. Padovan err = l2cap_init_sockets(); 68210a708f8fSGustavo F. Padovan if (err < 0) 68220a708f8fSGustavo F. Padovan return err; 68230a708f8fSGustavo F. Padovan 68241120e4bfSMarcel Holtmann if (IS_ERR_OR_NULL(bt_debugfs)) 68251120e4bfSMarcel Holtmann return 0; 68261120e4bfSMarcel Holtmann 68272d792818SGustavo Padovan l2cap_debugfs = debugfs_create_file("l2cap", 0444, bt_debugfs, 68282d792818SGustavo Padovan NULL, &l2cap_debugfs_fops); 68290a708f8fSGustavo F. Padovan 68300a708f8fSGustavo F. Padovan return 0; 68310a708f8fSGustavo F. Padovan } 68320a708f8fSGustavo F. Padovan 683364274518SGustavo F. Padovan void l2cap_exit(void) 68340a708f8fSGustavo F. Padovan { 68350a708f8fSGustavo F. Padovan debugfs_remove(l2cap_debugfs); 6836bb58f747SGustavo F. Padovan l2cap_cleanup_sockets(); 68370a708f8fSGustavo F. Padovan } 68380a708f8fSGustavo F. Padovan 68390a708f8fSGustavo F. Padovan module_param(disable_ertm, bool, 0644); 68400a708f8fSGustavo F. Padovan MODULE_PARM_DESC(disable_ertm, "Disable enhanced retransmission mode"); 6841