10a708f8fSGustavo F. Padovan /* 20a708f8fSGustavo F. Padovan BlueZ - Bluetooth protocol stack for Linux 30a708f8fSGustavo F. Padovan Copyright (C) 2000-2001 Qualcomm Incorporated 40a708f8fSGustavo F. Padovan Copyright (C) 2009-2010 Gustavo F. Padovan <gustavo@padovan.org> 50a708f8fSGustavo F. Padovan Copyright (C) 2010 Google Inc. 6590051deSGustavo F. Padovan Copyright (C) 2011 ProFUSION Embedded Systems 70a708f8fSGustavo F. Padovan 80a708f8fSGustavo F. Padovan Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com> 90a708f8fSGustavo F. Padovan 100a708f8fSGustavo F. Padovan This program is free software; you can redistribute it and/or modify 110a708f8fSGustavo F. Padovan it under the terms of the GNU General Public License version 2 as 120a708f8fSGustavo F. Padovan published by the Free Software Foundation; 130a708f8fSGustavo F. Padovan 140a708f8fSGustavo F. Padovan THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS 150a708f8fSGustavo F. Padovan OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 160a708f8fSGustavo F. Padovan FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS. 170a708f8fSGustavo F. Padovan IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY 180a708f8fSGustavo F. Padovan CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES 190a708f8fSGustavo F. Padovan WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 200a708f8fSGustavo F. Padovan ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 210a708f8fSGustavo F. Padovan OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 220a708f8fSGustavo F. Padovan 230a708f8fSGustavo F. Padovan ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS, 240a708f8fSGustavo F. Padovan COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS 250a708f8fSGustavo F. Padovan SOFTWARE IS DISCLAIMED. 260a708f8fSGustavo F. Padovan */ 270a708f8fSGustavo F. Padovan 28bb58f747SGustavo F. Padovan /* Bluetooth L2CAP core. */ 290a708f8fSGustavo F. Padovan 300a708f8fSGustavo F. Padovan #include <linux/module.h> 310a708f8fSGustavo F. Padovan 320a708f8fSGustavo F. Padovan #include <linux/types.h> 330a708f8fSGustavo F. Padovan #include <linux/capability.h> 340a708f8fSGustavo F. Padovan #include <linux/errno.h> 350a708f8fSGustavo F. Padovan #include <linux/kernel.h> 360a708f8fSGustavo F. Padovan #include <linux/sched.h> 370a708f8fSGustavo F. Padovan #include <linux/slab.h> 380a708f8fSGustavo F. Padovan #include <linux/poll.h> 390a708f8fSGustavo F. Padovan #include <linux/fcntl.h> 400a708f8fSGustavo F. Padovan #include <linux/init.h> 410a708f8fSGustavo F. Padovan #include <linux/interrupt.h> 420a708f8fSGustavo F. Padovan #include <linux/socket.h> 430a708f8fSGustavo F. Padovan #include <linux/skbuff.h> 440a708f8fSGustavo F. Padovan #include <linux/list.h> 450a708f8fSGustavo F. Padovan #include <linux/device.h> 460a708f8fSGustavo F. Padovan #include <linux/debugfs.h> 470a708f8fSGustavo F. Padovan #include <linux/seq_file.h> 480a708f8fSGustavo F. Padovan #include <linux/uaccess.h> 490a708f8fSGustavo F. Padovan #include <linux/crc16.h> 500a708f8fSGustavo F. Padovan #include <net/sock.h> 510a708f8fSGustavo F. Padovan 520a708f8fSGustavo F. Padovan #include <asm/system.h> 530a708f8fSGustavo F. Padovan #include <asm/unaligned.h> 540a708f8fSGustavo F. Padovan 550a708f8fSGustavo F. Padovan #include <net/bluetooth/bluetooth.h> 560a708f8fSGustavo F. Padovan #include <net/bluetooth/hci_core.h> 570a708f8fSGustavo F. Padovan #include <net/bluetooth/l2cap.h> 58b501d6a1SAnderson Briglia #include <net/bluetooth/smp.h> 590a708f8fSGustavo F. Padovan 60eb939922SRusty Russell bool disable_ertm; 610a708f8fSGustavo F. Padovan 620a708f8fSGustavo F. Padovan static u32 l2cap_feat_mask = L2CAP_FEAT_FIXED_CHAN; 6350a147cdSMat Martineau static u8 l2cap_fixed_chan[8] = { L2CAP_FC_L2CAP, }; 640a708f8fSGustavo F. Padovan 65b5ad8b7fSJohannes Berg static LIST_HEAD(chan_list); 66b5ad8b7fSJohannes Berg static DEFINE_RWLOCK(chan_list_lock); 670a708f8fSGustavo F. Padovan 680a708f8fSGustavo F. Padovan static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn, 690a708f8fSGustavo F. Padovan u8 code, u8 ident, u16 dlen, void *data); 704519de9aSGustavo F. Padovan static void l2cap_send_cmd(struct l2cap_conn *conn, u8 ident, u8 code, u16 len, 714519de9aSGustavo F. Padovan void *data); 72710f9b0aSGustavo F. Padovan static int l2cap_build_conf_req(struct l2cap_chan *chan, void *data); 734519de9aSGustavo F. Padovan static void l2cap_send_disconn_req(struct l2cap_conn *conn, 744519de9aSGustavo F. Padovan struct l2cap_chan *chan, int err); 750a708f8fSGustavo F. Padovan 765ef8cb9eSAndrei Emeltchenko static int l2cap_ertm_data_rcv(struct l2cap_chan *chan, struct sk_buff *skb); 770a708f8fSGustavo F. Padovan 780a708f8fSGustavo F. Padovan /* ---- L2CAP channels ---- */ 7971ba0e56SGustavo F. Padovan 80baa7e1faSGustavo F. Padovan static struct l2cap_chan *__l2cap_get_chan_by_dcid(struct l2cap_conn *conn, u16 cid) 810a708f8fSGustavo F. Padovan { 823d57dc68SGustavo F. Padovan struct l2cap_chan *c, *r = NULL; 83baa7e1faSGustavo F. Padovan 843d57dc68SGustavo F. Padovan rcu_read_lock(); 853d57dc68SGustavo F. Padovan 863d57dc68SGustavo F. Padovan list_for_each_entry_rcu(c, &conn->chan_l, list) { 873d57dc68SGustavo F. Padovan if (c->dcid == cid) { 883d57dc68SGustavo F. Padovan r = c; 893d57dc68SGustavo F. Padovan break; 900a708f8fSGustavo F. Padovan } 913d57dc68SGustavo F. Padovan } 923d57dc68SGustavo F. Padovan 933d57dc68SGustavo F. Padovan rcu_read_unlock(); 943d57dc68SGustavo F. Padovan return r; 95baa7e1faSGustavo F. Padovan } 960a708f8fSGustavo F. Padovan 97baa7e1faSGustavo F. Padovan static struct l2cap_chan *__l2cap_get_chan_by_scid(struct l2cap_conn *conn, u16 cid) 980a708f8fSGustavo F. Padovan { 993d57dc68SGustavo F. Padovan struct l2cap_chan *c, *r = NULL; 100baa7e1faSGustavo F. Padovan 1013d57dc68SGustavo F. Padovan rcu_read_lock(); 1023d57dc68SGustavo F. Padovan 1033d57dc68SGustavo F. Padovan list_for_each_entry_rcu(c, &conn->chan_l, list) { 1043d57dc68SGustavo F. Padovan if (c->scid == cid) { 1053d57dc68SGustavo F. Padovan r = c; 1063d57dc68SGustavo F. Padovan break; 1070a708f8fSGustavo F. Padovan } 1083d57dc68SGustavo F. Padovan } 1093d57dc68SGustavo F. Padovan 1103d57dc68SGustavo F. Padovan rcu_read_unlock(); 1113d57dc68SGustavo F. Padovan return r; 112baa7e1faSGustavo F. Padovan } 1130a708f8fSGustavo F. Padovan 1140a708f8fSGustavo F. Padovan /* Find channel with given SCID. 1150a708f8fSGustavo F. Padovan * Returns locked socket */ 116baa7e1faSGustavo F. Padovan static struct l2cap_chan *l2cap_get_chan_by_scid(struct l2cap_conn *conn, u16 cid) 1170a708f8fSGustavo F. Padovan { 11848454079SGustavo F. Padovan struct l2cap_chan *c; 119baa7e1faSGustavo F. Padovan 120baa7e1faSGustavo F. Padovan c = __l2cap_get_chan_by_scid(conn, cid); 12148454079SGustavo F. Padovan if (c) 122aa2ac881SGustavo F. Padovan lock_sock(c->sk); 12348454079SGustavo F. Padovan return c; 1240a708f8fSGustavo F. Padovan } 1250a708f8fSGustavo F. Padovan 126baa7e1faSGustavo F. Padovan static struct l2cap_chan *__l2cap_get_chan_by_ident(struct l2cap_conn *conn, u8 ident) 1270a708f8fSGustavo F. Padovan { 1283d57dc68SGustavo F. Padovan struct l2cap_chan *c, *r = NULL; 129baa7e1faSGustavo F. Padovan 1303d57dc68SGustavo F. Padovan rcu_read_lock(); 1313d57dc68SGustavo F. Padovan 1323d57dc68SGustavo F. Padovan list_for_each_entry_rcu(c, &conn->chan_l, list) { 1333d57dc68SGustavo F. Padovan if (c->ident == ident) { 1343d57dc68SGustavo F. Padovan r = c; 1353d57dc68SGustavo F. Padovan break; 1360a708f8fSGustavo F. Padovan } 1373d57dc68SGustavo F. Padovan } 1383d57dc68SGustavo F. Padovan 1393d57dc68SGustavo F. Padovan rcu_read_unlock(); 1403d57dc68SGustavo F. Padovan return r; 141baa7e1faSGustavo F. Padovan } 1420a708f8fSGustavo F. Padovan 143baa7e1faSGustavo F. Padovan static inline struct l2cap_chan *l2cap_get_chan_by_ident(struct l2cap_conn *conn, u8 ident) 1440a708f8fSGustavo F. Padovan { 14548454079SGustavo F. Padovan struct l2cap_chan *c; 146baa7e1faSGustavo F. Padovan 147baa7e1faSGustavo F. Padovan c = __l2cap_get_chan_by_ident(conn, ident); 14848454079SGustavo F. Padovan if (c) 149aa2ac881SGustavo F. Padovan lock_sock(c->sk); 15048454079SGustavo F. Padovan return c; 1510a708f8fSGustavo F. Padovan } 1520a708f8fSGustavo F. Padovan 15323691d75SGustavo F. Padovan static struct l2cap_chan *__l2cap_global_chan_by_addr(__le16 psm, bdaddr_t *src) 1549e4425ffSGustavo F. Padovan { 15523691d75SGustavo F. Padovan struct l2cap_chan *c; 1569e4425ffSGustavo F. Padovan 15723691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 15823691d75SGustavo F. Padovan if (c->sport == psm && !bacmp(&bt_sk(c->sk)->src, src)) 15923691d75SGustavo F. Padovan return c; 1609e4425ffSGustavo F. Padovan } 161250938cbSSzymon Janc return NULL; 162250938cbSSzymon Janc } 1639e4425ffSGustavo F. Padovan 1649e4425ffSGustavo F. Padovan int l2cap_add_psm(struct l2cap_chan *chan, bdaddr_t *src, __le16 psm) 1659e4425ffSGustavo F. Padovan { 16673b2ec18SGustavo F. Padovan int err; 16773b2ec18SGustavo F. Padovan 168333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 1699e4425ffSGustavo F. Padovan 17023691d75SGustavo F. Padovan if (psm && __l2cap_global_chan_by_addr(psm, src)) { 17173b2ec18SGustavo F. Padovan err = -EADDRINUSE; 17273b2ec18SGustavo F. Padovan goto done; 1739e4425ffSGustavo F. Padovan } 1749e4425ffSGustavo F. Padovan 17573b2ec18SGustavo F. Padovan if (psm) { 1769e4425ffSGustavo F. Padovan chan->psm = psm; 1779e4425ffSGustavo F. Padovan chan->sport = psm; 17873b2ec18SGustavo F. Padovan err = 0; 17973b2ec18SGustavo F. Padovan } else { 18073b2ec18SGustavo F. Padovan u16 p; 1819e4425ffSGustavo F. Padovan 18273b2ec18SGustavo F. Padovan err = -EINVAL; 18373b2ec18SGustavo F. Padovan for (p = 0x1001; p < 0x1100; p += 2) 18423691d75SGustavo F. Padovan if (!__l2cap_global_chan_by_addr(cpu_to_le16(p), src)) { 18573b2ec18SGustavo F. Padovan chan->psm = cpu_to_le16(p); 18673b2ec18SGustavo F. Padovan chan->sport = cpu_to_le16(p); 18773b2ec18SGustavo F. Padovan err = 0; 18873b2ec18SGustavo F. Padovan break; 18973b2ec18SGustavo F. Padovan } 19073b2ec18SGustavo F. Padovan } 19173b2ec18SGustavo F. Padovan 19273b2ec18SGustavo F. Padovan done: 193333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 19473b2ec18SGustavo F. Padovan return err; 1959e4425ffSGustavo F. Padovan } 1969e4425ffSGustavo F. Padovan 1979e4425ffSGustavo F. Padovan int l2cap_add_scid(struct l2cap_chan *chan, __u16 scid) 1989e4425ffSGustavo F. Padovan { 199333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 2009e4425ffSGustavo F. Padovan 2019e4425ffSGustavo F. Padovan chan->scid = scid; 2029e4425ffSGustavo F. Padovan 203333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 2049e4425ffSGustavo F. Padovan 2059e4425ffSGustavo F. Padovan return 0; 2069e4425ffSGustavo F. Padovan } 2079e4425ffSGustavo F. Padovan 208baa7e1faSGustavo F. Padovan static u16 l2cap_alloc_cid(struct l2cap_conn *conn) 2090a708f8fSGustavo F. Padovan { 2100a708f8fSGustavo F. Padovan u16 cid = L2CAP_CID_DYN_START; 2110a708f8fSGustavo F. Padovan 2120a708f8fSGustavo F. Padovan for (; cid < L2CAP_CID_DYN_END; cid++) { 213baa7e1faSGustavo F. Padovan if (!__l2cap_get_chan_by_scid(conn, cid)) 2140a708f8fSGustavo F. Padovan return cid; 2150a708f8fSGustavo F. Padovan } 2160a708f8fSGustavo F. Padovan 2170a708f8fSGustavo F. Padovan return 0; 2180a708f8fSGustavo F. Padovan } 2190a708f8fSGustavo F. Padovan 220badaaa00SGustavo F. Padovan static char *state_to_string(int state) 221badaaa00SGustavo F. Padovan { 222badaaa00SGustavo F. Padovan switch(state) { 223badaaa00SGustavo F. Padovan case BT_CONNECTED: 224badaaa00SGustavo F. Padovan return "BT_CONNECTED"; 225badaaa00SGustavo F. Padovan case BT_OPEN: 226badaaa00SGustavo F. Padovan return "BT_OPEN"; 227badaaa00SGustavo F. Padovan case BT_BOUND: 228badaaa00SGustavo F. Padovan return "BT_BOUND"; 229badaaa00SGustavo F. Padovan case BT_LISTEN: 230badaaa00SGustavo F. Padovan return "BT_LISTEN"; 231badaaa00SGustavo F. Padovan case BT_CONNECT: 232badaaa00SGustavo F. Padovan return "BT_CONNECT"; 233badaaa00SGustavo F. Padovan case BT_CONNECT2: 234badaaa00SGustavo F. Padovan return "BT_CONNECT2"; 235badaaa00SGustavo F. Padovan case BT_CONFIG: 236badaaa00SGustavo F. Padovan return "BT_CONFIG"; 237badaaa00SGustavo F. Padovan case BT_DISCONN: 238badaaa00SGustavo F. Padovan return "BT_DISCONN"; 239badaaa00SGustavo F. Padovan case BT_CLOSED: 240badaaa00SGustavo F. Padovan return "BT_CLOSED"; 241badaaa00SGustavo F. Padovan } 242badaaa00SGustavo F. Padovan 243badaaa00SGustavo F. Padovan return "invalid state"; 244badaaa00SGustavo F. Padovan } 245badaaa00SGustavo F. Padovan 24689bc500eSGustavo F. Padovan static void l2cap_state_change(struct l2cap_chan *chan, int state) 24789bc500eSGustavo F. Padovan { 248badaaa00SGustavo F. Padovan BT_DBG("%p %s -> %s", chan, state_to_string(chan->state), 249badaaa00SGustavo F. Padovan state_to_string(state)); 250badaaa00SGustavo F. Padovan 25189bc500eSGustavo F. Padovan chan->state = state; 25289bc500eSGustavo F. Padovan chan->ops->state_change(chan->data, state); 25389bc500eSGustavo F. Padovan } 25489bc500eSGustavo F. Padovan 255721c4181SGustavo F. Padovan static void l2cap_chan_timeout(struct work_struct *work) 256ab07801dSGustavo F. Padovan { 257721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 258721c4181SGustavo F. Padovan chan_timer.work); 259ab07801dSGustavo F. Padovan struct sock *sk = chan->sk; 260ab07801dSGustavo F. Padovan int reason; 261ab07801dSGustavo F. Padovan 26289bc500eSGustavo F. Padovan BT_DBG("chan %p state %d", chan, chan->state); 263ab07801dSGustavo F. Padovan 264721c4181SGustavo F. Padovan lock_sock(sk); 265ab07801dSGustavo F. Padovan 26689bc500eSGustavo F. Padovan if (chan->state == BT_CONNECTED || chan->state == BT_CONFIG) 267ab07801dSGustavo F. Padovan reason = ECONNREFUSED; 26889bc500eSGustavo F. Padovan else if (chan->state == BT_CONNECT && 269ab07801dSGustavo F. Padovan chan->sec_level != BT_SECURITY_SDP) 270ab07801dSGustavo F. Padovan reason = ECONNREFUSED; 271ab07801dSGustavo F. Padovan else 272ab07801dSGustavo F. Padovan reason = ETIMEDOUT; 273ab07801dSGustavo F. Padovan 2740f852724SGustavo F. Padovan l2cap_chan_close(chan, reason); 275ab07801dSGustavo F. Padovan 276721c4181SGustavo F. Padovan release_sock(sk); 277ab07801dSGustavo F. Padovan 278ba3bd0eeSGustavo F. Padovan chan->ops->close(chan->data); 279371fd835SUlisses Furquim l2cap_chan_put(chan); 280ab07801dSGustavo F. Padovan } 281ab07801dSGustavo F. Padovan 28223691d75SGustavo F. Padovan struct l2cap_chan *l2cap_chan_create(struct sock *sk) 2830a708f8fSGustavo F. Padovan { 28448454079SGustavo F. Padovan struct l2cap_chan *chan; 2850a708f8fSGustavo F. Padovan 28648454079SGustavo F. Padovan chan = kzalloc(sizeof(*chan), GFP_ATOMIC); 28748454079SGustavo F. Padovan if (!chan) 28848454079SGustavo F. Padovan return NULL; 2890a708f8fSGustavo F. Padovan 29048454079SGustavo F. Padovan chan->sk = sk; 29148454079SGustavo F. Padovan 292333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 29323691d75SGustavo F. Padovan list_add(&chan->global_l, &chan_list); 294333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 29523691d75SGustavo F. Padovan 296721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->chan_timer, l2cap_chan_timeout); 297ab07801dSGustavo F. Padovan 29889bc500eSGustavo F. Padovan chan->state = BT_OPEN; 29989bc500eSGustavo F. Padovan 30071ba0e56SGustavo F. Padovan atomic_set(&chan->refcnt, 1); 30171ba0e56SGustavo F. Padovan 302abc545b8SSzymon Janc BT_DBG("sk %p chan %p", sk, chan); 303abc545b8SSzymon Janc 30448454079SGustavo F. Padovan return chan; 3050a708f8fSGustavo F. Padovan } 3060a708f8fSGustavo F. Padovan 30723691d75SGustavo F. Padovan void l2cap_chan_destroy(struct l2cap_chan *chan) 3086ff5abbfSGustavo F. Padovan { 309333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 31023691d75SGustavo F. Padovan list_del(&chan->global_l); 311333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 31223691d75SGustavo F. Padovan 313371fd835SUlisses Furquim l2cap_chan_put(chan); 3146ff5abbfSGustavo F. Padovan } 3156ff5abbfSGustavo F. Padovan 3163d57dc68SGustavo F. Padovan static void l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan) 3170a708f8fSGustavo F. Padovan { 3180a708f8fSGustavo F. Padovan BT_DBG("conn %p, psm 0x%2.2x, dcid 0x%4.4x", conn, 319fe4128e0SGustavo F. Padovan chan->psm, chan->dcid); 3200a708f8fSGustavo F. Padovan 3219f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_REMOTE_USER_TERM; 3220a708f8fSGustavo F. Padovan 3238c1d787bSGustavo F. Padovan chan->conn = conn; 3240a708f8fSGustavo F. Padovan 325715ec005SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED) { 326b62f328bSVille Tervo if (conn->hcon->type == LE_LINK) { 327b62f328bSVille Tervo /* LE connection */ 3280c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_LE_DEFAULT_MTU; 329fe4128e0SGustavo F. Padovan chan->scid = L2CAP_CID_LE_DATA; 330fe4128e0SGustavo F. Padovan chan->dcid = L2CAP_CID_LE_DATA; 331b62f328bSVille Tervo } else { 3320a708f8fSGustavo F. Padovan /* Alloc CID for connection-oriented socket */ 333fe4128e0SGustavo F. Padovan chan->scid = l2cap_alloc_cid(conn); 3340c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 335b62f328bSVille Tervo } 336715ec005SGustavo F. Padovan } else if (chan->chan_type == L2CAP_CHAN_CONN_LESS) { 3370a708f8fSGustavo F. Padovan /* Connectionless socket */ 338fe4128e0SGustavo F. Padovan chan->scid = L2CAP_CID_CONN_LESS; 339fe4128e0SGustavo F. Padovan chan->dcid = L2CAP_CID_CONN_LESS; 3400c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 3410a708f8fSGustavo F. Padovan } else { 3420a708f8fSGustavo F. Padovan /* Raw socket can send/recv signalling messages only */ 343fe4128e0SGustavo F. Padovan chan->scid = L2CAP_CID_SIGNALING; 344fe4128e0SGustavo F. Padovan chan->dcid = L2CAP_CID_SIGNALING; 3450c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 3460a708f8fSGustavo F. Padovan } 3470a708f8fSGustavo F. Padovan 3488f7975b1SAndrei Emeltchenko chan->local_id = L2CAP_BESTEFFORT_ID; 3498f7975b1SAndrei Emeltchenko chan->local_stype = L2CAP_SERV_BESTEFFORT; 3508f7975b1SAndrei Emeltchenko chan->local_msdu = L2CAP_DEFAULT_MAX_SDU_SIZE; 3518f7975b1SAndrei Emeltchenko chan->local_sdu_itime = L2CAP_DEFAULT_SDU_ITIME; 3528f7975b1SAndrei Emeltchenko chan->local_acc_lat = L2CAP_DEFAULT_ACC_LAT; 3538f7975b1SAndrei Emeltchenko chan->local_flush_to = L2CAP_DEFAULT_FLUSH_TO; 3548f7975b1SAndrei Emeltchenko 355371fd835SUlisses Furquim l2cap_chan_hold(chan); 356baa7e1faSGustavo F. Padovan 3573d57dc68SGustavo F. Padovan list_add_rcu(&chan->list, &conn->chan_l); 3580a708f8fSGustavo F. Padovan } 3590a708f8fSGustavo F. Padovan 3600a708f8fSGustavo F. Padovan /* Delete channel. 3610a708f8fSGustavo F. Padovan * Must be called on the locked socket. */ 3624519de9aSGustavo F. Padovan static void l2cap_chan_del(struct l2cap_chan *chan, int err) 3630a708f8fSGustavo F. Padovan { 36448454079SGustavo F. Padovan struct sock *sk = chan->sk; 3658c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 3660a708f8fSGustavo F. Padovan struct sock *parent = bt_sk(sk)->parent; 3670a708f8fSGustavo F. Padovan 368c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 3690a708f8fSGustavo F. Padovan 37049208c9cSGustavo F. Padovan BT_DBG("chan %p, conn %p, err %d", chan, conn, err); 3710a708f8fSGustavo F. Padovan 3720a708f8fSGustavo F. Padovan if (conn) { 373baa7e1faSGustavo F. Padovan /* Delete from channel list */ 3743d57dc68SGustavo F. Padovan list_del_rcu(&chan->list); 3753d57dc68SGustavo F. Padovan synchronize_rcu(); 3763d57dc68SGustavo F. Padovan 377371fd835SUlisses Furquim l2cap_chan_put(chan); 378baa7e1faSGustavo F. Padovan 3798c1d787bSGustavo F. Padovan chan->conn = NULL; 3800a708f8fSGustavo F. Padovan hci_conn_put(conn->hcon); 3810a708f8fSGustavo F. Padovan } 3820a708f8fSGustavo F. Padovan 38389bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CLOSED); 3840a708f8fSGustavo F. Padovan sock_set_flag(sk, SOCK_ZAPPED); 3850a708f8fSGustavo F. Padovan 3860a708f8fSGustavo F. Padovan if (err) 3870a708f8fSGustavo F. Padovan sk->sk_err = err; 3880a708f8fSGustavo F. Padovan 3890a708f8fSGustavo F. Padovan if (parent) { 3900a708f8fSGustavo F. Padovan bt_accept_unlink(sk); 3910a708f8fSGustavo F. Padovan parent->sk_data_ready(parent, 0); 3920a708f8fSGustavo F. Padovan } else 3930a708f8fSGustavo F. Padovan sk->sk_state_change(sk); 3940a708f8fSGustavo F. Padovan 395c1360a1cSGustavo F. Padovan if (!(test_bit(CONF_OUTPUT_DONE, &chan->conf_state) && 396c1360a1cSGustavo F. Padovan test_bit(CONF_INPUT_DONE, &chan->conf_state))) 3976ff5abbfSGustavo F. Padovan return; 3982ead70b8SGustavo F. Padovan 39958d35f87SGustavo F. Padovan skb_queue_purge(&chan->tx_q); 4000a708f8fSGustavo F. Padovan 4010c1bc5c6SGustavo F. Padovan if (chan->mode == L2CAP_MODE_ERTM) { 4020a708f8fSGustavo F. Padovan struct srej_list *l, *tmp; 4030a708f8fSGustavo F. Padovan 4041a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 4051a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 4061a09bcb9SGustavo F. Padovan __clear_ack_timer(chan); 4070a708f8fSGustavo F. Padovan 408f1c6775bSGustavo F. Padovan skb_queue_purge(&chan->srej_q); 4090a708f8fSGustavo F. Padovan 41039d5a3eeSGustavo F. Padovan list_for_each_entry_safe(l, tmp, &chan->srej_l, list) { 4110a708f8fSGustavo F. Padovan list_del(&l->list); 4120a708f8fSGustavo F. Padovan kfree(l); 4130a708f8fSGustavo F. Padovan } 4140a708f8fSGustavo F. Padovan } 4150a708f8fSGustavo F. Padovan } 4160a708f8fSGustavo F. Padovan 4174519de9aSGustavo F. Padovan static void l2cap_chan_cleanup_listen(struct sock *parent) 4184519de9aSGustavo F. Padovan { 4194519de9aSGustavo F. Padovan struct sock *sk; 4204519de9aSGustavo F. Padovan 4214519de9aSGustavo F. Padovan BT_DBG("parent %p", parent); 4224519de9aSGustavo F. Padovan 4234519de9aSGustavo F. Padovan /* Close not yet accepted channels */ 4240f852724SGustavo F. Padovan while ((sk = bt_accept_dequeue(parent, NULL))) { 425ba3bd0eeSGustavo F. Padovan struct l2cap_chan *chan = l2cap_pi(sk)->chan; 426c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 4270f852724SGustavo F. Padovan lock_sock(sk); 428ba3bd0eeSGustavo F. Padovan l2cap_chan_close(chan, ECONNRESET); 4290f852724SGustavo F. Padovan release_sock(sk); 430ba3bd0eeSGustavo F. Padovan chan->ops->close(chan->data); 4310f852724SGustavo F. Padovan } 4324519de9aSGustavo F. Padovan } 4334519de9aSGustavo F. Padovan 4340f852724SGustavo F. Padovan void l2cap_chan_close(struct l2cap_chan *chan, int reason) 4354519de9aSGustavo F. Padovan { 4364519de9aSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 4374519de9aSGustavo F. Padovan struct sock *sk = chan->sk; 4384519de9aSGustavo F. Padovan 43989bc500eSGustavo F. Padovan BT_DBG("chan %p state %d socket %p", chan, chan->state, sk->sk_socket); 4404519de9aSGustavo F. Padovan 44189bc500eSGustavo F. Padovan switch (chan->state) { 4424519de9aSGustavo F. Padovan case BT_LISTEN: 4434519de9aSGustavo F. Padovan l2cap_chan_cleanup_listen(sk); 44489bc500eSGustavo F. Padovan 44589bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CLOSED); 44689bc500eSGustavo F. Padovan sock_set_flag(sk, SOCK_ZAPPED); 4474519de9aSGustavo F. Padovan break; 4484519de9aSGustavo F. Padovan 4494519de9aSGustavo F. Padovan case BT_CONNECTED: 4504519de9aSGustavo F. Padovan case BT_CONFIG: 451715ec005SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED && 4524519de9aSGustavo F. Padovan conn->hcon->type == ACL_LINK) { 453c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 454c9b66675SGustavo F. Padovan __set_chan_timer(chan, sk->sk_sndtimeo); 4554519de9aSGustavo F. Padovan l2cap_send_disconn_req(conn, chan, reason); 4564519de9aSGustavo F. Padovan } else 4574519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 4584519de9aSGustavo F. Padovan break; 4594519de9aSGustavo F. Padovan 4604519de9aSGustavo F. Padovan case BT_CONNECT2: 461715ec005SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED && 4624519de9aSGustavo F. Padovan conn->hcon->type == ACL_LINK) { 4634519de9aSGustavo F. Padovan struct l2cap_conn_rsp rsp; 4644519de9aSGustavo F. Padovan __u16 result; 4654519de9aSGustavo F. Padovan 4664519de9aSGustavo F. Padovan if (bt_sk(sk)->defer_setup) 4674519de9aSGustavo F. Padovan result = L2CAP_CR_SEC_BLOCK; 4684519de9aSGustavo F. Padovan else 4694519de9aSGustavo F. Padovan result = L2CAP_CR_BAD_PSM; 47089bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_DISCONN); 4714519de9aSGustavo F. Padovan 4724519de9aSGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 4734519de9aSGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 4744519de9aSGustavo F. Padovan rsp.result = cpu_to_le16(result); 4754519de9aSGustavo F. Padovan rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 4764519de9aSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 4774519de9aSGustavo F. Padovan sizeof(rsp), &rsp); 4784519de9aSGustavo F. Padovan } 4794519de9aSGustavo F. Padovan 4804519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 4814519de9aSGustavo F. Padovan break; 4824519de9aSGustavo F. Padovan 4834519de9aSGustavo F. Padovan case BT_CONNECT: 4844519de9aSGustavo F. Padovan case BT_DISCONN: 4854519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 4864519de9aSGustavo F. Padovan break; 4874519de9aSGustavo F. Padovan 4884519de9aSGustavo F. Padovan default: 4894519de9aSGustavo F. Padovan sock_set_flag(sk, SOCK_ZAPPED); 4904519de9aSGustavo F. Padovan break; 4914519de9aSGustavo F. Padovan } 4924519de9aSGustavo F. Padovan } 4934519de9aSGustavo F. Padovan 4944343478fSGustavo F. Padovan static inline u8 l2cap_get_auth_type(struct l2cap_chan *chan) 4950a708f8fSGustavo F. Padovan { 496715ec005SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_RAW) { 4974343478fSGustavo F. Padovan switch (chan->sec_level) { 4980a708f8fSGustavo F. Padovan case BT_SECURITY_HIGH: 4990a708f8fSGustavo F. Padovan return HCI_AT_DEDICATED_BONDING_MITM; 5000a708f8fSGustavo F. Padovan case BT_SECURITY_MEDIUM: 5010a708f8fSGustavo F. Padovan return HCI_AT_DEDICATED_BONDING; 5020a708f8fSGustavo F. Padovan default: 5030a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 5040a708f8fSGustavo F. Padovan } 505fe4128e0SGustavo F. Padovan } else if (chan->psm == cpu_to_le16(0x0001)) { 5064343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_LOW) 5074343478fSGustavo F. Padovan chan->sec_level = BT_SECURITY_SDP; 5080a708f8fSGustavo F. Padovan 5094343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_HIGH) 5100a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING_MITM; 5110a708f8fSGustavo F. Padovan else 5120a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 5130a708f8fSGustavo F. Padovan } else { 5144343478fSGustavo F. Padovan switch (chan->sec_level) { 5150a708f8fSGustavo F. Padovan case BT_SECURITY_HIGH: 5160a708f8fSGustavo F. Padovan return HCI_AT_GENERAL_BONDING_MITM; 5170a708f8fSGustavo F. Padovan case BT_SECURITY_MEDIUM: 5180a708f8fSGustavo F. Padovan return HCI_AT_GENERAL_BONDING; 5190a708f8fSGustavo F. Padovan default: 5200a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 5210a708f8fSGustavo F. Padovan } 5220a708f8fSGustavo F. Padovan } 5230a708f8fSGustavo F. Padovan } 5240a708f8fSGustavo F. Padovan 5250a708f8fSGustavo F. Padovan /* Service level security */ 526d45fc423SGustavo F. Padovan int l2cap_chan_check_security(struct l2cap_chan *chan) 5270a708f8fSGustavo F. Padovan { 5288c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 5290a708f8fSGustavo F. Padovan __u8 auth_type; 5300a708f8fSGustavo F. Padovan 5314343478fSGustavo F. Padovan auth_type = l2cap_get_auth_type(chan); 5320a708f8fSGustavo F. Padovan 5334343478fSGustavo F. Padovan return hci_conn_security(conn->hcon, chan->sec_level, auth_type); 5340a708f8fSGustavo F. Padovan } 5350a708f8fSGustavo F. Padovan 536b5ad8b7fSJohannes Berg static u8 l2cap_get_ident(struct l2cap_conn *conn) 5370a708f8fSGustavo F. Padovan { 5380a708f8fSGustavo F. Padovan u8 id; 5390a708f8fSGustavo F. Padovan 5400a708f8fSGustavo F. Padovan /* Get next available identificator. 5410a708f8fSGustavo F. Padovan * 1 - 128 are used by kernel. 5420a708f8fSGustavo F. Padovan * 129 - 199 are reserved. 5430a708f8fSGustavo F. Padovan * 200 - 254 are used by utilities like l2ping, etc. 5440a708f8fSGustavo F. Padovan */ 5450a708f8fSGustavo F. Padovan 546333055f2SGustavo F. Padovan spin_lock(&conn->lock); 5470a708f8fSGustavo F. Padovan 5480a708f8fSGustavo F. Padovan if (++conn->tx_ident > 128) 5490a708f8fSGustavo F. Padovan conn->tx_ident = 1; 5500a708f8fSGustavo F. Padovan 5510a708f8fSGustavo F. Padovan id = conn->tx_ident; 5520a708f8fSGustavo F. Padovan 553333055f2SGustavo F. Padovan spin_unlock(&conn->lock); 5540a708f8fSGustavo F. Padovan 5550a708f8fSGustavo F. Padovan return id; 5560a708f8fSGustavo F. Padovan } 5570a708f8fSGustavo F. Padovan 5584519de9aSGustavo F. Padovan static void l2cap_send_cmd(struct l2cap_conn *conn, u8 ident, u8 code, u16 len, void *data) 5590a708f8fSGustavo F. Padovan { 5600a708f8fSGustavo F. Padovan struct sk_buff *skb = l2cap_build_cmd(conn, code, ident, len, data); 5610a708f8fSGustavo F. Padovan u8 flags; 5620a708f8fSGustavo F. Padovan 5630a708f8fSGustavo F. Padovan BT_DBG("code 0x%2.2x", code); 5640a708f8fSGustavo F. Padovan 5650a708f8fSGustavo F. Padovan if (!skb) 5660a708f8fSGustavo F. Padovan return; 5670a708f8fSGustavo F. Padovan 5680a708f8fSGustavo F. Padovan if (lmp_no_flush_capable(conn->hcon->hdev)) 5690a708f8fSGustavo F. Padovan flags = ACL_START_NO_FLUSH; 5700a708f8fSGustavo F. Padovan else 5710a708f8fSGustavo F. Padovan flags = ACL_START; 5720a708f8fSGustavo F. Padovan 57314b12d0bSJaikumar Ganesh bt_cb(skb)->force_active = BT_POWER_FORCE_ACTIVE_ON; 5745e59b791SLuiz Augusto von Dentz skb->priority = HCI_PRIO_MAX; 57514b12d0bSJaikumar Ganesh 57673d80debSLuiz Augusto von Dentz hci_send_acl(conn->hchan, skb, flags); 5770a708f8fSGustavo F. Padovan } 5780a708f8fSGustavo F. Padovan 57973d80debSLuiz Augusto von Dentz static void l2cap_do_send(struct l2cap_chan *chan, struct sk_buff *skb) 58073d80debSLuiz Augusto von Dentz { 58173d80debSLuiz Augusto von Dentz struct hci_conn *hcon = chan->conn->hcon; 58273d80debSLuiz Augusto von Dentz u16 flags; 58373d80debSLuiz Augusto von Dentz 58473d80debSLuiz Augusto von Dentz BT_DBG("chan %p, skb %p len %d priority %u", chan, skb, skb->len, 58573d80debSLuiz Augusto von Dentz skb->priority); 58673d80debSLuiz Augusto von Dentz 58773d80debSLuiz Augusto von Dentz if (!test_bit(FLAG_FLUSHABLE, &chan->flags) && 58873d80debSLuiz Augusto von Dentz lmp_no_flush_capable(hcon->hdev)) 58973d80debSLuiz Augusto von Dentz flags = ACL_START_NO_FLUSH; 59073d80debSLuiz Augusto von Dentz else 59173d80debSLuiz Augusto von Dentz flags = ACL_START; 59273d80debSLuiz Augusto von Dentz 59373d80debSLuiz Augusto von Dentz bt_cb(skb)->force_active = test_bit(FLAG_FORCE_ACTIVE, &chan->flags); 59473d80debSLuiz Augusto von Dentz hci_send_acl(chan->conn->hchan, skb, flags); 5950a708f8fSGustavo F. Padovan } 5960a708f8fSGustavo F. Padovan 59788843ab0SAndrei Emeltchenko static inline void l2cap_send_sframe(struct l2cap_chan *chan, u32 control) 5980a708f8fSGustavo F. Padovan { 5990a708f8fSGustavo F. Padovan struct sk_buff *skb; 6000a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 6018c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 602e4ca6d98SAndrei Emeltchenko int count, hlen; 6030a708f8fSGustavo F. Padovan 60489bc500eSGustavo F. Padovan if (chan->state != BT_CONNECTED) 6050a708f8fSGustavo F. Padovan return; 6060a708f8fSGustavo F. Padovan 607e4ca6d98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 608e4ca6d98SAndrei Emeltchenko hlen = L2CAP_EXT_HDR_SIZE; 609e4ca6d98SAndrei Emeltchenko else 610e4ca6d98SAndrei Emeltchenko hlen = L2CAP_ENH_HDR_SIZE; 6110a708f8fSGustavo F. Padovan 6120a708f8fSGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 61303a51213SAndrei Emeltchenko hlen += L2CAP_FCS_SIZE; 6140a708f8fSGustavo F. Padovan 61588843ab0SAndrei Emeltchenko BT_DBG("chan %p, control 0x%8.8x", chan, control); 6160a708f8fSGustavo F. Padovan 6170a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, hlen); 618793c2f1cSAndrei Emeltchenko 619793c2f1cSAndrei Emeltchenko control |= __set_sframe(chan); 6200a708f8fSGustavo F. Padovan 621e2ab4353SGustavo F. Padovan if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state)) 62203f6715dSAndrei Emeltchenko control |= __set_ctrl_final(chan); 6230a708f8fSGustavo F. Padovan 624e2ab4353SGustavo F. Padovan if (test_and_clear_bit(CONN_SEND_PBIT, &chan->conn_state)) 625e3781735SAndrei Emeltchenko control |= __set_ctrl_poll(chan); 6260a708f8fSGustavo F. Padovan 6270a708f8fSGustavo F. Padovan skb = bt_skb_alloc(count, GFP_ATOMIC); 6280a708f8fSGustavo F. Padovan if (!skb) 6290a708f8fSGustavo F. Padovan return; 6300a708f8fSGustavo F. Padovan 6310a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 6320a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(hlen - L2CAP_HDR_SIZE); 633fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 63488843ab0SAndrei Emeltchenko 63588843ab0SAndrei Emeltchenko __put_control(chan, control, skb_put(skb, __ctrl_size(chan))); 6360a708f8fSGustavo F. Padovan 63747d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 63803a51213SAndrei Emeltchenko u16 fcs = crc16(0, (u8 *)lh, count - L2CAP_FCS_SIZE); 63903a51213SAndrei Emeltchenko put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 6400a708f8fSGustavo F. Padovan } 6410a708f8fSGustavo F. Padovan 64273d80debSLuiz Augusto von Dentz skb->priority = HCI_PRIO_MAX; 64373d80debSLuiz Augusto von Dentz l2cap_do_send(chan, skb); 6440a708f8fSGustavo F. Padovan } 6450a708f8fSGustavo F. Padovan 64688843ab0SAndrei Emeltchenko static inline void l2cap_send_rr_or_rnr(struct l2cap_chan *chan, u32 control) 6470a708f8fSGustavo F. Padovan { 648e2ab4353SGustavo F. Padovan if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 649ab784b73SAndrei Emeltchenko control |= __set_ctrl_super(chan, L2CAP_SUPER_RNR); 650e2ab4353SGustavo F. Padovan set_bit(CONN_RNR_SENT, &chan->conn_state); 6510a708f8fSGustavo F. Padovan } else 652ab784b73SAndrei Emeltchenko control |= __set_ctrl_super(chan, L2CAP_SUPER_RR); 6530a708f8fSGustavo F. Padovan 6540b209faeSAndrei Emeltchenko control |= __set_reqseq(chan, chan->buffer_seq); 6550a708f8fSGustavo F. Padovan 656525cd185SGustavo F. Padovan l2cap_send_sframe(chan, control); 6570a708f8fSGustavo F. Padovan } 6580a708f8fSGustavo F. Padovan 659b4450035SGustavo F. Padovan static inline int __l2cap_no_conn_pending(struct l2cap_chan *chan) 6600a708f8fSGustavo F. Padovan { 661c1360a1cSGustavo F. Padovan return !test_bit(CONF_CONNECT_PEND, &chan->conf_state); 6620a708f8fSGustavo F. Padovan } 6630a708f8fSGustavo F. Padovan 664fc7f8a7eSGustavo F. Padovan static void l2cap_do_start(struct l2cap_chan *chan) 6650a708f8fSGustavo F. Padovan { 6668c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 6670a708f8fSGustavo F. Padovan 6680a708f8fSGustavo F. Padovan if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) { 6690a708f8fSGustavo F. Padovan if (!(conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE)) 6700a708f8fSGustavo F. Padovan return; 6710a708f8fSGustavo F. Padovan 672d45fc423SGustavo F. Padovan if (l2cap_chan_check_security(chan) && 6734343478fSGustavo F. Padovan __l2cap_no_conn_pending(chan)) { 6740a708f8fSGustavo F. Padovan struct l2cap_conn_req req; 675fe4128e0SGustavo F. Padovan req.scid = cpu_to_le16(chan->scid); 676fe4128e0SGustavo F. Padovan req.psm = chan->psm; 6770a708f8fSGustavo F. Padovan 678fc7f8a7eSGustavo F. Padovan chan->ident = l2cap_get_ident(conn); 679c1360a1cSGustavo F. Padovan set_bit(CONF_CONNECT_PEND, &chan->conf_state); 6800a708f8fSGustavo F. Padovan 681fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_REQ, 682fc7f8a7eSGustavo F. Padovan sizeof(req), &req); 6830a708f8fSGustavo F. Padovan } 6840a708f8fSGustavo F. Padovan } else { 6850a708f8fSGustavo F. Padovan struct l2cap_info_req req; 6860a708f8fSGustavo F. Padovan req.type = cpu_to_le16(L2CAP_IT_FEAT_MASK); 6870a708f8fSGustavo F. Padovan 6880a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_SENT; 6890a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 6900a708f8fSGustavo F. Padovan 691030013d8SGustavo F. Padovan schedule_delayed_work(&conn->info_timer, 6920a708f8fSGustavo F. Padovan msecs_to_jiffies(L2CAP_INFO_TIMEOUT)); 6930a708f8fSGustavo F. Padovan 6940a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, conn->info_ident, 6950a708f8fSGustavo F. Padovan L2CAP_INFO_REQ, sizeof(req), &req); 6960a708f8fSGustavo F. Padovan } 6970a708f8fSGustavo F. Padovan } 6980a708f8fSGustavo F. Padovan 6990a708f8fSGustavo F. Padovan static inline int l2cap_mode_supported(__u8 mode, __u32 feat_mask) 7000a708f8fSGustavo F. Padovan { 7010a708f8fSGustavo F. Padovan u32 local_feat_mask = l2cap_feat_mask; 7020a708f8fSGustavo F. Padovan if (!disable_ertm) 7030a708f8fSGustavo F. Padovan local_feat_mask |= L2CAP_FEAT_ERTM | L2CAP_FEAT_STREAMING; 7040a708f8fSGustavo F. Padovan 7050a708f8fSGustavo F. Padovan switch (mode) { 7060a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 7070a708f8fSGustavo F. Padovan return L2CAP_FEAT_ERTM & feat_mask & local_feat_mask; 7080a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 7090a708f8fSGustavo F. Padovan return L2CAP_FEAT_STREAMING & feat_mask & local_feat_mask; 7100a708f8fSGustavo F. Padovan default: 7110a708f8fSGustavo F. Padovan return 0x00; 7120a708f8fSGustavo F. Padovan } 7130a708f8fSGustavo F. Padovan } 7140a708f8fSGustavo F. Padovan 7154519de9aSGustavo F. Padovan static void l2cap_send_disconn_req(struct l2cap_conn *conn, struct l2cap_chan *chan, int err) 7160a708f8fSGustavo F. Padovan { 717e92c8e70SGustavo F. Padovan struct sock *sk; 7180a708f8fSGustavo F. Padovan struct l2cap_disconn_req req; 7190a708f8fSGustavo F. Padovan 7200a708f8fSGustavo F. Padovan if (!conn) 7210a708f8fSGustavo F. Padovan return; 7220a708f8fSGustavo F. Padovan 723e92c8e70SGustavo F. Padovan sk = chan->sk; 724e92c8e70SGustavo F. Padovan 7250c1bc5c6SGustavo F. Padovan if (chan->mode == L2CAP_MODE_ERTM) { 7261a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 7271a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 7281a09bcb9SGustavo F. Padovan __clear_ack_timer(chan); 7290a708f8fSGustavo F. Padovan } 7300a708f8fSGustavo F. Padovan 731fe4128e0SGustavo F. Padovan req.dcid = cpu_to_le16(chan->dcid); 732fe4128e0SGustavo F. Padovan req.scid = cpu_to_le16(chan->scid); 7330a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), 7340a708f8fSGustavo F. Padovan L2CAP_DISCONN_REQ, sizeof(req), &req); 7350a708f8fSGustavo F. Padovan 73689bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_DISCONN); 7370a708f8fSGustavo F. Padovan sk->sk_err = err; 7380a708f8fSGustavo F. Padovan } 7390a708f8fSGustavo F. Padovan 7400a708f8fSGustavo F. Padovan /* ---- L2CAP connections ---- */ 7410a708f8fSGustavo F. Padovan static void l2cap_conn_start(struct l2cap_conn *conn) 7420a708f8fSGustavo F. Padovan { 7433d57dc68SGustavo F. Padovan struct l2cap_chan *chan; 7440a708f8fSGustavo F. Padovan 7450a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 7460a708f8fSGustavo F. Padovan 7473d57dc68SGustavo F. Padovan rcu_read_lock(); 7480a708f8fSGustavo F. Padovan 7493d57dc68SGustavo F. Padovan list_for_each_entry_rcu(chan, &conn->chan_l, list) { 75048454079SGustavo F. Padovan struct sock *sk = chan->sk; 751baa7e1faSGustavo F. Padovan 7520a708f8fSGustavo F. Padovan bh_lock_sock(sk); 7530a708f8fSGustavo F. Padovan 754715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 7550a708f8fSGustavo F. Padovan bh_unlock_sock(sk); 7560a708f8fSGustavo F. Padovan continue; 7570a708f8fSGustavo F. Padovan } 7580a708f8fSGustavo F. Padovan 75989bc500eSGustavo F. Padovan if (chan->state == BT_CONNECT) { 7600a708f8fSGustavo F. Padovan struct l2cap_conn_req req; 7610a708f8fSGustavo F. Padovan 762d45fc423SGustavo F. Padovan if (!l2cap_chan_check_security(chan) || 763b4450035SGustavo F. Padovan !__l2cap_no_conn_pending(chan)) { 7640a708f8fSGustavo F. Padovan bh_unlock_sock(sk); 7650a708f8fSGustavo F. Padovan continue; 7660a708f8fSGustavo F. Padovan } 7670a708f8fSGustavo F. Padovan 768c1360a1cSGustavo F. Padovan if (!l2cap_mode_supported(chan->mode, conn->feat_mask) 769c1360a1cSGustavo F. Padovan && test_bit(CONF_STATE2_DEVICE, 770c1360a1cSGustavo F. Padovan &chan->conf_state)) { 7710f852724SGustavo F. Padovan /* l2cap_chan_close() calls list_del(chan) 772820ffdb3SGustavo F. Padovan * so release the lock */ 7730f852724SGustavo F. Padovan l2cap_chan_close(chan, ECONNRESET); 7740a708f8fSGustavo F. Padovan bh_unlock_sock(sk); 7750a708f8fSGustavo F. Padovan continue; 7760a708f8fSGustavo F. Padovan } 7770a708f8fSGustavo F. Padovan 778fe4128e0SGustavo F. Padovan req.scid = cpu_to_le16(chan->scid); 779fe4128e0SGustavo F. Padovan req.psm = chan->psm; 7800a708f8fSGustavo F. Padovan 781fc7f8a7eSGustavo F. Padovan chan->ident = l2cap_get_ident(conn); 782c1360a1cSGustavo F. Padovan set_bit(CONF_CONNECT_PEND, &chan->conf_state); 7830a708f8fSGustavo F. Padovan 784fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_REQ, 785fc7f8a7eSGustavo F. Padovan sizeof(req), &req); 7860a708f8fSGustavo F. Padovan 78789bc500eSGustavo F. Padovan } else if (chan->state == BT_CONNECT2) { 7880a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 7890a708f8fSGustavo F. Padovan char buf[128]; 790fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 791fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 7920a708f8fSGustavo F. Padovan 793d45fc423SGustavo F. Padovan if (l2cap_chan_check_security(chan)) { 7940a708f8fSGustavo F. Padovan if (bt_sk(sk)->defer_setup) { 7950a708f8fSGustavo F. Padovan struct sock *parent = bt_sk(sk)->parent; 7960a708f8fSGustavo F. Padovan rsp.result = cpu_to_le16(L2CAP_CR_PEND); 7970a708f8fSGustavo F. Padovan rsp.status = cpu_to_le16(L2CAP_CS_AUTHOR_PEND); 79805e9a2f6SIlia Kolomisnky if (parent) 7990a708f8fSGustavo F. Padovan parent->sk_data_ready(parent, 0); 8000a708f8fSGustavo F. Padovan 8010a708f8fSGustavo F. Padovan } else { 80289bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONFIG); 8030a708f8fSGustavo F. Padovan rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 8040a708f8fSGustavo F. Padovan rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 8050a708f8fSGustavo F. Padovan } 8060a708f8fSGustavo F. Padovan } else { 8070a708f8fSGustavo F. Padovan rsp.result = cpu_to_le16(L2CAP_CR_PEND); 8080a708f8fSGustavo F. Padovan rsp.status = cpu_to_le16(L2CAP_CS_AUTHEN_PEND); 8090a708f8fSGustavo F. Padovan } 8100a708f8fSGustavo F. Padovan 811fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 812fc7f8a7eSGustavo F. Padovan sizeof(rsp), &rsp); 8130a708f8fSGustavo F. Padovan 814c1360a1cSGustavo F. Padovan if (test_bit(CONF_REQ_SENT, &chan->conf_state) || 8150a708f8fSGustavo F. Padovan rsp.result != L2CAP_CR_SUCCESS) { 8160a708f8fSGustavo F. Padovan bh_unlock_sock(sk); 8170a708f8fSGustavo F. Padovan continue; 8180a708f8fSGustavo F. Padovan } 8190a708f8fSGustavo F. Padovan 820c1360a1cSGustavo F. Padovan set_bit(CONF_REQ_SENT, &chan->conf_state); 8210a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 82273ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 82373ffa904SGustavo F. Padovan chan->num_conf_req++; 8240a708f8fSGustavo F. Padovan } 8250a708f8fSGustavo F. Padovan 8260a708f8fSGustavo F. Padovan bh_unlock_sock(sk); 8270a708f8fSGustavo F. Padovan } 8280a708f8fSGustavo F. Padovan 8293d57dc68SGustavo F. Padovan rcu_read_unlock(); 8300a708f8fSGustavo F. Padovan } 8310a708f8fSGustavo F. Padovan 832b62f328bSVille Tervo /* Find socket with cid and source bdaddr. 833b62f328bSVille Tervo * Returns closest match, locked. 834b62f328bSVille Tervo */ 83523691d75SGustavo F. Padovan static struct l2cap_chan *l2cap_global_chan_by_scid(int state, __le16 cid, bdaddr_t *src) 836b62f328bSVille Tervo { 83723691d75SGustavo F. Padovan struct l2cap_chan *c, *c1 = NULL; 838b62f328bSVille Tervo 83923691d75SGustavo F. Padovan read_lock(&chan_list_lock); 840b62f328bSVille Tervo 84123691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 84223691d75SGustavo F. Padovan struct sock *sk = c->sk; 843fe4128e0SGustavo F. Padovan 84489bc500eSGustavo F. Padovan if (state && c->state != state) 845b62f328bSVille Tervo continue; 846b62f328bSVille Tervo 84723691d75SGustavo F. Padovan if (c->scid == cid) { 848b62f328bSVille Tervo /* Exact match. */ 84923691d75SGustavo F. Padovan if (!bacmp(&bt_sk(sk)->src, src)) { 85023691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 85123691d75SGustavo F. Padovan return c; 85223691d75SGustavo F. Padovan } 853b62f328bSVille Tervo 854b62f328bSVille Tervo /* Closest match */ 855b62f328bSVille Tervo if (!bacmp(&bt_sk(sk)->src, BDADDR_ANY)) 85623691d75SGustavo F. Padovan c1 = c; 857b62f328bSVille Tervo } 858b62f328bSVille Tervo } 859280f294fSGustavo F. Padovan 86023691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 861b62f328bSVille Tervo 86223691d75SGustavo F. Padovan return c1; 863b62f328bSVille Tervo } 864b62f328bSVille Tervo 865b62f328bSVille Tervo static void l2cap_le_conn_ready(struct l2cap_conn *conn) 866b62f328bSVille Tervo { 867c916fbe4SGustavo F. Padovan struct sock *parent, *sk; 86823691d75SGustavo F. Padovan struct l2cap_chan *chan, *pchan; 869b62f328bSVille Tervo 870b62f328bSVille Tervo BT_DBG(""); 871b62f328bSVille Tervo 872b62f328bSVille Tervo /* Check if we have socket listening on cid */ 87323691d75SGustavo F. Padovan pchan = l2cap_global_chan_by_scid(BT_LISTEN, L2CAP_CID_LE_DATA, 874b62f328bSVille Tervo conn->src); 87523691d75SGustavo F. Padovan if (!pchan) 876b62f328bSVille Tervo return; 877b62f328bSVille Tervo 87823691d75SGustavo F. Padovan parent = pchan->sk; 87923691d75SGustavo F. Padovan 880aa2ac881SGustavo F. Padovan lock_sock(parent); 88162f3a2cfSGustavo F. Padovan 882b62f328bSVille Tervo /* Check for backlog size */ 883b62f328bSVille Tervo if (sk_acceptq_is_full(parent)) { 884b62f328bSVille Tervo BT_DBG("backlog full %d", parent->sk_ack_backlog); 885b62f328bSVille Tervo goto clean; 886b62f328bSVille Tervo } 887b62f328bSVille Tervo 88880808e43SGustavo F. Padovan chan = pchan->ops->new_connection(pchan->data); 88980808e43SGustavo F. Padovan if (!chan) 890b62f328bSVille Tervo goto clean; 891b62f328bSVille Tervo 89280808e43SGustavo F. Padovan sk = chan->sk; 8935d41ce1dSGustavo F. Padovan 894b62f328bSVille Tervo hci_conn_hold(conn->hcon); 895b62f328bSVille Tervo 896b62f328bSVille Tervo bacpy(&bt_sk(sk)->src, conn->src); 897b62f328bSVille Tervo bacpy(&bt_sk(sk)->dst, conn->dst); 898b62f328bSVille Tervo 899d1010240SGustavo F. Padovan bt_accept_enqueue(parent, sk); 900d1010240SGustavo F. Padovan 9013d57dc68SGustavo F. Padovan l2cap_chan_add(conn, chan); 90248454079SGustavo F. Padovan 903c9b66675SGustavo F. Padovan __set_chan_timer(chan, sk->sk_sndtimeo); 904b62f328bSVille Tervo 90589bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONNECTED); 906b62f328bSVille Tervo parent->sk_data_ready(parent, 0); 907b62f328bSVille Tervo 908b62f328bSVille Tervo clean: 909aa2ac881SGustavo F. Padovan release_sock(parent); 910b62f328bSVille Tervo } 911b62f328bSVille Tervo 912f1cb9af5SVinicius Costa Gomes static void l2cap_chan_ready(struct sock *sk) 913f1cb9af5SVinicius Costa Gomes { 914f1cb9af5SVinicius Costa Gomes struct l2cap_chan *chan = l2cap_pi(sk)->chan; 915f1cb9af5SVinicius Costa Gomes struct sock *parent = bt_sk(sk)->parent; 916f1cb9af5SVinicius Costa Gomes 917f1cb9af5SVinicius Costa Gomes BT_DBG("sk %p, parent %p", sk, parent); 918f1cb9af5SVinicius Costa Gomes 919f1cb9af5SVinicius Costa Gomes chan->conf_state = 0; 920f1cb9af5SVinicius Costa Gomes __clear_chan_timer(chan); 921f1cb9af5SVinicius Costa Gomes 92243f3dc41SVinicius Costa Gomes l2cap_state_change(chan, BT_CONNECTED); 923f1cb9af5SVinicius Costa Gomes sk->sk_state_change(sk); 924f1cb9af5SVinicius Costa Gomes 925f1cb9af5SVinicius Costa Gomes if (parent) 926f1cb9af5SVinicius Costa Gomes parent->sk_data_ready(parent, 0); 927f1cb9af5SVinicius Costa Gomes } 928f1cb9af5SVinicius Costa Gomes 9290a708f8fSGustavo F. Padovan static void l2cap_conn_ready(struct l2cap_conn *conn) 9300a708f8fSGustavo F. Padovan { 93148454079SGustavo F. Padovan struct l2cap_chan *chan; 9320a708f8fSGustavo F. Padovan 9330a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 9340a708f8fSGustavo F. Padovan 935b62f328bSVille Tervo if (!conn->hcon->out && conn->hcon->type == LE_LINK) 936b62f328bSVille Tervo l2cap_le_conn_ready(conn); 937b62f328bSVille Tervo 938160dc6acSVinicius Costa Gomes if (conn->hcon->out && conn->hcon->type == LE_LINK) 939160dc6acSVinicius Costa Gomes smp_conn_security(conn, conn->hcon->pending_sec_level); 940160dc6acSVinicius Costa Gomes 9413d57dc68SGustavo F. Padovan rcu_read_lock(); 9420a708f8fSGustavo F. Padovan 9433d57dc68SGustavo F. Padovan list_for_each_entry_rcu(chan, &conn->chan_l, list) { 94448454079SGustavo F. Padovan struct sock *sk = chan->sk; 945baa7e1faSGustavo F. Padovan 9460a708f8fSGustavo F. Padovan bh_lock_sock(sk); 9470a708f8fSGustavo F. Padovan 94863128451SVinicius Costa Gomes if (conn->hcon->type == LE_LINK) { 949b501d6a1SAnderson Briglia if (smp_conn_security(conn, chan->sec_level)) 950f1cb9af5SVinicius Costa Gomes l2cap_chan_ready(sk); 951acd7d370SVille Tervo 95263128451SVinicius Costa Gomes } else if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 953c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 95489bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONNECTED); 9550a708f8fSGustavo F. Padovan sk->sk_state_change(sk); 956b501d6a1SAnderson Briglia 95789bc500eSGustavo F. Padovan } else if (chan->state == BT_CONNECT) 958fc7f8a7eSGustavo F. Padovan l2cap_do_start(chan); 9590a708f8fSGustavo F. Padovan 9600a708f8fSGustavo F. Padovan bh_unlock_sock(sk); 9610a708f8fSGustavo F. Padovan } 9620a708f8fSGustavo F. Padovan 9633d57dc68SGustavo F. Padovan rcu_read_unlock(); 9640a708f8fSGustavo F. Padovan } 9650a708f8fSGustavo F. Padovan 9660a708f8fSGustavo F. Padovan /* Notify sockets that we cannot guaranty reliability anymore */ 9670a708f8fSGustavo F. Padovan static void l2cap_conn_unreliable(struct l2cap_conn *conn, int err) 9680a708f8fSGustavo F. Padovan { 96948454079SGustavo F. Padovan struct l2cap_chan *chan; 9700a708f8fSGustavo F. Padovan 9710a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 9720a708f8fSGustavo F. Padovan 9733d57dc68SGustavo F. Padovan rcu_read_lock(); 9740a708f8fSGustavo F. Padovan 9753d57dc68SGustavo F. Padovan list_for_each_entry_rcu(chan, &conn->chan_l, list) { 97648454079SGustavo F. Padovan struct sock *sk = chan->sk; 977baa7e1faSGustavo F. Padovan 978ecf61bdbSAndrei Emeltchenko if (test_bit(FLAG_FORCE_RELIABLE, &chan->flags)) 9790a708f8fSGustavo F. Padovan sk->sk_err = err; 9800a708f8fSGustavo F. Padovan } 9810a708f8fSGustavo F. Padovan 9823d57dc68SGustavo F. Padovan rcu_read_unlock(); 9830a708f8fSGustavo F. Padovan } 9840a708f8fSGustavo F. Padovan 985f878fcadSGustavo F. Padovan static void l2cap_info_timeout(struct work_struct *work) 9860a708f8fSGustavo F. Padovan { 987f878fcadSGustavo F. Padovan struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 988030013d8SGustavo F. Padovan info_timer.work); 9890a708f8fSGustavo F. Padovan 9900a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 9910a708f8fSGustavo F. Padovan conn->info_ident = 0; 9920a708f8fSGustavo F. Padovan 9930a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 9940a708f8fSGustavo F. Padovan } 9950a708f8fSGustavo F. Padovan 9965d3de7dfSVinicius Costa Gomes static void l2cap_conn_del(struct hci_conn *hcon, int err) 9975d3de7dfSVinicius Costa Gomes { 9985d3de7dfSVinicius Costa Gomes struct l2cap_conn *conn = hcon->l2cap_data; 9995d3de7dfSVinicius Costa Gomes struct l2cap_chan *chan, *l; 10005d3de7dfSVinicius Costa Gomes struct sock *sk; 10015d3de7dfSVinicius Costa Gomes 10025d3de7dfSVinicius Costa Gomes if (!conn) 10035d3de7dfSVinicius Costa Gomes return; 10045d3de7dfSVinicius Costa Gomes 10055d3de7dfSVinicius Costa Gomes BT_DBG("hcon %p conn %p, err %d", hcon, conn, err); 10065d3de7dfSVinicius Costa Gomes 10075d3de7dfSVinicius Costa Gomes kfree_skb(conn->rx_skb); 10085d3de7dfSVinicius Costa Gomes 10095d3de7dfSVinicius Costa Gomes /* Kill channels */ 10105d3de7dfSVinicius Costa Gomes list_for_each_entry_safe(chan, l, &conn->chan_l, list) { 10115d3de7dfSVinicius Costa Gomes sk = chan->sk; 1012aa2ac881SGustavo F. Padovan lock_sock(sk); 10135d3de7dfSVinicius Costa Gomes l2cap_chan_del(chan, err); 1014aa2ac881SGustavo F. Padovan release_sock(sk); 10155d3de7dfSVinicius Costa Gomes chan->ops->close(chan->data); 10165d3de7dfSVinicius Costa Gomes } 10175d3de7dfSVinicius Costa Gomes 101873d80debSLuiz Augusto von Dentz hci_chan_del(conn->hchan); 101973d80debSLuiz Augusto von Dentz 10205d3de7dfSVinicius Costa Gomes if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) 1021371fd835SUlisses Furquim __cancel_delayed_work(&conn->info_timer); 10225d3de7dfSVinicius Costa Gomes 1023*51a8efd7SJohan Hedberg if (test_and_clear_bit(HCI_CONN_LE_SMP_PEND, &hcon->flags)) { 1024371fd835SUlisses Furquim __cancel_delayed_work(&conn->security_timer); 10258aab4757SVinicius Costa Gomes smp_chan_destroy(conn); 1026d26a2345SVinicius Costa Gomes } 10275d3de7dfSVinicius Costa Gomes 10285d3de7dfSVinicius Costa Gomes hcon->l2cap_data = NULL; 10295d3de7dfSVinicius Costa Gomes kfree(conn); 10305d3de7dfSVinicius Costa Gomes } 10315d3de7dfSVinicius Costa Gomes 10326c9d42a1SGustavo F. Padovan static void security_timeout(struct work_struct *work) 10335d3de7dfSVinicius Costa Gomes { 10346c9d42a1SGustavo F. Padovan struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 10356c9d42a1SGustavo F. Padovan security_timer.work); 10365d3de7dfSVinicius Costa Gomes 10375d3de7dfSVinicius Costa Gomes l2cap_conn_del(conn->hcon, ETIMEDOUT); 10385d3de7dfSVinicius Costa Gomes } 10395d3de7dfSVinicius Costa Gomes 10400a708f8fSGustavo F. Padovan static struct l2cap_conn *l2cap_conn_add(struct hci_conn *hcon, u8 status) 10410a708f8fSGustavo F. Padovan { 10420a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 104373d80debSLuiz Augusto von Dentz struct hci_chan *hchan; 10440a708f8fSGustavo F. Padovan 10450a708f8fSGustavo F. Padovan if (conn || status) 10460a708f8fSGustavo F. Padovan return conn; 10470a708f8fSGustavo F. Padovan 104873d80debSLuiz Augusto von Dentz hchan = hci_chan_create(hcon); 104973d80debSLuiz Augusto von Dentz if (!hchan) 10500a708f8fSGustavo F. Padovan return NULL; 10510a708f8fSGustavo F. Padovan 105273d80debSLuiz Augusto von Dentz conn = kzalloc(sizeof(struct l2cap_conn), GFP_ATOMIC); 105373d80debSLuiz Augusto von Dentz if (!conn) { 105473d80debSLuiz Augusto von Dentz hci_chan_del(hchan); 105573d80debSLuiz Augusto von Dentz return NULL; 105673d80debSLuiz Augusto von Dentz } 105773d80debSLuiz Augusto von Dentz 10580a708f8fSGustavo F. Padovan hcon->l2cap_data = conn; 10590a708f8fSGustavo F. Padovan conn->hcon = hcon; 106073d80debSLuiz Augusto von Dentz conn->hchan = hchan; 10610a708f8fSGustavo F. Padovan 106273d80debSLuiz Augusto von Dentz BT_DBG("hcon %p conn %p hchan %p", hcon, conn, hchan); 10630a708f8fSGustavo F. Padovan 1064acd7d370SVille Tervo if (hcon->hdev->le_mtu && hcon->type == LE_LINK) 1065acd7d370SVille Tervo conn->mtu = hcon->hdev->le_mtu; 1066acd7d370SVille Tervo else 10670a708f8fSGustavo F. Padovan conn->mtu = hcon->hdev->acl_mtu; 1068acd7d370SVille Tervo 10690a708f8fSGustavo F. Padovan conn->src = &hcon->hdev->bdaddr; 10700a708f8fSGustavo F. Padovan conn->dst = &hcon->dst; 10710a708f8fSGustavo F. Padovan 10720a708f8fSGustavo F. Padovan conn->feat_mask = 0; 10730a708f8fSGustavo F. Padovan 10740a708f8fSGustavo F. Padovan spin_lock_init(&conn->lock); 1075baa7e1faSGustavo F. Padovan 1076baa7e1faSGustavo F. Padovan INIT_LIST_HEAD(&conn->chan_l); 10770a708f8fSGustavo F. Padovan 10785d3de7dfSVinicius Costa Gomes if (hcon->type == LE_LINK) 10796c9d42a1SGustavo F. Padovan INIT_DELAYED_WORK(&conn->security_timer, security_timeout); 10805d3de7dfSVinicius Costa Gomes else 1081030013d8SGustavo F. Padovan INIT_DELAYED_WORK(&conn->info_timer, l2cap_info_timeout); 10820a708f8fSGustavo F. Padovan 10839f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_REMOTE_USER_TERM; 10840a708f8fSGustavo F. Padovan 10850a708f8fSGustavo F. Padovan return conn; 10860a708f8fSGustavo F. Padovan } 10870a708f8fSGustavo F. Padovan 10880a708f8fSGustavo F. Padovan /* ---- Socket interface ---- */ 10890a708f8fSGustavo F. Padovan 10900a708f8fSGustavo F. Padovan /* Find socket with psm and source bdaddr. 10910a708f8fSGustavo F. Padovan * Returns closest match. 10920a708f8fSGustavo F. Padovan */ 109323691d75SGustavo F. Padovan static struct l2cap_chan *l2cap_global_chan_by_psm(int state, __le16 psm, bdaddr_t *src) 10940a708f8fSGustavo F. Padovan { 109523691d75SGustavo F. Padovan struct l2cap_chan *c, *c1 = NULL; 10960a708f8fSGustavo F. Padovan 109723691d75SGustavo F. Padovan read_lock(&chan_list_lock); 10980a708f8fSGustavo F. Padovan 109923691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 110023691d75SGustavo F. Padovan struct sock *sk = c->sk; 1101fe4128e0SGustavo F. Padovan 110289bc500eSGustavo F. Padovan if (state && c->state != state) 11030a708f8fSGustavo F. Padovan continue; 11040a708f8fSGustavo F. Padovan 110523691d75SGustavo F. Padovan if (c->psm == psm) { 11060a708f8fSGustavo F. Padovan /* Exact match. */ 110723691d75SGustavo F. Padovan if (!bacmp(&bt_sk(sk)->src, src)) { 1108a7567b20SJohannes Berg read_unlock(&chan_list_lock); 110923691d75SGustavo F. Padovan return c; 111023691d75SGustavo F. Padovan } 11110a708f8fSGustavo F. Padovan 11120a708f8fSGustavo F. Padovan /* Closest match */ 11130a708f8fSGustavo F. Padovan if (!bacmp(&bt_sk(sk)->src, BDADDR_ANY)) 111423691d75SGustavo F. Padovan c1 = c; 11150a708f8fSGustavo F. Padovan } 11160a708f8fSGustavo F. Padovan } 11170a708f8fSGustavo F. Padovan 111823691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 11190a708f8fSGustavo F. Padovan 112023691d75SGustavo F. Padovan return c1; 11210a708f8fSGustavo F. Padovan } 11220a708f8fSGustavo F. Padovan 1123cbe8fed4SJohan Hedberg int l2cap_chan_connect(struct l2cap_chan *chan, __le16 psm, u16 cid, bdaddr_t *dst) 11240a708f8fSGustavo F. Padovan { 11255d41ce1dSGustavo F. Padovan struct sock *sk = chan->sk; 11260a708f8fSGustavo F. Padovan bdaddr_t *src = &bt_sk(sk)->src; 11270a708f8fSGustavo F. Padovan struct l2cap_conn *conn; 11280a708f8fSGustavo F. Padovan struct hci_conn *hcon; 11290a708f8fSGustavo F. Padovan struct hci_dev *hdev; 11300a708f8fSGustavo F. Padovan __u8 auth_type; 11310a708f8fSGustavo F. Padovan int err; 11320a708f8fSGustavo F. Padovan 11330a708f8fSGustavo F. Padovan BT_DBG("%s -> %s psm 0x%2.2x", batostr(src), batostr(dst), 1134fe4128e0SGustavo F. Padovan chan->psm); 11350a708f8fSGustavo F. Padovan 11360a708f8fSGustavo F. Padovan hdev = hci_get_route(dst, src); 11370a708f8fSGustavo F. Padovan if (!hdev) 11380a708f8fSGustavo F. Padovan return -EHOSTUNREACH; 11390a708f8fSGustavo F. Padovan 114009fd0de5SGustavo F. Padovan hci_dev_lock(hdev); 11410a708f8fSGustavo F. Padovan 114203a00194SGustavo F. Padovan lock_sock(sk); 114303a00194SGustavo F. Padovan 114403a00194SGustavo F. Padovan /* PSM must be odd and lsb of upper byte must be 0 */ 114503a00194SGustavo F. Padovan if ((__le16_to_cpu(psm) & 0x0101) != 0x0001 && !cid && 114603a00194SGustavo F. Padovan chan->chan_type != L2CAP_CHAN_RAW) { 114703a00194SGustavo F. Padovan err = -EINVAL; 114803a00194SGustavo F. Padovan goto done; 114903a00194SGustavo F. Padovan } 115003a00194SGustavo F. Padovan 115103a00194SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED && !(psm || cid)) { 115203a00194SGustavo F. Padovan err = -EINVAL; 115303a00194SGustavo F. Padovan goto done; 115403a00194SGustavo F. Padovan } 115503a00194SGustavo F. Padovan 115603a00194SGustavo F. Padovan switch (chan->mode) { 115703a00194SGustavo F. Padovan case L2CAP_MODE_BASIC: 115803a00194SGustavo F. Padovan break; 115903a00194SGustavo F. Padovan case L2CAP_MODE_ERTM: 116003a00194SGustavo F. Padovan case L2CAP_MODE_STREAMING: 116103a00194SGustavo F. Padovan if (!disable_ertm) 116203a00194SGustavo F. Padovan break; 116303a00194SGustavo F. Padovan /* fall through */ 116403a00194SGustavo F. Padovan default: 116503a00194SGustavo F. Padovan err = -ENOTSUPP; 116603a00194SGustavo F. Padovan goto done; 116703a00194SGustavo F. Padovan } 116803a00194SGustavo F. Padovan 116903a00194SGustavo F. Padovan switch (sk->sk_state) { 117003a00194SGustavo F. Padovan case BT_CONNECT: 117103a00194SGustavo F. Padovan case BT_CONNECT2: 117203a00194SGustavo F. Padovan case BT_CONFIG: 117303a00194SGustavo F. Padovan /* Already connecting */ 117403a00194SGustavo F. Padovan err = 0; 117503a00194SGustavo F. Padovan goto done; 117603a00194SGustavo F. Padovan 117703a00194SGustavo F. Padovan case BT_CONNECTED: 117803a00194SGustavo F. Padovan /* Already connected */ 117903a00194SGustavo F. Padovan err = -EISCONN; 118003a00194SGustavo F. Padovan goto done; 118103a00194SGustavo F. Padovan 118203a00194SGustavo F. Padovan case BT_OPEN: 118303a00194SGustavo F. Padovan case BT_BOUND: 118403a00194SGustavo F. Padovan /* Can connect */ 118503a00194SGustavo F. Padovan break; 118603a00194SGustavo F. Padovan 118703a00194SGustavo F. Padovan default: 118803a00194SGustavo F. Padovan err = -EBADFD; 118903a00194SGustavo F. Padovan goto done; 119003a00194SGustavo F. Padovan } 119103a00194SGustavo F. Padovan 119203a00194SGustavo F. Padovan /* Set destination address and psm */ 11939219b2a0SGustavo F. Padovan bacpy(&bt_sk(sk)->dst, dst); 119403a00194SGustavo F. Padovan chan->psm = psm; 119503a00194SGustavo F. Padovan chan->dcid = cid; 11960a708f8fSGustavo F. Padovan 11974343478fSGustavo F. Padovan auth_type = l2cap_get_auth_type(chan); 11980a708f8fSGustavo F. Padovan 1199fe4128e0SGustavo F. Padovan if (chan->dcid == L2CAP_CID_LE_DATA) 1200acd7d370SVille Tervo hcon = hci_connect(hdev, LE_LINK, dst, 12014343478fSGustavo F. Padovan chan->sec_level, auth_type); 1202acd7d370SVille Tervo else 12030a708f8fSGustavo F. Padovan hcon = hci_connect(hdev, ACL_LINK, dst, 12044343478fSGustavo F. Padovan chan->sec_level, auth_type); 1205acd7d370SVille Tervo 120630e76272SVille Tervo if (IS_ERR(hcon)) { 120730e76272SVille Tervo err = PTR_ERR(hcon); 12080a708f8fSGustavo F. Padovan goto done; 120930e76272SVille Tervo } 12100a708f8fSGustavo F. Padovan 12110a708f8fSGustavo F. Padovan conn = l2cap_conn_add(hcon, 0); 12120a708f8fSGustavo F. Padovan if (!conn) { 12130a708f8fSGustavo F. Padovan hci_conn_put(hcon); 121430e76272SVille Tervo err = -ENOMEM; 12150a708f8fSGustavo F. Padovan goto done; 12160a708f8fSGustavo F. Padovan } 12170a708f8fSGustavo F. Padovan 12180a708f8fSGustavo F. Padovan /* Update source addr of the socket */ 12190a708f8fSGustavo F. Padovan bacpy(src, conn->src); 12200a708f8fSGustavo F. Padovan 122148454079SGustavo F. Padovan l2cap_chan_add(conn, chan); 122248454079SGustavo F. Padovan 122389bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONNECT); 1224c9b66675SGustavo F. Padovan __set_chan_timer(chan, sk->sk_sndtimeo); 12250a708f8fSGustavo F. Padovan 12260a708f8fSGustavo F. Padovan if (hcon->state == BT_CONNECTED) { 1227715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 1228c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 1229d45fc423SGustavo F. Padovan if (l2cap_chan_check_security(chan)) 123089bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONNECTED); 12310a708f8fSGustavo F. Padovan } else 1232fc7f8a7eSGustavo F. Padovan l2cap_do_start(chan); 12330a708f8fSGustavo F. Padovan } 12340a708f8fSGustavo F. Padovan 123530e76272SVille Tervo err = 0; 123630e76272SVille Tervo 12370a708f8fSGustavo F. Padovan done: 123809fd0de5SGustavo F. Padovan hci_dev_unlock(hdev); 12390a708f8fSGustavo F. Padovan hci_dev_put(hdev); 12400a708f8fSGustavo F. Padovan return err; 12410a708f8fSGustavo F. Padovan } 12420a708f8fSGustavo F. Padovan 1243dcba0dbaSGustavo F. Padovan int __l2cap_wait_ack(struct sock *sk) 12440a708f8fSGustavo F. Padovan { 12458c1d787bSGustavo F. Padovan struct l2cap_chan *chan = l2cap_pi(sk)->chan; 12460a708f8fSGustavo F. Padovan DECLARE_WAITQUEUE(wait, current); 12470a708f8fSGustavo F. Padovan int err = 0; 12480a708f8fSGustavo F. Padovan int timeo = HZ/5; 12490a708f8fSGustavo F. Padovan 12500a708f8fSGustavo F. Padovan add_wait_queue(sk_sleep(sk), &wait); 12510a708f8fSGustavo F. Padovan set_current_state(TASK_INTERRUPTIBLE); 1252a71a0cf4SPeter Hurley while (chan->unacked_frames > 0 && chan->conn) { 12530a708f8fSGustavo F. Padovan if (!timeo) 12540a708f8fSGustavo F. Padovan timeo = HZ/5; 12550a708f8fSGustavo F. Padovan 12560a708f8fSGustavo F. Padovan if (signal_pending(current)) { 12570a708f8fSGustavo F. Padovan err = sock_intr_errno(timeo); 12580a708f8fSGustavo F. Padovan break; 12590a708f8fSGustavo F. Padovan } 12600a708f8fSGustavo F. Padovan 12610a708f8fSGustavo F. Padovan release_sock(sk); 12620a708f8fSGustavo F. Padovan timeo = schedule_timeout(timeo); 12630a708f8fSGustavo F. Padovan lock_sock(sk); 1264a71a0cf4SPeter Hurley set_current_state(TASK_INTERRUPTIBLE); 12650a708f8fSGustavo F. Padovan 12660a708f8fSGustavo F. Padovan err = sock_error(sk); 12670a708f8fSGustavo F. Padovan if (err) 12680a708f8fSGustavo F. Padovan break; 12690a708f8fSGustavo F. Padovan } 12700a708f8fSGustavo F. Padovan set_current_state(TASK_RUNNING); 12710a708f8fSGustavo F. Padovan remove_wait_queue(sk_sleep(sk), &wait); 12720a708f8fSGustavo F. Padovan return err; 12730a708f8fSGustavo F. Padovan } 12740a708f8fSGustavo F. Padovan 1275721c4181SGustavo F. Padovan static void l2cap_monitor_timeout(struct work_struct *work) 12760a708f8fSGustavo F. Padovan { 1277721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 1278721c4181SGustavo F. Padovan monitor_timer.work); 1279525cd185SGustavo F. Padovan struct sock *sk = chan->sk; 12800a708f8fSGustavo F. Padovan 1281525cd185SGustavo F. Padovan BT_DBG("chan %p", chan); 12820a708f8fSGustavo F. Padovan 1283721c4181SGustavo F. Padovan lock_sock(sk); 12842c03a7a4SGustavo F. Padovan if (chan->retry_count >= chan->remote_max_tx) { 12858c1d787bSGustavo F. Padovan l2cap_send_disconn_req(chan->conn, chan, ECONNABORTED); 1286721c4181SGustavo F. Padovan release_sock(sk); 12870a708f8fSGustavo F. Padovan return; 12880a708f8fSGustavo F. Padovan } 12890a708f8fSGustavo F. Padovan 12906a026610SGustavo F. Padovan chan->retry_count++; 12911a09bcb9SGustavo F. Padovan __set_monitor_timer(chan); 12920a708f8fSGustavo F. Padovan 1293525cd185SGustavo F. Padovan l2cap_send_rr_or_rnr(chan, L2CAP_CTRL_POLL); 1294721c4181SGustavo F. Padovan release_sock(sk); 12950a708f8fSGustavo F. Padovan } 12960a708f8fSGustavo F. Padovan 1297721c4181SGustavo F. Padovan static void l2cap_retrans_timeout(struct work_struct *work) 12980a708f8fSGustavo F. Padovan { 1299721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 1300721c4181SGustavo F. Padovan retrans_timer.work); 1301525cd185SGustavo F. Padovan struct sock *sk = chan->sk; 13020a708f8fSGustavo F. Padovan 130349208c9cSGustavo F. Padovan BT_DBG("chan %p", chan); 13040a708f8fSGustavo F. Padovan 1305721c4181SGustavo F. Padovan lock_sock(sk); 13066a026610SGustavo F. Padovan chan->retry_count = 1; 13071a09bcb9SGustavo F. Padovan __set_monitor_timer(chan); 13080a708f8fSGustavo F. Padovan 1309e2ab4353SGustavo F. Padovan set_bit(CONN_WAIT_F, &chan->conn_state); 13100a708f8fSGustavo F. Padovan 1311525cd185SGustavo F. Padovan l2cap_send_rr_or_rnr(chan, L2CAP_CTRL_POLL); 1312721c4181SGustavo F. Padovan release_sock(sk); 13130a708f8fSGustavo F. Padovan } 13140a708f8fSGustavo F. Padovan 131542e5c802SGustavo F. Padovan static void l2cap_drop_acked_frames(struct l2cap_chan *chan) 13160a708f8fSGustavo F. Padovan { 13170a708f8fSGustavo F. Padovan struct sk_buff *skb; 13180a708f8fSGustavo F. Padovan 131958d35f87SGustavo F. Padovan while ((skb = skb_peek(&chan->tx_q)) && 13206a026610SGustavo F. Padovan chan->unacked_frames) { 132142e5c802SGustavo F. Padovan if (bt_cb(skb)->tx_seq == chan->expected_ack_seq) 13220a708f8fSGustavo F. Padovan break; 13230a708f8fSGustavo F. Padovan 132458d35f87SGustavo F. Padovan skb = skb_dequeue(&chan->tx_q); 13250a708f8fSGustavo F. Padovan kfree_skb(skb); 13260a708f8fSGustavo F. Padovan 13276a026610SGustavo F. Padovan chan->unacked_frames--; 13280a708f8fSGustavo F. Padovan } 13290a708f8fSGustavo F. Padovan 13306a026610SGustavo F. Padovan if (!chan->unacked_frames) 13311a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 13320a708f8fSGustavo F. Padovan } 13330a708f8fSGustavo F. Padovan 133467c9e840SSzymon Janc static void l2cap_streaming_send(struct l2cap_chan *chan) 13350a708f8fSGustavo F. Padovan { 13360a708f8fSGustavo F. Padovan struct sk_buff *skb; 133788843ab0SAndrei Emeltchenko u32 control; 133888843ab0SAndrei Emeltchenko u16 fcs; 13390a708f8fSGustavo F. Padovan 134058d35f87SGustavo F. Padovan while ((skb = skb_dequeue(&chan->tx_q))) { 134188843ab0SAndrei Emeltchenko control = __get_control(chan, skb->data + L2CAP_HDR_SIZE); 1342fb45de7dSAndrei Emeltchenko control |= __set_txseq(chan, chan->next_tx_seq); 134388843ab0SAndrei Emeltchenko __put_control(chan, control, skb->data + L2CAP_HDR_SIZE); 13440a708f8fSGustavo F. Padovan 134547d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 134603a51213SAndrei Emeltchenko fcs = crc16(0, (u8 *)skb->data, 134703a51213SAndrei Emeltchenko skb->len - L2CAP_FCS_SIZE); 134803a51213SAndrei Emeltchenko put_unaligned_le16(fcs, 134903a51213SAndrei Emeltchenko skb->data + skb->len - L2CAP_FCS_SIZE); 13500a708f8fSGustavo F. Padovan } 13510a708f8fSGustavo F. Padovan 13524343478fSGustavo F. Padovan l2cap_do_send(chan, skb); 13530a708f8fSGustavo F. Padovan 1354836be934SAndrei Emeltchenko chan->next_tx_seq = __next_seq(chan, chan->next_tx_seq); 13550a708f8fSGustavo F. Padovan } 13560a708f8fSGustavo F. Padovan } 13570a708f8fSGustavo F. Padovan 1358fb45de7dSAndrei Emeltchenko static void l2cap_retransmit_one_frame(struct l2cap_chan *chan, u16 tx_seq) 13590a708f8fSGustavo F. Padovan { 13600a708f8fSGustavo F. Padovan struct sk_buff *skb, *tx_skb; 136188843ab0SAndrei Emeltchenko u16 fcs; 136288843ab0SAndrei Emeltchenko u32 control; 13630a708f8fSGustavo F. Padovan 136458d35f87SGustavo F. Padovan skb = skb_peek(&chan->tx_q); 13650a708f8fSGustavo F. Padovan if (!skb) 13660a708f8fSGustavo F. Padovan return; 13670a708f8fSGustavo F. Padovan 1368d1726b6dSSzymon Janc while (bt_cb(skb)->tx_seq != tx_seq) { 136958d35f87SGustavo F. Padovan if (skb_queue_is_last(&chan->tx_q, skb)) 13700a708f8fSGustavo F. Padovan return; 13710a708f8fSGustavo F. Padovan 1372d1726b6dSSzymon Janc skb = skb_queue_next(&chan->tx_q, skb); 1373d1726b6dSSzymon Janc } 13740a708f8fSGustavo F. Padovan 13752c03a7a4SGustavo F. Padovan if (chan->remote_max_tx && 13762c03a7a4SGustavo F. Padovan bt_cb(skb)->retries == chan->remote_max_tx) { 13778c1d787bSGustavo F. Padovan l2cap_send_disconn_req(chan->conn, chan, ECONNABORTED); 13780a708f8fSGustavo F. Padovan return; 13790a708f8fSGustavo F. Padovan } 13800a708f8fSGustavo F. Padovan 13810a708f8fSGustavo F. Padovan tx_skb = skb_clone(skb, GFP_ATOMIC); 13820a708f8fSGustavo F. Padovan bt_cb(skb)->retries++; 138388843ab0SAndrei Emeltchenko 138488843ab0SAndrei Emeltchenko control = __get_control(chan, tx_skb->data + L2CAP_HDR_SIZE); 13857e0ef6eeSAndrei Emeltchenko control &= __get_sar_mask(chan); 13860a708f8fSGustavo F. Padovan 1387e2ab4353SGustavo F. Padovan if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state)) 138803f6715dSAndrei Emeltchenko control |= __set_ctrl_final(chan); 13890a708f8fSGustavo F. Padovan 13900b209faeSAndrei Emeltchenko control |= __set_reqseq(chan, chan->buffer_seq); 1391fb45de7dSAndrei Emeltchenko control |= __set_txseq(chan, tx_seq); 13920a708f8fSGustavo F. Padovan 139388843ab0SAndrei Emeltchenko __put_control(chan, control, tx_skb->data + L2CAP_HDR_SIZE); 13940a708f8fSGustavo F. Padovan 139547d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 139603a51213SAndrei Emeltchenko fcs = crc16(0, (u8 *)tx_skb->data, 139703a51213SAndrei Emeltchenko tx_skb->len - L2CAP_FCS_SIZE); 139803a51213SAndrei Emeltchenko put_unaligned_le16(fcs, 139903a51213SAndrei Emeltchenko tx_skb->data + tx_skb->len - L2CAP_FCS_SIZE); 14000a708f8fSGustavo F. Padovan } 14010a708f8fSGustavo F. Padovan 14024343478fSGustavo F. Padovan l2cap_do_send(chan, tx_skb); 14030a708f8fSGustavo F. Padovan } 14040a708f8fSGustavo F. Padovan 140567c9e840SSzymon Janc static int l2cap_ertm_send(struct l2cap_chan *chan) 14060a708f8fSGustavo F. Padovan { 14070a708f8fSGustavo F. Padovan struct sk_buff *skb, *tx_skb; 140888843ab0SAndrei Emeltchenko u16 fcs; 140988843ab0SAndrei Emeltchenko u32 control; 14100a708f8fSGustavo F. Padovan int nsent = 0; 14110a708f8fSGustavo F. Padovan 141289bc500eSGustavo F. Padovan if (chan->state != BT_CONNECTED) 14130a708f8fSGustavo F. Padovan return -ENOTCONN; 14140a708f8fSGustavo F. Padovan 141558d35f87SGustavo F. Padovan while ((skb = chan->tx_send_head) && (!l2cap_tx_window_full(chan))) { 14160a708f8fSGustavo F. Padovan 14172c03a7a4SGustavo F. Padovan if (chan->remote_max_tx && 14182c03a7a4SGustavo F. Padovan bt_cb(skb)->retries == chan->remote_max_tx) { 14198c1d787bSGustavo F. Padovan l2cap_send_disconn_req(chan->conn, chan, ECONNABORTED); 14200a708f8fSGustavo F. Padovan break; 14210a708f8fSGustavo F. Padovan } 14220a708f8fSGustavo F. Padovan 14230a708f8fSGustavo F. Padovan tx_skb = skb_clone(skb, GFP_ATOMIC); 14240a708f8fSGustavo F. Padovan 14250a708f8fSGustavo F. Padovan bt_cb(skb)->retries++; 14260a708f8fSGustavo F. Padovan 142788843ab0SAndrei Emeltchenko control = __get_control(chan, tx_skb->data + L2CAP_HDR_SIZE); 14287e0ef6eeSAndrei Emeltchenko control &= __get_sar_mask(chan); 14290a708f8fSGustavo F. Padovan 1430e2ab4353SGustavo F. Padovan if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state)) 143103f6715dSAndrei Emeltchenko control |= __set_ctrl_final(chan); 1432e2ab4353SGustavo F. Padovan 14330b209faeSAndrei Emeltchenko control |= __set_reqseq(chan, chan->buffer_seq); 1434fb45de7dSAndrei Emeltchenko control |= __set_txseq(chan, chan->next_tx_seq); 14350a708f8fSGustavo F. Padovan 143688843ab0SAndrei Emeltchenko __put_control(chan, control, tx_skb->data + L2CAP_HDR_SIZE); 14370a708f8fSGustavo F. Padovan 143847d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 143903a51213SAndrei Emeltchenko fcs = crc16(0, (u8 *)skb->data, 144003a51213SAndrei Emeltchenko tx_skb->len - L2CAP_FCS_SIZE); 144103a51213SAndrei Emeltchenko put_unaligned_le16(fcs, skb->data + 144203a51213SAndrei Emeltchenko tx_skb->len - L2CAP_FCS_SIZE); 14430a708f8fSGustavo F. Padovan } 14440a708f8fSGustavo F. Padovan 14454343478fSGustavo F. Padovan l2cap_do_send(chan, tx_skb); 14460a708f8fSGustavo F. Padovan 14471a09bcb9SGustavo F. Padovan __set_retrans_timer(chan); 14480a708f8fSGustavo F. Padovan 144942e5c802SGustavo F. Padovan bt_cb(skb)->tx_seq = chan->next_tx_seq; 1450836be934SAndrei Emeltchenko 1451836be934SAndrei Emeltchenko chan->next_tx_seq = __next_seq(chan, chan->next_tx_seq); 14520a708f8fSGustavo F. Padovan 145323e9fde2SSuraj Sumangala if (bt_cb(skb)->retries == 1) 14546a026610SGustavo F. Padovan chan->unacked_frames++; 145523e9fde2SSuraj Sumangala 14566a026610SGustavo F. Padovan chan->frames_sent++; 14570a708f8fSGustavo F. Padovan 145858d35f87SGustavo F. Padovan if (skb_queue_is_last(&chan->tx_q, skb)) 145958d35f87SGustavo F. Padovan chan->tx_send_head = NULL; 14600a708f8fSGustavo F. Padovan else 146158d35f87SGustavo F. Padovan chan->tx_send_head = skb_queue_next(&chan->tx_q, skb); 14620a708f8fSGustavo F. Padovan 14630a708f8fSGustavo F. Padovan nsent++; 14640a708f8fSGustavo F. Padovan } 14650a708f8fSGustavo F. Padovan 14660a708f8fSGustavo F. Padovan return nsent; 14670a708f8fSGustavo F. Padovan } 14680a708f8fSGustavo F. Padovan 1469525cd185SGustavo F. Padovan static int l2cap_retransmit_frames(struct l2cap_chan *chan) 14700a708f8fSGustavo F. Padovan { 14710a708f8fSGustavo F. Padovan int ret; 14720a708f8fSGustavo F. Padovan 147358d35f87SGustavo F. Padovan if (!skb_queue_empty(&chan->tx_q)) 147458d35f87SGustavo F. Padovan chan->tx_send_head = chan->tx_q.next; 14750a708f8fSGustavo F. Padovan 147642e5c802SGustavo F. Padovan chan->next_tx_seq = chan->expected_ack_seq; 1477525cd185SGustavo F. Padovan ret = l2cap_ertm_send(chan); 14780a708f8fSGustavo F. Padovan return ret; 14790a708f8fSGustavo F. Padovan } 14800a708f8fSGustavo F. Padovan 1481b17e73bbSSzymon Janc static void __l2cap_send_ack(struct l2cap_chan *chan) 14820a708f8fSGustavo F. Padovan { 148388843ab0SAndrei Emeltchenko u32 control = 0; 14840a708f8fSGustavo F. Padovan 14850b209faeSAndrei Emeltchenko control |= __set_reqseq(chan, chan->buffer_seq); 14860a708f8fSGustavo F. Padovan 1487e2ab4353SGustavo F. Padovan if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 1488ab784b73SAndrei Emeltchenko control |= __set_ctrl_super(chan, L2CAP_SUPER_RNR); 1489e2ab4353SGustavo F. Padovan set_bit(CONN_RNR_SENT, &chan->conn_state); 1490525cd185SGustavo F. Padovan l2cap_send_sframe(chan, control); 14910a708f8fSGustavo F. Padovan return; 14920a708f8fSGustavo F. Padovan } 14930a708f8fSGustavo F. Padovan 1494525cd185SGustavo F. Padovan if (l2cap_ertm_send(chan) > 0) 14950a708f8fSGustavo F. Padovan return; 14960a708f8fSGustavo F. Padovan 1497ab784b73SAndrei Emeltchenko control |= __set_ctrl_super(chan, L2CAP_SUPER_RR); 1498525cd185SGustavo F. Padovan l2cap_send_sframe(chan, control); 14990a708f8fSGustavo F. Padovan } 15000a708f8fSGustavo F. Padovan 1501b17e73bbSSzymon Janc static void l2cap_send_ack(struct l2cap_chan *chan) 1502b17e73bbSSzymon Janc { 1503b17e73bbSSzymon Janc __clear_ack_timer(chan); 1504b17e73bbSSzymon Janc __l2cap_send_ack(chan); 1505b17e73bbSSzymon Janc } 1506b17e73bbSSzymon Janc 1507525cd185SGustavo F. Padovan static void l2cap_send_srejtail(struct l2cap_chan *chan) 15080a708f8fSGustavo F. Padovan { 15090a708f8fSGustavo F. Padovan struct srej_list *tail; 151088843ab0SAndrei Emeltchenko u32 control; 15110a708f8fSGustavo F. Padovan 1512ab784b73SAndrei Emeltchenko control = __set_ctrl_super(chan, L2CAP_SUPER_SREJ); 151303f6715dSAndrei Emeltchenko control |= __set_ctrl_final(chan); 15140a708f8fSGustavo F. Padovan 151539d5a3eeSGustavo F. Padovan tail = list_entry((&chan->srej_l)->prev, struct srej_list, list); 15160b209faeSAndrei Emeltchenko control |= __set_reqseq(chan, tail->tx_seq); 15170a708f8fSGustavo F. Padovan 1518525cd185SGustavo F. Padovan l2cap_send_sframe(chan, control); 15190a708f8fSGustavo F. Padovan } 15200a708f8fSGustavo F. Padovan 15210952a57aSAndrei Emeltchenko static inline int l2cap_skbuff_fromiovec(struct l2cap_chan *chan, struct msghdr *msg, int len, int count, struct sk_buff *skb) 15220a708f8fSGustavo F. Padovan { 15230952a57aSAndrei Emeltchenko struct sock *sk = chan->sk; 15240952a57aSAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 15250a708f8fSGustavo F. Padovan struct sk_buff **frag; 15260a708f8fSGustavo F. Padovan int err, sent = 0; 15270a708f8fSGustavo F. Padovan 15280a708f8fSGustavo F. Padovan if (memcpy_fromiovec(skb_put(skb, count), msg->msg_iov, count)) 15290a708f8fSGustavo F. Padovan return -EFAULT; 15300a708f8fSGustavo F. Padovan 15310a708f8fSGustavo F. Padovan sent += count; 15320a708f8fSGustavo F. Padovan len -= count; 15330a708f8fSGustavo F. Padovan 15340a708f8fSGustavo F. Padovan /* Continuation fragments (no L2CAP header) */ 15350a708f8fSGustavo F. Padovan frag = &skb_shinfo(skb)->frag_list; 15360a708f8fSGustavo F. Padovan while (len) { 15370a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 15380a708f8fSGustavo F. Padovan 15390a708f8fSGustavo F. Padovan *frag = bt_skb_send_alloc(sk, count, msg->msg_flags & MSG_DONTWAIT, &err); 15400a708f8fSGustavo F. Padovan if (!*frag) 15410a708f8fSGustavo F. Padovan return err; 15420a708f8fSGustavo F. Padovan if (memcpy_fromiovec(skb_put(*frag, count), msg->msg_iov, count)) 15430a708f8fSGustavo F. Padovan return -EFAULT; 15440a708f8fSGustavo F. Padovan 15455e59b791SLuiz Augusto von Dentz (*frag)->priority = skb->priority; 15465e59b791SLuiz Augusto von Dentz 15470a708f8fSGustavo F. Padovan sent += count; 15480a708f8fSGustavo F. Padovan len -= count; 15490a708f8fSGustavo F. Padovan 15500a708f8fSGustavo F. Padovan frag = &(*frag)->next; 15510a708f8fSGustavo F. Padovan } 15520a708f8fSGustavo F. Padovan 15530a708f8fSGustavo F. Padovan return sent; 15540a708f8fSGustavo F. Padovan } 15550a708f8fSGustavo F. Padovan 15565e59b791SLuiz Augusto von Dentz static struct sk_buff *l2cap_create_connless_pdu(struct l2cap_chan *chan, 15575e59b791SLuiz Augusto von Dentz struct msghdr *msg, size_t len, 15585e59b791SLuiz Augusto von Dentz u32 priority) 15590a708f8fSGustavo F. Padovan { 1560fe4128e0SGustavo F. Padovan struct sock *sk = chan->sk; 15618c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 15620a708f8fSGustavo F. Padovan struct sk_buff *skb; 156303a51213SAndrei Emeltchenko int err, count, hlen = L2CAP_HDR_SIZE + L2CAP_PSMLEN_SIZE; 15640a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 15650a708f8fSGustavo F. Padovan 15665e59b791SLuiz Augusto von Dentz BT_DBG("sk %p len %d priority %u", sk, (int)len, priority); 15670a708f8fSGustavo F. Padovan 15680a708f8fSGustavo F. Padovan count = min_t(unsigned int, (conn->mtu - hlen), len); 15690a708f8fSGustavo F. Padovan skb = bt_skb_send_alloc(sk, count + hlen, 15700a708f8fSGustavo F. Padovan msg->msg_flags & MSG_DONTWAIT, &err); 15710a708f8fSGustavo F. Padovan if (!skb) 15720a708f8fSGustavo F. Padovan return ERR_PTR(err); 15730a708f8fSGustavo F. Padovan 15745e59b791SLuiz Augusto von Dentz skb->priority = priority; 15755e59b791SLuiz Augusto von Dentz 15760a708f8fSGustavo F. Padovan /* Create L2CAP header */ 15770a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 1578fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 15790a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(len + (hlen - L2CAP_HDR_SIZE)); 1580fe4128e0SGustavo F. Padovan put_unaligned_le16(chan->psm, skb_put(skb, 2)); 15810a708f8fSGustavo F. Padovan 15820952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 15830a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 15840a708f8fSGustavo F. Padovan kfree_skb(skb); 15850a708f8fSGustavo F. Padovan return ERR_PTR(err); 15860a708f8fSGustavo F. Padovan } 15870a708f8fSGustavo F. Padovan return skb; 15880a708f8fSGustavo F. Padovan } 15890a708f8fSGustavo F. Padovan 15905e59b791SLuiz Augusto von Dentz static struct sk_buff *l2cap_create_basic_pdu(struct l2cap_chan *chan, 15915e59b791SLuiz Augusto von Dentz struct msghdr *msg, size_t len, 15925e59b791SLuiz Augusto von Dentz u32 priority) 15930a708f8fSGustavo F. Padovan { 1594fe4128e0SGustavo F. Padovan struct sock *sk = chan->sk; 15958c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 15960a708f8fSGustavo F. Padovan struct sk_buff *skb; 15970a708f8fSGustavo F. Padovan int err, count, hlen = L2CAP_HDR_SIZE; 15980a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 15990a708f8fSGustavo F. Padovan 16000a708f8fSGustavo F. Padovan BT_DBG("sk %p len %d", sk, (int)len); 16010a708f8fSGustavo F. Padovan 16020a708f8fSGustavo F. Padovan count = min_t(unsigned int, (conn->mtu - hlen), len); 16030a708f8fSGustavo F. Padovan skb = bt_skb_send_alloc(sk, count + hlen, 16040a708f8fSGustavo F. Padovan msg->msg_flags & MSG_DONTWAIT, &err); 16050a708f8fSGustavo F. Padovan if (!skb) 16060a708f8fSGustavo F. Padovan return ERR_PTR(err); 16070a708f8fSGustavo F. Padovan 16085e59b791SLuiz Augusto von Dentz skb->priority = priority; 16095e59b791SLuiz Augusto von Dentz 16100a708f8fSGustavo F. Padovan /* Create L2CAP header */ 16110a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 1612fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 16130a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(len + (hlen - L2CAP_HDR_SIZE)); 16140a708f8fSGustavo F. Padovan 16150952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 16160a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 16170a708f8fSGustavo F. Padovan kfree_skb(skb); 16180a708f8fSGustavo F. Padovan return ERR_PTR(err); 16190a708f8fSGustavo F. Padovan } 16200a708f8fSGustavo F. Padovan return skb; 16210a708f8fSGustavo F. Padovan } 16220a708f8fSGustavo F. Padovan 1623ab0ff76dSLuiz Augusto von Dentz static struct sk_buff *l2cap_create_iframe_pdu(struct l2cap_chan *chan, 1624ab0ff76dSLuiz Augusto von Dentz struct msghdr *msg, size_t len, 162588843ab0SAndrei Emeltchenko u32 control, u16 sdulen) 16260a708f8fSGustavo F. Padovan { 162747d1ec61SGustavo F. Padovan struct sock *sk = chan->sk; 16288c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 16290a708f8fSGustavo F. Padovan struct sk_buff *skb; 1630e4ca6d98SAndrei Emeltchenko int err, count, hlen; 16310a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 16320a708f8fSGustavo F. Padovan 16330a708f8fSGustavo F. Padovan BT_DBG("sk %p len %d", sk, (int)len); 16340a708f8fSGustavo F. Padovan 16350a708f8fSGustavo F. Padovan if (!conn) 16360a708f8fSGustavo F. Padovan return ERR_PTR(-ENOTCONN); 16370a708f8fSGustavo F. Padovan 1638e4ca6d98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 1639e4ca6d98SAndrei Emeltchenko hlen = L2CAP_EXT_HDR_SIZE; 1640e4ca6d98SAndrei Emeltchenko else 1641e4ca6d98SAndrei Emeltchenko hlen = L2CAP_ENH_HDR_SIZE; 1642e4ca6d98SAndrei Emeltchenko 16430a708f8fSGustavo F. Padovan if (sdulen) 164403a51213SAndrei Emeltchenko hlen += L2CAP_SDULEN_SIZE; 16450a708f8fSGustavo F. Padovan 164647d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 164703a51213SAndrei Emeltchenko hlen += L2CAP_FCS_SIZE; 16480a708f8fSGustavo F. Padovan 16490a708f8fSGustavo F. Padovan count = min_t(unsigned int, (conn->mtu - hlen), len); 16500a708f8fSGustavo F. Padovan skb = bt_skb_send_alloc(sk, count + hlen, 16510a708f8fSGustavo F. Padovan msg->msg_flags & MSG_DONTWAIT, &err); 16520a708f8fSGustavo F. Padovan if (!skb) 16530a708f8fSGustavo F. Padovan return ERR_PTR(err); 16540a708f8fSGustavo F. Padovan 16550a708f8fSGustavo F. Padovan /* Create L2CAP header */ 16560a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 1657fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 16580a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(len + (hlen - L2CAP_HDR_SIZE)); 165988843ab0SAndrei Emeltchenko 166088843ab0SAndrei Emeltchenko __put_control(chan, control, skb_put(skb, __ctrl_size(chan))); 166188843ab0SAndrei Emeltchenko 16620a708f8fSGustavo F. Padovan if (sdulen) 166303a51213SAndrei Emeltchenko put_unaligned_le16(sdulen, skb_put(skb, L2CAP_SDULEN_SIZE)); 16640a708f8fSGustavo F. Padovan 16650952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 16660a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 16670a708f8fSGustavo F. Padovan kfree_skb(skb); 16680a708f8fSGustavo F. Padovan return ERR_PTR(err); 16690a708f8fSGustavo F. Padovan } 16700a708f8fSGustavo F. Padovan 167147d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 167203a51213SAndrei Emeltchenko put_unaligned_le16(0, skb_put(skb, L2CAP_FCS_SIZE)); 16730a708f8fSGustavo F. Padovan 16740a708f8fSGustavo F. Padovan bt_cb(skb)->retries = 0; 16750a708f8fSGustavo F. Padovan return skb; 16760a708f8fSGustavo F. Padovan } 16770a708f8fSGustavo F. Padovan 167867c9e840SSzymon Janc static int l2cap_sar_segment_sdu(struct l2cap_chan *chan, struct msghdr *msg, size_t len) 16790a708f8fSGustavo F. Padovan { 16800a708f8fSGustavo F. Padovan struct sk_buff *skb; 16810a708f8fSGustavo F. Padovan struct sk_buff_head sar_queue; 168288843ab0SAndrei Emeltchenko u32 control; 16830a708f8fSGustavo F. Padovan size_t size = 0; 16840a708f8fSGustavo F. Padovan 16850a708f8fSGustavo F. Padovan skb_queue_head_init(&sar_queue); 16867e0ef6eeSAndrei Emeltchenko control = __set_ctrl_sar(chan, L2CAP_SAR_START); 168747d1ec61SGustavo F. Padovan skb = l2cap_create_iframe_pdu(chan, msg, chan->remote_mps, control, len); 16880a708f8fSGustavo F. Padovan if (IS_ERR(skb)) 16890a708f8fSGustavo F. Padovan return PTR_ERR(skb); 16900a708f8fSGustavo F. Padovan 16910a708f8fSGustavo F. Padovan __skb_queue_tail(&sar_queue, skb); 16922c03a7a4SGustavo F. Padovan len -= chan->remote_mps; 16932c03a7a4SGustavo F. Padovan size += chan->remote_mps; 16940a708f8fSGustavo F. Padovan 16950a708f8fSGustavo F. Padovan while (len > 0) { 16960a708f8fSGustavo F. Padovan size_t buflen; 16970a708f8fSGustavo F. Padovan 16982c03a7a4SGustavo F. Padovan if (len > chan->remote_mps) { 16997e0ef6eeSAndrei Emeltchenko control = __set_ctrl_sar(chan, L2CAP_SAR_CONTINUE); 17002c03a7a4SGustavo F. Padovan buflen = chan->remote_mps; 17010a708f8fSGustavo F. Padovan } else { 17027e0ef6eeSAndrei Emeltchenko control = __set_ctrl_sar(chan, L2CAP_SAR_END); 17030a708f8fSGustavo F. Padovan buflen = len; 17040a708f8fSGustavo F. Padovan } 17050a708f8fSGustavo F. Padovan 170647d1ec61SGustavo F. Padovan skb = l2cap_create_iframe_pdu(chan, msg, buflen, control, 0); 17070a708f8fSGustavo F. Padovan if (IS_ERR(skb)) { 17080a708f8fSGustavo F. Padovan skb_queue_purge(&sar_queue); 17090a708f8fSGustavo F. Padovan return PTR_ERR(skb); 17100a708f8fSGustavo F. Padovan } 17110a708f8fSGustavo F. Padovan 17120a708f8fSGustavo F. Padovan __skb_queue_tail(&sar_queue, skb); 17130a708f8fSGustavo F. Padovan len -= buflen; 17140a708f8fSGustavo F. Padovan size += buflen; 17150a708f8fSGustavo F. Padovan } 171658d35f87SGustavo F. Padovan skb_queue_splice_tail(&sar_queue, &chan->tx_q); 171758d35f87SGustavo F. Padovan if (chan->tx_send_head == NULL) 171858d35f87SGustavo F. Padovan chan->tx_send_head = sar_queue.next; 17190a708f8fSGustavo F. Padovan 17200a708f8fSGustavo F. Padovan return size; 17210a708f8fSGustavo F. Padovan } 17220a708f8fSGustavo F. Padovan 17235e59b791SLuiz Augusto von Dentz int l2cap_chan_send(struct l2cap_chan *chan, struct msghdr *msg, size_t len, 17245e59b791SLuiz Augusto von Dentz u32 priority) 17259a91a04aSGustavo F. Padovan { 17269a91a04aSGustavo F. Padovan struct sk_buff *skb; 172788843ab0SAndrei Emeltchenko u32 control; 17289a91a04aSGustavo F. Padovan int err; 17299a91a04aSGustavo F. Padovan 17309a91a04aSGustavo F. Padovan /* Connectionless channel */ 1731715ec005SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_LESS) { 17325e59b791SLuiz Augusto von Dentz skb = l2cap_create_connless_pdu(chan, msg, len, priority); 17339a91a04aSGustavo F. Padovan if (IS_ERR(skb)) 17349a91a04aSGustavo F. Padovan return PTR_ERR(skb); 17359a91a04aSGustavo F. Padovan 17369a91a04aSGustavo F. Padovan l2cap_do_send(chan, skb); 17379a91a04aSGustavo F. Padovan return len; 17389a91a04aSGustavo F. Padovan } 17399a91a04aSGustavo F. Padovan 17409a91a04aSGustavo F. Padovan switch (chan->mode) { 17419a91a04aSGustavo F. Padovan case L2CAP_MODE_BASIC: 17429a91a04aSGustavo F. Padovan /* Check outgoing MTU */ 17439a91a04aSGustavo F. Padovan if (len > chan->omtu) 17449a91a04aSGustavo F. Padovan return -EMSGSIZE; 17459a91a04aSGustavo F. Padovan 17469a91a04aSGustavo F. Padovan /* Create a basic PDU */ 17475e59b791SLuiz Augusto von Dentz skb = l2cap_create_basic_pdu(chan, msg, len, priority); 17489a91a04aSGustavo F. Padovan if (IS_ERR(skb)) 17499a91a04aSGustavo F. Padovan return PTR_ERR(skb); 17509a91a04aSGustavo F. Padovan 17519a91a04aSGustavo F. Padovan l2cap_do_send(chan, skb); 17529a91a04aSGustavo F. Padovan err = len; 17539a91a04aSGustavo F. Padovan break; 17549a91a04aSGustavo F. Padovan 17559a91a04aSGustavo F. Padovan case L2CAP_MODE_ERTM: 17569a91a04aSGustavo F. Padovan case L2CAP_MODE_STREAMING: 17579a91a04aSGustavo F. Padovan /* Entire SDU fits into one PDU */ 17589a91a04aSGustavo F. Padovan if (len <= chan->remote_mps) { 17597e0ef6eeSAndrei Emeltchenko control = __set_ctrl_sar(chan, L2CAP_SAR_UNSEGMENTED); 17609a91a04aSGustavo F. Padovan skb = l2cap_create_iframe_pdu(chan, msg, len, control, 17619a91a04aSGustavo F. Padovan 0); 17629a91a04aSGustavo F. Padovan if (IS_ERR(skb)) 17639a91a04aSGustavo F. Padovan return PTR_ERR(skb); 17649a91a04aSGustavo F. Padovan 17659a91a04aSGustavo F. Padovan __skb_queue_tail(&chan->tx_q, skb); 17669a91a04aSGustavo F. Padovan 17679a91a04aSGustavo F. Padovan if (chan->tx_send_head == NULL) 17689a91a04aSGustavo F. Padovan chan->tx_send_head = skb; 17699a91a04aSGustavo F. Padovan 17709a91a04aSGustavo F. Padovan } else { 17719a91a04aSGustavo F. Padovan /* Segment SDU into multiples PDUs */ 17729a91a04aSGustavo F. Padovan err = l2cap_sar_segment_sdu(chan, msg, len); 17739a91a04aSGustavo F. Padovan if (err < 0) 17749a91a04aSGustavo F. Padovan return err; 17759a91a04aSGustavo F. Padovan } 17769a91a04aSGustavo F. Padovan 17779a91a04aSGustavo F. Padovan if (chan->mode == L2CAP_MODE_STREAMING) { 17789a91a04aSGustavo F. Padovan l2cap_streaming_send(chan); 17799a91a04aSGustavo F. Padovan err = len; 17809a91a04aSGustavo F. Padovan break; 17819a91a04aSGustavo F. Padovan } 17829a91a04aSGustavo F. Padovan 1783e2ab4353SGustavo F. Padovan if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state) && 1784e2ab4353SGustavo F. Padovan test_bit(CONN_WAIT_F, &chan->conn_state)) { 17859a91a04aSGustavo F. Padovan err = len; 17869a91a04aSGustavo F. Padovan break; 17879a91a04aSGustavo F. Padovan } 17889a91a04aSGustavo F. Padovan 17899a91a04aSGustavo F. Padovan err = l2cap_ertm_send(chan); 17909a91a04aSGustavo F. Padovan if (err >= 0) 17919a91a04aSGustavo F. Padovan err = len; 17929a91a04aSGustavo F. Padovan 17939a91a04aSGustavo F. Padovan break; 17949a91a04aSGustavo F. Padovan 17959a91a04aSGustavo F. Padovan default: 17969a91a04aSGustavo F. Padovan BT_DBG("bad state %1.1x", chan->mode); 17979a91a04aSGustavo F. Padovan err = -EBADFD; 17989a91a04aSGustavo F. Padovan } 17999a91a04aSGustavo F. Padovan 18009a91a04aSGustavo F. Padovan return err; 18019a91a04aSGustavo F. Padovan } 18029a91a04aSGustavo F. Padovan 18030a708f8fSGustavo F. Padovan /* Copy frame to all raw sockets on that connection */ 18040a708f8fSGustavo F. Padovan static void l2cap_raw_recv(struct l2cap_conn *conn, struct sk_buff *skb) 18050a708f8fSGustavo F. Padovan { 18060a708f8fSGustavo F. Padovan struct sk_buff *nskb; 180748454079SGustavo F. Padovan struct l2cap_chan *chan; 18080a708f8fSGustavo F. Padovan 18090a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 18100a708f8fSGustavo F. Padovan 18113d57dc68SGustavo F. Padovan rcu_read_lock(); 18123d57dc68SGustavo F. Padovan 18133d57dc68SGustavo F. Padovan list_for_each_entry_rcu(chan, &conn->chan_l, list) { 181448454079SGustavo F. Padovan struct sock *sk = chan->sk; 1815715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_RAW) 18160a708f8fSGustavo F. Padovan continue; 18170a708f8fSGustavo F. Padovan 18180a708f8fSGustavo F. Padovan /* Don't send frame to the socket it came from */ 18190a708f8fSGustavo F. Padovan if (skb->sk == sk) 18200a708f8fSGustavo F. Padovan continue; 18210a708f8fSGustavo F. Padovan nskb = skb_clone(skb, GFP_ATOMIC); 18220a708f8fSGustavo F. Padovan if (!nskb) 18230a708f8fSGustavo F. Padovan continue; 18240a708f8fSGustavo F. Padovan 182523070494SGustavo F. Padovan if (chan->ops->recv(chan->data, nskb)) 18260a708f8fSGustavo F. Padovan kfree_skb(nskb); 18270a708f8fSGustavo F. Padovan } 18283d57dc68SGustavo F. Padovan 18293d57dc68SGustavo F. Padovan rcu_read_unlock(); 18300a708f8fSGustavo F. Padovan } 18310a708f8fSGustavo F. Padovan 18320a708f8fSGustavo F. Padovan /* ---- L2CAP signalling commands ---- */ 18330a708f8fSGustavo F. Padovan static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn, 18340a708f8fSGustavo F. Padovan u8 code, u8 ident, u16 dlen, void *data) 18350a708f8fSGustavo F. Padovan { 18360a708f8fSGustavo F. Padovan struct sk_buff *skb, **frag; 18370a708f8fSGustavo F. Padovan struct l2cap_cmd_hdr *cmd; 18380a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 18390a708f8fSGustavo F. Padovan int len, count; 18400a708f8fSGustavo F. Padovan 18410a708f8fSGustavo F. Padovan BT_DBG("conn %p, code 0x%2.2x, ident 0x%2.2x, len %d", 18420a708f8fSGustavo F. Padovan conn, code, ident, dlen); 18430a708f8fSGustavo F. Padovan 18440a708f8fSGustavo F. Padovan len = L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE + dlen; 18450a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 18460a708f8fSGustavo F. Padovan 18470a708f8fSGustavo F. Padovan skb = bt_skb_alloc(count, GFP_ATOMIC); 18480a708f8fSGustavo F. Padovan if (!skb) 18490a708f8fSGustavo F. Padovan return NULL; 18500a708f8fSGustavo F. Padovan 18510a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 18520a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(L2CAP_CMD_HDR_SIZE + dlen); 18533300d9a9SClaudio Takahasi 18543300d9a9SClaudio Takahasi if (conn->hcon->type == LE_LINK) 18553300d9a9SClaudio Takahasi lh->cid = cpu_to_le16(L2CAP_CID_LE_SIGNALING); 18563300d9a9SClaudio Takahasi else 18570a708f8fSGustavo F. Padovan lh->cid = cpu_to_le16(L2CAP_CID_SIGNALING); 18580a708f8fSGustavo F. Padovan 18590a708f8fSGustavo F. Padovan cmd = (struct l2cap_cmd_hdr *) skb_put(skb, L2CAP_CMD_HDR_SIZE); 18600a708f8fSGustavo F. Padovan cmd->code = code; 18610a708f8fSGustavo F. Padovan cmd->ident = ident; 18620a708f8fSGustavo F. Padovan cmd->len = cpu_to_le16(dlen); 18630a708f8fSGustavo F. Padovan 18640a708f8fSGustavo F. Padovan if (dlen) { 18650a708f8fSGustavo F. Padovan count -= L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE; 18660a708f8fSGustavo F. Padovan memcpy(skb_put(skb, count), data, count); 18670a708f8fSGustavo F. Padovan data += count; 18680a708f8fSGustavo F. Padovan } 18690a708f8fSGustavo F. Padovan 18700a708f8fSGustavo F. Padovan len -= skb->len; 18710a708f8fSGustavo F. Padovan 18720a708f8fSGustavo F. Padovan /* Continuation fragments (no L2CAP header) */ 18730a708f8fSGustavo F. Padovan frag = &skb_shinfo(skb)->frag_list; 18740a708f8fSGustavo F. Padovan while (len) { 18750a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 18760a708f8fSGustavo F. Padovan 18770a708f8fSGustavo F. Padovan *frag = bt_skb_alloc(count, GFP_ATOMIC); 18780a708f8fSGustavo F. Padovan if (!*frag) 18790a708f8fSGustavo F. Padovan goto fail; 18800a708f8fSGustavo F. Padovan 18810a708f8fSGustavo F. Padovan memcpy(skb_put(*frag, count), data, count); 18820a708f8fSGustavo F. Padovan 18830a708f8fSGustavo F. Padovan len -= count; 18840a708f8fSGustavo F. Padovan data += count; 18850a708f8fSGustavo F. Padovan 18860a708f8fSGustavo F. Padovan frag = &(*frag)->next; 18870a708f8fSGustavo F. Padovan } 18880a708f8fSGustavo F. Padovan 18890a708f8fSGustavo F. Padovan return skb; 18900a708f8fSGustavo F. Padovan 18910a708f8fSGustavo F. Padovan fail: 18920a708f8fSGustavo F. Padovan kfree_skb(skb); 18930a708f8fSGustavo F. Padovan return NULL; 18940a708f8fSGustavo F. Padovan } 18950a708f8fSGustavo F. Padovan 18960a708f8fSGustavo F. Padovan static inline int l2cap_get_conf_opt(void **ptr, int *type, int *olen, unsigned long *val) 18970a708f8fSGustavo F. Padovan { 18980a708f8fSGustavo F. Padovan struct l2cap_conf_opt *opt = *ptr; 18990a708f8fSGustavo F. Padovan int len; 19000a708f8fSGustavo F. Padovan 19010a708f8fSGustavo F. Padovan len = L2CAP_CONF_OPT_SIZE + opt->len; 19020a708f8fSGustavo F. Padovan *ptr += len; 19030a708f8fSGustavo F. Padovan 19040a708f8fSGustavo F. Padovan *type = opt->type; 19050a708f8fSGustavo F. Padovan *olen = opt->len; 19060a708f8fSGustavo F. Padovan 19070a708f8fSGustavo F. Padovan switch (opt->len) { 19080a708f8fSGustavo F. Padovan case 1: 19090a708f8fSGustavo F. Padovan *val = *((u8 *) opt->val); 19100a708f8fSGustavo F. Padovan break; 19110a708f8fSGustavo F. Padovan 19120a708f8fSGustavo F. Padovan case 2: 19130a708f8fSGustavo F. Padovan *val = get_unaligned_le16(opt->val); 19140a708f8fSGustavo F. Padovan break; 19150a708f8fSGustavo F. Padovan 19160a708f8fSGustavo F. Padovan case 4: 19170a708f8fSGustavo F. Padovan *val = get_unaligned_le32(opt->val); 19180a708f8fSGustavo F. Padovan break; 19190a708f8fSGustavo F. Padovan 19200a708f8fSGustavo F. Padovan default: 19210a708f8fSGustavo F. Padovan *val = (unsigned long) opt->val; 19220a708f8fSGustavo F. Padovan break; 19230a708f8fSGustavo F. Padovan } 19240a708f8fSGustavo F. Padovan 19250a708f8fSGustavo F. Padovan BT_DBG("type 0x%2.2x len %d val 0x%lx", *type, opt->len, *val); 19260a708f8fSGustavo F. Padovan return len; 19270a708f8fSGustavo F. Padovan } 19280a708f8fSGustavo F. Padovan 19290a708f8fSGustavo F. Padovan static void l2cap_add_conf_opt(void **ptr, u8 type, u8 len, unsigned long val) 19300a708f8fSGustavo F. Padovan { 19310a708f8fSGustavo F. Padovan struct l2cap_conf_opt *opt = *ptr; 19320a708f8fSGustavo F. Padovan 19330a708f8fSGustavo F. Padovan BT_DBG("type 0x%2.2x len %d val 0x%lx", type, len, val); 19340a708f8fSGustavo F. Padovan 19350a708f8fSGustavo F. Padovan opt->type = type; 19360a708f8fSGustavo F. Padovan opt->len = len; 19370a708f8fSGustavo F. Padovan 19380a708f8fSGustavo F. Padovan switch (len) { 19390a708f8fSGustavo F. Padovan case 1: 19400a708f8fSGustavo F. Padovan *((u8 *) opt->val) = val; 19410a708f8fSGustavo F. Padovan break; 19420a708f8fSGustavo F. Padovan 19430a708f8fSGustavo F. Padovan case 2: 19440a708f8fSGustavo F. Padovan put_unaligned_le16(val, opt->val); 19450a708f8fSGustavo F. Padovan break; 19460a708f8fSGustavo F. Padovan 19470a708f8fSGustavo F. Padovan case 4: 19480a708f8fSGustavo F. Padovan put_unaligned_le32(val, opt->val); 19490a708f8fSGustavo F. Padovan break; 19500a708f8fSGustavo F. Padovan 19510a708f8fSGustavo F. Padovan default: 19520a708f8fSGustavo F. Padovan memcpy(opt->val, (void *) val, len); 19530a708f8fSGustavo F. Padovan break; 19540a708f8fSGustavo F. Padovan } 19550a708f8fSGustavo F. Padovan 19560a708f8fSGustavo F. Padovan *ptr += L2CAP_CONF_OPT_SIZE + len; 19570a708f8fSGustavo F. Padovan } 19580a708f8fSGustavo F. Padovan 1959f89cef09SAndrei Emeltchenko static void l2cap_add_opt_efs(void **ptr, struct l2cap_chan *chan) 1960f89cef09SAndrei Emeltchenko { 1961f89cef09SAndrei Emeltchenko struct l2cap_conf_efs efs; 1962f89cef09SAndrei Emeltchenko 1963f89cef09SAndrei Emeltchenko switch (chan->mode) { 1964f89cef09SAndrei Emeltchenko case L2CAP_MODE_ERTM: 1965f89cef09SAndrei Emeltchenko efs.id = chan->local_id; 1966f89cef09SAndrei Emeltchenko efs.stype = chan->local_stype; 1967f89cef09SAndrei Emeltchenko efs.msdu = cpu_to_le16(chan->local_msdu); 1968f89cef09SAndrei Emeltchenko efs.sdu_itime = cpu_to_le32(chan->local_sdu_itime); 1969f89cef09SAndrei Emeltchenko efs.acc_lat = cpu_to_le32(L2CAP_DEFAULT_ACC_LAT); 1970f89cef09SAndrei Emeltchenko efs.flush_to = cpu_to_le32(L2CAP_DEFAULT_FLUSH_TO); 1971f89cef09SAndrei Emeltchenko break; 1972f89cef09SAndrei Emeltchenko 1973f89cef09SAndrei Emeltchenko case L2CAP_MODE_STREAMING: 1974f89cef09SAndrei Emeltchenko efs.id = 1; 1975f89cef09SAndrei Emeltchenko efs.stype = L2CAP_SERV_BESTEFFORT; 1976f89cef09SAndrei Emeltchenko efs.msdu = cpu_to_le16(chan->local_msdu); 1977f89cef09SAndrei Emeltchenko efs.sdu_itime = cpu_to_le32(chan->local_sdu_itime); 1978f89cef09SAndrei Emeltchenko efs.acc_lat = 0; 1979f89cef09SAndrei Emeltchenko efs.flush_to = 0; 1980f89cef09SAndrei Emeltchenko break; 1981f89cef09SAndrei Emeltchenko 1982f89cef09SAndrei Emeltchenko default: 1983f89cef09SAndrei Emeltchenko return; 1984f89cef09SAndrei Emeltchenko } 1985f89cef09SAndrei Emeltchenko 1986f89cef09SAndrei Emeltchenko l2cap_add_conf_opt(ptr, L2CAP_CONF_EFS, sizeof(efs), 1987f89cef09SAndrei Emeltchenko (unsigned long) &efs); 1988f89cef09SAndrei Emeltchenko } 1989f89cef09SAndrei Emeltchenko 1990721c4181SGustavo F. Padovan static void l2cap_ack_timeout(struct work_struct *work) 19910a708f8fSGustavo F. Padovan { 1992721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 1993721c4181SGustavo F. Padovan ack_timer.work); 19940a708f8fSGustavo F. Padovan 19952fb9b3d4SGustavo F. Padovan BT_DBG("chan %p", chan); 19962fb9b3d4SGustavo F. Padovan 1997721c4181SGustavo F. Padovan lock_sock(chan->sk); 1998b17e73bbSSzymon Janc __l2cap_send_ack(chan); 1999721c4181SGustavo F. Padovan release_sock(chan->sk); 200009bfb2eeSSzymon Janc 200109bfb2eeSSzymon Janc l2cap_chan_put(chan); 20020a708f8fSGustavo F. Padovan } 20030a708f8fSGustavo F. Padovan 2004525cd185SGustavo F. Padovan static inline void l2cap_ertm_init(struct l2cap_chan *chan) 20050a708f8fSGustavo F. Padovan { 200642e5c802SGustavo F. Padovan chan->expected_ack_seq = 0; 20076a026610SGustavo F. Padovan chan->unacked_frames = 0; 200842e5c802SGustavo F. Padovan chan->buffer_seq = 0; 20096a026610SGustavo F. Padovan chan->num_acked = 0; 20106a026610SGustavo F. Padovan chan->frames_sent = 0; 20110a708f8fSGustavo F. Padovan 2012721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->retrans_timer, l2cap_retrans_timeout); 2013721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->monitor_timer, l2cap_monitor_timeout); 2014721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->ack_timer, l2cap_ack_timeout); 20150a708f8fSGustavo F. Padovan 2016f1c6775bSGustavo F. Padovan skb_queue_head_init(&chan->srej_q); 20170a708f8fSGustavo F. Padovan 201839d5a3eeSGustavo F. Padovan INIT_LIST_HEAD(&chan->srej_l); 20190a708f8fSGustavo F. Padovan } 20200a708f8fSGustavo F. Padovan 20210a708f8fSGustavo F. Padovan static inline __u8 l2cap_select_mode(__u8 mode, __u16 remote_feat_mask) 20220a708f8fSGustavo F. Padovan { 20230a708f8fSGustavo F. Padovan switch (mode) { 20240a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 20250a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 20260a708f8fSGustavo F. Padovan if (l2cap_mode_supported(mode, remote_feat_mask)) 20270a708f8fSGustavo F. Padovan return mode; 20280a708f8fSGustavo F. Padovan /* fall through */ 20290a708f8fSGustavo F. Padovan default: 20300a708f8fSGustavo F. Padovan return L2CAP_MODE_BASIC; 20310a708f8fSGustavo F. Padovan } 20320a708f8fSGustavo F. Padovan } 20330a708f8fSGustavo F. Padovan 20346327eb98SAndrei Emeltchenko static inline bool __l2cap_ews_supported(struct l2cap_chan *chan) 20356327eb98SAndrei Emeltchenko { 20366327eb98SAndrei Emeltchenko return enable_hs && chan->conn->feat_mask & L2CAP_FEAT_EXT_WINDOW; 20376327eb98SAndrei Emeltchenko } 20386327eb98SAndrei Emeltchenko 2039f89cef09SAndrei Emeltchenko static inline bool __l2cap_efs_supported(struct l2cap_chan *chan) 2040f89cef09SAndrei Emeltchenko { 2041f89cef09SAndrei Emeltchenko return enable_hs && chan->conn->feat_mask & L2CAP_FEAT_EXT_FLOW; 2042f89cef09SAndrei Emeltchenko } 2043f89cef09SAndrei Emeltchenko 20446327eb98SAndrei Emeltchenko static inline void l2cap_txwin_setup(struct l2cap_chan *chan) 20456327eb98SAndrei Emeltchenko { 20466327eb98SAndrei Emeltchenko if (chan->tx_win > L2CAP_DEFAULT_TX_WINDOW && 2047836be934SAndrei Emeltchenko __l2cap_ews_supported(chan)) { 20486327eb98SAndrei Emeltchenko /* use extended control field */ 20496327eb98SAndrei Emeltchenko set_bit(FLAG_EXT_CTRL, &chan->flags); 2050836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_EXT_WINDOW; 2051836be934SAndrei Emeltchenko } else { 20526327eb98SAndrei Emeltchenko chan->tx_win = min_t(u16, chan->tx_win, 20536327eb98SAndrei Emeltchenko L2CAP_DEFAULT_TX_WINDOW); 2054836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_TX_WINDOW; 2055836be934SAndrei Emeltchenko } 20566327eb98SAndrei Emeltchenko } 20576327eb98SAndrei Emeltchenko 2058710f9b0aSGustavo F. Padovan static int l2cap_build_conf_req(struct l2cap_chan *chan, void *data) 20590a708f8fSGustavo F. Padovan { 20600a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = data; 20610c1bc5c6SGustavo F. Padovan struct l2cap_conf_rfc rfc = { .mode = chan->mode }; 20620a708f8fSGustavo F. Padovan void *ptr = req->data; 2063c8f79162SAndrei Emeltchenko u16 size; 20640a708f8fSGustavo F. Padovan 206549208c9cSGustavo F. Padovan BT_DBG("chan %p", chan); 20660a708f8fSGustavo F. Padovan 206773ffa904SGustavo F. Padovan if (chan->num_conf_req || chan->num_conf_rsp) 20680a708f8fSGustavo F. Padovan goto done; 20690a708f8fSGustavo F. Padovan 20700c1bc5c6SGustavo F. Padovan switch (chan->mode) { 20710a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 20720a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 2073c1360a1cSGustavo F. Padovan if (test_bit(CONF_STATE2_DEVICE, &chan->conf_state)) 20740a708f8fSGustavo F. Padovan break; 20750a708f8fSGustavo F. Padovan 2076f89cef09SAndrei Emeltchenko if (__l2cap_efs_supported(chan)) 2077f89cef09SAndrei Emeltchenko set_bit(FLAG_EFS_ENABLE, &chan->flags); 2078f89cef09SAndrei Emeltchenko 20790a708f8fSGustavo F. Padovan /* fall through */ 20800a708f8fSGustavo F. Padovan default: 20818c1d787bSGustavo F. Padovan chan->mode = l2cap_select_mode(rfc.mode, chan->conn->feat_mask); 20820a708f8fSGustavo F. Padovan break; 20830a708f8fSGustavo F. Padovan } 20840a708f8fSGustavo F. Padovan 20850a708f8fSGustavo F. Padovan done: 20860c1bc5c6SGustavo F. Padovan if (chan->imtu != L2CAP_DEFAULT_MTU) 20870c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->imtu); 20880a708f8fSGustavo F. Padovan 20890c1bc5c6SGustavo F. Padovan switch (chan->mode) { 20900a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 20918c1d787bSGustavo F. Padovan if (!(chan->conn->feat_mask & L2CAP_FEAT_ERTM) && 20928c1d787bSGustavo F. Padovan !(chan->conn->feat_mask & L2CAP_FEAT_STREAMING)) 20930a708f8fSGustavo F. Padovan break; 20940a708f8fSGustavo F. Padovan 20950a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_BASIC; 20960a708f8fSGustavo F. Padovan rfc.txwin_size = 0; 20970a708f8fSGustavo F. Padovan rfc.max_transmit = 0; 20980a708f8fSGustavo F. Padovan rfc.retrans_timeout = 0; 20990a708f8fSGustavo F. Padovan rfc.monitor_timeout = 0; 21000a708f8fSGustavo F. Padovan rfc.max_pdu_size = 0; 21010a708f8fSGustavo F. Padovan 21020a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 21030a708f8fSGustavo F. Padovan (unsigned long) &rfc); 21040a708f8fSGustavo F. Padovan break; 21050a708f8fSGustavo F. Padovan 21060a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 21070a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_ERTM; 210847d1ec61SGustavo F. Padovan rfc.max_transmit = chan->max_tx; 21090a708f8fSGustavo F. Padovan rfc.retrans_timeout = 0; 21100a708f8fSGustavo F. Padovan rfc.monitor_timeout = 0; 2111c8f79162SAndrei Emeltchenko 2112c8f79162SAndrei Emeltchenko size = min_t(u16, L2CAP_DEFAULT_MAX_PDU_SIZE, chan->conn->mtu - 2113c8f79162SAndrei Emeltchenko L2CAP_EXT_HDR_SIZE - 2114c8f79162SAndrei Emeltchenko L2CAP_SDULEN_SIZE - 2115c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 2116c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 21170a708f8fSGustavo F. Padovan 21186327eb98SAndrei Emeltchenko l2cap_txwin_setup(chan); 21196327eb98SAndrei Emeltchenko 21206327eb98SAndrei Emeltchenko rfc.txwin_size = min_t(u16, chan->tx_win, 21216327eb98SAndrei Emeltchenko L2CAP_DEFAULT_TX_WINDOW); 21220a708f8fSGustavo F. Padovan 21230a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 21240a708f8fSGustavo F. Padovan (unsigned long) &rfc); 21250a708f8fSGustavo F. Padovan 2126f89cef09SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) 2127f89cef09SAndrei Emeltchenko l2cap_add_opt_efs(&ptr, chan); 2128f89cef09SAndrei Emeltchenko 21298c1d787bSGustavo F. Padovan if (!(chan->conn->feat_mask & L2CAP_FEAT_FCS)) 21300a708f8fSGustavo F. Padovan break; 21310a708f8fSGustavo F. Padovan 213247d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_NONE || 2133c1360a1cSGustavo F. Padovan test_bit(CONF_NO_FCS_RECV, &chan->conf_state)) { 213447d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 213547d1ec61SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_FCS, 1, chan->fcs); 21360a708f8fSGustavo F. Padovan } 21376327eb98SAndrei Emeltchenko 21386327eb98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 21396327eb98SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EWS, 2, 21406327eb98SAndrei Emeltchenko chan->tx_win); 21410a708f8fSGustavo F. Padovan break; 21420a708f8fSGustavo F. Padovan 21430a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 21440a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_STREAMING; 21450a708f8fSGustavo F. Padovan rfc.txwin_size = 0; 21460a708f8fSGustavo F. Padovan rfc.max_transmit = 0; 21470a708f8fSGustavo F. Padovan rfc.retrans_timeout = 0; 21480a708f8fSGustavo F. Padovan rfc.monitor_timeout = 0; 2149c8f79162SAndrei Emeltchenko 2150c8f79162SAndrei Emeltchenko size = min_t(u16, L2CAP_DEFAULT_MAX_PDU_SIZE, chan->conn->mtu - 2151c8f79162SAndrei Emeltchenko L2CAP_EXT_HDR_SIZE - 2152c8f79162SAndrei Emeltchenko L2CAP_SDULEN_SIZE - 2153c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 2154c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 21550a708f8fSGustavo F. Padovan 21560a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 21570a708f8fSGustavo F. Padovan (unsigned long) &rfc); 21580a708f8fSGustavo F. Padovan 2159f89cef09SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) 2160f89cef09SAndrei Emeltchenko l2cap_add_opt_efs(&ptr, chan); 2161f89cef09SAndrei Emeltchenko 21628c1d787bSGustavo F. Padovan if (!(chan->conn->feat_mask & L2CAP_FEAT_FCS)) 21630a708f8fSGustavo F. Padovan break; 21640a708f8fSGustavo F. Padovan 216547d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_NONE || 2166c1360a1cSGustavo F. Padovan test_bit(CONF_NO_FCS_RECV, &chan->conf_state)) { 216747d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 216847d1ec61SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_FCS, 1, chan->fcs); 21690a708f8fSGustavo F. Padovan } 21700a708f8fSGustavo F. Padovan break; 21710a708f8fSGustavo F. Padovan } 21720a708f8fSGustavo F. Padovan 2173fe4128e0SGustavo F. Padovan req->dcid = cpu_to_le16(chan->dcid); 21740a708f8fSGustavo F. Padovan req->flags = cpu_to_le16(0); 21750a708f8fSGustavo F. Padovan 21760a708f8fSGustavo F. Padovan return ptr - data; 21770a708f8fSGustavo F. Padovan } 21780a708f8fSGustavo F. Padovan 217973ffa904SGustavo F. Padovan static int l2cap_parse_conf_req(struct l2cap_chan *chan, void *data) 21800a708f8fSGustavo F. Padovan { 21810a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = data; 21820a708f8fSGustavo F. Padovan void *ptr = rsp->data; 218373ffa904SGustavo F. Padovan void *req = chan->conf_req; 218473ffa904SGustavo F. Padovan int len = chan->conf_len; 21850a708f8fSGustavo F. Padovan int type, hint, olen; 21860a708f8fSGustavo F. Padovan unsigned long val; 21870a708f8fSGustavo F. Padovan struct l2cap_conf_rfc rfc = { .mode = L2CAP_MODE_BASIC }; 218842dceae2SAndrei Emeltchenko struct l2cap_conf_efs efs; 218942dceae2SAndrei Emeltchenko u8 remote_efs = 0; 21900a708f8fSGustavo F. Padovan u16 mtu = L2CAP_DEFAULT_MTU; 21910a708f8fSGustavo F. Padovan u16 result = L2CAP_CONF_SUCCESS; 2192c8f79162SAndrei Emeltchenko u16 size; 21930a708f8fSGustavo F. Padovan 219473ffa904SGustavo F. Padovan BT_DBG("chan %p", chan); 21950a708f8fSGustavo F. Padovan 21960a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 21970a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&req, &type, &olen, &val); 21980a708f8fSGustavo F. Padovan 21990a708f8fSGustavo F. Padovan hint = type & L2CAP_CONF_HINT; 22000a708f8fSGustavo F. Padovan type &= L2CAP_CONF_MASK; 22010a708f8fSGustavo F. Padovan 22020a708f8fSGustavo F. Padovan switch (type) { 22030a708f8fSGustavo F. Padovan case L2CAP_CONF_MTU: 22040a708f8fSGustavo F. Padovan mtu = val; 22050a708f8fSGustavo F. Padovan break; 22060a708f8fSGustavo F. Padovan 22070a708f8fSGustavo F. Padovan case L2CAP_CONF_FLUSH_TO: 22080c1bc5c6SGustavo F. Padovan chan->flush_to = val; 22090a708f8fSGustavo F. Padovan break; 22100a708f8fSGustavo F. Padovan 22110a708f8fSGustavo F. Padovan case L2CAP_CONF_QOS: 22120a708f8fSGustavo F. Padovan break; 22130a708f8fSGustavo F. Padovan 22140a708f8fSGustavo F. Padovan case L2CAP_CONF_RFC: 22150a708f8fSGustavo F. Padovan if (olen == sizeof(rfc)) 22160a708f8fSGustavo F. Padovan memcpy(&rfc, (void *) val, olen); 22170a708f8fSGustavo F. Padovan break; 22180a708f8fSGustavo F. Padovan 22190a708f8fSGustavo F. Padovan case L2CAP_CONF_FCS: 22200a708f8fSGustavo F. Padovan if (val == L2CAP_FCS_NONE) 2221c1360a1cSGustavo F. Padovan set_bit(CONF_NO_FCS_RECV, &chan->conf_state); 222242dceae2SAndrei Emeltchenko break; 22230a708f8fSGustavo F. Padovan 222442dceae2SAndrei Emeltchenko case L2CAP_CONF_EFS: 222542dceae2SAndrei Emeltchenko remote_efs = 1; 222642dceae2SAndrei Emeltchenko if (olen == sizeof(efs)) 222742dceae2SAndrei Emeltchenko memcpy(&efs, (void *) val, olen); 22280a708f8fSGustavo F. Padovan break; 22290a708f8fSGustavo F. Padovan 22306327eb98SAndrei Emeltchenko case L2CAP_CONF_EWS: 22316327eb98SAndrei Emeltchenko if (!enable_hs) 22326327eb98SAndrei Emeltchenko return -ECONNREFUSED; 22336327eb98SAndrei Emeltchenko 22346327eb98SAndrei Emeltchenko set_bit(FLAG_EXT_CTRL, &chan->flags); 22356327eb98SAndrei Emeltchenko set_bit(CONF_EWS_RECV, &chan->conf_state); 2236836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_EXT_WINDOW; 22376327eb98SAndrei Emeltchenko chan->remote_tx_win = val; 22380a708f8fSGustavo F. Padovan break; 22390a708f8fSGustavo F. Padovan 22400a708f8fSGustavo F. Padovan default: 22410a708f8fSGustavo F. Padovan if (hint) 22420a708f8fSGustavo F. Padovan break; 22430a708f8fSGustavo F. Padovan 22440a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNKNOWN; 22450a708f8fSGustavo F. Padovan *((u8 *) ptr++) = type; 22460a708f8fSGustavo F. Padovan break; 22470a708f8fSGustavo F. Padovan } 22480a708f8fSGustavo F. Padovan } 22490a708f8fSGustavo F. Padovan 225073ffa904SGustavo F. Padovan if (chan->num_conf_rsp || chan->num_conf_req > 1) 22510a708f8fSGustavo F. Padovan goto done; 22520a708f8fSGustavo F. Padovan 22530c1bc5c6SGustavo F. Padovan switch (chan->mode) { 22540a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 22550a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 2256c1360a1cSGustavo F. Padovan if (!test_bit(CONF_STATE2_DEVICE, &chan->conf_state)) { 22570c1bc5c6SGustavo F. Padovan chan->mode = l2cap_select_mode(rfc.mode, 22588c1d787bSGustavo F. Padovan chan->conn->feat_mask); 22590a708f8fSGustavo F. Padovan break; 22600a708f8fSGustavo F. Padovan } 22610a708f8fSGustavo F. Padovan 226242dceae2SAndrei Emeltchenko if (remote_efs) { 226342dceae2SAndrei Emeltchenko if (__l2cap_efs_supported(chan)) 226442dceae2SAndrei Emeltchenko set_bit(FLAG_EFS_ENABLE, &chan->flags); 226542dceae2SAndrei Emeltchenko else 226642dceae2SAndrei Emeltchenko return -ECONNREFUSED; 226742dceae2SAndrei Emeltchenko } 226842dceae2SAndrei Emeltchenko 22690c1bc5c6SGustavo F. Padovan if (chan->mode != rfc.mode) 22700a708f8fSGustavo F. Padovan return -ECONNREFUSED; 22710a708f8fSGustavo F. Padovan 22720a708f8fSGustavo F. Padovan break; 22730a708f8fSGustavo F. Padovan } 22740a708f8fSGustavo F. Padovan 22750a708f8fSGustavo F. Padovan done: 22760c1bc5c6SGustavo F. Padovan if (chan->mode != rfc.mode) { 22770a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 22780c1bc5c6SGustavo F. Padovan rfc.mode = chan->mode; 22790a708f8fSGustavo F. Padovan 228073ffa904SGustavo F. Padovan if (chan->num_conf_rsp == 1) 22810a708f8fSGustavo F. Padovan return -ECONNREFUSED; 22820a708f8fSGustavo F. Padovan 22830a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 22840a708f8fSGustavo F. Padovan sizeof(rfc), (unsigned long) &rfc); 22850a708f8fSGustavo F. Padovan } 22860a708f8fSGustavo F. Padovan 22870a708f8fSGustavo F. Padovan if (result == L2CAP_CONF_SUCCESS) { 22880a708f8fSGustavo F. Padovan /* Configure output options and let the other side know 22890a708f8fSGustavo F. Padovan * which ones we don't like. */ 22900a708f8fSGustavo F. Padovan 22910a708f8fSGustavo F. Padovan if (mtu < L2CAP_DEFAULT_MIN_MTU) 22920a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 22930a708f8fSGustavo F. Padovan else { 22940c1bc5c6SGustavo F. Padovan chan->omtu = mtu; 2295c1360a1cSGustavo F. Padovan set_bit(CONF_MTU_DONE, &chan->conf_state); 22960a708f8fSGustavo F. Padovan } 22970c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->omtu); 22980a708f8fSGustavo F. Padovan 229942dceae2SAndrei Emeltchenko if (remote_efs) { 230042dceae2SAndrei Emeltchenko if (chan->local_stype != L2CAP_SERV_NOTRAFIC && 230142dceae2SAndrei Emeltchenko efs.stype != L2CAP_SERV_NOTRAFIC && 230242dceae2SAndrei Emeltchenko efs.stype != chan->local_stype) { 230342dceae2SAndrei Emeltchenko 230442dceae2SAndrei Emeltchenko result = L2CAP_CONF_UNACCEPT; 230542dceae2SAndrei Emeltchenko 230642dceae2SAndrei Emeltchenko if (chan->num_conf_req >= 1) 230742dceae2SAndrei Emeltchenko return -ECONNREFUSED; 230842dceae2SAndrei Emeltchenko 230942dceae2SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, 231042dceae2SAndrei Emeltchenko sizeof(efs), 231142dceae2SAndrei Emeltchenko (unsigned long) &efs); 23120e8b207eSAndrei Emeltchenko } else { 23133e6b3b95SGustavo F. Padovan /* Send PENDING Conf Rsp */ 23140e8b207eSAndrei Emeltchenko result = L2CAP_CONF_PENDING; 23150e8b207eSAndrei Emeltchenko set_bit(CONF_LOC_CONF_PEND, &chan->conf_state); 231642dceae2SAndrei Emeltchenko } 231742dceae2SAndrei Emeltchenko } 231842dceae2SAndrei Emeltchenko 23190a708f8fSGustavo F. Padovan switch (rfc.mode) { 23200a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 232147d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 2322c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 23230a708f8fSGustavo F. Padovan break; 23240a708f8fSGustavo F. Padovan 23250a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 23266327eb98SAndrei Emeltchenko if (!test_bit(CONF_EWS_RECV, &chan->conf_state)) 23272c03a7a4SGustavo F. Padovan chan->remote_tx_win = rfc.txwin_size; 23286327eb98SAndrei Emeltchenko else 23296327eb98SAndrei Emeltchenko rfc.txwin_size = L2CAP_DEFAULT_TX_WINDOW; 23306327eb98SAndrei Emeltchenko 23312c03a7a4SGustavo F. Padovan chan->remote_max_tx = rfc.max_transmit; 23320a708f8fSGustavo F. Padovan 2333c8f79162SAndrei Emeltchenko size = min_t(u16, le16_to_cpu(rfc.max_pdu_size), 2334c8f79162SAndrei Emeltchenko chan->conn->mtu - 2335c8f79162SAndrei Emeltchenko L2CAP_EXT_HDR_SIZE - 2336c8f79162SAndrei Emeltchenko L2CAP_SDULEN_SIZE - 2337c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 2338c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 2339c8f79162SAndrei Emeltchenko chan->remote_mps = size; 23400a708f8fSGustavo F. Padovan 23410a708f8fSGustavo F. Padovan rfc.retrans_timeout = 23420a708f8fSGustavo F. Padovan le16_to_cpu(L2CAP_DEFAULT_RETRANS_TO); 23430a708f8fSGustavo F. Padovan rfc.monitor_timeout = 23440a708f8fSGustavo F. Padovan le16_to_cpu(L2CAP_DEFAULT_MONITOR_TO); 23450a708f8fSGustavo F. Padovan 2346c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 23470a708f8fSGustavo F. Padovan 23480a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 23490a708f8fSGustavo F. Padovan sizeof(rfc), (unsigned long) &rfc); 23500a708f8fSGustavo F. Padovan 235142dceae2SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) { 235242dceae2SAndrei Emeltchenko chan->remote_id = efs.id; 235342dceae2SAndrei Emeltchenko chan->remote_stype = efs.stype; 235442dceae2SAndrei Emeltchenko chan->remote_msdu = le16_to_cpu(efs.msdu); 235542dceae2SAndrei Emeltchenko chan->remote_flush_to = 235642dceae2SAndrei Emeltchenko le32_to_cpu(efs.flush_to); 235742dceae2SAndrei Emeltchenko chan->remote_acc_lat = 235842dceae2SAndrei Emeltchenko le32_to_cpu(efs.acc_lat); 235942dceae2SAndrei Emeltchenko chan->remote_sdu_itime = 236042dceae2SAndrei Emeltchenko le32_to_cpu(efs.sdu_itime); 236142dceae2SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, 236242dceae2SAndrei Emeltchenko sizeof(efs), (unsigned long) &efs); 236342dceae2SAndrei Emeltchenko } 23640a708f8fSGustavo F. Padovan break; 23650a708f8fSGustavo F. Padovan 23660a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 2367c8f79162SAndrei Emeltchenko size = min_t(u16, le16_to_cpu(rfc.max_pdu_size), 2368c8f79162SAndrei Emeltchenko chan->conn->mtu - 2369c8f79162SAndrei Emeltchenko L2CAP_EXT_HDR_SIZE - 2370c8f79162SAndrei Emeltchenko L2CAP_SDULEN_SIZE - 2371c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 2372c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 2373c8f79162SAndrei Emeltchenko chan->remote_mps = size; 23740a708f8fSGustavo F. Padovan 2375c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 23760a708f8fSGustavo F. Padovan 23770a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 23780a708f8fSGustavo F. Padovan sizeof(rfc), (unsigned long) &rfc); 23790a708f8fSGustavo F. Padovan 23800a708f8fSGustavo F. Padovan break; 23810a708f8fSGustavo F. Padovan 23820a708f8fSGustavo F. Padovan default: 23830a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 23840a708f8fSGustavo F. Padovan 23850a708f8fSGustavo F. Padovan memset(&rfc, 0, sizeof(rfc)); 23860c1bc5c6SGustavo F. Padovan rfc.mode = chan->mode; 23870a708f8fSGustavo F. Padovan } 23880a708f8fSGustavo F. Padovan 23890a708f8fSGustavo F. Padovan if (result == L2CAP_CONF_SUCCESS) 2390c1360a1cSGustavo F. Padovan set_bit(CONF_OUTPUT_DONE, &chan->conf_state); 23910a708f8fSGustavo F. Padovan } 2392fe4128e0SGustavo F. Padovan rsp->scid = cpu_to_le16(chan->dcid); 23930a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(result); 23940a708f8fSGustavo F. Padovan rsp->flags = cpu_to_le16(0x0000); 23950a708f8fSGustavo F. Padovan 23960a708f8fSGustavo F. Padovan return ptr - data; 23970a708f8fSGustavo F. Padovan } 23980a708f8fSGustavo F. Padovan 2399b4450035SGustavo F. Padovan static int l2cap_parse_conf_rsp(struct l2cap_chan *chan, void *rsp, int len, void *data, u16 *result) 24000a708f8fSGustavo F. Padovan { 24010a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = data; 24020a708f8fSGustavo F. Padovan void *ptr = req->data; 24030a708f8fSGustavo F. Padovan int type, olen; 24040a708f8fSGustavo F. Padovan unsigned long val; 240536e999a8SMat Martineau struct l2cap_conf_rfc rfc = { .mode = L2CAP_MODE_BASIC }; 240666af7aafSAndrei Emeltchenko struct l2cap_conf_efs efs; 24070a708f8fSGustavo F. Padovan 2408fe4128e0SGustavo F. Padovan BT_DBG("chan %p, rsp %p, len %d, req %p", chan, rsp, len, data); 24090a708f8fSGustavo F. Padovan 24100a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 24110a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&rsp, &type, &olen, &val); 24120a708f8fSGustavo F. Padovan 24130a708f8fSGustavo F. Padovan switch (type) { 24140a708f8fSGustavo F. Padovan case L2CAP_CONF_MTU: 24150a708f8fSGustavo F. Padovan if (val < L2CAP_DEFAULT_MIN_MTU) { 24160a708f8fSGustavo F. Padovan *result = L2CAP_CONF_UNACCEPT; 24170c1bc5c6SGustavo F. Padovan chan->imtu = L2CAP_DEFAULT_MIN_MTU; 24180a708f8fSGustavo F. Padovan } else 24190c1bc5c6SGustavo F. Padovan chan->imtu = val; 24200c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->imtu); 24210a708f8fSGustavo F. Padovan break; 24220a708f8fSGustavo F. Padovan 24230a708f8fSGustavo F. Padovan case L2CAP_CONF_FLUSH_TO: 24240c1bc5c6SGustavo F. Padovan chan->flush_to = val; 24250a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_FLUSH_TO, 24260c1bc5c6SGustavo F. Padovan 2, chan->flush_to); 24270a708f8fSGustavo F. Padovan break; 24280a708f8fSGustavo F. Padovan 24290a708f8fSGustavo F. Padovan case L2CAP_CONF_RFC: 24300a708f8fSGustavo F. Padovan if (olen == sizeof(rfc)) 24310a708f8fSGustavo F. Padovan memcpy(&rfc, (void *)val, olen); 24320a708f8fSGustavo F. Padovan 2433c1360a1cSGustavo F. Padovan if (test_bit(CONF_STATE2_DEVICE, &chan->conf_state) && 24340c1bc5c6SGustavo F. Padovan rfc.mode != chan->mode) 24350a708f8fSGustavo F. Padovan return -ECONNREFUSED; 24360a708f8fSGustavo F. Padovan 243747d1ec61SGustavo F. Padovan chan->fcs = 0; 24380a708f8fSGustavo F. Padovan 24390a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 24400a708f8fSGustavo F. Padovan sizeof(rfc), (unsigned long) &rfc); 24410a708f8fSGustavo F. Padovan break; 24426327eb98SAndrei Emeltchenko 24436327eb98SAndrei Emeltchenko case L2CAP_CONF_EWS: 24446327eb98SAndrei Emeltchenko chan->tx_win = min_t(u16, val, 24456327eb98SAndrei Emeltchenko L2CAP_DEFAULT_EXT_WINDOW); 24463e6b3b95SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_EWS, 2, 24473e6b3b95SGustavo F. Padovan chan->tx_win); 24486327eb98SAndrei Emeltchenko break; 244966af7aafSAndrei Emeltchenko 245066af7aafSAndrei Emeltchenko case L2CAP_CONF_EFS: 245166af7aafSAndrei Emeltchenko if (olen == sizeof(efs)) 245266af7aafSAndrei Emeltchenko memcpy(&efs, (void *)val, olen); 245366af7aafSAndrei Emeltchenko 245466af7aafSAndrei Emeltchenko if (chan->local_stype != L2CAP_SERV_NOTRAFIC && 245566af7aafSAndrei Emeltchenko efs.stype != L2CAP_SERV_NOTRAFIC && 245666af7aafSAndrei Emeltchenko efs.stype != chan->local_stype) 245766af7aafSAndrei Emeltchenko return -ECONNREFUSED; 245866af7aafSAndrei Emeltchenko 245966af7aafSAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, 246066af7aafSAndrei Emeltchenko sizeof(efs), (unsigned long) &efs); 246166af7aafSAndrei Emeltchenko break; 24620a708f8fSGustavo F. Padovan } 24630a708f8fSGustavo F. Padovan } 24640a708f8fSGustavo F. Padovan 24650c1bc5c6SGustavo F. Padovan if (chan->mode == L2CAP_MODE_BASIC && chan->mode != rfc.mode) 24660a708f8fSGustavo F. Padovan return -ECONNREFUSED; 24670a708f8fSGustavo F. Padovan 24680c1bc5c6SGustavo F. Padovan chan->mode = rfc.mode; 24690a708f8fSGustavo F. Padovan 24700e8b207eSAndrei Emeltchenko if (*result == L2CAP_CONF_SUCCESS || *result == L2CAP_CONF_PENDING) { 24710a708f8fSGustavo F. Padovan switch (rfc.mode) { 24720a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 247347d1ec61SGustavo F. Padovan chan->retrans_timeout = le16_to_cpu(rfc.retrans_timeout); 247447d1ec61SGustavo F. Padovan chan->monitor_timeout = le16_to_cpu(rfc.monitor_timeout); 247547d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 247666af7aafSAndrei Emeltchenko 247766af7aafSAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) { 247866af7aafSAndrei Emeltchenko chan->local_msdu = le16_to_cpu(efs.msdu); 247966af7aafSAndrei Emeltchenko chan->local_sdu_itime = 248066af7aafSAndrei Emeltchenko le32_to_cpu(efs.sdu_itime); 248166af7aafSAndrei Emeltchenko chan->local_acc_lat = le32_to_cpu(efs.acc_lat); 248266af7aafSAndrei Emeltchenko chan->local_flush_to = 248366af7aafSAndrei Emeltchenko le32_to_cpu(efs.flush_to); 248466af7aafSAndrei Emeltchenko } 24850a708f8fSGustavo F. Padovan break; 248666af7aafSAndrei Emeltchenko 24870a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 248847d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 24890a708f8fSGustavo F. Padovan } 24900a708f8fSGustavo F. Padovan } 24910a708f8fSGustavo F. Padovan 2492fe4128e0SGustavo F. Padovan req->dcid = cpu_to_le16(chan->dcid); 24930a708f8fSGustavo F. Padovan req->flags = cpu_to_le16(0x0000); 24940a708f8fSGustavo F. Padovan 24950a708f8fSGustavo F. Padovan return ptr - data; 24960a708f8fSGustavo F. Padovan } 24970a708f8fSGustavo F. Padovan 2498fe4128e0SGustavo F. Padovan static int l2cap_build_conf_rsp(struct l2cap_chan *chan, void *data, u16 result, u16 flags) 24990a708f8fSGustavo F. Padovan { 25000a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = data; 25010a708f8fSGustavo F. Padovan void *ptr = rsp->data; 25020a708f8fSGustavo F. Padovan 2503fe4128e0SGustavo F. Padovan BT_DBG("chan %p", chan); 25040a708f8fSGustavo F. Padovan 2505fe4128e0SGustavo F. Padovan rsp->scid = cpu_to_le16(chan->dcid); 25060a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(result); 25070a708f8fSGustavo F. Padovan rsp->flags = cpu_to_le16(flags); 25080a708f8fSGustavo F. Padovan 25090a708f8fSGustavo F. Padovan return ptr - data; 25100a708f8fSGustavo F. Padovan } 25110a708f8fSGustavo F. Padovan 25128c1d787bSGustavo F. Padovan void __l2cap_connect_rsp_defer(struct l2cap_chan *chan) 2513710f9b0aSGustavo F. Padovan { 2514710f9b0aSGustavo F. Padovan struct l2cap_conn_rsp rsp; 25158c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 2516710f9b0aSGustavo F. Padovan u8 buf[128]; 2517710f9b0aSGustavo F. Padovan 2518fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 2519fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 2520710f9b0aSGustavo F. Padovan rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 2521710f9b0aSGustavo F. Padovan rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 2522710f9b0aSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, 2523710f9b0aSGustavo F. Padovan L2CAP_CONN_RSP, sizeof(rsp), &rsp); 2524710f9b0aSGustavo F. Padovan 2525c1360a1cSGustavo F. Padovan if (test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) 2526710f9b0aSGustavo F. Padovan return; 2527710f9b0aSGustavo F. Padovan 2528710f9b0aSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 2529710f9b0aSGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 2530710f9b0aSGustavo F. Padovan chan->num_conf_req++; 2531710f9b0aSGustavo F. Padovan } 2532710f9b0aSGustavo F. Padovan 253347d1ec61SGustavo F. Padovan static void l2cap_conf_rfc_get(struct l2cap_chan *chan, void *rsp, int len) 25340a708f8fSGustavo F. Padovan { 25350a708f8fSGustavo F. Padovan int type, olen; 25360a708f8fSGustavo F. Padovan unsigned long val; 25370a708f8fSGustavo F. Padovan struct l2cap_conf_rfc rfc; 25380a708f8fSGustavo F. Padovan 253947d1ec61SGustavo F. Padovan BT_DBG("chan %p, rsp %p, len %d", chan, rsp, len); 25400a708f8fSGustavo F. Padovan 25410c1bc5c6SGustavo F. Padovan if ((chan->mode != L2CAP_MODE_ERTM) && (chan->mode != L2CAP_MODE_STREAMING)) 25420a708f8fSGustavo F. Padovan return; 25430a708f8fSGustavo F. Padovan 25440a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 25450a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&rsp, &type, &olen, &val); 25460a708f8fSGustavo F. Padovan 25470a708f8fSGustavo F. Padovan switch (type) { 25480a708f8fSGustavo F. Padovan case L2CAP_CONF_RFC: 25490a708f8fSGustavo F. Padovan if (olen == sizeof(rfc)) 25500a708f8fSGustavo F. Padovan memcpy(&rfc, (void *)val, olen); 25510a708f8fSGustavo F. Padovan goto done; 25520a708f8fSGustavo F. Padovan } 25530a708f8fSGustavo F. Padovan } 25540a708f8fSGustavo F. Padovan 255536e999a8SMat Martineau /* Use sane default values in case a misbehaving remote device 255636e999a8SMat Martineau * did not send an RFC option. 255736e999a8SMat Martineau */ 255836e999a8SMat Martineau rfc.mode = chan->mode; 255936e999a8SMat Martineau rfc.retrans_timeout = cpu_to_le16(L2CAP_DEFAULT_RETRANS_TO); 256036e999a8SMat Martineau rfc.monitor_timeout = cpu_to_le16(L2CAP_DEFAULT_MONITOR_TO); 256136e999a8SMat Martineau rfc.max_pdu_size = cpu_to_le16(chan->imtu); 256236e999a8SMat Martineau 256336e999a8SMat Martineau BT_ERR("Expected RFC option was not found, using defaults"); 256436e999a8SMat Martineau 25650a708f8fSGustavo F. Padovan done: 25660a708f8fSGustavo F. Padovan switch (rfc.mode) { 25670a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 256847d1ec61SGustavo F. Padovan chan->retrans_timeout = le16_to_cpu(rfc.retrans_timeout); 256947d1ec61SGustavo F. Padovan chan->monitor_timeout = le16_to_cpu(rfc.monitor_timeout); 257047d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 25710a708f8fSGustavo F. Padovan break; 25720a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 257347d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 25740a708f8fSGustavo F. Padovan } 25750a708f8fSGustavo F. Padovan } 25760a708f8fSGustavo F. Padovan 25770a708f8fSGustavo F. Padovan static inline int l2cap_command_rej(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u8 *data) 25780a708f8fSGustavo F. Padovan { 2579e2fd318eSIlia Kolomisnky struct l2cap_cmd_rej_unk *rej = (struct l2cap_cmd_rej_unk *) data; 25800a708f8fSGustavo F. Padovan 2581e2fd318eSIlia Kolomisnky if (rej->reason != L2CAP_REJ_NOT_UNDERSTOOD) 25820a708f8fSGustavo F. Padovan return 0; 25830a708f8fSGustavo F. Padovan 25840a708f8fSGustavo F. Padovan if ((conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) && 25850a708f8fSGustavo F. Padovan cmd->ident == conn->info_ident) { 2586371fd835SUlisses Furquim __cancel_delayed_work(&conn->info_timer); 25870a708f8fSGustavo F. Padovan 25880a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 25890a708f8fSGustavo F. Padovan conn->info_ident = 0; 25900a708f8fSGustavo F. Padovan 25910a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 25920a708f8fSGustavo F. Padovan } 25930a708f8fSGustavo F. Padovan 25940a708f8fSGustavo F. Padovan return 0; 25950a708f8fSGustavo F. Padovan } 25960a708f8fSGustavo F. Padovan 25970a708f8fSGustavo F. Padovan static inline int l2cap_connect_req(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u8 *data) 25980a708f8fSGustavo F. Padovan { 25990a708f8fSGustavo F. Padovan struct l2cap_conn_req *req = (struct l2cap_conn_req *) data; 26000a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 260123691d75SGustavo F. Padovan struct l2cap_chan *chan = NULL, *pchan; 26020a708f8fSGustavo F. Padovan struct sock *parent, *sk = NULL; 26030a708f8fSGustavo F. Padovan int result, status = L2CAP_CS_NO_INFO; 26040a708f8fSGustavo F. Padovan 26050a708f8fSGustavo F. Padovan u16 dcid = 0, scid = __le16_to_cpu(req->scid); 26060a708f8fSGustavo F. Padovan __le16 psm = req->psm; 26070a708f8fSGustavo F. Padovan 26080a708f8fSGustavo F. Padovan BT_DBG("psm 0x%2.2x scid 0x%4.4x", psm, scid); 26090a708f8fSGustavo F. Padovan 26100a708f8fSGustavo F. Padovan /* Check if we have socket listening on psm */ 261123691d75SGustavo F. Padovan pchan = l2cap_global_chan_by_psm(BT_LISTEN, psm, conn->src); 261223691d75SGustavo F. Padovan if (!pchan) { 26130a708f8fSGustavo F. Padovan result = L2CAP_CR_BAD_PSM; 26140a708f8fSGustavo F. Padovan goto sendresp; 26150a708f8fSGustavo F. Padovan } 26160a708f8fSGustavo F. Padovan 261723691d75SGustavo F. Padovan parent = pchan->sk; 261823691d75SGustavo F. Padovan 2619aa2ac881SGustavo F. Padovan lock_sock(parent); 26200a708f8fSGustavo F. Padovan 26210a708f8fSGustavo F. Padovan /* Check if the ACL is secure enough (if not SDP) */ 26220a708f8fSGustavo F. Padovan if (psm != cpu_to_le16(0x0001) && 26230a708f8fSGustavo F. Padovan !hci_conn_check_link_mode(conn->hcon)) { 26249f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_AUTH_FAILURE; 26250a708f8fSGustavo F. Padovan result = L2CAP_CR_SEC_BLOCK; 26260a708f8fSGustavo F. Padovan goto response; 26270a708f8fSGustavo F. Padovan } 26280a708f8fSGustavo F. Padovan 26290a708f8fSGustavo F. Padovan result = L2CAP_CR_NO_MEM; 26300a708f8fSGustavo F. Padovan 26310a708f8fSGustavo F. Padovan /* Check for backlog size */ 26320a708f8fSGustavo F. Padovan if (sk_acceptq_is_full(parent)) { 26330a708f8fSGustavo F. Padovan BT_DBG("backlog full %d", parent->sk_ack_backlog); 26340a708f8fSGustavo F. Padovan goto response; 26350a708f8fSGustavo F. Padovan } 26360a708f8fSGustavo F. Padovan 263780808e43SGustavo F. Padovan chan = pchan->ops->new_connection(pchan->data); 263880808e43SGustavo F. Padovan if (!chan) 26390a708f8fSGustavo F. Padovan goto response; 26400a708f8fSGustavo F. Padovan 264180808e43SGustavo F. Padovan sk = chan->sk; 264280808e43SGustavo F. Padovan 26430a708f8fSGustavo F. Padovan /* Check if we already have channel with that dcid */ 2644baa7e1faSGustavo F. Padovan if (__l2cap_get_chan_by_dcid(conn, scid)) { 26450a708f8fSGustavo F. Padovan sock_set_flag(sk, SOCK_ZAPPED); 2646ba3bd0eeSGustavo F. Padovan chan->ops->close(chan->data); 26470a708f8fSGustavo F. Padovan goto response; 26480a708f8fSGustavo F. Padovan } 26490a708f8fSGustavo F. Padovan 26500a708f8fSGustavo F. Padovan hci_conn_hold(conn->hcon); 26510a708f8fSGustavo F. Padovan 26520a708f8fSGustavo F. Padovan bacpy(&bt_sk(sk)->src, conn->src); 26530a708f8fSGustavo F. Padovan bacpy(&bt_sk(sk)->dst, conn->dst); 2654fe4128e0SGustavo F. Padovan chan->psm = psm; 2655fe4128e0SGustavo F. Padovan chan->dcid = scid; 26560a708f8fSGustavo F. Padovan 2657d1010240SGustavo F. Padovan bt_accept_enqueue(parent, sk); 2658d1010240SGustavo F. Padovan 26593d57dc68SGustavo F. Padovan l2cap_chan_add(conn, chan); 266048454079SGustavo F. Padovan 2661fe4128e0SGustavo F. Padovan dcid = chan->scid; 26620a708f8fSGustavo F. Padovan 2663c9b66675SGustavo F. Padovan __set_chan_timer(chan, sk->sk_sndtimeo); 26640a708f8fSGustavo F. Padovan 2665fc7f8a7eSGustavo F. Padovan chan->ident = cmd->ident; 26660a708f8fSGustavo F. Padovan 26670a708f8fSGustavo F. Padovan if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) { 2668d45fc423SGustavo F. Padovan if (l2cap_chan_check_security(chan)) { 26690a708f8fSGustavo F. Padovan if (bt_sk(sk)->defer_setup) { 267089bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONNECT2); 26710a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 26720a708f8fSGustavo F. Padovan status = L2CAP_CS_AUTHOR_PEND; 26730a708f8fSGustavo F. Padovan parent->sk_data_ready(parent, 0); 26740a708f8fSGustavo F. Padovan } else { 267589bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONFIG); 26760a708f8fSGustavo F. Padovan result = L2CAP_CR_SUCCESS; 26770a708f8fSGustavo F. Padovan status = L2CAP_CS_NO_INFO; 26780a708f8fSGustavo F. Padovan } 26790a708f8fSGustavo F. Padovan } else { 268089bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONNECT2); 26810a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 26820a708f8fSGustavo F. Padovan status = L2CAP_CS_AUTHEN_PEND; 26830a708f8fSGustavo F. Padovan } 26840a708f8fSGustavo F. Padovan } else { 268589bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONNECT2); 26860a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 26870a708f8fSGustavo F. Padovan status = L2CAP_CS_NO_INFO; 26880a708f8fSGustavo F. Padovan } 26890a708f8fSGustavo F. Padovan 26900a708f8fSGustavo F. Padovan response: 2691aa2ac881SGustavo F. Padovan release_sock(parent); 26920a708f8fSGustavo F. Padovan 26930a708f8fSGustavo F. Padovan sendresp: 26940a708f8fSGustavo F. Padovan rsp.scid = cpu_to_le16(scid); 26950a708f8fSGustavo F. Padovan rsp.dcid = cpu_to_le16(dcid); 26960a708f8fSGustavo F. Padovan rsp.result = cpu_to_le16(result); 26970a708f8fSGustavo F. Padovan rsp.status = cpu_to_le16(status); 26980a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONN_RSP, sizeof(rsp), &rsp); 26990a708f8fSGustavo F. Padovan 27000a708f8fSGustavo F. Padovan if (result == L2CAP_CR_PEND && status == L2CAP_CS_NO_INFO) { 27010a708f8fSGustavo F. Padovan struct l2cap_info_req info; 27020a708f8fSGustavo F. Padovan info.type = cpu_to_le16(L2CAP_IT_FEAT_MASK); 27030a708f8fSGustavo F. Padovan 27040a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_SENT; 27050a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 27060a708f8fSGustavo F. Padovan 2707030013d8SGustavo F. Padovan schedule_delayed_work(&conn->info_timer, 27080a708f8fSGustavo F. Padovan msecs_to_jiffies(L2CAP_INFO_TIMEOUT)); 27090a708f8fSGustavo F. Padovan 27100a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, conn->info_ident, 27110a708f8fSGustavo F. Padovan L2CAP_INFO_REQ, sizeof(info), &info); 27120a708f8fSGustavo F. Padovan } 27130a708f8fSGustavo F. Padovan 2714c1360a1cSGustavo F. Padovan if (chan && !test_bit(CONF_REQ_SENT, &chan->conf_state) && 27150a708f8fSGustavo F. Padovan result == L2CAP_CR_SUCCESS) { 27160a708f8fSGustavo F. Padovan u8 buf[128]; 2717c1360a1cSGustavo F. Padovan set_bit(CONF_REQ_SENT, &chan->conf_state); 27180a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 271973ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 272073ffa904SGustavo F. Padovan chan->num_conf_req++; 27210a708f8fSGustavo F. Padovan } 27220a708f8fSGustavo F. Padovan 27230a708f8fSGustavo F. Padovan return 0; 27240a708f8fSGustavo F. Padovan } 27250a708f8fSGustavo F. Padovan 27260a708f8fSGustavo F. Padovan static inline int l2cap_connect_rsp(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u8 *data) 27270a708f8fSGustavo F. Padovan { 27280a708f8fSGustavo F. Padovan struct l2cap_conn_rsp *rsp = (struct l2cap_conn_rsp *) data; 27290a708f8fSGustavo F. Padovan u16 scid, dcid, result, status; 273048454079SGustavo F. Padovan struct l2cap_chan *chan; 27310a708f8fSGustavo F. Padovan struct sock *sk; 27320a708f8fSGustavo F. Padovan u8 req[128]; 27330a708f8fSGustavo F. Padovan 27340a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 27350a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(rsp->dcid); 27360a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 27370a708f8fSGustavo F. Padovan status = __le16_to_cpu(rsp->status); 27380a708f8fSGustavo F. Padovan 27390a708f8fSGustavo F. Padovan BT_DBG("dcid 0x%4.4x scid 0x%4.4x result 0x%2.2x status 0x%2.2x", dcid, scid, result, status); 27400a708f8fSGustavo F. Padovan 27410a708f8fSGustavo F. Padovan if (scid) { 2742baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, scid); 274348454079SGustavo F. Padovan if (!chan) 27440a708f8fSGustavo F. Padovan return -EFAULT; 27450a708f8fSGustavo F. Padovan } else { 2746baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_ident(conn, cmd->ident); 274748454079SGustavo F. Padovan if (!chan) 27480a708f8fSGustavo F. Padovan return -EFAULT; 27490a708f8fSGustavo F. Padovan } 27500a708f8fSGustavo F. Padovan 275148454079SGustavo F. Padovan sk = chan->sk; 275248454079SGustavo F. Padovan 27530a708f8fSGustavo F. Padovan switch (result) { 27540a708f8fSGustavo F. Padovan case L2CAP_CR_SUCCESS: 275589bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONFIG); 2756fc7f8a7eSGustavo F. Padovan chan->ident = 0; 2757fe4128e0SGustavo F. Padovan chan->dcid = dcid; 2758c1360a1cSGustavo F. Padovan clear_bit(CONF_CONNECT_PEND, &chan->conf_state); 27590a708f8fSGustavo F. Padovan 2760c1360a1cSGustavo F. Padovan if (test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) 27610a708f8fSGustavo F. Padovan break; 27620a708f8fSGustavo F. Padovan 27630a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 276473ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, req), req); 276573ffa904SGustavo F. Padovan chan->num_conf_req++; 27660a708f8fSGustavo F. Padovan break; 27670a708f8fSGustavo F. Padovan 27680a708f8fSGustavo F. Padovan case L2CAP_CR_PEND: 2769c1360a1cSGustavo F. Padovan set_bit(CONF_CONNECT_PEND, &chan->conf_state); 27700a708f8fSGustavo F. Padovan break; 27710a708f8fSGustavo F. Padovan 27720a708f8fSGustavo F. Padovan default: 277348454079SGustavo F. Padovan l2cap_chan_del(chan, ECONNREFUSED); 27740a708f8fSGustavo F. Padovan break; 27750a708f8fSGustavo F. Padovan } 27760a708f8fSGustavo F. Padovan 2777aa2ac881SGustavo F. Padovan release_sock(sk); 27780a708f8fSGustavo F. Padovan return 0; 27790a708f8fSGustavo F. Padovan } 27800a708f8fSGustavo F. Padovan 278147d1ec61SGustavo F. Padovan static inline void set_default_fcs(struct l2cap_chan *chan) 27820a708f8fSGustavo F. Padovan { 27830a708f8fSGustavo F. Padovan /* FCS is enabled only in ERTM or streaming mode, if one or both 27840a708f8fSGustavo F. Padovan * sides request it. 27850a708f8fSGustavo F. Padovan */ 27860c1bc5c6SGustavo F. Padovan if (chan->mode != L2CAP_MODE_ERTM && chan->mode != L2CAP_MODE_STREAMING) 278747d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 2788c1360a1cSGustavo F. Padovan else if (!test_bit(CONF_NO_FCS_RECV, &chan->conf_state)) 278947d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_CRC16; 27900a708f8fSGustavo F. Padovan } 27910a708f8fSGustavo F. Padovan 27920a708f8fSGustavo F. Padovan static inline int l2cap_config_req(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u16 cmd_len, u8 *data) 27930a708f8fSGustavo F. Padovan { 27940a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = (struct l2cap_conf_req *) data; 27950a708f8fSGustavo F. Padovan u16 dcid, flags; 27960a708f8fSGustavo F. Padovan u8 rsp[64]; 279748454079SGustavo F. Padovan struct l2cap_chan *chan; 27980a708f8fSGustavo F. Padovan struct sock *sk; 27990a708f8fSGustavo F. Padovan int len; 28000a708f8fSGustavo F. Padovan 28010a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(req->dcid); 28020a708f8fSGustavo F. Padovan flags = __le16_to_cpu(req->flags); 28030a708f8fSGustavo F. Padovan 28040a708f8fSGustavo F. Padovan BT_DBG("dcid 0x%4.4x flags 0x%2.2x", dcid, flags); 28050a708f8fSGustavo F. Padovan 2806baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, dcid); 280748454079SGustavo F. Padovan if (!chan) 28080a708f8fSGustavo F. Padovan return -ENOENT; 28090a708f8fSGustavo F. Padovan 281048454079SGustavo F. Padovan sk = chan->sk; 281148454079SGustavo F. Padovan 2812033b1142SDavid S. Miller if (chan->state != BT_CONFIG && chan->state != BT_CONNECT2) { 2813e2fd318eSIlia Kolomisnky struct l2cap_cmd_rej_cid rej; 28140a708f8fSGustavo F. Padovan 2815e2fd318eSIlia Kolomisnky rej.reason = cpu_to_le16(L2CAP_REJ_INVALID_CID); 2816e2fd318eSIlia Kolomisnky rej.scid = cpu_to_le16(chan->scid); 2817e2fd318eSIlia Kolomisnky rej.dcid = cpu_to_le16(chan->dcid); 2818e2fd318eSIlia Kolomisnky 28190a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_COMMAND_REJ, 28200a708f8fSGustavo F. Padovan sizeof(rej), &rej); 28210a708f8fSGustavo F. Padovan goto unlock; 28220a708f8fSGustavo F. Padovan } 28230a708f8fSGustavo F. Padovan 28240a708f8fSGustavo F. Padovan /* Reject if config buffer is too small. */ 28250a708f8fSGustavo F. Padovan len = cmd_len - sizeof(*req); 28267ac28817SDan Rosenberg if (len < 0 || chan->conf_len + len > sizeof(chan->conf_req)) { 28270a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 2828fe4128e0SGustavo F. Padovan l2cap_build_conf_rsp(chan, rsp, 28290a708f8fSGustavo F. Padovan L2CAP_CONF_REJECT, flags), rsp); 28300a708f8fSGustavo F. Padovan goto unlock; 28310a708f8fSGustavo F. Padovan } 28320a708f8fSGustavo F. Padovan 28330a708f8fSGustavo F. Padovan /* Store config. */ 283473ffa904SGustavo F. Padovan memcpy(chan->conf_req + chan->conf_len, req->data, len); 283573ffa904SGustavo F. Padovan chan->conf_len += len; 28360a708f8fSGustavo F. Padovan 28370a708f8fSGustavo F. Padovan if (flags & 0x0001) { 28380a708f8fSGustavo F. Padovan /* Incomplete config. Send empty response. */ 28390a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 2840fe4128e0SGustavo F. Padovan l2cap_build_conf_rsp(chan, rsp, 28410a708f8fSGustavo F. Padovan L2CAP_CONF_SUCCESS, 0x0001), rsp); 28420a708f8fSGustavo F. Padovan goto unlock; 28430a708f8fSGustavo F. Padovan } 28440a708f8fSGustavo F. Padovan 28450a708f8fSGustavo F. Padovan /* Complete config. */ 284673ffa904SGustavo F. Padovan len = l2cap_parse_conf_req(chan, rsp); 28470a708f8fSGustavo F. Padovan if (len < 0) { 2848e92c8e70SGustavo F. Padovan l2cap_send_disconn_req(conn, chan, ECONNRESET); 28490a708f8fSGustavo F. Padovan goto unlock; 28500a708f8fSGustavo F. Padovan } 28510a708f8fSGustavo F. Padovan 28520a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, len, rsp); 285373ffa904SGustavo F. Padovan chan->num_conf_rsp++; 28540a708f8fSGustavo F. Padovan 28550a708f8fSGustavo F. Padovan /* Reset config buffer. */ 285673ffa904SGustavo F. Padovan chan->conf_len = 0; 28570a708f8fSGustavo F. Padovan 2858c1360a1cSGustavo F. Padovan if (!test_bit(CONF_OUTPUT_DONE, &chan->conf_state)) 28590a708f8fSGustavo F. Padovan goto unlock; 28600a708f8fSGustavo F. Padovan 2861c1360a1cSGustavo F. Padovan if (test_bit(CONF_INPUT_DONE, &chan->conf_state)) { 286247d1ec61SGustavo F. Padovan set_default_fcs(chan); 28630a708f8fSGustavo F. Padovan 286489bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONNECTED); 28650a708f8fSGustavo F. Padovan 286642e5c802SGustavo F. Padovan chan->next_tx_seq = 0; 286742e5c802SGustavo F. Padovan chan->expected_tx_seq = 0; 286858d35f87SGustavo F. Padovan skb_queue_head_init(&chan->tx_q); 28690c1bc5c6SGustavo F. Padovan if (chan->mode == L2CAP_MODE_ERTM) 2870525cd185SGustavo F. Padovan l2cap_ertm_init(chan); 28710a708f8fSGustavo F. Padovan 28720a708f8fSGustavo F. Padovan l2cap_chan_ready(sk); 28730a708f8fSGustavo F. Padovan goto unlock; 28740a708f8fSGustavo F. Padovan } 28750a708f8fSGustavo F. Padovan 2876c1360a1cSGustavo F. Padovan if (!test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) { 28770a708f8fSGustavo F. Padovan u8 buf[64]; 28780a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 287973ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 288073ffa904SGustavo F. Padovan chan->num_conf_req++; 28810a708f8fSGustavo F. Padovan } 28820a708f8fSGustavo F. Padovan 28830e8b207eSAndrei Emeltchenko /* Got Conf Rsp PENDING from remote side and asume we sent 28840e8b207eSAndrei Emeltchenko Conf Rsp PENDING in the code above */ 28850e8b207eSAndrei Emeltchenko if (test_bit(CONF_REM_CONF_PEND, &chan->conf_state) && 28860e8b207eSAndrei Emeltchenko test_bit(CONF_LOC_CONF_PEND, &chan->conf_state)) { 28870e8b207eSAndrei Emeltchenko 28880e8b207eSAndrei Emeltchenko /* check compatibility */ 28890e8b207eSAndrei Emeltchenko 28900e8b207eSAndrei Emeltchenko clear_bit(CONF_LOC_CONF_PEND, &chan->conf_state); 28910e8b207eSAndrei Emeltchenko set_bit(CONF_OUTPUT_DONE, &chan->conf_state); 28920e8b207eSAndrei Emeltchenko 28930e8b207eSAndrei Emeltchenko l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 28940e8b207eSAndrei Emeltchenko l2cap_build_conf_rsp(chan, rsp, 28950e8b207eSAndrei Emeltchenko L2CAP_CONF_SUCCESS, 0x0000), rsp); 28960e8b207eSAndrei Emeltchenko } 28970e8b207eSAndrei Emeltchenko 28980a708f8fSGustavo F. Padovan unlock: 2899aa2ac881SGustavo F. Padovan release_sock(sk); 29000a708f8fSGustavo F. Padovan return 0; 29010a708f8fSGustavo F. Padovan } 29020a708f8fSGustavo F. Padovan 29030a708f8fSGustavo F. Padovan static inline int l2cap_config_rsp(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u8 *data) 29040a708f8fSGustavo F. Padovan { 29050a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = (struct l2cap_conf_rsp *)data; 29060a708f8fSGustavo F. Padovan u16 scid, flags, result; 290748454079SGustavo F. Padovan struct l2cap_chan *chan; 29080a708f8fSGustavo F. Padovan struct sock *sk; 29090a708f8fSGustavo F. Padovan int len = cmd->len - sizeof(*rsp); 29100a708f8fSGustavo F. Padovan 29110a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 29120a708f8fSGustavo F. Padovan flags = __le16_to_cpu(rsp->flags); 29130a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 29140a708f8fSGustavo F. Padovan 29150a708f8fSGustavo F. Padovan BT_DBG("scid 0x%4.4x flags 0x%2.2x result 0x%2.2x", 29160a708f8fSGustavo F. Padovan scid, flags, result); 29170a708f8fSGustavo F. Padovan 2918baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, scid); 291948454079SGustavo F. Padovan if (!chan) 29200a708f8fSGustavo F. Padovan return 0; 29210a708f8fSGustavo F. Padovan 292248454079SGustavo F. Padovan sk = chan->sk; 292348454079SGustavo F. Padovan 29240a708f8fSGustavo F. Padovan switch (result) { 29250a708f8fSGustavo F. Padovan case L2CAP_CONF_SUCCESS: 292647d1ec61SGustavo F. Padovan l2cap_conf_rfc_get(chan, rsp->data, len); 29270e8b207eSAndrei Emeltchenko clear_bit(CONF_REM_CONF_PEND, &chan->conf_state); 29280a708f8fSGustavo F. Padovan break; 29290a708f8fSGustavo F. Padovan 29300e8b207eSAndrei Emeltchenko case L2CAP_CONF_PENDING: 29310e8b207eSAndrei Emeltchenko set_bit(CONF_REM_CONF_PEND, &chan->conf_state); 29320e8b207eSAndrei Emeltchenko 29330e8b207eSAndrei Emeltchenko if (test_bit(CONF_LOC_CONF_PEND, &chan->conf_state)) { 29340e8b207eSAndrei Emeltchenko char buf[64]; 29350e8b207eSAndrei Emeltchenko 29360e8b207eSAndrei Emeltchenko len = l2cap_parse_conf_rsp(chan, rsp->data, len, 29370e8b207eSAndrei Emeltchenko buf, &result); 29380e8b207eSAndrei Emeltchenko if (len < 0) { 29390e8b207eSAndrei Emeltchenko l2cap_send_disconn_req(conn, chan, ECONNRESET); 29400e8b207eSAndrei Emeltchenko goto done; 29410e8b207eSAndrei Emeltchenko } 29420e8b207eSAndrei Emeltchenko 29430e8b207eSAndrei Emeltchenko /* check compatibility */ 29440e8b207eSAndrei Emeltchenko 29450e8b207eSAndrei Emeltchenko clear_bit(CONF_LOC_CONF_PEND, &chan->conf_state); 29460e8b207eSAndrei Emeltchenko set_bit(CONF_OUTPUT_DONE, &chan->conf_state); 29470e8b207eSAndrei Emeltchenko 29480e8b207eSAndrei Emeltchenko l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 29490e8b207eSAndrei Emeltchenko l2cap_build_conf_rsp(chan, buf, 29500e8b207eSAndrei Emeltchenko L2CAP_CONF_SUCCESS, 0x0000), buf); 29510e8b207eSAndrei Emeltchenko } 29520e8b207eSAndrei Emeltchenko goto done; 29530e8b207eSAndrei Emeltchenko 29540a708f8fSGustavo F. Padovan case L2CAP_CONF_UNACCEPT: 295573ffa904SGustavo F. Padovan if (chan->num_conf_rsp <= L2CAP_CONF_MAX_CONF_RSP) { 29560a708f8fSGustavo F. Padovan char req[64]; 29570a708f8fSGustavo F. Padovan 29580a708f8fSGustavo F. Padovan if (len > sizeof(req) - sizeof(struct l2cap_conf_req)) { 2959e92c8e70SGustavo F. Padovan l2cap_send_disconn_req(conn, chan, ECONNRESET); 29600a708f8fSGustavo F. Padovan goto done; 29610a708f8fSGustavo F. Padovan } 29620a708f8fSGustavo F. Padovan 29630a708f8fSGustavo F. Padovan /* throw out any old stored conf requests */ 29640a708f8fSGustavo F. Padovan result = L2CAP_CONF_SUCCESS; 2965b4450035SGustavo F. Padovan len = l2cap_parse_conf_rsp(chan, rsp->data, len, 2966b4450035SGustavo F. Padovan req, &result); 29670a708f8fSGustavo F. Padovan if (len < 0) { 2968e92c8e70SGustavo F. Padovan l2cap_send_disconn_req(conn, chan, ECONNRESET); 29690a708f8fSGustavo F. Padovan goto done; 29700a708f8fSGustavo F. Padovan } 29710a708f8fSGustavo F. Padovan 29720a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), 29730a708f8fSGustavo F. Padovan L2CAP_CONF_REQ, len, req); 297473ffa904SGustavo F. Padovan chan->num_conf_req++; 29750a708f8fSGustavo F. Padovan if (result != L2CAP_CONF_SUCCESS) 29760a708f8fSGustavo F. Padovan goto done; 29770a708f8fSGustavo F. Padovan break; 29780a708f8fSGustavo F. Padovan } 29790a708f8fSGustavo F. Padovan 29800a708f8fSGustavo F. Padovan default: 29810a708f8fSGustavo F. Padovan sk->sk_err = ECONNRESET; 2982b83ddfe2SAndrzej Kaczmarek __set_chan_timer(chan, 2983b83ddfe2SAndrzej Kaczmarek msecs_to_jiffies(L2CAP_DISC_REJ_TIMEOUT)); 2984e92c8e70SGustavo F. Padovan l2cap_send_disconn_req(conn, chan, ECONNRESET); 29850a708f8fSGustavo F. Padovan goto done; 29860a708f8fSGustavo F. Padovan } 29870a708f8fSGustavo F. Padovan 29880a708f8fSGustavo F. Padovan if (flags & 0x01) 29890a708f8fSGustavo F. Padovan goto done; 29900a708f8fSGustavo F. Padovan 2991c1360a1cSGustavo F. Padovan set_bit(CONF_INPUT_DONE, &chan->conf_state); 29920a708f8fSGustavo F. Padovan 2993c1360a1cSGustavo F. Padovan if (test_bit(CONF_OUTPUT_DONE, &chan->conf_state)) { 299447d1ec61SGustavo F. Padovan set_default_fcs(chan); 29950a708f8fSGustavo F. Padovan 299689bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONNECTED); 299742e5c802SGustavo F. Padovan chan->next_tx_seq = 0; 299842e5c802SGustavo F. Padovan chan->expected_tx_seq = 0; 299958d35f87SGustavo F. Padovan skb_queue_head_init(&chan->tx_q); 30000c1bc5c6SGustavo F. Padovan if (chan->mode == L2CAP_MODE_ERTM) 3001525cd185SGustavo F. Padovan l2cap_ertm_init(chan); 30020a708f8fSGustavo F. Padovan 30030a708f8fSGustavo F. Padovan l2cap_chan_ready(sk); 30040a708f8fSGustavo F. Padovan } 30050a708f8fSGustavo F. Padovan 30060a708f8fSGustavo F. Padovan done: 3007aa2ac881SGustavo F. Padovan release_sock(sk); 30080a708f8fSGustavo F. Padovan return 0; 30090a708f8fSGustavo F. Padovan } 30100a708f8fSGustavo F. Padovan 30110a708f8fSGustavo F. Padovan static inline int l2cap_disconnect_req(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u8 *data) 30120a708f8fSGustavo F. Padovan { 30130a708f8fSGustavo F. Padovan struct l2cap_disconn_req *req = (struct l2cap_disconn_req *) data; 30140a708f8fSGustavo F. Padovan struct l2cap_disconn_rsp rsp; 30150a708f8fSGustavo F. Padovan u16 dcid, scid; 301648454079SGustavo F. Padovan struct l2cap_chan *chan; 30170a708f8fSGustavo F. Padovan struct sock *sk; 30180a708f8fSGustavo F. Padovan 30190a708f8fSGustavo F. Padovan scid = __le16_to_cpu(req->scid); 30200a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(req->dcid); 30210a708f8fSGustavo F. Padovan 30220a708f8fSGustavo F. Padovan BT_DBG("scid 0x%4.4x dcid 0x%4.4x", scid, dcid); 30230a708f8fSGustavo F. Padovan 3024baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, dcid); 302548454079SGustavo F. Padovan if (!chan) 30260a708f8fSGustavo F. Padovan return 0; 30270a708f8fSGustavo F. Padovan 302848454079SGustavo F. Padovan sk = chan->sk; 302948454079SGustavo F. Padovan 3030fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 3031fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 30320a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_DISCONN_RSP, sizeof(rsp), &rsp); 30330a708f8fSGustavo F. Padovan 30340a708f8fSGustavo F. Padovan sk->sk_shutdown = SHUTDOWN_MASK; 30350a708f8fSGustavo F. Padovan 303648454079SGustavo F. Padovan l2cap_chan_del(chan, ECONNRESET); 3037aa2ac881SGustavo F. Padovan release_sock(sk); 30380a708f8fSGustavo F. Padovan 3039ba3bd0eeSGustavo F. Padovan chan->ops->close(chan->data); 30400a708f8fSGustavo F. Padovan return 0; 30410a708f8fSGustavo F. Padovan } 30420a708f8fSGustavo F. Padovan 30430a708f8fSGustavo F. Padovan static inline int l2cap_disconnect_rsp(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u8 *data) 30440a708f8fSGustavo F. Padovan { 30450a708f8fSGustavo F. Padovan struct l2cap_disconn_rsp *rsp = (struct l2cap_disconn_rsp *) data; 30460a708f8fSGustavo F. Padovan u16 dcid, scid; 304748454079SGustavo F. Padovan struct l2cap_chan *chan; 30480a708f8fSGustavo F. Padovan struct sock *sk; 30490a708f8fSGustavo F. Padovan 30500a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 30510a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(rsp->dcid); 30520a708f8fSGustavo F. Padovan 30530a708f8fSGustavo F. Padovan BT_DBG("dcid 0x%4.4x scid 0x%4.4x", dcid, scid); 30540a708f8fSGustavo F. Padovan 3055baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, scid); 305648454079SGustavo F. Padovan if (!chan) 30570a708f8fSGustavo F. Padovan return 0; 30580a708f8fSGustavo F. Padovan 305948454079SGustavo F. Padovan sk = chan->sk; 306048454079SGustavo F. Padovan 306148454079SGustavo F. Padovan l2cap_chan_del(chan, 0); 3062aa2ac881SGustavo F. Padovan release_sock(sk); 30630a708f8fSGustavo F. Padovan 3064ba3bd0eeSGustavo F. Padovan chan->ops->close(chan->data); 30650a708f8fSGustavo F. Padovan return 0; 30660a708f8fSGustavo F. Padovan } 30670a708f8fSGustavo F. Padovan 30680a708f8fSGustavo F. Padovan static inline int l2cap_information_req(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u8 *data) 30690a708f8fSGustavo F. Padovan { 30700a708f8fSGustavo F. Padovan struct l2cap_info_req *req = (struct l2cap_info_req *) data; 30710a708f8fSGustavo F. Padovan u16 type; 30720a708f8fSGustavo F. Padovan 30730a708f8fSGustavo F. Padovan type = __le16_to_cpu(req->type); 30740a708f8fSGustavo F. Padovan 30750a708f8fSGustavo F. Padovan BT_DBG("type 0x%4.4x", type); 30760a708f8fSGustavo F. Padovan 30770a708f8fSGustavo F. Padovan if (type == L2CAP_IT_FEAT_MASK) { 30780a708f8fSGustavo F. Padovan u8 buf[8]; 30790a708f8fSGustavo F. Padovan u32 feat_mask = l2cap_feat_mask; 30800a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) buf; 30810a708f8fSGustavo F. Padovan rsp->type = cpu_to_le16(L2CAP_IT_FEAT_MASK); 30820a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(L2CAP_IR_SUCCESS); 30830a708f8fSGustavo F. Padovan if (!disable_ertm) 30840a708f8fSGustavo F. Padovan feat_mask |= L2CAP_FEAT_ERTM | L2CAP_FEAT_STREAMING 30850a708f8fSGustavo F. Padovan | L2CAP_FEAT_FCS; 3086a5fd6f30SAndrei Emeltchenko if (enable_hs) 30876327eb98SAndrei Emeltchenko feat_mask |= L2CAP_FEAT_EXT_FLOW 30886327eb98SAndrei Emeltchenko | L2CAP_FEAT_EXT_WINDOW; 3089a5fd6f30SAndrei Emeltchenko 30900a708f8fSGustavo F. Padovan put_unaligned_le32(feat_mask, rsp->data); 30910a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, 30920a708f8fSGustavo F. Padovan L2CAP_INFO_RSP, sizeof(buf), buf); 30930a708f8fSGustavo F. Padovan } else if (type == L2CAP_IT_FIXED_CHAN) { 30940a708f8fSGustavo F. Padovan u8 buf[12]; 30950a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) buf; 309650a147cdSMat Martineau 309750a147cdSMat Martineau if (enable_hs) 309850a147cdSMat Martineau l2cap_fixed_chan[0] |= L2CAP_FC_A2MP; 309950a147cdSMat Martineau else 310050a147cdSMat Martineau l2cap_fixed_chan[0] &= ~L2CAP_FC_A2MP; 310150a147cdSMat Martineau 31020a708f8fSGustavo F. Padovan rsp->type = cpu_to_le16(L2CAP_IT_FIXED_CHAN); 31030a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(L2CAP_IR_SUCCESS); 3104c6337ea6SAndrei Emeltchenko memcpy(rsp->data, l2cap_fixed_chan, sizeof(l2cap_fixed_chan)); 31050a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, 31060a708f8fSGustavo F. Padovan L2CAP_INFO_RSP, sizeof(buf), buf); 31070a708f8fSGustavo F. Padovan } else { 31080a708f8fSGustavo F. Padovan struct l2cap_info_rsp rsp; 31090a708f8fSGustavo F. Padovan rsp.type = cpu_to_le16(type); 31100a708f8fSGustavo F. Padovan rsp.result = cpu_to_le16(L2CAP_IR_NOTSUPP); 31110a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, 31120a708f8fSGustavo F. Padovan L2CAP_INFO_RSP, sizeof(rsp), &rsp); 31130a708f8fSGustavo F. Padovan } 31140a708f8fSGustavo F. Padovan 31150a708f8fSGustavo F. Padovan return 0; 31160a708f8fSGustavo F. Padovan } 31170a708f8fSGustavo F. Padovan 31180a708f8fSGustavo F. Padovan static inline int l2cap_information_rsp(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u8 *data) 31190a708f8fSGustavo F. Padovan { 31200a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) data; 31210a708f8fSGustavo F. Padovan u16 type, result; 31220a708f8fSGustavo F. Padovan 31230a708f8fSGustavo F. Padovan type = __le16_to_cpu(rsp->type); 31240a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 31250a708f8fSGustavo F. Padovan 31260a708f8fSGustavo F. Padovan BT_DBG("type 0x%4.4x result 0x%2.2x", type, result); 31270a708f8fSGustavo F. Padovan 3128e90165beSAndrei Emeltchenko /* L2CAP Info req/rsp are unbound to channels, add extra checks */ 3129e90165beSAndrei Emeltchenko if (cmd->ident != conn->info_ident || 3130e90165beSAndrei Emeltchenko conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) 3131e90165beSAndrei Emeltchenko return 0; 3132e90165beSAndrei Emeltchenko 3133371fd835SUlisses Furquim __cancel_delayed_work(&conn->info_timer); 31340a708f8fSGustavo F. Padovan 31350a708f8fSGustavo F. Padovan if (result != L2CAP_IR_SUCCESS) { 31360a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 31370a708f8fSGustavo F. Padovan conn->info_ident = 0; 31380a708f8fSGustavo F. Padovan 31390a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 31400a708f8fSGustavo F. Padovan 31410a708f8fSGustavo F. Padovan return 0; 31420a708f8fSGustavo F. Padovan } 31430a708f8fSGustavo F. Padovan 31440a708f8fSGustavo F. Padovan if (type == L2CAP_IT_FEAT_MASK) { 31450a708f8fSGustavo F. Padovan conn->feat_mask = get_unaligned_le32(rsp->data); 31460a708f8fSGustavo F. Padovan 31470a708f8fSGustavo F. Padovan if (conn->feat_mask & L2CAP_FEAT_FIXED_CHAN) { 31480a708f8fSGustavo F. Padovan struct l2cap_info_req req; 31490a708f8fSGustavo F. Padovan req.type = cpu_to_le16(L2CAP_IT_FIXED_CHAN); 31500a708f8fSGustavo F. Padovan 31510a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 31520a708f8fSGustavo F. Padovan 31530a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, conn->info_ident, 31540a708f8fSGustavo F. Padovan L2CAP_INFO_REQ, sizeof(req), &req); 31550a708f8fSGustavo F. Padovan } else { 31560a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 31570a708f8fSGustavo F. Padovan conn->info_ident = 0; 31580a708f8fSGustavo F. Padovan 31590a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 31600a708f8fSGustavo F. Padovan } 31610a708f8fSGustavo F. Padovan } else if (type == L2CAP_IT_FIXED_CHAN) { 31620a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 31630a708f8fSGustavo F. Padovan conn->info_ident = 0; 31640a708f8fSGustavo F. Padovan 31650a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 31660a708f8fSGustavo F. Padovan } 31670a708f8fSGustavo F. Padovan 31680a708f8fSGustavo F. Padovan return 0; 31690a708f8fSGustavo F. Padovan } 31700a708f8fSGustavo F. Padovan 3171f94ff6ffSMat Martineau static inline int l2cap_create_channel_req(struct l2cap_conn *conn, 3172f94ff6ffSMat Martineau struct l2cap_cmd_hdr *cmd, u16 cmd_len, 3173f94ff6ffSMat Martineau void *data) 3174f94ff6ffSMat Martineau { 3175f94ff6ffSMat Martineau struct l2cap_create_chan_req *req = data; 3176f94ff6ffSMat Martineau struct l2cap_create_chan_rsp rsp; 3177f94ff6ffSMat Martineau u16 psm, scid; 3178f94ff6ffSMat Martineau 3179f94ff6ffSMat Martineau if (cmd_len != sizeof(*req)) 3180f94ff6ffSMat Martineau return -EPROTO; 3181f94ff6ffSMat Martineau 3182f94ff6ffSMat Martineau if (!enable_hs) 3183f94ff6ffSMat Martineau return -EINVAL; 3184f94ff6ffSMat Martineau 3185f94ff6ffSMat Martineau psm = le16_to_cpu(req->psm); 3186f94ff6ffSMat Martineau scid = le16_to_cpu(req->scid); 3187f94ff6ffSMat Martineau 3188f94ff6ffSMat Martineau BT_DBG("psm %d, scid %d, amp_id %d", psm, scid, req->amp_id); 3189f94ff6ffSMat Martineau 3190f94ff6ffSMat Martineau /* Placeholder: Always reject */ 3191f94ff6ffSMat Martineau rsp.dcid = 0; 3192f94ff6ffSMat Martineau rsp.scid = cpu_to_le16(scid); 3193f94ff6ffSMat Martineau rsp.result = L2CAP_CR_NO_MEM; 3194f94ff6ffSMat Martineau rsp.status = L2CAP_CS_NO_INFO; 3195f94ff6ffSMat Martineau 3196f94ff6ffSMat Martineau l2cap_send_cmd(conn, cmd->ident, L2CAP_CREATE_CHAN_RSP, 3197f94ff6ffSMat Martineau sizeof(rsp), &rsp); 3198f94ff6ffSMat Martineau 3199f94ff6ffSMat Martineau return 0; 3200f94ff6ffSMat Martineau } 3201f94ff6ffSMat Martineau 3202f94ff6ffSMat Martineau static inline int l2cap_create_channel_rsp(struct l2cap_conn *conn, 3203f94ff6ffSMat Martineau struct l2cap_cmd_hdr *cmd, void *data) 3204f94ff6ffSMat Martineau { 3205f94ff6ffSMat Martineau BT_DBG("conn %p", conn); 3206f94ff6ffSMat Martineau 3207f94ff6ffSMat Martineau return l2cap_connect_rsp(conn, cmd, data); 3208f94ff6ffSMat Martineau } 3209f94ff6ffSMat Martineau 32108d5a04a1SMat Martineau static void l2cap_send_move_chan_rsp(struct l2cap_conn *conn, u8 ident, 32118d5a04a1SMat Martineau u16 icid, u16 result) 32128d5a04a1SMat Martineau { 32138d5a04a1SMat Martineau struct l2cap_move_chan_rsp rsp; 32148d5a04a1SMat Martineau 32158d5a04a1SMat Martineau BT_DBG("icid %d, result %d", icid, result); 32168d5a04a1SMat Martineau 32178d5a04a1SMat Martineau rsp.icid = cpu_to_le16(icid); 32188d5a04a1SMat Martineau rsp.result = cpu_to_le16(result); 32198d5a04a1SMat Martineau 32208d5a04a1SMat Martineau l2cap_send_cmd(conn, ident, L2CAP_MOVE_CHAN_RSP, sizeof(rsp), &rsp); 32218d5a04a1SMat Martineau } 32228d5a04a1SMat Martineau 32238d5a04a1SMat Martineau static void l2cap_send_move_chan_cfm(struct l2cap_conn *conn, 32248d5a04a1SMat Martineau struct l2cap_chan *chan, u16 icid, u16 result) 32258d5a04a1SMat Martineau { 32268d5a04a1SMat Martineau struct l2cap_move_chan_cfm cfm; 32278d5a04a1SMat Martineau u8 ident; 32288d5a04a1SMat Martineau 32298d5a04a1SMat Martineau BT_DBG("icid %d, result %d", icid, result); 32308d5a04a1SMat Martineau 32318d5a04a1SMat Martineau ident = l2cap_get_ident(conn); 32328d5a04a1SMat Martineau if (chan) 32338d5a04a1SMat Martineau chan->ident = ident; 32348d5a04a1SMat Martineau 32358d5a04a1SMat Martineau cfm.icid = cpu_to_le16(icid); 32368d5a04a1SMat Martineau cfm.result = cpu_to_le16(result); 32378d5a04a1SMat Martineau 32388d5a04a1SMat Martineau l2cap_send_cmd(conn, ident, L2CAP_MOVE_CHAN_CFM, sizeof(cfm), &cfm); 32398d5a04a1SMat Martineau } 32408d5a04a1SMat Martineau 32418d5a04a1SMat Martineau static void l2cap_send_move_chan_cfm_rsp(struct l2cap_conn *conn, u8 ident, 32428d5a04a1SMat Martineau u16 icid) 32438d5a04a1SMat Martineau { 32448d5a04a1SMat Martineau struct l2cap_move_chan_cfm_rsp rsp; 32458d5a04a1SMat Martineau 32468d5a04a1SMat Martineau BT_DBG("icid %d", icid); 32478d5a04a1SMat Martineau 32488d5a04a1SMat Martineau rsp.icid = cpu_to_le16(icid); 32498d5a04a1SMat Martineau l2cap_send_cmd(conn, ident, L2CAP_MOVE_CHAN_CFM_RSP, sizeof(rsp), &rsp); 32508d5a04a1SMat Martineau } 32518d5a04a1SMat Martineau 32528d5a04a1SMat Martineau static inline int l2cap_move_channel_req(struct l2cap_conn *conn, 32538d5a04a1SMat Martineau struct l2cap_cmd_hdr *cmd, u16 cmd_len, void *data) 32548d5a04a1SMat Martineau { 32558d5a04a1SMat Martineau struct l2cap_move_chan_req *req = data; 32568d5a04a1SMat Martineau u16 icid = 0; 32578d5a04a1SMat Martineau u16 result = L2CAP_MR_NOT_ALLOWED; 32588d5a04a1SMat Martineau 32598d5a04a1SMat Martineau if (cmd_len != sizeof(*req)) 32608d5a04a1SMat Martineau return -EPROTO; 32618d5a04a1SMat Martineau 32628d5a04a1SMat Martineau icid = le16_to_cpu(req->icid); 32638d5a04a1SMat Martineau 32648d5a04a1SMat Martineau BT_DBG("icid %d, dest_amp_id %d", icid, req->dest_amp_id); 32658d5a04a1SMat Martineau 32668d5a04a1SMat Martineau if (!enable_hs) 32678d5a04a1SMat Martineau return -EINVAL; 32688d5a04a1SMat Martineau 32698d5a04a1SMat Martineau /* Placeholder: Always refuse */ 32708d5a04a1SMat Martineau l2cap_send_move_chan_rsp(conn, cmd->ident, icid, result); 32718d5a04a1SMat Martineau 32728d5a04a1SMat Martineau return 0; 32738d5a04a1SMat Martineau } 32748d5a04a1SMat Martineau 32758d5a04a1SMat Martineau static inline int l2cap_move_channel_rsp(struct l2cap_conn *conn, 32768d5a04a1SMat Martineau struct l2cap_cmd_hdr *cmd, u16 cmd_len, void *data) 32778d5a04a1SMat Martineau { 32788d5a04a1SMat Martineau struct l2cap_move_chan_rsp *rsp = data; 32798d5a04a1SMat Martineau u16 icid, result; 32808d5a04a1SMat Martineau 32818d5a04a1SMat Martineau if (cmd_len != sizeof(*rsp)) 32828d5a04a1SMat Martineau return -EPROTO; 32838d5a04a1SMat Martineau 32848d5a04a1SMat Martineau icid = le16_to_cpu(rsp->icid); 32858d5a04a1SMat Martineau result = le16_to_cpu(rsp->result); 32868d5a04a1SMat Martineau 32878d5a04a1SMat Martineau BT_DBG("icid %d, result %d", icid, result); 32888d5a04a1SMat Martineau 32898d5a04a1SMat Martineau /* Placeholder: Always unconfirmed */ 32908d5a04a1SMat Martineau l2cap_send_move_chan_cfm(conn, NULL, icid, L2CAP_MC_UNCONFIRMED); 32918d5a04a1SMat Martineau 32928d5a04a1SMat Martineau return 0; 32938d5a04a1SMat Martineau } 32948d5a04a1SMat Martineau 32958d5a04a1SMat Martineau static inline int l2cap_move_channel_confirm(struct l2cap_conn *conn, 32968d5a04a1SMat Martineau struct l2cap_cmd_hdr *cmd, u16 cmd_len, void *data) 32978d5a04a1SMat Martineau { 32988d5a04a1SMat Martineau struct l2cap_move_chan_cfm *cfm = data; 32998d5a04a1SMat Martineau u16 icid, result; 33008d5a04a1SMat Martineau 33018d5a04a1SMat Martineau if (cmd_len != sizeof(*cfm)) 33028d5a04a1SMat Martineau return -EPROTO; 33038d5a04a1SMat Martineau 33048d5a04a1SMat Martineau icid = le16_to_cpu(cfm->icid); 33058d5a04a1SMat Martineau result = le16_to_cpu(cfm->result); 33068d5a04a1SMat Martineau 33078d5a04a1SMat Martineau BT_DBG("icid %d, result %d", icid, result); 33088d5a04a1SMat Martineau 33098d5a04a1SMat Martineau l2cap_send_move_chan_cfm_rsp(conn, cmd->ident, icid); 33108d5a04a1SMat Martineau 33118d5a04a1SMat Martineau return 0; 33128d5a04a1SMat Martineau } 33138d5a04a1SMat Martineau 33148d5a04a1SMat Martineau static inline int l2cap_move_channel_confirm_rsp(struct l2cap_conn *conn, 33158d5a04a1SMat Martineau struct l2cap_cmd_hdr *cmd, u16 cmd_len, void *data) 33168d5a04a1SMat Martineau { 33178d5a04a1SMat Martineau struct l2cap_move_chan_cfm_rsp *rsp = data; 33188d5a04a1SMat Martineau u16 icid; 33198d5a04a1SMat Martineau 33208d5a04a1SMat Martineau if (cmd_len != sizeof(*rsp)) 33218d5a04a1SMat Martineau return -EPROTO; 33228d5a04a1SMat Martineau 33238d5a04a1SMat Martineau icid = le16_to_cpu(rsp->icid); 33248d5a04a1SMat Martineau 33258d5a04a1SMat Martineau BT_DBG("icid %d", icid); 33268d5a04a1SMat Martineau 33278d5a04a1SMat Martineau return 0; 33288d5a04a1SMat Martineau } 33298d5a04a1SMat Martineau 3330e2174ca4SGustavo F. Padovan static inline int l2cap_check_conn_param(u16 min, u16 max, u16 latency, 3331de73115aSClaudio Takahasi u16 to_multiplier) 3332de73115aSClaudio Takahasi { 3333de73115aSClaudio Takahasi u16 max_latency; 3334de73115aSClaudio Takahasi 3335de73115aSClaudio Takahasi if (min > max || min < 6 || max > 3200) 3336de73115aSClaudio Takahasi return -EINVAL; 3337de73115aSClaudio Takahasi 3338de73115aSClaudio Takahasi if (to_multiplier < 10 || to_multiplier > 3200) 3339de73115aSClaudio Takahasi return -EINVAL; 3340de73115aSClaudio Takahasi 3341de73115aSClaudio Takahasi if (max >= to_multiplier * 8) 3342de73115aSClaudio Takahasi return -EINVAL; 3343de73115aSClaudio Takahasi 3344de73115aSClaudio Takahasi max_latency = (to_multiplier * 8 / max) - 1; 3345de73115aSClaudio Takahasi if (latency > 499 || latency > max_latency) 3346de73115aSClaudio Takahasi return -EINVAL; 3347de73115aSClaudio Takahasi 3348de73115aSClaudio Takahasi return 0; 3349de73115aSClaudio Takahasi } 3350de73115aSClaudio Takahasi 3351de73115aSClaudio Takahasi static inline int l2cap_conn_param_update_req(struct l2cap_conn *conn, 3352de73115aSClaudio Takahasi struct l2cap_cmd_hdr *cmd, u8 *data) 3353de73115aSClaudio Takahasi { 3354de73115aSClaudio Takahasi struct hci_conn *hcon = conn->hcon; 3355de73115aSClaudio Takahasi struct l2cap_conn_param_update_req *req; 3356de73115aSClaudio Takahasi struct l2cap_conn_param_update_rsp rsp; 3357de73115aSClaudio Takahasi u16 min, max, latency, to_multiplier, cmd_len; 33582ce603ebSClaudio Takahasi int err; 3359de73115aSClaudio Takahasi 3360de73115aSClaudio Takahasi if (!(hcon->link_mode & HCI_LM_MASTER)) 3361de73115aSClaudio Takahasi return -EINVAL; 3362de73115aSClaudio Takahasi 3363de73115aSClaudio Takahasi cmd_len = __le16_to_cpu(cmd->len); 3364de73115aSClaudio Takahasi if (cmd_len != sizeof(struct l2cap_conn_param_update_req)) 3365de73115aSClaudio Takahasi return -EPROTO; 3366de73115aSClaudio Takahasi 3367de73115aSClaudio Takahasi req = (struct l2cap_conn_param_update_req *) data; 3368de73115aSClaudio Takahasi min = __le16_to_cpu(req->min); 3369de73115aSClaudio Takahasi max = __le16_to_cpu(req->max); 3370de73115aSClaudio Takahasi latency = __le16_to_cpu(req->latency); 3371de73115aSClaudio Takahasi to_multiplier = __le16_to_cpu(req->to_multiplier); 3372de73115aSClaudio Takahasi 3373de73115aSClaudio Takahasi BT_DBG("min 0x%4.4x max 0x%4.4x latency: 0x%4.4x Timeout: 0x%4.4x", 3374de73115aSClaudio Takahasi min, max, latency, to_multiplier); 3375de73115aSClaudio Takahasi 3376de73115aSClaudio Takahasi memset(&rsp, 0, sizeof(rsp)); 33772ce603ebSClaudio Takahasi 33782ce603ebSClaudio Takahasi err = l2cap_check_conn_param(min, max, latency, to_multiplier); 33792ce603ebSClaudio Takahasi if (err) 3380de73115aSClaudio Takahasi rsp.result = cpu_to_le16(L2CAP_CONN_PARAM_REJECTED); 3381de73115aSClaudio Takahasi else 3382de73115aSClaudio Takahasi rsp.result = cpu_to_le16(L2CAP_CONN_PARAM_ACCEPTED); 3383de73115aSClaudio Takahasi 3384de73115aSClaudio Takahasi l2cap_send_cmd(conn, cmd->ident, L2CAP_CONN_PARAM_UPDATE_RSP, 3385de73115aSClaudio Takahasi sizeof(rsp), &rsp); 3386de73115aSClaudio Takahasi 33872ce603ebSClaudio Takahasi if (!err) 33882ce603ebSClaudio Takahasi hci_le_conn_update(hcon, min, max, latency, to_multiplier); 33892ce603ebSClaudio Takahasi 3390de73115aSClaudio Takahasi return 0; 3391de73115aSClaudio Takahasi } 3392de73115aSClaudio Takahasi 33933300d9a9SClaudio Takahasi static inline int l2cap_bredr_sig_cmd(struct l2cap_conn *conn, 33943300d9a9SClaudio Takahasi struct l2cap_cmd_hdr *cmd, u16 cmd_len, u8 *data) 33953300d9a9SClaudio Takahasi { 33963300d9a9SClaudio Takahasi int err = 0; 33973300d9a9SClaudio Takahasi 33983300d9a9SClaudio Takahasi switch (cmd->code) { 33993300d9a9SClaudio Takahasi case L2CAP_COMMAND_REJ: 34003300d9a9SClaudio Takahasi l2cap_command_rej(conn, cmd, data); 34013300d9a9SClaudio Takahasi break; 34023300d9a9SClaudio Takahasi 34033300d9a9SClaudio Takahasi case L2CAP_CONN_REQ: 34043300d9a9SClaudio Takahasi err = l2cap_connect_req(conn, cmd, data); 34053300d9a9SClaudio Takahasi break; 34063300d9a9SClaudio Takahasi 34073300d9a9SClaudio Takahasi case L2CAP_CONN_RSP: 34083300d9a9SClaudio Takahasi err = l2cap_connect_rsp(conn, cmd, data); 34093300d9a9SClaudio Takahasi break; 34103300d9a9SClaudio Takahasi 34113300d9a9SClaudio Takahasi case L2CAP_CONF_REQ: 34123300d9a9SClaudio Takahasi err = l2cap_config_req(conn, cmd, cmd_len, data); 34133300d9a9SClaudio Takahasi break; 34143300d9a9SClaudio Takahasi 34153300d9a9SClaudio Takahasi case L2CAP_CONF_RSP: 34163300d9a9SClaudio Takahasi err = l2cap_config_rsp(conn, cmd, data); 34173300d9a9SClaudio Takahasi break; 34183300d9a9SClaudio Takahasi 34193300d9a9SClaudio Takahasi case L2CAP_DISCONN_REQ: 34203300d9a9SClaudio Takahasi err = l2cap_disconnect_req(conn, cmd, data); 34213300d9a9SClaudio Takahasi break; 34223300d9a9SClaudio Takahasi 34233300d9a9SClaudio Takahasi case L2CAP_DISCONN_RSP: 34243300d9a9SClaudio Takahasi err = l2cap_disconnect_rsp(conn, cmd, data); 34253300d9a9SClaudio Takahasi break; 34263300d9a9SClaudio Takahasi 34273300d9a9SClaudio Takahasi case L2CAP_ECHO_REQ: 34283300d9a9SClaudio Takahasi l2cap_send_cmd(conn, cmd->ident, L2CAP_ECHO_RSP, cmd_len, data); 34293300d9a9SClaudio Takahasi break; 34303300d9a9SClaudio Takahasi 34313300d9a9SClaudio Takahasi case L2CAP_ECHO_RSP: 34323300d9a9SClaudio Takahasi break; 34333300d9a9SClaudio Takahasi 34343300d9a9SClaudio Takahasi case L2CAP_INFO_REQ: 34353300d9a9SClaudio Takahasi err = l2cap_information_req(conn, cmd, data); 34363300d9a9SClaudio Takahasi break; 34373300d9a9SClaudio Takahasi 34383300d9a9SClaudio Takahasi case L2CAP_INFO_RSP: 34393300d9a9SClaudio Takahasi err = l2cap_information_rsp(conn, cmd, data); 34403300d9a9SClaudio Takahasi break; 34413300d9a9SClaudio Takahasi 3442f94ff6ffSMat Martineau case L2CAP_CREATE_CHAN_REQ: 3443f94ff6ffSMat Martineau err = l2cap_create_channel_req(conn, cmd, cmd_len, data); 3444f94ff6ffSMat Martineau break; 3445f94ff6ffSMat Martineau 3446f94ff6ffSMat Martineau case L2CAP_CREATE_CHAN_RSP: 3447f94ff6ffSMat Martineau err = l2cap_create_channel_rsp(conn, cmd, data); 3448f94ff6ffSMat Martineau break; 3449f94ff6ffSMat Martineau 34508d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_REQ: 34518d5a04a1SMat Martineau err = l2cap_move_channel_req(conn, cmd, cmd_len, data); 34528d5a04a1SMat Martineau break; 34538d5a04a1SMat Martineau 34548d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_RSP: 34558d5a04a1SMat Martineau err = l2cap_move_channel_rsp(conn, cmd, cmd_len, data); 34568d5a04a1SMat Martineau break; 34578d5a04a1SMat Martineau 34588d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_CFM: 34598d5a04a1SMat Martineau err = l2cap_move_channel_confirm(conn, cmd, cmd_len, data); 34608d5a04a1SMat Martineau break; 34618d5a04a1SMat Martineau 34628d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_CFM_RSP: 34638d5a04a1SMat Martineau err = l2cap_move_channel_confirm_rsp(conn, cmd, cmd_len, data); 34648d5a04a1SMat Martineau break; 34658d5a04a1SMat Martineau 34663300d9a9SClaudio Takahasi default: 34673300d9a9SClaudio Takahasi BT_ERR("Unknown BR/EDR signaling command 0x%2.2x", cmd->code); 34683300d9a9SClaudio Takahasi err = -EINVAL; 34693300d9a9SClaudio Takahasi break; 34703300d9a9SClaudio Takahasi } 34713300d9a9SClaudio Takahasi 34723300d9a9SClaudio Takahasi return err; 34733300d9a9SClaudio Takahasi } 34743300d9a9SClaudio Takahasi 34753300d9a9SClaudio Takahasi static inline int l2cap_le_sig_cmd(struct l2cap_conn *conn, 34763300d9a9SClaudio Takahasi struct l2cap_cmd_hdr *cmd, u8 *data) 34773300d9a9SClaudio Takahasi { 34783300d9a9SClaudio Takahasi switch (cmd->code) { 34793300d9a9SClaudio Takahasi case L2CAP_COMMAND_REJ: 34803300d9a9SClaudio Takahasi return 0; 34813300d9a9SClaudio Takahasi 34823300d9a9SClaudio Takahasi case L2CAP_CONN_PARAM_UPDATE_REQ: 3483de73115aSClaudio Takahasi return l2cap_conn_param_update_req(conn, cmd, data); 34843300d9a9SClaudio Takahasi 34853300d9a9SClaudio Takahasi case L2CAP_CONN_PARAM_UPDATE_RSP: 34863300d9a9SClaudio Takahasi return 0; 34873300d9a9SClaudio Takahasi 34883300d9a9SClaudio Takahasi default: 34893300d9a9SClaudio Takahasi BT_ERR("Unknown LE signaling command 0x%2.2x", cmd->code); 34903300d9a9SClaudio Takahasi return -EINVAL; 34913300d9a9SClaudio Takahasi } 34923300d9a9SClaudio Takahasi } 34933300d9a9SClaudio Takahasi 34943300d9a9SClaudio Takahasi static inline void l2cap_sig_channel(struct l2cap_conn *conn, 34953300d9a9SClaudio Takahasi struct sk_buff *skb) 34960a708f8fSGustavo F. Padovan { 34970a708f8fSGustavo F. Padovan u8 *data = skb->data; 34980a708f8fSGustavo F. Padovan int len = skb->len; 34990a708f8fSGustavo F. Padovan struct l2cap_cmd_hdr cmd; 35003300d9a9SClaudio Takahasi int err; 35010a708f8fSGustavo F. Padovan 35020a708f8fSGustavo F. Padovan l2cap_raw_recv(conn, skb); 35030a708f8fSGustavo F. Padovan 35040a708f8fSGustavo F. Padovan while (len >= L2CAP_CMD_HDR_SIZE) { 35050a708f8fSGustavo F. Padovan u16 cmd_len; 35060a708f8fSGustavo F. Padovan memcpy(&cmd, data, L2CAP_CMD_HDR_SIZE); 35070a708f8fSGustavo F. Padovan data += L2CAP_CMD_HDR_SIZE; 35080a708f8fSGustavo F. Padovan len -= L2CAP_CMD_HDR_SIZE; 35090a708f8fSGustavo F. Padovan 35100a708f8fSGustavo F. Padovan cmd_len = le16_to_cpu(cmd.len); 35110a708f8fSGustavo F. Padovan 35120a708f8fSGustavo F. Padovan BT_DBG("code 0x%2.2x len %d id 0x%2.2x", cmd.code, cmd_len, cmd.ident); 35130a708f8fSGustavo F. Padovan 35140a708f8fSGustavo F. Padovan if (cmd_len > len || !cmd.ident) { 35150a708f8fSGustavo F. Padovan BT_DBG("corrupted command"); 35160a708f8fSGustavo F. Padovan break; 35170a708f8fSGustavo F. Padovan } 35180a708f8fSGustavo F. Padovan 35193300d9a9SClaudio Takahasi if (conn->hcon->type == LE_LINK) 35203300d9a9SClaudio Takahasi err = l2cap_le_sig_cmd(conn, &cmd, data); 35213300d9a9SClaudio Takahasi else 35223300d9a9SClaudio Takahasi err = l2cap_bredr_sig_cmd(conn, &cmd, cmd_len, data); 35230a708f8fSGustavo F. Padovan 35240a708f8fSGustavo F. Padovan if (err) { 3525e2fd318eSIlia Kolomisnky struct l2cap_cmd_rej_unk rej; 35262c6d1a2eSGustavo F. Padovan 35272c6d1a2eSGustavo F. Padovan BT_ERR("Wrong link type (%d)", err); 35280a708f8fSGustavo F. Padovan 35290a708f8fSGustavo F. Padovan /* FIXME: Map err to a valid reason */ 3530e2fd318eSIlia Kolomisnky rej.reason = cpu_to_le16(L2CAP_REJ_NOT_UNDERSTOOD); 35310a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd.ident, L2CAP_COMMAND_REJ, sizeof(rej), &rej); 35320a708f8fSGustavo F. Padovan } 35330a708f8fSGustavo F. Padovan 35340a708f8fSGustavo F. Padovan data += cmd_len; 35350a708f8fSGustavo F. Padovan len -= cmd_len; 35360a708f8fSGustavo F. Padovan } 35370a708f8fSGustavo F. Padovan 35380a708f8fSGustavo F. Padovan kfree_skb(skb); 35390a708f8fSGustavo F. Padovan } 35400a708f8fSGustavo F. Padovan 354147d1ec61SGustavo F. Padovan static int l2cap_check_fcs(struct l2cap_chan *chan, struct sk_buff *skb) 35420a708f8fSGustavo F. Padovan { 35430a708f8fSGustavo F. Padovan u16 our_fcs, rcv_fcs; 3544e4ca6d98SAndrei Emeltchenko int hdr_size; 3545e4ca6d98SAndrei Emeltchenko 3546e4ca6d98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 3547e4ca6d98SAndrei Emeltchenko hdr_size = L2CAP_EXT_HDR_SIZE; 3548e4ca6d98SAndrei Emeltchenko else 3549e4ca6d98SAndrei Emeltchenko hdr_size = L2CAP_ENH_HDR_SIZE; 35500a708f8fSGustavo F. Padovan 355147d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 355203a51213SAndrei Emeltchenko skb_trim(skb, skb->len - L2CAP_FCS_SIZE); 35530a708f8fSGustavo F. Padovan rcv_fcs = get_unaligned_le16(skb->data + skb->len); 35540a708f8fSGustavo F. Padovan our_fcs = crc16(0, skb->data - hdr_size, skb->len + hdr_size); 35550a708f8fSGustavo F. Padovan 35560a708f8fSGustavo F. Padovan if (our_fcs != rcv_fcs) 35570a708f8fSGustavo F. Padovan return -EBADMSG; 35580a708f8fSGustavo F. Padovan } 35590a708f8fSGustavo F. Padovan return 0; 35600a708f8fSGustavo F. Padovan } 35610a708f8fSGustavo F. Padovan 3562525cd185SGustavo F. Padovan static inline void l2cap_send_i_or_rr_or_rnr(struct l2cap_chan *chan) 35630a708f8fSGustavo F. Padovan { 356488843ab0SAndrei Emeltchenko u32 control = 0; 35650a708f8fSGustavo F. Padovan 35666a026610SGustavo F. Padovan chan->frames_sent = 0; 35670a708f8fSGustavo F. Padovan 35680b209faeSAndrei Emeltchenko control |= __set_reqseq(chan, chan->buffer_seq); 35690a708f8fSGustavo F. Padovan 3570e2ab4353SGustavo F. Padovan if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 3571ab784b73SAndrei Emeltchenko control |= __set_ctrl_super(chan, L2CAP_SUPER_RNR); 3572525cd185SGustavo F. Padovan l2cap_send_sframe(chan, control); 3573e2ab4353SGustavo F. Padovan set_bit(CONN_RNR_SENT, &chan->conn_state); 35740a708f8fSGustavo F. Padovan } 35750a708f8fSGustavo F. Padovan 3576e2ab4353SGustavo F. Padovan if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 3577525cd185SGustavo F. Padovan l2cap_retransmit_frames(chan); 35780a708f8fSGustavo F. Padovan 3579525cd185SGustavo F. Padovan l2cap_ertm_send(chan); 35800a708f8fSGustavo F. Padovan 3581e2ab4353SGustavo F. Padovan if (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state) && 35826a026610SGustavo F. Padovan chan->frames_sent == 0) { 3583ab784b73SAndrei Emeltchenko control |= __set_ctrl_super(chan, L2CAP_SUPER_RR); 3584525cd185SGustavo F. Padovan l2cap_send_sframe(chan, control); 35850a708f8fSGustavo F. Padovan } 35860a708f8fSGustavo F. Padovan } 35870a708f8fSGustavo F. Padovan 3588fb45de7dSAndrei Emeltchenko static int l2cap_add_to_srej_queue(struct l2cap_chan *chan, struct sk_buff *skb, u16 tx_seq, u8 sar) 35890a708f8fSGustavo F. Padovan { 35900a708f8fSGustavo F. Padovan struct sk_buff *next_skb; 35910a708f8fSGustavo F. Padovan int tx_seq_offset, next_tx_seq_offset; 35920a708f8fSGustavo F. Padovan 35930a708f8fSGustavo F. Padovan bt_cb(skb)->tx_seq = tx_seq; 35940a708f8fSGustavo F. Padovan bt_cb(skb)->sar = sar; 35950a708f8fSGustavo F. Padovan 3596f1c6775bSGustavo F. Padovan next_skb = skb_peek(&chan->srej_q); 35970a708f8fSGustavo F. Padovan 3598836be934SAndrei Emeltchenko tx_seq_offset = __seq_offset(chan, tx_seq, chan->buffer_seq); 35990a708f8fSGustavo F. Padovan 3600039d9572SSzymon Janc while (next_skb) { 36010a708f8fSGustavo F. Padovan if (bt_cb(next_skb)->tx_seq == tx_seq) 36020a708f8fSGustavo F. Padovan return -EINVAL; 36030a708f8fSGustavo F. Padovan 3604836be934SAndrei Emeltchenko next_tx_seq_offset = __seq_offset(chan, 3605836be934SAndrei Emeltchenko bt_cb(next_skb)->tx_seq, chan->buffer_seq); 36060a708f8fSGustavo F. Padovan 36070a708f8fSGustavo F. Padovan if (next_tx_seq_offset > tx_seq_offset) { 3608f1c6775bSGustavo F. Padovan __skb_queue_before(&chan->srej_q, next_skb, skb); 36090a708f8fSGustavo F. Padovan return 0; 36100a708f8fSGustavo F. Padovan } 36110a708f8fSGustavo F. Padovan 3612f1c6775bSGustavo F. Padovan if (skb_queue_is_last(&chan->srej_q, next_skb)) 3613039d9572SSzymon Janc next_skb = NULL; 3614039d9572SSzymon Janc else 3615039d9572SSzymon Janc next_skb = skb_queue_next(&chan->srej_q, next_skb); 3616039d9572SSzymon Janc } 36170a708f8fSGustavo F. Padovan 3618f1c6775bSGustavo F. Padovan __skb_queue_tail(&chan->srej_q, skb); 36190a708f8fSGustavo F. Padovan 36200a708f8fSGustavo F. Padovan return 0; 36210a708f8fSGustavo F. Padovan } 36220a708f8fSGustavo F. Padovan 362384084a31SMat Martineau static void append_skb_frag(struct sk_buff *skb, 362484084a31SMat Martineau struct sk_buff *new_frag, struct sk_buff **last_frag) 36250a708f8fSGustavo F. Padovan { 362684084a31SMat Martineau /* skb->len reflects data in skb as well as all fragments 362784084a31SMat Martineau * skb->data_len reflects only data in fragments 362884084a31SMat Martineau */ 362984084a31SMat Martineau if (!skb_has_frag_list(skb)) 363084084a31SMat Martineau skb_shinfo(skb)->frag_list = new_frag; 363184084a31SMat Martineau 363284084a31SMat Martineau new_frag->next = NULL; 363384084a31SMat Martineau 363484084a31SMat Martineau (*last_frag)->next = new_frag; 363584084a31SMat Martineau *last_frag = new_frag; 363684084a31SMat Martineau 363784084a31SMat Martineau skb->len += new_frag->len; 363884084a31SMat Martineau skb->data_len += new_frag->len; 363984084a31SMat Martineau skb->truesize += new_frag->truesize; 364084084a31SMat Martineau } 364184084a31SMat Martineau 364288843ab0SAndrei Emeltchenko static int l2cap_reassemble_sdu(struct l2cap_chan *chan, struct sk_buff *skb, u32 control) 364384084a31SMat Martineau { 364484084a31SMat Martineau int err = -EINVAL; 36450a708f8fSGustavo F. Padovan 36467e0ef6eeSAndrei Emeltchenko switch (__get_ctrl_sar(chan, control)) { 36477e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_UNSEGMENTED: 364884084a31SMat Martineau if (chan->sdu) 364984084a31SMat Martineau break; 36500a708f8fSGustavo F. Padovan 365184084a31SMat Martineau err = chan->ops->recv(chan->data, skb); 365284084a31SMat Martineau break; 36530a708f8fSGustavo F. Padovan 36547e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_START: 365584084a31SMat Martineau if (chan->sdu) 365684084a31SMat Martineau break; 36570a708f8fSGustavo F. Padovan 36586f61fd47SGustavo F. Padovan chan->sdu_len = get_unaligned_le16(skb->data); 365903a51213SAndrei Emeltchenko skb_pull(skb, L2CAP_SDULEN_SIZE); 36600a708f8fSGustavo F. Padovan 366184084a31SMat Martineau if (chan->sdu_len > chan->imtu) { 366284084a31SMat Martineau err = -EMSGSIZE; 366384084a31SMat Martineau break; 366484084a31SMat Martineau } 36650a708f8fSGustavo F. Padovan 366684084a31SMat Martineau if (skb->len >= chan->sdu_len) 366784084a31SMat Martineau break; 366884084a31SMat Martineau 366984084a31SMat Martineau chan->sdu = skb; 367084084a31SMat Martineau chan->sdu_last_frag = skb; 367184084a31SMat Martineau 367284084a31SMat Martineau skb = NULL; 367384084a31SMat Martineau err = 0; 36740a708f8fSGustavo F. Padovan break; 36750a708f8fSGustavo F. Padovan 36767e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_CONTINUE: 36776f61fd47SGustavo F. Padovan if (!chan->sdu) 367884084a31SMat Martineau break; 36790a708f8fSGustavo F. Padovan 368084084a31SMat Martineau append_skb_frag(chan->sdu, skb, 368184084a31SMat Martineau &chan->sdu_last_frag); 368284084a31SMat Martineau skb = NULL; 36830a708f8fSGustavo F. Padovan 368484084a31SMat Martineau if (chan->sdu->len >= chan->sdu_len) 368584084a31SMat Martineau break; 36860a708f8fSGustavo F. Padovan 368784084a31SMat Martineau err = 0; 36880a708f8fSGustavo F. Padovan break; 36890a708f8fSGustavo F. Padovan 36907e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_END: 36916f61fd47SGustavo F. Padovan if (!chan->sdu) 369284084a31SMat Martineau break; 36930a708f8fSGustavo F. Padovan 369484084a31SMat Martineau append_skb_frag(chan->sdu, skb, 369584084a31SMat Martineau &chan->sdu_last_frag); 369684084a31SMat Martineau skb = NULL; 36970a708f8fSGustavo F. Padovan 369884084a31SMat Martineau if (chan->sdu->len != chan->sdu_len) 369984084a31SMat Martineau break; 37000a708f8fSGustavo F. Padovan 370184084a31SMat Martineau err = chan->ops->recv(chan->data, chan->sdu); 37020a708f8fSGustavo F. Padovan 370384084a31SMat Martineau if (!err) { 370484084a31SMat Martineau /* Reassembly complete */ 370584084a31SMat Martineau chan->sdu = NULL; 370684084a31SMat Martineau chan->sdu_last_frag = NULL; 370784084a31SMat Martineau chan->sdu_len = 0; 37080a708f8fSGustavo F. Padovan } 37090a708f8fSGustavo F. Padovan break; 37100a708f8fSGustavo F. Padovan } 37110a708f8fSGustavo F. Padovan 371284084a31SMat Martineau if (err) { 37130a708f8fSGustavo F. Padovan kfree_skb(skb); 37146f61fd47SGustavo F. Padovan kfree_skb(chan->sdu); 37156f61fd47SGustavo F. Padovan chan->sdu = NULL; 371684084a31SMat Martineau chan->sdu_last_frag = NULL; 371784084a31SMat Martineau chan->sdu_len = 0; 371884084a31SMat Martineau } 37190a708f8fSGustavo F. Padovan 372084084a31SMat Martineau return err; 37210a708f8fSGustavo F. Padovan } 37220a708f8fSGustavo F. Padovan 372326f880d2SMat Martineau static void l2cap_ertm_enter_local_busy(struct l2cap_chan *chan) 37240a708f8fSGustavo F. Padovan { 372526f880d2SMat Martineau BT_DBG("chan %p, Enter local busy", chan); 372626f880d2SMat Martineau 372726f880d2SMat Martineau set_bit(CONN_LOCAL_BUSY, &chan->conn_state); 372826f880d2SMat Martineau 372977f918bcSSzymon Janc __set_ack_timer(chan); 37300a708f8fSGustavo F. Padovan } 37310a708f8fSGustavo F. Padovan 373226f880d2SMat Martineau static void l2cap_ertm_exit_local_busy(struct l2cap_chan *chan) 373326f880d2SMat Martineau { 373488843ab0SAndrei Emeltchenko u32 control; 37350a708f8fSGustavo F. Padovan 3736e2ab4353SGustavo F. Padovan if (!test_bit(CONN_RNR_SENT, &chan->conn_state)) 37370a708f8fSGustavo F. Padovan goto done; 37380a708f8fSGustavo F. Padovan 37390b209faeSAndrei Emeltchenko control = __set_reqseq(chan, chan->buffer_seq); 3740e3781735SAndrei Emeltchenko control |= __set_ctrl_poll(chan); 3741ab784b73SAndrei Emeltchenko control |= __set_ctrl_super(chan, L2CAP_SUPER_RR); 3742525cd185SGustavo F. Padovan l2cap_send_sframe(chan, control); 37436a026610SGustavo F. Padovan chan->retry_count = 1; 37440a708f8fSGustavo F. Padovan 37451a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 37461a09bcb9SGustavo F. Padovan __set_monitor_timer(chan); 37470a708f8fSGustavo F. Padovan 3748e2ab4353SGustavo F. Padovan set_bit(CONN_WAIT_F, &chan->conn_state); 37490a708f8fSGustavo F. Padovan 37500a708f8fSGustavo F. Padovan done: 3751e2ab4353SGustavo F. Padovan clear_bit(CONN_LOCAL_BUSY, &chan->conn_state); 3752e2ab4353SGustavo F. Padovan clear_bit(CONN_RNR_SENT, &chan->conn_state); 37530a708f8fSGustavo F. Padovan 375449208c9cSGustavo F. Padovan BT_DBG("chan %p, Exit local busy", chan); 37550a708f8fSGustavo F. Padovan } 37560a708f8fSGustavo F. Padovan 3757e328140fSMat Martineau void l2cap_chan_busy(struct l2cap_chan *chan, int busy) 37580a708f8fSGustavo F. Padovan { 3759e328140fSMat Martineau if (chan->mode == L2CAP_MODE_ERTM) { 3760e328140fSMat Martineau if (busy) 376126f880d2SMat Martineau l2cap_ertm_enter_local_busy(chan); 3762e328140fSMat Martineau else 3763e328140fSMat Martineau l2cap_ertm_exit_local_busy(chan); 37640a708f8fSGustavo F. Padovan } 37650a708f8fSGustavo F. Padovan } 37660a708f8fSGustavo F. Padovan 3767fb45de7dSAndrei Emeltchenko static void l2cap_check_srej_gap(struct l2cap_chan *chan, u16 tx_seq) 37680a708f8fSGustavo F. Padovan { 37690a708f8fSGustavo F. Padovan struct sk_buff *skb; 377088843ab0SAndrei Emeltchenko u32 control; 37710a708f8fSGustavo F. Padovan 3772e328140fSMat Martineau while ((skb = skb_peek(&chan->srej_q)) && 3773e328140fSMat Martineau !test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 3774e328140fSMat Martineau int err; 3775e328140fSMat Martineau 37760a708f8fSGustavo F. Padovan if (bt_cb(skb)->tx_seq != tx_seq) 37770a708f8fSGustavo F. Padovan break; 37780a708f8fSGustavo F. Padovan 3779f1c6775bSGustavo F. Padovan skb = skb_dequeue(&chan->srej_q); 37807e0ef6eeSAndrei Emeltchenko control = __set_ctrl_sar(chan, bt_cb(skb)->sar); 378184084a31SMat Martineau err = l2cap_reassemble_sdu(chan, skb, control); 3782e328140fSMat Martineau 3783e328140fSMat Martineau if (err < 0) { 3784e328140fSMat Martineau l2cap_send_disconn_req(chan->conn, chan, ECONNRESET); 3785e328140fSMat Martineau break; 3786e328140fSMat Martineau } 3787e328140fSMat Martineau 3788836be934SAndrei Emeltchenko chan->buffer_seq_srej = __next_seq(chan, chan->buffer_seq_srej); 3789836be934SAndrei Emeltchenko tx_seq = __next_seq(chan, tx_seq); 37900a708f8fSGustavo F. Padovan } 37910a708f8fSGustavo F. Padovan } 37920a708f8fSGustavo F. Padovan 3793fb45de7dSAndrei Emeltchenko static void l2cap_resend_srejframe(struct l2cap_chan *chan, u16 tx_seq) 37940a708f8fSGustavo F. Padovan { 37950a708f8fSGustavo F. Padovan struct srej_list *l, *tmp; 379688843ab0SAndrei Emeltchenko u32 control; 37970a708f8fSGustavo F. Padovan 379839d5a3eeSGustavo F. Padovan list_for_each_entry_safe(l, tmp, &chan->srej_l, list) { 37990a708f8fSGustavo F. Padovan if (l->tx_seq == tx_seq) { 38000a708f8fSGustavo F. Padovan list_del(&l->list); 38010a708f8fSGustavo F. Padovan kfree(l); 38020a708f8fSGustavo F. Padovan return; 38030a708f8fSGustavo F. Padovan } 3804ab784b73SAndrei Emeltchenko control = __set_ctrl_super(chan, L2CAP_SUPER_SREJ); 38050b209faeSAndrei Emeltchenko control |= __set_reqseq(chan, l->tx_seq); 3806525cd185SGustavo F. Padovan l2cap_send_sframe(chan, control); 38070a708f8fSGustavo F. Padovan list_del(&l->list); 380839d5a3eeSGustavo F. Padovan list_add_tail(&l->list, &chan->srej_l); 38090a708f8fSGustavo F. Padovan } 38100a708f8fSGustavo F. Padovan } 38110a708f8fSGustavo F. Padovan 3812aef89f21SSzymon Janc static int l2cap_send_srejframe(struct l2cap_chan *chan, u16 tx_seq) 38130a708f8fSGustavo F. Padovan { 38140a708f8fSGustavo F. Padovan struct srej_list *new; 381588843ab0SAndrei Emeltchenko u32 control; 38160a708f8fSGustavo F. Padovan 381742e5c802SGustavo F. Padovan while (tx_seq != chan->expected_tx_seq) { 3818ab784b73SAndrei Emeltchenko control = __set_ctrl_super(chan, L2CAP_SUPER_SREJ); 38190b209faeSAndrei Emeltchenko control |= __set_reqseq(chan, chan->expected_tx_seq); 3820525cd185SGustavo F. Padovan l2cap_send_sframe(chan, control); 38210a708f8fSGustavo F. Padovan 38220a708f8fSGustavo F. Padovan new = kzalloc(sizeof(struct srej_list), GFP_ATOMIC); 3823aef89f21SSzymon Janc if (!new) 3824aef89f21SSzymon Janc return -ENOMEM; 3825aef89f21SSzymon Janc 382642e5c802SGustavo F. Padovan new->tx_seq = chan->expected_tx_seq; 3827836be934SAndrei Emeltchenko 3828836be934SAndrei Emeltchenko chan->expected_tx_seq = __next_seq(chan, chan->expected_tx_seq); 3829836be934SAndrei Emeltchenko 383039d5a3eeSGustavo F. Padovan list_add_tail(&new->list, &chan->srej_l); 38310a708f8fSGustavo F. Padovan } 3832836be934SAndrei Emeltchenko 3833836be934SAndrei Emeltchenko chan->expected_tx_seq = __next_seq(chan, chan->expected_tx_seq); 3834aef89f21SSzymon Janc 3835aef89f21SSzymon Janc return 0; 38360a708f8fSGustavo F. Padovan } 38370a708f8fSGustavo F. Padovan 383888843ab0SAndrei Emeltchenko static inline int l2cap_data_channel_iframe(struct l2cap_chan *chan, u32 rx_control, struct sk_buff *skb) 38390a708f8fSGustavo F. Padovan { 3840fb45de7dSAndrei Emeltchenko u16 tx_seq = __get_txseq(chan, rx_control); 38410b209faeSAndrei Emeltchenko u16 req_seq = __get_reqseq(chan, rx_control); 38427e0ef6eeSAndrei Emeltchenko u8 sar = __get_ctrl_sar(chan, rx_control); 38430a708f8fSGustavo F. Padovan int tx_seq_offset, expected_tx_seq_offset; 384447d1ec61SGustavo F. Padovan int num_to_ack = (chan->tx_win/6) + 1; 38450a708f8fSGustavo F. Padovan int err = 0; 38460a708f8fSGustavo F. Padovan 384788843ab0SAndrei Emeltchenko BT_DBG("chan %p len %d tx_seq %d rx_control 0x%8.8x", chan, skb->len, 3848525cd185SGustavo F. Padovan tx_seq, rx_control); 38490a708f8fSGustavo F. Padovan 385003f6715dSAndrei Emeltchenko if (__is_ctrl_final(chan, rx_control) && 3851e2ab4353SGustavo F. Padovan test_bit(CONN_WAIT_F, &chan->conn_state)) { 38521a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 38536a026610SGustavo F. Padovan if (chan->unacked_frames > 0) 38541a09bcb9SGustavo F. Padovan __set_retrans_timer(chan); 3855e2ab4353SGustavo F. Padovan clear_bit(CONN_WAIT_F, &chan->conn_state); 38560a708f8fSGustavo F. Padovan } 38570a708f8fSGustavo F. Padovan 385842e5c802SGustavo F. Padovan chan->expected_ack_seq = req_seq; 385942e5c802SGustavo F. Padovan l2cap_drop_acked_frames(chan); 38600a708f8fSGustavo F. Padovan 3861836be934SAndrei Emeltchenko tx_seq_offset = __seq_offset(chan, tx_seq, chan->buffer_seq); 38620a708f8fSGustavo F. Padovan 38630a708f8fSGustavo F. Padovan /* invalid tx_seq */ 386447d1ec61SGustavo F. Padovan if (tx_seq_offset >= chan->tx_win) { 38658c1d787bSGustavo F. Padovan l2cap_send_disconn_req(chan->conn, chan, ECONNRESET); 38660a708f8fSGustavo F. Padovan goto drop; 38670a708f8fSGustavo F. Padovan } 38680a708f8fSGustavo F. Padovan 386977f918bcSSzymon Janc if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 387077f918bcSSzymon Janc if (!test_bit(CONN_RNR_SENT, &chan->conn_state)) 387177f918bcSSzymon Janc l2cap_send_ack(chan); 38720a708f8fSGustavo F. Padovan goto drop; 387377f918bcSSzymon Janc } 38740a708f8fSGustavo F. Padovan 387502f1b641SMat Martineau if (tx_seq == chan->expected_tx_seq) 387602f1b641SMat Martineau goto expected; 387702f1b641SMat Martineau 3878e2ab4353SGustavo F. Padovan if (test_bit(CONN_SREJ_SENT, &chan->conn_state)) { 38790a708f8fSGustavo F. Padovan struct srej_list *first; 38800a708f8fSGustavo F. Padovan 388139d5a3eeSGustavo F. Padovan first = list_first_entry(&chan->srej_l, 38820a708f8fSGustavo F. Padovan struct srej_list, list); 38830a708f8fSGustavo F. Padovan if (tx_seq == first->tx_seq) { 388442e5c802SGustavo F. Padovan l2cap_add_to_srej_queue(chan, skb, tx_seq, sar); 3885525cd185SGustavo F. Padovan l2cap_check_srej_gap(chan, tx_seq); 38860a708f8fSGustavo F. Padovan 38870a708f8fSGustavo F. Padovan list_del(&first->list); 38880a708f8fSGustavo F. Padovan kfree(first); 38890a708f8fSGustavo F. Padovan 389039d5a3eeSGustavo F. Padovan if (list_empty(&chan->srej_l)) { 389142e5c802SGustavo F. Padovan chan->buffer_seq = chan->buffer_seq_srej; 3892e2ab4353SGustavo F. Padovan clear_bit(CONN_SREJ_SENT, &chan->conn_state); 3893525cd185SGustavo F. Padovan l2cap_send_ack(chan); 389449208c9cSGustavo F. Padovan BT_DBG("chan %p, Exit SREJ_SENT", chan); 38950a708f8fSGustavo F. Padovan } 38960a708f8fSGustavo F. Padovan } else { 38970a708f8fSGustavo F. Padovan struct srej_list *l; 38980a708f8fSGustavo F. Padovan 38990a708f8fSGustavo F. Padovan /* duplicated tx_seq */ 390042e5c802SGustavo F. Padovan if (l2cap_add_to_srej_queue(chan, skb, tx_seq, sar) < 0) 39010a708f8fSGustavo F. Padovan goto drop; 39020a708f8fSGustavo F. Padovan 390339d5a3eeSGustavo F. Padovan list_for_each_entry(l, &chan->srej_l, list) { 39040a708f8fSGustavo F. Padovan if (l->tx_seq == tx_seq) { 3905525cd185SGustavo F. Padovan l2cap_resend_srejframe(chan, tx_seq); 39060a708f8fSGustavo F. Padovan return 0; 39070a708f8fSGustavo F. Padovan } 39080a708f8fSGustavo F. Padovan } 3909aef89f21SSzymon Janc 3910aef89f21SSzymon Janc err = l2cap_send_srejframe(chan, tx_seq); 3911aef89f21SSzymon Janc if (err < 0) { 3912aef89f21SSzymon Janc l2cap_send_disconn_req(chan->conn, chan, -err); 3913aef89f21SSzymon Janc return err; 3914aef89f21SSzymon Janc } 39150a708f8fSGustavo F. Padovan } 39160a708f8fSGustavo F. Padovan } else { 3917836be934SAndrei Emeltchenko expected_tx_seq_offset = __seq_offset(chan, 3918836be934SAndrei Emeltchenko chan->expected_tx_seq, chan->buffer_seq); 39190a708f8fSGustavo F. Padovan 39200a708f8fSGustavo F. Padovan /* duplicated tx_seq */ 39210a708f8fSGustavo F. Padovan if (tx_seq_offset < expected_tx_seq_offset) 39220a708f8fSGustavo F. Padovan goto drop; 39230a708f8fSGustavo F. Padovan 3924e2ab4353SGustavo F. Padovan set_bit(CONN_SREJ_SENT, &chan->conn_state); 39250a708f8fSGustavo F. Padovan 392649208c9cSGustavo F. Padovan BT_DBG("chan %p, Enter SREJ", chan); 39270a708f8fSGustavo F. Padovan 392839d5a3eeSGustavo F. Padovan INIT_LIST_HEAD(&chan->srej_l); 392942e5c802SGustavo F. Padovan chan->buffer_seq_srej = chan->buffer_seq; 39300a708f8fSGustavo F. Padovan 3931f1c6775bSGustavo F. Padovan __skb_queue_head_init(&chan->srej_q); 393242e5c802SGustavo F. Padovan l2cap_add_to_srej_queue(chan, skb, tx_seq, sar); 39330a708f8fSGustavo F. Padovan 39340ef3ef0fSSzymon Janc /* Set P-bit only if there are some I-frames to ack. */ 39350ef3ef0fSSzymon Janc if (__clear_ack_timer(chan)) 3936e2ab4353SGustavo F. Padovan set_bit(CONN_SEND_PBIT, &chan->conn_state); 39370a708f8fSGustavo F. Padovan 3938aef89f21SSzymon Janc err = l2cap_send_srejframe(chan, tx_seq); 3939aef89f21SSzymon Janc if (err < 0) { 3940aef89f21SSzymon Janc l2cap_send_disconn_req(chan->conn, chan, -err); 3941aef89f21SSzymon Janc return err; 3942aef89f21SSzymon Janc } 39430a708f8fSGustavo F. Padovan } 39440a708f8fSGustavo F. Padovan return 0; 39450a708f8fSGustavo F. Padovan 39460a708f8fSGustavo F. Padovan expected: 3947836be934SAndrei Emeltchenko chan->expected_tx_seq = __next_seq(chan, chan->expected_tx_seq); 39480a708f8fSGustavo F. Padovan 3949e2ab4353SGustavo F. Padovan if (test_bit(CONN_SREJ_SENT, &chan->conn_state)) { 39500a708f8fSGustavo F. Padovan bt_cb(skb)->tx_seq = tx_seq; 39510a708f8fSGustavo F. Padovan bt_cb(skb)->sar = sar; 3952f1c6775bSGustavo F. Padovan __skb_queue_tail(&chan->srej_q, skb); 39530a708f8fSGustavo F. Padovan return 0; 39540a708f8fSGustavo F. Padovan } 39550a708f8fSGustavo F. Padovan 395684084a31SMat Martineau err = l2cap_reassemble_sdu(chan, skb, rx_control); 3957836be934SAndrei Emeltchenko chan->buffer_seq = __next_seq(chan, chan->buffer_seq); 3958836be934SAndrei Emeltchenko 3959e328140fSMat Martineau if (err < 0) { 3960e328140fSMat Martineau l2cap_send_disconn_req(chan->conn, chan, ECONNRESET); 3961e328140fSMat Martineau return err; 3962e328140fSMat Martineau } 39630a708f8fSGustavo F. Padovan 396403f6715dSAndrei Emeltchenko if (__is_ctrl_final(chan, rx_control)) { 3965e2ab4353SGustavo F. Padovan if (!test_and_clear_bit(CONN_REJ_ACT, &chan->conn_state)) 3966525cd185SGustavo F. Padovan l2cap_retransmit_frames(chan); 39670a708f8fSGustavo F. Padovan } 39680a708f8fSGustavo F. Padovan 39690a708f8fSGustavo F. Padovan 39706a026610SGustavo F. Padovan chan->num_acked = (chan->num_acked + 1) % num_to_ack; 39716a026610SGustavo F. Padovan if (chan->num_acked == num_to_ack - 1) 3972525cd185SGustavo F. Padovan l2cap_send_ack(chan); 39734d611e4dSGustavo F. Padovan else 39744d611e4dSGustavo F. Padovan __set_ack_timer(chan); 39750a708f8fSGustavo F. Padovan 39760a708f8fSGustavo F. Padovan return 0; 39770a708f8fSGustavo F. Padovan 39780a708f8fSGustavo F. Padovan drop: 39790a708f8fSGustavo F. Padovan kfree_skb(skb); 39800a708f8fSGustavo F. Padovan return 0; 39810a708f8fSGustavo F. Padovan } 39820a708f8fSGustavo F. Padovan 398388843ab0SAndrei Emeltchenko static inline void l2cap_data_channel_rrframe(struct l2cap_chan *chan, u32 rx_control) 39840a708f8fSGustavo F. Padovan { 398588843ab0SAndrei Emeltchenko BT_DBG("chan %p, req_seq %d ctrl 0x%8.8x", chan, 39860b209faeSAndrei Emeltchenko __get_reqseq(chan, rx_control), rx_control); 39870a708f8fSGustavo F. Padovan 39880b209faeSAndrei Emeltchenko chan->expected_ack_seq = __get_reqseq(chan, rx_control); 398942e5c802SGustavo F. Padovan l2cap_drop_acked_frames(chan); 39900a708f8fSGustavo F. Padovan 3991e3781735SAndrei Emeltchenko if (__is_ctrl_poll(chan, rx_control)) { 3992e2ab4353SGustavo F. Padovan set_bit(CONN_SEND_FBIT, &chan->conn_state); 3993e2ab4353SGustavo F. Padovan if (test_bit(CONN_SREJ_SENT, &chan->conn_state)) { 3994e2ab4353SGustavo F. Padovan if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state) && 39956a026610SGustavo F. Padovan (chan->unacked_frames > 0)) 39961a09bcb9SGustavo F. Padovan __set_retrans_timer(chan); 39970a708f8fSGustavo F. Padovan 3998e2ab4353SGustavo F. Padovan clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 3999525cd185SGustavo F. Padovan l2cap_send_srejtail(chan); 40000a708f8fSGustavo F. Padovan } else { 4001525cd185SGustavo F. Padovan l2cap_send_i_or_rr_or_rnr(chan); 40020a708f8fSGustavo F. Padovan } 40030a708f8fSGustavo F. Padovan 400403f6715dSAndrei Emeltchenko } else if (__is_ctrl_final(chan, rx_control)) { 4005e2ab4353SGustavo F. Padovan clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 40060a708f8fSGustavo F. Padovan 4007e2ab4353SGustavo F. Padovan if (!test_and_clear_bit(CONN_REJ_ACT, &chan->conn_state)) 4008525cd185SGustavo F. Padovan l2cap_retransmit_frames(chan); 40090a708f8fSGustavo F. Padovan 40100a708f8fSGustavo F. Padovan } else { 4011e2ab4353SGustavo F. Padovan if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state) && 40126a026610SGustavo F. Padovan (chan->unacked_frames > 0)) 40131a09bcb9SGustavo F. Padovan __set_retrans_timer(chan); 40140a708f8fSGustavo F. Padovan 4015e2ab4353SGustavo F. Padovan clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 4016e2ab4353SGustavo F. Padovan if (test_bit(CONN_SREJ_SENT, &chan->conn_state)) 4017525cd185SGustavo F. Padovan l2cap_send_ack(chan); 40180a708f8fSGustavo F. Padovan else 4019525cd185SGustavo F. Padovan l2cap_ertm_send(chan); 40200a708f8fSGustavo F. Padovan } 40210a708f8fSGustavo F. Padovan } 40220a708f8fSGustavo F. Padovan 402388843ab0SAndrei Emeltchenko static inline void l2cap_data_channel_rejframe(struct l2cap_chan *chan, u32 rx_control) 40240a708f8fSGustavo F. Padovan { 40250b209faeSAndrei Emeltchenko u16 tx_seq = __get_reqseq(chan, rx_control); 40260a708f8fSGustavo F. Padovan 402788843ab0SAndrei Emeltchenko BT_DBG("chan %p, req_seq %d ctrl 0x%8.8x", chan, tx_seq, rx_control); 40280a708f8fSGustavo F. Padovan 4029e2ab4353SGustavo F. Padovan clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 40300a708f8fSGustavo F. Padovan 403142e5c802SGustavo F. Padovan chan->expected_ack_seq = tx_seq; 403242e5c802SGustavo F. Padovan l2cap_drop_acked_frames(chan); 40330a708f8fSGustavo F. Padovan 403403f6715dSAndrei Emeltchenko if (__is_ctrl_final(chan, rx_control)) { 4035e2ab4353SGustavo F. Padovan if (!test_and_clear_bit(CONN_REJ_ACT, &chan->conn_state)) 4036525cd185SGustavo F. Padovan l2cap_retransmit_frames(chan); 40370a708f8fSGustavo F. Padovan } else { 4038525cd185SGustavo F. Padovan l2cap_retransmit_frames(chan); 40390a708f8fSGustavo F. Padovan 4040e2ab4353SGustavo F. Padovan if (test_bit(CONN_WAIT_F, &chan->conn_state)) 4041e2ab4353SGustavo F. Padovan set_bit(CONN_REJ_ACT, &chan->conn_state); 40420a708f8fSGustavo F. Padovan } 40430a708f8fSGustavo F. Padovan } 404488843ab0SAndrei Emeltchenko static inline void l2cap_data_channel_srejframe(struct l2cap_chan *chan, u32 rx_control) 40450a708f8fSGustavo F. Padovan { 40460b209faeSAndrei Emeltchenko u16 tx_seq = __get_reqseq(chan, rx_control); 40470a708f8fSGustavo F. Padovan 404888843ab0SAndrei Emeltchenko BT_DBG("chan %p, req_seq %d ctrl 0x%8.8x", chan, tx_seq, rx_control); 40490a708f8fSGustavo F. Padovan 4050e2ab4353SGustavo F. Padovan clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 40510a708f8fSGustavo F. Padovan 4052e3781735SAndrei Emeltchenko if (__is_ctrl_poll(chan, rx_control)) { 405342e5c802SGustavo F. Padovan chan->expected_ack_seq = tx_seq; 405442e5c802SGustavo F. Padovan l2cap_drop_acked_frames(chan); 40550a708f8fSGustavo F. Padovan 4056e2ab4353SGustavo F. Padovan set_bit(CONN_SEND_FBIT, &chan->conn_state); 4057525cd185SGustavo F. Padovan l2cap_retransmit_one_frame(chan, tx_seq); 40580a708f8fSGustavo F. Padovan 4059525cd185SGustavo F. Padovan l2cap_ertm_send(chan); 40600a708f8fSGustavo F. Padovan 4061e2ab4353SGustavo F. Padovan if (test_bit(CONN_WAIT_F, &chan->conn_state)) { 40626a026610SGustavo F. Padovan chan->srej_save_reqseq = tx_seq; 4063e2ab4353SGustavo F. Padovan set_bit(CONN_SREJ_ACT, &chan->conn_state); 40640a708f8fSGustavo F. Padovan } 406503f6715dSAndrei Emeltchenko } else if (__is_ctrl_final(chan, rx_control)) { 4066e2ab4353SGustavo F. Padovan if (test_bit(CONN_SREJ_ACT, &chan->conn_state) && 40676a026610SGustavo F. Padovan chan->srej_save_reqseq == tx_seq) 4068e2ab4353SGustavo F. Padovan clear_bit(CONN_SREJ_ACT, &chan->conn_state); 40690a708f8fSGustavo F. Padovan else 4070525cd185SGustavo F. Padovan l2cap_retransmit_one_frame(chan, tx_seq); 40710a708f8fSGustavo F. Padovan } else { 4072525cd185SGustavo F. Padovan l2cap_retransmit_one_frame(chan, tx_seq); 4073e2ab4353SGustavo F. Padovan if (test_bit(CONN_WAIT_F, &chan->conn_state)) { 40746a026610SGustavo F. Padovan chan->srej_save_reqseq = tx_seq; 4075e2ab4353SGustavo F. Padovan set_bit(CONN_SREJ_ACT, &chan->conn_state); 40760a708f8fSGustavo F. Padovan } 40770a708f8fSGustavo F. Padovan } 40780a708f8fSGustavo F. Padovan } 40790a708f8fSGustavo F. Padovan 408088843ab0SAndrei Emeltchenko static inline void l2cap_data_channel_rnrframe(struct l2cap_chan *chan, u32 rx_control) 40810a708f8fSGustavo F. Padovan { 40820b209faeSAndrei Emeltchenko u16 tx_seq = __get_reqseq(chan, rx_control); 40830a708f8fSGustavo F. Padovan 408488843ab0SAndrei Emeltchenko BT_DBG("chan %p, req_seq %d ctrl 0x%8.8x", chan, tx_seq, rx_control); 40850a708f8fSGustavo F. Padovan 4086e2ab4353SGustavo F. Padovan set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 408742e5c802SGustavo F. Padovan chan->expected_ack_seq = tx_seq; 408842e5c802SGustavo F. Padovan l2cap_drop_acked_frames(chan); 40890a708f8fSGustavo F. Padovan 4090e3781735SAndrei Emeltchenko if (__is_ctrl_poll(chan, rx_control)) 4091e2ab4353SGustavo F. Padovan set_bit(CONN_SEND_FBIT, &chan->conn_state); 40920a708f8fSGustavo F. Padovan 4093e2ab4353SGustavo F. Padovan if (!test_bit(CONN_SREJ_SENT, &chan->conn_state)) { 40941a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 4095e3781735SAndrei Emeltchenko if (__is_ctrl_poll(chan, rx_control)) 4096525cd185SGustavo F. Padovan l2cap_send_rr_or_rnr(chan, L2CAP_CTRL_FINAL); 40970a708f8fSGustavo F. Padovan return; 40980a708f8fSGustavo F. Padovan } 40990a708f8fSGustavo F. Padovan 4100e3781735SAndrei Emeltchenko if (__is_ctrl_poll(chan, rx_control)) { 4101525cd185SGustavo F. Padovan l2cap_send_srejtail(chan); 4102ab784b73SAndrei Emeltchenko } else { 4103ab784b73SAndrei Emeltchenko rx_control = __set_ctrl_super(chan, L2CAP_SUPER_RR); 4104ab784b73SAndrei Emeltchenko l2cap_send_sframe(chan, rx_control); 4105ab784b73SAndrei Emeltchenko } 41060a708f8fSGustavo F. Padovan } 41070a708f8fSGustavo F. Padovan 410888843ab0SAndrei Emeltchenko static inline int l2cap_data_channel_sframe(struct l2cap_chan *chan, u32 rx_control, struct sk_buff *skb) 41090a708f8fSGustavo F. Padovan { 411088843ab0SAndrei Emeltchenko BT_DBG("chan %p rx_control 0x%8.8x len %d", chan, rx_control, skb->len); 41110a708f8fSGustavo F. Padovan 411203f6715dSAndrei Emeltchenko if (__is_ctrl_final(chan, rx_control) && 4113e2ab4353SGustavo F. Padovan test_bit(CONN_WAIT_F, &chan->conn_state)) { 41141a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 41156a026610SGustavo F. Padovan if (chan->unacked_frames > 0) 41161a09bcb9SGustavo F. Padovan __set_retrans_timer(chan); 4117e2ab4353SGustavo F. Padovan clear_bit(CONN_WAIT_F, &chan->conn_state); 41180a708f8fSGustavo F. Padovan } 41190a708f8fSGustavo F. Padovan 4120ab784b73SAndrei Emeltchenko switch (__get_ctrl_super(chan, rx_control)) { 4121ab784b73SAndrei Emeltchenko case L2CAP_SUPER_RR: 4122525cd185SGustavo F. Padovan l2cap_data_channel_rrframe(chan, rx_control); 41230a708f8fSGustavo F. Padovan break; 41240a708f8fSGustavo F. Padovan 4125ab784b73SAndrei Emeltchenko case L2CAP_SUPER_REJ: 4126525cd185SGustavo F. Padovan l2cap_data_channel_rejframe(chan, rx_control); 41270a708f8fSGustavo F. Padovan break; 41280a708f8fSGustavo F. Padovan 4129ab784b73SAndrei Emeltchenko case L2CAP_SUPER_SREJ: 4130525cd185SGustavo F. Padovan l2cap_data_channel_srejframe(chan, rx_control); 41310a708f8fSGustavo F. Padovan break; 41320a708f8fSGustavo F. Padovan 4133ab784b73SAndrei Emeltchenko case L2CAP_SUPER_RNR: 4134525cd185SGustavo F. Padovan l2cap_data_channel_rnrframe(chan, rx_control); 41350a708f8fSGustavo F. Padovan break; 41360a708f8fSGustavo F. Padovan } 41370a708f8fSGustavo F. Padovan 41380a708f8fSGustavo F. Padovan kfree_skb(skb); 41390a708f8fSGustavo F. Padovan return 0; 41400a708f8fSGustavo F. Padovan } 41410a708f8fSGustavo F. Padovan 41425ef8cb9eSAndrei Emeltchenko int l2cap_ertm_data_rcv(struct l2cap_chan *chan, struct sk_buff *skb) 41430a708f8fSGustavo F. Padovan { 414488843ab0SAndrei Emeltchenko u32 control; 41450b209faeSAndrei Emeltchenko u16 req_seq; 41460a708f8fSGustavo F. Padovan int len, next_tx_seq_offset, req_seq_offset; 41470a708f8fSGustavo F. Padovan 414888843ab0SAndrei Emeltchenko control = __get_control(chan, skb->data); 414988843ab0SAndrei Emeltchenko skb_pull(skb, __ctrl_size(chan)); 41500a708f8fSGustavo F. Padovan len = skb->len; 41510a708f8fSGustavo F. Padovan 41520a708f8fSGustavo F. Padovan /* 41530a708f8fSGustavo F. Padovan * We can just drop the corrupted I-frame here. 41540a708f8fSGustavo F. Padovan * Receiver will miss it and start proper recovery 41550a708f8fSGustavo F. Padovan * procedures and ask retransmission. 41560a708f8fSGustavo F. Padovan */ 415747d1ec61SGustavo F. Padovan if (l2cap_check_fcs(chan, skb)) 41580a708f8fSGustavo F. Padovan goto drop; 41590a708f8fSGustavo F. Padovan 4160793c2f1cSAndrei Emeltchenko if (__is_sar_start(chan, control) && !__is_sframe(chan, control)) 416103a51213SAndrei Emeltchenko len -= L2CAP_SDULEN_SIZE; 41620a708f8fSGustavo F. Padovan 416347d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 416403a51213SAndrei Emeltchenko len -= L2CAP_FCS_SIZE; 41650a708f8fSGustavo F. Padovan 416647d1ec61SGustavo F. Padovan if (len > chan->mps) { 41678c1d787bSGustavo F. Padovan l2cap_send_disconn_req(chan->conn, chan, ECONNRESET); 41680a708f8fSGustavo F. Padovan goto drop; 41690a708f8fSGustavo F. Padovan } 41700a708f8fSGustavo F. Padovan 41710b209faeSAndrei Emeltchenko req_seq = __get_reqseq(chan, control); 41720a708f8fSGustavo F. Padovan 4173836be934SAndrei Emeltchenko req_seq_offset = __seq_offset(chan, req_seq, chan->expected_ack_seq); 4174836be934SAndrei Emeltchenko 4175836be934SAndrei Emeltchenko next_tx_seq_offset = __seq_offset(chan, chan->next_tx_seq, 4176836be934SAndrei Emeltchenko chan->expected_ack_seq); 41770a708f8fSGustavo F. Padovan 41780a708f8fSGustavo F. Padovan /* check for invalid req-seq */ 41790a708f8fSGustavo F. Padovan if (req_seq_offset > next_tx_seq_offset) { 41808c1d787bSGustavo F. Padovan l2cap_send_disconn_req(chan->conn, chan, ECONNRESET); 41810a708f8fSGustavo F. Padovan goto drop; 41820a708f8fSGustavo F. Padovan } 41830a708f8fSGustavo F. Padovan 4184793c2f1cSAndrei Emeltchenko if (!__is_sframe(chan, control)) { 41850a708f8fSGustavo F. Padovan if (len < 0) { 41868c1d787bSGustavo F. Padovan l2cap_send_disconn_req(chan->conn, chan, ECONNRESET); 41870a708f8fSGustavo F. Padovan goto drop; 41880a708f8fSGustavo F. Padovan } 41890a708f8fSGustavo F. Padovan 4190525cd185SGustavo F. Padovan l2cap_data_channel_iframe(chan, control, skb); 41910a708f8fSGustavo F. Padovan } else { 41920a708f8fSGustavo F. Padovan if (len != 0) { 41930a708f8fSGustavo F. Padovan BT_ERR("%d", len); 41948c1d787bSGustavo F. Padovan l2cap_send_disconn_req(chan->conn, chan, ECONNRESET); 41950a708f8fSGustavo F. Padovan goto drop; 41960a708f8fSGustavo F. Padovan } 41970a708f8fSGustavo F. Padovan 4198525cd185SGustavo F. Padovan l2cap_data_channel_sframe(chan, control, skb); 41990a708f8fSGustavo F. Padovan } 42000a708f8fSGustavo F. Padovan 42010a708f8fSGustavo F. Padovan return 0; 42020a708f8fSGustavo F. Padovan 42030a708f8fSGustavo F. Padovan drop: 42040a708f8fSGustavo F. Padovan kfree_skb(skb); 42050a708f8fSGustavo F. Padovan return 0; 42060a708f8fSGustavo F. Padovan } 42070a708f8fSGustavo F. Padovan 42080a708f8fSGustavo F. Padovan static inline int l2cap_data_channel(struct l2cap_conn *conn, u16 cid, struct sk_buff *skb) 42090a708f8fSGustavo F. Padovan { 421048454079SGustavo F. Padovan struct l2cap_chan *chan; 4211bf734843SDavid S. Miller struct sock *sk = NULL; 421288843ab0SAndrei Emeltchenko u32 control; 4213fb45de7dSAndrei Emeltchenko u16 tx_seq; 42140a708f8fSGustavo F. Padovan int len; 42150a708f8fSGustavo F. Padovan 4216baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, cid); 421748454079SGustavo F. Padovan if (!chan) { 42180a708f8fSGustavo F. Padovan BT_DBG("unknown cid 0x%4.4x", cid); 42190a708f8fSGustavo F. Padovan goto drop; 42200a708f8fSGustavo F. Padovan } 42210a708f8fSGustavo F. Padovan 422248454079SGustavo F. Padovan sk = chan->sk; 42230a708f8fSGustavo F. Padovan 422449208c9cSGustavo F. Padovan BT_DBG("chan %p, len %d", chan, skb->len); 42250a708f8fSGustavo F. Padovan 422689bc500eSGustavo F. Padovan if (chan->state != BT_CONNECTED) 42270a708f8fSGustavo F. Padovan goto drop; 42280a708f8fSGustavo F. Padovan 42290c1bc5c6SGustavo F. Padovan switch (chan->mode) { 42300a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 42310a708f8fSGustavo F. Padovan /* If socket recv buffers overflows we drop data here 42320a708f8fSGustavo F. Padovan * which is *bad* because L2CAP has to be reliable. 42330a708f8fSGustavo F. Padovan * But we don't have any other choice. L2CAP doesn't 42340a708f8fSGustavo F. Padovan * provide flow control mechanism. */ 42350a708f8fSGustavo F. Padovan 42360c1bc5c6SGustavo F. Padovan if (chan->imtu < skb->len) 42370a708f8fSGustavo F. Padovan goto drop; 42380a708f8fSGustavo F. Padovan 423923070494SGustavo F. Padovan if (!chan->ops->recv(chan->data, skb)) 42400a708f8fSGustavo F. Padovan goto done; 42410a708f8fSGustavo F. Padovan break; 42420a708f8fSGustavo F. Padovan 42430a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 42445ef8cb9eSAndrei Emeltchenko l2cap_ertm_data_rcv(chan, skb); 42450a708f8fSGustavo F. Padovan 42460a708f8fSGustavo F. Padovan goto done; 42470a708f8fSGustavo F. Padovan 42480a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 424988843ab0SAndrei Emeltchenko control = __get_control(chan, skb->data); 425088843ab0SAndrei Emeltchenko skb_pull(skb, __ctrl_size(chan)); 42510a708f8fSGustavo F. Padovan len = skb->len; 42520a708f8fSGustavo F. Padovan 425347d1ec61SGustavo F. Padovan if (l2cap_check_fcs(chan, skb)) 42540a708f8fSGustavo F. Padovan goto drop; 42550a708f8fSGustavo F. Padovan 42567e0ef6eeSAndrei Emeltchenko if (__is_sar_start(chan, control)) 425703a51213SAndrei Emeltchenko len -= L2CAP_SDULEN_SIZE; 42580a708f8fSGustavo F. Padovan 425947d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 426003a51213SAndrei Emeltchenko len -= L2CAP_FCS_SIZE; 42610a708f8fSGustavo F. Padovan 4262793c2f1cSAndrei Emeltchenko if (len > chan->mps || len < 0 || __is_sframe(chan, control)) 42630a708f8fSGustavo F. Padovan goto drop; 42640a708f8fSGustavo F. Padovan 4265fb45de7dSAndrei Emeltchenko tx_seq = __get_txseq(chan, control); 42660a708f8fSGustavo F. Padovan 426784084a31SMat Martineau if (chan->expected_tx_seq != tx_seq) { 426884084a31SMat Martineau /* Frame(s) missing - must discard partial SDU */ 426984084a31SMat Martineau kfree_skb(chan->sdu); 427084084a31SMat Martineau chan->sdu = NULL; 427184084a31SMat Martineau chan->sdu_last_frag = NULL; 427284084a31SMat Martineau chan->sdu_len = 0; 427384084a31SMat Martineau 427484084a31SMat Martineau /* TODO: Notify userland of missing data */ 427584084a31SMat Martineau } 427684084a31SMat Martineau 4277836be934SAndrei Emeltchenko chan->expected_tx_seq = __next_seq(chan, tx_seq); 42780a708f8fSGustavo F. Padovan 427984084a31SMat Martineau if (l2cap_reassemble_sdu(chan, skb, control) == -EMSGSIZE) 428084084a31SMat Martineau l2cap_send_disconn_req(chan->conn, chan, ECONNRESET); 42810a708f8fSGustavo F. Padovan 42820a708f8fSGustavo F. Padovan goto done; 42830a708f8fSGustavo F. Padovan 42840a708f8fSGustavo F. Padovan default: 42850c1bc5c6SGustavo F. Padovan BT_DBG("chan %p: bad mode 0x%2.2x", chan, chan->mode); 42860a708f8fSGustavo F. Padovan break; 42870a708f8fSGustavo F. Padovan } 42880a708f8fSGustavo F. Padovan 42890a708f8fSGustavo F. Padovan drop: 42900a708f8fSGustavo F. Padovan kfree_skb(skb); 42910a708f8fSGustavo F. Padovan 42920a708f8fSGustavo F. Padovan done: 42930a708f8fSGustavo F. Padovan if (sk) 4294aa2ac881SGustavo F. Padovan release_sock(sk); 42950a708f8fSGustavo F. Padovan 42960a708f8fSGustavo F. Padovan return 0; 42970a708f8fSGustavo F. Padovan } 42980a708f8fSGustavo F. Padovan 42990a708f8fSGustavo F. Padovan static inline int l2cap_conless_channel(struct l2cap_conn *conn, __le16 psm, struct sk_buff *skb) 43000a708f8fSGustavo F. Padovan { 43016dcae1eaSDavid S. Miller struct sock *sk = NULL; 430223691d75SGustavo F. Padovan struct l2cap_chan *chan; 43030a708f8fSGustavo F. Padovan 430423691d75SGustavo F. Padovan chan = l2cap_global_chan_by_psm(0, psm, conn->src); 430523691d75SGustavo F. Padovan if (!chan) 43060a708f8fSGustavo F. Padovan goto drop; 43070a708f8fSGustavo F. Padovan 430823691d75SGustavo F. Padovan sk = chan->sk; 430923691d75SGustavo F. Padovan 4310aa2ac881SGustavo F. Padovan lock_sock(sk); 43110a708f8fSGustavo F. Padovan 43120a708f8fSGustavo F. Padovan BT_DBG("sk %p, len %d", sk, skb->len); 43130a708f8fSGustavo F. Padovan 431489bc500eSGustavo F. Padovan if (chan->state != BT_BOUND && chan->state != BT_CONNECTED) 43150a708f8fSGustavo F. Padovan goto drop; 43160a708f8fSGustavo F. Padovan 4317e13e21dcSVinicius Costa Gomes if (chan->imtu < skb->len) 43180a708f8fSGustavo F. Padovan goto drop; 43190a708f8fSGustavo F. Padovan 432023070494SGustavo F. Padovan if (!chan->ops->recv(chan->data, skb)) 43210a708f8fSGustavo F. Padovan goto done; 43220a708f8fSGustavo F. Padovan 43230a708f8fSGustavo F. Padovan drop: 43240a708f8fSGustavo F. Padovan kfree_skb(skb); 43250a708f8fSGustavo F. Padovan 43260a708f8fSGustavo F. Padovan done: 43270a708f8fSGustavo F. Padovan if (sk) 4328aa2ac881SGustavo F. Padovan release_sock(sk); 43290a708f8fSGustavo F. Padovan return 0; 43300a708f8fSGustavo F. Padovan } 43310a708f8fSGustavo F. Padovan 43329f69bda6SGustavo F. Padovan static inline int l2cap_att_channel(struct l2cap_conn *conn, __le16 cid, struct sk_buff *skb) 43339f69bda6SGustavo F. Padovan { 43346dcae1eaSDavid S. Miller struct sock *sk = NULL; 433523691d75SGustavo F. Padovan struct l2cap_chan *chan; 43369f69bda6SGustavo F. Padovan 433723691d75SGustavo F. Padovan chan = l2cap_global_chan_by_scid(0, cid, conn->src); 433823691d75SGustavo F. Padovan if (!chan) 43399f69bda6SGustavo F. Padovan goto drop; 43409f69bda6SGustavo F. Padovan 434123691d75SGustavo F. Padovan sk = chan->sk; 434223691d75SGustavo F. Padovan 4343aa2ac881SGustavo F. Padovan lock_sock(sk); 43449f69bda6SGustavo F. Padovan 43459f69bda6SGustavo F. Padovan BT_DBG("sk %p, len %d", sk, skb->len); 43469f69bda6SGustavo F. Padovan 434789bc500eSGustavo F. Padovan if (chan->state != BT_BOUND && chan->state != BT_CONNECTED) 43489f69bda6SGustavo F. Padovan goto drop; 43499f69bda6SGustavo F. Padovan 4350e13e21dcSVinicius Costa Gomes if (chan->imtu < skb->len) 43519f69bda6SGustavo F. Padovan goto drop; 43529f69bda6SGustavo F. Padovan 435323070494SGustavo F. Padovan if (!chan->ops->recv(chan->data, skb)) 43549f69bda6SGustavo F. Padovan goto done; 43559f69bda6SGustavo F. Padovan 43569f69bda6SGustavo F. Padovan drop: 43579f69bda6SGustavo F. Padovan kfree_skb(skb); 43589f69bda6SGustavo F. Padovan 43599f69bda6SGustavo F. Padovan done: 43609f69bda6SGustavo F. Padovan if (sk) 4361aa2ac881SGustavo F. Padovan release_sock(sk); 43629f69bda6SGustavo F. Padovan return 0; 43639f69bda6SGustavo F. Padovan } 43649f69bda6SGustavo F. Padovan 43650a708f8fSGustavo F. Padovan static void l2cap_recv_frame(struct l2cap_conn *conn, struct sk_buff *skb) 43660a708f8fSGustavo F. Padovan { 43670a708f8fSGustavo F. Padovan struct l2cap_hdr *lh = (void *) skb->data; 43680a708f8fSGustavo F. Padovan u16 cid, len; 43690a708f8fSGustavo F. Padovan __le16 psm; 43700a708f8fSGustavo F. Padovan 43710a708f8fSGustavo F. Padovan skb_pull(skb, L2CAP_HDR_SIZE); 43720a708f8fSGustavo F. Padovan cid = __le16_to_cpu(lh->cid); 43730a708f8fSGustavo F. Padovan len = __le16_to_cpu(lh->len); 43740a708f8fSGustavo F. Padovan 43750a708f8fSGustavo F. Padovan if (len != skb->len) { 43760a708f8fSGustavo F. Padovan kfree_skb(skb); 43770a708f8fSGustavo F. Padovan return; 43780a708f8fSGustavo F. Padovan } 43790a708f8fSGustavo F. Padovan 43800a708f8fSGustavo F. Padovan BT_DBG("len %d, cid 0x%4.4x", len, cid); 43810a708f8fSGustavo F. Padovan 43820a708f8fSGustavo F. Padovan switch (cid) { 43833300d9a9SClaudio Takahasi case L2CAP_CID_LE_SIGNALING: 43840a708f8fSGustavo F. Padovan case L2CAP_CID_SIGNALING: 43850a708f8fSGustavo F. Padovan l2cap_sig_channel(conn, skb); 43860a708f8fSGustavo F. Padovan break; 43870a708f8fSGustavo F. Padovan 43880a708f8fSGustavo F. Padovan case L2CAP_CID_CONN_LESS: 43890a708f8fSGustavo F. Padovan psm = get_unaligned_le16(skb->data); 43900a708f8fSGustavo F. Padovan skb_pull(skb, 2); 43910a708f8fSGustavo F. Padovan l2cap_conless_channel(conn, psm, skb); 43920a708f8fSGustavo F. Padovan break; 43930a708f8fSGustavo F. Padovan 43949f69bda6SGustavo F. Padovan case L2CAP_CID_LE_DATA: 43959f69bda6SGustavo F. Padovan l2cap_att_channel(conn, cid, skb); 43969f69bda6SGustavo F. Padovan break; 43979f69bda6SGustavo F. Padovan 4398b501d6a1SAnderson Briglia case L2CAP_CID_SMP: 4399b501d6a1SAnderson Briglia if (smp_sig_channel(conn, skb)) 4400b501d6a1SAnderson Briglia l2cap_conn_del(conn->hcon, EACCES); 4401b501d6a1SAnderson Briglia break; 4402b501d6a1SAnderson Briglia 44030a708f8fSGustavo F. Padovan default: 44040a708f8fSGustavo F. Padovan l2cap_data_channel(conn, cid, skb); 44050a708f8fSGustavo F. Padovan break; 44060a708f8fSGustavo F. Padovan } 44070a708f8fSGustavo F. Padovan } 44080a708f8fSGustavo F. Padovan 44090a708f8fSGustavo F. Padovan /* ---- L2CAP interface with lower layer (HCI) ---- */ 44100a708f8fSGustavo F. Padovan 4411686ebf28SUlisses Furquim int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr) 44120a708f8fSGustavo F. Padovan { 44130a708f8fSGustavo F. Padovan int exact = 0, lm1 = 0, lm2 = 0; 441423691d75SGustavo F. Padovan struct l2cap_chan *c; 44150a708f8fSGustavo F. Padovan 44160a708f8fSGustavo F. Padovan BT_DBG("hdev %s, bdaddr %s", hdev->name, batostr(bdaddr)); 44170a708f8fSGustavo F. Padovan 44180a708f8fSGustavo F. Padovan /* Find listening sockets and check their link_mode */ 441923691d75SGustavo F. Padovan read_lock(&chan_list_lock); 442023691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 442123691d75SGustavo F. Padovan struct sock *sk = c->sk; 44224343478fSGustavo F. Padovan 442389bc500eSGustavo F. Padovan if (c->state != BT_LISTEN) 44240a708f8fSGustavo F. Padovan continue; 44250a708f8fSGustavo F. Padovan 44260a708f8fSGustavo F. Padovan if (!bacmp(&bt_sk(sk)->src, &hdev->bdaddr)) { 44270a708f8fSGustavo F. Padovan lm1 |= HCI_LM_ACCEPT; 442843bd0f32SAndrei Emeltchenko if (test_bit(FLAG_ROLE_SWITCH, &c->flags)) 44290a708f8fSGustavo F. Padovan lm1 |= HCI_LM_MASTER; 44300a708f8fSGustavo F. Padovan exact++; 44310a708f8fSGustavo F. Padovan } else if (!bacmp(&bt_sk(sk)->src, BDADDR_ANY)) { 44320a708f8fSGustavo F. Padovan lm2 |= HCI_LM_ACCEPT; 443343bd0f32SAndrei Emeltchenko if (test_bit(FLAG_ROLE_SWITCH, &c->flags)) 44340a708f8fSGustavo F. Padovan lm2 |= HCI_LM_MASTER; 44350a708f8fSGustavo F. Padovan } 44360a708f8fSGustavo F. Padovan } 443723691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 44380a708f8fSGustavo F. Padovan 44390a708f8fSGustavo F. Padovan return exact ? lm1 : lm2; 44400a708f8fSGustavo F. Padovan } 44410a708f8fSGustavo F. Padovan 4442686ebf28SUlisses Furquim int l2cap_connect_cfm(struct hci_conn *hcon, u8 status) 44430a708f8fSGustavo F. Padovan { 44440a708f8fSGustavo F. Padovan struct l2cap_conn *conn; 44450a708f8fSGustavo F. Padovan 44460a708f8fSGustavo F. Padovan BT_DBG("hcon %p bdaddr %s status %d", hcon, batostr(&hcon->dst), status); 44470a708f8fSGustavo F. Padovan 44480a708f8fSGustavo F. Padovan if (!status) { 44490a708f8fSGustavo F. Padovan conn = l2cap_conn_add(hcon, status); 44500a708f8fSGustavo F. Padovan if (conn) 44510a708f8fSGustavo F. Padovan l2cap_conn_ready(conn); 44520a708f8fSGustavo F. Padovan } else 4453e175072fSJoe Perches l2cap_conn_del(hcon, bt_to_errno(status)); 44540a708f8fSGustavo F. Padovan 44550a708f8fSGustavo F. Padovan return 0; 44560a708f8fSGustavo F. Padovan } 44570a708f8fSGustavo F. Padovan 4458686ebf28SUlisses Furquim int l2cap_disconn_ind(struct hci_conn *hcon) 44590a708f8fSGustavo F. Padovan { 44600a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 44610a708f8fSGustavo F. Padovan 44620a708f8fSGustavo F. Padovan BT_DBG("hcon %p", hcon); 44630a708f8fSGustavo F. Padovan 4464686ebf28SUlisses Furquim if (!conn) 44659f5a0d7bSAndrei Emeltchenko return HCI_ERROR_REMOTE_USER_TERM; 44660a708f8fSGustavo F. Padovan return conn->disc_reason; 44670a708f8fSGustavo F. Padovan } 44680a708f8fSGustavo F. Padovan 4469686ebf28SUlisses Furquim int l2cap_disconn_cfm(struct hci_conn *hcon, u8 reason) 44700a708f8fSGustavo F. Padovan { 44710a708f8fSGustavo F. Padovan BT_DBG("hcon %p reason %d", hcon, reason); 44720a708f8fSGustavo F. Padovan 4473e175072fSJoe Perches l2cap_conn_del(hcon, bt_to_errno(reason)); 44740a708f8fSGustavo F. Padovan return 0; 44750a708f8fSGustavo F. Padovan } 44760a708f8fSGustavo F. Padovan 44774343478fSGustavo F. Padovan static inline void l2cap_check_encryption(struct l2cap_chan *chan, u8 encrypt) 44780a708f8fSGustavo F. Padovan { 4479715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) 44800a708f8fSGustavo F. Padovan return; 44810a708f8fSGustavo F. Padovan 44820a708f8fSGustavo F. Padovan if (encrypt == 0x00) { 44834343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_MEDIUM) { 4484c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 4485b83ddfe2SAndrzej Kaczmarek __set_chan_timer(chan, 4486b83ddfe2SAndrzej Kaczmarek msecs_to_jiffies(L2CAP_ENC_TIMEOUT)); 44874343478fSGustavo F. Padovan } else if (chan->sec_level == BT_SECURITY_HIGH) 44880f852724SGustavo F. Padovan l2cap_chan_close(chan, ECONNREFUSED); 44890a708f8fSGustavo F. Padovan } else { 44904343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_MEDIUM) 4491c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 44920a708f8fSGustavo F. Padovan } 44930a708f8fSGustavo F. Padovan } 44940a708f8fSGustavo F. Padovan 4495686ebf28SUlisses Furquim int l2cap_security_cfm(struct hci_conn *hcon, u8 status, u8 encrypt) 44960a708f8fSGustavo F. Padovan { 44970a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 449848454079SGustavo F. Padovan struct l2cap_chan *chan; 44990a708f8fSGustavo F. Padovan 45000a708f8fSGustavo F. Padovan if (!conn) 45010a708f8fSGustavo F. Padovan return 0; 45020a708f8fSGustavo F. Padovan 45030a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 45040a708f8fSGustavo F. Padovan 4505160dc6acSVinicius Costa Gomes if (hcon->type == LE_LINK) { 4506160dc6acSVinicius Costa Gomes smp_distribute_keys(conn, 0); 4507371fd835SUlisses Furquim __cancel_delayed_work(&conn->security_timer); 4508160dc6acSVinicius Costa Gomes } 4509160dc6acSVinicius Costa Gomes 45103d57dc68SGustavo F. Padovan rcu_read_lock(); 45110a708f8fSGustavo F. Padovan 45123d57dc68SGustavo F. Padovan list_for_each_entry_rcu(chan, &conn->chan_l, list) { 451348454079SGustavo F. Padovan struct sock *sk = chan->sk; 4514baa7e1faSGustavo F. Padovan 45150a708f8fSGustavo F. Padovan bh_lock_sock(sk); 45160a708f8fSGustavo F. Padovan 4517f1cb9af5SVinicius Costa Gomes BT_DBG("chan->scid %d", chan->scid); 4518f1cb9af5SVinicius Costa Gomes 4519f1cb9af5SVinicius Costa Gomes if (chan->scid == L2CAP_CID_LE_DATA) { 4520f1cb9af5SVinicius Costa Gomes if (!status && encrypt) { 4521f1cb9af5SVinicius Costa Gomes chan->sec_level = hcon->sec_level; 4522f1cb9af5SVinicius Costa Gomes l2cap_chan_ready(sk); 4523f1cb9af5SVinicius Costa Gomes } 4524f1cb9af5SVinicius Costa Gomes 4525f1cb9af5SVinicius Costa Gomes bh_unlock_sock(sk); 4526f1cb9af5SVinicius Costa Gomes continue; 4527f1cb9af5SVinicius Costa Gomes } 4528f1cb9af5SVinicius Costa Gomes 4529c1360a1cSGustavo F. Padovan if (test_bit(CONF_CONNECT_PEND, &chan->conf_state)) { 45300a708f8fSGustavo F. Padovan bh_unlock_sock(sk); 45310a708f8fSGustavo F. Padovan continue; 45320a708f8fSGustavo F. Padovan } 45330a708f8fSGustavo F. Padovan 453489bc500eSGustavo F. Padovan if (!status && (chan->state == BT_CONNECTED || 453589bc500eSGustavo F. Padovan chan->state == BT_CONFIG)) { 45364343478fSGustavo F. Padovan l2cap_check_encryption(chan, encrypt); 45370a708f8fSGustavo F. Padovan bh_unlock_sock(sk); 45380a708f8fSGustavo F. Padovan continue; 45390a708f8fSGustavo F. Padovan } 45400a708f8fSGustavo F. Padovan 454189bc500eSGustavo F. Padovan if (chan->state == BT_CONNECT) { 45420a708f8fSGustavo F. Padovan if (!status) { 45430a708f8fSGustavo F. Padovan struct l2cap_conn_req req; 4544fe4128e0SGustavo F. Padovan req.scid = cpu_to_le16(chan->scid); 4545fe4128e0SGustavo F. Padovan req.psm = chan->psm; 45460a708f8fSGustavo F. Padovan 4547fc7f8a7eSGustavo F. Padovan chan->ident = l2cap_get_ident(conn); 4548c1360a1cSGustavo F. Padovan set_bit(CONF_CONNECT_PEND, &chan->conf_state); 45490a708f8fSGustavo F. Padovan 4550fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, 45510a708f8fSGustavo F. Padovan L2CAP_CONN_REQ, sizeof(req), &req); 45520a708f8fSGustavo F. Padovan } else { 4553c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 4554b83ddfe2SAndrzej Kaczmarek __set_chan_timer(chan, 4555b83ddfe2SAndrzej Kaczmarek msecs_to_jiffies(L2CAP_DISC_TIMEOUT)); 45560a708f8fSGustavo F. Padovan } 455789bc500eSGustavo F. Padovan } else if (chan->state == BT_CONNECT2) { 45580a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 4559df3c3931SJohan Hedberg __u16 res, stat; 45600a708f8fSGustavo F. Padovan 45610a708f8fSGustavo F. Padovan if (!status) { 4562df3c3931SJohan Hedberg if (bt_sk(sk)->defer_setup) { 4563df3c3931SJohan Hedberg struct sock *parent = bt_sk(sk)->parent; 4564df3c3931SJohan Hedberg res = L2CAP_CR_PEND; 4565df3c3931SJohan Hedberg stat = L2CAP_CS_AUTHOR_PEND; 456605e9a2f6SIlia Kolomisnky if (parent) 4567df3c3931SJohan Hedberg parent->sk_data_ready(parent, 0); 4568df3c3931SJohan Hedberg } else { 456989bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONFIG); 4570df3c3931SJohan Hedberg res = L2CAP_CR_SUCCESS; 4571df3c3931SJohan Hedberg stat = L2CAP_CS_NO_INFO; 4572df3c3931SJohan Hedberg } 45730a708f8fSGustavo F. Padovan } else { 457489bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_DISCONN); 4575b83ddfe2SAndrzej Kaczmarek __set_chan_timer(chan, 4576b83ddfe2SAndrzej Kaczmarek msecs_to_jiffies(L2CAP_DISC_TIMEOUT)); 4577df3c3931SJohan Hedberg res = L2CAP_CR_SEC_BLOCK; 4578df3c3931SJohan Hedberg stat = L2CAP_CS_NO_INFO; 45790a708f8fSGustavo F. Padovan } 45800a708f8fSGustavo F. Padovan 4581fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 4582fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 4583df3c3931SJohan Hedberg rsp.result = cpu_to_le16(res); 4584df3c3931SJohan Hedberg rsp.status = cpu_to_le16(stat); 4585fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 4586fc7f8a7eSGustavo F. Padovan sizeof(rsp), &rsp); 45870a708f8fSGustavo F. Padovan } 45880a708f8fSGustavo F. Padovan 45890a708f8fSGustavo F. Padovan bh_unlock_sock(sk); 45900a708f8fSGustavo F. Padovan } 45910a708f8fSGustavo F. Padovan 45923d57dc68SGustavo F. Padovan rcu_read_unlock(); 45930a708f8fSGustavo F. Padovan 45940a708f8fSGustavo F. Padovan return 0; 45950a708f8fSGustavo F. Padovan } 45960a708f8fSGustavo F. Padovan 4597686ebf28SUlisses Furquim int l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags) 45980a708f8fSGustavo F. Padovan { 45990a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 46000a708f8fSGustavo F. Padovan 46010a708f8fSGustavo F. Padovan if (!conn) 46020a708f8fSGustavo F. Padovan conn = l2cap_conn_add(hcon, 0); 46030a708f8fSGustavo F. Padovan 46040a708f8fSGustavo F. Padovan if (!conn) 46050a708f8fSGustavo F. Padovan goto drop; 46060a708f8fSGustavo F. Padovan 46070a708f8fSGustavo F. Padovan BT_DBG("conn %p len %d flags 0x%x", conn, skb->len, flags); 46080a708f8fSGustavo F. Padovan 46090a708f8fSGustavo F. Padovan if (!(flags & ACL_CONT)) { 46100a708f8fSGustavo F. Padovan struct l2cap_hdr *hdr; 461148454079SGustavo F. Padovan struct l2cap_chan *chan; 46120a708f8fSGustavo F. Padovan u16 cid; 46130a708f8fSGustavo F. Padovan int len; 46140a708f8fSGustavo F. Padovan 46150a708f8fSGustavo F. Padovan if (conn->rx_len) { 46160a708f8fSGustavo F. Padovan BT_ERR("Unexpected start frame (len %d)", skb->len); 46170a708f8fSGustavo F. Padovan kfree_skb(conn->rx_skb); 46180a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 46190a708f8fSGustavo F. Padovan conn->rx_len = 0; 46200a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 46210a708f8fSGustavo F. Padovan } 46220a708f8fSGustavo F. Padovan 46230a708f8fSGustavo F. Padovan /* Start fragment always begin with Basic L2CAP header */ 46240a708f8fSGustavo F. Padovan if (skb->len < L2CAP_HDR_SIZE) { 46250a708f8fSGustavo F. Padovan BT_ERR("Frame is too short (len %d)", skb->len); 46260a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 46270a708f8fSGustavo F. Padovan goto drop; 46280a708f8fSGustavo F. Padovan } 46290a708f8fSGustavo F. Padovan 46300a708f8fSGustavo F. Padovan hdr = (struct l2cap_hdr *) skb->data; 46310a708f8fSGustavo F. Padovan len = __le16_to_cpu(hdr->len) + L2CAP_HDR_SIZE; 46320a708f8fSGustavo F. Padovan cid = __le16_to_cpu(hdr->cid); 46330a708f8fSGustavo F. Padovan 46340a708f8fSGustavo F. Padovan if (len == skb->len) { 46350a708f8fSGustavo F. Padovan /* Complete frame received */ 46360a708f8fSGustavo F. Padovan l2cap_recv_frame(conn, skb); 46370a708f8fSGustavo F. Padovan return 0; 46380a708f8fSGustavo F. Padovan } 46390a708f8fSGustavo F. Padovan 46400a708f8fSGustavo F. Padovan BT_DBG("Start: total len %d, frag len %d", len, skb->len); 46410a708f8fSGustavo F. Padovan 46420a708f8fSGustavo F. Padovan if (skb->len > len) { 46430a708f8fSGustavo F. Padovan BT_ERR("Frame is too long (len %d, expected len %d)", 46440a708f8fSGustavo F. Padovan skb->len, len); 46450a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 46460a708f8fSGustavo F. Padovan goto drop; 46470a708f8fSGustavo F. Padovan } 46480a708f8fSGustavo F. Padovan 4649baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, cid); 46500a708f8fSGustavo F. Padovan 465148454079SGustavo F. Padovan if (chan && chan->sk) { 465248454079SGustavo F. Padovan struct sock *sk = chan->sk; 465348454079SGustavo F. Padovan 46540c1bc5c6SGustavo F. Padovan if (chan->imtu < len - L2CAP_HDR_SIZE) { 465548454079SGustavo F. Padovan BT_ERR("Frame exceeding recv MTU (len %d, " 465648454079SGustavo F. Padovan "MTU %d)", len, 46570c1bc5c6SGustavo F. Padovan chan->imtu); 4658aa2ac881SGustavo F. Padovan release_sock(sk); 46590a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 46600a708f8fSGustavo F. Padovan goto drop; 46610a708f8fSGustavo F. Padovan } 4662aa2ac881SGustavo F. Padovan release_sock(sk); 466348454079SGustavo F. Padovan } 46640a708f8fSGustavo F. Padovan 46650a708f8fSGustavo F. Padovan /* Allocate skb for the complete frame (with header) */ 46660a708f8fSGustavo F. Padovan conn->rx_skb = bt_skb_alloc(len, GFP_ATOMIC); 46670a708f8fSGustavo F. Padovan if (!conn->rx_skb) 46680a708f8fSGustavo F. Padovan goto drop; 46690a708f8fSGustavo F. Padovan 46700a708f8fSGustavo F. Padovan skb_copy_from_linear_data(skb, skb_put(conn->rx_skb, skb->len), 46710a708f8fSGustavo F. Padovan skb->len); 46720a708f8fSGustavo F. Padovan conn->rx_len = len - skb->len; 46730a708f8fSGustavo F. Padovan } else { 46740a708f8fSGustavo F. Padovan BT_DBG("Cont: frag len %d (expecting %d)", skb->len, conn->rx_len); 46750a708f8fSGustavo F. Padovan 46760a708f8fSGustavo F. Padovan if (!conn->rx_len) { 46770a708f8fSGustavo F. Padovan BT_ERR("Unexpected continuation frame (len %d)", skb->len); 46780a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 46790a708f8fSGustavo F. Padovan goto drop; 46800a708f8fSGustavo F. Padovan } 46810a708f8fSGustavo F. Padovan 46820a708f8fSGustavo F. Padovan if (skb->len > conn->rx_len) { 46830a708f8fSGustavo F. Padovan BT_ERR("Fragment is too long (len %d, expected %d)", 46840a708f8fSGustavo F. Padovan skb->len, conn->rx_len); 46850a708f8fSGustavo F. Padovan kfree_skb(conn->rx_skb); 46860a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 46870a708f8fSGustavo F. Padovan conn->rx_len = 0; 46880a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 46890a708f8fSGustavo F. Padovan goto drop; 46900a708f8fSGustavo F. Padovan } 46910a708f8fSGustavo F. Padovan 46920a708f8fSGustavo F. Padovan skb_copy_from_linear_data(skb, skb_put(conn->rx_skb, skb->len), 46930a708f8fSGustavo F. Padovan skb->len); 46940a708f8fSGustavo F. Padovan conn->rx_len -= skb->len; 46950a708f8fSGustavo F. Padovan 46960a708f8fSGustavo F. Padovan if (!conn->rx_len) { 46970a708f8fSGustavo F. Padovan /* Complete frame received */ 46980a708f8fSGustavo F. Padovan l2cap_recv_frame(conn, conn->rx_skb); 46990a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 47000a708f8fSGustavo F. Padovan } 47010a708f8fSGustavo F. Padovan } 47020a708f8fSGustavo F. Padovan 47030a708f8fSGustavo F. Padovan drop: 47040a708f8fSGustavo F. Padovan kfree_skb(skb); 47050a708f8fSGustavo F. Padovan return 0; 47060a708f8fSGustavo F. Padovan } 47070a708f8fSGustavo F. Padovan 47080a708f8fSGustavo F. Padovan static int l2cap_debugfs_show(struct seq_file *f, void *p) 47090a708f8fSGustavo F. Padovan { 471023691d75SGustavo F. Padovan struct l2cap_chan *c; 47110a708f8fSGustavo F. Padovan 4712333055f2SGustavo F. Padovan read_lock(&chan_list_lock); 47130a708f8fSGustavo F. Padovan 471423691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 471523691d75SGustavo F. Padovan struct sock *sk = c->sk; 47160a708f8fSGustavo F. Padovan 4717903d343eSGustavo F. Padovan seq_printf(f, "%s %s %d %d 0x%4.4x 0x%4.4x %d %d %d %d\n", 47180a708f8fSGustavo F. Padovan batostr(&bt_sk(sk)->src), 47190a708f8fSGustavo F. Padovan batostr(&bt_sk(sk)->dst), 472089bc500eSGustavo F. Padovan c->state, __le16_to_cpu(c->psm), 472123691d75SGustavo F. Padovan c->scid, c->dcid, c->imtu, c->omtu, 472223691d75SGustavo F. Padovan c->sec_level, c->mode); 47230a708f8fSGustavo F. Padovan } 47240a708f8fSGustavo F. Padovan 4725333055f2SGustavo F. Padovan read_unlock(&chan_list_lock); 47260a708f8fSGustavo F. Padovan 47270a708f8fSGustavo F. Padovan return 0; 47280a708f8fSGustavo F. Padovan } 47290a708f8fSGustavo F. Padovan 47300a708f8fSGustavo F. Padovan static int l2cap_debugfs_open(struct inode *inode, struct file *file) 47310a708f8fSGustavo F. Padovan { 47320a708f8fSGustavo F. Padovan return single_open(file, l2cap_debugfs_show, inode->i_private); 47330a708f8fSGustavo F. Padovan } 47340a708f8fSGustavo F. Padovan 47350a708f8fSGustavo F. Padovan static const struct file_operations l2cap_debugfs_fops = { 47360a708f8fSGustavo F. Padovan .open = l2cap_debugfs_open, 47370a708f8fSGustavo F. Padovan .read = seq_read, 47380a708f8fSGustavo F. Padovan .llseek = seq_lseek, 47390a708f8fSGustavo F. Padovan .release = single_release, 47400a708f8fSGustavo F. Padovan }; 47410a708f8fSGustavo F. Padovan 47420a708f8fSGustavo F. Padovan static struct dentry *l2cap_debugfs; 47430a708f8fSGustavo F. Padovan 474464274518SGustavo F. Padovan int __init l2cap_init(void) 47450a708f8fSGustavo F. Padovan { 47460a708f8fSGustavo F. Padovan int err; 47470a708f8fSGustavo F. Padovan 4748bb58f747SGustavo F. Padovan err = l2cap_init_sockets(); 47490a708f8fSGustavo F. Padovan if (err < 0) 47500a708f8fSGustavo F. Padovan return err; 47510a708f8fSGustavo F. Padovan 47520a708f8fSGustavo F. Padovan if (bt_debugfs) { 47530a708f8fSGustavo F. Padovan l2cap_debugfs = debugfs_create_file("l2cap", 0444, 47540a708f8fSGustavo F. Padovan bt_debugfs, NULL, &l2cap_debugfs_fops); 47550a708f8fSGustavo F. Padovan if (!l2cap_debugfs) 47560a708f8fSGustavo F. Padovan BT_ERR("Failed to create L2CAP debug file"); 47570a708f8fSGustavo F. Padovan } 47580a708f8fSGustavo F. Padovan 47590a708f8fSGustavo F. Padovan return 0; 47600a708f8fSGustavo F. Padovan } 47610a708f8fSGustavo F. Padovan 476264274518SGustavo F. Padovan void l2cap_exit(void) 47630a708f8fSGustavo F. Padovan { 47640a708f8fSGustavo F. Padovan debugfs_remove(l2cap_debugfs); 4765bb58f747SGustavo F. Padovan l2cap_cleanup_sockets(); 47660a708f8fSGustavo F. Padovan } 47670a708f8fSGustavo F. Padovan 47680a708f8fSGustavo F. Padovan module_param(disable_ertm, bool, 0644); 47690a708f8fSGustavo F. Padovan MODULE_PARM_DESC(disable_ertm, "Disable enhanced retransmission mode"); 4770