10a708f8fSGustavo F. Padovan /* 20a708f8fSGustavo F. Padovan BlueZ - Bluetooth protocol stack for Linux 30a708f8fSGustavo F. Padovan Copyright (C) 2000-2001 Qualcomm Incorporated 40a708f8fSGustavo F. Padovan Copyright (C) 2009-2010 Gustavo F. Padovan <gustavo@padovan.org> 50a708f8fSGustavo F. Padovan Copyright (C) 2010 Google Inc. 6590051deSGustavo F. Padovan Copyright (C) 2011 ProFUSION Embedded Systems 7422e925bSMat Martineau Copyright (c) 2012 Code Aurora Forum. All rights reserved. 80a708f8fSGustavo F. Padovan 90a708f8fSGustavo F. Padovan Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com> 100a708f8fSGustavo F. Padovan 110a708f8fSGustavo F. Padovan This program is free software; you can redistribute it and/or modify 120a708f8fSGustavo F. Padovan it under the terms of the GNU General Public License version 2 as 130a708f8fSGustavo F. Padovan published by the Free Software Foundation; 140a708f8fSGustavo F. Padovan 150a708f8fSGustavo F. Padovan THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS 160a708f8fSGustavo F. Padovan OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 170a708f8fSGustavo F. Padovan FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS. 180a708f8fSGustavo F. Padovan IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY 190a708f8fSGustavo F. Padovan CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES 200a708f8fSGustavo F. Padovan WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 210a708f8fSGustavo F. Padovan ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 220a708f8fSGustavo F. Padovan OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 230a708f8fSGustavo F. Padovan 240a708f8fSGustavo F. Padovan ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS, 250a708f8fSGustavo F. Padovan COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS 260a708f8fSGustavo F. Padovan SOFTWARE IS DISCLAIMED. 270a708f8fSGustavo F. Padovan */ 280a708f8fSGustavo F. Padovan 29bb58f747SGustavo F. Padovan /* Bluetooth L2CAP core. */ 300a708f8fSGustavo F. Padovan 310a708f8fSGustavo F. Padovan #include <linux/module.h> 320a708f8fSGustavo F. Padovan 330a708f8fSGustavo F. Padovan #include <linux/debugfs.h> 340a708f8fSGustavo F. Padovan #include <linux/crc16.h> 350a708f8fSGustavo F. Padovan 360a708f8fSGustavo F. Padovan #include <net/bluetooth/bluetooth.h> 370a708f8fSGustavo F. Padovan #include <net/bluetooth/hci_core.h> 380a708f8fSGustavo F. Padovan #include <net/bluetooth/l2cap.h> 397ef9fbf0SMarcel Holtmann 40ac4b7236SMarcel Holtmann #include "smp.h" 417024728eSMarcel Holtmann #include "a2mp.h" 427ef9fbf0SMarcel Holtmann #include "amp.h" 430a708f8fSGustavo F. Padovan 440f1bfe4eSJohan Hedberg #define LE_FLOWCTL_MAX_CREDITS 65535 450f1bfe4eSJohan Hedberg 46d1de6d46SMat Martineau bool disable_ertm; 470a708f8fSGustavo F. Padovan 48547d1032SMarcel Holtmann static u32 l2cap_feat_mask = L2CAP_FEAT_FIXED_CHAN | L2CAP_FEAT_UCD; 49a6801ca9SMarcel Holtmann static u8 l2cap_fixed_chan[8] = { L2CAP_FC_SIG_BREDR | L2CAP_FC_CONNLESS, }; 500a708f8fSGustavo F. Padovan 51b5ad8b7fSJohannes Berg static LIST_HEAD(chan_list); 52b5ad8b7fSJohannes Berg static DEFINE_RWLOCK(chan_list_lock); 530a708f8fSGustavo F. Padovan 54f15b8ecfSJohan Hedberg static u16 le_max_credits = L2CAP_LE_MAX_CREDITS; 55f15b8ecfSJohan Hedberg static u16 le_default_mps = L2CAP_LE_DEFAULT_MPS; 56f15b8ecfSJohan Hedberg 570a708f8fSGustavo F. Padovan static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn, 580a708f8fSGustavo F. Padovan u8 code, u8 ident, u16 dlen, void *data); 594519de9aSGustavo F. Padovan static void l2cap_send_cmd(struct l2cap_conn *conn, u8 ident, u8 code, u16 len, 604519de9aSGustavo F. Padovan void *data); 61710f9b0aSGustavo F. Padovan static int l2cap_build_conf_req(struct l2cap_chan *chan, void *data); 625e4e3972SAndrei Emeltchenko static void l2cap_send_disconn_req(struct l2cap_chan *chan, int err); 630a708f8fSGustavo F. Padovan 64d660366dSGustavo Padovan static void l2cap_tx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 65608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event); 66608bcc6dSMat Martineau 674f1654e0SMarcel Holtmann static inline __u8 bdaddr_type(struct hci_conn *hcon, __u8 type) 684f1654e0SMarcel Holtmann { 694f1654e0SMarcel Holtmann if (hcon->type == LE_LINK) { 704f1654e0SMarcel Holtmann if (type == ADDR_LE_DEV_PUBLIC) 714f1654e0SMarcel Holtmann return BDADDR_LE_PUBLIC; 724f1654e0SMarcel Holtmann else 734f1654e0SMarcel Holtmann return BDADDR_LE_RANDOM; 744f1654e0SMarcel Holtmann } 754f1654e0SMarcel Holtmann 764f1654e0SMarcel Holtmann return BDADDR_BREDR; 774f1654e0SMarcel Holtmann } 784f1654e0SMarcel Holtmann 790a708f8fSGustavo F. Padovan /* ---- L2CAP channels ---- */ 8071ba0e56SGustavo F. Padovan 812d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_dcid(struct l2cap_conn *conn, 822d792818SGustavo Padovan u16 cid) 830a708f8fSGustavo F. Padovan { 843df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 85baa7e1faSGustavo F. Padovan 863df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 873df91ea2SAndrei Emeltchenko if (c->dcid == cid) 883df91ea2SAndrei Emeltchenko return c; 890a708f8fSGustavo F. Padovan } 903df91ea2SAndrei Emeltchenko return NULL; 91baa7e1faSGustavo F. Padovan } 920a708f8fSGustavo F. Padovan 932d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_scid(struct l2cap_conn *conn, 942d792818SGustavo Padovan u16 cid) 950a708f8fSGustavo F. Padovan { 963df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 97baa7e1faSGustavo F. Padovan 983df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 993df91ea2SAndrei Emeltchenko if (c->scid == cid) 1003df91ea2SAndrei Emeltchenko return c; 1010a708f8fSGustavo F. Padovan } 1023df91ea2SAndrei Emeltchenko return NULL; 103baa7e1faSGustavo F. Padovan } 1040a708f8fSGustavo F. Padovan 1050a708f8fSGustavo F. Padovan /* Find channel with given SCID. 106ef191adeSMat Martineau * Returns locked channel. */ 1072d792818SGustavo Padovan static struct l2cap_chan *l2cap_get_chan_by_scid(struct l2cap_conn *conn, 1082d792818SGustavo Padovan u16 cid) 1090a708f8fSGustavo F. Padovan { 11048454079SGustavo F. Padovan struct l2cap_chan *c; 111baa7e1faSGustavo F. Padovan 1123df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 113baa7e1faSGustavo F. Padovan c = __l2cap_get_chan_by_scid(conn, cid); 114ef191adeSMat Martineau if (c) 115ef191adeSMat Martineau l2cap_chan_lock(c); 1163df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 1173df91ea2SAndrei Emeltchenko 11848454079SGustavo F. Padovan return c; 1190a708f8fSGustavo F. Padovan } 1200a708f8fSGustavo F. Padovan 121b1a130b7SMat Martineau /* Find channel with given DCID. 122b1a130b7SMat Martineau * Returns locked channel. 123b1a130b7SMat Martineau */ 124b1a130b7SMat Martineau static struct l2cap_chan *l2cap_get_chan_by_dcid(struct l2cap_conn *conn, 125b1a130b7SMat Martineau u16 cid) 126b1a130b7SMat Martineau { 127b1a130b7SMat Martineau struct l2cap_chan *c; 128b1a130b7SMat Martineau 129b1a130b7SMat Martineau mutex_lock(&conn->chan_lock); 130b1a130b7SMat Martineau c = __l2cap_get_chan_by_dcid(conn, cid); 131b1a130b7SMat Martineau if (c) 132b1a130b7SMat Martineau l2cap_chan_lock(c); 133b1a130b7SMat Martineau mutex_unlock(&conn->chan_lock); 134b1a130b7SMat Martineau 135b1a130b7SMat Martineau return c; 136b1a130b7SMat Martineau } 137b1a130b7SMat Martineau 1382d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_ident(struct l2cap_conn *conn, 1392d792818SGustavo Padovan u8 ident) 1400a708f8fSGustavo F. Padovan { 1413df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 142baa7e1faSGustavo F. Padovan 1433df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 1443df91ea2SAndrei Emeltchenko if (c->ident == ident) 1453df91ea2SAndrei Emeltchenko return c; 1460a708f8fSGustavo F. Padovan } 1473df91ea2SAndrei Emeltchenko return NULL; 148baa7e1faSGustavo F. Padovan } 1490a708f8fSGustavo F. Padovan 1505b155ef9SMat Martineau static struct l2cap_chan *l2cap_get_chan_by_ident(struct l2cap_conn *conn, 1515b155ef9SMat Martineau u8 ident) 1525b155ef9SMat Martineau { 1535b155ef9SMat Martineau struct l2cap_chan *c; 1545b155ef9SMat Martineau 1555b155ef9SMat Martineau mutex_lock(&conn->chan_lock); 1565b155ef9SMat Martineau c = __l2cap_get_chan_by_ident(conn, ident); 1575b155ef9SMat Martineau if (c) 1585b155ef9SMat Martineau l2cap_chan_lock(c); 1595b155ef9SMat Martineau mutex_unlock(&conn->chan_lock); 1605b155ef9SMat Martineau 1615b155ef9SMat Martineau return c; 1625b155ef9SMat Martineau } 1635b155ef9SMat Martineau 16423691d75SGustavo F. Padovan static struct l2cap_chan *__l2cap_global_chan_by_addr(__le16 psm, bdaddr_t *src) 1659e4425ffSGustavo F. Padovan { 16623691d75SGustavo F. Padovan struct l2cap_chan *c; 1679e4425ffSGustavo F. Padovan 16823691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 1697eafc59eSMarcel Holtmann if (c->sport == psm && !bacmp(&c->src, src)) 17023691d75SGustavo F. Padovan return c; 1719e4425ffSGustavo F. Padovan } 172250938cbSSzymon Janc return NULL; 173250938cbSSzymon Janc } 1749e4425ffSGustavo F. Padovan 1759e4425ffSGustavo F. Padovan int l2cap_add_psm(struct l2cap_chan *chan, bdaddr_t *src, __le16 psm) 1769e4425ffSGustavo F. Padovan { 17773b2ec18SGustavo F. Padovan int err; 17873b2ec18SGustavo F. Padovan 179333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 1809e4425ffSGustavo F. Padovan 18123691d75SGustavo F. Padovan if (psm && __l2cap_global_chan_by_addr(psm, src)) { 18273b2ec18SGustavo F. Padovan err = -EADDRINUSE; 18373b2ec18SGustavo F. Padovan goto done; 1849e4425ffSGustavo F. Padovan } 1859e4425ffSGustavo F. Padovan 18673b2ec18SGustavo F. Padovan if (psm) { 1879e4425ffSGustavo F. Padovan chan->psm = psm; 1889e4425ffSGustavo F. Padovan chan->sport = psm; 18973b2ec18SGustavo F. Padovan err = 0; 19073b2ec18SGustavo F. Padovan } else { 19173b2ec18SGustavo F. Padovan u16 p; 1929e4425ffSGustavo F. Padovan 19373b2ec18SGustavo F. Padovan err = -EINVAL; 19473b2ec18SGustavo F. Padovan for (p = 0x1001; p < 0x1100; p += 2) 19523691d75SGustavo F. Padovan if (!__l2cap_global_chan_by_addr(cpu_to_le16(p), src)) { 19673b2ec18SGustavo F. Padovan chan->psm = cpu_to_le16(p); 19773b2ec18SGustavo F. Padovan chan->sport = cpu_to_le16(p); 19873b2ec18SGustavo F. Padovan err = 0; 19973b2ec18SGustavo F. Padovan break; 20073b2ec18SGustavo F. Padovan } 20173b2ec18SGustavo F. Padovan } 20273b2ec18SGustavo F. Padovan 20373b2ec18SGustavo F. Padovan done: 204333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 20573b2ec18SGustavo F. Padovan return err; 2069e4425ffSGustavo F. Padovan } 2076b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_add_psm); 2089e4425ffSGustavo F. Padovan 2099e4425ffSGustavo F. Padovan int l2cap_add_scid(struct l2cap_chan *chan, __u16 scid) 2109e4425ffSGustavo F. Padovan { 211333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 2129e4425ffSGustavo F. Padovan 2139e4425ffSGustavo F. Padovan chan->scid = scid; 2149e4425ffSGustavo F. Padovan 215333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 2169e4425ffSGustavo F. Padovan 2179e4425ffSGustavo F. Padovan return 0; 2189e4425ffSGustavo F. Padovan } 2199e4425ffSGustavo F. Padovan 220baa7e1faSGustavo F. Padovan static u16 l2cap_alloc_cid(struct l2cap_conn *conn) 2210a708f8fSGustavo F. Padovan { 222e77af755SJohan Hedberg u16 cid, dyn_end; 2230a708f8fSGustavo F. Padovan 224e77af755SJohan Hedberg if (conn->hcon->type == LE_LINK) 225e77af755SJohan Hedberg dyn_end = L2CAP_CID_LE_DYN_END; 226e77af755SJohan Hedberg else 227e77af755SJohan Hedberg dyn_end = L2CAP_CID_DYN_END; 228e77af755SJohan Hedberg 229e77af755SJohan Hedberg for (cid = L2CAP_CID_DYN_START; cid < dyn_end; cid++) { 230baa7e1faSGustavo F. Padovan if (!__l2cap_get_chan_by_scid(conn, cid)) 2310a708f8fSGustavo F. Padovan return cid; 2320a708f8fSGustavo F. Padovan } 2330a708f8fSGustavo F. Padovan 2340a708f8fSGustavo F. Padovan return 0; 2350a708f8fSGustavo F. Padovan } 2360a708f8fSGustavo F. Padovan 237f93fa273SGustavo Padovan static void l2cap_state_change(struct l2cap_chan *chan, int state) 23889bc500eSGustavo F. Padovan { 23942d2d87cSAndrei Emeltchenko BT_DBG("chan %p %s -> %s", chan, state_to_string(chan->state), 240badaaa00SGustavo F. Padovan state_to_string(state)); 241badaaa00SGustavo F. Padovan 24289bc500eSGustavo F. Padovan chan->state = state; 24353f52121SGustavo Padovan chan->ops->state_change(chan, state, 0); 24489bc500eSGustavo F. Padovan } 24589bc500eSGustavo F. Padovan 246f8e73017SGustavo Padovan static inline void l2cap_state_change_and_error(struct l2cap_chan *chan, 247f8e73017SGustavo Padovan int state, int err) 2482e0052e4SAndrei Emeltchenko { 249f8e73017SGustavo Padovan chan->state = state; 25053f52121SGustavo Padovan chan->ops->state_change(chan, chan->state, err); 2512e0052e4SAndrei Emeltchenko } 2522e0052e4SAndrei Emeltchenko 2532e0052e4SAndrei Emeltchenko static inline void l2cap_chan_set_err(struct l2cap_chan *chan, int err) 2542e0052e4SAndrei Emeltchenko { 255f8e73017SGustavo Padovan chan->ops->state_change(chan, chan->state, err); 2562e0052e4SAndrei Emeltchenko } 2572e0052e4SAndrei Emeltchenko 2584239d16fSMat Martineau static void __set_retrans_timer(struct l2cap_chan *chan) 2594239d16fSMat Martineau { 2604239d16fSMat Martineau if (!delayed_work_pending(&chan->monitor_timer) && 2614239d16fSMat Martineau chan->retrans_timeout) { 2624239d16fSMat Martineau l2cap_set_timer(chan, &chan->retrans_timer, 2634239d16fSMat Martineau msecs_to_jiffies(chan->retrans_timeout)); 2644239d16fSMat Martineau } 2654239d16fSMat Martineau } 2664239d16fSMat Martineau 2674239d16fSMat Martineau static void __set_monitor_timer(struct l2cap_chan *chan) 2684239d16fSMat Martineau { 2694239d16fSMat Martineau __clear_retrans_timer(chan); 2704239d16fSMat Martineau if (chan->monitor_timeout) { 2714239d16fSMat Martineau l2cap_set_timer(chan, &chan->monitor_timer, 2724239d16fSMat Martineau msecs_to_jiffies(chan->monitor_timeout)); 2734239d16fSMat Martineau } 2744239d16fSMat Martineau } 2754239d16fSMat Martineau 276608bcc6dSMat Martineau static struct sk_buff *l2cap_ertm_seq_in_queue(struct sk_buff_head *head, 277608bcc6dSMat Martineau u16 seq) 278608bcc6dSMat Martineau { 279608bcc6dSMat Martineau struct sk_buff *skb; 280608bcc6dSMat Martineau 281608bcc6dSMat Martineau skb_queue_walk(head, skb) { 282608bcc6dSMat Martineau if (bt_cb(skb)->control.txseq == seq) 283608bcc6dSMat Martineau return skb; 284608bcc6dSMat Martineau } 285608bcc6dSMat Martineau 286608bcc6dSMat Martineau return NULL; 287608bcc6dSMat Martineau } 288608bcc6dSMat Martineau 2893c588192SMat Martineau /* ---- L2CAP sequence number lists ---- */ 2903c588192SMat Martineau 2913c588192SMat Martineau /* For ERTM, ordered lists of sequence numbers must be tracked for 2923c588192SMat Martineau * SREJ requests that are received and for frames that are to be 2933c588192SMat Martineau * retransmitted. These seq_list functions implement a singly-linked 2943c588192SMat Martineau * list in an array, where membership in the list can also be checked 2953c588192SMat Martineau * in constant time. Items can also be added to the tail of the list 2963c588192SMat Martineau * and removed from the head in constant time, without further memory 2973c588192SMat Martineau * allocs or frees. 2983c588192SMat Martineau */ 2993c588192SMat Martineau 3003c588192SMat Martineau static int l2cap_seq_list_init(struct l2cap_seq_list *seq_list, u16 size) 3013c588192SMat Martineau { 3023c588192SMat Martineau size_t alloc_size, i; 3033c588192SMat Martineau 3043c588192SMat Martineau /* Allocated size is a power of 2 to map sequence numbers 3053c588192SMat Martineau * (which may be up to 14 bits) in to a smaller array that is 3063c588192SMat Martineau * sized for the negotiated ERTM transmit windows. 3073c588192SMat Martineau */ 3083c588192SMat Martineau alloc_size = roundup_pow_of_two(size); 3093c588192SMat Martineau 3103c588192SMat Martineau seq_list->list = kmalloc(sizeof(u16) * alloc_size, GFP_KERNEL); 3113c588192SMat Martineau if (!seq_list->list) 3123c588192SMat Martineau return -ENOMEM; 3133c588192SMat Martineau 3143c588192SMat Martineau seq_list->mask = alloc_size - 1; 3153c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3163c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3173c588192SMat Martineau for (i = 0; i < alloc_size; i++) 3183c588192SMat Martineau seq_list->list[i] = L2CAP_SEQ_LIST_CLEAR; 3193c588192SMat Martineau 3203c588192SMat Martineau return 0; 3213c588192SMat Martineau } 3223c588192SMat Martineau 3233c588192SMat Martineau static inline void l2cap_seq_list_free(struct l2cap_seq_list *seq_list) 3243c588192SMat Martineau { 3253c588192SMat Martineau kfree(seq_list->list); 3263c588192SMat Martineau } 3273c588192SMat Martineau 3283c588192SMat Martineau static inline bool l2cap_seq_list_contains(struct l2cap_seq_list *seq_list, 3293c588192SMat Martineau u16 seq) 3303c588192SMat Martineau { 3313c588192SMat Martineau /* Constant-time check for list membership */ 3323c588192SMat Martineau return seq_list->list[seq & seq_list->mask] != L2CAP_SEQ_LIST_CLEAR; 3333c588192SMat Martineau } 3343c588192SMat Martineau 33503a0c5d6SJohan Hedberg static inline u16 l2cap_seq_list_pop(struct l2cap_seq_list *seq_list) 3363c588192SMat Martineau { 33703a0c5d6SJohan Hedberg u16 seq = seq_list->head; 3383c588192SMat Martineau u16 mask = seq_list->mask; 3393c588192SMat Martineau 3403c588192SMat Martineau seq_list->head = seq_list->list[seq & mask]; 3413c588192SMat Martineau seq_list->list[seq & mask] = L2CAP_SEQ_LIST_CLEAR; 3423c588192SMat Martineau 3433c588192SMat Martineau if (seq_list->head == L2CAP_SEQ_LIST_TAIL) { 3443c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3453c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3463c588192SMat Martineau } 3473c588192SMat Martineau 3483c588192SMat Martineau return seq; 3493c588192SMat Martineau } 3503c588192SMat Martineau 3513c588192SMat Martineau static void l2cap_seq_list_clear(struct l2cap_seq_list *seq_list) 3523c588192SMat Martineau { 3533c588192SMat Martineau u16 i; 354f522ae36SGustavo Padovan 355f522ae36SGustavo Padovan if (seq_list->head == L2CAP_SEQ_LIST_CLEAR) 356f522ae36SGustavo Padovan return; 357f522ae36SGustavo Padovan 3583c588192SMat Martineau for (i = 0; i <= seq_list->mask; i++) 3593c588192SMat Martineau seq_list->list[i] = L2CAP_SEQ_LIST_CLEAR; 3603c588192SMat Martineau 3613c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3623c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3633c588192SMat Martineau } 3643c588192SMat Martineau 3653c588192SMat Martineau static void l2cap_seq_list_append(struct l2cap_seq_list *seq_list, u16 seq) 3663c588192SMat Martineau { 3673c588192SMat Martineau u16 mask = seq_list->mask; 3683c588192SMat Martineau 3693c588192SMat Martineau /* All appends happen in constant time */ 3703c588192SMat Martineau 371f522ae36SGustavo Padovan if (seq_list->list[seq & mask] != L2CAP_SEQ_LIST_CLEAR) 372f522ae36SGustavo Padovan return; 373f522ae36SGustavo Padovan 3743c588192SMat Martineau if (seq_list->tail == L2CAP_SEQ_LIST_CLEAR) 3753c588192SMat Martineau seq_list->head = seq; 3763c588192SMat Martineau else 3773c588192SMat Martineau seq_list->list[seq_list->tail & mask] = seq; 3783c588192SMat Martineau 3793c588192SMat Martineau seq_list->tail = seq; 3803c588192SMat Martineau seq_list->list[seq & mask] = L2CAP_SEQ_LIST_TAIL; 3813c588192SMat Martineau } 3823c588192SMat Martineau 383721c4181SGustavo F. Padovan static void l2cap_chan_timeout(struct work_struct *work) 384ab07801dSGustavo F. Padovan { 385721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 386721c4181SGustavo F. Padovan chan_timer.work); 3873df91ea2SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 388ab07801dSGustavo F. Padovan int reason; 389ab07801dSGustavo F. Padovan 390e05dcc32SAndrei Emeltchenko BT_DBG("chan %p state %s", chan, state_to_string(chan->state)); 391ab07801dSGustavo F. Padovan 3923df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 3936be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 394ab07801dSGustavo F. Padovan 39589bc500eSGustavo F. Padovan if (chan->state == BT_CONNECTED || chan->state == BT_CONFIG) 396ab07801dSGustavo F. Padovan reason = ECONNREFUSED; 39789bc500eSGustavo F. Padovan else if (chan->state == BT_CONNECT && 398ab07801dSGustavo F. Padovan chan->sec_level != BT_SECURITY_SDP) 399ab07801dSGustavo F. Padovan reason = ECONNREFUSED; 400ab07801dSGustavo F. Padovan else 401ab07801dSGustavo F. Padovan reason = ETIMEDOUT; 402ab07801dSGustavo F. Padovan 4030f852724SGustavo F. Padovan l2cap_chan_close(chan, reason); 404ab07801dSGustavo F. Padovan 4056be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 406ab07801dSGustavo F. Padovan 40780b98027SGustavo Padovan chan->ops->close(chan); 4083df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 4093df91ea2SAndrei Emeltchenko 410371fd835SUlisses Furquim l2cap_chan_put(chan); 411ab07801dSGustavo F. Padovan } 412ab07801dSGustavo F. Padovan 413eef1d9b6SGustavo Padovan struct l2cap_chan *l2cap_chan_create(void) 4140a708f8fSGustavo F. Padovan { 41548454079SGustavo F. Padovan struct l2cap_chan *chan; 4160a708f8fSGustavo F. Padovan 41748454079SGustavo F. Padovan chan = kzalloc(sizeof(*chan), GFP_ATOMIC); 41848454079SGustavo F. Padovan if (!chan) 41948454079SGustavo F. Padovan return NULL; 4200a708f8fSGustavo F. Padovan 421c03b355eSAndrei Emeltchenko mutex_init(&chan->lock); 422c03b355eSAndrei Emeltchenko 423333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 42423691d75SGustavo F. Padovan list_add(&chan->global_l, &chan_list); 425333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 42623691d75SGustavo F. Padovan 427721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->chan_timer, l2cap_chan_timeout); 428ab07801dSGustavo F. Padovan 42989bc500eSGustavo F. Padovan chan->state = BT_OPEN; 43089bc500eSGustavo F. Padovan 431144ad330SSyam Sidhardhan kref_init(&chan->kref); 43271ba0e56SGustavo F. Padovan 4332827011fSMat Martineau /* This flag is cleared in l2cap_chan_ready() */ 4342827011fSMat Martineau set_bit(CONF_NOT_COMPLETE, &chan->conf_state); 4352827011fSMat Martineau 436eef1d9b6SGustavo Padovan BT_DBG("chan %p", chan); 437abc545b8SSzymon Janc 43848454079SGustavo F. Padovan return chan; 4390a708f8fSGustavo F. Padovan } 4406b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_create); 4410a708f8fSGustavo F. Padovan 442144ad330SSyam Sidhardhan static void l2cap_chan_destroy(struct kref *kref) 4436ff5abbfSGustavo F. Padovan { 444144ad330SSyam Sidhardhan struct l2cap_chan *chan = container_of(kref, struct l2cap_chan, kref); 445144ad330SSyam Sidhardhan 4464af66c69SJaganath Kanakkassery BT_DBG("chan %p", chan); 4474af66c69SJaganath Kanakkassery 448333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 44923691d75SGustavo F. Padovan list_del(&chan->global_l); 450333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 45123691d75SGustavo F. Padovan 4524af66c69SJaganath Kanakkassery kfree(chan); 4536ff5abbfSGustavo F. Padovan } 4546ff5abbfSGustavo F. Padovan 45530648372SJaganath Kanakkassery void l2cap_chan_hold(struct l2cap_chan *c) 45630648372SJaganath Kanakkassery { 457144ad330SSyam Sidhardhan BT_DBG("chan %p orig refcnt %d", c, atomic_read(&c->kref.refcount)); 45830648372SJaganath Kanakkassery 459144ad330SSyam Sidhardhan kref_get(&c->kref); 46030648372SJaganath Kanakkassery } 46130648372SJaganath Kanakkassery 46230648372SJaganath Kanakkassery void l2cap_chan_put(struct l2cap_chan *c) 46330648372SJaganath Kanakkassery { 464144ad330SSyam Sidhardhan BT_DBG("chan %p orig refcnt %d", c, atomic_read(&c->kref.refcount)); 46530648372SJaganath Kanakkassery 466144ad330SSyam Sidhardhan kref_put(&c->kref, l2cap_chan_destroy); 46730648372SJaganath Kanakkassery } 4686b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_put); 46930648372SJaganath Kanakkassery 470bd4b1653SAndrei Emeltchenko void l2cap_chan_set_defaults(struct l2cap_chan *chan) 471bd4b1653SAndrei Emeltchenko { 472bd4b1653SAndrei Emeltchenko chan->fcs = L2CAP_FCS_CRC16; 473bd4b1653SAndrei Emeltchenko chan->max_tx = L2CAP_DEFAULT_MAX_TX; 474bd4b1653SAndrei Emeltchenko chan->tx_win = L2CAP_DEFAULT_TX_WINDOW; 475bd4b1653SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_TX_WINDOW; 4766a5e8165SJukka Rissanen chan->remote_max_tx = chan->max_tx; 4776a5e8165SJukka Rissanen chan->remote_tx_win = chan->tx_win; 478c20f8e35SMat Martineau chan->ack_win = L2CAP_DEFAULT_TX_WINDOW; 479bd4b1653SAndrei Emeltchenko chan->sec_level = BT_SECURITY_LOW; 4806a5e8165SJukka Rissanen chan->flush_to = L2CAP_DEFAULT_FLUSH_TO; 4816a5e8165SJukka Rissanen chan->retrans_timeout = L2CAP_DEFAULT_RETRANS_TO; 4826a5e8165SJukka Rissanen chan->monitor_timeout = L2CAP_DEFAULT_MONITOR_TO; 4836a5e8165SJukka Rissanen chan->conf_state = 0; 484bd4b1653SAndrei Emeltchenko 485bd4b1653SAndrei Emeltchenko set_bit(FLAG_FORCE_ACTIVE, &chan->flags); 486bd4b1653SAndrei Emeltchenko } 4876b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_set_defaults); 488bd4b1653SAndrei Emeltchenko 4890ce43ce6SJohan Hedberg static void l2cap_le_flowctl_init(struct l2cap_chan *chan) 49038319713SJohan Hedberg { 4910ce43ce6SJohan Hedberg chan->sdu = NULL; 4920ce43ce6SJohan Hedberg chan->sdu_last_frag = NULL; 4930ce43ce6SJohan Hedberg chan->sdu_len = 0; 4940cd75f7eSJohan Hedberg chan->tx_credits = 0; 495f15b8ecfSJohan Hedberg chan->rx_credits = le_max_credits; 496d1d79413SJohan Hedberg chan->mps = min_t(u16, chan->imtu, le_default_mps); 4970ce43ce6SJohan Hedberg 4980ce43ce6SJohan Hedberg skb_queue_head_init(&chan->tx_q); 49938319713SJohan Hedberg } 50038319713SJohan Hedberg 50193c3e8f5SAndrei Emeltchenko void __l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan) 5020a708f8fSGustavo F. Padovan { 5030a708f8fSGustavo F. Padovan BT_DBG("conn %p, psm 0x%2.2x, dcid 0x%4.4x", conn, 504097db76cSAndrei Emeltchenko __le16_to_cpu(chan->psm), chan->dcid); 5050a708f8fSGustavo F. Padovan 5069f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_REMOTE_USER_TERM; 5070a708f8fSGustavo F. Padovan 5088c1d787bSGustavo F. Padovan chan->conn = conn; 5090a708f8fSGustavo F. Padovan 5105491120eSAndrei Emeltchenko switch (chan->chan_type) { 5115491120eSAndrei Emeltchenko case L2CAP_CHAN_CONN_ORIENTED: 5120a708f8fSGustavo F. Padovan /* Alloc CID for connection-oriented socket */ 513fe4128e0SGustavo F. Padovan chan->scid = l2cap_alloc_cid(conn); 51421626e62SJohan Hedberg if (conn->hcon->type == ACL_LINK) 5150c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 5165491120eSAndrei Emeltchenko break; 5175491120eSAndrei Emeltchenko 5185491120eSAndrei Emeltchenko case L2CAP_CHAN_CONN_LESS: 5190a708f8fSGustavo F. Padovan /* Connectionless socket */ 520fe4128e0SGustavo F. Padovan chan->scid = L2CAP_CID_CONN_LESS; 521fe4128e0SGustavo F. Padovan chan->dcid = L2CAP_CID_CONN_LESS; 5220c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 5235491120eSAndrei Emeltchenko break; 5245491120eSAndrei Emeltchenko 5252338a7e0SJohan Hedberg case L2CAP_CHAN_FIXED: 5262338a7e0SJohan Hedberg /* Caller will set CID and CID specific MTU values */ 527416fa752SAndrei Emeltchenko break; 528416fa752SAndrei Emeltchenko 5295491120eSAndrei Emeltchenko default: 5300a708f8fSGustavo F. Padovan /* Raw socket can send/recv signalling messages only */ 531fe4128e0SGustavo F. Padovan chan->scid = L2CAP_CID_SIGNALING; 532fe4128e0SGustavo F. Padovan chan->dcid = L2CAP_CID_SIGNALING; 5330c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 5340a708f8fSGustavo F. Padovan } 5350a708f8fSGustavo F. Padovan 5368f7975b1SAndrei Emeltchenko chan->local_id = L2CAP_BESTEFFORT_ID; 5378f7975b1SAndrei Emeltchenko chan->local_stype = L2CAP_SERV_BESTEFFORT; 5388f7975b1SAndrei Emeltchenko chan->local_msdu = L2CAP_DEFAULT_MAX_SDU_SIZE; 5398f7975b1SAndrei Emeltchenko chan->local_sdu_itime = L2CAP_DEFAULT_SDU_ITIME; 5408f7975b1SAndrei Emeltchenko chan->local_acc_lat = L2CAP_DEFAULT_ACC_LAT; 5418936fa6dSAndrei Emeltchenko chan->local_flush_to = L2CAP_EFS_DEFAULT_FLUSH_TO; 5428f7975b1SAndrei Emeltchenko 543371fd835SUlisses Furquim l2cap_chan_hold(chan); 544baa7e1faSGustavo F. Padovan 5455ee9891dSJohan Hedberg hci_conn_hold(conn->hcon); 5465ee9891dSJohan Hedberg 5473df91ea2SAndrei Emeltchenko list_add(&chan->list, &conn->chan_l); 548643162a8SAndrei Emeltchenko } 549643162a8SAndrei Emeltchenko 550466f8004SAndrei Emeltchenko void l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan) 551643162a8SAndrei Emeltchenko { 552643162a8SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 553643162a8SAndrei Emeltchenko __l2cap_chan_add(conn, chan); 5543df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 5550a708f8fSGustavo F. Padovan } 5560a708f8fSGustavo F. Padovan 557466f8004SAndrei Emeltchenko void l2cap_chan_del(struct l2cap_chan *chan, int err) 5580a708f8fSGustavo F. Padovan { 5598c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 5600a708f8fSGustavo F. Padovan 561c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 5620a708f8fSGustavo F. Padovan 56349208c9cSGustavo F. Padovan BT_DBG("chan %p, conn %p, err %d", chan, conn, err); 5640a708f8fSGustavo F. Padovan 5650a708f8fSGustavo F. Padovan if (conn) { 56656f60984SAndrei Emeltchenko struct amp_mgr *mgr = conn->hcon->amp_mgr; 567baa7e1faSGustavo F. Padovan /* Delete from channel list */ 5683df91ea2SAndrei Emeltchenko list_del(&chan->list); 5693d57dc68SGustavo F. Padovan 570371fd835SUlisses Furquim l2cap_chan_put(chan); 571baa7e1faSGustavo F. Padovan 5728c1d787bSGustavo F. Padovan chan->conn = NULL; 5733cabbfdaSAndrei Emeltchenko 5742338a7e0SJohan Hedberg if (chan->scid != L2CAP_CID_A2MP) 57576a68ba0SDavid Herrmann hci_conn_drop(conn->hcon); 57656f60984SAndrei Emeltchenko 57756f60984SAndrei Emeltchenko if (mgr && mgr->bredr_chan == chan) 57856f60984SAndrei Emeltchenko mgr->bredr_chan = NULL; 5790a708f8fSGustavo F. Padovan } 5800a708f8fSGustavo F. Padovan 581419e08c1SAndrei Emeltchenko if (chan->hs_hchan) { 582419e08c1SAndrei Emeltchenko struct hci_chan *hs_hchan = chan->hs_hchan; 583419e08c1SAndrei Emeltchenko 584419e08c1SAndrei Emeltchenko BT_DBG("chan %p disconnect hs_hchan %p", chan, hs_hchan); 585419e08c1SAndrei Emeltchenko amp_disconnect_logical_link(hs_hchan); 586419e08c1SAndrei Emeltchenko } 587419e08c1SAndrei Emeltchenko 588c0df7f6eSAndrei Emeltchenko chan->ops->teardown(chan, err); 5896be36555SAndrei Emeltchenko 5902827011fSMat Martineau if (test_bit(CONF_NOT_COMPLETE, &chan->conf_state)) 5916ff5abbfSGustavo F. Padovan return; 5922ead70b8SGustavo F. Padovan 593ee556f66SGustavo Padovan switch(chan->mode) { 594ee556f66SGustavo Padovan case L2CAP_MODE_BASIC: 595ee556f66SGustavo Padovan break; 5960a708f8fSGustavo F. Padovan 59738319713SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 598177f8f2bSJohan Hedberg skb_queue_purge(&chan->tx_q); 59938319713SJohan Hedberg break; 60038319713SJohan Hedberg 601ee556f66SGustavo Padovan case L2CAP_MODE_ERTM: 6021a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 6031a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 6041a09bcb9SGustavo F. Padovan __clear_ack_timer(chan); 6050a708f8fSGustavo F. Padovan 606f1c6775bSGustavo F. Padovan skb_queue_purge(&chan->srej_q); 6070a708f8fSGustavo F. Padovan 6083c588192SMat Martineau l2cap_seq_list_free(&chan->srej_list); 6093c588192SMat Martineau l2cap_seq_list_free(&chan->retrans_list); 610ee556f66SGustavo Padovan 611ee556f66SGustavo Padovan /* fall through */ 612ee556f66SGustavo Padovan 613ee556f66SGustavo Padovan case L2CAP_MODE_STREAMING: 614ee556f66SGustavo Padovan skb_queue_purge(&chan->tx_q); 615ee556f66SGustavo Padovan break; 6160a708f8fSGustavo F. Padovan } 617ee556f66SGustavo Padovan 618ee556f66SGustavo Padovan return; 6190a708f8fSGustavo F. Padovan } 6206b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_del); 6210a708f8fSGustavo F. Padovan 622387a33e3SJohan Hedberg void l2cap_conn_update_id_addr(struct hci_conn *hcon) 623387a33e3SJohan Hedberg { 624387a33e3SJohan Hedberg struct l2cap_conn *conn = hcon->l2cap_data; 625387a33e3SJohan Hedberg struct l2cap_chan *chan; 626387a33e3SJohan Hedberg 627387a33e3SJohan Hedberg mutex_lock(&conn->chan_lock); 628387a33e3SJohan Hedberg 629387a33e3SJohan Hedberg list_for_each_entry(chan, &conn->chan_l, list) { 630387a33e3SJohan Hedberg l2cap_chan_lock(chan); 631387a33e3SJohan Hedberg bacpy(&chan->dst, &hcon->dst); 632387a33e3SJohan Hedberg chan->dst_type = bdaddr_type(hcon, hcon->dst_type); 633387a33e3SJohan Hedberg l2cap_chan_unlock(chan); 634387a33e3SJohan Hedberg } 635387a33e3SJohan Hedberg 636387a33e3SJohan Hedberg mutex_unlock(&conn->chan_lock); 637387a33e3SJohan Hedberg } 638387a33e3SJohan Hedberg 63927e2d4c8SJohan Hedberg static void l2cap_chan_le_connect_reject(struct l2cap_chan *chan) 64027e2d4c8SJohan Hedberg { 64127e2d4c8SJohan Hedberg struct l2cap_conn *conn = chan->conn; 64227e2d4c8SJohan Hedberg struct l2cap_le_conn_rsp rsp; 64327e2d4c8SJohan Hedberg u16 result; 64427e2d4c8SJohan Hedberg 64527e2d4c8SJohan Hedberg if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) 64627e2d4c8SJohan Hedberg result = L2CAP_CR_AUTHORIZATION; 64727e2d4c8SJohan Hedberg else 64827e2d4c8SJohan Hedberg result = L2CAP_CR_BAD_PSM; 64927e2d4c8SJohan Hedberg 65027e2d4c8SJohan Hedberg l2cap_state_change(chan, BT_DISCONN); 65127e2d4c8SJohan Hedberg 65227e2d4c8SJohan Hedberg rsp.dcid = cpu_to_le16(chan->scid); 65327e2d4c8SJohan Hedberg rsp.mtu = cpu_to_le16(chan->imtu); 6543916aed8SJohan Hedberg rsp.mps = cpu_to_le16(chan->mps); 6550cd75f7eSJohan Hedberg rsp.credits = cpu_to_le16(chan->rx_credits); 65627e2d4c8SJohan Hedberg rsp.result = cpu_to_le16(result); 65727e2d4c8SJohan Hedberg 65827e2d4c8SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CONN_RSP, sizeof(rsp), 65927e2d4c8SJohan Hedberg &rsp); 66027e2d4c8SJohan Hedberg } 66127e2d4c8SJohan Hedberg 662791d60f7SJohan Hedberg static void l2cap_chan_connect_reject(struct l2cap_chan *chan) 663791d60f7SJohan Hedberg { 664791d60f7SJohan Hedberg struct l2cap_conn *conn = chan->conn; 665791d60f7SJohan Hedberg struct l2cap_conn_rsp rsp; 666791d60f7SJohan Hedberg u16 result; 667791d60f7SJohan Hedberg 668791d60f7SJohan Hedberg if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) 669791d60f7SJohan Hedberg result = L2CAP_CR_SEC_BLOCK; 670791d60f7SJohan Hedberg else 671791d60f7SJohan Hedberg result = L2CAP_CR_BAD_PSM; 672791d60f7SJohan Hedberg 673791d60f7SJohan Hedberg l2cap_state_change(chan, BT_DISCONN); 674791d60f7SJohan Hedberg 675791d60f7SJohan Hedberg rsp.scid = cpu_to_le16(chan->dcid); 676791d60f7SJohan Hedberg rsp.dcid = cpu_to_le16(chan->scid); 677791d60f7SJohan Hedberg rsp.result = cpu_to_le16(result); 678dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 679791d60f7SJohan Hedberg 680791d60f7SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, sizeof(rsp), &rsp); 681791d60f7SJohan Hedberg } 682791d60f7SJohan Hedberg 6830f852724SGustavo F. Padovan void l2cap_chan_close(struct l2cap_chan *chan, int reason) 6844519de9aSGustavo F. Padovan { 6854519de9aSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 6864519de9aSGustavo F. Padovan 6877eafc59eSMarcel Holtmann BT_DBG("chan %p state %s", chan, state_to_string(chan->state)); 6884519de9aSGustavo F. Padovan 68989bc500eSGustavo F. Padovan switch (chan->state) { 6904519de9aSGustavo F. Padovan case BT_LISTEN: 691c0df7f6eSAndrei Emeltchenko chan->ops->teardown(chan, 0); 6924519de9aSGustavo F. Padovan break; 6934519de9aSGustavo F. Padovan 6944519de9aSGustavo F. Padovan case BT_CONNECTED: 6954519de9aSGustavo F. Padovan case BT_CONFIG: 6967b25c9b3SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED) { 6978d836d71SGustavo Padovan __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 6985e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, reason); 6994519de9aSGustavo F. Padovan } else 7004519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 7014519de9aSGustavo F. Padovan break; 7024519de9aSGustavo F. Padovan 7034519de9aSGustavo F. Padovan case BT_CONNECT2: 704791d60f7SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED) { 705791d60f7SJohan Hedberg if (conn->hcon->type == ACL_LINK) 706791d60f7SJohan Hedberg l2cap_chan_connect_reject(chan); 70727e2d4c8SJohan Hedberg else if (conn->hcon->type == LE_LINK) 70827e2d4c8SJohan Hedberg l2cap_chan_le_connect_reject(chan); 7094519de9aSGustavo F. Padovan } 7104519de9aSGustavo F. Padovan 7114519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 7124519de9aSGustavo F. Padovan break; 7134519de9aSGustavo F. Padovan 7144519de9aSGustavo F. Padovan case BT_CONNECT: 7154519de9aSGustavo F. Padovan case BT_DISCONN: 7164519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 7174519de9aSGustavo F. Padovan break; 7184519de9aSGustavo F. Padovan 7194519de9aSGustavo F. Padovan default: 720c0df7f6eSAndrei Emeltchenko chan->ops->teardown(chan, 0); 7214519de9aSGustavo F. Padovan break; 7224519de9aSGustavo F. Padovan } 7234519de9aSGustavo F. Padovan } 7246b8d4a6aSJukka Rissanen EXPORT_SYMBOL(l2cap_chan_close); 7254519de9aSGustavo F. Padovan 7264343478fSGustavo F. Padovan static inline u8 l2cap_get_auth_type(struct l2cap_chan *chan) 7270a708f8fSGustavo F. Padovan { 7286a974b50SMarcel Holtmann switch (chan->chan_type) { 7296a974b50SMarcel Holtmann case L2CAP_CHAN_RAW: 7304343478fSGustavo F. Padovan switch (chan->sec_level) { 7310a708f8fSGustavo F. Padovan case BT_SECURITY_HIGH: 7327d513e92SMarcel Holtmann case BT_SECURITY_FIPS: 7330a708f8fSGustavo F. Padovan return HCI_AT_DEDICATED_BONDING_MITM; 7340a708f8fSGustavo F. Padovan case BT_SECURITY_MEDIUM: 7350a708f8fSGustavo F. Padovan return HCI_AT_DEDICATED_BONDING; 7360a708f8fSGustavo F. Padovan default: 7370a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 7380a708f8fSGustavo F. Padovan } 7396a974b50SMarcel Holtmann break; 7403124b843SMarcel Holtmann case L2CAP_CHAN_CONN_LESS: 741dcf4adbfSJoe Perches if (chan->psm == cpu_to_le16(L2CAP_PSM_3DSP)) { 7423124b843SMarcel Holtmann if (chan->sec_level == BT_SECURITY_LOW) 7433124b843SMarcel Holtmann chan->sec_level = BT_SECURITY_SDP; 7443124b843SMarcel Holtmann } 7457d513e92SMarcel Holtmann if (chan->sec_level == BT_SECURITY_HIGH || 7467d513e92SMarcel Holtmann chan->sec_level == BT_SECURITY_FIPS) 7473124b843SMarcel Holtmann return HCI_AT_NO_BONDING_MITM; 7483124b843SMarcel Holtmann else 7493124b843SMarcel Holtmann return HCI_AT_NO_BONDING; 7503124b843SMarcel Holtmann break; 7516a974b50SMarcel Holtmann case L2CAP_CHAN_CONN_ORIENTED: 752dcf4adbfSJoe Perches if (chan->psm == cpu_to_le16(L2CAP_PSM_SDP)) { 7534343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_LOW) 7544343478fSGustavo F. Padovan chan->sec_level = BT_SECURITY_SDP; 7550a708f8fSGustavo F. Padovan 7567d513e92SMarcel Holtmann if (chan->sec_level == BT_SECURITY_HIGH || 7577d513e92SMarcel Holtmann chan->sec_level == BT_SECURITY_FIPS) 7580a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING_MITM; 7590a708f8fSGustavo F. Padovan else 7600a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 7616a974b50SMarcel Holtmann } 7626a974b50SMarcel Holtmann /* fall through */ 7636a974b50SMarcel Holtmann default: 7644343478fSGustavo F. Padovan switch (chan->sec_level) { 7650a708f8fSGustavo F. Padovan case BT_SECURITY_HIGH: 7667d513e92SMarcel Holtmann case BT_SECURITY_FIPS: 7670a708f8fSGustavo F. Padovan return HCI_AT_GENERAL_BONDING_MITM; 7680a708f8fSGustavo F. Padovan case BT_SECURITY_MEDIUM: 7690a708f8fSGustavo F. Padovan return HCI_AT_GENERAL_BONDING; 7700a708f8fSGustavo F. Padovan default: 7710a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 7720a708f8fSGustavo F. Padovan } 7736a974b50SMarcel Holtmann break; 7740a708f8fSGustavo F. Padovan } 7750a708f8fSGustavo F. Padovan } 7760a708f8fSGustavo F. Padovan 7770a708f8fSGustavo F. Padovan /* Service level security */ 778e7cafc45SJohan Hedberg int l2cap_chan_check_security(struct l2cap_chan *chan, bool initiator) 7790a708f8fSGustavo F. Padovan { 7808c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 7810a708f8fSGustavo F. Padovan __u8 auth_type; 7820a708f8fSGustavo F. Padovan 783a17de2feSJohan Hedberg if (conn->hcon->type == LE_LINK) 784a17de2feSJohan Hedberg return smp_conn_security(conn->hcon, chan->sec_level); 785a17de2feSJohan Hedberg 7864343478fSGustavo F. Padovan auth_type = l2cap_get_auth_type(chan); 7870a708f8fSGustavo F. Padovan 788e7cafc45SJohan Hedberg return hci_conn_security(conn->hcon, chan->sec_level, auth_type, 789e7cafc45SJohan Hedberg initiator); 7900a708f8fSGustavo F. Padovan } 7910a708f8fSGustavo F. Padovan 792b5ad8b7fSJohannes Berg static u8 l2cap_get_ident(struct l2cap_conn *conn) 7930a708f8fSGustavo F. Padovan { 7940a708f8fSGustavo F. Padovan u8 id; 7950a708f8fSGustavo F. Padovan 7960a708f8fSGustavo F. Padovan /* Get next available identificator. 7970a708f8fSGustavo F. Padovan * 1 - 128 are used by kernel. 7980a708f8fSGustavo F. Padovan * 129 - 199 are reserved. 7990a708f8fSGustavo F. Padovan * 200 - 254 are used by utilities like l2ping, etc. 8000a708f8fSGustavo F. Padovan */ 8010a708f8fSGustavo F. Padovan 8025a54e7c8SMarcel Holtmann mutex_lock(&conn->ident_lock); 8030a708f8fSGustavo F. Padovan 8040a708f8fSGustavo F. Padovan if (++conn->tx_ident > 128) 8050a708f8fSGustavo F. Padovan conn->tx_ident = 1; 8060a708f8fSGustavo F. Padovan 8070a708f8fSGustavo F. Padovan id = conn->tx_ident; 8080a708f8fSGustavo F. Padovan 8095a54e7c8SMarcel Holtmann mutex_unlock(&conn->ident_lock); 8100a708f8fSGustavo F. Padovan 8110a708f8fSGustavo F. Padovan return id; 8120a708f8fSGustavo F. Padovan } 8130a708f8fSGustavo F. Padovan 8142d792818SGustavo Padovan static void l2cap_send_cmd(struct l2cap_conn *conn, u8 ident, u8 code, u16 len, 8152d792818SGustavo Padovan void *data) 8160a708f8fSGustavo F. Padovan { 8170a708f8fSGustavo F. Padovan struct sk_buff *skb = l2cap_build_cmd(conn, code, ident, len, data); 8180a708f8fSGustavo F. Padovan u8 flags; 8190a708f8fSGustavo F. Padovan 8200a708f8fSGustavo F. Padovan BT_DBG("code 0x%2.2x", code); 8210a708f8fSGustavo F. Padovan 8220a708f8fSGustavo F. Padovan if (!skb) 8230a708f8fSGustavo F. Padovan return; 8240a708f8fSGustavo F. Padovan 8250a708f8fSGustavo F. Padovan if (lmp_no_flush_capable(conn->hcon->hdev)) 8260a708f8fSGustavo F. Padovan flags = ACL_START_NO_FLUSH; 8270a708f8fSGustavo F. Padovan else 8280a708f8fSGustavo F. Padovan flags = ACL_START; 8290a708f8fSGustavo F. Padovan 83014b12d0bSJaikumar Ganesh bt_cb(skb)->force_active = BT_POWER_FORCE_ACTIVE_ON; 8315e59b791SLuiz Augusto von Dentz skb->priority = HCI_PRIO_MAX; 83214b12d0bSJaikumar Ganesh 83373d80debSLuiz Augusto von Dentz hci_send_acl(conn->hchan, skb, flags); 8340a708f8fSGustavo F. Padovan } 8350a708f8fSGustavo F. Padovan 83602b0fbb9SMat Martineau static bool __chan_is_moving(struct l2cap_chan *chan) 83702b0fbb9SMat Martineau { 83802b0fbb9SMat Martineau return chan->move_state != L2CAP_MOVE_STABLE && 83902b0fbb9SMat Martineau chan->move_state != L2CAP_MOVE_WAIT_PREPARE; 84002b0fbb9SMat Martineau } 84102b0fbb9SMat Martineau 84273d80debSLuiz Augusto von Dentz static void l2cap_do_send(struct l2cap_chan *chan, struct sk_buff *skb) 84373d80debSLuiz Augusto von Dentz { 84473d80debSLuiz Augusto von Dentz struct hci_conn *hcon = chan->conn->hcon; 84573d80debSLuiz Augusto von Dentz u16 flags; 84673d80debSLuiz Augusto von Dentz 84773d80debSLuiz Augusto von Dentz BT_DBG("chan %p, skb %p len %d priority %u", chan, skb, skb->len, 84873d80debSLuiz Augusto von Dentz skb->priority); 84973d80debSLuiz Augusto von Dentz 850d5f8a75dSMat Martineau if (chan->hs_hcon && !__chan_is_moving(chan)) { 851d5f8a75dSMat Martineau if (chan->hs_hchan) 852d5f8a75dSMat Martineau hci_send_acl(chan->hs_hchan, skb, ACL_COMPLETE); 853d5f8a75dSMat Martineau else 854d5f8a75dSMat Martineau kfree_skb(skb); 855d5f8a75dSMat Martineau 856d5f8a75dSMat Martineau return; 857d5f8a75dSMat Martineau } 858d5f8a75dSMat Martineau 85973d80debSLuiz Augusto von Dentz if (!test_bit(FLAG_FLUSHABLE, &chan->flags) && 86073d80debSLuiz Augusto von Dentz lmp_no_flush_capable(hcon->hdev)) 86173d80debSLuiz Augusto von Dentz flags = ACL_START_NO_FLUSH; 86273d80debSLuiz Augusto von Dentz else 86373d80debSLuiz Augusto von Dentz flags = ACL_START; 86473d80debSLuiz Augusto von Dentz 86573d80debSLuiz Augusto von Dentz bt_cb(skb)->force_active = test_bit(FLAG_FORCE_ACTIVE, &chan->flags); 86673d80debSLuiz Augusto von Dentz hci_send_acl(chan->conn->hchan, skb, flags); 8670a708f8fSGustavo F. Padovan } 8680a708f8fSGustavo F. Padovan 869b5c6aaedSMat Martineau static void __unpack_enhanced_control(u16 enh, struct l2cap_ctrl *control) 870b5c6aaedSMat Martineau { 871b5c6aaedSMat Martineau control->reqseq = (enh & L2CAP_CTRL_REQSEQ) >> L2CAP_CTRL_REQSEQ_SHIFT; 872b5c6aaedSMat Martineau control->final = (enh & L2CAP_CTRL_FINAL) >> L2CAP_CTRL_FINAL_SHIFT; 873b5c6aaedSMat Martineau 874b5c6aaedSMat Martineau if (enh & L2CAP_CTRL_FRAME_TYPE) { 875b5c6aaedSMat Martineau /* S-Frame */ 876b5c6aaedSMat Martineau control->sframe = 1; 877b5c6aaedSMat Martineau control->poll = (enh & L2CAP_CTRL_POLL) >> L2CAP_CTRL_POLL_SHIFT; 878b5c6aaedSMat Martineau control->super = (enh & L2CAP_CTRL_SUPERVISE) >> L2CAP_CTRL_SUPER_SHIFT; 879b5c6aaedSMat Martineau 880b5c6aaedSMat Martineau control->sar = 0; 881b5c6aaedSMat Martineau control->txseq = 0; 882b5c6aaedSMat Martineau } else { 883b5c6aaedSMat Martineau /* I-Frame */ 884b5c6aaedSMat Martineau control->sframe = 0; 885b5c6aaedSMat Martineau control->sar = (enh & L2CAP_CTRL_SAR) >> L2CAP_CTRL_SAR_SHIFT; 886b5c6aaedSMat Martineau control->txseq = (enh & L2CAP_CTRL_TXSEQ) >> L2CAP_CTRL_TXSEQ_SHIFT; 887b5c6aaedSMat Martineau 888b5c6aaedSMat Martineau control->poll = 0; 889b5c6aaedSMat Martineau control->super = 0; 890b5c6aaedSMat Martineau } 891b5c6aaedSMat Martineau } 892b5c6aaedSMat Martineau 893b5c6aaedSMat Martineau static void __unpack_extended_control(u32 ext, struct l2cap_ctrl *control) 894b5c6aaedSMat Martineau { 895b5c6aaedSMat Martineau control->reqseq = (ext & L2CAP_EXT_CTRL_REQSEQ) >> L2CAP_EXT_CTRL_REQSEQ_SHIFT; 896b5c6aaedSMat Martineau control->final = (ext & L2CAP_EXT_CTRL_FINAL) >> L2CAP_EXT_CTRL_FINAL_SHIFT; 897b5c6aaedSMat Martineau 898b5c6aaedSMat Martineau if (ext & L2CAP_EXT_CTRL_FRAME_TYPE) { 899b5c6aaedSMat Martineau /* S-Frame */ 900b5c6aaedSMat Martineau control->sframe = 1; 901b5c6aaedSMat Martineau control->poll = (ext & L2CAP_EXT_CTRL_POLL) >> L2CAP_EXT_CTRL_POLL_SHIFT; 902b5c6aaedSMat Martineau control->super = (ext & L2CAP_EXT_CTRL_SUPERVISE) >> L2CAP_EXT_CTRL_SUPER_SHIFT; 903b5c6aaedSMat Martineau 904b5c6aaedSMat Martineau control->sar = 0; 905b5c6aaedSMat Martineau control->txseq = 0; 906b5c6aaedSMat Martineau } else { 907b5c6aaedSMat Martineau /* I-Frame */ 908b5c6aaedSMat Martineau control->sframe = 0; 909b5c6aaedSMat Martineau control->sar = (ext & L2CAP_EXT_CTRL_SAR) >> L2CAP_EXT_CTRL_SAR_SHIFT; 910b5c6aaedSMat Martineau control->txseq = (ext & L2CAP_EXT_CTRL_TXSEQ) >> L2CAP_EXT_CTRL_TXSEQ_SHIFT; 911b5c6aaedSMat Martineau 912b5c6aaedSMat Martineau control->poll = 0; 913b5c6aaedSMat Martineau control->super = 0; 914b5c6aaedSMat Martineau } 915b5c6aaedSMat Martineau } 916b5c6aaedSMat Martineau 917b5c6aaedSMat Martineau static inline void __unpack_control(struct l2cap_chan *chan, 918b5c6aaedSMat Martineau struct sk_buff *skb) 919b5c6aaedSMat Martineau { 920b5c6aaedSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 921b5c6aaedSMat Martineau __unpack_extended_control(get_unaligned_le32(skb->data), 922b5c6aaedSMat Martineau &bt_cb(skb)->control); 923cec8ab6eSMat Martineau skb_pull(skb, L2CAP_EXT_CTRL_SIZE); 924b5c6aaedSMat Martineau } else { 925b5c6aaedSMat Martineau __unpack_enhanced_control(get_unaligned_le16(skb->data), 926b5c6aaedSMat Martineau &bt_cb(skb)->control); 927cec8ab6eSMat Martineau skb_pull(skb, L2CAP_ENH_CTRL_SIZE); 928b5c6aaedSMat Martineau } 929b5c6aaedSMat Martineau } 930b5c6aaedSMat Martineau 931b5c6aaedSMat Martineau static u32 __pack_extended_control(struct l2cap_ctrl *control) 932b5c6aaedSMat Martineau { 933b5c6aaedSMat Martineau u32 packed; 934b5c6aaedSMat Martineau 935b5c6aaedSMat Martineau packed = control->reqseq << L2CAP_EXT_CTRL_REQSEQ_SHIFT; 936b5c6aaedSMat Martineau packed |= control->final << L2CAP_EXT_CTRL_FINAL_SHIFT; 937b5c6aaedSMat Martineau 938b5c6aaedSMat Martineau if (control->sframe) { 939b5c6aaedSMat Martineau packed |= control->poll << L2CAP_EXT_CTRL_POLL_SHIFT; 940b5c6aaedSMat Martineau packed |= control->super << L2CAP_EXT_CTRL_SUPER_SHIFT; 941b5c6aaedSMat Martineau packed |= L2CAP_EXT_CTRL_FRAME_TYPE; 942b5c6aaedSMat Martineau } else { 943b5c6aaedSMat Martineau packed |= control->sar << L2CAP_EXT_CTRL_SAR_SHIFT; 944b5c6aaedSMat Martineau packed |= control->txseq << L2CAP_EXT_CTRL_TXSEQ_SHIFT; 945b5c6aaedSMat Martineau } 946b5c6aaedSMat Martineau 947b5c6aaedSMat Martineau return packed; 948b5c6aaedSMat Martineau } 949b5c6aaedSMat Martineau 950b5c6aaedSMat Martineau static u16 __pack_enhanced_control(struct l2cap_ctrl *control) 951b5c6aaedSMat Martineau { 952b5c6aaedSMat Martineau u16 packed; 953b5c6aaedSMat Martineau 954b5c6aaedSMat Martineau packed = control->reqseq << L2CAP_CTRL_REQSEQ_SHIFT; 955b5c6aaedSMat Martineau packed |= control->final << L2CAP_CTRL_FINAL_SHIFT; 956b5c6aaedSMat Martineau 957b5c6aaedSMat Martineau if (control->sframe) { 958b5c6aaedSMat Martineau packed |= control->poll << L2CAP_CTRL_POLL_SHIFT; 959b5c6aaedSMat Martineau packed |= control->super << L2CAP_CTRL_SUPER_SHIFT; 960b5c6aaedSMat Martineau packed |= L2CAP_CTRL_FRAME_TYPE; 961b5c6aaedSMat Martineau } else { 962b5c6aaedSMat Martineau packed |= control->sar << L2CAP_CTRL_SAR_SHIFT; 963b5c6aaedSMat Martineau packed |= control->txseq << L2CAP_CTRL_TXSEQ_SHIFT; 964b5c6aaedSMat Martineau } 965b5c6aaedSMat Martineau 966b5c6aaedSMat Martineau return packed; 967b5c6aaedSMat Martineau } 968b5c6aaedSMat Martineau 969b5c6aaedSMat Martineau static inline void __pack_control(struct l2cap_chan *chan, 970b5c6aaedSMat Martineau struct l2cap_ctrl *control, 971b5c6aaedSMat Martineau struct sk_buff *skb) 972b5c6aaedSMat Martineau { 973b5c6aaedSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 974b5c6aaedSMat Martineau put_unaligned_le32(__pack_extended_control(control), 975b5c6aaedSMat Martineau skb->data + L2CAP_HDR_SIZE); 976b5c6aaedSMat Martineau } else { 977b5c6aaedSMat Martineau put_unaligned_le16(__pack_enhanced_control(control), 978b5c6aaedSMat Martineau skb->data + L2CAP_HDR_SIZE); 979b5c6aaedSMat Martineau } 980b5c6aaedSMat Martineau } 981b5c6aaedSMat Martineau 982ba7aa64fSGustavo Padovan static inline unsigned int __ertm_hdr_size(struct l2cap_chan *chan) 983ba7aa64fSGustavo Padovan { 984ba7aa64fSGustavo Padovan if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 985ba7aa64fSGustavo Padovan return L2CAP_EXT_HDR_SIZE; 986ba7aa64fSGustavo Padovan else 987ba7aa64fSGustavo Padovan return L2CAP_ENH_HDR_SIZE; 988ba7aa64fSGustavo Padovan } 989ba7aa64fSGustavo Padovan 990a67d7f6fSMat Martineau static struct sk_buff *l2cap_create_sframe_pdu(struct l2cap_chan *chan, 991a67d7f6fSMat Martineau u32 control) 9920a708f8fSGustavo F. Padovan { 9930a708f8fSGustavo F. Padovan struct sk_buff *skb; 9940a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 995ba7aa64fSGustavo Padovan int hlen = __ertm_hdr_size(chan); 9960a708f8fSGustavo F. Padovan 9970a708f8fSGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 99803a51213SAndrei Emeltchenko hlen += L2CAP_FCS_SIZE; 9990a708f8fSGustavo F. Padovan 1000a67d7f6fSMat Martineau skb = bt_skb_alloc(hlen, GFP_KERNEL); 10010a708f8fSGustavo F. Padovan 10020a708f8fSGustavo F. Padovan if (!skb) 1003a67d7f6fSMat Martineau return ERR_PTR(-ENOMEM); 10040a708f8fSGustavo F. Padovan 10050a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 10060a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(hlen - L2CAP_HDR_SIZE); 1007fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 100888843ab0SAndrei Emeltchenko 1009a67d7f6fSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 1010a67d7f6fSMat Martineau put_unaligned_le32(control, skb_put(skb, L2CAP_EXT_CTRL_SIZE)); 1011a67d7f6fSMat Martineau else 1012a67d7f6fSMat Martineau put_unaligned_le16(control, skb_put(skb, L2CAP_ENH_CTRL_SIZE)); 10130a708f8fSGustavo F. Padovan 101447d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 1015a67d7f6fSMat Martineau u16 fcs = crc16(0, (u8 *)skb->data, skb->len); 101603a51213SAndrei Emeltchenko put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 10170a708f8fSGustavo F. Padovan } 10180a708f8fSGustavo F. Padovan 101973d80debSLuiz Augusto von Dentz skb->priority = HCI_PRIO_MAX; 1020a67d7f6fSMat Martineau return skb; 1021a67d7f6fSMat Martineau } 1022a67d7f6fSMat Martineau 1023a67d7f6fSMat Martineau static void l2cap_send_sframe(struct l2cap_chan *chan, 1024a67d7f6fSMat Martineau struct l2cap_ctrl *control) 1025a67d7f6fSMat Martineau { 1026a67d7f6fSMat Martineau struct sk_buff *skb; 1027a67d7f6fSMat Martineau u32 control_field; 1028a67d7f6fSMat Martineau 1029a67d7f6fSMat Martineau BT_DBG("chan %p, control %p", chan, control); 1030a67d7f6fSMat Martineau 1031a67d7f6fSMat Martineau if (!control->sframe) 1032a67d7f6fSMat Martineau return; 1033a67d7f6fSMat Martineau 1034b99e13adSMat Martineau if (__chan_is_moving(chan)) 1035b99e13adSMat Martineau return; 1036b99e13adSMat Martineau 1037a67d7f6fSMat Martineau if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state) && 1038a67d7f6fSMat Martineau !control->poll) 1039a67d7f6fSMat Martineau control->final = 1; 1040a67d7f6fSMat Martineau 1041a67d7f6fSMat Martineau if (control->super == L2CAP_SUPER_RR) 1042a67d7f6fSMat Martineau clear_bit(CONN_RNR_SENT, &chan->conn_state); 1043a67d7f6fSMat Martineau else if (control->super == L2CAP_SUPER_RNR) 1044a67d7f6fSMat Martineau set_bit(CONN_RNR_SENT, &chan->conn_state); 1045a67d7f6fSMat Martineau 1046a67d7f6fSMat Martineau if (control->super != L2CAP_SUPER_SREJ) { 1047a67d7f6fSMat Martineau chan->last_acked_seq = control->reqseq; 1048a67d7f6fSMat Martineau __clear_ack_timer(chan); 1049a67d7f6fSMat Martineau } 1050a67d7f6fSMat Martineau 1051a67d7f6fSMat Martineau BT_DBG("reqseq %d, final %d, poll %d, super %d", control->reqseq, 1052a67d7f6fSMat Martineau control->final, control->poll, control->super); 1053a67d7f6fSMat Martineau 1054a67d7f6fSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 1055a67d7f6fSMat Martineau control_field = __pack_extended_control(control); 1056a67d7f6fSMat Martineau else 1057a67d7f6fSMat Martineau control_field = __pack_enhanced_control(control); 1058a67d7f6fSMat Martineau 1059a67d7f6fSMat Martineau skb = l2cap_create_sframe_pdu(chan, control_field); 1060a67d7f6fSMat Martineau if (!IS_ERR(skb)) 106173d80debSLuiz Augusto von Dentz l2cap_do_send(chan, skb); 10620a708f8fSGustavo F. Padovan } 10630a708f8fSGustavo F. Padovan 1064c9e3d5e0SMat Martineau static void l2cap_send_rr_or_rnr(struct l2cap_chan *chan, bool poll) 10650a708f8fSGustavo F. Padovan { 1066c9e3d5e0SMat Martineau struct l2cap_ctrl control; 10670a708f8fSGustavo F. Padovan 1068c9e3d5e0SMat Martineau BT_DBG("chan %p, poll %d", chan, poll); 1069c9e3d5e0SMat Martineau 1070c9e3d5e0SMat Martineau memset(&control, 0, sizeof(control)); 1071c9e3d5e0SMat Martineau control.sframe = 1; 1072c9e3d5e0SMat Martineau control.poll = poll; 1073c9e3d5e0SMat Martineau 1074c9e3d5e0SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) 1075c9e3d5e0SMat Martineau control.super = L2CAP_SUPER_RNR; 1076c9e3d5e0SMat Martineau else 1077c9e3d5e0SMat Martineau control.super = L2CAP_SUPER_RR; 1078c9e3d5e0SMat Martineau 1079c9e3d5e0SMat Martineau control.reqseq = chan->buffer_seq; 1080c9e3d5e0SMat Martineau l2cap_send_sframe(chan, &control); 10810a708f8fSGustavo F. Padovan } 10820a708f8fSGustavo F. Padovan 1083b4450035SGustavo F. Padovan static inline int __l2cap_no_conn_pending(struct l2cap_chan *chan) 10840a708f8fSGustavo F. Padovan { 1085c1360a1cSGustavo F. Padovan return !test_bit(CONF_CONNECT_PEND, &chan->conf_state); 10860a708f8fSGustavo F. Padovan } 10870a708f8fSGustavo F. Padovan 108893c3e8f5SAndrei Emeltchenko static bool __amp_capable(struct l2cap_chan *chan) 108993c3e8f5SAndrei Emeltchenko { 109093c3e8f5SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 10911df7b17aSMarcel Holtmann struct hci_dev *hdev; 10921df7b17aSMarcel Holtmann bool amp_available = false; 109393c3e8f5SAndrei Emeltchenko 10941df7b17aSMarcel Holtmann if (!conn->hs_enabled) 10951df7b17aSMarcel Holtmann return false; 10961df7b17aSMarcel Holtmann 10971df7b17aSMarcel Holtmann if (!(conn->fixed_chan_mask & L2CAP_FC_A2MP)) 10981df7b17aSMarcel Holtmann return false; 10991df7b17aSMarcel Holtmann 11001df7b17aSMarcel Holtmann read_lock(&hci_dev_list_lock); 11011df7b17aSMarcel Holtmann list_for_each_entry(hdev, &hci_dev_list, list) { 11021df7b17aSMarcel Holtmann if (hdev->amp_type != AMP_TYPE_BREDR && 11031df7b17aSMarcel Holtmann test_bit(HCI_UP, &hdev->flags)) { 11041df7b17aSMarcel Holtmann amp_available = true; 11051df7b17aSMarcel Holtmann break; 11061df7b17aSMarcel Holtmann } 11071df7b17aSMarcel Holtmann } 11081df7b17aSMarcel Holtmann read_unlock(&hci_dev_list_lock); 11091df7b17aSMarcel Holtmann 11101df7b17aSMarcel Holtmann if (chan->chan_policy == BT_CHANNEL_POLICY_AMP_PREFERRED) 11111df7b17aSMarcel Holtmann return amp_available; 1112848566b3SMarcel Holtmann 111393c3e8f5SAndrei Emeltchenko return false; 111493c3e8f5SAndrei Emeltchenko } 111593c3e8f5SAndrei Emeltchenko 11165ce66b59SAndrei Emeltchenko static bool l2cap_check_efs(struct l2cap_chan *chan) 11175ce66b59SAndrei Emeltchenko { 11185ce66b59SAndrei Emeltchenko /* Check EFS parameters */ 11195ce66b59SAndrei Emeltchenko return true; 11205ce66b59SAndrei Emeltchenko } 11215ce66b59SAndrei Emeltchenko 11222766be48SAndrei Emeltchenko void l2cap_send_conn_req(struct l2cap_chan *chan) 11239b27f350SAndrei Emeltchenko { 11249b27f350SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 11259b27f350SAndrei Emeltchenko struct l2cap_conn_req req; 11269b27f350SAndrei Emeltchenko 11279b27f350SAndrei Emeltchenko req.scid = cpu_to_le16(chan->scid); 11289b27f350SAndrei Emeltchenko req.psm = chan->psm; 11299b27f350SAndrei Emeltchenko 11309b27f350SAndrei Emeltchenko chan->ident = l2cap_get_ident(conn); 11319b27f350SAndrei Emeltchenko 11329b27f350SAndrei Emeltchenko set_bit(CONF_CONNECT_PEND, &chan->conf_state); 11339b27f350SAndrei Emeltchenko 11349b27f350SAndrei Emeltchenko l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_REQ, sizeof(req), &req); 11359b27f350SAndrei Emeltchenko } 11369b27f350SAndrei Emeltchenko 11378eb200bdSMat Martineau static void l2cap_send_create_chan_req(struct l2cap_chan *chan, u8 amp_id) 11388eb200bdSMat Martineau { 11398eb200bdSMat Martineau struct l2cap_create_chan_req req; 11408eb200bdSMat Martineau req.scid = cpu_to_le16(chan->scid); 11418eb200bdSMat Martineau req.psm = chan->psm; 11428eb200bdSMat Martineau req.amp_id = amp_id; 11438eb200bdSMat Martineau 11448eb200bdSMat Martineau chan->ident = l2cap_get_ident(chan->conn); 11458eb200bdSMat Martineau 11468eb200bdSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_CREATE_CHAN_REQ, 11478eb200bdSMat Martineau sizeof(req), &req); 11488eb200bdSMat Martineau } 11498eb200bdSMat Martineau 115002b0fbb9SMat Martineau static void l2cap_move_setup(struct l2cap_chan *chan) 115102b0fbb9SMat Martineau { 115202b0fbb9SMat Martineau struct sk_buff *skb; 115302b0fbb9SMat Martineau 115402b0fbb9SMat Martineau BT_DBG("chan %p", chan); 115502b0fbb9SMat Martineau 115602b0fbb9SMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 115702b0fbb9SMat Martineau return; 115802b0fbb9SMat Martineau 115902b0fbb9SMat Martineau __clear_retrans_timer(chan); 116002b0fbb9SMat Martineau __clear_monitor_timer(chan); 116102b0fbb9SMat Martineau __clear_ack_timer(chan); 116202b0fbb9SMat Martineau 116302b0fbb9SMat Martineau chan->retry_count = 0; 116402b0fbb9SMat Martineau skb_queue_walk(&chan->tx_q, skb) { 116502b0fbb9SMat Martineau if (bt_cb(skb)->control.retries) 116602b0fbb9SMat Martineau bt_cb(skb)->control.retries = 1; 116702b0fbb9SMat Martineau else 116802b0fbb9SMat Martineau break; 116902b0fbb9SMat Martineau } 117002b0fbb9SMat Martineau 117102b0fbb9SMat Martineau chan->expected_tx_seq = chan->buffer_seq; 117202b0fbb9SMat Martineau 117302b0fbb9SMat Martineau clear_bit(CONN_REJ_ACT, &chan->conn_state); 117402b0fbb9SMat Martineau clear_bit(CONN_SREJ_ACT, &chan->conn_state); 117502b0fbb9SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 117602b0fbb9SMat Martineau l2cap_seq_list_clear(&chan->srej_list); 117702b0fbb9SMat Martineau skb_queue_purge(&chan->srej_q); 117802b0fbb9SMat Martineau 117902b0fbb9SMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 118002b0fbb9SMat Martineau chan->rx_state = L2CAP_RX_STATE_MOVE; 118102b0fbb9SMat Martineau 118202b0fbb9SMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 118302b0fbb9SMat Martineau } 118402b0fbb9SMat Martineau 11855f3847a4SMat Martineau static void l2cap_move_done(struct l2cap_chan *chan) 11865f3847a4SMat Martineau { 11875f3847a4SMat Martineau u8 move_role = chan->move_role; 11885f3847a4SMat Martineau BT_DBG("chan %p", chan); 11895f3847a4SMat Martineau 11905f3847a4SMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 11915f3847a4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 11925f3847a4SMat Martineau 11935f3847a4SMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 11945f3847a4SMat Martineau return; 11955f3847a4SMat Martineau 11965f3847a4SMat Martineau switch (move_role) { 11975f3847a4SMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 11985f3847a4SMat Martineau l2cap_tx(chan, NULL, NULL, L2CAP_EV_EXPLICIT_POLL); 11995f3847a4SMat Martineau chan->rx_state = L2CAP_RX_STATE_WAIT_F; 12005f3847a4SMat Martineau break; 12015f3847a4SMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 12025f3847a4SMat Martineau chan->rx_state = L2CAP_RX_STATE_WAIT_P; 12035f3847a4SMat Martineau break; 12045f3847a4SMat Martineau } 12055f3847a4SMat Martineau } 12065f3847a4SMat Martineau 12079f0caeb1SVinicius Costa Gomes static void l2cap_chan_ready(struct l2cap_chan *chan) 12089f0caeb1SVinicius Costa Gomes { 12092827011fSMat Martineau /* This clears all conf flags, including CONF_NOT_COMPLETE */ 12109f0caeb1SVinicius Costa Gomes chan->conf_state = 0; 12119f0caeb1SVinicius Costa Gomes __clear_chan_timer(chan); 12129f0caeb1SVinicius Costa Gomes 12130ce43ce6SJohan Hedberg if (chan->mode == L2CAP_MODE_LE_FLOWCTL && !chan->tx_credits) 12140ce43ce6SJohan Hedberg chan->ops->suspend(chan); 1215177f8f2bSJohan Hedberg 121654a59aa2SAndrei Emeltchenko chan->state = BT_CONNECTED; 12179f0caeb1SVinicius Costa Gomes 121854a59aa2SAndrei Emeltchenko chan->ops->ready(chan); 12199f0caeb1SVinicius Costa Gomes } 12209f0caeb1SVinicius Costa Gomes 1221f1496deeSJohan Hedberg static void l2cap_le_connect(struct l2cap_chan *chan) 1222f1496deeSJohan Hedberg { 1223f1496deeSJohan Hedberg struct l2cap_conn *conn = chan->conn; 1224f1496deeSJohan Hedberg struct l2cap_le_conn_req req; 1225f1496deeSJohan Hedberg 1226595177f3SJohan Hedberg if (test_and_set_bit(FLAG_LE_CONN_REQ_SENT, &chan->flags)) 1227595177f3SJohan Hedberg return; 1228595177f3SJohan Hedberg 1229f1496deeSJohan Hedberg req.psm = chan->psm; 1230f1496deeSJohan Hedberg req.scid = cpu_to_le16(chan->scid); 1231f1496deeSJohan Hedberg req.mtu = cpu_to_le16(chan->imtu); 12323916aed8SJohan Hedberg req.mps = cpu_to_le16(chan->mps); 12330cd75f7eSJohan Hedberg req.credits = cpu_to_le16(chan->rx_credits); 1234f1496deeSJohan Hedberg 1235f1496deeSJohan Hedberg chan->ident = l2cap_get_ident(conn); 1236f1496deeSJohan Hedberg 1237f1496deeSJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CONN_REQ, 1238f1496deeSJohan Hedberg sizeof(req), &req); 1239f1496deeSJohan Hedberg } 1240f1496deeSJohan Hedberg 1241f1496deeSJohan Hedberg static void l2cap_le_start(struct l2cap_chan *chan) 1242f1496deeSJohan Hedberg { 1243f1496deeSJohan Hedberg struct l2cap_conn *conn = chan->conn; 1244f1496deeSJohan Hedberg 1245f1496deeSJohan Hedberg if (!smp_conn_security(conn->hcon, chan->sec_level)) 1246f1496deeSJohan Hedberg return; 1247f1496deeSJohan Hedberg 1248f1496deeSJohan Hedberg if (!chan->psm) { 1249f1496deeSJohan Hedberg l2cap_chan_ready(chan); 1250f1496deeSJohan Hedberg return; 1251f1496deeSJohan Hedberg } 1252f1496deeSJohan Hedberg 1253f1496deeSJohan Hedberg if (chan->state == BT_CONNECT) 1254f1496deeSJohan Hedberg l2cap_le_connect(chan); 1255f1496deeSJohan Hedberg } 1256f1496deeSJohan Hedberg 125793c3e8f5SAndrei Emeltchenko static void l2cap_start_connection(struct l2cap_chan *chan) 125893c3e8f5SAndrei Emeltchenko { 125993c3e8f5SAndrei Emeltchenko if (__amp_capable(chan)) { 126093c3e8f5SAndrei Emeltchenko BT_DBG("chan %p AMP capable: discover AMPs", chan); 126193c3e8f5SAndrei Emeltchenko a2mp_discover_amp(chan); 1262f1496deeSJohan Hedberg } else if (chan->conn->hcon->type == LE_LINK) { 1263f1496deeSJohan Hedberg l2cap_le_start(chan); 126493c3e8f5SAndrei Emeltchenko } else { 126593c3e8f5SAndrei Emeltchenko l2cap_send_conn_req(chan); 126693c3e8f5SAndrei Emeltchenko } 126793c3e8f5SAndrei Emeltchenko } 126893c3e8f5SAndrei Emeltchenko 1269fc7f8a7eSGustavo F. Padovan static void l2cap_do_start(struct l2cap_chan *chan) 12700a708f8fSGustavo F. Padovan { 12718c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 12720a708f8fSGustavo F. Padovan 12739f0caeb1SVinicius Costa Gomes if (conn->hcon->type == LE_LINK) { 127496ac34fbSJohan Hedberg l2cap_le_start(chan); 12759f0caeb1SVinicius Costa Gomes return; 12769f0caeb1SVinicius Costa Gomes } 12779f0caeb1SVinicius Costa Gomes 12780a708f8fSGustavo F. Padovan if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) { 12790a708f8fSGustavo F. Padovan if (!(conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE)) 12800a708f8fSGustavo F. Padovan return; 12810a708f8fSGustavo F. Padovan 1282e7cafc45SJohan Hedberg if (l2cap_chan_check_security(chan, true) && 128393c3e8f5SAndrei Emeltchenko __l2cap_no_conn_pending(chan)) { 128493c3e8f5SAndrei Emeltchenko l2cap_start_connection(chan); 128593c3e8f5SAndrei Emeltchenko } 12860a708f8fSGustavo F. Padovan } else { 12870a708f8fSGustavo F. Padovan struct l2cap_info_req req; 1288dcf4adbfSJoe Perches req.type = cpu_to_le16(L2CAP_IT_FEAT_MASK); 12890a708f8fSGustavo F. Padovan 12900a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_SENT; 12910a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 12920a708f8fSGustavo F. Padovan 1293ba13ccd9SMarcel Holtmann schedule_delayed_work(&conn->info_timer, L2CAP_INFO_TIMEOUT); 12940a708f8fSGustavo F. Padovan 12952d792818SGustavo Padovan l2cap_send_cmd(conn, conn->info_ident, L2CAP_INFO_REQ, 12962d792818SGustavo Padovan sizeof(req), &req); 12970a708f8fSGustavo F. Padovan } 12980a708f8fSGustavo F. Padovan } 12990a708f8fSGustavo F. Padovan 13000a708f8fSGustavo F. Padovan static inline int l2cap_mode_supported(__u8 mode, __u32 feat_mask) 13010a708f8fSGustavo F. Padovan { 13020a708f8fSGustavo F. Padovan u32 local_feat_mask = l2cap_feat_mask; 13030a708f8fSGustavo F. Padovan if (!disable_ertm) 13040a708f8fSGustavo F. Padovan local_feat_mask |= L2CAP_FEAT_ERTM | L2CAP_FEAT_STREAMING; 13050a708f8fSGustavo F. Padovan 13060a708f8fSGustavo F. Padovan switch (mode) { 13070a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 13080a708f8fSGustavo F. Padovan return L2CAP_FEAT_ERTM & feat_mask & local_feat_mask; 13090a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 13100a708f8fSGustavo F. Padovan return L2CAP_FEAT_STREAMING & feat_mask & local_feat_mask; 13110a708f8fSGustavo F. Padovan default: 13120a708f8fSGustavo F. Padovan return 0x00; 13130a708f8fSGustavo F. Padovan } 13140a708f8fSGustavo F. Padovan } 13150a708f8fSGustavo F. Padovan 13165e4e3972SAndrei Emeltchenko static void l2cap_send_disconn_req(struct l2cap_chan *chan, int err) 13170a708f8fSGustavo F. Padovan { 13185e4e3972SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 13190a708f8fSGustavo F. Padovan struct l2cap_disconn_req req; 13200a708f8fSGustavo F. Padovan 13210a708f8fSGustavo F. Padovan if (!conn) 13220a708f8fSGustavo F. Padovan return; 13230a708f8fSGustavo F. Padovan 1324aad3d0e3SAndrei Emeltchenko if (chan->mode == L2CAP_MODE_ERTM && chan->state == BT_CONNECTED) { 13251a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 13261a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 13271a09bcb9SGustavo F. Padovan __clear_ack_timer(chan); 13280a708f8fSGustavo F. Padovan } 13290a708f8fSGustavo F. Padovan 13302338a7e0SJohan Hedberg if (chan->scid == L2CAP_CID_A2MP) { 1331d117773cSGustavo Padovan l2cap_state_change(chan, BT_DISCONN); 1332416fa752SAndrei Emeltchenko return; 1333416fa752SAndrei Emeltchenko } 1334416fa752SAndrei Emeltchenko 1335fe4128e0SGustavo F. Padovan req.dcid = cpu_to_le16(chan->dcid); 1336fe4128e0SGustavo F. Padovan req.scid = cpu_to_le16(chan->scid); 13372d792818SGustavo Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_DISCONN_REQ, 13382d792818SGustavo Padovan sizeof(req), &req); 13390a708f8fSGustavo F. Padovan 1340f8e73017SGustavo Padovan l2cap_state_change_and_error(chan, BT_DISCONN, err); 13410a708f8fSGustavo F. Padovan } 13420a708f8fSGustavo F. Padovan 13430a708f8fSGustavo F. Padovan /* ---- L2CAP connections ---- */ 13440a708f8fSGustavo F. Padovan static void l2cap_conn_start(struct l2cap_conn *conn) 13450a708f8fSGustavo F. Padovan { 13463df91ea2SAndrei Emeltchenko struct l2cap_chan *chan, *tmp; 13470a708f8fSGustavo F. Padovan 13480a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 13490a708f8fSGustavo F. Padovan 13503df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 13510a708f8fSGustavo F. Padovan 13523df91ea2SAndrei Emeltchenko list_for_each_entry_safe(chan, tmp, &conn->chan_l, list) { 13536be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 13540a708f8fSGustavo F. Padovan 1355715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 13566be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 13570a708f8fSGustavo F. Padovan continue; 13580a708f8fSGustavo F. Padovan } 13590a708f8fSGustavo F. Padovan 136089bc500eSGustavo F. Padovan if (chan->state == BT_CONNECT) { 1361e7cafc45SJohan Hedberg if (!l2cap_chan_check_security(chan, true) || 1362b4450035SGustavo F. Padovan !__l2cap_no_conn_pending(chan)) { 13636be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 13640a708f8fSGustavo F. Padovan continue; 13650a708f8fSGustavo F. Padovan } 13660a708f8fSGustavo F. Padovan 1367c1360a1cSGustavo F. Padovan if (!l2cap_mode_supported(chan->mode, conn->feat_mask) 1368c1360a1cSGustavo F. Padovan && test_bit(CONF_STATE2_DEVICE, 1369c1360a1cSGustavo F. Padovan &chan->conf_state)) { 13700f852724SGustavo F. Padovan l2cap_chan_close(chan, ECONNRESET); 13716be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 13720a708f8fSGustavo F. Padovan continue; 13730a708f8fSGustavo F. Padovan } 13740a708f8fSGustavo F. Padovan 137593c3e8f5SAndrei Emeltchenko l2cap_start_connection(chan); 13760a708f8fSGustavo F. Padovan 137789bc500eSGustavo F. Padovan } else if (chan->state == BT_CONNECT2) { 13780a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 13790a708f8fSGustavo F. Padovan char buf[128]; 1380fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 1381fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 13820a708f8fSGustavo F. Padovan 1383e7cafc45SJohan Hedberg if (l2cap_chan_check_security(chan, false)) { 1384bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 1385dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_PEND); 1386dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_AUTHOR_PEND); 13872dc4e510SGustavo Padovan chan->ops->defer(chan); 13880a708f8fSGustavo F. Padovan 13890a708f8fSGustavo F. Padovan } else { 1390acdcabf5SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 1391dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 1392dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 13930a708f8fSGustavo F. Padovan } 13940a708f8fSGustavo F. Padovan } else { 1395dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_PEND); 1396dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_AUTHEN_PEND); 13970a708f8fSGustavo F. Padovan } 13980a708f8fSGustavo F. Padovan 1399fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 1400fc7f8a7eSGustavo F. Padovan sizeof(rsp), &rsp); 14010a708f8fSGustavo F. Padovan 1402c1360a1cSGustavo F. Padovan if (test_bit(CONF_REQ_SENT, &chan->conf_state) || 14030a708f8fSGustavo F. Padovan rsp.result != L2CAP_CR_SUCCESS) { 14046be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 14050a708f8fSGustavo F. Padovan continue; 14060a708f8fSGustavo F. Padovan } 14070a708f8fSGustavo F. Padovan 1408c1360a1cSGustavo F. Padovan set_bit(CONF_REQ_SENT, &chan->conf_state); 14090a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 141073ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 141173ffa904SGustavo F. Padovan chan->num_conf_req++; 14120a708f8fSGustavo F. Padovan } 14130a708f8fSGustavo F. Padovan 14146be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 14150a708f8fSGustavo F. Padovan } 14160a708f8fSGustavo F. Padovan 14173df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 14180a708f8fSGustavo F. Padovan } 14190a708f8fSGustavo F. Padovan 1420c2287681SIdo Yariv /* Find socket with cid and source/destination bdaddr. 1421b62f328bSVille Tervo * Returns closest match, locked. 1422b62f328bSVille Tervo */ 1423d9b88702SAndrei Emeltchenko static struct l2cap_chan *l2cap_global_chan_by_scid(int state, u16 cid, 1424c2287681SIdo Yariv bdaddr_t *src, 1425c2287681SIdo Yariv bdaddr_t *dst) 1426b62f328bSVille Tervo { 142723691d75SGustavo F. Padovan struct l2cap_chan *c, *c1 = NULL; 1428b62f328bSVille Tervo 142923691d75SGustavo F. Padovan read_lock(&chan_list_lock); 1430b62f328bSVille Tervo 143123691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 143289bc500eSGustavo F. Padovan if (state && c->state != state) 1433b62f328bSVille Tervo continue; 1434b62f328bSVille Tervo 143523691d75SGustavo F. Padovan if (c->scid == cid) { 1436c2287681SIdo Yariv int src_match, dst_match; 1437c2287681SIdo Yariv int src_any, dst_any; 1438c2287681SIdo Yariv 1439b62f328bSVille Tervo /* Exact match. */ 14407eafc59eSMarcel Holtmann src_match = !bacmp(&c->src, src); 14417eafc59eSMarcel Holtmann dst_match = !bacmp(&c->dst, dst); 1442c2287681SIdo Yariv if (src_match && dst_match) { 144323691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 144423691d75SGustavo F. Padovan return c; 144523691d75SGustavo F. Padovan } 1446b62f328bSVille Tervo 1447b62f328bSVille Tervo /* Closest match */ 14487eafc59eSMarcel Holtmann src_any = !bacmp(&c->src, BDADDR_ANY); 14497eafc59eSMarcel Holtmann dst_any = !bacmp(&c->dst, BDADDR_ANY); 1450c2287681SIdo Yariv if ((src_match && dst_any) || (src_any && dst_match) || 1451c2287681SIdo Yariv (src_any && dst_any)) 145223691d75SGustavo F. Padovan c1 = c; 1453b62f328bSVille Tervo } 1454b62f328bSVille Tervo } 1455280f294fSGustavo F. Padovan 145623691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 1457b62f328bSVille Tervo 145823691d75SGustavo F. Padovan return c1; 1459b62f328bSVille Tervo } 1460b62f328bSVille Tervo 1461b62f328bSVille Tervo static void l2cap_le_conn_ready(struct l2cap_conn *conn) 1462b62f328bSVille Tervo { 1463cc8dba2bSMarcel Holtmann struct hci_conn *hcon = conn->hcon; 1464dcc36c16SJohan Hedberg struct hci_dev *hdev = hcon->hdev; 146523691d75SGustavo F. Padovan struct l2cap_chan *chan, *pchan; 1466cc8dba2bSMarcel Holtmann u8 dst_type; 1467b62f328bSVille Tervo 1468b62f328bSVille Tervo BT_DBG(""); 1469b62f328bSVille Tervo 1470b62f328bSVille Tervo /* Check if we have socket listening on cid */ 1471073d1cf3SJohan Hedberg pchan = l2cap_global_chan_by_scid(BT_LISTEN, L2CAP_CID_ATT, 1472cc8dba2bSMarcel Holtmann &hcon->src, &hcon->dst); 147323691d75SGustavo F. Padovan if (!pchan) 1474b62f328bSVille Tervo return; 1475b62f328bSVille Tervo 147644f3b0fbSJohan Hedberg /* Client ATT sockets should override the server one */ 147744f3b0fbSJohan Hedberg if (__l2cap_get_chan_by_dcid(conn, L2CAP_CID_ATT)) 147844f3b0fbSJohan Hedberg return; 147944f3b0fbSJohan Hedberg 1480cc8dba2bSMarcel Holtmann dst_type = bdaddr_type(hcon, hcon->dst_type); 1481cc8dba2bSMarcel Holtmann 1482cc8dba2bSMarcel Holtmann /* If device is blocked, do not create a channel for it */ 1483dcc36c16SJohan Hedberg if (hci_bdaddr_list_lookup(&hdev->blacklist, &hcon->dst, dst_type)) 1484cc8dba2bSMarcel Holtmann return; 1485cc8dba2bSMarcel Holtmann 148680afeb6cSMarcel Holtmann /* For LE slave connections, make sure the connection interval 148780afeb6cSMarcel Holtmann * is in the range of the minium and maximum interval that has 148880afeb6cSMarcel Holtmann * been configured for this connection. If not, then trigger 148980afeb6cSMarcel Holtmann * the connection update procedure. 149080afeb6cSMarcel Holtmann */ 149140bef302SJohan Hedberg if (hcon->role == HCI_ROLE_SLAVE && 149280afeb6cSMarcel Holtmann (hcon->le_conn_interval < hcon->le_conn_min_interval || 149380afeb6cSMarcel Holtmann hcon->le_conn_interval > hcon->le_conn_max_interval)) { 149480afeb6cSMarcel Holtmann struct l2cap_conn_param_update_req req; 149580afeb6cSMarcel Holtmann 149680afeb6cSMarcel Holtmann req.min = cpu_to_le16(hcon->le_conn_min_interval); 149780afeb6cSMarcel Holtmann req.max = cpu_to_le16(hcon->le_conn_max_interval); 149880afeb6cSMarcel Holtmann req.latency = cpu_to_le16(hcon->le_conn_latency); 149980afeb6cSMarcel Holtmann req.to_multiplier = cpu_to_le16(hcon->le_supv_timeout); 150080afeb6cSMarcel Holtmann 150180afeb6cSMarcel Holtmann l2cap_send_cmd(conn, l2cap_get_ident(conn), 150280afeb6cSMarcel Holtmann L2CAP_CONN_PARAM_UPDATE_REQ, sizeof(req), &req); 150380afeb6cSMarcel Holtmann } 150480afeb6cSMarcel Holtmann 15058ffb9290SGustavo Padovan l2cap_chan_lock(pchan); 150662f3a2cfSGustavo F. Padovan 150780b98027SGustavo Padovan chan = pchan->ops->new_connection(pchan); 150880808e43SGustavo F. Padovan if (!chan) 1509b62f328bSVille Tervo goto clean; 1510b62f328bSVille Tervo 1511cc8dba2bSMarcel Holtmann bacpy(&chan->src, &hcon->src); 1512cc8dba2bSMarcel Holtmann bacpy(&chan->dst, &hcon->dst); 1513cc8dba2bSMarcel Holtmann chan->src_type = bdaddr_type(hcon, hcon->src_type); 1514cc8dba2bSMarcel Holtmann chan->dst_type = dst_type; 1515b62f328bSVille Tervo 151644f3b0fbSJohan Hedberg __l2cap_chan_add(conn, chan); 151748454079SGustavo F. Padovan 1518b62f328bSVille Tervo clean: 15198ffb9290SGustavo Padovan l2cap_chan_unlock(pchan); 1520b62f328bSVille Tervo } 1521b62f328bSVille Tervo 15220a708f8fSGustavo F. Padovan static void l2cap_conn_ready(struct l2cap_conn *conn) 15230a708f8fSGustavo F. Padovan { 152448454079SGustavo F. Padovan struct l2cap_chan *chan; 1525cc110922SVinicius Costa Gomes struct hci_conn *hcon = conn->hcon; 15260a708f8fSGustavo F. Padovan 15270a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 15280a708f8fSGustavo F. Padovan 1529d8729922SJohan Hedberg /* For outgoing pairing which doesn't necessarily have an 1530d8729922SJohan Hedberg * associated socket (e.g. mgmt_pair_device). 1531d8729922SJohan Hedberg */ 1532cc110922SVinicius Costa Gomes if (hcon->out && hcon->type == LE_LINK) 1533cc110922SVinicius Costa Gomes smp_conn_security(hcon, hcon->pending_sec_level); 1534160dc6acSVinicius Costa Gomes 15353df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 15360a708f8fSGustavo F. Padovan 153744f3b0fbSJohan Hedberg if (hcon->type == LE_LINK) 153844f3b0fbSJohan Hedberg l2cap_le_conn_ready(conn); 153944f3b0fbSJohan Hedberg 15403df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 1541baa7e1faSGustavo F. Padovan 15426be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 15430a708f8fSGustavo F. Padovan 15442338a7e0SJohan Hedberg if (chan->scid == L2CAP_CID_A2MP) { 1545416fa752SAndrei Emeltchenko l2cap_chan_unlock(chan); 1546416fa752SAndrei Emeltchenko continue; 1547416fa752SAndrei Emeltchenko } 1548416fa752SAndrei Emeltchenko 1549cc110922SVinicius Costa Gomes if (hcon->type == LE_LINK) { 1550f1496deeSJohan Hedberg l2cap_le_start(chan); 155163128451SVinicius Costa Gomes } else if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 155274e75740SGustavo Padovan l2cap_chan_ready(chan); 1553b501d6a1SAnderson Briglia 15541c244f79SGustavo Padovan } else if (chan->state == BT_CONNECT) { 1555fc7f8a7eSGustavo F. Padovan l2cap_do_start(chan); 15561c244f79SGustavo Padovan } 15570a708f8fSGustavo F. Padovan 15586be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 15590a708f8fSGustavo F. Padovan } 15600a708f8fSGustavo F. Padovan 15613df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 156261a939c6SJohan Hedberg 156361a939c6SJohan Hedberg queue_work(hcon->hdev->workqueue, &conn->pending_rx_work); 15640a708f8fSGustavo F. Padovan } 15650a708f8fSGustavo F. Padovan 15660a708f8fSGustavo F. Padovan /* Notify sockets that we cannot guaranty reliability anymore */ 15670a708f8fSGustavo F. Padovan static void l2cap_conn_unreliable(struct l2cap_conn *conn, int err) 15680a708f8fSGustavo F. Padovan { 156948454079SGustavo F. Padovan struct l2cap_chan *chan; 15700a708f8fSGustavo F. Padovan 15710a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 15720a708f8fSGustavo F. Padovan 15733df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 15740a708f8fSGustavo F. Padovan 15753df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 1576ecf61bdbSAndrei Emeltchenko if (test_bit(FLAG_FORCE_RELIABLE, &chan->flags)) 15771d8b1fd5SGustavo Padovan l2cap_chan_set_err(chan, err); 15780a708f8fSGustavo F. Padovan } 15790a708f8fSGustavo F. Padovan 15803df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 15810a708f8fSGustavo F. Padovan } 15820a708f8fSGustavo F. Padovan 1583f878fcadSGustavo F. Padovan static void l2cap_info_timeout(struct work_struct *work) 15840a708f8fSGustavo F. Padovan { 1585f878fcadSGustavo F. Padovan struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 1586030013d8SGustavo F. Padovan info_timer.work); 15870a708f8fSGustavo F. Padovan 15880a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 15890a708f8fSGustavo F. Padovan conn->info_ident = 0; 15900a708f8fSGustavo F. Padovan 15910a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 15920a708f8fSGustavo F. Padovan } 15930a708f8fSGustavo F. Padovan 15942c8e1411SDavid Herrmann /* 15952c8e1411SDavid Herrmann * l2cap_user 15962c8e1411SDavid Herrmann * External modules can register l2cap_user objects on l2cap_conn. The ->probe 15972c8e1411SDavid Herrmann * callback is called during registration. The ->remove callback is called 15982c8e1411SDavid Herrmann * during unregistration. 15992c8e1411SDavid Herrmann * An l2cap_user object can either be explicitly unregistered or when the 16002c8e1411SDavid Herrmann * underlying l2cap_conn object is deleted. This guarantees that l2cap->hcon, 16012c8e1411SDavid Herrmann * l2cap->hchan, .. are valid as long as the remove callback hasn't been called. 16022c8e1411SDavid Herrmann * External modules must own a reference to the l2cap_conn object if they intend 16032c8e1411SDavid Herrmann * to call l2cap_unregister_user(). The l2cap_conn object might get destroyed at 16042c8e1411SDavid Herrmann * any time if they don't. 16052c8e1411SDavid Herrmann */ 16062c8e1411SDavid Herrmann 16072c8e1411SDavid Herrmann int l2cap_register_user(struct l2cap_conn *conn, struct l2cap_user *user) 16082c8e1411SDavid Herrmann { 16092c8e1411SDavid Herrmann struct hci_dev *hdev = conn->hcon->hdev; 16102c8e1411SDavid Herrmann int ret; 16112c8e1411SDavid Herrmann 16122c8e1411SDavid Herrmann /* We need to check whether l2cap_conn is registered. If it is not, we 16132c8e1411SDavid Herrmann * must not register the l2cap_user. l2cap_conn_del() is unregisters 16142c8e1411SDavid Herrmann * l2cap_conn objects, but doesn't provide its own locking. Instead, it 16152c8e1411SDavid Herrmann * relies on the parent hci_conn object to be locked. This itself relies 16162c8e1411SDavid Herrmann * on the hci_dev object to be locked. So we must lock the hci device 16172c8e1411SDavid Herrmann * here, too. */ 16182c8e1411SDavid Herrmann 16192c8e1411SDavid Herrmann hci_dev_lock(hdev); 16202c8e1411SDavid Herrmann 16212c8e1411SDavid Herrmann if (user->list.next || user->list.prev) { 16222c8e1411SDavid Herrmann ret = -EINVAL; 16232c8e1411SDavid Herrmann goto out_unlock; 16242c8e1411SDavid Herrmann } 16252c8e1411SDavid Herrmann 16262c8e1411SDavid Herrmann /* conn->hchan is NULL after l2cap_conn_del() was called */ 16272c8e1411SDavid Herrmann if (!conn->hchan) { 16282c8e1411SDavid Herrmann ret = -ENODEV; 16292c8e1411SDavid Herrmann goto out_unlock; 16302c8e1411SDavid Herrmann } 16312c8e1411SDavid Herrmann 16322c8e1411SDavid Herrmann ret = user->probe(conn, user); 16332c8e1411SDavid Herrmann if (ret) 16342c8e1411SDavid Herrmann goto out_unlock; 16352c8e1411SDavid Herrmann 16362c8e1411SDavid Herrmann list_add(&user->list, &conn->users); 16372c8e1411SDavid Herrmann ret = 0; 16382c8e1411SDavid Herrmann 16392c8e1411SDavid Herrmann out_unlock: 16402c8e1411SDavid Herrmann hci_dev_unlock(hdev); 16412c8e1411SDavid Herrmann return ret; 16422c8e1411SDavid Herrmann } 16432c8e1411SDavid Herrmann EXPORT_SYMBOL(l2cap_register_user); 16442c8e1411SDavid Herrmann 16452c8e1411SDavid Herrmann void l2cap_unregister_user(struct l2cap_conn *conn, struct l2cap_user *user) 16462c8e1411SDavid Herrmann { 16472c8e1411SDavid Herrmann struct hci_dev *hdev = conn->hcon->hdev; 16482c8e1411SDavid Herrmann 16492c8e1411SDavid Herrmann hci_dev_lock(hdev); 16502c8e1411SDavid Herrmann 16512c8e1411SDavid Herrmann if (!user->list.next || !user->list.prev) 16522c8e1411SDavid Herrmann goto out_unlock; 16532c8e1411SDavid Herrmann 16542c8e1411SDavid Herrmann list_del(&user->list); 16552c8e1411SDavid Herrmann user->list.next = NULL; 16562c8e1411SDavid Herrmann user->list.prev = NULL; 16572c8e1411SDavid Herrmann user->remove(conn, user); 16582c8e1411SDavid Herrmann 16592c8e1411SDavid Herrmann out_unlock: 16602c8e1411SDavid Herrmann hci_dev_unlock(hdev); 16612c8e1411SDavid Herrmann } 16622c8e1411SDavid Herrmann EXPORT_SYMBOL(l2cap_unregister_user); 16632c8e1411SDavid Herrmann 16642c8e1411SDavid Herrmann static void l2cap_unregister_all_users(struct l2cap_conn *conn) 16652c8e1411SDavid Herrmann { 16662c8e1411SDavid Herrmann struct l2cap_user *user; 16672c8e1411SDavid Herrmann 16682c8e1411SDavid Herrmann while (!list_empty(&conn->users)) { 16692c8e1411SDavid Herrmann user = list_first_entry(&conn->users, struct l2cap_user, list); 16702c8e1411SDavid Herrmann list_del(&user->list); 16712c8e1411SDavid Herrmann user->list.next = NULL; 16722c8e1411SDavid Herrmann user->list.prev = NULL; 16732c8e1411SDavid Herrmann user->remove(conn, user); 16742c8e1411SDavid Herrmann } 16752c8e1411SDavid Herrmann } 16762c8e1411SDavid Herrmann 16775d3de7dfSVinicius Costa Gomes static void l2cap_conn_del(struct hci_conn *hcon, int err) 16785d3de7dfSVinicius Costa Gomes { 16795d3de7dfSVinicius Costa Gomes struct l2cap_conn *conn = hcon->l2cap_data; 16805d3de7dfSVinicius Costa Gomes struct l2cap_chan *chan, *l; 16815d3de7dfSVinicius Costa Gomes 16825d3de7dfSVinicius Costa Gomes if (!conn) 16835d3de7dfSVinicius Costa Gomes return; 16845d3de7dfSVinicius Costa Gomes 16855d3de7dfSVinicius Costa Gomes BT_DBG("hcon %p conn %p, err %d", hcon, conn, err); 16865d3de7dfSVinicius Costa Gomes 16875d3de7dfSVinicius Costa Gomes kfree_skb(conn->rx_skb); 16885d3de7dfSVinicius Costa Gomes 168961a939c6SJohan Hedberg skb_queue_purge(&conn->pending_rx); 16907ab56c3aSJukka Taimisto 16917ab56c3aSJukka Taimisto /* We can not call flush_work(&conn->pending_rx_work) here since we 16927ab56c3aSJukka Taimisto * might block if we are running on a worker from the same workqueue 16937ab56c3aSJukka Taimisto * pending_rx_work is waiting on. 16947ab56c3aSJukka Taimisto */ 16957ab56c3aSJukka Taimisto if (work_pending(&conn->pending_rx_work)) 16967ab56c3aSJukka Taimisto cancel_work_sync(&conn->pending_rx_work); 169761a939c6SJohan Hedberg 16982c8e1411SDavid Herrmann l2cap_unregister_all_users(conn); 16992c8e1411SDavid Herrmann 17003df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 17013df91ea2SAndrei Emeltchenko 17025d3de7dfSVinicius Costa Gomes /* Kill channels */ 17035d3de7dfSVinicius Costa Gomes list_for_each_entry_safe(chan, l, &conn->chan_l, list) { 170461d6ef3eSMat Martineau l2cap_chan_hold(chan); 17056be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 17066be36555SAndrei Emeltchenko 17075d3de7dfSVinicius Costa Gomes l2cap_chan_del(chan, err); 17086be36555SAndrei Emeltchenko 17096be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 17106be36555SAndrei Emeltchenko 171180b98027SGustavo Padovan chan->ops->close(chan); 171261d6ef3eSMat Martineau l2cap_chan_put(chan); 17135d3de7dfSVinicius Costa Gomes } 17145d3de7dfSVinicius Costa Gomes 17153df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 17163df91ea2SAndrei Emeltchenko 171773d80debSLuiz Augusto von Dentz hci_chan_del(conn->hchan); 171873d80debSLuiz Augusto von Dentz 17195d3de7dfSVinicius Costa Gomes if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) 1720127074bfSUlisses Furquim cancel_delayed_work_sync(&conn->info_timer); 17215d3de7dfSVinicius Costa Gomes 172251a8efd7SJohan Hedberg if (test_and_clear_bit(HCI_CONN_LE_SMP_PEND, &hcon->flags)) { 1723127074bfSUlisses Furquim cancel_delayed_work_sync(&conn->security_timer); 17248aab4757SVinicius Costa Gomes smp_chan_destroy(conn); 1725d26a2345SVinicius Costa Gomes } 17265d3de7dfSVinicius Costa Gomes 17275d3de7dfSVinicius Costa Gomes hcon->l2cap_data = NULL; 17289c903e37SDavid Herrmann conn->hchan = NULL; 17299c903e37SDavid Herrmann l2cap_conn_put(conn); 17305d3de7dfSVinicius Costa Gomes } 17315d3de7dfSVinicius Costa Gomes 17326c9d42a1SGustavo F. Padovan static void security_timeout(struct work_struct *work) 17335d3de7dfSVinicius Costa Gomes { 17346c9d42a1SGustavo F. Padovan struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 17356c9d42a1SGustavo F. Padovan security_timer.work); 17365d3de7dfSVinicius Costa Gomes 1737d06cc416SJohan Hedberg BT_DBG("conn %p", conn); 1738d06cc416SJohan Hedberg 1739d06cc416SJohan Hedberg if (test_and_clear_bit(HCI_CONN_LE_SMP_PEND, &conn->hcon->flags)) { 1740d06cc416SJohan Hedberg smp_chan_destroy(conn); 17415d3de7dfSVinicius Costa Gomes l2cap_conn_del(conn->hcon, ETIMEDOUT); 17425d3de7dfSVinicius Costa Gomes } 1743d06cc416SJohan Hedberg } 17445d3de7dfSVinicius Costa Gomes 17459c903e37SDavid Herrmann static void l2cap_conn_free(struct kref *ref) 17469c903e37SDavid Herrmann { 17479c903e37SDavid Herrmann struct l2cap_conn *conn = container_of(ref, struct l2cap_conn, ref); 17489c903e37SDavid Herrmann 17499c903e37SDavid Herrmann hci_conn_put(conn->hcon); 17509c903e37SDavid Herrmann kfree(conn); 17519c903e37SDavid Herrmann } 17529c903e37SDavid Herrmann 17539c903e37SDavid Herrmann void l2cap_conn_get(struct l2cap_conn *conn) 17549c903e37SDavid Herrmann { 17559c903e37SDavid Herrmann kref_get(&conn->ref); 17569c903e37SDavid Herrmann } 17579c903e37SDavid Herrmann EXPORT_SYMBOL(l2cap_conn_get); 17589c903e37SDavid Herrmann 17599c903e37SDavid Herrmann void l2cap_conn_put(struct l2cap_conn *conn) 17609c903e37SDavid Herrmann { 17619c903e37SDavid Herrmann kref_put(&conn->ref, l2cap_conn_free); 17629c903e37SDavid Herrmann } 17639c903e37SDavid Herrmann EXPORT_SYMBOL(l2cap_conn_put); 17649c903e37SDavid Herrmann 17650a708f8fSGustavo F. Padovan /* ---- Socket interface ---- */ 17660a708f8fSGustavo F. Padovan 1767c2287681SIdo Yariv /* Find socket with psm and source / destination bdaddr. 17680a708f8fSGustavo F. Padovan * Returns closest match. 17690a708f8fSGustavo F. Padovan */ 1770c2287681SIdo Yariv static struct l2cap_chan *l2cap_global_chan_by_psm(int state, __le16 psm, 1771c2287681SIdo Yariv bdaddr_t *src, 1772bf20fd4eSJohan Hedberg bdaddr_t *dst, 1773bf20fd4eSJohan Hedberg u8 link_type) 17740a708f8fSGustavo F. Padovan { 177523691d75SGustavo F. Padovan struct l2cap_chan *c, *c1 = NULL; 17760a708f8fSGustavo F. Padovan 177723691d75SGustavo F. Padovan read_lock(&chan_list_lock); 17780a708f8fSGustavo F. Padovan 177923691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 178089bc500eSGustavo F. Padovan if (state && c->state != state) 17810a708f8fSGustavo F. Padovan continue; 17820a708f8fSGustavo F. Padovan 1783bf20fd4eSJohan Hedberg if (link_type == ACL_LINK && c->src_type != BDADDR_BREDR) 1784bf20fd4eSJohan Hedberg continue; 1785bf20fd4eSJohan Hedberg 1786bf20fd4eSJohan Hedberg if (link_type == LE_LINK && c->src_type == BDADDR_BREDR) 1787bf20fd4eSJohan Hedberg continue; 1788bf20fd4eSJohan Hedberg 178923691d75SGustavo F. Padovan if (c->psm == psm) { 1790c2287681SIdo Yariv int src_match, dst_match; 1791c2287681SIdo Yariv int src_any, dst_any; 1792c2287681SIdo Yariv 17930a708f8fSGustavo F. Padovan /* Exact match. */ 17947eafc59eSMarcel Holtmann src_match = !bacmp(&c->src, src); 17957eafc59eSMarcel Holtmann dst_match = !bacmp(&c->dst, dst); 1796c2287681SIdo Yariv if (src_match && dst_match) { 1797a7567b20SJohannes Berg read_unlock(&chan_list_lock); 179823691d75SGustavo F. Padovan return c; 179923691d75SGustavo F. Padovan } 18000a708f8fSGustavo F. Padovan 18010a708f8fSGustavo F. Padovan /* Closest match */ 18027eafc59eSMarcel Holtmann src_any = !bacmp(&c->src, BDADDR_ANY); 18037eafc59eSMarcel Holtmann dst_any = !bacmp(&c->dst, BDADDR_ANY); 1804c2287681SIdo Yariv if ((src_match && dst_any) || (src_any && dst_match) || 1805c2287681SIdo Yariv (src_any && dst_any)) 180623691d75SGustavo F. Padovan c1 = c; 18070a708f8fSGustavo F. Padovan } 18080a708f8fSGustavo F. Padovan } 18090a708f8fSGustavo F. Padovan 181023691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 18110a708f8fSGustavo F. Padovan 181223691d75SGustavo F. Padovan return c1; 18130a708f8fSGustavo F. Padovan } 18140a708f8fSGustavo F. Padovan 1815721c4181SGustavo F. Padovan static void l2cap_monitor_timeout(struct work_struct *work) 18160a708f8fSGustavo F. Padovan { 1817721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 1818721c4181SGustavo F. Padovan monitor_timer.work); 18190a708f8fSGustavo F. Padovan 1820525cd185SGustavo F. Padovan BT_DBG("chan %p", chan); 18210a708f8fSGustavo F. Padovan 18226be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 18236be36555SAndrei Emeltchenko 182480909e04SMat Martineau if (!chan->conn) { 18256be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 18268d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 18270a708f8fSGustavo F. Padovan return; 18280a708f8fSGustavo F. Padovan } 18290a708f8fSGustavo F. Padovan 1830401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, L2CAP_EV_MONITOR_TO); 18310a708f8fSGustavo F. Padovan 18326be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 18338d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 18340a708f8fSGustavo F. Padovan } 18350a708f8fSGustavo F. Padovan 1836721c4181SGustavo F. Padovan static void l2cap_retrans_timeout(struct work_struct *work) 18370a708f8fSGustavo F. Padovan { 1838721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 1839721c4181SGustavo F. Padovan retrans_timer.work); 18400a708f8fSGustavo F. Padovan 184149208c9cSGustavo F. Padovan BT_DBG("chan %p", chan); 18420a708f8fSGustavo F. Padovan 18436be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 18446be36555SAndrei Emeltchenko 184580909e04SMat Martineau if (!chan->conn) { 184680909e04SMat Martineau l2cap_chan_unlock(chan); 184780909e04SMat Martineau l2cap_chan_put(chan); 184880909e04SMat Martineau return; 184980909e04SMat Martineau } 18500a708f8fSGustavo F. Padovan 1851401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, L2CAP_EV_RETRANS_TO); 18526be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 18538d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 18540a708f8fSGustavo F. Padovan } 18550a708f8fSGustavo F. Padovan 1856d660366dSGustavo Padovan static void l2cap_streaming_send(struct l2cap_chan *chan, 18573733937dSMat Martineau struct sk_buff_head *skbs) 18580a708f8fSGustavo F. Padovan { 18590a708f8fSGustavo F. Padovan struct sk_buff *skb; 18603733937dSMat Martineau struct l2cap_ctrl *control; 18610a708f8fSGustavo F. Padovan 18623733937dSMat Martineau BT_DBG("chan %p, skbs %p", chan, skbs); 18633733937dSMat Martineau 1864b99e13adSMat Martineau if (__chan_is_moving(chan)) 1865b99e13adSMat Martineau return; 1866b99e13adSMat Martineau 18673733937dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 18683733937dSMat Martineau 18693733937dSMat Martineau while (!skb_queue_empty(&chan->tx_q)) { 18703733937dSMat Martineau 18713733937dSMat Martineau skb = skb_dequeue(&chan->tx_q); 18723733937dSMat Martineau 18733733937dSMat Martineau bt_cb(skb)->control.retries = 1; 18743733937dSMat Martineau control = &bt_cb(skb)->control; 18753733937dSMat Martineau 18763733937dSMat Martineau control->reqseq = 0; 18773733937dSMat Martineau control->txseq = chan->next_tx_seq; 18783733937dSMat Martineau 18793733937dSMat Martineau __pack_control(chan, control, skb); 18800a708f8fSGustavo F. Padovan 188147d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 18823733937dSMat Martineau u16 fcs = crc16(0, (u8 *) skb->data, skb->len); 18833733937dSMat Martineau put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 18840a708f8fSGustavo F. Padovan } 18850a708f8fSGustavo F. Padovan 18864343478fSGustavo F. Padovan l2cap_do_send(chan, skb); 18870a708f8fSGustavo F. Padovan 1888b4400672SAndrei Emeltchenko BT_DBG("Sent txseq %u", control->txseq); 18893733937dSMat Martineau 1890836be934SAndrei Emeltchenko chan->next_tx_seq = __next_seq(chan, chan->next_tx_seq); 18913733937dSMat Martineau chan->frames_sent++; 18920a708f8fSGustavo F. Padovan } 18930a708f8fSGustavo F. Padovan } 18940a708f8fSGustavo F. Padovan 189567c9e840SSzymon Janc static int l2cap_ertm_send(struct l2cap_chan *chan) 18960a708f8fSGustavo F. Padovan { 18970a708f8fSGustavo F. Padovan struct sk_buff *skb, *tx_skb; 189818a48e76SMat Martineau struct l2cap_ctrl *control; 189918a48e76SMat Martineau int sent = 0; 190018a48e76SMat Martineau 190118a48e76SMat Martineau BT_DBG("chan %p", chan); 19020a708f8fSGustavo F. Padovan 190389bc500eSGustavo F. Padovan if (chan->state != BT_CONNECTED) 19040a708f8fSGustavo F. Padovan return -ENOTCONN; 19050a708f8fSGustavo F. Padovan 190694122bbeSMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 190794122bbeSMat Martineau return 0; 190894122bbeSMat Martineau 1909b99e13adSMat Martineau if (__chan_is_moving(chan)) 1910b99e13adSMat Martineau return 0; 1911b99e13adSMat Martineau 191218a48e76SMat Martineau while (chan->tx_send_head && 191318a48e76SMat Martineau chan->unacked_frames < chan->remote_tx_win && 191418a48e76SMat Martineau chan->tx_state == L2CAP_TX_STATE_XMIT) { 19150a708f8fSGustavo F. Padovan 191618a48e76SMat Martineau skb = chan->tx_send_head; 19170a708f8fSGustavo F. Padovan 191818a48e76SMat Martineau bt_cb(skb)->control.retries = 1; 191918a48e76SMat Martineau control = &bt_cb(skb)->control; 19200a708f8fSGustavo F. Padovan 1921e2ab4353SGustavo F. Padovan if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state)) 192218a48e76SMat Martineau control->final = 1; 1923e2ab4353SGustavo F. Padovan 192418a48e76SMat Martineau control->reqseq = chan->buffer_seq; 192518a48e76SMat Martineau chan->last_acked_seq = chan->buffer_seq; 192618a48e76SMat Martineau control->txseq = chan->next_tx_seq; 19270a708f8fSGustavo F. Padovan 192818a48e76SMat Martineau __pack_control(chan, control, skb); 19290a708f8fSGustavo F. Padovan 193047d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 193118a48e76SMat Martineau u16 fcs = crc16(0, (u8 *) skb->data, skb->len); 193218a48e76SMat Martineau put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 19330a708f8fSGustavo F. Padovan } 19340a708f8fSGustavo F. Padovan 193518a48e76SMat Martineau /* Clone after data has been modified. Data is assumed to be 193618a48e76SMat Martineau read-only (for locking purposes) on cloned sk_buffs. 193718a48e76SMat Martineau */ 193818a48e76SMat Martineau tx_skb = skb_clone(skb, GFP_KERNEL); 193918a48e76SMat Martineau 194018a48e76SMat Martineau if (!tx_skb) 194118a48e76SMat Martineau break; 19420a708f8fSGustavo F. Padovan 19431a09bcb9SGustavo F. Padovan __set_retrans_timer(chan); 19440a708f8fSGustavo F. Padovan 1945836be934SAndrei Emeltchenko chan->next_tx_seq = __next_seq(chan, chan->next_tx_seq); 19466a026610SGustavo F. Padovan chan->unacked_frames++; 19476a026610SGustavo F. Padovan chan->frames_sent++; 194818a48e76SMat Martineau sent++; 19490a708f8fSGustavo F. Padovan 195058d35f87SGustavo F. Padovan if (skb_queue_is_last(&chan->tx_q, skb)) 195158d35f87SGustavo F. Padovan chan->tx_send_head = NULL; 19520a708f8fSGustavo F. Padovan else 195358d35f87SGustavo F. Padovan chan->tx_send_head = skb_queue_next(&chan->tx_q, skb); 195418a48e76SMat Martineau 195518a48e76SMat Martineau l2cap_do_send(chan, tx_skb); 1956b4400672SAndrei Emeltchenko BT_DBG("Sent txseq %u", control->txseq); 19570a708f8fSGustavo F. Padovan } 19580a708f8fSGustavo F. Padovan 1959b4400672SAndrei Emeltchenko BT_DBG("Sent %d, %u unacked, %u in ERTM queue", sent, 1960b4400672SAndrei Emeltchenko chan->unacked_frames, skb_queue_len(&chan->tx_q)); 196118a48e76SMat Martineau 196218a48e76SMat Martineau return sent; 19630a708f8fSGustavo F. Padovan } 19640a708f8fSGustavo F. Padovan 1965e1fbd4c1SMat Martineau static void l2cap_ertm_resend(struct l2cap_chan *chan) 1966e1fbd4c1SMat Martineau { 1967e1fbd4c1SMat Martineau struct l2cap_ctrl control; 1968e1fbd4c1SMat Martineau struct sk_buff *skb; 1969e1fbd4c1SMat Martineau struct sk_buff *tx_skb; 1970e1fbd4c1SMat Martineau u16 seq; 1971e1fbd4c1SMat Martineau 1972e1fbd4c1SMat Martineau BT_DBG("chan %p", chan); 1973e1fbd4c1SMat Martineau 1974e1fbd4c1SMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 1975e1fbd4c1SMat Martineau return; 1976e1fbd4c1SMat Martineau 1977b99e13adSMat Martineau if (__chan_is_moving(chan)) 1978b99e13adSMat Martineau return; 1979b99e13adSMat Martineau 1980e1fbd4c1SMat Martineau while (chan->retrans_list.head != L2CAP_SEQ_LIST_CLEAR) { 1981e1fbd4c1SMat Martineau seq = l2cap_seq_list_pop(&chan->retrans_list); 1982e1fbd4c1SMat Martineau 1983e1fbd4c1SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, seq); 1984e1fbd4c1SMat Martineau if (!skb) { 1985e1fbd4c1SMat Martineau BT_DBG("Error: Can't retransmit seq %d, frame missing", 1986e1fbd4c1SMat Martineau seq); 1987e1fbd4c1SMat Martineau continue; 1988e1fbd4c1SMat Martineau } 1989e1fbd4c1SMat Martineau 1990e1fbd4c1SMat Martineau bt_cb(skb)->control.retries++; 1991e1fbd4c1SMat Martineau control = bt_cb(skb)->control; 1992e1fbd4c1SMat Martineau 1993e1fbd4c1SMat Martineau if (chan->max_tx != 0 && 1994e1fbd4c1SMat Martineau bt_cb(skb)->control.retries > chan->max_tx) { 1995e1fbd4c1SMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 19965e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 1997e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 1998e1fbd4c1SMat Martineau break; 1999e1fbd4c1SMat Martineau } 2000e1fbd4c1SMat Martineau 2001e1fbd4c1SMat Martineau control.reqseq = chan->buffer_seq; 2002e1fbd4c1SMat Martineau if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state)) 2003e1fbd4c1SMat Martineau control.final = 1; 2004e1fbd4c1SMat Martineau else 2005e1fbd4c1SMat Martineau control.final = 0; 2006e1fbd4c1SMat Martineau 2007e1fbd4c1SMat Martineau if (skb_cloned(skb)) { 2008e1fbd4c1SMat Martineau /* Cloned sk_buffs are read-only, so we need a 2009e1fbd4c1SMat Martineau * writeable copy 2010e1fbd4c1SMat Martineau */ 20118bcde1f2SGustavo Padovan tx_skb = skb_copy(skb, GFP_KERNEL); 2012e1fbd4c1SMat Martineau } else { 20138bcde1f2SGustavo Padovan tx_skb = skb_clone(skb, GFP_KERNEL); 2014e1fbd4c1SMat Martineau } 2015e1fbd4c1SMat Martineau 2016e1fbd4c1SMat Martineau if (!tx_skb) { 2017e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 2018e1fbd4c1SMat Martineau break; 2019e1fbd4c1SMat Martineau } 2020e1fbd4c1SMat Martineau 2021e1fbd4c1SMat Martineau /* Update skb contents */ 2022e1fbd4c1SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 2023e1fbd4c1SMat Martineau put_unaligned_le32(__pack_extended_control(&control), 2024e1fbd4c1SMat Martineau tx_skb->data + L2CAP_HDR_SIZE); 2025e1fbd4c1SMat Martineau } else { 2026e1fbd4c1SMat Martineau put_unaligned_le16(__pack_enhanced_control(&control), 2027e1fbd4c1SMat Martineau tx_skb->data + L2CAP_HDR_SIZE); 2028e1fbd4c1SMat Martineau } 2029e1fbd4c1SMat Martineau 2030e1fbd4c1SMat Martineau if (chan->fcs == L2CAP_FCS_CRC16) { 2031e1fbd4c1SMat Martineau u16 fcs = crc16(0, (u8 *) tx_skb->data, tx_skb->len); 2032e1fbd4c1SMat Martineau put_unaligned_le16(fcs, skb_put(tx_skb, 2033e1fbd4c1SMat Martineau L2CAP_FCS_SIZE)); 2034e1fbd4c1SMat Martineau } 2035e1fbd4c1SMat Martineau 2036e1fbd4c1SMat Martineau l2cap_do_send(chan, tx_skb); 2037e1fbd4c1SMat Martineau 2038e1fbd4c1SMat Martineau BT_DBG("Resent txseq %d", control.txseq); 2039e1fbd4c1SMat Martineau 2040e1fbd4c1SMat Martineau chan->last_acked_seq = chan->buffer_seq; 2041e1fbd4c1SMat Martineau } 2042e1fbd4c1SMat Martineau } 2043e1fbd4c1SMat Martineau 2044f80842a8SMat Martineau static void l2cap_retransmit(struct l2cap_chan *chan, 2045f80842a8SMat Martineau struct l2cap_ctrl *control) 2046f80842a8SMat Martineau { 2047f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2048f80842a8SMat Martineau 2049f80842a8SMat Martineau l2cap_seq_list_append(&chan->retrans_list, control->reqseq); 2050f80842a8SMat Martineau l2cap_ertm_resend(chan); 2051f80842a8SMat Martineau } 2052f80842a8SMat Martineau 2053d2a7ac5dSMat Martineau static void l2cap_retransmit_all(struct l2cap_chan *chan, 2054d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 2055d2a7ac5dSMat Martineau { 2056e1fbd4c1SMat Martineau struct sk_buff *skb; 2057e1fbd4c1SMat Martineau 2058e1fbd4c1SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2059e1fbd4c1SMat Martineau 2060e1fbd4c1SMat Martineau if (control->poll) 2061e1fbd4c1SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 2062e1fbd4c1SMat Martineau 2063e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 2064e1fbd4c1SMat Martineau 2065e1fbd4c1SMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 2066e1fbd4c1SMat Martineau return; 2067e1fbd4c1SMat Martineau 2068e1fbd4c1SMat Martineau if (chan->unacked_frames) { 2069e1fbd4c1SMat Martineau skb_queue_walk(&chan->tx_q, skb) { 2070e1fbd4c1SMat Martineau if (bt_cb(skb)->control.txseq == control->reqseq || 2071e1fbd4c1SMat Martineau skb == chan->tx_send_head) 2072e1fbd4c1SMat Martineau break; 2073e1fbd4c1SMat Martineau } 2074e1fbd4c1SMat Martineau 2075e1fbd4c1SMat Martineau skb_queue_walk_from(&chan->tx_q, skb) { 2076e1fbd4c1SMat Martineau if (skb == chan->tx_send_head) 2077e1fbd4c1SMat Martineau break; 2078e1fbd4c1SMat Martineau 2079e1fbd4c1SMat Martineau l2cap_seq_list_append(&chan->retrans_list, 2080e1fbd4c1SMat Martineau bt_cb(skb)->control.txseq); 2081e1fbd4c1SMat Martineau } 2082e1fbd4c1SMat Martineau 2083e1fbd4c1SMat Martineau l2cap_ertm_resend(chan); 2084e1fbd4c1SMat Martineau } 2085d2a7ac5dSMat Martineau } 2086d2a7ac5dSMat Martineau 2087b17e73bbSSzymon Janc static void l2cap_send_ack(struct l2cap_chan *chan) 2088b17e73bbSSzymon Janc { 20890a0aba42SMat Martineau struct l2cap_ctrl control; 20900a0aba42SMat Martineau u16 frames_to_ack = __seq_offset(chan, chan->buffer_seq, 20910a0aba42SMat Martineau chan->last_acked_seq); 20920a0aba42SMat Martineau int threshold; 20930a0aba42SMat Martineau 20940a0aba42SMat Martineau BT_DBG("chan %p last_acked_seq %d buffer_seq %d", 20950a0aba42SMat Martineau chan, chan->last_acked_seq, chan->buffer_seq); 20960a0aba42SMat Martineau 20970a0aba42SMat Martineau memset(&control, 0, sizeof(control)); 20980a0aba42SMat Martineau control.sframe = 1; 20990a0aba42SMat Martineau 21000a0aba42SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state) && 21010a0aba42SMat Martineau chan->rx_state == L2CAP_RX_STATE_RECV) { 2102b17e73bbSSzymon Janc __clear_ack_timer(chan); 21030a0aba42SMat Martineau control.super = L2CAP_SUPER_RNR; 21040a0aba42SMat Martineau control.reqseq = chan->buffer_seq; 21050a0aba42SMat Martineau l2cap_send_sframe(chan, &control); 21060a0aba42SMat Martineau } else { 21070a0aba42SMat Martineau if (!test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) { 21080a0aba42SMat Martineau l2cap_ertm_send(chan); 21090a0aba42SMat Martineau /* If any i-frames were sent, they included an ack */ 21100a0aba42SMat Martineau if (chan->buffer_seq == chan->last_acked_seq) 21110a0aba42SMat Martineau frames_to_ack = 0; 21120a0aba42SMat Martineau } 21130a0aba42SMat Martineau 2114c20f8e35SMat Martineau /* Ack now if the window is 3/4ths full. 21150a0aba42SMat Martineau * Calculate without mul or div 21160a0aba42SMat Martineau */ 2117c20f8e35SMat Martineau threshold = chan->ack_win; 21180a0aba42SMat Martineau threshold += threshold << 1; 21190a0aba42SMat Martineau threshold >>= 2; 21200a0aba42SMat Martineau 2121b4400672SAndrei Emeltchenko BT_DBG("frames_to_ack %u, threshold %d", frames_to_ack, 21220a0aba42SMat Martineau threshold); 21230a0aba42SMat Martineau 21240a0aba42SMat Martineau if (frames_to_ack >= threshold) { 21250a0aba42SMat Martineau __clear_ack_timer(chan); 21260a0aba42SMat Martineau control.super = L2CAP_SUPER_RR; 21270a0aba42SMat Martineau control.reqseq = chan->buffer_seq; 21280a0aba42SMat Martineau l2cap_send_sframe(chan, &control); 21290a0aba42SMat Martineau frames_to_ack = 0; 21300a0aba42SMat Martineau } 21310a0aba42SMat Martineau 21320a0aba42SMat Martineau if (frames_to_ack) 21330a0aba42SMat Martineau __set_ack_timer(chan); 21340a0aba42SMat Martineau } 2135b17e73bbSSzymon Janc } 2136b17e73bbSSzymon Janc 213704124681SGustavo F. Padovan static inline int l2cap_skbuff_fromiovec(struct l2cap_chan *chan, 213804124681SGustavo F. Padovan struct msghdr *msg, int len, 213904124681SGustavo F. Padovan int count, struct sk_buff *skb) 21400a708f8fSGustavo F. Padovan { 21410952a57aSAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 21420a708f8fSGustavo F. Padovan struct sk_buff **frag; 214390338947SGustavo Padovan int sent = 0; 21440a708f8fSGustavo F. Padovan 21450498878bSJukka Rissanen if (chan->ops->memcpy_fromiovec(chan, skb_put(skb, count), 21460498878bSJukka Rissanen msg->msg_iov, count)) 21470a708f8fSGustavo F. Padovan return -EFAULT; 21480a708f8fSGustavo F. Padovan 21490a708f8fSGustavo F. Padovan sent += count; 21500a708f8fSGustavo F. Padovan len -= count; 21510a708f8fSGustavo F. Padovan 21520a708f8fSGustavo F. Padovan /* Continuation fragments (no L2CAP header) */ 21530a708f8fSGustavo F. Padovan frag = &skb_shinfo(skb)->frag_list; 21540a708f8fSGustavo F. Padovan while (len) { 2155fbe00700SGustavo Padovan struct sk_buff *tmp; 2156fbe00700SGustavo Padovan 21570a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 21580a708f8fSGustavo F. Padovan 2159d9fbd02bSMarcel Holtmann tmp = chan->ops->alloc_skb(chan, 0, count, 216090338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 2161fbe00700SGustavo Padovan if (IS_ERR(tmp)) 2162fbe00700SGustavo Padovan return PTR_ERR(tmp); 21632f7719ceSAndrei Emeltchenko 2164fbe00700SGustavo Padovan *frag = tmp; 2165fbe00700SGustavo Padovan 21660498878bSJukka Rissanen if (chan->ops->memcpy_fromiovec(chan, skb_put(*frag, count), 21670498878bSJukka Rissanen msg->msg_iov, count)) 21680a708f8fSGustavo F. Padovan return -EFAULT; 21690a708f8fSGustavo F. Padovan 21700a708f8fSGustavo F. Padovan sent += count; 21710a708f8fSGustavo F. Padovan len -= count; 21720a708f8fSGustavo F. Padovan 21732d0ed3d5SGustavo Padovan skb->len += (*frag)->len; 21742d0ed3d5SGustavo Padovan skb->data_len += (*frag)->len; 21752d0ed3d5SGustavo Padovan 21760a708f8fSGustavo F. Padovan frag = &(*frag)->next; 21770a708f8fSGustavo F. Padovan } 21780a708f8fSGustavo F. Padovan 21790a708f8fSGustavo F. Padovan return sent; 21800a708f8fSGustavo F. Padovan } 21810a708f8fSGustavo F. Padovan 21825e59b791SLuiz Augusto von Dentz static struct sk_buff *l2cap_create_connless_pdu(struct l2cap_chan *chan, 21838d46321cSMarcel Holtmann struct msghdr *msg, size_t len) 21840a708f8fSGustavo F. Padovan { 21858c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 21860a708f8fSGustavo F. Padovan struct sk_buff *skb; 218703a51213SAndrei Emeltchenko int err, count, hlen = L2CAP_HDR_SIZE + L2CAP_PSMLEN_SIZE; 21880a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 21890a708f8fSGustavo F. Padovan 21908d46321cSMarcel Holtmann BT_DBG("chan %p psm 0x%2.2x len %zu", chan, 21918d46321cSMarcel Holtmann __le16_to_cpu(chan->psm), len); 21920a708f8fSGustavo F. Padovan 21930a708f8fSGustavo F. Padovan count = min_t(unsigned int, (conn->mtu - hlen), len); 21942f7719ceSAndrei Emeltchenko 2195d9fbd02bSMarcel Holtmann skb = chan->ops->alloc_skb(chan, hlen, count, 219690338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 219790338947SGustavo Padovan if (IS_ERR(skb)) 219890338947SGustavo Padovan return skb; 21990a708f8fSGustavo F. Padovan 22000a708f8fSGustavo F. Padovan /* Create L2CAP header */ 22010a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2202fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 2203daf6a78cSAndrei Emeltchenko lh->len = cpu_to_le16(len + L2CAP_PSMLEN_SIZE); 220443b1b8dfSMarcel Holtmann put_unaligned(chan->psm, (__le16 *) skb_put(skb, L2CAP_PSMLEN_SIZE)); 22050a708f8fSGustavo F. Padovan 22060952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 22070a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 22080a708f8fSGustavo F. Padovan kfree_skb(skb); 22090a708f8fSGustavo F. Padovan return ERR_PTR(err); 22100a708f8fSGustavo F. Padovan } 22110a708f8fSGustavo F. Padovan return skb; 22120a708f8fSGustavo F. Padovan } 22130a708f8fSGustavo F. Padovan 22145e59b791SLuiz Augusto von Dentz static struct sk_buff *l2cap_create_basic_pdu(struct l2cap_chan *chan, 22158d46321cSMarcel Holtmann struct msghdr *msg, size_t len) 22160a708f8fSGustavo F. Padovan { 22178c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 22180a708f8fSGustavo F. Padovan struct sk_buff *skb; 2219f2ba7faeSGustavo Padovan int err, count; 22200a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 22210a708f8fSGustavo F. Padovan 2222b4400672SAndrei Emeltchenko BT_DBG("chan %p len %zu", chan, len); 22230a708f8fSGustavo F. Padovan 2224f2ba7faeSGustavo Padovan count = min_t(unsigned int, (conn->mtu - L2CAP_HDR_SIZE), len); 22252f7719ceSAndrei Emeltchenko 2226d9fbd02bSMarcel Holtmann skb = chan->ops->alloc_skb(chan, L2CAP_HDR_SIZE, count, 222790338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 222890338947SGustavo Padovan if (IS_ERR(skb)) 222990338947SGustavo Padovan return skb; 22300a708f8fSGustavo F. Padovan 22310a708f8fSGustavo F. Padovan /* Create L2CAP header */ 22320a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2233fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 22346ff9b5efSGustavo Padovan lh->len = cpu_to_le16(len); 22350a708f8fSGustavo F. Padovan 22360952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 22370a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 22380a708f8fSGustavo F. Padovan kfree_skb(skb); 22390a708f8fSGustavo F. Padovan return ERR_PTR(err); 22400a708f8fSGustavo F. Padovan } 22410a708f8fSGustavo F. Padovan return skb; 22420a708f8fSGustavo F. Padovan } 22430a708f8fSGustavo F. Padovan 2244ab0ff76dSLuiz Augusto von Dentz static struct sk_buff *l2cap_create_iframe_pdu(struct l2cap_chan *chan, 2245ab0ff76dSLuiz Augusto von Dentz struct msghdr *msg, size_t len, 224694122bbeSMat Martineau u16 sdulen) 22470a708f8fSGustavo F. Padovan { 22488c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 22490a708f8fSGustavo F. Padovan struct sk_buff *skb; 2250e4ca6d98SAndrei Emeltchenko int err, count, hlen; 22510a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 22520a708f8fSGustavo F. Padovan 2253b4400672SAndrei Emeltchenko BT_DBG("chan %p len %zu", chan, len); 22540a708f8fSGustavo F. Padovan 22550a708f8fSGustavo F. Padovan if (!conn) 22560a708f8fSGustavo F. Padovan return ERR_PTR(-ENOTCONN); 22570a708f8fSGustavo F. Padovan 2258ba7aa64fSGustavo Padovan hlen = __ertm_hdr_size(chan); 2259e4ca6d98SAndrei Emeltchenko 22600a708f8fSGustavo F. Padovan if (sdulen) 226103a51213SAndrei Emeltchenko hlen += L2CAP_SDULEN_SIZE; 22620a708f8fSGustavo F. Padovan 226347d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 226403a51213SAndrei Emeltchenko hlen += L2CAP_FCS_SIZE; 22650a708f8fSGustavo F. Padovan 22660a708f8fSGustavo F. Padovan count = min_t(unsigned int, (conn->mtu - hlen), len); 22672f7719ceSAndrei Emeltchenko 2268d9fbd02bSMarcel Holtmann skb = chan->ops->alloc_skb(chan, hlen, count, 226990338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 227090338947SGustavo Padovan if (IS_ERR(skb)) 227190338947SGustavo Padovan return skb; 22720a708f8fSGustavo F. Padovan 22730a708f8fSGustavo F. Padovan /* Create L2CAP header */ 22740a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2275fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 22760a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(len + (hlen - L2CAP_HDR_SIZE)); 227788843ab0SAndrei Emeltchenko 227818a48e76SMat Martineau /* Control header is populated later */ 227918a48e76SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 228018a48e76SMat Martineau put_unaligned_le32(0, skb_put(skb, L2CAP_EXT_CTRL_SIZE)); 228118a48e76SMat Martineau else 228218a48e76SMat Martineau put_unaligned_le16(0, skb_put(skb, L2CAP_ENH_CTRL_SIZE)); 228388843ab0SAndrei Emeltchenko 22840a708f8fSGustavo F. Padovan if (sdulen) 228503a51213SAndrei Emeltchenko put_unaligned_le16(sdulen, skb_put(skb, L2CAP_SDULEN_SIZE)); 22860a708f8fSGustavo F. Padovan 22870952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 22880a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 22890a708f8fSGustavo F. Padovan kfree_skb(skb); 22900a708f8fSGustavo F. Padovan return ERR_PTR(err); 22910a708f8fSGustavo F. Padovan } 22920a708f8fSGustavo F. Padovan 229318a48e76SMat Martineau bt_cb(skb)->control.fcs = chan->fcs; 22943ce3514fSMat Martineau bt_cb(skb)->control.retries = 0; 22950a708f8fSGustavo F. Padovan return skb; 22960a708f8fSGustavo F. Padovan } 22970a708f8fSGustavo F. Padovan 229894122bbeSMat Martineau static int l2cap_segment_sdu(struct l2cap_chan *chan, 229994122bbeSMat Martineau struct sk_buff_head *seg_queue, 230094122bbeSMat Martineau struct msghdr *msg, size_t len) 23010a708f8fSGustavo F. Padovan { 23020a708f8fSGustavo F. Padovan struct sk_buff *skb; 230394122bbeSMat Martineau u16 sdu_len; 230494122bbeSMat Martineau size_t pdu_len; 230594122bbeSMat Martineau u8 sar; 23060a708f8fSGustavo F. Padovan 2307b4400672SAndrei Emeltchenko BT_DBG("chan %p, msg %p, len %zu", chan, msg, len); 23080a708f8fSGustavo F. Padovan 230994122bbeSMat Martineau /* It is critical that ERTM PDUs fit in a single HCI fragment, 231094122bbeSMat Martineau * so fragmented skbs are not used. The HCI layer's handling 231194122bbeSMat Martineau * of fragmented skbs is not compatible with ERTM's queueing. 231294122bbeSMat Martineau */ 231394122bbeSMat Martineau 231494122bbeSMat Martineau /* PDU size is derived from the HCI MTU */ 231594122bbeSMat Martineau pdu_len = chan->conn->mtu; 231694122bbeSMat Martineau 2317a549574dSMat Martineau /* Constrain PDU size for BR/EDR connections */ 2318a549574dSMat Martineau if (!chan->hs_hcon) 231994122bbeSMat Martineau pdu_len = min_t(size_t, pdu_len, L2CAP_BREDR_MAX_PAYLOAD); 232094122bbeSMat Martineau 232194122bbeSMat Martineau /* Adjust for largest possible L2CAP overhead. */ 232235d401dfSGustavo Padovan if (chan->fcs) 232335d401dfSGustavo Padovan pdu_len -= L2CAP_FCS_SIZE; 232435d401dfSGustavo Padovan 2325ba7aa64fSGustavo Padovan pdu_len -= __ertm_hdr_size(chan); 232694122bbeSMat Martineau 232794122bbeSMat Martineau /* Remote device may have requested smaller PDUs */ 232894122bbeSMat Martineau pdu_len = min_t(size_t, pdu_len, chan->remote_mps); 232994122bbeSMat Martineau 233094122bbeSMat Martineau if (len <= pdu_len) { 233194122bbeSMat Martineau sar = L2CAP_SAR_UNSEGMENTED; 233294122bbeSMat Martineau sdu_len = 0; 233394122bbeSMat Martineau pdu_len = len; 233494122bbeSMat Martineau } else { 233594122bbeSMat Martineau sar = L2CAP_SAR_START; 233694122bbeSMat Martineau sdu_len = len; 233794122bbeSMat Martineau pdu_len -= L2CAP_SDULEN_SIZE; 233894122bbeSMat Martineau } 23390a708f8fSGustavo F. Padovan 23400a708f8fSGustavo F. Padovan while (len > 0) { 234194122bbeSMat Martineau skb = l2cap_create_iframe_pdu(chan, msg, pdu_len, sdu_len); 23420a708f8fSGustavo F. Padovan 23430a708f8fSGustavo F. Padovan if (IS_ERR(skb)) { 234494122bbeSMat Martineau __skb_queue_purge(seg_queue); 23450a708f8fSGustavo F. Padovan return PTR_ERR(skb); 23460a708f8fSGustavo F. Padovan } 23470a708f8fSGustavo F. Padovan 234894122bbeSMat Martineau bt_cb(skb)->control.sar = sar; 234994122bbeSMat Martineau __skb_queue_tail(seg_queue, skb); 23500a708f8fSGustavo F. Padovan 235194122bbeSMat Martineau len -= pdu_len; 235294122bbeSMat Martineau if (sdu_len) { 235394122bbeSMat Martineau sdu_len = 0; 235494122bbeSMat Martineau pdu_len += L2CAP_SDULEN_SIZE; 235594122bbeSMat Martineau } 235694122bbeSMat Martineau 235794122bbeSMat Martineau if (len <= pdu_len) { 235894122bbeSMat Martineau sar = L2CAP_SAR_END; 235994122bbeSMat Martineau pdu_len = len; 236094122bbeSMat Martineau } else { 236194122bbeSMat Martineau sar = L2CAP_SAR_CONTINUE; 236294122bbeSMat Martineau } 236394122bbeSMat Martineau } 236494122bbeSMat Martineau 2365f0f62799SGustavo Padovan return 0; 23660a708f8fSGustavo F. Padovan } 23670a708f8fSGustavo F. Padovan 2368177f8f2bSJohan Hedberg static struct sk_buff *l2cap_create_le_flowctl_pdu(struct l2cap_chan *chan, 2369177f8f2bSJohan Hedberg struct msghdr *msg, 2370177f8f2bSJohan Hedberg size_t len, u16 sdulen) 2371177f8f2bSJohan Hedberg { 2372177f8f2bSJohan Hedberg struct l2cap_conn *conn = chan->conn; 2373177f8f2bSJohan Hedberg struct sk_buff *skb; 2374177f8f2bSJohan Hedberg int err, count, hlen; 2375177f8f2bSJohan Hedberg struct l2cap_hdr *lh; 2376177f8f2bSJohan Hedberg 2377177f8f2bSJohan Hedberg BT_DBG("chan %p len %zu", chan, len); 2378177f8f2bSJohan Hedberg 2379177f8f2bSJohan Hedberg if (!conn) 2380177f8f2bSJohan Hedberg return ERR_PTR(-ENOTCONN); 2381177f8f2bSJohan Hedberg 2382177f8f2bSJohan Hedberg hlen = L2CAP_HDR_SIZE; 2383177f8f2bSJohan Hedberg 2384177f8f2bSJohan Hedberg if (sdulen) 2385177f8f2bSJohan Hedberg hlen += L2CAP_SDULEN_SIZE; 2386177f8f2bSJohan Hedberg 2387177f8f2bSJohan Hedberg count = min_t(unsigned int, (conn->mtu - hlen), len); 2388177f8f2bSJohan Hedberg 2389d9fbd02bSMarcel Holtmann skb = chan->ops->alloc_skb(chan, hlen, count, 2390177f8f2bSJohan Hedberg msg->msg_flags & MSG_DONTWAIT); 2391177f8f2bSJohan Hedberg if (IS_ERR(skb)) 2392177f8f2bSJohan Hedberg return skb; 2393177f8f2bSJohan Hedberg 2394177f8f2bSJohan Hedberg /* Create L2CAP header */ 2395177f8f2bSJohan Hedberg lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2396177f8f2bSJohan Hedberg lh->cid = cpu_to_le16(chan->dcid); 2397177f8f2bSJohan Hedberg lh->len = cpu_to_le16(len + (hlen - L2CAP_HDR_SIZE)); 2398177f8f2bSJohan Hedberg 2399177f8f2bSJohan Hedberg if (sdulen) 2400177f8f2bSJohan Hedberg put_unaligned_le16(sdulen, skb_put(skb, L2CAP_SDULEN_SIZE)); 2401177f8f2bSJohan Hedberg 2402177f8f2bSJohan Hedberg err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 2403177f8f2bSJohan Hedberg if (unlikely(err < 0)) { 2404177f8f2bSJohan Hedberg kfree_skb(skb); 2405177f8f2bSJohan Hedberg return ERR_PTR(err); 2406177f8f2bSJohan Hedberg } 2407177f8f2bSJohan Hedberg 2408177f8f2bSJohan Hedberg return skb; 2409177f8f2bSJohan Hedberg } 2410177f8f2bSJohan Hedberg 2411177f8f2bSJohan Hedberg static int l2cap_segment_le_sdu(struct l2cap_chan *chan, 2412177f8f2bSJohan Hedberg struct sk_buff_head *seg_queue, 2413177f8f2bSJohan Hedberg struct msghdr *msg, size_t len) 2414177f8f2bSJohan Hedberg { 2415177f8f2bSJohan Hedberg struct sk_buff *skb; 2416177f8f2bSJohan Hedberg size_t pdu_len; 2417177f8f2bSJohan Hedberg u16 sdu_len; 2418177f8f2bSJohan Hedberg 2419177f8f2bSJohan Hedberg BT_DBG("chan %p, msg %p, len %zu", chan, msg, len); 2420177f8f2bSJohan Hedberg 2421177f8f2bSJohan Hedberg pdu_len = chan->conn->mtu - L2CAP_HDR_SIZE; 2422177f8f2bSJohan Hedberg 2423177f8f2bSJohan Hedberg pdu_len = min_t(size_t, pdu_len, chan->remote_mps); 2424177f8f2bSJohan Hedberg 2425177f8f2bSJohan Hedberg sdu_len = len; 2426177f8f2bSJohan Hedberg pdu_len -= L2CAP_SDULEN_SIZE; 2427177f8f2bSJohan Hedberg 2428177f8f2bSJohan Hedberg while (len > 0) { 2429177f8f2bSJohan Hedberg if (len <= pdu_len) 2430177f8f2bSJohan Hedberg pdu_len = len; 2431177f8f2bSJohan Hedberg 2432177f8f2bSJohan Hedberg skb = l2cap_create_le_flowctl_pdu(chan, msg, pdu_len, sdu_len); 2433177f8f2bSJohan Hedberg if (IS_ERR(skb)) { 2434177f8f2bSJohan Hedberg __skb_queue_purge(seg_queue); 2435177f8f2bSJohan Hedberg return PTR_ERR(skb); 2436177f8f2bSJohan Hedberg } 2437177f8f2bSJohan Hedberg 2438177f8f2bSJohan Hedberg __skb_queue_tail(seg_queue, skb); 2439177f8f2bSJohan Hedberg 2440177f8f2bSJohan Hedberg len -= pdu_len; 2441177f8f2bSJohan Hedberg 2442177f8f2bSJohan Hedberg if (sdu_len) { 2443177f8f2bSJohan Hedberg sdu_len = 0; 2444177f8f2bSJohan Hedberg pdu_len += L2CAP_SDULEN_SIZE; 2445177f8f2bSJohan Hedberg } 2446177f8f2bSJohan Hedberg } 2447177f8f2bSJohan Hedberg 2448177f8f2bSJohan Hedberg return 0; 2449177f8f2bSJohan Hedberg } 2450177f8f2bSJohan Hedberg 24518d46321cSMarcel Holtmann int l2cap_chan_send(struct l2cap_chan *chan, struct msghdr *msg, size_t len) 24529a91a04aSGustavo F. Padovan { 24539a91a04aSGustavo F. Padovan struct sk_buff *skb; 24549a91a04aSGustavo F. Padovan int err; 245594122bbeSMat Martineau struct sk_buff_head seg_queue; 24569a91a04aSGustavo F. Padovan 245731e8ce80SSeung-Woo Kim if (!chan->conn) 245831e8ce80SSeung-Woo Kim return -ENOTCONN; 245931e8ce80SSeung-Woo Kim 24609a91a04aSGustavo F. Padovan /* Connectionless channel */ 2461715ec005SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_LESS) { 24628d46321cSMarcel Holtmann skb = l2cap_create_connless_pdu(chan, msg, len); 24639a91a04aSGustavo F. Padovan if (IS_ERR(skb)) 24649a91a04aSGustavo F. Padovan return PTR_ERR(skb); 24659a91a04aSGustavo F. Padovan 2466ede81a2aSAndrzej Kaczmarek /* Channel lock is released before requesting new skb and then 2467ede81a2aSAndrzej Kaczmarek * reacquired thus we need to recheck channel state. 2468ede81a2aSAndrzej Kaczmarek */ 2469ede81a2aSAndrzej Kaczmarek if (chan->state != BT_CONNECTED) { 2470ede81a2aSAndrzej Kaczmarek kfree_skb(skb); 2471ede81a2aSAndrzej Kaczmarek return -ENOTCONN; 2472ede81a2aSAndrzej Kaczmarek } 2473ede81a2aSAndrzej Kaczmarek 24749a91a04aSGustavo F. Padovan l2cap_do_send(chan, skb); 24759a91a04aSGustavo F. Padovan return len; 24769a91a04aSGustavo F. Padovan } 24779a91a04aSGustavo F. Padovan 24789a91a04aSGustavo F. Padovan switch (chan->mode) { 247938319713SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 2480177f8f2bSJohan Hedberg /* Check outgoing MTU */ 2481177f8f2bSJohan Hedberg if (len > chan->omtu) 2482177f8f2bSJohan Hedberg return -EMSGSIZE; 2483177f8f2bSJohan Hedberg 2484fad5fc89SJohan Hedberg if (!chan->tx_credits) 2485fad5fc89SJohan Hedberg return -EAGAIN; 2486fad5fc89SJohan Hedberg 2487177f8f2bSJohan Hedberg __skb_queue_head_init(&seg_queue); 2488177f8f2bSJohan Hedberg 2489177f8f2bSJohan Hedberg err = l2cap_segment_le_sdu(chan, &seg_queue, msg, len); 2490177f8f2bSJohan Hedberg 2491177f8f2bSJohan Hedberg if (chan->state != BT_CONNECTED) { 2492177f8f2bSJohan Hedberg __skb_queue_purge(&seg_queue); 2493177f8f2bSJohan Hedberg err = -ENOTCONN; 2494177f8f2bSJohan Hedberg } 2495177f8f2bSJohan Hedberg 2496177f8f2bSJohan Hedberg if (err) 2497177f8f2bSJohan Hedberg return err; 2498177f8f2bSJohan Hedberg 2499177f8f2bSJohan Hedberg skb_queue_splice_tail_init(&seg_queue, &chan->tx_q); 2500177f8f2bSJohan Hedberg 2501177f8f2bSJohan Hedberg while (chan->tx_credits && !skb_queue_empty(&chan->tx_q)) { 2502177f8f2bSJohan Hedberg l2cap_do_send(chan, skb_dequeue(&chan->tx_q)); 2503177f8f2bSJohan Hedberg chan->tx_credits--; 2504177f8f2bSJohan Hedberg } 2505177f8f2bSJohan Hedberg 2506177f8f2bSJohan Hedberg if (!chan->tx_credits) 2507177f8f2bSJohan Hedberg chan->ops->suspend(chan); 2508177f8f2bSJohan Hedberg 2509177f8f2bSJohan Hedberg err = len; 2510177f8f2bSJohan Hedberg 2511177f8f2bSJohan Hedberg break; 2512177f8f2bSJohan Hedberg 2513fad5fc89SJohan Hedberg case L2CAP_MODE_BASIC: 25149a91a04aSGustavo F. Padovan /* Check outgoing MTU */ 25159a91a04aSGustavo F. Padovan if (len > chan->omtu) 25169a91a04aSGustavo F. Padovan return -EMSGSIZE; 25179a91a04aSGustavo F. Padovan 25189a91a04aSGustavo F. Padovan /* Create a basic PDU */ 25198d46321cSMarcel Holtmann skb = l2cap_create_basic_pdu(chan, msg, len); 25209a91a04aSGustavo F. Padovan if (IS_ERR(skb)) 25219a91a04aSGustavo F. Padovan return PTR_ERR(skb); 25229a91a04aSGustavo F. Padovan 2523ede81a2aSAndrzej Kaczmarek /* Channel lock is released before requesting new skb and then 2524ede81a2aSAndrzej Kaczmarek * reacquired thus we need to recheck channel state. 2525ede81a2aSAndrzej Kaczmarek */ 2526ede81a2aSAndrzej Kaczmarek if (chan->state != BT_CONNECTED) { 2527ede81a2aSAndrzej Kaczmarek kfree_skb(skb); 2528ede81a2aSAndrzej Kaczmarek return -ENOTCONN; 2529ede81a2aSAndrzej Kaczmarek } 2530ede81a2aSAndrzej Kaczmarek 25319a91a04aSGustavo F. Padovan l2cap_do_send(chan, skb); 25329a91a04aSGustavo F. Padovan err = len; 25339a91a04aSGustavo F. Padovan break; 25349a91a04aSGustavo F. Padovan 25359a91a04aSGustavo F. Padovan case L2CAP_MODE_ERTM: 25369a91a04aSGustavo F. Padovan case L2CAP_MODE_STREAMING: 253794122bbeSMat Martineau /* Check outgoing MTU */ 253894122bbeSMat Martineau if (len > chan->omtu) { 253994122bbeSMat Martineau err = -EMSGSIZE; 25409a91a04aSGustavo F. Padovan break; 25419a91a04aSGustavo F. Padovan } 25429a91a04aSGustavo F. Padovan 254394122bbeSMat Martineau __skb_queue_head_init(&seg_queue); 254494122bbeSMat Martineau 254594122bbeSMat Martineau /* Do segmentation before calling in to the state machine, 254694122bbeSMat Martineau * since it's possible to block while waiting for memory 254794122bbeSMat Martineau * allocation. 254894122bbeSMat Martineau */ 254994122bbeSMat Martineau err = l2cap_segment_sdu(chan, &seg_queue, msg, len); 255094122bbeSMat Martineau 255194122bbeSMat Martineau /* The channel could have been closed while segmenting, 255294122bbeSMat Martineau * check that it is still connected. 255394122bbeSMat Martineau */ 255494122bbeSMat Martineau if (chan->state != BT_CONNECTED) { 255594122bbeSMat Martineau __skb_queue_purge(&seg_queue); 255694122bbeSMat Martineau err = -ENOTCONN; 25579a91a04aSGustavo F. Padovan } 25589a91a04aSGustavo F. Padovan 255994122bbeSMat Martineau if (err) 256094122bbeSMat Martineau break; 256194122bbeSMat Martineau 25623733937dSMat Martineau if (chan->mode == L2CAP_MODE_ERTM) 2563d660366dSGustavo Padovan l2cap_tx(chan, NULL, &seg_queue, L2CAP_EV_DATA_REQUEST); 25643733937dSMat Martineau else 2565d660366dSGustavo Padovan l2cap_streaming_send(chan, &seg_queue); 256694122bbeSMat Martineau 25679a91a04aSGustavo F. Padovan err = len; 25689a91a04aSGustavo F. Padovan 256994122bbeSMat Martineau /* If the skbs were not queued for sending, they'll still be in 257094122bbeSMat Martineau * seg_queue and need to be purged. 257194122bbeSMat Martineau */ 257294122bbeSMat Martineau __skb_queue_purge(&seg_queue); 25739a91a04aSGustavo F. Padovan break; 25749a91a04aSGustavo F. Padovan 25759a91a04aSGustavo F. Padovan default: 25769a91a04aSGustavo F. Padovan BT_DBG("bad state %1.1x", chan->mode); 25779a91a04aSGustavo F. Padovan err = -EBADFD; 25789a91a04aSGustavo F. Padovan } 25799a91a04aSGustavo F. Padovan 25809a91a04aSGustavo F. Padovan return err; 25819a91a04aSGustavo F. Padovan } 25826b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_send); 25839a91a04aSGustavo F. Padovan 2584d2a7ac5dSMat Martineau static void l2cap_send_srej(struct l2cap_chan *chan, u16 txseq) 2585d2a7ac5dSMat Martineau { 2586bed68bdeSMat Martineau struct l2cap_ctrl control; 2587bed68bdeSMat Martineau u16 seq; 2588bed68bdeSMat Martineau 2589b4400672SAndrei Emeltchenko BT_DBG("chan %p, txseq %u", chan, txseq); 2590bed68bdeSMat Martineau 2591bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2592bed68bdeSMat Martineau control.sframe = 1; 2593bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2594bed68bdeSMat Martineau 2595bed68bdeSMat Martineau for (seq = chan->expected_tx_seq; seq != txseq; 2596bed68bdeSMat Martineau seq = __next_seq(chan, seq)) { 2597bed68bdeSMat Martineau if (!l2cap_ertm_seq_in_queue(&chan->srej_q, seq)) { 2598bed68bdeSMat Martineau control.reqseq = seq; 2599bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2600bed68bdeSMat Martineau l2cap_seq_list_append(&chan->srej_list, seq); 2601bed68bdeSMat Martineau } 2602bed68bdeSMat Martineau } 2603bed68bdeSMat Martineau 2604bed68bdeSMat Martineau chan->expected_tx_seq = __next_seq(chan, txseq); 2605d2a7ac5dSMat Martineau } 2606d2a7ac5dSMat Martineau 2607d2a7ac5dSMat Martineau static void l2cap_send_srej_tail(struct l2cap_chan *chan) 2608d2a7ac5dSMat Martineau { 2609bed68bdeSMat Martineau struct l2cap_ctrl control; 2610bed68bdeSMat Martineau 2611bed68bdeSMat Martineau BT_DBG("chan %p", chan); 2612bed68bdeSMat Martineau 2613bed68bdeSMat Martineau if (chan->srej_list.tail == L2CAP_SEQ_LIST_CLEAR) 2614bed68bdeSMat Martineau return; 2615bed68bdeSMat Martineau 2616bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2617bed68bdeSMat Martineau control.sframe = 1; 2618bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2619bed68bdeSMat Martineau control.reqseq = chan->srej_list.tail; 2620bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2621d2a7ac5dSMat Martineau } 2622d2a7ac5dSMat Martineau 2623d2a7ac5dSMat Martineau static void l2cap_send_srej_list(struct l2cap_chan *chan, u16 txseq) 2624d2a7ac5dSMat Martineau { 2625bed68bdeSMat Martineau struct l2cap_ctrl control; 2626bed68bdeSMat Martineau u16 initial_head; 2627bed68bdeSMat Martineau u16 seq; 2628bed68bdeSMat Martineau 2629b4400672SAndrei Emeltchenko BT_DBG("chan %p, txseq %u", chan, txseq); 2630bed68bdeSMat Martineau 2631bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2632bed68bdeSMat Martineau control.sframe = 1; 2633bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2634bed68bdeSMat Martineau 2635bed68bdeSMat Martineau /* Capture initial list head to allow only one pass through the list. */ 2636bed68bdeSMat Martineau initial_head = chan->srej_list.head; 2637bed68bdeSMat Martineau 2638bed68bdeSMat Martineau do { 2639bed68bdeSMat Martineau seq = l2cap_seq_list_pop(&chan->srej_list); 2640bed68bdeSMat Martineau if (seq == txseq || seq == L2CAP_SEQ_LIST_CLEAR) 2641bed68bdeSMat Martineau break; 2642bed68bdeSMat Martineau 2643bed68bdeSMat Martineau control.reqseq = seq; 2644bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2645bed68bdeSMat Martineau l2cap_seq_list_append(&chan->srej_list, seq); 2646bed68bdeSMat Martineau } while (chan->srej_list.head != initial_head); 2647d2a7ac5dSMat Martineau } 2648d2a7ac5dSMat Martineau 2649608bcc6dSMat Martineau static void l2cap_process_reqseq(struct l2cap_chan *chan, u16 reqseq) 2650608bcc6dSMat Martineau { 2651608bcc6dSMat Martineau struct sk_buff *acked_skb; 2652608bcc6dSMat Martineau u16 ackseq; 2653608bcc6dSMat Martineau 2654b4400672SAndrei Emeltchenko BT_DBG("chan %p, reqseq %u", chan, reqseq); 2655608bcc6dSMat Martineau 2656608bcc6dSMat Martineau if (chan->unacked_frames == 0 || reqseq == chan->expected_ack_seq) 2657608bcc6dSMat Martineau return; 2658608bcc6dSMat Martineau 2659b4400672SAndrei Emeltchenko BT_DBG("expected_ack_seq %u, unacked_frames %u", 2660608bcc6dSMat Martineau chan->expected_ack_seq, chan->unacked_frames); 2661608bcc6dSMat Martineau 2662608bcc6dSMat Martineau for (ackseq = chan->expected_ack_seq; ackseq != reqseq; 2663608bcc6dSMat Martineau ackseq = __next_seq(chan, ackseq)) { 2664608bcc6dSMat Martineau 2665608bcc6dSMat Martineau acked_skb = l2cap_ertm_seq_in_queue(&chan->tx_q, ackseq); 2666608bcc6dSMat Martineau if (acked_skb) { 2667608bcc6dSMat Martineau skb_unlink(acked_skb, &chan->tx_q); 2668608bcc6dSMat Martineau kfree_skb(acked_skb); 2669608bcc6dSMat Martineau chan->unacked_frames--; 2670608bcc6dSMat Martineau } 2671608bcc6dSMat Martineau } 2672608bcc6dSMat Martineau 2673608bcc6dSMat Martineau chan->expected_ack_seq = reqseq; 2674608bcc6dSMat Martineau 2675608bcc6dSMat Martineau if (chan->unacked_frames == 0) 2676608bcc6dSMat Martineau __clear_retrans_timer(chan); 2677608bcc6dSMat Martineau 2678b4400672SAndrei Emeltchenko BT_DBG("unacked_frames %u", chan->unacked_frames); 2679608bcc6dSMat Martineau } 2680608bcc6dSMat Martineau 2681608bcc6dSMat Martineau static void l2cap_abort_rx_srej_sent(struct l2cap_chan *chan) 2682608bcc6dSMat Martineau { 2683608bcc6dSMat Martineau BT_DBG("chan %p", chan); 2684608bcc6dSMat Martineau 2685608bcc6dSMat Martineau chan->expected_tx_seq = chan->buffer_seq; 2686608bcc6dSMat Martineau l2cap_seq_list_clear(&chan->srej_list); 2687608bcc6dSMat Martineau skb_queue_purge(&chan->srej_q); 2688608bcc6dSMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 2689608bcc6dSMat Martineau } 2690608bcc6dSMat Martineau 2691d660366dSGustavo Padovan static void l2cap_tx_state_xmit(struct l2cap_chan *chan, 2692608bcc6dSMat Martineau struct l2cap_ctrl *control, 2693608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2694608bcc6dSMat Martineau { 2695608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d", chan, control, skbs, 2696608bcc6dSMat Martineau event); 2697608bcc6dSMat Martineau 2698608bcc6dSMat Martineau switch (event) { 2699608bcc6dSMat Martineau case L2CAP_EV_DATA_REQUEST: 2700608bcc6dSMat Martineau if (chan->tx_send_head == NULL) 2701608bcc6dSMat Martineau chan->tx_send_head = skb_peek(skbs); 2702608bcc6dSMat Martineau 2703608bcc6dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 2704608bcc6dSMat Martineau l2cap_ertm_send(chan); 2705608bcc6dSMat Martineau break; 2706608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_DETECTED: 2707608bcc6dSMat Martineau BT_DBG("Enter LOCAL_BUSY"); 2708608bcc6dSMat Martineau set_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2709608bcc6dSMat Martineau 2710608bcc6dSMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 2711608bcc6dSMat Martineau /* The SREJ_SENT state must be aborted if we are to 2712608bcc6dSMat Martineau * enter the LOCAL_BUSY state. 2713608bcc6dSMat Martineau */ 2714608bcc6dSMat Martineau l2cap_abort_rx_srej_sent(chan); 2715608bcc6dSMat Martineau } 2716608bcc6dSMat Martineau 2717608bcc6dSMat Martineau l2cap_send_ack(chan); 2718608bcc6dSMat Martineau 2719608bcc6dSMat Martineau break; 2720608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_CLEAR: 2721608bcc6dSMat Martineau BT_DBG("Exit LOCAL_BUSY"); 2722608bcc6dSMat Martineau clear_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2723608bcc6dSMat Martineau 2724608bcc6dSMat Martineau if (test_bit(CONN_RNR_SENT, &chan->conn_state)) { 2725608bcc6dSMat Martineau struct l2cap_ctrl local_control; 2726608bcc6dSMat Martineau 2727608bcc6dSMat Martineau memset(&local_control, 0, sizeof(local_control)); 2728608bcc6dSMat Martineau local_control.sframe = 1; 2729608bcc6dSMat Martineau local_control.super = L2CAP_SUPER_RR; 2730608bcc6dSMat Martineau local_control.poll = 1; 2731608bcc6dSMat Martineau local_control.reqseq = chan->buffer_seq; 2732a67d7f6fSMat Martineau l2cap_send_sframe(chan, &local_control); 2733608bcc6dSMat Martineau 2734608bcc6dSMat Martineau chan->retry_count = 1; 2735608bcc6dSMat Martineau __set_monitor_timer(chan); 2736608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2737608bcc6dSMat Martineau } 2738608bcc6dSMat Martineau break; 2739608bcc6dSMat Martineau case L2CAP_EV_RECV_REQSEQ_AND_FBIT: 2740608bcc6dSMat Martineau l2cap_process_reqseq(chan, control->reqseq); 2741608bcc6dSMat Martineau break; 2742608bcc6dSMat Martineau case L2CAP_EV_EXPLICIT_POLL: 2743608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2744608bcc6dSMat Martineau chan->retry_count = 1; 2745608bcc6dSMat Martineau __set_monitor_timer(chan); 2746608bcc6dSMat Martineau __clear_ack_timer(chan); 2747608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2748608bcc6dSMat Martineau break; 2749608bcc6dSMat Martineau case L2CAP_EV_RETRANS_TO: 2750608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2751608bcc6dSMat Martineau chan->retry_count = 1; 2752608bcc6dSMat Martineau __set_monitor_timer(chan); 2753608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2754608bcc6dSMat Martineau break; 2755608bcc6dSMat Martineau case L2CAP_EV_RECV_FBIT: 2756608bcc6dSMat Martineau /* Nothing to process */ 2757608bcc6dSMat Martineau break; 2758608bcc6dSMat Martineau default: 2759608bcc6dSMat Martineau break; 2760608bcc6dSMat Martineau } 2761608bcc6dSMat Martineau } 2762608bcc6dSMat Martineau 2763d660366dSGustavo Padovan static void l2cap_tx_state_wait_f(struct l2cap_chan *chan, 2764608bcc6dSMat Martineau struct l2cap_ctrl *control, 2765608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2766608bcc6dSMat Martineau { 2767608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d", chan, control, skbs, 2768608bcc6dSMat Martineau event); 2769608bcc6dSMat Martineau 2770608bcc6dSMat Martineau switch (event) { 2771608bcc6dSMat Martineau case L2CAP_EV_DATA_REQUEST: 2772608bcc6dSMat Martineau if (chan->tx_send_head == NULL) 2773608bcc6dSMat Martineau chan->tx_send_head = skb_peek(skbs); 2774608bcc6dSMat Martineau /* Queue data, but don't send. */ 2775608bcc6dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 2776608bcc6dSMat Martineau break; 2777608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_DETECTED: 2778608bcc6dSMat Martineau BT_DBG("Enter LOCAL_BUSY"); 2779608bcc6dSMat Martineau set_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2780608bcc6dSMat Martineau 2781608bcc6dSMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 2782608bcc6dSMat Martineau /* The SREJ_SENT state must be aborted if we are to 2783608bcc6dSMat Martineau * enter the LOCAL_BUSY state. 2784608bcc6dSMat Martineau */ 2785608bcc6dSMat Martineau l2cap_abort_rx_srej_sent(chan); 2786608bcc6dSMat Martineau } 2787608bcc6dSMat Martineau 2788608bcc6dSMat Martineau l2cap_send_ack(chan); 2789608bcc6dSMat Martineau 2790608bcc6dSMat Martineau break; 2791608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_CLEAR: 2792608bcc6dSMat Martineau BT_DBG("Exit LOCAL_BUSY"); 2793608bcc6dSMat Martineau clear_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2794608bcc6dSMat Martineau 2795608bcc6dSMat Martineau if (test_bit(CONN_RNR_SENT, &chan->conn_state)) { 2796608bcc6dSMat Martineau struct l2cap_ctrl local_control; 2797608bcc6dSMat Martineau memset(&local_control, 0, sizeof(local_control)); 2798608bcc6dSMat Martineau local_control.sframe = 1; 2799608bcc6dSMat Martineau local_control.super = L2CAP_SUPER_RR; 2800608bcc6dSMat Martineau local_control.poll = 1; 2801608bcc6dSMat Martineau local_control.reqseq = chan->buffer_seq; 2802a67d7f6fSMat Martineau l2cap_send_sframe(chan, &local_control); 2803608bcc6dSMat Martineau 2804608bcc6dSMat Martineau chan->retry_count = 1; 2805608bcc6dSMat Martineau __set_monitor_timer(chan); 2806608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2807608bcc6dSMat Martineau } 2808608bcc6dSMat Martineau break; 2809608bcc6dSMat Martineau case L2CAP_EV_RECV_REQSEQ_AND_FBIT: 2810608bcc6dSMat Martineau l2cap_process_reqseq(chan, control->reqseq); 2811608bcc6dSMat Martineau 2812608bcc6dSMat Martineau /* Fall through */ 2813608bcc6dSMat Martineau 2814608bcc6dSMat Martineau case L2CAP_EV_RECV_FBIT: 2815608bcc6dSMat Martineau if (control && control->final) { 2816608bcc6dSMat Martineau __clear_monitor_timer(chan); 2817608bcc6dSMat Martineau if (chan->unacked_frames > 0) 2818608bcc6dSMat Martineau __set_retrans_timer(chan); 2819608bcc6dSMat Martineau chan->retry_count = 0; 2820608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 2821608bcc6dSMat Martineau BT_DBG("recv fbit tx_state 0x2.2%x", chan->tx_state); 2822608bcc6dSMat Martineau } 2823608bcc6dSMat Martineau break; 2824608bcc6dSMat Martineau case L2CAP_EV_EXPLICIT_POLL: 2825608bcc6dSMat Martineau /* Ignore */ 2826608bcc6dSMat Martineau break; 2827608bcc6dSMat Martineau case L2CAP_EV_MONITOR_TO: 2828608bcc6dSMat Martineau if (chan->max_tx == 0 || chan->retry_count < chan->max_tx) { 2829608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2830608bcc6dSMat Martineau __set_monitor_timer(chan); 2831608bcc6dSMat Martineau chan->retry_count++; 2832608bcc6dSMat Martineau } else { 28335e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNABORTED); 2834608bcc6dSMat Martineau } 2835608bcc6dSMat Martineau break; 2836608bcc6dSMat Martineau default: 2837608bcc6dSMat Martineau break; 2838608bcc6dSMat Martineau } 2839608bcc6dSMat Martineau } 2840608bcc6dSMat Martineau 2841d660366dSGustavo Padovan static void l2cap_tx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 2842608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2843608bcc6dSMat Martineau { 2844608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d, state %d", 2845608bcc6dSMat Martineau chan, control, skbs, event, chan->tx_state); 2846608bcc6dSMat Martineau 2847608bcc6dSMat Martineau switch (chan->tx_state) { 2848608bcc6dSMat Martineau case L2CAP_TX_STATE_XMIT: 2849d660366dSGustavo Padovan l2cap_tx_state_xmit(chan, control, skbs, event); 2850608bcc6dSMat Martineau break; 2851608bcc6dSMat Martineau case L2CAP_TX_STATE_WAIT_F: 2852d660366dSGustavo Padovan l2cap_tx_state_wait_f(chan, control, skbs, event); 2853608bcc6dSMat Martineau break; 2854608bcc6dSMat Martineau default: 2855608bcc6dSMat Martineau /* Ignore event */ 2856608bcc6dSMat Martineau break; 2857608bcc6dSMat Martineau } 2858608bcc6dSMat Martineau } 2859608bcc6dSMat Martineau 28604b51dae9SMat Martineau static void l2cap_pass_to_tx(struct l2cap_chan *chan, 28614b51dae9SMat Martineau struct l2cap_ctrl *control) 28624b51dae9SMat Martineau { 28634b51dae9SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2864401bb1f7SAndrei Emeltchenko l2cap_tx(chan, control, NULL, L2CAP_EV_RECV_REQSEQ_AND_FBIT); 28654b51dae9SMat Martineau } 28664b51dae9SMat Martineau 2867f80842a8SMat Martineau static void l2cap_pass_to_tx_fbit(struct l2cap_chan *chan, 2868f80842a8SMat Martineau struct l2cap_ctrl *control) 2869f80842a8SMat Martineau { 2870f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2871401bb1f7SAndrei Emeltchenko l2cap_tx(chan, control, NULL, L2CAP_EV_RECV_FBIT); 2872f80842a8SMat Martineau } 2873f80842a8SMat Martineau 28740a708f8fSGustavo F. Padovan /* Copy frame to all raw sockets on that connection */ 28750a708f8fSGustavo F. Padovan static void l2cap_raw_recv(struct l2cap_conn *conn, struct sk_buff *skb) 28760a708f8fSGustavo F. Padovan { 28770a708f8fSGustavo F. Padovan struct sk_buff *nskb; 287848454079SGustavo F. Padovan struct l2cap_chan *chan; 28790a708f8fSGustavo F. Padovan 28800a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 28810a708f8fSGustavo F. Padovan 28823df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 28833d57dc68SGustavo F. Padovan 28843df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 2885715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_RAW) 28860a708f8fSGustavo F. Padovan continue; 28870a708f8fSGustavo F. Padovan 28887f5396a7SGustavo Padovan /* Don't send frame to the channel it came from */ 28897f5396a7SGustavo Padovan if (bt_cb(skb)->chan == chan) 28900a708f8fSGustavo F. Padovan continue; 28917f5396a7SGustavo Padovan 28928bcde1f2SGustavo Padovan nskb = skb_clone(skb, GFP_KERNEL); 28930a708f8fSGustavo F. Padovan if (!nskb) 28940a708f8fSGustavo F. Padovan continue; 289580b98027SGustavo Padovan if (chan->ops->recv(chan, nskb)) 28960a708f8fSGustavo F. Padovan kfree_skb(nskb); 28970a708f8fSGustavo F. Padovan } 28983d57dc68SGustavo F. Padovan 28993df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 29000a708f8fSGustavo F. Padovan } 29010a708f8fSGustavo F. Padovan 29020a708f8fSGustavo F. Padovan /* ---- L2CAP signalling commands ---- */ 2903b4400672SAndrei Emeltchenko static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn, u8 code, 2904b4400672SAndrei Emeltchenko u8 ident, u16 dlen, void *data) 29050a708f8fSGustavo F. Padovan { 29060a708f8fSGustavo F. Padovan struct sk_buff *skb, **frag; 29070a708f8fSGustavo F. Padovan struct l2cap_cmd_hdr *cmd; 29080a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 29090a708f8fSGustavo F. Padovan int len, count; 29100a708f8fSGustavo F. Padovan 2911b4400672SAndrei Emeltchenko BT_DBG("conn %p, code 0x%2.2x, ident 0x%2.2x, len %u", 29120a708f8fSGustavo F. Padovan conn, code, ident, dlen); 29130a708f8fSGustavo F. Padovan 2914300b962eSAnderson Lizardo if (conn->mtu < L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE) 2915300b962eSAnderson Lizardo return NULL; 2916300b962eSAnderson Lizardo 29170a708f8fSGustavo F. Padovan len = L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE + dlen; 29180a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 29190a708f8fSGustavo F. Padovan 29208bcde1f2SGustavo Padovan skb = bt_skb_alloc(count, GFP_KERNEL); 29210a708f8fSGustavo F. Padovan if (!skb) 29220a708f8fSGustavo F. Padovan return NULL; 29230a708f8fSGustavo F. Padovan 29240a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 29250a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(L2CAP_CMD_HDR_SIZE + dlen); 29263300d9a9SClaudio Takahasi 29273300d9a9SClaudio Takahasi if (conn->hcon->type == LE_LINK) 2928dcf4adbfSJoe Perches lh->cid = cpu_to_le16(L2CAP_CID_LE_SIGNALING); 29293300d9a9SClaudio Takahasi else 2930dcf4adbfSJoe Perches lh->cid = cpu_to_le16(L2CAP_CID_SIGNALING); 29310a708f8fSGustavo F. Padovan 29320a708f8fSGustavo F. Padovan cmd = (struct l2cap_cmd_hdr *) skb_put(skb, L2CAP_CMD_HDR_SIZE); 29330a708f8fSGustavo F. Padovan cmd->code = code; 29340a708f8fSGustavo F. Padovan cmd->ident = ident; 29350a708f8fSGustavo F. Padovan cmd->len = cpu_to_le16(dlen); 29360a708f8fSGustavo F. Padovan 29370a708f8fSGustavo F. Padovan if (dlen) { 29380a708f8fSGustavo F. Padovan count -= L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE; 29390a708f8fSGustavo F. Padovan memcpy(skb_put(skb, count), data, count); 29400a708f8fSGustavo F. Padovan data += count; 29410a708f8fSGustavo F. Padovan } 29420a708f8fSGustavo F. Padovan 29430a708f8fSGustavo F. Padovan len -= skb->len; 29440a708f8fSGustavo F. Padovan 29450a708f8fSGustavo F. Padovan /* Continuation fragments (no L2CAP header) */ 29460a708f8fSGustavo F. Padovan frag = &skb_shinfo(skb)->frag_list; 29470a708f8fSGustavo F. Padovan while (len) { 29480a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 29490a708f8fSGustavo F. Padovan 29508bcde1f2SGustavo Padovan *frag = bt_skb_alloc(count, GFP_KERNEL); 29510a708f8fSGustavo F. Padovan if (!*frag) 29520a708f8fSGustavo F. Padovan goto fail; 29530a708f8fSGustavo F. Padovan 29540a708f8fSGustavo F. Padovan memcpy(skb_put(*frag, count), data, count); 29550a708f8fSGustavo F. Padovan 29560a708f8fSGustavo F. Padovan len -= count; 29570a708f8fSGustavo F. Padovan data += count; 29580a708f8fSGustavo F. Padovan 29590a708f8fSGustavo F. Padovan frag = &(*frag)->next; 29600a708f8fSGustavo F. Padovan } 29610a708f8fSGustavo F. Padovan 29620a708f8fSGustavo F. Padovan return skb; 29630a708f8fSGustavo F. Padovan 29640a708f8fSGustavo F. Padovan fail: 29650a708f8fSGustavo F. Padovan kfree_skb(skb); 29660a708f8fSGustavo F. Padovan return NULL; 29670a708f8fSGustavo F. Padovan } 29680a708f8fSGustavo F. Padovan 29692d792818SGustavo Padovan static inline int l2cap_get_conf_opt(void **ptr, int *type, int *olen, 29702d792818SGustavo Padovan unsigned long *val) 29710a708f8fSGustavo F. Padovan { 29720a708f8fSGustavo F. Padovan struct l2cap_conf_opt *opt = *ptr; 29730a708f8fSGustavo F. Padovan int len; 29740a708f8fSGustavo F. Padovan 29750a708f8fSGustavo F. Padovan len = L2CAP_CONF_OPT_SIZE + opt->len; 29760a708f8fSGustavo F. Padovan *ptr += len; 29770a708f8fSGustavo F. Padovan 29780a708f8fSGustavo F. Padovan *type = opt->type; 29790a708f8fSGustavo F. Padovan *olen = opt->len; 29800a708f8fSGustavo F. Padovan 29810a708f8fSGustavo F. Padovan switch (opt->len) { 29820a708f8fSGustavo F. Padovan case 1: 29830a708f8fSGustavo F. Padovan *val = *((u8 *) opt->val); 29840a708f8fSGustavo F. Padovan break; 29850a708f8fSGustavo F. Padovan 29860a708f8fSGustavo F. Padovan case 2: 29870a708f8fSGustavo F. Padovan *val = get_unaligned_le16(opt->val); 29880a708f8fSGustavo F. Padovan break; 29890a708f8fSGustavo F. Padovan 29900a708f8fSGustavo F. Padovan case 4: 29910a708f8fSGustavo F. Padovan *val = get_unaligned_le32(opt->val); 29920a708f8fSGustavo F. Padovan break; 29930a708f8fSGustavo F. Padovan 29940a708f8fSGustavo F. Padovan default: 29950a708f8fSGustavo F. Padovan *val = (unsigned long) opt->val; 29960a708f8fSGustavo F. Padovan break; 29970a708f8fSGustavo F. Padovan } 29980a708f8fSGustavo F. Padovan 2999b4400672SAndrei Emeltchenko BT_DBG("type 0x%2.2x len %u val 0x%lx", *type, opt->len, *val); 30000a708f8fSGustavo F. Padovan return len; 30010a708f8fSGustavo F. Padovan } 30020a708f8fSGustavo F. Padovan 30030a708f8fSGustavo F. Padovan static void l2cap_add_conf_opt(void **ptr, u8 type, u8 len, unsigned long val) 30040a708f8fSGustavo F. Padovan { 30050a708f8fSGustavo F. Padovan struct l2cap_conf_opt *opt = *ptr; 30060a708f8fSGustavo F. Padovan 3007b4400672SAndrei Emeltchenko BT_DBG("type 0x%2.2x len %u val 0x%lx", type, len, val); 30080a708f8fSGustavo F. Padovan 30090a708f8fSGustavo F. Padovan opt->type = type; 30100a708f8fSGustavo F. Padovan opt->len = len; 30110a708f8fSGustavo F. Padovan 30120a708f8fSGustavo F. Padovan switch (len) { 30130a708f8fSGustavo F. Padovan case 1: 30140a708f8fSGustavo F. Padovan *((u8 *) opt->val) = val; 30150a708f8fSGustavo F. Padovan break; 30160a708f8fSGustavo F. Padovan 30170a708f8fSGustavo F. Padovan case 2: 30180a708f8fSGustavo F. Padovan put_unaligned_le16(val, opt->val); 30190a708f8fSGustavo F. Padovan break; 30200a708f8fSGustavo F. Padovan 30210a708f8fSGustavo F. Padovan case 4: 30220a708f8fSGustavo F. Padovan put_unaligned_le32(val, opt->val); 30230a708f8fSGustavo F. Padovan break; 30240a708f8fSGustavo F. Padovan 30250a708f8fSGustavo F. Padovan default: 30260a708f8fSGustavo F. Padovan memcpy(opt->val, (void *) val, len); 30270a708f8fSGustavo F. Padovan break; 30280a708f8fSGustavo F. Padovan } 30290a708f8fSGustavo F. Padovan 30300a708f8fSGustavo F. Padovan *ptr += L2CAP_CONF_OPT_SIZE + len; 30310a708f8fSGustavo F. Padovan } 30320a708f8fSGustavo F. Padovan 3033f89cef09SAndrei Emeltchenko static void l2cap_add_opt_efs(void **ptr, struct l2cap_chan *chan) 3034f89cef09SAndrei Emeltchenko { 3035f89cef09SAndrei Emeltchenko struct l2cap_conf_efs efs; 3036f89cef09SAndrei Emeltchenko 3037f89cef09SAndrei Emeltchenko switch (chan->mode) { 3038f89cef09SAndrei Emeltchenko case L2CAP_MODE_ERTM: 3039f89cef09SAndrei Emeltchenko efs.id = chan->local_id; 3040f89cef09SAndrei Emeltchenko efs.stype = chan->local_stype; 3041f89cef09SAndrei Emeltchenko efs.msdu = cpu_to_le16(chan->local_msdu); 3042f89cef09SAndrei Emeltchenko efs.sdu_itime = cpu_to_le32(chan->local_sdu_itime); 3043dcf4adbfSJoe Perches efs.acc_lat = cpu_to_le32(L2CAP_DEFAULT_ACC_LAT); 3044dcf4adbfSJoe Perches efs.flush_to = cpu_to_le32(L2CAP_EFS_DEFAULT_FLUSH_TO); 3045f89cef09SAndrei Emeltchenko break; 3046f89cef09SAndrei Emeltchenko 3047f89cef09SAndrei Emeltchenko case L2CAP_MODE_STREAMING: 3048f89cef09SAndrei Emeltchenko efs.id = 1; 3049f89cef09SAndrei Emeltchenko efs.stype = L2CAP_SERV_BESTEFFORT; 3050f89cef09SAndrei Emeltchenko efs.msdu = cpu_to_le16(chan->local_msdu); 3051f89cef09SAndrei Emeltchenko efs.sdu_itime = cpu_to_le32(chan->local_sdu_itime); 3052f89cef09SAndrei Emeltchenko efs.acc_lat = 0; 3053f89cef09SAndrei Emeltchenko efs.flush_to = 0; 3054f89cef09SAndrei Emeltchenko break; 3055f89cef09SAndrei Emeltchenko 3056f89cef09SAndrei Emeltchenko default: 3057f89cef09SAndrei Emeltchenko return; 3058f89cef09SAndrei Emeltchenko } 3059f89cef09SAndrei Emeltchenko 3060f89cef09SAndrei Emeltchenko l2cap_add_conf_opt(ptr, L2CAP_CONF_EFS, sizeof(efs), 3061f89cef09SAndrei Emeltchenko (unsigned long) &efs); 3062f89cef09SAndrei Emeltchenko } 3063f89cef09SAndrei Emeltchenko 3064721c4181SGustavo F. Padovan static void l2cap_ack_timeout(struct work_struct *work) 30650a708f8fSGustavo F. Padovan { 3066721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 3067721c4181SGustavo F. Padovan ack_timer.work); 30680362520bSMat Martineau u16 frames_to_ack; 30690a708f8fSGustavo F. Padovan 30702fb9b3d4SGustavo F. Padovan BT_DBG("chan %p", chan); 30712fb9b3d4SGustavo F. Padovan 30726be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 30736be36555SAndrei Emeltchenko 30740362520bSMat Martineau frames_to_ack = __seq_offset(chan, chan->buffer_seq, 30750362520bSMat Martineau chan->last_acked_seq); 30760362520bSMat Martineau 30770362520bSMat Martineau if (frames_to_ack) 30780362520bSMat Martineau l2cap_send_rr_or_rnr(chan, 0); 30796be36555SAndrei Emeltchenko 30806be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 308109bfb2eeSSzymon Janc l2cap_chan_put(chan); 30820a708f8fSGustavo F. Padovan } 30830a708f8fSGustavo F. Padovan 3084466f8004SAndrei Emeltchenko int l2cap_ertm_init(struct l2cap_chan *chan) 30850a708f8fSGustavo F. Padovan { 30863c588192SMat Martineau int err; 30873c588192SMat Martineau 3088105bdf9eSMat Martineau chan->next_tx_seq = 0; 3089105bdf9eSMat Martineau chan->expected_tx_seq = 0; 309042e5c802SGustavo F. Padovan chan->expected_ack_seq = 0; 30916a026610SGustavo F. Padovan chan->unacked_frames = 0; 309242e5c802SGustavo F. Padovan chan->buffer_seq = 0; 30936a026610SGustavo F. Padovan chan->frames_sent = 0; 3094105bdf9eSMat Martineau chan->last_acked_seq = 0; 3095105bdf9eSMat Martineau chan->sdu = NULL; 3096105bdf9eSMat Martineau chan->sdu_last_frag = NULL; 3097105bdf9eSMat Martineau chan->sdu_len = 0; 3098105bdf9eSMat Martineau 3099d34c34fbSMat Martineau skb_queue_head_init(&chan->tx_q); 3100d34c34fbSMat Martineau 31016ed971caSMarcel Holtmann chan->local_amp_id = AMP_ID_BREDR; 31026ed971caSMarcel Holtmann chan->move_id = AMP_ID_BREDR; 310308333283SMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 310408333283SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 310508333283SMat Martineau 3106105bdf9eSMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 3107105bdf9eSMat Martineau return 0; 3108105bdf9eSMat Martineau 3109105bdf9eSMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 3110105bdf9eSMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 31110a708f8fSGustavo F. Padovan 3112721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->retrans_timer, l2cap_retrans_timeout); 3113721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->monitor_timer, l2cap_monitor_timeout); 3114721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->ack_timer, l2cap_ack_timeout); 31150a708f8fSGustavo F. Padovan 3116f1c6775bSGustavo F. Padovan skb_queue_head_init(&chan->srej_q); 31170a708f8fSGustavo F. Padovan 31183c588192SMat Martineau err = l2cap_seq_list_init(&chan->srej_list, chan->tx_win); 31193c588192SMat Martineau if (err < 0) 31203c588192SMat Martineau return err; 31213c588192SMat Martineau 31229dc9affcSMat Martineau err = l2cap_seq_list_init(&chan->retrans_list, chan->remote_tx_win); 31239dc9affcSMat Martineau if (err < 0) 31249dc9affcSMat Martineau l2cap_seq_list_free(&chan->srej_list); 31259dc9affcSMat Martineau 31269dc9affcSMat Martineau return err; 31270a708f8fSGustavo F. Padovan } 31280a708f8fSGustavo F. Padovan 31290a708f8fSGustavo F. Padovan static inline __u8 l2cap_select_mode(__u8 mode, __u16 remote_feat_mask) 31300a708f8fSGustavo F. Padovan { 31310a708f8fSGustavo F. Padovan switch (mode) { 31320a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 31330a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 31340a708f8fSGustavo F. Padovan if (l2cap_mode_supported(mode, remote_feat_mask)) 31350a708f8fSGustavo F. Padovan return mode; 31360a708f8fSGustavo F. Padovan /* fall through */ 31370a708f8fSGustavo F. Padovan default: 31380a708f8fSGustavo F. Padovan return L2CAP_MODE_BASIC; 31390a708f8fSGustavo F. Padovan } 31400a708f8fSGustavo F. Padovan } 31410a708f8fSGustavo F. Padovan 3142848566b3SMarcel Holtmann static inline bool __l2cap_ews_supported(struct l2cap_conn *conn) 31436327eb98SAndrei Emeltchenko { 3144848566b3SMarcel Holtmann return conn->hs_enabled && conn->feat_mask & L2CAP_FEAT_EXT_WINDOW; 31456327eb98SAndrei Emeltchenko } 31466327eb98SAndrei Emeltchenko 3147848566b3SMarcel Holtmann static inline bool __l2cap_efs_supported(struct l2cap_conn *conn) 3148f89cef09SAndrei Emeltchenko { 3149848566b3SMarcel Holtmann return conn->hs_enabled && conn->feat_mask & L2CAP_FEAT_EXT_FLOW; 3150f89cef09SAndrei Emeltchenko } 3151f89cef09SAndrei Emeltchenko 315236c86c85SMat Martineau static void __l2cap_set_ertm_timeouts(struct l2cap_chan *chan, 315336c86c85SMat Martineau struct l2cap_conf_rfc *rfc) 315436c86c85SMat Martineau { 31556ed971caSMarcel Holtmann if (chan->local_amp_id != AMP_ID_BREDR && chan->hs_hcon) { 315636c86c85SMat Martineau u64 ertm_to = chan->hs_hcon->hdev->amp_be_flush_to; 315736c86c85SMat Martineau 315836c86c85SMat Martineau /* Class 1 devices have must have ERTM timeouts 315936c86c85SMat Martineau * exceeding the Link Supervision Timeout. The 316036c86c85SMat Martineau * default Link Supervision Timeout for AMP 316136c86c85SMat Martineau * controllers is 10 seconds. 316236c86c85SMat Martineau * 316336c86c85SMat Martineau * Class 1 devices use 0xffffffff for their 316436c86c85SMat Martineau * best-effort flush timeout, so the clamping logic 316536c86c85SMat Martineau * will result in a timeout that meets the above 316636c86c85SMat Martineau * requirement. ERTM timeouts are 16-bit values, so 316736c86c85SMat Martineau * the maximum timeout is 65.535 seconds. 316836c86c85SMat Martineau */ 316936c86c85SMat Martineau 317036c86c85SMat Martineau /* Convert timeout to milliseconds and round */ 317136c86c85SMat Martineau ertm_to = DIV_ROUND_UP_ULL(ertm_to, 1000); 317236c86c85SMat Martineau 317336c86c85SMat Martineau /* This is the recommended formula for class 2 devices 317436c86c85SMat Martineau * that start ERTM timers when packets are sent to the 317536c86c85SMat Martineau * controller. 317636c86c85SMat Martineau */ 317736c86c85SMat Martineau ertm_to = 3 * ertm_to + 500; 317836c86c85SMat Martineau 317936c86c85SMat Martineau if (ertm_to > 0xffff) 318036c86c85SMat Martineau ertm_to = 0xffff; 318136c86c85SMat Martineau 318236c86c85SMat Martineau rfc->retrans_timeout = cpu_to_le16((u16) ertm_to); 318336c86c85SMat Martineau rfc->monitor_timeout = rfc->retrans_timeout; 318436c86c85SMat Martineau } else { 3185dcf4adbfSJoe Perches rfc->retrans_timeout = cpu_to_le16(L2CAP_DEFAULT_RETRANS_TO); 3186dcf4adbfSJoe Perches rfc->monitor_timeout = cpu_to_le16(L2CAP_DEFAULT_MONITOR_TO); 318736c86c85SMat Martineau } 318836c86c85SMat Martineau } 318936c86c85SMat Martineau 31906327eb98SAndrei Emeltchenko static inline void l2cap_txwin_setup(struct l2cap_chan *chan) 31916327eb98SAndrei Emeltchenko { 31926327eb98SAndrei Emeltchenko if (chan->tx_win > L2CAP_DEFAULT_TX_WINDOW && 3193848566b3SMarcel Holtmann __l2cap_ews_supported(chan->conn)) { 31946327eb98SAndrei Emeltchenko /* use extended control field */ 31956327eb98SAndrei Emeltchenko set_bit(FLAG_EXT_CTRL, &chan->flags); 3196836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_EXT_WINDOW; 3197836be934SAndrei Emeltchenko } else { 31986327eb98SAndrei Emeltchenko chan->tx_win = min_t(u16, chan->tx_win, 31996327eb98SAndrei Emeltchenko L2CAP_DEFAULT_TX_WINDOW); 3200836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_TX_WINDOW; 3201836be934SAndrei Emeltchenko } 3202c20f8e35SMat Martineau chan->ack_win = chan->tx_win; 32036327eb98SAndrei Emeltchenko } 32046327eb98SAndrei Emeltchenko 3205710f9b0aSGustavo F. Padovan static int l2cap_build_conf_req(struct l2cap_chan *chan, void *data) 32060a708f8fSGustavo F. Padovan { 32070a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = data; 32080c1bc5c6SGustavo F. Padovan struct l2cap_conf_rfc rfc = { .mode = chan->mode }; 32090a708f8fSGustavo F. Padovan void *ptr = req->data; 3210c8f79162SAndrei Emeltchenko u16 size; 32110a708f8fSGustavo F. Padovan 321249208c9cSGustavo F. Padovan BT_DBG("chan %p", chan); 32130a708f8fSGustavo F. Padovan 321473ffa904SGustavo F. Padovan if (chan->num_conf_req || chan->num_conf_rsp) 32150a708f8fSGustavo F. Padovan goto done; 32160a708f8fSGustavo F. Padovan 32170c1bc5c6SGustavo F. Padovan switch (chan->mode) { 32180a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 32190a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 3220c1360a1cSGustavo F. Padovan if (test_bit(CONF_STATE2_DEVICE, &chan->conf_state)) 32210a708f8fSGustavo F. Padovan break; 32220a708f8fSGustavo F. Padovan 3223848566b3SMarcel Holtmann if (__l2cap_efs_supported(chan->conn)) 3224f89cef09SAndrei Emeltchenko set_bit(FLAG_EFS_ENABLE, &chan->flags); 3225f89cef09SAndrei Emeltchenko 32260a708f8fSGustavo F. Padovan /* fall through */ 32270a708f8fSGustavo F. Padovan default: 32288c1d787bSGustavo F. Padovan chan->mode = l2cap_select_mode(rfc.mode, chan->conn->feat_mask); 32290a708f8fSGustavo F. Padovan break; 32300a708f8fSGustavo F. Padovan } 32310a708f8fSGustavo F. Padovan 32320a708f8fSGustavo F. Padovan done: 32330c1bc5c6SGustavo F. Padovan if (chan->imtu != L2CAP_DEFAULT_MTU) 32340c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->imtu); 32350a708f8fSGustavo F. Padovan 32360c1bc5c6SGustavo F. Padovan switch (chan->mode) { 32370a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 32386fea7ad1SMarcel Holtmann if (disable_ertm) 32396fea7ad1SMarcel Holtmann break; 32406fea7ad1SMarcel Holtmann 32418c1d787bSGustavo F. Padovan if (!(chan->conn->feat_mask & L2CAP_FEAT_ERTM) && 32428c1d787bSGustavo F. Padovan !(chan->conn->feat_mask & L2CAP_FEAT_STREAMING)) 32430a708f8fSGustavo F. Padovan break; 32440a708f8fSGustavo F. Padovan 32450a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_BASIC; 32460a708f8fSGustavo F. Padovan rfc.txwin_size = 0; 32470a708f8fSGustavo F. Padovan rfc.max_transmit = 0; 32480a708f8fSGustavo F. Padovan rfc.retrans_timeout = 0; 32490a708f8fSGustavo F. Padovan rfc.monitor_timeout = 0; 32500a708f8fSGustavo F. Padovan rfc.max_pdu_size = 0; 32510a708f8fSGustavo F. Padovan 32520a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 32530a708f8fSGustavo F. Padovan (unsigned long) &rfc); 32540a708f8fSGustavo F. Padovan break; 32550a708f8fSGustavo F. Padovan 32560a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 32570a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_ERTM; 325847d1ec61SGustavo F. Padovan rfc.max_transmit = chan->max_tx; 325936c86c85SMat Martineau 326036c86c85SMat Martineau __l2cap_set_ertm_timeouts(chan, &rfc); 3261c8f79162SAndrei Emeltchenko 3262c8f79162SAndrei Emeltchenko size = min_t(u16, L2CAP_DEFAULT_MAX_PDU_SIZE, chan->conn->mtu - 32632d792818SGustavo Padovan L2CAP_EXT_HDR_SIZE - L2CAP_SDULEN_SIZE - 3264c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 3265c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 32660a708f8fSGustavo F. Padovan 32676327eb98SAndrei Emeltchenko l2cap_txwin_setup(chan); 32686327eb98SAndrei Emeltchenko 32696327eb98SAndrei Emeltchenko rfc.txwin_size = min_t(u16, chan->tx_win, 32706327eb98SAndrei Emeltchenko L2CAP_DEFAULT_TX_WINDOW); 32710a708f8fSGustavo F. Padovan 32720a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 32730a708f8fSGustavo F. Padovan (unsigned long) &rfc); 32740a708f8fSGustavo F. Padovan 3275f89cef09SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) 3276f89cef09SAndrei Emeltchenko l2cap_add_opt_efs(&ptr, chan); 3277f89cef09SAndrei Emeltchenko 32786327eb98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 32796327eb98SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EWS, 2, 32806327eb98SAndrei Emeltchenko chan->tx_win); 328160918918SAndrei Emeltchenko 328260918918SAndrei Emeltchenko if (chan->conn->feat_mask & L2CAP_FEAT_FCS) 328360918918SAndrei Emeltchenko if (chan->fcs == L2CAP_FCS_NONE || 3284f2592d3eSAndrei Emeltchenko test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) { 328560918918SAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 328660918918SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_FCS, 1, 328760918918SAndrei Emeltchenko chan->fcs); 328860918918SAndrei Emeltchenko } 32890a708f8fSGustavo F. Padovan break; 32900a708f8fSGustavo F. Padovan 32910a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 3292273759e2SMat Martineau l2cap_txwin_setup(chan); 32930a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_STREAMING; 32940a708f8fSGustavo F. Padovan rfc.txwin_size = 0; 32950a708f8fSGustavo F. Padovan rfc.max_transmit = 0; 32960a708f8fSGustavo F. Padovan rfc.retrans_timeout = 0; 32970a708f8fSGustavo F. Padovan rfc.monitor_timeout = 0; 3298c8f79162SAndrei Emeltchenko 3299c8f79162SAndrei Emeltchenko size = min_t(u16, L2CAP_DEFAULT_MAX_PDU_SIZE, chan->conn->mtu - 33002d792818SGustavo Padovan L2CAP_EXT_HDR_SIZE - L2CAP_SDULEN_SIZE - 3301c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 3302c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 33030a708f8fSGustavo F. Padovan 33040a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 33050a708f8fSGustavo F. Padovan (unsigned long) &rfc); 33060a708f8fSGustavo F. Padovan 3307f89cef09SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) 3308f89cef09SAndrei Emeltchenko l2cap_add_opt_efs(&ptr, chan); 3309f89cef09SAndrei Emeltchenko 331060918918SAndrei Emeltchenko if (chan->conn->feat_mask & L2CAP_FEAT_FCS) 331147d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_NONE || 3312f2592d3eSAndrei Emeltchenko test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) { 331347d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 331460918918SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_FCS, 1, 331560918918SAndrei Emeltchenko chan->fcs); 33160a708f8fSGustavo F. Padovan } 33170a708f8fSGustavo F. Padovan break; 33180a708f8fSGustavo F. Padovan } 33190a708f8fSGustavo F. Padovan 3320fe4128e0SGustavo F. Padovan req->dcid = cpu_to_le16(chan->dcid); 3321dcf4adbfSJoe Perches req->flags = cpu_to_le16(0); 33220a708f8fSGustavo F. Padovan 33230a708f8fSGustavo F. Padovan return ptr - data; 33240a708f8fSGustavo F. Padovan } 33250a708f8fSGustavo F. Padovan 332673ffa904SGustavo F. Padovan static int l2cap_parse_conf_req(struct l2cap_chan *chan, void *data) 33270a708f8fSGustavo F. Padovan { 33280a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = data; 33290a708f8fSGustavo F. Padovan void *ptr = rsp->data; 333073ffa904SGustavo F. Padovan void *req = chan->conf_req; 333173ffa904SGustavo F. Padovan int len = chan->conf_len; 33320a708f8fSGustavo F. Padovan int type, hint, olen; 33330a708f8fSGustavo F. Padovan unsigned long val; 33340a708f8fSGustavo F. Padovan struct l2cap_conf_rfc rfc = { .mode = L2CAP_MODE_BASIC }; 333542dceae2SAndrei Emeltchenko struct l2cap_conf_efs efs; 333642dceae2SAndrei Emeltchenko u8 remote_efs = 0; 33370a708f8fSGustavo F. Padovan u16 mtu = L2CAP_DEFAULT_MTU; 33380a708f8fSGustavo F. Padovan u16 result = L2CAP_CONF_SUCCESS; 3339c8f79162SAndrei Emeltchenko u16 size; 33400a708f8fSGustavo F. Padovan 334173ffa904SGustavo F. Padovan BT_DBG("chan %p", chan); 33420a708f8fSGustavo F. Padovan 33430a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 33440a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&req, &type, &olen, &val); 33450a708f8fSGustavo F. Padovan 33460a708f8fSGustavo F. Padovan hint = type & L2CAP_CONF_HINT; 33470a708f8fSGustavo F. Padovan type &= L2CAP_CONF_MASK; 33480a708f8fSGustavo F. Padovan 33490a708f8fSGustavo F. Padovan switch (type) { 33500a708f8fSGustavo F. Padovan case L2CAP_CONF_MTU: 33510a708f8fSGustavo F. Padovan mtu = val; 33520a708f8fSGustavo F. Padovan break; 33530a708f8fSGustavo F. Padovan 33540a708f8fSGustavo F. Padovan case L2CAP_CONF_FLUSH_TO: 33550c1bc5c6SGustavo F. Padovan chan->flush_to = val; 33560a708f8fSGustavo F. Padovan break; 33570a708f8fSGustavo F. Padovan 33580a708f8fSGustavo F. Padovan case L2CAP_CONF_QOS: 33590a708f8fSGustavo F. Padovan break; 33600a708f8fSGustavo F. Padovan 33610a708f8fSGustavo F. Padovan case L2CAP_CONF_RFC: 33620a708f8fSGustavo F. Padovan if (olen == sizeof(rfc)) 33630a708f8fSGustavo F. Padovan memcpy(&rfc, (void *) val, olen); 33640a708f8fSGustavo F. Padovan break; 33650a708f8fSGustavo F. Padovan 33660a708f8fSGustavo F. Padovan case L2CAP_CONF_FCS: 33670a708f8fSGustavo F. Padovan if (val == L2CAP_FCS_NONE) 3368f2592d3eSAndrei Emeltchenko set_bit(CONF_RECV_NO_FCS, &chan->conf_state); 336942dceae2SAndrei Emeltchenko break; 33700a708f8fSGustavo F. Padovan 337142dceae2SAndrei Emeltchenko case L2CAP_CONF_EFS: 337242dceae2SAndrei Emeltchenko remote_efs = 1; 337342dceae2SAndrei Emeltchenko if (olen == sizeof(efs)) 337442dceae2SAndrei Emeltchenko memcpy(&efs, (void *) val, olen); 33750a708f8fSGustavo F. Padovan break; 33760a708f8fSGustavo F. Padovan 33776327eb98SAndrei Emeltchenko case L2CAP_CONF_EWS: 3378848566b3SMarcel Holtmann if (!chan->conn->hs_enabled) 33796327eb98SAndrei Emeltchenko return -ECONNREFUSED; 33806327eb98SAndrei Emeltchenko 33816327eb98SAndrei Emeltchenko set_bit(FLAG_EXT_CTRL, &chan->flags); 33826327eb98SAndrei Emeltchenko set_bit(CONF_EWS_RECV, &chan->conf_state); 3383836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_EXT_WINDOW; 33846327eb98SAndrei Emeltchenko chan->remote_tx_win = val; 33850a708f8fSGustavo F. Padovan break; 33860a708f8fSGustavo F. Padovan 33870a708f8fSGustavo F. Padovan default: 33880a708f8fSGustavo F. Padovan if (hint) 33890a708f8fSGustavo F. Padovan break; 33900a708f8fSGustavo F. Padovan 33910a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNKNOWN; 33920a708f8fSGustavo F. Padovan *((u8 *) ptr++) = type; 33930a708f8fSGustavo F. Padovan break; 33940a708f8fSGustavo F. Padovan } 33950a708f8fSGustavo F. Padovan } 33960a708f8fSGustavo F. Padovan 339773ffa904SGustavo F. Padovan if (chan->num_conf_rsp || chan->num_conf_req > 1) 33980a708f8fSGustavo F. Padovan goto done; 33990a708f8fSGustavo F. Padovan 34000c1bc5c6SGustavo F. Padovan switch (chan->mode) { 34010a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 34020a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 3403c1360a1cSGustavo F. Padovan if (!test_bit(CONF_STATE2_DEVICE, &chan->conf_state)) { 34040c1bc5c6SGustavo F. Padovan chan->mode = l2cap_select_mode(rfc.mode, 34058c1d787bSGustavo F. Padovan chan->conn->feat_mask); 34060a708f8fSGustavo F. Padovan break; 34070a708f8fSGustavo F. Padovan } 34080a708f8fSGustavo F. Padovan 340942dceae2SAndrei Emeltchenko if (remote_efs) { 3410848566b3SMarcel Holtmann if (__l2cap_efs_supported(chan->conn)) 341142dceae2SAndrei Emeltchenko set_bit(FLAG_EFS_ENABLE, &chan->flags); 341242dceae2SAndrei Emeltchenko else 341342dceae2SAndrei Emeltchenko return -ECONNREFUSED; 341442dceae2SAndrei Emeltchenko } 341542dceae2SAndrei Emeltchenko 34160c1bc5c6SGustavo F. Padovan if (chan->mode != rfc.mode) 34170a708f8fSGustavo F. Padovan return -ECONNREFUSED; 34180a708f8fSGustavo F. Padovan 34190a708f8fSGustavo F. Padovan break; 34200a708f8fSGustavo F. Padovan } 34210a708f8fSGustavo F. Padovan 34220a708f8fSGustavo F. Padovan done: 34230c1bc5c6SGustavo F. Padovan if (chan->mode != rfc.mode) { 34240a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 34250c1bc5c6SGustavo F. Padovan rfc.mode = chan->mode; 34260a708f8fSGustavo F. Padovan 342773ffa904SGustavo F. Padovan if (chan->num_conf_rsp == 1) 34280a708f8fSGustavo F. Padovan return -ECONNREFUSED; 34290a708f8fSGustavo F. Padovan 34302d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 34312d792818SGustavo Padovan (unsigned long) &rfc); 34320a708f8fSGustavo F. Padovan } 34330a708f8fSGustavo F. Padovan 34340a708f8fSGustavo F. Padovan if (result == L2CAP_CONF_SUCCESS) { 34350a708f8fSGustavo F. Padovan /* Configure output options and let the other side know 34360a708f8fSGustavo F. Padovan * which ones we don't like. */ 34370a708f8fSGustavo F. Padovan 34380a708f8fSGustavo F. Padovan if (mtu < L2CAP_DEFAULT_MIN_MTU) 34390a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 34400a708f8fSGustavo F. Padovan else { 34410c1bc5c6SGustavo F. Padovan chan->omtu = mtu; 3442c1360a1cSGustavo F. Padovan set_bit(CONF_MTU_DONE, &chan->conf_state); 34430a708f8fSGustavo F. Padovan } 34440c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->omtu); 34450a708f8fSGustavo F. Padovan 344642dceae2SAndrei Emeltchenko if (remote_efs) { 344742dceae2SAndrei Emeltchenko if (chan->local_stype != L2CAP_SERV_NOTRAFIC && 344842dceae2SAndrei Emeltchenko efs.stype != L2CAP_SERV_NOTRAFIC && 344942dceae2SAndrei Emeltchenko efs.stype != chan->local_stype) { 345042dceae2SAndrei Emeltchenko 345142dceae2SAndrei Emeltchenko result = L2CAP_CONF_UNACCEPT; 345242dceae2SAndrei Emeltchenko 345342dceae2SAndrei Emeltchenko if (chan->num_conf_req >= 1) 345442dceae2SAndrei Emeltchenko return -ECONNREFUSED; 345542dceae2SAndrei Emeltchenko 345642dceae2SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, 345742dceae2SAndrei Emeltchenko sizeof(efs), 345842dceae2SAndrei Emeltchenko (unsigned long) &efs); 34590e8b207eSAndrei Emeltchenko } else { 34603e6b3b95SGustavo F. Padovan /* Send PENDING Conf Rsp */ 34610e8b207eSAndrei Emeltchenko result = L2CAP_CONF_PENDING; 34620e8b207eSAndrei Emeltchenko set_bit(CONF_LOC_CONF_PEND, &chan->conf_state); 346342dceae2SAndrei Emeltchenko } 346442dceae2SAndrei Emeltchenko } 346542dceae2SAndrei Emeltchenko 34660a708f8fSGustavo F. Padovan switch (rfc.mode) { 34670a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 346847d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 3469c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 34700a708f8fSGustavo F. Padovan break; 34710a708f8fSGustavo F. Padovan 34720a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 34736327eb98SAndrei Emeltchenko if (!test_bit(CONF_EWS_RECV, &chan->conf_state)) 34742c03a7a4SGustavo F. Padovan chan->remote_tx_win = rfc.txwin_size; 34756327eb98SAndrei Emeltchenko else 34766327eb98SAndrei Emeltchenko rfc.txwin_size = L2CAP_DEFAULT_TX_WINDOW; 34776327eb98SAndrei Emeltchenko 34782c03a7a4SGustavo F. Padovan chan->remote_max_tx = rfc.max_transmit; 34790a708f8fSGustavo F. Padovan 3480c8f79162SAndrei Emeltchenko size = min_t(u16, le16_to_cpu(rfc.max_pdu_size), 34812d792818SGustavo Padovan chan->conn->mtu - L2CAP_EXT_HDR_SIZE - 34822d792818SGustavo Padovan L2CAP_SDULEN_SIZE - L2CAP_FCS_SIZE); 3483c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 3484c8f79162SAndrei Emeltchenko chan->remote_mps = size; 34850a708f8fSGustavo F. Padovan 348636c86c85SMat Martineau __l2cap_set_ertm_timeouts(chan, &rfc); 34870a708f8fSGustavo F. Padovan 3488c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 34890a708f8fSGustavo F. Padovan 34900a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 34910a708f8fSGustavo F. Padovan sizeof(rfc), (unsigned long) &rfc); 34920a708f8fSGustavo F. Padovan 349342dceae2SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) { 349442dceae2SAndrei Emeltchenko chan->remote_id = efs.id; 349542dceae2SAndrei Emeltchenko chan->remote_stype = efs.stype; 349642dceae2SAndrei Emeltchenko chan->remote_msdu = le16_to_cpu(efs.msdu); 349742dceae2SAndrei Emeltchenko chan->remote_flush_to = 349842dceae2SAndrei Emeltchenko le32_to_cpu(efs.flush_to); 349942dceae2SAndrei Emeltchenko chan->remote_acc_lat = 350042dceae2SAndrei Emeltchenko le32_to_cpu(efs.acc_lat); 350142dceae2SAndrei Emeltchenko chan->remote_sdu_itime = 350242dceae2SAndrei Emeltchenko le32_to_cpu(efs.sdu_itime); 350342dceae2SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, 35042d792818SGustavo Padovan sizeof(efs), 35052d792818SGustavo Padovan (unsigned long) &efs); 350642dceae2SAndrei Emeltchenko } 35070a708f8fSGustavo F. Padovan break; 35080a708f8fSGustavo F. Padovan 35090a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 3510c8f79162SAndrei Emeltchenko size = min_t(u16, le16_to_cpu(rfc.max_pdu_size), 35112d792818SGustavo Padovan chan->conn->mtu - L2CAP_EXT_HDR_SIZE - 35122d792818SGustavo Padovan L2CAP_SDULEN_SIZE - L2CAP_FCS_SIZE); 3513c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 3514c8f79162SAndrei Emeltchenko chan->remote_mps = size; 35150a708f8fSGustavo F. Padovan 3516c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 35170a708f8fSGustavo F. Padovan 35182d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 35192d792818SGustavo Padovan (unsigned long) &rfc); 35200a708f8fSGustavo F. Padovan 35210a708f8fSGustavo F. Padovan break; 35220a708f8fSGustavo F. Padovan 35230a708f8fSGustavo F. Padovan default: 35240a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 35250a708f8fSGustavo F. Padovan 35260a708f8fSGustavo F. Padovan memset(&rfc, 0, sizeof(rfc)); 35270c1bc5c6SGustavo F. Padovan rfc.mode = chan->mode; 35280a708f8fSGustavo F. Padovan } 35290a708f8fSGustavo F. Padovan 35300a708f8fSGustavo F. Padovan if (result == L2CAP_CONF_SUCCESS) 3531c1360a1cSGustavo F. Padovan set_bit(CONF_OUTPUT_DONE, &chan->conf_state); 35320a708f8fSGustavo F. Padovan } 3533fe4128e0SGustavo F. Padovan rsp->scid = cpu_to_le16(chan->dcid); 35340a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(result); 3535dcf4adbfSJoe Perches rsp->flags = cpu_to_le16(0); 35360a708f8fSGustavo F. Padovan 35370a708f8fSGustavo F. Padovan return ptr - data; 35380a708f8fSGustavo F. Padovan } 35390a708f8fSGustavo F. Padovan 35402d792818SGustavo Padovan static int l2cap_parse_conf_rsp(struct l2cap_chan *chan, void *rsp, int len, 35412d792818SGustavo Padovan void *data, u16 *result) 35420a708f8fSGustavo F. Padovan { 35430a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = data; 35440a708f8fSGustavo F. Padovan void *ptr = req->data; 35450a708f8fSGustavo F. Padovan int type, olen; 35460a708f8fSGustavo F. Padovan unsigned long val; 354736e999a8SMat Martineau struct l2cap_conf_rfc rfc = { .mode = L2CAP_MODE_BASIC }; 354866af7aafSAndrei Emeltchenko struct l2cap_conf_efs efs; 35490a708f8fSGustavo F. Padovan 3550fe4128e0SGustavo F. Padovan BT_DBG("chan %p, rsp %p, len %d, req %p", chan, rsp, len, data); 35510a708f8fSGustavo F. Padovan 35520a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 35530a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&rsp, &type, &olen, &val); 35540a708f8fSGustavo F. Padovan 35550a708f8fSGustavo F. Padovan switch (type) { 35560a708f8fSGustavo F. Padovan case L2CAP_CONF_MTU: 35570a708f8fSGustavo F. Padovan if (val < L2CAP_DEFAULT_MIN_MTU) { 35580a708f8fSGustavo F. Padovan *result = L2CAP_CONF_UNACCEPT; 35590c1bc5c6SGustavo F. Padovan chan->imtu = L2CAP_DEFAULT_MIN_MTU; 35600a708f8fSGustavo F. Padovan } else 35610c1bc5c6SGustavo F. Padovan chan->imtu = val; 35620c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->imtu); 35630a708f8fSGustavo F. Padovan break; 35640a708f8fSGustavo F. Padovan 35650a708f8fSGustavo F. Padovan case L2CAP_CONF_FLUSH_TO: 35660c1bc5c6SGustavo F. Padovan chan->flush_to = val; 35670a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_FLUSH_TO, 35680c1bc5c6SGustavo F. Padovan 2, chan->flush_to); 35690a708f8fSGustavo F. Padovan break; 35700a708f8fSGustavo F. Padovan 35710a708f8fSGustavo F. Padovan case L2CAP_CONF_RFC: 35720a708f8fSGustavo F. Padovan if (olen == sizeof(rfc)) 35730a708f8fSGustavo F. Padovan memcpy(&rfc, (void *)val, olen); 35740a708f8fSGustavo F. Padovan 3575c1360a1cSGustavo F. Padovan if (test_bit(CONF_STATE2_DEVICE, &chan->conf_state) && 35760c1bc5c6SGustavo F. Padovan rfc.mode != chan->mode) 35770a708f8fSGustavo F. Padovan return -ECONNREFUSED; 35780a708f8fSGustavo F. Padovan 357947d1ec61SGustavo F. Padovan chan->fcs = 0; 35800a708f8fSGustavo F. Padovan 35810a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 35820a708f8fSGustavo F. Padovan sizeof(rfc), (unsigned long) &rfc); 35830a708f8fSGustavo F. Padovan break; 35846327eb98SAndrei Emeltchenko 35856327eb98SAndrei Emeltchenko case L2CAP_CONF_EWS: 3586c20f8e35SMat Martineau chan->ack_win = min_t(u16, val, chan->ack_win); 35873e6b3b95SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_EWS, 2, 35883e6b3b95SGustavo F. Padovan chan->tx_win); 35896327eb98SAndrei Emeltchenko break; 359066af7aafSAndrei Emeltchenko 359166af7aafSAndrei Emeltchenko case L2CAP_CONF_EFS: 359266af7aafSAndrei Emeltchenko if (olen == sizeof(efs)) 359366af7aafSAndrei Emeltchenko memcpy(&efs, (void *)val, olen); 359466af7aafSAndrei Emeltchenko 359566af7aafSAndrei Emeltchenko if (chan->local_stype != L2CAP_SERV_NOTRAFIC && 359666af7aafSAndrei Emeltchenko efs.stype != L2CAP_SERV_NOTRAFIC && 359766af7aafSAndrei Emeltchenko efs.stype != chan->local_stype) 359866af7aafSAndrei Emeltchenko return -ECONNREFUSED; 359966af7aafSAndrei Emeltchenko 36002d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, sizeof(efs), 36012d792818SGustavo Padovan (unsigned long) &efs); 360266af7aafSAndrei Emeltchenko break; 3603cbabee78SAndrei Emeltchenko 3604cbabee78SAndrei Emeltchenko case L2CAP_CONF_FCS: 3605cbabee78SAndrei Emeltchenko if (*result == L2CAP_CONF_PENDING) 3606cbabee78SAndrei Emeltchenko if (val == L2CAP_FCS_NONE) 3607f2592d3eSAndrei Emeltchenko set_bit(CONF_RECV_NO_FCS, 3608cbabee78SAndrei Emeltchenko &chan->conf_state); 3609cbabee78SAndrei Emeltchenko break; 36100a708f8fSGustavo F. Padovan } 36110a708f8fSGustavo F. Padovan } 36120a708f8fSGustavo F. Padovan 36130c1bc5c6SGustavo F. Padovan if (chan->mode == L2CAP_MODE_BASIC && chan->mode != rfc.mode) 36140a708f8fSGustavo F. Padovan return -ECONNREFUSED; 36150a708f8fSGustavo F. Padovan 36160c1bc5c6SGustavo F. Padovan chan->mode = rfc.mode; 36170a708f8fSGustavo F. Padovan 36180e8b207eSAndrei Emeltchenko if (*result == L2CAP_CONF_SUCCESS || *result == L2CAP_CONF_PENDING) { 36190a708f8fSGustavo F. Padovan switch (rfc.mode) { 36200a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 362147d1ec61SGustavo F. Padovan chan->retrans_timeout = le16_to_cpu(rfc.retrans_timeout); 362247d1ec61SGustavo F. Padovan chan->monitor_timeout = le16_to_cpu(rfc.monitor_timeout); 362347d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 3624c20f8e35SMat Martineau if (!test_bit(FLAG_EXT_CTRL, &chan->flags)) 3625c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, 3626c20f8e35SMat Martineau rfc.txwin_size); 362766af7aafSAndrei Emeltchenko 362866af7aafSAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) { 362966af7aafSAndrei Emeltchenko chan->local_msdu = le16_to_cpu(efs.msdu); 363066af7aafSAndrei Emeltchenko chan->local_sdu_itime = 363166af7aafSAndrei Emeltchenko le32_to_cpu(efs.sdu_itime); 363266af7aafSAndrei Emeltchenko chan->local_acc_lat = le32_to_cpu(efs.acc_lat); 363366af7aafSAndrei Emeltchenko chan->local_flush_to = 363466af7aafSAndrei Emeltchenko le32_to_cpu(efs.flush_to); 363566af7aafSAndrei Emeltchenko } 36360a708f8fSGustavo F. Padovan break; 363766af7aafSAndrei Emeltchenko 36380a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 363947d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 36400a708f8fSGustavo F. Padovan } 36410a708f8fSGustavo F. Padovan } 36420a708f8fSGustavo F. Padovan 3643fe4128e0SGustavo F. Padovan req->dcid = cpu_to_le16(chan->dcid); 3644dcf4adbfSJoe Perches req->flags = cpu_to_le16(0); 36450a708f8fSGustavo F. Padovan 36460a708f8fSGustavo F. Padovan return ptr - data; 36470a708f8fSGustavo F. Padovan } 36480a708f8fSGustavo F. Padovan 36492d792818SGustavo Padovan static int l2cap_build_conf_rsp(struct l2cap_chan *chan, void *data, 36502d792818SGustavo Padovan u16 result, u16 flags) 36510a708f8fSGustavo F. Padovan { 36520a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = data; 36530a708f8fSGustavo F. Padovan void *ptr = rsp->data; 36540a708f8fSGustavo F. Padovan 3655fe4128e0SGustavo F. Padovan BT_DBG("chan %p", chan); 36560a708f8fSGustavo F. Padovan 3657fe4128e0SGustavo F. Padovan rsp->scid = cpu_to_le16(chan->dcid); 36580a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(result); 36590a708f8fSGustavo F. Padovan rsp->flags = cpu_to_le16(flags); 36600a708f8fSGustavo F. Padovan 36610a708f8fSGustavo F. Padovan return ptr - data; 36620a708f8fSGustavo F. Padovan } 36630a708f8fSGustavo F. Padovan 366427e2d4c8SJohan Hedberg void __l2cap_le_connect_rsp_defer(struct l2cap_chan *chan) 366527e2d4c8SJohan Hedberg { 366627e2d4c8SJohan Hedberg struct l2cap_le_conn_rsp rsp; 366727e2d4c8SJohan Hedberg struct l2cap_conn *conn = chan->conn; 366827e2d4c8SJohan Hedberg 366927e2d4c8SJohan Hedberg BT_DBG("chan %p", chan); 367027e2d4c8SJohan Hedberg 367127e2d4c8SJohan Hedberg rsp.dcid = cpu_to_le16(chan->scid); 367227e2d4c8SJohan Hedberg rsp.mtu = cpu_to_le16(chan->imtu); 36733916aed8SJohan Hedberg rsp.mps = cpu_to_le16(chan->mps); 36740cd75f7eSJohan Hedberg rsp.credits = cpu_to_le16(chan->rx_credits); 3675dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 367627e2d4c8SJohan Hedberg 367727e2d4c8SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CONN_RSP, sizeof(rsp), 367827e2d4c8SJohan Hedberg &rsp); 367927e2d4c8SJohan Hedberg } 368027e2d4c8SJohan Hedberg 36818c1d787bSGustavo F. Padovan void __l2cap_connect_rsp_defer(struct l2cap_chan *chan) 3682710f9b0aSGustavo F. Padovan { 3683710f9b0aSGustavo F. Padovan struct l2cap_conn_rsp rsp; 36848c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 3685710f9b0aSGustavo F. Padovan u8 buf[128]; 3686439f34acSAndrei Emeltchenko u8 rsp_code; 3687710f9b0aSGustavo F. Padovan 3688fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 3689fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 3690dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 3691dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 3692439f34acSAndrei Emeltchenko 3693439f34acSAndrei Emeltchenko if (chan->hs_hcon) 3694439f34acSAndrei Emeltchenko rsp_code = L2CAP_CREATE_CHAN_RSP; 3695439f34acSAndrei Emeltchenko else 3696439f34acSAndrei Emeltchenko rsp_code = L2CAP_CONN_RSP; 3697439f34acSAndrei Emeltchenko 3698439f34acSAndrei Emeltchenko BT_DBG("chan %p rsp_code %u", chan, rsp_code); 3699439f34acSAndrei Emeltchenko 3700439f34acSAndrei Emeltchenko l2cap_send_cmd(conn, chan->ident, rsp_code, sizeof(rsp), &rsp); 3701710f9b0aSGustavo F. Padovan 3702c1360a1cSGustavo F. Padovan if (test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) 3703710f9b0aSGustavo F. Padovan return; 3704710f9b0aSGustavo F. Padovan 3705710f9b0aSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 3706710f9b0aSGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 3707710f9b0aSGustavo F. Padovan chan->num_conf_req++; 3708710f9b0aSGustavo F. Padovan } 3709710f9b0aSGustavo F. Padovan 371047d1ec61SGustavo F. Padovan static void l2cap_conf_rfc_get(struct l2cap_chan *chan, void *rsp, int len) 37110a708f8fSGustavo F. Padovan { 37120a708f8fSGustavo F. Padovan int type, olen; 37130a708f8fSGustavo F. Padovan unsigned long val; 3714c20f8e35SMat Martineau /* Use sane default values in case a misbehaving remote device 3715c20f8e35SMat Martineau * did not send an RFC or extended window size option. 3716c20f8e35SMat Martineau */ 3717c20f8e35SMat Martineau u16 txwin_ext = chan->ack_win; 3718c20f8e35SMat Martineau struct l2cap_conf_rfc rfc = { 3719c20f8e35SMat Martineau .mode = chan->mode, 3720dcf4adbfSJoe Perches .retrans_timeout = cpu_to_le16(L2CAP_DEFAULT_RETRANS_TO), 3721dcf4adbfSJoe Perches .monitor_timeout = cpu_to_le16(L2CAP_DEFAULT_MONITOR_TO), 3722c20f8e35SMat Martineau .max_pdu_size = cpu_to_le16(chan->imtu), 3723c20f8e35SMat Martineau .txwin_size = min_t(u16, chan->ack_win, L2CAP_DEFAULT_TX_WINDOW), 3724c20f8e35SMat Martineau }; 37250a708f8fSGustavo F. Padovan 372647d1ec61SGustavo F. Padovan BT_DBG("chan %p, rsp %p, len %d", chan, rsp, len); 37270a708f8fSGustavo F. Padovan 37280c1bc5c6SGustavo F. Padovan if ((chan->mode != L2CAP_MODE_ERTM) && (chan->mode != L2CAP_MODE_STREAMING)) 37290a708f8fSGustavo F. Padovan return; 37300a708f8fSGustavo F. Padovan 37310a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 37320a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&rsp, &type, &olen, &val); 37330a708f8fSGustavo F. Padovan 3734c20f8e35SMat Martineau switch (type) { 3735c20f8e35SMat Martineau case L2CAP_CONF_RFC: 3736c20f8e35SMat Martineau if (olen == sizeof(rfc)) 37370a708f8fSGustavo F. Padovan memcpy(&rfc, (void *)val, olen); 3738c20f8e35SMat Martineau break; 3739c20f8e35SMat Martineau case L2CAP_CONF_EWS: 3740c20f8e35SMat Martineau txwin_ext = val; 3741c20f8e35SMat Martineau break; 3742c20f8e35SMat Martineau } 37430a708f8fSGustavo F. Padovan } 37440a708f8fSGustavo F. Padovan 37450a708f8fSGustavo F. Padovan switch (rfc.mode) { 37460a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 374747d1ec61SGustavo F. Padovan chan->retrans_timeout = le16_to_cpu(rfc.retrans_timeout); 374847d1ec61SGustavo F. Padovan chan->monitor_timeout = le16_to_cpu(rfc.monitor_timeout); 374947d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 3750c20f8e35SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 3751c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, txwin_ext); 3752c20f8e35SMat Martineau else 3753c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, 3754c20f8e35SMat Martineau rfc.txwin_size); 37550a708f8fSGustavo F. Padovan break; 37560a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 375747d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 37580a708f8fSGustavo F. Padovan } 37590a708f8fSGustavo F. Padovan } 37600a708f8fSGustavo F. Padovan 37612d792818SGustavo Padovan static inline int l2cap_command_rej(struct l2cap_conn *conn, 3762cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 3763cb3b3152SJohan Hedberg u8 *data) 37640a708f8fSGustavo F. Padovan { 3765e2fd318eSIlia Kolomisnky struct l2cap_cmd_rej_unk *rej = (struct l2cap_cmd_rej_unk *) data; 37660a708f8fSGustavo F. Padovan 3767cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rej)) 3768cb3b3152SJohan Hedberg return -EPROTO; 3769cb3b3152SJohan Hedberg 3770e2fd318eSIlia Kolomisnky if (rej->reason != L2CAP_REJ_NOT_UNDERSTOOD) 37710a708f8fSGustavo F. Padovan return 0; 37720a708f8fSGustavo F. Padovan 37730a708f8fSGustavo F. Padovan if ((conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) && 37740a708f8fSGustavo F. Padovan cmd->ident == conn->info_ident) { 377517cd3f37SUlisses Furquim cancel_delayed_work(&conn->info_timer); 37760a708f8fSGustavo F. Padovan 37770a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 37780a708f8fSGustavo F. Padovan conn->info_ident = 0; 37790a708f8fSGustavo F. Padovan 37800a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 37810a708f8fSGustavo F. Padovan } 37820a708f8fSGustavo F. Padovan 37830a708f8fSGustavo F. Padovan return 0; 37840a708f8fSGustavo F. Padovan } 37850a708f8fSGustavo F. Padovan 37861700915fSMat Martineau static struct l2cap_chan *l2cap_connect(struct l2cap_conn *conn, 37871700915fSMat Martineau struct l2cap_cmd_hdr *cmd, 37884c89b6aaSMat Martineau u8 *data, u8 rsp_code, u8 amp_id) 37890a708f8fSGustavo F. Padovan { 37900a708f8fSGustavo F. Padovan struct l2cap_conn_req *req = (struct l2cap_conn_req *) data; 37910a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 379223691d75SGustavo F. Padovan struct l2cap_chan *chan = NULL, *pchan; 37930a708f8fSGustavo F. Padovan int result, status = L2CAP_CS_NO_INFO; 37940a708f8fSGustavo F. Padovan 37950a708f8fSGustavo F. Padovan u16 dcid = 0, scid = __le16_to_cpu(req->scid); 37960a708f8fSGustavo F. Padovan __le16 psm = req->psm; 37970a708f8fSGustavo F. Padovan 3798097db76cSAndrei Emeltchenko BT_DBG("psm 0x%2.2x scid 0x%4.4x", __le16_to_cpu(psm), scid); 37990a708f8fSGustavo F. Padovan 38000a708f8fSGustavo F. Padovan /* Check if we have socket listening on psm */ 38016f59b904SMarcel Holtmann pchan = l2cap_global_chan_by_psm(BT_LISTEN, psm, &conn->hcon->src, 3802bf20fd4eSJohan Hedberg &conn->hcon->dst, ACL_LINK); 380323691d75SGustavo F. Padovan if (!pchan) { 38040a708f8fSGustavo F. Padovan result = L2CAP_CR_BAD_PSM; 38050a708f8fSGustavo F. Padovan goto sendresp; 38060a708f8fSGustavo F. Padovan } 38070a708f8fSGustavo F. Padovan 38083df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 38098ffb9290SGustavo Padovan l2cap_chan_lock(pchan); 38100a708f8fSGustavo F. Padovan 38110a708f8fSGustavo F. Padovan /* Check if the ACL is secure enough (if not SDP) */ 3812dcf4adbfSJoe Perches if (psm != cpu_to_le16(L2CAP_PSM_SDP) && 38130a708f8fSGustavo F. Padovan !hci_conn_check_link_mode(conn->hcon)) { 38149f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_AUTH_FAILURE; 38150a708f8fSGustavo F. Padovan result = L2CAP_CR_SEC_BLOCK; 38160a708f8fSGustavo F. Padovan goto response; 38170a708f8fSGustavo F. Padovan } 38180a708f8fSGustavo F. Padovan 38190a708f8fSGustavo F. Padovan result = L2CAP_CR_NO_MEM; 38200a708f8fSGustavo F. Padovan 38212dfa1003SGustavo Padovan /* Check if we already have channel with that dcid */ 38222dfa1003SGustavo Padovan if (__l2cap_get_chan_by_dcid(conn, scid)) 38232dfa1003SGustavo Padovan goto response; 38242dfa1003SGustavo Padovan 382580b98027SGustavo Padovan chan = pchan->ops->new_connection(pchan); 382680808e43SGustavo F. Padovan if (!chan) 38270a708f8fSGustavo F. Padovan goto response; 38280a708f8fSGustavo F. Padovan 3829330b6c15SSyam Sidhardhan /* For certain devices (ex: HID mouse), support for authentication, 3830330b6c15SSyam Sidhardhan * pairing and bonding is optional. For such devices, inorder to avoid 3831330b6c15SSyam Sidhardhan * the ACL alive for too long after L2CAP disconnection, reset the ACL 3832330b6c15SSyam Sidhardhan * disc_timeout back to HCI_DISCONN_TIMEOUT during L2CAP connect. 3833330b6c15SSyam Sidhardhan */ 3834330b6c15SSyam Sidhardhan conn->hcon->disc_timeout = HCI_DISCONN_TIMEOUT; 3835330b6c15SSyam Sidhardhan 38367eafc59eSMarcel Holtmann bacpy(&chan->src, &conn->hcon->src); 38377eafc59eSMarcel Holtmann bacpy(&chan->dst, &conn->hcon->dst); 38384f1654e0SMarcel Holtmann chan->src_type = bdaddr_type(conn->hcon, conn->hcon->src_type); 38394f1654e0SMarcel Holtmann chan->dst_type = bdaddr_type(conn->hcon, conn->hcon->dst_type); 3840fe4128e0SGustavo F. Padovan chan->psm = psm; 3841fe4128e0SGustavo F. Padovan chan->dcid = scid; 38421700915fSMat Martineau chan->local_amp_id = amp_id; 38430a708f8fSGustavo F. Padovan 38446be36555SAndrei Emeltchenko __l2cap_chan_add(conn, chan); 384548454079SGustavo F. Padovan 3846fe4128e0SGustavo F. Padovan dcid = chan->scid; 38470a708f8fSGustavo F. Padovan 38488d836d71SGustavo Padovan __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 38490a708f8fSGustavo F. Padovan 3850fc7f8a7eSGustavo F. Padovan chan->ident = cmd->ident; 38510a708f8fSGustavo F. Padovan 38520a708f8fSGustavo F. Padovan if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) { 3853e7cafc45SJohan Hedberg if (l2cap_chan_check_security(chan, false)) { 3854bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 3855f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38560a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 38570a708f8fSGustavo F. Padovan status = L2CAP_CS_AUTHOR_PEND; 38582dc4e510SGustavo Padovan chan->ops->defer(chan); 38590a708f8fSGustavo F. Padovan } else { 38601700915fSMat Martineau /* Force pending result for AMP controllers. 38611700915fSMat Martineau * The connection will succeed after the 38621700915fSMat Martineau * physical link is up. 38631700915fSMat Martineau */ 38646ed971caSMarcel Holtmann if (amp_id == AMP_ID_BREDR) { 3865f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 38660a708f8fSGustavo F. Padovan result = L2CAP_CR_SUCCESS; 38676ed971caSMarcel Holtmann } else { 3868f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38696ed971caSMarcel Holtmann result = L2CAP_CR_PEND; 38701700915fSMat Martineau } 38710a708f8fSGustavo F. Padovan status = L2CAP_CS_NO_INFO; 38720a708f8fSGustavo F. Padovan } 38730a708f8fSGustavo F. Padovan } else { 3874f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38750a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 38760a708f8fSGustavo F. Padovan status = L2CAP_CS_AUTHEN_PEND; 38770a708f8fSGustavo F. Padovan } 38780a708f8fSGustavo F. Padovan } else { 3879f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38800a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 38810a708f8fSGustavo F. Padovan status = L2CAP_CS_NO_INFO; 38820a708f8fSGustavo F. Padovan } 38830a708f8fSGustavo F. Padovan 38840a708f8fSGustavo F. Padovan response: 38858ffb9290SGustavo Padovan l2cap_chan_unlock(pchan); 38863df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 38870a708f8fSGustavo F. Padovan 38880a708f8fSGustavo F. Padovan sendresp: 38890a708f8fSGustavo F. Padovan rsp.scid = cpu_to_le16(scid); 38900a708f8fSGustavo F. Padovan rsp.dcid = cpu_to_le16(dcid); 38910a708f8fSGustavo F. Padovan rsp.result = cpu_to_le16(result); 38920a708f8fSGustavo F. Padovan rsp.status = cpu_to_le16(status); 38934c89b6aaSMat Martineau l2cap_send_cmd(conn, cmd->ident, rsp_code, sizeof(rsp), &rsp); 38940a708f8fSGustavo F. Padovan 38950a708f8fSGustavo F. Padovan if (result == L2CAP_CR_PEND && status == L2CAP_CS_NO_INFO) { 38960a708f8fSGustavo F. Padovan struct l2cap_info_req info; 3897dcf4adbfSJoe Perches info.type = cpu_to_le16(L2CAP_IT_FEAT_MASK); 38980a708f8fSGustavo F. Padovan 38990a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_SENT; 39000a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 39010a708f8fSGustavo F. Padovan 3902ba13ccd9SMarcel Holtmann schedule_delayed_work(&conn->info_timer, L2CAP_INFO_TIMEOUT); 39030a708f8fSGustavo F. Padovan 39042d792818SGustavo Padovan l2cap_send_cmd(conn, conn->info_ident, L2CAP_INFO_REQ, 39052d792818SGustavo Padovan sizeof(info), &info); 39060a708f8fSGustavo F. Padovan } 39070a708f8fSGustavo F. Padovan 3908c1360a1cSGustavo F. Padovan if (chan && !test_bit(CONF_REQ_SENT, &chan->conf_state) && 39090a708f8fSGustavo F. Padovan result == L2CAP_CR_SUCCESS) { 39100a708f8fSGustavo F. Padovan u8 buf[128]; 3911c1360a1cSGustavo F. Padovan set_bit(CONF_REQ_SENT, &chan->conf_state); 39120a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 391373ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 391473ffa904SGustavo F. Padovan chan->num_conf_req++; 39150a708f8fSGustavo F. Padovan } 39161700915fSMat Martineau 39171700915fSMat Martineau return chan; 39184c89b6aaSMat Martineau } 39190a708f8fSGustavo F. Padovan 39204c89b6aaSMat Martineau static int l2cap_connect_req(struct l2cap_conn *conn, 3921cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, u8 *data) 39224c89b6aaSMat Martineau { 39237b064edaSJaganath Kanakkassery struct hci_dev *hdev = conn->hcon->hdev; 39247b064edaSJaganath Kanakkassery struct hci_conn *hcon = conn->hcon; 39257b064edaSJaganath Kanakkassery 3926cb3b3152SJohan Hedberg if (cmd_len < sizeof(struct l2cap_conn_req)) 3927cb3b3152SJohan Hedberg return -EPROTO; 3928cb3b3152SJohan Hedberg 39297b064edaSJaganath Kanakkassery hci_dev_lock(hdev); 39307b064edaSJaganath Kanakkassery if (test_bit(HCI_MGMT, &hdev->dev_flags) && 39317b064edaSJaganath Kanakkassery !test_and_set_bit(HCI_CONN_MGMT_CONNECTED, &hcon->flags)) 39327b064edaSJaganath Kanakkassery mgmt_device_connected(hdev, &hcon->dst, hcon->type, 39337b064edaSJaganath Kanakkassery hcon->dst_type, 0, NULL, 0, 39347b064edaSJaganath Kanakkassery hcon->dev_class); 39357b064edaSJaganath Kanakkassery hci_dev_unlock(hdev); 39367b064edaSJaganath Kanakkassery 3937300229f9SGustavo Padovan l2cap_connect(conn, cmd, data, L2CAP_CONN_RSP, 0); 39380a708f8fSGustavo F. Padovan return 0; 39390a708f8fSGustavo F. Padovan } 39400a708f8fSGustavo F. Padovan 39415909cf30SMat Martineau static int l2cap_connect_create_rsp(struct l2cap_conn *conn, 3942cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 3943cb3b3152SJohan Hedberg u8 *data) 39440a708f8fSGustavo F. Padovan { 39450a708f8fSGustavo F. Padovan struct l2cap_conn_rsp *rsp = (struct l2cap_conn_rsp *) data; 39460a708f8fSGustavo F. Padovan u16 scid, dcid, result, status; 394748454079SGustavo F. Padovan struct l2cap_chan *chan; 39480a708f8fSGustavo F. Padovan u8 req[128]; 39493df91ea2SAndrei Emeltchenko int err; 39500a708f8fSGustavo F. Padovan 3951cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rsp)) 3952cb3b3152SJohan Hedberg return -EPROTO; 3953cb3b3152SJohan Hedberg 39540a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 39550a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(rsp->dcid); 39560a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 39570a708f8fSGustavo F. Padovan status = __le16_to_cpu(rsp->status); 39580a708f8fSGustavo F. Padovan 39591b009c98SAndrei Emeltchenko BT_DBG("dcid 0x%4.4x scid 0x%4.4x result 0x%2.2x status 0x%2.2x", 39601b009c98SAndrei Emeltchenko dcid, scid, result, status); 39610a708f8fSGustavo F. Padovan 39623df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 39633df91ea2SAndrei Emeltchenko 39640a708f8fSGustavo F. Padovan if (scid) { 39653df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, scid); 39663df91ea2SAndrei Emeltchenko if (!chan) { 396721870b52SJohan Hedberg err = -EBADSLT; 39683df91ea2SAndrei Emeltchenko goto unlock; 39693df91ea2SAndrei Emeltchenko } 39700a708f8fSGustavo F. Padovan } else { 39713df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_ident(conn, cmd->ident); 39723df91ea2SAndrei Emeltchenko if (!chan) { 397321870b52SJohan Hedberg err = -EBADSLT; 39743df91ea2SAndrei Emeltchenko goto unlock; 39753df91ea2SAndrei Emeltchenko } 39760a708f8fSGustavo F. Padovan } 39770a708f8fSGustavo F. Padovan 39783df91ea2SAndrei Emeltchenko err = 0; 39793df91ea2SAndrei Emeltchenko 39806be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 398148454079SGustavo F. Padovan 39820a708f8fSGustavo F. Padovan switch (result) { 39830a708f8fSGustavo F. Padovan case L2CAP_CR_SUCCESS: 398489bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONFIG); 3985fc7f8a7eSGustavo F. Padovan chan->ident = 0; 3986fe4128e0SGustavo F. Padovan chan->dcid = dcid; 3987c1360a1cSGustavo F. Padovan clear_bit(CONF_CONNECT_PEND, &chan->conf_state); 39880a708f8fSGustavo F. Padovan 3989c1360a1cSGustavo F. Padovan if (test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) 39900a708f8fSGustavo F. Padovan break; 39910a708f8fSGustavo F. Padovan 39920a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 399373ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, req), req); 399473ffa904SGustavo F. Padovan chan->num_conf_req++; 39950a708f8fSGustavo F. Padovan break; 39960a708f8fSGustavo F. Padovan 39970a708f8fSGustavo F. Padovan case L2CAP_CR_PEND: 3998c1360a1cSGustavo F. Padovan set_bit(CONF_CONNECT_PEND, &chan->conf_state); 39990a708f8fSGustavo F. Padovan break; 40000a708f8fSGustavo F. Padovan 40010a708f8fSGustavo F. Padovan default: 400248454079SGustavo F. Padovan l2cap_chan_del(chan, ECONNREFUSED); 40030a708f8fSGustavo F. Padovan break; 40040a708f8fSGustavo F. Padovan } 40050a708f8fSGustavo F. Padovan 40066be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 40073df91ea2SAndrei Emeltchenko 40083df91ea2SAndrei Emeltchenko unlock: 40093df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 40103df91ea2SAndrei Emeltchenko 40113df91ea2SAndrei Emeltchenko return err; 40120a708f8fSGustavo F. Padovan } 40130a708f8fSGustavo F. Padovan 401447d1ec61SGustavo F. Padovan static inline void set_default_fcs(struct l2cap_chan *chan) 40150a708f8fSGustavo F. Padovan { 40160a708f8fSGustavo F. Padovan /* FCS is enabled only in ERTM or streaming mode, if one or both 40170a708f8fSGustavo F. Padovan * sides request it. 40180a708f8fSGustavo F. Padovan */ 40190c1bc5c6SGustavo F. Padovan if (chan->mode != L2CAP_MODE_ERTM && chan->mode != L2CAP_MODE_STREAMING) 402047d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 4021f2592d3eSAndrei Emeltchenko else if (!test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) 402247d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_CRC16; 40230a708f8fSGustavo F. Padovan } 40240a708f8fSGustavo F. Padovan 402529d8a590SAndrei Emeltchenko static void l2cap_send_efs_conf_rsp(struct l2cap_chan *chan, void *data, 402629d8a590SAndrei Emeltchenko u8 ident, u16 flags) 402729d8a590SAndrei Emeltchenko { 402829d8a590SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 402929d8a590SAndrei Emeltchenko 403029d8a590SAndrei Emeltchenko BT_DBG("conn %p chan %p ident %d flags 0x%4.4x", conn, chan, ident, 403129d8a590SAndrei Emeltchenko flags); 403229d8a590SAndrei Emeltchenko 403329d8a590SAndrei Emeltchenko clear_bit(CONF_LOC_CONF_PEND, &chan->conf_state); 403429d8a590SAndrei Emeltchenko set_bit(CONF_OUTPUT_DONE, &chan->conf_state); 403529d8a590SAndrei Emeltchenko 403629d8a590SAndrei Emeltchenko l2cap_send_cmd(conn, ident, L2CAP_CONF_RSP, 403729d8a590SAndrei Emeltchenko l2cap_build_conf_rsp(chan, data, 403829d8a590SAndrei Emeltchenko L2CAP_CONF_SUCCESS, flags), data); 403929d8a590SAndrei Emeltchenko } 404029d8a590SAndrei Emeltchenko 4041662d652dSJohan Hedberg static void cmd_reject_invalid_cid(struct l2cap_conn *conn, u8 ident, 4042662d652dSJohan Hedberg u16 scid, u16 dcid) 4043662d652dSJohan Hedberg { 4044662d652dSJohan Hedberg struct l2cap_cmd_rej_cid rej; 4045662d652dSJohan Hedberg 4046dcf4adbfSJoe Perches rej.reason = cpu_to_le16(L2CAP_REJ_INVALID_CID); 4047662d652dSJohan Hedberg rej.scid = __cpu_to_le16(scid); 4048662d652dSJohan Hedberg rej.dcid = __cpu_to_le16(dcid); 4049662d652dSJohan Hedberg 4050662d652dSJohan Hedberg l2cap_send_cmd(conn, ident, L2CAP_COMMAND_REJ, sizeof(rej), &rej); 4051662d652dSJohan Hedberg } 4052662d652dSJohan Hedberg 40532d792818SGustavo Padovan static inline int l2cap_config_req(struct l2cap_conn *conn, 40542d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, u16 cmd_len, 40552d792818SGustavo Padovan u8 *data) 40560a708f8fSGustavo F. Padovan { 40570a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = (struct l2cap_conf_req *) data; 40580a708f8fSGustavo F. Padovan u16 dcid, flags; 40590a708f8fSGustavo F. Padovan u8 rsp[64]; 406048454079SGustavo F. Padovan struct l2cap_chan *chan; 40613c588192SMat Martineau int len, err = 0; 40620a708f8fSGustavo F. Padovan 4063cb3b3152SJohan Hedberg if (cmd_len < sizeof(*req)) 4064cb3b3152SJohan Hedberg return -EPROTO; 4065cb3b3152SJohan Hedberg 40660a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(req->dcid); 40670a708f8fSGustavo F. Padovan flags = __le16_to_cpu(req->flags); 40680a708f8fSGustavo F. Padovan 40690a708f8fSGustavo F. Padovan BT_DBG("dcid 0x%4.4x flags 0x%2.2x", dcid, flags); 40700a708f8fSGustavo F. Padovan 4071baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, dcid); 4072662d652dSJohan Hedberg if (!chan) { 4073662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, dcid, 0); 4074662d652dSJohan Hedberg return 0; 4075662d652dSJohan Hedberg } 40760a708f8fSGustavo F. Padovan 4077033b1142SDavid S. Miller if (chan->state != BT_CONFIG && chan->state != BT_CONNECT2) { 4078662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, chan->scid, 4079662d652dSJohan Hedberg chan->dcid); 40800a708f8fSGustavo F. Padovan goto unlock; 40810a708f8fSGustavo F. Padovan } 40820a708f8fSGustavo F. Padovan 40830a708f8fSGustavo F. Padovan /* Reject if config buffer is too small. */ 40840a708f8fSGustavo F. Padovan len = cmd_len - sizeof(*req); 4085cb3b3152SJohan Hedberg if (chan->conf_len + len > sizeof(chan->conf_req)) { 40860a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 4087fe4128e0SGustavo F. Padovan l2cap_build_conf_rsp(chan, rsp, 40880a708f8fSGustavo F. Padovan L2CAP_CONF_REJECT, flags), rsp); 40890a708f8fSGustavo F. Padovan goto unlock; 40900a708f8fSGustavo F. Padovan } 40910a708f8fSGustavo F. Padovan 40920a708f8fSGustavo F. Padovan /* Store config. */ 409373ffa904SGustavo F. Padovan memcpy(chan->conf_req + chan->conf_len, req->data, len); 409473ffa904SGustavo F. Padovan chan->conf_len += len; 40950a708f8fSGustavo F. Padovan 409659e54bd1SAndrei Emeltchenko if (flags & L2CAP_CONF_FLAG_CONTINUATION) { 40970a708f8fSGustavo F. Padovan /* Incomplete config. Send empty response. */ 40980a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 4099fe4128e0SGustavo F. Padovan l2cap_build_conf_rsp(chan, rsp, 41005325e5bbSAndrei Emeltchenko L2CAP_CONF_SUCCESS, flags), rsp); 41010a708f8fSGustavo F. Padovan goto unlock; 41020a708f8fSGustavo F. Padovan } 41030a708f8fSGustavo F. Padovan 41040a708f8fSGustavo F. Padovan /* Complete config. */ 410573ffa904SGustavo F. Padovan len = l2cap_parse_conf_req(chan, rsp); 41060a708f8fSGustavo F. Padovan if (len < 0) { 41075e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 41080a708f8fSGustavo F. Padovan goto unlock; 41090a708f8fSGustavo F. Padovan } 41100a708f8fSGustavo F. Padovan 41111500109bSMat Martineau chan->ident = cmd->ident; 41120a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, len, rsp); 411373ffa904SGustavo F. Padovan chan->num_conf_rsp++; 41140a708f8fSGustavo F. Padovan 41150a708f8fSGustavo F. Padovan /* Reset config buffer. */ 411673ffa904SGustavo F. Padovan chan->conf_len = 0; 41170a708f8fSGustavo F. Padovan 4118c1360a1cSGustavo F. Padovan if (!test_bit(CONF_OUTPUT_DONE, &chan->conf_state)) 41190a708f8fSGustavo F. Padovan goto unlock; 41200a708f8fSGustavo F. Padovan 4121c1360a1cSGustavo F. Padovan if (test_bit(CONF_INPUT_DONE, &chan->conf_state)) { 412247d1ec61SGustavo F. Padovan set_default_fcs(chan); 41230a708f8fSGustavo F. Padovan 4124105bdf9eSMat Martineau if (chan->mode == L2CAP_MODE_ERTM || 4125105bdf9eSMat Martineau chan->mode == L2CAP_MODE_STREAMING) 41263c588192SMat Martineau err = l2cap_ertm_init(chan); 41270a708f8fSGustavo F. Padovan 41283c588192SMat Martineau if (err < 0) 41295e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 41303c588192SMat Martineau else 4131cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 41323c588192SMat Martineau 41330a708f8fSGustavo F. Padovan goto unlock; 41340a708f8fSGustavo F. Padovan } 41350a708f8fSGustavo F. Padovan 4136c1360a1cSGustavo F. Padovan if (!test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) { 41370a708f8fSGustavo F. Padovan u8 buf[64]; 41380a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 413973ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 414073ffa904SGustavo F. Padovan chan->num_conf_req++; 41410a708f8fSGustavo F. Padovan } 41420a708f8fSGustavo F. Padovan 41430e8b207eSAndrei Emeltchenko /* Got Conf Rsp PENDING from remote side and asume we sent 41440e8b207eSAndrei Emeltchenko Conf Rsp PENDING in the code above */ 41450e8b207eSAndrei Emeltchenko if (test_bit(CONF_REM_CONF_PEND, &chan->conf_state) && 41460e8b207eSAndrei Emeltchenko test_bit(CONF_LOC_CONF_PEND, &chan->conf_state)) { 41470e8b207eSAndrei Emeltchenko 41480e8b207eSAndrei Emeltchenko /* check compatibility */ 41490e8b207eSAndrei Emeltchenko 415079de886dSAndrei Emeltchenko /* Send rsp for BR/EDR channel */ 4151f351bc72SAndrei Emeltchenko if (!chan->hs_hcon) 415229d8a590SAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, rsp, cmd->ident, flags); 415379de886dSAndrei Emeltchenko else 415479de886dSAndrei Emeltchenko chan->ident = cmd->ident; 41550e8b207eSAndrei Emeltchenko } 41560e8b207eSAndrei Emeltchenko 41570a708f8fSGustavo F. Padovan unlock: 41586be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 41593c588192SMat Martineau return err; 41600a708f8fSGustavo F. Padovan } 41610a708f8fSGustavo F. Padovan 41622d792818SGustavo Padovan static inline int l2cap_config_rsp(struct l2cap_conn *conn, 4163cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4164cb3b3152SJohan Hedberg u8 *data) 41650a708f8fSGustavo F. Padovan { 41660a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = (struct l2cap_conf_rsp *)data; 41670a708f8fSGustavo F. Padovan u16 scid, flags, result; 416848454079SGustavo F. Padovan struct l2cap_chan *chan; 4169cb3b3152SJohan Hedberg int len = cmd_len - sizeof(*rsp); 41703c588192SMat Martineau int err = 0; 41710a708f8fSGustavo F. Padovan 4172cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rsp)) 4173cb3b3152SJohan Hedberg return -EPROTO; 4174cb3b3152SJohan Hedberg 41750a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 41760a708f8fSGustavo F. Padovan flags = __le16_to_cpu(rsp->flags); 41770a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 41780a708f8fSGustavo F. Padovan 417961386cbaSAndrei Emeltchenko BT_DBG("scid 0x%4.4x flags 0x%2.2x result 0x%2.2x len %d", scid, flags, 418061386cbaSAndrei Emeltchenko result, len); 41810a708f8fSGustavo F. Padovan 4182baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, scid); 418348454079SGustavo F. Padovan if (!chan) 41840a708f8fSGustavo F. Padovan return 0; 41850a708f8fSGustavo F. Padovan 41860a708f8fSGustavo F. Padovan switch (result) { 41870a708f8fSGustavo F. Padovan case L2CAP_CONF_SUCCESS: 418847d1ec61SGustavo F. Padovan l2cap_conf_rfc_get(chan, rsp->data, len); 41890e8b207eSAndrei Emeltchenko clear_bit(CONF_REM_CONF_PEND, &chan->conf_state); 41900a708f8fSGustavo F. Padovan break; 41910a708f8fSGustavo F. Padovan 41920e8b207eSAndrei Emeltchenko case L2CAP_CONF_PENDING: 41930e8b207eSAndrei Emeltchenko set_bit(CONF_REM_CONF_PEND, &chan->conf_state); 41940e8b207eSAndrei Emeltchenko 41950e8b207eSAndrei Emeltchenko if (test_bit(CONF_LOC_CONF_PEND, &chan->conf_state)) { 41960e8b207eSAndrei Emeltchenko char buf[64]; 41970e8b207eSAndrei Emeltchenko 41980e8b207eSAndrei Emeltchenko len = l2cap_parse_conf_rsp(chan, rsp->data, len, 41990e8b207eSAndrei Emeltchenko buf, &result); 42000e8b207eSAndrei Emeltchenko if (len < 0) { 42015e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 42020e8b207eSAndrei Emeltchenko goto done; 42030e8b207eSAndrei Emeltchenko } 42040e8b207eSAndrei Emeltchenko 4205f351bc72SAndrei Emeltchenko if (!chan->hs_hcon) { 420679de886dSAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, buf, cmd->ident, 420779de886dSAndrei Emeltchenko 0); 42085ce66b59SAndrei Emeltchenko } else { 42095ce66b59SAndrei Emeltchenko if (l2cap_check_efs(chan)) { 42105ce66b59SAndrei Emeltchenko amp_create_logical_link(chan); 421179de886dSAndrei Emeltchenko chan->ident = cmd->ident; 42120e8b207eSAndrei Emeltchenko } 42135ce66b59SAndrei Emeltchenko } 42145ce66b59SAndrei Emeltchenko } 42150e8b207eSAndrei Emeltchenko goto done; 42160e8b207eSAndrei Emeltchenko 42170a708f8fSGustavo F. Padovan case L2CAP_CONF_UNACCEPT: 421873ffa904SGustavo F. Padovan if (chan->num_conf_rsp <= L2CAP_CONF_MAX_CONF_RSP) { 42190a708f8fSGustavo F. Padovan char req[64]; 42200a708f8fSGustavo F. Padovan 42210a708f8fSGustavo F. Padovan if (len > sizeof(req) - sizeof(struct l2cap_conf_req)) { 42225e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 42230a708f8fSGustavo F. Padovan goto done; 42240a708f8fSGustavo F. Padovan } 42250a708f8fSGustavo F. Padovan 42260a708f8fSGustavo F. Padovan /* throw out any old stored conf requests */ 42270a708f8fSGustavo F. Padovan result = L2CAP_CONF_SUCCESS; 4228b4450035SGustavo F. Padovan len = l2cap_parse_conf_rsp(chan, rsp->data, len, 4229b4450035SGustavo F. Padovan req, &result); 42300a708f8fSGustavo F. Padovan if (len < 0) { 42315e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 42320a708f8fSGustavo F. Padovan goto done; 42330a708f8fSGustavo F. Padovan } 42340a708f8fSGustavo F. Padovan 42350a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), 42360a708f8fSGustavo F. Padovan L2CAP_CONF_REQ, len, req); 423773ffa904SGustavo F. Padovan chan->num_conf_req++; 42380a708f8fSGustavo F. Padovan if (result != L2CAP_CONF_SUCCESS) 42390a708f8fSGustavo F. Padovan goto done; 42400a708f8fSGustavo F. Padovan break; 42410a708f8fSGustavo F. Padovan } 42420a708f8fSGustavo F. Padovan 42430a708f8fSGustavo F. Padovan default: 42446be36555SAndrei Emeltchenko l2cap_chan_set_err(chan, ECONNRESET); 42452e0052e4SAndrei Emeltchenko 4246ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_REJ_TIMEOUT); 42475e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 42480a708f8fSGustavo F. Padovan goto done; 42490a708f8fSGustavo F. Padovan } 42500a708f8fSGustavo F. Padovan 425159e54bd1SAndrei Emeltchenko if (flags & L2CAP_CONF_FLAG_CONTINUATION) 42520a708f8fSGustavo F. Padovan goto done; 42530a708f8fSGustavo F. Padovan 4254c1360a1cSGustavo F. Padovan set_bit(CONF_INPUT_DONE, &chan->conf_state); 42550a708f8fSGustavo F. Padovan 4256c1360a1cSGustavo F. Padovan if (test_bit(CONF_OUTPUT_DONE, &chan->conf_state)) { 425747d1ec61SGustavo F. Padovan set_default_fcs(chan); 42580a708f8fSGustavo F. Padovan 4259105bdf9eSMat Martineau if (chan->mode == L2CAP_MODE_ERTM || 4260105bdf9eSMat Martineau chan->mode == L2CAP_MODE_STREAMING) 42613c588192SMat Martineau err = l2cap_ertm_init(chan); 42620a708f8fSGustavo F. Padovan 42633c588192SMat Martineau if (err < 0) 42645e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 42653c588192SMat Martineau else 4266cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 42670a708f8fSGustavo F. Padovan } 42680a708f8fSGustavo F. Padovan 42690a708f8fSGustavo F. Padovan done: 42706be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 42713c588192SMat Martineau return err; 42720a708f8fSGustavo F. Padovan } 42730a708f8fSGustavo F. Padovan 42742d792818SGustavo Padovan static inline int l2cap_disconnect_req(struct l2cap_conn *conn, 4275cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4276cb3b3152SJohan Hedberg u8 *data) 42770a708f8fSGustavo F. Padovan { 42780a708f8fSGustavo F. Padovan struct l2cap_disconn_req *req = (struct l2cap_disconn_req *) data; 42790a708f8fSGustavo F. Padovan struct l2cap_disconn_rsp rsp; 42800a708f8fSGustavo F. Padovan u16 dcid, scid; 428148454079SGustavo F. Padovan struct l2cap_chan *chan; 42820a708f8fSGustavo F. Padovan 4283cb3b3152SJohan Hedberg if (cmd_len != sizeof(*req)) 4284cb3b3152SJohan Hedberg return -EPROTO; 4285cb3b3152SJohan Hedberg 42860a708f8fSGustavo F. Padovan scid = __le16_to_cpu(req->scid); 42870a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(req->dcid); 42880a708f8fSGustavo F. Padovan 42890a708f8fSGustavo F. Padovan BT_DBG("scid 0x%4.4x dcid 0x%4.4x", scid, dcid); 42900a708f8fSGustavo F. Padovan 42913df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 42923df91ea2SAndrei Emeltchenko 42933df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, dcid); 42943df91ea2SAndrei Emeltchenko if (!chan) { 42953df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 4296662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, dcid, scid); 4297662d652dSJohan Hedberg return 0; 42983df91ea2SAndrei Emeltchenko } 42990a708f8fSGustavo F. Padovan 43006be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 43016be36555SAndrei Emeltchenko 4302fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 4303fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 43040a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_DISCONN_RSP, sizeof(rsp), &rsp); 43050a708f8fSGustavo F. Padovan 43065ec1bbe5SGustavo Padovan chan->ops->set_shutdown(chan); 43070a708f8fSGustavo F. Padovan 430861d6ef3eSMat Martineau l2cap_chan_hold(chan); 430948454079SGustavo F. Padovan l2cap_chan_del(chan, ECONNRESET); 43106be36555SAndrei Emeltchenko 43116be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 43120a708f8fSGustavo F. Padovan 431380b98027SGustavo Padovan chan->ops->close(chan); 431461d6ef3eSMat Martineau l2cap_chan_put(chan); 43153df91ea2SAndrei Emeltchenko 43163df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 43173df91ea2SAndrei Emeltchenko 43180a708f8fSGustavo F. Padovan return 0; 43190a708f8fSGustavo F. Padovan } 43200a708f8fSGustavo F. Padovan 43212d792818SGustavo Padovan static inline int l2cap_disconnect_rsp(struct l2cap_conn *conn, 4322cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4323cb3b3152SJohan Hedberg u8 *data) 43240a708f8fSGustavo F. Padovan { 43250a708f8fSGustavo F. Padovan struct l2cap_disconn_rsp *rsp = (struct l2cap_disconn_rsp *) data; 43260a708f8fSGustavo F. Padovan u16 dcid, scid; 432748454079SGustavo F. Padovan struct l2cap_chan *chan; 43280a708f8fSGustavo F. Padovan 4329cb3b3152SJohan Hedberg if (cmd_len != sizeof(*rsp)) 4330cb3b3152SJohan Hedberg return -EPROTO; 4331cb3b3152SJohan Hedberg 43320a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 43330a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(rsp->dcid); 43340a708f8fSGustavo F. Padovan 43350a708f8fSGustavo F. Padovan BT_DBG("dcid 0x%4.4x scid 0x%4.4x", dcid, scid); 43360a708f8fSGustavo F. Padovan 43373df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 43383df91ea2SAndrei Emeltchenko 43393df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, scid); 43403df91ea2SAndrei Emeltchenko if (!chan) { 43413df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 43420a708f8fSGustavo F. Padovan return 0; 43433df91ea2SAndrei Emeltchenko } 43440a708f8fSGustavo F. Padovan 43456be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 434648454079SGustavo F. Padovan 434761d6ef3eSMat Martineau l2cap_chan_hold(chan); 434848454079SGustavo F. Padovan l2cap_chan_del(chan, 0); 43496be36555SAndrei Emeltchenko 43506be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 43510a708f8fSGustavo F. Padovan 435280b98027SGustavo Padovan chan->ops->close(chan); 435361d6ef3eSMat Martineau l2cap_chan_put(chan); 43543df91ea2SAndrei Emeltchenko 43553df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 43563df91ea2SAndrei Emeltchenko 43570a708f8fSGustavo F. Padovan return 0; 43580a708f8fSGustavo F. Padovan } 43590a708f8fSGustavo F. Padovan 43602d792818SGustavo Padovan static inline int l2cap_information_req(struct l2cap_conn *conn, 4361cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4362cb3b3152SJohan Hedberg u8 *data) 43630a708f8fSGustavo F. Padovan { 43640a708f8fSGustavo F. Padovan struct l2cap_info_req *req = (struct l2cap_info_req *) data; 43650a708f8fSGustavo F. Padovan u16 type; 43660a708f8fSGustavo F. Padovan 4367cb3b3152SJohan Hedberg if (cmd_len != sizeof(*req)) 4368cb3b3152SJohan Hedberg return -EPROTO; 4369cb3b3152SJohan Hedberg 43700a708f8fSGustavo F. Padovan type = __le16_to_cpu(req->type); 43710a708f8fSGustavo F. Padovan 43720a708f8fSGustavo F. Padovan BT_DBG("type 0x%4.4x", type); 43730a708f8fSGustavo F. Padovan 43740a708f8fSGustavo F. Padovan if (type == L2CAP_IT_FEAT_MASK) { 43750a708f8fSGustavo F. Padovan u8 buf[8]; 43760a708f8fSGustavo F. Padovan u32 feat_mask = l2cap_feat_mask; 43770a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) buf; 4378dcf4adbfSJoe Perches rsp->type = cpu_to_le16(L2CAP_IT_FEAT_MASK); 4379dcf4adbfSJoe Perches rsp->result = cpu_to_le16(L2CAP_IR_SUCCESS); 43800a708f8fSGustavo F. Padovan if (!disable_ertm) 43810a708f8fSGustavo F. Padovan feat_mask |= L2CAP_FEAT_ERTM | L2CAP_FEAT_STREAMING 43820a708f8fSGustavo F. Padovan | L2CAP_FEAT_FCS; 4383848566b3SMarcel Holtmann if (conn->hs_enabled) 43846327eb98SAndrei Emeltchenko feat_mask |= L2CAP_FEAT_EXT_FLOW 43856327eb98SAndrei Emeltchenko | L2CAP_FEAT_EXT_WINDOW; 4386a5fd6f30SAndrei Emeltchenko 43870a708f8fSGustavo F. Padovan put_unaligned_le32(feat_mask, rsp->data); 43882d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(buf), 43892d792818SGustavo Padovan buf); 43900a708f8fSGustavo F. Padovan } else if (type == L2CAP_IT_FIXED_CHAN) { 43910a708f8fSGustavo F. Padovan u8 buf[12]; 43920a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) buf; 439350a147cdSMat Martineau 4394848566b3SMarcel Holtmann if (conn->hs_enabled) 439550a147cdSMat Martineau l2cap_fixed_chan[0] |= L2CAP_FC_A2MP; 439650a147cdSMat Martineau else 439750a147cdSMat Martineau l2cap_fixed_chan[0] &= ~L2CAP_FC_A2MP; 439850a147cdSMat Martineau 4399dcf4adbfSJoe Perches rsp->type = cpu_to_le16(L2CAP_IT_FIXED_CHAN); 4400dcf4adbfSJoe Perches rsp->result = cpu_to_le16(L2CAP_IR_SUCCESS); 4401c6337ea6SAndrei Emeltchenko memcpy(rsp->data, l2cap_fixed_chan, sizeof(l2cap_fixed_chan)); 44022d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(buf), 44032d792818SGustavo Padovan buf); 44040a708f8fSGustavo F. Padovan } else { 44050a708f8fSGustavo F. Padovan struct l2cap_info_rsp rsp; 44060a708f8fSGustavo F. Padovan rsp.type = cpu_to_le16(type); 4407dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_IR_NOTSUPP); 44082d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(rsp), 44092d792818SGustavo Padovan &rsp); 44100a708f8fSGustavo F. Padovan } 44110a708f8fSGustavo F. Padovan 44120a708f8fSGustavo F. Padovan return 0; 44130a708f8fSGustavo F. Padovan } 44140a708f8fSGustavo F. Padovan 44152d792818SGustavo Padovan static inline int l2cap_information_rsp(struct l2cap_conn *conn, 4416cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4417cb3b3152SJohan Hedberg u8 *data) 44180a708f8fSGustavo F. Padovan { 44190a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) data; 44200a708f8fSGustavo F. Padovan u16 type, result; 44210a708f8fSGustavo F. Padovan 44223f6fa3d4SJaganath Kanakkassery if (cmd_len < sizeof(*rsp)) 4423cb3b3152SJohan Hedberg return -EPROTO; 4424cb3b3152SJohan Hedberg 44250a708f8fSGustavo F. Padovan type = __le16_to_cpu(rsp->type); 44260a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 44270a708f8fSGustavo F. Padovan 44280a708f8fSGustavo F. Padovan BT_DBG("type 0x%4.4x result 0x%2.2x", type, result); 44290a708f8fSGustavo F. Padovan 4430e90165beSAndrei Emeltchenko /* L2CAP Info req/rsp are unbound to channels, add extra checks */ 4431e90165beSAndrei Emeltchenko if (cmd->ident != conn->info_ident || 4432e90165beSAndrei Emeltchenko conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) 4433e90165beSAndrei Emeltchenko return 0; 4434e90165beSAndrei Emeltchenko 443517cd3f37SUlisses Furquim cancel_delayed_work(&conn->info_timer); 44360a708f8fSGustavo F. Padovan 44370a708f8fSGustavo F. Padovan if (result != L2CAP_IR_SUCCESS) { 44380a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 44390a708f8fSGustavo F. Padovan conn->info_ident = 0; 44400a708f8fSGustavo F. Padovan 44410a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 44420a708f8fSGustavo F. Padovan 44430a708f8fSGustavo F. Padovan return 0; 44440a708f8fSGustavo F. Padovan } 44450a708f8fSGustavo F. Padovan 4446978c93b9SAndrei Emeltchenko switch (type) { 4447978c93b9SAndrei Emeltchenko case L2CAP_IT_FEAT_MASK: 44480a708f8fSGustavo F. Padovan conn->feat_mask = get_unaligned_le32(rsp->data); 44490a708f8fSGustavo F. Padovan 44500a708f8fSGustavo F. Padovan if (conn->feat_mask & L2CAP_FEAT_FIXED_CHAN) { 44510a708f8fSGustavo F. Padovan struct l2cap_info_req req; 4452dcf4adbfSJoe Perches req.type = cpu_to_le16(L2CAP_IT_FIXED_CHAN); 44530a708f8fSGustavo F. Padovan 44540a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 44550a708f8fSGustavo F. Padovan 44560a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, conn->info_ident, 44570a708f8fSGustavo F. Padovan L2CAP_INFO_REQ, sizeof(req), &req); 44580a708f8fSGustavo F. Padovan } else { 44590a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 44600a708f8fSGustavo F. Padovan conn->info_ident = 0; 44610a708f8fSGustavo F. Padovan 44620a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 44630a708f8fSGustavo F. Padovan } 4464978c93b9SAndrei Emeltchenko break; 4465978c93b9SAndrei Emeltchenko 4466978c93b9SAndrei Emeltchenko case L2CAP_IT_FIXED_CHAN: 4467978c93b9SAndrei Emeltchenko conn->fixed_chan_mask = rsp->data[0]; 44680a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 44690a708f8fSGustavo F. Padovan conn->info_ident = 0; 44700a708f8fSGustavo F. Padovan 44710a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 4472978c93b9SAndrei Emeltchenko break; 44730a708f8fSGustavo F. Padovan } 44740a708f8fSGustavo F. Padovan 44750a708f8fSGustavo F. Padovan return 0; 44760a708f8fSGustavo F. Padovan } 44770a708f8fSGustavo F. Padovan 44781700915fSMat Martineau static int l2cap_create_channel_req(struct l2cap_conn *conn, 44792d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, 44802d792818SGustavo Padovan u16 cmd_len, void *data) 4481f94ff6ffSMat Martineau { 4482f94ff6ffSMat Martineau struct l2cap_create_chan_req *req = data; 44836e1df6a6SAndrei Emeltchenko struct l2cap_create_chan_rsp rsp; 44841700915fSMat Martineau struct l2cap_chan *chan; 44856e1df6a6SAndrei Emeltchenko struct hci_dev *hdev; 4486f94ff6ffSMat Martineau u16 psm, scid; 4487f94ff6ffSMat Martineau 4488f94ff6ffSMat Martineau if (cmd_len != sizeof(*req)) 4489f94ff6ffSMat Martineau return -EPROTO; 4490f94ff6ffSMat Martineau 4491848566b3SMarcel Holtmann if (!conn->hs_enabled) 4492f94ff6ffSMat Martineau return -EINVAL; 4493f94ff6ffSMat Martineau 4494f94ff6ffSMat Martineau psm = le16_to_cpu(req->psm); 4495f94ff6ffSMat Martineau scid = le16_to_cpu(req->scid); 4496f94ff6ffSMat Martineau 4497ad0ac6caSAndrei Emeltchenko BT_DBG("psm 0x%2.2x, scid 0x%4.4x, amp_id %d", psm, scid, req->amp_id); 4498f94ff6ffSMat Martineau 44996e1df6a6SAndrei Emeltchenko /* For controller id 0 make BR/EDR connection */ 45006ed971caSMarcel Holtmann if (req->amp_id == AMP_ID_BREDR) { 45016e1df6a6SAndrei Emeltchenko l2cap_connect(conn, cmd, data, L2CAP_CREATE_CHAN_RSP, 45026e1df6a6SAndrei Emeltchenko req->amp_id); 45036e1df6a6SAndrei Emeltchenko return 0; 45046e1df6a6SAndrei Emeltchenko } 45051700915fSMat Martineau 45061700915fSMat Martineau /* Validate AMP controller id */ 45071700915fSMat Martineau hdev = hci_dev_get(req->amp_id); 45086e1df6a6SAndrei Emeltchenko if (!hdev) 45096e1df6a6SAndrei Emeltchenko goto error; 45101700915fSMat Martineau 45116e1df6a6SAndrei Emeltchenko if (hdev->dev_type != HCI_AMP || !test_bit(HCI_UP, &hdev->flags)) { 45126e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 45136e1df6a6SAndrei Emeltchenko goto error; 45146e1df6a6SAndrei Emeltchenko } 45156e1df6a6SAndrei Emeltchenko 45166e1df6a6SAndrei Emeltchenko chan = l2cap_connect(conn, cmd, data, L2CAP_CREATE_CHAN_RSP, 45176e1df6a6SAndrei Emeltchenko req->amp_id); 45186e1df6a6SAndrei Emeltchenko if (chan) { 45196e1df6a6SAndrei Emeltchenko struct amp_mgr *mgr = conn->hcon->amp_mgr; 45206e1df6a6SAndrei Emeltchenko struct hci_conn *hs_hcon; 45216e1df6a6SAndrei Emeltchenko 452298e0f7eaSMarcel Holtmann hs_hcon = hci_conn_hash_lookup_ba(hdev, AMP_LINK, 452398e0f7eaSMarcel Holtmann &conn->hcon->dst); 45246e1df6a6SAndrei Emeltchenko if (!hs_hcon) { 45256e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 4526662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, chan->scid, 4527662d652dSJohan Hedberg chan->dcid); 4528662d652dSJohan Hedberg return 0; 45296e1df6a6SAndrei Emeltchenko } 45306e1df6a6SAndrei Emeltchenko 45316e1df6a6SAndrei Emeltchenko BT_DBG("mgr %p bredr_chan %p hs_hcon %p", mgr, chan, hs_hcon); 45326e1df6a6SAndrei Emeltchenko 45336e1df6a6SAndrei Emeltchenko mgr->bredr_chan = chan; 45346e1df6a6SAndrei Emeltchenko chan->hs_hcon = hs_hcon; 4535fd45bf4cSAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 45366e1df6a6SAndrei Emeltchenko conn->mtu = hdev->block_mtu; 45376e1df6a6SAndrei Emeltchenko } 45386e1df6a6SAndrei Emeltchenko 45396e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 45406e1df6a6SAndrei Emeltchenko 45416e1df6a6SAndrei Emeltchenko return 0; 45426e1df6a6SAndrei Emeltchenko 45436e1df6a6SAndrei Emeltchenko error: 4544f94ff6ffSMat Martineau rsp.dcid = 0; 4545f94ff6ffSMat Martineau rsp.scid = cpu_to_le16(scid); 4546dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_BAD_AMP); 4547dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 4548f94ff6ffSMat Martineau 4549f94ff6ffSMat Martineau l2cap_send_cmd(conn, cmd->ident, L2CAP_CREATE_CHAN_RSP, 4550f94ff6ffSMat Martineau sizeof(rsp), &rsp); 4551f94ff6ffSMat Martineau 4552dc280801SJohan Hedberg return 0; 4553f94ff6ffSMat Martineau } 4554f94ff6ffSMat Martineau 45558eb200bdSMat Martineau static void l2cap_send_move_chan_req(struct l2cap_chan *chan, u8 dest_amp_id) 45568eb200bdSMat Martineau { 45578eb200bdSMat Martineau struct l2cap_move_chan_req req; 45588eb200bdSMat Martineau u8 ident; 45598eb200bdSMat Martineau 45608eb200bdSMat Martineau BT_DBG("chan %p, dest_amp_id %d", chan, dest_amp_id); 45618eb200bdSMat Martineau 45628eb200bdSMat Martineau ident = l2cap_get_ident(chan->conn); 45638eb200bdSMat Martineau chan->ident = ident; 45648eb200bdSMat Martineau 45658eb200bdSMat Martineau req.icid = cpu_to_le16(chan->scid); 45668eb200bdSMat Martineau req.dest_amp_id = dest_amp_id; 45678eb200bdSMat Martineau 45688eb200bdSMat Martineau l2cap_send_cmd(chan->conn, ident, L2CAP_MOVE_CHAN_REQ, sizeof(req), 45698eb200bdSMat Martineau &req); 45708eb200bdSMat Martineau 45718eb200bdSMat Martineau __set_chan_timer(chan, L2CAP_MOVE_TIMEOUT); 45728eb200bdSMat Martineau } 45738eb200bdSMat Martineau 45741500109bSMat Martineau static void l2cap_send_move_chan_rsp(struct l2cap_chan *chan, u16 result) 45758d5a04a1SMat Martineau { 45768d5a04a1SMat Martineau struct l2cap_move_chan_rsp rsp; 45778d5a04a1SMat Martineau 45781500109bSMat Martineau BT_DBG("chan %p, result 0x%4.4x", chan, result); 45798d5a04a1SMat Martineau 45801500109bSMat Martineau rsp.icid = cpu_to_le16(chan->dcid); 45818d5a04a1SMat Martineau rsp.result = cpu_to_le16(result); 45828d5a04a1SMat Martineau 45831500109bSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_MOVE_CHAN_RSP, 45841500109bSMat Martineau sizeof(rsp), &rsp); 45858d5a04a1SMat Martineau } 45868d5a04a1SMat Martineau 45875b155ef9SMat Martineau static void l2cap_send_move_chan_cfm(struct l2cap_chan *chan, u16 result) 45888d5a04a1SMat Martineau { 45898d5a04a1SMat Martineau struct l2cap_move_chan_cfm cfm; 45908d5a04a1SMat Martineau 45915b155ef9SMat Martineau BT_DBG("chan %p, result 0x%4.4x", chan, result); 45928d5a04a1SMat Martineau 45935b155ef9SMat Martineau chan->ident = l2cap_get_ident(chan->conn); 45948d5a04a1SMat Martineau 45955b155ef9SMat Martineau cfm.icid = cpu_to_le16(chan->scid); 45968d5a04a1SMat Martineau cfm.result = cpu_to_le16(result); 45978d5a04a1SMat Martineau 45985b155ef9SMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_MOVE_CHAN_CFM, 45995b155ef9SMat Martineau sizeof(cfm), &cfm); 46005b155ef9SMat Martineau 46015b155ef9SMat Martineau __set_chan_timer(chan, L2CAP_MOVE_TIMEOUT); 46025b155ef9SMat Martineau } 46035b155ef9SMat Martineau 46045b155ef9SMat Martineau static void l2cap_send_move_chan_cfm_icid(struct l2cap_conn *conn, u16 icid) 46055b155ef9SMat Martineau { 46065b155ef9SMat Martineau struct l2cap_move_chan_cfm cfm; 46075b155ef9SMat Martineau 46085b155ef9SMat Martineau BT_DBG("conn %p, icid 0x%4.4x", conn, icid); 46095b155ef9SMat Martineau 46105b155ef9SMat Martineau cfm.icid = cpu_to_le16(icid); 4611dcf4adbfSJoe Perches cfm.result = cpu_to_le16(L2CAP_MC_UNCONFIRMED); 46125b155ef9SMat Martineau 46135b155ef9SMat Martineau l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_MOVE_CHAN_CFM, 46145b155ef9SMat Martineau sizeof(cfm), &cfm); 46158d5a04a1SMat Martineau } 46168d5a04a1SMat Martineau 46178d5a04a1SMat Martineau static void l2cap_send_move_chan_cfm_rsp(struct l2cap_conn *conn, u8 ident, 46188d5a04a1SMat Martineau u16 icid) 46198d5a04a1SMat Martineau { 46208d5a04a1SMat Martineau struct l2cap_move_chan_cfm_rsp rsp; 46218d5a04a1SMat Martineau 4622ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x", icid); 46238d5a04a1SMat Martineau 46248d5a04a1SMat Martineau rsp.icid = cpu_to_le16(icid); 46258d5a04a1SMat Martineau l2cap_send_cmd(conn, ident, L2CAP_MOVE_CHAN_CFM_RSP, sizeof(rsp), &rsp); 46268d5a04a1SMat Martineau } 46278d5a04a1SMat Martineau 46285f3847a4SMat Martineau static void __release_logical_link(struct l2cap_chan *chan) 46295f3847a4SMat Martineau { 46305f3847a4SMat Martineau chan->hs_hchan = NULL; 46315f3847a4SMat Martineau chan->hs_hcon = NULL; 46325f3847a4SMat Martineau 46335f3847a4SMat Martineau /* Placeholder - release the logical link */ 46345f3847a4SMat Martineau } 46355f3847a4SMat Martineau 46361500109bSMat Martineau static void l2cap_logical_fail(struct l2cap_chan *chan) 46371500109bSMat Martineau { 46381500109bSMat Martineau /* Logical link setup failed */ 46391500109bSMat Martineau if (chan->state != BT_CONNECTED) { 46401500109bSMat Martineau /* Create channel failure, disconnect */ 46415e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 46421500109bSMat Martineau return; 46431500109bSMat Martineau } 46441500109bSMat Martineau 46451500109bSMat Martineau switch (chan->move_role) { 46461500109bSMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 46471500109bSMat Martineau l2cap_move_done(chan); 46481500109bSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_NOT_SUPP); 46491500109bSMat Martineau break; 46501500109bSMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 46511500109bSMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_LOGICAL_COMP || 46521500109bSMat Martineau chan->move_state == L2CAP_MOVE_WAIT_LOGICAL_CFM) { 46531500109bSMat Martineau /* Remote has only sent pending or 46541500109bSMat Martineau * success responses, clean up 46551500109bSMat Martineau */ 46561500109bSMat Martineau l2cap_move_done(chan); 46571500109bSMat Martineau } 46581500109bSMat Martineau 46591500109bSMat Martineau /* Other amp move states imply that the move 46601500109bSMat Martineau * has already aborted 46611500109bSMat Martineau */ 46621500109bSMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 46631500109bSMat Martineau break; 46641500109bSMat Martineau } 46651500109bSMat Martineau } 46661500109bSMat Martineau 46671500109bSMat Martineau static void l2cap_logical_finish_create(struct l2cap_chan *chan, 46681500109bSMat Martineau struct hci_chan *hchan) 46691500109bSMat Martineau { 46701500109bSMat Martineau struct l2cap_conf_rsp rsp; 46711500109bSMat Martineau 4672336178a3SAndrei Emeltchenko chan->hs_hchan = hchan; 46731500109bSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 46741500109bSMat Martineau 467535ba9561SAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, &rsp, chan->ident, 0); 46761500109bSMat Martineau 46771500109bSMat Martineau if (test_bit(CONF_INPUT_DONE, &chan->conf_state)) { 4678fe79c6feSAndrei Emeltchenko int err; 46791500109bSMat Martineau 46801500109bSMat Martineau set_default_fcs(chan); 46811500109bSMat Martineau 46821500109bSMat Martineau err = l2cap_ertm_init(chan); 46831500109bSMat Martineau if (err < 0) 46845e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 46851500109bSMat Martineau else 46861500109bSMat Martineau l2cap_chan_ready(chan); 46871500109bSMat Martineau } 46881500109bSMat Martineau } 46891500109bSMat Martineau 46901500109bSMat Martineau static void l2cap_logical_finish_move(struct l2cap_chan *chan, 46911500109bSMat Martineau struct hci_chan *hchan) 46921500109bSMat Martineau { 46931500109bSMat Martineau chan->hs_hcon = hchan->conn; 46941500109bSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 46951500109bSMat Martineau 46961500109bSMat Martineau BT_DBG("move_state %d", chan->move_state); 46971500109bSMat Martineau 46981500109bSMat Martineau switch (chan->move_state) { 46991500109bSMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_COMP: 47001500109bSMat Martineau /* Move confirm will be sent after a success 47011500109bSMat Martineau * response is received 47021500109bSMat Martineau */ 47031500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 47041500109bSMat Martineau break; 47051500109bSMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_CFM: 47061500109bSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 47071500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 47081500109bSMat Martineau } else if (chan->move_role == L2CAP_MOVE_ROLE_INITIATOR) { 47091500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM_RSP; 47101500109bSMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 47111500109bSMat Martineau } else if (chan->move_role == L2CAP_MOVE_ROLE_RESPONDER) { 47121500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 47131500109bSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_SUCCESS); 47141500109bSMat Martineau } 47151500109bSMat Martineau break; 47161500109bSMat Martineau default: 47171500109bSMat Martineau /* Move was not in expected state, free the channel */ 47181500109bSMat Martineau __release_logical_link(chan); 47191500109bSMat Martineau 47201500109bSMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 47211500109bSMat Martineau } 47221500109bSMat Martineau } 47231500109bSMat Martineau 47241500109bSMat Martineau /* Call with chan locked */ 472527695fb4SAndrei Emeltchenko void l2cap_logical_cfm(struct l2cap_chan *chan, struct hci_chan *hchan, 47265b155ef9SMat Martineau u8 status) 47275b155ef9SMat Martineau { 47281500109bSMat Martineau BT_DBG("chan %p, hchan %p, status %d", chan, hchan, status); 47291500109bSMat Martineau 47301500109bSMat Martineau if (status) { 47311500109bSMat Martineau l2cap_logical_fail(chan); 47321500109bSMat Martineau __release_logical_link(chan); 47335b155ef9SMat Martineau return; 47345b155ef9SMat Martineau } 47355b155ef9SMat Martineau 47361500109bSMat Martineau if (chan->state != BT_CONNECTED) { 47371500109bSMat Martineau /* Ignore logical link if channel is on BR/EDR */ 47386ed971caSMarcel Holtmann if (chan->local_amp_id != AMP_ID_BREDR) 47391500109bSMat Martineau l2cap_logical_finish_create(chan, hchan); 47401500109bSMat Martineau } else { 47411500109bSMat Martineau l2cap_logical_finish_move(chan, hchan); 47421500109bSMat Martineau } 47431500109bSMat Martineau } 47441500109bSMat Martineau 47453f7a56c4SMat Martineau void l2cap_move_start(struct l2cap_chan *chan) 47463f7a56c4SMat Martineau { 47473f7a56c4SMat Martineau BT_DBG("chan %p", chan); 47483f7a56c4SMat Martineau 47496ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR) { 47503f7a56c4SMat Martineau if (chan->chan_policy != BT_CHANNEL_POLICY_AMP_PREFERRED) 47513f7a56c4SMat Martineau return; 47523f7a56c4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_INITIATOR; 47533f7a56c4SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_PREPARE; 47543f7a56c4SMat Martineau /* Placeholder - start physical link setup */ 47553f7a56c4SMat Martineau } else { 47563f7a56c4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_INITIATOR; 47573f7a56c4SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 47583f7a56c4SMat Martineau chan->move_id = 0; 47593f7a56c4SMat Martineau l2cap_move_setup(chan); 47603f7a56c4SMat Martineau l2cap_send_move_chan_req(chan, 0); 47613f7a56c4SMat Martineau } 47623f7a56c4SMat Martineau } 47633f7a56c4SMat Martineau 47648eb200bdSMat Martineau static void l2cap_do_create(struct l2cap_chan *chan, int result, 47658eb200bdSMat Martineau u8 local_amp_id, u8 remote_amp_id) 47668eb200bdSMat Martineau { 476762748ca1SAndrei Emeltchenko BT_DBG("chan %p state %s %u -> %u", chan, state_to_string(chan->state), 476862748ca1SAndrei Emeltchenko local_amp_id, remote_amp_id); 476962748ca1SAndrei Emeltchenko 477012d6cc60SAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 477112d6cc60SAndrei Emeltchenko 477262748ca1SAndrei Emeltchenko /* Outgoing channel on AMP */ 477362748ca1SAndrei Emeltchenko if (chan->state == BT_CONNECT) { 477462748ca1SAndrei Emeltchenko if (result == L2CAP_CR_SUCCESS) { 477562748ca1SAndrei Emeltchenko chan->local_amp_id = local_amp_id; 477662748ca1SAndrei Emeltchenko l2cap_send_create_chan_req(chan, remote_amp_id); 477762748ca1SAndrei Emeltchenko } else { 477862748ca1SAndrei Emeltchenko /* Revert to BR/EDR connect */ 477962748ca1SAndrei Emeltchenko l2cap_send_conn_req(chan); 478062748ca1SAndrei Emeltchenko } 478162748ca1SAndrei Emeltchenko 478262748ca1SAndrei Emeltchenko return; 478362748ca1SAndrei Emeltchenko } 478462748ca1SAndrei Emeltchenko 478562748ca1SAndrei Emeltchenko /* Incoming channel on AMP */ 478662748ca1SAndrei Emeltchenko if (__l2cap_no_conn_pending(chan)) { 47878eb200bdSMat Martineau struct l2cap_conn_rsp rsp; 47888eb200bdSMat Martineau char buf[128]; 47898eb200bdSMat Martineau rsp.scid = cpu_to_le16(chan->dcid); 47908eb200bdSMat Martineau rsp.dcid = cpu_to_le16(chan->scid); 47918eb200bdSMat Martineau 47928eb200bdSMat Martineau if (result == L2CAP_CR_SUCCESS) { 47938eb200bdSMat Martineau /* Send successful response */ 4794dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 4795dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 47968eb200bdSMat Martineau } else { 47978eb200bdSMat Martineau /* Send negative response */ 4798dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_NO_MEM); 4799dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 48008eb200bdSMat Martineau } 48018eb200bdSMat Martineau 48028eb200bdSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_CREATE_CHAN_RSP, 48038eb200bdSMat Martineau sizeof(rsp), &rsp); 48048eb200bdSMat Martineau 48058eb200bdSMat Martineau if (result == L2CAP_CR_SUCCESS) { 4806f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 48078eb200bdSMat Martineau set_bit(CONF_REQ_SENT, &chan->conf_state); 48088eb200bdSMat Martineau l2cap_send_cmd(chan->conn, l2cap_get_ident(chan->conn), 48098eb200bdSMat Martineau L2CAP_CONF_REQ, 48108eb200bdSMat Martineau l2cap_build_conf_req(chan, buf), buf); 48118eb200bdSMat Martineau chan->num_conf_req++; 48128eb200bdSMat Martineau } 48138eb200bdSMat Martineau } 48148eb200bdSMat Martineau } 48158eb200bdSMat Martineau 48168eb200bdSMat Martineau static void l2cap_do_move_initiate(struct l2cap_chan *chan, u8 local_amp_id, 48178eb200bdSMat Martineau u8 remote_amp_id) 48188eb200bdSMat Martineau { 48198eb200bdSMat Martineau l2cap_move_setup(chan); 48208eb200bdSMat Martineau chan->move_id = local_amp_id; 48218eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP; 48228eb200bdSMat Martineau 48238eb200bdSMat Martineau l2cap_send_move_chan_req(chan, remote_amp_id); 48248eb200bdSMat Martineau } 48258eb200bdSMat Martineau 48268eb200bdSMat Martineau static void l2cap_do_move_respond(struct l2cap_chan *chan, int result) 48278eb200bdSMat Martineau { 48288eb200bdSMat Martineau struct hci_chan *hchan = NULL; 48298eb200bdSMat Martineau 48308eb200bdSMat Martineau /* Placeholder - get hci_chan for logical link */ 48318eb200bdSMat Martineau 48328eb200bdSMat Martineau if (hchan) { 48338eb200bdSMat Martineau if (hchan->state == BT_CONNECTED) { 48348eb200bdSMat Martineau /* Logical link is ready to go */ 48358eb200bdSMat Martineau chan->hs_hcon = hchan->conn; 48368eb200bdSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 48378eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 48388eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_SUCCESS); 48398eb200bdSMat Martineau 48408eb200bdSMat Martineau l2cap_logical_cfm(chan, hchan, L2CAP_MR_SUCCESS); 48418eb200bdSMat Martineau } else { 48428eb200bdSMat Martineau /* Wait for logical link to be ready */ 48438eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 48448eb200bdSMat Martineau } 48458eb200bdSMat Martineau } else { 48468eb200bdSMat Martineau /* Logical link not available */ 48478eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_NOT_ALLOWED); 48488eb200bdSMat Martineau } 48498eb200bdSMat Martineau } 48508eb200bdSMat Martineau 48518eb200bdSMat Martineau static void l2cap_do_move_cancel(struct l2cap_chan *chan, int result) 48528eb200bdSMat Martineau { 48538eb200bdSMat Martineau if (chan->move_role == L2CAP_MOVE_ROLE_RESPONDER) { 48548eb200bdSMat Martineau u8 rsp_result; 48558eb200bdSMat Martineau if (result == -EINVAL) 48568eb200bdSMat Martineau rsp_result = L2CAP_MR_BAD_ID; 48578eb200bdSMat Martineau else 48588eb200bdSMat Martineau rsp_result = L2CAP_MR_NOT_ALLOWED; 48598eb200bdSMat Martineau 48608eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, rsp_result); 48618eb200bdSMat Martineau } 48628eb200bdSMat Martineau 48638eb200bdSMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 48648eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 48658eb200bdSMat Martineau 48668eb200bdSMat Martineau /* Restart data transmission */ 48678eb200bdSMat Martineau l2cap_ertm_send(chan); 48688eb200bdSMat Martineau } 48698eb200bdSMat Martineau 4870a514b17fSAndrei Emeltchenko /* Invoke with locked chan */ 4871a514b17fSAndrei Emeltchenko void __l2cap_physical_cfm(struct l2cap_chan *chan, int result) 48728eb200bdSMat Martineau { 4873770bfefaSAndrei Emeltchenko u8 local_amp_id = chan->local_amp_id; 4874fffadc08SAndrei Emeltchenko u8 remote_amp_id = chan->remote_amp_id; 4875770bfefaSAndrei Emeltchenko 48768eb200bdSMat Martineau BT_DBG("chan %p, result %d, local_amp_id %d, remote_amp_id %d", 48778eb200bdSMat Martineau chan, result, local_amp_id, remote_amp_id); 48788eb200bdSMat Martineau 48798eb200bdSMat Martineau if (chan->state == BT_DISCONN || chan->state == BT_CLOSED) { 48808eb200bdSMat Martineau l2cap_chan_unlock(chan); 48818eb200bdSMat Martineau return; 48828eb200bdSMat Martineau } 48838eb200bdSMat Martineau 48848eb200bdSMat Martineau if (chan->state != BT_CONNECTED) { 48858eb200bdSMat Martineau l2cap_do_create(chan, result, local_amp_id, remote_amp_id); 48868eb200bdSMat Martineau } else if (result != L2CAP_MR_SUCCESS) { 48878eb200bdSMat Martineau l2cap_do_move_cancel(chan, result); 48888eb200bdSMat Martineau } else { 48898eb200bdSMat Martineau switch (chan->move_role) { 48908eb200bdSMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 48918eb200bdSMat Martineau l2cap_do_move_initiate(chan, local_amp_id, 48928eb200bdSMat Martineau remote_amp_id); 48938eb200bdSMat Martineau break; 48948eb200bdSMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 48958eb200bdSMat Martineau l2cap_do_move_respond(chan, result); 48968eb200bdSMat Martineau break; 48978eb200bdSMat Martineau default: 48988eb200bdSMat Martineau l2cap_do_move_cancel(chan, result); 48998eb200bdSMat Martineau break; 49008eb200bdSMat Martineau } 49018eb200bdSMat Martineau } 49028eb200bdSMat Martineau } 49038eb200bdSMat Martineau 49048d5a04a1SMat Martineau static inline int l2cap_move_channel_req(struct l2cap_conn *conn, 4905ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 4906ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 49078d5a04a1SMat Martineau { 49088d5a04a1SMat Martineau struct l2cap_move_chan_req *req = data; 49091500109bSMat Martineau struct l2cap_move_chan_rsp rsp; 491002b0fbb9SMat Martineau struct l2cap_chan *chan; 49118d5a04a1SMat Martineau u16 icid = 0; 49128d5a04a1SMat Martineau u16 result = L2CAP_MR_NOT_ALLOWED; 49138d5a04a1SMat Martineau 49148d5a04a1SMat Martineau if (cmd_len != sizeof(*req)) 49158d5a04a1SMat Martineau return -EPROTO; 49168d5a04a1SMat Martineau 49178d5a04a1SMat Martineau icid = le16_to_cpu(req->icid); 49188d5a04a1SMat Martineau 4919ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, dest_amp_id %d", icid, req->dest_amp_id); 49208d5a04a1SMat Martineau 4921848566b3SMarcel Holtmann if (!conn->hs_enabled) 49228d5a04a1SMat Martineau return -EINVAL; 49238d5a04a1SMat Martineau 492402b0fbb9SMat Martineau chan = l2cap_get_chan_by_dcid(conn, icid); 492502b0fbb9SMat Martineau if (!chan) { 49261500109bSMat Martineau rsp.icid = cpu_to_le16(icid); 4927dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_MR_NOT_ALLOWED); 49281500109bSMat Martineau l2cap_send_cmd(conn, cmd->ident, L2CAP_MOVE_CHAN_RSP, 49291500109bSMat Martineau sizeof(rsp), &rsp); 493002b0fbb9SMat Martineau return 0; 493102b0fbb9SMat Martineau } 493202b0fbb9SMat Martineau 49331500109bSMat Martineau chan->ident = cmd->ident; 49341500109bSMat Martineau 493502b0fbb9SMat Martineau if (chan->scid < L2CAP_CID_DYN_START || 493602b0fbb9SMat Martineau chan->chan_policy == BT_CHANNEL_POLICY_BREDR_ONLY || 493702b0fbb9SMat Martineau (chan->mode != L2CAP_MODE_ERTM && 493802b0fbb9SMat Martineau chan->mode != L2CAP_MODE_STREAMING)) { 493902b0fbb9SMat Martineau result = L2CAP_MR_NOT_ALLOWED; 494002b0fbb9SMat Martineau goto send_move_response; 494102b0fbb9SMat Martineau } 494202b0fbb9SMat Martineau 494302b0fbb9SMat Martineau if (chan->local_amp_id == req->dest_amp_id) { 494402b0fbb9SMat Martineau result = L2CAP_MR_SAME_ID; 494502b0fbb9SMat Martineau goto send_move_response; 494602b0fbb9SMat Martineau } 494702b0fbb9SMat Martineau 49486ed971caSMarcel Holtmann if (req->dest_amp_id != AMP_ID_BREDR) { 494902b0fbb9SMat Martineau struct hci_dev *hdev; 495002b0fbb9SMat Martineau hdev = hci_dev_get(req->dest_amp_id); 495102b0fbb9SMat Martineau if (!hdev || hdev->dev_type != HCI_AMP || 495202b0fbb9SMat Martineau !test_bit(HCI_UP, &hdev->flags)) { 495302b0fbb9SMat Martineau if (hdev) 495402b0fbb9SMat Martineau hci_dev_put(hdev); 495502b0fbb9SMat Martineau 495602b0fbb9SMat Martineau result = L2CAP_MR_BAD_ID; 495702b0fbb9SMat Martineau goto send_move_response; 495802b0fbb9SMat Martineau } 495902b0fbb9SMat Martineau hci_dev_put(hdev); 496002b0fbb9SMat Martineau } 496102b0fbb9SMat Martineau 496202b0fbb9SMat Martineau /* Detect a move collision. Only send a collision response 496302b0fbb9SMat Martineau * if this side has "lost", otherwise proceed with the move. 496402b0fbb9SMat Martineau * The winner has the larger bd_addr. 496502b0fbb9SMat Martineau */ 496602b0fbb9SMat Martineau if ((__chan_is_moving(chan) || 496702b0fbb9SMat Martineau chan->move_role != L2CAP_MOVE_ROLE_NONE) && 49686f59b904SMarcel Holtmann bacmp(&conn->hcon->src, &conn->hcon->dst) > 0) { 496902b0fbb9SMat Martineau result = L2CAP_MR_COLLISION; 497002b0fbb9SMat Martineau goto send_move_response; 497102b0fbb9SMat Martineau } 497202b0fbb9SMat Martineau 497302b0fbb9SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_RESPONDER; 497402b0fbb9SMat Martineau l2cap_move_setup(chan); 497502b0fbb9SMat Martineau chan->move_id = req->dest_amp_id; 497602b0fbb9SMat Martineau icid = chan->dcid; 497702b0fbb9SMat Martineau 49786ed971caSMarcel Holtmann if (req->dest_amp_id == AMP_ID_BREDR) { 497902b0fbb9SMat Martineau /* Moving to BR/EDR */ 498002b0fbb9SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 498102b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 498202b0fbb9SMat Martineau result = L2CAP_MR_PEND; 498302b0fbb9SMat Martineau } else { 498402b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 498502b0fbb9SMat Martineau result = L2CAP_MR_SUCCESS; 498602b0fbb9SMat Martineau } 498702b0fbb9SMat Martineau } else { 498802b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_PREPARE; 498902b0fbb9SMat Martineau /* Placeholder - uncomment when amp functions are available */ 499002b0fbb9SMat Martineau /*amp_accept_physical(chan, req->dest_amp_id);*/ 499102b0fbb9SMat Martineau result = L2CAP_MR_PEND; 499202b0fbb9SMat Martineau } 499302b0fbb9SMat Martineau 499402b0fbb9SMat Martineau send_move_response: 49951500109bSMat Martineau l2cap_send_move_chan_rsp(chan, result); 49968d5a04a1SMat Martineau 499702b0fbb9SMat Martineau l2cap_chan_unlock(chan); 499802b0fbb9SMat Martineau 49998d5a04a1SMat Martineau return 0; 50008d5a04a1SMat Martineau } 50018d5a04a1SMat Martineau 50025b155ef9SMat Martineau static void l2cap_move_continue(struct l2cap_conn *conn, u16 icid, u16 result) 50035b155ef9SMat Martineau { 50045b155ef9SMat Martineau struct l2cap_chan *chan; 50055b155ef9SMat Martineau struct hci_chan *hchan = NULL; 50065b155ef9SMat Martineau 50075b155ef9SMat Martineau chan = l2cap_get_chan_by_scid(conn, icid); 50085b155ef9SMat Martineau if (!chan) { 50095b155ef9SMat Martineau l2cap_send_move_chan_cfm_icid(conn, icid); 50105b155ef9SMat Martineau return; 50115b155ef9SMat Martineau } 50125b155ef9SMat Martineau 50135b155ef9SMat Martineau __clear_chan_timer(chan); 50145b155ef9SMat Martineau if (result == L2CAP_MR_PEND) 50155b155ef9SMat Martineau __set_chan_timer(chan, L2CAP_MOVE_ERTX_TIMEOUT); 50165b155ef9SMat Martineau 50175b155ef9SMat Martineau switch (chan->move_state) { 50185b155ef9SMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_COMP: 50195b155ef9SMat Martineau /* Move confirm will be sent when logical link 50205b155ef9SMat Martineau * is complete. 50215b155ef9SMat Martineau */ 50225b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 50235b155ef9SMat Martineau break; 50245b155ef9SMat Martineau case L2CAP_MOVE_WAIT_RSP_SUCCESS: 50255b155ef9SMat Martineau if (result == L2CAP_MR_PEND) { 50265b155ef9SMat Martineau break; 50275b155ef9SMat Martineau } else if (test_bit(CONN_LOCAL_BUSY, 50285b155ef9SMat Martineau &chan->conn_state)) { 50295b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 50305b155ef9SMat Martineau } else { 50315b155ef9SMat Martineau /* Logical link is up or moving to BR/EDR, 50325b155ef9SMat Martineau * proceed with move 50335b155ef9SMat Martineau */ 50345b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM_RSP; 50355b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 50365b155ef9SMat Martineau } 50375b155ef9SMat Martineau break; 50385b155ef9SMat Martineau case L2CAP_MOVE_WAIT_RSP: 50395b155ef9SMat Martineau /* Moving to AMP */ 50405b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS) { 50415b155ef9SMat Martineau /* Remote is ready, send confirm immediately 50425b155ef9SMat Martineau * after logical link is ready 50435b155ef9SMat Martineau */ 50445b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 50455b155ef9SMat Martineau } else { 50465b155ef9SMat Martineau /* Both logical link and move success 50475b155ef9SMat Martineau * are required to confirm 50485b155ef9SMat Martineau */ 50495b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_COMP; 50505b155ef9SMat Martineau } 50515b155ef9SMat Martineau 50525b155ef9SMat Martineau /* Placeholder - get hci_chan for logical link */ 50535b155ef9SMat Martineau if (!hchan) { 50545b155ef9SMat Martineau /* Logical link not available */ 50555b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 50565b155ef9SMat Martineau break; 50575b155ef9SMat Martineau } 50585b155ef9SMat Martineau 50595b155ef9SMat Martineau /* If the logical link is not yet connected, do not 50605b155ef9SMat Martineau * send confirmation. 50615b155ef9SMat Martineau */ 50625b155ef9SMat Martineau if (hchan->state != BT_CONNECTED) 50635b155ef9SMat Martineau break; 50645b155ef9SMat Martineau 50655b155ef9SMat Martineau /* Logical link is already ready to go */ 50665b155ef9SMat Martineau 50675b155ef9SMat Martineau chan->hs_hcon = hchan->conn; 50685b155ef9SMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 50695b155ef9SMat Martineau 50705b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS) { 50715b155ef9SMat Martineau /* Can confirm now */ 50725b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 50735b155ef9SMat Martineau } else { 50745b155ef9SMat Martineau /* Now only need move success 50755b155ef9SMat Martineau * to confirm 50765b155ef9SMat Martineau */ 50775b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 50785b155ef9SMat Martineau } 50795b155ef9SMat Martineau 50805b155ef9SMat Martineau l2cap_logical_cfm(chan, hchan, L2CAP_MR_SUCCESS); 50815b155ef9SMat Martineau break; 50825b155ef9SMat Martineau default: 50835b155ef9SMat Martineau /* Any other amp move state means the move failed. */ 50845b155ef9SMat Martineau chan->move_id = chan->local_amp_id; 50855b155ef9SMat Martineau l2cap_move_done(chan); 50865b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 50875b155ef9SMat Martineau } 50885b155ef9SMat Martineau 50895b155ef9SMat Martineau l2cap_chan_unlock(chan); 50905b155ef9SMat Martineau } 50915b155ef9SMat Martineau 50925b155ef9SMat Martineau static void l2cap_move_fail(struct l2cap_conn *conn, u8 ident, u16 icid, 50935b155ef9SMat Martineau u16 result) 50945b155ef9SMat Martineau { 50955b155ef9SMat Martineau struct l2cap_chan *chan; 50965b155ef9SMat Martineau 50975b155ef9SMat Martineau chan = l2cap_get_chan_by_ident(conn, ident); 50985b155ef9SMat Martineau if (!chan) { 50995b155ef9SMat Martineau /* Could not locate channel, icid is best guess */ 51005b155ef9SMat Martineau l2cap_send_move_chan_cfm_icid(conn, icid); 51015b155ef9SMat Martineau return; 51025b155ef9SMat Martineau } 51035b155ef9SMat Martineau 51045b155ef9SMat Martineau __clear_chan_timer(chan); 51055b155ef9SMat Martineau 51065b155ef9SMat Martineau if (chan->move_role == L2CAP_MOVE_ROLE_INITIATOR) { 51075b155ef9SMat Martineau if (result == L2CAP_MR_COLLISION) { 51085b155ef9SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_RESPONDER; 51095b155ef9SMat Martineau } else { 51105b155ef9SMat Martineau /* Cleanup - cancel move */ 51115b155ef9SMat Martineau chan->move_id = chan->local_amp_id; 51125b155ef9SMat Martineau l2cap_move_done(chan); 51135b155ef9SMat Martineau } 51145b155ef9SMat Martineau } 51155b155ef9SMat Martineau 51165b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 51175b155ef9SMat Martineau 51185b155ef9SMat Martineau l2cap_chan_unlock(chan); 51195b155ef9SMat Martineau } 51205b155ef9SMat Martineau 51215b155ef9SMat Martineau static int l2cap_move_channel_rsp(struct l2cap_conn *conn, 5122ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5123ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 51248d5a04a1SMat Martineau { 51258d5a04a1SMat Martineau struct l2cap_move_chan_rsp *rsp = data; 51268d5a04a1SMat Martineau u16 icid, result; 51278d5a04a1SMat Martineau 51288d5a04a1SMat Martineau if (cmd_len != sizeof(*rsp)) 51298d5a04a1SMat Martineau return -EPROTO; 51308d5a04a1SMat Martineau 51318d5a04a1SMat Martineau icid = le16_to_cpu(rsp->icid); 51328d5a04a1SMat Martineau result = le16_to_cpu(rsp->result); 51338d5a04a1SMat Martineau 5134ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, result 0x%4.4x", icid, result); 51358d5a04a1SMat Martineau 51365b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS || result == L2CAP_MR_PEND) 51375b155ef9SMat Martineau l2cap_move_continue(conn, icid, result); 51385b155ef9SMat Martineau else 51395b155ef9SMat Martineau l2cap_move_fail(conn, cmd->ident, icid, result); 51408d5a04a1SMat Martineau 51418d5a04a1SMat Martineau return 0; 51428d5a04a1SMat Martineau } 51438d5a04a1SMat Martineau 51445f3847a4SMat Martineau static int l2cap_move_channel_confirm(struct l2cap_conn *conn, 5145ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5146ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 51478d5a04a1SMat Martineau { 51488d5a04a1SMat Martineau struct l2cap_move_chan_cfm *cfm = data; 51495f3847a4SMat Martineau struct l2cap_chan *chan; 51508d5a04a1SMat Martineau u16 icid, result; 51518d5a04a1SMat Martineau 51528d5a04a1SMat Martineau if (cmd_len != sizeof(*cfm)) 51538d5a04a1SMat Martineau return -EPROTO; 51548d5a04a1SMat Martineau 51558d5a04a1SMat Martineau icid = le16_to_cpu(cfm->icid); 51568d5a04a1SMat Martineau result = le16_to_cpu(cfm->result); 51578d5a04a1SMat Martineau 5158ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, result 0x%4.4x", icid, result); 51598d5a04a1SMat Martineau 51605f3847a4SMat Martineau chan = l2cap_get_chan_by_dcid(conn, icid); 51615f3847a4SMat Martineau if (!chan) { 51625f3847a4SMat Martineau /* Spec requires a response even if the icid was not found */ 51638d5a04a1SMat Martineau l2cap_send_move_chan_cfm_rsp(conn, cmd->ident, icid); 51645f3847a4SMat Martineau return 0; 51655f3847a4SMat Martineau } 51665f3847a4SMat Martineau 51675f3847a4SMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_CONFIRM) { 51685f3847a4SMat Martineau if (result == L2CAP_MC_CONFIRMED) { 51695f3847a4SMat Martineau chan->local_amp_id = chan->move_id; 51706ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR) 51715f3847a4SMat Martineau __release_logical_link(chan); 51725f3847a4SMat Martineau } else { 51735f3847a4SMat Martineau chan->move_id = chan->local_amp_id; 51745f3847a4SMat Martineau } 51755f3847a4SMat Martineau 51765f3847a4SMat Martineau l2cap_move_done(chan); 51775f3847a4SMat Martineau } 51785f3847a4SMat Martineau 51795f3847a4SMat Martineau l2cap_send_move_chan_cfm_rsp(conn, cmd->ident, icid); 51805f3847a4SMat Martineau 51815f3847a4SMat Martineau l2cap_chan_unlock(chan); 51828d5a04a1SMat Martineau 51838d5a04a1SMat Martineau return 0; 51848d5a04a1SMat Martineau } 51858d5a04a1SMat Martineau 51868d5a04a1SMat Martineau static inline int l2cap_move_channel_confirm_rsp(struct l2cap_conn *conn, 5187ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5188ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 51898d5a04a1SMat Martineau { 51908d5a04a1SMat Martineau struct l2cap_move_chan_cfm_rsp *rsp = data; 51913fd71a0aSMat Martineau struct l2cap_chan *chan; 51928d5a04a1SMat Martineau u16 icid; 51938d5a04a1SMat Martineau 51948d5a04a1SMat Martineau if (cmd_len != sizeof(*rsp)) 51958d5a04a1SMat Martineau return -EPROTO; 51968d5a04a1SMat Martineau 51978d5a04a1SMat Martineau icid = le16_to_cpu(rsp->icid); 51988d5a04a1SMat Martineau 5199ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x", icid); 52008d5a04a1SMat Martineau 52013fd71a0aSMat Martineau chan = l2cap_get_chan_by_scid(conn, icid); 52023fd71a0aSMat Martineau if (!chan) 52033fd71a0aSMat Martineau return 0; 52043fd71a0aSMat Martineau 52053fd71a0aSMat Martineau __clear_chan_timer(chan); 52063fd71a0aSMat Martineau 52073fd71a0aSMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_CONFIRM_RSP) { 52083fd71a0aSMat Martineau chan->local_amp_id = chan->move_id; 52093fd71a0aSMat Martineau 52106ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR && chan->hs_hchan) 52113fd71a0aSMat Martineau __release_logical_link(chan); 52123fd71a0aSMat Martineau 52133fd71a0aSMat Martineau l2cap_move_done(chan); 52143fd71a0aSMat Martineau } 52153fd71a0aSMat Martineau 52163fd71a0aSMat Martineau l2cap_chan_unlock(chan); 52173fd71a0aSMat Martineau 52188d5a04a1SMat Martineau return 0; 52198d5a04a1SMat Martineau } 52208d5a04a1SMat Martineau 5221de73115aSClaudio Takahasi static inline int l2cap_conn_param_update_req(struct l2cap_conn *conn, 52222d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, 5223203e639eSJohan Hedberg u16 cmd_len, u8 *data) 5224de73115aSClaudio Takahasi { 5225de73115aSClaudio Takahasi struct hci_conn *hcon = conn->hcon; 5226de73115aSClaudio Takahasi struct l2cap_conn_param_update_req *req; 5227de73115aSClaudio Takahasi struct l2cap_conn_param_update_rsp rsp; 5228203e639eSJohan Hedberg u16 min, max, latency, to_multiplier; 52292ce603ebSClaudio Takahasi int err; 5230de73115aSClaudio Takahasi 523140bef302SJohan Hedberg if (hcon->role != HCI_ROLE_MASTER) 5232de73115aSClaudio Takahasi return -EINVAL; 5233de73115aSClaudio Takahasi 5234de73115aSClaudio Takahasi if (cmd_len != sizeof(struct l2cap_conn_param_update_req)) 5235de73115aSClaudio Takahasi return -EPROTO; 5236de73115aSClaudio Takahasi 5237de73115aSClaudio Takahasi req = (struct l2cap_conn_param_update_req *) data; 5238de73115aSClaudio Takahasi min = __le16_to_cpu(req->min); 5239de73115aSClaudio Takahasi max = __le16_to_cpu(req->max); 5240de73115aSClaudio Takahasi latency = __le16_to_cpu(req->latency); 5241de73115aSClaudio Takahasi to_multiplier = __le16_to_cpu(req->to_multiplier); 5242de73115aSClaudio Takahasi 5243de73115aSClaudio Takahasi BT_DBG("min 0x%4.4x max 0x%4.4x latency: 0x%4.4x Timeout: 0x%4.4x", 5244de73115aSClaudio Takahasi min, max, latency, to_multiplier); 5245de73115aSClaudio Takahasi 5246de73115aSClaudio Takahasi memset(&rsp, 0, sizeof(rsp)); 52472ce603ebSClaudio Takahasi 5248d4905f24SAndre Guedes err = hci_check_conn_params(min, max, latency, to_multiplier); 52492ce603ebSClaudio Takahasi if (err) 5250dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CONN_PARAM_REJECTED); 5251de73115aSClaudio Takahasi else 5252dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CONN_PARAM_ACCEPTED); 5253de73115aSClaudio Takahasi 5254de73115aSClaudio Takahasi l2cap_send_cmd(conn, cmd->ident, L2CAP_CONN_PARAM_UPDATE_RSP, 5255de73115aSClaudio Takahasi sizeof(rsp), &rsp); 5256de73115aSClaudio Takahasi 5257ffb5a827SAndre Guedes if (!err) { 5258f4869e2aSJohan Hedberg u8 store_hint; 5259ffb5a827SAndre Guedes 5260f4869e2aSJohan Hedberg store_hint = hci_le_conn_update(hcon, min, max, latency, 5261f4869e2aSJohan Hedberg to_multiplier); 5262f4869e2aSJohan Hedberg mgmt_new_conn_param(hcon->hdev, &hcon->dst, hcon->dst_type, 5263f4869e2aSJohan Hedberg store_hint, min, max, latency, 5264f4869e2aSJohan Hedberg to_multiplier); 5265f4869e2aSJohan Hedberg 5266ffb5a827SAndre Guedes } 52672ce603ebSClaudio Takahasi 5268de73115aSClaudio Takahasi return 0; 5269de73115aSClaudio Takahasi } 5270de73115aSClaudio Takahasi 5271f1496deeSJohan Hedberg static int l2cap_le_connect_rsp(struct l2cap_conn *conn, 5272f1496deeSJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 5273f1496deeSJohan Hedberg u8 *data) 5274f1496deeSJohan Hedberg { 5275f1496deeSJohan Hedberg struct l2cap_le_conn_rsp *rsp = (struct l2cap_le_conn_rsp *) data; 5276f1496deeSJohan Hedberg u16 dcid, mtu, mps, credits, result; 5277f1496deeSJohan Hedberg struct l2cap_chan *chan; 5278f1496deeSJohan Hedberg int err; 5279f1496deeSJohan Hedberg 5280f1496deeSJohan Hedberg if (cmd_len < sizeof(*rsp)) 5281f1496deeSJohan Hedberg return -EPROTO; 5282f1496deeSJohan Hedberg 5283f1496deeSJohan Hedberg dcid = __le16_to_cpu(rsp->dcid); 5284f1496deeSJohan Hedberg mtu = __le16_to_cpu(rsp->mtu); 5285f1496deeSJohan Hedberg mps = __le16_to_cpu(rsp->mps); 5286f1496deeSJohan Hedberg credits = __le16_to_cpu(rsp->credits); 5287f1496deeSJohan Hedberg result = __le16_to_cpu(rsp->result); 5288f1496deeSJohan Hedberg 5289f1496deeSJohan Hedberg if (result == L2CAP_CR_SUCCESS && (mtu < 23 || mps < 23)) 5290f1496deeSJohan Hedberg return -EPROTO; 5291f1496deeSJohan Hedberg 5292f1496deeSJohan Hedberg BT_DBG("dcid 0x%4.4x mtu %u mps %u credits %u result 0x%2.2x", 5293f1496deeSJohan Hedberg dcid, mtu, mps, credits, result); 5294f1496deeSJohan Hedberg 5295f1496deeSJohan Hedberg mutex_lock(&conn->chan_lock); 5296f1496deeSJohan Hedberg 5297f1496deeSJohan Hedberg chan = __l2cap_get_chan_by_ident(conn, cmd->ident); 5298f1496deeSJohan Hedberg if (!chan) { 5299f1496deeSJohan Hedberg err = -EBADSLT; 5300f1496deeSJohan Hedberg goto unlock; 5301f1496deeSJohan Hedberg } 5302f1496deeSJohan Hedberg 5303f1496deeSJohan Hedberg err = 0; 5304f1496deeSJohan Hedberg 5305f1496deeSJohan Hedberg l2cap_chan_lock(chan); 5306f1496deeSJohan Hedberg 5307f1496deeSJohan Hedberg switch (result) { 5308f1496deeSJohan Hedberg case L2CAP_CR_SUCCESS: 5309f1496deeSJohan Hedberg chan->ident = 0; 5310f1496deeSJohan Hedberg chan->dcid = dcid; 5311f1496deeSJohan Hedberg chan->omtu = mtu; 5312f1496deeSJohan Hedberg chan->remote_mps = mps; 53130cd75f7eSJohan Hedberg chan->tx_credits = credits; 5314f1496deeSJohan Hedberg l2cap_chan_ready(chan); 5315f1496deeSJohan Hedberg break; 5316f1496deeSJohan Hedberg 5317f1496deeSJohan Hedberg default: 5318f1496deeSJohan Hedberg l2cap_chan_del(chan, ECONNREFUSED); 5319f1496deeSJohan Hedberg break; 5320f1496deeSJohan Hedberg } 5321f1496deeSJohan Hedberg 5322f1496deeSJohan Hedberg l2cap_chan_unlock(chan); 5323f1496deeSJohan Hedberg 5324f1496deeSJohan Hedberg unlock: 5325f1496deeSJohan Hedberg mutex_unlock(&conn->chan_lock); 5326f1496deeSJohan Hedberg 5327f1496deeSJohan Hedberg return err; 5328f1496deeSJohan Hedberg } 5329f1496deeSJohan Hedberg 53303300d9a9SClaudio Takahasi static inline int l2cap_bredr_sig_cmd(struct l2cap_conn *conn, 53312d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, u16 cmd_len, 53322d792818SGustavo Padovan u8 *data) 53333300d9a9SClaudio Takahasi { 53343300d9a9SClaudio Takahasi int err = 0; 53353300d9a9SClaudio Takahasi 53363300d9a9SClaudio Takahasi switch (cmd->code) { 53373300d9a9SClaudio Takahasi case L2CAP_COMMAND_REJ: 5338cb3b3152SJohan Hedberg l2cap_command_rej(conn, cmd, cmd_len, data); 53393300d9a9SClaudio Takahasi break; 53403300d9a9SClaudio Takahasi 53413300d9a9SClaudio Takahasi case L2CAP_CONN_REQ: 5342cb3b3152SJohan Hedberg err = l2cap_connect_req(conn, cmd, cmd_len, data); 53433300d9a9SClaudio Takahasi break; 53443300d9a9SClaudio Takahasi 53453300d9a9SClaudio Takahasi case L2CAP_CONN_RSP: 5346f5a2598dSMat Martineau case L2CAP_CREATE_CHAN_RSP: 53479245e737SJohan Hedberg l2cap_connect_create_rsp(conn, cmd, cmd_len, data); 53483300d9a9SClaudio Takahasi break; 53493300d9a9SClaudio Takahasi 53503300d9a9SClaudio Takahasi case L2CAP_CONF_REQ: 53513300d9a9SClaudio Takahasi err = l2cap_config_req(conn, cmd, cmd_len, data); 53523300d9a9SClaudio Takahasi break; 53533300d9a9SClaudio Takahasi 53543300d9a9SClaudio Takahasi case L2CAP_CONF_RSP: 53559245e737SJohan Hedberg l2cap_config_rsp(conn, cmd, cmd_len, data); 53563300d9a9SClaudio Takahasi break; 53573300d9a9SClaudio Takahasi 53583300d9a9SClaudio Takahasi case L2CAP_DISCONN_REQ: 5359cb3b3152SJohan Hedberg err = l2cap_disconnect_req(conn, cmd, cmd_len, data); 53603300d9a9SClaudio Takahasi break; 53613300d9a9SClaudio Takahasi 53623300d9a9SClaudio Takahasi case L2CAP_DISCONN_RSP: 53639245e737SJohan Hedberg l2cap_disconnect_rsp(conn, cmd, cmd_len, data); 53643300d9a9SClaudio Takahasi break; 53653300d9a9SClaudio Takahasi 53663300d9a9SClaudio Takahasi case L2CAP_ECHO_REQ: 53673300d9a9SClaudio Takahasi l2cap_send_cmd(conn, cmd->ident, L2CAP_ECHO_RSP, cmd_len, data); 53683300d9a9SClaudio Takahasi break; 53693300d9a9SClaudio Takahasi 53703300d9a9SClaudio Takahasi case L2CAP_ECHO_RSP: 53713300d9a9SClaudio Takahasi break; 53723300d9a9SClaudio Takahasi 53733300d9a9SClaudio Takahasi case L2CAP_INFO_REQ: 5374cb3b3152SJohan Hedberg err = l2cap_information_req(conn, cmd, cmd_len, data); 53753300d9a9SClaudio Takahasi break; 53763300d9a9SClaudio Takahasi 53773300d9a9SClaudio Takahasi case L2CAP_INFO_RSP: 53789245e737SJohan Hedberg l2cap_information_rsp(conn, cmd, cmd_len, data); 53793300d9a9SClaudio Takahasi break; 53803300d9a9SClaudio Takahasi 5381f94ff6ffSMat Martineau case L2CAP_CREATE_CHAN_REQ: 5382f94ff6ffSMat Martineau err = l2cap_create_channel_req(conn, cmd, cmd_len, data); 5383f94ff6ffSMat Martineau break; 5384f94ff6ffSMat Martineau 53858d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_REQ: 53868d5a04a1SMat Martineau err = l2cap_move_channel_req(conn, cmd, cmd_len, data); 53878d5a04a1SMat Martineau break; 53888d5a04a1SMat Martineau 53898d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_RSP: 53909245e737SJohan Hedberg l2cap_move_channel_rsp(conn, cmd, cmd_len, data); 53918d5a04a1SMat Martineau break; 53928d5a04a1SMat Martineau 53938d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_CFM: 53948d5a04a1SMat Martineau err = l2cap_move_channel_confirm(conn, cmd, cmd_len, data); 53958d5a04a1SMat Martineau break; 53968d5a04a1SMat Martineau 53978d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_CFM_RSP: 53989245e737SJohan Hedberg l2cap_move_channel_confirm_rsp(conn, cmd, cmd_len, data); 53998d5a04a1SMat Martineau break; 54008d5a04a1SMat Martineau 54013300d9a9SClaudio Takahasi default: 54023300d9a9SClaudio Takahasi BT_ERR("Unknown BR/EDR signaling command 0x%2.2x", cmd->code); 54033300d9a9SClaudio Takahasi err = -EINVAL; 54043300d9a9SClaudio Takahasi break; 54053300d9a9SClaudio Takahasi } 54063300d9a9SClaudio Takahasi 54073300d9a9SClaudio Takahasi return err; 54083300d9a9SClaudio Takahasi } 54093300d9a9SClaudio Takahasi 541027e2d4c8SJohan Hedberg static int l2cap_le_connect_req(struct l2cap_conn *conn, 541127e2d4c8SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 541227e2d4c8SJohan Hedberg u8 *data) 541327e2d4c8SJohan Hedberg { 541427e2d4c8SJohan Hedberg struct l2cap_le_conn_req *req = (struct l2cap_le_conn_req *) data; 541527e2d4c8SJohan Hedberg struct l2cap_le_conn_rsp rsp; 541627e2d4c8SJohan Hedberg struct l2cap_chan *chan, *pchan; 54170cd75f7eSJohan Hedberg u16 dcid, scid, credits, mtu, mps; 541827e2d4c8SJohan Hedberg __le16 psm; 541927e2d4c8SJohan Hedberg u8 result; 542027e2d4c8SJohan Hedberg 542127e2d4c8SJohan Hedberg if (cmd_len != sizeof(*req)) 542227e2d4c8SJohan Hedberg return -EPROTO; 542327e2d4c8SJohan Hedberg 542427e2d4c8SJohan Hedberg scid = __le16_to_cpu(req->scid); 542527e2d4c8SJohan Hedberg mtu = __le16_to_cpu(req->mtu); 542627e2d4c8SJohan Hedberg mps = __le16_to_cpu(req->mps); 542727e2d4c8SJohan Hedberg psm = req->psm; 542827e2d4c8SJohan Hedberg dcid = 0; 54290cd75f7eSJohan Hedberg credits = 0; 543027e2d4c8SJohan Hedberg 543127e2d4c8SJohan Hedberg if (mtu < 23 || mps < 23) 543227e2d4c8SJohan Hedberg return -EPROTO; 543327e2d4c8SJohan Hedberg 543427e2d4c8SJohan Hedberg BT_DBG("psm 0x%2.2x scid 0x%4.4x mtu %u mps %u", __le16_to_cpu(psm), 543527e2d4c8SJohan Hedberg scid, mtu, mps); 543627e2d4c8SJohan Hedberg 543727e2d4c8SJohan Hedberg /* Check if we have socket listening on psm */ 543827e2d4c8SJohan Hedberg pchan = l2cap_global_chan_by_psm(BT_LISTEN, psm, &conn->hcon->src, 543927e2d4c8SJohan Hedberg &conn->hcon->dst, LE_LINK); 544027e2d4c8SJohan Hedberg if (!pchan) { 544127e2d4c8SJohan Hedberg result = L2CAP_CR_BAD_PSM; 544227e2d4c8SJohan Hedberg chan = NULL; 544327e2d4c8SJohan Hedberg goto response; 544427e2d4c8SJohan Hedberg } 544527e2d4c8SJohan Hedberg 544627e2d4c8SJohan Hedberg mutex_lock(&conn->chan_lock); 544727e2d4c8SJohan Hedberg l2cap_chan_lock(pchan); 544827e2d4c8SJohan Hedberg 544927e2d4c8SJohan Hedberg if (!smp_sufficient_security(conn->hcon, pchan->sec_level)) { 545027e2d4c8SJohan Hedberg result = L2CAP_CR_AUTHENTICATION; 545127e2d4c8SJohan Hedberg chan = NULL; 545227e2d4c8SJohan Hedberg goto response_unlock; 545327e2d4c8SJohan Hedberg } 545427e2d4c8SJohan Hedberg 545527e2d4c8SJohan Hedberg /* Check if we already have channel with that dcid */ 545627e2d4c8SJohan Hedberg if (__l2cap_get_chan_by_dcid(conn, scid)) { 545727e2d4c8SJohan Hedberg result = L2CAP_CR_NO_MEM; 545827e2d4c8SJohan Hedberg chan = NULL; 545927e2d4c8SJohan Hedberg goto response_unlock; 546027e2d4c8SJohan Hedberg } 546127e2d4c8SJohan Hedberg 546227e2d4c8SJohan Hedberg chan = pchan->ops->new_connection(pchan); 546327e2d4c8SJohan Hedberg if (!chan) { 546427e2d4c8SJohan Hedberg result = L2CAP_CR_NO_MEM; 546527e2d4c8SJohan Hedberg goto response_unlock; 546627e2d4c8SJohan Hedberg } 546727e2d4c8SJohan Hedberg 54680ce43ce6SJohan Hedberg l2cap_le_flowctl_init(chan); 54690ce43ce6SJohan Hedberg 547027e2d4c8SJohan Hedberg bacpy(&chan->src, &conn->hcon->src); 547127e2d4c8SJohan Hedberg bacpy(&chan->dst, &conn->hcon->dst); 547227e2d4c8SJohan Hedberg chan->src_type = bdaddr_type(conn->hcon, conn->hcon->src_type); 547327e2d4c8SJohan Hedberg chan->dst_type = bdaddr_type(conn->hcon, conn->hcon->dst_type); 547427e2d4c8SJohan Hedberg chan->psm = psm; 547527e2d4c8SJohan Hedberg chan->dcid = scid; 547627e2d4c8SJohan Hedberg chan->omtu = mtu; 547727e2d4c8SJohan Hedberg chan->remote_mps = mps; 54780cd75f7eSJohan Hedberg chan->tx_credits = __le16_to_cpu(req->credits); 547927e2d4c8SJohan Hedberg 548027e2d4c8SJohan Hedberg __l2cap_chan_add(conn, chan); 548127e2d4c8SJohan Hedberg dcid = chan->scid; 54820cd75f7eSJohan Hedberg credits = chan->rx_credits; 548327e2d4c8SJohan Hedberg 548427e2d4c8SJohan Hedberg __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 548527e2d4c8SJohan Hedberg 548627e2d4c8SJohan Hedberg chan->ident = cmd->ident; 548727e2d4c8SJohan Hedberg 548827e2d4c8SJohan Hedberg if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 548927e2d4c8SJohan Hedberg l2cap_state_change(chan, BT_CONNECT2); 549027e2d4c8SJohan Hedberg result = L2CAP_CR_PEND; 549127e2d4c8SJohan Hedberg chan->ops->defer(chan); 549227e2d4c8SJohan Hedberg } else { 549327e2d4c8SJohan Hedberg l2cap_chan_ready(chan); 549427e2d4c8SJohan Hedberg result = L2CAP_CR_SUCCESS; 549527e2d4c8SJohan Hedberg } 549627e2d4c8SJohan Hedberg 549727e2d4c8SJohan Hedberg response_unlock: 549827e2d4c8SJohan Hedberg l2cap_chan_unlock(pchan); 549927e2d4c8SJohan Hedberg mutex_unlock(&conn->chan_lock); 550027e2d4c8SJohan Hedberg 550127e2d4c8SJohan Hedberg if (result == L2CAP_CR_PEND) 550227e2d4c8SJohan Hedberg return 0; 550327e2d4c8SJohan Hedberg 550427e2d4c8SJohan Hedberg response: 550527e2d4c8SJohan Hedberg if (chan) { 550627e2d4c8SJohan Hedberg rsp.mtu = cpu_to_le16(chan->imtu); 55073916aed8SJohan Hedberg rsp.mps = cpu_to_le16(chan->mps); 550827e2d4c8SJohan Hedberg } else { 550927e2d4c8SJohan Hedberg rsp.mtu = 0; 551027e2d4c8SJohan Hedberg rsp.mps = 0; 551127e2d4c8SJohan Hedberg } 551227e2d4c8SJohan Hedberg 551327e2d4c8SJohan Hedberg rsp.dcid = cpu_to_le16(dcid); 55140cd75f7eSJohan Hedberg rsp.credits = cpu_to_le16(credits); 551527e2d4c8SJohan Hedberg rsp.result = cpu_to_le16(result); 551627e2d4c8SJohan Hedberg 551727e2d4c8SJohan Hedberg l2cap_send_cmd(conn, cmd->ident, L2CAP_LE_CONN_RSP, sizeof(rsp), &rsp); 551827e2d4c8SJohan Hedberg 551927e2d4c8SJohan Hedberg return 0; 552027e2d4c8SJohan Hedberg } 552127e2d4c8SJohan Hedberg 5522fad5fc89SJohan Hedberg static inline int l2cap_le_credits(struct l2cap_conn *conn, 5523fad5fc89SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 5524fad5fc89SJohan Hedberg u8 *data) 5525fad5fc89SJohan Hedberg { 5526fad5fc89SJohan Hedberg struct l2cap_le_credits *pkt; 5527fad5fc89SJohan Hedberg struct l2cap_chan *chan; 55280f1bfe4eSJohan Hedberg u16 cid, credits, max_credits; 5529fad5fc89SJohan Hedberg 5530fad5fc89SJohan Hedberg if (cmd_len != sizeof(*pkt)) 5531fad5fc89SJohan Hedberg return -EPROTO; 5532fad5fc89SJohan Hedberg 5533fad5fc89SJohan Hedberg pkt = (struct l2cap_le_credits *) data; 5534fad5fc89SJohan Hedberg cid = __le16_to_cpu(pkt->cid); 5535fad5fc89SJohan Hedberg credits = __le16_to_cpu(pkt->credits); 5536fad5fc89SJohan Hedberg 5537fad5fc89SJohan Hedberg BT_DBG("cid 0x%4.4x credits 0x%4.4x", cid, credits); 5538fad5fc89SJohan Hedberg 5539fad5fc89SJohan Hedberg chan = l2cap_get_chan_by_dcid(conn, cid); 5540fad5fc89SJohan Hedberg if (!chan) 5541fad5fc89SJohan Hedberg return -EBADSLT; 5542fad5fc89SJohan Hedberg 55430f1bfe4eSJohan Hedberg max_credits = LE_FLOWCTL_MAX_CREDITS - chan->tx_credits; 55440f1bfe4eSJohan Hedberg if (credits > max_credits) { 55450f1bfe4eSJohan Hedberg BT_ERR("LE credits overflow"); 55460f1bfe4eSJohan Hedberg l2cap_send_disconn_req(chan, ECONNRESET); 55470f1bfe4eSJohan Hedberg 55480f1bfe4eSJohan Hedberg /* Return 0 so that we don't trigger an unnecessary 55490f1bfe4eSJohan Hedberg * command reject packet. 55500f1bfe4eSJohan Hedberg */ 55510f1bfe4eSJohan Hedberg return 0; 55520f1bfe4eSJohan Hedberg } 55530f1bfe4eSJohan Hedberg 5554fad5fc89SJohan Hedberg chan->tx_credits += credits; 5555fad5fc89SJohan Hedberg 5556fad5fc89SJohan Hedberg while (chan->tx_credits && !skb_queue_empty(&chan->tx_q)) { 5557fad5fc89SJohan Hedberg l2cap_do_send(chan, skb_dequeue(&chan->tx_q)); 5558fad5fc89SJohan Hedberg chan->tx_credits--; 5559fad5fc89SJohan Hedberg } 5560fad5fc89SJohan Hedberg 5561fad5fc89SJohan Hedberg if (chan->tx_credits) 5562fad5fc89SJohan Hedberg chan->ops->resume(chan); 5563fad5fc89SJohan Hedberg 5564fad5fc89SJohan Hedberg l2cap_chan_unlock(chan); 5565fad5fc89SJohan Hedberg 5566fad5fc89SJohan Hedberg return 0; 5567fad5fc89SJohan Hedberg } 5568fad5fc89SJohan Hedberg 556971fb4197SJohan Hedberg static inline int l2cap_le_command_rej(struct l2cap_conn *conn, 557071fb4197SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 557171fb4197SJohan Hedberg u8 *data) 557271fb4197SJohan Hedberg { 557371fb4197SJohan Hedberg struct l2cap_cmd_rej_unk *rej = (struct l2cap_cmd_rej_unk *) data; 557471fb4197SJohan Hedberg struct l2cap_chan *chan; 557571fb4197SJohan Hedberg 557671fb4197SJohan Hedberg if (cmd_len < sizeof(*rej)) 557771fb4197SJohan Hedberg return -EPROTO; 557871fb4197SJohan Hedberg 557971fb4197SJohan Hedberg mutex_lock(&conn->chan_lock); 558071fb4197SJohan Hedberg 558171fb4197SJohan Hedberg chan = __l2cap_get_chan_by_ident(conn, cmd->ident); 558271fb4197SJohan Hedberg if (!chan) 558371fb4197SJohan Hedberg goto done; 558471fb4197SJohan Hedberg 558571fb4197SJohan Hedberg l2cap_chan_lock(chan); 558671fb4197SJohan Hedberg l2cap_chan_del(chan, ECONNREFUSED); 558771fb4197SJohan Hedberg l2cap_chan_unlock(chan); 558871fb4197SJohan Hedberg 558971fb4197SJohan Hedberg done: 559071fb4197SJohan Hedberg mutex_unlock(&conn->chan_lock); 559171fb4197SJohan Hedberg return 0; 559271fb4197SJohan Hedberg } 559371fb4197SJohan Hedberg 55943300d9a9SClaudio Takahasi static inline int l2cap_le_sig_cmd(struct l2cap_conn *conn, 5595203e639eSJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 5596203e639eSJohan Hedberg u8 *data) 55973300d9a9SClaudio Takahasi { 5598b5ecba64SJohan Hedberg int err = 0; 5599b5ecba64SJohan Hedberg 56003300d9a9SClaudio Takahasi switch (cmd->code) { 56013300d9a9SClaudio Takahasi case L2CAP_COMMAND_REJ: 560271fb4197SJohan Hedberg l2cap_le_command_rej(conn, cmd, cmd_len, data); 5603b5ecba64SJohan Hedberg break; 56043300d9a9SClaudio Takahasi 56053300d9a9SClaudio Takahasi case L2CAP_CONN_PARAM_UPDATE_REQ: 5606b5ecba64SJohan Hedberg err = l2cap_conn_param_update_req(conn, cmd, cmd_len, data); 5607b5ecba64SJohan Hedberg break; 56083300d9a9SClaudio Takahasi 56093300d9a9SClaudio Takahasi case L2CAP_CONN_PARAM_UPDATE_RSP: 5610b5ecba64SJohan Hedberg break; 56113300d9a9SClaudio Takahasi 5612f1496deeSJohan Hedberg case L2CAP_LE_CONN_RSP: 5613f1496deeSJohan Hedberg l2cap_le_connect_rsp(conn, cmd, cmd_len, data); 5614b5ecba64SJohan Hedberg break; 5615f1496deeSJohan Hedberg 561627e2d4c8SJohan Hedberg case L2CAP_LE_CONN_REQ: 5617b5ecba64SJohan Hedberg err = l2cap_le_connect_req(conn, cmd, cmd_len, data); 5618b5ecba64SJohan Hedberg break; 561927e2d4c8SJohan Hedberg 5620fad5fc89SJohan Hedberg case L2CAP_LE_CREDITS: 5621fad5fc89SJohan Hedberg err = l2cap_le_credits(conn, cmd, cmd_len, data); 5622fad5fc89SJohan Hedberg break; 5623fad5fc89SJohan Hedberg 56243defe01aSJohan Hedberg case L2CAP_DISCONN_REQ: 5625b5ecba64SJohan Hedberg err = l2cap_disconnect_req(conn, cmd, cmd_len, data); 5626b5ecba64SJohan Hedberg break; 56273defe01aSJohan Hedberg 56283defe01aSJohan Hedberg case L2CAP_DISCONN_RSP: 56293defe01aSJohan Hedberg l2cap_disconnect_rsp(conn, cmd, cmd_len, data); 5630b5ecba64SJohan Hedberg break; 56313defe01aSJohan Hedberg 56323300d9a9SClaudio Takahasi default: 56333300d9a9SClaudio Takahasi BT_ERR("Unknown LE signaling command 0x%2.2x", cmd->code); 5634b5ecba64SJohan Hedberg err = -EINVAL; 5635b5ecba64SJohan Hedberg break; 56363300d9a9SClaudio Takahasi } 5637b5ecba64SJohan Hedberg 5638b5ecba64SJohan Hedberg return err; 56393300d9a9SClaudio Takahasi } 56403300d9a9SClaudio Takahasi 5641c5623556SJohan Hedberg static inline void l2cap_le_sig_channel(struct l2cap_conn *conn, 5642c5623556SJohan Hedberg struct sk_buff *skb) 5643c5623556SJohan Hedberg { 564469c4e4e8SJohan Hedberg struct hci_conn *hcon = conn->hcon; 56454f3e219dSMarcel Holtmann struct l2cap_cmd_hdr *cmd; 56464f3e219dSMarcel Holtmann u16 len; 5647c5623556SJohan Hedberg int err; 5648c5623556SJohan Hedberg 564969c4e4e8SJohan Hedberg if (hcon->type != LE_LINK) 56503b166295SMarcel Holtmann goto drop; 565169c4e4e8SJohan Hedberg 56524f3e219dSMarcel Holtmann if (skb->len < L2CAP_CMD_HDR_SIZE) 56534f3e219dSMarcel Holtmann goto drop; 5654c5623556SJohan Hedberg 56554f3e219dSMarcel Holtmann cmd = (void *) skb->data; 56564f3e219dSMarcel Holtmann skb_pull(skb, L2CAP_CMD_HDR_SIZE); 5657c5623556SJohan Hedberg 56584f3e219dSMarcel Holtmann len = le16_to_cpu(cmd->len); 5659c5623556SJohan Hedberg 56604f3e219dSMarcel Holtmann BT_DBG("code 0x%2.2x len %d id 0x%2.2x", cmd->code, len, cmd->ident); 56614f3e219dSMarcel Holtmann 56624f3e219dSMarcel Holtmann if (len != skb->len || !cmd->ident) { 5663c5623556SJohan Hedberg BT_DBG("corrupted command"); 56644f3e219dSMarcel Holtmann goto drop; 5665c5623556SJohan Hedberg } 5666c5623556SJohan Hedberg 5667203e639eSJohan Hedberg err = l2cap_le_sig_cmd(conn, cmd, len, skb->data); 5668c5623556SJohan Hedberg if (err) { 5669c5623556SJohan Hedberg struct l2cap_cmd_rej_unk rej; 5670c5623556SJohan Hedberg 5671c5623556SJohan Hedberg BT_ERR("Wrong link type (%d)", err); 5672c5623556SJohan Hedberg 5673dcf4adbfSJoe Perches rej.reason = cpu_to_le16(L2CAP_REJ_NOT_UNDERSTOOD); 56744f3e219dSMarcel Holtmann l2cap_send_cmd(conn, cmd->ident, L2CAP_COMMAND_REJ, 5675c5623556SJohan Hedberg sizeof(rej), &rej); 5676c5623556SJohan Hedberg } 5677c5623556SJohan Hedberg 56783b166295SMarcel Holtmann drop: 5679c5623556SJohan Hedberg kfree_skb(skb); 5680c5623556SJohan Hedberg } 5681c5623556SJohan Hedberg 56823300d9a9SClaudio Takahasi static inline void l2cap_sig_channel(struct l2cap_conn *conn, 56833300d9a9SClaudio Takahasi struct sk_buff *skb) 56840a708f8fSGustavo F. Padovan { 568569c4e4e8SJohan Hedberg struct hci_conn *hcon = conn->hcon; 56860a708f8fSGustavo F. Padovan u8 *data = skb->data; 56870a708f8fSGustavo F. Padovan int len = skb->len; 56880a708f8fSGustavo F. Padovan struct l2cap_cmd_hdr cmd; 56893300d9a9SClaudio Takahasi int err; 56900a708f8fSGustavo F. Padovan 56910a708f8fSGustavo F. Padovan l2cap_raw_recv(conn, skb); 56920a708f8fSGustavo F. Padovan 569369c4e4e8SJohan Hedberg if (hcon->type != ACL_LINK) 56943b166295SMarcel Holtmann goto drop; 569569c4e4e8SJohan Hedberg 56960a708f8fSGustavo F. Padovan while (len >= L2CAP_CMD_HDR_SIZE) { 56970a708f8fSGustavo F. Padovan u16 cmd_len; 56980a708f8fSGustavo F. Padovan memcpy(&cmd, data, L2CAP_CMD_HDR_SIZE); 56990a708f8fSGustavo F. Padovan data += L2CAP_CMD_HDR_SIZE; 57000a708f8fSGustavo F. Padovan len -= L2CAP_CMD_HDR_SIZE; 57010a708f8fSGustavo F. Padovan 57020a708f8fSGustavo F. Padovan cmd_len = le16_to_cpu(cmd.len); 57030a708f8fSGustavo F. Padovan 57042d792818SGustavo Padovan BT_DBG("code 0x%2.2x len %d id 0x%2.2x", cmd.code, cmd_len, 57052d792818SGustavo Padovan cmd.ident); 57060a708f8fSGustavo F. Padovan 57070a708f8fSGustavo F. Padovan if (cmd_len > len || !cmd.ident) { 57080a708f8fSGustavo F. Padovan BT_DBG("corrupted command"); 57090a708f8fSGustavo F. Padovan break; 57100a708f8fSGustavo F. Padovan } 57110a708f8fSGustavo F. Padovan 57123300d9a9SClaudio Takahasi err = l2cap_bredr_sig_cmd(conn, &cmd, cmd_len, data); 57130a708f8fSGustavo F. Padovan if (err) { 5714e2fd318eSIlia Kolomisnky struct l2cap_cmd_rej_unk rej; 57152c6d1a2eSGustavo F. Padovan 57162c6d1a2eSGustavo F. Padovan BT_ERR("Wrong link type (%d)", err); 57170a708f8fSGustavo F. Padovan 5718dcf4adbfSJoe Perches rej.reason = cpu_to_le16(L2CAP_REJ_NOT_UNDERSTOOD); 57192d792818SGustavo Padovan l2cap_send_cmd(conn, cmd.ident, L2CAP_COMMAND_REJ, 57202d792818SGustavo Padovan sizeof(rej), &rej); 57210a708f8fSGustavo F. Padovan } 57220a708f8fSGustavo F. Padovan 57230a708f8fSGustavo F. Padovan data += cmd_len; 57240a708f8fSGustavo F. Padovan len -= cmd_len; 57250a708f8fSGustavo F. Padovan } 57260a708f8fSGustavo F. Padovan 57273b166295SMarcel Holtmann drop: 57280a708f8fSGustavo F. Padovan kfree_skb(skb); 57290a708f8fSGustavo F. Padovan } 57300a708f8fSGustavo F. Padovan 573147d1ec61SGustavo F. Padovan static int l2cap_check_fcs(struct l2cap_chan *chan, struct sk_buff *skb) 57320a708f8fSGustavo F. Padovan { 57330a708f8fSGustavo F. Padovan u16 our_fcs, rcv_fcs; 5734e4ca6d98SAndrei Emeltchenko int hdr_size; 5735e4ca6d98SAndrei Emeltchenko 5736e4ca6d98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 5737e4ca6d98SAndrei Emeltchenko hdr_size = L2CAP_EXT_HDR_SIZE; 5738e4ca6d98SAndrei Emeltchenko else 5739e4ca6d98SAndrei Emeltchenko hdr_size = L2CAP_ENH_HDR_SIZE; 57400a708f8fSGustavo F. Padovan 574147d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 574203a51213SAndrei Emeltchenko skb_trim(skb, skb->len - L2CAP_FCS_SIZE); 57430a708f8fSGustavo F. Padovan rcv_fcs = get_unaligned_le16(skb->data + skb->len); 57440a708f8fSGustavo F. Padovan our_fcs = crc16(0, skb->data - hdr_size, skb->len + hdr_size); 57450a708f8fSGustavo F. Padovan 57460a708f8fSGustavo F. Padovan if (our_fcs != rcv_fcs) 57470a708f8fSGustavo F. Padovan return -EBADMSG; 57480a708f8fSGustavo F. Padovan } 57490a708f8fSGustavo F. Padovan return 0; 57500a708f8fSGustavo F. Padovan } 57510a708f8fSGustavo F. Padovan 57526ea00485SMat Martineau static void l2cap_send_i_or_rr_or_rnr(struct l2cap_chan *chan) 57530a708f8fSGustavo F. Padovan { 5754e31f7633SMat Martineau struct l2cap_ctrl control; 57550a708f8fSGustavo F. Padovan 5756e31f7633SMat Martineau BT_DBG("chan %p", chan); 57570a708f8fSGustavo F. Padovan 5758e31f7633SMat Martineau memset(&control, 0, sizeof(control)); 5759e31f7633SMat Martineau control.sframe = 1; 5760e31f7633SMat Martineau control.final = 1; 5761e31f7633SMat Martineau control.reqseq = chan->buffer_seq; 5762e31f7633SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 57630a708f8fSGustavo F. Padovan 5764e2ab4353SGustavo F. Padovan if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 5765e31f7633SMat Martineau control.super = L2CAP_SUPER_RNR; 5766e31f7633SMat Martineau l2cap_send_sframe(chan, &control); 57670a708f8fSGustavo F. Padovan } 57680a708f8fSGustavo F. Padovan 5769e31f7633SMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, &chan->conn_state) && 5770e31f7633SMat Martineau chan->unacked_frames > 0) 5771e31f7633SMat Martineau __set_retrans_timer(chan); 57720a708f8fSGustavo F. Padovan 5773e31f7633SMat Martineau /* Send pending iframes */ 5774525cd185SGustavo F. Padovan l2cap_ertm_send(chan); 57750a708f8fSGustavo F. Padovan 5776e2ab4353SGustavo F. Padovan if (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state) && 5777e31f7633SMat Martineau test_bit(CONN_SEND_FBIT, &chan->conn_state)) { 5778e31f7633SMat Martineau /* F-bit wasn't sent in an s-frame or i-frame yet, so 5779e31f7633SMat Martineau * send it now. 5780e31f7633SMat Martineau */ 5781e31f7633SMat Martineau control.super = L2CAP_SUPER_RR; 5782e31f7633SMat Martineau l2cap_send_sframe(chan, &control); 57830a708f8fSGustavo F. Padovan } 57840a708f8fSGustavo F. Padovan } 57850a708f8fSGustavo F. Padovan 57862d792818SGustavo Padovan static void append_skb_frag(struct sk_buff *skb, struct sk_buff *new_frag, 57872d792818SGustavo Padovan struct sk_buff **last_frag) 57880a708f8fSGustavo F. Padovan { 578984084a31SMat Martineau /* skb->len reflects data in skb as well as all fragments 579084084a31SMat Martineau * skb->data_len reflects only data in fragments 579184084a31SMat Martineau */ 579284084a31SMat Martineau if (!skb_has_frag_list(skb)) 579384084a31SMat Martineau skb_shinfo(skb)->frag_list = new_frag; 579484084a31SMat Martineau 579584084a31SMat Martineau new_frag->next = NULL; 579684084a31SMat Martineau 579784084a31SMat Martineau (*last_frag)->next = new_frag; 579884084a31SMat Martineau *last_frag = new_frag; 579984084a31SMat Martineau 580084084a31SMat Martineau skb->len += new_frag->len; 580184084a31SMat Martineau skb->data_len += new_frag->len; 580284084a31SMat Martineau skb->truesize += new_frag->truesize; 580384084a31SMat Martineau } 580484084a31SMat Martineau 58054b51dae9SMat Martineau static int l2cap_reassemble_sdu(struct l2cap_chan *chan, struct sk_buff *skb, 58064b51dae9SMat Martineau struct l2cap_ctrl *control) 580784084a31SMat Martineau { 580884084a31SMat Martineau int err = -EINVAL; 58090a708f8fSGustavo F. Padovan 58104b51dae9SMat Martineau switch (control->sar) { 58117e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_UNSEGMENTED: 581284084a31SMat Martineau if (chan->sdu) 581384084a31SMat Martineau break; 58140a708f8fSGustavo F. Padovan 581580b98027SGustavo Padovan err = chan->ops->recv(chan, skb); 581684084a31SMat Martineau break; 58170a708f8fSGustavo F. Padovan 58187e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_START: 581984084a31SMat Martineau if (chan->sdu) 582084084a31SMat Martineau break; 58210a708f8fSGustavo F. Padovan 58226f61fd47SGustavo F. Padovan chan->sdu_len = get_unaligned_le16(skb->data); 582303a51213SAndrei Emeltchenko skb_pull(skb, L2CAP_SDULEN_SIZE); 58240a708f8fSGustavo F. Padovan 582584084a31SMat Martineau if (chan->sdu_len > chan->imtu) { 582684084a31SMat Martineau err = -EMSGSIZE; 582784084a31SMat Martineau break; 582884084a31SMat Martineau } 58290a708f8fSGustavo F. Padovan 583084084a31SMat Martineau if (skb->len >= chan->sdu_len) 583184084a31SMat Martineau break; 583284084a31SMat Martineau 583384084a31SMat Martineau chan->sdu = skb; 583484084a31SMat Martineau chan->sdu_last_frag = skb; 583584084a31SMat Martineau 583684084a31SMat Martineau skb = NULL; 583784084a31SMat Martineau err = 0; 58380a708f8fSGustavo F. Padovan break; 58390a708f8fSGustavo F. Padovan 58407e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_CONTINUE: 58416f61fd47SGustavo F. Padovan if (!chan->sdu) 584284084a31SMat Martineau break; 58430a708f8fSGustavo F. Padovan 584484084a31SMat Martineau append_skb_frag(chan->sdu, skb, 584584084a31SMat Martineau &chan->sdu_last_frag); 584684084a31SMat Martineau skb = NULL; 58470a708f8fSGustavo F. Padovan 584884084a31SMat Martineau if (chan->sdu->len >= chan->sdu_len) 584984084a31SMat Martineau break; 58500a708f8fSGustavo F. Padovan 585184084a31SMat Martineau err = 0; 58520a708f8fSGustavo F. Padovan break; 58530a708f8fSGustavo F. Padovan 58547e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_END: 58556f61fd47SGustavo F. Padovan if (!chan->sdu) 585684084a31SMat Martineau break; 58570a708f8fSGustavo F. Padovan 585884084a31SMat Martineau append_skb_frag(chan->sdu, skb, 585984084a31SMat Martineau &chan->sdu_last_frag); 586084084a31SMat Martineau skb = NULL; 58610a708f8fSGustavo F. Padovan 586284084a31SMat Martineau if (chan->sdu->len != chan->sdu_len) 586384084a31SMat Martineau break; 58640a708f8fSGustavo F. Padovan 586580b98027SGustavo Padovan err = chan->ops->recv(chan, chan->sdu); 58660a708f8fSGustavo F. Padovan 586784084a31SMat Martineau if (!err) { 586884084a31SMat Martineau /* Reassembly complete */ 586984084a31SMat Martineau chan->sdu = NULL; 587084084a31SMat Martineau chan->sdu_last_frag = NULL; 587184084a31SMat Martineau chan->sdu_len = 0; 58720a708f8fSGustavo F. Padovan } 58730a708f8fSGustavo F. Padovan break; 58740a708f8fSGustavo F. Padovan } 58750a708f8fSGustavo F. Padovan 587684084a31SMat Martineau if (err) { 58770a708f8fSGustavo F. Padovan kfree_skb(skb); 58786f61fd47SGustavo F. Padovan kfree_skb(chan->sdu); 58796f61fd47SGustavo F. Padovan chan->sdu = NULL; 588084084a31SMat Martineau chan->sdu_last_frag = NULL; 588184084a31SMat Martineau chan->sdu_len = 0; 588284084a31SMat Martineau } 58830a708f8fSGustavo F. Padovan 588484084a31SMat Martineau return err; 58850a708f8fSGustavo F. Padovan } 58860a708f8fSGustavo F. Padovan 588732b32735SMat Martineau static int l2cap_resegment(struct l2cap_chan *chan) 588832b32735SMat Martineau { 588932b32735SMat Martineau /* Placeholder */ 589032b32735SMat Martineau return 0; 589132b32735SMat Martineau } 589232b32735SMat Martineau 5893e328140fSMat Martineau void l2cap_chan_busy(struct l2cap_chan *chan, int busy) 58940a708f8fSGustavo F. Padovan { 589561aa4f5bSMat Martineau u8 event; 589661aa4f5bSMat Martineau 589761aa4f5bSMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 589861aa4f5bSMat Martineau return; 589961aa4f5bSMat Martineau 590061aa4f5bSMat Martineau event = busy ? L2CAP_EV_LOCAL_BUSY_DETECTED : L2CAP_EV_LOCAL_BUSY_CLEAR; 5901401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, event); 59020a708f8fSGustavo F. Padovan } 59030a708f8fSGustavo F. Padovan 5904d2a7ac5dSMat Martineau static int l2cap_rx_queued_iframes(struct l2cap_chan *chan) 5905d2a7ac5dSMat Martineau { 590663838725SMat Martineau int err = 0; 590763838725SMat Martineau /* Pass sequential frames to l2cap_reassemble_sdu() 590863838725SMat Martineau * until a gap is encountered. 590963838725SMat Martineau */ 591063838725SMat Martineau 591163838725SMat Martineau BT_DBG("chan %p", chan); 591263838725SMat Martineau 591363838725SMat Martineau while (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 591463838725SMat Martineau struct sk_buff *skb; 591563838725SMat Martineau BT_DBG("Searching for skb with txseq %d (queue len %d)", 591663838725SMat Martineau chan->buffer_seq, skb_queue_len(&chan->srej_q)); 591763838725SMat Martineau 591863838725SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->srej_q, chan->buffer_seq); 591963838725SMat Martineau 592063838725SMat Martineau if (!skb) 592163838725SMat Martineau break; 592263838725SMat Martineau 592363838725SMat Martineau skb_unlink(skb, &chan->srej_q); 592463838725SMat Martineau chan->buffer_seq = __next_seq(chan, chan->buffer_seq); 592563838725SMat Martineau err = l2cap_reassemble_sdu(chan, skb, &bt_cb(skb)->control); 592663838725SMat Martineau if (err) 592763838725SMat Martineau break; 592863838725SMat Martineau } 592963838725SMat Martineau 593063838725SMat Martineau if (skb_queue_empty(&chan->srej_q)) { 593163838725SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 593263838725SMat Martineau l2cap_send_ack(chan); 593363838725SMat Martineau } 593463838725SMat Martineau 593563838725SMat Martineau return err; 5936d2a7ac5dSMat Martineau } 5937d2a7ac5dSMat Martineau 5938d2a7ac5dSMat Martineau static void l2cap_handle_srej(struct l2cap_chan *chan, 5939d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 5940d2a7ac5dSMat Martineau { 5941f80842a8SMat Martineau struct sk_buff *skb; 5942f80842a8SMat Martineau 5943f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 5944f80842a8SMat Martineau 5945f80842a8SMat Martineau if (control->reqseq == chan->next_tx_seq) { 5946f80842a8SMat Martineau BT_DBG("Invalid reqseq %d, disconnecting", control->reqseq); 59475e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5948f80842a8SMat Martineau return; 5949f80842a8SMat Martineau } 5950f80842a8SMat Martineau 5951f80842a8SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, control->reqseq); 5952f80842a8SMat Martineau 5953f80842a8SMat Martineau if (skb == NULL) { 5954f80842a8SMat Martineau BT_DBG("Seq %d not available for retransmission", 5955f80842a8SMat Martineau control->reqseq); 5956f80842a8SMat Martineau return; 5957f80842a8SMat Martineau } 5958f80842a8SMat Martineau 5959f80842a8SMat Martineau if (chan->max_tx != 0 && bt_cb(skb)->control.retries >= chan->max_tx) { 5960f80842a8SMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 59615e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5962f80842a8SMat Martineau return; 5963f80842a8SMat Martineau } 5964f80842a8SMat Martineau 5965f80842a8SMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 5966f80842a8SMat Martineau 5967f80842a8SMat Martineau if (control->poll) { 5968f80842a8SMat Martineau l2cap_pass_to_tx(chan, control); 5969f80842a8SMat Martineau 5970f80842a8SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 5971f80842a8SMat Martineau l2cap_retransmit(chan, control); 5972f80842a8SMat Martineau l2cap_ertm_send(chan); 5973f80842a8SMat Martineau 5974f80842a8SMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) { 5975f80842a8SMat Martineau set_bit(CONN_SREJ_ACT, &chan->conn_state); 5976f80842a8SMat Martineau chan->srej_save_reqseq = control->reqseq; 5977f80842a8SMat Martineau } 5978f80842a8SMat Martineau } else { 5979f80842a8SMat Martineau l2cap_pass_to_tx_fbit(chan, control); 5980f80842a8SMat Martineau 5981f80842a8SMat Martineau if (control->final) { 5982f80842a8SMat Martineau if (chan->srej_save_reqseq != control->reqseq || 5983f80842a8SMat Martineau !test_and_clear_bit(CONN_SREJ_ACT, 5984f80842a8SMat Martineau &chan->conn_state)) 5985f80842a8SMat Martineau l2cap_retransmit(chan, control); 5986f80842a8SMat Martineau } else { 5987f80842a8SMat Martineau l2cap_retransmit(chan, control); 5988f80842a8SMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) { 5989f80842a8SMat Martineau set_bit(CONN_SREJ_ACT, &chan->conn_state); 5990f80842a8SMat Martineau chan->srej_save_reqseq = control->reqseq; 5991f80842a8SMat Martineau } 5992f80842a8SMat Martineau } 5993f80842a8SMat Martineau } 5994d2a7ac5dSMat Martineau } 5995d2a7ac5dSMat Martineau 5996d2a7ac5dSMat Martineau static void l2cap_handle_rej(struct l2cap_chan *chan, 5997d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 5998d2a7ac5dSMat Martineau { 5999fcd289dfSMat Martineau struct sk_buff *skb; 6000fcd289dfSMat Martineau 6001fcd289dfSMat Martineau BT_DBG("chan %p, control %p", chan, control); 6002fcd289dfSMat Martineau 6003fcd289dfSMat Martineau if (control->reqseq == chan->next_tx_seq) { 6004fcd289dfSMat Martineau BT_DBG("Invalid reqseq %d, disconnecting", control->reqseq); 60055e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6006fcd289dfSMat Martineau return; 6007fcd289dfSMat Martineau } 6008fcd289dfSMat Martineau 6009fcd289dfSMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, control->reqseq); 6010fcd289dfSMat Martineau 6011fcd289dfSMat Martineau if (chan->max_tx && skb && 6012fcd289dfSMat Martineau bt_cb(skb)->control.retries >= chan->max_tx) { 6013fcd289dfSMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 60145e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6015fcd289dfSMat Martineau return; 6016fcd289dfSMat Martineau } 6017fcd289dfSMat Martineau 6018fcd289dfSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6019fcd289dfSMat Martineau 6020fcd289dfSMat Martineau l2cap_pass_to_tx(chan, control); 6021fcd289dfSMat Martineau 6022fcd289dfSMat Martineau if (control->final) { 6023fcd289dfSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, &chan->conn_state)) 6024fcd289dfSMat Martineau l2cap_retransmit_all(chan, control); 6025fcd289dfSMat Martineau } else { 6026fcd289dfSMat Martineau l2cap_retransmit_all(chan, control); 6027fcd289dfSMat Martineau l2cap_ertm_send(chan); 6028fcd289dfSMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) 6029fcd289dfSMat Martineau set_bit(CONN_REJ_ACT, &chan->conn_state); 6030fcd289dfSMat Martineau } 6031d2a7ac5dSMat Martineau } 6032d2a7ac5dSMat Martineau 60334b51dae9SMat Martineau static u8 l2cap_classify_txseq(struct l2cap_chan *chan, u16 txseq) 60344b51dae9SMat Martineau { 60354b51dae9SMat Martineau BT_DBG("chan %p, txseq %d", chan, txseq); 60364b51dae9SMat Martineau 60374b51dae9SMat Martineau BT_DBG("last_acked_seq %d, expected_tx_seq %d", chan->last_acked_seq, 60384b51dae9SMat Martineau chan->expected_tx_seq); 60394b51dae9SMat Martineau 60404b51dae9SMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 60414b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= 60424b51dae9SMat Martineau chan->tx_win) { 60434b51dae9SMat Martineau /* See notes below regarding "double poll" and 60444b51dae9SMat Martineau * invalid packets. 60454b51dae9SMat Martineau */ 60464b51dae9SMat Martineau if (chan->tx_win <= ((chan->tx_win_max + 1) >> 1)) { 60474b51dae9SMat Martineau BT_DBG("Invalid/Ignore - after SREJ"); 60484b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID_IGNORE; 60494b51dae9SMat Martineau } else { 60504b51dae9SMat Martineau BT_DBG("Invalid - in window after SREJ sent"); 60514b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 60524b51dae9SMat Martineau } 60534b51dae9SMat Martineau } 60544b51dae9SMat Martineau 60554b51dae9SMat Martineau if (chan->srej_list.head == txseq) { 60564b51dae9SMat Martineau BT_DBG("Expected SREJ"); 60574b51dae9SMat Martineau return L2CAP_TXSEQ_EXPECTED_SREJ; 60584b51dae9SMat Martineau } 60594b51dae9SMat Martineau 60604b51dae9SMat Martineau if (l2cap_ertm_seq_in_queue(&chan->srej_q, txseq)) { 60614b51dae9SMat Martineau BT_DBG("Duplicate SREJ - txseq already stored"); 60624b51dae9SMat Martineau return L2CAP_TXSEQ_DUPLICATE_SREJ; 60634b51dae9SMat Martineau } 60644b51dae9SMat Martineau 60654b51dae9SMat Martineau if (l2cap_seq_list_contains(&chan->srej_list, txseq)) { 60664b51dae9SMat Martineau BT_DBG("Unexpected SREJ - not requested"); 60674b51dae9SMat Martineau return L2CAP_TXSEQ_UNEXPECTED_SREJ; 60684b51dae9SMat Martineau } 60694b51dae9SMat Martineau } 60704b51dae9SMat Martineau 60714b51dae9SMat Martineau if (chan->expected_tx_seq == txseq) { 60724b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= 60734b51dae9SMat Martineau chan->tx_win) { 60744b51dae9SMat Martineau BT_DBG("Invalid - txseq outside tx window"); 60754b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 60764b51dae9SMat Martineau } else { 60774b51dae9SMat Martineau BT_DBG("Expected"); 60784b51dae9SMat Martineau return L2CAP_TXSEQ_EXPECTED; 60794b51dae9SMat Martineau } 60804b51dae9SMat Martineau } 60814b51dae9SMat Martineau 60824b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) < 60832d792818SGustavo Padovan __seq_offset(chan, chan->expected_tx_seq, chan->last_acked_seq)) { 60844b51dae9SMat Martineau BT_DBG("Duplicate - expected_tx_seq later than txseq"); 60854b51dae9SMat Martineau return L2CAP_TXSEQ_DUPLICATE; 60864b51dae9SMat Martineau } 60874b51dae9SMat Martineau 60884b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= chan->tx_win) { 60894b51dae9SMat Martineau /* A source of invalid packets is a "double poll" condition, 60904b51dae9SMat Martineau * where delays cause us to send multiple poll packets. If 60914b51dae9SMat Martineau * the remote stack receives and processes both polls, 60924b51dae9SMat Martineau * sequence numbers can wrap around in such a way that a 60934b51dae9SMat Martineau * resent frame has a sequence number that looks like new data 60944b51dae9SMat Martineau * with a sequence gap. This would trigger an erroneous SREJ 60954b51dae9SMat Martineau * request. 60964b51dae9SMat Martineau * 60974b51dae9SMat Martineau * Fortunately, this is impossible with a tx window that's 60984b51dae9SMat Martineau * less than half of the maximum sequence number, which allows 60994b51dae9SMat Martineau * invalid frames to be safely ignored. 61004b51dae9SMat Martineau * 61014b51dae9SMat Martineau * With tx window sizes greater than half of the tx window 61024b51dae9SMat Martineau * maximum, the frame is invalid and cannot be ignored. This 61034b51dae9SMat Martineau * causes a disconnect. 61044b51dae9SMat Martineau */ 61054b51dae9SMat Martineau 61064b51dae9SMat Martineau if (chan->tx_win <= ((chan->tx_win_max + 1) >> 1)) { 61074b51dae9SMat Martineau BT_DBG("Invalid/Ignore - txseq outside tx window"); 61084b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID_IGNORE; 61094b51dae9SMat Martineau } else { 61104b51dae9SMat Martineau BT_DBG("Invalid - txseq outside tx window"); 61114b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 61124b51dae9SMat Martineau } 61134b51dae9SMat Martineau } else { 61144b51dae9SMat Martineau BT_DBG("Unexpected - txseq indicates missing frames"); 61154b51dae9SMat Martineau return L2CAP_TXSEQ_UNEXPECTED; 61164b51dae9SMat Martineau } 61174b51dae9SMat Martineau } 61184b51dae9SMat Martineau 6119d2a7ac5dSMat Martineau static int l2cap_rx_state_recv(struct l2cap_chan *chan, 6120d2a7ac5dSMat Martineau struct l2cap_ctrl *control, 6121d2a7ac5dSMat Martineau struct sk_buff *skb, u8 event) 6122d2a7ac5dSMat Martineau { 6123d2a7ac5dSMat Martineau int err = 0; 6124941247f9SPeter Senna Tschudin bool skb_in_use = false; 6125d2a7ac5dSMat Martineau 6126d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 6127d2a7ac5dSMat Martineau event); 6128d2a7ac5dSMat Martineau 6129d2a7ac5dSMat Martineau switch (event) { 6130d2a7ac5dSMat Martineau case L2CAP_EV_RECV_IFRAME: 6131d2a7ac5dSMat Martineau switch (l2cap_classify_txseq(chan, control->txseq)) { 6132d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED: 6133d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6134d2a7ac5dSMat Martineau 6135d2a7ac5dSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 6136d2a7ac5dSMat Martineau BT_DBG("Busy, discarding expected seq %d", 6137d2a7ac5dSMat Martineau control->txseq); 6138d2a7ac5dSMat Martineau break; 6139d2a7ac5dSMat Martineau } 6140d2a7ac5dSMat Martineau 6141d2a7ac5dSMat Martineau chan->expected_tx_seq = __next_seq(chan, 6142d2a7ac5dSMat Martineau control->txseq); 6143d2a7ac5dSMat Martineau 6144d2a7ac5dSMat Martineau chan->buffer_seq = chan->expected_tx_seq; 6145941247f9SPeter Senna Tschudin skb_in_use = true; 6146d2a7ac5dSMat Martineau 6147d2a7ac5dSMat Martineau err = l2cap_reassemble_sdu(chan, skb, control); 6148d2a7ac5dSMat Martineau if (err) 6149d2a7ac5dSMat Martineau break; 6150d2a7ac5dSMat Martineau 6151d2a7ac5dSMat Martineau if (control->final) { 6152d2a7ac5dSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, 6153d2a7ac5dSMat Martineau &chan->conn_state)) { 6154d2a7ac5dSMat Martineau control->final = 0; 6155d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 6156d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6157d2a7ac5dSMat Martineau } 6158d2a7ac5dSMat Martineau } 6159d2a7ac5dSMat Martineau 6160d2a7ac5dSMat Martineau if (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) 6161d2a7ac5dSMat Martineau l2cap_send_ack(chan); 6162d2a7ac5dSMat Martineau break; 6163d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED: 6164d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6165d2a7ac5dSMat Martineau 6166d2a7ac5dSMat Martineau /* Can't issue SREJ frames in the local busy state. 6167d2a7ac5dSMat Martineau * Drop this frame, it will be seen as missing 6168d2a7ac5dSMat Martineau * when local busy is exited. 6169d2a7ac5dSMat Martineau */ 6170d2a7ac5dSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 6171d2a7ac5dSMat Martineau BT_DBG("Busy, discarding unexpected seq %d", 6172d2a7ac5dSMat Martineau control->txseq); 6173d2a7ac5dSMat Martineau break; 6174d2a7ac5dSMat Martineau } 6175d2a7ac5dSMat Martineau 6176d2a7ac5dSMat Martineau /* There was a gap in the sequence, so an SREJ 6177d2a7ac5dSMat Martineau * must be sent for each missing frame. The 6178d2a7ac5dSMat Martineau * current frame is stored for later use. 6179d2a7ac5dSMat Martineau */ 6180d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6181941247f9SPeter Senna Tschudin skb_in_use = true; 6182d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6183d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6184d2a7ac5dSMat Martineau 6185d2a7ac5dSMat Martineau clear_bit(CONN_SREJ_ACT, &chan->conn_state); 6186d2a7ac5dSMat Martineau l2cap_seq_list_clear(&chan->srej_list); 6187d2a7ac5dSMat Martineau l2cap_send_srej(chan, control->txseq); 6188d2a7ac5dSMat Martineau 6189d2a7ac5dSMat Martineau chan->rx_state = L2CAP_RX_STATE_SREJ_SENT; 6190d2a7ac5dSMat Martineau break; 6191d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE: 6192d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6193d2a7ac5dSMat Martineau break; 6194d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID_IGNORE: 6195d2a7ac5dSMat Martineau break; 6196d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID: 6197d2a7ac5dSMat Martineau default: 61985e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6199d2a7ac5dSMat Martineau break; 6200d2a7ac5dSMat Martineau } 6201d2a7ac5dSMat Martineau break; 6202d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RR: 6203d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6204d2a7ac5dSMat Martineau if (control->final) { 6205d2a7ac5dSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6206d2a7ac5dSMat Martineau 6207e6a3ee6eSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, &chan->conn_state) && 6208e6a3ee6eSMat Martineau !__chan_is_moving(chan)) { 6209d2a7ac5dSMat Martineau control->final = 0; 6210d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 6211d2a7ac5dSMat Martineau } 6212d2a7ac5dSMat Martineau 6213d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6214d2a7ac5dSMat Martineau } else if (control->poll) { 6215d2a7ac5dSMat Martineau l2cap_send_i_or_rr_or_rnr(chan); 6216d2a7ac5dSMat Martineau } else { 6217d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 6218d2a7ac5dSMat Martineau &chan->conn_state) && 6219d2a7ac5dSMat Martineau chan->unacked_frames) 6220d2a7ac5dSMat Martineau __set_retrans_timer(chan); 6221d2a7ac5dSMat Martineau 6222d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6223d2a7ac5dSMat Martineau } 6224d2a7ac5dSMat Martineau break; 6225d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RNR: 6226d2a7ac5dSMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6227d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6228d2a7ac5dSMat Martineau if (control && control->poll) { 6229d2a7ac5dSMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 6230d2a7ac5dSMat Martineau l2cap_send_rr_or_rnr(chan, 0); 6231d2a7ac5dSMat Martineau } 6232d2a7ac5dSMat Martineau __clear_retrans_timer(chan); 6233d2a7ac5dSMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 6234d2a7ac5dSMat Martineau break; 6235d2a7ac5dSMat Martineau case L2CAP_EV_RECV_REJ: 6236d2a7ac5dSMat Martineau l2cap_handle_rej(chan, control); 6237d2a7ac5dSMat Martineau break; 6238d2a7ac5dSMat Martineau case L2CAP_EV_RECV_SREJ: 6239d2a7ac5dSMat Martineau l2cap_handle_srej(chan, control); 6240d2a7ac5dSMat Martineau break; 6241d2a7ac5dSMat Martineau default: 6242d2a7ac5dSMat Martineau break; 6243d2a7ac5dSMat Martineau } 6244d2a7ac5dSMat Martineau 6245d2a7ac5dSMat Martineau if (skb && !skb_in_use) { 6246d2a7ac5dSMat Martineau BT_DBG("Freeing %p", skb); 6247d2a7ac5dSMat Martineau kfree_skb(skb); 6248d2a7ac5dSMat Martineau } 6249d2a7ac5dSMat Martineau 6250d2a7ac5dSMat Martineau return err; 6251d2a7ac5dSMat Martineau } 6252d2a7ac5dSMat Martineau 6253d2a7ac5dSMat Martineau static int l2cap_rx_state_srej_sent(struct l2cap_chan *chan, 6254d2a7ac5dSMat Martineau struct l2cap_ctrl *control, 6255d2a7ac5dSMat Martineau struct sk_buff *skb, u8 event) 6256d2a7ac5dSMat Martineau { 6257d2a7ac5dSMat Martineau int err = 0; 6258d2a7ac5dSMat Martineau u16 txseq = control->txseq; 6259941247f9SPeter Senna Tschudin bool skb_in_use = false; 6260d2a7ac5dSMat Martineau 6261d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 6262d2a7ac5dSMat Martineau event); 6263d2a7ac5dSMat Martineau 6264d2a7ac5dSMat Martineau switch (event) { 6265d2a7ac5dSMat Martineau case L2CAP_EV_RECV_IFRAME: 6266d2a7ac5dSMat Martineau switch (l2cap_classify_txseq(chan, txseq)) { 6267d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED: 6268d2a7ac5dSMat Martineau /* Keep frame for reassembly later */ 6269d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6270d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6271941247f9SPeter Senna Tschudin skb_in_use = true; 6272d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6273d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6274d2a7ac5dSMat Martineau 6275d2a7ac5dSMat Martineau chan->expected_tx_seq = __next_seq(chan, txseq); 6276d2a7ac5dSMat Martineau break; 6277d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED_SREJ: 6278d2a7ac5dSMat Martineau l2cap_seq_list_pop(&chan->srej_list); 6279d2a7ac5dSMat Martineau 6280d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6281d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6282941247f9SPeter Senna Tschudin skb_in_use = true; 6283d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6284d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6285d2a7ac5dSMat Martineau 6286d2a7ac5dSMat Martineau err = l2cap_rx_queued_iframes(chan); 6287d2a7ac5dSMat Martineau if (err) 6288d2a7ac5dSMat Martineau break; 6289d2a7ac5dSMat Martineau 6290d2a7ac5dSMat Martineau break; 6291d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED: 6292d2a7ac5dSMat Martineau /* Got a frame that can't be reassembled yet. 6293d2a7ac5dSMat Martineau * Save it for later, and send SREJs to cover 6294d2a7ac5dSMat Martineau * the missing frames. 6295d2a7ac5dSMat Martineau */ 6296d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6297941247f9SPeter Senna Tschudin skb_in_use = true; 6298d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6299d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6300d2a7ac5dSMat Martineau 6301d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6302d2a7ac5dSMat Martineau l2cap_send_srej(chan, control->txseq); 6303d2a7ac5dSMat Martineau break; 6304d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED_SREJ: 6305d2a7ac5dSMat Martineau /* This frame was requested with an SREJ, but 6306d2a7ac5dSMat Martineau * some expected retransmitted frames are 6307d2a7ac5dSMat Martineau * missing. Request retransmission of missing 6308d2a7ac5dSMat Martineau * SREJ'd frames. 6309d2a7ac5dSMat Martineau */ 6310d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6311941247f9SPeter Senna Tschudin skb_in_use = true; 6312d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6313d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6314d2a7ac5dSMat Martineau 6315d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6316d2a7ac5dSMat Martineau l2cap_send_srej_list(chan, control->txseq); 6317d2a7ac5dSMat Martineau break; 6318d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE_SREJ: 6319d2a7ac5dSMat Martineau /* We've already queued this frame. Drop this copy. */ 6320d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6321d2a7ac5dSMat Martineau break; 6322d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE: 6323d2a7ac5dSMat Martineau /* Expecting a later sequence number, so this frame 6324d2a7ac5dSMat Martineau * was already received. Ignore it completely. 6325d2a7ac5dSMat Martineau */ 6326d2a7ac5dSMat Martineau break; 6327d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID_IGNORE: 6328d2a7ac5dSMat Martineau break; 6329d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID: 6330d2a7ac5dSMat Martineau default: 63315e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6332d2a7ac5dSMat Martineau break; 6333d2a7ac5dSMat Martineau } 6334d2a7ac5dSMat Martineau break; 6335d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RR: 6336d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6337d2a7ac5dSMat Martineau if (control->final) { 6338d2a7ac5dSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6339d2a7ac5dSMat Martineau 6340d2a7ac5dSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, 6341d2a7ac5dSMat Martineau &chan->conn_state)) { 6342d2a7ac5dSMat Martineau control->final = 0; 6343d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 6344d2a7ac5dSMat Martineau } 6345d2a7ac5dSMat Martineau 6346d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6347d2a7ac5dSMat Martineau } else if (control->poll) { 6348d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 6349d2a7ac5dSMat Martineau &chan->conn_state) && 6350d2a7ac5dSMat Martineau chan->unacked_frames) { 6351d2a7ac5dSMat Martineau __set_retrans_timer(chan); 6352d2a7ac5dSMat Martineau } 6353d2a7ac5dSMat Martineau 6354d2a7ac5dSMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 6355d2a7ac5dSMat Martineau l2cap_send_srej_tail(chan); 6356d2a7ac5dSMat Martineau } else { 6357d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 6358d2a7ac5dSMat Martineau &chan->conn_state) && 6359d2a7ac5dSMat Martineau chan->unacked_frames) 6360d2a7ac5dSMat Martineau __set_retrans_timer(chan); 6361d2a7ac5dSMat Martineau 6362d2a7ac5dSMat Martineau l2cap_send_ack(chan); 6363d2a7ac5dSMat Martineau } 6364d2a7ac5dSMat Martineau break; 6365d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RNR: 6366d2a7ac5dSMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6367d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6368d2a7ac5dSMat Martineau if (control->poll) { 6369d2a7ac5dSMat Martineau l2cap_send_srej_tail(chan); 6370d2a7ac5dSMat Martineau } else { 6371d2a7ac5dSMat Martineau struct l2cap_ctrl rr_control; 6372d2a7ac5dSMat Martineau memset(&rr_control, 0, sizeof(rr_control)); 6373d2a7ac5dSMat Martineau rr_control.sframe = 1; 6374d2a7ac5dSMat Martineau rr_control.super = L2CAP_SUPER_RR; 6375d2a7ac5dSMat Martineau rr_control.reqseq = chan->buffer_seq; 6376d2a7ac5dSMat Martineau l2cap_send_sframe(chan, &rr_control); 6377d2a7ac5dSMat Martineau } 6378d2a7ac5dSMat Martineau 6379d2a7ac5dSMat Martineau break; 6380d2a7ac5dSMat Martineau case L2CAP_EV_RECV_REJ: 6381d2a7ac5dSMat Martineau l2cap_handle_rej(chan, control); 6382d2a7ac5dSMat Martineau break; 6383d2a7ac5dSMat Martineau case L2CAP_EV_RECV_SREJ: 6384d2a7ac5dSMat Martineau l2cap_handle_srej(chan, control); 6385d2a7ac5dSMat Martineau break; 6386d2a7ac5dSMat Martineau } 6387d2a7ac5dSMat Martineau 6388d2a7ac5dSMat Martineau if (skb && !skb_in_use) { 6389d2a7ac5dSMat Martineau BT_DBG("Freeing %p", skb); 6390d2a7ac5dSMat Martineau kfree_skb(skb); 6391d2a7ac5dSMat Martineau } 6392d2a7ac5dSMat Martineau 6393d2a7ac5dSMat Martineau return err; 6394d2a7ac5dSMat Martineau } 6395d2a7ac5dSMat Martineau 639632b32735SMat Martineau static int l2cap_finish_move(struct l2cap_chan *chan) 639732b32735SMat Martineau { 639832b32735SMat Martineau BT_DBG("chan %p", chan); 639932b32735SMat Martineau 640032b32735SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 640132b32735SMat Martineau 640232b32735SMat Martineau if (chan->hs_hcon) 640332b32735SMat Martineau chan->conn->mtu = chan->hs_hcon->hdev->block_mtu; 640432b32735SMat Martineau else 640532b32735SMat Martineau chan->conn->mtu = chan->conn->hcon->hdev->acl_mtu; 640632b32735SMat Martineau 640732b32735SMat Martineau return l2cap_resegment(chan); 640832b32735SMat Martineau } 640932b32735SMat Martineau 641032b32735SMat Martineau static int l2cap_rx_state_wait_p(struct l2cap_chan *chan, 641132b32735SMat Martineau struct l2cap_ctrl *control, 641232b32735SMat Martineau struct sk_buff *skb, u8 event) 641332b32735SMat Martineau { 641432b32735SMat Martineau int err; 641532b32735SMat Martineau 641632b32735SMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 641732b32735SMat Martineau event); 641832b32735SMat Martineau 641932b32735SMat Martineau if (!control->poll) 642032b32735SMat Martineau return -EPROTO; 642132b32735SMat Martineau 642232b32735SMat Martineau l2cap_process_reqseq(chan, control->reqseq); 642332b32735SMat Martineau 642432b32735SMat Martineau if (!skb_queue_empty(&chan->tx_q)) 642532b32735SMat Martineau chan->tx_send_head = skb_peek(&chan->tx_q); 642632b32735SMat Martineau else 642732b32735SMat Martineau chan->tx_send_head = NULL; 642832b32735SMat Martineau 642932b32735SMat Martineau /* Rewind next_tx_seq to the point expected 643032b32735SMat Martineau * by the receiver. 643132b32735SMat Martineau */ 643232b32735SMat Martineau chan->next_tx_seq = control->reqseq; 643332b32735SMat Martineau chan->unacked_frames = 0; 643432b32735SMat Martineau 643532b32735SMat Martineau err = l2cap_finish_move(chan); 643632b32735SMat Martineau if (err) 643732b32735SMat Martineau return err; 643832b32735SMat Martineau 643932b32735SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 644032b32735SMat Martineau l2cap_send_i_or_rr_or_rnr(chan); 644132b32735SMat Martineau 644232b32735SMat Martineau if (event == L2CAP_EV_RECV_IFRAME) 644332b32735SMat Martineau return -EPROTO; 644432b32735SMat Martineau 644532b32735SMat Martineau return l2cap_rx_state_recv(chan, control, NULL, event); 644632b32735SMat Martineau } 644732b32735SMat Martineau 644832b32735SMat Martineau static int l2cap_rx_state_wait_f(struct l2cap_chan *chan, 644932b32735SMat Martineau struct l2cap_ctrl *control, 645032b32735SMat Martineau struct sk_buff *skb, u8 event) 645132b32735SMat Martineau { 645232b32735SMat Martineau int err; 645332b32735SMat Martineau 645432b32735SMat Martineau if (!control->final) 645532b32735SMat Martineau return -EPROTO; 645632b32735SMat Martineau 645732b32735SMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 645832b32735SMat Martineau 645932b32735SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 646032b32735SMat Martineau l2cap_process_reqseq(chan, control->reqseq); 646132b32735SMat Martineau 646232b32735SMat Martineau if (!skb_queue_empty(&chan->tx_q)) 646332b32735SMat Martineau chan->tx_send_head = skb_peek(&chan->tx_q); 646432b32735SMat Martineau else 646532b32735SMat Martineau chan->tx_send_head = NULL; 646632b32735SMat Martineau 646732b32735SMat Martineau /* Rewind next_tx_seq to the point expected 646832b32735SMat Martineau * by the receiver. 646932b32735SMat Martineau */ 647032b32735SMat Martineau chan->next_tx_seq = control->reqseq; 647132b32735SMat Martineau chan->unacked_frames = 0; 647232b32735SMat Martineau 647332b32735SMat Martineau if (chan->hs_hcon) 647432b32735SMat Martineau chan->conn->mtu = chan->hs_hcon->hdev->block_mtu; 647532b32735SMat Martineau else 647632b32735SMat Martineau chan->conn->mtu = chan->conn->hcon->hdev->acl_mtu; 647732b32735SMat Martineau 647832b32735SMat Martineau err = l2cap_resegment(chan); 647932b32735SMat Martineau 648032b32735SMat Martineau if (!err) 648132b32735SMat Martineau err = l2cap_rx_state_recv(chan, control, skb, event); 648232b32735SMat Martineau 648332b32735SMat Martineau return err; 648432b32735SMat Martineau } 648532b32735SMat Martineau 6486d2a7ac5dSMat Martineau static bool __valid_reqseq(struct l2cap_chan *chan, u16 reqseq) 6487d2a7ac5dSMat Martineau { 6488d2a7ac5dSMat Martineau /* Make sure reqseq is for a packet that has been sent but not acked */ 6489d2a7ac5dSMat Martineau u16 unacked; 6490d2a7ac5dSMat Martineau 6491d2a7ac5dSMat Martineau unacked = __seq_offset(chan, chan->next_tx_seq, chan->expected_ack_seq); 6492d2a7ac5dSMat Martineau return __seq_offset(chan, chan->next_tx_seq, reqseq) <= unacked; 6493d2a7ac5dSMat Martineau } 6494d2a7ac5dSMat Martineau 6495cec8ab6eSMat Martineau static int l2cap_rx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 6496cec8ab6eSMat Martineau struct sk_buff *skb, u8 event) 64970a708f8fSGustavo F. Padovan { 6498d2a7ac5dSMat Martineau int err = 0; 6499d2a7ac5dSMat Martineau 6500d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d, state %d", chan, 6501d2a7ac5dSMat Martineau control, skb, event, chan->rx_state); 6502d2a7ac5dSMat Martineau 6503d2a7ac5dSMat Martineau if (__valid_reqseq(chan, control->reqseq)) { 6504d2a7ac5dSMat Martineau switch (chan->rx_state) { 6505d2a7ac5dSMat Martineau case L2CAP_RX_STATE_RECV: 6506d2a7ac5dSMat Martineau err = l2cap_rx_state_recv(chan, control, skb, event); 6507d2a7ac5dSMat Martineau break; 6508d2a7ac5dSMat Martineau case L2CAP_RX_STATE_SREJ_SENT: 6509d2a7ac5dSMat Martineau err = l2cap_rx_state_srej_sent(chan, control, skb, 6510d2a7ac5dSMat Martineau event); 6511d2a7ac5dSMat Martineau break; 651232b32735SMat Martineau case L2CAP_RX_STATE_WAIT_P: 651332b32735SMat Martineau err = l2cap_rx_state_wait_p(chan, control, skb, event); 651432b32735SMat Martineau break; 651532b32735SMat Martineau case L2CAP_RX_STATE_WAIT_F: 651632b32735SMat Martineau err = l2cap_rx_state_wait_f(chan, control, skb, event); 651732b32735SMat Martineau break; 6518d2a7ac5dSMat Martineau default: 6519d2a7ac5dSMat Martineau /* shut it down */ 6520d2a7ac5dSMat Martineau break; 6521d2a7ac5dSMat Martineau } 6522d2a7ac5dSMat Martineau } else { 6523d2a7ac5dSMat Martineau BT_DBG("Invalid reqseq %d (next_tx_seq %d, expected_ack_seq %d", 6524d2a7ac5dSMat Martineau control->reqseq, chan->next_tx_seq, 6525d2a7ac5dSMat Martineau chan->expected_ack_seq); 65265e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6527d2a7ac5dSMat Martineau } 6528d2a7ac5dSMat Martineau 6529d2a7ac5dSMat Martineau return err; 6530cec8ab6eSMat Martineau } 6531cec8ab6eSMat Martineau 6532cec8ab6eSMat Martineau static int l2cap_stream_rx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 6533cec8ab6eSMat Martineau struct sk_buff *skb) 6534cec8ab6eSMat Martineau { 65354b51dae9SMat Martineau int err = 0; 65364b51dae9SMat Martineau 65374b51dae9SMat Martineau BT_DBG("chan %p, control %p, skb %p, state %d", chan, control, skb, 65384b51dae9SMat Martineau chan->rx_state); 65394b51dae9SMat Martineau 65404b51dae9SMat Martineau if (l2cap_classify_txseq(chan, control->txseq) == 65414b51dae9SMat Martineau L2CAP_TXSEQ_EXPECTED) { 65424b51dae9SMat Martineau l2cap_pass_to_tx(chan, control); 65434b51dae9SMat Martineau 65444b51dae9SMat Martineau BT_DBG("buffer_seq %d->%d", chan->buffer_seq, 65454b51dae9SMat Martineau __next_seq(chan, chan->buffer_seq)); 65464b51dae9SMat Martineau 65474b51dae9SMat Martineau chan->buffer_seq = __next_seq(chan, chan->buffer_seq); 65484b51dae9SMat Martineau 65494b51dae9SMat Martineau l2cap_reassemble_sdu(chan, skb, control); 65504b51dae9SMat Martineau } else { 65514b51dae9SMat Martineau if (chan->sdu) { 65524b51dae9SMat Martineau kfree_skb(chan->sdu); 65534b51dae9SMat Martineau chan->sdu = NULL; 65544b51dae9SMat Martineau } 65554b51dae9SMat Martineau chan->sdu_last_frag = NULL; 65564b51dae9SMat Martineau chan->sdu_len = 0; 65574b51dae9SMat Martineau 65584b51dae9SMat Martineau if (skb) { 65594b51dae9SMat Martineau BT_DBG("Freeing %p", skb); 65604b51dae9SMat Martineau kfree_skb(skb); 65614b51dae9SMat Martineau } 65624b51dae9SMat Martineau } 65634b51dae9SMat Martineau 65644b51dae9SMat Martineau chan->last_acked_seq = control->txseq; 65654b51dae9SMat Martineau chan->expected_tx_seq = __next_seq(chan, control->txseq); 65664b51dae9SMat Martineau 65674b51dae9SMat Martineau return err; 6568cec8ab6eSMat Martineau } 6569cec8ab6eSMat Martineau 6570cec8ab6eSMat Martineau static int l2cap_data_rcv(struct l2cap_chan *chan, struct sk_buff *skb) 6571cec8ab6eSMat Martineau { 6572cec8ab6eSMat Martineau struct l2cap_ctrl *control = &bt_cb(skb)->control; 6573cec8ab6eSMat Martineau u16 len; 6574cec8ab6eSMat Martineau u8 event; 65750a708f8fSGustavo F. Padovan 6576b76bbd66SMat Martineau __unpack_control(chan, skb); 6577b76bbd66SMat Martineau 65780a708f8fSGustavo F. Padovan len = skb->len; 65790a708f8fSGustavo F. Padovan 65800a708f8fSGustavo F. Padovan /* 65810a708f8fSGustavo F. Padovan * We can just drop the corrupted I-frame here. 65820a708f8fSGustavo F. Padovan * Receiver will miss it and start proper recovery 6583cec8ab6eSMat Martineau * procedures and ask for retransmission. 65840a708f8fSGustavo F. Padovan */ 658547d1ec61SGustavo F. Padovan if (l2cap_check_fcs(chan, skb)) 65860a708f8fSGustavo F. Padovan goto drop; 65870a708f8fSGustavo F. Padovan 6588cec8ab6eSMat Martineau if (!control->sframe && control->sar == L2CAP_SAR_START) 658903a51213SAndrei Emeltchenko len -= L2CAP_SDULEN_SIZE; 65900a708f8fSGustavo F. Padovan 659147d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 659203a51213SAndrei Emeltchenko len -= L2CAP_FCS_SIZE; 65930a708f8fSGustavo F. Padovan 659447d1ec61SGustavo F. Padovan if (len > chan->mps) { 65955e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 65960a708f8fSGustavo F. Padovan goto drop; 65970a708f8fSGustavo F. Padovan } 65980a708f8fSGustavo F. Padovan 6599cec8ab6eSMat Martineau if (!control->sframe) { 6600cec8ab6eSMat Martineau int err; 66010a708f8fSGustavo F. Padovan 6602cec8ab6eSMat Martineau BT_DBG("iframe sar %d, reqseq %d, final %d, txseq %d", 6603cec8ab6eSMat Martineau control->sar, control->reqseq, control->final, 6604cec8ab6eSMat Martineau control->txseq); 6605836be934SAndrei Emeltchenko 6606cec8ab6eSMat Martineau /* Validate F-bit - F=0 always valid, F=1 only 6607cec8ab6eSMat Martineau * valid in TX WAIT_F 6608cec8ab6eSMat Martineau */ 6609cec8ab6eSMat Martineau if (control->final && chan->tx_state != L2CAP_TX_STATE_WAIT_F) 66100a708f8fSGustavo F. Padovan goto drop; 66110a708f8fSGustavo F. Padovan 6612cec8ab6eSMat Martineau if (chan->mode != L2CAP_MODE_STREAMING) { 6613cec8ab6eSMat Martineau event = L2CAP_EV_RECV_IFRAME; 6614cec8ab6eSMat Martineau err = l2cap_rx(chan, control, skb, event); 66150a708f8fSGustavo F. Padovan } else { 6616cec8ab6eSMat Martineau err = l2cap_stream_rx(chan, control, skb); 6617cec8ab6eSMat Martineau } 6618cec8ab6eSMat Martineau 6619cec8ab6eSMat Martineau if (err) 66205e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6621cec8ab6eSMat Martineau } else { 6622cec8ab6eSMat Martineau const u8 rx_func_to_event[4] = { 6623cec8ab6eSMat Martineau L2CAP_EV_RECV_RR, L2CAP_EV_RECV_REJ, 6624cec8ab6eSMat Martineau L2CAP_EV_RECV_RNR, L2CAP_EV_RECV_SREJ 6625cec8ab6eSMat Martineau }; 6626cec8ab6eSMat Martineau 6627cec8ab6eSMat Martineau /* Only I-frames are expected in streaming mode */ 6628cec8ab6eSMat Martineau if (chan->mode == L2CAP_MODE_STREAMING) 6629cec8ab6eSMat Martineau goto drop; 6630cec8ab6eSMat Martineau 6631cec8ab6eSMat Martineau BT_DBG("sframe reqseq %d, final %d, poll %d, super %d", 6632cec8ab6eSMat Martineau control->reqseq, control->final, control->poll, 6633cec8ab6eSMat Martineau control->super); 6634cec8ab6eSMat Martineau 66350a708f8fSGustavo F. Padovan if (len != 0) { 66361bb166e6SAndrei Emeltchenko BT_ERR("Trailing bytes: %d in sframe", len); 66375e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 66380a708f8fSGustavo F. Padovan goto drop; 66390a708f8fSGustavo F. Padovan } 66400a708f8fSGustavo F. Padovan 6641cec8ab6eSMat Martineau /* Validate F and P bits */ 6642cec8ab6eSMat Martineau if (control->final && (control->poll || 6643cec8ab6eSMat Martineau chan->tx_state != L2CAP_TX_STATE_WAIT_F)) 6644cec8ab6eSMat Martineau goto drop; 6645cec8ab6eSMat Martineau 6646cec8ab6eSMat Martineau event = rx_func_to_event[control->super]; 6647cec8ab6eSMat Martineau if (l2cap_rx(chan, control, skb, event)) 66485e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 66490a708f8fSGustavo F. Padovan } 66500a708f8fSGustavo F. Padovan 66510a708f8fSGustavo F. Padovan return 0; 66520a708f8fSGustavo F. Padovan 66530a708f8fSGustavo F. Padovan drop: 66540a708f8fSGustavo F. Padovan kfree_skb(skb); 66550a708f8fSGustavo F. Padovan return 0; 66560a708f8fSGustavo F. Padovan } 66570a708f8fSGustavo F. Padovan 6658b1c325c2SJohan Hedberg static void l2cap_chan_le_send_credits(struct l2cap_chan *chan) 6659b1c325c2SJohan Hedberg { 6660b1c325c2SJohan Hedberg struct l2cap_conn *conn = chan->conn; 6661b1c325c2SJohan Hedberg struct l2cap_le_credits pkt; 6662b1c325c2SJohan Hedberg u16 return_credits; 6663b1c325c2SJohan Hedberg 6664b1c325c2SJohan Hedberg /* We return more credits to the sender only after the amount of 6665b1c325c2SJohan Hedberg * credits falls below half of the initial amount. 6666b1c325c2SJohan Hedberg */ 6667f15b8ecfSJohan Hedberg if (chan->rx_credits >= (le_max_credits + 1) / 2) 6668b1c325c2SJohan Hedberg return; 6669b1c325c2SJohan Hedberg 6670f15b8ecfSJohan Hedberg return_credits = le_max_credits - chan->rx_credits; 6671b1c325c2SJohan Hedberg 6672b1c325c2SJohan Hedberg BT_DBG("chan %p returning %u credits to sender", chan, return_credits); 6673b1c325c2SJohan Hedberg 6674b1c325c2SJohan Hedberg chan->rx_credits += return_credits; 6675b1c325c2SJohan Hedberg 6676b1c325c2SJohan Hedberg pkt.cid = cpu_to_le16(chan->scid); 6677b1c325c2SJohan Hedberg pkt.credits = cpu_to_le16(return_credits); 6678b1c325c2SJohan Hedberg 6679b1c325c2SJohan Hedberg chan->ident = l2cap_get_ident(conn); 6680b1c325c2SJohan Hedberg 6681b1c325c2SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CREDITS, sizeof(pkt), &pkt); 6682b1c325c2SJohan Hedberg } 6683b1c325c2SJohan Hedberg 6684fad5fc89SJohan Hedberg static int l2cap_le_data_rcv(struct l2cap_chan *chan, struct sk_buff *skb) 6685fad5fc89SJohan Hedberg { 6686aac23bf6SJohan Hedberg int err; 6687fad5fc89SJohan Hedberg 6688aac23bf6SJohan Hedberg if (!chan->rx_credits) { 6689aac23bf6SJohan Hedberg BT_ERR("No credits to receive LE L2CAP data"); 6690dfd9774cSJohan Hedberg l2cap_send_disconn_req(chan, ECONNRESET); 6691fad5fc89SJohan Hedberg return -ENOBUFS; 6692aac23bf6SJohan Hedberg } 6693aac23bf6SJohan Hedberg 6694aac23bf6SJohan Hedberg if (chan->imtu < skb->len) { 6695aac23bf6SJohan Hedberg BT_ERR("Too big LE L2CAP PDU"); 6696aac23bf6SJohan Hedberg return -ENOBUFS; 6697aac23bf6SJohan Hedberg } 6698fad5fc89SJohan Hedberg 6699fad5fc89SJohan Hedberg chan->rx_credits--; 6700fad5fc89SJohan Hedberg BT_DBG("rx_credits %u -> %u", chan->rx_credits + 1, chan->rx_credits); 6701fad5fc89SJohan Hedberg 6702fad5fc89SJohan Hedberg l2cap_chan_le_send_credits(chan); 6703fad5fc89SJohan Hedberg 6704aac23bf6SJohan Hedberg err = 0; 6705aac23bf6SJohan Hedberg 6706aac23bf6SJohan Hedberg if (!chan->sdu) { 6707aac23bf6SJohan Hedberg u16 sdu_len; 6708aac23bf6SJohan Hedberg 6709aac23bf6SJohan Hedberg sdu_len = get_unaligned_le16(skb->data); 6710aac23bf6SJohan Hedberg skb_pull(skb, L2CAP_SDULEN_SIZE); 6711aac23bf6SJohan Hedberg 6712aac23bf6SJohan Hedberg BT_DBG("Start of new SDU. sdu_len %u skb->len %u imtu %u", 6713aac23bf6SJohan Hedberg sdu_len, skb->len, chan->imtu); 6714aac23bf6SJohan Hedberg 6715aac23bf6SJohan Hedberg if (sdu_len > chan->imtu) { 6716aac23bf6SJohan Hedberg BT_ERR("Too big LE L2CAP SDU length received"); 6717aac23bf6SJohan Hedberg err = -EMSGSIZE; 6718aac23bf6SJohan Hedberg goto failed; 6719aac23bf6SJohan Hedberg } 6720aac23bf6SJohan Hedberg 6721aac23bf6SJohan Hedberg if (skb->len > sdu_len) { 6722aac23bf6SJohan Hedberg BT_ERR("Too much LE L2CAP data received"); 6723aac23bf6SJohan Hedberg err = -EINVAL; 6724aac23bf6SJohan Hedberg goto failed; 6725aac23bf6SJohan Hedberg } 6726aac23bf6SJohan Hedberg 6727aac23bf6SJohan Hedberg if (skb->len == sdu_len) 6728fad5fc89SJohan Hedberg return chan->ops->recv(chan, skb); 6729aac23bf6SJohan Hedberg 6730aac23bf6SJohan Hedberg chan->sdu = skb; 6731aac23bf6SJohan Hedberg chan->sdu_len = sdu_len; 6732aac23bf6SJohan Hedberg chan->sdu_last_frag = skb; 6733aac23bf6SJohan Hedberg 6734aac23bf6SJohan Hedberg return 0; 6735aac23bf6SJohan Hedberg } 6736aac23bf6SJohan Hedberg 6737aac23bf6SJohan Hedberg BT_DBG("SDU fragment. chan->sdu->len %u skb->len %u chan->sdu_len %u", 6738aac23bf6SJohan Hedberg chan->sdu->len, skb->len, chan->sdu_len); 6739aac23bf6SJohan Hedberg 6740aac23bf6SJohan Hedberg if (chan->sdu->len + skb->len > chan->sdu_len) { 6741aac23bf6SJohan Hedberg BT_ERR("Too much LE L2CAP data received"); 6742aac23bf6SJohan Hedberg err = -EINVAL; 6743aac23bf6SJohan Hedberg goto failed; 6744aac23bf6SJohan Hedberg } 6745aac23bf6SJohan Hedberg 6746aac23bf6SJohan Hedberg append_skb_frag(chan->sdu, skb, &chan->sdu_last_frag); 6747aac23bf6SJohan Hedberg skb = NULL; 6748aac23bf6SJohan Hedberg 6749aac23bf6SJohan Hedberg if (chan->sdu->len == chan->sdu_len) { 6750aac23bf6SJohan Hedberg err = chan->ops->recv(chan, chan->sdu); 6751aac23bf6SJohan Hedberg if (!err) { 6752aac23bf6SJohan Hedberg chan->sdu = NULL; 6753aac23bf6SJohan Hedberg chan->sdu_last_frag = NULL; 6754aac23bf6SJohan Hedberg chan->sdu_len = 0; 6755aac23bf6SJohan Hedberg } 6756aac23bf6SJohan Hedberg } 6757aac23bf6SJohan Hedberg 6758aac23bf6SJohan Hedberg failed: 6759aac23bf6SJohan Hedberg if (err) { 6760aac23bf6SJohan Hedberg kfree_skb(skb); 6761aac23bf6SJohan Hedberg kfree_skb(chan->sdu); 6762aac23bf6SJohan Hedberg chan->sdu = NULL; 6763aac23bf6SJohan Hedberg chan->sdu_last_frag = NULL; 6764aac23bf6SJohan Hedberg chan->sdu_len = 0; 6765aac23bf6SJohan Hedberg } 6766aac23bf6SJohan Hedberg 6767aac23bf6SJohan Hedberg /* We can't return an error here since we took care of the skb 6768aac23bf6SJohan Hedberg * freeing internally. An error return would cause the caller to 6769aac23bf6SJohan Hedberg * do a double-free of the skb. 6770aac23bf6SJohan Hedberg */ 6771aac23bf6SJohan Hedberg return 0; 6772fad5fc89SJohan Hedberg } 6773fad5fc89SJohan Hedberg 677413ca56e0SAndrei Emeltchenko static void l2cap_data_channel(struct l2cap_conn *conn, u16 cid, 677513ca56e0SAndrei Emeltchenko struct sk_buff *skb) 67760a708f8fSGustavo F. Padovan { 677748454079SGustavo F. Padovan struct l2cap_chan *chan; 67780a708f8fSGustavo F. Padovan 6779baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, cid); 678048454079SGustavo F. Padovan if (!chan) { 678197e8e89dSAndrei Emeltchenko if (cid == L2CAP_CID_A2MP) { 678297e8e89dSAndrei Emeltchenko chan = a2mp_channel_create(conn, skb); 678397e8e89dSAndrei Emeltchenko if (!chan) { 678497e8e89dSAndrei Emeltchenko kfree_skb(skb); 678513ca56e0SAndrei Emeltchenko return; 678697e8e89dSAndrei Emeltchenko } 678797e8e89dSAndrei Emeltchenko 678897e8e89dSAndrei Emeltchenko l2cap_chan_lock(chan); 678997e8e89dSAndrei Emeltchenko } else { 67900a708f8fSGustavo F. Padovan BT_DBG("unknown cid 0x%4.4x", cid); 67916be36555SAndrei Emeltchenko /* Drop packet and return */ 67923379013bSDan Carpenter kfree_skb(skb); 679313ca56e0SAndrei Emeltchenko return; 67940a708f8fSGustavo F. Padovan } 679597e8e89dSAndrei Emeltchenko } 67960a708f8fSGustavo F. Padovan 679749208c9cSGustavo F. Padovan BT_DBG("chan %p, len %d", chan, skb->len); 67980a708f8fSGustavo F. Padovan 679989bc500eSGustavo F. Padovan if (chan->state != BT_CONNECTED) 68000a708f8fSGustavo F. Padovan goto drop; 68010a708f8fSGustavo F. Padovan 68020c1bc5c6SGustavo F. Padovan switch (chan->mode) { 680338319713SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 6804fad5fc89SJohan Hedberg if (l2cap_le_data_rcv(chan, skb) < 0) 6805fad5fc89SJohan Hedberg goto drop; 6806fad5fc89SJohan Hedberg 6807fad5fc89SJohan Hedberg goto done; 6808fad5fc89SJohan Hedberg 68090a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 68100a708f8fSGustavo F. Padovan /* If socket recv buffers overflows we drop data here 68110a708f8fSGustavo F. Padovan * which is *bad* because L2CAP has to be reliable. 68120a708f8fSGustavo F. Padovan * But we don't have any other choice. L2CAP doesn't 68130a708f8fSGustavo F. Padovan * provide flow control mechanism. */ 68140a708f8fSGustavo F. Padovan 68152c96e03dSSzymon Janc if (chan->imtu < skb->len) { 68162c96e03dSSzymon Janc BT_ERR("Dropping L2CAP data: receive buffer overflow"); 68170a708f8fSGustavo F. Padovan goto drop; 68182c96e03dSSzymon Janc } 68190a708f8fSGustavo F. Padovan 682080b98027SGustavo Padovan if (!chan->ops->recv(chan, skb)) 68210a708f8fSGustavo F. Padovan goto done; 68220a708f8fSGustavo F. Padovan break; 68230a708f8fSGustavo F. Padovan 68240a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 68250a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 6826cec8ab6eSMat Martineau l2cap_data_rcv(chan, skb); 68270a708f8fSGustavo F. Padovan goto done; 68280a708f8fSGustavo F. Padovan 68290a708f8fSGustavo F. Padovan default: 68300c1bc5c6SGustavo F. Padovan BT_DBG("chan %p: bad mode 0x%2.2x", chan, chan->mode); 68310a708f8fSGustavo F. Padovan break; 68320a708f8fSGustavo F. Padovan } 68330a708f8fSGustavo F. Padovan 68340a708f8fSGustavo F. Padovan drop: 68350a708f8fSGustavo F. Padovan kfree_skb(skb); 68360a708f8fSGustavo F. Padovan 68370a708f8fSGustavo F. Padovan done: 68386be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 68390a708f8fSGustavo F. Padovan } 68400a708f8fSGustavo F. Padovan 684184104b24SAndrei Emeltchenko static void l2cap_conless_channel(struct l2cap_conn *conn, __le16 psm, 684284104b24SAndrei Emeltchenko struct sk_buff *skb) 68430a708f8fSGustavo F. Padovan { 6844ae4fd2d3SMarcel Holtmann struct hci_conn *hcon = conn->hcon; 684523691d75SGustavo F. Padovan struct l2cap_chan *chan; 68460a708f8fSGustavo F. Padovan 6847ae4fd2d3SMarcel Holtmann if (hcon->type != ACL_LINK) 6848ae4fd2d3SMarcel Holtmann goto drop; 6849ae4fd2d3SMarcel Holtmann 6850bf20fd4eSJohan Hedberg chan = l2cap_global_chan_by_psm(0, psm, &hcon->src, &hcon->dst, 6851bf20fd4eSJohan Hedberg ACL_LINK); 685223691d75SGustavo F. Padovan if (!chan) 68530a708f8fSGustavo F. Padovan goto drop; 68540a708f8fSGustavo F. Padovan 68555b4cedaaSAndrei Emeltchenko BT_DBG("chan %p, len %d", chan, skb->len); 68560a708f8fSGustavo F. Padovan 685789bc500eSGustavo F. Padovan if (chan->state != BT_BOUND && chan->state != BT_CONNECTED) 68580a708f8fSGustavo F. Padovan goto drop; 68590a708f8fSGustavo F. Padovan 6860e13e21dcSVinicius Costa Gomes if (chan->imtu < skb->len) 68610a708f8fSGustavo F. Padovan goto drop; 68620a708f8fSGustavo F. Padovan 68632edf870dSMarcel Holtmann /* Store remote BD_ADDR and PSM for msg_name */ 686406ae3314SMarcel Holtmann bacpy(&bt_cb(skb)->bdaddr, &hcon->dst); 68652edf870dSMarcel Holtmann bt_cb(skb)->psm = psm; 68662edf870dSMarcel Holtmann 686780b98027SGustavo Padovan if (!chan->ops->recv(chan, skb)) 686884104b24SAndrei Emeltchenko return; 68690a708f8fSGustavo F. Padovan 68700a708f8fSGustavo F. Padovan drop: 68710a708f8fSGustavo F. Padovan kfree_skb(skb); 68720a708f8fSGustavo F. Padovan } 68730a708f8fSGustavo F. Padovan 687472f78356SMarcel Holtmann static void l2cap_att_channel(struct l2cap_conn *conn, 6875d9b88702SAndrei Emeltchenko struct sk_buff *skb) 68769f69bda6SGustavo F. Padovan { 6877b99707d7SMarcel Holtmann struct hci_conn *hcon = conn->hcon; 687823691d75SGustavo F. Padovan struct l2cap_chan *chan; 68799f69bda6SGustavo F. Padovan 6880b99707d7SMarcel Holtmann if (hcon->type != LE_LINK) 6881b99707d7SMarcel Holtmann goto drop; 6882b99707d7SMarcel Holtmann 6883af1c0134SJohan Hedberg chan = l2cap_global_chan_by_scid(BT_CONNECTED, L2CAP_CID_ATT, 688406ae3314SMarcel Holtmann &hcon->src, &hcon->dst); 688523691d75SGustavo F. Padovan if (!chan) 68869f69bda6SGustavo F. Padovan goto drop; 68879f69bda6SGustavo F. Padovan 68885b4cedaaSAndrei Emeltchenko BT_DBG("chan %p, len %d", chan, skb->len); 68899f69bda6SGustavo F. Padovan 6890e13e21dcSVinicius Costa Gomes if (chan->imtu < skb->len) 68919f69bda6SGustavo F. Padovan goto drop; 68929f69bda6SGustavo F. Padovan 689380b98027SGustavo Padovan if (!chan->ops->recv(chan, skb)) 68946810fca7SAndrei Emeltchenko return; 68959f69bda6SGustavo F. Padovan 68969f69bda6SGustavo F. Padovan drop: 68979f69bda6SGustavo F. Padovan kfree_skb(skb); 68989f69bda6SGustavo F. Padovan } 68999f69bda6SGustavo F. Padovan 69000a708f8fSGustavo F. Padovan static void l2cap_recv_frame(struct l2cap_conn *conn, struct sk_buff *skb) 69010a708f8fSGustavo F. Padovan { 69020a708f8fSGustavo F. Padovan struct l2cap_hdr *lh = (void *) skb->data; 690361a939c6SJohan Hedberg struct hci_conn *hcon = conn->hcon; 69040a708f8fSGustavo F. Padovan u16 cid, len; 69050a708f8fSGustavo F. Padovan __le16 psm; 69060a708f8fSGustavo F. Padovan 690761a939c6SJohan Hedberg if (hcon->state != BT_CONNECTED) { 690861a939c6SJohan Hedberg BT_DBG("queueing pending rx skb"); 690961a939c6SJohan Hedberg skb_queue_tail(&conn->pending_rx, skb); 691061a939c6SJohan Hedberg return; 691161a939c6SJohan Hedberg } 691261a939c6SJohan Hedberg 69130a708f8fSGustavo F. Padovan skb_pull(skb, L2CAP_HDR_SIZE); 69140a708f8fSGustavo F. Padovan cid = __le16_to_cpu(lh->cid); 69150a708f8fSGustavo F. Padovan len = __le16_to_cpu(lh->len); 69160a708f8fSGustavo F. Padovan 69170a708f8fSGustavo F. Padovan if (len != skb->len) { 69180a708f8fSGustavo F. Padovan kfree_skb(skb); 69190a708f8fSGustavo F. Padovan return; 69200a708f8fSGustavo F. Padovan } 69210a708f8fSGustavo F. Padovan 69229e1d7e15SJohan Hedberg /* Since we can't actively block incoming LE connections we must 69239e1d7e15SJohan Hedberg * at least ensure that we ignore incoming data from them. 69249e1d7e15SJohan Hedberg */ 69259e1d7e15SJohan Hedberg if (hcon->type == LE_LINK && 6926dcc36c16SJohan Hedberg hci_bdaddr_list_lookup(&hcon->hdev->blacklist, &hcon->dst, 6927e493150eSJohan Hedberg bdaddr_type(hcon, hcon->dst_type))) { 6928e493150eSJohan Hedberg kfree_skb(skb); 6929e493150eSJohan Hedberg return; 6930e493150eSJohan Hedberg } 6931e493150eSJohan Hedberg 69320a708f8fSGustavo F. Padovan BT_DBG("len %d, cid 0x%4.4x", len, cid); 69330a708f8fSGustavo F. Padovan 69340a708f8fSGustavo F. Padovan switch (cid) { 69350a708f8fSGustavo F. Padovan case L2CAP_CID_SIGNALING: 69360a708f8fSGustavo F. Padovan l2cap_sig_channel(conn, skb); 69370a708f8fSGustavo F. Padovan break; 69380a708f8fSGustavo F. Padovan 69390a708f8fSGustavo F. Padovan case L2CAP_CID_CONN_LESS: 6940097db76cSAndrei Emeltchenko psm = get_unaligned((__le16 *) skb->data); 69410181a70fSAndrei Emeltchenko skb_pull(skb, L2CAP_PSMLEN_SIZE); 69420a708f8fSGustavo F. Padovan l2cap_conless_channel(conn, psm, skb); 69430a708f8fSGustavo F. Padovan break; 69440a708f8fSGustavo F. Padovan 6945073d1cf3SJohan Hedberg case L2CAP_CID_ATT: 694672f78356SMarcel Holtmann l2cap_att_channel(conn, skb); 69479f69bda6SGustavo F. Padovan break; 69489f69bda6SGustavo F. Padovan 6949a2877629SMarcel Holtmann case L2CAP_CID_LE_SIGNALING: 6950a2877629SMarcel Holtmann l2cap_le_sig_channel(conn, skb); 6951a2877629SMarcel Holtmann break; 6952a2877629SMarcel Holtmann 6953b501d6a1SAnderson Briglia case L2CAP_CID_SMP: 6954b501d6a1SAnderson Briglia if (smp_sig_channel(conn, skb)) 6955b501d6a1SAnderson Briglia l2cap_conn_del(conn->hcon, EACCES); 6956b501d6a1SAnderson Briglia break; 6957b501d6a1SAnderson Briglia 69580a708f8fSGustavo F. Padovan default: 69590a708f8fSGustavo F. Padovan l2cap_data_channel(conn, cid, skb); 69600a708f8fSGustavo F. Padovan break; 69610a708f8fSGustavo F. Padovan } 69620a708f8fSGustavo F. Padovan } 69630a708f8fSGustavo F. Padovan 696461a939c6SJohan Hedberg static void process_pending_rx(struct work_struct *work) 696561a939c6SJohan Hedberg { 696661a939c6SJohan Hedberg struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 696761a939c6SJohan Hedberg pending_rx_work); 696861a939c6SJohan Hedberg struct sk_buff *skb; 696961a939c6SJohan Hedberg 697061a939c6SJohan Hedberg BT_DBG(""); 697161a939c6SJohan Hedberg 697261a939c6SJohan Hedberg while ((skb = skb_dequeue(&conn->pending_rx))) 697361a939c6SJohan Hedberg l2cap_recv_frame(conn, skb); 697461a939c6SJohan Hedberg } 697561a939c6SJohan Hedberg 6976162b49e7SJohan Hedberg static struct l2cap_conn *l2cap_conn_add(struct hci_conn *hcon) 6977162b49e7SJohan Hedberg { 6978162b49e7SJohan Hedberg struct l2cap_conn *conn = hcon->l2cap_data; 6979162b49e7SJohan Hedberg struct hci_chan *hchan; 6980162b49e7SJohan Hedberg 6981162b49e7SJohan Hedberg if (conn) 6982162b49e7SJohan Hedberg return conn; 6983162b49e7SJohan Hedberg 6984162b49e7SJohan Hedberg hchan = hci_chan_create(hcon); 6985162b49e7SJohan Hedberg if (!hchan) 6986162b49e7SJohan Hedberg return NULL; 6987162b49e7SJohan Hedberg 698827f70f3eSJohan Hedberg conn = kzalloc(sizeof(*conn), GFP_KERNEL); 6989162b49e7SJohan Hedberg if (!conn) { 6990162b49e7SJohan Hedberg hci_chan_del(hchan); 6991162b49e7SJohan Hedberg return NULL; 6992162b49e7SJohan Hedberg } 6993162b49e7SJohan Hedberg 6994162b49e7SJohan Hedberg kref_init(&conn->ref); 6995162b49e7SJohan Hedberg hcon->l2cap_data = conn; 6996162b49e7SJohan Hedberg conn->hcon = hcon; 6997162b49e7SJohan Hedberg hci_conn_get(conn->hcon); 6998162b49e7SJohan Hedberg conn->hchan = hchan; 6999162b49e7SJohan Hedberg 7000162b49e7SJohan Hedberg BT_DBG("hcon %p conn %p hchan %p", hcon, conn, hchan); 7001162b49e7SJohan Hedberg 7002162b49e7SJohan Hedberg switch (hcon->type) { 7003162b49e7SJohan Hedberg case LE_LINK: 7004162b49e7SJohan Hedberg if (hcon->hdev->le_mtu) { 7005162b49e7SJohan Hedberg conn->mtu = hcon->hdev->le_mtu; 7006162b49e7SJohan Hedberg break; 7007162b49e7SJohan Hedberg } 7008162b49e7SJohan Hedberg /* fall through */ 7009162b49e7SJohan Hedberg default: 7010162b49e7SJohan Hedberg conn->mtu = hcon->hdev->acl_mtu; 7011162b49e7SJohan Hedberg break; 7012162b49e7SJohan Hedberg } 7013162b49e7SJohan Hedberg 7014162b49e7SJohan Hedberg conn->feat_mask = 0; 7015162b49e7SJohan Hedberg 7016162b49e7SJohan Hedberg if (hcon->type == ACL_LINK) 7017162b49e7SJohan Hedberg conn->hs_enabled = test_bit(HCI_HS_ENABLED, 7018162b49e7SJohan Hedberg &hcon->hdev->dev_flags); 7019162b49e7SJohan Hedberg 70205a54e7c8SMarcel Holtmann mutex_init(&conn->ident_lock); 7021162b49e7SJohan Hedberg mutex_init(&conn->chan_lock); 7022162b49e7SJohan Hedberg 7023162b49e7SJohan Hedberg INIT_LIST_HEAD(&conn->chan_l); 7024162b49e7SJohan Hedberg INIT_LIST_HEAD(&conn->users); 7025162b49e7SJohan Hedberg 7026162b49e7SJohan Hedberg if (hcon->type == LE_LINK) 7027162b49e7SJohan Hedberg INIT_DELAYED_WORK(&conn->security_timer, security_timeout); 7028162b49e7SJohan Hedberg else 7029162b49e7SJohan Hedberg INIT_DELAYED_WORK(&conn->info_timer, l2cap_info_timeout); 7030162b49e7SJohan Hedberg 703161a939c6SJohan Hedberg skb_queue_head_init(&conn->pending_rx); 703261a939c6SJohan Hedberg INIT_WORK(&conn->pending_rx_work, process_pending_rx); 703361a939c6SJohan Hedberg 7034162b49e7SJohan Hedberg conn->disc_reason = HCI_ERROR_REMOTE_USER_TERM; 7035162b49e7SJohan Hedberg 7036162b49e7SJohan Hedberg return conn; 7037162b49e7SJohan Hedberg } 7038162b49e7SJohan Hedberg 7039162b49e7SJohan Hedberg static bool is_valid_psm(u16 psm, u8 dst_type) { 7040162b49e7SJohan Hedberg if (!psm) 7041162b49e7SJohan Hedberg return false; 7042162b49e7SJohan Hedberg 7043162b49e7SJohan Hedberg if (bdaddr_type_is_le(dst_type)) 7044162b49e7SJohan Hedberg return (psm <= 0x00ff); 7045162b49e7SJohan Hedberg 7046162b49e7SJohan Hedberg /* PSM must be odd and lsb of upper byte must be 0 */ 7047162b49e7SJohan Hedberg return ((psm & 0x0101) == 0x0001); 7048162b49e7SJohan Hedberg } 7049162b49e7SJohan Hedberg 7050162b49e7SJohan Hedberg int l2cap_chan_connect(struct l2cap_chan *chan, __le16 psm, u16 cid, 7051162b49e7SJohan Hedberg bdaddr_t *dst, u8 dst_type) 7052162b49e7SJohan Hedberg { 7053162b49e7SJohan Hedberg struct l2cap_conn *conn; 7054162b49e7SJohan Hedberg struct hci_conn *hcon; 7055162b49e7SJohan Hedberg struct hci_dev *hdev; 7056162b49e7SJohan Hedberg int err; 7057162b49e7SJohan Hedberg 7058162b49e7SJohan Hedberg BT_DBG("%pMR -> %pMR (type %u) psm 0x%2.2x", &chan->src, dst, 7059162b49e7SJohan Hedberg dst_type, __le16_to_cpu(psm)); 7060162b49e7SJohan Hedberg 7061162b49e7SJohan Hedberg hdev = hci_get_route(dst, &chan->src); 7062162b49e7SJohan Hedberg if (!hdev) 7063162b49e7SJohan Hedberg return -EHOSTUNREACH; 7064162b49e7SJohan Hedberg 7065162b49e7SJohan Hedberg hci_dev_lock(hdev); 7066162b49e7SJohan Hedberg 7067162b49e7SJohan Hedberg l2cap_chan_lock(chan); 7068162b49e7SJohan Hedberg 7069162b49e7SJohan Hedberg if (!is_valid_psm(__le16_to_cpu(psm), dst_type) && !cid && 7070162b49e7SJohan Hedberg chan->chan_type != L2CAP_CHAN_RAW) { 7071162b49e7SJohan Hedberg err = -EINVAL; 7072162b49e7SJohan Hedberg goto done; 7073162b49e7SJohan Hedberg } 7074162b49e7SJohan Hedberg 707521626e62SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED && !psm) { 707621626e62SJohan Hedberg err = -EINVAL; 707721626e62SJohan Hedberg goto done; 707821626e62SJohan Hedberg } 707921626e62SJohan Hedberg 708021626e62SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_FIXED && !cid) { 7081162b49e7SJohan Hedberg err = -EINVAL; 7082162b49e7SJohan Hedberg goto done; 7083162b49e7SJohan Hedberg } 7084162b49e7SJohan Hedberg 7085162b49e7SJohan Hedberg switch (chan->mode) { 7086162b49e7SJohan Hedberg case L2CAP_MODE_BASIC: 7087162b49e7SJohan Hedberg break; 7088162b49e7SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 7089162b49e7SJohan Hedberg l2cap_le_flowctl_init(chan); 7090162b49e7SJohan Hedberg break; 7091162b49e7SJohan Hedberg case L2CAP_MODE_ERTM: 7092162b49e7SJohan Hedberg case L2CAP_MODE_STREAMING: 7093162b49e7SJohan Hedberg if (!disable_ertm) 7094162b49e7SJohan Hedberg break; 7095162b49e7SJohan Hedberg /* fall through */ 7096162b49e7SJohan Hedberg default: 7097beb19e4cSJohan Hedberg err = -EOPNOTSUPP; 7098162b49e7SJohan Hedberg goto done; 7099162b49e7SJohan Hedberg } 7100162b49e7SJohan Hedberg 7101162b49e7SJohan Hedberg switch (chan->state) { 7102162b49e7SJohan Hedberg case BT_CONNECT: 7103162b49e7SJohan Hedberg case BT_CONNECT2: 7104162b49e7SJohan Hedberg case BT_CONFIG: 7105162b49e7SJohan Hedberg /* Already connecting */ 7106162b49e7SJohan Hedberg err = 0; 7107162b49e7SJohan Hedberg goto done; 7108162b49e7SJohan Hedberg 7109162b49e7SJohan Hedberg case BT_CONNECTED: 7110162b49e7SJohan Hedberg /* Already connected */ 7111162b49e7SJohan Hedberg err = -EISCONN; 7112162b49e7SJohan Hedberg goto done; 7113162b49e7SJohan Hedberg 7114162b49e7SJohan Hedberg case BT_OPEN: 7115162b49e7SJohan Hedberg case BT_BOUND: 7116162b49e7SJohan Hedberg /* Can connect */ 7117162b49e7SJohan Hedberg break; 7118162b49e7SJohan Hedberg 7119162b49e7SJohan Hedberg default: 7120162b49e7SJohan Hedberg err = -EBADFD; 7121162b49e7SJohan Hedberg goto done; 7122162b49e7SJohan Hedberg } 7123162b49e7SJohan Hedberg 7124162b49e7SJohan Hedberg /* Set destination address and psm */ 7125162b49e7SJohan Hedberg bacpy(&chan->dst, dst); 7126162b49e7SJohan Hedberg chan->dst_type = dst_type; 7127162b49e7SJohan Hedberg 7128162b49e7SJohan Hedberg chan->psm = psm; 7129162b49e7SJohan Hedberg chan->dcid = cid; 7130162b49e7SJohan Hedberg 71316f77d8c7SAndre Guedes if (bdaddr_type_is_le(dst_type)) { 7132e804d25dSJohan Hedberg u8 role; 7133cdd6275eSJohan Hedberg 71346f77d8c7SAndre Guedes /* Convert from L2CAP channel address type to HCI address type 71356f77d8c7SAndre Guedes */ 71366f77d8c7SAndre Guedes if (dst_type == BDADDR_LE_PUBLIC) 71376f77d8c7SAndre Guedes dst_type = ADDR_LE_DEV_PUBLIC; 71386f77d8c7SAndre Guedes else 71396f77d8c7SAndre Guedes dst_type = ADDR_LE_DEV_RANDOM; 71406f77d8c7SAndre Guedes 7141e804d25dSJohan Hedberg if (test_bit(HCI_ADVERTISING, &hdev->dev_flags)) 7142e804d25dSJohan Hedberg role = HCI_ROLE_SLAVE; 7143e804d25dSJohan Hedberg else 7144e804d25dSJohan Hedberg role = HCI_ROLE_MASTER; 7145cdd6275eSJohan Hedberg 714604a6c589SAndre Guedes hcon = hci_connect_le(hdev, dst, dst_type, chan->sec_level, 7147e804d25dSJohan Hedberg HCI_LE_CONN_TIMEOUT, role); 71486f77d8c7SAndre Guedes } else { 7149d93375a8SJohan Hedberg u8 auth_type = l2cap_get_auth_type(chan); 715004a6c589SAndre Guedes hcon = hci_connect_acl(hdev, dst, chan->sec_level, auth_type); 71516f77d8c7SAndre Guedes } 7152162b49e7SJohan Hedberg 7153162b49e7SJohan Hedberg if (IS_ERR(hcon)) { 7154162b49e7SJohan Hedberg err = PTR_ERR(hcon); 7155162b49e7SJohan Hedberg goto done; 7156162b49e7SJohan Hedberg } 7157162b49e7SJohan Hedberg 7158162b49e7SJohan Hedberg conn = l2cap_conn_add(hcon); 7159162b49e7SJohan Hedberg if (!conn) { 7160162b49e7SJohan Hedberg hci_conn_drop(hcon); 7161162b49e7SJohan Hedberg err = -ENOMEM; 7162162b49e7SJohan Hedberg goto done; 7163162b49e7SJohan Hedberg } 7164162b49e7SJohan Hedberg 7165162b49e7SJohan Hedberg if (cid && __l2cap_get_chan_by_dcid(conn, cid)) { 7166162b49e7SJohan Hedberg hci_conn_drop(hcon); 7167162b49e7SJohan Hedberg err = -EBUSY; 7168162b49e7SJohan Hedberg goto done; 7169162b49e7SJohan Hedberg } 7170162b49e7SJohan Hedberg 7171162b49e7SJohan Hedberg /* Update source addr of the socket */ 7172162b49e7SJohan Hedberg bacpy(&chan->src, &hcon->src); 7173162b49e7SJohan Hedberg chan->src_type = bdaddr_type(hcon, hcon->src_type); 7174162b49e7SJohan Hedberg 7175162b49e7SJohan Hedberg l2cap_chan_unlock(chan); 7176162b49e7SJohan Hedberg l2cap_chan_add(conn, chan); 7177162b49e7SJohan Hedberg l2cap_chan_lock(chan); 7178162b49e7SJohan Hedberg 7179162b49e7SJohan Hedberg /* l2cap_chan_add takes its own ref so we can drop this one */ 7180162b49e7SJohan Hedberg hci_conn_drop(hcon); 7181162b49e7SJohan Hedberg 7182162b49e7SJohan Hedberg l2cap_state_change(chan, BT_CONNECT); 7183162b49e7SJohan Hedberg __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 7184162b49e7SJohan Hedberg 718561202e4dSJohan Hedberg /* Release chan->sport so that it can be reused by other 718661202e4dSJohan Hedberg * sockets (as it's only used for listening sockets). 718761202e4dSJohan Hedberg */ 718861202e4dSJohan Hedberg write_lock(&chan_list_lock); 718961202e4dSJohan Hedberg chan->sport = 0; 719061202e4dSJohan Hedberg write_unlock(&chan_list_lock); 719161202e4dSJohan Hedberg 7192162b49e7SJohan Hedberg if (hcon->state == BT_CONNECTED) { 7193162b49e7SJohan Hedberg if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 7194162b49e7SJohan Hedberg __clear_chan_timer(chan); 7195e7cafc45SJohan Hedberg if (l2cap_chan_check_security(chan, true)) 7196162b49e7SJohan Hedberg l2cap_state_change(chan, BT_CONNECTED); 7197162b49e7SJohan Hedberg } else 7198162b49e7SJohan Hedberg l2cap_do_start(chan); 7199162b49e7SJohan Hedberg } 7200162b49e7SJohan Hedberg 7201162b49e7SJohan Hedberg err = 0; 7202162b49e7SJohan Hedberg 7203162b49e7SJohan Hedberg done: 7204162b49e7SJohan Hedberg l2cap_chan_unlock(chan); 7205162b49e7SJohan Hedberg hci_dev_unlock(hdev); 7206162b49e7SJohan Hedberg hci_dev_put(hdev); 7207162b49e7SJohan Hedberg return err; 7208162b49e7SJohan Hedberg } 72096b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_connect); 7210162b49e7SJohan Hedberg 72110a708f8fSGustavo F. Padovan /* ---- L2CAP interface with lower layer (HCI) ---- */ 72120a708f8fSGustavo F. Padovan 7213686ebf28SUlisses Furquim int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr) 72140a708f8fSGustavo F. Padovan { 72150a708f8fSGustavo F. Padovan int exact = 0, lm1 = 0, lm2 = 0; 721623691d75SGustavo F. Padovan struct l2cap_chan *c; 72170a708f8fSGustavo F. Padovan 72186ed93dc6SAndrei Emeltchenko BT_DBG("hdev %s, bdaddr %pMR", hdev->name, bdaddr); 72190a708f8fSGustavo F. Padovan 72200a708f8fSGustavo F. Padovan /* Find listening sockets and check their link_mode */ 722123691d75SGustavo F. Padovan read_lock(&chan_list_lock); 722223691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 722389bc500eSGustavo F. Padovan if (c->state != BT_LISTEN) 72240a708f8fSGustavo F. Padovan continue; 72250a708f8fSGustavo F. Padovan 72267eafc59eSMarcel Holtmann if (!bacmp(&c->src, &hdev->bdaddr)) { 72270a708f8fSGustavo F. Padovan lm1 |= HCI_LM_ACCEPT; 722843bd0f32SAndrei Emeltchenko if (test_bit(FLAG_ROLE_SWITCH, &c->flags)) 72290a708f8fSGustavo F. Padovan lm1 |= HCI_LM_MASTER; 72300a708f8fSGustavo F. Padovan exact++; 72317eafc59eSMarcel Holtmann } else if (!bacmp(&c->src, BDADDR_ANY)) { 72320a708f8fSGustavo F. Padovan lm2 |= HCI_LM_ACCEPT; 723343bd0f32SAndrei Emeltchenko if (test_bit(FLAG_ROLE_SWITCH, &c->flags)) 72340a708f8fSGustavo F. Padovan lm2 |= HCI_LM_MASTER; 72350a708f8fSGustavo F. Padovan } 72360a708f8fSGustavo F. Padovan } 723723691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 72380a708f8fSGustavo F. Padovan 72390a708f8fSGustavo F. Padovan return exact ? lm1 : lm2; 72400a708f8fSGustavo F. Padovan } 72410a708f8fSGustavo F. Padovan 72429e664631SAndrei Emeltchenko void l2cap_connect_cfm(struct hci_conn *hcon, u8 status) 72430a708f8fSGustavo F. Padovan { 72440a708f8fSGustavo F. Padovan struct l2cap_conn *conn; 72450a708f8fSGustavo F. Padovan 72466ed93dc6SAndrei Emeltchenko BT_DBG("hcon %p bdaddr %pMR status %d", hcon, &hcon->dst, status); 72470a708f8fSGustavo F. Padovan 72480a708f8fSGustavo F. Padovan if (!status) { 7249baf43251SClaudio Takahasi conn = l2cap_conn_add(hcon); 72500a708f8fSGustavo F. Padovan if (conn) 72510a708f8fSGustavo F. Padovan l2cap_conn_ready(conn); 7252ba6fc317SAndrei Emeltchenko } else { 7253e175072fSJoe Perches l2cap_conn_del(hcon, bt_to_errno(status)); 7254ba6fc317SAndrei Emeltchenko } 72550a708f8fSGustavo F. Padovan } 72560a708f8fSGustavo F. Padovan 7257686ebf28SUlisses Furquim int l2cap_disconn_ind(struct hci_conn *hcon) 72580a708f8fSGustavo F. Padovan { 72590a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 72600a708f8fSGustavo F. Padovan 72610a708f8fSGustavo F. Padovan BT_DBG("hcon %p", hcon); 72620a708f8fSGustavo F. Padovan 7263686ebf28SUlisses Furquim if (!conn) 72649f5a0d7bSAndrei Emeltchenko return HCI_ERROR_REMOTE_USER_TERM; 72650a708f8fSGustavo F. Padovan return conn->disc_reason; 72660a708f8fSGustavo F. Padovan } 72670a708f8fSGustavo F. Padovan 72689e664631SAndrei Emeltchenko void l2cap_disconn_cfm(struct hci_conn *hcon, u8 reason) 72690a708f8fSGustavo F. Padovan { 72700a708f8fSGustavo F. Padovan BT_DBG("hcon %p reason %d", hcon, reason); 72710a708f8fSGustavo F. Padovan 7272e175072fSJoe Perches l2cap_conn_del(hcon, bt_to_errno(reason)); 72730a708f8fSGustavo F. Padovan } 72740a708f8fSGustavo F. Padovan 72754343478fSGustavo F. Padovan static inline void l2cap_check_encryption(struct l2cap_chan *chan, u8 encrypt) 72760a708f8fSGustavo F. Padovan { 7277715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) 72780a708f8fSGustavo F. Padovan return; 72790a708f8fSGustavo F. Padovan 72800a708f8fSGustavo F. Padovan if (encrypt == 0x00) { 72814343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_MEDIUM) { 7282ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_ENC_TIMEOUT); 72837d513e92SMarcel Holtmann } else if (chan->sec_level == BT_SECURITY_HIGH || 72847d513e92SMarcel Holtmann chan->sec_level == BT_SECURITY_FIPS) 72850f852724SGustavo F. Padovan l2cap_chan_close(chan, ECONNREFUSED); 72860a708f8fSGustavo F. Padovan } else { 72874343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_MEDIUM) 7288c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 72890a708f8fSGustavo F. Padovan } 72900a708f8fSGustavo F. Padovan } 72910a708f8fSGustavo F. Padovan 7292686ebf28SUlisses Furquim int l2cap_security_cfm(struct hci_conn *hcon, u8 status, u8 encrypt) 72930a708f8fSGustavo F. Padovan { 72940a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 729548454079SGustavo F. Padovan struct l2cap_chan *chan; 72960a708f8fSGustavo F. Padovan 72970a708f8fSGustavo F. Padovan if (!conn) 72980a708f8fSGustavo F. Padovan return 0; 72990a708f8fSGustavo F. Padovan 730089d8b407SAndrei Emeltchenko BT_DBG("conn %p status 0x%2.2x encrypt %u", conn, status, encrypt); 73010a708f8fSGustavo F. Padovan 7302160dc6acSVinicius Costa Gomes if (hcon->type == LE_LINK) { 730335d4adccSHemant Gupta if (!status && encrypt) 73044bd6d38eSJohan Hedberg smp_distribute_keys(conn); 730517cd3f37SUlisses Furquim cancel_delayed_work(&conn->security_timer); 7306160dc6acSVinicius Costa Gomes } 7307160dc6acSVinicius Costa Gomes 73083df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 73090a708f8fSGustavo F. Padovan 73103df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 73116be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 73120a708f8fSGustavo F. Padovan 731389d8b407SAndrei Emeltchenko BT_DBG("chan %p scid 0x%4.4x state %s", chan, chan->scid, 731489d8b407SAndrei Emeltchenko state_to_string(chan->state)); 7315f1cb9af5SVinicius Costa Gomes 73162338a7e0SJohan Hedberg if (chan->scid == L2CAP_CID_A2MP) { 731778eb2f98SAndrei Emeltchenko l2cap_chan_unlock(chan); 731878eb2f98SAndrei Emeltchenko continue; 731978eb2f98SAndrei Emeltchenko } 732078eb2f98SAndrei Emeltchenko 7321073d1cf3SJohan Hedberg if (chan->scid == L2CAP_CID_ATT) { 7322f1cb9af5SVinicius Costa Gomes if (!status && encrypt) { 7323f1cb9af5SVinicius Costa Gomes chan->sec_level = hcon->sec_level; 7324cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 7325f1cb9af5SVinicius Costa Gomes } 7326f1cb9af5SVinicius Costa Gomes 73276be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 7328f1cb9af5SVinicius Costa Gomes continue; 7329f1cb9af5SVinicius Costa Gomes } 7330f1cb9af5SVinicius Costa Gomes 733196eff46eSAndrei Emeltchenko if (!__l2cap_no_conn_pending(chan)) { 73326be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 73330a708f8fSGustavo F. Padovan continue; 73340a708f8fSGustavo F. Padovan } 73350a708f8fSGustavo F. Padovan 733689bc500eSGustavo F. Padovan if (!status && (chan->state == BT_CONNECTED || 733789bc500eSGustavo F. Padovan chan->state == BT_CONFIG)) { 7338d97c899bSMarcel Holtmann chan->ops->resume(chan); 73394343478fSGustavo F. Padovan l2cap_check_encryption(chan, encrypt); 73406be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 73410a708f8fSGustavo F. Padovan continue; 73420a708f8fSGustavo F. Padovan } 73430a708f8fSGustavo F. Padovan 734489bc500eSGustavo F. Padovan if (chan->state == BT_CONNECT) { 73456d3c15daSJohan Hedberg if (!status) 734693c3e8f5SAndrei Emeltchenko l2cap_start_connection(chan); 73476d3c15daSJohan Hedberg else 7348ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_TIMEOUT); 734989bc500eSGustavo F. Padovan } else if (chan->state == BT_CONNECT2) { 73500a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 7351df3c3931SJohan Hedberg __u16 res, stat; 73520a708f8fSGustavo F. Padovan 73530a708f8fSGustavo F. Padovan if (!status) { 7354bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 7355df3c3931SJohan Hedberg res = L2CAP_CR_PEND; 7356df3c3931SJohan Hedberg stat = L2CAP_CS_AUTHOR_PEND; 73572dc4e510SGustavo Padovan chan->ops->defer(chan); 7358df3c3931SJohan Hedberg } else { 7359acdcabf5SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 7360df3c3931SJohan Hedberg res = L2CAP_CR_SUCCESS; 7361df3c3931SJohan Hedberg stat = L2CAP_CS_NO_INFO; 7362df3c3931SJohan Hedberg } 73630a708f8fSGustavo F. Padovan } else { 7364acdcabf5SGustavo Padovan l2cap_state_change(chan, BT_DISCONN); 7365ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_TIMEOUT); 7366df3c3931SJohan Hedberg res = L2CAP_CR_SEC_BLOCK; 7367df3c3931SJohan Hedberg stat = L2CAP_CS_NO_INFO; 73680a708f8fSGustavo F. Padovan } 73690a708f8fSGustavo F. Padovan 7370fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 7371fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 7372df3c3931SJohan Hedberg rsp.result = cpu_to_le16(res); 7373df3c3931SJohan Hedberg rsp.status = cpu_to_le16(stat); 7374fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 7375fc7f8a7eSGustavo F. Padovan sizeof(rsp), &rsp); 73762d369359SMat Martineau 73772d369359SMat Martineau if (!test_bit(CONF_REQ_SENT, &chan->conf_state) && 73782d369359SMat Martineau res == L2CAP_CR_SUCCESS) { 73792d369359SMat Martineau char buf[128]; 73802d369359SMat Martineau set_bit(CONF_REQ_SENT, &chan->conf_state); 73812d369359SMat Martineau l2cap_send_cmd(conn, l2cap_get_ident(conn), 73822d369359SMat Martineau L2CAP_CONF_REQ, 73832d369359SMat Martineau l2cap_build_conf_req(chan, buf), 73842d369359SMat Martineau buf); 73852d369359SMat Martineau chan->num_conf_req++; 73862d369359SMat Martineau } 73870a708f8fSGustavo F. Padovan } 73880a708f8fSGustavo F. Padovan 73896be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 73900a708f8fSGustavo F. Padovan } 73910a708f8fSGustavo F. Padovan 73923df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 73930a708f8fSGustavo F. Padovan 73940a708f8fSGustavo F. Padovan return 0; 73950a708f8fSGustavo F. Padovan } 73960a708f8fSGustavo F. Padovan 7397686ebf28SUlisses Furquim int l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags) 73980a708f8fSGustavo F. Padovan { 73990a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 7400d73a0988SAndrei Emeltchenko struct l2cap_hdr *hdr; 7401d73a0988SAndrei Emeltchenko int len; 74020a708f8fSGustavo F. Padovan 74031d13a254SAndrei Emeltchenko /* For AMP controller do not create l2cap conn */ 74041d13a254SAndrei Emeltchenko if (!conn && hcon->hdev->dev_type != HCI_BREDR) 74051d13a254SAndrei Emeltchenko goto drop; 74060a708f8fSGustavo F. Padovan 74070a708f8fSGustavo F. Padovan if (!conn) 7408baf43251SClaudio Takahasi conn = l2cap_conn_add(hcon); 74090a708f8fSGustavo F. Padovan 74100a708f8fSGustavo F. Padovan if (!conn) 74110a708f8fSGustavo F. Padovan goto drop; 74120a708f8fSGustavo F. Padovan 74130a708f8fSGustavo F. Padovan BT_DBG("conn %p len %d flags 0x%x", conn, skb->len, flags); 74140a708f8fSGustavo F. Padovan 7415d73a0988SAndrei Emeltchenko switch (flags) { 7416d73a0988SAndrei Emeltchenko case ACL_START: 7417d73a0988SAndrei Emeltchenko case ACL_START_NO_FLUSH: 7418d73a0988SAndrei Emeltchenko case ACL_COMPLETE: 74190a708f8fSGustavo F. Padovan if (conn->rx_len) { 74200a708f8fSGustavo F. Padovan BT_ERR("Unexpected start frame (len %d)", skb->len); 74210a708f8fSGustavo F. Padovan kfree_skb(conn->rx_skb); 74220a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 74230a708f8fSGustavo F. Padovan conn->rx_len = 0; 74240a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 74250a708f8fSGustavo F. Padovan } 74260a708f8fSGustavo F. Padovan 74270a708f8fSGustavo F. Padovan /* Start fragment always begin with Basic L2CAP header */ 74280a708f8fSGustavo F. Padovan if (skb->len < L2CAP_HDR_SIZE) { 74290a708f8fSGustavo F. Padovan BT_ERR("Frame is too short (len %d)", skb->len); 74300a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 74310a708f8fSGustavo F. Padovan goto drop; 74320a708f8fSGustavo F. Padovan } 74330a708f8fSGustavo F. Padovan 74340a708f8fSGustavo F. Padovan hdr = (struct l2cap_hdr *) skb->data; 74350a708f8fSGustavo F. Padovan len = __le16_to_cpu(hdr->len) + L2CAP_HDR_SIZE; 74360a708f8fSGustavo F. Padovan 74370a708f8fSGustavo F. Padovan if (len == skb->len) { 74380a708f8fSGustavo F. Padovan /* Complete frame received */ 74390a708f8fSGustavo F. Padovan l2cap_recv_frame(conn, skb); 74400a708f8fSGustavo F. Padovan return 0; 74410a708f8fSGustavo F. Padovan } 74420a708f8fSGustavo F. Padovan 74430a708f8fSGustavo F. Padovan BT_DBG("Start: total len %d, frag len %d", len, skb->len); 74440a708f8fSGustavo F. Padovan 74450a708f8fSGustavo F. Padovan if (skb->len > len) { 74460a708f8fSGustavo F. Padovan BT_ERR("Frame is too long (len %d, expected len %d)", 74470a708f8fSGustavo F. Padovan skb->len, len); 74480a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 74490a708f8fSGustavo F. Padovan goto drop; 74500a708f8fSGustavo F. Padovan } 74510a708f8fSGustavo F. Padovan 74520a708f8fSGustavo F. Padovan /* Allocate skb for the complete frame (with header) */ 74538bcde1f2SGustavo Padovan conn->rx_skb = bt_skb_alloc(len, GFP_KERNEL); 74540a708f8fSGustavo F. Padovan if (!conn->rx_skb) 74550a708f8fSGustavo F. Padovan goto drop; 74560a708f8fSGustavo F. Padovan 74570a708f8fSGustavo F. Padovan skb_copy_from_linear_data(skb, skb_put(conn->rx_skb, skb->len), 74580a708f8fSGustavo F. Padovan skb->len); 74590a708f8fSGustavo F. Padovan conn->rx_len = len - skb->len; 7460d73a0988SAndrei Emeltchenko break; 7461d73a0988SAndrei Emeltchenko 7462d73a0988SAndrei Emeltchenko case ACL_CONT: 74630a708f8fSGustavo F. Padovan BT_DBG("Cont: frag len %d (expecting %d)", skb->len, conn->rx_len); 74640a708f8fSGustavo F. Padovan 74650a708f8fSGustavo F. Padovan if (!conn->rx_len) { 74660a708f8fSGustavo F. Padovan BT_ERR("Unexpected continuation frame (len %d)", skb->len); 74670a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 74680a708f8fSGustavo F. Padovan goto drop; 74690a708f8fSGustavo F. Padovan } 74700a708f8fSGustavo F. Padovan 74710a708f8fSGustavo F. Padovan if (skb->len > conn->rx_len) { 74720a708f8fSGustavo F. Padovan BT_ERR("Fragment is too long (len %d, expected %d)", 74730a708f8fSGustavo F. Padovan skb->len, conn->rx_len); 74740a708f8fSGustavo F. Padovan kfree_skb(conn->rx_skb); 74750a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 74760a708f8fSGustavo F. Padovan conn->rx_len = 0; 74770a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 74780a708f8fSGustavo F. Padovan goto drop; 74790a708f8fSGustavo F. Padovan } 74800a708f8fSGustavo F. Padovan 74810a708f8fSGustavo F. Padovan skb_copy_from_linear_data(skb, skb_put(conn->rx_skb, skb->len), 74820a708f8fSGustavo F. Padovan skb->len); 74830a708f8fSGustavo F. Padovan conn->rx_len -= skb->len; 74840a708f8fSGustavo F. Padovan 74850a708f8fSGustavo F. Padovan if (!conn->rx_len) { 7486c4e5bafaSJohan Hedberg /* Complete frame received. l2cap_recv_frame 7487c4e5bafaSJohan Hedberg * takes ownership of the skb so set the global 7488c4e5bafaSJohan Hedberg * rx_skb pointer to NULL first. 7489c4e5bafaSJohan Hedberg */ 7490c4e5bafaSJohan Hedberg struct sk_buff *rx_skb = conn->rx_skb; 74910a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 7492c4e5bafaSJohan Hedberg l2cap_recv_frame(conn, rx_skb); 74930a708f8fSGustavo F. Padovan } 7494d73a0988SAndrei Emeltchenko break; 74950a708f8fSGustavo F. Padovan } 74960a708f8fSGustavo F. Padovan 74970a708f8fSGustavo F. Padovan drop: 74980a708f8fSGustavo F. Padovan kfree_skb(skb); 74990a708f8fSGustavo F. Padovan return 0; 75000a708f8fSGustavo F. Padovan } 75010a708f8fSGustavo F. Padovan 75020a708f8fSGustavo F. Padovan static int l2cap_debugfs_show(struct seq_file *f, void *p) 75030a708f8fSGustavo F. Padovan { 750423691d75SGustavo F. Padovan struct l2cap_chan *c; 75050a708f8fSGustavo F. Padovan 7506333055f2SGustavo F. Padovan read_lock(&chan_list_lock); 75070a708f8fSGustavo F. Padovan 750823691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 7509fcb73338SAndrei Emeltchenko seq_printf(f, "%pMR %pMR %d %d 0x%4.4x 0x%4.4x %d %d %d %d\n", 75107eafc59eSMarcel Holtmann &c->src, &c->dst, 751189bc500eSGustavo F. Padovan c->state, __le16_to_cpu(c->psm), 751223691d75SGustavo F. Padovan c->scid, c->dcid, c->imtu, c->omtu, 751323691d75SGustavo F. Padovan c->sec_level, c->mode); 75140a708f8fSGustavo F. Padovan } 75150a708f8fSGustavo F. Padovan 7516333055f2SGustavo F. Padovan read_unlock(&chan_list_lock); 75170a708f8fSGustavo F. Padovan 75180a708f8fSGustavo F. Padovan return 0; 75190a708f8fSGustavo F. Padovan } 75200a708f8fSGustavo F. Padovan 75210a708f8fSGustavo F. Padovan static int l2cap_debugfs_open(struct inode *inode, struct file *file) 75220a708f8fSGustavo F. Padovan { 75230a708f8fSGustavo F. Padovan return single_open(file, l2cap_debugfs_show, inode->i_private); 75240a708f8fSGustavo F. Padovan } 75250a708f8fSGustavo F. Padovan 75260a708f8fSGustavo F. Padovan static const struct file_operations l2cap_debugfs_fops = { 75270a708f8fSGustavo F. Padovan .open = l2cap_debugfs_open, 75280a708f8fSGustavo F. Padovan .read = seq_read, 75290a708f8fSGustavo F. Padovan .llseek = seq_lseek, 75300a708f8fSGustavo F. Padovan .release = single_release, 75310a708f8fSGustavo F. Padovan }; 75320a708f8fSGustavo F. Padovan 75330a708f8fSGustavo F. Padovan static struct dentry *l2cap_debugfs; 75340a708f8fSGustavo F. Padovan 753564274518SGustavo F. Padovan int __init l2cap_init(void) 75360a708f8fSGustavo F. Padovan { 75370a708f8fSGustavo F. Padovan int err; 75380a708f8fSGustavo F. Padovan 7539bb58f747SGustavo F. Padovan err = l2cap_init_sockets(); 75400a708f8fSGustavo F. Padovan if (err < 0) 75410a708f8fSGustavo F. Padovan return err; 75420a708f8fSGustavo F. Padovan 75431120e4bfSMarcel Holtmann if (IS_ERR_OR_NULL(bt_debugfs)) 75441120e4bfSMarcel Holtmann return 0; 75451120e4bfSMarcel Holtmann 75462d792818SGustavo Padovan l2cap_debugfs = debugfs_create_file("l2cap", 0444, bt_debugfs, 75472d792818SGustavo Padovan NULL, &l2cap_debugfs_fops); 75480a708f8fSGustavo F. Padovan 754940b9397aSSamuel Ortiz debugfs_create_u16("l2cap_le_max_credits", 0644, bt_debugfs, 7550f15b8ecfSJohan Hedberg &le_max_credits); 755140b9397aSSamuel Ortiz debugfs_create_u16("l2cap_le_default_mps", 0644, bt_debugfs, 7552f15b8ecfSJohan Hedberg &le_default_mps); 7553f15b8ecfSJohan Hedberg 75540a708f8fSGustavo F. Padovan return 0; 75550a708f8fSGustavo F. Padovan } 75560a708f8fSGustavo F. Padovan 755764274518SGustavo F. Padovan void l2cap_exit(void) 75580a708f8fSGustavo F. Padovan { 75590a708f8fSGustavo F. Padovan debugfs_remove(l2cap_debugfs); 7560bb58f747SGustavo F. Padovan l2cap_cleanup_sockets(); 75610a708f8fSGustavo F. Padovan } 75620a708f8fSGustavo F. Padovan 75630a708f8fSGustavo F. Padovan module_param(disable_ertm, bool, 0644); 75640a708f8fSGustavo F. Padovan MODULE_PARM_DESC(disable_ertm, "Disable enhanced retransmission mode"); 7565