10a708f8fSGustavo F. Padovan /* 20a708f8fSGustavo F. Padovan BlueZ - Bluetooth protocol stack for Linux 30a708f8fSGustavo F. Padovan Copyright (C) 2000-2001 Qualcomm Incorporated 40a708f8fSGustavo F. Padovan Copyright (C) 2009-2010 Gustavo F. Padovan <gustavo@padovan.org> 50a708f8fSGustavo F. Padovan Copyright (C) 2010 Google Inc. 6590051deSGustavo F. Padovan Copyright (C) 2011 ProFUSION Embedded Systems 7422e925bSMat Martineau Copyright (c) 2012 Code Aurora Forum. All rights reserved. 80a708f8fSGustavo F. Padovan 90a708f8fSGustavo F. Padovan Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com> 100a708f8fSGustavo F. Padovan 110a708f8fSGustavo F. Padovan This program is free software; you can redistribute it and/or modify 120a708f8fSGustavo F. Padovan it under the terms of the GNU General Public License version 2 as 130a708f8fSGustavo F. Padovan published by the Free Software Foundation; 140a708f8fSGustavo F. Padovan 150a708f8fSGustavo F. Padovan THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS 160a708f8fSGustavo F. Padovan OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 170a708f8fSGustavo F. Padovan FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS. 180a708f8fSGustavo F. Padovan IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY 190a708f8fSGustavo F. Padovan CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES 200a708f8fSGustavo F. Padovan WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 210a708f8fSGustavo F. Padovan ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 220a708f8fSGustavo F. Padovan OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 230a708f8fSGustavo F. Padovan 240a708f8fSGustavo F. Padovan ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS, 250a708f8fSGustavo F. Padovan COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS 260a708f8fSGustavo F. Padovan SOFTWARE IS DISCLAIMED. 270a708f8fSGustavo F. Padovan */ 280a708f8fSGustavo F. Padovan 29bb58f747SGustavo F. Padovan /* Bluetooth L2CAP core. */ 300a708f8fSGustavo F. Padovan 310a708f8fSGustavo F. Padovan #include <linux/module.h> 320a708f8fSGustavo F. Padovan 330a708f8fSGustavo F. Padovan #include <linux/debugfs.h> 340a708f8fSGustavo F. Padovan #include <linux/crc16.h> 35dbb50887SDaniel Borkmann #include <linux/filter.h> 360a708f8fSGustavo F. Padovan 370a708f8fSGustavo F. Padovan #include <net/bluetooth/bluetooth.h> 380a708f8fSGustavo F. Padovan #include <net/bluetooth/hci_core.h> 390a708f8fSGustavo F. Padovan #include <net/bluetooth/l2cap.h> 407ef9fbf0SMarcel Holtmann 41ac4b7236SMarcel Holtmann #include "smp.h" 427024728eSMarcel Holtmann #include "a2mp.h" 437ef9fbf0SMarcel Holtmann #include "amp.h" 440a708f8fSGustavo F. Padovan 450f1bfe4eSJohan Hedberg #define LE_FLOWCTL_MAX_CREDITS 65535 460f1bfe4eSJohan Hedberg 47d1de6d46SMat Martineau bool disable_ertm; 480a708f8fSGustavo F. Padovan 49547d1032SMarcel Holtmann static u32 l2cap_feat_mask = L2CAP_FEAT_FIXED_CHAN | L2CAP_FEAT_UCD; 500a708f8fSGustavo F. Padovan 51b5ad8b7fSJohannes Berg static LIST_HEAD(chan_list); 52b5ad8b7fSJohannes Berg static DEFINE_RWLOCK(chan_list_lock); 530a708f8fSGustavo F. Padovan 54f15b8ecfSJohan Hedberg static u16 le_max_credits = L2CAP_LE_MAX_CREDITS; 55f15b8ecfSJohan Hedberg static u16 le_default_mps = L2CAP_LE_DEFAULT_MPS; 56f15b8ecfSJohan Hedberg 570a708f8fSGustavo F. Padovan static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn, 580a708f8fSGustavo F. Padovan u8 code, u8 ident, u16 dlen, void *data); 594519de9aSGustavo F. Padovan static void l2cap_send_cmd(struct l2cap_conn *conn, u8 ident, u8 code, u16 len, 604519de9aSGustavo F. Padovan void *data); 61710f9b0aSGustavo F. Padovan static int l2cap_build_conf_req(struct l2cap_chan *chan, void *data); 625e4e3972SAndrei Emeltchenko static void l2cap_send_disconn_req(struct l2cap_chan *chan, int err); 630a708f8fSGustavo F. Padovan 64d660366dSGustavo Padovan static void l2cap_tx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 65608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event); 66608bcc6dSMat Martineau 67a250e048SJohan Hedberg static inline u8 bdaddr_type(u8 link_type, u8 bdaddr_type) 684f1654e0SMarcel Holtmann { 69a250e048SJohan Hedberg if (link_type == LE_LINK) { 70a250e048SJohan Hedberg if (bdaddr_type == ADDR_LE_DEV_PUBLIC) 714f1654e0SMarcel Holtmann return BDADDR_LE_PUBLIC; 724f1654e0SMarcel Holtmann else 734f1654e0SMarcel Holtmann return BDADDR_LE_RANDOM; 744f1654e0SMarcel Holtmann } 754f1654e0SMarcel Holtmann 764f1654e0SMarcel Holtmann return BDADDR_BREDR; 774f1654e0SMarcel Holtmann } 784f1654e0SMarcel Holtmann 79a250e048SJohan Hedberg static inline u8 bdaddr_src_type(struct hci_conn *hcon) 80a250e048SJohan Hedberg { 81a250e048SJohan Hedberg return bdaddr_type(hcon->type, hcon->src_type); 82a250e048SJohan Hedberg } 83a250e048SJohan Hedberg 84a250e048SJohan Hedberg static inline u8 bdaddr_dst_type(struct hci_conn *hcon) 85a250e048SJohan Hedberg { 86a250e048SJohan Hedberg return bdaddr_type(hcon->type, hcon->dst_type); 87a250e048SJohan Hedberg } 88a250e048SJohan Hedberg 890a708f8fSGustavo F. Padovan /* ---- L2CAP channels ---- */ 9071ba0e56SGustavo F. Padovan 912d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_dcid(struct l2cap_conn *conn, 922d792818SGustavo Padovan u16 cid) 930a708f8fSGustavo F. Padovan { 943df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 95baa7e1faSGustavo F. Padovan 963df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 973df91ea2SAndrei Emeltchenko if (c->dcid == cid) 983df91ea2SAndrei Emeltchenko return c; 990a708f8fSGustavo F. Padovan } 1003df91ea2SAndrei Emeltchenko return NULL; 101baa7e1faSGustavo F. Padovan } 1020a708f8fSGustavo F. Padovan 1032d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_scid(struct l2cap_conn *conn, 1042d792818SGustavo Padovan u16 cid) 1050a708f8fSGustavo F. Padovan { 1063df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 107baa7e1faSGustavo F. Padovan 1083df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 1093df91ea2SAndrei Emeltchenko if (c->scid == cid) 1103df91ea2SAndrei Emeltchenko return c; 1110a708f8fSGustavo F. Padovan } 1123df91ea2SAndrei Emeltchenko return NULL; 113baa7e1faSGustavo F. Padovan } 1140a708f8fSGustavo F. Padovan 1150a708f8fSGustavo F. Padovan /* Find channel with given SCID. 116ef191adeSMat Martineau * Returns locked channel. */ 1172d792818SGustavo Padovan static struct l2cap_chan *l2cap_get_chan_by_scid(struct l2cap_conn *conn, 1182d792818SGustavo Padovan u16 cid) 1190a708f8fSGustavo F. Padovan { 12048454079SGustavo F. Padovan struct l2cap_chan *c; 121baa7e1faSGustavo F. Padovan 1223df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 123baa7e1faSGustavo F. Padovan c = __l2cap_get_chan_by_scid(conn, cid); 124ef191adeSMat Martineau if (c) 125ef191adeSMat Martineau l2cap_chan_lock(c); 1263df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 1273df91ea2SAndrei Emeltchenko 12848454079SGustavo F. Padovan return c; 1290a708f8fSGustavo F. Padovan } 1300a708f8fSGustavo F. Padovan 131b1a130b7SMat Martineau /* Find channel with given DCID. 132b1a130b7SMat Martineau * Returns locked channel. 133b1a130b7SMat Martineau */ 134b1a130b7SMat Martineau static struct l2cap_chan *l2cap_get_chan_by_dcid(struct l2cap_conn *conn, 135b1a130b7SMat Martineau u16 cid) 136b1a130b7SMat Martineau { 137b1a130b7SMat Martineau struct l2cap_chan *c; 138b1a130b7SMat Martineau 139b1a130b7SMat Martineau mutex_lock(&conn->chan_lock); 140b1a130b7SMat Martineau c = __l2cap_get_chan_by_dcid(conn, cid); 141b1a130b7SMat Martineau if (c) 142b1a130b7SMat Martineau l2cap_chan_lock(c); 143b1a130b7SMat Martineau mutex_unlock(&conn->chan_lock); 144b1a130b7SMat Martineau 145b1a130b7SMat Martineau return c; 146b1a130b7SMat Martineau } 147b1a130b7SMat Martineau 1482d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_ident(struct l2cap_conn *conn, 1492d792818SGustavo Padovan u8 ident) 1500a708f8fSGustavo F. Padovan { 1513df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 152baa7e1faSGustavo F. Padovan 1533df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 1543df91ea2SAndrei Emeltchenko if (c->ident == ident) 1553df91ea2SAndrei Emeltchenko return c; 1560a708f8fSGustavo F. Padovan } 1573df91ea2SAndrei Emeltchenko return NULL; 158baa7e1faSGustavo F. Padovan } 1590a708f8fSGustavo F. Padovan 1605b155ef9SMat Martineau static struct l2cap_chan *l2cap_get_chan_by_ident(struct l2cap_conn *conn, 1615b155ef9SMat Martineau u8 ident) 1625b155ef9SMat Martineau { 1635b155ef9SMat Martineau struct l2cap_chan *c; 1645b155ef9SMat Martineau 1655b155ef9SMat Martineau mutex_lock(&conn->chan_lock); 1665b155ef9SMat Martineau c = __l2cap_get_chan_by_ident(conn, ident); 1675b155ef9SMat Martineau if (c) 1685b155ef9SMat Martineau l2cap_chan_lock(c); 1695b155ef9SMat Martineau mutex_unlock(&conn->chan_lock); 1705b155ef9SMat Martineau 1715b155ef9SMat Martineau return c; 1725b155ef9SMat Martineau } 1735b155ef9SMat Martineau 17423691d75SGustavo F. Padovan static struct l2cap_chan *__l2cap_global_chan_by_addr(__le16 psm, bdaddr_t *src) 1759e4425ffSGustavo F. Padovan { 17623691d75SGustavo F. Padovan struct l2cap_chan *c; 1779e4425ffSGustavo F. Padovan 17823691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 1797eafc59eSMarcel Holtmann if (c->sport == psm && !bacmp(&c->src, src)) 18023691d75SGustavo F. Padovan return c; 1819e4425ffSGustavo F. Padovan } 182250938cbSSzymon Janc return NULL; 183250938cbSSzymon Janc } 1849e4425ffSGustavo F. Padovan 1859e4425ffSGustavo F. Padovan int l2cap_add_psm(struct l2cap_chan *chan, bdaddr_t *src, __le16 psm) 1869e4425ffSGustavo F. Padovan { 18773b2ec18SGustavo F. Padovan int err; 18873b2ec18SGustavo F. Padovan 189333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 1909e4425ffSGustavo F. Padovan 19123691d75SGustavo F. Padovan if (psm && __l2cap_global_chan_by_addr(psm, src)) { 19273b2ec18SGustavo F. Padovan err = -EADDRINUSE; 19373b2ec18SGustavo F. Padovan goto done; 1949e4425ffSGustavo F. Padovan } 1959e4425ffSGustavo F. Padovan 19673b2ec18SGustavo F. Padovan if (psm) { 1979e4425ffSGustavo F. Padovan chan->psm = psm; 1989e4425ffSGustavo F. Padovan chan->sport = psm; 19973b2ec18SGustavo F. Padovan err = 0; 20073b2ec18SGustavo F. Padovan } else { 20192594a51SJohan Hedberg u16 p, start, end, incr; 20292594a51SJohan Hedberg 20392594a51SJohan Hedberg if (chan->src_type == BDADDR_BREDR) { 20492594a51SJohan Hedberg start = L2CAP_PSM_DYN_START; 20592594a51SJohan Hedberg end = L2CAP_PSM_AUTO_END; 20692594a51SJohan Hedberg incr = 2; 20792594a51SJohan Hedberg } else { 20892594a51SJohan Hedberg start = L2CAP_PSM_LE_DYN_START; 20992594a51SJohan Hedberg end = L2CAP_PSM_LE_DYN_END; 21092594a51SJohan Hedberg incr = 1; 21192594a51SJohan Hedberg } 2129e4425ffSGustavo F. Padovan 21373b2ec18SGustavo F. Padovan err = -EINVAL; 21492594a51SJohan Hedberg for (p = start; p <= end; p += incr) 21523691d75SGustavo F. Padovan if (!__l2cap_global_chan_by_addr(cpu_to_le16(p), src)) { 21673b2ec18SGustavo F. Padovan chan->psm = cpu_to_le16(p); 21773b2ec18SGustavo F. Padovan chan->sport = cpu_to_le16(p); 21873b2ec18SGustavo F. Padovan err = 0; 21973b2ec18SGustavo F. Padovan break; 22073b2ec18SGustavo F. Padovan } 22173b2ec18SGustavo F. Padovan } 22273b2ec18SGustavo F. Padovan 22373b2ec18SGustavo F. Padovan done: 224333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 22573b2ec18SGustavo F. Padovan return err; 2269e4425ffSGustavo F. Padovan } 2276b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_add_psm); 2289e4425ffSGustavo F. Padovan 2299e4425ffSGustavo F. Padovan int l2cap_add_scid(struct l2cap_chan *chan, __u16 scid) 2309e4425ffSGustavo F. Padovan { 231333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 2329e4425ffSGustavo F. Padovan 23314824308SJohan Hedberg /* Override the defaults (which are for conn-oriented) */ 23414824308SJohan Hedberg chan->omtu = L2CAP_DEFAULT_MTU; 23514824308SJohan Hedberg chan->chan_type = L2CAP_CHAN_FIXED; 23614824308SJohan Hedberg 2379e4425ffSGustavo F. Padovan chan->scid = scid; 2389e4425ffSGustavo F. Padovan 239333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 2409e4425ffSGustavo F. Padovan 2419e4425ffSGustavo F. Padovan return 0; 2429e4425ffSGustavo F. Padovan } 2439e4425ffSGustavo F. Padovan 244baa7e1faSGustavo F. Padovan static u16 l2cap_alloc_cid(struct l2cap_conn *conn) 2450a708f8fSGustavo F. Padovan { 246e77af755SJohan Hedberg u16 cid, dyn_end; 2470a708f8fSGustavo F. Padovan 248e77af755SJohan Hedberg if (conn->hcon->type == LE_LINK) 249e77af755SJohan Hedberg dyn_end = L2CAP_CID_LE_DYN_END; 250e77af755SJohan Hedberg else 251e77af755SJohan Hedberg dyn_end = L2CAP_CID_DYN_END; 252e77af755SJohan Hedberg 253ab0c127fSJohan Hedberg for (cid = L2CAP_CID_DYN_START; cid <= dyn_end; cid++) { 254baa7e1faSGustavo F. Padovan if (!__l2cap_get_chan_by_scid(conn, cid)) 2550a708f8fSGustavo F. Padovan return cid; 2560a708f8fSGustavo F. Padovan } 2570a708f8fSGustavo F. Padovan 2580a708f8fSGustavo F. Padovan return 0; 2590a708f8fSGustavo F. Padovan } 2600a708f8fSGustavo F. Padovan 261f93fa273SGustavo Padovan static void l2cap_state_change(struct l2cap_chan *chan, int state) 26289bc500eSGustavo F. Padovan { 26342d2d87cSAndrei Emeltchenko BT_DBG("chan %p %s -> %s", chan, state_to_string(chan->state), 264badaaa00SGustavo F. Padovan state_to_string(state)); 265badaaa00SGustavo F. Padovan 26689bc500eSGustavo F. Padovan chan->state = state; 26753f52121SGustavo Padovan chan->ops->state_change(chan, state, 0); 26889bc500eSGustavo F. Padovan } 26989bc500eSGustavo F. Padovan 270f8e73017SGustavo Padovan static inline void l2cap_state_change_and_error(struct l2cap_chan *chan, 271f8e73017SGustavo Padovan int state, int err) 2722e0052e4SAndrei Emeltchenko { 273f8e73017SGustavo Padovan chan->state = state; 27453f52121SGustavo Padovan chan->ops->state_change(chan, chan->state, err); 2752e0052e4SAndrei Emeltchenko } 2762e0052e4SAndrei Emeltchenko 2772e0052e4SAndrei Emeltchenko static inline void l2cap_chan_set_err(struct l2cap_chan *chan, int err) 2782e0052e4SAndrei Emeltchenko { 279f8e73017SGustavo Padovan chan->ops->state_change(chan, chan->state, err); 2802e0052e4SAndrei Emeltchenko } 2812e0052e4SAndrei Emeltchenko 2824239d16fSMat Martineau static void __set_retrans_timer(struct l2cap_chan *chan) 2834239d16fSMat Martineau { 2844239d16fSMat Martineau if (!delayed_work_pending(&chan->monitor_timer) && 2854239d16fSMat Martineau chan->retrans_timeout) { 2864239d16fSMat Martineau l2cap_set_timer(chan, &chan->retrans_timer, 2874239d16fSMat Martineau msecs_to_jiffies(chan->retrans_timeout)); 2884239d16fSMat Martineau } 2894239d16fSMat Martineau } 2904239d16fSMat Martineau 2914239d16fSMat Martineau static void __set_monitor_timer(struct l2cap_chan *chan) 2924239d16fSMat Martineau { 2934239d16fSMat Martineau __clear_retrans_timer(chan); 2944239d16fSMat Martineau if (chan->monitor_timeout) { 2954239d16fSMat Martineau l2cap_set_timer(chan, &chan->monitor_timer, 2964239d16fSMat Martineau msecs_to_jiffies(chan->monitor_timeout)); 2974239d16fSMat Martineau } 2984239d16fSMat Martineau } 2994239d16fSMat Martineau 300608bcc6dSMat Martineau static struct sk_buff *l2cap_ertm_seq_in_queue(struct sk_buff_head *head, 301608bcc6dSMat Martineau u16 seq) 302608bcc6dSMat Martineau { 303608bcc6dSMat Martineau struct sk_buff *skb; 304608bcc6dSMat Martineau 305608bcc6dSMat Martineau skb_queue_walk(head, skb) { 306a4368ff3SJohan Hedberg if (bt_cb(skb)->l2cap.txseq == seq) 307608bcc6dSMat Martineau return skb; 308608bcc6dSMat Martineau } 309608bcc6dSMat Martineau 310608bcc6dSMat Martineau return NULL; 311608bcc6dSMat Martineau } 312608bcc6dSMat Martineau 3133c588192SMat Martineau /* ---- L2CAP sequence number lists ---- */ 3143c588192SMat Martineau 3153c588192SMat Martineau /* For ERTM, ordered lists of sequence numbers must be tracked for 3163c588192SMat Martineau * SREJ requests that are received and for frames that are to be 3173c588192SMat Martineau * retransmitted. These seq_list functions implement a singly-linked 3183c588192SMat Martineau * list in an array, where membership in the list can also be checked 3193c588192SMat Martineau * in constant time. Items can also be added to the tail of the list 3203c588192SMat Martineau * and removed from the head in constant time, without further memory 3213c588192SMat Martineau * allocs or frees. 3223c588192SMat Martineau */ 3233c588192SMat Martineau 3243c588192SMat Martineau static int l2cap_seq_list_init(struct l2cap_seq_list *seq_list, u16 size) 3253c588192SMat Martineau { 3263c588192SMat Martineau size_t alloc_size, i; 3273c588192SMat Martineau 3283c588192SMat Martineau /* Allocated size is a power of 2 to map sequence numbers 3293c588192SMat Martineau * (which may be up to 14 bits) in to a smaller array that is 3303c588192SMat Martineau * sized for the negotiated ERTM transmit windows. 3313c588192SMat Martineau */ 3323c588192SMat Martineau alloc_size = roundup_pow_of_two(size); 3333c588192SMat Martineau 3343c588192SMat Martineau seq_list->list = kmalloc(sizeof(u16) * alloc_size, GFP_KERNEL); 3353c588192SMat Martineau if (!seq_list->list) 3363c588192SMat Martineau return -ENOMEM; 3373c588192SMat Martineau 3383c588192SMat Martineau seq_list->mask = alloc_size - 1; 3393c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3403c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3413c588192SMat Martineau for (i = 0; i < alloc_size; i++) 3423c588192SMat Martineau seq_list->list[i] = L2CAP_SEQ_LIST_CLEAR; 3433c588192SMat Martineau 3443c588192SMat Martineau return 0; 3453c588192SMat Martineau } 3463c588192SMat Martineau 3473c588192SMat Martineau static inline void l2cap_seq_list_free(struct l2cap_seq_list *seq_list) 3483c588192SMat Martineau { 3493c588192SMat Martineau kfree(seq_list->list); 3503c588192SMat Martineau } 3513c588192SMat Martineau 3523c588192SMat Martineau static inline bool l2cap_seq_list_contains(struct l2cap_seq_list *seq_list, 3533c588192SMat Martineau u16 seq) 3543c588192SMat Martineau { 3553c588192SMat Martineau /* Constant-time check for list membership */ 3563c588192SMat Martineau return seq_list->list[seq & seq_list->mask] != L2CAP_SEQ_LIST_CLEAR; 3573c588192SMat Martineau } 3583c588192SMat Martineau 35903a0c5d6SJohan Hedberg static inline u16 l2cap_seq_list_pop(struct l2cap_seq_list *seq_list) 3603c588192SMat Martineau { 36103a0c5d6SJohan Hedberg u16 seq = seq_list->head; 3623c588192SMat Martineau u16 mask = seq_list->mask; 3633c588192SMat Martineau 3643c588192SMat Martineau seq_list->head = seq_list->list[seq & mask]; 3653c588192SMat Martineau seq_list->list[seq & mask] = L2CAP_SEQ_LIST_CLEAR; 3663c588192SMat Martineau 3673c588192SMat Martineau if (seq_list->head == L2CAP_SEQ_LIST_TAIL) { 3683c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3693c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3703c588192SMat Martineau } 3713c588192SMat Martineau 3723c588192SMat Martineau return seq; 3733c588192SMat Martineau } 3743c588192SMat Martineau 3753c588192SMat Martineau static void l2cap_seq_list_clear(struct l2cap_seq_list *seq_list) 3763c588192SMat Martineau { 3773c588192SMat Martineau u16 i; 378f522ae36SGustavo Padovan 379f522ae36SGustavo Padovan if (seq_list->head == L2CAP_SEQ_LIST_CLEAR) 380f522ae36SGustavo Padovan return; 381f522ae36SGustavo Padovan 3823c588192SMat Martineau for (i = 0; i <= seq_list->mask; i++) 3833c588192SMat Martineau seq_list->list[i] = L2CAP_SEQ_LIST_CLEAR; 3843c588192SMat Martineau 3853c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3863c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3873c588192SMat Martineau } 3883c588192SMat Martineau 3893c588192SMat Martineau static void l2cap_seq_list_append(struct l2cap_seq_list *seq_list, u16 seq) 3903c588192SMat Martineau { 3913c588192SMat Martineau u16 mask = seq_list->mask; 3923c588192SMat Martineau 3933c588192SMat Martineau /* All appends happen in constant time */ 3943c588192SMat Martineau 395f522ae36SGustavo Padovan if (seq_list->list[seq & mask] != L2CAP_SEQ_LIST_CLEAR) 396f522ae36SGustavo Padovan return; 397f522ae36SGustavo Padovan 3983c588192SMat Martineau if (seq_list->tail == L2CAP_SEQ_LIST_CLEAR) 3993c588192SMat Martineau seq_list->head = seq; 4003c588192SMat Martineau else 4013c588192SMat Martineau seq_list->list[seq_list->tail & mask] = seq; 4023c588192SMat Martineau 4033c588192SMat Martineau seq_list->tail = seq; 4043c588192SMat Martineau seq_list->list[seq & mask] = L2CAP_SEQ_LIST_TAIL; 4053c588192SMat Martineau } 4063c588192SMat Martineau 407721c4181SGustavo F. Padovan static void l2cap_chan_timeout(struct work_struct *work) 408ab07801dSGustavo F. Padovan { 409721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 410721c4181SGustavo F. Padovan chan_timer.work); 4113df91ea2SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 412ab07801dSGustavo F. Padovan int reason; 413ab07801dSGustavo F. Padovan 414e05dcc32SAndrei Emeltchenko BT_DBG("chan %p state %s", chan, state_to_string(chan->state)); 415ab07801dSGustavo F. Padovan 4163df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 4176be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 418ab07801dSGustavo F. Padovan 41989bc500eSGustavo F. Padovan if (chan->state == BT_CONNECTED || chan->state == BT_CONFIG) 420ab07801dSGustavo F. Padovan reason = ECONNREFUSED; 42189bc500eSGustavo F. Padovan else if (chan->state == BT_CONNECT && 422ab07801dSGustavo F. Padovan chan->sec_level != BT_SECURITY_SDP) 423ab07801dSGustavo F. Padovan reason = ECONNREFUSED; 424ab07801dSGustavo F. Padovan else 425ab07801dSGustavo F. Padovan reason = ETIMEDOUT; 426ab07801dSGustavo F. Padovan 4270f852724SGustavo F. Padovan l2cap_chan_close(chan, reason); 428ab07801dSGustavo F. Padovan 4296be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 430ab07801dSGustavo F. Padovan 43180b98027SGustavo Padovan chan->ops->close(chan); 4323df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 4333df91ea2SAndrei Emeltchenko 434371fd835SUlisses Furquim l2cap_chan_put(chan); 435ab07801dSGustavo F. Padovan } 436ab07801dSGustavo F. Padovan 437eef1d9b6SGustavo Padovan struct l2cap_chan *l2cap_chan_create(void) 4380a708f8fSGustavo F. Padovan { 43948454079SGustavo F. Padovan struct l2cap_chan *chan; 4400a708f8fSGustavo F. Padovan 44148454079SGustavo F. Padovan chan = kzalloc(sizeof(*chan), GFP_ATOMIC); 44248454079SGustavo F. Padovan if (!chan) 44348454079SGustavo F. Padovan return NULL; 4440a708f8fSGustavo F. Padovan 445c03b355eSAndrei Emeltchenko mutex_init(&chan->lock); 446c03b355eSAndrei Emeltchenko 447ff714119SJohan Hedberg /* Set default lock nesting level */ 448ff714119SJohan Hedberg atomic_set(&chan->nesting, L2CAP_NESTING_NORMAL); 449ff714119SJohan Hedberg 450333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 45123691d75SGustavo F. Padovan list_add(&chan->global_l, &chan_list); 452333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 45323691d75SGustavo F. Padovan 454721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->chan_timer, l2cap_chan_timeout); 455ab07801dSGustavo F. Padovan 45689bc500eSGustavo F. Padovan chan->state = BT_OPEN; 45789bc500eSGustavo F. Padovan 458144ad330SSyam Sidhardhan kref_init(&chan->kref); 45971ba0e56SGustavo F. Padovan 4602827011fSMat Martineau /* This flag is cleared in l2cap_chan_ready() */ 4612827011fSMat Martineau set_bit(CONF_NOT_COMPLETE, &chan->conf_state); 4622827011fSMat Martineau 463eef1d9b6SGustavo Padovan BT_DBG("chan %p", chan); 464abc545b8SSzymon Janc 46548454079SGustavo F. Padovan return chan; 4660a708f8fSGustavo F. Padovan } 4676b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_create); 4680a708f8fSGustavo F. Padovan 469144ad330SSyam Sidhardhan static void l2cap_chan_destroy(struct kref *kref) 4706ff5abbfSGustavo F. Padovan { 471144ad330SSyam Sidhardhan struct l2cap_chan *chan = container_of(kref, struct l2cap_chan, kref); 472144ad330SSyam Sidhardhan 4734af66c69SJaganath Kanakkassery BT_DBG("chan %p", chan); 4744af66c69SJaganath Kanakkassery 475333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 47623691d75SGustavo F. Padovan list_del(&chan->global_l); 477333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 47823691d75SGustavo F. Padovan 4794af66c69SJaganath Kanakkassery kfree(chan); 4806ff5abbfSGustavo F. Padovan } 4816ff5abbfSGustavo F. Padovan 48230648372SJaganath Kanakkassery void l2cap_chan_hold(struct l2cap_chan *c) 48330648372SJaganath Kanakkassery { 484144ad330SSyam Sidhardhan BT_DBG("chan %p orig refcnt %d", c, atomic_read(&c->kref.refcount)); 48530648372SJaganath Kanakkassery 486144ad330SSyam Sidhardhan kref_get(&c->kref); 48730648372SJaganath Kanakkassery } 48830648372SJaganath Kanakkassery 48930648372SJaganath Kanakkassery void l2cap_chan_put(struct l2cap_chan *c) 49030648372SJaganath Kanakkassery { 491144ad330SSyam Sidhardhan BT_DBG("chan %p orig refcnt %d", c, atomic_read(&c->kref.refcount)); 49230648372SJaganath Kanakkassery 493144ad330SSyam Sidhardhan kref_put(&c->kref, l2cap_chan_destroy); 49430648372SJaganath Kanakkassery } 4956b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_put); 49630648372SJaganath Kanakkassery 497bd4b1653SAndrei Emeltchenko void l2cap_chan_set_defaults(struct l2cap_chan *chan) 498bd4b1653SAndrei Emeltchenko { 499bd4b1653SAndrei Emeltchenko chan->fcs = L2CAP_FCS_CRC16; 500bd4b1653SAndrei Emeltchenko chan->max_tx = L2CAP_DEFAULT_MAX_TX; 501bd4b1653SAndrei Emeltchenko chan->tx_win = L2CAP_DEFAULT_TX_WINDOW; 502bd4b1653SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_TX_WINDOW; 5036a5e8165SJukka Rissanen chan->remote_max_tx = chan->max_tx; 5046a5e8165SJukka Rissanen chan->remote_tx_win = chan->tx_win; 505c20f8e35SMat Martineau chan->ack_win = L2CAP_DEFAULT_TX_WINDOW; 506bd4b1653SAndrei Emeltchenko chan->sec_level = BT_SECURITY_LOW; 5076a5e8165SJukka Rissanen chan->flush_to = L2CAP_DEFAULT_FLUSH_TO; 5086a5e8165SJukka Rissanen chan->retrans_timeout = L2CAP_DEFAULT_RETRANS_TO; 5096a5e8165SJukka Rissanen chan->monitor_timeout = L2CAP_DEFAULT_MONITOR_TO; 5106a5e8165SJukka Rissanen chan->conf_state = 0; 511bd4b1653SAndrei Emeltchenko 512bd4b1653SAndrei Emeltchenko set_bit(FLAG_FORCE_ACTIVE, &chan->flags); 513bd4b1653SAndrei Emeltchenko } 5146b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_set_defaults); 515bd4b1653SAndrei Emeltchenko 5160ce43ce6SJohan Hedberg static void l2cap_le_flowctl_init(struct l2cap_chan *chan) 51738319713SJohan Hedberg { 5180ce43ce6SJohan Hedberg chan->sdu = NULL; 5190ce43ce6SJohan Hedberg chan->sdu_last_frag = NULL; 5200ce43ce6SJohan Hedberg chan->sdu_len = 0; 5210cd75f7eSJohan Hedberg chan->tx_credits = 0; 522f15b8ecfSJohan Hedberg chan->rx_credits = le_max_credits; 523d1d79413SJohan Hedberg chan->mps = min_t(u16, chan->imtu, le_default_mps); 5240ce43ce6SJohan Hedberg 5250ce43ce6SJohan Hedberg skb_queue_head_init(&chan->tx_q); 52638319713SJohan Hedberg } 52738319713SJohan Hedberg 52893c3e8f5SAndrei Emeltchenko void __l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan) 5290a708f8fSGustavo F. Padovan { 5300a708f8fSGustavo F. Padovan BT_DBG("conn %p, psm 0x%2.2x, dcid 0x%4.4x", conn, 531097db76cSAndrei Emeltchenko __le16_to_cpu(chan->psm), chan->dcid); 5320a708f8fSGustavo F. Padovan 5339f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_REMOTE_USER_TERM; 5340a708f8fSGustavo F. Padovan 5358c1d787bSGustavo F. Padovan chan->conn = conn; 5360a708f8fSGustavo F. Padovan 5375491120eSAndrei Emeltchenko switch (chan->chan_type) { 5385491120eSAndrei Emeltchenko case L2CAP_CHAN_CONN_ORIENTED: 5390a708f8fSGustavo F. Padovan /* Alloc CID for connection-oriented socket */ 540fe4128e0SGustavo F. Padovan chan->scid = l2cap_alloc_cid(conn); 54121626e62SJohan Hedberg if (conn->hcon->type == ACL_LINK) 5420c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 5435491120eSAndrei Emeltchenko break; 5445491120eSAndrei Emeltchenko 5455491120eSAndrei Emeltchenko case L2CAP_CHAN_CONN_LESS: 5460a708f8fSGustavo F. Padovan /* Connectionless socket */ 547fe4128e0SGustavo F. Padovan chan->scid = L2CAP_CID_CONN_LESS; 548fe4128e0SGustavo F. Padovan chan->dcid = L2CAP_CID_CONN_LESS; 5490c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 5505491120eSAndrei Emeltchenko break; 5515491120eSAndrei Emeltchenko 5522338a7e0SJohan Hedberg case L2CAP_CHAN_FIXED: 5532338a7e0SJohan Hedberg /* Caller will set CID and CID specific MTU values */ 554416fa752SAndrei Emeltchenko break; 555416fa752SAndrei Emeltchenko 5565491120eSAndrei Emeltchenko default: 5570a708f8fSGustavo F. Padovan /* Raw socket can send/recv signalling messages only */ 558fe4128e0SGustavo F. Padovan chan->scid = L2CAP_CID_SIGNALING; 559fe4128e0SGustavo F. Padovan chan->dcid = L2CAP_CID_SIGNALING; 5600c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 5610a708f8fSGustavo F. Padovan } 5620a708f8fSGustavo F. Padovan 5638f7975b1SAndrei Emeltchenko chan->local_id = L2CAP_BESTEFFORT_ID; 5648f7975b1SAndrei Emeltchenko chan->local_stype = L2CAP_SERV_BESTEFFORT; 5658f7975b1SAndrei Emeltchenko chan->local_msdu = L2CAP_DEFAULT_MAX_SDU_SIZE; 5668f7975b1SAndrei Emeltchenko chan->local_sdu_itime = L2CAP_DEFAULT_SDU_ITIME; 5678f7975b1SAndrei Emeltchenko chan->local_acc_lat = L2CAP_DEFAULT_ACC_LAT; 5688936fa6dSAndrei Emeltchenko chan->local_flush_to = L2CAP_EFS_DEFAULT_FLUSH_TO; 5698f7975b1SAndrei Emeltchenko 570371fd835SUlisses Furquim l2cap_chan_hold(chan); 571baa7e1faSGustavo F. Padovan 572c16900cfSJohan Hedberg /* Only keep a reference for fixed channels if they requested it */ 573c16900cfSJohan Hedberg if (chan->chan_type != L2CAP_CHAN_FIXED || 574c16900cfSJohan Hedberg test_bit(FLAG_HOLD_HCI_CONN, &chan->flags)) 5755ee9891dSJohan Hedberg hci_conn_hold(conn->hcon); 5765ee9891dSJohan Hedberg 5773df91ea2SAndrei Emeltchenko list_add(&chan->list, &conn->chan_l); 578643162a8SAndrei Emeltchenko } 579643162a8SAndrei Emeltchenko 580466f8004SAndrei Emeltchenko void l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan) 581643162a8SAndrei Emeltchenko { 582643162a8SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 583643162a8SAndrei Emeltchenko __l2cap_chan_add(conn, chan); 5843df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 5850a708f8fSGustavo F. Padovan } 5860a708f8fSGustavo F. Padovan 587466f8004SAndrei Emeltchenko void l2cap_chan_del(struct l2cap_chan *chan, int err) 5880a708f8fSGustavo F. Padovan { 5898c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 5900a708f8fSGustavo F. Padovan 591c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 5920a708f8fSGustavo F. Padovan 59349d11741SJohan Hedberg BT_DBG("chan %p, conn %p, err %d, state %s", chan, conn, err, 59449d11741SJohan Hedberg state_to_string(chan->state)); 5950a708f8fSGustavo F. Padovan 59672847ce0SJohan Hedberg chan->ops->teardown(chan, err); 59772847ce0SJohan Hedberg 5980a708f8fSGustavo F. Padovan if (conn) { 59956f60984SAndrei Emeltchenko struct amp_mgr *mgr = conn->hcon->amp_mgr; 600baa7e1faSGustavo F. Padovan /* Delete from channel list */ 6013df91ea2SAndrei Emeltchenko list_del(&chan->list); 6023d57dc68SGustavo F. Padovan 603371fd835SUlisses Furquim l2cap_chan_put(chan); 604baa7e1faSGustavo F. Padovan 6058c1d787bSGustavo F. Padovan chan->conn = NULL; 6063cabbfdaSAndrei Emeltchenko 607c16900cfSJohan Hedberg /* Reference was only held for non-fixed channels or 608c16900cfSJohan Hedberg * fixed channels that explicitly requested it using the 609c16900cfSJohan Hedberg * FLAG_HOLD_HCI_CONN flag. 610c16900cfSJohan Hedberg */ 611c16900cfSJohan Hedberg if (chan->chan_type != L2CAP_CHAN_FIXED || 612c16900cfSJohan Hedberg test_bit(FLAG_HOLD_HCI_CONN, &chan->flags)) 61376a68ba0SDavid Herrmann hci_conn_drop(conn->hcon); 61456f60984SAndrei Emeltchenko 61556f60984SAndrei Emeltchenko if (mgr && mgr->bredr_chan == chan) 61656f60984SAndrei Emeltchenko mgr->bredr_chan = NULL; 6170a708f8fSGustavo F. Padovan } 6180a708f8fSGustavo F. Padovan 619419e08c1SAndrei Emeltchenko if (chan->hs_hchan) { 620419e08c1SAndrei Emeltchenko struct hci_chan *hs_hchan = chan->hs_hchan; 621419e08c1SAndrei Emeltchenko 622419e08c1SAndrei Emeltchenko BT_DBG("chan %p disconnect hs_hchan %p", chan, hs_hchan); 623419e08c1SAndrei Emeltchenko amp_disconnect_logical_link(hs_hchan); 624419e08c1SAndrei Emeltchenko } 625419e08c1SAndrei Emeltchenko 6262827011fSMat Martineau if (test_bit(CONF_NOT_COMPLETE, &chan->conf_state)) 6276ff5abbfSGustavo F. Padovan return; 6282ead70b8SGustavo F. Padovan 629ee556f66SGustavo Padovan switch(chan->mode) { 630ee556f66SGustavo Padovan case L2CAP_MODE_BASIC: 631ee556f66SGustavo Padovan break; 6320a708f8fSGustavo F. Padovan 63338319713SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 634177f8f2bSJohan Hedberg skb_queue_purge(&chan->tx_q); 63538319713SJohan Hedberg break; 63638319713SJohan Hedberg 637ee556f66SGustavo Padovan case L2CAP_MODE_ERTM: 6381a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 6391a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 6401a09bcb9SGustavo F. Padovan __clear_ack_timer(chan); 6410a708f8fSGustavo F. Padovan 642f1c6775bSGustavo F. Padovan skb_queue_purge(&chan->srej_q); 6430a708f8fSGustavo F. Padovan 6443c588192SMat Martineau l2cap_seq_list_free(&chan->srej_list); 6453c588192SMat Martineau l2cap_seq_list_free(&chan->retrans_list); 646ee556f66SGustavo Padovan 647ee556f66SGustavo Padovan /* fall through */ 648ee556f66SGustavo Padovan 649ee556f66SGustavo Padovan case L2CAP_MODE_STREAMING: 650ee556f66SGustavo Padovan skb_queue_purge(&chan->tx_q); 651ee556f66SGustavo Padovan break; 6520a708f8fSGustavo F. Padovan } 653ee556f66SGustavo Padovan 654ee556f66SGustavo Padovan return; 6550a708f8fSGustavo F. Padovan } 6566b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_del); 6570a708f8fSGustavo F. Padovan 658f3d82d0cSJohan Hedberg static void l2cap_conn_update_id_addr(struct work_struct *work) 659387a33e3SJohan Hedberg { 660f3d82d0cSJohan Hedberg struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 661f3d82d0cSJohan Hedberg id_addr_update_work); 662f3d82d0cSJohan Hedberg struct hci_conn *hcon = conn->hcon; 663387a33e3SJohan Hedberg struct l2cap_chan *chan; 664387a33e3SJohan Hedberg 665387a33e3SJohan Hedberg mutex_lock(&conn->chan_lock); 666387a33e3SJohan Hedberg 667387a33e3SJohan Hedberg list_for_each_entry(chan, &conn->chan_l, list) { 668387a33e3SJohan Hedberg l2cap_chan_lock(chan); 669387a33e3SJohan Hedberg bacpy(&chan->dst, &hcon->dst); 670a250e048SJohan Hedberg chan->dst_type = bdaddr_dst_type(hcon); 671387a33e3SJohan Hedberg l2cap_chan_unlock(chan); 672387a33e3SJohan Hedberg } 673387a33e3SJohan Hedberg 674387a33e3SJohan Hedberg mutex_unlock(&conn->chan_lock); 675387a33e3SJohan Hedberg } 676387a33e3SJohan Hedberg 67727e2d4c8SJohan Hedberg static void l2cap_chan_le_connect_reject(struct l2cap_chan *chan) 67827e2d4c8SJohan Hedberg { 67927e2d4c8SJohan Hedberg struct l2cap_conn *conn = chan->conn; 68027e2d4c8SJohan Hedberg struct l2cap_le_conn_rsp rsp; 68127e2d4c8SJohan Hedberg u16 result; 68227e2d4c8SJohan Hedberg 68327e2d4c8SJohan Hedberg if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) 68427e2d4c8SJohan Hedberg result = L2CAP_CR_AUTHORIZATION; 68527e2d4c8SJohan Hedberg else 68627e2d4c8SJohan Hedberg result = L2CAP_CR_BAD_PSM; 68727e2d4c8SJohan Hedberg 68827e2d4c8SJohan Hedberg l2cap_state_change(chan, BT_DISCONN); 68927e2d4c8SJohan Hedberg 69027e2d4c8SJohan Hedberg rsp.dcid = cpu_to_le16(chan->scid); 69127e2d4c8SJohan Hedberg rsp.mtu = cpu_to_le16(chan->imtu); 6923916aed8SJohan Hedberg rsp.mps = cpu_to_le16(chan->mps); 6930cd75f7eSJohan Hedberg rsp.credits = cpu_to_le16(chan->rx_credits); 69427e2d4c8SJohan Hedberg rsp.result = cpu_to_le16(result); 69527e2d4c8SJohan Hedberg 69627e2d4c8SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CONN_RSP, sizeof(rsp), 69727e2d4c8SJohan Hedberg &rsp); 69827e2d4c8SJohan Hedberg } 69927e2d4c8SJohan Hedberg 700791d60f7SJohan Hedberg static void l2cap_chan_connect_reject(struct l2cap_chan *chan) 701791d60f7SJohan Hedberg { 702791d60f7SJohan Hedberg struct l2cap_conn *conn = chan->conn; 703791d60f7SJohan Hedberg struct l2cap_conn_rsp rsp; 704791d60f7SJohan Hedberg u16 result; 705791d60f7SJohan Hedberg 706791d60f7SJohan Hedberg if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) 707791d60f7SJohan Hedberg result = L2CAP_CR_SEC_BLOCK; 708791d60f7SJohan Hedberg else 709791d60f7SJohan Hedberg result = L2CAP_CR_BAD_PSM; 710791d60f7SJohan Hedberg 711791d60f7SJohan Hedberg l2cap_state_change(chan, BT_DISCONN); 712791d60f7SJohan Hedberg 713791d60f7SJohan Hedberg rsp.scid = cpu_to_le16(chan->dcid); 714791d60f7SJohan Hedberg rsp.dcid = cpu_to_le16(chan->scid); 715791d60f7SJohan Hedberg rsp.result = cpu_to_le16(result); 716dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 717791d60f7SJohan Hedberg 718791d60f7SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, sizeof(rsp), &rsp); 719791d60f7SJohan Hedberg } 720791d60f7SJohan Hedberg 7210f852724SGustavo F. Padovan void l2cap_chan_close(struct l2cap_chan *chan, int reason) 7224519de9aSGustavo F. Padovan { 7234519de9aSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 7244519de9aSGustavo F. Padovan 7257eafc59eSMarcel Holtmann BT_DBG("chan %p state %s", chan, state_to_string(chan->state)); 7264519de9aSGustavo F. Padovan 72789bc500eSGustavo F. Padovan switch (chan->state) { 7284519de9aSGustavo F. Padovan case BT_LISTEN: 729c0df7f6eSAndrei Emeltchenko chan->ops->teardown(chan, 0); 7304519de9aSGustavo F. Padovan break; 7314519de9aSGustavo F. Padovan 7324519de9aSGustavo F. Padovan case BT_CONNECTED: 7334519de9aSGustavo F. Padovan case BT_CONFIG: 7347b25c9b3SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED) { 7358d836d71SGustavo Padovan __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 7365e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, reason); 7374519de9aSGustavo F. Padovan } else 7384519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 7394519de9aSGustavo F. Padovan break; 7404519de9aSGustavo F. Padovan 7414519de9aSGustavo F. Padovan case BT_CONNECT2: 742791d60f7SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED) { 743791d60f7SJohan Hedberg if (conn->hcon->type == ACL_LINK) 744791d60f7SJohan Hedberg l2cap_chan_connect_reject(chan); 74527e2d4c8SJohan Hedberg else if (conn->hcon->type == LE_LINK) 74627e2d4c8SJohan Hedberg l2cap_chan_le_connect_reject(chan); 7474519de9aSGustavo F. Padovan } 7484519de9aSGustavo F. Padovan 7494519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 7504519de9aSGustavo F. Padovan break; 7514519de9aSGustavo F. Padovan 7524519de9aSGustavo F. Padovan case BT_CONNECT: 7534519de9aSGustavo F. Padovan case BT_DISCONN: 7544519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 7554519de9aSGustavo F. Padovan break; 7564519de9aSGustavo F. Padovan 7574519de9aSGustavo F. Padovan default: 758c0df7f6eSAndrei Emeltchenko chan->ops->teardown(chan, 0); 7594519de9aSGustavo F. Padovan break; 7604519de9aSGustavo F. Padovan } 7614519de9aSGustavo F. Padovan } 7626b8d4a6aSJukka Rissanen EXPORT_SYMBOL(l2cap_chan_close); 7634519de9aSGustavo F. Padovan 7644343478fSGustavo F. Padovan static inline u8 l2cap_get_auth_type(struct l2cap_chan *chan) 7650a708f8fSGustavo F. Padovan { 7666a974b50SMarcel Holtmann switch (chan->chan_type) { 7676a974b50SMarcel Holtmann case L2CAP_CHAN_RAW: 7684343478fSGustavo F. Padovan switch (chan->sec_level) { 7690a708f8fSGustavo F. Padovan case BT_SECURITY_HIGH: 7707d513e92SMarcel Holtmann case BT_SECURITY_FIPS: 7710a708f8fSGustavo F. Padovan return HCI_AT_DEDICATED_BONDING_MITM; 7720a708f8fSGustavo F. Padovan case BT_SECURITY_MEDIUM: 7730a708f8fSGustavo F. Padovan return HCI_AT_DEDICATED_BONDING; 7740a708f8fSGustavo F. Padovan default: 7750a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 7760a708f8fSGustavo F. Padovan } 7776a974b50SMarcel Holtmann break; 7783124b843SMarcel Holtmann case L2CAP_CHAN_CONN_LESS: 779dcf4adbfSJoe Perches if (chan->psm == cpu_to_le16(L2CAP_PSM_3DSP)) { 7803124b843SMarcel Holtmann if (chan->sec_level == BT_SECURITY_LOW) 7813124b843SMarcel Holtmann chan->sec_level = BT_SECURITY_SDP; 7823124b843SMarcel Holtmann } 7837d513e92SMarcel Holtmann if (chan->sec_level == BT_SECURITY_HIGH || 7847d513e92SMarcel Holtmann chan->sec_level == BT_SECURITY_FIPS) 7853124b843SMarcel Holtmann return HCI_AT_NO_BONDING_MITM; 7863124b843SMarcel Holtmann else 7873124b843SMarcel Holtmann return HCI_AT_NO_BONDING; 7883124b843SMarcel Holtmann break; 7896a974b50SMarcel Holtmann case L2CAP_CHAN_CONN_ORIENTED: 790dcf4adbfSJoe Perches if (chan->psm == cpu_to_le16(L2CAP_PSM_SDP)) { 7914343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_LOW) 7924343478fSGustavo F. Padovan chan->sec_level = BT_SECURITY_SDP; 7930a708f8fSGustavo F. Padovan 7947d513e92SMarcel Holtmann if (chan->sec_level == BT_SECURITY_HIGH || 7957d513e92SMarcel Holtmann chan->sec_level == BT_SECURITY_FIPS) 7960a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING_MITM; 7970a708f8fSGustavo F. Padovan else 7980a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 7996a974b50SMarcel Holtmann } 8006a974b50SMarcel Holtmann /* fall through */ 8016a974b50SMarcel Holtmann default: 8024343478fSGustavo F. Padovan switch (chan->sec_level) { 8030a708f8fSGustavo F. Padovan case BT_SECURITY_HIGH: 8047d513e92SMarcel Holtmann case BT_SECURITY_FIPS: 8050a708f8fSGustavo F. Padovan return HCI_AT_GENERAL_BONDING_MITM; 8060a708f8fSGustavo F. Padovan case BT_SECURITY_MEDIUM: 8070a708f8fSGustavo F. Padovan return HCI_AT_GENERAL_BONDING; 8080a708f8fSGustavo F. Padovan default: 8090a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 8100a708f8fSGustavo F. Padovan } 8116a974b50SMarcel Holtmann break; 8120a708f8fSGustavo F. Padovan } 8130a708f8fSGustavo F. Padovan } 8140a708f8fSGustavo F. Padovan 8150a708f8fSGustavo F. Padovan /* Service level security */ 816e7cafc45SJohan Hedberg int l2cap_chan_check_security(struct l2cap_chan *chan, bool initiator) 8170a708f8fSGustavo F. Padovan { 8188c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 8190a708f8fSGustavo F. Padovan __u8 auth_type; 8200a708f8fSGustavo F. Padovan 821a17de2feSJohan Hedberg if (conn->hcon->type == LE_LINK) 822a17de2feSJohan Hedberg return smp_conn_security(conn->hcon, chan->sec_level); 823a17de2feSJohan Hedberg 8244343478fSGustavo F. Padovan auth_type = l2cap_get_auth_type(chan); 8250a708f8fSGustavo F. Padovan 826e7cafc45SJohan Hedberg return hci_conn_security(conn->hcon, chan->sec_level, auth_type, 827e7cafc45SJohan Hedberg initiator); 8280a708f8fSGustavo F. Padovan } 8290a708f8fSGustavo F. Padovan 830b5ad8b7fSJohannes Berg static u8 l2cap_get_ident(struct l2cap_conn *conn) 8310a708f8fSGustavo F. Padovan { 8320a708f8fSGustavo F. Padovan u8 id; 8330a708f8fSGustavo F. Padovan 8340a708f8fSGustavo F. Padovan /* Get next available identificator. 8350a708f8fSGustavo F. Padovan * 1 - 128 are used by kernel. 8360a708f8fSGustavo F. Padovan * 129 - 199 are reserved. 8370a708f8fSGustavo F. Padovan * 200 - 254 are used by utilities like l2ping, etc. 8380a708f8fSGustavo F. Padovan */ 8390a708f8fSGustavo F. Padovan 8405a54e7c8SMarcel Holtmann mutex_lock(&conn->ident_lock); 8410a708f8fSGustavo F. Padovan 8420a708f8fSGustavo F. Padovan if (++conn->tx_ident > 128) 8430a708f8fSGustavo F. Padovan conn->tx_ident = 1; 8440a708f8fSGustavo F. Padovan 8450a708f8fSGustavo F. Padovan id = conn->tx_ident; 8460a708f8fSGustavo F. Padovan 8475a54e7c8SMarcel Holtmann mutex_unlock(&conn->ident_lock); 8480a708f8fSGustavo F. Padovan 8490a708f8fSGustavo F. Padovan return id; 8500a708f8fSGustavo F. Padovan } 8510a708f8fSGustavo F. Padovan 8522d792818SGustavo Padovan static void l2cap_send_cmd(struct l2cap_conn *conn, u8 ident, u8 code, u16 len, 8532d792818SGustavo Padovan void *data) 8540a708f8fSGustavo F. Padovan { 8550a708f8fSGustavo F. Padovan struct sk_buff *skb = l2cap_build_cmd(conn, code, ident, len, data); 8560a708f8fSGustavo F. Padovan u8 flags; 8570a708f8fSGustavo F. Padovan 8580a708f8fSGustavo F. Padovan BT_DBG("code 0x%2.2x", code); 8590a708f8fSGustavo F. Padovan 8600a708f8fSGustavo F. Padovan if (!skb) 8610a708f8fSGustavo F. Padovan return; 8620a708f8fSGustavo F. Padovan 863f6af675eSSteven Walter /* Use NO_FLUSH if supported or we have an LE link (which does 864f6af675eSSteven Walter * not support auto-flushing packets) */ 865f6af675eSSteven Walter if (lmp_no_flush_capable(conn->hcon->hdev) || 866f6af675eSSteven Walter conn->hcon->type == LE_LINK) 8670a708f8fSGustavo F. Padovan flags = ACL_START_NO_FLUSH; 8680a708f8fSGustavo F. Padovan else 8690a708f8fSGustavo F. Padovan flags = ACL_START; 8700a708f8fSGustavo F. Padovan 87114b12d0bSJaikumar Ganesh bt_cb(skb)->force_active = BT_POWER_FORCE_ACTIVE_ON; 8725e59b791SLuiz Augusto von Dentz skb->priority = HCI_PRIO_MAX; 87314b12d0bSJaikumar Ganesh 87473d80debSLuiz Augusto von Dentz hci_send_acl(conn->hchan, skb, flags); 8750a708f8fSGustavo F. Padovan } 8760a708f8fSGustavo F. Padovan 87702b0fbb9SMat Martineau static bool __chan_is_moving(struct l2cap_chan *chan) 87802b0fbb9SMat Martineau { 87902b0fbb9SMat Martineau return chan->move_state != L2CAP_MOVE_STABLE && 88002b0fbb9SMat Martineau chan->move_state != L2CAP_MOVE_WAIT_PREPARE; 88102b0fbb9SMat Martineau } 88202b0fbb9SMat Martineau 88373d80debSLuiz Augusto von Dentz static void l2cap_do_send(struct l2cap_chan *chan, struct sk_buff *skb) 88473d80debSLuiz Augusto von Dentz { 88573d80debSLuiz Augusto von Dentz struct hci_conn *hcon = chan->conn->hcon; 88673d80debSLuiz Augusto von Dentz u16 flags; 88773d80debSLuiz Augusto von Dentz 88873d80debSLuiz Augusto von Dentz BT_DBG("chan %p, skb %p len %d priority %u", chan, skb, skb->len, 88973d80debSLuiz Augusto von Dentz skb->priority); 89073d80debSLuiz Augusto von Dentz 891d5f8a75dSMat Martineau if (chan->hs_hcon && !__chan_is_moving(chan)) { 892d5f8a75dSMat Martineau if (chan->hs_hchan) 893d5f8a75dSMat Martineau hci_send_acl(chan->hs_hchan, skb, ACL_COMPLETE); 894d5f8a75dSMat Martineau else 895d5f8a75dSMat Martineau kfree_skb(skb); 896d5f8a75dSMat Martineau 897d5f8a75dSMat Martineau return; 898d5f8a75dSMat Martineau } 899d5f8a75dSMat Martineau 900f6af675eSSteven Walter /* Use NO_FLUSH for LE links (where this is the only option) or 901f6af675eSSteven Walter * if the BR/EDR link supports it and flushing has not been 902f6af675eSSteven Walter * explicitly requested (through FLAG_FLUSHABLE). 903f6af675eSSteven Walter */ 904f6af675eSSteven Walter if (hcon->type == LE_LINK || 905f6af675eSSteven Walter (!test_bit(FLAG_FLUSHABLE, &chan->flags) && 906f6af675eSSteven Walter lmp_no_flush_capable(hcon->hdev))) 90773d80debSLuiz Augusto von Dentz flags = ACL_START_NO_FLUSH; 90873d80debSLuiz Augusto von Dentz else 90973d80debSLuiz Augusto von Dentz flags = ACL_START; 91073d80debSLuiz Augusto von Dentz 91173d80debSLuiz Augusto von Dentz bt_cb(skb)->force_active = test_bit(FLAG_FORCE_ACTIVE, &chan->flags); 91273d80debSLuiz Augusto von Dentz hci_send_acl(chan->conn->hchan, skb, flags); 9130a708f8fSGustavo F. Padovan } 9140a708f8fSGustavo F. Padovan 915b5c6aaedSMat Martineau static void __unpack_enhanced_control(u16 enh, struct l2cap_ctrl *control) 916b5c6aaedSMat Martineau { 917b5c6aaedSMat Martineau control->reqseq = (enh & L2CAP_CTRL_REQSEQ) >> L2CAP_CTRL_REQSEQ_SHIFT; 918b5c6aaedSMat Martineau control->final = (enh & L2CAP_CTRL_FINAL) >> L2CAP_CTRL_FINAL_SHIFT; 919b5c6aaedSMat Martineau 920b5c6aaedSMat Martineau if (enh & L2CAP_CTRL_FRAME_TYPE) { 921b5c6aaedSMat Martineau /* S-Frame */ 922b5c6aaedSMat Martineau control->sframe = 1; 923b5c6aaedSMat Martineau control->poll = (enh & L2CAP_CTRL_POLL) >> L2CAP_CTRL_POLL_SHIFT; 924b5c6aaedSMat Martineau control->super = (enh & L2CAP_CTRL_SUPERVISE) >> L2CAP_CTRL_SUPER_SHIFT; 925b5c6aaedSMat Martineau 926b5c6aaedSMat Martineau control->sar = 0; 927b5c6aaedSMat Martineau control->txseq = 0; 928b5c6aaedSMat Martineau } else { 929b5c6aaedSMat Martineau /* I-Frame */ 930b5c6aaedSMat Martineau control->sframe = 0; 931b5c6aaedSMat Martineau control->sar = (enh & L2CAP_CTRL_SAR) >> L2CAP_CTRL_SAR_SHIFT; 932b5c6aaedSMat Martineau control->txseq = (enh & L2CAP_CTRL_TXSEQ) >> L2CAP_CTRL_TXSEQ_SHIFT; 933b5c6aaedSMat Martineau 934b5c6aaedSMat Martineau control->poll = 0; 935b5c6aaedSMat Martineau control->super = 0; 936b5c6aaedSMat Martineau } 937b5c6aaedSMat Martineau } 938b5c6aaedSMat Martineau 939b5c6aaedSMat Martineau static void __unpack_extended_control(u32 ext, struct l2cap_ctrl *control) 940b5c6aaedSMat Martineau { 941b5c6aaedSMat Martineau control->reqseq = (ext & L2CAP_EXT_CTRL_REQSEQ) >> L2CAP_EXT_CTRL_REQSEQ_SHIFT; 942b5c6aaedSMat Martineau control->final = (ext & L2CAP_EXT_CTRL_FINAL) >> L2CAP_EXT_CTRL_FINAL_SHIFT; 943b5c6aaedSMat Martineau 944b5c6aaedSMat Martineau if (ext & L2CAP_EXT_CTRL_FRAME_TYPE) { 945b5c6aaedSMat Martineau /* S-Frame */ 946b5c6aaedSMat Martineau control->sframe = 1; 947b5c6aaedSMat Martineau control->poll = (ext & L2CAP_EXT_CTRL_POLL) >> L2CAP_EXT_CTRL_POLL_SHIFT; 948b5c6aaedSMat Martineau control->super = (ext & L2CAP_EXT_CTRL_SUPERVISE) >> L2CAP_EXT_CTRL_SUPER_SHIFT; 949b5c6aaedSMat Martineau 950b5c6aaedSMat Martineau control->sar = 0; 951b5c6aaedSMat Martineau control->txseq = 0; 952b5c6aaedSMat Martineau } else { 953b5c6aaedSMat Martineau /* I-Frame */ 954b5c6aaedSMat Martineau control->sframe = 0; 955b5c6aaedSMat Martineau control->sar = (ext & L2CAP_EXT_CTRL_SAR) >> L2CAP_EXT_CTRL_SAR_SHIFT; 956b5c6aaedSMat Martineau control->txseq = (ext & L2CAP_EXT_CTRL_TXSEQ) >> L2CAP_EXT_CTRL_TXSEQ_SHIFT; 957b5c6aaedSMat Martineau 958b5c6aaedSMat Martineau control->poll = 0; 959b5c6aaedSMat Martineau control->super = 0; 960b5c6aaedSMat Martineau } 961b5c6aaedSMat Martineau } 962b5c6aaedSMat Martineau 963b5c6aaedSMat Martineau static inline void __unpack_control(struct l2cap_chan *chan, 964b5c6aaedSMat Martineau struct sk_buff *skb) 965b5c6aaedSMat Martineau { 966b5c6aaedSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 967b5c6aaedSMat Martineau __unpack_extended_control(get_unaligned_le32(skb->data), 968a4368ff3SJohan Hedberg &bt_cb(skb)->l2cap); 969cec8ab6eSMat Martineau skb_pull(skb, L2CAP_EXT_CTRL_SIZE); 970b5c6aaedSMat Martineau } else { 971b5c6aaedSMat Martineau __unpack_enhanced_control(get_unaligned_le16(skb->data), 972a4368ff3SJohan Hedberg &bt_cb(skb)->l2cap); 973cec8ab6eSMat Martineau skb_pull(skb, L2CAP_ENH_CTRL_SIZE); 974b5c6aaedSMat Martineau } 975b5c6aaedSMat Martineau } 976b5c6aaedSMat Martineau 977b5c6aaedSMat Martineau static u32 __pack_extended_control(struct l2cap_ctrl *control) 978b5c6aaedSMat Martineau { 979b5c6aaedSMat Martineau u32 packed; 980b5c6aaedSMat Martineau 981b5c6aaedSMat Martineau packed = control->reqseq << L2CAP_EXT_CTRL_REQSEQ_SHIFT; 982b5c6aaedSMat Martineau packed |= control->final << L2CAP_EXT_CTRL_FINAL_SHIFT; 983b5c6aaedSMat Martineau 984b5c6aaedSMat Martineau if (control->sframe) { 985b5c6aaedSMat Martineau packed |= control->poll << L2CAP_EXT_CTRL_POLL_SHIFT; 986b5c6aaedSMat Martineau packed |= control->super << L2CAP_EXT_CTRL_SUPER_SHIFT; 987b5c6aaedSMat Martineau packed |= L2CAP_EXT_CTRL_FRAME_TYPE; 988b5c6aaedSMat Martineau } else { 989b5c6aaedSMat Martineau packed |= control->sar << L2CAP_EXT_CTRL_SAR_SHIFT; 990b5c6aaedSMat Martineau packed |= control->txseq << L2CAP_EXT_CTRL_TXSEQ_SHIFT; 991b5c6aaedSMat Martineau } 992b5c6aaedSMat Martineau 993b5c6aaedSMat Martineau return packed; 994b5c6aaedSMat Martineau } 995b5c6aaedSMat Martineau 996b5c6aaedSMat Martineau static u16 __pack_enhanced_control(struct l2cap_ctrl *control) 997b5c6aaedSMat Martineau { 998b5c6aaedSMat Martineau u16 packed; 999b5c6aaedSMat Martineau 1000b5c6aaedSMat Martineau packed = control->reqseq << L2CAP_CTRL_REQSEQ_SHIFT; 1001b5c6aaedSMat Martineau packed |= control->final << L2CAP_CTRL_FINAL_SHIFT; 1002b5c6aaedSMat Martineau 1003b5c6aaedSMat Martineau if (control->sframe) { 1004b5c6aaedSMat Martineau packed |= control->poll << L2CAP_CTRL_POLL_SHIFT; 1005b5c6aaedSMat Martineau packed |= control->super << L2CAP_CTRL_SUPER_SHIFT; 1006b5c6aaedSMat Martineau packed |= L2CAP_CTRL_FRAME_TYPE; 1007b5c6aaedSMat Martineau } else { 1008b5c6aaedSMat Martineau packed |= control->sar << L2CAP_CTRL_SAR_SHIFT; 1009b5c6aaedSMat Martineau packed |= control->txseq << L2CAP_CTRL_TXSEQ_SHIFT; 1010b5c6aaedSMat Martineau } 1011b5c6aaedSMat Martineau 1012b5c6aaedSMat Martineau return packed; 1013b5c6aaedSMat Martineau } 1014b5c6aaedSMat Martineau 1015b5c6aaedSMat Martineau static inline void __pack_control(struct l2cap_chan *chan, 1016b5c6aaedSMat Martineau struct l2cap_ctrl *control, 1017b5c6aaedSMat Martineau struct sk_buff *skb) 1018b5c6aaedSMat Martineau { 1019b5c6aaedSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 1020b5c6aaedSMat Martineau put_unaligned_le32(__pack_extended_control(control), 1021b5c6aaedSMat Martineau skb->data + L2CAP_HDR_SIZE); 1022b5c6aaedSMat Martineau } else { 1023b5c6aaedSMat Martineau put_unaligned_le16(__pack_enhanced_control(control), 1024b5c6aaedSMat Martineau skb->data + L2CAP_HDR_SIZE); 1025b5c6aaedSMat Martineau } 1026b5c6aaedSMat Martineau } 1027b5c6aaedSMat Martineau 1028ba7aa64fSGustavo Padovan static inline unsigned int __ertm_hdr_size(struct l2cap_chan *chan) 1029ba7aa64fSGustavo Padovan { 1030ba7aa64fSGustavo Padovan if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 1031ba7aa64fSGustavo Padovan return L2CAP_EXT_HDR_SIZE; 1032ba7aa64fSGustavo Padovan else 1033ba7aa64fSGustavo Padovan return L2CAP_ENH_HDR_SIZE; 1034ba7aa64fSGustavo Padovan } 1035ba7aa64fSGustavo Padovan 1036a67d7f6fSMat Martineau static struct sk_buff *l2cap_create_sframe_pdu(struct l2cap_chan *chan, 1037a67d7f6fSMat Martineau u32 control) 10380a708f8fSGustavo F. Padovan { 10390a708f8fSGustavo F. Padovan struct sk_buff *skb; 10400a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 1041ba7aa64fSGustavo Padovan int hlen = __ertm_hdr_size(chan); 10420a708f8fSGustavo F. Padovan 10430a708f8fSGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 104403a51213SAndrei Emeltchenko hlen += L2CAP_FCS_SIZE; 10450a708f8fSGustavo F. Padovan 1046a67d7f6fSMat Martineau skb = bt_skb_alloc(hlen, GFP_KERNEL); 10470a708f8fSGustavo F. Padovan 10480a708f8fSGustavo F. Padovan if (!skb) 1049a67d7f6fSMat Martineau return ERR_PTR(-ENOMEM); 10500a708f8fSGustavo F. Padovan 10510a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 10520a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(hlen - L2CAP_HDR_SIZE); 1053fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 105488843ab0SAndrei Emeltchenko 1055a67d7f6fSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 1056a67d7f6fSMat Martineau put_unaligned_le32(control, skb_put(skb, L2CAP_EXT_CTRL_SIZE)); 1057a67d7f6fSMat Martineau else 1058a67d7f6fSMat Martineau put_unaligned_le16(control, skb_put(skb, L2CAP_ENH_CTRL_SIZE)); 10590a708f8fSGustavo F. Padovan 106047d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 1061a67d7f6fSMat Martineau u16 fcs = crc16(0, (u8 *)skb->data, skb->len); 106203a51213SAndrei Emeltchenko put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 10630a708f8fSGustavo F. Padovan } 10640a708f8fSGustavo F. Padovan 106573d80debSLuiz Augusto von Dentz skb->priority = HCI_PRIO_MAX; 1066a67d7f6fSMat Martineau return skb; 1067a67d7f6fSMat Martineau } 1068a67d7f6fSMat Martineau 1069a67d7f6fSMat Martineau static void l2cap_send_sframe(struct l2cap_chan *chan, 1070a67d7f6fSMat Martineau struct l2cap_ctrl *control) 1071a67d7f6fSMat Martineau { 1072a67d7f6fSMat Martineau struct sk_buff *skb; 1073a67d7f6fSMat Martineau u32 control_field; 1074a67d7f6fSMat Martineau 1075a67d7f6fSMat Martineau BT_DBG("chan %p, control %p", chan, control); 1076a67d7f6fSMat Martineau 1077a67d7f6fSMat Martineau if (!control->sframe) 1078a67d7f6fSMat Martineau return; 1079a67d7f6fSMat Martineau 1080b99e13adSMat Martineau if (__chan_is_moving(chan)) 1081b99e13adSMat Martineau return; 1082b99e13adSMat Martineau 1083a67d7f6fSMat Martineau if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state) && 1084a67d7f6fSMat Martineau !control->poll) 1085a67d7f6fSMat Martineau control->final = 1; 1086a67d7f6fSMat Martineau 1087a67d7f6fSMat Martineau if (control->super == L2CAP_SUPER_RR) 1088a67d7f6fSMat Martineau clear_bit(CONN_RNR_SENT, &chan->conn_state); 1089a67d7f6fSMat Martineau else if (control->super == L2CAP_SUPER_RNR) 1090a67d7f6fSMat Martineau set_bit(CONN_RNR_SENT, &chan->conn_state); 1091a67d7f6fSMat Martineau 1092a67d7f6fSMat Martineau if (control->super != L2CAP_SUPER_SREJ) { 1093a67d7f6fSMat Martineau chan->last_acked_seq = control->reqseq; 1094a67d7f6fSMat Martineau __clear_ack_timer(chan); 1095a67d7f6fSMat Martineau } 1096a67d7f6fSMat Martineau 1097a67d7f6fSMat Martineau BT_DBG("reqseq %d, final %d, poll %d, super %d", control->reqseq, 1098a67d7f6fSMat Martineau control->final, control->poll, control->super); 1099a67d7f6fSMat Martineau 1100a67d7f6fSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 1101a67d7f6fSMat Martineau control_field = __pack_extended_control(control); 1102a67d7f6fSMat Martineau else 1103a67d7f6fSMat Martineau control_field = __pack_enhanced_control(control); 1104a67d7f6fSMat Martineau 1105a67d7f6fSMat Martineau skb = l2cap_create_sframe_pdu(chan, control_field); 1106a67d7f6fSMat Martineau if (!IS_ERR(skb)) 110773d80debSLuiz Augusto von Dentz l2cap_do_send(chan, skb); 11080a708f8fSGustavo F. Padovan } 11090a708f8fSGustavo F. Padovan 1110c9e3d5e0SMat Martineau static void l2cap_send_rr_or_rnr(struct l2cap_chan *chan, bool poll) 11110a708f8fSGustavo F. Padovan { 1112c9e3d5e0SMat Martineau struct l2cap_ctrl control; 11130a708f8fSGustavo F. Padovan 1114c9e3d5e0SMat Martineau BT_DBG("chan %p, poll %d", chan, poll); 1115c9e3d5e0SMat Martineau 1116c9e3d5e0SMat Martineau memset(&control, 0, sizeof(control)); 1117c9e3d5e0SMat Martineau control.sframe = 1; 1118c9e3d5e0SMat Martineau control.poll = poll; 1119c9e3d5e0SMat Martineau 1120c9e3d5e0SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) 1121c9e3d5e0SMat Martineau control.super = L2CAP_SUPER_RNR; 1122c9e3d5e0SMat Martineau else 1123c9e3d5e0SMat Martineau control.super = L2CAP_SUPER_RR; 1124c9e3d5e0SMat Martineau 1125c9e3d5e0SMat Martineau control.reqseq = chan->buffer_seq; 1126c9e3d5e0SMat Martineau l2cap_send_sframe(chan, &control); 11270a708f8fSGustavo F. Padovan } 11280a708f8fSGustavo F. Padovan 1129b4450035SGustavo F. Padovan static inline int __l2cap_no_conn_pending(struct l2cap_chan *chan) 11300a708f8fSGustavo F. Padovan { 11315ff6f34dSJohan Hedberg if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) 11325ff6f34dSJohan Hedberg return true; 11335ff6f34dSJohan Hedberg 1134c1360a1cSGustavo F. Padovan return !test_bit(CONF_CONNECT_PEND, &chan->conf_state); 11350a708f8fSGustavo F. Padovan } 11360a708f8fSGustavo F. Padovan 113793c3e8f5SAndrei Emeltchenko static bool __amp_capable(struct l2cap_chan *chan) 113893c3e8f5SAndrei Emeltchenko { 113993c3e8f5SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 11401df7b17aSMarcel Holtmann struct hci_dev *hdev; 11411df7b17aSMarcel Holtmann bool amp_available = false; 114293c3e8f5SAndrei Emeltchenko 11430bd49fc7SJohan Hedberg if (!(conn->local_fixed_chan & L2CAP_FC_A2MP)) 11441df7b17aSMarcel Holtmann return false; 11451df7b17aSMarcel Holtmann 11460bd49fc7SJohan Hedberg if (!(conn->remote_fixed_chan & L2CAP_FC_A2MP)) 11471df7b17aSMarcel Holtmann return false; 11481df7b17aSMarcel Holtmann 11491df7b17aSMarcel Holtmann read_lock(&hci_dev_list_lock); 11501df7b17aSMarcel Holtmann list_for_each_entry(hdev, &hci_dev_list, list) { 11511df7b17aSMarcel Holtmann if (hdev->amp_type != AMP_TYPE_BREDR && 11521df7b17aSMarcel Holtmann test_bit(HCI_UP, &hdev->flags)) { 11531df7b17aSMarcel Holtmann amp_available = true; 11541df7b17aSMarcel Holtmann break; 11551df7b17aSMarcel Holtmann } 11561df7b17aSMarcel Holtmann } 11571df7b17aSMarcel Holtmann read_unlock(&hci_dev_list_lock); 11581df7b17aSMarcel Holtmann 11591df7b17aSMarcel Holtmann if (chan->chan_policy == BT_CHANNEL_POLICY_AMP_PREFERRED) 11601df7b17aSMarcel Holtmann return amp_available; 1161848566b3SMarcel Holtmann 116293c3e8f5SAndrei Emeltchenko return false; 116393c3e8f5SAndrei Emeltchenko } 116493c3e8f5SAndrei Emeltchenko 11655ce66b59SAndrei Emeltchenko static bool l2cap_check_efs(struct l2cap_chan *chan) 11665ce66b59SAndrei Emeltchenko { 11675ce66b59SAndrei Emeltchenko /* Check EFS parameters */ 11685ce66b59SAndrei Emeltchenko return true; 11695ce66b59SAndrei Emeltchenko } 11705ce66b59SAndrei Emeltchenko 11712766be48SAndrei Emeltchenko void l2cap_send_conn_req(struct l2cap_chan *chan) 11729b27f350SAndrei Emeltchenko { 11739b27f350SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 11749b27f350SAndrei Emeltchenko struct l2cap_conn_req req; 11759b27f350SAndrei Emeltchenko 11769b27f350SAndrei Emeltchenko req.scid = cpu_to_le16(chan->scid); 11779b27f350SAndrei Emeltchenko req.psm = chan->psm; 11789b27f350SAndrei Emeltchenko 11799b27f350SAndrei Emeltchenko chan->ident = l2cap_get_ident(conn); 11809b27f350SAndrei Emeltchenko 11819b27f350SAndrei Emeltchenko set_bit(CONF_CONNECT_PEND, &chan->conf_state); 11829b27f350SAndrei Emeltchenko 11839b27f350SAndrei Emeltchenko l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_REQ, sizeof(req), &req); 11849b27f350SAndrei Emeltchenko } 11859b27f350SAndrei Emeltchenko 11868eb200bdSMat Martineau static void l2cap_send_create_chan_req(struct l2cap_chan *chan, u8 amp_id) 11878eb200bdSMat Martineau { 11888eb200bdSMat Martineau struct l2cap_create_chan_req req; 11898eb200bdSMat Martineau req.scid = cpu_to_le16(chan->scid); 11908eb200bdSMat Martineau req.psm = chan->psm; 11918eb200bdSMat Martineau req.amp_id = amp_id; 11928eb200bdSMat Martineau 11938eb200bdSMat Martineau chan->ident = l2cap_get_ident(chan->conn); 11948eb200bdSMat Martineau 11958eb200bdSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_CREATE_CHAN_REQ, 11968eb200bdSMat Martineau sizeof(req), &req); 11978eb200bdSMat Martineau } 11988eb200bdSMat Martineau 119902b0fbb9SMat Martineau static void l2cap_move_setup(struct l2cap_chan *chan) 120002b0fbb9SMat Martineau { 120102b0fbb9SMat Martineau struct sk_buff *skb; 120202b0fbb9SMat Martineau 120302b0fbb9SMat Martineau BT_DBG("chan %p", chan); 120402b0fbb9SMat Martineau 120502b0fbb9SMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 120602b0fbb9SMat Martineau return; 120702b0fbb9SMat Martineau 120802b0fbb9SMat Martineau __clear_retrans_timer(chan); 120902b0fbb9SMat Martineau __clear_monitor_timer(chan); 121002b0fbb9SMat Martineau __clear_ack_timer(chan); 121102b0fbb9SMat Martineau 121202b0fbb9SMat Martineau chan->retry_count = 0; 121302b0fbb9SMat Martineau skb_queue_walk(&chan->tx_q, skb) { 1214a4368ff3SJohan Hedberg if (bt_cb(skb)->l2cap.retries) 1215a4368ff3SJohan Hedberg bt_cb(skb)->l2cap.retries = 1; 121602b0fbb9SMat Martineau else 121702b0fbb9SMat Martineau break; 121802b0fbb9SMat Martineau } 121902b0fbb9SMat Martineau 122002b0fbb9SMat Martineau chan->expected_tx_seq = chan->buffer_seq; 122102b0fbb9SMat Martineau 122202b0fbb9SMat Martineau clear_bit(CONN_REJ_ACT, &chan->conn_state); 122302b0fbb9SMat Martineau clear_bit(CONN_SREJ_ACT, &chan->conn_state); 122402b0fbb9SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 122502b0fbb9SMat Martineau l2cap_seq_list_clear(&chan->srej_list); 122602b0fbb9SMat Martineau skb_queue_purge(&chan->srej_q); 122702b0fbb9SMat Martineau 122802b0fbb9SMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 122902b0fbb9SMat Martineau chan->rx_state = L2CAP_RX_STATE_MOVE; 123002b0fbb9SMat Martineau 123102b0fbb9SMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 123202b0fbb9SMat Martineau } 123302b0fbb9SMat Martineau 12345f3847a4SMat Martineau static void l2cap_move_done(struct l2cap_chan *chan) 12355f3847a4SMat Martineau { 12365f3847a4SMat Martineau u8 move_role = chan->move_role; 12375f3847a4SMat Martineau BT_DBG("chan %p", chan); 12385f3847a4SMat Martineau 12395f3847a4SMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 12405f3847a4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 12415f3847a4SMat Martineau 12425f3847a4SMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 12435f3847a4SMat Martineau return; 12445f3847a4SMat Martineau 12455f3847a4SMat Martineau switch (move_role) { 12465f3847a4SMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 12475f3847a4SMat Martineau l2cap_tx(chan, NULL, NULL, L2CAP_EV_EXPLICIT_POLL); 12485f3847a4SMat Martineau chan->rx_state = L2CAP_RX_STATE_WAIT_F; 12495f3847a4SMat Martineau break; 12505f3847a4SMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 12515f3847a4SMat Martineau chan->rx_state = L2CAP_RX_STATE_WAIT_P; 12525f3847a4SMat Martineau break; 12535f3847a4SMat Martineau } 12545f3847a4SMat Martineau } 12555f3847a4SMat Martineau 12569f0caeb1SVinicius Costa Gomes static void l2cap_chan_ready(struct l2cap_chan *chan) 12579f0caeb1SVinicius Costa Gomes { 1258315917e0SJohan Hedberg /* The channel may have already been flagged as connected in 1259315917e0SJohan Hedberg * case of receiving data before the L2CAP info req/rsp 1260315917e0SJohan Hedberg * procedure is complete. 1261315917e0SJohan Hedberg */ 1262315917e0SJohan Hedberg if (chan->state == BT_CONNECTED) 1263315917e0SJohan Hedberg return; 1264315917e0SJohan Hedberg 12652827011fSMat Martineau /* This clears all conf flags, including CONF_NOT_COMPLETE */ 12669f0caeb1SVinicius Costa Gomes chan->conf_state = 0; 12679f0caeb1SVinicius Costa Gomes __clear_chan_timer(chan); 12689f0caeb1SVinicius Costa Gomes 12690ce43ce6SJohan Hedberg if (chan->mode == L2CAP_MODE_LE_FLOWCTL && !chan->tx_credits) 12700ce43ce6SJohan Hedberg chan->ops->suspend(chan); 1271177f8f2bSJohan Hedberg 127254a59aa2SAndrei Emeltchenko chan->state = BT_CONNECTED; 12739f0caeb1SVinicius Costa Gomes 127454a59aa2SAndrei Emeltchenko chan->ops->ready(chan); 12759f0caeb1SVinicius Costa Gomes } 12769f0caeb1SVinicius Costa Gomes 1277f1496deeSJohan Hedberg static void l2cap_le_connect(struct l2cap_chan *chan) 1278f1496deeSJohan Hedberg { 1279f1496deeSJohan Hedberg struct l2cap_conn *conn = chan->conn; 1280f1496deeSJohan Hedberg struct l2cap_le_conn_req req; 1281f1496deeSJohan Hedberg 1282595177f3SJohan Hedberg if (test_and_set_bit(FLAG_LE_CONN_REQ_SENT, &chan->flags)) 1283595177f3SJohan Hedberg return; 1284595177f3SJohan Hedberg 1285f1496deeSJohan Hedberg req.psm = chan->psm; 1286f1496deeSJohan Hedberg req.scid = cpu_to_le16(chan->scid); 1287f1496deeSJohan Hedberg req.mtu = cpu_to_le16(chan->imtu); 12883916aed8SJohan Hedberg req.mps = cpu_to_le16(chan->mps); 12890cd75f7eSJohan Hedberg req.credits = cpu_to_le16(chan->rx_credits); 1290f1496deeSJohan Hedberg 1291f1496deeSJohan Hedberg chan->ident = l2cap_get_ident(conn); 1292f1496deeSJohan Hedberg 1293f1496deeSJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CONN_REQ, 1294f1496deeSJohan Hedberg sizeof(req), &req); 1295f1496deeSJohan Hedberg } 1296f1496deeSJohan Hedberg 1297f1496deeSJohan Hedberg static void l2cap_le_start(struct l2cap_chan *chan) 1298f1496deeSJohan Hedberg { 1299f1496deeSJohan Hedberg struct l2cap_conn *conn = chan->conn; 1300f1496deeSJohan Hedberg 1301f1496deeSJohan Hedberg if (!smp_conn_security(conn->hcon, chan->sec_level)) 1302f1496deeSJohan Hedberg return; 1303f1496deeSJohan Hedberg 1304f1496deeSJohan Hedberg if (!chan->psm) { 1305f1496deeSJohan Hedberg l2cap_chan_ready(chan); 1306f1496deeSJohan Hedberg return; 1307f1496deeSJohan Hedberg } 1308f1496deeSJohan Hedberg 1309f1496deeSJohan Hedberg if (chan->state == BT_CONNECT) 1310f1496deeSJohan Hedberg l2cap_le_connect(chan); 1311f1496deeSJohan Hedberg } 1312f1496deeSJohan Hedberg 131393c3e8f5SAndrei Emeltchenko static void l2cap_start_connection(struct l2cap_chan *chan) 131493c3e8f5SAndrei Emeltchenko { 131593c3e8f5SAndrei Emeltchenko if (__amp_capable(chan)) { 131693c3e8f5SAndrei Emeltchenko BT_DBG("chan %p AMP capable: discover AMPs", chan); 131793c3e8f5SAndrei Emeltchenko a2mp_discover_amp(chan); 1318f1496deeSJohan Hedberg } else if (chan->conn->hcon->type == LE_LINK) { 1319f1496deeSJohan Hedberg l2cap_le_start(chan); 132093c3e8f5SAndrei Emeltchenko } else { 132193c3e8f5SAndrei Emeltchenko l2cap_send_conn_req(chan); 132293c3e8f5SAndrei Emeltchenko } 132393c3e8f5SAndrei Emeltchenko } 132493c3e8f5SAndrei Emeltchenko 1325aeaeb4bbSJohan Hedberg static void l2cap_request_info(struct l2cap_conn *conn) 13260a708f8fSGustavo F. Padovan { 13270a708f8fSGustavo F. Padovan struct l2cap_info_req req; 1328aeaeb4bbSJohan Hedberg 1329aeaeb4bbSJohan Hedberg if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) 1330aeaeb4bbSJohan Hedberg return; 1331aeaeb4bbSJohan Hedberg 1332dcf4adbfSJoe Perches req.type = cpu_to_le16(L2CAP_IT_FEAT_MASK); 13330a708f8fSGustavo F. Padovan 13340a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_SENT; 13350a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 13360a708f8fSGustavo F. Padovan 1337ba13ccd9SMarcel Holtmann schedule_delayed_work(&conn->info_timer, L2CAP_INFO_TIMEOUT); 13380a708f8fSGustavo F. Padovan 13392d792818SGustavo Padovan l2cap_send_cmd(conn, conn->info_ident, L2CAP_INFO_REQ, 13402d792818SGustavo Padovan sizeof(req), &req); 13410a708f8fSGustavo F. Padovan } 1342aeaeb4bbSJohan Hedberg 1343aeaeb4bbSJohan Hedberg static void l2cap_do_start(struct l2cap_chan *chan) 1344aeaeb4bbSJohan Hedberg { 1345aeaeb4bbSJohan Hedberg struct l2cap_conn *conn = chan->conn; 1346aeaeb4bbSJohan Hedberg 1347aeaeb4bbSJohan Hedberg if (conn->hcon->type == LE_LINK) { 1348aeaeb4bbSJohan Hedberg l2cap_le_start(chan); 1349aeaeb4bbSJohan Hedberg return; 1350aeaeb4bbSJohan Hedberg } 1351aeaeb4bbSJohan Hedberg 1352aeaeb4bbSJohan Hedberg if (!(conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT)) { 1353aeaeb4bbSJohan Hedberg l2cap_request_info(conn); 1354aeaeb4bbSJohan Hedberg return; 1355aeaeb4bbSJohan Hedberg } 1356aeaeb4bbSJohan Hedberg 1357aeaeb4bbSJohan Hedberg if (!(conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE)) 1358aeaeb4bbSJohan Hedberg return; 1359aeaeb4bbSJohan Hedberg 1360aeaeb4bbSJohan Hedberg if (l2cap_chan_check_security(chan, true) && 1361aeaeb4bbSJohan Hedberg __l2cap_no_conn_pending(chan)) 1362aeaeb4bbSJohan Hedberg l2cap_start_connection(chan); 13630a708f8fSGustavo F. Padovan } 13640a708f8fSGustavo F. Padovan 13650a708f8fSGustavo F. Padovan static inline int l2cap_mode_supported(__u8 mode, __u32 feat_mask) 13660a708f8fSGustavo F. Padovan { 13670a708f8fSGustavo F. Padovan u32 local_feat_mask = l2cap_feat_mask; 13680a708f8fSGustavo F. Padovan if (!disable_ertm) 13690a708f8fSGustavo F. Padovan local_feat_mask |= L2CAP_FEAT_ERTM | L2CAP_FEAT_STREAMING; 13700a708f8fSGustavo F. Padovan 13710a708f8fSGustavo F. Padovan switch (mode) { 13720a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 13730a708f8fSGustavo F. Padovan return L2CAP_FEAT_ERTM & feat_mask & local_feat_mask; 13740a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 13750a708f8fSGustavo F. Padovan return L2CAP_FEAT_STREAMING & feat_mask & local_feat_mask; 13760a708f8fSGustavo F. Padovan default: 13770a708f8fSGustavo F. Padovan return 0x00; 13780a708f8fSGustavo F. Padovan } 13790a708f8fSGustavo F. Padovan } 13800a708f8fSGustavo F. Padovan 13815e4e3972SAndrei Emeltchenko static void l2cap_send_disconn_req(struct l2cap_chan *chan, int err) 13820a708f8fSGustavo F. Padovan { 13835e4e3972SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 13840a708f8fSGustavo F. Padovan struct l2cap_disconn_req req; 13850a708f8fSGustavo F. Padovan 13860a708f8fSGustavo F. Padovan if (!conn) 13870a708f8fSGustavo F. Padovan return; 13880a708f8fSGustavo F. Padovan 1389aad3d0e3SAndrei Emeltchenko if (chan->mode == L2CAP_MODE_ERTM && chan->state == BT_CONNECTED) { 13901a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 13911a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 13921a09bcb9SGustavo F. Padovan __clear_ack_timer(chan); 13930a708f8fSGustavo F. Padovan } 13940a708f8fSGustavo F. Padovan 13952338a7e0SJohan Hedberg if (chan->scid == L2CAP_CID_A2MP) { 1396d117773cSGustavo Padovan l2cap_state_change(chan, BT_DISCONN); 1397416fa752SAndrei Emeltchenko return; 1398416fa752SAndrei Emeltchenko } 1399416fa752SAndrei Emeltchenko 1400fe4128e0SGustavo F. Padovan req.dcid = cpu_to_le16(chan->dcid); 1401fe4128e0SGustavo F. Padovan req.scid = cpu_to_le16(chan->scid); 14022d792818SGustavo Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_DISCONN_REQ, 14032d792818SGustavo Padovan sizeof(req), &req); 14040a708f8fSGustavo F. Padovan 1405f8e73017SGustavo Padovan l2cap_state_change_and_error(chan, BT_DISCONN, err); 14060a708f8fSGustavo F. Padovan } 14070a708f8fSGustavo F. Padovan 14080a708f8fSGustavo F. Padovan /* ---- L2CAP connections ---- */ 14090a708f8fSGustavo F. Padovan static void l2cap_conn_start(struct l2cap_conn *conn) 14100a708f8fSGustavo F. Padovan { 14113df91ea2SAndrei Emeltchenko struct l2cap_chan *chan, *tmp; 14120a708f8fSGustavo F. Padovan 14130a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 14140a708f8fSGustavo F. Padovan 14153df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 14160a708f8fSGustavo F. Padovan 14173df91ea2SAndrei Emeltchenko list_for_each_entry_safe(chan, tmp, &conn->chan_l, list) { 14186be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 14190a708f8fSGustavo F. Padovan 1420715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 1421aeaeb4bbSJohan Hedberg l2cap_chan_ready(chan); 14226be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 14230a708f8fSGustavo F. Padovan continue; 14240a708f8fSGustavo F. Padovan } 14250a708f8fSGustavo F. Padovan 142689bc500eSGustavo F. Padovan if (chan->state == BT_CONNECT) { 1427e7cafc45SJohan Hedberg if (!l2cap_chan_check_security(chan, true) || 1428b4450035SGustavo F. Padovan !__l2cap_no_conn_pending(chan)) { 14296be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 14300a708f8fSGustavo F. Padovan continue; 14310a708f8fSGustavo F. Padovan } 14320a708f8fSGustavo F. Padovan 1433c1360a1cSGustavo F. Padovan if (!l2cap_mode_supported(chan->mode, conn->feat_mask) 1434c1360a1cSGustavo F. Padovan && test_bit(CONF_STATE2_DEVICE, 1435c1360a1cSGustavo F. Padovan &chan->conf_state)) { 14360f852724SGustavo F. Padovan l2cap_chan_close(chan, ECONNRESET); 14376be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 14380a708f8fSGustavo F. Padovan continue; 14390a708f8fSGustavo F. Padovan } 14400a708f8fSGustavo F. Padovan 144193c3e8f5SAndrei Emeltchenko l2cap_start_connection(chan); 14420a708f8fSGustavo F. Padovan 144389bc500eSGustavo F. Padovan } else if (chan->state == BT_CONNECT2) { 14440a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 14450a708f8fSGustavo F. Padovan char buf[128]; 1446fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 1447fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 14480a708f8fSGustavo F. Padovan 1449e7cafc45SJohan Hedberg if (l2cap_chan_check_security(chan, false)) { 1450bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 1451dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_PEND); 1452dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_AUTHOR_PEND); 14532dc4e510SGustavo Padovan chan->ops->defer(chan); 14540a708f8fSGustavo F. Padovan 14550a708f8fSGustavo F. Padovan } else { 1456acdcabf5SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 1457dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 1458dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 14590a708f8fSGustavo F. Padovan } 14600a708f8fSGustavo F. Padovan } else { 1461dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_PEND); 1462dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_AUTHEN_PEND); 14630a708f8fSGustavo F. Padovan } 14640a708f8fSGustavo F. Padovan 1465fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 1466fc7f8a7eSGustavo F. Padovan sizeof(rsp), &rsp); 14670a708f8fSGustavo F. Padovan 1468c1360a1cSGustavo F. Padovan if (test_bit(CONF_REQ_SENT, &chan->conf_state) || 14690a708f8fSGustavo F. Padovan rsp.result != L2CAP_CR_SUCCESS) { 14706be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 14710a708f8fSGustavo F. Padovan continue; 14720a708f8fSGustavo F. Padovan } 14730a708f8fSGustavo F. Padovan 1474c1360a1cSGustavo F. Padovan set_bit(CONF_REQ_SENT, &chan->conf_state); 14750a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 147673ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 147773ffa904SGustavo F. Padovan chan->num_conf_req++; 14780a708f8fSGustavo F. Padovan } 14790a708f8fSGustavo F. Padovan 14806be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 14810a708f8fSGustavo F. Padovan } 14820a708f8fSGustavo F. Padovan 14833df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 14840a708f8fSGustavo F. Padovan } 14850a708f8fSGustavo F. Padovan 1486b62f328bSVille Tervo static void l2cap_le_conn_ready(struct l2cap_conn *conn) 1487b62f328bSVille Tervo { 1488cc8dba2bSMarcel Holtmann struct hci_conn *hcon = conn->hcon; 1489dcc36c16SJohan Hedberg struct hci_dev *hdev = hcon->hdev; 1490b62f328bSVille Tervo 1491e760ec12SJohan Hedberg BT_DBG("%s conn %p", hdev->name, conn); 1492b62f328bSVille Tervo 1493e760ec12SJohan Hedberg /* For outgoing pairing which doesn't necessarily have an 1494e760ec12SJohan Hedberg * associated socket (e.g. mgmt_pair_device). 1495e760ec12SJohan Hedberg */ 1496e760ec12SJohan Hedberg if (hcon->out) 1497e760ec12SJohan Hedberg smp_conn_security(hcon, hcon->pending_sec_level); 1498cc8dba2bSMarcel Holtmann 149980afeb6cSMarcel Holtmann /* For LE slave connections, make sure the connection interval 150080afeb6cSMarcel Holtmann * is in the range of the minium and maximum interval that has 150180afeb6cSMarcel Holtmann * been configured for this connection. If not, then trigger 150280afeb6cSMarcel Holtmann * the connection update procedure. 150380afeb6cSMarcel Holtmann */ 150440bef302SJohan Hedberg if (hcon->role == HCI_ROLE_SLAVE && 150580afeb6cSMarcel Holtmann (hcon->le_conn_interval < hcon->le_conn_min_interval || 150680afeb6cSMarcel Holtmann hcon->le_conn_interval > hcon->le_conn_max_interval)) { 150780afeb6cSMarcel Holtmann struct l2cap_conn_param_update_req req; 150880afeb6cSMarcel Holtmann 150980afeb6cSMarcel Holtmann req.min = cpu_to_le16(hcon->le_conn_min_interval); 151080afeb6cSMarcel Holtmann req.max = cpu_to_le16(hcon->le_conn_max_interval); 151180afeb6cSMarcel Holtmann req.latency = cpu_to_le16(hcon->le_conn_latency); 151280afeb6cSMarcel Holtmann req.to_multiplier = cpu_to_le16(hcon->le_supv_timeout); 151380afeb6cSMarcel Holtmann 151480afeb6cSMarcel Holtmann l2cap_send_cmd(conn, l2cap_get_ident(conn), 151580afeb6cSMarcel Holtmann L2CAP_CONN_PARAM_UPDATE_REQ, sizeof(req), &req); 151680afeb6cSMarcel Holtmann } 1517b62f328bSVille Tervo } 1518b62f328bSVille Tervo 15190a708f8fSGustavo F. Padovan static void l2cap_conn_ready(struct l2cap_conn *conn) 15200a708f8fSGustavo F. Padovan { 152148454079SGustavo F. Padovan struct l2cap_chan *chan; 1522cc110922SVinicius Costa Gomes struct hci_conn *hcon = conn->hcon; 15230a708f8fSGustavo F. Padovan 15240a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 15250a708f8fSGustavo F. Padovan 1526aeaeb4bbSJohan Hedberg if (hcon->type == ACL_LINK) 1527aeaeb4bbSJohan Hedberg l2cap_request_info(conn); 1528aeaeb4bbSJohan Hedberg 1529e760ec12SJohan Hedberg mutex_lock(&conn->chan_lock); 1530e760ec12SJohan Hedberg 15313df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 1532baa7e1faSGustavo F. Padovan 15336be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 15340a708f8fSGustavo F. Padovan 15352338a7e0SJohan Hedberg if (chan->scid == L2CAP_CID_A2MP) { 1536416fa752SAndrei Emeltchenko l2cap_chan_unlock(chan); 1537416fa752SAndrei Emeltchenko continue; 1538416fa752SAndrei Emeltchenko } 1539416fa752SAndrei Emeltchenko 1540cc110922SVinicius Costa Gomes if (hcon->type == LE_LINK) { 1541f1496deeSJohan Hedberg l2cap_le_start(chan); 154263128451SVinicius Costa Gomes } else if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 1543aeaeb4bbSJohan Hedberg if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) 154474e75740SGustavo Padovan l2cap_chan_ready(chan); 15451c244f79SGustavo Padovan } else if (chan->state == BT_CONNECT) { 1546fc7f8a7eSGustavo F. Padovan l2cap_do_start(chan); 15471c244f79SGustavo Padovan } 15480a708f8fSGustavo F. Padovan 15496be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 15500a708f8fSGustavo F. Padovan } 15510a708f8fSGustavo F. Padovan 15523df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 155361a939c6SJohan Hedberg 155479a05727SJohan Hedberg if (hcon->type == LE_LINK) 155579a05727SJohan Hedberg l2cap_le_conn_ready(conn); 155679a05727SJohan Hedberg 155761a939c6SJohan Hedberg queue_work(hcon->hdev->workqueue, &conn->pending_rx_work); 15580a708f8fSGustavo F. Padovan } 15590a708f8fSGustavo F. Padovan 15600a708f8fSGustavo F. Padovan /* Notify sockets that we cannot guaranty reliability anymore */ 15610a708f8fSGustavo F. Padovan static void l2cap_conn_unreliable(struct l2cap_conn *conn, int err) 15620a708f8fSGustavo F. Padovan { 156348454079SGustavo F. Padovan struct l2cap_chan *chan; 15640a708f8fSGustavo F. Padovan 15650a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 15660a708f8fSGustavo F. Padovan 15673df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 15680a708f8fSGustavo F. Padovan 15693df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 1570ecf61bdbSAndrei Emeltchenko if (test_bit(FLAG_FORCE_RELIABLE, &chan->flags)) 15711d8b1fd5SGustavo Padovan l2cap_chan_set_err(chan, err); 15720a708f8fSGustavo F. Padovan } 15730a708f8fSGustavo F. Padovan 15743df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 15750a708f8fSGustavo F. Padovan } 15760a708f8fSGustavo F. Padovan 1577f878fcadSGustavo F. Padovan static void l2cap_info_timeout(struct work_struct *work) 15780a708f8fSGustavo F. Padovan { 1579f878fcadSGustavo F. Padovan struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 1580030013d8SGustavo F. Padovan info_timer.work); 15810a708f8fSGustavo F. Padovan 15820a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 15830a708f8fSGustavo F. Padovan conn->info_ident = 0; 15840a708f8fSGustavo F. Padovan 15850a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 15860a708f8fSGustavo F. Padovan } 15870a708f8fSGustavo F. Padovan 15882c8e1411SDavid Herrmann /* 15892c8e1411SDavid Herrmann * l2cap_user 15902c8e1411SDavid Herrmann * External modules can register l2cap_user objects on l2cap_conn. The ->probe 15912c8e1411SDavid Herrmann * callback is called during registration. The ->remove callback is called 15922c8e1411SDavid Herrmann * during unregistration. 15932c8e1411SDavid Herrmann * An l2cap_user object can either be explicitly unregistered or when the 15942c8e1411SDavid Herrmann * underlying l2cap_conn object is deleted. This guarantees that l2cap->hcon, 15952c8e1411SDavid Herrmann * l2cap->hchan, .. are valid as long as the remove callback hasn't been called. 15962c8e1411SDavid Herrmann * External modules must own a reference to the l2cap_conn object if they intend 15972c8e1411SDavid Herrmann * to call l2cap_unregister_user(). The l2cap_conn object might get destroyed at 15982c8e1411SDavid Herrmann * any time if they don't. 15992c8e1411SDavid Herrmann */ 16002c8e1411SDavid Herrmann 16012c8e1411SDavid Herrmann int l2cap_register_user(struct l2cap_conn *conn, struct l2cap_user *user) 16022c8e1411SDavid Herrmann { 16032c8e1411SDavid Herrmann struct hci_dev *hdev = conn->hcon->hdev; 16042c8e1411SDavid Herrmann int ret; 16052c8e1411SDavid Herrmann 16062c8e1411SDavid Herrmann /* We need to check whether l2cap_conn is registered. If it is not, we 16072c8e1411SDavid Herrmann * must not register the l2cap_user. l2cap_conn_del() is unregisters 16082c8e1411SDavid Herrmann * l2cap_conn objects, but doesn't provide its own locking. Instead, it 16092c8e1411SDavid Herrmann * relies on the parent hci_conn object to be locked. This itself relies 16102c8e1411SDavid Herrmann * on the hci_dev object to be locked. So we must lock the hci device 16112c8e1411SDavid Herrmann * here, too. */ 16122c8e1411SDavid Herrmann 16132c8e1411SDavid Herrmann hci_dev_lock(hdev); 16142c8e1411SDavid Herrmann 1615835a6a2fSAlexey Dobriyan if (!list_empty(&user->list)) { 16162c8e1411SDavid Herrmann ret = -EINVAL; 16172c8e1411SDavid Herrmann goto out_unlock; 16182c8e1411SDavid Herrmann } 16192c8e1411SDavid Herrmann 16202c8e1411SDavid Herrmann /* conn->hchan is NULL after l2cap_conn_del() was called */ 16212c8e1411SDavid Herrmann if (!conn->hchan) { 16222c8e1411SDavid Herrmann ret = -ENODEV; 16232c8e1411SDavid Herrmann goto out_unlock; 16242c8e1411SDavid Herrmann } 16252c8e1411SDavid Herrmann 16262c8e1411SDavid Herrmann ret = user->probe(conn, user); 16272c8e1411SDavid Herrmann if (ret) 16282c8e1411SDavid Herrmann goto out_unlock; 16292c8e1411SDavid Herrmann 16302c8e1411SDavid Herrmann list_add(&user->list, &conn->users); 16312c8e1411SDavid Herrmann ret = 0; 16322c8e1411SDavid Herrmann 16332c8e1411SDavid Herrmann out_unlock: 16342c8e1411SDavid Herrmann hci_dev_unlock(hdev); 16352c8e1411SDavid Herrmann return ret; 16362c8e1411SDavid Herrmann } 16372c8e1411SDavid Herrmann EXPORT_SYMBOL(l2cap_register_user); 16382c8e1411SDavid Herrmann 16392c8e1411SDavid Herrmann void l2cap_unregister_user(struct l2cap_conn *conn, struct l2cap_user *user) 16402c8e1411SDavid Herrmann { 16412c8e1411SDavid Herrmann struct hci_dev *hdev = conn->hcon->hdev; 16422c8e1411SDavid Herrmann 16432c8e1411SDavid Herrmann hci_dev_lock(hdev); 16442c8e1411SDavid Herrmann 1645835a6a2fSAlexey Dobriyan if (list_empty(&user->list)) 16462c8e1411SDavid Herrmann goto out_unlock; 16472c8e1411SDavid Herrmann 1648ab944c83STedd Ho-Jeong An list_del_init(&user->list); 16492c8e1411SDavid Herrmann user->remove(conn, user); 16502c8e1411SDavid Herrmann 16512c8e1411SDavid Herrmann out_unlock: 16522c8e1411SDavid Herrmann hci_dev_unlock(hdev); 16532c8e1411SDavid Herrmann } 16542c8e1411SDavid Herrmann EXPORT_SYMBOL(l2cap_unregister_user); 16552c8e1411SDavid Herrmann 16562c8e1411SDavid Herrmann static void l2cap_unregister_all_users(struct l2cap_conn *conn) 16572c8e1411SDavid Herrmann { 16582c8e1411SDavid Herrmann struct l2cap_user *user; 16592c8e1411SDavid Herrmann 16602c8e1411SDavid Herrmann while (!list_empty(&conn->users)) { 16612c8e1411SDavid Herrmann user = list_first_entry(&conn->users, struct l2cap_user, list); 1662ab944c83STedd Ho-Jeong An list_del_init(&user->list); 16632c8e1411SDavid Herrmann user->remove(conn, user); 16642c8e1411SDavid Herrmann } 16652c8e1411SDavid Herrmann } 16662c8e1411SDavid Herrmann 16675d3de7dfSVinicius Costa Gomes static void l2cap_conn_del(struct hci_conn *hcon, int err) 16685d3de7dfSVinicius Costa Gomes { 16695d3de7dfSVinicius Costa Gomes struct l2cap_conn *conn = hcon->l2cap_data; 16705d3de7dfSVinicius Costa Gomes struct l2cap_chan *chan, *l; 16715d3de7dfSVinicius Costa Gomes 16725d3de7dfSVinicius Costa Gomes if (!conn) 16735d3de7dfSVinicius Costa Gomes return; 16745d3de7dfSVinicius Costa Gomes 16755d3de7dfSVinicius Costa Gomes BT_DBG("hcon %p conn %p, err %d", hcon, conn, err); 16765d3de7dfSVinicius Costa Gomes 16775d3de7dfSVinicius Costa Gomes kfree_skb(conn->rx_skb); 16785d3de7dfSVinicius Costa Gomes 167961a939c6SJohan Hedberg skb_queue_purge(&conn->pending_rx); 16807ab56c3aSJukka Taimisto 16817ab56c3aSJukka Taimisto /* We can not call flush_work(&conn->pending_rx_work) here since we 16827ab56c3aSJukka Taimisto * might block if we are running on a worker from the same workqueue 16837ab56c3aSJukka Taimisto * pending_rx_work is waiting on. 16847ab56c3aSJukka Taimisto */ 16857ab56c3aSJukka Taimisto if (work_pending(&conn->pending_rx_work)) 16867ab56c3aSJukka Taimisto cancel_work_sync(&conn->pending_rx_work); 168761a939c6SJohan Hedberg 1688f3d82d0cSJohan Hedberg if (work_pending(&conn->id_addr_update_work)) 1689f3d82d0cSJohan Hedberg cancel_work_sync(&conn->id_addr_update_work); 1690f3d82d0cSJohan Hedberg 16912c8e1411SDavid Herrmann l2cap_unregister_all_users(conn); 16922c8e1411SDavid Herrmann 1693e31fb860SJohan Hedberg /* Force the connection to be immediately dropped */ 1694e31fb860SJohan Hedberg hcon->disc_timeout = 0; 1695e31fb860SJohan Hedberg 16963df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 16973df91ea2SAndrei Emeltchenko 16985d3de7dfSVinicius Costa Gomes /* Kill channels */ 16995d3de7dfSVinicius Costa Gomes list_for_each_entry_safe(chan, l, &conn->chan_l, list) { 170061d6ef3eSMat Martineau l2cap_chan_hold(chan); 17016be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 17026be36555SAndrei Emeltchenko 17035d3de7dfSVinicius Costa Gomes l2cap_chan_del(chan, err); 17046be36555SAndrei Emeltchenko 17056be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 17066be36555SAndrei Emeltchenko 170780b98027SGustavo Padovan chan->ops->close(chan); 170861d6ef3eSMat Martineau l2cap_chan_put(chan); 17095d3de7dfSVinicius Costa Gomes } 17105d3de7dfSVinicius Costa Gomes 17113df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 17123df91ea2SAndrei Emeltchenko 171373d80debSLuiz Augusto von Dentz hci_chan_del(conn->hchan); 171473d80debSLuiz Augusto von Dentz 17155d3de7dfSVinicius Costa Gomes if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) 1716127074bfSUlisses Furquim cancel_delayed_work_sync(&conn->info_timer); 17175d3de7dfSVinicius Costa Gomes 17185d3de7dfSVinicius Costa Gomes hcon->l2cap_data = NULL; 17199c903e37SDavid Herrmann conn->hchan = NULL; 17209c903e37SDavid Herrmann l2cap_conn_put(conn); 17215d3de7dfSVinicius Costa Gomes } 17225d3de7dfSVinicius Costa Gomes 17239c903e37SDavid Herrmann static void l2cap_conn_free(struct kref *ref) 17249c903e37SDavid Herrmann { 17259c903e37SDavid Herrmann struct l2cap_conn *conn = container_of(ref, struct l2cap_conn, ref); 17269c903e37SDavid Herrmann 17279c903e37SDavid Herrmann hci_conn_put(conn->hcon); 17289c903e37SDavid Herrmann kfree(conn); 17299c903e37SDavid Herrmann } 17309c903e37SDavid Herrmann 173151bb8457SJohan Hedberg struct l2cap_conn *l2cap_conn_get(struct l2cap_conn *conn) 17329c903e37SDavid Herrmann { 17339c903e37SDavid Herrmann kref_get(&conn->ref); 173451bb8457SJohan Hedberg return conn; 17359c903e37SDavid Herrmann } 17369c903e37SDavid Herrmann EXPORT_SYMBOL(l2cap_conn_get); 17379c903e37SDavid Herrmann 17389c903e37SDavid Herrmann void l2cap_conn_put(struct l2cap_conn *conn) 17399c903e37SDavid Herrmann { 17409c903e37SDavid Herrmann kref_put(&conn->ref, l2cap_conn_free); 17419c903e37SDavid Herrmann } 17429c903e37SDavid Herrmann EXPORT_SYMBOL(l2cap_conn_put); 17439c903e37SDavid Herrmann 17440a708f8fSGustavo F. Padovan /* ---- Socket interface ---- */ 17450a708f8fSGustavo F. Padovan 1746c2287681SIdo Yariv /* Find socket with psm and source / destination bdaddr. 17470a708f8fSGustavo F. Padovan * Returns closest match. 17480a708f8fSGustavo F. Padovan */ 1749c2287681SIdo Yariv static struct l2cap_chan *l2cap_global_chan_by_psm(int state, __le16 psm, 1750c2287681SIdo Yariv bdaddr_t *src, 1751bf20fd4eSJohan Hedberg bdaddr_t *dst, 1752bf20fd4eSJohan Hedberg u8 link_type) 17530a708f8fSGustavo F. Padovan { 175423691d75SGustavo F. Padovan struct l2cap_chan *c, *c1 = NULL; 17550a708f8fSGustavo F. Padovan 175623691d75SGustavo F. Padovan read_lock(&chan_list_lock); 17570a708f8fSGustavo F. Padovan 175823691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 175989bc500eSGustavo F. Padovan if (state && c->state != state) 17600a708f8fSGustavo F. Padovan continue; 17610a708f8fSGustavo F. Padovan 1762bf20fd4eSJohan Hedberg if (link_type == ACL_LINK && c->src_type != BDADDR_BREDR) 1763bf20fd4eSJohan Hedberg continue; 1764bf20fd4eSJohan Hedberg 1765bf20fd4eSJohan Hedberg if (link_type == LE_LINK && c->src_type == BDADDR_BREDR) 1766bf20fd4eSJohan Hedberg continue; 1767bf20fd4eSJohan Hedberg 176823691d75SGustavo F. Padovan if (c->psm == psm) { 1769c2287681SIdo Yariv int src_match, dst_match; 1770c2287681SIdo Yariv int src_any, dst_any; 1771c2287681SIdo Yariv 17720a708f8fSGustavo F. Padovan /* Exact match. */ 17737eafc59eSMarcel Holtmann src_match = !bacmp(&c->src, src); 17747eafc59eSMarcel Holtmann dst_match = !bacmp(&c->dst, dst); 1775c2287681SIdo Yariv if (src_match && dst_match) { 1776a24cce14SJohan Hedberg l2cap_chan_hold(c); 1777a7567b20SJohannes Berg read_unlock(&chan_list_lock); 177823691d75SGustavo F. Padovan return c; 177923691d75SGustavo F. Padovan } 17800a708f8fSGustavo F. Padovan 17810a708f8fSGustavo F. Padovan /* Closest match */ 17827eafc59eSMarcel Holtmann src_any = !bacmp(&c->src, BDADDR_ANY); 17837eafc59eSMarcel Holtmann dst_any = !bacmp(&c->dst, BDADDR_ANY); 1784c2287681SIdo Yariv if ((src_match && dst_any) || (src_any && dst_match) || 1785c2287681SIdo Yariv (src_any && dst_any)) 178623691d75SGustavo F. Padovan c1 = c; 17870a708f8fSGustavo F. Padovan } 17880a708f8fSGustavo F. Padovan } 17890a708f8fSGustavo F. Padovan 1790a24cce14SJohan Hedberg if (c1) 1791a24cce14SJohan Hedberg l2cap_chan_hold(c1); 1792a24cce14SJohan Hedberg 179323691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 17940a708f8fSGustavo F. Padovan 179523691d75SGustavo F. Padovan return c1; 17960a708f8fSGustavo F. Padovan } 17970a708f8fSGustavo F. Padovan 1798721c4181SGustavo F. Padovan static void l2cap_monitor_timeout(struct work_struct *work) 17990a708f8fSGustavo F. Padovan { 1800721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 1801721c4181SGustavo F. Padovan monitor_timer.work); 18020a708f8fSGustavo F. Padovan 1803525cd185SGustavo F. Padovan BT_DBG("chan %p", chan); 18040a708f8fSGustavo F. Padovan 18056be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 18066be36555SAndrei Emeltchenko 180780909e04SMat Martineau if (!chan->conn) { 18086be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 18098d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 18100a708f8fSGustavo F. Padovan return; 18110a708f8fSGustavo F. Padovan } 18120a708f8fSGustavo F. Padovan 1813401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, L2CAP_EV_MONITOR_TO); 18140a708f8fSGustavo F. Padovan 18156be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 18168d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 18170a708f8fSGustavo F. Padovan } 18180a708f8fSGustavo F. Padovan 1819721c4181SGustavo F. Padovan static void l2cap_retrans_timeout(struct work_struct *work) 18200a708f8fSGustavo F. Padovan { 1821721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 1822721c4181SGustavo F. Padovan retrans_timer.work); 18230a708f8fSGustavo F. Padovan 182449208c9cSGustavo F. Padovan BT_DBG("chan %p", chan); 18250a708f8fSGustavo F. Padovan 18266be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 18276be36555SAndrei Emeltchenko 182880909e04SMat Martineau if (!chan->conn) { 182980909e04SMat Martineau l2cap_chan_unlock(chan); 183080909e04SMat Martineau l2cap_chan_put(chan); 183180909e04SMat Martineau return; 183280909e04SMat Martineau } 18330a708f8fSGustavo F. Padovan 1834401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, L2CAP_EV_RETRANS_TO); 18356be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 18368d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 18370a708f8fSGustavo F. Padovan } 18380a708f8fSGustavo F. Padovan 1839d660366dSGustavo Padovan static void l2cap_streaming_send(struct l2cap_chan *chan, 18403733937dSMat Martineau struct sk_buff_head *skbs) 18410a708f8fSGustavo F. Padovan { 18420a708f8fSGustavo F. Padovan struct sk_buff *skb; 18433733937dSMat Martineau struct l2cap_ctrl *control; 18440a708f8fSGustavo F. Padovan 18453733937dSMat Martineau BT_DBG("chan %p, skbs %p", chan, skbs); 18463733937dSMat Martineau 1847b99e13adSMat Martineau if (__chan_is_moving(chan)) 1848b99e13adSMat Martineau return; 1849b99e13adSMat Martineau 18503733937dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 18513733937dSMat Martineau 18523733937dSMat Martineau while (!skb_queue_empty(&chan->tx_q)) { 18533733937dSMat Martineau 18543733937dSMat Martineau skb = skb_dequeue(&chan->tx_q); 18553733937dSMat Martineau 1856a4368ff3SJohan Hedberg bt_cb(skb)->l2cap.retries = 1; 1857a4368ff3SJohan Hedberg control = &bt_cb(skb)->l2cap; 18583733937dSMat Martineau 18593733937dSMat Martineau control->reqseq = 0; 18603733937dSMat Martineau control->txseq = chan->next_tx_seq; 18613733937dSMat Martineau 18623733937dSMat Martineau __pack_control(chan, control, skb); 18630a708f8fSGustavo F. Padovan 186447d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 18653733937dSMat Martineau u16 fcs = crc16(0, (u8 *) skb->data, skb->len); 18663733937dSMat Martineau put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 18670a708f8fSGustavo F. Padovan } 18680a708f8fSGustavo F. Padovan 18694343478fSGustavo F. Padovan l2cap_do_send(chan, skb); 18700a708f8fSGustavo F. Padovan 1871b4400672SAndrei Emeltchenko BT_DBG("Sent txseq %u", control->txseq); 18723733937dSMat Martineau 1873836be934SAndrei Emeltchenko chan->next_tx_seq = __next_seq(chan, chan->next_tx_seq); 18743733937dSMat Martineau chan->frames_sent++; 18750a708f8fSGustavo F. Padovan } 18760a708f8fSGustavo F. Padovan } 18770a708f8fSGustavo F. Padovan 187867c9e840SSzymon Janc static int l2cap_ertm_send(struct l2cap_chan *chan) 18790a708f8fSGustavo F. Padovan { 18800a708f8fSGustavo F. Padovan struct sk_buff *skb, *tx_skb; 188118a48e76SMat Martineau struct l2cap_ctrl *control; 188218a48e76SMat Martineau int sent = 0; 188318a48e76SMat Martineau 188418a48e76SMat Martineau BT_DBG("chan %p", chan); 18850a708f8fSGustavo F. Padovan 188689bc500eSGustavo F. Padovan if (chan->state != BT_CONNECTED) 18870a708f8fSGustavo F. Padovan return -ENOTCONN; 18880a708f8fSGustavo F. Padovan 188994122bbeSMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 189094122bbeSMat Martineau return 0; 189194122bbeSMat Martineau 1892b99e13adSMat Martineau if (__chan_is_moving(chan)) 1893b99e13adSMat Martineau return 0; 1894b99e13adSMat Martineau 189518a48e76SMat Martineau while (chan->tx_send_head && 189618a48e76SMat Martineau chan->unacked_frames < chan->remote_tx_win && 189718a48e76SMat Martineau chan->tx_state == L2CAP_TX_STATE_XMIT) { 18980a708f8fSGustavo F. Padovan 189918a48e76SMat Martineau skb = chan->tx_send_head; 19000a708f8fSGustavo F. Padovan 1901a4368ff3SJohan Hedberg bt_cb(skb)->l2cap.retries = 1; 1902a4368ff3SJohan Hedberg control = &bt_cb(skb)->l2cap; 19030a708f8fSGustavo F. Padovan 1904e2ab4353SGustavo F. Padovan if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state)) 190518a48e76SMat Martineau control->final = 1; 1906e2ab4353SGustavo F. Padovan 190718a48e76SMat Martineau control->reqseq = chan->buffer_seq; 190818a48e76SMat Martineau chan->last_acked_seq = chan->buffer_seq; 190918a48e76SMat Martineau control->txseq = chan->next_tx_seq; 19100a708f8fSGustavo F. Padovan 191118a48e76SMat Martineau __pack_control(chan, control, skb); 19120a708f8fSGustavo F. Padovan 191347d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 191418a48e76SMat Martineau u16 fcs = crc16(0, (u8 *) skb->data, skb->len); 191518a48e76SMat Martineau put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 19160a708f8fSGustavo F. Padovan } 19170a708f8fSGustavo F. Padovan 191818a48e76SMat Martineau /* Clone after data has been modified. Data is assumed to be 191918a48e76SMat Martineau read-only (for locking purposes) on cloned sk_buffs. 192018a48e76SMat Martineau */ 192118a48e76SMat Martineau tx_skb = skb_clone(skb, GFP_KERNEL); 192218a48e76SMat Martineau 192318a48e76SMat Martineau if (!tx_skb) 192418a48e76SMat Martineau break; 19250a708f8fSGustavo F. Padovan 19261a09bcb9SGustavo F. Padovan __set_retrans_timer(chan); 19270a708f8fSGustavo F. Padovan 1928836be934SAndrei Emeltchenko chan->next_tx_seq = __next_seq(chan, chan->next_tx_seq); 19296a026610SGustavo F. Padovan chan->unacked_frames++; 19306a026610SGustavo F. Padovan chan->frames_sent++; 193118a48e76SMat Martineau sent++; 19320a708f8fSGustavo F. Padovan 193358d35f87SGustavo F. Padovan if (skb_queue_is_last(&chan->tx_q, skb)) 193458d35f87SGustavo F. Padovan chan->tx_send_head = NULL; 19350a708f8fSGustavo F. Padovan else 193658d35f87SGustavo F. Padovan chan->tx_send_head = skb_queue_next(&chan->tx_q, skb); 193718a48e76SMat Martineau 193818a48e76SMat Martineau l2cap_do_send(chan, tx_skb); 1939b4400672SAndrei Emeltchenko BT_DBG("Sent txseq %u", control->txseq); 19400a708f8fSGustavo F. Padovan } 19410a708f8fSGustavo F. Padovan 1942b4400672SAndrei Emeltchenko BT_DBG("Sent %d, %u unacked, %u in ERTM queue", sent, 1943b4400672SAndrei Emeltchenko chan->unacked_frames, skb_queue_len(&chan->tx_q)); 194418a48e76SMat Martineau 194518a48e76SMat Martineau return sent; 19460a708f8fSGustavo F. Padovan } 19470a708f8fSGustavo F. Padovan 1948e1fbd4c1SMat Martineau static void l2cap_ertm_resend(struct l2cap_chan *chan) 1949e1fbd4c1SMat Martineau { 1950e1fbd4c1SMat Martineau struct l2cap_ctrl control; 1951e1fbd4c1SMat Martineau struct sk_buff *skb; 1952e1fbd4c1SMat Martineau struct sk_buff *tx_skb; 1953e1fbd4c1SMat Martineau u16 seq; 1954e1fbd4c1SMat Martineau 1955e1fbd4c1SMat Martineau BT_DBG("chan %p", chan); 1956e1fbd4c1SMat Martineau 1957e1fbd4c1SMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 1958e1fbd4c1SMat Martineau return; 1959e1fbd4c1SMat Martineau 1960b99e13adSMat Martineau if (__chan_is_moving(chan)) 1961b99e13adSMat Martineau return; 1962b99e13adSMat Martineau 1963e1fbd4c1SMat Martineau while (chan->retrans_list.head != L2CAP_SEQ_LIST_CLEAR) { 1964e1fbd4c1SMat Martineau seq = l2cap_seq_list_pop(&chan->retrans_list); 1965e1fbd4c1SMat Martineau 1966e1fbd4c1SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, seq); 1967e1fbd4c1SMat Martineau if (!skb) { 1968e1fbd4c1SMat Martineau BT_DBG("Error: Can't retransmit seq %d, frame missing", 1969e1fbd4c1SMat Martineau seq); 1970e1fbd4c1SMat Martineau continue; 1971e1fbd4c1SMat Martineau } 1972e1fbd4c1SMat Martineau 1973a4368ff3SJohan Hedberg bt_cb(skb)->l2cap.retries++; 1974a4368ff3SJohan Hedberg control = bt_cb(skb)->l2cap; 1975e1fbd4c1SMat Martineau 1976e1fbd4c1SMat Martineau if (chan->max_tx != 0 && 1977a4368ff3SJohan Hedberg bt_cb(skb)->l2cap.retries > chan->max_tx) { 1978e1fbd4c1SMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 19795e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 1980e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 1981e1fbd4c1SMat Martineau break; 1982e1fbd4c1SMat Martineau } 1983e1fbd4c1SMat Martineau 1984e1fbd4c1SMat Martineau control.reqseq = chan->buffer_seq; 1985e1fbd4c1SMat Martineau if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state)) 1986e1fbd4c1SMat Martineau control.final = 1; 1987e1fbd4c1SMat Martineau else 1988e1fbd4c1SMat Martineau control.final = 0; 1989e1fbd4c1SMat Martineau 1990e1fbd4c1SMat Martineau if (skb_cloned(skb)) { 1991e1fbd4c1SMat Martineau /* Cloned sk_buffs are read-only, so we need a 1992e1fbd4c1SMat Martineau * writeable copy 1993e1fbd4c1SMat Martineau */ 19948bcde1f2SGustavo Padovan tx_skb = skb_copy(skb, GFP_KERNEL); 1995e1fbd4c1SMat Martineau } else { 19968bcde1f2SGustavo Padovan tx_skb = skb_clone(skb, GFP_KERNEL); 1997e1fbd4c1SMat Martineau } 1998e1fbd4c1SMat Martineau 1999e1fbd4c1SMat Martineau if (!tx_skb) { 2000e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 2001e1fbd4c1SMat Martineau break; 2002e1fbd4c1SMat Martineau } 2003e1fbd4c1SMat Martineau 2004e1fbd4c1SMat Martineau /* Update skb contents */ 2005e1fbd4c1SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 2006e1fbd4c1SMat Martineau put_unaligned_le32(__pack_extended_control(&control), 2007e1fbd4c1SMat Martineau tx_skb->data + L2CAP_HDR_SIZE); 2008e1fbd4c1SMat Martineau } else { 2009e1fbd4c1SMat Martineau put_unaligned_le16(__pack_enhanced_control(&control), 2010e1fbd4c1SMat Martineau tx_skb->data + L2CAP_HDR_SIZE); 2011e1fbd4c1SMat Martineau } 2012e1fbd4c1SMat Martineau 201313cac152SLukasz Rymanowski /* Update FCS */ 2014e1fbd4c1SMat Martineau if (chan->fcs == L2CAP_FCS_CRC16) { 201513cac152SLukasz Rymanowski u16 fcs = crc16(0, (u8 *) tx_skb->data, 201613cac152SLukasz Rymanowski tx_skb->len - L2CAP_FCS_SIZE); 201713cac152SLukasz Rymanowski put_unaligned_le16(fcs, skb_tail_pointer(tx_skb) - 201813cac152SLukasz Rymanowski L2CAP_FCS_SIZE); 2019e1fbd4c1SMat Martineau } 2020e1fbd4c1SMat Martineau 2021e1fbd4c1SMat Martineau l2cap_do_send(chan, tx_skb); 2022e1fbd4c1SMat Martineau 2023e1fbd4c1SMat Martineau BT_DBG("Resent txseq %d", control.txseq); 2024e1fbd4c1SMat Martineau 2025e1fbd4c1SMat Martineau chan->last_acked_seq = chan->buffer_seq; 2026e1fbd4c1SMat Martineau } 2027e1fbd4c1SMat Martineau } 2028e1fbd4c1SMat Martineau 2029f80842a8SMat Martineau static void l2cap_retransmit(struct l2cap_chan *chan, 2030f80842a8SMat Martineau struct l2cap_ctrl *control) 2031f80842a8SMat Martineau { 2032f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2033f80842a8SMat Martineau 2034f80842a8SMat Martineau l2cap_seq_list_append(&chan->retrans_list, control->reqseq); 2035f80842a8SMat Martineau l2cap_ertm_resend(chan); 2036f80842a8SMat Martineau } 2037f80842a8SMat Martineau 2038d2a7ac5dSMat Martineau static void l2cap_retransmit_all(struct l2cap_chan *chan, 2039d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 2040d2a7ac5dSMat Martineau { 2041e1fbd4c1SMat Martineau struct sk_buff *skb; 2042e1fbd4c1SMat Martineau 2043e1fbd4c1SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2044e1fbd4c1SMat Martineau 2045e1fbd4c1SMat Martineau if (control->poll) 2046e1fbd4c1SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 2047e1fbd4c1SMat Martineau 2048e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 2049e1fbd4c1SMat Martineau 2050e1fbd4c1SMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 2051e1fbd4c1SMat Martineau return; 2052e1fbd4c1SMat Martineau 2053e1fbd4c1SMat Martineau if (chan->unacked_frames) { 2054e1fbd4c1SMat Martineau skb_queue_walk(&chan->tx_q, skb) { 2055a4368ff3SJohan Hedberg if (bt_cb(skb)->l2cap.txseq == control->reqseq || 2056e1fbd4c1SMat Martineau skb == chan->tx_send_head) 2057e1fbd4c1SMat Martineau break; 2058e1fbd4c1SMat Martineau } 2059e1fbd4c1SMat Martineau 2060e1fbd4c1SMat Martineau skb_queue_walk_from(&chan->tx_q, skb) { 2061e1fbd4c1SMat Martineau if (skb == chan->tx_send_head) 2062e1fbd4c1SMat Martineau break; 2063e1fbd4c1SMat Martineau 2064e1fbd4c1SMat Martineau l2cap_seq_list_append(&chan->retrans_list, 2065a4368ff3SJohan Hedberg bt_cb(skb)->l2cap.txseq); 2066e1fbd4c1SMat Martineau } 2067e1fbd4c1SMat Martineau 2068e1fbd4c1SMat Martineau l2cap_ertm_resend(chan); 2069e1fbd4c1SMat Martineau } 2070d2a7ac5dSMat Martineau } 2071d2a7ac5dSMat Martineau 2072b17e73bbSSzymon Janc static void l2cap_send_ack(struct l2cap_chan *chan) 2073b17e73bbSSzymon Janc { 20740a0aba42SMat Martineau struct l2cap_ctrl control; 20750a0aba42SMat Martineau u16 frames_to_ack = __seq_offset(chan, chan->buffer_seq, 20760a0aba42SMat Martineau chan->last_acked_seq); 20770a0aba42SMat Martineau int threshold; 20780a0aba42SMat Martineau 20790a0aba42SMat Martineau BT_DBG("chan %p last_acked_seq %d buffer_seq %d", 20800a0aba42SMat Martineau chan, chan->last_acked_seq, chan->buffer_seq); 20810a0aba42SMat Martineau 20820a0aba42SMat Martineau memset(&control, 0, sizeof(control)); 20830a0aba42SMat Martineau control.sframe = 1; 20840a0aba42SMat Martineau 20850a0aba42SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state) && 20860a0aba42SMat Martineau chan->rx_state == L2CAP_RX_STATE_RECV) { 2087b17e73bbSSzymon Janc __clear_ack_timer(chan); 20880a0aba42SMat Martineau control.super = L2CAP_SUPER_RNR; 20890a0aba42SMat Martineau control.reqseq = chan->buffer_seq; 20900a0aba42SMat Martineau l2cap_send_sframe(chan, &control); 20910a0aba42SMat Martineau } else { 20920a0aba42SMat Martineau if (!test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) { 20930a0aba42SMat Martineau l2cap_ertm_send(chan); 20940a0aba42SMat Martineau /* If any i-frames were sent, they included an ack */ 20950a0aba42SMat Martineau if (chan->buffer_seq == chan->last_acked_seq) 20960a0aba42SMat Martineau frames_to_ack = 0; 20970a0aba42SMat Martineau } 20980a0aba42SMat Martineau 2099c20f8e35SMat Martineau /* Ack now if the window is 3/4ths full. 21000a0aba42SMat Martineau * Calculate without mul or div 21010a0aba42SMat Martineau */ 2102c20f8e35SMat Martineau threshold = chan->ack_win; 21030a0aba42SMat Martineau threshold += threshold << 1; 21040a0aba42SMat Martineau threshold >>= 2; 21050a0aba42SMat Martineau 2106b4400672SAndrei Emeltchenko BT_DBG("frames_to_ack %u, threshold %d", frames_to_ack, 21070a0aba42SMat Martineau threshold); 21080a0aba42SMat Martineau 21090a0aba42SMat Martineau if (frames_to_ack >= threshold) { 21100a0aba42SMat Martineau __clear_ack_timer(chan); 21110a0aba42SMat Martineau control.super = L2CAP_SUPER_RR; 21120a0aba42SMat Martineau control.reqseq = chan->buffer_seq; 21130a0aba42SMat Martineau l2cap_send_sframe(chan, &control); 21140a0aba42SMat Martineau frames_to_ack = 0; 21150a0aba42SMat Martineau } 21160a0aba42SMat Martineau 21170a0aba42SMat Martineau if (frames_to_ack) 21180a0aba42SMat Martineau __set_ack_timer(chan); 21190a0aba42SMat Martineau } 2120b17e73bbSSzymon Janc } 2121b17e73bbSSzymon Janc 212204124681SGustavo F. Padovan static inline int l2cap_skbuff_fromiovec(struct l2cap_chan *chan, 212304124681SGustavo F. Padovan struct msghdr *msg, int len, 212404124681SGustavo F. Padovan int count, struct sk_buff *skb) 21250a708f8fSGustavo F. Padovan { 21260952a57aSAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 21270a708f8fSGustavo F. Padovan struct sk_buff **frag; 212890338947SGustavo Padovan int sent = 0; 21290a708f8fSGustavo F. Padovan 213017836394SAl Viro if (copy_from_iter(skb_put(skb, count), count, &msg->msg_iter) != count) 21310a708f8fSGustavo F. Padovan return -EFAULT; 21320a708f8fSGustavo F. Padovan 21330a708f8fSGustavo F. Padovan sent += count; 21340a708f8fSGustavo F. Padovan len -= count; 21350a708f8fSGustavo F. Padovan 21360a708f8fSGustavo F. Padovan /* Continuation fragments (no L2CAP header) */ 21370a708f8fSGustavo F. Padovan frag = &skb_shinfo(skb)->frag_list; 21380a708f8fSGustavo F. Padovan while (len) { 2139fbe00700SGustavo Padovan struct sk_buff *tmp; 2140fbe00700SGustavo Padovan 21410a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 21420a708f8fSGustavo F. Padovan 2143d9fbd02bSMarcel Holtmann tmp = chan->ops->alloc_skb(chan, 0, count, 214490338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 2145fbe00700SGustavo Padovan if (IS_ERR(tmp)) 2146fbe00700SGustavo Padovan return PTR_ERR(tmp); 21472f7719ceSAndrei Emeltchenko 2148fbe00700SGustavo Padovan *frag = tmp; 2149fbe00700SGustavo Padovan 215017836394SAl Viro if (copy_from_iter(skb_put(*frag, count), count, 215117836394SAl Viro &msg->msg_iter) != count) 21520a708f8fSGustavo F. Padovan return -EFAULT; 21530a708f8fSGustavo F. Padovan 21540a708f8fSGustavo F. Padovan sent += count; 21550a708f8fSGustavo F. Padovan len -= count; 21560a708f8fSGustavo F. Padovan 21572d0ed3d5SGustavo Padovan skb->len += (*frag)->len; 21582d0ed3d5SGustavo Padovan skb->data_len += (*frag)->len; 21592d0ed3d5SGustavo Padovan 21600a708f8fSGustavo F. Padovan frag = &(*frag)->next; 21610a708f8fSGustavo F. Padovan } 21620a708f8fSGustavo F. Padovan 21630a708f8fSGustavo F. Padovan return sent; 21640a708f8fSGustavo F. Padovan } 21650a708f8fSGustavo F. Padovan 21665e59b791SLuiz Augusto von Dentz static struct sk_buff *l2cap_create_connless_pdu(struct l2cap_chan *chan, 21678d46321cSMarcel Holtmann struct msghdr *msg, size_t len) 21680a708f8fSGustavo F. Padovan { 21698c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 21700a708f8fSGustavo F. Padovan struct sk_buff *skb; 217103a51213SAndrei Emeltchenko int err, count, hlen = L2CAP_HDR_SIZE + L2CAP_PSMLEN_SIZE; 21720a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 21730a708f8fSGustavo F. Padovan 21748d46321cSMarcel Holtmann BT_DBG("chan %p psm 0x%2.2x len %zu", chan, 21758d46321cSMarcel Holtmann __le16_to_cpu(chan->psm), len); 21760a708f8fSGustavo F. Padovan 21770a708f8fSGustavo F. Padovan count = min_t(unsigned int, (conn->mtu - hlen), len); 21782f7719ceSAndrei Emeltchenko 2179d9fbd02bSMarcel Holtmann skb = chan->ops->alloc_skb(chan, hlen, count, 218090338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 218190338947SGustavo Padovan if (IS_ERR(skb)) 218290338947SGustavo Padovan return skb; 21830a708f8fSGustavo F. Padovan 21840a708f8fSGustavo F. Padovan /* Create L2CAP header */ 21850a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2186fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 2187daf6a78cSAndrei Emeltchenko lh->len = cpu_to_le16(len + L2CAP_PSMLEN_SIZE); 218843b1b8dfSMarcel Holtmann put_unaligned(chan->psm, (__le16 *) skb_put(skb, L2CAP_PSMLEN_SIZE)); 21890a708f8fSGustavo F. Padovan 21900952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 21910a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 21920a708f8fSGustavo F. Padovan kfree_skb(skb); 21930a708f8fSGustavo F. Padovan return ERR_PTR(err); 21940a708f8fSGustavo F. Padovan } 21950a708f8fSGustavo F. Padovan return skb; 21960a708f8fSGustavo F. Padovan } 21970a708f8fSGustavo F. Padovan 21985e59b791SLuiz Augusto von Dentz static struct sk_buff *l2cap_create_basic_pdu(struct l2cap_chan *chan, 21998d46321cSMarcel Holtmann struct msghdr *msg, size_t len) 22000a708f8fSGustavo F. Padovan { 22018c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 22020a708f8fSGustavo F. Padovan struct sk_buff *skb; 2203f2ba7faeSGustavo Padovan int err, count; 22040a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 22050a708f8fSGustavo F. Padovan 2206b4400672SAndrei Emeltchenko BT_DBG("chan %p len %zu", chan, len); 22070a708f8fSGustavo F. Padovan 2208f2ba7faeSGustavo Padovan count = min_t(unsigned int, (conn->mtu - L2CAP_HDR_SIZE), len); 22092f7719ceSAndrei Emeltchenko 2210d9fbd02bSMarcel Holtmann skb = chan->ops->alloc_skb(chan, L2CAP_HDR_SIZE, count, 221190338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 221290338947SGustavo Padovan if (IS_ERR(skb)) 221390338947SGustavo Padovan return skb; 22140a708f8fSGustavo F. Padovan 22150a708f8fSGustavo F. Padovan /* Create L2CAP header */ 22160a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2217fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 22186ff9b5efSGustavo Padovan lh->len = cpu_to_le16(len); 22190a708f8fSGustavo F. Padovan 22200952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 22210a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 22220a708f8fSGustavo F. Padovan kfree_skb(skb); 22230a708f8fSGustavo F. Padovan return ERR_PTR(err); 22240a708f8fSGustavo F. Padovan } 22250a708f8fSGustavo F. Padovan return skb; 22260a708f8fSGustavo F. Padovan } 22270a708f8fSGustavo F. Padovan 2228ab0ff76dSLuiz Augusto von Dentz static struct sk_buff *l2cap_create_iframe_pdu(struct l2cap_chan *chan, 2229ab0ff76dSLuiz Augusto von Dentz struct msghdr *msg, size_t len, 223094122bbeSMat Martineau u16 sdulen) 22310a708f8fSGustavo F. Padovan { 22328c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 22330a708f8fSGustavo F. Padovan struct sk_buff *skb; 2234e4ca6d98SAndrei Emeltchenko int err, count, hlen; 22350a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 22360a708f8fSGustavo F. Padovan 2237b4400672SAndrei Emeltchenko BT_DBG("chan %p len %zu", chan, len); 22380a708f8fSGustavo F. Padovan 22390a708f8fSGustavo F. Padovan if (!conn) 22400a708f8fSGustavo F. Padovan return ERR_PTR(-ENOTCONN); 22410a708f8fSGustavo F. Padovan 2242ba7aa64fSGustavo Padovan hlen = __ertm_hdr_size(chan); 2243e4ca6d98SAndrei Emeltchenko 22440a708f8fSGustavo F. Padovan if (sdulen) 224503a51213SAndrei Emeltchenko hlen += L2CAP_SDULEN_SIZE; 22460a708f8fSGustavo F. Padovan 224747d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 224803a51213SAndrei Emeltchenko hlen += L2CAP_FCS_SIZE; 22490a708f8fSGustavo F. Padovan 22500a708f8fSGustavo F. Padovan count = min_t(unsigned int, (conn->mtu - hlen), len); 22512f7719ceSAndrei Emeltchenko 2252d9fbd02bSMarcel Holtmann skb = chan->ops->alloc_skb(chan, hlen, count, 225390338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 225490338947SGustavo Padovan if (IS_ERR(skb)) 225590338947SGustavo Padovan return skb; 22560a708f8fSGustavo F. Padovan 22570a708f8fSGustavo F. Padovan /* Create L2CAP header */ 22580a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2259fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 22600a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(len + (hlen - L2CAP_HDR_SIZE)); 226188843ab0SAndrei Emeltchenko 226218a48e76SMat Martineau /* Control header is populated later */ 226318a48e76SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 226418a48e76SMat Martineau put_unaligned_le32(0, skb_put(skb, L2CAP_EXT_CTRL_SIZE)); 226518a48e76SMat Martineau else 226618a48e76SMat Martineau put_unaligned_le16(0, skb_put(skb, L2CAP_ENH_CTRL_SIZE)); 226788843ab0SAndrei Emeltchenko 22680a708f8fSGustavo F. Padovan if (sdulen) 226903a51213SAndrei Emeltchenko put_unaligned_le16(sdulen, skb_put(skb, L2CAP_SDULEN_SIZE)); 22700a708f8fSGustavo F. Padovan 22710952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 22720a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 22730a708f8fSGustavo F. Padovan kfree_skb(skb); 22740a708f8fSGustavo F. Padovan return ERR_PTR(err); 22750a708f8fSGustavo F. Padovan } 22760a708f8fSGustavo F. Padovan 2277a4368ff3SJohan Hedberg bt_cb(skb)->l2cap.fcs = chan->fcs; 2278a4368ff3SJohan Hedberg bt_cb(skb)->l2cap.retries = 0; 22790a708f8fSGustavo F. Padovan return skb; 22800a708f8fSGustavo F. Padovan } 22810a708f8fSGustavo F. Padovan 228294122bbeSMat Martineau static int l2cap_segment_sdu(struct l2cap_chan *chan, 228394122bbeSMat Martineau struct sk_buff_head *seg_queue, 228494122bbeSMat Martineau struct msghdr *msg, size_t len) 22850a708f8fSGustavo F. Padovan { 22860a708f8fSGustavo F. Padovan struct sk_buff *skb; 228794122bbeSMat Martineau u16 sdu_len; 228894122bbeSMat Martineau size_t pdu_len; 228994122bbeSMat Martineau u8 sar; 22900a708f8fSGustavo F. Padovan 2291b4400672SAndrei Emeltchenko BT_DBG("chan %p, msg %p, len %zu", chan, msg, len); 22920a708f8fSGustavo F. Padovan 229394122bbeSMat Martineau /* It is critical that ERTM PDUs fit in a single HCI fragment, 229494122bbeSMat Martineau * so fragmented skbs are not used. The HCI layer's handling 229594122bbeSMat Martineau * of fragmented skbs is not compatible with ERTM's queueing. 229694122bbeSMat Martineau */ 229794122bbeSMat Martineau 229894122bbeSMat Martineau /* PDU size is derived from the HCI MTU */ 229994122bbeSMat Martineau pdu_len = chan->conn->mtu; 230094122bbeSMat Martineau 2301a549574dSMat Martineau /* Constrain PDU size for BR/EDR connections */ 2302a549574dSMat Martineau if (!chan->hs_hcon) 230394122bbeSMat Martineau pdu_len = min_t(size_t, pdu_len, L2CAP_BREDR_MAX_PAYLOAD); 230494122bbeSMat Martineau 230594122bbeSMat Martineau /* Adjust for largest possible L2CAP overhead. */ 230635d401dfSGustavo Padovan if (chan->fcs) 230735d401dfSGustavo Padovan pdu_len -= L2CAP_FCS_SIZE; 230835d401dfSGustavo Padovan 2309ba7aa64fSGustavo Padovan pdu_len -= __ertm_hdr_size(chan); 231094122bbeSMat Martineau 231194122bbeSMat Martineau /* Remote device may have requested smaller PDUs */ 231294122bbeSMat Martineau pdu_len = min_t(size_t, pdu_len, chan->remote_mps); 231394122bbeSMat Martineau 231494122bbeSMat Martineau if (len <= pdu_len) { 231594122bbeSMat Martineau sar = L2CAP_SAR_UNSEGMENTED; 231694122bbeSMat Martineau sdu_len = 0; 231794122bbeSMat Martineau pdu_len = len; 231894122bbeSMat Martineau } else { 231994122bbeSMat Martineau sar = L2CAP_SAR_START; 232094122bbeSMat Martineau sdu_len = len; 232194122bbeSMat Martineau } 23220a708f8fSGustavo F. Padovan 23230a708f8fSGustavo F. Padovan while (len > 0) { 232494122bbeSMat Martineau skb = l2cap_create_iframe_pdu(chan, msg, pdu_len, sdu_len); 23250a708f8fSGustavo F. Padovan 23260a708f8fSGustavo F. Padovan if (IS_ERR(skb)) { 232794122bbeSMat Martineau __skb_queue_purge(seg_queue); 23280a708f8fSGustavo F. Padovan return PTR_ERR(skb); 23290a708f8fSGustavo F. Padovan } 23300a708f8fSGustavo F. Padovan 2331a4368ff3SJohan Hedberg bt_cb(skb)->l2cap.sar = sar; 233294122bbeSMat Martineau __skb_queue_tail(seg_queue, skb); 23330a708f8fSGustavo F. Padovan 233494122bbeSMat Martineau len -= pdu_len; 2335069cb270SLukasz Rymanowski if (sdu_len) 233694122bbeSMat Martineau sdu_len = 0; 233794122bbeSMat Martineau 233894122bbeSMat Martineau if (len <= pdu_len) { 233994122bbeSMat Martineau sar = L2CAP_SAR_END; 234094122bbeSMat Martineau pdu_len = len; 234194122bbeSMat Martineau } else { 234294122bbeSMat Martineau sar = L2CAP_SAR_CONTINUE; 234394122bbeSMat Martineau } 234494122bbeSMat Martineau } 234594122bbeSMat Martineau 2346f0f62799SGustavo Padovan return 0; 23470a708f8fSGustavo F. Padovan } 23480a708f8fSGustavo F. Padovan 2349177f8f2bSJohan Hedberg static struct sk_buff *l2cap_create_le_flowctl_pdu(struct l2cap_chan *chan, 2350177f8f2bSJohan Hedberg struct msghdr *msg, 2351177f8f2bSJohan Hedberg size_t len, u16 sdulen) 2352177f8f2bSJohan Hedberg { 2353177f8f2bSJohan Hedberg struct l2cap_conn *conn = chan->conn; 2354177f8f2bSJohan Hedberg struct sk_buff *skb; 2355177f8f2bSJohan Hedberg int err, count, hlen; 2356177f8f2bSJohan Hedberg struct l2cap_hdr *lh; 2357177f8f2bSJohan Hedberg 2358177f8f2bSJohan Hedberg BT_DBG("chan %p len %zu", chan, len); 2359177f8f2bSJohan Hedberg 2360177f8f2bSJohan Hedberg if (!conn) 2361177f8f2bSJohan Hedberg return ERR_PTR(-ENOTCONN); 2362177f8f2bSJohan Hedberg 2363177f8f2bSJohan Hedberg hlen = L2CAP_HDR_SIZE; 2364177f8f2bSJohan Hedberg 2365177f8f2bSJohan Hedberg if (sdulen) 2366177f8f2bSJohan Hedberg hlen += L2CAP_SDULEN_SIZE; 2367177f8f2bSJohan Hedberg 2368177f8f2bSJohan Hedberg count = min_t(unsigned int, (conn->mtu - hlen), len); 2369177f8f2bSJohan Hedberg 2370d9fbd02bSMarcel Holtmann skb = chan->ops->alloc_skb(chan, hlen, count, 2371177f8f2bSJohan Hedberg msg->msg_flags & MSG_DONTWAIT); 2372177f8f2bSJohan Hedberg if (IS_ERR(skb)) 2373177f8f2bSJohan Hedberg return skb; 2374177f8f2bSJohan Hedberg 2375177f8f2bSJohan Hedberg /* Create L2CAP header */ 2376177f8f2bSJohan Hedberg lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2377177f8f2bSJohan Hedberg lh->cid = cpu_to_le16(chan->dcid); 2378177f8f2bSJohan Hedberg lh->len = cpu_to_le16(len + (hlen - L2CAP_HDR_SIZE)); 2379177f8f2bSJohan Hedberg 2380177f8f2bSJohan Hedberg if (sdulen) 2381177f8f2bSJohan Hedberg put_unaligned_le16(sdulen, skb_put(skb, L2CAP_SDULEN_SIZE)); 2382177f8f2bSJohan Hedberg 2383177f8f2bSJohan Hedberg err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 2384177f8f2bSJohan Hedberg if (unlikely(err < 0)) { 2385177f8f2bSJohan Hedberg kfree_skb(skb); 2386177f8f2bSJohan Hedberg return ERR_PTR(err); 2387177f8f2bSJohan Hedberg } 2388177f8f2bSJohan Hedberg 2389177f8f2bSJohan Hedberg return skb; 2390177f8f2bSJohan Hedberg } 2391177f8f2bSJohan Hedberg 2392177f8f2bSJohan Hedberg static int l2cap_segment_le_sdu(struct l2cap_chan *chan, 2393177f8f2bSJohan Hedberg struct sk_buff_head *seg_queue, 2394177f8f2bSJohan Hedberg struct msghdr *msg, size_t len) 2395177f8f2bSJohan Hedberg { 2396177f8f2bSJohan Hedberg struct sk_buff *skb; 2397177f8f2bSJohan Hedberg size_t pdu_len; 2398177f8f2bSJohan Hedberg u16 sdu_len; 2399177f8f2bSJohan Hedberg 2400177f8f2bSJohan Hedberg BT_DBG("chan %p, msg %p, len %zu", chan, msg, len); 2401177f8f2bSJohan Hedberg 2402177f8f2bSJohan Hedberg sdu_len = len; 240372c6fb91SJohan Hedberg pdu_len = chan->remote_mps - L2CAP_SDULEN_SIZE; 2404177f8f2bSJohan Hedberg 2405177f8f2bSJohan Hedberg while (len > 0) { 2406177f8f2bSJohan Hedberg if (len <= pdu_len) 2407177f8f2bSJohan Hedberg pdu_len = len; 2408177f8f2bSJohan Hedberg 2409177f8f2bSJohan Hedberg skb = l2cap_create_le_flowctl_pdu(chan, msg, pdu_len, sdu_len); 2410177f8f2bSJohan Hedberg if (IS_ERR(skb)) { 2411177f8f2bSJohan Hedberg __skb_queue_purge(seg_queue); 2412177f8f2bSJohan Hedberg return PTR_ERR(skb); 2413177f8f2bSJohan Hedberg } 2414177f8f2bSJohan Hedberg 2415177f8f2bSJohan Hedberg __skb_queue_tail(seg_queue, skb); 2416177f8f2bSJohan Hedberg 2417177f8f2bSJohan Hedberg len -= pdu_len; 2418177f8f2bSJohan Hedberg 2419177f8f2bSJohan Hedberg if (sdu_len) { 2420177f8f2bSJohan Hedberg sdu_len = 0; 2421177f8f2bSJohan Hedberg pdu_len += L2CAP_SDULEN_SIZE; 2422177f8f2bSJohan Hedberg } 2423177f8f2bSJohan Hedberg } 2424177f8f2bSJohan Hedberg 2425177f8f2bSJohan Hedberg return 0; 2426177f8f2bSJohan Hedberg } 2427177f8f2bSJohan Hedberg 24288d46321cSMarcel Holtmann int l2cap_chan_send(struct l2cap_chan *chan, struct msghdr *msg, size_t len) 24299a91a04aSGustavo F. Padovan { 24309a91a04aSGustavo F. Padovan struct sk_buff *skb; 24319a91a04aSGustavo F. Padovan int err; 243294122bbeSMat Martineau struct sk_buff_head seg_queue; 24339a91a04aSGustavo F. Padovan 243431e8ce80SSeung-Woo Kim if (!chan->conn) 243531e8ce80SSeung-Woo Kim return -ENOTCONN; 243631e8ce80SSeung-Woo Kim 24379a91a04aSGustavo F. Padovan /* Connectionless channel */ 2438715ec005SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_LESS) { 24398d46321cSMarcel Holtmann skb = l2cap_create_connless_pdu(chan, msg, len); 24409a91a04aSGustavo F. Padovan if (IS_ERR(skb)) 24419a91a04aSGustavo F. Padovan return PTR_ERR(skb); 24429a91a04aSGustavo F. Padovan 2443ede81a2aSAndrzej Kaczmarek /* Channel lock is released before requesting new skb and then 2444ede81a2aSAndrzej Kaczmarek * reacquired thus we need to recheck channel state. 2445ede81a2aSAndrzej Kaczmarek */ 2446ede81a2aSAndrzej Kaczmarek if (chan->state != BT_CONNECTED) { 2447ede81a2aSAndrzej Kaczmarek kfree_skb(skb); 2448ede81a2aSAndrzej Kaczmarek return -ENOTCONN; 2449ede81a2aSAndrzej Kaczmarek } 2450ede81a2aSAndrzej Kaczmarek 24519a91a04aSGustavo F. Padovan l2cap_do_send(chan, skb); 24529a91a04aSGustavo F. Padovan return len; 24539a91a04aSGustavo F. Padovan } 24549a91a04aSGustavo F. Padovan 24559a91a04aSGustavo F. Padovan switch (chan->mode) { 245638319713SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 2457177f8f2bSJohan Hedberg /* Check outgoing MTU */ 2458177f8f2bSJohan Hedberg if (len > chan->omtu) 2459177f8f2bSJohan Hedberg return -EMSGSIZE; 2460177f8f2bSJohan Hedberg 2461fad5fc89SJohan Hedberg if (!chan->tx_credits) 2462fad5fc89SJohan Hedberg return -EAGAIN; 2463fad5fc89SJohan Hedberg 2464177f8f2bSJohan Hedberg __skb_queue_head_init(&seg_queue); 2465177f8f2bSJohan Hedberg 2466177f8f2bSJohan Hedberg err = l2cap_segment_le_sdu(chan, &seg_queue, msg, len); 2467177f8f2bSJohan Hedberg 2468177f8f2bSJohan Hedberg if (chan->state != BT_CONNECTED) { 2469177f8f2bSJohan Hedberg __skb_queue_purge(&seg_queue); 2470177f8f2bSJohan Hedberg err = -ENOTCONN; 2471177f8f2bSJohan Hedberg } 2472177f8f2bSJohan Hedberg 2473177f8f2bSJohan Hedberg if (err) 2474177f8f2bSJohan Hedberg return err; 2475177f8f2bSJohan Hedberg 2476177f8f2bSJohan Hedberg skb_queue_splice_tail_init(&seg_queue, &chan->tx_q); 2477177f8f2bSJohan Hedberg 2478177f8f2bSJohan Hedberg while (chan->tx_credits && !skb_queue_empty(&chan->tx_q)) { 2479177f8f2bSJohan Hedberg l2cap_do_send(chan, skb_dequeue(&chan->tx_q)); 2480177f8f2bSJohan Hedberg chan->tx_credits--; 2481177f8f2bSJohan Hedberg } 2482177f8f2bSJohan Hedberg 2483177f8f2bSJohan Hedberg if (!chan->tx_credits) 2484177f8f2bSJohan Hedberg chan->ops->suspend(chan); 2485177f8f2bSJohan Hedberg 2486177f8f2bSJohan Hedberg err = len; 2487177f8f2bSJohan Hedberg 2488177f8f2bSJohan Hedberg break; 2489177f8f2bSJohan Hedberg 2490fad5fc89SJohan Hedberg case L2CAP_MODE_BASIC: 24919a91a04aSGustavo F. Padovan /* Check outgoing MTU */ 24929a91a04aSGustavo F. Padovan if (len > chan->omtu) 24939a91a04aSGustavo F. Padovan return -EMSGSIZE; 24949a91a04aSGustavo F. Padovan 24959a91a04aSGustavo F. Padovan /* Create a basic PDU */ 24968d46321cSMarcel Holtmann skb = l2cap_create_basic_pdu(chan, msg, len); 24979a91a04aSGustavo F. Padovan if (IS_ERR(skb)) 24989a91a04aSGustavo F. Padovan return PTR_ERR(skb); 24999a91a04aSGustavo F. Padovan 2500ede81a2aSAndrzej Kaczmarek /* Channel lock is released before requesting new skb and then 2501ede81a2aSAndrzej Kaczmarek * reacquired thus we need to recheck channel state. 2502ede81a2aSAndrzej Kaczmarek */ 2503ede81a2aSAndrzej Kaczmarek if (chan->state != BT_CONNECTED) { 2504ede81a2aSAndrzej Kaczmarek kfree_skb(skb); 2505ede81a2aSAndrzej Kaczmarek return -ENOTCONN; 2506ede81a2aSAndrzej Kaczmarek } 2507ede81a2aSAndrzej Kaczmarek 25089a91a04aSGustavo F. Padovan l2cap_do_send(chan, skb); 25099a91a04aSGustavo F. Padovan err = len; 25109a91a04aSGustavo F. Padovan break; 25119a91a04aSGustavo F. Padovan 25129a91a04aSGustavo F. Padovan case L2CAP_MODE_ERTM: 25139a91a04aSGustavo F. Padovan case L2CAP_MODE_STREAMING: 251494122bbeSMat Martineau /* Check outgoing MTU */ 251594122bbeSMat Martineau if (len > chan->omtu) { 251694122bbeSMat Martineau err = -EMSGSIZE; 25179a91a04aSGustavo F. Padovan break; 25189a91a04aSGustavo F. Padovan } 25199a91a04aSGustavo F. Padovan 252094122bbeSMat Martineau __skb_queue_head_init(&seg_queue); 252194122bbeSMat Martineau 252294122bbeSMat Martineau /* Do segmentation before calling in to the state machine, 252394122bbeSMat Martineau * since it's possible to block while waiting for memory 252494122bbeSMat Martineau * allocation. 252594122bbeSMat Martineau */ 252694122bbeSMat Martineau err = l2cap_segment_sdu(chan, &seg_queue, msg, len); 252794122bbeSMat Martineau 252894122bbeSMat Martineau /* The channel could have been closed while segmenting, 252994122bbeSMat Martineau * check that it is still connected. 253094122bbeSMat Martineau */ 253194122bbeSMat Martineau if (chan->state != BT_CONNECTED) { 253294122bbeSMat Martineau __skb_queue_purge(&seg_queue); 253394122bbeSMat Martineau err = -ENOTCONN; 25349a91a04aSGustavo F. Padovan } 25359a91a04aSGustavo F. Padovan 253694122bbeSMat Martineau if (err) 253794122bbeSMat Martineau break; 253894122bbeSMat Martineau 25393733937dSMat Martineau if (chan->mode == L2CAP_MODE_ERTM) 2540d660366dSGustavo Padovan l2cap_tx(chan, NULL, &seg_queue, L2CAP_EV_DATA_REQUEST); 25413733937dSMat Martineau else 2542d660366dSGustavo Padovan l2cap_streaming_send(chan, &seg_queue); 254394122bbeSMat Martineau 25449a91a04aSGustavo F. Padovan err = len; 25459a91a04aSGustavo F. Padovan 254694122bbeSMat Martineau /* If the skbs were not queued for sending, they'll still be in 254794122bbeSMat Martineau * seg_queue and need to be purged. 254894122bbeSMat Martineau */ 254994122bbeSMat Martineau __skb_queue_purge(&seg_queue); 25509a91a04aSGustavo F. Padovan break; 25519a91a04aSGustavo F. Padovan 25529a91a04aSGustavo F. Padovan default: 25539a91a04aSGustavo F. Padovan BT_DBG("bad state %1.1x", chan->mode); 25549a91a04aSGustavo F. Padovan err = -EBADFD; 25559a91a04aSGustavo F. Padovan } 25569a91a04aSGustavo F. Padovan 25579a91a04aSGustavo F. Padovan return err; 25589a91a04aSGustavo F. Padovan } 25596b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_send); 25609a91a04aSGustavo F. Padovan 2561d2a7ac5dSMat Martineau static void l2cap_send_srej(struct l2cap_chan *chan, u16 txseq) 2562d2a7ac5dSMat Martineau { 2563bed68bdeSMat Martineau struct l2cap_ctrl control; 2564bed68bdeSMat Martineau u16 seq; 2565bed68bdeSMat Martineau 2566b4400672SAndrei Emeltchenko BT_DBG("chan %p, txseq %u", chan, txseq); 2567bed68bdeSMat Martineau 2568bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2569bed68bdeSMat Martineau control.sframe = 1; 2570bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2571bed68bdeSMat Martineau 2572bed68bdeSMat Martineau for (seq = chan->expected_tx_seq; seq != txseq; 2573bed68bdeSMat Martineau seq = __next_seq(chan, seq)) { 2574bed68bdeSMat Martineau if (!l2cap_ertm_seq_in_queue(&chan->srej_q, seq)) { 2575bed68bdeSMat Martineau control.reqseq = seq; 2576bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2577bed68bdeSMat Martineau l2cap_seq_list_append(&chan->srej_list, seq); 2578bed68bdeSMat Martineau } 2579bed68bdeSMat Martineau } 2580bed68bdeSMat Martineau 2581bed68bdeSMat Martineau chan->expected_tx_seq = __next_seq(chan, txseq); 2582d2a7ac5dSMat Martineau } 2583d2a7ac5dSMat Martineau 2584d2a7ac5dSMat Martineau static void l2cap_send_srej_tail(struct l2cap_chan *chan) 2585d2a7ac5dSMat Martineau { 2586bed68bdeSMat Martineau struct l2cap_ctrl control; 2587bed68bdeSMat Martineau 2588bed68bdeSMat Martineau BT_DBG("chan %p", chan); 2589bed68bdeSMat Martineau 2590bed68bdeSMat Martineau if (chan->srej_list.tail == L2CAP_SEQ_LIST_CLEAR) 2591bed68bdeSMat Martineau return; 2592bed68bdeSMat Martineau 2593bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2594bed68bdeSMat Martineau control.sframe = 1; 2595bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2596bed68bdeSMat Martineau control.reqseq = chan->srej_list.tail; 2597bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2598d2a7ac5dSMat Martineau } 2599d2a7ac5dSMat Martineau 2600d2a7ac5dSMat Martineau static void l2cap_send_srej_list(struct l2cap_chan *chan, u16 txseq) 2601d2a7ac5dSMat Martineau { 2602bed68bdeSMat Martineau struct l2cap_ctrl control; 2603bed68bdeSMat Martineau u16 initial_head; 2604bed68bdeSMat Martineau u16 seq; 2605bed68bdeSMat Martineau 2606b4400672SAndrei Emeltchenko BT_DBG("chan %p, txseq %u", chan, txseq); 2607bed68bdeSMat Martineau 2608bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2609bed68bdeSMat Martineau control.sframe = 1; 2610bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2611bed68bdeSMat Martineau 2612bed68bdeSMat Martineau /* Capture initial list head to allow only one pass through the list. */ 2613bed68bdeSMat Martineau initial_head = chan->srej_list.head; 2614bed68bdeSMat Martineau 2615bed68bdeSMat Martineau do { 2616bed68bdeSMat Martineau seq = l2cap_seq_list_pop(&chan->srej_list); 2617bed68bdeSMat Martineau if (seq == txseq || seq == L2CAP_SEQ_LIST_CLEAR) 2618bed68bdeSMat Martineau break; 2619bed68bdeSMat Martineau 2620bed68bdeSMat Martineau control.reqseq = seq; 2621bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2622bed68bdeSMat Martineau l2cap_seq_list_append(&chan->srej_list, seq); 2623bed68bdeSMat Martineau } while (chan->srej_list.head != initial_head); 2624d2a7ac5dSMat Martineau } 2625d2a7ac5dSMat Martineau 2626608bcc6dSMat Martineau static void l2cap_process_reqseq(struct l2cap_chan *chan, u16 reqseq) 2627608bcc6dSMat Martineau { 2628608bcc6dSMat Martineau struct sk_buff *acked_skb; 2629608bcc6dSMat Martineau u16 ackseq; 2630608bcc6dSMat Martineau 2631b4400672SAndrei Emeltchenko BT_DBG("chan %p, reqseq %u", chan, reqseq); 2632608bcc6dSMat Martineau 2633608bcc6dSMat Martineau if (chan->unacked_frames == 0 || reqseq == chan->expected_ack_seq) 2634608bcc6dSMat Martineau return; 2635608bcc6dSMat Martineau 2636b4400672SAndrei Emeltchenko BT_DBG("expected_ack_seq %u, unacked_frames %u", 2637608bcc6dSMat Martineau chan->expected_ack_seq, chan->unacked_frames); 2638608bcc6dSMat Martineau 2639608bcc6dSMat Martineau for (ackseq = chan->expected_ack_seq; ackseq != reqseq; 2640608bcc6dSMat Martineau ackseq = __next_seq(chan, ackseq)) { 2641608bcc6dSMat Martineau 2642608bcc6dSMat Martineau acked_skb = l2cap_ertm_seq_in_queue(&chan->tx_q, ackseq); 2643608bcc6dSMat Martineau if (acked_skb) { 2644608bcc6dSMat Martineau skb_unlink(acked_skb, &chan->tx_q); 2645608bcc6dSMat Martineau kfree_skb(acked_skb); 2646608bcc6dSMat Martineau chan->unacked_frames--; 2647608bcc6dSMat Martineau } 2648608bcc6dSMat Martineau } 2649608bcc6dSMat Martineau 2650608bcc6dSMat Martineau chan->expected_ack_seq = reqseq; 2651608bcc6dSMat Martineau 2652608bcc6dSMat Martineau if (chan->unacked_frames == 0) 2653608bcc6dSMat Martineau __clear_retrans_timer(chan); 2654608bcc6dSMat Martineau 2655b4400672SAndrei Emeltchenko BT_DBG("unacked_frames %u", chan->unacked_frames); 2656608bcc6dSMat Martineau } 2657608bcc6dSMat Martineau 2658608bcc6dSMat Martineau static void l2cap_abort_rx_srej_sent(struct l2cap_chan *chan) 2659608bcc6dSMat Martineau { 2660608bcc6dSMat Martineau BT_DBG("chan %p", chan); 2661608bcc6dSMat Martineau 2662608bcc6dSMat Martineau chan->expected_tx_seq = chan->buffer_seq; 2663608bcc6dSMat Martineau l2cap_seq_list_clear(&chan->srej_list); 2664608bcc6dSMat Martineau skb_queue_purge(&chan->srej_q); 2665608bcc6dSMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 2666608bcc6dSMat Martineau } 2667608bcc6dSMat Martineau 2668d660366dSGustavo Padovan static void l2cap_tx_state_xmit(struct l2cap_chan *chan, 2669608bcc6dSMat Martineau struct l2cap_ctrl *control, 2670608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2671608bcc6dSMat Martineau { 2672608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d", chan, control, skbs, 2673608bcc6dSMat Martineau event); 2674608bcc6dSMat Martineau 2675608bcc6dSMat Martineau switch (event) { 2676608bcc6dSMat Martineau case L2CAP_EV_DATA_REQUEST: 2677608bcc6dSMat Martineau if (chan->tx_send_head == NULL) 2678608bcc6dSMat Martineau chan->tx_send_head = skb_peek(skbs); 2679608bcc6dSMat Martineau 2680608bcc6dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 2681608bcc6dSMat Martineau l2cap_ertm_send(chan); 2682608bcc6dSMat Martineau break; 2683608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_DETECTED: 2684608bcc6dSMat Martineau BT_DBG("Enter LOCAL_BUSY"); 2685608bcc6dSMat Martineau set_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2686608bcc6dSMat Martineau 2687608bcc6dSMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 2688608bcc6dSMat Martineau /* The SREJ_SENT state must be aborted if we are to 2689608bcc6dSMat Martineau * enter the LOCAL_BUSY state. 2690608bcc6dSMat Martineau */ 2691608bcc6dSMat Martineau l2cap_abort_rx_srej_sent(chan); 2692608bcc6dSMat Martineau } 2693608bcc6dSMat Martineau 2694608bcc6dSMat Martineau l2cap_send_ack(chan); 2695608bcc6dSMat Martineau 2696608bcc6dSMat Martineau break; 2697608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_CLEAR: 2698608bcc6dSMat Martineau BT_DBG("Exit LOCAL_BUSY"); 2699608bcc6dSMat Martineau clear_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2700608bcc6dSMat Martineau 2701608bcc6dSMat Martineau if (test_bit(CONN_RNR_SENT, &chan->conn_state)) { 2702608bcc6dSMat Martineau struct l2cap_ctrl local_control; 2703608bcc6dSMat Martineau 2704608bcc6dSMat Martineau memset(&local_control, 0, sizeof(local_control)); 2705608bcc6dSMat Martineau local_control.sframe = 1; 2706608bcc6dSMat Martineau local_control.super = L2CAP_SUPER_RR; 2707608bcc6dSMat Martineau local_control.poll = 1; 2708608bcc6dSMat Martineau local_control.reqseq = chan->buffer_seq; 2709a67d7f6fSMat Martineau l2cap_send_sframe(chan, &local_control); 2710608bcc6dSMat Martineau 2711608bcc6dSMat Martineau chan->retry_count = 1; 2712608bcc6dSMat Martineau __set_monitor_timer(chan); 2713608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2714608bcc6dSMat Martineau } 2715608bcc6dSMat Martineau break; 2716608bcc6dSMat Martineau case L2CAP_EV_RECV_REQSEQ_AND_FBIT: 2717608bcc6dSMat Martineau l2cap_process_reqseq(chan, control->reqseq); 2718608bcc6dSMat Martineau break; 2719608bcc6dSMat Martineau case L2CAP_EV_EXPLICIT_POLL: 2720608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2721608bcc6dSMat Martineau chan->retry_count = 1; 2722608bcc6dSMat Martineau __set_monitor_timer(chan); 2723608bcc6dSMat Martineau __clear_ack_timer(chan); 2724608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2725608bcc6dSMat Martineau break; 2726608bcc6dSMat Martineau case L2CAP_EV_RETRANS_TO: 2727608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2728608bcc6dSMat Martineau chan->retry_count = 1; 2729608bcc6dSMat Martineau __set_monitor_timer(chan); 2730608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2731608bcc6dSMat Martineau break; 2732608bcc6dSMat Martineau case L2CAP_EV_RECV_FBIT: 2733608bcc6dSMat Martineau /* Nothing to process */ 2734608bcc6dSMat Martineau break; 2735608bcc6dSMat Martineau default: 2736608bcc6dSMat Martineau break; 2737608bcc6dSMat Martineau } 2738608bcc6dSMat Martineau } 2739608bcc6dSMat Martineau 2740d660366dSGustavo Padovan static void l2cap_tx_state_wait_f(struct l2cap_chan *chan, 2741608bcc6dSMat Martineau struct l2cap_ctrl *control, 2742608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2743608bcc6dSMat Martineau { 2744608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d", chan, control, skbs, 2745608bcc6dSMat Martineau event); 2746608bcc6dSMat Martineau 2747608bcc6dSMat Martineau switch (event) { 2748608bcc6dSMat Martineau case L2CAP_EV_DATA_REQUEST: 2749608bcc6dSMat Martineau if (chan->tx_send_head == NULL) 2750608bcc6dSMat Martineau chan->tx_send_head = skb_peek(skbs); 2751608bcc6dSMat Martineau /* Queue data, but don't send. */ 2752608bcc6dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 2753608bcc6dSMat Martineau break; 2754608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_DETECTED: 2755608bcc6dSMat Martineau BT_DBG("Enter LOCAL_BUSY"); 2756608bcc6dSMat Martineau set_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2757608bcc6dSMat Martineau 2758608bcc6dSMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 2759608bcc6dSMat Martineau /* The SREJ_SENT state must be aborted if we are to 2760608bcc6dSMat Martineau * enter the LOCAL_BUSY state. 2761608bcc6dSMat Martineau */ 2762608bcc6dSMat Martineau l2cap_abort_rx_srej_sent(chan); 2763608bcc6dSMat Martineau } 2764608bcc6dSMat Martineau 2765608bcc6dSMat Martineau l2cap_send_ack(chan); 2766608bcc6dSMat Martineau 2767608bcc6dSMat Martineau break; 2768608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_CLEAR: 2769608bcc6dSMat Martineau BT_DBG("Exit LOCAL_BUSY"); 2770608bcc6dSMat Martineau clear_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2771608bcc6dSMat Martineau 2772608bcc6dSMat Martineau if (test_bit(CONN_RNR_SENT, &chan->conn_state)) { 2773608bcc6dSMat Martineau struct l2cap_ctrl local_control; 2774608bcc6dSMat Martineau memset(&local_control, 0, sizeof(local_control)); 2775608bcc6dSMat Martineau local_control.sframe = 1; 2776608bcc6dSMat Martineau local_control.super = L2CAP_SUPER_RR; 2777608bcc6dSMat Martineau local_control.poll = 1; 2778608bcc6dSMat Martineau local_control.reqseq = chan->buffer_seq; 2779a67d7f6fSMat Martineau l2cap_send_sframe(chan, &local_control); 2780608bcc6dSMat Martineau 2781608bcc6dSMat Martineau chan->retry_count = 1; 2782608bcc6dSMat Martineau __set_monitor_timer(chan); 2783608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2784608bcc6dSMat Martineau } 2785608bcc6dSMat Martineau break; 2786608bcc6dSMat Martineau case L2CAP_EV_RECV_REQSEQ_AND_FBIT: 2787608bcc6dSMat Martineau l2cap_process_reqseq(chan, control->reqseq); 2788608bcc6dSMat Martineau 2789608bcc6dSMat Martineau /* Fall through */ 2790608bcc6dSMat Martineau 2791608bcc6dSMat Martineau case L2CAP_EV_RECV_FBIT: 2792608bcc6dSMat Martineau if (control && control->final) { 2793608bcc6dSMat Martineau __clear_monitor_timer(chan); 2794608bcc6dSMat Martineau if (chan->unacked_frames > 0) 2795608bcc6dSMat Martineau __set_retrans_timer(chan); 2796608bcc6dSMat Martineau chan->retry_count = 0; 2797608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 2798608bcc6dSMat Martineau BT_DBG("recv fbit tx_state 0x2.2%x", chan->tx_state); 2799608bcc6dSMat Martineau } 2800608bcc6dSMat Martineau break; 2801608bcc6dSMat Martineau case L2CAP_EV_EXPLICIT_POLL: 2802608bcc6dSMat Martineau /* Ignore */ 2803608bcc6dSMat Martineau break; 2804608bcc6dSMat Martineau case L2CAP_EV_MONITOR_TO: 2805608bcc6dSMat Martineau if (chan->max_tx == 0 || chan->retry_count < chan->max_tx) { 2806608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2807608bcc6dSMat Martineau __set_monitor_timer(chan); 2808608bcc6dSMat Martineau chan->retry_count++; 2809608bcc6dSMat Martineau } else { 28105e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNABORTED); 2811608bcc6dSMat Martineau } 2812608bcc6dSMat Martineau break; 2813608bcc6dSMat Martineau default: 2814608bcc6dSMat Martineau break; 2815608bcc6dSMat Martineau } 2816608bcc6dSMat Martineau } 2817608bcc6dSMat Martineau 2818d660366dSGustavo Padovan static void l2cap_tx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 2819608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2820608bcc6dSMat Martineau { 2821608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d, state %d", 2822608bcc6dSMat Martineau chan, control, skbs, event, chan->tx_state); 2823608bcc6dSMat Martineau 2824608bcc6dSMat Martineau switch (chan->tx_state) { 2825608bcc6dSMat Martineau case L2CAP_TX_STATE_XMIT: 2826d660366dSGustavo Padovan l2cap_tx_state_xmit(chan, control, skbs, event); 2827608bcc6dSMat Martineau break; 2828608bcc6dSMat Martineau case L2CAP_TX_STATE_WAIT_F: 2829d660366dSGustavo Padovan l2cap_tx_state_wait_f(chan, control, skbs, event); 2830608bcc6dSMat Martineau break; 2831608bcc6dSMat Martineau default: 2832608bcc6dSMat Martineau /* Ignore event */ 2833608bcc6dSMat Martineau break; 2834608bcc6dSMat Martineau } 2835608bcc6dSMat Martineau } 2836608bcc6dSMat Martineau 28374b51dae9SMat Martineau static void l2cap_pass_to_tx(struct l2cap_chan *chan, 28384b51dae9SMat Martineau struct l2cap_ctrl *control) 28394b51dae9SMat Martineau { 28404b51dae9SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2841401bb1f7SAndrei Emeltchenko l2cap_tx(chan, control, NULL, L2CAP_EV_RECV_REQSEQ_AND_FBIT); 28424b51dae9SMat Martineau } 28434b51dae9SMat Martineau 2844f80842a8SMat Martineau static void l2cap_pass_to_tx_fbit(struct l2cap_chan *chan, 2845f80842a8SMat Martineau struct l2cap_ctrl *control) 2846f80842a8SMat Martineau { 2847f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2848401bb1f7SAndrei Emeltchenko l2cap_tx(chan, control, NULL, L2CAP_EV_RECV_FBIT); 2849f80842a8SMat Martineau } 2850f80842a8SMat Martineau 28510a708f8fSGustavo F. Padovan /* Copy frame to all raw sockets on that connection */ 28520a708f8fSGustavo F. Padovan static void l2cap_raw_recv(struct l2cap_conn *conn, struct sk_buff *skb) 28530a708f8fSGustavo F. Padovan { 28540a708f8fSGustavo F. Padovan struct sk_buff *nskb; 285548454079SGustavo F. Padovan struct l2cap_chan *chan; 28560a708f8fSGustavo F. Padovan 28570a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 28580a708f8fSGustavo F. Padovan 28593df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 28603d57dc68SGustavo F. Padovan 28613df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 2862715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_RAW) 28630a708f8fSGustavo F. Padovan continue; 28640a708f8fSGustavo F. Padovan 28657f5396a7SGustavo Padovan /* Don't send frame to the channel it came from */ 2866a4368ff3SJohan Hedberg if (bt_cb(skb)->l2cap.chan == chan) 28670a708f8fSGustavo F. Padovan continue; 28687f5396a7SGustavo Padovan 28698bcde1f2SGustavo Padovan nskb = skb_clone(skb, GFP_KERNEL); 28700a708f8fSGustavo F. Padovan if (!nskb) 28710a708f8fSGustavo F. Padovan continue; 287280b98027SGustavo Padovan if (chan->ops->recv(chan, nskb)) 28730a708f8fSGustavo F. Padovan kfree_skb(nskb); 28740a708f8fSGustavo F. Padovan } 28753d57dc68SGustavo F. Padovan 28763df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 28770a708f8fSGustavo F. Padovan } 28780a708f8fSGustavo F. Padovan 28790a708f8fSGustavo F. Padovan /* ---- L2CAP signalling commands ---- */ 2880b4400672SAndrei Emeltchenko static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn, u8 code, 2881b4400672SAndrei Emeltchenko u8 ident, u16 dlen, void *data) 28820a708f8fSGustavo F. Padovan { 28830a708f8fSGustavo F. Padovan struct sk_buff *skb, **frag; 28840a708f8fSGustavo F. Padovan struct l2cap_cmd_hdr *cmd; 28850a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 28860a708f8fSGustavo F. Padovan int len, count; 28870a708f8fSGustavo F. Padovan 2888b4400672SAndrei Emeltchenko BT_DBG("conn %p, code 0x%2.2x, ident 0x%2.2x, len %u", 28890a708f8fSGustavo F. Padovan conn, code, ident, dlen); 28900a708f8fSGustavo F. Padovan 2891300b962eSAnderson Lizardo if (conn->mtu < L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE) 2892300b962eSAnderson Lizardo return NULL; 2893300b962eSAnderson Lizardo 28940a708f8fSGustavo F. Padovan len = L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE + dlen; 28950a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 28960a708f8fSGustavo F. Padovan 28978bcde1f2SGustavo Padovan skb = bt_skb_alloc(count, GFP_KERNEL); 28980a708f8fSGustavo F. Padovan if (!skb) 28990a708f8fSGustavo F. Padovan return NULL; 29000a708f8fSGustavo F. Padovan 29010a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 29020a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(L2CAP_CMD_HDR_SIZE + dlen); 29033300d9a9SClaudio Takahasi 29043300d9a9SClaudio Takahasi if (conn->hcon->type == LE_LINK) 2905dcf4adbfSJoe Perches lh->cid = cpu_to_le16(L2CAP_CID_LE_SIGNALING); 29063300d9a9SClaudio Takahasi else 2907dcf4adbfSJoe Perches lh->cid = cpu_to_le16(L2CAP_CID_SIGNALING); 29080a708f8fSGustavo F. Padovan 29090a708f8fSGustavo F. Padovan cmd = (struct l2cap_cmd_hdr *) skb_put(skb, L2CAP_CMD_HDR_SIZE); 29100a708f8fSGustavo F. Padovan cmd->code = code; 29110a708f8fSGustavo F. Padovan cmd->ident = ident; 29120a708f8fSGustavo F. Padovan cmd->len = cpu_to_le16(dlen); 29130a708f8fSGustavo F. Padovan 29140a708f8fSGustavo F. Padovan if (dlen) { 29150a708f8fSGustavo F. Padovan count -= L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE; 29160a708f8fSGustavo F. Padovan memcpy(skb_put(skb, count), data, count); 29170a708f8fSGustavo F. Padovan data += count; 29180a708f8fSGustavo F. Padovan } 29190a708f8fSGustavo F. Padovan 29200a708f8fSGustavo F. Padovan len -= skb->len; 29210a708f8fSGustavo F. Padovan 29220a708f8fSGustavo F. Padovan /* Continuation fragments (no L2CAP header) */ 29230a708f8fSGustavo F. Padovan frag = &skb_shinfo(skb)->frag_list; 29240a708f8fSGustavo F. Padovan while (len) { 29250a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 29260a708f8fSGustavo F. Padovan 29278bcde1f2SGustavo Padovan *frag = bt_skb_alloc(count, GFP_KERNEL); 29280a708f8fSGustavo F. Padovan if (!*frag) 29290a708f8fSGustavo F. Padovan goto fail; 29300a708f8fSGustavo F. Padovan 29310a708f8fSGustavo F. Padovan memcpy(skb_put(*frag, count), data, count); 29320a708f8fSGustavo F. Padovan 29330a708f8fSGustavo F. Padovan len -= count; 29340a708f8fSGustavo F. Padovan data += count; 29350a708f8fSGustavo F. Padovan 29360a708f8fSGustavo F. Padovan frag = &(*frag)->next; 29370a708f8fSGustavo F. Padovan } 29380a708f8fSGustavo F. Padovan 29390a708f8fSGustavo F. Padovan return skb; 29400a708f8fSGustavo F. Padovan 29410a708f8fSGustavo F. Padovan fail: 29420a708f8fSGustavo F. Padovan kfree_skb(skb); 29430a708f8fSGustavo F. Padovan return NULL; 29440a708f8fSGustavo F. Padovan } 29450a708f8fSGustavo F. Padovan 29462d792818SGustavo Padovan static inline int l2cap_get_conf_opt(void **ptr, int *type, int *olen, 29472d792818SGustavo Padovan unsigned long *val) 29480a708f8fSGustavo F. Padovan { 29490a708f8fSGustavo F. Padovan struct l2cap_conf_opt *opt = *ptr; 29500a708f8fSGustavo F. Padovan int len; 29510a708f8fSGustavo F. Padovan 29520a708f8fSGustavo F. Padovan len = L2CAP_CONF_OPT_SIZE + opt->len; 29530a708f8fSGustavo F. Padovan *ptr += len; 29540a708f8fSGustavo F. Padovan 29550a708f8fSGustavo F. Padovan *type = opt->type; 29560a708f8fSGustavo F. Padovan *olen = opt->len; 29570a708f8fSGustavo F. Padovan 29580a708f8fSGustavo F. Padovan switch (opt->len) { 29590a708f8fSGustavo F. Padovan case 1: 29600a708f8fSGustavo F. Padovan *val = *((u8 *) opt->val); 29610a708f8fSGustavo F. Padovan break; 29620a708f8fSGustavo F. Padovan 29630a708f8fSGustavo F. Padovan case 2: 29640a708f8fSGustavo F. Padovan *val = get_unaligned_le16(opt->val); 29650a708f8fSGustavo F. Padovan break; 29660a708f8fSGustavo F. Padovan 29670a708f8fSGustavo F. Padovan case 4: 29680a708f8fSGustavo F. Padovan *val = get_unaligned_le32(opt->val); 29690a708f8fSGustavo F. Padovan break; 29700a708f8fSGustavo F. Padovan 29710a708f8fSGustavo F. Padovan default: 29720a708f8fSGustavo F. Padovan *val = (unsigned long) opt->val; 29730a708f8fSGustavo F. Padovan break; 29740a708f8fSGustavo F. Padovan } 29750a708f8fSGustavo F. Padovan 2976b4400672SAndrei Emeltchenko BT_DBG("type 0x%2.2x len %u val 0x%lx", *type, opt->len, *val); 29770a708f8fSGustavo F. Padovan return len; 29780a708f8fSGustavo F. Padovan } 29790a708f8fSGustavo F. Padovan 29800a708f8fSGustavo F. Padovan static void l2cap_add_conf_opt(void **ptr, u8 type, u8 len, unsigned long val) 29810a708f8fSGustavo F. Padovan { 29820a708f8fSGustavo F. Padovan struct l2cap_conf_opt *opt = *ptr; 29830a708f8fSGustavo F. Padovan 2984b4400672SAndrei Emeltchenko BT_DBG("type 0x%2.2x len %u val 0x%lx", type, len, val); 29850a708f8fSGustavo F. Padovan 29860a708f8fSGustavo F. Padovan opt->type = type; 29870a708f8fSGustavo F. Padovan opt->len = len; 29880a708f8fSGustavo F. Padovan 29890a708f8fSGustavo F. Padovan switch (len) { 29900a708f8fSGustavo F. Padovan case 1: 29910a708f8fSGustavo F. Padovan *((u8 *) opt->val) = val; 29920a708f8fSGustavo F. Padovan break; 29930a708f8fSGustavo F. Padovan 29940a708f8fSGustavo F. Padovan case 2: 29950a708f8fSGustavo F. Padovan put_unaligned_le16(val, opt->val); 29960a708f8fSGustavo F. Padovan break; 29970a708f8fSGustavo F. Padovan 29980a708f8fSGustavo F. Padovan case 4: 29990a708f8fSGustavo F. Padovan put_unaligned_le32(val, opt->val); 30000a708f8fSGustavo F. Padovan break; 30010a708f8fSGustavo F. Padovan 30020a708f8fSGustavo F. Padovan default: 30030a708f8fSGustavo F. Padovan memcpy(opt->val, (void *) val, len); 30040a708f8fSGustavo F. Padovan break; 30050a708f8fSGustavo F. Padovan } 30060a708f8fSGustavo F. Padovan 30070a708f8fSGustavo F. Padovan *ptr += L2CAP_CONF_OPT_SIZE + len; 30080a708f8fSGustavo F. Padovan } 30090a708f8fSGustavo F. Padovan 3010f89cef09SAndrei Emeltchenko static void l2cap_add_opt_efs(void **ptr, struct l2cap_chan *chan) 3011f89cef09SAndrei Emeltchenko { 3012f89cef09SAndrei Emeltchenko struct l2cap_conf_efs efs; 3013f89cef09SAndrei Emeltchenko 3014f89cef09SAndrei Emeltchenko switch (chan->mode) { 3015f89cef09SAndrei Emeltchenko case L2CAP_MODE_ERTM: 3016f89cef09SAndrei Emeltchenko efs.id = chan->local_id; 3017f89cef09SAndrei Emeltchenko efs.stype = chan->local_stype; 3018f89cef09SAndrei Emeltchenko efs.msdu = cpu_to_le16(chan->local_msdu); 3019f89cef09SAndrei Emeltchenko efs.sdu_itime = cpu_to_le32(chan->local_sdu_itime); 3020dcf4adbfSJoe Perches efs.acc_lat = cpu_to_le32(L2CAP_DEFAULT_ACC_LAT); 3021dcf4adbfSJoe Perches efs.flush_to = cpu_to_le32(L2CAP_EFS_DEFAULT_FLUSH_TO); 3022f89cef09SAndrei Emeltchenko break; 3023f89cef09SAndrei Emeltchenko 3024f89cef09SAndrei Emeltchenko case L2CAP_MODE_STREAMING: 3025f89cef09SAndrei Emeltchenko efs.id = 1; 3026f89cef09SAndrei Emeltchenko efs.stype = L2CAP_SERV_BESTEFFORT; 3027f89cef09SAndrei Emeltchenko efs.msdu = cpu_to_le16(chan->local_msdu); 3028f89cef09SAndrei Emeltchenko efs.sdu_itime = cpu_to_le32(chan->local_sdu_itime); 3029f89cef09SAndrei Emeltchenko efs.acc_lat = 0; 3030f89cef09SAndrei Emeltchenko efs.flush_to = 0; 3031f89cef09SAndrei Emeltchenko break; 3032f89cef09SAndrei Emeltchenko 3033f89cef09SAndrei Emeltchenko default: 3034f89cef09SAndrei Emeltchenko return; 3035f89cef09SAndrei Emeltchenko } 3036f89cef09SAndrei Emeltchenko 3037f89cef09SAndrei Emeltchenko l2cap_add_conf_opt(ptr, L2CAP_CONF_EFS, sizeof(efs), 3038f89cef09SAndrei Emeltchenko (unsigned long) &efs); 3039f89cef09SAndrei Emeltchenko } 3040f89cef09SAndrei Emeltchenko 3041721c4181SGustavo F. Padovan static void l2cap_ack_timeout(struct work_struct *work) 30420a708f8fSGustavo F. Padovan { 3043721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 3044721c4181SGustavo F. Padovan ack_timer.work); 30450362520bSMat Martineau u16 frames_to_ack; 30460a708f8fSGustavo F. Padovan 30472fb9b3d4SGustavo F. Padovan BT_DBG("chan %p", chan); 30482fb9b3d4SGustavo F. Padovan 30496be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 30506be36555SAndrei Emeltchenko 30510362520bSMat Martineau frames_to_ack = __seq_offset(chan, chan->buffer_seq, 30520362520bSMat Martineau chan->last_acked_seq); 30530362520bSMat Martineau 30540362520bSMat Martineau if (frames_to_ack) 30550362520bSMat Martineau l2cap_send_rr_or_rnr(chan, 0); 30566be36555SAndrei Emeltchenko 30576be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 305809bfb2eeSSzymon Janc l2cap_chan_put(chan); 30590a708f8fSGustavo F. Padovan } 30600a708f8fSGustavo F. Padovan 3061466f8004SAndrei Emeltchenko int l2cap_ertm_init(struct l2cap_chan *chan) 30620a708f8fSGustavo F. Padovan { 30633c588192SMat Martineau int err; 30643c588192SMat Martineau 3065105bdf9eSMat Martineau chan->next_tx_seq = 0; 3066105bdf9eSMat Martineau chan->expected_tx_seq = 0; 306742e5c802SGustavo F. Padovan chan->expected_ack_seq = 0; 30686a026610SGustavo F. Padovan chan->unacked_frames = 0; 306942e5c802SGustavo F. Padovan chan->buffer_seq = 0; 30706a026610SGustavo F. Padovan chan->frames_sent = 0; 3071105bdf9eSMat Martineau chan->last_acked_seq = 0; 3072105bdf9eSMat Martineau chan->sdu = NULL; 3073105bdf9eSMat Martineau chan->sdu_last_frag = NULL; 3074105bdf9eSMat Martineau chan->sdu_len = 0; 3075105bdf9eSMat Martineau 3076d34c34fbSMat Martineau skb_queue_head_init(&chan->tx_q); 3077d34c34fbSMat Martineau 30786ed971caSMarcel Holtmann chan->local_amp_id = AMP_ID_BREDR; 30796ed971caSMarcel Holtmann chan->move_id = AMP_ID_BREDR; 308008333283SMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 308108333283SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 308208333283SMat Martineau 3083105bdf9eSMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 3084105bdf9eSMat Martineau return 0; 3085105bdf9eSMat Martineau 3086105bdf9eSMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 3087105bdf9eSMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 30880a708f8fSGustavo F. Padovan 3089721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->retrans_timer, l2cap_retrans_timeout); 3090721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->monitor_timer, l2cap_monitor_timeout); 3091721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->ack_timer, l2cap_ack_timeout); 30920a708f8fSGustavo F. Padovan 3093f1c6775bSGustavo F. Padovan skb_queue_head_init(&chan->srej_q); 30940a708f8fSGustavo F. Padovan 30953c588192SMat Martineau err = l2cap_seq_list_init(&chan->srej_list, chan->tx_win); 30963c588192SMat Martineau if (err < 0) 30973c588192SMat Martineau return err; 30983c588192SMat Martineau 30999dc9affcSMat Martineau err = l2cap_seq_list_init(&chan->retrans_list, chan->remote_tx_win); 31009dc9affcSMat Martineau if (err < 0) 31019dc9affcSMat Martineau l2cap_seq_list_free(&chan->srej_list); 31029dc9affcSMat Martineau 31039dc9affcSMat Martineau return err; 31040a708f8fSGustavo F. Padovan } 31050a708f8fSGustavo F. Padovan 31060a708f8fSGustavo F. Padovan static inline __u8 l2cap_select_mode(__u8 mode, __u16 remote_feat_mask) 31070a708f8fSGustavo F. Padovan { 31080a708f8fSGustavo F. Padovan switch (mode) { 31090a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 31100a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 31110a708f8fSGustavo F. Padovan if (l2cap_mode_supported(mode, remote_feat_mask)) 31120a708f8fSGustavo F. Padovan return mode; 31130a708f8fSGustavo F. Padovan /* fall through */ 31140a708f8fSGustavo F. Padovan default: 31150a708f8fSGustavo F. Padovan return L2CAP_MODE_BASIC; 31160a708f8fSGustavo F. Padovan } 31170a708f8fSGustavo F. Padovan } 31180a708f8fSGustavo F. Padovan 3119848566b3SMarcel Holtmann static inline bool __l2cap_ews_supported(struct l2cap_conn *conn) 31206327eb98SAndrei Emeltchenko { 31210bd49fc7SJohan Hedberg return ((conn->local_fixed_chan & L2CAP_FC_A2MP) && 31220bd49fc7SJohan Hedberg (conn->feat_mask & L2CAP_FEAT_EXT_WINDOW)); 31236327eb98SAndrei Emeltchenko } 31246327eb98SAndrei Emeltchenko 3125848566b3SMarcel Holtmann static inline bool __l2cap_efs_supported(struct l2cap_conn *conn) 3126f89cef09SAndrei Emeltchenko { 31270bd49fc7SJohan Hedberg return ((conn->local_fixed_chan & L2CAP_FC_A2MP) && 31280bd49fc7SJohan Hedberg (conn->feat_mask & L2CAP_FEAT_EXT_FLOW)); 3129f89cef09SAndrei Emeltchenko } 3130f89cef09SAndrei Emeltchenko 313136c86c85SMat Martineau static void __l2cap_set_ertm_timeouts(struct l2cap_chan *chan, 313236c86c85SMat Martineau struct l2cap_conf_rfc *rfc) 313336c86c85SMat Martineau { 31346ed971caSMarcel Holtmann if (chan->local_amp_id != AMP_ID_BREDR && chan->hs_hcon) { 313536c86c85SMat Martineau u64 ertm_to = chan->hs_hcon->hdev->amp_be_flush_to; 313636c86c85SMat Martineau 313736c86c85SMat Martineau /* Class 1 devices have must have ERTM timeouts 313836c86c85SMat Martineau * exceeding the Link Supervision Timeout. The 313936c86c85SMat Martineau * default Link Supervision Timeout for AMP 314036c86c85SMat Martineau * controllers is 10 seconds. 314136c86c85SMat Martineau * 314236c86c85SMat Martineau * Class 1 devices use 0xffffffff for their 314336c86c85SMat Martineau * best-effort flush timeout, so the clamping logic 314436c86c85SMat Martineau * will result in a timeout that meets the above 314536c86c85SMat Martineau * requirement. ERTM timeouts are 16-bit values, so 314636c86c85SMat Martineau * the maximum timeout is 65.535 seconds. 314736c86c85SMat Martineau */ 314836c86c85SMat Martineau 314936c86c85SMat Martineau /* Convert timeout to milliseconds and round */ 315036c86c85SMat Martineau ertm_to = DIV_ROUND_UP_ULL(ertm_to, 1000); 315136c86c85SMat Martineau 315236c86c85SMat Martineau /* This is the recommended formula for class 2 devices 315336c86c85SMat Martineau * that start ERTM timers when packets are sent to the 315436c86c85SMat Martineau * controller. 315536c86c85SMat Martineau */ 315636c86c85SMat Martineau ertm_to = 3 * ertm_to + 500; 315736c86c85SMat Martineau 315836c86c85SMat Martineau if (ertm_to > 0xffff) 315936c86c85SMat Martineau ertm_to = 0xffff; 316036c86c85SMat Martineau 316136c86c85SMat Martineau rfc->retrans_timeout = cpu_to_le16((u16) ertm_to); 316236c86c85SMat Martineau rfc->monitor_timeout = rfc->retrans_timeout; 316336c86c85SMat Martineau } else { 3164dcf4adbfSJoe Perches rfc->retrans_timeout = cpu_to_le16(L2CAP_DEFAULT_RETRANS_TO); 3165dcf4adbfSJoe Perches rfc->monitor_timeout = cpu_to_le16(L2CAP_DEFAULT_MONITOR_TO); 316636c86c85SMat Martineau } 316736c86c85SMat Martineau } 316836c86c85SMat Martineau 31696327eb98SAndrei Emeltchenko static inline void l2cap_txwin_setup(struct l2cap_chan *chan) 31706327eb98SAndrei Emeltchenko { 31716327eb98SAndrei Emeltchenko if (chan->tx_win > L2CAP_DEFAULT_TX_WINDOW && 3172848566b3SMarcel Holtmann __l2cap_ews_supported(chan->conn)) { 31736327eb98SAndrei Emeltchenko /* use extended control field */ 31746327eb98SAndrei Emeltchenko set_bit(FLAG_EXT_CTRL, &chan->flags); 3175836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_EXT_WINDOW; 3176836be934SAndrei Emeltchenko } else { 31776327eb98SAndrei Emeltchenko chan->tx_win = min_t(u16, chan->tx_win, 31786327eb98SAndrei Emeltchenko L2CAP_DEFAULT_TX_WINDOW); 3179836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_TX_WINDOW; 3180836be934SAndrei Emeltchenko } 3181c20f8e35SMat Martineau chan->ack_win = chan->tx_win; 31826327eb98SAndrei Emeltchenko } 31836327eb98SAndrei Emeltchenko 3184710f9b0aSGustavo F. Padovan static int l2cap_build_conf_req(struct l2cap_chan *chan, void *data) 31850a708f8fSGustavo F. Padovan { 31860a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = data; 31870c1bc5c6SGustavo F. Padovan struct l2cap_conf_rfc rfc = { .mode = chan->mode }; 31880a708f8fSGustavo F. Padovan void *ptr = req->data; 3189c8f79162SAndrei Emeltchenko u16 size; 31900a708f8fSGustavo F. Padovan 319149208c9cSGustavo F. Padovan BT_DBG("chan %p", chan); 31920a708f8fSGustavo F. Padovan 319373ffa904SGustavo F. Padovan if (chan->num_conf_req || chan->num_conf_rsp) 31940a708f8fSGustavo F. Padovan goto done; 31950a708f8fSGustavo F. Padovan 31960c1bc5c6SGustavo F. Padovan switch (chan->mode) { 31970a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 31980a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 3199c1360a1cSGustavo F. Padovan if (test_bit(CONF_STATE2_DEVICE, &chan->conf_state)) 32000a708f8fSGustavo F. Padovan break; 32010a708f8fSGustavo F. Padovan 3202848566b3SMarcel Holtmann if (__l2cap_efs_supported(chan->conn)) 3203f89cef09SAndrei Emeltchenko set_bit(FLAG_EFS_ENABLE, &chan->flags); 3204f89cef09SAndrei Emeltchenko 32050a708f8fSGustavo F. Padovan /* fall through */ 32060a708f8fSGustavo F. Padovan default: 32078c1d787bSGustavo F. Padovan chan->mode = l2cap_select_mode(rfc.mode, chan->conn->feat_mask); 32080a708f8fSGustavo F. Padovan break; 32090a708f8fSGustavo F. Padovan } 32100a708f8fSGustavo F. Padovan 32110a708f8fSGustavo F. Padovan done: 32120c1bc5c6SGustavo F. Padovan if (chan->imtu != L2CAP_DEFAULT_MTU) 32130c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->imtu); 32140a708f8fSGustavo F. Padovan 32150c1bc5c6SGustavo F. Padovan switch (chan->mode) { 32160a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 32176fea7ad1SMarcel Holtmann if (disable_ertm) 32186fea7ad1SMarcel Holtmann break; 32196fea7ad1SMarcel Holtmann 32208c1d787bSGustavo F. Padovan if (!(chan->conn->feat_mask & L2CAP_FEAT_ERTM) && 32218c1d787bSGustavo F. Padovan !(chan->conn->feat_mask & L2CAP_FEAT_STREAMING)) 32220a708f8fSGustavo F. Padovan break; 32230a708f8fSGustavo F. Padovan 32240a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_BASIC; 32250a708f8fSGustavo F. Padovan rfc.txwin_size = 0; 32260a708f8fSGustavo F. Padovan rfc.max_transmit = 0; 32270a708f8fSGustavo F. Padovan rfc.retrans_timeout = 0; 32280a708f8fSGustavo F. Padovan rfc.monitor_timeout = 0; 32290a708f8fSGustavo F. Padovan rfc.max_pdu_size = 0; 32300a708f8fSGustavo F. Padovan 32310a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 32320a708f8fSGustavo F. Padovan (unsigned long) &rfc); 32330a708f8fSGustavo F. Padovan break; 32340a708f8fSGustavo F. Padovan 32350a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 32360a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_ERTM; 323747d1ec61SGustavo F. Padovan rfc.max_transmit = chan->max_tx; 323836c86c85SMat Martineau 323936c86c85SMat Martineau __l2cap_set_ertm_timeouts(chan, &rfc); 3240c8f79162SAndrei Emeltchenko 3241c8f79162SAndrei Emeltchenko size = min_t(u16, L2CAP_DEFAULT_MAX_PDU_SIZE, chan->conn->mtu - 32422d792818SGustavo Padovan L2CAP_EXT_HDR_SIZE - L2CAP_SDULEN_SIZE - 3243c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 3244c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 32450a708f8fSGustavo F. Padovan 32466327eb98SAndrei Emeltchenko l2cap_txwin_setup(chan); 32476327eb98SAndrei Emeltchenko 32486327eb98SAndrei Emeltchenko rfc.txwin_size = min_t(u16, chan->tx_win, 32496327eb98SAndrei Emeltchenko L2CAP_DEFAULT_TX_WINDOW); 32500a708f8fSGustavo F. Padovan 32510a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 32520a708f8fSGustavo F. Padovan (unsigned long) &rfc); 32530a708f8fSGustavo F. Padovan 3254f89cef09SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) 3255f89cef09SAndrei Emeltchenko l2cap_add_opt_efs(&ptr, chan); 3256f89cef09SAndrei Emeltchenko 32576327eb98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 32586327eb98SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EWS, 2, 32596327eb98SAndrei Emeltchenko chan->tx_win); 326060918918SAndrei Emeltchenko 326160918918SAndrei Emeltchenko if (chan->conn->feat_mask & L2CAP_FEAT_FCS) 326260918918SAndrei Emeltchenko if (chan->fcs == L2CAP_FCS_NONE || 3263f2592d3eSAndrei Emeltchenko test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) { 326460918918SAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 326560918918SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_FCS, 1, 326660918918SAndrei Emeltchenko chan->fcs); 326760918918SAndrei Emeltchenko } 32680a708f8fSGustavo F. Padovan break; 32690a708f8fSGustavo F. Padovan 32700a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 3271273759e2SMat Martineau l2cap_txwin_setup(chan); 32720a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_STREAMING; 32730a708f8fSGustavo F. Padovan rfc.txwin_size = 0; 32740a708f8fSGustavo F. Padovan rfc.max_transmit = 0; 32750a708f8fSGustavo F. Padovan rfc.retrans_timeout = 0; 32760a708f8fSGustavo F. Padovan rfc.monitor_timeout = 0; 3277c8f79162SAndrei Emeltchenko 3278c8f79162SAndrei Emeltchenko size = min_t(u16, L2CAP_DEFAULT_MAX_PDU_SIZE, chan->conn->mtu - 32792d792818SGustavo Padovan L2CAP_EXT_HDR_SIZE - L2CAP_SDULEN_SIZE - 3280c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 3281c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 32820a708f8fSGustavo F. Padovan 32830a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 32840a708f8fSGustavo F. Padovan (unsigned long) &rfc); 32850a708f8fSGustavo F. Padovan 3286f89cef09SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) 3287f89cef09SAndrei Emeltchenko l2cap_add_opt_efs(&ptr, chan); 3288f89cef09SAndrei Emeltchenko 328960918918SAndrei Emeltchenko if (chan->conn->feat_mask & L2CAP_FEAT_FCS) 329047d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_NONE || 3291f2592d3eSAndrei Emeltchenko test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) { 329247d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 329360918918SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_FCS, 1, 329460918918SAndrei Emeltchenko chan->fcs); 32950a708f8fSGustavo F. Padovan } 32960a708f8fSGustavo F. Padovan break; 32970a708f8fSGustavo F. Padovan } 32980a708f8fSGustavo F. Padovan 3299fe4128e0SGustavo F. Padovan req->dcid = cpu_to_le16(chan->dcid); 3300dcf4adbfSJoe Perches req->flags = cpu_to_le16(0); 33010a708f8fSGustavo F. Padovan 33020a708f8fSGustavo F. Padovan return ptr - data; 33030a708f8fSGustavo F. Padovan } 33040a708f8fSGustavo F. Padovan 330573ffa904SGustavo F. Padovan static int l2cap_parse_conf_req(struct l2cap_chan *chan, void *data) 33060a708f8fSGustavo F. Padovan { 33070a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = data; 33080a708f8fSGustavo F. Padovan void *ptr = rsp->data; 330973ffa904SGustavo F. Padovan void *req = chan->conf_req; 331073ffa904SGustavo F. Padovan int len = chan->conf_len; 33110a708f8fSGustavo F. Padovan int type, hint, olen; 33120a708f8fSGustavo F. Padovan unsigned long val; 33130a708f8fSGustavo F. Padovan struct l2cap_conf_rfc rfc = { .mode = L2CAP_MODE_BASIC }; 331442dceae2SAndrei Emeltchenko struct l2cap_conf_efs efs; 331542dceae2SAndrei Emeltchenko u8 remote_efs = 0; 33160a708f8fSGustavo F. Padovan u16 mtu = L2CAP_DEFAULT_MTU; 33170a708f8fSGustavo F. Padovan u16 result = L2CAP_CONF_SUCCESS; 3318c8f79162SAndrei Emeltchenko u16 size; 33190a708f8fSGustavo F. Padovan 332073ffa904SGustavo F. Padovan BT_DBG("chan %p", chan); 33210a708f8fSGustavo F. Padovan 33220a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 33230a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&req, &type, &olen, &val); 33240a708f8fSGustavo F. Padovan 33250a708f8fSGustavo F. Padovan hint = type & L2CAP_CONF_HINT; 33260a708f8fSGustavo F. Padovan type &= L2CAP_CONF_MASK; 33270a708f8fSGustavo F. Padovan 33280a708f8fSGustavo F. Padovan switch (type) { 33290a708f8fSGustavo F. Padovan case L2CAP_CONF_MTU: 33300a708f8fSGustavo F. Padovan mtu = val; 33310a708f8fSGustavo F. Padovan break; 33320a708f8fSGustavo F. Padovan 33330a708f8fSGustavo F. Padovan case L2CAP_CONF_FLUSH_TO: 33340c1bc5c6SGustavo F. Padovan chan->flush_to = val; 33350a708f8fSGustavo F. Padovan break; 33360a708f8fSGustavo F. Padovan 33370a708f8fSGustavo F. Padovan case L2CAP_CONF_QOS: 33380a708f8fSGustavo F. Padovan break; 33390a708f8fSGustavo F. Padovan 33400a708f8fSGustavo F. Padovan case L2CAP_CONF_RFC: 33410a708f8fSGustavo F. Padovan if (olen == sizeof(rfc)) 33420a708f8fSGustavo F. Padovan memcpy(&rfc, (void *) val, olen); 33430a708f8fSGustavo F. Padovan break; 33440a708f8fSGustavo F. Padovan 33450a708f8fSGustavo F. Padovan case L2CAP_CONF_FCS: 33460a708f8fSGustavo F. Padovan if (val == L2CAP_FCS_NONE) 3347f2592d3eSAndrei Emeltchenko set_bit(CONF_RECV_NO_FCS, &chan->conf_state); 334842dceae2SAndrei Emeltchenko break; 33490a708f8fSGustavo F. Padovan 335042dceae2SAndrei Emeltchenko case L2CAP_CONF_EFS: 335142dceae2SAndrei Emeltchenko remote_efs = 1; 335242dceae2SAndrei Emeltchenko if (olen == sizeof(efs)) 335342dceae2SAndrei Emeltchenko memcpy(&efs, (void *) val, olen); 33540a708f8fSGustavo F. Padovan break; 33550a708f8fSGustavo F. Padovan 33566327eb98SAndrei Emeltchenko case L2CAP_CONF_EWS: 33570bd49fc7SJohan Hedberg if (!(chan->conn->local_fixed_chan & L2CAP_FC_A2MP)) 33586327eb98SAndrei Emeltchenko return -ECONNREFUSED; 33596327eb98SAndrei Emeltchenko 33606327eb98SAndrei Emeltchenko set_bit(FLAG_EXT_CTRL, &chan->flags); 33616327eb98SAndrei Emeltchenko set_bit(CONF_EWS_RECV, &chan->conf_state); 3362836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_EXT_WINDOW; 33636327eb98SAndrei Emeltchenko chan->remote_tx_win = val; 33640a708f8fSGustavo F. Padovan break; 33650a708f8fSGustavo F. Padovan 33660a708f8fSGustavo F. Padovan default: 33670a708f8fSGustavo F. Padovan if (hint) 33680a708f8fSGustavo F. Padovan break; 33690a708f8fSGustavo F. Padovan 33700a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNKNOWN; 33710a708f8fSGustavo F. Padovan *((u8 *) ptr++) = type; 33720a708f8fSGustavo F. Padovan break; 33730a708f8fSGustavo F. Padovan } 33740a708f8fSGustavo F. Padovan } 33750a708f8fSGustavo F. Padovan 337673ffa904SGustavo F. Padovan if (chan->num_conf_rsp || chan->num_conf_req > 1) 33770a708f8fSGustavo F. Padovan goto done; 33780a708f8fSGustavo F. Padovan 33790c1bc5c6SGustavo F. Padovan switch (chan->mode) { 33800a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 33810a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 3382c1360a1cSGustavo F. Padovan if (!test_bit(CONF_STATE2_DEVICE, &chan->conf_state)) { 33830c1bc5c6SGustavo F. Padovan chan->mode = l2cap_select_mode(rfc.mode, 33848c1d787bSGustavo F. Padovan chan->conn->feat_mask); 33850a708f8fSGustavo F. Padovan break; 33860a708f8fSGustavo F. Padovan } 33870a708f8fSGustavo F. Padovan 338842dceae2SAndrei Emeltchenko if (remote_efs) { 3389848566b3SMarcel Holtmann if (__l2cap_efs_supported(chan->conn)) 339042dceae2SAndrei Emeltchenko set_bit(FLAG_EFS_ENABLE, &chan->flags); 339142dceae2SAndrei Emeltchenko else 339242dceae2SAndrei Emeltchenko return -ECONNREFUSED; 339342dceae2SAndrei Emeltchenko } 339442dceae2SAndrei Emeltchenko 33950c1bc5c6SGustavo F. Padovan if (chan->mode != rfc.mode) 33960a708f8fSGustavo F. Padovan return -ECONNREFUSED; 33970a708f8fSGustavo F. Padovan 33980a708f8fSGustavo F. Padovan break; 33990a708f8fSGustavo F. Padovan } 34000a708f8fSGustavo F. Padovan 34010a708f8fSGustavo F. Padovan done: 34020c1bc5c6SGustavo F. Padovan if (chan->mode != rfc.mode) { 34030a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 34040c1bc5c6SGustavo F. Padovan rfc.mode = chan->mode; 34050a708f8fSGustavo F. Padovan 340673ffa904SGustavo F. Padovan if (chan->num_conf_rsp == 1) 34070a708f8fSGustavo F. Padovan return -ECONNREFUSED; 34080a708f8fSGustavo F. Padovan 34092d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 34102d792818SGustavo Padovan (unsigned long) &rfc); 34110a708f8fSGustavo F. Padovan } 34120a708f8fSGustavo F. Padovan 34130a708f8fSGustavo F. Padovan if (result == L2CAP_CONF_SUCCESS) { 34140a708f8fSGustavo F. Padovan /* Configure output options and let the other side know 34150a708f8fSGustavo F. Padovan * which ones we don't like. */ 34160a708f8fSGustavo F. Padovan 34170a708f8fSGustavo F. Padovan if (mtu < L2CAP_DEFAULT_MIN_MTU) 34180a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 34190a708f8fSGustavo F. Padovan else { 34200c1bc5c6SGustavo F. Padovan chan->omtu = mtu; 3421c1360a1cSGustavo F. Padovan set_bit(CONF_MTU_DONE, &chan->conf_state); 34220a708f8fSGustavo F. Padovan } 34230c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->omtu); 34240a708f8fSGustavo F. Padovan 342542dceae2SAndrei Emeltchenko if (remote_efs) { 342642dceae2SAndrei Emeltchenko if (chan->local_stype != L2CAP_SERV_NOTRAFIC && 342742dceae2SAndrei Emeltchenko efs.stype != L2CAP_SERV_NOTRAFIC && 342842dceae2SAndrei Emeltchenko efs.stype != chan->local_stype) { 342942dceae2SAndrei Emeltchenko 343042dceae2SAndrei Emeltchenko result = L2CAP_CONF_UNACCEPT; 343142dceae2SAndrei Emeltchenko 343242dceae2SAndrei Emeltchenko if (chan->num_conf_req >= 1) 343342dceae2SAndrei Emeltchenko return -ECONNREFUSED; 343442dceae2SAndrei Emeltchenko 343542dceae2SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, 343642dceae2SAndrei Emeltchenko sizeof(efs), 343742dceae2SAndrei Emeltchenko (unsigned long) &efs); 34380e8b207eSAndrei Emeltchenko } else { 34393e6b3b95SGustavo F. Padovan /* Send PENDING Conf Rsp */ 34400e8b207eSAndrei Emeltchenko result = L2CAP_CONF_PENDING; 34410e8b207eSAndrei Emeltchenko set_bit(CONF_LOC_CONF_PEND, &chan->conf_state); 344242dceae2SAndrei Emeltchenko } 344342dceae2SAndrei Emeltchenko } 344442dceae2SAndrei Emeltchenko 34450a708f8fSGustavo F. Padovan switch (rfc.mode) { 34460a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 344747d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 3448c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 34490a708f8fSGustavo F. Padovan break; 34500a708f8fSGustavo F. Padovan 34510a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 34526327eb98SAndrei Emeltchenko if (!test_bit(CONF_EWS_RECV, &chan->conf_state)) 34532c03a7a4SGustavo F. Padovan chan->remote_tx_win = rfc.txwin_size; 34546327eb98SAndrei Emeltchenko else 34556327eb98SAndrei Emeltchenko rfc.txwin_size = L2CAP_DEFAULT_TX_WINDOW; 34566327eb98SAndrei Emeltchenko 34572c03a7a4SGustavo F. Padovan chan->remote_max_tx = rfc.max_transmit; 34580a708f8fSGustavo F. Padovan 3459c8f79162SAndrei Emeltchenko size = min_t(u16, le16_to_cpu(rfc.max_pdu_size), 34602d792818SGustavo Padovan chan->conn->mtu - L2CAP_EXT_HDR_SIZE - 34612d792818SGustavo Padovan L2CAP_SDULEN_SIZE - L2CAP_FCS_SIZE); 3462c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 3463c8f79162SAndrei Emeltchenko chan->remote_mps = size; 34640a708f8fSGustavo F. Padovan 346536c86c85SMat Martineau __l2cap_set_ertm_timeouts(chan, &rfc); 34660a708f8fSGustavo F. Padovan 3467c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 34680a708f8fSGustavo F. Padovan 34690a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 34700a708f8fSGustavo F. Padovan sizeof(rfc), (unsigned long) &rfc); 34710a708f8fSGustavo F. Padovan 347242dceae2SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) { 347342dceae2SAndrei Emeltchenko chan->remote_id = efs.id; 347442dceae2SAndrei Emeltchenko chan->remote_stype = efs.stype; 347542dceae2SAndrei Emeltchenko chan->remote_msdu = le16_to_cpu(efs.msdu); 347642dceae2SAndrei Emeltchenko chan->remote_flush_to = 347742dceae2SAndrei Emeltchenko le32_to_cpu(efs.flush_to); 347842dceae2SAndrei Emeltchenko chan->remote_acc_lat = 347942dceae2SAndrei Emeltchenko le32_to_cpu(efs.acc_lat); 348042dceae2SAndrei Emeltchenko chan->remote_sdu_itime = 348142dceae2SAndrei Emeltchenko le32_to_cpu(efs.sdu_itime); 348242dceae2SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, 34832d792818SGustavo Padovan sizeof(efs), 34842d792818SGustavo Padovan (unsigned long) &efs); 348542dceae2SAndrei Emeltchenko } 34860a708f8fSGustavo F. Padovan break; 34870a708f8fSGustavo F. Padovan 34880a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 3489c8f79162SAndrei Emeltchenko size = min_t(u16, le16_to_cpu(rfc.max_pdu_size), 34902d792818SGustavo Padovan chan->conn->mtu - L2CAP_EXT_HDR_SIZE - 34912d792818SGustavo Padovan L2CAP_SDULEN_SIZE - L2CAP_FCS_SIZE); 3492c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 3493c8f79162SAndrei Emeltchenko chan->remote_mps = size; 34940a708f8fSGustavo F. Padovan 3495c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 34960a708f8fSGustavo F. Padovan 34972d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 34982d792818SGustavo Padovan (unsigned long) &rfc); 34990a708f8fSGustavo F. Padovan 35000a708f8fSGustavo F. Padovan break; 35010a708f8fSGustavo F. Padovan 35020a708f8fSGustavo F. Padovan default: 35030a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 35040a708f8fSGustavo F. Padovan 35050a708f8fSGustavo F. Padovan memset(&rfc, 0, sizeof(rfc)); 35060c1bc5c6SGustavo F. Padovan rfc.mode = chan->mode; 35070a708f8fSGustavo F. Padovan } 35080a708f8fSGustavo F. Padovan 35090a708f8fSGustavo F. Padovan if (result == L2CAP_CONF_SUCCESS) 3510c1360a1cSGustavo F. Padovan set_bit(CONF_OUTPUT_DONE, &chan->conf_state); 35110a708f8fSGustavo F. Padovan } 3512fe4128e0SGustavo F. Padovan rsp->scid = cpu_to_le16(chan->dcid); 35130a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(result); 3514dcf4adbfSJoe Perches rsp->flags = cpu_to_le16(0); 35150a708f8fSGustavo F. Padovan 35160a708f8fSGustavo F. Padovan return ptr - data; 35170a708f8fSGustavo F. Padovan } 35180a708f8fSGustavo F. Padovan 35192d792818SGustavo Padovan static int l2cap_parse_conf_rsp(struct l2cap_chan *chan, void *rsp, int len, 35202d792818SGustavo Padovan void *data, u16 *result) 35210a708f8fSGustavo F. Padovan { 35220a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = data; 35230a708f8fSGustavo F. Padovan void *ptr = req->data; 35240a708f8fSGustavo F. Padovan int type, olen; 35250a708f8fSGustavo F. Padovan unsigned long val; 352636e999a8SMat Martineau struct l2cap_conf_rfc rfc = { .mode = L2CAP_MODE_BASIC }; 352766af7aafSAndrei Emeltchenko struct l2cap_conf_efs efs; 35280a708f8fSGustavo F. Padovan 3529fe4128e0SGustavo F. Padovan BT_DBG("chan %p, rsp %p, len %d, req %p", chan, rsp, len, data); 35300a708f8fSGustavo F. Padovan 35310a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 35320a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&rsp, &type, &olen, &val); 35330a708f8fSGustavo F. Padovan 35340a708f8fSGustavo F. Padovan switch (type) { 35350a708f8fSGustavo F. Padovan case L2CAP_CONF_MTU: 35360a708f8fSGustavo F. Padovan if (val < L2CAP_DEFAULT_MIN_MTU) { 35370a708f8fSGustavo F. Padovan *result = L2CAP_CONF_UNACCEPT; 35380c1bc5c6SGustavo F. Padovan chan->imtu = L2CAP_DEFAULT_MIN_MTU; 35390a708f8fSGustavo F. Padovan } else 35400c1bc5c6SGustavo F. Padovan chan->imtu = val; 35410c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->imtu); 35420a708f8fSGustavo F. Padovan break; 35430a708f8fSGustavo F. Padovan 35440a708f8fSGustavo F. Padovan case L2CAP_CONF_FLUSH_TO: 35450c1bc5c6SGustavo F. Padovan chan->flush_to = val; 35460a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_FLUSH_TO, 35470c1bc5c6SGustavo F. Padovan 2, chan->flush_to); 35480a708f8fSGustavo F. Padovan break; 35490a708f8fSGustavo F. Padovan 35500a708f8fSGustavo F. Padovan case L2CAP_CONF_RFC: 35510a708f8fSGustavo F. Padovan if (olen == sizeof(rfc)) 35520a708f8fSGustavo F. Padovan memcpy(&rfc, (void *)val, olen); 35530a708f8fSGustavo F. Padovan 3554c1360a1cSGustavo F. Padovan if (test_bit(CONF_STATE2_DEVICE, &chan->conf_state) && 35550c1bc5c6SGustavo F. Padovan rfc.mode != chan->mode) 35560a708f8fSGustavo F. Padovan return -ECONNREFUSED; 35570a708f8fSGustavo F. Padovan 355847d1ec61SGustavo F. Padovan chan->fcs = 0; 35590a708f8fSGustavo F. Padovan 35600a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 35610a708f8fSGustavo F. Padovan sizeof(rfc), (unsigned long) &rfc); 35620a708f8fSGustavo F. Padovan break; 35636327eb98SAndrei Emeltchenko 35646327eb98SAndrei Emeltchenko case L2CAP_CONF_EWS: 3565c20f8e35SMat Martineau chan->ack_win = min_t(u16, val, chan->ack_win); 35663e6b3b95SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_EWS, 2, 35673e6b3b95SGustavo F. Padovan chan->tx_win); 35686327eb98SAndrei Emeltchenko break; 356966af7aafSAndrei Emeltchenko 357066af7aafSAndrei Emeltchenko case L2CAP_CONF_EFS: 357166af7aafSAndrei Emeltchenko if (olen == sizeof(efs)) 357266af7aafSAndrei Emeltchenko memcpy(&efs, (void *)val, olen); 357366af7aafSAndrei Emeltchenko 357466af7aafSAndrei Emeltchenko if (chan->local_stype != L2CAP_SERV_NOTRAFIC && 357566af7aafSAndrei Emeltchenko efs.stype != L2CAP_SERV_NOTRAFIC && 357666af7aafSAndrei Emeltchenko efs.stype != chan->local_stype) 357766af7aafSAndrei Emeltchenko return -ECONNREFUSED; 357866af7aafSAndrei Emeltchenko 35792d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, sizeof(efs), 35802d792818SGustavo Padovan (unsigned long) &efs); 358166af7aafSAndrei Emeltchenko break; 3582cbabee78SAndrei Emeltchenko 3583cbabee78SAndrei Emeltchenko case L2CAP_CONF_FCS: 3584cbabee78SAndrei Emeltchenko if (*result == L2CAP_CONF_PENDING) 3585cbabee78SAndrei Emeltchenko if (val == L2CAP_FCS_NONE) 3586f2592d3eSAndrei Emeltchenko set_bit(CONF_RECV_NO_FCS, 3587cbabee78SAndrei Emeltchenko &chan->conf_state); 3588cbabee78SAndrei Emeltchenko break; 35890a708f8fSGustavo F. Padovan } 35900a708f8fSGustavo F. Padovan } 35910a708f8fSGustavo F. Padovan 35920c1bc5c6SGustavo F. Padovan if (chan->mode == L2CAP_MODE_BASIC && chan->mode != rfc.mode) 35930a708f8fSGustavo F. Padovan return -ECONNREFUSED; 35940a708f8fSGustavo F. Padovan 35950c1bc5c6SGustavo F. Padovan chan->mode = rfc.mode; 35960a708f8fSGustavo F. Padovan 35970e8b207eSAndrei Emeltchenko if (*result == L2CAP_CONF_SUCCESS || *result == L2CAP_CONF_PENDING) { 35980a708f8fSGustavo F. Padovan switch (rfc.mode) { 35990a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 360047d1ec61SGustavo F. Padovan chan->retrans_timeout = le16_to_cpu(rfc.retrans_timeout); 360147d1ec61SGustavo F. Padovan chan->monitor_timeout = le16_to_cpu(rfc.monitor_timeout); 360247d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 3603c20f8e35SMat Martineau if (!test_bit(FLAG_EXT_CTRL, &chan->flags)) 3604c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, 3605c20f8e35SMat Martineau rfc.txwin_size); 360666af7aafSAndrei Emeltchenko 360766af7aafSAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) { 360866af7aafSAndrei Emeltchenko chan->local_msdu = le16_to_cpu(efs.msdu); 360966af7aafSAndrei Emeltchenko chan->local_sdu_itime = 361066af7aafSAndrei Emeltchenko le32_to_cpu(efs.sdu_itime); 361166af7aafSAndrei Emeltchenko chan->local_acc_lat = le32_to_cpu(efs.acc_lat); 361266af7aafSAndrei Emeltchenko chan->local_flush_to = 361366af7aafSAndrei Emeltchenko le32_to_cpu(efs.flush_to); 361466af7aafSAndrei Emeltchenko } 36150a708f8fSGustavo F. Padovan break; 361666af7aafSAndrei Emeltchenko 36170a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 361847d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 36190a708f8fSGustavo F. Padovan } 36200a708f8fSGustavo F. Padovan } 36210a708f8fSGustavo F. Padovan 3622fe4128e0SGustavo F. Padovan req->dcid = cpu_to_le16(chan->dcid); 3623dcf4adbfSJoe Perches req->flags = cpu_to_le16(0); 36240a708f8fSGustavo F. Padovan 36250a708f8fSGustavo F. Padovan return ptr - data; 36260a708f8fSGustavo F. Padovan } 36270a708f8fSGustavo F. Padovan 36282d792818SGustavo Padovan static int l2cap_build_conf_rsp(struct l2cap_chan *chan, void *data, 36292d792818SGustavo Padovan u16 result, u16 flags) 36300a708f8fSGustavo F. Padovan { 36310a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = data; 36320a708f8fSGustavo F. Padovan void *ptr = rsp->data; 36330a708f8fSGustavo F. Padovan 3634fe4128e0SGustavo F. Padovan BT_DBG("chan %p", chan); 36350a708f8fSGustavo F. Padovan 3636fe4128e0SGustavo F. Padovan rsp->scid = cpu_to_le16(chan->dcid); 36370a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(result); 36380a708f8fSGustavo F. Padovan rsp->flags = cpu_to_le16(flags); 36390a708f8fSGustavo F. Padovan 36400a708f8fSGustavo F. Padovan return ptr - data; 36410a708f8fSGustavo F. Padovan } 36420a708f8fSGustavo F. Padovan 364327e2d4c8SJohan Hedberg void __l2cap_le_connect_rsp_defer(struct l2cap_chan *chan) 364427e2d4c8SJohan Hedberg { 364527e2d4c8SJohan Hedberg struct l2cap_le_conn_rsp rsp; 364627e2d4c8SJohan Hedberg struct l2cap_conn *conn = chan->conn; 364727e2d4c8SJohan Hedberg 364827e2d4c8SJohan Hedberg BT_DBG("chan %p", chan); 364927e2d4c8SJohan Hedberg 365027e2d4c8SJohan Hedberg rsp.dcid = cpu_to_le16(chan->scid); 365127e2d4c8SJohan Hedberg rsp.mtu = cpu_to_le16(chan->imtu); 36523916aed8SJohan Hedberg rsp.mps = cpu_to_le16(chan->mps); 36530cd75f7eSJohan Hedberg rsp.credits = cpu_to_le16(chan->rx_credits); 3654dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 365527e2d4c8SJohan Hedberg 365627e2d4c8SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CONN_RSP, sizeof(rsp), 365727e2d4c8SJohan Hedberg &rsp); 365827e2d4c8SJohan Hedberg } 365927e2d4c8SJohan Hedberg 36608c1d787bSGustavo F. Padovan void __l2cap_connect_rsp_defer(struct l2cap_chan *chan) 3661710f9b0aSGustavo F. Padovan { 3662710f9b0aSGustavo F. Padovan struct l2cap_conn_rsp rsp; 36638c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 3664710f9b0aSGustavo F. Padovan u8 buf[128]; 3665439f34acSAndrei Emeltchenko u8 rsp_code; 3666710f9b0aSGustavo F. Padovan 3667fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 3668fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 3669dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 3670dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 3671439f34acSAndrei Emeltchenko 3672439f34acSAndrei Emeltchenko if (chan->hs_hcon) 3673439f34acSAndrei Emeltchenko rsp_code = L2CAP_CREATE_CHAN_RSP; 3674439f34acSAndrei Emeltchenko else 3675439f34acSAndrei Emeltchenko rsp_code = L2CAP_CONN_RSP; 3676439f34acSAndrei Emeltchenko 3677439f34acSAndrei Emeltchenko BT_DBG("chan %p rsp_code %u", chan, rsp_code); 3678439f34acSAndrei Emeltchenko 3679439f34acSAndrei Emeltchenko l2cap_send_cmd(conn, chan->ident, rsp_code, sizeof(rsp), &rsp); 3680710f9b0aSGustavo F. Padovan 3681c1360a1cSGustavo F. Padovan if (test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) 3682710f9b0aSGustavo F. Padovan return; 3683710f9b0aSGustavo F. Padovan 3684710f9b0aSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 3685710f9b0aSGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 3686710f9b0aSGustavo F. Padovan chan->num_conf_req++; 3687710f9b0aSGustavo F. Padovan } 3688710f9b0aSGustavo F. Padovan 368947d1ec61SGustavo F. Padovan static void l2cap_conf_rfc_get(struct l2cap_chan *chan, void *rsp, int len) 36900a708f8fSGustavo F. Padovan { 36910a708f8fSGustavo F. Padovan int type, olen; 36920a708f8fSGustavo F. Padovan unsigned long val; 3693c20f8e35SMat Martineau /* Use sane default values in case a misbehaving remote device 3694c20f8e35SMat Martineau * did not send an RFC or extended window size option. 3695c20f8e35SMat Martineau */ 3696c20f8e35SMat Martineau u16 txwin_ext = chan->ack_win; 3697c20f8e35SMat Martineau struct l2cap_conf_rfc rfc = { 3698c20f8e35SMat Martineau .mode = chan->mode, 3699dcf4adbfSJoe Perches .retrans_timeout = cpu_to_le16(L2CAP_DEFAULT_RETRANS_TO), 3700dcf4adbfSJoe Perches .monitor_timeout = cpu_to_le16(L2CAP_DEFAULT_MONITOR_TO), 3701c20f8e35SMat Martineau .max_pdu_size = cpu_to_le16(chan->imtu), 3702c20f8e35SMat Martineau .txwin_size = min_t(u16, chan->ack_win, L2CAP_DEFAULT_TX_WINDOW), 3703c20f8e35SMat Martineau }; 37040a708f8fSGustavo F. Padovan 370547d1ec61SGustavo F. Padovan BT_DBG("chan %p, rsp %p, len %d", chan, rsp, len); 37060a708f8fSGustavo F. Padovan 37070c1bc5c6SGustavo F. Padovan if ((chan->mode != L2CAP_MODE_ERTM) && (chan->mode != L2CAP_MODE_STREAMING)) 37080a708f8fSGustavo F. Padovan return; 37090a708f8fSGustavo F. Padovan 37100a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 37110a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&rsp, &type, &olen, &val); 37120a708f8fSGustavo F. Padovan 3713c20f8e35SMat Martineau switch (type) { 3714c20f8e35SMat Martineau case L2CAP_CONF_RFC: 3715c20f8e35SMat Martineau if (olen == sizeof(rfc)) 37160a708f8fSGustavo F. Padovan memcpy(&rfc, (void *)val, olen); 3717c20f8e35SMat Martineau break; 3718c20f8e35SMat Martineau case L2CAP_CONF_EWS: 3719c20f8e35SMat Martineau txwin_ext = val; 3720c20f8e35SMat Martineau break; 3721c20f8e35SMat Martineau } 37220a708f8fSGustavo F. Padovan } 37230a708f8fSGustavo F. Padovan 37240a708f8fSGustavo F. Padovan switch (rfc.mode) { 37250a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 372647d1ec61SGustavo F. Padovan chan->retrans_timeout = le16_to_cpu(rfc.retrans_timeout); 372747d1ec61SGustavo F. Padovan chan->monitor_timeout = le16_to_cpu(rfc.monitor_timeout); 372847d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 3729c20f8e35SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 3730c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, txwin_ext); 3731c20f8e35SMat Martineau else 3732c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, 3733c20f8e35SMat Martineau rfc.txwin_size); 37340a708f8fSGustavo F. Padovan break; 37350a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 373647d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 37370a708f8fSGustavo F. Padovan } 37380a708f8fSGustavo F. Padovan } 37390a708f8fSGustavo F. Padovan 37402d792818SGustavo Padovan static inline int l2cap_command_rej(struct l2cap_conn *conn, 3741cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 3742cb3b3152SJohan Hedberg u8 *data) 37430a708f8fSGustavo F. Padovan { 3744e2fd318eSIlia Kolomisnky struct l2cap_cmd_rej_unk *rej = (struct l2cap_cmd_rej_unk *) data; 37450a708f8fSGustavo F. Padovan 3746cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rej)) 3747cb3b3152SJohan Hedberg return -EPROTO; 3748cb3b3152SJohan Hedberg 3749e2fd318eSIlia Kolomisnky if (rej->reason != L2CAP_REJ_NOT_UNDERSTOOD) 37500a708f8fSGustavo F. Padovan return 0; 37510a708f8fSGustavo F. Padovan 37520a708f8fSGustavo F. Padovan if ((conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) && 37530a708f8fSGustavo F. Padovan cmd->ident == conn->info_ident) { 375417cd3f37SUlisses Furquim cancel_delayed_work(&conn->info_timer); 37550a708f8fSGustavo F. Padovan 37560a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 37570a708f8fSGustavo F. Padovan conn->info_ident = 0; 37580a708f8fSGustavo F. Padovan 37590a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 37600a708f8fSGustavo F. Padovan } 37610a708f8fSGustavo F. Padovan 37620a708f8fSGustavo F. Padovan return 0; 37630a708f8fSGustavo F. Padovan } 37640a708f8fSGustavo F. Padovan 37651700915fSMat Martineau static struct l2cap_chan *l2cap_connect(struct l2cap_conn *conn, 37661700915fSMat Martineau struct l2cap_cmd_hdr *cmd, 37674c89b6aaSMat Martineau u8 *data, u8 rsp_code, u8 amp_id) 37680a708f8fSGustavo F. Padovan { 37690a708f8fSGustavo F. Padovan struct l2cap_conn_req *req = (struct l2cap_conn_req *) data; 37700a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 377123691d75SGustavo F. Padovan struct l2cap_chan *chan = NULL, *pchan; 37720a708f8fSGustavo F. Padovan int result, status = L2CAP_CS_NO_INFO; 37730a708f8fSGustavo F. Padovan 37740a708f8fSGustavo F. Padovan u16 dcid = 0, scid = __le16_to_cpu(req->scid); 37750a708f8fSGustavo F. Padovan __le16 psm = req->psm; 37760a708f8fSGustavo F. Padovan 3777097db76cSAndrei Emeltchenko BT_DBG("psm 0x%2.2x scid 0x%4.4x", __le16_to_cpu(psm), scid); 37780a708f8fSGustavo F. Padovan 37790a708f8fSGustavo F. Padovan /* Check if we have socket listening on psm */ 37806f59b904SMarcel Holtmann pchan = l2cap_global_chan_by_psm(BT_LISTEN, psm, &conn->hcon->src, 3781bf20fd4eSJohan Hedberg &conn->hcon->dst, ACL_LINK); 378223691d75SGustavo F. Padovan if (!pchan) { 37830a708f8fSGustavo F. Padovan result = L2CAP_CR_BAD_PSM; 37840a708f8fSGustavo F. Padovan goto sendresp; 37850a708f8fSGustavo F. Padovan } 37860a708f8fSGustavo F. Padovan 37873df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 37888ffb9290SGustavo Padovan l2cap_chan_lock(pchan); 37890a708f8fSGustavo F. Padovan 37900a708f8fSGustavo F. Padovan /* Check if the ACL is secure enough (if not SDP) */ 3791dcf4adbfSJoe Perches if (psm != cpu_to_le16(L2CAP_PSM_SDP) && 37920a708f8fSGustavo F. Padovan !hci_conn_check_link_mode(conn->hcon)) { 37939f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_AUTH_FAILURE; 37940a708f8fSGustavo F. Padovan result = L2CAP_CR_SEC_BLOCK; 37950a708f8fSGustavo F. Padovan goto response; 37960a708f8fSGustavo F. Padovan } 37970a708f8fSGustavo F. Padovan 37980a708f8fSGustavo F. Padovan result = L2CAP_CR_NO_MEM; 37990a708f8fSGustavo F. Padovan 38002dfa1003SGustavo Padovan /* Check if we already have channel with that dcid */ 38012dfa1003SGustavo Padovan if (__l2cap_get_chan_by_dcid(conn, scid)) 38022dfa1003SGustavo Padovan goto response; 38032dfa1003SGustavo Padovan 380480b98027SGustavo Padovan chan = pchan->ops->new_connection(pchan); 380580808e43SGustavo F. Padovan if (!chan) 38060a708f8fSGustavo F. Padovan goto response; 38070a708f8fSGustavo F. Padovan 3808330b6c15SSyam Sidhardhan /* For certain devices (ex: HID mouse), support for authentication, 3809330b6c15SSyam Sidhardhan * pairing and bonding is optional. For such devices, inorder to avoid 3810330b6c15SSyam Sidhardhan * the ACL alive for too long after L2CAP disconnection, reset the ACL 3811330b6c15SSyam Sidhardhan * disc_timeout back to HCI_DISCONN_TIMEOUT during L2CAP connect. 3812330b6c15SSyam Sidhardhan */ 3813330b6c15SSyam Sidhardhan conn->hcon->disc_timeout = HCI_DISCONN_TIMEOUT; 3814330b6c15SSyam Sidhardhan 38157eafc59eSMarcel Holtmann bacpy(&chan->src, &conn->hcon->src); 38167eafc59eSMarcel Holtmann bacpy(&chan->dst, &conn->hcon->dst); 3817a250e048SJohan Hedberg chan->src_type = bdaddr_src_type(conn->hcon); 3818a250e048SJohan Hedberg chan->dst_type = bdaddr_dst_type(conn->hcon); 3819fe4128e0SGustavo F. Padovan chan->psm = psm; 3820fe4128e0SGustavo F. Padovan chan->dcid = scid; 38211700915fSMat Martineau chan->local_amp_id = amp_id; 38220a708f8fSGustavo F. Padovan 38236be36555SAndrei Emeltchenko __l2cap_chan_add(conn, chan); 382448454079SGustavo F. Padovan 3825fe4128e0SGustavo F. Padovan dcid = chan->scid; 38260a708f8fSGustavo F. Padovan 38278d836d71SGustavo Padovan __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 38280a708f8fSGustavo F. Padovan 3829fc7f8a7eSGustavo F. Padovan chan->ident = cmd->ident; 38300a708f8fSGustavo F. Padovan 38310a708f8fSGustavo F. Padovan if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) { 3832e7cafc45SJohan Hedberg if (l2cap_chan_check_security(chan, false)) { 3833bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 3834f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38350a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 38360a708f8fSGustavo F. Padovan status = L2CAP_CS_AUTHOR_PEND; 38372dc4e510SGustavo Padovan chan->ops->defer(chan); 38380a708f8fSGustavo F. Padovan } else { 38391700915fSMat Martineau /* Force pending result for AMP controllers. 38401700915fSMat Martineau * The connection will succeed after the 38411700915fSMat Martineau * physical link is up. 38421700915fSMat Martineau */ 38436ed971caSMarcel Holtmann if (amp_id == AMP_ID_BREDR) { 3844f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 38450a708f8fSGustavo F. Padovan result = L2CAP_CR_SUCCESS; 38466ed971caSMarcel Holtmann } else { 3847f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38486ed971caSMarcel Holtmann result = L2CAP_CR_PEND; 38491700915fSMat Martineau } 38500a708f8fSGustavo F. Padovan status = L2CAP_CS_NO_INFO; 38510a708f8fSGustavo F. Padovan } 38520a708f8fSGustavo F. Padovan } else { 3853f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38540a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 38550a708f8fSGustavo F. Padovan status = L2CAP_CS_AUTHEN_PEND; 38560a708f8fSGustavo F. Padovan } 38570a708f8fSGustavo F. Padovan } else { 3858f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38590a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 38600a708f8fSGustavo F. Padovan status = L2CAP_CS_NO_INFO; 38610a708f8fSGustavo F. Padovan } 38620a708f8fSGustavo F. Padovan 38630a708f8fSGustavo F. Padovan response: 38648ffb9290SGustavo Padovan l2cap_chan_unlock(pchan); 38653df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 3866a24cce14SJohan Hedberg l2cap_chan_put(pchan); 38670a708f8fSGustavo F. Padovan 38680a708f8fSGustavo F. Padovan sendresp: 38690a708f8fSGustavo F. Padovan rsp.scid = cpu_to_le16(scid); 38700a708f8fSGustavo F. Padovan rsp.dcid = cpu_to_le16(dcid); 38710a708f8fSGustavo F. Padovan rsp.result = cpu_to_le16(result); 38720a708f8fSGustavo F. Padovan rsp.status = cpu_to_le16(status); 38734c89b6aaSMat Martineau l2cap_send_cmd(conn, cmd->ident, rsp_code, sizeof(rsp), &rsp); 38740a708f8fSGustavo F. Padovan 38750a708f8fSGustavo F. Padovan if (result == L2CAP_CR_PEND && status == L2CAP_CS_NO_INFO) { 38760a708f8fSGustavo F. Padovan struct l2cap_info_req info; 3877dcf4adbfSJoe Perches info.type = cpu_to_le16(L2CAP_IT_FEAT_MASK); 38780a708f8fSGustavo F. Padovan 38790a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_SENT; 38800a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 38810a708f8fSGustavo F. Padovan 3882ba13ccd9SMarcel Holtmann schedule_delayed_work(&conn->info_timer, L2CAP_INFO_TIMEOUT); 38830a708f8fSGustavo F. Padovan 38842d792818SGustavo Padovan l2cap_send_cmd(conn, conn->info_ident, L2CAP_INFO_REQ, 38852d792818SGustavo Padovan sizeof(info), &info); 38860a708f8fSGustavo F. Padovan } 38870a708f8fSGustavo F. Padovan 3888c1360a1cSGustavo F. Padovan if (chan && !test_bit(CONF_REQ_SENT, &chan->conf_state) && 38890a708f8fSGustavo F. Padovan result == L2CAP_CR_SUCCESS) { 38900a708f8fSGustavo F. Padovan u8 buf[128]; 3891c1360a1cSGustavo F. Padovan set_bit(CONF_REQ_SENT, &chan->conf_state); 38920a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 389373ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 389473ffa904SGustavo F. Padovan chan->num_conf_req++; 38950a708f8fSGustavo F. Padovan } 38961700915fSMat Martineau 38971700915fSMat Martineau return chan; 38984c89b6aaSMat Martineau } 38990a708f8fSGustavo F. Padovan 39004c89b6aaSMat Martineau static int l2cap_connect_req(struct l2cap_conn *conn, 3901cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, u8 *data) 39024c89b6aaSMat Martineau { 39037b064edaSJaganath Kanakkassery struct hci_dev *hdev = conn->hcon->hdev; 39047b064edaSJaganath Kanakkassery struct hci_conn *hcon = conn->hcon; 39057b064edaSJaganath Kanakkassery 3906cb3b3152SJohan Hedberg if (cmd_len < sizeof(struct l2cap_conn_req)) 3907cb3b3152SJohan Hedberg return -EPROTO; 3908cb3b3152SJohan Hedberg 39097b064edaSJaganath Kanakkassery hci_dev_lock(hdev); 3910d7a5a11dSMarcel Holtmann if (hci_dev_test_flag(hdev, HCI_MGMT) && 39117b064edaSJaganath Kanakkassery !test_and_set_bit(HCI_CONN_MGMT_CONNECTED, &hcon->flags)) 391248ec92faSAlfonso Acosta mgmt_device_connected(hdev, hcon, 0, NULL, 0); 39137b064edaSJaganath Kanakkassery hci_dev_unlock(hdev); 39147b064edaSJaganath Kanakkassery 3915300229f9SGustavo Padovan l2cap_connect(conn, cmd, data, L2CAP_CONN_RSP, 0); 39160a708f8fSGustavo F. Padovan return 0; 39170a708f8fSGustavo F. Padovan } 39180a708f8fSGustavo F. Padovan 39195909cf30SMat Martineau static int l2cap_connect_create_rsp(struct l2cap_conn *conn, 3920cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 3921cb3b3152SJohan Hedberg u8 *data) 39220a708f8fSGustavo F. Padovan { 39230a708f8fSGustavo F. Padovan struct l2cap_conn_rsp *rsp = (struct l2cap_conn_rsp *) data; 39240a708f8fSGustavo F. Padovan u16 scid, dcid, result, status; 392548454079SGustavo F. Padovan struct l2cap_chan *chan; 39260a708f8fSGustavo F. Padovan u8 req[128]; 39273df91ea2SAndrei Emeltchenko int err; 39280a708f8fSGustavo F. Padovan 3929cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rsp)) 3930cb3b3152SJohan Hedberg return -EPROTO; 3931cb3b3152SJohan Hedberg 39320a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 39330a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(rsp->dcid); 39340a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 39350a708f8fSGustavo F. Padovan status = __le16_to_cpu(rsp->status); 39360a708f8fSGustavo F. Padovan 39371b009c98SAndrei Emeltchenko BT_DBG("dcid 0x%4.4x scid 0x%4.4x result 0x%2.2x status 0x%2.2x", 39381b009c98SAndrei Emeltchenko dcid, scid, result, status); 39390a708f8fSGustavo F. Padovan 39403df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 39413df91ea2SAndrei Emeltchenko 39420a708f8fSGustavo F. Padovan if (scid) { 39433df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, scid); 39443df91ea2SAndrei Emeltchenko if (!chan) { 394521870b52SJohan Hedberg err = -EBADSLT; 39463df91ea2SAndrei Emeltchenko goto unlock; 39473df91ea2SAndrei Emeltchenko } 39480a708f8fSGustavo F. Padovan } else { 39493df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_ident(conn, cmd->ident); 39503df91ea2SAndrei Emeltchenko if (!chan) { 395121870b52SJohan Hedberg err = -EBADSLT; 39523df91ea2SAndrei Emeltchenko goto unlock; 39533df91ea2SAndrei Emeltchenko } 39540a708f8fSGustavo F. Padovan } 39550a708f8fSGustavo F. Padovan 39563df91ea2SAndrei Emeltchenko err = 0; 39573df91ea2SAndrei Emeltchenko 39586be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 395948454079SGustavo F. Padovan 39600a708f8fSGustavo F. Padovan switch (result) { 39610a708f8fSGustavo F. Padovan case L2CAP_CR_SUCCESS: 396289bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONFIG); 3963fc7f8a7eSGustavo F. Padovan chan->ident = 0; 3964fe4128e0SGustavo F. Padovan chan->dcid = dcid; 3965c1360a1cSGustavo F. Padovan clear_bit(CONF_CONNECT_PEND, &chan->conf_state); 39660a708f8fSGustavo F. Padovan 3967c1360a1cSGustavo F. Padovan if (test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) 39680a708f8fSGustavo F. Padovan break; 39690a708f8fSGustavo F. Padovan 39700a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 397173ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, req), req); 397273ffa904SGustavo F. Padovan chan->num_conf_req++; 39730a708f8fSGustavo F. Padovan break; 39740a708f8fSGustavo F. Padovan 39750a708f8fSGustavo F. Padovan case L2CAP_CR_PEND: 3976c1360a1cSGustavo F. Padovan set_bit(CONF_CONNECT_PEND, &chan->conf_state); 39770a708f8fSGustavo F. Padovan break; 39780a708f8fSGustavo F. Padovan 39790a708f8fSGustavo F. Padovan default: 398048454079SGustavo F. Padovan l2cap_chan_del(chan, ECONNREFUSED); 39810a708f8fSGustavo F. Padovan break; 39820a708f8fSGustavo F. Padovan } 39830a708f8fSGustavo F. Padovan 39846be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 39853df91ea2SAndrei Emeltchenko 39863df91ea2SAndrei Emeltchenko unlock: 39873df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 39883df91ea2SAndrei Emeltchenko 39893df91ea2SAndrei Emeltchenko return err; 39900a708f8fSGustavo F. Padovan } 39910a708f8fSGustavo F. Padovan 399247d1ec61SGustavo F. Padovan static inline void set_default_fcs(struct l2cap_chan *chan) 39930a708f8fSGustavo F. Padovan { 39940a708f8fSGustavo F. Padovan /* FCS is enabled only in ERTM or streaming mode, if one or both 39950a708f8fSGustavo F. Padovan * sides request it. 39960a708f8fSGustavo F. Padovan */ 39970c1bc5c6SGustavo F. Padovan if (chan->mode != L2CAP_MODE_ERTM && chan->mode != L2CAP_MODE_STREAMING) 399847d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 3999f2592d3eSAndrei Emeltchenko else if (!test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) 400047d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_CRC16; 40010a708f8fSGustavo F. Padovan } 40020a708f8fSGustavo F. Padovan 400329d8a590SAndrei Emeltchenko static void l2cap_send_efs_conf_rsp(struct l2cap_chan *chan, void *data, 400429d8a590SAndrei Emeltchenko u8 ident, u16 flags) 400529d8a590SAndrei Emeltchenko { 400629d8a590SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 400729d8a590SAndrei Emeltchenko 400829d8a590SAndrei Emeltchenko BT_DBG("conn %p chan %p ident %d flags 0x%4.4x", conn, chan, ident, 400929d8a590SAndrei Emeltchenko flags); 401029d8a590SAndrei Emeltchenko 401129d8a590SAndrei Emeltchenko clear_bit(CONF_LOC_CONF_PEND, &chan->conf_state); 401229d8a590SAndrei Emeltchenko set_bit(CONF_OUTPUT_DONE, &chan->conf_state); 401329d8a590SAndrei Emeltchenko 401429d8a590SAndrei Emeltchenko l2cap_send_cmd(conn, ident, L2CAP_CONF_RSP, 401529d8a590SAndrei Emeltchenko l2cap_build_conf_rsp(chan, data, 401629d8a590SAndrei Emeltchenko L2CAP_CONF_SUCCESS, flags), data); 401729d8a590SAndrei Emeltchenko } 401829d8a590SAndrei Emeltchenko 4019662d652dSJohan Hedberg static void cmd_reject_invalid_cid(struct l2cap_conn *conn, u8 ident, 4020662d652dSJohan Hedberg u16 scid, u16 dcid) 4021662d652dSJohan Hedberg { 4022662d652dSJohan Hedberg struct l2cap_cmd_rej_cid rej; 4023662d652dSJohan Hedberg 4024dcf4adbfSJoe Perches rej.reason = cpu_to_le16(L2CAP_REJ_INVALID_CID); 4025662d652dSJohan Hedberg rej.scid = __cpu_to_le16(scid); 4026662d652dSJohan Hedberg rej.dcid = __cpu_to_le16(dcid); 4027662d652dSJohan Hedberg 4028662d652dSJohan Hedberg l2cap_send_cmd(conn, ident, L2CAP_COMMAND_REJ, sizeof(rej), &rej); 4029662d652dSJohan Hedberg } 4030662d652dSJohan Hedberg 40312d792818SGustavo Padovan static inline int l2cap_config_req(struct l2cap_conn *conn, 40322d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, u16 cmd_len, 40332d792818SGustavo Padovan u8 *data) 40340a708f8fSGustavo F. Padovan { 40350a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = (struct l2cap_conf_req *) data; 40360a708f8fSGustavo F. Padovan u16 dcid, flags; 40370a708f8fSGustavo F. Padovan u8 rsp[64]; 403848454079SGustavo F. Padovan struct l2cap_chan *chan; 40393c588192SMat Martineau int len, err = 0; 40400a708f8fSGustavo F. Padovan 4041cb3b3152SJohan Hedberg if (cmd_len < sizeof(*req)) 4042cb3b3152SJohan Hedberg return -EPROTO; 4043cb3b3152SJohan Hedberg 40440a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(req->dcid); 40450a708f8fSGustavo F. Padovan flags = __le16_to_cpu(req->flags); 40460a708f8fSGustavo F. Padovan 40470a708f8fSGustavo F. Padovan BT_DBG("dcid 0x%4.4x flags 0x%2.2x", dcid, flags); 40480a708f8fSGustavo F. Padovan 4049baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, dcid); 4050662d652dSJohan Hedberg if (!chan) { 4051662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, dcid, 0); 4052662d652dSJohan Hedberg return 0; 4053662d652dSJohan Hedberg } 40540a708f8fSGustavo F. Padovan 4055033b1142SDavid S. Miller if (chan->state != BT_CONFIG && chan->state != BT_CONNECT2) { 4056662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, chan->scid, 4057662d652dSJohan Hedberg chan->dcid); 40580a708f8fSGustavo F. Padovan goto unlock; 40590a708f8fSGustavo F. Padovan } 40600a708f8fSGustavo F. Padovan 40610a708f8fSGustavo F. Padovan /* Reject if config buffer is too small. */ 40620a708f8fSGustavo F. Padovan len = cmd_len - sizeof(*req); 4063cb3b3152SJohan Hedberg if (chan->conf_len + len > sizeof(chan->conf_req)) { 40640a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 4065fe4128e0SGustavo F. Padovan l2cap_build_conf_rsp(chan, rsp, 40660a708f8fSGustavo F. Padovan L2CAP_CONF_REJECT, flags), rsp); 40670a708f8fSGustavo F. Padovan goto unlock; 40680a708f8fSGustavo F. Padovan } 40690a708f8fSGustavo F. Padovan 40700a708f8fSGustavo F. Padovan /* Store config. */ 407173ffa904SGustavo F. Padovan memcpy(chan->conf_req + chan->conf_len, req->data, len); 407273ffa904SGustavo F. Padovan chan->conf_len += len; 40730a708f8fSGustavo F. Padovan 407459e54bd1SAndrei Emeltchenko if (flags & L2CAP_CONF_FLAG_CONTINUATION) { 40750a708f8fSGustavo F. Padovan /* Incomplete config. Send empty response. */ 40760a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 4077fe4128e0SGustavo F. Padovan l2cap_build_conf_rsp(chan, rsp, 40785325e5bbSAndrei Emeltchenko L2CAP_CONF_SUCCESS, flags), rsp); 40790a708f8fSGustavo F. Padovan goto unlock; 40800a708f8fSGustavo F. Padovan } 40810a708f8fSGustavo F. Padovan 40820a708f8fSGustavo F. Padovan /* Complete config. */ 408373ffa904SGustavo F. Padovan len = l2cap_parse_conf_req(chan, rsp); 40840a708f8fSGustavo F. Padovan if (len < 0) { 40855e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 40860a708f8fSGustavo F. Padovan goto unlock; 40870a708f8fSGustavo F. Padovan } 40880a708f8fSGustavo F. Padovan 40891500109bSMat Martineau chan->ident = cmd->ident; 40900a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, len, rsp); 409173ffa904SGustavo F. Padovan chan->num_conf_rsp++; 40920a708f8fSGustavo F. Padovan 40930a708f8fSGustavo F. Padovan /* Reset config buffer. */ 409473ffa904SGustavo F. Padovan chan->conf_len = 0; 40950a708f8fSGustavo F. Padovan 4096c1360a1cSGustavo F. Padovan if (!test_bit(CONF_OUTPUT_DONE, &chan->conf_state)) 40970a708f8fSGustavo F. Padovan goto unlock; 40980a708f8fSGustavo F. Padovan 4099c1360a1cSGustavo F. Padovan if (test_bit(CONF_INPUT_DONE, &chan->conf_state)) { 410047d1ec61SGustavo F. Padovan set_default_fcs(chan); 41010a708f8fSGustavo F. Padovan 4102105bdf9eSMat Martineau if (chan->mode == L2CAP_MODE_ERTM || 4103105bdf9eSMat Martineau chan->mode == L2CAP_MODE_STREAMING) 41043c588192SMat Martineau err = l2cap_ertm_init(chan); 41050a708f8fSGustavo F. Padovan 41063c588192SMat Martineau if (err < 0) 41075e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 41083c588192SMat Martineau else 4109cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 41103c588192SMat Martineau 41110a708f8fSGustavo F. Padovan goto unlock; 41120a708f8fSGustavo F. Padovan } 41130a708f8fSGustavo F. Padovan 4114c1360a1cSGustavo F. Padovan if (!test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) { 41150a708f8fSGustavo F. Padovan u8 buf[64]; 41160a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 411773ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 411873ffa904SGustavo F. Padovan chan->num_conf_req++; 41190a708f8fSGustavo F. Padovan } 41200a708f8fSGustavo F. Padovan 412149c922bbSStephen Hemminger /* Got Conf Rsp PENDING from remote side and assume we sent 41220e8b207eSAndrei Emeltchenko Conf Rsp PENDING in the code above */ 41230e8b207eSAndrei Emeltchenko if (test_bit(CONF_REM_CONF_PEND, &chan->conf_state) && 41240e8b207eSAndrei Emeltchenko test_bit(CONF_LOC_CONF_PEND, &chan->conf_state)) { 41250e8b207eSAndrei Emeltchenko 41260e8b207eSAndrei Emeltchenko /* check compatibility */ 41270e8b207eSAndrei Emeltchenko 412879de886dSAndrei Emeltchenko /* Send rsp for BR/EDR channel */ 4129f351bc72SAndrei Emeltchenko if (!chan->hs_hcon) 413029d8a590SAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, rsp, cmd->ident, flags); 413179de886dSAndrei Emeltchenko else 413279de886dSAndrei Emeltchenko chan->ident = cmd->ident; 41330e8b207eSAndrei Emeltchenko } 41340e8b207eSAndrei Emeltchenko 41350a708f8fSGustavo F. Padovan unlock: 41366be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 41373c588192SMat Martineau return err; 41380a708f8fSGustavo F. Padovan } 41390a708f8fSGustavo F. Padovan 41402d792818SGustavo Padovan static inline int l2cap_config_rsp(struct l2cap_conn *conn, 4141cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4142cb3b3152SJohan Hedberg u8 *data) 41430a708f8fSGustavo F. Padovan { 41440a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = (struct l2cap_conf_rsp *)data; 41450a708f8fSGustavo F. Padovan u16 scid, flags, result; 414648454079SGustavo F. Padovan struct l2cap_chan *chan; 4147cb3b3152SJohan Hedberg int len = cmd_len - sizeof(*rsp); 41483c588192SMat Martineau int err = 0; 41490a708f8fSGustavo F. Padovan 4150cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rsp)) 4151cb3b3152SJohan Hedberg return -EPROTO; 4152cb3b3152SJohan Hedberg 41530a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 41540a708f8fSGustavo F. Padovan flags = __le16_to_cpu(rsp->flags); 41550a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 41560a708f8fSGustavo F. Padovan 415761386cbaSAndrei Emeltchenko BT_DBG("scid 0x%4.4x flags 0x%2.2x result 0x%2.2x len %d", scid, flags, 415861386cbaSAndrei Emeltchenko result, len); 41590a708f8fSGustavo F. Padovan 4160baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, scid); 416148454079SGustavo F. Padovan if (!chan) 41620a708f8fSGustavo F. Padovan return 0; 41630a708f8fSGustavo F. Padovan 41640a708f8fSGustavo F. Padovan switch (result) { 41650a708f8fSGustavo F. Padovan case L2CAP_CONF_SUCCESS: 416647d1ec61SGustavo F. Padovan l2cap_conf_rfc_get(chan, rsp->data, len); 41670e8b207eSAndrei Emeltchenko clear_bit(CONF_REM_CONF_PEND, &chan->conf_state); 41680a708f8fSGustavo F. Padovan break; 41690a708f8fSGustavo F. Padovan 41700e8b207eSAndrei Emeltchenko case L2CAP_CONF_PENDING: 41710e8b207eSAndrei Emeltchenko set_bit(CONF_REM_CONF_PEND, &chan->conf_state); 41720e8b207eSAndrei Emeltchenko 41730e8b207eSAndrei Emeltchenko if (test_bit(CONF_LOC_CONF_PEND, &chan->conf_state)) { 41740e8b207eSAndrei Emeltchenko char buf[64]; 41750e8b207eSAndrei Emeltchenko 41760e8b207eSAndrei Emeltchenko len = l2cap_parse_conf_rsp(chan, rsp->data, len, 41770e8b207eSAndrei Emeltchenko buf, &result); 41780e8b207eSAndrei Emeltchenko if (len < 0) { 41795e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 41800e8b207eSAndrei Emeltchenko goto done; 41810e8b207eSAndrei Emeltchenko } 41820e8b207eSAndrei Emeltchenko 4183f351bc72SAndrei Emeltchenko if (!chan->hs_hcon) { 418479de886dSAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, buf, cmd->ident, 418579de886dSAndrei Emeltchenko 0); 41865ce66b59SAndrei Emeltchenko } else { 41875ce66b59SAndrei Emeltchenko if (l2cap_check_efs(chan)) { 41885ce66b59SAndrei Emeltchenko amp_create_logical_link(chan); 418979de886dSAndrei Emeltchenko chan->ident = cmd->ident; 41900e8b207eSAndrei Emeltchenko } 41915ce66b59SAndrei Emeltchenko } 41925ce66b59SAndrei Emeltchenko } 41930e8b207eSAndrei Emeltchenko goto done; 41940e8b207eSAndrei Emeltchenko 41950a708f8fSGustavo F. Padovan case L2CAP_CONF_UNACCEPT: 419673ffa904SGustavo F. Padovan if (chan->num_conf_rsp <= L2CAP_CONF_MAX_CONF_RSP) { 41970a708f8fSGustavo F. Padovan char req[64]; 41980a708f8fSGustavo F. Padovan 41990a708f8fSGustavo F. Padovan if (len > sizeof(req) - sizeof(struct l2cap_conf_req)) { 42005e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 42010a708f8fSGustavo F. Padovan goto done; 42020a708f8fSGustavo F. Padovan } 42030a708f8fSGustavo F. Padovan 42040a708f8fSGustavo F. Padovan /* throw out any old stored conf requests */ 42050a708f8fSGustavo F. Padovan result = L2CAP_CONF_SUCCESS; 4206b4450035SGustavo F. Padovan len = l2cap_parse_conf_rsp(chan, rsp->data, len, 4207b4450035SGustavo F. Padovan req, &result); 42080a708f8fSGustavo F. Padovan if (len < 0) { 42095e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 42100a708f8fSGustavo F. Padovan goto done; 42110a708f8fSGustavo F. Padovan } 42120a708f8fSGustavo F. Padovan 42130a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), 42140a708f8fSGustavo F. Padovan L2CAP_CONF_REQ, len, req); 421573ffa904SGustavo F. Padovan chan->num_conf_req++; 42160a708f8fSGustavo F. Padovan if (result != L2CAP_CONF_SUCCESS) 42170a708f8fSGustavo F. Padovan goto done; 42180a708f8fSGustavo F. Padovan break; 42190a708f8fSGustavo F. Padovan } 42200a708f8fSGustavo F. Padovan 42210a708f8fSGustavo F. Padovan default: 42226be36555SAndrei Emeltchenko l2cap_chan_set_err(chan, ECONNRESET); 42232e0052e4SAndrei Emeltchenko 4224ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_REJ_TIMEOUT); 42255e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 42260a708f8fSGustavo F. Padovan goto done; 42270a708f8fSGustavo F. Padovan } 42280a708f8fSGustavo F. Padovan 422959e54bd1SAndrei Emeltchenko if (flags & L2CAP_CONF_FLAG_CONTINUATION) 42300a708f8fSGustavo F. Padovan goto done; 42310a708f8fSGustavo F. Padovan 4232c1360a1cSGustavo F. Padovan set_bit(CONF_INPUT_DONE, &chan->conf_state); 42330a708f8fSGustavo F. Padovan 4234c1360a1cSGustavo F. Padovan if (test_bit(CONF_OUTPUT_DONE, &chan->conf_state)) { 423547d1ec61SGustavo F. Padovan set_default_fcs(chan); 42360a708f8fSGustavo F. Padovan 4237105bdf9eSMat Martineau if (chan->mode == L2CAP_MODE_ERTM || 4238105bdf9eSMat Martineau chan->mode == L2CAP_MODE_STREAMING) 42393c588192SMat Martineau err = l2cap_ertm_init(chan); 42400a708f8fSGustavo F. Padovan 42413c588192SMat Martineau if (err < 0) 42425e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 42433c588192SMat Martineau else 4244cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 42450a708f8fSGustavo F. Padovan } 42460a708f8fSGustavo F. Padovan 42470a708f8fSGustavo F. Padovan done: 42486be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 42493c588192SMat Martineau return err; 42500a708f8fSGustavo F. Padovan } 42510a708f8fSGustavo F. Padovan 42522d792818SGustavo Padovan static inline int l2cap_disconnect_req(struct l2cap_conn *conn, 4253cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4254cb3b3152SJohan Hedberg u8 *data) 42550a708f8fSGustavo F. Padovan { 42560a708f8fSGustavo F. Padovan struct l2cap_disconn_req *req = (struct l2cap_disconn_req *) data; 42570a708f8fSGustavo F. Padovan struct l2cap_disconn_rsp rsp; 42580a708f8fSGustavo F. Padovan u16 dcid, scid; 425948454079SGustavo F. Padovan struct l2cap_chan *chan; 42600a708f8fSGustavo F. Padovan 4261cb3b3152SJohan Hedberg if (cmd_len != sizeof(*req)) 4262cb3b3152SJohan Hedberg return -EPROTO; 4263cb3b3152SJohan Hedberg 42640a708f8fSGustavo F. Padovan scid = __le16_to_cpu(req->scid); 42650a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(req->dcid); 42660a708f8fSGustavo F. Padovan 42670a708f8fSGustavo F. Padovan BT_DBG("scid 0x%4.4x dcid 0x%4.4x", scid, dcid); 42680a708f8fSGustavo F. Padovan 42693df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 42703df91ea2SAndrei Emeltchenko 42713df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, dcid); 42723df91ea2SAndrei Emeltchenko if (!chan) { 42733df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 4274662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, dcid, scid); 4275662d652dSJohan Hedberg return 0; 42763df91ea2SAndrei Emeltchenko } 42770a708f8fSGustavo F. Padovan 42786be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 42796be36555SAndrei Emeltchenko 4280fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 4281fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 42820a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_DISCONN_RSP, sizeof(rsp), &rsp); 42830a708f8fSGustavo F. Padovan 42845ec1bbe5SGustavo Padovan chan->ops->set_shutdown(chan); 42850a708f8fSGustavo F. Padovan 428661d6ef3eSMat Martineau l2cap_chan_hold(chan); 428748454079SGustavo F. Padovan l2cap_chan_del(chan, ECONNRESET); 42886be36555SAndrei Emeltchenko 42896be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 42900a708f8fSGustavo F. Padovan 429180b98027SGustavo Padovan chan->ops->close(chan); 429261d6ef3eSMat Martineau l2cap_chan_put(chan); 42933df91ea2SAndrei Emeltchenko 42943df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 42953df91ea2SAndrei Emeltchenko 42960a708f8fSGustavo F. Padovan return 0; 42970a708f8fSGustavo F. Padovan } 42980a708f8fSGustavo F. Padovan 42992d792818SGustavo Padovan static inline int l2cap_disconnect_rsp(struct l2cap_conn *conn, 4300cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4301cb3b3152SJohan Hedberg u8 *data) 43020a708f8fSGustavo F. Padovan { 43030a708f8fSGustavo F. Padovan struct l2cap_disconn_rsp *rsp = (struct l2cap_disconn_rsp *) data; 43040a708f8fSGustavo F. Padovan u16 dcid, scid; 430548454079SGustavo F. Padovan struct l2cap_chan *chan; 43060a708f8fSGustavo F. Padovan 4307cb3b3152SJohan Hedberg if (cmd_len != sizeof(*rsp)) 4308cb3b3152SJohan Hedberg return -EPROTO; 4309cb3b3152SJohan Hedberg 43100a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 43110a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(rsp->dcid); 43120a708f8fSGustavo F. Padovan 43130a708f8fSGustavo F. Padovan BT_DBG("dcid 0x%4.4x scid 0x%4.4x", dcid, scid); 43140a708f8fSGustavo F. Padovan 43153df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 43163df91ea2SAndrei Emeltchenko 43173df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, scid); 43183df91ea2SAndrei Emeltchenko if (!chan) { 43193df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 43200a708f8fSGustavo F. Padovan return 0; 43213df91ea2SAndrei Emeltchenko } 43220a708f8fSGustavo F. Padovan 43236be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 432448454079SGustavo F. Padovan 432561d6ef3eSMat Martineau l2cap_chan_hold(chan); 432648454079SGustavo F. Padovan l2cap_chan_del(chan, 0); 43276be36555SAndrei Emeltchenko 43286be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 43290a708f8fSGustavo F. Padovan 433080b98027SGustavo Padovan chan->ops->close(chan); 433161d6ef3eSMat Martineau l2cap_chan_put(chan); 43323df91ea2SAndrei Emeltchenko 43333df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 43343df91ea2SAndrei Emeltchenko 43350a708f8fSGustavo F. Padovan return 0; 43360a708f8fSGustavo F. Padovan } 43370a708f8fSGustavo F. Padovan 43382d792818SGustavo Padovan static inline int l2cap_information_req(struct l2cap_conn *conn, 4339cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4340cb3b3152SJohan Hedberg u8 *data) 43410a708f8fSGustavo F. Padovan { 43420a708f8fSGustavo F. Padovan struct l2cap_info_req *req = (struct l2cap_info_req *) data; 43430a708f8fSGustavo F. Padovan u16 type; 43440a708f8fSGustavo F. Padovan 4345cb3b3152SJohan Hedberg if (cmd_len != sizeof(*req)) 4346cb3b3152SJohan Hedberg return -EPROTO; 4347cb3b3152SJohan Hedberg 43480a708f8fSGustavo F. Padovan type = __le16_to_cpu(req->type); 43490a708f8fSGustavo F. Padovan 43500a708f8fSGustavo F. Padovan BT_DBG("type 0x%4.4x", type); 43510a708f8fSGustavo F. Padovan 43520a708f8fSGustavo F. Padovan if (type == L2CAP_IT_FEAT_MASK) { 43530a708f8fSGustavo F. Padovan u8 buf[8]; 43540a708f8fSGustavo F. Padovan u32 feat_mask = l2cap_feat_mask; 43550a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) buf; 4356dcf4adbfSJoe Perches rsp->type = cpu_to_le16(L2CAP_IT_FEAT_MASK); 4357dcf4adbfSJoe Perches rsp->result = cpu_to_le16(L2CAP_IR_SUCCESS); 43580a708f8fSGustavo F. Padovan if (!disable_ertm) 43590a708f8fSGustavo F. Padovan feat_mask |= L2CAP_FEAT_ERTM | L2CAP_FEAT_STREAMING 43600a708f8fSGustavo F. Padovan | L2CAP_FEAT_FCS; 43610bd49fc7SJohan Hedberg if (conn->local_fixed_chan & L2CAP_FC_A2MP) 43626327eb98SAndrei Emeltchenko feat_mask |= L2CAP_FEAT_EXT_FLOW 43636327eb98SAndrei Emeltchenko | L2CAP_FEAT_EXT_WINDOW; 4364a5fd6f30SAndrei Emeltchenko 43650a708f8fSGustavo F. Padovan put_unaligned_le32(feat_mask, rsp->data); 43662d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(buf), 43672d792818SGustavo Padovan buf); 43680a708f8fSGustavo F. Padovan } else if (type == L2CAP_IT_FIXED_CHAN) { 43690a708f8fSGustavo F. Padovan u8 buf[12]; 43700a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) buf; 437150a147cdSMat Martineau 4372dcf4adbfSJoe Perches rsp->type = cpu_to_le16(L2CAP_IT_FIXED_CHAN); 4373dcf4adbfSJoe Perches rsp->result = cpu_to_le16(L2CAP_IR_SUCCESS); 43740bd49fc7SJohan Hedberg rsp->data[0] = conn->local_fixed_chan; 43750bd49fc7SJohan Hedberg memset(rsp->data + 1, 0, 7); 43762d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(buf), 43772d792818SGustavo Padovan buf); 43780a708f8fSGustavo F. Padovan } else { 43790a708f8fSGustavo F. Padovan struct l2cap_info_rsp rsp; 43800a708f8fSGustavo F. Padovan rsp.type = cpu_to_le16(type); 4381dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_IR_NOTSUPP); 43822d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(rsp), 43832d792818SGustavo Padovan &rsp); 43840a708f8fSGustavo F. Padovan } 43850a708f8fSGustavo F. Padovan 43860a708f8fSGustavo F. Padovan return 0; 43870a708f8fSGustavo F. Padovan } 43880a708f8fSGustavo F. Padovan 43892d792818SGustavo Padovan static inline int l2cap_information_rsp(struct l2cap_conn *conn, 4390cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4391cb3b3152SJohan Hedberg u8 *data) 43920a708f8fSGustavo F. Padovan { 43930a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) data; 43940a708f8fSGustavo F. Padovan u16 type, result; 43950a708f8fSGustavo F. Padovan 43963f6fa3d4SJaganath Kanakkassery if (cmd_len < sizeof(*rsp)) 4397cb3b3152SJohan Hedberg return -EPROTO; 4398cb3b3152SJohan Hedberg 43990a708f8fSGustavo F. Padovan type = __le16_to_cpu(rsp->type); 44000a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 44010a708f8fSGustavo F. Padovan 44020a708f8fSGustavo F. Padovan BT_DBG("type 0x%4.4x result 0x%2.2x", type, result); 44030a708f8fSGustavo F. Padovan 4404e90165beSAndrei Emeltchenko /* L2CAP Info req/rsp are unbound to channels, add extra checks */ 4405e90165beSAndrei Emeltchenko if (cmd->ident != conn->info_ident || 4406e90165beSAndrei Emeltchenko conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) 4407e90165beSAndrei Emeltchenko return 0; 4408e90165beSAndrei Emeltchenko 440917cd3f37SUlisses Furquim cancel_delayed_work(&conn->info_timer); 44100a708f8fSGustavo F. Padovan 44110a708f8fSGustavo F. Padovan if (result != L2CAP_IR_SUCCESS) { 44120a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 44130a708f8fSGustavo F. Padovan conn->info_ident = 0; 44140a708f8fSGustavo F. Padovan 44150a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 44160a708f8fSGustavo F. Padovan 44170a708f8fSGustavo F. Padovan return 0; 44180a708f8fSGustavo F. Padovan } 44190a708f8fSGustavo F. Padovan 4420978c93b9SAndrei Emeltchenko switch (type) { 4421978c93b9SAndrei Emeltchenko case L2CAP_IT_FEAT_MASK: 44220a708f8fSGustavo F. Padovan conn->feat_mask = get_unaligned_le32(rsp->data); 44230a708f8fSGustavo F. Padovan 44240a708f8fSGustavo F. Padovan if (conn->feat_mask & L2CAP_FEAT_FIXED_CHAN) { 44250a708f8fSGustavo F. Padovan struct l2cap_info_req req; 4426dcf4adbfSJoe Perches req.type = cpu_to_le16(L2CAP_IT_FIXED_CHAN); 44270a708f8fSGustavo F. Padovan 44280a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 44290a708f8fSGustavo F. Padovan 44300a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, conn->info_ident, 44310a708f8fSGustavo F. Padovan L2CAP_INFO_REQ, sizeof(req), &req); 44320a708f8fSGustavo F. Padovan } else { 44330a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 44340a708f8fSGustavo F. Padovan conn->info_ident = 0; 44350a708f8fSGustavo F. Padovan 44360a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 44370a708f8fSGustavo F. Padovan } 4438978c93b9SAndrei Emeltchenko break; 4439978c93b9SAndrei Emeltchenko 4440978c93b9SAndrei Emeltchenko case L2CAP_IT_FIXED_CHAN: 44410bd49fc7SJohan Hedberg conn->remote_fixed_chan = rsp->data[0]; 44420a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 44430a708f8fSGustavo F. Padovan conn->info_ident = 0; 44440a708f8fSGustavo F. Padovan 44450a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 4446978c93b9SAndrei Emeltchenko break; 44470a708f8fSGustavo F. Padovan } 44480a708f8fSGustavo F. Padovan 44490a708f8fSGustavo F. Padovan return 0; 44500a708f8fSGustavo F. Padovan } 44510a708f8fSGustavo F. Padovan 44521700915fSMat Martineau static int l2cap_create_channel_req(struct l2cap_conn *conn, 44532d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, 44542d792818SGustavo Padovan u16 cmd_len, void *data) 4455f94ff6ffSMat Martineau { 4456f94ff6ffSMat Martineau struct l2cap_create_chan_req *req = data; 44576e1df6a6SAndrei Emeltchenko struct l2cap_create_chan_rsp rsp; 44581700915fSMat Martineau struct l2cap_chan *chan; 44596e1df6a6SAndrei Emeltchenko struct hci_dev *hdev; 4460f94ff6ffSMat Martineau u16 psm, scid; 4461f94ff6ffSMat Martineau 4462f94ff6ffSMat Martineau if (cmd_len != sizeof(*req)) 4463f94ff6ffSMat Martineau return -EPROTO; 4464f94ff6ffSMat Martineau 44650bd49fc7SJohan Hedberg if (!(conn->local_fixed_chan & L2CAP_FC_A2MP)) 4466f94ff6ffSMat Martineau return -EINVAL; 4467f94ff6ffSMat Martineau 4468f94ff6ffSMat Martineau psm = le16_to_cpu(req->psm); 4469f94ff6ffSMat Martineau scid = le16_to_cpu(req->scid); 4470f94ff6ffSMat Martineau 4471ad0ac6caSAndrei Emeltchenko BT_DBG("psm 0x%2.2x, scid 0x%4.4x, amp_id %d", psm, scid, req->amp_id); 4472f94ff6ffSMat Martineau 44736e1df6a6SAndrei Emeltchenko /* For controller id 0 make BR/EDR connection */ 44746ed971caSMarcel Holtmann if (req->amp_id == AMP_ID_BREDR) { 44756e1df6a6SAndrei Emeltchenko l2cap_connect(conn, cmd, data, L2CAP_CREATE_CHAN_RSP, 44766e1df6a6SAndrei Emeltchenko req->amp_id); 44776e1df6a6SAndrei Emeltchenko return 0; 44786e1df6a6SAndrei Emeltchenko } 44791700915fSMat Martineau 44801700915fSMat Martineau /* Validate AMP controller id */ 44811700915fSMat Martineau hdev = hci_dev_get(req->amp_id); 44826e1df6a6SAndrei Emeltchenko if (!hdev) 44836e1df6a6SAndrei Emeltchenko goto error; 44841700915fSMat Martineau 44856e1df6a6SAndrei Emeltchenko if (hdev->dev_type != HCI_AMP || !test_bit(HCI_UP, &hdev->flags)) { 44866e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 44876e1df6a6SAndrei Emeltchenko goto error; 44886e1df6a6SAndrei Emeltchenko } 44896e1df6a6SAndrei Emeltchenko 44906e1df6a6SAndrei Emeltchenko chan = l2cap_connect(conn, cmd, data, L2CAP_CREATE_CHAN_RSP, 44916e1df6a6SAndrei Emeltchenko req->amp_id); 44926e1df6a6SAndrei Emeltchenko if (chan) { 44936e1df6a6SAndrei Emeltchenko struct amp_mgr *mgr = conn->hcon->amp_mgr; 44946e1df6a6SAndrei Emeltchenko struct hci_conn *hs_hcon; 44956e1df6a6SAndrei Emeltchenko 449698e0f7eaSMarcel Holtmann hs_hcon = hci_conn_hash_lookup_ba(hdev, AMP_LINK, 449798e0f7eaSMarcel Holtmann &conn->hcon->dst); 44986e1df6a6SAndrei Emeltchenko if (!hs_hcon) { 44996e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 4500662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, chan->scid, 4501662d652dSJohan Hedberg chan->dcid); 4502662d652dSJohan Hedberg return 0; 45036e1df6a6SAndrei Emeltchenko } 45046e1df6a6SAndrei Emeltchenko 45056e1df6a6SAndrei Emeltchenko BT_DBG("mgr %p bredr_chan %p hs_hcon %p", mgr, chan, hs_hcon); 45066e1df6a6SAndrei Emeltchenko 45076e1df6a6SAndrei Emeltchenko mgr->bredr_chan = chan; 45086e1df6a6SAndrei Emeltchenko chan->hs_hcon = hs_hcon; 4509fd45bf4cSAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 45106e1df6a6SAndrei Emeltchenko conn->mtu = hdev->block_mtu; 45116e1df6a6SAndrei Emeltchenko } 45126e1df6a6SAndrei Emeltchenko 45136e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 45146e1df6a6SAndrei Emeltchenko 45156e1df6a6SAndrei Emeltchenko return 0; 45166e1df6a6SAndrei Emeltchenko 45176e1df6a6SAndrei Emeltchenko error: 4518f94ff6ffSMat Martineau rsp.dcid = 0; 4519f94ff6ffSMat Martineau rsp.scid = cpu_to_le16(scid); 4520dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_BAD_AMP); 4521dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 4522f94ff6ffSMat Martineau 4523f94ff6ffSMat Martineau l2cap_send_cmd(conn, cmd->ident, L2CAP_CREATE_CHAN_RSP, 4524f94ff6ffSMat Martineau sizeof(rsp), &rsp); 4525f94ff6ffSMat Martineau 4526dc280801SJohan Hedberg return 0; 4527f94ff6ffSMat Martineau } 4528f94ff6ffSMat Martineau 45298eb200bdSMat Martineau static void l2cap_send_move_chan_req(struct l2cap_chan *chan, u8 dest_amp_id) 45308eb200bdSMat Martineau { 45318eb200bdSMat Martineau struct l2cap_move_chan_req req; 45328eb200bdSMat Martineau u8 ident; 45338eb200bdSMat Martineau 45348eb200bdSMat Martineau BT_DBG("chan %p, dest_amp_id %d", chan, dest_amp_id); 45358eb200bdSMat Martineau 45368eb200bdSMat Martineau ident = l2cap_get_ident(chan->conn); 45378eb200bdSMat Martineau chan->ident = ident; 45388eb200bdSMat Martineau 45398eb200bdSMat Martineau req.icid = cpu_to_le16(chan->scid); 45408eb200bdSMat Martineau req.dest_amp_id = dest_amp_id; 45418eb200bdSMat Martineau 45428eb200bdSMat Martineau l2cap_send_cmd(chan->conn, ident, L2CAP_MOVE_CHAN_REQ, sizeof(req), 45438eb200bdSMat Martineau &req); 45448eb200bdSMat Martineau 45458eb200bdSMat Martineau __set_chan_timer(chan, L2CAP_MOVE_TIMEOUT); 45468eb200bdSMat Martineau } 45478eb200bdSMat Martineau 45481500109bSMat Martineau static void l2cap_send_move_chan_rsp(struct l2cap_chan *chan, u16 result) 45498d5a04a1SMat Martineau { 45508d5a04a1SMat Martineau struct l2cap_move_chan_rsp rsp; 45518d5a04a1SMat Martineau 45521500109bSMat Martineau BT_DBG("chan %p, result 0x%4.4x", chan, result); 45538d5a04a1SMat Martineau 45541500109bSMat Martineau rsp.icid = cpu_to_le16(chan->dcid); 45558d5a04a1SMat Martineau rsp.result = cpu_to_le16(result); 45568d5a04a1SMat Martineau 45571500109bSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_MOVE_CHAN_RSP, 45581500109bSMat Martineau sizeof(rsp), &rsp); 45598d5a04a1SMat Martineau } 45608d5a04a1SMat Martineau 45615b155ef9SMat Martineau static void l2cap_send_move_chan_cfm(struct l2cap_chan *chan, u16 result) 45628d5a04a1SMat Martineau { 45638d5a04a1SMat Martineau struct l2cap_move_chan_cfm cfm; 45648d5a04a1SMat Martineau 45655b155ef9SMat Martineau BT_DBG("chan %p, result 0x%4.4x", chan, result); 45668d5a04a1SMat Martineau 45675b155ef9SMat Martineau chan->ident = l2cap_get_ident(chan->conn); 45688d5a04a1SMat Martineau 45695b155ef9SMat Martineau cfm.icid = cpu_to_le16(chan->scid); 45708d5a04a1SMat Martineau cfm.result = cpu_to_le16(result); 45718d5a04a1SMat Martineau 45725b155ef9SMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_MOVE_CHAN_CFM, 45735b155ef9SMat Martineau sizeof(cfm), &cfm); 45745b155ef9SMat Martineau 45755b155ef9SMat Martineau __set_chan_timer(chan, L2CAP_MOVE_TIMEOUT); 45765b155ef9SMat Martineau } 45775b155ef9SMat Martineau 45785b155ef9SMat Martineau static void l2cap_send_move_chan_cfm_icid(struct l2cap_conn *conn, u16 icid) 45795b155ef9SMat Martineau { 45805b155ef9SMat Martineau struct l2cap_move_chan_cfm cfm; 45815b155ef9SMat Martineau 45825b155ef9SMat Martineau BT_DBG("conn %p, icid 0x%4.4x", conn, icid); 45835b155ef9SMat Martineau 45845b155ef9SMat Martineau cfm.icid = cpu_to_le16(icid); 4585dcf4adbfSJoe Perches cfm.result = cpu_to_le16(L2CAP_MC_UNCONFIRMED); 45865b155ef9SMat Martineau 45875b155ef9SMat Martineau l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_MOVE_CHAN_CFM, 45885b155ef9SMat Martineau sizeof(cfm), &cfm); 45898d5a04a1SMat Martineau } 45908d5a04a1SMat Martineau 45918d5a04a1SMat Martineau static void l2cap_send_move_chan_cfm_rsp(struct l2cap_conn *conn, u8 ident, 45928d5a04a1SMat Martineau u16 icid) 45938d5a04a1SMat Martineau { 45948d5a04a1SMat Martineau struct l2cap_move_chan_cfm_rsp rsp; 45958d5a04a1SMat Martineau 4596ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x", icid); 45978d5a04a1SMat Martineau 45988d5a04a1SMat Martineau rsp.icid = cpu_to_le16(icid); 45998d5a04a1SMat Martineau l2cap_send_cmd(conn, ident, L2CAP_MOVE_CHAN_CFM_RSP, sizeof(rsp), &rsp); 46008d5a04a1SMat Martineau } 46018d5a04a1SMat Martineau 46025f3847a4SMat Martineau static void __release_logical_link(struct l2cap_chan *chan) 46035f3847a4SMat Martineau { 46045f3847a4SMat Martineau chan->hs_hchan = NULL; 46055f3847a4SMat Martineau chan->hs_hcon = NULL; 46065f3847a4SMat Martineau 46075f3847a4SMat Martineau /* Placeholder - release the logical link */ 46085f3847a4SMat Martineau } 46095f3847a4SMat Martineau 46101500109bSMat Martineau static void l2cap_logical_fail(struct l2cap_chan *chan) 46111500109bSMat Martineau { 46121500109bSMat Martineau /* Logical link setup failed */ 46131500109bSMat Martineau if (chan->state != BT_CONNECTED) { 46141500109bSMat Martineau /* Create channel failure, disconnect */ 46155e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 46161500109bSMat Martineau return; 46171500109bSMat Martineau } 46181500109bSMat Martineau 46191500109bSMat Martineau switch (chan->move_role) { 46201500109bSMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 46211500109bSMat Martineau l2cap_move_done(chan); 46221500109bSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_NOT_SUPP); 46231500109bSMat Martineau break; 46241500109bSMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 46251500109bSMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_LOGICAL_COMP || 46261500109bSMat Martineau chan->move_state == L2CAP_MOVE_WAIT_LOGICAL_CFM) { 46271500109bSMat Martineau /* Remote has only sent pending or 46281500109bSMat Martineau * success responses, clean up 46291500109bSMat Martineau */ 46301500109bSMat Martineau l2cap_move_done(chan); 46311500109bSMat Martineau } 46321500109bSMat Martineau 46331500109bSMat Martineau /* Other amp move states imply that the move 46341500109bSMat Martineau * has already aborted 46351500109bSMat Martineau */ 46361500109bSMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 46371500109bSMat Martineau break; 46381500109bSMat Martineau } 46391500109bSMat Martineau } 46401500109bSMat Martineau 46411500109bSMat Martineau static void l2cap_logical_finish_create(struct l2cap_chan *chan, 46421500109bSMat Martineau struct hci_chan *hchan) 46431500109bSMat Martineau { 46441500109bSMat Martineau struct l2cap_conf_rsp rsp; 46451500109bSMat Martineau 4646336178a3SAndrei Emeltchenko chan->hs_hchan = hchan; 46471500109bSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 46481500109bSMat Martineau 464935ba9561SAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, &rsp, chan->ident, 0); 46501500109bSMat Martineau 46511500109bSMat Martineau if (test_bit(CONF_INPUT_DONE, &chan->conf_state)) { 4652fe79c6feSAndrei Emeltchenko int err; 46531500109bSMat Martineau 46541500109bSMat Martineau set_default_fcs(chan); 46551500109bSMat Martineau 46561500109bSMat Martineau err = l2cap_ertm_init(chan); 46571500109bSMat Martineau if (err < 0) 46585e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 46591500109bSMat Martineau else 46601500109bSMat Martineau l2cap_chan_ready(chan); 46611500109bSMat Martineau } 46621500109bSMat Martineau } 46631500109bSMat Martineau 46641500109bSMat Martineau static void l2cap_logical_finish_move(struct l2cap_chan *chan, 46651500109bSMat Martineau struct hci_chan *hchan) 46661500109bSMat Martineau { 46671500109bSMat Martineau chan->hs_hcon = hchan->conn; 46681500109bSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 46691500109bSMat Martineau 46701500109bSMat Martineau BT_DBG("move_state %d", chan->move_state); 46711500109bSMat Martineau 46721500109bSMat Martineau switch (chan->move_state) { 46731500109bSMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_COMP: 46741500109bSMat Martineau /* Move confirm will be sent after a success 46751500109bSMat Martineau * response is received 46761500109bSMat Martineau */ 46771500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 46781500109bSMat Martineau break; 46791500109bSMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_CFM: 46801500109bSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 46811500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 46821500109bSMat Martineau } else if (chan->move_role == L2CAP_MOVE_ROLE_INITIATOR) { 46831500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM_RSP; 46841500109bSMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 46851500109bSMat Martineau } else if (chan->move_role == L2CAP_MOVE_ROLE_RESPONDER) { 46861500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 46871500109bSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_SUCCESS); 46881500109bSMat Martineau } 46891500109bSMat Martineau break; 46901500109bSMat Martineau default: 46911500109bSMat Martineau /* Move was not in expected state, free the channel */ 46921500109bSMat Martineau __release_logical_link(chan); 46931500109bSMat Martineau 46941500109bSMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 46951500109bSMat Martineau } 46961500109bSMat Martineau } 46971500109bSMat Martineau 46981500109bSMat Martineau /* Call with chan locked */ 469927695fb4SAndrei Emeltchenko void l2cap_logical_cfm(struct l2cap_chan *chan, struct hci_chan *hchan, 47005b155ef9SMat Martineau u8 status) 47015b155ef9SMat Martineau { 47021500109bSMat Martineau BT_DBG("chan %p, hchan %p, status %d", chan, hchan, status); 47031500109bSMat Martineau 47041500109bSMat Martineau if (status) { 47051500109bSMat Martineau l2cap_logical_fail(chan); 47061500109bSMat Martineau __release_logical_link(chan); 47075b155ef9SMat Martineau return; 47085b155ef9SMat Martineau } 47095b155ef9SMat Martineau 47101500109bSMat Martineau if (chan->state != BT_CONNECTED) { 47111500109bSMat Martineau /* Ignore logical link if channel is on BR/EDR */ 47126ed971caSMarcel Holtmann if (chan->local_amp_id != AMP_ID_BREDR) 47131500109bSMat Martineau l2cap_logical_finish_create(chan, hchan); 47141500109bSMat Martineau } else { 47151500109bSMat Martineau l2cap_logical_finish_move(chan, hchan); 47161500109bSMat Martineau } 47171500109bSMat Martineau } 47181500109bSMat Martineau 47193f7a56c4SMat Martineau void l2cap_move_start(struct l2cap_chan *chan) 47203f7a56c4SMat Martineau { 47213f7a56c4SMat Martineau BT_DBG("chan %p", chan); 47223f7a56c4SMat Martineau 47236ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR) { 47243f7a56c4SMat Martineau if (chan->chan_policy != BT_CHANNEL_POLICY_AMP_PREFERRED) 47253f7a56c4SMat Martineau return; 47263f7a56c4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_INITIATOR; 47273f7a56c4SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_PREPARE; 47283f7a56c4SMat Martineau /* Placeholder - start physical link setup */ 47293f7a56c4SMat Martineau } else { 47303f7a56c4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_INITIATOR; 47313f7a56c4SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 47323f7a56c4SMat Martineau chan->move_id = 0; 47333f7a56c4SMat Martineau l2cap_move_setup(chan); 47343f7a56c4SMat Martineau l2cap_send_move_chan_req(chan, 0); 47353f7a56c4SMat Martineau } 47363f7a56c4SMat Martineau } 47373f7a56c4SMat Martineau 47388eb200bdSMat Martineau static void l2cap_do_create(struct l2cap_chan *chan, int result, 47398eb200bdSMat Martineau u8 local_amp_id, u8 remote_amp_id) 47408eb200bdSMat Martineau { 474162748ca1SAndrei Emeltchenko BT_DBG("chan %p state %s %u -> %u", chan, state_to_string(chan->state), 474262748ca1SAndrei Emeltchenko local_amp_id, remote_amp_id); 474362748ca1SAndrei Emeltchenko 474412d6cc60SAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 474512d6cc60SAndrei Emeltchenko 474662748ca1SAndrei Emeltchenko /* Outgoing channel on AMP */ 474762748ca1SAndrei Emeltchenko if (chan->state == BT_CONNECT) { 474862748ca1SAndrei Emeltchenko if (result == L2CAP_CR_SUCCESS) { 474962748ca1SAndrei Emeltchenko chan->local_amp_id = local_amp_id; 475062748ca1SAndrei Emeltchenko l2cap_send_create_chan_req(chan, remote_amp_id); 475162748ca1SAndrei Emeltchenko } else { 475262748ca1SAndrei Emeltchenko /* Revert to BR/EDR connect */ 475362748ca1SAndrei Emeltchenko l2cap_send_conn_req(chan); 475462748ca1SAndrei Emeltchenko } 475562748ca1SAndrei Emeltchenko 475662748ca1SAndrei Emeltchenko return; 475762748ca1SAndrei Emeltchenko } 475862748ca1SAndrei Emeltchenko 475962748ca1SAndrei Emeltchenko /* Incoming channel on AMP */ 476062748ca1SAndrei Emeltchenko if (__l2cap_no_conn_pending(chan)) { 47618eb200bdSMat Martineau struct l2cap_conn_rsp rsp; 47628eb200bdSMat Martineau char buf[128]; 47638eb200bdSMat Martineau rsp.scid = cpu_to_le16(chan->dcid); 47648eb200bdSMat Martineau rsp.dcid = cpu_to_le16(chan->scid); 47658eb200bdSMat Martineau 47668eb200bdSMat Martineau if (result == L2CAP_CR_SUCCESS) { 47678eb200bdSMat Martineau /* Send successful response */ 4768dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 4769dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 47708eb200bdSMat Martineau } else { 47718eb200bdSMat Martineau /* Send negative response */ 4772dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_NO_MEM); 4773dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 47748eb200bdSMat Martineau } 47758eb200bdSMat Martineau 47768eb200bdSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_CREATE_CHAN_RSP, 47778eb200bdSMat Martineau sizeof(rsp), &rsp); 47788eb200bdSMat Martineau 47798eb200bdSMat Martineau if (result == L2CAP_CR_SUCCESS) { 4780f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 47818eb200bdSMat Martineau set_bit(CONF_REQ_SENT, &chan->conf_state); 47828eb200bdSMat Martineau l2cap_send_cmd(chan->conn, l2cap_get_ident(chan->conn), 47838eb200bdSMat Martineau L2CAP_CONF_REQ, 47848eb200bdSMat Martineau l2cap_build_conf_req(chan, buf), buf); 47858eb200bdSMat Martineau chan->num_conf_req++; 47868eb200bdSMat Martineau } 47878eb200bdSMat Martineau } 47888eb200bdSMat Martineau } 47898eb200bdSMat Martineau 47908eb200bdSMat Martineau static void l2cap_do_move_initiate(struct l2cap_chan *chan, u8 local_amp_id, 47918eb200bdSMat Martineau u8 remote_amp_id) 47928eb200bdSMat Martineau { 47938eb200bdSMat Martineau l2cap_move_setup(chan); 47948eb200bdSMat Martineau chan->move_id = local_amp_id; 47958eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP; 47968eb200bdSMat Martineau 47978eb200bdSMat Martineau l2cap_send_move_chan_req(chan, remote_amp_id); 47988eb200bdSMat Martineau } 47998eb200bdSMat Martineau 48008eb200bdSMat Martineau static void l2cap_do_move_respond(struct l2cap_chan *chan, int result) 48018eb200bdSMat Martineau { 48028eb200bdSMat Martineau struct hci_chan *hchan = NULL; 48038eb200bdSMat Martineau 48048eb200bdSMat Martineau /* Placeholder - get hci_chan for logical link */ 48058eb200bdSMat Martineau 48068eb200bdSMat Martineau if (hchan) { 48078eb200bdSMat Martineau if (hchan->state == BT_CONNECTED) { 48088eb200bdSMat Martineau /* Logical link is ready to go */ 48098eb200bdSMat Martineau chan->hs_hcon = hchan->conn; 48108eb200bdSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 48118eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 48128eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_SUCCESS); 48138eb200bdSMat Martineau 48148eb200bdSMat Martineau l2cap_logical_cfm(chan, hchan, L2CAP_MR_SUCCESS); 48158eb200bdSMat Martineau } else { 48168eb200bdSMat Martineau /* Wait for logical link to be ready */ 48178eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 48188eb200bdSMat Martineau } 48198eb200bdSMat Martineau } else { 48208eb200bdSMat Martineau /* Logical link not available */ 48218eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_NOT_ALLOWED); 48228eb200bdSMat Martineau } 48238eb200bdSMat Martineau } 48248eb200bdSMat Martineau 48258eb200bdSMat Martineau static void l2cap_do_move_cancel(struct l2cap_chan *chan, int result) 48268eb200bdSMat Martineau { 48278eb200bdSMat Martineau if (chan->move_role == L2CAP_MOVE_ROLE_RESPONDER) { 48288eb200bdSMat Martineau u8 rsp_result; 48298eb200bdSMat Martineau if (result == -EINVAL) 48308eb200bdSMat Martineau rsp_result = L2CAP_MR_BAD_ID; 48318eb200bdSMat Martineau else 48328eb200bdSMat Martineau rsp_result = L2CAP_MR_NOT_ALLOWED; 48338eb200bdSMat Martineau 48348eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, rsp_result); 48358eb200bdSMat Martineau } 48368eb200bdSMat Martineau 48378eb200bdSMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 48388eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 48398eb200bdSMat Martineau 48408eb200bdSMat Martineau /* Restart data transmission */ 48418eb200bdSMat Martineau l2cap_ertm_send(chan); 48428eb200bdSMat Martineau } 48438eb200bdSMat Martineau 4844a514b17fSAndrei Emeltchenko /* Invoke with locked chan */ 4845a514b17fSAndrei Emeltchenko void __l2cap_physical_cfm(struct l2cap_chan *chan, int result) 48468eb200bdSMat Martineau { 4847770bfefaSAndrei Emeltchenko u8 local_amp_id = chan->local_amp_id; 4848fffadc08SAndrei Emeltchenko u8 remote_amp_id = chan->remote_amp_id; 4849770bfefaSAndrei Emeltchenko 48508eb200bdSMat Martineau BT_DBG("chan %p, result %d, local_amp_id %d, remote_amp_id %d", 48518eb200bdSMat Martineau chan, result, local_amp_id, remote_amp_id); 48528eb200bdSMat Martineau 48538eb200bdSMat Martineau if (chan->state == BT_DISCONN || chan->state == BT_CLOSED) { 48548eb200bdSMat Martineau l2cap_chan_unlock(chan); 48558eb200bdSMat Martineau return; 48568eb200bdSMat Martineau } 48578eb200bdSMat Martineau 48588eb200bdSMat Martineau if (chan->state != BT_CONNECTED) { 48598eb200bdSMat Martineau l2cap_do_create(chan, result, local_amp_id, remote_amp_id); 48608eb200bdSMat Martineau } else if (result != L2CAP_MR_SUCCESS) { 48618eb200bdSMat Martineau l2cap_do_move_cancel(chan, result); 48628eb200bdSMat Martineau } else { 48638eb200bdSMat Martineau switch (chan->move_role) { 48648eb200bdSMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 48658eb200bdSMat Martineau l2cap_do_move_initiate(chan, local_amp_id, 48668eb200bdSMat Martineau remote_amp_id); 48678eb200bdSMat Martineau break; 48688eb200bdSMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 48698eb200bdSMat Martineau l2cap_do_move_respond(chan, result); 48708eb200bdSMat Martineau break; 48718eb200bdSMat Martineau default: 48728eb200bdSMat Martineau l2cap_do_move_cancel(chan, result); 48738eb200bdSMat Martineau break; 48748eb200bdSMat Martineau } 48758eb200bdSMat Martineau } 48768eb200bdSMat Martineau } 48778eb200bdSMat Martineau 48788d5a04a1SMat Martineau static inline int l2cap_move_channel_req(struct l2cap_conn *conn, 4879ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 4880ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 48818d5a04a1SMat Martineau { 48828d5a04a1SMat Martineau struct l2cap_move_chan_req *req = data; 48831500109bSMat Martineau struct l2cap_move_chan_rsp rsp; 488402b0fbb9SMat Martineau struct l2cap_chan *chan; 48858d5a04a1SMat Martineau u16 icid = 0; 48868d5a04a1SMat Martineau u16 result = L2CAP_MR_NOT_ALLOWED; 48878d5a04a1SMat Martineau 48888d5a04a1SMat Martineau if (cmd_len != sizeof(*req)) 48898d5a04a1SMat Martineau return -EPROTO; 48908d5a04a1SMat Martineau 48918d5a04a1SMat Martineau icid = le16_to_cpu(req->icid); 48928d5a04a1SMat Martineau 4893ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, dest_amp_id %d", icid, req->dest_amp_id); 48948d5a04a1SMat Martineau 48950bd49fc7SJohan Hedberg if (!(conn->local_fixed_chan & L2CAP_FC_A2MP)) 48968d5a04a1SMat Martineau return -EINVAL; 48978d5a04a1SMat Martineau 489802b0fbb9SMat Martineau chan = l2cap_get_chan_by_dcid(conn, icid); 489902b0fbb9SMat Martineau if (!chan) { 49001500109bSMat Martineau rsp.icid = cpu_to_le16(icid); 4901dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_MR_NOT_ALLOWED); 49021500109bSMat Martineau l2cap_send_cmd(conn, cmd->ident, L2CAP_MOVE_CHAN_RSP, 49031500109bSMat Martineau sizeof(rsp), &rsp); 490402b0fbb9SMat Martineau return 0; 490502b0fbb9SMat Martineau } 490602b0fbb9SMat Martineau 49071500109bSMat Martineau chan->ident = cmd->ident; 49081500109bSMat Martineau 490902b0fbb9SMat Martineau if (chan->scid < L2CAP_CID_DYN_START || 491002b0fbb9SMat Martineau chan->chan_policy == BT_CHANNEL_POLICY_BREDR_ONLY || 491102b0fbb9SMat Martineau (chan->mode != L2CAP_MODE_ERTM && 491202b0fbb9SMat Martineau chan->mode != L2CAP_MODE_STREAMING)) { 491302b0fbb9SMat Martineau result = L2CAP_MR_NOT_ALLOWED; 491402b0fbb9SMat Martineau goto send_move_response; 491502b0fbb9SMat Martineau } 491602b0fbb9SMat Martineau 491702b0fbb9SMat Martineau if (chan->local_amp_id == req->dest_amp_id) { 491802b0fbb9SMat Martineau result = L2CAP_MR_SAME_ID; 491902b0fbb9SMat Martineau goto send_move_response; 492002b0fbb9SMat Martineau } 492102b0fbb9SMat Martineau 49226ed971caSMarcel Holtmann if (req->dest_amp_id != AMP_ID_BREDR) { 492302b0fbb9SMat Martineau struct hci_dev *hdev; 492402b0fbb9SMat Martineau hdev = hci_dev_get(req->dest_amp_id); 492502b0fbb9SMat Martineau if (!hdev || hdev->dev_type != HCI_AMP || 492602b0fbb9SMat Martineau !test_bit(HCI_UP, &hdev->flags)) { 492702b0fbb9SMat Martineau if (hdev) 492802b0fbb9SMat Martineau hci_dev_put(hdev); 492902b0fbb9SMat Martineau 493002b0fbb9SMat Martineau result = L2CAP_MR_BAD_ID; 493102b0fbb9SMat Martineau goto send_move_response; 493202b0fbb9SMat Martineau } 493302b0fbb9SMat Martineau hci_dev_put(hdev); 493402b0fbb9SMat Martineau } 493502b0fbb9SMat Martineau 493602b0fbb9SMat Martineau /* Detect a move collision. Only send a collision response 493702b0fbb9SMat Martineau * if this side has "lost", otherwise proceed with the move. 493802b0fbb9SMat Martineau * The winner has the larger bd_addr. 493902b0fbb9SMat Martineau */ 494002b0fbb9SMat Martineau if ((__chan_is_moving(chan) || 494102b0fbb9SMat Martineau chan->move_role != L2CAP_MOVE_ROLE_NONE) && 49426f59b904SMarcel Holtmann bacmp(&conn->hcon->src, &conn->hcon->dst) > 0) { 494302b0fbb9SMat Martineau result = L2CAP_MR_COLLISION; 494402b0fbb9SMat Martineau goto send_move_response; 494502b0fbb9SMat Martineau } 494602b0fbb9SMat Martineau 494702b0fbb9SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_RESPONDER; 494802b0fbb9SMat Martineau l2cap_move_setup(chan); 494902b0fbb9SMat Martineau chan->move_id = req->dest_amp_id; 495002b0fbb9SMat Martineau icid = chan->dcid; 495102b0fbb9SMat Martineau 49526ed971caSMarcel Holtmann if (req->dest_amp_id == AMP_ID_BREDR) { 495302b0fbb9SMat Martineau /* Moving to BR/EDR */ 495402b0fbb9SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 495502b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 495602b0fbb9SMat Martineau result = L2CAP_MR_PEND; 495702b0fbb9SMat Martineau } else { 495802b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 495902b0fbb9SMat Martineau result = L2CAP_MR_SUCCESS; 496002b0fbb9SMat Martineau } 496102b0fbb9SMat Martineau } else { 496202b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_PREPARE; 496302b0fbb9SMat Martineau /* Placeholder - uncomment when amp functions are available */ 496402b0fbb9SMat Martineau /*amp_accept_physical(chan, req->dest_amp_id);*/ 496502b0fbb9SMat Martineau result = L2CAP_MR_PEND; 496602b0fbb9SMat Martineau } 496702b0fbb9SMat Martineau 496802b0fbb9SMat Martineau send_move_response: 49691500109bSMat Martineau l2cap_send_move_chan_rsp(chan, result); 49708d5a04a1SMat Martineau 497102b0fbb9SMat Martineau l2cap_chan_unlock(chan); 497202b0fbb9SMat Martineau 49738d5a04a1SMat Martineau return 0; 49748d5a04a1SMat Martineau } 49758d5a04a1SMat Martineau 49765b155ef9SMat Martineau static void l2cap_move_continue(struct l2cap_conn *conn, u16 icid, u16 result) 49775b155ef9SMat Martineau { 49785b155ef9SMat Martineau struct l2cap_chan *chan; 49795b155ef9SMat Martineau struct hci_chan *hchan = NULL; 49805b155ef9SMat Martineau 49815b155ef9SMat Martineau chan = l2cap_get_chan_by_scid(conn, icid); 49825b155ef9SMat Martineau if (!chan) { 49835b155ef9SMat Martineau l2cap_send_move_chan_cfm_icid(conn, icid); 49845b155ef9SMat Martineau return; 49855b155ef9SMat Martineau } 49865b155ef9SMat Martineau 49875b155ef9SMat Martineau __clear_chan_timer(chan); 49885b155ef9SMat Martineau if (result == L2CAP_MR_PEND) 49895b155ef9SMat Martineau __set_chan_timer(chan, L2CAP_MOVE_ERTX_TIMEOUT); 49905b155ef9SMat Martineau 49915b155ef9SMat Martineau switch (chan->move_state) { 49925b155ef9SMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_COMP: 49935b155ef9SMat Martineau /* Move confirm will be sent when logical link 49945b155ef9SMat Martineau * is complete. 49955b155ef9SMat Martineau */ 49965b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 49975b155ef9SMat Martineau break; 49985b155ef9SMat Martineau case L2CAP_MOVE_WAIT_RSP_SUCCESS: 49995b155ef9SMat Martineau if (result == L2CAP_MR_PEND) { 50005b155ef9SMat Martineau break; 50015b155ef9SMat Martineau } else if (test_bit(CONN_LOCAL_BUSY, 50025b155ef9SMat Martineau &chan->conn_state)) { 50035b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 50045b155ef9SMat Martineau } else { 50055b155ef9SMat Martineau /* Logical link is up or moving to BR/EDR, 50065b155ef9SMat Martineau * proceed with move 50075b155ef9SMat Martineau */ 50085b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM_RSP; 50095b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 50105b155ef9SMat Martineau } 50115b155ef9SMat Martineau break; 50125b155ef9SMat Martineau case L2CAP_MOVE_WAIT_RSP: 50135b155ef9SMat Martineau /* Moving to AMP */ 50145b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS) { 50155b155ef9SMat Martineau /* Remote is ready, send confirm immediately 50165b155ef9SMat Martineau * after logical link is ready 50175b155ef9SMat Martineau */ 50185b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 50195b155ef9SMat Martineau } else { 50205b155ef9SMat Martineau /* Both logical link and move success 50215b155ef9SMat Martineau * are required to confirm 50225b155ef9SMat Martineau */ 50235b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_COMP; 50245b155ef9SMat Martineau } 50255b155ef9SMat Martineau 50265b155ef9SMat Martineau /* Placeholder - get hci_chan for logical link */ 50275b155ef9SMat Martineau if (!hchan) { 50285b155ef9SMat Martineau /* Logical link not available */ 50295b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 50305b155ef9SMat Martineau break; 50315b155ef9SMat Martineau } 50325b155ef9SMat Martineau 50335b155ef9SMat Martineau /* If the logical link is not yet connected, do not 50345b155ef9SMat Martineau * send confirmation. 50355b155ef9SMat Martineau */ 50365b155ef9SMat Martineau if (hchan->state != BT_CONNECTED) 50375b155ef9SMat Martineau break; 50385b155ef9SMat Martineau 50395b155ef9SMat Martineau /* Logical link is already ready to go */ 50405b155ef9SMat Martineau 50415b155ef9SMat Martineau chan->hs_hcon = hchan->conn; 50425b155ef9SMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 50435b155ef9SMat Martineau 50445b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS) { 50455b155ef9SMat Martineau /* Can confirm now */ 50465b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 50475b155ef9SMat Martineau } else { 50485b155ef9SMat Martineau /* Now only need move success 50495b155ef9SMat Martineau * to confirm 50505b155ef9SMat Martineau */ 50515b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 50525b155ef9SMat Martineau } 50535b155ef9SMat Martineau 50545b155ef9SMat Martineau l2cap_logical_cfm(chan, hchan, L2CAP_MR_SUCCESS); 50555b155ef9SMat Martineau break; 50565b155ef9SMat Martineau default: 50575b155ef9SMat Martineau /* Any other amp move state means the move failed. */ 50585b155ef9SMat Martineau chan->move_id = chan->local_amp_id; 50595b155ef9SMat Martineau l2cap_move_done(chan); 50605b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 50615b155ef9SMat Martineau } 50625b155ef9SMat Martineau 50635b155ef9SMat Martineau l2cap_chan_unlock(chan); 50645b155ef9SMat Martineau } 50655b155ef9SMat Martineau 50665b155ef9SMat Martineau static void l2cap_move_fail(struct l2cap_conn *conn, u8 ident, u16 icid, 50675b155ef9SMat Martineau u16 result) 50685b155ef9SMat Martineau { 50695b155ef9SMat Martineau struct l2cap_chan *chan; 50705b155ef9SMat Martineau 50715b155ef9SMat Martineau chan = l2cap_get_chan_by_ident(conn, ident); 50725b155ef9SMat Martineau if (!chan) { 50735b155ef9SMat Martineau /* Could not locate channel, icid is best guess */ 50745b155ef9SMat Martineau l2cap_send_move_chan_cfm_icid(conn, icid); 50755b155ef9SMat Martineau return; 50765b155ef9SMat Martineau } 50775b155ef9SMat Martineau 50785b155ef9SMat Martineau __clear_chan_timer(chan); 50795b155ef9SMat Martineau 50805b155ef9SMat Martineau if (chan->move_role == L2CAP_MOVE_ROLE_INITIATOR) { 50815b155ef9SMat Martineau if (result == L2CAP_MR_COLLISION) { 50825b155ef9SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_RESPONDER; 50835b155ef9SMat Martineau } else { 50845b155ef9SMat Martineau /* Cleanup - cancel move */ 50855b155ef9SMat Martineau chan->move_id = chan->local_amp_id; 50865b155ef9SMat Martineau l2cap_move_done(chan); 50875b155ef9SMat Martineau } 50885b155ef9SMat Martineau } 50895b155ef9SMat Martineau 50905b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 50915b155ef9SMat Martineau 50925b155ef9SMat Martineau l2cap_chan_unlock(chan); 50935b155ef9SMat Martineau } 50945b155ef9SMat Martineau 50955b155ef9SMat Martineau static int l2cap_move_channel_rsp(struct l2cap_conn *conn, 5096ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5097ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 50988d5a04a1SMat Martineau { 50998d5a04a1SMat Martineau struct l2cap_move_chan_rsp *rsp = data; 51008d5a04a1SMat Martineau u16 icid, result; 51018d5a04a1SMat Martineau 51028d5a04a1SMat Martineau if (cmd_len != sizeof(*rsp)) 51038d5a04a1SMat Martineau return -EPROTO; 51048d5a04a1SMat Martineau 51058d5a04a1SMat Martineau icid = le16_to_cpu(rsp->icid); 51068d5a04a1SMat Martineau result = le16_to_cpu(rsp->result); 51078d5a04a1SMat Martineau 5108ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, result 0x%4.4x", icid, result); 51098d5a04a1SMat Martineau 51105b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS || result == L2CAP_MR_PEND) 51115b155ef9SMat Martineau l2cap_move_continue(conn, icid, result); 51125b155ef9SMat Martineau else 51135b155ef9SMat Martineau l2cap_move_fail(conn, cmd->ident, icid, result); 51148d5a04a1SMat Martineau 51158d5a04a1SMat Martineau return 0; 51168d5a04a1SMat Martineau } 51178d5a04a1SMat Martineau 51185f3847a4SMat Martineau static int l2cap_move_channel_confirm(struct l2cap_conn *conn, 5119ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5120ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 51218d5a04a1SMat Martineau { 51228d5a04a1SMat Martineau struct l2cap_move_chan_cfm *cfm = data; 51235f3847a4SMat Martineau struct l2cap_chan *chan; 51248d5a04a1SMat Martineau u16 icid, result; 51258d5a04a1SMat Martineau 51268d5a04a1SMat Martineau if (cmd_len != sizeof(*cfm)) 51278d5a04a1SMat Martineau return -EPROTO; 51288d5a04a1SMat Martineau 51298d5a04a1SMat Martineau icid = le16_to_cpu(cfm->icid); 51308d5a04a1SMat Martineau result = le16_to_cpu(cfm->result); 51318d5a04a1SMat Martineau 5132ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, result 0x%4.4x", icid, result); 51338d5a04a1SMat Martineau 51345f3847a4SMat Martineau chan = l2cap_get_chan_by_dcid(conn, icid); 51355f3847a4SMat Martineau if (!chan) { 51365f3847a4SMat Martineau /* Spec requires a response even if the icid was not found */ 51378d5a04a1SMat Martineau l2cap_send_move_chan_cfm_rsp(conn, cmd->ident, icid); 51385f3847a4SMat Martineau return 0; 51395f3847a4SMat Martineau } 51405f3847a4SMat Martineau 51415f3847a4SMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_CONFIRM) { 51425f3847a4SMat Martineau if (result == L2CAP_MC_CONFIRMED) { 51435f3847a4SMat Martineau chan->local_amp_id = chan->move_id; 51446ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR) 51455f3847a4SMat Martineau __release_logical_link(chan); 51465f3847a4SMat Martineau } else { 51475f3847a4SMat Martineau chan->move_id = chan->local_amp_id; 51485f3847a4SMat Martineau } 51495f3847a4SMat Martineau 51505f3847a4SMat Martineau l2cap_move_done(chan); 51515f3847a4SMat Martineau } 51525f3847a4SMat Martineau 51535f3847a4SMat Martineau l2cap_send_move_chan_cfm_rsp(conn, cmd->ident, icid); 51545f3847a4SMat Martineau 51555f3847a4SMat Martineau l2cap_chan_unlock(chan); 51568d5a04a1SMat Martineau 51578d5a04a1SMat Martineau return 0; 51588d5a04a1SMat Martineau } 51598d5a04a1SMat Martineau 51608d5a04a1SMat Martineau static inline int l2cap_move_channel_confirm_rsp(struct l2cap_conn *conn, 5161ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5162ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 51638d5a04a1SMat Martineau { 51648d5a04a1SMat Martineau struct l2cap_move_chan_cfm_rsp *rsp = data; 51653fd71a0aSMat Martineau struct l2cap_chan *chan; 51668d5a04a1SMat Martineau u16 icid; 51678d5a04a1SMat Martineau 51688d5a04a1SMat Martineau if (cmd_len != sizeof(*rsp)) 51698d5a04a1SMat Martineau return -EPROTO; 51708d5a04a1SMat Martineau 51718d5a04a1SMat Martineau icid = le16_to_cpu(rsp->icid); 51728d5a04a1SMat Martineau 5173ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x", icid); 51748d5a04a1SMat Martineau 51753fd71a0aSMat Martineau chan = l2cap_get_chan_by_scid(conn, icid); 51763fd71a0aSMat Martineau if (!chan) 51773fd71a0aSMat Martineau return 0; 51783fd71a0aSMat Martineau 51793fd71a0aSMat Martineau __clear_chan_timer(chan); 51803fd71a0aSMat Martineau 51813fd71a0aSMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_CONFIRM_RSP) { 51823fd71a0aSMat Martineau chan->local_amp_id = chan->move_id; 51833fd71a0aSMat Martineau 51846ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR && chan->hs_hchan) 51853fd71a0aSMat Martineau __release_logical_link(chan); 51863fd71a0aSMat Martineau 51873fd71a0aSMat Martineau l2cap_move_done(chan); 51883fd71a0aSMat Martineau } 51893fd71a0aSMat Martineau 51903fd71a0aSMat Martineau l2cap_chan_unlock(chan); 51913fd71a0aSMat Martineau 51928d5a04a1SMat Martineau return 0; 51938d5a04a1SMat Martineau } 51948d5a04a1SMat Martineau 5195de73115aSClaudio Takahasi static inline int l2cap_conn_param_update_req(struct l2cap_conn *conn, 51962d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, 5197203e639eSJohan Hedberg u16 cmd_len, u8 *data) 5198de73115aSClaudio Takahasi { 5199de73115aSClaudio Takahasi struct hci_conn *hcon = conn->hcon; 5200de73115aSClaudio Takahasi struct l2cap_conn_param_update_req *req; 5201de73115aSClaudio Takahasi struct l2cap_conn_param_update_rsp rsp; 5202203e639eSJohan Hedberg u16 min, max, latency, to_multiplier; 52032ce603ebSClaudio Takahasi int err; 5204de73115aSClaudio Takahasi 520540bef302SJohan Hedberg if (hcon->role != HCI_ROLE_MASTER) 5206de73115aSClaudio Takahasi return -EINVAL; 5207de73115aSClaudio Takahasi 5208de73115aSClaudio Takahasi if (cmd_len != sizeof(struct l2cap_conn_param_update_req)) 5209de73115aSClaudio Takahasi return -EPROTO; 5210de73115aSClaudio Takahasi 5211de73115aSClaudio Takahasi req = (struct l2cap_conn_param_update_req *) data; 5212de73115aSClaudio Takahasi min = __le16_to_cpu(req->min); 5213de73115aSClaudio Takahasi max = __le16_to_cpu(req->max); 5214de73115aSClaudio Takahasi latency = __le16_to_cpu(req->latency); 5215de73115aSClaudio Takahasi to_multiplier = __le16_to_cpu(req->to_multiplier); 5216de73115aSClaudio Takahasi 5217de73115aSClaudio Takahasi BT_DBG("min 0x%4.4x max 0x%4.4x latency: 0x%4.4x Timeout: 0x%4.4x", 5218de73115aSClaudio Takahasi min, max, latency, to_multiplier); 5219de73115aSClaudio Takahasi 5220de73115aSClaudio Takahasi memset(&rsp, 0, sizeof(rsp)); 52212ce603ebSClaudio Takahasi 5222d4905f24SAndre Guedes err = hci_check_conn_params(min, max, latency, to_multiplier); 52232ce603ebSClaudio Takahasi if (err) 5224dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CONN_PARAM_REJECTED); 5225de73115aSClaudio Takahasi else 5226dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CONN_PARAM_ACCEPTED); 5227de73115aSClaudio Takahasi 5228de73115aSClaudio Takahasi l2cap_send_cmd(conn, cmd->ident, L2CAP_CONN_PARAM_UPDATE_RSP, 5229de73115aSClaudio Takahasi sizeof(rsp), &rsp); 5230de73115aSClaudio Takahasi 5231ffb5a827SAndre Guedes if (!err) { 5232f4869e2aSJohan Hedberg u8 store_hint; 5233ffb5a827SAndre Guedes 5234f4869e2aSJohan Hedberg store_hint = hci_le_conn_update(hcon, min, max, latency, 5235f4869e2aSJohan Hedberg to_multiplier); 5236f4869e2aSJohan Hedberg mgmt_new_conn_param(hcon->hdev, &hcon->dst, hcon->dst_type, 5237f4869e2aSJohan Hedberg store_hint, min, max, latency, 5238f4869e2aSJohan Hedberg to_multiplier); 5239f4869e2aSJohan Hedberg 5240ffb5a827SAndre Guedes } 52412ce603ebSClaudio Takahasi 5242de73115aSClaudio Takahasi return 0; 5243de73115aSClaudio Takahasi } 5244de73115aSClaudio Takahasi 5245f1496deeSJohan Hedberg static int l2cap_le_connect_rsp(struct l2cap_conn *conn, 5246f1496deeSJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 5247f1496deeSJohan Hedberg u8 *data) 5248f1496deeSJohan Hedberg { 5249f1496deeSJohan Hedberg struct l2cap_le_conn_rsp *rsp = (struct l2cap_le_conn_rsp *) data; 52503e64b7bdSJohan Hedberg struct hci_conn *hcon = conn->hcon; 5251f1496deeSJohan Hedberg u16 dcid, mtu, mps, credits, result; 5252f1496deeSJohan Hedberg struct l2cap_chan *chan; 52533e64b7bdSJohan Hedberg int err, sec_level; 5254f1496deeSJohan Hedberg 5255f1496deeSJohan Hedberg if (cmd_len < sizeof(*rsp)) 5256f1496deeSJohan Hedberg return -EPROTO; 5257f1496deeSJohan Hedberg 5258f1496deeSJohan Hedberg dcid = __le16_to_cpu(rsp->dcid); 5259f1496deeSJohan Hedberg mtu = __le16_to_cpu(rsp->mtu); 5260f1496deeSJohan Hedberg mps = __le16_to_cpu(rsp->mps); 5261f1496deeSJohan Hedberg credits = __le16_to_cpu(rsp->credits); 5262f1496deeSJohan Hedberg result = __le16_to_cpu(rsp->result); 5263f1496deeSJohan Hedberg 526440624183SJohan Hedberg if (result == L2CAP_CR_SUCCESS && (mtu < 23 || mps < 23 || 526540624183SJohan Hedberg dcid < L2CAP_CID_DYN_START || 526640624183SJohan Hedberg dcid > L2CAP_CID_LE_DYN_END)) 5267f1496deeSJohan Hedberg return -EPROTO; 5268f1496deeSJohan Hedberg 5269f1496deeSJohan Hedberg BT_DBG("dcid 0x%4.4x mtu %u mps %u credits %u result 0x%2.2x", 5270f1496deeSJohan Hedberg dcid, mtu, mps, credits, result); 5271f1496deeSJohan Hedberg 5272f1496deeSJohan Hedberg mutex_lock(&conn->chan_lock); 5273f1496deeSJohan Hedberg 5274f1496deeSJohan Hedberg chan = __l2cap_get_chan_by_ident(conn, cmd->ident); 5275f1496deeSJohan Hedberg if (!chan) { 5276f1496deeSJohan Hedberg err = -EBADSLT; 5277f1496deeSJohan Hedberg goto unlock; 5278f1496deeSJohan Hedberg } 5279f1496deeSJohan Hedberg 5280f1496deeSJohan Hedberg err = 0; 5281f1496deeSJohan Hedberg 5282f1496deeSJohan Hedberg l2cap_chan_lock(chan); 5283f1496deeSJohan Hedberg 5284f1496deeSJohan Hedberg switch (result) { 5285f1496deeSJohan Hedberg case L2CAP_CR_SUCCESS: 528640624183SJohan Hedberg if (__l2cap_get_chan_by_dcid(conn, dcid)) { 528740624183SJohan Hedberg err = -EBADSLT; 528840624183SJohan Hedberg break; 528940624183SJohan Hedberg } 529040624183SJohan Hedberg 5291f1496deeSJohan Hedberg chan->ident = 0; 5292f1496deeSJohan Hedberg chan->dcid = dcid; 5293f1496deeSJohan Hedberg chan->omtu = mtu; 5294f1496deeSJohan Hedberg chan->remote_mps = mps; 52950cd75f7eSJohan Hedberg chan->tx_credits = credits; 5296f1496deeSJohan Hedberg l2cap_chan_ready(chan); 5297f1496deeSJohan Hedberg break; 5298f1496deeSJohan Hedberg 52993e64b7bdSJohan Hedberg case L2CAP_CR_AUTHENTICATION: 53003e64b7bdSJohan Hedberg case L2CAP_CR_ENCRYPTION: 53013e64b7bdSJohan Hedberg /* If we already have MITM protection we can't do 53023e64b7bdSJohan Hedberg * anything. 53033e64b7bdSJohan Hedberg */ 53043e64b7bdSJohan Hedberg if (hcon->sec_level > BT_SECURITY_MEDIUM) { 53053e64b7bdSJohan Hedberg l2cap_chan_del(chan, ECONNREFUSED); 53063e64b7bdSJohan Hedberg break; 53073e64b7bdSJohan Hedberg } 53083e64b7bdSJohan Hedberg 53093e64b7bdSJohan Hedberg sec_level = hcon->sec_level + 1; 53103e64b7bdSJohan Hedberg if (chan->sec_level < sec_level) 53113e64b7bdSJohan Hedberg chan->sec_level = sec_level; 53123e64b7bdSJohan Hedberg 53133e64b7bdSJohan Hedberg /* We'll need to send a new Connect Request */ 53143e64b7bdSJohan Hedberg clear_bit(FLAG_LE_CONN_REQ_SENT, &chan->flags); 53153e64b7bdSJohan Hedberg 53163e64b7bdSJohan Hedberg smp_conn_security(hcon, chan->sec_level); 53173e64b7bdSJohan Hedberg break; 53183e64b7bdSJohan Hedberg 5319f1496deeSJohan Hedberg default: 5320f1496deeSJohan Hedberg l2cap_chan_del(chan, ECONNREFUSED); 5321f1496deeSJohan Hedberg break; 5322f1496deeSJohan Hedberg } 5323f1496deeSJohan Hedberg 5324f1496deeSJohan Hedberg l2cap_chan_unlock(chan); 5325f1496deeSJohan Hedberg 5326f1496deeSJohan Hedberg unlock: 5327f1496deeSJohan Hedberg mutex_unlock(&conn->chan_lock); 5328f1496deeSJohan Hedberg 5329f1496deeSJohan Hedberg return err; 5330f1496deeSJohan Hedberg } 5331f1496deeSJohan Hedberg 53323300d9a9SClaudio Takahasi static inline int l2cap_bredr_sig_cmd(struct l2cap_conn *conn, 53332d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, u16 cmd_len, 53342d792818SGustavo Padovan u8 *data) 53353300d9a9SClaudio Takahasi { 53363300d9a9SClaudio Takahasi int err = 0; 53373300d9a9SClaudio Takahasi 53383300d9a9SClaudio Takahasi switch (cmd->code) { 53393300d9a9SClaudio Takahasi case L2CAP_COMMAND_REJ: 5340cb3b3152SJohan Hedberg l2cap_command_rej(conn, cmd, cmd_len, data); 53413300d9a9SClaudio Takahasi break; 53423300d9a9SClaudio Takahasi 53433300d9a9SClaudio Takahasi case L2CAP_CONN_REQ: 5344cb3b3152SJohan Hedberg err = l2cap_connect_req(conn, cmd, cmd_len, data); 53453300d9a9SClaudio Takahasi break; 53463300d9a9SClaudio Takahasi 53473300d9a9SClaudio Takahasi case L2CAP_CONN_RSP: 5348f5a2598dSMat Martineau case L2CAP_CREATE_CHAN_RSP: 53499245e737SJohan Hedberg l2cap_connect_create_rsp(conn, cmd, cmd_len, data); 53503300d9a9SClaudio Takahasi break; 53513300d9a9SClaudio Takahasi 53523300d9a9SClaudio Takahasi case L2CAP_CONF_REQ: 53533300d9a9SClaudio Takahasi err = l2cap_config_req(conn, cmd, cmd_len, data); 53543300d9a9SClaudio Takahasi break; 53553300d9a9SClaudio Takahasi 53563300d9a9SClaudio Takahasi case L2CAP_CONF_RSP: 53579245e737SJohan Hedberg l2cap_config_rsp(conn, cmd, cmd_len, data); 53583300d9a9SClaudio Takahasi break; 53593300d9a9SClaudio Takahasi 53603300d9a9SClaudio Takahasi case L2CAP_DISCONN_REQ: 5361cb3b3152SJohan Hedberg err = l2cap_disconnect_req(conn, cmd, cmd_len, data); 53623300d9a9SClaudio Takahasi break; 53633300d9a9SClaudio Takahasi 53643300d9a9SClaudio Takahasi case L2CAP_DISCONN_RSP: 53659245e737SJohan Hedberg l2cap_disconnect_rsp(conn, cmd, cmd_len, data); 53663300d9a9SClaudio Takahasi break; 53673300d9a9SClaudio Takahasi 53683300d9a9SClaudio Takahasi case L2CAP_ECHO_REQ: 53693300d9a9SClaudio Takahasi l2cap_send_cmd(conn, cmd->ident, L2CAP_ECHO_RSP, cmd_len, data); 53703300d9a9SClaudio Takahasi break; 53713300d9a9SClaudio Takahasi 53723300d9a9SClaudio Takahasi case L2CAP_ECHO_RSP: 53733300d9a9SClaudio Takahasi break; 53743300d9a9SClaudio Takahasi 53753300d9a9SClaudio Takahasi case L2CAP_INFO_REQ: 5376cb3b3152SJohan Hedberg err = l2cap_information_req(conn, cmd, cmd_len, data); 53773300d9a9SClaudio Takahasi break; 53783300d9a9SClaudio Takahasi 53793300d9a9SClaudio Takahasi case L2CAP_INFO_RSP: 53809245e737SJohan Hedberg l2cap_information_rsp(conn, cmd, cmd_len, data); 53813300d9a9SClaudio Takahasi break; 53823300d9a9SClaudio Takahasi 5383f94ff6ffSMat Martineau case L2CAP_CREATE_CHAN_REQ: 5384f94ff6ffSMat Martineau err = l2cap_create_channel_req(conn, cmd, cmd_len, data); 5385f94ff6ffSMat Martineau break; 5386f94ff6ffSMat Martineau 53878d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_REQ: 53888d5a04a1SMat Martineau err = l2cap_move_channel_req(conn, cmd, cmd_len, data); 53898d5a04a1SMat Martineau break; 53908d5a04a1SMat Martineau 53918d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_RSP: 53929245e737SJohan Hedberg l2cap_move_channel_rsp(conn, cmd, cmd_len, data); 53938d5a04a1SMat Martineau break; 53948d5a04a1SMat Martineau 53958d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_CFM: 53968d5a04a1SMat Martineau err = l2cap_move_channel_confirm(conn, cmd, cmd_len, data); 53978d5a04a1SMat Martineau break; 53988d5a04a1SMat Martineau 53998d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_CFM_RSP: 54009245e737SJohan Hedberg l2cap_move_channel_confirm_rsp(conn, cmd, cmd_len, data); 54018d5a04a1SMat Martineau break; 54028d5a04a1SMat Martineau 54033300d9a9SClaudio Takahasi default: 54043300d9a9SClaudio Takahasi BT_ERR("Unknown BR/EDR signaling command 0x%2.2x", cmd->code); 54053300d9a9SClaudio Takahasi err = -EINVAL; 54063300d9a9SClaudio Takahasi break; 54073300d9a9SClaudio Takahasi } 54083300d9a9SClaudio Takahasi 54093300d9a9SClaudio Takahasi return err; 54103300d9a9SClaudio Takahasi } 54113300d9a9SClaudio Takahasi 541227e2d4c8SJohan Hedberg static int l2cap_le_connect_req(struct l2cap_conn *conn, 541327e2d4c8SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 541427e2d4c8SJohan Hedberg u8 *data) 541527e2d4c8SJohan Hedberg { 541627e2d4c8SJohan Hedberg struct l2cap_le_conn_req *req = (struct l2cap_le_conn_req *) data; 541727e2d4c8SJohan Hedberg struct l2cap_le_conn_rsp rsp; 541827e2d4c8SJohan Hedberg struct l2cap_chan *chan, *pchan; 54190cd75f7eSJohan Hedberg u16 dcid, scid, credits, mtu, mps; 542027e2d4c8SJohan Hedberg __le16 psm; 542127e2d4c8SJohan Hedberg u8 result; 542227e2d4c8SJohan Hedberg 542327e2d4c8SJohan Hedberg if (cmd_len != sizeof(*req)) 542427e2d4c8SJohan Hedberg return -EPROTO; 542527e2d4c8SJohan Hedberg 542627e2d4c8SJohan Hedberg scid = __le16_to_cpu(req->scid); 542727e2d4c8SJohan Hedberg mtu = __le16_to_cpu(req->mtu); 542827e2d4c8SJohan Hedberg mps = __le16_to_cpu(req->mps); 542927e2d4c8SJohan Hedberg psm = req->psm; 543027e2d4c8SJohan Hedberg dcid = 0; 54310cd75f7eSJohan Hedberg credits = 0; 543227e2d4c8SJohan Hedberg 543327e2d4c8SJohan Hedberg if (mtu < 23 || mps < 23) 543427e2d4c8SJohan Hedberg return -EPROTO; 543527e2d4c8SJohan Hedberg 543627e2d4c8SJohan Hedberg BT_DBG("psm 0x%2.2x scid 0x%4.4x mtu %u mps %u", __le16_to_cpu(psm), 543727e2d4c8SJohan Hedberg scid, mtu, mps); 543827e2d4c8SJohan Hedberg 543927e2d4c8SJohan Hedberg /* Check if we have socket listening on psm */ 544027e2d4c8SJohan Hedberg pchan = l2cap_global_chan_by_psm(BT_LISTEN, psm, &conn->hcon->src, 544127e2d4c8SJohan Hedberg &conn->hcon->dst, LE_LINK); 544227e2d4c8SJohan Hedberg if (!pchan) { 544327e2d4c8SJohan Hedberg result = L2CAP_CR_BAD_PSM; 544427e2d4c8SJohan Hedberg chan = NULL; 544527e2d4c8SJohan Hedberg goto response; 544627e2d4c8SJohan Hedberg } 544727e2d4c8SJohan Hedberg 544827e2d4c8SJohan Hedberg mutex_lock(&conn->chan_lock); 544927e2d4c8SJohan Hedberg l2cap_chan_lock(pchan); 545027e2d4c8SJohan Hedberg 545135dc6f83SJohan Hedberg if (!smp_sufficient_security(conn->hcon, pchan->sec_level, 545235dc6f83SJohan Hedberg SMP_ALLOW_STK)) { 545327e2d4c8SJohan Hedberg result = L2CAP_CR_AUTHENTICATION; 545427e2d4c8SJohan Hedberg chan = NULL; 545527e2d4c8SJohan Hedberg goto response_unlock; 545627e2d4c8SJohan Hedberg } 545727e2d4c8SJohan Hedberg 54588a7889ccSJohan Hedberg /* Check for valid dynamic CID range */ 54598a7889ccSJohan Hedberg if (scid < L2CAP_CID_DYN_START || scid > L2CAP_CID_LE_DYN_END) { 54608a7889ccSJohan Hedberg result = L2CAP_CR_INVALID_SCID; 54618a7889ccSJohan Hedberg chan = NULL; 54628a7889ccSJohan Hedberg goto response_unlock; 54638a7889ccSJohan Hedberg } 54648a7889ccSJohan Hedberg 546527e2d4c8SJohan Hedberg /* Check if we already have channel with that dcid */ 546627e2d4c8SJohan Hedberg if (__l2cap_get_chan_by_dcid(conn, scid)) { 54678a7889ccSJohan Hedberg result = L2CAP_CR_SCID_IN_USE; 546827e2d4c8SJohan Hedberg chan = NULL; 546927e2d4c8SJohan Hedberg goto response_unlock; 547027e2d4c8SJohan Hedberg } 547127e2d4c8SJohan Hedberg 547227e2d4c8SJohan Hedberg chan = pchan->ops->new_connection(pchan); 547327e2d4c8SJohan Hedberg if (!chan) { 547427e2d4c8SJohan Hedberg result = L2CAP_CR_NO_MEM; 547527e2d4c8SJohan Hedberg goto response_unlock; 547627e2d4c8SJohan Hedberg } 547727e2d4c8SJohan Hedberg 54780ce43ce6SJohan Hedberg l2cap_le_flowctl_init(chan); 54790ce43ce6SJohan Hedberg 548027e2d4c8SJohan Hedberg bacpy(&chan->src, &conn->hcon->src); 548127e2d4c8SJohan Hedberg bacpy(&chan->dst, &conn->hcon->dst); 5482a250e048SJohan Hedberg chan->src_type = bdaddr_src_type(conn->hcon); 5483a250e048SJohan Hedberg chan->dst_type = bdaddr_dst_type(conn->hcon); 548427e2d4c8SJohan Hedberg chan->psm = psm; 548527e2d4c8SJohan Hedberg chan->dcid = scid; 548627e2d4c8SJohan Hedberg chan->omtu = mtu; 548727e2d4c8SJohan Hedberg chan->remote_mps = mps; 54880cd75f7eSJohan Hedberg chan->tx_credits = __le16_to_cpu(req->credits); 548927e2d4c8SJohan Hedberg 549027e2d4c8SJohan Hedberg __l2cap_chan_add(conn, chan); 549127e2d4c8SJohan Hedberg dcid = chan->scid; 54920cd75f7eSJohan Hedberg credits = chan->rx_credits; 549327e2d4c8SJohan Hedberg 549427e2d4c8SJohan Hedberg __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 549527e2d4c8SJohan Hedberg 549627e2d4c8SJohan Hedberg chan->ident = cmd->ident; 549727e2d4c8SJohan Hedberg 549827e2d4c8SJohan Hedberg if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 549927e2d4c8SJohan Hedberg l2cap_state_change(chan, BT_CONNECT2); 5500434714dcSJohan Hedberg /* The following result value is actually not defined 5501434714dcSJohan Hedberg * for LE CoC but we use it to let the function know 5502434714dcSJohan Hedberg * that it should bail out after doing its cleanup 5503434714dcSJohan Hedberg * instead of sending a response. 5504434714dcSJohan Hedberg */ 550527e2d4c8SJohan Hedberg result = L2CAP_CR_PEND; 550627e2d4c8SJohan Hedberg chan->ops->defer(chan); 550727e2d4c8SJohan Hedberg } else { 550827e2d4c8SJohan Hedberg l2cap_chan_ready(chan); 550927e2d4c8SJohan Hedberg result = L2CAP_CR_SUCCESS; 551027e2d4c8SJohan Hedberg } 551127e2d4c8SJohan Hedberg 551227e2d4c8SJohan Hedberg response_unlock: 551327e2d4c8SJohan Hedberg l2cap_chan_unlock(pchan); 551427e2d4c8SJohan Hedberg mutex_unlock(&conn->chan_lock); 5515a24cce14SJohan Hedberg l2cap_chan_put(pchan); 551627e2d4c8SJohan Hedberg 551727e2d4c8SJohan Hedberg if (result == L2CAP_CR_PEND) 551827e2d4c8SJohan Hedberg return 0; 551927e2d4c8SJohan Hedberg 552027e2d4c8SJohan Hedberg response: 552127e2d4c8SJohan Hedberg if (chan) { 552227e2d4c8SJohan Hedberg rsp.mtu = cpu_to_le16(chan->imtu); 55233916aed8SJohan Hedberg rsp.mps = cpu_to_le16(chan->mps); 552427e2d4c8SJohan Hedberg } else { 552527e2d4c8SJohan Hedberg rsp.mtu = 0; 552627e2d4c8SJohan Hedberg rsp.mps = 0; 552727e2d4c8SJohan Hedberg } 552827e2d4c8SJohan Hedberg 552927e2d4c8SJohan Hedberg rsp.dcid = cpu_to_le16(dcid); 55300cd75f7eSJohan Hedberg rsp.credits = cpu_to_le16(credits); 553127e2d4c8SJohan Hedberg rsp.result = cpu_to_le16(result); 553227e2d4c8SJohan Hedberg 553327e2d4c8SJohan Hedberg l2cap_send_cmd(conn, cmd->ident, L2CAP_LE_CONN_RSP, sizeof(rsp), &rsp); 553427e2d4c8SJohan Hedberg 553527e2d4c8SJohan Hedberg return 0; 553627e2d4c8SJohan Hedberg } 553727e2d4c8SJohan Hedberg 5538fad5fc89SJohan Hedberg static inline int l2cap_le_credits(struct l2cap_conn *conn, 5539fad5fc89SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 5540fad5fc89SJohan Hedberg u8 *data) 5541fad5fc89SJohan Hedberg { 5542fad5fc89SJohan Hedberg struct l2cap_le_credits *pkt; 5543fad5fc89SJohan Hedberg struct l2cap_chan *chan; 55440f1bfe4eSJohan Hedberg u16 cid, credits, max_credits; 5545fad5fc89SJohan Hedberg 5546fad5fc89SJohan Hedberg if (cmd_len != sizeof(*pkt)) 5547fad5fc89SJohan Hedberg return -EPROTO; 5548fad5fc89SJohan Hedberg 5549fad5fc89SJohan Hedberg pkt = (struct l2cap_le_credits *) data; 5550fad5fc89SJohan Hedberg cid = __le16_to_cpu(pkt->cid); 5551fad5fc89SJohan Hedberg credits = __le16_to_cpu(pkt->credits); 5552fad5fc89SJohan Hedberg 5553fad5fc89SJohan Hedberg BT_DBG("cid 0x%4.4x credits 0x%4.4x", cid, credits); 5554fad5fc89SJohan Hedberg 5555fad5fc89SJohan Hedberg chan = l2cap_get_chan_by_dcid(conn, cid); 5556fad5fc89SJohan Hedberg if (!chan) 5557fad5fc89SJohan Hedberg return -EBADSLT; 5558fad5fc89SJohan Hedberg 55590f1bfe4eSJohan Hedberg max_credits = LE_FLOWCTL_MAX_CREDITS - chan->tx_credits; 55600f1bfe4eSJohan Hedberg if (credits > max_credits) { 55610f1bfe4eSJohan Hedberg BT_ERR("LE credits overflow"); 55620f1bfe4eSJohan Hedberg l2cap_send_disconn_req(chan, ECONNRESET); 5563ee93053dSMartin Townsend l2cap_chan_unlock(chan); 55640f1bfe4eSJohan Hedberg 55650f1bfe4eSJohan Hedberg /* Return 0 so that we don't trigger an unnecessary 55660f1bfe4eSJohan Hedberg * command reject packet. 55670f1bfe4eSJohan Hedberg */ 55680f1bfe4eSJohan Hedberg return 0; 55690f1bfe4eSJohan Hedberg } 55700f1bfe4eSJohan Hedberg 5571fad5fc89SJohan Hedberg chan->tx_credits += credits; 5572fad5fc89SJohan Hedberg 5573fad5fc89SJohan Hedberg while (chan->tx_credits && !skb_queue_empty(&chan->tx_q)) { 5574fad5fc89SJohan Hedberg l2cap_do_send(chan, skb_dequeue(&chan->tx_q)); 5575fad5fc89SJohan Hedberg chan->tx_credits--; 5576fad5fc89SJohan Hedberg } 5577fad5fc89SJohan Hedberg 5578fad5fc89SJohan Hedberg if (chan->tx_credits) 5579fad5fc89SJohan Hedberg chan->ops->resume(chan); 5580fad5fc89SJohan Hedberg 5581fad5fc89SJohan Hedberg l2cap_chan_unlock(chan); 5582fad5fc89SJohan Hedberg 5583fad5fc89SJohan Hedberg return 0; 5584fad5fc89SJohan Hedberg } 5585fad5fc89SJohan Hedberg 558671fb4197SJohan Hedberg static inline int l2cap_le_command_rej(struct l2cap_conn *conn, 558771fb4197SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 558871fb4197SJohan Hedberg u8 *data) 558971fb4197SJohan Hedberg { 559071fb4197SJohan Hedberg struct l2cap_cmd_rej_unk *rej = (struct l2cap_cmd_rej_unk *) data; 559171fb4197SJohan Hedberg struct l2cap_chan *chan; 559271fb4197SJohan Hedberg 559371fb4197SJohan Hedberg if (cmd_len < sizeof(*rej)) 559471fb4197SJohan Hedberg return -EPROTO; 559571fb4197SJohan Hedberg 559671fb4197SJohan Hedberg mutex_lock(&conn->chan_lock); 559771fb4197SJohan Hedberg 559871fb4197SJohan Hedberg chan = __l2cap_get_chan_by_ident(conn, cmd->ident); 559971fb4197SJohan Hedberg if (!chan) 560071fb4197SJohan Hedberg goto done; 560171fb4197SJohan Hedberg 560271fb4197SJohan Hedberg l2cap_chan_lock(chan); 560371fb4197SJohan Hedberg l2cap_chan_del(chan, ECONNREFUSED); 560471fb4197SJohan Hedberg l2cap_chan_unlock(chan); 560571fb4197SJohan Hedberg 560671fb4197SJohan Hedberg done: 560771fb4197SJohan Hedberg mutex_unlock(&conn->chan_lock); 560871fb4197SJohan Hedberg return 0; 560971fb4197SJohan Hedberg } 561071fb4197SJohan Hedberg 56113300d9a9SClaudio Takahasi static inline int l2cap_le_sig_cmd(struct l2cap_conn *conn, 5612203e639eSJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 5613203e639eSJohan Hedberg u8 *data) 56143300d9a9SClaudio Takahasi { 5615b5ecba64SJohan Hedberg int err = 0; 5616b5ecba64SJohan Hedberg 56173300d9a9SClaudio Takahasi switch (cmd->code) { 56183300d9a9SClaudio Takahasi case L2CAP_COMMAND_REJ: 561971fb4197SJohan Hedberg l2cap_le_command_rej(conn, cmd, cmd_len, data); 5620b5ecba64SJohan Hedberg break; 56213300d9a9SClaudio Takahasi 56223300d9a9SClaudio Takahasi case L2CAP_CONN_PARAM_UPDATE_REQ: 5623b5ecba64SJohan Hedberg err = l2cap_conn_param_update_req(conn, cmd, cmd_len, data); 5624b5ecba64SJohan Hedberg break; 56253300d9a9SClaudio Takahasi 56263300d9a9SClaudio Takahasi case L2CAP_CONN_PARAM_UPDATE_RSP: 5627b5ecba64SJohan Hedberg break; 56283300d9a9SClaudio Takahasi 5629f1496deeSJohan Hedberg case L2CAP_LE_CONN_RSP: 5630f1496deeSJohan Hedberg l2cap_le_connect_rsp(conn, cmd, cmd_len, data); 5631b5ecba64SJohan Hedberg break; 5632f1496deeSJohan Hedberg 563327e2d4c8SJohan Hedberg case L2CAP_LE_CONN_REQ: 5634b5ecba64SJohan Hedberg err = l2cap_le_connect_req(conn, cmd, cmd_len, data); 5635b5ecba64SJohan Hedberg break; 563627e2d4c8SJohan Hedberg 5637fad5fc89SJohan Hedberg case L2CAP_LE_CREDITS: 5638fad5fc89SJohan Hedberg err = l2cap_le_credits(conn, cmd, cmd_len, data); 5639fad5fc89SJohan Hedberg break; 5640fad5fc89SJohan Hedberg 56413defe01aSJohan Hedberg case L2CAP_DISCONN_REQ: 5642b5ecba64SJohan Hedberg err = l2cap_disconnect_req(conn, cmd, cmd_len, data); 5643b5ecba64SJohan Hedberg break; 56443defe01aSJohan Hedberg 56453defe01aSJohan Hedberg case L2CAP_DISCONN_RSP: 56463defe01aSJohan Hedberg l2cap_disconnect_rsp(conn, cmd, cmd_len, data); 5647b5ecba64SJohan Hedberg break; 56483defe01aSJohan Hedberg 56493300d9a9SClaudio Takahasi default: 56503300d9a9SClaudio Takahasi BT_ERR("Unknown LE signaling command 0x%2.2x", cmd->code); 5651b5ecba64SJohan Hedberg err = -EINVAL; 5652b5ecba64SJohan Hedberg break; 56533300d9a9SClaudio Takahasi } 5654b5ecba64SJohan Hedberg 5655b5ecba64SJohan Hedberg return err; 56563300d9a9SClaudio Takahasi } 56573300d9a9SClaudio Takahasi 5658c5623556SJohan Hedberg static inline void l2cap_le_sig_channel(struct l2cap_conn *conn, 5659c5623556SJohan Hedberg struct sk_buff *skb) 5660c5623556SJohan Hedberg { 566169c4e4e8SJohan Hedberg struct hci_conn *hcon = conn->hcon; 56624f3e219dSMarcel Holtmann struct l2cap_cmd_hdr *cmd; 56634f3e219dSMarcel Holtmann u16 len; 5664c5623556SJohan Hedberg int err; 5665c5623556SJohan Hedberg 566669c4e4e8SJohan Hedberg if (hcon->type != LE_LINK) 56673b166295SMarcel Holtmann goto drop; 566869c4e4e8SJohan Hedberg 56694f3e219dSMarcel Holtmann if (skb->len < L2CAP_CMD_HDR_SIZE) 56704f3e219dSMarcel Holtmann goto drop; 5671c5623556SJohan Hedberg 56724f3e219dSMarcel Holtmann cmd = (void *) skb->data; 56734f3e219dSMarcel Holtmann skb_pull(skb, L2CAP_CMD_HDR_SIZE); 5674c5623556SJohan Hedberg 56754f3e219dSMarcel Holtmann len = le16_to_cpu(cmd->len); 5676c5623556SJohan Hedberg 56774f3e219dSMarcel Holtmann BT_DBG("code 0x%2.2x len %d id 0x%2.2x", cmd->code, len, cmd->ident); 56784f3e219dSMarcel Holtmann 56794f3e219dSMarcel Holtmann if (len != skb->len || !cmd->ident) { 5680c5623556SJohan Hedberg BT_DBG("corrupted command"); 56814f3e219dSMarcel Holtmann goto drop; 5682c5623556SJohan Hedberg } 5683c5623556SJohan Hedberg 5684203e639eSJohan Hedberg err = l2cap_le_sig_cmd(conn, cmd, len, skb->data); 5685c5623556SJohan Hedberg if (err) { 5686c5623556SJohan Hedberg struct l2cap_cmd_rej_unk rej; 5687c5623556SJohan Hedberg 5688c5623556SJohan Hedberg BT_ERR("Wrong link type (%d)", err); 5689c5623556SJohan Hedberg 5690dcf4adbfSJoe Perches rej.reason = cpu_to_le16(L2CAP_REJ_NOT_UNDERSTOOD); 56914f3e219dSMarcel Holtmann l2cap_send_cmd(conn, cmd->ident, L2CAP_COMMAND_REJ, 5692c5623556SJohan Hedberg sizeof(rej), &rej); 5693c5623556SJohan Hedberg } 5694c5623556SJohan Hedberg 56953b166295SMarcel Holtmann drop: 5696c5623556SJohan Hedberg kfree_skb(skb); 5697c5623556SJohan Hedberg } 5698c5623556SJohan Hedberg 56993300d9a9SClaudio Takahasi static inline void l2cap_sig_channel(struct l2cap_conn *conn, 57003300d9a9SClaudio Takahasi struct sk_buff *skb) 57010a708f8fSGustavo F. Padovan { 570269c4e4e8SJohan Hedberg struct hci_conn *hcon = conn->hcon; 57030a708f8fSGustavo F. Padovan u8 *data = skb->data; 57040a708f8fSGustavo F. Padovan int len = skb->len; 57050a708f8fSGustavo F. Padovan struct l2cap_cmd_hdr cmd; 57063300d9a9SClaudio Takahasi int err; 57070a708f8fSGustavo F. Padovan 57080a708f8fSGustavo F. Padovan l2cap_raw_recv(conn, skb); 57090a708f8fSGustavo F. Padovan 571069c4e4e8SJohan Hedberg if (hcon->type != ACL_LINK) 57113b166295SMarcel Holtmann goto drop; 571269c4e4e8SJohan Hedberg 57130a708f8fSGustavo F. Padovan while (len >= L2CAP_CMD_HDR_SIZE) { 57140a708f8fSGustavo F. Padovan u16 cmd_len; 57150a708f8fSGustavo F. Padovan memcpy(&cmd, data, L2CAP_CMD_HDR_SIZE); 57160a708f8fSGustavo F. Padovan data += L2CAP_CMD_HDR_SIZE; 57170a708f8fSGustavo F. Padovan len -= L2CAP_CMD_HDR_SIZE; 57180a708f8fSGustavo F. Padovan 57190a708f8fSGustavo F. Padovan cmd_len = le16_to_cpu(cmd.len); 57200a708f8fSGustavo F. Padovan 57212d792818SGustavo Padovan BT_DBG("code 0x%2.2x len %d id 0x%2.2x", cmd.code, cmd_len, 57222d792818SGustavo Padovan cmd.ident); 57230a708f8fSGustavo F. Padovan 57240a708f8fSGustavo F. Padovan if (cmd_len > len || !cmd.ident) { 57250a708f8fSGustavo F. Padovan BT_DBG("corrupted command"); 57260a708f8fSGustavo F. Padovan break; 57270a708f8fSGustavo F. Padovan } 57280a708f8fSGustavo F. Padovan 57293300d9a9SClaudio Takahasi err = l2cap_bredr_sig_cmd(conn, &cmd, cmd_len, data); 57300a708f8fSGustavo F. Padovan if (err) { 5731e2fd318eSIlia Kolomisnky struct l2cap_cmd_rej_unk rej; 57322c6d1a2eSGustavo F. Padovan 57332c6d1a2eSGustavo F. Padovan BT_ERR("Wrong link type (%d)", err); 57340a708f8fSGustavo F. Padovan 5735dcf4adbfSJoe Perches rej.reason = cpu_to_le16(L2CAP_REJ_NOT_UNDERSTOOD); 57362d792818SGustavo Padovan l2cap_send_cmd(conn, cmd.ident, L2CAP_COMMAND_REJ, 57372d792818SGustavo Padovan sizeof(rej), &rej); 57380a708f8fSGustavo F. Padovan } 57390a708f8fSGustavo F. Padovan 57400a708f8fSGustavo F. Padovan data += cmd_len; 57410a708f8fSGustavo F. Padovan len -= cmd_len; 57420a708f8fSGustavo F. Padovan } 57430a708f8fSGustavo F. Padovan 57443b166295SMarcel Holtmann drop: 57450a708f8fSGustavo F. Padovan kfree_skb(skb); 57460a708f8fSGustavo F. Padovan } 57470a708f8fSGustavo F. Padovan 574847d1ec61SGustavo F. Padovan static int l2cap_check_fcs(struct l2cap_chan *chan, struct sk_buff *skb) 57490a708f8fSGustavo F. Padovan { 57500a708f8fSGustavo F. Padovan u16 our_fcs, rcv_fcs; 5751e4ca6d98SAndrei Emeltchenko int hdr_size; 5752e4ca6d98SAndrei Emeltchenko 5753e4ca6d98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 5754e4ca6d98SAndrei Emeltchenko hdr_size = L2CAP_EXT_HDR_SIZE; 5755e4ca6d98SAndrei Emeltchenko else 5756e4ca6d98SAndrei Emeltchenko hdr_size = L2CAP_ENH_HDR_SIZE; 57570a708f8fSGustavo F. Padovan 575847d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 575903a51213SAndrei Emeltchenko skb_trim(skb, skb->len - L2CAP_FCS_SIZE); 57600a708f8fSGustavo F. Padovan rcv_fcs = get_unaligned_le16(skb->data + skb->len); 57610a708f8fSGustavo F. Padovan our_fcs = crc16(0, skb->data - hdr_size, skb->len + hdr_size); 57620a708f8fSGustavo F. Padovan 57630a708f8fSGustavo F. Padovan if (our_fcs != rcv_fcs) 57640a708f8fSGustavo F. Padovan return -EBADMSG; 57650a708f8fSGustavo F. Padovan } 57660a708f8fSGustavo F. Padovan return 0; 57670a708f8fSGustavo F. Padovan } 57680a708f8fSGustavo F. Padovan 57696ea00485SMat Martineau static void l2cap_send_i_or_rr_or_rnr(struct l2cap_chan *chan) 57700a708f8fSGustavo F. Padovan { 5771e31f7633SMat Martineau struct l2cap_ctrl control; 57720a708f8fSGustavo F. Padovan 5773e31f7633SMat Martineau BT_DBG("chan %p", chan); 57740a708f8fSGustavo F. Padovan 5775e31f7633SMat Martineau memset(&control, 0, sizeof(control)); 5776e31f7633SMat Martineau control.sframe = 1; 5777e31f7633SMat Martineau control.final = 1; 5778e31f7633SMat Martineau control.reqseq = chan->buffer_seq; 5779e31f7633SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 57800a708f8fSGustavo F. Padovan 5781e2ab4353SGustavo F. Padovan if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 5782e31f7633SMat Martineau control.super = L2CAP_SUPER_RNR; 5783e31f7633SMat Martineau l2cap_send_sframe(chan, &control); 57840a708f8fSGustavo F. Padovan } 57850a708f8fSGustavo F. Padovan 5786e31f7633SMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, &chan->conn_state) && 5787e31f7633SMat Martineau chan->unacked_frames > 0) 5788e31f7633SMat Martineau __set_retrans_timer(chan); 57890a708f8fSGustavo F. Padovan 5790e31f7633SMat Martineau /* Send pending iframes */ 5791525cd185SGustavo F. Padovan l2cap_ertm_send(chan); 57920a708f8fSGustavo F. Padovan 5793e2ab4353SGustavo F. Padovan if (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state) && 5794e31f7633SMat Martineau test_bit(CONN_SEND_FBIT, &chan->conn_state)) { 5795e31f7633SMat Martineau /* F-bit wasn't sent in an s-frame or i-frame yet, so 5796e31f7633SMat Martineau * send it now. 5797e31f7633SMat Martineau */ 5798e31f7633SMat Martineau control.super = L2CAP_SUPER_RR; 5799e31f7633SMat Martineau l2cap_send_sframe(chan, &control); 58000a708f8fSGustavo F. Padovan } 58010a708f8fSGustavo F. Padovan } 58020a708f8fSGustavo F. Padovan 58032d792818SGustavo Padovan static void append_skb_frag(struct sk_buff *skb, struct sk_buff *new_frag, 58042d792818SGustavo Padovan struct sk_buff **last_frag) 58050a708f8fSGustavo F. Padovan { 580684084a31SMat Martineau /* skb->len reflects data in skb as well as all fragments 580784084a31SMat Martineau * skb->data_len reflects only data in fragments 580884084a31SMat Martineau */ 580984084a31SMat Martineau if (!skb_has_frag_list(skb)) 581084084a31SMat Martineau skb_shinfo(skb)->frag_list = new_frag; 581184084a31SMat Martineau 581284084a31SMat Martineau new_frag->next = NULL; 581384084a31SMat Martineau 581484084a31SMat Martineau (*last_frag)->next = new_frag; 581584084a31SMat Martineau *last_frag = new_frag; 581684084a31SMat Martineau 581784084a31SMat Martineau skb->len += new_frag->len; 581884084a31SMat Martineau skb->data_len += new_frag->len; 581984084a31SMat Martineau skb->truesize += new_frag->truesize; 582084084a31SMat Martineau } 582184084a31SMat Martineau 58224b51dae9SMat Martineau static int l2cap_reassemble_sdu(struct l2cap_chan *chan, struct sk_buff *skb, 58234b51dae9SMat Martineau struct l2cap_ctrl *control) 582484084a31SMat Martineau { 582584084a31SMat Martineau int err = -EINVAL; 58260a708f8fSGustavo F. Padovan 58274b51dae9SMat Martineau switch (control->sar) { 58287e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_UNSEGMENTED: 582984084a31SMat Martineau if (chan->sdu) 583084084a31SMat Martineau break; 58310a708f8fSGustavo F. Padovan 583280b98027SGustavo Padovan err = chan->ops->recv(chan, skb); 583384084a31SMat Martineau break; 58340a708f8fSGustavo F. Padovan 58357e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_START: 583684084a31SMat Martineau if (chan->sdu) 583784084a31SMat Martineau break; 58380a708f8fSGustavo F. Padovan 5839dbb50887SDaniel Borkmann if (!pskb_may_pull(skb, L2CAP_SDULEN_SIZE)) 5840dbb50887SDaniel Borkmann break; 5841dbb50887SDaniel Borkmann 58426f61fd47SGustavo F. Padovan chan->sdu_len = get_unaligned_le16(skb->data); 584303a51213SAndrei Emeltchenko skb_pull(skb, L2CAP_SDULEN_SIZE); 58440a708f8fSGustavo F. Padovan 584584084a31SMat Martineau if (chan->sdu_len > chan->imtu) { 584684084a31SMat Martineau err = -EMSGSIZE; 584784084a31SMat Martineau break; 584884084a31SMat Martineau } 58490a708f8fSGustavo F. Padovan 585084084a31SMat Martineau if (skb->len >= chan->sdu_len) 585184084a31SMat Martineau break; 585284084a31SMat Martineau 585384084a31SMat Martineau chan->sdu = skb; 585484084a31SMat Martineau chan->sdu_last_frag = skb; 585584084a31SMat Martineau 585684084a31SMat Martineau skb = NULL; 585784084a31SMat Martineau err = 0; 58580a708f8fSGustavo F. Padovan break; 58590a708f8fSGustavo F. Padovan 58607e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_CONTINUE: 58616f61fd47SGustavo F. Padovan if (!chan->sdu) 586284084a31SMat Martineau break; 58630a708f8fSGustavo F. Padovan 586484084a31SMat Martineau append_skb_frag(chan->sdu, skb, 586584084a31SMat Martineau &chan->sdu_last_frag); 586684084a31SMat Martineau skb = NULL; 58670a708f8fSGustavo F. Padovan 586884084a31SMat Martineau if (chan->sdu->len >= chan->sdu_len) 586984084a31SMat Martineau break; 58700a708f8fSGustavo F. Padovan 587184084a31SMat Martineau err = 0; 58720a708f8fSGustavo F. Padovan break; 58730a708f8fSGustavo F. Padovan 58747e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_END: 58756f61fd47SGustavo F. Padovan if (!chan->sdu) 587684084a31SMat Martineau break; 58770a708f8fSGustavo F. Padovan 587884084a31SMat Martineau append_skb_frag(chan->sdu, skb, 587984084a31SMat Martineau &chan->sdu_last_frag); 588084084a31SMat Martineau skb = NULL; 58810a708f8fSGustavo F. Padovan 588284084a31SMat Martineau if (chan->sdu->len != chan->sdu_len) 588384084a31SMat Martineau break; 58840a708f8fSGustavo F. Padovan 588580b98027SGustavo Padovan err = chan->ops->recv(chan, chan->sdu); 58860a708f8fSGustavo F. Padovan 588784084a31SMat Martineau if (!err) { 588884084a31SMat Martineau /* Reassembly complete */ 588984084a31SMat Martineau chan->sdu = NULL; 589084084a31SMat Martineau chan->sdu_last_frag = NULL; 589184084a31SMat Martineau chan->sdu_len = 0; 58920a708f8fSGustavo F. Padovan } 58930a708f8fSGustavo F. Padovan break; 58940a708f8fSGustavo F. Padovan } 58950a708f8fSGustavo F. Padovan 589684084a31SMat Martineau if (err) { 58970a708f8fSGustavo F. Padovan kfree_skb(skb); 58986f61fd47SGustavo F. Padovan kfree_skb(chan->sdu); 58996f61fd47SGustavo F. Padovan chan->sdu = NULL; 590084084a31SMat Martineau chan->sdu_last_frag = NULL; 590184084a31SMat Martineau chan->sdu_len = 0; 590284084a31SMat Martineau } 59030a708f8fSGustavo F. Padovan 590484084a31SMat Martineau return err; 59050a708f8fSGustavo F. Padovan } 59060a708f8fSGustavo F. Padovan 590732b32735SMat Martineau static int l2cap_resegment(struct l2cap_chan *chan) 590832b32735SMat Martineau { 590932b32735SMat Martineau /* Placeholder */ 591032b32735SMat Martineau return 0; 591132b32735SMat Martineau } 591232b32735SMat Martineau 5913e328140fSMat Martineau void l2cap_chan_busy(struct l2cap_chan *chan, int busy) 59140a708f8fSGustavo F. Padovan { 591561aa4f5bSMat Martineau u8 event; 591661aa4f5bSMat Martineau 591761aa4f5bSMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 591861aa4f5bSMat Martineau return; 591961aa4f5bSMat Martineau 592061aa4f5bSMat Martineau event = busy ? L2CAP_EV_LOCAL_BUSY_DETECTED : L2CAP_EV_LOCAL_BUSY_CLEAR; 5921401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, event); 59220a708f8fSGustavo F. Padovan } 59230a708f8fSGustavo F. Padovan 5924d2a7ac5dSMat Martineau static int l2cap_rx_queued_iframes(struct l2cap_chan *chan) 5925d2a7ac5dSMat Martineau { 592663838725SMat Martineau int err = 0; 592763838725SMat Martineau /* Pass sequential frames to l2cap_reassemble_sdu() 592863838725SMat Martineau * until a gap is encountered. 592963838725SMat Martineau */ 593063838725SMat Martineau 593163838725SMat Martineau BT_DBG("chan %p", chan); 593263838725SMat Martineau 593363838725SMat Martineau while (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 593463838725SMat Martineau struct sk_buff *skb; 593563838725SMat Martineau BT_DBG("Searching for skb with txseq %d (queue len %d)", 593663838725SMat Martineau chan->buffer_seq, skb_queue_len(&chan->srej_q)); 593763838725SMat Martineau 593863838725SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->srej_q, chan->buffer_seq); 593963838725SMat Martineau 594063838725SMat Martineau if (!skb) 594163838725SMat Martineau break; 594263838725SMat Martineau 594363838725SMat Martineau skb_unlink(skb, &chan->srej_q); 594463838725SMat Martineau chan->buffer_seq = __next_seq(chan, chan->buffer_seq); 5945a4368ff3SJohan Hedberg err = l2cap_reassemble_sdu(chan, skb, &bt_cb(skb)->l2cap); 594663838725SMat Martineau if (err) 594763838725SMat Martineau break; 594863838725SMat Martineau } 594963838725SMat Martineau 595063838725SMat Martineau if (skb_queue_empty(&chan->srej_q)) { 595163838725SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 595263838725SMat Martineau l2cap_send_ack(chan); 595363838725SMat Martineau } 595463838725SMat Martineau 595563838725SMat Martineau return err; 5956d2a7ac5dSMat Martineau } 5957d2a7ac5dSMat Martineau 5958d2a7ac5dSMat Martineau static void l2cap_handle_srej(struct l2cap_chan *chan, 5959d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 5960d2a7ac5dSMat Martineau { 5961f80842a8SMat Martineau struct sk_buff *skb; 5962f80842a8SMat Martineau 5963f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 5964f80842a8SMat Martineau 5965f80842a8SMat Martineau if (control->reqseq == chan->next_tx_seq) { 5966f80842a8SMat Martineau BT_DBG("Invalid reqseq %d, disconnecting", control->reqseq); 59675e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5968f80842a8SMat Martineau return; 5969f80842a8SMat Martineau } 5970f80842a8SMat Martineau 5971f80842a8SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, control->reqseq); 5972f80842a8SMat Martineau 5973f80842a8SMat Martineau if (skb == NULL) { 5974f80842a8SMat Martineau BT_DBG("Seq %d not available for retransmission", 5975f80842a8SMat Martineau control->reqseq); 5976f80842a8SMat Martineau return; 5977f80842a8SMat Martineau } 5978f80842a8SMat Martineau 5979a4368ff3SJohan Hedberg if (chan->max_tx != 0 && bt_cb(skb)->l2cap.retries >= chan->max_tx) { 5980f80842a8SMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 59815e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5982f80842a8SMat Martineau return; 5983f80842a8SMat Martineau } 5984f80842a8SMat Martineau 5985f80842a8SMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 5986f80842a8SMat Martineau 5987f80842a8SMat Martineau if (control->poll) { 5988f80842a8SMat Martineau l2cap_pass_to_tx(chan, control); 5989f80842a8SMat Martineau 5990f80842a8SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 5991f80842a8SMat Martineau l2cap_retransmit(chan, control); 5992f80842a8SMat Martineau l2cap_ertm_send(chan); 5993f80842a8SMat Martineau 5994f80842a8SMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) { 5995f80842a8SMat Martineau set_bit(CONN_SREJ_ACT, &chan->conn_state); 5996f80842a8SMat Martineau chan->srej_save_reqseq = control->reqseq; 5997f80842a8SMat Martineau } 5998f80842a8SMat Martineau } else { 5999f80842a8SMat Martineau l2cap_pass_to_tx_fbit(chan, control); 6000f80842a8SMat Martineau 6001f80842a8SMat Martineau if (control->final) { 6002f80842a8SMat Martineau if (chan->srej_save_reqseq != control->reqseq || 6003f80842a8SMat Martineau !test_and_clear_bit(CONN_SREJ_ACT, 6004f80842a8SMat Martineau &chan->conn_state)) 6005f80842a8SMat Martineau l2cap_retransmit(chan, control); 6006f80842a8SMat Martineau } else { 6007f80842a8SMat Martineau l2cap_retransmit(chan, control); 6008f80842a8SMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) { 6009f80842a8SMat Martineau set_bit(CONN_SREJ_ACT, &chan->conn_state); 6010f80842a8SMat Martineau chan->srej_save_reqseq = control->reqseq; 6011f80842a8SMat Martineau } 6012f80842a8SMat Martineau } 6013f80842a8SMat Martineau } 6014d2a7ac5dSMat Martineau } 6015d2a7ac5dSMat Martineau 6016d2a7ac5dSMat Martineau static void l2cap_handle_rej(struct l2cap_chan *chan, 6017d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 6018d2a7ac5dSMat Martineau { 6019fcd289dfSMat Martineau struct sk_buff *skb; 6020fcd289dfSMat Martineau 6021fcd289dfSMat Martineau BT_DBG("chan %p, control %p", chan, control); 6022fcd289dfSMat Martineau 6023fcd289dfSMat Martineau if (control->reqseq == chan->next_tx_seq) { 6024fcd289dfSMat Martineau BT_DBG("Invalid reqseq %d, disconnecting", control->reqseq); 60255e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6026fcd289dfSMat Martineau return; 6027fcd289dfSMat Martineau } 6028fcd289dfSMat Martineau 6029fcd289dfSMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, control->reqseq); 6030fcd289dfSMat Martineau 6031fcd289dfSMat Martineau if (chan->max_tx && skb && 6032a4368ff3SJohan Hedberg bt_cb(skb)->l2cap.retries >= chan->max_tx) { 6033fcd289dfSMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 60345e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6035fcd289dfSMat Martineau return; 6036fcd289dfSMat Martineau } 6037fcd289dfSMat Martineau 6038fcd289dfSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6039fcd289dfSMat Martineau 6040fcd289dfSMat Martineau l2cap_pass_to_tx(chan, control); 6041fcd289dfSMat Martineau 6042fcd289dfSMat Martineau if (control->final) { 6043fcd289dfSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, &chan->conn_state)) 6044fcd289dfSMat Martineau l2cap_retransmit_all(chan, control); 6045fcd289dfSMat Martineau } else { 6046fcd289dfSMat Martineau l2cap_retransmit_all(chan, control); 6047fcd289dfSMat Martineau l2cap_ertm_send(chan); 6048fcd289dfSMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) 6049fcd289dfSMat Martineau set_bit(CONN_REJ_ACT, &chan->conn_state); 6050fcd289dfSMat Martineau } 6051d2a7ac5dSMat Martineau } 6052d2a7ac5dSMat Martineau 60534b51dae9SMat Martineau static u8 l2cap_classify_txseq(struct l2cap_chan *chan, u16 txseq) 60544b51dae9SMat Martineau { 60554b51dae9SMat Martineau BT_DBG("chan %p, txseq %d", chan, txseq); 60564b51dae9SMat Martineau 60574b51dae9SMat Martineau BT_DBG("last_acked_seq %d, expected_tx_seq %d", chan->last_acked_seq, 60584b51dae9SMat Martineau chan->expected_tx_seq); 60594b51dae9SMat Martineau 60604b51dae9SMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 60614b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= 60624b51dae9SMat Martineau chan->tx_win) { 60634b51dae9SMat Martineau /* See notes below regarding "double poll" and 60644b51dae9SMat Martineau * invalid packets. 60654b51dae9SMat Martineau */ 60664b51dae9SMat Martineau if (chan->tx_win <= ((chan->tx_win_max + 1) >> 1)) { 60674b51dae9SMat Martineau BT_DBG("Invalid/Ignore - after SREJ"); 60684b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID_IGNORE; 60694b51dae9SMat Martineau } else { 60704b51dae9SMat Martineau BT_DBG("Invalid - in window after SREJ sent"); 60714b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 60724b51dae9SMat Martineau } 60734b51dae9SMat Martineau } 60744b51dae9SMat Martineau 60754b51dae9SMat Martineau if (chan->srej_list.head == txseq) { 60764b51dae9SMat Martineau BT_DBG("Expected SREJ"); 60774b51dae9SMat Martineau return L2CAP_TXSEQ_EXPECTED_SREJ; 60784b51dae9SMat Martineau } 60794b51dae9SMat Martineau 60804b51dae9SMat Martineau if (l2cap_ertm_seq_in_queue(&chan->srej_q, txseq)) { 60814b51dae9SMat Martineau BT_DBG("Duplicate SREJ - txseq already stored"); 60824b51dae9SMat Martineau return L2CAP_TXSEQ_DUPLICATE_SREJ; 60834b51dae9SMat Martineau } 60844b51dae9SMat Martineau 60854b51dae9SMat Martineau if (l2cap_seq_list_contains(&chan->srej_list, txseq)) { 60864b51dae9SMat Martineau BT_DBG("Unexpected SREJ - not requested"); 60874b51dae9SMat Martineau return L2CAP_TXSEQ_UNEXPECTED_SREJ; 60884b51dae9SMat Martineau } 60894b51dae9SMat Martineau } 60904b51dae9SMat Martineau 60914b51dae9SMat Martineau if (chan->expected_tx_seq == txseq) { 60924b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= 60934b51dae9SMat Martineau chan->tx_win) { 60944b51dae9SMat Martineau BT_DBG("Invalid - txseq outside tx window"); 60954b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 60964b51dae9SMat Martineau } else { 60974b51dae9SMat Martineau BT_DBG("Expected"); 60984b51dae9SMat Martineau return L2CAP_TXSEQ_EXPECTED; 60994b51dae9SMat Martineau } 61004b51dae9SMat Martineau } 61014b51dae9SMat Martineau 61024b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) < 61032d792818SGustavo Padovan __seq_offset(chan, chan->expected_tx_seq, chan->last_acked_seq)) { 61044b51dae9SMat Martineau BT_DBG("Duplicate - expected_tx_seq later than txseq"); 61054b51dae9SMat Martineau return L2CAP_TXSEQ_DUPLICATE; 61064b51dae9SMat Martineau } 61074b51dae9SMat Martineau 61084b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= chan->tx_win) { 61094b51dae9SMat Martineau /* A source of invalid packets is a "double poll" condition, 61104b51dae9SMat Martineau * where delays cause us to send multiple poll packets. If 61114b51dae9SMat Martineau * the remote stack receives and processes both polls, 61124b51dae9SMat Martineau * sequence numbers can wrap around in such a way that a 61134b51dae9SMat Martineau * resent frame has a sequence number that looks like new data 61144b51dae9SMat Martineau * with a sequence gap. This would trigger an erroneous SREJ 61154b51dae9SMat Martineau * request. 61164b51dae9SMat Martineau * 61174b51dae9SMat Martineau * Fortunately, this is impossible with a tx window that's 61184b51dae9SMat Martineau * less than half of the maximum sequence number, which allows 61194b51dae9SMat Martineau * invalid frames to be safely ignored. 61204b51dae9SMat Martineau * 61214b51dae9SMat Martineau * With tx window sizes greater than half of the tx window 61224b51dae9SMat Martineau * maximum, the frame is invalid and cannot be ignored. This 61234b51dae9SMat Martineau * causes a disconnect. 61244b51dae9SMat Martineau */ 61254b51dae9SMat Martineau 61264b51dae9SMat Martineau if (chan->tx_win <= ((chan->tx_win_max + 1) >> 1)) { 61274b51dae9SMat Martineau BT_DBG("Invalid/Ignore - txseq outside tx window"); 61284b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID_IGNORE; 61294b51dae9SMat Martineau } else { 61304b51dae9SMat Martineau BT_DBG("Invalid - txseq outside tx window"); 61314b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 61324b51dae9SMat Martineau } 61334b51dae9SMat Martineau } else { 61344b51dae9SMat Martineau BT_DBG("Unexpected - txseq indicates missing frames"); 61354b51dae9SMat Martineau return L2CAP_TXSEQ_UNEXPECTED; 61364b51dae9SMat Martineau } 61374b51dae9SMat Martineau } 61384b51dae9SMat Martineau 6139d2a7ac5dSMat Martineau static int l2cap_rx_state_recv(struct l2cap_chan *chan, 6140d2a7ac5dSMat Martineau struct l2cap_ctrl *control, 6141d2a7ac5dSMat Martineau struct sk_buff *skb, u8 event) 6142d2a7ac5dSMat Martineau { 6143d2a7ac5dSMat Martineau int err = 0; 6144941247f9SPeter Senna Tschudin bool skb_in_use = false; 6145d2a7ac5dSMat Martineau 6146d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 6147d2a7ac5dSMat Martineau event); 6148d2a7ac5dSMat Martineau 6149d2a7ac5dSMat Martineau switch (event) { 6150d2a7ac5dSMat Martineau case L2CAP_EV_RECV_IFRAME: 6151d2a7ac5dSMat Martineau switch (l2cap_classify_txseq(chan, control->txseq)) { 6152d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED: 6153d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6154d2a7ac5dSMat Martineau 6155d2a7ac5dSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 6156d2a7ac5dSMat Martineau BT_DBG("Busy, discarding expected seq %d", 6157d2a7ac5dSMat Martineau control->txseq); 6158d2a7ac5dSMat Martineau break; 6159d2a7ac5dSMat Martineau } 6160d2a7ac5dSMat Martineau 6161d2a7ac5dSMat Martineau chan->expected_tx_seq = __next_seq(chan, 6162d2a7ac5dSMat Martineau control->txseq); 6163d2a7ac5dSMat Martineau 6164d2a7ac5dSMat Martineau chan->buffer_seq = chan->expected_tx_seq; 6165941247f9SPeter Senna Tschudin skb_in_use = true; 6166d2a7ac5dSMat Martineau 6167d2a7ac5dSMat Martineau err = l2cap_reassemble_sdu(chan, skb, control); 6168d2a7ac5dSMat Martineau if (err) 6169d2a7ac5dSMat Martineau break; 6170d2a7ac5dSMat Martineau 6171d2a7ac5dSMat Martineau if (control->final) { 6172d2a7ac5dSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, 6173d2a7ac5dSMat Martineau &chan->conn_state)) { 6174d2a7ac5dSMat Martineau control->final = 0; 6175d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 6176d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6177d2a7ac5dSMat Martineau } 6178d2a7ac5dSMat Martineau } 6179d2a7ac5dSMat Martineau 6180d2a7ac5dSMat Martineau if (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) 6181d2a7ac5dSMat Martineau l2cap_send_ack(chan); 6182d2a7ac5dSMat Martineau break; 6183d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED: 6184d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6185d2a7ac5dSMat Martineau 6186d2a7ac5dSMat Martineau /* Can't issue SREJ frames in the local busy state. 6187d2a7ac5dSMat Martineau * Drop this frame, it will be seen as missing 6188d2a7ac5dSMat Martineau * when local busy is exited. 6189d2a7ac5dSMat Martineau */ 6190d2a7ac5dSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 6191d2a7ac5dSMat Martineau BT_DBG("Busy, discarding unexpected seq %d", 6192d2a7ac5dSMat Martineau control->txseq); 6193d2a7ac5dSMat Martineau break; 6194d2a7ac5dSMat Martineau } 6195d2a7ac5dSMat Martineau 6196d2a7ac5dSMat Martineau /* There was a gap in the sequence, so an SREJ 6197d2a7ac5dSMat Martineau * must be sent for each missing frame. The 6198d2a7ac5dSMat Martineau * current frame is stored for later use. 6199d2a7ac5dSMat Martineau */ 6200d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6201941247f9SPeter Senna Tschudin skb_in_use = true; 6202d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6203d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6204d2a7ac5dSMat Martineau 6205d2a7ac5dSMat Martineau clear_bit(CONN_SREJ_ACT, &chan->conn_state); 6206d2a7ac5dSMat Martineau l2cap_seq_list_clear(&chan->srej_list); 6207d2a7ac5dSMat Martineau l2cap_send_srej(chan, control->txseq); 6208d2a7ac5dSMat Martineau 6209d2a7ac5dSMat Martineau chan->rx_state = L2CAP_RX_STATE_SREJ_SENT; 6210d2a7ac5dSMat Martineau break; 6211d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE: 6212d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6213d2a7ac5dSMat Martineau break; 6214d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID_IGNORE: 6215d2a7ac5dSMat Martineau break; 6216d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID: 6217d2a7ac5dSMat Martineau default: 62185e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6219d2a7ac5dSMat Martineau break; 6220d2a7ac5dSMat Martineau } 6221d2a7ac5dSMat Martineau break; 6222d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RR: 6223d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6224d2a7ac5dSMat Martineau if (control->final) { 6225d2a7ac5dSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6226d2a7ac5dSMat Martineau 6227e6a3ee6eSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, &chan->conn_state) && 6228e6a3ee6eSMat Martineau !__chan_is_moving(chan)) { 6229d2a7ac5dSMat Martineau control->final = 0; 6230d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 6231d2a7ac5dSMat Martineau } 6232d2a7ac5dSMat Martineau 6233d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6234d2a7ac5dSMat Martineau } else if (control->poll) { 6235d2a7ac5dSMat Martineau l2cap_send_i_or_rr_or_rnr(chan); 6236d2a7ac5dSMat Martineau } else { 6237d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 6238d2a7ac5dSMat Martineau &chan->conn_state) && 6239d2a7ac5dSMat Martineau chan->unacked_frames) 6240d2a7ac5dSMat Martineau __set_retrans_timer(chan); 6241d2a7ac5dSMat Martineau 6242d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6243d2a7ac5dSMat Martineau } 6244d2a7ac5dSMat Martineau break; 6245d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RNR: 6246d2a7ac5dSMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6247d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6248d2a7ac5dSMat Martineau if (control && control->poll) { 6249d2a7ac5dSMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 6250d2a7ac5dSMat Martineau l2cap_send_rr_or_rnr(chan, 0); 6251d2a7ac5dSMat Martineau } 6252d2a7ac5dSMat Martineau __clear_retrans_timer(chan); 6253d2a7ac5dSMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 6254d2a7ac5dSMat Martineau break; 6255d2a7ac5dSMat Martineau case L2CAP_EV_RECV_REJ: 6256d2a7ac5dSMat Martineau l2cap_handle_rej(chan, control); 6257d2a7ac5dSMat Martineau break; 6258d2a7ac5dSMat Martineau case L2CAP_EV_RECV_SREJ: 6259d2a7ac5dSMat Martineau l2cap_handle_srej(chan, control); 6260d2a7ac5dSMat Martineau break; 6261d2a7ac5dSMat Martineau default: 6262d2a7ac5dSMat Martineau break; 6263d2a7ac5dSMat Martineau } 6264d2a7ac5dSMat Martineau 6265d2a7ac5dSMat Martineau if (skb && !skb_in_use) { 6266d2a7ac5dSMat Martineau BT_DBG("Freeing %p", skb); 6267d2a7ac5dSMat Martineau kfree_skb(skb); 6268d2a7ac5dSMat Martineau } 6269d2a7ac5dSMat Martineau 6270d2a7ac5dSMat Martineau return err; 6271d2a7ac5dSMat Martineau } 6272d2a7ac5dSMat Martineau 6273d2a7ac5dSMat Martineau static int l2cap_rx_state_srej_sent(struct l2cap_chan *chan, 6274d2a7ac5dSMat Martineau struct l2cap_ctrl *control, 6275d2a7ac5dSMat Martineau struct sk_buff *skb, u8 event) 6276d2a7ac5dSMat Martineau { 6277d2a7ac5dSMat Martineau int err = 0; 6278d2a7ac5dSMat Martineau u16 txseq = control->txseq; 6279941247f9SPeter Senna Tschudin bool skb_in_use = false; 6280d2a7ac5dSMat Martineau 6281d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 6282d2a7ac5dSMat Martineau event); 6283d2a7ac5dSMat Martineau 6284d2a7ac5dSMat Martineau switch (event) { 6285d2a7ac5dSMat Martineau case L2CAP_EV_RECV_IFRAME: 6286d2a7ac5dSMat Martineau switch (l2cap_classify_txseq(chan, txseq)) { 6287d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED: 6288d2a7ac5dSMat Martineau /* Keep frame for reassembly later */ 6289d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6290d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6291941247f9SPeter Senna Tschudin skb_in_use = true; 6292d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6293d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6294d2a7ac5dSMat Martineau 6295d2a7ac5dSMat Martineau chan->expected_tx_seq = __next_seq(chan, txseq); 6296d2a7ac5dSMat Martineau break; 6297d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED_SREJ: 6298d2a7ac5dSMat Martineau l2cap_seq_list_pop(&chan->srej_list); 6299d2a7ac5dSMat Martineau 6300d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6301d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6302941247f9SPeter Senna Tschudin skb_in_use = true; 6303d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6304d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6305d2a7ac5dSMat Martineau 6306d2a7ac5dSMat Martineau err = l2cap_rx_queued_iframes(chan); 6307d2a7ac5dSMat Martineau if (err) 6308d2a7ac5dSMat Martineau break; 6309d2a7ac5dSMat Martineau 6310d2a7ac5dSMat Martineau break; 6311d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED: 6312d2a7ac5dSMat Martineau /* Got a frame that can't be reassembled yet. 6313d2a7ac5dSMat Martineau * Save it for later, and send SREJs to cover 6314d2a7ac5dSMat Martineau * the missing frames. 6315d2a7ac5dSMat Martineau */ 6316d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6317941247f9SPeter Senna Tschudin skb_in_use = true; 6318d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6319d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6320d2a7ac5dSMat Martineau 6321d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6322d2a7ac5dSMat Martineau l2cap_send_srej(chan, control->txseq); 6323d2a7ac5dSMat Martineau break; 6324d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED_SREJ: 6325d2a7ac5dSMat Martineau /* This frame was requested with an SREJ, but 6326d2a7ac5dSMat Martineau * some expected retransmitted frames are 6327d2a7ac5dSMat Martineau * missing. Request retransmission of missing 6328d2a7ac5dSMat Martineau * SREJ'd frames. 6329d2a7ac5dSMat Martineau */ 6330d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6331941247f9SPeter Senna Tschudin skb_in_use = true; 6332d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6333d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6334d2a7ac5dSMat Martineau 6335d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6336d2a7ac5dSMat Martineau l2cap_send_srej_list(chan, control->txseq); 6337d2a7ac5dSMat Martineau break; 6338d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE_SREJ: 6339d2a7ac5dSMat Martineau /* We've already queued this frame. Drop this copy. */ 6340d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6341d2a7ac5dSMat Martineau break; 6342d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE: 6343d2a7ac5dSMat Martineau /* Expecting a later sequence number, so this frame 6344d2a7ac5dSMat Martineau * was already received. Ignore it completely. 6345d2a7ac5dSMat Martineau */ 6346d2a7ac5dSMat Martineau break; 6347d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID_IGNORE: 6348d2a7ac5dSMat Martineau break; 6349d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID: 6350d2a7ac5dSMat Martineau default: 63515e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6352d2a7ac5dSMat Martineau break; 6353d2a7ac5dSMat Martineau } 6354d2a7ac5dSMat Martineau break; 6355d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RR: 6356d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6357d2a7ac5dSMat Martineau if (control->final) { 6358d2a7ac5dSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6359d2a7ac5dSMat Martineau 6360d2a7ac5dSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, 6361d2a7ac5dSMat Martineau &chan->conn_state)) { 6362d2a7ac5dSMat Martineau control->final = 0; 6363d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 6364d2a7ac5dSMat Martineau } 6365d2a7ac5dSMat Martineau 6366d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6367d2a7ac5dSMat Martineau } else if (control->poll) { 6368d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 6369d2a7ac5dSMat Martineau &chan->conn_state) && 6370d2a7ac5dSMat Martineau chan->unacked_frames) { 6371d2a7ac5dSMat Martineau __set_retrans_timer(chan); 6372d2a7ac5dSMat Martineau } 6373d2a7ac5dSMat Martineau 6374d2a7ac5dSMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 6375d2a7ac5dSMat Martineau l2cap_send_srej_tail(chan); 6376d2a7ac5dSMat Martineau } else { 6377d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 6378d2a7ac5dSMat Martineau &chan->conn_state) && 6379d2a7ac5dSMat Martineau chan->unacked_frames) 6380d2a7ac5dSMat Martineau __set_retrans_timer(chan); 6381d2a7ac5dSMat Martineau 6382d2a7ac5dSMat Martineau l2cap_send_ack(chan); 6383d2a7ac5dSMat Martineau } 6384d2a7ac5dSMat Martineau break; 6385d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RNR: 6386d2a7ac5dSMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6387d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6388d2a7ac5dSMat Martineau if (control->poll) { 6389d2a7ac5dSMat Martineau l2cap_send_srej_tail(chan); 6390d2a7ac5dSMat Martineau } else { 6391d2a7ac5dSMat Martineau struct l2cap_ctrl rr_control; 6392d2a7ac5dSMat Martineau memset(&rr_control, 0, sizeof(rr_control)); 6393d2a7ac5dSMat Martineau rr_control.sframe = 1; 6394d2a7ac5dSMat Martineau rr_control.super = L2CAP_SUPER_RR; 6395d2a7ac5dSMat Martineau rr_control.reqseq = chan->buffer_seq; 6396d2a7ac5dSMat Martineau l2cap_send_sframe(chan, &rr_control); 6397d2a7ac5dSMat Martineau } 6398d2a7ac5dSMat Martineau 6399d2a7ac5dSMat Martineau break; 6400d2a7ac5dSMat Martineau case L2CAP_EV_RECV_REJ: 6401d2a7ac5dSMat Martineau l2cap_handle_rej(chan, control); 6402d2a7ac5dSMat Martineau break; 6403d2a7ac5dSMat Martineau case L2CAP_EV_RECV_SREJ: 6404d2a7ac5dSMat Martineau l2cap_handle_srej(chan, control); 6405d2a7ac5dSMat Martineau break; 6406d2a7ac5dSMat Martineau } 6407d2a7ac5dSMat Martineau 6408d2a7ac5dSMat Martineau if (skb && !skb_in_use) { 6409d2a7ac5dSMat Martineau BT_DBG("Freeing %p", skb); 6410d2a7ac5dSMat Martineau kfree_skb(skb); 6411d2a7ac5dSMat Martineau } 6412d2a7ac5dSMat Martineau 6413d2a7ac5dSMat Martineau return err; 6414d2a7ac5dSMat Martineau } 6415d2a7ac5dSMat Martineau 641632b32735SMat Martineau static int l2cap_finish_move(struct l2cap_chan *chan) 641732b32735SMat Martineau { 641832b32735SMat Martineau BT_DBG("chan %p", chan); 641932b32735SMat Martineau 642032b32735SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 642132b32735SMat Martineau 642232b32735SMat Martineau if (chan->hs_hcon) 642332b32735SMat Martineau chan->conn->mtu = chan->hs_hcon->hdev->block_mtu; 642432b32735SMat Martineau else 642532b32735SMat Martineau chan->conn->mtu = chan->conn->hcon->hdev->acl_mtu; 642632b32735SMat Martineau 642732b32735SMat Martineau return l2cap_resegment(chan); 642832b32735SMat Martineau } 642932b32735SMat Martineau 643032b32735SMat Martineau static int l2cap_rx_state_wait_p(struct l2cap_chan *chan, 643132b32735SMat Martineau struct l2cap_ctrl *control, 643232b32735SMat Martineau struct sk_buff *skb, u8 event) 643332b32735SMat Martineau { 643432b32735SMat Martineau int err; 643532b32735SMat Martineau 643632b32735SMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 643732b32735SMat Martineau event); 643832b32735SMat Martineau 643932b32735SMat Martineau if (!control->poll) 644032b32735SMat Martineau return -EPROTO; 644132b32735SMat Martineau 644232b32735SMat Martineau l2cap_process_reqseq(chan, control->reqseq); 644332b32735SMat Martineau 644432b32735SMat Martineau if (!skb_queue_empty(&chan->tx_q)) 644532b32735SMat Martineau chan->tx_send_head = skb_peek(&chan->tx_q); 644632b32735SMat Martineau else 644732b32735SMat Martineau chan->tx_send_head = NULL; 644832b32735SMat Martineau 644932b32735SMat Martineau /* Rewind next_tx_seq to the point expected 645032b32735SMat Martineau * by the receiver. 645132b32735SMat Martineau */ 645232b32735SMat Martineau chan->next_tx_seq = control->reqseq; 645332b32735SMat Martineau chan->unacked_frames = 0; 645432b32735SMat Martineau 645532b32735SMat Martineau err = l2cap_finish_move(chan); 645632b32735SMat Martineau if (err) 645732b32735SMat Martineau return err; 645832b32735SMat Martineau 645932b32735SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 646032b32735SMat Martineau l2cap_send_i_or_rr_or_rnr(chan); 646132b32735SMat Martineau 646232b32735SMat Martineau if (event == L2CAP_EV_RECV_IFRAME) 646332b32735SMat Martineau return -EPROTO; 646432b32735SMat Martineau 646532b32735SMat Martineau return l2cap_rx_state_recv(chan, control, NULL, event); 646632b32735SMat Martineau } 646732b32735SMat Martineau 646832b32735SMat Martineau static int l2cap_rx_state_wait_f(struct l2cap_chan *chan, 646932b32735SMat Martineau struct l2cap_ctrl *control, 647032b32735SMat Martineau struct sk_buff *skb, u8 event) 647132b32735SMat Martineau { 647232b32735SMat Martineau int err; 647332b32735SMat Martineau 647432b32735SMat Martineau if (!control->final) 647532b32735SMat Martineau return -EPROTO; 647632b32735SMat Martineau 647732b32735SMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 647832b32735SMat Martineau 647932b32735SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 648032b32735SMat Martineau l2cap_process_reqseq(chan, control->reqseq); 648132b32735SMat Martineau 648232b32735SMat Martineau if (!skb_queue_empty(&chan->tx_q)) 648332b32735SMat Martineau chan->tx_send_head = skb_peek(&chan->tx_q); 648432b32735SMat Martineau else 648532b32735SMat Martineau chan->tx_send_head = NULL; 648632b32735SMat Martineau 648732b32735SMat Martineau /* Rewind next_tx_seq to the point expected 648832b32735SMat Martineau * by the receiver. 648932b32735SMat Martineau */ 649032b32735SMat Martineau chan->next_tx_seq = control->reqseq; 649132b32735SMat Martineau chan->unacked_frames = 0; 649232b32735SMat Martineau 649332b32735SMat Martineau if (chan->hs_hcon) 649432b32735SMat Martineau chan->conn->mtu = chan->hs_hcon->hdev->block_mtu; 649532b32735SMat Martineau else 649632b32735SMat Martineau chan->conn->mtu = chan->conn->hcon->hdev->acl_mtu; 649732b32735SMat Martineau 649832b32735SMat Martineau err = l2cap_resegment(chan); 649932b32735SMat Martineau 650032b32735SMat Martineau if (!err) 650132b32735SMat Martineau err = l2cap_rx_state_recv(chan, control, skb, event); 650232b32735SMat Martineau 650332b32735SMat Martineau return err; 650432b32735SMat Martineau } 650532b32735SMat Martineau 6506d2a7ac5dSMat Martineau static bool __valid_reqseq(struct l2cap_chan *chan, u16 reqseq) 6507d2a7ac5dSMat Martineau { 6508d2a7ac5dSMat Martineau /* Make sure reqseq is for a packet that has been sent but not acked */ 6509d2a7ac5dSMat Martineau u16 unacked; 6510d2a7ac5dSMat Martineau 6511d2a7ac5dSMat Martineau unacked = __seq_offset(chan, chan->next_tx_seq, chan->expected_ack_seq); 6512d2a7ac5dSMat Martineau return __seq_offset(chan, chan->next_tx_seq, reqseq) <= unacked; 6513d2a7ac5dSMat Martineau } 6514d2a7ac5dSMat Martineau 6515cec8ab6eSMat Martineau static int l2cap_rx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 6516cec8ab6eSMat Martineau struct sk_buff *skb, u8 event) 65170a708f8fSGustavo F. Padovan { 6518d2a7ac5dSMat Martineau int err = 0; 6519d2a7ac5dSMat Martineau 6520d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d, state %d", chan, 6521d2a7ac5dSMat Martineau control, skb, event, chan->rx_state); 6522d2a7ac5dSMat Martineau 6523d2a7ac5dSMat Martineau if (__valid_reqseq(chan, control->reqseq)) { 6524d2a7ac5dSMat Martineau switch (chan->rx_state) { 6525d2a7ac5dSMat Martineau case L2CAP_RX_STATE_RECV: 6526d2a7ac5dSMat Martineau err = l2cap_rx_state_recv(chan, control, skb, event); 6527d2a7ac5dSMat Martineau break; 6528d2a7ac5dSMat Martineau case L2CAP_RX_STATE_SREJ_SENT: 6529d2a7ac5dSMat Martineau err = l2cap_rx_state_srej_sent(chan, control, skb, 6530d2a7ac5dSMat Martineau event); 6531d2a7ac5dSMat Martineau break; 653232b32735SMat Martineau case L2CAP_RX_STATE_WAIT_P: 653332b32735SMat Martineau err = l2cap_rx_state_wait_p(chan, control, skb, event); 653432b32735SMat Martineau break; 653532b32735SMat Martineau case L2CAP_RX_STATE_WAIT_F: 653632b32735SMat Martineau err = l2cap_rx_state_wait_f(chan, control, skb, event); 653732b32735SMat Martineau break; 6538d2a7ac5dSMat Martineau default: 6539d2a7ac5dSMat Martineau /* shut it down */ 6540d2a7ac5dSMat Martineau break; 6541d2a7ac5dSMat Martineau } 6542d2a7ac5dSMat Martineau } else { 6543d2a7ac5dSMat Martineau BT_DBG("Invalid reqseq %d (next_tx_seq %d, expected_ack_seq %d", 6544d2a7ac5dSMat Martineau control->reqseq, chan->next_tx_seq, 6545d2a7ac5dSMat Martineau chan->expected_ack_seq); 65465e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6547d2a7ac5dSMat Martineau } 6548d2a7ac5dSMat Martineau 6549d2a7ac5dSMat Martineau return err; 6550cec8ab6eSMat Martineau } 6551cec8ab6eSMat Martineau 6552cec8ab6eSMat Martineau static int l2cap_stream_rx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 6553cec8ab6eSMat Martineau struct sk_buff *skb) 6554cec8ab6eSMat Martineau { 65554b51dae9SMat Martineau BT_DBG("chan %p, control %p, skb %p, state %d", chan, control, skb, 65564b51dae9SMat Martineau chan->rx_state); 65574b51dae9SMat Martineau 65584b51dae9SMat Martineau if (l2cap_classify_txseq(chan, control->txseq) == 65594b51dae9SMat Martineau L2CAP_TXSEQ_EXPECTED) { 65604b51dae9SMat Martineau l2cap_pass_to_tx(chan, control); 65614b51dae9SMat Martineau 65624b51dae9SMat Martineau BT_DBG("buffer_seq %d->%d", chan->buffer_seq, 65634b51dae9SMat Martineau __next_seq(chan, chan->buffer_seq)); 65644b51dae9SMat Martineau 65654b51dae9SMat Martineau chan->buffer_seq = __next_seq(chan, chan->buffer_seq); 65664b51dae9SMat Martineau 65674b51dae9SMat Martineau l2cap_reassemble_sdu(chan, skb, control); 65684b51dae9SMat Martineau } else { 65694b51dae9SMat Martineau if (chan->sdu) { 65704b51dae9SMat Martineau kfree_skb(chan->sdu); 65714b51dae9SMat Martineau chan->sdu = NULL; 65724b51dae9SMat Martineau } 65734b51dae9SMat Martineau chan->sdu_last_frag = NULL; 65744b51dae9SMat Martineau chan->sdu_len = 0; 65754b51dae9SMat Martineau 65764b51dae9SMat Martineau if (skb) { 65774b51dae9SMat Martineau BT_DBG("Freeing %p", skb); 65784b51dae9SMat Martineau kfree_skb(skb); 65794b51dae9SMat Martineau } 65804b51dae9SMat Martineau } 65814b51dae9SMat Martineau 65824b51dae9SMat Martineau chan->last_acked_seq = control->txseq; 65834b51dae9SMat Martineau chan->expected_tx_seq = __next_seq(chan, control->txseq); 65844b51dae9SMat Martineau 65859a544210SPrasanna Karthik return 0; 6586cec8ab6eSMat Martineau } 6587cec8ab6eSMat Martineau 6588cec8ab6eSMat Martineau static int l2cap_data_rcv(struct l2cap_chan *chan, struct sk_buff *skb) 6589cec8ab6eSMat Martineau { 6590a4368ff3SJohan Hedberg struct l2cap_ctrl *control = &bt_cb(skb)->l2cap; 6591cec8ab6eSMat Martineau u16 len; 6592cec8ab6eSMat Martineau u8 event; 65930a708f8fSGustavo F. Padovan 6594b76bbd66SMat Martineau __unpack_control(chan, skb); 6595b76bbd66SMat Martineau 65960a708f8fSGustavo F. Padovan len = skb->len; 65970a708f8fSGustavo F. Padovan 65980a708f8fSGustavo F. Padovan /* 65990a708f8fSGustavo F. Padovan * We can just drop the corrupted I-frame here. 66000a708f8fSGustavo F. Padovan * Receiver will miss it and start proper recovery 6601cec8ab6eSMat Martineau * procedures and ask for retransmission. 66020a708f8fSGustavo F. Padovan */ 660347d1ec61SGustavo F. Padovan if (l2cap_check_fcs(chan, skb)) 66040a708f8fSGustavo F. Padovan goto drop; 66050a708f8fSGustavo F. Padovan 6606cec8ab6eSMat Martineau if (!control->sframe && control->sar == L2CAP_SAR_START) 660703a51213SAndrei Emeltchenko len -= L2CAP_SDULEN_SIZE; 66080a708f8fSGustavo F. Padovan 660947d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 661003a51213SAndrei Emeltchenko len -= L2CAP_FCS_SIZE; 66110a708f8fSGustavo F. Padovan 661247d1ec61SGustavo F. Padovan if (len > chan->mps) { 66135e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 66140a708f8fSGustavo F. Padovan goto drop; 66150a708f8fSGustavo F. Padovan } 66160a708f8fSGustavo F. Padovan 6617dbb50887SDaniel Borkmann if ((chan->mode == L2CAP_MODE_ERTM || 6618dbb50887SDaniel Borkmann chan->mode == L2CAP_MODE_STREAMING) && sk_filter(chan->data, skb)) 6619dbb50887SDaniel Borkmann goto drop; 6620dbb50887SDaniel Borkmann 6621cec8ab6eSMat Martineau if (!control->sframe) { 6622cec8ab6eSMat Martineau int err; 66230a708f8fSGustavo F. Padovan 6624cec8ab6eSMat Martineau BT_DBG("iframe sar %d, reqseq %d, final %d, txseq %d", 6625cec8ab6eSMat Martineau control->sar, control->reqseq, control->final, 6626cec8ab6eSMat Martineau control->txseq); 6627836be934SAndrei Emeltchenko 6628cec8ab6eSMat Martineau /* Validate F-bit - F=0 always valid, F=1 only 6629cec8ab6eSMat Martineau * valid in TX WAIT_F 6630cec8ab6eSMat Martineau */ 6631cec8ab6eSMat Martineau if (control->final && chan->tx_state != L2CAP_TX_STATE_WAIT_F) 66320a708f8fSGustavo F. Padovan goto drop; 66330a708f8fSGustavo F. Padovan 6634cec8ab6eSMat Martineau if (chan->mode != L2CAP_MODE_STREAMING) { 6635cec8ab6eSMat Martineau event = L2CAP_EV_RECV_IFRAME; 6636cec8ab6eSMat Martineau err = l2cap_rx(chan, control, skb, event); 66370a708f8fSGustavo F. Padovan } else { 6638cec8ab6eSMat Martineau err = l2cap_stream_rx(chan, control, skb); 6639cec8ab6eSMat Martineau } 6640cec8ab6eSMat Martineau 6641cec8ab6eSMat Martineau if (err) 66425e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6643cec8ab6eSMat Martineau } else { 6644cec8ab6eSMat Martineau const u8 rx_func_to_event[4] = { 6645cec8ab6eSMat Martineau L2CAP_EV_RECV_RR, L2CAP_EV_RECV_REJ, 6646cec8ab6eSMat Martineau L2CAP_EV_RECV_RNR, L2CAP_EV_RECV_SREJ 6647cec8ab6eSMat Martineau }; 6648cec8ab6eSMat Martineau 6649cec8ab6eSMat Martineau /* Only I-frames are expected in streaming mode */ 6650cec8ab6eSMat Martineau if (chan->mode == L2CAP_MODE_STREAMING) 6651cec8ab6eSMat Martineau goto drop; 6652cec8ab6eSMat Martineau 6653cec8ab6eSMat Martineau BT_DBG("sframe reqseq %d, final %d, poll %d, super %d", 6654cec8ab6eSMat Martineau control->reqseq, control->final, control->poll, 6655cec8ab6eSMat Martineau control->super); 6656cec8ab6eSMat Martineau 66570a708f8fSGustavo F. Padovan if (len != 0) { 66581bb166e6SAndrei Emeltchenko BT_ERR("Trailing bytes: %d in sframe", len); 66595e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 66600a708f8fSGustavo F. Padovan goto drop; 66610a708f8fSGustavo F. Padovan } 66620a708f8fSGustavo F. Padovan 6663cec8ab6eSMat Martineau /* Validate F and P bits */ 6664cec8ab6eSMat Martineau if (control->final && (control->poll || 6665cec8ab6eSMat Martineau chan->tx_state != L2CAP_TX_STATE_WAIT_F)) 6666cec8ab6eSMat Martineau goto drop; 6667cec8ab6eSMat Martineau 6668cec8ab6eSMat Martineau event = rx_func_to_event[control->super]; 6669cec8ab6eSMat Martineau if (l2cap_rx(chan, control, skb, event)) 66705e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 66710a708f8fSGustavo F. Padovan } 66720a708f8fSGustavo F. Padovan 66730a708f8fSGustavo F. Padovan return 0; 66740a708f8fSGustavo F. Padovan 66750a708f8fSGustavo F. Padovan drop: 66760a708f8fSGustavo F. Padovan kfree_skb(skb); 66770a708f8fSGustavo F. Padovan return 0; 66780a708f8fSGustavo F. Padovan } 66790a708f8fSGustavo F. Padovan 6680b1c325c2SJohan Hedberg static void l2cap_chan_le_send_credits(struct l2cap_chan *chan) 6681b1c325c2SJohan Hedberg { 6682b1c325c2SJohan Hedberg struct l2cap_conn *conn = chan->conn; 6683b1c325c2SJohan Hedberg struct l2cap_le_credits pkt; 6684b1c325c2SJohan Hedberg u16 return_credits; 6685b1c325c2SJohan Hedberg 6686b1c325c2SJohan Hedberg /* We return more credits to the sender only after the amount of 6687b1c325c2SJohan Hedberg * credits falls below half of the initial amount. 6688b1c325c2SJohan Hedberg */ 6689f15b8ecfSJohan Hedberg if (chan->rx_credits >= (le_max_credits + 1) / 2) 6690b1c325c2SJohan Hedberg return; 6691b1c325c2SJohan Hedberg 6692f15b8ecfSJohan Hedberg return_credits = le_max_credits - chan->rx_credits; 6693b1c325c2SJohan Hedberg 6694b1c325c2SJohan Hedberg BT_DBG("chan %p returning %u credits to sender", chan, return_credits); 6695b1c325c2SJohan Hedberg 6696b1c325c2SJohan Hedberg chan->rx_credits += return_credits; 6697b1c325c2SJohan Hedberg 6698b1c325c2SJohan Hedberg pkt.cid = cpu_to_le16(chan->scid); 6699b1c325c2SJohan Hedberg pkt.credits = cpu_to_le16(return_credits); 6700b1c325c2SJohan Hedberg 6701b1c325c2SJohan Hedberg chan->ident = l2cap_get_ident(conn); 6702b1c325c2SJohan Hedberg 6703b1c325c2SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CREDITS, sizeof(pkt), &pkt); 6704b1c325c2SJohan Hedberg } 6705b1c325c2SJohan Hedberg 6706fad5fc89SJohan Hedberg static int l2cap_le_data_rcv(struct l2cap_chan *chan, struct sk_buff *skb) 6707fad5fc89SJohan Hedberg { 6708aac23bf6SJohan Hedberg int err; 6709fad5fc89SJohan Hedberg 6710aac23bf6SJohan Hedberg if (!chan->rx_credits) { 6711aac23bf6SJohan Hedberg BT_ERR("No credits to receive LE L2CAP data"); 6712dfd9774cSJohan Hedberg l2cap_send_disconn_req(chan, ECONNRESET); 6713fad5fc89SJohan Hedberg return -ENOBUFS; 6714aac23bf6SJohan Hedberg } 6715aac23bf6SJohan Hedberg 6716aac23bf6SJohan Hedberg if (chan->imtu < skb->len) { 6717aac23bf6SJohan Hedberg BT_ERR("Too big LE L2CAP PDU"); 6718aac23bf6SJohan Hedberg return -ENOBUFS; 6719aac23bf6SJohan Hedberg } 6720fad5fc89SJohan Hedberg 6721fad5fc89SJohan Hedberg chan->rx_credits--; 6722fad5fc89SJohan Hedberg BT_DBG("rx_credits %u -> %u", chan->rx_credits + 1, chan->rx_credits); 6723fad5fc89SJohan Hedberg 6724fad5fc89SJohan Hedberg l2cap_chan_le_send_credits(chan); 6725fad5fc89SJohan Hedberg 6726aac23bf6SJohan Hedberg err = 0; 6727aac23bf6SJohan Hedberg 6728aac23bf6SJohan Hedberg if (!chan->sdu) { 6729aac23bf6SJohan Hedberg u16 sdu_len; 6730aac23bf6SJohan Hedberg 6731aac23bf6SJohan Hedberg sdu_len = get_unaligned_le16(skb->data); 6732aac23bf6SJohan Hedberg skb_pull(skb, L2CAP_SDULEN_SIZE); 6733aac23bf6SJohan Hedberg 6734aac23bf6SJohan Hedberg BT_DBG("Start of new SDU. sdu_len %u skb->len %u imtu %u", 6735aac23bf6SJohan Hedberg sdu_len, skb->len, chan->imtu); 6736aac23bf6SJohan Hedberg 6737aac23bf6SJohan Hedberg if (sdu_len > chan->imtu) { 6738aac23bf6SJohan Hedberg BT_ERR("Too big LE L2CAP SDU length received"); 6739aac23bf6SJohan Hedberg err = -EMSGSIZE; 6740aac23bf6SJohan Hedberg goto failed; 6741aac23bf6SJohan Hedberg } 6742aac23bf6SJohan Hedberg 6743aac23bf6SJohan Hedberg if (skb->len > sdu_len) { 6744aac23bf6SJohan Hedberg BT_ERR("Too much LE L2CAP data received"); 6745aac23bf6SJohan Hedberg err = -EINVAL; 6746aac23bf6SJohan Hedberg goto failed; 6747aac23bf6SJohan Hedberg } 6748aac23bf6SJohan Hedberg 6749aac23bf6SJohan Hedberg if (skb->len == sdu_len) 6750fad5fc89SJohan Hedberg return chan->ops->recv(chan, skb); 6751aac23bf6SJohan Hedberg 6752aac23bf6SJohan Hedberg chan->sdu = skb; 6753aac23bf6SJohan Hedberg chan->sdu_len = sdu_len; 6754aac23bf6SJohan Hedberg chan->sdu_last_frag = skb; 6755aac23bf6SJohan Hedberg 6756aac23bf6SJohan Hedberg return 0; 6757aac23bf6SJohan Hedberg } 6758aac23bf6SJohan Hedberg 6759aac23bf6SJohan Hedberg BT_DBG("SDU fragment. chan->sdu->len %u skb->len %u chan->sdu_len %u", 6760aac23bf6SJohan Hedberg chan->sdu->len, skb->len, chan->sdu_len); 6761aac23bf6SJohan Hedberg 6762aac23bf6SJohan Hedberg if (chan->sdu->len + skb->len > chan->sdu_len) { 6763aac23bf6SJohan Hedberg BT_ERR("Too much LE L2CAP data received"); 6764aac23bf6SJohan Hedberg err = -EINVAL; 6765aac23bf6SJohan Hedberg goto failed; 6766aac23bf6SJohan Hedberg } 6767aac23bf6SJohan Hedberg 6768aac23bf6SJohan Hedberg append_skb_frag(chan->sdu, skb, &chan->sdu_last_frag); 6769aac23bf6SJohan Hedberg skb = NULL; 6770aac23bf6SJohan Hedberg 6771aac23bf6SJohan Hedberg if (chan->sdu->len == chan->sdu_len) { 6772aac23bf6SJohan Hedberg err = chan->ops->recv(chan, chan->sdu); 6773aac23bf6SJohan Hedberg if (!err) { 6774aac23bf6SJohan Hedberg chan->sdu = NULL; 6775aac23bf6SJohan Hedberg chan->sdu_last_frag = NULL; 6776aac23bf6SJohan Hedberg chan->sdu_len = 0; 6777aac23bf6SJohan Hedberg } 6778aac23bf6SJohan Hedberg } 6779aac23bf6SJohan Hedberg 6780aac23bf6SJohan Hedberg failed: 6781aac23bf6SJohan Hedberg if (err) { 6782aac23bf6SJohan Hedberg kfree_skb(skb); 6783aac23bf6SJohan Hedberg kfree_skb(chan->sdu); 6784aac23bf6SJohan Hedberg chan->sdu = NULL; 6785aac23bf6SJohan Hedberg chan->sdu_last_frag = NULL; 6786aac23bf6SJohan Hedberg chan->sdu_len = 0; 6787aac23bf6SJohan Hedberg } 6788aac23bf6SJohan Hedberg 6789aac23bf6SJohan Hedberg /* We can't return an error here since we took care of the skb 6790aac23bf6SJohan Hedberg * freeing internally. An error return would cause the caller to 6791aac23bf6SJohan Hedberg * do a double-free of the skb. 6792aac23bf6SJohan Hedberg */ 6793aac23bf6SJohan Hedberg return 0; 6794fad5fc89SJohan Hedberg } 6795fad5fc89SJohan Hedberg 679613ca56e0SAndrei Emeltchenko static void l2cap_data_channel(struct l2cap_conn *conn, u16 cid, 679713ca56e0SAndrei Emeltchenko struct sk_buff *skb) 67980a708f8fSGustavo F. Padovan { 679948454079SGustavo F. Padovan struct l2cap_chan *chan; 68000a708f8fSGustavo F. Padovan 6801baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, cid); 680248454079SGustavo F. Padovan if (!chan) { 680397e8e89dSAndrei Emeltchenko if (cid == L2CAP_CID_A2MP) { 680497e8e89dSAndrei Emeltchenko chan = a2mp_channel_create(conn, skb); 680597e8e89dSAndrei Emeltchenko if (!chan) { 680697e8e89dSAndrei Emeltchenko kfree_skb(skb); 680713ca56e0SAndrei Emeltchenko return; 680897e8e89dSAndrei Emeltchenko } 680997e8e89dSAndrei Emeltchenko 681097e8e89dSAndrei Emeltchenko l2cap_chan_lock(chan); 681197e8e89dSAndrei Emeltchenko } else { 68120a708f8fSGustavo F. Padovan BT_DBG("unknown cid 0x%4.4x", cid); 68136be36555SAndrei Emeltchenko /* Drop packet and return */ 68143379013bSDan Carpenter kfree_skb(skb); 681513ca56e0SAndrei Emeltchenko return; 68160a708f8fSGustavo F. Padovan } 681797e8e89dSAndrei Emeltchenko } 68180a708f8fSGustavo F. Padovan 681949208c9cSGustavo F. Padovan BT_DBG("chan %p, len %d", chan, skb->len); 68200a708f8fSGustavo F. Padovan 6821315917e0SJohan Hedberg /* If we receive data on a fixed channel before the info req/rsp 6822315917e0SJohan Hedberg * procdure is done simply assume that the channel is supported 6823315917e0SJohan Hedberg * and mark it as ready. 6824315917e0SJohan Hedberg */ 6825315917e0SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_FIXED) 6826315917e0SJohan Hedberg l2cap_chan_ready(chan); 6827315917e0SJohan Hedberg 682889bc500eSGustavo F. Padovan if (chan->state != BT_CONNECTED) 68290a708f8fSGustavo F. Padovan goto drop; 68300a708f8fSGustavo F. Padovan 68310c1bc5c6SGustavo F. Padovan switch (chan->mode) { 683238319713SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 6833fad5fc89SJohan Hedberg if (l2cap_le_data_rcv(chan, skb) < 0) 6834fad5fc89SJohan Hedberg goto drop; 6835fad5fc89SJohan Hedberg 6836fad5fc89SJohan Hedberg goto done; 6837fad5fc89SJohan Hedberg 68380a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 68390a708f8fSGustavo F. Padovan /* If socket recv buffers overflows we drop data here 68400a708f8fSGustavo F. Padovan * which is *bad* because L2CAP has to be reliable. 68410a708f8fSGustavo F. Padovan * But we don't have any other choice. L2CAP doesn't 68420a708f8fSGustavo F. Padovan * provide flow control mechanism. */ 68430a708f8fSGustavo F. Padovan 68442c96e03dSSzymon Janc if (chan->imtu < skb->len) { 68452c96e03dSSzymon Janc BT_ERR("Dropping L2CAP data: receive buffer overflow"); 68460a708f8fSGustavo F. Padovan goto drop; 68472c96e03dSSzymon Janc } 68480a708f8fSGustavo F. Padovan 684980b98027SGustavo Padovan if (!chan->ops->recv(chan, skb)) 68500a708f8fSGustavo F. Padovan goto done; 68510a708f8fSGustavo F. Padovan break; 68520a708f8fSGustavo F. Padovan 68530a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 68540a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 6855cec8ab6eSMat Martineau l2cap_data_rcv(chan, skb); 68560a708f8fSGustavo F. Padovan goto done; 68570a708f8fSGustavo F. Padovan 68580a708f8fSGustavo F. Padovan default: 68590c1bc5c6SGustavo F. Padovan BT_DBG("chan %p: bad mode 0x%2.2x", chan, chan->mode); 68600a708f8fSGustavo F. Padovan break; 68610a708f8fSGustavo F. Padovan } 68620a708f8fSGustavo F. Padovan 68630a708f8fSGustavo F. Padovan drop: 68640a708f8fSGustavo F. Padovan kfree_skb(skb); 68650a708f8fSGustavo F. Padovan 68660a708f8fSGustavo F. Padovan done: 68676be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 68680a708f8fSGustavo F. Padovan } 68690a708f8fSGustavo F. Padovan 687084104b24SAndrei Emeltchenko static void l2cap_conless_channel(struct l2cap_conn *conn, __le16 psm, 687184104b24SAndrei Emeltchenko struct sk_buff *skb) 68720a708f8fSGustavo F. Padovan { 6873ae4fd2d3SMarcel Holtmann struct hci_conn *hcon = conn->hcon; 687423691d75SGustavo F. Padovan struct l2cap_chan *chan; 68750a708f8fSGustavo F. Padovan 6876ae4fd2d3SMarcel Holtmann if (hcon->type != ACL_LINK) 6877a24cce14SJohan Hedberg goto free_skb; 6878ae4fd2d3SMarcel Holtmann 6879bf20fd4eSJohan Hedberg chan = l2cap_global_chan_by_psm(0, psm, &hcon->src, &hcon->dst, 6880bf20fd4eSJohan Hedberg ACL_LINK); 688123691d75SGustavo F. Padovan if (!chan) 6882a24cce14SJohan Hedberg goto free_skb; 68830a708f8fSGustavo F. Padovan 68845b4cedaaSAndrei Emeltchenko BT_DBG("chan %p, len %d", chan, skb->len); 68850a708f8fSGustavo F. Padovan 688689bc500eSGustavo F. Padovan if (chan->state != BT_BOUND && chan->state != BT_CONNECTED) 68870a708f8fSGustavo F. Padovan goto drop; 68880a708f8fSGustavo F. Padovan 6889e13e21dcSVinicius Costa Gomes if (chan->imtu < skb->len) 68900a708f8fSGustavo F. Padovan goto drop; 68910a708f8fSGustavo F. Padovan 68922edf870dSMarcel Holtmann /* Store remote BD_ADDR and PSM for msg_name */ 6893a4368ff3SJohan Hedberg bacpy(&bt_cb(skb)->l2cap.bdaddr, &hcon->dst); 6894a4368ff3SJohan Hedberg bt_cb(skb)->l2cap.psm = psm; 68952edf870dSMarcel Holtmann 6896a24cce14SJohan Hedberg if (!chan->ops->recv(chan, skb)) { 6897a24cce14SJohan Hedberg l2cap_chan_put(chan); 689884104b24SAndrei Emeltchenko return; 6899a24cce14SJohan Hedberg } 69000a708f8fSGustavo F. Padovan 69010a708f8fSGustavo F. Padovan drop: 6902a24cce14SJohan Hedberg l2cap_chan_put(chan); 6903a24cce14SJohan Hedberg free_skb: 69040a708f8fSGustavo F. Padovan kfree_skb(skb); 69050a708f8fSGustavo F. Padovan } 69060a708f8fSGustavo F. Padovan 69070a708f8fSGustavo F. Padovan static void l2cap_recv_frame(struct l2cap_conn *conn, struct sk_buff *skb) 69080a708f8fSGustavo F. Padovan { 69090a708f8fSGustavo F. Padovan struct l2cap_hdr *lh = (void *) skb->data; 691061a939c6SJohan Hedberg struct hci_conn *hcon = conn->hcon; 69110a708f8fSGustavo F. Padovan u16 cid, len; 69120a708f8fSGustavo F. Padovan __le16 psm; 69130a708f8fSGustavo F. Padovan 691461a939c6SJohan Hedberg if (hcon->state != BT_CONNECTED) { 691561a939c6SJohan Hedberg BT_DBG("queueing pending rx skb"); 691661a939c6SJohan Hedberg skb_queue_tail(&conn->pending_rx, skb); 691761a939c6SJohan Hedberg return; 691861a939c6SJohan Hedberg } 691961a939c6SJohan Hedberg 69200a708f8fSGustavo F. Padovan skb_pull(skb, L2CAP_HDR_SIZE); 69210a708f8fSGustavo F. Padovan cid = __le16_to_cpu(lh->cid); 69220a708f8fSGustavo F. Padovan len = __le16_to_cpu(lh->len); 69230a708f8fSGustavo F. Padovan 69240a708f8fSGustavo F. Padovan if (len != skb->len) { 69250a708f8fSGustavo F. Padovan kfree_skb(skb); 69260a708f8fSGustavo F. Padovan return; 69270a708f8fSGustavo F. Padovan } 69280a708f8fSGustavo F. Padovan 69299e1d7e15SJohan Hedberg /* Since we can't actively block incoming LE connections we must 69309e1d7e15SJohan Hedberg * at least ensure that we ignore incoming data from them. 69319e1d7e15SJohan Hedberg */ 69329e1d7e15SJohan Hedberg if (hcon->type == LE_LINK && 6933dcc36c16SJohan Hedberg hci_bdaddr_list_lookup(&hcon->hdev->blacklist, &hcon->dst, 6934a250e048SJohan Hedberg bdaddr_dst_type(hcon))) { 6935e493150eSJohan Hedberg kfree_skb(skb); 6936e493150eSJohan Hedberg return; 6937e493150eSJohan Hedberg } 6938e493150eSJohan Hedberg 69390a708f8fSGustavo F. Padovan BT_DBG("len %d, cid 0x%4.4x", len, cid); 69400a708f8fSGustavo F. Padovan 69410a708f8fSGustavo F. Padovan switch (cid) { 69420a708f8fSGustavo F. Padovan case L2CAP_CID_SIGNALING: 69430a708f8fSGustavo F. Padovan l2cap_sig_channel(conn, skb); 69440a708f8fSGustavo F. Padovan break; 69450a708f8fSGustavo F. Padovan 69460a708f8fSGustavo F. Padovan case L2CAP_CID_CONN_LESS: 6947097db76cSAndrei Emeltchenko psm = get_unaligned((__le16 *) skb->data); 69480181a70fSAndrei Emeltchenko skb_pull(skb, L2CAP_PSMLEN_SIZE); 69490a708f8fSGustavo F. Padovan l2cap_conless_channel(conn, psm, skb); 69500a708f8fSGustavo F. Padovan break; 69510a708f8fSGustavo F. Padovan 6952a2877629SMarcel Holtmann case L2CAP_CID_LE_SIGNALING: 6953a2877629SMarcel Holtmann l2cap_le_sig_channel(conn, skb); 6954a2877629SMarcel Holtmann break; 6955a2877629SMarcel Holtmann 69560a708f8fSGustavo F. Padovan default: 69570a708f8fSGustavo F. Padovan l2cap_data_channel(conn, cid, skb); 69580a708f8fSGustavo F. Padovan break; 69590a708f8fSGustavo F. Padovan } 69600a708f8fSGustavo F. Padovan } 69610a708f8fSGustavo F. Padovan 696261a939c6SJohan Hedberg static void process_pending_rx(struct work_struct *work) 696361a939c6SJohan Hedberg { 696461a939c6SJohan Hedberg struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 696561a939c6SJohan Hedberg pending_rx_work); 696661a939c6SJohan Hedberg struct sk_buff *skb; 696761a939c6SJohan Hedberg 696861a939c6SJohan Hedberg BT_DBG(""); 696961a939c6SJohan Hedberg 697061a939c6SJohan Hedberg while ((skb = skb_dequeue(&conn->pending_rx))) 697161a939c6SJohan Hedberg l2cap_recv_frame(conn, skb); 697261a939c6SJohan Hedberg } 697361a939c6SJohan Hedberg 6974162b49e7SJohan Hedberg static struct l2cap_conn *l2cap_conn_add(struct hci_conn *hcon) 6975162b49e7SJohan Hedberg { 6976162b49e7SJohan Hedberg struct l2cap_conn *conn = hcon->l2cap_data; 6977162b49e7SJohan Hedberg struct hci_chan *hchan; 6978162b49e7SJohan Hedberg 6979162b49e7SJohan Hedberg if (conn) 6980162b49e7SJohan Hedberg return conn; 6981162b49e7SJohan Hedberg 6982162b49e7SJohan Hedberg hchan = hci_chan_create(hcon); 6983162b49e7SJohan Hedberg if (!hchan) 6984162b49e7SJohan Hedberg return NULL; 6985162b49e7SJohan Hedberg 698627f70f3eSJohan Hedberg conn = kzalloc(sizeof(*conn), GFP_KERNEL); 6987162b49e7SJohan Hedberg if (!conn) { 6988162b49e7SJohan Hedberg hci_chan_del(hchan); 6989162b49e7SJohan Hedberg return NULL; 6990162b49e7SJohan Hedberg } 6991162b49e7SJohan Hedberg 6992162b49e7SJohan Hedberg kref_init(&conn->ref); 6993162b49e7SJohan Hedberg hcon->l2cap_data = conn; 699451bb8457SJohan Hedberg conn->hcon = hci_conn_get(hcon); 6995162b49e7SJohan Hedberg conn->hchan = hchan; 6996162b49e7SJohan Hedberg 6997162b49e7SJohan Hedberg BT_DBG("hcon %p conn %p hchan %p", hcon, conn, hchan); 6998162b49e7SJohan Hedberg 6999162b49e7SJohan Hedberg switch (hcon->type) { 7000162b49e7SJohan Hedberg case LE_LINK: 7001162b49e7SJohan Hedberg if (hcon->hdev->le_mtu) { 7002162b49e7SJohan Hedberg conn->mtu = hcon->hdev->le_mtu; 7003162b49e7SJohan Hedberg break; 7004162b49e7SJohan Hedberg } 7005162b49e7SJohan Hedberg /* fall through */ 7006162b49e7SJohan Hedberg default: 7007162b49e7SJohan Hedberg conn->mtu = hcon->hdev->acl_mtu; 7008162b49e7SJohan Hedberg break; 7009162b49e7SJohan Hedberg } 7010162b49e7SJohan Hedberg 7011162b49e7SJohan Hedberg conn->feat_mask = 0; 7012162b49e7SJohan Hedberg 70130bd49fc7SJohan Hedberg conn->local_fixed_chan = L2CAP_FC_SIG_BREDR | L2CAP_FC_CONNLESS; 70140bd49fc7SJohan Hedberg 70150bd49fc7SJohan Hedberg if (hcon->type == ACL_LINK && 7016d7a5a11dSMarcel Holtmann hci_dev_test_flag(hcon->hdev, HCI_HS_ENABLED)) 70170bd49fc7SJohan Hedberg conn->local_fixed_chan |= L2CAP_FC_A2MP; 7018162b49e7SJohan Hedberg 7019d7a5a11dSMarcel Holtmann if (hci_dev_test_flag(hcon->hdev, HCI_LE_ENABLED) && 7020f9be9e86SMarcel Holtmann (bredr_sc_enabled(hcon->hdev) || 7021b7cb93e5SMarcel Holtmann hci_dev_test_flag(hcon->hdev, HCI_FORCE_BREDR_SMP))) 7022b5ae344dSJohan Hedberg conn->local_fixed_chan |= L2CAP_FC_SMP_BREDR; 7023b5ae344dSJohan Hedberg 70245a54e7c8SMarcel Holtmann mutex_init(&conn->ident_lock); 7025162b49e7SJohan Hedberg mutex_init(&conn->chan_lock); 7026162b49e7SJohan Hedberg 7027162b49e7SJohan Hedberg INIT_LIST_HEAD(&conn->chan_l); 7028162b49e7SJohan Hedberg INIT_LIST_HEAD(&conn->users); 7029162b49e7SJohan Hedberg 7030162b49e7SJohan Hedberg INIT_DELAYED_WORK(&conn->info_timer, l2cap_info_timeout); 7031162b49e7SJohan Hedberg 703261a939c6SJohan Hedberg skb_queue_head_init(&conn->pending_rx); 703361a939c6SJohan Hedberg INIT_WORK(&conn->pending_rx_work, process_pending_rx); 7034f3d82d0cSJohan Hedberg INIT_WORK(&conn->id_addr_update_work, l2cap_conn_update_id_addr); 703561a939c6SJohan Hedberg 7036162b49e7SJohan Hedberg conn->disc_reason = HCI_ERROR_REMOTE_USER_TERM; 7037162b49e7SJohan Hedberg 7038162b49e7SJohan Hedberg return conn; 7039162b49e7SJohan Hedberg } 7040162b49e7SJohan Hedberg 7041162b49e7SJohan Hedberg static bool is_valid_psm(u16 psm, u8 dst_type) { 7042162b49e7SJohan Hedberg if (!psm) 7043162b49e7SJohan Hedberg return false; 7044162b49e7SJohan Hedberg 7045162b49e7SJohan Hedberg if (bdaddr_type_is_le(dst_type)) 7046162b49e7SJohan Hedberg return (psm <= 0x00ff); 7047162b49e7SJohan Hedberg 7048162b49e7SJohan Hedberg /* PSM must be odd and lsb of upper byte must be 0 */ 7049162b49e7SJohan Hedberg return ((psm & 0x0101) == 0x0001); 7050162b49e7SJohan Hedberg } 7051162b49e7SJohan Hedberg 7052162b49e7SJohan Hedberg int l2cap_chan_connect(struct l2cap_chan *chan, __le16 psm, u16 cid, 7053162b49e7SJohan Hedberg bdaddr_t *dst, u8 dst_type) 7054162b49e7SJohan Hedberg { 7055162b49e7SJohan Hedberg struct l2cap_conn *conn; 7056162b49e7SJohan Hedberg struct hci_conn *hcon; 7057162b49e7SJohan Hedberg struct hci_dev *hdev; 7058162b49e7SJohan Hedberg int err; 7059162b49e7SJohan Hedberg 7060162b49e7SJohan Hedberg BT_DBG("%pMR -> %pMR (type %u) psm 0x%2.2x", &chan->src, dst, 7061162b49e7SJohan Hedberg dst_type, __le16_to_cpu(psm)); 7062162b49e7SJohan Hedberg 706339385cb5SJohan Hedberg hdev = hci_get_route(dst, &chan->src, chan->src_type); 7064162b49e7SJohan Hedberg if (!hdev) 7065162b49e7SJohan Hedberg return -EHOSTUNREACH; 7066162b49e7SJohan Hedberg 7067162b49e7SJohan Hedberg hci_dev_lock(hdev); 7068162b49e7SJohan Hedberg 7069162b49e7SJohan Hedberg if (!is_valid_psm(__le16_to_cpu(psm), dst_type) && !cid && 7070162b49e7SJohan Hedberg chan->chan_type != L2CAP_CHAN_RAW) { 7071162b49e7SJohan Hedberg err = -EINVAL; 7072162b49e7SJohan Hedberg goto done; 7073162b49e7SJohan Hedberg } 7074162b49e7SJohan Hedberg 707521626e62SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED && !psm) { 707621626e62SJohan Hedberg err = -EINVAL; 707721626e62SJohan Hedberg goto done; 707821626e62SJohan Hedberg } 707921626e62SJohan Hedberg 708021626e62SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_FIXED && !cid) { 7081162b49e7SJohan Hedberg err = -EINVAL; 7082162b49e7SJohan Hedberg goto done; 7083162b49e7SJohan Hedberg } 7084162b49e7SJohan Hedberg 7085162b49e7SJohan Hedberg switch (chan->mode) { 7086162b49e7SJohan Hedberg case L2CAP_MODE_BASIC: 7087162b49e7SJohan Hedberg break; 7088162b49e7SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 7089162b49e7SJohan Hedberg l2cap_le_flowctl_init(chan); 7090162b49e7SJohan Hedberg break; 7091162b49e7SJohan Hedberg case L2CAP_MODE_ERTM: 7092162b49e7SJohan Hedberg case L2CAP_MODE_STREAMING: 7093162b49e7SJohan Hedberg if (!disable_ertm) 7094162b49e7SJohan Hedberg break; 7095162b49e7SJohan Hedberg /* fall through */ 7096162b49e7SJohan Hedberg default: 7097beb19e4cSJohan Hedberg err = -EOPNOTSUPP; 7098162b49e7SJohan Hedberg goto done; 7099162b49e7SJohan Hedberg } 7100162b49e7SJohan Hedberg 7101162b49e7SJohan Hedberg switch (chan->state) { 7102162b49e7SJohan Hedberg case BT_CONNECT: 7103162b49e7SJohan Hedberg case BT_CONNECT2: 7104162b49e7SJohan Hedberg case BT_CONFIG: 7105162b49e7SJohan Hedberg /* Already connecting */ 7106162b49e7SJohan Hedberg err = 0; 7107162b49e7SJohan Hedberg goto done; 7108162b49e7SJohan Hedberg 7109162b49e7SJohan Hedberg case BT_CONNECTED: 7110162b49e7SJohan Hedberg /* Already connected */ 7111162b49e7SJohan Hedberg err = -EISCONN; 7112162b49e7SJohan Hedberg goto done; 7113162b49e7SJohan Hedberg 7114162b49e7SJohan Hedberg case BT_OPEN: 7115162b49e7SJohan Hedberg case BT_BOUND: 7116162b49e7SJohan Hedberg /* Can connect */ 7117162b49e7SJohan Hedberg break; 7118162b49e7SJohan Hedberg 7119162b49e7SJohan Hedberg default: 7120162b49e7SJohan Hedberg err = -EBADFD; 7121162b49e7SJohan Hedberg goto done; 7122162b49e7SJohan Hedberg } 7123162b49e7SJohan Hedberg 7124162b49e7SJohan Hedberg /* Set destination address and psm */ 7125162b49e7SJohan Hedberg bacpy(&chan->dst, dst); 7126162b49e7SJohan Hedberg chan->dst_type = dst_type; 7127162b49e7SJohan Hedberg 7128162b49e7SJohan Hedberg chan->psm = psm; 7129162b49e7SJohan Hedberg chan->dcid = cid; 7130162b49e7SJohan Hedberg 71316f77d8c7SAndre Guedes if (bdaddr_type_is_le(dst_type)) { 71326f77d8c7SAndre Guedes /* Convert from L2CAP channel address type to HCI address type 71336f77d8c7SAndre Guedes */ 71346f77d8c7SAndre Guedes if (dst_type == BDADDR_LE_PUBLIC) 71356f77d8c7SAndre Guedes dst_type = ADDR_LE_DEV_PUBLIC; 71366f77d8c7SAndre Guedes else 71376f77d8c7SAndre Guedes dst_type = ADDR_LE_DEV_RANDOM; 71386f77d8c7SAndre Guedes 7139d7a5a11dSMarcel Holtmann if (hci_dev_test_flag(hdev, HCI_ADVERTISING)) 71400ad06aa6SJohan Hedberg hcon = hci_connect_le(hdev, dst, dst_type, 7141fa142220SJakub Pawlowski chan->sec_level, 7142fa142220SJakub Pawlowski HCI_LE_CONN_TIMEOUT, 71430ad06aa6SJohan Hedberg HCI_ROLE_SLAVE); 71440ad06aa6SJohan Hedberg else 71450ad06aa6SJohan Hedberg hcon = hci_connect_le_scan(hdev, dst, dst_type, 71460ad06aa6SJohan Hedberg chan->sec_level, 71470ad06aa6SJohan Hedberg HCI_LE_CONN_TIMEOUT); 71480ad06aa6SJohan Hedberg 71496f77d8c7SAndre Guedes } else { 7150d93375a8SJohan Hedberg u8 auth_type = l2cap_get_auth_type(chan); 715104a6c589SAndre Guedes hcon = hci_connect_acl(hdev, dst, chan->sec_level, auth_type); 71526f77d8c7SAndre Guedes } 7153162b49e7SJohan Hedberg 7154162b49e7SJohan Hedberg if (IS_ERR(hcon)) { 7155162b49e7SJohan Hedberg err = PTR_ERR(hcon); 7156162b49e7SJohan Hedberg goto done; 7157162b49e7SJohan Hedberg } 7158162b49e7SJohan Hedberg 7159162b49e7SJohan Hedberg conn = l2cap_conn_add(hcon); 7160162b49e7SJohan Hedberg if (!conn) { 7161162b49e7SJohan Hedberg hci_conn_drop(hcon); 7162162b49e7SJohan Hedberg err = -ENOMEM; 7163162b49e7SJohan Hedberg goto done; 7164162b49e7SJohan Hedberg } 7165162b49e7SJohan Hedberg 716602e246aeSJohan Hedberg mutex_lock(&conn->chan_lock); 716702e246aeSJohan Hedberg l2cap_chan_lock(chan); 716802e246aeSJohan Hedberg 7169162b49e7SJohan Hedberg if (cid && __l2cap_get_chan_by_dcid(conn, cid)) { 7170162b49e7SJohan Hedberg hci_conn_drop(hcon); 7171162b49e7SJohan Hedberg err = -EBUSY; 717202e246aeSJohan Hedberg goto chan_unlock; 7173162b49e7SJohan Hedberg } 7174162b49e7SJohan Hedberg 7175162b49e7SJohan Hedberg /* Update source addr of the socket */ 7176162b49e7SJohan Hedberg bacpy(&chan->src, &hcon->src); 7177a250e048SJohan Hedberg chan->src_type = bdaddr_src_type(hcon); 7178162b49e7SJohan Hedberg 717902e246aeSJohan Hedberg __l2cap_chan_add(conn, chan); 7180162b49e7SJohan Hedberg 7181162b49e7SJohan Hedberg /* l2cap_chan_add takes its own ref so we can drop this one */ 7182162b49e7SJohan Hedberg hci_conn_drop(hcon); 7183162b49e7SJohan Hedberg 7184162b49e7SJohan Hedberg l2cap_state_change(chan, BT_CONNECT); 7185162b49e7SJohan Hedberg __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 7186162b49e7SJohan Hedberg 718761202e4dSJohan Hedberg /* Release chan->sport so that it can be reused by other 718861202e4dSJohan Hedberg * sockets (as it's only used for listening sockets). 718961202e4dSJohan Hedberg */ 719061202e4dSJohan Hedberg write_lock(&chan_list_lock); 719161202e4dSJohan Hedberg chan->sport = 0; 719261202e4dSJohan Hedberg write_unlock(&chan_list_lock); 719361202e4dSJohan Hedberg 7194162b49e7SJohan Hedberg if (hcon->state == BT_CONNECTED) { 7195162b49e7SJohan Hedberg if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 7196162b49e7SJohan Hedberg __clear_chan_timer(chan); 7197e7cafc45SJohan Hedberg if (l2cap_chan_check_security(chan, true)) 7198162b49e7SJohan Hedberg l2cap_state_change(chan, BT_CONNECTED); 7199162b49e7SJohan Hedberg } else 7200162b49e7SJohan Hedberg l2cap_do_start(chan); 7201162b49e7SJohan Hedberg } 7202162b49e7SJohan Hedberg 7203162b49e7SJohan Hedberg err = 0; 7204162b49e7SJohan Hedberg 720502e246aeSJohan Hedberg chan_unlock: 7206162b49e7SJohan Hedberg l2cap_chan_unlock(chan); 720702e246aeSJohan Hedberg mutex_unlock(&conn->chan_lock); 720802e246aeSJohan Hedberg done: 7209162b49e7SJohan Hedberg hci_dev_unlock(hdev); 7210162b49e7SJohan Hedberg hci_dev_put(hdev); 7211162b49e7SJohan Hedberg return err; 7212162b49e7SJohan Hedberg } 72136b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_connect); 7214162b49e7SJohan Hedberg 72150a708f8fSGustavo F. Padovan /* ---- L2CAP interface with lower layer (HCI) ---- */ 72160a708f8fSGustavo F. Padovan 7217686ebf28SUlisses Furquim int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr) 72180a708f8fSGustavo F. Padovan { 72190a708f8fSGustavo F. Padovan int exact = 0, lm1 = 0, lm2 = 0; 722023691d75SGustavo F. Padovan struct l2cap_chan *c; 72210a708f8fSGustavo F. Padovan 72226ed93dc6SAndrei Emeltchenko BT_DBG("hdev %s, bdaddr %pMR", hdev->name, bdaddr); 72230a708f8fSGustavo F. Padovan 72240a708f8fSGustavo F. Padovan /* Find listening sockets and check their link_mode */ 722523691d75SGustavo F. Padovan read_lock(&chan_list_lock); 722623691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 722789bc500eSGustavo F. Padovan if (c->state != BT_LISTEN) 72280a708f8fSGustavo F. Padovan continue; 72290a708f8fSGustavo F. Padovan 72307eafc59eSMarcel Holtmann if (!bacmp(&c->src, &hdev->bdaddr)) { 72310a708f8fSGustavo F. Padovan lm1 |= HCI_LM_ACCEPT; 723243bd0f32SAndrei Emeltchenko if (test_bit(FLAG_ROLE_SWITCH, &c->flags)) 72330a708f8fSGustavo F. Padovan lm1 |= HCI_LM_MASTER; 72340a708f8fSGustavo F. Padovan exact++; 72357eafc59eSMarcel Holtmann } else if (!bacmp(&c->src, BDADDR_ANY)) { 72360a708f8fSGustavo F. Padovan lm2 |= HCI_LM_ACCEPT; 723743bd0f32SAndrei Emeltchenko if (test_bit(FLAG_ROLE_SWITCH, &c->flags)) 72380a708f8fSGustavo F. Padovan lm2 |= HCI_LM_MASTER; 72390a708f8fSGustavo F. Padovan } 72400a708f8fSGustavo F. Padovan } 724123691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 72420a708f8fSGustavo F. Padovan 72430a708f8fSGustavo F. Padovan return exact ? lm1 : lm2; 72440a708f8fSGustavo F. Padovan } 72450a708f8fSGustavo F. Padovan 7246e760ec12SJohan Hedberg /* Find the next fixed channel in BT_LISTEN state, continue iteration 7247e760ec12SJohan Hedberg * from an existing channel in the list or from the beginning of the 7248e760ec12SJohan Hedberg * global list (by passing NULL as first parameter). 7249e760ec12SJohan Hedberg */ 7250e760ec12SJohan Hedberg static struct l2cap_chan *l2cap_global_fixed_chan(struct l2cap_chan *c, 7251327a7191SJohan Hedberg struct hci_conn *hcon) 7252e760ec12SJohan Hedberg { 7253327a7191SJohan Hedberg u8 src_type = bdaddr_src_type(hcon); 7254327a7191SJohan Hedberg 7255e760ec12SJohan Hedberg read_lock(&chan_list_lock); 7256e760ec12SJohan Hedberg 7257e760ec12SJohan Hedberg if (c) 7258e760ec12SJohan Hedberg c = list_next_entry(c, global_l); 7259e760ec12SJohan Hedberg else 7260e760ec12SJohan Hedberg c = list_entry(chan_list.next, typeof(*c), global_l); 7261e760ec12SJohan Hedberg 7262e760ec12SJohan Hedberg list_for_each_entry_from(c, &chan_list, global_l) { 7263e760ec12SJohan Hedberg if (c->chan_type != L2CAP_CHAN_FIXED) 7264e760ec12SJohan Hedberg continue; 7265e760ec12SJohan Hedberg if (c->state != BT_LISTEN) 7266e760ec12SJohan Hedberg continue; 7267327a7191SJohan Hedberg if (bacmp(&c->src, &hcon->src) && bacmp(&c->src, BDADDR_ANY)) 7268e760ec12SJohan Hedberg continue; 7269327a7191SJohan Hedberg if (src_type != c->src_type) 727054a1b626SJohan Hedberg continue; 7271e760ec12SJohan Hedberg 7272e760ec12SJohan Hedberg l2cap_chan_hold(c); 7273e760ec12SJohan Hedberg read_unlock(&chan_list_lock); 7274e760ec12SJohan Hedberg return c; 7275e760ec12SJohan Hedberg } 7276e760ec12SJohan Hedberg 7277e760ec12SJohan Hedberg read_unlock(&chan_list_lock); 7278e760ec12SJohan Hedberg 7279e760ec12SJohan Hedberg return NULL; 7280e760ec12SJohan Hedberg } 7281e760ec12SJohan Hedberg 7282539c496dSJohan Hedberg static void l2cap_connect_cfm(struct hci_conn *hcon, u8 status) 72830a708f8fSGustavo F. Padovan { 7284e760ec12SJohan Hedberg struct hci_dev *hdev = hcon->hdev; 72850a708f8fSGustavo F. Padovan struct l2cap_conn *conn; 7286e760ec12SJohan Hedberg struct l2cap_chan *pchan; 7287e760ec12SJohan Hedberg u8 dst_type; 72880a708f8fSGustavo F. Padovan 7289539c496dSJohan Hedberg if (hcon->type != ACL_LINK && hcon->type != LE_LINK) 7290539c496dSJohan Hedberg return; 7291539c496dSJohan Hedberg 72926ed93dc6SAndrei Emeltchenko BT_DBG("hcon %p bdaddr %pMR status %d", hcon, &hcon->dst, status); 72930a708f8fSGustavo F. Padovan 7294dc0f5088SJohan Hedberg if (status) { 7295e175072fSJoe Perches l2cap_conn_del(hcon, bt_to_errno(status)); 7296dc0f5088SJohan Hedberg return; 7297ba6fc317SAndrei Emeltchenko } 7298dc0f5088SJohan Hedberg 7299dc0f5088SJohan Hedberg conn = l2cap_conn_add(hcon); 7300dc0f5088SJohan Hedberg if (!conn) 7301dc0f5088SJohan Hedberg return; 7302dc0f5088SJohan Hedberg 7303a250e048SJohan Hedberg dst_type = bdaddr_dst_type(hcon); 7304e760ec12SJohan Hedberg 7305e760ec12SJohan Hedberg /* If device is blocked, do not create channels for it */ 7306e760ec12SJohan Hedberg if (hci_bdaddr_list_lookup(&hdev->blacklist, &hcon->dst, dst_type)) 7307e760ec12SJohan Hedberg return; 7308e760ec12SJohan Hedberg 7309e760ec12SJohan Hedberg /* Find fixed channels and notify them of the new connection. We 7310e760ec12SJohan Hedberg * use multiple individual lookups, continuing each time where 7311e760ec12SJohan Hedberg * we left off, because the list lock would prevent calling the 7312e760ec12SJohan Hedberg * potentially sleeping l2cap_chan_lock() function. 7313e760ec12SJohan Hedberg */ 7314327a7191SJohan Hedberg pchan = l2cap_global_fixed_chan(NULL, hcon); 7315e760ec12SJohan Hedberg while (pchan) { 7316e760ec12SJohan Hedberg struct l2cap_chan *chan, *next; 7317e760ec12SJohan Hedberg 7318e760ec12SJohan Hedberg /* Client fixed channels should override server ones */ 7319e760ec12SJohan Hedberg if (__l2cap_get_chan_by_dcid(conn, pchan->scid)) 7320e760ec12SJohan Hedberg goto next; 7321e760ec12SJohan Hedberg 7322e760ec12SJohan Hedberg l2cap_chan_lock(pchan); 7323e760ec12SJohan Hedberg chan = pchan->ops->new_connection(pchan); 7324e760ec12SJohan Hedberg if (chan) { 7325e760ec12SJohan Hedberg bacpy(&chan->src, &hcon->src); 7326e760ec12SJohan Hedberg bacpy(&chan->dst, &hcon->dst); 7327a250e048SJohan Hedberg chan->src_type = bdaddr_src_type(hcon); 7328e760ec12SJohan Hedberg chan->dst_type = dst_type; 7329e760ec12SJohan Hedberg 7330e760ec12SJohan Hedberg __l2cap_chan_add(conn, chan); 7331e760ec12SJohan Hedberg } 7332e760ec12SJohan Hedberg 7333e760ec12SJohan Hedberg l2cap_chan_unlock(pchan); 7334e760ec12SJohan Hedberg next: 7335327a7191SJohan Hedberg next = l2cap_global_fixed_chan(pchan, hcon); 7336e760ec12SJohan Hedberg l2cap_chan_put(pchan); 7337e760ec12SJohan Hedberg pchan = next; 7338e760ec12SJohan Hedberg } 7339e760ec12SJohan Hedberg 7340dc0f5088SJohan Hedberg l2cap_conn_ready(conn); 73410a708f8fSGustavo F. Padovan } 73420a708f8fSGustavo F. Padovan 7343686ebf28SUlisses Furquim int l2cap_disconn_ind(struct hci_conn *hcon) 73440a708f8fSGustavo F. Padovan { 73450a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 73460a708f8fSGustavo F. Padovan 73470a708f8fSGustavo F. Padovan BT_DBG("hcon %p", hcon); 73480a708f8fSGustavo F. Padovan 7349686ebf28SUlisses Furquim if (!conn) 73509f5a0d7bSAndrei Emeltchenko return HCI_ERROR_REMOTE_USER_TERM; 73510a708f8fSGustavo F. Padovan return conn->disc_reason; 73520a708f8fSGustavo F. Padovan } 73530a708f8fSGustavo F. Padovan 73543a6d576bSJohan Hedberg static void l2cap_disconn_cfm(struct hci_conn *hcon, u8 reason) 73550a708f8fSGustavo F. Padovan { 73563a6d576bSJohan Hedberg if (hcon->type != ACL_LINK && hcon->type != LE_LINK) 73573a6d576bSJohan Hedberg return; 73583a6d576bSJohan Hedberg 73590a708f8fSGustavo F. Padovan BT_DBG("hcon %p reason %d", hcon, reason); 73600a708f8fSGustavo F. Padovan 7361e175072fSJoe Perches l2cap_conn_del(hcon, bt_to_errno(reason)); 73620a708f8fSGustavo F. Padovan } 73630a708f8fSGustavo F. Padovan 73644343478fSGustavo F. Padovan static inline void l2cap_check_encryption(struct l2cap_chan *chan, u8 encrypt) 73650a708f8fSGustavo F. Padovan { 7366715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) 73670a708f8fSGustavo F. Padovan return; 73680a708f8fSGustavo F. Padovan 73690a708f8fSGustavo F. Padovan if (encrypt == 0x00) { 73704343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_MEDIUM) { 7371ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_ENC_TIMEOUT); 73727d513e92SMarcel Holtmann } else if (chan->sec_level == BT_SECURITY_HIGH || 73737d513e92SMarcel Holtmann chan->sec_level == BT_SECURITY_FIPS) 73740f852724SGustavo F. Padovan l2cap_chan_close(chan, ECONNREFUSED); 73750a708f8fSGustavo F. Padovan } else { 73764343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_MEDIUM) 7377c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 73780a708f8fSGustavo F. Padovan } 73790a708f8fSGustavo F. Padovan } 73800a708f8fSGustavo F. Padovan 7381354fe804SJohan Hedberg static void l2cap_security_cfm(struct hci_conn *hcon, u8 status, u8 encrypt) 73820a708f8fSGustavo F. Padovan { 73830a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 738448454079SGustavo F. Padovan struct l2cap_chan *chan; 73850a708f8fSGustavo F. Padovan 73860a708f8fSGustavo F. Padovan if (!conn) 7387354fe804SJohan Hedberg return; 73880a708f8fSGustavo F. Padovan 738989d8b407SAndrei Emeltchenko BT_DBG("conn %p status 0x%2.2x encrypt %u", conn, status, encrypt); 73900a708f8fSGustavo F. Padovan 73913df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 73920a708f8fSGustavo F. Padovan 73933df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 73946be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 73950a708f8fSGustavo F. Padovan 739689d8b407SAndrei Emeltchenko BT_DBG("chan %p scid 0x%4.4x state %s", chan, chan->scid, 739789d8b407SAndrei Emeltchenko state_to_string(chan->state)); 7398f1cb9af5SVinicius Costa Gomes 73992338a7e0SJohan Hedberg if (chan->scid == L2CAP_CID_A2MP) { 740078eb2f98SAndrei Emeltchenko l2cap_chan_unlock(chan); 740178eb2f98SAndrei Emeltchenko continue; 740278eb2f98SAndrei Emeltchenko } 740378eb2f98SAndrei Emeltchenko 7404191eb398SJohan Hedberg if (!status && encrypt) 7405f1cb9af5SVinicius Costa Gomes chan->sec_level = hcon->sec_level; 7406f1cb9af5SVinicius Costa Gomes 740796eff46eSAndrei Emeltchenko if (!__l2cap_no_conn_pending(chan)) { 74086be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 74090a708f8fSGustavo F. Padovan continue; 74100a708f8fSGustavo F. Padovan } 74110a708f8fSGustavo F. Padovan 741289bc500eSGustavo F. Padovan if (!status && (chan->state == BT_CONNECTED || 741389bc500eSGustavo F. Padovan chan->state == BT_CONFIG)) { 7414d97c899bSMarcel Holtmann chan->ops->resume(chan); 74154343478fSGustavo F. Padovan l2cap_check_encryption(chan, encrypt); 74166be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 74170a708f8fSGustavo F. Padovan continue; 74180a708f8fSGustavo F. Padovan } 74190a708f8fSGustavo F. Padovan 742089bc500eSGustavo F. Padovan if (chan->state == BT_CONNECT) { 74216d3c15daSJohan Hedberg if (!status) 742293c3e8f5SAndrei Emeltchenko l2cap_start_connection(chan); 74236d3c15daSJohan Hedberg else 7424ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_TIMEOUT); 7425fa37c1aaSJohan Hedberg } else if (chan->state == BT_CONNECT2 && 7426fa37c1aaSJohan Hedberg chan->mode != L2CAP_MODE_LE_FLOWCTL) { 74270a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 7428df3c3931SJohan Hedberg __u16 res, stat; 74290a708f8fSGustavo F. Padovan 74300a708f8fSGustavo F. Padovan if (!status) { 7431bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 7432df3c3931SJohan Hedberg res = L2CAP_CR_PEND; 7433df3c3931SJohan Hedberg stat = L2CAP_CS_AUTHOR_PEND; 74342dc4e510SGustavo Padovan chan->ops->defer(chan); 7435df3c3931SJohan Hedberg } else { 7436acdcabf5SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 7437df3c3931SJohan Hedberg res = L2CAP_CR_SUCCESS; 7438df3c3931SJohan Hedberg stat = L2CAP_CS_NO_INFO; 7439df3c3931SJohan Hedberg } 74400a708f8fSGustavo F. Padovan } else { 7441acdcabf5SGustavo Padovan l2cap_state_change(chan, BT_DISCONN); 7442ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_TIMEOUT); 7443df3c3931SJohan Hedberg res = L2CAP_CR_SEC_BLOCK; 7444df3c3931SJohan Hedberg stat = L2CAP_CS_NO_INFO; 74450a708f8fSGustavo F. Padovan } 74460a708f8fSGustavo F. Padovan 7447fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 7448fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 7449df3c3931SJohan Hedberg rsp.result = cpu_to_le16(res); 7450df3c3931SJohan Hedberg rsp.status = cpu_to_le16(stat); 7451fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 7452fc7f8a7eSGustavo F. Padovan sizeof(rsp), &rsp); 74532d369359SMat Martineau 74542d369359SMat Martineau if (!test_bit(CONF_REQ_SENT, &chan->conf_state) && 74552d369359SMat Martineau res == L2CAP_CR_SUCCESS) { 74562d369359SMat Martineau char buf[128]; 74572d369359SMat Martineau set_bit(CONF_REQ_SENT, &chan->conf_state); 74582d369359SMat Martineau l2cap_send_cmd(conn, l2cap_get_ident(conn), 74592d369359SMat Martineau L2CAP_CONF_REQ, 74602d369359SMat Martineau l2cap_build_conf_req(chan, buf), 74612d369359SMat Martineau buf); 74622d369359SMat Martineau chan->num_conf_req++; 74632d369359SMat Martineau } 74640a708f8fSGustavo F. Padovan } 74650a708f8fSGustavo F. Padovan 74666be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 74670a708f8fSGustavo F. Padovan } 74680a708f8fSGustavo F. Padovan 74693df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 74700a708f8fSGustavo F. Padovan } 74710a708f8fSGustavo F. Padovan 74729b4c3336SArron Wang void l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags) 74730a708f8fSGustavo F. Padovan { 74740a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 7475d73a0988SAndrei Emeltchenko struct l2cap_hdr *hdr; 7476d73a0988SAndrei Emeltchenko int len; 74770a708f8fSGustavo F. Padovan 74781d13a254SAndrei Emeltchenko /* For AMP controller do not create l2cap conn */ 7479ca8bee5dSMarcel Holtmann if (!conn && hcon->hdev->dev_type != HCI_PRIMARY) 74801d13a254SAndrei Emeltchenko goto drop; 74810a708f8fSGustavo F. Padovan 74820a708f8fSGustavo F. Padovan if (!conn) 7483baf43251SClaudio Takahasi conn = l2cap_conn_add(hcon); 74840a708f8fSGustavo F. Padovan 74850a708f8fSGustavo F. Padovan if (!conn) 74860a708f8fSGustavo F. Padovan goto drop; 74870a708f8fSGustavo F. Padovan 74880a708f8fSGustavo F. Padovan BT_DBG("conn %p len %d flags 0x%x", conn, skb->len, flags); 74890a708f8fSGustavo F. Padovan 7490d73a0988SAndrei Emeltchenko switch (flags) { 7491d73a0988SAndrei Emeltchenko case ACL_START: 7492d73a0988SAndrei Emeltchenko case ACL_START_NO_FLUSH: 7493d73a0988SAndrei Emeltchenko case ACL_COMPLETE: 74940a708f8fSGustavo F. Padovan if (conn->rx_len) { 74950a708f8fSGustavo F. Padovan BT_ERR("Unexpected start frame (len %d)", skb->len); 74960a708f8fSGustavo F. Padovan kfree_skb(conn->rx_skb); 74970a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 74980a708f8fSGustavo F. Padovan conn->rx_len = 0; 74990a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 75000a708f8fSGustavo F. Padovan } 75010a708f8fSGustavo F. Padovan 75020a708f8fSGustavo F. Padovan /* Start fragment always begin with Basic L2CAP header */ 75030a708f8fSGustavo F. Padovan if (skb->len < L2CAP_HDR_SIZE) { 75040a708f8fSGustavo F. Padovan BT_ERR("Frame is too short (len %d)", skb->len); 75050a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 75060a708f8fSGustavo F. Padovan goto drop; 75070a708f8fSGustavo F. Padovan } 75080a708f8fSGustavo F. Padovan 75090a708f8fSGustavo F. Padovan hdr = (struct l2cap_hdr *) skb->data; 75100a708f8fSGustavo F. Padovan len = __le16_to_cpu(hdr->len) + L2CAP_HDR_SIZE; 75110a708f8fSGustavo F. Padovan 75120a708f8fSGustavo F. Padovan if (len == skb->len) { 75130a708f8fSGustavo F. Padovan /* Complete frame received */ 75140a708f8fSGustavo F. Padovan l2cap_recv_frame(conn, skb); 75159b4c3336SArron Wang return; 75160a708f8fSGustavo F. Padovan } 75170a708f8fSGustavo F. Padovan 75180a708f8fSGustavo F. Padovan BT_DBG("Start: total len %d, frag len %d", len, skb->len); 75190a708f8fSGustavo F. Padovan 75200a708f8fSGustavo F. Padovan if (skb->len > len) { 75210a708f8fSGustavo F. Padovan BT_ERR("Frame is too long (len %d, expected len %d)", 75220a708f8fSGustavo F. Padovan skb->len, len); 75230a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 75240a708f8fSGustavo F. Padovan goto drop; 75250a708f8fSGustavo F. Padovan } 75260a708f8fSGustavo F. Padovan 75270a708f8fSGustavo F. Padovan /* Allocate skb for the complete frame (with header) */ 75288bcde1f2SGustavo Padovan conn->rx_skb = bt_skb_alloc(len, GFP_KERNEL); 75290a708f8fSGustavo F. Padovan if (!conn->rx_skb) 75300a708f8fSGustavo F. Padovan goto drop; 75310a708f8fSGustavo F. Padovan 75320a708f8fSGustavo F. Padovan skb_copy_from_linear_data(skb, skb_put(conn->rx_skb, skb->len), 75330a708f8fSGustavo F. Padovan skb->len); 75340a708f8fSGustavo F. Padovan conn->rx_len = len - skb->len; 7535d73a0988SAndrei Emeltchenko break; 7536d73a0988SAndrei Emeltchenko 7537d73a0988SAndrei Emeltchenko case ACL_CONT: 75380a708f8fSGustavo F. Padovan BT_DBG("Cont: frag len %d (expecting %d)", skb->len, conn->rx_len); 75390a708f8fSGustavo F. Padovan 75400a708f8fSGustavo F. Padovan if (!conn->rx_len) { 75410a708f8fSGustavo F. Padovan BT_ERR("Unexpected continuation frame (len %d)", skb->len); 75420a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 75430a708f8fSGustavo F. Padovan goto drop; 75440a708f8fSGustavo F. Padovan } 75450a708f8fSGustavo F. Padovan 75460a708f8fSGustavo F. Padovan if (skb->len > conn->rx_len) { 75470a708f8fSGustavo F. Padovan BT_ERR("Fragment is too long (len %d, expected %d)", 75480a708f8fSGustavo F. Padovan skb->len, conn->rx_len); 75490a708f8fSGustavo F. Padovan kfree_skb(conn->rx_skb); 75500a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 75510a708f8fSGustavo F. Padovan conn->rx_len = 0; 75520a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 75530a708f8fSGustavo F. Padovan goto drop; 75540a708f8fSGustavo F. Padovan } 75550a708f8fSGustavo F. Padovan 75560a708f8fSGustavo F. Padovan skb_copy_from_linear_data(skb, skb_put(conn->rx_skb, skb->len), 75570a708f8fSGustavo F. Padovan skb->len); 75580a708f8fSGustavo F. Padovan conn->rx_len -= skb->len; 75590a708f8fSGustavo F. Padovan 75600a708f8fSGustavo F. Padovan if (!conn->rx_len) { 7561c4e5bafaSJohan Hedberg /* Complete frame received. l2cap_recv_frame 7562c4e5bafaSJohan Hedberg * takes ownership of the skb so set the global 7563c4e5bafaSJohan Hedberg * rx_skb pointer to NULL first. 7564c4e5bafaSJohan Hedberg */ 7565c4e5bafaSJohan Hedberg struct sk_buff *rx_skb = conn->rx_skb; 75660a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 7567c4e5bafaSJohan Hedberg l2cap_recv_frame(conn, rx_skb); 75680a708f8fSGustavo F. Padovan } 7569d73a0988SAndrei Emeltchenko break; 75700a708f8fSGustavo F. Padovan } 75710a708f8fSGustavo F. Padovan 75720a708f8fSGustavo F. Padovan drop: 75730a708f8fSGustavo F. Padovan kfree_skb(skb); 75740a708f8fSGustavo F. Padovan } 75750a708f8fSGustavo F. Padovan 7576354fe804SJohan Hedberg static struct hci_cb l2cap_cb = { 7577354fe804SJohan Hedberg .name = "L2CAP", 7578539c496dSJohan Hedberg .connect_cfm = l2cap_connect_cfm, 75793a6d576bSJohan Hedberg .disconn_cfm = l2cap_disconn_cfm, 7580354fe804SJohan Hedberg .security_cfm = l2cap_security_cfm, 7581354fe804SJohan Hedberg }; 7582354fe804SJohan Hedberg 75830a708f8fSGustavo F. Padovan static int l2cap_debugfs_show(struct seq_file *f, void *p) 75840a708f8fSGustavo F. Padovan { 758523691d75SGustavo F. Padovan struct l2cap_chan *c; 75860a708f8fSGustavo F. Padovan 7587333055f2SGustavo F. Padovan read_lock(&chan_list_lock); 75880a708f8fSGustavo F. Padovan 758923691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 7590eeb5a067SMarcel Holtmann seq_printf(f, "%pMR (%u) %pMR (%u) %d %d 0x%4.4x 0x%4.4x %d %d %d %d\n", 7591eeb5a067SMarcel Holtmann &c->src, c->src_type, &c->dst, c->dst_type, 759289bc500eSGustavo F. Padovan c->state, __le16_to_cpu(c->psm), 759323691d75SGustavo F. Padovan c->scid, c->dcid, c->imtu, c->omtu, 759423691d75SGustavo F. Padovan c->sec_level, c->mode); 75950a708f8fSGustavo F. Padovan } 75960a708f8fSGustavo F. Padovan 7597333055f2SGustavo F. Padovan read_unlock(&chan_list_lock); 75980a708f8fSGustavo F. Padovan 75990a708f8fSGustavo F. Padovan return 0; 76000a708f8fSGustavo F. Padovan } 76010a708f8fSGustavo F. Padovan 76020a708f8fSGustavo F. Padovan static int l2cap_debugfs_open(struct inode *inode, struct file *file) 76030a708f8fSGustavo F. Padovan { 76040a708f8fSGustavo F. Padovan return single_open(file, l2cap_debugfs_show, inode->i_private); 76050a708f8fSGustavo F. Padovan } 76060a708f8fSGustavo F. Padovan 76070a708f8fSGustavo F. Padovan static const struct file_operations l2cap_debugfs_fops = { 76080a708f8fSGustavo F. Padovan .open = l2cap_debugfs_open, 76090a708f8fSGustavo F. Padovan .read = seq_read, 76100a708f8fSGustavo F. Padovan .llseek = seq_lseek, 76110a708f8fSGustavo F. Padovan .release = single_release, 76120a708f8fSGustavo F. Padovan }; 76130a708f8fSGustavo F. Padovan 76140a708f8fSGustavo F. Padovan static struct dentry *l2cap_debugfs; 76150a708f8fSGustavo F. Padovan 761664274518SGustavo F. Padovan int __init l2cap_init(void) 76170a708f8fSGustavo F. Padovan { 76180a708f8fSGustavo F. Padovan int err; 76190a708f8fSGustavo F. Padovan 7620bb58f747SGustavo F. Padovan err = l2cap_init_sockets(); 76210a708f8fSGustavo F. Padovan if (err < 0) 76220a708f8fSGustavo F. Padovan return err; 76230a708f8fSGustavo F. Padovan 7624354fe804SJohan Hedberg hci_register_cb(&l2cap_cb); 7625354fe804SJohan Hedberg 76261120e4bfSMarcel Holtmann if (IS_ERR_OR_NULL(bt_debugfs)) 76271120e4bfSMarcel Holtmann return 0; 76281120e4bfSMarcel Holtmann 76292d792818SGustavo Padovan l2cap_debugfs = debugfs_create_file("l2cap", 0444, bt_debugfs, 76302d792818SGustavo Padovan NULL, &l2cap_debugfs_fops); 76310a708f8fSGustavo F. Padovan 763240b9397aSSamuel Ortiz debugfs_create_u16("l2cap_le_max_credits", 0644, bt_debugfs, 7633f15b8ecfSJohan Hedberg &le_max_credits); 763440b9397aSSamuel Ortiz debugfs_create_u16("l2cap_le_default_mps", 0644, bt_debugfs, 7635f15b8ecfSJohan Hedberg &le_default_mps); 7636f15b8ecfSJohan Hedberg 76370a708f8fSGustavo F. Padovan return 0; 76380a708f8fSGustavo F. Padovan } 76390a708f8fSGustavo F. Padovan 764064274518SGustavo F. Padovan void l2cap_exit(void) 76410a708f8fSGustavo F. Padovan { 76420a708f8fSGustavo F. Padovan debugfs_remove(l2cap_debugfs); 7643354fe804SJohan Hedberg hci_unregister_cb(&l2cap_cb); 7644bb58f747SGustavo F. Padovan l2cap_cleanup_sockets(); 76450a708f8fSGustavo F. Padovan } 76460a708f8fSGustavo F. Padovan 76470a708f8fSGustavo F. Padovan module_param(disable_ertm, bool, 0644); 76480a708f8fSGustavo F. Padovan MODULE_PARM_DESC(disable_ertm, "Disable enhanced retransmission mode"); 7649