10a708f8fSGustavo F. Padovan /* 20a708f8fSGustavo F. Padovan BlueZ - Bluetooth protocol stack for Linux 30a708f8fSGustavo F. Padovan Copyright (C) 2000-2001 Qualcomm Incorporated 40a708f8fSGustavo F. Padovan Copyright (C) 2009-2010 Gustavo F. Padovan <gustavo@padovan.org> 50a708f8fSGustavo F. Padovan Copyright (C) 2010 Google Inc. 6590051deSGustavo F. Padovan Copyright (C) 2011 ProFUSION Embedded Systems 70a708f8fSGustavo F. Padovan 80a708f8fSGustavo F. Padovan Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com> 90a708f8fSGustavo F. Padovan 100a708f8fSGustavo F. Padovan This program is free software; you can redistribute it and/or modify 110a708f8fSGustavo F. Padovan it under the terms of the GNU General Public License version 2 as 120a708f8fSGustavo F. Padovan published by the Free Software Foundation; 130a708f8fSGustavo F. Padovan 140a708f8fSGustavo F. Padovan THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS 150a708f8fSGustavo F. Padovan OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 160a708f8fSGustavo F. Padovan FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS. 170a708f8fSGustavo F. Padovan IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY 180a708f8fSGustavo F. Padovan CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES 190a708f8fSGustavo F. Padovan WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 200a708f8fSGustavo F. Padovan ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 210a708f8fSGustavo F. Padovan OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 220a708f8fSGustavo F. Padovan 230a708f8fSGustavo F. Padovan ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS, 240a708f8fSGustavo F. Padovan COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS 250a708f8fSGustavo F. Padovan SOFTWARE IS DISCLAIMED. 260a708f8fSGustavo F. Padovan */ 270a708f8fSGustavo F. Padovan 28bb58f747SGustavo F. Padovan /* Bluetooth L2CAP core. */ 290a708f8fSGustavo F. Padovan 300a708f8fSGustavo F. Padovan #include <linux/module.h> 310a708f8fSGustavo F. Padovan 320a708f8fSGustavo F. Padovan #include <linux/types.h> 330a708f8fSGustavo F. Padovan #include <linux/capability.h> 340a708f8fSGustavo F. Padovan #include <linux/errno.h> 350a708f8fSGustavo F. Padovan #include <linux/kernel.h> 360a708f8fSGustavo F. Padovan #include <linux/sched.h> 370a708f8fSGustavo F. Padovan #include <linux/slab.h> 380a708f8fSGustavo F. Padovan #include <linux/poll.h> 390a708f8fSGustavo F. Padovan #include <linux/fcntl.h> 400a708f8fSGustavo F. Padovan #include <linux/init.h> 410a708f8fSGustavo F. Padovan #include <linux/interrupt.h> 420a708f8fSGustavo F. Padovan #include <linux/socket.h> 430a708f8fSGustavo F. Padovan #include <linux/skbuff.h> 440a708f8fSGustavo F. Padovan #include <linux/list.h> 450a708f8fSGustavo F. Padovan #include <linux/device.h> 460a708f8fSGustavo F. Padovan #include <linux/debugfs.h> 470a708f8fSGustavo F. Padovan #include <linux/seq_file.h> 480a708f8fSGustavo F. Padovan #include <linux/uaccess.h> 490a708f8fSGustavo F. Padovan #include <linux/crc16.h> 500a708f8fSGustavo F. Padovan #include <net/sock.h> 510a708f8fSGustavo F. Padovan 520a708f8fSGustavo F. Padovan #include <asm/system.h> 530a708f8fSGustavo F. Padovan #include <asm/unaligned.h> 540a708f8fSGustavo F. Padovan 550a708f8fSGustavo F. Padovan #include <net/bluetooth/bluetooth.h> 560a708f8fSGustavo F. Padovan #include <net/bluetooth/hci_core.h> 570a708f8fSGustavo F. Padovan #include <net/bluetooth/l2cap.h> 58b501d6a1SAnderson Briglia #include <net/bluetooth/smp.h> 590a708f8fSGustavo F. Padovan 60eb939922SRusty Russell bool disable_ertm; 610a708f8fSGustavo F. Padovan 620a708f8fSGustavo F. Padovan static u32 l2cap_feat_mask = L2CAP_FEAT_FIXED_CHAN; 6350a147cdSMat Martineau static u8 l2cap_fixed_chan[8] = { L2CAP_FC_L2CAP, }; 640a708f8fSGustavo F. Padovan 65b5ad8b7fSJohannes Berg static LIST_HEAD(chan_list); 66b5ad8b7fSJohannes Berg static DEFINE_RWLOCK(chan_list_lock); 670a708f8fSGustavo F. Padovan 680a708f8fSGustavo F. Padovan static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn, 690a708f8fSGustavo F. Padovan u8 code, u8 ident, u16 dlen, void *data); 704519de9aSGustavo F. Padovan static void l2cap_send_cmd(struct l2cap_conn *conn, u8 ident, u8 code, u16 len, 714519de9aSGustavo F. Padovan void *data); 72710f9b0aSGustavo F. Padovan static int l2cap_build_conf_req(struct l2cap_chan *chan, void *data); 734519de9aSGustavo F. Padovan static void l2cap_send_disconn_req(struct l2cap_conn *conn, 744519de9aSGustavo F. Padovan struct l2cap_chan *chan, int err); 750a708f8fSGustavo F. Padovan 760a708f8fSGustavo F. Padovan /* ---- L2CAP channels ---- */ 7771ba0e56SGustavo F. Padovan 78baa7e1faSGustavo F. Padovan static struct l2cap_chan *__l2cap_get_chan_by_dcid(struct l2cap_conn *conn, u16 cid) 790a708f8fSGustavo F. Padovan { 803d57dc68SGustavo F. Padovan struct l2cap_chan *c, *r = NULL; 81baa7e1faSGustavo F. Padovan 823d57dc68SGustavo F. Padovan rcu_read_lock(); 833d57dc68SGustavo F. Padovan 843d57dc68SGustavo F. Padovan list_for_each_entry_rcu(c, &conn->chan_l, list) { 853d57dc68SGustavo F. Padovan if (c->dcid == cid) { 863d57dc68SGustavo F. Padovan r = c; 873d57dc68SGustavo F. Padovan break; 880a708f8fSGustavo F. Padovan } 893d57dc68SGustavo F. Padovan } 903d57dc68SGustavo F. Padovan 913d57dc68SGustavo F. Padovan rcu_read_unlock(); 923d57dc68SGustavo F. Padovan return r; 93baa7e1faSGustavo F. Padovan } 940a708f8fSGustavo F. Padovan 95baa7e1faSGustavo F. Padovan static struct l2cap_chan *__l2cap_get_chan_by_scid(struct l2cap_conn *conn, u16 cid) 960a708f8fSGustavo F. Padovan { 973d57dc68SGustavo F. Padovan struct l2cap_chan *c, *r = NULL; 98baa7e1faSGustavo F. Padovan 993d57dc68SGustavo F. Padovan rcu_read_lock(); 1003d57dc68SGustavo F. Padovan 1013d57dc68SGustavo F. Padovan list_for_each_entry_rcu(c, &conn->chan_l, list) { 1023d57dc68SGustavo F. Padovan if (c->scid == cid) { 1033d57dc68SGustavo F. Padovan r = c; 1043d57dc68SGustavo F. Padovan break; 1050a708f8fSGustavo F. Padovan } 1063d57dc68SGustavo F. Padovan } 1073d57dc68SGustavo F. Padovan 1083d57dc68SGustavo F. Padovan rcu_read_unlock(); 1093d57dc68SGustavo F. Padovan return r; 110baa7e1faSGustavo F. Padovan } 1110a708f8fSGustavo F. Padovan 1120a708f8fSGustavo F. Padovan /* Find channel with given SCID. 1130a708f8fSGustavo F. Padovan * Returns locked socket */ 114baa7e1faSGustavo F. Padovan static struct l2cap_chan *l2cap_get_chan_by_scid(struct l2cap_conn *conn, u16 cid) 1150a708f8fSGustavo F. Padovan { 11648454079SGustavo F. Padovan struct l2cap_chan *c; 117baa7e1faSGustavo F. Padovan 118baa7e1faSGustavo F. Padovan c = __l2cap_get_chan_by_scid(conn, cid); 11948454079SGustavo F. Padovan if (c) 120aa2ac881SGustavo F. Padovan lock_sock(c->sk); 12148454079SGustavo F. Padovan return c; 1220a708f8fSGustavo F. Padovan } 1230a708f8fSGustavo F. Padovan 124baa7e1faSGustavo F. Padovan static struct l2cap_chan *__l2cap_get_chan_by_ident(struct l2cap_conn *conn, u8 ident) 1250a708f8fSGustavo F. Padovan { 1263d57dc68SGustavo F. Padovan struct l2cap_chan *c, *r = NULL; 127baa7e1faSGustavo F. Padovan 1283d57dc68SGustavo F. Padovan rcu_read_lock(); 1293d57dc68SGustavo F. Padovan 1303d57dc68SGustavo F. Padovan list_for_each_entry_rcu(c, &conn->chan_l, list) { 1313d57dc68SGustavo F. Padovan if (c->ident == ident) { 1323d57dc68SGustavo F. Padovan r = c; 1333d57dc68SGustavo F. Padovan break; 1340a708f8fSGustavo F. Padovan } 1353d57dc68SGustavo F. Padovan } 1363d57dc68SGustavo F. Padovan 1373d57dc68SGustavo F. Padovan rcu_read_unlock(); 1383d57dc68SGustavo F. Padovan return r; 139baa7e1faSGustavo F. Padovan } 1400a708f8fSGustavo F. Padovan 141baa7e1faSGustavo F. Padovan static inline struct l2cap_chan *l2cap_get_chan_by_ident(struct l2cap_conn *conn, u8 ident) 1420a708f8fSGustavo F. Padovan { 14348454079SGustavo F. Padovan struct l2cap_chan *c; 144baa7e1faSGustavo F. Padovan 145baa7e1faSGustavo F. Padovan c = __l2cap_get_chan_by_ident(conn, ident); 14648454079SGustavo F. Padovan if (c) 147aa2ac881SGustavo F. Padovan lock_sock(c->sk); 14848454079SGustavo F. Padovan return c; 1490a708f8fSGustavo F. Padovan } 1500a708f8fSGustavo F. Padovan 15123691d75SGustavo F. Padovan static struct l2cap_chan *__l2cap_global_chan_by_addr(__le16 psm, bdaddr_t *src) 1529e4425ffSGustavo F. Padovan { 15323691d75SGustavo F. Padovan struct l2cap_chan *c; 1549e4425ffSGustavo F. Padovan 15523691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 15623691d75SGustavo F. Padovan if (c->sport == psm && !bacmp(&bt_sk(c->sk)->src, src)) 15723691d75SGustavo F. Padovan return c; 1589e4425ffSGustavo F. Padovan } 159250938cbSSzymon Janc return NULL; 160250938cbSSzymon Janc } 1619e4425ffSGustavo F. Padovan 1629e4425ffSGustavo F. Padovan int l2cap_add_psm(struct l2cap_chan *chan, bdaddr_t *src, __le16 psm) 1639e4425ffSGustavo F. Padovan { 16473b2ec18SGustavo F. Padovan int err; 16573b2ec18SGustavo F. Padovan 166333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 1679e4425ffSGustavo F. Padovan 16823691d75SGustavo F. Padovan if (psm && __l2cap_global_chan_by_addr(psm, src)) { 16973b2ec18SGustavo F. Padovan err = -EADDRINUSE; 17073b2ec18SGustavo F. Padovan goto done; 1719e4425ffSGustavo F. Padovan } 1729e4425ffSGustavo F. Padovan 17373b2ec18SGustavo F. Padovan if (psm) { 1749e4425ffSGustavo F. Padovan chan->psm = psm; 1759e4425ffSGustavo F. Padovan chan->sport = psm; 17673b2ec18SGustavo F. Padovan err = 0; 17773b2ec18SGustavo F. Padovan } else { 17873b2ec18SGustavo F. Padovan u16 p; 1799e4425ffSGustavo F. Padovan 18073b2ec18SGustavo F. Padovan err = -EINVAL; 18173b2ec18SGustavo F. Padovan for (p = 0x1001; p < 0x1100; p += 2) 18223691d75SGustavo F. Padovan if (!__l2cap_global_chan_by_addr(cpu_to_le16(p), src)) { 18373b2ec18SGustavo F. Padovan chan->psm = cpu_to_le16(p); 18473b2ec18SGustavo F. Padovan chan->sport = cpu_to_le16(p); 18573b2ec18SGustavo F. Padovan err = 0; 18673b2ec18SGustavo F. Padovan break; 18773b2ec18SGustavo F. Padovan } 18873b2ec18SGustavo F. Padovan } 18973b2ec18SGustavo F. Padovan 19073b2ec18SGustavo F. Padovan done: 191333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 19273b2ec18SGustavo F. Padovan return err; 1939e4425ffSGustavo F. Padovan } 1949e4425ffSGustavo F. Padovan 1959e4425ffSGustavo F. Padovan int l2cap_add_scid(struct l2cap_chan *chan, __u16 scid) 1969e4425ffSGustavo F. Padovan { 197333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 1989e4425ffSGustavo F. Padovan 1999e4425ffSGustavo F. Padovan chan->scid = scid; 2009e4425ffSGustavo F. Padovan 201333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 2029e4425ffSGustavo F. Padovan 2039e4425ffSGustavo F. Padovan return 0; 2049e4425ffSGustavo F. Padovan } 2059e4425ffSGustavo F. Padovan 206baa7e1faSGustavo F. Padovan static u16 l2cap_alloc_cid(struct l2cap_conn *conn) 2070a708f8fSGustavo F. Padovan { 2080a708f8fSGustavo F. Padovan u16 cid = L2CAP_CID_DYN_START; 2090a708f8fSGustavo F. Padovan 2100a708f8fSGustavo F. Padovan for (; cid < L2CAP_CID_DYN_END; cid++) { 211baa7e1faSGustavo F. Padovan if (!__l2cap_get_chan_by_scid(conn, cid)) 2120a708f8fSGustavo F. Padovan return cid; 2130a708f8fSGustavo F. Padovan } 2140a708f8fSGustavo F. Padovan 2150a708f8fSGustavo F. Padovan return 0; 2160a708f8fSGustavo F. Padovan } 2170a708f8fSGustavo F. Padovan 218badaaa00SGustavo F. Padovan static char *state_to_string(int state) 219badaaa00SGustavo F. Padovan { 220badaaa00SGustavo F. Padovan switch(state) { 221badaaa00SGustavo F. Padovan case BT_CONNECTED: 222badaaa00SGustavo F. Padovan return "BT_CONNECTED"; 223badaaa00SGustavo F. Padovan case BT_OPEN: 224badaaa00SGustavo F. Padovan return "BT_OPEN"; 225badaaa00SGustavo F. Padovan case BT_BOUND: 226badaaa00SGustavo F. Padovan return "BT_BOUND"; 227badaaa00SGustavo F. Padovan case BT_LISTEN: 228badaaa00SGustavo F. Padovan return "BT_LISTEN"; 229badaaa00SGustavo F. Padovan case BT_CONNECT: 230badaaa00SGustavo F. Padovan return "BT_CONNECT"; 231badaaa00SGustavo F. Padovan case BT_CONNECT2: 232badaaa00SGustavo F. Padovan return "BT_CONNECT2"; 233badaaa00SGustavo F. Padovan case BT_CONFIG: 234badaaa00SGustavo F. Padovan return "BT_CONFIG"; 235badaaa00SGustavo F. Padovan case BT_DISCONN: 236badaaa00SGustavo F. Padovan return "BT_DISCONN"; 237badaaa00SGustavo F. Padovan case BT_CLOSED: 238badaaa00SGustavo F. Padovan return "BT_CLOSED"; 239badaaa00SGustavo F. Padovan } 240badaaa00SGustavo F. Padovan 241badaaa00SGustavo F. Padovan return "invalid state"; 242badaaa00SGustavo F. Padovan } 243badaaa00SGustavo F. Padovan 24489bc500eSGustavo F. Padovan static void l2cap_state_change(struct l2cap_chan *chan, int state) 24589bc500eSGustavo F. Padovan { 246badaaa00SGustavo F. Padovan BT_DBG("%p %s -> %s", chan, state_to_string(chan->state), 247badaaa00SGustavo F. Padovan state_to_string(state)); 248badaaa00SGustavo F. Padovan 24989bc500eSGustavo F. Padovan chan->state = state; 25089bc500eSGustavo F. Padovan chan->ops->state_change(chan->data, state); 25189bc500eSGustavo F. Padovan } 25289bc500eSGustavo F. Padovan 253721c4181SGustavo F. Padovan static void l2cap_chan_timeout(struct work_struct *work) 254ab07801dSGustavo F. Padovan { 255721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 256721c4181SGustavo F. Padovan chan_timer.work); 257ab07801dSGustavo F. Padovan struct sock *sk = chan->sk; 258ab07801dSGustavo F. Padovan int reason; 259ab07801dSGustavo F. Padovan 26089bc500eSGustavo F. Padovan BT_DBG("chan %p state %d", chan, chan->state); 261ab07801dSGustavo F. Padovan 262721c4181SGustavo F. Padovan lock_sock(sk); 263ab07801dSGustavo F. Padovan 26489bc500eSGustavo F. Padovan if (chan->state == BT_CONNECTED || chan->state == BT_CONFIG) 265ab07801dSGustavo F. Padovan reason = ECONNREFUSED; 26689bc500eSGustavo F. Padovan else if (chan->state == BT_CONNECT && 267ab07801dSGustavo F. Padovan chan->sec_level != BT_SECURITY_SDP) 268ab07801dSGustavo F. Padovan reason = ECONNREFUSED; 269ab07801dSGustavo F. Padovan else 270ab07801dSGustavo F. Padovan reason = ETIMEDOUT; 271ab07801dSGustavo F. Padovan 2720f852724SGustavo F. Padovan l2cap_chan_close(chan, reason); 273ab07801dSGustavo F. Padovan 274721c4181SGustavo F. Padovan release_sock(sk); 275ab07801dSGustavo F. Padovan 276ba3bd0eeSGustavo F. Padovan chan->ops->close(chan->data); 277371fd835SUlisses Furquim l2cap_chan_put(chan); 278ab07801dSGustavo F. Padovan } 279ab07801dSGustavo F. Padovan 28023691d75SGustavo F. Padovan struct l2cap_chan *l2cap_chan_create(struct sock *sk) 2810a708f8fSGustavo F. Padovan { 28248454079SGustavo F. Padovan struct l2cap_chan *chan; 2830a708f8fSGustavo F. Padovan 28448454079SGustavo F. Padovan chan = kzalloc(sizeof(*chan), GFP_ATOMIC); 28548454079SGustavo F. Padovan if (!chan) 28648454079SGustavo F. Padovan return NULL; 2870a708f8fSGustavo F. Padovan 28848454079SGustavo F. Padovan chan->sk = sk; 28948454079SGustavo F. Padovan 290333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 29123691d75SGustavo F. Padovan list_add(&chan->global_l, &chan_list); 292333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 29323691d75SGustavo F. Padovan 294721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->chan_timer, l2cap_chan_timeout); 295ab07801dSGustavo F. Padovan 29689bc500eSGustavo F. Padovan chan->state = BT_OPEN; 29789bc500eSGustavo F. Padovan 29871ba0e56SGustavo F. Padovan atomic_set(&chan->refcnt, 1); 29971ba0e56SGustavo F. Padovan 300abc545b8SSzymon Janc BT_DBG("sk %p chan %p", sk, chan); 301abc545b8SSzymon Janc 30248454079SGustavo F. Padovan return chan; 3030a708f8fSGustavo F. Padovan } 3040a708f8fSGustavo F. Padovan 30523691d75SGustavo F. Padovan void l2cap_chan_destroy(struct l2cap_chan *chan) 3066ff5abbfSGustavo F. Padovan { 307333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 30823691d75SGustavo F. Padovan list_del(&chan->global_l); 309333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 31023691d75SGustavo F. Padovan 311371fd835SUlisses Furquim l2cap_chan_put(chan); 3126ff5abbfSGustavo F. Padovan } 3136ff5abbfSGustavo F. Padovan 3143d57dc68SGustavo F. Padovan static void l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan) 3150a708f8fSGustavo F. Padovan { 3160a708f8fSGustavo F. Padovan BT_DBG("conn %p, psm 0x%2.2x, dcid 0x%4.4x", conn, 317fe4128e0SGustavo F. Padovan chan->psm, chan->dcid); 3180a708f8fSGustavo F. Padovan 3199f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_REMOTE_USER_TERM; 3200a708f8fSGustavo F. Padovan 3218c1d787bSGustavo F. Padovan chan->conn = conn; 3220a708f8fSGustavo F. Padovan 3235491120eSAndrei Emeltchenko switch (chan->chan_type) { 3245491120eSAndrei Emeltchenko case L2CAP_CHAN_CONN_ORIENTED: 325b62f328bSVille Tervo if (conn->hcon->type == LE_LINK) { 326b62f328bSVille Tervo /* LE connection */ 3270c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_LE_DEFAULT_MTU; 328fe4128e0SGustavo F. Padovan chan->scid = L2CAP_CID_LE_DATA; 329fe4128e0SGustavo F. Padovan chan->dcid = L2CAP_CID_LE_DATA; 330b62f328bSVille Tervo } else { 3310a708f8fSGustavo F. Padovan /* Alloc CID for connection-oriented socket */ 332fe4128e0SGustavo F. Padovan chan->scid = l2cap_alloc_cid(conn); 3330c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 334b62f328bSVille Tervo } 3355491120eSAndrei Emeltchenko break; 3365491120eSAndrei Emeltchenko 3375491120eSAndrei Emeltchenko case L2CAP_CHAN_CONN_LESS: 3380a708f8fSGustavo F. Padovan /* Connectionless socket */ 339fe4128e0SGustavo F. Padovan chan->scid = L2CAP_CID_CONN_LESS; 340fe4128e0SGustavo F. Padovan chan->dcid = L2CAP_CID_CONN_LESS; 3410c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 3425491120eSAndrei Emeltchenko break; 3435491120eSAndrei Emeltchenko 3445491120eSAndrei Emeltchenko default: 3450a708f8fSGustavo F. Padovan /* Raw socket can send/recv signalling messages only */ 346fe4128e0SGustavo F. Padovan chan->scid = L2CAP_CID_SIGNALING; 347fe4128e0SGustavo F. Padovan chan->dcid = L2CAP_CID_SIGNALING; 3480c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 3490a708f8fSGustavo F. Padovan } 3500a708f8fSGustavo F. Padovan 3518f7975b1SAndrei Emeltchenko chan->local_id = L2CAP_BESTEFFORT_ID; 3528f7975b1SAndrei Emeltchenko chan->local_stype = L2CAP_SERV_BESTEFFORT; 3538f7975b1SAndrei Emeltchenko chan->local_msdu = L2CAP_DEFAULT_MAX_SDU_SIZE; 3548f7975b1SAndrei Emeltchenko chan->local_sdu_itime = L2CAP_DEFAULT_SDU_ITIME; 3558f7975b1SAndrei Emeltchenko chan->local_acc_lat = L2CAP_DEFAULT_ACC_LAT; 3568f7975b1SAndrei Emeltchenko chan->local_flush_to = L2CAP_DEFAULT_FLUSH_TO; 3578f7975b1SAndrei Emeltchenko 358371fd835SUlisses Furquim l2cap_chan_hold(chan); 359baa7e1faSGustavo F. Padovan 3603d57dc68SGustavo F. Padovan list_add_rcu(&chan->list, &conn->chan_l); 3610a708f8fSGustavo F. Padovan } 3620a708f8fSGustavo F. Padovan 3630a708f8fSGustavo F. Padovan /* Delete channel. 3640a708f8fSGustavo F. Padovan * Must be called on the locked socket. */ 3654519de9aSGustavo F. Padovan static void l2cap_chan_del(struct l2cap_chan *chan, int err) 3660a708f8fSGustavo F. Padovan { 36748454079SGustavo F. Padovan struct sock *sk = chan->sk; 3688c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 3690a708f8fSGustavo F. Padovan struct sock *parent = bt_sk(sk)->parent; 3700a708f8fSGustavo F. Padovan 371c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 3720a708f8fSGustavo F. Padovan 37349208c9cSGustavo F. Padovan BT_DBG("chan %p, conn %p, err %d", chan, conn, err); 3740a708f8fSGustavo F. Padovan 3750a708f8fSGustavo F. Padovan if (conn) { 376baa7e1faSGustavo F. Padovan /* Delete from channel list */ 3773d57dc68SGustavo F. Padovan list_del_rcu(&chan->list); 3783d57dc68SGustavo F. Padovan synchronize_rcu(); 3793d57dc68SGustavo F. Padovan 380371fd835SUlisses Furquim l2cap_chan_put(chan); 381baa7e1faSGustavo F. Padovan 3828c1d787bSGustavo F. Padovan chan->conn = NULL; 3830a708f8fSGustavo F. Padovan hci_conn_put(conn->hcon); 3840a708f8fSGustavo F. Padovan } 3850a708f8fSGustavo F. Padovan 38689bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CLOSED); 3870a708f8fSGustavo F. Padovan sock_set_flag(sk, SOCK_ZAPPED); 3880a708f8fSGustavo F. Padovan 3890a708f8fSGustavo F. Padovan if (err) 3900a708f8fSGustavo F. Padovan sk->sk_err = err; 3910a708f8fSGustavo F. Padovan 3920a708f8fSGustavo F. Padovan if (parent) { 3930a708f8fSGustavo F. Padovan bt_accept_unlink(sk); 3940a708f8fSGustavo F. Padovan parent->sk_data_ready(parent, 0); 3950a708f8fSGustavo F. Padovan } else 3960a708f8fSGustavo F. Padovan sk->sk_state_change(sk); 3970a708f8fSGustavo F. Padovan 398c1360a1cSGustavo F. Padovan if (!(test_bit(CONF_OUTPUT_DONE, &chan->conf_state) && 399c1360a1cSGustavo F. Padovan test_bit(CONF_INPUT_DONE, &chan->conf_state))) 4006ff5abbfSGustavo F. Padovan return; 4012ead70b8SGustavo F. Padovan 40258d35f87SGustavo F. Padovan skb_queue_purge(&chan->tx_q); 4030a708f8fSGustavo F. Padovan 4040c1bc5c6SGustavo F. Padovan if (chan->mode == L2CAP_MODE_ERTM) { 4050a708f8fSGustavo F. Padovan struct srej_list *l, *tmp; 4060a708f8fSGustavo F. Padovan 4071a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 4081a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 4091a09bcb9SGustavo F. Padovan __clear_ack_timer(chan); 4100a708f8fSGustavo F. Padovan 411f1c6775bSGustavo F. Padovan skb_queue_purge(&chan->srej_q); 4120a708f8fSGustavo F. Padovan 41339d5a3eeSGustavo F. Padovan list_for_each_entry_safe(l, tmp, &chan->srej_l, list) { 4140a708f8fSGustavo F. Padovan list_del(&l->list); 4150a708f8fSGustavo F. Padovan kfree(l); 4160a708f8fSGustavo F. Padovan } 4170a708f8fSGustavo F. Padovan } 4180a708f8fSGustavo F. Padovan } 4190a708f8fSGustavo F. Padovan 4204519de9aSGustavo F. Padovan static void l2cap_chan_cleanup_listen(struct sock *parent) 4214519de9aSGustavo F. Padovan { 4224519de9aSGustavo F. Padovan struct sock *sk; 4234519de9aSGustavo F. Padovan 4244519de9aSGustavo F. Padovan BT_DBG("parent %p", parent); 4254519de9aSGustavo F. Padovan 4264519de9aSGustavo F. Padovan /* Close not yet accepted channels */ 4270f852724SGustavo F. Padovan while ((sk = bt_accept_dequeue(parent, NULL))) { 428ba3bd0eeSGustavo F. Padovan struct l2cap_chan *chan = l2cap_pi(sk)->chan; 429c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 4300f852724SGustavo F. Padovan lock_sock(sk); 431ba3bd0eeSGustavo F. Padovan l2cap_chan_close(chan, ECONNRESET); 4320f852724SGustavo F. Padovan release_sock(sk); 433ba3bd0eeSGustavo F. Padovan chan->ops->close(chan->data); 4340f852724SGustavo F. Padovan } 4354519de9aSGustavo F. Padovan } 4364519de9aSGustavo F. Padovan 4370f852724SGustavo F. Padovan void l2cap_chan_close(struct l2cap_chan *chan, int reason) 4384519de9aSGustavo F. Padovan { 4394519de9aSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 4404519de9aSGustavo F. Padovan struct sock *sk = chan->sk; 4414519de9aSGustavo F. Padovan 44289bc500eSGustavo F. Padovan BT_DBG("chan %p state %d socket %p", chan, chan->state, sk->sk_socket); 4434519de9aSGustavo F. Padovan 44489bc500eSGustavo F. Padovan switch (chan->state) { 4454519de9aSGustavo F. Padovan case BT_LISTEN: 4464519de9aSGustavo F. Padovan l2cap_chan_cleanup_listen(sk); 44789bc500eSGustavo F. Padovan 44889bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CLOSED); 44989bc500eSGustavo F. Padovan sock_set_flag(sk, SOCK_ZAPPED); 4504519de9aSGustavo F. Padovan break; 4514519de9aSGustavo F. Padovan 4524519de9aSGustavo F. Padovan case BT_CONNECTED: 4534519de9aSGustavo F. Padovan case BT_CONFIG: 454715ec005SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED && 4554519de9aSGustavo F. Padovan conn->hcon->type == ACL_LINK) { 456c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 457c9b66675SGustavo F. Padovan __set_chan_timer(chan, sk->sk_sndtimeo); 4584519de9aSGustavo F. Padovan l2cap_send_disconn_req(conn, chan, reason); 4594519de9aSGustavo F. Padovan } else 4604519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 4614519de9aSGustavo F. Padovan break; 4624519de9aSGustavo F. Padovan 4634519de9aSGustavo F. Padovan case BT_CONNECT2: 464715ec005SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED && 4654519de9aSGustavo F. Padovan conn->hcon->type == ACL_LINK) { 4664519de9aSGustavo F. Padovan struct l2cap_conn_rsp rsp; 4674519de9aSGustavo F. Padovan __u16 result; 4684519de9aSGustavo F. Padovan 4694519de9aSGustavo F. Padovan if (bt_sk(sk)->defer_setup) 4704519de9aSGustavo F. Padovan result = L2CAP_CR_SEC_BLOCK; 4714519de9aSGustavo F. Padovan else 4724519de9aSGustavo F. Padovan result = L2CAP_CR_BAD_PSM; 47389bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_DISCONN); 4744519de9aSGustavo F. Padovan 4754519de9aSGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 4764519de9aSGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 4774519de9aSGustavo F. Padovan rsp.result = cpu_to_le16(result); 4784519de9aSGustavo F. Padovan rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 4794519de9aSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 4804519de9aSGustavo F. Padovan sizeof(rsp), &rsp); 4814519de9aSGustavo F. Padovan } 4824519de9aSGustavo F. Padovan 4834519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 4844519de9aSGustavo F. Padovan break; 4854519de9aSGustavo F. Padovan 4864519de9aSGustavo F. Padovan case BT_CONNECT: 4874519de9aSGustavo F. Padovan case BT_DISCONN: 4884519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 4894519de9aSGustavo F. Padovan break; 4904519de9aSGustavo F. Padovan 4914519de9aSGustavo F. Padovan default: 4924519de9aSGustavo F. Padovan sock_set_flag(sk, SOCK_ZAPPED); 4934519de9aSGustavo F. Padovan break; 4944519de9aSGustavo F. Padovan } 4954519de9aSGustavo F. Padovan } 4964519de9aSGustavo F. Padovan 4974343478fSGustavo F. Padovan static inline u8 l2cap_get_auth_type(struct l2cap_chan *chan) 4980a708f8fSGustavo F. Padovan { 499715ec005SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_RAW) { 5004343478fSGustavo F. Padovan switch (chan->sec_level) { 5010a708f8fSGustavo F. Padovan case BT_SECURITY_HIGH: 5020a708f8fSGustavo F. Padovan return HCI_AT_DEDICATED_BONDING_MITM; 5030a708f8fSGustavo F. Padovan case BT_SECURITY_MEDIUM: 5040a708f8fSGustavo F. Padovan return HCI_AT_DEDICATED_BONDING; 5050a708f8fSGustavo F. Padovan default: 5060a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 5070a708f8fSGustavo F. Padovan } 508fe4128e0SGustavo F. Padovan } else if (chan->psm == cpu_to_le16(0x0001)) { 5094343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_LOW) 5104343478fSGustavo F. Padovan chan->sec_level = BT_SECURITY_SDP; 5110a708f8fSGustavo F. Padovan 5124343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_HIGH) 5130a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING_MITM; 5140a708f8fSGustavo F. Padovan else 5150a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 5160a708f8fSGustavo F. Padovan } else { 5174343478fSGustavo F. Padovan switch (chan->sec_level) { 5180a708f8fSGustavo F. Padovan case BT_SECURITY_HIGH: 5190a708f8fSGustavo F. Padovan return HCI_AT_GENERAL_BONDING_MITM; 5200a708f8fSGustavo F. Padovan case BT_SECURITY_MEDIUM: 5210a708f8fSGustavo F. Padovan return HCI_AT_GENERAL_BONDING; 5220a708f8fSGustavo F. Padovan default: 5230a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 5240a708f8fSGustavo F. Padovan } 5250a708f8fSGustavo F. Padovan } 5260a708f8fSGustavo F. Padovan } 5270a708f8fSGustavo F. Padovan 5280a708f8fSGustavo F. Padovan /* Service level security */ 529d45fc423SGustavo F. Padovan int l2cap_chan_check_security(struct l2cap_chan *chan) 5300a708f8fSGustavo F. Padovan { 5318c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 5320a708f8fSGustavo F. Padovan __u8 auth_type; 5330a708f8fSGustavo F. Padovan 5344343478fSGustavo F. Padovan auth_type = l2cap_get_auth_type(chan); 5350a708f8fSGustavo F. Padovan 5364343478fSGustavo F. Padovan return hci_conn_security(conn->hcon, chan->sec_level, auth_type); 5370a708f8fSGustavo F. Padovan } 5380a708f8fSGustavo F. Padovan 539b5ad8b7fSJohannes Berg static u8 l2cap_get_ident(struct l2cap_conn *conn) 5400a708f8fSGustavo F. Padovan { 5410a708f8fSGustavo F. Padovan u8 id; 5420a708f8fSGustavo F. Padovan 5430a708f8fSGustavo F. Padovan /* Get next available identificator. 5440a708f8fSGustavo F. Padovan * 1 - 128 are used by kernel. 5450a708f8fSGustavo F. Padovan * 129 - 199 are reserved. 5460a708f8fSGustavo F. Padovan * 200 - 254 are used by utilities like l2ping, etc. 5470a708f8fSGustavo F. Padovan */ 5480a708f8fSGustavo F. Padovan 549333055f2SGustavo F. Padovan spin_lock(&conn->lock); 5500a708f8fSGustavo F. Padovan 5510a708f8fSGustavo F. Padovan if (++conn->tx_ident > 128) 5520a708f8fSGustavo F. Padovan conn->tx_ident = 1; 5530a708f8fSGustavo F. Padovan 5540a708f8fSGustavo F. Padovan id = conn->tx_ident; 5550a708f8fSGustavo F. Padovan 556333055f2SGustavo F. Padovan spin_unlock(&conn->lock); 5570a708f8fSGustavo F. Padovan 5580a708f8fSGustavo F. Padovan return id; 5590a708f8fSGustavo F. Padovan } 5600a708f8fSGustavo F. Padovan 5614519de9aSGustavo F. Padovan static void l2cap_send_cmd(struct l2cap_conn *conn, u8 ident, u8 code, u16 len, void *data) 5620a708f8fSGustavo F. Padovan { 5630a708f8fSGustavo F. Padovan struct sk_buff *skb = l2cap_build_cmd(conn, code, ident, len, data); 5640a708f8fSGustavo F. Padovan u8 flags; 5650a708f8fSGustavo F. Padovan 5660a708f8fSGustavo F. Padovan BT_DBG("code 0x%2.2x", code); 5670a708f8fSGustavo F. Padovan 5680a708f8fSGustavo F. Padovan if (!skb) 5690a708f8fSGustavo F. Padovan return; 5700a708f8fSGustavo F. Padovan 5710a708f8fSGustavo F. Padovan if (lmp_no_flush_capable(conn->hcon->hdev)) 5720a708f8fSGustavo F. Padovan flags = ACL_START_NO_FLUSH; 5730a708f8fSGustavo F. Padovan else 5740a708f8fSGustavo F. Padovan flags = ACL_START; 5750a708f8fSGustavo F. Padovan 57614b12d0bSJaikumar Ganesh bt_cb(skb)->force_active = BT_POWER_FORCE_ACTIVE_ON; 5775e59b791SLuiz Augusto von Dentz skb->priority = HCI_PRIO_MAX; 57814b12d0bSJaikumar Ganesh 57973d80debSLuiz Augusto von Dentz hci_send_acl(conn->hchan, skb, flags); 5800a708f8fSGustavo F. Padovan } 5810a708f8fSGustavo F. Padovan 58273d80debSLuiz Augusto von Dentz static void l2cap_do_send(struct l2cap_chan *chan, struct sk_buff *skb) 58373d80debSLuiz Augusto von Dentz { 58473d80debSLuiz Augusto von Dentz struct hci_conn *hcon = chan->conn->hcon; 58573d80debSLuiz Augusto von Dentz u16 flags; 58673d80debSLuiz Augusto von Dentz 58773d80debSLuiz Augusto von Dentz BT_DBG("chan %p, skb %p len %d priority %u", chan, skb, skb->len, 58873d80debSLuiz Augusto von Dentz skb->priority); 58973d80debSLuiz Augusto von Dentz 59073d80debSLuiz Augusto von Dentz if (!test_bit(FLAG_FLUSHABLE, &chan->flags) && 59173d80debSLuiz Augusto von Dentz lmp_no_flush_capable(hcon->hdev)) 59273d80debSLuiz Augusto von Dentz flags = ACL_START_NO_FLUSH; 59373d80debSLuiz Augusto von Dentz else 59473d80debSLuiz Augusto von Dentz flags = ACL_START; 59573d80debSLuiz Augusto von Dentz 59673d80debSLuiz Augusto von Dentz bt_cb(skb)->force_active = test_bit(FLAG_FORCE_ACTIVE, &chan->flags); 59773d80debSLuiz Augusto von Dentz hci_send_acl(chan->conn->hchan, skb, flags); 5980a708f8fSGustavo F. Padovan } 5990a708f8fSGustavo F. Padovan 60088843ab0SAndrei Emeltchenko static inline void l2cap_send_sframe(struct l2cap_chan *chan, u32 control) 6010a708f8fSGustavo F. Padovan { 6020a708f8fSGustavo F. Padovan struct sk_buff *skb; 6030a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 6048c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 605e4ca6d98SAndrei Emeltchenko int count, hlen; 6060a708f8fSGustavo F. Padovan 60789bc500eSGustavo F. Padovan if (chan->state != BT_CONNECTED) 6080a708f8fSGustavo F. Padovan return; 6090a708f8fSGustavo F. Padovan 610e4ca6d98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 611e4ca6d98SAndrei Emeltchenko hlen = L2CAP_EXT_HDR_SIZE; 612e4ca6d98SAndrei Emeltchenko else 613e4ca6d98SAndrei Emeltchenko hlen = L2CAP_ENH_HDR_SIZE; 6140a708f8fSGustavo F. Padovan 6150a708f8fSGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 61603a51213SAndrei Emeltchenko hlen += L2CAP_FCS_SIZE; 6170a708f8fSGustavo F. Padovan 61888843ab0SAndrei Emeltchenko BT_DBG("chan %p, control 0x%8.8x", chan, control); 6190a708f8fSGustavo F. Padovan 6200a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, hlen); 621793c2f1cSAndrei Emeltchenko 622793c2f1cSAndrei Emeltchenko control |= __set_sframe(chan); 6230a708f8fSGustavo F. Padovan 624e2ab4353SGustavo F. Padovan if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state)) 62503f6715dSAndrei Emeltchenko control |= __set_ctrl_final(chan); 6260a708f8fSGustavo F. Padovan 627e2ab4353SGustavo F. Padovan if (test_and_clear_bit(CONN_SEND_PBIT, &chan->conn_state)) 628e3781735SAndrei Emeltchenko control |= __set_ctrl_poll(chan); 6290a708f8fSGustavo F. Padovan 6300a708f8fSGustavo F. Padovan skb = bt_skb_alloc(count, GFP_ATOMIC); 6310a708f8fSGustavo F. Padovan if (!skb) 6320a708f8fSGustavo F. Padovan return; 6330a708f8fSGustavo F. Padovan 6340a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 6350a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(hlen - L2CAP_HDR_SIZE); 636fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 63788843ab0SAndrei Emeltchenko 63888843ab0SAndrei Emeltchenko __put_control(chan, control, skb_put(skb, __ctrl_size(chan))); 6390a708f8fSGustavo F. Padovan 64047d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 64103a51213SAndrei Emeltchenko u16 fcs = crc16(0, (u8 *)lh, count - L2CAP_FCS_SIZE); 64203a51213SAndrei Emeltchenko put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 6430a708f8fSGustavo F. Padovan } 6440a708f8fSGustavo F. Padovan 64573d80debSLuiz Augusto von Dentz skb->priority = HCI_PRIO_MAX; 64673d80debSLuiz Augusto von Dentz l2cap_do_send(chan, skb); 6470a708f8fSGustavo F. Padovan } 6480a708f8fSGustavo F. Padovan 64988843ab0SAndrei Emeltchenko static inline void l2cap_send_rr_or_rnr(struct l2cap_chan *chan, u32 control) 6500a708f8fSGustavo F. Padovan { 651e2ab4353SGustavo F. Padovan if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 652ab784b73SAndrei Emeltchenko control |= __set_ctrl_super(chan, L2CAP_SUPER_RNR); 653e2ab4353SGustavo F. Padovan set_bit(CONN_RNR_SENT, &chan->conn_state); 6540a708f8fSGustavo F. Padovan } else 655ab784b73SAndrei Emeltchenko control |= __set_ctrl_super(chan, L2CAP_SUPER_RR); 6560a708f8fSGustavo F. Padovan 6570b209faeSAndrei Emeltchenko control |= __set_reqseq(chan, chan->buffer_seq); 6580a708f8fSGustavo F. Padovan 659525cd185SGustavo F. Padovan l2cap_send_sframe(chan, control); 6600a708f8fSGustavo F. Padovan } 6610a708f8fSGustavo F. Padovan 662b4450035SGustavo F. Padovan static inline int __l2cap_no_conn_pending(struct l2cap_chan *chan) 6630a708f8fSGustavo F. Padovan { 664c1360a1cSGustavo F. Padovan return !test_bit(CONF_CONNECT_PEND, &chan->conf_state); 6650a708f8fSGustavo F. Padovan } 6660a708f8fSGustavo F. Padovan 667fc7f8a7eSGustavo F. Padovan static void l2cap_do_start(struct l2cap_chan *chan) 6680a708f8fSGustavo F. Padovan { 6698c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 6700a708f8fSGustavo F. Padovan 6710a708f8fSGustavo F. Padovan if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) { 6720a708f8fSGustavo F. Padovan if (!(conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE)) 6730a708f8fSGustavo F. Padovan return; 6740a708f8fSGustavo F. Padovan 675d45fc423SGustavo F. Padovan if (l2cap_chan_check_security(chan) && 6764343478fSGustavo F. Padovan __l2cap_no_conn_pending(chan)) { 6770a708f8fSGustavo F. Padovan struct l2cap_conn_req req; 678fe4128e0SGustavo F. Padovan req.scid = cpu_to_le16(chan->scid); 679fe4128e0SGustavo F. Padovan req.psm = chan->psm; 6800a708f8fSGustavo F. Padovan 681fc7f8a7eSGustavo F. Padovan chan->ident = l2cap_get_ident(conn); 682c1360a1cSGustavo F. Padovan set_bit(CONF_CONNECT_PEND, &chan->conf_state); 6830a708f8fSGustavo F. Padovan 684fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_REQ, 685fc7f8a7eSGustavo F. Padovan sizeof(req), &req); 6860a708f8fSGustavo F. Padovan } 6870a708f8fSGustavo F. Padovan } else { 6880a708f8fSGustavo F. Padovan struct l2cap_info_req req; 6890a708f8fSGustavo F. Padovan req.type = cpu_to_le16(L2CAP_IT_FEAT_MASK); 6900a708f8fSGustavo F. Padovan 6910a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_SENT; 6920a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 6930a708f8fSGustavo F. Padovan 694030013d8SGustavo F. Padovan schedule_delayed_work(&conn->info_timer, 6950a708f8fSGustavo F. Padovan msecs_to_jiffies(L2CAP_INFO_TIMEOUT)); 6960a708f8fSGustavo F. Padovan 6970a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, conn->info_ident, 6980a708f8fSGustavo F. Padovan L2CAP_INFO_REQ, sizeof(req), &req); 6990a708f8fSGustavo F. Padovan } 7000a708f8fSGustavo F. Padovan } 7010a708f8fSGustavo F. Padovan 7020a708f8fSGustavo F. Padovan static inline int l2cap_mode_supported(__u8 mode, __u32 feat_mask) 7030a708f8fSGustavo F. Padovan { 7040a708f8fSGustavo F. Padovan u32 local_feat_mask = l2cap_feat_mask; 7050a708f8fSGustavo F. Padovan if (!disable_ertm) 7060a708f8fSGustavo F. Padovan local_feat_mask |= L2CAP_FEAT_ERTM | L2CAP_FEAT_STREAMING; 7070a708f8fSGustavo F. Padovan 7080a708f8fSGustavo F. Padovan switch (mode) { 7090a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 7100a708f8fSGustavo F. Padovan return L2CAP_FEAT_ERTM & feat_mask & local_feat_mask; 7110a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 7120a708f8fSGustavo F. Padovan return L2CAP_FEAT_STREAMING & feat_mask & local_feat_mask; 7130a708f8fSGustavo F. Padovan default: 7140a708f8fSGustavo F. Padovan return 0x00; 7150a708f8fSGustavo F. Padovan } 7160a708f8fSGustavo F. Padovan } 7170a708f8fSGustavo F. Padovan 7184519de9aSGustavo F. Padovan static void l2cap_send_disconn_req(struct l2cap_conn *conn, struct l2cap_chan *chan, int err) 7190a708f8fSGustavo F. Padovan { 720e92c8e70SGustavo F. Padovan struct sock *sk; 7210a708f8fSGustavo F. Padovan struct l2cap_disconn_req req; 7220a708f8fSGustavo F. Padovan 7230a708f8fSGustavo F. Padovan if (!conn) 7240a708f8fSGustavo F. Padovan return; 7250a708f8fSGustavo F. Padovan 726e92c8e70SGustavo F. Padovan sk = chan->sk; 727e92c8e70SGustavo F. Padovan 7280c1bc5c6SGustavo F. Padovan if (chan->mode == L2CAP_MODE_ERTM) { 7291a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 7301a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 7311a09bcb9SGustavo F. Padovan __clear_ack_timer(chan); 7320a708f8fSGustavo F. Padovan } 7330a708f8fSGustavo F. Padovan 734fe4128e0SGustavo F. Padovan req.dcid = cpu_to_le16(chan->dcid); 735fe4128e0SGustavo F. Padovan req.scid = cpu_to_le16(chan->scid); 7360a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), 7370a708f8fSGustavo F. Padovan L2CAP_DISCONN_REQ, sizeof(req), &req); 7380a708f8fSGustavo F. Padovan 73989bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_DISCONN); 7400a708f8fSGustavo F. Padovan sk->sk_err = err; 7410a708f8fSGustavo F. Padovan } 7420a708f8fSGustavo F. Padovan 7430a708f8fSGustavo F. Padovan /* ---- L2CAP connections ---- */ 7440a708f8fSGustavo F. Padovan static void l2cap_conn_start(struct l2cap_conn *conn) 7450a708f8fSGustavo F. Padovan { 7463d57dc68SGustavo F. Padovan struct l2cap_chan *chan; 7470a708f8fSGustavo F. Padovan 7480a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 7490a708f8fSGustavo F. Padovan 7503d57dc68SGustavo F. Padovan rcu_read_lock(); 7510a708f8fSGustavo F. Padovan 7523d57dc68SGustavo F. Padovan list_for_each_entry_rcu(chan, &conn->chan_l, list) { 75348454079SGustavo F. Padovan struct sock *sk = chan->sk; 754baa7e1faSGustavo F. Padovan 7550a708f8fSGustavo F. Padovan bh_lock_sock(sk); 7560a708f8fSGustavo F. Padovan 757715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 7580a708f8fSGustavo F. Padovan bh_unlock_sock(sk); 7590a708f8fSGustavo F. Padovan continue; 7600a708f8fSGustavo F. Padovan } 7610a708f8fSGustavo F. Padovan 76289bc500eSGustavo F. Padovan if (chan->state == BT_CONNECT) { 7630a708f8fSGustavo F. Padovan struct l2cap_conn_req req; 7640a708f8fSGustavo F. Padovan 765d45fc423SGustavo F. Padovan if (!l2cap_chan_check_security(chan) || 766b4450035SGustavo F. Padovan !__l2cap_no_conn_pending(chan)) { 7670a708f8fSGustavo F. Padovan bh_unlock_sock(sk); 7680a708f8fSGustavo F. Padovan continue; 7690a708f8fSGustavo F. Padovan } 7700a708f8fSGustavo F. Padovan 771c1360a1cSGustavo F. Padovan if (!l2cap_mode_supported(chan->mode, conn->feat_mask) 772c1360a1cSGustavo F. Padovan && test_bit(CONF_STATE2_DEVICE, 773c1360a1cSGustavo F. Padovan &chan->conf_state)) { 7740f852724SGustavo F. Padovan /* l2cap_chan_close() calls list_del(chan) 775820ffdb3SGustavo F. Padovan * so release the lock */ 7760f852724SGustavo F. Padovan l2cap_chan_close(chan, ECONNRESET); 7770a708f8fSGustavo F. Padovan bh_unlock_sock(sk); 7780a708f8fSGustavo F. Padovan continue; 7790a708f8fSGustavo F. Padovan } 7800a708f8fSGustavo F. Padovan 781fe4128e0SGustavo F. Padovan req.scid = cpu_to_le16(chan->scid); 782fe4128e0SGustavo F. Padovan req.psm = chan->psm; 7830a708f8fSGustavo F. Padovan 784fc7f8a7eSGustavo F. Padovan chan->ident = l2cap_get_ident(conn); 785c1360a1cSGustavo F. Padovan set_bit(CONF_CONNECT_PEND, &chan->conf_state); 7860a708f8fSGustavo F. Padovan 787fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_REQ, 788fc7f8a7eSGustavo F. Padovan sizeof(req), &req); 7890a708f8fSGustavo F. Padovan 79089bc500eSGustavo F. Padovan } else if (chan->state == BT_CONNECT2) { 7910a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 7920a708f8fSGustavo F. Padovan char buf[128]; 793fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 794fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 7950a708f8fSGustavo F. Padovan 796d45fc423SGustavo F. Padovan if (l2cap_chan_check_security(chan)) { 7970a708f8fSGustavo F. Padovan if (bt_sk(sk)->defer_setup) { 7980a708f8fSGustavo F. Padovan struct sock *parent = bt_sk(sk)->parent; 7990a708f8fSGustavo F. Padovan rsp.result = cpu_to_le16(L2CAP_CR_PEND); 8000a708f8fSGustavo F. Padovan rsp.status = cpu_to_le16(L2CAP_CS_AUTHOR_PEND); 80105e9a2f6SIlia Kolomisnky if (parent) 8020a708f8fSGustavo F. Padovan parent->sk_data_ready(parent, 0); 8030a708f8fSGustavo F. Padovan 8040a708f8fSGustavo F. Padovan } else { 80589bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONFIG); 8060a708f8fSGustavo F. Padovan rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 8070a708f8fSGustavo F. Padovan rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 8080a708f8fSGustavo F. Padovan } 8090a708f8fSGustavo F. Padovan } else { 8100a708f8fSGustavo F. Padovan rsp.result = cpu_to_le16(L2CAP_CR_PEND); 8110a708f8fSGustavo F. Padovan rsp.status = cpu_to_le16(L2CAP_CS_AUTHEN_PEND); 8120a708f8fSGustavo F. Padovan } 8130a708f8fSGustavo F. Padovan 814fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 815fc7f8a7eSGustavo F. Padovan sizeof(rsp), &rsp); 8160a708f8fSGustavo F. Padovan 817c1360a1cSGustavo F. Padovan if (test_bit(CONF_REQ_SENT, &chan->conf_state) || 8180a708f8fSGustavo F. Padovan rsp.result != L2CAP_CR_SUCCESS) { 8190a708f8fSGustavo F. Padovan bh_unlock_sock(sk); 8200a708f8fSGustavo F. Padovan continue; 8210a708f8fSGustavo F. Padovan } 8220a708f8fSGustavo F. Padovan 823c1360a1cSGustavo F. Padovan set_bit(CONF_REQ_SENT, &chan->conf_state); 8240a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 82573ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 82673ffa904SGustavo F. Padovan chan->num_conf_req++; 8270a708f8fSGustavo F. Padovan } 8280a708f8fSGustavo F. Padovan 8290a708f8fSGustavo F. Padovan bh_unlock_sock(sk); 8300a708f8fSGustavo F. Padovan } 8310a708f8fSGustavo F. Padovan 8323d57dc68SGustavo F. Padovan rcu_read_unlock(); 8330a708f8fSGustavo F. Padovan } 8340a708f8fSGustavo F. Padovan 835b62f328bSVille Tervo /* Find socket with cid and source bdaddr. 836b62f328bSVille Tervo * Returns closest match, locked. 837b62f328bSVille Tervo */ 83823691d75SGustavo F. Padovan static struct l2cap_chan *l2cap_global_chan_by_scid(int state, __le16 cid, bdaddr_t *src) 839b62f328bSVille Tervo { 84023691d75SGustavo F. Padovan struct l2cap_chan *c, *c1 = NULL; 841b62f328bSVille Tervo 84223691d75SGustavo F. Padovan read_lock(&chan_list_lock); 843b62f328bSVille Tervo 84423691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 84523691d75SGustavo F. Padovan struct sock *sk = c->sk; 846fe4128e0SGustavo F. Padovan 84789bc500eSGustavo F. Padovan if (state && c->state != state) 848b62f328bSVille Tervo continue; 849b62f328bSVille Tervo 85023691d75SGustavo F. Padovan if (c->scid == cid) { 851b62f328bSVille Tervo /* Exact match. */ 85223691d75SGustavo F. Padovan if (!bacmp(&bt_sk(sk)->src, src)) { 85323691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 85423691d75SGustavo F. Padovan return c; 85523691d75SGustavo F. Padovan } 856b62f328bSVille Tervo 857b62f328bSVille Tervo /* Closest match */ 858b62f328bSVille Tervo if (!bacmp(&bt_sk(sk)->src, BDADDR_ANY)) 85923691d75SGustavo F. Padovan c1 = c; 860b62f328bSVille Tervo } 861b62f328bSVille Tervo } 862280f294fSGustavo F. Padovan 86323691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 864b62f328bSVille Tervo 86523691d75SGustavo F. Padovan return c1; 866b62f328bSVille Tervo } 867b62f328bSVille Tervo 868b62f328bSVille Tervo static void l2cap_le_conn_ready(struct l2cap_conn *conn) 869b62f328bSVille Tervo { 870c916fbe4SGustavo F. Padovan struct sock *parent, *sk; 87123691d75SGustavo F. Padovan struct l2cap_chan *chan, *pchan; 872b62f328bSVille Tervo 873b62f328bSVille Tervo BT_DBG(""); 874b62f328bSVille Tervo 875b62f328bSVille Tervo /* Check if we have socket listening on cid */ 87623691d75SGustavo F. Padovan pchan = l2cap_global_chan_by_scid(BT_LISTEN, L2CAP_CID_LE_DATA, 877b62f328bSVille Tervo conn->src); 87823691d75SGustavo F. Padovan if (!pchan) 879b62f328bSVille Tervo return; 880b62f328bSVille Tervo 88123691d75SGustavo F. Padovan parent = pchan->sk; 88223691d75SGustavo F. Padovan 883aa2ac881SGustavo F. Padovan lock_sock(parent); 88462f3a2cfSGustavo F. Padovan 885b62f328bSVille Tervo /* Check for backlog size */ 886b62f328bSVille Tervo if (sk_acceptq_is_full(parent)) { 887b62f328bSVille Tervo BT_DBG("backlog full %d", parent->sk_ack_backlog); 888b62f328bSVille Tervo goto clean; 889b62f328bSVille Tervo } 890b62f328bSVille Tervo 89180808e43SGustavo F. Padovan chan = pchan->ops->new_connection(pchan->data); 89280808e43SGustavo F. Padovan if (!chan) 893b62f328bSVille Tervo goto clean; 894b62f328bSVille Tervo 89580808e43SGustavo F. Padovan sk = chan->sk; 8965d41ce1dSGustavo F. Padovan 897b62f328bSVille Tervo hci_conn_hold(conn->hcon); 898b62f328bSVille Tervo 899b62f328bSVille Tervo bacpy(&bt_sk(sk)->src, conn->src); 900b62f328bSVille Tervo bacpy(&bt_sk(sk)->dst, conn->dst); 901b62f328bSVille Tervo 902d1010240SGustavo F. Padovan bt_accept_enqueue(parent, sk); 903d1010240SGustavo F. Padovan 9043d57dc68SGustavo F. Padovan l2cap_chan_add(conn, chan); 90548454079SGustavo F. Padovan 906c9b66675SGustavo F. Padovan __set_chan_timer(chan, sk->sk_sndtimeo); 907b62f328bSVille Tervo 90889bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONNECTED); 909b62f328bSVille Tervo parent->sk_data_ready(parent, 0); 910b62f328bSVille Tervo 911b62f328bSVille Tervo clean: 912aa2ac881SGustavo F. Padovan release_sock(parent); 913b62f328bSVille Tervo } 914b62f328bSVille Tervo 915cf4cd009SAndrei Emeltchenko static void l2cap_chan_ready(struct l2cap_chan *chan) 916f1cb9af5SVinicius Costa Gomes { 917cf4cd009SAndrei Emeltchenko struct sock *sk = chan->sk; 918f1cb9af5SVinicius Costa Gomes struct sock *parent = bt_sk(sk)->parent; 919f1cb9af5SVinicius Costa Gomes 920f1cb9af5SVinicius Costa Gomes BT_DBG("sk %p, parent %p", sk, parent); 921f1cb9af5SVinicius Costa Gomes 922f1cb9af5SVinicius Costa Gomes chan->conf_state = 0; 923f1cb9af5SVinicius Costa Gomes __clear_chan_timer(chan); 924f1cb9af5SVinicius Costa Gomes 92543f3dc41SVinicius Costa Gomes l2cap_state_change(chan, BT_CONNECTED); 926f1cb9af5SVinicius Costa Gomes sk->sk_state_change(sk); 927f1cb9af5SVinicius Costa Gomes 928f1cb9af5SVinicius Costa Gomes if (parent) 929f1cb9af5SVinicius Costa Gomes parent->sk_data_ready(parent, 0); 930f1cb9af5SVinicius Costa Gomes } 931f1cb9af5SVinicius Costa Gomes 9320a708f8fSGustavo F. Padovan static void l2cap_conn_ready(struct l2cap_conn *conn) 9330a708f8fSGustavo F. Padovan { 93448454079SGustavo F. Padovan struct l2cap_chan *chan; 9350a708f8fSGustavo F. Padovan 9360a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 9370a708f8fSGustavo F. Padovan 938b62f328bSVille Tervo if (!conn->hcon->out && conn->hcon->type == LE_LINK) 939b62f328bSVille Tervo l2cap_le_conn_ready(conn); 940b62f328bSVille Tervo 941160dc6acSVinicius Costa Gomes if (conn->hcon->out && conn->hcon->type == LE_LINK) 942160dc6acSVinicius Costa Gomes smp_conn_security(conn, conn->hcon->pending_sec_level); 943160dc6acSVinicius Costa Gomes 9443d57dc68SGustavo F. Padovan rcu_read_lock(); 9450a708f8fSGustavo F. Padovan 9463d57dc68SGustavo F. Padovan list_for_each_entry_rcu(chan, &conn->chan_l, list) { 94748454079SGustavo F. Padovan struct sock *sk = chan->sk; 948baa7e1faSGustavo F. Padovan 9490a708f8fSGustavo F. Padovan bh_lock_sock(sk); 9500a708f8fSGustavo F. Padovan 95163128451SVinicius Costa Gomes if (conn->hcon->type == LE_LINK) { 952b501d6a1SAnderson Briglia if (smp_conn_security(conn, chan->sec_level)) 953cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 954acd7d370SVille Tervo 95563128451SVinicius Costa Gomes } else if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 956c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 95789bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONNECTED); 9580a708f8fSGustavo F. Padovan sk->sk_state_change(sk); 959b501d6a1SAnderson Briglia 96089bc500eSGustavo F. Padovan } else if (chan->state == BT_CONNECT) 961fc7f8a7eSGustavo F. Padovan l2cap_do_start(chan); 9620a708f8fSGustavo F. Padovan 9630a708f8fSGustavo F. Padovan bh_unlock_sock(sk); 9640a708f8fSGustavo F. Padovan } 9650a708f8fSGustavo F. Padovan 9663d57dc68SGustavo F. Padovan rcu_read_unlock(); 9670a708f8fSGustavo F. Padovan } 9680a708f8fSGustavo F. Padovan 9690a708f8fSGustavo F. Padovan /* Notify sockets that we cannot guaranty reliability anymore */ 9700a708f8fSGustavo F. Padovan static void l2cap_conn_unreliable(struct l2cap_conn *conn, int err) 9710a708f8fSGustavo F. Padovan { 97248454079SGustavo F. Padovan struct l2cap_chan *chan; 9730a708f8fSGustavo F. Padovan 9740a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 9750a708f8fSGustavo F. Padovan 9763d57dc68SGustavo F. Padovan rcu_read_lock(); 9770a708f8fSGustavo F. Padovan 9783d57dc68SGustavo F. Padovan list_for_each_entry_rcu(chan, &conn->chan_l, list) { 97948454079SGustavo F. Padovan struct sock *sk = chan->sk; 980baa7e1faSGustavo F. Padovan 981ecf61bdbSAndrei Emeltchenko if (test_bit(FLAG_FORCE_RELIABLE, &chan->flags)) 9820a708f8fSGustavo F. Padovan sk->sk_err = err; 9830a708f8fSGustavo F. Padovan } 9840a708f8fSGustavo F. Padovan 9853d57dc68SGustavo F. Padovan rcu_read_unlock(); 9860a708f8fSGustavo F. Padovan } 9870a708f8fSGustavo F. Padovan 988f878fcadSGustavo F. Padovan static void l2cap_info_timeout(struct work_struct *work) 9890a708f8fSGustavo F. Padovan { 990f878fcadSGustavo F. Padovan struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 991030013d8SGustavo F. Padovan info_timer.work); 9920a708f8fSGustavo F. Padovan 9930a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 9940a708f8fSGustavo F. Padovan conn->info_ident = 0; 9950a708f8fSGustavo F. Padovan 9960a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 9970a708f8fSGustavo F. Padovan } 9980a708f8fSGustavo F. Padovan 9995d3de7dfSVinicius Costa Gomes static void l2cap_conn_del(struct hci_conn *hcon, int err) 10005d3de7dfSVinicius Costa Gomes { 10015d3de7dfSVinicius Costa Gomes struct l2cap_conn *conn = hcon->l2cap_data; 10025d3de7dfSVinicius Costa Gomes struct l2cap_chan *chan, *l; 10035d3de7dfSVinicius Costa Gomes struct sock *sk; 10045d3de7dfSVinicius Costa Gomes 10055d3de7dfSVinicius Costa Gomes if (!conn) 10065d3de7dfSVinicius Costa Gomes return; 10075d3de7dfSVinicius Costa Gomes 10085d3de7dfSVinicius Costa Gomes BT_DBG("hcon %p conn %p, err %d", hcon, conn, err); 10095d3de7dfSVinicius Costa Gomes 10105d3de7dfSVinicius Costa Gomes kfree_skb(conn->rx_skb); 10115d3de7dfSVinicius Costa Gomes 10125d3de7dfSVinicius Costa Gomes /* Kill channels */ 10135d3de7dfSVinicius Costa Gomes list_for_each_entry_safe(chan, l, &conn->chan_l, list) { 10145d3de7dfSVinicius Costa Gomes sk = chan->sk; 1015aa2ac881SGustavo F. Padovan lock_sock(sk); 10165d3de7dfSVinicius Costa Gomes l2cap_chan_del(chan, err); 1017aa2ac881SGustavo F. Padovan release_sock(sk); 10185d3de7dfSVinicius Costa Gomes chan->ops->close(chan->data); 10195d3de7dfSVinicius Costa Gomes } 10205d3de7dfSVinicius Costa Gomes 102173d80debSLuiz Augusto von Dentz hci_chan_del(conn->hchan); 102273d80debSLuiz Augusto von Dentz 10235d3de7dfSVinicius Costa Gomes if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) 1024127074bfSUlisses Furquim cancel_delayed_work_sync(&conn->info_timer); 10255d3de7dfSVinicius Costa Gomes 102651a8efd7SJohan Hedberg if (test_and_clear_bit(HCI_CONN_LE_SMP_PEND, &hcon->flags)) { 1027127074bfSUlisses Furquim cancel_delayed_work_sync(&conn->security_timer); 10288aab4757SVinicius Costa Gomes smp_chan_destroy(conn); 1029d26a2345SVinicius Costa Gomes } 10305d3de7dfSVinicius Costa Gomes 10315d3de7dfSVinicius Costa Gomes hcon->l2cap_data = NULL; 10325d3de7dfSVinicius Costa Gomes kfree(conn); 10335d3de7dfSVinicius Costa Gomes } 10345d3de7dfSVinicius Costa Gomes 10356c9d42a1SGustavo F. Padovan static void security_timeout(struct work_struct *work) 10365d3de7dfSVinicius Costa Gomes { 10376c9d42a1SGustavo F. Padovan struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 10386c9d42a1SGustavo F. Padovan security_timer.work); 10395d3de7dfSVinicius Costa Gomes 10405d3de7dfSVinicius Costa Gomes l2cap_conn_del(conn->hcon, ETIMEDOUT); 10415d3de7dfSVinicius Costa Gomes } 10425d3de7dfSVinicius Costa Gomes 10430a708f8fSGustavo F. Padovan static struct l2cap_conn *l2cap_conn_add(struct hci_conn *hcon, u8 status) 10440a708f8fSGustavo F. Padovan { 10450a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 104673d80debSLuiz Augusto von Dentz struct hci_chan *hchan; 10470a708f8fSGustavo F. Padovan 10480a708f8fSGustavo F. Padovan if (conn || status) 10490a708f8fSGustavo F. Padovan return conn; 10500a708f8fSGustavo F. Padovan 105173d80debSLuiz Augusto von Dentz hchan = hci_chan_create(hcon); 105273d80debSLuiz Augusto von Dentz if (!hchan) 10530a708f8fSGustavo F. Padovan return NULL; 10540a708f8fSGustavo F. Padovan 105573d80debSLuiz Augusto von Dentz conn = kzalloc(sizeof(struct l2cap_conn), GFP_ATOMIC); 105673d80debSLuiz Augusto von Dentz if (!conn) { 105773d80debSLuiz Augusto von Dentz hci_chan_del(hchan); 105873d80debSLuiz Augusto von Dentz return NULL; 105973d80debSLuiz Augusto von Dentz } 106073d80debSLuiz Augusto von Dentz 10610a708f8fSGustavo F. Padovan hcon->l2cap_data = conn; 10620a708f8fSGustavo F. Padovan conn->hcon = hcon; 106373d80debSLuiz Augusto von Dentz conn->hchan = hchan; 10640a708f8fSGustavo F. Padovan 106573d80debSLuiz Augusto von Dentz BT_DBG("hcon %p conn %p hchan %p", hcon, conn, hchan); 10660a708f8fSGustavo F. Padovan 1067acd7d370SVille Tervo if (hcon->hdev->le_mtu && hcon->type == LE_LINK) 1068acd7d370SVille Tervo conn->mtu = hcon->hdev->le_mtu; 1069acd7d370SVille Tervo else 10700a708f8fSGustavo F. Padovan conn->mtu = hcon->hdev->acl_mtu; 1071acd7d370SVille Tervo 10720a708f8fSGustavo F. Padovan conn->src = &hcon->hdev->bdaddr; 10730a708f8fSGustavo F. Padovan conn->dst = &hcon->dst; 10740a708f8fSGustavo F. Padovan 10750a708f8fSGustavo F. Padovan conn->feat_mask = 0; 10760a708f8fSGustavo F. Padovan 10770a708f8fSGustavo F. Padovan spin_lock_init(&conn->lock); 1078baa7e1faSGustavo F. Padovan 1079baa7e1faSGustavo F. Padovan INIT_LIST_HEAD(&conn->chan_l); 10800a708f8fSGustavo F. Padovan 10815d3de7dfSVinicius Costa Gomes if (hcon->type == LE_LINK) 10826c9d42a1SGustavo F. Padovan INIT_DELAYED_WORK(&conn->security_timer, security_timeout); 10835d3de7dfSVinicius Costa Gomes else 1084030013d8SGustavo F. Padovan INIT_DELAYED_WORK(&conn->info_timer, l2cap_info_timeout); 10850a708f8fSGustavo F. Padovan 10869f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_REMOTE_USER_TERM; 10870a708f8fSGustavo F. Padovan 10880a708f8fSGustavo F. Padovan return conn; 10890a708f8fSGustavo F. Padovan } 10900a708f8fSGustavo F. Padovan 10910a708f8fSGustavo F. Padovan /* ---- Socket interface ---- */ 10920a708f8fSGustavo F. Padovan 10930a708f8fSGustavo F. Padovan /* Find socket with psm and source bdaddr. 10940a708f8fSGustavo F. Padovan * Returns closest match. 10950a708f8fSGustavo F. Padovan */ 109623691d75SGustavo F. Padovan static struct l2cap_chan *l2cap_global_chan_by_psm(int state, __le16 psm, bdaddr_t *src) 10970a708f8fSGustavo F. Padovan { 109823691d75SGustavo F. Padovan struct l2cap_chan *c, *c1 = NULL; 10990a708f8fSGustavo F. Padovan 110023691d75SGustavo F. Padovan read_lock(&chan_list_lock); 11010a708f8fSGustavo F. Padovan 110223691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 110323691d75SGustavo F. Padovan struct sock *sk = c->sk; 1104fe4128e0SGustavo F. Padovan 110589bc500eSGustavo F. Padovan if (state && c->state != state) 11060a708f8fSGustavo F. Padovan continue; 11070a708f8fSGustavo F. Padovan 110823691d75SGustavo F. Padovan if (c->psm == psm) { 11090a708f8fSGustavo F. Padovan /* Exact match. */ 111023691d75SGustavo F. Padovan if (!bacmp(&bt_sk(sk)->src, src)) { 1111a7567b20SJohannes Berg read_unlock(&chan_list_lock); 111223691d75SGustavo F. Padovan return c; 111323691d75SGustavo F. Padovan } 11140a708f8fSGustavo F. Padovan 11150a708f8fSGustavo F. Padovan /* Closest match */ 11160a708f8fSGustavo F. Padovan if (!bacmp(&bt_sk(sk)->src, BDADDR_ANY)) 111723691d75SGustavo F. Padovan c1 = c; 11180a708f8fSGustavo F. Padovan } 11190a708f8fSGustavo F. Padovan } 11200a708f8fSGustavo F. Padovan 112123691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 11220a708f8fSGustavo F. Padovan 112323691d75SGustavo F. Padovan return c1; 11240a708f8fSGustavo F. Padovan } 11250a708f8fSGustavo F. Padovan 1126cbe8fed4SJohan Hedberg int l2cap_chan_connect(struct l2cap_chan *chan, __le16 psm, u16 cid, bdaddr_t *dst) 11270a708f8fSGustavo F. Padovan { 11285d41ce1dSGustavo F. Padovan struct sock *sk = chan->sk; 11290a708f8fSGustavo F. Padovan bdaddr_t *src = &bt_sk(sk)->src; 11300a708f8fSGustavo F. Padovan struct l2cap_conn *conn; 11310a708f8fSGustavo F. Padovan struct hci_conn *hcon; 11320a708f8fSGustavo F. Padovan struct hci_dev *hdev; 11330a708f8fSGustavo F. Padovan __u8 auth_type; 11340a708f8fSGustavo F. Padovan int err; 11350a708f8fSGustavo F. Padovan 11360a708f8fSGustavo F. Padovan BT_DBG("%s -> %s psm 0x%2.2x", batostr(src), batostr(dst), 1137fe4128e0SGustavo F. Padovan chan->psm); 11380a708f8fSGustavo F. Padovan 11390a708f8fSGustavo F. Padovan hdev = hci_get_route(dst, src); 11400a708f8fSGustavo F. Padovan if (!hdev) 11410a708f8fSGustavo F. Padovan return -EHOSTUNREACH; 11420a708f8fSGustavo F. Padovan 114309fd0de5SGustavo F. Padovan hci_dev_lock(hdev); 11440a708f8fSGustavo F. Padovan 114503a00194SGustavo F. Padovan lock_sock(sk); 114603a00194SGustavo F. Padovan 114703a00194SGustavo F. Padovan /* PSM must be odd and lsb of upper byte must be 0 */ 114803a00194SGustavo F. Padovan if ((__le16_to_cpu(psm) & 0x0101) != 0x0001 && !cid && 114903a00194SGustavo F. Padovan chan->chan_type != L2CAP_CHAN_RAW) { 115003a00194SGustavo F. Padovan err = -EINVAL; 115103a00194SGustavo F. Padovan goto done; 115203a00194SGustavo F. Padovan } 115303a00194SGustavo F. Padovan 115403a00194SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED && !(psm || cid)) { 115503a00194SGustavo F. Padovan err = -EINVAL; 115603a00194SGustavo F. Padovan goto done; 115703a00194SGustavo F. Padovan } 115803a00194SGustavo F. Padovan 115903a00194SGustavo F. Padovan switch (chan->mode) { 116003a00194SGustavo F. Padovan case L2CAP_MODE_BASIC: 116103a00194SGustavo F. Padovan break; 116203a00194SGustavo F. Padovan case L2CAP_MODE_ERTM: 116303a00194SGustavo F. Padovan case L2CAP_MODE_STREAMING: 116403a00194SGustavo F. Padovan if (!disable_ertm) 116503a00194SGustavo F. Padovan break; 116603a00194SGustavo F. Padovan /* fall through */ 116703a00194SGustavo F. Padovan default: 116803a00194SGustavo F. Padovan err = -ENOTSUPP; 116903a00194SGustavo F. Padovan goto done; 117003a00194SGustavo F. Padovan } 117103a00194SGustavo F. Padovan 117203a00194SGustavo F. Padovan switch (sk->sk_state) { 117303a00194SGustavo F. Padovan case BT_CONNECT: 117403a00194SGustavo F. Padovan case BT_CONNECT2: 117503a00194SGustavo F. Padovan case BT_CONFIG: 117603a00194SGustavo F. Padovan /* Already connecting */ 117703a00194SGustavo F. Padovan err = 0; 117803a00194SGustavo F. Padovan goto done; 117903a00194SGustavo F. Padovan 118003a00194SGustavo F. Padovan case BT_CONNECTED: 118103a00194SGustavo F. Padovan /* Already connected */ 118203a00194SGustavo F. Padovan err = -EISCONN; 118303a00194SGustavo F. Padovan goto done; 118403a00194SGustavo F. Padovan 118503a00194SGustavo F. Padovan case BT_OPEN: 118603a00194SGustavo F. Padovan case BT_BOUND: 118703a00194SGustavo F. Padovan /* Can connect */ 118803a00194SGustavo F. Padovan break; 118903a00194SGustavo F. Padovan 119003a00194SGustavo F. Padovan default: 119103a00194SGustavo F. Padovan err = -EBADFD; 119203a00194SGustavo F. Padovan goto done; 119303a00194SGustavo F. Padovan } 119403a00194SGustavo F. Padovan 119503a00194SGustavo F. Padovan /* Set destination address and psm */ 11969219b2a0SGustavo F. Padovan bacpy(&bt_sk(sk)->dst, dst); 119703a00194SGustavo F. Padovan chan->psm = psm; 119803a00194SGustavo F. Padovan chan->dcid = cid; 11990a708f8fSGustavo F. Padovan 12004343478fSGustavo F. Padovan auth_type = l2cap_get_auth_type(chan); 12010a708f8fSGustavo F. Padovan 1202fe4128e0SGustavo F. Padovan if (chan->dcid == L2CAP_CID_LE_DATA) 1203acd7d370SVille Tervo hcon = hci_connect(hdev, LE_LINK, dst, 12044343478fSGustavo F. Padovan chan->sec_level, auth_type); 1205acd7d370SVille Tervo else 12060a708f8fSGustavo F. Padovan hcon = hci_connect(hdev, ACL_LINK, dst, 12074343478fSGustavo F. Padovan chan->sec_level, auth_type); 1208acd7d370SVille Tervo 120930e76272SVille Tervo if (IS_ERR(hcon)) { 121030e76272SVille Tervo err = PTR_ERR(hcon); 12110a708f8fSGustavo F. Padovan goto done; 121230e76272SVille Tervo } 12130a708f8fSGustavo F. Padovan 12140a708f8fSGustavo F. Padovan conn = l2cap_conn_add(hcon, 0); 12150a708f8fSGustavo F. Padovan if (!conn) { 12160a708f8fSGustavo F. Padovan hci_conn_put(hcon); 121730e76272SVille Tervo err = -ENOMEM; 12180a708f8fSGustavo F. Padovan goto done; 12190a708f8fSGustavo F. Padovan } 12200a708f8fSGustavo F. Padovan 12210a708f8fSGustavo F. Padovan /* Update source addr of the socket */ 12220a708f8fSGustavo F. Padovan bacpy(src, conn->src); 12230a708f8fSGustavo F. Padovan 122448454079SGustavo F. Padovan l2cap_chan_add(conn, chan); 122548454079SGustavo F. Padovan 122689bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONNECT); 1227c9b66675SGustavo F. Padovan __set_chan_timer(chan, sk->sk_sndtimeo); 12280a708f8fSGustavo F. Padovan 12290a708f8fSGustavo F. Padovan if (hcon->state == BT_CONNECTED) { 1230715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 1231c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 1232d45fc423SGustavo F. Padovan if (l2cap_chan_check_security(chan)) 123389bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONNECTED); 12340a708f8fSGustavo F. Padovan } else 1235fc7f8a7eSGustavo F. Padovan l2cap_do_start(chan); 12360a708f8fSGustavo F. Padovan } 12370a708f8fSGustavo F. Padovan 123830e76272SVille Tervo err = 0; 123930e76272SVille Tervo 12400a708f8fSGustavo F. Padovan done: 124109fd0de5SGustavo F. Padovan hci_dev_unlock(hdev); 12420a708f8fSGustavo F. Padovan hci_dev_put(hdev); 12430a708f8fSGustavo F. Padovan return err; 12440a708f8fSGustavo F. Padovan } 12450a708f8fSGustavo F. Padovan 1246dcba0dbaSGustavo F. Padovan int __l2cap_wait_ack(struct sock *sk) 12470a708f8fSGustavo F. Padovan { 12488c1d787bSGustavo F. Padovan struct l2cap_chan *chan = l2cap_pi(sk)->chan; 12490a708f8fSGustavo F. Padovan DECLARE_WAITQUEUE(wait, current); 12500a708f8fSGustavo F. Padovan int err = 0; 12510a708f8fSGustavo F. Padovan int timeo = HZ/5; 12520a708f8fSGustavo F. Padovan 12530a708f8fSGustavo F. Padovan add_wait_queue(sk_sleep(sk), &wait); 12540a708f8fSGustavo F. Padovan set_current_state(TASK_INTERRUPTIBLE); 1255a71a0cf4SPeter Hurley while (chan->unacked_frames > 0 && chan->conn) { 12560a708f8fSGustavo F. Padovan if (!timeo) 12570a708f8fSGustavo F. Padovan timeo = HZ/5; 12580a708f8fSGustavo F. Padovan 12590a708f8fSGustavo F. Padovan if (signal_pending(current)) { 12600a708f8fSGustavo F. Padovan err = sock_intr_errno(timeo); 12610a708f8fSGustavo F. Padovan break; 12620a708f8fSGustavo F. Padovan } 12630a708f8fSGustavo F. Padovan 12640a708f8fSGustavo F. Padovan release_sock(sk); 12650a708f8fSGustavo F. Padovan timeo = schedule_timeout(timeo); 12660a708f8fSGustavo F. Padovan lock_sock(sk); 1267a71a0cf4SPeter Hurley set_current_state(TASK_INTERRUPTIBLE); 12680a708f8fSGustavo F. Padovan 12690a708f8fSGustavo F. Padovan err = sock_error(sk); 12700a708f8fSGustavo F. Padovan if (err) 12710a708f8fSGustavo F. Padovan break; 12720a708f8fSGustavo F. Padovan } 12730a708f8fSGustavo F. Padovan set_current_state(TASK_RUNNING); 12740a708f8fSGustavo F. Padovan remove_wait_queue(sk_sleep(sk), &wait); 12750a708f8fSGustavo F. Padovan return err; 12760a708f8fSGustavo F. Padovan } 12770a708f8fSGustavo F. Padovan 1278721c4181SGustavo F. Padovan static void l2cap_monitor_timeout(struct work_struct *work) 12790a708f8fSGustavo F. Padovan { 1280721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 1281721c4181SGustavo F. Padovan monitor_timer.work); 1282525cd185SGustavo F. Padovan struct sock *sk = chan->sk; 12830a708f8fSGustavo F. Padovan 1284525cd185SGustavo F. Padovan BT_DBG("chan %p", chan); 12850a708f8fSGustavo F. Padovan 1286721c4181SGustavo F. Padovan lock_sock(sk); 12872c03a7a4SGustavo F. Padovan if (chan->retry_count >= chan->remote_max_tx) { 12888c1d787bSGustavo F. Padovan l2cap_send_disconn_req(chan->conn, chan, ECONNABORTED); 1289721c4181SGustavo F. Padovan release_sock(sk); 12900a708f8fSGustavo F. Padovan return; 12910a708f8fSGustavo F. Padovan } 12920a708f8fSGustavo F. Padovan 12936a026610SGustavo F. Padovan chan->retry_count++; 12941a09bcb9SGustavo F. Padovan __set_monitor_timer(chan); 12950a708f8fSGustavo F. Padovan 1296525cd185SGustavo F. Padovan l2cap_send_rr_or_rnr(chan, L2CAP_CTRL_POLL); 1297721c4181SGustavo F. Padovan release_sock(sk); 12980a708f8fSGustavo F. Padovan } 12990a708f8fSGustavo F. Padovan 1300721c4181SGustavo F. Padovan static void l2cap_retrans_timeout(struct work_struct *work) 13010a708f8fSGustavo F. Padovan { 1302721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 1303721c4181SGustavo F. Padovan retrans_timer.work); 1304525cd185SGustavo F. Padovan struct sock *sk = chan->sk; 13050a708f8fSGustavo F. Padovan 130649208c9cSGustavo F. Padovan BT_DBG("chan %p", chan); 13070a708f8fSGustavo F. Padovan 1308721c4181SGustavo F. Padovan lock_sock(sk); 13096a026610SGustavo F. Padovan chan->retry_count = 1; 13101a09bcb9SGustavo F. Padovan __set_monitor_timer(chan); 13110a708f8fSGustavo F. Padovan 1312e2ab4353SGustavo F. Padovan set_bit(CONN_WAIT_F, &chan->conn_state); 13130a708f8fSGustavo F. Padovan 1314525cd185SGustavo F. Padovan l2cap_send_rr_or_rnr(chan, L2CAP_CTRL_POLL); 1315721c4181SGustavo F. Padovan release_sock(sk); 13160a708f8fSGustavo F. Padovan } 13170a708f8fSGustavo F. Padovan 131842e5c802SGustavo F. Padovan static void l2cap_drop_acked_frames(struct l2cap_chan *chan) 13190a708f8fSGustavo F. Padovan { 13200a708f8fSGustavo F. Padovan struct sk_buff *skb; 13210a708f8fSGustavo F. Padovan 132258d35f87SGustavo F. Padovan while ((skb = skb_peek(&chan->tx_q)) && 13236a026610SGustavo F. Padovan chan->unacked_frames) { 132442e5c802SGustavo F. Padovan if (bt_cb(skb)->tx_seq == chan->expected_ack_seq) 13250a708f8fSGustavo F. Padovan break; 13260a708f8fSGustavo F. Padovan 132758d35f87SGustavo F. Padovan skb = skb_dequeue(&chan->tx_q); 13280a708f8fSGustavo F. Padovan kfree_skb(skb); 13290a708f8fSGustavo F. Padovan 13306a026610SGustavo F. Padovan chan->unacked_frames--; 13310a708f8fSGustavo F. Padovan } 13320a708f8fSGustavo F. Padovan 13336a026610SGustavo F. Padovan if (!chan->unacked_frames) 13341a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 13350a708f8fSGustavo F. Padovan } 13360a708f8fSGustavo F. Padovan 133767c9e840SSzymon Janc static void l2cap_streaming_send(struct l2cap_chan *chan) 13380a708f8fSGustavo F. Padovan { 13390a708f8fSGustavo F. Padovan struct sk_buff *skb; 134088843ab0SAndrei Emeltchenko u32 control; 134188843ab0SAndrei Emeltchenko u16 fcs; 13420a708f8fSGustavo F. Padovan 134358d35f87SGustavo F. Padovan while ((skb = skb_dequeue(&chan->tx_q))) { 134488843ab0SAndrei Emeltchenko control = __get_control(chan, skb->data + L2CAP_HDR_SIZE); 1345fb45de7dSAndrei Emeltchenko control |= __set_txseq(chan, chan->next_tx_seq); 134688843ab0SAndrei Emeltchenko __put_control(chan, control, skb->data + L2CAP_HDR_SIZE); 13470a708f8fSGustavo F. Padovan 134847d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 134903a51213SAndrei Emeltchenko fcs = crc16(0, (u8 *)skb->data, 135003a51213SAndrei Emeltchenko skb->len - L2CAP_FCS_SIZE); 135103a51213SAndrei Emeltchenko put_unaligned_le16(fcs, 135203a51213SAndrei Emeltchenko skb->data + skb->len - L2CAP_FCS_SIZE); 13530a708f8fSGustavo F. Padovan } 13540a708f8fSGustavo F. Padovan 13554343478fSGustavo F. Padovan l2cap_do_send(chan, skb); 13560a708f8fSGustavo F. Padovan 1357836be934SAndrei Emeltchenko chan->next_tx_seq = __next_seq(chan, chan->next_tx_seq); 13580a708f8fSGustavo F. Padovan } 13590a708f8fSGustavo F. Padovan } 13600a708f8fSGustavo F. Padovan 1361fb45de7dSAndrei Emeltchenko static void l2cap_retransmit_one_frame(struct l2cap_chan *chan, u16 tx_seq) 13620a708f8fSGustavo F. Padovan { 13630a708f8fSGustavo F. Padovan struct sk_buff *skb, *tx_skb; 136488843ab0SAndrei Emeltchenko u16 fcs; 136588843ab0SAndrei Emeltchenko u32 control; 13660a708f8fSGustavo F. Padovan 136758d35f87SGustavo F. Padovan skb = skb_peek(&chan->tx_q); 13680a708f8fSGustavo F. Padovan if (!skb) 13690a708f8fSGustavo F. Padovan return; 13700a708f8fSGustavo F. Padovan 1371d1726b6dSSzymon Janc while (bt_cb(skb)->tx_seq != tx_seq) { 137258d35f87SGustavo F. Padovan if (skb_queue_is_last(&chan->tx_q, skb)) 13730a708f8fSGustavo F. Padovan return; 13740a708f8fSGustavo F. Padovan 1375d1726b6dSSzymon Janc skb = skb_queue_next(&chan->tx_q, skb); 1376d1726b6dSSzymon Janc } 13770a708f8fSGustavo F. Padovan 13782c03a7a4SGustavo F. Padovan if (chan->remote_max_tx && 13792c03a7a4SGustavo F. Padovan bt_cb(skb)->retries == chan->remote_max_tx) { 13808c1d787bSGustavo F. Padovan l2cap_send_disconn_req(chan->conn, chan, ECONNABORTED); 13810a708f8fSGustavo F. Padovan return; 13820a708f8fSGustavo F. Padovan } 13830a708f8fSGustavo F. Padovan 13840a708f8fSGustavo F. Padovan tx_skb = skb_clone(skb, GFP_ATOMIC); 13850a708f8fSGustavo F. Padovan bt_cb(skb)->retries++; 138688843ab0SAndrei Emeltchenko 138788843ab0SAndrei Emeltchenko control = __get_control(chan, tx_skb->data + L2CAP_HDR_SIZE); 13887e0ef6eeSAndrei Emeltchenko control &= __get_sar_mask(chan); 13890a708f8fSGustavo F. Padovan 1390e2ab4353SGustavo F. Padovan if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state)) 139103f6715dSAndrei Emeltchenko control |= __set_ctrl_final(chan); 13920a708f8fSGustavo F. Padovan 13930b209faeSAndrei Emeltchenko control |= __set_reqseq(chan, chan->buffer_seq); 1394fb45de7dSAndrei Emeltchenko control |= __set_txseq(chan, tx_seq); 13950a708f8fSGustavo F. Padovan 139688843ab0SAndrei Emeltchenko __put_control(chan, control, tx_skb->data + L2CAP_HDR_SIZE); 13970a708f8fSGustavo F. Padovan 139847d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 139903a51213SAndrei Emeltchenko fcs = crc16(0, (u8 *)tx_skb->data, 140003a51213SAndrei Emeltchenko tx_skb->len - L2CAP_FCS_SIZE); 140103a51213SAndrei Emeltchenko put_unaligned_le16(fcs, 140203a51213SAndrei Emeltchenko tx_skb->data + tx_skb->len - L2CAP_FCS_SIZE); 14030a708f8fSGustavo F. Padovan } 14040a708f8fSGustavo F. Padovan 14054343478fSGustavo F. Padovan l2cap_do_send(chan, tx_skb); 14060a708f8fSGustavo F. Padovan } 14070a708f8fSGustavo F. Padovan 140867c9e840SSzymon Janc static int l2cap_ertm_send(struct l2cap_chan *chan) 14090a708f8fSGustavo F. Padovan { 14100a708f8fSGustavo F. Padovan struct sk_buff *skb, *tx_skb; 141188843ab0SAndrei Emeltchenko u16 fcs; 141288843ab0SAndrei Emeltchenko u32 control; 14130a708f8fSGustavo F. Padovan int nsent = 0; 14140a708f8fSGustavo F. Padovan 141589bc500eSGustavo F. Padovan if (chan->state != BT_CONNECTED) 14160a708f8fSGustavo F. Padovan return -ENOTCONN; 14170a708f8fSGustavo F. Padovan 141858d35f87SGustavo F. Padovan while ((skb = chan->tx_send_head) && (!l2cap_tx_window_full(chan))) { 14190a708f8fSGustavo F. Padovan 14202c03a7a4SGustavo F. Padovan if (chan->remote_max_tx && 14212c03a7a4SGustavo F. Padovan bt_cb(skb)->retries == chan->remote_max_tx) { 14228c1d787bSGustavo F. Padovan l2cap_send_disconn_req(chan->conn, chan, ECONNABORTED); 14230a708f8fSGustavo F. Padovan break; 14240a708f8fSGustavo F. Padovan } 14250a708f8fSGustavo F. Padovan 14260a708f8fSGustavo F. Padovan tx_skb = skb_clone(skb, GFP_ATOMIC); 14270a708f8fSGustavo F. Padovan 14280a708f8fSGustavo F. Padovan bt_cb(skb)->retries++; 14290a708f8fSGustavo F. Padovan 143088843ab0SAndrei Emeltchenko control = __get_control(chan, tx_skb->data + L2CAP_HDR_SIZE); 14317e0ef6eeSAndrei Emeltchenko control &= __get_sar_mask(chan); 14320a708f8fSGustavo F. Padovan 1433e2ab4353SGustavo F. Padovan if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state)) 143403f6715dSAndrei Emeltchenko control |= __set_ctrl_final(chan); 1435e2ab4353SGustavo F. Padovan 14360b209faeSAndrei Emeltchenko control |= __set_reqseq(chan, chan->buffer_seq); 1437fb45de7dSAndrei Emeltchenko control |= __set_txseq(chan, chan->next_tx_seq); 14380a708f8fSGustavo F. Padovan 143988843ab0SAndrei Emeltchenko __put_control(chan, control, tx_skb->data + L2CAP_HDR_SIZE); 14400a708f8fSGustavo F. Padovan 144147d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 144203a51213SAndrei Emeltchenko fcs = crc16(0, (u8 *)skb->data, 144303a51213SAndrei Emeltchenko tx_skb->len - L2CAP_FCS_SIZE); 144403a51213SAndrei Emeltchenko put_unaligned_le16(fcs, skb->data + 144503a51213SAndrei Emeltchenko tx_skb->len - L2CAP_FCS_SIZE); 14460a708f8fSGustavo F. Padovan } 14470a708f8fSGustavo F. Padovan 14484343478fSGustavo F. Padovan l2cap_do_send(chan, tx_skb); 14490a708f8fSGustavo F. Padovan 14501a09bcb9SGustavo F. Padovan __set_retrans_timer(chan); 14510a708f8fSGustavo F. Padovan 145242e5c802SGustavo F. Padovan bt_cb(skb)->tx_seq = chan->next_tx_seq; 1453836be934SAndrei Emeltchenko 1454836be934SAndrei Emeltchenko chan->next_tx_seq = __next_seq(chan, chan->next_tx_seq); 14550a708f8fSGustavo F. Padovan 145623e9fde2SSuraj Sumangala if (bt_cb(skb)->retries == 1) 14576a026610SGustavo F. Padovan chan->unacked_frames++; 145823e9fde2SSuraj Sumangala 14596a026610SGustavo F. Padovan chan->frames_sent++; 14600a708f8fSGustavo F. Padovan 146158d35f87SGustavo F. Padovan if (skb_queue_is_last(&chan->tx_q, skb)) 146258d35f87SGustavo F. Padovan chan->tx_send_head = NULL; 14630a708f8fSGustavo F. Padovan else 146458d35f87SGustavo F. Padovan chan->tx_send_head = skb_queue_next(&chan->tx_q, skb); 14650a708f8fSGustavo F. Padovan 14660a708f8fSGustavo F. Padovan nsent++; 14670a708f8fSGustavo F. Padovan } 14680a708f8fSGustavo F. Padovan 14690a708f8fSGustavo F. Padovan return nsent; 14700a708f8fSGustavo F. Padovan } 14710a708f8fSGustavo F. Padovan 1472525cd185SGustavo F. Padovan static int l2cap_retransmit_frames(struct l2cap_chan *chan) 14730a708f8fSGustavo F. Padovan { 14740a708f8fSGustavo F. Padovan int ret; 14750a708f8fSGustavo F. Padovan 147658d35f87SGustavo F. Padovan if (!skb_queue_empty(&chan->tx_q)) 147758d35f87SGustavo F. Padovan chan->tx_send_head = chan->tx_q.next; 14780a708f8fSGustavo F. Padovan 147942e5c802SGustavo F. Padovan chan->next_tx_seq = chan->expected_ack_seq; 1480525cd185SGustavo F. Padovan ret = l2cap_ertm_send(chan); 14810a708f8fSGustavo F. Padovan return ret; 14820a708f8fSGustavo F. Padovan } 14830a708f8fSGustavo F. Padovan 1484b17e73bbSSzymon Janc static void __l2cap_send_ack(struct l2cap_chan *chan) 14850a708f8fSGustavo F. Padovan { 148688843ab0SAndrei Emeltchenko u32 control = 0; 14870a708f8fSGustavo F. Padovan 14880b209faeSAndrei Emeltchenko control |= __set_reqseq(chan, chan->buffer_seq); 14890a708f8fSGustavo F. Padovan 1490e2ab4353SGustavo F. Padovan if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 1491ab784b73SAndrei Emeltchenko control |= __set_ctrl_super(chan, L2CAP_SUPER_RNR); 1492e2ab4353SGustavo F. Padovan set_bit(CONN_RNR_SENT, &chan->conn_state); 1493525cd185SGustavo F. Padovan l2cap_send_sframe(chan, control); 14940a708f8fSGustavo F. Padovan return; 14950a708f8fSGustavo F. Padovan } 14960a708f8fSGustavo F. Padovan 1497525cd185SGustavo F. Padovan if (l2cap_ertm_send(chan) > 0) 14980a708f8fSGustavo F. Padovan return; 14990a708f8fSGustavo F. Padovan 1500ab784b73SAndrei Emeltchenko control |= __set_ctrl_super(chan, L2CAP_SUPER_RR); 1501525cd185SGustavo F. Padovan l2cap_send_sframe(chan, control); 15020a708f8fSGustavo F. Padovan } 15030a708f8fSGustavo F. Padovan 1504b17e73bbSSzymon Janc static void l2cap_send_ack(struct l2cap_chan *chan) 1505b17e73bbSSzymon Janc { 1506b17e73bbSSzymon Janc __clear_ack_timer(chan); 1507b17e73bbSSzymon Janc __l2cap_send_ack(chan); 1508b17e73bbSSzymon Janc } 1509b17e73bbSSzymon Janc 1510525cd185SGustavo F. Padovan static void l2cap_send_srejtail(struct l2cap_chan *chan) 15110a708f8fSGustavo F. Padovan { 15120a708f8fSGustavo F. Padovan struct srej_list *tail; 151388843ab0SAndrei Emeltchenko u32 control; 15140a708f8fSGustavo F. Padovan 1515ab784b73SAndrei Emeltchenko control = __set_ctrl_super(chan, L2CAP_SUPER_SREJ); 151603f6715dSAndrei Emeltchenko control |= __set_ctrl_final(chan); 15170a708f8fSGustavo F. Padovan 151839d5a3eeSGustavo F. Padovan tail = list_entry((&chan->srej_l)->prev, struct srej_list, list); 15190b209faeSAndrei Emeltchenko control |= __set_reqseq(chan, tail->tx_seq); 15200a708f8fSGustavo F. Padovan 1521525cd185SGustavo F. Padovan l2cap_send_sframe(chan, control); 15220a708f8fSGustavo F. Padovan } 15230a708f8fSGustavo F. Padovan 15240952a57aSAndrei Emeltchenko static inline int l2cap_skbuff_fromiovec(struct l2cap_chan *chan, struct msghdr *msg, int len, int count, struct sk_buff *skb) 15250a708f8fSGustavo F. Padovan { 15260952a57aSAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 15270a708f8fSGustavo F. Padovan struct sk_buff **frag; 15280a708f8fSGustavo F. Padovan int err, sent = 0; 15290a708f8fSGustavo F. Padovan 15300a708f8fSGustavo F. Padovan if (memcpy_fromiovec(skb_put(skb, count), msg->msg_iov, count)) 15310a708f8fSGustavo F. Padovan return -EFAULT; 15320a708f8fSGustavo F. Padovan 15330a708f8fSGustavo F. Padovan sent += count; 15340a708f8fSGustavo F. Padovan len -= count; 15350a708f8fSGustavo F. Padovan 15360a708f8fSGustavo F. Padovan /* Continuation fragments (no L2CAP header) */ 15370a708f8fSGustavo F. Padovan frag = &skb_shinfo(skb)->frag_list; 15380a708f8fSGustavo F. Padovan while (len) { 15390a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 15400a708f8fSGustavo F. Padovan 15412f7719ceSAndrei Emeltchenko *frag = chan->ops->alloc_skb(chan, count, 15422f7719ceSAndrei Emeltchenko msg->msg_flags & MSG_DONTWAIT, &err); 15432f7719ceSAndrei Emeltchenko 15440a708f8fSGustavo F. Padovan if (!*frag) 15450a708f8fSGustavo F. Padovan return err; 15460a708f8fSGustavo F. Padovan if (memcpy_fromiovec(skb_put(*frag, count), msg->msg_iov, count)) 15470a708f8fSGustavo F. Padovan return -EFAULT; 15480a708f8fSGustavo F. Padovan 15495e59b791SLuiz Augusto von Dentz (*frag)->priority = skb->priority; 15505e59b791SLuiz Augusto von Dentz 15510a708f8fSGustavo F. Padovan sent += count; 15520a708f8fSGustavo F. Padovan len -= count; 15530a708f8fSGustavo F. Padovan 15540a708f8fSGustavo F. Padovan frag = &(*frag)->next; 15550a708f8fSGustavo F. Padovan } 15560a708f8fSGustavo F. Padovan 15570a708f8fSGustavo F. Padovan return sent; 15580a708f8fSGustavo F. Padovan } 15590a708f8fSGustavo F. Padovan 15605e59b791SLuiz Augusto von Dentz static struct sk_buff *l2cap_create_connless_pdu(struct l2cap_chan *chan, 15615e59b791SLuiz Augusto von Dentz struct msghdr *msg, size_t len, 15625e59b791SLuiz Augusto von Dentz u32 priority) 15630a708f8fSGustavo F. Padovan { 1564fe4128e0SGustavo F. Padovan struct sock *sk = chan->sk; 15658c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 15660a708f8fSGustavo F. Padovan struct sk_buff *skb; 156703a51213SAndrei Emeltchenko int err, count, hlen = L2CAP_HDR_SIZE + L2CAP_PSMLEN_SIZE; 15680a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 15690a708f8fSGustavo F. Padovan 15705e59b791SLuiz Augusto von Dentz BT_DBG("sk %p len %d priority %u", sk, (int)len, priority); 15710a708f8fSGustavo F. Padovan 15720a708f8fSGustavo F. Padovan count = min_t(unsigned int, (conn->mtu - hlen), len); 15732f7719ceSAndrei Emeltchenko 15742f7719ceSAndrei Emeltchenko skb = chan->ops->alloc_skb(chan, count + hlen, 15750a708f8fSGustavo F. Padovan msg->msg_flags & MSG_DONTWAIT, &err); 15762f7719ceSAndrei Emeltchenko 15770a708f8fSGustavo F. Padovan if (!skb) 15780a708f8fSGustavo F. Padovan return ERR_PTR(err); 15790a708f8fSGustavo F. Padovan 15805e59b791SLuiz Augusto von Dentz skb->priority = priority; 15815e59b791SLuiz Augusto von Dentz 15820a708f8fSGustavo F. Padovan /* Create L2CAP header */ 15830a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 1584fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 15850a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(len + (hlen - L2CAP_HDR_SIZE)); 1586fe4128e0SGustavo F. Padovan put_unaligned_le16(chan->psm, skb_put(skb, 2)); 15870a708f8fSGustavo F. Padovan 15880952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 15890a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 15900a708f8fSGustavo F. Padovan kfree_skb(skb); 15910a708f8fSGustavo F. Padovan return ERR_PTR(err); 15920a708f8fSGustavo F. Padovan } 15930a708f8fSGustavo F. Padovan return skb; 15940a708f8fSGustavo F. Padovan } 15950a708f8fSGustavo F. Padovan 15965e59b791SLuiz Augusto von Dentz static struct sk_buff *l2cap_create_basic_pdu(struct l2cap_chan *chan, 15975e59b791SLuiz Augusto von Dentz struct msghdr *msg, size_t len, 15985e59b791SLuiz Augusto von Dentz u32 priority) 15990a708f8fSGustavo F. Padovan { 1600fe4128e0SGustavo F. Padovan struct sock *sk = chan->sk; 16018c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 16020a708f8fSGustavo F. Padovan struct sk_buff *skb; 16030a708f8fSGustavo F. Padovan int err, count, hlen = L2CAP_HDR_SIZE; 16040a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 16050a708f8fSGustavo F. Padovan 16060a708f8fSGustavo F. Padovan BT_DBG("sk %p len %d", sk, (int)len); 16070a708f8fSGustavo F. Padovan 16080a708f8fSGustavo F. Padovan count = min_t(unsigned int, (conn->mtu - hlen), len); 16092f7719ceSAndrei Emeltchenko 16102f7719ceSAndrei Emeltchenko skb = chan->ops->alloc_skb(chan, count + hlen, 16110a708f8fSGustavo F. Padovan msg->msg_flags & MSG_DONTWAIT, &err); 16122f7719ceSAndrei Emeltchenko 16130a708f8fSGustavo F. Padovan if (!skb) 16140a708f8fSGustavo F. Padovan return ERR_PTR(err); 16150a708f8fSGustavo F. Padovan 16165e59b791SLuiz Augusto von Dentz skb->priority = priority; 16175e59b791SLuiz Augusto von Dentz 16180a708f8fSGustavo F. Padovan /* Create L2CAP header */ 16190a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 1620fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 16210a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(len + (hlen - L2CAP_HDR_SIZE)); 16220a708f8fSGustavo F. Padovan 16230952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 16240a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 16250a708f8fSGustavo F. Padovan kfree_skb(skb); 16260a708f8fSGustavo F. Padovan return ERR_PTR(err); 16270a708f8fSGustavo F. Padovan } 16280a708f8fSGustavo F. Padovan return skb; 16290a708f8fSGustavo F. Padovan } 16300a708f8fSGustavo F. Padovan 1631ab0ff76dSLuiz Augusto von Dentz static struct sk_buff *l2cap_create_iframe_pdu(struct l2cap_chan *chan, 1632ab0ff76dSLuiz Augusto von Dentz struct msghdr *msg, size_t len, 163388843ab0SAndrei Emeltchenko u32 control, u16 sdulen) 16340a708f8fSGustavo F. Padovan { 163547d1ec61SGustavo F. Padovan struct sock *sk = chan->sk; 16368c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 16370a708f8fSGustavo F. Padovan struct sk_buff *skb; 1638e4ca6d98SAndrei Emeltchenko int err, count, hlen; 16390a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 16400a708f8fSGustavo F. Padovan 16410a708f8fSGustavo F. Padovan BT_DBG("sk %p len %d", sk, (int)len); 16420a708f8fSGustavo F. Padovan 16430a708f8fSGustavo F. Padovan if (!conn) 16440a708f8fSGustavo F. Padovan return ERR_PTR(-ENOTCONN); 16450a708f8fSGustavo F. Padovan 1646e4ca6d98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 1647e4ca6d98SAndrei Emeltchenko hlen = L2CAP_EXT_HDR_SIZE; 1648e4ca6d98SAndrei Emeltchenko else 1649e4ca6d98SAndrei Emeltchenko hlen = L2CAP_ENH_HDR_SIZE; 1650e4ca6d98SAndrei Emeltchenko 16510a708f8fSGustavo F. Padovan if (sdulen) 165203a51213SAndrei Emeltchenko hlen += L2CAP_SDULEN_SIZE; 16530a708f8fSGustavo F. Padovan 165447d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 165503a51213SAndrei Emeltchenko hlen += L2CAP_FCS_SIZE; 16560a708f8fSGustavo F. Padovan 16570a708f8fSGustavo F. Padovan count = min_t(unsigned int, (conn->mtu - hlen), len); 16582f7719ceSAndrei Emeltchenko 16592f7719ceSAndrei Emeltchenko skb = chan->ops->alloc_skb(chan, count + hlen, 16600a708f8fSGustavo F. Padovan msg->msg_flags & MSG_DONTWAIT, &err); 16612f7719ceSAndrei Emeltchenko 16620a708f8fSGustavo F. Padovan if (!skb) 16630a708f8fSGustavo F. Padovan return ERR_PTR(err); 16640a708f8fSGustavo F. Padovan 16650a708f8fSGustavo F. Padovan /* Create L2CAP header */ 16660a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 1667fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 16680a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(len + (hlen - L2CAP_HDR_SIZE)); 166988843ab0SAndrei Emeltchenko 167088843ab0SAndrei Emeltchenko __put_control(chan, control, skb_put(skb, __ctrl_size(chan))); 167188843ab0SAndrei Emeltchenko 16720a708f8fSGustavo F. Padovan if (sdulen) 167303a51213SAndrei Emeltchenko put_unaligned_le16(sdulen, skb_put(skb, L2CAP_SDULEN_SIZE)); 16740a708f8fSGustavo F. Padovan 16750952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 16760a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 16770a708f8fSGustavo F. Padovan kfree_skb(skb); 16780a708f8fSGustavo F. Padovan return ERR_PTR(err); 16790a708f8fSGustavo F. Padovan } 16800a708f8fSGustavo F. Padovan 168147d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 168203a51213SAndrei Emeltchenko put_unaligned_le16(0, skb_put(skb, L2CAP_FCS_SIZE)); 16830a708f8fSGustavo F. Padovan 16840a708f8fSGustavo F. Padovan bt_cb(skb)->retries = 0; 16850a708f8fSGustavo F. Padovan return skb; 16860a708f8fSGustavo F. Padovan } 16870a708f8fSGustavo F. Padovan 168867c9e840SSzymon Janc static int l2cap_sar_segment_sdu(struct l2cap_chan *chan, struct msghdr *msg, size_t len) 16890a708f8fSGustavo F. Padovan { 16900a708f8fSGustavo F. Padovan struct sk_buff *skb; 16910a708f8fSGustavo F. Padovan struct sk_buff_head sar_queue; 169288843ab0SAndrei Emeltchenko u32 control; 16930a708f8fSGustavo F. Padovan size_t size = 0; 16940a708f8fSGustavo F. Padovan 16950a708f8fSGustavo F. Padovan skb_queue_head_init(&sar_queue); 16967e0ef6eeSAndrei Emeltchenko control = __set_ctrl_sar(chan, L2CAP_SAR_START); 169747d1ec61SGustavo F. Padovan skb = l2cap_create_iframe_pdu(chan, msg, chan->remote_mps, control, len); 16980a708f8fSGustavo F. Padovan if (IS_ERR(skb)) 16990a708f8fSGustavo F. Padovan return PTR_ERR(skb); 17000a708f8fSGustavo F. Padovan 17010a708f8fSGustavo F. Padovan __skb_queue_tail(&sar_queue, skb); 17022c03a7a4SGustavo F. Padovan len -= chan->remote_mps; 17032c03a7a4SGustavo F. Padovan size += chan->remote_mps; 17040a708f8fSGustavo F. Padovan 17050a708f8fSGustavo F. Padovan while (len > 0) { 17060a708f8fSGustavo F. Padovan size_t buflen; 17070a708f8fSGustavo F. Padovan 17082c03a7a4SGustavo F. Padovan if (len > chan->remote_mps) { 17097e0ef6eeSAndrei Emeltchenko control = __set_ctrl_sar(chan, L2CAP_SAR_CONTINUE); 17102c03a7a4SGustavo F. Padovan buflen = chan->remote_mps; 17110a708f8fSGustavo F. Padovan } else { 17127e0ef6eeSAndrei Emeltchenko control = __set_ctrl_sar(chan, L2CAP_SAR_END); 17130a708f8fSGustavo F. Padovan buflen = len; 17140a708f8fSGustavo F. Padovan } 17150a708f8fSGustavo F. Padovan 171647d1ec61SGustavo F. Padovan skb = l2cap_create_iframe_pdu(chan, msg, buflen, control, 0); 17170a708f8fSGustavo F. Padovan if (IS_ERR(skb)) { 17180a708f8fSGustavo F. Padovan skb_queue_purge(&sar_queue); 17190a708f8fSGustavo F. Padovan return PTR_ERR(skb); 17200a708f8fSGustavo F. Padovan } 17210a708f8fSGustavo F. Padovan 17220a708f8fSGustavo F. Padovan __skb_queue_tail(&sar_queue, skb); 17230a708f8fSGustavo F. Padovan len -= buflen; 17240a708f8fSGustavo F. Padovan size += buflen; 17250a708f8fSGustavo F. Padovan } 172658d35f87SGustavo F. Padovan skb_queue_splice_tail(&sar_queue, &chan->tx_q); 172758d35f87SGustavo F. Padovan if (chan->tx_send_head == NULL) 172858d35f87SGustavo F. Padovan chan->tx_send_head = sar_queue.next; 17290a708f8fSGustavo F. Padovan 17300a708f8fSGustavo F. Padovan return size; 17310a708f8fSGustavo F. Padovan } 17320a708f8fSGustavo F. Padovan 17335e59b791SLuiz Augusto von Dentz int l2cap_chan_send(struct l2cap_chan *chan, struct msghdr *msg, size_t len, 17345e59b791SLuiz Augusto von Dentz u32 priority) 17359a91a04aSGustavo F. Padovan { 17369a91a04aSGustavo F. Padovan struct sk_buff *skb; 173788843ab0SAndrei Emeltchenko u32 control; 17389a91a04aSGustavo F. Padovan int err; 17399a91a04aSGustavo F. Padovan 17409a91a04aSGustavo F. Padovan /* Connectionless channel */ 1741715ec005SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_LESS) { 17425e59b791SLuiz Augusto von Dentz skb = l2cap_create_connless_pdu(chan, msg, len, priority); 17439a91a04aSGustavo F. Padovan if (IS_ERR(skb)) 17449a91a04aSGustavo F. Padovan return PTR_ERR(skb); 17459a91a04aSGustavo F. Padovan 17469a91a04aSGustavo F. Padovan l2cap_do_send(chan, skb); 17479a91a04aSGustavo F. Padovan return len; 17489a91a04aSGustavo F. Padovan } 17499a91a04aSGustavo F. Padovan 17509a91a04aSGustavo F. Padovan switch (chan->mode) { 17519a91a04aSGustavo F. Padovan case L2CAP_MODE_BASIC: 17529a91a04aSGustavo F. Padovan /* Check outgoing MTU */ 17539a91a04aSGustavo F. Padovan if (len > chan->omtu) 17549a91a04aSGustavo F. Padovan return -EMSGSIZE; 17559a91a04aSGustavo F. Padovan 17569a91a04aSGustavo F. Padovan /* Create a basic PDU */ 17575e59b791SLuiz Augusto von Dentz skb = l2cap_create_basic_pdu(chan, msg, len, priority); 17589a91a04aSGustavo F. Padovan if (IS_ERR(skb)) 17599a91a04aSGustavo F. Padovan return PTR_ERR(skb); 17609a91a04aSGustavo F. Padovan 17619a91a04aSGustavo F. Padovan l2cap_do_send(chan, skb); 17629a91a04aSGustavo F. Padovan err = len; 17639a91a04aSGustavo F. Padovan break; 17649a91a04aSGustavo F. Padovan 17659a91a04aSGustavo F. Padovan case L2CAP_MODE_ERTM: 17669a91a04aSGustavo F. Padovan case L2CAP_MODE_STREAMING: 17679a91a04aSGustavo F. Padovan /* Entire SDU fits into one PDU */ 17689a91a04aSGustavo F. Padovan if (len <= chan->remote_mps) { 17697e0ef6eeSAndrei Emeltchenko control = __set_ctrl_sar(chan, L2CAP_SAR_UNSEGMENTED); 17709a91a04aSGustavo F. Padovan skb = l2cap_create_iframe_pdu(chan, msg, len, control, 17719a91a04aSGustavo F. Padovan 0); 17729a91a04aSGustavo F. Padovan if (IS_ERR(skb)) 17739a91a04aSGustavo F. Padovan return PTR_ERR(skb); 17749a91a04aSGustavo F. Padovan 17759a91a04aSGustavo F. Padovan __skb_queue_tail(&chan->tx_q, skb); 17769a91a04aSGustavo F. Padovan 17779a91a04aSGustavo F. Padovan if (chan->tx_send_head == NULL) 17789a91a04aSGustavo F. Padovan chan->tx_send_head = skb; 17799a91a04aSGustavo F. Padovan 17809a91a04aSGustavo F. Padovan } else { 17819a91a04aSGustavo F. Padovan /* Segment SDU into multiples PDUs */ 17829a91a04aSGustavo F. Padovan err = l2cap_sar_segment_sdu(chan, msg, len); 17839a91a04aSGustavo F. Padovan if (err < 0) 17849a91a04aSGustavo F. Padovan return err; 17859a91a04aSGustavo F. Padovan } 17869a91a04aSGustavo F. Padovan 17879a91a04aSGustavo F. Padovan if (chan->mode == L2CAP_MODE_STREAMING) { 17889a91a04aSGustavo F. Padovan l2cap_streaming_send(chan); 17899a91a04aSGustavo F. Padovan err = len; 17909a91a04aSGustavo F. Padovan break; 17919a91a04aSGustavo F. Padovan } 17929a91a04aSGustavo F. Padovan 1793e2ab4353SGustavo F. Padovan if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state) && 1794e2ab4353SGustavo F. Padovan test_bit(CONN_WAIT_F, &chan->conn_state)) { 17959a91a04aSGustavo F. Padovan err = len; 17969a91a04aSGustavo F. Padovan break; 17979a91a04aSGustavo F. Padovan } 17989a91a04aSGustavo F. Padovan 17999a91a04aSGustavo F. Padovan err = l2cap_ertm_send(chan); 18009a91a04aSGustavo F. Padovan if (err >= 0) 18019a91a04aSGustavo F. Padovan err = len; 18029a91a04aSGustavo F. Padovan 18039a91a04aSGustavo F. Padovan break; 18049a91a04aSGustavo F. Padovan 18059a91a04aSGustavo F. Padovan default: 18069a91a04aSGustavo F. Padovan BT_DBG("bad state %1.1x", chan->mode); 18079a91a04aSGustavo F. Padovan err = -EBADFD; 18089a91a04aSGustavo F. Padovan } 18099a91a04aSGustavo F. Padovan 18109a91a04aSGustavo F. Padovan return err; 18119a91a04aSGustavo F. Padovan } 18129a91a04aSGustavo F. Padovan 18130a708f8fSGustavo F. Padovan /* Copy frame to all raw sockets on that connection */ 18140a708f8fSGustavo F. Padovan static void l2cap_raw_recv(struct l2cap_conn *conn, struct sk_buff *skb) 18150a708f8fSGustavo F. Padovan { 18160a708f8fSGustavo F. Padovan struct sk_buff *nskb; 181748454079SGustavo F. Padovan struct l2cap_chan *chan; 18180a708f8fSGustavo F. Padovan 18190a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 18200a708f8fSGustavo F. Padovan 18213d57dc68SGustavo F. Padovan rcu_read_lock(); 18223d57dc68SGustavo F. Padovan 18233d57dc68SGustavo F. Padovan list_for_each_entry_rcu(chan, &conn->chan_l, list) { 182448454079SGustavo F. Padovan struct sock *sk = chan->sk; 1825715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_RAW) 18260a708f8fSGustavo F. Padovan continue; 18270a708f8fSGustavo F. Padovan 18280a708f8fSGustavo F. Padovan /* Don't send frame to the socket it came from */ 18290a708f8fSGustavo F. Padovan if (skb->sk == sk) 18300a708f8fSGustavo F. Padovan continue; 18310a708f8fSGustavo F. Padovan nskb = skb_clone(skb, GFP_ATOMIC); 18320a708f8fSGustavo F. Padovan if (!nskb) 18330a708f8fSGustavo F. Padovan continue; 18340a708f8fSGustavo F. Padovan 183523070494SGustavo F. Padovan if (chan->ops->recv(chan->data, nskb)) 18360a708f8fSGustavo F. Padovan kfree_skb(nskb); 18370a708f8fSGustavo F. Padovan } 18383d57dc68SGustavo F. Padovan 18393d57dc68SGustavo F. Padovan rcu_read_unlock(); 18400a708f8fSGustavo F. Padovan } 18410a708f8fSGustavo F. Padovan 18420a708f8fSGustavo F. Padovan /* ---- L2CAP signalling commands ---- */ 18430a708f8fSGustavo F. Padovan static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn, 18440a708f8fSGustavo F. Padovan u8 code, u8 ident, u16 dlen, void *data) 18450a708f8fSGustavo F. Padovan { 18460a708f8fSGustavo F. Padovan struct sk_buff *skb, **frag; 18470a708f8fSGustavo F. Padovan struct l2cap_cmd_hdr *cmd; 18480a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 18490a708f8fSGustavo F. Padovan int len, count; 18500a708f8fSGustavo F. Padovan 18510a708f8fSGustavo F. Padovan BT_DBG("conn %p, code 0x%2.2x, ident 0x%2.2x, len %d", 18520a708f8fSGustavo F. Padovan conn, code, ident, dlen); 18530a708f8fSGustavo F. Padovan 18540a708f8fSGustavo F. Padovan len = L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE + dlen; 18550a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 18560a708f8fSGustavo F. Padovan 18570a708f8fSGustavo F. Padovan skb = bt_skb_alloc(count, GFP_ATOMIC); 18580a708f8fSGustavo F. Padovan if (!skb) 18590a708f8fSGustavo F. Padovan return NULL; 18600a708f8fSGustavo F. Padovan 18610a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 18620a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(L2CAP_CMD_HDR_SIZE + dlen); 18633300d9a9SClaudio Takahasi 18643300d9a9SClaudio Takahasi if (conn->hcon->type == LE_LINK) 18653300d9a9SClaudio Takahasi lh->cid = cpu_to_le16(L2CAP_CID_LE_SIGNALING); 18663300d9a9SClaudio Takahasi else 18670a708f8fSGustavo F. Padovan lh->cid = cpu_to_le16(L2CAP_CID_SIGNALING); 18680a708f8fSGustavo F. Padovan 18690a708f8fSGustavo F. Padovan cmd = (struct l2cap_cmd_hdr *) skb_put(skb, L2CAP_CMD_HDR_SIZE); 18700a708f8fSGustavo F. Padovan cmd->code = code; 18710a708f8fSGustavo F. Padovan cmd->ident = ident; 18720a708f8fSGustavo F. Padovan cmd->len = cpu_to_le16(dlen); 18730a708f8fSGustavo F. Padovan 18740a708f8fSGustavo F. Padovan if (dlen) { 18750a708f8fSGustavo F. Padovan count -= L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE; 18760a708f8fSGustavo F. Padovan memcpy(skb_put(skb, count), data, count); 18770a708f8fSGustavo F. Padovan data += count; 18780a708f8fSGustavo F. Padovan } 18790a708f8fSGustavo F. Padovan 18800a708f8fSGustavo F. Padovan len -= skb->len; 18810a708f8fSGustavo F. Padovan 18820a708f8fSGustavo F. Padovan /* Continuation fragments (no L2CAP header) */ 18830a708f8fSGustavo F. Padovan frag = &skb_shinfo(skb)->frag_list; 18840a708f8fSGustavo F. Padovan while (len) { 18850a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 18860a708f8fSGustavo F. Padovan 18870a708f8fSGustavo F. Padovan *frag = bt_skb_alloc(count, GFP_ATOMIC); 18880a708f8fSGustavo F. Padovan if (!*frag) 18890a708f8fSGustavo F. Padovan goto fail; 18900a708f8fSGustavo F. Padovan 18910a708f8fSGustavo F. Padovan memcpy(skb_put(*frag, count), data, count); 18920a708f8fSGustavo F. Padovan 18930a708f8fSGustavo F. Padovan len -= count; 18940a708f8fSGustavo F. Padovan data += count; 18950a708f8fSGustavo F. Padovan 18960a708f8fSGustavo F. Padovan frag = &(*frag)->next; 18970a708f8fSGustavo F. Padovan } 18980a708f8fSGustavo F. Padovan 18990a708f8fSGustavo F. Padovan return skb; 19000a708f8fSGustavo F. Padovan 19010a708f8fSGustavo F. Padovan fail: 19020a708f8fSGustavo F. Padovan kfree_skb(skb); 19030a708f8fSGustavo F. Padovan return NULL; 19040a708f8fSGustavo F. Padovan } 19050a708f8fSGustavo F. Padovan 19060a708f8fSGustavo F. Padovan static inline int l2cap_get_conf_opt(void **ptr, int *type, int *olen, unsigned long *val) 19070a708f8fSGustavo F. Padovan { 19080a708f8fSGustavo F. Padovan struct l2cap_conf_opt *opt = *ptr; 19090a708f8fSGustavo F. Padovan int len; 19100a708f8fSGustavo F. Padovan 19110a708f8fSGustavo F. Padovan len = L2CAP_CONF_OPT_SIZE + opt->len; 19120a708f8fSGustavo F. Padovan *ptr += len; 19130a708f8fSGustavo F. Padovan 19140a708f8fSGustavo F. Padovan *type = opt->type; 19150a708f8fSGustavo F. Padovan *olen = opt->len; 19160a708f8fSGustavo F. Padovan 19170a708f8fSGustavo F. Padovan switch (opt->len) { 19180a708f8fSGustavo F. Padovan case 1: 19190a708f8fSGustavo F. Padovan *val = *((u8 *) opt->val); 19200a708f8fSGustavo F. Padovan break; 19210a708f8fSGustavo F. Padovan 19220a708f8fSGustavo F. Padovan case 2: 19230a708f8fSGustavo F. Padovan *val = get_unaligned_le16(opt->val); 19240a708f8fSGustavo F. Padovan break; 19250a708f8fSGustavo F. Padovan 19260a708f8fSGustavo F. Padovan case 4: 19270a708f8fSGustavo F. Padovan *val = get_unaligned_le32(opt->val); 19280a708f8fSGustavo F. Padovan break; 19290a708f8fSGustavo F. Padovan 19300a708f8fSGustavo F. Padovan default: 19310a708f8fSGustavo F. Padovan *val = (unsigned long) opt->val; 19320a708f8fSGustavo F. Padovan break; 19330a708f8fSGustavo F. Padovan } 19340a708f8fSGustavo F. Padovan 19350a708f8fSGustavo F. Padovan BT_DBG("type 0x%2.2x len %d val 0x%lx", *type, opt->len, *val); 19360a708f8fSGustavo F. Padovan return len; 19370a708f8fSGustavo F. Padovan } 19380a708f8fSGustavo F. Padovan 19390a708f8fSGustavo F. Padovan static void l2cap_add_conf_opt(void **ptr, u8 type, u8 len, unsigned long val) 19400a708f8fSGustavo F. Padovan { 19410a708f8fSGustavo F. Padovan struct l2cap_conf_opt *opt = *ptr; 19420a708f8fSGustavo F. Padovan 19430a708f8fSGustavo F. Padovan BT_DBG("type 0x%2.2x len %d val 0x%lx", type, len, val); 19440a708f8fSGustavo F. Padovan 19450a708f8fSGustavo F. Padovan opt->type = type; 19460a708f8fSGustavo F. Padovan opt->len = len; 19470a708f8fSGustavo F. Padovan 19480a708f8fSGustavo F. Padovan switch (len) { 19490a708f8fSGustavo F. Padovan case 1: 19500a708f8fSGustavo F. Padovan *((u8 *) opt->val) = val; 19510a708f8fSGustavo F. Padovan break; 19520a708f8fSGustavo F. Padovan 19530a708f8fSGustavo F. Padovan case 2: 19540a708f8fSGustavo F. Padovan put_unaligned_le16(val, opt->val); 19550a708f8fSGustavo F. Padovan break; 19560a708f8fSGustavo F. Padovan 19570a708f8fSGustavo F. Padovan case 4: 19580a708f8fSGustavo F. Padovan put_unaligned_le32(val, opt->val); 19590a708f8fSGustavo F. Padovan break; 19600a708f8fSGustavo F. Padovan 19610a708f8fSGustavo F. Padovan default: 19620a708f8fSGustavo F. Padovan memcpy(opt->val, (void *) val, len); 19630a708f8fSGustavo F. Padovan break; 19640a708f8fSGustavo F. Padovan } 19650a708f8fSGustavo F. Padovan 19660a708f8fSGustavo F. Padovan *ptr += L2CAP_CONF_OPT_SIZE + len; 19670a708f8fSGustavo F. Padovan } 19680a708f8fSGustavo F. Padovan 1969f89cef09SAndrei Emeltchenko static void l2cap_add_opt_efs(void **ptr, struct l2cap_chan *chan) 1970f89cef09SAndrei Emeltchenko { 1971f89cef09SAndrei Emeltchenko struct l2cap_conf_efs efs; 1972f89cef09SAndrei Emeltchenko 1973f89cef09SAndrei Emeltchenko switch (chan->mode) { 1974f89cef09SAndrei Emeltchenko case L2CAP_MODE_ERTM: 1975f89cef09SAndrei Emeltchenko efs.id = chan->local_id; 1976f89cef09SAndrei Emeltchenko efs.stype = chan->local_stype; 1977f89cef09SAndrei Emeltchenko efs.msdu = cpu_to_le16(chan->local_msdu); 1978f89cef09SAndrei Emeltchenko efs.sdu_itime = cpu_to_le32(chan->local_sdu_itime); 1979f89cef09SAndrei Emeltchenko efs.acc_lat = cpu_to_le32(L2CAP_DEFAULT_ACC_LAT); 1980f89cef09SAndrei Emeltchenko efs.flush_to = cpu_to_le32(L2CAP_DEFAULT_FLUSH_TO); 1981f89cef09SAndrei Emeltchenko break; 1982f89cef09SAndrei Emeltchenko 1983f89cef09SAndrei Emeltchenko case L2CAP_MODE_STREAMING: 1984f89cef09SAndrei Emeltchenko efs.id = 1; 1985f89cef09SAndrei Emeltchenko efs.stype = L2CAP_SERV_BESTEFFORT; 1986f89cef09SAndrei Emeltchenko efs.msdu = cpu_to_le16(chan->local_msdu); 1987f89cef09SAndrei Emeltchenko efs.sdu_itime = cpu_to_le32(chan->local_sdu_itime); 1988f89cef09SAndrei Emeltchenko efs.acc_lat = 0; 1989f89cef09SAndrei Emeltchenko efs.flush_to = 0; 1990f89cef09SAndrei Emeltchenko break; 1991f89cef09SAndrei Emeltchenko 1992f89cef09SAndrei Emeltchenko default: 1993f89cef09SAndrei Emeltchenko return; 1994f89cef09SAndrei Emeltchenko } 1995f89cef09SAndrei Emeltchenko 1996f89cef09SAndrei Emeltchenko l2cap_add_conf_opt(ptr, L2CAP_CONF_EFS, sizeof(efs), 1997f89cef09SAndrei Emeltchenko (unsigned long) &efs); 1998f89cef09SAndrei Emeltchenko } 1999f89cef09SAndrei Emeltchenko 2000721c4181SGustavo F. Padovan static void l2cap_ack_timeout(struct work_struct *work) 20010a708f8fSGustavo F. Padovan { 2002721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 2003721c4181SGustavo F. Padovan ack_timer.work); 20040a708f8fSGustavo F. Padovan 20052fb9b3d4SGustavo F. Padovan BT_DBG("chan %p", chan); 20062fb9b3d4SGustavo F. Padovan 2007721c4181SGustavo F. Padovan lock_sock(chan->sk); 2008b17e73bbSSzymon Janc __l2cap_send_ack(chan); 2009721c4181SGustavo F. Padovan release_sock(chan->sk); 201009bfb2eeSSzymon Janc 201109bfb2eeSSzymon Janc l2cap_chan_put(chan); 20120a708f8fSGustavo F. Padovan } 20130a708f8fSGustavo F. Padovan 2014525cd185SGustavo F. Padovan static inline void l2cap_ertm_init(struct l2cap_chan *chan) 20150a708f8fSGustavo F. Padovan { 201642e5c802SGustavo F. Padovan chan->expected_ack_seq = 0; 20176a026610SGustavo F. Padovan chan->unacked_frames = 0; 201842e5c802SGustavo F. Padovan chan->buffer_seq = 0; 20196a026610SGustavo F. Padovan chan->num_acked = 0; 20206a026610SGustavo F. Padovan chan->frames_sent = 0; 20210a708f8fSGustavo F. Padovan 2022721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->retrans_timer, l2cap_retrans_timeout); 2023721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->monitor_timer, l2cap_monitor_timeout); 2024721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->ack_timer, l2cap_ack_timeout); 20250a708f8fSGustavo F. Padovan 2026f1c6775bSGustavo F. Padovan skb_queue_head_init(&chan->srej_q); 20270a708f8fSGustavo F. Padovan 202839d5a3eeSGustavo F. Padovan INIT_LIST_HEAD(&chan->srej_l); 20290a708f8fSGustavo F. Padovan } 20300a708f8fSGustavo F. Padovan 20310a708f8fSGustavo F. Padovan static inline __u8 l2cap_select_mode(__u8 mode, __u16 remote_feat_mask) 20320a708f8fSGustavo F. Padovan { 20330a708f8fSGustavo F. Padovan switch (mode) { 20340a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 20350a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 20360a708f8fSGustavo F. Padovan if (l2cap_mode_supported(mode, remote_feat_mask)) 20370a708f8fSGustavo F. Padovan return mode; 20380a708f8fSGustavo F. Padovan /* fall through */ 20390a708f8fSGustavo F. Padovan default: 20400a708f8fSGustavo F. Padovan return L2CAP_MODE_BASIC; 20410a708f8fSGustavo F. Padovan } 20420a708f8fSGustavo F. Padovan } 20430a708f8fSGustavo F. Padovan 20446327eb98SAndrei Emeltchenko static inline bool __l2cap_ews_supported(struct l2cap_chan *chan) 20456327eb98SAndrei Emeltchenko { 20466327eb98SAndrei Emeltchenko return enable_hs && chan->conn->feat_mask & L2CAP_FEAT_EXT_WINDOW; 20476327eb98SAndrei Emeltchenko } 20486327eb98SAndrei Emeltchenko 2049f89cef09SAndrei Emeltchenko static inline bool __l2cap_efs_supported(struct l2cap_chan *chan) 2050f89cef09SAndrei Emeltchenko { 2051f89cef09SAndrei Emeltchenko return enable_hs && chan->conn->feat_mask & L2CAP_FEAT_EXT_FLOW; 2052f89cef09SAndrei Emeltchenko } 2053f89cef09SAndrei Emeltchenko 20546327eb98SAndrei Emeltchenko static inline void l2cap_txwin_setup(struct l2cap_chan *chan) 20556327eb98SAndrei Emeltchenko { 20566327eb98SAndrei Emeltchenko if (chan->tx_win > L2CAP_DEFAULT_TX_WINDOW && 2057836be934SAndrei Emeltchenko __l2cap_ews_supported(chan)) { 20586327eb98SAndrei Emeltchenko /* use extended control field */ 20596327eb98SAndrei Emeltchenko set_bit(FLAG_EXT_CTRL, &chan->flags); 2060836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_EXT_WINDOW; 2061836be934SAndrei Emeltchenko } else { 20626327eb98SAndrei Emeltchenko chan->tx_win = min_t(u16, chan->tx_win, 20636327eb98SAndrei Emeltchenko L2CAP_DEFAULT_TX_WINDOW); 2064836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_TX_WINDOW; 2065836be934SAndrei Emeltchenko } 20666327eb98SAndrei Emeltchenko } 20676327eb98SAndrei Emeltchenko 2068710f9b0aSGustavo F. Padovan static int l2cap_build_conf_req(struct l2cap_chan *chan, void *data) 20690a708f8fSGustavo F. Padovan { 20700a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = data; 20710c1bc5c6SGustavo F. Padovan struct l2cap_conf_rfc rfc = { .mode = chan->mode }; 20720a708f8fSGustavo F. Padovan void *ptr = req->data; 2073c8f79162SAndrei Emeltchenko u16 size; 20740a708f8fSGustavo F. Padovan 207549208c9cSGustavo F. Padovan BT_DBG("chan %p", chan); 20760a708f8fSGustavo F. Padovan 207773ffa904SGustavo F. Padovan if (chan->num_conf_req || chan->num_conf_rsp) 20780a708f8fSGustavo F. Padovan goto done; 20790a708f8fSGustavo F. Padovan 20800c1bc5c6SGustavo F. Padovan switch (chan->mode) { 20810a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 20820a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 2083c1360a1cSGustavo F. Padovan if (test_bit(CONF_STATE2_DEVICE, &chan->conf_state)) 20840a708f8fSGustavo F. Padovan break; 20850a708f8fSGustavo F. Padovan 2086f89cef09SAndrei Emeltchenko if (__l2cap_efs_supported(chan)) 2087f89cef09SAndrei Emeltchenko set_bit(FLAG_EFS_ENABLE, &chan->flags); 2088f89cef09SAndrei Emeltchenko 20890a708f8fSGustavo F. Padovan /* fall through */ 20900a708f8fSGustavo F. Padovan default: 20918c1d787bSGustavo F. Padovan chan->mode = l2cap_select_mode(rfc.mode, chan->conn->feat_mask); 20920a708f8fSGustavo F. Padovan break; 20930a708f8fSGustavo F. Padovan } 20940a708f8fSGustavo F. Padovan 20950a708f8fSGustavo F. Padovan done: 20960c1bc5c6SGustavo F. Padovan if (chan->imtu != L2CAP_DEFAULT_MTU) 20970c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->imtu); 20980a708f8fSGustavo F. Padovan 20990c1bc5c6SGustavo F. Padovan switch (chan->mode) { 21000a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 21018c1d787bSGustavo F. Padovan if (!(chan->conn->feat_mask & L2CAP_FEAT_ERTM) && 21028c1d787bSGustavo F. Padovan !(chan->conn->feat_mask & L2CAP_FEAT_STREAMING)) 21030a708f8fSGustavo F. Padovan break; 21040a708f8fSGustavo F. Padovan 21050a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_BASIC; 21060a708f8fSGustavo F. Padovan rfc.txwin_size = 0; 21070a708f8fSGustavo F. Padovan rfc.max_transmit = 0; 21080a708f8fSGustavo F. Padovan rfc.retrans_timeout = 0; 21090a708f8fSGustavo F. Padovan rfc.monitor_timeout = 0; 21100a708f8fSGustavo F. Padovan rfc.max_pdu_size = 0; 21110a708f8fSGustavo F. Padovan 21120a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 21130a708f8fSGustavo F. Padovan (unsigned long) &rfc); 21140a708f8fSGustavo F. Padovan break; 21150a708f8fSGustavo F. Padovan 21160a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 21170a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_ERTM; 211847d1ec61SGustavo F. Padovan rfc.max_transmit = chan->max_tx; 21190a708f8fSGustavo F. Padovan rfc.retrans_timeout = 0; 21200a708f8fSGustavo F. Padovan rfc.monitor_timeout = 0; 2121c8f79162SAndrei Emeltchenko 2122c8f79162SAndrei Emeltchenko size = min_t(u16, L2CAP_DEFAULT_MAX_PDU_SIZE, chan->conn->mtu - 2123c8f79162SAndrei Emeltchenko L2CAP_EXT_HDR_SIZE - 2124c8f79162SAndrei Emeltchenko L2CAP_SDULEN_SIZE - 2125c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 2126c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 21270a708f8fSGustavo F. Padovan 21286327eb98SAndrei Emeltchenko l2cap_txwin_setup(chan); 21296327eb98SAndrei Emeltchenko 21306327eb98SAndrei Emeltchenko rfc.txwin_size = min_t(u16, chan->tx_win, 21316327eb98SAndrei Emeltchenko L2CAP_DEFAULT_TX_WINDOW); 21320a708f8fSGustavo F. Padovan 21330a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 21340a708f8fSGustavo F. Padovan (unsigned long) &rfc); 21350a708f8fSGustavo F. Padovan 2136f89cef09SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) 2137f89cef09SAndrei Emeltchenko l2cap_add_opt_efs(&ptr, chan); 2138f89cef09SAndrei Emeltchenko 21398c1d787bSGustavo F. Padovan if (!(chan->conn->feat_mask & L2CAP_FEAT_FCS)) 21400a708f8fSGustavo F. Padovan break; 21410a708f8fSGustavo F. Padovan 214247d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_NONE || 2143c1360a1cSGustavo F. Padovan test_bit(CONF_NO_FCS_RECV, &chan->conf_state)) { 214447d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 214547d1ec61SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_FCS, 1, chan->fcs); 21460a708f8fSGustavo F. Padovan } 21476327eb98SAndrei Emeltchenko 21486327eb98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 21496327eb98SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EWS, 2, 21506327eb98SAndrei Emeltchenko chan->tx_win); 21510a708f8fSGustavo F. Padovan break; 21520a708f8fSGustavo F. Padovan 21530a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 21540a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_STREAMING; 21550a708f8fSGustavo F. Padovan rfc.txwin_size = 0; 21560a708f8fSGustavo F. Padovan rfc.max_transmit = 0; 21570a708f8fSGustavo F. Padovan rfc.retrans_timeout = 0; 21580a708f8fSGustavo F. Padovan rfc.monitor_timeout = 0; 2159c8f79162SAndrei Emeltchenko 2160c8f79162SAndrei Emeltchenko size = min_t(u16, L2CAP_DEFAULT_MAX_PDU_SIZE, chan->conn->mtu - 2161c8f79162SAndrei Emeltchenko L2CAP_EXT_HDR_SIZE - 2162c8f79162SAndrei Emeltchenko L2CAP_SDULEN_SIZE - 2163c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 2164c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 21650a708f8fSGustavo F. Padovan 21660a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 21670a708f8fSGustavo F. Padovan (unsigned long) &rfc); 21680a708f8fSGustavo F. Padovan 2169f89cef09SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) 2170f89cef09SAndrei Emeltchenko l2cap_add_opt_efs(&ptr, chan); 2171f89cef09SAndrei Emeltchenko 21728c1d787bSGustavo F. Padovan if (!(chan->conn->feat_mask & L2CAP_FEAT_FCS)) 21730a708f8fSGustavo F. Padovan break; 21740a708f8fSGustavo F. Padovan 217547d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_NONE || 2176c1360a1cSGustavo F. Padovan test_bit(CONF_NO_FCS_RECV, &chan->conf_state)) { 217747d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 217847d1ec61SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_FCS, 1, chan->fcs); 21790a708f8fSGustavo F. Padovan } 21800a708f8fSGustavo F. Padovan break; 21810a708f8fSGustavo F. Padovan } 21820a708f8fSGustavo F. Padovan 2183fe4128e0SGustavo F. Padovan req->dcid = cpu_to_le16(chan->dcid); 21840a708f8fSGustavo F. Padovan req->flags = cpu_to_le16(0); 21850a708f8fSGustavo F. Padovan 21860a708f8fSGustavo F. Padovan return ptr - data; 21870a708f8fSGustavo F. Padovan } 21880a708f8fSGustavo F. Padovan 218973ffa904SGustavo F. Padovan static int l2cap_parse_conf_req(struct l2cap_chan *chan, void *data) 21900a708f8fSGustavo F. Padovan { 21910a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = data; 21920a708f8fSGustavo F. Padovan void *ptr = rsp->data; 219373ffa904SGustavo F. Padovan void *req = chan->conf_req; 219473ffa904SGustavo F. Padovan int len = chan->conf_len; 21950a708f8fSGustavo F. Padovan int type, hint, olen; 21960a708f8fSGustavo F. Padovan unsigned long val; 21970a708f8fSGustavo F. Padovan struct l2cap_conf_rfc rfc = { .mode = L2CAP_MODE_BASIC }; 219842dceae2SAndrei Emeltchenko struct l2cap_conf_efs efs; 219942dceae2SAndrei Emeltchenko u8 remote_efs = 0; 22000a708f8fSGustavo F. Padovan u16 mtu = L2CAP_DEFAULT_MTU; 22010a708f8fSGustavo F. Padovan u16 result = L2CAP_CONF_SUCCESS; 2202c8f79162SAndrei Emeltchenko u16 size; 22030a708f8fSGustavo F. Padovan 220473ffa904SGustavo F. Padovan BT_DBG("chan %p", chan); 22050a708f8fSGustavo F. Padovan 22060a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 22070a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&req, &type, &olen, &val); 22080a708f8fSGustavo F. Padovan 22090a708f8fSGustavo F. Padovan hint = type & L2CAP_CONF_HINT; 22100a708f8fSGustavo F. Padovan type &= L2CAP_CONF_MASK; 22110a708f8fSGustavo F. Padovan 22120a708f8fSGustavo F. Padovan switch (type) { 22130a708f8fSGustavo F. Padovan case L2CAP_CONF_MTU: 22140a708f8fSGustavo F. Padovan mtu = val; 22150a708f8fSGustavo F. Padovan break; 22160a708f8fSGustavo F. Padovan 22170a708f8fSGustavo F. Padovan case L2CAP_CONF_FLUSH_TO: 22180c1bc5c6SGustavo F. Padovan chan->flush_to = val; 22190a708f8fSGustavo F. Padovan break; 22200a708f8fSGustavo F. Padovan 22210a708f8fSGustavo F. Padovan case L2CAP_CONF_QOS: 22220a708f8fSGustavo F. Padovan break; 22230a708f8fSGustavo F. Padovan 22240a708f8fSGustavo F. Padovan case L2CAP_CONF_RFC: 22250a708f8fSGustavo F. Padovan if (olen == sizeof(rfc)) 22260a708f8fSGustavo F. Padovan memcpy(&rfc, (void *) val, olen); 22270a708f8fSGustavo F. Padovan break; 22280a708f8fSGustavo F. Padovan 22290a708f8fSGustavo F. Padovan case L2CAP_CONF_FCS: 22300a708f8fSGustavo F. Padovan if (val == L2CAP_FCS_NONE) 2231c1360a1cSGustavo F. Padovan set_bit(CONF_NO_FCS_RECV, &chan->conf_state); 223242dceae2SAndrei Emeltchenko break; 22330a708f8fSGustavo F. Padovan 223442dceae2SAndrei Emeltchenko case L2CAP_CONF_EFS: 223542dceae2SAndrei Emeltchenko remote_efs = 1; 223642dceae2SAndrei Emeltchenko if (olen == sizeof(efs)) 223742dceae2SAndrei Emeltchenko memcpy(&efs, (void *) val, olen); 22380a708f8fSGustavo F. Padovan break; 22390a708f8fSGustavo F. Padovan 22406327eb98SAndrei Emeltchenko case L2CAP_CONF_EWS: 22416327eb98SAndrei Emeltchenko if (!enable_hs) 22426327eb98SAndrei Emeltchenko return -ECONNREFUSED; 22436327eb98SAndrei Emeltchenko 22446327eb98SAndrei Emeltchenko set_bit(FLAG_EXT_CTRL, &chan->flags); 22456327eb98SAndrei Emeltchenko set_bit(CONF_EWS_RECV, &chan->conf_state); 2246836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_EXT_WINDOW; 22476327eb98SAndrei Emeltchenko chan->remote_tx_win = val; 22480a708f8fSGustavo F. Padovan break; 22490a708f8fSGustavo F. Padovan 22500a708f8fSGustavo F. Padovan default: 22510a708f8fSGustavo F. Padovan if (hint) 22520a708f8fSGustavo F. Padovan break; 22530a708f8fSGustavo F. Padovan 22540a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNKNOWN; 22550a708f8fSGustavo F. Padovan *((u8 *) ptr++) = type; 22560a708f8fSGustavo F. Padovan break; 22570a708f8fSGustavo F. Padovan } 22580a708f8fSGustavo F. Padovan } 22590a708f8fSGustavo F. Padovan 226073ffa904SGustavo F. Padovan if (chan->num_conf_rsp || chan->num_conf_req > 1) 22610a708f8fSGustavo F. Padovan goto done; 22620a708f8fSGustavo F. Padovan 22630c1bc5c6SGustavo F. Padovan switch (chan->mode) { 22640a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 22650a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 2266c1360a1cSGustavo F. Padovan if (!test_bit(CONF_STATE2_DEVICE, &chan->conf_state)) { 22670c1bc5c6SGustavo F. Padovan chan->mode = l2cap_select_mode(rfc.mode, 22688c1d787bSGustavo F. Padovan chan->conn->feat_mask); 22690a708f8fSGustavo F. Padovan break; 22700a708f8fSGustavo F. Padovan } 22710a708f8fSGustavo F. Padovan 227242dceae2SAndrei Emeltchenko if (remote_efs) { 227342dceae2SAndrei Emeltchenko if (__l2cap_efs_supported(chan)) 227442dceae2SAndrei Emeltchenko set_bit(FLAG_EFS_ENABLE, &chan->flags); 227542dceae2SAndrei Emeltchenko else 227642dceae2SAndrei Emeltchenko return -ECONNREFUSED; 227742dceae2SAndrei Emeltchenko } 227842dceae2SAndrei Emeltchenko 22790c1bc5c6SGustavo F. Padovan if (chan->mode != rfc.mode) 22800a708f8fSGustavo F. Padovan return -ECONNREFUSED; 22810a708f8fSGustavo F. Padovan 22820a708f8fSGustavo F. Padovan break; 22830a708f8fSGustavo F. Padovan } 22840a708f8fSGustavo F. Padovan 22850a708f8fSGustavo F. Padovan done: 22860c1bc5c6SGustavo F. Padovan if (chan->mode != rfc.mode) { 22870a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 22880c1bc5c6SGustavo F. Padovan rfc.mode = chan->mode; 22890a708f8fSGustavo F. Padovan 229073ffa904SGustavo F. Padovan if (chan->num_conf_rsp == 1) 22910a708f8fSGustavo F. Padovan return -ECONNREFUSED; 22920a708f8fSGustavo F. Padovan 22930a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 22940a708f8fSGustavo F. Padovan sizeof(rfc), (unsigned long) &rfc); 22950a708f8fSGustavo F. Padovan } 22960a708f8fSGustavo F. Padovan 22970a708f8fSGustavo F. Padovan if (result == L2CAP_CONF_SUCCESS) { 22980a708f8fSGustavo F. Padovan /* Configure output options and let the other side know 22990a708f8fSGustavo F. Padovan * which ones we don't like. */ 23000a708f8fSGustavo F. Padovan 23010a708f8fSGustavo F. Padovan if (mtu < L2CAP_DEFAULT_MIN_MTU) 23020a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 23030a708f8fSGustavo F. Padovan else { 23040c1bc5c6SGustavo F. Padovan chan->omtu = mtu; 2305c1360a1cSGustavo F. Padovan set_bit(CONF_MTU_DONE, &chan->conf_state); 23060a708f8fSGustavo F. Padovan } 23070c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->omtu); 23080a708f8fSGustavo F. Padovan 230942dceae2SAndrei Emeltchenko if (remote_efs) { 231042dceae2SAndrei Emeltchenko if (chan->local_stype != L2CAP_SERV_NOTRAFIC && 231142dceae2SAndrei Emeltchenko efs.stype != L2CAP_SERV_NOTRAFIC && 231242dceae2SAndrei Emeltchenko efs.stype != chan->local_stype) { 231342dceae2SAndrei Emeltchenko 231442dceae2SAndrei Emeltchenko result = L2CAP_CONF_UNACCEPT; 231542dceae2SAndrei Emeltchenko 231642dceae2SAndrei Emeltchenko if (chan->num_conf_req >= 1) 231742dceae2SAndrei Emeltchenko return -ECONNREFUSED; 231842dceae2SAndrei Emeltchenko 231942dceae2SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, 232042dceae2SAndrei Emeltchenko sizeof(efs), 232142dceae2SAndrei Emeltchenko (unsigned long) &efs); 23220e8b207eSAndrei Emeltchenko } else { 23233e6b3b95SGustavo F. Padovan /* Send PENDING Conf Rsp */ 23240e8b207eSAndrei Emeltchenko result = L2CAP_CONF_PENDING; 23250e8b207eSAndrei Emeltchenko set_bit(CONF_LOC_CONF_PEND, &chan->conf_state); 232642dceae2SAndrei Emeltchenko } 232742dceae2SAndrei Emeltchenko } 232842dceae2SAndrei Emeltchenko 23290a708f8fSGustavo F. Padovan switch (rfc.mode) { 23300a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 233147d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 2332c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 23330a708f8fSGustavo F. Padovan break; 23340a708f8fSGustavo F. Padovan 23350a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 23366327eb98SAndrei Emeltchenko if (!test_bit(CONF_EWS_RECV, &chan->conf_state)) 23372c03a7a4SGustavo F. Padovan chan->remote_tx_win = rfc.txwin_size; 23386327eb98SAndrei Emeltchenko else 23396327eb98SAndrei Emeltchenko rfc.txwin_size = L2CAP_DEFAULT_TX_WINDOW; 23406327eb98SAndrei Emeltchenko 23412c03a7a4SGustavo F. Padovan chan->remote_max_tx = rfc.max_transmit; 23420a708f8fSGustavo F. Padovan 2343c8f79162SAndrei Emeltchenko size = min_t(u16, le16_to_cpu(rfc.max_pdu_size), 2344c8f79162SAndrei Emeltchenko chan->conn->mtu - 2345c8f79162SAndrei Emeltchenko L2CAP_EXT_HDR_SIZE - 2346c8f79162SAndrei Emeltchenko L2CAP_SDULEN_SIZE - 2347c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 2348c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 2349c8f79162SAndrei Emeltchenko chan->remote_mps = size; 23500a708f8fSGustavo F. Padovan 23510a708f8fSGustavo F. Padovan rfc.retrans_timeout = 23520a708f8fSGustavo F. Padovan le16_to_cpu(L2CAP_DEFAULT_RETRANS_TO); 23530a708f8fSGustavo F. Padovan rfc.monitor_timeout = 23540a708f8fSGustavo F. Padovan le16_to_cpu(L2CAP_DEFAULT_MONITOR_TO); 23550a708f8fSGustavo F. Padovan 2356c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 23570a708f8fSGustavo F. Padovan 23580a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 23590a708f8fSGustavo F. Padovan sizeof(rfc), (unsigned long) &rfc); 23600a708f8fSGustavo F. Padovan 236142dceae2SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) { 236242dceae2SAndrei Emeltchenko chan->remote_id = efs.id; 236342dceae2SAndrei Emeltchenko chan->remote_stype = efs.stype; 236442dceae2SAndrei Emeltchenko chan->remote_msdu = le16_to_cpu(efs.msdu); 236542dceae2SAndrei Emeltchenko chan->remote_flush_to = 236642dceae2SAndrei Emeltchenko le32_to_cpu(efs.flush_to); 236742dceae2SAndrei Emeltchenko chan->remote_acc_lat = 236842dceae2SAndrei Emeltchenko le32_to_cpu(efs.acc_lat); 236942dceae2SAndrei Emeltchenko chan->remote_sdu_itime = 237042dceae2SAndrei Emeltchenko le32_to_cpu(efs.sdu_itime); 237142dceae2SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, 237242dceae2SAndrei Emeltchenko sizeof(efs), (unsigned long) &efs); 237342dceae2SAndrei Emeltchenko } 23740a708f8fSGustavo F. Padovan break; 23750a708f8fSGustavo F. Padovan 23760a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 2377c8f79162SAndrei Emeltchenko size = min_t(u16, le16_to_cpu(rfc.max_pdu_size), 2378c8f79162SAndrei Emeltchenko chan->conn->mtu - 2379c8f79162SAndrei Emeltchenko L2CAP_EXT_HDR_SIZE - 2380c8f79162SAndrei Emeltchenko L2CAP_SDULEN_SIZE - 2381c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 2382c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 2383c8f79162SAndrei Emeltchenko chan->remote_mps = size; 23840a708f8fSGustavo F. Padovan 2385c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 23860a708f8fSGustavo F. Padovan 23870a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 23880a708f8fSGustavo F. Padovan sizeof(rfc), (unsigned long) &rfc); 23890a708f8fSGustavo F. Padovan 23900a708f8fSGustavo F. Padovan break; 23910a708f8fSGustavo F. Padovan 23920a708f8fSGustavo F. Padovan default: 23930a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 23940a708f8fSGustavo F. Padovan 23950a708f8fSGustavo F. Padovan memset(&rfc, 0, sizeof(rfc)); 23960c1bc5c6SGustavo F. Padovan rfc.mode = chan->mode; 23970a708f8fSGustavo F. Padovan } 23980a708f8fSGustavo F. Padovan 23990a708f8fSGustavo F. Padovan if (result == L2CAP_CONF_SUCCESS) 2400c1360a1cSGustavo F. Padovan set_bit(CONF_OUTPUT_DONE, &chan->conf_state); 24010a708f8fSGustavo F. Padovan } 2402fe4128e0SGustavo F. Padovan rsp->scid = cpu_to_le16(chan->dcid); 24030a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(result); 24040a708f8fSGustavo F. Padovan rsp->flags = cpu_to_le16(0x0000); 24050a708f8fSGustavo F. Padovan 24060a708f8fSGustavo F. Padovan return ptr - data; 24070a708f8fSGustavo F. Padovan } 24080a708f8fSGustavo F. Padovan 2409b4450035SGustavo F. Padovan static int l2cap_parse_conf_rsp(struct l2cap_chan *chan, void *rsp, int len, void *data, u16 *result) 24100a708f8fSGustavo F. Padovan { 24110a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = data; 24120a708f8fSGustavo F. Padovan void *ptr = req->data; 24130a708f8fSGustavo F. Padovan int type, olen; 24140a708f8fSGustavo F. Padovan unsigned long val; 241536e999a8SMat Martineau struct l2cap_conf_rfc rfc = { .mode = L2CAP_MODE_BASIC }; 241666af7aafSAndrei Emeltchenko struct l2cap_conf_efs efs; 24170a708f8fSGustavo F. Padovan 2418fe4128e0SGustavo F. Padovan BT_DBG("chan %p, rsp %p, len %d, req %p", chan, rsp, len, data); 24190a708f8fSGustavo F. Padovan 24200a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 24210a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&rsp, &type, &olen, &val); 24220a708f8fSGustavo F. Padovan 24230a708f8fSGustavo F. Padovan switch (type) { 24240a708f8fSGustavo F. Padovan case L2CAP_CONF_MTU: 24250a708f8fSGustavo F. Padovan if (val < L2CAP_DEFAULT_MIN_MTU) { 24260a708f8fSGustavo F. Padovan *result = L2CAP_CONF_UNACCEPT; 24270c1bc5c6SGustavo F. Padovan chan->imtu = L2CAP_DEFAULT_MIN_MTU; 24280a708f8fSGustavo F. Padovan } else 24290c1bc5c6SGustavo F. Padovan chan->imtu = val; 24300c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->imtu); 24310a708f8fSGustavo F. Padovan break; 24320a708f8fSGustavo F. Padovan 24330a708f8fSGustavo F. Padovan case L2CAP_CONF_FLUSH_TO: 24340c1bc5c6SGustavo F. Padovan chan->flush_to = val; 24350a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_FLUSH_TO, 24360c1bc5c6SGustavo F. Padovan 2, chan->flush_to); 24370a708f8fSGustavo F. Padovan break; 24380a708f8fSGustavo F. Padovan 24390a708f8fSGustavo F. Padovan case L2CAP_CONF_RFC: 24400a708f8fSGustavo F. Padovan if (olen == sizeof(rfc)) 24410a708f8fSGustavo F. Padovan memcpy(&rfc, (void *)val, olen); 24420a708f8fSGustavo F. Padovan 2443c1360a1cSGustavo F. Padovan if (test_bit(CONF_STATE2_DEVICE, &chan->conf_state) && 24440c1bc5c6SGustavo F. Padovan rfc.mode != chan->mode) 24450a708f8fSGustavo F. Padovan return -ECONNREFUSED; 24460a708f8fSGustavo F. Padovan 244747d1ec61SGustavo F. Padovan chan->fcs = 0; 24480a708f8fSGustavo F. Padovan 24490a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 24500a708f8fSGustavo F. Padovan sizeof(rfc), (unsigned long) &rfc); 24510a708f8fSGustavo F. Padovan break; 24526327eb98SAndrei Emeltchenko 24536327eb98SAndrei Emeltchenko case L2CAP_CONF_EWS: 24546327eb98SAndrei Emeltchenko chan->tx_win = min_t(u16, val, 24556327eb98SAndrei Emeltchenko L2CAP_DEFAULT_EXT_WINDOW); 24563e6b3b95SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_EWS, 2, 24573e6b3b95SGustavo F. Padovan chan->tx_win); 24586327eb98SAndrei Emeltchenko break; 245966af7aafSAndrei Emeltchenko 246066af7aafSAndrei Emeltchenko case L2CAP_CONF_EFS: 246166af7aafSAndrei Emeltchenko if (olen == sizeof(efs)) 246266af7aafSAndrei Emeltchenko memcpy(&efs, (void *)val, olen); 246366af7aafSAndrei Emeltchenko 246466af7aafSAndrei Emeltchenko if (chan->local_stype != L2CAP_SERV_NOTRAFIC && 246566af7aafSAndrei Emeltchenko efs.stype != L2CAP_SERV_NOTRAFIC && 246666af7aafSAndrei Emeltchenko efs.stype != chan->local_stype) 246766af7aafSAndrei Emeltchenko return -ECONNREFUSED; 246866af7aafSAndrei Emeltchenko 246966af7aafSAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, 247066af7aafSAndrei Emeltchenko sizeof(efs), (unsigned long) &efs); 247166af7aafSAndrei Emeltchenko break; 24720a708f8fSGustavo F. Padovan } 24730a708f8fSGustavo F. Padovan } 24740a708f8fSGustavo F. Padovan 24750c1bc5c6SGustavo F. Padovan if (chan->mode == L2CAP_MODE_BASIC && chan->mode != rfc.mode) 24760a708f8fSGustavo F. Padovan return -ECONNREFUSED; 24770a708f8fSGustavo F. Padovan 24780c1bc5c6SGustavo F. Padovan chan->mode = rfc.mode; 24790a708f8fSGustavo F. Padovan 24800e8b207eSAndrei Emeltchenko if (*result == L2CAP_CONF_SUCCESS || *result == L2CAP_CONF_PENDING) { 24810a708f8fSGustavo F. Padovan switch (rfc.mode) { 24820a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 248347d1ec61SGustavo F. Padovan chan->retrans_timeout = le16_to_cpu(rfc.retrans_timeout); 248447d1ec61SGustavo F. Padovan chan->monitor_timeout = le16_to_cpu(rfc.monitor_timeout); 248547d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 248666af7aafSAndrei Emeltchenko 248766af7aafSAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) { 248866af7aafSAndrei Emeltchenko chan->local_msdu = le16_to_cpu(efs.msdu); 248966af7aafSAndrei Emeltchenko chan->local_sdu_itime = 249066af7aafSAndrei Emeltchenko le32_to_cpu(efs.sdu_itime); 249166af7aafSAndrei Emeltchenko chan->local_acc_lat = le32_to_cpu(efs.acc_lat); 249266af7aafSAndrei Emeltchenko chan->local_flush_to = 249366af7aafSAndrei Emeltchenko le32_to_cpu(efs.flush_to); 249466af7aafSAndrei Emeltchenko } 24950a708f8fSGustavo F. Padovan break; 249666af7aafSAndrei Emeltchenko 24970a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 249847d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 24990a708f8fSGustavo F. Padovan } 25000a708f8fSGustavo F. Padovan } 25010a708f8fSGustavo F. Padovan 2502fe4128e0SGustavo F. Padovan req->dcid = cpu_to_le16(chan->dcid); 25030a708f8fSGustavo F. Padovan req->flags = cpu_to_le16(0x0000); 25040a708f8fSGustavo F. Padovan 25050a708f8fSGustavo F. Padovan return ptr - data; 25060a708f8fSGustavo F. Padovan } 25070a708f8fSGustavo F. Padovan 2508fe4128e0SGustavo F. Padovan static int l2cap_build_conf_rsp(struct l2cap_chan *chan, void *data, u16 result, u16 flags) 25090a708f8fSGustavo F. Padovan { 25100a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = data; 25110a708f8fSGustavo F. Padovan void *ptr = rsp->data; 25120a708f8fSGustavo F. Padovan 2513fe4128e0SGustavo F. Padovan BT_DBG("chan %p", chan); 25140a708f8fSGustavo F. Padovan 2515fe4128e0SGustavo F. Padovan rsp->scid = cpu_to_le16(chan->dcid); 25160a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(result); 25170a708f8fSGustavo F. Padovan rsp->flags = cpu_to_le16(flags); 25180a708f8fSGustavo F. Padovan 25190a708f8fSGustavo F. Padovan return ptr - data; 25200a708f8fSGustavo F. Padovan } 25210a708f8fSGustavo F. Padovan 25228c1d787bSGustavo F. Padovan void __l2cap_connect_rsp_defer(struct l2cap_chan *chan) 2523710f9b0aSGustavo F. Padovan { 2524710f9b0aSGustavo F. Padovan struct l2cap_conn_rsp rsp; 25258c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 2526710f9b0aSGustavo F. Padovan u8 buf[128]; 2527710f9b0aSGustavo F. Padovan 2528fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 2529fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 2530710f9b0aSGustavo F. Padovan rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 2531710f9b0aSGustavo F. Padovan rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 2532710f9b0aSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, 2533710f9b0aSGustavo F. Padovan L2CAP_CONN_RSP, sizeof(rsp), &rsp); 2534710f9b0aSGustavo F. Padovan 2535c1360a1cSGustavo F. Padovan if (test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) 2536710f9b0aSGustavo F. Padovan return; 2537710f9b0aSGustavo F. Padovan 2538710f9b0aSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 2539710f9b0aSGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 2540710f9b0aSGustavo F. Padovan chan->num_conf_req++; 2541710f9b0aSGustavo F. Padovan } 2542710f9b0aSGustavo F. Padovan 254347d1ec61SGustavo F. Padovan static void l2cap_conf_rfc_get(struct l2cap_chan *chan, void *rsp, int len) 25440a708f8fSGustavo F. Padovan { 25450a708f8fSGustavo F. Padovan int type, olen; 25460a708f8fSGustavo F. Padovan unsigned long val; 25470a708f8fSGustavo F. Padovan struct l2cap_conf_rfc rfc; 25480a708f8fSGustavo F. Padovan 254947d1ec61SGustavo F. Padovan BT_DBG("chan %p, rsp %p, len %d", chan, rsp, len); 25500a708f8fSGustavo F. Padovan 25510c1bc5c6SGustavo F. Padovan if ((chan->mode != L2CAP_MODE_ERTM) && (chan->mode != L2CAP_MODE_STREAMING)) 25520a708f8fSGustavo F. Padovan return; 25530a708f8fSGustavo F. Padovan 25540a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 25550a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&rsp, &type, &olen, &val); 25560a708f8fSGustavo F. Padovan 25570a708f8fSGustavo F. Padovan switch (type) { 25580a708f8fSGustavo F. Padovan case L2CAP_CONF_RFC: 25590a708f8fSGustavo F. Padovan if (olen == sizeof(rfc)) 25600a708f8fSGustavo F. Padovan memcpy(&rfc, (void *)val, olen); 25610a708f8fSGustavo F. Padovan goto done; 25620a708f8fSGustavo F. Padovan } 25630a708f8fSGustavo F. Padovan } 25640a708f8fSGustavo F. Padovan 256536e999a8SMat Martineau /* Use sane default values in case a misbehaving remote device 256636e999a8SMat Martineau * did not send an RFC option. 256736e999a8SMat Martineau */ 256836e999a8SMat Martineau rfc.mode = chan->mode; 256936e999a8SMat Martineau rfc.retrans_timeout = cpu_to_le16(L2CAP_DEFAULT_RETRANS_TO); 257036e999a8SMat Martineau rfc.monitor_timeout = cpu_to_le16(L2CAP_DEFAULT_MONITOR_TO); 257136e999a8SMat Martineau rfc.max_pdu_size = cpu_to_le16(chan->imtu); 257236e999a8SMat Martineau 257336e999a8SMat Martineau BT_ERR("Expected RFC option was not found, using defaults"); 257436e999a8SMat Martineau 25750a708f8fSGustavo F. Padovan done: 25760a708f8fSGustavo F. Padovan switch (rfc.mode) { 25770a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 257847d1ec61SGustavo F. Padovan chan->retrans_timeout = le16_to_cpu(rfc.retrans_timeout); 257947d1ec61SGustavo F. Padovan chan->monitor_timeout = le16_to_cpu(rfc.monitor_timeout); 258047d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 25810a708f8fSGustavo F. Padovan break; 25820a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 258347d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 25840a708f8fSGustavo F. Padovan } 25850a708f8fSGustavo F. Padovan } 25860a708f8fSGustavo F. Padovan 25870a708f8fSGustavo F. Padovan static inline int l2cap_command_rej(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u8 *data) 25880a708f8fSGustavo F. Padovan { 2589e2fd318eSIlia Kolomisnky struct l2cap_cmd_rej_unk *rej = (struct l2cap_cmd_rej_unk *) data; 25900a708f8fSGustavo F. Padovan 2591e2fd318eSIlia Kolomisnky if (rej->reason != L2CAP_REJ_NOT_UNDERSTOOD) 25920a708f8fSGustavo F. Padovan return 0; 25930a708f8fSGustavo F. Padovan 25940a708f8fSGustavo F. Padovan if ((conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) && 25950a708f8fSGustavo F. Padovan cmd->ident == conn->info_ident) { 259617cd3f37SUlisses Furquim cancel_delayed_work(&conn->info_timer); 25970a708f8fSGustavo F. Padovan 25980a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 25990a708f8fSGustavo F. Padovan conn->info_ident = 0; 26000a708f8fSGustavo F. Padovan 26010a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 26020a708f8fSGustavo F. Padovan } 26030a708f8fSGustavo F. Padovan 26040a708f8fSGustavo F. Padovan return 0; 26050a708f8fSGustavo F. Padovan } 26060a708f8fSGustavo F. Padovan 26070a708f8fSGustavo F. Padovan static inline int l2cap_connect_req(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u8 *data) 26080a708f8fSGustavo F. Padovan { 26090a708f8fSGustavo F. Padovan struct l2cap_conn_req *req = (struct l2cap_conn_req *) data; 26100a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 261123691d75SGustavo F. Padovan struct l2cap_chan *chan = NULL, *pchan; 26120a708f8fSGustavo F. Padovan struct sock *parent, *sk = NULL; 26130a708f8fSGustavo F. Padovan int result, status = L2CAP_CS_NO_INFO; 26140a708f8fSGustavo F. Padovan 26150a708f8fSGustavo F. Padovan u16 dcid = 0, scid = __le16_to_cpu(req->scid); 26160a708f8fSGustavo F. Padovan __le16 psm = req->psm; 26170a708f8fSGustavo F. Padovan 26180a708f8fSGustavo F. Padovan BT_DBG("psm 0x%2.2x scid 0x%4.4x", psm, scid); 26190a708f8fSGustavo F. Padovan 26200a708f8fSGustavo F. Padovan /* Check if we have socket listening on psm */ 262123691d75SGustavo F. Padovan pchan = l2cap_global_chan_by_psm(BT_LISTEN, psm, conn->src); 262223691d75SGustavo F. Padovan if (!pchan) { 26230a708f8fSGustavo F. Padovan result = L2CAP_CR_BAD_PSM; 26240a708f8fSGustavo F. Padovan goto sendresp; 26250a708f8fSGustavo F. Padovan } 26260a708f8fSGustavo F. Padovan 262723691d75SGustavo F. Padovan parent = pchan->sk; 262823691d75SGustavo F. Padovan 2629aa2ac881SGustavo F. Padovan lock_sock(parent); 26300a708f8fSGustavo F. Padovan 26310a708f8fSGustavo F. Padovan /* Check if the ACL is secure enough (if not SDP) */ 26320a708f8fSGustavo F. Padovan if (psm != cpu_to_le16(0x0001) && 26330a708f8fSGustavo F. Padovan !hci_conn_check_link_mode(conn->hcon)) { 26349f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_AUTH_FAILURE; 26350a708f8fSGustavo F. Padovan result = L2CAP_CR_SEC_BLOCK; 26360a708f8fSGustavo F. Padovan goto response; 26370a708f8fSGustavo F. Padovan } 26380a708f8fSGustavo F. Padovan 26390a708f8fSGustavo F. Padovan result = L2CAP_CR_NO_MEM; 26400a708f8fSGustavo F. Padovan 26410a708f8fSGustavo F. Padovan /* Check for backlog size */ 26420a708f8fSGustavo F. Padovan if (sk_acceptq_is_full(parent)) { 26430a708f8fSGustavo F. Padovan BT_DBG("backlog full %d", parent->sk_ack_backlog); 26440a708f8fSGustavo F. Padovan goto response; 26450a708f8fSGustavo F. Padovan } 26460a708f8fSGustavo F. Padovan 264780808e43SGustavo F. Padovan chan = pchan->ops->new_connection(pchan->data); 264880808e43SGustavo F. Padovan if (!chan) 26490a708f8fSGustavo F. Padovan goto response; 26500a708f8fSGustavo F. Padovan 265180808e43SGustavo F. Padovan sk = chan->sk; 265280808e43SGustavo F. Padovan 26530a708f8fSGustavo F. Padovan /* Check if we already have channel with that dcid */ 2654baa7e1faSGustavo F. Padovan if (__l2cap_get_chan_by_dcid(conn, scid)) { 26550a708f8fSGustavo F. Padovan sock_set_flag(sk, SOCK_ZAPPED); 2656ba3bd0eeSGustavo F. Padovan chan->ops->close(chan->data); 26570a708f8fSGustavo F. Padovan goto response; 26580a708f8fSGustavo F. Padovan } 26590a708f8fSGustavo F. Padovan 26600a708f8fSGustavo F. Padovan hci_conn_hold(conn->hcon); 26610a708f8fSGustavo F. Padovan 26620a708f8fSGustavo F. Padovan bacpy(&bt_sk(sk)->src, conn->src); 26630a708f8fSGustavo F. Padovan bacpy(&bt_sk(sk)->dst, conn->dst); 2664fe4128e0SGustavo F. Padovan chan->psm = psm; 2665fe4128e0SGustavo F. Padovan chan->dcid = scid; 26660a708f8fSGustavo F. Padovan 2667d1010240SGustavo F. Padovan bt_accept_enqueue(parent, sk); 2668d1010240SGustavo F. Padovan 26693d57dc68SGustavo F. Padovan l2cap_chan_add(conn, chan); 267048454079SGustavo F. Padovan 2671fe4128e0SGustavo F. Padovan dcid = chan->scid; 26720a708f8fSGustavo F. Padovan 2673c9b66675SGustavo F. Padovan __set_chan_timer(chan, sk->sk_sndtimeo); 26740a708f8fSGustavo F. Padovan 2675fc7f8a7eSGustavo F. Padovan chan->ident = cmd->ident; 26760a708f8fSGustavo F. Padovan 26770a708f8fSGustavo F. Padovan if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) { 2678d45fc423SGustavo F. Padovan if (l2cap_chan_check_security(chan)) { 26790a708f8fSGustavo F. Padovan if (bt_sk(sk)->defer_setup) { 268089bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONNECT2); 26810a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 26820a708f8fSGustavo F. Padovan status = L2CAP_CS_AUTHOR_PEND; 26830a708f8fSGustavo F. Padovan parent->sk_data_ready(parent, 0); 26840a708f8fSGustavo F. Padovan } else { 268589bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONFIG); 26860a708f8fSGustavo F. Padovan result = L2CAP_CR_SUCCESS; 26870a708f8fSGustavo F. Padovan status = L2CAP_CS_NO_INFO; 26880a708f8fSGustavo F. Padovan } 26890a708f8fSGustavo F. Padovan } else { 269089bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONNECT2); 26910a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 26920a708f8fSGustavo F. Padovan status = L2CAP_CS_AUTHEN_PEND; 26930a708f8fSGustavo F. Padovan } 26940a708f8fSGustavo F. Padovan } else { 269589bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONNECT2); 26960a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 26970a708f8fSGustavo F. Padovan status = L2CAP_CS_NO_INFO; 26980a708f8fSGustavo F. Padovan } 26990a708f8fSGustavo F. Padovan 27000a708f8fSGustavo F. Padovan response: 2701aa2ac881SGustavo F. Padovan release_sock(parent); 27020a708f8fSGustavo F. Padovan 27030a708f8fSGustavo F. Padovan sendresp: 27040a708f8fSGustavo F. Padovan rsp.scid = cpu_to_le16(scid); 27050a708f8fSGustavo F. Padovan rsp.dcid = cpu_to_le16(dcid); 27060a708f8fSGustavo F. Padovan rsp.result = cpu_to_le16(result); 27070a708f8fSGustavo F. Padovan rsp.status = cpu_to_le16(status); 27080a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONN_RSP, sizeof(rsp), &rsp); 27090a708f8fSGustavo F. Padovan 27100a708f8fSGustavo F. Padovan if (result == L2CAP_CR_PEND && status == L2CAP_CS_NO_INFO) { 27110a708f8fSGustavo F. Padovan struct l2cap_info_req info; 27120a708f8fSGustavo F. Padovan info.type = cpu_to_le16(L2CAP_IT_FEAT_MASK); 27130a708f8fSGustavo F. Padovan 27140a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_SENT; 27150a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 27160a708f8fSGustavo F. Padovan 2717030013d8SGustavo F. Padovan schedule_delayed_work(&conn->info_timer, 27180a708f8fSGustavo F. Padovan msecs_to_jiffies(L2CAP_INFO_TIMEOUT)); 27190a708f8fSGustavo F. Padovan 27200a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, conn->info_ident, 27210a708f8fSGustavo F. Padovan L2CAP_INFO_REQ, sizeof(info), &info); 27220a708f8fSGustavo F. Padovan } 27230a708f8fSGustavo F. Padovan 2724c1360a1cSGustavo F. Padovan if (chan && !test_bit(CONF_REQ_SENT, &chan->conf_state) && 27250a708f8fSGustavo F. Padovan result == L2CAP_CR_SUCCESS) { 27260a708f8fSGustavo F. Padovan u8 buf[128]; 2727c1360a1cSGustavo F. Padovan set_bit(CONF_REQ_SENT, &chan->conf_state); 27280a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 272973ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 273073ffa904SGustavo F. Padovan chan->num_conf_req++; 27310a708f8fSGustavo F. Padovan } 27320a708f8fSGustavo F. Padovan 27330a708f8fSGustavo F. Padovan return 0; 27340a708f8fSGustavo F. Padovan } 27350a708f8fSGustavo F. Padovan 27360a708f8fSGustavo F. Padovan static inline int l2cap_connect_rsp(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u8 *data) 27370a708f8fSGustavo F. Padovan { 27380a708f8fSGustavo F. Padovan struct l2cap_conn_rsp *rsp = (struct l2cap_conn_rsp *) data; 27390a708f8fSGustavo F. Padovan u16 scid, dcid, result, status; 274048454079SGustavo F. Padovan struct l2cap_chan *chan; 27410a708f8fSGustavo F. Padovan struct sock *sk; 27420a708f8fSGustavo F. Padovan u8 req[128]; 27430a708f8fSGustavo F. Padovan 27440a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 27450a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(rsp->dcid); 27460a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 27470a708f8fSGustavo F. Padovan status = __le16_to_cpu(rsp->status); 27480a708f8fSGustavo F. Padovan 27490a708f8fSGustavo F. Padovan BT_DBG("dcid 0x%4.4x scid 0x%4.4x result 0x%2.2x status 0x%2.2x", dcid, scid, result, status); 27500a708f8fSGustavo F. Padovan 27510a708f8fSGustavo F. Padovan if (scid) { 2752baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, scid); 275348454079SGustavo F. Padovan if (!chan) 27540a708f8fSGustavo F. Padovan return -EFAULT; 27550a708f8fSGustavo F. Padovan } else { 2756baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_ident(conn, cmd->ident); 275748454079SGustavo F. Padovan if (!chan) 27580a708f8fSGustavo F. Padovan return -EFAULT; 27590a708f8fSGustavo F. Padovan } 27600a708f8fSGustavo F. Padovan 276148454079SGustavo F. Padovan sk = chan->sk; 276248454079SGustavo F. Padovan 27630a708f8fSGustavo F. Padovan switch (result) { 27640a708f8fSGustavo F. Padovan case L2CAP_CR_SUCCESS: 276589bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONFIG); 2766fc7f8a7eSGustavo F. Padovan chan->ident = 0; 2767fe4128e0SGustavo F. Padovan chan->dcid = dcid; 2768c1360a1cSGustavo F. Padovan clear_bit(CONF_CONNECT_PEND, &chan->conf_state); 27690a708f8fSGustavo F. Padovan 2770c1360a1cSGustavo F. Padovan if (test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) 27710a708f8fSGustavo F. Padovan break; 27720a708f8fSGustavo F. Padovan 27730a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 277473ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, req), req); 277573ffa904SGustavo F. Padovan chan->num_conf_req++; 27760a708f8fSGustavo F. Padovan break; 27770a708f8fSGustavo F. Padovan 27780a708f8fSGustavo F. Padovan case L2CAP_CR_PEND: 2779c1360a1cSGustavo F. Padovan set_bit(CONF_CONNECT_PEND, &chan->conf_state); 27800a708f8fSGustavo F. Padovan break; 27810a708f8fSGustavo F. Padovan 27820a708f8fSGustavo F. Padovan default: 278348454079SGustavo F. Padovan l2cap_chan_del(chan, ECONNREFUSED); 27840a708f8fSGustavo F. Padovan break; 27850a708f8fSGustavo F. Padovan } 27860a708f8fSGustavo F. Padovan 2787aa2ac881SGustavo F. Padovan release_sock(sk); 27880a708f8fSGustavo F. Padovan return 0; 27890a708f8fSGustavo F. Padovan } 27900a708f8fSGustavo F. Padovan 279147d1ec61SGustavo F. Padovan static inline void set_default_fcs(struct l2cap_chan *chan) 27920a708f8fSGustavo F. Padovan { 27930a708f8fSGustavo F. Padovan /* FCS is enabled only in ERTM or streaming mode, if one or both 27940a708f8fSGustavo F. Padovan * sides request it. 27950a708f8fSGustavo F. Padovan */ 27960c1bc5c6SGustavo F. Padovan if (chan->mode != L2CAP_MODE_ERTM && chan->mode != L2CAP_MODE_STREAMING) 279747d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 2798c1360a1cSGustavo F. Padovan else if (!test_bit(CONF_NO_FCS_RECV, &chan->conf_state)) 279947d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_CRC16; 28000a708f8fSGustavo F. Padovan } 28010a708f8fSGustavo F. Padovan 28020a708f8fSGustavo F. Padovan static inline int l2cap_config_req(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u16 cmd_len, u8 *data) 28030a708f8fSGustavo F. Padovan { 28040a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = (struct l2cap_conf_req *) data; 28050a708f8fSGustavo F. Padovan u16 dcid, flags; 28060a708f8fSGustavo F. Padovan u8 rsp[64]; 280748454079SGustavo F. Padovan struct l2cap_chan *chan; 28080a708f8fSGustavo F. Padovan struct sock *sk; 28090a708f8fSGustavo F. Padovan int len; 28100a708f8fSGustavo F. Padovan 28110a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(req->dcid); 28120a708f8fSGustavo F. Padovan flags = __le16_to_cpu(req->flags); 28130a708f8fSGustavo F. Padovan 28140a708f8fSGustavo F. Padovan BT_DBG("dcid 0x%4.4x flags 0x%2.2x", dcid, flags); 28150a708f8fSGustavo F. Padovan 2816baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, dcid); 281748454079SGustavo F. Padovan if (!chan) 28180a708f8fSGustavo F. Padovan return -ENOENT; 28190a708f8fSGustavo F. Padovan 282048454079SGustavo F. Padovan sk = chan->sk; 282148454079SGustavo F. Padovan 2822033b1142SDavid S. Miller if (chan->state != BT_CONFIG && chan->state != BT_CONNECT2) { 2823e2fd318eSIlia Kolomisnky struct l2cap_cmd_rej_cid rej; 28240a708f8fSGustavo F. Padovan 2825e2fd318eSIlia Kolomisnky rej.reason = cpu_to_le16(L2CAP_REJ_INVALID_CID); 2826e2fd318eSIlia Kolomisnky rej.scid = cpu_to_le16(chan->scid); 2827e2fd318eSIlia Kolomisnky rej.dcid = cpu_to_le16(chan->dcid); 2828e2fd318eSIlia Kolomisnky 28290a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_COMMAND_REJ, 28300a708f8fSGustavo F. Padovan sizeof(rej), &rej); 28310a708f8fSGustavo F. Padovan goto unlock; 28320a708f8fSGustavo F. Padovan } 28330a708f8fSGustavo F. Padovan 28340a708f8fSGustavo F. Padovan /* Reject if config buffer is too small. */ 28350a708f8fSGustavo F. Padovan len = cmd_len - sizeof(*req); 28367ac28817SDan Rosenberg if (len < 0 || chan->conf_len + len > sizeof(chan->conf_req)) { 28370a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 2838fe4128e0SGustavo F. Padovan l2cap_build_conf_rsp(chan, rsp, 28390a708f8fSGustavo F. Padovan L2CAP_CONF_REJECT, flags), rsp); 28400a708f8fSGustavo F. Padovan goto unlock; 28410a708f8fSGustavo F. Padovan } 28420a708f8fSGustavo F. Padovan 28430a708f8fSGustavo F. Padovan /* Store config. */ 284473ffa904SGustavo F. Padovan memcpy(chan->conf_req + chan->conf_len, req->data, len); 284573ffa904SGustavo F. Padovan chan->conf_len += len; 28460a708f8fSGustavo F. Padovan 28470a708f8fSGustavo F. Padovan if (flags & 0x0001) { 28480a708f8fSGustavo F. Padovan /* Incomplete config. Send empty response. */ 28490a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 2850fe4128e0SGustavo F. Padovan l2cap_build_conf_rsp(chan, rsp, 28510a708f8fSGustavo F. Padovan L2CAP_CONF_SUCCESS, 0x0001), rsp); 28520a708f8fSGustavo F. Padovan goto unlock; 28530a708f8fSGustavo F. Padovan } 28540a708f8fSGustavo F. Padovan 28550a708f8fSGustavo F. Padovan /* Complete config. */ 285673ffa904SGustavo F. Padovan len = l2cap_parse_conf_req(chan, rsp); 28570a708f8fSGustavo F. Padovan if (len < 0) { 2858e92c8e70SGustavo F. Padovan l2cap_send_disconn_req(conn, chan, ECONNRESET); 28590a708f8fSGustavo F. Padovan goto unlock; 28600a708f8fSGustavo F. Padovan } 28610a708f8fSGustavo F. Padovan 28620a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, len, rsp); 286373ffa904SGustavo F. Padovan chan->num_conf_rsp++; 28640a708f8fSGustavo F. Padovan 28650a708f8fSGustavo F. Padovan /* Reset config buffer. */ 286673ffa904SGustavo F. Padovan chan->conf_len = 0; 28670a708f8fSGustavo F. Padovan 2868c1360a1cSGustavo F. Padovan if (!test_bit(CONF_OUTPUT_DONE, &chan->conf_state)) 28690a708f8fSGustavo F. Padovan goto unlock; 28700a708f8fSGustavo F. Padovan 2871c1360a1cSGustavo F. Padovan if (test_bit(CONF_INPUT_DONE, &chan->conf_state)) { 287247d1ec61SGustavo F. Padovan set_default_fcs(chan); 28730a708f8fSGustavo F. Padovan 287489bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONNECTED); 28750a708f8fSGustavo F. Padovan 287642e5c802SGustavo F. Padovan chan->next_tx_seq = 0; 287742e5c802SGustavo F. Padovan chan->expected_tx_seq = 0; 287858d35f87SGustavo F. Padovan skb_queue_head_init(&chan->tx_q); 28790c1bc5c6SGustavo F. Padovan if (chan->mode == L2CAP_MODE_ERTM) 2880525cd185SGustavo F. Padovan l2cap_ertm_init(chan); 28810a708f8fSGustavo F. Padovan 2882cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 28830a708f8fSGustavo F. Padovan goto unlock; 28840a708f8fSGustavo F. Padovan } 28850a708f8fSGustavo F. Padovan 2886c1360a1cSGustavo F. Padovan if (!test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) { 28870a708f8fSGustavo F. Padovan u8 buf[64]; 28880a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 288973ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 289073ffa904SGustavo F. Padovan chan->num_conf_req++; 28910a708f8fSGustavo F. Padovan } 28920a708f8fSGustavo F. Padovan 28930e8b207eSAndrei Emeltchenko /* Got Conf Rsp PENDING from remote side and asume we sent 28940e8b207eSAndrei Emeltchenko Conf Rsp PENDING in the code above */ 28950e8b207eSAndrei Emeltchenko if (test_bit(CONF_REM_CONF_PEND, &chan->conf_state) && 28960e8b207eSAndrei Emeltchenko test_bit(CONF_LOC_CONF_PEND, &chan->conf_state)) { 28970e8b207eSAndrei Emeltchenko 28980e8b207eSAndrei Emeltchenko /* check compatibility */ 28990e8b207eSAndrei Emeltchenko 29000e8b207eSAndrei Emeltchenko clear_bit(CONF_LOC_CONF_PEND, &chan->conf_state); 29010e8b207eSAndrei Emeltchenko set_bit(CONF_OUTPUT_DONE, &chan->conf_state); 29020e8b207eSAndrei Emeltchenko 29030e8b207eSAndrei Emeltchenko l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 29040e8b207eSAndrei Emeltchenko l2cap_build_conf_rsp(chan, rsp, 29050e8b207eSAndrei Emeltchenko L2CAP_CONF_SUCCESS, 0x0000), rsp); 29060e8b207eSAndrei Emeltchenko } 29070e8b207eSAndrei Emeltchenko 29080a708f8fSGustavo F. Padovan unlock: 2909aa2ac881SGustavo F. Padovan release_sock(sk); 29100a708f8fSGustavo F. Padovan return 0; 29110a708f8fSGustavo F. Padovan } 29120a708f8fSGustavo F. Padovan 29130a708f8fSGustavo F. Padovan static inline int l2cap_config_rsp(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u8 *data) 29140a708f8fSGustavo F. Padovan { 29150a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = (struct l2cap_conf_rsp *)data; 29160a708f8fSGustavo F. Padovan u16 scid, flags, result; 291748454079SGustavo F. Padovan struct l2cap_chan *chan; 29180a708f8fSGustavo F. Padovan struct sock *sk; 29190a708f8fSGustavo F. Padovan int len = cmd->len - sizeof(*rsp); 29200a708f8fSGustavo F. Padovan 29210a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 29220a708f8fSGustavo F. Padovan flags = __le16_to_cpu(rsp->flags); 29230a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 29240a708f8fSGustavo F. Padovan 29250a708f8fSGustavo F. Padovan BT_DBG("scid 0x%4.4x flags 0x%2.2x result 0x%2.2x", 29260a708f8fSGustavo F. Padovan scid, flags, result); 29270a708f8fSGustavo F. Padovan 2928baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, scid); 292948454079SGustavo F. Padovan if (!chan) 29300a708f8fSGustavo F. Padovan return 0; 29310a708f8fSGustavo F. Padovan 293248454079SGustavo F. Padovan sk = chan->sk; 293348454079SGustavo F. Padovan 29340a708f8fSGustavo F. Padovan switch (result) { 29350a708f8fSGustavo F. Padovan case L2CAP_CONF_SUCCESS: 293647d1ec61SGustavo F. Padovan l2cap_conf_rfc_get(chan, rsp->data, len); 29370e8b207eSAndrei Emeltchenko clear_bit(CONF_REM_CONF_PEND, &chan->conf_state); 29380a708f8fSGustavo F. Padovan break; 29390a708f8fSGustavo F. Padovan 29400e8b207eSAndrei Emeltchenko case L2CAP_CONF_PENDING: 29410e8b207eSAndrei Emeltchenko set_bit(CONF_REM_CONF_PEND, &chan->conf_state); 29420e8b207eSAndrei Emeltchenko 29430e8b207eSAndrei Emeltchenko if (test_bit(CONF_LOC_CONF_PEND, &chan->conf_state)) { 29440e8b207eSAndrei Emeltchenko char buf[64]; 29450e8b207eSAndrei Emeltchenko 29460e8b207eSAndrei Emeltchenko len = l2cap_parse_conf_rsp(chan, rsp->data, len, 29470e8b207eSAndrei Emeltchenko buf, &result); 29480e8b207eSAndrei Emeltchenko if (len < 0) { 29490e8b207eSAndrei Emeltchenko l2cap_send_disconn_req(conn, chan, ECONNRESET); 29500e8b207eSAndrei Emeltchenko goto done; 29510e8b207eSAndrei Emeltchenko } 29520e8b207eSAndrei Emeltchenko 29530e8b207eSAndrei Emeltchenko /* check compatibility */ 29540e8b207eSAndrei Emeltchenko 29550e8b207eSAndrei Emeltchenko clear_bit(CONF_LOC_CONF_PEND, &chan->conf_state); 29560e8b207eSAndrei Emeltchenko set_bit(CONF_OUTPUT_DONE, &chan->conf_state); 29570e8b207eSAndrei Emeltchenko 29580e8b207eSAndrei Emeltchenko l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 29590e8b207eSAndrei Emeltchenko l2cap_build_conf_rsp(chan, buf, 29600e8b207eSAndrei Emeltchenko L2CAP_CONF_SUCCESS, 0x0000), buf); 29610e8b207eSAndrei Emeltchenko } 29620e8b207eSAndrei Emeltchenko goto done; 29630e8b207eSAndrei Emeltchenko 29640a708f8fSGustavo F. Padovan case L2CAP_CONF_UNACCEPT: 296573ffa904SGustavo F. Padovan if (chan->num_conf_rsp <= L2CAP_CONF_MAX_CONF_RSP) { 29660a708f8fSGustavo F. Padovan char req[64]; 29670a708f8fSGustavo F. Padovan 29680a708f8fSGustavo F. Padovan if (len > sizeof(req) - sizeof(struct l2cap_conf_req)) { 2969e92c8e70SGustavo F. Padovan l2cap_send_disconn_req(conn, chan, ECONNRESET); 29700a708f8fSGustavo F. Padovan goto done; 29710a708f8fSGustavo F. Padovan } 29720a708f8fSGustavo F. Padovan 29730a708f8fSGustavo F. Padovan /* throw out any old stored conf requests */ 29740a708f8fSGustavo F. Padovan result = L2CAP_CONF_SUCCESS; 2975b4450035SGustavo F. Padovan len = l2cap_parse_conf_rsp(chan, rsp->data, len, 2976b4450035SGustavo F. Padovan req, &result); 29770a708f8fSGustavo F. Padovan if (len < 0) { 2978e92c8e70SGustavo F. Padovan l2cap_send_disconn_req(conn, chan, ECONNRESET); 29790a708f8fSGustavo F. Padovan goto done; 29800a708f8fSGustavo F. Padovan } 29810a708f8fSGustavo F. Padovan 29820a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), 29830a708f8fSGustavo F. Padovan L2CAP_CONF_REQ, len, req); 298473ffa904SGustavo F. Padovan chan->num_conf_req++; 29850a708f8fSGustavo F. Padovan if (result != L2CAP_CONF_SUCCESS) 29860a708f8fSGustavo F. Padovan goto done; 29870a708f8fSGustavo F. Padovan break; 29880a708f8fSGustavo F. Padovan } 29890a708f8fSGustavo F. Padovan 29900a708f8fSGustavo F. Padovan default: 29910a708f8fSGustavo F. Padovan sk->sk_err = ECONNRESET; 2992b83ddfe2SAndrzej Kaczmarek __set_chan_timer(chan, 2993b83ddfe2SAndrzej Kaczmarek msecs_to_jiffies(L2CAP_DISC_REJ_TIMEOUT)); 2994e92c8e70SGustavo F. Padovan l2cap_send_disconn_req(conn, chan, ECONNRESET); 29950a708f8fSGustavo F. Padovan goto done; 29960a708f8fSGustavo F. Padovan } 29970a708f8fSGustavo F. Padovan 29980a708f8fSGustavo F. Padovan if (flags & 0x01) 29990a708f8fSGustavo F. Padovan goto done; 30000a708f8fSGustavo F. Padovan 3001c1360a1cSGustavo F. Padovan set_bit(CONF_INPUT_DONE, &chan->conf_state); 30020a708f8fSGustavo F. Padovan 3003c1360a1cSGustavo F. Padovan if (test_bit(CONF_OUTPUT_DONE, &chan->conf_state)) { 300447d1ec61SGustavo F. Padovan set_default_fcs(chan); 30050a708f8fSGustavo F. Padovan 300689bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONNECTED); 300742e5c802SGustavo F. Padovan chan->next_tx_seq = 0; 300842e5c802SGustavo F. Padovan chan->expected_tx_seq = 0; 300958d35f87SGustavo F. Padovan skb_queue_head_init(&chan->tx_q); 30100c1bc5c6SGustavo F. Padovan if (chan->mode == L2CAP_MODE_ERTM) 3011525cd185SGustavo F. Padovan l2cap_ertm_init(chan); 30120a708f8fSGustavo F. Padovan 3013cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 30140a708f8fSGustavo F. Padovan } 30150a708f8fSGustavo F. Padovan 30160a708f8fSGustavo F. Padovan done: 3017aa2ac881SGustavo F. Padovan release_sock(sk); 30180a708f8fSGustavo F. Padovan return 0; 30190a708f8fSGustavo F. Padovan } 30200a708f8fSGustavo F. Padovan 30210a708f8fSGustavo F. Padovan static inline int l2cap_disconnect_req(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u8 *data) 30220a708f8fSGustavo F. Padovan { 30230a708f8fSGustavo F. Padovan struct l2cap_disconn_req *req = (struct l2cap_disconn_req *) data; 30240a708f8fSGustavo F. Padovan struct l2cap_disconn_rsp rsp; 30250a708f8fSGustavo F. Padovan u16 dcid, scid; 302648454079SGustavo F. Padovan struct l2cap_chan *chan; 30270a708f8fSGustavo F. Padovan struct sock *sk; 30280a708f8fSGustavo F. Padovan 30290a708f8fSGustavo F. Padovan scid = __le16_to_cpu(req->scid); 30300a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(req->dcid); 30310a708f8fSGustavo F. Padovan 30320a708f8fSGustavo F. Padovan BT_DBG("scid 0x%4.4x dcid 0x%4.4x", scid, dcid); 30330a708f8fSGustavo F. Padovan 3034baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, dcid); 303548454079SGustavo F. Padovan if (!chan) 30360a708f8fSGustavo F. Padovan return 0; 30370a708f8fSGustavo F. Padovan 303848454079SGustavo F. Padovan sk = chan->sk; 303948454079SGustavo F. Padovan 3040fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 3041fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 30420a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_DISCONN_RSP, sizeof(rsp), &rsp); 30430a708f8fSGustavo F. Padovan 30440a708f8fSGustavo F. Padovan sk->sk_shutdown = SHUTDOWN_MASK; 30450a708f8fSGustavo F. Padovan 304648454079SGustavo F. Padovan l2cap_chan_del(chan, ECONNRESET); 3047aa2ac881SGustavo F. Padovan release_sock(sk); 30480a708f8fSGustavo F. Padovan 3049ba3bd0eeSGustavo F. Padovan chan->ops->close(chan->data); 30500a708f8fSGustavo F. Padovan return 0; 30510a708f8fSGustavo F. Padovan } 30520a708f8fSGustavo F. Padovan 30530a708f8fSGustavo F. Padovan static inline int l2cap_disconnect_rsp(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u8 *data) 30540a708f8fSGustavo F. Padovan { 30550a708f8fSGustavo F. Padovan struct l2cap_disconn_rsp *rsp = (struct l2cap_disconn_rsp *) data; 30560a708f8fSGustavo F. Padovan u16 dcid, scid; 305748454079SGustavo F. Padovan struct l2cap_chan *chan; 30580a708f8fSGustavo F. Padovan struct sock *sk; 30590a708f8fSGustavo F. Padovan 30600a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 30610a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(rsp->dcid); 30620a708f8fSGustavo F. Padovan 30630a708f8fSGustavo F. Padovan BT_DBG("dcid 0x%4.4x scid 0x%4.4x", dcid, scid); 30640a708f8fSGustavo F. Padovan 3065baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, scid); 306648454079SGustavo F. Padovan if (!chan) 30670a708f8fSGustavo F. Padovan return 0; 30680a708f8fSGustavo F. Padovan 306948454079SGustavo F. Padovan sk = chan->sk; 307048454079SGustavo F. Padovan 307148454079SGustavo F. Padovan l2cap_chan_del(chan, 0); 3072aa2ac881SGustavo F. Padovan release_sock(sk); 30730a708f8fSGustavo F. Padovan 3074ba3bd0eeSGustavo F. Padovan chan->ops->close(chan->data); 30750a708f8fSGustavo F. Padovan return 0; 30760a708f8fSGustavo F. Padovan } 30770a708f8fSGustavo F. Padovan 30780a708f8fSGustavo F. Padovan static inline int l2cap_information_req(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u8 *data) 30790a708f8fSGustavo F. Padovan { 30800a708f8fSGustavo F. Padovan struct l2cap_info_req *req = (struct l2cap_info_req *) data; 30810a708f8fSGustavo F. Padovan u16 type; 30820a708f8fSGustavo F. Padovan 30830a708f8fSGustavo F. Padovan type = __le16_to_cpu(req->type); 30840a708f8fSGustavo F. Padovan 30850a708f8fSGustavo F. Padovan BT_DBG("type 0x%4.4x", type); 30860a708f8fSGustavo F. Padovan 30870a708f8fSGustavo F. Padovan if (type == L2CAP_IT_FEAT_MASK) { 30880a708f8fSGustavo F. Padovan u8 buf[8]; 30890a708f8fSGustavo F. Padovan u32 feat_mask = l2cap_feat_mask; 30900a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) buf; 30910a708f8fSGustavo F. Padovan rsp->type = cpu_to_le16(L2CAP_IT_FEAT_MASK); 30920a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(L2CAP_IR_SUCCESS); 30930a708f8fSGustavo F. Padovan if (!disable_ertm) 30940a708f8fSGustavo F. Padovan feat_mask |= L2CAP_FEAT_ERTM | L2CAP_FEAT_STREAMING 30950a708f8fSGustavo F. Padovan | L2CAP_FEAT_FCS; 3096a5fd6f30SAndrei Emeltchenko if (enable_hs) 30976327eb98SAndrei Emeltchenko feat_mask |= L2CAP_FEAT_EXT_FLOW 30986327eb98SAndrei Emeltchenko | L2CAP_FEAT_EXT_WINDOW; 3099a5fd6f30SAndrei Emeltchenko 31000a708f8fSGustavo F. Padovan put_unaligned_le32(feat_mask, rsp->data); 31010a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, 31020a708f8fSGustavo F. Padovan L2CAP_INFO_RSP, sizeof(buf), buf); 31030a708f8fSGustavo F. Padovan } else if (type == L2CAP_IT_FIXED_CHAN) { 31040a708f8fSGustavo F. Padovan u8 buf[12]; 31050a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) buf; 310650a147cdSMat Martineau 310750a147cdSMat Martineau if (enable_hs) 310850a147cdSMat Martineau l2cap_fixed_chan[0] |= L2CAP_FC_A2MP; 310950a147cdSMat Martineau else 311050a147cdSMat Martineau l2cap_fixed_chan[0] &= ~L2CAP_FC_A2MP; 311150a147cdSMat Martineau 31120a708f8fSGustavo F. Padovan rsp->type = cpu_to_le16(L2CAP_IT_FIXED_CHAN); 31130a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(L2CAP_IR_SUCCESS); 3114c6337ea6SAndrei Emeltchenko memcpy(rsp->data, l2cap_fixed_chan, sizeof(l2cap_fixed_chan)); 31150a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, 31160a708f8fSGustavo F. Padovan L2CAP_INFO_RSP, sizeof(buf), buf); 31170a708f8fSGustavo F. Padovan } else { 31180a708f8fSGustavo F. Padovan struct l2cap_info_rsp rsp; 31190a708f8fSGustavo F. Padovan rsp.type = cpu_to_le16(type); 31200a708f8fSGustavo F. Padovan rsp.result = cpu_to_le16(L2CAP_IR_NOTSUPP); 31210a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, 31220a708f8fSGustavo F. Padovan L2CAP_INFO_RSP, sizeof(rsp), &rsp); 31230a708f8fSGustavo F. Padovan } 31240a708f8fSGustavo F. Padovan 31250a708f8fSGustavo F. Padovan return 0; 31260a708f8fSGustavo F. Padovan } 31270a708f8fSGustavo F. Padovan 31280a708f8fSGustavo F. Padovan static inline int l2cap_information_rsp(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd, u8 *data) 31290a708f8fSGustavo F. Padovan { 31300a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) data; 31310a708f8fSGustavo F. Padovan u16 type, result; 31320a708f8fSGustavo F. Padovan 31330a708f8fSGustavo F. Padovan type = __le16_to_cpu(rsp->type); 31340a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 31350a708f8fSGustavo F. Padovan 31360a708f8fSGustavo F. Padovan BT_DBG("type 0x%4.4x result 0x%2.2x", type, result); 31370a708f8fSGustavo F. Padovan 3138e90165beSAndrei Emeltchenko /* L2CAP Info req/rsp are unbound to channels, add extra checks */ 3139e90165beSAndrei Emeltchenko if (cmd->ident != conn->info_ident || 3140e90165beSAndrei Emeltchenko conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) 3141e90165beSAndrei Emeltchenko return 0; 3142e90165beSAndrei Emeltchenko 314317cd3f37SUlisses Furquim cancel_delayed_work(&conn->info_timer); 31440a708f8fSGustavo F. Padovan 31450a708f8fSGustavo F. Padovan if (result != L2CAP_IR_SUCCESS) { 31460a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 31470a708f8fSGustavo F. Padovan conn->info_ident = 0; 31480a708f8fSGustavo F. Padovan 31490a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 31500a708f8fSGustavo F. Padovan 31510a708f8fSGustavo F. Padovan return 0; 31520a708f8fSGustavo F. Padovan } 31530a708f8fSGustavo F. Padovan 31540a708f8fSGustavo F. Padovan if (type == L2CAP_IT_FEAT_MASK) { 31550a708f8fSGustavo F. Padovan conn->feat_mask = get_unaligned_le32(rsp->data); 31560a708f8fSGustavo F. Padovan 31570a708f8fSGustavo F. Padovan if (conn->feat_mask & L2CAP_FEAT_FIXED_CHAN) { 31580a708f8fSGustavo F. Padovan struct l2cap_info_req req; 31590a708f8fSGustavo F. Padovan req.type = cpu_to_le16(L2CAP_IT_FIXED_CHAN); 31600a708f8fSGustavo F. Padovan 31610a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 31620a708f8fSGustavo F. Padovan 31630a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, conn->info_ident, 31640a708f8fSGustavo F. Padovan L2CAP_INFO_REQ, sizeof(req), &req); 31650a708f8fSGustavo F. Padovan } else { 31660a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 31670a708f8fSGustavo F. Padovan conn->info_ident = 0; 31680a708f8fSGustavo F. Padovan 31690a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 31700a708f8fSGustavo F. Padovan } 31710a708f8fSGustavo F. Padovan } else if (type == L2CAP_IT_FIXED_CHAN) { 31720a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 31730a708f8fSGustavo F. Padovan conn->info_ident = 0; 31740a708f8fSGustavo F. Padovan 31750a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 31760a708f8fSGustavo F. Padovan } 31770a708f8fSGustavo F. Padovan 31780a708f8fSGustavo F. Padovan return 0; 31790a708f8fSGustavo F. Padovan } 31800a708f8fSGustavo F. Padovan 3181f94ff6ffSMat Martineau static inline int l2cap_create_channel_req(struct l2cap_conn *conn, 3182f94ff6ffSMat Martineau struct l2cap_cmd_hdr *cmd, u16 cmd_len, 3183f94ff6ffSMat Martineau void *data) 3184f94ff6ffSMat Martineau { 3185f94ff6ffSMat Martineau struct l2cap_create_chan_req *req = data; 3186f94ff6ffSMat Martineau struct l2cap_create_chan_rsp rsp; 3187f94ff6ffSMat Martineau u16 psm, scid; 3188f94ff6ffSMat Martineau 3189f94ff6ffSMat Martineau if (cmd_len != sizeof(*req)) 3190f94ff6ffSMat Martineau return -EPROTO; 3191f94ff6ffSMat Martineau 3192f94ff6ffSMat Martineau if (!enable_hs) 3193f94ff6ffSMat Martineau return -EINVAL; 3194f94ff6ffSMat Martineau 3195f94ff6ffSMat Martineau psm = le16_to_cpu(req->psm); 3196f94ff6ffSMat Martineau scid = le16_to_cpu(req->scid); 3197f94ff6ffSMat Martineau 3198f94ff6ffSMat Martineau BT_DBG("psm %d, scid %d, amp_id %d", psm, scid, req->amp_id); 3199f94ff6ffSMat Martineau 3200f94ff6ffSMat Martineau /* Placeholder: Always reject */ 3201f94ff6ffSMat Martineau rsp.dcid = 0; 3202f94ff6ffSMat Martineau rsp.scid = cpu_to_le16(scid); 3203f94ff6ffSMat Martineau rsp.result = L2CAP_CR_NO_MEM; 3204f94ff6ffSMat Martineau rsp.status = L2CAP_CS_NO_INFO; 3205f94ff6ffSMat Martineau 3206f94ff6ffSMat Martineau l2cap_send_cmd(conn, cmd->ident, L2CAP_CREATE_CHAN_RSP, 3207f94ff6ffSMat Martineau sizeof(rsp), &rsp); 3208f94ff6ffSMat Martineau 3209f94ff6ffSMat Martineau return 0; 3210f94ff6ffSMat Martineau } 3211f94ff6ffSMat Martineau 3212f94ff6ffSMat Martineau static inline int l2cap_create_channel_rsp(struct l2cap_conn *conn, 3213f94ff6ffSMat Martineau struct l2cap_cmd_hdr *cmd, void *data) 3214f94ff6ffSMat Martineau { 3215f94ff6ffSMat Martineau BT_DBG("conn %p", conn); 3216f94ff6ffSMat Martineau 3217f94ff6ffSMat Martineau return l2cap_connect_rsp(conn, cmd, data); 3218f94ff6ffSMat Martineau } 3219f94ff6ffSMat Martineau 32208d5a04a1SMat Martineau static void l2cap_send_move_chan_rsp(struct l2cap_conn *conn, u8 ident, 32218d5a04a1SMat Martineau u16 icid, u16 result) 32228d5a04a1SMat Martineau { 32238d5a04a1SMat Martineau struct l2cap_move_chan_rsp rsp; 32248d5a04a1SMat Martineau 32258d5a04a1SMat Martineau BT_DBG("icid %d, result %d", icid, result); 32268d5a04a1SMat Martineau 32278d5a04a1SMat Martineau rsp.icid = cpu_to_le16(icid); 32288d5a04a1SMat Martineau rsp.result = cpu_to_le16(result); 32298d5a04a1SMat Martineau 32308d5a04a1SMat Martineau l2cap_send_cmd(conn, ident, L2CAP_MOVE_CHAN_RSP, sizeof(rsp), &rsp); 32318d5a04a1SMat Martineau } 32328d5a04a1SMat Martineau 32338d5a04a1SMat Martineau static void l2cap_send_move_chan_cfm(struct l2cap_conn *conn, 32348d5a04a1SMat Martineau struct l2cap_chan *chan, u16 icid, u16 result) 32358d5a04a1SMat Martineau { 32368d5a04a1SMat Martineau struct l2cap_move_chan_cfm cfm; 32378d5a04a1SMat Martineau u8 ident; 32388d5a04a1SMat Martineau 32398d5a04a1SMat Martineau BT_DBG("icid %d, result %d", icid, result); 32408d5a04a1SMat Martineau 32418d5a04a1SMat Martineau ident = l2cap_get_ident(conn); 32428d5a04a1SMat Martineau if (chan) 32438d5a04a1SMat Martineau chan->ident = ident; 32448d5a04a1SMat Martineau 32458d5a04a1SMat Martineau cfm.icid = cpu_to_le16(icid); 32468d5a04a1SMat Martineau cfm.result = cpu_to_le16(result); 32478d5a04a1SMat Martineau 32488d5a04a1SMat Martineau l2cap_send_cmd(conn, ident, L2CAP_MOVE_CHAN_CFM, sizeof(cfm), &cfm); 32498d5a04a1SMat Martineau } 32508d5a04a1SMat Martineau 32518d5a04a1SMat Martineau static void l2cap_send_move_chan_cfm_rsp(struct l2cap_conn *conn, u8 ident, 32528d5a04a1SMat Martineau u16 icid) 32538d5a04a1SMat Martineau { 32548d5a04a1SMat Martineau struct l2cap_move_chan_cfm_rsp rsp; 32558d5a04a1SMat Martineau 32568d5a04a1SMat Martineau BT_DBG("icid %d", icid); 32578d5a04a1SMat Martineau 32588d5a04a1SMat Martineau rsp.icid = cpu_to_le16(icid); 32598d5a04a1SMat Martineau l2cap_send_cmd(conn, ident, L2CAP_MOVE_CHAN_CFM_RSP, sizeof(rsp), &rsp); 32608d5a04a1SMat Martineau } 32618d5a04a1SMat Martineau 32628d5a04a1SMat Martineau static inline int l2cap_move_channel_req(struct l2cap_conn *conn, 32638d5a04a1SMat Martineau struct l2cap_cmd_hdr *cmd, u16 cmd_len, void *data) 32648d5a04a1SMat Martineau { 32658d5a04a1SMat Martineau struct l2cap_move_chan_req *req = data; 32668d5a04a1SMat Martineau u16 icid = 0; 32678d5a04a1SMat Martineau u16 result = L2CAP_MR_NOT_ALLOWED; 32688d5a04a1SMat Martineau 32698d5a04a1SMat Martineau if (cmd_len != sizeof(*req)) 32708d5a04a1SMat Martineau return -EPROTO; 32718d5a04a1SMat Martineau 32728d5a04a1SMat Martineau icid = le16_to_cpu(req->icid); 32738d5a04a1SMat Martineau 32748d5a04a1SMat Martineau BT_DBG("icid %d, dest_amp_id %d", icid, req->dest_amp_id); 32758d5a04a1SMat Martineau 32768d5a04a1SMat Martineau if (!enable_hs) 32778d5a04a1SMat Martineau return -EINVAL; 32788d5a04a1SMat Martineau 32798d5a04a1SMat Martineau /* Placeholder: Always refuse */ 32808d5a04a1SMat Martineau l2cap_send_move_chan_rsp(conn, cmd->ident, icid, result); 32818d5a04a1SMat Martineau 32828d5a04a1SMat Martineau return 0; 32838d5a04a1SMat Martineau } 32848d5a04a1SMat Martineau 32858d5a04a1SMat Martineau static inline int l2cap_move_channel_rsp(struct l2cap_conn *conn, 32868d5a04a1SMat Martineau struct l2cap_cmd_hdr *cmd, u16 cmd_len, void *data) 32878d5a04a1SMat Martineau { 32888d5a04a1SMat Martineau struct l2cap_move_chan_rsp *rsp = data; 32898d5a04a1SMat Martineau u16 icid, result; 32908d5a04a1SMat Martineau 32918d5a04a1SMat Martineau if (cmd_len != sizeof(*rsp)) 32928d5a04a1SMat Martineau return -EPROTO; 32938d5a04a1SMat Martineau 32948d5a04a1SMat Martineau icid = le16_to_cpu(rsp->icid); 32958d5a04a1SMat Martineau result = le16_to_cpu(rsp->result); 32968d5a04a1SMat Martineau 32978d5a04a1SMat Martineau BT_DBG("icid %d, result %d", icid, result); 32988d5a04a1SMat Martineau 32998d5a04a1SMat Martineau /* Placeholder: Always unconfirmed */ 33008d5a04a1SMat Martineau l2cap_send_move_chan_cfm(conn, NULL, icid, L2CAP_MC_UNCONFIRMED); 33018d5a04a1SMat Martineau 33028d5a04a1SMat Martineau return 0; 33038d5a04a1SMat Martineau } 33048d5a04a1SMat Martineau 33058d5a04a1SMat Martineau static inline int l2cap_move_channel_confirm(struct l2cap_conn *conn, 33068d5a04a1SMat Martineau struct l2cap_cmd_hdr *cmd, u16 cmd_len, void *data) 33078d5a04a1SMat Martineau { 33088d5a04a1SMat Martineau struct l2cap_move_chan_cfm *cfm = data; 33098d5a04a1SMat Martineau u16 icid, result; 33108d5a04a1SMat Martineau 33118d5a04a1SMat Martineau if (cmd_len != sizeof(*cfm)) 33128d5a04a1SMat Martineau return -EPROTO; 33138d5a04a1SMat Martineau 33148d5a04a1SMat Martineau icid = le16_to_cpu(cfm->icid); 33158d5a04a1SMat Martineau result = le16_to_cpu(cfm->result); 33168d5a04a1SMat Martineau 33178d5a04a1SMat Martineau BT_DBG("icid %d, result %d", icid, result); 33188d5a04a1SMat Martineau 33198d5a04a1SMat Martineau l2cap_send_move_chan_cfm_rsp(conn, cmd->ident, icid); 33208d5a04a1SMat Martineau 33218d5a04a1SMat Martineau return 0; 33228d5a04a1SMat Martineau } 33238d5a04a1SMat Martineau 33248d5a04a1SMat Martineau static inline int l2cap_move_channel_confirm_rsp(struct l2cap_conn *conn, 33258d5a04a1SMat Martineau struct l2cap_cmd_hdr *cmd, u16 cmd_len, void *data) 33268d5a04a1SMat Martineau { 33278d5a04a1SMat Martineau struct l2cap_move_chan_cfm_rsp *rsp = data; 33288d5a04a1SMat Martineau u16 icid; 33298d5a04a1SMat Martineau 33308d5a04a1SMat Martineau if (cmd_len != sizeof(*rsp)) 33318d5a04a1SMat Martineau return -EPROTO; 33328d5a04a1SMat Martineau 33338d5a04a1SMat Martineau icid = le16_to_cpu(rsp->icid); 33348d5a04a1SMat Martineau 33358d5a04a1SMat Martineau BT_DBG("icid %d", icid); 33368d5a04a1SMat Martineau 33378d5a04a1SMat Martineau return 0; 33388d5a04a1SMat Martineau } 33398d5a04a1SMat Martineau 3340e2174ca4SGustavo F. Padovan static inline int l2cap_check_conn_param(u16 min, u16 max, u16 latency, 3341de73115aSClaudio Takahasi u16 to_multiplier) 3342de73115aSClaudio Takahasi { 3343de73115aSClaudio Takahasi u16 max_latency; 3344de73115aSClaudio Takahasi 3345de73115aSClaudio Takahasi if (min > max || min < 6 || max > 3200) 3346de73115aSClaudio Takahasi return -EINVAL; 3347de73115aSClaudio Takahasi 3348de73115aSClaudio Takahasi if (to_multiplier < 10 || to_multiplier > 3200) 3349de73115aSClaudio Takahasi return -EINVAL; 3350de73115aSClaudio Takahasi 3351de73115aSClaudio Takahasi if (max >= to_multiplier * 8) 3352de73115aSClaudio Takahasi return -EINVAL; 3353de73115aSClaudio Takahasi 3354de73115aSClaudio Takahasi max_latency = (to_multiplier * 8 / max) - 1; 3355de73115aSClaudio Takahasi if (latency > 499 || latency > max_latency) 3356de73115aSClaudio Takahasi return -EINVAL; 3357de73115aSClaudio Takahasi 3358de73115aSClaudio Takahasi return 0; 3359de73115aSClaudio Takahasi } 3360de73115aSClaudio Takahasi 3361de73115aSClaudio Takahasi static inline int l2cap_conn_param_update_req(struct l2cap_conn *conn, 3362de73115aSClaudio Takahasi struct l2cap_cmd_hdr *cmd, u8 *data) 3363de73115aSClaudio Takahasi { 3364de73115aSClaudio Takahasi struct hci_conn *hcon = conn->hcon; 3365de73115aSClaudio Takahasi struct l2cap_conn_param_update_req *req; 3366de73115aSClaudio Takahasi struct l2cap_conn_param_update_rsp rsp; 3367de73115aSClaudio Takahasi u16 min, max, latency, to_multiplier, cmd_len; 33682ce603ebSClaudio Takahasi int err; 3369de73115aSClaudio Takahasi 3370de73115aSClaudio Takahasi if (!(hcon->link_mode & HCI_LM_MASTER)) 3371de73115aSClaudio Takahasi return -EINVAL; 3372de73115aSClaudio Takahasi 3373de73115aSClaudio Takahasi cmd_len = __le16_to_cpu(cmd->len); 3374de73115aSClaudio Takahasi if (cmd_len != sizeof(struct l2cap_conn_param_update_req)) 3375de73115aSClaudio Takahasi return -EPROTO; 3376de73115aSClaudio Takahasi 3377de73115aSClaudio Takahasi req = (struct l2cap_conn_param_update_req *) data; 3378de73115aSClaudio Takahasi min = __le16_to_cpu(req->min); 3379de73115aSClaudio Takahasi max = __le16_to_cpu(req->max); 3380de73115aSClaudio Takahasi latency = __le16_to_cpu(req->latency); 3381de73115aSClaudio Takahasi to_multiplier = __le16_to_cpu(req->to_multiplier); 3382de73115aSClaudio Takahasi 3383de73115aSClaudio Takahasi BT_DBG("min 0x%4.4x max 0x%4.4x latency: 0x%4.4x Timeout: 0x%4.4x", 3384de73115aSClaudio Takahasi min, max, latency, to_multiplier); 3385de73115aSClaudio Takahasi 3386de73115aSClaudio Takahasi memset(&rsp, 0, sizeof(rsp)); 33872ce603ebSClaudio Takahasi 33882ce603ebSClaudio Takahasi err = l2cap_check_conn_param(min, max, latency, to_multiplier); 33892ce603ebSClaudio Takahasi if (err) 3390de73115aSClaudio Takahasi rsp.result = cpu_to_le16(L2CAP_CONN_PARAM_REJECTED); 3391de73115aSClaudio Takahasi else 3392de73115aSClaudio Takahasi rsp.result = cpu_to_le16(L2CAP_CONN_PARAM_ACCEPTED); 3393de73115aSClaudio Takahasi 3394de73115aSClaudio Takahasi l2cap_send_cmd(conn, cmd->ident, L2CAP_CONN_PARAM_UPDATE_RSP, 3395de73115aSClaudio Takahasi sizeof(rsp), &rsp); 3396de73115aSClaudio Takahasi 33972ce603ebSClaudio Takahasi if (!err) 33982ce603ebSClaudio Takahasi hci_le_conn_update(hcon, min, max, latency, to_multiplier); 33992ce603ebSClaudio Takahasi 3400de73115aSClaudio Takahasi return 0; 3401de73115aSClaudio Takahasi } 3402de73115aSClaudio Takahasi 34033300d9a9SClaudio Takahasi static inline int l2cap_bredr_sig_cmd(struct l2cap_conn *conn, 34043300d9a9SClaudio Takahasi struct l2cap_cmd_hdr *cmd, u16 cmd_len, u8 *data) 34053300d9a9SClaudio Takahasi { 34063300d9a9SClaudio Takahasi int err = 0; 34073300d9a9SClaudio Takahasi 34083300d9a9SClaudio Takahasi switch (cmd->code) { 34093300d9a9SClaudio Takahasi case L2CAP_COMMAND_REJ: 34103300d9a9SClaudio Takahasi l2cap_command_rej(conn, cmd, data); 34113300d9a9SClaudio Takahasi break; 34123300d9a9SClaudio Takahasi 34133300d9a9SClaudio Takahasi case L2CAP_CONN_REQ: 34143300d9a9SClaudio Takahasi err = l2cap_connect_req(conn, cmd, data); 34153300d9a9SClaudio Takahasi break; 34163300d9a9SClaudio Takahasi 34173300d9a9SClaudio Takahasi case L2CAP_CONN_RSP: 34183300d9a9SClaudio Takahasi err = l2cap_connect_rsp(conn, cmd, data); 34193300d9a9SClaudio Takahasi break; 34203300d9a9SClaudio Takahasi 34213300d9a9SClaudio Takahasi case L2CAP_CONF_REQ: 34223300d9a9SClaudio Takahasi err = l2cap_config_req(conn, cmd, cmd_len, data); 34233300d9a9SClaudio Takahasi break; 34243300d9a9SClaudio Takahasi 34253300d9a9SClaudio Takahasi case L2CAP_CONF_RSP: 34263300d9a9SClaudio Takahasi err = l2cap_config_rsp(conn, cmd, data); 34273300d9a9SClaudio Takahasi break; 34283300d9a9SClaudio Takahasi 34293300d9a9SClaudio Takahasi case L2CAP_DISCONN_REQ: 34303300d9a9SClaudio Takahasi err = l2cap_disconnect_req(conn, cmd, data); 34313300d9a9SClaudio Takahasi break; 34323300d9a9SClaudio Takahasi 34333300d9a9SClaudio Takahasi case L2CAP_DISCONN_RSP: 34343300d9a9SClaudio Takahasi err = l2cap_disconnect_rsp(conn, cmd, data); 34353300d9a9SClaudio Takahasi break; 34363300d9a9SClaudio Takahasi 34373300d9a9SClaudio Takahasi case L2CAP_ECHO_REQ: 34383300d9a9SClaudio Takahasi l2cap_send_cmd(conn, cmd->ident, L2CAP_ECHO_RSP, cmd_len, data); 34393300d9a9SClaudio Takahasi break; 34403300d9a9SClaudio Takahasi 34413300d9a9SClaudio Takahasi case L2CAP_ECHO_RSP: 34423300d9a9SClaudio Takahasi break; 34433300d9a9SClaudio Takahasi 34443300d9a9SClaudio Takahasi case L2CAP_INFO_REQ: 34453300d9a9SClaudio Takahasi err = l2cap_information_req(conn, cmd, data); 34463300d9a9SClaudio Takahasi break; 34473300d9a9SClaudio Takahasi 34483300d9a9SClaudio Takahasi case L2CAP_INFO_RSP: 34493300d9a9SClaudio Takahasi err = l2cap_information_rsp(conn, cmd, data); 34503300d9a9SClaudio Takahasi break; 34513300d9a9SClaudio Takahasi 3452f94ff6ffSMat Martineau case L2CAP_CREATE_CHAN_REQ: 3453f94ff6ffSMat Martineau err = l2cap_create_channel_req(conn, cmd, cmd_len, data); 3454f94ff6ffSMat Martineau break; 3455f94ff6ffSMat Martineau 3456f94ff6ffSMat Martineau case L2CAP_CREATE_CHAN_RSP: 3457f94ff6ffSMat Martineau err = l2cap_create_channel_rsp(conn, cmd, data); 3458f94ff6ffSMat Martineau break; 3459f94ff6ffSMat Martineau 34608d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_REQ: 34618d5a04a1SMat Martineau err = l2cap_move_channel_req(conn, cmd, cmd_len, data); 34628d5a04a1SMat Martineau break; 34638d5a04a1SMat Martineau 34648d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_RSP: 34658d5a04a1SMat Martineau err = l2cap_move_channel_rsp(conn, cmd, cmd_len, data); 34668d5a04a1SMat Martineau break; 34678d5a04a1SMat Martineau 34688d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_CFM: 34698d5a04a1SMat Martineau err = l2cap_move_channel_confirm(conn, cmd, cmd_len, data); 34708d5a04a1SMat Martineau break; 34718d5a04a1SMat Martineau 34728d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_CFM_RSP: 34738d5a04a1SMat Martineau err = l2cap_move_channel_confirm_rsp(conn, cmd, cmd_len, data); 34748d5a04a1SMat Martineau break; 34758d5a04a1SMat Martineau 34763300d9a9SClaudio Takahasi default: 34773300d9a9SClaudio Takahasi BT_ERR("Unknown BR/EDR signaling command 0x%2.2x", cmd->code); 34783300d9a9SClaudio Takahasi err = -EINVAL; 34793300d9a9SClaudio Takahasi break; 34803300d9a9SClaudio Takahasi } 34813300d9a9SClaudio Takahasi 34823300d9a9SClaudio Takahasi return err; 34833300d9a9SClaudio Takahasi } 34843300d9a9SClaudio Takahasi 34853300d9a9SClaudio Takahasi static inline int l2cap_le_sig_cmd(struct l2cap_conn *conn, 34863300d9a9SClaudio Takahasi struct l2cap_cmd_hdr *cmd, u8 *data) 34873300d9a9SClaudio Takahasi { 34883300d9a9SClaudio Takahasi switch (cmd->code) { 34893300d9a9SClaudio Takahasi case L2CAP_COMMAND_REJ: 34903300d9a9SClaudio Takahasi return 0; 34913300d9a9SClaudio Takahasi 34923300d9a9SClaudio Takahasi case L2CAP_CONN_PARAM_UPDATE_REQ: 3493de73115aSClaudio Takahasi return l2cap_conn_param_update_req(conn, cmd, data); 34943300d9a9SClaudio Takahasi 34953300d9a9SClaudio Takahasi case L2CAP_CONN_PARAM_UPDATE_RSP: 34963300d9a9SClaudio Takahasi return 0; 34973300d9a9SClaudio Takahasi 34983300d9a9SClaudio Takahasi default: 34993300d9a9SClaudio Takahasi BT_ERR("Unknown LE signaling command 0x%2.2x", cmd->code); 35003300d9a9SClaudio Takahasi return -EINVAL; 35013300d9a9SClaudio Takahasi } 35023300d9a9SClaudio Takahasi } 35033300d9a9SClaudio Takahasi 35043300d9a9SClaudio Takahasi static inline void l2cap_sig_channel(struct l2cap_conn *conn, 35053300d9a9SClaudio Takahasi struct sk_buff *skb) 35060a708f8fSGustavo F. Padovan { 35070a708f8fSGustavo F. Padovan u8 *data = skb->data; 35080a708f8fSGustavo F. Padovan int len = skb->len; 35090a708f8fSGustavo F. Padovan struct l2cap_cmd_hdr cmd; 35103300d9a9SClaudio Takahasi int err; 35110a708f8fSGustavo F. Padovan 35120a708f8fSGustavo F. Padovan l2cap_raw_recv(conn, skb); 35130a708f8fSGustavo F. Padovan 35140a708f8fSGustavo F. Padovan while (len >= L2CAP_CMD_HDR_SIZE) { 35150a708f8fSGustavo F. Padovan u16 cmd_len; 35160a708f8fSGustavo F. Padovan memcpy(&cmd, data, L2CAP_CMD_HDR_SIZE); 35170a708f8fSGustavo F. Padovan data += L2CAP_CMD_HDR_SIZE; 35180a708f8fSGustavo F. Padovan len -= L2CAP_CMD_HDR_SIZE; 35190a708f8fSGustavo F. Padovan 35200a708f8fSGustavo F. Padovan cmd_len = le16_to_cpu(cmd.len); 35210a708f8fSGustavo F. Padovan 35220a708f8fSGustavo F. Padovan BT_DBG("code 0x%2.2x len %d id 0x%2.2x", cmd.code, cmd_len, cmd.ident); 35230a708f8fSGustavo F. Padovan 35240a708f8fSGustavo F. Padovan if (cmd_len > len || !cmd.ident) { 35250a708f8fSGustavo F. Padovan BT_DBG("corrupted command"); 35260a708f8fSGustavo F. Padovan break; 35270a708f8fSGustavo F. Padovan } 35280a708f8fSGustavo F. Padovan 35293300d9a9SClaudio Takahasi if (conn->hcon->type == LE_LINK) 35303300d9a9SClaudio Takahasi err = l2cap_le_sig_cmd(conn, &cmd, data); 35313300d9a9SClaudio Takahasi else 35323300d9a9SClaudio Takahasi err = l2cap_bredr_sig_cmd(conn, &cmd, cmd_len, data); 35330a708f8fSGustavo F. Padovan 35340a708f8fSGustavo F. Padovan if (err) { 3535e2fd318eSIlia Kolomisnky struct l2cap_cmd_rej_unk rej; 35362c6d1a2eSGustavo F. Padovan 35372c6d1a2eSGustavo F. Padovan BT_ERR("Wrong link type (%d)", err); 35380a708f8fSGustavo F. Padovan 35390a708f8fSGustavo F. Padovan /* FIXME: Map err to a valid reason */ 3540e2fd318eSIlia Kolomisnky rej.reason = cpu_to_le16(L2CAP_REJ_NOT_UNDERSTOOD); 35410a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd.ident, L2CAP_COMMAND_REJ, sizeof(rej), &rej); 35420a708f8fSGustavo F. Padovan } 35430a708f8fSGustavo F. Padovan 35440a708f8fSGustavo F. Padovan data += cmd_len; 35450a708f8fSGustavo F. Padovan len -= cmd_len; 35460a708f8fSGustavo F. Padovan } 35470a708f8fSGustavo F. Padovan 35480a708f8fSGustavo F. Padovan kfree_skb(skb); 35490a708f8fSGustavo F. Padovan } 35500a708f8fSGustavo F. Padovan 355147d1ec61SGustavo F. Padovan static int l2cap_check_fcs(struct l2cap_chan *chan, struct sk_buff *skb) 35520a708f8fSGustavo F. Padovan { 35530a708f8fSGustavo F. Padovan u16 our_fcs, rcv_fcs; 3554e4ca6d98SAndrei Emeltchenko int hdr_size; 3555e4ca6d98SAndrei Emeltchenko 3556e4ca6d98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 3557e4ca6d98SAndrei Emeltchenko hdr_size = L2CAP_EXT_HDR_SIZE; 3558e4ca6d98SAndrei Emeltchenko else 3559e4ca6d98SAndrei Emeltchenko hdr_size = L2CAP_ENH_HDR_SIZE; 35600a708f8fSGustavo F. Padovan 356147d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 356203a51213SAndrei Emeltchenko skb_trim(skb, skb->len - L2CAP_FCS_SIZE); 35630a708f8fSGustavo F. Padovan rcv_fcs = get_unaligned_le16(skb->data + skb->len); 35640a708f8fSGustavo F. Padovan our_fcs = crc16(0, skb->data - hdr_size, skb->len + hdr_size); 35650a708f8fSGustavo F. Padovan 35660a708f8fSGustavo F. Padovan if (our_fcs != rcv_fcs) 35670a708f8fSGustavo F. Padovan return -EBADMSG; 35680a708f8fSGustavo F. Padovan } 35690a708f8fSGustavo F. Padovan return 0; 35700a708f8fSGustavo F. Padovan } 35710a708f8fSGustavo F. Padovan 3572525cd185SGustavo F. Padovan static inline void l2cap_send_i_or_rr_or_rnr(struct l2cap_chan *chan) 35730a708f8fSGustavo F. Padovan { 357488843ab0SAndrei Emeltchenko u32 control = 0; 35750a708f8fSGustavo F. Padovan 35766a026610SGustavo F. Padovan chan->frames_sent = 0; 35770a708f8fSGustavo F. Padovan 35780b209faeSAndrei Emeltchenko control |= __set_reqseq(chan, chan->buffer_seq); 35790a708f8fSGustavo F. Padovan 3580e2ab4353SGustavo F. Padovan if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 3581ab784b73SAndrei Emeltchenko control |= __set_ctrl_super(chan, L2CAP_SUPER_RNR); 3582525cd185SGustavo F. Padovan l2cap_send_sframe(chan, control); 3583e2ab4353SGustavo F. Padovan set_bit(CONN_RNR_SENT, &chan->conn_state); 35840a708f8fSGustavo F. Padovan } 35850a708f8fSGustavo F. Padovan 3586e2ab4353SGustavo F. Padovan if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 3587525cd185SGustavo F. Padovan l2cap_retransmit_frames(chan); 35880a708f8fSGustavo F. Padovan 3589525cd185SGustavo F. Padovan l2cap_ertm_send(chan); 35900a708f8fSGustavo F. Padovan 3591e2ab4353SGustavo F. Padovan if (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state) && 35926a026610SGustavo F. Padovan chan->frames_sent == 0) { 3593ab784b73SAndrei Emeltchenko control |= __set_ctrl_super(chan, L2CAP_SUPER_RR); 3594525cd185SGustavo F. Padovan l2cap_send_sframe(chan, control); 35950a708f8fSGustavo F. Padovan } 35960a708f8fSGustavo F. Padovan } 35970a708f8fSGustavo F. Padovan 3598fb45de7dSAndrei Emeltchenko static int l2cap_add_to_srej_queue(struct l2cap_chan *chan, struct sk_buff *skb, u16 tx_seq, u8 sar) 35990a708f8fSGustavo F. Padovan { 36000a708f8fSGustavo F. Padovan struct sk_buff *next_skb; 36010a708f8fSGustavo F. Padovan int tx_seq_offset, next_tx_seq_offset; 36020a708f8fSGustavo F. Padovan 36030a708f8fSGustavo F. Padovan bt_cb(skb)->tx_seq = tx_seq; 36040a708f8fSGustavo F. Padovan bt_cb(skb)->sar = sar; 36050a708f8fSGustavo F. Padovan 3606f1c6775bSGustavo F. Padovan next_skb = skb_peek(&chan->srej_q); 36070a708f8fSGustavo F. Padovan 3608836be934SAndrei Emeltchenko tx_seq_offset = __seq_offset(chan, tx_seq, chan->buffer_seq); 36090a708f8fSGustavo F. Padovan 3610039d9572SSzymon Janc while (next_skb) { 36110a708f8fSGustavo F. Padovan if (bt_cb(next_skb)->tx_seq == tx_seq) 36120a708f8fSGustavo F. Padovan return -EINVAL; 36130a708f8fSGustavo F. Padovan 3614836be934SAndrei Emeltchenko next_tx_seq_offset = __seq_offset(chan, 3615836be934SAndrei Emeltchenko bt_cb(next_skb)->tx_seq, chan->buffer_seq); 36160a708f8fSGustavo F. Padovan 36170a708f8fSGustavo F. Padovan if (next_tx_seq_offset > tx_seq_offset) { 3618f1c6775bSGustavo F. Padovan __skb_queue_before(&chan->srej_q, next_skb, skb); 36190a708f8fSGustavo F. Padovan return 0; 36200a708f8fSGustavo F. Padovan } 36210a708f8fSGustavo F. Padovan 3622f1c6775bSGustavo F. Padovan if (skb_queue_is_last(&chan->srej_q, next_skb)) 3623039d9572SSzymon Janc next_skb = NULL; 3624039d9572SSzymon Janc else 3625039d9572SSzymon Janc next_skb = skb_queue_next(&chan->srej_q, next_skb); 3626039d9572SSzymon Janc } 36270a708f8fSGustavo F. Padovan 3628f1c6775bSGustavo F. Padovan __skb_queue_tail(&chan->srej_q, skb); 36290a708f8fSGustavo F. Padovan 36300a708f8fSGustavo F. Padovan return 0; 36310a708f8fSGustavo F. Padovan } 36320a708f8fSGustavo F. Padovan 363384084a31SMat Martineau static void append_skb_frag(struct sk_buff *skb, 363484084a31SMat Martineau struct sk_buff *new_frag, struct sk_buff **last_frag) 36350a708f8fSGustavo F. Padovan { 363684084a31SMat Martineau /* skb->len reflects data in skb as well as all fragments 363784084a31SMat Martineau * skb->data_len reflects only data in fragments 363884084a31SMat Martineau */ 363984084a31SMat Martineau if (!skb_has_frag_list(skb)) 364084084a31SMat Martineau skb_shinfo(skb)->frag_list = new_frag; 364184084a31SMat Martineau 364284084a31SMat Martineau new_frag->next = NULL; 364384084a31SMat Martineau 364484084a31SMat Martineau (*last_frag)->next = new_frag; 364584084a31SMat Martineau *last_frag = new_frag; 364684084a31SMat Martineau 364784084a31SMat Martineau skb->len += new_frag->len; 364884084a31SMat Martineau skb->data_len += new_frag->len; 364984084a31SMat Martineau skb->truesize += new_frag->truesize; 365084084a31SMat Martineau } 365184084a31SMat Martineau 365288843ab0SAndrei Emeltchenko static int l2cap_reassemble_sdu(struct l2cap_chan *chan, struct sk_buff *skb, u32 control) 365384084a31SMat Martineau { 365484084a31SMat Martineau int err = -EINVAL; 36550a708f8fSGustavo F. Padovan 36567e0ef6eeSAndrei Emeltchenko switch (__get_ctrl_sar(chan, control)) { 36577e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_UNSEGMENTED: 365884084a31SMat Martineau if (chan->sdu) 365984084a31SMat Martineau break; 36600a708f8fSGustavo F. Padovan 366184084a31SMat Martineau err = chan->ops->recv(chan->data, skb); 366284084a31SMat Martineau break; 36630a708f8fSGustavo F. Padovan 36647e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_START: 366584084a31SMat Martineau if (chan->sdu) 366684084a31SMat Martineau break; 36670a708f8fSGustavo F. Padovan 36686f61fd47SGustavo F. Padovan chan->sdu_len = get_unaligned_le16(skb->data); 366903a51213SAndrei Emeltchenko skb_pull(skb, L2CAP_SDULEN_SIZE); 36700a708f8fSGustavo F. Padovan 367184084a31SMat Martineau if (chan->sdu_len > chan->imtu) { 367284084a31SMat Martineau err = -EMSGSIZE; 367384084a31SMat Martineau break; 367484084a31SMat Martineau } 36750a708f8fSGustavo F. Padovan 367684084a31SMat Martineau if (skb->len >= chan->sdu_len) 367784084a31SMat Martineau break; 367884084a31SMat Martineau 367984084a31SMat Martineau chan->sdu = skb; 368084084a31SMat Martineau chan->sdu_last_frag = skb; 368184084a31SMat Martineau 368284084a31SMat Martineau skb = NULL; 368384084a31SMat Martineau err = 0; 36840a708f8fSGustavo F. Padovan break; 36850a708f8fSGustavo F. Padovan 36867e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_CONTINUE: 36876f61fd47SGustavo F. Padovan if (!chan->sdu) 368884084a31SMat Martineau break; 36890a708f8fSGustavo F. Padovan 369084084a31SMat Martineau append_skb_frag(chan->sdu, skb, 369184084a31SMat Martineau &chan->sdu_last_frag); 369284084a31SMat Martineau skb = NULL; 36930a708f8fSGustavo F. Padovan 369484084a31SMat Martineau if (chan->sdu->len >= chan->sdu_len) 369584084a31SMat Martineau break; 36960a708f8fSGustavo F. Padovan 369784084a31SMat Martineau err = 0; 36980a708f8fSGustavo F. Padovan break; 36990a708f8fSGustavo F. Padovan 37007e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_END: 37016f61fd47SGustavo F. Padovan if (!chan->sdu) 370284084a31SMat Martineau break; 37030a708f8fSGustavo F. Padovan 370484084a31SMat Martineau append_skb_frag(chan->sdu, skb, 370584084a31SMat Martineau &chan->sdu_last_frag); 370684084a31SMat Martineau skb = NULL; 37070a708f8fSGustavo F. Padovan 370884084a31SMat Martineau if (chan->sdu->len != chan->sdu_len) 370984084a31SMat Martineau break; 37100a708f8fSGustavo F. Padovan 371184084a31SMat Martineau err = chan->ops->recv(chan->data, chan->sdu); 37120a708f8fSGustavo F. Padovan 371384084a31SMat Martineau if (!err) { 371484084a31SMat Martineau /* Reassembly complete */ 371584084a31SMat Martineau chan->sdu = NULL; 371684084a31SMat Martineau chan->sdu_last_frag = NULL; 371784084a31SMat Martineau chan->sdu_len = 0; 37180a708f8fSGustavo F. Padovan } 37190a708f8fSGustavo F. Padovan break; 37200a708f8fSGustavo F. Padovan } 37210a708f8fSGustavo F. Padovan 372284084a31SMat Martineau if (err) { 37230a708f8fSGustavo F. Padovan kfree_skb(skb); 37246f61fd47SGustavo F. Padovan kfree_skb(chan->sdu); 37256f61fd47SGustavo F. Padovan chan->sdu = NULL; 372684084a31SMat Martineau chan->sdu_last_frag = NULL; 372784084a31SMat Martineau chan->sdu_len = 0; 372884084a31SMat Martineau } 37290a708f8fSGustavo F. Padovan 373084084a31SMat Martineau return err; 37310a708f8fSGustavo F. Padovan } 37320a708f8fSGustavo F. Padovan 373326f880d2SMat Martineau static void l2cap_ertm_enter_local_busy(struct l2cap_chan *chan) 37340a708f8fSGustavo F. Padovan { 373526f880d2SMat Martineau BT_DBG("chan %p, Enter local busy", chan); 373626f880d2SMat Martineau 373726f880d2SMat Martineau set_bit(CONN_LOCAL_BUSY, &chan->conn_state); 373826f880d2SMat Martineau 373977f918bcSSzymon Janc __set_ack_timer(chan); 37400a708f8fSGustavo F. Padovan } 37410a708f8fSGustavo F. Padovan 374226f880d2SMat Martineau static void l2cap_ertm_exit_local_busy(struct l2cap_chan *chan) 374326f880d2SMat Martineau { 374488843ab0SAndrei Emeltchenko u32 control; 37450a708f8fSGustavo F. Padovan 3746e2ab4353SGustavo F. Padovan if (!test_bit(CONN_RNR_SENT, &chan->conn_state)) 37470a708f8fSGustavo F. Padovan goto done; 37480a708f8fSGustavo F. Padovan 37490b209faeSAndrei Emeltchenko control = __set_reqseq(chan, chan->buffer_seq); 3750e3781735SAndrei Emeltchenko control |= __set_ctrl_poll(chan); 3751ab784b73SAndrei Emeltchenko control |= __set_ctrl_super(chan, L2CAP_SUPER_RR); 3752525cd185SGustavo F. Padovan l2cap_send_sframe(chan, control); 37536a026610SGustavo F. Padovan chan->retry_count = 1; 37540a708f8fSGustavo F. Padovan 37551a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 37561a09bcb9SGustavo F. Padovan __set_monitor_timer(chan); 37570a708f8fSGustavo F. Padovan 3758e2ab4353SGustavo F. Padovan set_bit(CONN_WAIT_F, &chan->conn_state); 37590a708f8fSGustavo F. Padovan 37600a708f8fSGustavo F. Padovan done: 3761e2ab4353SGustavo F. Padovan clear_bit(CONN_LOCAL_BUSY, &chan->conn_state); 3762e2ab4353SGustavo F. Padovan clear_bit(CONN_RNR_SENT, &chan->conn_state); 37630a708f8fSGustavo F. Padovan 376449208c9cSGustavo F. Padovan BT_DBG("chan %p, Exit local busy", chan); 37650a708f8fSGustavo F. Padovan } 37660a708f8fSGustavo F. Padovan 3767e328140fSMat Martineau void l2cap_chan_busy(struct l2cap_chan *chan, int busy) 37680a708f8fSGustavo F. Padovan { 3769e328140fSMat Martineau if (chan->mode == L2CAP_MODE_ERTM) { 3770e328140fSMat Martineau if (busy) 377126f880d2SMat Martineau l2cap_ertm_enter_local_busy(chan); 3772e328140fSMat Martineau else 3773e328140fSMat Martineau l2cap_ertm_exit_local_busy(chan); 37740a708f8fSGustavo F. Padovan } 37750a708f8fSGustavo F. Padovan } 37760a708f8fSGustavo F. Padovan 3777fb45de7dSAndrei Emeltchenko static void l2cap_check_srej_gap(struct l2cap_chan *chan, u16 tx_seq) 37780a708f8fSGustavo F. Padovan { 37790a708f8fSGustavo F. Padovan struct sk_buff *skb; 378088843ab0SAndrei Emeltchenko u32 control; 37810a708f8fSGustavo F. Padovan 3782e328140fSMat Martineau while ((skb = skb_peek(&chan->srej_q)) && 3783e328140fSMat Martineau !test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 3784e328140fSMat Martineau int err; 3785e328140fSMat Martineau 37860a708f8fSGustavo F. Padovan if (bt_cb(skb)->tx_seq != tx_seq) 37870a708f8fSGustavo F. Padovan break; 37880a708f8fSGustavo F. Padovan 3789f1c6775bSGustavo F. Padovan skb = skb_dequeue(&chan->srej_q); 37907e0ef6eeSAndrei Emeltchenko control = __set_ctrl_sar(chan, bt_cb(skb)->sar); 379184084a31SMat Martineau err = l2cap_reassemble_sdu(chan, skb, control); 3792e328140fSMat Martineau 3793e328140fSMat Martineau if (err < 0) { 3794e328140fSMat Martineau l2cap_send_disconn_req(chan->conn, chan, ECONNRESET); 3795e328140fSMat Martineau break; 3796e328140fSMat Martineau } 3797e328140fSMat Martineau 3798836be934SAndrei Emeltchenko chan->buffer_seq_srej = __next_seq(chan, chan->buffer_seq_srej); 3799836be934SAndrei Emeltchenko tx_seq = __next_seq(chan, tx_seq); 38000a708f8fSGustavo F. Padovan } 38010a708f8fSGustavo F. Padovan } 38020a708f8fSGustavo F. Padovan 3803fb45de7dSAndrei Emeltchenko static void l2cap_resend_srejframe(struct l2cap_chan *chan, u16 tx_seq) 38040a708f8fSGustavo F. Padovan { 38050a708f8fSGustavo F. Padovan struct srej_list *l, *tmp; 380688843ab0SAndrei Emeltchenko u32 control; 38070a708f8fSGustavo F. Padovan 380839d5a3eeSGustavo F. Padovan list_for_each_entry_safe(l, tmp, &chan->srej_l, list) { 38090a708f8fSGustavo F. Padovan if (l->tx_seq == tx_seq) { 38100a708f8fSGustavo F. Padovan list_del(&l->list); 38110a708f8fSGustavo F. Padovan kfree(l); 38120a708f8fSGustavo F. Padovan return; 38130a708f8fSGustavo F. Padovan } 3814ab784b73SAndrei Emeltchenko control = __set_ctrl_super(chan, L2CAP_SUPER_SREJ); 38150b209faeSAndrei Emeltchenko control |= __set_reqseq(chan, l->tx_seq); 3816525cd185SGustavo F. Padovan l2cap_send_sframe(chan, control); 38170a708f8fSGustavo F. Padovan list_del(&l->list); 381839d5a3eeSGustavo F. Padovan list_add_tail(&l->list, &chan->srej_l); 38190a708f8fSGustavo F. Padovan } 38200a708f8fSGustavo F. Padovan } 38210a708f8fSGustavo F. Padovan 3822aef89f21SSzymon Janc static int l2cap_send_srejframe(struct l2cap_chan *chan, u16 tx_seq) 38230a708f8fSGustavo F. Padovan { 38240a708f8fSGustavo F. Padovan struct srej_list *new; 382588843ab0SAndrei Emeltchenko u32 control; 38260a708f8fSGustavo F. Padovan 382742e5c802SGustavo F. Padovan while (tx_seq != chan->expected_tx_seq) { 3828ab784b73SAndrei Emeltchenko control = __set_ctrl_super(chan, L2CAP_SUPER_SREJ); 38290b209faeSAndrei Emeltchenko control |= __set_reqseq(chan, chan->expected_tx_seq); 3830525cd185SGustavo F. Padovan l2cap_send_sframe(chan, control); 38310a708f8fSGustavo F. Padovan 38320a708f8fSGustavo F. Padovan new = kzalloc(sizeof(struct srej_list), GFP_ATOMIC); 3833aef89f21SSzymon Janc if (!new) 3834aef89f21SSzymon Janc return -ENOMEM; 3835aef89f21SSzymon Janc 383642e5c802SGustavo F. Padovan new->tx_seq = chan->expected_tx_seq; 3837836be934SAndrei Emeltchenko 3838836be934SAndrei Emeltchenko chan->expected_tx_seq = __next_seq(chan, chan->expected_tx_seq); 3839836be934SAndrei Emeltchenko 384039d5a3eeSGustavo F. Padovan list_add_tail(&new->list, &chan->srej_l); 38410a708f8fSGustavo F. Padovan } 3842836be934SAndrei Emeltchenko 3843836be934SAndrei Emeltchenko chan->expected_tx_seq = __next_seq(chan, chan->expected_tx_seq); 3844aef89f21SSzymon Janc 3845aef89f21SSzymon Janc return 0; 38460a708f8fSGustavo F. Padovan } 38470a708f8fSGustavo F. Padovan 384888843ab0SAndrei Emeltchenko static inline int l2cap_data_channel_iframe(struct l2cap_chan *chan, u32 rx_control, struct sk_buff *skb) 38490a708f8fSGustavo F. Padovan { 3850fb45de7dSAndrei Emeltchenko u16 tx_seq = __get_txseq(chan, rx_control); 38510b209faeSAndrei Emeltchenko u16 req_seq = __get_reqseq(chan, rx_control); 38527e0ef6eeSAndrei Emeltchenko u8 sar = __get_ctrl_sar(chan, rx_control); 38530a708f8fSGustavo F. Padovan int tx_seq_offset, expected_tx_seq_offset; 385447d1ec61SGustavo F. Padovan int num_to_ack = (chan->tx_win/6) + 1; 38550a708f8fSGustavo F. Padovan int err = 0; 38560a708f8fSGustavo F. Padovan 385788843ab0SAndrei Emeltchenko BT_DBG("chan %p len %d tx_seq %d rx_control 0x%8.8x", chan, skb->len, 3858525cd185SGustavo F. Padovan tx_seq, rx_control); 38590a708f8fSGustavo F. Padovan 386003f6715dSAndrei Emeltchenko if (__is_ctrl_final(chan, rx_control) && 3861e2ab4353SGustavo F. Padovan test_bit(CONN_WAIT_F, &chan->conn_state)) { 38621a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 38636a026610SGustavo F. Padovan if (chan->unacked_frames > 0) 38641a09bcb9SGustavo F. Padovan __set_retrans_timer(chan); 3865e2ab4353SGustavo F. Padovan clear_bit(CONN_WAIT_F, &chan->conn_state); 38660a708f8fSGustavo F. Padovan } 38670a708f8fSGustavo F. Padovan 386842e5c802SGustavo F. Padovan chan->expected_ack_seq = req_seq; 386942e5c802SGustavo F. Padovan l2cap_drop_acked_frames(chan); 38700a708f8fSGustavo F. Padovan 3871836be934SAndrei Emeltchenko tx_seq_offset = __seq_offset(chan, tx_seq, chan->buffer_seq); 38720a708f8fSGustavo F. Padovan 38730a708f8fSGustavo F. Padovan /* invalid tx_seq */ 387447d1ec61SGustavo F. Padovan if (tx_seq_offset >= chan->tx_win) { 38758c1d787bSGustavo F. Padovan l2cap_send_disconn_req(chan->conn, chan, ECONNRESET); 38760a708f8fSGustavo F. Padovan goto drop; 38770a708f8fSGustavo F. Padovan } 38780a708f8fSGustavo F. Padovan 387977f918bcSSzymon Janc if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 388077f918bcSSzymon Janc if (!test_bit(CONN_RNR_SENT, &chan->conn_state)) 388177f918bcSSzymon Janc l2cap_send_ack(chan); 38820a708f8fSGustavo F. Padovan goto drop; 388377f918bcSSzymon Janc } 38840a708f8fSGustavo F. Padovan 388502f1b641SMat Martineau if (tx_seq == chan->expected_tx_seq) 388602f1b641SMat Martineau goto expected; 388702f1b641SMat Martineau 3888e2ab4353SGustavo F. Padovan if (test_bit(CONN_SREJ_SENT, &chan->conn_state)) { 38890a708f8fSGustavo F. Padovan struct srej_list *first; 38900a708f8fSGustavo F. Padovan 389139d5a3eeSGustavo F. Padovan first = list_first_entry(&chan->srej_l, 38920a708f8fSGustavo F. Padovan struct srej_list, list); 38930a708f8fSGustavo F. Padovan if (tx_seq == first->tx_seq) { 389442e5c802SGustavo F. Padovan l2cap_add_to_srej_queue(chan, skb, tx_seq, sar); 3895525cd185SGustavo F. Padovan l2cap_check_srej_gap(chan, tx_seq); 38960a708f8fSGustavo F. Padovan 38970a708f8fSGustavo F. Padovan list_del(&first->list); 38980a708f8fSGustavo F. Padovan kfree(first); 38990a708f8fSGustavo F. Padovan 390039d5a3eeSGustavo F. Padovan if (list_empty(&chan->srej_l)) { 390142e5c802SGustavo F. Padovan chan->buffer_seq = chan->buffer_seq_srej; 3902e2ab4353SGustavo F. Padovan clear_bit(CONN_SREJ_SENT, &chan->conn_state); 3903525cd185SGustavo F. Padovan l2cap_send_ack(chan); 390449208c9cSGustavo F. Padovan BT_DBG("chan %p, Exit SREJ_SENT", chan); 39050a708f8fSGustavo F. Padovan } 39060a708f8fSGustavo F. Padovan } else { 39070a708f8fSGustavo F. Padovan struct srej_list *l; 39080a708f8fSGustavo F. Padovan 39090a708f8fSGustavo F. Padovan /* duplicated tx_seq */ 391042e5c802SGustavo F. Padovan if (l2cap_add_to_srej_queue(chan, skb, tx_seq, sar) < 0) 39110a708f8fSGustavo F. Padovan goto drop; 39120a708f8fSGustavo F. Padovan 391339d5a3eeSGustavo F. Padovan list_for_each_entry(l, &chan->srej_l, list) { 39140a708f8fSGustavo F. Padovan if (l->tx_seq == tx_seq) { 3915525cd185SGustavo F. Padovan l2cap_resend_srejframe(chan, tx_seq); 39160a708f8fSGustavo F. Padovan return 0; 39170a708f8fSGustavo F. Padovan } 39180a708f8fSGustavo F. Padovan } 3919aef89f21SSzymon Janc 3920aef89f21SSzymon Janc err = l2cap_send_srejframe(chan, tx_seq); 3921aef89f21SSzymon Janc if (err < 0) { 3922aef89f21SSzymon Janc l2cap_send_disconn_req(chan->conn, chan, -err); 3923aef89f21SSzymon Janc return err; 3924aef89f21SSzymon Janc } 39250a708f8fSGustavo F. Padovan } 39260a708f8fSGustavo F. Padovan } else { 3927836be934SAndrei Emeltchenko expected_tx_seq_offset = __seq_offset(chan, 3928836be934SAndrei Emeltchenko chan->expected_tx_seq, chan->buffer_seq); 39290a708f8fSGustavo F. Padovan 39300a708f8fSGustavo F. Padovan /* duplicated tx_seq */ 39310a708f8fSGustavo F. Padovan if (tx_seq_offset < expected_tx_seq_offset) 39320a708f8fSGustavo F. Padovan goto drop; 39330a708f8fSGustavo F. Padovan 3934e2ab4353SGustavo F. Padovan set_bit(CONN_SREJ_SENT, &chan->conn_state); 39350a708f8fSGustavo F. Padovan 393649208c9cSGustavo F. Padovan BT_DBG("chan %p, Enter SREJ", chan); 39370a708f8fSGustavo F. Padovan 393839d5a3eeSGustavo F. Padovan INIT_LIST_HEAD(&chan->srej_l); 393942e5c802SGustavo F. Padovan chan->buffer_seq_srej = chan->buffer_seq; 39400a708f8fSGustavo F. Padovan 3941f1c6775bSGustavo F. Padovan __skb_queue_head_init(&chan->srej_q); 394242e5c802SGustavo F. Padovan l2cap_add_to_srej_queue(chan, skb, tx_seq, sar); 39430a708f8fSGustavo F. Padovan 39440ef3ef0fSSzymon Janc /* Set P-bit only if there are some I-frames to ack. */ 39450ef3ef0fSSzymon Janc if (__clear_ack_timer(chan)) 3946e2ab4353SGustavo F. Padovan set_bit(CONN_SEND_PBIT, &chan->conn_state); 39470a708f8fSGustavo F. Padovan 3948aef89f21SSzymon Janc err = l2cap_send_srejframe(chan, tx_seq); 3949aef89f21SSzymon Janc if (err < 0) { 3950aef89f21SSzymon Janc l2cap_send_disconn_req(chan->conn, chan, -err); 3951aef89f21SSzymon Janc return err; 3952aef89f21SSzymon Janc } 39530a708f8fSGustavo F. Padovan } 39540a708f8fSGustavo F. Padovan return 0; 39550a708f8fSGustavo F. Padovan 39560a708f8fSGustavo F. Padovan expected: 3957836be934SAndrei Emeltchenko chan->expected_tx_seq = __next_seq(chan, chan->expected_tx_seq); 39580a708f8fSGustavo F. Padovan 3959e2ab4353SGustavo F. Padovan if (test_bit(CONN_SREJ_SENT, &chan->conn_state)) { 39600a708f8fSGustavo F. Padovan bt_cb(skb)->tx_seq = tx_seq; 39610a708f8fSGustavo F. Padovan bt_cb(skb)->sar = sar; 3962f1c6775bSGustavo F. Padovan __skb_queue_tail(&chan->srej_q, skb); 39630a708f8fSGustavo F. Padovan return 0; 39640a708f8fSGustavo F. Padovan } 39650a708f8fSGustavo F. Padovan 396684084a31SMat Martineau err = l2cap_reassemble_sdu(chan, skb, rx_control); 3967836be934SAndrei Emeltchenko chan->buffer_seq = __next_seq(chan, chan->buffer_seq); 3968836be934SAndrei Emeltchenko 3969e328140fSMat Martineau if (err < 0) { 3970e328140fSMat Martineau l2cap_send_disconn_req(chan->conn, chan, ECONNRESET); 3971e328140fSMat Martineau return err; 3972e328140fSMat Martineau } 39730a708f8fSGustavo F. Padovan 397403f6715dSAndrei Emeltchenko if (__is_ctrl_final(chan, rx_control)) { 3975e2ab4353SGustavo F. Padovan if (!test_and_clear_bit(CONN_REJ_ACT, &chan->conn_state)) 3976525cd185SGustavo F. Padovan l2cap_retransmit_frames(chan); 39770a708f8fSGustavo F. Padovan } 39780a708f8fSGustavo F. Padovan 39790a708f8fSGustavo F. Padovan 39806a026610SGustavo F. Padovan chan->num_acked = (chan->num_acked + 1) % num_to_ack; 39816a026610SGustavo F. Padovan if (chan->num_acked == num_to_ack - 1) 3982525cd185SGustavo F. Padovan l2cap_send_ack(chan); 39834d611e4dSGustavo F. Padovan else 39844d611e4dSGustavo F. Padovan __set_ack_timer(chan); 39850a708f8fSGustavo F. Padovan 39860a708f8fSGustavo F. Padovan return 0; 39870a708f8fSGustavo F. Padovan 39880a708f8fSGustavo F. Padovan drop: 39890a708f8fSGustavo F. Padovan kfree_skb(skb); 39900a708f8fSGustavo F. Padovan return 0; 39910a708f8fSGustavo F. Padovan } 39920a708f8fSGustavo F. Padovan 399388843ab0SAndrei Emeltchenko static inline void l2cap_data_channel_rrframe(struct l2cap_chan *chan, u32 rx_control) 39940a708f8fSGustavo F. Padovan { 399588843ab0SAndrei Emeltchenko BT_DBG("chan %p, req_seq %d ctrl 0x%8.8x", chan, 39960b209faeSAndrei Emeltchenko __get_reqseq(chan, rx_control), rx_control); 39970a708f8fSGustavo F. Padovan 39980b209faeSAndrei Emeltchenko chan->expected_ack_seq = __get_reqseq(chan, rx_control); 399942e5c802SGustavo F. Padovan l2cap_drop_acked_frames(chan); 40000a708f8fSGustavo F. Padovan 4001e3781735SAndrei Emeltchenko if (__is_ctrl_poll(chan, rx_control)) { 4002e2ab4353SGustavo F. Padovan set_bit(CONN_SEND_FBIT, &chan->conn_state); 4003e2ab4353SGustavo F. Padovan if (test_bit(CONN_SREJ_SENT, &chan->conn_state)) { 4004e2ab4353SGustavo F. Padovan if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state) && 40056a026610SGustavo F. Padovan (chan->unacked_frames > 0)) 40061a09bcb9SGustavo F. Padovan __set_retrans_timer(chan); 40070a708f8fSGustavo F. Padovan 4008e2ab4353SGustavo F. Padovan clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 4009525cd185SGustavo F. Padovan l2cap_send_srejtail(chan); 40100a708f8fSGustavo F. Padovan } else { 4011525cd185SGustavo F. Padovan l2cap_send_i_or_rr_or_rnr(chan); 40120a708f8fSGustavo F. Padovan } 40130a708f8fSGustavo F. Padovan 401403f6715dSAndrei Emeltchenko } else if (__is_ctrl_final(chan, rx_control)) { 4015e2ab4353SGustavo F. Padovan clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 40160a708f8fSGustavo F. Padovan 4017e2ab4353SGustavo F. Padovan if (!test_and_clear_bit(CONN_REJ_ACT, &chan->conn_state)) 4018525cd185SGustavo F. Padovan l2cap_retransmit_frames(chan); 40190a708f8fSGustavo F. Padovan 40200a708f8fSGustavo F. Padovan } else { 4021e2ab4353SGustavo F. Padovan if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state) && 40226a026610SGustavo F. Padovan (chan->unacked_frames > 0)) 40231a09bcb9SGustavo F. Padovan __set_retrans_timer(chan); 40240a708f8fSGustavo F. Padovan 4025e2ab4353SGustavo F. Padovan clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 4026e2ab4353SGustavo F. Padovan if (test_bit(CONN_SREJ_SENT, &chan->conn_state)) 4027525cd185SGustavo F. Padovan l2cap_send_ack(chan); 40280a708f8fSGustavo F. Padovan else 4029525cd185SGustavo F. Padovan l2cap_ertm_send(chan); 40300a708f8fSGustavo F. Padovan } 40310a708f8fSGustavo F. Padovan } 40320a708f8fSGustavo F. Padovan 403388843ab0SAndrei Emeltchenko static inline void l2cap_data_channel_rejframe(struct l2cap_chan *chan, u32 rx_control) 40340a708f8fSGustavo F. Padovan { 40350b209faeSAndrei Emeltchenko u16 tx_seq = __get_reqseq(chan, rx_control); 40360a708f8fSGustavo F. Padovan 403788843ab0SAndrei Emeltchenko BT_DBG("chan %p, req_seq %d ctrl 0x%8.8x", chan, tx_seq, rx_control); 40380a708f8fSGustavo F. Padovan 4039e2ab4353SGustavo F. Padovan clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 40400a708f8fSGustavo F. Padovan 404142e5c802SGustavo F. Padovan chan->expected_ack_seq = tx_seq; 404242e5c802SGustavo F. Padovan l2cap_drop_acked_frames(chan); 40430a708f8fSGustavo F. Padovan 404403f6715dSAndrei Emeltchenko if (__is_ctrl_final(chan, rx_control)) { 4045e2ab4353SGustavo F. Padovan if (!test_and_clear_bit(CONN_REJ_ACT, &chan->conn_state)) 4046525cd185SGustavo F. Padovan l2cap_retransmit_frames(chan); 40470a708f8fSGustavo F. Padovan } else { 4048525cd185SGustavo F. Padovan l2cap_retransmit_frames(chan); 40490a708f8fSGustavo F. Padovan 4050e2ab4353SGustavo F. Padovan if (test_bit(CONN_WAIT_F, &chan->conn_state)) 4051e2ab4353SGustavo F. Padovan set_bit(CONN_REJ_ACT, &chan->conn_state); 40520a708f8fSGustavo F. Padovan } 40530a708f8fSGustavo F. Padovan } 405488843ab0SAndrei Emeltchenko static inline void l2cap_data_channel_srejframe(struct l2cap_chan *chan, u32 rx_control) 40550a708f8fSGustavo F. Padovan { 40560b209faeSAndrei Emeltchenko u16 tx_seq = __get_reqseq(chan, rx_control); 40570a708f8fSGustavo F. Padovan 405888843ab0SAndrei Emeltchenko BT_DBG("chan %p, req_seq %d ctrl 0x%8.8x", chan, tx_seq, rx_control); 40590a708f8fSGustavo F. Padovan 4060e2ab4353SGustavo F. Padovan clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 40610a708f8fSGustavo F. Padovan 4062e3781735SAndrei Emeltchenko if (__is_ctrl_poll(chan, rx_control)) { 406342e5c802SGustavo F. Padovan chan->expected_ack_seq = tx_seq; 406442e5c802SGustavo F. Padovan l2cap_drop_acked_frames(chan); 40650a708f8fSGustavo F. Padovan 4066e2ab4353SGustavo F. Padovan set_bit(CONN_SEND_FBIT, &chan->conn_state); 4067525cd185SGustavo F. Padovan l2cap_retransmit_one_frame(chan, tx_seq); 40680a708f8fSGustavo F. Padovan 4069525cd185SGustavo F. Padovan l2cap_ertm_send(chan); 40700a708f8fSGustavo F. Padovan 4071e2ab4353SGustavo F. Padovan if (test_bit(CONN_WAIT_F, &chan->conn_state)) { 40726a026610SGustavo F. Padovan chan->srej_save_reqseq = tx_seq; 4073e2ab4353SGustavo F. Padovan set_bit(CONN_SREJ_ACT, &chan->conn_state); 40740a708f8fSGustavo F. Padovan } 407503f6715dSAndrei Emeltchenko } else if (__is_ctrl_final(chan, rx_control)) { 4076e2ab4353SGustavo F. Padovan if (test_bit(CONN_SREJ_ACT, &chan->conn_state) && 40776a026610SGustavo F. Padovan chan->srej_save_reqseq == tx_seq) 4078e2ab4353SGustavo F. Padovan clear_bit(CONN_SREJ_ACT, &chan->conn_state); 40790a708f8fSGustavo F. Padovan else 4080525cd185SGustavo F. Padovan l2cap_retransmit_one_frame(chan, tx_seq); 40810a708f8fSGustavo F. Padovan } else { 4082525cd185SGustavo F. Padovan l2cap_retransmit_one_frame(chan, tx_seq); 4083e2ab4353SGustavo F. Padovan if (test_bit(CONN_WAIT_F, &chan->conn_state)) { 40846a026610SGustavo F. Padovan chan->srej_save_reqseq = tx_seq; 4085e2ab4353SGustavo F. Padovan set_bit(CONN_SREJ_ACT, &chan->conn_state); 40860a708f8fSGustavo F. Padovan } 40870a708f8fSGustavo F. Padovan } 40880a708f8fSGustavo F. Padovan } 40890a708f8fSGustavo F. Padovan 409088843ab0SAndrei Emeltchenko static inline void l2cap_data_channel_rnrframe(struct l2cap_chan *chan, u32 rx_control) 40910a708f8fSGustavo F. Padovan { 40920b209faeSAndrei Emeltchenko u16 tx_seq = __get_reqseq(chan, rx_control); 40930a708f8fSGustavo F. Padovan 409488843ab0SAndrei Emeltchenko BT_DBG("chan %p, req_seq %d ctrl 0x%8.8x", chan, tx_seq, rx_control); 40950a708f8fSGustavo F. Padovan 4096e2ab4353SGustavo F. Padovan set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 409742e5c802SGustavo F. Padovan chan->expected_ack_seq = tx_seq; 409842e5c802SGustavo F. Padovan l2cap_drop_acked_frames(chan); 40990a708f8fSGustavo F. Padovan 4100e3781735SAndrei Emeltchenko if (__is_ctrl_poll(chan, rx_control)) 4101e2ab4353SGustavo F. Padovan set_bit(CONN_SEND_FBIT, &chan->conn_state); 41020a708f8fSGustavo F. Padovan 4103e2ab4353SGustavo F. Padovan if (!test_bit(CONN_SREJ_SENT, &chan->conn_state)) { 41041a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 4105e3781735SAndrei Emeltchenko if (__is_ctrl_poll(chan, rx_control)) 4106525cd185SGustavo F. Padovan l2cap_send_rr_or_rnr(chan, L2CAP_CTRL_FINAL); 41070a708f8fSGustavo F. Padovan return; 41080a708f8fSGustavo F. Padovan } 41090a708f8fSGustavo F. Padovan 4110e3781735SAndrei Emeltchenko if (__is_ctrl_poll(chan, rx_control)) { 4111525cd185SGustavo F. Padovan l2cap_send_srejtail(chan); 4112ab784b73SAndrei Emeltchenko } else { 4113ab784b73SAndrei Emeltchenko rx_control = __set_ctrl_super(chan, L2CAP_SUPER_RR); 4114ab784b73SAndrei Emeltchenko l2cap_send_sframe(chan, rx_control); 4115ab784b73SAndrei Emeltchenko } 41160a708f8fSGustavo F. Padovan } 41170a708f8fSGustavo F. Padovan 411888843ab0SAndrei Emeltchenko static inline int l2cap_data_channel_sframe(struct l2cap_chan *chan, u32 rx_control, struct sk_buff *skb) 41190a708f8fSGustavo F. Padovan { 412088843ab0SAndrei Emeltchenko BT_DBG("chan %p rx_control 0x%8.8x len %d", chan, rx_control, skb->len); 41210a708f8fSGustavo F. Padovan 412203f6715dSAndrei Emeltchenko if (__is_ctrl_final(chan, rx_control) && 4123e2ab4353SGustavo F. Padovan test_bit(CONN_WAIT_F, &chan->conn_state)) { 41241a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 41256a026610SGustavo F. Padovan if (chan->unacked_frames > 0) 41261a09bcb9SGustavo F. Padovan __set_retrans_timer(chan); 4127e2ab4353SGustavo F. Padovan clear_bit(CONN_WAIT_F, &chan->conn_state); 41280a708f8fSGustavo F. Padovan } 41290a708f8fSGustavo F. Padovan 4130ab784b73SAndrei Emeltchenko switch (__get_ctrl_super(chan, rx_control)) { 4131ab784b73SAndrei Emeltchenko case L2CAP_SUPER_RR: 4132525cd185SGustavo F. Padovan l2cap_data_channel_rrframe(chan, rx_control); 41330a708f8fSGustavo F. Padovan break; 41340a708f8fSGustavo F. Padovan 4135ab784b73SAndrei Emeltchenko case L2CAP_SUPER_REJ: 4136525cd185SGustavo F. Padovan l2cap_data_channel_rejframe(chan, rx_control); 41370a708f8fSGustavo F. Padovan break; 41380a708f8fSGustavo F. Padovan 4139ab784b73SAndrei Emeltchenko case L2CAP_SUPER_SREJ: 4140525cd185SGustavo F. Padovan l2cap_data_channel_srejframe(chan, rx_control); 41410a708f8fSGustavo F. Padovan break; 41420a708f8fSGustavo F. Padovan 4143ab784b73SAndrei Emeltchenko case L2CAP_SUPER_RNR: 4144525cd185SGustavo F. Padovan l2cap_data_channel_rnrframe(chan, rx_control); 41450a708f8fSGustavo F. Padovan break; 41460a708f8fSGustavo F. Padovan } 41470a708f8fSGustavo F. Padovan 41480a708f8fSGustavo F. Padovan kfree_skb(skb); 41490a708f8fSGustavo F. Padovan return 0; 41500a708f8fSGustavo F. Padovan } 41510a708f8fSGustavo F. Padovan 4152cad8f1d0SSzymon Janc static int l2cap_ertm_data_rcv(struct l2cap_chan *chan, struct sk_buff *skb) 41530a708f8fSGustavo F. Padovan { 415488843ab0SAndrei Emeltchenko u32 control; 41550b209faeSAndrei Emeltchenko u16 req_seq; 41560a708f8fSGustavo F. Padovan int len, next_tx_seq_offset, req_seq_offset; 41570a708f8fSGustavo F. Padovan 415888843ab0SAndrei Emeltchenko control = __get_control(chan, skb->data); 415988843ab0SAndrei Emeltchenko skb_pull(skb, __ctrl_size(chan)); 41600a708f8fSGustavo F. Padovan len = skb->len; 41610a708f8fSGustavo F. Padovan 41620a708f8fSGustavo F. Padovan /* 41630a708f8fSGustavo F. Padovan * We can just drop the corrupted I-frame here. 41640a708f8fSGustavo F. Padovan * Receiver will miss it and start proper recovery 41650a708f8fSGustavo F. Padovan * procedures and ask retransmission. 41660a708f8fSGustavo F. Padovan */ 416747d1ec61SGustavo F. Padovan if (l2cap_check_fcs(chan, skb)) 41680a708f8fSGustavo F. Padovan goto drop; 41690a708f8fSGustavo F. Padovan 4170793c2f1cSAndrei Emeltchenko if (__is_sar_start(chan, control) && !__is_sframe(chan, control)) 417103a51213SAndrei Emeltchenko len -= L2CAP_SDULEN_SIZE; 41720a708f8fSGustavo F. Padovan 417347d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 417403a51213SAndrei Emeltchenko len -= L2CAP_FCS_SIZE; 41750a708f8fSGustavo F. Padovan 417647d1ec61SGustavo F. Padovan if (len > chan->mps) { 41778c1d787bSGustavo F. Padovan l2cap_send_disconn_req(chan->conn, chan, ECONNRESET); 41780a708f8fSGustavo F. Padovan goto drop; 41790a708f8fSGustavo F. Padovan } 41800a708f8fSGustavo F. Padovan 41810b209faeSAndrei Emeltchenko req_seq = __get_reqseq(chan, control); 41820a708f8fSGustavo F. Padovan 4183836be934SAndrei Emeltchenko req_seq_offset = __seq_offset(chan, req_seq, chan->expected_ack_seq); 4184836be934SAndrei Emeltchenko 4185836be934SAndrei Emeltchenko next_tx_seq_offset = __seq_offset(chan, chan->next_tx_seq, 4186836be934SAndrei Emeltchenko chan->expected_ack_seq); 41870a708f8fSGustavo F. Padovan 41880a708f8fSGustavo F. Padovan /* check for invalid req-seq */ 41890a708f8fSGustavo F. Padovan if (req_seq_offset > next_tx_seq_offset) { 41908c1d787bSGustavo F. Padovan l2cap_send_disconn_req(chan->conn, chan, ECONNRESET); 41910a708f8fSGustavo F. Padovan goto drop; 41920a708f8fSGustavo F. Padovan } 41930a708f8fSGustavo F. Padovan 4194793c2f1cSAndrei Emeltchenko if (!__is_sframe(chan, control)) { 41950a708f8fSGustavo F. Padovan if (len < 0) { 41968c1d787bSGustavo F. Padovan l2cap_send_disconn_req(chan->conn, chan, ECONNRESET); 41970a708f8fSGustavo F. Padovan goto drop; 41980a708f8fSGustavo F. Padovan } 41990a708f8fSGustavo F. Padovan 4200525cd185SGustavo F. Padovan l2cap_data_channel_iframe(chan, control, skb); 42010a708f8fSGustavo F. Padovan } else { 42020a708f8fSGustavo F. Padovan if (len != 0) { 42030a708f8fSGustavo F. Padovan BT_ERR("%d", len); 42048c1d787bSGustavo F. Padovan l2cap_send_disconn_req(chan->conn, chan, ECONNRESET); 42050a708f8fSGustavo F. Padovan goto drop; 42060a708f8fSGustavo F. Padovan } 42070a708f8fSGustavo F. Padovan 4208525cd185SGustavo F. Padovan l2cap_data_channel_sframe(chan, control, skb); 42090a708f8fSGustavo F. Padovan } 42100a708f8fSGustavo F. Padovan 42110a708f8fSGustavo F. Padovan return 0; 42120a708f8fSGustavo F. Padovan 42130a708f8fSGustavo F. Padovan drop: 42140a708f8fSGustavo F. Padovan kfree_skb(skb); 42150a708f8fSGustavo F. Padovan return 0; 42160a708f8fSGustavo F. Padovan } 42170a708f8fSGustavo F. Padovan 42180a708f8fSGustavo F. Padovan static inline int l2cap_data_channel(struct l2cap_conn *conn, u16 cid, struct sk_buff *skb) 42190a708f8fSGustavo F. Padovan { 422048454079SGustavo F. Padovan struct l2cap_chan *chan; 4221bf734843SDavid S. Miller struct sock *sk = NULL; 422288843ab0SAndrei Emeltchenko u32 control; 4223fb45de7dSAndrei Emeltchenko u16 tx_seq; 42240a708f8fSGustavo F. Padovan int len; 42250a708f8fSGustavo F. Padovan 4226baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, cid); 422748454079SGustavo F. Padovan if (!chan) { 42280a708f8fSGustavo F. Padovan BT_DBG("unknown cid 0x%4.4x", cid); 42290a708f8fSGustavo F. Padovan goto drop; 42300a708f8fSGustavo F. Padovan } 42310a708f8fSGustavo F. Padovan 423248454079SGustavo F. Padovan sk = chan->sk; 42330a708f8fSGustavo F. Padovan 423449208c9cSGustavo F. Padovan BT_DBG("chan %p, len %d", chan, skb->len); 42350a708f8fSGustavo F. Padovan 423689bc500eSGustavo F. Padovan if (chan->state != BT_CONNECTED) 42370a708f8fSGustavo F. Padovan goto drop; 42380a708f8fSGustavo F. Padovan 42390c1bc5c6SGustavo F. Padovan switch (chan->mode) { 42400a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 42410a708f8fSGustavo F. Padovan /* If socket recv buffers overflows we drop data here 42420a708f8fSGustavo F. Padovan * which is *bad* because L2CAP has to be reliable. 42430a708f8fSGustavo F. Padovan * But we don't have any other choice. L2CAP doesn't 42440a708f8fSGustavo F. Padovan * provide flow control mechanism. */ 42450a708f8fSGustavo F. Padovan 42460c1bc5c6SGustavo F. Padovan if (chan->imtu < skb->len) 42470a708f8fSGustavo F. Padovan goto drop; 42480a708f8fSGustavo F. Padovan 424923070494SGustavo F. Padovan if (!chan->ops->recv(chan->data, skb)) 42500a708f8fSGustavo F. Padovan goto done; 42510a708f8fSGustavo F. Padovan break; 42520a708f8fSGustavo F. Padovan 42530a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 42545ef8cb9eSAndrei Emeltchenko l2cap_ertm_data_rcv(chan, skb); 42550a708f8fSGustavo F. Padovan 42560a708f8fSGustavo F. Padovan goto done; 42570a708f8fSGustavo F. Padovan 42580a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 425988843ab0SAndrei Emeltchenko control = __get_control(chan, skb->data); 426088843ab0SAndrei Emeltchenko skb_pull(skb, __ctrl_size(chan)); 42610a708f8fSGustavo F. Padovan len = skb->len; 42620a708f8fSGustavo F. Padovan 426347d1ec61SGustavo F. Padovan if (l2cap_check_fcs(chan, skb)) 42640a708f8fSGustavo F. Padovan goto drop; 42650a708f8fSGustavo F. Padovan 42667e0ef6eeSAndrei Emeltchenko if (__is_sar_start(chan, control)) 426703a51213SAndrei Emeltchenko len -= L2CAP_SDULEN_SIZE; 42680a708f8fSGustavo F. Padovan 426947d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 427003a51213SAndrei Emeltchenko len -= L2CAP_FCS_SIZE; 42710a708f8fSGustavo F. Padovan 4272793c2f1cSAndrei Emeltchenko if (len > chan->mps || len < 0 || __is_sframe(chan, control)) 42730a708f8fSGustavo F. Padovan goto drop; 42740a708f8fSGustavo F. Padovan 4275fb45de7dSAndrei Emeltchenko tx_seq = __get_txseq(chan, control); 42760a708f8fSGustavo F. Padovan 427784084a31SMat Martineau if (chan->expected_tx_seq != tx_seq) { 427884084a31SMat Martineau /* Frame(s) missing - must discard partial SDU */ 427984084a31SMat Martineau kfree_skb(chan->sdu); 428084084a31SMat Martineau chan->sdu = NULL; 428184084a31SMat Martineau chan->sdu_last_frag = NULL; 428284084a31SMat Martineau chan->sdu_len = 0; 428384084a31SMat Martineau 428484084a31SMat Martineau /* TODO: Notify userland of missing data */ 428584084a31SMat Martineau } 428684084a31SMat Martineau 4287836be934SAndrei Emeltchenko chan->expected_tx_seq = __next_seq(chan, tx_seq); 42880a708f8fSGustavo F. Padovan 428984084a31SMat Martineau if (l2cap_reassemble_sdu(chan, skb, control) == -EMSGSIZE) 429084084a31SMat Martineau l2cap_send_disconn_req(chan->conn, chan, ECONNRESET); 42910a708f8fSGustavo F. Padovan 42920a708f8fSGustavo F. Padovan goto done; 42930a708f8fSGustavo F. Padovan 42940a708f8fSGustavo F. Padovan default: 42950c1bc5c6SGustavo F. Padovan BT_DBG("chan %p: bad mode 0x%2.2x", chan, chan->mode); 42960a708f8fSGustavo F. Padovan break; 42970a708f8fSGustavo F. Padovan } 42980a708f8fSGustavo F. Padovan 42990a708f8fSGustavo F. Padovan drop: 43000a708f8fSGustavo F. Padovan kfree_skb(skb); 43010a708f8fSGustavo F. Padovan 43020a708f8fSGustavo F. Padovan done: 43030a708f8fSGustavo F. Padovan if (sk) 4304aa2ac881SGustavo F. Padovan release_sock(sk); 43050a708f8fSGustavo F. Padovan 43060a708f8fSGustavo F. Padovan return 0; 43070a708f8fSGustavo F. Padovan } 43080a708f8fSGustavo F. Padovan 43090a708f8fSGustavo F. Padovan static inline int l2cap_conless_channel(struct l2cap_conn *conn, __le16 psm, struct sk_buff *skb) 43100a708f8fSGustavo F. Padovan { 43116dcae1eaSDavid S. Miller struct sock *sk = NULL; 431223691d75SGustavo F. Padovan struct l2cap_chan *chan; 43130a708f8fSGustavo F. Padovan 431423691d75SGustavo F. Padovan chan = l2cap_global_chan_by_psm(0, psm, conn->src); 431523691d75SGustavo F. Padovan if (!chan) 43160a708f8fSGustavo F. Padovan goto drop; 43170a708f8fSGustavo F. Padovan 431823691d75SGustavo F. Padovan sk = chan->sk; 431923691d75SGustavo F. Padovan 4320aa2ac881SGustavo F. Padovan lock_sock(sk); 43210a708f8fSGustavo F. Padovan 43220a708f8fSGustavo F. Padovan BT_DBG("sk %p, len %d", sk, skb->len); 43230a708f8fSGustavo F. Padovan 432489bc500eSGustavo F. Padovan if (chan->state != BT_BOUND && chan->state != BT_CONNECTED) 43250a708f8fSGustavo F. Padovan goto drop; 43260a708f8fSGustavo F. Padovan 4327e13e21dcSVinicius Costa Gomes if (chan->imtu < skb->len) 43280a708f8fSGustavo F. Padovan goto drop; 43290a708f8fSGustavo F. Padovan 433023070494SGustavo F. Padovan if (!chan->ops->recv(chan->data, skb)) 43310a708f8fSGustavo F. Padovan goto done; 43320a708f8fSGustavo F. Padovan 43330a708f8fSGustavo F. Padovan drop: 43340a708f8fSGustavo F. Padovan kfree_skb(skb); 43350a708f8fSGustavo F. Padovan 43360a708f8fSGustavo F. Padovan done: 43370a708f8fSGustavo F. Padovan if (sk) 4338aa2ac881SGustavo F. Padovan release_sock(sk); 43390a708f8fSGustavo F. Padovan return 0; 43400a708f8fSGustavo F. Padovan } 43410a708f8fSGustavo F. Padovan 43429f69bda6SGustavo F. Padovan static inline int l2cap_att_channel(struct l2cap_conn *conn, __le16 cid, struct sk_buff *skb) 43439f69bda6SGustavo F. Padovan { 43446dcae1eaSDavid S. Miller struct sock *sk = NULL; 434523691d75SGustavo F. Padovan struct l2cap_chan *chan; 43469f69bda6SGustavo F. Padovan 434723691d75SGustavo F. Padovan chan = l2cap_global_chan_by_scid(0, cid, conn->src); 434823691d75SGustavo F. Padovan if (!chan) 43499f69bda6SGustavo F. Padovan goto drop; 43509f69bda6SGustavo F. Padovan 435123691d75SGustavo F. Padovan sk = chan->sk; 435223691d75SGustavo F. Padovan 4353aa2ac881SGustavo F. Padovan lock_sock(sk); 43549f69bda6SGustavo F. Padovan 43559f69bda6SGustavo F. Padovan BT_DBG("sk %p, len %d", sk, skb->len); 43569f69bda6SGustavo F. Padovan 435789bc500eSGustavo F. Padovan if (chan->state != BT_BOUND && chan->state != BT_CONNECTED) 43589f69bda6SGustavo F. Padovan goto drop; 43599f69bda6SGustavo F. Padovan 4360e13e21dcSVinicius Costa Gomes if (chan->imtu < skb->len) 43619f69bda6SGustavo F. Padovan goto drop; 43629f69bda6SGustavo F. Padovan 436323070494SGustavo F. Padovan if (!chan->ops->recv(chan->data, skb)) 43649f69bda6SGustavo F. Padovan goto done; 43659f69bda6SGustavo F. Padovan 43669f69bda6SGustavo F. Padovan drop: 43679f69bda6SGustavo F. Padovan kfree_skb(skb); 43689f69bda6SGustavo F. Padovan 43699f69bda6SGustavo F. Padovan done: 43709f69bda6SGustavo F. Padovan if (sk) 4371aa2ac881SGustavo F. Padovan release_sock(sk); 43729f69bda6SGustavo F. Padovan return 0; 43739f69bda6SGustavo F. Padovan } 43749f69bda6SGustavo F. Padovan 43750a708f8fSGustavo F. Padovan static void l2cap_recv_frame(struct l2cap_conn *conn, struct sk_buff *skb) 43760a708f8fSGustavo F. Padovan { 43770a708f8fSGustavo F. Padovan struct l2cap_hdr *lh = (void *) skb->data; 43780a708f8fSGustavo F. Padovan u16 cid, len; 43790a708f8fSGustavo F. Padovan __le16 psm; 43800a708f8fSGustavo F. Padovan 43810a708f8fSGustavo F. Padovan skb_pull(skb, L2CAP_HDR_SIZE); 43820a708f8fSGustavo F. Padovan cid = __le16_to_cpu(lh->cid); 43830a708f8fSGustavo F. Padovan len = __le16_to_cpu(lh->len); 43840a708f8fSGustavo F. Padovan 43850a708f8fSGustavo F. Padovan if (len != skb->len) { 43860a708f8fSGustavo F. Padovan kfree_skb(skb); 43870a708f8fSGustavo F. Padovan return; 43880a708f8fSGustavo F. Padovan } 43890a708f8fSGustavo F. Padovan 43900a708f8fSGustavo F. Padovan BT_DBG("len %d, cid 0x%4.4x", len, cid); 43910a708f8fSGustavo F. Padovan 43920a708f8fSGustavo F. Padovan switch (cid) { 43933300d9a9SClaudio Takahasi case L2CAP_CID_LE_SIGNALING: 43940a708f8fSGustavo F. Padovan case L2CAP_CID_SIGNALING: 43950a708f8fSGustavo F. Padovan l2cap_sig_channel(conn, skb); 43960a708f8fSGustavo F. Padovan break; 43970a708f8fSGustavo F. Padovan 43980a708f8fSGustavo F. Padovan case L2CAP_CID_CONN_LESS: 43990a708f8fSGustavo F. Padovan psm = get_unaligned_le16(skb->data); 44000a708f8fSGustavo F. Padovan skb_pull(skb, 2); 44010a708f8fSGustavo F. Padovan l2cap_conless_channel(conn, psm, skb); 44020a708f8fSGustavo F. Padovan break; 44030a708f8fSGustavo F. Padovan 44049f69bda6SGustavo F. Padovan case L2CAP_CID_LE_DATA: 44059f69bda6SGustavo F. Padovan l2cap_att_channel(conn, cid, skb); 44069f69bda6SGustavo F. Padovan break; 44079f69bda6SGustavo F. Padovan 4408b501d6a1SAnderson Briglia case L2CAP_CID_SMP: 4409b501d6a1SAnderson Briglia if (smp_sig_channel(conn, skb)) 4410b501d6a1SAnderson Briglia l2cap_conn_del(conn->hcon, EACCES); 4411b501d6a1SAnderson Briglia break; 4412b501d6a1SAnderson Briglia 44130a708f8fSGustavo F. Padovan default: 44140a708f8fSGustavo F. Padovan l2cap_data_channel(conn, cid, skb); 44150a708f8fSGustavo F. Padovan break; 44160a708f8fSGustavo F. Padovan } 44170a708f8fSGustavo F. Padovan } 44180a708f8fSGustavo F. Padovan 44190a708f8fSGustavo F. Padovan /* ---- L2CAP interface with lower layer (HCI) ---- */ 44200a708f8fSGustavo F. Padovan 4421686ebf28SUlisses Furquim int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr) 44220a708f8fSGustavo F. Padovan { 44230a708f8fSGustavo F. Padovan int exact = 0, lm1 = 0, lm2 = 0; 442423691d75SGustavo F. Padovan struct l2cap_chan *c; 44250a708f8fSGustavo F. Padovan 44260a708f8fSGustavo F. Padovan BT_DBG("hdev %s, bdaddr %s", hdev->name, batostr(bdaddr)); 44270a708f8fSGustavo F. Padovan 44280a708f8fSGustavo F. Padovan /* Find listening sockets and check their link_mode */ 442923691d75SGustavo F. Padovan read_lock(&chan_list_lock); 443023691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 443123691d75SGustavo F. Padovan struct sock *sk = c->sk; 44324343478fSGustavo F. Padovan 443389bc500eSGustavo F. Padovan if (c->state != BT_LISTEN) 44340a708f8fSGustavo F. Padovan continue; 44350a708f8fSGustavo F. Padovan 44360a708f8fSGustavo F. Padovan if (!bacmp(&bt_sk(sk)->src, &hdev->bdaddr)) { 44370a708f8fSGustavo F. Padovan lm1 |= HCI_LM_ACCEPT; 443843bd0f32SAndrei Emeltchenko if (test_bit(FLAG_ROLE_SWITCH, &c->flags)) 44390a708f8fSGustavo F. Padovan lm1 |= HCI_LM_MASTER; 44400a708f8fSGustavo F. Padovan exact++; 44410a708f8fSGustavo F. Padovan } else if (!bacmp(&bt_sk(sk)->src, BDADDR_ANY)) { 44420a708f8fSGustavo F. Padovan lm2 |= HCI_LM_ACCEPT; 444343bd0f32SAndrei Emeltchenko if (test_bit(FLAG_ROLE_SWITCH, &c->flags)) 44440a708f8fSGustavo F. Padovan lm2 |= HCI_LM_MASTER; 44450a708f8fSGustavo F. Padovan } 44460a708f8fSGustavo F. Padovan } 444723691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 44480a708f8fSGustavo F. Padovan 44490a708f8fSGustavo F. Padovan return exact ? lm1 : lm2; 44500a708f8fSGustavo F. Padovan } 44510a708f8fSGustavo F. Padovan 4452686ebf28SUlisses Furquim int l2cap_connect_cfm(struct hci_conn *hcon, u8 status) 44530a708f8fSGustavo F. Padovan { 44540a708f8fSGustavo F. Padovan struct l2cap_conn *conn; 44550a708f8fSGustavo F. Padovan 44560a708f8fSGustavo F. Padovan BT_DBG("hcon %p bdaddr %s status %d", hcon, batostr(&hcon->dst), status); 44570a708f8fSGustavo F. Padovan 44580a708f8fSGustavo F. Padovan if (!status) { 44590a708f8fSGustavo F. Padovan conn = l2cap_conn_add(hcon, status); 44600a708f8fSGustavo F. Padovan if (conn) 44610a708f8fSGustavo F. Padovan l2cap_conn_ready(conn); 44620a708f8fSGustavo F. Padovan } else 4463e175072fSJoe Perches l2cap_conn_del(hcon, bt_to_errno(status)); 44640a708f8fSGustavo F. Padovan 44650a708f8fSGustavo F. Padovan return 0; 44660a708f8fSGustavo F. Padovan } 44670a708f8fSGustavo F. Padovan 4468686ebf28SUlisses Furquim int l2cap_disconn_ind(struct hci_conn *hcon) 44690a708f8fSGustavo F. Padovan { 44700a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 44710a708f8fSGustavo F. Padovan 44720a708f8fSGustavo F. Padovan BT_DBG("hcon %p", hcon); 44730a708f8fSGustavo F. Padovan 4474686ebf28SUlisses Furquim if (!conn) 44759f5a0d7bSAndrei Emeltchenko return HCI_ERROR_REMOTE_USER_TERM; 44760a708f8fSGustavo F. Padovan return conn->disc_reason; 44770a708f8fSGustavo F. Padovan } 44780a708f8fSGustavo F. Padovan 4479686ebf28SUlisses Furquim int l2cap_disconn_cfm(struct hci_conn *hcon, u8 reason) 44800a708f8fSGustavo F. Padovan { 44810a708f8fSGustavo F. Padovan BT_DBG("hcon %p reason %d", hcon, reason); 44820a708f8fSGustavo F. Padovan 4483e175072fSJoe Perches l2cap_conn_del(hcon, bt_to_errno(reason)); 44840a708f8fSGustavo F. Padovan return 0; 44850a708f8fSGustavo F. Padovan } 44860a708f8fSGustavo F. Padovan 44874343478fSGustavo F. Padovan static inline void l2cap_check_encryption(struct l2cap_chan *chan, u8 encrypt) 44880a708f8fSGustavo F. Padovan { 4489715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) 44900a708f8fSGustavo F. Padovan return; 44910a708f8fSGustavo F. Padovan 44920a708f8fSGustavo F. Padovan if (encrypt == 0x00) { 44934343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_MEDIUM) { 4494c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 4495b83ddfe2SAndrzej Kaczmarek __set_chan_timer(chan, 4496b83ddfe2SAndrzej Kaczmarek msecs_to_jiffies(L2CAP_ENC_TIMEOUT)); 44974343478fSGustavo F. Padovan } else if (chan->sec_level == BT_SECURITY_HIGH) 44980f852724SGustavo F. Padovan l2cap_chan_close(chan, ECONNREFUSED); 44990a708f8fSGustavo F. Padovan } else { 45004343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_MEDIUM) 4501c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 45020a708f8fSGustavo F. Padovan } 45030a708f8fSGustavo F. Padovan } 45040a708f8fSGustavo F. Padovan 4505686ebf28SUlisses Furquim int l2cap_security_cfm(struct hci_conn *hcon, u8 status, u8 encrypt) 45060a708f8fSGustavo F. Padovan { 45070a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 450848454079SGustavo F. Padovan struct l2cap_chan *chan; 45090a708f8fSGustavo F. Padovan 45100a708f8fSGustavo F. Padovan if (!conn) 45110a708f8fSGustavo F. Padovan return 0; 45120a708f8fSGustavo F. Padovan 45130a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 45140a708f8fSGustavo F. Padovan 4515160dc6acSVinicius Costa Gomes if (hcon->type == LE_LINK) { 4516160dc6acSVinicius Costa Gomes smp_distribute_keys(conn, 0); 451717cd3f37SUlisses Furquim cancel_delayed_work(&conn->security_timer); 4518160dc6acSVinicius Costa Gomes } 4519160dc6acSVinicius Costa Gomes 45203d57dc68SGustavo F. Padovan rcu_read_lock(); 45210a708f8fSGustavo F. Padovan 45223d57dc68SGustavo F. Padovan list_for_each_entry_rcu(chan, &conn->chan_l, list) { 452348454079SGustavo F. Padovan struct sock *sk = chan->sk; 4524baa7e1faSGustavo F. Padovan 45250a708f8fSGustavo F. Padovan bh_lock_sock(sk); 45260a708f8fSGustavo F. Padovan 4527f1cb9af5SVinicius Costa Gomes BT_DBG("chan->scid %d", chan->scid); 4528f1cb9af5SVinicius Costa Gomes 4529f1cb9af5SVinicius Costa Gomes if (chan->scid == L2CAP_CID_LE_DATA) { 4530f1cb9af5SVinicius Costa Gomes if (!status && encrypt) { 4531f1cb9af5SVinicius Costa Gomes chan->sec_level = hcon->sec_level; 4532cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 4533f1cb9af5SVinicius Costa Gomes } 4534f1cb9af5SVinicius Costa Gomes 4535f1cb9af5SVinicius Costa Gomes bh_unlock_sock(sk); 4536f1cb9af5SVinicius Costa Gomes continue; 4537f1cb9af5SVinicius Costa Gomes } 4538f1cb9af5SVinicius Costa Gomes 4539c1360a1cSGustavo F. Padovan if (test_bit(CONF_CONNECT_PEND, &chan->conf_state)) { 45400a708f8fSGustavo F. Padovan bh_unlock_sock(sk); 45410a708f8fSGustavo F. Padovan continue; 45420a708f8fSGustavo F. Padovan } 45430a708f8fSGustavo F. Padovan 454489bc500eSGustavo F. Padovan if (!status && (chan->state == BT_CONNECTED || 454589bc500eSGustavo F. Padovan chan->state == BT_CONFIG)) { 45464343478fSGustavo F. Padovan l2cap_check_encryption(chan, encrypt); 45470a708f8fSGustavo F. Padovan bh_unlock_sock(sk); 45480a708f8fSGustavo F. Padovan continue; 45490a708f8fSGustavo F. Padovan } 45500a708f8fSGustavo F. Padovan 455189bc500eSGustavo F. Padovan if (chan->state == BT_CONNECT) { 45520a708f8fSGustavo F. Padovan if (!status) { 45530a708f8fSGustavo F. Padovan struct l2cap_conn_req req; 4554fe4128e0SGustavo F. Padovan req.scid = cpu_to_le16(chan->scid); 4555fe4128e0SGustavo F. Padovan req.psm = chan->psm; 45560a708f8fSGustavo F. Padovan 4557fc7f8a7eSGustavo F. Padovan chan->ident = l2cap_get_ident(conn); 4558c1360a1cSGustavo F. Padovan set_bit(CONF_CONNECT_PEND, &chan->conf_state); 45590a708f8fSGustavo F. Padovan 4560fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, 45610a708f8fSGustavo F. Padovan L2CAP_CONN_REQ, sizeof(req), &req); 45620a708f8fSGustavo F. Padovan } else { 4563c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 4564b83ddfe2SAndrzej Kaczmarek __set_chan_timer(chan, 4565b83ddfe2SAndrzej Kaczmarek msecs_to_jiffies(L2CAP_DISC_TIMEOUT)); 45660a708f8fSGustavo F. Padovan } 456789bc500eSGustavo F. Padovan } else if (chan->state == BT_CONNECT2) { 45680a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 4569df3c3931SJohan Hedberg __u16 res, stat; 45700a708f8fSGustavo F. Padovan 45710a708f8fSGustavo F. Padovan if (!status) { 4572df3c3931SJohan Hedberg if (bt_sk(sk)->defer_setup) { 4573df3c3931SJohan Hedberg struct sock *parent = bt_sk(sk)->parent; 4574df3c3931SJohan Hedberg res = L2CAP_CR_PEND; 4575df3c3931SJohan Hedberg stat = L2CAP_CS_AUTHOR_PEND; 457605e9a2f6SIlia Kolomisnky if (parent) 4577df3c3931SJohan Hedberg parent->sk_data_ready(parent, 0); 4578df3c3931SJohan Hedberg } else { 457989bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONFIG); 4580df3c3931SJohan Hedberg res = L2CAP_CR_SUCCESS; 4581df3c3931SJohan Hedberg stat = L2CAP_CS_NO_INFO; 4582df3c3931SJohan Hedberg } 45830a708f8fSGustavo F. Padovan } else { 458489bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_DISCONN); 4585b83ddfe2SAndrzej Kaczmarek __set_chan_timer(chan, 4586b83ddfe2SAndrzej Kaczmarek msecs_to_jiffies(L2CAP_DISC_TIMEOUT)); 4587df3c3931SJohan Hedberg res = L2CAP_CR_SEC_BLOCK; 4588df3c3931SJohan Hedberg stat = L2CAP_CS_NO_INFO; 45890a708f8fSGustavo F. Padovan } 45900a708f8fSGustavo F. Padovan 4591fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 4592fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 4593df3c3931SJohan Hedberg rsp.result = cpu_to_le16(res); 4594df3c3931SJohan Hedberg rsp.status = cpu_to_le16(stat); 4595fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 4596fc7f8a7eSGustavo F. Padovan sizeof(rsp), &rsp); 45970a708f8fSGustavo F. Padovan } 45980a708f8fSGustavo F. Padovan 45990a708f8fSGustavo F. Padovan bh_unlock_sock(sk); 46000a708f8fSGustavo F. Padovan } 46010a708f8fSGustavo F. Padovan 46023d57dc68SGustavo F. Padovan rcu_read_unlock(); 46030a708f8fSGustavo F. Padovan 46040a708f8fSGustavo F. Padovan return 0; 46050a708f8fSGustavo F. Padovan } 46060a708f8fSGustavo F. Padovan 4607686ebf28SUlisses Furquim int l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags) 46080a708f8fSGustavo F. Padovan { 46090a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 46100a708f8fSGustavo F. Padovan 46110a708f8fSGustavo F. Padovan if (!conn) 46120a708f8fSGustavo F. Padovan conn = l2cap_conn_add(hcon, 0); 46130a708f8fSGustavo F. Padovan 46140a708f8fSGustavo F. Padovan if (!conn) 46150a708f8fSGustavo F. Padovan goto drop; 46160a708f8fSGustavo F. Padovan 46170a708f8fSGustavo F. Padovan BT_DBG("conn %p len %d flags 0x%x", conn, skb->len, flags); 46180a708f8fSGustavo F. Padovan 46190a708f8fSGustavo F. Padovan if (!(flags & ACL_CONT)) { 46200a708f8fSGustavo F. Padovan struct l2cap_hdr *hdr; 462148454079SGustavo F. Padovan struct l2cap_chan *chan; 46220a708f8fSGustavo F. Padovan u16 cid; 46230a708f8fSGustavo F. Padovan int len; 46240a708f8fSGustavo F. Padovan 46250a708f8fSGustavo F. Padovan if (conn->rx_len) { 46260a708f8fSGustavo F. Padovan BT_ERR("Unexpected start frame (len %d)", skb->len); 46270a708f8fSGustavo F. Padovan kfree_skb(conn->rx_skb); 46280a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 46290a708f8fSGustavo F. Padovan conn->rx_len = 0; 46300a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 46310a708f8fSGustavo F. Padovan } 46320a708f8fSGustavo F. Padovan 46330a708f8fSGustavo F. Padovan /* Start fragment always begin with Basic L2CAP header */ 46340a708f8fSGustavo F. Padovan if (skb->len < L2CAP_HDR_SIZE) { 46350a708f8fSGustavo F. Padovan BT_ERR("Frame is too short (len %d)", skb->len); 46360a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 46370a708f8fSGustavo F. Padovan goto drop; 46380a708f8fSGustavo F. Padovan } 46390a708f8fSGustavo F. Padovan 46400a708f8fSGustavo F. Padovan hdr = (struct l2cap_hdr *) skb->data; 46410a708f8fSGustavo F. Padovan len = __le16_to_cpu(hdr->len) + L2CAP_HDR_SIZE; 46420a708f8fSGustavo F. Padovan cid = __le16_to_cpu(hdr->cid); 46430a708f8fSGustavo F. Padovan 46440a708f8fSGustavo F. Padovan if (len == skb->len) { 46450a708f8fSGustavo F. Padovan /* Complete frame received */ 46460a708f8fSGustavo F. Padovan l2cap_recv_frame(conn, skb); 46470a708f8fSGustavo F. Padovan return 0; 46480a708f8fSGustavo F. Padovan } 46490a708f8fSGustavo F. Padovan 46500a708f8fSGustavo F. Padovan BT_DBG("Start: total len %d, frag len %d", len, skb->len); 46510a708f8fSGustavo F. Padovan 46520a708f8fSGustavo F. Padovan if (skb->len > len) { 46530a708f8fSGustavo F. Padovan BT_ERR("Frame is too long (len %d, expected len %d)", 46540a708f8fSGustavo F. Padovan skb->len, len); 46550a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 46560a708f8fSGustavo F. Padovan goto drop; 46570a708f8fSGustavo F. Padovan } 46580a708f8fSGustavo F. Padovan 4659baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, cid); 46600a708f8fSGustavo F. Padovan 466148454079SGustavo F. Padovan if (chan && chan->sk) { 466248454079SGustavo F. Padovan struct sock *sk = chan->sk; 466348454079SGustavo F. Padovan 46640c1bc5c6SGustavo F. Padovan if (chan->imtu < len - L2CAP_HDR_SIZE) { 466548454079SGustavo F. Padovan BT_ERR("Frame exceeding recv MTU (len %d, " 466648454079SGustavo F. Padovan "MTU %d)", len, 46670c1bc5c6SGustavo F. Padovan chan->imtu); 4668aa2ac881SGustavo F. Padovan release_sock(sk); 46690a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 46700a708f8fSGustavo F. Padovan goto drop; 46710a708f8fSGustavo F. Padovan } 4672aa2ac881SGustavo F. Padovan release_sock(sk); 467348454079SGustavo F. Padovan } 46740a708f8fSGustavo F. Padovan 46750a708f8fSGustavo F. Padovan /* Allocate skb for the complete frame (with header) */ 46760a708f8fSGustavo F. Padovan conn->rx_skb = bt_skb_alloc(len, GFP_ATOMIC); 46770a708f8fSGustavo F. Padovan if (!conn->rx_skb) 46780a708f8fSGustavo F. Padovan goto drop; 46790a708f8fSGustavo F. Padovan 46800a708f8fSGustavo F. Padovan skb_copy_from_linear_data(skb, skb_put(conn->rx_skb, skb->len), 46810a708f8fSGustavo F. Padovan skb->len); 46820a708f8fSGustavo F. Padovan conn->rx_len = len - skb->len; 46830a708f8fSGustavo F. Padovan } else { 46840a708f8fSGustavo F. Padovan BT_DBG("Cont: frag len %d (expecting %d)", skb->len, conn->rx_len); 46850a708f8fSGustavo F. Padovan 46860a708f8fSGustavo F. Padovan if (!conn->rx_len) { 46870a708f8fSGustavo F. Padovan BT_ERR("Unexpected continuation frame (len %d)", skb->len); 46880a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 46890a708f8fSGustavo F. Padovan goto drop; 46900a708f8fSGustavo F. Padovan } 46910a708f8fSGustavo F. Padovan 46920a708f8fSGustavo F. Padovan if (skb->len > conn->rx_len) { 46930a708f8fSGustavo F. Padovan BT_ERR("Fragment is too long (len %d, expected %d)", 46940a708f8fSGustavo F. Padovan skb->len, conn->rx_len); 46950a708f8fSGustavo F. Padovan kfree_skb(conn->rx_skb); 46960a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 46970a708f8fSGustavo F. Padovan conn->rx_len = 0; 46980a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 46990a708f8fSGustavo F. Padovan goto drop; 47000a708f8fSGustavo F. Padovan } 47010a708f8fSGustavo F. Padovan 47020a708f8fSGustavo F. Padovan skb_copy_from_linear_data(skb, skb_put(conn->rx_skb, skb->len), 47030a708f8fSGustavo F. Padovan skb->len); 47040a708f8fSGustavo F. Padovan conn->rx_len -= skb->len; 47050a708f8fSGustavo F. Padovan 47060a708f8fSGustavo F. Padovan if (!conn->rx_len) { 47070a708f8fSGustavo F. Padovan /* Complete frame received */ 47080a708f8fSGustavo F. Padovan l2cap_recv_frame(conn, conn->rx_skb); 47090a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 47100a708f8fSGustavo F. Padovan } 47110a708f8fSGustavo F. Padovan } 47120a708f8fSGustavo F. Padovan 47130a708f8fSGustavo F. Padovan drop: 47140a708f8fSGustavo F. Padovan kfree_skb(skb); 47150a708f8fSGustavo F. Padovan return 0; 47160a708f8fSGustavo F. Padovan } 47170a708f8fSGustavo F. Padovan 47180a708f8fSGustavo F. Padovan static int l2cap_debugfs_show(struct seq_file *f, void *p) 47190a708f8fSGustavo F. Padovan { 472023691d75SGustavo F. Padovan struct l2cap_chan *c; 47210a708f8fSGustavo F. Padovan 4722333055f2SGustavo F. Padovan read_lock(&chan_list_lock); 47230a708f8fSGustavo F. Padovan 472423691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 472523691d75SGustavo F. Padovan struct sock *sk = c->sk; 47260a708f8fSGustavo F. Padovan 4727903d343eSGustavo F. Padovan seq_printf(f, "%s %s %d %d 0x%4.4x 0x%4.4x %d %d %d %d\n", 47280a708f8fSGustavo F. Padovan batostr(&bt_sk(sk)->src), 47290a708f8fSGustavo F. Padovan batostr(&bt_sk(sk)->dst), 473089bc500eSGustavo F. Padovan c->state, __le16_to_cpu(c->psm), 473123691d75SGustavo F. Padovan c->scid, c->dcid, c->imtu, c->omtu, 473223691d75SGustavo F. Padovan c->sec_level, c->mode); 47330a708f8fSGustavo F. Padovan } 47340a708f8fSGustavo F. Padovan 4735333055f2SGustavo F. Padovan read_unlock(&chan_list_lock); 47360a708f8fSGustavo F. Padovan 47370a708f8fSGustavo F. Padovan return 0; 47380a708f8fSGustavo F. Padovan } 47390a708f8fSGustavo F. Padovan 47400a708f8fSGustavo F. Padovan static int l2cap_debugfs_open(struct inode *inode, struct file *file) 47410a708f8fSGustavo F. Padovan { 47420a708f8fSGustavo F. Padovan return single_open(file, l2cap_debugfs_show, inode->i_private); 47430a708f8fSGustavo F. Padovan } 47440a708f8fSGustavo F. Padovan 47450a708f8fSGustavo F. Padovan static const struct file_operations l2cap_debugfs_fops = { 47460a708f8fSGustavo F. Padovan .open = l2cap_debugfs_open, 47470a708f8fSGustavo F. Padovan .read = seq_read, 47480a708f8fSGustavo F. Padovan .llseek = seq_lseek, 47490a708f8fSGustavo F. Padovan .release = single_release, 47500a708f8fSGustavo F. Padovan }; 47510a708f8fSGustavo F. Padovan 47520a708f8fSGustavo F. Padovan static struct dentry *l2cap_debugfs; 47530a708f8fSGustavo F. Padovan 475464274518SGustavo F. Padovan int __init l2cap_init(void) 47550a708f8fSGustavo F. Padovan { 47560a708f8fSGustavo F. Padovan int err; 47570a708f8fSGustavo F. Padovan 4758bb58f747SGustavo F. Padovan err = l2cap_init_sockets(); 47590a708f8fSGustavo F. Padovan if (err < 0) 47600a708f8fSGustavo F. Padovan return err; 47610a708f8fSGustavo F. Padovan 47620a708f8fSGustavo F. Padovan if (bt_debugfs) { 47630a708f8fSGustavo F. Padovan l2cap_debugfs = debugfs_create_file("l2cap", 0444, 47640a708f8fSGustavo F. Padovan bt_debugfs, NULL, &l2cap_debugfs_fops); 47650a708f8fSGustavo F. Padovan if (!l2cap_debugfs) 47660a708f8fSGustavo F. Padovan BT_ERR("Failed to create L2CAP debug file"); 47670a708f8fSGustavo F. Padovan } 47680a708f8fSGustavo F. Padovan 47690a708f8fSGustavo F. Padovan return 0; 47700a708f8fSGustavo F. Padovan } 47710a708f8fSGustavo F. Padovan 477264274518SGustavo F. Padovan void l2cap_exit(void) 47730a708f8fSGustavo F. Padovan { 47740a708f8fSGustavo F. Padovan debugfs_remove(l2cap_debugfs); 4775bb58f747SGustavo F. Padovan l2cap_cleanup_sockets(); 47760a708f8fSGustavo F. Padovan } 47770a708f8fSGustavo F. Padovan 47780a708f8fSGustavo F. Padovan module_param(disable_ertm, bool, 0644); 47790a708f8fSGustavo F. Padovan MODULE_PARM_DESC(disable_ertm, "Disable enhanced retransmission mode"); 4780